diff --git a/go/internal/forked/api/builtins/builtins.go b/go/internal/forked/api/builtins/builtins.go new file mode 100644 index 000000000..5f671260b --- /dev/null +++ b/go/internal/forked/api/builtins/builtins.go @@ -0,0 +1,51 @@ +// Copyright 2021 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +// Deprecated: Package api/builtins will not be available in API v1. +package builtins + +import ( + internal "sigs.k8s.io/kustomize/api/internal/builtins" +) + +type ( + AnnotationsTransformerPlugin = internal.AnnotationsTransformerPlugin + ConfigMapGeneratorPlugin = internal.ConfigMapGeneratorPlugin + HashTransformerPlugin = internal.HashTransformerPlugin + HelmChartInflationGeneratorPlugin = internal.HelmChartInflationGeneratorPlugin + IAMPolicyGeneratorPlugin = internal.IAMPolicyGeneratorPlugin + ImageTagTransformerPlugin = internal.ImageTagTransformerPlugin + LabelTransformerPlugin = internal.LabelTransformerPlugin + LegacyOrderTransformerPlugin = internal.LegacyOrderTransformerPlugin + NamespaceTransformerPlugin = internal.NamespaceTransformerPlugin + PatchJson6902TransformerPlugin = internal.PatchJson6902TransformerPlugin + PatchStrategicMergeTransformerPlugin = internal.PatchStrategicMergeTransformerPlugin + PatchTransformerPlugin = internal.PatchTransformerPlugin + PrefixTransformerPlugin = internal.PrefixTransformerPlugin + SuffixTransformerPlugin = internal.SuffixTransformerPlugin + ReplacementTransformerPlugin = internal.ReplacementTransformerPlugin + ReplicaCountTransformerPlugin = internal.ReplicaCountTransformerPlugin + SecretGeneratorPlugin = internal.SecretGeneratorPlugin + ValueAddTransformerPlugin = internal.ValueAddTransformerPlugin +) + +var ( + NewAnnotationsTransformerPlugin = internal.NewAnnotationsTransformerPlugin + NewConfigMapGeneratorPlugin = internal.NewConfigMapGeneratorPlugin + NewHashTransformerPlugin = internal.NewHashTransformerPlugin + NewHelmChartInflationGeneratorPlugin = internal.NewHelmChartInflationGeneratorPlugin + NewIAMPolicyGeneratorPlugin = internal.NewIAMPolicyGeneratorPlugin + NewImageTagTransformerPlugin = internal.NewImageTagTransformerPlugin + NewLabelTransformerPlugin = internal.NewLabelTransformerPlugin + NewLegacyOrderTransformerPlugin = internal.NewLegacyOrderTransformerPlugin + NewNamespaceTransformerPlugin = internal.NewNamespaceTransformerPlugin + NewPatchJson6902TransformerPlugin = internal.NewPatchJson6902TransformerPlugin + NewPatchStrategicMergeTransformerPlugin = internal.NewPatchStrategicMergeTransformerPlugin + NewPatchTransformerPlugin = internal.NewPatchTransformerPlugin + NewPrefixTransformerPlugin = internal.NewPrefixTransformerPlugin + NewSuffixTransformerPlugin = internal.NewSuffixTransformerPlugin + NewReplacementTransformerPlugin = internal.NewReplacementTransformerPlugin + NewReplicaCountTransformerPlugin = internal.NewReplicaCountTransformerPlugin + NewSecretGeneratorPlugin = internal.NewSecretGeneratorPlugin + NewValueAddTransformerPlugin = internal.NewValueAddTransformerPlugin +) diff --git a/go/internal/forked/api/filesys/filesys.go b/go/internal/forked/api/filesys/filesys.go new file mode 100644 index 000000000..54f56ad77 --- /dev/null +++ b/go/internal/forked/api/filesys/filesys.go @@ -0,0 +1,61 @@ +// Copyright 2021 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +// Package filesys provides a file system abstraction, +// a subset of that provided by golang.org/pkg/os, +// with an on-disk and in-memory representation. +// +// Deprecated: use github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/filesys instead. +package filesys + +import "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/filesys" + +const ( + // Separator is deprecated, use github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/filesys.Separator. + Separator = filesys.Separator + // SelfDir is deprecated, use github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/filesys.SelfDir. + SelfDir = filesys.SelfDir + // ParentDir is deprecated, use github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/filesys.ParentDir. + ParentDir = filesys.ParentDir +) + +type ( + // FileSystem is deprecated, use github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/filesys.FileSystem. + FileSystem = filesys.FileSystem + // FileSystemOrOnDisk is deprecated, use github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/filesys.FileSystemOrOnDisk. + FileSystemOrOnDisk = filesys.FileSystemOrOnDisk + // ConfirmedDir is deprecated, use github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/filesys.ConfirmedDir. + ConfirmedDir = filesys.ConfirmedDir +) + +// MakeEmptyDirInMemory is deprecated, use github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/filesys.MakeEmptyDirInMemory. +func MakeEmptyDirInMemory() FileSystem { return filesys.MakeEmptyDirInMemory() } + +// MakeFsInMemory is deprecated, use github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/filesys.MakeFsInMemory. +func MakeFsInMemory() FileSystem { return filesys.MakeFsInMemory() } + +// MakeFsOnDisk is deprecated, use github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/filesys.MakeFsOnDisk. +func MakeFsOnDisk() FileSystem { return filesys.MakeFsOnDisk() } + +// NewTmpConfirmedDir is deprecated, use github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/filesys.NewTmpConfirmedDir. +func NewTmpConfirmedDir() (filesys.ConfirmedDir, error) { return filesys.NewTmpConfirmedDir() } + +// RootedPath is deprecated, use github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/filesys.RootedPath. +func RootedPath(elem ...string) string { return filesys.RootedPath(elem...) } + +// StripTrailingSeps is deprecated, use github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/filesys.StripTrailingSeps. +func StripTrailingSeps(s string) string { return filesys.StripTrailingSeps(s) } + +// StripLeadingSeps is deprecated, use github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/filesys.StripLeadingSeps. +func StripLeadingSeps(s string) string { return filesys.StripLeadingSeps(s) } + +// PathSplit is deprecated, use github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/filesys.PathSplit. +func PathSplit(incoming string) []string { return filesys.PathSplit(incoming) } + +// PathJoin is deprecated, use github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/filesys.PathJoin. +func PathJoin(incoming []string) string { return filesys.PathJoin(incoming) } + +// InsertPathPart is deprecated, use github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/filesys.InsertPathPart. +func InsertPathPart(path string, pos int, part string) string { + return filesys.InsertPathPart(path, pos, part) +} diff --git a/go/internal/forked/api/filesys/filesys.go b/go/internal/forked/api/filesys/filesys.go new file mode 100644 index 000000000..ef28dd400 --- /dev/null +++ b/go/internal/forked/api/filesys/filesys.go @@ -0,0 +1,61 @@ +// Copyright 2021 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +// Package filesys provides a file system abstraction, +// a subset of that provided by golang.org/pkg/os, +// with an on-disk and in-memory representation. +// +// Deprecated: use github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/filesys instead. +package filesys + +import "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/filesys" + +const ( + // Separator is deprecated, use github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/filesys.Separator. + Separator = filesys.Separator + // SelfDir is deprecated, use github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/filesys.SelfDir. + SelfDir = filesys.SelfDir + // ParentDir is deprecated, use github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/filesys.ParentDir. + ParentDir = filesys.ParentDir +) + +type ( + // FileSystem is deprecated, use github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/filesys.FileSystem. + FileSystem = filesys.FileSystem + // FileSystemOrOnDisk is deprecated, use github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/filesys.FileSystemOrOnDisk. + FileSystemOrOnDisk = filesys.FileSystemOrOnDisk + // ConfirmedDir is deprecated, use github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/filesys.ConfirmedDir. + ConfirmedDir = filesys.ConfirmedDir +) + +// MakeEmptyDirInMemory is deprecated, use github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/filesys.MakeEmptyDirInMemory. +func MakeEmptyDirInMemory() FileSystem { return filesys.MakeEmptyDirInMemory() } + +// MakeFsInMemory is deprecated, use github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/filesys.MakeFsInMemory. +func MakeFsInMemory() FileSystem { return filesys.MakeFsInMemory() } + +// MakeFsOnDisk is deprecated, use github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/filesys.MakeFsOnDisk. +func MakeFsOnDisk() FileSystem { return filesys.MakeFsOnDisk() } + +// NewTmpConfirmedDir is deprecated, use github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/filesys.NewTmpConfirmedDir. +func NewTmpConfirmedDir() (filesys.ConfirmedDir, error) { return filesys.NewTmpConfirmedDir() } + +// RootedPath is deprecated, use github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/filesys.RootedPath. +func RootedPath(elem ...string) string { return filesys.RootedPath(elem...) } + +// StripTrailingSeps is deprecated, use github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/filesys.StripTrailingSeps. +func StripTrailingSeps(s string) string { return filesys.StripTrailingSeps(s) } + +// StripLeadingSeps is deprecated, use github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/filesys.StripLeadingSeps. +func StripLeadingSeps(s string) string { return filesys.StripLeadingSeps(s) } + +// PathSplit is deprecated, use github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/filesys.PathSplit. +func PathSplit(incoming string) []string { return filesys.PathSplit(incoming) } + +// PathJoin is deprecated, use github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/filesys.PathJoin. +func PathJoin(incoming []string) string { return filesys.PathJoin(incoming) } + +// InsertPathPart is deprecated, use github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/filesys.InsertPathPart. +func InsertPathPart(path string, pos int, part string) string { + return filesys.InsertPathPart(path, pos, part) +} diff --git a/go/internal/forked/api/filters/annotations/annotations.go b/go/internal/forked/api/filters/annotations/annotations.go new file mode 100644 index 000000000..c8ce47931 --- /dev/null +++ b/go/internal/forked/api/filters/annotations/annotations.go @@ -0,0 +1,52 @@ +// Copyright 2020 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package annotations + +import ( + "sigs.k8s.io/kustomize/api/filters/filtersutil" + "sigs.k8s.io/kustomize/api/filters/fsslice" + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/kio" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" +) + +type annoMap map[string]string + +type Filter struct { + // Annotations is the set of annotations to apply to the inputs + Annotations annoMap `yaml:"annotations,omitempty"` + + // FsSlice contains the FieldSpecs to locate the namespace field + FsSlice types.FsSlice + + trackableSetter filtersutil.TrackableSetter +} + +var _ kio.Filter = Filter{} +var _ kio.TrackableFilter = &Filter{} + +// WithMutationTracker registers a callback which will be invoked each time a field is mutated +func (f *Filter) WithMutationTracker(callback func(key, value, tag string, node *yaml.RNode)) { + f.trackableSetter.WithMutationTracker(callback) +} + +func (f Filter) Filter(nodes []*yaml.RNode) ([]*yaml.RNode, error) { + keys := yaml.SortedMapKeys(f.Annotations) + _, err := kio.FilterAll(yaml.FilterFunc( + func(node *yaml.RNode) (*yaml.RNode, error) { + for _, k := range keys { + if err := node.PipeE(fsslice.Filter{ + FsSlice: f.FsSlice, + SetValue: f.trackableSetter.SetEntry( + k, f.Annotations[k], yaml.NodeTagString), + CreateKind: yaml.MappingNode, // Annotations are MappingNodes. + CreateTag: yaml.NodeTagMap, + }); err != nil { + return nil, err + } + } + return node, nil + })).Filter(nodes) + return nodes, err +} diff --git a/go/internal/forked/api/filters/annotations/annotations.go b/go/internal/forked/api/filters/annotations/annotations.go new file mode 100644 index 000000000..e068a5294 --- /dev/null +++ b/go/internal/forked/api/filters/annotations/annotations.go @@ -0,0 +1,52 @@ +// Copyright 2020 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package annotations + +import ( + "sigs.k8s.io/kustomize/api/filters/filtersutil" + "sigs.k8s.io/kustomize/api/filters/fsslice" + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/kio" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/yaml" +) + +type annoMap map[string]string + +type Filter struct { + // Annotations is the set of annotations to apply to the inputs + Annotations annoMap `yaml:"annotations,omitempty"` + + // FsSlice contains the FieldSpecs to locate the namespace field + FsSlice types.FsSlice + + trackableSetter filtersutil.TrackableSetter +} + +var _ kio.Filter = Filter{} +var _ kio.TrackableFilter = &Filter{} + +// WithMutationTracker registers a callback which will be invoked each time a field is mutated +func (f *Filter) WithMutationTracker(callback func(key, value, tag string, node *yaml.RNode)) { + f.trackableSetter.WithMutationTracker(callback) +} + +func (f Filter) Filter(nodes []*yaml.RNode) ([]*yaml.RNode, error) { + keys := yaml.SortedMapKeys(f.Annotations) + _, err := kio.FilterAll(yaml.FilterFunc( + func(node *yaml.RNode) (*yaml.RNode, error) { + for _, k := range keys { + if err := node.PipeE(fsslice.Filter{ + FsSlice: f.FsSlice, + SetValue: f.trackableSetter.SetEntry( + k, f.Annotations[k], yaml.NodeTagString), + CreateKind: yaml.MappingNode, // Annotations are MappingNodes. + CreateTag: yaml.NodeTagMap, + }); err != nil { + return nil, err + } + } + return node, nil + })).Filter(nodes) + return nodes, err +} diff --git a/go/internal/forked/api/filters/annotations/annotations_test.go b/go/internal/forked/api/filters/annotations/annotations_test.go new file mode 100644 index 000000000..67aac06ba --- /dev/null +++ b/go/internal/forked/api/filters/annotations/annotations_test.go @@ -0,0 +1,316 @@ +// Copyright 2020 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package annotations + +import ( + "strings" + "testing" + + "github.com/stretchr/testify/assert" + "sigs.k8s.io/kustomize/api/internal/plugins/builtinconfig" + filtertest_test "sigs.k8s.io/kustomize/api/testutils/filtertest" + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" +) + +var annosFs = builtinconfig.MakeDefaultConfig().CommonAnnotations + +type setEntryArg struct { + Key string + Value string + Tag string + NodePath []string +} + +var setEntryArgs []setEntryArg + +func setEntryCallbackStub(key, value, tag string, node *yaml.RNode) { + setEntryArgs = append(setEntryArgs, setEntryArg{ + Key: key, + Value: value, + Tag: tag, + NodePath: node.FieldPath(), + }) +} + +func TestAnnotations_Filter(t *testing.T) { + testCases := map[string]struct { + input string + expectedOutput string + filter Filter + fsslice types.FsSlice + setEntryCallback func(key, value, tag string, node *yaml.RNode) + expectedSetEntryArgs []setEntryArg + }{ + "add": { + input: ` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: instance + annotations: + hero: batman + fiend: riddler +`, + expectedOutput: ` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: instance + annotations: + hero: batman + fiend: riddler + auto: ford + bean: cannellini + clown: emmett kelley + dragon: smaug +`, + filter: Filter{Annotations: annoMap{ + "clown": "emmett kelley", + "auto": "ford", + "dragon": "smaug", + "bean": "cannellini", + }}, + }, + "update": { + input: ` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: instance + annotations: + hero: batman + fiend: riddler +`, + expectedOutput: ` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: instance + annotations: + hero: superman + fiend: luthor + bean: cannellini + clown: emmett kelley +`, + filter: Filter{Annotations: annoMap{ + "clown": "emmett kelley", + "hero": "superman", + "fiend": "luthor", + "bean": "cannellini", + }}, + }, + "data-fieldspecs": { + input: ` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: instance +--- +apiVersion: example.com/v1 +kind: Bar +metadata: + name: instance +`, + expectedOutput: ` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: instance + annotations: + sleater: kinney +a: + b: + sleater: kinney +--- +apiVersion: example.com/v1 +kind: Bar +metadata: + name: instance + annotations: + sleater: kinney +a: + b: + sleater: kinney +`, + filter: Filter{Annotations: annoMap{ + "sleater": "kinney", + }}, + fsslice: []types.FieldSpec{ + { + Path: "a/b", + CreateIfNotPresent: true, + }, + }, + }, + + "number": { + input: ` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: instance + annotations: + hero: batman + fiend: riddler +`, + expectedOutput: ` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: instance + annotations: + hero: batman + fiend: riddler + 2: ford + clown: "1" +`, + filter: Filter{Annotations: annoMap{ + "clown": "1", + "2": "ford", + }}, + }, + + // test quoting of values which are not considered strings in yaml 1.1 + "yaml_1_1_compatibility": { + input: ` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: instance + annotations: + hero: batman + fiend: riddler +`, + expectedOutput: ` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: instance + annotations: + hero: batman + fiend: riddler + a: "y" + b: y1 + c: "yes" + d: yes1 + e: "true" + f: true1 +`, + filter: Filter{Annotations: annoMap{ + "a": "y", + "b": "y1", + "c": "yes", + "d": "yes1", + "e": "true", + "f": "true1", + }}, + }, + + // test quoting of values which are not considered strings in yaml 1.1 + "null_annotations": { + input: ` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: instance + annotations: null +`, + expectedOutput: ` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: instance + annotations: + a: a1 + b: b1 +`, + filter: Filter{Annotations: annoMap{ + "a": "a1", + "b": "b1", + }}, + }, + + // test usage of SetEntryCallback + "set_entry_callback": { + input: ` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: instance +`, + expectedOutput: ` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: instance + annotations: + a: a1 + b: b1 +spec: + template: + metadata: + annotations: + a: a1 + b: b1 +`, + filter: Filter{ + Annotations: annoMap{ + "a": "a1", + "b": "b1", + }, + }, + setEntryCallback: setEntryCallbackStub, + fsslice: []types.FieldSpec{ + { + Path: "spec/template/metadata/annotations", + CreateIfNotPresent: true, + }, + }, + expectedSetEntryArgs: []setEntryArg{ + { + Key: "a", + Value: "a1", + Tag: "!!str", + NodePath: []string{"metadata", "annotations"}, + }, + { + Key: "a", + Value: "a1", + Tag: "!!str", + NodePath: []string{"spec", "template", "metadata", "annotations"}, + }, + { + Key: "b", + Value: "b1", + Tag: "!!str", + NodePath: []string{"metadata", "annotations"}, + }, + { + Key: "b", + Value: "b1", + Tag: "!!str", + NodePath: []string{"spec", "template", "metadata", "annotations"}, + }, + }, + }, + } + + for tn, tc := range testCases { + setEntryArgs = nil + t.Run(tn, func(t *testing.T) { + filter := tc.filter + filter.WithMutationTracker(tc.setEntryCallback) + filter.FsSlice = append(annosFs, tc.fsslice...) + if !assert.Equal(t, + strings.TrimSpace(tc.expectedOutput), + strings.TrimSpace(filtertest_test.RunFilter(t, tc.input, filter))) { + t.FailNow() + } + if !assert.Equal(t, tc.expectedSetEntryArgs, setEntryArgs) { + t.FailNow() + } + }) + } +} diff --git a/go/internal/forked/api/filters/annotations/annotations_test.go b/go/internal/forked/api/filters/annotations/annotations_test.go new file mode 100644 index 000000000..166ad488a --- /dev/null +++ b/go/internal/forked/api/filters/annotations/annotations_test.go @@ -0,0 +1,316 @@ +// Copyright 2020 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package annotations + +import ( + "strings" + "testing" + + "github.com/stretchr/testify/assert" + "sigs.k8s.io/kustomize/api/internal/plugins/builtinconfig" + filtertest_test "sigs.k8s.io/kustomize/api/testutils/filtertest" + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/yaml" +) + +var annosFs = builtinconfig.MakeDefaultConfig().CommonAnnotations + +type setEntryArg struct { + Key string + Value string + Tag string + NodePath []string +} + +var setEntryArgs []setEntryArg + +func setEntryCallbackStub(key, value, tag string, node *yaml.RNode) { + setEntryArgs = append(setEntryArgs, setEntryArg{ + Key: key, + Value: value, + Tag: tag, + NodePath: node.FieldPath(), + }) +} + +func TestAnnotations_Filter(t *testing.T) { + testCases := map[string]struct { + input string + expectedOutput string + filter Filter + fsslice types.FsSlice + setEntryCallback func(key, value, tag string, node *yaml.RNode) + expectedSetEntryArgs []setEntryArg + }{ + "add": { + input: ` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: instance + annotations: + hero: batman + fiend: riddler +`, + expectedOutput: ` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: instance + annotations: + hero: batman + fiend: riddler + auto: ford + bean: cannellini + clown: emmett kelley + dragon: smaug +`, + filter: Filter{Annotations: annoMap{ + "clown": "emmett kelley", + "auto": "ford", + "dragon": "smaug", + "bean": "cannellini", + }}, + }, + "update": { + input: ` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: instance + annotations: + hero: batman + fiend: riddler +`, + expectedOutput: ` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: instance + annotations: + hero: superman + fiend: luthor + bean: cannellini + clown: emmett kelley +`, + filter: Filter{Annotations: annoMap{ + "clown": "emmett kelley", + "hero": "superman", + "fiend": "luthor", + "bean": "cannellini", + }}, + }, + "data-fieldspecs": { + input: ` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: instance +--- +apiVersion: example.com/v1 +kind: Bar +metadata: + name: instance +`, + expectedOutput: ` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: instance + annotations: + sleater: kinney +a: + b: + sleater: kinney +--- +apiVersion: example.com/v1 +kind: Bar +metadata: + name: instance + annotations: + sleater: kinney +a: + b: + sleater: kinney +`, + filter: Filter{Annotations: annoMap{ + "sleater": "kinney", + }}, + fsslice: []types.FieldSpec{ + { + Path: "a/b", + CreateIfNotPresent: true, + }, + }, + }, + + "number": { + input: ` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: instance + annotations: + hero: batman + fiend: riddler +`, + expectedOutput: ` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: instance + annotations: + hero: batman + fiend: riddler + 2: ford + clown: "1" +`, + filter: Filter{Annotations: annoMap{ + "clown": "1", + "2": "ford", + }}, + }, + + // test quoting of values which are not considered strings in yaml 1.1 + "yaml_1_1_compatibility": { + input: ` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: instance + annotations: + hero: batman + fiend: riddler +`, + expectedOutput: ` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: instance + annotations: + hero: batman + fiend: riddler + a: "y" + b: y1 + c: "yes" + d: yes1 + e: "true" + f: true1 +`, + filter: Filter{Annotations: annoMap{ + "a": "y", + "b": "y1", + "c": "yes", + "d": "yes1", + "e": "true", + "f": "true1", + }}, + }, + + // test quoting of values which are not considered strings in yaml 1.1 + "null_annotations": { + input: ` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: instance + annotations: null +`, + expectedOutput: ` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: instance + annotations: + a: a1 + b: b1 +`, + filter: Filter{Annotations: annoMap{ + "a": "a1", + "b": "b1", + }}, + }, + + // test usage of SetEntryCallback + "set_entry_callback": { + input: ` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: instance +`, + expectedOutput: ` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: instance + annotations: + a: a1 + b: b1 +spec: + template: + metadata: + annotations: + a: a1 + b: b1 +`, + filter: Filter{ + Annotations: annoMap{ + "a": "a1", + "b": "b1", + }, + }, + setEntryCallback: setEntryCallbackStub, + fsslice: []types.FieldSpec{ + { + Path: "spec/template/metadata/annotations", + CreateIfNotPresent: true, + }, + }, + expectedSetEntryArgs: []setEntryArg{ + { + Key: "a", + Value: "a1", + Tag: "!!str", + NodePath: []string{"metadata", "annotations"}, + }, + { + Key: "a", + Value: "a1", + Tag: "!!str", + NodePath: []string{"spec", "template", "metadata", "annotations"}, + }, + { + Key: "b", + Value: "b1", + Tag: "!!str", + NodePath: []string{"metadata", "annotations"}, + }, + { + Key: "b", + Value: "b1", + Tag: "!!str", + NodePath: []string{"spec", "template", "metadata", "annotations"}, + }, + }, + }, + } + + for tn, tc := range testCases { + setEntryArgs = nil + t.Run(tn, func(t *testing.T) { + filter := tc.filter + filter.WithMutationTracker(tc.setEntryCallback) + filter.FsSlice = append(annosFs, tc.fsslice...) + if !assert.Equal(t, + strings.TrimSpace(tc.expectedOutput), + strings.TrimSpace(filtertest_test.RunFilter(t, tc.input, filter))) { + t.FailNow() + } + if !assert.Equal(t, tc.expectedSetEntryArgs, setEntryArgs) { + t.FailNow() + } + }) + } +} diff --git a/go/internal/forked/api/filters/annotations/doc.go b/go/internal/forked/api/filters/annotations/doc.go new file mode 100644 index 000000000..b1f6a0b66 --- /dev/null +++ b/go/internal/forked/api/filters/annotations/doc.go @@ -0,0 +1,6 @@ +// Copyright 2020 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +// Package annotations contains a kio.Filter implementation of the kustomize +// annotations transformer. +package annotations diff --git a/go/internal/forked/api/filters/annotations/example_test.go b/go/internal/forked/api/filters/annotations/example_test.go new file mode 100644 index 000000000..f23220bd6 --- /dev/null +++ b/go/internal/forked/api/filters/annotations/example_test.go @@ -0,0 +1,61 @@ +// Copyright 2020 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package annotations + +import ( + "bytes" + "log" + "os" + + "sigs.k8s.io/kustomize/api/internal/plugins/builtinconfig" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/kio" +) + +func ExampleFilter() { + fss := builtinconfig.MakeDefaultConfig().CommonAnnotations + err := kio.Pipeline{ + Inputs: []kio.Reader{&kio.ByteReader{Reader: bytes.NewBufferString(` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: instance +--- +apiVersion: example.com/v1 +kind: Bar +metadata: + name: instance +`)}}, + Filters: []kio.Filter{Filter{ + Annotations: map[string]string{ + "foo": "bar", + "booleanValue": "true", + "numberValue": "42", + }, + FsSlice: fss, + }}, + Outputs: []kio.Writer{kio.ByteWriter{Writer: os.Stdout}}, + }.Execute() + if err != nil { + log.Fatal(err) + } + + // Output: + // apiVersion: example.com/v1 + // kind: Foo + // metadata: + // name: instance + // annotations: + // booleanValue: "true" + // foo: bar + // numberValue: "42" + // --- + // apiVersion: example.com/v1 + // kind: Bar + // metadata: + // name: instance + // annotations: + // booleanValue: "true" + // foo: bar + // numberValue: "42" +} diff --git a/go/internal/forked/api/filters/annotations/example_test.go b/go/internal/forked/api/filters/annotations/example_test.go new file mode 100644 index 000000000..56dd9e50e --- /dev/null +++ b/go/internal/forked/api/filters/annotations/example_test.go @@ -0,0 +1,61 @@ +// Copyright 2020 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package annotations + +import ( + "bytes" + "log" + "os" + + "sigs.k8s.io/kustomize/api/internal/plugins/builtinconfig" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/kio" +) + +func ExampleFilter() { + fss := builtinconfig.MakeDefaultConfig().CommonAnnotations + err := kio.Pipeline{ + Inputs: []kio.Reader{&kio.ByteReader{Reader: bytes.NewBufferString(` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: instance +--- +apiVersion: example.com/v1 +kind: Bar +metadata: + name: instance +`)}}, + Filters: []kio.Filter{Filter{ + Annotations: map[string]string{ + "foo": "bar", + "booleanValue": "true", + "numberValue": "42", + }, + FsSlice: fss, + }}, + Outputs: []kio.Writer{kio.ByteWriter{Writer: os.Stdout}}, + }.Execute() + if err != nil { + log.Fatal(err) + } + + // Output: + // apiVersion: example.com/v1 + // kind: Foo + // metadata: + // name: instance + // annotations: + // booleanValue: "true" + // foo: bar + // numberValue: "42" + // --- + // apiVersion: example.com/v1 + // kind: Bar + // metadata: + // name: instance + // annotations: + // booleanValue: "true" + // foo: bar + // numberValue: "42" +} diff --git a/go/internal/forked/api/filters/doc.go b/go/internal/forked/api/filters/doc.go new file mode 100644 index 000000000..475a7baa0 --- /dev/null +++ b/go/internal/forked/api/filters/doc.go @@ -0,0 +1,5 @@ +package filters + +// Package filters collects various implementations +// github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/kio.Filter used by kustomize +// transformers to modify kubernetes objects. diff --git a/go/internal/forked/api/filters/doc.go b/go/internal/forked/api/filters/doc.go new file mode 100644 index 000000000..39478c02b --- /dev/null +++ b/go/internal/forked/api/filters/doc.go @@ -0,0 +1,5 @@ +package filters + +// Package filters collects various implementations +// github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/kio.Filter used by kustomize +// transformers to modify kubernetes objects. diff --git a/go/internal/forked/api/filters/fieldspec/doc.go b/go/internal/forked/api/filters/fieldspec/doc.go new file mode 100644 index 000000000..6f643630a --- /dev/null +++ b/go/internal/forked/api/filters/fieldspec/doc.go @@ -0,0 +1,6 @@ +// Copyright 2020 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +// Package fieldspec contains a yaml.Filter to modify a resource +// that matches the FieldSpec. +package fieldspec diff --git a/go/internal/forked/api/filters/fieldspec/example_test.go b/go/internal/forked/api/filters/fieldspec/example_test.go new file mode 100644 index 000000000..0d6bb337c --- /dev/null +++ b/go/internal/forked/api/filters/fieldspec/example_test.go @@ -0,0 +1,61 @@ +// Copyright 2020 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package fieldspec_test + +import ( + "bytes" + "log" + "os" + + "sigs.k8s.io/kustomize/api/filters/fieldspec" + "sigs.k8s.io/kustomize/api/filters/filtersutil" + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/kio" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" +) + +func ExampleFilter() { + in := &kio.ByteReader{ + Reader: bytes.NewBufferString(` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: instance +--- +apiVersion: example.com/v1 +kind: Bar +metadata: + name: instance +`), + } + fltr := fieldspec.Filter{ + CreateKind: yaml.ScalarNode, + SetValue: filtersutil.SetScalar("green"), + FieldSpec: types.FieldSpec{Path: "a/b", CreateIfNotPresent: true}, + } + + err := kio.Pipeline{ + Inputs: []kio.Reader{in}, + Filters: []kio.Filter{kio.FilterAll(fltr)}, + Outputs: []kio.Writer{kio.ByteWriter{Writer: os.Stdout}}, + }.Execute() + if err != nil { + log.Fatal(err) + } + + // Output: + // apiVersion: example.com/v1 + // kind: Foo + // metadata: + // name: instance + // a: + // b: green + // --- + // apiVersion: example.com/v1 + // kind: Bar + // metadata: + // name: instance + // a: + // b: green +} diff --git a/go/internal/forked/api/filters/fieldspec/example_test.go b/go/internal/forked/api/filters/fieldspec/example_test.go new file mode 100644 index 000000000..f2923bdf9 --- /dev/null +++ b/go/internal/forked/api/filters/fieldspec/example_test.go @@ -0,0 +1,61 @@ +// Copyright 2020 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package fieldspec_test + +import ( + "bytes" + "log" + "os" + + "sigs.k8s.io/kustomize/api/filters/fieldspec" + "sigs.k8s.io/kustomize/api/filters/filtersutil" + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/kio" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/yaml" +) + +func ExampleFilter() { + in := &kio.ByteReader{ + Reader: bytes.NewBufferString(` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: instance +--- +apiVersion: example.com/v1 +kind: Bar +metadata: + name: instance +`), + } + fltr := fieldspec.Filter{ + CreateKind: yaml.ScalarNode, + SetValue: filtersutil.SetScalar("green"), + FieldSpec: types.FieldSpec{Path: "a/b", CreateIfNotPresent: true}, + } + + err := kio.Pipeline{ + Inputs: []kio.Reader{in}, + Filters: []kio.Filter{kio.FilterAll(fltr)}, + Outputs: []kio.Writer{kio.ByteWriter{Writer: os.Stdout}}, + }.Execute() + if err != nil { + log.Fatal(err) + } + + // Output: + // apiVersion: example.com/v1 + // kind: Foo + // metadata: + // name: instance + // a: + // b: green + // --- + // apiVersion: example.com/v1 + // kind: Bar + // metadata: + // name: instance + // a: + // b: green +} diff --git a/go/internal/forked/api/filters/fieldspec/fieldspec.go b/go/internal/forked/api/filters/fieldspec/fieldspec.go new file mode 100644 index 000000000..94b2d2648 --- /dev/null +++ b/go/internal/forked/api/filters/fieldspec/fieldspec.go @@ -0,0 +1,182 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package fieldspec + +import ( + "fmt" + "strings" + + "sigs.k8s.io/kustomize/api/filters/filtersutil" + "sigs.k8s.io/kustomize/api/internal/utils" + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/errors" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/resid" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" +) + +var _ yaml.Filter = Filter{} + +// Filter possibly mutates its object argument using a FieldSpec. +// If the object matches the FieldSpec, and the node found +// by following the fieldSpec's path is non-null, this filter calls +// the setValue function on the node at the end of the path. +// If any part of the path doesn't exist, the filter returns +// without doing anything and without error, unless it was set +// to create the path. If set to create, it creates a tree of maps +// along the path, and the leaf node gets the setValue called on it. +// Error on GVK mismatch, empty or poorly formed path. +// Filter expect kustomize style paths, not JSON paths. +// Filter stores internal state and should not be reused +type Filter struct { + // FieldSpec contains the path to the value to set. + FieldSpec types.FieldSpec `yaml:"fieldSpec"` + + // Set the field using this function + SetValue filtersutil.SetFn + + // CreateKind defines the type of node to create if the field is not found + CreateKind yaml.Kind + + CreateTag string + + // path keeps internal state about the current path + path []string +} + +func (fltr Filter) Filter(obj *yaml.RNode) (*yaml.RNode, error) { + // check if the FieldSpec applies to the object + if match := isMatchGVK(fltr.FieldSpec, obj); !match { + return obj, nil + } + fltr.path = utils.PathSplitter(fltr.FieldSpec.Path, "/") + if err := fltr.filter(obj); err != nil { + return nil, errors.WrapPrefixf(err, + "considering field '%s' of object %s", fltr.FieldSpec.Path, resid.FromRNode(obj)) + } + return obj, nil +} + +// Recursively called. +func (fltr Filter) filter(obj *yaml.RNode) error { + if len(fltr.path) == 0 { + // found the field -- set its value + return fltr.SetValue(obj) + } + if obj.IsTaggedNull() || obj.IsNil() { + return nil + } + switch obj.YNode().Kind { + case yaml.SequenceNode: + return fltr.handleSequence(obj) + case yaml.MappingNode: + return fltr.handleMap(obj) + case yaml.AliasNode: + return fltr.filter(yaml.NewRNode(obj.YNode().Alias)) + default: + return errors.Errorf("expected sequence or mapping node") + } +} + +// handleMap calls filter on the map field matching the next path element +func (fltr Filter) handleMap(obj *yaml.RNode) error { + fieldName, isSeq := isSequenceField(fltr.path[0]) + if fieldName == "" { + return fmt.Errorf("cannot set or create an empty field name") + } + // lookup the field matching the next path element + var operation yaml.Filter + var kind yaml.Kind + tag := yaml.NodeTagEmpty + switch { + case !fltr.FieldSpec.CreateIfNotPresent || fltr.CreateKind == 0 || isSeq: + // don't create the field if we don't find it + operation = yaml.Lookup(fieldName) + if isSeq { + // The query path thinks this field should be a sequence; + // accept this hint for use later if the tag is NodeTagNull. + kind = yaml.SequenceNode + } + case len(fltr.path) <= 1: + // create the field if it is missing: use the provided node kind + operation = yaml.LookupCreate(fltr.CreateKind, fieldName) + kind = fltr.CreateKind + tag = fltr.CreateTag + default: + // create the field if it is missing: must be a mapping node + operation = yaml.LookupCreate(yaml.MappingNode, fieldName) + kind = yaml.MappingNode + tag = yaml.NodeTagMap + } + + // locate (or maybe create) the field + field, err := obj.Pipe(operation) + if err != nil { + return errors.WrapPrefixf(err, "fieldName: %s", fieldName) + } + if field == nil { + // No error if field not found. + return nil + } + + // if the value exists, but is null and kind is set, + // then change it to the creation type + // TODO: update yaml.LookupCreate to support this + if field.YNode().Tag == yaml.NodeTagNull && yaml.IsCreate(kind) { + field.YNode().Kind = kind + field.YNode().Tag = tag + } + + // copy the current fltr and change the path on the copy + var next = fltr + // call filter for the next path element on the matching field + next.path = fltr.path[1:] + return next.filter(field) +} + +// seq calls filter on all sequence elements +func (fltr Filter) handleSequence(obj *yaml.RNode) error { + if err := obj.VisitElements(func(node *yaml.RNode) error { + // set an accurate FieldPath for nested elements + node.AppendToFieldPath(obj.FieldPath()...) + // recurse on each element -- re-allocating a Filter is + // not strictly required, but is more consistent with field + // and less likely to have side effects + // keep the entire path -- it does not contain parts for sequences + return fltr.filter(node) + }); err != nil { + return errors.WrapPrefixf(err, + "visit traversal on path: %v", fltr.path) + } + return nil +} + +// isSequenceField returns true if the path element is for a sequence field. +// isSequence also returns the path element with the '[]' suffix trimmed +func isSequenceField(name string) (string, bool) { + shorter := strings.TrimSuffix(name, "[]") + return shorter, shorter != name +} + +// isMatchGVK returns true if the fs.GVK matches the obj GVK. +func isMatchGVK(fs types.FieldSpec, obj *yaml.RNode) bool { + if kind := obj.GetKind(); fs.Kind != "" && fs.Kind != kind { + // kind doesn't match + return false + } + + // parse the group and version from the apiVersion field + group, version := resid.ParseGroupVersion(obj.GetApiVersion()) + + if fs.Group != "" && fs.Group != group { + // group doesn't match + return false + } + + if fs.Version != "" && fs.Version != version { + // version doesn't match + return false + } + + return true +} diff --git a/go/internal/forked/api/filters/fieldspec/fieldspec.go b/go/internal/forked/api/filters/fieldspec/fieldspec.go new file mode 100644 index 000000000..36155528b --- /dev/null +++ b/go/internal/forked/api/filters/fieldspec/fieldspec.go @@ -0,0 +1,182 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package fieldspec + +import ( + "fmt" + "strings" + + "sigs.k8s.io/kustomize/api/filters/filtersutil" + "sigs.k8s.io/kustomize/api/internal/utils" + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/errors" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/resid" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/yaml" +) + +var _ yaml.Filter = Filter{} + +// Filter possibly mutates its object argument using a FieldSpec. +// If the object matches the FieldSpec, and the node found +// by following the fieldSpec's path is non-null, this filter calls +// the setValue function on the node at the end of the path. +// If any part of the path doesn't exist, the filter returns +// without doing anything and without error, unless it was set +// to create the path. If set to create, it creates a tree of maps +// along the path, and the leaf node gets the setValue called on it. +// Error on GVK mismatch, empty or poorly formed path. +// Filter expect kustomize style paths, not JSON paths. +// Filter stores internal state and should not be reused +type Filter struct { + // FieldSpec contains the path to the value to set. + FieldSpec types.FieldSpec `yaml:"fieldSpec"` + + // Set the field using this function + SetValue filtersutil.SetFn + + // CreateKind defines the type of node to create if the field is not found + CreateKind yaml.Kind + + CreateTag string + + // path keeps internal state about the current path + path []string +} + +func (fltr Filter) Filter(obj *yaml.RNode) (*yaml.RNode, error) { + // check if the FieldSpec applies to the object + if match := isMatchGVK(fltr.FieldSpec, obj); !match { + return obj, nil + } + fltr.path = utils.PathSplitter(fltr.FieldSpec.Path, "/") + if err := fltr.filter(obj); err != nil { + return nil, errors.WrapPrefixf(err, + "considering field '%s' of object %s", fltr.FieldSpec.Path, resid.FromRNode(obj)) + } + return obj, nil +} + +// Recursively called. +func (fltr Filter) filter(obj *yaml.RNode) error { + if len(fltr.path) == 0 { + // found the field -- set its value + return fltr.SetValue(obj) + } + if obj.IsTaggedNull() || obj.IsNil() { + return nil + } + switch obj.YNode().Kind { + case yaml.SequenceNode: + return fltr.handleSequence(obj) + case yaml.MappingNode: + return fltr.handleMap(obj) + case yaml.AliasNode: + return fltr.filter(yaml.NewRNode(obj.YNode().Alias)) + default: + return errors.Errorf("expected sequence or mapping node") + } +} + +// handleMap calls filter on the map field matching the next path element +func (fltr Filter) handleMap(obj *yaml.RNode) error { + fieldName, isSeq := isSequenceField(fltr.path[0]) + if fieldName == "" { + return fmt.Errorf("cannot set or create an empty field name") + } + // lookup the field matching the next path element + var operation yaml.Filter + var kind yaml.Kind + tag := yaml.NodeTagEmpty + switch { + case !fltr.FieldSpec.CreateIfNotPresent || fltr.CreateKind == 0 || isSeq: + // don't create the field if we don't find it + operation = yaml.Lookup(fieldName) + if isSeq { + // The query path thinks this field should be a sequence; + // accept this hint for use later if the tag is NodeTagNull. + kind = yaml.SequenceNode + } + case len(fltr.path) <= 1: + // create the field if it is missing: use the provided node kind + operation = yaml.LookupCreate(fltr.CreateKind, fieldName) + kind = fltr.CreateKind + tag = fltr.CreateTag + default: + // create the field if it is missing: must be a mapping node + operation = yaml.LookupCreate(yaml.MappingNode, fieldName) + kind = yaml.MappingNode + tag = yaml.NodeTagMap + } + + // locate (or maybe create) the field + field, err := obj.Pipe(operation) + if err != nil { + return errors.WrapPrefixf(err, "fieldName: %s", fieldName) + } + if field == nil { + // No error if field not found. + return nil + } + + // if the value exists, but is null and kind is set, + // then change it to the creation type + // TODO: update yaml.LookupCreate to support this + if field.YNode().Tag == yaml.NodeTagNull && yaml.IsCreate(kind) { + field.YNode().Kind = kind + field.YNode().Tag = tag + } + + // copy the current fltr and change the path on the copy + var next = fltr + // call filter for the next path element on the matching field + next.path = fltr.path[1:] + return next.filter(field) +} + +// seq calls filter on all sequence elements +func (fltr Filter) handleSequence(obj *yaml.RNode) error { + if err := obj.VisitElements(func(node *yaml.RNode) error { + // set an accurate FieldPath for nested elements + node.AppendToFieldPath(obj.FieldPath()...) + // recurse on each element -- re-allocating a Filter is + // not strictly required, but is more consistent with field + // and less likely to have side effects + // keep the entire path -- it does not contain parts for sequences + return fltr.filter(node) + }); err != nil { + return errors.WrapPrefixf(err, + "visit traversal on path: %v", fltr.path) + } + return nil +} + +// isSequenceField returns true if the path element is for a sequence field. +// isSequence also returns the path element with the '[]' suffix trimmed +func isSequenceField(name string) (string, bool) { + shorter := strings.TrimSuffix(name, "[]") + return shorter, shorter != name +} + +// isMatchGVK returns true if the fs.GVK matches the obj GVK. +func isMatchGVK(fs types.FieldSpec, obj *yaml.RNode) bool { + if kind := obj.GetKind(); fs.Kind != "" && fs.Kind != kind { + // kind doesn't match + return false + } + + // parse the group and version from the apiVersion field + group, version := resid.ParseGroupVersion(obj.GetApiVersion()) + + if fs.Group != "" && fs.Group != group { + // group doesn't match + return false + } + + if fs.Version != "" && fs.Version != version { + // version doesn't match + return false + } + + return true +} diff --git a/go/internal/forked/api/filters/fieldspec/fieldspec_test.go b/go/internal/forked/api/filters/fieldspec/fieldspec_test.go new file mode 100644 index 000000000..477c4ea59 --- /dev/null +++ b/go/internal/forked/api/filters/fieldspec/fieldspec_test.go @@ -0,0 +1,642 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package fieldspec_test + +import ( + "bytes" + "strings" + "testing" + + "github.com/stretchr/testify/assert" + "sigs.k8s.io/kustomize/api/filters/fieldspec" + "sigs.k8s.io/kustomize/api/filters/filtersutil" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/kio" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" +) + +func TestFilter_Filter(t *testing.T) { + testCases := map[string]struct { + input string + expected string + filter fieldspec.Filter + fieldSpec string + error string + }{ + "path not found": { + fieldSpec: ` +path: a/b +group: foo +kind: Bar +`, + input: ` +apiVersion: foo +kind: Bar +xxx: +`, + expected: ` +apiVersion: foo +kind: Bar +xxx: +`, + filter: fieldspec.Filter{ + SetValue: filtersutil.SetScalar("e"), + }, + }, + "empty path": { + fieldSpec: ` +group: foo +version: v1 +kind: Bar +`, + input: ` +apiVersion: foo/v1 +kind: Bar +xxx: +`, + expected: ` +apiVersion: foo +kind: Bar +xxx: +`, + error: `considering field '' of object Bar.v1.foo/[noName].[noNs]: cannot set or create an empty field name`, + filter: fieldspec.Filter{ + SetValue: filtersutil.SetScalar("e"), + }, + }, + + "update": { + fieldSpec: ` +path: a/b +group: foo +kind: Bar +`, + input: ` +apiVersion: foo/v1beta1 +kind: Bar +a: + b: c +`, + expected: ` +apiVersion: foo/v1beta1 +kind: Bar +a: + b: e +`, + filter: fieldspec.Filter{ + SetValue: filtersutil.SetScalar("e"), + }, + }, + + "update-kind-not-match": { + fieldSpec: ` +path: a/b +group: foo +kind: Bar1 +`, + input: ` +apiVersion: foo/v1beta1 +kind: Bar2 +a: + b: c +`, + expected: ` +apiVersion: foo/v1beta1 +kind: Bar2 +a: + b: c +`, + filter: fieldspec.Filter{ + SetValue: filtersutil.SetScalar("e"), + }, + }, + + "update-group-not-match": { + fieldSpec: ` +path: a/b +group: foo1 +kind: Bar +`, + input: ` +apiVersion: foo2/v1beta1 +kind: Bar +a: + b: c +`, + expected: ` +apiVersion: foo2/v1beta1 +kind: Bar +a: + b: c +`, + filter: fieldspec.Filter{ + SetValue: filtersutil.SetScalar("e"), + }, + }, + + "update-version-not-match": { + fieldSpec: ` +path: a/b +group: foo +version: v1beta1 +kind: Bar +`, + input: ` +apiVersion: foo/v1beta2 +kind: Bar +a: + b: c +`, + expected: ` +apiVersion: foo/v1beta2 +kind: Bar +a: + b: c +`, + filter: fieldspec.Filter{ + SetValue: filtersutil.SetScalar("e"), + }, + }, + + "bad-version": { + fieldSpec: ` +path: a/b +group: foo +version: v1beta1 +kind: Bar +`, + input: ` +apiVersion: foo/v1beta2/something +kind: Bar +a: + b: c +`, + expected: ` +apiVersion: foo/v1beta2/something +kind: Bar +a: + b: c +`, + filter: fieldspec.Filter{ + SetValue: filtersutil.SetScalar("e"), + }, + }, + + "bad-meta": { + fieldSpec: ` +path: a/b +group: foo +version: v1beta1 +kind: Bar +`, + input: ` +a: + b: c +`, + expected: ` +a: + b: c +`, + filter: fieldspec.Filter{ + SetValue: filtersutil.SetScalar("e"), + }, + }, + + "miss-match-type": { + fieldSpec: ` +path: a/b/c +kind: Bar +`, + input: ` +kind: Bar +a: + b: a +`, + error: `considering field 'a/b/c' of object Bar.[noVer].[noGrp]/[noName].[noNs]: expected sequence or mapping node`, + filter: fieldspec.Filter{ + SetValue: filtersutil.SetScalar("e"), + }, + }, + + "add": { + fieldSpec: ` +path: a/b/c/d +group: foo +create: true +kind: Bar +`, + input: ` +apiVersion: foo/v1beta1 +kind: Bar +a: {} +`, + expected: ` +apiVersion: foo/v1beta1 +kind: Bar +a: {b: {c: {d: e}}} +`, + filter: fieldspec.Filter{ + SetValue: filtersutil.SetScalar("e"), + CreateKind: yaml.ScalarNode, + }, + }, + + "update-in-sequence": { + fieldSpec: ` +path: a/b[]/c/d +group: foo +kind: Bar +`, + input: ` +apiVersion: foo/v1beta1 +kind: Bar +a: + b: + - c: + d: a +`, + expected: ` +apiVersion: foo/v1beta1 +kind: Bar +a: + b: + - c: + d: e +`, + filter: fieldspec.Filter{ + SetValue: filtersutil.SetScalar("e"), + }, + }, + + // Don't create a sequence + "empty-sequence-no-create": { + fieldSpec: ` +path: a/b[]/c/d +group: foo +create: true +kind: Bar +`, + input: ` +apiVersion: foo/v1beta1 +kind: Bar +a: {} +`, + expected: ` +apiVersion: foo/v1beta1 +kind: Bar +a: {} +`, + filter: fieldspec.Filter{ + SetValue: filtersutil.SetScalar("e"), + CreateKind: yaml.ScalarNode, + }, + }, + + // Create a new field for an element in a sequence + "empty-sequence-create": { + fieldSpec: ` +path: a/b[]/c/d +group: foo +create: true +kind: Bar +`, + input: ` +apiVersion: foo/v1beta1 +kind: Bar +a: + b: + - c: {} +`, + expected: ` +apiVersion: foo/v1beta1 +kind: Bar +a: + b: + - c: {d: e} +`, + filter: fieldspec.Filter{ + SetValue: filtersutil.SetScalar("e"), + CreateKind: yaml.ScalarNode, + }, + }, + + "group v1": { + fieldSpec: ` +path: a/b +group: v1 +create: true +kind: Bar +`, + input: ` +apiVersion: v1 +kind: Bar +`, + expected: ` +apiVersion: v1 +kind: Bar +`, + filter: fieldspec.Filter{ + SetValue: filtersutil.SetScalar("e"), + CreateKind: yaml.ScalarNode, + }, + }, + + "version v1": { + fieldSpec: ` +path: a/b +version: v1 +create: true +kind: Bar +`, + input: ` +apiVersion: v1 +kind: Bar +`, + expected: ` +apiVersion: v1 +kind: Bar +a: + b: e +`, + filter: fieldspec.Filter{ + SetValue: filtersutil.SetScalar("e"), + CreateKind: yaml.ScalarNode, + }, + }, + + "successfully set field on array entry no sequence hint": { + fieldSpec: ` +path: spec/containers/image +version: v1 +kind: Bar +`, + input: ` +apiVersion: v1 +kind: Bar +spec: + containers: + - image: foo +`, + expected: ` +apiVersion: v1 +kind: Bar +spec: + containers: + - image: bar +`, + filter: fieldspec.Filter{ + SetValue: filtersutil.SetScalar("bar"), + CreateKind: yaml.ScalarNode, + }, + }, + + "successfully set field on array entry with sequence hint": { + fieldSpec: ` +path: spec/containers[]/image +version: v1 +kind: Bar +`, + input: ` +apiVersion: v1 +kind: Bar +spec: + containers: + - image: foo +`, + expected: ` +apiVersion: v1 +kind: Bar +spec: + containers: + - image: bar +`, + filter: fieldspec.Filter{ + SetValue: filtersutil.SetScalar("bar"), + CreateKind: yaml.ScalarNode, + }, + }, + "failure to set field on array entry with sequence hint in path": { + fieldSpec: ` +path: spec/containers[]/image +version: v1 +kind: Bar +`, + input: ` +apiVersion: v1 +kind: Bar +spec: + containers: +`, + expected: ` +apiVersion: v1 +kind: Bar +spec: + containers: [] +`, + filter: fieldspec.Filter{ + SetValue: filtersutil.SetScalar("bar"), + CreateKind: yaml.ScalarNode, + }, + }, + + "failure to set field on array entry, no sequence hint in path": { + fieldSpec: ` +path: spec/containers/image +version: v1 +kind: Bar +`, + input: ` +apiVersion: v1 +kind: Bar +spec: + containers: +`, + expected: ` +apiVersion: v1 +kind: Bar +spec: + containers: +`, + filter: fieldspec.Filter{ + SetValue: filtersutil.SetScalar("bar"), + CreateKind: yaml.ScalarNode, + }, + }, + "fieldname with slash '/'": { + fieldSpec: ` +path: a/b\/c/d +version: v1 +kind: Bar +`, + input: ` +apiVersion: v1 +kind: Bar +a: + b/c: + d: foo +`, + expected: ` +apiVersion: v1 +kind: Bar +a: + b/c: + d: bar +`, + filter: fieldspec.Filter{ + SetValue: filtersutil.SetScalar("bar"), + CreateKind: yaml.ScalarNode, + }, + }, + "fieldname with multiple '/'": { + fieldSpec: ` +path: a/b\/c/d\/e/f +version: v1 +kind: Bar +`, + input: ` +apiVersion: v1 +kind: Bar +a: + b/c: + d/e: + f: foo +`, + expected: ` +apiVersion: v1 +kind: Bar +a: + b/c: + d/e: + f: bar +`, + filter: fieldspec.Filter{ + SetValue: filtersutil.SetScalar("bar"), + CreateKind: yaml.ScalarNode, + }, + }, + } + + for n := range testCases { + tc := testCases[n] + t.Run(n, func(t *testing.T) { + err := yaml.Unmarshal([]byte(tc.fieldSpec), &tc.filter.FieldSpec) + if !assert.NoError(t, err) { + t.FailNow() + } + + out := &bytes.Buffer{} + rw := &kio.ByteReadWriter{ + Reader: bytes.NewBufferString(tc.input), + Writer: out, + OmitReaderAnnotations: true, + } + + // run the filter + err = kio.Pipeline{ + Inputs: []kio.Reader{rw}, + Filters: []kio.Filter{kio.FilterAll(tc.filter)}, + Outputs: []kio.Writer{rw}, + }.Execute() + if tc.error != "" { + if !assert.EqualError(t, err, tc.error) { + t.FailNow() + } + // stop rest of test + return + } + + if !assert.NoError(t, err) { + t.FailNow() + } + + // check results + if !assert.Equal(t, + strings.TrimSpace(tc.expected), + strings.TrimSpace(out.String())) { + t.FailNow() + } + }) + } +} + +func TestFilter_FieldPaths(t *testing.T) { + testCases := map[string]struct { + input string + fieldSpec string + expected []string + }{ + "fieldpath containing SequenceNode": { + input: ` +apiVersion: v1 +kind: Pod +metadata: + name: app +spec: + containers: + - name: store + image: redis:6.2.6 + - name: server + image: nginx:latest +`, + fieldSpec: ` +path: spec/containers[]/image +kind: Pod +`, + expected: []string{ + "spec.containers.image", + "spec.containers.image", + }, + }, + "fieldpath with MappingNode": { + input: ` +apiVersion: v1 +kind: Pod +metadata: + name: app +spec: + containers: + - name: store + image: redis:6.2.6 + - name: server + image: nginx:latest +`, + fieldSpec: ` +path: metadata/name +kind: Pod +`, + expected: []string{ + "metadata.name", + }, + }, + } + for name, tc := range testCases { + var fieldPaths []string + trackableSetter := filtersutil.TrackableSetter{} + trackableSetter.WithMutationTracker(func(key, value, tag string, node *yaml.RNode) { + fieldPaths = append(fieldPaths, strings.Join(node.FieldPath(), ".")) + }) + filter := fieldspec.Filter{ + SetValue: trackableSetter.SetScalar("foo"), + } + + t.Run(name, func(t *testing.T) { + err := yaml.Unmarshal([]byte(tc.fieldSpec), &filter.FieldSpec) + assert.NoError(t, err) + rw := &kio.ByteReadWriter{ + Reader: bytes.NewBufferString(tc.input), + Writer: &bytes.Buffer{}, + OmitReaderAnnotations: true, + } + + // run the filter + err = kio.Pipeline{ + Inputs: []kio.Reader{rw}, + Filters: []kio.Filter{kio.FilterAll(filter)}, + Outputs: []kio.Writer{rw}, + }.Execute() + + assert.NoError(t, err) + assert.Equal(t, tc.expected, fieldPaths) + }) + } +} diff --git a/go/internal/forked/api/filters/fieldspec/fieldspec_test.go b/go/internal/forked/api/filters/fieldspec/fieldspec_test.go new file mode 100644 index 000000000..e1b60ded3 --- /dev/null +++ b/go/internal/forked/api/filters/fieldspec/fieldspec_test.go @@ -0,0 +1,642 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package fieldspec_test + +import ( + "bytes" + "strings" + "testing" + + "github.com/stretchr/testify/assert" + "sigs.k8s.io/kustomize/api/filters/fieldspec" + "sigs.k8s.io/kustomize/api/filters/filtersutil" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/kio" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/yaml" +) + +func TestFilter_Filter(t *testing.T) { + testCases := map[string]struct { + input string + expected string + filter fieldspec.Filter + fieldSpec string + error string + }{ + "path not found": { + fieldSpec: ` +path: a/b +group: foo +kind: Bar +`, + input: ` +apiVersion: foo +kind: Bar +xxx: +`, + expected: ` +apiVersion: foo +kind: Bar +xxx: +`, + filter: fieldspec.Filter{ + SetValue: filtersutil.SetScalar("e"), + }, + }, + "empty path": { + fieldSpec: ` +group: foo +version: v1 +kind: Bar +`, + input: ` +apiVersion: foo/v1 +kind: Bar +xxx: +`, + expected: ` +apiVersion: foo +kind: Bar +xxx: +`, + error: `considering field '' of object Bar.v1.foo/[noName].[noNs]: cannot set or create an empty field name`, + filter: fieldspec.Filter{ + SetValue: filtersutil.SetScalar("e"), + }, + }, + + "update": { + fieldSpec: ` +path: a/b +group: foo +kind: Bar +`, + input: ` +apiVersion: foo/v1beta1 +kind: Bar +a: + b: c +`, + expected: ` +apiVersion: foo/v1beta1 +kind: Bar +a: + b: e +`, + filter: fieldspec.Filter{ + SetValue: filtersutil.SetScalar("e"), + }, + }, + + "update-kind-not-match": { + fieldSpec: ` +path: a/b +group: foo +kind: Bar1 +`, + input: ` +apiVersion: foo/v1beta1 +kind: Bar2 +a: + b: c +`, + expected: ` +apiVersion: foo/v1beta1 +kind: Bar2 +a: + b: c +`, + filter: fieldspec.Filter{ + SetValue: filtersutil.SetScalar("e"), + }, + }, + + "update-group-not-match": { + fieldSpec: ` +path: a/b +group: foo1 +kind: Bar +`, + input: ` +apiVersion: foo2/v1beta1 +kind: Bar +a: + b: c +`, + expected: ` +apiVersion: foo2/v1beta1 +kind: Bar +a: + b: c +`, + filter: fieldspec.Filter{ + SetValue: filtersutil.SetScalar("e"), + }, + }, + + "update-version-not-match": { + fieldSpec: ` +path: a/b +group: foo +version: v1beta1 +kind: Bar +`, + input: ` +apiVersion: foo/v1beta2 +kind: Bar +a: + b: c +`, + expected: ` +apiVersion: foo/v1beta2 +kind: Bar +a: + b: c +`, + filter: fieldspec.Filter{ + SetValue: filtersutil.SetScalar("e"), + }, + }, + + "bad-version": { + fieldSpec: ` +path: a/b +group: foo +version: v1beta1 +kind: Bar +`, + input: ` +apiVersion: foo/v1beta2/something +kind: Bar +a: + b: c +`, + expected: ` +apiVersion: foo/v1beta2/something +kind: Bar +a: + b: c +`, + filter: fieldspec.Filter{ + SetValue: filtersutil.SetScalar("e"), + }, + }, + + "bad-meta": { + fieldSpec: ` +path: a/b +group: foo +version: v1beta1 +kind: Bar +`, + input: ` +a: + b: c +`, + expected: ` +a: + b: c +`, + filter: fieldspec.Filter{ + SetValue: filtersutil.SetScalar("e"), + }, + }, + + "miss-match-type": { + fieldSpec: ` +path: a/b/c +kind: Bar +`, + input: ` +kind: Bar +a: + b: a +`, + error: `considering field 'a/b/c' of object Bar.[noVer].[noGrp]/[noName].[noNs]: expected sequence or mapping node`, + filter: fieldspec.Filter{ + SetValue: filtersutil.SetScalar("e"), + }, + }, + + "add": { + fieldSpec: ` +path: a/b/c/d +group: foo +create: true +kind: Bar +`, + input: ` +apiVersion: foo/v1beta1 +kind: Bar +a: {} +`, + expected: ` +apiVersion: foo/v1beta1 +kind: Bar +a: {b: {c: {d: e}}} +`, + filter: fieldspec.Filter{ + SetValue: filtersutil.SetScalar("e"), + CreateKind: yaml.ScalarNode, + }, + }, + + "update-in-sequence": { + fieldSpec: ` +path: a/b[]/c/d +group: foo +kind: Bar +`, + input: ` +apiVersion: foo/v1beta1 +kind: Bar +a: + b: + - c: + d: a +`, + expected: ` +apiVersion: foo/v1beta1 +kind: Bar +a: + b: + - c: + d: e +`, + filter: fieldspec.Filter{ + SetValue: filtersutil.SetScalar("e"), + }, + }, + + // Don't create a sequence + "empty-sequence-no-create": { + fieldSpec: ` +path: a/b[]/c/d +group: foo +create: true +kind: Bar +`, + input: ` +apiVersion: foo/v1beta1 +kind: Bar +a: {} +`, + expected: ` +apiVersion: foo/v1beta1 +kind: Bar +a: {} +`, + filter: fieldspec.Filter{ + SetValue: filtersutil.SetScalar("e"), + CreateKind: yaml.ScalarNode, + }, + }, + + // Create a new field for an element in a sequence + "empty-sequence-create": { + fieldSpec: ` +path: a/b[]/c/d +group: foo +create: true +kind: Bar +`, + input: ` +apiVersion: foo/v1beta1 +kind: Bar +a: + b: + - c: {} +`, + expected: ` +apiVersion: foo/v1beta1 +kind: Bar +a: + b: + - c: {d: e} +`, + filter: fieldspec.Filter{ + SetValue: filtersutil.SetScalar("e"), + CreateKind: yaml.ScalarNode, + }, + }, + + "group v1": { + fieldSpec: ` +path: a/b +group: v1 +create: true +kind: Bar +`, + input: ` +apiVersion: v1 +kind: Bar +`, + expected: ` +apiVersion: v1 +kind: Bar +`, + filter: fieldspec.Filter{ + SetValue: filtersutil.SetScalar("e"), + CreateKind: yaml.ScalarNode, + }, + }, + + "version v1": { + fieldSpec: ` +path: a/b +version: v1 +create: true +kind: Bar +`, + input: ` +apiVersion: v1 +kind: Bar +`, + expected: ` +apiVersion: v1 +kind: Bar +a: + b: e +`, + filter: fieldspec.Filter{ + SetValue: filtersutil.SetScalar("e"), + CreateKind: yaml.ScalarNode, + }, + }, + + "successfully set field on array entry no sequence hint": { + fieldSpec: ` +path: spec/containers/image +version: v1 +kind: Bar +`, + input: ` +apiVersion: v1 +kind: Bar +spec: + containers: + - image: foo +`, + expected: ` +apiVersion: v1 +kind: Bar +spec: + containers: + - image: bar +`, + filter: fieldspec.Filter{ + SetValue: filtersutil.SetScalar("bar"), + CreateKind: yaml.ScalarNode, + }, + }, + + "successfully set field on array entry with sequence hint": { + fieldSpec: ` +path: spec/containers[]/image +version: v1 +kind: Bar +`, + input: ` +apiVersion: v1 +kind: Bar +spec: + containers: + - image: foo +`, + expected: ` +apiVersion: v1 +kind: Bar +spec: + containers: + - image: bar +`, + filter: fieldspec.Filter{ + SetValue: filtersutil.SetScalar("bar"), + CreateKind: yaml.ScalarNode, + }, + }, + "failure to set field on array entry with sequence hint in path": { + fieldSpec: ` +path: spec/containers[]/image +version: v1 +kind: Bar +`, + input: ` +apiVersion: v1 +kind: Bar +spec: + containers: +`, + expected: ` +apiVersion: v1 +kind: Bar +spec: + containers: [] +`, + filter: fieldspec.Filter{ + SetValue: filtersutil.SetScalar("bar"), + CreateKind: yaml.ScalarNode, + }, + }, + + "failure to set field on array entry, no sequence hint in path": { + fieldSpec: ` +path: spec/containers/image +version: v1 +kind: Bar +`, + input: ` +apiVersion: v1 +kind: Bar +spec: + containers: +`, + expected: ` +apiVersion: v1 +kind: Bar +spec: + containers: +`, + filter: fieldspec.Filter{ + SetValue: filtersutil.SetScalar("bar"), + CreateKind: yaml.ScalarNode, + }, + }, + "fieldname with slash '/'": { + fieldSpec: ` +path: a/b\/c/d +version: v1 +kind: Bar +`, + input: ` +apiVersion: v1 +kind: Bar +a: + b/c: + d: foo +`, + expected: ` +apiVersion: v1 +kind: Bar +a: + b/c: + d: bar +`, + filter: fieldspec.Filter{ + SetValue: filtersutil.SetScalar("bar"), + CreateKind: yaml.ScalarNode, + }, + }, + "fieldname with multiple '/'": { + fieldSpec: ` +path: a/b\/c/d\/e/f +version: v1 +kind: Bar +`, + input: ` +apiVersion: v1 +kind: Bar +a: + b/c: + d/e: + f: foo +`, + expected: ` +apiVersion: v1 +kind: Bar +a: + b/c: + d/e: + f: bar +`, + filter: fieldspec.Filter{ + SetValue: filtersutil.SetScalar("bar"), + CreateKind: yaml.ScalarNode, + }, + }, + } + + for n := range testCases { + tc := testCases[n] + t.Run(n, func(t *testing.T) { + err := yaml.Unmarshal([]byte(tc.fieldSpec), &tc.filter.FieldSpec) + if !assert.NoError(t, err) { + t.FailNow() + } + + out := &bytes.Buffer{} + rw := &kio.ByteReadWriter{ + Reader: bytes.NewBufferString(tc.input), + Writer: out, + OmitReaderAnnotations: true, + } + + // run the filter + err = kio.Pipeline{ + Inputs: []kio.Reader{rw}, + Filters: []kio.Filter{kio.FilterAll(tc.filter)}, + Outputs: []kio.Writer{rw}, + }.Execute() + if tc.error != "" { + if !assert.EqualError(t, err, tc.error) { + t.FailNow() + } + // stop rest of test + return + } + + if !assert.NoError(t, err) { + t.FailNow() + } + + // check results + if !assert.Equal(t, + strings.TrimSpace(tc.expected), + strings.TrimSpace(out.String())) { + t.FailNow() + } + }) + } +} + +func TestFilter_FieldPaths(t *testing.T) { + testCases := map[string]struct { + input string + fieldSpec string + expected []string + }{ + "fieldpath containing SequenceNode": { + input: ` +apiVersion: v1 +kind: Pod +metadata: + name: app +spec: + containers: + - name: store + image: redis:6.2.6 + - name: server + image: nginx:latest +`, + fieldSpec: ` +path: spec/containers[]/image +kind: Pod +`, + expected: []string{ + "spec.containers.image", + "spec.containers.image", + }, + }, + "fieldpath with MappingNode": { + input: ` +apiVersion: v1 +kind: Pod +metadata: + name: app +spec: + containers: + - name: store + image: redis:6.2.6 + - name: server + image: nginx:latest +`, + fieldSpec: ` +path: metadata/name +kind: Pod +`, + expected: []string{ + "metadata.name", + }, + }, + } + for name, tc := range testCases { + var fieldPaths []string + trackableSetter := filtersutil.TrackableSetter{} + trackableSetter.WithMutationTracker(func(key, value, tag string, node *yaml.RNode) { + fieldPaths = append(fieldPaths, strings.Join(node.FieldPath(), ".")) + }) + filter := fieldspec.Filter{ + SetValue: trackableSetter.SetScalar("foo"), + } + + t.Run(name, func(t *testing.T) { + err := yaml.Unmarshal([]byte(tc.fieldSpec), &filter.FieldSpec) + assert.NoError(t, err) + rw := &kio.ByteReadWriter{ + Reader: bytes.NewBufferString(tc.input), + Writer: &bytes.Buffer{}, + OmitReaderAnnotations: true, + } + + // run the filter + err = kio.Pipeline{ + Inputs: []kio.Reader{rw}, + Filters: []kio.Filter{kio.FilterAll(filter)}, + Outputs: []kio.Writer{rw}, + }.Execute() + + assert.NoError(t, err) + assert.Equal(t, tc.expected, fieldPaths) + }) + } +} diff --git a/go/internal/forked/api/filters/filtersutil/setters.go b/go/internal/forked/api/filters/filtersutil/setters.go new file mode 100644 index 000000000..85bced9cb --- /dev/null +++ b/go/internal/forked/api/filters/filtersutil/setters.go @@ -0,0 +1,69 @@ +package filtersutil + +import ( + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" +) + +// SetFn is a function that accepts an RNode to possibly modify. +type SetFn func(*yaml.RNode) error + +// SetScalar returns a SetFn to set a scalar value +func SetScalar(value string) SetFn { + return func(node *yaml.RNode) error { + return node.PipeE(yaml.FieldSetter{StringValue: value}) + } +} + +// SetEntry returns a SetFn to set an entry in a map +func SetEntry(key, value, tag string) SetFn { + n := &yaml.Node{ + Kind: yaml.ScalarNode, + Value: value, + Tag: tag, + } + if tag == yaml.NodeTagString && yaml.IsYaml1_1NonString(n) { + n.Style = yaml.DoubleQuotedStyle + } + return func(node *yaml.RNode) error { + return node.PipeE(yaml.FieldSetter{ + Name: key, + Value: yaml.NewRNode(n), + }) + } +} + +type TrackableSetter struct { + // SetValueCallback will be invoked each time a field is set + setValueCallback func(key, value, tag string, node *yaml.RNode) +} + +// WithMutationTracker registers a callback which will be invoked each time a field is mutated +func (s *TrackableSetter) WithMutationTracker(callback func(key, value, tag string, node *yaml.RNode)) { + s.setValueCallback = callback +} + +// SetScalar returns a SetFn to set a scalar value +// if a mutation tracker has been registered, the tracker will be invoked each +// time a scalar is set +func (s TrackableSetter) SetScalar(value string) SetFn { + origSetScalar := SetScalar(value) + return func(node *yaml.RNode) error { + if s.setValueCallback != nil { + s.setValueCallback("", value, "", node) + } + return origSetScalar(node) + } +} + +// SetEntry returns a SetFn to set an entry in a map +// if a mutation tracker has been registered, the tracker will be invoked each +// time an entry is set +func (s TrackableSetter) SetEntry(key, value, tag string) SetFn { + origSetEntry := SetEntry(key, value, tag) + return func(node *yaml.RNode) error { + if s.setValueCallback != nil { + s.setValueCallback(key, value, tag, node) + } + return origSetEntry(node) + } +} diff --git a/go/internal/forked/api/filters/filtersutil/setters.go b/go/internal/forked/api/filters/filtersutil/setters.go new file mode 100644 index 000000000..3748b0b04 --- /dev/null +++ b/go/internal/forked/api/filters/filtersutil/setters.go @@ -0,0 +1,69 @@ +package filtersutil + +import ( + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/yaml" +) + +// SetFn is a function that accepts an RNode to possibly modify. +type SetFn func(*yaml.RNode) error + +// SetScalar returns a SetFn to set a scalar value +func SetScalar(value string) SetFn { + return func(node *yaml.RNode) error { + return node.PipeE(yaml.FieldSetter{StringValue: value}) + } +} + +// SetEntry returns a SetFn to set an entry in a map +func SetEntry(key, value, tag string) SetFn { + n := &yaml.Node{ + Kind: yaml.ScalarNode, + Value: value, + Tag: tag, + } + if tag == yaml.NodeTagString && yaml.IsYaml1_1NonString(n) { + n.Style = yaml.DoubleQuotedStyle + } + return func(node *yaml.RNode) error { + return node.PipeE(yaml.FieldSetter{ + Name: key, + Value: yaml.NewRNode(n), + }) + } +} + +type TrackableSetter struct { + // SetValueCallback will be invoked each time a field is set + setValueCallback func(key, value, tag string, node *yaml.RNode) +} + +// WithMutationTracker registers a callback which will be invoked each time a field is mutated +func (s *TrackableSetter) WithMutationTracker(callback func(key, value, tag string, node *yaml.RNode)) { + s.setValueCallback = callback +} + +// SetScalar returns a SetFn to set a scalar value +// if a mutation tracker has been registered, the tracker will be invoked each +// time a scalar is set +func (s TrackableSetter) SetScalar(value string) SetFn { + origSetScalar := SetScalar(value) + return func(node *yaml.RNode) error { + if s.setValueCallback != nil { + s.setValueCallback("", value, "", node) + } + return origSetScalar(node) + } +} + +// SetEntry returns a SetFn to set an entry in a map +// if a mutation tracker has been registered, the tracker will be invoked each +// time an entry is set +func (s TrackableSetter) SetEntry(key, value, tag string) SetFn { + origSetEntry := SetEntry(key, value, tag) + return func(node *yaml.RNode) error { + if s.setValueCallback != nil { + s.setValueCallback(key, value, tag, node) + } + return origSetEntry(node) + } +} diff --git a/go/internal/forked/api/filters/fsslice/doc.go b/go/internal/forked/api/filters/fsslice/doc.go new file mode 100644 index 000000000..b0f197722 --- /dev/null +++ b/go/internal/forked/api/filters/fsslice/doc.go @@ -0,0 +1,6 @@ +// Copyright 2020 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +// Package fsslice contains a yaml.Filter to modify a resource if +// it matches one or more FieldSpec entries. +package fsslice diff --git a/go/internal/forked/api/filters/fsslice/example_test.go b/go/internal/forked/api/filters/fsslice/example_test.go new file mode 100644 index 000000000..1aabaa915 --- /dev/null +++ b/go/internal/forked/api/filters/fsslice/example_test.go @@ -0,0 +1,63 @@ +// Copyright 2020 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package fsslice_test + +import ( + "bytes" + "log" + "os" + + "sigs.k8s.io/kustomize/api/filters/filtersutil" + "sigs.k8s.io/kustomize/api/filters/fsslice" + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/kio" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" +) + +func ExampleFilter() { + in := &kio.ByteReader{ + Reader: bytes.NewBufferString(` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: instance +--- +apiVersion: example.com/v1 +kind: Bar +metadata: + name: instance +`), + } + fltr := fsslice.Filter{ + CreateKind: yaml.ScalarNode, + SetValue: filtersutil.SetScalar("green"), + FsSlice: []types.FieldSpec{ + {Path: "a/b", CreateIfNotPresent: true}, + }, + } + + err := kio.Pipeline{ + Inputs: []kio.Reader{in}, + Filters: []kio.Filter{kio.FilterAll(fltr)}, + Outputs: []kio.Writer{kio.ByteWriter{Writer: os.Stdout}}, + }.Execute() + if err != nil { + log.Fatal(err) + } + + // Output: + // apiVersion: example.com/v1 + // kind: Foo + // metadata: + // name: instance + // a: + // b: green + // --- + // apiVersion: example.com/v1 + // kind: Bar + // metadata: + // name: instance + // a: + // b: green +} diff --git a/go/internal/forked/api/filters/fsslice/example_test.go b/go/internal/forked/api/filters/fsslice/example_test.go new file mode 100644 index 000000000..a52de6cc7 --- /dev/null +++ b/go/internal/forked/api/filters/fsslice/example_test.go @@ -0,0 +1,63 @@ +// Copyright 2020 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package fsslice_test + +import ( + "bytes" + "log" + "os" + + "sigs.k8s.io/kustomize/api/filters/filtersutil" + "sigs.k8s.io/kustomize/api/filters/fsslice" + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/kio" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/yaml" +) + +func ExampleFilter() { + in := &kio.ByteReader{ + Reader: bytes.NewBufferString(` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: instance +--- +apiVersion: example.com/v1 +kind: Bar +metadata: + name: instance +`), + } + fltr := fsslice.Filter{ + CreateKind: yaml.ScalarNode, + SetValue: filtersutil.SetScalar("green"), + FsSlice: []types.FieldSpec{ + {Path: "a/b", CreateIfNotPresent: true}, + }, + } + + err := kio.Pipeline{ + Inputs: []kio.Reader{in}, + Filters: []kio.Filter{kio.FilterAll(fltr)}, + Outputs: []kio.Writer{kio.ByteWriter{Writer: os.Stdout}}, + }.Execute() + if err != nil { + log.Fatal(err) + } + + // Output: + // apiVersion: example.com/v1 + // kind: Foo + // metadata: + // name: instance + // a: + // b: green + // --- + // apiVersion: example.com/v1 + // kind: Bar + // metadata: + // name: instance + // a: + // b: green +} diff --git a/go/internal/forked/api/filters/fsslice/fsslice.go b/go/internal/forked/api/filters/fsslice/fsslice.go new file mode 100644 index 000000000..a0944bdb6 --- /dev/null +++ b/go/internal/forked/api/filters/fsslice/fsslice.go @@ -0,0 +1,47 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package fsslice + +import ( + "sigs.k8s.io/kustomize/api/filters/fieldspec" + "sigs.k8s.io/kustomize/api/filters/filtersutil" + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" +) + +var _ yaml.Filter = Filter{} + +// Filter ranges over an FsSlice to modify fields on a single object. +// An FsSlice is a range of FieldSpecs. A FieldSpec is a GVK plus a path. +type Filter struct { + // FieldSpecList list of FieldSpecs to set + FsSlice types.FsSlice `yaml:"fsSlice"` + + // SetValue is called on each field that matches one of the FieldSpecs + SetValue filtersutil.SetFn + + // CreateKind is used to create fields that do not exist + CreateKind yaml.Kind + + // CreateTag is used to set the tag if encountering a null field + CreateTag string +} + +func (fltr Filter) Filter(obj *yaml.RNode) (*yaml.RNode, error) { + for i := range fltr.FsSlice { + // apply this FieldSpec + // create a new filter for each iteration because they + // store internal state about the field paths + _, err := (&fieldspec.Filter{ + FieldSpec: fltr.FsSlice[i], + SetValue: fltr.SetValue, + CreateKind: fltr.CreateKind, + CreateTag: fltr.CreateTag, + }).Filter(obj) + if err != nil { + return nil, err + } + } + return obj, nil +} diff --git a/go/internal/forked/api/filters/fsslice/fsslice.go b/go/internal/forked/api/filters/fsslice/fsslice.go new file mode 100644 index 000000000..dbc18861c --- /dev/null +++ b/go/internal/forked/api/filters/fsslice/fsslice.go @@ -0,0 +1,47 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package fsslice + +import ( + "sigs.k8s.io/kustomize/api/filters/fieldspec" + "sigs.k8s.io/kustomize/api/filters/filtersutil" + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/yaml" +) + +var _ yaml.Filter = Filter{} + +// Filter ranges over an FsSlice to modify fields on a single object. +// An FsSlice is a range of FieldSpecs. A FieldSpec is a GVK plus a path. +type Filter struct { + // FieldSpecList list of FieldSpecs to set + FsSlice types.FsSlice `yaml:"fsSlice"` + + // SetValue is called on each field that matches one of the FieldSpecs + SetValue filtersutil.SetFn + + // CreateKind is used to create fields that do not exist + CreateKind yaml.Kind + + // CreateTag is used to set the tag if encountering a null field + CreateTag string +} + +func (fltr Filter) Filter(obj *yaml.RNode) (*yaml.RNode, error) { + for i := range fltr.FsSlice { + // apply this FieldSpec + // create a new filter for each iteration because they + // store internal state about the field paths + _, err := (&fieldspec.Filter{ + FieldSpec: fltr.FsSlice[i], + SetValue: fltr.SetValue, + CreateKind: fltr.CreateKind, + CreateTag: fltr.CreateTag, + }).Filter(obj) + if err != nil { + return nil, err + } + } + return obj, nil +} diff --git a/go/internal/forked/api/filters/fsslice/fsslice_test.go b/go/internal/forked/api/filters/fsslice/fsslice_test.go new file mode 100644 index 000000000..29c35e0ff --- /dev/null +++ b/go/internal/forked/api/filters/fsslice/fsslice_test.go @@ -0,0 +1,121 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package fsslice_test + +import ( + "bytes" + "strings" + "testing" + + "github.com/stretchr/testify/assert" + "sigs.k8s.io/kustomize/api/filters/filtersutil" + "sigs.k8s.io/kustomize/api/filters/fsslice" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/kio" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" +) + +type TestCase struct { + input string + expected string + filter fsslice.Filter + fsSlice string + error string +} + +var tests = map[string]TestCase{ + "empty": { + fsSlice: ` +`, + input: ` +apiVersion: foo/v1 +kind: Bar +`, + expected: ` +apiVersion: foo/v1 +kind: Bar +`, + filter: fsslice.Filter{ + SetValue: filtersutil.SetScalar("e"), + CreateKind: yaml.ScalarNode, + }, + }, + "two": { + fsSlice: ` +- path: a/b + group: foo + version: v1 + create: true + kind: Bar +- path: q/r[]/s/t + group: foo + version: v1 + create: true + kind: Bar +`, + input: ` +apiVersion: foo/v1 +kind: Bar +q: + r: + - s: {} +`, + expected: ` +apiVersion: foo/v1 +kind: Bar +q: + r: + - s: {t: e} +a: + b: e +`, + filter: fsslice.Filter{ + SetValue: filtersutil.SetScalar("e"), + CreateKind: yaml.ScalarNode, + }, + }, +} + +func TestFilter(t *testing.T) { + for name := range tests { + test := tests[name] + t.Run(name, func(t *testing.T) { + err := yaml.Unmarshal([]byte(test.fsSlice), &test.filter.FsSlice) + if !assert.NoError(t, err) { + t.FailNow() + } + + out := &bytes.Buffer{} + rw := &kio.ByteReadWriter{ + Reader: bytes.NewBufferString(test.input), + Writer: out, + OmitReaderAnnotations: true, + } + + // run the filter + err = kio.Pipeline{ + Inputs: []kio.Reader{rw}, + Filters: []kio.Filter{kio.FilterAll(test.filter)}, + Outputs: []kio.Writer{rw}, + }.Execute() + if test.error != "" { + if !assert.EqualError(t, err, test.error) { + t.FailNow() + } + // stop rest of test + return + } + + if !assert.NoError(t, err) { + t.FailNow() + } + + // check results + if !assert.Equal(t, + strings.TrimSpace(test.expected), + strings.TrimSpace(out.String())) { + t.FailNow() + } + }) + } +} diff --git a/go/internal/forked/api/filters/fsslice/fsslice_test.go b/go/internal/forked/api/filters/fsslice/fsslice_test.go new file mode 100644 index 000000000..7e01ff083 --- /dev/null +++ b/go/internal/forked/api/filters/fsslice/fsslice_test.go @@ -0,0 +1,121 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package fsslice_test + +import ( + "bytes" + "strings" + "testing" + + "github.com/stretchr/testify/assert" + "sigs.k8s.io/kustomize/api/filters/filtersutil" + "sigs.k8s.io/kustomize/api/filters/fsslice" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/kio" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/yaml" +) + +type TestCase struct { + input string + expected string + filter fsslice.Filter + fsSlice string + error string +} + +var tests = map[string]TestCase{ + "empty": { + fsSlice: ` +`, + input: ` +apiVersion: foo/v1 +kind: Bar +`, + expected: ` +apiVersion: foo/v1 +kind: Bar +`, + filter: fsslice.Filter{ + SetValue: filtersutil.SetScalar("e"), + CreateKind: yaml.ScalarNode, + }, + }, + "two": { + fsSlice: ` +- path: a/b + group: foo + version: v1 + create: true + kind: Bar +- path: q/r[]/s/t + group: foo + version: v1 + create: true + kind: Bar +`, + input: ` +apiVersion: foo/v1 +kind: Bar +q: + r: + - s: {} +`, + expected: ` +apiVersion: foo/v1 +kind: Bar +q: + r: + - s: {t: e} +a: + b: e +`, + filter: fsslice.Filter{ + SetValue: filtersutil.SetScalar("e"), + CreateKind: yaml.ScalarNode, + }, + }, +} + +func TestFilter(t *testing.T) { + for name := range tests { + test := tests[name] + t.Run(name, func(t *testing.T) { + err := yaml.Unmarshal([]byte(test.fsSlice), &test.filter.FsSlice) + if !assert.NoError(t, err) { + t.FailNow() + } + + out := &bytes.Buffer{} + rw := &kio.ByteReadWriter{ + Reader: bytes.NewBufferString(test.input), + Writer: out, + OmitReaderAnnotations: true, + } + + // run the filter + err = kio.Pipeline{ + Inputs: []kio.Reader{rw}, + Filters: []kio.Filter{kio.FilterAll(test.filter)}, + Outputs: []kio.Writer{rw}, + }.Execute() + if test.error != "" { + if !assert.EqualError(t, err, test.error) { + t.FailNow() + } + // stop rest of test + return + } + + if !assert.NoError(t, err) { + t.FailNow() + } + + // check results + if !assert.Equal(t, + strings.TrimSpace(test.expected), + strings.TrimSpace(out.String())) { + t.FailNow() + } + }) + } +} diff --git a/go/internal/forked/api/filters/iampolicygenerator/doc.go b/go/internal/forked/api/filters/iampolicygenerator/doc.go new file mode 100644 index 000000000..d0ac6d91f --- /dev/null +++ b/go/internal/forked/api/filters/iampolicygenerator/doc.go @@ -0,0 +1,3 @@ +// Package gkesagenerator contains a kio.Filter that that generates a +// iampolicy-related resources for a given cloud provider +package iampolicygenerator diff --git a/go/internal/forked/api/filters/iampolicygenerator/example_test.go b/go/internal/forked/api/filters/iampolicygenerator/example_test.go new file mode 100644 index 000000000..99c692bcc --- /dev/null +++ b/go/internal/forked/api/filters/iampolicygenerator/example_test.go @@ -0,0 +1,46 @@ +// Copyright 2021 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package iampolicygenerator + +import ( + "log" + "os" + + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/kio" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" +) + +func ExampleFilter() { + f := Filter{} + var err = yaml.Unmarshal([]byte(` +cloud: gke +kubernetesService: + namespace: k8s-namespace + name: k8s-sa-name +serviceAccount: + name: gsa-name + projectId: project-id +`), &f) + if err != nil { + log.Fatal(err) + } + + err = kio.Pipeline{ + Inputs: []kio.Reader{}, + Filters: []kio.Filter{f}, + Outputs: []kio.Writer{kio.ByteWriter{Writer: os.Stdout}}, + }.Execute() + if err != nil { + log.Fatal(err) + } + + // Output: + // apiVersion: v1 + // kind: ServiceAccount + // metadata: + // annotations: + // iam.gke.io/gcp-service-account: gsa-name@project-id.iam.gserviceaccount.com + // name: k8s-sa-name + // namespace: k8s-namespace +} diff --git a/go/internal/forked/api/filters/iampolicygenerator/example_test.go b/go/internal/forked/api/filters/iampolicygenerator/example_test.go new file mode 100644 index 000000000..942f2cb39 --- /dev/null +++ b/go/internal/forked/api/filters/iampolicygenerator/example_test.go @@ -0,0 +1,46 @@ +// Copyright 2021 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package iampolicygenerator + +import ( + "log" + "os" + + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/kio" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/yaml" +) + +func ExampleFilter() { + f := Filter{} + var err = yaml.Unmarshal([]byte(` +cloud: gke +kubernetesService: + namespace: k8s-namespace + name: k8s-sa-name +serviceAccount: + name: gsa-name + projectId: project-id +`), &f) + if err != nil { + log.Fatal(err) + } + + err = kio.Pipeline{ + Inputs: []kio.Reader{}, + Filters: []kio.Filter{f}, + Outputs: []kio.Writer{kio.ByteWriter{Writer: os.Stdout}}, + }.Execute() + if err != nil { + log.Fatal(err) + } + + // Output: + // apiVersion: v1 + // kind: ServiceAccount + // metadata: + // annotations: + // iam.gke.io/gcp-service-account: gsa-name@project-id.iam.gserviceaccount.com + // name: k8s-sa-name + // namespace: k8s-namespace +} diff --git a/go/internal/forked/api/filters/iampolicygenerator/iampolicygenerator.go b/go/internal/forked/api/filters/iampolicygenerator/iampolicygenerator.go new file mode 100644 index 000000000..0a28b211e --- /dev/null +++ b/go/internal/forked/api/filters/iampolicygenerator/iampolicygenerator.go @@ -0,0 +1,55 @@ +// Copyright 2021 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package iampolicygenerator + +import ( + "fmt" + + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" +) + +type Filter struct { + IAMPolicyGenerator types.IAMPolicyGeneratorArgs `json:",inline,omitempty" yaml:",inline,omitempty"` +} + +// Filter adds a GKE service account object to nodes +func (f Filter) Filter(nodes []*yaml.RNode) ([]*yaml.RNode, error) { + switch f.IAMPolicyGenerator.Cloud { + case types.GKE: + IAMPolicyResources, err := f.generateGkeIAMPolicyResources() + if err != nil { + return nil, err + } + nodes = append(nodes, IAMPolicyResources...) + default: + return nil, fmt.Errorf("cloud provider %s not supported yet", f.IAMPolicyGenerator.Cloud) + } + return nodes, nil +} + +func (f Filter) generateGkeIAMPolicyResources() ([]*yaml.RNode, error) { + var result []*yaml.RNode + input := fmt.Sprintf(` +apiVersion: v1 +kind: ServiceAccount +metadata: + annotations: + iam.gke.io/gcp-service-account: %s@%s.iam.gserviceaccount.com + name: %s +`, f.IAMPolicyGenerator.ServiceAccount.Name, + f.IAMPolicyGenerator.ProjectId, + f.IAMPolicyGenerator.KubernetesService.Name) + + if f.IAMPolicyGenerator.Namespace != "" { + input = input + fmt.Sprintf("\n namespace: %s", f.IAMPolicyGenerator.Namespace) + } + + sa, err := yaml.Parse(input) + if err != nil { + return nil, err + } + + return append(result, sa), nil +} diff --git a/go/internal/forked/api/filters/iampolicygenerator/iampolicygenerator.go b/go/internal/forked/api/filters/iampolicygenerator/iampolicygenerator.go new file mode 100644 index 000000000..8f52aaaef --- /dev/null +++ b/go/internal/forked/api/filters/iampolicygenerator/iampolicygenerator.go @@ -0,0 +1,55 @@ +// Copyright 2021 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package iampolicygenerator + +import ( + "fmt" + + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/yaml" +) + +type Filter struct { + IAMPolicyGenerator types.IAMPolicyGeneratorArgs `json:",inline,omitempty" yaml:",inline,omitempty"` +} + +// Filter adds a GKE service account object to nodes +func (f Filter) Filter(nodes []*yaml.RNode) ([]*yaml.RNode, error) { + switch f.IAMPolicyGenerator.Cloud { + case types.GKE: + IAMPolicyResources, err := f.generateGkeIAMPolicyResources() + if err != nil { + return nil, err + } + nodes = append(nodes, IAMPolicyResources...) + default: + return nil, fmt.Errorf("cloud provider %s not supported yet", f.IAMPolicyGenerator.Cloud) + } + return nodes, nil +} + +func (f Filter) generateGkeIAMPolicyResources() ([]*yaml.RNode, error) { + var result []*yaml.RNode + input := fmt.Sprintf(` +apiVersion: v1 +kind: ServiceAccount +metadata: + annotations: + iam.gke.io/gcp-service-account: %s@%s.iam.gserviceaccount.com + name: %s +`, f.IAMPolicyGenerator.ServiceAccount.Name, + f.IAMPolicyGenerator.ProjectId, + f.IAMPolicyGenerator.KubernetesService.Name) + + if f.IAMPolicyGenerator.Namespace != "" { + input = input + fmt.Sprintf("\n namespace: %s", f.IAMPolicyGenerator.Namespace) + } + + sa, err := yaml.Parse(input) + if err != nil { + return nil, err + } + + return append(result, sa), nil +} diff --git a/go/internal/forked/api/filters/iampolicygenerator/iampolicygenerator_test.go b/go/internal/forked/api/filters/iampolicygenerator/iampolicygenerator_test.go new file mode 100644 index 000000000..99bcd7bfe --- /dev/null +++ b/go/internal/forked/api/filters/iampolicygenerator/iampolicygenerator_test.go @@ -0,0 +1,75 @@ +// Copyright 2021 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package iampolicygenerator + +import ( + "strings" + "testing" + + "github.com/stretchr/testify/assert" + filtertest "sigs.k8s.io/kustomize/api/testutils/filtertest" + "sigs.k8s.io/kustomize/api/types" +) + +func TestFilter(t *testing.T) { + testCases := map[string]struct { + args types.IAMPolicyGeneratorArgs + expected string + }{ + "with namespace": { + args: types.IAMPolicyGeneratorArgs{ + Cloud: types.GKE, + KubernetesService: types.KubernetesService{ + Namespace: "k8s-namespace", + Name: "k8s-sa-name", + }, + ServiceAccount: types.ServiceAccount{ + Name: "gsa-name", + ProjectId: "project-id", + }, + }, + expected: ` +apiVersion: v1 +kind: ServiceAccount +metadata: + annotations: + iam.gke.io/gcp-service-account: gsa-name@project-id.iam.gserviceaccount.com + name: k8s-sa-name + namespace: k8s-namespace +`, + }, + "without namespace": { + args: types.IAMPolicyGeneratorArgs{ + Cloud: types.GKE, + KubernetesService: types.KubernetesService{ + Name: "k8s-sa-name", + }, + ServiceAccount: types.ServiceAccount{ + Name: "gsa-name", + ProjectId: "project-id", + }, + }, + expected: ` +apiVersion: v1 +kind: ServiceAccount +metadata: + annotations: + iam.gke.io/gcp-service-account: gsa-name@project-id.iam.gserviceaccount.com + name: k8s-sa-name +`, + }, + } + + for tn, tc := range testCases { + t.Run(tn, func(t *testing.T) { + f := Filter{ + IAMPolicyGenerator: tc.args, + } + actual := filtertest.RunFilter(t, "", f) + if !assert.Equal(t, strings.TrimSpace(tc.expected), strings.TrimSpace(actual)) { + t.FailNow() + } + }) + } +} diff --git a/go/internal/forked/api/filters/imagetag/doc.go b/go/internal/forked/api/filters/imagetag/doc.go new file mode 100644 index 000000000..d919491dd --- /dev/null +++ b/go/internal/forked/api/filters/imagetag/doc.go @@ -0,0 +1,12 @@ +// Copyright 2020 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +// Package imagetag contains two kio.Filter implementations to cover the +// functionality of the kustomize imagetag transformer. +// +// Filter updates fields based on a FieldSpec and an ImageTag. +// +// LegacyFilter doesn't use a FieldSpec, and instead only updates image +// references if the field is name image and it is underneath a field called +// either containers or initContainers. +package imagetag diff --git a/go/internal/forked/api/filters/imagetag/example_test.go b/go/internal/forked/api/filters/imagetag/example_test.go new file mode 100644 index 000000000..dd8234475 --- /dev/null +++ b/go/internal/forked/api/filters/imagetag/example_test.go @@ -0,0 +1,126 @@ +// Copyright 2020 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package imagetag + +import ( + "bytes" + "log" + "os" + + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/kio" +) + +func ExampleFilter() { + err := kio.Pipeline{ + Inputs: []kio.Reader{&kio.ByteReader{Reader: bytes.NewBufferString(` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: instance +spec: + containers: + - name: FooBar + image: nginx +--- +apiVersion: example.com/v1 +kind: Bar +metadata: + name: instance +spec: + containers: + - name: BarFoo + image: nginx:1.2.1 +`)}}, + Filters: []kio.Filter{Filter{ + ImageTag: types.Image{ + Name: "nginx", + NewName: "apache", + Digest: "12345", + }, + FsSlice: []types.FieldSpec{ + { + Path: "spec/containers[]/image", + }, + }, + }}, + Outputs: []kio.Writer{kio.ByteWriter{Writer: os.Stdout}}, + }.Execute() + if err != nil { + log.Fatal(err) + } + + // Output: + // apiVersion: example.com/v1 + // kind: Foo + // metadata: + // name: instance + // spec: + // containers: + // - name: FooBar + // image: apache@12345 + // --- + // apiVersion: example.com/v1 + // kind: Bar + // metadata: + // name: instance + // spec: + // containers: + // - name: BarFoo + // image: apache@12345 +} + +func ExampleLegacyFilter() { + err := kio.Pipeline{ + Inputs: []kio.Reader{&kio.ByteReader{Reader: bytes.NewBufferString(` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: instance +spec: + containers: + - name: FooBar + image: nginx +--- +apiVersion: example.com/v1 +kind: Bar +metadata: + name: instance +spec: + containers: + - name: BarFoo + image: nginx:1.2.1 +`)}}, + Filters: []kio.Filter{LegacyFilter{ + ImageTag: types.Image{ + Name: "nginx", + NewName: "apache", + Digest: "12345", + }, + }}, + Outputs: []kio.Writer{kio.ByteWriter{Writer: os.Stdout}}, + }.Execute() + if err != nil { + log.Fatal(err) + } + + // Output: + // apiVersion: example.com/v1 + // kind: Foo + // metadata: + // name: instance + // spec: + // containers: + // - name: FooBar + // image: apache@12345 + // --- + // apiVersion: example.com/v1 + // kind: Bar + // metadata: + // name: instance + // spec: + // containers: + // - name: BarFoo + // image: apache@12345 +} diff --git a/go/internal/forked/api/filters/imagetag/example_test.go b/go/internal/forked/api/filters/imagetag/example_test.go new file mode 100644 index 000000000..94cbf5495 --- /dev/null +++ b/go/internal/forked/api/filters/imagetag/example_test.go @@ -0,0 +1,126 @@ +// Copyright 2020 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package imagetag + +import ( + "bytes" + "log" + "os" + + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/kio" +) + +func ExampleFilter() { + err := kio.Pipeline{ + Inputs: []kio.Reader{&kio.ByteReader{Reader: bytes.NewBufferString(` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: instance +spec: + containers: + - name: FooBar + image: nginx +--- +apiVersion: example.com/v1 +kind: Bar +metadata: + name: instance +spec: + containers: + - name: BarFoo + image: nginx:1.2.1 +`)}}, + Filters: []kio.Filter{Filter{ + ImageTag: types.Image{ + Name: "nginx", + NewName: "apache", + Digest: "12345", + }, + FsSlice: []types.FieldSpec{ + { + Path: "spec/containers[]/image", + }, + }, + }}, + Outputs: []kio.Writer{kio.ByteWriter{Writer: os.Stdout}}, + }.Execute() + if err != nil { + log.Fatal(err) + } + + // Output: + // apiVersion: example.com/v1 + // kind: Foo + // metadata: + // name: instance + // spec: + // containers: + // - name: FooBar + // image: apache@12345 + // --- + // apiVersion: example.com/v1 + // kind: Bar + // metadata: + // name: instance + // spec: + // containers: + // - name: BarFoo + // image: apache@12345 +} + +func ExampleLegacyFilter() { + err := kio.Pipeline{ + Inputs: []kio.Reader{&kio.ByteReader{Reader: bytes.NewBufferString(` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: instance +spec: + containers: + - name: FooBar + image: nginx +--- +apiVersion: example.com/v1 +kind: Bar +metadata: + name: instance +spec: + containers: + - name: BarFoo + image: nginx:1.2.1 +`)}}, + Filters: []kio.Filter{LegacyFilter{ + ImageTag: types.Image{ + Name: "nginx", + NewName: "apache", + Digest: "12345", + }, + }}, + Outputs: []kio.Writer{kio.ByteWriter{Writer: os.Stdout}}, + }.Execute() + if err != nil { + log.Fatal(err) + } + + // Output: + // apiVersion: example.com/v1 + // kind: Foo + // metadata: + // name: instance + // spec: + // containers: + // - name: FooBar + // image: apache@12345 + // --- + // apiVersion: example.com/v1 + // kind: Bar + // metadata: + // name: instance + // spec: + // containers: + // - name: BarFoo + // image: apache@12345 +} diff --git a/go/internal/forked/api/filters/imagetag/imagetag.go b/go/internal/forked/api/filters/imagetag/imagetag.go new file mode 100644 index 000000000..991517503 --- /dev/null +++ b/go/internal/forked/api/filters/imagetag/imagetag.go @@ -0,0 +1,72 @@ +// Copyright 2020 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package imagetag + +import ( + "sigs.k8s.io/kustomize/api/filters/filtersutil" + "sigs.k8s.io/kustomize/api/filters/fsslice" + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/kio" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" +) + +// Filter modifies an "image tag", the value used to specify the +// name, tag, version digest etc. of (docker) container images +// used by a pod template. +type Filter struct { + // imageTag is the tag we want to apply to the inputs + // The name of the image is used as a key, and other fields + // can specify a new name, tag, etc. + ImageTag types.Image `json:"imageTag,omitempty" yaml:"imageTag,omitempty"` + + // FsSlice contains the FieldSpecs to locate an image field, + // e.g. Path: "spec/myContainers[]/image" + FsSlice types.FsSlice `json:"fieldSpecs,omitempty" yaml:"fieldSpecs,omitempty"` + + trackableSetter filtersutil.TrackableSetter +} + +var _ kio.Filter = Filter{} +var _ kio.TrackableFilter = &Filter{} + +// WithMutationTracker registers a callback which will be invoked each time a field is mutated +func (f *Filter) WithMutationTracker(callback func(key, value, tag string, node *yaml.RNode)) { + f.trackableSetter.WithMutationTracker(callback) +} + +func (f Filter) Filter(nodes []*yaml.RNode) ([]*yaml.RNode, error) { + _, err := kio.FilterAll(yaml.FilterFunc(f.filter)).Filter(nodes) + return nodes, err +} + +func (f Filter) filter(node *yaml.RNode) (*yaml.RNode, error) { + // FsSlice is an allowlist, not a denyList, so to deny + // something via configuration a new config mechanism is + // needed. Until then, hardcode it. + if f.isOnDenyList(node) { + return node, nil + } + if err := node.PipeE(fsslice.Filter{ + FsSlice: f.FsSlice, + SetValue: imageTagUpdater{ + ImageTag: f.ImageTag, + trackableSetter: f.trackableSetter, + }.SetImageValue, + }); err != nil { + return nil, err + } + return node, nil +} + +func (f Filter) isOnDenyList(node *yaml.RNode) bool { + meta, err := node.GetMeta() + if err != nil { + // A missing 'meta' field will cause problems elsewhere; + // ignore it here to keep the signature simple. + return false + } + // Ignore CRDs + // https://github.com/kubernetes-sigs/kustomize/issues/890 + return meta.Kind == `CustomResourceDefinition` +} diff --git a/go/internal/forked/api/filters/imagetag/imagetag.go b/go/internal/forked/api/filters/imagetag/imagetag.go new file mode 100644 index 000000000..3649ebdb0 --- /dev/null +++ b/go/internal/forked/api/filters/imagetag/imagetag.go @@ -0,0 +1,72 @@ +// Copyright 2020 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package imagetag + +import ( + "sigs.k8s.io/kustomize/api/filters/filtersutil" + "sigs.k8s.io/kustomize/api/filters/fsslice" + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/kio" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/yaml" +) + +// Filter modifies an "image tag", the value used to specify the +// name, tag, version digest etc. of (docker) container images +// used by a pod template. +type Filter struct { + // imageTag is the tag we want to apply to the inputs + // The name of the image is used as a key, and other fields + // can specify a new name, tag, etc. + ImageTag types.Image `json:"imageTag,omitempty" yaml:"imageTag,omitempty"` + + // FsSlice contains the FieldSpecs to locate an image field, + // e.g. Path: "spec/myContainers[]/image" + FsSlice types.FsSlice `json:"fieldSpecs,omitempty" yaml:"fieldSpecs,omitempty"` + + trackableSetter filtersutil.TrackableSetter +} + +var _ kio.Filter = Filter{} +var _ kio.TrackableFilter = &Filter{} + +// WithMutationTracker registers a callback which will be invoked each time a field is mutated +func (f *Filter) WithMutationTracker(callback func(key, value, tag string, node *yaml.RNode)) { + f.trackableSetter.WithMutationTracker(callback) +} + +func (f Filter) Filter(nodes []*yaml.RNode) ([]*yaml.RNode, error) { + _, err := kio.FilterAll(yaml.FilterFunc(f.filter)).Filter(nodes) + return nodes, err +} + +func (f Filter) filter(node *yaml.RNode) (*yaml.RNode, error) { + // FsSlice is an allowlist, not a denyList, so to deny + // something via configuration a new config mechanism is + // needed. Until then, hardcode it. + if f.isOnDenyList(node) { + return node, nil + } + if err := node.PipeE(fsslice.Filter{ + FsSlice: f.FsSlice, + SetValue: imageTagUpdater{ + ImageTag: f.ImageTag, + trackableSetter: f.trackableSetter, + }.SetImageValue, + }); err != nil { + return nil, err + } + return node, nil +} + +func (f Filter) isOnDenyList(node *yaml.RNode) bool { + meta, err := node.GetMeta() + if err != nil { + // A missing 'meta' field will cause problems elsewhere; + // ignore it here to keep the signature simple. + return false + } + // Ignore CRDs + // https://github.com/kubernetes-sigs/kustomize/issues/890 + return meta.Kind == `CustomResourceDefinition` +} diff --git a/go/internal/forked/api/filters/imagetag/imagetag_test.go b/go/internal/forked/api/filters/imagetag/imagetag_test.go new file mode 100644 index 000000000..0b0c4cabe --- /dev/null +++ b/go/internal/forked/api/filters/imagetag/imagetag_test.go @@ -0,0 +1,786 @@ +// Copyright 2020 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package imagetag + +import ( + "strings" + "testing" + + "github.com/stretchr/testify/assert" + filtertest "sigs.k8s.io/kustomize/api/testutils/filtertest" + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" +) + +type setValueArg struct { + Key string + Value string + Tag string + PrevValue string +} + +var setValueArgs []setValueArg + +func setValueCallbackStub(key, value, tag string, node *yaml.RNode) { + setValueArgs = append(setValueArgs, setValueArg{ + Key: key, + Value: value, + Tag: tag, + PrevValue: node.YNode().Value, + }) +} + +func TestImageTagUpdater_Filter(t *testing.T) { + testCases := map[string]struct { + input string + expectedOutput string + filter Filter + fsSlice types.FsSlice + setValueCallback func(key, value, tag string, node *yaml.RNode) + expectedSetValueArgs []setValueArg + }{ + "ignore CustomResourceDefinition": { + input: ` +apiVersion: apiextensions.k8s.io/v1 +kind: CustomResourceDefinition +metadata: + name: whatever +spec: + containers: + - image: whatever +`, + expectedOutput: ` +apiVersion: apiextensions.k8s.io/v1 +kind: CustomResourceDefinition +metadata: + name: whatever +spec: + containers: + - image: whatever +`, + filter: Filter{ + ImageTag: types.Image{ + Name: "whatever", + NewName: "theImageShouldNotChangeInACrd", + }, + }, + fsSlice: []types.FieldSpec{ + { + Path: "spec/containers/image", + }, + }, + }, + + "legacy multiple images in containers": { + input: ` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: instance +spec: + containers: + - image: nginx:1.2.1 + - image: nginx:2.1.2 +`, + expectedOutput: ` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: instance +spec: + containers: + - image: apache@12345 + - image: apache@12345 +`, + filter: Filter{ + ImageTag: types.Image{ + Name: "nginx", + NewName: "apache", + Digest: "12345", + }, + }, + fsSlice: []types.FieldSpec{ + { + Path: "spec/containers/image", + }, + }, + }, + "legacy both containers and initContainers": { + input: ` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: instance +spec: + containers: + - image: nginx:1.2.1 + - image: tomcat:1.2.3 + initContainers: + - image: nginx:1.2.1 + - image: apache:1.2.3 +`, + expectedOutput: ` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: instance +spec: + containers: + - image: apache:3.2.1 + - image: tomcat:1.2.3 + initContainers: + - image: apache:3.2.1 + - image: apache:1.2.3 +`, + filter: Filter{ + ImageTag: types.Image{ + Name: "nginx", + NewName: "apache", + NewTag: "3.2.1", + }, + }, + fsSlice: []types.FieldSpec{ + { + Path: "spec/containers/image", + }, + { + Path: "spec/initContainers/image", + }, + }, + }, + "legacy updates at multiple depths": { + input: ` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: instance +spec: + containers: + - image: nginx:1.2.1 + - image: tomcat:1.2.3 + template: + spec: + initContainers: + - image: nginx:1.2.1 + - image: apache:1.2.3 +`, + expectedOutput: ` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: instance +spec: + containers: + - image: apache:3.2.1 + - image: tomcat:1.2.3 + template: + spec: + initContainers: + - image: apache:3.2.1 + - image: apache:1.2.3 +`, + filter: Filter{ + ImageTag: types.Image{ + Name: "nginx", + NewName: "apache", + NewTag: "3.2.1", + }, + }, + fsSlice: []types.FieldSpec{ + { + Path: "spec/containers/image", + }, + { + Path: "spec/template/spec/initContainers/image", + }, + }, + }, + "update with digest": { + input: ` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: instance +spec: + image: nginx:1.2.1 +`, + expectedOutput: ` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: instance +spec: + image: apache@12345 +`, + filter: Filter{ + ImageTag: types.Image{ + Name: "nginx", + NewName: "apache", + Digest: "12345", + }, + }, + fsSlice: []types.FieldSpec{ + { + Path: "spec/image", + }, + }, + }, + + "multiple matches in sequence": { + input: ` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: instance +spec: + containers: + - image: nginx:1.2.1 + - image: not_nginx@54321 + - image: nginx:1.2.1 +`, + expectedOutput: ` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: instance +spec: + containers: + - image: apache:3.2.1 + - image: not_nginx@54321 + - image: apache:3.2.1 +`, + filter: Filter{ + ImageTag: types.Image{ + Name: "nginx", + NewName: "apache", + NewTag: "3.2.1", + }, + }, + fsSlice: []types.FieldSpec{ + { + Path: "spec/containers/image", + }, + }, + }, + + "new Tag": { + input: ` +group: apps +apiVersion: v1 +kind: Deployment +metadata: + name: deploy1 +spec: + template: + spec: + containers: + - image: nginx:1.7.9 + name: nginx-tagged + - image: nginx:latest + name: nginx-latest + - image: foobar:1 + name: replaced-with-digest + - image: postgres:1.8.0 + name: postgresdb + initContainers: + - image: nginx + name: nginx-notag + - image: nginx@sha256:111111111111111111 + name: nginx-sha256 + - image: alpine:1.8.0 + name: init-alpine`, + expectedOutput: ` +group: apps +apiVersion: v1 +kind: Deployment +metadata: + name: deploy1 +spec: + template: + spec: + containers: + - image: nginx:v2 + name: nginx-tagged + - image: nginx:v2 + name: nginx-latest + - image: foobar:1 + name: replaced-with-digest + - image: postgres:1.8.0 + name: postgresdb + initContainers: + - image: nginx:v2 + name: nginx-notag + - image: nginx:v2 + name: nginx-sha256 + - image: alpine:1.8.0 + name: init-alpine +`, + filter: Filter{ + ImageTag: types.Image{ + Name: "nginx", + NewTag: "v2", + }, + }, + fsSlice: []types.FieldSpec{ + { + Path: "spec/template/spec/containers[]/image", + }, + { + Path: "spec/template/spec/initContainers[]/image", + }, + }, + }, + "newImage": { + input: ` +group: apps +apiVersion: v1 +kind: Deployment +metadata: + name: deploy1 +spec: + template: + spec: + containers: + - image: nginx:1.7.9 + name: nginx-tagged + - image: nginx:latest + name: nginx-latest + - image: foobar:1 + name: replaced-with-digest + - image: postgres:1.8.0 + name: postgresdb + initContainers: + - image: nginx + name: nginx-notag + - image: nginx@sha256:111111111111111111 + name: nginx-sha256 + - image: alpine:1.8.0 + name: init-alpine +`, + expectedOutput: ` +group: apps +apiVersion: v1 +kind: Deployment +metadata: + name: deploy1 +spec: + template: + spec: + containers: + - image: busybox:1.7.9 + name: nginx-tagged + - image: busybox:latest + name: nginx-latest + - image: foobar:1 + name: replaced-with-digest + - image: postgres:1.8.0 + name: postgresdb + initContainers: + - image: busybox + name: nginx-notag + - image: busybox@sha256:111111111111111111 + name: nginx-sha256 + - image: alpine:1.8.0 + name: init-alpine +`, + filter: Filter{ + ImageTag: types.Image{ + Name: "nginx", + NewName: "busybox", + }, + }, + fsSlice: []types.FieldSpec{ + { + Path: "spec/template/spec/containers[]/image", + }, + { + Path: "spec/template/spec/initContainers[]/image", + }, + }, + }, + "newImageAndTag": { + input: ` +group: apps +apiVersion: v1 +kind: Deployment +metadata: + name: deploy1 +spec: + template: + spec: + containers: + - image: nginx:1.7.9 + name: nginx-tagged + - image: nginx:latest + name: nginx-latest + - image: foobar:1 + name: replaced-with-digest + - image: postgres:1.8.0 + name: postgresdb + initContainers: + - image: nginx + name: nginx-notag + - image: nginx@sha256:111111111111111111 + name: nginx-sha256 + - image: alpine:1.8.0 + name: init-alpine +`, + expectedOutput: ` +group: apps +apiVersion: v1 +kind: Deployment +metadata: + name: deploy1 +spec: + template: + spec: + containers: + - image: busybox:v3 + name: nginx-tagged + - image: busybox:v3 + name: nginx-latest + - image: foobar:1 + name: replaced-with-digest + - image: postgres:1.8.0 + name: postgresdb + initContainers: + - image: busybox:v3 + name: nginx-notag + - image: busybox:v3 + name: nginx-sha256 + - image: alpine:1.8.0 + name: init-alpine +`, + filter: Filter{ + ImageTag: types.Image{ + Name: "nginx", + NewName: "busybox", + NewTag: "v3", + }, + }, + fsSlice: []types.FieldSpec{ + { + Path: "spec/template/spec/containers[]/image", + }, + { + Path: "spec/template/spec/initContainers[]/image", + }, + }, + }, + "newDigest": { + input: ` +group: apps +apiVersion: v1 +kind: Deployment +metadata: + name: deploy1 +spec: + template: + spec: + containers: + - image: nginx:1.7.9 + name: nginx-tagged + - image: nginx:latest + name: nginx-latest + - image: foobar:1 + name: replaced-with-digest + - image: postgres:1.8.0 + name: postgresdb + initContainers: + - image: nginx + name: nginx-notag + - image: nginx@sha256:111111111111111111 + name: nginx-sha256 + - image: alpine:1.8.0 + name: init-alpine +`, + expectedOutput: ` +group: apps +apiVersion: v1 +kind: Deployment +metadata: + name: deploy1 +spec: + template: + spec: + containers: + - image: nginx@sha256:222222222222222222 + name: nginx-tagged + - image: nginx@sha256:222222222222222222 + name: nginx-latest + - image: foobar:1 + name: replaced-with-digest + - image: postgres:1.8.0 + name: postgresdb + initContainers: + - image: nginx@sha256:222222222222222222 + name: nginx-notag + - image: nginx@sha256:222222222222222222 + name: nginx-sha256 + - image: alpine:1.8.0 + name: init-alpine +`, + filter: Filter{ + ImageTag: types.Image{ + Name: "nginx", + Digest: "sha256:222222222222222222", + }, + }, + fsSlice: []types.FieldSpec{ + { + Path: "spec/template/spec/containers/image", + }, + { + Path: "spec/template/spec/initContainers/image", + }, + }, + }, + "newImageAndDigest": { + input: ` +group: apps +apiVersion: v1 +kind: Deployment +metadata: + name: deploy1 +spec: + template: + spec: + containers: + - image: nginx:1.7.9 + name: nginx-tagged + - image: nginx:latest + name: nginx-latest + - image: foobar:1 + name: replaced-with-digest + - image: postgres:1.8.0 + name: postgresdb + initContainers: + - image: nginx + name: nginx-notag + - image: nginx@sha256:111111111111111111 + name: nginx-sha256 + - image: alpine:1.8.0 + name: init-alpine +`, + expectedOutput: ` +group: apps +apiVersion: v1 +kind: Deployment +metadata: + name: deploy1 +spec: + template: + spec: + containers: + - image: busybox@sha256:222222222222222222 + name: nginx-tagged + - image: busybox@sha256:222222222222222222 + name: nginx-latest + - image: foobar:1 + name: replaced-with-digest + - image: postgres:1.8.0 + name: postgresdb + initContainers: + - image: busybox@sha256:222222222222222222 + name: nginx-notag + - image: busybox@sha256:222222222222222222 + name: nginx-sha256 + - image: alpine:1.8.0 + name: init-alpine +`, + filter: Filter{ + ImageTag: types.Image{ + Name: "nginx", + NewName: "busybox", + Digest: "sha256:222222222222222222", + }, + }, + fsSlice: []types.FieldSpec{ + { + Path: "spec/template/spec/containers[]/image", + }, + { + Path: "spec/template/spec/initContainers[]/image", + }, + }, + }, + "emptyContainers": { + input: ` +group: apps +apiVersion: v1 +kind: Deployment +metadata: + name: deploy1 +spec: + containers: +`, + expectedOutput: ` +group: apps +apiVersion: v1 +kind: Deployment +metadata: + name: deploy1 +spec: + containers: [] +`, + filter: Filter{ + ImageTag: types.Image{ + Name: "nginx", + NewTag: "v2", + }, + }, + fsSlice: []types.FieldSpec{ + { + Path: "spec/containers[]/image", + // CreateIfNotPresent: true, + }, + }, + }, + "tagWithBraces": { + input: ` +group: apps +apiVersion: v1 +kind: Deployment +metadata: + name: deploy1 +spec: + template: + spec: + containers: + - image: some.registry.io/my-image:{GENERATED_TAG} + name: my-image +`, + expectedOutput: ` +group: apps +apiVersion: v1 +kind: Deployment +metadata: + name: deploy1 +spec: + template: + spec: + containers: + - image: some.registry.io/my-image:my-fixed-tag + name: my-image +`, + filter: Filter{ + ImageTag: types.Image{ + Name: "some.registry.io/my-image", + NewTag: "my-fixed-tag", + }, + }, + fsSlice: []types.FieldSpec{ + { + Path: "spec/template/spec/containers[]/image", + }, + { + Path: "spec/template/spec/initContainers[]/image", + }, + }, + }, + "mutation tracker": { + input: ` +group: apps +apiVersion: v1 +kind: Deployment +metadata: + name: deploy1 +spec: + template: + spec: + containers: + - image: nginx:1.7.9 + name: nginx-tagged + - image: nginx:latest + name: nginx-latest + - image: foobar:1 + name: replaced-with-digest + - image: postgres:1.8.0 + name: postgresdb + initContainers: + - image: nginx + name: nginx-notag + - image: nginx@sha256:111111111111111111 + name: nginx-sha256 + - image: alpine:1.8.0 + name: init-alpine +`, + expectedOutput: ` +group: apps +apiVersion: v1 +kind: Deployment +metadata: + name: deploy1 +spec: + template: + spec: + containers: + - image: busybox:v3 + name: nginx-tagged + - image: busybox:v3 + name: nginx-latest + - image: foobar:1 + name: replaced-with-digest + - image: postgres:1.8.0 + name: postgresdb + initContainers: + - image: busybox:v3 + name: nginx-notag + - image: busybox:v3 + name: nginx-sha256 + - image: alpine:1.8.0 + name: init-alpine +`, + filter: Filter{ + ImageTag: types.Image{ + Name: "nginx", + NewName: "busybox", + NewTag: "v3", + }, + }, + fsSlice: []types.FieldSpec{ + { + Path: "spec/template/spec/containers[]/image", + }, + { + Path: "spec/template/spec/initContainers[]/image", + }, + }, + setValueCallback: setValueCallbackStub, + expectedSetValueArgs: []setValueArg{ + { + Value: "busybox:v3", + PrevValue: "nginx:1.7.9", + }, + { + Value: "busybox:v3", + PrevValue: "nginx:latest", + }, + { + Value: "busybox:v3", + PrevValue: "nginx", + }, + { + Value: "busybox:v3", + PrevValue: "nginx@sha256:111111111111111111", + }, + }, + }, + } + + for tn, tc := range testCases { + setValueArgs = nil + t.Run(tn, func(t *testing.T) { + filter := tc.filter + filter.WithMutationTracker(tc.setValueCallback) + filter.FsSlice = tc.fsSlice + if !assert.Equal(t, + strings.TrimSpace(tc.expectedOutput), + strings.TrimSpace(filtertest.RunFilter(t, tc.input, filter))) { + t.FailNow() + } + assert.Equal(t, tc.expectedSetValueArgs, setValueArgs) + }) + } +} diff --git a/go/internal/forked/api/filters/imagetag/imagetag_test.go b/go/internal/forked/api/filters/imagetag/imagetag_test.go new file mode 100644 index 000000000..38ab235b9 --- /dev/null +++ b/go/internal/forked/api/filters/imagetag/imagetag_test.go @@ -0,0 +1,786 @@ +// Copyright 2020 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package imagetag + +import ( + "strings" + "testing" + + "github.com/stretchr/testify/assert" + filtertest "sigs.k8s.io/kustomize/api/testutils/filtertest" + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/yaml" +) + +type setValueArg struct { + Key string + Value string + Tag string + PrevValue string +} + +var setValueArgs []setValueArg + +func setValueCallbackStub(key, value, tag string, node *yaml.RNode) { + setValueArgs = append(setValueArgs, setValueArg{ + Key: key, + Value: value, + Tag: tag, + PrevValue: node.YNode().Value, + }) +} + +func TestImageTagUpdater_Filter(t *testing.T) { + testCases := map[string]struct { + input string + expectedOutput string + filter Filter + fsSlice types.FsSlice + setValueCallback func(key, value, tag string, node *yaml.RNode) + expectedSetValueArgs []setValueArg + }{ + "ignore CustomResourceDefinition": { + input: ` +apiVersion: apiextensions.k8s.io/v1 +kind: CustomResourceDefinition +metadata: + name: whatever +spec: + containers: + - image: whatever +`, + expectedOutput: ` +apiVersion: apiextensions.k8s.io/v1 +kind: CustomResourceDefinition +metadata: + name: whatever +spec: + containers: + - image: whatever +`, + filter: Filter{ + ImageTag: types.Image{ + Name: "whatever", + NewName: "theImageShouldNotChangeInACrd", + }, + }, + fsSlice: []types.FieldSpec{ + { + Path: "spec/containers/image", + }, + }, + }, + + "legacy multiple images in containers": { + input: ` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: instance +spec: + containers: + - image: nginx:1.2.1 + - image: nginx:2.1.2 +`, + expectedOutput: ` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: instance +spec: + containers: + - image: apache@12345 + - image: apache@12345 +`, + filter: Filter{ + ImageTag: types.Image{ + Name: "nginx", + NewName: "apache", + Digest: "12345", + }, + }, + fsSlice: []types.FieldSpec{ + { + Path: "spec/containers/image", + }, + }, + }, + "legacy both containers and initContainers": { + input: ` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: instance +spec: + containers: + - image: nginx:1.2.1 + - image: tomcat:1.2.3 + initContainers: + - image: nginx:1.2.1 + - image: apache:1.2.3 +`, + expectedOutput: ` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: instance +spec: + containers: + - image: apache:3.2.1 + - image: tomcat:1.2.3 + initContainers: + - image: apache:3.2.1 + - image: apache:1.2.3 +`, + filter: Filter{ + ImageTag: types.Image{ + Name: "nginx", + NewName: "apache", + NewTag: "3.2.1", + }, + }, + fsSlice: []types.FieldSpec{ + { + Path: "spec/containers/image", + }, + { + Path: "spec/initContainers/image", + }, + }, + }, + "legacy updates at multiple depths": { + input: ` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: instance +spec: + containers: + - image: nginx:1.2.1 + - image: tomcat:1.2.3 + template: + spec: + initContainers: + - image: nginx:1.2.1 + - image: apache:1.2.3 +`, + expectedOutput: ` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: instance +spec: + containers: + - image: apache:3.2.1 + - image: tomcat:1.2.3 + template: + spec: + initContainers: + - image: apache:3.2.1 + - image: apache:1.2.3 +`, + filter: Filter{ + ImageTag: types.Image{ + Name: "nginx", + NewName: "apache", + NewTag: "3.2.1", + }, + }, + fsSlice: []types.FieldSpec{ + { + Path: "spec/containers/image", + }, + { + Path: "spec/template/spec/initContainers/image", + }, + }, + }, + "update with digest": { + input: ` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: instance +spec: + image: nginx:1.2.1 +`, + expectedOutput: ` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: instance +spec: + image: apache@12345 +`, + filter: Filter{ + ImageTag: types.Image{ + Name: "nginx", + NewName: "apache", + Digest: "12345", + }, + }, + fsSlice: []types.FieldSpec{ + { + Path: "spec/image", + }, + }, + }, + + "multiple matches in sequence": { + input: ` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: instance +spec: + containers: + - image: nginx:1.2.1 + - image: not_nginx@54321 + - image: nginx:1.2.1 +`, + expectedOutput: ` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: instance +spec: + containers: + - image: apache:3.2.1 + - image: not_nginx@54321 + - image: apache:3.2.1 +`, + filter: Filter{ + ImageTag: types.Image{ + Name: "nginx", + NewName: "apache", + NewTag: "3.2.1", + }, + }, + fsSlice: []types.FieldSpec{ + { + Path: "spec/containers/image", + }, + }, + }, + + "new Tag": { + input: ` +group: apps +apiVersion: v1 +kind: Deployment +metadata: + name: deploy1 +spec: + template: + spec: + containers: + - image: nginx:1.7.9 + name: nginx-tagged + - image: nginx:latest + name: nginx-latest + - image: foobar:1 + name: replaced-with-digest + - image: postgres:1.8.0 + name: postgresdb + initContainers: + - image: nginx + name: nginx-notag + - image: nginx@sha256:111111111111111111 + name: nginx-sha256 + - image: alpine:1.8.0 + name: init-alpine`, + expectedOutput: ` +group: apps +apiVersion: v1 +kind: Deployment +metadata: + name: deploy1 +spec: + template: + spec: + containers: + - image: nginx:v2 + name: nginx-tagged + - image: nginx:v2 + name: nginx-latest + - image: foobar:1 + name: replaced-with-digest + - image: postgres:1.8.0 + name: postgresdb + initContainers: + - image: nginx:v2 + name: nginx-notag + - image: nginx:v2 + name: nginx-sha256 + - image: alpine:1.8.0 + name: init-alpine +`, + filter: Filter{ + ImageTag: types.Image{ + Name: "nginx", + NewTag: "v2", + }, + }, + fsSlice: []types.FieldSpec{ + { + Path: "spec/template/spec/containers[]/image", + }, + { + Path: "spec/template/spec/initContainers[]/image", + }, + }, + }, + "newImage": { + input: ` +group: apps +apiVersion: v1 +kind: Deployment +metadata: + name: deploy1 +spec: + template: + spec: + containers: + - image: nginx:1.7.9 + name: nginx-tagged + - image: nginx:latest + name: nginx-latest + - image: foobar:1 + name: replaced-with-digest + - image: postgres:1.8.0 + name: postgresdb + initContainers: + - image: nginx + name: nginx-notag + - image: nginx@sha256:111111111111111111 + name: nginx-sha256 + - image: alpine:1.8.0 + name: init-alpine +`, + expectedOutput: ` +group: apps +apiVersion: v1 +kind: Deployment +metadata: + name: deploy1 +spec: + template: + spec: + containers: + - image: busybox:1.7.9 + name: nginx-tagged + - image: busybox:latest + name: nginx-latest + - image: foobar:1 + name: replaced-with-digest + - image: postgres:1.8.0 + name: postgresdb + initContainers: + - image: busybox + name: nginx-notag + - image: busybox@sha256:111111111111111111 + name: nginx-sha256 + - image: alpine:1.8.0 + name: init-alpine +`, + filter: Filter{ + ImageTag: types.Image{ + Name: "nginx", + NewName: "busybox", + }, + }, + fsSlice: []types.FieldSpec{ + { + Path: "spec/template/spec/containers[]/image", + }, + { + Path: "spec/template/spec/initContainers[]/image", + }, + }, + }, + "newImageAndTag": { + input: ` +group: apps +apiVersion: v1 +kind: Deployment +metadata: + name: deploy1 +spec: + template: + spec: + containers: + - image: nginx:1.7.9 + name: nginx-tagged + - image: nginx:latest + name: nginx-latest + - image: foobar:1 + name: replaced-with-digest + - image: postgres:1.8.0 + name: postgresdb + initContainers: + - image: nginx + name: nginx-notag + - image: nginx@sha256:111111111111111111 + name: nginx-sha256 + - image: alpine:1.8.0 + name: init-alpine +`, + expectedOutput: ` +group: apps +apiVersion: v1 +kind: Deployment +metadata: + name: deploy1 +spec: + template: + spec: + containers: + - image: busybox:v3 + name: nginx-tagged + - image: busybox:v3 + name: nginx-latest + - image: foobar:1 + name: replaced-with-digest + - image: postgres:1.8.0 + name: postgresdb + initContainers: + - image: busybox:v3 + name: nginx-notag + - image: busybox:v3 + name: nginx-sha256 + - image: alpine:1.8.0 + name: init-alpine +`, + filter: Filter{ + ImageTag: types.Image{ + Name: "nginx", + NewName: "busybox", + NewTag: "v3", + }, + }, + fsSlice: []types.FieldSpec{ + { + Path: "spec/template/spec/containers[]/image", + }, + { + Path: "spec/template/spec/initContainers[]/image", + }, + }, + }, + "newDigest": { + input: ` +group: apps +apiVersion: v1 +kind: Deployment +metadata: + name: deploy1 +spec: + template: + spec: + containers: + - image: nginx:1.7.9 + name: nginx-tagged + - image: nginx:latest + name: nginx-latest + - image: foobar:1 + name: replaced-with-digest + - image: postgres:1.8.0 + name: postgresdb + initContainers: + - image: nginx + name: nginx-notag + - image: nginx@sha256:111111111111111111 + name: nginx-sha256 + - image: alpine:1.8.0 + name: init-alpine +`, + expectedOutput: ` +group: apps +apiVersion: v1 +kind: Deployment +metadata: + name: deploy1 +spec: + template: + spec: + containers: + - image: nginx@sha256:222222222222222222 + name: nginx-tagged + - image: nginx@sha256:222222222222222222 + name: nginx-latest + - image: foobar:1 + name: replaced-with-digest + - image: postgres:1.8.0 + name: postgresdb + initContainers: + - image: nginx@sha256:222222222222222222 + name: nginx-notag + - image: nginx@sha256:222222222222222222 + name: nginx-sha256 + - image: alpine:1.8.0 + name: init-alpine +`, + filter: Filter{ + ImageTag: types.Image{ + Name: "nginx", + Digest: "sha256:222222222222222222", + }, + }, + fsSlice: []types.FieldSpec{ + { + Path: "spec/template/spec/containers/image", + }, + { + Path: "spec/template/spec/initContainers/image", + }, + }, + }, + "newImageAndDigest": { + input: ` +group: apps +apiVersion: v1 +kind: Deployment +metadata: + name: deploy1 +spec: + template: + spec: + containers: + - image: nginx:1.7.9 + name: nginx-tagged + - image: nginx:latest + name: nginx-latest + - image: foobar:1 + name: replaced-with-digest + - image: postgres:1.8.0 + name: postgresdb + initContainers: + - image: nginx + name: nginx-notag + - image: nginx@sha256:111111111111111111 + name: nginx-sha256 + - image: alpine:1.8.0 + name: init-alpine +`, + expectedOutput: ` +group: apps +apiVersion: v1 +kind: Deployment +metadata: + name: deploy1 +spec: + template: + spec: + containers: + - image: busybox@sha256:222222222222222222 + name: nginx-tagged + - image: busybox@sha256:222222222222222222 + name: nginx-latest + - image: foobar:1 + name: replaced-with-digest + - image: postgres:1.8.0 + name: postgresdb + initContainers: + - image: busybox@sha256:222222222222222222 + name: nginx-notag + - image: busybox@sha256:222222222222222222 + name: nginx-sha256 + - image: alpine:1.8.0 + name: init-alpine +`, + filter: Filter{ + ImageTag: types.Image{ + Name: "nginx", + NewName: "busybox", + Digest: "sha256:222222222222222222", + }, + }, + fsSlice: []types.FieldSpec{ + { + Path: "spec/template/spec/containers[]/image", + }, + { + Path: "spec/template/spec/initContainers[]/image", + }, + }, + }, + "emptyContainers": { + input: ` +group: apps +apiVersion: v1 +kind: Deployment +metadata: + name: deploy1 +spec: + containers: +`, + expectedOutput: ` +group: apps +apiVersion: v1 +kind: Deployment +metadata: + name: deploy1 +spec: + containers: [] +`, + filter: Filter{ + ImageTag: types.Image{ + Name: "nginx", + NewTag: "v2", + }, + }, + fsSlice: []types.FieldSpec{ + { + Path: "spec/containers[]/image", + // CreateIfNotPresent: true, + }, + }, + }, + "tagWithBraces": { + input: ` +group: apps +apiVersion: v1 +kind: Deployment +metadata: + name: deploy1 +spec: + template: + spec: + containers: + - image: some.registry.io/my-image:{GENERATED_TAG} + name: my-image +`, + expectedOutput: ` +group: apps +apiVersion: v1 +kind: Deployment +metadata: + name: deploy1 +spec: + template: + spec: + containers: + - image: some.registry.io/my-image:my-fixed-tag + name: my-image +`, + filter: Filter{ + ImageTag: types.Image{ + Name: "some.registry.io/my-image", + NewTag: "my-fixed-tag", + }, + }, + fsSlice: []types.FieldSpec{ + { + Path: "spec/template/spec/containers[]/image", + }, + { + Path: "spec/template/spec/initContainers[]/image", + }, + }, + }, + "mutation tracker": { + input: ` +group: apps +apiVersion: v1 +kind: Deployment +metadata: + name: deploy1 +spec: + template: + spec: + containers: + - image: nginx:1.7.9 + name: nginx-tagged + - image: nginx:latest + name: nginx-latest + - image: foobar:1 + name: replaced-with-digest + - image: postgres:1.8.0 + name: postgresdb + initContainers: + - image: nginx + name: nginx-notag + - image: nginx@sha256:111111111111111111 + name: nginx-sha256 + - image: alpine:1.8.0 + name: init-alpine +`, + expectedOutput: ` +group: apps +apiVersion: v1 +kind: Deployment +metadata: + name: deploy1 +spec: + template: + spec: + containers: + - image: busybox:v3 + name: nginx-tagged + - image: busybox:v3 + name: nginx-latest + - image: foobar:1 + name: replaced-with-digest + - image: postgres:1.8.0 + name: postgresdb + initContainers: + - image: busybox:v3 + name: nginx-notag + - image: busybox:v3 + name: nginx-sha256 + - image: alpine:1.8.0 + name: init-alpine +`, + filter: Filter{ + ImageTag: types.Image{ + Name: "nginx", + NewName: "busybox", + NewTag: "v3", + }, + }, + fsSlice: []types.FieldSpec{ + { + Path: "spec/template/spec/containers[]/image", + }, + { + Path: "spec/template/spec/initContainers[]/image", + }, + }, + setValueCallback: setValueCallbackStub, + expectedSetValueArgs: []setValueArg{ + { + Value: "busybox:v3", + PrevValue: "nginx:1.7.9", + }, + { + Value: "busybox:v3", + PrevValue: "nginx:latest", + }, + { + Value: "busybox:v3", + PrevValue: "nginx", + }, + { + Value: "busybox:v3", + PrevValue: "nginx@sha256:111111111111111111", + }, + }, + }, + } + + for tn, tc := range testCases { + setValueArgs = nil + t.Run(tn, func(t *testing.T) { + filter := tc.filter + filter.WithMutationTracker(tc.setValueCallback) + filter.FsSlice = tc.fsSlice + if !assert.Equal(t, + strings.TrimSpace(tc.expectedOutput), + strings.TrimSpace(filtertest.RunFilter(t, tc.input, filter))) { + t.FailNow() + } + assert.Equal(t, tc.expectedSetValueArgs, setValueArgs) + }) + } +} diff --git a/go/internal/forked/api/filters/imagetag/legacy.go b/go/internal/forked/api/filters/imagetag/legacy.go new file mode 100644 index 000000000..4b07edc16 --- /dev/null +++ b/go/internal/forked/api/filters/imagetag/legacy.go @@ -0,0 +1,105 @@ +// Copyright 2020 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package imagetag + +import ( + "sigs.k8s.io/kustomize/api/internal/utils" + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/kio" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" +) + +// LegacyFilter is an implementation of the kio.Filter interface +// that scans through the provided kyaml data structure and updates +// any values of any image fields that is inside a sequence under +// a field called either containers or initContainers. The field is only +// update if it has a value that matches and image reference and the name +// of the image is a match with the provided ImageTag. +type LegacyFilter struct { + ImageTag types.Image `json:"imageTag,omitempty" yaml:"imageTag,omitempty"` +} + +var _ kio.Filter = LegacyFilter{} + +func (lf LegacyFilter) Filter(nodes []*yaml.RNode) ([]*yaml.RNode, error) { + return kio.FilterAll(yaml.FilterFunc(lf.filter)).Filter(nodes) +} + +func (lf LegacyFilter) filter(node *yaml.RNode) (*yaml.RNode, error) { + meta, err := node.GetMeta() + if err != nil { + return nil, err + } + + // We do not make any changes if the type of the resource + // is CustomResourceDefinition. + if meta.Kind == `CustomResourceDefinition` { + return node, nil + } + + fff := findFieldsFilter{ + fields: []string{"containers", "initContainers"}, + fieldCallback: checkImageTagsFn(lf.ImageTag), + } + if err := node.PipeE(fff); err != nil { + return nil, err + } + return node, nil +} + +type fieldCallback func(node *yaml.RNode) error + +// findFieldsFilter is an implementation of the kio.Filter +// interface. It will walk the data structure and look for fields +// that matches the provided list of field names. For each match, +// the value of the field will be passed in as a parameter to the +// provided fieldCallback. +// TODO: move this to kyaml/filterutils +type findFieldsFilter struct { + fields []string + + fieldCallback fieldCallback +} + +func (f findFieldsFilter) Filter(obj *yaml.RNode) (*yaml.RNode, error) { + return obj, f.walk(obj) +} + +func (f findFieldsFilter) walk(node *yaml.RNode) error { + switch node.YNode().Kind { + case yaml.MappingNode: + return node.VisitFields(func(n *yaml.MapNode) error { + err := f.walk(n.Value) + if err != nil { + return err + } + key := n.Key.YNode().Value + if utils.StringSliceContains(f.fields, key) { + return f.fieldCallback(n.Value) + } + return nil + }) + case yaml.SequenceNode: + return node.VisitElements(func(n *yaml.RNode) error { + return f.walk(n) + }) + } + return nil +} + +func checkImageTagsFn(imageTag types.Image) fieldCallback { + return func(node *yaml.RNode) error { + if node.YNode().Kind != yaml.SequenceNode { + return nil + } + + return node.VisitElements(func(n *yaml.RNode) error { + // Look up any fields on the provided node that is named + // image. + return n.PipeE(yaml.Get("image"), imageTagUpdater{ + ImageTag: imageTag, + }) + }) + } +} diff --git a/go/internal/forked/api/filters/imagetag/legacy.go b/go/internal/forked/api/filters/imagetag/legacy.go new file mode 100644 index 000000000..7978dee88 --- /dev/null +++ b/go/internal/forked/api/filters/imagetag/legacy.go @@ -0,0 +1,105 @@ +// Copyright 2020 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package imagetag + +import ( + "sigs.k8s.io/kustomize/api/internal/utils" + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/kio" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/yaml" +) + +// LegacyFilter is an implementation of the kio.Filter interface +// that scans through the provided kyaml data structure and updates +// any values of any image fields that is inside a sequence under +// a field called either containers or initContainers. The field is only +// update if it has a value that matches and image reference and the name +// of the image is a match with the provided ImageTag. +type LegacyFilter struct { + ImageTag types.Image `json:"imageTag,omitempty" yaml:"imageTag,omitempty"` +} + +var _ kio.Filter = LegacyFilter{} + +func (lf LegacyFilter) Filter(nodes []*yaml.RNode) ([]*yaml.RNode, error) { + return kio.FilterAll(yaml.FilterFunc(lf.filter)).Filter(nodes) +} + +func (lf LegacyFilter) filter(node *yaml.RNode) (*yaml.RNode, error) { + meta, err := node.GetMeta() + if err != nil { + return nil, err + } + + // We do not make any changes if the type of the resource + // is CustomResourceDefinition. + if meta.Kind == `CustomResourceDefinition` { + return node, nil + } + + fff := findFieldsFilter{ + fields: []string{"containers", "initContainers"}, + fieldCallback: checkImageTagsFn(lf.ImageTag), + } + if err := node.PipeE(fff); err != nil { + return nil, err + } + return node, nil +} + +type fieldCallback func(node *yaml.RNode) error + +// findFieldsFilter is an implementation of the kio.Filter +// interface. It will walk the data structure and look for fields +// that matches the provided list of field names. For each match, +// the value of the field will be passed in as a parameter to the +// provided fieldCallback. +// TODO: move this to kyaml/filterutils +type findFieldsFilter struct { + fields []string + + fieldCallback fieldCallback +} + +func (f findFieldsFilter) Filter(obj *yaml.RNode) (*yaml.RNode, error) { + return obj, f.walk(obj) +} + +func (f findFieldsFilter) walk(node *yaml.RNode) error { + switch node.YNode().Kind { + case yaml.MappingNode: + return node.VisitFields(func(n *yaml.MapNode) error { + err := f.walk(n.Value) + if err != nil { + return err + } + key := n.Key.YNode().Value + if utils.StringSliceContains(f.fields, key) { + return f.fieldCallback(n.Value) + } + return nil + }) + case yaml.SequenceNode: + return node.VisitElements(func(n *yaml.RNode) error { + return f.walk(n) + }) + } + return nil +} + +func checkImageTagsFn(imageTag types.Image) fieldCallback { + return func(node *yaml.RNode) error { + if node.YNode().Kind != yaml.SequenceNode { + return nil + } + + return node.VisitElements(func(n *yaml.RNode) error { + // Look up any fields on the provided node that is named + // image. + return n.PipeE(yaml.Get("image"), imageTagUpdater{ + ImageTag: imageTag, + }) + }) + } +} diff --git a/go/internal/forked/api/filters/imagetag/legacy_test.go b/go/internal/forked/api/filters/imagetag/legacy_test.go new file mode 100644 index 000000000..28796b060 --- /dev/null +++ b/go/internal/forked/api/filters/imagetag/legacy_test.go @@ -0,0 +1,136 @@ +// Copyright 2020 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package imagetag + +import ( + "strings" + "testing" + + "github.com/stretchr/testify/assert" + filtertest "sigs.k8s.io/kustomize/api/testutils/filtertest" + "sigs.k8s.io/kustomize/api/types" +) + +func TestLegacyImageTag_Filter(t *testing.T) { + testCases := map[string]struct { + input string + expectedOutput string + filter LegacyFilter + }{ + "updates multiple images inside containers": { + input: ` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: instance +spec: + containers: + - image: nginx:1.2.1 + - image: nginx:2.1.2 +`, + expectedOutput: ` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: instance +spec: + containers: + - image: apache@12345 + - image: apache@12345 +`, + filter: LegacyFilter{ + ImageTag: types.Image{ + Name: "nginx", + NewName: "apache", + Digest: "12345", + }, + }, + }, + "updates inside both containers and initContainers": { + input: ` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: instance +spec: + containers: + - image: nginx:1.2.1 + - image: tomcat:1.2.3 + initContainers: + - image: nginx:1.2.1 + - image: apache:1.2.3 +`, + expectedOutput: ` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: instance +spec: + containers: + - image: apache:3.2.1 + - image: tomcat:1.2.3 + initContainers: + - image: apache:3.2.1 + - image: apache:1.2.3 +`, + filter: LegacyFilter{ + ImageTag: types.Image{ + Name: "nginx", + NewName: "apache", + NewTag: "3.2.1", + }, + }, + }, + "updates on multiple depths": { + input: ` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: instance +spec: + containers: + - image: nginx:1.2.1 + - image: tomcat:1.2.3 + template: + spec: + initContainers: + - image: nginx:1.2.1 + - image: apache:1.2.3 +`, + expectedOutput: ` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: instance +spec: + containers: + - image: apache:3.2.1 + - image: tomcat:1.2.3 + template: + spec: + initContainers: + - image: apache:3.2.1 + - image: apache:1.2.3 +`, + filter: LegacyFilter{ + ImageTag: types.Image{ + Name: "nginx", + NewName: "apache", + NewTag: "3.2.1", + }, + }, + }, + } + + for tn, tc := range testCases { + t.Run(tn, func(t *testing.T) { + filter := tc.filter + if !assert.Equal(t, + strings.TrimSpace(tc.expectedOutput), + strings.TrimSpace(filtertest.RunFilter(t, tc.input, filter))) { + t.FailNow() + } + }) + } +} diff --git a/go/internal/forked/api/filters/imagetag/updater.go b/go/internal/forked/api/filters/imagetag/updater.go new file mode 100644 index 000000000..b11144aba --- /dev/null +++ b/go/internal/forked/api/filters/imagetag/updater.go @@ -0,0 +1,52 @@ +// Copyright 2020 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package imagetag + +import ( + "sigs.k8s.io/kustomize/api/filters/filtersutil" + "sigs.k8s.io/kustomize/api/image" + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" +) + +// imageTagUpdater is an implementation of the kio.Filter interface +// that will update the value of the yaml node based on the provided +// ImageTag if the current value matches the format of an image reference. +type imageTagUpdater struct { + Kind string `yaml:"kind,omitempty"` + ImageTag types.Image `yaml:"imageTag,omitempty"` + trackableSetter filtersutil.TrackableSetter +} + +func (u imageTagUpdater) SetImageValue(rn *yaml.RNode) error { + if err := yaml.ErrorIfInvalid(rn, yaml.ScalarNode); err != nil { + return err + } + + value := rn.YNode().Value + + if !image.IsImageMatched(value, u.ImageTag.Name) { + return nil + } + + name, tag := image.Split(value) + if u.ImageTag.NewName != "" { + name = u.ImageTag.NewName + } + if u.ImageTag.NewTag != "" { + tag = ":" + u.ImageTag.NewTag + } + if u.ImageTag.Digest != "" { + tag = "@" + u.ImageTag.Digest + } + + return u.trackableSetter.SetScalar(name + tag)(rn) +} + +func (u imageTagUpdater) Filter(rn *yaml.RNode) (*yaml.RNode, error) { + if err := u.SetImageValue(rn); err != nil { + return nil, err + } + return rn, nil +} diff --git a/go/internal/forked/api/filters/imagetag/updater.go b/go/internal/forked/api/filters/imagetag/updater.go new file mode 100644 index 000000000..3b5136ef5 --- /dev/null +++ b/go/internal/forked/api/filters/imagetag/updater.go @@ -0,0 +1,52 @@ +// Copyright 2020 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package imagetag + +import ( + "sigs.k8s.io/kustomize/api/filters/filtersutil" + "sigs.k8s.io/kustomize/api/image" + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/yaml" +) + +// imageTagUpdater is an implementation of the kio.Filter interface +// that will update the value of the yaml node based on the provided +// ImageTag if the current value matches the format of an image reference. +type imageTagUpdater struct { + Kind string `yaml:"kind,omitempty"` + ImageTag types.Image `yaml:"imageTag,omitempty"` + trackableSetter filtersutil.TrackableSetter +} + +func (u imageTagUpdater) SetImageValue(rn *yaml.RNode) error { + if err := yaml.ErrorIfInvalid(rn, yaml.ScalarNode); err != nil { + return err + } + + value := rn.YNode().Value + + if !image.IsImageMatched(value, u.ImageTag.Name) { + return nil + } + + name, tag := image.Split(value) + if u.ImageTag.NewName != "" { + name = u.ImageTag.NewName + } + if u.ImageTag.NewTag != "" { + tag = ":" + u.ImageTag.NewTag + } + if u.ImageTag.Digest != "" { + tag = "@" + u.ImageTag.Digest + } + + return u.trackableSetter.SetScalar(name + tag)(rn) +} + +func (u imageTagUpdater) Filter(rn *yaml.RNode) (*yaml.RNode, error) { + if err := u.SetImageValue(rn); err != nil { + return nil, err + } + return rn, nil +} diff --git a/go/internal/forked/api/filters/labels/doc.go b/go/internal/forked/api/filters/labels/doc.go new file mode 100644 index 000000000..978033c7e --- /dev/null +++ b/go/internal/forked/api/filters/labels/doc.go @@ -0,0 +1,6 @@ +// Copyright 2020 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +// Package labels contains a kio.Filter implementation of the kustomize +// labels transformer. +package labels diff --git a/go/internal/forked/api/filters/labels/example_test.go b/go/internal/forked/api/filters/labels/example_test.go new file mode 100644 index 000000000..95874a6ea --- /dev/null +++ b/go/internal/forked/api/filters/labels/example_test.go @@ -0,0 +1,55 @@ +// Copyright 2020 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package labels + +import ( + "bytes" + "log" + "os" + + "sigs.k8s.io/kustomize/api/internal/plugins/builtinconfig" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/kio" +) + +func ExampleFilter() { + fss := builtinconfig.MakeDefaultConfig().CommonLabels + err := kio.Pipeline{ + Inputs: []kio.Reader{&kio.ByteReader{Reader: bytes.NewBufferString(` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: instance +--- +apiVersion: example.com/v1 +kind: Bar +metadata: + name: instance +`)}}, + Filters: []kio.Filter{Filter{ + Labels: map[string]string{ + "foo": "bar", + }, + FsSlice: fss, + }}, + Outputs: []kio.Writer{kio.ByteWriter{Writer: os.Stdout}}, + }.Execute() + if err != nil { + log.Fatal(err) + } + + // Output: + // apiVersion: example.com/v1 + // kind: Foo + // metadata: + // name: instance + // labels: + // foo: bar + // --- + // apiVersion: example.com/v1 + // kind: Bar + // metadata: + // name: instance + // labels: + // foo: bar +} diff --git a/go/internal/forked/api/filters/labels/example_test.go b/go/internal/forked/api/filters/labels/example_test.go new file mode 100644 index 000000000..5cd1ac125 --- /dev/null +++ b/go/internal/forked/api/filters/labels/example_test.go @@ -0,0 +1,55 @@ +// Copyright 2020 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package labels + +import ( + "bytes" + "log" + "os" + + "sigs.k8s.io/kustomize/api/internal/plugins/builtinconfig" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/kio" +) + +func ExampleFilter() { + fss := builtinconfig.MakeDefaultConfig().CommonLabels + err := kio.Pipeline{ + Inputs: []kio.Reader{&kio.ByteReader{Reader: bytes.NewBufferString(` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: instance +--- +apiVersion: example.com/v1 +kind: Bar +metadata: + name: instance +`)}}, + Filters: []kio.Filter{Filter{ + Labels: map[string]string{ + "foo": "bar", + }, + FsSlice: fss, + }}, + Outputs: []kio.Writer{kio.ByteWriter{Writer: os.Stdout}}, + }.Execute() + if err != nil { + log.Fatal(err) + } + + // Output: + // apiVersion: example.com/v1 + // kind: Foo + // metadata: + // name: instance + // labels: + // foo: bar + // --- + // apiVersion: example.com/v1 + // kind: Bar + // metadata: + // name: instance + // labels: + // foo: bar +} diff --git a/go/internal/forked/api/filters/labels/labels.go b/go/internal/forked/api/filters/labels/labels.go new file mode 100644 index 000000000..a82ade7bd --- /dev/null +++ b/go/internal/forked/api/filters/labels/labels.go @@ -0,0 +1,53 @@ +// Copyright 2020 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package labels + +import ( + "sigs.k8s.io/kustomize/api/filters/filtersutil" + "sigs.k8s.io/kustomize/api/filters/fsslice" + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/kio" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" +) + +type labelMap map[string]string + +// Filter sets labels. +type Filter struct { + // Labels is the set of labels to apply to the inputs + Labels labelMap `yaml:"labels,omitempty"` + + // FsSlice identifies the label fields. + FsSlice types.FsSlice + + trackableSetter filtersutil.TrackableSetter +} + +var _ kio.Filter = Filter{} +var _ kio.TrackableFilter = &Filter{} + +// WithMutationTracker registers a callback which will be invoked each time a field is mutated +func (f *Filter) WithMutationTracker(callback func(key, value, tag string, node *yaml.RNode)) { + f.trackableSetter.WithMutationTracker(callback) +} + +func (f Filter) Filter(nodes []*yaml.RNode) ([]*yaml.RNode, error) { + keys := yaml.SortedMapKeys(f.Labels) + _, err := kio.FilterAll(yaml.FilterFunc( + func(node *yaml.RNode) (*yaml.RNode, error) { + for _, k := range keys { + if err := node.PipeE(fsslice.Filter{ + FsSlice: f.FsSlice, + SetValue: f.trackableSetter.SetEntry( + k, f.Labels[k], yaml.NodeTagString), + CreateKind: yaml.MappingNode, // Labels are MappingNodes. + CreateTag: yaml.NodeTagMap, + }); err != nil { + return nil, err + } + } + return node, nil + })).Filter(nodes) + return nodes, err +} diff --git a/go/internal/forked/api/filters/labels/labels.go b/go/internal/forked/api/filters/labels/labels.go new file mode 100644 index 000000000..9a7605672 --- /dev/null +++ b/go/internal/forked/api/filters/labels/labels.go @@ -0,0 +1,53 @@ +// Copyright 2020 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package labels + +import ( + "sigs.k8s.io/kustomize/api/filters/filtersutil" + "sigs.k8s.io/kustomize/api/filters/fsslice" + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/kio" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/yaml" +) + +type labelMap map[string]string + +// Filter sets labels. +type Filter struct { + // Labels is the set of labels to apply to the inputs + Labels labelMap `yaml:"labels,omitempty"` + + // FsSlice identifies the label fields. + FsSlice types.FsSlice + + trackableSetter filtersutil.TrackableSetter +} + +var _ kio.Filter = Filter{} +var _ kio.TrackableFilter = &Filter{} + +// WithMutationTracker registers a callback which will be invoked each time a field is mutated +func (f *Filter) WithMutationTracker(callback func(key, value, tag string, node *yaml.RNode)) { + f.trackableSetter.WithMutationTracker(callback) +} + +func (f Filter) Filter(nodes []*yaml.RNode) ([]*yaml.RNode, error) { + keys := yaml.SortedMapKeys(f.Labels) + _, err := kio.FilterAll(yaml.FilterFunc( + func(node *yaml.RNode) (*yaml.RNode, error) { + for _, k := range keys { + if err := node.PipeE(fsslice.Filter{ + FsSlice: f.FsSlice, + SetValue: f.trackableSetter.SetEntry( + k, f.Labels[k], yaml.NodeTagString), + CreateKind: yaml.MappingNode, // Labels are MappingNodes. + CreateTag: yaml.NodeTagMap, + }); err != nil { + return nil, err + } + } + return node, nil + })).Filter(nodes) + return nodes, err +} diff --git a/go/internal/forked/api/filters/labels/labels_test.go b/go/internal/forked/api/filters/labels/labels_test.go new file mode 100644 index 000000000..cc317cf70 --- /dev/null +++ b/go/internal/forked/api/filters/labels/labels_test.go @@ -0,0 +1,493 @@ +// Copyright 2020 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package labels + +import ( + "strings" + "testing" + + "github.com/stretchr/testify/assert" + filtertest_test "sigs.k8s.io/kustomize/api/testutils/filtertest" + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/resid" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" +) + +type setEntryArg struct { + Key string + Value string + Tag string + NodePath []string +} + +var setEntryArgs []setEntryArg + +func setEntryCallbackStub(key, value, tag string, node *yaml.RNode) { + setEntryArgs = append(setEntryArgs, setEntryArg{ + Key: key, + Value: value, + Tag: tag, + NodePath: node.FieldPath(), + }) +} + +func TestLabels_Filter(t *testing.T) { + testCases := map[string]struct { + input string + expectedOutput string + filter Filter + setEntryCallback func(key, value, tag string, node *yaml.RNode) + expectedSetEntryArgs []setEntryArg + }{ + "add": { + input: ` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: instance + labels: + hero: batman + fiend: riddler +`, + expectedOutput: ` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: instance + labels: + hero: batman + fiend: riddler + auto: ford + bean: cannellini + clown: emmett kelley + dragon: smaug +`, + filter: Filter{ + Labels: labelMap{ + "clown": "emmett kelley", + "auto": "ford", + "dragon": "smaug", + "bean": "cannellini", + }, + FsSlice: []types.FieldSpec{ + { + Path: "metadata/labels", + CreateIfNotPresent: true, + }, + }, + }, + }, + "update": { + input: ` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: instance + labels: + hero: batman + fiend: riddler +`, + expectedOutput: ` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: instance + labels: + hero: superman + fiend: luthor + bean: cannellini + clown: emmett kelley +`, + filter: Filter{ + Labels: labelMap{ + "clown": "emmett kelley", + "hero": "superman", + "fiend": "luthor", + "bean": "cannellini", + }, FsSlice: []types.FieldSpec{ + { + Path: "metadata/labels", + CreateIfNotPresent: true, + }, + }, + }, + }, + + "data-fieldspecs": { + input: ` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: instance +--- +apiVersion: example.com/v1 +kind: Bar +metadata: + name: instance +`, + expectedOutput: ` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: instance + labels: + sleater: kinney +a: + b: + sleater: kinney +--- +apiVersion: example.com/v1 +kind: Bar +metadata: + name: instance + labels: + sleater: kinney +a: + b: + sleater: kinney +`, + filter: Filter{ + Labels: labelMap{ + "sleater": "kinney", + }, + FsSlice: []types.FieldSpec{ + { + Path: "metadata/labels", + CreateIfNotPresent: true, + }, + { + Path: "a/b", + CreateIfNotPresent: true, + }, + }, + }, + }, + + "fieldSpecWithKind": { + input: ` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: instance +--- +apiVersion: example.com/v2 +kind: Bar +metadata: + name: instance +`, + expectedOutput: ` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: instance + labels: + cheese: cheddar +--- +apiVersion: example.com/v2 +kind: Bar +metadata: + name: instance + labels: + cheese: cheddar +a: + b: + cheese: cheddar +`, + filter: Filter{ + Labels: labelMap{ + "cheese": "cheddar", + }, + FsSlice: []types.FieldSpec{ + { + Path: "metadata/labels", + CreateIfNotPresent: true, + }, + { + Gvk: resid.Gvk{ + Kind: "Bar", + }, + Path: "a/b", + CreateIfNotPresent: true, + }, + }, + }, + }, + + "fieldSpecWithVersion": { + input: ` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: instance +--- +apiVersion: example.com/v2 +kind: Bar +metadata: + name: instance +`, + expectedOutput: ` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: instance + labels: + cheese: cheddar +a: + b: + cheese: cheddar +--- +apiVersion: example.com/v2 +kind: Bar +metadata: + name: instance + labels: + cheese: cheddar +`, + filter: Filter{ + Labels: labelMap{ + "cheese": "cheddar", + }, + FsSlice: []types.FieldSpec{ + { + Path: "metadata/labels", + CreateIfNotPresent: true, + }, + { + Gvk: resid.Gvk{ + Version: "v1", + }, + Path: "a/b", + CreateIfNotPresent: true, + }, + }, + }, + }, + "fieldSpecWithVersionInConfigButNoGroupInData": { + input: ` +apiVersion: v1 +kind: Foo +metadata: + name: instance +--- +apiVersion: v2 +kind: Bar +metadata: + name: instance +`, + expectedOutput: ` +apiVersion: v1 +kind: Foo +metadata: + name: instance + labels: + cheese: cheddar +a: + b: + cheese: cheddar +--- +apiVersion: v2 +kind: Bar +metadata: + name: instance + labels: + cheese: cheddar +`, + filter: Filter{ + Labels: labelMap{ + "cheese": "cheddar", + }, + FsSlice: []types.FieldSpec{ + { + Path: "metadata/labels", + CreateIfNotPresent: true, + }, + { + Gvk: resid.Gvk{ + Version: "v1", + }, + Path: "a/b", + CreateIfNotPresent: true, + }, + }, + }, + }, + + "number": { + input: ` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: instance + labels: + hero: batman + fiend: riddler +`, + expectedOutput: ` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: instance + labels: + hero: batman + fiend: riddler + 1: emmett kelley + auto: "2" +`, + filter: Filter{ + Labels: labelMap{ + "1": "emmett kelley", + "auto": "2", + }, + FsSlice: []types.FieldSpec{ + { + Path: "metadata/labels", + CreateIfNotPresent: true, + }, + }, + }, + }, + + // test quoting of values which are not considered strings in yaml 1.1 + "yaml_1_1_compatibility": { + input: ` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: instance + labels: + hero: batman + fiend: riddler +`, + expectedOutput: ` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: instance + labels: + hero: batman + fiend: riddler + a: "y" + b: y1 + c: "yes" + d: yes1 + e: "true" + f: true1 +`, + filter: Filter{ + Labels: labelMap{ + "a": "y", + "b": "y1", + "c": "yes", + "d": "yes1", + "e": "true", + "f": "true1", + }, + FsSlice: []types.FieldSpec{ + { + Path: "metadata/labels", + CreateIfNotPresent: true, + }, + }, + }, + }, + + "null_labels": { + input: ` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: instance + labels: null +`, + expectedOutput: ` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: instance + labels: + a: a1 +`, + filter: Filter{ + Labels: labelMap{ + "a": "a1", + }, + FsSlice: []types.FieldSpec{ + { + Path: "metadata/labels", + CreateIfNotPresent: true, + }, + }, + }, + }, + + // test usage of SetEntryCallback + "set_entry_callback": { + input: ` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: instance + labels: + witcher: geralt +`, + expectedOutput: ` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: instance + labels: + witcher: geralt + mage: yennefer +a: + b: + mage: yennefer +`, + filter: Filter{ + Labels: labelMap{ + "mage": "yennefer", + }, + FsSlice: []types.FieldSpec{ + { + Path: "metadata/labels", + CreateIfNotPresent: true, + }, + { + Path: "a/b", + CreateIfNotPresent: true, + }, + }, + }, + setEntryCallback: setEntryCallbackStub, + expectedSetEntryArgs: []setEntryArg{ + { + Key: "mage", + Value: "yennefer", + Tag: "!!str", + NodePath: []string{"metadata", "labels"}, + }, + { + Key: "mage", + Value: "yennefer", + Tag: "!!str", + NodePath: []string{"a", "b"}, + }, + }, + }, + } + + for tn, tc := range testCases { + setEntryArgs = nil + t.Run(tn, func(t *testing.T) { + tc.filter.WithMutationTracker(tc.setEntryCallback) + if !assert.Equal(t, + strings.TrimSpace(tc.expectedOutput), + strings.TrimSpace(filtertest_test.RunFilter(t, tc.input, tc.filter))) { + t.FailNow() + } + if !assert.Equal(t, tc.expectedSetEntryArgs, setEntryArgs) { + t.FailNow() + } + }) + } +} diff --git a/go/internal/forked/api/filters/labels/labels_test.go b/go/internal/forked/api/filters/labels/labels_test.go new file mode 100644 index 000000000..88b8003e0 --- /dev/null +++ b/go/internal/forked/api/filters/labels/labels_test.go @@ -0,0 +1,493 @@ +// Copyright 2020 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package labels + +import ( + "strings" + "testing" + + "github.com/stretchr/testify/assert" + filtertest_test "sigs.k8s.io/kustomize/api/testutils/filtertest" + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/resid" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/yaml" +) + +type setEntryArg struct { + Key string + Value string + Tag string + NodePath []string +} + +var setEntryArgs []setEntryArg + +func setEntryCallbackStub(key, value, tag string, node *yaml.RNode) { + setEntryArgs = append(setEntryArgs, setEntryArg{ + Key: key, + Value: value, + Tag: tag, + NodePath: node.FieldPath(), + }) +} + +func TestLabels_Filter(t *testing.T) { + testCases := map[string]struct { + input string + expectedOutput string + filter Filter + setEntryCallback func(key, value, tag string, node *yaml.RNode) + expectedSetEntryArgs []setEntryArg + }{ + "add": { + input: ` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: instance + labels: + hero: batman + fiend: riddler +`, + expectedOutput: ` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: instance + labels: + hero: batman + fiend: riddler + auto: ford + bean: cannellini + clown: emmett kelley + dragon: smaug +`, + filter: Filter{ + Labels: labelMap{ + "clown": "emmett kelley", + "auto": "ford", + "dragon": "smaug", + "bean": "cannellini", + }, + FsSlice: []types.FieldSpec{ + { + Path: "metadata/labels", + CreateIfNotPresent: true, + }, + }, + }, + }, + "update": { + input: ` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: instance + labels: + hero: batman + fiend: riddler +`, + expectedOutput: ` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: instance + labels: + hero: superman + fiend: luthor + bean: cannellini + clown: emmett kelley +`, + filter: Filter{ + Labels: labelMap{ + "clown": "emmett kelley", + "hero": "superman", + "fiend": "luthor", + "bean": "cannellini", + }, FsSlice: []types.FieldSpec{ + { + Path: "metadata/labels", + CreateIfNotPresent: true, + }, + }, + }, + }, + + "data-fieldspecs": { + input: ` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: instance +--- +apiVersion: example.com/v1 +kind: Bar +metadata: + name: instance +`, + expectedOutput: ` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: instance + labels: + sleater: kinney +a: + b: + sleater: kinney +--- +apiVersion: example.com/v1 +kind: Bar +metadata: + name: instance + labels: + sleater: kinney +a: + b: + sleater: kinney +`, + filter: Filter{ + Labels: labelMap{ + "sleater": "kinney", + }, + FsSlice: []types.FieldSpec{ + { + Path: "metadata/labels", + CreateIfNotPresent: true, + }, + { + Path: "a/b", + CreateIfNotPresent: true, + }, + }, + }, + }, + + "fieldSpecWithKind": { + input: ` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: instance +--- +apiVersion: example.com/v2 +kind: Bar +metadata: + name: instance +`, + expectedOutput: ` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: instance + labels: + cheese: cheddar +--- +apiVersion: example.com/v2 +kind: Bar +metadata: + name: instance + labels: + cheese: cheddar +a: + b: + cheese: cheddar +`, + filter: Filter{ + Labels: labelMap{ + "cheese": "cheddar", + }, + FsSlice: []types.FieldSpec{ + { + Path: "metadata/labels", + CreateIfNotPresent: true, + }, + { + Gvk: resid.Gvk{ + Kind: "Bar", + }, + Path: "a/b", + CreateIfNotPresent: true, + }, + }, + }, + }, + + "fieldSpecWithVersion": { + input: ` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: instance +--- +apiVersion: example.com/v2 +kind: Bar +metadata: + name: instance +`, + expectedOutput: ` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: instance + labels: + cheese: cheddar +a: + b: + cheese: cheddar +--- +apiVersion: example.com/v2 +kind: Bar +metadata: + name: instance + labels: + cheese: cheddar +`, + filter: Filter{ + Labels: labelMap{ + "cheese": "cheddar", + }, + FsSlice: []types.FieldSpec{ + { + Path: "metadata/labels", + CreateIfNotPresent: true, + }, + { + Gvk: resid.Gvk{ + Version: "v1", + }, + Path: "a/b", + CreateIfNotPresent: true, + }, + }, + }, + }, + "fieldSpecWithVersionInConfigButNoGroupInData": { + input: ` +apiVersion: v1 +kind: Foo +metadata: + name: instance +--- +apiVersion: v2 +kind: Bar +metadata: + name: instance +`, + expectedOutput: ` +apiVersion: v1 +kind: Foo +metadata: + name: instance + labels: + cheese: cheddar +a: + b: + cheese: cheddar +--- +apiVersion: v2 +kind: Bar +metadata: + name: instance + labels: + cheese: cheddar +`, + filter: Filter{ + Labels: labelMap{ + "cheese": "cheddar", + }, + FsSlice: []types.FieldSpec{ + { + Path: "metadata/labels", + CreateIfNotPresent: true, + }, + { + Gvk: resid.Gvk{ + Version: "v1", + }, + Path: "a/b", + CreateIfNotPresent: true, + }, + }, + }, + }, + + "number": { + input: ` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: instance + labels: + hero: batman + fiend: riddler +`, + expectedOutput: ` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: instance + labels: + hero: batman + fiend: riddler + 1: emmett kelley + auto: "2" +`, + filter: Filter{ + Labels: labelMap{ + "1": "emmett kelley", + "auto": "2", + }, + FsSlice: []types.FieldSpec{ + { + Path: "metadata/labels", + CreateIfNotPresent: true, + }, + }, + }, + }, + + // test quoting of values which are not considered strings in yaml 1.1 + "yaml_1_1_compatibility": { + input: ` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: instance + labels: + hero: batman + fiend: riddler +`, + expectedOutput: ` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: instance + labels: + hero: batman + fiend: riddler + a: "y" + b: y1 + c: "yes" + d: yes1 + e: "true" + f: true1 +`, + filter: Filter{ + Labels: labelMap{ + "a": "y", + "b": "y1", + "c": "yes", + "d": "yes1", + "e": "true", + "f": "true1", + }, + FsSlice: []types.FieldSpec{ + { + Path: "metadata/labels", + CreateIfNotPresent: true, + }, + }, + }, + }, + + "null_labels": { + input: ` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: instance + labels: null +`, + expectedOutput: ` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: instance + labels: + a: a1 +`, + filter: Filter{ + Labels: labelMap{ + "a": "a1", + }, + FsSlice: []types.FieldSpec{ + { + Path: "metadata/labels", + CreateIfNotPresent: true, + }, + }, + }, + }, + + // test usage of SetEntryCallback + "set_entry_callback": { + input: ` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: instance + labels: + witcher: geralt +`, + expectedOutput: ` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: instance + labels: + witcher: geralt + mage: yennefer +a: + b: + mage: yennefer +`, + filter: Filter{ + Labels: labelMap{ + "mage": "yennefer", + }, + FsSlice: []types.FieldSpec{ + { + Path: "metadata/labels", + CreateIfNotPresent: true, + }, + { + Path: "a/b", + CreateIfNotPresent: true, + }, + }, + }, + setEntryCallback: setEntryCallbackStub, + expectedSetEntryArgs: []setEntryArg{ + { + Key: "mage", + Value: "yennefer", + Tag: "!!str", + NodePath: []string{"metadata", "labels"}, + }, + { + Key: "mage", + Value: "yennefer", + Tag: "!!str", + NodePath: []string{"a", "b"}, + }, + }, + }, + } + + for tn, tc := range testCases { + setEntryArgs = nil + t.Run(tn, func(t *testing.T) { + tc.filter.WithMutationTracker(tc.setEntryCallback) + if !assert.Equal(t, + strings.TrimSpace(tc.expectedOutput), + strings.TrimSpace(filtertest_test.RunFilter(t, tc.input, tc.filter))) { + t.FailNow() + } + if !assert.Equal(t, tc.expectedSetEntryArgs, setEntryArgs) { + t.FailNow() + } + }) + } +} diff --git a/go/internal/forked/api/filters/nameref/doc.go b/go/internal/forked/api/filters/nameref/doc.go new file mode 100644 index 000000000..b78499d51 --- /dev/null +++ b/go/internal/forked/api/filters/nameref/doc.go @@ -0,0 +1,3 @@ +// Package nameref contains a kio.Filter implementation of the kustomize +// name reference transformer. +package nameref diff --git a/go/internal/forked/api/filters/nameref/nameref.go b/go/internal/forked/api/filters/nameref/nameref.go new file mode 100644 index 000000000..76932ebc2 --- /dev/null +++ b/go/internal/forked/api/filters/nameref/nameref.go @@ -0,0 +1,396 @@ +package nameref + +import ( + "fmt" + "strings" + + "github.com/pkg/errors" + "sigs.k8s.io/kustomize/api/filters/fieldspec" + "sigs.k8s.io/kustomize/api/resmap" + "sigs.k8s.io/kustomize/api/resource" + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/kio" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/resid" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" +) + +// Filter updates a name references. +type Filter struct { + // Referrer refers to another resource X by X's name. + // E.g. A Deployment can refer to a ConfigMap. + // The Deployment is the Referrer, + // the ConfigMap is the ReferralTarget. + // This filter seeks to repair the reference in Deployment, given + // that the ConfigMap's name may have changed. + Referrer *resource.Resource + + // NameFieldToUpdate is the field in the Referrer + // that holds the name requiring an update. + // This is the field to write. + NameFieldToUpdate types.FieldSpec + + // ReferralTarget is the source of the new value for + // the name, always in the 'metadata/name' field. + // This is the field to read. + ReferralTarget resid.Gvk + + // Set of resources to scan to find the ReferralTarget. + ReferralCandidates resmap.ResMap +} + +// At time of writing, in practice this is called with a slice with only +// one entry, the node also referred to be the resource in the Referrer field. +func (f Filter) Filter(nodes []*yaml.RNode) ([]*yaml.RNode, error) { + return kio.FilterAll(yaml.FilterFunc(f.run)).Filter(nodes) +} + +// The node passed in here is the same node as held in Referrer; +// that's how the referrer's name field is updated. +// Currently, however, this filter still needs the extra methods on Referrer +// to consult things like the resource Id, its namespace, etc. +// TODO(3455): No filter should use the Resource api; all information +// about names should come from annotations, with helper methods +// on the RNode object. Resource should get stupider, RNode smarter. +func (f Filter) run(node *yaml.RNode) (*yaml.RNode, error) { + if err := f.confirmNodeMatchesReferrer(node); err != nil { + // sanity check. + return nil, err + } + f.NameFieldToUpdate.Gvk = f.Referrer.GetGvk() + if err := node.PipeE(fieldspec.Filter{ + FieldSpec: f.NameFieldToUpdate, + SetValue: f.set, + }); err != nil { + return nil, errors.Wrapf( + err, "updating name reference in '%s' field of '%s'", + f.NameFieldToUpdate.Path, f.Referrer.CurId().String()) + } + return node, nil +} + +// This function is called on the node found at FieldSpec.Path. +// It's some node in the Referrer. +func (f Filter) set(node *yaml.RNode) error { + if yaml.IsMissingOrNull(node) { + return nil + } + switch node.YNode().Kind { + case yaml.ScalarNode: + return f.setScalar(node) + case yaml.MappingNode: + return f.setMapping(node) + case yaml.SequenceNode: + return applyFilterToSeq(seqFilter{ + setScalarFn: f.setScalar, + setMappingFn: f.setMapping, + }, node) + default: + return fmt.Errorf("node must be a scalar, sequence or map") + } +} + +// This method used when NameFieldToUpdate doesn't lead to +// one scalar field (typically called 'name'), but rather +// leads to a map field (called anything). In this case we +// must complete the field path, looking for both a 'name' +// and a 'namespace' field to help select the proper +// ReferralTarget to read the name and namespace from. +func (f Filter) setMapping(node *yaml.RNode) error { + if node.YNode().Kind != yaml.MappingNode { + return fmt.Errorf("expect a mapping node") + } + nameNode, err := node.Pipe(yaml.FieldMatcher{Name: "name"}) + if err != nil { + return errors.Wrap(err, "trying to match 'name' field") + } + if nameNode == nil { + // This is a _configuration_ error; the field path + // specified in NameFieldToUpdate.Path doesn't resolve + // to a map with a 'name' field, so we have no idea what + // field to update with a new name. + return fmt.Errorf("path config error; no 'name' field in node") + } + candidates, err := f.filterMapCandidatesByNamespace(node) + if err != nil { + return err + } + oldName := nameNode.YNode().Value + referral, err := f.selectReferral(oldName, candidates) + if err != nil || referral == nil { + // Nil referral means nothing to do. + return err + } + f.recordTheReferral(referral) + if referral.GetName() == oldName && referral.GetNamespace() == "" { + // The name has not changed, nothing to do. + return nil + } + if err = node.PipeE(yaml.FieldSetter{ + Name: "name", + StringValue: referral.GetName(), + }); err != nil { + return err + } + if referral.GetNamespace() == "" { + // Don't write an empty string into the namespace field, as + // it should not replace the value "default". The empty + // string is handled as a wild card here, not as an implicit + // specification of the "default" k8s namespace. + return nil + } + return node.PipeE(yaml.FieldSetter{ + Name: "namespace", + StringValue: referral.GetNamespace(), + }) +} + +func (f Filter) filterMapCandidatesByNamespace( + node *yaml.RNode) ([]*resource.Resource, error) { + namespaceNode, err := node.Pipe(yaml.FieldMatcher{Name: "namespace"}) + if err != nil { + return nil, errors.Wrap(err, "trying to match 'namespace' field") + } + if namespaceNode == nil { + return f.ReferralCandidates.Resources(), nil + } + namespace := namespaceNode.YNode().Value + nsMap := f.ReferralCandidates.GroupedByOriginalNamespace() + if candidates, ok := nsMap[namespace]; ok { + return candidates, nil + } + nsMap = f.ReferralCandidates.GroupedByCurrentNamespace() + // This could be nil, or an empty list. + return nsMap[namespace], nil +} + +func (f Filter) setScalar(node *yaml.RNode) error { + referral, err := f.selectReferral( + node.YNode().Value, f.ReferralCandidates.Resources()) + if err != nil || referral == nil { + // Nil referral means nothing to do. + return err + } + f.recordTheReferral(referral) + if referral.GetName() == node.YNode().Value { + // The name has not changed, nothing to do. + return nil + } + return node.PipeE(yaml.FieldSetter{StringValue: referral.GetName()}) +} + +// In the resource, make a note that it is referred to by the Referrer. +func (f Filter) recordTheReferral(referral *resource.Resource) { + referral.AppendRefBy(f.Referrer.CurId()) +} + +// getRoleRefGvk returns a Gvk in the roleRef field. Return error +// if the roleRef, roleRef/apiGroup or roleRef/kind is missing. +func getRoleRefGvk(n *resource.Resource) (*resid.Gvk, error) { + roleRef, err := n.Pipe(yaml.Lookup("roleRef")) + if err != nil { + return nil, err + } + if roleRef.IsNil() { + return nil, fmt.Errorf("roleRef cannot be found in %s", n.MustString()) + } + apiGroup, err := roleRef.Pipe(yaml.Lookup("apiGroup")) + if err != nil { + return nil, err + } + if apiGroup.IsNil() { + return nil, fmt.Errorf( + "apiGroup cannot be found in roleRef %s", roleRef.MustString()) + } + kind, err := roleRef.Pipe(yaml.Lookup("kind")) + if err != nil { + return nil, err + } + if kind.IsNil() { + return nil, fmt.Errorf( + "kind cannot be found in roleRef %s", roleRef.MustString()) + } + return &resid.Gvk{ + Group: apiGroup.YNode().Value, + Kind: kind.YNode().Value, + }, nil +} + +// sieveFunc returns true if the resource argument satisfies some criteria. +type sieveFunc func(*resource.Resource) bool + +// doSieve uses a function to accept or ignore resources from a list. +// If list is nil, returns immediately. +// It's a filter obviously, but that term is overloaded here. +func doSieve(list []*resource.Resource, fn sieveFunc) (s []*resource.Resource) { + for _, r := range list { + if fn(r) { + s = append(s, r) + } + } + return +} + +func acceptAll(r *resource.Resource) bool { + return true +} + +func previousNameMatches(name string) sieveFunc { + return func(r *resource.Resource) bool { + for _, id := range r.PrevIds() { + if id.Name == name { + return true + } + } + return false + } +} + +func previousIdSelectedByGvk(gvk *resid.Gvk) sieveFunc { + return func(r *resource.Resource) bool { + for _, id := range r.PrevIds() { + if id.IsSelected(gvk) { + return true + } + } + return false + } +} + +// If the we are updating a 'roleRef/name' field, the 'apiGroup' and 'kind' +// fields in the same 'roleRef' map must be considered. +// If either object is cluster-scoped, there can be a referral. +// E.g. a RoleBinding (which exists in a namespace) can refer +// to a ClusterRole (cluster-scoped) object. +// https://kubernetes.io/docs/reference/access-authn-authz/rbac/#role-and-clusterrole +// Likewise, a ClusterRole can refer to a Secret (in a namespace). +// Objects in different namespaces generally cannot refer to other +// with some exceptions (e.g. RoleBinding and ServiceAccount are both +// namespaceable, but the former can refer to accounts in other namespaces). +func (f Filter) roleRefFilter() sieveFunc { + if !strings.HasSuffix(f.NameFieldToUpdate.Path, "roleRef/name") { + return acceptAll + } + roleRefGvk, err := getRoleRefGvk(f.Referrer) + if err != nil { + return acceptAll + } + return previousIdSelectedByGvk(roleRefGvk) +} + +func prefixSuffixEquals(other resource.ResCtx) sieveFunc { + return func(r *resource.Resource) bool { + return r.PrefixesSuffixesEquals(other) + } +} + +func (f Filter) sameCurrentNamespaceAsReferrer() sieveFunc { + referrerCurId := f.Referrer.CurId() + if referrerCurId.IsClusterScoped() { + // If the referrer is cluster-scoped, let anything through. + return acceptAll + } + return func(r *resource.Resource) bool { + if r.CurId().IsClusterScoped() { + // Allow cluster-scoped through. + return true + } + if r.GetKind() == "ServiceAccount" { + // Allow service accounts through, even though they + // are in a namespace. A RoleBinding in another namespace + // can reference them. + return true + } + return referrerCurId.IsNsEquals(r.CurId()) + } +} + +// selectReferral picks the best referral from a list of candidates. +func (f Filter) selectReferral( + // The name referral that may need to be updated. + oldName string, + candidates []*resource.Resource) (*resource.Resource, error) { + candidates = doSieve(candidates, previousNameMatches(oldName)) + candidates = doSieve(candidates, previousIdSelectedByGvk(&f.ReferralTarget)) + candidates = doSieve(candidates, f.roleRefFilter()) + candidates = doSieve(candidates, f.sameCurrentNamespaceAsReferrer()) + if len(candidates) == 1 { + return candidates[0], nil + } + candidates = doSieve(candidates, prefixSuffixEquals(f.Referrer)) + if len(candidates) == 1 { + return candidates[0], nil + } + if len(candidates) == 0 { + return nil, nil + } + if allNamesAreTheSame(candidates) { + // Just take the first one. + return candidates[0], nil + } + ids := getIds(candidates) + f.failureDetails(candidates) + return nil, fmt.Errorf(" found multiple possible referrals: %s", ids) +} + +func (f Filter) failureDetails(resources []*resource.Resource) { + fmt.Printf( + "\n**** Too many possible referral targets to referrer:\n%s\n", + f.Referrer.MustYaml()) + for i, r := range resources { + fmt.Printf( + "--- possible referral %d:\n%s", i, r.MustYaml()) + fmt.Println("------") + } +} + +func allNamesAreTheSame(resources []*resource.Resource) bool { + name := resources[0].GetName() + for i := 1; i < len(resources); i++ { + if name != resources[i].GetName() { + return false + } + } + return true +} + +func getIds(rs []*resource.Resource) string { + var result []string + for _, r := range rs { + result = append(result, r.CurId().String()) + } + return strings.Join(result, ", ") +} + +func checkEqual(k, a, b string) error { + if a != b { + return fmt.Errorf( + "node-referrerOriginal '%s' mismatch '%s' != '%s'", + k, a, b) + } + return nil +} + +func (f Filter) confirmNodeMatchesReferrer(node *yaml.RNode) error { + meta, err := node.GetMeta() + if err != nil { + return err + } + gvk := f.Referrer.GetGvk() + if err = checkEqual( + "APIVersion", meta.APIVersion, gvk.ApiVersion()); err != nil { + return err + } + if err = checkEqual( + "Kind", meta.Kind, gvk.Kind); err != nil { + return err + } + if err = checkEqual( + "Name", meta.Name, f.Referrer.GetName()); err != nil { + return err + } + if err = checkEqual( + "Namespace", meta.Namespace, f.Referrer.GetNamespace()); err != nil { + return err + } + return nil +} diff --git a/go/internal/forked/api/filters/nameref/nameref.go b/go/internal/forked/api/filters/nameref/nameref.go new file mode 100644 index 000000000..b70713bf1 --- /dev/null +++ b/go/internal/forked/api/filters/nameref/nameref.go @@ -0,0 +1,396 @@ +package nameref + +import ( + "fmt" + "strings" + + "github.com/pkg/errors" + "sigs.k8s.io/kustomize/api/filters/fieldspec" + "sigs.k8s.io/kustomize/api/resmap" + "sigs.k8s.io/kustomize/api/resource" + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/kio" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/resid" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/yaml" +) + +// Filter updates a name references. +type Filter struct { + // Referrer refers to another resource X by X's name. + // E.g. A Deployment can refer to a ConfigMap. + // The Deployment is the Referrer, + // the ConfigMap is the ReferralTarget. + // This filter seeks to repair the reference in Deployment, given + // that the ConfigMap's name may have changed. + Referrer *resource.Resource + + // NameFieldToUpdate is the field in the Referrer + // that holds the name requiring an update. + // This is the field to write. + NameFieldToUpdate types.FieldSpec + + // ReferralTarget is the source of the new value for + // the name, always in the 'metadata/name' field. + // This is the field to read. + ReferralTarget resid.Gvk + + // Set of resources to scan to find the ReferralTarget. + ReferralCandidates resmap.ResMap +} + +// At time of writing, in practice this is called with a slice with only +// one entry, the node also referred to be the resource in the Referrer field. +func (f Filter) Filter(nodes []*yaml.RNode) ([]*yaml.RNode, error) { + return kio.FilterAll(yaml.FilterFunc(f.run)).Filter(nodes) +} + +// The node passed in here is the same node as held in Referrer; +// that's how the referrer's name field is updated. +// Currently, however, this filter still needs the extra methods on Referrer +// to consult things like the resource Id, its namespace, etc. +// TODO(3455): No filter should use the Resource api; all information +// about names should come from annotations, with helper methods +// on the RNode object. Resource should get stupider, RNode smarter. +func (f Filter) run(node *yaml.RNode) (*yaml.RNode, error) { + if err := f.confirmNodeMatchesReferrer(node); err != nil { + // sanity check. + return nil, err + } + f.NameFieldToUpdate.Gvk = f.Referrer.GetGvk() + if err := node.PipeE(fieldspec.Filter{ + FieldSpec: f.NameFieldToUpdate, + SetValue: f.set, + }); err != nil { + return nil, errors.Wrapf( + err, "updating name reference in '%s' field of '%s'", + f.NameFieldToUpdate.Path, f.Referrer.CurId().String()) + } + return node, nil +} + +// This function is called on the node found at FieldSpec.Path. +// It's some node in the Referrer. +func (f Filter) set(node *yaml.RNode) error { + if yaml.IsMissingOrNull(node) { + return nil + } + switch node.YNode().Kind { + case yaml.ScalarNode: + return f.setScalar(node) + case yaml.MappingNode: + return f.setMapping(node) + case yaml.SequenceNode: + return applyFilterToSeq(seqFilter{ + setScalarFn: f.setScalar, + setMappingFn: f.setMapping, + }, node) + default: + return fmt.Errorf("node must be a scalar, sequence or map") + } +} + +// This method used when NameFieldToUpdate doesn't lead to +// one scalar field (typically called 'name'), but rather +// leads to a map field (called anything). In this case we +// must complete the field path, looking for both a 'name' +// and a 'namespace' field to help select the proper +// ReferralTarget to read the name and namespace from. +func (f Filter) setMapping(node *yaml.RNode) error { + if node.YNode().Kind != yaml.MappingNode { + return fmt.Errorf("expect a mapping node") + } + nameNode, err := node.Pipe(yaml.FieldMatcher{Name: "name"}) + if err != nil { + return errors.Wrap(err, "trying to match 'name' field") + } + if nameNode == nil { + // This is a _configuration_ error; the field path + // specified in NameFieldToUpdate.Path doesn't resolve + // to a map with a 'name' field, so we have no idea what + // field to update with a new name. + return fmt.Errorf("path config error; no 'name' field in node") + } + candidates, err := f.filterMapCandidatesByNamespace(node) + if err != nil { + return err + } + oldName := nameNode.YNode().Value + referral, err := f.selectReferral(oldName, candidates) + if err != nil || referral == nil { + // Nil referral means nothing to do. + return err + } + f.recordTheReferral(referral) + if referral.GetName() == oldName && referral.GetNamespace() == "" { + // The name has not changed, nothing to do. + return nil + } + if err = node.PipeE(yaml.FieldSetter{ + Name: "name", + StringValue: referral.GetName(), + }); err != nil { + return err + } + if referral.GetNamespace() == "" { + // Don't write an empty string into the namespace field, as + // it should not replace the value "default". The empty + // string is handled as a wild card here, not as an implicit + // specification of the "default" k8s namespace. + return nil + } + return node.PipeE(yaml.FieldSetter{ + Name: "namespace", + StringValue: referral.GetNamespace(), + }) +} + +func (f Filter) filterMapCandidatesByNamespace( + node *yaml.RNode) ([]*resource.Resource, error) { + namespaceNode, err := node.Pipe(yaml.FieldMatcher{Name: "namespace"}) + if err != nil { + return nil, errors.Wrap(err, "trying to match 'namespace' field") + } + if namespaceNode == nil { + return f.ReferralCandidates.Resources(), nil + } + namespace := namespaceNode.YNode().Value + nsMap := f.ReferralCandidates.GroupedByOriginalNamespace() + if candidates, ok := nsMap[namespace]; ok { + return candidates, nil + } + nsMap = f.ReferralCandidates.GroupedByCurrentNamespace() + // This could be nil, or an empty list. + return nsMap[namespace], nil +} + +func (f Filter) setScalar(node *yaml.RNode) error { + referral, err := f.selectReferral( + node.YNode().Value, f.ReferralCandidates.Resources()) + if err != nil || referral == nil { + // Nil referral means nothing to do. + return err + } + f.recordTheReferral(referral) + if referral.GetName() == node.YNode().Value { + // The name has not changed, nothing to do. + return nil + } + return node.PipeE(yaml.FieldSetter{StringValue: referral.GetName()}) +} + +// In the resource, make a note that it is referred to by the Referrer. +func (f Filter) recordTheReferral(referral *resource.Resource) { + referral.AppendRefBy(f.Referrer.CurId()) +} + +// getRoleRefGvk returns a Gvk in the roleRef field. Return error +// if the roleRef, roleRef/apiGroup or roleRef/kind is missing. +func getRoleRefGvk(n *resource.Resource) (*resid.Gvk, error) { + roleRef, err := n.Pipe(yaml.Lookup("roleRef")) + if err != nil { + return nil, err + } + if roleRef.IsNil() { + return nil, fmt.Errorf("roleRef cannot be found in %s", n.MustString()) + } + apiGroup, err := roleRef.Pipe(yaml.Lookup("apiGroup")) + if err != nil { + return nil, err + } + if apiGroup.IsNil() { + return nil, fmt.Errorf( + "apiGroup cannot be found in roleRef %s", roleRef.MustString()) + } + kind, err := roleRef.Pipe(yaml.Lookup("kind")) + if err != nil { + return nil, err + } + if kind.IsNil() { + return nil, fmt.Errorf( + "kind cannot be found in roleRef %s", roleRef.MustString()) + } + return &resid.Gvk{ + Group: apiGroup.YNode().Value, + Kind: kind.YNode().Value, + }, nil +} + +// sieveFunc returns true if the resource argument satisfies some criteria. +type sieveFunc func(*resource.Resource) bool + +// doSieve uses a function to accept or ignore resources from a list. +// If list is nil, returns immediately. +// It's a filter obviously, but that term is overloaded here. +func doSieve(list []*resource.Resource, fn sieveFunc) (s []*resource.Resource) { + for _, r := range list { + if fn(r) { + s = append(s, r) + } + } + return +} + +func acceptAll(r *resource.Resource) bool { + return true +} + +func previousNameMatches(name string) sieveFunc { + return func(r *resource.Resource) bool { + for _, id := range r.PrevIds() { + if id.Name == name { + return true + } + } + return false + } +} + +func previousIdSelectedByGvk(gvk *resid.Gvk) sieveFunc { + return func(r *resource.Resource) bool { + for _, id := range r.PrevIds() { + if id.IsSelected(gvk) { + return true + } + } + return false + } +} + +// If the we are updating a 'roleRef/name' field, the 'apiGroup' and 'kind' +// fields in the same 'roleRef' map must be considered. +// If either object is cluster-scoped, there can be a referral. +// E.g. a RoleBinding (which exists in a namespace) can refer +// to a ClusterRole (cluster-scoped) object. +// https://kubernetes.io/docs/reference/access-authn-authz/rbac/#role-and-clusterrole +// Likewise, a ClusterRole can refer to a Secret (in a namespace). +// Objects in different namespaces generally cannot refer to other +// with some exceptions (e.g. RoleBinding and ServiceAccount are both +// namespaceable, but the former can refer to accounts in other namespaces). +func (f Filter) roleRefFilter() sieveFunc { + if !strings.HasSuffix(f.NameFieldToUpdate.Path, "roleRef/name") { + return acceptAll + } + roleRefGvk, err := getRoleRefGvk(f.Referrer) + if err != nil { + return acceptAll + } + return previousIdSelectedByGvk(roleRefGvk) +} + +func prefixSuffixEquals(other resource.ResCtx) sieveFunc { + return func(r *resource.Resource) bool { + return r.PrefixesSuffixesEquals(other) + } +} + +func (f Filter) sameCurrentNamespaceAsReferrer() sieveFunc { + referrerCurId := f.Referrer.CurId() + if referrerCurId.IsClusterScoped() { + // If the referrer is cluster-scoped, let anything through. + return acceptAll + } + return func(r *resource.Resource) bool { + if r.CurId().IsClusterScoped() { + // Allow cluster-scoped through. + return true + } + if r.GetKind() == "ServiceAccount" { + // Allow service accounts through, even though they + // are in a namespace. A RoleBinding in another namespace + // can reference them. + return true + } + return referrerCurId.IsNsEquals(r.CurId()) + } +} + +// selectReferral picks the best referral from a list of candidates. +func (f Filter) selectReferral( + // The name referral that may need to be updated. + oldName string, + candidates []*resource.Resource) (*resource.Resource, error) { + candidates = doSieve(candidates, previousNameMatches(oldName)) + candidates = doSieve(candidates, previousIdSelectedByGvk(&f.ReferralTarget)) + candidates = doSieve(candidates, f.roleRefFilter()) + candidates = doSieve(candidates, f.sameCurrentNamespaceAsReferrer()) + if len(candidates) == 1 { + return candidates[0], nil + } + candidates = doSieve(candidates, prefixSuffixEquals(f.Referrer)) + if len(candidates) == 1 { + return candidates[0], nil + } + if len(candidates) == 0 { + return nil, nil + } + if allNamesAreTheSame(candidates) { + // Just take the first one. + return candidates[0], nil + } + ids := getIds(candidates) + f.failureDetails(candidates) + return nil, fmt.Errorf(" found multiple possible referrals: %s", ids) +} + +func (f Filter) failureDetails(resources []*resource.Resource) { + fmt.Printf( + "\n**** Too many possible referral targets to referrer:\n%s\n", + f.Referrer.MustYaml()) + for i, r := range resources { + fmt.Printf( + "--- possible referral %d:\n%s", i, r.MustYaml()) + fmt.Println("------") + } +} + +func allNamesAreTheSame(resources []*resource.Resource) bool { + name := resources[0].GetName() + for i := 1; i < len(resources); i++ { + if name != resources[i].GetName() { + return false + } + } + return true +} + +func getIds(rs []*resource.Resource) string { + var result []string + for _, r := range rs { + result = append(result, r.CurId().String()) + } + return strings.Join(result, ", ") +} + +func checkEqual(k, a, b string) error { + if a != b { + return fmt.Errorf( + "node-referrerOriginal '%s' mismatch '%s' != '%s'", + k, a, b) + } + return nil +} + +func (f Filter) confirmNodeMatchesReferrer(node *yaml.RNode) error { + meta, err := node.GetMeta() + if err != nil { + return err + } + gvk := f.Referrer.GetGvk() + if err = checkEqual( + "APIVersion", meta.APIVersion, gvk.ApiVersion()); err != nil { + return err + } + if err = checkEqual( + "Kind", meta.Kind, gvk.Kind); err != nil { + return err + } + if err = checkEqual( + "Name", meta.Name, f.Referrer.GetName()); err != nil { + return err + } + if err = checkEqual( + "Namespace", meta.Namespace, f.Referrer.GetNamespace()); err != nil { + return err + } + return nil +} diff --git a/go/internal/forked/api/filters/nameref/nameref_test.go b/go/internal/forked/api/filters/nameref/nameref_test.go new file mode 100644 index 000000000..00ed56115 --- /dev/null +++ b/go/internal/forked/api/filters/nameref/nameref_test.go @@ -0,0 +1,789 @@ +package nameref + +import ( + "strings" + "testing" + + "github.com/stretchr/testify/assert" + "sigs.k8s.io/kustomize/api/provider" + "sigs.k8s.io/kustomize/api/resmap" + filtertest_test "sigs.k8s.io/kustomize/api/testutils/filtertest" + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/resid" +) + +func TestNamerefFilter(t *testing.T) { + testCases := map[string]struct { + referrerOriginal string + candidates string + referrerFinal string + filter Filter + originalNames []string + }{ + "simple scalar": { + referrerOriginal: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: dep +ref: + name: oldName +`, + candidates: ` +apiVersion: apps/v1 +kind: Secret +metadata: + name: newName +--- +apiVersion: apps/v1 +kind: NotSecret +metadata: + name: newName2 +`, + originalNames: []string{"oldName", "newName2"}, + referrerFinal: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: dep +ref: + name: newName +`, + filter: Filter{ + NameFieldToUpdate: types.FieldSpec{Path: "ref/name"}, + ReferralTarget: resid.Gvk{ + Group: "apps", + Version: "v1", + Kind: "Secret", + }, + }, + }, + "sequence": { + referrerOriginal: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: dep +seq: +- oldName1 +- oldName2 +`, + candidates: ` +apiVersion: apps/v1 +kind: Secret +metadata: + name: newName +--- +apiVersion: apps/v1 +kind: NotSecret +metadata: + name: newName2 +`, + originalNames: []string{"oldName1", "newName2"}, + referrerFinal: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: dep +seq: +- newName +- oldName2 +`, + filter: Filter{ + NameFieldToUpdate: types.FieldSpec{Path: "seq"}, + ReferralTarget: resid.Gvk{ + Group: "apps", + Version: "v1", + Kind: "Secret", + }, + }, + }, + "mapping": { + referrerOriginal: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: dep +map: + name: oldName +`, + candidates: ` +apiVersion: apps/v1 +kind: Secret +metadata: + name: newName +--- +apiVersion: apps/v1 +kind: NotSecret +metadata: + name: newName2 +`, + originalNames: []string{"oldName", "newName2"}, + referrerFinal: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: dep +map: + name: newName +`, + filter: Filter{ + NameFieldToUpdate: types.FieldSpec{Path: "map"}, + ReferralTarget: resid.Gvk{ + Group: "apps", + Version: "v1", + Kind: "Secret", + }, + }, + }, + "mapping with namespace": { + referrerOriginal: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: dep + namespace: someNs +map: + name: oldName + namespace: someNs +`, + candidates: ` +apiVersion: apps/v1 +kind: Secret +metadata: + name: newName + namespace: someNs +--- +apiVersion: apps/v1 +kind: NotSecret +metadata: + name: newName2 +--- +apiVersion: apps/v1 +kind: Secret +metadata: + name: thirdName +`, + originalNames: []string{"oldName", "oldName", "oldName"}, + referrerFinal: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: dep + namespace: someNs +map: + name: newName + namespace: someNs +`, + filter: Filter{ + NameFieldToUpdate: types.FieldSpec{Path: "map"}, + ReferralTarget: resid.Gvk{ + Group: "apps", + Version: "v1", + Kind: "Secret", + }, + }, + }, + "null value": { + referrerOriginal: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: dep +map: + name: null +`, + candidates: ` +apiVersion: apps/v1 +kind: Secret +metadata: + name: newName +--- +apiVersion: apps/v1 +kind: NotSecret +metadata: + name: newName2 +`, + originalNames: []string{"oldName", "newName2"}, + referrerFinal: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: dep +map: + name: null +`, + filter: Filter{ + NameFieldToUpdate: types.FieldSpec{Path: "map"}, + ReferralTarget: resid.Gvk{ + Group: "apps", + Version: "v1", + Kind: "Secret", + }, + }, + }, + } + + for tn, tc := range testCases { + t.Run(tn, func(t *testing.T) { + factory := provider.NewDefaultDepProvider().GetResourceFactory() + referrer, err := factory.FromBytes([]byte(tc.referrerOriginal)) + if err != nil { + t.Fatal(err) + } + tc.filter.Referrer = referrer + + resMapFactory := resmap.NewFactory(factory) + candidatesRes, err := factory.SliceFromBytesWithNames( + tc.originalNames, []byte(tc.candidates)) + if err != nil { + t.Fatal(err) + } + + candidates := resMapFactory.FromResourceSlice(candidatesRes) + tc.filter.ReferralCandidates = candidates + + result := filtertest_test.RunFilter(t, tc.referrerOriginal, tc.filter) + if !assert.Equal(t, + strings.TrimSpace(tc.referrerFinal), + strings.TrimSpace(result)) { + t.FailNow() + } + }) + } +} + +func TestNamerefFilterUnhappy(t *testing.T) { + testCases := map[string]struct { + referrerOriginal string + candidates string + referrerFinal string + filter Filter + originalNames []string + }{ + "multiple match": { + referrerOriginal: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: dep +ref: + name: oldName +`, + candidates: ` +apiVersion: apps/v1 +kind: Secret +metadata: + name: newName +--- +apiVersion: apps/v1 +kind: Secret +metadata: + name: newName2 +`, + originalNames: []string{"oldName", "oldName"}, + referrerFinal: "", + filter: Filter{ + NameFieldToUpdate: types.FieldSpec{Path: "ref/name"}, + ReferralTarget: resid.Gvk{ + Group: "apps", + Version: "v1", + Kind: "Secret", + }, + }, + }, + "no name": { + referrerOriginal: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: dep +ref: + notName: oldName +`, + candidates: ` +apiVersion: apps/v1 +kind: Secret +metadata: + name: newName +--- +apiVersion: apps/v1 +kind: Secret +metadata: + name: newName2 +`, + originalNames: []string{"oldName", "oldName"}, + referrerFinal: "", + filter: Filter{ + NameFieldToUpdate: types.FieldSpec{Path: "ref"}, + ReferralTarget: resid.Gvk{ + Group: "apps", + Version: "v1", + Kind: "Secret", + }, + }, + }, + } + + for tn, tc := range testCases { + t.Run(tn, func(t *testing.T) { + factory := provider.NewDefaultDepProvider().GetResourceFactory() + referrer, err := factory.FromBytes([]byte(tc.referrerOriginal)) + if err != nil { + t.Fatal(err) + } + tc.filter.Referrer = referrer + + resMapFactory := resmap.NewFactory(factory) + candidatesRes, err := factory.SliceFromBytesWithNames( + tc.originalNames, []byte(tc.candidates)) + if err != nil { + t.Fatal(err) + } + + candidates := resMapFactory.FromResourceSlice(candidatesRes) + tc.filter.ReferralCandidates = candidates + + _, err = filtertest_test.RunFilterE(t, tc.referrerOriginal, tc.filter) + if err == nil { + t.Fatalf("expect an error") + } + if tc.referrerFinal != "" && !assert.EqualError(t, err, tc.referrerFinal) { + t.FailNow() + } + }) + } +} + +func TestCandidatesWithDifferentPrefixSuffix(t *testing.T) { + testCases := map[string]struct { + referrerOriginal string + candidates string + referrerFinal string + filter Filter + originalNames []string + prefix []string + suffix []string + inputPrefix string + inputSuffix string + err bool + }{ + "prefix match": { + referrerOriginal: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: dep +ref: + name: oldName +`, + candidates: ` +apiVersion: apps/v1 +kind: Secret +metadata: + name: newName +--- +apiVersion: apps/v1 +kind: Secret +metadata: + name: newName2 +`, + originalNames: []string{"oldName", "oldName"}, + prefix: []string{"prefix1", "prefix2"}, + suffix: []string{"", "suffix2"}, + inputPrefix: "prefix1", + inputSuffix: "", + referrerFinal: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: dep +ref: + name: newName +`, + filter: Filter{ + NameFieldToUpdate: types.FieldSpec{Path: "ref/name"}, + ReferralTarget: resid.Gvk{ + Group: "apps", + Version: "v1", + Kind: "Secret", + }, + }, + err: false, + }, + "suffix match": { + referrerOriginal: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: dep +ref: + name: oldName +`, + candidates: ` +apiVersion: apps/v1 +kind: Secret +metadata: + name: newName +--- +apiVersion: apps/v1 +kind: Secret +metadata: + name: newName2 +`, + originalNames: []string{"oldName", "oldName"}, + prefix: []string{"", "prefix2"}, + suffix: []string{"suffix1", "suffix2"}, + inputPrefix: "", + inputSuffix: "suffix1", + referrerFinal: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: dep +ref: + name: newName +`, + filter: Filter{ + NameFieldToUpdate: types.FieldSpec{Path: "ref/name"}, + ReferralTarget: resid.Gvk{ + Group: "apps", + Version: "v1", + Kind: "Secret", + }, + }, + err: false, + }, + "prefix suffix both match": { + referrerOriginal: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: dep +ref: + name: oldName +`, + candidates: ` +apiVersion: apps/v1 +kind: Secret +metadata: + name: newName +--- +apiVersion: apps/v1 +kind: Secret +metadata: + name: newName2 +`, + originalNames: []string{"oldName", "oldName"}, + prefix: []string{"prefix1", "prefix2"}, + suffix: []string{"suffix1", "suffix2"}, + inputPrefix: "prefix1", + inputSuffix: "suffix1", + referrerFinal: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: dep +ref: + name: newName +`, + filter: Filter{ + NameFieldToUpdate: types.FieldSpec{Path: "ref/name"}, + ReferralTarget: resid.Gvk{ + Group: "apps", + Version: "v1", + Kind: "Secret", + }, + }, + err: false, + }, + "multiple match: both": { + referrerOriginal: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: dep +ref: + name: oldName +`, + candidates: ` +apiVersion: apps/v1 +kind: Secret +metadata: + name: newName +--- +apiVersion: apps/v1 +kind: Secret +metadata: + name: newName2 +`, + originalNames: []string{"oldName", "oldName"}, + prefix: []string{"prefix", "prefix"}, + suffix: []string{"suffix", "suffix"}, + inputPrefix: "prefix", + inputSuffix: "suffix", + referrerFinal: "", + filter: Filter{ + NameFieldToUpdate: types.FieldSpec{Path: "ref/name"}, + ReferralTarget: resid.Gvk{ + Group: "apps", + Version: "v1", + Kind: "Secret", + }, + }, + err: true, + }, + "multiple match: only prefix": { + referrerOriginal: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: dep +ref: + name: oldName +`, + candidates: ` +apiVersion: apps/v1 +kind: Secret +metadata: + name: newName +--- +apiVersion: apps/v1 +kind: Secret +metadata: + name: newName2 +`, + originalNames: []string{"oldName", "oldName"}, + prefix: []string{"prefix", "prefix"}, + suffix: []string{"", ""}, + inputPrefix: "prefix", + inputSuffix: "", + referrerFinal: "", + filter: Filter{ + NameFieldToUpdate: types.FieldSpec{Path: "ref/name"}, + ReferralTarget: resid.Gvk{ + Group: "apps", + Version: "v1", + Kind: "Secret", + }, + }, + err: true, + }, + "multiple match: only suffix": { + referrerOriginal: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: dep +ref: + name: oldName +`, + candidates: ` +apiVersion: apps/v1 +kind: Secret +metadata: + name: newName +--- +apiVersion: apps/v1 +kind: Secret +metadata: + name: newName2 +`, + originalNames: []string{"oldName", "oldName"}, + prefix: []string{"", ""}, + suffix: []string{"suffix", "suffix"}, + inputPrefix: "", + inputSuffix: "suffix", + referrerFinal: "", + filter: Filter{ + NameFieldToUpdate: types.FieldSpec{Path: "ref/name"}, + ReferralTarget: resid.Gvk{ + Group: "apps", + Version: "v1", + Kind: "Secret", + }, + }, + err: true, + }, + "no match: neither match": { + referrerOriginal: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: dep +ref: + name: oldName +`, + candidates: ` +apiVersion: apps/v1 +kind: Secret +metadata: + name: newName +--- +apiVersion: apps/v1 +kind: Secret +metadata: + name: newName2 +`, + originalNames: []string{"oldName", "oldName"}, + prefix: []string{"prefix1", "prefix2"}, + suffix: []string{"suffix1", "suffix2"}, + inputPrefix: "prefix", + inputSuffix: "suffix", + referrerFinal: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: dep +ref: + name: oldName +`, + filter: Filter{ + NameFieldToUpdate: types.FieldSpec{Path: "ref/name"}, + ReferralTarget: resid.Gvk{ + Group: "apps", + Version: "v1", + Kind: "Secret", + }, + }, + err: false, + }, + "no match: prefix doesn't match": { + referrerOriginal: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: dep +ref: + name: oldName +`, + candidates: ` +apiVersion: apps/v1 +kind: Secret +metadata: + name: newName +--- +apiVersion: apps/v1 +kind: Secret +metadata: + name: newName2 +`, + originalNames: []string{"oldName", "oldName"}, + prefix: []string{"prefix1", "prefix2"}, + suffix: []string{"suffix", "suffix"}, + inputPrefix: "prefix", + inputSuffix: "suffix", + referrerFinal: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: dep +ref: + name: oldName +`, + filter: Filter{ + NameFieldToUpdate: types.FieldSpec{Path: "ref/name"}, + ReferralTarget: resid.Gvk{ + Group: "apps", + Version: "v1", + Kind: "Secret", + }, + }, + err: false, + }, + "no match: suffix doesn't match": { + referrerOriginal: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: dep +ref: + name: oldName +`, + candidates: ` +apiVersion: apps/v1 +kind: Secret +metadata: + name: newName +--- +apiVersion: apps/v1 +kind: Secret +metadata: + name: newName2 +`, + originalNames: []string{"oldName", "oldName"}, + prefix: []string{"prefix", "prefix"}, + suffix: []string{"suffix1", "suffix2"}, + inputPrefix: "prefix", + inputSuffix: "suffix", + referrerFinal: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: dep +ref: + name: oldName +`, + filter: Filter{ + NameFieldToUpdate: types.FieldSpec{Path: "ref/name"}, + ReferralTarget: resid.Gvk{ + Group: "apps", + Version: "v1", + Kind: "Secret", + }, + }, + err: false, + }, + } + + for tn, tc := range testCases { + t.Run(tn, func(t *testing.T) { + factory := provider.NewDefaultDepProvider().GetResourceFactory() + referrer, err := factory.FromBytes([]byte(tc.referrerOriginal)) + if err != nil { + t.Fatal(err) + } + if tc.inputPrefix != "" { + referrer.AddNamePrefix(tc.inputPrefix) + } + if tc.inputSuffix != "" { + referrer.AddNameSuffix(tc.inputSuffix) + } + tc.filter.Referrer = referrer + + resMapFactory := resmap.NewFactory(factory) + candidatesRes, err := factory.SliceFromBytesWithNames( + tc.originalNames, []byte(tc.candidates)) + if err != nil { + t.Fatal(err) + } + for i := range candidatesRes { + if tc.prefix[i] != "" { + candidatesRes[i].AddNamePrefix(tc.prefix[i]) + } + if tc.suffix[i] != "" { + candidatesRes[i].AddNameSuffix(tc.suffix[i]) + } + } + + candidates := resMapFactory.FromResourceSlice(candidatesRes) + tc.filter.ReferralCandidates = candidates + + if !tc.err { + if !assert.Equal(t, + strings.TrimSpace(tc.referrerFinal), + strings.TrimSpace( + filtertest_test.RunFilter( + t, tc.referrerOriginal, tc.filter))) { + t.FailNow() + } + } else { + _, err := filtertest_test.RunFilterE( + t, tc.referrerOriginal, tc.filter) + if err == nil { + t.Fatalf("an error is expected") + } + } + }) + } +} diff --git a/go/internal/forked/api/filters/nameref/nameref_test.go b/go/internal/forked/api/filters/nameref/nameref_test.go new file mode 100644 index 000000000..698dce747 --- /dev/null +++ b/go/internal/forked/api/filters/nameref/nameref_test.go @@ -0,0 +1,789 @@ +package nameref + +import ( + "strings" + "testing" + + "github.com/stretchr/testify/assert" + "sigs.k8s.io/kustomize/api/provider" + "sigs.k8s.io/kustomize/api/resmap" + filtertest_test "sigs.k8s.io/kustomize/api/testutils/filtertest" + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/resid" +) + +func TestNamerefFilter(t *testing.T) { + testCases := map[string]struct { + referrerOriginal string + candidates string + referrerFinal string + filter Filter + originalNames []string + }{ + "simple scalar": { + referrerOriginal: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: dep +ref: + name: oldName +`, + candidates: ` +apiVersion: apps/v1 +kind: Secret +metadata: + name: newName +--- +apiVersion: apps/v1 +kind: NotSecret +metadata: + name: newName2 +`, + originalNames: []string{"oldName", "newName2"}, + referrerFinal: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: dep +ref: + name: newName +`, + filter: Filter{ + NameFieldToUpdate: types.FieldSpec{Path: "ref/name"}, + ReferralTarget: resid.Gvk{ + Group: "apps", + Version: "v1", + Kind: "Secret", + }, + }, + }, + "sequence": { + referrerOriginal: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: dep +seq: +- oldName1 +- oldName2 +`, + candidates: ` +apiVersion: apps/v1 +kind: Secret +metadata: + name: newName +--- +apiVersion: apps/v1 +kind: NotSecret +metadata: + name: newName2 +`, + originalNames: []string{"oldName1", "newName2"}, + referrerFinal: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: dep +seq: +- newName +- oldName2 +`, + filter: Filter{ + NameFieldToUpdate: types.FieldSpec{Path: "seq"}, + ReferralTarget: resid.Gvk{ + Group: "apps", + Version: "v1", + Kind: "Secret", + }, + }, + }, + "mapping": { + referrerOriginal: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: dep +map: + name: oldName +`, + candidates: ` +apiVersion: apps/v1 +kind: Secret +metadata: + name: newName +--- +apiVersion: apps/v1 +kind: NotSecret +metadata: + name: newName2 +`, + originalNames: []string{"oldName", "newName2"}, + referrerFinal: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: dep +map: + name: newName +`, + filter: Filter{ + NameFieldToUpdate: types.FieldSpec{Path: "map"}, + ReferralTarget: resid.Gvk{ + Group: "apps", + Version: "v1", + Kind: "Secret", + }, + }, + }, + "mapping with namespace": { + referrerOriginal: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: dep + namespace: someNs +map: + name: oldName + namespace: someNs +`, + candidates: ` +apiVersion: apps/v1 +kind: Secret +metadata: + name: newName + namespace: someNs +--- +apiVersion: apps/v1 +kind: NotSecret +metadata: + name: newName2 +--- +apiVersion: apps/v1 +kind: Secret +metadata: + name: thirdName +`, + originalNames: []string{"oldName", "oldName", "oldName"}, + referrerFinal: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: dep + namespace: someNs +map: + name: newName + namespace: someNs +`, + filter: Filter{ + NameFieldToUpdate: types.FieldSpec{Path: "map"}, + ReferralTarget: resid.Gvk{ + Group: "apps", + Version: "v1", + Kind: "Secret", + }, + }, + }, + "null value": { + referrerOriginal: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: dep +map: + name: null +`, + candidates: ` +apiVersion: apps/v1 +kind: Secret +metadata: + name: newName +--- +apiVersion: apps/v1 +kind: NotSecret +metadata: + name: newName2 +`, + originalNames: []string{"oldName", "newName2"}, + referrerFinal: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: dep +map: + name: null +`, + filter: Filter{ + NameFieldToUpdate: types.FieldSpec{Path: "map"}, + ReferralTarget: resid.Gvk{ + Group: "apps", + Version: "v1", + Kind: "Secret", + }, + }, + }, + } + + for tn, tc := range testCases { + t.Run(tn, func(t *testing.T) { + factory := provider.NewDefaultDepProvider().GetResourceFactory() + referrer, err := factory.FromBytes([]byte(tc.referrerOriginal)) + if err != nil { + t.Fatal(err) + } + tc.filter.Referrer = referrer + + resMapFactory := resmap.NewFactory(factory) + candidatesRes, err := factory.SliceFromBytesWithNames( + tc.originalNames, []byte(tc.candidates)) + if err != nil { + t.Fatal(err) + } + + candidates := resMapFactory.FromResourceSlice(candidatesRes) + tc.filter.ReferralCandidates = candidates + + result := filtertest_test.RunFilter(t, tc.referrerOriginal, tc.filter) + if !assert.Equal(t, + strings.TrimSpace(tc.referrerFinal), + strings.TrimSpace(result)) { + t.FailNow() + } + }) + } +} + +func TestNamerefFilterUnhappy(t *testing.T) { + testCases := map[string]struct { + referrerOriginal string + candidates string + referrerFinal string + filter Filter + originalNames []string + }{ + "multiple match": { + referrerOriginal: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: dep +ref: + name: oldName +`, + candidates: ` +apiVersion: apps/v1 +kind: Secret +metadata: + name: newName +--- +apiVersion: apps/v1 +kind: Secret +metadata: + name: newName2 +`, + originalNames: []string{"oldName", "oldName"}, + referrerFinal: "", + filter: Filter{ + NameFieldToUpdate: types.FieldSpec{Path: "ref/name"}, + ReferralTarget: resid.Gvk{ + Group: "apps", + Version: "v1", + Kind: "Secret", + }, + }, + }, + "no name": { + referrerOriginal: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: dep +ref: + notName: oldName +`, + candidates: ` +apiVersion: apps/v1 +kind: Secret +metadata: + name: newName +--- +apiVersion: apps/v1 +kind: Secret +metadata: + name: newName2 +`, + originalNames: []string{"oldName", "oldName"}, + referrerFinal: "", + filter: Filter{ + NameFieldToUpdate: types.FieldSpec{Path: "ref"}, + ReferralTarget: resid.Gvk{ + Group: "apps", + Version: "v1", + Kind: "Secret", + }, + }, + }, + } + + for tn, tc := range testCases { + t.Run(tn, func(t *testing.T) { + factory := provider.NewDefaultDepProvider().GetResourceFactory() + referrer, err := factory.FromBytes([]byte(tc.referrerOriginal)) + if err != nil { + t.Fatal(err) + } + tc.filter.Referrer = referrer + + resMapFactory := resmap.NewFactory(factory) + candidatesRes, err := factory.SliceFromBytesWithNames( + tc.originalNames, []byte(tc.candidates)) + if err != nil { + t.Fatal(err) + } + + candidates := resMapFactory.FromResourceSlice(candidatesRes) + tc.filter.ReferralCandidates = candidates + + _, err = filtertest_test.RunFilterE(t, tc.referrerOriginal, tc.filter) + if err == nil { + t.Fatalf("expect an error") + } + if tc.referrerFinal != "" && !assert.EqualError(t, err, tc.referrerFinal) { + t.FailNow() + } + }) + } +} + +func TestCandidatesWithDifferentPrefixSuffix(t *testing.T) { + testCases := map[string]struct { + referrerOriginal string + candidates string + referrerFinal string + filter Filter + originalNames []string + prefix []string + suffix []string + inputPrefix string + inputSuffix string + err bool + }{ + "prefix match": { + referrerOriginal: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: dep +ref: + name: oldName +`, + candidates: ` +apiVersion: apps/v1 +kind: Secret +metadata: + name: newName +--- +apiVersion: apps/v1 +kind: Secret +metadata: + name: newName2 +`, + originalNames: []string{"oldName", "oldName"}, + prefix: []string{"prefix1", "prefix2"}, + suffix: []string{"", "suffix2"}, + inputPrefix: "prefix1", + inputSuffix: "", + referrerFinal: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: dep +ref: + name: newName +`, + filter: Filter{ + NameFieldToUpdate: types.FieldSpec{Path: "ref/name"}, + ReferralTarget: resid.Gvk{ + Group: "apps", + Version: "v1", + Kind: "Secret", + }, + }, + err: false, + }, + "suffix match": { + referrerOriginal: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: dep +ref: + name: oldName +`, + candidates: ` +apiVersion: apps/v1 +kind: Secret +metadata: + name: newName +--- +apiVersion: apps/v1 +kind: Secret +metadata: + name: newName2 +`, + originalNames: []string{"oldName", "oldName"}, + prefix: []string{"", "prefix2"}, + suffix: []string{"suffix1", "suffix2"}, + inputPrefix: "", + inputSuffix: "suffix1", + referrerFinal: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: dep +ref: + name: newName +`, + filter: Filter{ + NameFieldToUpdate: types.FieldSpec{Path: "ref/name"}, + ReferralTarget: resid.Gvk{ + Group: "apps", + Version: "v1", + Kind: "Secret", + }, + }, + err: false, + }, + "prefix suffix both match": { + referrerOriginal: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: dep +ref: + name: oldName +`, + candidates: ` +apiVersion: apps/v1 +kind: Secret +metadata: + name: newName +--- +apiVersion: apps/v1 +kind: Secret +metadata: + name: newName2 +`, + originalNames: []string{"oldName", "oldName"}, + prefix: []string{"prefix1", "prefix2"}, + suffix: []string{"suffix1", "suffix2"}, + inputPrefix: "prefix1", + inputSuffix: "suffix1", + referrerFinal: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: dep +ref: + name: newName +`, + filter: Filter{ + NameFieldToUpdate: types.FieldSpec{Path: "ref/name"}, + ReferralTarget: resid.Gvk{ + Group: "apps", + Version: "v1", + Kind: "Secret", + }, + }, + err: false, + }, + "multiple match: both": { + referrerOriginal: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: dep +ref: + name: oldName +`, + candidates: ` +apiVersion: apps/v1 +kind: Secret +metadata: + name: newName +--- +apiVersion: apps/v1 +kind: Secret +metadata: + name: newName2 +`, + originalNames: []string{"oldName", "oldName"}, + prefix: []string{"prefix", "prefix"}, + suffix: []string{"suffix", "suffix"}, + inputPrefix: "prefix", + inputSuffix: "suffix", + referrerFinal: "", + filter: Filter{ + NameFieldToUpdate: types.FieldSpec{Path: "ref/name"}, + ReferralTarget: resid.Gvk{ + Group: "apps", + Version: "v1", + Kind: "Secret", + }, + }, + err: true, + }, + "multiple match: only prefix": { + referrerOriginal: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: dep +ref: + name: oldName +`, + candidates: ` +apiVersion: apps/v1 +kind: Secret +metadata: + name: newName +--- +apiVersion: apps/v1 +kind: Secret +metadata: + name: newName2 +`, + originalNames: []string{"oldName", "oldName"}, + prefix: []string{"prefix", "prefix"}, + suffix: []string{"", ""}, + inputPrefix: "prefix", + inputSuffix: "", + referrerFinal: "", + filter: Filter{ + NameFieldToUpdate: types.FieldSpec{Path: "ref/name"}, + ReferralTarget: resid.Gvk{ + Group: "apps", + Version: "v1", + Kind: "Secret", + }, + }, + err: true, + }, + "multiple match: only suffix": { + referrerOriginal: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: dep +ref: + name: oldName +`, + candidates: ` +apiVersion: apps/v1 +kind: Secret +metadata: + name: newName +--- +apiVersion: apps/v1 +kind: Secret +metadata: + name: newName2 +`, + originalNames: []string{"oldName", "oldName"}, + prefix: []string{"", ""}, + suffix: []string{"suffix", "suffix"}, + inputPrefix: "", + inputSuffix: "suffix", + referrerFinal: "", + filter: Filter{ + NameFieldToUpdate: types.FieldSpec{Path: "ref/name"}, + ReferralTarget: resid.Gvk{ + Group: "apps", + Version: "v1", + Kind: "Secret", + }, + }, + err: true, + }, + "no match: neither match": { + referrerOriginal: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: dep +ref: + name: oldName +`, + candidates: ` +apiVersion: apps/v1 +kind: Secret +metadata: + name: newName +--- +apiVersion: apps/v1 +kind: Secret +metadata: + name: newName2 +`, + originalNames: []string{"oldName", "oldName"}, + prefix: []string{"prefix1", "prefix2"}, + suffix: []string{"suffix1", "suffix2"}, + inputPrefix: "prefix", + inputSuffix: "suffix", + referrerFinal: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: dep +ref: + name: oldName +`, + filter: Filter{ + NameFieldToUpdate: types.FieldSpec{Path: "ref/name"}, + ReferralTarget: resid.Gvk{ + Group: "apps", + Version: "v1", + Kind: "Secret", + }, + }, + err: false, + }, + "no match: prefix doesn't match": { + referrerOriginal: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: dep +ref: + name: oldName +`, + candidates: ` +apiVersion: apps/v1 +kind: Secret +metadata: + name: newName +--- +apiVersion: apps/v1 +kind: Secret +metadata: + name: newName2 +`, + originalNames: []string{"oldName", "oldName"}, + prefix: []string{"prefix1", "prefix2"}, + suffix: []string{"suffix", "suffix"}, + inputPrefix: "prefix", + inputSuffix: "suffix", + referrerFinal: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: dep +ref: + name: oldName +`, + filter: Filter{ + NameFieldToUpdate: types.FieldSpec{Path: "ref/name"}, + ReferralTarget: resid.Gvk{ + Group: "apps", + Version: "v1", + Kind: "Secret", + }, + }, + err: false, + }, + "no match: suffix doesn't match": { + referrerOriginal: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: dep +ref: + name: oldName +`, + candidates: ` +apiVersion: apps/v1 +kind: Secret +metadata: + name: newName +--- +apiVersion: apps/v1 +kind: Secret +metadata: + name: newName2 +`, + originalNames: []string{"oldName", "oldName"}, + prefix: []string{"prefix", "prefix"}, + suffix: []string{"suffix1", "suffix2"}, + inputPrefix: "prefix", + inputSuffix: "suffix", + referrerFinal: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: dep +ref: + name: oldName +`, + filter: Filter{ + NameFieldToUpdate: types.FieldSpec{Path: "ref/name"}, + ReferralTarget: resid.Gvk{ + Group: "apps", + Version: "v1", + Kind: "Secret", + }, + }, + err: false, + }, + } + + for tn, tc := range testCases { + t.Run(tn, func(t *testing.T) { + factory := provider.NewDefaultDepProvider().GetResourceFactory() + referrer, err := factory.FromBytes([]byte(tc.referrerOriginal)) + if err != nil { + t.Fatal(err) + } + if tc.inputPrefix != "" { + referrer.AddNamePrefix(tc.inputPrefix) + } + if tc.inputSuffix != "" { + referrer.AddNameSuffix(tc.inputSuffix) + } + tc.filter.Referrer = referrer + + resMapFactory := resmap.NewFactory(factory) + candidatesRes, err := factory.SliceFromBytesWithNames( + tc.originalNames, []byte(tc.candidates)) + if err != nil { + t.Fatal(err) + } + for i := range candidatesRes { + if tc.prefix[i] != "" { + candidatesRes[i].AddNamePrefix(tc.prefix[i]) + } + if tc.suffix[i] != "" { + candidatesRes[i].AddNameSuffix(tc.suffix[i]) + } + } + + candidates := resMapFactory.FromResourceSlice(candidatesRes) + tc.filter.ReferralCandidates = candidates + + if !tc.err { + if !assert.Equal(t, + strings.TrimSpace(tc.referrerFinal), + strings.TrimSpace( + filtertest_test.RunFilter( + t, tc.referrerOriginal, tc.filter))) { + t.FailNow() + } + } else { + _, err := filtertest_test.RunFilterE( + t, tc.referrerOriginal, tc.filter) + if err == nil { + t.Fatalf("an error is expected") + } + } + }) + } +} diff --git a/go/internal/forked/api/filters/nameref/seqfilter.go b/go/internal/forked/api/filters/nameref/seqfilter.go new file mode 100644 index 000000000..da909954f --- /dev/null +++ b/go/internal/forked/api/filters/nameref/seqfilter.go @@ -0,0 +1,57 @@ +package nameref + +import ( + "fmt" + + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" +) + +type setFn func(*yaml.RNode) error + +type seqFilter struct { + setScalarFn setFn + setMappingFn setFn +} + +func (sf seqFilter) Filter(node *yaml.RNode) (*yaml.RNode, error) { + if yaml.IsMissingOrNull(node) { + return node, nil + } + switch node.YNode().Kind { + case yaml.ScalarNode: + // Kind: Role/ClusterRole + // FieldSpec is rules.resourceNames + err := sf.setScalarFn(node) + return node, err + case yaml.MappingNode: + // Kind: RoleBinding/ClusterRoleBinding + // FieldSpec is subjects + // Note: The corresponding fieldSpec had been changed from + // from path: subjects/name to just path: subjects. This is + // what get mutatefield to request the mapping of the whole + // map containing namespace and name instead of just a simple + // string field containing the name + err := sf.setMappingFn(node) + return node, err + default: + return node, fmt.Errorf( + "%#v is expected to be either a string or a map of string", node) + } +} + +// applyFilterToSeq will apply the filter to each element in the sequence node +func applyFilterToSeq(filter yaml.Filter, node *yaml.RNode) error { + if node.YNode().Kind != yaml.SequenceNode { + return fmt.Errorf("expect a sequence node but got %v", node.YNode().Kind) + } + + for _, elem := range node.Content() { + rnode := yaml.NewRNode(elem) + err := rnode.PipeE(filter) + if err != nil { + return err + } + } + + return nil +} diff --git a/go/internal/forked/api/filters/nameref/seqfilter.go b/go/internal/forked/api/filters/nameref/seqfilter.go new file mode 100644 index 000000000..e8cd44255 --- /dev/null +++ b/go/internal/forked/api/filters/nameref/seqfilter.go @@ -0,0 +1,57 @@ +package nameref + +import ( + "fmt" + + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/yaml" +) + +type setFn func(*yaml.RNode) error + +type seqFilter struct { + setScalarFn setFn + setMappingFn setFn +} + +func (sf seqFilter) Filter(node *yaml.RNode) (*yaml.RNode, error) { + if yaml.IsMissingOrNull(node) { + return node, nil + } + switch node.YNode().Kind { + case yaml.ScalarNode: + // Kind: Role/ClusterRole + // FieldSpec is rules.resourceNames + err := sf.setScalarFn(node) + return node, err + case yaml.MappingNode: + // Kind: RoleBinding/ClusterRoleBinding + // FieldSpec is subjects + // Note: The corresponding fieldSpec had been changed from + // from path: subjects/name to just path: subjects. This is + // what get mutatefield to request the mapping of the whole + // map containing namespace and name instead of just a simple + // string field containing the name + err := sf.setMappingFn(node) + return node, err + default: + return node, fmt.Errorf( + "%#v is expected to be either a string or a map of string", node) + } +} + +// applyFilterToSeq will apply the filter to each element in the sequence node +func applyFilterToSeq(filter yaml.Filter, node *yaml.RNode) error { + if node.YNode().Kind != yaml.SequenceNode { + return fmt.Errorf("expect a sequence node but got %v", node.YNode().Kind) + } + + for _, elem := range node.Content() { + rnode := yaml.NewRNode(elem) + err := rnode.PipeE(filter) + if err != nil { + return err + } + } + + return nil +} diff --git a/go/internal/forked/api/filters/nameref/seqfilter_test.go b/go/internal/forked/api/filters/nameref/seqfilter_test.go new file mode 100644 index 000000000..648e8117b --- /dev/null +++ b/go/internal/forked/api/filters/nameref/seqfilter_test.go @@ -0,0 +1,80 @@ +package nameref + +import ( + "strings" + "testing" + + "github.com/stretchr/testify/assert" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" +) + +func SeqFilter(node *yaml.RNode) (*yaml.RNode, error) { + if node.YNode().Value == "aaa" { + node.YNode().SetString("ccc") + } + return node, nil +} + +func TestApplyFilterToSeq(t *testing.T) { + fltr := yaml.FilterFunc(SeqFilter) + + testCases := map[string]struct { + input string + expect string + }{ + "replace in seq": { + input: ` +- aaa +- bbb`, + expect: ` +- ccc +- bbb`, + }, + } + + for tn, tc := range testCases { + t.Run(tn, func(t *testing.T) { + node, err := yaml.Parse(tc.input) + if err != nil { + t.Fatal(err) + } + err = applyFilterToSeq(fltr, node) + if err != nil { + t.Fatal(err) + } + if !assert.Equal(t, + strings.TrimSpace(tc.expect), + strings.TrimSpace(node.MustString())) { + t.Fatalf("expect:\n%s\nactual:\n%s", + strings.TrimSpace(tc.expect), + strings.TrimSpace(node.MustString())) + } + }) + } +} + +func TestApplyFilterToSeqUnhappy(t *testing.T) { + fltr := yaml.FilterFunc(SeqFilter) + + testCases := map[string]struct { + input string + }{ + "replace in seq": { + input: ` +aaa`, + }, + } + + for tn, tc := range testCases { + t.Run(tn, func(t *testing.T) { + node, err := yaml.Parse(tc.input) + if err != nil { + t.Fatal(err) + } + err = applyFilterToSeq(fltr, node) + if err == nil { + t.Fatalf("expect an error") + } + }) + } +} diff --git a/go/internal/forked/api/filters/nameref/seqfilter_test.go b/go/internal/forked/api/filters/nameref/seqfilter_test.go new file mode 100644 index 000000000..a5742040f --- /dev/null +++ b/go/internal/forked/api/filters/nameref/seqfilter_test.go @@ -0,0 +1,80 @@ +package nameref + +import ( + "strings" + "testing" + + "github.com/stretchr/testify/assert" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/yaml" +) + +func SeqFilter(node *yaml.RNode) (*yaml.RNode, error) { + if node.YNode().Value == "aaa" { + node.YNode().SetString("ccc") + } + return node, nil +} + +func TestApplyFilterToSeq(t *testing.T) { + fltr := yaml.FilterFunc(SeqFilter) + + testCases := map[string]struct { + input string + expect string + }{ + "replace in seq": { + input: ` +- aaa +- bbb`, + expect: ` +- ccc +- bbb`, + }, + } + + for tn, tc := range testCases { + t.Run(tn, func(t *testing.T) { + node, err := yaml.Parse(tc.input) + if err != nil { + t.Fatal(err) + } + err = applyFilterToSeq(fltr, node) + if err != nil { + t.Fatal(err) + } + if !assert.Equal(t, + strings.TrimSpace(tc.expect), + strings.TrimSpace(node.MustString())) { + t.Fatalf("expect:\n%s\nactual:\n%s", + strings.TrimSpace(tc.expect), + strings.TrimSpace(node.MustString())) + } + }) + } +} + +func TestApplyFilterToSeqUnhappy(t *testing.T) { + fltr := yaml.FilterFunc(SeqFilter) + + testCases := map[string]struct { + input string + }{ + "replace in seq": { + input: ` +aaa`, + }, + } + + for tn, tc := range testCases { + t.Run(tn, func(t *testing.T) { + node, err := yaml.Parse(tc.input) + if err != nil { + t.Fatal(err) + } + err = applyFilterToSeq(fltr, node) + if err == nil { + t.Fatalf("expect an error") + } + }) + } +} diff --git a/go/internal/forked/api/filters/namespace/doc.go b/go/internal/forked/api/filters/namespace/doc.go new file mode 100644 index 000000000..539758b28 --- /dev/null +++ b/go/internal/forked/api/filters/namespace/doc.go @@ -0,0 +1,9 @@ +// Copyright 2020 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +// Package namespace contains a kio.Filter implementation of the kustomize +// namespace transformer. +// +// Special cases for known Kubernetes resources have been hardcoded in addition +// to those defined by the FsSlice. +package namespace diff --git a/go/internal/forked/api/filters/namespace/example_test.go b/go/internal/forked/api/filters/namespace/example_test.go new file mode 100644 index 000000000..3581dbb51 --- /dev/null +++ b/go/internal/forked/api/filters/namespace/example_test.go @@ -0,0 +1,50 @@ +// Copyright 2020 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package namespace_test + +import ( + "bytes" + "log" + "os" + + "sigs.k8s.io/kustomize/api/filters/namespace" + "sigs.k8s.io/kustomize/api/internal/plugins/builtinconfig" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/kio" +) + +func ExampleFilter() { + fss := builtinconfig.MakeDefaultConfig().NameSpace + err := kio.Pipeline{ + Inputs: []kio.Reader{&kio.ByteReader{Reader: bytes.NewBufferString(` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: instance +--- +apiVersion: example.com/v1 +kind: Bar +metadata: + name: instance + namespace: bar +`)}}, + Filters: []kio.Filter{namespace.Filter{Namespace: "app", FsSlice: fss}}, + Outputs: []kio.Writer{kio.ByteWriter{Writer: os.Stdout}}, + }.Execute() + if err != nil { + log.Fatal(err) + } + + // Output: + // apiVersion: example.com/v1 + // kind: Foo + // metadata: + // name: instance + // namespace: app + // --- + // apiVersion: example.com/v1 + // kind: Bar + // metadata: + // name: instance + // namespace: app +} diff --git a/go/internal/forked/api/filters/namespace/example_test.go b/go/internal/forked/api/filters/namespace/example_test.go new file mode 100644 index 000000000..82d12d2f6 --- /dev/null +++ b/go/internal/forked/api/filters/namespace/example_test.go @@ -0,0 +1,50 @@ +// Copyright 2020 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package namespace_test + +import ( + "bytes" + "log" + "os" + + "sigs.k8s.io/kustomize/api/filters/namespace" + "sigs.k8s.io/kustomize/api/internal/plugins/builtinconfig" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/kio" +) + +func ExampleFilter() { + fss := builtinconfig.MakeDefaultConfig().NameSpace + err := kio.Pipeline{ + Inputs: []kio.Reader{&kio.ByteReader{Reader: bytes.NewBufferString(` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: instance +--- +apiVersion: example.com/v1 +kind: Bar +metadata: + name: instance + namespace: bar +`)}}, + Filters: []kio.Filter{namespace.Filter{Namespace: "app", FsSlice: fss}}, + Outputs: []kio.Writer{kio.ByteWriter{Writer: os.Stdout}}, + }.Execute() + if err != nil { + log.Fatal(err) + } + + // Output: + // apiVersion: example.com/v1 + // kind: Foo + // metadata: + // name: instance + // namespace: app + // --- + // apiVersion: example.com/v1 + // kind: Bar + // metadata: + // name: instance + // namespace: app +} diff --git a/go/internal/forked/api/filters/namespace/namespace.go b/go/internal/forked/api/filters/namespace/namespace.go new file mode 100644 index 000000000..4435e04d6 --- /dev/null +++ b/go/internal/forked/api/filters/namespace/namespace.go @@ -0,0 +1,162 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package namespace + +import ( + "sigs.k8s.io/kustomize/api/filters/filtersutil" + "sigs.k8s.io/kustomize/api/filters/fsslice" + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/kio" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/resid" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" +) + +type Filter struct { + // Namespace is the namespace to apply to the inputs + Namespace string `yaml:"namespace,omitempty"` + + // FsSlice contains the FieldSpecs to locate the namespace field + FsSlice types.FsSlice `json:"fieldSpecs,omitempty" yaml:"fieldSpecs,omitempty"` +} + +var _ kio.Filter = Filter{} + +func (ns Filter) Filter(nodes []*yaml.RNode) ([]*yaml.RNode, error) { + return kio.FilterAll(yaml.FilterFunc(ns.run)).Filter(nodes) +} + +// Run runs the filter on a single node rather than a slice +func (ns Filter) run(node *yaml.RNode) (*yaml.RNode, error) { + // hacks for hardcoded types -- :( + if err := ns.hacks(node); err != nil { + return nil, err + } + + // Remove the fieldspecs that are for hardcoded fields. The fieldspecs + // exist for backwards compatibility with other implementations + // of this transformation. + // This implementation of the namespace transformation + // Does not use the fieldspecs for implementing cases which + // require hardcoded logic. + ns.FsSlice = ns.removeFieldSpecsForHacks(ns.FsSlice) + + // transformations based on data -- :) + err := node.PipeE(fsslice.Filter{ + FsSlice: ns.FsSlice, + SetValue: filtersutil.SetScalar(ns.Namespace), + CreateKind: yaml.ScalarNode, // Namespace is a ScalarNode + CreateTag: yaml.NodeTagString, + }) + return node, err +} + +// hacks applies the namespace transforms that are hardcoded rather +// than specified through FieldSpecs. +func (ns Filter) hacks(obj *yaml.RNode) error { + gvk := resid.GvkFromNode(obj) + if err := ns.metaNamespaceHack(obj, gvk); err != nil { + return err + } + return ns.roleBindingHack(obj, gvk) +} + +// metaNamespaceHack is a hack for implementing the namespace transform +// for the metadata.namespace field on namespace scoped resources. +// namespace scoped resources are determined by NOT being present +// in a hard-coded list of cluster-scoped resource types (by apiVersion and kind). +// +// This hack should be updated to allow individual resources to specify +// if they are cluster scoped through either an annotation on the resources, +// or through inlined OpenAPI on the resource as a YAML comment. +func (ns Filter) metaNamespaceHack(obj *yaml.RNode, gvk resid.Gvk) error { + if gvk.IsClusterScoped() { + return nil + } + f := fsslice.Filter{ + FsSlice: []types.FieldSpec{ + {Path: types.MetadataNamespacePath, CreateIfNotPresent: true}, + }, + SetValue: filtersutil.SetScalar(ns.Namespace), + CreateKind: yaml.ScalarNode, // Namespace is a ScalarNode + } + _, err := f.Filter(obj) + return err +} + +// roleBindingHack is a hack for implementing the namespace transform +// for RoleBinding and ClusterRoleBinding resource types. +// RoleBinding and ClusterRoleBinding have namespace set on +// elements of the "subjects" field if and only if the subject elements +// "name" is "default". Otherwise the namespace is not set. +// +// Example: +// +// kind: RoleBinding +// subjects: +// - name: "default" # this will have the namespace set +// ... +// - name: "something-else" # this will not have the namespace set +// ... +func (ns Filter) roleBindingHack(obj *yaml.RNode, gvk resid.Gvk) error { + if gvk.Kind != roleBindingKind && gvk.Kind != clusterRoleBindingKind { + return nil + } + + // Lookup the namespace field on all elements. + // We should change the fieldspec so this isn't necessary. + obj, err := obj.Pipe(yaml.Lookup(subjectsField)) + if err != nil || yaml.IsMissingOrNull(obj) { + return err + } + + // add the namespace to each "subject" with name: default + err = obj.VisitElements(func(o *yaml.RNode) error { + // The only case we need to force the namespace + // if for the "service account". "default" is + // kind of hardcoded here for right now. + name, err := o.Pipe( + yaml.Lookup("name"), yaml.Match("default"), + ) + if err != nil || yaml.IsMissingOrNull(name) { + return err + } + + // set the namespace for the default account + v := yaml.NewScalarRNode(ns.Namespace) + return o.PipeE( + yaml.LookupCreate(yaml.ScalarNode, "namespace"), + yaml.FieldSetter{Value: v}, + ) + }) + + return err +} + +// removeFieldSpecsForHacks removes from the list fieldspecs that +// have hardcoded implementations +func (ns Filter) removeFieldSpecsForHacks(fs types.FsSlice) types.FsSlice { + var val types.FsSlice + for i := range fs { + // implemented by metaNamespaceHack + if fs[i].Path == types.MetadataNamespacePath { + continue + } + // implemented by roleBindingHack + if fs[i].Kind == roleBindingKind && fs[i].Path == subjectsField { + continue + } + // implemented by roleBindingHack + if fs[i].Kind == clusterRoleBindingKind && fs[i].Path == subjectsField { + continue + } + val = append(val, fs[i]) + } + return val +} + +const ( + subjectsField = "subjects" + roleBindingKind = "RoleBinding" + clusterRoleBindingKind = "ClusterRoleBinding" +) diff --git a/go/internal/forked/api/filters/namespace/namespace.go b/go/internal/forked/api/filters/namespace/namespace.go new file mode 100644 index 000000000..a22ae7287 --- /dev/null +++ b/go/internal/forked/api/filters/namespace/namespace.go @@ -0,0 +1,162 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package namespace + +import ( + "sigs.k8s.io/kustomize/api/filters/filtersutil" + "sigs.k8s.io/kustomize/api/filters/fsslice" + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/kio" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/resid" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/yaml" +) + +type Filter struct { + // Namespace is the namespace to apply to the inputs + Namespace string `yaml:"namespace,omitempty"` + + // FsSlice contains the FieldSpecs to locate the namespace field + FsSlice types.FsSlice `json:"fieldSpecs,omitempty" yaml:"fieldSpecs,omitempty"` +} + +var _ kio.Filter = Filter{} + +func (ns Filter) Filter(nodes []*yaml.RNode) ([]*yaml.RNode, error) { + return kio.FilterAll(yaml.FilterFunc(ns.run)).Filter(nodes) +} + +// Run runs the filter on a single node rather than a slice +func (ns Filter) run(node *yaml.RNode) (*yaml.RNode, error) { + // hacks for hardcoded types -- :( + if err := ns.hacks(node); err != nil { + return nil, err + } + + // Remove the fieldspecs that are for hardcoded fields. The fieldspecs + // exist for backwards compatibility with other implementations + // of this transformation. + // This implementation of the namespace transformation + // Does not use the fieldspecs for implementing cases which + // require hardcoded logic. + ns.FsSlice = ns.removeFieldSpecsForHacks(ns.FsSlice) + + // transformations based on data -- :) + err := node.PipeE(fsslice.Filter{ + FsSlice: ns.FsSlice, + SetValue: filtersutil.SetScalar(ns.Namespace), + CreateKind: yaml.ScalarNode, // Namespace is a ScalarNode + CreateTag: yaml.NodeTagString, + }) + return node, err +} + +// hacks applies the namespace transforms that are hardcoded rather +// than specified through FieldSpecs. +func (ns Filter) hacks(obj *yaml.RNode) error { + gvk := resid.GvkFromNode(obj) + if err := ns.metaNamespaceHack(obj, gvk); err != nil { + return err + } + return ns.roleBindingHack(obj, gvk) +} + +// metaNamespaceHack is a hack for implementing the namespace transform +// for the metadata.namespace field on namespace scoped resources. +// namespace scoped resources are determined by NOT being present +// in a hard-coded list of cluster-scoped resource types (by apiVersion and kind). +// +// This hack should be updated to allow individual resources to specify +// if they are cluster scoped through either an annotation on the resources, +// or through inlined OpenAPI on the resource as a YAML comment. +func (ns Filter) metaNamespaceHack(obj *yaml.RNode, gvk resid.Gvk) error { + if gvk.IsClusterScoped() { + return nil + } + f := fsslice.Filter{ + FsSlice: []types.FieldSpec{ + {Path: types.MetadataNamespacePath, CreateIfNotPresent: true}, + }, + SetValue: filtersutil.SetScalar(ns.Namespace), + CreateKind: yaml.ScalarNode, // Namespace is a ScalarNode + } + _, err := f.Filter(obj) + return err +} + +// roleBindingHack is a hack for implementing the namespace transform +// for RoleBinding and ClusterRoleBinding resource types. +// RoleBinding and ClusterRoleBinding have namespace set on +// elements of the "subjects" field if and only if the subject elements +// "name" is "default". Otherwise the namespace is not set. +// +// Example: +// +// kind: RoleBinding +// subjects: +// - name: "default" # this will have the namespace set +// ... +// - name: "something-else" # this will not have the namespace set +// ... +func (ns Filter) roleBindingHack(obj *yaml.RNode, gvk resid.Gvk) error { + if gvk.Kind != roleBindingKind && gvk.Kind != clusterRoleBindingKind { + return nil + } + + // Lookup the namespace field on all elements. + // We should change the fieldspec so this isn't necessary. + obj, err := obj.Pipe(yaml.Lookup(subjectsField)) + if err != nil || yaml.IsMissingOrNull(obj) { + return err + } + + // add the namespace to each "subject" with name: default + err = obj.VisitElements(func(o *yaml.RNode) error { + // The only case we need to force the namespace + // if for the "service account". "default" is + // kind of hardcoded here for right now. + name, err := o.Pipe( + yaml.Lookup("name"), yaml.Match("default"), + ) + if err != nil || yaml.IsMissingOrNull(name) { + return err + } + + // set the namespace for the default account + v := yaml.NewScalarRNode(ns.Namespace) + return o.PipeE( + yaml.LookupCreate(yaml.ScalarNode, "namespace"), + yaml.FieldSetter{Value: v}, + ) + }) + + return err +} + +// removeFieldSpecsForHacks removes from the list fieldspecs that +// have hardcoded implementations +func (ns Filter) removeFieldSpecsForHacks(fs types.FsSlice) types.FsSlice { + var val types.FsSlice + for i := range fs { + // implemented by metaNamespaceHack + if fs[i].Path == types.MetadataNamespacePath { + continue + } + // implemented by roleBindingHack + if fs[i].Kind == roleBindingKind && fs[i].Path == subjectsField { + continue + } + // implemented by roleBindingHack + if fs[i].Kind == clusterRoleBindingKind && fs[i].Path == subjectsField { + continue + } + val = append(val, fs[i]) + } + return val +} + +const ( + subjectsField = "subjects" + roleBindingKind = "RoleBinding" + clusterRoleBindingKind = "ClusterRoleBinding" +) diff --git a/go/internal/forked/api/filters/namespace/namespace_test.go b/go/internal/forked/api/filters/namespace/namespace_test.go new file mode 100644 index 000000000..e9854811e --- /dev/null +++ b/go/internal/forked/api/filters/namespace/namespace_test.go @@ -0,0 +1,311 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package namespace_test + +import ( + "strings" + "testing" + + "github.com/stretchr/testify/assert" + "sigs.k8s.io/kustomize/api/filters/namespace" + "sigs.k8s.io/kustomize/api/internal/plugins/builtinconfig" + filtertest_test "sigs.k8s.io/kustomize/api/testutils/filtertest" + "sigs.k8s.io/kustomize/api/types" +) + +var tests = []TestCase{ + { + name: "add", + input: ` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: instance +--- +apiVersion: example.com/v1 +kind: Bar +metadata: + name: instance +`, + expected: ` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: instance + namespace: foo +--- +apiVersion: example.com/v1 +kind: Bar +metadata: + name: instance + namespace: foo +`, + filter: namespace.Filter{Namespace: "foo"}, + }, + + { + name: "null_ns", + input: ` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: instance + namespace: null +--- +apiVersion: example.com/v1 +kind: Bar +metadata: + name: instance + namespace: null +`, + expected: ` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: instance + namespace: foo +--- +apiVersion: example.com/v1 +kind: Bar +metadata: + name: instance + namespace: foo +`, + filter: namespace.Filter{Namespace: "foo"}, + }, + + { + name: "add-recurse", + input: ` +apiVersion: example.com/v1 +kind: Foo +--- +apiVersion: example.com/v1 +kind: Bar +`, + expected: ` +apiVersion: example.com/v1 +kind: Foo +metadata: + namespace: foo +--- +apiVersion: example.com/v1 +kind: Bar +metadata: + namespace: foo +`, + filter: namespace.Filter{Namespace: "foo"}, + }, + + { + name: "update", + input: ` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: instance + # update this namespace + namespace: bar +--- +apiVersion: example.com/v1 +kind: Bar +metadata: + name: instance + namespace: bar +`, + expected: ` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: instance + # update this namespace + namespace: foo +--- +apiVersion: example.com/v1 +kind: Bar +metadata: + name: instance + namespace: foo +`, + filter: namespace.Filter{Namespace: "foo"}, + }, + + { + name: "update-rolebinding", + input: ` +apiVersion: example.com/v1 +kind: RoleBinding +subjects: +- name: default +--- +apiVersion: example.com/v1 +kind: RoleBinding +subjects: +- name: default + namespace: foo +--- +apiVersion: example.com/v1 +kind: RoleBinding +subjects: +- name: something +--- +apiVersion: example.com/v1 +kind: RoleBinding +subjects: +- name: something + namespace: foo +`, + expected: ` +apiVersion: example.com/v1 +kind: RoleBinding +subjects: +- name: default + namespace: bar +metadata: + namespace: bar +--- +apiVersion: example.com/v1 +kind: RoleBinding +subjects: +- name: default + namespace: bar +metadata: + namespace: bar +--- +apiVersion: example.com/v1 +kind: RoleBinding +subjects: +- name: something +metadata: + namespace: bar +--- +apiVersion: example.com/v1 +kind: RoleBinding +subjects: +- name: something + namespace: foo +metadata: + namespace: bar +`, + filter: namespace.Filter{Namespace: "bar"}, + }, + + { + name: "update-clusterrolebinding", + input: ` +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +subjects: +- name: default +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +subjects: +- name: default + namespace: foo +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +subjects: +- name: something +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +subjects: +- name: something + namespace: foo +`, + expected: ` +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +subjects: +- name: default + namespace: bar +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +subjects: +- name: default + namespace: bar +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +subjects: +- name: something +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +subjects: +- name: something + namespace: foo +`, + filter: namespace.Filter{Namespace: "bar"}, + }, + + { + name: "data-fieldspecs", + input: ` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: instance +--- +apiVersion: example.com/v1 +kind: Bar +metadata: + name: instance +`, + expected: ` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: instance + namespace: foo +a: + b: + c: foo +--- +apiVersion: example.com/v1 +kind: Bar +metadata: + name: instance + namespace: foo +a: + b: + c: foo +`, + filter: namespace.Filter{Namespace: "foo"}, + fsslice: []types.FieldSpec{ + { + Path: "a/b/c", + CreateIfNotPresent: true, + }, + }, + }, +} + +type TestCase struct { + name string + input string + expected string + filter namespace.Filter + fsslice types.FsSlice +} + +var config = builtinconfig.MakeDefaultConfig() + +func TestNamespace_Filter(t *testing.T) { + for i := range tests { + test := tests[i] + t.Run(test.name, func(t *testing.T) { + test.filter.FsSlice = append(config.NameSpace, test.fsslice...) + if !assert.Equal(t, + strings.TrimSpace(test.expected), + strings.TrimSpace( + filtertest_test.RunFilter(t, test.input, test.filter))) { + t.FailNow() + } + }) + } +} diff --git a/go/internal/forked/api/filters/patchjson6902/doc.go b/go/internal/forked/api/filters/patchjson6902/doc.go new file mode 100644 index 000000000..ec4cfa821 --- /dev/null +++ b/go/internal/forked/api/filters/patchjson6902/doc.go @@ -0,0 +1,6 @@ +// Copyright 2020 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +// Package namespace contains a kio.Filter implementation of the kustomize +// patchjson6902 transformer +package patchjson6902 diff --git a/go/internal/forked/api/filters/patchjson6902/example_test.go b/go/internal/forked/api/filters/patchjson6902/example_test.go new file mode 100644 index 000000000..4805024c3 --- /dev/null +++ b/go/internal/forked/api/filters/patchjson6902/example_test.go @@ -0,0 +1,55 @@ +// Copyright 2020 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package patchjson6902 + +import ( + "bytes" + "log" + "os" + + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/kio" +) + +func ExampleFilter() { + err := kio.Pipeline{ + Inputs: []kio.Reader{&kio.ByteReader{Reader: bytes.NewBufferString(` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: instance +--- +apiVersion: example.com/v1 +kind: Bar +metadata: + name: instance + namespace: bar +`)}}, + Filters: []kio.Filter{ + Filter{ + Patch: ` +- op: replace + path: /metadata/namespace + value: "ns" +`, + }, + }, + Outputs: []kio.Writer{kio.ByteWriter{Writer: os.Stdout}}, + }.Execute() + if err != nil { + log.Fatal(err) + } + + // Output: + // apiVersion: example.com/v1 + // kind: Foo + // metadata: + // name: instance + // namespace: ns + // --- + // apiVersion: example.com/v1 + // kind: Bar + // metadata: + // name: instance + // namespace: ns +} diff --git a/go/internal/forked/api/filters/patchjson6902/example_test.go b/go/internal/forked/api/filters/patchjson6902/example_test.go new file mode 100644 index 000000000..d0b2bd586 --- /dev/null +++ b/go/internal/forked/api/filters/patchjson6902/example_test.go @@ -0,0 +1,55 @@ +// Copyright 2020 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package patchjson6902 + +import ( + "bytes" + "log" + "os" + + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/kio" +) + +func ExampleFilter() { + err := kio.Pipeline{ + Inputs: []kio.Reader{&kio.ByteReader{Reader: bytes.NewBufferString(` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: instance +--- +apiVersion: example.com/v1 +kind: Bar +metadata: + name: instance + namespace: bar +`)}}, + Filters: []kio.Filter{ + Filter{ + Patch: ` +- op: replace + path: /metadata/namespace + value: "ns" +`, + }, + }, + Outputs: []kio.Writer{kio.ByteWriter{Writer: os.Stdout}}, + }.Execute() + if err != nil { + log.Fatal(err) + } + + // Output: + // apiVersion: example.com/v1 + // kind: Foo + // metadata: + // name: instance + // namespace: ns + // --- + // apiVersion: example.com/v1 + // kind: Bar + // metadata: + // name: instance + // namespace: ns +} diff --git a/go/internal/forked/api/filters/patchjson6902/patchjson6902.go b/go/internal/forked/api/filters/patchjson6902/patchjson6902.go new file mode 100644 index 000000000..352baaf61 --- /dev/null +++ b/go/internal/forked/api/filters/patchjson6902/patchjson6902.go @@ -0,0 +1,65 @@ +// Copyright 2020 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package patchjson6902 + +import ( + "strings" + + jsonpatch "github.com/evanphx/json-patch" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/kio" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" + k8syaml "sigs.k8s.io/yaml" +) + +type Filter struct { + Patch string + + decodedPatch jsonpatch.Patch +} + +var _ kio.Filter = Filter{} + +func (pf Filter) Filter(nodes []*yaml.RNode) ([]*yaml.RNode, error) { + decodedPatch, err := pf.decodePatch() + if err != nil { + return nil, err + } + pf.decodedPatch = decodedPatch + return kio.FilterAll(yaml.FilterFunc(pf.run)).Filter(nodes) +} + +func (pf Filter) decodePatch() (jsonpatch.Patch, error) { + patch := pf.Patch + // If the patch doesn't look like a JSON6902 patch, we + // try to parse it to json. + if !strings.HasPrefix(pf.Patch, "[") { + p, err := k8syaml.YAMLToJSON([]byte(patch)) + if err != nil { + return nil, err + } + patch = string(p) + } + decodedPatch, err := jsonpatch.DecodePatch([]byte(patch)) + if err != nil { + return nil, err + } + return decodedPatch, nil +} + +func (pf Filter) run(node *yaml.RNode) (*yaml.RNode, error) { + // We don't actually use the kyaml library for manipulating the + // yaml here. We just marshal it to json and rely on the + // jsonpatch library to take care of applying the patch. + // This means ordering might not be preserved with this filter. + b, err := node.MarshalJSON() + if err != nil { + return nil, err + } + res, err := pf.decodedPatch.Apply(b) + if err != nil { + return nil, err + } + err = node.UnmarshalJSON(res) + return node, err +} diff --git a/go/internal/forked/api/filters/patchjson6902/patchjson6902.go b/go/internal/forked/api/filters/patchjson6902/patchjson6902.go new file mode 100644 index 000000000..b71c58b1a --- /dev/null +++ b/go/internal/forked/api/filters/patchjson6902/patchjson6902.go @@ -0,0 +1,65 @@ +// Copyright 2020 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package patchjson6902 + +import ( + "strings" + + jsonpatch "github.com/evanphx/json-patch" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/kio" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/yaml" + k8syaml "sigs.k8s.io/yaml" +) + +type Filter struct { + Patch string + + decodedPatch jsonpatch.Patch +} + +var _ kio.Filter = Filter{} + +func (pf Filter) Filter(nodes []*yaml.RNode) ([]*yaml.RNode, error) { + decodedPatch, err := pf.decodePatch() + if err != nil { + return nil, err + } + pf.decodedPatch = decodedPatch + return kio.FilterAll(yaml.FilterFunc(pf.run)).Filter(nodes) +} + +func (pf Filter) decodePatch() (jsonpatch.Patch, error) { + patch := pf.Patch + // If the patch doesn't look like a JSON6902 patch, we + // try to parse it to json. + if !strings.HasPrefix(pf.Patch, "[") { + p, err := k8syaml.YAMLToJSON([]byte(patch)) + if err != nil { + return nil, err + } + patch = string(p) + } + decodedPatch, err := jsonpatch.DecodePatch([]byte(patch)) + if err != nil { + return nil, err + } + return decodedPatch, nil +} + +func (pf Filter) run(node *yaml.RNode) (*yaml.RNode, error) { + // We don't actually use the kyaml library for manipulating the + // yaml here. We just marshal it to json and rely on the + // jsonpatch library to take care of applying the patch. + // This means ordering might not be preserved with this filter. + b, err := node.MarshalJSON() + if err != nil { + return nil, err + } + res, err := pf.decodedPatch.Apply(b) + if err != nil { + return nil, err + } + err = node.UnmarshalJSON(res) + return node, err +} diff --git a/go/internal/forked/api/filters/patchjson6902/patchjson6902_test.go b/go/internal/forked/api/filters/patchjson6902/patchjson6902_test.go new file mode 100644 index 000000000..47e7edf80 --- /dev/null +++ b/go/internal/forked/api/filters/patchjson6902/patchjson6902_test.go @@ -0,0 +1,173 @@ +// Copyright 2020 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package patchjson6902 + +import ( + "strings" + "testing" + + "github.com/stretchr/testify/assert" + filtertest "sigs.k8s.io/kustomize/api/testutils/filtertest" +) + +const input = ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: myDeploy +spec: + replica: 2 + template: + metadata: + labels: + old-label: old-value + spec: + containers: + - image: nginx + name: nginx +` + +func TestSomething(t *testing.T) { + testCases := []struct { + testName string + input string + filter Filter + expectedOutput string + }{ + { + testName: "single operation, json", + input: input, + filter: Filter{ + Patch: `[ +{"op": "replace", "path": "/spec/replica", "value": 5} +]`, + }, + expectedOutput: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: myDeploy +spec: + replica: 5 + template: + metadata: + labels: + old-label: old-value + spec: + containers: + - image: nginx + name: nginx +`, + }, + { + testName: "multiple operations, json", + input: input, + filter: Filter{ + Patch: `[ +{"op": "replace", "path": "/spec/template/spec/containers/0/name", "value": "my-nginx"}, +{"op": "add", "path": "/spec/replica", "value": 999}, +{"op": "add", "path": "/spec/template/spec/containers/0/command", "value": ["arg1", "arg2", "arg3"]} +]`, + }, + expectedOutput: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: myDeploy +spec: + replica: 999 + template: + metadata: + labels: + old-label: old-value + spec: + containers: + - command: + - arg1 + - arg2 + - arg3 + image: nginx + name: my-nginx +`, + }, + { + testName: "single operation, yaml", + input: input, + filter: Filter{ + Patch: ` +- op: replace + path: /spec/replica + value: 5 +`, + }, + expectedOutput: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: myDeploy +spec: + replica: 5 + template: + metadata: + labels: + old-label: old-value + spec: + containers: + - image: nginx + name: nginx +`, + }, + { + testName: "multiple operations, yaml", + input: input, + filter: Filter{ + Patch: ` +- op: replace + path: /spec/template/spec/containers/0/name + value: my-nginx +- op: add + path: /spec/replica + value: 999 +- op: add + path: /spec/template/spec/containers/0/command + value: + - arg1 + - arg2 + - arg3 +`, + }, + expectedOutput: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: myDeploy +spec: + replica: 999 + template: + metadata: + labels: + old-label: old-value + spec: + containers: + - command: + - arg1 + - arg2 + - arg3 + image: nginx + name: my-nginx +`, + }, + } + + for _, tc := range testCases { + t.Run(tc.testName, func(t *testing.T) { + if !assert.Equal(t, + strings.TrimSpace(tc.expectedOutput), + strings.TrimSpace( + filtertest.RunFilter(t, tc.input, tc.filter))) { + t.FailNow() + } + }) + } +} diff --git a/go/internal/forked/api/filters/patchstrategicmerge/doc.go b/go/internal/forked/api/filters/patchstrategicmerge/doc.go new file mode 100644 index 000000000..1733fd8a2 --- /dev/null +++ b/go/internal/forked/api/filters/patchstrategicmerge/doc.go @@ -0,0 +1,6 @@ +// Copyright 2020 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +// Package patchstrategicmerge contains a kio.Filter implementation of the +// kustomize strategic merge patch transformer. +package patchstrategicmerge diff --git a/go/internal/forked/api/filters/patchstrategicmerge/example_test.go b/go/internal/forked/api/filters/patchstrategicmerge/example_test.go new file mode 100644 index 000000000..5139a3b31 --- /dev/null +++ b/go/internal/forked/api/filters/patchstrategicmerge/example_test.go @@ -0,0 +1,49 @@ +// Copyright 2020 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package patchstrategicmerge + +import ( + "bytes" + "log" + "os" + + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/kio" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" +) + +func ExampleFilter() { + err := kio.Pipeline{ + Inputs: []kio.Reader{&kio.ByteReader{Reader: bytes.NewBufferString(` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: instance +spec: + replicas: 3 +`)}}, + Filters: []kio.Filter{Filter{ + Patch: yaml.MustParse(` +spec: + template: + containers: + - image: nginx +`), + }}, + Outputs: []kio.Writer{kio.ByteWriter{Writer: os.Stdout}}, + }.Execute() + if err != nil { + log.Fatal(err) + } + + // Output: + // apiVersion: example.com/v1 + // kind: Foo + // metadata: + // name: instance + // spec: + // replicas: 3 + // template: + // containers: + // - image: nginx +} diff --git a/go/internal/forked/api/filters/patchstrategicmerge/example_test.go b/go/internal/forked/api/filters/patchstrategicmerge/example_test.go new file mode 100644 index 000000000..801f3d508 --- /dev/null +++ b/go/internal/forked/api/filters/patchstrategicmerge/example_test.go @@ -0,0 +1,49 @@ +// Copyright 2020 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package patchstrategicmerge + +import ( + "bytes" + "log" + "os" + + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/kio" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/yaml" +) + +func ExampleFilter() { + err := kio.Pipeline{ + Inputs: []kio.Reader{&kio.ByteReader{Reader: bytes.NewBufferString(` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: instance +spec: + replicas: 3 +`)}}, + Filters: []kio.Filter{Filter{ + Patch: yaml.MustParse(` +spec: + template: + containers: + - image: nginx +`), + }}, + Outputs: []kio.Writer{kio.ByteWriter{Writer: os.Stdout}}, + }.Execute() + if err != nil { + log.Fatal(err) + } + + // Output: + // apiVersion: example.com/v1 + // kind: Foo + // metadata: + // name: instance + // spec: + // replicas: 3 + // template: + // containers: + // - image: nginx +} diff --git a/go/internal/forked/api/filters/patchstrategicmerge/patchstrategicmerge.go b/go/internal/forked/api/filters/patchstrategicmerge/patchstrategicmerge.go new file mode 100644 index 000000000..2bbce3dcc --- /dev/null +++ b/go/internal/forked/api/filters/patchstrategicmerge/patchstrategicmerge.go @@ -0,0 +1,36 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package patchstrategicmerge + +import ( + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/kio" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml/merge2" +) + +type Filter struct { + Patch *yaml.RNode +} + +var _ kio.Filter = Filter{} + +// Filter does a strategic merge patch, which can delete nodes. +func (pf Filter) Filter(nodes []*yaml.RNode) ([]*yaml.RNode, error) { + var result []*yaml.RNode + for i := range nodes { + r, err := merge2.Merge( + pf.Patch, nodes[i], + yaml.MergeOptions{ + ListIncreaseDirection: yaml.MergeOptionsListPrepend, + }, + ) + if err != nil { + return nil, err + } + if r != nil { + result = append(result, r) + } + } + return result, nil +} diff --git a/go/internal/forked/api/filters/patchstrategicmerge/patchstrategicmerge.go b/go/internal/forked/api/filters/patchstrategicmerge/patchstrategicmerge.go new file mode 100644 index 000000000..2fa1b4b44 --- /dev/null +++ b/go/internal/forked/api/filters/patchstrategicmerge/patchstrategicmerge.go @@ -0,0 +1,36 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package patchstrategicmerge + +import ( + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/kio" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/yaml" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/yaml/merge2" +) + +type Filter struct { + Patch *yaml.RNode +} + +var _ kio.Filter = Filter{} + +// Filter does a strategic merge patch, which can delete nodes. +func (pf Filter) Filter(nodes []*yaml.RNode) ([]*yaml.RNode, error) { + var result []*yaml.RNode + for i := range nodes { + r, err := merge2.Merge( + pf.Patch, nodes[i], + yaml.MergeOptions{ + ListIncreaseDirection: yaml.MergeOptionsListPrepend, + }, + ) + if err != nil { + return nil, err + } + if r != nil { + result = append(result, r) + } + } + return result, nil +} diff --git a/go/internal/forked/api/filters/patchstrategicmerge/patchstrategicmerge_test.go b/go/internal/forked/api/filters/patchstrategicmerge/patchstrategicmerge_test.go new file mode 100644 index 000000000..2f1088c91 --- /dev/null +++ b/go/internal/forked/api/filters/patchstrategicmerge/patchstrategicmerge_test.go @@ -0,0 +1,749 @@ +package patchstrategicmerge + +import ( + "strings" + "testing" + + "github.com/stretchr/testify/assert" + filtertest "sigs.k8s.io/kustomize/api/testutils/filtertest" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" +) + +func TestFilter(t *testing.T) { + testCases := map[string]struct { + input string + patch *yaml.RNode + expected string + }{ + "simple": { + input: `apiVersion: v1 +kind: Deployment +metadata: + name: clown +spec: + numReplicas: 1 +`, + patch: yaml.MustParse(`apiVersion: v1 +kind: Deployment +metadata: + name: clown +spec: + numReplicas: 999 +`), + expected: `apiVersion: v1 +kind: Deployment +metadata: + name: clown +spec: + numReplicas: 999 +`, + }, + "nullMapEntry1": { + input: ` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: my-foo +spec: + bar: + B: + C: Z +`, + patch: yaml.MustParse(` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: my-foo +spec: + bar: + C: Z + D: W + baz: + hello: world +`), + expected: ` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: my-foo +spec: + bar: + C: Z + D: W + baz: + hello: world +`, + }, + "nullMapEntry2": { + input: ` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: my-foo +spec: + bar: + C: Z + D: W + baz: + hello: world +`, + patch: yaml.MustParse(` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: my-foo +spec: + bar: + B: + C: Z +`), + expected: ` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: my-foo +spec: + bar: + C: Z + D: W + baz: + hello: world +`, + }, + "simple patch": { + input: ` +apiVersion: apps/v1 +metadata: + name: myDeploy +kind: Deployment +`, + patch: yaml.MustParse(` +metadata: + name: yourDeploy +`), + expected: ` +apiVersion: apps/v1 +metadata: + name: yourDeploy +kind: Deployment +`, + }, + "container patch": { + input: ` +apiVersion: apps/v1 +metadata: + name: myDeploy +kind: Deployment +spec: + template: + spec: + containers: + - name: foo1 + - name: foo2 + - name: foo3 +`, + patch: yaml.MustParse(` +apiVersion: apps/v1 +metadata: + name: myDeploy +kind: Deployment +spec: + template: + spec: + containers: + - name: foo0 +`), + expected: ` +apiVersion: apps/v1 +metadata: + name: myDeploy +kind: Deployment +spec: + template: + spec: + containers: + - name: foo0 + - name: foo1 + - name: foo2 + - name: foo3 +`, + }, + "volumes patch": { + input: ` +apiVersion: apps/v1 +metadata: + name: myDeploy +kind: Deployment +spec: + template: + spec: + volumes: + - name: foo1 + - name: foo2 + - name: foo3 +`, + patch: yaml.MustParse(` +apiVersion: apps/v1 +metadata: + name: myDeploy +kind: Deployment +spec: + template: + spec: + volumes: + - name: foo0 +`), + expected: ` +apiVersion: apps/v1 +metadata: + name: myDeploy +kind: Deployment +spec: + template: + spec: + volumes: + - name: foo0 + - name: foo1 + - name: foo2 + - name: foo3 +`, + }, + "nested patch": { + input: ` +apiVersion: apps/v1 +metadata: + name: myDeploy +kind: Deployment +spec: + containers: + - name: nginx + args: + - abc +`, + patch: yaml.MustParse(` +spec: + containers: + - name: nginx + args: + - def +`), + expected: ` +apiVersion: apps/v1 +metadata: + name: myDeploy +kind: Deployment +spec: + containers: + - name: nginx + args: + - def +`, + }, + "remove mapping - directive": { + input: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: myDeploy +spec: + template: + spec: + containers: + - name: test + image: test +`, + patch: yaml.MustParse(` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: myDeploy +spec: + template: + spec: + containers: + - name: test + image: test + $patch: delete +`), + expected: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: myDeploy +spec: + template: + spec: + containers: [] +`, + }, + "replace mapping - directive": { + input: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: myDeploy +spec: + template: + spec: + containers: + - name: test + image: test +`, + patch: yaml.MustParse(` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: myDeploy +spec: + template: + spec: + $patch: replace + containers: + - name: new +`), + expected: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: myDeploy +spec: + template: + spec: + containers: + - name: new +`, + }, + "merge mapping - directive": { + input: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: myDeploy +spec: + template: + spec: + containers: + - name: test + image: test +`, + patch: yaml.MustParse(` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: myDeploy +spec: + template: + spec: + containers: + - name: test + image: test1 + $patch: merge +`), + expected: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: myDeploy +spec: + template: + spec: + containers: + - name: test + image: test1 +`, + }, + "remove list - directive": { + input: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: myDeploy +spec: + template: + spec: + containers: + - name: test + image: test +`, + patch: yaml.MustParse(` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: myDeploy +spec: + template: + spec: + containers: + - whatever + - $patch: delete +`), + expected: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: myDeploy +spec: + template: + spec: {} +`, + }, + "replace list - directive": { + input: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: myDeploy +spec: + template: + spec: + containers: + - name: test + image: test +`, + patch: yaml.MustParse(` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: myDeploy +spec: + template: + spec: + containers: + - name: replace + image: replace + - $patch: replace +`), + expected: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: myDeploy +spec: + template: + spec: + containers: + - name: replace + image: replace +`, + }, + "merge list - directive": { + input: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: myDeploy +spec: + template: + spec: + containers: + - name: test + image: test +`, + patch: yaml.MustParse(` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: myDeploy +spec: + template: + spec: + containers: + - name: test2 + image: test2 + - $patch: merge +`), + expected: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: myDeploy +spec: + template: + spec: + containers: + - name: test2 + image: test2 + - name: test + image: test +`, + }, + "list map keys - add a port, no names": { + input: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: test-deployment +spec: + template: + spec: + containers: + - image: test-image + name: test-deployment + ports: + - containerPort: 8080 + protocol: TCP +`, + patch: yaml.MustParse(` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: test-deployment +spec: + template: + spec: + containers: + - image: test-image + name: test-deployment + ports: + - containerPort: 8080 + protocol: UDP + - containerPort: 80 + protocol: UDP +`), + expected: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: test-deployment +spec: + template: + spec: + containers: + - image: test-image + name: test-deployment + ports: + - containerPort: 8080 + protocol: UDP + - containerPort: 80 + protocol: UDP + - containerPort: 8080 + protocol: TCP +`, + }, + "list map keys - add name to port": { + input: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: test-deployment +spec: + template: + spec: + containers: + - image: test-image + name: test-deployment + ports: + - containerPort: 8080 + protocol: UDP + - containerPort: 8080 + protocol: TCP +`, + patch: yaml.MustParse(` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: test-deployment +spec: + template: + spec: + containers: + - image: test-image + name: test-deployment + ports: + - containerPort: 8080 + protocol: UDP + name: UDP-name-patch +`), + expected: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: test-deployment +spec: + template: + spec: + containers: + - image: test-image + name: test-deployment + ports: + - containerPort: 8080 + protocol: UDP + name: UDP-name-patch + - containerPort: 8080 + protocol: TCP +`, + }, + "list map keys - replace port name": { + input: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: test-deployment +spec: + template: + spec: + containers: + - image: test-image + name: test-deployment + ports: + - containerPort: 8080 + protocol: UDP + name: UDP-name-original + - containerPort: 8080 + protocol: TCP + name: TCP-name-original +`, + patch: yaml.MustParse(` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: test-deployment +spec: + template: + spec: + containers: + - image: test-image + name: test-deployment + ports: + - containerPort: 8080 + protocol: UDP + name: UDP-name-patch +`), + expected: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: test-deployment +spec: + template: + spec: + containers: + - image: test-image + name: test-deployment + ports: + - containerPort: 8080 + protocol: UDP + name: UDP-name-patch + - containerPort: 8080 + protocol: TCP + name: TCP-name-original +`, + }, + "list map keys - add a port, no protocol": { + input: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: test-deployment +spec: + template: + spec: + containers: + - image: test-image + name: test-deployment + ports: + - containerPort: 8080 +`, + patch: yaml.MustParse(` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: test-deployment +spec: + template: + spec: + containers: + - image: test-image + name: test-deployment + ports: + - containerPort: 80 +`), + expected: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: test-deployment +spec: + template: + spec: + containers: + - image: test-image + name: test-deployment + ports: + - containerPort: 80 + - containerPort: 8080 +`, + }, + + // Test for issue #3513 + // Currently broken; when one port has only containerPort, the output + // should not merge containerPort 8301 together + // This occurs because when protocol is missing on the first port, + // the merge code uses [containerPort] as the merge key rather than + // [containerPort, protocol] + "list map keys - protocol only present on some ports": { + input: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: test-deployment +spec: + template: + spec: + containers: + - name: consul + image: "dashicorp/consul:1.9.1" + ports: + - containerPort: 8500 + name: http + - containerPort: 8301 + protocol: "TCP" + - containerPort: 8301 + protocol: "UDP" +`, + patch: yaml.MustParse(` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: test-deployment + labels: + test: label +`), + expected: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: test-deployment + labels: + test: label +spec: + template: + spec: + containers: + - name: consul + image: "dashicorp/consul:1.9.1" + ports: + - containerPort: 8500 + name: http + - containerPort: 8301 + protocol: "TCP" + - containerPort: 8301 + protocol: "UDP" +`, + }, + } + + for tn, tc := range testCases { + t.Run(tn, func(t *testing.T) { + f := Filter{ + Patch: tc.patch, + } + if !assert.Equal(t, + strings.TrimSpace(tc.expected), + strings.TrimSpace( + filtertest.RunFilter(t, tc.input, f))) { + t.FailNow() + } + }) + } +} diff --git a/go/internal/forked/api/filters/patchstrategicmerge/patchstrategicmerge_test.go b/go/internal/forked/api/filters/patchstrategicmerge/patchstrategicmerge_test.go new file mode 100644 index 000000000..ffb4fb20a --- /dev/null +++ b/go/internal/forked/api/filters/patchstrategicmerge/patchstrategicmerge_test.go @@ -0,0 +1,749 @@ +package patchstrategicmerge + +import ( + "strings" + "testing" + + "github.com/stretchr/testify/assert" + filtertest "sigs.k8s.io/kustomize/api/testutils/filtertest" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/yaml" +) + +func TestFilter(t *testing.T) { + testCases := map[string]struct { + input string + patch *yaml.RNode + expected string + }{ + "simple": { + input: `apiVersion: v1 +kind: Deployment +metadata: + name: clown +spec: + numReplicas: 1 +`, + patch: yaml.MustParse(`apiVersion: v1 +kind: Deployment +metadata: + name: clown +spec: + numReplicas: 999 +`), + expected: `apiVersion: v1 +kind: Deployment +metadata: + name: clown +spec: + numReplicas: 999 +`, + }, + "nullMapEntry1": { + input: ` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: my-foo +spec: + bar: + B: + C: Z +`, + patch: yaml.MustParse(` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: my-foo +spec: + bar: + C: Z + D: W + baz: + hello: world +`), + expected: ` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: my-foo +spec: + bar: + C: Z + D: W + baz: + hello: world +`, + }, + "nullMapEntry2": { + input: ` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: my-foo +spec: + bar: + C: Z + D: W + baz: + hello: world +`, + patch: yaml.MustParse(` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: my-foo +spec: + bar: + B: + C: Z +`), + expected: ` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: my-foo +spec: + bar: + C: Z + D: W + baz: + hello: world +`, + }, + "simple patch": { + input: ` +apiVersion: apps/v1 +metadata: + name: myDeploy +kind: Deployment +`, + patch: yaml.MustParse(` +metadata: + name: yourDeploy +`), + expected: ` +apiVersion: apps/v1 +metadata: + name: yourDeploy +kind: Deployment +`, + }, + "container patch": { + input: ` +apiVersion: apps/v1 +metadata: + name: myDeploy +kind: Deployment +spec: + template: + spec: + containers: + - name: foo1 + - name: foo2 + - name: foo3 +`, + patch: yaml.MustParse(` +apiVersion: apps/v1 +metadata: + name: myDeploy +kind: Deployment +spec: + template: + spec: + containers: + - name: foo0 +`), + expected: ` +apiVersion: apps/v1 +metadata: + name: myDeploy +kind: Deployment +spec: + template: + spec: + containers: + - name: foo0 + - name: foo1 + - name: foo2 + - name: foo3 +`, + }, + "volumes patch": { + input: ` +apiVersion: apps/v1 +metadata: + name: myDeploy +kind: Deployment +spec: + template: + spec: + volumes: + - name: foo1 + - name: foo2 + - name: foo3 +`, + patch: yaml.MustParse(` +apiVersion: apps/v1 +metadata: + name: myDeploy +kind: Deployment +spec: + template: + spec: + volumes: + - name: foo0 +`), + expected: ` +apiVersion: apps/v1 +metadata: + name: myDeploy +kind: Deployment +spec: + template: + spec: + volumes: + - name: foo0 + - name: foo1 + - name: foo2 + - name: foo3 +`, + }, + "nested patch": { + input: ` +apiVersion: apps/v1 +metadata: + name: myDeploy +kind: Deployment +spec: + containers: + - name: nginx + args: + - abc +`, + patch: yaml.MustParse(` +spec: + containers: + - name: nginx + args: + - def +`), + expected: ` +apiVersion: apps/v1 +metadata: + name: myDeploy +kind: Deployment +spec: + containers: + - name: nginx + args: + - def +`, + }, + "remove mapping - directive": { + input: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: myDeploy +spec: + template: + spec: + containers: + - name: test + image: test +`, + patch: yaml.MustParse(` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: myDeploy +spec: + template: + spec: + containers: + - name: test + image: test + $patch: delete +`), + expected: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: myDeploy +spec: + template: + spec: + containers: [] +`, + }, + "replace mapping - directive": { + input: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: myDeploy +spec: + template: + spec: + containers: + - name: test + image: test +`, + patch: yaml.MustParse(` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: myDeploy +spec: + template: + spec: + $patch: replace + containers: + - name: new +`), + expected: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: myDeploy +spec: + template: + spec: + containers: + - name: new +`, + }, + "merge mapping - directive": { + input: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: myDeploy +spec: + template: + spec: + containers: + - name: test + image: test +`, + patch: yaml.MustParse(` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: myDeploy +spec: + template: + spec: + containers: + - name: test + image: test1 + $patch: merge +`), + expected: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: myDeploy +spec: + template: + spec: + containers: + - name: test + image: test1 +`, + }, + "remove list - directive": { + input: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: myDeploy +spec: + template: + spec: + containers: + - name: test + image: test +`, + patch: yaml.MustParse(` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: myDeploy +spec: + template: + spec: + containers: + - whatever + - $patch: delete +`), + expected: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: myDeploy +spec: + template: + spec: {} +`, + }, + "replace list - directive": { + input: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: myDeploy +spec: + template: + spec: + containers: + - name: test + image: test +`, + patch: yaml.MustParse(` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: myDeploy +spec: + template: + spec: + containers: + - name: replace + image: replace + - $patch: replace +`), + expected: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: myDeploy +spec: + template: + spec: + containers: + - name: replace + image: replace +`, + }, + "merge list - directive": { + input: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: myDeploy +spec: + template: + spec: + containers: + - name: test + image: test +`, + patch: yaml.MustParse(` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: myDeploy +spec: + template: + spec: + containers: + - name: test2 + image: test2 + - $patch: merge +`), + expected: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: myDeploy +spec: + template: + spec: + containers: + - name: test2 + image: test2 + - name: test + image: test +`, + }, + "list map keys - add a port, no names": { + input: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: test-deployment +spec: + template: + spec: + containers: + - image: test-image + name: test-deployment + ports: + - containerPort: 8080 + protocol: TCP +`, + patch: yaml.MustParse(` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: test-deployment +spec: + template: + spec: + containers: + - image: test-image + name: test-deployment + ports: + - containerPort: 8080 + protocol: UDP + - containerPort: 80 + protocol: UDP +`), + expected: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: test-deployment +spec: + template: + spec: + containers: + - image: test-image + name: test-deployment + ports: + - containerPort: 8080 + protocol: UDP + - containerPort: 80 + protocol: UDP + - containerPort: 8080 + protocol: TCP +`, + }, + "list map keys - add name to port": { + input: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: test-deployment +spec: + template: + spec: + containers: + - image: test-image + name: test-deployment + ports: + - containerPort: 8080 + protocol: UDP + - containerPort: 8080 + protocol: TCP +`, + patch: yaml.MustParse(` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: test-deployment +spec: + template: + spec: + containers: + - image: test-image + name: test-deployment + ports: + - containerPort: 8080 + protocol: UDP + name: UDP-name-patch +`), + expected: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: test-deployment +spec: + template: + spec: + containers: + - image: test-image + name: test-deployment + ports: + - containerPort: 8080 + protocol: UDP + name: UDP-name-patch + - containerPort: 8080 + protocol: TCP +`, + }, + "list map keys - replace port name": { + input: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: test-deployment +spec: + template: + spec: + containers: + - image: test-image + name: test-deployment + ports: + - containerPort: 8080 + protocol: UDP + name: UDP-name-original + - containerPort: 8080 + protocol: TCP + name: TCP-name-original +`, + patch: yaml.MustParse(` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: test-deployment +spec: + template: + spec: + containers: + - image: test-image + name: test-deployment + ports: + - containerPort: 8080 + protocol: UDP + name: UDP-name-patch +`), + expected: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: test-deployment +spec: + template: + spec: + containers: + - image: test-image + name: test-deployment + ports: + - containerPort: 8080 + protocol: UDP + name: UDP-name-patch + - containerPort: 8080 + protocol: TCP + name: TCP-name-original +`, + }, + "list map keys - add a port, no protocol": { + input: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: test-deployment +spec: + template: + spec: + containers: + - image: test-image + name: test-deployment + ports: + - containerPort: 8080 +`, + patch: yaml.MustParse(` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: test-deployment +spec: + template: + spec: + containers: + - image: test-image + name: test-deployment + ports: + - containerPort: 80 +`), + expected: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: test-deployment +spec: + template: + spec: + containers: + - image: test-image + name: test-deployment + ports: + - containerPort: 80 + - containerPort: 8080 +`, + }, + + // Test for issue #3513 + // Currently broken; when one port has only containerPort, the output + // should not merge containerPort 8301 together + // This occurs because when protocol is missing on the first port, + // the merge code uses [containerPort] as the merge key rather than + // [containerPort, protocol] + "list map keys - protocol only present on some ports": { + input: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: test-deployment +spec: + template: + spec: + containers: + - name: consul + image: "dashicorp/consul:1.9.1" + ports: + - containerPort: 8500 + name: http + - containerPort: 8301 + protocol: "TCP" + - containerPort: 8301 + protocol: "UDP" +`, + patch: yaml.MustParse(` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: test-deployment + labels: + test: label +`), + expected: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: test-deployment + labels: + test: label +spec: + template: + spec: + containers: + - name: consul + image: "dashicorp/consul:1.9.1" + ports: + - containerPort: 8500 + name: http + - containerPort: 8301 + protocol: "TCP" + - containerPort: 8301 + protocol: "UDP" +`, + }, + } + + for tn, tc := range testCases { + t.Run(tn, func(t *testing.T) { + f := Filter{ + Patch: tc.patch, + } + if !assert.Equal(t, + strings.TrimSpace(tc.expected), + strings.TrimSpace( + filtertest.RunFilter(t, tc.input, f))) { + t.FailNow() + } + }) + } +} diff --git a/go/internal/forked/api/filters/prefix/doc.go b/go/internal/forked/api/filters/prefix/doc.go new file mode 100644 index 000000000..95236859f --- /dev/null +++ b/go/internal/forked/api/filters/prefix/doc.go @@ -0,0 +1,6 @@ +// Copyright 2020 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +// Package prefix contains a kio.Filter implementation of the kustomize +// PrefixTransformer. +package prefix diff --git a/go/internal/forked/api/filters/prefix/example_test.go b/go/internal/forked/api/filters/prefix/example_test.go new file mode 100644 index 000000000..afc91e06a --- /dev/null +++ b/go/internal/forked/api/filters/prefix/example_test.go @@ -0,0 +1,47 @@ +// Copyright 2020 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package prefix_test + +import ( + "bytes" + "log" + "os" + + "sigs.k8s.io/kustomize/api/filters/prefix" + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/kio" +) + +func ExampleFilter() { + err := kio.Pipeline{ + Inputs: []kio.Reader{&kio.ByteReader{Reader: bytes.NewBufferString(` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: instance +--- +apiVersion: example.com/v1 +kind: Bar +metadata: + name: instance +`)}}, + Filters: []kio.Filter{prefix.Filter{ + Prefix: "baz-", FieldSpec: types.FieldSpec{Path: "metadata/name"}}}, + Outputs: []kio.Writer{kio.ByteWriter{Writer: os.Stdout}}, + }.Execute() + if err != nil { + log.Fatal(err) + } + + // Output: + // apiVersion: example.com/v1 + // kind: Foo + // metadata: + // name: baz-instance + // --- + // apiVersion: example.com/v1 + // kind: Bar + // metadata: + // name: baz-instance +} diff --git a/go/internal/forked/api/filters/prefix/example_test.go b/go/internal/forked/api/filters/prefix/example_test.go new file mode 100644 index 000000000..1f074abb2 --- /dev/null +++ b/go/internal/forked/api/filters/prefix/example_test.go @@ -0,0 +1,47 @@ +// Copyright 2020 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package prefix_test + +import ( + "bytes" + "log" + "os" + + "sigs.k8s.io/kustomize/api/filters/prefix" + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/kio" +) + +func ExampleFilter() { + err := kio.Pipeline{ + Inputs: []kio.Reader{&kio.ByteReader{Reader: bytes.NewBufferString(` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: instance +--- +apiVersion: example.com/v1 +kind: Bar +metadata: + name: instance +`)}}, + Filters: []kio.Filter{prefix.Filter{ + Prefix: "baz-", FieldSpec: types.FieldSpec{Path: "metadata/name"}}}, + Outputs: []kio.Writer{kio.ByteWriter{Writer: os.Stdout}}, + }.Execute() + if err != nil { + log.Fatal(err) + } + + // Output: + // apiVersion: example.com/v1 + // kind: Foo + // metadata: + // name: baz-instance + // --- + // apiVersion: example.com/v1 + // kind: Bar + // metadata: + // name: baz-instance +} diff --git a/go/internal/forked/api/filters/prefix/prefix.go b/go/internal/forked/api/filters/prefix/prefix.go new file mode 100644 index 000000000..d42bc7c18 --- /dev/null +++ b/go/internal/forked/api/filters/prefix/prefix.go @@ -0,0 +1,42 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package prefix + +import ( + "fmt" + + "sigs.k8s.io/kustomize/api/filters/fieldspec" + "sigs.k8s.io/kustomize/api/filters/filtersutil" + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/kio" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" +) + +// Filter applies resource name prefix's using the fieldSpecs +type Filter struct { + Prefix string `json:"prefix,omitempty" yaml:"prefix,omitempty"` + + FieldSpec types.FieldSpec `json:"fieldSpec,omitempty" yaml:"fieldSpec,omitempty"` +} + +var _ kio.Filter = Filter{} + +func (f Filter) Filter(nodes []*yaml.RNode) ([]*yaml.RNode, error) { + return kio.FilterAll(yaml.FilterFunc(f.run)).Filter(nodes) +} + +func (f Filter) run(node *yaml.RNode) (*yaml.RNode, error) { + err := node.PipeE(fieldspec.Filter{ + FieldSpec: f.FieldSpec, + SetValue: f.evaluateField, + CreateKind: yaml.ScalarNode, // Name is a ScalarNode + CreateTag: yaml.NodeTagString, + }) + return node, err +} + +func (f Filter) evaluateField(node *yaml.RNode) error { + return filtersutil.SetScalar(fmt.Sprintf( + "%s%s", f.Prefix, node.YNode().Value))(node) +} diff --git a/go/internal/forked/api/filters/prefix/prefix.go b/go/internal/forked/api/filters/prefix/prefix.go new file mode 100644 index 000000000..7a133ff6a --- /dev/null +++ b/go/internal/forked/api/filters/prefix/prefix.go @@ -0,0 +1,42 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package prefix + +import ( + "fmt" + + "sigs.k8s.io/kustomize/api/filters/fieldspec" + "sigs.k8s.io/kustomize/api/filters/filtersutil" + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/kio" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/yaml" +) + +// Filter applies resource name prefix's using the fieldSpecs +type Filter struct { + Prefix string `json:"prefix,omitempty" yaml:"prefix,omitempty"` + + FieldSpec types.FieldSpec `json:"fieldSpec,omitempty" yaml:"fieldSpec,omitempty"` +} + +var _ kio.Filter = Filter{} + +func (f Filter) Filter(nodes []*yaml.RNode) ([]*yaml.RNode, error) { + return kio.FilterAll(yaml.FilterFunc(f.run)).Filter(nodes) +} + +func (f Filter) run(node *yaml.RNode) (*yaml.RNode, error) { + err := node.PipeE(fieldspec.Filter{ + FieldSpec: f.FieldSpec, + SetValue: f.evaluateField, + CreateKind: yaml.ScalarNode, // Name is a ScalarNode + CreateTag: yaml.NodeTagString, + }) + return node, err +} + +func (f Filter) evaluateField(node *yaml.RNode) error { + return filtersutil.SetScalar(fmt.Sprintf( + "%s%s", f.Prefix, node.YNode().Value))(node) +} diff --git a/go/internal/forked/api/filters/prefix/prefix_test.go b/go/internal/forked/api/filters/prefix/prefix_test.go new file mode 100644 index 000000000..2bcdbdeab --- /dev/null +++ b/go/internal/forked/api/filters/prefix/prefix_test.go @@ -0,0 +1,106 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package prefix_test + +import ( + "strings" + "testing" + + "github.com/stretchr/testify/assert" + "sigs.k8s.io/kustomize/api/filters/prefix" + filtertest_test "sigs.k8s.io/kustomize/api/testutils/filtertest" + "sigs.k8s.io/kustomize/api/types" +) + +var tests = map[string]TestCase{ + "prefix": { + input: ` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: instance +--- +apiVersion: example.com/v1 +kind: Bar +metadata: + name: instance +`, + expected: ` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: foo-instance +--- +apiVersion: example.com/v1 +kind: Bar +metadata: + name: foo-instance +`, + filter: prefix.Filter{ + Prefix: "foo-", + FieldSpec: types.FieldSpec{Path: "metadata/name"}, + }, + }, + + "data-fieldspecs": { + input: ` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: instance +a: + b: + c: d +--- +apiVersion: example.com/v1 +kind: Bar +metadata: + name: instance +a: + b: + c: d +`, + expected: ` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: instance +a: + b: + c: foo-d +--- +apiVersion: example.com/v1 +kind: Bar +metadata: + name: instance +a: + b: + c: foo-d +`, + filter: prefix.Filter{ + Prefix: "foo-", + FieldSpec: types.FieldSpec{Path: "a/b/c"}, + }, + }, +} + +type TestCase struct { + input string + expected string + filter prefix.Filter +} + +func TestFilter(t *testing.T) { + for name := range tests { + test := tests[name] + t.Run(name, func(t *testing.T) { + if !assert.Equal(t, + strings.TrimSpace(test.expected), + strings.TrimSpace( + filtertest_test.RunFilter(t, test.input, test.filter))) { + t.FailNow() + } + }) + } +} diff --git a/go/internal/forked/api/filters/refvar/doc.go b/go/internal/forked/api/filters/refvar/doc.go new file mode 100644 index 000000000..ab3a01d54 --- /dev/null +++ b/go/internal/forked/api/filters/refvar/doc.go @@ -0,0 +1,3 @@ +// Package refvar contains a kio.Filter implementation of the kustomize +// refvar transformer (find and replace $(FOO) style variables in strings). +package refvar diff --git a/go/internal/forked/api/filters/refvar/expand.go b/go/internal/forked/api/filters/refvar/expand.go new file mode 100644 index 000000000..3bcbd7a53 --- /dev/null +++ b/go/internal/forked/api/filters/refvar/expand.go @@ -0,0 +1,147 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package refvar + +import ( + "fmt" + "log" + "strings" +) + +const ( + operator = '$' + referenceOpener = '(' + referenceCloser = ')' +) + +// syntaxWrap returns the input string wrapped by the expansion syntax. +func syntaxWrap(input string) string { + var sb strings.Builder + sb.WriteByte(operator) + sb.WriteByte(referenceOpener) + sb.WriteString(input) + sb.WriteByte(referenceCloser) + return sb.String() +} + +// MappingFunc maps a string to anything. +type MappingFunc func(string) interface{} + +// MakePrimitiveReplacer returns a MappingFunc that uses a map to do +// replacements, and a histogram to count map hits. +// +// Func behavior: +// +// If the input key is NOT found in the map, the key is wrapped up as +// as a variable declaration string and returned, e.g. key FOO becomes $(FOO). +// This string is presumably put back where it was found, and might get replaced +// later. +// +// If the key is found in the map, the value is returned if it is a primitive +// type (string, bool, number), and the hit is counted. +// +// If it's not a primitive type (e.g. a map, struct, func, etc.) then this +// function doesn't know what to do with it and it returns the key wrapped up +// again as if it had not been replaced. This should probably be an error. +func MakePrimitiveReplacer( + counts map[string]int, someMap map[string]interface{}) MappingFunc { + return func(key string) interface{} { + if value, ok := someMap[key]; ok { + switch typedV := value.(type) { + case string, int, int32, int64, float32, float64, bool: + counts[key]++ + return typedV + default: + // If the value is some complicated type (e.g. a map or struct), + // this function doesn't know how to jam it into a string, + // so just pretend it was a cache miss. + // Likely this should be an error instead of a silent failure, + // since the programmer passed an impossible value. + log.Printf( + "MakePrimitiveReplacer: bad replacement type=%T val=%v", + typedV, typedV) + return syntaxWrap(key) + } + } + // If unable to return the mapped variable, return it + // as it was found, and a later mapping might be able to + // replace it. + return syntaxWrap(key) + } +} + +// DoReplacements replaces variable references in the input string +// using the mapping function. +func DoReplacements(input string, mapping MappingFunc) interface{} { + var buf strings.Builder + checkpoint := 0 + for cursor := 0; cursor < len(input); cursor++ { + if input[cursor] == operator && cursor+1 < len(input) { + // Copy the portion of the input string since the last + // checkpoint into the buffer + buf.WriteString(input[checkpoint:cursor]) + + // Attempt to read the variable name as defined by the + // syntax from the input string + read, isVar, advance := tryReadVariableName(input[cursor+1:]) + + if isVar { + // We were able to read a variable name correctly; + // apply the mapping to the variable name and copy the + // bytes into the buffer + mapped := mapping(read) + if input == syntaxWrap(read) { + // Preserve the type of variable + return mapped + } + + // Variable is used in a middle of a string + buf.WriteString(fmt.Sprintf("%v", mapped)) + } else { + // Not a variable name; copy the read bytes into the buffer + buf.WriteString(read) + } + + // Advance the cursor in the input string to account for + // bytes consumed to read the variable name expression + cursor += advance + + // Advance the checkpoint in the input string + checkpoint = cursor + 1 + } + } + + // Return the buffer and any remaining unwritten bytes in the + // input string. + return buf.String() + input[checkpoint:] +} + +// tryReadVariableName attempts to read a variable name from the input +// string and returns the content read from the input, whether that content +// represents a variable name to perform mapping on, and the number of bytes +// consumed in the input string. +// +// The input string is assumed not to contain the initial operator. +func tryReadVariableName(input string) (string, bool, int) { + switch input[0] { + case operator: + // Escaped operator; return it. + return input[0:1], false, 1 + case referenceOpener: + // Scan to expression closer + for i := 1; i < len(input); i++ { + if input[i] == referenceCloser { + return input[1:i], true, i + 1 + } + } + + // Incomplete reference; return it. + return string(operator) + string(referenceOpener), false, 1 + default: + // Not the beginning of an expression, ie, an operator + // that doesn't begin an expression. Return the operator + // and the first rune in the string. + return string(operator) + string(input[0]), false, 1 + } +} diff --git a/go/internal/forked/api/filters/refvar/expand_test.go b/go/internal/forked/api/filters/refvar/expand_test.go new file mode 100644 index 000000000..0a06f5ea5 --- /dev/null +++ b/go/internal/forked/api/filters/refvar/expand_test.go @@ -0,0 +1,388 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package refvar_test + +import ( + "fmt" + "testing" + + "github.com/stretchr/testify/assert" + "sigs.k8s.io/kustomize/api/filters/refvar" +) + +type expected struct { + count int + edited string +} + +func TestPrimitiveReplacer(t *testing.T) { + varCounts := make(map[string]int) + f := refvar.MakePrimitiveReplacer( + varCounts, + map[string]interface{}{ + "FOO": "bar", + "ZOO": "$(FOO)-1", + "BLU": "$(ZOO)-2", + "EIGHT": 8, + "PI": 3.14159, + "ZINT": "$(INT)", + "BOOL": "true", + "HUGENUMBER": int64(9223372036854775807), + "CRAZYMAP": map[string]int{"crazy": 200}, + "ZBOOL": "$(BOOL)", + }) + assert.Equal(t, "$()", f("")) + assert.Equal(t, "$( )", f(" ")) + assert.Equal(t, "$(florida)", f("florida")) + assert.Equal(t, "$(0)", f("0")) + assert.Equal(t, "bar", f("FOO")) + assert.Equal(t, "bar", f("FOO")) + assert.Equal(t, "bar", f("FOO")) + assert.Equal(t, 8, f("EIGHT")) + assert.Equal(t, 8, f("EIGHT")) + assert.Equal(t, 3.14159, f("PI")) + assert.Equal(t, "true", f("BOOL")) + assert.Equal(t, int64(9223372036854775807), f("HUGENUMBER")) + assert.Equal(t, "$(FOO)-1", f("ZOO")) + assert.Equal(t, "$(CRAZYMAP)", f("CRAZYMAP")) + assert.Equal(t, + map[string]int{ + "FOO": 3, + "EIGHT": 2, + "BOOL": 1, + "PI": 1, + "ZOO": 1, + "HUGENUMBER": 1, + }, + varCounts) +} + +func TestMapReference(t *testing.T) { + type env struct { + Name string + Value interface{} + } + envs := []env{ + { + Name: "FOO", + Value: "bar", + }, + { + Name: "ZOO", + Value: "$(FOO)-1", + }, + { + Name: "BLU", + Value: "$(ZOO)-2", + }, + { + Name: "INT", + Value: 2, + }, + { + Name: "ZINT", + Value: "$(INT)", + }, + { + Name: "BOOL", + Value: true, + }, + { + Name: "ZBOOL", + Value: "$(BOOL)", + }, + } + + varMap := map[string]interface{}{ + "FOO": "bar", + "ZOO": "$(FOO)-1", + "BLU": "$(ZOO)-2", + "INT": "2", + "ZINT": "$(INT)", + "BOOL": "true", + "ZBOOL": "$(BOOL)", + } + + varCounts := make(map[string]int) + for _, env := range envs { + varMap[env.Name] = refvar.DoReplacements( + fmt.Sprintf("%v", env.Value), + refvar.MakePrimitiveReplacer(varCounts, varMap)) + } + + expectedEnv := map[string]expected{ + "FOO": {count: 1, edited: "bar"}, + "ZOO": {count: 1, edited: "bar-1"}, + "BLU": {count: 0, edited: "bar-1-2"}, + "INT": {count: 1, edited: "2"}, + "ZINT": {count: 0, edited: "2"}, + "BOOL": {count: 1, edited: "true"}, + "ZBOOL": {count: 0, edited: "true"}, + } + + for k, v := range expectedEnv { + if e, a := v, varMap[k]; e.edited != a || e.count != varCounts[k] { + t.Errorf("Expected %v count=%d, got %v count=%d", + e.edited, e.count, a, varCounts[k]) + } else { + delete(varMap, k) + } + } + + if len(varMap) != 0 { + t.Errorf("Unexpected keys in declared env: %v", varMap) + } +} + +func TestMapping(t *testing.T) { + cases := []struct { + name string + input string + expected string + counts map[string]int + }{ + { + name: "whole string", + input: "$(VAR_A)", + expected: "A", + counts: map[string]int{"VAR_A": 1}, + }, + { + name: "repeat", + input: "$(VAR_A)-$(VAR_A)", + expected: "A-A", + counts: map[string]int{"VAR_A": 2}, + }, + { + name: "multiple repeats", + input: "$(VAR_A)-$(VAR_B)-$(VAR_B)-$(VAR_B)-$(VAR_A)", + expected: "A-B-B-B-A", + counts: map[string]int{"VAR_A": 2, "VAR_B": 3}, + }, + { + name: "beginning", + input: "$(VAR_A)-1", + expected: "A-1", + counts: map[string]int{"VAR_A": 1}, + }, + { + name: "middle", + input: "___$(VAR_B)___", + expected: "___B___", + counts: map[string]int{"VAR_B": 1}, + }, + { + name: "end", + input: "___$(VAR_C)", + expected: "___C", + counts: map[string]int{"VAR_C": 1}, + }, + { + name: "compound", + input: "$(VAR_A)_$(VAR_B)_$(VAR_C)", + expected: "A_B_C", + counts: map[string]int{"VAR_A": 1, "VAR_B": 1, "VAR_C": 1}, + }, + { + name: "escape & expand", + input: "$$(VAR_B)_$(VAR_A)", + expected: "$(VAR_B)_A", + counts: map[string]int{"VAR_A": 1}, + }, + { + name: "compound escape", + input: "$$(VAR_A)_$$(VAR_B)", + expected: "$(VAR_A)_$(VAR_B)", + }, + { + name: "mixed in escapes", + input: "f000-$$VAR_A", + expected: "f000-$VAR_A", + }, + { + name: "backslash escape ignored", + input: "foo\\$(VAR_C)bar", + expected: "foo\\Cbar", + counts: map[string]int{"VAR_C": 1}, + }, + { + name: "backslash escape ignored", + input: "foo\\\\$(VAR_C)bar", + expected: "foo\\\\Cbar", + counts: map[string]int{"VAR_C": 1}, + }, + { + name: "lots of backslashes", + input: "foo\\\\\\\\$(VAR_A)bar", + expected: "foo\\\\\\\\Abar", + counts: map[string]int{"VAR_A": 1}, + }, + { + name: "nested var references", + input: "$(VAR_A$(VAR_B))", + expected: "$(VAR_A$(VAR_B))", + }, + { + name: "nested var references second type", + input: "$(VAR_A$(VAR_B)", + expected: "$(VAR_A$(VAR_B)", + }, + { + name: "value is a reference", + input: "$(VAR_REF)", + expected: "$(VAR_A)", + counts: map[string]int{"VAR_REF": 1}, + }, + { + name: "value is a reference x 2", + input: "%%$(VAR_REF)--$(VAR_REF)%%", + expected: "%%$(VAR_A)--$(VAR_A)%%", + counts: map[string]int{"VAR_REF": 2}, + }, + { + name: "empty var", + input: "foo$(VAR_EMPTY)bar", + expected: "foobar", + counts: map[string]int{"VAR_EMPTY": 1}, + }, + { + name: "unterminated expression", + input: "foo$(VAR_Awhoops!", + expected: "foo$(VAR_Awhoops!", + }, + { + name: "expression without operator", + input: "f00__(VAR_A)__", + expected: "f00__(VAR_A)__", + }, + { + name: "shell special vars pass through", + input: "$?_boo_$!", + expected: "$?_boo_$!", + }, + { + name: "bare operators are ignored", + input: "$VAR_A", + expected: "$VAR_A", + }, + { + name: "undefined vars are passed through", + input: "$(VAR_DNE)", + expected: "$(VAR_DNE)", + }, + { + name: "multiple (even) operators, var undefined", + input: "$$$$$$(BIG_MONEY)", + expected: "$$$(BIG_MONEY)", + }, + { + name: "multiple (even) operators, var defined", + input: "$$$$$$(VAR_A)", + expected: "$$$(VAR_A)", + }, + { + name: "multiple (odd) operators, var undefined", + input: "$$$$$$$(GOOD_ODDS)", + expected: "$$$$(GOOD_ODDS)", + }, + { + name: "multiple (odd) operators, var defined", + input: "$$$$$$$(VAR_A)", + expected: "$$$A", + counts: map[string]int{"VAR_A": 1}, + }, + { + name: "missing open expression", + input: "$VAR_A)", + expected: "$VAR_A)", + }, + { + name: "shell syntax ignored", + input: "${VAR_A}", + expected: "${VAR_A}", + }, + { + name: "trailing incomplete expression not consumed", + input: "$(VAR_B)_______$(A", + expected: "B_______$(A", + counts: map[string]int{"VAR_B": 1}, + }, + { + name: "trailing incomplete expression, no content, is not consumed", + input: "$(VAR_C)_______$(", + expected: "C_______$(", + counts: map[string]int{"VAR_C": 1}, + }, + { + name: "operator at end of input string is preserved", + input: "$(VAR_A)foobarzab$", + expected: "Afoobarzab$", + counts: map[string]int{"VAR_A": 1}, + }, + { + name: "shell escaped incomplete expr", + input: "foo-\\$(VAR_A", + expected: "foo-\\$(VAR_A", + }, + { + name: "lots of $( in middle", + input: "--$($($($($--", + expected: "--$($($($($--", + }, + { + name: "lots of $( in beginning", + input: "$($($($($--foo$(", + expected: "$($($($($--foo$(", + }, + { + name: "lots of $( at end", + input: "foo0--$($($($(", + expected: "foo0--$($($($(", + }, + { + name: "escaped operators in variable names are not escaped", + input: "$(foo$$var)", + expected: "$(foo$$var)", + }, + { + name: "newline not expanded", + input: "\n", + expected: "\n", + }, + } + for _, tc := range cases { + counts := make(map[string]int) + expanded := refvar.DoReplacements( + fmt.Sprintf("%v", tc.input), + refvar.MakePrimitiveReplacer(counts, map[string]interface{}{ + "VAR_A": "A", + "VAR_B": "B", + "VAR_C": "C", + "VAR_REF": "$(VAR_A)", + "VAR_EMPTY": "", + })) + if e, a := tc.expected, expanded; e != a { + t.Errorf("%v: expected %q, got %q", tc.name, e, a) + } + if len(counts) != len(tc.counts) { + t.Errorf("%v: len(counts)=%d != len(tc.counts)=%d", + tc.name, len(counts), len(tc.counts)) + } + if len(tc.counts) > 0 { + for k, expectedCount := range tc.counts { + if c, ok := counts[k]; ok { + if c != expectedCount { + t.Errorf( + "%v: k=%s, expected count %d, got %d", + tc.name, k, expectedCount, c) + } + } else { + t.Errorf( + "%v: k=%s, expected count %d, got zero", + tc.name, k, expectedCount) + } + } + } + } +} diff --git a/go/internal/forked/api/filters/refvar/refvar.go b/go/internal/forked/api/filters/refvar/refvar.go new file mode 100644 index 000000000..f0ae9a4e8 --- /dev/null +++ b/go/internal/forked/api/filters/refvar/refvar.go @@ -0,0 +1,110 @@ +package refvar + +import ( + "fmt" + "strconv" + + "sigs.k8s.io/kustomize/api/filters/fieldspec" + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/kio" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" +) + +// Filter updates $(VAR) style variables with values. +// The fieldSpecs are the places to look for occurrences of $(VAR). +type Filter struct { + MappingFunc MappingFunc `json:"mappingFunc,omitempty" yaml:"mappingFunc,omitempty"` + FieldSpec types.FieldSpec `json:"fieldSpec,omitempty" yaml:"fieldSpec,omitempty"` +} + +func (f Filter) Filter(nodes []*yaml.RNode) ([]*yaml.RNode, error) { + return kio.FilterAll(yaml.FilterFunc(f.run)).Filter(nodes) +} + +func (f Filter) run(node *yaml.RNode) (*yaml.RNode, error) { + err := node.PipeE(fieldspec.Filter{ + FieldSpec: f.FieldSpec, + SetValue: f.set, + }) + return node, err +} + +func (f Filter) set(node *yaml.RNode) error { + if yaml.IsMissingOrNull(node) { + return nil + } + switch node.YNode().Kind { + case yaml.ScalarNode: + return f.setScalar(node) + case yaml.MappingNode: + return f.setMap(node) + case yaml.SequenceNode: + return f.setSeq(node) + default: + return fmt.Errorf("invalid type encountered %v", node.YNode().Kind) + } +} + +func updateNodeValue(node *yaml.Node, newValue interface{}) { + switch newValue := newValue.(type) { + case int: + node.Value = strconv.FormatInt(int64(newValue), 10) + node.Tag = yaml.NodeTagInt + case int32: + node.Value = strconv.FormatInt(int64(newValue), 10) + node.Tag = yaml.NodeTagInt + case int64: + node.Value = strconv.FormatInt(newValue, 10) + node.Tag = yaml.NodeTagInt + case bool: + node.SetString(strconv.FormatBool(newValue)) + node.Tag = yaml.NodeTagBool + case float32: + node.SetString(strconv.FormatFloat(float64(newValue), 'f', -1, 32)) + node.Tag = yaml.NodeTagFloat + case float64: + node.SetString(strconv.FormatFloat(newValue, 'f', -1, 64)) + node.Tag = yaml.NodeTagFloat + default: + node.SetString(newValue.(string)) + node.Tag = yaml.NodeTagString + } + node.Style = 0 +} + +func (f Filter) setScalar(node *yaml.RNode) error { + if !yaml.IsYNodeString(node.YNode()) { + return nil + } + v := DoReplacements(node.YNode().Value, f.MappingFunc) + updateNodeValue(node.YNode(), v) + return nil +} + +func (f Filter) setMap(node *yaml.RNode) error { + contents := node.YNode().Content + for i := 0; i < len(contents); i += 2 { + if !yaml.IsYNodeString(contents[i]) { + return fmt.Errorf( + "invalid map key: value='%s', tag='%s'", + contents[i].Value, contents[i].Tag) + } + if !yaml.IsYNodeString(contents[i+1]) { + continue + } + newValue := DoReplacements(contents[i+1].Value, f.MappingFunc) + updateNodeValue(contents[i+1], newValue) + } + return nil +} + +func (f Filter) setSeq(node *yaml.RNode) error { + for _, item := range node.YNode().Content { + if !yaml.IsYNodeString(item) { + return fmt.Errorf("invalid value type expect a string") + } + newValue := DoReplacements(item.Value, f.MappingFunc) + updateNodeValue(item, newValue) + } + return nil +} diff --git a/go/internal/forked/api/filters/refvar/refvar.go b/go/internal/forked/api/filters/refvar/refvar.go new file mode 100644 index 000000000..bcbefc8b9 --- /dev/null +++ b/go/internal/forked/api/filters/refvar/refvar.go @@ -0,0 +1,110 @@ +package refvar + +import ( + "fmt" + "strconv" + + "sigs.k8s.io/kustomize/api/filters/fieldspec" + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/kio" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/yaml" +) + +// Filter updates $(VAR) style variables with values. +// The fieldSpecs are the places to look for occurrences of $(VAR). +type Filter struct { + MappingFunc MappingFunc `json:"mappingFunc,omitempty" yaml:"mappingFunc,omitempty"` + FieldSpec types.FieldSpec `json:"fieldSpec,omitempty" yaml:"fieldSpec,omitempty"` +} + +func (f Filter) Filter(nodes []*yaml.RNode) ([]*yaml.RNode, error) { + return kio.FilterAll(yaml.FilterFunc(f.run)).Filter(nodes) +} + +func (f Filter) run(node *yaml.RNode) (*yaml.RNode, error) { + err := node.PipeE(fieldspec.Filter{ + FieldSpec: f.FieldSpec, + SetValue: f.set, + }) + return node, err +} + +func (f Filter) set(node *yaml.RNode) error { + if yaml.IsMissingOrNull(node) { + return nil + } + switch node.YNode().Kind { + case yaml.ScalarNode: + return f.setScalar(node) + case yaml.MappingNode: + return f.setMap(node) + case yaml.SequenceNode: + return f.setSeq(node) + default: + return fmt.Errorf("invalid type encountered %v", node.YNode().Kind) + } +} + +func updateNodeValue(node *yaml.Node, newValue interface{}) { + switch newValue := newValue.(type) { + case int: + node.Value = strconv.FormatInt(int64(newValue), 10) + node.Tag = yaml.NodeTagInt + case int32: + node.Value = strconv.FormatInt(int64(newValue), 10) + node.Tag = yaml.NodeTagInt + case int64: + node.Value = strconv.FormatInt(newValue, 10) + node.Tag = yaml.NodeTagInt + case bool: + node.SetString(strconv.FormatBool(newValue)) + node.Tag = yaml.NodeTagBool + case float32: + node.SetString(strconv.FormatFloat(float64(newValue), 'f', -1, 32)) + node.Tag = yaml.NodeTagFloat + case float64: + node.SetString(strconv.FormatFloat(newValue, 'f', -1, 64)) + node.Tag = yaml.NodeTagFloat + default: + node.SetString(newValue.(string)) + node.Tag = yaml.NodeTagString + } + node.Style = 0 +} + +func (f Filter) setScalar(node *yaml.RNode) error { + if !yaml.IsYNodeString(node.YNode()) { + return nil + } + v := DoReplacements(node.YNode().Value, f.MappingFunc) + updateNodeValue(node.YNode(), v) + return nil +} + +func (f Filter) setMap(node *yaml.RNode) error { + contents := node.YNode().Content + for i := 0; i < len(contents); i += 2 { + if !yaml.IsYNodeString(contents[i]) { + return fmt.Errorf( + "invalid map key: value='%s', tag='%s'", + contents[i].Value, contents[i].Tag) + } + if !yaml.IsYNodeString(contents[i+1]) { + continue + } + newValue := DoReplacements(contents[i+1].Value, f.MappingFunc) + updateNodeValue(contents[i+1], newValue) + } + return nil +} + +func (f Filter) setSeq(node *yaml.RNode) error { + for _, item := range node.YNode().Content { + if !yaml.IsYNodeString(item) { + return fmt.Errorf("invalid value type expect a string") + } + newValue := DoReplacements(item.Value, f.MappingFunc) + updateNodeValue(item, newValue) + } + return nil +} diff --git a/go/internal/forked/api/filters/refvar/refvar_test.go b/go/internal/forked/api/filters/refvar/refvar_test.go new file mode 100644 index 000000000..69d6f6618 --- /dev/null +++ b/go/internal/forked/api/filters/refvar/refvar_test.go @@ -0,0 +1,280 @@ +package refvar_test + +import ( + "strings" + "testing" + + "github.com/stretchr/testify/assert" + "sigs.k8s.io/kustomize/api/filters/refvar" + filtertest_test "sigs.k8s.io/kustomize/api/testutils/filtertest" + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" +) + +var makeMf = func(theMap map[string]interface{}) refvar.MappingFunc { + ignored := make(map[string]int) + return refvar.MakePrimitiveReplacer(ignored, theMap) +} + +func TestFilter(t *testing.T) { + + testCases := map[string]struct { + input string + expected string + filter refvar.Filter + }{ + "simple scalar": { + input: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: dep +spec: + replicas: $(VAR)`, + expected: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: dep +spec: + replicas: 5`, + filter: refvar.Filter{ + MappingFunc: makeMf(map[string]interface{}{ + "VAR": int64(5), + }), + FieldSpec: types.FieldSpec{Path: "spec/replicas"}, + }, + }, + "non-string scalar": { + input: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: dep +spec: + replicas: 1`, + expected: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: dep +spec: + replicas: 1`, + filter: refvar.Filter{ + MappingFunc: makeMf(map[string]interface{}{ + "VAR": int64(5), + }), + FieldSpec: types.FieldSpec{Path: "spec/replicas"}, + }, + }, + "wrong path": { + input: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: dep +spec: + replicas: 1`, + expected: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: dep +spec: + replicas: 1`, + filter: refvar.Filter{ + MappingFunc: makeMf(map[string]interface{}{ + "VAR": int64(5), + }), + FieldSpec: types.FieldSpec{Path: "a/b/c"}, + }, + }, + "sequence": { + input: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: dep +data: +- $(FOO) +- $(BAR) +- $(BAZ) +- $(FOO)+$(BAR) +- $(BOOL) +- $(FLOAT)`, + expected: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: dep +data: +- foo +- bar +- $(BAZ) +- foo+bar +- false +- 1.23`, + filter: refvar.Filter{ + MappingFunc: makeMf(map[string]interface{}{ + "FOO": "foo", + "BAR": "bar", + "BOOL": false, + "FLOAT": 1.23, + }), + FieldSpec: types.FieldSpec{Path: "data"}, + }, + }, + "maps": { + input: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: dep +data: + FOO: $(FOO) + BAR: $(BAR) + BAZ: $(BAZ) + PLUS: $(FOO)+$(BAR)`, + expected: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: dep +data: + FOO: foo + BAR: bar + BAZ: $(BAZ) + PLUS: foo+bar`, + filter: refvar.Filter{ + MappingFunc: makeMf(map[string]interface{}{ + "FOO": "foo", + "BAR": "bar", + }), + FieldSpec: types.FieldSpec{Path: "data"}, + }, + }, + "complicated case": { + input: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: dep +data: + slice1: + - $(FOO) + slice2: + FOO: $(FOO) + BAR: $(BAR) + BOOL: false + INT: 0 + SLICE: + - $(FOO)`, + expected: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: dep +data: + slice1: + - $(FOO) + slice2: + FOO: foo + BAR: bar + BOOL: false + INT: 0 + SLICE: + - $(FOO)`, + filter: refvar.Filter{ + MappingFunc: makeMf(map[string]interface{}{ + "FOO": "foo", + "BAR": "bar", + }), + FieldSpec: types.FieldSpec{Path: "data/slice2"}, + }, + }, + "null value": { + input: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: dep +data: + FOO: null`, + expected: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: dep +data: + FOO: null`, + filter: refvar.Filter{ + MappingFunc: makeMf(map[string]interface{}{ + // no replacements! + }), + FieldSpec: types.FieldSpec{Path: "data/FOO"}, + }, + }, + } + + for tn, tc := range testCases { + t.Run(tn, func(t *testing.T) { + if !assert.Equal(t, + strings.TrimSpace(tc.expected), + strings.TrimSpace( + filtertest_test.RunFilter(t, tc.input, tc.filter))) { + t.FailNow() + } + }) + } +} + +func TestFilterUnhappy(t *testing.T) { + testCases := map[string]struct { + input string + expectedError string + filter refvar.Filter + }{ + "non-string in sequence": { + input: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: dep +data: + slice: + - false`, + expectedError: `considering field 'data/slice' of object Deployment.v1.apps/dep.[noNs]: invalid value type expect a string`, + filter: refvar.Filter{ + MappingFunc: makeMf(map[string]interface{}{ + "VAR": int64(5), + }), + FieldSpec: types.FieldSpec{Path: "data/slice"}, + }, + }, + "invalid key in map": { + input: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: dep +data: + 1: str`, + expectedError: `considering field 'data' of object Deployment.v1.apps/dep.[noNs]: invalid map key: value='1', tag='` + yaml.NodeTagInt + `'`, + filter: refvar.Filter{ + MappingFunc: makeMf(map[string]interface{}{ + "VAR": int64(5), + }), + FieldSpec: types.FieldSpec{Path: "data"}, + }, + }, + } + + for tn, tc := range testCases { + t.Run(tn, func(t *testing.T) { + _, err := filtertest_test.RunFilterE(t, tc.input, tc.filter) + if !assert.EqualError(t, err, tc.expectedError) { + t.FailNow() + } + }) + } +} diff --git a/go/internal/forked/api/filters/refvar/refvar_test.go b/go/internal/forked/api/filters/refvar/refvar_test.go new file mode 100644 index 000000000..5107ee012 --- /dev/null +++ b/go/internal/forked/api/filters/refvar/refvar_test.go @@ -0,0 +1,280 @@ +package refvar_test + +import ( + "strings" + "testing" + + "github.com/stretchr/testify/assert" + "sigs.k8s.io/kustomize/api/filters/refvar" + filtertest_test "sigs.k8s.io/kustomize/api/testutils/filtertest" + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/yaml" +) + +var makeMf = func(theMap map[string]interface{}) refvar.MappingFunc { + ignored := make(map[string]int) + return refvar.MakePrimitiveReplacer(ignored, theMap) +} + +func TestFilter(t *testing.T) { + + testCases := map[string]struct { + input string + expected string + filter refvar.Filter + }{ + "simple scalar": { + input: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: dep +spec: + replicas: $(VAR)`, + expected: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: dep +spec: + replicas: 5`, + filter: refvar.Filter{ + MappingFunc: makeMf(map[string]interface{}{ + "VAR": int64(5), + }), + FieldSpec: types.FieldSpec{Path: "spec/replicas"}, + }, + }, + "non-string scalar": { + input: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: dep +spec: + replicas: 1`, + expected: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: dep +spec: + replicas: 1`, + filter: refvar.Filter{ + MappingFunc: makeMf(map[string]interface{}{ + "VAR": int64(5), + }), + FieldSpec: types.FieldSpec{Path: "spec/replicas"}, + }, + }, + "wrong path": { + input: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: dep +spec: + replicas: 1`, + expected: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: dep +spec: + replicas: 1`, + filter: refvar.Filter{ + MappingFunc: makeMf(map[string]interface{}{ + "VAR": int64(5), + }), + FieldSpec: types.FieldSpec{Path: "a/b/c"}, + }, + }, + "sequence": { + input: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: dep +data: +- $(FOO) +- $(BAR) +- $(BAZ) +- $(FOO)+$(BAR) +- $(BOOL) +- $(FLOAT)`, + expected: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: dep +data: +- foo +- bar +- $(BAZ) +- foo+bar +- false +- 1.23`, + filter: refvar.Filter{ + MappingFunc: makeMf(map[string]interface{}{ + "FOO": "foo", + "BAR": "bar", + "BOOL": false, + "FLOAT": 1.23, + }), + FieldSpec: types.FieldSpec{Path: "data"}, + }, + }, + "maps": { + input: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: dep +data: + FOO: $(FOO) + BAR: $(BAR) + BAZ: $(BAZ) + PLUS: $(FOO)+$(BAR)`, + expected: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: dep +data: + FOO: foo + BAR: bar + BAZ: $(BAZ) + PLUS: foo+bar`, + filter: refvar.Filter{ + MappingFunc: makeMf(map[string]interface{}{ + "FOO": "foo", + "BAR": "bar", + }), + FieldSpec: types.FieldSpec{Path: "data"}, + }, + }, + "complicated case": { + input: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: dep +data: + slice1: + - $(FOO) + slice2: + FOO: $(FOO) + BAR: $(BAR) + BOOL: false + INT: 0 + SLICE: + - $(FOO)`, + expected: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: dep +data: + slice1: + - $(FOO) + slice2: + FOO: foo + BAR: bar + BOOL: false + INT: 0 + SLICE: + - $(FOO)`, + filter: refvar.Filter{ + MappingFunc: makeMf(map[string]interface{}{ + "FOO": "foo", + "BAR": "bar", + }), + FieldSpec: types.FieldSpec{Path: "data/slice2"}, + }, + }, + "null value": { + input: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: dep +data: + FOO: null`, + expected: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: dep +data: + FOO: null`, + filter: refvar.Filter{ + MappingFunc: makeMf(map[string]interface{}{ + // no replacements! + }), + FieldSpec: types.FieldSpec{Path: "data/FOO"}, + }, + }, + } + + for tn, tc := range testCases { + t.Run(tn, func(t *testing.T) { + if !assert.Equal(t, + strings.TrimSpace(tc.expected), + strings.TrimSpace( + filtertest_test.RunFilter(t, tc.input, tc.filter))) { + t.FailNow() + } + }) + } +} + +func TestFilterUnhappy(t *testing.T) { + testCases := map[string]struct { + input string + expectedError string + filter refvar.Filter + }{ + "non-string in sequence": { + input: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: dep +data: + slice: + - false`, + expectedError: `considering field 'data/slice' of object Deployment.v1.apps/dep.[noNs]: invalid value type expect a string`, + filter: refvar.Filter{ + MappingFunc: makeMf(map[string]interface{}{ + "VAR": int64(5), + }), + FieldSpec: types.FieldSpec{Path: "data/slice"}, + }, + }, + "invalid key in map": { + input: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: dep +data: + 1: str`, + expectedError: `considering field 'data' of object Deployment.v1.apps/dep.[noNs]: invalid map key: value='1', tag='` + yaml.NodeTagInt + `'`, + filter: refvar.Filter{ + MappingFunc: makeMf(map[string]interface{}{ + "VAR": int64(5), + }), + FieldSpec: types.FieldSpec{Path: "data"}, + }, + }, + } + + for tn, tc := range testCases { + t.Run(tn, func(t *testing.T) { + _, err := filtertest_test.RunFilterE(t, tc.input, tc.filter) + if !assert.EqualError(t, err, tc.expectedError) { + t.FailNow() + } + }) + } +} diff --git a/go/internal/forked/api/filters/replacement/doc.go b/go/internal/forked/api/filters/replacement/doc.go new file mode 100644 index 000000000..9d9357905 --- /dev/null +++ b/go/internal/forked/api/filters/replacement/doc.go @@ -0,0 +1,4 @@ +// Package replacement contains a kio.Filter implementation of the kustomize +// replacement transformer (accepts sources and looks for targets to replace +// their values with values from the sources). +package replacement diff --git a/go/internal/forked/api/filters/replacement/example_test.go b/go/internal/forked/api/filters/replacement/example_test.go new file mode 100644 index 000000000..abf84199b --- /dev/null +++ b/go/internal/forked/api/filters/replacement/example_test.go @@ -0,0 +1,68 @@ +// Copyright 2021 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package replacement + +import ( + "bytes" + "log" + "os" + + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/kio" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" +) + +func ExampleFilter() { + f := Filter{} + err := yaml.Unmarshal([]byte(` +replacements: +- source: + kind: Foo2 + fieldPath: spec.replicas + targets: + - select: + kind: Foo1 + fieldPaths: + - spec.replicas`), &f) + if err != nil { + log.Fatal(err) + } + + err = kio.Pipeline{ + Inputs: []kio.Reader{&kio.ByteReader{Reader: bytes.NewBufferString(` +apiVersion: example.com/v1 +kind: Foo1 +metadata: + name: instance +spec: + replicas: 3 +--- +apiVersion: example.com/v1 +kind: Foo2 +metadata: + name: instance +spec: + replicas: 99 +`)}}, + Filters: []kio.Filter{f}, + Outputs: []kio.Writer{kio.ByteWriter{Writer: os.Stdout}}, + }.Execute() + if err != nil { + log.Fatal(err) + } + + // Output: + // apiVersion: example.com/v1 + // kind: Foo1 + // metadata: + // name: instance + // spec: + // replicas: 99 + // --- + // apiVersion: example.com/v1 + // kind: Foo2 + // metadata: + // name: instance + // spec: + // replicas: 99 +} diff --git a/go/internal/forked/api/filters/replacement/example_test.go b/go/internal/forked/api/filters/replacement/example_test.go new file mode 100644 index 000000000..2a7396a4e --- /dev/null +++ b/go/internal/forked/api/filters/replacement/example_test.go @@ -0,0 +1,68 @@ +// Copyright 2021 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package replacement + +import ( + "bytes" + "log" + "os" + + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/kio" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/yaml" +) + +func ExampleFilter() { + f := Filter{} + err := yaml.Unmarshal([]byte(` +replacements: +- source: + kind: Foo2 + fieldPath: spec.replicas + targets: + - select: + kind: Foo1 + fieldPaths: + - spec.replicas`), &f) + if err != nil { + log.Fatal(err) + } + + err = kio.Pipeline{ + Inputs: []kio.Reader{&kio.ByteReader{Reader: bytes.NewBufferString(` +apiVersion: example.com/v1 +kind: Foo1 +metadata: + name: instance +spec: + replicas: 3 +--- +apiVersion: example.com/v1 +kind: Foo2 +metadata: + name: instance +spec: + replicas: 99 +`)}}, + Filters: []kio.Filter{f}, + Outputs: []kio.Writer{kio.ByteWriter{Writer: os.Stdout}}, + }.Execute() + if err != nil { + log.Fatal(err) + } + + // Output: + // apiVersion: example.com/v1 + // kind: Foo1 + // metadata: + // name: instance + // spec: + // replicas: 99 + // --- + // apiVersion: example.com/v1 + // kind: Foo2 + // metadata: + // name: instance + // spec: + // replicas: 99 +} diff --git a/go/internal/forked/api/filters/replacement/replacement.go b/go/internal/forked/api/filters/replacement/replacement.go new file mode 100644 index 000000000..f96dc4b3e --- /dev/null +++ b/go/internal/forked/api/filters/replacement/replacement.go @@ -0,0 +1,221 @@ +// Copyright 2021 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package replacement + +import ( + "fmt" + "strings" + + "sigs.k8s.io/kustomize/api/internal/utils" + "sigs.k8s.io/kustomize/api/resource" + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/resid" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" +) + +type Filter struct { + Replacements []types.Replacement `json:"replacements,omitempty" yaml:"replacements,omitempty"` +} + +// Filter replaces values of targets with values from sources +func (f Filter) Filter(nodes []*yaml.RNode) ([]*yaml.RNode, error) { + for _, r := range f.Replacements { + if r.Source == nil || r.Targets == nil { + return nil, fmt.Errorf("replacements must specify a source and at least one target") + } + value, err := getReplacement(nodes, &r) + if err != nil { + return nil, err + } + nodes, err = applyReplacement(nodes, value, r.Targets) + if err != nil { + return nil, err + } + } + return nodes, nil +} + +func applyReplacement(nodes []*yaml.RNode, value *yaml.RNode, targets []*types.TargetSelector) ([]*yaml.RNode, error) { + for _, t := range targets { + if t.Select == nil { + return nil, fmt.Errorf("target must specify resources to select") + } + if len(t.FieldPaths) == 0 { + t.FieldPaths = []string{types.DefaultReplacementFieldPath} + } + for _, n := range nodes { + ids, err := utils.MakeResIds(n) + if err != nil { + return nil, err + } + + // filter targets by label and annotation selectors + selectByAnnoAndLabel, err := selectByAnnoAndLabel(n, t) + if err != nil { + return nil, err + } + if !selectByAnnoAndLabel { + continue + } + + // filter targets by matching resource IDs + for _, id := range ids { + if id.IsSelectedBy(t.Select.ResId) && !rejectId(t.Reject, &id) { + err := applyToNode(n, value, t) + if err != nil { + return nil, err + } + break + } + } + } + } + return nodes, nil +} + +func selectByAnnoAndLabel(n *yaml.RNode, t *types.TargetSelector) (bool, error) { + if matchesSelect, err := matchesAnnoAndLabelSelector(n, t.Select); !matchesSelect || err != nil { + return false, err + } + for _, reject := range t.Reject { + if reject.AnnotationSelector == "" && reject.LabelSelector == "" { + continue + } + if m, err := matchesAnnoAndLabelSelector(n, reject); m || err != nil { + return false, err + } + } + return true, nil +} + +func matchesAnnoAndLabelSelector(n *yaml.RNode, selector *types.Selector) (bool, error) { + r := resource.Resource{RNode: *n} + annoMatch, err := r.MatchesAnnotationSelector(selector.AnnotationSelector) + if err != nil { + return false, err + } + labelMatch, err := r.MatchesLabelSelector(selector.LabelSelector) + if err != nil { + return false, err + } + return annoMatch && labelMatch, nil +} + +func rejectId(rejects []*types.Selector, id *resid.ResId) bool { + for _, r := range rejects { + if !r.ResId.IsEmpty() && id.IsSelectedBy(r.ResId) { + return true + } + } + return false +} + +func applyToNode(node *yaml.RNode, value *yaml.RNode, target *types.TargetSelector) error { + for _, fp := range target.FieldPaths { + fieldPath := utils.SmarterPathSplitter(fp, ".") + var t *yaml.RNode + var err error + if target.Options != nil && target.Options.Create { + t, err = node.Pipe(yaml.LookupCreate(value.YNode().Kind, fieldPath...)) + } else { + t, err = node.Pipe(yaml.Lookup(fieldPath...)) + } + if err != nil { + return err + } + if t != nil { + if err = setTargetValue(target.Options, t, value); err != nil { + return err + } + } + } + return nil +} + +func setTargetValue(options *types.FieldOptions, t *yaml.RNode, value *yaml.RNode) error { + value = value.Copy() + if options != nil && options.Delimiter != "" { + if t.YNode().Kind != yaml.ScalarNode { + return fmt.Errorf("delimiter option can only be used with scalar nodes") + } + tv := strings.Split(t.YNode().Value, options.Delimiter) + v := yaml.GetValue(value) + // TODO: Add a way to remove an element + switch { + case options.Index < 0: // prefix + tv = append([]string{v}, tv...) + case options.Index >= len(tv): // suffix + tv = append(tv, v) + default: // replace an element + tv[options.Index] = v + } + value.YNode().Value = strings.Join(tv, options.Delimiter) + } + t.SetYNode(value.YNode()) + return nil +} + +func getReplacement(nodes []*yaml.RNode, r *types.Replacement) (*yaml.RNode, error) { + source, err := selectSourceNode(nodes, r.Source) + if err != nil { + return nil, err + } + + if r.Source.FieldPath == "" { + r.Source.FieldPath = types.DefaultReplacementFieldPath + } + fieldPath := utils.SmarterPathSplitter(r.Source.FieldPath, ".") + + rn, err := source.Pipe(yaml.Lookup(fieldPath...)) + if err != nil { + return nil, err + } + if rn.IsNilOrEmpty() { + return nil, fmt.Errorf("fieldPath `%s` is missing for replacement source %s", r.Source.FieldPath, r.Source.ResId) + } + + return getRefinedValue(r.Source.Options, rn) +} + +func getRefinedValue(options *types.FieldOptions, rn *yaml.RNode) (*yaml.RNode, error) { + if options == nil || options.Delimiter == "" { + return rn, nil + } + if rn.YNode().Kind != yaml.ScalarNode { + return nil, fmt.Errorf("delimiter option can only be used with scalar nodes") + } + value := strings.Split(yaml.GetValue(rn), options.Delimiter) + if options.Index >= len(value) || options.Index < 0 { + return nil, fmt.Errorf("options.index %d is out of bounds for value %s", options.Index, yaml.GetValue(rn)) + } + n := rn.Copy() + n.YNode().Value = value[options.Index] + return n, nil +} + +// selectSourceNode finds the node that matches the selector, returning +// an error if multiple or none are found +func selectSourceNode(nodes []*yaml.RNode, selector *types.SourceSelector) (*yaml.RNode, error) { + var matches []*yaml.RNode + for _, n := range nodes { + ids, err := utils.MakeResIds(n) + if err != nil { + return nil, err + } + for _, id := range ids { + if id.IsSelectedBy(selector.ResId) { + if len(matches) > 0 { + return nil, fmt.Errorf( + "multiple matches for selector %s", selector) + } + matches = append(matches, n) + break + } + } + } + if len(matches) == 0 { + return nil, fmt.Errorf("nothing selected by %s", selector) + } + return matches[0], nil +} diff --git a/go/internal/forked/api/filters/replacement/replacement.go b/go/internal/forked/api/filters/replacement/replacement.go new file mode 100644 index 000000000..8437b5b2b --- /dev/null +++ b/go/internal/forked/api/filters/replacement/replacement.go @@ -0,0 +1,221 @@ +// Copyright 2021 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package replacement + +import ( + "fmt" + "strings" + + "sigs.k8s.io/kustomize/api/internal/utils" + "sigs.k8s.io/kustomize/api/resource" + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/resid" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/yaml" +) + +type Filter struct { + Replacements []types.Replacement `json:"replacements,omitempty" yaml:"replacements,omitempty"` +} + +// Filter replaces values of targets with values from sources +func (f Filter) Filter(nodes []*yaml.RNode) ([]*yaml.RNode, error) { + for _, r := range f.Replacements { + if r.Source == nil || r.Targets == nil { + return nil, fmt.Errorf("replacements must specify a source and at least one target") + } + value, err := getReplacement(nodes, &r) + if err != nil { + return nil, err + } + nodes, err = applyReplacement(nodes, value, r.Targets) + if err != nil { + return nil, err + } + } + return nodes, nil +} + +func applyReplacement(nodes []*yaml.RNode, value *yaml.RNode, targets []*types.TargetSelector) ([]*yaml.RNode, error) { + for _, t := range targets { + if t.Select == nil { + return nil, fmt.Errorf("target must specify resources to select") + } + if len(t.FieldPaths) == 0 { + t.FieldPaths = []string{types.DefaultReplacementFieldPath} + } + for _, n := range nodes { + ids, err := utils.MakeResIds(n) + if err != nil { + return nil, err + } + + // filter targets by label and annotation selectors + selectByAnnoAndLabel, err := selectByAnnoAndLabel(n, t) + if err != nil { + return nil, err + } + if !selectByAnnoAndLabel { + continue + } + + // filter targets by matching resource IDs + for _, id := range ids { + if id.IsSelectedBy(t.Select.ResId) && !rejectId(t.Reject, &id) { + err := applyToNode(n, value, t) + if err != nil { + return nil, err + } + break + } + } + } + } + return nodes, nil +} + +func selectByAnnoAndLabel(n *yaml.RNode, t *types.TargetSelector) (bool, error) { + if matchesSelect, err := matchesAnnoAndLabelSelector(n, t.Select); !matchesSelect || err != nil { + return false, err + } + for _, reject := range t.Reject { + if reject.AnnotationSelector == "" && reject.LabelSelector == "" { + continue + } + if m, err := matchesAnnoAndLabelSelector(n, reject); m || err != nil { + return false, err + } + } + return true, nil +} + +func matchesAnnoAndLabelSelector(n *yaml.RNode, selector *types.Selector) (bool, error) { + r := resource.Resource{RNode: *n} + annoMatch, err := r.MatchesAnnotationSelector(selector.AnnotationSelector) + if err != nil { + return false, err + } + labelMatch, err := r.MatchesLabelSelector(selector.LabelSelector) + if err != nil { + return false, err + } + return annoMatch && labelMatch, nil +} + +func rejectId(rejects []*types.Selector, id *resid.ResId) bool { + for _, r := range rejects { + if !r.ResId.IsEmpty() && id.IsSelectedBy(r.ResId) { + return true + } + } + return false +} + +func applyToNode(node *yaml.RNode, value *yaml.RNode, target *types.TargetSelector) error { + for _, fp := range target.FieldPaths { + fieldPath := utils.SmarterPathSplitter(fp, ".") + var t *yaml.RNode + var err error + if target.Options != nil && target.Options.Create { + t, err = node.Pipe(yaml.LookupCreate(value.YNode().Kind, fieldPath...)) + } else { + t, err = node.Pipe(yaml.Lookup(fieldPath...)) + } + if err != nil { + return err + } + if t != nil { + if err = setTargetValue(target.Options, t, value); err != nil { + return err + } + } + } + return nil +} + +func setTargetValue(options *types.FieldOptions, t *yaml.RNode, value *yaml.RNode) error { + value = value.Copy() + if options != nil && options.Delimiter != "" { + if t.YNode().Kind != yaml.ScalarNode { + return fmt.Errorf("delimiter option can only be used with scalar nodes") + } + tv := strings.Split(t.YNode().Value, options.Delimiter) + v := yaml.GetValue(value) + // TODO: Add a way to remove an element + switch { + case options.Index < 0: // prefix + tv = append([]string{v}, tv...) + case options.Index >= len(tv): // suffix + tv = append(tv, v) + default: // replace an element + tv[options.Index] = v + } + value.YNode().Value = strings.Join(tv, options.Delimiter) + } + t.SetYNode(value.YNode()) + return nil +} + +func getReplacement(nodes []*yaml.RNode, r *types.Replacement) (*yaml.RNode, error) { + source, err := selectSourceNode(nodes, r.Source) + if err != nil { + return nil, err + } + + if r.Source.FieldPath == "" { + r.Source.FieldPath = types.DefaultReplacementFieldPath + } + fieldPath := utils.SmarterPathSplitter(r.Source.FieldPath, ".") + + rn, err := source.Pipe(yaml.Lookup(fieldPath...)) + if err != nil { + return nil, err + } + if rn.IsNilOrEmpty() { + return nil, fmt.Errorf("fieldPath `%s` is missing for replacement source %s", r.Source.FieldPath, r.Source.ResId) + } + + return getRefinedValue(r.Source.Options, rn) +} + +func getRefinedValue(options *types.FieldOptions, rn *yaml.RNode) (*yaml.RNode, error) { + if options == nil || options.Delimiter == "" { + return rn, nil + } + if rn.YNode().Kind != yaml.ScalarNode { + return nil, fmt.Errorf("delimiter option can only be used with scalar nodes") + } + value := strings.Split(yaml.GetValue(rn), options.Delimiter) + if options.Index >= len(value) || options.Index < 0 { + return nil, fmt.Errorf("options.index %d is out of bounds for value %s", options.Index, yaml.GetValue(rn)) + } + n := rn.Copy() + n.YNode().Value = value[options.Index] + return n, nil +} + +// selectSourceNode finds the node that matches the selector, returning +// an error if multiple or none are found +func selectSourceNode(nodes []*yaml.RNode, selector *types.SourceSelector) (*yaml.RNode, error) { + var matches []*yaml.RNode + for _, n := range nodes { + ids, err := utils.MakeResIds(n) + if err != nil { + return nil, err + } + for _, id := range ids { + if id.IsSelectedBy(selector.ResId) { + if len(matches) > 0 { + return nil, fmt.Errorf( + "multiple matches for selector %s", selector) + } + matches = append(matches, n) + break + } + } + } + if len(matches) == 0 { + return nil, fmt.Errorf("nothing selected by %s", selector) + } + return matches[0], nil +} diff --git a/go/internal/forked/api/filters/replacement/replacement_test.go b/go/internal/forked/api/filters/replacement/replacement_test.go new file mode 100644 index 000000000..b06b074f4 --- /dev/null +++ b/go/internal/forked/api/filters/replacement/replacement_test.go @@ -0,0 +1,1839 @@ +// Copyright 2021 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package replacement + +import ( + "strings" + "testing" + + "github.com/stretchr/testify/assert" + filtertest "sigs.k8s.io/kustomize/api/testutils/filtertest" + "sigs.k8s.io/yaml" +) + +func TestFilter(t *testing.T) { + testCases := map[string]struct { + input string + replacements string + expected string + expectedErr string + }{ + "simple": { + input: `apiVersion: v1 +kind: Deployment +metadata: + name: deploy +spec: + template: + spec: + containers: + - image: nginx:1.7.9 + name: nginx-tagged + - image: postgres:1.8.0 + name: postgresdb +`, + replacements: `replacements: +- source: + kind: Deployment + name: deploy + fieldPath: spec.template.spec.containers.0.image + targets: + - select: + kind: Deployment + name: deploy + fieldPaths: + - spec.template.spec.containers.1.image +`, + expected: `apiVersion: v1 +kind: Deployment +metadata: + name: deploy +spec: + template: + spec: + containers: + - image: nginx:1.7.9 + name: nginx-tagged + - image: nginx:1.7.9 + name: postgresdb +`, + }, + "complex type": { + input: `apiVersion: v1 +kind: Pod +metadata: + name: pod +spec: + containers: + - image: busybox + name: myapp-container +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + name: deploy2 +spec: + template: + spec: + containers: {} +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + name: deploy3 +spec: + template: + spec: + containers: {} +`, + replacements: `replacements: +- source: + kind: Pod + name: pod + fieldPath: spec.containers + targets: + - select: + kind: Deployment + fieldPaths: + - spec.template.spec.containers +`, + expected: `apiVersion: v1 +kind: Pod +metadata: + name: pod +spec: + containers: + - image: busybox + name: myapp-container +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + name: deploy2 +spec: + template: + spec: + containers: + - image: busybox + name: myapp-container +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + name: deploy3 +spec: + template: + spec: + containers: + - image: busybox + name: myapp-container +`, + }, + "from ConfigMap": { + input: `apiVersion: apps/v1 +kind: Deployment +metadata: + name: deploy + labels: + foo: bar +spec: + template: + metadata: + labels: + foo: bar + spec: + containers: + - name: command-demo-container + image: debian + command: ["printenv"] + args: + - HOSTNAME + - PORT + - name: busybox + image: busybox:latest + args: + - echo + - HOSTNAME + - PORT +--- +apiVersion: v1 +kind: ConfigMap +metadata: + name: cm +data: + HOSTNAME: example.com + PORT: 8080 +`, + replacements: `replacements: +- source: + kind: ConfigMap + name: cm + fieldPath: data.HOSTNAME + targets: + - select: + kind: Deployment + fieldPaths: + - spec.template.spec.containers.0.args.0 + - spec.template.spec.containers.1.args.1 +- source: + kind: ConfigMap + name: cm + fieldPath: data.PORT + targets: + - select: + kind: Deployment + fieldPaths: + - spec.template.spec.containers.0.args.1 + - spec.template.spec.containers.1.args.2 +`, + expected: `apiVersion: apps/v1 +kind: Deployment +metadata: + name: deploy + labels: + foo: bar +spec: + template: + metadata: + labels: + foo: bar + spec: + containers: + - name: command-demo-container + image: debian + command: ["printenv"] + args: + - example.com + - 8080 + - name: busybox + image: busybox:latest + args: + - echo + - example.com + - 8080 +--- +apiVersion: v1 +kind: ConfigMap +metadata: + name: cm +data: + HOSTNAME: example.com + PORT: 8080 +`, + }, + "multiple matches for source select": { + input: `apiVersion: v1 +kind: Deployment +metadata: + name: deploy1 +spec: + template: + spec: + containers: + - image: nginx:1.7.9 + name: nginx-tagged + - image: postgres:1.8.0 + name: postgresdb +--- +apiVersion: v1 +kind: Deployment +metadata: + name: deploy2 +spec: + template: + spec: + containers: + - image: nginx:1.7.9 + name: nginx-tagged + - image: postgres:1.8.0 + name: postgresdb +--- +apiVersion: v1 +kind: Deployment +metadata: + name: deploy3 +spec: + template: + spec: + containers: + - image: nginx:1.7.9 + name: nginx-tagged + - image: postgres:1.8.0 + name: postgresdb +`, + replacements: `replacements: +- source: + kind: Deployment + targets: + - select: + kind: Deployment +`, + expectedErr: "multiple matches for selector Deployment.[noVer].[noGrp]/[noName].[noNs]", + }, + "replacement has no source": { + input: `apiVersion: v1 +kind: Deployment +metadata: + name: deploy +spec: + template: + spec: + containers: + - image: nginx:1.7.9 + name: nginx-tagged + - image: postgres:1.8.0 + name: postgresdb +`, + replacements: `replacements: +- targets: + - select: + kind: Deployment +`, + expectedErr: "replacements must specify a source and at least one target", + }, + "field paths with key-value pairs": { + input: `apiVersion: v1 +kind: Deployment +metadata: + name: deploy1 +spec: + template: + spec: + containers: + - image: nginx:1.7.9 + name: nginx-tagged + - image: postgres:1.8.0 + name: postgresdb +--- +apiVersion: v1 +kind: Deployment +metadata: + name: deploy2 +spec: + template: + spec: + containers: + - image: nginx:1.7.9 + name: nginx-tagged + - image: postgres:1.8.0 + name: postgresdb +`, + replacements: `replacements: +- source: + kind: Deployment + name: deploy2 + fieldPath: spec.template.spec.containers.[name=nginx-tagged].image + targets: + - select: + kind: Deployment + name: deploy1 + fieldPaths: + - spec.template.spec.containers.[name=postgresdb].image +`, + expected: `apiVersion: v1 +kind: Deployment +metadata: + name: deploy1 +spec: + template: + spec: + containers: + - image: nginx:1.7.9 + name: nginx-tagged + - image: nginx:1.7.9 + name: postgresdb +--- +apiVersion: v1 +kind: Deployment +metadata: + name: deploy2 +spec: + template: + spec: + containers: + - image: nginx:1.7.9 + name: nginx-tagged + - image: postgres:1.8.0 + name: postgresdb +`, + }, + "select by group and version": { + input: `apiVersion: my-group-1/v1 +kind: Custom +metadata: + name: my-name +spec: + template: + spec: + containers: + - image: nginx:1.7.9 + name: nginx-tagged + - image: postgres:1.8.0 + name: postgresdb +--- +apiVersion: my-group-2/v2 +kind: Custom +metadata: + name: my-name +spec: + template: + spec: + containers: + - image: nginx:1.7.9 + name: nginx-tagged + - image: postgres:1.8.0 + name: postgresdb +--- +apiVersion: my-group-3/v3 +kind: Custom +metadata: + name: my-name +spec: + template: + spec: + containers: + - image: nginx:1.7.9 + name: nginx-tagged + - image: postgres:1.8.0 + name: postgresdb +`, + replacements: `replacements: +- source: + group: my-group-2 + fieldPath: spec.template.spec.containers.0.image + targets: + - select: + version: v3 + fieldPaths: + - spec.template.spec.containers.1.image +`, + expected: `apiVersion: my-group-1/v1 +kind: Custom +metadata: + name: my-name +spec: + template: + spec: + containers: + - image: nginx:1.7.9 + name: nginx-tagged + - image: postgres:1.8.0 + name: postgresdb +--- +apiVersion: my-group-2/v2 +kind: Custom +metadata: + name: my-name +spec: + template: + spec: + containers: + - image: nginx:1.7.9 + name: nginx-tagged + - image: postgres:1.8.0 + name: postgresdb +--- +apiVersion: my-group-3/v3 +kind: Custom +metadata: + name: my-name +spec: + template: + spec: + containers: + - image: nginx:1.7.9 + name: nginx-tagged + - image: nginx:1.7.9 + name: postgresdb +`, + }, + // regression test for missing metadata handling + "missing metadata": { + input: `spec: + template: + spec: + containers: + - image: nginx:1.7.9 + name: nginx-tagged + - image: postgres:1.8.0 + name: postgresdb +--- +apiVersion: my-group/v1 +kind: Custom +metadata: + name: my-name-1 +spec: + template: + spec: + containers: + - image: nginx:1.7.9 + name: nginx-tagged + - image: postgres:1.8.0 + name: postgresdb +--- +apiVersion: my-group/v1 +kind: Custom +metadata: + name: my-name-2 +spec: + template: + spec: + containers: + - image: nginx:1.7.9 + name: nginx-tagged + - image: postgres:1.8.0 + name: postgresdb +`, + replacements: `replacements: +- source: + name: my-name-1 + fieldPath: spec.template.spec.containers.0.image + targets: + - select: + name: my-name-2 + fieldPaths: + - spec.template.spec.containers.1.image +`, + expected: `spec: + template: + spec: + containers: + - image: nginx:1.7.9 + name: nginx-tagged + - image: postgres:1.8.0 + name: postgresdb +--- +apiVersion: my-group/v1 +kind: Custom +metadata: + name: my-name-1 +spec: + template: + spec: + containers: + - image: nginx:1.7.9 + name: nginx-tagged + - image: postgres:1.8.0 + name: postgresdb +--- +apiVersion: my-group/v1 +kind: Custom +metadata: + name: my-name-2 +spec: + template: + spec: + containers: + - image: nginx:1.7.9 + name: nginx-tagged + - image: nginx:1.7.9 + name: postgresdb +`, + }, + "reject 1": { + input: `apiVersion: v1 +kind: Deployment +metadata: + name: deploy1 +spec: + template: + spec: + containers: + - image: nginx:1.7.9 + name: nginx-tagged + - image: postgres:1.8.0 + name: postgresdb +--- +apiVersion: v1 +kind: Deployment +metadata: + name: deploy2 +spec: + template: + spec: + containers: + - image: nginx:1.7.9 + name: nginx-tagged + - image: postgres:1.8.0 + name: postgresdb +--- +apiVersion: v1 +kind: Deployment +metadata: + name: deploy3 +spec: + template: + spec: + containers: + - image: nginx:1.7.9 + name: nginx-tagged + - image: postgres:1.8.0 + name: postgresdb +`, + replacements: `replacements: +- source: + kind: Deployment + name: deploy2 + fieldPath: spec.template.spec.containers.0.image + targets: + - select: + kind: Deployment + reject: + - name: deploy2 + - name: deploy3 + fieldPaths: + - spec.template.spec.containers.1.image +`, + expected: `apiVersion: v1 +kind: Deployment +metadata: + name: deploy1 +spec: + template: + spec: + containers: + - image: nginx:1.7.9 + name: nginx-tagged + - image: nginx:1.7.9 + name: postgresdb +--- +apiVersion: v1 +kind: Deployment +metadata: + name: deploy2 +spec: + template: + spec: + containers: + - image: nginx:1.7.9 + name: nginx-tagged + - image: postgres:1.8.0 + name: postgresdb +--- +apiVersion: v1 +kind: Deployment +metadata: + name: deploy3 +spec: + template: + spec: + containers: + - image: nginx:1.7.9 + name: nginx-tagged + - image: postgres:1.8.0 + name: postgresdb +`, + }, + "reject 2": { + input: `apiVersion: v1 +kind: Deployment +metadata: + name: my-name +spec: + template: + spec: + containers: + - image: nginx:1.7.9 + name: nginx-tagged + - image: postgres:1.8.0 + name: postgresdb +--- +apiVersion: v1 +kind: StatefulSet +metadata: + name: my-name +spec: + template: + spec: + containers: + - image: nginx:1.7.9 + name: nginx-tagged + - image: postgres:1.8.0 + name: postgresdb +`, + replacements: `replacements: +- source: + kind: Deployment + fieldPath: spec.template.spec.containers.0.image + targets: + - select: + version: v1 + reject: + - kind: Deployment + name: my-name + fieldPaths: + - spec.template.spec.containers.1.image +`, + expected: `apiVersion: v1 +kind: Deployment +metadata: + name: my-name +spec: + template: + spec: + containers: + - image: nginx:1.7.9 + name: nginx-tagged + - image: postgres:1.8.0 + name: postgresdb +--- +apiVersion: v1 +kind: StatefulSet +metadata: + name: my-name +spec: + template: + spec: + containers: + - image: nginx:1.7.9 + name: nginx-tagged + - image: nginx:1.7.9 + name: postgresdb +`, + }, + // the only difference in the inputs between this and the previous test + // is the dash before `name: my-name` on line 733 + "reject 3": { + input: `apiVersion: v1 +kind: Deployment +metadata: + name: my-name +spec: + template: + spec: + containers: + - image: nginx:1.7.9 + name: nginx-tagged + - image: postgres:1.8.0 + name: postgresdb +--- +apiVersion: v1 +kind: StatefulSet +metadata: + name: my-name +spec: + template: + spec: + containers: + - image: nginx:1.7.9 + name: nginx-tagged + - image: postgres:1.8.0 + name: postgresdb +`, + replacements: `replacements: +- source: + kind: Deployment + fieldPath: spec.template.spec.containers.0.image + targets: + - select: + version: v1 + reject: + - kind: Deployment + - name: my-name + fieldPaths: + - spec.template.spec.containers.1.image +`, + expected: `apiVersion: v1 +kind: Deployment +metadata: + name: my-name +spec: + template: + spec: + containers: + - image: nginx:1.7.9 + name: nginx-tagged + - image: postgres:1.8.0 + name: postgresdb +--- +apiVersion: v1 +kind: StatefulSet +metadata: + name: my-name +spec: + template: + spec: + containers: + - image: nginx:1.7.9 + name: nginx-tagged + - image: postgres:1.8.0 + name: postgresdb +`, + }, + "partial string replacement - replace": { + input: `apiVersion: v1 +kind: Deployment +metadata: + name: deploy1 +spec: + template: + spec: + containers: + - image: nginx:1.7.9 + name: nginx-tagged + - image: postgres:1.8.0 + name: postgresdb +--- +apiVersion: v1 +kind: Deployment +metadata: + name: deploy2 +spec: + template: + spec: + containers: + - image: nginx:1.7.9 + name: nginx-tagged + - image: postgres:1.8.0 + name: postgresdb +`, + replacements: `replacements: +- source: + kind: Deployment + name: deploy2 + fieldPath: spec.template.spec.containers.0.image + options: + delimiter: ':' + targets: + - select: + kind: Deployment + name: deploy1 + fieldPaths: + - spec.template.spec.containers.1.image + options: + delimiter: ':' +`, + expected: `apiVersion: v1 +kind: Deployment +metadata: + name: deploy1 +spec: + template: + spec: + containers: + - image: nginx:1.7.9 + name: nginx-tagged + - image: nginx:1.8.0 + name: postgresdb +--- +apiVersion: v1 +kind: Deployment +metadata: + name: deploy2 +spec: + template: + spec: + containers: + - image: nginx:1.7.9 + name: nginx-tagged + - image: postgres:1.8.0 + name: postgresdb +`, + }, + "partial string replacement - prefix": { + input: `apiVersion: v1 +kind: Pod +metadata: + name: pod1 +spec: + volumes: + - projected: + sources: + - configMap: + name: myconfigmap + items: + - key: config + path: my/group +--- +apiVersion: v1 +kind: Pod +metadata: + name: pod2 +spec: + volumes: + - projected: + sources: + - configMap: + name: myconfigmap + items: + - key: config + path: group/config +`, + replacements: `replacements: +- source: + kind: Pod + name: pod1 + fieldPath: spec.volumes.0.projected.sources.0.configMap.items.0.path + options: + delimiter: '/' + index: 0 + targets: + - select: + kind: Pod + name: pod2 + fieldPaths: + - spec.volumes.0.projected.sources.0.configMap.items.0.path + options: + delimiter: '/' + index: -1 +`, + expected: `apiVersion: v1 +kind: Pod +metadata: + name: pod1 +spec: + volumes: + - projected: + sources: + - configMap: + name: myconfigmap + items: + - key: config + path: my/group +--- +apiVersion: v1 +kind: Pod +metadata: + name: pod2 +spec: + volumes: + - projected: + sources: + - configMap: + name: myconfigmap + items: + - key: config + path: my/group/config +`, + }, + "partial string replacement - suffix": { + input: `apiVersion: v1 +kind: Pod +metadata: + name: pod1 +spec: + volumes: + - projected: + sources: + - configMap: + name: myconfigmap + items: + - key: config + path: my/group +--- +apiVersion: v1 +kind: Pod +metadata: + name: pod2 +spec: + volumes: + - projected: + sources: + - configMap: + name: myconfigmap + items: + - key: config + path: group/config +`, + replacements: `replacements: +- source: + kind: Pod + name: pod2 + fieldPath: spec.volumes.0.projected.sources.0.configMap.items.0.path + options: + delimiter: '/' + index: 1 + targets: + - select: + kind: Pod + name: pod1 + fieldPaths: + - spec.volumes.0.projected.sources.0.configMap.items.0.path + options: + delimiter: '/' + index: 2 +`, + expected: `apiVersion: v1 +kind: Pod +metadata: + name: pod1 +spec: + volumes: + - projected: + sources: + - configMap: + name: myconfigmap + items: + - key: config + path: my/group/config +--- +apiVersion: v1 +kind: Pod +metadata: + name: pod2 +spec: + volumes: + - projected: + sources: + - configMap: + name: myconfigmap + items: + - key: config + path: group/config +`, + }, + "partial string replacement - last element": { + input: `apiVersion: v1 +kind: Pod +metadata: + name: pod1 +spec: + volumes: + - projected: + sources: + - configMap: + name: myconfigmap + items: + - key: config + path: my/group1 +--- +apiVersion: v1 +kind: Pod +metadata: + name: pod2 +spec: + volumes: + - projected: + sources: + - configMap: + name: myconfigmap + items: + - key: config + path: group2 +`, + replacements: `replacements: +- source: + kind: Pod + name: pod2 + fieldPath: spec.volumes.0.projected.sources.0.configMap.items.0.path + options: + delimiter: '/' + index: 0 + targets: + - select: + kind: Pod + name: pod1 + fieldPaths: + - spec.volumes.0.projected.sources.0.configMap.items.0.path + options: + delimiter: '/' + index: 1 +`, + expected: `apiVersion: v1 +kind: Pod +metadata: + name: pod1 +spec: + volumes: + - projected: + sources: + - configMap: + name: myconfigmap + items: + - key: config + path: my/group2 +--- +apiVersion: v1 +kind: Pod +metadata: + name: pod2 +spec: + volumes: + - projected: + sources: + - configMap: + name: myconfigmap + items: + - key: config + path: group2 +`, + }, + "partial string replacement - first element": { + input: `apiVersion: v1 +kind: Pod +metadata: + name: pod1 +spec: + volumes: + - projected: + sources: + - configMap: + name: myconfigmap + items: + - key: config + path: group1/config +--- +apiVersion: v1 +kind: Pod +metadata: + name: pod2 +spec: + volumes: + - projected: + sources: + - configMap: + name: myconfigmap + items: + - key: config + path: group2 +`, + replacements: `replacements: +- source: + kind: Pod + name: pod2 + fieldPath: spec.volumes.0.projected.sources.0.configMap.items.0.path + options: + delimiter: '/' + index: 0 + targets: + - select: + kind: Pod + name: pod1 + fieldPaths: + - spec.volumes.0.projected.sources.0.configMap.items.0.path + options: + delimiter: '/' + index: 0 +`, + expected: `apiVersion: v1 +kind: Pod +metadata: + name: pod1 +spec: + volumes: + - projected: + sources: + - configMap: + name: myconfigmap + items: + - key: config + path: group2/config +--- +apiVersion: v1 +kind: Pod +metadata: + name: pod2 +spec: + volumes: + - projected: + sources: + - configMap: + name: myconfigmap + items: + - key: config + path: group2 +`, + }, + "options.index out of bounds": { + input: `apiVersion: v1 +kind: Pod +metadata: + name: pod1 +spec: + volumes: + - projected: + sources: + - configMap: + name: myconfigmap + items: + - key: config + path: my/group1 +--- +apiVersion: v1 +kind: Pod +metadata: + name: pod2 +spec: + volumes: + - projected: + sources: + - configMap: + name: myconfigmap + items: + - key: config + path: group2 +`, + replacements: `replacements: +- source: + kind: Pod + name: pod2 + fieldPath: spec.volumes.0.projected.sources.0.configMap.items.0.path + options: + delimiter: '/' + index: -1 + targets: + - select: + kind: Pod + name: pod1 + fieldPaths: + - spec.volumes.0.projected.sources.0.configMap.items.0.path + options: + delimiter: '/' + index: 1 +`, + expectedErr: "options.index -1 is out of bounds for value group2", + }, + "create": { + input: `apiVersion: v1 +kind: Pod +metadata: + name: pod +spec: + containers: + - image: busybox + name: myapp-container +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + name: deploy1 +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + name: deploy2 +`, + replacements: `replacements: +- source: + kind: Pod + name: pod + fieldPath: spec.containers + targets: + - select: + name: deploy1 + fieldPaths: + - spec.template.spec.containers + options: + create: true +- source: + kind: Pod + name: pod + fieldPath: spec.containers + targets: + - select: + name: deploy2 + fieldPaths: + - spec.template.spec.containers +`, + expected: `apiVersion: v1 +kind: Pod +metadata: + name: pod +spec: + containers: + - image: busybox + name: myapp-container +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + name: deploy1 +spec: + template: + spec: + containers: + - image: busybox + name: myapp-container +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + name: deploy2 +`, + }, + "complex type with delimiter in source": { + input: `apiVersion: v1 +kind: Pod +metadata: + name: pod +spec: + containers: + - image: busybox + name: myapp-container +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + name: deploy2 +spec: + template: + spec: + containers: {} +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + name: deploy3 +spec: + template: + spec: + containers: {} +`, + replacements: `replacements: +- source: + kind: Pod + name: pod + fieldPath: spec.containers + options: + delimiter: "/" + targets: + - select: + kind: Deployment + fieldPaths: + - spec.template.spec.containers +`, + expectedErr: "delimiter option can only be used with scalar nodes", + }, + "complex type with delimiter in target": { + input: `apiVersion: v1 +kind: Pod +metadata: + name: pod +spec: + containers: + - image: busybox + name: myapp-container +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + name: deploy2 +spec: + template: + spec: + containers: {} +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + name: deploy3 +spec: + template: + spec: + containers: {} +`, + replacements: `replacements: +- source: + kind: Pod + name: pod + fieldPath: spec.containers + targets: + - select: + kind: Deployment + fieldPaths: + - spec.template.spec.containers + options: + delimiter: "/" +`, + expectedErr: "delimiter option can only be used with scalar nodes", + }, + "mapping value contains '.' character": { + input: `apiVersion: v1 +kind: Custom +metadata: + name: custom + annotations: + a.b.c/d-e: source + f.g.h/i-j: target +`, + replacements: `replacements: +- source: + name: custom + fieldPath: metadata.annotations.[a.b.c/d-e] + targets: + - select: + name: custom + fieldPaths: + - metadata.annotations.[f.g.h/i-j] +`, + expected: `apiVersion: v1 +kind: Custom +metadata: + name: custom + annotations: + a.b.c/d-e: source + f.g.h/i-j: source +`, + }, + "list index contains '.' character": { + input: `apiVersion: v1 +kind: ConfigMap +metadata: + name: source +data: + value: example +--- +apiVersion: kubernetes-client.io/v1 +kind: ExternalSecret +metadata: + name: some-secret +spec: + backendType: secretsManager + data: + - key: some-prefix-replaceme + name: .first + version: latest + property: first + - key: some-prefix-replaceme + name: second + version: latest + property: second +`, + replacements: `replacements: +- source: + kind: ConfigMap + version: v1 + name: source + fieldPath: data.value + targets: + - select: + group: kubernetes-client.io + version: v1 + kind: ExternalSecret + name: some-secret + fieldPaths: + - spec.data.[name=.first].key + - spec.data.[name=second].key + options: + delimiter: "-" + index: 2 +`, + expected: `apiVersion: v1 +kind: ConfigMap +metadata: + name: source +data: + value: example +--- +apiVersion: kubernetes-client.io/v1 +kind: ExternalSecret +metadata: + name: some-secret +spec: + backendType: secretsManager + data: + - key: some-prefix-example + name: .first + version: latest + property: first + - key: some-prefix-example + name: second + version: latest + property: second`, + }, + "multiple field paths in target": { + input: `apiVersion: v1 +kind: ConfigMap +metadata: + name: source +data: + value: example +--- +apiVersion: kubernetes-client.io/v1 +kind: ExternalSecret +metadata: + name: some-secret +spec: + backendType: secretsManager + data: + - key: some-prefix-replaceme + name: first + version: latest + property: first + - key: some-prefix-replaceme + name: second + version: latest + property: second + - key: some-prefix-replaceme + name: third + version: latest + property: third +`, + replacements: `replacements: +- source: + kind: ConfigMap + version: v1 + name: source + fieldPath: data.value + targets: + - select: + group: kubernetes-client.io + version: v1 + kind: ExternalSecret + name: some-secret + fieldPaths: + - spec.data.0.key + - spec.data.1.key + - spec.data.2.key + options: + delimiter: "-" + index: 2 +`, + expected: `apiVersion: v1 +kind: ConfigMap +metadata: + name: source +data: + value: example +--- +apiVersion: kubernetes-client.io/v1 +kind: ExternalSecret +metadata: + name: some-secret +spec: + backendType: secretsManager + data: + - key: some-prefix-example + name: first + version: latest + property: first + - key: some-prefix-example + name: second + version: latest + property: second + - key: some-prefix-example + name: third + version: latest + property: third +`, + }, + "using a previous ID": { + input: `apiVersion: v1 +kind: Deployment +metadata: + name: pre-deploy + annotations: + internal.config.kubernetes.io/previousNames: deploy,deploy + internal.config.kubernetes.io/previousKinds: CronJob,Deployment + internal.config.kubernetes.io/previousNamespaces: default,default +spec: + template: + spec: + containers: + - image: nginx:1.7.9 + name: nginx-tagged + - image: postgres:1.8.0 + name: postgresdb +`, + replacements: `replacements: +- source: + kind: CronJob + name: deploy + fieldPath: spec.template.spec.containers.0.image + targets: + - select: + kind: Deployment + name: deploy + fieldPaths: + - spec.template.spec.containers.1.image +`, + expected: `apiVersion: v1 +kind: Deployment +metadata: + name: pre-deploy + annotations: + internal.config.kubernetes.io/previousNames: deploy,deploy + internal.config.kubernetes.io/previousKinds: CronJob,Deployment + internal.config.kubernetes.io/previousNamespaces: default,default +spec: + template: + spec: + containers: + - image: nginx:1.7.9 + name: nginx-tagged + - image: nginx:1.7.9 + name: postgresdb +`, + }, + + "replacement source.fieldPath does not exist": { + input: `apiVersion: v1 +kind: ConfigMap +metadata: + name: ports-from +data: + grpcPort: 8080 +--- +apiVersion: v1 +kind: ConfigMap +metadata: + name: ports-to +data: + grpcPort: 8081 +`, + replacements: `replacements: +- source: + kind: ConfigMap + name: ports-from + fieldPath: data.httpPort + targets: + - select: + kind: ConfigMap + name: ports-to + fieldPaths: + - data.grpcPort + options: + create: true +`, + expectedErr: "fieldPath `data.httpPort` is missing for replacement source ConfigMap.[noVer].[noGrp]/ports-from.[noNs]", + }, + "annotationSelector": { + input: `apiVersion: v1 +kind: Deployment +metadata: + name: deploy-1 + annotations: + foo: bar-1 +spec: + template: + spec: + containers: + - image: nginx:1.7.9 + name: nginx-tagged + - image: postgres:1.8.0 + name: postgresdb +--- +apiVersion: v1 +kind: Deployment +metadata: + name: deploy-2 + annotations: + foo: bar-2 +spec: + template: + spec: + containers: + - image: nginx:1.7.9 + name: nginx-tagged + - image: postgres:1.8.0 + name: postgresdb + +`, + replacements: `replacements: +- source: + kind: Deployment + name: deploy-1 + fieldPath: spec.template.spec.containers.0.image + targets: + - select: + annotationSelector: foo=bar-1 + fieldPaths: + - spec.template.spec.containers.1.image +`, + expected: `apiVersion: v1 +kind: Deployment +metadata: + name: deploy-1 + annotations: + foo: bar-1 +spec: + template: + spec: + containers: + - image: nginx:1.7.9 + name: nginx-tagged + - image: nginx:1.7.9 + name: postgresdb +--- +apiVersion: v1 +kind: Deployment +metadata: + name: deploy-2 + annotations: + foo: bar-2 +spec: + template: + spec: + containers: + - image: nginx:1.7.9 + name: nginx-tagged + - image: postgres:1.8.0 + name: postgresdb +`, + }, + "labelSelector": { + input: `apiVersion: v1 +kind: Deployment +metadata: + name: deploy-1 + labels: + foo: bar-1 +spec: + template: + spec: + containers: + - image: nginx:1.7.9 + name: nginx-tagged + - image: postgres:1.8.0 + name: postgresdb +--- +apiVersion: v1 +kind: Deployment +metadata: + name: deploy-2 + labels: + foo: bar-2 +spec: + template: + spec: + containers: + - image: nginx:1.7.9 + name: nginx-tagged + - image: postgres:1.8.0 + name: postgresdb + +`, + replacements: `replacements: +- source: + kind: Deployment + name: deploy-1 + fieldPath: spec.template.spec.containers.0.image + targets: + - select: + labelSelector: foo=bar-1 + fieldPaths: + - spec.template.spec.containers.1.image +`, + expected: `apiVersion: v1 +kind: Deployment +metadata: + name: deploy-1 + labels: + foo: bar-1 +spec: + template: + spec: + containers: + - image: nginx:1.7.9 + name: nginx-tagged + - image: nginx:1.7.9 + name: postgresdb +--- +apiVersion: v1 +kind: Deployment +metadata: + name: deploy-2 + labels: + foo: bar-2 +spec: + template: + spec: + containers: + - image: nginx:1.7.9 + name: nginx-tagged + - image: postgres:1.8.0 + name: postgresdb +`, + }, + "reject via labelSelector": { + input: `apiVersion: v1 +kind: Deployment +metadata: + name: deploy-1 + labels: + foo: bar-1 +spec: + template: + spec: + containers: + - image: nginx:1.7.9 + name: nginx-tagged + - image: postgres:1.8.0 + name: postgresdb +--- +apiVersion: v1 +kind: Deployment +metadata: + name: deploy-2 + labels: + foo: bar-2 +spec: + template: + spec: + containers: + - image: nginx:1.7.9 + name: nginx-tagged + - image: postgres:1.8.0 + name: postgresdb + +`, + replacements: `replacements: +- source: + kind: Deployment + name: deploy-1 + fieldPath: spec.template.spec.containers.0.image + targets: + - select: + kind: Deployment + reject: + - labelSelector: foo=bar-2 + fieldPaths: + - spec.template.spec.containers.1.image +`, + expected: `apiVersion: v1 +kind: Deployment +metadata: + name: deploy-1 + labels: + foo: bar-1 +spec: + template: + spec: + containers: + - image: nginx:1.7.9 + name: nginx-tagged + - image: nginx:1.7.9 + name: postgresdb +--- +apiVersion: v1 +kind: Deployment +metadata: + name: deploy-2 + labels: + foo: bar-2 +spec: + template: + spec: + containers: + - image: nginx:1.7.9 + name: nginx-tagged + - image: postgres:1.8.0 + name: postgresdb +`, + }, + } + + for tn, tc := range testCases { + t.Run(tn, func(t *testing.T) { + f := Filter{} + err := yaml.Unmarshal([]byte(tc.replacements), &f) + if !assert.NoError(t, err) { + t.FailNow() + } + actual, err := filtertest.RunFilterE(t, tc.input, f) + if err != nil { + if tc.expectedErr == "" { + t.Errorf("unexpected error: %s\n", err.Error()) + t.FailNow() + } + if !assert.Contains(t, err.Error(), tc.expectedErr) { + t.FailNow() + } + } + if !assert.Equal(t, strings.TrimSpace(tc.expected), strings.TrimSpace(actual)) { + t.FailNow() + } + }) + } +} diff --git a/go/internal/forked/api/filters/replicacount/doc.go b/go/internal/forked/api/filters/replicacount/doc.go new file mode 100644 index 000000000..a22d13034 --- /dev/null +++ b/go/internal/forked/api/filters/replicacount/doc.go @@ -0,0 +1,6 @@ +// Copyright 2020 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +// Package replicacount contains a kio.Filter implementation of the kustomize +// ReplicaCountTransformer. +package replicacount diff --git a/go/internal/forked/api/filters/replicacount/example_test.go b/go/internal/forked/api/filters/replicacount/example_test.go new file mode 100644 index 000000000..dfa2f5f9d --- /dev/null +++ b/go/internal/forked/api/filters/replicacount/example_test.go @@ -0,0 +1,62 @@ +package replicacount + +import ( + "bytes" + "log" + "os" + + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/kio" +) + +func ExampleFilter() { + err := kio.Pipeline{ + Inputs: []kio.Reader{&kio.ByteReader{Reader: bytes.NewBufferString(` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: instance +spec: + template: + replicas: 5 +--- +apiVersion: example.com/v1 +kind: Bar +metadata: + name: instance +spec: + template: + replicas: 5 +`)}}, + Filters: []kio.Filter{Filter{ + Replica: types.Replica{ + Count: 42, + Name: "instance", + }, + FieldSpec: types.FieldSpec{ + Path: "spec/template/replicas", + }, + }}, + Outputs: []kio.Writer{kio.ByteWriter{Writer: os.Stdout}}, + }.Execute() + if err != nil { + log.Fatal(err) + } + + // Output: + // apiVersion: example.com/v1 + // kind: Foo + // metadata: + // name: instance + // spec: + // template: + // replicas: 42 + // --- + // apiVersion: example.com/v1 + // kind: Bar + // metadata: + // name: instance + // spec: + // template: + // replicas: 42 +} diff --git a/go/internal/forked/api/filters/replicacount/example_test.go b/go/internal/forked/api/filters/replicacount/example_test.go new file mode 100644 index 000000000..e96e33d10 --- /dev/null +++ b/go/internal/forked/api/filters/replicacount/example_test.go @@ -0,0 +1,62 @@ +package replicacount + +import ( + "bytes" + "log" + "os" + + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/kio" +) + +func ExampleFilter() { + err := kio.Pipeline{ + Inputs: []kio.Reader{&kio.ByteReader{Reader: bytes.NewBufferString(` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: instance +spec: + template: + replicas: 5 +--- +apiVersion: example.com/v1 +kind: Bar +metadata: + name: instance +spec: + template: + replicas: 5 +`)}}, + Filters: []kio.Filter{Filter{ + Replica: types.Replica{ + Count: 42, + Name: "instance", + }, + FieldSpec: types.FieldSpec{ + Path: "spec/template/replicas", + }, + }}, + Outputs: []kio.Writer{kio.ByteWriter{Writer: os.Stdout}}, + }.Execute() + if err != nil { + log.Fatal(err) + } + + // Output: + // apiVersion: example.com/v1 + // kind: Foo + // metadata: + // name: instance + // spec: + // template: + // replicas: 42 + // --- + // apiVersion: example.com/v1 + // kind: Bar + // metadata: + // name: instance + // spec: + // template: + // replicas: 42 +} diff --git a/go/internal/forked/api/filters/replicacount/replicacount.go b/go/internal/forked/api/filters/replicacount/replicacount.go new file mode 100644 index 000000000..298012cd1 --- /dev/null +++ b/go/internal/forked/api/filters/replicacount/replicacount.go @@ -0,0 +1,37 @@ +package replicacount + +import ( + "strconv" + + "sigs.k8s.io/kustomize/api/filters/fieldspec" + "sigs.k8s.io/kustomize/api/filters/filtersutil" + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/kio" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" +) + +// Filter updates/sets replicas fields using the fieldSpecs +type Filter struct { + Replica types.Replica `json:"replica,omitempty" yaml:"replica,omitempty"` + FieldSpec types.FieldSpec `json:"fieldSpec,omitempty" yaml:"fieldSpec,omitempty"` +} + +var _ kio.Filter = Filter{} + +func (rc Filter) Filter(nodes []*yaml.RNode) ([]*yaml.RNode, error) { + return kio.FilterAll(yaml.FilterFunc(rc.run)).Filter(nodes) +} + +func (rc Filter) run(node *yaml.RNode) (*yaml.RNode, error) { + err := node.PipeE(fieldspec.Filter{ + FieldSpec: rc.FieldSpec, + SetValue: rc.set, + CreateKind: yaml.ScalarNode, // replicas is a ScalarNode + CreateTag: yaml.NodeTagInt, + }) + return node, err +} + +func (rc Filter) set(node *yaml.RNode) error { + return filtersutil.SetScalar(strconv.FormatInt(rc.Replica.Count, 10))(node) +} diff --git a/go/internal/forked/api/filters/replicacount/replicacount.go b/go/internal/forked/api/filters/replicacount/replicacount.go new file mode 100644 index 000000000..d68188bda --- /dev/null +++ b/go/internal/forked/api/filters/replicacount/replicacount.go @@ -0,0 +1,37 @@ +package replicacount + +import ( + "strconv" + + "sigs.k8s.io/kustomize/api/filters/fieldspec" + "sigs.k8s.io/kustomize/api/filters/filtersutil" + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/kio" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/yaml" +) + +// Filter updates/sets replicas fields using the fieldSpecs +type Filter struct { + Replica types.Replica `json:"replica,omitempty" yaml:"replica,omitempty"` + FieldSpec types.FieldSpec `json:"fieldSpec,omitempty" yaml:"fieldSpec,omitempty"` +} + +var _ kio.Filter = Filter{} + +func (rc Filter) Filter(nodes []*yaml.RNode) ([]*yaml.RNode, error) { + return kio.FilterAll(yaml.FilterFunc(rc.run)).Filter(nodes) +} + +func (rc Filter) run(node *yaml.RNode) (*yaml.RNode, error) { + err := node.PipeE(fieldspec.Filter{ + FieldSpec: rc.FieldSpec, + SetValue: rc.set, + CreateKind: yaml.ScalarNode, // replicas is a ScalarNode + CreateTag: yaml.NodeTagInt, + }) + return node, err +} + +func (rc Filter) set(node *yaml.RNode) error { + return filtersutil.SetScalar(strconv.FormatInt(rc.Replica.Count, 10))(node) +} diff --git a/go/internal/forked/api/filters/replicacount/replicacount_test.go b/go/internal/forked/api/filters/replicacount/replicacount_test.go new file mode 100644 index 000000000..a61889e2d --- /dev/null +++ b/go/internal/forked/api/filters/replicacount/replicacount_test.go @@ -0,0 +1,176 @@ +package replicacount + +import ( + "strings" + "testing" + + "github.com/stretchr/testify/assert" + filtertest_test "sigs.k8s.io/kustomize/api/testutils/filtertest" + "sigs.k8s.io/kustomize/api/types" +) + +func TestFilter(t *testing.T) { + + testCases := map[string]struct { + input string + expected string + filter Filter + }{ + "update field": { + input: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: dep +spec: + replicas: 5 +`, + expected: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: dep +spec: + replicas: 42 +`, + filter: Filter{ + Replica: types.Replica{ + Name: "dep", + Count: 42, + }, + FieldSpec: types.FieldSpec{Path: "spec/replicas"}, + }, + }, + "add field": { + input: ` +apiVersion: custom/v1 +kind: Custom +metadata: + name: cus +spec: + template: + other: something +`, + expected: ` +apiVersion: custom/v1 +kind: Custom +metadata: + name: cus +spec: + template: + other: something + replicas: 42 +`, + filter: Filter{ + Replica: types.Replica{ + Name: "cus", + Count: 42, + }, + FieldSpec: types.FieldSpec{ + Path: "spec/template/replicas", + CreateIfNotPresent: true, + }, + }, + }, + + "add_field_null": { + input: ` +apiVersion: custom/v1 +kind: Custom +metadata: + name: cus +spec: + template: + other: something + replicas: null +`, + expected: ` +apiVersion: custom/v1 +kind: Custom +metadata: + name: cus +spec: + template: + other: something + replicas: 42 +`, + filter: Filter{ + Replica: types.Replica{ + Name: "cus", + Count: 42, + }, + FieldSpec: types.FieldSpec{ + Path: "spec/template/replicas", + CreateIfNotPresent: true, + }, + }, + }, + "no update if CreateIfNotPresent is false": { + input: ` +apiVersion: custom/v1 +kind: Custom +metadata: + name: cus +spec: + template: + other: something +`, + expected: ` +apiVersion: custom/v1 +kind: Custom +metadata: + name: cus +spec: + template: + other: something +`, + filter: Filter{ + Replica: types.Replica{ + Name: "cus", + Count: 42, + }, + FieldSpec: types.FieldSpec{ + Path: "spec/template/replicas", + }, + }, + }, + "update multiple fields": { + input: ` +apiVersion: custom/v1 +kind: Custom +metadata: + name: cus +spec: + template: + replicas: 5 +`, + expected: ` +apiVersion: custom/v1 +kind: Custom +metadata: + name: cus +spec: + template: + replicas: 42 +`, + filter: Filter{ + Replica: types.Replica{ + Name: "cus", + Count: 42, + }, + FieldSpec: types.FieldSpec{Path: "spec/template/replicas"}, + }, + }, + } + + for tn, tc := range testCases { + t.Run(tn, func(t *testing.T) { + if !assert.Equal(t, + strings.TrimSpace(tc.expected), + strings.TrimSpace( + filtertest_test.RunFilter(t, tc.input, tc.filter))) { + t.FailNow() + } + }) + } +} diff --git a/go/internal/forked/api/filters/suffix/doc.go b/go/internal/forked/api/filters/suffix/doc.go new file mode 100644 index 000000000..18be62dfd --- /dev/null +++ b/go/internal/forked/api/filters/suffix/doc.go @@ -0,0 +1,6 @@ +// Copyright 2021 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +// Package suffix contains a kio.Filter implementation of the kustomize +// SuffixTransformer. +package suffix diff --git a/go/internal/forked/api/filters/suffix/example_test.go b/go/internal/forked/api/filters/suffix/example_test.go new file mode 100644 index 000000000..7ae4eeeb3 --- /dev/null +++ b/go/internal/forked/api/filters/suffix/example_test.go @@ -0,0 +1,47 @@ +// Copyright 2021 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package suffix_test + +import ( + "bytes" + "log" + "os" + + "sigs.k8s.io/kustomize/api/filters/suffix" + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/kio" +) + +func ExampleFilter() { + err := kio.Pipeline{ + Inputs: []kio.Reader{&kio.ByteReader{Reader: bytes.NewBufferString(` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: instance +--- +apiVersion: example.com/v1 +kind: Bar +metadata: + name: instance +`)}}, + Filters: []kio.Filter{suffix.Filter{ + Suffix: "-baz", FieldSpec: types.FieldSpec{Path: "metadata/name"}}}, + Outputs: []kio.Writer{kio.ByteWriter{Writer: os.Stdout}}, + }.Execute() + if err != nil { + log.Fatal(err) + } + + // Output: + // apiVersion: example.com/v1 + // kind: Foo + // metadata: + // name: instance-baz + // --- + // apiVersion: example.com/v1 + // kind: Bar + // metadata: + // name: instance-baz +} diff --git a/go/internal/forked/api/filters/suffix/example_test.go b/go/internal/forked/api/filters/suffix/example_test.go new file mode 100644 index 000000000..ef44d0ae3 --- /dev/null +++ b/go/internal/forked/api/filters/suffix/example_test.go @@ -0,0 +1,47 @@ +// Copyright 2021 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package suffix_test + +import ( + "bytes" + "log" + "os" + + "sigs.k8s.io/kustomize/api/filters/suffix" + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/kio" +) + +func ExampleFilter() { + err := kio.Pipeline{ + Inputs: []kio.Reader{&kio.ByteReader{Reader: bytes.NewBufferString(` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: instance +--- +apiVersion: example.com/v1 +kind: Bar +metadata: + name: instance +`)}}, + Filters: []kio.Filter{suffix.Filter{ + Suffix: "-baz", FieldSpec: types.FieldSpec{Path: "metadata/name"}}}, + Outputs: []kio.Writer{kio.ByteWriter{Writer: os.Stdout}}, + }.Execute() + if err != nil { + log.Fatal(err) + } + + // Output: + // apiVersion: example.com/v1 + // kind: Foo + // metadata: + // name: instance-baz + // --- + // apiVersion: example.com/v1 + // kind: Bar + // metadata: + // name: instance-baz +} diff --git a/go/internal/forked/api/filters/suffix/suffix.go b/go/internal/forked/api/filters/suffix/suffix.go new file mode 100644 index 000000000..3d8c9f773 --- /dev/null +++ b/go/internal/forked/api/filters/suffix/suffix.go @@ -0,0 +1,42 @@ +// Copyright 2021 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package suffix + +import ( + "fmt" + + "sigs.k8s.io/kustomize/api/filters/fieldspec" + "sigs.k8s.io/kustomize/api/filters/filtersutil" + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/kio" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" +) + +// Filter applies resource name suffix's using the fieldSpecs +type Filter struct { + Suffix string `json:"suffix,omitempty" yaml:"suffix,omitempty"` + + FieldSpec types.FieldSpec `json:"fieldSpec,omitempty" yaml:"fieldSpec,omitempty"` +} + +var _ kio.Filter = Filter{} + +func (f Filter) Filter(nodes []*yaml.RNode) ([]*yaml.RNode, error) { + return kio.FilterAll(yaml.FilterFunc(f.run)).Filter(nodes) +} + +func (f Filter) run(node *yaml.RNode) (*yaml.RNode, error) { + err := node.PipeE(fieldspec.Filter{ + FieldSpec: f.FieldSpec, + SetValue: f.evaluateField, + CreateKind: yaml.ScalarNode, // Name is a ScalarNode + CreateTag: yaml.NodeTagString, + }) + return node, err +} + +func (f Filter) evaluateField(node *yaml.RNode) error { + return filtersutil.SetScalar(fmt.Sprintf( + "%s%s", node.YNode().Value, f.Suffix))(node) +} diff --git a/go/internal/forked/api/filters/suffix/suffix.go b/go/internal/forked/api/filters/suffix/suffix.go new file mode 100644 index 000000000..57f00a54e --- /dev/null +++ b/go/internal/forked/api/filters/suffix/suffix.go @@ -0,0 +1,42 @@ +// Copyright 2021 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package suffix + +import ( + "fmt" + + "sigs.k8s.io/kustomize/api/filters/fieldspec" + "sigs.k8s.io/kustomize/api/filters/filtersutil" + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/kio" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/yaml" +) + +// Filter applies resource name suffix's using the fieldSpecs +type Filter struct { + Suffix string `json:"suffix,omitempty" yaml:"suffix,omitempty"` + + FieldSpec types.FieldSpec `json:"fieldSpec,omitempty" yaml:"fieldSpec,omitempty"` +} + +var _ kio.Filter = Filter{} + +func (f Filter) Filter(nodes []*yaml.RNode) ([]*yaml.RNode, error) { + return kio.FilterAll(yaml.FilterFunc(f.run)).Filter(nodes) +} + +func (f Filter) run(node *yaml.RNode) (*yaml.RNode, error) { + err := node.PipeE(fieldspec.Filter{ + FieldSpec: f.FieldSpec, + SetValue: f.evaluateField, + CreateKind: yaml.ScalarNode, // Name is a ScalarNode + CreateTag: yaml.NodeTagString, + }) + return node, err +} + +func (f Filter) evaluateField(node *yaml.RNode) error { + return filtersutil.SetScalar(fmt.Sprintf( + "%s%s", node.YNode().Value, f.Suffix))(node) +} diff --git a/go/internal/forked/api/filters/suffix/suffix_test.go b/go/internal/forked/api/filters/suffix/suffix_test.go new file mode 100644 index 000000000..94020ed94 --- /dev/null +++ b/go/internal/forked/api/filters/suffix/suffix_test.go @@ -0,0 +1,106 @@ +// Copyright 2021 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package suffix_test + +import ( + "strings" + "testing" + + "github.com/stretchr/testify/assert" + "sigs.k8s.io/kustomize/api/filters/suffix" + filtertest_test "sigs.k8s.io/kustomize/api/testutils/filtertest" + "sigs.k8s.io/kustomize/api/types" +) + +var tests = map[string]TestCase{ + "suffix": { + input: ` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: instance +--- +apiVersion: example.com/v1 +kind: Bar +metadata: + name: instance +`, + expected: ` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: instance-foo +--- +apiVersion: example.com/v1 +kind: Bar +metadata: + name: instance-foo +`, + filter: suffix.Filter{ + Suffix: "-foo", + FieldSpec: types.FieldSpec{Path: "metadata/name"}, + }, + }, + + "data-fieldspecs": { + input: ` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: instance +a: + b: + c: d +--- +apiVersion: example.com/v1 +kind: Bar +metadata: + name: instance +a: + b: + c: d +`, + expected: ` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: instance +a: + b: + c: d-foo +--- +apiVersion: example.com/v1 +kind: Bar +metadata: + name: instance +a: + b: + c: d-foo +`, + filter: suffix.Filter{ + Suffix: "-foo", + FieldSpec: types.FieldSpec{Path: "a/b/c"}, + }, + }, +} + +type TestCase struct { + input string + expected string + filter suffix.Filter +} + +func TestFilter(t *testing.T) { + for name := range tests { + test := tests[name] + t.Run(name, func(t *testing.T) { + if !assert.Equal(t, + strings.TrimSpace(test.expected), + strings.TrimSpace( + filtertest_test.RunFilter(t, test.input, test.filter))) { + t.FailNow() + } + }) + } +} diff --git a/go/internal/forked/api/filters/valueadd/valueadd.go b/go/internal/forked/api/filters/valueadd/valueadd.go new file mode 100644 index 000000000..b1c600a12 --- /dev/null +++ b/go/internal/forked/api/filters/valueadd/valueadd.go @@ -0,0 +1,134 @@ +// Copyright 2020 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package valueadd + +import ( + "strings" + + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/filesys" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/kio" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" +) + +// An 'Add' operation aspiring to IETF RFC 6902 JSON. +// +// The filter tries to add a value to a node at a particular field path. +// +// Kinds of target fields: +// +// - Non-existent target field. +// +// The field will be added and the value inserted. +// +// - Existing field, scalar or map. +// +// E.g. 'spec/template/spec/containers/[name:nginx]/image' +// +// This behaves like an IETF RFC 6902 Replace operation would; +// the existing value is replaced without complaint, even though +// this is an Add operation. In contrast, a Replace operation +// must fail (report an error) if the field doesn't exist. +// +// - Existing field, list (array) +// Not supported yet. +// TODO: Honor fields with RFC-6902-style array indices +// TODO: like 'spec/template/spec/containers/2' +// TODO: Modify kyaml/yaml/PathGetter to allow this. +// The value will be inserted into the array at the given position, +// shifting other contents. To instead replace an array entry, use +// an implementation of an IETF RFC 6902 Replace operation. +// +// For the common case of a filepath in the field value, and a desire +// to add the value to the filepath (rather than replace the filepath), +// use a non-zero value of FilePathPosition (see below). +type Filter struct { + // Value is the value to add. + // + // Empty values are disallowed, i.e. this filter isn't intended + // for use in erasing or removing fields. For that, use a filter + // more aligned with the IETF RFC 6902 JSON Remove operation. + // + // At the time of writing, Value's value should be a simple string, + // not a JSON document. This particular filter focuses on easing + // injection of a single-sourced cloud project and/or cluster name + // into various fields, especially namespace and various filepath + // specifications. + Value string + + // FieldPath is a JSON-style path to the field intended to hold the value. + FieldPath string + + // FilePathPosition is a filepath field index. + // + // Call the value of this field _i_. + // + // If _i_ is zero, negative or unspecified, this field has no effect. + // + // If _i_ is > 0, then it's assumed that + // - 'Value' is a string that can work as a directory or file name, + // - the field value intended for replacement holds a filepath. + // + // The filepath is split into a string slice, the value is inserted + // at position [i-1], shifting the rest of the path to the right. + // A value of i==1 puts the new value at the start of the path. + // This change never converts an absolute path to a relative path, + // meaning adding a new field at position i==1 will preserve a + // leading slash. E.g. if Value == 'PEACH' + // + // OLD : NEW : FilePathPosition + // -------------------------------------------------------- + // {empty} : PEACH : irrelevant + // / : /PEACH : irrelevant + // pie : PEACH/pie : 1 (or less to prefix) + // /pie : /PEACH/pie : 1 (or less to prefix) + // raw : raw/PEACH : 2 (or more to postfix) + // /raw : /raw/PEACH : 2 (or more to postfix) + // a/nice/warm/pie : a/nice/warm/PEACH/pie : 4 + // /a/nice/warm/pie : /a/nice/warm/PEACH/pie : 4 + // + // For robustness (liberal input, conservative output) FilePathPosition + // values that that are too large to index the split filepath result in a + // postfix rather than an error. So use 1 to prefix, 9999 to postfix. + FilePathPosition int `json:"filePathPosition,omitempty" yaml:"filePathPosition,omitempty"` +} + +var _ kio.Filter = Filter{} + +func (f Filter) Filter(nodes []*yaml.RNode) ([]*yaml.RNode, error) { + _, err := kio.FilterAll(yaml.FilterFunc( + func(node *yaml.RNode) (*yaml.RNode, error) { + var fields []string + // if there is forward slash '/' in the field name, a back slash '\' + // will be used to escape it. + for _, f := range strings.Split(f.FieldPath, "/") { + if len(fields) > 0 && strings.HasSuffix(fields[len(fields)-1], "\\") { + concatField := strings.TrimSuffix(fields[len(fields)-1], "\\") + "/" + f + fields = append(fields[:len(fields)-1], concatField) + } else { + fields = append(fields, f) + } + } + // TODO: support SequenceNode. + // Presumably here one could look for array indices (digits) at + // the end of the field path (as described in IETF RFC 6902 JSON), + // and if found, take it as a signal that this should be a + // SequenceNode instead of a ScalarNode, and insert the value + // into the proper slot, shifting every over. + n, err := node.Pipe(yaml.LookupCreate(yaml.ScalarNode, fields...)) + if err != nil { + return node, err + } + // TODO: allow more kinds + if err := yaml.ErrorIfInvalid(n, yaml.ScalarNode); err != nil { + return nil, err + } + newValue := f.Value + if f.FilePathPosition > 0 { + newValue = filesys.InsertPathPart( + n.YNode().Value, f.FilePathPosition-1, newValue) + } + return n.Pipe(yaml.FieldSetter{StringValue: newValue}) + })).Filter(nodes) + return nodes, err +} diff --git a/go/internal/forked/api/filters/valueadd/valueadd.go b/go/internal/forked/api/filters/valueadd/valueadd.go new file mode 100644 index 000000000..1960b92bb --- /dev/null +++ b/go/internal/forked/api/filters/valueadd/valueadd.go @@ -0,0 +1,134 @@ +// Copyright 2020 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package valueadd + +import ( + "strings" + + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/filesys" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/kio" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/yaml" +) + +// An 'Add' operation aspiring to IETF RFC 6902 JSON. +// +// The filter tries to add a value to a node at a particular field path. +// +// Kinds of target fields: +// +// - Non-existent target field. +// +// The field will be added and the value inserted. +// +// - Existing field, scalar or map. +// +// E.g. 'spec/template/spec/containers/[name:nginx]/image' +// +// This behaves like an IETF RFC 6902 Replace operation would; +// the existing value is replaced without complaint, even though +// this is an Add operation. In contrast, a Replace operation +// must fail (report an error) if the field doesn't exist. +// +// - Existing field, list (array) +// Not supported yet. +// TODO: Honor fields with RFC-6902-style array indices +// TODO: like 'spec/template/spec/containers/2' +// TODO: Modify kyaml/yaml/PathGetter to allow this. +// The value will be inserted into the array at the given position, +// shifting other contents. To instead replace an array entry, use +// an implementation of an IETF RFC 6902 Replace operation. +// +// For the common case of a filepath in the field value, and a desire +// to add the value to the filepath (rather than replace the filepath), +// use a non-zero value of FilePathPosition (see below). +type Filter struct { + // Value is the value to add. + // + // Empty values are disallowed, i.e. this filter isn't intended + // for use in erasing or removing fields. For that, use a filter + // more aligned with the IETF RFC 6902 JSON Remove operation. + // + // At the time of writing, Value's value should be a simple string, + // not a JSON document. This particular filter focuses on easing + // injection of a single-sourced cloud project and/or cluster name + // into various fields, especially namespace and various filepath + // specifications. + Value string + + // FieldPath is a JSON-style path to the field intended to hold the value. + FieldPath string + + // FilePathPosition is a filepath field index. + // + // Call the value of this field _i_. + // + // If _i_ is zero, negative or unspecified, this field has no effect. + // + // If _i_ is > 0, then it's assumed that + // - 'Value' is a string that can work as a directory or file name, + // - the field value intended for replacement holds a filepath. + // + // The filepath is split into a string slice, the value is inserted + // at position [i-1], shifting the rest of the path to the right. + // A value of i==1 puts the new value at the start of the path. + // This change never converts an absolute path to a relative path, + // meaning adding a new field at position i==1 will preserve a + // leading slash. E.g. if Value == 'PEACH' + // + // OLD : NEW : FilePathPosition + // -------------------------------------------------------- + // {empty} : PEACH : irrelevant + // / : /PEACH : irrelevant + // pie : PEACH/pie : 1 (or less to prefix) + // /pie : /PEACH/pie : 1 (or less to prefix) + // raw : raw/PEACH : 2 (or more to postfix) + // /raw : /raw/PEACH : 2 (or more to postfix) + // a/nice/warm/pie : a/nice/warm/PEACH/pie : 4 + // /a/nice/warm/pie : /a/nice/warm/PEACH/pie : 4 + // + // For robustness (liberal input, conservative output) FilePathPosition + // values that that are too large to index the split filepath result in a + // postfix rather than an error. So use 1 to prefix, 9999 to postfix. + FilePathPosition int `json:"filePathPosition,omitempty" yaml:"filePathPosition,omitempty"` +} + +var _ kio.Filter = Filter{} + +func (f Filter) Filter(nodes []*yaml.RNode) ([]*yaml.RNode, error) { + _, err := kio.FilterAll(yaml.FilterFunc( + func(node *yaml.RNode) (*yaml.RNode, error) { + var fields []string + // if there is forward slash '/' in the field name, a back slash '\' + // will be used to escape it. + for _, f := range strings.Split(f.FieldPath, "/") { + if len(fields) > 0 && strings.HasSuffix(fields[len(fields)-1], "\\") { + concatField := strings.TrimSuffix(fields[len(fields)-1], "\\") + "/" + f + fields = append(fields[:len(fields)-1], concatField) + } else { + fields = append(fields, f) + } + } + // TODO: support SequenceNode. + // Presumably here one could look for array indices (digits) at + // the end of the field path (as described in IETF RFC 6902 JSON), + // and if found, take it as a signal that this should be a + // SequenceNode instead of a ScalarNode, and insert the value + // into the proper slot, shifting every over. + n, err := node.Pipe(yaml.LookupCreate(yaml.ScalarNode, fields...)) + if err != nil { + return node, err + } + // TODO: allow more kinds + if err := yaml.ErrorIfInvalid(n, yaml.ScalarNode); err != nil { + return nil, err + } + newValue := f.Value + if f.FilePathPosition > 0 { + newValue = filesys.InsertPathPart( + n.YNode().Value, f.FilePathPosition-1, newValue) + } + return n.Pipe(yaml.FieldSetter{StringValue: newValue}) + })).Filter(nodes) + return nodes, err +} diff --git a/go/internal/forked/api/filters/valueadd/valueadd_test.go b/go/internal/forked/api/filters/valueadd/valueadd_test.go new file mode 100644 index 000000000..8c66a72a9 --- /dev/null +++ b/go/internal/forked/api/filters/valueadd/valueadd_test.go @@ -0,0 +1,123 @@ +// Copyright 2020 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package valueadd + +import ( + "strings" + "testing" + + "github.com/stretchr/testify/assert" + filtertest_test "sigs.k8s.io/kustomize/api/testutils/filtertest" +) + +const someResource = ` +kind: SomeKind +spec: + resourceRef: + external: projects/whatever +` + +func TestValueAddFilter(t *testing.T) { + testCases := map[string]struct { + input string + expectedOutput string + filter Filter + }{ + "simpleAdd": { + input: ` +kind: SomeKind +`, + expectedOutput: ` +kind: SomeKind +spec: + resourceRef: + external: valueAdded +`, + filter: Filter{ + Value: "valueAdded", + FieldPath: "spec/resourceRef/external", + }, + }, + "replaceExisting": { + input: someResource, + expectedOutput: ` +kind: SomeKind +spec: + resourceRef: + external: valueAdded +`, + filter: Filter{ + Value: "valueAdded", + FieldPath: "spec/resourceRef/external", + }, + }, + "prefixExisting": { + input: someResource, + expectedOutput: ` +kind: SomeKind +spec: + resourceRef: + external: valueAdded/projects/whatever +`, + filter: Filter{ + Value: "valueAdded", + FieldPath: "spec/resourceRef/external", + FilePathPosition: 1, + }, + }, + "postfixExisting": { + input: someResource, + expectedOutput: ` +kind: SomeKind +spec: + resourceRef: + external: projects/whatever/valueAdded +`, + filter: Filter{ + Value: "valueAdded", + FieldPath: "spec/resourceRef/external", + FilePathPosition: 99, + }, + }, + "placeInMiddleOfExisting": { + input: someResource, + expectedOutput: ` +kind: SomeKind +spec: + resourceRef: + external: projects/valueAdded/whatever +`, + filter: Filter{ + Value: "valueAdded", + FieldPath: "spec/resourceRef/external", + FilePathPosition: 2, + }, + }, + "backSlash": { + input: ` +kind: SomeKind +`, + expectedOutput: ` +kind: SomeKind +spec: + resourceRef/external: valueAdded +`, + filter: Filter{ + Value: "valueAdded", + FieldPath: "spec/resourceRef\\/external", + }, + }, + } + + for tn, tc := range testCases { + t.Run(tn, func(t *testing.T) { + filter := tc.filter + if !assert.Equal(t, + strings.TrimSpace(tc.expectedOutput), + strings.TrimSpace(filtertest_test.RunFilter(t, tc.input, filter))) { + t.FailNow() + } + }) + } +} diff --git a/go/internal/forked/api/hasher/hasher.go b/go/internal/forked/api/hasher/hasher.go new file mode 100644 index 000000000..8a8705920 --- /dev/null +++ b/go/internal/forked/api/hasher/hasher.go @@ -0,0 +1,155 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package hasher + +import ( + "crypto/sha256" + "encoding/json" + "fmt" + "sort" + + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" +) + +// SortArrayAndComputeHash sorts a string array and +// returns a hash for it +func SortArrayAndComputeHash(s []string) (string, error) { + sort.Strings(s) + data, err := json.Marshal(s) + if err != nil { + return "", err + } + return encode(hex256(string(data))) +} + +// Copied from https://github.com/kubernetes/kubernetes +// /blob/master/pkg/kubectl/util/hash/hash.go +func encode(hex string) (string, error) { + if len(hex) < 10 { + return "", fmt.Errorf( + "input length must be at least 10") + } + enc := []rune(hex[:10]) + for i := range enc { + switch enc[i] { + case '0': + enc[i] = 'g' + case '1': + enc[i] = 'h' + case '3': + enc[i] = 'k' + case 'a': + enc[i] = 'm' + case 'e': + enc[i] = 't' + } + } + return string(enc), nil +} + +// hex256 returns the hex form of the sha256 of the argument. +func hex256(data string) string { + return fmt.Sprintf("%x", sha256.Sum256([]byte(data))) +} + +// Hasher computes the hash of an RNode. +type Hasher struct{} + +// Hash returns a hash of the argument. +func (h *Hasher) Hash(node *yaml.RNode) (r string, err error) { + var encoded string + switch node.GetKind() { + case "ConfigMap": + encoded, err = encodeConfigMap(node) + case "Secret": + encoded, err = encodeSecret(node) + default: + var encodedBytes []byte + encodedBytes, err = json.Marshal(node.YNode()) + encoded = string(encodedBytes) + } + if err != nil { + return "", err + } + return encode(hex256(encoded)) +} + +func getNodeValues( + node *yaml.RNode, paths []string) (map[string]interface{}, error) { + values := make(map[string]interface{}) + for _, p := range paths { + vn, err := node.Pipe(yaml.Lookup(p)) + if err != nil { + return map[string]interface{}{}, err + } + if vn == nil { + values[p] = "" + continue + } + if vn.YNode().Kind != yaml.ScalarNode { + vs, err := vn.MarshalJSON() + if err != nil { + return map[string]interface{}{}, err + } + // data, binaryData and stringData are all maps + var v map[string]interface{} + json.Unmarshal(vs, &v) + values[p] = v + } else { + values[p] = vn.YNode().Value + } + } + return values, nil +} + +// encodeConfigMap encodes a ConfigMap. +// Data, Kind, and Name are taken into account. +// BinaryData is included if it's not empty to avoid useless key in output. +func encodeConfigMap(node *yaml.RNode) (string, error) { + // get fields + paths := []string{"metadata/name", "data", "binaryData"} + values, err := getNodeValues(node, paths) + if err != nil { + return "", err + } + m := map[string]interface{}{ + "kind": "ConfigMap", + "name": values["metadata/name"], + "data": values["data"], + } + if _, ok := values["binaryData"].(map[string]interface{}); ok { + m["binaryData"] = values["binaryData"] + } + + // json.Marshal sorts the keys in a stable order in the encoding + data, err := json.Marshal(m) + if err != nil { + return "", err + } + return string(data), nil +} + +// encodeSecret encodes a Secret. +// Data, Kind, Name, and Type are taken into account. +// StringData is included if it's not empty to avoid useless key in output. +func encodeSecret(node *yaml.RNode) (string, error) { + // get fields + paths := []string{"type", "metadata/name", "data", "stringData"} + values, err := getNodeValues(node, paths) + if err != nil { + return "", err + } + m := map[string]interface{}{"kind": "Secret", "type": values["type"], + "name": values["metadata/name"], "data": values["data"]} + if _, ok := values["stringData"].(map[string]interface{}); ok { + m["stringData"] = values["stringData"] + } + + // json.Marshal sorts the keys in a stable order in the encoding + data, err := json.Marshal(m) + if err != nil { + return "", err + } + return string(data), nil +} diff --git a/go/internal/forked/api/hasher/hasher.go b/go/internal/forked/api/hasher/hasher.go new file mode 100644 index 000000000..66434e88b --- /dev/null +++ b/go/internal/forked/api/hasher/hasher.go @@ -0,0 +1,155 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package hasher + +import ( + "crypto/sha256" + "encoding/json" + "fmt" + "sort" + + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/yaml" +) + +// SortArrayAndComputeHash sorts a string array and +// returns a hash for it +func SortArrayAndComputeHash(s []string) (string, error) { + sort.Strings(s) + data, err := json.Marshal(s) + if err != nil { + return "", err + } + return encode(hex256(string(data))) +} + +// Copied from https://github.com/kubernetes/kubernetes +// /blob/master/pkg/kubectl/util/hash/hash.go +func encode(hex string) (string, error) { + if len(hex) < 10 { + return "", fmt.Errorf( + "input length must be at least 10") + } + enc := []rune(hex[:10]) + for i := range enc { + switch enc[i] { + case '0': + enc[i] = 'g' + case '1': + enc[i] = 'h' + case '3': + enc[i] = 'k' + case 'a': + enc[i] = 'm' + case 'e': + enc[i] = 't' + } + } + return string(enc), nil +} + +// hex256 returns the hex form of the sha256 of the argument. +func hex256(data string) string { + return fmt.Sprintf("%x", sha256.Sum256([]byte(data))) +} + +// Hasher computes the hash of an RNode. +type Hasher struct{} + +// Hash returns a hash of the argument. +func (h *Hasher) Hash(node *yaml.RNode) (r string, err error) { + var encoded string + switch node.GetKind() { + case "ConfigMap": + encoded, err = encodeConfigMap(node) + case "Secret": + encoded, err = encodeSecret(node) + default: + var encodedBytes []byte + encodedBytes, err = json.Marshal(node.YNode()) + encoded = string(encodedBytes) + } + if err != nil { + return "", err + } + return encode(hex256(encoded)) +} + +func getNodeValues( + node *yaml.RNode, paths []string) (map[string]interface{}, error) { + values := make(map[string]interface{}) + for _, p := range paths { + vn, err := node.Pipe(yaml.Lookup(p)) + if err != nil { + return map[string]interface{}{}, err + } + if vn == nil { + values[p] = "" + continue + } + if vn.YNode().Kind != yaml.ScalarNode { + vs, err := vn.MarshalJSON() + if err != nil { + return map[string]interface{}{}, err + } + // data, binaryData and stringData are all maps + var v map[string]interface{} + json.Unmarshal(vs, &v) + values[p] = v + } else { + values[p] = vn.YNode().Value + } + } + return values, nil +} + +// encodeConfigMap encodes a ConfigMap. +// Data, Kind, and Name are taken into account. +// BinaryData is included if it's not empty to avoid useless key in output. +func encodeConfigMap(node *yaml.RNode) (string, error) { + // get fields + paths := []string{"metadata/name", "data", "binaryData"} + values, err := getNodeValues(node, paths) + if err != nil { + return "", err + } + m := map[string]interface{}{ + "kind": "ConfigMap", + "name": values["metadata/name"], + "data": values["data"], + } + if _, ok := values["binaryData"].(map[string]interface{}); ok { + m["binaryData"] = values["binaryData"] + } + + // json.Marshal sorts the keys in a stable order in the encoding + data, err := json.Marshal(m) + if err != nil { + return "", err + } + return string(data), nil +} + +// encodeSecret encodes a Secret. +// Data, Kind, Name, and Type are taken into account. +// StringData is included if it's not empty to avoid useless key in output. +func encodeSecret(node *yaml.RNode) (string, error) { + // get fields + paths := []string{"type", "metadata/name", "data", "stringData"} + values, err := getNodeValues(node, paths) + if err != nil { + return "", err + } + m := map[string]interface{}{"kind": "Secret", "type": values["type"], + "name": values["metadata/name"], "data": values["data"]} + if _, ok := values["stringData"].(map[string]interface{}); ok { + m["stringData"] = values["stringData"] + } + + // json.Marshal sorts the keys in a stable order in the encoding + data, err := json.Marshal(m) + if err != nil { + return "", err + } + return string(data), nil +} diff --git a/go/internal/forked/api/hasher/hasher_test.go b/go/internal/forked/api/hasher/hasher_test.go new file mode 100644 index 000000000..0a0c4f708 --- /dev/null +++ b/go/internal/forked/api/hasher/hasher_test.go @@ -0,0 +1,356 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package hasher + +import ( + "strings" + "testing" + + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" +) + +func TestSortArrayAndComputeHash(t *testing.T) { + array1 := []string{"a", "b", "c", "d"} + array2 := []string{"c", "b", "d", "a"} + h1, err := SortArrayAndComputeHash(array1) + if err != nil { + t.Errorf("unexpected error %v", err) + } + if h1 == "" { + t.Errorf("failed to hash %v", array1) + } + h2, err := SortArrayAndComputeHash(array2) + if err != nil { + t.Errorf("unexpected error %v", err) + } + if h2 == "" { + t.Errorf("failed to hash %v", array2) + } + if h1 != h2 { + t.Errorf("hash is not consistent with reordered list: %s %s", h1, h2) + } +} + +func Test_hex256(t *testing.T) { + // hash the empty string to be sure that sha256 is being used + expect := "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855" + sum := hex256("") + if expect != sum { + t.Errorf("expected hash %q but got %q", expect, sum) + } +} + +func TestConfigMapHash(t *testing.T) { + cases := []struct { + desc string + cmYaml string + hash string + err string + }{ + // empty map + {"empty data", ` +apiVersion: v1 +kind: ConfigMap`, "6ct58987ht", ""}, + // one key + {"one key", ` +apiVersion: v1 +kind: ConfigMap +data: + one: ""`, "9g67k2htb6", ""}, + // three keys (tests sorting order) + {"three keys", ` +apiVersion: v1 +kind: ConfigMap +data: + two: 2 + one: "" + three: 3`, "7757f9kkct", ""}, + // empty binary data map + {"empty binary data", ` +apiVersion: v1 +kind: ConfigMap`, "6ct58987ht", ""}, + // one key with binary data + {"one key with binary data", ` +apiVersion: v1 +kind: ConfigMap +binaryData: + one: ""`, "6mtk2m274t", ""}, + // three keys with binary data (tests sorting order) + {"three keys with binary data", ` +apiVersion: v1 +kind: ConfigMap +binaryData: + two: 2 + one: "" + three: 3`, "9th7kc28dg", ""}, + // two keys, one with string and another with binary data + {"two keys with one each", ` +apiVersion: v1 +kind: ConfigMap +data: + one: "" +binaryData: + two: ""`, "698h7c7t9m", ""}, + } + h := &Hasher{} + for _, c := range cases { + node, err := yaml.Parse(c.cmYaml) + if err != nil { + t.Fatal(err) + } + hashed, err := h.Hash(node) + if SkipRest(t, c.desc, err, c.err) { + continue + } + if c.hash != hashed { + t.Errorf("case %q, expect hash %q but got %q", c.desc, c.hash, h) + } + } +} + +func TestSecretHash(t *testing.T) { + cases := []struct { + desc string + secretYaml string + hash string + err string + }{ + // empty map + {"empty data", ` +apiVersion: v1 +kind: Secret +type: my-type`, "5gmgkf8578", ""}, + // one key + {"one key", ` +apiVersion: v1 +kind: Secret +type: my-type +data: + one: ""`, "74bd68bm66", ""}, + // three keys (tests sorting order) + {"three keys", ` +apiVersion: v1 +kind: Secret +type: my-type +data: + two: 2 + one: "" + three: 3`, "4gf75c7476", ""}, + // with stringdata + {"stringdata", ` +apiVersion: v1 +kind: Secret +type: my-type +data: + one: "" +stringData: + two: 2`, "c4h4264gdb", ""}, + // empty stringdata + {"empty stringdata", ` +apiVersion: v1 +kind: Secret +type: my-type +data: + one: ""`, "74bd68bm66", ""}, + } + h := &Hasher{} + for _, c := range cases { + node, err := yaml.Parse(c.secretYaml) + if err != nil { + t.Fatal(err) + } + hashed, err := h.Hash(node) + if SkipRest(t, c.desc, err, c.err) { + continue + } + if c.hash != hashed { + t.Errorf("case %q, expect hash %q but got %q", c.desc, c.hash, h) + } + } +} + +func TestBasicHash(t *testing.T) { + cases := map[string]struct { + res string + hash string + err string + }{ + "minimal": {` +apiVersion: test/v1 +kind: TestResource +metadata: + name: my-resource`, "244782mkb7", ""}, + "with spec": {` +apiVersion: test/v1 +kind: TestResource +metadata: + name: my-resource +spec: + foo: 1 + bar: abc`, "59m2mdccg4", ""}, + } + h := &Hasher{} + for n := range cases { + c := cases[n] + t.Run(n, func(t *testing.T) { + node, err := yaml.Parse(c.res) + if err != nil { + t.Fatal(err) + } + hashed, err := h.Hash(node) + if SkipRest(t, n, err, c.err) { + return + } + if c.hash != hashed { + t.Errorf("case %q, expect hash %q but got %q", n, c.hash, h) + } + }) + } +} + +func TestEncodeConfigMap(t *testing.T) { + cases := []struct { + desc string + cmYaml string + expect string + err string + }{ + // empty map + {"empty data", ` +apiVersion: v1 +kind: ConfigMap`, `{"data":"","kind":"ConfigMap","name":""}`, ""}, + // one key + {"one key", ` +apiVersion: v1 +kind: ConfigMap +data: + one: ""`, `{"data":{"one":""},"kind":"ConfigMap","name":""}`, ""}, + // three keys (tests sorting order) + {"three keys", ` +apiVersion: v1 +kind: ConfigMap +data: + two: 2 + one: "" + three: 3`, `{"data":{"one":"","three":3,"two":2},"kind":"ConfigMap","name":""}`, ""}, + // empty binary map + {"empty data", ` +apiVersion: v1 +kind: ConfigMap`, `{"data":"","kind":"ConfigMap","name":""}`, ""}, + // one key with binary data + {"one key", ` +apiVersion: v1 +kind: ConfigMap +binaryData: + one: ""`, `{"binaryData":{"one":""},"data":"","kind":"ConfigMap","name":""}`, ""}, + // three keys with binary data (tests sorting order) + {"three keys", ` +apiVersion: v1 +kind: ConfigMap +binaryData: + two: 2 + one: "" + three: 3`, `{"binaryData":{"one":"","three":3,"two":2},"data":"","kind":"ConfigMap","name":""}`, ""}, + // two keys, one string and one binary values + {"two keys with one each", ` +apiVersion: v1 +kind: ConfigMap +data: + one: "" +binaryData: + two: ""`, `{"binaryData":{"two":""},"data":{"one":""},"kind":"ConfigMap","name":""}`, ""}, + } + for _, c := range cases { + node, err := yaml.Parse(c.cmYaml) + if err != nil { + t.Fatal(err) + } + s, err := encodeConfigMap(node) + if SkipRest(t, c.desc, err, c.err) { + continue + } + if s != c.expect { + t.Errorf("case %q, expect %q but got %q from encode %#v", c.desc, c.expect, s, c.cmYaml) + } + } +} + +func TestEncodeSecret(t *testing.T) { + cases := []struct { + desc string + secretYaml string + expect string + err string + }{ + // empty map + {"empty data", ` +apiVersion: v1 +kind: Secret +type: my-type`, `{"data":"","kind":"Secret","name":"","type":"my-type"}`, ""}, + // one key + {"one key", ` +apiVersion: v1 +kind: Secret +type: my-type +data: + one: ""`, `{"data":{"one":""},"kind":"Secret","name":"","type":"my-type"}`, ""}, + // three keys (tests sorting order) - note json.Marshal base64 encodes the values because they come in as []byte + {"three keys", ` +apiVersion: v1 +kind: Secret +type: my-type +data: + two: 2 + one: "" + three: 3`, `{"data":{"one":"","three":3,"two":2},"kind":"Secret","name":"","type":"my-type"}`, ""}, + // with stringdata + {"stringdata", ` +apiVersion: v1 +kind: Secret +type: my-type +data: + one: "" +stringData: + two: 2`, `{"data":{"one":""},"kind":"Secret","name":"","stringData":{"two":2},"type":"my-type"}`, ""}, + // empty stringdata + {"empty stringdata", ` +apiVersion: v1 +kind: Secret +type: my-type +data: + one: ""`, `{"data":{"one":""},"kind":"Secret","name":"","type":"my-type"}`, ""}, + } + for _, c := range cases { + node, err := yaml.Parse(c.secretYaml) + if err != nil { + t.Fatal(err) + } + s, err := encodeSecret(node) + if SkipRest(t, c.desc, err, c.err) { + continue + } + if s != c.expect { + t.Errorf("case %q, expect %q but got %q from encode %#v", c.desc, c.expect, s, c.secretYaml) + } + } +} + +// SkipRest returns true if there was a non-nil error or if we expected an +// error that didn't happen, and logs the appropriate error on the test object. +// The return value indicates whether we should skip the rest of the test case +// due to the error result. +func SkipRest(t *testing.T, desc string, err error, contains string) bool { + if err != nil { + if len(contains) == 0 { + t.Errorf("case %q, expect nil error but got %q", desc, err.Error()) + } else if !strings.Contains(err.Error(), contains) { + t.Errorf("case %q, expect error to contain %q but got %q", desc, contains, err.Error()) + } + return true + } else if len(contains) > 0 { + t.Errorf("case %q, expect error to contain %q but got nil error", desc, contains) + return true + } + return false +} diff --git a/go/internal/forked/api/hasher/hasher_test.go b/go/internal/forked/api/hasher/hasher_test.go new file mode 100644 index 000000000..af9a81cbc --- /dev/null +++ b/go/internal/forked/api/hasher/hasher_test.go @@ -0,0 +1,356 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package hasher + +import ( + "strings" + "testing" + + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/yaml" +) + +func TestSortArrayAndComputeHash(t *testing.T) { + array1 := []string{"a", "b", "c", "d"} + array2 := []string{"c", "b", "d", "a"} + h1, err := SortArrayAndComputeHash(array1) + if err != nil { + t.Errorf("unexpected error %v", err) + } + if h1 == "" { + t.Errorf("failed to hash %v", array1) + } + h2, err := SortArrayAndComputeHash(array2) + if err != nil { + t.Errorf("unexpected error %v", err) + } + if h2 == "" { + t.Errorf("failed to hash %v", array2) + } + if h1 != h2 { + t.Errorf("hash is not consistent with reordered list: %s %s", h1, h2) + } +} + +func Test_hex256(t *testing.T) { + // hash the empty string to be sure that sha256 is being used + expect := "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855" + sum := hex256("") + if expect != sum { + t.Errorf("expected hash %q but got %q", expect, sum) + } +} + +func TestConfigMapHash(t *testing.T) { + cases := []struct { + desc string + cmYaml string + hash string + err string + }{ + // empty map + {"empty data", ` +apiVersion: v1 +kind: ConfigMap`, "6ct58987ht", ""}, + // one key + {"one key", ` +apiVersion: v1 +kind: ConfigMap +data: + one: ""`, "9g67k2htb6", ""}, + // three keys (tests sorting order) + {"three keys", ` +apiVersion: v1 +kind: ConfigMap +data: + two: 2 + one: "" + three: 3`, "7757f9kkct", ""}, + // empty binary data map + {"empty binary data", ` +apiVersion: v1 +kind: ConfigMap`, "6ct58987ht", ""}, + // one key with binary data + {"one key with binary data", ` +apiVersion: v1 +kind: ConfigMap +binaryData: + one: ""`, "6mtk2m274t", ""}, + // three keys with binary data (tests sorting order) + {"three keys with binary data", ` +apiVersion: v1 +kind: ConfigMap +binaryData: + two: 2 + one: "" + three: 3`, "9th7kc28dg", ""}, + // two keys, one with string and another with binary data + {"two keys with one each", ` +apiVersion: v1 +kind: ConfigMap +data: + one: "" +binaryData: + two: ""`, "698h7c7t9m", ""}, + } + h := &Hasher{} + for _, c := range cases { + node, err := yaml.Parse(c.cmYaml) + if err != nil { + t.Fatal(err) + } + hashed, err := h.Hash(node) + if SkipRest(t, c.desc, err, c.err) { + continue + } + if c.hash != hashed { + t.Errorf("case %q, expect hash %q but got %q", c.desc, c.hash, h) + } + } +} + +func TestSecretHash(t *testing.T) { + cases := []struct { + desc string + secretYaml string + hash string + err string + }{ + // empty map + {"empty data", ` +apiVersion: v1 +kind: Secret +type: my-type`, "5gmgkf8578", ""}, + // one key + {"one key", ` +apiVersion: v1 +kind: Secret +type: my-type +data: + one: ""`, "74bd68bm66", ""}, + // three keys (tests sorting order) + {"three keys", ` +apiVersion: v1 +kind: Secret +type: my-type +data: + two: 2 + one: "" + three: 3`, "4gf75c7476", ""}, + // with stringdata + {"stringdata", ` +apiVersion: v1 +kind: Secret +type: my-type +data: + one: "" +stringData: + two: 2`, "c4h4264gdb", ""}, + // empty stringdata + {"empty stringdata", ` +apiVersion: v1 +kind: Secret +type: my-type +data: + one: ""`, "74bd68bm66", ""}, + } + h := &Hasher{} + for _, c := range cases { + node, err := yaml.Parse(c.secretYaml) + if err != nil { + t.Fatal(err) + } + hashed, err := h.Hash(node) + if SkipRest(t, c.desc, err, c.err) { + continue + } + if c.hash != hashed { + t.Errorf("case %q, expect hash %q but got %q", c.desc, c.hash, h) + } + } +} + +func TestBasicHash(t *testing.T) { + cases := map[string]struct { + res string + hash string + err string + }{ + "minimal": {` +apiVersion: test/v1 +kind: TestResource +metadata: + name: my-resource`, "244782mkb7", ""}, + "with spec": {` +apiVersion: test/v1 +kind: TestResource +metadata: + name: my-resource +spec: + foo: 1 + bar: abc`, "59m2mdccg4", ""}, + } + h := &Hasher{} + for n := range cases { + c := cases[n] + t.Run(n, func(t *testing.T) { + node, err := yaml.Parse(c.res) + if err != nil { + t.Fatal(err) + } + hashed, err := h.Hash(node) + if SkipRest(t, n, err, c.err) { + return + } + if c.hash != hashed { + t.Errorf("case %q, expect hash %q but got %q", n, c.hash, h) + } + }) + } +} + +func TestEncodeConfigMap(t *testing.T) { + cases := []struct { + desc string + cmYaml string + expect string + err string + }{ + // empty map + {"empty data", ` +apiVersion: v1 +kind: ConfigMap`, `{"data":"","kind":"ConfigMap","name":""}`, ""}, + // one key + {"one key", ` +apiVersion: v1 +kind: ConfigMap +data: + one: ""`, `{"data":{"one":""},"kind":"ConfigMap","name":""}`, ""}, + // three keys (tests sorting order) + {"three keys", ` +apiVersion: v1 +kind: ConfigMap +data: + two: 2 + one: "" + three: 3`, `{"data":{"one":"","three":3,"two":2},"kind":"ConfigMap","name":""}`, ""}, + // empty binary map + {"empty data", ` +apiVersion: v1 +kind: ConfigMap`, `{"data":"","kind":"ConfigMap","name":""}`, ""}, + // one key with binary data + {"one key", ` +apiVersion: v1 +kind: ConfigMap +binaryData: + one: ""`, `{"binaryData":{"one":""},"data":"","kind":"ConfigMap","name":""}`, ""}, + // three keys with binary data (tests sorting order) + {"three keys", ` +apiVersion: v1 +kind: ConfigMap +binaryData: + two: 2 + one: "" + three: 3`, `{"binaryData":{"one":"","three":3,"two":2},"data":"","kind":"ConfigMap","name":""}`, ""}, + // two keys, one string and one binary values + {"two keys with one each", ` +apiVersion: v1 +kind: ConfigMap +data: + one: "" +binaryData: + two: ""`, `{"binaryData":{"two":""},"data":{"one":""},"kind":"ConfigMap","name":""}`, ""}, + } + for _, c := range cases { + node, err := yaml.Parse(c.cmYaml) + if err != nil { + t.Fatal(err) + } + s, err := encodeConfigMap(node) + if SkipRest(t, c.desc, err, c.err) { + continue + } + if s != c.expect { + t.Errorf("case %q, expect %q but got %q from encode %#v", c.desc, c.expect, s, c.cmYaml) + } + } +} + +func TestEncodeSecret(t *testing.T) { + cases := []struct { + desc string + secretYaml string + expect string + err string + }{ + // empty map + {"empty data", ` +apiVersion: v1 +kind: Secret +type: my-type`, `{"data":"","kind":"Secret","name":"","type":"my-type"}`, ""}, + // one key + {"one key", ` +apiVersion: v1 +kind: Secret +type: my-type +data: + one: ""`, `{"data":{"one":""},"kind":"Secret","name":"","type":"my-type"}`, ""}, + // three keys (tests sorting order) - note json.Marshal base64 encodes the values because they come in as []byte + {"three keys", ` +apiVersion: v1 +kind: Secret +type: my-type +data: + two: 2 + one: "" + three: 3`, `{"data":{"one":"","three":3,"two":2},"kind":"Secret","name":"","type":"my-type"}`, ""}, + // with stringdata + {"stringdata", ` +apiVersion: v1 +kind: Secret +type: my-type +data: + one: "" +stringData: + two: 2`, `{"data":{"one":""},"kind":"Secret","name":"","stringData":{"two":2},"type":"my-type"}`, ""}, + // empty stringdata + {"empty stringdata", ` +apiVersion: v1 +kind: Secret +type: my-type +data: + one: ""`, `{"data":{"one":""},"kind":"Secret","name":"","type":"my-type"}`, ""}, + } + for _, c := range cases { + node, err := yaml.Parse(c.secretYaml) + if err != nil { + t.Fatal(err) + } + s, err := encodeSecret(node) + if SkipRest(t, c.desc, err, c.err) { + continue + } + if s != c.expect { + t.Errorf("case %q, expect %q but got %q from encode %#v", c.desc, c.expect, s, c.secretYaml) + } + } +} + +// SkipRest returns true if there was a non-nil error or if we expected an +// error that didn't happen, and logs the appropriate error on the test object. +// The return value indicates whether we should skip the rest of the test case +// due to the error result. +func SkipRest(t *testing.T, desc string, err error, contains string) bool { + if err != nil { + if len(contains) == 0 { + t.Errorf("case %q, expect nil error but got %q", desc, err.Error()) + } else if !strings.Contains(err.Error(), contains) { + t.Errorf("case %q, expect error to contain %q but got %q", desc, contains, err.Error()) + } + return true + } else if len(contains) > 0 { + t.Errorf("case %q, expect error to contain %q but got nil error", desc, contains) + return true + } + return false +} diff --git a/go/internal/forked/api/ifc/ifc.go b/go/internal/forked/api/ifc/ifc.go new file mode 100644 index 000000000..6fec522d5 --- /dev/null +++ b/go/internal/forked/api/ifc/ifc.go @@ -0,0 +1,48 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +// Package ifc holds miscellaneous interfaces used by kustomize. +package ifc + +import ( + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" +) + +// Validator provides functions to validate annotations and labels +type Validator interface { + MakeAnnotationValidator() func(map[string]string) error + MakeAnnotationNameValidator() func([]string) error + MakeLabelValidator() func(map[string]string) error + MakeLabelNameValidator() func([]string) error + ValidateNamespace(string) []string + ErrIfInvalidKey(string) error + IsEnvVarName(k string) error +} + +// KvLoader reads and validates KV pairs. +type KvLoader interface { + Validator() Validator + Load(args types.KvPairSources) (all []types.Pair, err error) +} + +// Loader interface exposes methods to read bytes. +type Loader interface { + // Root returns the root location for this Loader. + Root() string + // New returns Loader located at newRoot. + New(newRoot string) (Loader, error) + // Load returns the bytes read from the location or an error. + Load(location string) ([]byte, error) + // Cleanup cleans the loader + Cleanup() error +} + +// KustHasher returns a hash of the argument +// or an error. +type KustHasher interface { + Hash(*yaml.RNode) (string, error) +} + +// See core.v1.SecretTypeOpaque +const SecretTypeOpaque = "Opaque" diff --git a/go/internal/forked/api/ifc/ifc.go b/go/internal/forked/api/ifc/ifc.go new file mode 100644 index 000000000..1934b384f --- /dev/null +++ b/go/internal/forked/api/ifc/ifc.go @@ -0,0 +1,48 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +// Package ifc holds miscellaneous interfaces used by kustomize. +package ifc + +import ( + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/yaml" +) + +// Validator provides functions to validate annotations and labels +type Validator interface { + MakeAnnotationValidator() func(map[string]string) error + MakeAnnotationNameValidator() func([]string) error + MakeLabelValidator() func(map[string]string) error + MakeLabelNameValidator() func([]string) error + ValidateNamespace(string) []string + ErrIfInvalidKey(string) error + IsEnvVarName(k string) error +} + +// KvLoader reads and validates KV pairs. +type KvLoader interface { + Validator() Validator + Load(args types.KvPairSources) (all []types.Pair, err error) +} + +// Loader interface exposes methods to read bytes. +type Loader interface { + // Root returns the root location for this Loader. + Root() string + // New returns Loader located at newRoot. + New(newRoot string) (Loader, error) + // Load returns the bytes read from the location or an error. + Load(location string) ([]byte, error) + // Cleanup cleans the loader + Cleanup() error +} + +// KustHasher returns a hash of the argument +// or an error. +type KustHasher interface { + Hash(*yaml.RNode) (string, error) +} + +// See core.v1.SecretTypeOpaque +const SecretTypeOpaque = "Opaque" diff --git a/go/internal/forked/api/image/image.go b/go/internal/forked/api/image/image.go new file mode 100644 index 000000000..059999062 --- /dev/null +++ b/go/internal/forked/api/image/image.go @@ -0,0 +1,50 @@ +// Copyright 2020 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package image + +import ( + "regexp" + "strings" +) + +// IsImageMatched returns true if the value of t is identical to the +// image name in the full image name and tag as given by s. +func IsImageMatched(s, t string) bool { + // Tag values are limited to [a-zA-Z0-9_.{}-]. + // Some tools like Bazel rules_k8s allow tag patterns with {} characters. + // More info: https://github.com/bazelbuild/rules_k8s/pull/423 + pattern, _ := regexp.Compile("^" + t + "(@sha256)?(:[a-zA-Z0-9_.{}-]*)?$") + return pattern.MatchString(s) +} + +// Split separates and returns the name and tag parts +// from the image string using either colon `:` or at `@` separators. +// Note that the returned tag keeps its separator. +func Split(imageName string) (name string, tag string) { + // check if image name contains a domain + // if domain is present, ignore domain and check for `:` + ic := -1 + if slashIndex := strings.Index(imageName, "/"); slashIndex < 0 { + ic = strings.LastIndex(imageName, ":") + } else { + lastIc := strings.LastIndex(imageName[slashIndex:], ":") + // set ic only if `:` is present + if lastIc > 0 { + ic = slashIndex + lastIc + } + } + ia := strings.LastIndex(imageName, "@") + if ic < 0 && ia < 0 { + return imageName, "" + } + + i := ic + if ia > 0 { + i = ia + } + + name = imageName[:i] + tag = imageName[i:] + return +} diff --git a/go/internal/forked/api/image/image_test.go b/go/internal/forked/api/image/image_test.go new file mode 100644 index 000000000..c3526490e --- /dev/null +++ b/go/internal/forked/api/image/image_test.go @@ -0,0 +1,80 @@ +// Copyright 2020 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package image + +import ( + "testing" + + "github.com/stretchr/testify/assert" +) + +func TestIsImageMatched(t *testing.T) { + testCases := []struct { + testName string + value string + name string + isMatched bool + }{ + { + testName: "identical", + value: "nginx", + name: "nginx", + isMatched: true, + }, + { + testName: "name is match", + value: "nginx:12345", + name: "nginx", + isMatched: true, + }, + { + testName: "name is not a match", + value: "apache:12345", + name: "nginx", + isMatched: false, + }, + } + + for _, tc := range testCases { + t.Run(tc.testName, func(t *testing.T) { + assert.Equal(t, tc.isMatched, IsImageMatched(tc.value, tc.name)) + }) + } +} + +func TestSplit(t *testing.T) { + testCases := []struct { + testName string + value string + name string + tag string + }{ + { + testName: "no tag", + value: "nginx", + name: "nginx", + tag: "", + }, + { + testName: "with tag", + value: "nginx:1.2.3", + name: "nginx", + tag: ":1.2.3", + }, + { + testName: "with digest", + value: "nginx@12345", + name: "nginx", + tag: "@12345", + }, + } + + for _, tc := range testCases { + t.Run(tc.testName, func(t *testing.T) { + name, tag := Split(tc.value) + assert.Equal(t, tc.name, name) + assert.Equal(t, tc.tag, tag) + }) + } +} diff --git a/go/internal/forked/api/internal/accumulator/loadconfigfromcrds.go b/go/internal/forked/api/internal/accumulator/loadconfigfromcrds.go new file mode 100644 index 000000000..513309525 --- /dev/null +++ b/go/internal/forked/api/internal/accumulator/loadconfigfromcrds.go @@ -0,0 +1,198 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package accumulator + +import ( + "encoding/json" + "strings" + + "github.com/pkg/errors" + "k8s.io/kube-openapi/pkg/validation/spec" + "sigs.k8s.io/kustomize/api/ifc" + "sigs.k8s.io/kustomize/api/internal/plugins/builtinconfig" + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/filesys" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/resid" + "sigs.k8s.io/yaml" +) + +// OpenAPIDefinition describes single type. +// Normally these definitions are auto-generated using gen-openapi. +// Same as in k8s.io / kube-openapi / pkg / common. +type OpenAPIDefinition struct { + Schema spec.Schema + Dependencies []string +} + +type myProperties = map[string]spec.Schema +type nameToApiMap map[string]OpenAPIDefinition + +// LoadConfigFromCRDs parse CRD schemas from paths into a TransformerConfig +func LoadConfigFromCRDs( + ldr ifc.Loader, paths []string) (*builtinconfig.TransformerConfig, error) { + tc := builtinconfig.MakeEmptyConfig() + for _, path := range paths { + content, err := ldr.Load(path) + if err != nil { + return nil, err + } + m, err := makeNameToApiMap(content) + if err != nil { + return nil, errors.Wrapf(err, "unable to parse open API definition from '%s'", path) + } + otherTc, err := makeConfigFromApiMap(m) + if err != nil { + return nil, err + } + tc, err = tc.Merge(otherTc) + if err != nil { + return nil, err + } + } + return tc, nil +} + +func makeNameToApiMap(content []byte) (result nameToApiMap, err error) { + if content[0] == '{' { + err = json.Unmarshal(content, &result) + } else { + err = yaml.Unmarshal(content, &result) + } + return +} + +func makeConfigFromApiMap(m nameToApiMap) (*builtinconfig.TransformerConfig, error) { + result := builtinconfig.MakeEmptyConfig() + for name, api := range m { + if !looksLikeAk8sType(api.Schema.SchemaProps.Properties) { + continue + } + tc := builtinconfig.MakeEmptyConfig() + err := loadCrdIntoConfig( + tc, makeGvkFromTypeName(name), m, name, []string{}) + if err != nil { + return result, err + } + result, err = result.Merge(tc) + if err != nil { + return result, err + } + } + return result, nil +} + +// TODO: Get Group and Version for CRD from the +// openAPI definition once +// "x-kubernetes-group-version-kind" is available in CRD +func makeGvkFromTypeName(n string) resid.Gvk { + names := strings.Split(n, filesys.SelfDir) + kind := names[len(names)-1] + return resid.Gvk{Kind: kind} +} + +func looksLikeAk8sType(properties myProperties) bool { + _, ok := properties["kind"] + if !ok { + return false + } + _, ok = properties["apiVersion"] + if !ok { + return false + } + _, ok = properties["metadata"] + return ok +} + +const ( + // "x-kubernetes-annotation": "" + xAnnotation = "x-kubernetes-annotation" + + // "x-kubernetes-label-selector": "" + xLabelSelector = "x-kubernetes-label-selector" + + // "x-kubernetes-identity": "" + xIdentity = "x-kubernetes-identity" + + // "x-kubernetes-object-ref-api-version": + xVersion = "x-kubernetes-object-ref-api-version" + + // "x-kubernetes-object-ref-kind": + xKind = "x-kubernetes-object-ref-kind" + + // "x-kubernetes-object-ref-name-key": "name" + // default is "name" + xNameKey = "x-kubernetes-object-ref-name-key" +) + +// loadCrdIntoConfig loads a CRD spec into a TransformerConfig +func loadCrdIntoConfig( + theConfig *builtinconfig.TransformerConfig, theGvk resid.Gvk, theMap nameToApiMap, + typeName string, path []string) (err error) { + api, ok := theMap[typeName] + if !ok { + return nil + } + for propName, property := range api.Schema.SchemaProps.Properties { + _, annotate := property.Extensions.GetString(xAnnotation) + if annotate { + err = theConfig.AddAnnotationFieldSpec( + makeFs(theGvk, append(path, propName))) + if err != nil { + return + } + } + _, label := property.Extensions.GetString(xLabelSelector) + if label { + err = theConfig.AddLabelFieldSpec( + makeFs(theGvk, append(path, propName))) + if err != nil { + return + } + } + _, identity := property.Extensions.GetString(xIdentity) + if identity { + err = theConfig.AddPrefixFieldSpec( + makeFs(theGvk, append(path, propName))) + if err != nil { + return + } + } + version, ok := property.Extensions.GetString(xVersion) + if ok { + kind, ok := property.Extensions.GetString(xKind) + if ok { + nameKey, ok := property.Extensions.GetString(xNameKey) + if !ok { + nameKey = "name" + } + err = theConfig.AddNamereferenceFieldSpec( + builtinconfig.NameBackReferences{ + Gvk: resid.Gvk{Kind: kind, Version: version}, + Referrers: []types.FieldSpec{ + makeFs(theGvk, append(path, propName, nameKey))}, + }) + if err != nil { + return + } + } + } + if property.Ref.GetURL() != nil { + err = loadCrdIntoConfig( + theConfig, theGvk, theMap, + property.Ref.String(), append(path, propName)) + if err != nil { + return + } + } + } + return nil +} + +func makeFs(in resid.Gvk, path []string) types.FieldSpec { + return types.FieldSpec{ + CreateIfNotPresent: false, + Gvk: in, + Path: strings.Join(path, "/"), + } +} diff --git a/go/internal/forked/api/internal/accumulator/loadconfigfromcrds.go b/go/internal/forked/api/internal/accumulator/loadconfigfromcrds.go new file mode 100644 index 000000000..e1e865e3f --- /dev/null +++ b/go/internal/forked/api/internal/accumulator/loadconfigfromcrds.go @@ -0,0 +1,198 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package accumulator + +import ( + "encoding/json" + "strings" + + "github.com/pkg/errors" + "k8s.io/kube-openapi/pkg/validation/spec" + "sigs.k8s.io/kustomize/api/ifc" + "sigs.k8s.io/kustomize/api/internal/plugins/builtinconfig" + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/filesys" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/resid" + "sigs.k8s.io/yaml" +) + +// OpenAPIDefinition describes single type. +// Normally these definitions are auto-generated using gen-openapi. +// Same as in k8s.io / kube-openapi / pkg / common. +type OpenAPIDefinition struct { + Schema spec.Schema + Dependencies []string +} + +type myProperties = map[string]spec.Schema +type nameToApiMap map[string]OpenAPIDefinition + +// LoadConfigFromCRDs parse CRD schemas from paths into a TransformerConfig +func LoadConfigFromCRDs( + ldr ifc.Loader, paths []string) (*builtinconfig.TransformerConfig, error) { + tc := builtinconfig.MakeEmptyConfig() + for _, path := range paths { + content, err := ldr.Load(path) + if err != nil { + return nil, err + } + m, err := makeNameToApiMap(content) + if err != nil { + return nil, errors.Wrapf(err, "unable to parse open API definition from '%s'", path) + } + otherTc, err := makeConfigFromApiMap(m) + if err != nil { + return nil, err + } + tc, err = tc.Merge(otherTc) + if err != nil { + return nil, err + } + } + return tc, nil +} + +func makeNameToApiMap(content []byte) (result nameToApiMap, err error) { + if content[0] == '{' { + err = json.Unmarshal(content, &result) + } else { + err = yaml.Unmarshal(content, &result) + } + return +} + +func makeConfigFromApiMap(m nameToApiMap) (*builtinconfig.TransformerConfig, error) { + result := builtinconfig.MakeEmptyConfig() + for name, api := range m { + if !looksLikeAk8sType(api.Schema.SchemaProps.Properties) { + continue + } + tc := builtinconfig.MakeEmptyConfig() + err := loadCrdIntoConfig( + tc, makeGvkFromTypeName(name), m, name, []string{}) + if err != nil { + return result, err + } + result, err = result.Merge(tc) + if err != nil { + return result, err + } + } + return result, nil +} + +// TODO: Get Group and Version for CRD from the +// openAPI definition once +// "x-kubernetes-group-version-kind" is available in CRD +func makeGvkFromTypeName(n string) resid.Gvk { + names := strings.Split(n, filesys.SelfDir) + kind := names[len(names)-1] + return resid.Gvk{Kind: kind} +} + +func looksLikeAk8sType(properties myProperties) bool { + _, ok := properties["kind"] + if !ok { + return false + } + _, ok = properties["apiVersion"] + if !ok { + return false + } + _, ok = properties["metadata"] + return ok +} + +const ( + // "x-kubernetes-annotation": "" + xAnnotation = "x-kubernetes-annotation" + + // "x-kubernetes-label-selector": "" + xLabelSelector = "x-kubernetes-label-selector" + + // "x-kubernetes-identity": "" + xIdentity = "x-kubernetes-identity" + + // "x-kubernetes-object-ref-api-version": + xVersion = "x-kubernetes-object-ref-api-version" + + // "x-kubernetes-object-ref-kind": + xKind = "x-kubernetes-object-ref-kind" + + // "x-kubernetes-object-ref-name-key": "name" + // default is "name" + xNameKey = "x-kubernetes-object-ref-name-key" +) + +// loadCrdIntoConfig loads a CRD spec into a TransformerConfig +func loadCrdIntoConfig( + theConfig *builtinconfig.TransformerConfig, theGvk resid.Gvk, theMap nameToApiMap, + typeName string, path []string) (err error) { + api, ok := theMap[typeName] + if !ok { + return nil + } + for propName, property := range api.Schema.SchemaProps.Properties { + _, annotate := property.Extensions.GetString(xAnnotation) + if annotate { + err = theConfig.AddAnnotationFieldSpec( + makeFs(theGvk, append(path, propName))) + if err != nil { + return + } + } + _, label := property.Extensions.GetString(xLabelSelector) + if label { + err = theConfig.AddLabelFieldSpec( + makeFs(theGvk, append(path, propName))) + if err != nil { + return + } + } + _, identity := property.Extensions.GetString(xIdentity) + if identity { + err = theConfig.AddPrefixFieldSpec( + makeFs(theGvk, append(path, propName))) + if err != nil { + return + } + } + version, ok := property.Extensions.GetString(xVersion) + if ok { + kind, ok := property.Extensions.GetString(xKind) + if ok { + nameKey, ok := property.Extensions.GetString(xNameKey) + if !ok { + nameKey = "name" + } + err = theConfig.AddNamereferenceFieldSpec( + builtinconfig.NameBackReferences{ + Gvk: resid.Gvk{Kind: kind, Version: version}, + Referrers: []types.FieldSpec{ + makeFs(theGvk, append(path, propName, nameKey))}, + }) + if err != nil { + return + } + } + } + if property.Ref.GetURL() != nil { + err = loadCrdIntoConfig( + theConfig, theGvk, theMap, + property.Ref.String(), append(path, propName)) + if err != nil { + return + } + } + } + return nil +} + +func makeFs(in resid.Gvk, path []string) types.FieldSpec { + return types.FieldSpec{ + CreateIfNotPresent: false, + Gvk: in, + Path: strings.Join(path, "/"), + } +} diff --git a/go/internal/forked/api/internal/accumulator/loadconfigfromcrds_test.go b/go/internal/forked/api/internal/accumulator/loadconfigfromcrds_test.go new file mode 100644 index 000000000..26da339ae --- /dev/null +++ b/go/internal/forked/api/internal/accumulator/loadconfigfromcrds_test.go @@ -0,0 +1,176 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package accumulator_test + +import ( + "reflect" + "testing" + + "github.com/stretchr/testify/require" + "sigs.k8s.io/kustomize/api/internal/accumulator" + "sigs.k8s.io/kustomize/api/internal/plugins/builtinconfig" + "sigs.k8s.io/kustomize/api/loader" + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/filesys" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/resid" +) + +// This defines two CRD's: Bee and MyKind. +// +// Bee is boring, it's spec has no dependencies. +// +// MyKind, however, has a spec that contains +// a Bee and a (k8s native) Secret. +const ( + crdContent = ` +{ + "github.com/example/pkg/apis/jingfang/v1beta1.Bee": { + "Schema": { + "description": "Bee", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert +recognized schemas to the latest internal value, and may reject unrecognized values. +More info: https://git.k8s.io/community/contributors/devel/api-conventions.md#resources", + "type": "string" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer +this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. +More info: https://git.k8s.io/community/contributors/devel/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "k8s.io/apimachinery/pkg/apis/meta/v1.ObjectMeta" + }, + "spec": { + "$ref": "github.com/example/pkg/apis/jingfang/v1beta1.BeeSpec" + }, + "status": { + "$ref": "github.com/example/pkg/apis/jingfang/v1beta1.BeeStatus" + } + } + }, + "Dependencies": [ + "github.com/example/pkg/apis/jingfang/v1beta1.BeeSpec", + "github.com/example/pkg/apis/jingfang/v1beta1.BeeStatus", + "k8s.io/apimachinery/pkg/apis/meta/v1.ObjectMeta" + ] + }, + "github.com/example/pkg/apis/jingfang/v1beta1.BeeSpec": { + "Schema": { + "description": "BeeSpec defines the desired state of Bee" + }, + "Dependencies": [] + }, + "github.com/example/pkg/apis/jingfang/v1beta1.BeeStatus": { + "Schema": { + "description": "BeeStatus defines the observed state of Bee" + }, + "Dependencies": [] + }, + "github.com/example/pkg/apis/jingfang/v1beta1.MyKind": { + "Schema": { + "description": "MyKind", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. +Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. +More info: https://git.k8s.io/community/contributors/devel/api-conventions.md#resources", + "type": "string" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. +Servers may infer this from the endpoint the client submits requests to. Cannot be updated. +In CamelCase. More info: https://git.k8s.io/community/contributors/devel/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "k8s.io/apimachinery/pkg/apis/meta/v1.ObjectMeta" + }, + "spec": { + "$ref": "github.com/example/pkg/apis/jingfang/v1beta1.MyKindSpec" + }, + "status": { + "$ref": "github.com/example/pkg/apis/jingfang/v1beta1.MyKindStatus" + } + } + }, + "Dependencies": [ + "github.com/example/pkg/apis/jingfang/v1beta1.MyKindSpec", + "github.com/example/pkg/apis/jingfang/v1beta1.MyKindStatus", + "k8s.io/apimachinery/pkg/apis/meta/v1.ObjectMeta" + ] + }, + "github.com/example/pkg/apis/jingfang/v1beta1.MyKindSpec": { + "Schema": { + "description": "MyKindSpec defines the desired state of MyKind", + "properties": { + "beeRef": { + "x-kubernetes-object-ref-api-version": "v1beta1", + "x-kubernetes-object-ref-kind": "Bee", + "$ref": "github.com/example/pkg/apis/jingfang/v1beta1.Bee" + }, + "secretRef": { + "description": "If defined, we use this secret for configuring the MYSQL_ROOT_PASSWORD +If it is not set we generate a secret dynamically", + "x-kubernetes-object-ref-api-version": "v1", + "x-kubernetes-object-ref-kind": "Secret", + "$ref": "k8s.io/api/core/v1.LocalObjectReference" + } + } + }, + "Dependencies": [ + "github.com/example/pkg/apis/jingfang/v1beta1.Bee", + "k8s.io/api/core/v1.LocalObjectReference" + ] + }, + "github.com/example/pkg/apis/jingfang/v1beta1.MyKindStatus": { + "Schema": { + "description": "MyKindStatus defines the observed state of MyKind" + }, + "Dependencies": [] + } +} +` +) + +func TestLoadCRDs(t *testing.T) { + nbrs := []builtinconfig.NameBackReferences{ + { + Gvk: resid.Gvk{Kind: "Secret", Version: "v1"}, + Referrers: []types.FieldSpec{ + { + Gvk: resid.Gvk{Kind: "MyKind"}, + Path: "spec/secretRef/name", + }, + }, + }, + { + Gvk: resid.Gvk{Kind: "Bee", Version: "v1beta1"}, + Referrers: []types.FieldSpec{ + { + Gvk: resid.Gvk{Kind: "MyKind"}, + Path: "spec/beeRef/name", + }, + }, + }, + } + + expectedTc := &builtinconfig.TransformerConfig{ + NameReference: nbrs, + } + + fSys := filesys.MakeFsInMemory() + err := fSys.WriteFile("/testpath/crd.json", []byte(crdContent)) + require.NoError(t, err) + ldr, err := loader.NewLoader(loader.RestrictionRootOnly, "/testpath", fSys) + require.NoError(t, err) + + actualTc, err := accumulator.LoadConfigFromCRDs(ldr, []string{"crd.json"}) + require.NoError(t, err) + if !reflect.DeepEqual(actualTc, expectedTc) { + t.Fatalf("expected\n %v\n but got\n %v\n", expectedTc, actualTc) + } +} diff --git a/go/internal/forked/api/internal/accumulator/loadconfigfromcrds_test.go b/go/internal/forked/api/internal/accumulator/loadconfigfromcrds_test.go new file mode 100644 index 000000000..ef7740d6f --- /dev/null +++ b/go/internal/forked/api/internal/accumulator/loadconfigfromcrds_test.go @@ -0,0 +1,176 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package accumulator_test + +import ( + "reflect" + "testing" + + "github.com/stretchr/testify/require" + "sigs.k8s.io/kustomize/api/internal/accumulator" + "sigs.k8s.io/kustomize/api/internal/plugins/builtinconfig" + "sigs.k8s.io/kustomize/api/loader" + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/filesys" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/resid" +) + +// This defines two CRD's: Bee and MyKind. +// +// Bee is boring, it's spec has no dependencies. +// +// MyKind, however, has a spec that contains +// a Bee and a (k8s native) Secret. +const ( + crdContent = ` +{ + "github.com/example/pkg/apis/jingfang/v1beta1.Bee": { + "Schema": { + "description": "Bee", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert +recognized schemas to the latest internal value, and may reject unrecognized values. +More info: https://git.k8s.io/community/contributors/devel/api-conventions.md#resources", + "type": "string" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer +this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. +More info: https://git.k8s.io/community/contributors/devel/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "k8s.io/apimachinery/pkg/apis/meta/v1.ObjectMeta" + }, + "spec": { + "$ref": "github.com/example/pkg/apis/jingfang/v1beta1.BeeSpec" + }, + "status": { + "$ref": "github.com/example/pkg/apis/jingfang/v1beta1.BeeStatus" + } + } + }, + "Dependencies": [ + "github.com/example/pkg/apis/jingfang/v1beta1.BeeSpec", + "github.com/example/pkg/apis/jingfang/v1beta1.BeeStatus", + "k8s.io/apimachinery/pkg/apis/meta/v1.ObjectMeta" + ] + }, + "github.com/example/pkg/apis/jingfang/v1beta1.BeeSpec": { + "Schema": { + "description": "BeeSpec defines the desired state of Bee" + }, + "Dependencies": [] + }, + "github.com/example/pkg/apis/jingfang/v1beta1.BeeStatus": { + "Schema": { + "description": "BeeStatus defines the observed state of Bee" + }, + "Dependencies": [] + }, + "github.com/example/pkg/apis/jingfang/v1beta1.MyKind": { + "Schema": { + "description": "MyKind", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. +Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. +More info: https://git.k8s.io/community/contributors/devel/api-conventions.md#resources", + "type": "string" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. +Servers may infer this from the endpoint the client submits requests to. Cannot be updated. +In CamelCase. More info: https://git.k8s.io/community/contributors/devel/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "k8s.io/apimachinery/pkg/apis/meta/v1.ObjectMeta" + }, + "spec": { + "$ref": "github.com/example/pkg/apis/jingfang/v1beta1.MyKindSpec" + }, + "status": { + "$ref": "github.com/example/pkg/apis/jingfang/v1beta1.MyKindStatus" + } + } + }, + "Dependencies": [ + "github.com/example/pkg/apis/jingfang/v1beta1.MyKindSpec", + "github.com/example/pkg/apis/jingfang/v1beta1.MyKindStatus", + "k8s.io/apimachinery/pkg/apis/meta/v1.ObjectMeta" + ] + }, + "github.com/example/pkg/apis/jingfang/v1beta1.MyKindSpec": { + "Schema": { + "description": "MyKindSpec defines the desired state of MyKind", + "properties": { + "beeRef": { + "x-kubernetes-object-ref-api-version": "v1beta1", + "x-kubernetes-object-ref-kind": "Bee", + "$ref": "github.com/example/pkg/apis/jingfang/v1beta1.Bee" + }, + "secretRef": { + "description": "If defined, we use this secret for configuring the MYSQL_ROOT_PASSWORD +If it is not set we generate a secret dynamically", + "x-kubernetes-object-ref-api-version": "v1", + "x-kubernetes-object-ref-kind": "Secret", + "$ref": "k8s.io/api/core/v1.LocalObjectReference" + } + } + }, + "Dependencies": [ + "github.com/example/pkg/apis/jingfang/v1beta1.Bee", + "k8s.io/api/core/v1.LocalObjectReference" + ] + }, + "github.com/example/pkg/apis/jingfang/v1beta1.MyKindStatus": { + "Schema": { + "description": "MyKindStatus defines the observed state of MyKind" + }, + "Dependencies": [] + } +} +` +) + +func TestLoadCRDs(t *testing.T) { + nbrs := []builtinconfig.NameBackReferences{ + { + Gvk: resid.Gvk{Kind: "Secret", Version: "v1"}, + Referrers: []types.FieldSpec{ + { + Gvk: resid.Gvk{Kind: "MyKind"}, + Path: "spec/secretRef/name", + }, + }, + }, + { + Gvk: resid.Gvk{Kind: "Bee", Version: "v1beta1"}, + Referrers: []types.FieldSpec{ + { + Gvk: resid.Gvk{Kind: "MyKind"}, + Path: "spec/beeRef/name", + }, + }, + }, + } + + expectedTc := &builtinconfig.TransformerConfig{ + NameReference: nbrs, + } + + fSys := filesys.MakeFsInMemory() + err := fSys.WriteFile("/testpath/crd.json", []byte(crdContent)) + require.NoError(t, err) + ldr, err := loader.NewLoader(loader.RestrictionRootOnly, "/testpath", fSys) + require.NoError(t, err) + + actualTc, err := accumulator.LoadConfigFromCRDs(ldr, []string{"crd.json"}) + require.NoError(t, err) + if !reflect.DeepEqual(actualTc, expectedTc) { + t.Fatalf("expected\n %v\n but got\n %v\n", expectedTc, actualTc) + } +} diff --git a/go/internal/forked/api/internal/accumulator/namereferencetransformer.go b/go/internal/forked/api/internal/accumulator/namereferencetransformer.go new file mode 100644 index 000000000..6afb4596f --- /dev/null +++ b/go/internal/forked/api/internal/accumulator/namereferencetransformer.go @@ -0,0 +1,165 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package accumulator + +import ( + "fmt" + "log" + + "sigs.k8s.io/kustomize/api/filters/nameref" + "sigs.k8s.io/kustomize/api/internal/plugins/builtinconfig" + "sigs.k8s.io/kustomize/api/resmap" + "sigs.k8s.io/kustomize/api/resource" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/resid" +) + +type nameReferenceTransformer struct { + backRefs []builtinconfig.NameBackReferences +} + +const doDebug = false + +var _ resmap.Transformer = &nameReferenceTransformer{} + +type filterMap map[*resource.Resource][]nameref.Filter + +// newNameReferenceTransformer constructs a nameReferenceTransformer +// with a given slice of NameBackReferences. +func newNameReferenceTransformer( + br []builtinconfig.NameBackReferences) resmap.Transformer { + if br == nil { + log.Fatal("backrefs not expected to be nil") + } + return &nameReferenceTransformer{backRefs: br} +} + +// Transform updates name references in resource A that +// refer to resource B, given that B's name may have +// changed. +// +// For example, a HorizontalPodAutoscaler (HPA) +// necessarily refers to a Deployment, the thing that +// an HPA scales. In this case: +// +// - the HPA instance is the Referrer, +// - the Deployment instance is the ReferralTarget. +// +// If the Deployment's name changes, e.g. a prefix is added, +// then the HPA's reference to the Deployment must be fixed. +// +func (t *nameReferenceTransformer) Transform(m resmap.ResMap) error { + fMap := t.determineFilters(m.Resources()) + debug(fMap) + for r, fList := range fMap { + c, err := m.SubsetThatCouldBeReferencedByResource(r) + if err != nil { + return err + } + for _, f := range fList { + f.Referrer = r + f.ReferralCandidates = c + if err := f.Referrer.ApplyFilter(f); err != nil { + return err + } + } + } + return nil +} + +func debug(fMap filterMap) { + if !doDebug { + return + } + fmt.Printf("filterMap has %d entries:\n", len(fMap)) + rCount := 0 + for r, fList := range fMap { + yml, _ := r.AsYAML() + rCount++ + fmt.Printf(` +---- %3d. possible referrer ------------- +%s +---------`, rCount, string(yml), + ) + for i, f := range fList { + fmt.Printf(` +%3d/%3d update: %s + from: %s +`, rCount, i+1, f.NameFieldToUpdate.Path, f.ReferralTarget, + ) + } + } +} + +// Produce a map from referrer resources that might need to be fixed +// to filters that might fix them. The keys to this map are potential +// referrers, so won't include resources like ConfigMap or Secret. +// +// In the inner loop over the resources below, say we +// encounter an HPA instance. Then, in scanning the set +// of all known backrefs, we encounter an entry like +// +// - kind: Deployment +// fieldSpecs: +// - kind: HorizontalPodAutoscaler +// path: spec/scaleTargetRef/name +// +// This entry says that an HPA, via its +// 'spec/scaleTargetRef/name' field, may refer to a +// Deployment. +// +// This means that a filter will need to hunt for the right Deployment, +// obtain it's new name, and write that name into the HPA's +// 'spec/scaleTargetRef/name' field. Return a filter that can do that. +func (t *nameReferenceTransformer) determineFilters( + resources []*resource.Resource) (fMap filterMap) { + + // We cache the resource OrgId values because they don't change and otherwise are very visible in a memory pprof + resourceOrgIds := make([]resid.ResId, len(resources)) + for i, resource := range resources { + resourceOrgIds[i] = resource.OrgId() + } + + fMap = make(filterMap) + for _, backReference := range t.backRefs { + for _, referrerSpec := range backReference.Referrers { + for i, res := range resources { + if resourceOrgIds[i].IsSelected(&referrerSpec.Gvk) { + // If this is true, the res might be a referrer, and if + // so, the name reference it holds might need an update. + if resHasField(res, referrerSpec.Path) { + // Optimization - the referrer has the field + // that might need updating. + fMap[res] = append(fMap[res], nameref.Filter{ + // Name field to write in the Referrer. + // If the path specified here isn't found in + // the Referrer, nothing happens (no error, + // no field creation). + NameFieldToUpdate: referrerSpec, + // Specification of object class to read from. + // Always read from metadata/name field. + ReferralTarget: backReference.Gvk, + }) + } + } + } + } + } + return fMap +} + +// TODO: check res for field existence here to avoid extra work. +// res.GetFieldValue, which uses yaml.Lookup under the hood, doesn't know +// how to parse fieldspec-style paths that make no distinction +// between maps and sequences. This means it cannot lookup commonly +// used "indeterminate" paths like +// spec/containers/env/valueFrom/configMapKeyRef/name +// ('containers' is a list, not a map). +// However, the fieldspec filter does know how to handle this; +// extract that code and call it here? +func resHasField(res *resource.Resource, path string) bool { + return true + // fld := strings.Join(utils.PathSplitter(path), ".") + // _, e := res.GetFieldValue(fld) + // return e == nil +} diff --git a/go/internal/forked/api/internal/accumulator/namereferencetransformer.go b/go/internal/forked/api/internal/accumulator/namereferencetransformer.go new file mode 100644 index 000000000..2d6acac3d --- /dev/null +++ b/go/internal/forked/api/internal/accumulator/namereferencetransformer.go @@ -0,0 +1,165 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package accumulator + +import ( + "fmt" + "log" + + "sigs.k8s.io/kustomize/api/filters/nameref" + "sigs.k8s.io/kustomize/api/internal/plugins/builtinconfig" + "sigs.k8s.io/kustomize/api/resmap" + "sigs.k8s.io/kustomize/api/resource" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/resid" +) + +type nameReferenceTransformer struct { + backRefs []builtinconfig.NameBackReferences +} + +const doDebug = false + +var _ resmap.Transformer = &nameReferenceTransformer{} + +type filterMap map[*resource.Resource][]nameref.Filter + +// newNameReferenceTransformer constructs a nameReferenceTransformer +// with a given slice of NameBackReferences. +func newNameReferenceTransformer( + br []builtinconfig.NameBackReferences) resmap.Transformer { + if br == nil { + log.Fatal("backrefs not expected to be nil") + } + return &nameReferenceTransformer{backRefs: br} +} + +// Transform updates name references in resource A that +// refer to resource B, given that B's name may have +// changed. +// +// For example, a HorizontalPodAutoscaler (HPA) +// necessarily refers to a Deployment, the thing that +// an HPA scales. In this case: +// +// - the HPA instance is the Referrer, +// - the Deployment instance is the ReferralTarget. +// +// If the Deployment's name changes, e.g. a prefix is added, +// then the HPA's reference to the Deployment must be fixed. +// +func (t *nameReferenceTransformer) Transform(m resmap.ResMap) error { + fMap := t.determineFilters(m.Resources()) + debug(fMap) + for r, fList := range fMap { + c, err := m.SubsetThatCouldBeReferencedByResource(r) + if err != nil { + return err + } + for _, f := range fList { + f.Referrer = r + f.ReferralCandidates = c + if err := f.Referrer.ApplyFilter(f); err != nil { + return err + } + } + } + return nil +} + +func debug(fMap filterMap) { + if !doDebug { + return + } + fmt.Printf("filterMap has %d entries:\n", len(fMap)) + rCount := 0 + for r, fList := range fMap { + yml, _ := r.AsYAML() + rCount++ + fmt.Printf(` +---- %3d. possible referrer ------------- +%s +---------`, rCount, string(yml), + ) + for i, f := range fList { + fmt.Printf(` +%3d/%3d update: %s + from: %s +`, rCount, i+1, f.NameFieldToUpdate.Path, f.ReferralTarget, + ) + } + } +} + +// Produce a map from referrer resources that might need to be fixed +// to filters that might fix them. The keys to this map are potential +// referrers, so won't include resources like ConfigMap or Secret. +// +// In the inner loop over the resources below, say we +// encounter an HPA instance. Then, in scanning the set +// of all known backrefs, we encounter an entry like +// +// - kind: Deployment +// fieldSpecs: +// - kind: HorizontalPodAutoscaler +// path: spec/scaleTargetRef/name +// +// This entry says that an HPA, via its +// 'spec/scaleTargetRef/name' field, may refer to a +// Deployment. +// +// This means that a filter will need to hunt for the right Deployment, +// obtain it's new name, and write that name into the HPA's +// 'spec/scaleTargetRef/name' field. Return a filter that can do that. +func (t *nameReferenceTransformer) determineFilters( + resources []*resource.Resource) (fMap filterMap) { + + // We cache the resource OrgId values because they don't change and otherwise are very visible in a memory pprof + resourceOrgIds := make([]resid.ResId, len(resources)) + for i, resource := range resources { + resourceOrgIds[i] = resource.OrgId() + } + + fMap = make(filterMap) + for _, backReference := range t.backRefs { + for _, referrerSpec := range backReference.Referrers { + for i, res := range resources { + if resourceOrgIds[i].IsSelected(&referrerSpec.Gvk) { + // If this is true, the res might be a referrer, and if + // so, the name reference it holds might need an update. + if resHasField(res, referrerSpec.Path) { + // Optimization - the referrer has the field + // that might need updating. + fMap[res] = append(fMap[res], nameref.Filter{ + // Name field to write in the Referrer. + // If the path specified here isn't found in + // the Referrer, nothing happens (no error, + // no field creation). + NameFieldToUpdate: referrerSpec, + // Specification of object class to read from. + // Always read from metadata/name field. + ReferralTarget: backReference.Gvk, + }) + } + } + } + } + } + return fMap +} + +// TODO: check res for field existence here to avoid extra work. +// res.GetFieldValue, which uses yaml.Lookup under the hood, doesn't know +// how to parse fieldspec-style paths that make no distinction +// between maps and sequences. This means it cannot lookup commonly +// used "indeterminate" paths like +// spec/containers/env/valueFrom/configMapKeyRef/name +// ('containers' is a list, not a map). +// However, the fieldspec filter does know how to handle this; +// extract that code and call it here? +func resHasField(res *resource.Resource, path string) bool { + return true + // fld := strings.Join(utils.PathSplitter(path), ".") + // _, e := res.GetFieldValue(fld) + // return e == nil +} diff --git a/go/internal/forked/api/internal/accumulator/namereferencetransformer_test.go b/go/internal/forked/api/internal/accumulator/namereferencetransformer_test.go new file mode 100644 index 000000000..e6c71f130 --- /dev/null +++ b/go/internal/forked/api/internal/accumulator/namereferencetransformer_test.go @@ -0,0 +1,1063 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package accumulator + +import ( + "strings" + "testing" + + "sigs.k8s.io/kustomize/api/internal/plugins/builtinconfig" + "sigs.k8s.io/kustomize/api/provider" + "sigs.k8s.io/kustomize/api/resmap" + resmaptest_test "sigs.k8s.io/kustomize/api/testutils/resmaptest" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/resid" +) + +const notEqualErrFmt = "expected (self) doesn't match actual (other): %v" + +func TestNameReferenceHappyRun(t *testing.T) { + m := resmaptest_test.NewRmBuilderDefault(t).AddWithName( + "cm1", + map[string]interface{}{ + "apiVersion": "v1", + "kind": "ConfigMap", + "metadata": map[string]interface{}{ + "name": "someprefix-cm1-somehash", + }, + }).AddWithName( + "cm2", + map[string]interface{}{ + "apiVersion": "v1", + "kind": "ConfigMap", + "metadata": map[string]interface{}{ + "name": "someprefix-cm2-somehash", + }, + }).AddWithName( + "secret1", + map[string]interface{}{ + "apiVersion": "v1", + "kind": "Secret", + "metadata": map[string]interface{}{ + "name": "someprefix-secret1-somehash", + }, + }).AddWithName( + "claim1", + map[string]interface{}{ + "apiVersion": "v1", + "kind": "PersistentVolumeClaim", + "metadata": map[string]interface{}{ + "name": "someprefix-claim1", + }, + }).Add( + map[string]interface{}{ + "group": "networking.k8s.io", + "apiVersion": "v1beta1", + "kind": "Ingress", + "metadata": map[string]interface{}{ + "name": "ingress1", + "annotations": map[string]interface{}{ + "ingress.kubernetes.io/auth-secret": "secret1", + "nginx.ingress.kubernetes.io/auth-secret": "secret1", + "nginx.ingress.kubernetes.io/auth-tls-secret": "secret1", + }, + }, + "spec": map[string]interface{}{ + "backend": map[string]interface{}{ + "serviceName": "testsvc", + "servicePort": "80", + }, + }, + }, + ).Add( + map[string]interface{}{ + "group": "apps", + "apiVersion": "v1", + "kind": "Deployment", + "metadata": map[string]interface{}{ + "name": "deploy1", + }, + "spec": map[string]interface{}{ + "template": map[string]interface{}{ + "spec": map[string]interface{}{ + "containers": []interface{}{ + map[string]interface{}{ + "name": "nginx", + "image": "nginx:1.7.9", + "env": []interface{}{ + map[string]interface{}{ + "name": "CM_FOO", + "valueFrom": map[string]interface{}{ + "configMapKeyRef": map[string]interface{}{ + "name": "cm1", + "key": "somekey", + }, + }, + }, + map[string]interface{}{ + "name": "SECRET_FOO", + "valueFrom": map[string]interface{}{ + "secretKeyRef": map[string]interface{}{ + "name": "secret1", + "key": "somekey", + }, + }, + }, + }, + "envFrom": []interface{}{ + map[string]interface{}{ + "configMapRef": map[string]interface{}{ + "name": "cm1", + "key": "somekey", + }, + }, + map[string]interface{}{ + "secretRef": map[string]interface{}{ + "name": "secret1", + "key": "somekey", + }, + }, + }, + }, + }, + "imagePullSecrets": []interface{}{ + map[string]interface{}{ + "name": "secret1", + }, + }, + "volumes": map[string]interface{}{ + "configMap": map[string]interface{}{ + "name": "cm1", + }, + "projected": map[string]interface{}{ + "sources": map[string]interface{}{ + "configMap": map[string]interface{}{ + "name": "cm2", + }, + "secret": map[string]interface{}{ + "name": "secret1", + }, + }, + }, + "secret": map[string]interface{}{ + "secretName": "secret1", + }, + "persistentVolumeClaim": map[string]interface{}{ + "claimName": "claim1", + }, + }, + }, + }, + }, + }).Add( + map[string]interface{}{ + "group": "apps", + "apiVersion": "v1", + "kind": "StatefulSet", + "metadata": map[string]interface{}{ + "name": "statefulset1", + }, + "spec": map[string]interface{}{ + "template": map[string]interface{}{ + "spec": map[string]interface{}{ + "containers": []interface{}{ + map[string]interface{}{ + "name": "nginx", + "image": "nginx:1.7.9", + }, + }, + "volumes": map[string]interface{}{ + "projected": map[string]interface{}{ + "sources": map[string]interface{}{ + "configMap": map[string]interface{}{ + "name": "cm2", + }, + "secret": map[string]interface{}{ + "name": "secret1", + }, + }, + }, + }, + }, + }, + }, + }).AddWithName("sa", + map[string]interface{}{ + "apiVersion": "v1", + "kind": "ServiceAccount", + "metadata": map[string]interface{}{ + "name": "someprefix-sa", + "namespace": "test", + }, + }).Add( + map[string]interface{}{ + "apiVersion": "rbac.authorization.k8s.io/v1", + "kind": "ClusterRoleBinding", + "metadata": map[string]interface{}{ + "name": "crb", + }, + "subjects": []interface{}{ + map[string]interface{}{ + "kind": "ServiceAccount", + "name": "sa", + "namespace": "test", + }, + }, + }).Add( + map[string]interface{}{ + "apiVersion": "rbac.authorization.k8s.io/v1", + "kind": "ClusterRole", + "metadata": map[string]interface{}{ + "name": "cr", + }, + "rules": []interface{}{ + map[string]interface{}{ + "resources": []interface{}{ + "secrets", + }, + "resourceNames": []interface{}{ + "secret1", + "secret1", + "secret2", + "cm1", + }, + }, + }, + }).Add( + map[string]interface{}{ + "apiVersion": "batch/v1beta1", + "kind": "CronJob", + "metadata": map[string]interface{}{ + "name": "cronjob1", + }, + "spec": map[string]interface{}{ + "schedule": "0 14 * * *", + "jobTemplate": map[string]interface{}{ + "spec": map[string]interface{}{ + "template": map[string]interface{}{ + "spec": map[string]interface{}{ + "containers": []interface{}{ + map[string]interface{}{ + "name": "main", + "image": "myimage", + }, + }, + "volumes": map[string]interface{}{ + "projected": map[string]interface{}{ + "sources": map[string]interface{}{ + "configMap": map[string]interface{}{ + "name": "cm2", + }, + "secret": map[string]interface{}{ + "name": "secret1", + }, + }, + }, + }, + }, + }, + }, + }, + }, + }).ResMap() + + expected := resmaptest_test.NewSeededRmBuilderDefault( + t, m.ShallowCopy()).ReplaceResource( + map[string]interface{}{ + "group": "apps", + "apiVersion": "v1", + "kind": "Deployment", + "metadata": map[string]interface{}{ + "name": "deploy1", + }, + "spec": map[string]interface{}{ + "template": map[string]interface{}{ + "spec": map[string]interface{}{ + "containers": []interface{}{ + map[string]interface{}{ + "name": "nginx", + "image": "nginx:1.7.9", + "env": []interface{}{ + map[string]interface{}{ + "name": "CM_FOO", + "valueFrom": map[string]interface{}{ + "configMapKeyRef": map[string]interface{}{ + "name": "someprefix-cm1-somehash", + "key": "somekey", + }, + }, + }, + map[string]interface{}{ + "name": "SECRET_FOO", + "valueFrom": map[string]interface{}{ + "secretKeyRef": map[string]interface{}{ + "name": "someprefix-secret1-somehash", + "key": "somekey", + }, + }, + }, + }, + "envFrom": []interface{}{ + map[string]interface{}{ + "configMapRef": map[string]interface{}{ + "name": "someprefix-cm1-somehash", + "key": "somekey", + }, + }, + map[string]interface{}{ + "secretRef": map[string]interface{}{ + "name": "someprefix-secret1-somehash", + "key": "somekey", + }, + }, + }, + }, + }, + "imagePullSecrets": []interface{}{ + map[string]interface{}{ + "name": "someprefix-secret1-somehash", + }, + }, + "volumes": map[string]interface{}{ + "configMap": map[string]interface{}{ + "name": "someprefix-cm1-somehash", + }, + "projected": map[string]interface{}{ + "sources": map[string]interface{}{ + "configMap": map[string]interface{}{ + "name": "someprefix-cm2-somehash", + }, + "secret": map[string]interface{}{ + "name": "someprefix-secret1-somehash", + }, + }, + }, + "secret": map[string]interface{}{ + "secretName": "someprefix-secret1-somehash", + }, + "persistentVolumeClaim": map[string]interface{}{ + "claimName": "someprefix-claim1", + }, + }, + }, + }, + }, + }).ReplaceResource( + map[string]interface{}{ + "group": "apps", + "apiVersion": "v1", + "kind": "StatefulSet", + "metadata": map[string]interface{}{ + "name": "statefulset1", + }, + "spec": map[string]interface{}{ + "template": map[string]interface{}{ + "spec": map[string]interface{}{ + "containers": []interface{}{ + map[string]interface{}{ + "name": "nginx", + "image": "nginx:1.7.9", + }, + }, + "volumes": map[string]interface{}{ + "projected": map[string]interface{}{ + "sources": map[string]interface{}{ + "configMap": map[string]interface{}{ + "name": "someprefix-cm2-somehash", + }, + "secret": map[string]interface{}{ + "name": "someprefix-secret1-somehash", + }, + }, + }, + }, + }, + }, + }, + }).ReplaceResource( + map[string]interface{}{ + "group": "networking.k8s.io", + "apiVersion": "v1beta1", + "kind": "Ingress", + "metadata": map[string]interface{}{ + "name": "ingress1", + "annotations": map[string]interface{}{ + "ingress.kubernetes.io/auth-secret": "someprefix-secret1-somehash", + "nginx.ingress.kubernetes.io/auth-secret": "someprefix-secret1-somehash", + "nginx.ingress.kubernetes.io/auth-tls-secret": "someprefix-secret1-somehash", + }, + }, + "spec": map[string]interface{}{ + "backend": map[string]interface{}{ + "serviceName": "testsvc", + "servicePort": "80", + }, + }, + }).ReplaceResource( + map[string]interface{}{ + "apiVersion": "rbac.authorization.k8s.io/v1", + "kind": "ClusterRoleBinding", + "metadata": map[string]interface{}{ + "name": "crb", + }, + "subjects": []interface{}{ + map[string]interface{}{ + "kind": "ServiceAccount", + "name": "someprefix-sa", + "namespace": "test", + }, + }, + }).ReplaceResource( + map[string]interface{}{ + "apiVersion": "rbac.authorization.k8s.io/v1", + "kind": "ClusterRole", + "metadata": map[string]interface{}{ + "name": "cr", + }, + "rules": []interface{}{ + map[string]interface{}{ + "resources": []interface{}{ + "secrets", + }, + "resourceNames": []interface{}{ + "someprefix-secret1-somehash", + "someprefix-secret1-somehash", + "secret2", + "someprefix-cm1-somehash", + }, + }, + }, + }).ReplaceResource( + map[string]interface{}{ + "apiVersion": "batch/v1beta1", + "kind": "CronJob", + "metadata": map[string]interface{}{ + "name": "cronjob1", + }, + "spec": map[string]interface{}{ + "schedule": "0 14 * * *", + "jobTemplate": map[string]interface{}{ + "spec": map[string]interface{}{ + "template": map[string]interface{}{ + "spec": map[string]interface{}{ + "containers": []interface{}{ + map[string]interface{}{ + "name": "main", + "image": "myimage", + }, + }, + "volumes": map[string]interface{}{ + "projected": map[string]interface{}{ + "sources": map[string]interface{}{ + "configMap": map[string]interface{}{ + "name": "someprefix-cm2-somehash", + }, + "secret": map[string]interface{}{ + "name": "someprefix-secret1-somehash", + }, + }, + }, + }, + }, + }, + }, + }, + }, + }).ResMap() + + nrt := newNameReferenceTransformer(builtinconfig.MakeDefaultConfig().NameReference) + err := nrt.Transform(m) + if err != nil { + t.Fatalf("unexpected error: %v", err) + } + + if err = expected.ErrorIfNotEqualLists(m); err != nil { + t.Fatalf(notEqualErrFmt, err) + } +} + +func TestNameReferenceUnhappyRun(t *testing.T) { + tests := []struct { + resMap resmap.ResMap + expectedErr string + }{ + { + resMap: resmaptest_test.NewRmBuilderDefault(t).Add( + map[string]interface{}{ + "apiVersion": "rbac.authorization.k8s.io/v1", + "kind": "ClusterRole", + "metadata": map[string]interface{}{ + "name": "cr", + }, + "rules": []interface{}{ + map[string]interface{}{ + "resources": []interface{}{ + "secrets", + }, + "resourceNames": []interface{}{ + []interface{}{}, + }, + }, + }, + }).ResMap(), + expectedErr: "is expected to be"}, + { + resMap: resmaptest_test.NewRmBuilderDefault(t).Add( + map[string]interface{}{ + "apiVersion": "rbac.authorization.k8s.io/v1", + "kind": "ClusterRole", + "metadata": map[string]interface{}{ + "name": "cr", + }, + "rules": []interface{}{ + map[string]interface{}{ + "resources": []interface{}{ + "secrets", + }, + "resourceNames": map[string]interface{}{ + "foo": "bar", + }, + }, + }, + }).ResMap(), + expectedErr: `updating name reference in 'rules/resourceNames' field of 'ClusterRole.v1.rbac.authorization.k8s.io/cr.[noNs]': ` + + `considering field 'rules/resourceNames' of object ClusterRole.v1.rbac.authorization.k8s.io/cr.[noNs]: visit traversal on ` + + `path: [resourceNames]: path config error; no 'name' field in node`, + }, + } + + nrt := newNameReferenceTransformer(builtinconfig.MakeDefaultConfig().NameReference) + for _, test := range tests { + err := nrt.Transform(test.resMap) + if err == nil { + t.Fatalf("expected error to happen") + } + + if !strings.Contains(err.Error(), test.expectedErr) { + t.Fatalf("Incorrect error.\nExpected:\n %s\nGot:\n%v", + test.expectedErr, err) + } + } +} + +func TestNameReferencePersistentVolumeHappyRun(t *testing.T) { + rf := provider.NewDefaultDepProvider().GetResourceFactory() + + v1 := rf.FromMapWithName( + "volume1", + map[string]interface{}{ + "apiVersion": "v1", + "kind": "PersistentVolume", + "metadata": map[string]interface{}{ + "name": "someprefix-volume1", + }, + }) + c1 := rf.FromMapWithName( + "claim1", + map[string]interface{}{ + "apiVersion": "v1", + "kind": "PersistentVolumeClaim", + "metadata": map[string]interface{}{ + "name": "someprefix-claim1", + "namespace": "some-namespace", + }, + "spec": map[string]interface{}{ + "volumeName": "volume1", + }, + }) + + v2 := v1.DeepCopy() + c2 := rf.FromMapWithName( + "claim1", + map[string]interface{}{ + "apiVersion": "v1", + "kind": "PersistentVolumeClaim", + "metadata": map[string]interface{}{ + "name": "someprefix-claim1", + "namespace": "some-namespace", + }, + "spec": map[string]interface{}{ + "volumeName": "someprefix-volume1", + }, + }) + + m1 := resmaptest_test.NewRmBuilder(t, rf).AddR(v1).AddR(c1).ResMap() + + nrt := newNameReferenceTransformer(builtinconfig.MakeDefaultConfig().NameReference) + if err := nrt.Transform(m1); err != nil { + t.Fatalf("unexpected error: %v", err) + } + + m2 := resmaptest_test.NewRmBuilder(t, rf).AddR(v2).AddR(c2).ResMap() + v2.AppendRefBy(c2.CurId()) + + if err := m1.ErrorIfNotEqualLists(m2); err != nil { + t.Fatalf(notEqualErrFmt, err) + } +} + +// utility map to create a deployment object +// with (metadatanamespace, metadataname) as key +// and pointing to "refname" secret and configmap +func deploymentMap(metadatanamespace string, metadataname string, + configmapref string, secretref string) map[string]interface{} { + deployment := map[string]interface{}{ + "group": "apps", + "apiVersion": "v1", + "kind": "Deployment", + "metadata": map[string]interface{}{ + "name": metadataname, + }, + "spec": map[string]interface{}{ + "template": map[string]interface{}{ + "spec": map[string]interface{}{ + "containers": []interface{}{ + map[string]interface{}{ + "name": "nginx", + "image": "nginx:1.7.9", + "env": []interface{}{ + map[string]interface{}{ + "name": "CM_FOO", + "valueFrom": map[string]interface{}{ + "configMapKeyRef": map[string]interface{}{ + "name": configmapref, + "key": "somekey", + }, + }, + }, + map[string]interface{}{ + "name": "SECRET_FOO", + "valueFrom": map[string]interface{}{ + "secretKeyRef": map[string]interface{}{ + "name": secretref, + "key": "somekey", + }, + }, + }, + }, + }, + }, + }, + }, + }, + } + + if metadatanamespace != "" { + metadata := deployment["metadata"].(map[string]interface{}) + metadata["namespace"] = metadatanamespace + } + return deployment +} + +const ( + defaultNs = "default" + ns1 = "ns1" + ns2 = "ns2" + ns3 = "ns3" + ns4 = "ns4" + + orgname = "uniquename" + prefixedname = "prefix-uniquename" + suffixedname = "uniquename-suffix" + modifiedname = "modifiedname" +) + +// TestNameReferenceNamespace creates serviceAccount and clusterRoleBinding +// object with the same original names (uniquename) in different namespaces +// and with different current Id. +func TestNameReferenceNamespace(t *testing.T) { + m := resmaptest_test.NewRmBuilderDefault(t). + // Add ConfigMap with the same org name in noNs, "ns1" and "ns2" namespaces + AddWithName(orgname, map[string]interface{}{ + "apiVersion": "v1", + "kind": "ConfigMap", + "metadata": map[string]interface{}{ + "name": modifiedname, + }}). + AddWithNsAndName(ns1, orgname, map[string]interface{}{ + "apiVersion": "v1", + "kind": "ConfigMap", + "metadata": map[string]interface{}{ + "name": prefixedname, + "namespace": ns1, + }}). + AddWithNsAndName(ns2, orgname, map[string]interface{}{ + "apiVersion": "v1", + "kind": "ConfigMap", + "metadata": map[string]interface{}{ + "name": suffixedname, + "namespace": ns2, + }}). + // Add Secret with the same org name in noNs, "ns1" and "ns2" namespaces + AddWithNsAndName(defaultNs, orgname, map[string]interface{}{ + "apiVersion": "v1", + "kind": "Secret", + "metadata": map[string]interface{}{ + "name": modifiedname, + "namespace": defaultNs, + }}). + AddWithNsAndName(ns1, orgname, map[string]interface{}{ + "apiVersion": "v1", + "kind": "Secret", + "metadata": map[string]interface{}{ + "name": prefixedname, + "namespace": ns1, + }}). + AddWithNsAndName(ns2, orgname, map[string]interface{}{ + "apiVersion": "v1", + "kind": "Secret", + "metadata": map[string]interface{}{ + "name": suffixedname, + "namespace": ns2, + }}). + // Add Deployment with the same org name in noNs, "ns1" and "ns2" namespaces + AddWithNsAndName(defaultNs, orgname, deploymentMap(defaultNs, modifiedname, modifiedname, modifiedname)). + AddWithNsAndName(ns1, orgname, deploymentMap(ns1, prefixedname, orgname, orgname)). + AddWithNsAndName(ns2, orgname, deploymentMap(ns2, suffixedname, orgname, orgname)).ResMap() + + expected := resmaptest_test.NewSeededRmBuilderDefault(t, m.ShallowCopy()). + ReplaceResource(deploymentMap(defaultNs, modifiedname, modifiedname, modifiedname)). + ReplaceResource(deploymentMap(ns1, prefixedname, prefixedname, prefixedname)). + ReplaceResource(deploymentMap(ns2, suffixedname, suffixedname, suffixedname)).ResMap() + + nrt := newNameReferenceTransformer(builtinconfig.MakeDefaultConfig().NameReference) + err := nrt.Transform(m) + if err != nil { + t.Fatalf("unexpected error: %v", err) + } + + m.RemoveBuildAnnotations() + if err = expected.ErrorIfNotEqualLists(m); err != nil { + t.Fatalf(notEqualErrFmt, err) + } +} + +// TestNameReferenceNamespace creates serviceAccount and clusterRoleBinding +// object with the same original names (uniquename) in different namespaces +// and with different current Id. +func TestNameReferenceClusterWide(t *testing.T) { + m := resmaptest_test.NewRmBuilderDefault(t). + // Add ServiceAccount with the same org name in noNs, "ns1" and "ns2" namespaces + AddWithName(orgname, map[string]interface{}{ + "apiVersion": "v1", + "kind": "ServiceAccount", + "metadata": map[string]interface{}{ + "name": modifiedname, + }}). + AddWithNsAndName(ns1, orgname, map[string]interface{}{ + "apiVersion": "v1", + "kind": "ServiceAccount", + "metadata": map[string]interface{}{ + "name": prefixedname, + "namespace": ns1, + }}). + AddWithNsAndName(ns2, orgname, map[string]interface{}{ + "apiVersion": "v1", + "kind": "ServiceAccount", + "metadata": map[string]interface{}{ + "name": suffixedname, + "namespace": ns2, + }}). + // Add a PersistentVolume to have a clusterwide resource + AddWithName(orgname, map[string]interface{}{ + "apiVersion": "v1", + "kind": "PersistentVolume", + "metadata": map[string]interface{}{ + "name": modifiedname, + }}). + AddWithName(orgname, map[string]interface{}{ + "apiVersion": "rbac.authorization.k8s.io/v1", + "kind": "ClusterRole", + "metadata": map[string]interface{}{ + "name": modifiedname, + }, + "rules": []interface{}{ + map[string]interface{}{ + "resources": []interface{}{ + "persistentvolumes", + }, + "resourceNames": []interface{}{ + orgname, + }, + }, + }}). + AddWithName(orgname, map[string]interface{}{ + "apiVersion": "rbac.authorization.k8s.io/v1", + "kind": "ClusterRoleBinding", + "metadata": map[string]interface{}{ + "name": modifiedname, + }, + "roleRef": map[string]interface{}{ + "apiGroup": "rbac.authorization.k8s.io", + "kind": "ClusterRole", + "name": orgname, + }, + "subjects": []interface{}{ + map[string]interface{}{ + "kind": "ServiceAccount", + "name": orgname, + "namespace": defaultNs, + }, + map[string]interface{}{ + "kind": "ServiceAccount", + "name": orgname, + "namespace": ns1, + }, + map[string]interface{}{ + "kind": "ServiceAccount", + "name": orgname, + "namespace": ns2, + }, + map[string]interface{}{ + "kind": "ServiceAccount", + "name": orgname, + "namespace": "random", + }, + }}).ResMap() + + expected := resmaptest_test.NewSeededRmBuilderDefault(t, m.ShallowCopy()). + ReplaceResource( + map[string]interface{}{ + "apiVersion": "rbac.authorization.k8s.io/v1", + "kind": "ClusterRole", + "metadata": map[string]interface{}{ + "name": modifiedname, + }, + // Behavior of the transformer is still imperfect + // It should use the (resources,apigroup,resourceNames) as + // combination to select the candidates. + "rules": []interface{}{ + map[string]interface{}{ + "resources": []interface{}{ + "persistentvolumes", + }, + "resourceNames": []interface{}{ + modifiedname, + }, + }, + }}). + ReplaceResource( + map[string]interface{}{ + "apiVersion": "rbac.authorization.k8s.io/v1", + "kind": "ClusterRoleBinding", + "metadata": map[string]interface{}{ + "name": modifiedname, + }, + "roleRef": map[string]interface{}{ + "apiGroup": "rbac.authorization.k8s.io", + "kind": "ClusterRole", + "name": modifiedname, + }, + // The following tests required a change in + // getNameFunc implementation in order to leverage + // the namespace field. + "subjects": []interface{}{ + map[string]interface{}{ + "kind": "ServiceAccount", + "name": modifiedname, + "namespace": defaultNs, + }, + map[string]interface{}{ + "kind": "ServiceAccount", + "name": prefixedname, + "namespace": ns1, + }, + map[string]interface{}{ + "kind": "ServiceAccount", + "name": suffixedname, + "namespace": ns2, + }, + map[string]interface{}{ + "kind": "ServiceAccount", + "name": orgname, + "namespace": "random", + }, + }, + }).ResMap() + + clusterRoleId := resid.NewResId( + resid.NewGvk("rbac.authorization.k8s.io", "v1", "ClusterRole"), modifiedname) + clusterRoleBindingId := resid.NewResId( + resid.NewGvk("rbac.authorization.k8s.io", "v1", "ClusterRoleBinding"), modifiedname) + clusterRole, _ := expected.GetByCurrentId(clusterRoleId) + clusterRole.AppendRefBy(clusterRoleBindingId) + + nrt := newNameReferenceTransformer(builtinconfig.MakeDefaultConfig().NameReference) + err := nrt.Transform(m) + if err != nil { + t.Fatalf("unexpected error: %v", err) + } + + expected.RemoveBuildAnnotations() + m.RemoveBuildAnnotations() + + if err = expected.ErrorIfNotEqualLists(m); err != nil { + t.Fatalf(notEqualErrFmt, err) + } +} + +// TestNameReferenceNamespaceTransformation creates serviceAccount and clusterRoleBinding +// object with the same original names (uniquename) in different namespaces +// and with different current Id. +func TestNameReferenceNamespaceTransformation(t *testing.T) { + m := resmaptest_test.NewRmBuilderDefault(t). + AddWithNsAndName(ns4, orgname, map[string]interface{}{ + "apiVersion": "v1", + "kind": "Secret", + "metadata": map[string]interface{}{ + "name": orgname, + "namespace": ns4, + }}). + // Add ServiceAccount with the same org name in "ns1" namespaces + AddWithNsAndName(ns1, orgname, map[string]interface{}{ + "apiVersion": "v1", + "kind": "ServiceAccount", + "metadata": map[string]interface{}{ + "name": prefixedname, + "namespace": ns1, + }}). + // Simulate NamespaceTransformer effect (ns3 transformed in ns2) + AddWithNsAndName(ns3, orgname, map[string]interface{}{ + "apiVersion": "v1", + "kind": "ServiceAccount", + "metadata": map[string]interface{}{ + "name": suffixedname, + "namespace": ns2, + }}). + AddWithName(orgname, map[string]interface{}{ + "apiVersion": "rbac.authorization.k8s.io/v1", + "kind": "ClusterRole", + "metadata": map[string]interface{}{ + "name": modifiedname, + }}). + AddWithName(orgname, map[string]interface{}{ + "apiVersion": "rbac.authorization.k8s.io/v1", + "kind": "ClusterRoleBinding", + "metadata": map[string]interface{}{ + "name": modifiedname, + }, + "roleRef": map[string]interface{}{ + "apiGroup": "rbac.authorization.k8s.io", + "kind": "ClusterRole", + "name": orgname, + }, + "subjects": []interface{}{ + map[string]interface{}{ + "kind": "ServiceAccount", + "name": orgname, + "namespace": ns1, + }, + map[string]interface{}{ + "kind": "ServiceAccount", + "name": orgname, + "namespace": ns3, + }, + map[string]interface{}{ + "kind": "ServiceAccount", + "name": orgname, + "namespace": "random", + }, + map[string]interface{}{ + "kind": "ServiceAccount", + "name": orgname, + "namespace": ns4, + }, + }}).ResMap() + + expected := resmaptest_test.NewSeededRmBuilderDefault(t, m.ShallowCopy()). + ReplaceResource( + map[string]interface{}{ + "apiVersion": "rbac.authorization.k8s.io/v1", + "kind": "ClusterRoleBinding", + "metadata": map[string]interface{}{ + "name": modifiedname, + }, + "roleRef": map[string]interface{}{ + "apiGroup": "rbac.authorization.k8s.io", + "kind": "ClusterRole", + "name": modifiedname, + }, + // The following tests required a change in + // getNameFunc implementation in order to leverage + // the namespace field. + "subjects": []interface{}{ + map[string]interface{}{ + "kind": "ServiceAccount", + "name": prefixedname, + "namespace": ns1, + }, + map[string]interface{}{ + "kind": "ServiceAccount", + "name": suffixedname, + "namespace": ns2, + }, + map[string]interface{}{ + "kind": "ServiceAccount", + "name": orgname, + "namespace": "random", + }, + map[string]interface{}{ + "kind": "ServiceAccount", + "name": orgname, + "namespace": ns4, + }, + }, + }).ResMap() + + clusterRoleId := resid.NewResId( + resid.NewGvk("rbac.authorization.k8s.io", "v1", "ClusterRole"), + modifiedname) + clusterRoleBindingId := resid.NewResId( + resid.NewGvk("rbac.authorization.k8s.io", "v1", "ClusterRoleBinding"), + modifiedname) + clusterRole, _ := expected.GetByCurrentId(clusterRoleId) + clusterRole.AppendRefBy(clusterRoleBindingId) + + nrt := newNameReferenceTransformer(builtinconfig.MakeDefaultConfig().NameReference) + err := nrt.Transform(m) + if err != nil { + t.Fatalf("unexpected error: %v", err) + } + + m.RemoveBuildAnnotations() + if err = expected.ErrorIfNotEqualLists(m); err != nil { + t.Fatalf(notEqualErrFmt, err) + } +} + +// TestNameReferenceNamespace creates configmap, secret, deployment +// It validates the change done is IsSameFuzzyNamespace which +// uses the IsNsEquals method instead of the simple == operator. +func TestNameReferenceCandidateSelection(t *testing.T) { + m := resmaptest_test.NewRmBuilderDefault(t). + AddWithName("cm1", map[string]interface{}{ + "apiVersion": "v1", + "kind": "ConfigMap", + "metadata": map[string]interface{}{ + "name": "p1-cm1-hash", + }}). + AddWithNsAndName("default", "secret1", map[string]interface{}{ + "apiVersion": "v1", + "kind": "Secret", + "metadata": map[string]interface{}{ + "name": "p1-secret1-hash", + "namespace": "default", + }}). + AddWithName("deploy1", deploymentMap("", "p1-deploy1", "cm1", "secret1")). + ResMap() + + expected := resmaptest_test.NewSeededRmBuilderDefault(t, m.ShallowCopy()). + ReplaceResource(deploymentMap("", "p1-deploy1", "p1-cm1-hash", "p1-secret1-hash")). + ResMap() + + nrt := newNameReferenceTransformer(builtinconfig.MakeDefaultConfig().NameReference) + err := nrt.Transform(m) + if err != nil { + t.Fatalf("unexpected error: %v", err) + } + + m.RemoveBuildAnnotations() + if err = expected.ErrorIfNotEqualLists(m); err != nil { + t.Fatalf(notEqualErrFmt, err) + } +} diff --git a/go/internal/forked/api/internal/accumulator/namereferencetransformer_test.go b/go/internal/forked/api/internal/accumulator/namereferencetransformer_test.go new file mode 100644 index 000000000..aa1813268 --- /dev/null +++ b/go/internal/forked/api/internal/accumulator/namereferencetransformer_test.go @@ -0,0 +1,1063 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package accumulator + +import ( + "strings" + "testing" + + "sigs.k8s.io/kustomize/api/internal/plugins/builtinconfig" + "sigs.k8s.io/kustomize/api/provider" + "sigs.k8s.io/kustomize/api/resmap" + resmaptest_test "sigs.k8s.io/kustomize/api/testutils/resmaptest" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/resid" +) + +const notEqualErrFmt = "expected (self) doesn't match actual (other): %v" + +func TestNameReferenceHappyRun(t *testing.T) { + m := resmaptest_test.NewRmBuilderDefault(t).AddWithName( + "cm1", + map[string]interface{}{ + "apiVersion": "v1", + "kind": "ConfigMap", + "metadata": map[string]interface{}{ + "name": "someprefix-cm1-somehash", + }, + }).AddWithName( + "cm2", + map[string]interface{}{ + "apiVersion": "v1", + "kind": "ConfigMap", + "metadata": map[string]interface{}{ + "name": "someprefix-cm2-somehash", + }, + }).AddWithName( + "secret1", + map[string]interface{}{ + "apiVersion": "v1", + "kind": "Secret", + "metadata": map[string]interface{}{ + "name": "someprefix-secret1-somehash", + }, + }).AddWithName( + "claim1", + map[string]interface{}{ + "apiVersion": "v1", + "kind": "PersistentVolumeClaim", + "metadata": map[string]interface{}{ + "name": "someprefix-claim1", + }, + }).Add( + map[string]interface{}{ + "group": "networking.k8s.io", + "apiVersion": "v1beta1", + "kind": "Ingress", + "metadata": map[string]interface{}{ + "name": "ingress1", + "annotations": map[string]interface{}{ + "ingress.kubernetes.io/auth-secret": "secret1", + "nginx.ingress.kubernetes.io/auth-secret": "secret1", + "nginx.ingress.kubernetes.io/auth-tls-secret": "secret1", + }, + }, + "spec": map[string]interface{}{ + "backend": map[string]interface{}{ + "serviceName": "testsvc", + "servicePort": "80", + }, + }, + }, + ).Add( + map[string]interface{}{ + "group": "apps", + "apiVersion": "v1", + "kind": "Deployment", + "metadata": map[string]interface{}{ + "name": "deploy1", + }, + "spec": map[string]interface{}{ + "template": map[string]interface{}{ + "spec": map[string]interface{}{ + "containers": []interface{}{ + map[string]interface{}{ + "name": "nginx", + "image": "nginx:1.7.9", + "env": []interface{}{ + map[string]interface{}{ + "name": "CM_FOO", + "valueFrom": map[string]interface{}{ + "configMapKeyRef": map[string]interface{}{ + "name": "cm1", + "key": "somekey", + }, + }, + }, + map[string]interface{}{ + "name": "SECRET_FOO", + "valueFrom": map[string]interface{}{ + "secretKeyRef": map[string]interface{}{ + "name": "secret1", + "key": "somekey", + }, + }, + }, + }, + "envFrom": []interface{}{ + map[string]interface{}{ + "configMapRef": map[string]interface{}{ + "name": "cm1", + "key": "somekey", + }, + }, + map[string]interface{}{ + "secretRef": map[string]interface{}{ + "name": "secret1", + "key": "somekey", + }, + }, + }, + }, + }, + "imagePullSecrets": []interface{}{ + map[string]interface{}{ + "name": "secret1", + }, + }, + "volumes": map[string]interface{}{ + "configMap": map[string]interface{}{ + "name": "cm1", + }, + "projected": map[string]interface{}{ + "sources": map[string]interface{}{ + "configMap": map[string]interface{}{ + "name": "cm2", + }, + "secret": map[string]interface{}{ + "name": "secret1", + }, + }, + }, + "secret": map[string]interface{}{ + "secretName": "secret1", + }, + "persistentVolumeClaim": map[string]interface{}{ + "claimName": "claim1", + }, + }, + }, + }, + }, + }).Add( + map[string]interface{}{ + "group": "apps", + "apiVersion": "v1", + "kind": "StatefulSet", + "metadata": map[string]interface{}{ + "name": "statefulset1", + }, + "spec": map[string]interface{}{ + "template": map[string]interface{}{ + "spec": map[string]interface{}{ + "containers": []interface{}{ + map[string]interface{}{ + "name": "nginx", + "image": "nginx:1.7.9", + }, + }, + "volumes": map[string]interface{}{ + "projected": map[string]interface{}{ + "sources": map[string]interface{}{ + "configMap": map[string]interface{}{ + "name": "cm2", + }, + "secret": map[string]interface{}{ + "name": "secret1", + }, + }, + }, + }, + }, + }, + }, + }).AddWithName("sa", + map[string]interface{}{ + "apiVersion": "v1", + "kind": "ServiceAccount", + "metadata": map[string]interface{}{ + "name": "someprefix-sa", + "namespace": "test", + }, + }).Add( + map[string]interface{}{ + "apiVersion": "rbac.authorization.k8s.io/v1", + "kind": "ClusterRoleBinding", + "metadata": map[string]interface{}{ + "name": "crb", + }, + "subjects": []interface{}{ + map[string]interface{}{ + "kind": "ServiceAccount", + "name": "sa", + "namespace": "test", + }, + }, + }).Add( + map[string]interface{}{ + "apiVersion": "rbac.authorization.k8s.io/v1", + "kind": "ClusterRole", + "metadata": map[string]interface{}{ + "name": "cr", + }, + "rules": []interface{}{ + map[string]interface{}{ + "resources": []interface{}{ + "secrets", + }, + "resourceNames": []interface{}{ + "secret1", + "secret1", + "secret2", + "cm1", + }, + }, + }, + }).Add( + map[string]interface{}{ + "apiVersion": "batch/v1beta1", + "kind": "CronJob", + "metadata": map[string]interface{}{ + "name": "cronjob1", + }, + "spec": map[string]interface{}{ + "schedule": "0 14 * * *", + "jobTemplate": map[string]interface{}{ + "spec": map[string]interface{}{ + "template": map[string]interface{}{ + "spec": map[string]interface{}{ + "containers": []interface{}{ + map[string]interface{}{ + "name": "main", + "image": "myimage", + }, + }, + "volumes": map[string]interface{}{ + "projected": map[string]interface{}{ + "sources": map[string]interface{}{ + "configMap": map[string]interface{}{ + "name": "cm2", + }, + "secret": map[string]interface{}{ + "name": "secret1", + }, + }, + }, + }, + }, + }, + }, + }, + }, + }).ResMap() + + expected := resmaptest_test.NewSeededRmBuilderDefault( + t, m.ShallowCopy()).ReplaceResource( + map[string]interface{}{ + "group": "apps", + "apiVersion": "v1", + "kind": "Deployment", + "metadata": map[string]interface{}{ + "name": "deploy1", + }, + "spec": map[string]interface{}{ + "template": map[string]interface{}{ + "spec": map[string]interface{}{ + "containers": []interface{}{ + map[string]interface{}{ + "name": "nginx", + "image": "nginx:1.7.9", + "env": []interface{}{ + map[string]interface{}{ + "name": "CM_FOO", + "valueFrom": map[string]interface{}{ + "configMapKeyRef": map[string]interface{}{ + "name": "someprefix-cm1-somehash", + "key": "somekey", + }, + }, + }, + map[string]interface{}{ + "name": "SECRET_FOO", + "valueFrom": map[string]interface{}{ + "secretKeyRef": map[string]interface{}{ + "name": "someprefix-secret1-somehash", + "key": "somekey", + }, + }, + }, + }, + "envFrom": []interface{}{ + map[string]interface{}{ + "configMapRef": map[string]interface{}{ + "name": "someprefix-cm1-somehash", + "key": "somekey", + }, + }, + map[string]interface{}{ + "secretRef": map[string]interface{}{ + "name": "someprefix-secret1-somehash", + "key": "somekey", + }, + }, + }, + }, + }, + "imagePullSecrets": []interface{}{ + map[string]interface{}{ + "name": "someprefix-secret1-somehash", + }, + }, + "volumes": map[string]interface{}{ + "configMap": map[string]interface{}{ + "name": "someprefix-cm1-somehash", + }, + "projected": map[string]interface{}{ + "sources": map[string]interface{}{ + "configMap": map[string]interface{}{ + "name": "someprefix-cm2-somehash", + }, + "secret": map[string]interface{}{ + "name": "someprefix-secret1-somehash", + }, + }, + }, + "secret": map[string]interface{}{ + "secretName": "someprefix-secret1-somehash", + }, + "persistentVolumeClaim": map[string]interface{}{ + "claimName": "someprefix-claim1", + }, + }, + }, + }, + }, + }).ReplaceResource( + map[string]interface{}{ + "group": "apps", + "apiVersion": "v1", + "kind": "StatefulSet", + "metadata": map[string]interface{}{ + "name": "statefulset1", + }, + "spec": map[string]interface{}{ + "template": map[string]interface{}{ + "spec": map[string]interface{}{ + "containers": []interface{}{ + map[string]interface{}{ + "name": "nginx", + "image": "nginx:1.7.9", + }, + }, + "volumes": map[string]interface{}{ + "projected": map[string]interface{}{ + "sources": map[string]interface{}{ + "configMap": map[string]interface{}{ + "name": "someprefix-cm2-somehash", + }, + "secret": map[string]interface{}{ + "name": "someprefix-secret1-somehash", + }, + }, + }, + }, + }, + }, + }, + }).ReplaceResource( + map[string]interface{}{ + "group": "networking.k8s.io", + "apiVersion": "v1beta1", + "kind": "Ingress", + "metadata": map[string]interface{}{ + "name": "ingress1", + "annotations": map[string]interface{}{ + "ingress.kubernetes.io/auth-secret": "someprefix-secret1-somehash", + "nginx.ingress.kubernetes.io/auth-secret": "someprefix-secret1-somehash", + "nginx.ingress.kubernetes.io/auth-tls-secret": "someprefix-secret1-somehash", + }, + }, + "spec": map[string]interface{}{ + "backend": map[string]interface{}{ + "serviceName": "testsvc", + "servicePort": "80", + }, + }, + }).ReplaceResource( + map[string]interface{}{ + "apiVersion": "rbac.authorization.k8s.io/v1", + "kind": "ClusterRoleBinding", + "metadata": map[string]interface{}{ + "name": "crb", + }, + "subjects": []interface{}{ + map[string]interface{}{ + "kind": "ServiceAccount", + "name": "someprefix-sa", + "namespace": "test", + }, + }, + }).ReplaceResource( + map[string]interface{}{ + "apiVersion": "rbac.authorization.k8s.io/v1", + "kind": "ClusterRole", + "metadata": map[string]interface{}{ + "name": "cr", + }, + "rules": []interface{}{ + map[string]interface{}{ + "resources": []interface{}{ + "secrets", + }, + "resourceNames": []interface{}{ + "someprefix-secret1-somehash", + "someprefix-secret1-somehash", + "secret2", + "someprefix-cm1-somehash", + }, + }, + }, + }).ReplaceResource( + map[string]interface{}{ + "apiVersion": "batch/v1beta1", + "kind": "CronJob", + "metadata": map[string]interface{}{ + "name": "cronjob1", + }, + "spec": map[string]interface{}{ + "schedule": "0 14 * * *", + "jobTemplate": map[string]interface{}{ + "spec": map[string]interface{}{ + "template": map[string]interface{}{ + "spec": map[string]interface{}{ + "containers": []interface{}{ + map[string]interface{}{ + "name": "main", + "image": "myimage", + }, + }, + "volumes": map[string]interface{}{ + "projected": map[string]interface{}{ + "sources": map[string]interface{}{ + "configMap": map[string]interface{}{ + "name": "someprefix-cm2-somehash", + }, + "secret": map[string]interface{}{ + "name": "someprefix-secret1-somehash", + }, + }, + }, + }, + }, + }, + }, + }, + }, + }).ResMap() + + nrt := newNameReferenceTransformer(builtinconfig.MakeDefaultConfig().NameReference) + err := nrt.Transform(m) + if err != nil { + t.Fatalf("unexpected error: %v", err) + } + + if err = expected.ErrorIfNotEqualLists(m); err != nil { + t.Fatalf(notEqualErrFmt, err) + } +} + +func TestNameReferenceUnhappyRun(t *testing.T) { + tests := []struct { + resMap resmap.ResMap + expectedErr string + }{ + { + resMap: resmaptest_test.NewRmBuilderDefault(t).Add( + map[string]interface{}{ + "apiVersion": "rbac.authorization.k8s.io/v1", + "kind": "ClusterRole", + "metadata": map[string]interface{}{ + "name": "cr", + }, + "rules": []interface{}{ + map[string]interface{}{ + "resources": []interface{}{ + "secrets", + }, + "resourceNames": []interface{}{ + []interface{}{}, + }, + }, + }, + }).ResMap(), + expectedErr: "is expected to be"}, + { + resMap: resmaptest_test.NewRmBuilderDefault(t).Add( + map[string]interface{}{ + "apiVersion": "rbac.authorization.k8s.io/v1", + "kind": "ClusterRole", + "metadata": map[string]interface{}{ + "name": "cr", + }, + "rules": []interface{}{ + map[string]interface{}{ + "resources": []interface{}{ + "secrets", + }, + "resourceNames": map[string]interface{}{ + "foo": "bar", + }, + }, + }, + }).ResMap(), + expectedErr: `updating name reference in 'rules/resourceNames' field of 'ClusterRole.v1.rbac.authorization.k8s.io/cr.[noNs]': ` + + `considering field 'rules/resourceNames' of object ClusterRole.v1.rbac.authorization.k8s.io/cr.[noNs]: visit traversal on ` + + `path: [resourceNames]: path config error; no 'name' field in node`, + }, + } + + nrt := newNameReferenceTransformer(builtinconfig.MakeDefaultConfig().NameReference) + for _, test := range tests { + err := nrt.Transform(test.resMap) + if err == nil { + t.Fatalf("expected error to happen") + } + + if !strings.Contains(err.Error(), test.expectedErr) { + t.Fatalf("Incorrect error.\nExpected:\n %s\nGot:\n%v", + test.expectedErr, err) + } + } +} + +func TestNameReferencePersistentVolumeHappyRun(t *testing.T) { + rf := provider.NewDefaultDepProvider().GetResourceFactory() + + v1 := rf.FromMapWithName( + "volume1", + map[string]interface{}{ + "apiVersion": "v1", + "kind": "PersistentVolume", + "metadata": map[string]interface{}{ + "name": "someprefix-volume1", + }, + }) + c1 := rf.FromMapWithName( + "claim1", + map[string]interface{}{ + "apiVersion": "v1", + "kind": "PersistentVolumeClaim", + "metadata": map[string]interface{}{ + "name": "someprefix-claim1", + "namespace": "some-namespace", + }, + "spec": map[string]interface{}{ + "volumeName": "volume1", + }, + }) + + v2 := v1.DeepCopy() + c2 := rf.FromMapWithName( + "claim1", + map[string]interface{}{ + "apiVersion": "v1", + "kind": "PersistentVolumeClaim", + "metadata": map[string]interface{}{ + "name": "someprefix-claim1", + "namespace": "some-namespace", + }, + "spec": map[string]interface{}{ + "volumeName": "someprefix-volume1", + }, + }) + + m1 := resmaptest_test.NewRmBuilder(t, rf).AddR(v1).AddR(c1).ResMap() + + nrt := newNameReferenceTransformer(builtinconfig.MakeDefaultConfig().NameReference) + if err := nrt.Transform(m1); err != nil { + t.Fatalf("unexpected error: %v", err) + } + + m2 := resmaptest_test.NewRmBuilder(t, rf).AddR(v2).AddR(c2).ResMap() + v2.AppendRefBy(c2.CurId()) + + if err := m1.ErrorIfNotEqualLists(m2); err != nil { + t.Fatalf(notEqualErrFmt, err) + } +} + +// utility map to create a deployment object +// with (metadatanamespace, metadataname) as key +// and pointing to "refname" secret and configmap +func deploymentMap(metadatanamespace string, metadataname string, + configmapref string, secretref string) map[string]interface{} { + deployment := map[string]interface{}{ + "group": "apps", + "apiVersion": "v1", + "kind": "Deployment", + "metadata": map[string]interface{}{ + "name": metadataname, + }, + "spec": map[string]interface{}{ + "template": map[string]interface{}{ + "spec": map[string]interface{}{ + "containers": []interface{}{ + map[string]interface{}{ + "name": "nginx", + "image": "nginx:1.7.9", + "env": []interface{}{ + map[string]interface{}{ + "name": "CM_FOO", + "valueFrom": map[string]interface{}{ + "configMapKeyRef": map[string]interface{}{ + "name": configmapref, + "key": "somekey", + }, + }, + }, + map[string]interface{}{ + "name": "SECRET_FOO", + "valueFrom": map[string]interface{}{ + "secretKeyRef": map[string]interface{}{ + "name": secretref, + "key": "somekey", + }, + }, + }, + }, + }, + }, + }, + }, + }, + } + + if metadatanamespace != "" { + metadata := deployment["metadata"].(map[string]interface{}) + metadata["namespace"] = metadatanamespace + } + return deployment +} + +const ( + defaultNs = "default" + ns1 = "ns1" + ns2 = "ns2" + ns3 = "ns3" + ns4 = "ns4" + + orgname = "uniquename" + prefixedname = "prefix-uniquename" + suffixedname = "uniquename-suffix" + modifiedname = "modifiedname" +) + +// TestNameReferenceNamespace creates serviceAccount and clusterRoleBinding +// object with the same original names (uniquename) in different namespaces +// and with different current Id. +func TestNameReferenceNamespace(t *testing.T) { + m := resmaptest_test.NewRmBuilderDefault(t). + // Add ConfigMap with the same org name in noNs, "ns1" and "ns2" namespaces + AddWithName(orgname, map[string]interface{}{ + "apiVersion": "v1", + "kind": "ConfigMap", + "metadata": map[string]interface{}{ + "name": modifiedname, + }}). + AddWithNsAndName(ns1, orgname, map[string]interface{}{ + "apiVersion": "v1", + "kind": "ConfigMap", + "metadata": map[string]interface{}{ + "name": prefixedname, + "namespace": ns1, + }}). + AddWithNsAndName(ns2, orgname, map[string]interface{}{ + "apiVersion": "v1", + "kind": "ConfigMap", + "metadata": map[string]interface{}{ + "name": suffixedname, + "namespace": ns2, + }}). + // Add Secret with the same org name in noNs, "ns1" and "ns2" namespaces + AddWithNsAndName(defaultNs, orgname, map[string]interface{}{ + "apiVersion": "v1", + "kind": "Secret", + "metadata": map[string]interface{}{ + "name": modifiedname, + "namespace": defaultNs, + }}). + AddWithNsAndName(ns1, orgname, map[string]interface{}{ + "apiVersion": "v1", + "kind": "Secret", + "metadata": map[string]interface{}{ + "name": prefixedname, + "namespace": ns1, + }}). + AddWithNsAndName(ns2, orgname, map[string]interface{}{ + "apiVersion": "v1", + "kind": "Secret", + "metadata": map[string]interface{}{ + "name": suffixedname, + "namespace": ns2, + }}). + // Add Deployment with the same org name in noNs, "ns1" and "ns2" namespaces + AddWithNsAndName(defaultNs, orgname, deploymentMap(defaultNs, modifiedname, modifiedname, modifiedname)). + AddWithNsAndName(ns1, orgname, deploymentMap(ns1, prefixedname, orgname, orgname)). + AddWithNsAndName(ns2, orgname, deploymentMap(ns2, suffixedname, orgname, orgname)).ResMap() + + expected := resmaptest_test.NewSeededRmBuilderDefault(t, m.ShallowCopy()). + ReplaceResource(deploymentMap(defaultNs, modifiedname, modifiedname, modifiedname)). + ReplaceResource(deploymentMap(ns1, prefixedname, prefixedname, prefixedname)). + ReplaceResource(deploymentMap(ns2, suffixedname, suffixedname, suffixedname)).ResMap() + + nrt := newNameReferenceTransformer(builtinconfig.MakeDefaultConfig().NameReference) + err := nrt.Transform(m) + if err != nil { + t.Fatalf("unexpected error: %v", err) + } + + m.RemoveBuildAnnotations() + if err = expected.ErrorIfNotEqualLists(m); err != nil { + t.Fatalf(notEqualErrFmt, err) + } +} + +// TestNameReferenceNamespace creates serviceAccount and clusterRoleBinding +// object with the same original names (uniquename) in different namespaces +// and with different current Id. +func TestNameReferenceClusterWide(t *testing.T) { + m := resmaptest_test.NewRmBuilderDefault(t). + // Add ServiceAccount with the same org name in noNs, "ns1" and "ns2" namespaces + AddWithName(orgname, map[string]interface{}{ + "apiVersion": "v1", + "kind": "ServiceAccount", + "metadata": map[string]interface{}{ + "name": modifiedname, + }}). + AddWithNsAndName(ns1, orgname, map[string]interface{}{ + "apiVersion": "v1", + "kind": "ServiceAccount", + "metadata": map[string]interface{}{ + "name": prefixedname, + "namespace": ns1, + }}). + AddWithNsAndName(ns2, orgname, map[string]interface{}{ + "apiVersion": "v1", + "kind": "ServiceAccount", + "metadata": map[string]interface{}{ + "name": suffixedname, + "namespace": ns2, + }}). + // Add a PersistentVolume to have a clusterwide resource + AddWithName(orgname, map[string]interface{}{ + "apiVersion": "v1", + "kind": "PersistentVolume", + "metadata": map[string]interface{}{ + "name": modifiedname, + }}). + AddWithName(orgname, map[string]interface{}{ + "apiVersion": "rbac.authorization.k8s.io/v1", + "kind": "ClusterRole", + "metadata": map[string]interface{}{ + "name": modifiedname, + }, + "rules": []interface{}{ + map[string]interface{}{ + "resources": []interface{}{ + "persistentvolumes", + }, + "resourceNames": []interface{}{ + orgname, + }, + }, + }}). + AddWithName(orgname, map[string]interface{}{ + "apiVersion": "rbac.authorization.k8s.io/v1", + "kind": "ClusterRoleBinding", + "metadata": map[string]interface{}{ + "name": modifiedname, + }, + "roleRef": map[string]interface{}{ + "apiGroup": "rbac.authorization.k8s.io", + "kind": "ClusterRole", + "name": orgname, + }, + "subjects": []interface{}{ + map[string]interface{}{ + "kind": "ServiceAccount", + "name": orgname, + "namespace": defaultNs, + }, + map[string]interface{}{ + "kind": "ServiceAccount", + "name": orgname, + "namespace": ns1, + }, + map[string]interface{}{ + "kind": "ServiceAccount", + "name": orgname, + "namespace": ns2, + }, + map[string]interface{}{ + "kind": "ServiceAccount", + "name": orgname, + "namespace": "random", + }, + }}).ResMap() + + expected := resmaptest_test.NewSeededRmBuilderDefault(t, m.ShallowCopy()). + ReplaceResource( + map[string]interface{}{ + "apiVersion": "rbac.authorization.k8s.io/v1", + "kind": "ClusterRole", + "metadata": map[string]interface{}{ + "name": modifiedname, + }, + // Behavior of the transformer is still imperfect + // It should use the (resources,apigroup,resourceNames) as + // combination to select the candidates. + "rules": []interface{}{ + map[string]interface{}{ + "resources": []interface{}{ + "persistentvolumes", + }, + "resourceNames": []interface{}{ + modifiedname, + }, + }, + }}). + ReplaceResource( + map[string]interface{}{ + "apiVersion": "rbac.authorization.k8s.io/v1", + "kind": "ClusterRoleBinding", + "metadata": map[string]interface{}{ + "name": modifiedname, + }, + "roleRef": map[string]interface{}{ + "apiGroup": "rbac.authorization.k8s.io", + "kind": "ClusterRole", + "name": modifiedname, + }, + // The following tests required a change in + // getNameFunc implementation in order to leverage + // the namespace field. + "subjects": []interface{}{ + map[string]interface{}{ + "kind": "ServiceAccount", + "name": modifiedname, + "namespace": defaultNs, + }, + map[string]interface{}{ + "kind": "ServiceAccount", + "name": prefixedname, + "namespace": ns1, + }, + map[string]interface{}{ + "kind": "ServiceAccount", + "name": suffixedname, + "namespace": ns2, + }, + map[string]interface{}{ + "kind": "ServiceAccount", + "name": orgname, + "namespace": "random", + }, + }, + }).ResMap() + + clusterRoleId := resid.NewResId( + resid.NewGvk("rbac.authorization.k8s.io", "v1", "ClusterRole"), modifiedname) + clusterRoleBindingId := resid.NewResId( + resid.NewGvk("rbac.authorization.k8s.io", "v1", "ClusterRoleBinding"), modifiedname) + clusterRole, _ := expected.GetByCurrentId(clusterRoleId) + clusterRole.AppendRefBy(clusterRoleBindingId) + + nrt := newNameReferenceTransformer(builtinconfig.MakeDefaultConfig().NameReference) + err := nrt.Transform(m) + if err != nil { + t.Fatalf("unexpected error: %v", err) + } + + expected.RemoveBuildAnnotations() + m.RemoveBuildAnnotations() + + if err = expected.ErrorIfNotEqualLists(m); err != nil { + t.Fatalf(notEqualErrFmt, err) + } +} + +// TestNameReferenceNamespaceTransformation creates serviceAccount and clusterRoleBinding +// object with the same original names (uniquename) in different namespaces +// and with different current Id. +func TestNameReferenceNamespaceTransformation(t *testing.T) { + m := resmaptest_test.NewRmBuilderDefault(t). + AddWithNsAndName(ns4, orgname, map[string]interface{}{ + "apiVersion": "v1", + "kind": "Secret", + "metadata": map[string]interface{}{ + "name": orgname, + "namespace": ns4, + }}). + // Add ServiceAccount with the same org name in "ns1" namespaces + AddWithNsAndName(ns1, orgname, map[string]interface{}{ + "apiVersion": "v1", + "kind": "ServiceAccount", + "metadata": map[string]interface{}{ + "name": prefixedname, + "namespace": ns1, + }}). + // Simulate NamespaceTransformer effect (ns3 transformed in ns2) + AddWithNsAndName(ns3, orgname, map[string]interface{}{ + "apiVersion": "v1", + "kind": "ServiceAccount", + "metadata": map[string]interface{}{ + "name": suffixedname, + "namespace": ns2, + }}). + AddWithName(orgname, map[string]interface{}{ + "apiVersion": "rbac.authorization.k8s.io/v1", + "kind": "ClusterRole", + "metadata": map[string]interface{}{ + "name": modifiedname, + }}). + AddWithName(orgname, map[string]interface{}{ + "apiVersion": "rbac.authorization.k8s.io/v1", + "kind": "ClusterRoleBinding", + "metadata": map[string]interface{}{ + "name": modifiedname, + }, + "roleRef": map[string]interface{}{ + "apiGroup": "rbac.authorization.k8s.io", + "kind": "ClusterRole", + "name": orgname, + }, + "subjects": []interface{}{ + map[string]interface{}{ + "kind": "ServiceAccount", + "name": orgname, + "namespace": ns1, + }, + map[string]interface{}{ + "kind": "ServiceAccount", + "name": orgname, + "namespace": ns3, + }, + map[string]interface{}{ + "kind": "ServiceAccount", + "name": orgname, + "namespace": "random", + }, + map[string]interface{}{ + "kind": "ServiceAccount", + "name": orgname, + "namespace": ns4, + }, + }}).ResMap() + + expected := resmaptest_test.NewSeededRmBuilderDefault(t, m.ShallowCopy()). + ReplaceResource( + map[string]interface{}{ + "apiVersion": "rbac.authorization.k8s.io/v1", + "kind": "ClusterRoleBinding", + "metadata": map[string]interface{}{ + "name": modifiedname, + }, + "roleRef": map[string]interface{}{ + "apiGroup": "rbac.authorization.k8s.io", + "kind": "ClusterRole", + "name": modifiedname, + }, + // The following tests required a change in + // getNameFunc implementation in order to leverage + // the namespace field. + "subjects": []interface{}{ + map[string]interface{}{ + "kind": "ServiceAccount", + "name": prefixedname, + "namespace": ns1, + }, + map[string]interface{}{ + "kind": "ServiceAccount", + "name": suffixedname, + "namespace": ns2, + }, + map[string]interface{}{ + "kind": "ServiceAccount", + "name": orgname, + "namespace": "random", + }, + map[string]interface{}{ + "kind": "ServiceAccount", + "name": orgname, + "namespace": ns4, + }, + }, + }).ResMap() + + clusterRoleId := resid.NewResId( + resid.NewGvk("rbac.authorization.k8s.io", "v1", "ClusterRole"), + modifiedname) + clusterRoleBindingId := resid.NewResId( + resid.NewGvk("rbac.authorization.k8s.io", "v1", "ClusterRoleBinding"), + modifiedname) + clusterRole, _ := expected.GetByCurrentId(clusterRoleId) + clusterRole.AppendRefBy(clusterRoleBindingId) + + nrt := newNameReferenceTransformer(builtinconfig.MakeDefaultConfig().NameReference) + err := nrt.Transform(m) + if err != nil { + t.Fatalf("unexpected error: %v", err) + } + + m.RemoveBuildAnnotations() + if err = expected.ErrorIfNotEqualLists(m); err != nil { + t.Fatalf(notEqualErrFmt, err) + } +} + +// TestNameReferenceNamespace creates configmap, secret, deployment +// It validates the change done is IsSameFuzzyNamespace which +// uses the IsNsEquals method instead of the simple == operator. +func TestNameReferenceCandidateSelection(t *testing.T) { + m := resmaptest_test.NewRmBuilderDefault(t). + AddWithName("cm1", map[string]interface{}{ + "apiVersion": "v1", + "kind": "ConfigMap", + "metadata": map[string]interface{}{ + "name": "p1-cm1-hash", + }}). + AddWithNsAndName("default", "secret1", map[string]interface{}{ + "apiVersion": "v1", + "kind": "Secret", + "metadata": map[string]interface{}{ + "name": "p1-secret1-hash", + "namespace": "default", + }}). + AddWithName("deploy1", deploymentMap("", "p1-deploy1", "cm1", "secret1")). + ResMap() + + expected := resmaptest_test.NewSeededRmBuilderDefault(t, m.ShallowCopy()). + ReplaceResource(deploymentMap("", "p1-deploy1", "p1-cm1-hash", "p1-secret1-hash")). + ResMap() + + nrt := newNameReferenceTransformer(builtinconfig.MakeDefaultConfig().NameReference) + err := nrt.Transform(m) + if err != nil { + t.Fatalf("unexpected error: %v", err) + } + + m.RemoveBuildAnnotations() + if err = expected.ErrorIfNotEqualLists(m); err != nil { + t.Fatalf(notEqualErrFmt, err) + } +} diff --git a/go/internal/forked/api/internal/accumulator/refvartransformer.go b/go/internal/forked/api/internal/accumulator/refvartransformer.go new file mode 100644 index 000000000..a02edc4fb --- /dev/null +++ b/go/internal/forked/api/internal/accumulator/refvartransformer.go @@ -0,0 +1,57 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package accumulator + +import ( + "sigs.k8s.io/kustomize/api/filters/refvar" + "sigs.k8s.io/kustomize/api/resmap" + "sigs.k8s.io/kustomize/api/types" +) + +type refVarTransformer struct { + varMap map[string]interface{} + replacementCounts map[string]int + fieldSpecs []types.FieldSpec +} + +// newRefVarTransformer returns a new refVarTransformer +// that replaces $(VAR) style variables with values. +// The fieldSpecs are the places to look for occurrences of $(VAR). +func newRefVarTransformer( + varMap map[string]interface{}, fs []types.FieldSpec) *refVarTransformer { + return &refVarTransformer{ + varMap: varMap, + fieldSpecs: fs, + } +} + +// UnusedVars returns slice of Var names that were unused +// after a Transform run. +func (rv *refVarTransformer) UnusedVars() []string { + var unused []string + for k := range rv.varMap { + if _, ok := rv.replacementCounts[k]; !ok { + unused = append(unused, k) + } + } + return unused +} + +// Transform replaces $(VAR) style variables with values. +func (rv *refVarTransformer) Transform(m resmap.ResMap) error { + rv.replacementCounts = make(map[string]int) + mf := refvar.MakePrimitiveReplacer(rv.replacementCounts, rv.varMap) + for _, res := range m.Resources() { + for _, fieldSpec := range rv.fieldSpecs { + err := res.ApplyFilter(refvar.Filter{ + MappingFunc: mf, + FieldSpec: fieldSpec, + }) + if err != nil { + return err + } + } + } + return nil +} diff --git a/go/internal/forked/api/internal/accumulator/refvartransformer_test.go b/go/internal/forked/api/internal/accumulator/refvartransformer_test.go new file mode 100644 index 000000000..c291e1b4c --- /dev/null +++ b/go/internal/forked/api/internal/accumulator/refvartransformer_test.go @@ -0,0 +1,189 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package accumulator + +import ( + "reflect" + "testing" + + "sigs.k8s.io/kustomize/api/resmap" + resmaptest_test "sigs.k8s.io/kustomize/api/testutils/resmaptest" + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/resid" +) + +func TestRefVarTransformer(t *testing.T) { + type given struct { + varMap map[string]interface{} + fs []types.FieldSpec + res resmap.ResMap + } + type expected struct { + res resmap.ResMap + unused []string + } + testCases := map[string]struct { + given given + expected expected + errMessage string + }{ + "var replacement in map[string]": { + given: given{ + varMap: map[string]interface{}{ + "FOO": "replacementForFoo", + "BAR": "replacementForBar", + "BAZ": int64(5), + "BOO": true, + }, + fs: []types.FieldSpec{ + {Gvk: resid.Gvk{Version: "v1", Kind: "ConfigMap"}, Path: "data/map"}, + {Gvk: resid.Gvk{Version: "v1", Kind: "ConfigMap"}, Path: "data/slice"}, + {Gvk: resid.Gvk{Version: "v1", Kind: "ConfigMap"}, Path: "data/interface"}, + {Gvk: resid.Gvk{Version: "v1", Kind: "ConfigMap"}, Path: "data/num"}, + }, + res: resmaptest_test.NewRmBuilderDefault(t). + Add(map[string]interface{}{ + "apiVersion": "v1", + "kind": "ConfigMap", + "metadata": map[string]interface{}{ + "name": "cm1", + }, + "data": map[string]interface{}{ + "map": map[string]interface{}{ + "item1": "$(FOO)", + "item2": "bla", + "item3": "$(BAZ)", + "item4": "$(BAZ)+$(BAZ)", + "item5": "$(BOO)", + "item6": "if $(BOO)", + "item7": int64(2019), + }, + "slice": []interface{}{ + "$(FOO)", + "bla", + "$(BAZ)", + "$(BAZ)+$(BAZ)", + "$(BOO)", + "if $(BOO)", + }, + "interface": "$(FOO)", + "num": int64(2019), + }}).ResMap(), + }, + expected: expected{ + res: resmaptest_test.NewRmBuilderDefault(t). + Add(map[string]interface{}{ + "apiVersion": "v1", + "kind": "ConfigMap", + "metadata": map[string]interface{}{ + "name": "cm1", + }, + "data": map[string]interface{}{ + "map": map[string]interface{}{ + "item1": "replacementForFoo", + "item2": "bla", + "item3": int64(5), + "item4": "5+5", + "item5": true, + "item6": "if true", + "item7": int64(2019), + }, + "slice": []interface{}{ + "replacementForFoo", + "bla", + int64(5), + "5+5", + true, + "if true", + }, + "interface": "replacementForFoo", + "num": int64(2019), + }}).ResMap(), + unused: []string{"BAR"}, + }, + }, + "var replacement panic in map[string]": { + given: given{ + varMap: map[string]interface{}{}, + fs: []types.FieldSpec{ + {Gvk: resid.Gvk{Version: "v1", Kind: "ConfigMap"}, Path: "data/slice"}, + }, + res: resmaptest_test.NewRmBuilderDefault(t). + Add(map[string]interface{}{ + "apiVersion": "v1", + "kind": "ConfigMap", + "metadata": map[string]interface{}{ + "name": "cm1", + }, + "data": map[string]interface{}{ + "slice": []interface{}{5}, // noticeably *not* a []string + }}).ResMap(), + }, + errMessage: `considering field 'data/slice' of object ConfigMap.v1.[noGrp]/cm1.[noNs]: invalid value type expect a string`, + }, + "var replacement in nil": { + given: given{ + varMap: map[string]interface{}{}, + fs: []types.FieldSpec{ + {Gvk: resid.Gvk{Version: "v1", Kind: "ConfigMap"}, Path: "data/nil"}, + }, + res: resmaptest_test.NewRmBuilderDefault(t). + Add(map[string]interface{}{ + "apiVersion": "v1", + "kind": "ConfigMap", + "metadata": map[string]interface{}{ + "name": "cm1", + }, + "data": map[string]interface{}{ + "nil": nil, // noticeably *not* a []string + }}).ResMap(), + }, + expected: expected{ + res: resmaptest_test.NewRmBuilderDefault(t). + Add(map[string]interface{}{ + "apiVersion": "v1", + "kind": "ConfigMap", + "metadata": map[string]interface{}{ + "name": "cm1", + }, + "data": map[string]interface{}{ + "nil": nil, // noticeably *not* a []string + }}).ResMap(), + }, + }, + } + + for tn, tc := range testCases { + t.Run(tn, func(t *testing.T) { + tr := newRefVarTransformer(tc.given.varMap, tc.given.fs) + err := tr.Transform(tc.given.res) + if tc.errMessage != "" { + if err == nil { + t.Fatalf("missing expected error %v", tc.errMessage) + } else if err.Error() != tc.errMessage { + t.Fatalf(`actual error doesn't match expected error: +ACTUAL: %v +EXPECTED: %v`, + err.Error(), tc.errMessage) + } + } else { + if err != nil { + t.Errorf("unexpected error: %v", err) + } + + a, e := tc.given.res, tc.expected.res + if !reflect.DeepEqual(a, e) { + err = e.ErrorIfNotEqualLists(a) + t.Fatalf(`actual doesn't match expected: +ACTUAL: +%v +EXPECTED: +%v +ERR: %v`, + a, e, err) + } + } + }) + } +} diff --git a/go/internal/forked/api/internal/accumulator/refvartransformer_test.go b/go/internal/forked/api/internal/accumulator/refvartransformer_test.go new file mode 100644 index 000000000..abc35a7d3 --- /dev/null +++ b/go/internal/forked/api/internal/accumulator/refvartransformer_test.go @@ -0,0 +1,189 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package accumulator + +import ( + "reflect" + "testing" + + "sigs.k8s.io/kustomize/api/resmap" + resmaptest_test "sigs.k8s.io/kustomize/api/testutils/resmaptest" + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/resid" +) + +func TestRefVarTransformer(t *testing.T) { + type given struct { + varMap map[string]interface{} + fs []types.FieldSpec + res resmap.ResMap + } + type expected struct { + res resmap.ResMap + unused []string + } + testCases := map[string]struct { + given given + expected expected + errMessage string + }{ + "var replacement in map[string]": { + given: given{ + varMap: map[string]interface{}{ + "FOO": "replacementForFoo", + "BAR": "replacementForBar", + "BAZ": int64(5), + "BOO": true, + }, + fs: []types.FieldSpec{ + {Gvk: resid.Gvk{Version: "v1", Kind: "ConfigMap"}, Path: "data/map"}, + {Gvk: resid.Gvk{Version: "v1", Kind: "ConfigMap"}, Path: "data/slice"}, + {Gvk: resid.Gvk{Version: "v1", Kind: "ConfigMap"}, Path: "data/interface"}, + {Gvk: resid.Gvk{Version: "v1", Kind: "ConfigMap"}, Path: "data/num"}, + }, + res: resmaptest_test.NewRmBuilderDefault(t). + Add(map[string]interface{}{ + "apiVersion": "v1", + "kind": "ConfigMap", + "metadata": map[string]interface{}{ + "name": "cm1", + }, + "data": map[string]interface{}{ + "map": map[string]interface{}{ + "item1": "$(FOO)", + "item2": "bla", + "item3": "$(BAZ)", + "item4": "$(BAZ)+$(BAZ)", + "item5": "$(BOO)", + "item6": "if $(BOO)", + "item7": int64(2019), + }, + "slice": []interface{}{ + "$(FOO)", + "bla", + "$(BAZ)", + "$(BAZ)+$(BAZ)", + "$(BOO)", + "if $(BOO)", + }, + "interface": "$(FOO)", + "num": int64(2019), + }}).ResMap(), + }, + expected: expected{ + res: resmaptest_test.NewRmBuilderDefault(t). + Add(map[string]interface{}{ + "apiVersion": "v1", + "kind": "ConfigMap", + "metadata": map[string]interface{}{ + "name": "cm1", + }, + "data": map[string]interface{}{ + "map": map[string]interface{}{ + "item1": "replacementForFoo", + "item2": "bla", + "item3": int64(5), + "item4": "5+5", + "item5": true, + "item6": "if true", + "item7": int64(2019), + }, + "slice": []interface{}{ + "replacementForFoo", + "bla", + int64(5), + "5+5", + true, + "if true", + }, + "interface": "replacementForFoo", + "num": int64(2019), + }}).ResMap(), + unused: []string{"BAR"}, + }, + }, + "var replacement panic in map[string]": { + given: given{ + varMap: map[string]interface{}{}, + fs: []types.FieldSpec{ + {Gvk: resid.Gvk{Version: "v1", Kind: "ConfigMap"}, Path: "data/slice"}, + }, + res: resmaptest_test.NewRmBuilderDefault(t). + Add(map[string]interface{}{ + "apiVersion": "v1", + "kind": "ConfigMap", + "metadata": map[string]interface{}{ + "name": "cm1", + }, + "data": map[string]interface{}{ + "slice": []interface{}{5}, // noticeably *not* a []string + }}).ResMap(), + }, + errMessage: `considering field 'data/slice' of object ConfigMap.v1.[noGrp]/cm1.[noNs]: invalid value type expect a string`, + }, + "var replacement in nil": { + given: given{ + varMap: map[string]interface{}{}, + fs: []types.FieldSpec{ + {Gvk: resid.Gvk{Version: "v1", Kind: "ConfigMap"}, Path: "data/nil"}, + }, + res: resmaptest_test.NewRmBuilderDefault(t). + Add(map[string]interface{}{ + "apiVersion": "v1", + "kind": "ConfigMap", + "metadata": map[string]interface{}{ + "name": "cm1", + }, + "data": map[string]interface{}{ + "nil": nil, // noticeably *not* a []string + }}).ResMap(), + }, + expected: expected{ + res: resmaptest_test.NewRmBuilderDefault(t). + Add(map[string]interface{}{ + "apiVersion": "v1", + "kind": "ConfigMap", + "metadata": map[string]interface{}{ + "name": "cm1", + }, + "data": map[string]interface{}{ + "nil": nil, // noticeably *not* a []string + }}).ResMap(), + }, + }, + } + + for tn, tc := range testCases { + t.Run(tn, func(t *testing.T) { + tr := newRefVarTransformer(tc.given.varMap, tc.given.fs) + err := tr.Transform(tc.given.res) + if tc.errMessage != "" { + if err == nil { + t.Fatalf("missing expected error %v", tc.errMessage) + } else if err.Error() != tc.errMessage { + t.Fatalf(`actual error doesn't match expected error: +ACTUAL: %v +EXPECTED: %v`, + err.Error(), tc.errMessage) + } + } else { + if err != nil { + t.Errorf("unexpected error: %v", err) + } + + a, e := tc.given.res, tc.expected.res + if !reflect.DeepEqual(a, e) { + err = e.ErrorIfNotEqualLists(a) + t.Fatalf(`actual doesn't match expected: +ACTUAL: +%v +EXPECTED: +%v +ERR: %v`, + a, e, err) + } + } + }) + } +} diff --git a/go/internal/forked/api/internal/accumulator/resaccumulator.go b/go/internal/forked/api/internal/accumulator/resaccumulator.go new file mode 100644 index 000000000..b3de66b4e --- /dev/null +++ b/go/internal/forked/api/internal/accumulator/resaccumulator.go @@ -0,0 +1,190 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package accumulator + +import ( + "fmt" + "log" + "strings" + + "sigs.k8s.io/kustomize/api/internal/plugins/builtinconfig" + "sigs.k8s.io/kustomize/api/resmap" + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/resid" +) + +// ResAccumulator accumulates resources and the rules +// used to customize those resources. It's a ResMap +// plus stuff needed to modify the ResMap. +type ResAccumulator struct { + resMap resmap.ResMap + tConfig *builtinconfig.TransformerConfig + varSet types.VarSet +} + +func MakeEmptyAccumulator() *ResAccumulator { + ra := &ResAccumulator{} + ra.resMap = resmap.New() + ra.tConfig = &builtinconfig.TransformerConfig{} + ra.varSet = types.NewVarSet() + return ra +} + +// ResMap returns a copy of the internal resMap. +func (ra *ResAccumulator) ResMap() resmap.ResMap { + return ra.resMap.ShallowCopy() +} + +// Vars returns a copy of underlying vars. +func (ra *ResAccumulator) Vars() []types.Var { + return ra.varSet.AsSlice() +} + +func (ra *ResAccumulator) AppendAll(resources resmap.ResMap) error { + return ra.resMap.AppendAll(resources) +} + +func (ra *ResAccumulator) AbsorbAll(resources resmap.ResMap) error { + return ra.resMap.AbsorbAll(resources) +} + +func (ra *ResAccumulator) MergeConfig( + tConfig *builtinconfig.TransformerConfig) (err error) { + ra.tConfig, err = ra.tConfig.Merge(tConfig) + return err +} + +func (ra *ResAccumulator) GetTransformerConfig() *builtinconfig.TransformerConfig { + return ra.tConfig +} + +// MergeVars accumulates vars into ResAccumulator. +// A Var is a tuple of name, object reference and field reference. +// This func takes a list of vars from the current kustomization file and +// annotates the accumulated resources with the names of the vars that match +// those resources. E.g. if there's a var named "sam" that wants to get +// its data from a ConfigMap named "james", and the resource list contains a +// ConfigMap named "james", then that ConfigMap will be annotated with the +// var name "sam". Later this annotation is used to find the data for "sam" +// by digging into a particular fieldpath of "james". +func (ra *ResAccumulator) MergeVars(incoming []types.Var) error { + for _, v := range incoming { + targetId := resid.NewResIdWithNamespace(v.ObjRef.GVK(), v.ObjRef.Name, v.ObjRef.Namespace) + idMatcher := targetId.GvknEquals + if targetId.Namespace != "" || targetId.IsClusterScoped() { + // Preserve backward compatibility. An empty namespace means + // wildcard search on the namespace hence we still use GvknEquals + idMatcher = targetId.Equals + } + matched := ra.resMap.GetMatchingResourcesByAnyId(idMatcher) + if len(matched) > 1 { + return fmt.Errorf( + "found %d resId matches for var %s "+ + "(unable to disambiguate)", + len(matched), v) + } + if len(matched) == 1 { + matched[0].AppendRefVarName(v) + } + } + return ra.varSet.MergeSlice(incoming) +} + +func (ra *ResAccumulator) MergeAccumulator(other *ResAccumulator) (err error) { + err = ra.AppendAll(other.resMap) + if err != nil { + return err + } + err = ra.MergeConfig(other.tConfig) + if err != nil { + return err + } + return ra.varSet.MergeSet(other.varSet) +} + +func (ra *ResAccumulator) findVarValueFromResources(v types.Var) (interface{}, error) { + for _, res := range ra.resMap.Resources() { + for _, varName := range res.GetRefVarNames() { + if varName == v.Name { + //nolint: staticcheck + s, err := res.GetFieldValue(v.FieldRef.FieldPath) + if err != nil { + return "", fmt.Errorf( + "field specified in var '%v' "+ + "not found in corresponding resource", v) + } + return s, nil + } + } + } + return "", fmt.Errorf( + "var '%v' cannot be mapped to a field "+ + "in the set of known resources", v) +} + +// makeVarReplacementMap returns a map of Var names to +// their final values. The values are strings intended +// for substitution wherever the $(var.Name) occurs. +func (ra *ResAccumulator) makeVarReplacementMap() (map[string]interface{}, error) { + result := map[string]interface{}{} + for _, v := range ra.Vars() { + s, err := ra.findVarValueFromResources(v) + if err != nil { + return nil, err + } + result[v.Name] = s + } + return result, nil +} + +func (ra *ResAccumulator) Transform(t resmap.Transformer) error { + return t.Transform(ra.resMap) +} + +func (ra *ResAccumulator) ResolveVars() error { + replacementMap, err := ra.makeVarReplacementMap() + if err != nil { + return err + } + if len(replacementMap) == 0 { + return nil + } + t := newRefVarTransformer( + replacementMap, ra.tConfig.VarReference) + err = ra.Transform(t) + if len(t.UnusedVars()) > 0 { + log.Printf( + "well-defined vars that were never replaced: %s\n", + strings.Join(t.UnusedVars(), ",")) + } + return err +} + +func (ra *ResAccumulator) FixBackReferences() (err error) { + if ra.tConfig.NameReference == nil { + return nil + } + return ra.Transform( + newNameReferenceTransformer(ra.tConfig.NameReference)) +} + +// Intersection drops the resources which "other" does not have. +func (ra *ResAccumulator) Intersection(other resmap.ResMap) error { + for _, curId := range ra.resMap.AllIds() { + toDelete := true + for _, otherId := range other.AllIds() { + if otherId == curId { + toDelete = false + break + } + } + if toDelete { + err := ra.resMap.Remove(curId) + if err != nil { + return err + } + } + } + return nil +} diff --git a/go/internal/forked/api/internal/accumulator/resaccumulator.go b/go/internal/forked/api/internal/accumulator/resaccumulator.go new file mode 100644 index 000000000..4bafeefc5 --- /dev/null +++ b/go/internal/forked/api/internal/accumulator/resaccumulator.go @@ -0,0 +1,190 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package accumulator + +import ( + "fmt" + "log" + "strings" + + "sigs.k8s.io/kustomize/api/internal/plugins/builtinconfig" + "sigs.k8s.io/kustomize/api/resmap" + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/resid" +) + +// ResAccumulator accumulates resources and the rules +// used to customize those resources. It's a ResMap +// plus stuff needed to modify the ResMap. +type ResAccumulator struct { + resMap resmap.ResMap + tConfig *builtinconfig.TransformerConfig + varSet types.VarSet +} + +func MakeEmptyAccumulator() *ResAccumulator { + ra := &ResAccumulator{} + ra.resMap = resmap.New() + ra.tConfig = &builtinconfig.TransformerConfig{} + ra.varSet = types.NewVarSet() + return ra +} + +// ResMap returns a copy of the internal resMap. +func (ra *ResAccumulator) ResMap() resmap.ResMap { + return ra.resMap.ShallowCopy() +} + +// Vars returns a copy of underlying vars. +func (ra *ResAccumulator) Vars() []types.Var { + return ra.varSet.AsSlice() +} + +func (ra *ResAccumulator) AppendAll(resources resmap.ResMap) error { + return ra.resMap.AppendAll(resources) +} + +func (ra *ResAccumulator) AbsorbAll(resources resmap.ResMap) error { + return ra.resMap.AbsorbAll(resources) +} + +func (ra *ResAccumulator) MergeConfig( + tConfig *builtinconfig.TransformerConfig) (err error) { + ra.tConfig, err = ra.tConfig.Merge(tConfig) + return err +} + +func (ra *ResAccumulator) GetTransformerConfig() *builtinconfig.TransformerConfig { + return ra.tConfig +} + +// MergeVars accumulates vars into ResAccumulator. +// A Var is a tuple of name, object reference and field reference. +// This func takes a list of vars from the current kustomization file and +// annotates the accumulated resources with the names of the vars that match +// those resources. E.g. if there's a var named "sam" that wants to get +// its data from a ConfigMap named "james", and the resource list contains a +// ConfigMap named "james", then that ConfigMap will be annotated with the +// var name "sam". Later this annotation is used to find the data for "sam" +// by digging into a particular fieldpath of "james". +func (ra *ResAccumulator) MergeVars(incoming []types.Var) error { + for _, v := range incoming { + targetId := resid.NewResIdWithNamespace(v.ObjRef.GVK(), v.ObjRef.Name, v.ObjRef.Namespace) + idMatcher := targetId.GvknEquals + if targetId.Namespace != "" || targetId.IsClusterScoped() { + // Preserve backward compatibility. An empty namespace means + // wildcard search on the namespace hence we still use GvknEquals + idMatcher = targetId.Equals + } + matched := ra.resMap.GetMatchingResourcesByAnyId(idMatcher) + if len(matched) > 1 { + return fmt.Errorf( + "found %d resId matches for var %s "+ + "(unable to disambiguate)", + len(matched), v) + } + if len(matched) == 1 { + matched[0].AppendRefVarName(v) + } + } + return ra.varSet.MergeSlice(incoming) +} + +func (ra *ResAccumulator) MergeAccumulator(other *ResAccumulator) (err error) { + err = ra.AppendAll(other.resMap) + if err != nil { + return err + } + err = ra.MergeConfig(other.tConfig) + if err != nil { + return err + } + return ra.varSet.MergeSet(other.varSet) +} + +func (ra *ResAccumulator) findVarValueFromResources(v types.Var) (interface{}, error) { + for _, res := range ra.resMap.Resources() { + for _, varName := range res.GetRefVarNames() { + if varName == v.Name { + //nolint: staticcheck + s, err := res.GetFieldValue(v.FieldRef.FieldPath) + if err != nil { + return "", fmt.Errorf( + "field specified in var '%v' "+ + "not found in corresponding resource", v) + } + return s, nil + } + } + } + return "", fmt.Errorf( + "var '%v' cannot be mapped to a field "+ + "in the set of known resources", v) +} + +// makeVarReplacementMap returns a map of Var names to +// their final values. The values are strings intended +// for substitution wherever the $(var.Name) occurs. +func (ra *ResAccumulator) makeVarReplacementMap() (map[string]interface{}, error) { + result := map[string]interface{}{} + for _, v := range ra.Vars() { + s, err := ra.findVarValueFromResources(v) + if err != nil { + return nil, err + } + result[v.Name] = s + } + return result, nil +} + +func (ra *ResAccumulator) Transform(t resmap.Transformer) error { + return t.Transform(ra.resMap) +} + +func (ra *ResAccumulator) ResolveVars() error { + replacementMap, err := ra.makeVarReplacementMap() + if err != nil { + return err + } + if len(replacementMap) == 0 { + return nil + } + t := newRefVarTransformer( + replacementMap, ra.tConfig.VarReference) + err = ra.Transform(t) + if len(t.UnusedVars()) > 0 { + log.Printf( + "well-defined vars that were never replaced: %s\n", + strings.Join(t.UnusedVars(), ",")) + } + return err +} + +func (ra *ResAccumulator) FixBackReferences() (err error) { + if ra.tConfig.NameReference == nil { + return nil + } + return ra.Transform( + newNameReferenceTransformer(ra.tConfig.NameReference)) +} + +// Intersection drops the resources which "other" does not have. +func (ra *ResAccumulator) Intersection(other resmap.ResMap) error { + for _, curId := range ra.resMap.AllIds() { + toDelete := true + for _, otherId := range other.AllIds() { + if otherId == curId { + toDelete = false + break + } + } + if toDelete { + err := ra.resMap.Remove(curId) + if err != nil { + return err + } + } + } + return nil +} diff --git a/go/internal/forked/api/internal/accumulator/resaccumulator_test.go b/go/internal/forked/api/internal/accumulator/resaccumulator_test.go new file mode 100644 index 000000000..360fe9a6b --- /dev/null +++ b/go/internal/forked/api/internal/accumulator/resaccumulator_test.go @@ -0,0 +1,426 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package accumulator_test + +import ( + "bytes" + "log" + "os" + "strings" + "testing" + + "github.com/stretchr/testify/require" + "sigs.k8s.io/kustomize/api/internal/accumulator" + "sigs.k8s.io/kustomize/api/internal/plugins/builtinconfig" + "sigs.k8s.io/kustomize/api/provider" + "sigs.k8s.io/kustomize/api/resmap" + "sigs.k8s.io/kustomize/api/resource" + resmaptest_test "sigs.k8s.io/kustomize/api/testutils/resmaptest" + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/resid" +) + +func makeResAccumulator(t *testing.T) *accumulator.ResAccumulator { + ra := accumulator.MakeEmptyAccumulator() + err := ra.MergeConfig(builtinconfig.MakeDefaultConfig()) + if err != nil { + t.Fatalf("unexpected err: %v", err) + } + err = ra.AppendAll( + resmaptest_test.NewRmBuilderDefault(t). + Add(map[string]interface{}{ + "apiVersion": "apps/v1", + "kind": "Deployment", + "metadata": map[string]interface{}{ + "name": "deploy1", + }, + "spec": map[string]interface{}{ + "template": map[string]interface{}{ + "spec": map[string]interface{}{ + "containers": []interface{}{ + map[string]interface{}{ + "command": []interface{}{ + "myserver", + "--somebackendService $(SERVICE_ONE)", + "--yetAnother $(SERVICE_TWO)", + }, + }, + }, + }, + }, + }}). + Add(map[string]interface{}{ + "apiVersion": "v1", + "kind": "Service", + "metadata": map[string]interface{}{ + "name": "backendOne", + }}). + Add(map[string]interface{}{ + "apiVersion": "v1", + "kind": "Service", + "metadata": map[string]interface{}{ + "name": "backendTwo", + }}).ResMap()) + if err != nil { + t.Fatalf("unexpected err: %v", err) + } + return ra +} + +func TestResolveVarsHappy(t *testing.T) { + ra := makeResAccumulator(t) + err := ra.MergeVars([]types.Var{ + { + Name: "SERVICE_ONE", + ObjRef: types.Target{ + Gvk: resid.Gvk{Version: "v1", Kind: "Service"}, + Name: "backendOne"}, + }, + { + Name: "SERVICE_TWO", + ObjRef: types.Target{ + Gvk: resid.Gvk{Version: "v1", Kind: "Service"}, + Name: "backendTwo"}, + }, + }) + if err != nil { + t.Fatalf("unexpected err: %v", err) + } + err = ra.ResolveVars() + if err != nil { + t.Fatalf("unexpected err: %v", err) + } + c := getCommand(find("deploy1", ra.ResMap())) + if c != "myserver --somebackendService backendOne --yetAnother backendTwo" { + t.Fatalf("unexpected command: %s", c) + } +} + +func TestResolveVarsOneUnused(t *testing.T) { + ra := makeResAccumulator(t) + err := ra.MergeVars([]types.Var{ + { + Name: "SERVICE_ONE", + ObjRef: types.Target{ + Gvk: resid.Gvk{Version: "v1", Kind: "Service"}, + Name: "backendOne"}, + }, + { + Name: "SERVICE_UNUSED", + ObjRef: types.Target{ + Gvk: resid.Gvk{Version: "v1", Kind: "Service"}, + Name: "backendTwo"}, + }, + }) + if err != nil { + t.Fatalf("unexpected err: %v", err) + } + var buf bytes.Buffer + log.SetOutput(&buf) + defer func() { + log.SetOutput(os.Stderr) + }() + err = ra.ResolveVars() + if err != nil { + t.Fatalf("unexpected err: %v", err) + } + expectLog(t, buf, "well-defined vars that were never replaced: SERVICE_UNUSED") + c := getCommand(find("deploy1", ra.ResMap())) + if c != "myserver --somebackendService backendOne --yetAnother $(SERVICE_TWO)" { + t.Fatalf("unexpected command: %s", c) + } +} + +func expectLog(t *testing.T, log bytes.Buffer, expect string) { + if !strings.Contains(log.String(), expect) { + t.Fatalf("expected log containing '%s', got '%s'", expect, log.String()) + } +} + +func TestResolveVarsVarNeedsDisambiguation(t *testing.T) { + ra := makeResAccumulator(t) + rm0 := resmap.New() + err := rm0.Append( + provider.NewDefaultDepProvider().GetResourceFactory().FromMap( + map[string]interface{}{ + "apiVersion": "v1", + "kind": "Service", + "metadata": map[string]interface{}{ + "name": "backendOne", + "namespace": "fooNamespace", + }, + })) + if err != nil { + t.Fatalf("unexpected err: %v", err) + } + err = ra.AppendAll(rm0) + if err != nil { + t.Fatalf("unexpected err: %v", err) + } + + err = ra.MergeVars([]types.Var{ + { + Name: "SERVICE_ONE", + ObjRef: types.Target{ + Gvk: resid.Gvk{Version: "v1", Kind: "Service"}, + Name: "backendOne", + }, + }, + }) + if err == nil { + t.Fatalf("expected error") + } + if !strings.Contains( + err.Error(), "unable to disambiguate") { + t.Fatalf("unexpected err: %v", err) + } +} + +func makeNamespacedConfigMapWithDataProviderValue( + namespace string, + value string, +) map[string]interface{} { + return map[string]interface{}{ + "apiVersion": "v1", + "kind": "ConfigMap", + "metadata": map[string]interface{}{ + "name": "environment", + "namespace": namespace, + }, + "data": map[string]interface{}{ + "provider": value, + }, + } +} + +func makeVarToNamepaceAndPath( + name string, + namespace string, + path string, +) types.Var { + return types.Var{ + Name: name, + ObjRef: types.Target{ + Gvk: resid.Gvk{Version: "v1", Kind: "ConfigMap"}, + Name: "environment", + Namespace: namespace, + }, + FieldRef: types.FieldSelector{FieldPath: path}, + } +} + +func TestResolveVarConflicts(t *testing.T) { + rf := provider.NewDefaultDepProvider().GetResourceFactory() + // create configmaps in foo and bar namespaces with `data.provider` values. + fooAws := makeNamespacedConfigMapWithDataProviderValue("foo", "aws") + barAws := makeNamespacedConfigMapWithDataProviderValue("bar", "aws") + barGcp := makeNamespacedConfigMapWithDataProviderValue("bar", "gcp") + + // create two variables with (apparently) conflicting names that point to + // fieldpaths that could be generalized. + varFoo := makeVarToNamepaceAndPath("PROVIDER", "foo", "data.provider") + varBar := makeVarToNamepaceAndPath("PROVIDER", "bar", "data.provider") + + // create accumulators holding apparently conflicting vars that are not + // actually in conflict because they point to the same concrete value. + rm0 := resmap.New() + err := rm0.Append(rf.FromMap(fooAws)) + require.NoError(t, err) + ac0 := accumulator.MakeEmptyAccumulator() + err = ac0.AppendAll(rm0) + require.NoError(t, err) + err = ac0.MergeVars([]types.Var{varFoo}) + require.NoError(t, err) + + rm1 := resmap.New() + err = rm1.Append(rf.FromMap(barAws)) + require.NoError(t, err) + ac1 := accumulator.MakeEmptyAccumulator() + err = ac1.AppendAll(rm1) + require.NoError(t, err) + err = ac1.MergeVars([]types.Var{varBar}) + require.NoError(t, err) + + // validate that two vars of the same name which reference the same concrete + // value do not produce a conflict. + err = ac0.MergeAccumulator(ac1) + if err == nil { + t.Fatalf("see bug gh-1600") + } + + // create an accumulator will have an actually conflicting value with the + // two above (because it contains a variable whose name is used in the other + // accumulators AND whose concrete values are different). + rm2 := resmap.New() + err = rm2.Append(rf.FromMap(barGcp)) + require.NoError(t, err) + ac2 := accumulator.MakeEmptyAccumulator() + err = ac2.AppendAll(rm2) + require.NoError(t, err) + err = ac2.MergeVars([]types.Var{varBar}) + require.NoError(t, err) + err = ac1.MergeAccumulator(ac2) + if err == nil { + t.Fatalf("dupe vars w/ different concrete values should conflict") + } +} + +func TestResolveVarsGoodResIdBadField(t *testing.T) { + ra := makeResAccumulator(t) + err := ra.MergeVars([]types.Var{ + { + Name: "SERVICE_ONE", + ObjRef: types.Target{ + Gvk: resid.Gvk{Version: "v1", Kind: "Service"}, + Name: "backendOne"}, + FieldRef: types.FieldSelector{FieldPath: "nope_nope_nope"}, + }, + }) + if err != nil { + t.Fatalf("unexpected err: %v", err) + } + err = ra.ResolveVars() + if err == nil { + t.Fatalf("expected error") + } + if !strings.Contains( + err.Error(), + "not found in corresponding resource") { + t.Fatalf("unexpected err: %v", err) + } +} + +func TestResolveVarsUnmappableVar(t *testing.T) { + ra := makeResAccumulator(t) + err := ra.MergeVars([]types.Var{ + { + Name: "SERVICE_THREE", + ObjRef: types.Target{ + Gvk: resid.Gvk{Version: "v1", Kind: "Service"}, + Name: "doesNotExist"}, + }, + }) + if err != nil { + t.Fatalf("unexpected err: %v", err) + } + err = ra.ResolveVars() + if err == nil { + t.Fatalf("expected error") + } + if !strings.Contains( + err.Error(), + "cannot be mapped to a field in the set of known resources") { + t.Fatalf("unexpected err: %v", err) + } +} + +func TestResolveVarsWithNoambiguation(t *testing.T) { + ra1 := makeResAccumulator(t) + err := ra1.MergeVars([]types.Var{ + { + Name: "SERVICE_ONE", + ObjRef: types.Target{ + Gvk: resid.Gvk{Version: "v1", Kind: "Service"}, + Name: "backendOne", + }, + }, + }) + if err != nil { + t.Fatalf("unexpected err: %v", err) + } + + // Create another accumulator having a resource with different prefix + ra2 := accumulator.MakeEmptyAccumulator() + + m := resmaptest_test.NewRmBuilderDefault(t). + Add(map[string]interface{}{ + "apiVersion": "apps/v1", + "kind": "Deployment", + "metadata": map[string]interface{}{ + "name": "deploy2", + }, + "spec": map[string]interface{}{ + "template": map[string]interface{}{ + "spec": map[string]interface{}{ + "containers": []interface{}{ + map[string]interface{}{ + "command": []interface{}{ + "myserver", + "--somebackendService $(SUB_SERVICE_ONE)", + }, + }, + }, + }, + }, + }}). + // Make it seem like this resource + // went through a prefix transformer. + Add(map[string]interface{}{ + "apiVersion": "v1", + "kind": "Service", + "metadata": map[string]interface{}{ + "name": "sub-backendOne", + "annotations": map[string]interface{}{ + "internal.config.kubernetes.io/previousKinds": "Service", + "internal.config.kubernetes.io/previousNames": "backendOne", + "internal.config.kubernetes.io/previousNamespaces": "default", + "internal.config.kubernetes.io/prefixes": "sub-", + }, + }}).ResMap() + + err = ra2.AppendAll(m) + if err != nil { + t.Fatalf("unexpected err: %v", err) + } + + err = ra2.MergeVars([]types.Var{ + { + Name: "SUB_SERVICE_ONE", + ObjRef: types.Target{ + Gvk: resid.Gvk{Version: "v1", Kind: "Service"}, + Name: "backendOne", + }, + }, + }) + if err != nil { + t.Fatalf("unexpected err: %v", err) + } + err = ra1.MergeAccumulator(ra2) + if err != nil { + t.Fatalf("unexpected err: %v", err) + } + + err = ra1.ResolveVars() + if err != nil { + t.Fatalf("unexpected err: %v", err) + } +} + +func find(name string, resMap resmap.ResMap) *resource.Resource { + for _, r := range resMap.Resources() { + if r.GetName() == name { + return r + } + } + return nil +} + +// Assumes arg is a deployment, returns the command of first container. +func getCommand(r *resource.Resource) string { + var m map[string]interface{} + var c []interface{} + resourceMap, _ := r.Map() + m, _ = resourceMap["spec"].(map[string]interface{}) + m, _ = m["template"].(map[string]interface{}) + m, _ = m["spec"].(map[string]interface{}) + c, _ = m["containers"].([]interface{}) + m, _ = c[0].(map[string]interface{}) + + cmd, _ := m["command"].([]interface{}) + n := make([]string, len(cmd)) + for i, v := range cmd { + n[i] = v.(string) + } + return strings.Join(n, " ") +} diff --git a/go/internal/forked/api/internal/accumulator/resaccumulator_test.go b/go/internal/forked/api/internal/accumulator/resaccumulator_test.go new file mode 100644 index 000000000..87c9dd5e2 --- /dev/null +++ b/go/internal/forked/api/internal/accumulator/resaccumulator_test.go @@ -0,0 +1,426 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package accumulator_test + +import ( + "bytes" + "log" + "os" + "strings" + "testing" + + "github.com/stretchr/testify/require" + "sigs.k8s.io/kustomize/api/internal/accumulator" + "sigs.k8s.io/kustomize/api/internal/plugins/builtinconfig" + "sigs.k8s.io/kustomize/api/provider" + "sigs.k8s.io/kustomize/api/resmap" + "sigs.k8s.io/kustomize/api/resource" + resmaptest_test "sigs.k8s.io/kustomize/api/testutils/resmaptest" + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/resid" +) + +func makeResAccumulator(t *testing.T) *accumulator.ResAccumulator { + ra := accumulator.MakeEmptyAccumulator() + err := ra.MergeConfig(builtinconfig.MakeDefaultConfig()) + if err != nil { + t.Fatalf("unexpected err: %v", err) + } + err = ra.AppendAll( + resmaptest_test.NewRmBuilderDefault(t). + Add(map[string]interface{}{ + "apiVersion": "apps/v1", + "kind": "Deployment", + "metadata": map[string]interface{}{ + "name": "deploy1", + }, + "spec": map[string]interface{}{ + "template": map[string]interface{}{ + "spec": map[string]interface{}{ + "containers": []interface{}{ + map[string]interface{}{ + "command": []interface{}{ + "myserver", + "--somebackendService $(SERVICE_ONE)", + "--yetAnother $(SERVICE_TWO)", + }, + }, + }, + }, + }, + }}). + Add(map[string]interface{}{ + "apiVersion": "v1", + "kind": "Service", + "metadata": map[string]interface{}{ + "name": "backendOne", + }}). + Add(map[string]interface{}{ + "apiVersion": "v1", + "kind": "Service", + "metadata": map[string]interface{}{ + "name": "backendTwo", + }}).ResMap()) + if err != nil { + t.Fatalf("unexpected err: %v", err) + } + return ra +} + +func TestResolveVarsHappy(t *testing.T) { + ra := makeResAccumulator(t) + err := ra.MergeVars([]types.Var{ + { + Name: "SERVICE_ONE", + ObjRef: types.Target{ + Gvk: resid.Gvk{Version: "v1", Kind: "Service"}, + Name: "backendOne"}, + }, + { + Name: "SERVICE_TWO", + ObjRef: types.Target{ + Gvk: resid.Gvk{Version: "v1", Kind: "Service"}, + Name: "backendTwo"}, + }, + }) + if err != nil { + t.Fatalf("unexpected err: %v", err) + } + err = ra.ResolveVars() + if err != nil { + t.Fatalf("unexpected err: %v", err) + } + c := getCommand(find("deploy1", ra.ResMap())) + if c != "myserver --somebackendService backendOne --yetAnother backendTwo" { + t.Fatalf("unexpected command: %s", c) + } +} + +func TestResolveVarsOneUnused(t *testing.T) { + ra := makeResAccumulator(t) + err := ra.MergeVars([]types.Var{ + { + Name: "SERVICE_ONE", + ObjRef: types.Target{ + Gvk: resid.Gvk{Version: "v1", Kind: "Service"}, + Name: "backendOne"}, + }, + { + Name: "SERVICE_UNUSED", + ObjRef: types.Target{ + Gvk: resid.Gvk{Version: "v1", Kind: "Service"}, + Name: "backendTwo"}, + }, + }) + if err != nil { + t.Fatalf("unexpected err: %v", err) + } + var buf bytes.Buffer + log.SetOutput(&buf) + defer func() { + log.SetOutput(os.Stderr) + }() + err = ra.ResolveVars() + if err != nil { + t.Fatalf("unexpected err: %v", err) + } + expectLog(t, buf, "well-defined vars that were never replaced: SERVICE_UNUSED") + c := getCommand(find("deploy1", ra.ResMap())) + if c != "myserver --somebackendService backendOne --yetAnother $(SERVICE_TWO)" { + t.Fatalf("unexpected command: %s", c) + } +} + +func expectLog(t *testing.T, log bytes.Buffer, expect string) { + if !strings.Contains(log.String(), expect) { + t.Fatalf("expected log containing '%s', got '%s'", expect, log.String()) + } +} + +func TestResolveVarsVarNeedsDisambiguation(t *testing.T) { + ra := makeResAccumulator(t) + rm0 := resmap.New() + err := rm0.Append( + provider.NewDefaultDepProvider().GetResourceFactory().FromMap( + map[string]interface{}{ + "apiVersion": "v1", + "kind": "Service", + "metadata": map[string]interface{}{ + "name": "backendOne", + "namespace": "fooNamespace", + }, + })) + if err != nil { + t.Fatalf("unexpected err: %v", err) + } + err = ra.AppendAll(rm0) + if err != nil { + t.Fatalf("unexpected err: %v", err) + } + + err = ra.MergeVars([]types.Var{ + { + Name: "SERVICE_ONE", + ObjRef: types.Target{ + Gvk: resid.Gvk{Version: "v1", Kind: "Service"}, + Name: "backendOne", + }, + }, + }) + if err == nil { + t.Fatalf("expected error") + } + if !strings.Contains( + err.Error(), "unable to disambiguate") { + t.Fatalf("unexpected err: %v", err) + } +} + +func makeNamespacedConfigMapWithDataProviderValue( + namespace string, + value string, +) map[string]interface{} { + return map[string]interface{}{ + "apiVersion": "v1", + "kind": "ConfigMap", + "metadata": map[string]interface{}{ + "name": "environment", + "namespace": namespace, + }, + "data": map[string]interface{}{ + "provider": value, + }, + } +} + +func makeVarToNamepaceAndPath( + name string, + namespace string, + path string, +) types.Var { + return types.Var{ + Name: name, + ObjRef: types.Target{ + Gvk: resid.Gvk{Version: "v1", Kind: "ConfigMap"}, + Name: "environment", + Namespace: namespace, + }, + FieldRef: types.FieldSelector{FieldPath: path}, + } +} + +func TestResolveVarConflicts(t *testing.T) { + rf := provider.NewDefaultDepProvider().GetResourceFactory() + // create configmaps in foo and bar namespaces with `data.provider` values. + fooAws := makeNamespacedConfigMapWithDataProviderValue("foo", "aws") + barAws := makeNamespacedConfigMapWithDataProviderValue("bar", "aws") + barGcp := makeNamespacedConfigMapWithDataProviderValue("bar", "gcp") + + // create two variables with (apparently) conflicting names that point to + // fieldpaths that could be generalized. + varFoo := makeVarToNamepaceAndPath("PROVIDER", "foo", "data.provider") + varBar := makeVarToNamepaceAndPath("PROVIDER", "bar", "data.provider") + + // create accumulators holding apparently conflicting vars that are not + // actually in conflict because they point to the same concrete value. + rm0 := resmap.New() + err := rm0.Append(rf.FromMap(fooAws)) + require.NoError(t, err) + ac0 := accumulator.MakeEmptyAccumulator() + err = ac0.AppendAll(rm0) + require.NoError(t, err) + err = ac0.MergeVars([]types.Var{varFoo}) + require.NoError(t, err) + + rm1 := resmap.New() + err = rm1.Append(rf.FromMap(barAws)) + require.NoError(t, err) + ac1 := accumulator.MakeEmptyAccumulator() + err = ac1.AppendAll(rm1) + require.NoError(t, err) + err = ac1.MergeVars([]types.Var{varBar}) + require.NoError(t, err) + + // validate that two vars of the same name which reference the same concrete + // value do not produce a conflict. + err = ac0.MergeAccumulator(ac1) + if err == nil { + t.Fatalf("see bug gh-1600") + } + + // create an accumulator will have an actually conflicting value with the + // two above (because it contains a variable whose name is used in the other + // accumulators AND whose concrete values are different). + rm2 := resmap.New() + err = rm2.Append(rf.FromMap(barGcp)) + require.NoError(t, err) + ac2 := accumulator.MakeEmptyAccumulator() + err = ac2.AppendAll(rm2) + require.NoError(t, err) + err = ac2.MergeVars([]types.Var{varBar}) + require.NoError(t, err) + err = ac1.MergeAccumulator(ac2) + if err == nil { + t.Fatalf("dupe vars w/ different concrete values should conflict") + } +} + +func TestResolveVarsGoodResIdBadField(t *testing.T) { + ra := makeResAccumulator(t) + err := ra.MergeVars([]types.Var{ + { + Name: "SERVICE_ONE", + ObjRef: types.Target{ + Gvk: resid.Gvk{Version: "v1", Kind: "Service"}, + Name: "backendOne"}, + FieldRef: types.FieldSelector{FieldPath: "nope_nope_nope"}, + }, + }) + if err != nil { + t.Fatalf("unexpected err: %v", err) + } + err = ra.ResolveVars() + if err == nil { + t.Fatalf("expected error") + } + if !strings.Contains( + err.Error(), + "not found in corresponding resource") { + t.Fatalf("unexpected err: %v", err) + } +} + +func TestResolveVarsUnmappableVar(t *testing.T) { + ra := makeResAccumulator(t) + err := ra.MergeVars([]types.Var{ + { + Name: "SERVICE_THREE", + ObjRef: types.Target{ + Gvk: resid.Gvk{Version: "v1", Kind: "Service"}, + Name: "doesNotExist"}, + }, + }) + if err != nil { + t.Fatalf("unexpected err: %v", err) + } + err = ra.ResolveVars() + if err == nil { + t.Fatalf("expected error") + } + if !strings.Contains( + err.Error(), + "cannot be mapped to a field in the set of known resources") { + t.Fatalf("unexpected err: %v", err) + } +} + +func TestResolveVarsWithNoambiguation(t *testing.T) { + ra1 := makeResAccumulator(t) + err := ra1.MergeVars([]types.Var{ + { + Name: "SERVICE_ONE", + ObjRef: types.Target{ + Gvk: resid.Gvk{Version: "v1", Kind: "Service"}, + Name: "backendOne", + }, + }, + }) + if err != nil { + t.Fatalf("unexpected err: %v", err) + } + + // Create another accumulator having a resource with different prefix + ra2 := accumulator.MakeEmptyAccumulator() + + m := resmaptest_test.NewRmBuilderDefault(t). + Add(map[string]interface{}{ + "apiVersion": "apps/v1", + "kind": "Deployment", + "metadata": map[string]interface{}{ + "name": "deploy2", + }, + "spec": map[string]interface{}{ + "template": map[string]interface{}{ + "spec": map[string]interface{}{ + "containers": []interface{}{ + map[string]interface{}{ + "command": []interface{}{ + "myserver", + "--somebackendService $(SUB_SERVICE_ONE)", + }, + }, + }, + }, + }, + }}). + // Make it seem like this resource + // went through a prefix transformer. + Add(map[string]interface{}{ + "apiVersion": "v1", + "kind": "Service", + "metadata": map[string]interface{}{ + "name": "sub-backendOne", + "annotations": map[string]interface{}{ + "internal.config.kubernetes.io/previousKinds": "Service", + "internal.config.kubernetes.io/previousNames": "backendOne", + "internal.config.kubernetes.io/previousNamespaces": "default", + "internal.config.kubernetes.io/prefixes": "sub-", + }, + }}).ResMap() + + err = ra2.AppendAll(m) + if err != nil { + t.Fatalf("unexpected err: %v", err) + } + + err = ra2.MergeVars([]types.Var{ + { + Name: "SUB_SERVICE_ONE", + ObjRef: types.Target{ + Gvk: resid.Gvk{Version: "v1", Kind: "Service"}, + Name: "backendOne", + }, + }, + }) + if err != nil { + t.Fatalf("unexpected err: %v", err) + } + err = ra1.MergeAccumulator(ra2) + if err != nil { + t.Fatalf("unexpected err: %v", err) + } + + err = ra1.ResolveVars() + if err != nil { + t.Fatalf("unexpected err: %v", err) + } +} + +func find(name string, resMap resmap.ResMap) *resource.Resource { + for _, r := range resMap.Resources() { + if r.GetName() == name { + return r + } + } + return nil +} + +// Assumes arg is a deployment, returns the command of first container. +func getCommand(r *resource.Resource) string { + var m map[string]interface{} + var c []interface{} + resourceMap, _ := r.Map() + m, _ = resourceMap["spec"].(map[string]interface{}) + m, _ = m["template"].(map[string]interface{}) + m, _ = m["spec"].(map[string]interface{}) + c, _ = m["containers"].([]interface{}) + m, _ = c[0].(map[string]interface{}) + + cmd, _ := m["command"].([]interface{}) + n := make([]string, len(cmd)) + for i, v := range cmd { + n[i] = v.(string) + } + return strings.Join(n, " ") +} diff --git a/go/internal/forked/api/internal/builtins/AnnotationsTransformer.go b/go/internal/forked/api/internal/builtins/AnnotationsTransformer.go new file mode 100644 index 000000000..7064fa80c --- /dev/null +++ b/go/internal/forked/api/internal/builtins/AnnotationsTransformer.go @@ -0,0 +1,38 @@ +// Code generated by pluginator on AnnotationsTransformer; DO NOT EDIT. +// pluginator {unknown 1970-01-01T00:00:00Z } + +package builtins + +import ( + "sigs.k8s.io/kustomize/api/filters/annotations" + "sigs.k8s.io/kustomize/api/resmap" + "sigs.k8s.io/kustomize/api/types" + "sigs.k8s.io/yaml" +) + +// Add the given annotations to the given field specifications. +type AnnotationsTransformerPlugin struct { + Annotations map[string]string `json:"annotations,omitempty" yaml:"annotations,omitempty"` + FieldSpecs []types.FieldSpec `json:"fieldSpecs,omitempty" yaml:"fieldSpecs,omitempty"` +} + +func (p *AnnotationsTransformerPlugin) Config( + _ *resmap.PluginHelpers, c []byte) (err error) { + p.Annotations = nil + p.FieldSpecs = nil + return yaml.Unmarshal(c, p) +} + +func (p *AnnotationsTransformerPlugin) Transform(m resmap.ResMap) error { + if len(p.Annotations) == 0 { + return nil + } + return m.ApplyFilter(annotations.Filter{ + Annotations: p.Annotations, + FsSlice: p.FieldSpecs, + }) +} + +func NewAnnotationsTransformerPlugin() resmap.TransformerPlugin { + return &AnnotationsTransformerPlugin{} +} diff --git a/go/internal/forked/api/internal/builtins/ConfigMapGenerator.go b/go/internal/forked/api/internal/builtins/ConfigMapGenerator.go new file mode 100644 index 000000000..d853a1cfd --- /dev/null +++ b/go/internal/forked/api/internal/builtins/ConfigMapGenerator.go @@ -0,0 +1,39 @@ +// Code generated by pluginator on ConfigMapGenerator; DO NOT EDIT. +// pluginator {unknown 1970-01-01T00:00:00Z } + +package builtins + +import ( + "sigs.k8s.io/kustomize/api/kv" + "sigs.k8s.io/kustomize/api/resmap" + "sigs.k8s.io/kustomize/api/types" + "sigs.k8s.io/yaml" +) + +type ConfigMapGeneratorPlugin struct { + h *resmap.PluginHelpers + types.ObjectMeta `json:"metadata,omitempty" yaml:"metadata,omitempty" protobuf:"bytes,1,opt,name=metadata"` + types.ConfigMapArgs +} + +func (p *ConfigMapGeneratorPlugin) Config(h *resmap.PluginHelpers, config []byte) (err error) { + p.ConfigMapArgs = types.ConfigMapArgs{} + err = yaml.Unmarshal(config, p) + if p.ConfigMapArgs.Name == "" { + p.ConfigMapArgs.Name = p.Name + } + if p.ConfigMapArgs.Namespace == "" { + p.ConfigMapArgs.Namespace = p.Namespace + } + p.h = h + return +} + +func (p *ConfigMapGeneratorPlugin) Generate() (resmap.ResMap, error) { + return p.h.ResmapFactory().FromConfigMapArgs( + kv.NewLoader(p.h.Loader(), p.h.Validator()), p.ConfigMapArgs) +} + +func NewConfigMapGeneratorPlugin() resmap.GeneratorPlugin { + return &ConfigMapGeneratorPlugin{} +} diff --git a/go/internal/forked/api/internal/builtins/HashTransformer.go b/go/internal/forked/api/internal/builtins/HashTransformer.go new file mode 100644 index 000000000..54586beeb --- /dev/null +++ b/go/internal/forked/api/internal/builtins/HashTransformer.go @@ -0,0 +1,40 @@ +// Code generated by pluginator on HashTransformer; DO NOT EDIT. +// pluginator {unknown 1970-01-01T00:00:00Z } + +package builtins + +import ( + "fmt" + + "sigs.k8s.io/kustomize/api/ifc" + "sigs.k8s.io/kustomize/api/resmap" +) + +type HashTransformerPlugin struct { + hasher ifc.KustHasher +} + +func (p *HashTransformerPlugin) Config( + h *resmap.PluginHelpers, _ []byte) (err error) { + p.hasher = h.ResmapFactory().RF().Hasher() + return nil +} + +// Transform appends hash to generated resources. +func (p *HashTransformerPlugin) Transform(m resmap.ResMap) error { + for _, res := range m.Resources() { + if res.NeedHashSuffix() { + h, err := res.Hash(p.hasher) + if err != nil { + return err + } + res.StorePreviousId() + res.SetName(fmt.Sprintf("%s-%s", res.GetName(), h)) + } + } + return nil +} + +func NewHashTransformerPlugin() resmap.TransformerPlugin { + return &HashTransformerPlugin{} +} diff --git a/go/internal/forked/api/internal/builtins/HelmChartInflationGenerator.go b/go/internal/forked/api/internal/builtins/HelmChartInflationGenerator.go new file mode 100644 index 000000000..2a654ad1f --- /dev/null +++ b/go/internal/forked/api/internal/builtins/HelmChartInflationGenerator.go @@ -0,0 +1,339 @@ +// Code generated by pluginator on HelmChartInflationGenerator; DO NOT EDIT. +// pluginator {unknown 1970-01-01T00:00:00Z } + +package builtins + +import ( + "bytes" + "fmt" + "io/ioutil" + "os" + "os/exec" + "path/filepath" + "regexp" + "strings" + + "github.com/imdario/mergo" + "github.com/pkg/errors" + "sigs.k8s.io/kustomize/api/resmap" + "sigs.k8s.io/kustomize/api/types" + "sigs.k8s.io/yaml" +) + +// HelmChartInflationGeneratorPlugin is a plugin to generate resources +// from a remote or local helm chart. +type HelmChartInflationGeneratorPlugin struct { + h *resmap.PluginHelpers + types.HelmGlobals + types.HelmChart + tmpDir string +} + +var KustomizePlugin HelmChartInflationGeneratorPlugin + +const ( + valuesMergeOptionMerge = "merge" + valuesMergeOptionOverride = "override" + valuesMergeOptionReplace = "replace" +) + +var legalMergeOptions = []string{ + valuesMergeOptionMerge, + valuesMergeOptionOverride, + valuesMergeOptionReplace, +} + +// Config uses the input plugin configurations `config` to setup the generator +// options +func (p *HelmChartInflationGeneratorPlugin) Config( + h *resmap.PluginHelpers, config []byte) (err error) { + if h.GeneralConfig() == nil { + return fmt.Errorf("unable to access general config") + } + if !h.GeneralConfig().HelmConfig.Enabled { + return fmt.Errorf("must specify --enable-helm") + } + if h.GeneralConfig().HelmConfig.Command == "" { + return fmt.Errorf("must specify --helm-command") + } + p.h = h + if err = yaml.Unmarshal(config, p); err != nil { + return + } + return p.validateArgs() +} + +// This uses the real file system since tmpDir may be used +// by the helm subprocess. Cannot use a chroot jail or fake +// filesystem since we allow the user to use previously +// downloaded charts. This is safe since this plugin is +// owned by kustomize. +func (p *HelmChartInflationGeneratorPlugin) establishTmpDir() (err error) { + if p.tmpDir != "" { + // already done. + return nil + } + p.tmpDir, err = ioutil.TempDir("", "kustomize-helm-") + return err +} + +func (p *HelmChartInflationGeneratorPlugin) validateArgs() (err error) { + if p.Name == "" { + return fmt.Errorf("chart name cannot be empty") + } + + // ChartHome might be consulted by the plugin (to read + // values files below it), so it must be located under + // the loader root (unless root restrictions are + // disabled, in which case this can be an absolute path). + if p.ChartHome == "" { + p.ChartHome = "charts" + } + + // The ValuesFile may be consulted by the plugin, so it must + // be under the loader root (unless root restrictions are + // disabled). + if p.ValuesFile == "" { + p.ValuesFile = filepath.Join(p.ChartHome, p.Name, "values.yaml") + } + + if err = p.errIfIllegalValuesMerge(); err != nil { + return err + } + + // ConfigHome is not loaded by the plugin, and can be located anywhere. + if p.ConfigHome == "" { + if err = p.establishTmpDir(); err != nil { + return errors.Wrap( + err, "unable to create tmp dir for HELM_CONFIG_HOME") + } + p.ConfigHome = filepath.Join(p.tmpDir, "helm") + } + return nil +} + +func (p *HelmChartInflationGeneratorPlugin) errIfIllegalValuesMerge() error { + if p.ValuesMerge == "" { + // Use the default. + p.ValuesMerge = valuesMergeOptionOverride + return nil + } + for _, opt := range legalMergeOptions { + if p.ValuesMerge == opt { + return nil + } + } + return fmt.Errorf("valuesMerge must be one of %v", legalMergeOptions) +} + +func (p *HelmChartInflationGeneratorPlugin) absChartHome() string { + if filepath.IsAbs(p.ChartHome) { + return p.ChartHome + } + return filepath.Join(p.h.Loader().Root(), p.ChartHome) +} + +func (p *HelmChartInflationGeneratorPlugin) runHelmCommand( + args []string) ([]byte, error) { + stdout := new(bytes.Buffer) + stderr := new(bytes.Buffer) + cmd := exec.Command(p.h.GeneralConfig().HelmConfig.Command, args...) + cmd.Stdout = stdout + cmd.Stderr = stderr + env := []string{ + fmt.Sprintf("HELM_CONFIG_HOME=%s", p.ConfigHome), + fmt.Sprintf("HELM_CACHE_HOME=%s/.cache", p.ConfigHome), + fmt.Sprintf("HELM_DATA_HOME=%s/.data", p.ConfigHome)} + cmd.Env = append(os.Environ(), env...) + err := cmd.Run() + if err != nil { + helm := p.h.GeneralConfig().HelmConfig.Command + err = errors.Wrap( + fmt.Errorf( + "unable to run: '%s %s' with env=%s (is '%s' installed?)", + helm, strings.Join(args, " "), env, helm), + stderr.String(), + ) + } + return stdout.Bytes(), err +} + +// createNewMergedValuesFile replaces/merges original values file with ValuesInline. +func (p *HelmChartInflationGeneratorPlugin) createNewMergedValuesFile() ( + path string, err error) { + if p.ValuesMerge == valuesMergeOptionMerge || + p.ValuesMerge == valuesMergeOptionOverride { + if err = p.replaceValuesInline(); err != nil { + return "", err + } + } + var b []byte + b, err = yaml.Marshal(p.ValuesInline) + if err != nil { + return "", err + } + return p.writeValuesBytes(b) +} + +func (p *HelmChartInflationGeneratorPlugin) replaceValuesInline() error { + pValues, err := p.h.Loader().Load(p.ValuesFile) + if err != nil { + return err + } + chValues := make(map[string]interface{}) + if err = yaml.Unmarshal(pValues, &chValues); err != nil { + return err + } + switch p.ValuesMerge { + case valuesMergeOptionOverride: + err = mergo.Merge( + &chValues, p.ValuesInline, mergo.WithOverride) + case valuesMergeOptionMerge: + err = mergo.Merge(&chValues, p.ValuesInline) + } + p.ValuesInline = chValues + return err +} + +// copyValuesFile to avoid branching. TODO: get rid of this. +func (p *HelmChartInflationGeneratorPlugin) copyValuesFile() (string, error) { + b, err := p.h.Loader().Load(p.ValuesFile) + if err != nil { + return "", err + } + return p.writeValuesBytes(b) +} + +// Write a absolute path file in the tmp file system. +func (p *HelmChartInflationGeneratorPlugin) writeValuesBytes( + b []byte) (string, error) { + if err := p.establishTmpDir(); err != nil { + return "", fmt.Errorf("cannot create tmp dir to write helm values") + } + path := filepath.Join(p.tmpDir, p.Name+"-kustomize-values.yaml") + return path, ioutil.WriteFile(path, b, 0644) +} + +func (p *HelmChartInflationGeneratorPlugin) cleanup() { + if p.tmpDir != "" { + os.RemoveAll(p.tmpDir) + } +} + +// Generate implements generator +func (p *HelmChartInflationGeneratorPlugin) Generate() (rm resmap.ResMap, err error) { + defer p.cleanup() + if err = p.checkHelmVersion(); err != nil { + return nil, err + } + if path, exists := p.chartExistsLocally(); !exists { + if p.Repo == "" { + return nil, fmt.Errorf( + "no repo specified for pull, no chart found at '%s'", path) + } + if _, err := p.runHelmCommand(p.pullCommand()); err != nil { + return nil, err + } + } + if len(p.ValuesInline) > 0 { + p.ValuesFile, err = p.createNewMergedValuesFile() + } else { + p.ValuesFile, err = p.copyValuesFile() + } + if err != nil { + return nil, err + } + var stdout []byte + stdout, err = p.runHelmCommand(p.templateCommand()) + if err != nil { + return nil, err + } + + rm, err = p.h.ResmapFactory().NewResMapFromBytes(stdout) + if err == nil { + return rm, nil + } + // try to remove the contents before first "---" because + // helm may produce messages to stdout before it + stdoutStr := string(stdout) + if idx := strings.Index(stdoutStr, "---"); idx != -1 { + return p.h.ResmapFactory().NewResMapFromBytes([]byte(stdoutStr[idx:])) + } + return nil, err +} + +func (p *HelmChartInflationGeneratorPlugin) templateCommand() []string { + args := []string{"template"} + if p.ReleaseName != "" { + args = append(args, p.ReleaseName) + } + if p.Namespace != "" { + args = append(args, "--namespace", p.Namespace) + } + args = append(args, filepath.Join(p.absChartHome(), p.Name)) + if p.ValuesFile != "" { + args = append(args, "--values", p.ValuesFile) + } + if p.ReleaseName == "" { + // AFAICT, this doesn't work as intended due to a bug in helm. + // See https://github.com/helm/helm/issues/6019 + // I've tried placing the flag before and after the name argument. + args = append(args, "--generate-name") + } + if p.IncludeCRDs { + args = append(args, "--include-crds") + } + return args +} + +func (p *HelmChartInflationGeneratorPlugin) pullCommand() []string { + args := []string{ + "pull", + "--untar", + "--untardir", p.absChartHome(), + "--repo", p.Repo, + p.Name} + if p.Version != "" { + args = append(args, "--version", p.Version) + } + return args +} + +// chartExistsLocally will return true if the chart does exist in +// local chart home. +func (p *HelmChartInflationGeneratorPlugin) chartExistsLocally() (string, bool) { + path := filepath.Join(p.absChartHome(), p.Name) + s, err := os.Stat(path) + if err != nil { + return "", false + } + return path, s.IsDir() +} + +// checkHelmVersion will return an error if the helm version is not V3 +func (p *HelmChartInflationGeneratorPlugin) checkHelmVersion() error { + stdout, err := p.runHelmCommand([]string{"version", "-c", "--short"}) + if err != nil { + return err + } + r, err := regexp.Compile(`v?\d+(\.\d+)+`) + if err != nil { + return err + } + v := r.FindString(string(stdout)) + if v == "" { + return fmt.Errorf("cannot find version string in %s", string(stdout)) + } + if v[0] == 'v' { + v = v[1:] + } + majorVersion := strings.Split(v, ".")[0] + if majorVersion != "3" { + return fmt.Errorf("this plugin requires helm V3 but got v%s", v) + } + return nil +} + +func NewHelmChartInflationGeneratorPlugin() resmap.GeneratorPlugin { + return &HelmChartInflationGeneratorPlugin{} +} diff --git a/go/internal/forked/api/internal/builtins/IAMPolicyGenerator.go b/go/internal/forked/api/internal/builtins/IAMPolicyGenerator.go new file mode 100644 index 000000000..82a2dd603 --- /dev/null +++ b/go/internal/forked/api/internal/builtins/IAMPolicyGenerator.go @@ -0,0 +1,33 @@ +// Code generated by pluginator on IAMPolicyGenerator; DO NOT EDIT. +// pluginator {unknown 1970-01-01T00:00:00Z } + +package builtins + +import ( + "sigs.k8s.io/kustomize/api/filters/iampolicygenerator" + "sigs.k8s.io/kustomize/api/resmap" + "sigs.k8s.io/kustomize/api/types" + "sigs.k8s.io/yaml" +) + +type IAMPolicyGeneratorPlugin struct { + types.IAMPolicyGeneratorArgs +} + +func (p *IAMPolicyGeneratorPlugin) Config(h *resmap.PluginHelpers, config []byte) (err error) { + p.IAMPolicyGeneratorArgs = types.IAMPolicyGeneratorArgs{} + err = yaml.Unmarshal(config, p) + return +} + +func (p *IAMPolicyGeneratorPlugin) Generate() (resmap.ResMap, error) { + r := resmap.New() + err := r.ApplyFilter(iampolicygenerator.Filter{ + IAMPolicyGenerator: p.IAMPolicyGeneratorArgs, + }) + return r, err +} + +func NewIAMPolicyGeneratorPlugin() resmap.GeneratorPlugin { + return &IAMPolicyGeneratorPlugin{} +} diff --git a/go/internal/forked/api/internal/builtins/ImageTagTransformer.go b/go/internal/forked/api/internal/builtins/ImageTagTransformer.go new file mode 100644 index 000000000..52a44d385 --- /dev/null +++ b/go/internal/forked/api/internal/builtins/ImageTagTransformer.go @@ -0,0 +1,41 @@ +// Code generated by pluginator on ImageTagTransformer; DO NOT EDIT. +// pluginator {unknown 1970-01-01T00:00:00Z } + +package builtins + +import ( + "sigs.k8s.io/kustomize/api/filters/imagetag" + "sigs.k8s.io/kustomize/api/resmap" + "sigs.k8s.io/kustomize/api/types" + "sigs.k8s.io/yaml" +) + +// Find matching image declarations and replace +// the name, tag and/or digest. +type ImageTagTransformerPlugin struct { + ImageTag types.Image `json:"imageTag,omitempty" yaml:"imageTag,omitempty"` + FieldSpecs []types.FieldSpec `json:"fieldSpecs,omitempty" yaml:"fieldSpecs,omitempty"` +} + +func (p *ImageTagTransformerPlugin) Config( + _ *resmap.PluginHelpers, c []byte) (err error) { + p.ImageTag = types.Image{} + p.FieldSpecs = nil + return yaml.Unmarshal(c, p) +} + +func (p *ImageTagTransformerPlugin) Transform(m resmap.ResMap) error { + if err := m.ApplyFilter(imagetag.LegacyFilter{ + ImageTag: p.ImageTag, + }); err != nil { + return err + } + return m.ApplyFilter(imagetag.Filter{ + ImageTag: p.ImageTag, + FsSlice: p.FieldSpecs, + }) +} + +func NewImageTagTransformerPlugin() resmap.TransformerPlugin { + return &ImageTagTransformerPlugin{} +} diff --git a/go/internal/forked/api/internal/builtins/LabelTransformer.go b/go/internal/forked/api/internal/builtins/LabelTransformer.go new file mode 100644 index 000000000..af601da5b --- /dev/null +++ b/go/internal/forked/api/internal/builtins/LabelTransformer.go @@ -0,0 +1,38 @@ +// Code generated by pluginator on LabelTransformer; DO NOT EDIT. +// pluginator {unknown 1970-01-01T00:00:00Z } + +package builtins + +import ( + "sigs.k8s.io/kustomize/api/filters/labels" + "sigs.k8s.io/kustomize/api/resmap" + "sigs.k8s.io/kustomize/api/types" + "sigs.k8s.io/yaml" +) + +// Add the given labels to the given field specifications. +type LabelTransformerPlugin struct { + Labels map[string]string `json:"labels,omitempty" yaml:"labels,omitempty"` + FieldSpecs []types.FieldSpec `json:"fieldSpecs,omitempty" yaml:"fieldSpecs,omitempty"` +} + +func (p *LabelTransformerPlugin) Config( + _ *resmap.PluginHelpers, c []byte) (err error) { + p.Labels = nil + p.FieldSpecs = nil + return yaml.Unmarshal(c, p) +} + +func (p *LabelTransformerPlugin) Transform(m resmap.ResMap) error { + if len(p.Labels) == 0 { + return nil + } + return m.ApplyFilter(labels.Filter{ + Labels: p.Labels, + FsSlice: p.FieldSpecs, + }) +} + +func NewLabelTransformerPlugin() resmap.TransformerPlugin { + return &LabelTransformerPlugin{} +} diff --git a/go/internal/forked/api/internal/builtins/LegacyOrderTransformer.go b/go/internal/forked/api/internal/builtins/LegacyOrderTransformer.go new file mode 100644 index 000000000..322cea93a --- /dev/null +++ b/go/internal/forked/api/internal/builtins/LegacyOrderTransformer.go @@ -0,0 +1,46 @@ +// Code generated by pluginator on LegacyOrderTransformer; DO NOT EDIT. +// pluginator {unknown 1970-01-01T00:00:00Z } + +package builtins + +import ( + "sort" + + "github.com/pkg/errors" + "sigs.k8s.io/kustomize/api/resmap" + "sigs.k8s.io/kustomize/api/resource" +) + +// Sort the resources using an ordering defined in the Gvk class. +// This puts cluster-wide basic resources with no +// dependencies (like Namespace, StorageClass, etc.) +// first, and resources with a high number of dependencies +// (like ValidatingWebhookConfiguration) last. +type LegacyOrderTransformerPlugin struct{} + +// Nothing needed for configuration. +func (p *LegacyOrderTransformerPlugin) Config( + _ *resmap.PluginHelpers, _ []byte) (err error) { + return nil +} + +func (p *LegacyOrderTransformerPlugin) Transform(m resmap.ResMap) (err error) { + resources := make([]*resource.Resource, m.Size()) + ids := m.AllIds() + sort.Sort(resmap.IdSlice(ids)) + for i, id := range ids { + resources[i], err = m.GetByCurrentId(id) + if err != nil { + return errors.Wrap(err, "expected match for sorting") + } + } + m.Clear() + for _, r := range resources { + m.Append(r) + } + return nil +} + +func NewLegacyOrderTransformerPlugin() resmap.TransformerPlugin { + return &LegacyOrderTransformerPlugin{} +} diff --git a/go/internal/forked/api/internal/builtins/NamespaceTransformer.go b/go/internal/forked/api/internal/builtins/NamespaceTransformer.go new file mode 100644 index 000000000..39a514e8e --- /dev/null +++ b/go/internal/forked/api/internal/builtins/NamespaceTransformer.go @@ -0,0 +1,55 @@ +// Code generated by pluginator on NamespaceTransformer; DO NOT EDIT. +// pluginator {unknown 1970-01-01T00:00:00Z } + +package builtins + +import ( + "fmt" + + "sigs.k8s.io/kustomize/api/filters/namespace" + "sigs.k8s.io/kustomize/api/resmap" + "sigs.k8s.io/kustomize/api/types" + "sigs.k8s.io/yaml" +) + +// Change or set the namespace of non-cluster level resources. +type NamespaceTransformerPlugin struct { + types.ObjectMeta `json:"metadata,omitempty" yaml:"metadata,omitempty" protobuf:"bytes,1,opt,name=metadata"` + FieldSpecs []types.FieldSpec `json:"fieldSpecs,omitempty" yaml:"fieldSpecs,omitempty"` +} + +func (p *NamespaceTransformerPlugin) Config( + _ *resmap.PluginHelpers, c []byte) (err error) { + p.Namespace = "" + p.FieldSpecs = nil + return yaml.Unmarshal(c, p) +} + +func (p *NamespaceTransformerPlugin) Transform(m resmap.ResMap) error { + if len(p.Namespace) == 0 { + return nil + } + for _, r := range m.Resources() { + if r.IsNilOrEmpty() { + // Don't mutate empty objects? + continue + } + r.StorePreviousId() + if err := r.ApplyFilter(namespace.Filter{ + Namespace: p.Namespace, + FsSlice: p.FieldSpecs, + }); err != nil { + return err + } + matches := m.GetMatchingResourcesByCurrentId(r.CurId().Equals) + if len(matches) != 1 { + return fmt.Errorf( + "namespace transformation produces ID conflict: %+v", matches) + } + } + return nil +} + +func NewNamespaceTransformerPlugin() resmap.TransformerPlugin { + return &NamespaceTransformerPlugin{} +} diff --git a/go/internal/forked/api/internal/builtins/PatchJson6902Transformer.go b/go/internal/forked/api/internal/builtins/PatchJson6902Transformer.go new file mode 100644 index 000000000..935c7ca38 --- /dev/null +++ b/go/internal/forked/api/internal/builtins/PatchJson6902Transformer.go @@ -0,0 +1,105 @@ +// Code generated by pluginator on PatchJson6902Transformer; DO NOT EDIT. +// pluginator {unknown 1970-01-01T00:00:00Z } + +package builtins + +import ( + "fmt" + + jsonpatch "github.com/evanphx/json-patch" + "github.com/pkg/errors" + "sigs.k8s.io/kustomize/api/filters/patchjson6902" + "sigs.k8s.io/kustomize/api/ifc" + "sigs.k8s.io/kustomize/api/resmap" + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/kio/kioutil" + "sigs.k8s.io/yaml" +) + +type PatchJson6902TransformerPlugin struct { + ldr ifc.Loader + decodedPatch jsonpatch.Patch + Target *types.Selector `json:"target,omitempty" yaml:"target,omitempty"` + Path string `json:"path,omitempty" yaml:"path,omitempty"` + JsonOp string `json:"jsonOp,omitempty" yaml:"jsonOp,omitempty"` +} + +func (p *PatchJson6902TransformerPlugin) Config( + h *resmap.PluginHelpers, c []byte) (err error) { + p.ldr = h.Loader() + err = yaml.Unmarshal(c, p) + if err != nil { + return err + } + if p.Target.Name == "" { + return fmt.Errorf("must specify the target name") + } + if p.Path == "" && p.JsonOp == "" { + return fmt.Errorf("empty file path and empty jsonOp") + } + if p.Path != "" { + if p.JsonOp != "" { + return fmt.Errorf("must specify a file path or jsonOp, not both") + } + rawOp, err := p.ldr.Load(p.Path) + if err != nil { + return err + } + p.JsonOp = string(rawOp) + if p.JsonOp == "" { + return fmt.Errorf("patch file '%s' empty seems to be empty", p.Path) + } + } + if p.JsonOp[0] != '[' { + // if it doesn't seem to be JSON, imagine + // it is YAML, and convert to JSON. + op, err := yaml.YAMLToJSON([]byte(p.JsonOp)) + if err != nil { + return err + } + p.JsonOp = string(op) + } + p.decodedPatch, err = jsonpatch.DecodePatch([]byte(p.JsonOp)) + if err != nil { + return errors.Wrapf(err, "decoding %s", p.JsonOp) + } + if len(p.decodedPatch) == 0 { + return fmt.Errorf( + "patch appears to be empty; file=%s, JsonOp=%s", p.Path, p.JsonOp) + } + return err +} + +func (p *PatchJson6902TransformerPlugin) Transform(m resmap.ResMap) error { + if p.Target == nil { + return fmt.Errorf("must specify a target for patch %s", p.JsonOp) + } + resources, err := m.Select(*p.Target) + if err != nil { + return err + } + for _, res := range resources { + internalAnnotations := kioutil.GetInternalAnnotations(&res.RNode) + + err = res.ApplyFilter(patchjson6902.Filter{ + Patch: p.JsonOp, + }) + if err != nil { + return err + } + + annotations := res.GetAnnotations() + for key, value := range internalAnnotations { + annotations[key] = value + } + err = res.SetAnnotations(annotations) + if err != nil { + return err + } + } + return nil +} + +func NewPatchJson6902TransformerPlugin() resmap.TransformerPlugin { + return &PatchJson6902TransformerPlugin{} +} diff --git a/go/internal/forked/api/internal/builtins/PatchJson6902Transformer.go b/go/internal/forked/api/internal/builtins/PatchJson6902Transformer.go new file mode 100644 index 000000000..5d0db3db4 --- /dev/null +++ b/go/internal/forked/api/internal/builtins/PatchJson6902Transformer.go @@ -0,0 +1,105 @@ +// Code generated by pluginator on PatchJson6902Transformer; DO NOT EDIT. +// pluginator {unknown 1970-01-01T00:00:00Z } + +package builtins + +import ( + "fmt" + + jsonpatch "github.com/evanphx/json-patch" + "github.com/pkg/errors" + "sigs.k8s.io/kustomize/api/filters/patchjson6902" + "sigs.k8s.io/kustomize/api/ifc" + "sigs.k8s.io/kustomize/api/resmap" + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/kio/kioutil" + "sigs.k8s.io/yaml" +) + +type PatchJson6902TransformerPlugin struct { + ldr ifc.Loader + decodedPatch jsonpatch.Patch + Target *types.Selector `json:"target,omitempty" yaml:"target,omitempty"` + Path string `json:"path,omitempty" yaml:"path,omitempty"` + JsonOp string `json:"jsonOp,omitempty" yaml:"jsonOp,omitempty"` +} + +func (p *PatchJson6902TransformerPlugin) Config( + h *resmap.PluginHelpers, c []byte) (err error) { + p.ldr = h.Loader() + err = yaml.Unmarshal(c, p) + if err != nil { + return err + } + if p.Target.Name == "" { + return fmt.Errorf("must specify the target name") + } + if p.Path == "" && p.JsonOp == "" { + return fmt.Errorf("empty file path and empty jsonOp") + } + if p.Path != "" { + if p.JsonOp != "" { + return fmt.Errorf("must specify a file path or jsonOp, not both") + } + rawOp, err := p.ldr.Load(p.Path) + if err != nil { + return err + } + p.JsonOp = string(rawOp) + if p.JsonOp == "" { + return fmt.Errorf("patch file '%s' empty seems to be empty", p.Path) + } + } + if p.JsonOp[0] != '[' { + // if it doesn't seem to be JSON, imagine + // it is YAML, and convert to JSON. + op, err := yaml.YAMLToJSON([]byte(p.JsonOp)) + if err != nil { + return err + } + p.JsonOp = string(op) + } + p.decodedPatch, err = jsonpatch.DecodePatch([]byte(p.JsonOp)) + if err != nil { + return errors.Wrapf(err, "decoding %s", p.JsonOp) + } + if len(p.decodedPatch) == 0 { + return fmt.Errorf( + "patch appears to be empty; file=%s, JsonOp=%s", p.Path, p.JsonOp) + } + return err +} + +func (p *PatchJson6902TransformerPlugin) Transform(m resmap.ResMap) error { + if p.Target == nil { + return fmt.Errorf("must specify a target for patch %s", p.JsonOp) + } + resources, err := m.Select(*p.Target) + if err != nil { + return err + } + for _, res := range resources { + internalAnnotations := kioutil.GetInternalAnnotations(&res.RNode) + + err = res.ApplyFilter(patchjson6902.Filter{ + Patch: p.JsonOp, + }) + if err != nil { + return err + } + + annotations := res.GetAnnotations() + for key, value := range internalAnnotations { + annotations[key] = value + } + err = res.SetAnnotations(annotations) + if err != nil { + return err + } + } + return nil +} + +func NewPatchJson6902TransformerPlugin() resmap.TransformerPlugin { + return &PatchJson6902TransformerPlugin{} +} diff --git a/go/internal/forked/api/internal/builtins/PatchStrategicMergeTransformer.go b/go/internal/forked/api/internal/builtins/PatchStrategicMergeTransformer.go new file mode 100644 index 000000000..f93d1266d --- /dev/null +++ b/go/internal/forked/api/internal/builtins/PatchStrategicMergeTransformer.go @@ -0,0 +1,89 @@ +// Code generated by pluginator on PatchStrategicMergeTransformer; DO NOT EDIT. +// pluginator {unknown 1970-01-01T00:00:00Z } + +package builtins + +import ( + "fmt" + + "sigs.k8s.io/kustomize/api/resmap" + "sigs.k8s.io/kustomize/api/resource" + "sigs.k8s.io/kustomize/api/types" + "sigs.k8s.io/yaml" +) + +type PatchStrategicMergeTransformerPlugin struct { + loadedPatches []*resource.Resource + Paths []types.PatchStrategicMerge `json:"paths,omitempty" yaml:"paths,omitempty"` + Patches string `json:"patches,omitempty" yaml:"patches,omitempty"` +} + +func (p *PatchStrategicMergeTransformerPlugin) Config( + h *resmap.PluginHelpers, c []byte) (err error) { + err = yaml.Unmarshal(c, p) + if err != nil { + return err + } + if len(p.Paths) == 0 && p.Patches == "" { + return fmt.Errorf("empty file path and empty patch content") + } + if len(p.Paths) != 0 { + patches, err := loadFromPaths(h, p.Paths) + if err != nil { + return err + } + p.loadedPatches = append(p.loadedPatches, patches...) + } + if p.Patches != "" { + patches, err := h.ResmapFactory().RF().SliceFromBytes([]byte(p.Patches)) + if err != nil { + return err + } + p.loadedPatches = append(p.loadedPatches, patches...) + } + if len(p.loadedPatches) == 0 { + return fmt.Errorf( + "patch appears to be empty; files=%v, Patch=%s", p.Paths, p.Patches) + } + return nil +} + +func loadFromPaths( + h *resmap.PluginHelpers, + paths []types.PatchStrategicMerge) ( + result []*resource.Resource, err error) { + var patches []*resource.Resource + for _, path := range paths { + // For legacy reasons, attempt to treat the path string as + // actual patch content. + patches, err = h.ResmapFactory().RF().SliceFromBytes([]byte(path)) + if err != nil { + // Failing that, treat it as a file path. + patches, err = h.ResmapFactory().RF().SliceFromPatches( + h.Loader(), []types.PatchStrategicMerge{path}) + if err != nil { + return + } + } + result = append(result, patches...) + } + return +} + +func (p *PatchStrategicMergeTransformerPlugin) Transform(m resmap.ResMap) error { + for _, patch := range p.loadedPatches { + target, err := m.GetById(patch.OrgId()) + if err != nil { + return err + } + if err = m.ApplySmPatch( + resource.MakeIdSet([]*resource.Resource{target}), patch); err != nil { + return err + } + } + return nil +} + +func NewPatchStrategicMergeTransformerPlugin() resmap.TransformerPlugin { + return &PatchStrategicMergeTransformerPlugin{} +} diff --git a/go/internal/forked/api/internal/builtins/PatchTransformer.go b/go/internal/forked/api/internal/builtins/PatchTransformer.go new file mode 100644 index 000000000..ddff60fcc --- /dev/null +++ b/go/internal/forked/api/internal/builtins/PatchTransformer.go @@ -0,0 +1,153 @@ +// Code generated by pluginator on PatchTransformer; DO NOT EDIT. +// pluginator {unknown 1970-01-01T00:00:00Z } + +package builtins + +import ( + "fmt" + "strings" + + jsonpatch "github.com/evanphx/json-patch" + "sigs.k8s.io/kustomize/api/filters/patchjson6902" + "sigs.k8s.io/kustomize/api/resmap" + "sigs.k8s.io/kustomize/api/resource" + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/kio/kioutil" + "sigs.k8s.io/yaml" +) + +type PatchTransformerPlugin struct { + loadedPatch *resource.Resource + decodedPatch jsonpatch.Patch + Path string `json:"path,omitempty" yaml:"path,omitempty"` + Patch string `json:"patch,omitempty" yaml:"patch,omitempty"` + Target *types.Selector `json:"target,omitempty" yaml:"target,omitempty"` + Options map[string]bool `json:"options,omitempty" yaml:"options,omitempty"` +} + +func (p *PatchTransformerPlugin) Config( + h *resmap.PluginHelpers, c []byte) error { + err := yaml.Unmarshal(c, p) + if err != nil { + return err + } + p.Patch = strings.TrimSpace(p.Patch) + if p.Patch == "" && p.Path == "" { + return fmt.Errorf( + "must specify one of patch and path in\n%s", string(c)) + } + if p.Patch != "" && p.Path != "" { + return fmt.Errorf( + "patch and path can't be set at the same time\n%s", string(c)) + } + if p.Path != "" { + loaded, loadErr := h.Loader().Load(p.Path) + if loadErr != nil { + return loadErr + } + p.Patch = string(loaded) + } + + patchSM, errSM := h.ResmapFactory().RF().FromBytes([]byte(p.Patch)) + patchJson, errJson := jsonPatchFromBytes([]byte(p.Patch)) + if (errSM == nil && errJson == nil) || + (patchSM != nil && patchJson != nil) { + return fmt.Errorf( + "illegally qualifies as both an SM and JSON patch: [%v]", + p.Patch) + } + if errSM != nil && errJson != nil { + return fmt.Errorf( + "unable to parse SM or JSON patch from [%v]", p.Patch) + } + if errSM == nil { + p.loadedPatch = patchSM + if p.Options["allowNameChange"] { + p.loadedPatch.AllowNameChange() + } + if p.Options["allowKindChange"] { + p.loadedPatch.AllowKindChange() + } + } else { + p.decodedPatch = patchJson + } + return nil +} + +func (p *PatchTransformerPlugin) Transform(m resmap.ResMap) error { + if p.loadedPatch == nil { + return p.transformJson6902(m, p.decodedPatch) + } + // The patch was a strategic merge patch + return p.transformStrategicMerge(m, p.loadedPatch) +} + +// transformStrategicMerge applies the provided strategic merge patch +// to all the resources in the ResMap that match either the Target or +// the identifier of the patch. +func (p *PatchTransformerPlugin) transformStrategicMerge(m resmap.ResMap, patch *resource.Resource) error { + if p.Target == nil { + target, err := m.GetById(patch.OrgId()) + if err != nil { + return err + } + return target.ApplySmPatch(patch) + } + selected, err := m.Select(*p.Target) + if err != nil { + return err + } + return m.ApplySmPatch(resource.MakeIdSet(selected), patch) +} + +// transformJson6902 applies the provided json6902 patch +// to all the resources in the ResMap that match the Target. +func (p *PatchTransformerPlugin) transformJson6902(m resmap.ResMap, patch jsonpatch.Patch) error { + if p.Target == nil { + return fmt.Errorf("must specify a target for patch %s", p.Patch) + } + resources, err := m.Select(*p.Target) + if err != nil { + return err + } + for _, res := range resources { + res.StorePreviousId() + internalAnnotations := kioutil.GetInternalAnnotations(&res.RNode) + err = res.ApplyFilter(patchjson6902.Filter{ + Patch: p.Patch, + }) + if err != nil { + return err + } + + annotations := res.GetAnnotations() + for key, value := range internalAnnotations { + annotations[key] = value + } + err = res.SetAnnotations(annotations) + } + return nil +} + +// jsonPatchFromBytes loads a Json 6902 patch from +// a bytes input +func jsonPatchFromBytes( + in []byte) (jsonpatch.Patch, error) { + ops := string(in) + if ops == "" { + return nil, fmt.Errorf("empty json patch operations") + } + + if ops[0] != '[' { + jsonOps, err := yaml.YAMLToJSON(in) + if err != nil { + return nil, err + } + ops = string(jsonOps) + } + return jsonpatch.DecodePatch([]byte(ops)) +} + +func NewPatchTransformerPlugin() resmap.TransformerPlugin { + return &PatchTransformerPlugin{} +} diff --git a/go/internal/forked/api/internal/builtins/PatchTransformer.go b/go/internal/forked/api/internal/builtins/PatchTransformer.go new file mode 100644 index 000000000..21d19d977 --- /dev/null +++ b/go/internal/forked/api/internal/builtins/PatchTransformer.go @@ -0,0 +1,153 @@ +// Code generated by pluginator on PatchTransformer; DO NOT EDIT. +// pluginator {unknown 1970-01-01T00:00:00Z } + +package builtins + +import ( + "fmt" + "strings" + + jsonpatch "github.com/evanphx/json-patch" + "sigs.k8s.io/kustomize/api/filters/patchjson6902" + "sigs.k8s.io/kustomize/api/resmap" + "sigs.k8s.io/kustomize/api/resource" + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/kio/kioutil" + "sigs.k8s.io/yaml" +) + +type PatchTransformerPlugin struct { + loadedPatch *resource.Resource + decodedPatch jsonpatch.Patch + Path string `json:"path,omitempty" yaml:"path,omitempty"` + Patch string `json:"patch,omitempty" yaml:"patch,omitempty"` + Target *types.Selector `json:"target,omitempty" yaml:"target,omitempty"` + Options map[string]bool `json:"options,omitempty" yaml:"options,omitempty"` +} + +func (p *PatchTransformerPlugin) Config( + h *resmap.PluginHelpers, c []byte) error { + err := yaml.Unmarshal(c, p) + if err != nil { + return err + } + p.Patch = strings.TrimSpace(p.Patch) + if p.Patch == "" && p.Path == "" { + return fmt.Errorf( + "must specify one of patch and path in\n%s", string(c)) + } + if p.Patch != "" && p.Path != "" { + return fmt.Errorf( + "patch and path can't be set at the same time\n%s", string(c)) + } + if p.Path != "" { + loaded, loadErr := h.Loader().Load(p.Path) + if loadErr != nil { + return loadErr + } + p.Patch = string(loaded) + } + + patchSM, errSM := h.ResmapFactory().RF().FromBytes([]byte(p.Patch)) + patchJson, errJson := jsonPatchFromBytes([]byte(p.Patch)) + if (errSM == nil && errJson == nil) || + (patchSM != nil && patchJson != nil) { + return fmt.Errorf( + "illegally qualifies as both an SM and JSON patch: [%v]", + p.Patch) + } + if errSM != nil && errJson != nil { + return fmt.Errorf( + "unable to parse SM or JSON patch from [%v]", p.Patch) + } + if errSM == nil { + p.loadedPatch = patchSM + if p.Options["allowNameChange"] { + p.loadedPatch.AllowNameChange() + } + if p.Options["allowKindChange"] { + p.loadedPatch.AllowKindChange() + } + } else { + p.decodedPatch = patchJson + } + return nil +} + +func (p *PatchTransformerPlugin) Transform(m resmap.ResMap) error { + if p.loadedPatch == nil { + return p.transformJson6902(m, p.decodedPatch) + } + // The patch was a strategic merge patch + return p.transformStrategicMerge(m, p.loadedPatch) +} + +// transformStrategicMerge applies the provided strategic merge patch +// to all the resources in the ResMap that match either the Target or +// the identifier of the patch. +func (p *PatchTransformerPlugin) transformStrategicMerge(m resmap.ResMap, patch *resource.Resource) error { + if p.Target == nil { + target, err := m.GetById(patch.OrgId()) + if err != nil { + return err + } + return target.ApplySmPatch(patch) + } + selected, err := m.Select(*p.Target) + if err != nil { + return err + } + return m.ApplySmPatch(resource.MakeIdSet(selected), patch) +} + +// transformJson6902 applies the provided json6902 patch +// to all the resources in the ResMap that match the Target. +func (p *PatchTransformerPlugin) transformJson6902(m resmap.ResMap, patch jsonpatch.Patch) error { + if p.Target == nil { + return fmt.Errorf("must specify a target for patch %s", p.Patch) + } + resources, err := m.Select(*p.Target) + if err != nil { + return err + } + for _, res := range resources { + res.StorePreviousId() + internalAnnotations := kioutil.GetInternalAnnotations(&res.RNode) + err = res.ApplyFilter(patchjson6902.Filter{ + Patch: p.Patch, + }) + if err != nil { + return err + } + + annotations := res.GetAnnotations() + for key, value := range internalAnnotations { + annotations[key] = value + } + err = res.SetAnnotations(annotations) + } + return nil +} + +// jsonPatchFromBytes loads a Json 6902 patch from +// a bytes input +func jsonPatchFromBytes( + in []byte) (jsonpatch.Patch, error) { + ops := string(in) + if ops == "" { + return nil, fmt.Errorf("empty json patch operations") + } + + if ops[0] != '[' { + jsonOps, err := yaml.YAMLToJSON(in) + if err != nil { + return nil, err + } + ops = string(jsonOps) + } + return jsonpatch.DecodePatch([]byte(ops)) +} + +func NewPatchTransformerPlugin() resmap.TransformerPlugin { + return &PatchTransformerPlugin{} +} diff --git a/go/internal/forked/api/internal/builtins/PrefixTransformer.go b/go/internal/forked/api/internal/builtins/PrefixTransformer.go new file mode 100644 index 000000000..6e62ef67c --- /dev/null +++ b/go/internal/forked/api/internal/builtins/PrefixTransformer.go @@ -0,0 +1,95 @@ +// Code generated by pluginator on PrefixTransformer; DO NOT EDIT. +// pluginator {unknown 1970-01-01T00:00:00Z } + +package builtins + +import ( + "errors" + + "sigs.k8s.io/kustomize/api/filters/prefix" + "sigs.k8s.io/kustomize/api/resmap" + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/resid" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" +) + +// Add the given prefix to the field +type PrefixTransformerPlugin struct { + Prefix string `json:"prefix,omitempty" yaml:"prefix,omitempty"` + FieldSpecs types.FsSlice `json:"fieldSpecs,omitempty" yaml:"fieldSpecs,omitempty"` +} + +var prefixFieldSpecsToSkip = types.FsSlice{ + {Gvk: resid.Gvk{Kind: "CustomResourceDefinition"}}, + {Gvk: resid.Gvk{Group: "apiregistration.k8s.io", Kind: "APIService"}}, + {Gvk: resid.Gvk{Kind: "Namespace"}}, +} + +func (p *PrefixTransformerPlugin) Config( + _ *resmap.PluginHelpers, c []byte) (err error) { + p.Prefix = "" + p.FieldSpecs = nil + err = yaml.Unmarshal(c, p) + if err != nil { + return + } + if p.FieldSpecs == nil { + return errors.New("fieldSpecs is not expected to be nil") + } + return +} + +func (p *PrefixTransformerPlugin) Transform(m resmap.ResMap) error { + // Even if the Prefix is empty we want to proceed with the + // transformation. This allows to add contextual information + // to the resources (AddNamePrefix). + for _, r := range m.Resources() { + // TODO: move this test into the filter (i.e. make a better filter) + if p.shouldSkip(r.OrgId()) { + continue + } + id := r.OrgId() + // current default configuration contains + // only one entry: "metadata/name" with no GVK + for _, fs := range p.FieldSpecs { + // TODO: this is redundant to filter (but needed for now) + if !id.IsSelected(&fs.Gvk) { + continue + } + // TODO: move this test into the filter. + if fs.Path == "metadata/name" { + // "metadata/name" is the only field. + // this will add a prefix to the resource + // even if it is empty + + r.AddNamePrefix(p.Prefix) + if p.Prefix != "" { + // TODO: There are multiple transformers that can change a resource's name, and each makes a call to + // StorePreviousID(). We should make it so that we only call StorePreviousID once per kustomization layer + // to avoid storing intermediate names between transformations, to prevent intermediate name conflicts. + r.StorePreviousId() + } + } + if err := r.ApplyFilter(prefix.Filter{ + Prefix: p.Prefix, + FieldSpec: fs, + }); err != nil { + return err + } + } + } + return nil +} + +func (p *PrefixTransformerPlugin) shouldSkip(id resid.ResId) bool { + for _, path := range prefixFieldSpecsToSkip { + if id.IsSelected(&path.Gvk) { + return true + } + } + return false +} + +func NewPrefixTransformerPlugin() resmap.TransformerPlugin { + return &PrefixTransformerPlugin{} +} diff --git a/go/internal/forked/api/internal/builtins/PrefixTransformer.go b/go/internal/forked/api/internal/builtins/PrefixTransformer.go new file mode 100644 index 000000000..445812a3a --- /dev/null +++ b/go/internal/forked/api/internal/builtins/PrefixTransformer.go @@ -0,0 +1,95 @@ +// Code generated by pluginator on PrefixTransformer; DO NOT EDIT. +// pluginator {unknown 1970-01-01T00:00:00Z } + +package builtins + +import ( + "errors" + + "sigs.k8s.io/kustomize/api/filters/prefix" + "sigs.k8s.io/kustomize/api/resmap" + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/resid" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/yaml" +) + +// Add the given prefix to the field +type PrefixTransformerPlugin struct { + Prefix string `json:"prefix,omitempty" yaml:"prefix,omitempty"` + FieldSpecs types.FsSlice `json:"fieldSpecs,omitempty" yaml:"fieldSpecs,omitempty"` +} + +var prefixFieldSpecsToSkip = types.FsSlice{ + {Gvk: resid.Gvk{Kind: "CustomResourceDefinition"}}, + {Gvk: resid.Gvk{Group: "apiregistration.k8s.io", Kind: "APIService"}}, + {Gvk: resid.Gvk{Kind: "Namespace"}}, +} + +func (p *PrefixTransformerPlugin) Config( + _ *resmap.PluginHelpers, c []byte) (err error) { + p.Prefix = "" + p.FieldSpecs = nil + err = yaml.Unmarshal(c, p) + if err != nil { + return + } + if p.FieldSpecs == nil { + return errors.New("fieldSpecs is not expected to be nil") + } + return +} + +func (p *PrefixTransformerPlugin) Transform(m resmap.ResMap) error { + // Even if the Prefix is empty we want to proceed with the + // transformation. This allows to add contextual information + // to the resources (AddNamePrefix). + for _, r := range m.Resources() { + // TODO: move this test into the filter (i.e. make a better filter) + if p.shouldSkip(r.OrgId()) { + continue + } + id := r.OrgId() + // current default configuration contains + // only one entry: "metadata/name" with no GVK + for _, fs := range p.FieldSpecs { + // TODO: this is redundant to filter (but needed for now) + if !id.IsSelected(&fs.Gvk) { + continue + } + // TODO: move this test into the filter. + if fs.Path == "metadata/name" { + // "metadata/name" is the only field. + // this will add a prefix to the resource + // even if it is empty + + r.AddNamePrefix(p.Prefix) + if p.Prefix != "" { + // TODO: There are multiple transformers that can change a resource's name, and each makes a call to + // StorePreviousID(). We should make it so that we only call StorePreviousID once per kustomization layer + // to avoid storing intermediate names between transformations, to prevent intermediate name conflicts. + r.StorePreviousId() + } + } + if err := r.ApplyFilter(prefix.Filter{ + Prefix: p.Prefix, + FieldSpec: fs, + }); err != nil { + return err + } + } + } + return nil +} + +func (p *PrefixTransformerPlugin) shouldSkip(id resid.ResId) bool { + for _, path := range prefixFieldSpecsToSkip { + if id.IsSelected(&path.Gvk) { + return true + } + } + return false +} + +func NewPrefixTransformerPlugin() resmap.TransformerPlugin { + return &PrefixTransformerPlugin{} +} diff --git a/go/internal/forked/api/internal/builtins/ReplacementTransformer.go b/go/internal/forked/api/internal/builtins/ReplacementTransformer.go new file mode 100644 index 000000000..21e42c81e --- /dev/null +++ b/go/internal/forked/api/internal/builtins/ReplacementTransformer.go @@ -0,0 +1,59 @@ +// Code generated by pluginator on ReplacementTransformer; DO NOT EDIT. +// pluginator {unknown 1970-01-01T00:00:00Z } + +package builtins + +import ( + "fmt" + + "sigs.k8s.io/kustomize/api/filters/replacement" + "sigs.k8s.io/kustomize/api/resmap" + "sigs.k8s.io/kustomize/api/types" + "sigs.k8s.io/yaml" +) + +// Replace values in targets with values from a source +type ReplacementTransformerPlugin struct { + ReplacementList []types.ReplacementField `json:"replacements,omitempty" yaml:"replacements,omitempty"` + Replacements []types.Replacement `json:"omitempty" yaml:"omitempty"` +} + +func (p *ReplacementTransformerPlugin) Config( + h *resmap.PluginHelpers, c []byte) (err error) { + p.ReplacementList = []types.ReplacementField{} + if err := yaml.Unmarshal(c, p); err != nil { + return err + } + + for _, r := range p.ReplacementList { + if r.Path != "" && (r.Source != nil || len(r.Targets) != 0) { + return fmt.Errorf("cannot specify both path and inline replacement") + } + if r.Path != "" { + // load the replacement from the path + content, err := h.Loader().Load(r.Path) + if err != nil { + return err + } + repl := types.Replacement{} + if err := yaml.Unmarshal(content, &repl); err != nil { + return err + } + p.Replacements = append(p.Replacements, repl) + } else { + // replacement information is already loaded + p.Replacements = append(p.Replacements, r.Replacement) + } + } + return nil +} + +func (p *ReplacementTransformerPlugin) Transform(m resmap.ResMap) (err error) { + return m.ApplyFilter(replacement.Filter{ + Replacements: p.Replacements, + }) +} + +func NewReplacementTransformerPlugin() resmap.TransformerPlugin { + return &ReplacementTransformerPlugin{} +} diff --git a/go/internal/forked/api/internal/builtins/ReplicaCountTransformer.go b/go/internal/forked/api/internal/builtins/ReplicaCountTransformer.go new file mode 100644 index 000000000..6330aa7fa --- /dev/null +++ b/go/internal/forked/api/internal/builtins/ReplicaCountTransformer.go @@ -0,0 +1,73 @@ +// Code generated by pluginator on ReplicaCountTransformer; DO NOT EDIT. +// pluginator {unknown 1970-01-01T00:00:00Z } + +package builtins + +import ( + "fmt" + + "sigs.k8s.io/kustomize/api/filters/replicacount" + "sigs.k8s.io/kustomize/api/resmap" + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/resid" + "sigs.k8s.io/yaml" +) + +// Find matching replicas declarations and replace the count. +// Eases the kustomization configuration of replica changes. +type ReplicaCountTransformerPlugin struct { + Replica types.Replica `json:"replica,omitempty" yaml:"replica,omitempty"` + FieldSpecs []types.FieldSpec `json:"fieldSpecs,omitempty" yaml:"fieldSpecs,omitempty"` +} + +func (p *ReplicaCountTransformerPlugin) Config( + _ *resmap.PluginHelpers, c []byte) (err error) { + p.Replica = types.Replica{} + p.FieldSpecs = nil + return yaml.Unmarshal(c, p) +} + +func (p *ReplicaCountTransformerPlugin) Transform(m resmap.ResMap) error { + found := false + for _, fs := range p.FieldSpecs { + matcher := p.createMatcher(fs) + resList := m.GetMatchingResourcesByAnyId(matcher) + if len(resList) > 0 { + found = true + for _, r := range resList { + // There are redundant checks in the filter + // that we'll live with until resolution of + // https://github.com/kubernetes-sigs/kustomize/issues/2506 + err := r.ApplyFilter(replicacount.Filter{ + Replica: p.Replica, + FieldSpec: fs, + }) + if err != nil { + return err + } + } + } + } + + if !found { + gvks := make([]string, len(p.FieldSpecs)) + for i, replicaSpec := range p.FieldSpecs { + gvks[i] = replicaSpec.Gvk.String() + } + return fmt.Errorf("resource with name %s does not match a config with the following GVK %v", + p.Replica.Name, gvks) + } + + return nil +} + +// Match Replica.Name and FieldSpec +func (p *ReplicaCountTransformerPlugin) createMatcher(fs types.FieldSpec) resmap.IdMatcher { + return func(r resid.ResId) bool { + return r.Name == p.Replica.Name && r.Gvk.IsSelected(&fs.Gvk) + } +} + +func NewReplicaCountTransformerPlugin() resmap.TransformerPlugin { + return &ReplicaCountTransformerPlugin{} +} diff --git a/go/internal/forked/api/internal/builtins/ReplicaCountTransformer.go b/go/internal/forked/api/internal/builtins/ReplicaCountTransformer.go new file mode 100644 index 000000000..8a66b5bac --- /dev/null +++ b/go/internal/forked/api/internal/builtins/ReplicaCountTransformer.go @@ -0,0 +1,73 @@ +// Code generated by pluginator on ReplicaCountTransformer; DO NOT EDIT. +// pluginator {unknown 1970-01-01T00:00:00Z } + +package builtins + +import ( + "fmt" + + "sigs.k8s.io/kustomize/api/filters/replicacount" + "sigs.k8s.io/kustomize/api/resmap" + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/resid" + "sigs.k8s.io/yaml" +) + +// Find matching replicas declarations and replace the count. +// Eases the kustomization configuration of replica changes. +type ReplicaCountTransformerPlugin struct { + Replica types.Replica `json:"replica,omitempty" yaml:"replica,omitempty"` + FieldSpecs []types.FieldSpec `json:"fieldSpecs,omitempty" yaml:"fieldSpecs,omitempty"` +} + +func (p *ReplicaCountTransformerPlugin) Config( + _ *resmap.PluginHelpers, c []byte) (err error) { + p.Replica = types.Replica{} + p.FieldSpecs = nil + return yaml.Unmarshal(c, p) +} + +func (p *ReplicaCountTransformerPlugin) Transform(m resmap.ResMap) error { + found := false + for _, fs := range p.FieldSpecs { + matcher := p.createMatcher(fs) + resList := m.GetMatchingResourcesByAnyId(matcher) + if len(resList) > 0 { + found = true + for _, r := range resList { + // There are redundant checks in the filter + // that we'll live with until resolution of + // https://github.com/kubernetes-sigs/kustomize/issues/2506 + err := r.ApplyFilter(replicacount.Filter{ + Replica: p.Replica, + FieldSpec: fs, + }) + if err != nil { + return err + } + } + } + } + + if !found { + gvks := make([]string, len(p.FieldSpecs)) + for i, replicaSpec := range p.FieldSpecs { + gvks[i] = replicaSpec.Gvk.String() + } + return fmt.Errorf("resource with name %s does not match a config with the following GVK %v", + p.Replica.Name, gvks) + } + + return nil +} + +// Match Replica.Name and FieldSpec +func (p *ReplicaCountTransformerPlugin) createMatcher(fs types.FieldSpec) resmap.IdMatcher { + return func(r resid.ResId) bool { + return r.Name == p.Replica.Name && r.Gvk.IsSelected(&fs.Gvk) + } +} + +func NewReplicaCountTransformerPlugin() resmap.TransformerPlugin { + return &ReplicaCountTransformerPlugin{} +} diff --git a/go/internal/forked/api/internal/builtins/SecretGenerator.go b/go/internal/forked/api/internal/builtins/SecretGenerator.go new file mode 100644 index 000000000..5e8581eb9 --- /dev/null +++ b/go/internal/forked/api/internal/builtins/SecretGenerator.go @@ -0,0 +1,39 @@ +// Code generated by pluginator on SecretGenerator; DO NOT EDIT. +// pluginator {unknown 1970-01-01T00:00:00Z } + +package builtins + +import ( + "sigs.k8s.io/kustomize/api/kv" + "sigs.k8s.io/kustomize/api/resmap" + "sigs.k8s.io/kustomize/api/types" + "sigs.k8s.io/yaml" +) + +type SecretGeneratorPlugin struct { + h *resmap.PluginHelpers + types.ObjectMeta `json:"metadata,omitempty" yaml:"metadata,omitempty" protobuf:"bytes,1,opt,name=metadata"` + types.SecretArgs +} + +func (p *SecretGeneratorPlugin) Config(h *resmap.PluginHelpers, config []byte) (err error) { + p.SecretArgs = types.SecretArgs{} + err = yaml.Unmarshal(config, p) + if p.SecretArgs.Name == "" { + p.SecretArgs.Name = p.Name + } + if p.SecretArgs.Namespace == "" { + p.SecretArgs.Namespace = p.Namespace + } + p.h = h + return +} + +func (p *SecretGeneratorPlugin) Generate() (resmap.ResMap, error) { + return p.h.ResmapFactory().FromSecretArgs( + kv.NewLoader(p.h.Loader(), p.h.Validator()), p.SecretArgs) +} + +func NewSecretGeneratorPlugin() resmap.GeneratorPlugin { + return &SecretGeneratorPlugin{} +} diff --git a/go/internal/forked/api/internal/builtins/SuffixTransformer.go b/go/internal/forked/api/internal/builtins/SuffixTransformer.go new file mode 100644 index 000000000..85fcf325a --- /dev/null +++ b/go/internal/forked/api/internal/builtins/SuffixTransformer.go @@ -0,0 +1,95 @@ +// Code generated by pluginator on SuffixTransformer; DO NOT EDIT. +// pluginator {unknown 1970-01-01T00:00:00Z } + +package builtins + +import ( + "errors" + + "sigs.k8s.io/kustomize/api/filters/suffix" + "sigs.k8s.io/kustomize/api/resmap" + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/resid" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" +) + +// Add the given suffix to the field +type SuffixTransformerPlugin struct { + Suffix string `json:"suffix,omitempty" yaml:"suffix,omitempty"` + FieldSpecs types.FsSlice `json:"fieldSpecs,omitempty" yaml:"fieldSpecs,omitempty"` +} + +var suffixFieldSpecsToSkip = types.FsSlice{ + {Gvk: resid.Gvk{Kind: "CustomResourceDefinition"}}, + {Gvk: resid.Gvk{Group: "apiregistration.k8s.io", Kind: "APIService"}}, + {Gvk: resid.Gvk{Kind: "Namespace"}}, +} + +func (p *SuffixTransformerPlugin) Config( + _ *resmap.PluginHelpers, c []byte) (err error) { + p.Suffix = "" + p.FieldSpecs = nil + err = yaml.Unmarshal(c, p) + if err != nil { + return + } + if p.FieldSpecs == nil { + return errors.New("fieldSpecs is not expected to be nil") + } + return +} + +func (p *SuffixTransformerPlugin) Transform(m resmap.ResMap) error { + // Even if the Suffix is empty we want to proceed with the + // transformation. This allows to add contextual information + // to the resources (AddNameSuffix). + for _, r := range m.Resources() { + // TODO: move this test into the filter (i.e. make a better filter) + if p.shouldSkip(r.OrgId()) { + continue + } + id := r.OrgId() + // current default configuration contains + // only one entry: "metadata/name" with no GVK + for _, fs := range p.FieldSpecs { + // TODO: this is redundant to filter (but needed for now) + if !id.IsSelected(&fs.Gvk) { + continue + } + // TODO: move this test into the filter. + if fs.Path == "metadata/name" { + // "metadata/name" is the only field. + // this will add a suffix to the resource + // even if it is empty + + r.AddNameSuffix(p.Suffix) + if p.Suffix != "" { + // TODO: There are multiple transformers that can change a resource's name, and each makes a call to + // StorePreviousID(). We should make it so that we only call StorePreviousID once per kustomization layer + // to avoid storing intermediate names between transformations, to prevent intermediate name conflicts. + r.StorePreviousId() + } + } + if err := r.ApplyFilter(suffix.Filter{ + Suffix: p.Suffix, + FieldSpec: fs, + }); err != nil { + return err + } + } + } + return nil +} + +func (p *SuffixTransformerPlugin) shouldSkip(id resid.ResId) bool { + for _, path := range suffixFieldSpecsToSkip { + if id.IsSelected(&path.Gvk) { + return true + } + } + return false +} + +func NewSuffixTransformerPlugin() resmap.TransformerPlugin { + return &SuffixTransformerPlugin{} +} diff --git a/go/internal/forked/api/internal/builtins/SuffixTransformer.go b/go/internal/forked/api/internal/builtins/SuffixTransformer.go new file mode 100644 index 000000000..d5a6a2368 --- /dev/null +++ b/go/internal/forked/api/internal/builtins/SuffixTransformer.go @@ -0,0 +1,95 @@ +// Code generated by pluginator on SuffixTransformer; DO NOT EDIT. +// pluginator {unknown 1970-01-01T00:00:00Z } + +package builtins + +import ( + "errors" + + "sigs.k8s.io/kustomize/api/filters/suffix" + "sigs.k8s.io/kustomize/api/resmap" + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/resid" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/yaml" +) + +// Add the given suffix to the field +type SuffixTransformerPlugin struct { + Suffix string `json:"suffix,omitempty" yaml:"suffix,omitempty"` + FieldSpecs types.FsSlice `json:"fieldSpecs,omitempty" yaml:"fieldSpecs,omitempty"` +} + +var suffixFieldSpecsToSkip = types.FsSlice{ + {Gvk: resid.Gvk{Kind: "CustomResourceDefinition"}}, + {Gvk: resid.Gvk{Group: "apiregistration.k8s.io", Kind: "APIService"}}, + {Gvk: resid.Gvk{Kind: "Namespace"}}, +} + +func (p *SuffixTransformerPlugin) Config( + _ *resmap.PluginHelpers, c []byte) (err error) { + p.Suffix = "" + p.FieldSpecs = nil + err = yaml.Unmarshal(c, p) + if err != nil { + return + } + if p.FieldSpecs == nil { + return errors.New("fieldSpecs is not expected to be nil") + } + return +} + +func (p *SuffixTransformerPlugin) Transform(m resmap.ResMap) error { + // Even if the Suffix is empty we want to proceed with the + // transformation. This allows to add contextual information + // to the resources (AddNameSuffix). + for _, r := range m.Resources() { + // TODO: move this test into the filter (i.e. make a better filter) + if p.shouldSkip(r.OrgId()) { + continue + } + id := r.OrgId() + // current default configuration contains + // only one entry: "metadata/name" with no GVK + for _, fs := range p.FieldSpecs { + // TODO: this is redundant to filter (but needed for now) + if !id.IsSelected(&fs.Gvk) { + continue + } + // TODO: move this test into the filter. + if fs.Path == "metadata/name" { + // "metadata/name" is the only field. + // this will add a suffix to the resource + // even if it is empty + + r.AddNameSuffix(p.Suffix) + if p.Suffix != "" { + // TODO: There are multiple transformers that can change a resource's name, and each makes a call to + // StorePreviousID(). We should make it so that we only call StorePreviousID once per kustomization layer + // to avoid storing intermediate names between transformations, to prevent intermediate name conflicts. + r.StorePreviousId() + } + } + if err := r.ApplyFilter(suffix.Filter{ + Suffix: p.Suffix, + FieldSpec: fs, + }); err != nil { + return err + } + } + } + return nil +} + +func (p *SuffixTransformerPlugin) shouldSkip(id resid.ResId) bool { + for _, path := range suffixFieldSpecsToSkip { + if id.IsSelected(&path.Gvk) { + return true + } + } + return false +} + +func NewSuffixTransformerPlugin() resmap.TransformerPlugin { + return &SuffixTransformerPlugin{} +} diff --git a/go/internal/forked/api/internal/builtins/ValueAddTransformer.go b/go/internal/forked/api/internal/builtins/ValueAddTransformer.go new file mode 100644 index 000000000..c2c460ab9 --- /dev/null +++ b/go/internal/forked/api/internal/builtins/ValueAddTransformer.go @@ -0,0 +1,141 @@ +// Code generated by pluginator on ValueAddTransformer; DO NOT EDIT. +// pluginator {unknown 1970-01-01T00:00:00Z } + +package builtins + +import ( + "fmt" + "path/filepath" + "strings" + + "sigs.k8s.io/kustomize/api/filters/namespace" + "sigs.k8s.io/kustomize/api/filters/valueadd" + "sigs.k8s.io/kustomize/api/resmap" + "sigs.k8s.io/kustomize/api/resource" + "sigs.k8s.io/kustomize/api/types" + "sigs.k8s.io/yaml" +) + +// An 'Add' transformer inspired by the IETF RFC 6902 JSON spec Add operation. +type ValueAddTransformerPlugin struct { + // Value is the value to add. + // Defaults to base name of encompassing kustomization root. + Value string `json:"value,omitempty" yaml:"value,omitempty"` + + // Targets is a slice of targets that should have the value added. + Targets []Target `json:"targets,omitempty" yaml:"targets,omitempty"` + + // TargetFilePath is a file path. If specified, the file will be parsed into + // a slice of Target, and appended to anything that was specified in the + // Targets field. This is just a means to share common target specifications. + TargetFilePath string `json:"targetFilePath,omitempty" yaml:"targetFilePath,omitempty"` +} + +// Target describes where to put the value. +type Target struct { + // Selector selects the resources to modify. + Selector *types.Selector `json:"selector,omitempty" yaml:"selector,omitempty"` + + // NotSelector selects the resources to exclude + // from those included by overly broad selectors. + // TODO: implement this? + // NotSelector *types.Selector `json:"notSelector,omitempty" yaml:"notSelector,omitempty"` + + // FieldPath is a JSON-style path to the field intended to hold the value. + FieldPath string `json:"fieldPath,omitempty" yaml:"fieldPath,omitempty"` + + // FilePathPosition is passed to the filter directly. Look there for doc. + FilePathPosition int `json:"filePathPosition,omitempty" yaml:"filePathPosition,omitempty"` +} + +func (p *ValueAddTransformerPlugin) Config(h *resmap.PluginHelpers, c []byte) error { + err := yaml.Unmarshal(c, p) + if err != nil { + return err + } + p.Value = strings.TrimSpace(p.Value) + if p.Value == "" { + p.Value = filepath.Base(h.Loader().Root()) + } + if p.TargetFilePath != "" { + bytes, err := h.Loader().Load(p.TargetFilePath) + if err != nil { + return err + } + var targets struct { + Targets []Target `json:"targets,omitempty" yaml:"targets,omitempty"` + } + err = yaml.Unmarshal(bytes, &targets) + if err != nil { + return err + } + p.Targets = append(p.Targets, targets.Targets...) + } + if len(p.Targets) == 0 { + return fmt.Errorf("must specify at least one target") + } + for _, target := range p.Targets { + if err = validateSelector(target.Selector); err != nil { + return err + } + // TODO: call validateSelector(target.NotSelector) if field added. + if err = validateJsonFieldPath(target.FieldPath); err != nil { + return err + } + if target.FilePathPosition < 0 { + return fmt.Errorf( + "value of FilePathPosition (%d) cannot be negative", + target.FilePathPosition) + } + } + return nil +} + +// TODO: implement +func validateSelector(_ *types.Selector) error { + return nil +} + +// TODO: Enforce RFC 6902? +func validateJsonFieldPath(p string) error { + if len(p) == 0 { + return fmt.Errorf("fieldPath cannot be empty") + } + return nil +} + +func (p *ValueAddTransformerPlugin) Transform(m resmap.ResMap) (err error) { + for _, t := range p.Targets { + var resources []*resource.Resource + if t.Selector == nil { + resources = m.Resources() + } else { + resources, err = m.Select(*t.Selector) + if err != nil { + return err + } + } + // TODO: consider t.NotSelector if implemented + for _, res := range resources { + if t.FieldPath == types.MetadataNamespacePath { + err = res.ApplyFilter(namespace.Filter{ + Namespace: p.Value, + }) + } else { + err = res.ApplyFilter(valueadd.Filter{ + Value: p.Value, + FieldPath: t.FieldPath, + FilePathPosition: t.FilePathPosition, + }) + } + if err != nil { + return err + } + } + } + return nil +} + +func NewValueAddTransformerPlugin() resmap.TransformerPlugin { + return &ValueAddTransformerPlugin{} +} diff --git a/go/internal/forked/api/internal/builtins/doc.go b/go/internal/forked/api/internal/builtins/doc.go new file mode 100644 index 000000000..37a8dc6e7 --- /dev/null +++ b/go/internal/forked/api/internal/builtins/doc.go @@ -0,0 +1,8 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +// Package builtins holds code generated from the builtin plugins. +// The "builtin" plugins are written as normal plugins and can +// be used as such, but they are also used to generate the code +// in this package so they can be statically linked to client code. +package builtins diff --git a/go/internal/forked/api/internal/generators/configmap.go b/go/internal/forked/api/internal/generators/configmap.go new file mode 100644 index 000000000..a6b34e6fa --- /dev/null +++ b/go/internal/forked/api/internal/generators/configmap.go @@ -0,0 +1,52 @@ +// Copyright 2020 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package generators + +import ( + "sigs.k8s.io/kustomize/api/ifc" + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" +) + +// MakeConfigMap makes a configmap. +// +// ConfigMap: https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.19/#configmap-v1-core +// +// ConfigMaps and Secrets are similar. +// +// Both objects have a `data` field, which contains a map from keys to +// values that must be UTF-8 valid strings. Such data might be simple text, +// or whoever made the data may have done so by performing a base64 encoding +// on binary data. Regardless, k8s has no means to know this, so it treats +// the data field as a string. +// +// The ConfigMap has an additional field `binaryData`, also a map, but its +// values are _intended_ to be interpreted as a base64 encoding of []byte, +// by whatever makes use of the ConfigMap. +// +// In a ConfigMap, any key used in `data` cannot also be used in `binaryData` +// and vice-versa. A key must be unique across both maps. +func MakeConfigMap( + ldr ifc.KvLoader, args *types.ConfigMapArgs) (rn *yaml.RNode, err error) { + rn, err = makeBaseNode("ConfigMap", args.Name, args.Namespace) + if err != nil { + return nil, err + } + m, err := makeValidatedDataMap(ldr, args.Name, args.KvPairSources) + if err != nil { + return nil, err + } + if err = rn.LoadMapIntoConfigMapData(m); err != nil { + return nil, err + } + err = copyLabelsAndAnnotations(rn, args.Options) + if err != nil { + return nil, err + } + err = setImmutable(rn, args.Options) + if err != nil { + return nil, err + } + return rn, nil +} diff --git a/go/internal/forked/api/internal/generators/configmap.go b/go/internal/forked/api/internal/generators/configmap.go new file mode 100644 index 000000000..6b16c2b1c --- /dev/null +++ b/go/internal/forked/api/internal/generators/configmap.go @@ -0,0 +1,52 @@ +// Copyright 2020 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package generators + +import ( + "sigs.k8s.io/kustomize/api/ifc" + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/yaml" +) + +// MakeConfigMap makes a configmap. +// +// ConfigMap: https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.19/#configmap-v1-core +// +// ConfigMaps and Secrets are similar. +// +// Both objects have a `data` field, which contains a map from keys to +// values that must be UTF-8 valid strings. Such data might be simple text, +// or whoever made the data may have done so by performing a base64 encoding +// on binary data. Regardless, k8s has no means to know this, so it treats +// the data field as a string. +// +// The ConfigMap has an additional field `binaryData`, also a map, but its +// values are _intended_ to be interpreted as a base64 encoding of []byte, +// by whatever makes use of the ConfigMap. +// +// In a ConfigMap, any key used in `data` cannot also be used in `binaryData` +// and vice-versa. A key must be unique across both maps. +func MakeConfigMap( + ldr ifc.KvLoader, args *types.ConfigMapArgs) (rn *yaml.RNode, err error) { + rn, err = makeBaseNode("ConfigMap", args.Name, args.Namespace) + if err != nil { + return nil, err + } + m, err := makeValidatedDataMap(ldr, args.Name, args.KvPairSources) + if err != nil { + return nil, err + } + if err = rn.LoadMapIntoConfigMapData(m); err != nil { + return nil, err + } + err = copyLabelsAndAnnotations(rn, args.Options) + if err != nil { + return nil, err + } + err = setImmutable(rn, args.Options) + if err != nil { + return nil, err + } + return rn, nil +} diff --git a/go/internal/forked/api/internal/generators/configmap_test.go b/go/internal/forked/api/internal/generators/configmap_test.go new file mode 100644 index 000000000..d13bb5e12 --- /dev/null +++ b/go/internal/forked/api/internal/generators/configmap_test.go @@ -0,0 +1,225 @@ +// Copyright 2020 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package generators_test + +import ( + "path/filepath" + "testing" + + "github.com/stretchr/testify/assert" + "sigs.k8s.io/kustomize/api/internal/generators" + "sigs.k8s.io/kustomize/api/kv" + "sigs.k8s.io/kustomize/api/loader" + valtest_test "sigs.k8s.io/kustomize/api/testutils/valtest" + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/filesys" +) + +var binaryHello = []byte{ + 0xff, // non-utf8 + 0x68, // h + 0x65, // e + 0x6c, // l + 0x6c, // l + 0x6f, // o +} + +func manyHellos(count int) (result []byte) { + for i := 0; i < count; i++ { + result = append(result, binaryHello...) + } + return +} + +func TestMakeConfigMap(t *testing.T) { + type expected struct { + out string + errMsg string + } + + testCases := map[string]struct { + args types.ConfigMapArgs + exp expected + }{ + "construct config map from env": { + args: types.ConfigMapArgs{ + GeneratorArgs: types.GeneratorArgs{ + Name: "envConfigMap", + KvPairSources: types.KvPairSources{ + EnvSources: []string{ + filepath.Join("configmap", "app.env"), + }, + }, + }, + }, + exp: expected{ + out: `apiVersion: v1 +kind: ConfigMap +metadata: + name: envConfigMap +data: + DB_PASSWORD: qwerty + DB_USERNAME: admin +`, + }, + }, + "construct config map from text file": { + args: types.ConfigMapArgs{ + GeneratorArgs: types.GeneratorArgs{ + Name: "fileConfigMap1", + KvPairSources: types.KvPairSources{ + FileSources: []string{ + filepath.Join("configmap", "app-init.ini"), + }, + }, + }, + }, + exp: expected{ + out: `apiVersion: v1 +kind: ConfigMap +metadata: + name: fileConfigMap1 +data: + app-init.ini: | + FOO=bar + BAR=baz +`, + }, + }, + "construct config map from text and binary file": { + args: types.ConfigMapArgs{ + GeneratorArgs: types.GeneratorArgs{ + Name: "fileConfigMap2", + KvPairSources: types.KvPairSources{ + FileSources: []string{ + filepath.Join("configmap", "app-init.ini"), + filepath.Join("configmap", "app.bin"), + }, + }, + }, + }, + exp: expected{ + out: `apiVersion: v1 +kind: ConfigMap +metadata: + name: fileConfigMap2 +data: + app-init.ini: | + FOO=bar + BAR=baz +binaryData: + app.bin: | + /2hlbGxv/2hlbGxv/2hlbGxv/2hlbGxv/2hlbGxv/2hlbGxv/2hlbGxv/2hlbGxv/2hlbG + xv/2hlbGxv/2hlbGxv/2hlbGxv/2hlbGxv/2hlbGxv/2hlbGxv/2hlbGxv/2hlbGxv/2hl + bGxv/2hlbGxv/2hlbGxv/2hlbGxv/2hlbGxv/2hlbGxv/2hlbGxv/2hlbGxv/2hlbGxv/2 + hlbGxv/2hlbGxv/2hlbGxv/2hlbGxv +`, + }, + }, + "construct config map from literal": { + args: types.ConfigMapArgs{ + GeneratorArgs: types.GeneratorArgs{ + Name: "literalConfigMap1", + KvPairSources: types.KvPairSources{ + LiteralSources: []string{"a=x", "b=y", "c=\"Hello World\"", "d='true'"}, + }, + Options: &types.GeneratorOptions{ + Labels: map[string]string{ + "foo": "bar", + }, + }, + }, + }, + exp: expected{ + out: `apiVersion: v1 +kind: ConfigMap +metadata: + name: literalConfigMap1 + labels: + foo: 'bar' +data: + a: x + b: y + c: Hello World + d: "true" +`, + }, + }, + "construct config map from literal with GeneratorOptions in ConfigMapArgs": { + args: types.ConfigMapArgs{ + GeneratorArgs: types.GeneratorArgs{ + Name: "literalConfigMap2", + KvPairSources: types.KvPairSources{ + LiteralSources: []string{"a=x", "b=y", "c=\"Hello World\"", "d='true'"}, + }, + Options: &types.GeneratorOptions{ + Labels: map[string]string{ + "veggie": "celery", + "dog": "beagle", + "cat": "annoying", + }, + Annotations: map[string]string{ + "river": "Missouri", + "city": "Iowa City", + }, + Immutable: true, + }, + }, + }, + exp: expected{ + out: `apiVersion: v1 +kind: ConfigMap +metadata: + name: literalConfigMap2 + labels: + cat: 'annoying' + dog: 'beagle' + veggie: 'celery' + annotations: + city: 'Iowa City' + river: 'Missouri' +data: + a: x + b: y + c: Hello World + d: "true" +immutable: true +`, + }, + }, + } + fSys := filesys.MakeFsInMemory() + fSys.WriteFile( + filesys.RootedPath("configmap", "app.env"), + []byte("DB_USERNAME=admin\nDB_PASSWORD=qwerty\n")) + fSys.WriteFile( + filesys.RootedPath("configmap", "app-init.ini"), + []byte("FOO=bar\nBAR=baz\n")) + fSys.WriteFile( + filesys.RootedPath("configmap", "app.bin"), + manyHellos(30)) + kvLdr := kv.NewLoader( + loader.NewFileLoaderAtRoot(fSys), + valtest_test.MakeFakeValidator()) + + for n := range testCases { + tc := testCases[n] + t.Run(n, func(t *testing.T) { + rn, err := generators.MakeConfigMap(kvLdr, &tc.args) + if err != nil { + if !assert.EqualError(t, err, tc.exp.errMsg) { + t.FailNow() + } + return + } + if tc.exp.errMsg != "" { + t.Fatalf("%s: should return error '%s'", n, tc.exp.errMsg) + } + output := rn.MustString() + if !assert.Equal(t, tc.exp.out, output) { + t.FailNow() + } + }) + } +} diff --git a/go/internal/forked/api/internal/generators/configmap_test.go b/go/internal/forked/api/internal/generators/configmap_test.go new file mode 100644 index 000000000..a2499a12c --- /dev/null +++ b/go/internal/forked/api/internal/generators/configmap_test.go @@ -0,0 +1,225 @@ +// Copyright 2020 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package generators_test + +import ( + "path/filepath" + "testing" + + "github.com/stretchr/testify/assert" + "sigs.k8s.io/kustomize/api/internal/generators" + "sigs.k8s.io/kustomize/api/kv" + "sigs.k8s.io/kustomize/api/loader" + valtest_test "sigs.k8s.io/kustomize/api/testutils/valtest" + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/filesys" +) + +var binaryHello = []byte{ + 0xff, // non-utf8 + 0x68, // h + 0x65, // e + 0x6c, // l + 0x6c, // l + 0x6f, // o +} + +func manyHellos(count int) (result []byte) { + for i := 0; i < count; i++ { + result = append(result, binaryHello...) + } + return +} + +func TestMakeConfigMap(t *testing.T) { + type expected struct { + out string + errMsg string + } + + testCases := map[string]struct { + args types.ConfigMapArgs + exp expected + }{ + "construct config map from env": { + args: types.ConfigMapArgs{ + GeneratorArgs: types.GeneratorArgs{ + Name: "envConfigMap", + KvPairSources: types.KvPairSources{ + EnvSources: []string{ + filepath.Join("configmap", "app.env"), + }, + }, + }, + }, + exp: expected{ + out: `apiVersion: v1 +kind: ConfigMap +metadata: + name: envConfigMap +data: + DB_PASSWORD: qwerty + DB_USERNAME: admin +`, + }, + }, + "construct config map from text file": { + args: types.ConfigMapArgs{ + GeneratorArgs: types.GeneratorArgs{ + Name: "fileConfigMap1", + KvPairSources: types.KvPairSources{ + FileSources: []string{ + filepath.Join("configmap", "app-init.ini"), + }, + }, + }, + }, + exp: expected{ + out: `apiVersion: v1 +kind: ConfigMap +metadata: + name: fileConfigMap1 +data: + app-init.ini: | + FOO=bar + BAR=baz +`, + }, + }, + "construct config map from text and binary file": { + args: types.ConfigMapArgs{ + GeneratorArgs: types.GeneratorArgs{ + Name: "fileConfigMap2", + KvPairSources: types.KvPairSources{ + FileSources: []string{ + filepath.Join("configmap", "app-init.ini"), + filepath.Join("configmap", "app.bin"), + }, + }, + }, + }, + exp: expected{ + out: `apiVersion: v1 +kind: ConfigMap +metadata: + name: fileConfigMap2 +data: + app-init.ini: | + FOO=bar + BAR=baz +binaryData: + app.bin: | + /2hlbGxv/2hlbGxv/2hlbGxv/2hlbGxv/2hlbGxv/2hlbGxv/2hlbGxv/2hlbGxv/2hlbG + xv/2hlbGxv/2hlbGxv/2hlbGxv/2hlbGxv/2hlbGxv/2hlbGxv/2hlbGxv/2hlbGxv/2hl + bGxv/2hlbGxv/2hlbGxv/2hlbGxv/2hlbGxv/2hlbGxv/2hlbGxv/2hlbGxv/2hlbGxv/2 + hlbGxv/2hlbGxv/2hlbGxv/2hlbGxv +`, + }, + }, + "construct config map from literal": { + args: types.ConfigMapArgs{ + GeneratorArgs: types.GeneratorArgs{ + Name: "literalConfigMap1", + KvPairSources: types.KvPairSources{ + LiteralSources: []string{"a=x", "b=y", "c=\"Hello World\"", "d='true'"}, + }, + Options: &types.GeneratorOptions{ + Labels: map[string]string{ + "foo": "bar", + }, + }, + }, + }, + exp: expected{ + out: `apiVersion: v1 +kind: ConfigMap +metadata: + name: literalConfigMap1 + labels: + foo: 'bar' +data: + a: x + b: y + c: Hello World + d: "true" +`, + }, + }, + "construct config map from literal with GeneratorOptions in ConfigMapArgs": { + args: types.ConfigMapArgs{ + GeneratorArgs: types.GeneratorArgs{ + Name: "literalConfigMap2", + KvPairSources: types.KvPairSources{ + LiteralSources: []string{"a=x", "b=y", "c=\"Hello World\"", "d='true'"}, + }, + Options: &types.GeneratorOptions{ + Labels: map[string]string{ + "veggie": "celery", + "dog": "beagle", + "cat": "annoying", + }, + Annotations: map[string]string{ + "river": "Missouri", + "city": "Iowa City", + }, + Immutable: true, + }, + }, + }, + exp: expected{ + out: `apiVersion: v1 +kind: ConfigMap +metadata: + name: literalConfigMap2 + labels: + cat: 'annoying' + dog: 'beagle' + veggie: 'celery' + annotations: + city: 'Iowa City' + river: 'Missouri' +data: + a: x + b: y + c: Hello World + d: "true" +immutable: true +`, + }, + }, + } + fSys := filesys.MakeFsInMemory() + fSys.WriteFile( + filesys.RootedPath("configmap", "app.env"), + []byte("DB_USERNAME=admin\nDB_PASSWORD=qwerty\n")) + fSys.WriteFile( + filesys.RootedPath("configmap", "app-init.ini"), + []byte("FOO=bar\nBAR=baz\n")) + fSys.WriteFile( + filesys.RootedPath("configmap", "app.bin"), + manyHellos(30)) + kvLdr := kv.NewLoader( + loader.NewFileLoaderAtRoot(fSys), + valtest_test.MakeFakeValidator()) + + for n := range testCases { + tc := testCases[n] + t.Run(n, func(t *testing.T) { + rn, err := generators.MakeConfigMap(kvLdr, &tc.args) + if err != nil { + if !assert.EqualError(t, err, tc.exp.errMsg) { + t.FailNow() + } + return + } + if tc.exp.errMsg != "" { + t.Fatalf("%s: should return error '%s'", n, tc.exp.errMsg) + } + output := rn.MustString() + if !assert.Equal(t, tc.exp.out, output) { + t.FailNow() + } + }) + } +} diff --git a/go/internal/forked/api/internal/generators/secret.go b/go/internal/forked/api/internal/generators/secret.go new file mode 100644 index 000000000..e47d6de3e --- /dev/null +++ b/go/internal/forked/api/internal/generators/secret.go @@ -0,0 +1,59 @@ +// Copyright 2020 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package generators + +import ( + "sigs.k8s.io/kustomize/api/ifc" + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" +) + +// MakeSecret makes a kubernetes Secret. +// +// Secret: https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.19/#secret-v1-core +// +// ConfigMaps and Secrets are similar. +// +// Like a ConfigMap, a Secret has a `data` field, but unlike a ConfigMap it has +// no `binaryData` field. +// +// All of a Secret's data is assumed to be opaque in nature, and assumed to be +// base64 encoded from its original representation, regardless of whether the +// original data was UTF-8 text or binary. +// +// This encoding provides no secrecy. It's just a neutral, common means to +// represent opaque text and binary data. Beneath the base64 encoding +// is presumably further encoding under control of the Secret's consumer. +// +// A Secret has string field `type` which holds an identifier, used by the +// client, to choose the algorithm to interpret the `data` field. Kubernetes +// cannot make use of this data; it's up to a controller or some pod's service +// to interpret the value, using `type` as a clue as to how to do this. +func MakeSecret( + ldr ifc.KvLoader, args *types.SecretArgs) (rn *yaml.RNode, err error) { + rn, err = makeBaseNode("Secret", args.Name, args.Namespace) + if err != nil { + return nil, err + } + t := "Opaque" + if args.Type != "" { + t = args.Type + } + if _, err := rn.Pipe( + yaml.FieldSetter{ + Name: "type", + Value: yaml.NewStringRNode(t)}); err != nil { + return nil, err + } + m, err := makeValidatedDataMap(ldr, args.Name, args.KvPairSources) + if err != nil { + return nil, err + } + if err = rn.LoadMapIntoSecretData(m); err != nil { + return nil, err + } + copyLabelsAndAnnotations(rn, args.Options) + setImmutable(rn, args.Options) + return rn, nil +} diff --git a/go/internal/forked/api/internal/generators/secret.go b/go/internal/forked/api/internal/generators/secret.go new file mode 100644 index 000000000..c7cc4f6fa --- /dev/null +++ b/go/internal/forked/api/internal/generators/secret.go @@ -0,0 +1,59 @@ +// Copyright 2020 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package generators + +import ( + "sigs.k8s.io/kustomize/api/ifc" + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/yaml" +) + +// MakeSecret makes a kubernetes Secret. +// +// Secret: https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.19/#secret-v1-core +// +// ConfigMaps and Secrets are similar. +// +// Like a ConfigMap, a Secret has a `data` field, but unlike a ConfigMap it has +// no `binaryData` field. +// +// All of a Secret's data is assumed to be opaque in nature, and assumed to be +// base64 encoded from its original representation, regardless of whether the +// original data was UTF-8 text or binary. +// +// This encoding provides no secrecy. It's just a neutral, common means to +// represent opaque text and binary data. Beneath the base64 encoding +// is presumably further encoding under control of the Secret's consumer. +// +// A Secret has string field `type` which holds an identifier, used by the +// client, to choose the algorithm to interpret the `data` field. Kubernetes +// cannot make use of this data; it's up to a controller or some pod's service +// to interpret the value, using `type` as a clue as to how to do this. +func MakeSecret( + ldr ifc.KvLoader, args *types.SecretArgs) (rn *yaml.RNode, err error) { + rn, err = makeBaseNode("Secret", args.Name, args.Namespace) + if err != nil { + return nil, err + } + t := "Opaque" + if args.Type != "" { + t = args.Type + } + if _, err := rn.Pipe( + yaml.FieldSetter{ + Name: "type", + Value: yaml.NewStringRNode(t)}); err != nil { + return nil, err + } + m, err := makeValidatedDataMap(ldr, args.Name, args.KvPairSources) + if err != nil { + return nil, err + } + if err = rn.LoadMapIntoSecretData(m); err != nil { + return nil, err + } + copyLabelsAndAnnotations(rn, args.Options) + setImmutable(rn, args.Options) + return rn, nil +} diff --git a/go/internal/forked/api/internal/generators/secret_test.go b/go/internal/forked/api/internal/generators/secret_test.go new file mode 100644 index 000000000..c2c0e6948 --- /dev/null +++ b/go/internal/forked/api/internal/generators/secret_test.go @@ -0,0 +1,233 @@ +// Copyright 2020 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package generators_test + +import ( + "path/filepath" + "testing" + + "github.com/stretchr/testify/assert" + "sigs.k8s.io/kustomize/api/internal/generators" + "sigs.k8s.io/kustomize/api/kv" + "sigs.k8s.io/kustomize/api/loader" + valtest_test "sigs.k8s.io/kustomize/api/testutils/valtest" + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/filesys" +) + +func TestMakeSecret(t *testing.T) { + type expected struct { + out string + errMsg string + } + + testCases := map[string]struct { + args types.SecretArgs + exp expected + }{ + "construct secret from env": { + args: types.SecretArgs{ + GeneratorArgs: types.GeneratorArgs{ + Name: "envSecret", + KvPairSources: types.KvPairSources{ + EnvSources: []string{ + filepath.Join("secret", "app.env"), + }, + }, + }, + }, + exp: expected{ + out: `apiVersion: v1 +kind: Secret +metadata: + name: envSecret +type: Opaque +data: + DB_PASSWORD: cXdlcnR5 + DB_USERNAME: YWRtaW4= +`, + }, + }, + "construct secret from text file": { + args: types.SecretArgs{ + GeneratorArgs: types.GeneratorArgs{ + Name: "fileSecret1", + KvPairSources: types.KvPairSources{ + FileSources: []string{ + filepath.Join("secret", "app-init.ini"), + }, + }, + }, + }, + exp: expected{ + out: `apiVersion: v1 +kind: Secret +metadata: + name: fileSecret1 +type: Opaque +data: + app-init.ini: Rk9PPWJhcgpCQVI9YmF6Cg== +`, + }, + }, + "construct secret from text and binary file": { + args: types.SecretArgs{ + GeneratorArgs: types.GeneratorArgs{ + Name: "fileSecret2", + KvPairSources: types.KvPairSources{ + FileSources: []string{ + filepath.Join("secret", "app-init.ini"), + filepath.Join("secret", "app.bin"), + }, + }, + }, + }, + exp: expected{ + out: `apiVersion: v1 +kind: Secret +metadata: + name: fileSecret2 +type: Opaque +data: + app-init.ini: Rk9PPWJhcgpCQVI9YmF6Cg== + app.bin: //0= +`, + }, + }, + "construct secret from literal": { + args: types.SecretArgs{ + GeneratorArgs: types.GeneratorArgs{ + Name: "literalSecret1", + KvPairSources: types.KvPairSources{ + LiteralSources: []string{"a=x", "b=y", "c=\"Hello World\"", "d='true'"}, + }, + Options: &types.GeneratorOptions{ + Labels: map[string]string{ + "foo": "bar", + }, + }, + }, + }, + exp: expected{ + out: `apiVersion: v1 +kind: Secret +metadata: + name: literalSecret1 + labels: + foo: 'bar' +type: Opaque +data: + a: eA== + b: eQ== + c: SGVsbG8gV29ybGQ= + d: dHJ1ZQ== +`, + }, + }, + "construct secret with type": { + args: types.SecretArgs{ + GeneratorArgs: types.GeneratorArgs{ + Name: "literalSecret1", + KvPairSources: types.KvPairSources{ + LiteralSources: []string{"a=x"}, + }, + Options: &types.GeneratorOptions{ + Labels: map[string]string{ + "foo": "bar", + }, + }, + }, + Type: "foobar", + }, + exp: expected{ + out: `apiVersion: v1 +kind: Secret +metadata: + name: literalSecret1 + labels: + foo: 'bar' +type: foobar +data: + a: eA== +`, + }, + }, + "construct secret from literal with GeneratorOptions in SecretArgs": { + args: types.SecretArgs{ + GeneratorArgs: types.GeneratorArgs{ + Name: "literalSecret2", + KvPairSources: types.KvPairSources{ + LiteralSources: []string{"a=x", "b=y", "c=\"Hello World\"", "d='true'"}, + }, + Options: &types.GeneratorOptions{ + Labels: map[string]string{ + "veggie": "celery", + "dog": "beagle", + "cat": "annoying", + }, + Annotations: map[string]string{ + "river": "Missouri", + "city": "Iowa City", + }, + Immutable: true, + }, + }, + }, + exp: expected{ + out: `apiVersion: v1 +kind: Secret +metadata: + name: literalSecret2 + labels: + cat: 'annoying' + dog: 'beagle' + veggie: 'celery' + annotations: + city: 'Iowa City' + river: 'Missouri' +type: Opaque +data: + a: eA== + b: eQ== + c: SGVsbG8gV29ybGQ= + d: dHJ1ZQ== +immutable: true +`, + }, + }, + } + fSys := filesys.MakeFsInMemory() + fSys.WriteFile( + filesys.RootedPath("secret", "app.env"), + []byte("DB_USERNAME=admin\nDB_PASSWORD=qwerty\n")) + fSys.WriteFile( + filesys.RootedPath("secret", "app-init.ini"), + []byte("FOO=bar\nBAR=baz\n")) + fSys.WriteFile( + filesys.RootedPath("secret", "app.bin"), + []byte{0xff, 0xfd}) + kvLdr := kv.NewLoader( + loader.NewFileLoaderAtRoot(fSys), + valtest_test.MakeFakeValidator()) + + for n := range testCases { + tc := testCases[n] + t.Run(n, func(t *testing.T) { + rn, err := generators.MakeSecret(kvLdr, &tc.args) + if err != nil { + if !assert.EqualError(t, err, tc.exp.errMsg) { + t.FailNow() + } + return + } + if tc.exp.errMsg != "" { + t.Fatalf("%s: should return error '%s'", n, tc.exp.errMsg) + } + output := rn.MustString() + if !assert.Equal(t, tc.exp.out, output) { + t.FailNow() + } + }) + } +} diff --git a/go/internal/forked/api/internal/generators/secret_test.go b/go/internal/forked/api/internal/generators/secret_test.go new file mode 100644 index 000000000..9eee60483 --- /dev/null +++ b/go/internal/forked/api/internal/generators/secret_test.go @@ -0,0 +1,233 @@ +// Copyright 2020 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package generators_test + +import ( + "path/filepath" + "testing" + + "github.com/stretchr/testify/assert" + "sigs.k8s.io/kustomize/api/internal/generators" + "sigs.k8s.io/kustomize/api/kv" + "sigs.k8s.io/kustomize/api/loader" + valtest_test "sigs.k8s.io/kustomize/api/testutils/valtest" + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/filesys" +) + +func TestMakeSecret(t *testing.T) { + type expected struct { + out string + errMsg string + } + + testCases := map[string]struct { + args types.SecretArgs + exp expected + }{ + "construct secret from env": { + args: types.SecretArgs{ + GeneratorArgs: types.GeneratorArgs{ + Name: "envSecret", + KvPairSources: types.KvPairSources{ + EnvSources: []string{ + filepath.Join("secret", "app.env"), + }, + }, + }, + }, + exp: expected{ + out: `apiVersion: v1 +kind: Secret +metadata: + name: envSecret +type: Opaque +data: + DB_PASSWORD: cXdlcnR5 + DB_USERNAME: YWRtaW4= +`, + }, + }, + "construct secret from text file": { + args: types.SecretArgs{ + GeneratorArgs: types.GeneratorArgs{ + Name: "fileSecret1", + KvPairSources: types.KvPairSources{ + FileSources: []string{ + filepath.Join("secret", "app-init.ini"), + }, + }, + }, + }, + exp: expected{ + out: `apiVersion: v1 +kind: Secret +metadata: + name: fileSecret1 +type: Opaque +data: + app-init.ini: Rk9PPWJhcgpCQVI9YmF6Cg== +`, + }, + }, + "construct secret from text and binary file": { + args: types.SecretArgs{ + GeneratorArgs: types.GeneratorArgs{ + Name: "fileSecret2", + KvPairSources: types.KvPairSources{ + FileSources: []string{ + filepath.Join("secret", "app-init.ini"), + filepath.Join("secret", "app.bin"), + }, + }, + }, + }, + exp: expected{ + out: `apiVersion: v1 +kind: Secret +metadata: + name: fileSecret2 +type: Opaque +data: + app-init.ini: Rk9PPWJhcgpCQVI9YmF6Cg== + app.bin: //0= +`, + }, + }, + "construct secret from literal": { + args: types.SecretArgs{ + GeneratorArgs: types.GeneratorArgs{ + Name: "literalSecret1", + KvPairSources: types.KvPairSources{ + LiteralSources: []string{"a=x", "b=y", "c=\"Hello World\"", "d='true'"}, + }, + Options: &types.GeneratorOptions{ + Labels: map[string]string{ + "foo": "bar", + }, + }, + }, + }, + exp: expected{ + out: `apiVersion: v1 +kind: Secret +metadata: + name: literalSecret1 + labels: + foo: 'bar' +type: Opaque +data: + a: eA== + b: eQ== + c: SGVsbG8gV29ybGQ= + d: dHJ1ZQ== +`, + }, + }, + "construct secret with type": { + args: types.SecretArgs{ + GeneratorArgs: types.GeneratorArgs{ + Name: "literalSecret1", + KvPairSources: types.KvPairSources{ + LiteralSources: []string{"a=x"}, + }, + Options: &types.GeneratorOptions{ + Labels: map[string]string{ + "foo": "bar", + }, + }, + }, + Type: "foobar", + }, + exp: expected{ + out: `apiVersion: v1 +kind: Secret +metadata: + name: literalSecret1 + labels: + foo: 'bar' +type: foobar +data: + a: eA== +`, + }, + }, + "construct secret from literal with GeneratorOptions in SecretArgs": { + args: types.SecretArgs{ + GeneratorArgs: types.GeneratorArgs{ + Name: "literalSecret2", + KvPairSources: types.KvPairSources{ + LiteralSources: []string{"a=x", "b=y", "c=\"Hello World\"", "d='true'"}, + }, + Options: &types.GeneratorOptions{ + Labels: map[string]string{ + "veggie": "celery", + "dog": "beagle", + "cat": "annoying", + }, + Annotations: map[string]string{ + "river": "Missouri", + "city": "Iowa City", + }, + Immutable: true, + }, + }, + }, + exp: expected{ + out: `apiVersion: v1 +kind: Secret +metadata: + name: literalSecret2 + labels: + cat: 'annoying' + dog: 'beagle' + veggie: 'celery' + annotations: + city: 'Iowa City' + river: 'Missouri' +type: Opaque +data: + a: eA== + b: eQ== + c: SGVsbG8gV29ybGQ= + d: dHJ1ZQ== +immutable: true +`, + }, + }, + } + fSys := filesys.MakeFsInMemory() + fSys.WriteFile( + filesys.RootedPath("secret", "app.env"), + []byte("DB_USERNAME=admin\nDB_PASSWORD=qwerty\n")) + fSys.WriteFile( + filesys.RootedPath("secret", "app-init.ini"), + []byte("FOO=bar\nBAR=baz\n")) + fSys.WriteFile( + filesys.RootedPath("secret", "app.bin"), + []byte{0xff, 0xfd}) + kvLdr := kv.NewLoader( + loader.NewFileLoaderAtRoot(fSys), + valtest_test.MakeFakeValidator()) + + for n := range testCases { + tc := testCases[n] + t.Run(n, func(t *testing.T) { + rn, err := generators.MakeSecret(kvLdr, &tc.args) + if err != nil { + if !assert.EqualError(t, err, tc.exp.errMsg) { + t.FailNow() + } + return + } + if tc.exp.errMsg != "" { + t.Fatalf("%s: should return error '%s'", n, tc.exp.errMsg) + } + output := rn.MustString() + if !assert.Equal(t, tc.exp.out, output) { + t.FailNow() + } + }) + } +} diff --git a/go/internal/forked/api/internal/generators/utils.go b/go/internal/forked/api/internal/generators/utils.go new file mode 100644 index 000000000..655d894f7 --- /dev/null +++ b/go/internal/forked/api/internal/generators/utils.go @@ -0,0 +1,91 @@ +// Copyright 2020 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package generators + +import ( + "fmt" + + "github.com/go-errors/errors" + "sigs.k8s.io/kustomize/api/ifc" + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" +) + +func makeBaseNode(kind, name, namespace string) (*yaml.RNode, error) { + rn, err := yaml.Parse(fmt.Sprintf(` +apiVersion: v1 +kind: %s +`, kind)) + if err != nil { + return nil, err + } + if name == "" { + return nil, errors.Errorf("a configmap must have a name") + } + if _, err := rn.Pipe(yaml.SetK8sName(name)); err != nil { + return nil, err + } + if namespace != "" { + if _, err := rn.Pipe(yaml.SetK8sNamespace(namespace)); err != nil { + return nil, err + } + } + return rn, nil +} + +func makeValidatedDataMap( + ldr ifc.KvLoader, name string, sources types.KvPairSources) (map[string]string, error) { + pairs, err := ldr.Load(sources) + if err != nil { + return nil, errors.WrapPrefix(err, "loading KV pairs", 0) + } + knownKeys := make(map[string]string) + for _, p := range pairs { + // legal key: alphanumeric characters, '-', '_' or '.' + if err := ldr.Validator().ErrIfInvalidKey(p.Key); err != nil { + return nil, err + } + if _, ok := knownKeys[p.Key]; ok { + return nil, errors.Errorf( + "configmap %s illegally repeats the key `%s`", name, p.Key) + } + knownKeys[p.Key] = p.Value + } + return knownKeys, nil +} + +// copyLabelsAndAnnotations copies labels and annotations from +// GeneratorOptions into the given object. +func copyLabelsAndAnnotations( + rn *yaml.RNode, opts *types.GeneratorOptions) error { + if opts == nil { + return nil + } + for _, k := range yaml.SortedMapKeys(opts.Labels) { + v := opts.Labels[k] + if _, err := rn.Pipe(yaml.SetLabel(k, v)); err != nil { + return err + } + } + for _, k := range yaml.SortedMapKeys(opts.Annotations) { + v := opts.Annotations[k] + if _, err := rn.Pipe(yaml.SetAnnotation(k, v)); err != nil { + return err + } + } + return nil +} + +func setImmutable( + rn *yaml.RNode, opts *types.GeneratorOptions) error { + if opts == nil { + return nil + } + if opts.Immutable { + if _, err := rn.Pipe(yaml.SetField("immutable", yaml.NewScalarRNode("true"))); err != nil { + return err + } + } + return nil +} diff --git a/go/internal/forked/api/internal/generators/utils.go b/go/internal/forked/api/internal/generators/utils.go new file mode 100644 index 000000000..dc46a9edd --- /dev/null +++ b/go/internal/forked/api/internal/generators/utils.go @@ -0,0 +1,91 @@ +// Copyright 2020 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package generators + +import ( + "fmt" + + "github.com/go-errors/errors" + "sigs.k8s.io/kustomize/api/ifc" + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/yaml" +) + +func makeBaseNode(kind, name, namespace string) (*yaml.RNode, error) { + rn, err := yaml.Parse(fmt.Sprintf(` +apiVersion: v1 +kind: %s +`, kind)) + if err != nil { + return nil, err + } + if name == "" { + return nil, errors.Errorf("a configmap must have a name") + } + if _, err := rn.Pipe(yaml.SetK8sName(name)); err != nil { + return nil, err + } + if namespace != "" { + if _, err := rn.Pipe(yaml.SetK8sNamespace(namespace)); err != nil { + return nil, err + } + } + return rn, nil +} + +func makeValidatedDataMap( + ldr ifc.KvLoader, name string, sources types.KvPairSources) (map[string]string, error) { + pairs, err := ldr.Load(sources) + if err != nil { + return nil, errors.WrapPrefix(err, "loading KV pairs", 0) + } + knownKeys := make(map[string]string) + for _, p := range pairs { + // legal key: alphanumeric characters, '-', '_' or '.' + if err := ldr.Validator().ErrIfInvalidKey(p.Key); err != nil { + return nil, err + } + if _, ok := knownKeys[p.Key]; ok { + return nil, errors.Errorf( + "configmap %s illegally repeats the key `%s`", name, p.Key) + } + knownKeys[p.Key] = p.Value + } + return knownKeys, nil +} + +// copyLabelsAndAnnotations copies labels and annotations from +// GeneratorOptions into the given object. +func copyLabelsAndAnnotations( + rn *yaml.RNode, opts *types.GeneratorOptions) error { + if opts == nil { + return nil + } + for _, k := range yaml.SortedMapKeys(opts.Labels) { + v := opts.Labels[k] + if _, err := rn.Pipe(yaml.SetLabel(k, v)); err != nil { + return err + } + } + for _, k := range yaml.SortedMapKeys(opts.Annotations) { + v := opts.Annotations[k] + if _, err := rn.Pipe(yaml.SetAnnotation(k, v)); err != nil { + return err + } + } + return nil +} + +func setImmutable( + rn *yaml.RNode, opts *types.GeneratorOptions) error { + if opts == nil { + return nil + } + if opts.Immutable { + if _, err := rn.Pipe(yaml.SetField("immutable", yaml.NewScalarRNode("true"))); err != nil { + return err + } + } + return nil +} diff --git a/go/internal/forked/api/internal/git/cloner.go b/go/internal/forked/api/internal/git/cloner.go new file mode 100644 index 000000000..523333a3d --- /dev/null +++ b/go/internal/forked/api/internal/git/cloner.go @@ -0,0 +1,54 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package git + +import ( + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/filesys" +) + +// Cloner is a function that can clone a git repo. +type Cloner func(repoSpec *RepoSpec) error + +// ClonerUsingGitExec uses a local git install, as opposed +// to say, some remote API, to obtain a local clone of +// a remote repo. +func ClonerUsingGitExec(repoSpec *RepoSpec) error { + r, err := newCmdRunner(repoSpec.Timeout) + if err != nil { + return err + } + repoSpec.Dir = r.dir + if err = r.run("init"); err != nil { + return err + } + if err = r.run( + "remote", "add", "origin", repoSpec.CloneSpec()); err != nil { + return err + } + ref := "HEAD" + if repoSpec.Ref != "" { + ref = repoSpec.Ref + } + if err = r.run("fetch", "--depth=1", "origin", ref); err != nil { + return err + } + if err = r.run("checkout", "FETCH_HEAD"); err != nil { + return err + } + if repoSpec.Submodules { + return r.run("submodule", "update", "--init", "--recursive") + } + return nil +} + +// DoNothingCloner returns a cloner that only sets +// cloneDir field in the repoSpec. It's assumed that +// the cloneDir is associated with some fake filesystem +// used in a test. +func DoNothingCloner(dir filesys.ConfirmedDir) Cloner { + return func(rs *RepoSpec) error { + rs.Dir = dir + return nil + } +} diff --git a/go/internal/forked/api/internal/git/cloner.go b/go/internal/forked/api/internal/git/cloner.go new file mode 100644 index 000000000..6e0cf0e1c --- /dev/null +++ b/go/internal/forked/api/internal/git/cloner.go @@ -0,0 +1,54 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package git + +import ( + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/filesys" +) + +// Cloner is a function that can clone a git repo. +type Cloner func(repoSpec *RepoSpec) error + +// ClonerUsingGitExec uses a local git install, as opposed +// to say, some remote API, to obtain a local clone of +// a remote repo. +func ClonerUsingGitExec(repoSpec *RepoSpec) error { + r, err := newCmdRunner(repoSpec.Timeout) + if err != nil { + return err + } + repoSpec.Dir = r.dir + if err = r.run("init"); err != nil { + return err + } + if err = r.run( + "remote", "add", "origin", repoSpec.CloneSpec()); err != nil { + return err + } + ref := "HEAD" + if repoSpec.Ref != "" { + ref = repoSpec.Ref + } + if err = r.run("fetch", "--depth=1", "origin", ref); err != nil { + return err + } + if err = r.run("checkout", "FETCH_HEAD"); err != nil { + return err + } + if repoSpec.Submodules { + return r.run("submodule", "update", "--init", "--recursive") + } + return nil +} + +// DoNothingCloner returns a cloner that only sets +// cloneDir field in the repoSpec. It's assumed that +// the cloneDir is associated with some fake filesystem +// used in a test. +func DoNothingCloner(dir filesys.ConfirmedDir) Cloner { + return func(rs *RepoSpec) error { + rs.Dir = dir + return nil + } +} diff --git a/go/internal/forked/api/internal/git/gitrunner.go b/go/internal/forked/api/internal/git/gitrunner.go new file mode 100644 index 000000000..5bb5cf4b5 --- /dev/null +++ b/go/internal/forked/api/internal/git/gitrunner.go @@ -0,0 +1,55 @@ +// Copyright 2020 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package git + +import ( + "os/exec" + "time" + + "github.com/pkg/errors" + "sigs.k8s.io/kustomize/api/internal/utils" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/filesys" +) + +// gitRunner runs the external git binary. +type gitRunner struct { + gitProgram string + duration time.Duration + dir filesys.ConfirmedDir +} + +// newCmdRunner returns a gitRunner if it can find the binary. +// It also creats a temp directory for cloning repos. +func newCmdRunner(timeout time.Duration) (*gitRunner, error) { + gitProgram, err := exec.LookPath("git") + if err != nil { + return nil, errors.Wrap(err, "no 'git' program on path") + } + dir, err := filesys.NewTmpConfirmedDir() + if err != nil { + return nil, err + } + return &gitRunner{ + gitProgram: gitProgram, + duration: timeout, + dir: dir, + }, nil +} + +// run a command with a timeout. +func (r gitRunner) run(args ...string) error { + //nolint: gosec + cmd := exec.Command(r.gitProgram, args...) + cmd.Dir = r.dir.String() + return utils.TimedCall( + cmd.String(), + r.duration, + func() error { + _, err := cmd.CombinedOutput() + if err != nil { + return errors.Wrapf(err, "git cmd = '%s'", cmd.String()) + } + return err + }) +} diff --git a/go/internal/forked/api/internal/git/gitrunner.go b/go/internal/forked/api/internal/git/gitrunner.go new file mode 100644 index 000000000..9bf8eadb7 --- /dev/null +++ b/go/internal/forked/api/internal/git/gitrunner.go @@ -0,0 +1,55 @@ +// Copyright 2020 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package git + +import ( + "os/exec" + "time" + + "github.com/pkg/errors" + "sigs.k8s.io/kustomize/api/internal/utils" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/filesys" +) + +// gitRunner runs the external git binary. +type gitRunner struct { + gitProgram string + duration time.Duration + dir filesys.ConfirmedDir +} + +// newCmdRunner returns a gitRunner if it can find the binary. +// It also creats a temp directory for cloning repos. +func newCmdRunner(timeout time.Duration) (*gitRunner, error) { + gitProgram, err := exec.LookPath("git") + if err != nil { + return nil, errors.Wrap(err, "no 'git' program on path") + } + dir, err := filesys.NewTmpConfirmedDir() + if err != nil { + return nil, err + } + return &gitRunner{ + gitProgram: gitProgram, + duration: timeout, + dir: dir, + }, nil +} + +// run a command with a timeout. +func (r gitRunner) run(args ...string) error { + //nolint: gosec + cmd := exec.Command(r.gitProgram, args...) + cmd.Dir = r.dir.String() + return utils.TimedCall( + cmd.String(), + r.duration, + func() error { + _, err := cmd.CombinedOutput() + if err != nil { + return errors.Wrapf(err, "git cmd = '%s'", cmd.String()) + } + return err + }) +} diff --git a/go/internal/forked/api/internal/git/repospec.go b/go/internal/forked/api/internal/git/repospec.go new file mode 100644 index 000000000..74aa54c59 --- /dev/null +++ b/go/internal/forked/api/internal/git/repospec.go @@ -0,0 +1,268 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package git + +import ( + "fmt" + "net/url" + "path/filepath" + "strconv" + "strings" + "time" + + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/filesys" +) + +// Used as a temporary non-empty occupant of the cloneDir +// field, as something distinguishable from the empty string +// in various outputs (especially tests). Not using an +// actual directory name here, as that's a temporary directory +// with a unique name that isn't created until clone time. +const notCloned = filesys.ConfirmedDir("/notCloned") + +// RepoSpec specifies a git repository and a branch and path therein. +type RepoSpec struct { + // Raw, original spec, used to look for cycles. + // TODO(monopole): Drop raw, use processed fields instead. + raw string + + // Host, e.g. github.com + Host string + + // orgRepo name (organization/repoName), + // e.g. kubernetes-sigs/kustomize + OrgRepo string + + // Dir where the orgRepo is cloned to. + Dir filesys.ConfirmedDir + + // Relative path in the repository, and in the cloneDir, + // to a Kustomization. + Path string + + // Branch or tag reference. + Ref string + + // e.g. .git or empty in case of _git is present + GitSuffix string + + // Submodules indicates whether or not to clone git submodules. + Submodules bool + + // Timeout is the maximum duration allowed for execing git commands. + Timeout time.Duration +} + +// CloneSpec returns a string suitable for "git clone {spec}". +func (x *RepoSpec) CloneSpec() string { + if isAzureHost(x.Host) || isAWSHost(x.Host) { + return x.Host + x.OrgRepo + } + return x.Host + x.OrgRepo + x.GitSuffix +} + +func (x *RepoSpec) CloneDir() filesys.ConfirmedDir { + return x.Dir +} + +func (x *RepoSpec) Raw() string { + return x.raw +} + +func (x *RepoSpec) AbsPath() string { + return x.Dir.Join(x.Path) +} + +func (x *RepoSpec) Cleaner(fSys filesys.FileSystem) func() error { + return func() error { return fSys.RemoveAll(x.Dir.String()) } +} + +// NewRepoSpecFromUrl parses git-like urls. +// From strings like git@github.com:someOrg/someRepo.git or +// https://github.com/someOrg/someRepo?ref=someHash, extract +// the parts. +func NewRepoSpecFromUrl(n string) (*RepoSpec, error) { + if filepath.IsAbs(n) { + return nil, fmt.Errorf("uri looks like abs path: %s", n) + } + host, orgRepo, path, gitRef, gitSubmodules, suffix, gitTimeout := parseGitUrl(n) + if orgRepo == "" { + return nil, fmt.Errorf("url lacks orgRepo: %s", n) + } + if host == "" { + return nil, fmt.Errorf("url lacks host: %s", n) + } + return &RepoSpec{ + raw: n, Host: host, OrgRepo: orgRepo, + Dir: notCloned, Path: path, Ref: gitRef, GitSuffix: suffix, + Submodules: gitSubmodules, Timeout: gitTimeout}, nil +} + +const ( + refQuery = "?ref=" + gitSuffix = ".git" + gitDelimiter = "_git/" +) + +// From strings like git@github.com:someOrg/someRepo.git or +// https://github.com/someOrg/someRepo?ref=someHash, extract +// the parts. +func parseGitUrl(n string) ( + host string, orgRepo string, path string, gitRef string, gitSubmodules bool, gitSuff string, gitTimeout time.Duration) { + + if strings.Contains(n, gitDelimiter) { + index := strings.Index(n, gitDelimiter) + // Adding _git/ to host + host = normalizeGitHostSpec(n[:index+len(gitDelimiter)]) + orgRepo = strings.Split(strings.Split(n[index+len(gitDelimiter):], "/")[0], "?")[0] + path, gitRef, gitTimeout, gitSubmodules = peelQuery(n[index+len(gitDelimiter)+len(orgRepo):]) + return + } + host, n = parseHostSpec(n) + gitSuff = gitSuffix + if strings.Contains(n, gitSuffix) { + index := strings.Index(n, gitSuffix) + orgRepo = n[0:index] + n = n[index+len(gitSuffix):] + if len(n) > 0 && n[0] == '/' { + n = n[1:] + } + path, gitRef, gitTimeout, gitSubmodules = peelQuery(n) + return + } + + i := strings.Index(n, "/") + if i < 1 { + path, gitRef, gitTimeout, gitSubmodules = peelQuery(n) + return + } + j := strings.Index(n[i+1:], "/") + if j >= 0 { + j += i + 1 + orgRepo = n[:j] + path, gitRef, gitTimeout, gitSubmodules = peelQuery(n[j+1:]) + return + } + path = "" + orgRepo, gitRef, gitTimeout, gitSubmodules = peelQuery(n) + return host, orgRepo, path, gitRef, gitSubmodules, gitSuff, gitTimeout +} + +// Clone git submodules by default. +const defaultSubmodules = true + +// Arbitrary, but non-infinite, timeout for running commands. +const defaultTimeout = 27 * time.Second + +func peelQuery(arg string) (string, string, time.Duration, bool) { + // Parse the given arg into a URL. In the event of a parse failure, return + // our defaults. + parsed, err := url.Parse(arg) + if err != nil { + return arg, "", defaultTimeout, defaultSubmodules + } + values := parsed.Query() + + // ref is the desired git ref to target. Can be specified by in a git URL + // with ?ref= or ?version=, although ref takes precedence. + ref := values.Get("version") + if queryValue := values.Get("ref"); queryValue != "" { + ref = queryValue + } + + // depth is the desired git exec timeout. Can be specified by in a git URL + // with ?timeout=. + duration := defaultTimeout + if queryValue := values.Get("timeout"); queryValue != "" { + // Attempt to first parse as a number of integer seconds (like "61"), + // and then attempt to parse as a suffixed duration (like "61s"). + if intValue, err := strconv.Atoi(queryValue); err == nil && intValue > 0 { + duration = time.Duration(intValue) * time.Second + } else if durationValue, err := time.ParseDuration(queryValue); err == nil && durationValue > 0 { + duration = durationValue + } + } + + // submodules indicates if git submodule cloning is desired. Can be + // specified by in a git URL with ?submodules=. + submodules := defaultSubmodules + if queryValue := values.Get("submodules"); queryValue != "" { + if boolValue, err := strconv.ParseBool(queryValue); err == nil { + submodules = boolValue + } + } + + return parsed.Path, ref, duration, submodules +} + +func parseHostSpec(n string) (string, string) { + var host string + // Start accumulating the host part. + for _, p := range []string{ + // Order matters here. + "git::", "gh:", "ssh://", "https://", "http://", + "git@", "github.com:", "github.com/"} { + if len(p) < len(n) && strings.ToLower(n[:len(p)]) == p { + n = n[len(p):] + host += p + } + } + if host == "git@" { + i := strings.Index(n, "/") + if i > -1 { + host += n[:i+1] + n = n[i+1:] + } else { + i = strings.Index(n, ":") + if i > -1 { + host += n[:i+1] + n = n[i+1:] + } + } + return host, n + } + + // If host is a http(s) or ssh URL, grab the domain part. + for _, p := range []string{ + "ssh://", "https://", "http://"} { + if strings.HasSuffix(host, p) { + i := strings.Index(n, "/") + if i > -1 { + host = host + n[0:i+1] + n = n[i+1:] + } + break + } + } + + return normalizeGitHostSpec(host), n +} + +func normalizeGitHostSpec(host string) string { + s := strings.ToLower(host) + if strings.Contains(s, "github.com") { + if strings.Contains(s, "git@") || strings.Contains(s, "ssh:") { + host = "git@github.com:" + } else { + host = "https://github.com/" + } + } + if strings.HasPrefix(s, "git::") { + host = strings.TrimPrefix(s, "git::") + } + return host +} + +// The format of Azure repo URL is documented +// https://docs.microsoft.com/en-us/azure/devops/repos/git/clone?view=vsts&tabs=visual-studio#clone_url +func isAzureHost(host string) bool { + return strings.Contains(host, "dev.azure.com") || + strings.Contains(host, "visualstudio.com") +} + +// The format of AWS repo URL is documented +// https://docs.aws.amazon.com/codecommit/latest/userguide/regions.html +func isAWSHost(host string) bool { + return strings.Contains(host, "amazonaws.com") +} diff --git a/go/internal/forked/api/internal/git/repospec.go b/go/internal/forked/api/internal/git/repospec.go new file mode 100644 index 000000000..f5702c335 --- /dev/null +++ b/go/internal/forked/api/internal/git/repospec.go @@ -0,0 +1,268 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package git + +import ( + "fmt" + "net/url" + "path/filepath" + "strconv" + "strings" + "time" + + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/filesys" +) + +// Used as a temporary non-empty occupant of the cloneDir +// field, as something distinguishable from the empty string +// in various outputs (especially tests). Not using an +// actual directory name here, as that's a temporary directory +// with a unique name that isn't created until clone time. +const notCloned = filesys.ConfirmedDir("/notCloned") + +// RepoSpec specifies a git repository and a branch and path therein. +type RepoSpec struct { + // Raw, original spec, used to look for cycles. + // TODO(monopole): Drop raw, use processed fields instead. + raw string + + // Host, e.g. github.com + Host string + + // orgRepo name (organization/repoName), + // e.g. kubernetes-sigs/kustomize + OrgRepo string + + // Dir where the orgRepo is cloned to. + Dir filesys.ConfirmedDir + + // Relative path in the repository, and in the cloneDir, + // to a Kustomization. + Path string + + // Branch or tag reference. + Ref string + + // e.g. .git or empty in case of _git is present + GitSuffix string + + // Submodules indicates whether or not to clone git submodules. + Submodules bool + + // Timeout is the maximum duration allowed for execing git commands. + Timeout time.Duration +} + +// CloneSpec returns a string suitable for "git clone {spec}". +func (x *RepoSpec) CloneSpec() string { + if isAzureHost(x.Host) || isAWSHost(x.Host) { + return x.Host + x.OrgRepo + } + return x.Host + x.OrgRepo + x.GitSuffix +} + +func (x *RepoSpec) CloneDir() filesys.ConfirmedDir { + return x.Dir +} + +func (x *RepoSpec) Raw() string { + return x.raw +} + +func (x *RepoSpec) AbsPath() string { + return x.Dir.Join(x.Path) +} + +func (x *RepoSpec) Cleaner(fSys filesys.FileSystem) func() error { + return func() error { return fSys.RemoveAll(x.Dir.String()) } +} + +// NewRepoSpecFromUrl parses git-like urls. +// From strings like git@github.com:someOrg/someRepo.git or +// https://github.com/someOrg/someRepo?ref=someHash, extract +// the parts. +func NewRepoSpecFromUrl(n string) (*RepoSpec, error) { + if filepath.IsAbs(n) { + return nil, fmt.Errorf("uri looks like abs path: %s", n) + } + host, orgRepo, path, gitRef, gitSubmodules, suffix, gitTimeout := parseGitUrl(n) + if orgRepo == "" { + return nil, fmt.Errorf("url lacks orgRepo: %s", n) + } + if host == "" { + return nil, fmt.Errorf("url lacks host: %s", n) + } + return &RepoSpec{ + raw: n, Host: host, OrgRepo: orgRepo, + Dir: notCloned, Path: path, Ref: gitRef, GitSuffix: suffix, + Submodules: gitSubmodules, Timeout: gitTimeout}, nil +} + +const ( + refQuery = "?ref=" + gitSuffix = ".git" + gitDelimiter = "_git/" +) + +// From strings like git@github.com:someOrg/someRepo.git or +// https://github.com/someOrg/someRepo?ref=someHash, extract +// the parts. +func parseGitUrl(n string) ( + host string, orgRepo string, path string, gitRef string, gitSubmodules bool, gitSuff string, gitTimeout time.Duration) { + + if strings.Contains(n, gitDelimiter) { + index := strings.Index(n, gitDelimiter) + // Adding _git/ to host + host = normalizeGitHostSpec(n[:index+len(gitDelimiter)]) + orgRepo = strings.Split(strings.Split(n[index+len(gitDelimiter):], "/")[0], "?")[0] + path, gitRef, gitTimeout, gitSubmodules = peelQuery(n[index+len(gitDelimiter)+len(orgRepo):]) + return + } + host, n = parseHostSpec(n) + gitSuff = gitSuffix + if strings.Contains(n, gitSuffix) { + index := strings.Index(n, gitSuffix) + orgRepo = n[0:index] + n = n[index+len(gitSuffix):] + if len(n) > 0 && n[0] == '/' { + n = n[1:] + } + path, gitRef, gitTimeout, gitSubmodules = peelQuery(n) + return + } + + i := strings.Index(n, "/") + if i < 1 { + path, gitRef, gitTimeout, gitSubmodules = peelQuery(n) + return + } + j := strings.Index(n[i+1:], "/") + if j >= 0 { + j += i + 1 + orgRepo = n[:j] + path, gitRef, gitTimeout, gitSubmodules = peelQuery(n[j+1:]) + return + } + path = "" + orgRepo, gitRef, gitTimeout, gitSubmodules = peelQuery(n) + return host, orgRepo, path, gitRef, gitSubmodules, gitSuff, gitTimeout +} + +// Clone git submodules by default. +const defaultSubmodules = true + +// Arbitrary, but non-infinite, timeout for running commands. +const defaultTimeout = 27 * time.Second + +func peelQuery(arg string) (string, string, time.Duration, bool) { + // Parse the given arg into a URL. In the event of a parse failure, return + // our defaults. + parsed, err := url.Parse(arg) + if err != nil { + return arg, "", defaultTimeout, defaultSubmodules + } + values := parsed.Query() + + // ref is the desired git ref to target. Can be specified by in a git URL + // with ?ref= or ?version=, although ref takes precedence. + ref := values.Get("version") + if queryValue := values.Get("ref"); queryValue != "" { + ref = queryValue + } + + // depth is the desired git exec timeout. Can be specified by in a git URL + // with ?timeout=. + duration := defaultTimeout + if queryValue := values.Get("timeout"); queryValue != "" { + // Attempt to first parse as a number of integer seconds (like "61"), + // and then attempt to parse as a suffixed duration (like "61s"). + if intValue, err := strconv.Atoi(queryValue); err == nil && intValue > 0 { + duration = time.Duration(intValue) * time.Second + } else if durationValue, err := time.ParseDuration(queryValue); err == nil && durationValue > 0 { + duration = durationValue + } + } + + // submodules indicates if git submodule cloning is desired. Can be + // specified by in a git URL with ?submodules=. + submodules := defaultSubmodules + if queryValue := values.Get("submodules"); queryValue != "" { + if boolValue, err := strconv.ParseBool(queryValue); err == nil { + submodules = boolValue + } + } + + return parsed.Path, ref, duration, submodules +} + +func parseHostSpec(n string) (string, string) { + var host string + // Start accumulating the host part. + for _, p := range []string{ + // Order matters here. + "git::", "gh:", "ssh://", "https://", "http://", + "git@", "github.com:", "github.com/"} { + if len(p) < len(n) && strings.ToLower(n[:len(p)]) == p { + n = n[len(p):] + host += p + } + } + if host == "git@" { + i := strings.Index(n, "/") + if i > -1 { + host += n[:i+1] + n = n[i+1:] + } else { + i = strings.Index(n, ":") + if i > -1 { + host += n[:i+1] + n = n[i+1:] + } + } + return host, n + } + + // If host is a http(s) or ssh URL, grab the domain part. + for _, p := range []string{ + "ssh://", "https://", "http://"} { + if strings.HasSuffix(host, p) { + i := strings.Index(n, "/") + if i > -1 { + host = host + n[0:i+1] + n = n[i+1:] + } + break + } + } + + return normalizeGitHostSpec(host), n +} + +func normalizeGitHostSpec(host string) string { + s := strings.ToLower(host) + if strings.Contains(s, "github.com") { + if strings.Contains(s, "git@") || strings.Contains(s, "ssh:") { + host = "git@github.com:" + } else { + host = "https://github.com/" + } + } + if strings.HasPrefix(s, "git::") { + host = strings.TrimPrefix(s, "git::") + } + return host +} + +// The format of Azure repo URL is documented +// https://docs.microsoft.com/en-us/azure/devops/repos/git/clone?view=vsts&tabs=visual-studio#clone_url +func isAzureHost(host string) bool { + return strings.Contains(host, "dev.azure.com") || + strings.Contains(host, "visualstudio.com") +} + +// The format of AWS repo URL is documented +// https://docs.aws.amazon.com/codecommit/latest/userguide/regions.html +func isAWSHost(host string) bool { + return strings.Contains(host, "amazonaws.com") +} diff --git a/go/internal/forked/api/internal/git/repospec_test.go b/go/internal/forked/api/internal/git/repospec_test.go new file mode 100644 index 000000000..2e4404d03 --- /dev/null +++ b/go/internal/forked/api/internal/git/repospec_test.go @@ -0,0 +1,393 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package git + +import ( + "fmt" + "path/filepath" + "strings" + "testing" + "time" + + "github.com/stretchr/testify/assert" +) + +var orgRepos = []string{"someOrg/someRepo", "kubernetes/website"} + +var pathNames = []string{"README.md", "foo/krusty.txt", ""} + +var hrefArgs = []string{"someBranch", "master", "v0.1.0", ""} + +var hostNamesRawAndNormalized = [][]string{ + {"gh:", "gh:"}, + {"GH:", "gh:"}, + {"gitHub.com/", "https://github.com/"}, + {"github.com:", "https://github.com/"}, + {"http://github.com/", "https://github.com/"}, + {"https://github.com/", "https://github.com/"}, + {"hTTps://github.com/", "https://github.com/"}, + {"https://git-codecommit.us-east-2.amazonaws.com/", "https://git-codecommit.us-east-2.amazonaws.com/"}, + {"https://fabrikops2.visualstudio.com/", "https://fabrikops2.visualstudio.com/"}, + {"ssh://git.example.com:7999/", "ssh://git.example.com:7999/"}, + {"git::https://gitlab.com/", "https://gitlab.com/"}, + {"git::http://git.example.com/", "http://git.example.com/"}, + {"git::https://git.example.com/", "https://git.example.com/"}, + {"git@github.com:", "git@github.com:"}, + {"git@github.com/", "git@github.com:"}, +} + +func makeUrl(hostFmt, orgRepo, path, href string) string { + if len(path) > 0 { + orgRepo = filepath.Join(orgRepo, path) + } + url := hostFmt + orgRepo + if href != "" { + url += refQuery + href + } + return url +} + +func TestNewRepoSpecFromUrl(t *testing.T) { + var bad [][]string + for _, tuple := range hostNamesRawAndNormalized { + hostRaw := tuple[0] + hostSpec := tuple[1] + for _, orgRepo := range orgRepos { + for _, pathName := range pathNames { + for _, hrefArg := range hrefArgs { + uri := makeUrl(hostRaw, orgRepo, pathName, hrefArg) + rs, err := NewRepoSpecFromUrl(uri) + if err != nil { + t.Errorf("problem %v", err) + } + if rs.Host != hostSpec { + bad = append(bad, []string{"host", uri, rs.Host, hostSpec}) + } + if rs.OrgRepo != orgRepo { + bad = append(bad, []string{"orgRepo", uri, rs.OrgRepo, orgRepo}) + } + if rs.Path != pathName { + bad = append(bad, []string{"path", uri, rs.Path, pathName}) + } + if rs.Ref != hrefArg { + bad = append(bad, []string{"ref", uri, rs.Ref, hrefArg}) + } + } + } + } + } + if len(bad) > 0 { + for _, tuple := range bad { + fmt.Printf("\n"+ + " from uri: %s\n"+ + " actual %4s: %s\n"+ + "expected %4s: %s\n", + tuple[1], tuple[0], tuple[2], tuple[0], tuple[3]) + } + t.Fail() + } +} + +var badData = [][]string{ + {"/tmp", "uri looks like abs path"}, + {"iauhsdiuashduas", "url lacks orgRepo"}, + {"htxxxtp://github.com/", "url lacks host"}, + {"ssh://git.example.com", "url lacks orgRepo"}, + {"git::___", "url lacks orgRepo"}, +} + +func TestNewRepoSpecFromUrlErrors(t *testing.T) { + for _, tuple := range badData { + _, err := NewRepoSpecFromUrl(tuple[0]) + if err == nil { + t.Error("expected error") + } + if !strings.Contains(err.Error(), tuple[1]) { + t.Errorf("unexpected error: %s", err) + } + } +} + +func TestNewRepoSpecFromUrl_CloneSpecs(t *testing.T) { + testcases := map[string]struct { + input string + cloneSpec string + absPath string + ref string + }{ + "t1": { + input: "https://git-codecommit.us-east-2.amazonaws.com/someorg/somerepo/somedir", + cloneSpec: "https://git-codecommit.us-east-2.amazonaws.com/someorg/somerepo", + absPath: notCloned.Join("somedir"), + ref: "", + }, + "t2": { + input: "https://git-codecommit.us-east-2.amazonaws.com/someorg/somerepo/somedir?ref=testbranch", + cloneSpec: "https://git-codecommit.us-east-2.amazonaws.com/someorg/somerepo", + absPath: notCloned.Join("somedir"), + ref: "testbranch", + }, + "t3": { + input: "https://fabrikops2.visualstudio.com/someorg/somerepo?ref=master", + cloneSpec: "https://fabrikops2.visualstudio.com/someorg/somerepo", + absPath: notCloned.String(), + ref: "master", + }, + "t4": { + input: "http://github.com/someorg/somerepo/somedir", + cloneSpec: "https://github.com/someorg/somerepo.git", + absPath: notCloned.Join("somedir"), + ref: "", + }, + "t5": { + input: "git@github.com:someorg/somerepo/somedir", + cloneSpec: "git@github.com:someorg/somerepo.git", + absPath: notCloned.Join("somedir"), + ref: "", + }, + "t6": { + input: "git@gitlab2.sqtools.ru:10022/infra/kubernetes/thanos-base.git?ref=v0.1.0", + cloneSpec: "git@gitlab2.sqtools.ru:10022/infra/kubernetes/thanos-base.git", + absPath: notCloned.String(), + ref: "v0.1.0", + }, + "t7": { + input: "git@bitbucket.org:company/project.git//path?ref=branch", + cloneSpec: "git@bitbucket.org:company/project.git", + absPath: notCloned.Join("path"), + ref: "branch", + }, + "t8": { + input: "https://itfs.mycompany.com/collection/project/_git/somerepos", + cloneSpec: "https://itfs.mycompany.com/collection/project/_git/somerepos", + absPath: notCloned.String(), + ref: "", + }, + "t9": { + input: "https://itfs.mycompany.com/collection/project/_git/somerepos?version=v1.0.0", + cloneSpec: "https://itfs.mycompany.com/collection/project/_git/somerepos", + absPath: notCloned.String(), + ref: "v1.0.0", + }, + "t10": { + input: "https://itfs.mycompany.com/collection/project/_git/somerepos/somedir?version=v1.0.0", + cloneSpec: "https://itfs.mycompany.com/collection/project/_git/somerepos", + absPath: notCloned.Join("somedir"), + ref: "v1.0.0", + }, + "t11": { + input: "git::https://itfs.mycompany.com/collection/project/_git/somerepos", + cloneSpec: "https://itfs.mycompany.com/collection/project/_git/somerepos", + absPath: notCloned.String(), + ref: "", + }, + "t12": { + input: "https://bitbucket.example.com/scm/project/repository.git", + cloneSpec: "https://bitbucket.example.com/scm/project/repository.git", + absPath: notCloned.String(), + ref: "", + }, + } + for tn, tc := range testcases { + t.Run(tn, func(t *testing.T) { + rs, err := NewRepoSpecFromUrl(tc.input) + assert.NoError(t, err) + assert.Equal(t, tc.cloneSpec, rs.CloneSpec(), "cloneSpec mismatch") + assert.Equal(t, tc.absPath, rs.AbsPath(), "absPath mismatch") + assert.Equal(t, tc.ref, rs.Ref, "ref mismatch") + }) + } +} + +func TestIsAzureHost(t *testing.T) { + testcases := []struct { + input string + expect bool + }{ + { + input: "https://git-codecommit.us-east-2.amazonaws.com", + expect: false, + }, + { + input: "ssh://git-codecommit.us-east-2.amazonaws.com", + expect: false, + }, + { + input: "https://fabrikops2.visualstudio.com/", + expect: true, + }, + { + input: "https://dev.azure.com/myorg/myproject/", + expect: true, + }, + } + for _, testcase := range testcases { + actual := isAzureHost(testcase.input) + if actual != testcase.expect { + t.Errorf("IsAzureHost: expected %v, but got %v on %s", testcase.expect, actual, testcase.input) + } + } +} + +func TestPeelQuery(t *testing.T) { + testcases := map[string]struct { + input string + path string + ref string + submodules bool + timeout time.Duration + }{ + "t1": { + // All empty. + input: "somerepos", + path: "somerepos", + ref: "", + submodules: defaultSubmodules, + timeout: defaultTimeout, + }, + "t2": { + input: "somerepos?ref=v1.0.0", + path: "somerepos", + ref: "v1.0.0", + submodules: defaultSubmodules, + timeout: defaultTimeout, + }, + "t3": { + input: "somerepos?version=master", + path: "somerepos", + ref: "master", + submodules: defaultSubmodules, + timeout: defaultTimeout, + }, + "t4": { + // A ref value takes precedence over a version value. + input: "somerepos?version=master&ref=v1.0.0", + path: "somerepos", + ref: "v1.0.0", + submodules: defaultSubmodules, + timeout: defaultTimeout, + }, + "t5": { + // Empty submodules value uses default. + input: "somerepos?version=master&submodules=", + path: "somerepos", + ref: "master", + submodules: defaultSubmodules, + timeout: defaultTimeout, + }, + "t6": { + // Malformed submodules value uses default. + input: "somerepos?version=master&submodules=maybe", + path: "somerepos", + ref: "master", + submodules: defaultSubmodules, + timeout: defaultTimeout, + }, + "t7": { + input: "somerepos?version=master&submodules=true", + path: "somerepos", + ref: "master", + submodules: true, + timeout: defaultTimeout, + }, + "t8": { + input: "somerepos?version=master&submodules=false", + path: "somerepos", + ref: "master", + submodules: false, + timeout: defaultTimeout, + }, + "t9": { + // Empty timeout value uses default. + input: "somerepos?version=master&timeout=", + path: "somerepos", + ref: "master", + submodules: defaultSubmodules, + timeout: defaultTimeout, + }, + "t10": { + // Malformed timeout value uses default. + input: "somerepos?version=master&timeout=jiffy", + path: "somerepos", + ref: "master", + submodules: defaultSubmodules, + timeout: defaultTimeout, + }, + "t11": { + // Zero timeout value uses default. + input: "somerepos?version=master&timeout=0", + path: "somerepos", + ref: "master", + submodules: defaultSubmodules, + timeout: defaultTimeout, + }, + "t12": { + input: "somerepos?version=master&timeout=0s", + path: "somerepos", + ref: "master", + submodules: defaultSubmodules, + timeout: defaultTimeout, + }, + "t13": { + input: "somerepos?version=master&timeout=61", + path: "somerepos", + ref: "master", + submodules: defaultSubmodules, + timeout: 61 * time.Second, + }, + "t14": { + input: "somerepos?version=master&timeout=1m1s", + path: "somerepos", + ref: "master", + submodules: defaultSubmodules, + timeout: 61 * time.Second, + }, + "t15": { + input: "somerepos?version=master&submodules=false&timeout=1m1s", + path: "somerepos", + ref: "master", + submodules: false, + timeout: 61 * time.Second, + }, + } + for tn, tc := range testcases { + t.Run(tn, func(t *testing.T) { + path, ref, timeout, submodules := peelQuery(tc.input) + assert.Equal(t, tc.path, path, "path mismatch") + assert.Equal(t, tc.ref, ref, "ref mismatch") + assert.Equal(t, tc.timeout, timeout, "timeout mismatch") + assert.Equal(t, tc.submodules, submodules, "submodules mismatch") + }) + } +} + +func TestIsAWSHost(t *testing.T) { + testcases := []struct { + input string + expect bool + }{ + { + input: "https://git-codecommit.us-east-2.amazonaws.com", + expect: true, + }, + { + input: "ssh://git-codecommit.us-east-2.amazonaws.com", + expect: true, + }, + { + input: "git@github.com:", + expect: false, + }, + { + input: "http://github.com/", + expect: false, + }, + } + for _, testcase := range testcases { + actual := isAWSHost(testcase.input) + if actual != testcase.expect { + t.Errorf("IsAWSHost: expected %v, but got %v on %s", testcase.expect, actual, testcase.input) + } + } +} diff --git a/go/internal/forked/api/internal/kusterr/yamlformaterror.go b/go/internal/forked/api/internal/kusterr/yamlformaterror.go new file mode 100644 index 000000000..950ffea8a --- /dev/null +++ b/go/internal/forked/api/internal/kusterr/yamlformaterror.go @@ -0,0 +1,35 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +// Package error has contextual error types. +package kusterr + +import ( + "fmt" + "strings" +) + +// YamlFormatError represents error with yaml file name where json/yaml format error happens. +type YamlFormatError struct { + Path string + ErrorMsg string +} + +func (e YamlFormatError) Error() string { + return fmt.Sprintf("YAML file [%s] encounters a format error.\n%s\n", e.Path, e.ErrorMsg) +} + +// Handler handles YamlFormatError +func Handler(e error, path string) error { + if isYAMLSyntaxError(e) { + return YamlFormatError{ + Path: path, + ErrorMsg: e.Error(), + } + } + return e +} + +func isYAMLSyntaxError(e error) bool { + return strings.Contains(e.Error(), "error converting YAML to JSON") || strings.Contains(e.Error(), "error unmarshaling JSON") +} diff --git a/go/internal/forked/api/internal/kusterr/yamlformaterror_test.go b/go/internal/forked/api/internal/kusterr/yamlformaterror_test.go new file mode 100644 index 000000000..67cd77146 --- /dev/null +++ b/go/internal/forked/api/internal/kusterr/yamlformaterror_test.go @@ -0,0 +1,41 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package kusterr + +import ( + "fmt" + "testing" +) + +const ( + filepath = "/path/to/whatever" + expected = "YAML file [/path/to/whatever] encounters a format error.\n" + + "error converting YAML to JSON: yaml: line 2: found character that cannot start any token\n" +) + +func TestYamlFormatError_Error(t *testing.T) { + testErr := YamlFormatError{ + Path: filepath, + ErrorMsg: "error converting YAML to JSON: yaml: line 2: found character that cannot start any token", + } + if testErr.Error() != expected { + t.Errorf("Expected : %s\n, but found : %s\n", expected, testErr.Error()) + } +} + +func TestErrorHandler(t *testing.T) { + err := fmt.Errorf("error converting YAML to JSON: yaml: line 2: found character that cannot start any token") + testErr := Handler(err, filepath) + expectedErr := fmt.Errorf("format error message") + fmtErr := Handler(expectedErr, filepath) + if fmtErr.Error() != expectedErr.Error() { + t.Errorf("Expected returning fmt.Error, but found %T", fmtErr) + } + if _, ok := testErr.(YamlFormatError); !ok { + t.Errorf("Expected returning YamlFormatError, but found %T", testErr) + } + if testErr == nil || testErr.Error() != expected { + t.Errorf("Expected : %s\n, but found : %s\n", expected, testErr.Error()) + } +} diff --git a/go/internal/forked/api/internal/plugins/builtinconfig/doc.go b/go/internal/forked/api/internal/plugins/builtinconfig/doc.go new file mode 100644 index 000000000..f41f79b0c --- /dev/null +++ b/go/internal/forked/api/internal/plugins/builtinconfig/doc.go @@ -0,0 +1,10 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +// Package builtinconfig provides legacy methods for +// configuring builtin plugins from a common config file. +// As a user, its best to configure plugins individually +// with plugin config files specified in the `transformers:` +// or `generators:` field, than to use this legacy +// configuration technique. +package builtinconfig diff --git a/go/internal/forked/api/internal/plugins/builtinconfig/loaddefaultconfig.go b/go/internal/forked/api/internal/plugins/builtinconfig/loaddefaultconfig.go new file mode 100644 index 000000000..bf5e3f8a3 --- /dev/null +++ b/go/internal/forked/api/internal/plugins/builtinconfig/loaddefaultconfig.go @@ -0,0 +1,42 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package builtinconfig + +import ( + "sigs.k8s.io/kustomize/api/ifc" + "sigs.k8s.io/yaml" +) + +// loadDefaultConfig returns a TranformerConfig +// object from a list of files. +func loadDefaultConfig( + ldr ifc.Loader, paths []string) (*TransformerConfig, error) { + result := &TransformerConfig{} + for _, path := range paths { + data, err := ldr.Load(path) + if err != nil { + return nil, err + } + t, err := makeTransformerConfigFromBytes(data) + if err != nil { + return nil, err + } + result, err = result.Merge(t) + if err != nil { + return nil, err + } + } + return result, nil +} + +// makeTransformerConfigFromBytes returns a TransformerConfig object from bytes +func makeTransformerConfigFromBytes(data []byte) (*TransformerConfig, error) { + var t TransformerConfig + err := yaml.Unmarshal(data, &t) + if err != nil { + return nil, err + } + t.sortFields() + return &t, nil +} diff --git a/go/internal/forked/api/internal/plugins/builtinconfig/loaddefaultconfig_test.go b/go/internal/forked/api/internal/plugins/builtinconfig/loaddefaultconfig_test.go new file mode 100644 index 000000000..56d52acee --- /dev/null +++ b/go/internal/forked/api/internal/plugins/builtinconfig/loaddefaultconfig_test.go @@ -0,0 +1,46 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package builtinconfig + +import ( + "reflect" + "testing" + + "sigs.k8s.io/kustomize/api/loader" + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/filesys" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/resid" +) + +func TestLoadDefaultConfigsFromFiles(t *testing.T) { + fSys := filesys.MakeFsInMemory() + err := fSys.WriteFile("config.yaml", []byte(` +namePrefix: +- path: nameprefix/path + kind: SomeKind +`)) + if err != nil { + t.Fatal(err) + } + ldr, err := loader.NewLoader( + loader.RestrictionRootOnly, filesys.Separator, fSys) + if err != nil { + t.Fatal(err) + } + tCfg, err := loadDefaultConfig(ldr, []string{"config.yaml"}) + if err != nil { + t.Fatal(err) + } + expected := &TransformerConfig{ + NamePrefix: []types.FieldSpec{ + { + Gvk: resid.Gvk{Kind: "SomeKind"}, + Path: "nameprefix/path", + }, + }, + } + if !reflect.DeepEqual(tCfg, expected) { + t.Fatalf("expected %v\n but go6t %v\n", expected, tCfg) + } +} diff --git a/go/internal/forked/api/internal/plugins/builtinconfig/loaddefaultconfig_test.go b/go/internal/forked/api/internal/plugins/builtinconfig/loaddefaultconfig_test.go new file mode 100644 index 000000000..799b86ca4 --- /dev/null +++ b/go/internal/forked/api/internal/plugins/builtinconfig/loaddefaultconfig_test.go @@ -0,0 +1,46 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package builtinconfig + +import ( + "reflect" + "testing" + + "sigs.k8s.io/kustomize/api/loader" + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/filesys" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/resid" +) + +func TestLoadDefaultConfigsFromFiles(t *testing.T) { + fSys := filesys.MakeFsInMemory() + err := fSys.WriteFile("config.yaml", []byte(` +namePrefix: +- path: nameprefix/path + kind: SomeKind +`)) + if err != nil { + t.Fatal(err) + } + ldr, err := loader.NewLoader( + loader.RestrictionRootOnly, filesys.Separator, fSys) + if err != nil { + t.Fatal(err) + } + tCfg, err := loadDefaultConfig(ldr, []string{"config.yaml"}) + if err != nil { + t.Fatal(err) + } + expected := &TransformerConfig{ + NamePrefix: []types.FieldSpec{ + { + Gvk: resid.Gvk{Kind: "SomeKind"}, + Path: "nameprefix/path", + }, + }, + } + if !reflect.DeepEqual(tCfg, expected) { + t.Fatalf("expected %v\n but go6t %v\n", expected, tCfg) + } +} diff --git a/go/internal/forked/api/internal/plugins/builtinconfig/namebackreferences.go b/go/internal/forked/api/internal/plugins/builtinconfig/namebackreferences.go new file mode 100644 index 000000000..1be78a290 --- /dev/null +++ b/go/internal/forked/api/internal/plugins/builtinconfig/namebackreferences.go @@ -0,0 +1,99 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package builtinconfig + +import ( + "strings" + + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/resid" +) + +// NameBackReferences is an association between a gvk.GVK (a ReferralTarget) +// and a list of Referrers that could refer to it. +// +// It is used to handle name changes, and can be thought of as a +// a contact list. If you change your own contact info (name, +// phone number, etc.), you must tell your contacts or they won't +// know about the change. +// +// For example, ConfigMaps can be used by Pods and everything that +// contains a Pod; Deployment, Job, StatefulSet, etc. +// The ConfigMap is the ReferralTarget, the others are Referrers. +// +// If the the name of a ConfigMap instance changed from 'alice' to 'bob', +// one must +// - visit all objects that could refer to the ConfigMap (the Referrers) +// - see if they mention 'alice', +// - if so, change the Referrer's name reference to 'bob'. +// +// The NameBackReferences instance to aid in this could look like +// { +// kind: ConfigMap +// version: v1 +// fieldSpecs: +// - kind: Pod +// version: v1 +// path: spec/volumes/configMap/name +// - kind: Deployment +// path: spec/template/spec/volumes/configMap/name +// - kind: Job +// path: spec/template/spec/volumes/configMap/name +// (etc.) +// } +type NameBackReferences struct { + resid.Gvk `json:",inline,omitempty" yaml:",inline,omitempty"` + // TODO: rename json 'fieldSpecs' to 'referrers' for clarity. + // This will, however, break anyone using a custom config. + Referrers types.FsSlice `json:"fieldSpecs,omitempty" yaml:"fieldSpecs,omitempty"` +} + +func (n NameBackReferences) String() string { + var r []string + for _, f := range n.Referrers { + r = append(r, f.String()) + } + return n.Gvk.String() + ": (\n" + + strings.Join(r, "\n") + "\n)" +} + +type nbrSlice []NameBackReferences + +func (s nbrSlice) Len() int { return len(s) } +func (s nbrSlice) Swap(i, j int) { s[i], s[j] = s[j], s[i] } +func (s nbrSlice) Less(i, j int) bool { + return s[i].Gvk.IsLessThan(s[j].Gvk) +} + +func (s nbrSlice) mergeAll(o nbrSlice) (result nbrSlice, err error) { + result = s + for _, r := range o { + result, err = result.mergeOne(r) + if err != nil { + return nil, err + } + } + return result, nil +} + +func (s nbrSlice) mergeOne(other NameBackReferences) (nbrSlice, error) { + var result nbrSlice + var err error + found := false + for _, c := range s { + if c.Gvk.Equals(other.Gvk) { + c.Referrers, err = c.Referrers.MergeAll(other.Referrers) + if err != nil { + return nil, err + } + found = true + } + result = append(result, c) + } + + if !found { + result = append(result, other) + } + return result, nil +} diff --git a/go/internal/forked/api/internal/plugins/builtinconfig/namebackreferences.go b/go/internal/forked/api/internal/plugins/builtinconfig/namebackreferences.go new file mode 100644 index 000000000..6243ac98c --- /dev/null +++ b/go/internal/forked/api/internal/plugins/builtinconfig/namebackreferences.go @@ -0,0 +1,99 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package builtinconfig + +import ( + "strings" + + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/resid" +) + +// NameBackReferences is an association between a gvk.GVK (a ReferralTarget) +// and a list of Referrers that could refer to it. +// +// It is used to handle name changes, and can be thought of as a +// a contact list. If you change your own contact info (name, +// phone number, etc.), you must tell your contacts or they won't +// know about the change. +// +// For example, ConfigMaps can be used by Pods and everything that +// contains a Pod; Deployment, Job, StatefulSet, etc. +// The ConfigMap is the ReferralTarget, the others are Referrers. +// +// If the the name of a ConfigMap instance changed from 'alice' to 'bob', +// one must +// - visit all objects that could refer to the ConfigMap (the Referrers) +// - see if they mention 'alice', +// - if so, change the Referrer's name reference to 'bob'. +// +// The NameBackReferences instance to aid in this could look like +// { +// kind: ConfigMap +// version: v1 +// fieldSpecs: +// - kind: Pod +// version: v1 +// path: spec/volumes/configMap/name +// - kind: Deployment +// path: spec/template/spec/volumes/configMap/name +// - kind: Job +// path: spec/template/spec/volumes/configMap/name +// (etc.) +// } +type NameBackReferences struct { + resid.Gvk `json:",inline,omitempty" yaml:",inline,omitempty"` + // TODO: rename json 'fieldSpecs' to 'referrers' for clarity. + // This will, however, break anyone using a custom config. + Referrers types.FsSlice `json:"fieldSpecs,omitempty" yaml:"fieldSpecs,omitempty"` +} + +func (n NameBackReferences) String() string { + var r []string + for _, f := range n.Referrers { + r = append(r, f.String()) + } + return n.Gvk.String() + ": (\n" + + strings.Join(r, "\n") + "\n)" +} + +type nbrSlice []NameBackReferences + +func (s nbrSlice) Len() int { return len(s) } +func (s nbrSlice) Swap(i, j int) { s[i], s[j] = s[j], s[i] } +func (s nbrSlice) Less(i, j int) bool { + return s[i].Gvk.IsLessThan(s[j].Gvk) +} + +func (s nbrSlice) mergeAll(o nbrSlice) (result nbrSlice, err error) { + result = s + for _, r := range o { + result, err = result.mergeOne(r) + if err != nil { + return nil, err + } + } + return result, nil +} + +func (s nbrSlice) mergeOne(other NameBackReferences) (nbrSlice, error) { + var result nbrSlice + var err error + found := false + for _, c := range s { + if c.Gvk.Equals(other.Gvk) { + c.Referrers, err = c.Referrers.MergeAll(other.Referrers) + if err != nil { + return nil, err + } + found = true + } + result = append(result, c) + } + + if !found { + result = append(result, other) + } + return result, nil +} diff --git a/go/internal/forked/api/internal/plugins/builtinconfig/namebackreferences_test.go b/go/internal/forked/api/internal/plugins/builtinconfig/namebackreferences_test.go new file mode 100644 index 000000000..8e3fbc487 --- /dev/null +++ b/go/internal/forked/api/internal/plugins/builtinconfig/namebackreferences_test.go @@ -0,0 +1,97 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package builtinconfig + +import ( + "reflect" + "testing" + + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/resid" +) + +func TestMergeAll(t *testing.T) { + fsSlice1 := []types.FieldSpec{ + { + Gvk: resid.Gvk{ + Kind: "Pod", + }, + Path: "path/to/a/name", + CreateIfNotPresent: false, + }, + { + Gvk: resid.Gvk{ + Kind: "Deployment", + }, + Path: "another/path/to/some/name", + CreateIfNotPresent: false, + }, + } + fsSlice2 := []types.FieldSpec{ + { + Gvk: resid.Gvk{ + Kind: "Job", + }, + Path: "morepath/to/name", + CreateIfNotPresent: false, + }, + { + Gvk: resid.Gvk{ + Kind: "StatefulSet", + }, + Path: "yet/another/path/to/a/name", + CreateIfNotPresent: false, + }, + } + + nbrsSlice1 := nbrSlice{ + { + Gvk: resid.Gvk{ + Kind: "ConfigMap", + }, + Referrers: fsSlice1, + }, + { + Gvk: resid.Gvk{ + Kind: "Secret", + }, + Referrers: fsSlice2, + }, + } + nbrsSlice2 := nbrSlice{ + { + Gvk: resid.Gvk{ + Kind: "ConfigMap", + }, + Referrers: fsSlice1, + }, + { + Gvk: resid.Gvk{ + Kind: "Secret", + }, + Referrers: fsSlice2, + }, + } + expected := nbrSlice{ + { + Gvk: resid.Gvk{ + Kind: "ConfigMap", + }, + Referrers: fsSlice1, + }, + { + Gvk: resid.Gvk{ + Kind: "Secret", + }, + Referrers: fsSlice2, + }, + } + actual, err := nbrsSlice1.mergeAll(nbrsSlice2) + if err != nil { + t.Fatalf("unexpected err: %v", err) + } + if !reflect.DeepEqual(actual, expected) { + t.Fatalf("expected\n %v\n but got\n %v\n", expected, actual) + } +} diff --git a/go/internal/forked/api/internal/plugins/builtinconfig/namebackreferences_test.go b/go/internal/forked/api/internal/plugins/builtinconfig/namebackreferences_test.go new file mode 100644 index 000000000..93d4280ac --- /dev/null +++ b/go/internal/forked/api/internal/plugins/builtinconfig/namebackreferences_test.go @@ -0,0 +1,97 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package builtinconfig + +import ( + "reflect" + "testing" + + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/resid" +) + +func TestMergeAll(t *testing.T) { + fsSlice1 := []types.FieldSpec{ + { + Gvk: resid.Gvk{ + Kind: "Pod", + }, + Path: "path/to/a/name", + CreateIfNotPresent: false, + }, + { + Gvk: resid.Gvk{ + Kind: "Deployment", + }, + Path: "another/path/to/some/name", + CreateIfNotPresent: false, + }, + } + fsSlice2 := []types.FieldSpec{ + { + Gvk: resid.Gvk{ + Kind: "Job", + }, + Path: "morepath/to/name", + CreateIfNotPresent: false, + }, + { + Gvk: resid.Gvk{ + Kind: "StatefulSet", + }, + Path: "yet/another/path/to/a/name", + CreateIfNotPresent: false, + }, + } + + nbrsSlice1 := nbrSlice{ + { + Gvk: resid.Gvk{ + Kind: "ConfigMap", + }, + Referrers: fsSlice1, + }, + { + Gvk: resid.Gvk{ + Kind: "Secret", + }, + Referrers: fsSlice2, + }, + } + nbrsSlice2 := nbrSlice{ + { + Gvk: resid.Gvk{ + Kind: "ConfigMap", + }, + Referrers: fsSlice1, + }, + { + Gvk: resid.Gvk{ + Kind: "Secret", + }, + Referrers: fsSlice2, + }, + } + expected := nbrSlice{ + { + Gvk: resid.Gvk{ + Kind: "ConfigMap", + }, + Referrers: fsSlice1, + }, + { + Gvk: resid.Gvk{ + Kind: "Secret", + }, + Referrers: fsSlice2, + }, + } + actual, err := nbrsSlice1.mergeAll(nbrsSlice2) + if err != nil { + t.Fatalf("unexpected err: %v", err) + } + if !reflect.DeepEqual(actual, expected) { + t.Fatalf("expected\n %v\n but got\n %v\n", expected, actual) + } +} diff --git a/go/internal/forked/api/internal/plugins/builtinconfig/transformerconfig.go b/go/internal/forked/api/internal/plugins/builtinconfig/transformerconfig.go new file mode 100644 index 000000000..a28627a13 --- /dev/null +++ b/go/internal/forked/api/internal/plugins/builtinconfig/transformerconfig.go @@ -0,0 +1,148 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package builtinconfig + +import ( + "log" + "sort" + + "sigs.k8s.io/kustomize/api/ifc" + "sigs.k8s.io/kustomize/api/konfig/builtinpluginconsts" + "sigs.k8s.io/kustomize/api/types" +) + +// TransformerConfig holds the data needed to perform transformations. +type TransformerConfig struct { + NamePrefix types.FsSlice `json:"namePrefix,omitempty" yaml:"namePrefix,omitempty"` + NameSuffix types.FsSlice `json:"nameSuffix,omitempty" yaml:"nameSuffix,omitempty"` + NameSpace types.FsSlice `json:"namespace,omitempty" yaml:"namespace,omitempty"` + CommonLabels types.FsSlice `json:"commonLabels,omitempty" yaml:"commonLabels,omitempty"` + CommonAnnotations types.FsSlice `json:"commonAnnotations,omitempty" yaml:"commonAnnotations,omitempty"` + NameReference nbrSlice `json:"nameReference,omitempty" yaml:"nameReference,omitempty"` + VarReference types.FsSlice `json:"varReference,omitempty" yaml:"varReference,omitempty"` + Images types.FsSlice `json:"images,omitempty" yaml:"images,omitempty"` + Replicas types.FsSlice `json:"replicas,omitempty" yaml:"replicas,omitempty"` +} + +// MakeEmptyConfig returns an empty TransformerConfig object +func MakeEmptyConfig() *TransformerConfig { + return &TransformerConfig{} +} + +// MakeDefaultConfig returns a default TransformerConfig. +func MakeDefaultConfig() *TransformerConfig { + c, err := makeTransformerConfigFromBytes( + builtinpluginconsts.GetDefaultFieldSpecs()) + if err != nil { + log.Fatalf("Unable to make default transformconfig: %v", err) + } + return c +} + +// MakeTransformerConfig returns a merger of custom config, +// if any, with default config. +func MakeTransformerConfig( + ldr ifc.Loader, paths []string) (*TransformerConfig, error) { + t1 := MakeDefaultConfig() + if len(paths) == 0 { + return t1, nil + } + t2, err := loadDefaultConfig(ldr, paths) + if err != nil { + return nil, err + } + return t1.Merge(t2) +} + +// sortFields provides determinism in logging, tests, etc. +func (t *TransformerConfig) sortFields() { + sort.Sort(t.NamePrefix) + sort.Sort(t.NameSpace) + sort.Sort(t.CommonLabels) + sort.Sort(t.CommonAnnotations) + sort.Sort(t.NameReference) + sort.Sort(t.VarReference) + sort.Sort(t.Images) + sort.Sort(t.Replicas) +} + +// AddPrefixFieldSpec adds a FieldSpec to NamePrefix +func (t *TransformerConfig) AddPrefixFieldSpec(fs types.FieldSpec) (err error) { + t.NamePrefix, err = t.NamePrefix.MergeOne(fs) + return err +} + +// AddSuffixFieldSpec adds a FieldSpec to NameSuffix +func (t *TransformerConfig) AddSuffixFieldSpec(fs types.FieldSpec) (err error) { + t.NameSuffix, err = t.NameSuffix.MergeOne(fs) + return err +} + +// AddLabelFieldSpec adds a FieldSpec to CommonLabels +func (t *TransformerConfig) AddLabelFieldSpec(fs types.FieldSpec) (err error) { + t.CommonLabels, err = t.CommonLabels.MergeOne(fs) + return err +} + +// AddAnnotationFieldSpec adds a FieldSpec to CommonAnnotations +func (t *TransformerConfig) AddAnnotationFieldSpec(fs types.FieldSpec) (err error) { + t.CommonAnnotations, err = t.CommonAnnotations.MergeOne(fs) + return err +} + +// AddNamereferenceFieldSpec adds a NameBackReferences to NameReference +func (t *TransformerConfig) AddNamereferenceFieldSpec( + nbrs NameBackReferences) (err error) { + t.NameReference, err = t.NameReference.mergeOne(nbrs) + return err +} + +// Merge merges two TransformerConfigs objects into +// a new TransformerConfig object +func (t *TransformerConfig) Merge(input *TransformerConfig) ( + merged *TransformerConfig, err error) { + if input == nil { + return t, nil + } + merged = &TransformerConfig{} + merged.NamePrefix, err = t.NamePrefix.MergeAll(input.NamePrefix) + if err != nil { + return nil, err + } + merged.NameSuffix, err = t.NameSuffix.MergeAll(input.NameSuffix) + if err != nil { + return nil, err + } + merged.NameSpace, err = t.NameSpace.MergeAll(input.NameSpace) + if err != nil { + return nil, err + } + merged.CommonAnnotations, err = t.CommonAnnotations.MergeAll( + input.CommonAnnotations) + if err != nil { + return nil, err + } + merged.CommonLabels, err = t.CommonLabels.MergeAll(input.CommonLabels) + if err != nil { + return nil, err + } + merged.VarReference, err = t.VarReference.MergeAll(input.VarReference) + if err != nil { + return nil, err + } + merged.NameReference, err = t.NameReference.mergeAll(input.NameReference) + if err != nil { + return nil, err + } + merged.Images, err = t.Images.MergeAll(input.Images) + if err != nil { + return nil, err + } + merged.Replicas, err = t.Replicas.MergeAll(input.Replicas) + if err != nil { + return nil, err + } + merged.sortFields() + return merged, nil +} diff --git a/go/internal/forked/api/internal/plugins/builtinconfig/transformerconfig_test.go b/go/internal/forked/api/internal/plugins/builtinconfig/transformerconfig_test.go new file mode 100644 index 000000000..bf68f2725 --- /dev/null +++ b/go/internal/forked/api/internal/plugins/builtinconfig/transformerconfig_test.go @@ -0,0 +1,175 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package builtinconfig_test + +import ( + "reflect" + "testing" + + "sigs.k8s.io/kustomize/api/internal/plugins/builtinconfig" + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/resid" +) + +func TestMakeDefaultConfig(t *testing.T) { + // Confirm default can be made without fatal error inside call. + _ = builtinconfig.MakeDefaultConfig() +} + +func TestAddNamereferenceFieldSpec(t *testing.T) { + cfg := &builtinconfig.TransformerConfig{} + + nbrs := builtinconfig.NameBackReferences{ + Gvk: resid.Gvk{ + Kind: "KindA", + }, + Referrers: []types.FieldSpec{ + { + Gvk: resid.Gvk{ + Kind: "KindB", + }, + Path: "path/to/a/field", + CreateIfNotPresent: false, + }, + }, + } + + err := cfg.AddNamereferenceFieldSpec(nbrs) + if err != nil { + t.Fatalf("unexpected err: %v", err) + } + if len(cfg.NameReference) != 1 { + t.Fatal("failed to add namereference FieldSpec") + } +} + +func TestAddFieldSpecs(t *testing.T) { + cfg := &builtinconfig.TransformerConfig{} + + fieldSpec := types.FieldSpec{ + Gvk: resid.Gvk{Group: "GroupA", Kind: "KindB"}, + Path: "path/to/a/field", + CreateIfNotPresent: true, + } + + err := cfg.AddPrefixFieldSpec(fieldSpec) + if err != nil { + t.Fatalf("unexpected err: %v", err) + } + if len(cfg.NamePrefix) != 1 { + t.Fatalf("failed to add nameprefix FieldSpec") + } + err = cfg.AddSuffixFieldSpec(fieldSpec) + if err != nil { + t.Fatalf("unexpected err: %v", err) + } + if len(cfg.NameSuffix) != 1 { + t.Fatalf("failed to add namesuffix FieldSpec") + } + err = cfg.AddLabelFieldSpec(fieldSpec) + if err != nil { + t.Fatalf("unexpected err: %v", err) + } + if len(cfg.CommonLabels) != 1 { + t.Fatalf("failed to add nameprefix FieldSpec") + } + err = cfg.AddAnnotationFieldSpec(fieldSpec) + if err != nil { + t.Fatalf("unexpected err: %v", err) + } + if len(cfg.CommonAnnotations) != 1 { + t.Fatalf("failed to add nameprefix FieldSpec") + } +} + +func TestMerge(t *testing.T) { + nameReference := []builtinconfig.NameBackReferences{ + { + Gvk: resid.Gvk{ + Kind: "KindA", + }, + Referrers: []types.FieldSpec{ + { + Gvk: resid.Gvk{ + Kind: "KindB", + }, + Path: "path/to/a/field", + CreateIfNotPresent: false, + }, + }, + }, + { + Gvk: resid.Gvk{ + Kind: "KindA", + }, + Referrers: []types.FieldSpec{ + { + Gvk: resid.Gvk{ + Kind: "KindC", + }, + Path: "path/to/a/field", + CreateIfNotPresent: false, + }, + }, + }, + } + fieldSpecs := []types.FieldSpec{ + { + Gvk: resid.Gvk{Group: "GroupA", Kind: "KindB"}, + Path: "path/to/a/field", + CreateIfNotPresent: true, + }, + { + Gvk: resid.Gvk{Group: "GroupA", Kind: "KindC"}, + Path: "path/to/a/field", + CreateIfNotPresent: true, + }, + } + cfga := &builtinconfig.TransformerConfig{} + cfga.AddNamereferenceFieldSpec(nameReference[0]) + cfga.AddPrefixFieldSpec(fieldSpecs[0]) + cfga.AddSuffixFieldSpec(fieldSpecs[0]) + + cfgb := &builtinconfig.TransformerConfig{} + cfgb.AddNamereferenceFieldSpec(nameReference[1]) + cfgb.AddPrefixFieldSpec(fieldSpecs[1]) + cfga.AddSuffixFieldSpec(fieldSpecs[1]) + + actual, err := cfga.Merge(cfgb) + if err != nil { + t.Fatalf("unexpected err: %v", err) + } + + if len(actual.NamePrefix) != 2 { + t.Fatal("merge failed for namePrefix FieldSpec") + } + + if len(actual.NameSuffix) != 2 { + t.Fatal("merge failed for nameSuffix FieldSpec") + } + + if len(actual.NameReference) != 1 { + t.Fatal("merge failed for namereference FieldSpec") + } + + expected := &builtinconfig.TransformerConfig{} + expected.AddNamereferenceFieldSpec(nameReference[0]) + expected.AddNamereferenceFieldSpec(nameReference[1]) + expected.AddPrefixFieldSpec(fieldSpecs[0]) + expected.AddPrefixFieldSpec(fieldSpecs[1]) + expected.AddSuffixFieldSpec(fieldSpecs[0]) + expected.AddSuffixFieldSpec(fieldSpecs[1]) + + if !reflect.DeepEqual(actual, expected) { + t.Fatalf("expected: %v\n but got: %v\n", expected, actual) + } + + actual, err = cfga.Merge(nil) + if err != nil { + t.Fatalf("unexpected err: %v", err) + } + if !reflect.DeepEqual(actual, cfga) { + t.Fatalf("expected: %v\n but got: %v\n", cfga, actual) + } +} diff --git a/go/internal/forked/api/internal/plugins/builtinconfig/transformerconfig_test.go b/go/internal/forked/api/internal/plugins/builtinconfig/transformerconfig_test.go new file mode 100644 index 000000000..13f561b21 --- /dev/null +++ b/go/internal/forked/api/internal/plugins/builtinconfig/transformerconfig_test.go @@ -0,0 +1,175 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package builtinconfig_test + +import ( + "reflect" + "testing" + + "sigs.k8s.io/kustomize/api/internal/plugins/builtinconfig" + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/resid" +) + +func TestMakeDefaultConfig(t *testing.T) { + // Confirm default can be made without fatal error inside call. + _ = builtinconfig.MakeDefaultConfig() +} + +func TestAddNamereferenceFieldSpec(t *testing.T) { + cfg := &builtinconfig.TransformerConfig{} + + nbrs := builtinconfig.NameBackReferences{ + Gvk: resid.Gvk{ + Kind: "KindA", + }, + Referrers: []types.FieldSpec{ + { + Gvk: resid.Gvk{ + Kind: "KindB", + }, + Path: "path/to/a/field", + CreateIfNotPresent: false, + }, + }, + } + + err := cfg.AddNamereferenceFieldSpec(nbrs) + if err != nil { + t.Fatalf("unexpected err: %v", err) + } + if len(cfg.NameReference) != 1 { + t.Fatal("failed to add namereference FieldSpec") + } +} + +func TestAddFieldSpecs(t *testing.T) { + cfg := &builtinconfig.TransformerConfig{} + + fieldSpec := types.FieldSpec{ + Gvk: resid.Gvk{Group: "GroupA", Kind: "KindB"}, + Path: "path/to/a/field", + CreateIfNotPresent: true, + } + + err := cfg.AddPrefixFieldSpec(fieldSpec) + if err != nil { + t.Fatalf("unexpected err: %v", err) + } + if len(cfg.NamePrefix) != 1 { + t.Fatalf("failed to add nameprefix FieldSpec") + } + err = cfg.AddSuffixFieldSpec(fieldSpec) + if err != nil { + t.Fatalf("unexpected err: %v", err) + } + if len(cfg.NameSuffix) != 1 { + t.Fatalf("failed to add namesuffix FieldSpec") + } + err = cfg.AddLabelFieldSpec(fieldSpec) + if err != nil { + t.Fatalf("unexpected err: %v", err) + } + if len(cfg.CommonLabels) != 1 { + t.Fatalf("failed to add nameprefix FieldSpec") + } + err = cfg.AddAnnotationFieldSpec(fieldSpec) + if err != nil { + t.Fatalf("unexpected err: %v", err) + } + if len(cfg.CommonAnnotations) != 1 { + t.Fatalf("failed to add nameprefix FieldSpec") + } +} + +func TestMerge(t *testing.T) { + nameReference := []builtinconfig.NameBackReferences{ + { + Gvk: resid.Gvk{ + Kind: "KindA", + }, + Referrers: []types.FieldSpec{ + { + Gvk: resid.Gvk{ + Kind: "KindB", + }, + Path: "path/to/a/field", + CreateIfNotPresent: false, + }, + }, + }, + { + Gvk: resid.Gvk{ + Kind: "KindA", + }, + Referrers: []types.FieldSpec{ + { + Gvk: resid.Gvk{ + Kind: "KindC", + }, + Path: "path/to/a/field", + CreateIfNotPresent: false, + }, + }, + }, + } + fieldSpecs := []types.FieldSpec{ + { + Gvk: resid.Gvk{Group: "GroupA", Kind: "KindB"}, + Path: "path/to/a/field", + CreateIfNotPresent: true, + }, + { + Gvk: resid.Gvk{Group: "GroupA", Kind: "KindC"}, + Path: "path/to/a/field", + CreateIfNotPresent: true, + }, + } + cfga := &builtinconfig.TransformerConfig{} + cfga.AddNamereferenceFieldSpec(nameReference[0]) + cfga.AddPrefixFieldSpec(fieldSpecs[0]) + cfga.AddSuffixFieldSpec(fieldSpecs[0]) + + cfgb := &builtinconfig.TransformerConfig{} + cfgb.AddNamereferenceFieldSpec(nameReference[1]) + cfgb.AddPrefixFieldSpec(fieldSpecs[1]) + cfga.AddSuffixFieldSpec(fieldSpecs[1]) + + actual, err := cfga.Merge(cfgb) + if err != nil { + t.Fatalf("unexpected err: %v", err) + } + + if len(actual.NamePrefix) != 2 { + t.Fatal("merge failed for namePrefix FieldSpec") + } + + if len(actual.NameSuffix) != 2 { + t.Fatal("merge failed for nameSuffix FieldSpec") + } + + if len(actual.NameReference) != 1 { + t.Fatal("merge failed for namereference FieldSpec") + } + + expected := &builtinconfig.TransformerConfig{} + expected.AddNamereferenceFieldSpec(nameReference[0]) + expected.AddNamereferenceFieldSpec(nameReference[1]) + expected.AddPrefixFieldSpec(fieldSpecs[0]) + expected.AddPrefixFieldSpec(fieldSpecs[1]) + expected.AddSuffixFieldSpec(fieldSpecs[0]) + expected.AddSuffixFieldSpec(fieldSpecs[1]) + + if !reflect.DeepEqual(actual, expected) { + t.Fatalf("expected: %v\n but got: %v\n", expected, actual) + } + + actual, err = cfga.Merge(nil) + if err != nil { + t.Fatalf("unexpected err: %v", err) + } + if !reflect.DeepEqual(actual, cfga) { + t.Fatalf("expected: %v\n but got: %v\n", cfga, actual) + } +} diff --git a/go/internal/forked/api/internal/plugins/builtinhelpers/builtinplugintype_string.go b/go/internal/forked/api/internal/plugins/builtinhelpers/builtinplugintype_string.go new file mode 100644 index 000000000..1b347cbc8 --- /dev/null +++ b/go/internal/forked/api/internal/plugins/builtinhelpers/builtinplugintype_string.go @@ -0,0 +1,42 @@ +// Code generated by "stringer -type=BuiltinPluginType"; DO NOT EDIT. + +package builtinhelpers + +import "strconv" + +func _() { + // An "invalid array index" compiler error signifies that the constant values have changed. + // Re-run the stringer command to generate them again. + var x [1]struct{} + _ = x[Unknown-0] + _ = x[AnnotationsTransformer-1] + _ = x[ConfigMapGenerator-2] + _ = x[IAMPolicyGenerator-3] + _ = x[HashTransformer-4] + _ = x[ImageTagTransformer-5] + _ = x[LabelTransformer-6] + _ = x[LegacyOrderTransformer-7] + _ = x[NamespaceTransformer-8] + _ = x[PatchJson6902Transformer-9] + _ = x[PatchStrategicMergeTransformer-10] + _ = x[PatchTransformer-11] + _ = x[PrefixSuffixTransformer-12] + _ = x[PrefixTransformer-13] + _ = x[SuffixTransformer-14] + _ = x[ReplicaCountTransformer-15] + _ = x[SecretGenerator-16] + _ = x[ValueAddTransformer-17] + _ = x[HelmChartInflationGenerator-18] + _ = x[ReplacementTransformer-19] +} + +const _BuiltinPluginType_name = "UnknownAnnotationsTransformerConfigMapGeneratorIAMPolicyGeneratorHashTransformerImageTagTransformerLabelTransformerLegacyOrderTransformerNamespaceTransformerPatchJson6902TransformerPatchStrategicMergeTransformerPatchTransformerPrefixSuffixTransformerPrefixTransformerSuffixTransformerReplicaCountTransformerSecretGeneratorValueAddTransformerHelmChartInflationGeneratorReplacementTransformer" + +var _BuiltinPluginType_index = [...]uint16{0, 7, 29, 47, 65, 80, 99, 115, 137, 157, 181, 211, 227, 250, 267, 284, 307, 322, 341, 368, 390} + +func (i BuiltinPluginType) String() string { + if i < 0 || i >= BuiltinPluginType(len(_BuiltinPluginType_index)-1) { + return "BuiltinPluginType(" + strconv.FormatInt(int64(i), 10) + ")" + } + return _BuiltinPluginType_name[_BuiltinPluginType_index[i]:_BuiltinPluginType_index[i+1]] +} diff --git a/go/internal/forked/api/internal/plugins/builtinhelpers/builtins.go b/go/internal/forked/api/internal/plugins/builtinhelpers/builtins.go new file mode 100644 index 000000000..260ed1bf5 --- /dev/null +++ b/go/internal/forked/api/internal/plugins/builtinhelpers/builtins.go @@ -0,0 +1,114 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package builtinhelpers + +import ( + "sigs.k8s.io/kustomize/api/internal/builtins" + "sigs.k8s.io/kustomize/api/resmap" +) + +//go:generate stringer -type=BuiltinPluginType +type BuiltinPluginType int + +const ( + Unknown BuiltinPluginType = iota + AnnotationsTransformer + ConfigMapGenerator + IAMPolicyGenerator + HashTransformer + ImageTagTransformer + LabelTransformer + LegacyOrderTransformer + NamespaceTransformer + PatchJson6902Transformer + PatchStrategicMergeTransformer + PatchTransformer + PrefixSuffixTransformer + PrefixTransformer + SuffixTransformer + ReplicaCountTransformer + SecretGenerator + ValueAddTransformer + HelmChartInflationGenerator + ReplacementTransformer +) + +var stringToBuiltinPluginTypeMap map[string]BuiltinPluginType + +func init() { + stringToBuiltinPluginTypeMap = makeStringToBuiltinPluginTypeMap() +} + +func makeStringToBuiltinPluginTypeMap() (result map[string]BuiltinPluginType) { + result = make(map[string]BuiltinPluginType, 23) + for k := range GeneratorFactories { + result[k.String()] = k + } + for k := range TransformerFactories { + result[k.String()] = k + } + return +} + +func GetBuiltinPluginType(n string) BuiltinPluginType { + result, ok := stringToBuiltinPluginTypeMap[n] + if ok { + return result + } + return Unknown +} + +var GeneratorFactories = map[BuiltinPluginType]func() resmap.GeneratorPlugin{ + ConfigMapGenerator: builtins.NewConfigMapGeneratorPlugin, + IAMPolicyGenerator: builtins.NewIAMPolicyGeneratorPlugin, + SecretGenerator: builtins.NewSecretGeneratorPlugin, + HelmChartInflationGenerator: builtins.NewHelmChartInflationGeneratorPlugin, +} + +type MultiTransformer struct { + transformers []resmap.TransformerPlugin +} + +func (t *MultiTransformer) Transform(m resmap.ResMap) error { + for _, transformer := range t.transformers { + if err := transformer.Transform(m); err != nil { + return err + } + } + return nil +} + +func (t *MultiTransformer) Config(h *resmap.PluginHelpers, b []byte) error { + for _, transformer := range t.transformers { + if err := transformer.Config(h, b); err != nil { + return err + } + } + return nil +} + +func NewMultiTransformer() resmap.TransformerPlugin { + return &MultiTransformer{[]resmap.TransformerPlugin{ + builtins.NewPrefixTransformerPlugin(), + builtins.NewSuffixTransformerPlugin(), + }} +} + +var TransformerFactories = map[BuiltinPluginType]func() resmap.TransformerPlugin{ + AnnotationsTransformer: builtins.NewAnnotationsTransformerPlugin, + HashTransformer: builtins.NewHashTransformerPlugin, + ImageTagTransformer: builtins.NewImageTagTransformerPlugin, + LabelTransformer: builtins.NewLabelTransformerPlugin, + LegacyOrderTransformer: builtins.NewLegacyOrderTransformerPlugin, + NamespaceTransformer: builtins.NewNamespaceTransformerPlugin, + PatchJson6902Transformer: builtins.NewPatchJson6902TransformerPlugin, + PatchStrategicMergeTransformer: builtins.NewPatchStrategicMergeTransformerPlugin, + PatchTransformer: builtins.NewPatchTransformerPlugin, + PrefixSuffixTransformer: NewMultiTransformer, + PrefixTransformer: builtins.NewPrefixTransformerPlugin, + SuffixTransformer: builtins.NewSuffixTransformerPlugin, + ReplacementTransformer: builtins.NewReplacementTransformerPlugin, + ReplicaCountTransformer: builtins.NewReplicaCountTransformerPlugin, + ValueAddTransformer: builtins.NewValueAddTransformerPlugin, +} diff --git a/go/internal/forked/api/internal/plugins/compiler/compiler.go b/go/internal/forked/api/internal/plugins/compiler/compiler.go new file mode 100644 index 000000000..04f827eff --- /dev/null +++ b/go/internal/forked/api/internal/plugins/compiler/compiler.go @@ -0,0 +1,108 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package compiler + +import ( + "bytes" + "fmt" + "log" + "os" + "os/exec" + "path/filepath" + "strings" + + "github.com/pkg/errors" + "sigs.k8s.io/kustomize/api/internal/plugins/utils" +) + +// Compiler creates Go plugin object files. +type Compiler struct { + // pluginRoot is where the user + // has her ${g}/${v}/$lower(${k})/${k}.go files. + pluginRoot string + // Where compilation happens. + workDir string + // Used as the root file name for src and object. + rawKind string + // Capture compiler output. + stderr bytes.Buffer + // Capture compiler output. + stdout bytes.Buffer +} + +// NewCompiler returns a new compiler instance. +func NewCompiler(root string) *Compiler { + return &Compiler{pluginRoot: root} +} + +// Set GVK converts g,v,k tuples to file path components. +func (b *Compiler) SetGVK(g, v, k string) { + b.rawKind = k + b.workDir = filepath.Join(b.pluginRoot, g, v, strings.ToLower(k)) +} + +func (b *Compiler) srcPath() string { + return filepath.Join(b.workDir, b.rawKind+".go") +} + +func (b *Compiler) objFile() string { + return b.rawKind + ".so" +} + +// Absolute path to the compiler output (the .so file). +func (b *Compiler) ObjPath() string { + return filepath.Join(b.workDir, b.objFile()) +} + +// Compile changes its working directory to +// ${pluginRoot}/${g}/${v}/$lower(${k} and places +// object code next to source code. +func (b *Compiler) Compile() error { + if !utils.FileExists(b.srcPath()) { + return fmt.Errorf("cannot find source at '%s'", b.srcPath()) + } + // If you use an IDE, make sure it's go build and test flags + // match those used below. Same goes for Makefile targets. + commands := []string{ + "build", + // "-trimpath", This flag used to make it better, now it makes it worse, + // see https://github.com/golang/go/issues/31354 + "-buildmode", + "plugin", + "-o", b.objFile(), + } + goBin := utils.GoBin() + if !utils.FileExists(goBin) { + return fmt.Errorf( + "cannot find go compiler %s", goBin) + } + cmd := exec.Command(goBin, commands...) + b.stderr.Reset() + cmd.Stderr = &b.stderr + b.stdout.Reset() + cmd.Stdout = &b.stdout + cmd.Env = os.Environ() + cmd.Dir = b.workDir + if err := cmd.Run(); err != nil { + b.report() + return errors.Wrapf( + err, "cannot compile %s:\nSTDERR\n%s\n", + b.srcPath(), b.stderr.String()) + } + result := filepath.Join(b.workDir, b.objFile()) + if utils.FileExists(result) { + log.Printf("compiler created: %s", result) + return nil + } + return fmt.Errorf("post compile, cannot find '%s'", result) +} + +func (b *Compiler) report() { + log.Println("stdout: -------") + log.Println(b.stdout.String()) + log.Println("----------------") + log.Println("stderr: -------") + log.Println(b.stderr.String()) + log.Println("----------------") +} diff --git a/go/internal/forked/api/internal/plugins/compiler/compiler_test.go b/go/internal/forked/api/internal/plugins/compiler/compiler_test.go new file mode 100644 index 000000000..629471639 --- /dev/null +++ b/go/internal/forked/api/internal/plugins/compiler/compiler_test.go @@ -0,0 +1,51 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package compiler_test + +import ( + "path/filepath" + "testing" + + "sigs.k8s.io/kustomize/api/internal/plugins/compiler" + "sigs.k8s.io/kustomize/api/internal/plugins/utils" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/filesys" +) + +// Regression coverage over compiler behavior. +func TestCompiler(t *testing.T) { + srcRoot, err := utils.DeterminePluginSrcRoot(filesys.MakeFsOnDisk()) + if err != nil { + t.Error(err) + } + c := compiler.NewCompiler(srcRoot) + + c.SetGVK("someteam.example.com", "v1", "DatePrefixer") + expectObj := filepath.Join( + srcRoot, "someteam.example.com", "v1", "dateprefixer", "DatePrefixer.so") + if expectObj != c.ObjPath() { + t.Errorf("Expected '%s', got '%s'", expectObj, c.ObjPath()) + } + err = c.Compile() + if err != nil { + t.Error(err) + } + if !utils.FileExists(expectObj) { + t.Errorf("didn't find expected obj file %s", expectObj) + } + + c.SetGVK("builtin", "", "SecretGenerator") + expectObj = filepath.Join( + srcRoot, + "builtin", "", "secretgenerator", "SecretGenerator.so") + if expectObj != c.ObjPath() { + t.Errorf("Expected '%s', got '%s'", expectObj, c.ObjPath()) + } + err = c.Compile() + if err != nil { + t.Error(err) + } + if !utils.FileExists(expectObj) { + t.Errorf("didn't find expected obj file %s", expectObj) + } +} diff --git a/go/internal/forked/api/internal/plugins/compiler/compiler_test.go b/go/internal/forked/api/internal/plugins/compiler/compiler_test.go new file mode 100644 index 000000000..55e6c5158 --- /dev/null +++ b/go/internal/forked/api/internal/plugins/compiler/compiler_test.go @@ -0,0 +1,51 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package compiler_test + +import ( + "path/filepath" + "testing" + + "sigs.k8s.io/kustomize/api/internal/plugins/compiler" + "sigs.k8s.io/kustomize/api/internal/plugins/utils" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/filesys" +) + +// Regression coverage over compiler behavior. +func TestCompiler(t *testing.T) { + srcRoot, err := utils.DeterminePluginSrcRoot(filesys.MakeFsOnDisk()) + if err != nil { + t.Error(err) + } + c := compiler.NewCompiler(srcRoot) + + c.SetGVK("someteam.example.com", "v1", "DatePrefixer") + expectObj := filepath.Join( + srcRoot, "someteam.example.com", "v1", "dateprefixer", "DatePrefixer.so") + if expectObj != c.ObjPath() { + t.Errorf("Expected '%s', got '%s'", expectObj, c.ObjPath()) + } + err = c.Compile() + if err != nil { + t.Error(err) + } + if !utils.FileExists(expectObj) { + t.Errorf("didn't find expected obj file %s", expectObj) + } + + c.SetGVK("builtin", "", "SecretGenerator") + expectObj = filepath.Join( + srcRoot, + "builtin", "", "secretgenerator", "SecretGenerator.so") + if expectObj != c.ObjPath() { + t.Errorf("Expected '%s', got '%s'", expectObj, c.ObjPath()) + } + err = c.Compile() + if err != nil { + t.Error(err) + } + if !utils.FileExists(expectObj) { + t.Errorf("didn't find expected obj file %s", expectObj) + } +} diff --git a/go/internal/forked/api/internal/plugins/doc.go b/go/internal/forked/api/internal/plugins/doc.go new file mode 100644 index 000000000..5755f1750 --- /dev/null +++ b/go/internal/forked/api/internal/plugins/doc.go @@ -0,0 +1,115 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +/* + +Read docs/plugins.md first for an overview of kustomize plugins. + + +BUILTIN PLUGIN CONFIGURATION + +There are two kinds of plugins, Go plugins (shared +object library) and exec plugins (independent binary). +For performance and standardized testing reasons, all +builtin plugins are Go plugins (not exec plugins). + +Using "SecretGenerator" as an example in what +follows. + +The plugin config file looks like + + apiVersion: builtin + kind: SecretGenerator + metadata: + name: whatever + otherField1: whatever + otherField2: whatever + ... + +The apiVersion must be 'builtin'. + +The kind is the CamelCase name of the plugin. + +The source for a builtin plugin must be at: + + repo=$GOPATH/src/sigs.k8s.io/kustomize + ${repo}/plugin/builtin/LOWERCASE(${kind})/${kind} + +k8s wants 'kind' values to follow CamelCase, while +Go style doesn't like but does allow such names. + +The lowercased value of kind is used as the name of the +directory holding the plugin, its test, and any +optional associated files (possibly a go.mod file). + + +BUILTIN PLUGIN GENERATION + +The `pluginator` program is a code generator that +converts kustomize generator (G) and/or +transformer (T) Go plugins to statically linkable +code. + +It arises from following requirements: + +* extension + kustomize does two things - generate or + transform k8s resources. Plugins let + users write their own G&T's without + having to fork kustomize and learn its + internals. + +* dogfooding + A G&T extension framework one can trust + should be used by its authors to deliver + builtin G&T's. + +* distribution + kustomize should be distributable via + `go get` and should run where Go + programs are expected to run. + +The extension requirement led to building +a framework that accommodates writing a +G or T as either + +* an 'exec' plugin (any executable file + runnable as a kustomize subprocess), or + +* as a Go plugin - see + https://golang.org/pkg/plugin. + +The dogfooding (and an implicit performance +requirement) requires a 'builtin' G or T to +be written as a Go plugin. + +The distribution ('go get') requirement demands +conversion of Go plugins to statically linked +code, hence this program. + + +TO GENERATE CODE + + repo=$GOPATH/src/sigs.k8s.io/kustomize + cd $repo/plugin/builtin + go generate ./... + +This creates + + $repo/api/plugins/builtins/SecretGenerator.go + +etc. + +Generated plugins are used in kustomize via + + package whatever + import sigs.k8s.io/kustomize/api/plugins/builtins + ... + g := builtin.NewSecretGenerator() + g.Config(h, k) + resources, err := g.Generate() + err = g.Transform(resources) + // Eventually emit resources. + +*/ +package plugins diff --git a/go/internal/forked/api/internal/plugins/execplugin/execplugin.go b/go/internal/forked/api/internal/plugins/execplugin/execplugin.go new file mode 100644 index 000000000..9380558cb --- /dev/null +++ b/go/internal/forked/api/internal/plugins/execplugin/execplugin.go @@ -0,0 +1,192 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package execplugin + +import ( + "bytes" + "fmt" + "io/ioutil" + "os" + "os/exec" + "runtime" + "strings" + + "github.com/google/shlex" + + "github.com/pkg/errors" + "sigs.k8s.io/kustomize/api/internal/plugins/utils" + "sigs.k8s.io/kustomize/api/resmap" + "sigs.k8s.io/yaml" +) + +const ( + tmpConfigFilePrefix = "kust-plugin-config-" +) + +// ExecPlugin record the name and args of an executable +// It triggers the executable generator and transformer +type ExecPlugin struct { + // absolute path of the executable + path string + + // Optional command line arguments to the executable + // pulled from specially named fields in cfg. + // This is for executables that don't want to parse YAML. + args []string + + // Plugin configuration data. + cfg []byte + + // PluginHelpers + h *resmap.PluginHelpers +} + +func NewExecPlugin(p string) *ExecPlugin { + return &ExecPlugin{path: p} +} + +func (p *ExecPlugin) ErrIfNotExecutable() error { + f, err := os.Stat(p.path) + if err != nil { + return err + } + // In Windows, it is not possible to determine whether a + // file is executable through file mode. + // TODO: provide for setting the executable FileMode bit on Windows + // The (fs *fileStat) Mode() (m FileMode) {} function in + // https://golang.org/src/os/types_windows.go + // lacks the ability to set the FileMode executable bit in response + // to file data on Windows. + if f.Mode()&0111 == 0000 && runtime.GOOS != "windows" { + return fmt.Errorf("unexecutable plugin at: %s", p.path) + } + return nil +} + +func (p *ExecPlugin) Path() string { + return p.path +} + +func (p *ExecPlugin) Args() []string { + return p.args +} + +func (p *ExecPlugin) Cfg() []byte { + return p.cfg +} + +func (p *ExecPlugin) Config(h *resmap.PluginHelpers, config []byte) error { + p.h = h + p.cfg = config + return p.processOptionalArgsFields() +} + +type argsConfig struct { + ArgsOneLiner string `json:"argsOneLiner,omitempty" yaml:"argsOneLiner,omitempty"` + ArgsFromFile string `json:"argsFromFile,omitempty" yaml:"argsFromFile,omitempty"` +} + +func (p *ExecPlugin) processOptionalArgsFields() error { + var c argsConfig + err := yaml.Unmarshal(p.cfg, &c) + if err != nil { + return err + } + if c.ArgsOneLiner != "" { + p.args, _ = shlex.Split(c.ArgsOneLiner) + } + if c.ArgsFromFile != "" { + content, err := p.h.Loader().Load(c.ArgsFromFile) + if err != nil { + return err + } + for _, x := range strings.Split(string(content), "\n") { + x := strings.TrimLeft(x, " ") + if x != "" { + p.args = append(p.args, x) + } + } + } + return nil +} + +func (p *ExecPlugin) Generate() (resmap.ResMap, error) { + output, err := p.invokePlugin(nil) + if err != nil { + return nil, err + } + rm, err := p.h.ResmapFactory().NewResMapFromBytes(output) + if err != nil { + return nil, err + } + return utils.UpdateResourceOptions(rm) +} + +func (p *ExecPlugin) Transform(rm resmap.ResMap) error { + // add ResIds as annotations to all objects so that we can add them back + inputRM, err := utils.GetResMapWithIDAnnotation(rm) + if err != nil { + return err + } + + // encode the ResMap so it can be fed to the plugin + resources, err := inputRM.AsYaml() + if err != nil { + return err + } + + // invoke the plugin with resources as the input + output, err := p.invokePlugin(resources) + if err != nil { + return fmt.Errorf("%v %s", err, string(output)) + } + + // update the original ResMap based on the output + return utils.UpdateResMapValues(p.path, p.h, output, rm) +} + +// invokePlugin writes plugin config to a temp file, then +// passes the full temp file path as the first arg to a process +// running the plugin binary. Process output is returned. +func (p *ExecPlugin) invokePlugin(input []byte) ([]byte, error) { + f, err := ioutil.TempFile("", tmpConfigFilePrefix) + if err != nil { + return nil, errors.Wrap( + err, "creating tmp plugin config file") + } + _, err = f.Write(p.cfg) + if err != nil { + return nil, errors.Wrap( + err, "writing plugin config to "+f.Name()) + } + err = f.Close() + if err != nil { + return nil, errors.Wrap( + err, "closing plugin config file "+f.Name()) + } + //nolint:gosec + cmd := exec.Command( + p.path, append([]string{f.Name()}, p.args...)...) + cmd.Env = p.getEnv() + cmd.Stdin = bytes.NewReader(input) + cmd.Stderr = os.Stderr + if _, err := os.Stat(p.h.Loader().Root()); err == nil { + cmd.Dir = p.h.Loader().Root() + } + result, err := cmd.Output() + if err != nil { + return nil, errors.Wrapf( + err, "failure in plugin configured via %s; %v", + f.Name(), err.Error()) + } + return result, os.Remove(f.Name()) +} + +func (p *ExecPlugin) getEnv() []string { + env := os.Environ() + env = append(env, + "KUSTOMIZE_PLUGIN_CONFIG_STRING="+string(p.cfg), + "KUSTOMIZE_PLUGIN_CONFIG_ROOT="+p.h.Loader().Root()) + return env +} diff --git a/go/internal/forked/api/internal/plugins/execplugin/execplugin_test.go b/go/internal/forked/api/internal/plugins/execplugin/execplugin_test.go new file mode 100644 index 000000000..d2adb89a4 --- /dev/null +++ b/go/internal/forked/api/internal/plugins/execplugin/execplugin_test.go @@ -0,0 +1,128 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package execplugin_test + +import ( + "path/filepath" + "runtime" + "strings" + "testing" + + "github.com/stretchr/testify/require" + "sigs.k8s.io/kustomize/api/internal/plugins/execplugin" + pLdr "sigs.k8s.io/kustomize/api/internal/plugins/loader" + "sigs.k8s.io/kustomize/api/internal/plugins/utils" + fLdr "sigs.k8s.io/kustomize/api/loader" + "sigs.k8s.io/kustomize/api/provider" + "sigs.k8s.io/kustomize/api/resmap" + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/filesys" +) + +func TestExecPluginConfig(t *testing.T) { + fSys := filesys.MakeFsInMemory() + err := fSys.WriteFile("sed-input.txt", []byte(` +s/$FOO/foo/g +s/$BAR/bar baz/g + \ \ \ +`)) + require.NoError(t, err) + ldr, err := fLdr.NewLoader( + fLdr.RestrictionRootOnly, filesys.Separator, fSys) + if err != nil { + t.Fatal(err) + } + pvd := provider.NewDefaultDepProvider() + rf := resmap.NewFactory(pvd.GetResourceFactory()) + pluginConfig := rf.RF().FromMap( + map[string]interface{}{ + "apiVersion": "someteam.example.com/v1", + "kind": "SedTransformer", + "metadata": map[string]interface{}{ + "name": "some-random-name", + }, + "argsOneLiner": "one two 'foo bar'", + "argsFromFile": "sed-input.txt", + }) + + pluginConfig.RemoveBuildAnnotations() + pc := types.DisabledPluginConfig() + loader := pLdr.NewLoader(pc, rf, fSys) + pluginPath, err := loader.AbsolutePluginPath(pluginConfig.OrgId()) + if err != nil { + t.Fatalf("unexpected err: %v", err) + } + p := execplugin.NewExecPlugin(pluginPath) + // Not checking to see if the plugin is executable, + // because this test does not run it. + // This tests only covers sending configuration + // to the plugin wrapper object and confirming + // that it's properly prepared for execution. + + yaml, err := pluginConfig.AsYAML() + if err != nil { + t.Fatalf("unexpected err: %v", err) + } + err = p.Config( + resmap.NewPluginHelpers(ldr, pvd.GetFieldValidator(), rf, pc), + yaml) + require.NoError(t, err) + + expected := "someteam.example.com/v1/sedtransformer/SedTransformer" + if !strings.HasSuffix(p.Path(), expected) { + t.Fatalf("expected suffix '%s', got '%s'", expected, p.Path()) + } + + expected = `apiVersion: someteam.example.com/v1 +argsFromFile: sed-input.txt +argsOneLiner: one two 'foo bar' +kind: SedTransformer +metadata: + name: some-random-name +` + if expected != string(p.Cfg()) { + t.Fatalf("expected cfg '%s', got '%s'", expected, string(p.Cfg())) + + } + if len(p.Args()) != 6 { + t.Fatalf("unexpected arg len %d, %#v", len(p.Args()), p.Args()) + } + if p.Args()[0] != "one" || + p.Args()[1] != "two" || + p.Args()[2] != "foo bar" || + p.Args()[3] != "s/$FOO/foo/g" || + p.Args()[4] != "s/$BAR/bar baz/g" || + p.Args()[5] != "\\ \\ \\ " { + t.Fatalf("unexpected arg array: %#v", p.Args()) + } +} + +func TestExecPlugin_ErrIfNotExecutable(t *testing.T) { + if runtime.GOOS == "windows" { + t.Skipf("always returns nil on Windows") + } + + srcRoot, err := utils.DeterminePluginSrcRoot(filesys.MakeFsOnDisk()) + if err != nil { + t.Error(err) + } + + // Test unexecutable plugin + unexecutablePlugin := filepath.Join( + srcRoot, "builtin", "", "secretgenerator", "SecretGenerator.so") + p := execplugin.NewExecPlugin(unexecutablePlugin) + err = p.ErrIfNotExecutable() + if err == nil { + t.Fatalf("unexpected err: %v", err) + } + + // Test executable plugin + executablePlugin := filepath.Join( + srcRoot, "someteam.example.com", "v1", "bashedconfigmap", "BashedConfigMap") + p = execplugin.NewExecPlugin(executablePlugin) + err = p.ErrIfNotExecutable() + if err != nil { + t.Fatalf("unexpected err: %v", err) + } +} diff --git a/go/internal/forked/api/internal/plugins/execplugin/execplugin_test.go b/go/internal/forked/api/internal/plugins/execplugin/execplugin_test.go new file mode 100644 index 000000000..895857513 --- /dev/null +++ b/go/internal/forked/api/internal/plugins/execplugin/execplugin_test.go @@ -0,0 +1,128 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package execplugin_test + +import ( + "path/filepath" + "runtime" + "strings" + "testing" + + "github.com/stretchr/testify/require" + "sigs.k8s.io/kustomize/api/internal/plugins/execplugin" + pLdr "sigs.k8s.io/kustomize/api/internal/plugins/loader" + "sigs.k8s.io/kustomize/api/internal/plugins/utils" + fLdr "sigs.k8s.io/kustomize/api/loader" + "sigs.k8s.io/kustomize/api/provider" + "sigs.k8s.io/kustomize/api/resmap" + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/filesys" +) + +func TestExecPluginConfig(t *testing.T) { + fSys := filesys.MakeFsInMemory() + err := fSys.WriteFile("sed-input.txt", []byte(` +s/$FOO/foo/g +s/$BAR/bar baz/g + \ \ \ +`)) + require.NoError(t, err) + ldr, err := fLdr.NewLoader( + fLdr.RestrictionRootOnly, filesys.Separator, fSys) + if err != nil { + t.Fatal(err) + } + pvd := provider.NewDefaultDepProvider() + rf := resmap.NewFactory(pvd.GetResourceFactory()) + pluginConfig := rf.RF().FromMap( + map[string]interface{}{ + "apiVersion": "someteam.example.com/v1", + "kind": "SedTransformer", + "metadata": map[string]interface{}{ + "name": "some-random-name", + }, + "argsOneLiner": "one two 'foo bar'", + "argsFromFile": "sed-input.txt", + }) + + pluginConfig.RemoveBuildAnnotations() + pc := types.DisabledPluginConfig() + loader := pLdr.NewLoader(pc, rf, fSys) + pluginPath, err := loader.AbsolutePluginPath(pluginConfig.OrgId()) + if err != nil { + t.Fatalf("unexpected err: %v", err) + } + p := execplugin.NewExecPlugin(pluginPath) + // Not checking to see if the plugin is executable, + // because this test does not run it. + // This tests only covers sending configuration + // to the plugin wrapper object and confirming + // that it's properly prepared for execution. + + yaml, err := pluginConfig.AsYAML() + if err != nil { + t.Fatalf("unexpected err: %v", err) + } + err = p.Config( + resmap.NewPluginHelpers(ldr, pvd.GetFieldValidator(), rf, pc), + yaml) + require.NoError(t, err) + + expected := "someteam.example.com/v1/sedtransformer/SedTransformer" + if !strings.HasSuffix(p.Path(), expected) { + t.Fatalf("expected suffix '%s', got '%s'", expected, p.Path()) + } + + expected = `apiVersion: someteam.example.com/v1 +argsFromFile: sed-input.txt +argsOneLiner: one two 'foo bar' +kind: SedTransformer +metadata: + name: some-random-name +` + if expected != string(p.Cfg()) { + t.Fatalf("expected cfg '%s', got '%s'", expected, string(p.Cfg())) + + } + if len(p.Args()) != 6 { + t.Fatalf("unexpected arg len %d, %#v", len(p.Args()), p.Args()) + } + if p.Args()[0] != "one" || + p.Args()[1] != "two" || + p.Args()[2] != "foo bar" || + p.Args()[3] != "s/$FOO/foo/g" || + p.Args()[4] != "s/$BAR/bar baz/g" || + p.Args()[5] != "\\ \\ \\ " { + t.Fatalf("unexpected arg array: %#v", p.Args()) + } +} + +func TestExecPlugin_ErrIfNotExecutable(t *testing.T) { + if runtime.GOOS == "windows" { + t.Skipf("always returns nil on Windows") + } + + srcRoot, err := utils.DeterminePluginSrcRoot(filesys.MakeFsOnDisk()) + if err != nil { + t.Error(err) + } + + // Test unexecutable plugin + unexecutablePlugin := filepath.Join( + srcRoot, "builtin", "", "secretgenerator", "SecretGenerator.so") + p := execplugin.NewExecPlugin(unexecutablePlugin) + err = p.ErrIfNotExecutable() + if err == nil { + t.Fatalf("unexpected err: %v", err) + } + + // Test executable plugin + executablePlugin := filepath.Join( + srcRoot, "someteam.example.com", "v1", "bashedconfigmap", "BashedConfigMap") + p = execplugin.NewExecPlugin(executablePlugin) + err = p.ErrIfNotExecutable() + if err != nil { + t.Fatalf("unexpected err: %v", err) + } +} diff --git a/go/internal/forked/api/internal/plugins/fnplugin/fnplugin.go b/go/internal/forked/api/internal/plugins/fnplugin/fnplugin.go new file mode 100644 index 000000000..23df3061b --- /dev/null +++ b/go/internal/forked/api/internal/plugins/fnplugin/fnplugin.go @@ -0,0 +1,199 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package fnplugin + +import ( + "bytes" + "fmt" + + "github.com/pkg/errors" + + "sigs.k8s.io/kustomize/api/internal/plugins/utils" + "sigs.k8s.io/kustomize/api/resmap" + "sigs.k8s.io/kustomize/api/resource" + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/fn/runtime/runtimeutil" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/runfn" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" +) + +// FnPlugin is the struct to hold function information +type FnPlugin struct { + // Function runner + runFns runfn.RunFns + + // Plugin configuration data. + cfg []byte + + // Plugin name cache for error output + pluginName string + + // PluginHelpers + h *resmap.PluginHelpers +} + +func bytesToRNode(yml []byte) (*yaml.RNode, error) { + rnode, err := yaml.Parse(string(yml)) + if err != nil { + return nil, err + } + return rnode, nil +} + +func resourceToRNode(res *resource.Resource) (*yaml.RNode, error) { + yml, err := res.AsYAML() + if err != nil { + return nil, err + } + + return bytesToRNode(yml) +} + +// GetFunctionSpec return function spec is there is. Otherwise return nil +func GetFunctionSpec(res *resource.Resource) *runtimeutil.FunctionSpec { + rnode, err := resourceToRNode(res) + if err != nil { + return nil + } + + return runtimeutil.GetFunctionSpec(rnode) +} + +func toStorageMounts(mounts []string) []runtimeutil.StorageMount { + var sms []runtimeutil.StorageMount + for _, mount := range mounts { + sms = append(sms, runtimeutil.StringToStorageMount(mount)) + } + return sms +} + +// NewFnPlugin creates a FnPlugin struct +func NewFnPlugin(o *types.FnPluginLoadingOptions) *FnPlugin { + return &FnPlugin{ + runFns: runfn.RunFns{ + Functions: []*yaml.RNode{}, + Network: o.Network, + EnableStarlark: o.EnableStar, + EnableExec: o.EnableExec, + StorageMounts: toStorageMounts(o.Mounts), + Env: o.Env, + AsCurrentUser: o.AsCurrentUser, + WorkingDir: o.WorkingDir, + }, + } +} + +// Cfg returns function config +func (p *FnPlugin) Cfg() []byte { + return p.cfg +} + +// Config is called by kustomize to pass-in config information +func (p *FnPlugin) Config(h *resmap.PluginHelpers, config []byte) error { + p.h = h + p.cfg = config + + fn, err := bytesToRNode(p.cfg) + if err != nil { + return err + } + + meta, err := fn.GetMeta() + if err != nil { + return err + } + + p.pluginName = fmt.Sprintf("api: %s, kind: %s, name: %s", + meta.APIVersion, meta.Kind, meta.Name) + + return nil +} + +// Generate is called when run as generator +func (p *FnPlugin) Generate() (resmap.ResMap, error) { + output, err := p.invokePlugin(nil) + if err != nil { + return nil, err + } + rm, err := p.h.ResmapFactory().NewResMapFromBytes(output) + if err != nil { + return nil, err + } + return utils.UpdateResourceOptions(rm) +} + +// Transform is called when run as transformer +func (p *FnPlugin) Transform(rm resmap.ResMap) error { + // add ResIds as annotations to all objects so that we can add them back + inputRM, err := utils.GetResMapWithIDAnnotation(rm) + if err != nil { + return err + } + + // encode the ResMap so it can be fed to the plugin + resources, err := inputRM.AsYaml() + if err != nil { + return err + } + + // invoke the plugin with resources as the input + output, err := p.invokePlugin(resources) + if err != nil { + return fmt.Errorf("%v %s", err, string(output)) + } + + // update the original ResMap based on the output + return utils.UpdateResMapValues(p.pluginName, p.h, output, rm) +} + +func injectAnnotation(input *yaml.RNode, k, v string) error { + err := input.PipeE(yaml.SetAnnotation(k, v)) + if err != nil { + return err + } + return nil +} + +// invokePlugin uses Function runner to run function as plugin +func (p *FnPlugin) invokePlugin(input []byte) ([]byte, error) { + // get function config rnode + functionConfig, err := bytesToRNode(p.cfg) + if err != nil { + return nil, err + } + + // This annotation will let kustomize ingnore this item in output + err = injectAnnotation(functionConfig, "config.kubernetes.io/local-config", "true") + if err != nil { + return nil, err + } + // we need to add config as input for generators. Some of them don't work with FunctionConfig + // and in addition kio.Pipeline won't create anything if there are no objects + // see https://github.com/kubernetes-sigs/kustomize/blob/master/kyaml/kio/kio.go#L93 + // Since we added `local-config` annotation so it will be ignored in generator output + // TODO(donnyxia): This is actually not used by generator and only used to bypass a kio limitation. + // Need better solution. + if input == nil { + yml, err := functionConfig.String() + if err != nil { + return nil, err + } + input = []byte(yml) + } + + // Configure and Execute Fn. We don't need to convert resources to ResourceList here + // because function runtime will do that. See kyaml/fn/runtime/runtimeutil/runtimeutil.go + var ouputBuffer bytes.Buffer + p.runFns.Input = bytes.NewReader(input) + p.runFns.Functions = append(p.runFns.Functions, functionConfig) + p.runFns.Output = &ouputBuffer + + err = p.runFns.Execute() + if err != nil { + return nil, errors.Wrap( + err, "couldn't execute function") + } + + return ouputBuffer.Bytes(), nil +} diff --git a/go/internal/forked/api/internal/plugins/fnplugin/fnplugin.go b/go/internal/forked/api/internal/plugins/fnplugin/fnplugin.go new file mode 100644 index 000000000..8ba8101db --- /dev/null +++ b/go/internal/forked/api/internal/plugins/fnplugin/fnplugin.go @@ -0,0 +1,199 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package fnplugin + +import ( + "bytes" + "fmt" + + "github.com/pkg/errors" + + "sigs.k8s.io/kustomize/api/internal/plugins/utils" + "sigs.k8s.io/kustomize/api/resmap" + "sigs.k8s.io/kustomize/api/resource" + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/fn/runtime/runtimeutil" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/runfn" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/yaml" +) + +// FnPlugin is the struct to hold function information +type FnPlugin struct { + // Function runner + runFns runfn.RunFns + + // Plugin configuration data. + cfg []byte + + // Plugin name cache for error output + pluginName string + + // PluginHelpers + h *resmap.PluginHelpers +} + +func bytesToRNode(yml []byte) (*yaml.RNode, error) { + rnode, err := yaml.Parse(string(yml)) + if err != nil { + return nil, err + } + return rnode, nil +} + +func resourceToRNode(res *resource.Resource) (*yaml.RNode, error) { + yml, err := res.AsYAML() + if err != nil { + return nil, err + } + + return bytesToRNode(yml) +} + +// GetFunctionSpec return function spec is there is. Otherwise return nil +func GetFunctionSpec(res *resource.Resource) *runtimeutil.FunctionSpec { + rnode, err := resourceToRNode(res) + if err != nil { + return nil + } + + return runtimeutil.GetFunctionSpec(rnode) +} + +func toStorageMounts(mounts []string) []runtimeutil.StorageMount { + var sms []runtimeutil.StorageMount + for _, mount := range mounts { + sms = append(sms, runtimeutil.StringToStorageMount(mount)) + } + return sms +} + +// NewFnPlugin creates a FnPlugin struct +func NewFnPlugin(o *types.FnPluginLoadingOptions) *FnPlugin { + return &FnPlugin{ + runFns: runfn.RunFns{ + Functions: []*yaml.RNode{}, + Network: o.Network, + EnableStarlark: o.EnableStar, + EnableExec: o.EnableExec, + StorageMounts: toStorageMounts(o.Mounts), + Env: o.Env, + AsCurrentUser: o.AsCurrentUser, + WorkingDir: o.WorkingDir, + }, + } +} + +// Cfg returns function config +func (p *FnPlugin) Cfg() []byte { + return p.cfg +} + +// Config is called by kustomize to pass-in config information +func (p *FnPlugin) Config(h *resmap.PluginHelpers, config []byte) error { + p.h = h + p.cfg = config + + fn, err := bytesToRNode(p.cfg) + if err != nil { + return err + } + + meta, err := fn.GetMeta() + if err != nil { + return err + } + + p.pluginName = fmt.Sprintf("api: %s, kind: %s, name: %s", + meta.APIVersion, meta.Kind, meta.Name) + + return nil +} + +// Generate is called when run as generator +func (p *FnPlugin) Generate() (resmap.ResMap, error) { + output, err := p.invokePlugin(nil) + if err != nil { + return nil, err + } + rm, err := p.h.ResmapFactory().NewResMapFromBytes(output) + if err != nil { + return nil, err + } + return utils.UpdateResourceOptions(rm) +} + +// Transform is called when run as transformer +func (p *FnPlugin) Transform(rm resmap.ResMap) error { + // add ResIds as annotations to all objects so that we can add them back + inputRM, err := utils.GetResMapWithIDAnnotation(rm) + if err != nil { + return err + } + + // encode the ResMap so it can be fed to the plugin + resources, err := inputRM.AsYaml() + if err != nil { + return err + } + + // invoke the plugin with resources as the input + output, err := p.invokePlugin(resources) + if err != nil { + return fmt.Errorf("%v %s", err, string(output)) + } + + // update the original ResMap based on the output + return utils.UpdateResMapValues(p.pluginName, p.h, output, rm) +} + +func injectAnnotation(input *yaml.RNode, k, v string) error { + err := input.PipeE(yaml.SetAnnotation(k, v)) + if err != nil { + return err + } + return nil +} + +// invokePlugin uses Function runner to run function as plugin +func (p *FnPlugin) invokePlugin(input []byte) ([]byte, error) { + // get function config rnode + functionConfig, err := bytesToRNode(p.cfg) + if err != nil { + return nil, err + } + + // This annotation will let kustomize ingnore this item in output + err = injectAnnotation(functionConfig, "config.kubernetes.io/local-config", "true") + if err != nil { + return nil, err + } + // we need to add config as input for generators. Some of them don't work with FunctionConfig + // and in addition kio.Pipeline won't create anything if there are no objects + // see https://github.com/kubernetes-sigs/kustomize/blob/master/kyaml/kio/kio.go#L93 + // Since we added `local-config` annotation so it will be ignored in generator output + // TODO(donnyxia): This is actually not used by generator and only used to bypass a kio limitation. + // Need better solution. + if input == nil { + yml, err := functionConfig.String() + if err != nil { + return nil, err + } + input = []byte(yml) + } + + // Configure and Execute Fn. We don't need to convert resources to ResourceList here + // because function runtime will do that. See kyaml/fn/runtime/runtimeutil/runtimeutil.go + var ouputBuffer bytes.Buffer + p.runFns.Input = bytes.NewReader(input) + p.runFns.Functions = append(p.runFns.Functions, functionConfig) + p.runFns.Output = &ouputBuffer + + err = p.runFns.Execute() + if err != nil { + return nil, errors.Wrap( + err, "couldn't execute function") + } + + return ouputBuffer.Bytes(), nil +} diff --git a/go/internal/forked/api/internal/plugins/loader/loader.go b/go/internal/forked/api/internal/plugins/loader/loader.go new file mode 100644 index 000000000..60d7b9f2d --- /dev/null +++ b/go/internal/forked/api/internal/plugins/loader/loader.go @@ -0,0 +1,306 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package loader + +import ( + "fmt" + "log" + "os" + "path/filepath" + "plugin" + "reflect" + "strings" + + "github.com/pkg/errors" + "sigs.k8s.io/kustomize/api/ifc" + "sigs.k8s.io/kustomize/api/internal/plugins/builtinhelpers" + "sigs.k8s.io/kustomize/api/internal/plugins/execplugin" + "sigs.k8s.io/kustomize/api/internal/plugins/fnplugin" + "sigs.k8s.io/kustomize/api/internal/plugins/utils" + "sigs.k8s.io/kustomize/api/konfig" + "sigs.k8s.io/kustomize/api/resmap" + "sigs.k8s.io/kustomize/api/resource" + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/filesys" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/resid" +) + +// Loader loads plugins using a file loader (a different loader). +type Loader struct { + pc *types.PluginConfig + rf *resmap.Factory + fs filesys.FileSystem + + // absolutePluginHome caches the location of a valid plugin root directory. + // It should only be set once the directory's existence has been confirmed. + absolutePluginHome string +} + +func NewLoader( + pc *types.PluginConfig, rf *resmap.Factory, fs filesys.FileSystem) *Loader { + return &Loader{pc: pc, rf: rf, fs: fs} +} + +// Config provides the global (not plugin specific) PluginConfig data. +func (l *Loader) Config() *types.PluginConfig { + return l.pc +} + +// SetWorkDir sets the working directory for this loader's plugins +func (l *Loader) SetWorkDir(wd string) { + l.pc.FnpLoadingOptions.WorkingDir = wd +} + +func (l *Loader) LoadGenerators( + ldr ifc.Loader, v ifc.Validator, rm resmap.ResMap) ( + result []*resmap.GeneratorWithProperties, err error) { + for _, res := range rm.Resources() { + g, err := l.LoadGenerator(ldr, v, res) + if err != nil { + return nil, err + } + generatorOrigin, err := resource.OriginFromCustomPlugin(res) + if err != nil { + return nil, err + } + result = append(result, &resmap.GeneratorWithProperties{Generator: g, Origin: generatorOrigin}) + } + return result, nil +} + +func (l *Loader) LoadGenerator( + ldr ifc.Loader, v ifc.Validator, res *resource.Resource) (resmap.Generator, error) { + c, err := l.loadAndConfigurePlugin(ldr, v, res) + if err != nil { + return nil, err + } + g, ok := c.(resmap.Generator) + if !ok { + return nil, fmt.Errorf("plugin %s not a generator", res.OrgId()) + } + return g, nil +} + +func (l *Loader) LoadTransformers( + ldr ifc.Loader, v ifc.Validator, rm resmap.ResMap) ([]*resmap.TransformerWithProperties, error) { + var result []*resmap.TransformerWithProperties + for _, res := range rm.Resources() { + t, err := l.LoadTransformer(ldr, v, res) + if err != nil { + return nil, err + } + transformerOrigin, err := resource.OriginFromCustomPlugin(res) + if err != nil { + return nil, err + } + result = append(result, &resmap.TransformerWithProperties{Transformer: t, Origin: transformerOrigin}) + } + return result, nil +} + +func (l *Loader) LoadTransformer( + ldr ifc.Loader, v ifc.Validator, res *resource.Resource) (*resmap.TransformerWithProperties, error) { + c, err := l.loadAndConfigurePlugin(ldr, v, res) + if err != nil { + return nil, err + } + t, ok := c.(resmap.Transformer) + if !ok { + return nil, fmt.Errorf("plugin %s not a transformer", res.OrgId()) + } + return &resmap.TransformerWithProperties{Transformer: t}, nil +} + +func relativePluginPath(id resid.ResId) string { + return filepath.Join( + id.Group, + id.Version, + strings.ToLower(id.Kind)) +} + +func (l *Loader) AbsolutePluginPath(id resid.ResId) (string, error) { + pluginHome, err := l.absPluginHome() + if err != nil { + return "", err + } + return filepath.Join(pluginHome, relativePluginPath(id), id.Kind), nil +} + +// absPluginHome is the home of kustomize Exec and Go plugins. +// Kustomize plugin configuration files are k8s-style objects +// containing the fields 'apiVersion' and 'kind', e.g. +// apiVersion: apps/v1 +// kind: Deployment +// kustomize reads plugin configuration data from a file path +// specified in the 'generators:' or 'transformers:' field of a +// kustomization file. For Exec and Go plugins, kustomize +// uses this data to both locate the plugin and configure it. +// Each Exec or Go plugin (its code, its tests, its supporting data +// files, etc.) must be housed in its own directory at +// ${absPluginHome}/${pluginApiVersion}/LOWERCASE(${pluginKind}) +// where +// - ${absPluginHome} is an absolute path, defined below. +// - ${pluginApiVersion} is taken from the plugin config file. +// - ${pluginKind} is taken from the plugin config file. +func (l *Loader) absPluginHome() (string, error) { + // External plugins are disabled--return the dummy plugin root. + if l.pc.PluginRestrictions != types.PluginRestrictionsNone { + return konfig.NoPluginHomeSentinal, nil + } + // We've already determined plugin home--use the cached value. + if l.absolutePluginHome != "" { + return l.absolutePluginHome, nil + } + + // Check default locations for a valid plugin root, and cache it if found. + dir, err := konfig.DefaultAbsPluginHome(l.fs) + if err != nil { + return "", err + } + l.absolutePluginHome = dir + return l.absolutePluginHome, nil +} + +func isBuiltinPlugin(res *resource.Resource) bool { + // TODO: the special string should appear in Group, not Version. + return res.GetGvk().Group == "" && + res.GetGvk().Version == konfig.BuiltinPluginApiVersion +} + +func (l *Loader) loadAndConfigurePlugin( + ldr ifc.Loader, + v ifc.Validator, + res *resource.Resource) (c resmap.Configurable, err error) { + if isBuiltinPlugin(res) { + switch l.pc.BpLoadingOptions { + case types.BploLoadFromFileSys: + c, err = l.loadPlugin(res) + case types.BploUseStaticallyLinked: + // Instead of looking for and loading a .so file, + // instantiate the plugin from a generated factory + // function (see "pluginator"). Being able to do this + // is what makes a plugin "builtin". + c, err = l.makeBuiltinPlugin(res.GetGvk()) + default: + err = fmt.Errorf( + "unknown plugin loader behavior specified: %v", + l.pc.BpLoadingOptions) + } + } else { + switch l.pc.PluginRestrictions { + case types.PluginRestrictionsNone: + c, err = l.loadPlugin(res) + case types.PluginRestrictionsBuiltinsOnly: + err = types.NewErrOnlyBuiltinPluginsAllowed(res.OrgId().Kind) + default: + err = fmt.Errorf( + "unknown plugin restriction specified: %v", + l.pc.PluginRestrictions) + } + } + if err != nil { + return nil, err + } + yaml, err := res.AsYAML() + if err != nil { + return nil, errors.Wrapf(err, "marshalling yaml from res %s", res.OrgId()) + } + err = c.Config(resmap.NewPluginHelpers(ldr, v, l.rf, l.pc), yaml) + if err != nil { + return nil, errors.Wrapf( + err, "plugin %s fails configuration", res.OrgId()) + } + return c, nil +} + +func (l *Loader) makeBuiltinPlugin(r resid.Gvk) (resmap.Configurable, error) { + bpt := builtinhelpers.GetBuiltinPluginType(r.Kind) + if f, ok := builtinhelpers.GeneratorFactories[bpt]; ok { + return f(), nil + } + if f, ok := builtinhelpers.TransformerFactories[bpt]; ok { + return f(), nil + } + return nil, errors.Errorf("unable to load builtin %s", r) +} + +func (l *Loader) loadPlugin(res *resource.Resource) (resmap.Configurable, error) { + spec := fnplugin.GetFunctionSpec(res) + if spec != nil { + return fnplugin.NewFnPlugin(&l.pc.FnpLoadingOptions), nil + } + return l.loadExecOrGoPlugin(res.OrgId()) +} + +func (l *Loader) loadExecOrGoPlugin(resId resid.ResId) (resmap.Configurable, error) { + absPluginPath, err := l.AbsolutePluginPath(resId) + if err != nil { + return nil, err + } + // First try to load the plugin as an executable. + p := execplugin.NewExecPlugin(absPluginPath) + if err = p.ErrIfNotExecutable(); err == nil { + return p, nil + } + if !os.IsNotExist(err) { + // The file exists, but something else is wrong, + // likely it's not executable. + // Assume the user forgot to set the exec bit, + // and return an error, rather than adding ".so" + // to the name and attempting to load it as a Go + // plugin, which will likely fail and result + // in an obscure message. + return nil, err + } + // Failing the above, try loading it as a Go plugin. + c, err := l.loadGoPlugin(resId, absPluginPath+".so") + if err != nil { + return nil, err + } + return c, nil +} + +// registry is a means to avoid trying to load the same .so file +// into memory more than once, which results in an error. +// Each test makes its own loader, and tries to load its own plugins, +// but the loaded .so files are in shared memory, so one will get +// "this plugin already loaded" errors if the registry is maintained +// as a Loader instance variable. So make it a package variable. +var registry = make(map[string]resmap.Configurable) + +func (l *Loader) loadGoPlugin(id resid.ResId, absPath string) (resmap.Configurable, error) { + regId := relativePluginPath(id) + if c, ok := registry[regId]; ok { + return copyPlugin(c), nil + } + if !utils.FileExists(absPath) { + return nil, fmt.Errorf( + "expected file with Go object code at: %s", absPath) + } + log.Printf("Attempting plugin load from '%s'", absPath) + p, err := plugin.Open(absPath) + if err != nil { + return nil, errors.Wrapf(err, "plugin %s fails to load", absPath) + } + symbol, err := p.Lookup(konfig.PluginSymbol) + if err != nil { + return nil, errors.Wrapf( + err, "plugin %s doesn't have symbol %s", + regId, konfig.PluginSymbol) + } + c, ok := symbol.(resmap.Configurable) + if !ok { + return nil, fmt.Errorf("plugin '%s' not configurable", regId) + } + registry[regId] = c + return copyPlugin(c), nil +} + +func copyPlugin(c resmap.Configurable) resmap.Configurable { + indirect := reflect.Indirect(reflect.ValueOf(c)) + newIndirect := reflect.New(indirect.Type()) + newIndirect.Elem().Set(reflect.ValueOf(indirect.Interface())) + newNamed := newIndirect.Interface() + return newNamed.(resmap.Configurable) +} diff --git a/go/internal/forked/api/internal/plugins/loader/loader.go b/go/internal/forked/api/internal/plugins/loader/loader.go new file mode 100644 index 000000000..01ef406c4 --- /dev/null +++ b/go/internal/forked/api/internal/plugins/loader/loader.go @@ -0,0 +1,306 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package loader + +import ( + "fmt" + "log" + "os" + "path/filepath" + "plugin" + "reflect" + "strings" + + "github.com/pkg/errors" + "sigs.k8s.io/kustomize/api/ifc" + "sigs.k8s.io/kustomize/api/internal/plugins/builtinhelpers" + "sigs.k8s.io/kustomize/api/internal/plugins/execplugin" + "sigs.k8s.io/kustomize/api/internal/plugins/fnplugin" + "sigs.k8s.io/kustomize/api/internal/plugins/utils" + "sigs.k8s.io/kustomize/api/konfig" + "sigs.k8s.io/kustomize/api/resmap" + "sigs.k8s.io/kustomize/api/resource" + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/filesys" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/resid" +) + +// Loader loads plugins using a file loader (a different loader). +type Loader struct { + pc *types.PluginConfig + rf *resmap.Factory + fs filesys.FileSystem + + // absolutePluginHome caches the location of a valid plugin root directory. + // It should only be set once the directory's existence has been confirmed. + absolutePluginHome string +} + +func NewLoader( + pc *types.PluginConfig, rf *resmap.Factory, fs filesys.FileSystem) *Loader { + return &Loader{pc: pc, rf: rf, fs: fs} +} + +// Config provides the global (not plugin specific) PluginConfig data. +func (l *Loader) Config() *types.PluginConfig { + return l.pc +} + +// SetWorkDir sets the working directory for this loader's plugins +func (l *Loader) SetWorkDir(wd string) { + l.pc.FnpLoadingOptions.WorkingDir = wd +} + +func (l *Loader) LoadGenerators( + ldr ifc.Loader, v ifc.Validator, rm resmap.ResMap) ( + result []*resmap.GeneratorWithProperties, err error) { + for _, res := range rm.Resources() { + g, err := l.LoadGenerator(ldr, v, res) + if err != nil { + return nil, err + } + generatorOrigin, err := resource.OriginFromCustomPlugin(res) + if err != nil { + return nil, err + } + result = append(result, &resmap.GeneratorWithProperties{Generator: g, Origin: generatorOrigin}) + } + return result, nil +} + +func (l *Loader) LoadGenerator( + ldr ifc.Loader, v ifc.Validator, res *resource.Resource) (resmap.Generator, error) { + c, err := l.loadAndConfigurePlugin(ldr, v, res) + if err != nil { + return nil, err + } + g, ok := c.(resmap.Generator) + if !ok { + return nil, fmt.Errorf("plugin %s not a generator", res.OrgId()) + } + return g, nil +} + +func (l *Loader) LoadTransformers( + ldr ifc.Loader, v ifc.Validator, rm resmap.ResMap) ([]*resmap.TransformerWithProperties, error) { + var result []*resmap.TransformerWithProperties + for _, res := range rm.Resources() { + t, err := l.LoadTransformer(ldr, v, res) + if err != nil { + return nil, err + } + transformerOrigin, err := resource.OriginFromCustomPlugin(res) + if err != nil { + return nil, err + } + result = append(result, &resmap.TransformerWithProperties{Transformer: t, Origin: transformerOrigin}) + } + return result, nil +} + +func (l *Loader) LoadTransformer( + ldr ifc.Loader, v ifc.Validator, res *resource.Resource) (*resmap.TransformerWithProperties, error) { + c, err := l.loadAndConfigurePlugin(ldr, v, res) + if err != nil { + return nil, err + } + t, ok := c.(resmap.Transformer) + if !ok { + return nil, fmt.Errorf("plugin %s not a transformer", res.OrgId()) + } + return &resmap.TransformerWithProperties{Transformer: t}, nil +} + +func relativePluginPath(id resid.ResId) string { + return filepath.Join( + id.Group, + id.Version, + strings.ToLower(id.Kind)) +} + +func (l *Loader) AbsolutePluginPath(id resid.ResId) (string, error) { + pluginHome, err := l.absPluginHome() + if err != nil { + return "", err + } + return filepath.Join(pluginHome, relativePluginPath(id), id.Kind), nil +} + +// absPluginHome is the home of kustomize Exec and Go plugins. +// Kustomize plugin configuration files are k8s-style objects +// containing the fields 'apiVersion' and 'kind', e.g. +// apiVersion: apps/v1 +// kind: Deployment +// kustomize reads plugin configuration data from a file path +// specified in the 'generators:' or 'transformers:' field of a +// kustomization file. For Exec and Go plugins, kustomize +// uses this data to both locate the plugin and configure it. +// Each Exec or Go plugin (its code, its tests, its supporting data +// files, etc.) must be housed in its own directory at +// ${absPluginHome}/${pluginApiVersion}/LOWERCASE(${pluginKind}) +// where +// - ${absPluginHome} is an absolute path, defined below. +// - ${pluginApiVersion} is taken from the plugin config file. +// - ${pluginKind} is taken from the plugin config file. +func (l *Loader) absPluginHome() (string, error) { + // External plugins are disabled--return the dummy plugin root. + if l.pc.PluginRestrictions != types.PluginRestrictionsNone { + return konfig.NoPluginHomeSentinal, nil + } + // We've already determined plugin home--use the cached value. + if l.absolutePluginHome != "" { + return l.absolutePluginHome, nil + } + + // Check default locations for a valid plugin root, and cache it if found. + dir, err := konfig.DefaultAbsPluginHome(l.fs) + if err != nil { + return "", err + } + l.absolutePluginHome = dir + return l.absolutePluginHome, nil +} + +func isBuiltinPlugin(res *resource.Resource) bool { + // TODO: the special string should appear in Group, not Version. + return res.GetGvk().Group == "" && + res.GetGvk().Version == konfig.BuiltinPluginApiVersion +} + +func (l *Loader) loadAndConfigurePlugin( + ldr ifc.Loader, + v ifc.Validator, + res *resource.Resource) (c resmap.Configurable, err error) { + if isBuiltinPlugin(res) { + switch l.pc.BpLoadingOptions { + case types.BploLoadFromFileSys: + c, err = l.loadPlugin(res) + case types.BploUseStaticallyLinked: + // Instead of looking for and loading a .so file, + // instantiate the plugin from a generated factory + // function (see "pluginator"). Being able to do this + // is what makes a plugin "builtin". + c, err = l.makeBuiltinPlugin(res.GetGvk()) + default: + err = fmt.Errorf( + "unknown plugin loader behavior specified: %v", + l.pc.BpLoadingOptions) + } + } else { + switch l.pc.PluginRestrictions { + case types.PluginRestrictionsNone: + c, err = l.loadPlugin(res) + case types.PluginRestrictionsBuiltinsOnly: + err = types.NewErrOnlyBuiltinPluginsAllowed(res.OrgId().Kind) + default: + err = fmt.Errorf( + "unknown plugin restriction specified: %v", + l.pc.PluginRestrictions) + } + } + if err != nil { + return nil, err + } + yaml, err := res.AsYAML() + if err != nil { + return nil, errors.Wrapf(err, "marshalling yaml from res %s", res.OrgId()) + } + err = c.Config(resmap.NewPluginHelpers(ldr, v, l.rf, l.pc), yaml) + if err != nil { + return nil, errors.Wrapf( + err, "plugin %s fails configuration", res.OrgId()) + } + return c, nil +} + +func (l *Loader) makeBuiltinPlugin(r resid.Gvk) (resmap.Configurable, error) { + bpt := builtinhelpers.GetBuiltinPluginType(r.Kind) + if f, ok := builtinhelpers.GeneratorFactories[bpt]; ok { + return f(), nil + } + if f, ok := builtinhelpers.TransformerFactories[bpt]; ok { + return f(), nil + } + return nil, errors.Errorf("unable to load builtin %s", r) +} + +func (l *Loader) loadPlugin(res *resource.Resource) (resmap.Configurable, error) { + spec := fnplugin.GetFunctionSpec(res) + if spec != nil { + return fnplugin.NewFnPlugin(&l.pc.FnpLoadingOptions), nil + } + return l.loadExecOrGoPlugin(res.OrgId()) +} + +func (l *Loader) loadExecOrGoPlugin(resId resid.ResId) (resmap.Configurable, error) { + absPluginPath, err := l.AbsolutePluginPath(resId) + if err != nil { + return nil, err + } + // First try to load the plugin as an executable. + p := execplugin.NewExecPlugin(absPluginPath) + if err = p.ErrIfNotExecutable(); err == nil { + return p, nil + } + if !os.IsNotExist(err) { + // The file exists, but something else is wrong, + // likely it's not executable. + // Assume the user forgot to set the exec bit, + // and return an error, rather than adding ".so" + // to the name and attempting to load it as a Go + // plugin, which will likely fail and result + // in an obscure message. + return nil, err + } + // Failing the above, try loading it as a Go plugin. + c, err := l.loadGoPlugin(resId, absPluginPath+".so") + if err != nil { + return nil, err + } + return c, nil +} + +// registry is a means to avoid trying to load the same .so file +// into memory more than once, which results in an error. +// Each test makes its own loader, and tries to load its own plugins, +// but the loaded .so files are in shared memory, so one will get +// "this plugin already loaded" errors if the registry is maintained +// as a Loader instance variable. So make it a package variable. +var registry = make(map[string]resmap.Configurable) + +func (l *Loader) loadGoPlugin(id resid.ResId, absPath string) (resmap.Configurable, error) { + regId := relativePluginPath(id) + if c, ok := registry[regId]; ok { + return copyPlugin(c), nil + } + if !utils.FileExists(absPath) { + return nil, fmt.Errorf( + "expected file with Go object code at: %s", absPath) + } + log.Printf("Attempting plugin load from '%s'", absPath) + p, err := plugin.Open(absPath) + if err != nil { + return nil, errors.Wrapf(err, "plugin %s fails to load", absPath) + } + symbol, err := p.Lookup(konfig.PluginSymbol) + if err != nil { + return nil, errors.Wrapf( + err, "plugin %s doesn't have symbol %s", + regId, konfig.PluginSymbol) + } + c, ok := symbol.(resmap.Configurable) + if !ok { + return nil, fmt.Errorf("plugin '%s' not configurable", regId) + } + registry[regId] = c + return copyPlugin(c), nil +} + +func copyPlugin(c resmap.Configurable) resmap.Configurable { + indirect := reflect.Indirect(reflect.ValueOf(c)) + newIndirect := reflect.New(indirect.Type()) + newIndirect.Elem().Set(reflect.ValueOf(indirect.Interface())) + newNamed := newIndirect.Interface() + return newNamed.(resmap.Configurable) +} diff --git a/go/internal/forked/api/internal/plugins/loader/loader_test.go b/go/internal/forked/api/internal/plugins/loader/loader_test.go new file mode 100644 index 000000000..06f3848c5 --- /dev/null +++ b/go/internal/forked/api/internal/plugins/loader/loader_test.go @@ -0,0 +1,79 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package loader_test + +import ( + "testing" + + "sigs.k8s.io/kustomize/api/loader" + "sigs.k8s.io/kustomize/api/provider" + "sigs.k8s.io/kustomize/api/resmap" + kusttest_test "sigs.k8s.io/kustomize/api/testutils/kusttest" + valtest_test "sigs.k8s.io/kustomize/api/testutils/valtest" + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/filesys" +) + +const ( + //nolint:gosec + secretGenerator = ` +apiVersion: builtin +kind: SecretGenerator +metadata: + name: secretGenerator +name: mySecret +behavior: merge +envFiles: +- a.env +- b.env +valueFiles: +- longsecret.txt +literals: +- FRUIT=apple +- VEGETABLE=carrot +` + someServiceGenerator = ` +apiVersion: someteam.example.com/v1 +kind: SomeServiceGenerator +metadata: + name: myServiceGenerator +service: my-service +port: "12345" +` +) + +func TestLoader(t *testing.T) { + th := kusttest_test.MakeEnhancedHarness(t). + BuildGoPlugin("builtin", "", "SecretGenerator"). + BuildGoPlugin("someteam.example.com", "v1", "SomeServiceGenerator") + defer th.Reset() + p := provider.NewDefaultDepProvider() + rmF := resmap.NewFactory(p.GetResourceFactory()) + fsys := filesys.MakeFsInMemory() + fLdr, err := loader.NewLoader( + loader.RestrictionRootOnly, + filesys.Separator, fsys) + if err != nil { + t.Fatal(err) + } + generatorConfigs, err := rmF.NewResMapFromBytes([]byte( + someServiceGenerator + "---\n" + secretGenerator)) + if err != nil { + t.Fatal(err) + } + for _, behavior := range []types.BuiltinPluginLoadingOptions{ + /* types.BploUseStaticallyLinked, + types.BploLoadFromFileSys */} { + c := types.EnabledPluginConfig(behavior) + pLdr := loader2.loader2.NewLoader(c, rmF, fsys) + if pLdr == nil { + t.Fatal("expect non-nil loader") + } + _, err = pLdr.LoadGenerators( + fLdr, valtest_test.MakeFakeValidator(), generatorConfigs) + if err != nil { + t.Fatal(err) + } + } +} diff --git a/go/internal/forked/api/internal/plugins/loader/loader_test.go b/go/internal/forked/api/internal/plugins/loader/loader_test.go new file mode 100644 index 000000000..7339a5206 --- /dev/null +++ b/go/internal/forked/api/internal/plugins/loader/loader_test.go @@ -0,0 +1,79 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package loader_test + +import ( + "testing" + + "sigs.k8s.io/kustomize/api/loader" + "sigs.k8s.io/kustomize/api/provider" + "sigs.k8s.io/kustomize/api/resmap" + kusttest_test "sigs.k8s.io/kustomize/api/testutils/kusttest" + valtest_test "sigs.k8s.io/kustomize/api/testutils/valtest" + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/filesys" +) + +const ( + //nolint:gosec + secretGenerator = ` +apiVersion: builtin +kind: SecretGenerator +metadata: + name: secretGenerator +name: mySecret +behavior: merge +envFiles: +- a.env +- b.env +valueFiles: +- longsecret.txt +literals: +- FRUIT=apple +- VEGETABLE=carrot +` + someServiceGenerator = ` +apiVersion: someteam.example.com/v1 +kind: SomeServiceGenerator +metadata: + name: myServiceGenerator +service: my-service +port: "12345" +` +) + +func TestLoader(t *testing.T) { + th := kusttest_test.MakeEnhancedHarness(t). + BuildGoPlugin("builtin", "", "SecretGenerator"). + BuildGoPlugin("someteam.example.com", "v1", "SomeServiceGenerator") + defer th.Reset() + p := provider.NewDefaultDepProvider() + rmF := resmap.NewFactory(p.GetResourceFactory()) + fsys := filesys.MakeFsInMemory() + fLdr, err := loader.NewLoader( + loader.RestrictionRootOnly, + filesys.Separator, fsys) + if err != nil { + t.Fatal(err) + } + generatorConfigs, err := rmF.NewResMapFromBytes([]byte( + someServiceGenerator + "---\n" + secretGenerator)) + if err != nil { + t.Fatal(err) + } + for _, behavior := range []types.BuiltinPluginLoadingOptions{ + /* types.BploUseStaticallyLinked, + types.BploLoadFromFileSys */} { + c := types.EnabledPluginConfig(behavior) + pLdr := loader2.loader2.NewLoader(c, rmF, fsys) + if pLdr == nil { + t.Fatal("expect non-nil loader") + } + _, err = pLdr.LoadGenerators( + fLdr, valtest_test.MakeFakeValidator(), generatorConfigs) + if err != nil { + t.Fatal(err) + } + } +} diff --git a/go/internal/forked/api/internal/plugins/utils/utils.go b/go/internal/forked/api/internal/plugins/utils/utils.go new file mode 100644 index 000000000..83eb1cf8f --- /dev/null +++ b/go/internal/forked/api/internal/plugins/utils/utils.go @@ -0,0 +1,240 @@ +// Copyright 2020 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package utils + +import ( + "encoding/json" + "fmt" + "os" + "path/filepath" + "runtime" + "strconv" + "time" + + "sigs.k8s.io/kustomize/api/konfig" + "sigs.k8s.io/kustomize/api/resmap" + "sigs.k8s.io/kustomize/api/resource" + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/filesys" + "sigs.k8s.io/yaml" +) + +const ( + idAnnotation = "kustomize.config.k8s.io/id" + HashAnnotation = "kustomize.config.k8s.io/needs-hash" + BehaviorAnnotation = "kustomize.config.k8s.io/behavior" +) + +func GoBin() string { + return filepath.Join(runtime.GOROOT(), "bin", "go") +} + +// DeterminePluginSrcRoot guesses where the user +// has her ${g}/${v}/$lower(${k})/${k}.go files. +func DeterminePluginSrcRoot(fSys filesys.FileSystem) (string, error) { + return konfig.FirstDirThatExistsElseError( + "plugin src root", fSys, []konfig.NotedFunc{ + { + Note: "relative to unit test", + F: func() string { + return filepath.Clean( + filepath.Join( + os.Getenv("PWD"), + "..", "..", + konfig.RelPluginHome)) + }, + }, + { + Note: "relative to unit test (internal pkg)", + F: func() string { + return filepath.Clean( + filepath.Join( + os.Getenv("PWD"), + "..", "..", "..", "..", + konfig.RelPluginHome)) + }, + }, + { + Note: "relative to api package", + F: func() string { + return filepath.Clean( + filepath.Join( + os.Getenv("PWD"), + "..", "..", "..", + konfig.RelPluginHome)) + }, + }, + { + Note: "old style $GOPATH", + F: func() string { + return filepath.Join( + os.Getenv("GOPATH"), + "src", konfig.DomainName, + konfig.ProgramName, konfig.RelPluginHome) + }, + }, + { + Note: "HOME with literal 'gopath'", + F: func() string { + return filepath.Join( + konfig.HomeDir(), "gopath", + "src", konfig.DomainName, + konfig.ProgramName, konfig.RelPluginHome) + }, + }, + { + Note: "home directory", + F: func() string { + return filepath.Join( + konfig.HomeDir(), konfig.DomainName, + konfig.ProgramName, konfig.RelPluginHome) + }, + }, + }) +} + +// FileYoungerThan returns true if the file both exists and has an +// age is <= the Duration argument. +func FileYoungerThan(path string, d time.Duration) bool { + fi, err := os.Stat(path) + if err != nil { + if os.IsNotExist(err) { + return false + } + } + return time.Since(fi.ModTime()) <= d +} + +// FileModifiedAfter returns true if the file both exists and was +// modified after the given time.. +func FileModifiedAfter(path string, t time.Time) bool { + fi, err := os.Stat(path) + if err != nil { + if os.IsNotExist(err) { + return false + } + } + return fi.ModTime().After(t) +} + +func FileExists(path string) bool { + if _, err := os.Stat(path); err != nil { + if os.IsNotExist(err) { + return false + } + } + return true +} + +// GetResMapWithIDAnnotation returns a new copy of the given ResMap with the ResIds annotated in each Resource +func GetResMapWithIDAnnotation(rm resmap.ResMap) (resmap.ResMap, error) { + inputRM := rm.DeepCopy() + for _, r := range inputRM.Resources() { + idString, err := yaml.Marshal(r.CurId()) + if err != nil { + return nil, err + } + annotations := r.GetAnnotations() + annotations[idAnnotation] = string(idString) + if err = r.SetAnnotations(annotations); err != nil { + return nil, err + } + } + return inputRM, nil +} + +// UpdateResMapValues updates the Resource value in the given ResMap +// with the emitted Resource values in output. +func UpdateResMapValues(pluginName string, h *resmap.PluginHelpers, output []byte, rm resmap.ResMap) error { + mapFactory := h.ResmapFactory() + resFactory := mapFactory.RF() + resources, err := resFactory.SliceFromBytes(output) + if err != nil { + return err + } + // Don't use resources here, or error message will be unfriendly to plugin builders + newMap, err := mapFactory.NewResMapFromBytes([]byte{}) + if err != nil { + return err + } + + for _, r := range resources { + // stale--not manipulated by plugin transformers + if err = removeIDAnnotation(r); err != nil { + return err + } + + // Add to the new map, checking for duplicates + if err := newMap.Append(r); err != nil { + prettyID, err := json.Marshal(r.CurId()) + if err != nil { + prettyID = []byte(r.CurId().String()) + } + return fmt.Errorf("plugin %s generated duplicate resource: %s", pluginName, prettyID) + } + + // Add to or update the old map + oldIdx, err := rm.GetIndexOfCurrentId(r.CurId()) + if err != nil { + return err + } + if oldIdx != -1 { + rm.GetByIndex(oldIdx).ResetRNode(r) + } else { + if err := rm.Append(r); err != nil { + return err + } + } + } + + // Remove items the transformer deleted from the old map + for _, id := range rm.AllIds() { + newIdx, _ := newMap.GetIndexOfCurrentId(id) + if newIdx == -1 { + if err = rm.Remove(id); err != nil { + return err + } + } + } + + return nil +} + +func removeIDAnnotation(r *resource.Resource) error { + // remove the annotation set by Kustomize to track the resource + annotations := r.GetAnnotations() + delete(annotations, idAnnotation) + return r.SetAnnotations(annotations) +} + +// UpdateResourceOptions updates the generator options for each resource in the +// given ResMap based on plugin provided annotations. +func UpdateResourceOptions(rm resmap.ResMap) (resmap.ResMap, error) { + for _, r := range rm.Resources() { + // Disable name hashing by default and require plugin to explicitly + // request it for each resource. + annotations := r.GetAnnotations() + behavior := annotations[BehaviorAnnotation] + var needsHash bool + if val, ok := annotations[HashAnnotation]; ok { + b, err := strconv.ParseBool(val) + if err != nil { + return nil, fmt.Errorf( + "the annotation %q contains an invalid value (%q)", + HashAnnotation, val) + } + needsHash = b + } + delete(annotations, HashAnnotation) + delete(annotations, BehaviorAnnotation) + if err := r.SetAnnotations(annotations); err != nil { + return nil, err + } + if needsHash { + r.EnableHashSuffix() + } + r.SetBehavior(types.NewGenerationBehavior(behavior)) + } + return rm, nil +} diff --git a/go/internal/forked/api/internal/plugins/utils/utils.go b/go/internal/forked/api/internal/plugins/utils/utils.go new file mode 100644 index 000000000..9067c8a26 --- /dev/null +++ b/go/internal/forked/api/internal/plugins/utils/utils.go @@ -0,0 +1,240 @@ +// Copyright 2020 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package utils + +import ( + "encoding/json" + "fmt" + "os" + "path/filepath" + "runtime" + "strconv" + "time" + + "sigs.k8s.io/kustomize/api/konfig" + "sigs.k8s.io/kustomize/api/resmap" + "sigs.k8s.io/kustomize/api/resource" + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/filesys" + "sigs.k8s.io/yaml" +) + +const ( + idAnnotation = "kustomize.config.k8s.io/id" + HashAnnotation = "kustomize.config.k8s.io/needs-hash" + BehaviorAnnotation = "kustomize.config.k8s.io/behavior" +) + +func GoBin() string { + return filepath.Join(runtime.GOROOT(), "bin", "go") +} + +// DeterminePluginSrcRoot guesses where the user +// has her ${g}/${v}/$lower(${k})/${k}.go files. +func DeterminePluginSrcRoot(fSys filesys.FileSystem) (string, error) { + return konfig.FirstDirThatExistsElseError( + "plugin src root", fSys, []konfig.NotedFunc{ + { + Note: "relative to unit test", + F: func() string { + return filepath.Clean( + filepath.Join( + os.Getenv("PWD"), + "..", "..", + konfig.RelPluginHome)) + }, + }, + { + Note: "relative to unit test (internal pkg)", + F: func() string { + return filepath.Clean( + filepath.Join( + os.Getenv("PWD"), + "..", "..", "..", "..", + konfig.RelPluginHome)) + }, + }, + { + Note: "relative to api package", + F: func() string { + return filepath.Clean( + filepath.Join( + os.Getenv("PWD"), + "..", "..", "..", + konfig.RelPluginHome)) + }, + }, + { + Note: "old style $GOPATH", + F: func() string { + return filepath.Join( + os.Getenv("GOPATH"), + "src", konfig.DomainName, + konfig.ProgramName, konfig.RelPluginHome) + }, + }, + { + Note: "HOME with literal 'gopath'", + F: func() string { + return filepath.Join( + konfig.HomeDir(), "gopath", + "src", konfig.DomainName, + konfig.ProgramName, konfig.RelPluginHome) + }, + }, + { + Note: "home directory", + F: func() string { + return filepath.Join( + konfig.HomeDir(), konfig.DomainName, + konfig.ProgramName, konfig.RelPluginHome) + }, + }, + }) +} + +// FileYoungerThan returns true if the file both exists and has an +// age is <= the Duration argument. +func FileYoungerThan(path string, d time.Duration) bool { + fi, err := os.Stat(path) + if err != nil { + if os.IsNotExist(err) { + return false + } + } + return time.Since(fi.ModTime()) <= d +} + +// FileModifiedAfter returns true if the file both exists and was +// modified after the given time.. +func FileModifiedAfter(path string, t time.Time) bool { + fi, err := os.Stat(path) + if err != nil { + if os.IsNotExist(err) { + return false + } + } + return fi.ModTime().After(t) +} + +func FileExists(path string) bool { + if _, err := os.Stat(path); err != nil { + if os.IsNotExist(err) { + return false + } + } + return true +} + +// GetResMapWithIDAnnotation returns a new copy of the given ResMap with the ResIds annotated in each Resource +func GetResMapWithIDAnnotation(rm resmap.ResMap) (resmap.ResMap, error) { + inputRM := rm.DeepCopy() + for _, r := range inputRM.Resources() { + idString, err := yaml.Marshal(r.CurId()) + if err != nil { + return nil, err + } + annotations := r.GetAnnotations() + annotations[idAnnotation] = string(idString) + if err = r.SetAnnotations(annotations); err != nil { + return nil, err + } + } + return inputRM, nil +} + +// UpdateResMapValues updates the Resource value in the given ResMap +// with the emitted Resource values in output. +func UpdateResMapValues(pluginName string, h *resmap.PluginHelpers, output []byte, rm resmap.ResMap) error { + mapFactory := h.ResmapFactory() + resFactory := mapFactory.RF() + resources, err := resFactory.SliceFromBytes(output) + if err != nil { + return err + } + // Don't use resources here, or error message will be unfriendly to plugin builders + newMap, err := mapFactory.NewResMapFromBytes([]byte{}) + if err != nil { + return err + } + + for _, r := range resources { + // stale--not manipulated by plugin transformers + if err = removeIDAnnotation(r); err != nil { + return err + } + + // Add to the new map, checking for duplicates + if err := newMap.Append(r); err != nil { + prettyID, err := json.Marshal(r.CurId()) + if err != nil { + prettyID = []byte(r.CurId().String()) + } + return fmt.Errorf("plugin %s generated duplicate resource: %s", pluginName, prettyID) + } + + // Add to or update the old map + oldIdx, err := rm.GetIndexOfCurrentId(r.CurId()) + if err != nil { + return err + } + if oldIdx != -1 { + rm.GetByIndex(oldIdx).ResetRNode(r) + } else { + if err := rm.Append(r); err != nil { + return err + } + } + } + + // Remove items the transformer deleted from the old map + for _, id := range rm.AllIds() { + newIdx, _ := newMap.GetIndexOfCurrentId(id) + if newIdx == -1 { + if err = rm.Remove(id); err != nil { + return err + } + } + } + + return nil +} + +func removeIDAnnotation(r *resource.Resource) error { + // remove the annotation set by Kustomize to track the resource + annotations := r.GetAnnotations() + delete(annotations, idAnnotation) + return r.SetAnnotations(annotations) +} + +// UpdateResourceOptions updates the generator options for each resource in the +// given ResMap based on plugin provided annotations. +func UpdateResourceOptions(rm resmap.ResMap) (resmap.ResMap, error) { + for _, r := range rm.Resources() { + // Disable name hashing by default and require plugin to explicitly + // request it for each resource. + annotations := r.GetAnnotations() + behavior := annotations[BehaviorAnnotation] + var needsHash bool + if val, ok := annotations[HashAnnotation]; ok { + b, err := strconv.ParseBool(val) + if err != nil { + return nil, fmt.Errorf( + "the annotation %q contains an invalid value (%q)", + HashAnnotation, val) + } + needsHash = b + } + delete(annotations, HashAnnotation) + delete(annotations, BehaviorAnnotation) + if err := r.SetAnnotations(annotations); err != nil { + return nil, err + } + if needsHash { + r.EnableHashSuffix() + } + r.SetBehavior(types.NewGenerationBehavior(behavior)) + } + return rm, nil +} diff --git a/go/internal/forked/api/internal/plugins/utils/utils_test.go b/go/internal/forked/api/internal/plugins/utils/utils_test.go new file mode 100644 index 000000000..ab7d11c4b --- /dev/null +++ b/go/internal/forked/api/internal/plugins/utils/utils_test.go @@ -0,0 +1,116 @@ +// Copyright 2020 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package utils + +import ( + "fmt" + "path/filepath" + "strings" + "testing" + + "github.com/stretchr/testify/assert" + "github.com/stretchr/testify/require" + "sigs.k8s.io/kustomize/api/konfig" + "sigs.k8s.io/kustomize/api/provider" + "sigs.k8s.io/kustomize/api/resmap" + "sigs.k8s.io/kustomize/api/resource" + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/filesys" +) + +func TestDeterminePluginSrcRoot(t *testing.T) { + actual, err := DeterminePluginSrcRoot(filesys.MakeFsOnDisk()) + if err != nil { + t.Error(err) + } + if !filepath.IsAbs(actual) { + t.Errorf("expected absolute path, but got '%s'", actual) + } + if !strings.HasSuffix(actual, konfig.RelPluginHome) { + t.Errorf("expected suffix '%s' in '%s'", konfig.RelPluginHome, actual) + } +} + +func makeConfigMap(rf *resource.Factory, name, behavior string, hashValue *string) *resource.Resource { + r := rf.FromMap(map[string]interface{}{ + "apiVersion": "v1", + "kind": "ConfigMap", + "metadata": map[string]interface{}{"name": name}, + }) + annotations := map[string]string{} + if behavior != "" { + annotations[BehaviorAnnotation] = behavior + } + if hashValue != nil { + annotations[HashAnnotation] = *hashValue + } + if len(annotations) > 0 { + if err := r.SetAnnotations(annotations); err != nil { + panic(err) + } + } + return r +} + +func makeConfigMapOptions(rf *resource.Factory, name, behavior string, disableHash bool) *resource.Resource { + return rf.FromMapAndOption(map[string]interface{}{ + "apiVersion": "v1", + "kind": "ConfigMap", + "metadata": map[string]interface{}{"name": name}, + }, &types.GeneratorArgs{ + Behavior: behavior, + Options: &types.GeneratorOptions{DisableNameSuffixHash: disableHash}}) +} + +func strptr(s string) *string { + return &s +} + +func TestUpdateResourceOptions(t *testing.T) { + rf := provider.NewDefaultDepProvider().GetResourceFactory() + in := resmap.New() + expected := resmap.New() + cases := []struct { + behavior string + needsHash bool + hashValue *string + }{ + {hashValue: strptr("false")}, + {hashValue: strptr("true"), needsHash: true}, + {behavior: "replace"}, + {behavior: "merge"}, + {behavior: "create"}, + {behavior: "nonsense"}, + {behavior: "merge", hashValue: strptr("false")}, + {behavior: "merge", hashValue: strptr("true"), needsHash: true}, + } + for i, c := range cases { + name := fmt.Sprintf("test%d", i) + err := in.Append(makeConfigMap(rf, name, c.behavior, c.hashValue)) + require.NoError(t, err) + err = expected.Append(makeConfigMapOptions(rf, name, c.behavior, !c.needsHash)) + require.NoError(t, err) + } + actual, err := UpdateResourceOptions(in) + assert.NoError(t, err) + assert.NoError(t, expected.ErrorIfNotEqualLists(actual)) +} + +func TestUpdateResourceOptionsWithInvalidHashAnnotationValues(t *testing.T) { + rf := provider.NewDefaultDepProvider().GetResourceFactory() + cases := []string{ + "", + "FaLsE", + "TrUe", + "potato", + } + for i, c := range cases { + name := fmt.Sprintf("test%d", i) + in := resmap.New() + err := in.Append(makeConfigMap(rf, name, "", &c)) + require.NoError(t, err) + _, err = UpdateResourceOptions(in) + require.Error(t, err) + } +} diff --git a/go/internal/forked/api/internal/plugins/utils/utils_test.go b/go/internal/forked/api/internal/plugins/utils/utils_test.go new file mode 100644 index 000000000..03759aa9e --- /dev/null +++ b/go/internal/forked/api/internal/plugins/utils/utils_test.go @@ -0,0 +1,116 @@ +// Copyright 2020 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package utils + +import ( + "fmt" + "path/filepath" + "strings" + "testing" + + "github.com/stretchr/testify/assert" + "github.com/stretchr/testify/require" + "sigs.k8s.io/kustomize/api/konfig" + "sigs.k8s.io/kustomize/api/provider" + "sigs.k8s.io/kustomize/api/resmap" + "sigs.k8s.io/kustomize/api/resource" + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/filesys" +) + +func TestDeterminePluginSrcRoot(t *testing.T) { + actual, err := DeterminePluginSrcRoot(filesys.MakeFsOnDisk()) + if err != nil { + t.Error(err) + } + if !filepath.IsAbs(actual) { + t.Errorf("expected absolute path, but got '%s'", actual) + } + if !strings.HasSuffix(actual, konfig.RelPluginHome) { + t.Errorf("expected suffix '%s' in '%s'", konfig.RelPluginHome, actual) + } +} + +func makeConfigMap(rf *resource.Factory, name, behavior string, hashValue *string) *resource.Resource { + r := rf.FromMap(map[string]interface{}{ + "apiVersion": "v1", + "kind": "ConfigMap", + "metadata": map[string]interface{}{"name": name}, + }) + annotations := map[string]string{} + if behavior != "" { + annotations[BehaviorAnnotation] = behavior + } + if hashValue != nil { + annotations[HashAnnotation] = *hashValue + } + if len(annotations) > 0 { + if err := r.SetAnnotations(annotations); err != nil { + panic(err) + } + } + return r +} + +func makeConfigMapOptions(rf *resource.Factory, name, behavior string, disableHash bool) *resource.Resource { + return rf.FromMapAndOption(map[string]interface{}{ + "apiVersion": "v1", + "kind": "ConfigMap", + "metadata": map[string]interface{}{"name": name}, + }, &types.GeneratorArgs{ + Behavior: behavior, + Options: &types.GeneratorOptions{DisableNameSuffixHash: disableHash}}) +} + +func strptr(s string) *string { + return &s +} + +func TestUpdateResourceOptions(t *testing.T) { + rf := provider.NewDefaultDepProvider().GetResourceFactory() + in := resmap.New() + expected := resmap.New() + cases := []struct { + behavior string + needsHash bool + hashValue *string + }{ + {hashValue: strptr("false")}, + {hashValue: strptr("true"), needsHash: true}, + {behavior: "replace"}, + {behavior: "merge"}, + {behavior: "create"}, + {behavior: "nonsense"}, + {behavior: "merge", hashValue: strptr("false")}, + {behavior: "merge", hashValue: strptr("true"), needsHash: true}, + } + for i, c := range cases { + name := fmt.Sprintf("test%d", i) + err := in.Append(makeConfigMap(rf, name, c.behavior, c.hashValue)) + require.NoError(t, err) + err = expected.Append(makeConfigMapOptions(rf, name, c.behavior, !c.needsHash)) + require.NoError(t, err) + } + actual, err := UpdateResourceOptions(in) + assert.NoError(t, err) + assert.NoError(t, expected.ErrorIfNotEqualLists(actual)) +} + +func TestUpdateResourceOptionsWithInvalidHashAnnotationValues(t *testing.T) { + rf := provider.NewDefaultDepProvider().GetResourceFactory() + cases := []string{ + "", + "FaLsE", + "TrUe", + "potato", + } + for i, c := range cases { + name := fmt.Sprintf("test%d", i) + in := resmap.New() + err := in.Append(makeConfigMap(rf, name, "", &c)) + require.NoError(t, err) + _, err = UpdateResourceOptions(in) + require.Error(t, err) + } +} diff --git a/go/internal/forked/api/internal/target/errmissingkustomization.go b/go/internal/forked/api/internal/target/errmissingkustomization.go new file mode 100644 index 000000000..45e489593 --- /dev/null +++ b/go/internal/forked/api/internal/target/errmissingkustomization.go @@ -0,0 +1,48 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package target + +import ( + "fmt" + "strings" + + "github.com/pkg/errors" + "sigs.k8s.io/kustomize/api/konfig" +) + +type errMissingKustomization struct { + path string +} + +func (e *errMissingKustomization) Error() string { + return fmt.Sprintf( + "unable to find one of %v in directory '%s'", + commaOr(quoted(konfig.RecognizedKustomizationFileNames())), + e.path) +} + +func IsMissingKustomizationFileError(err error) bool { + _, ok := err.(*errMissingKustomization) + if ok { + return true + } + _, ok = errors.Cause(err).(*errMissingKustomization) + return ok +} + +func NewErrMissingKustomization(p string) *errMissingKustomization { + return &errMissingKustomization{path: p} +} + +func quoted(l []string) []string { + r := make([]string, len(l)) + for i, v := range l { + r[i] = "'" + v + "'" + } + return r +} + +func commaOr(q []string) string { + return strings.Join(q[:len(q)-1], ", ") + " or " + q[len(q)-1] +} diff --git a/go/internal/forked/api/internal/target/kusttarget.go b/go/internal/forked/api/internal/target/kusttarget.go new file mode 100644 index 000000000..ff6fcb658 --- /dev/null +++ b/go/internal/forked/api/internal/target/kusttarget.go @@ -0,0 +1,555 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package target + +import ( + "encoding/json" + "fmt" + "path/filepath" + "strings" + + "github.com/pkg/errors" + + "sigs.k8s.io/kustomize/api/ifc" + "sigs.k8s.io/kustomize/api/internal/accumulator" + "sigs.k8s.io/kustomize/api/internal/builtins" + "sigs.k8s.io/kustomize/api/internal/plugins/builtinconfig" + "sigs.k8s.io/kustomize/api/internal/plugins/builtinhelpers" + "sigs.k8s.io/kustomize/api/internal/plugins/loader" + "sigs.k8s.io/kustomize/api/internal/utils" + "sigs.k8s.io/kustomize/api/konfig" + load "sigs.k8s.io/kustomize/api/loader" + "sigs.k8s.io/kustomize/api/resmap" + "sigs.k8s.io/kustomize/api/resource" + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/openapi" + "sigs.k8s.io/yaml" +) + +// KustTarget encapsulates the entirety of a kustomization build. +type KustTarget struct { + kustomization *types.Kustomization + kustFileName string + ldr ifc.Loader + validator ifc.Validator + rFactory *resmap.Factory + pLdr *loader.Loader + origin *resource.Origin +} + +// NewKustTarget returns a new instance of KustTarget. +func NewKustTarget( + ldr ifc.Loader, + validator ifc.Validator, + rFactory *resmap.Factory, + pLdr *loader.Loader) *KustTarget { + pLdrCopy := *pLdr + pLdrCopy.SetWorkDir(ldr.Root()) + return &KustTarget{ + ldr: ldr, + validator: validator, + rFactory: rFactory, + pLdr: &pLdrCopy, + } +} + +// Load attempts to load the target's kustomization file. +func (kt *KustTarget) Load() error { + content, kustFileName, err := loadKustFile(kt.ldr) + if err != nil { + return err + } + content, err = types.FixKustomizationPreUnmarshalling(content) + if err != nil { + return err + } + var k types.Kustomization + err = k.Unmarshal(content) + if err != nil { + return err + } + k.FixKustomizationPostUnmarshalling() + errs := k.EnforceFields() + if len(errs) > 0 { + return fmt.Errorf( + "Failed to read kustomization file under %s:\n"+ + strings.Join(errs, "\n"), kt.ldr.Root()) + } + kt.kustomization = &k + kt.kustFileName = kustFileName + return nil +} + +// Kustomization returns a copy of the immutable, internal kustomization object. +func (kt *KustTarget) Kustomization() types.Kustomization { + var result types.Kustomization + b, _ := json.Marshal(*kt.kustomization) + json.Unmarshal(b, &result) + return result +} + +func loadKustFile(ldr ifc.Loader) ([]byte, string, error) { + var content []byte + match := 0 + var kustFileName string + for _, kf := range konfig.RecognizedKustomizationFileNames() { + c, err := ldr.Load(kf) + if err == nil { + match += 1 + content = c + kustFileName = kf + } + } + switch match { + case 0: + return nil, "", NewErrMissingKustomization(ldr.Root()) + case 1: + return content, kustFileName, nil + default: + return nil, "", fmt.Errorf( + "Found multiple kustomization files under: %s\n", ldr.Root()) + } +} + +// MakeCustomizedResMap creates a fully customized ResMap +// per the instructions contained in its kustomization instance. +func (kt *KustTarget) MakeCustomizedResMap() (resmap.ResMap, error) { + return kt.makeCustomizedResMap() +} + +func (kt *KustTarget) makeCustomizedResMap() (resmap.ResMap, error) { + var origin *resource.Origin + if len(kt.kustomization.BuildMetadata) != 0 { + origin = &resource.Origin{} + } + kt.origin = origin + ra, err := kt.AccumulateTarget() + if err != nil { + return nil, err + } + + // The following steps must be done last, not as part of + // the recursion implicit in AccumulateTarget. + + err = kt.addHashesToNames(ra) + if err != nil { + return nil, err + } + + // Given that names have changed (prefixs/suffixes added), + // fix all the back references to those names. + err = ra.FixBackReferences() + if err != nil { + return nil, err + } + + // With all the back references fixed, it's OK to resolve Vars. + err = ra.ResolveVars() + if err != nil { + return nil, err + } + + return ra.ResMap(), nil +} + +func (kt *KustTarget) addHashesToNames( + ra *accumulator.ResAccumulator) error { + p := builtins.NewHashTransformerPlugin() + err := kt.configureBuiltinPlugin(p, nil, builtinhelpers.HashTransformer) + if err != nil { + return err + } + return ra.Transform(p) +} + +// AccumulateTarget returns a new ResAccumulator, +// holding customized resources and the data/rules used +// to do so. The name back references and vars are +// not yet fixed. +// The origin parameter is used through the recursive calls +// to annotate each resource with information about where +// the resource came from, e.g. the file and/or the repository +// it originated from. +// As an entrypoint, one can pass an empty resource.Origin object to +// AccumulateTarget. As AccumulateTarget moves recursively +// through kustomization directories, it updates `origin.path` +// accordingly. When a remote base is found, it updates `origin.repo` +// and `origin.ref` accordingly. +func (kt *KustTarget) AccumulateTarget() ( + ra *accumulator.ResAccumulator, err error) { + return kt.accumulateTarget(accumulator.MakeEmptyAccumulator()) +} + +// ra should be empty when this KustTarget is a Kustomization, or the ra of the parent if this KustTarget is a Component +// (or empty if the Component does not have a parent). +func (kt *KustTarget) accumulateTarget(ra *accumulator.ResAccumulator) ( + resRa *accumulator.ResAccumulator, err error) { + ra, err = kt.accumulateResources(ra, kt.kustomization.Resources) + if err != nil { + return nil, errors.Wrap(err, "accumulating resources") + } + ra, err = kt.accumulateComponents(ra, kt.kustomization.Components) + if err != nil { + return nil, errors.Wrap(err, "accumulating components") + } + tConfig, err := builtinconfig.MakeTransformerConfig( + kt.ldr, kt.kustomization.Configurations) + if err != nil { + return nil, err + } + err = ra.MergeConfig(tConfig) + if err != nil { + return nil, errors.Wrapf( + err, "merging config %v", tConfig) + } + crdTc, err := accumulator.LoadConfigFromCRDs(kt.ldr, kt.kustomization.Crds) + if err != nil { + return nil, errors.Wrapf( + err, "loading CRDs %v", kt.kustomization.Crds) + } + err = ra.MergeConfig(crdTc) + if err != nil { + return nil, errors.Wrapf( + err, "merging CRDs %v", crdTc) + } + err = kt.runGenerators(ra) + if err != nil { + return nil, err + } + err = kt.runTransformers(ra) + if err != nil { + return nil, err + } + err = kt.runValidators(ra) + if err != nil { + return nil, err + } + err = ra.MergeVars(kt.kustomization.Vars) + if err != nil { + return nil, errors.Wrapf( + err, "merging vars %v", kt.kustomization.Vars) + } + err = kt.IgnoreLocal(ra) + if err != nil { + return nil, err + } + return ra, nil +} + +// IgnoreLocal drops the local resource by checking the annotation "config.kubernetes.io/local-config". +func (kt *KustTarget) IgnoreLocal(ra *accumulator.ResAccumulator) error { + rf := kt.rFactory.RF() + if rf.IncludeLocalConfigs { + return nil + } + remainRes, err := rf.DropLocalNodes(ra.ResMap().ToRNodeSlice()) + if err != nil { + return err + } + return ra.Intersection(kt.rFactory.FromResourceSlice(remainRes)) +} + +func (kt *KustTarget) runGenerators( + ra *accumulator.ResAccumulator) error { + var generators []*resmap.GeneratorWithProperties + gs, err := kt.configureBuiltinGenerators() + if err != nil { + return err + } + generators = append(generators, gs...) + + gs, err = kt.configureExternalGenerators() + if err != nil { + return errors.Wrap(err, "loading generator plugins") + } + generators = append(generators, gs...) + for i, g := range generators { + resMap, err := g.Generate() + if err != nil { + return err + } + if resMap != nil { + err = resMap.AddOriginAnnotation(generators[i].Origin) + if err != nil { + return errors.Wrapf(err, "adding origin annotations for generator %v", g) + } + } + err = ra.AbsorbAll(resMap) + if err != nil { + return errors.Wrapf(err, "merging from generator %v", g) + } + } + return nil +} + +func (kt *KustTarget) configureExternalGenerators() ( + []*resmap.GeneratorWithProperties, error) { + ra := accumulator.MakeEmptyAccumulator() + var generatorPaths []string + for _, p := range kt.kustomization.Generators { + // handle inline generators + rm, err := kt.rFactory.NewResMapFromBytes([]byte(p)) + if err != nil { + // not an inline config + generatorPaths = append(generatorPaths, p) + continue + } + // inline config, track the origin + if kt.origin != nil { + resources := rm.Resources() + for _, r := range resources { + r.SetOrigin(kt.origin.Append(kt.kustFileName)) + rm.Replace(r) + } + } + ra.AppendAll(rm) + } + ra, err := kt.accumulateResources(ra, generatorPaths) + if err != nil { + return nil, err + } + return kt.pLdr.LoadGenerators(kt.ldr, kt.validator, ra.ResMap()) +} + +func (kt *KustTarget) runTransformers(ra *accumulator.ResAccumulator) error { + var r []*resmap.TransformerWithProperties + tConfig := ra.GetTransformerConfig() + lts, err := kt.configureBuiltinTransformers(tConfig) + if err != nil { + return err + } + r = append(r, lts...) + lts, err = kt.configureExternalTransformers(kt.kustomization.Transformers) + if err != nil { + return err + } + r = append(r, lts...) + return ra.Transform(newMultiTransformer(r)) +} + +func (kt *KustTarget) configureExternalTransformers(transformers []string) ([]*resmap.TransformerWithProperties, error) { + ra := accumulator.MakeEmptyAccumulator() + var transformerPaths []string + for _, p := range transformers { + // handle inline transformers + rm, err := kt.rFactory.NewResMapFromBytes([]byte(p)) + if err != nil { + // not an inline config + transformerPaths = append(transformerPaths, p) + continue + } + // inline config, track the origin + if kt.origin != nil { + resources := rm.Resources() + for _, r := range resources { + r.SetOrigin(kt.origin.Append(kt.kustFileName)) + rm.Replace(r) + } + } + ra.AppendAll(rm) + } + ra, err := kt.accumulateResources(ra, transformerPaths) + if err != nil { + return nil, err + } + return kt.pLdr.LoadTransformers(kt.ldr, kt.validator, ra.ResMap()) +} + +func (kt *KustTarget) runValidators(ra *accumulator.ResAccumulator) error { + validators, err := kt.configureExternalTransformers(kt.kustomization.Validators) + if err != nil { + return err + } + for _, v := range validators { + // Validators shouldn't modify the resource map + orignal := ra.ResMap().DeepCopy() + err = v.Transform(ra.ResMap()) + if err != nil { + return err + } + newMap := ra.ResMap().DeepCopy() + if err = kt.removeValidatedByLabel(newMap); err != nil { + return err + } + if err = orignal.ErrorIfNotEqualSets(newMap); err != nil { + return fmt.Errorf("validator shouldn't modify the resource map: %v", err) + } + } + return nil +} + +func (kt *KustTarget) removeValidatedByLabel(rm resmap.ResMap) error { + resources := rm.Resources() + for _, r := range resources { + labels := r.GetLabels() + if _, found := labels[konfig.ValidatedByLabelKey]; !found { + continue + } + delete(labels, konfig.ValidatedByLabelKey) + if err := r.SetLabels(labels); err != nil { + return err + } + } + return nil +} + +// accumulateResources fills the given resourceAccumulator +// with resources read from the given list of paths. +func (kt *KustTarget) accumulateResources( + ra *accumulator.ResAccumulator, paths []string) (*accumulator.ResAccumulator, error) { + for _, path := range paths { + // try loading resource as file then as base (directory or git repository) + if errF := kt.accumulateFile(ra, path); errF != nil { + // not much we can do if the error is an HTTP error so we bail out + if errors.Is(errF, load.ErrorHTTP) { + return nil, errF + } + ldr, err := kt.ldr.New(path) + if err != nil { + return nil, errors.Wrapf( + err, "accumulation err='%s'", errF.Error()) + } + // store the origin, we'll need it later + origin := kt.origin.Copy() + if kt.origin != nil { + kt.origin = kt.origin.Append(path) + ra, err = kt.accumulateDirectory(ra, ldr, false) + // after we are done recursing through the directory, reset the origin + kt.origin = &origin + } else { + ra, err = kt.accumulateDirectory(ra, ldr, false) + } + if err != nil { + return nil, errors.Wrapf( + err, "accumulation err='%s'", errF.Error()) + } + } + } + return ra, nil +} + +// accumulateResources fills the given resourceAccumulator +// with resources read from the given list of paths. +func (kt *KustTarget) accumulateComponents( + ra *accumulator.ResAccumulator, paths []string) (*accumulator.ResAccumulator, error) { + for _, path := range paths { + // Components always refer to directories + ldr, errL := kt.ldr.New(path) + if errL != nil { + return nil, fmt.Errorf("loader.New %q", errL) + } + var errD error + // store the origin, we'll need it later + origin := kt.origin.Copy() + if kt.origin != nil { + kt.origin = kt.origin.Append(path) + ra, errD = kt.accumulateDirectory(ra, ldr, true) + // after we are done recursing through the directory, reset the origin + kt.origin = &origin + } else { + ra, errD = kt.accumulateDirectory(ra, ldr, true) + } + if errD != nil { + return nil, fmt.Errorf("accumulateDirectory: %q", errD) + } + } + return ra, nil +} + +func (kt *KustTarget) accumulateDirectory( + ra *accumulator.ResAccumulator, ldr ifc.Loader, isComponent bool) (*accumulator.ResAccumulator, error) { + defer ldr.Cleanup() + subKt := NewKustTarget(ldr, kt.validator, kt.rFactory, kt.pLdr) + err := subKt.Load() + if err != nil { + return nil, errors.Wrapf( + err, "couldn't make target for path '%s'", ldr.Root()) + } + subKt.kustomization.BuildMetadata = kt.kustomization.BuildMetadata + subKt.origin = kt.origin + var bytes []byte + path := ldr.Root() + if openApiPath, exists := subKt.Kustomization().OpenAPI["path"]; exists { + bytes, err = ldr.Load(filepath.Join(path, openApiPath)) + if err != nil { + return nil, err + } + } + err = openapi.SetSchema(subKt.Kustomization().OpenAPI, bytes, false) + if err != nil { + return nil, err + } + if isComponent && subKt.kustomization.Kind != types.ComponentKind { + return nil, fmt.Errorf( + "expected kind '%s' for path '%s' but got '%s'", types.ComponentKind, ldr.Root(), subKt.kustomization.Kind) + } else if !isComponent && subKt.kustomization.Kind == types.ComponentKind { + return nil, fmt.Errorf( + "expected kind != '%s' for path '%s'", types.ComponentKind, ldr.Root()) + } + + var subRa *accumulator.ResAccumulator + if isComponent { + // Components don't create a new accumulator: the kustomization directives are added to the current accumulator + subRa, err = subKt.accumulateTarget(ra) + ra = accumulator.MakeEmptyAccumulator() + } else { + // Child Kustomizations create a new accumulator which resolves their kustomization directives, which will later + // be merged into the current accumulator. + subRa, err = subKt.AccumulateTarget() + } + if err != nil { + return nil, errors.Wrapf( + err, "recursed accumulation of path '%s'", ldr.Root()) + } + err = ra.MergeAccumulator(subRa) + if err != nil { + return nil, errors.Wrapf( + err, "recursed merging from path '%s'", ldr.Root()) + } + return ra, nil +} + +func (kt *KustTarget) accumulateFile( + ra *accumulator.ResAccumulator, path string) error { + resources, err := kt.rFactory.FromFile(kt.ldr, path) + if err != nil { + return errors.Wrapf(err, "accumulating resources from '%s'", path) + } + if kt.origin != nil { + originAnno, err := kt.origin.Append(path).String() + if err != nil { + return errors.Wrapf(err, "cannot add path annotation for '%s'", path) + } + err = resources.AnnotateAll(utils.OriginAnnotationKey, originAnno) + if err != nil || originAnno == "" { + return errors.Wrapf(err, "cannot add path annotation for '%s'", path) + } + } + err = ra.AppendAll(resources) + if err != nil { + return errors.Wrapf(err, "merging resources from '%s'", path) + } + return nil +} + +func (kt *KustTarget) configureBuiltinPlugin( + p resmap.Configurable, c interface{}, bpt builtinhelpers.BuiltinPluginType) (err error) { + var y []byte + if c != nil { + y, err = yaml.Marshal(c) + if err != nil { + return errors.Wrapf( + err, "builtin %s marshal", bpt) + } + } + err = p.Config( + resmap.NewPluginHelpers( + kt.ldr, kt.validator, kt.rFactory, kt.pLdr.Config()), + y) + if err != nil { + return errors.Wrapf( + err, "trouble configuring builtin %s with config: `\n%s`", bpt, string(y)) + } + return nil +} diff --git a/go/internal/forked/api/internal/target/kusttarget.go b/go/internal/forked/api/internal/target/kusttarget.go new file mode 100644 index 000000000..fef1ac93d --- /dev/null +++ b/go/internal/forked/api/internal/target/kusttarget.go @@ -0,0 +1,555 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package target + +import ( + "encoding/json" + "fmt" + "path/filepath" + "strings" + + "github.com/pkg/errors" + + "sigs.k8s.io/kustomize/api/ifc" + "sigs.k8s.io/kustomize/api/internal/accumulator" + "sigs.k8s.io/kustomize/api/internal/builtins" + "sigs.k8s.io/kustomize/api/internal/plugins/builtinconfig" + "sigs.k8s.io/kustomize/api/internal/plugins/builtinhelpers" + "sigs.k8s.io/kustomize/api/internal/plugins/loader" + "sigs.k8s.io/kustomize/api/internal/utils" + "sigs.k8s.io/kustomize/api/konfig" + load "sigs.k8s.io/kustomize/api/loader" + "sigs.k8s.io/kustomize/api/resmap" + "sigs.k8s.io/kustomize/api/resource" + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/openapi" + "sigs.k8s.io/yaml" +) + +// KustTarget encapsulates the entirety of a kustomization build. +type KustTarget struct { + kustomization *types.Kustomization + kustFileName string + ldr ifc.Loader + validator ifc.Validator + rFactory *resmap.Factory + pLdr *loader.Loader + origin *resource.Origin +} + +// NewKustTarget returns a new instance of KustTarget. +func NewKustTarget( + ldr ifc.Loader, + validator ifc.Validator, + rFactory *resmap.Factory, + pLdr *loader.Loader) *KustTarget { + pLdrCopy := *pLdr + pLdrCopy.SetWorkDir(ldr.Root()) + return &KustTarget{ + ldr: ldr, + validator: validator, + rFactory: rFactory, + pLdr: &pLdrCopy, + } +} + +// Load attempts to load the target's kustomization file. +func (kt *KustTarget) Load() error { + content, kustFileName, err := loadKustFile(kt.ldr) + if err != nil { + return err + } + content, err = types.FixKustomizationPreUnmarshalling(content) + if err != nil { + return err + } + var k types.Kustomization + err = k.Unmarshal(content) + if err != nil { + return err + } + k.FixKustomizationPostUnmarshalling() + errs := k.EnforceFields() + if len(errs) > 0 { + return fmt.Errorf( + "Failed to read kustomization file under %s:\n"+ + strings.Join(errs, "\n"), kt.ldr.Root()) + } + kt.kustomization = &k + kt.kustFileName = kustFileName + return nil +} + +// Kustomization returns a copy of the immutable, internal kustomization object. +func (kt *KustTarget) Kustomization() types.Kustomization { + var result types.Kustomization + b, _ := json.Marshal(*kt.kustomization) + json.Unmarshal(b, &result) + return result +} + +func loadKustFile(ldr ifc.Loader) ([]byte, string, error) { + var content []byte + match := 0 + var kustFileName string + for _, kf := range konfig.RecognizedKustomizationFileNames() { + c, err := ldr.Load(kf) + if err == nil { + match += 1 + content = c + kustFileName = kf + } + } + switch match { + case 0: + return nil, "", NewErrMissingKustomization(ldr.Root()) + case 1: + return content, kustFileName, nil + default: + return nil, "", fmt.Errorf( + "Found multiple kustomization files under: %s\n", ldr.Root()) + } +} + +// MakeCustomizedResMap creates a fully customized ResMap +// per the instructions contained in its kustomization instance. +func (kt *KustTarget) MakeCustomizedResMap() (resmap.ResMap, error) { + return kt.makeCustomizedResMap() +} + +func (kt *KustTarget) makeCustomizedResMap() (resmap.ResMap, error) { + var origin *resource.Origin + if len(kt.kustomization.BuildMetadata) != 0 { + origin = &resource.Origin{} + } + kt.origin = origin + ra, err := kt.AccumulateTarget() + if err != nil { + return nil, err + } + + // The following steps must be done last, not as part of + // the recursion implicit in AccumulateTarget. + + err = kt.addHashesToNames(ra) + if err != nil { + return nil, err + } + + // Given that names have changed (prefixs/suffixes added), + // fix all the back references to those names. + err = ra.FixBackReferences() + if err != nil { + return nil, err + } + + // With all the back references fixed, it's OK to resolve Vars. + err = ra.ResolveVars() + if err != nil { + return nil, err + } + + return ra.ResMap(), nil +} + +func (kt *KustTarget) addHashesToNames( + ra *accumulator.ResAccumulator) error { + p := builtins.NewHashTransformerPlugin() + err := kt.configureBuiltinPlugin(p, nil, builtinhelpers.HashTransformer) + if err != nil { + return err + } + return ra.Transform(p) +} + +// AccumulateTarget returns a new ResAccumulator, +// holding customized resources and the data/rules used +// to do so. The name back references and vars are +// not yet fixed. +// The origin parameter is used through the recursive calls +// to annotate each resource with information about where +// the resource came from, e.g. the file and/or the repository +// it originated from. +// As an entrypoint, one can pass an empty resource.Origin object to +// AccumulateTarget. As AccumulateTarget moves recursively +// through kustomization directories, it updates `origin.path` +// accordingly. When a remote base is found, it updates `origin.repo` +// and `origin.ref` accordingly. +func (kt *KustTarget) AccumulateTarget() ( + ra *accumulator.ResAccumulator, err error) { + return kt.accumulateTarget(accumulator.MakeEmptyAccumulator()) +} + +// ra should be empty when this KustTarget is a Kustomization, or the ra of the parent if this KustTarget is a Component +// (or empty if the Component does not have a parent). +func (kt *KustTarget) accumulateTarget(ra *accumulator.ResAccumulator) ( + resRa *accumulator.ResAccumulator, err error) { + ra, err = kt.accumulateResources(ra, kt.kustomization.Resources) + if err != nil { + return nil, errors.Wrap(err, "accumulating resources") + } + ra, err = kt.accumulateComponents(ra, kt.kustomization.Components) + if err != nil { + return nil, errors.Wrap(err, "accumulating components") + } + tConfig, err := builtinconfig.MakeTransformerConfig( + kt.ldr, kt.kustomization.Configurations) + if err != nil { + return nil, err + } + err = ra.MergeConfig(tConfig) + if err != nil { + return nil, errors.Wrapf( + err, "merging config %v", tConfig) + } + crdTc, err := accumulator.LoadConfigFromCRDs(kt.ldr, kt.kustomization.Crds) + if err != nil { + return nil, errors.Wrapf( + err, "loading CRDs %v", kt.kustomization.Crds) + } + err = ra.MergeConfig(crdTc) + if err != nil { + return nil, errors.Wrapf( + err, "merging CRDs %v", crdTc) + } + err = kt.runGenerators(ra) + if err != nil { + return nil, err + } + err = kt.runTransformers(ra) + if err != nil { + return nil, err + } + err = kt.runValidators(ra) + if err != nil { + return nil, err + } + err = ra.MergeVars(kt.kustomization.Vars) + if err != nil { + return nil, errors.Wrapf( + err, "merging vars %v", kt.kustomization.Vars) + } + err = kt.IgnoreLocal(ra) + if err != nil { + return nil, err + } + return ra, nil +} + +// IgnoreLocal drops the local resource by checking the annotation "config.kubernetes.io/local-config". +func (kt *KustTarget) IgnoreLocal(ra *accumulator.ResAccumulator) error { + rf := kt.rFactory.RF() + if rf.IncludeLocalConfigs { + return nil + } + remainRes, err := rf.DropLocalNodes(ra.ResMap().ToRNodeSlice()) + if err != nil { + return err + } + return ra.Intersection(kt.rFactory.FromResourceSlice(remainRes)) +} + +func (kt *KustTarget) runGenerators( + ra *accumulator.ResAccumulator) error { + var generators []*resmap.GeneratorWithProperties + gs, err := kt.configureBuiltinGenerators() + if err != nil { + return err + } + generators = append(generators, gs...) + + gs, err = kt.configureExternalGenerators() + if err != nil { + return errors.Wrap(err, "loading generator plugins") + } + generators = append(generators, gs...) + for i, g := range generators { + resMap, err := g.Generate() + if err != nil { + return err + } + if resMap != nil { + err = resMap.AddOriginAnnotation(generators[i].Origin) + if err != nil { + return errors.Wrapf(err, "adding origin annotations for generator %v", g) + } + } + err = ra.AbsorbAll(resMap) + if err != nil { + return errors.Wrapf(err, "merging from generator %v", g) + } + } + return nil +} + +func (kt *KustTarget) configureExternalGenerators() ( + []*resmap.GeneratorWithProperties, error) { + ra := accumulator.MakeEmptyAccumulator() + var generatorPaths []string + for _, p := range kt.kustomization.Generators { + // handle inline generators + rm, err := kt.rFactory.NewResMapFromBytes([]byte(p)) + if err != nil { + // not an inline config + generatorPaths = append(generatorPaths, p) + continue + } + // inline config, track the origin + if kt.origin != nil { + resources := rm.Resources() + for _, r := range resources { + r.SetOrigin(kt.origin.Append(kt.kustFileName)) + rm.Replace(r) + } + } + ra.AppendAll(rm) + } + ra, err := kt.accumulateResources(ra, generatorPaths) + if err != nil { + return nil, err + } + return kt.pLdr.LoadGenerators(kt.ldr, kt.validator, ra.ResMap()) +} + +func (kt *KustTarget) runTransformers(ra *accumulator.ResAccumulator) error { + var r []*resmap.TransformerWithProperties + tConfig := ra.GetTransformerConfig() + lts, err := kt.configureBuiltinTransformers(tConfig) + if err != nil { + return err + } + r = append(r, lts...) + lts, err = kt.configureExternalTransformers(kt.kustomization.Transformers) + if err != nil { + return err + } + r = append(r, lts...) + return ra.Transform(newMultiTransformer(r)) +} + +func (kt *KustTarget) configureExternalTransformers(transformers []string) ([]*resmap.TransformerWithProperties, error) { + ra := accumulator.MakeEmptyAccumulator() + var transformerPaths []string + for _, p := range transformers { + // handle inline transformers + rm, err := kt.rFactory.NewResMapFromBytes([]byte(p)) + if err != nil { + // not an inline config + transformerPaths = append(transformerPaths, p) + continue + } + // inline config, track the origin + if kt.origin != nil { + resources := rm.Resources() + for _, r := range resources { + r.SetOrigin(kt.origin.Append(kt.kustFileName)) + rm.Replace(r) + } + } + ra.AppendAll(rm) + } + ra, err := kt.accumulateResources(ra, transformerPaths) + if err != nil { + return nil, err + } + return kt.pLdr.LoadTransformers(kt.ldr, kt.validator, ra.ResMap()) +} + +func (kt *KustTarget) runValidators(ra *accumulator.ResAccumulator) error { + validators, err := kt.configureExternalTransformers(kt.kustomization.Validators) + if err != nil { + return err + } + for _, v := range validators { + // Validators shouldn't modify the resource map + orignal := ra.ResMap().DeepCopy() + err = v.Transform(ra.ResMap()) + if err != nil { + return err + } + newMap := ra.ResMap().DeepCopy() + if err = kt.removeValidatedByLabel(newMap); err != nil { + return err + } + if err = orignal.ErrorIfNotEqualSets(newMap); err != nil { + return fmt.Errorf("validator shouldn't modify the resource map: %v", err) + } + } + return nil +} + +func (kt *KustTarget) removeValidatedByLabel(rm resmap.ResMap) error { + resources := rm.Resources() + for _, r := range resources { + labels := r.GetLabels() + if _, found := labels[konfig.ValidatedByLabelKey]; !found { + continue + } + delete(labels, konfig.ValidatedByLabelKey) + if err := r.SetLabels(labels); err != nil { + return err + } + } + return nil +} + +// accumulateResources fills the given resourceAccumulator +// with resources read from the given list of paths. +func (kt *KustTarget) accumulateResources( + ra *accumulator.ResAccumulator, paths []string) (*accumulator.ResAccumulator, error) { + for _, path := range paths { + // try loading resource as file then as base (directory or git repository) + if errF := kt.accumulateFile(ra, path); errF != nil { + // not much we can do if the error is an HTTP error so we bail out + if errors.Is(errF, load.ErrorHTTP) { + return nil, errF + } + ldr, err := kt.ldr.New(path) + if err != nil { + return nil, errors.Wrapf( + err, "accumulation err='%s'", errF.Error()) + } + // store the origin, we'll need it later + origin := kt.origin.Copy() + if kt.origin != nil { + kt.origin = kt.origin.Append(path) + ra, err = kt.accumulateDirectory(ra, ldr, false) + // after we are done recursing through the directory, reset the origin + kt.origin = &origin + } else { + ra, err = kt.accumulateDirectory(ra, ldr, false) + } + if err != nil { + return nil, errors.Wrapf( + err, "accumulation err='%s'", errF.Error()) + } + } + } + return ra, nil +} + +// accumulateResources fills the given resourceAccumulator +// with resources read from the given list of paths. +func (kt *KustTarget) accumulateComponents( + ra *accumulator.ResAccumulator, paths []string) (*accumulator.ResAccumulator, error) { + for _, path := range paths { + // Components always refer to directories + ldr, errL := kt.ldr.New(path) + if errL != nil { + return nil, fmt.Errorf("loader.New %q", errL) + } + var errD error + // store the origin, we'll need it later + origin := kt.origin.Copy() + if kt.origin != nil { + kt.origin = kt.origin.Append(path) + ra, errD = kt.accumulateDirectory(ra, ldr, true) + // after we are done recursing through the directory, reset the origin + kt.origin = &origin + } else { + ra, errD = kt.accumulateDirectory(ra, ldr, true) + } + if errD != nil { + return nil, fmt.Errorf("accumulateDirectory: %q", errD) + } + } + return ra, nil +} + +func (kt *KustTarget) accumulateDirectory( + ra *accumulator.ResAccumulator, ldr ifc.Loader, isComponent bool) (*accumulator.ResAccumulator, error) { + defer ldr.Cleanup() + subKt := NewKustTarget(ldr, kt.validator, kt.rFactory, kt.pLdr) + err := subKt.Load() + if err != nil { + return nil, errors.Wrapf( + err, "couldn't make target for path '%s'", ldr.Root()) + } + subKt.kustomization.BuildMetadata = kt.kustomization.BuildMetadata + subKt.origin = kt.origin + var bytes []byte + path := ldr.Root() + if openApiPath, exists := subKt.Kustomization().OpenAPI["path"]; exists { + bytes, err = ldr.Load(filepath.Join(path, openApiPath)) + if err != nil { + return nil, err + } + } + err = openapi.SetSchema(subKt.Kustomization().OpenAPI, bytes, false) + if err != nil { + return nil, err + } + if isComponent && subKt.kustomization.Kind != types.ComponentKind { + return nil, fmt.Errorf( + "expected kind '%s' for path '%s' but got '%s'", types.ComponentKind, ldr.Root(), subKt.kustomization.Kind) + } else if !isComponent && subKt.kustomization.Kind == types.ComponentKind { + return nil, fmt.Errorf( + "expected kind != '%s' for path '%s'", types.ComponentKind, ldr.Root()) + } + + var subRa *accumulator.ResAccumulator + if isComponent { + // Components don't create a new accumulator: the kustomization directives are added to the current accumulator + subRa, err = subKt.accumulateTarget(ra) + ra = accumulator.MakeEmptyAccumulator() + } else { + // Child Kustomizations create a new accumulator which resolves their kustomization directives, which will later + // be merged into the current accumulator. + subRa, err = subKt.AccumulateTarget() + } + if err != nil { + return nil, errors.Wrapf( + err, "recursed accumulation of path '%s'", ldr.Root()) + } + err = ra.MergeAccumulator(subRa) + if err != nil { + return nil, errors.Wrapf( + err, "recursed merging from path '%s'", ldr.Root()) + } + return ra, nil +} + +func (kt *KustTarget) accumulateFile( + ra *accumulator.ResAccumulator, path string) error { + resources, err := kt.rFactory.FromFile(kt.ldr, path) + if err != nil { + return errors.Wrapf(err, "accumulating resources from '%s'", path) + } + if kt.origin != nil { + originAnno, err := kt.origin.Append(path).String() + if err != nil { + return errors.Wrapf(err, "cannot add path annotation for '%s'", path) + } + err = resources.AnnotateAll(utils.OriginAnnotationKey, originAnno) + if err != nil || originAnno == "" { + return errors.Wrapf(err, "cannot add path annotation for '%s'", path) + } + } + err = ra.AppendAll(resources) + if err != nil { + return errors.Wrapf(err, "merging resources from '%s'", path) + } + return nil +} + +func (kt *KustTarget) configureBuiltinPlugin( + p resmap.Configurable, c interface{}, bpt builtinhelpers.BuiltinPluginType) (err error) { + var y []byte + if c != nil { + y, err = yaml.Marshal(c) + if err != nil { + return errors.Wrapf( + err, "builtin %s marshal", bpt) + } + } + err = p.Config( + resmap.NewPluginHelpers( + kt.ldr, kt.validator, kt.rFactory, kt.pLdr.Config()), + y) + if err != nil { + return errors.Wrapf( + err, "trouble configuring builtin %s with config: `\n%s`", bpt, string(y)) + } + return nil +} diff --git a/go/internal/forked/api/internal/target/kusttarget_configplugin.go b/go/internal/forked/api/internal/target/kusttarget_configplugin.go new file mode 100644 index 000000000..c2216e17f --- /dev/null +++ b/go/internal/forked/api/internal/target/kusttarget_configplugin.go @@ -0,0 +1,438 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package target + +import ( + "fmt" + "path/filepath" + + "sigs.k8s.io/kustomize/api/internal/plugins/builtinconfig" + "sigs.k8s.io/kustomize/api/internal/plugins/builtinhelpers" + "sigs.k8s.io/kustomize/api/resmap" + "sigs.k8s.io/kustomize/api/resource" + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" +) + +// Functions dedicated to configuring the builtin +// transformer and generator plugins using config data +// read from a kustomization file and from the +// config.TransformerConfig, whose data may be a +// mix of hardcoded values and data read from file. +// +// Non-builtin plugins will get their configuration +// from their own dedicated structs and YAML files. +// +// There are some loops in the functions below because +// the kustomization file would, say, allow someone to +// request multiple secrets be made, or run multiple +// image tag transforms. In these cases, we'll need +// N plugin instances with differing configurations. + +func (kt *KustTarget) configureBuiltinGenerators() ( + result []*resmap.GeneratorWithProperties, err error) { + for _, bpt := range []builtinhelpers.BuiltinPluginType{ + builtinhelpers.ConfigMapGenerator, + builtinhelpers.SecretGenerator, + builtinhelpers.HelmChartInflationGenerator, + } { + r, err := generatorConfigurators[bpt]( + kt, bpt, builtinhelpers.GeneratorFactories[bpt]) + if err != nil { + return nil, err + } + + var generatorOrigin *resource.Origin + if kt.origin != nil { + generatorOrigin = &resource.Origin{ + Repo: kt.origin.Repo, + Ref: kt.origin.Ref, + ConfiguredIn: filepath.Join(kt.origin.Path, kt.kustFileName), + ConfiguredBy: yaml.ResourceIdentifier{ + TypeMeta: yaml.TypeMeta{ + APIVersion: "builtin", + Kind: bpt.String(), + }, + }, + } + } + + for i := range r { + result = append(result, &resmap.GeneratorWithProperties{Generator: r[i], Origin: generatorOrigin}) + } + } + return result, nil +} + +func (kt *KustTarget) configureBuiltinTransformers( + tc *builtinconfig.TransformerConfig) ( + result []*resmap.TransformerWithProperties, err error) { + for _, bpt := range []builtinhelpers.BuiltinPluginType{ + builtinhelpers.PatchStrategicMergeTransformer, + builtinhelpers.PatchTransformer, + builtinhelpers.NamespaceTransformer, + builtinhelpers.PrefixTransformer, + builtinhelpers.SuffixTransformer, + builtinhelpers.LabelTransformer, + builtinhelpers.AnnotationsTransformer, + builtinhelpers.PatchJson6902Transformer, + builtinhelpers.ReplicaCountTransformer, + builtinhelpers.ImageTagTransformer, + builtinhelpers.ReplacementTransformer, + } { + r, err := transformerConfigurators[bpt]( + kt, bpt, builtinhelpers.TransformerFactories[bpt], tc) + if err != nil { + return nil, err + } + var transformerOrigin *resource.Origin + if kt.origin != nil { + transformerOrigin = &resource.Origin{ + Repo: kt.origin.Repo, + Ref: kt.origin.Ref, + ConfiguredIn: filepath.Join(kt.origin.Path, kt.kustFileName), + ConfiguredBy: yaml.ResourceIdentifier{ + TypeMeta: yaml.TypeMeta{ + APIVersion: "builtin", + Kind: bpt.String(), + }, + }, + } + } + for i := range r { + result = append(result, &resmap.TransformerWithProperties{Transformer: r[i], Origin: transformerOrigin}) + } + } + return result, nil +} + +type gFactory func() resmap.GeneratorPlugin + +var generatorConfigurators = map[builtinhelpers.BuiltinPluginType]func( + kt *KustTarget, + bpt builtinhelpers.BuiltinPluginType, + factory gFactory) (result []resmap.Generator, err error){ + builtinhelpers.SecretGenerator: func(kt *KustTarget, bpt builtinhelpers.BuiltinPluginType, f gFactory) ( + result []resmap.Generator, err error) { + var c struct { + types.SecretArgs + } + for _, args := range kt.kustomization.SecretGenerator { + c.SecretArgs = args + c.SecretArgs.Options = types.MergeGlobalOptionsIntoLocal( + c.SecretArgs.Options, kt.kustomization.GeneratorOptions) + p := f() + err := kt.configureBuiltinPlugin(p, c, bpt) + if err != nil { + return nil, err + } + result = append(result, p) + } + return + }, + + builtinhelpers.ConfigMapGenerator: func(kt *KustTarget, bpt builtinhelpers.BuiltinPluginType, f gFactory) ( + result []resmap.Generator, err error) { + var c struct { + types.ConfigMapArgs + } + for _, args := range kt.kustomization.ConfigMapGenerator { + c.ConfigMapArgs = args + c.ConfigMapArgs.Options = types.MergeGlobalOptionsIntoLocal( + c.ConfigMapArgs.Options, kt.kustomization.GeneratorOptions) + p := f() + err := kt.configureBuiltinPlugin(p, c, bpt) + if err != nil { + return nil, err + } + result = append(result, p) + } + return + }, + + builtinhelpers.HelmChartInflationGenerator: func( + kt *KustTarget, bpt builtinhelpers.BuiltinPluginType, f gFactory) ( + result []resmap.Generator, err error) { + var c struct { + types.HelmGlobals + types.HelmChart + } + var globals types.HelmGlobals + if kt.kustomization.HelmGlobals != nil { + globals = *kt.kustomization.HelmGlobals + } + for _, chart := range kt.kustomization.HelmCharts { + c.HelmGlobals = globals + c.HelmChart = chart + p := f() + if err = kt.configureBuiltinPlugin(p, c, bpt); err != nil { + return nil, err + } + result = append(result, p) + } + return + }, +} + +type tFactory func() resmap.TransformerPlugin + +var transformerConfigurators = map[builtinhelpers.BuiltinPluginType]func( + kt *KustTarget, + bpt builtinhelpers.BuiltinPluginType, + f tFactory, + tc *builtinconfig.TransformerConfig) (result []resmap.Transformer, err error){ + builtinhelpers.NamespaceTransformer: func( + kt *KustTarget, bpt builtinhelpers.BuiltinPluginType, f tFactory, tc *builtinconfig.TransformerConfig) ( + result []resmap.Transformer, err error) { + if kt.kustomization.Namespace == "" { + return + } + var c struct { + types.ObjectMeta `json:"metadata,omitempty" yaml:"metadata,omitempty"` + FieldSpecs []types.FieldSpec + } + c.Namespace = kt.kustomization.Namespace + c.FieldSpecs = tc.NameSpace + p := f() + err = kt.configureBuiltinPlugin(p, c, bpt) + if err != nil { + return nil, err + } + result = append(result, p) + return + }, + + builtinhelpers.PatchJson6902Transformer: func( + kt *KustTarget, bpt builtinhelpers.BuiltinPluginType, f tFactory, _ *builtinconfig.TransformerConfig) ( + result []resmap.Transformer, err error) { + var c struct { + Target *types.Selector `json:"target,omitempty" yaml:"target,omitempty"` + Path string `json:"path,omitempty" yaml:"path,omitempty"` + JsonOp string `json:"jsonOp,omitempty" yaml:"jsonOp,omitempty"` + } + for _, args := range kt.kustomization.PatchesJson6902 { + c.Target = args.Target + c.Path = args.Path + c.JsonOp = args.Patch + p := f() + err = kt.configureBuiltinPlugin(p, c, bpt) + if err != nil { + return nil, err + } + result = append(result, p) + } + return + }, + builtinhelpers.PatchStrategicMergeTransformer: func( + kt *KustTarget, bpt builtinhelpers.BuiltinPluginType, f tFactory, _ *builtinconfig.TransformerConfig) ( + result []resmap.Transformer, err error) { + if len(kt.kustomization.PatchesStrategicMerge) == 0 { + return + } + var c struct { + Paths []types.PatchStrategicMerge `json:"paths,omitempty" yaml:"paths,omitempty"` + } + c.Paths = kt.kustomization.PatchesStrategicMerge + p := f() + err = kt.configureBuiltinPlugin(p, c, bpt) + if err != nil { + return nil, err + } + result = append(result, p) + return + }, + builtinhelpers.PatchTransformer: func( + kt *KustTarget, bpt builtinhelpers.BuiltinPluginType, f tFactory, _ *builtinconfig.TransformerConfig) ( + result []resmap.Transformer, err error) { + if len(kt.kustomization.Patches) == 0 { + return + } + var c struct { + Path string `json:"path,omitempty" yaml:"path,omitempty"` + Patch string `json:"patch,omitempty" yaml:"patch,omitempty"` + Target *types.Selector `json:"target,omitempty" yaml:"target,omitempty"` + Options map[string]bool `json:"options,omitempty" yaml:"options,omitempty"` + } + for _, pc := range kt.kustomization.Patches { + c.Target = pc.Target + c.Patch = pc.Patch + c.Path = pc.Path + c.Options = pc.Options + p := f() + err = kt.configureBuiltinPlugin(p, c, bpt) + if err != nil { + return nil, err + } + result = append(result, p) + } + return + }, + builtinhelpers.LabelTransformer: func( + kt *KustTarget, bpt builtinhelpers.BuiltinPluginType, f tFactory, tc *builtinconfig.TransformerConfig) ( + result []resmap.Transformer, err error) { + if len(kt.kustomization.Labels) == 0 && len(kt.kustomization.CommonLabels) == 0 { + return + } + for _, label := range kt.kustomization.Labels { + var c struct { + Labels map[string]string + FieldSpecs []types.FieldSpec + } + c.Labels = label.Pairs + fss := types.FsSlice(label.FieldSpecs) + // merge the custom fieldSpecs with the default + if label.IncludeSelectors { + fss, err = fss.MergeAll(tc.CommonLabels) + } else { + // only add to metadata by default + fss, err = fss.MergeOne(types.FieldSpec{Path: "metadata/labels", CreateIfNotPresent: true}) + } + if err != nil { + return nil, err + } + c.FieldSpecs = fss + p := f() + err = kt.configureBuiltinPlugin(p, c, bpt) + if err != nil { + return nil, err + } + result = append(result, p) + } + var c struct { + Labels map[string]string + FieldSpecs []types.FieldSpec + } + c.Labels = kt.kustomization.CommonLabels + c.FieldSpecs = tc.CommonLabels + p := f() + err = kt.configureBuiltinPlugin(p, c, bpt) + if err != nil { + return nil, err + } + result = append(result, p) + return + }, + builtinhelpers.AnnotationsTransformer: func( + kt *KustTarget, bpt builtinhelpers.BuiltinPluginType, f tFactory, tc *builtinconfig.TransformerConfig) ( + result []resmap.Transformer, err error) { + if len(kt.kustomization.CommonAnnotations) == 0 { + return + } + var c struct { + Annotations map[string]string + FieldSpecs []types.FieldSpec + } + c.Annotations = kt.kustomization.CommonAnnotations + c.FieldSpecs = tc.CommonAnnotations + p := f() + err = kt.configureBuiltinPlugin(p, c, bpt) + if err != nil { + return nil, err + } + result = append(result, p) + return + }, + builtinhelpers.PrefixTransformer: func( + kt *KustTarget, bpt builtinhelpers.BuiltinPluginType, f tFactory, tc *builtinconfig.TransformerConfig) ( + result []resmap.Transformer, err error) { + if kt.kustomization.NamePrefix == "" { + return + } + var c struct { + Prefix string `json:"prefix,omitempty" yaml:"prefix,omitempty"` + FieldSpecs []types.FieldSpec `json:"fieldSpecs,omitempty" yaml:"fieldSpecs,omitempty"` + } + c.Prefix = kt.kustomization.NamePrefix + c.FieldSpecs = tc.NamePrefix + p := f() + err = kt.configureBuiltinPlugin(p, c, bpt) + if err != nil { + return nil, err + } + result = append(result, p) + return + }, + builtinhelpers.SuffixTransformer: func( + kt *KustTarget, bpt builtinhelpers.BuiltinPluginType, f tFactory, tc *builtinconfig.TransformerConfig) ( + result []resmap.Transformer, err error) { + if kt.kustomization.NameSuffix == "" { + return + } + var c struct { + Suffix string `json:"suffix,omitempty" yaml:"suffix,omitempty"` + FieldSpecs []types.FieldSpec `json:"fieldSpecs,omitempty" yaml:"fieldSpecs,omitempty"` + } + c.Suffix = kt.kustomization.NameSuffix + c.FieldSpecs = tc.NameSuffix + p := f() + err = kt.configureBuiltinPlugin(p, c, bpt) + if err != nil { + return nil, err + } + result = append(result, p) + return + }, + builtinhelpers.ImageTagTransformer: func( + kt *KustTarget, bpt builtinhelpers.BuiltinPluginType, f tFactory, tc *builtinconfig.TransformerConfig) ( + result []resmap.Transformer, err error) { + var c struct { + ImageTag types.Image + FieldSpecs []types.FieldSpec + } + for _, args := range kt.kustomization.Images { + c.ImageTag = args + c.FieldSpecs = tc.Images + p := f() + err = kt.configureBuiltinPlugin(p, c, bpt) + if err != nil { + return nil, err + } + result = append(result, p) + } + return + }, + builtinhelpers.ReplacementTransformer: func( + kt *KustTarget, bpt builtinhelpers.BuiltinPluginType, f tFactory, _ *builtinconfig.TransformerConfig) ( + result []resmap.Transformer, err error) { + if len(kt.kustomization.Replacements) == 0 { + return + } + var c struct { + Replacements []types.ReplacementField + } + c.Replacements = kt.kustomization.Replacements + p := f() + err = kt.configureBuiltinPlugin(p, c, bpt) + if err != nil { + return nil, err + } + result = append(result, p) + return result, nil + }, + builtinhelpers.ReplicaCountTransformer: func( + kt *KustTarget, bpt builtinhelpers.BuiltinPluginType, f tFactory, tc *builtinconfig.TransformerConfig) ( + result []resmap.Transformer, err error) { + var c struct { + Replica types.Replica + FieldSpecs []types.FieldSpec + } + for _, args := range kt.kustomization.Replicas { + c.Replica = args + c.FieldSpecs = tc.Replicas + p := f() + err = kt.configureBuiltinPlugin(p, c, bpt) + if err != nil { + return nil, err + } + result = append(result, p) + } + return + }, + // No kustomization file keyword for this yet. + builtinhelpers.ValueAddTransformer: func( + kt *KustTarget, bpt builtinhelpers.BuiltinPluginType, f tFactory, tc *builtinconfig.TransformerConfig) ( + result []resmap.Transformer, err error) { + return nil, fmt.Errorf("valueadd keyword not yet defined") + }, +} diff --git a/go/internal/forked/api/internal/target/kusttarget_configplugin.go b/go/internal/forked/api/internal/target/kusttarget_configplugin.go new file mode 100644 index 000000000..31dae21c9 --- /dev/null +++ b/go/internal/forked/api/internal/target/kusttarget_configplugin.go @@ -0,0 +1,438 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package target + +import ( + "fmt" + "path/filepath" + + "sigs.k8s.io/kustomize/api/internal/plugins/builtinconfig" + "sigs.k8s.io/kustomize/api/internal/plugins/builtinhelpers" + "sigs.k8s.io/kustomize/api/resmap" + "sigs.k8s.io/kustomize/api/resource" + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/yaml" +) + +// Functions dedicated to configuring the builtin +// transformer and generator plugins using config data +// read from a kustomization file and from the +// config.TransformerConfig, whose data may be a +// mix of hardcoded values and data read from file. +// +// Non-builtin plugins will get their configuration +// from their own dedicated structs and YAML files. +// +// There are some loops in the functions below because +// the kustomization file would, say, allow someone to +// request multiple secrets be made, or run multiple +// image tag transforms. In these cases, we'll need +// N plugin instances with differing configurations. + +func (kt *KustTarget) configureBuiltinGenerators() ( + result []*resmap.GeneratorWithProperties, err error) { + for _, bpt := range []builtinhelpers.BuiltinPluginType{ + builtinhelpers.ConfigMapGenerator, + builtinhelpers.SecretGenerator, + builtinhelpers.HelmChartInflationGenerator, + } { + r, err := generatorConfigurators[bpt]( + kt, bpt, builtinhelpers.GeneratorFactories[bpt]) + if err != nil { + return nil, err + } + + var generatorOrigin *resource.Origin + if kt.origin != nil { + generatorOrigin = &resource.Origin{ + Repo: kt.origin.Repo, + Ref: kt.origin.Ref, + ConfiguredIn: filepath.Join(kt.origin.Path, kt.kustFileName), + ConfiguredBy: yaml.ResourceIdentifier{ + TypeMeta: yaml.TypeMeta{ + APIVersion: "builtin", + Kind: bpt.String(), + }, + }, + } + } + + for i := range r { + result = append(result, &resmap.GeneratorWithProperties{Generator: r[i], Origin: generatorOrigin}) + } + } + return result, nil +} + +func (kt *KustTarget) configureBuiltinTransformers( + tc *builtinconfig.TransformerConfig) ( + result []*resmap.TransformerWithProperties, err error) { + for _, bpt := range []builtinhelpers.BuiltinPluginType{ + builtinhelpers.PatchStrategicMergeTransformer, + builtinhelpers.PatchTransformer, + builtinhelpers.NamespaceTransformer, + builtinhelpers.PrefixTransformer, + builtinhelpers.SuffixTransformer, + builtinhelpers.LabelTransformer, + builtinhelpers.AnnotationsTransformer, + builtinhelpers.PatchJson6902Transformer, + builtinhelpers.ReplicaCountTransformer, + builtinhelpers.ImageTagTransformer, + builtinhelpers.ReplacementTransformer, + } { + r, err := transformerConfigurators[bpt]( + kt, bpt, builtinhelpers.TransformerFactories[bpt], tc) + if err != nil { + return nil, err + } + var transformerOrigin *resource.Origin + if kt.origin != nil { + transformerOrigin = &resource.Origin{ + Repo: kt.origin.Repo, + Ref: kt.origin.Ref, + ConfiguredIn: filepath.Join(kt.origin.Path, kt.kustFileName), + ConfiguredBy: yaml.ResourceIdentifier{ + TypeMeta: yaml.TypeMeta{ + APIVersion: "builtin", + Kind: bpt.String(), + }, + }, + } + } + for i := range r { + result = append(result, &resmap.TransformerWithProperties{Transformer: r[i], Origin: transformerOrigin}) + } + } + return result, nil +} + +type gFactory func() resmap.GeneratorPlugin + +var generatorConfigurators = map[builtinhelpers.BuiltinPluginType]func( + kt *KustTarget, + bpt builtinhelpers.BuiltinPluginType, + factory gFactory) (result []resmap.Generator, err error){ + builtinhelpers.SecretGenerator: func(kt *KustTarget, bpt builtinhelpers.BuiltinPluginType, f gFactory) ( + result []resmap.Generator, err error) { + var c struct { + types.SecretArgs + } + for _, args := range kt.kustomization.SecretGenerator { + c.SecretArgs = args + c.SecretArgs.Options = types.MergeGlobalOptionsIntoLocal( + c.SecretArgs.Options, kt.kustomization.GeneratorOptions) + p := f() + err := kt.configureBuiltinPlugin(p, c, bpt) + if err != nil { + return nil, err + } + result = append(result, p) + } + return + }, + + builtinhelpers.ConfigMapGenerator: func(kt *KustTarget, bpt builtinhelpers.BuiltinPluginType, f gFactory) ( + result []resmap.Generator, err error) { + var c struct { + types.ConfigMapArgs + } + for _, args := range kt.kustomization.ConfigMapGenerator { + c.ConfigMapArgs = args + c.ConfigMapArgs.Options = types.MergeGlobalOptionsIntoLocal( + c.ConfigMapArgs.Options, kt.kustomization.GeneratorOptions) + p := f() + err := kt.configureBuiltinPlugin(p, c, bpt) + if err != nil { + return nil, err + } + result = append(result, p) + } + return + }, + + builtinhelpers.HelmChartInflationGenerator: func( + kt *KustTarget, bpt builtinhelpers.BuiltinPluginType, f gFactory) ( + result []resmap.Generator, err error) { + var c struct { + types.HelmGlobals + types.HelmChart + } + var globals types.HelmGlobals + if kt.kustomization.HelmGlobals != nil { + globals = *kt.kustomization.HelmGlobals + } + for _, chart := range kt.kustomization.HelmCharts { + c.HelmGlobals = globals + c.HelmChart = chart + p := f() + if err = kt.configureBuiltinPlugin(p, c, bpt); err != nil { + return nil, err + } + result = append(result, p) + } + return + }, +} + +type tFactory func() resmap.TransformerPlugin + +var transformerConfigurators = map[builtinhelpers.BuiltinPluginType]func( + kt *KustTarget, + bpt builtinhelpers.BuiltinPluginType, + f tFactory, + tc *builtinconfig.TransformerConfig) (result []resmap.Transformer, err error){ + builtinhelpers.NamespaceTransformer: func( + kt *KustTarget, bpt builtinhelpers.BuiltinPluginType, f tFactory, tc *builtinconfig.TransformerConfig) ( + result []resmap.Transformer, err error) { + if kt.kustomization.Namespace == "" { + return + } + var c struct { + types.ObjectMeta `json:"metadata,omitempty" yaml:"metadata,omitempty"` + FieldSpecs []types.FieldSpec + } + c.Namespace = kt.kustomization.Namespace + c.FieldSpecs = tc.NameSpace + p := f() + err = kt.configureBuiltinPlugin(p, c, bpt) + if err != nil { + return nil, err + } + result = append(result, p) + return + }, + + builtinhelpers.PatchJson6902Transformer: func( + kt *KustTarget, bpt builtinhelpers.BuiltinPluginType, f tFactory, _ *builtinconfig.TransformerConfig) ( + result []resmap.Transformer, err error) { + var c struct { + Target *types.Selector `json:"target,omitempty" yaml:"target,omitempty"` + Path string `json:"path,omitempty" yaml:"path,omitempty"` + JsonOp string `json:"jsonOp,omitempty" yaml:"jsonOp,omitempty"` + } + for _, args := range kt.kustomization.PatchesJson6902 { + c.Target = args.Target + c.Path = args.Path + c.JsonOp = args.Patch + p := f() + err = kt.configureBuiltinPlugin(p, c, bpt) + if err != nil { + return nil, err + } + result = append(result, p) + } + return + }, + builtinhelpers.PatchStrategicMergeTransformer: func( + kt *KustTarget, bpt builtinhelpers.BuiltinPluginType, f tFactory, _ *builtinconfig.TransformerConfig) ( + result []resmap.Transformer, err error) { + if len(kt.kustomization.PatchesStrategicMerge) == 0 { + return + } + var c struct { + Paths []types.PatchStrategicMerge `json:"paths,omitempty" yaml:"paths,omitempty"` + } + c.Paths = kt.kustomization.PatchesStrategicMerge + p := f() + err = kt.configureBuiltinPlugin(p, c, bpt) + if err != nil { + return nil, err + } + result = append(result, p) + return + }, + builtinhelpers.PatchTransformer: func( + kt *KustTarget, bpt builtinhelpers.BuiltinPluginType, f tFactory, _ *builtinconfig.TransformerConfig) ( + result []resmap.Transformer, err error) { + if len(kt.kustomization.Patches) == 0 { + return + } + var c struct { + Path string `json:"path,omitempty" yaml:"path,omitempty"` + Patch string `json:"patch,omitempty" yaml:"patch,omitempty"` + Target *types.Selector `json:"target,omitempty" yaml:"target,omitempty"` + Options map[string]bool `json:"options,omitempty" yaml:"options,omitempty"` + } + for _, pc := range kt.kustomization.Patches { + c.Target = pc.Target + c.Patch = pc.Patch + c.Path = pc.Path + c.Options = pc.Options + p := f() + err = kt.configureBuiltinPlugin(p, c, bpt) + if err != nil { + return nil, err + } + result = append(result, p) + } + return + }, + builtinhelpers.LabelTransformer: func( + kt *KustTarget, bpt builtinhelpers.BuiltinPluginType, f tFactory, tc *builtinconfig.TransformerConfig) ( + result []resmap.Transformer, err error) { + if len(kt.kustomization.Labels) == 0 && len(kt.kustomization.CommonLabels) == 0 { + return + } + for _, label := range kt.kustomization.Labels { + var c struct { + Labels map[string]string + FieldSpecs []types.FieldSpec + } + c.Labels = label.Pairs + fss := types.FsSlice(label.FieldSpecs) + // merge the custom fieldSpecs with the default + if label.IncludeSelectors { + fss, err = fss.MergeAll(tc.CommonLabels) + } else { + // only add to metadata by default + fss, err = fss.MergeOne(types.FieldSpec{Path: "metadata/labels", CreateIfNotPresent: true}) + } + if err != nil { + return nil, err + } + c.FieldSpecs = fss + p := f() + err = kt.configureBuiltinPlugin(p, c, bpt) + if err != nil { + return nil, err + } + result = append(result, p) + } + var c struct { + Labels map[string]string + FieldSpecs []types.FieldSpec + } + c.Labels = kt.kustomization.CommonLabels + c.FieldSpecs = tc.CommonLabels + p := f() + err = kt.configureBuiltinPlugin(p, c, bpt) + if err != nil { + return nil, err + } + result = append(result, p) + return + }, + builtinhelpers.AnnotationsTransformer: func( + kt *KustTarget, bpt builtinhelpers.BuiltinPluginType, f tFactory, tc *builtinconfig.TransformerConfig) ( + result []resmap.Transformer, err error) { + if len(kt.kustomization.CommonAnnotations) == 0 { + return + } + var c struct { + Annotations map[string]string + FieldSpecs []types.FieldSpec + } + c.Annotations = kt.kustomization.CommonAnnotations + c.FieldSpecs = tc.CommonAnnotations + p := f() + err = kt.configureBuiltinPlugin(p, c, bpt) + if err != nil { + return nil, err + } + result = append(result, p) + return + }, + builtinhelpers.PrefixTransformer: func( + kt *KustTarget, bpt builtinhelpers.BuiltinPluginType, f tFactory, tc *builtinconfig.TransformerConfig) ( + result []resmap.Transformer, err error) { + if kt.kustomization.NamePrefix == "" { + return + } + var c struct { + Prefix string `json:"prefix,omitempty" yaml:"prefix,omitempty"` + FieldSpecs []types.FieldSpec `json:"fieldSpecs,omitempty" yaml:"fieldSpecs,omitempty"` + } + c.Prefix = kt.kustomization.NamePrefix + c.FieldSpecs = tc.NamePrefix + p := f() + err = kt.configureBuiltinPlugin(p, c, bpt) + if err != nil { + return nil, err + } + result = append(result, p) + return + }, + builtinhelpers.SuffixTransformer: func( + kt *KustTarget, bpt builtinhelpers.BuiltinPluginType, f tFactory, tc *builtinconfig.TransformerConfig) ( + result []resmap.Transformer, err error) { + if kt.kustomization.NameSuffix == "" { + return + } + var c struct { + Suffix string `json:"suffix,omitempty" yaml:"suffix,omitempty"` + FieldSpecs []types.FieldSpec `json:"fieldSpecs,omitempty" yaml:"fieldSpecs,omitempty"` + } + c.Suffix = kt.kustomization.NameSuffix + c.FieldSpecs = tc.NameSuffix + p := f() + err = kt.configureBuiltinPlugin(p, c, bpt) + if err != nil { + return nil, err + } + result = append(result, p) + return + }, + builtinhelpers.ImageTagTransformer: func( + kt *KustTarget, bpt builtinhelpers.BuiltinPluginType, f tFactory, tc *builtinconfig.TransformerConfig) ( + result []resmap.Transformer, err error) { + var c struct { + ImageTag types.Image + FieldSpecs []types.FieldSpec + } + for _, args := range kt.kustomization.Images { + c.ImageTag = args + c.FieldSpecs = tc.Images + p := f() + err = kt.configureBuiltinPlugin(p, c, bpt) + if err != nil { + return nil, err + } + result = append(result, p) + } + return + }, + builtinhelpers.ReplacementTransformer: func( + kt *KustTarget, bpt builtinhelpers.BuiltinPluginType, f tFactory, _ *builtinconfig.TransformerConfig) ( + result []resmap.Transformer, err error) { + if len(kt.kustomization.Replacements) == 0 { + return + } + var c struct { + Replacements []types.ReplacementField + } + c.Replacements = kt.kustomization.Replacements + p := f() + err = kt.configureBuiltinPlugin(p, c, bpt) + if err != nil { + return nil, err + } + result = append(result, p) + return result, nil + }, + builtinhelpers.ReplicaCountTransformer: func( + kt *KustTarget, bpt builtinhelpers.BuiltinPluginType, f tFactory, tc *builtinconfig.TransformerConfig) ( + result []resmap.Transformer, err error) { + var c struct { + Replica types.Replica + FieldSpecs []types.FieldSpec + } + for _, args := range kt.kustomization.Replicas { + c.Replica = args + c.FieldSpecs = tc.Replicas + p := f() + err = kt.configureBuiltinPlugin(p, c, bpt) + if err != nil { + return nil, err + } + result = append(result, p) + } + return + }, + // No kustomization file keyword for this yet. + builtinhelpers.ValueAddTransformer: func( + kt *KustTarget, bpt builtinhelpers.BuiltinPluginType, f tFactory, tc *builtinconfig.TransformerConfig) ( + result []resmap.Transformer, err error) { + return nil, fmt.Errorf("valueadd keyword not yet defined") + }, +} diff --git a/go/internal/forked/api/internal/target/kusttarget_test.go b/go/internal/forked/api/internal/target/kusttarget_test.go new file mode 100644 index 000000000..2349106bb --- /dev/null +++ b/go/internal/forked/api/internal/target/kusttarget_test.go @@ -0,0 +1,259 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package target_test + +import ( + "encoding/base64" + "reflect" + "testing" + + "github.com/stretchr/testify/assert" + "github.com/stretchr/testify/require" + "sigs.k8s.io/kustomize/api/ifc" + "sigs.k8s.io/kustomize/api/provider" + "sigs.k8s.io/kustomize/api/resmap" + "sigs.k8s.io/kustomize/api/resource" + kusttest_test "sigs.k8s.io/kustomize/api/testutils/kusttest" + "sigs.k8s.io/kustomize/api/types" +) + +// KustTarget is primarily tested in the krusty package with +// high level tests. + +func TestLoad(t *testing.T) { + th := kusttest_test.MakeHarness(t) + expectedTypeMeta := types.TypeMeta{ + APIVersion: "kustomize.config.k8s.io/v1beta1", + Kind: "Kustomization", + } + + testCases := map[string]struct { + errContains string + content string + k types.Kustomization + }{ + "empty": { + // no content + k: types.Kustomization{ + TypeMeta: expectedTypeMeta, + }, + }, + "nonsenseLatin": { + errContains: "error converting YAML to JSON", + content: ` + Lorem ipsum dolor sit amet, consectetur + adipiscing elit, sed do eiusmod tempor + incididunt ut labore et dolore magna aliqua. + Ut enim ad minim veniam, quis nostrud + exercitation ullamco laboris nisi ut + aliquip ex ea commodo consequat. + `, + }, + "simple": { + content: ` +commonLabels: + app: nginx +`, + k: types.Kustomization{ + TypeMeta: expectedTypeMeta, + CommonLabels: map[string]string{"app": "nginx"}, + }, + }, + "commented": { + content: ` +# Licensed to the Blah Blah Software Foundation +# ... +# yada yada yada. + +commonLabels: + app: nginx +`, + k: types.Kustomization{ + TypeMeta: expectedTypeMeta, + CommonLabels: map[string]string{"app": "nginx"}, + }, + }, + } + + kt := makeKustTargetWithRf( + t, th.GetFSys(), "/", provider.NewDefaultDepProvider()) + for tn, tc := range testCases { + t.Run(tn, func(t *testing.T) { + th.WriteK("/", tc.content) + err := kt.Load() + if tc.errContains != "" { + require.NotNilf(t, err, "expected error containing: `%s`", tc.errContains) + require.Contains(t, err.Error(), tc.errContains) + } else { + require.Nilf(t, err, "got error: %v", err) + k := kt.Kustomization() + require.Condition(t, func() bool { + return reflect.DeepEqual(tc.k, k) + }, "expected %v, got %v", tc.k, k) + } + }) + } +} + +func TestMakeCustomizedResMap(t *testing.T) { + th := kusttest_test.MakeHarness(t) + th.WriteK("/whatever", ` +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization +namePrefix: foo- +nameSuffix: -bar +namespace: ns1 +commonLabels: + app: nginx +commonAnnotations: + note: This is a test annotation +resources: + - deployment.yaml + - namespace.yaml +generatorOptions: + disableNameSuffixHash: false +configMapGenerator: +- name: literalConfigMap + literals: + - DB_USERNAME=admin + - DB_PASSWORD=somepw +secretGenerator: +- name: secret + literals: + - DB_USERNAME=admin + - DB_PASSWORD=somepw + type: Opaque +patchesJson6902: +- target: + group: apps + version: v1 + kind: Deployment + name: dply1 + path: jsonpatch.json +`) + th.WriteF("/whatever/deployment.yaml", ` +apiVersion: apps/v1 +metadata: + name: dply1 +kind: Deployment +`) + th.WriteF("/whatever/namespace.yaml", ` +apiVersion: v1 +kind: Namespace +metadata: + name: ns1 +`) + th.WriteF("/whatever/jsonpatch.json", `[ + {"op": "add", "path": "/spec/replica", "value": "3"} +]`) + + pvd := provider.NewDefaultDepProvider() + resFactory := pvd.GetResourceFactory() + + resources := []*resource.Resource{ + resFactory.FromMapWithName("dply1", map[string]interface{}{ + "apiVersion": "apps/v1", + "kind": "Deployment", + "metadata": map[string]interface{}{ + "name": "foo-dply1-bar", + "namespace": "ns1", + "labels": map[string]interface{}{ + "app": "nginx", + }, + "annotations": map[string]interface{}{ + "note": "This is a test annotation", + }, + }, + "spec": map[string]interface{}{ + "replica": "3", + "selector": map[string]interface{}{ + "matchLabels": map[string]interface{}{ + "app": "nginx", + }, + }, + "template": map[string]interface{}{ + "metadata": map[string]interface{}{ + "annotations": map[string]interface{}{ + "note": "This is a test annotation", + }, + "labels": map[string]interface{}{ + "app": "nginx", + }, + }, + }, + }, + }), + resFactory.FromMapWithName("ns1", map[string]interface{}{ + "apiVersion": "v1", + "kind": "Namespace", + "metadata": map[string]interface{}{ + "name": "ns1", + "labels": map[string]interface{}{ + "app": "nginx", + }, + "annotations": map[string]interface{}{ + "note": "This is a test annotation", + }, + }, + }), + resFactory.FromMapWithName("literalConfigMap", + map[string]interface{}{ + "apiVersion": "v1", + "kind": "ConfigMap", + "metadata": map[string]interface{}{ + "name": "foo-literalConfigMap-bar-g5f6t456f5", + "namespace": "ns1", + "labels": map[string]interface{}{ + "app": "nginx", + }, + "annotations": map[string]interface{}{ + "note": "This is a test annotation", + }, + }, + "data": map[string]interface{}{ + "DB_USERNAME": "admin", + "DB_PASSWORD": "somepw", + }, + }), + resFactory.FromMapWithName("secret", + map[string]interface{}{ + "apiVersion": "v1", + "kind": "Secret", + "metadata": map[string]interface{}{ + "name": "foo-secret-bar-82c2g5f8f6", + "namespace": "ns1", + "labels": map[string]interface{}{ + "app": "nginx", + }, + "annotations": map[string]interface{}{ + "note": "This is a test annotation", + }, + }, + "type": ifc.SecretTypeOpaque, + "data": map[string]interface{}{ + "DB_USERNAME": base64.StdEncoding.EncodeToString([]byte("admin")), + "DB_PASSWORD": base64.StdEncoding.EncodeToString([]byte("somepw")), + }, + }), + } + + expected := resmap.New() + for _, r := range resources { + if err := expected.Append(r); err != nil { + t.Fatalf("unexpected error %v", err) + } + } + expected.RemoveBuildAnnotations() + expYaml, err := expected.AsYaml() + assert.NoError(t, err) + + kt := makeKustTargetWithRf(t, th.GetFSys(), "/whatever", pvd) + assert.NoError(t, kt.Load()) + actual, err := kt.MakeCustomizedResMap() + assert.NoError(t, err) + actual.RemoveBuildAnnotations() + actYaml, err := actual.AsYaml() + assert.NoError(t, err) + assert.Equal(t, string(expYaml), string(actYaml)) +} diff --git a/go/internal/forked/api/internal/target/maker_test.go b/go/internal/forked/api/internal/target/maker_test.go new file mode 100644 index 000000000..31dceac79 --- /dev/null +++ b/go/internal/forked/api/internal/target/maker_test.go @@ -0,0 +1,46 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package target_test + +import ( + "testing" + + pLdr "sigs.k8s.io/kustomize/api/internal/plugins/loader" + "sigs.k8s.io/kustomize/api/internal/target" + fLdr "sigs.k8s.io/kustomize/api/loader" + "sigs.k8s.io/kustomize/api/provider" + "sigs.k8s.io/kustomize/api/resmap" + valtest_test "sigs.k8s.io/kustomize/api/testutils/valtest" + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/filesys" +) + +func makeAndLoadKustTarget( + t *testing.T, + fSys filesys.FileSystem, + root string) *target.KustTarget { + kt := makeKustTargetWithRf(t, fSys, root, provider.NewDefaultDepProvider()) + if err := kt.Load(); err != nil { + t.Fatalf("Unexpected load error %v", err) + } + return kt +} + +func makeKustTargetWithRf( + t *testing.T, + fSys filesys.FileSystem, + root string, + pvd *provider.DepProvider) *target.KustTarget { + ldr, err := fLdr.NewLoader(fLdr.RestrictionRootOnly, root, fSys) + if err != nil { + t.Fatal(err) + } + rf := resmap.NewFactory(pvd.GetResourceFactory()) + pc := types.DisabledPluginConfig() + return target.NewKustTarget( + ldr, + valtest_test.MakeFakeValidator(), + rf, + pLdr.NewLoader(pc, rf, fSys)) +} diff --git a/go/internal/forked/api/internal/target/maker_test.go b/go/internal/forked/api/internal/target/maker_test.go new file mode 100644 index 000000000..d23216906 --- /dev/null +++ b/go/internal/forked/api/internal/target/maker_test.go @@ -0,0 +1,46 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package target_test + +import ( + "testing" + + pLdr "sigs.k8s.io/kustomize/api/internal/plugins/loader" + "sigs.k8s.io/kustomize/api/internal/target" + fLdr "sigs.k8s.io/kustomize/api/loader" + "sigs.k8s.io/kustomize/api/provider" + "sigs.k8s.io/kustomize/api/resmap" + valtest_test "sigs.k8s.io/kustomize/api/testutils/valtest" + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/filesys" +) + +func makeAndLoadKustTarget( + t *testing.T, + fSys filesys.FileSystem, + root string) *target.KustTarget { + kt := makeKustTargetWithRf(t, fSys, root, provider.NewDefaultDepProvider()) + if err := kt.Load(); err != nil { + t.Fatalf("Unexpected load error %v", err) + } + return kt +} + +func makeKustTargetWithRf( + t *testing.T, + fSys filesys.FileSystem, + root string, + pvd *provider.DepProvider) *target.KustTarget { + ldr, err := fLdr.NewLoader(fLdr.RestrictionRootOnly, root, fSys) + if err != nil { + t.Fatal(err) + } + rf := resmap.NewFactory(pvd.GetResourceFactory()) + pc := types.DisabledPluginConfig() + return target.NewKustTarget( + ldr, + valtest_test.MakeFakeValidator(), + rf, + pLdr.NewLoader(pc, rf, fSys)) +} diff --git a/go/internal/forked/api/internal/target/multitransformer.go b/go/internal/forked/api/internal/target/multitransformer.go new file mode 100644 index 000000000..3bc0a8715 --- /dev/null +++ b/go/internal/forked/api/internal/target/multitransformer.go @@ -0,0 +1,41 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package target + +import ( + "sigs.k8s.io/kustomize/api/resmap" +) + +// multiTransformer contains a list of transformers. +type multiTransformer struct { + transformers []*resmap.TransformerWithProperties +} + +var _ resmap.Transformer = &multiTransformer{} + +// newMultiTransformer constructs a multiTransformer. +func newMultiTransformer(t []*resmap.TransformerWithProperties) resmap.Transformer { + r := &multiTransformer{ + transformers: make([]*resmap.TransformerWithProperties, len(t)), + } + copy(r.transformers, t) + return r +} + +// Transform applies the member transformers in order to the resources, +// optionally detecting and erroring on commutation conflict. +func (o *multiTransformer) Transform(m resmap.ResMap) error { + for _, t := range o.transformers { + if err := t.Transform(m); err != nil { + return err + } + if t.Origin != nil { + if err := m.AddTransformerAnnotation(t.Origin); err != nil { + return err + } + } + m.DropEmpties() + } + return nil +} diff --git a/go/internal/forked/api/internal/target/vars_test.go b/go/internal/forked/api/internal/target/vars_test.go new file mode 100644 index 000000000..21c167938 --- /dev/null +++ b/go/internal/forked/api/internal/target/vars_test.go @@ -0,0 +1,188 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package target_test + +import ( + "fmt" + "strings" + "testing" + + kusttest_test "sigs.k8s.io/kustomize/api/testutils/kusttest" + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/resid" +) + +// To simplify tests, these vars specified in alphabetical order. +var someVars = []types.Var{ + { + Name: "AWARD", + ObjRef: types.Target{ + APIVersion: "v7", + Gvk: resid.Gvk{Kind: "Service"}, + Name: "nobelPrize"}, + FieldRef: types.FieldSelector{FieldPath: "some.arbitrary.path"}, + }, + { + Name: "BIRD", + ObjRef: types.Target{ + APIVersion: "v300", + Gvk: resid.Gvk{Kind: "Service"}, + Name: "heron"}, + FieldRef: types.FieldSelector{FieldPath: "metadata.name"}, + }, + { + Name: "FRUIT", + ObjRef: types.Target{ + Gvk: resid.Gvk{Kind: "Service"}, + Name: "apple"}, + FieldRef: types.FieldSelector{FieldPath: "metadata.name"}, + }, + { + Name: "VEGETABLE", + ObjRef: types.Target{ + Gvk: resid.Gvk{Kind: "Leafy"}, + Name: "kale"}, + FieldRef: types.FieldSelector{FieldPath: "metadata.name"}, + }, +} + +func TestGetAllVarsSimple(t *testing.T) { + th := kusttest_test.MakeHarness(t) + th.WriteK("/app", ` +vars: + - name: AWARD + objref: + kind: Service + name: nobelPrize + apiVersion: v7 + fieldref: + fieldpath: some.arbitrary.path + - name: BIRD + objref: + kind: Service + name: heron + apiVersion: v300 +`) + ra, err := makeAndLoadKustTarget( + t, th.GetFSys(), "/app").AccumulateTarget() + if err != nil { + t.Fatalf("Err: %v", err) + } + vars := ra.Vars() + if len(vars) != 2 { + t.Fatalf("unexpected size %d", len(vars)) + } + for i := range vars[:2] { + // By using Var.DeepEqual, we are protecting the code + // from a potential invocation of vars[i].ObjRef.GVK() + // during accumulateTarget + if !vars[i].DeepEqual(someVars[i]) { + t.Fatalf("unexpected var[%d]:\n %v\n %v", i, vars[i], someVars[i]) + } + } +} + +func TestGetAllVarsNested(t *testing.T) { + th := kusttest_test.MakeHarness(t) + th.WriteK("/app/base", ` +vars: + - name: AWARD + objref: + kind: Service + name: nobelPrize + apiVersion: v7 + fieldref: + fieldpath: some.arbitrary.path + - name: BIRD + objref: + kind: Service + name: heron + apiVersion: v300 +`) + th.WriteK("/app/overlays/o1", ` +vars: + - name: FRUIT + objref: + kind: Service + name: apple +resources: +- ../../base +`) + th.WriteK("/app/overlays/o2", ` +vars: + - name: VEGETABLE + objref: + kind: Leafy + name: kale +resources: +- ../o1 +`) + + ra, err := makeAndLoadKustTarget( + t, th.GetFSys(), "/app/overlays/o2").AccumulateTarget() + if err != nil { + t.Fatalf("Err: %v", err) + } + vars := ra.Vars() + if len(vars) != 4 { + for i, v := range vars { + fmt.Printf("%v: %v\n", i, v) + } + t.Fatalf("expected 4 vars, got %d", len(vars)) + } + for i := range vars { + // By using Var.DeepEqual, we are protecting the code + // from a potential invocation of vars[i].ObjRef.GVK() + // during accumulateTarget + if !vars[i].DeepEqual(someVars[i]) { + t.Fatalf("unexpected var[%d]:\n %v\n %v", i, vars[i], someVars[i]) + } + } +} + +func TestVarCollisionsForbidden(t *testing.T) { + th := kusttest_test.MakeHarness(t) + th.WriteK("/app/base", ` +vars: + - name: AWARD + objref: + kind: Service + name: nobelPrize + apiVersion: v7 + fieldref: + fieldpath: some.arbitrary.path + - name: BIRD + objref: + kind: Service + name: heron + apiVersion: v300 +`) + th.WriteK("/app/overlays/o1", ` +vars: + - name: AWARD + objref: + kind: Service + name: academy +resources: +- ../../base +`) + th.WriteK("/app/overlays/o2", ` +vars: + - name: VEGETABLE + objref: + kind: Leafy + name: kale +resources: +- ../o1 +`) + _, err := makeAndLoadKustTarget( + t, th.GetFSys(), "/app/overlays/o2").AccumulateTarget() + if err == nil { + t.Fatalf("expected var collision") + } + if !strings.Contains(err.Error(), + "var 'AWARD' already encountered") { + t.Fatalf("unexpected error: %v", err) + } +} diff --git a/go/internal/forked/api/internal/target/vars_test.go b/go/internal/forked/api/internal/target/vars_test.go new file mode 100644 index 000000000..bf8883903 --- /dev/null +++ b/go/internal/forked/api/internal/target/vars_test.go @@ -0,0 +1,188 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package target_test + +import ( + "fmt" + "strings" + "testing" + + kusttest_test "sigs.k8s.io/kustomize/api/testutils/kusttest" + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/resid" +) + +// To simplify tests, these vars specified in alphabetical order. +var someVars = []types.Var{ + { + Name: "AWARD", + ObjRef: types.Target{ + APIVersion: "v7", + Gvk: resid.Gvk{Kind: "Service"}, + Name: "nobelPrize"}, + FieldRef: types.FieldSelector{FieldPath: "some.arbitrary.path"}, + }, + { + Name: "BIRD", + ObjRef: types.Target{ + APIVersion: "v300", + Gvk: resid.Gvk{Kind: "Service"}, + Name: "heron"}, + FieldRef: types.FieldSelector{FieldPath: "metadata.name"}, + }, + { + Name: "FRUIT", + ObjRef: types.Target{ + Gvk: resid.Gvk{Kind: "Service"}, + Name: "apple"}, + FieldRef: types.FieldSelector{FieldPath: "metadata.name"}, + }, + { + Name: "VEGETABLE", + ObjRef: types.Target{ + Gvk: resid.Gvk{Kind: "Leafy"}, + Name: "kale"}, + FieldRef: types.FieldSelector{FieldPath: "metadata.name"}, + }, +} + +func TestGetAllVarsSimple(t *testing.T) { + th := kusttest_test.MakeHarness(t) + th.WriteK("/app", ` +vars: + - name: AWARD + objref: + kind: Service + name: nobelPrize + apiVersion: v7 + fieldref: + fieldpath: some.arbitrary.path + - name: BIRD + objref: + kind: Service + name: heron + apiVersion: v300 +`) + ra, err := makeAndLoadKustTarget( + t, th.GetFSys(), "/app").AccumulateTarget() + if err != nil { + t.Fatalf("Err: %v", err) + } + vars := ra.Vars() + if len(vars) != 2 { + t.Fatalf("unexpected size %d", len(vars)) + } + for i := range vars[:2] { + // By using Var.DeepEqual, we are protecting the code + // from a potential invocation of vars[i].ObjRef.GVK() + // during accumulateTarget + if !vars[i].DeepEqual(someVars[i]) { + t.Fatalf("unexpected var[%d]:\n %v\n %v", i, vars[i], someVars[i]) + } + } +} + +func TestGetAllVarsNested(t *testing.T) { + th := kusttest_test.MakeHarness(t) + th.WriteK("/app/base", ` +vars: + - name: AWARD + objref: + kind: Service + name: nobelPrize + apiVersion: v7 + fieldref: + fieldpath: some.arbitrary.path + - name: BIRD + objref: + kind: Service + name: heron + apiVersion: v300 +`) + th.WriteK("/app/overlays/o1", ` +vars: + - name: FRUIT + objref: + kind: Service + name: apple +resources: +- ../../base +`) + th.WriteK("/app/overlays/o2", ` +vars: + - name: VEGETABLE + objref: + kind: Leafy + name: kale +resources: +- ../o1 +`) + + ra, err := makeAndLoadKustTarget( + t, th.GetFSys(), "/app/overlays/o2").AccumulateTarget() + if err != nil { + t.Fatalf("Err: %v", err) + } + vars := ra.Vars() + if len(vars) != 4 { + for i, v := range vars { + fmt.Printf("%v: %v\n", i, v) + } + t.Fatalf("expected 4 vars, got %d", len(vars)) + } + for i := range vars { + // By using Var.DeepEqual, we are protecting the code + // from a potential invocation of vars[i].ObjRef.GVK() + // during accumulateTarget + if !vars[i].DeepEqual(someVars[i]) { + t.Fatalf("unexpected var[%d]:\n %v\n %v", i, vars[i], someVars[i]) + } + } +} + +func TestVarCollisionsForbidden(t *testing.T) { + th := kusttest_test.MakeHarness(t) + th.WriteK("/app/base", ` +vars: + - name: AWARD + objref: + kind: Service + name: nobelPrize + apiVersion: v7 + fieldref: + fieldpath: some.arbitrary.path + - name: BIRD + objref: + kind: Service + name: heron + apiVersion: v300 +`) + th.WriteK("/app/overlays/o1", ` +vars: + - name: AWARD + objref: + kind: Service + name: academy +resources: +- ../../base +`) + th.WriteK("/app/overlays/o2", ` +vars: + - name: VEGETABLE + objref: + kind: Leafy + name: kale +resources: +- ../o1 +`) + _, err := makeAndLoadKustTarget( + t, th.GetFSys(), "/app/overlays/o2").AccumulateTarget() + if err == nil { + t.Fatalf("expected var collision") + } + if !strings.Contains(err.Error(), + "var 'AWARD' already encountered") { + t.Fatalf("unexpected error: %v", err) + } +} diff --git a/go/internal/forked/api/internal/utils/annotations.go b/go/internal/forked/api/internal/utils/annotations.go new file mode 100644 index 000000000..34f3553af --- /dev/null +++ b/go/internal/forked/api/internal/utils/annotations.go @@ -0,0 +1,26 @@ +package utils + +import "sigs.k8s.io/kustomize/api/konfig" + +const ( + // build annotations + BuildAnnotationPreviousKinds = konfig.ConfigAnnoDomain + "/previousKinds" + BuildAnnotationPreviousNames = konfig.ConfigAnnoDomain + "/previousNames" + BuildAnnotationPrefixes = konfig.ConfigAnnoDomain + "/prefixes" + BuildAnnotationSuffixes = konfig.ConfigAnnoDomain + "/suffixes" + BuildAnnotationPreviousNamespaces = konfig.ConfigAnnoDomain + "/previousNamespaces" + BuildAnnotationsRefBy = konfig.ConfigAnnoDomain + "/refBy" + BuildAnnotationsGenBehavior = konfig.ConfigAnnoDomain + "/generatorBehavior" + BuildAnnotationsGenAddHashSuffix = konfig.ConfigAnnoDomain + "/needsHashSuffix" + + // the following are only for patches, to specify whether they can change names + // and kinds of their targets + BuildAnnotationAllowNameChange = konfig.ConfigAnnoDomain + "/allowNameChange" + BuildAnnotationAllowKindChange = konfig.ConfigAnnoDomain + "/allowKindChange" + + // for keeping track of origin and transformer data + OriginAnnotationKey = "config.kubernetes.io/origin" + TransformerAnnotationKey = "alpha.config.kubernetes.io/transformations" + + Enabled = "enabled" +) diff --git a/go/internal/forked/api/internal/utils/errtimeout.go b/go/internal/forked/api/internal/utils/errtimeout.go new file mode 100644 index 000000000..24b8abe66 --- /dev/null +++ b/go/internal/forked/api/internal/utils/errtimeout.go @@ -0,0 +1,36 @@ +// Copyright 2020 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package utils + +import ( + "fmt" + "time" + + "github.com/pkg/errors" +) + +type errTimeOut struct { + duration time.Duration + cmd string +} + +func NewErrTimeOut(d time.Duration, c string) errTimeOut { + return errTimeOut{duration: d, cmd: c} +} + +func (e errTimeOut) Error() string { + return fmt.Sprintf("hit %s timeout running '%s'", e.duration, e.cmd) +} + +func IsErrTimeout(err error) bool { + if err == nil { + return false + } + _, ok := err.(errTimeOut) + if ok { + return true + } + _, ok = errors.Cause(err).(errTimeOut) + return ok +} diff --git a/go/internal/forked/api/internal/utils/makeResIds.go b/go/internal/forked/api/internal/utils/makeResIds.go new file mode 100644 index 000000000..ce2bfd4ac --- /dev/null +++ b/go/internal/forked/api/internal/utils/makeResIds.go @@ -0,0 +1,64 @@ +package utils + +import ( + "fmt" + "strings" + + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/resid" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" +) + +// MakeResIds returns all of an RNode's current and previous Ids +func MakeResIds(n *yaml.RNode) ([]resid.ResId, error) { + var result []resid.ResId + apiVersion := n.Field(yaml.APIVersionField) + var group, version string + if apiVersion != nil { + group, version = resid.ParseGroupVersion(yaml.GetValue(apiVersion.Value)) + } + result = append(result, resid.NewResIdWithNamespace( + resid.Gvk{Group: group, Version: version, Kind: n.GetKind()}, n.GetName(), n.GetNamespace()), + ) + prevIds, err := PrevIds(n) + if err != nil { + return nil, err + } + result = append(result, prevIds...) + return result, nil +} + +// PrevIds returns all of an RNode's previous Ids +func PrevIds(n *yaml.RNode) ([]resid.ResId, error) { + var ids []resid.ResId + // TODO: merge previous names and namespaces into one list of + // pairs on one annotation so there is no chance of error + annotations := n.GetAnnotations() + if _, ok := annotations[BuildAnnotationPreviousNames]; !ok { + return nil, nil + } + names := strings.Split(annotations[BuildAnnotationPreviousNames], ",") + ns := strings.Split(annotations[BuildAnnotationPreviousNamespaces], ",") + kinds := strings.Split(annotations[BuildAnnotationPreviousKinds], ",") + // This should never happen + if len(names) != len(ns) || len(names) != len(kinds) { + return nil, fmt.Errorf( + "number of previous names, " + + "number of previous namespaces, " + + "number of previous kinds not equal") + } + for i := range names { + meta, err := n.GetMeta() + if err != nil { + return nil, err + } + group, version := resid.ParseGroupVersion(meta.APIVersion) + gvk := resid.Gvk{ + Group: group, + Version: version, + Kind: kinds[i], + } + ids = append(ids, resid.NewResIdWithNamespace( + gvk, names[i], ns[i])) + } + return ids, nil +} diff --git a/go/internal/forked/api/internal/utils/makeResIds.go b/go/internal/forked/api/internal/utils/makeResIds.go new file mode 100644 index 000000000..33ecd1d0b --- /dev/null +++ b/go/internal/forked/api/internal/utils/makeResIds.go @@ -0,0 +1,64 @@ +package utils + +import ( + "fmt" + "strings" + + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/resid" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/yaml" +) + +// MakeResIds returns all of an RNode's current and previous Ids +func MakeResIds(n *yaml.RNode) ([]resid.ResId, error) { + var result []resid.ResId + apiVersion := n.Field(yaml.APIVersionField) + var group, version string + if apiVersion != nil { + group, version = resid.ParseGroupVersion(yaml.GetValue(apiVersion.Value)) + } + result = append(result, resid.NewResIdWithNamespace( + resid.Gvk{Group: group, Version: version, Kind: n.GetKind()}, n.GetName(), n.GetNamespace()), + ) + prevIds, err := PrevIds(n) + if err != nil { + return nil, err + } + result = append(result, prevIds...) + return result, nil +} + +// PrevIds returns all of an RNode's previous Ids +func PrevIds(n *yaml.RNode) ([]resid.ResId, error) { + var ids []resid.ResId + // TODO: merge previous names and namespaces into one list of + // pairs on one annotation so there is no chance of error + annotations := n.GetAnnotations() + if _, ok := annotations[BuildAnnotationPreviousNames]; !ok { + return nil, nil + } + names := strings.Split(annotations[BuildAnnotationPreviousNames], ",") + ns := strings.Split(annotations[BuildAnnotationPreviousNamespaces], ",") + kinds := strings.Split(annotations[BuildAnnotationPreviousKinds], ",") + // This should never happen + if len(names) != len(ns) || len(names) != len(kinds) { + return nil, fmt.Errorf( + "number of previous names, " + + "number of previous namespaces, " + + "number of previous kinds not equal") + } + for i := range names { + meta, err := n.GetMeta() + if err != nil { + return nil, err + } + group, version := resid.ParseGroupVersion(meta.APIVersion) + gvk := resid.Gvk{ + Group: group, + Version: version, + Kind: kinds[i], + } + ids = append(ids, resid.NewResIdWithNamespace( + gvk, names[i], ns[i])) + } + return ids, nil +} diff --git a/go/internal/forked/api/internal/utils/pathsplitter.go b/go/internal/forked/api/internal/utils/pathsplitter.go new file mode 100644 index 000000000..aa560299f --- /dev/null +++ b/go/internal/forked/api/internal/utils/pathsplitter.go @@ -0,0 +1,64 @@ +// Copyright 2021 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package utils + +import "strings" + +// TODO: Move these to kyaml + +// PathSplitter splits a delimited string, permitting escaped delimiters. +func PathSplitter(path string, delimiter string) []string { + ps := strings.Split(path, delimiter) + var res []string + res = append(res, ps[0]) + for i := 1; i < len(ps); i++ { + last := len(res) - 1 + if strings.HasSuffix(res[last], `\`) { + res[last] = strings.TrimSuffix(res[last], `\`) + delimiter + ps[i] + } else { + res = append(res, ps[i]) + } + } + return res +} + +// SmarterPathSplitter splits a path, retaining bracketed elements. +// If the element is a list entry identifier (defined by the '='), +// it will retain the brackets. +// E.g. "[name=com.foo.someapp]" survives as one thing after splitting +// "spec.template.spec.containers.[name=com.foo.someapp].image" +// See kyaml/yaml/match.go for use of list entry identifiers. +// If the element is a mapping entry identifier, it will remove the +// brackets. +// E.g. "a.b.c" survives as one thing after splitting +// "metadata.annotations.[a.b.c] +// This function uses `PathSplitter`, so it also respects escaped delimiters. +func SmarterPathSplitter(path string, delimiter string) []string { + var result []string + split := PathSplitter(path, delimiter) + + for i := 0; i < len(split); i++ { + elem := split[i] + if strings.HasPrefix(elem, "[") && !strings.HasSuffix(elem, "]") { + // continue until we find the matching "]" + bracketed := []string{elem} + for i < len(split)-1 { + i++ + bracketed = append(bracketed, split[i]) + if strings.HasSuffix(split[i], "]") { + break + } + } + bracketedStr := strings.Join(bracketed, delimiter) + if strings.Contains(bracketedStr, "=") { + result = append(result, bracketedStr) + } else { + result = append(result, strings.Trim(bracketedStr, "[]")) + } + } else { + result = append(result, elem) + } + } + return result +} diff --git a/go/internal/forked/api/internal/utils/pathsplitter_test.go b/go/internal/forked/api/internal/utils/pathsplitter_test.go new file mode 100644 index 000000000..c5a6e2e2c --- /dev/null +++ b/go/internal/forked/api/internal/utils/pathsplitter_test.go @@ -0,0 +1,94 @@ +// Copyright 2021 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package utils_test + +import ( + "testing" + + "github.com/stretchr/testify/assert" + "sigs.k8s.io/kustomize/api/internal/utils" +) + +func TestPathSplitter(t *testing.T) { + for _, tc := range []struct { + exp []string + path string + }{ + { + path: "", + exp: []string{""}, + }, + { + path: "s", + exp: []string{"s"}, + }, + { + path: "a/b/c", + exp: []string{"a", "b", "c"}, + }, + { + path: `a/b[]/c`, + exp: []string{"a", "b[]", "c"}, + }, + { + path: `a/b\/c/d\/e/f`, + exp: []string{"a", "b/c", "d/e", "f"}, + }, + { + // The actual reason for this. + path: `metadata/annotations/nginx.ingress.kubernetes.io\/auth-secret`, + exp: []string{ + "metadata", + "annotations", + "nginx.ingress.kubernetes.io/auth-secret"}, + }, + } { + assert.Equal(t, tc.exp, utils.PathSplitter(tc.path, "/")) + } +} + +func TestSmarterPathSplitter(t *testing.T) { + testCases := map[string]struct { + input string + expected []string + }{ + "simple": { + input: "spec.replicas", + expected: []string{"spec", "replicas"}, + }, + "sequence": { + input: "spec.data.[name=first].key", + expected: []string{"spec", "data", "[name=first]", "key"}, + }, + "key, value with . prefix": { + input: "spec.data.[.name=.first].key", + expected: []string{"spec", "data", "[.name=.first]", "key"}, + }, + "key, value with . suffix": { + input: "spec.data.[name.=first.].key", + expected: []string{"spec", "data", "[name.=first.]", "key"}, + }, + "multiple '.' in value": { + input: "spec.data.[name=f.i.r.s.t.].key", + expected: []string{"spec", "data", "[name=f.i.r.s.t.]", "key"}, + }, + "with escaped delimiter": { + input: `spec\.replicas`, + expected: []string{`spec.replicas`}, + }, + "unmatched bracket": { + input: "spec.data.[name=f.i.[r.s.t..key", + expected: []string{"spec", "data", "[name=f.i.[r.s.t..key"}, + }, + "mapping value with .": { + input: "metadata.annotations.[a.b.c/d.e.f-g.]", + expected: []string{"metadata", "annotations", "a.b.c/d.e.f-g."}, + }, + } + for tn, tc := range testCases { + t.Run(tn, func(t *testing.T) { + assert.Equal(t, tc.expected, utils.SmarterPathSplitter(tc.input, ".")) + }) + } +} diff --git a/go/internal/forked/api/internal/utils/stringslice.go b/go/internal/forked/api/internal/utils/stringslice.go new file mode 100644 index 000000000..3dc422725 --- /dev/null +++ b/go/internal/forked/api/internal/utils/stringslice.go @@ -0,0 +1,44 @@ +// Copyright 2020 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package utils + +// StringSliceIndex returns the index of the str, else -1. +func StringSliceIndex(slice []string, str string) int { + for i := range slice { + if slice[i] == str { + return i + } + } + return -1 +} + +// StringSliceContains returns true if the slice has the string. +func StringSliceContains(slice []string, str string) bool { + for _, s := range slice { + if s == str { + return true + } + } + return false +} + +// SameEndingSubSlice returns true if the slices end the same way, e.g. +// {"a", "b", "c"}, {"b", "c"} => true +// {"a", "b", "c"}, {"a", "b"} => false +// If one slice is empty and the other is not, return false. +func SameEndingSubSlice(shortest, longest []string) bool { + if len(shortest) > len(longest) { + longest, shortest = shortest, longest + } + diff := len(longest) - len(shortest) + if len(shortest) == 0 { + return diff == 0 + } + for i := len(shortest) - 1; i >= 0; i-- { + if longest[i+diff] != shortest[i] { + return false + } + } + return true +} diff --git a/go/internal/forked/api/internal/utils/stringslice_test.go b/go/internal/forked/api/internal/utils/stringslice_test.go new file mode 100644 index 000000000..7d9717315 --- /dev/null +++ b/go/internal/forked/api/internal/utils/stringslice_test.go @@ -0,0 +1,37 @@ +// Copyright 2020 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package utils_test + +import ( + "testing" + + "github.com/stretchr/testify/assert" + "sigs.k8s.io/kustomize/api/internal/utils" +) + +func TestStringSliceIndex(t *testing.T) { + assert.Equal(t, 0, utils.StringSliceIndex([]string{"a", "b"}, "a")) + assert.Equal(t, 1, utils.StringSliceIndex([]string{"a", "b"}, "b")) + assert.Equal(t, -1, utils.StringSliceIndex([]string{"a", "b"}, "c")) + assert.Equal(t, -1, utils.StringSliceIndex([]string{}, "c")) +} + +func TestStringSliceContains(t *testing.T) { + assert.True(t, utils.StringSliceContains([]string{"a", "b"}, "a")) + assert.True(t, utils.StringSliceContains([]string{"a", "b"}, "b")) + assert.False(t, utils.StringSliceContains([]string{"a", "b"}, "c")) + assert.False(t, utils.StringSliceContains([]string{}, "c")) +} + +func TestSameEndingSubarray(t *testing.T) { + assert.True(t, utils.SameEndingSubSlice([]string{"", "a", "b"}, []string{"a", "b"})) + assert.True(t, utils.SameEndingSubSlice([]string{"a", "b", ""}, []string{"b", ""})) + assert.True(t, utils.SameEndingSubSlice([]string{"a", "b"}, []string{"a", "b"})) + assert.True(t, utils.SameEndingSubSlice([]string{"a", "b"}, []string{"b"})) + assert.True(t, utils.SameEndingSubSlice([]string{"b"}, []string{"a", "b"})) + assert.True(t, utils.SameEndingSubSlice([]string{}, []string{})) + assert.False(t, utils.SameEndingSubSlice([]string{"a", "b"}, []string{"b", "a"})) + assert.False(t, utils.SameEndingSubSlice([]string{"a", "b"}, []string{})) + assert.False(t, utils.SameEndingSubSlice([]string{"a", "b"}, []string{""})) +} diff --git a/go/internal/forked/api/internal/utils/timedcall.go b/go/internal/forked/api/internal/utils/timedcall.go new file mode 100644 index 000000000..0afadd0c3 --- /dev/null +++ b/go/internal/forked/api/internal/utils/timedcall.go @@ -0,0 +1,23 @@ +// Copyright 2020 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package utils + +import ( + "time" +) + +// TimedCall runs fn, failing if it doesn't complete in the given duration. +// The description is used in the timeout error message. +func TimedCall(description string, d time.Duration, fn func() error) error { + done := make(chan error) + timer := time.NewTimer(d) + defer timer.Stop() + go func() { done <- fn() }() + select { + case err := <-done: + return err + case <-timer.C: + return NewErrTimeOut(d, description) + } +} diff --git a/go/internal/forked/api/internal/utils/timedcall_test.go b/go/internal/forked/api/internal/utils/timedcall_test.go new file mode 100644 index 000000000..ec30267c1 --- /dev/null +++ b/go/internal/forked/api/internal/utils/timedcall_test.go @@ -0,0 +1,64 @@ +// Copyright 2020 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package utils_test + +import ( + "fmt" + "testing" + "time" + + "github.com/stretchr/testify/assert" + "sigs.k8s.io/kustomize/api/internal/utils" +) + +const ( + timeToWait = 10 * time.Millisecond + tooSlow = 2 * timeToWait +) + +func errMsg(msg string) string { + return fmt.Sprintf("hit %s timeout running '%s'", timeToWait, msg) +} + +func TestTimedCallFastNoError(t *testing.T) { + err := utils.TimedCall( + "fast no error", timeToWait, + func() error { return nil }) + if !assert.NoError(t, err) { + t.Fatal(err) + } +} + +func TestTimedCallFastWithError(t *testing.T) { + err := utils.TimedCall( + "fast with error", timeToWait, + func() error { return assert.AnError }) + if assert.Error(t, err) { + assert.EqualError(t, err, assert.AnError.Error()) + } else { + t.Fail() + } +} + +func TestTimedCallSlowNoError(t *testing.T) { + err := utils.TimedCall( + "slow no error", timeToWait, + func() error { time.Sleep(tooSlow); return nil }) + if assert.Error(t, err) { + assert.EqualError(t, err, errMsg("slow no error")) + } else { + t.Fail() + } +} + +func TestTimedCallSlowWithError(t *testing.T) { + err := utils.TimedCall( + "slow with error", timeToWait, + func() error { time.Sleep(tooSlow); return assert.AnError }) + if assert.Error(t, err) { + assert.EqualError(t, err, errMsg("slow with error")) + } else { + t.Fail() + } +} diff --git a/go/internal/forked/api/internal/validate/fieldvalidator.go b/go/internal/forked/api/internal/validate/fieldvalidator.go new file mode 100644 index 000000000..5ccfc3ce7 --- /dev/null +++ b/go/internal/forked/api/internal/validate/fieldvalidator.go @@ -0,0 +1,68 @@ +// Copyright 2020 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package validate + +import ( + "sigs.k8s.io/kustomize/api/ifc" +) + +// FieldValidator implements ifc.Validator to check +// the values of various KRM string fields, +// e.g. labels, annotations, names, namespaces. +// +// TODO: Have this use kyaml/yaml/internal/k8sgen/pkg/labels +// which has label and annotation validation code, but is internal +// so this impl would need to move to kyaml (a fine idea). +type FieldValidator struct { +} + +var _ ifc.Validator = (*FieldValidator)(nil) + +func NewFieldValidator() *FieldValidator { + return &FieldValidator{} +} + +// TODO(#FieldValidator): implement MakeAnnotationValidator +func (f FieldValidator) MakeAnnotationValidator() func(map[string]string) error { + return func(x map[string]string) error { + return nil + } +} + +// TODO(#FieldValidator): implement MakeAnnotationNameValidator +func (f FieldValidator) MakeAnnotationNameValidator() func([]string) error { + return func(x []string) error { + return nil + } +} + +// TODO(#FieldValidator): implement MakeLabelValidator +func (f FieldValidator) MakeLabelValidator() func(map[string]string) error { + return func(x map[string]string) error { + return nil + } +} + +// TODO(#FieldValidator): implement MakeLabelNameValidator +func (f FieldValidator) MakeLabelNameValidator() func([]string) error { + return func(x []string) error { + return nil + } +} + +// TODO(#FieldValidator): implement ValidateNamespace +func (f FieldValidator) ValidateNamespace(s string) []string { + var errs []string + return errs +} + +// TODO(#FieldValidator): implement ErrIfInvalidKey +func (f FieldValidator) ErrIfInvalidKey(s string) error { + return nil +} + +// TODO(#FieldValidator): implement IsEnvVarName +func (f FieldValidator) IsEnvVarName(k string) error { + return nil +} diff --git a/go/internal/forked/api/internal/validate/fieldvalidator_test.go b/go/internal/forked/api/internal/validate/fieldvalidator_test.go new file mode 100644 index 000000000..82f18775b --- /dev/null +++ b/go/internal/forked/api/internal/validate/fieldvalidator_test.go @@ -0,0 +1,4 @@ +// Copyright 2020 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package validate_test diff --git a/go/internal/forked/api/konfig/builtinpluginconsts/commonannotations.go b/go/internal/forked/api/konfig/builtinpluginconsts/commonannotations.go new file mode 100644 index 000000000..97c1d6b22 --- /dev/null +++ b/go/internal/forked/api/konfig/builtinpluginconsts/commonannotations.go @@ -0,0 +1,47 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package builtinpluginconsts + +const commonAnnotationFieldSpecs = ` +commonAnnotations: +- path: metadata/annotations + create: true + +- path: spec/template/metadata/annotations + create: true + version: v1 + kind: ReplicationController + +- path: spec/template/metadata/annotations + create: true + kind: Deployment + +- path: spec/template/metadata/annotations + create: true + kind: ReplicaSet + +- path: spec/template/metadata/annotations + create: true + kind: DaemonSet + +- path: spec/template/metadata/annotations + create: true + kind: StatefulSet + +- path: spec/template/metadata/annotations + create: true + group: batch + kind: Job + +- path: spec/jobTemplate/metadata/annotations + create: true + group: batch + kind: CronJob + +- path: spec/jobTemplate/spec/template/metadata/annotations + create: true + group: batch + kind: CronJob + +` diff --git a/go/internal/forked/api/konfig/builtinpluginconsts/commonlabels.go b/go/internal/forked/api/konfig/builtinpluginconsts/commonlabels.go new file mode 100644 index 000000000..7775a544f --- /dev/null +++ b/go/internal/forked/api/konfig/builtinpluginconsts/commonlabels.go @@ -0,0 +1,159 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package builtinpluginconsts + +const commonLabelFieldSpecs = ` +commonLabels: +- path: metadata/labels + create: true + +- path: spec/selector + create: true + version: v1 + kind: Service + +- path: spec/selector + create: true + version: v1 + kind: ReplicationController + +- path: spec/template/metadata/labels + create: true + version: v1 + kind: ReplicationController + +- path: spec/selector/matchLabels + create: true + kind: Deployment + +- path: spec/template/metadata/labels + create: true + kind: Deployment + +- path: spec/template/spec/affinity/podAffinity/preferredDuringSchedulingIgnoredDuringExecution/podAffinityTerm/labelSelector/matchLabels + create: false + group: apps + kind: Deployment + +- path: spec/template/spec/affinity/podAffinity/requiredDuringSchedulingIgnoredDuringExecution/labelSelector/matchLabels + create: false + group: apps + kind: Deployment + +- path: spec/template/spec/affinity/podAntiAffinity/preferredDuringSchedulingIgnoredDuringExecution/podAffinityTerm/labelSelector/matchLabels + create: false + group: apps + kind: Deployment + +- path: spec/template/spec/affinity/podAntiAffinity/requiredDuringSchedulingIgnoredDuringExecution/labelSelector/matchLabels + create: false + group: apps + kind: Deployment + +- path: spec/template/spec/topologySpreadConstraints/labelSelector/matchLabels + create: false + group: apps + kind: Deployment + +- path: spec/selector/matchLabels + create: true + kind: ReplicaSet + +- path: spec/template/metadata/labels + create: true + kind: ReplicaSet + +- path: spec/selector/matchLabels + create: true + kind: DaemonSet + +- path: spec/template/metadata/labels + create: true + kind: DaemonSet + +- path: spec/selector/matchLabels + create: true + group: apps + kind: StatefulSet + +- path: spec/template/metadata/labels + create: true + group: apps + kind: StatefulSet + +- path: spec/template/spec/affinity/podAffinity/preferredDuringSchedulingIgnoredDuringExecution/podAffinityTerm/labelSelector/matchLabels + create: false + group: apps + kind: StatefulSet + +- path: spec/template/spec/affinity/podAffinity/requiredDuringSchedulingIgnoredDuringExecution/labelSelector/matchLabels + create: false + group: apps + kind: StatefulSet + +- path: spec/template/spec/affinity/podAntiAffinity/preferredDuringSchedulingIgnoredDuringExecution/podAffinityTerm/labelSelector/matchLabels + create: false + group: apps + kind: StatefulSet + +- path: spec/template/spec/affinity/podAntiAffinity/requiredDuringSchedulingIgnoredDuringExecution/labelSelector/matchLabels + create: false + group: apps + kind: StatefulSet + +- path: spec/template/spec/topologySpreadConstraints/labelSelector/matchLabels + create: false + group: apps + kind: StatefulSet + +- path: spec/volumeClaimTemplates[]/metadata/labels + create: true + group: apps + kind: StatefulSet + +- path: spec/selector/matchLabels + create: false + group: batch + kind: Job + +- path: spec/template/metadata/labels + create: true + group: batch + kind: Job + +- path: spec/jobTemplate/spec/selector/matchLabels + create: false + group: batch + kind: CronJob + +- path: spec/jobTemplate/metadata/labels + create: true + group: batch + kind: CronJob + +- path: spec/jobTemplate/spec/template/metadata/labels + create: true + group: batch + kind: CronJob + +- path: spec/selector/matchLabels + create: false + group: policy + kind: PodDisruptionBudget + +- path: spec/podSelector/matchLabels + create: false + group: networking.k8s.io + kind: NetworkPolicy + +- path: spec/ingress/from/podSelector/matchLabels + create: false + group: networking.k8s.io + kind: NetworkPolicy + +- path: spec/egress/to/podSelector/matchLabels + create: false + group: networking.k8s.io + kind: NetworkPolicy +` diff --git a/go/internal/forked/api/konfig/builtinpluginconsts/defaultconfig.go b/go/internal/forked/api/konfig/builtinpluginconsts/defaultconfig.go new file mode 100644 index 000000000..29673d76a --- /dev/null +++ b/go/internal/forked/api/konfig/builtinpluginconsts/defaultconfig.go @@ -0,0 +1,40 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package builtinpluginconsts + +import ( + "bytes" +) + +// GetDefaultFieldSpecs returns default fieldSpecs. +func GetDefaultFieldSpecs() []byte { + configData := [][]byte{ + []byte(namePrefixFieldSpecs), + []byte(nameSuffixFieldSpecs), + []byte(commonLabelFieldSpecs), + []byte(commonAnnotationFieldSpecs), + []byte(namespaceFieldSpecs), + []byte(varReferenceFieldSpecs), + []byte(nameReferenceFieldSpecs), + []byte(imagesFieldSpecs), + []byte(replicasFieldSpecs), + } + return bytes.Join(configData, []byte("\n")) +} + +// GetDefaultFieldSpecsAsMap returns default fieldSpecs +// as a string->string map. +func GetDefaultFieldSpecsAsMap() map[string]string { + result := make(map[string]string) + result["nameprefix"] = namePrefixFieldSpecs + result["namesuffix"] = nameSuffixFieldSpecs + result["commonlabels"] = commonLabelFieldSpecs + result["commonannotations"] = commonAnnotationFieldSpecs + result["namespace"] = namespaceFieldSpecs + result["varreference"] = varReferenceFieldSpecs + result["namereference"] = nameReferenceFieldSpecs + result["images"] = imagesFieldSpecs + result["replicas"] = replicasFieldSpecs + return result +} diff --git a/go/internal/forked/api/konfig/builtinpluginconsts/doc.go b/go/internal/forked/api/konfig/builtinpluginconsts/doc.go new file mode 100644 index 000000000..4b7b5faac --- /dev/null +++ b/go/internal/forked/api/konfig/builtinpluginconsts/doc.go @@ -0,0 +1,8 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +// Package builtinpluginconsts provides builtin plugin +// configuration data. Builtin plugins can also be +// configured individually with plugin config files, +// in which case the constants in this package are ignored. +package builtinpluginconsts diff --git a/go/internal/forked/api/konfig/builtinpluginconsts/images.go b/go/internal/forked/api/konfig/builtinpluginconsts/images.go new file mode 100644 index 000000000..b8d8bf1e3 --- /dev/null +++ b/go/internal/forked/api/konfig/builtinpluginconsts/images.go @@ -0,0 +1,18 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package builtinpluginconsts + +const ( + imagesFieldSpecs = ` +images: +- path: spec/containers[]/image + create: true +- path: spec/initContainers[]/image + create: true +- path: spec/template/spec/containers[]/image + create: true +- path: spec/template/spec/initContainers[]/image + create: true +` +) diff --git a/go/internal/forked/api/konfig/builtinpluginconsts/nameprefix.go b/go/internal/forked/api/konfig/builtinpluginconsts/nameprefix.go new file mode 100644 index 000000000..59a25a61f --- /dev/null +++ b/go/internal/forked/api/konfig/builtinpluginconsts/nameprefix.go @@ -0,0 +1,11 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package builtinpluginconsts + +const ( + namePrefixFieldSpecs = ` +namePrefix: +- path: metadata/name +` +) diff --git a/go/internal/forked/api/konfig/builtinpluginconsts/namereference.go b/go/internal/forked/api/konfig/builtinpluginconsts/namereference.go new file mode 100644 index 000000000..724e9a996 --- /dev/null +++ b/go/internal/forked/api/konfig/builtinpluginconsts/namereference.go @@ -0,0 +1,403 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package builtinpluginconsts + +// LINT.IfChange +const ( + nameReferenceFieldSpecs = ` +nameReference: +- kind: Deployment + fieldSpecs: + - path: spec/scaleTargetRef/name + kind: HorizontalPodAutoscaler + +- kind: ReplicationController + fieldSpecs: + - path: spec/scaleTargetRef/name + kind: HorizontalPodAutoscaler + +- kind: ReplicaSet + fieldSpecs: + - path: spec/scaleTargetRef/name + kind: HorizontalPodAutoscaler + +- kind: StatefulSet + fieldSpecs: + - path: spec/scaleTargetRef/name + kind: HorizontalPodAutoscaler + +- kind: ConfigMap + version: v1 + fieldSpecs: + - path: spec/volumes/configMap/name + version: v1 + kind: Pod + - path: spec/containers/env/valueFrom/configMapKeyRef/name + version: v1 + kind: Pod + - path: spec/initContainers/env/valueFrom/configMapKeyRef/name + version: v1 + kind: Pod + - path: spec/containers/envFrom/configMapRef/name + version: v1 + kind: Pod + - path: spec/initContainers/envFrom/configMapRef/name + version: v1 + kind: Pod + - path: spec/volumes/projected/sources/configMap/name + version: v1 + kind: Pod + - path: template/spec/volumes/configMap/name + kind: PodTemplate + - path: spec/template/spec/volumes/configMap/name + kind: Deployment + - path: spec/template/spec/containers/env/valueFrom/configMapKeyRef/name + kind: Deployment + - path: spec/template/spec/initContainers/env/valueFrom/configMapKeyRef/name + kind: Deployment + - path: spec/template/spec/containers/envFrom/configMapRef/name + kind: Deployment + - path: spec/template/spec/initContainers/envFrom/configMapRef/name + kind: Deployment + - path: spec/template/spec/volumes/projected/sources/configMap/name + kind: Deployment + - path: spec/template/spec/volumes/configMap/name + kind: ReplicaSet + - path: spec/template/spec/containers/env/valueFrom/configMapKeyRef/name + kind: ReplicaSet + - path: spec/template/spec/initContainers/env/valueFrom/configMapKeyRef/name + kind: ReplicaSet + - path: spec/template/spec/containers/envFrom/configMapRef/name + kind: ReplicaSet + - path: spec/template/spec/initContainers/envFrom/configMapRef/name + kind: ReplicaSet + - path: spec/template/spec/volumes/projected/sources/configMap/name + kind: ReplicaSet + - path: spec/template/spec/volumes/configMap/name + kind: DaemonSet + - path: spec/template/spec/containers/env/valueFrom/configMapKeyRef/name + kind: DaemonSet + - path: spec/template/spec/initContainers/env/valueFrom/configMapKeyRef/name + kind: DaemonSet + - path: spec/template/spec/containers/envFrom/configMapRef/name + kind: DaemonSet + - path: spec/template/spec/initContainers/envFrom/configMapRef/name + kind: DaemonSet + - path: spec/template/spec/volumes/projected/sources/configMap/name + kind: DaemonSet + - path: spec/template/spec/volumes/configMap/name + kind: StatefulSet + - path: spec/template/spec/containers/env/valueFrom/configMapKeyRef/name + kind: StatefulSet + - path: spec/template/spec/initContainers/env/valueFrom/configMapKeyRef/name + kind: StatefulSet + - path: spec/template/spec/containers/envFrom/configMapRef/name + kind: StatefulSet + - path: spec/template/spec/initContainers/envFrom/configMapRef/name + kind: StatefulSet + - path: spec/template/spec/volumes/projected/sources/configMap/name + kind: StatefulSet + - path: spec/template/spec/volumes/configMap/name + kind: Job + - path: spec/template/spec/containers/env/valueFrom/configMapKeyRef/name + kind: Job + - path: spec/template/spec/initContainers/env/valueFrom/configMapKeyRef/name + kind: Job + - path: spec/template/spec/containers/envFrom/configMapRef/name + kind: Job + - path: spec/template/spec/initContainers/envFrom/configMapRef/name + kind: Job + - path: spec/template/spec/volumes/projected/sources/configMap/name + kind: Job + - path: spec/jobTemplate/spec/template/spec/volumes/configMap/name + kind: CronJob + - path: spec/jobTemplate/spec/template/spec/volumes/projected/sources/configMap/name + kind: CronJob + - path: spec/jobTemplate/spec/template/spec/containers/env/valueFrom/configMapKeyRef/name + kind: CronJob + - path: spec/jobTemplate/spec/template/spec/initContainers/env/valueFrom/configMapKeyRef/name + kind: CronJob + - path: spec/jobTemplate/spec/template/spec/containers/envFrom/configMapRef/name + kind: CronJob + - path: spec/jobTemplate/spec/template/spec/initContainers/envFrom/configMapRef/name + kind: CronJob + - path: spec/configSource/configMap + kind: Node + - path: rules/resourceNames + kind: Role + - path: rules/resourceNames + kind: ClusterRole + - path: metadata/annotations/nginx.ingress.kubernetes.io\/fastcgi-params-configmap + kind: Ingress + +- kind: Secret + version: v1 + fieldSpecs: + - path: spec/volumes/secret/secretName + version: v1 + kind: Pod + - path: spec/containers/env/valueFrom/secretKeyRef/name + version: v1 + kind: Pod + - path: spec/initContainers/env/valueFrom/secretKeyRef/name + version: v1 + kind: Pod + - path: spec/containers/envFrom/secretRef/name + version: v1 + kind: Pod + - path: spec/initContainers/envFrom/secretRef/name + version: v1 + kind: Pod + - path: spec/imagePullSecrets/name + version: v1 + kind: Pod + - path: spec/volumes/projected/sources/secret/name + version: v1 + kind: Pod + - path: spec/template/spec/volumes/secret/secretName + kind: Deployment + - path: spec/template/spec/containers/env/valueFrom/secretKeyRef/name + kind: Deployment + - path: spec/template/spec/initContainers/env/valueFrom/secretKeyRef/name + kind: Deployment + - path: spec/template/spec/containers/envFrom/secretRef/name + kind: Deployment + - path: spec/template/spec/initContainers/envFrom/secretRef/name + kind: Deployment + - path: spec/template/spec/imagePullSecrets/name + kind: Deployment + - path: spec/template/spec/volumes/projected/sources/secret/name + kind: Deployment + - path: spec/template/spec/volumes/secret/secretName + kind: ReplicaSet + - path: spec/template/spec/containers/env/valueFrom/secretKeyRef/name + kind: ReplicaSet + - path: spec/template/spec/initContainers/env/valueFrom/secretKeyRef/name + kind: ReplicaSet + - path: spec/template/spec/containers/envFrom/secretRef/name + kind: ReplicaSet + - path: spec/template/spec/initContainers/envFrom/secretRef/name + kind: ReplicaSet + - path: spec/template/spec/imagePullSecrets/name + kind: ReplicaSet + - path: spec/template/spec/volumes/projected/sources/secret/name + kind: ReplicaSet + - path: spec/template/spec/volumes/secret/secretName + kind: DaemonSet + - path: spec/template/spec/containers/env/valueFrom/secretKeyRef/name + kind: DaemonSet + - path: spec/template/spec/initContainers/env/valueFrom/secretKeyRef/name + kind: DaemonSet + - path: spec/template/spec/containers/envFrom/secretRef/name + kind: DaemonSet + - path: spec/template/spec/initContainers/envFrom/secretRef/name + kind: DaemonSet + - path: spec/template/spec/imagePullSecrets/name + kind: DaemonSet + - path: spec/template/spec/volumes/projected/sources/secret/name + kind: DaemonSet + - path: spec/template/spec/volumes/secret/secretName + kind: StatefulSet + - path: spec/template/spec/containers/env/valueFrom/secretKeyRef/name + kind: StatefulSet + - path: spec/template/spec/initContainers/env/valueFrom/secretKeyRef/name + kind: StatefulSet + - path: spec/template/spec/containers/envFrom/secretRef/name + kind: StatefulSet + - path: spec/template/spec/initContainers/envFrom/secretRef/name + kind: StatefulSet + - path: spec/template/spec/imagePullSecrets/name + kind: StatefulSet + - path: spec/template/spec/volumes/projected/sources/secret/name + kind: StatefulSet + - path: spec/template/spec/volumes/secret/secretName + kind: Job + - path: spec/template/spec/containers/env/valueFrom/secretKeyRef/name + kind: Job + - path: spec/template/spec/initContainers/env/valueFrom/secretKeyRef/name + kind: Job + - path: spec/template/spec/containers/envFrom/secretRef/name + kind: Job + - path: spec/template/spec/initContainers/envFrom/secretRef/name + kind: Job + - path: spec/template/spec/imagePullSecrets/name + kind: Job + - path: spec/template/spec/volumes/projected/sources/secret/name + kind: Job + - path: spec/jobTemplate/spec/template/spec/volumes/secret/secretName + kind: CronJob + - path: spec/jobTemplate/spec/template/spec/volumes/projected/sources/secret/name + kind: CronJob + - path: spec/jobTemplate/spec/template/spec/containers/env/valueFrom/secretKeyRef/name + kind: CronJob + - path: spec/jobTemplate/spec/template/spec/initContainers/env/valueFrom/secretKeyRef/name + kind: CronJob + - path: spec/jobTemplate/spec/template/spec/containers/envFrom/secretRef/name + kind: CronJob + - path: spec/jobTemplate/spec/template/spec/initContainers/envFrom/secretRef/name + kind: CronJob + - path: spec/jobTemplate/spec/template/spec/imagePullSecrets/name + kind: CronJob + - path: spec/tls/secretName + kind: Ingress + - path: metadata/annotations/ingress.kubernetes.io\/auth-secret + kind: Ingress + - path: metadata/annotations/nginx.ingress.kubernetes.io\/auth-secret + kind: Ingress + - path: metadata/annotations/nginx.ingress.kubernetes.io\/auth-tls-secret + kind: Ingress + - path: spec/tls/secretName + kind: Ingress + - path: imagePullSecrets/name + kind: ServiceAccount + - path: parameters/secretName + kind: StorageClass + - path: parameters/adminSecretName + kind: StorageClass + - path: parameters/userSecretName + kind: StorageClass + - path: parameters/secretRef + kind: StorageClass + - path: rules/resourceNames + kind: Role + - path: rules/resourceNames + kind: ClusterRole + - path: spec/template/spec/containers/env/valueFrom/secretKeyRef/name + kind: Service + group: serving.knative.dev + version: v1 + - path: spec/azureFile/secretName + kind: PersistentVolume + +- kind: Service + version: v1 + fieldSpecs: + - path: spec/serviceName + kind: StatefulSet + group: apps + - path: spec/rules/http/paths/backend/serviceName + kind: Ingress + - path: spec/backend/serviceName + kind: Ingress + - path: spec/rules/http/paths/backend/service/name + kind: Ingress + - path: spec/defaultBackend/service/name + kind: Ingress + - path: spec/service/name + kind: APIService + group: apiregistration.k8s.io + - path: webhooks/clientConfig/service + kind: ValidatingWebhookConfiguration + group: admissionregistration.k8s.io + - path: webhooks/clientConfig/service + kind: MutatingWebhookConfiguration + group: admissionregistration.k8s.io + +- kind: Role + group: rbac.authorization.k8s.io + fieldSpecs: + - path: roleRef/name + kind: RoleBinding + group: rbac.authorization.k8s.io + +- kind: ClusterRole + group: rbac.authorization.k8s.io + fieldSpecs: + - path: roleRef/name + kind: RoleBinding + group: rbac.authorization.k8s.io + - path: roleRef/name + kind: ClusterRoleBinding + group: rbac.authorization.k8s.io + +- kind: ServiceAccount + version: v1 + fieldSpecs: + - path: subjects + kind: RoleBinding + group: rbac.authorization.k8s.io + - path: subjects + kind: ClusterRoleBinding + group: rbac.authorization.k8s.io + - path: spec/serviceAccountName + kind: Pod + - path: spec/template/spec/serviceAccountName + kind: StatefulSet + - path: spec/template/spec/serviceAccountName + kind: Deployment + - path: spec/template/spec/serviceAccountName + kind: ReplicationController + - path: spec/jobTemplate/spec/template/spec/serviceAccountName + kind: CronJob + - path: spec/template/spec/serviceAccountName + kind: Job + - path: spec/template/spec/serviceAccountName + kind: DaemonSet + +- kind: PersistentVolumeClaim + version: v1 + fieldSpecs: + - path: spec/volumes/persistentVolumeClaim/claimName + kind: Pod + - path: spec/template/spec/volumes/persistentVolumeClaim/claimName + kind: StatefulSet + - path: spec/template/spec/volumes/persistentVolumeClaim/claimName + kind: Deployment + - path: spec/template/spec/volumes/persistentVolumeClaim/claimName + kind: ReplicationController + - path: spec/jobTemplate/spec/template/spec/volumes/persistentVolumeClaim/claimName + kind: CronJob + - path: spec/template/spec/volumes/persistentVolumeClaim/claimName + kind: Job + - path: spec/template/spec/volumes/persistentVolumeClaim/claimName + kind: DaemonSet + +- kind: PersistentVolume + version: v1 + fieldSpecs: + - path: spec/volumeName + kind: PersistentVolumeClaim + - path: rules/resourceNames + kind: ClusterRole + +- kind: StorageClass + version: v1 + group: storage.k8s.io + fieldSpecs: + - path: spec/storageClassName + kind: PersistentVolume + - path: spec/storageClassName + kind: PersistentVolumeClaim + - path: spec/volumeClaimTemplates/spec/storageClassName + kind: StatefulSet + +- kind: PriorityClass + version: v1 + group: scheduling.k8s.io + fieldSpecs: + - path: spec/priorityClassName + kind: Pod + - path: spec/template/spec/priorityClassName + kind: StatefulSet + - path: spec/template/spec/priorityClassName + kind: Deployment + - path: spec/template/spec/priorityClassName + kind: ReplicationController + - path: spec/jobTemplate/spec/template/spec/priorityClassName + kind: CronJob + - path: spec/template/spec/priorityClassName + kind: Job + - path: spec/template/spec/priorityClassName + kind: DaemonSet + +- kind: IngressClass + version: v1 + group: networking.k8s.io/v1 + fieldSpecs: + - path: spec/ingressClassName + kind: Ingress +` +) + +// LINT.ThenChange(/examples/transformerconfigs/README.md) diff --git a/go/internal/forked/api/konfig/builtinpluginconsts/namespace.go b/go/internal/forked/api/konfig/builtinpluginconsts/namespace.go new file mode 100644 index 000000000..a35ef9c6f --- /dev/null +++ b/go/internal/forked/api/konfig/builtinpluginconsts/namespace.go @@ -0,0 +1,26 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package builtinpluginconsts + +const ( + namespaceFieldSpecs = ` +namespace: +- path: metadata/namespace + create: true +- path: metadata/name + kind: Namespace + create: true +- path: subjects + kind: RoleBinding +- path: subjects + kind: ClusterRoleBinding +- path: spec/service/namespace + group: apiregistration.k8s.io + kind: APIService + create: true +- path: spec/conversion/webhook/clientConfig/service/namespace + group: apiextensions.k8s.io + kind: CustomResourceDefinition +` +) diff --git a/go/internal/forked/api/konfig/builtinpluginconsts/namesuffix.go b/go/internal/forked/api/konfig/builtinpluginconsts/namesuffix.go new file mode 100644 index 000000000..11592bd2b --- /dev/null +++ b/go/internal/forked/api/konfig/builtinpluginconsts/namesuffix.go @@ -0,0 +1,11 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package builtinpluginconsts + +const ( + nameSuffixFieldSpecs = ` +nameSuffix: +- path: metadata/name +` +) diff --git a/go/internal/forked/api/konfig/builtinpluginconsts/replicas.go b/go/internal/forked/api/konfig/builtinpluginconsts/replicas.go new file mode 100644 index 000000000..76549c21f --- /dev/null +++ b/go/internal/forked/api/konfig/builtinpluginconsts/replicas.go @@ -0,0 +1,23 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package builtinpluginconsts + +const replicasFieldSpecs = ` +replicas: +- path: spec/replicas + create: true + kind: Deployment + +- path: spec/replicas + create: true + kind: ReplicationController + +- path: spec/replicas + create: true + kind: ReplicaSet + +- path: spec/replicas + create: true + kind: StatefulSet +` diff --git a/go/internal/forked/api/konfig/builtinpluginconsts/varreference.go b/go/internal/forked/api/konfig/builtinpluginconsts/varreference.go new file mode 100644 index 000000000..f4011d825 --- /dev/null +++ b/go/internal/forked/api/konfig/builtinpluginconsts/varreference.go @@ -0,0 +1,223 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package builtinpluginconsts + +const ( + varReferenceFieldSpecs = ` +varReference: +- path: spec/jobTemplate/spec/template/spec/containers/args + kind: CronJob + +- path: spec/jobTemplate/spec/template/spec/containers/command + kind: CronJob + +- path: spec/jobTemplate/spec/template/spec/containers/env/value + kind: CronJob + +- path: spec/jobTemplate/spec/template/spec/containers/volumeMounts/mountPath + kind: CronJob + +- path: spec/jobTemplate/spec/template/spec/initContainers/args + kind: CronJob + +- path: spec/jobTemplate/spec/template/spec/initContainers/command + kind: CronJob + +- path: spec/jobTemplate/spec/template/spec/initContainers/env/value + kind: CronJob + +- path: spec/jobTemplate/spec/template/spec/initContainers/volumeMounts/mountPath + kind: CronJob + +- path: spec/jobTemplate/spec/template/volumes/nfs/server + kind: CronJob + +- path: spec/template/spec/containers/args + kind: DaemonSet + +- path: spec/template/spec/containers/command + kind: DaemonSet + +- path: spec/template/spec/containers/env/value + kind: DaemonSet + +- path: spec/template/spec/containers/volumeMounts/mountPath + kind: DaemonSet + +- path: spec/template/spec/initContainers/args + kind: DaemonSet + +- path: spec/template/spec/initContainers/command + kind: DaemonSet + +- path: spec/template/spec/initContainers/env/value + kind: DaemonSet + +- path: spec/template/spec/initContainers/volumeMounts/mountPath + kind: DaemonSet + +- path: spec/template/spec/volumes/nfs/server + kind: DaemonSet + +- path: spec/template/spec/containers/args + kind: Deployment + +- path: spec/template/spec/containers/command + kind: Deployment + +- path: spec/template/spec/containers/env/value + kind: Deployment + +- path: spec/template/spec/containers/volumeMounts/mountPath + kind: Deployment + +- path: spec/template/spec/initContainers/args + kind: Deployment + +- path: spec/template/spec/initContainers/command + kind: Deployment + +- path: spec/template/spec/initContainers/env/value + kind: Deployment + +- path: spec/template/spec/initContainers/volumeMounts/mountPath + kind: Deployment + +- path: spec/template/spec/volumes/nfs/server + kind: Deployment + +- path: spec/template/metadata/annotations + kind: Deployment + +- path: spec/rules/host + kind: Ingress + +- path: spec/tls/hosts + kind: Ingress + +- path: spec/tls/secretName + kind: Ingress + +- path: spec/template/spec/containers/args + kind: Job + +- path: spec/template/spec/containers/command + kind: Job + +- path: spec/template/spec/containers/env/value + kind: Job + +- path: spec/template/spec/containers/volumeMounts/mountPath + kind: Job + +- path: spec/template/spec/initContainers/args + kind: Job + +- path: spec/template/spec/initContainers/command + kind: Job + +- path: spec/template/spec/initContainers/env/value + kind: Job + +- path: spec/template/spec/initContainers/volumeMounts/mountPath + kind: Job + +- path: spec/template/spec/volumes/nfs/server + kind: Job + +- path: spec/containers/args + kind: Pod + +- path: spec/containers/command + kind: Pod + +- path: spec/containers/env/value + kind: Pod + +- path: spec/containers/volumeMounts/mountPath + kind: Pod + +- path: spec/initContainers/args + kind: Pod + +- path: spec/initContainers/command + kind: Pod + +- path: spec/initContainers/env/value + kind: Pod + +- path: spec/initContainers/volumeMounts/mountPath + kind: Pod + +- path: spec/volumes/nfs/server + kind: Pod + +- path: spec/template/spec/containers/args + kind: ReplicaSet + +- path: spec/template/spec/containers/command + kind: ReplicaSet + +- path: spec/template/spec/containers/env/value + kind: ReplicaSet + +- path: spec/template/spec/containers/volumeMounts/mountPath + kind: ReplicaSet + +- path: spec/template/spec/initContainers/args + kind: ReplicaSet + +- path: spec/template/spec/initContainers/command + kind: ReplicaSet + +- path: spec/template/spec/initContainers/env/value + kind: ReplicaSet + +- path: spec/template/spec/initContainers/volumeMounts/mountPath + kind: ReplicaSet + +- path: spec/template/spec/volumes/nfs/server + kind: ReplicaSet + +- path: spec/ports/port + kind: Service + +- path: spec/ports/targetPort + kind: Service + +- path: spec/template/spec/containers/args + kind: StatefulSet + +- path: spec/template/spec/containers/command + kind: StatefulSet + +- path: spec/template/spec/containers/env/value + kind: StatefulSet + +- path: spec/template/spec/containers/volumeMounts/mountPath + kind: StatefulSet + +- path: spec/template/spec/initContainers/args + kind: StatefulSet + +- path: spec/template/spec/initContainers/command + kind: StatefulSet + +- path: spec/template/spec/initContainers/env/value + kind: StatefulSet + +- path: spec/template/spec/initContainers/volumeMounts/mountPath + kind: StatefulSet + +- path: spec/volumeClaimTemplates/spec/nfs/server + kind: StatefulSet + +- path: spec/nfs/server + kind: PersistentVolume + +- path: metadata/labels + +- path: metadata/annotations +` +) diff --git a/go/internal/forked/api/konfig/doc.go b/go/internal/forked/api/konfig/doc.go new file mode 100644 index 000000000..8c5f8f2cd --- /dev/null +++ b/go/internal/forked/api/konfig/doc.go @@ -0,0 +1,7 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +// Package konfig provides configuration methods and constants +// for the kustomize API, e.g. the set of file names to look for +// to identify a kustomization root. +package konfig diff --git a/go/internal/forked/api/konfig/general.go b/go/internal/forked/api/konfig/general.go new file mode 100644 index 000000000..712bfe789 --- /dev/null +++ b/go/internal/forked/api/konfig/general.go @@ -0,0 +1,49 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package konfig + +// RecognizedKustomizationFileNames is a list of file names +// that kustomize recognizes. +// To avoid ambiguity, a kustomization directory may not +// contain more than one match to this list. +func RecognizedKustomizationFileNames() []string { + return []string{ + "kustomization.yaml", + "kustomization.yml", + "Kustomization", + } +} + +func DefaultKustomizationFileName() string { + return RecognizedKustomizationFileNames()[0] +} + +const ( + // An environment variable to consult for kustomization + // configuration data. See: + // https://specifications.freedesktop.org/basedir-spec/basedir-spec-latest.html + XdgConfigHomeEnv = "XDG_CONFIG_HOME" + + // Use this when XdgConfigHomeEnv not defined. + XdgConfigHomeEnvDefault = ".config" + + // A program name, for use in help, finding the XDG_CONFIG_DIR, etc. + ProgramName = "kustomize" + + // ConfigAnnoDomain is internal configuration-related annotation namespace. + // See https://github.com/kubernetes-sigs/kustomize/blob/master/cmd/config/docs/api-conventions/functions-spec.md. + ConfigAnnoDomain = "internal.config.kubernetes.io" + + // If a resource has this annotation, kustomize will drop it. + IgnoredByKustomizeAnnotation = "config.kubernetes.io/local-config" + + // Label key that indicates the resources are built from Kustomize + ManagedbyLabelKey = "app.kubernetes.io/managed-by" + + // An environment variable to turn on/off adding the ManagedByLabelKey + EnableManagedbyLabelEnv = "KUSTOMIZE_ENABLE_MANAGEDBY_LABEL" + + // Label key that indicates the resources are validated by a validator + ValidatedByLabelKey = "validated-by" +) diff --git a/go/internal/forked/api/konfig/plugins.go b/go/internal/forked/api/konfig/plugins.go new file mode 100644 index 000000000..e4c9cb302 --- /dev/null +++ b/go/internal/forked/api/konfig/plugins.go @@ -0,0 +1,138 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package konfig + +import ( + "os" + "path/filepath" + "runtime" + + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/filesys" +) + +const ( + // Symbol that must be used inside Go plugins. + PluginSymbol = "KustomizePlugin" + + // Name of environment variable used to set AbsPluginHome. + // See that variable for an explanation. + KustomizePluginHomeEnv = "KUSTOMIZE_PLUGIN_HOME" + + // Relative path below XDG_CONFIG_HOME/kustomize to find plugins. + // e.g. AbsPluginHome = XDG_CONFIG_HOME/kustomize/plugin + RelPluginHome = "plugin" + + // Location of builtin plugins below AbsPluginHome. + BuiltinPluginPackage = "builtin" + + // The value of kubernetes ApiVersion to use in configuration + // files for builtin plugins. + // The value for non-builtins can be anything. + BuiltinPluginApiVersion = BuiltinPluginPackage + + // Domain from which kustomize code is imported, for locating + // plugin source code under $GOPATH when GOPATH is defined. + DomainName = "sigs.k8s.io" + + // Injected into plugin paths when plugins are disabled. + // Provides a clue in flows that shouldn't happen. + NoPluginHomeSentinal = "/No/non-builtin/plugins!" +) + +type NotedFunc struct { + Note string + F func() string +} + +// DefaultAbsPluginHome returns the absolute path in the given file +// system to first directory that looks like a good candidate for +// the home of kustomize plugins. +func DefaultAbsPluginHome(fSys filesys.FileSystem) (string, error) { + return FirstDirThatExistsElseError( + "plugin root", fSys, []NotedFunc{ + { + Note: "homed in $" + KustomizePluginHomeEnv, + F: func() string { + return os.Getenv(KustomizePluginHomeEnv) + }, + }, + { + Note: "homed in $" + XdgConfigHomeEnv, + F: func() string { + if root := os.Getenv(XdgConfigHomeEnv); root != "" { + return filepath.Join(root, ProgramName, RelPluginHome) + } + // do not look in "kustomize/plugin" if XdgConfigHomeEnv is unset + return "" + }, + }, + { + Note: "homed in default value of $" + XdgConfigHomeEnv, + F: func() string { + return filepath.Join( + HomeDir(), XdgConfigHomeEnvDefault, + ProgramName, RelPluginHome) + }, + }, + { + Note: "homed in home directory", + F: func() string { + return filepath.Join( + HomeDir(), ProgramName, RelPluginHome) + }, + }, + }) +} + +// FirstDirThatExistsElseError tests different path functions for +// existence, returning the first that works, else error if all fail. +func FirstDirThatExistsElseError( + what string, + fSys filesys.FileSystem, + pathFuncs []NotedFunc) (string, error) { + var nope []types.Pair + for _, dt := range pathFuncs { + if dir := dt.F(); dir != "" { + if fSys.Exists(dir) { + return dir, nil + } + nope = append(nope, types.Pair{Key: dt.Note, Value: dir}) + } else { + nope = append(nope, types.Pair{Key: dt.Note, Value: ""}) + } + } + return "", types.NewErrUnableToFind(what, nope) +} + +func HomeDir() string { + home := os.Getenv(homeEnv()) + if len(home) > 0 { + return home + } + return "~" +} + +func homeEnv() string { + if runtime.GOOS == "windows" { + return "USERPROFILE" + } + return "HOME" +} + +func CurrentWorkingDir() string { + // Try for full path first to be explicit. + pwd := os.Getenv(pwdEnv()) + if len(pwd) > 0 { + return pwd + } + return filesys.SelfDir +} + +func pwdEnv() string { + if runtime.GOOS == "windows" { + return "CD" + } + return "PWD" +} diff --git a/go/internal/forked/api/konfig/plugins.go b/go/internal/forked/api/konfig/plugins.go new file mode 100644 index 000000000..fefa6e591 --- /dev/null +++ b/go/internal/forked/api/konfig/plugins.go @@ -0,0 +1,138 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package konfig + +import ( + "os" + "path/filepath" + "runtime" + + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/filesys" +) + +const ( + // Symbol that must be used inside Go plugins. + PluginSymbol = "KustomizePlugin" + + // Name of environment variable used to set AbsPluginHome. + // See that variable for an explanation. + KustomizePluginHomeEnv = "KUSTOMIZE_PLUGIN_HOME" + + // Relative path below XDG_CONFIG_HOME/kustomize to find plugins. + // e.g. AbsPluginHome = XDG_CONFIG_HOME/kustomize/plugin + RelPluginHome = "plugin" + + // Location of builtin plugins below AbsPluginHome. + BuiltinPluginPackage = "builtin" + + // The value of kubernetes ApiVersion to use in configuration + // files for builtin plugins. + // The value for non-builtins can be anything. + BuiltinPluginApiVersion = BuiltinPluginPackage + + // Domain from which kustomize code is imported, for locating + // plugin source code under $GOPATH when GOPATH is defined. + DomainName = "sigs.k8s.io" + + // Injected into plugin paths when plugins are disabled. + // Provides a clue in flows that shouldn't happen. + NoPluginHomeSentinal = "/No/non-builtin/plugins!" +) + +type NotedFunc struct { + Note string + F func() string +} + +// DefaultAbsPluginHome returns the absolute path in the given file +// system to first directory that looks like a good candidate for +// the home of kustomize plugins. +func DefaultAbsPluginHome(fSys filesys.FileSystem) (string, error) { + return FirstDirThatExistsElseError( + "plugin root", fSys, []NotedFunc{ + { + Note: "homed in $" + KustomizePluginHomeEnv, + F: func() string { + return os.Getenv(KustomizePluginHomeEnv) + }, + }, + { + Note: "homed in $" + XdgConfigHomeEnv, + F: func() string { + if root := os.Getenv(XdgConfigHomeEnv); root != "" { + return filepath.Join(root, ProgramName, RelPluginHome) + } + // do not look in "kustomize/plugin" if XdgConfigHomeEnv is unset + return "" + }, + }, + { + Note: "homed in default value of $" + XdgConfigHomeEnv, + F: func() string { + return filepath.Join( + HomeDir(), XdgConfigHomeEnvDefault, + ProgramName, RelPluginHome) + }, + }, + { + Note: "homed in home directory", + F: func() string { + return filepath.Join( + HomeDir(), ProgramName, RelPluginHome) + }, + }, + }) +} + +// FirstDirThatExistsElseError tests different path functions for +// existence, returning the first that works, else error if all fail. +func FirstDirThatExistsElseError( + what string, + fSys filesys.FileSystem, + pathFuncs []NotedFunc) (string, error) { + var nope []types.Pair + for _, dt := range pathFuncs { + if dir := dt.F(); dir != "" { + if fSys.Exists(dir) { + return dir, nil + } + nope = append(nope, types.Pair{Key: dt.Note, Value: dir}) + } else { + nope = append(nope, types.Pair{Key: dt.Note, Value: ""}) + } + } + return "", types.NewErrUnableToFind(what, nope) +} + +func HomeDir() string { + home := os.Getenv(homeEnv()) + if len(home) > 0 { + return home + } + return "~" +} + +func homeEnv() string { + if runtime.GOOS == "windows" { + return "USERPROFILE" + } + return "HOME" +} + +func CurrentWorkingDir() string { + // Try for full path first to be explicit. + pwd := os.Getenv(pwdEnv()) + if len(pwd) > 0 { + return pwd + } + return filesys.SelfDir +} + +func pwdEnv() string { + if runtime.GOOS == "windows" { + return "CD" + } + return "PWD" +} diff --git a/go/internal/forked/api/konfig/plugins_test.go b/go/internal/forked/api/konfig/plugins_test.go new file mode 100644 index 000000000..ce6026c76 --- /dev/null +++ b/go/internal/forked/api/konfig/plugins_test.go @@ -0,0 +1,187 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package konfig + +import ( + "os" + "path/filepath" + "testing" + + "github.com/stretchr/testify/assert" + "github.com/stretchr/testify/require" + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/filesys" +) + +func TestDefaultAbsPluginHome_NoKustomizePluginHomeEnv(t *testing.T) { + fSys := filesys.MakeFsInMemory() + keep, isSet := os.LookupEnv(KustomizePluginHomeEnv) + if isSet { + unsetenv(t, KustomizePluginHomeEnv) + } + _, err := DefaultAbsPluginHome(fSys) + if isSet { + setenv(t, KustomizePluginHomeEnv, keep) + } + if err == nil { + t.Fatalf("expected err") + } + if !types.IsErrUnableToFind(err) { + t.Fatalf("unexpected err: %v", err) + } + for _, expectedMsg := range []string{ + "unable to find plugin root - tried:", + "(''; homed in $KUSTOMIZE_PLUGIN_HOME)", + "; homed in $XDG_CONFIG_HOME)", + "/.config/kustomize/plugin'; homed in default value of $XDG_CONFIG_HOME)", + "/kustomize/plugin'; homed in home directory)", + } { + assert.Contains(t, err.Error(), expectedMsg) + } +} + +func TestDefaultAbsPluginHome_EmptyKustomizePluginHomeEnv(t *testing.T) { + keep, isSet := os.LookupEnv(KustomizePluginHomeEnv) + setenv(t, KustomizePluginHomeEnv, "") + + _, err := DefaultAbsPluginHome(filesys.MakeFsInMemory()) + if !isSet { + unsetenv(t, KustomizePluginHomeEnv) + } else { + setenv(t, KustomizePluginHomeEnv, keep) + } + if err == nil { + t.Fatalf("expected err") + } + if !types.IsErrUnableToFind(err) { + t.Fatalf("unexpected err: %v", err) + } + assert.Contains(t, err.Error(), "(''; homed in $KUSTOMIZE_PLUGIN_HOME)") +} + +func TestDefaultAbsPluginHome_WithKustomizePluginHomeEnv(t *testing.T) { + fSys := filesys.MakeFsInMemory() + keep, isSet := os.LookupEnv(KustomizePluginHomeEnv) + if !isSet { + keep = "whatever" + setenv(t, KustomizePluginHomeEnv, keep) + } + err := fSys.Mkdir(keep) + require.NoError(t, err) + h, err := DefaultAbsPluginHome(fSys) + if !isSet { + unsetenv(t, KustomizePluginHomeEnv) + } + require.NoError(t, err) + if h != keep { + t.Fatalf("unexpected config dir: %s", h) + } +} + +func TestDefaultAbsPluginHomeWithXdg(t *testing.T) { + fSys := filesys.MakeFsInMemory() + keep, isSet := os.LookupEnv(XdgConfigHomeEnv) + if !isSet { + keep = "whatever" + setenv(t, XdgConfigHomeEnv, keep) + } + configDir := filepath.Join(keep, ProgramName, RelPluginHome) + err := fSys.Mkdir(configDir) + require.NoError(t, err) + h, err := DefaultAbsPluginHome(fSys) + if !isSet { + unsetenv(t, XdgConfigHomeEnv) + } + if err != nil { + t.Fatalf("unexpected err: %v", err) + } + if h != configDir { + t.Fatalf("unexpected config dir: %s", h) + } +} + +func TestDefaultAbsPluginHomeNoConfig(t *testing.T) { + fSys := filesys.MakeFsInMemory() + keep, isSet := os.LookupEnv(XdgConfigHomeEnv) + if isSet { + unsetenv(t, XdgConfigHomeEnv) + } + _, err := DefaultAbsPluginHome(fSys) + if isSet { + setenv(t, XdgConfigHomeEnv, keep) + } + if err == nil { + t.Fatalf("expected err") + } + if !types.IsErrUnableToFind(err) { + t.Fatalf("unexpected err: %v", err) + } +} + +func TestDefaultAbsPluginHomeEmptyXdgConfig(t *testing.T) { + keep, isSet := os.LookupEnv(XdgConfigHomeEnv) + setenv(t, XdgConfigHomeEnv, "") + if isSet { + unsetenv(t, XdgConfigHomeEnv) + } + _, err := DefaultAbsPluginHome(filesys.MakeFsInMemory()) + if isSet { + setenv(t, XdgConfigHomeEnv, keep) + } + if err == nil { + t.Fatalf("expected err") + } + if !types.IsErrUnableToFind(err) { + t.Fatalf("unexpected err: %v", err) + } + assert.Contains(t, err.Error(), "(''; homed in $XDG_CONFIG_HOME)") +} + +func TestDefaultAbsPluginHomeNoXdgWithDotConfig(t *testing.T) { + fSys := filesys.MakeFsInMemory() + configDir := filepath.Join( + HomeDir(), XdgConfigHomeEnvDefault, ProgramName, RelPluginHome) + err := fSys.Mkdir(configDir) + require.NoError(t, err) + keep, isSet := os.LookupEnv(XdgConfigHomeEnv) + if isSet { + unsetenv(t, XdgConfigHomeEnv) + } + s, err := DefaultAbsPluginHome(fSys) + require.NoError(t, err) + if isSet { + setenv(t, XdgConfigHomeEnv, keep) + } + if s != configDir { + t.Fatalf("unexpected config dir: %s", s) + } +} + +func TestDefaultAbsPluginHomeNoXdgJustHomeDir(t *testing.T) { + fSys := filesys.MakeFsInMemory() + configDir := filepath.Join( + HomeDir(), ProgramName, RelPluginHome) + err := fSys.Mkdir(configDir) + require.NoError(t, err) + keep, isSet := os.LookupEnv(XdgConfigHomeEnv) + if isSet { + unsetenv(t, XdgConfigHomeEnv) + } + s, err := DefaultAbsPluginHome(fSys) + require.NoError(t, err) + if isSet { + setenv(t, XdgConfigHomeEnv, keep) + } + if s != configDir { + t.Fatalf("unexpected config dir: %s", s) + } +} + +func setenv(t *testing.T, key, value string) { + require.NoError(t, os.Setenv(key, value)) +} + +func unsetenv(t *testing.T, key string) { + require.NoError(t, os.Unsetenv(key)) +} diff --git a/go/internal/forked/api/konfig/plugins_test.go b/go/internal/forked/api/konfig/plugins_test.go new file mode 100644 index 000000000..343e22b0c --- /dev/null +++ b/go/internal/forked/api/konfig/plugins_test.go @@ -0,0 +1,187 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package konfig + +import ( + "os" + "path/filepath" + "testing" + + "github.com/stretchr/testify/assert" + "github.com/stretchr/testify/require" + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/filesys" +) + +func TestDefaultAbsPluginHome_NoKustomizePluginHomeEnv(t *testing.T) { + fSys := filesys.MakeFsInMemory() + keep, isSet := os.LookupEnv(KustomizePluginHomeEnv) + if isSet { + unsetenv(t, KustomizePluginHomeEnv) + } + _, err := DefaultAbsPluginHome(fSys) + if isSet { + setenv(t, KustomizePluginHomeEnv, keep) + } + if err == nil { + t.Fatalf("expected err") + } + if !types.IsErrUnableToFind(err) { + t.Fatalf("unexpected err: %v", err) + } + for _, expectedMsg := range []string{ + "unable to find plugin root - tried:", + "(''; homed in $KUSTOMIZE_PLUGIN_HOME)", + "; homed in $XDG_CONFIG_HOME)", + "/.config/kustomize/plugin'; homed in default value of $XDG_CONFIG_HOME)", + "/kustomize/plugin'; homed in home directory)", + } { + assert.Contains(t, err.Error(), expectedMsg) + } +} + +func TestDefaultAbsPluginHome_EmptyKustomizePluginHomeEnv(t *testing.T) { + keep, isSet := os.LookupEnv(KustomizePluginHomeEnv) + setenv(t, KustomizePluginHomeEnv, "") + + _, err := DefaultAbsPluginHome(filesys.MakeFsInMemory()) + if !isSet { + unsetenv(t, KustomizePluginHomeEnv) + } else { + setenv(t, KustomizePluginHomeEnv, keep) + } + if err == nil { + t.Fatalf("expected err") + } + if !types.IsErrUnableToFind(err) { + t.Fatalf("unexpected err: %v", err) + } + assert.Contains(t, err.Error(), "(''; homed in $KUSTOMIZE_PLUGIN_HOME)") +} + +func TestDefaultAbsPluginHome_WithKustomizePluginHomeEnv(t *testing.T) { + fSys := filesys.MakeFsInMemory() + keep, isSet := os.LookupEnv(KustomizePluginHomeEnv) + if !isSet { + keep = "whatever" + setenv(t, KustomizePluginHomeEnv, keep) + } + err := fSys.Mkdir(keep) + require.NoError(t, err) + h, err := DefaultAbsPluginHome(fSys) + if !isSet { + unsetenv(t, KustomizePluginHomeEnv) + } + require.NoError(t, err) + if h != keep { + t.Fatalf("unexpected config dir: %s", h) + } +} + +func TestDefaultAbsPluginHomeWithXdg(t *testing.T) { + fSys := filesys.MakeFsInMemory() + keep, isSet := os.LookupEnv(XdgConfigHomeEnv) + if !isSet { + keep = "whatever" + setenv(t, XdgConfigHomeEnv, keep) + } + configDir := filepath.Join(keep, ProgramName, RelPluginHome) + err := fSys.Mkdir(configDir) + require.NoError(t, err) + h, err := DefaultAbsPluginHome(fSys) + if !isSet { + unsetenv(t, XdgConfigHomeEnv) + } + if err != nil { + t.Fatalf("unexpected err: %v", err) + } + if h != configDir { + t.Fatalf("unexpected config dir: %s", h) + } +} + +func TestDefaultAbsPluginHomeNoConfig(t *testing.T) { + fSys := filesys.MakeFsInMemory() + keep, isSet := os.LookupEnv(XdgConfigHomeEnv) + if isSet { + unsetenv(t, XdgConfigHomeEnv) + } + _, err := DefaultAbsPluginHome(fSys) + if isSet { + setenv(t, XdgConfigHomeEnv, keep) + } + if err == nil { + t.Fatalf("expected err") + } + if !types.IsErrUnableToFind(err) { + t.Fatalf("unexpected err: %v", err) + } +} + +func TestDefaultAbsPluginHomeEmptyXdgConfig(t *testing.T) { + keep, isSet := os.LookupEnv(XdgConfigHomeEnv) + setenv(t, XdgConfigHomeEnv, "") + if isSet { + unsetenv(t, XdgConfigHomeEnv) + } + _, err := DefaultAbsPluginHome(filesys.MakeFsInMemory()) + if isSet { + setenv(t, XdgConfigHomeEnv, keep) + } + if err == nil { + t.Fatalf("expected err") + } + if !types.IsErrUnableToFind(err) { + t.Fatalf("unexpected err: %v", err) + } + assert.Contains(t, err.Error(), "(''; homed in $XDG_CONFIG_HOME)") +} + +func TestDefaultAbsPluginHomeNoXdgWithDotConfig(t *testing.T) { + fSys := filesys.MakeFsInMemory() + configDir := filepath.Join( + HomeDir(), XdgConfigHomeEnvDefault, ProgramName, RelPluginHome) + err := fSys.Mkdir(configDir) + require.NoError(t, err) + keep, isSet := os.LookupEnv(XdgConfigHomeEnv) + if isSet { + unsetenv(t, XdgConfigHomeEnv) + } + s, err := DefaultAbsPluginHome(fSys) + require.NoError(t, err) + if isSet { + setenv(t, XdgConfigHomeEnv, keep) + } + if s != configDir { + t.Fatalf("unexpected config dir: %s", s) + } +} + +func TestDefaultAbsPluginHomeNoXdgJustHomeDir(t *testing.T) { + fSys := filesys.MakeFsInMemory() + configDir := filepath.Join( + HomeDir(), ProgramName, RelPluginHome) + err := fSys.Mkdir(configDir) + require.NoError(t, err) + keep, isSet := os.LookupEnv(XdgConfigHomeEnv) + if isSet { + unsetenv(t, XdgConfigHomeEnv) + } + s, err := DefaultAbsPluginHome(fSys) + require.NoError(t, err) + if isSet { + setenv(t, XdgConfigHomeEnv, keep) + } + if s != configDir { + t.Fatalf("unexpected config dir: %s", s) + } +} + +func setenv(t *testing.T, key, value string) { + require.NoError(t, os.Setenv(key, value)) +} + +func unsetenv(t *testing.T, key string) { + require.NoError(t, os.Unsetenv(key)) +} diff --git a/go/internal/forked/api/krusty/accumulation_test.go b/go/internal/forked/api/krusty/accumulation_test.go new file mode 100644 index 000000000..c9c9703ab --- /dev/null +++ b/go/internal/forked/api/krusty/accumulation_test.go @@ -0,0 +1,162 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package krusty_test + +import ( + "path/filepath" + "strings" + "testing" + + . "sigs.k8s.io/kustomize/api/internal/target" + "sigs.k8s.io/kustomize/api/konfig" + kusttest_test "sigs.k8s.io/kustomize/api/testutils/kusttest" +) + +func TestTargetMustHaveKustomizationFile(t *testing.T) { + th := kusttest_test.MakeHarness(t) + th.WriteF("service.yaml", ` +apiVersion: v1 +kind: Service +metadata: + name: aService +`) + th.WriteF("deeper/service.yaml", ` +apiVersion: v1 +kind: Service +metadata: + name: anotherService +`) + err := th.RunWithErr(".", th.MakeDefaultOptions()) + if err == nil { + t.Fatalf("expected an error") + } + if !IsMissingKustomizationFileError(err) { + t.Fatalf("unexpected error: %q", err) + } +} + +func TestTargetMustHaveOnlyOneKustomizationFile(t *testing.T) { + th := kusttest_test.MakeHarness(t) + for _, n := range konfig.RecognizedKustomizationFileNames() { + th.WriteF(filepath.Join(".", n), ` +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization +`) + } + err := th.RunWithErr(".", th.MakeDefaultOptions()) + if err == nil { + t.Fatalf("expected an error") + } + if !strings.Contains(err.Error(), "Found multiple kustomization files") { + t.Fatalf("unexpected error: %q", err) + } +} + +func TestBaseMustHaveKustomizationFile(t *testing.T) { + th := kusttest_test.MakeHarness(t) + th.WriteK(".", ` +resources: +- base +`) + th.WriteF("base/service.yaml", ` +apiVersion: v1 +kind: Service +metadata: + name: myService +spec: + selector: + backend: bungie + ports: + - port: 7002 +`) + err := th.RunWithErr(".", th.MakeDefaultOptions()) + if err == nil { + t.Fatalf("expected an error") + } + if !strings.Contains(err.Error(), "accumulating resources") { + t.Fatalf("unexpected error: %q", err) + } +} + +func TestResourceNotFound(t *testing.T) { + th := kusttest_test.MakeHarness(t) + th.WriteK(".", ` +resources: +- deployment.yaml +`) + err := th.RunWithErr(".", th.MakeDefaultOptions()) + if err == nil { + t.Fatalf("expected an error") + } + if !strings.Contains(err.Error(), "accumulating resources") { + t.Fatalf("unexpected error: %q", err) + } +} + +func TestResourceHasAnchor(t *testing.T) { + th := kusttest_test.MakeHarness(t) + th.WriteK(".", ` +resources: +- ingress.yaml +`) + th.WriteF("ingress.yaml", ` +apiVersion: networking.k8s.io/v1 +kind: Ingress +metadata: + name: blog +spec: + tls: + - hosts: + - xyz.me + - www.xyz.me + secretName: cert-tls + rules: + - host: xyz.me + http: &xxx_rules + paths: + - path: / + pathType: Prefix + backend: + service: + name: service + port: + number: 80 + - host: www.xyz.me + http: *xxx_rules +`) + m := th.Run(".", th.MakeDefaultOptions()) + th.AssertActualEqualsExpected(m, ` +apiVersion: networking.k8s.io/v1 +kind: Ingress +metadata: + name: blog +spec: + rules: + - host: xyz.me + http: + paths: + - backend: + service: + name: service + port: + number: 80 + path: / + pathType: Prefix + - host: www.xyz.me + http: + paths: + - backend: + service: + name: service + port: + number: 80 + path: / + pathType: Prefix + tls: + - hosts: + - xyz.me + - www.xyz.me + secretName: cert-tls +`) +} diff --git a/go/internal/forked/api/krusty/baseandoverlaymedium_test.go b/go/internal/forked/api/krusty/baseandoverlaymedium_test.go new file mode 100644 index 000000000..cfa1afa48 --- /dev/null +++ b/go/internal/forked/api/krusty/baseandoverlaymedium_test.go @@ -0,0 +1,307 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package krusty_test + +import ( + "testing" + + kusttest_test "sigs.k8s.io/kustomize/api/testutils/kusttest" +) + +func writeMediumBase(th kusttest_test.Harness) { + th.WriteK("base", ` +namePrefix: baseprefix- +commonLabels: + foo: bar +commonAnnotations: + baseAnno: This is a base annotation +resources: +- deployment/deployment.yaml +- service/service.yaml +`) + th.WriteF("base/service/service.yaml", ` +apiVersion: v1 +kind: Service +metadata: + name: mungebot-service + labels: + app: mungebot +spec: + ports: + - port: 7002 + selector: + app: mungebot +`) + th.WriteF("base/deployment/deployment.yaml", ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: mungebot + labels: + app: mungebot +spec: + replicas: 1 + template: + metadata: + labels: + app: mungebot + spec: + containers: + - name: nginx + image: nginx + env: + - name: foo + value: bar + ports: + - containerPort: 80 +`) +} + +func TestMediumBase(t *testing.T) { + th := kusttest_test.MakeHarness(t) + writeMediumBase(th) + m := th.Run("base", th.MakeDefaultOptions()) + th.AssertActualEqualsExpected(m, ` +apiVersion: apps/v1 +kind: Deployment +metadata: + annotations: + baseAnno: This is a base annotation + labels: + app: mungebot + foo: bar + name: baseprefix-mungebot +spec: + replicas: 1 + selector: + matchLabels: + foo: bar + template: + metadata: + annotations: + baseAnno: This is a base annotation + labels: + app: mungebot + foo: bar + spec: + containers: + - env: + - name: foo + value: bar + image: nginx + name: nginx + ports: + - containerPort: 80 +--- +apiVersion: v1 +kind: Service +metadata: + annotations: + baseAnno: This is a base annotation + labels: + app: mungebot + foo: bar + name: baseprefix-mungebot-service +spec: + ports: + - port: 7002 + selector: + app: mungebot + foo: bar +`) +} + +func TestMediumOverlay(t *testing.T) { + th := kusttest_test.MakeHarness(t) + writeMediumBase(th) + th.WriteK("overlay", ` +namePrefix: test-infra- +commonLabels: + app: mungebot + org: kubernetes + repo: test-infra +commonAnnotations: + note: This is a test annotation +resources: +- ../base +patchesStrategicMerge: +- deployment/deployment.yaml +configMapGenerator: +- name: app-env + envs: + - configmap/db.env + - configmap/units.ini + - configmap/food.ini +- name: app-config + files: + - nonsense=configmap/dummy.txt +images: +- name: nginx + newTag: 1.8.0`) + + th.WriteF("overlay/configmap/db.env", ` +DB_USERNAME=admin +DB_PASSWORD=somepw +`) + th.WriteF("overlay/configmap/units.ini", ` +LENGTH=kilometer +ENERGY=electronvolt +`) + th.WriteF("overlay/configmap/food.ini", ` +FRUIT=banana +LEGUME=chickpea +`) + th.WriteF("overlay/configmap/dummy.txt", + `Lorem ipsum dolor sit amet, consectetur +adipiscing elit, sed do eiusmod tempor +incididunt ut labore et dolore magna aliqua. +`) + th.WriteF("overlay/deployment/deployment.yaml", ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: mungebot +spec: + replicas: 2 + template: + spec: + containers: + - name: nginx + image: nginx:1.7.9 + env: + - name: FOO + valueFrom: + configMapKeyRef: + name: app-env + key: somekey + - name: busybox + image: busybox + envFrom: + - configMapRef: + name: someConfigMap + - configMapRef: + name: app-env + volumeMounts: + - mountPath: /tmp/env + name: app-env + volumes: + - configMap: + name: app-env + name: app-env +`) + m := th.Run("overlay", th.MakeDefaultOptions()) + th.AssertActualEqualsExpected(m, ` +apiVersion: apps/v1 +kind: Deployment +metadata: + annotations: + baseAnno: This is a base annotation + note: This is a test annotation + labels: + app: mungebot + foo: bar + org: kubernetes + repo: test-infra + name: test-infra-baseprefix-mungebot +spec: + replicas: 2 + selector: + matchLabels: + app: mungebot + foo: bar + org: kubernetes + repo: test-infra + template: + metadata: + annotations: + baseAnno: This is a base annotation + note: This is a test annotation + labels: + app: mungebot + foo: bar + org: kubernetes + repo: test-infra + spec: + containers: + - env: + - name: FOO + valueFrom: + configMapKeyRef: + key: somekey + name: test-infra-app-env-8h5mh7f7ch + - name: foo + value: bar + image: nginx:1.8.0 + name: nginx + ports: + - containerPort: 80 + - envFrom: + - configMapRef: + name: someConfigMap + - configMapRef: + name: test-infra-app-env-8h5mh7f7ch + image: busybox + name: busybox + volumeMounts: + - mountPath: /tmp/env + name: app-env + volumes: + - configMap: + name: test-infra-app-env-8h5mh7f7ch + name: app-env +--- +apiVersion: v1 +kind: Service +metadata: + annotations: + baseAnno: This is a base annotation + note: This is a test annotation + labels: + app: mungebot + foo: bar + org: kubernetes + repo: test-infra + name: test-infra-baseprefix-mungebot-service +spec: + ports: + - port: 7002 + selector: + app: mungebot + foo: bar + org: kubernetes + repo: test-infra +--- +apiVersion: v1 +data: + DB_PASSWORD: somepw + DB_USERNAME: admin + ENERGY: electronvolt + FRUIT: banana + LEGUME: chickpea + LENGTH: kilometer +kind: ConfigMap +metadata: + annotations: + note: This is a test annotation + labels: + app: mungebot + org: kubernetes + repo: test-infra + name: test-infra-app-env-8h5mh7f7ch +--- +apiVersion: v1 +data: + nonsense: "Lorem ipsum dolor sit amet, consectetur\nadipiscing elit, sed do eiusmod + tempor\nincididunt ut labore et dolore magna aliqua. \n" +kind: ConfigMap +metadata: + annotations: + note: This is a test annotation + labels: + app: mungebot + org: kubernetes + repo: test-infra + name: test-infra-app-config-49d6f5h7b5 +`) +} diff --git a/go/internal/forked/api/krusty/baseandoverlaysmall_test.go b/go/internal/forked/api/krusty/baseandoverlaysmall_test.go new file mode 100644 index 000000000..dff994bcd --- /dev/null +++ b/go/internal/forked/api/krusty/baseandoverlaysmall_test.go @@ -0,0 +1,498 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package krusty_test + +import ( + "strings" + "testing" + + "sigs.k8s.io/kustomize/api/krusty" + kusttest_test "sigs.k8s.io/kustomize/api/testutils/kusttest" + "sigs.k8s.io/kustomize/api/types" +) + +func TestOrderPreserved(t *testing.T) { + th := kusttest_test.MakeHarness(t) + th.WriteK("base", ` +namePrefix: b- +resources: +- namespace.yaml +- role.yaml +- service.yaml +- deployment.yaml +`) + th.WriteF("base/service.yaml", ` +apiVersion: v1 +kind: Service +metadata: + name: myService +`) + th.WriteF("base/namespace.yaml", ` +apiVersion: v1 +kind: Namespace +metadata: + name: myNs +`) + th.WriteF("base/role.yaml", ` +apiVersion: v1 +kind: Role +metadata: + name: myRole +`) + th.WriteF("base/deployment.yaml", ` +apiVersion: v1 +kind: Deployment +metadata: + name: myDep +`) + th.WriteK("prod", ` +namePrefix: p- +resources: +- ../base +- service.yaml +- namespace.yaml +`) + th.WriteF("prod/service.yaml", ` +apiVersion: v1 +kind: Service +metadata: + name: myService2 +`) + th.WriteF("prod/namespace.yaml", ` +apiVersion: v1 +kind: Namespace +metadata: + name: myNs2 +`) + m := th.Run("prod", th.MakeDefaultOptions()) + th.AssertActualEqualsExpected(m, ` +apiVersion: v1 +kind: Namespace +metadata: + name: myNs +--- +apiVersion: v1 +kind: Role +metadata: + name: p-b-myRole +--- +apiVersion: v1 +kind: Service +metadata: + name: p-b-myService +--- +apiVersion: v1 +kind: Deployment +metadata: + name: p-b-myDep +--- +apiVersion: v1 +kind: Service +metadata: + name: p-myService2 +--- +apiVersion: v1 +kind: Namespace +metadata: + name: myNs2 +`) +} + +func TestBaseInResourceList(t *testing.T) { + th := kusttest_test.MakeHarness(t) + th.WriteK("prod", ` +namePrefix: b- +resources: +- ../base +`) + th.WriteK("base", ` +namePrefix: a- +resources: +- service.yaml +`) + th.WriteF("base/service.yaml", ` +apiVersion: v1 +kind: Service +metadata: + name: myService +spec: + selector: + backend: bungie +`) + m := th.Run("prod", th.MakeDefaultOptions()) + th.AssertActualEqualsExpected(m, ` +apiVersion: v1 +kind: Service +metadata: + name: b-a-myService +spec: + selector: + backend: bungie +`) +} + +func TestTinyOverlay(t *testing.T) { + th := kusttest_test.MakeHarness(t) + th.WriteK("base", ` +namePrefix: a- +resources: +- deployment.yaml +`) + th.WriteF("base/deployment.yaml", ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: myDeployment +spec: + template: + spec: + containers: + - image: whatever +`) + th.WriteK("overlay", ` +namePrefix: b- +resources: +- ../base +patchesStrategicMerge: +- depPatch.yaml +`) + th.WriteF("overlay/depPatch.yaml", ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: myDeployment +spec: + replicas: 999 +`) + m := th.Run("overlay", th.MakeDefaultOptions()) + th.AssertActualEqualsExpected(m, ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: b-a-myDeployment +spec: + replicas: 999 + template: + spec: + containers: + - image: whatever +`) +} + +func writeSmallBase(th kusttest_test.Harness) { + th.WriteK("base", ` +namePrefix: a- +commonLabels: + app: myApp +resources: +- deployment.yaml +- service.yaml +`) + th.WriteF("base/service.yaml", ` +apiVersion: v1 +kind: Service +metadata: + name: myService +spec: + selector: + backend: bungie + ports: + - port: 7002 +`) + th.WriteF("base/deployment.yaml", ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: myDeployment +spec: + template: + metadata: + labels: + backend: awesome + spec: + containers: + - name: whatever + image: whatever +`) +} + +func TestSmallBase(t *testing.T) { + th := kusttest_test.MakeHarness(t) + writeSmallBase(th) + m := th.Run("base", th.MakeDefaultOptions()) + th.AssertActualEqualsExpected(m, ` +apiVersion: apps/v1 +kind: Deployment +metadata: + labels: + app: myApp + name: a-myDeployment +spec: + selector: + matchLabels: + app: myApp + template: + metadata: + labels: + app: myApp + backend: awesome + spec: + containers: + - image: whatever + name: whatever +--- +apiVersion: v1 +kind: Service +metadata: + labels: + app: myApp + name: a-myService +spec: + ports: + - port: 7002 + selector: + app: myApp + backend: bungie +`) +} + +func TestSmallOverlay(t *testing.T) { + th := kusttest_test.MakeHarness(t) + writeSmallBase(th) + th.WriteK("overlay", ` +namePrefix: b- +commonLabels: + env: prod + quotedFruit: "peach" + quotedBoolean: "true" +resources: +- ../base +patchesStrategicMerge: +- deployment/deployment.yaml +images: +- name: whatever + newTag: 1.8.0 +`) + + th.WriteF("overlay/configmap/app.env", ` +DB_USERNAME=admin +DB_PASSWORD=somepw +`) + th.WriteF("overlay/configmap/app-init.ini", ` +FOO=bar +BAR=baz +`) + th.WriteF("overlay/deployment/deployment.yaml", ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: myDeployment +spec: + replicas: 1000 +`) + m := th.Run("overlay", th.MakeDefaultOptions()) + th.AssertActualEqualsExpected(m, ` +apiVersion: apps/v1 +kind: Deployment +metadata: + labels: + app: myApp + env: prod + quotedBoolean: "true" + quotedFruit: peach + name: b-a-myDeployment +spec: + replicas: 1000 + selector: + matchLabels: + app: myApp + env: prod + quotedBoolean: "true" + quotedFruit: peach + template: + metadata: + labels: + app: myApp + backend: awesome + env: prod + quotedBoolean: "true" + quotedFruit: peach + spec: + containers: + - image: whatever:1.8.0 + name: whatever +--- +apiVersion: v1 +kind: Service +metadata: + labels: + app: myApp + env: prod + quotedBoolean: "true" + quotedFruit: peach + name: b-a-myService +spec: + ports: + - port: 7002 + selector: + app: myApp + backend: bungie + env: prod + quotedBoolean: "true" + quotedFruit: peach +`) +} + +func TestSharedPatchDisAllowed(t *testing.T) { + th := kusttest_test.MakeHarness(t) + writeSmallBase(th) + th.WriteK("overlay", ` +commonLabels: + env: prod +resources: +- ../base +patchesStrategicMerge: +- ../shared/deployment-patch.yaml +`) + th.WriteF("shared/deployment-patch.yaml", ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: myDeployment +spec: + replicas: 1000 +`) + err := th.RunWithErr("overlay", func() krusty.Options { + o := th.MakeDefaultOptions() + o.LoadRestrictions = types.LoadRestrictionsRootOnly + return o + }()) + if !strings.Contains( + err.Error(), + "security; file '/shared/deployment-patch.yaml' is not in or below '/overlay'") { + t.Fatalf("unexpected error: %s", err) + } +} + +func TestSharedPatchAllowed(t *testing.T) { + th := kusttest_test.MakeHarness(t) + writeSmallBase(th) + th.WriteK("overlay", ` +commonLabels: + env: prod +resources: +- ../base +patchesStrategicMerge: +- ../shared/deployment-patch.yaml +`) + th.WriteF("shared/deployment-patch.yaml", ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: myDeployment +spec: + replicas: 1000 +`) + m := th.Run("overlay", func() krusty.Options { + o := th.MakeDefaultOptions() + o.LoadRestrictions = types.LoadRestrictionsNone + return o + }()) + th.AssertActualEqualsExpected(m, ` +apiVersion: apps/v1 +kind: Deployment +metadata: + labels: + app: myApp + env: prod + name: a-myDeployment +spec: + replicas: 1000 + selector: + matchLabels: + app: myApp + env: prod + template: + metadata: + labels: + app: myApp + backend: awesome + env: prod + spec: + containers: + - image: whatever + name: whatever +--- +apiVersion: v1 +kind: Service +metadata: + labels: + app: myApp + env: prod + name: a-myService +spec: + ports: + - port: 7002 + selector: + app: myApp + backend: bungie + env: prod +`) +} + +func TestSmallOverlayJSONPatch(t *testing.T) { + th := kusttest_test.MakeHarness(t) + writeSmallBase(th) + th.WriteK("overlay", ` +resources: +- ../base +patchesJson6902: +- target: + version: v1 + kind: Service + name: a-myService + path: service-patch.yaml +`) + + th.WriteF("overlay/service-patch.yaml", ` +- op: add + path: /spec/selector/backend + value: beagle +`) + m := th.Run("overlay", th.MakeDefaultOptions()) + th.AssertActualEqualsExpected(m, ` +apiVersion: apps/v1 +kind: Deployment +metadata: + labels: + app: myApp + name: a-myDeployment +spec: + selector: + matchLabels: + app: myApp + template: + metadata: + labels: + app: myApp + backend: awesome + spec: + containers: + - image: whatever + name: whatever +--- +apiVersion: v1 +kind: Service +metadata: + labels: + app: myApp + name: a-myService +spec: + ports: + - port: 7002 + selector: + app: myApp + backend: beagle +`) +} diff --git a/go/internal/forked/api/krusty/basereusenameprefix_test.go b/go/internal/forked/api/krusty/basereusenameprefix_test.go new file mode 100644 index 000000000..fb7a8e8e0 --- /dev/null +++ b/go/internal/forked/api/krusty/basereusenameprefix_test.go @@ -0,0 +1,196 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package krusty_test + +import ( + "testing" + + kusttest_test "sigs.k8s.io/kustomize/api/testutils/kusttest" +) + +// Here is a structure of a kustomization of two components, component1 +// and component2, that both use a shared postgres definition, which +// they would individually adjust. This test case checks that the name +// prefix does not cause a name reference conflict. +// +// root +// / \ +// component1/overlay component2/overlay +// | | +// component1/base component2/base +// \ / +// base +// +// This is the directory layout: +// +// ├── component1 +// │ ├── base +// │ │ └── kustomization.yaml +// │ └── overlay +// │ └── kustomization.yaml +// ├── component2 +// │ ├── base +// │ │ └── kustomization.yaml +// │ └── overlay +// │ └── kustomization.yaml +// ├── shared +// │ ├── kustomization.yaml +// │ └── resources.yaml +// ├── kustomization.yaml + +func TestBaseReuseNameConflict(t *testing.T) { + th := kusttest_test.MakeHarness(t) + th.WriteK("component1/base", ` +resources: + - ../../shared + +namePrefix: component1- +`) + th.WriteK("component1/overlay", ` +resources: + - ../base + +namePrefix: overlay- +`) + + th.WriteK("component2/base", ` +resources: + - ../../shared + +namePrefix: component2- +`) + th.WriteK("component2/overlay", ` +resources: + - ../base + +namePrefix: overlay- +`) + + th.WriteK("shared", ` +resources: + - resources.yaml +`) + th.WriteF("shared/resources.yaml", ` +--- +kind: PersistentVolumeClaim +apiVersion: v1 +metadata: + name: postgres +spec: + resources: + requests: + storage: 1Gi + accessModes: + - ReadWriteOnce +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + name: postgres +spec: + selector: + matchLabels: {} + strategy: + type: Recreate + template: + spec: + containers: + - name: postgres + image: postgres + imagePullPolicy: IfNotPresent + volumeMounts: + - mountPath: /var/lib/postgresql + name: data + ports: + - name: postgres + containerPort: 5432 + volumes: + - name: data + persistentVolumeClaim: + claimName: postgres +`) + + th.WriteK(".", ` +resources: + - component1/overlay + - component2/overlay +`) + + m := th.Run(".", th.MakeDefaultOptions()) + th.AssertActualEqualsExpected(m, ` +apiVersion: v1 +kind: PersistentVolumeClaim +metadata: + name: overlay-component1-postgres +spec: + accessModes: + - ReadWriteOnce + resources: + requests: + storage: 1Gi +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + name: overlay-component1-postgres +spec: + selector: + matchLabels: {} + strategy: + type: Recreate + template: + spec: + containers: + - image: postgres + imagePullPolicy: IfNotPresent + name: postgres + ports: + - containerPort: 5432 + name: postgres + volumeMounts: + - mountPath: /var/lib/postgresql + name: data + volumes: + - name: data + persistentVolumeClaim: + claimName: overlay-component1-postgres +--- +apiVersion: v1 +kind: PersistentVolumeClaim +metadata: + name: overlay-component2-postgres +spec: + accessModes: + - ReadWriteOnce + resources: + requests: + storage: 1Gi +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + name: overlay-component2-postgres +spec: + selector: + matchLabels: {} + strategy: + type: Recreate + template: + spec: + containers: + - image: postgres + imagePullPolicy: IfNotPresent + name: postgres + ports: + - containerPort: 5432 + name: postgres + volumeMounts: + - mountPath: /var/lib/postgresql + name: data + volumes: + - name: data + persistentVolumeClaim: + claimName: overlay-component2-postgres +`) +} diff --git a/go/internal/forked/api/krusty/basic_io_test.go b/go/internal/forked/api/krusty/basic_io_test.go new file mode 100644 index 000000000..6a2b9c302 --- /dev/null +++ b/go/internal/forked/api/krusty/basic_io_test.go @@ -0,0 +1,82 @@ +// Copyright 2020 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package krusty_test + +import ( + "testing" + + kusttest_test "sigs.k8s.io/kustomize/api/testutils/kusttest" +) + +func TestBasicIO_1(t *testing.T) { + th := kusttest_test.MakeHarness(t) + th.WriteK(".", ` +resources: +- service.yaml +`) + th.WriteF("service.yaml", ` +apiVersion: v1 +kind: Service +metadata: + annotations: + port: 8080 + happy: true + color: green + name: demo +spec: + clusterIP: None +`) + m := th.Run(".", th.MakeDefaultOptions()) + // The annotations are sorted by key, hence the order change. + // Quotes are added intentionally. + th.AssertActualEqualsExpected( + m, ` +apiVersion: v1 +kind: Service +metadata: + annotations: + color: green + happy: "true" + port: "8080" + name: demo +spec: + clusterIP: None +`) +} + +func TestBasicIO_2(t *testing.T) { + th := kusttest_test.MakeHarness(t) + opts := th.MakeDefaultOptions() + th.WriteK(".", ` +resources: +- service.yaml +`) + // All the annotation values are quoted in the input. + th.WriteF("service.yaml", ` +apiVersion: v1 +kind: Service +metadata: + annotations: + port: "8080" + happy: "true" + color: green + name: demo +spec: + clusterIP: None +`) + m := th.Run(".", opts) + // The annotations are sorted by key, hence the order change. + th.AssertActualEqualsExpected(m, ` +apiVersion: v1 +kind: Service +metadata: + annotations: + color: green + happy: "true" + port: "8080" + name: demo +spec: + clusterIP: None +`) +} diff --git a/go/internal/forked/api/krusty/blankvalues_test.go b/go/internal/forked/api/krusty/blankvalues_test.go new file mode 100644 index 000000000..dfba4f365 --- /dev/null +++ b/go/internal/forked/api/krusty/blankvalues_test.go @@ -0,0 +1,49 @@ +package krusty_test + +import ( + "strings" + "testing" + + kusttest_test "sigs.k8s.io/kustomize/api/testutils/kusttest" +) + +// test for https://github.com/kubernetes-sigs/kustomize/issues/4240 +func TestBlankNamespace4240(t *testing.T) { + th := kusttest_test.MakeHarness(t) + th.WriteK(".", ` +resources: +- resource.yaml +`) + + th.WriteF("resource.yaml", ` +--- +apiVersion: v1 +kind: ServiceAccount +metadata: + name: test +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + name: test +rules: [] +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + name: test +subjects: +- kind: ServiceAccount + name: test + namespace: +roleRef: + kind: Role + name: test + apiGroup: rbac.authorization.k8s.io +`) + + err := th.RunWithErr(".", th.MakeDefaultOptions()) + if !strings.Contains(err.Error(), "Invalid Input: namespace is blank for resource") { + t.Fatalf("unexpected error: %q", err) + } +} diff --git a/go/internal/forked/api/krusty/chartinflatorplugin_test.go b/go/internal/forked/api/krusty/chartinflatorplugin_test.go new file mode 100644 index 000000000..606c494f4 --- /dev/null +++ b/go/internal/forked/api/krusty/chartinflatorplugin_test.go @@ -0,0 +1,105 @@ +// +build notravis + +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +// Disabled on travis, because don't want to install helm on travis. + +package krusty_test + +import ( + "regexp" + "testing" + + kusttest_test "sigs.k8s.io/kustomize/api/testutils/kusttest" +) + +// This is an example of using a helm chart as a base, +// inflating it and then customizing it with a nameprefix +// applied to all its resources. +// +// The helm chart used is downloaded from +// https://github.com/helm/charts/tree/master/stable/minecraft +// with each test run, so it's a bit brittle as that +// chart could change obviously and break the test. +// +// This test requires having the helm binary on the PATH. +// +// TODO: Download and inflate the chart, and check that +// in for the test. +func TestChartInflatorPlugin(t *testing.T) { + th := kusttest_test.MakeEnhancedHarness(t). + PrepExecPlugin("someteam.example.com", "v1", "ChartInflator") + defer th.Reset() + + th.WriteK(".", ` +generators: +- chartInflator.yaml +namePrefix: LOOOOOOOONG- +`) + + th.WriteF("./chartInflator.yaml", ` +apiVersion: someteam.example.com/v1 +kind: ChartInflator +metadata: + name: notImportantHere +chartName: minecraft +`) + + m := th.Run(".", th.MakeOptionsPluginsEnabled()) + chartName := regexp.MustCompile("chart: minecraft-[0-9.]+") + th.AssertActualEqualsExpectedWithTweak(m, + func(x []byte) []byte { + return chartName.ReplaceAll(x, []byte("chart: minecraft-SOMEVERSION")) + }, ` +apiVersion: v1 +data: + rcon-password: Q0hBTkdFTUUh +kind: Secret +metadata: + labels: + app: release-name-minecraft + chart: minecraft-SOMEVERSION + heritage: Tiller + release: release-name + name: LOOOOOOOONG-release-name-minecraft +type: Opaque +--- +apiVersion: v1 +kind: PersistentVolumeClaim +metadata: + annotations: + volume.alpha.kubernetes.io/storage-class: default + labels: + app: release-name-minecraft + chart: minecraft-SOMEVERSION + heritage: Tiller + release: release-name + name: LOOOOOOOONG-release-name-minecraft-datadir +spec: + accessModes: + - ReadWriteOnce + resources: + requests: + storage: 1Gi +--- +apiVersion: v1 +kind: Service +metadata: + labels: + app: release-name-minecraft + chart: minecraft-SOMEVERSION + heritage: Tiller + release: release-name + name: LOOOOOOOONG-release-name-minecraft +spec: + ports: + - name: minecraft + port: 25565 + protocol: TCP + targetPort: minecraft + selector: + app: release-name-minecraft + type: LoadBalancer +`) +} diff --git a/go/internal/forked/api/krusty/complexcomposition_test.go b/go/internal/forked/api/krusty/complexcomposition_test.go new file mode 100644 index 000000000..9e85097d9 --- /dev/null +++ b/go/internal/forked/api/krusty/complexcomposition_test.go @@ -0,0 +1,556 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package krusty_test + +import ( + "strings" + "testing" + + "sigs.k8s.io/kustomize/api/krusty" + kusttest_test "sigs.k8s.io/kustomize/api/testutils/kusttest" + "sigs.k8s.io/kustomize/api/types" +) + +const httpsService = ` +apiVersion: v1 +kind: Service +metadata: + name: my-https-svc +spec: + ports: + - port: 443 + protocol: TCP + name: https + selector: + app: my-app +` + +func writeStatefulSetBase(th kusttest_test.Harness) { + th.WriteK("base", ` +resources: +- statefulset.yaml +`) + th.WriteF("base/statefulset.yaml", ` +apiVersion: apps/v1 +kind: StatefulSet +metadata: + name: my-sts +spec: + serviceName: my-svc + selector: + matchLabels: + app: my-app + template: + metadata: + labels: + app: my-app + spec: + containers: + - name: app + image: my-image + volumeClaimTemplates: + - spec: + storageClassName: default +`) +} + +func writeHTTPSOverlay(th kusttest_test.Harness) { + th.WriteK("https", ` +resources: +- ../base +- https-svc.yaml +patchesStrategicMerge: +- sts-patch.yaml +`) + th.WriteF("https/https-svc.yaml", httpsService) + th.WriteF("https/sts-patch.yaml", ` +apiVersion: apps/v1 +kind: StatefulSet +metadata: + name: my-sts +spec: + serviceName: my-https-svc +`) +} + +func writeHTTPSTransformerRaw(th kusttest_test.Harness) { + th.WriteF("https/service/https-svc.yaml", httpsService) + th.WriteF("https/transformer/transformer.yaml", ` +apiVersion: builtin +kind: PatchTransformer +metadata: + name: svcNameTran +target: + group: apps + version: v1 + kind: StatefulSet + name: my-sts +patch: |- + apiVersion: apps/v1 + kind: StatefulSet + metadata: + name: my-sts + spec: + serviceName: my-https-svc +`) +} + +func writeHTTPSTransformerBase(th kusttest_test.Harness) { + th.WriteK("https/service", ` +resources: +- https-svc.yaml +`) + th.WriteK("https/transformer", ` +resources: +- transformer.yaml +`) + writeHTTPSTransformerRaw(th) +} + +func writeConfigFromEnvOverlay(th kusttest_test.Harness) { + th.WriteK("config", ` +resources: +- ../base +configMapGenerator: +- name: my-config + literals: + - MY_ENV=foo +generatorOptions: + disableNameSuffixHash: true +patchesStrategicMerge: +- sts-patch.yaml +`) + th.WriteF("config/sts-patch.yaml", ` +apiVersion: apps/v1 +kind: StatefulSet +metadata: + name: my-sts +spec: + template: + spec: + containers: + - name: app + envFrom: + - configMapRef: + name: my-config +`) +} + +func writeConfigFromEnvTransformerRaw(th kusttest_test.Harness) { + th.WriteF("config/map/generator.yaml", ` +apiVersion: builtin +kind: ConfigMapGenerator +metadata: + name: my-config +options: + disableNameSuffixHash: true +literals: +- MY_ENV=foo +`) + th.WriteF("config/transformer/transformer.yaml", ` +apiVersion: builtin +kind: PatchTransformer +metadata: + name: envFromConfigTrans +target: + group: apps + version: v1 + kind: StatefulSet + name: my-sts +patch: |- + apiVersion: apps/v1 + kind: StatefulSet + metadata: + name: my-sts + spec: + template: + spec: + containers: + - name: app + envFrom: + - configMapRef: + name: my-config +`) +} +func writeConfigFromEnvTransformerBase(th kusttest_test.Harness) { + th.WriteK("config/map", ` +resources: +- generator.yaml +`) + th.WriteK("config/transformer", ` +resources: +- transformer.yaml +`) + writeConfigFromEnvTransformerRaw(th) +} + +func writeTolerationsOverlay(th kusttest_test.Harness) { + th.WriteK("tolerations", ` +resources: +- ../base +patchesStrategicMerge: +- sts-patch.yaml +`) + th.WriteF("tolerations/sts-patch.yaml", ` +apiVersion: apps/v1 +kind: StatefulSet +metadata: + name: my-sts +spec: + template: + spec: + tolerations: + - effect: NoExecute + key: node.kubernetes.io/not-ready + tolerationSeconds: 30 +`) +} + +func writeTolerationsTransformerRaw(th kusttest_test.Harness) { + th.WriteF("tolerations/transformer.yaml", ` +apiVersion: builtin +kind: PatchTransformer +metadata: + name: tolTrans +target: + group: apps + version: v1 + kind: StatefulSet + name: my-sts +patch: |- + apiVersion: apps/v1 + kind: StatefulSet + metadata: + name: my-sts + spec: + template: + spec: + tolerations: + - effect: NoExecute + key: node.kubernetes.io/not-ready + tolerationSeconds: 30 +`) +} + +func writeTolerationsTransformerBase(th kusttest_test.Harness) { + th.WriteK("tolerations", ` +resources: +- transformer.yaml +`) + writeTolerationsTransformerRaw(th) +} + +func writeStorageOverlay(th kusttest_test.Harness) { + th.WriteK("storage", ` +resources: +- ../base +patchesJson6902: +- target: + group: apps + version: v1 + kind: StatefulSet + name: my-sts + path: sts-patch.json +`) + th.WriteF("storage/sts-patch.json", ` +[{"op": "replace", "path": "/spec/volumeClaimTemplates/0/spec/storageClassName", "value": "my-sc"}] +`) +} + +func writeStorageTransformerRaw(th kusttest_test.Harness) { + th.WriteF("storage/transformer.yaml", ` +apiVersion: builtin +kind: PatchTransformer +metadata: + name: storageTrans +target: + group: apps + version: v1 + kind: StatefulSet + name: my-sts +patch: |- + [{"op": "replace", "path": "/spec/volumeClaimTemplates/0/spec/storageClassName", "value": "my-sc"}] +`) +} + +func writeStorageTransformerBase(th kusttest_test.Harness) { + th.WriteK("storage", ` +resources: +- transformer.yaml +`) + writeStorageTransformerRaw(th) +} + +func writePatchingOverlays(th kusttest_test.Harness) { + writeStorageOverlay(th) + writeConfigFromEnvOverlay(th) + writeTolerationsOverlay(th) + writeHTTPSOverlay(th) +} + +func writePatchingTransformersRaw(th kusttest_test.Harness) { + writeStorageTransformerRaw(th) + writeConfigFromEnvTransformerRaw(th) + writeTolerationsTransformerRaw(th) + writeHTTPSTransformerRaw(th) +} + +// Similar to writePatchingTransformersRaw, except here the +// transformers and related artifacts are addressable as _bases_. +// They are listed in a kustomization file, and consumers of +// the plugin refer to the kustomization instead of to the local +// file in the "transformers:" field. +// +// Using bases makes the set of files relocatable with +// respect to the overlays, and avoids the need to relax load +// restrictions on file paths reaching outside the `dev` and +// `prod` kustomization roots. I.e. with bases tests can use +// NewKustTestHarness instead of NewKustTestHarnessNoLoadRestrictor. +// +// Using transformer plugins from _bases_ means the plugin config +// must be self-contained, i.e. the config may not have fields that +// refer to local files, since those files won't be present when +// the plugin is instantiated and used. +func writePatchingTransformerBases(th kusttest_test.Harness) { + writeStorageTransformerBase(th) + writeConfigFromEnvTransformerBase(th) + writeTolerationsTransformerBase(th) + writeHTTPSTransformerBase(th) +} + +// Here's a complex kustomization scenario that combines multiple overlays +// on a common base: +// +// dev prod +// | | +// | | +// + ------- + + ------------ + ------------- + +// | | | | | +// | | | | | +// v | v v v +// storage + -----> config tolerations https +// | | | | +// | | | | +// | + --- + + --- + | +// | | | | +// | v v | +// + -----------------------> base <------------------ + +// +// The base resource is a statefulset. Each intermediate overlay manages or +// generates new resources and patches different aspects of the same base +// resource, without using any of the `namePrefix`, `nameSuffix` or `namespace` +// kustomization keywords. +// +// Intermediate overlays: +// - storage: Changes the storage class of the stateful set with a JSON patch. +// - config: Generates a config map and adds a field as an environment +// variable. +// - tolerations: Adds a new tolerations field in the spec. +// - https: Adds a new service resource and changes the service name in the +// stateful set. +// +// Top overlays: +// - dev: Combines the storage and config intermediate overlays. +// - prod: Combines the config, tolerations and https intermediate overlays. + +func TestComplexComposition_Dev_Failure(t *testing.T) { + th := kusttest_test.MakeHarness(t) + writeStatefulSetBase(th) + writePatchingOverlays(th) + th.WriteK("dev", ` +resources: +- ../storage +- ../config +`) + err := th.RunWithErr("dev", th.MakeDefaultOptions()) + if err == nil { + t.Fatalf("Expected resource accumulation error") + } + if !strings.Contains( + err.Error(), "already registered id: StatefulSet.v1.apps/my-sts.[noNs]") { + t.Fatalf("Unexpected err: %v", err) + } +} + +const devDesiredResult = ` +apiVersion: apps/v1 +kind: StatefulSet +metadata: + name: my-sts +spec: + selector: + matchLabels: + app: my-app + serviceName: my-svc + template: + metadata: + labels: + app: my-app + spec: + containers: + - envFrom: + - configMapRef: + name: my-config + image: my-image + name: app + volumeClaimTemplates: + - spec: + storageClassName: my-sc +--- +apiVersion: v1 +data: + MY_ENV: foo +kind: ConfigMap +metadata: + name: my-config +` + +func TestComplexComposition_Dev_SuccessWithRawTransformers(t *testing.T) { + th := kusttest_test.MakeHarness(t) + writeStatefulSetBase(th) + writePatchingTransformersRaw(th) + th.WriteK("dev", ` +resources: +- ../base +generators: +- ../config/map/generator.yaml +transformers: +- ../config/transformer/transformer.yaml +- ../storage/transformer.yaml +`) + m := th.Run("dev", func() krusty.Options { + o := th.MakeDefaultOptions() + o.LoadRestrictions = types.LoadRestrictionsNone + return o + }()) + th.AssertActualEqualsExpected(m, devDesiredResult) +} + +func TestComplexComposition_Dev_SuccessWithBaseTransformers(t *testing.T) { + th := kusttest_test.MakeHarness(t) + writeStatefulSetBase(th) + writePatchingTransformerBases(th) + th.WriteK("dev", ` +resources: +- ../base +generators: +- ../config/map +transformers: +- ../config/transformer +- ../storage +`) + m := th.Run("dev", th.MakeDefaultOptions()) + th.AssertActualEqualsExpected(m, devDesiredResult) +} + +func TestComplexComposition_Prod_Failure(t *testing.T) { + th := kusttest_test.MakeHarness(t) + writeStatefulSetBase(th) + writePatchingOverlays(th) + th.WriteK("prod", ` +resources: +- ../config +- ../tolerations +- ../https +`) + err := th.RunWithErr("prod", th.MakeDefaultOptions()) + if err == nil { + t.Fatalf("Expected resource accumulation error") + } + if !strings.Contains( + err.Error(), "already registered id: StatefulSet.v1.apps/my-sts.[noNs]") { + t.Fatalf("Unexpected err: %v", err) + } +} + +const prodDesiredResult = ` +apiVersion: apps/v1 +kind: StatefulSet +metadata: + name: my-sts +spec: + selector: + matchLabels: + app: my-app + serviceName: my-https-svc + template: + metadata: + labels: + app: my-app + spec: + containers: + - envFrom: + - configMapRef: + name: my-config + image: my-image + name: app + tolerations: + - effect: NoExecute + key: node.kubernetes.io/not-ready + tolerationSeconds: 30 + volumeClaimTemplates: + - spec: + storageClassName: default +--- +apiVersion: v1 +kind: Service +metadata: + name: my-https-svc +spec: + ports: + - name: https + port: 443 + protocol: TCP + selector: + app: my-app +--- +apiVersion: v1 +data: + MY_ENV: foo +kind: ConfigMap +metadata: + name: my-config +` + +func TestComplexComposition_Prod_SuccessWithRawTransformers(t *testing.T) { + th := kusttest_test.MakeHarness(t) + writeStatefulSetBase(th) + writePatchingTransformersRaw(th) + th.WriteK("prod", ` +resources: +- ../base +- ../https/service/https-svc.yaml +generators: +- ../config/map/generator.yaml +transformers: +- ../config/transformer/transformer.yaml +- ../https/transformer/transformer.yaml +- ../tolerations/transformer.yaml +`) + m := th.Run("prod", func() krusty.Options { + o := th.MakeDefaultOptions() + o.LoadRestrictions = types.LoadRestrictionsNone + return o + }()) + th.AssertActualEqualsExpected(m, prodDesiredResult) +} + +func TestComplexComposition_Prod_SuccessWithBaseTransformers(t *testing.T) { + th := kusttest_test.MakeHarness(t) + writeStatefulSetBase(th) + writePatchingTransformerBases(th) + th.WriteK("prod", ` +resources: +- ../base +- ../https/service +generators: +- ../config/map +transformers: +- ../config/transformer +- ../https/transformer +- ../tolerations +`) + m := th.Run("prod", th.MakeDefaultOptions()) + th.AssertActualEqualsExpected(m, prodDesiredResult) +} diff --git a/go/internal/forked/api/krusty/component_test.go b/go/internal/forked/api/krusty/component_test.go new file mode 100644 index 000000000..a76a80284 --- /dev/null +++ b/go/internal/forked/api/krusty/component_test.go @@ -0,0 +1,658 @@ +// Copyright 2020 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package krusty_test + +import ( + "fmt" + "strings" + "testing" + + "sigs.k8s.io/kustomize/api/konfig" + kusttest_test "sigs.k8s.io/kustomize/api/testutils/kusttest" +) + +type FileGen func(kusttest_test.Harness) + +func writeC(path string, content string) FileGen { + return func(th kusttest_test.Harness) { + th.WriteC(path, content) + } +} + +func writeF(path string, content string) FileGen { + return func(th kusttest_test.Harness) { + th.WriteF(path, content) + } +} + +func writeK(path string, content string) FileGen { + return func(th kusttest_test.Harness) { + th.WriteK(path, content) + } +} + +func writeTestBase(th kusttest_test.Harness) { + th.WriteK("base", ` +resources: +- deploy.yaml +configMapGenerator: +- name: my-configmap + literals: + - testValue=purple + - otherValue=green +`) + th.WriteF("base/deploy.yaml", ` +apiVersion: v1 +kind: Deployment +metadata: + name: storefront +spec: + replicas: 1 +`) +} + +func writeTestComponent(th kusttest_test.Harness) { + th.WriteC("comp", ` +namePrefix: comp- +replicas: +- name: storefront + count: 3 +resources: +- stub.yaml +configMapGenerator: +- name: my-configmap + behavior: merge + literals: + - testValue=blue + - compValue=red +`) + th.WriteF("comp/stub.yaml", ` +apiVersion: v1 +kind: Deployment +metadata: + name: stub +spec: + replicas: 1 +`) +} + +func writeOverlayProd(th kusttest_test.Harness) { + th.WriteK("prod", ` +resources: +- ../base +- db + +components: +- ../comp +`) + writeDB(th) +} + +func writeDB(th kusttest_test.Harness) { + deployment("db", "prod/db")(th) +} + +func deployment(name string, path string) FileGen { + return writeF(path, fmt.Sprintf(` +apiVersion: v1 +kind: Deployment +metadata: + name: %s +spec: + type: Logical +`, name)) +} + +func TestComponent(t *testing.T) { + testCases := map[string]struct { + input []FileGen + runPath string + expectedOutput string + }{ + // Components are inserted into the resource hierarchy as the parent of those + // resources that come before it in the resources list of the parent Kustomization. + "basic-component": { + input: []FileGen{writeTestBase, writeTestComponent, writeOverlayProd}, + runPath: "prod", + expectedOutput: ` +apiVersion: v1 +kind: Deployment +metadata: + name: comp-storefront +spec: + replicas: 3 +--- +apiVersion: v1 +data: + compValue: red + otherValue: green + testValue: blue +kind: ConfigMap +metadata: + name: comp-my-configmap-97647ckcmg +--- +apiVersion: v1 +kind: Deployment +metadata: + name: comp-db +spec: + type: Logical +--- +apiVersion: v1 +kind: Deployment +metadata: + name: comp-stub +spec: + replicas: 1 +`, + }, + "multiple-components": { + input: []FileGen{writeTestBase, writeTestComponent, writeDB, + writeC("additionalcomp", ` +configMapGenerator: +- name: my-configmap + behavior: merge + literals: + - otherValue=orange +`), + writeK("prod", ` +resources: +- ../base +- db + +components: +- ../comp +- ../additionalcomp +`), + }, + runPath: "prod", + expectedOutput: ` +apiVersion: v1 +kind: Deployment +metadata: + name: comp-storefront +spec: + replicas: 3 +--- +apiVersion: v1 +data: + compValue: red + otherValue: orange + testValue: blue +kind: ConfigMap +metadata: + name: comp-my-configmap-g486mb229k +--- +apiVersion: v1 +kind: Deployment +metadata: + name: comp-db +spec: + type: Logical +--- +apiVersion: v1 +kind: Deployment +metadata: + name: comp-stub +spec: + replicas: 1 +`, + }, + "nested-components": { + input: []FileGen{writeTestBase, writeTestComponent, writeDB, + writeC("additionalcomp", ` +components: +- ../comp +configMapGenerator: +- name: my-configmap + behavior: merge + literals: + - otherValue=orange +`), + writeK("prod", ` +resources: +- ../base +- db + +components: +- ../additionalcomp +`), + }, + runPath: "prod", + expectedOutput: ` +apiVersion: v1 +kind: Deployment +metadata: + name: comp-storefront +spec: + replicas: 3 +--- +apiVersion: v1 +data: + compValue: red + otherValue: orange + testValue: blue +kind: ConfigMap +metadata: + name: comp-my-configmap-g486mb229k +--- +apiVersion: v1 +kind: Deployment +metadata: + name: comp-db +spec: + type: Logical +--- +apiVersion: v1 +kind: Deployment +metadata: + name: comp-stub +spec: + replicas: 1 +`, + }, + // If a component sets a name prefix on a base, then that base can also be separately included + // without being affected by the component in another branch of the resource tree + "basic-component-with-repeated-base": { + input: []FileGen{writeTestBase, writeTestComponent, writeOverlayProd, + writeK("repeated", ` +resources: +- ../base +- ../prod +`), + }, + runPath: "repeated", + expectedOutput: ` +apiVersion: v1 +kind: Deployment +metadata: + name: storefront +spec: + replicas: 1 +--- +apiVersion: v1 +data: + otherValue: green + testValue: purple +kind: ConfigMap +metadata: + name: my-configmap-9cd648hm8f +--- +apiVersion: v1 +kind: Deployment +metadata: + name: comp-storefront +spec: + replicas: 3 +--- +apiVersion: v1 +data: + compValue: red + otherValue: green + testValue: blue +kind: ConfigMap +metadata: + name: comp-my-configmap-97647ckcmg +--- +apiVersion: v1 +kind: Deployment +metadata: + name: comp-db +spec: + type: Logical +--- +apiVersion: v1 +kind: Deployment +metadata: + name: comp-stub +spec: + replicas: 1 +`, + }, + "applying-component-directly-should-be-same-as-kustomization": { + input: []FileGen{writeTestBase, writeTestComponent, + writeC("direct-component", ` +resources: +- ../base +configMapGenerator: +- name: my-configmap + behavior: merge + literals: + - compValue=red + - testValue=blue +`), + }, + runPath: "direct-component", + expectedOutput: ` +apiVersion: v1 +kind: Deployment +metadata: + name: storefront +spec: + replicas: 1 +--- +apiVersion: v1 +data: + compValue: red + otherValue: green + testValue: blue +kind: ConfigMap +metadata: + name: my-configmap-97647ckcmg +`, + }, + "missing-optional-component-api-version": { + input: []FileGen{writeTestBase, writeOverlayProd, + writeF("comp/"+konfig.DefaultKustomizationFileName(), ` +kind: Component +configMapGenerator: +- name: my-configmap + behavior: merge + literals: + - otherValue=orange +`), + }, + runPath: "prod", + expectedOutput: ` +apiVersion: v1 +kind: Deployment +metadata: + name: storefront +spec: + replicas: 1 +--- +apiVersion: v1 +data: + otherValue: orange + testValue: purple +kind: ConfigMap +metadata: + name: my-configmap-6hhdg8gkdg +--- +apiVersion: v1 +kind: Deployment +metadata: + name: db +spec: + type: Logical +`, + }, + // See how nameSuffix "-b" is also added to the resources included by "comp-a" because they are in the + // accumulator when "comp-b" is accumulated. In practice we could use simple Kustomizations for this example. + "components-can-add-the-same-base-if-the-first-renames-resources": { + input: []FileGen{writeTestBase, + deployment("proxy", "comp-a/proxy.yaml"), + writeC("comp-a", ` +resources: +- ../base + +nameSuffix: "-a" +`), + writeC("comp-b", ` +resources: +- ../base + +nameSuffix: "-b" +`), + writeK("prod", ` +components: +- ../comp-a +- ../comp-b`), + }, + runPath: "prod", + expectedOutput: ` +apiVersion: v1 +kind: Deployment +metadata: + name: storefront-a-b +spec: + replicas: 1 +--- +apiVersion: v1 +data: + otherValue: green + testValue: purple +kind: ConfigMap +metadata: + name: my-configmap-a-b-9cd648hm8f +--- +apiVersion: v1 +kind: Deployment +metadata: + name: storefront-b +spec: + replicas: 1 +--- +apiVersion: v1 +data: + otherValue: green + testValue: purple +kind: ConfigMap +metadata: + name: my-configmap-b-9cd648hm8f +`, + }, + + "multiple-bases-can-add-the-same-component-if-it-doesn-not-define-named-entities": { + input: []FileGen{ + writeC("comp", ` +namespace: prod +`), + writeK("base-a", ` +resources: +- proxy.yaml + +components: +- ../comp +`), + deployment("proxy-a", "base-a/proxy.yaml"), + writeK("base-b", ` +resources: +- proxy.yaml + +components: +- ../comp +`), + deployment("proxy-b", "base-b/proxy.yaml"), + writeK("prod", ` +resources: +- proxy.yaml +- ../base-a +- ../base-b +`), + deployment("proxy-prod", "prod/proxy.yaml"), + }, + runPath: "prod", + // Note that the namepsace has not been applied to proxy-prod because it was not in scope when the + // component was applied + expectedOutput: ` +apiVersion: v1 +kind: Deployment +metadata: + name: proxy-prod +spec: + type: Logical +--- +apiVersion: v1 +kind: Deployment +metadata: + name: proxy-a + namespace: prod +spec: + type: Logical +--- +apiVersion: v1 +kind: Deployment +metadata: + name: proxy-b + namespace: prod +spec: + type: Logical +`, + }, + } + + for tn, tc := range testCases { + t.Run(tn, func(t *testing.T) { + th := kusttest_test.MakeHarness(t) + for _, f := range tc.input { + f(th) + } + m := th.Run(tc.runPath, th.MakeDefaultOptions()) + th.AssertActualEqualsExpected(m, tc.expectedOutput) + }) + } +} + +func TestComponentErrors(t *testing.T) { + testCases := map[string]struct { + input []FileGen + runPath string + expectedError string + }{ + "components-cannot-be-added-to-resources": { + input: []FileGen{writeTestBase, writeTestComponent, + writeK("compinres", ` +resources: +- ../base +- ../comp +`), + }, + runPath: "compinres", + expectedError: "expected kind != 'Component' for path '/comp'", + }, + "kustomizations-cannot-be-added-to-components": { + input: []FileGen{writeTestBase, writeTestComponent, + writeK("kustincomponents", ` +components: +- ../base +- ../comp +`), + }, + runPath: "kustincomponents", + expectedError: "accumulating components: accumulateDirectory: \"expected kind 'Component' for path " + + "'/base' but got 'Kustomization'", + }, + "files-cannot-be-added-to-components-list": { + input: []FileGen{writeTestBase, + writeF("filesincomponents/stub.yaml", ` +apiVersion: v1 +kind: Deployment +metadata: + name: stub +spec: + replicas: 1 +`), + writeK("filesincomponents", ` +components: +- stub.yaml +- ../comp +`), + }, + runPath: "filesincomponents", + expectedError: "'/filesincomponents/stub.yaml' must be a directory to be a root", + }, + "invalid-component-api-version": { + input: []FileGen{writeTestBase, writeOverlayProd, + writeF("comp/"+konfig.DefaultKustomizationFileName(), ` +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Component +configMapGenerator: +- name: my-configmap + behavior: merge + literals: + - otherValue=orange +`), + }, + runPath: "prod", + expectedError: "apiVersion for Component should be kustomize.config.k8s.io/v1alpha1", + }, + "components-cannot-add-the-same-resource": { + input: []FileGen{writeTestBase, + writeC("comp-a", ` +resources: +- proxy.yaml +`), + deployment("proxy", "comp-a/proxy.yaml"), + writeC("comp-b", ` +resources: +- proxy.yaml +`), + deployment("proxy", "comp-b/proxy.yaml"), + writeK("prod", ` +resources: +- ../base + +components: +- ../comp-a +- ../comp-b`), + }, + runPath: "prod", + expectedError: "may not add resource with an already registered id: Deployment.v1.[noGrp]/proxy.[noNs]", + }, + "components-cannot-add-the-same-base": { + input: []FileGen{writeTestBase, + deployment("proxy", "comp-a/proxy.yaml"), + writeC("comp-a", ` +resources: +- ../base +`), + writeC("comp-b", ` +resources: +- ../base +`), + writeK("prod", ` +components: +- ../comp-a +- ../comp-b`), + }, + runPath: "prod", + expectedError: "may not add resource with an already registered id: Deployment.v1.[noGrp]/storefront.[noNs]", + }, + "components-cannot-add-bases-containing-the-same-resource": { + input: []FileGen{writeTestBase, + writeC("comp-a", ` +resources: +- ../base-a +`), + writeK("base-a", ` +resources: +- proxy.yaml +`), + deployment("proxy", "base-a/proxy.yaml"), + writeC("comp-b", ` +resources: +- ../base-b +`), + writeK("base-b", ` +resources: +- proxy.yaml +`), + deployment("proxy", "base-b/proxy.yaml"), + writeK("prod", ` +resources: +- ../base + +components: +- ../comp-a +- ../comp-b`), + }, + runPath: "prod", + expectedError: "may not add resource with an already registered id: Deployment.v1.[noGrp]/proxy.[noNs]", + }, + } + + for tn, tc := range testCases { + t.Run(tn, func(t *testing.T) { + th := kusttest_test.MakeHarness(t) + for _, f := range tc.input { + f(th) + } + err := th.RunWithErr(tc.runPath, th.MakeDefaultOptions()) + if err == nil || !strings.Contains(err.Error(), tc.expectedError) { + t.Fatalf("unexpected error: %s", err) + } + }) + } +} diff --git a/go/internal/forked/api/krusty/configmaps_test.go b/go/internal/forked/api/krusty/configmaps_test.go new file mode 100644 index 000000000..721979983 --- /dev/null +++ b/go/internal/forked/api/krusty/configmaps_test.go @@ -0,0 +1,574 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package krusty_test + +import ( + "testing" + + kusttest_test "sigs.k8s.io/kustomize/api/testutils/kusttest" +) + +// Numbers and booleans are quoted +func TestGeneratorIntVsStringNoMerge(t *testing.T) { + th := kusttest_test.MakeHarness(t) + th.WriteK(".", ` +resources: +- service.yaml +configMapGenerator: +- name: bob + literals: + - fruit=Indian Gooseberry + - year=2020 + - crisis=true +`) + th.WriteF("service.yaml", ` +apiVersion: v1 +kind: Service +metadata: + name: demo +spec: + clusterIP: None +`) + m := th.Run(".", th.MakeDefaultOptions()) + th.AssertActualEqualsExpected( + m, ` +apiVersion: v1 +kind: Service +metadata: + name: demo +spec: + clusterIP: None +--- +apiVersion: v1 +data: + crisis: "true" + fruit: Indian Gooseberry + year: "2020" +kind: ConfigMap +metadata: + name: bob-79t79mt227 +`) +} + +func TestGeneratorIntVsStringWithMerge(t *testing.T) { + th := kusttest_test.MakeHarness(t) + th.WriteK("base", ` +configMapGenerator: +- name: bob + literals: + - fruit=Indian Gooseberry + - year=2020 + - crisis=true +`) + th.WriteK("overlay", ` +resources: +- ../base +configMapGenerator: +- name: bob + behavior: merge + literals: + - month=12 +`) + m := th.Run("overlay", th.MakeDefaultOptions()) + th.AssertActualEqualsExpected(m, `apiVersion: v1 +data: + crisis: "true" + fruit: Indian Gooseberry + month: "12" + year: "2020" +kind: ConfigMap +metadata: + name: bob-bk46gm59c6 +`) +} + +func TestGeneratorFromProperties(t *testing.T) { + th := kusttest_test.MakeHarness(t) + th.WriteK("base", ` +configMapGenerator: + - name: test-configmap + behavior: create + envs: + - properties +`) + th.WriteF("base/properties", ` +VAR1=100 +`) + th.WriteK("overlay", ` +resources: +- ../base +configMapGenerator: +- name: test-configmap + behavior: "merge" + envs: + - properties +`) + th.WriteF("overlay/properties", ` +VAR2=200 +`) + m := th.Run("overlay", th.MakeDefaultOptions()) + th.AssertActualEqualsExpected(m, `apiVersion: v1 +data: + VAR1: "100" + VAR2: "200" +kind: ConfigMap +metadata: + name: test-configmap-hdghb5ddkg +`) +} + +// Generate a Secret and a ConfigMap from the same data +// to compare the result. +func TestGeneratorBasics(t *testing.T) { + th := kusttest_test.MakeHarness(t) + th.WriteK(".", ` +namePrefix: blah- +configMapGenerator: +- name: bob + literals: + - fruit=apple + - vegetable=broccoli + envs: + - foo.env + env: bar.env + files: + - passphrase=phrase.dat + - forces.txt +- name: json + literals: + - 'v2=[{"path": "var/druid/segment-cache"}]' + - >- + druid_segmentCache_locations=[{"path": + "var/druid/segment-cache", + "maxSize": 32000000000, + "freeSpacePercent": 1.0}] +secretGenerator: +- name: bob + literals: + - fruit=apple + - vegetable=broccoli + envs: + - foo.env + files: + - passphrase=phrase.dat + - forces.txt + env: bar.env +`) + th.WriteF("foo.env", ` +MOUNTAIN=everest +OCEAN=pacific +`) + th.WriteF("bar.env", ` +BIRD=falcon +`) + th.WriteF("phrase.dat", ` +Life is short. +But the years are long. +Not while the evil days come not. +`) + th.WriteF("forces.txt", ` +gravitational +electromagnetic +strong nuclear +weak nuclear +`) + opts := th.MakeDefaultOptions() + m := th.Run(".", opts) + th.AssertActualEqualsExpected( + m, ` +apiVersion: v1 +data: + BIRD: falcon + MOUNTAIN: everest + OCEAN: pacific + forces.txt: |2 + + gravitational + electromagnetic + strong nuclear + weak nuclear + fruit: apple + passphrase: |2 + + Life is short. + But the years are long. + Not while the evil days come not. + vegetable: broccoli +kind: ConfigMap +metadata: + name: blah-bob-g9df72cd5b +--- +apiVersion: v1 +data: + druid_segmentCache_locations: '[{"path": "var/druid/segment-cache", "maxSize": + 32000000000, "freeSpacePercent": 1.0}]' + v2: '[{"path": "var/druid/segment-cache"}]' +kind: ConfigMap +metadata: + name: blah-json-5298bc8g99 +--- +apiVersion: v1 +data: + BIRD: ZmFsY29u + MOUNTAIN: ZXZlcmVzdA== + OCEAN: cGFjaWZpYw== + forces.txt: | + CmdyYXZpdGF0aW9uYWwKZWxlY3Ryb21hZ25ldGljCnN0cm9uZyBudWNsZWFyCndlYWsgbn + VjbGVhcgo= + fruit: YXBwbGU= + passphrase: | + CkxpZmUgaXMgc2hvcnQuCkJ1dCB0aGUgeWVhcnMgYXJlIGxvbmcuCk5vdCB3aGlsZSB0aG + UgZXZpbCBkYXlzIGNvbWUgbm90Lgo= + vegetable: YnJvY2NvbGk= +kind: Secret +metadata: + name: blah-bob-58g62h555c +type: Opaque +`) +} + +// TODO: These should be errors instead. +func TestGeneratorRepeatsInKustomization(t *testing.T) { + th := kusttest_test.MakeHarness(t) + th.WriteK(".", ` +namePrefix: blah- +configMapGenerator: +- name: bob + behavior: create + literals: + - bean=pinto + - star=wolf-rayet + literals: + - fruit=apple + - vegetable=broccoli + files: + - forces.txt + files: + - nobles=nobility.txt +`) + th.WriteF("forces.txt", ` +gravitational +electromagnetic +strong nuclear +weak nuclear +`) + th.WriteF("nobility.txt", ` +helium +neon +argon +krypton +xenon +radon +`) + m := th.Run(".", th.MakeDefaultOptions()) + th.AssertActualEqualsExpected(m, ` +apiVersion: v1 +data: + fruit: apple + nobles: |2 + + helium + neon + argon + krypton + xenon + radon + vegetable: broccoli +kind: ConfigMap +metadata: + name: blah-bob-db529cg5bk +`) +} + +func TestIssue3393(t *testing.T) { + th := kusttest_test.MakeHarness(t) + th.WriteK(".", ` +resources: +- cm.yaml +configMapGenerator: + - name: project + behavior: merge + literals: + - ANOTHER_ENV_VARIABLE="bar" +`) + th.WriteF("cm.yaml", ` +apiVersion: v1 +kind: ConfigMap +metadata: + name: project +data: + A_FIRST_ENV_VARIABLE: "foo" +`) + m := th.Run(".", th.MakeDefaultOptions()) + th.AssertActualEqualsExpected(m, ` +apiVersion: v1 +data: + A_FIRST_ENV_VARIABLE: foo + ANOTHER_ENV_VARIABLE: bar +kind: ConfigMap +metadata: + name: project +`) +} + +func TestGeneratorSimpleOverlay(t *testing.T) { + th := kusttest_test.MakeHarness(t) + th.WriteK("base", ` +namePrefix: p- +configMapGenerator: +- name: cm + behavior: create + literals: + - fruit=apple +`) + th.WriteK("overlay", ` +resources: +- ../base +configMapGenerator: +- name: cm + behavior: merge + literals: + - veggie=broccoli +`) + m := th.Run("overlay", th.MakeDefaultOptions()) + th.AssertActualEqualsExpected(m, ` +apiVersion: v1 +data: + fruit: apple + veggie: broccoli +kind: ConfigMap +metadata: + name: p-cm-877mt5hc89 +`) +} + +var binaryHello = []byte{ + 0xff, // non-utf8 + 0x68, // h + 0x65, // e + 0x6c, // l + 0x6c, // l + 0x6f, // o +} + +func manyHellos(count int) (result []byte) { + for i := 0; i < count; i++ { + result = append(result, binaryHello...) + } + return +} + +func TestGeneratorOverlaysBinaryData(t *testing.T) { + th := kusttest_test.MakeHarness(t) + th.WriteF("base/data.bin", string(manyHellos(30))) + th.WriteK("base", ` +namePrefix: p1- +configMapGenerator: +- name: com1 + behavior: create + files: + - data.bin +`) + th.WriteK("overlay", ` +resources: +- ../base +configMapGenerator: +- name: com1 + behavior: merge +`) + m := th.Run("overlay", th.MakeDefaultOptions()) + th.AssertActualEqualsExpected(m, ` +apiVersion: v1 +binaryData: + data.bin: | + /2hlbGxv/2hlbGxv/2hlbGxv/2hlbGxv/2hlbGxv/2hlbGxv/2hlbGxv/2hlbGxv/2hlbG + xv/2hlbGxv/2hlbGxv/2hlbGxv/2hlbGxv/2hlbGxv/2hlbGxv/2hlbGxv/2hlbGxv/2hl + bGxv/2hlbGxv/2hlbGxv/2hlbGxv/2hlbGxv/2hlbGxv/2hlbGxv/2hlbGxv/2hlbGxv/2 + hlbGxv/2hlbGxv/2hlbGxv/2hlbGxv +kind: ConfigMap +metadata: + name: p1-com1-96gmmt6gt5 +`) +} + +func TestGeneratorOverlays(t *testing.T) { + th := kusttest_test.MakeHarness(t) + th.WriteK("base1", ` +namePrefix: p1- +configMapGenerator: +- name: com1 + behavior: create + literals: + - from=base +`) + th.WriteK("base2", ` +namePrefix: p2- +configMapGenerator: +- name: com2 + behavior: create + literals: + - from=base +`) + th.WriteK("overlay/o1", ` +resources: +- ../../base1 +configMapGenerator: +- name: com1 + behavior: merge + literals: + - from=overlay +`) + th.WriteK("overlay/o2", ` +resources: +- ../../base2 +configMapGenerator: +- name: com2 + behavior: merge + literals: + - from=overlay +`) + th.WriteK("overlay", ` +resources: +- o1 +- o2 +configMapGenerator: +- name: com1 + behavior: merge + literals: + - foo=bar + - baz=qux +`) + m := th.Run("overlay", th.MakeDefaultOptions()) + th.AssertActualEqualsExpected(m, ` +apiVersion: v1 +data: + baz: qux + foo: bar + from: overlay +kind: ConfigMap +metadata: + name: p1-com1-8tc62428t2 +--- +apiVersion: v1 +data: + from: overlay +kind: ConfigMap +metadata: + name: p2-com2-87mcggf7d7 +`) +} + +func TestConfigMapGeneratorMergeNamePrefix(t *testing.T) { + + th := kusttest_test.MakeHarness(t) + th.WriteK("base", ` +configMapGenerator: +- name: cm + behavior: create + literals: + - foo=bar +`) + th.WriteK("o1", ` +resources: +- ../base +namePrefix: o1- +`) + th.WriteK("o2", ` +resources: +- ../base +nameSuffix: -o2 +`) + th.WriteK(".", ` +resources: +- o1 +- o2 +configMapGenerator: +- name: o1-cm + behavior: merge + literals: + - big=bang +- name: cm-o2 + behavior: merge + literals: + - big=crunch +`) + m := th.Run(".", th.MakeDefaultOptions()) + th.AssertActualEqualsExpected(m, ` +apiVersion: v1 +data: + big: bang + foo: bar +kind: ConfigMap +metadata: + name: o1-cm-ft9mmdc8c6 +--- +apiVersion: v1 +data: + big: crunch + foo: bar +kind: ConfigMap +metadata: + name: cm-o2-5k95kd76ft +`) +} + +func TestConfigMapGeneratorLiteralNewline(t *testing.T) { + th := kusttest_test.MakeHarness(t) + th.WriteK(".", ` +generators: +- configmaps.yaml +`) + th.WriteF("configmaps.yaml", ` +apiVersion: builtin +kind: ConfigMapGenerator +metadata: + name: testing +literals: + - | + initial.txt=greetings + everyone + - | + final.txt=different + behavior +--- +`) + m := th.Run(".", th.MakeDefaultOptions()) + th.AssertActualEqualsExpected( + m, ` +apiVersion: v1 +data: + final.txt: | + different + behavior + initial.txt: | + greetings + everyone +kind: ConfigMap +metadata: + name: testing-tt4769fb52 +`) +} + +// regression test for https://github.com/kubernetes-sigs/kustomize/issues/4233 +func TestDataEndsWithQuotes(t *testing.T) { + th := kusttest_test.MakeHarness(t) + th.WriteK(".", ` +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization +configMapGenerator: + - name: test + literals: + - TEST=this is a 'test' +`) + + m := th.Run(".", th.MakeDefaultOptions()) + th.AssertActualEqualsExpected( + m, `apiVersion: v1 +data: + TEST: this is a 'test' +kind: ConfigMap +metadata: + name: test-k9cc55dfm5 +`) +} diff --git a/go/internal/forked/api/krusty/crd_test.go b/go/internal/forked/api/krusty/crd_test.go new file mode 100644 index 000000000..a448b2ce8 --- /dev/null +++ b/go/internal/forked/api/krusty/crd_test.go @@ -0,0 +1,362 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package krusty_test + +import ( + "testing" + + kusttest_test "sigs.k8s.io/kustomize/api/testutils/kusttest" +) + +func writeBaseWithCrd(th kusttest_test.Harness) { + th.WriteK("base", ` +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization +crds: +- mycrd.json + +resources: +- secret.yaml +- mykind.yaml +- bee.yaml + +namePrefix: x- +`) + th.WriteF("base/bee.yaml", ` +apiVersion: v1beta1 +kind: Bee +metadata: + name: bee +spec: + action: fly +`) + th.WriteF("base/mykind.yaml", ` +apiVersion: jingfang.example.com/v1 +kind: MyKind +metadata: + name: mykind +spec: + secretRef: + name: crdsecret + beeRef: + name: bee +`) + th.WriteF("base/secret.yaml", ` +apiVersion: v1 +kind: Secret +metadata: + name: crdsecret +data: + PATH: yellowBrickRoad +`) + th.WriteF("base/mycrd.json", ` +{ + "github.com/example/pkg/apis/jingfang/v1beta1.Bee": { + "Schema": { + "description": "Bee", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object.", + "type": "string" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents.", + "type": "string" + }, + "metadata": { + "$ref": "k8s.io/apimachinery/pkg/apis/meta/v1.ObjectMeta" + }, + "spec": { + "$ref": "github.com/example/pkg/apis/jingfang/v1beta1.BeeSpec" + }, + "status": { + "$ref": "github.com/example/pkg/apis/jingfang/v1beta1.BeeStatus" + } + } + }, + "Dependencies": [ + "github.com/example/pkg/apis/jingfang/v1beta1.BeeSpec", + "github.com/example/pkg/apis/jingfang/v1beta1.BeeStatus", + "k8s.io/apimachinery/pkg/apis/meta/v1.ObjectMeta" + ] + }, + "github.com/example/pkg/apis/jingfang/v1beta1.BeeList": { + "Schema": { + "required": [ + "items" + ], + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object.", + "type": "string" + }, + "items": { + "type": "array", + "items": { + "$ref": "github.com/example/pkg/apis/jingfang/v1beta1.Bee" + } + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents.", + "type": "string" + }, + "metadata": { + "$ref": "k8s.io/apimachinery/pkg/apis/meta/v1.ListMeta" + } + } + }, + "Dependencies": [ + "github.com/example/pkg/apis/jingfang/v1beta1.Bee", + "k8s.io/apimachinery/pkg/apis/meta/v1.ListMeta" + ] + }, + "github.com/example/pkg/apis/jingfang/v1beta1.BeeObjectReference": { + "Schema": { + "properties": { + "name": { + "type": "string" + } + } + }, + "Dependencies": [] + }, + "github.com/example/pkg/apis/jingfang/v1beta1.BeeSpec": { + "Schema": { + "description": "BeeSpec defines the desired state of Bee" + }, + "Dependencies": [] + }, + "github.com/example/pkg/apis/jingfang/v1beta1.BeeStatus": { + "Schema": { + "description": "BeeStatus defines the observed state of Bee" + }, + "Dependencies": [] + }, + "github.com/example/pkg/apis/jingfang/v1beta1.MyKind": { + "Schema": { + "description": "MyKind", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object.", + "type": "string" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents.", + "type": "string" + }, + "metadata": { + "$ref": "k8s.io/apimachinery/pkg/apis/meta/v1.ObjectMeta" + }, + "spec": { + "$ref": "github.com/example/pkg/apis/jingfang/v1beta1.MyKindSpec" + }, + "status": { + "$ref": "github.com/example/pkg/apis/jingfang/v1beta1.MyKindStatus" + } + } + }, + "Dependencies": [ + "github.com/example/pkg/apis/jingfang/v1beta1.MyKindSpec", + "github.com/example/pkg/apis/jingfang/v1beta1.MyKindStatus", + "k8s.io/apimachinery/pkg/apis/meta/v1.ObjectMeta" + ] + }, + "github.com/example/pkg/apis/jingfang/v1beta1.MyKindList": { + "Schema": { + "required": [ + "items" + ], + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object.", + "type": "string" + }, + "items": { + "type": "array", + "items": { + "$ref": "github.com/example/pkg/apis/jingfang/v1beta1.MyKind" + } + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents.", + "type": "string" + }, + "metadata": { + "$ref": "k8s.io/apimachinery/pkg/apis/meta/v1.ListMeta" + } + } + }, + "Dependencies": [ + "github.com/example/pkg/apis/jingfang/v1beta1.MyKind", + "k8s.io/apimachinery/pkg/apis/meta/v1.ListMeta" + ] + }, + "github.com/example/pkg/apis/jingfang/v1beta1.MyKindSpec": { + "Schema": { + "description": "MyKindSpec defines the desired state of MyKind", + "properties": { + "beeRef": { + "x-kubernetes-object-ref-api-version": "v1beta1", + "x-kubernetes-object-ref-kind": "Bee", + "$ref": "github.com/example/pkg/apis/jingfang/v1beta1.BeeObjectReference" + }, + "secretRef": { + "description": "If defined, use this secret for configuring the MYSQL_ROOT_PASSWORD", + "x-kubernetes-object-ref-api-version": "v1", + "x-kubernetes-object-ref-kind": "Secret", + "$ref": "k8s.io/api/core/v1.LocalObjectReference" + } + } + }, + "Dependencies": [ + "github.com/example/pkg/apis/jingfang/v1beta1.BeeObjectReference", + "k8s.io/api/core/v1.LocalObjectReference" + ] + }, + "github.com/example/pkg/apis/jingfang/v1beta1.MyKindStatus": { + "Schema": { + "description": "MyKindStatus defines the observed state of MyKind" + }, + "Dependencies": [] + } +} +`) +} + +func TestCrdBase(t *testing.T) { + th := kusttest_test.MakeHarness(t) + writeBaseWithCrd(th) + m := th.Run("base", th.MakeDefaultOptions()) + th.AssertActualEqualsExpected(m, ` +apiVersion: v1 +data: + PATH: yellowBrickRoad +kind: Secret +metadata: + name: x-crdsecret +--- +apiVersion: jingfang.example.com/v1 +kind: MyKind +metadata: + name: x-mykind +spec: + beeRef: + name: x-bee + secretRef: + name: x-crdsecret +--- +apiVersion: v1beta1 +kind: Bee +metadata: + name: x-bee +spec: + action: fly +`) +} + +func TestCrdWithOverlay(t *testing.T) { + th := kusttest_test.MakeHarness(t) + writeBaseWithCrd(th) + th.WriteK("overlay", ` +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization +namePrefix: prod- +resources: +- ../base +patchesStrategicMerge: +- bee.yaml +`) + th.WriteF("overlay/bee.yaml", ` +apiVersion: v1beta1 +kind: Bee +metadata: + name: bee +spec: + action: makehoney +`) + m := th.Run("overlay", th.MakeDefaultOptions()) + + th.AssertActualEqualsExpected(m, ` +apiVersion: v1 +data: + PATH: yellowBrickRoad +kind: Secret +metadata: + name: prod-x-crdsecret +--- +apiVersion: jingfang.example.com/v1 +kind: MyKind +metadata: + name: prod-x-mykind +spec: + beeRef: + name: prod-x-bee + secretRef: + name: prod-x-crdsecret +--- +apiVersion: v1beta1 +kind: Bee +metadata: + name: prod-x-bee +spec: + action: makehoney +`) +} + +func TestCrdWithContainers(t *testing.T) { + th := kusttest_test.MakeHarness(t) + th.WriteK("crd/containers", ` +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization +resources: + - crd.yaml +images: + - name: test/test + newName: registry.gitlab.com/test + newTag: latest +`) + th.WriteF("crd/containers/crd.yaml", ` +apiVersion: apiextensions.k8s.io/v1beta1 +kind: CustomResourceDefinition +metadata: + name: crontabs.stable.example.com +spec: + group: stable.example.com + scope: Namespaced + names: + plural: crontabs + singular: crontab + kind: CronTab + shortNames: + - ct + validation: + openAPIV3Schema: + properties: + spec: + containers: + description: Containers allows injecting additional containers + `) + m := th.Run("crd/containers", th.MakeDefaultOptions()) + th.AssertActualEqualsExpected(m, ` +apiVersion: apiextensions.k8s.io/v1beta1 +kind: CustomResourceDefinition +metadata: + name: crontabs.stable.example.com +spec: + group: stable.example.com + names: + kind: CronTab + plural: crontabs + shortNames: + - ct + singular: crontab + scope: Namespaced + validation: + openAPIV3Schema: + properties: + spec: + containers: + description: Containers allows injecting additional containers +`) +} diff --git a/go/internal/forked/api/krusty/customconfig_test.go b/go/internal/forked/api/krusty/customconfig_test.go new file mode 100644 index 000000000..291de8dd2 --- /dev/null +++ b/go/internal/forked/api/krusty/customconfig_test.go @@ -0,0 +1,316 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package krusty_test + +import ( + "testing" + + kusttest_test "sigs.k8s.io/kustomize/api/testutils/kusttest" +) + +func makeBaseReferencingCustomConfig(th kusttest_test.Harness) { + th.WriteK("base", ` +namePrefix: x- +commonLabels: + app: myApp +vars: +- name: APRIL_DIET + objref: + kind: Giraffe + name: april + fieldref: + fieldpath: spec.diet +- name: KOKO_DIET + objref: + kind: Gorilla + name: koko + fieldref: + fieldpath: spec.diet +resources: +- animalPark.yaml +- giraffes.yaml +- gorilla.yaml +configurations: +- config/defaults.yaml +- config/custom.yaml +`) + th.WriteF("base/giraffes.yaml", ` +kind: Giraffe +metadata: + name: april +spec: + diet: mimosa + location: NE +--- +kind: Giraffe +metadata: + name: may +spec: + diet: acacia + location: SE +`) + th.WriteF("base/gorilla.yaml", ` +kind: Gorilla +metadata: + name: koko +spec: + diet: bambooshoots + location: SW +`) + th.WriteF("base/animalPark.yaml", ` +apiVersion: foo +kind: AnimalPark +metadata: + name: sandiego +spec: + gorillaRef: + name: koko + giraffeRef: + name: april + food: + - "$(APRIL_DIET)" + - "$(KOKO_DIET)" +`) +} + +func TestCustomConfig(t *testing.T) { + th := kusttest_test.MakeHarness(t) + makeBaseReferencingCustomConfig(th) + th.WriteLegacyConfigs("base/config/defaults.yaml") + th.WriteF("base/config/custom.yaml", ` +nameReference: +- kind: Gorilla + fieldSpecs: + - kind: AnimalPark + path: spec/gorillaRef/name +- kind: Giraffe + fieldSpecs: + - kind: AnimalPark + path: spec/giraffeRef/name +varReference: +- path: spec/food + kind: AnimalPark +`) + m := th.Run("base", th.MakeDefaultOptions()) + th.AssertActualEqualsExpected(m, ` +apiVersion: foo +kind: AnimalPark +metadata: + labels: + app: myApp + name: x-sandiego +spec: + food: + - mimosa + - bambooshoots + giraffeRef: + name: x-april + gorillaRef: + name: x-koko +--- +kind: Giraffe +metadata: + labels: + app: myApp + name: x-april +spec: + diet: mimosa + location: NE +--- +kind: Giraffe +metadata: + labels: + app: myApp + name: x-may +spec: + diet: acacia + location: SE +--- +kind: Gorilla +metadata: + labels: + app: myApp + name: x-koko +spec: + diet: bambooshoots + location: SW +`) +} + +func TestCustomConfigWithDefaultOverspecification(t *testing.T) { + th := kusttest_test.MakeHarness(t) + makeBaseReferencingCustomConfig(th) + th.WriteLegacyConfigs("base/config/defaults.yaml") + // Specifying namePrefix here conflicts with (is the same as) + // the defaults written above. This is intentional in the + // test to assure duplicate config doesn't cause problems. + th.WriteF("base/config/custom.yaml", ` +namePrefix: +- path: metadata/name +nameReference: +- kind: Gorilla + fieldSpecs: + - kind: AnimalPark + path: spec/gorillaRef/name +- kind: Giraffe + fieldSpecs: + - kind: AnimalPark + path: spec/giraffeRef/name +varReference: +- path: spec/food + kind: AnimalPark +`) + m := th.Run("base", th.MakeDefaultOptions()) + th.AssertActualEqualsExpected(m, ` +apiVersion: foo +kind: AnimalPark +metadata: + labels: + app: myApp + name: x-sandiego +spec: + food: + - mimosa + - bambooshoots + giraffeRef: + name: x-april + gorillaRef: + name: x-koko +--- +kind: Giraffe +metadata: + labels: + app: myApp + name: x-april +spec: + diet: mimosa + location: NE +--- +kind: Giraffe +metadata: + labels: + app: myApp + name: x-may +spec: + diet: acacia + location: SE +--- +kind: Gorilla +metadata: + labels: + app: myApp + name: x-koko +spec: + diet: bambooshoots + location: SW +`) +} + +func TestFixedBug605_BaseCustomizationAvailableInOverlay(t *testing.T) { + th := kusttest_test.MakeHarness(t) + makeBaseReferencingCustomConfig(th) + th.WriteLegacyConfigs("base/config/defaults.yaml") + th.WriteF("base/config/custom.yaml", ` +nameReference: +- kind: Gorilla + fieldSpecs: + - apiVersion: foo + kind: AnimalPark + path: spec/gorillaRef/name +- kind: Giraffe + fieldSpecs: + - apiVersion: foo + kind: AnimalPark + path: spec/giraffeRef/name +varReference: +- path: spec/food + apiVersion: foo + kind: AnimalPark +`) + th.WriteK("overlay", ` +namePrefix: o- +commonLabels: + movie: planetOfTheApes +patchesStrategicMerge: +- animalPark.yaml +resources: +- ../base +- ursus.yaml +`) + th.WriteF("overlay/ursus.yaml", ` +kind: Gorilla +metadata: + name: ursus +spec: + diet: heston + location: Arizona +`) + // The following replaces the gorillaRef in the AnimalPark. + th.WriteF("overlay/animalPark.yaml", ` +apiVersion: foo +kind: AnimalPark +metadata: + name: sandiego +spec: + gorillaRef: + name: ursus +`) + m := th.Run("overlay", th.MakeDefaultOptions()) + th.AssertActualEqualsExpected(m, ` +apiVersion: foo +kind: AnimalPark +metadata: + labels: + app: myApp + movie: planetOfTheApes + name: o-x-sandiego +spec: + food: + - mimosa + - bambooshoots + giraffeRef: + name: o-x-april + gorillaRef: + name: o-ursus +--- +kind: Giraffe +metadata: + labels: + app: myApp + movie: planetOfTheApes + name: o-x-april +spec: + diet: mimosa + location: NE +--- +kind: Giraffe +metadata: + labels: + app: myApp + movie: planetOfTheApes + name: o-x-may +spec: + diet: acacia + location: SE +--- +kind: Gorilla +metadata: + labels: + app: myApp + movie: planetOfTheApes + name: o-x-koko +spec: + diet: bambooshoots + location: SW +--- +kind: Gorilla +metadata: + labels: + movie: planetOfTheApes + name: o-ursus +spec: + diet: heston + location: Arizona +`) +} diff --git a/go/internal/forked/api/krusty/customconfigofbuiltinplugin_test.go b/go/internal/forked/api/krusty/customconfigofbuiltinplugin_test.go new file mode 100644 index 000000000..7b33e4038 --- /dev/null +++ b/go/internal/forked/api/krusty/customconfigofbuiltinplugin_test.go @@ -0,0 +1,96 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package krusty_test + +import ( + "testing" + + "sigs.k8s.io/kustomize/api/types" + + kusttest_test "sigs.k8s.io/kustomize/api/testutils/kusttest" +) + +// Demo custom configuration of a builtin transformation. +// This is a NamePrefixer that touches Deployments +// and Services exclusively. +func TestCustomNamePrefixer(t *testing.T) { + th := kusttest_test.MakeEnhancedHarness(t) + th.GetPluginConfig().BpLoadingOptions = types.BploUseStaticallyLinked + defer th.Reset() + + th.WriteK(".", ` +resources: +- deployment.yaml +- role.yaml +- service.yaml +transformers: +- prefixer.yaml +`) + th.WriteF("prefixer.yaml", ` +apiVersion: builtin +kind: PrefixSuffixTransformer +metadata: + name: customPrefixer +prefix: zzz- +fieldSpecs: +- kind: Deployment + path: metadata/name +- kind: Service + path: metadata/name +`) + th.WriteF("deployment.yaml", ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: myDeployment +spec: + template: + metadata: + labels: + backend: awesome + spec: + containers: + - name: whatever + image: whatever +`) + th.WriteF("role.yaml", ` +apiVersion: v1 +kind: Role +metadata: + name: myRole +`) + th.WriteF("service.yaml", ` +apiVersion: v1 +kind: Service +metadata: + name: myService +`) + + m := th.Run(".", th.MakeDefaultOptions()) + th.AssertActualEqualsExpected(m, ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: zzz-myDeployment +spec: + template: + metadata: + labels: + backend: awesome + spec: + containers: + - image: whatever + name: whatever +--- +apiVersion: v1 +kind: Role +metadata: + name: myRole +--- +apiVersion: v1 +kind: Service +metadata: + name: zzz-myService +`) +} diff --git a/go/internal/forked/api/krusty/customconfigreusable_test.go b/go/internal/forked/api/krusty/customconfigreusable_test.go new file mode 100644 index 000000000..04e56512c --- /dev/null +++ b/go/internal/forked/api/krusty/customconfigreusable_test.go @@ -0,0 +1,178 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package krusty_test + +import ( + "testing" + + kusttest_test "sigs.k8s.io/kustomize/api/testutils/kusttest" + "sigs.k8s.io/kustomize/api/types" +) + +// Demo custom configuration as a base. +// This test shows usage of three custom configurations sitting +// in a base, allowing them to be reused in any number of +// kustomizations. +func TestReusableCustomTransformers(t *testing.T) { + th := kusttest_test.MakeEnhancedHarness(t). + PrepBuiltin("AnnotationsTransformer"). + PrepBuiltin("LabelTransformer") + th.GetPluginConfig().BpLoadingOptions = types.BploUseStaticallyLinked + defer th.Reset() + + // First write three custom configurations for builtin plugins. + + // A custom name prefixer that only touches Deployments and Services. + th.WriteF("mytransformers/deploymentServicePrefixer.yaml", ` +apiVersion: builtin +kind: PrefixSuffixTransformer +metadata: + name: myPrefixer +prefix: bob- +fieldSpecs: +- kind: Deployment + path: metadata/name +- kind: Service + path: metadata/name +`) + + // A custom annotator exclusively annotating Roles. + th.WriteF("mytransformers/roleAnnotator.yaml", ` +apiVersion: builtin +kind: AnnotationsTransformer +metadata: + name: myAnnotator +annotations: + # Imagine that SRE has not approved this role yet. + status: probationary +fieldSpecs: +- path: metadata/annotations + create: true + kind: Role +`) + + // A custom labeller that only labels Deployments, + // and only labels them at their top metadata level + // exclusively. It does not modify selectors or + // add labels to pods in the template. + th.WriteF("mytransformers/deploymentLabeller.yaml", ` +apiVersion: builtin +kind: LabelTransformer +metadata: + name: myLabeller +labels: + pager: 867-5301 +fieldSpecs: +- path: metadata/labels + create: true + kind: Deployment +`) + + // Combine these custom transformers in one kustomization file. + // This kustomization file contains only resources that + // all happen to be plugin configurations. This makes + // these plugins re-usable as a group in any number of other + // kustomizations. + th.WriteK("mytransformers", ` +resources: +- deploymentServicePrefixer.yaml +- roleAnnotator.yaml +- deploymentLabeller.yaml +`) + + // Finally, define the kustomization for the (arbitrarily named) + // staging environment. + th.WriteK("staging", ` + +# Bring in the custom transformers. +transformers: +- ../mytransformers + +# Also use the "classic" labeller, which behind the scenes uses +# the LabelTransformer, but with a broad configuration targeting +# many resources and fields (including selector fields). +# It's a big hammer - probably too big; the output shows all the +# places 'acmeCorp' now appears as a result. To avoid this, +# define your own config for your own LabelTransformer instance +# as shown above. +commonLabels: + company: acmeCorp + +# Specify the resources to modify. +resources: +- deployment.yaml +- role.yaml +- service.yaml +`) + th.WriteF("staging/deployment.yaml", ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: myDeployment +spec: + template: + metadata: + labels: + backend: flawless + spec: + containers: + - name: whatever + image: whatever +`) + th.WriteF("staging/role.yaml", ` +apiVersion: v1 +kind: Role +metadata: + name: myRole +`) + th.WriteF("staging/service.yaml", ` +apiVersion: v1 +kind: Service +metadata: + name: myService +`) + + m := th.Run("staging", th.MakeDefaultOptions()) + th.AssertActualEqualsExpected(m, ` +apiVersion: apps/v1 +kind: Deployment +metadata: + labels: + company: acmeCorp + pager: 867-5301 + name: bob-myDeployment +spec: + selector: + matchLabels: + company: acmeCorp + template: + metadata: + labels: + backend: flawless + company: acmeCorp + spec: + containers: + - image: whatever + name: whatever +--- +apiVersion: v1 +kind: Role +metadata: + annotations: + status: probationary + labels: + company: acmeCorp + name: myRole +--- +apiVersion: v1 +kind: Service +metadata: + labels: + company: acmeCorp + name: bob-myService +spec: + selector: + company: acmeCorp +`) +} diff --git a/go/internal/forked/api/krusty/diamondcomposition_test.go b/go/internal/forked/api/krusty/diamondcomposition_test.go new file mode 100644 index 000000000..401afb1a9 --- /dev/null +++ b/go/internal/forked/api/krusty/diamondcomposition_test.go @@ -0,0 +1,459 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package krusty_test + +import ( + "fmt" + "path/filepath" + "strings" + "testing" + + kusttest_test "sigs.k8s.io/kustomize/api/testutils/kusttest" + "sigs.k8s.io/kustomize/api/types" +) + +const patchAddProbe = ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: my-deployment +spec: + template: + spec: + containers: + - name: my-deployment + livenessProbe: + httpGet: + path: /healthz + port: 8080 +` + +const container = `{ "image": "my-image", "livenessProbe": { "httpGet" : {"path": "/healthz", "port": 8080 } }, "name": "my-deployment"}` + +const patchJsonAddProbe = `[{"op": "replace", "path": "/spec/template/spec/containers/0", "value": ` + + container + `}]` + +const patchDnsPolicy = ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: my-deployment +spec: + template: + spec: + dnsPolicy: ClusterFirst +` +const patchJsonDnsPolicy = `[{"op": "add", "path": "/spec/template/spec/dnsPolicy", "value": "ClusterFirst"}]` + +const patchRestartPolicy = ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: my-deployment +spec: + template: + spec: + restartPolicy: Always +` +const patchJsonRestartPolicy = `[{"op": "add", "path": "/spec/template/spec/restartPolicy", "value": "Always"}]` + +func writeDeploymentBase(th kusttest_test.Harness) { + th.WriteK("base", ` +resources: +- deployment.yaml +`) + + th.WriteF("base/deployment.yaml", ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: my-deployment +spec: + template: + spec: + dnsPolicy: "None" + containers: + - name: my-deployment + image: my-image +`) +} + +func writeProbeOverlay(th kusttest_test.Harness) { + th.WriteK("probe", ` +resources: +- ../base +patchesStrategicMerge: +- dep-patch.yaml +`) + th.WriteF("probe/dep-patch.yaml", patchAddProbe) +} + +func writeDNSOverlay(th kusttest_test.Harness) { + th.WriteK("dns", ` +resources: +- ../base +patchesStrategicMerge: +- dep-patch.yaml +`) + th.WriteF("dns/dep-patch.yaml", patchDnsPolicy) +} + +func writeRestartOverlay(th kusttest_test.Harness) { + th.WriteK("restart", ` +resources: +- ../base +patchesStrategicMerge: +- dep-patch.yaml +`) + th.WriteF("restart/dep-patch.yaml", patchRestartPolicy) +} + +// Here's a composite kustomization, that combines multiple overlays +// (replicas, dns and metadata) which patch the same base resource. +// +// The base resource is a deployment and the overlays patch aspects +// of it, without using any of the `namePrefix`, `nameSuffix` or `namespace` +// kustomization keywords. +// +// composite +// / | \ +// probe dns restart +// \ | / +// base +// +func TestIssue1251_CompositeDiamond_Failure(t *testing.T) { + th := kusttest_test.MakeHarness(t) + writeDeploymentBase(th) + writeProbeOverlay(th) + writeDNSOverlay(th) + writeRestartOverlay(th) + + th.WriteK("composite", ` +resources: +- ../probe +- ../dns +- ../restart +`) + + err := th.RunWithErr("composite", th.MakeDefaultOptions()) + if err == nil { + t.Fatalf("Expected resource accumulation error") + } + if !strings.Contains( + err.Error(), "already registered id: Deployment.v1.apps/my-deployment.[noNs]") { + t.Fatalf("Unexpected err: %v", err) + } +} + +const expectedPatchedDeployment = ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: my-deployment +spec: + template: + spec: + containers: + - image: my-image + livenessProbe: + httpGet: + path: /healthz + port: 8080 + name: my-deployment + dnsPolicy: ClusterFirst + restartPolicy: Always +` + +// This test reuses some methods from TestIssue1251_CompositeDiamond, +// but overwrites the kustomization files in the overlays. +func TestIssue1251_Patches_Overlayed(t *testing.T) { + th := kusttest_test.MakeHarness(t) + writeDeploymentBase(th) + + // probe overlays base. + writeProbeOverlay(th) + + // dns overlays probe. + writeDNSOverlay(th) + th.WriteK("dns", ` +resources: +- ../probe +patchesStrategicMerge: +- dep-patch.yaml +`) + + // restart overlays dns. + writeRestartOverlay(th) + th.WriteK("restart", ` +resources: +- ../dns +patchesStrategicMerge: +- dep-patch.yaml +`) + + m := th.Run("restart", th.MakeDefaultOptions()) + th.AssertActualEqualsExpected(m, expectedPatchedDeployment) +} + +func TestIssue1251_Patches_Local(t *testing.T) { + th := kusttest_test.MakeHarness(t) + writeDeploymentBase(th) + + th.WriteK("composite", ` +resources: +- ../base +patchesStrategicMerge: +- patchAddProbe.yaml +- patchDnsPolicy.yaml +- patchRestartPolicy.yaml +`) + th.WriteF("composite/patchRestartPolicy.yaml", patchRestartPolicy) + th.WriteF("composite/patchDnsPolicy.yaml", patchDnsPolicy) + th.WriteF("composite/patchAddProbe.yaml", patchAddProbe) + + m := th.Run("composite", th.MakeDefaultOptions()) + th.AssertActualEqualsExpected(m, expectedPatchedDeployment) +} + +func definePatchDirStructure(th kusttest_test.Harness) { + writeDeploymentBase(th) + + th.WriteF("patches/patchRestartPolicy.yaml", patchRestartPolicy) + th.WriteF("patches/patchDnsPolicy.yaml", patchDnsPolicy) + th.WriteF("patches/patchAddProbe.yaml", patchAddProbe) +} + +// Fails due to file load restrictor. +func TestIssue1251_Patches_ProdVsDev_Failure(t *testing.T) { + th := kusttest_test.MakeHarness(t) + definePatchDirStructure(th) + + th.WriteK("prod", ` +resources: +- ../base +patchesStrategicMerge: +- ../patches/patchAddProbe.yaml +- ../patches/patchDnsPolicy.yaml +`) + + err := th.RunWithErr("prod", th.MakeDefaultOptions()) + if err == nil { + t.Fatalf("expected error") + } + if !strings.Contains( + err.Error(), + "security; file '/patches/patchAddProbe.yaml' is not in or below '/prod'") { + t.Fatalf("unexpected error: %v", err) + } +} + +const prodDevMergeResult1 = ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: my-deployment +spec: + template: + spec: + containers: + - image: my-image + livenessProbe: + httpGet: + path: /healthz + port: 8080 + name: my-deployment + dnsPolicy: ClusterFirst +` + +const prodDevMergeResult2 = ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: my-deployment +spec: + template: + spec: + containers: + - image: my-image + name: my-deployment + dnsPolicy: ClusterFirst + restartPolicy: Always +` + +// This test does what +// TestIssue1251_Patches_ProdVsDev_Failure +// failed to do, because this test does the equivalent +// os specifying `--load_restrictor none` on the build. +// +// This allows the use patch files located outside the +// kustomization root, and not in a kustomization +// themselves. +// +// Doing so means the kustomization using them is no +// longer relocatable, not addressible via a git URL, +// and not git clonable. It's no longer self-contained. +// +// Likewise suppressing load restrictions happens for +// the entire build (i.e. everything can reach outside +// the kustomization root), opening the user to whatever +// threat the load restrictor was meant to address. +func TestIssue1251_Patches_ProdVsDev(t *testing.T) { + th := kusttest_test.MakeHarness(t) + definePatchDirStructure(th) + + th.WriteK("prod", ` +resources: +- ../base +patchesStrategicMerge: +- ../patches/patchAddProbe.yaml +- ../patches/patchDnsPolicy.yaml +`) + opts := th.MakeDefaultOptions() + opts.LoadRestrictions = types.LoadRestrictionsNone + + m := th.Run("prod", opts) + th.AssertActualEqualsExpected(m, prodDevMergeResult1) + + th = kusttest_test.MakeHarness(t) + definePatchDirStructure(th) + + th.WriteK("dev", ` +resources: +- ../base +patchesStrategicMerge: +- ../patches/patchDnsPolicy.yaml +- ../patches/patchRestartPolicy.yaml +`) + + m = th.Run("dev", opts) + th.AssertActualEqualsExpected(m, prodDevMergeResult2) +} + +func TestIssue1251_Plugins_ProdVsDev(t *testing.T) { + th := kusttest_test.MakeEnhancedHarness(t). + PrepBuiltin("PatchJson6902Transformer") + defer th.Reset() + + defineTransformerDirStructure(th) + th.WriteK("prod", ` +resources: +- ../base +transformers: +- ../patches/addProbe +- ../patches/addDnsPolicy +`) + + m := th.Run("prod", th.MakeDefaultOptions()) + th.AssertActualEqualsExpected(m, prodDevMergeResult1) + + defineTransformerDirStructure(th) + th.WriteK("dev", ` +resources: +- ../base +transformers: +- ../patches/addRestartPolicy +- ../patches/addDnsPolicy +`) + + m = th.Run("dev", th.MakeDefaultOptions()) + th.AssertActualEqualsExpected(m, prodDevMergeResult2) +} + +func TestIssue1251_Plugins_Local(t *testing.T) { + th := kusttest_test.MakeEnhancedHarness(t). + PrepBuiltin("PatchJson6902Transformer") + defer th.Reset() + + writeDeploymentBase(th.Harness) + + writeJsonTransformerPluginConfig( + th, "composite", "addDnsPolicy", patchJsonDnsPolicy) + writeJsonTransformerPluginConfig( + th, "composite", "addRestartPolicy", patchJsonRestartPolicy) + writeJsonTransformerPluginConfig( + th, "composite", "addProbe", patchJsonAddProbe) + + th.WriteK("composite", ` +resources: +- ../base +transformers: +- addDnsPolicyConfig.yaml +- addRestartPolicyConfig.yaml +- addProbeConfig.yaml +`) + m := th.Run("composite", th.MakeDefaultOptions()) + th.AssertActualEqualsExpected(m, expectedPatchedDeployment) +} + +func writeJsonTransformerPluginConfig( + th *kusttest_test.HarnessEnhanced, path, name, patch string) { + th.WriteF(filepath.Join(path, name+"Config.yaml"), + fmt.Sprintf(` +apiVersion: builtin +kind: PatchJson6902Transformer +metadata: + name: %s +target: + group: apps + version: v1 + kind: Deployment + name: my-deployment +jsonOp: '%s' +`, name, patch)) +} + +// Remote in the sense that they are bundled in a different kustomization. +func TestIssue1251_Plugins_Bundled(t *testing.T) { + th := kusttest_test.MakeEnhancedHarness(t). + PrepBuiltin("PatchJson6902Transformer") + defer th.Reset() + writeDeploymentBase(th.Harness) + + th.WriteK("patches", ` +resources: +- addDnsPolicyConfig.yaml +- addRestartPolicyConfig.yaml +- addProbeConfig.yaml +`) + writeJsonTransformerPluginConfig( + th, "patches", "addDnsPolicy", patchJsonDnsPolicy) + writeJsonTransformerPluginConfig( + th, "patches", "addRestartPolicy", patchJsonRestartPolicy) + writeJsonTransformerPluginConfig( + th, "patches", "addProbe", patchJsonAddProbe) + + th.WriteK("composite", ` +resources: +- ../base +transformers: +- ../patches +`) + m := th.Run("composite", th.MakeDefaultOptions()) + th.AssertActualEqualsExpected(m, expectedPatchedDeployment) +} + +func defineTransformerDirStructure(th *kusttest_test.HarnessEnhanced) { + writeDeploymentBase(th.Harness) + + th.WriteK("patches/addDnsPolicy", ` +resources: +- addDnsPolicyConfig.yaml +`) + writeJsonTransformerPluginConfig( + th, "patches/addDnsPolicy", "addDnsPolicy", patchJsonDnsPolicy) + + th.WriteK("patches/addRestartPolicy", ` +resources: +- addRestartPolicyConfig.yaml +`) + writeJsonTransformerPluginConfig( + th, "patches/addRestartPolicy", "addRestartPolicy", patchJsonRestartPolicy) + + th.WriteK("patches/addProbe", ` +resources: +- addProbeConfig.yaml +`) + writeJsonTransformerPluginConfig( + th, "patches/addProbe", "addProbe", patchJsonAddProbe) +} diff --git a/go/internal/forked/api/krusty/diamondpatchref_test.go b/go/internal/forked/api/krusty/diamondpatchref_test.go new file mode 100644 index 000000000..8129bbd8f --- /dev/null +++ b/go/internal/forked/api/krusty/diamondpatchref_test.go @@ -0,0 +1,227 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package krusty_test + +// In the following structure `top` patches `left-deploy` and `right-deploy` to reference the +// configMap in `bottom`. This test verifies `configMapRef.name` in `left-deploy` and +// `right-deploy` is modified correctly. +// +// top +// / \ +// left right +// / \ / \ +// left-service bottom bottom right-service +// | \ / | +// left-deploy bottom right-deploy +// | +// configMap + +import ( + "testing" + + kusttest_test "sigs.k8s.io/kustomize/api/testutils/kusttest" +) + +func TestConfMapNameResolutionInDiamondWithPatches(t *testing.T) { + th := kusttest_test.MakeHarness(t) + + th.WriteK("bottom", ` +configMapGenerator: +- name: bottom + literals: + - KEY=value +`) + + th.WriteK("left-service", ` +resources: +- deployment.yaml +`) + + th.WriteF("left-service/deployment.yaml", ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: left-deploy + labels: + app.kubernetes.io/name: left-deploy +spec: + selector: + matchLabels: + app.kubernetes.io/name: left-pod + template: + metadata: + labels: + app.kubernetes.io/name: left-pod + spec: + containers: + - image: left-image:v1.0 + name: service +`) + + th.WriteK("right-service", ` +resources: +- deployment.yaml +`) + + th.WriteF("right-service/deployment.yaml", ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: right-deploy + labels: + app.kubernetes.io/name: right-deploy +spec: + selector: + matchLabels: + app.kubernetes.io/name: right-pod + template: + metadata: + labels: + app.kubernetes.io/name: right-pod + spec: + containers: + - image: right-image:v1.0 + name: service +`) + + th.WriteK("top", ` +resources: +- ./left +- ./right +`) + + th.WriteK("top/left", ` +resources: +- ../../left-service +- ./bottom + +patches: +- target: + kind: Deployment + name: left-deploy + patch: |- + apiVersion: apps/v1 + kind: Deployment + metadata: + name: ignored-by-kustomize + spec: + template: + spec: + containers: + - name: service + env: + - name: MAPPED_CONFIG_ITEM + valueFrom: + configMapKeyRef: + name: left-bottom + key: KEY +`) + + th.WriteK("top/left/bottom", ` +namePrefix: left- + +resources: +- ../../../bottom +`) + + th.WriteK("top/right", ` +resources: +- ../../right-service +- ./bottom + +patches: +- target: + kind: Deployment + name: right-deploy + patch: |- + apiVersion: apps/v1 + kind: Deployment + metadata: + name: ignored-by-kustomize + spec: + template: + spec: + containers: + - name: service + env: + - name: MAPPED_CONFIG_ITEM + valueFrom: + configMapKeyRef: + name: right-bottom + key: KEY +`) + + th.WriteK("top/right/bottom", ` +namePrefix: right- + +resources: +- ../../../bottom +`) + + m := th.Run("top", th.MakeDefaultOptions()) + th.AssertActualEqualsExpected(m, `apiVersion: apps/v1 +kind: Deployment +metadata: + labels: + app.kubernetes.io/name: left-deploy + name: left-deploy +spec: + selector: + matchLabels: + app.kubernetes.io/name: left-pod + template: + metadata: + labels: + app.kubernetes.io/name: left-pod + spec: + containers: + - env: + - name: MAPPED_CONFIG_ITEM + valueFrom: + configMapKeyRef: + key: KEY + name: left-bottom-9f2t6f5h6d + image: left-image:v1.0 + name: service +--- +apiVersion: v1 +data: + KEY: value +kind: ConfigMap +metadata: + name: left-bottom-9f2t6f5h6d +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + labels: + app.kubernetes.io/name: right-deploy + name: right-deploy +spec: + selector: + matchLabels: + app.kubernetes.io/name: right-pod + template: + metadata: + labels: + app.kubernetes.io/name: right-pod + spec: + containers: + - env: + - name: MAPPED_CONFIG_ITEM + valueFrom: + configMapKeyRef: + key: KEY + name: right-bottom-9f2t6f5h6d + image: right-image:v1.0 + name: service +--- +apiVersion: v1 +data: + KEY: value +kind: ConfigMap +metadata: + name: right-bottom-9f2t6f5h6d +`) +} diff --git a/go/internal/forked/api/krusty/diamonds_test.go b/go/internal/forked/api/krusty/diamonds_test.go new file mode 100644 index 000000000..6160e62f7 --- /dev/null +++ b/go/internal/forked/api/krusty/diamonds_test.go @@ -0,0 +1,222 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package krusty_test + +import ( + "testing" + + kusttest_test "sigs.k8s.io/kustomize/api/testutils/kusttest" +) + +// Here's a structure of two kustomizations, +// `dev` and `prod`, individually deployable, +// that depend on a diamond that combines +// multiple tenants (kirk, spock and bones), +// each sharing a common base. +// +// The objects used are contrived to avoid +// clouding the example with authentic +// but verbose Deployment boilerplate. +// +// Patches are applied at various levels, +// requiring more specificity as needed. +// +// dev prod +// \ / +// tenants +// / | \ +// kirk spock bones +// \ | / +// base +// +func writeDiamondBase(th kusttest_test.Harness) { + th.WriteK("base", ` +resources: +- deploy.yaml +`) + th.WriteF("base/deploy.yaml", ` +apiVersion: v1 +kind: Deployment +metadata: + name: storefront +spec: + numReplicas: 1 +`) +} + +func writeKirk(th kusttest_test.Harness) { + th.WriteK("kirk", ` +namePrefix: kirk- +resources: +- ../base +- configmap.yaml +patchesStrategicMerge: +- dep-patch.yaml +`) + th.WriteF("kirk/dep-patch.yaml", ` +apiVersion: v1 +kind: Deployment +metadata: + name: storefront +spec: + type: Confident +`) + th.WriteF("kirk/configmap.yaml", ` +apiVersion: v1 +kind: ConfigMap +metadata: + name: settings +data: + phaser: caress +`) +} + +func writeSpock(th kusttest_test.Harness) { + th.WriteK("spock", ` +namePrefix: spock- +resources: +- ../base +patchesStrategicMerge: +- dep-patch.yaml +`) + th.WriteF("spock/dep-patch.yaml", ` +apiVersion: v1 +kind: Deployment +metadata: + name: storefront +spec: + type: Logical +`) +} + +func writeBones(th kusttest_test.Harness) { + th.WriteK("bones", ` +namePrefix: bones- +resources: +- ../base +patchesStrategicMerge: +- dep-patch.yaml +`) + th.WriteF("bones/dep-patch.yaml", ` +apiVersion: v1 +kind: Deployment +metadata: + name: storefront +spec: + type: Concerned +`) +} + +func writeTenants(th kusttest_test.Harness) { + th.WriteK("tenants", ` +namePrefix: t- +resources: +- ../kirk +- ../spock +- ../bones +- configMap.yaml +patchesStrategicMerge: +- bones-patch.yaml +`) + th.WriteF("tenants/bones-patch.yaml", ` +apiVersion: v1 +kind: Deployment +metadata: + name: bones-storefront +spec: + mood: Cantankerous +`) + th.WriteF("tenants/configMap.yaml", ` +apiVersion: v1 +kind: ConfigMap +metadata: + name: federation +data: + zone: neutral + guardian: forever +`) +} + +func TestBasicDiamond(t *testing.T) { + th := kusttest_test.MakeHarness(t) + writeDiamondBase(th) + writeKirk(th) + writeSpock(th) + writeBones(th) + writeTenants(th) + th.WriteK("prod", ` +namePrefix: prod- +resources: +- ../tenants +patchesStrategicMerge: +- patches.yaml +`) + // The patch only has to be specific enough + // to match the item. + th.WriteF("prod/patches.yaml", ` +apiVersion: v1 +kind: Deployment +metadata: + name: t-kirk-storefront +spec: + numReplicas: 10000 +--- +apiVersion: v1 +kind: ConfigMap +metadata: + name: federation +data: + guardian: ofTheGalaxy +--- +apiVersion: v1 +kind: ConfigMap +metadata: + name: t-federation +data: + zone: twilight +`) + + m := th.Run("prod", th.MakeDefaultOptions()) + th.AssertActualEqualsExpected(m, ` +apiVersion: v1 +kind: Deployment +metadata: + name: prod-t-kirk-storefront +spec: + numReplicas: 10000 + type: Confident +--- +apiVersion: v1 +data: + phaser: caress +kind: ConfigMap +metadata: + name: prod-t-kirk-settings +--- +apiVersion: v1 +kind: Deployment +metadata: + name: prod-t-spock-storefront +spec: + numReplicas: 1 + type: Logical +--- +apiVersion: v1 +kind: Deployment +metadata: + name: prod-t-bones-storefront +spec: + mood: Cantankerous + numReplicas: 1 + type: Concerned +--- +apiVersion: v1 +data: + guardian: ofTheGalaxy + zone: twilight +kind: ConfigMap +metadata: + name: prod-t-federation +`) +} diff --git a/go/internal/forked/api/krusty/directoryarrangement_test.go b/go/internal/forked/api/krusty/directoryarrangement_test.go new file mode 100644 index 000000000..e066b44f0 --- /dev/null +++ b/go/internal/forked/api/krusty/directoryarrangement_test.go @@ -0,0 +1,29 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package krusty_test + +import ( + "testing" + + kusttest_test "sigs.k8s.io/kustomize/api/testutils/kusttest" +) + +func TestIssue596AllowDirectoriesThatAreSubstringsOfEachOther(t *testing.T) { + th := kusttest_test.MakeHarness(t) + th.WriteK("base", "") + th.WriteK("overlays/aws", ` +resources: +- ../../base +`) + th.WriteK("overlays/aws-nonprod", ` +resources: +- ../aws +`) + th.WriteK("overlays/aws-sandbox2.us-east-1", ` +resources: +- ../aws-nonprod +`) + m := th.Run("overlays/aws-sandbox2.us-east-1", th.MakeDefaultOptions()) + th.AssertActualEqualsExpected(m, "") +} diff --git a/go/internal/forked/api/krusty/disablenamesuffix_test.go b/go/internal/forked/api/krusty/disablenamesuffix_test.go new file mode 100644 index 000000000..9580a8914 --- /dev/null +++ b/go/internal/forked/api/krusty/disablenamesuffix_test.go @@ -0,0 +1,146 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package krusty_test + +import ( + "strings" + "testing" + + "sigs.k8s.io/kustomize/api/resmap" + "sigs.k8s.io/kustomize/api/resource" + kusttest_test "sigs.k8s.io/kustomize/api/testutils/kusttest" +) + +func findSecret(m resmap.ResMap, prefix string) *resource.Resource { + for _, r := range m.Resources() { + if r.OrgId().Kind == "Secret" { + if prefix == "" || strings.HasPrefix(r.GetName(), prefix) { + return r + } + } + } + return nil +} + +func TestDisableNameSuffixHash(t *testing.T) { + th := kusttest_test.MakeHarness(t) + const kustomizationContent = ` +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization +namePrefix: foo- +nameSuffix: -bar +namespace: ns1 +commonLabels: + app: nginx +commonAnnotations: + note: This is a test annotation +resources: + - deployment.yaml + - namespace.yaml +generatorOptions: + disableNameSuffixHash: false +configMapGenerator: +- name: literalConfigMap + literals: + - DB_USERNAME=admin + - DB_PASSWORD=somepw +secretGenerator: +- name: secret + literals: + - DB_USERNAME=admin + - DB_PASSWORD=somepw + type: Opaque +patchesJson6902: +- target: + group: apps + version: v1 + kind: Deployment + name: dply1 + path: jsonpatch.json +` + + th.WriteK("/whatever", kustomizationContent) + th.WriteF("/whatever/deployment.yaml", ` +apiVersion: apps/v1 +metadata: + name: dply1 +kind: Deployment +`) + th.WriteF("/whatever/namespace.yaml", ` +apiVersion: v1 +kind: Namespace +metadata: + name: ns1 +`) + th.WriteF("/whatever/jsonpatch.json", `[ + {"op": "add", "path": "/spec/replica", "value": "3"} +]`) + + m := th.Run("/whatever", th.MakeDefaultOptions()) + + secret := findSecret(m, "") + if secret == nil { + t.Errorf("Expected to find a Secret") + } + if secret.GetName() != "foo-secret-bar-82c2g5f8f6" { + t.Errorf("unexpected secret resource name: %s", secret.GetName()) + } + + th.WriteK("/whatever", + strings.Replace(kustomizationContent, + "disableNameSuffixHash: false", + "disableNameSuffixHash: true", -1)) + m = th.Run("/whatever", th.MakeDefaultOptions()) + secret = findSecret(m, "") + if secret == nil { + t.Errorf("Expected to find a Secret") + } + if secret.GetName() != "foo-secret-bar" { // No hash at end. + t.Errorf("unexpected secret resource name: %s", secret.GetName()) + } +} +func TestDisableNameSuffixHashPerObject(t *testing.T) { + th := kusttest_test.MakeHarness(t) + const kustomizationContent = ` +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization +generatorOptions: + disableNameSuffixHash: false +secretGenerator: +- name: nohash + options: + disableNameSuffixHash: true + literals: + - DB_USERNAME=admin + - DB_PASSWORD=somepw + type: Opaque +- name: yeshash + options: + disableNameSuffixHash: false + literals: + - DB_USERNAME=admin + - DB_PASSWORD=somepw + type: Opaque +` + + th.WriteK("/whatever", kustomizationContent) + + m := th.Run("/whatever", th.MakeDefaultOptions()) + + secret := findSecret(m, "nohash") + if secret == nil { + t.Errorf("Expected to find a Secret") + } + if secret.GetName() != "nohash" { + t.Errorf("unexpected secret resource name: %s", secret.GetName()) + } + + secret = findSecret(m, "yeshash") + if secret == nil { + t.Errorf("Expected to find a Secret") + } + if secret.GetName() != "yeshash-82c2g5f8f6" { + t.Errorf("unexpected secret resource name: %s", secret.GetName()) + } +} diff --git a/go/internal/forked/api/krusty/doc.go b/go/internal/forked/api/krusty/doc.go new file mode 100644 index 000000000..bf516ca94 --- /dev/null +++ b/go/internal/forked/api/krusty/doc.go @@ -0,0 +1,11 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +// Package krusty is intended as the entry point package +// for those seeking to add kustomize ability to other +// programs. +// +// To use, follow the example of the kustomize CLI's 'build' +// command. Also, see the high level tests in this package, +// which serve a dual purpose as examples. +package krusty diff --git a/go/internal/forked/api/krusty/duplicatekeys_test.go b/go/internal/forked/api/krusty/duplicatekeys_test.go new file mode 100644 index 000000000..bf480ca73 --- /dev/null +++ b/go/internal/forked/api/krusty/duplicatekeys_test.go @@ -0,0 +1,43 @@ +package krusty_test + +import ( + "testing" + + "github.com/stretchr/testify/assert" + kusttest_test "sigs.k8s.io/kustomize/api/testutils/kusttest" +) + +func TestDuplicateKeys(t *testing.T) { + th := kusttest_test.MakeHarness(t) + th.WriteK(".", ` +resources: +- resources.yaml +`) + th.WriteF("resources.yaml", ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: podinfo +spec: + selector: + matchLabels: + app: podinfo + template: + spec: + containers: + - name: podinfod + image: ghcr.io/stefanprodan/podinfo:5.0.3 + command: + - ./podinfo + env: + - name: PODINFO_UI_COLOR + value: "#34577c" + env: + - name: PODINFO_UI_COLOR + value: "#34577c" +`) + m := th.Run(".", th.MakeDefaultOptions()) + _, err := m.AsYaml() + assert.Error(t, err) + assert.Contains(t, err.Error(), "mapping key \"env\" already defined") +} diff --git a/go/internal/forked/api/krusty/extendedpatch_test.go b/go/internal/forked/api/krusty/extendedpatch_test.go new file mode 100644 index 000000000..955082f61 --- /dev/null +++ b/go/internal/forked/api/krusty/extendedpatch_test.go @@ -0,0 +1,1215 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package krusty_test + +import ( + "testing" + + kusttest_test "sigs.k8s.io/kustomize/api/testutils/kusttest" +) + +func makeCommonFileForExtendedPatchTest(th kusttest_test.Harness) { + th.WriteF("base/deployment.yaml", ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: nginx + labels: + app: nginx +spec: + template: + metadata: + labels: + app: nginx + spec: + containers: + - name: nginx + image: nginx + volumeMounts: + - name: nginx-persistent-storage + mountPath: /tmp/ps + volumes: + - name: nginx-persistent-storage + emptyDir: {} + - configMap: + name: configmap-in-base + name: configmap-in-base +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + name: busybox + labels: + app: busybox +spec: + template: + metadata: + labels: + app: busybox + spec: + containers: + - name: busybox + image: busybox + volumeMounts: + - name: busybox-persistent-storage + mountPath: /tmp/ps + volumes: + - name: busybox-persistent-storage + emptyDir: {} + - configMap: + name: configmap-in-base + name: configmap-in-base +`) + th.WriteF("base/service.yaml", ` +apiVersion: v1 +kind: Service +metadata: + name: nginx + labels: + app: nginx +spec: + ports: + - port: 80 + selector: + app: nginx +--- +apiVersion: v1 +kind: Service +metadata: + name: busybox + labels: + app: busybox +spec: + ports: + - port: 8080 + selector: + app: busybox +`) +} + +func TestExtendedPatchNameSelector(t *testing.T) { + th := kusttest_test.MakeHarness(t) + makeCommonFileForExtendedPatchTest(th) + th.WriteK("base", ` +resources: +- deployment.yaml +- service.yaml +patches: +- path: patch.yaml + target: + name: busybox +`) + th.WriteF("base/patch.yaml", ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: busybox + annotations: + new-key: new-value +`) + m := th.Run("base", th.MakeDefaultOptions()) + th.AssertActualEqualsExpected(m, ` +apiVersion: apps/v1 +kind: Deployment +metadata: + labels: + app: nginx + name: nginx +spec: + template: + metadata: + labels: + app: nginx + spec: + containers: + - image: nginx + name: nginx + volumeMounts: + - mountPath: /tmp/ps + name: nginx-persistent-storage + volumes: + - emptyDir: {} + name: nginx-persistent-storage + - configMap: + name: configmap-in-base + name: configmap-in-base +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + annotations: + new-key: new-value + labels: + app: busybox + name: busybox +spec: + template: + metadata: + labels: + app: busybox + spec: + containers: + - image: busybox + name: busybox + volumeMounts: + - mountPath: /tmp/ps + name: busybox-persistent-storage + volumes: + - emptyDir: {} + name: busybox-persistent-storage + - configMap: + name: configmap-in-base + name: configmap-in-base +--- +apiVersion: v1 +kind: Service +metadata: + labels: + app: nginx + name: nginx +spec: + ports: + - port: 80 + selector: + app: nginx +--- +apiVersion: v1 +kind: Service +metadata: + annotations: + new-key: new-value + labels: + app: busybox + name: busybox +spec: + ports: + - port: 8080 + selector: + app: busybox +`) +} + +func TestExtendedPatchGvkSelector(t *testing.T) { + th := kusttest_test.MakeHarness(t) + makeCommonFileForExtendedPatchTest(th) + th.WriteK("base", ` +resources: +- deployment.yaml +- service.yaml +patches: +- path: patch.yaml + target: + kind: Deployment +`) + th.WriteF("base/patch.yaml", ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: busybox + annotations: + new-key: new-value +`) + m := th.Run("base", th.MakeDefaultOptions()) + th.AssertActualEqualsExpected(m, ` +apiVersion: apps/v1 +kind: Deployment +metadata: + annotations: + new-key: new-value + labels: + app: nginx + name: nginx +spec: + template: + metadata: + labels: + app: nginx + spec: + containers: + - image: nginx + name: nginx + volumeMounts: + - mountPath: /tmp/ps + name: nginx-persistent-storage + volumes: + - emptyDir: {} + name: nginx-persistent-storage + - configMap: + name: configmap-in-base + name: configmap-in-base +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + annotations: + new-key: new-value + labels: + app: busybox + name: busybox +spec: + template: + metadata: + labels: + app: busybox + spec: + containers: + - image: busybox + name: busybox + volumeMounts: + - mountPath: /tmp/ps + name: busybox-persistent-storage + volumes: + - emptyDir: {} + name: busybox-persistent-storage + - configMap: + name: configmap-in-base + name: configmap-in-base +--- +apiVersion: v1 +kind: Service +metadata: + labels: + app: nginx + name: nginx +spec: + ports: + - port: 80 + selector: + app: nginx +--- +apiVersion: v1 +kind: Service +metadata: + labels: + app: busybox + name: busybox +spec: + ports: + - port: 8080 + selector: + app: busybox +`) +} + +func TestExtendedPatchLabelSelector(t *testing.T) { + th := kusttest_test.MakeHarness(t) + makeCommonFileForExtendedPatchTest(th) + th.WriteK("base", ` +resources: +- deployment.yaml +- service.yaml +patches: +- path: patch.yaml + target: + labelSelector: app=nginx +`) + th.WriteF("base/patch.yaml", ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: nginx + annotations: + new-key: new-value +`) + m := th.Run("base", th.MakeDefaultOptions()) + th.AssertActualEqualsExpected(m, ` +apiVersion: apps/v1 +kind: Deployment +metadata: + annotations: + new-key: new-value + labels: + app: nginx + name: nginx +spec: + template: + metadata: + labels: + app: nginx + spec: + containers: + - image: nginx + name: nginx + volumeMounts: + - mountPath: /tmp/ps + name: nginx-persistent-storage + volumes: + - emptyDir: {} + name: nginx-persistent-storage + - configMap: + name: configmap-in-base + name: configmap-in-base +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + labels: + app: busybox + name: busybox +spec: + template: + metadata: + labels: + app: busybox + spec: + containers: + - image: busybox + name: busybox + volumeMounts: + - mountPath: /tmp/ps + name: busybox-persistent-storage + volumes: + - emptyDir: {} + name: busybox-persistent-storage + - configMap: + name: configmap-in-base + name: configmap-in-base +--- +apiVersion: v1 +kind: Service +metadata: + annotations: + new-key: new-value + labels: + app: nginx + name: nginx +spec: + ports: + - port: 80 + selector: + app: nginx +--- +apiVersion: v1 +kind: Service +metadata: + labels: + app: busybox + name: busybox +spec: + ports: + - port: 8080 + selector: + app: busybox +`) +} + +func TestExtendedPatchNameGvkSelector(t *testing.T) { + th := kusttest_test.MakeHarness(t) + makeCommonFileForExtendedPatchTest(th) + th.WriteK("base", ` +resources: +- deployment.yaml +- service.yaml +patches: +- path: patch.yaml + target: + name: busybox + kind: Deployment +`) + th.WriteF("base/patch.yaml", ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: busybox + annotations: + new-key: new-value +`) + m := th.Run("base", th.MakeDefaultOptions()) + th.AssertActualEqualsExpected(m, ` +apiVersion: apps/v1 +kind: Deployment +metadata: + labels: + app: nginx + name: nginx +spec: + template: + metadata: + labels: + app: nginx + spec: + containers: + - image: nginx + name: nginx + volumeMounts: + - mountPath: /tmp/ps + name: nginx-persistent-storage + volumes: + - emptyDir: {} + name: nginx-persistent-storage + - configMap: + name: configmap-in-base + name: configmap-in-base +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + annotations: + new-key: new-value + labels: + app: busybox + name: busybox +spec: + template: + metadata: + labels: + app: busybox + spec: + containers: + - image: busybox + name: busybox + volumeMounts: + - mountPath: /tmp/ps + name: busybox-persistent-storage + volumes: + - emptyDir: {} + name: busybox-persistent-storage + - configMap: + name: configmap-in-base + name: configmap-in-base +--- +apiVersion: v1 +kind: Service +metadata: + labels: + app: nginx + name: nginx +spec: + ports: + - port: 80 + selector: + app: nginx +--- +apiVersion: v1 +kind: Service +metadata: + labels: + app: busybox + name: busybox +spec: + ports: + - port: 8080 + selector: + app: busybox +`) +} + +func TestExtendedPatchNameLabelSelector(t *testing.T) { + th := kusttest_test.MakeHarness(t) + makeCommonFileForExtendedPatchTest(th) + th.WriteK("base", ` +resources: +- deployment.yaml +- service.yaml +patches: +- path: patch.yaml + target: + name: .* + labelSelector: app=busybox +`) + th.WriteF("base/patch.yaml", ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: busybox + annotations: + new-key: new-value +`) + m := th.Run("base", th.MakeDefaultOptions()) + th.AssertActualEqualsExpected(m, ` +apiVersion: apps/v1 +kind: Deployment +metadata: + labels: + app: nginx + name: nginx +spec: + template: + metadata: + labels: + app: nginx + spec: + containers: + - image: nginx + name: nginx + volumeMounts: + - mountPath: /tmp/ps + name: nginx-persistent-storage + volumes: + - emptyDir: {} + name: nginx-persistent-storage + - configMap: + name: configmap-in-base + name: configmap-in-base +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + annotations: + new-key: new-value + labels: + app: busybox + name: busybox +spec: + template: + metadata: + labels: + app: busybox + spec: + containers: + - image: busybox + name: busybox + volumeMounts: + - mountPath: /tmp/ps + name: busybox-persistent-storage + volumes: + - emptyDir: {} + name: busybox-persistent-storage + - configMap: + name: configmap-in-base + name: configmap-in-base +--- +apiVersion: v1 +kind: Service +metadata: + labels: + app: nginx + name: nginx +spec: + ports: + - port: 80 + selector: + app: nginx +--- +apiVersion: v1 +kind: Service +metadata: + annotations: + new-key: new-value + labels: + app: busybox + name: busybox +spec: + ports: + - port: 8080 + selector: + app: busybox +`) +} + +func TestExtendedPatchGvkLabelSelector(t *testing.T) { + th := kusttest_test.MakeHarness(t) + makeCommonFileForExtendedPatchTest(th) + th.WriteK("base", ` +resources: +- deployment.yaml +- service.yaml +patches: +- path: patch.yaml + target: + kind: Deployment + labelSelector: app=busybox +`) + th.WriteF("base/patch.yaml", ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: busybox + annotations: + new-key: new-value +`) + m := th.Run("base", th.MakeDefaultOptions()) + th.AssertActualEqualsExpected(m, ` +apiVersion: apps/v1 +kind: Deployment +metadata: + labels: + app: nginx + name: nginx +spec: + template: + metadata: + labels: + app: nginx + spec: + containers: + - image: nginx + name: nginx + volumeMounts: + - mountPath: /tmp/ps + name: nginx-persistent-storage + volumes: + - emptyDir: {} + name: nginx-persistent-storage + - configMap: + name: configmap-in-base + name: configmap-in-base +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + annotations: + new-key: new-value + labels: + app: busybox + name: busybox +spec: + template: + metadata: + labels: + app: busybox + spec: + containers: + - image: busybox + name: busybox + volumeMounts: + - mountPath: /tmp/ps + name: busybox-persistent-storage + volumes: + - emptyDir: {} + name: busybox-persistent-storage + - configMap: + name: configmap-in-base + name: configmap-in-base +--- +apiVersion: v1 +kind: Service +metadata: + labels: + app: nginx + name: nginx +spec: + ports: + - port: 80 + selector: + app: nginx +--- +apiVersion: v1 +kind: Service +metadata: + labels: + app: busybox + name: busybox +spec: + ports: + - port: 8080 + selector: + app: busybox +`) +} + +func TestExtendedPatchNameGvkLabelSelector(t *testing.T) { + th := kusttest_test.MakeHarness(t) + makeCommonFileForExtendedPatchTest(th) + th.WriteK("base", ` +resources: +- deployment.yaml +- service.yaml +patches: +- path: patch.yaml + target: + name: busybox + kind: Deployment + labelSelector: app=busybox +`) + th.WriteF("base/patch.yaml", ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: busybox + annotations: + new-key: new-value +`) + m := th.Run("base", th.MakeDefaultOptions()) + th.AssertActualEqualsExpected(m, ` +apiVersion: apps/v1 +kind: Deployment +metadata: + labels: + app: nginx + name: nginx +spec: + template: + metadata: + labels: + app: nginx + spec: + containers: + - image: nginx + name: nginx + volumeMounts: + - mountPath: /tmp/ps + name: nginx-persistent-storage + volumes: + - emptyDir: {} + name: nginx-persistent-storage + - configMap: + name: configmap-in-base + name: configmap-in-base +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + annotations: + new-key: new-value + labels: + app: busybox + name: busybox +spec: + template: + metadata: + labels: + app: busybox + spec: + containers: + - image: busybox + name: busybox + volumeMounts: + - mountPath: /tmp/ps + name: busybox-persistent-storage + volumes: + - emptyDir: {} + name: busybox-persistent-storage + - configMap: + name: configmap-in-base + name: configmap-in-base +--- +apiVersion: v1 +kind: Service +metadata: + labels: + app: nginx + name: nginx +spec: + ports: + - port: 80 + selector: + app: nginx +--- +apiVersion: v1 +kind: Service +metadata: + labels: + app: busybox + name: busybox +spec: + ports: + - port: 8080 + selector: + app: busybox +`) +} + +func TestExtendedPatchNoMatch(t *testing.T) { + th := kusttest_test.MakeHarness(t) + makeCommonFileForExtendedPatchTest(th) + th.WriteK("base", ` +resources: +- deployment.yaml +- service.yaml +patches: +- path: patch.yaml + target: + name: no-match +`) + th.WriteF("base/patch.yaml", ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: busybox + annotations: + new-key: new-value +`) + m := th.Run("base", th.MakeDefaultOptions()) + th.AssertActualEqualsExpected(m, ` +apiVersion: apps/v1 +kind: Deployment +metadata: + labels: + app: nginx + name: nginx +spec: + template: + metadata: + labels: + app: nginx + spec: + containers: + - image: nginx + name: nginx + volumeMounts: + - mountPath: /tmp/ps + name: nginx-persistent-storage + volumes: + - emptyDir: {} + name: nginx-persistent-storage + - configMap: + name: configmap-in-base + name: configmap-in-base +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + labels: + app: busybox + name: busybox +spec: + template: + metadata: + labels: + app: busybox + spec: + containers: + - image: busybox + name: busybox + volumeMounts: + - mountPath: /tmp/ps + name: busybox-persistent-storage + volumes: + - emptyDir: {} + name: busybox-persistent-storage + - configMap: + name: configmap-in-base + name: configmap-in-base +--- +apiVersion: v1 +kind: Service +metadata: + labels: + app: nginx + name: nginx +spec: + ports: + - port: 80 + selector: + app: nginx +--- +apiVersion: v1 +kind: Service +metadata: + labels: + app: busybox + name: busybox +spec: + ports: + - port: 8080 + selector: + app: busybox +`) +} + +func TestExtendedPatchWithoutTarget(t *testing.T) { + th := kusttest_test.MakeHarness(t) + makeCommonFileForExtendedPatchTest(th) + th.WriteK("base", ` +resources: +- deployment.yaml +- service.yaml +patches: +- path: patch.yaml +`) + th.WriteF("base/patch.yaml", ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: busybox + annotations: + new-key: new-value +`) + m := th.Run("base", th.MakeDefaultOptions()) + th.AssertActualEqualsExpected(m, ` +apiVersion: apps/v1 +kind: Deployment +metadata: + labels: + app: nginx + name: nginx +spec: + template: + metadata: + labels: + app: nginx + spec: + containers: + - image: nginx + name: nginx + volumeMounts: + - mountPath: /tmp/ps + name: nginx-persistent-storage + volumes: + - emptyDir: {} + name: nginx-persistent-storage + - configMap: + name: configmap-in-base + name: configmap-in-base +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + annotations: + new-key: new-value + labels: + app: busybox + name: busybox +spec: + template: + metadata: + labels: + app: busybox + spec: + containers: + - image: busybox + name: busybox + volumeMounts: + - mountPath: /tmp/ps + name: busybox-persistent-storage + volumes: + - emptyDir: {} + name: busybox-persistent-storage + - configMap: + name: configmap-in-base + name: configmap-in-base +--- +apiVersion: v1 +kind: Service +metadata: + labels: + app: nginx + name: nginx +spec: + ports: + - port: 80 + selector: + app: nginx +--- +apiVersion: v1 +kind: Service +metadata: + labels: + app: busybox + name: busybox +spec: + ports: + - port: 8080 + selector: + app: busybox +`) +} + +func TestExtendedPatchNoMatchMultiplePatch(t *testing.T) { + th := kusttest_test.MakeHarness(t) + makeCommonFileForExtendedPatchTest(th) + th.WriteK("base", ` +resources: +- deployment.yaml +- service.yaml +patches: +- path: patch.yaml + target: + name: no-match +- path: patch.yaml + target: + name: busybox + kind: Job +`) + th.WriteF("base/patch.yaml", ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: busybox + annotations: + new-key: new-value +`) + m := th.Run("base", th.MakeDefaultOptions()) + th.AssertActualEqualsExpected(m, ` +apiVersion: apps/v1 +kind: Deployment +metadata: + labels: + app: nginx + name: nginx +spec: + template: + metadata: + labels: + app: nginx + spec: + containers: + - image: nginx + name: nginx + volumeMounts: + - mountPath: /tmp/ps + name: nginx-persistent-storage + volumes: + - emptyDir: {} + name: nginx-persistent-storage + - configMap: + name: configmap-in-base + name: configmap-in-base +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + labels: + app: busybox + name: busybox +spec: + template: + metadata: + labels: + app: busybox + spec: + containers: + - image: busybox + name: busybox + volumeMounts: + - mountPath: /tmp/ps + name: busybox-persistent-storage + volumes: + - emptyDir: {} + name: busybox-persistent-storage + - configMap: + name: configmap-in-base + name: configmap-in-base +--- +apiVersion: v1 +kind: Service +metadata: + labels: + app: nginx + name: nginx +spec: + ports: + - port: 80 + selector: + app: nginx +--- +apiVersion: v1 +kind: Service +metadata: + labels: + app: busybox + name: busybox +spec: + ports: + - port: 8080 + selector: + app: busybox +`) +} + +func TestExtendedPatchMultiplePatchOverlapping(t *testing.T) { + th := kusttest_test.MakeHarness(t) + makeCommonFileForExtendedPatchTest(th) + th.WriteK("base", ` +resources: +- deployment.yaml +- service.yaml +patches: +- path: patch1.yaml + target: + labelSelector: app=busybox +- path: patch2.yaml + target: + name: busybox + kind: Deployment +`) + th.WriteF("base/patch1.yaml", ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: busybox + annotations: + new-key-from-patch1: new-value +`) + th.WriteF("base/patch2.yaml", ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: busybox + annotations: + new-key-from-patch2: new-value +`) + m := th.Run("base", th.MakeDefaultOptions()) + th.AssertActualEqualsExpected(m, ` +apiVersion: apps/v1 +kind: Deployment +metadata: + labels: + app: nginx + name: nginx +spec: + template: + metadata: + labels: + app: nginx + spec: + containers: + - image: nginx + name: nginx + volumeMounts: + - mountPath: /tmp/ps + name: nginx-persistent-storage + volumes: + - emptyDir: {} + name: nginx-persistent-storage + - configMap: + name: configmap-in-base + name: configmap-in-base +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + annotations: + new-key-from-patch1: new-value + new-key-from-patch2: new-value + labels: + app: busybox + name: busybox +spec: + template: + metadata: + labels: + app: busybox + spec: + containers: + - image: busybox + name: busybox + volumeMounts: + - mountPath: /tmp/ps + name: busybox-persistent-storage + volumes: + - emptyDir: {} + name: busybox-persistent-storage + - configMap: + name: configmap-in-base + name: configmap-in-base +--- +apiVersion: v1 +kind: Service +metadata: + labels: + app: nginx + name: nginx +spec: + ports: + - port: 80 + selector: + app: nginx +--- +apiVersion: v1 +kind: Service +metadata: + annotations: + new-key-from-patch1: new-value + labels: + app: busybox + name: busybox +spec: + ports: + - port: 8080 + selector: + app: busybox +`) +} diff --git a/go/internal/forked/api/krusty/fnplugin_test.go b/go/internal/forked/api/krusty/fnplugin_test.go new file mode 100644 index 000000000..b0cbb2ac1 --- /dev/null +++ b/go/internal/forked/api/krusty/fnplugin_test.go @@ -0,0 +1,631 @@ +package krusty_test + +import ( + "os" + "os/exec" + "path/filepath" + "testing" + + "github.com/stretchr/testify/assert" + kusttest_test "sigs.k8s.io/kustomize/api/testutils/kusttest" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/filesys" +) + +const generateDeploymentDotSh = `#!/bin/sh + +cat < + // is added to all the resources in the build out. + AddManagedbyLabel bool + + // Restrictions on what can be loaded from the file system. + // See type definition. + LoadRestrictions types.LoadRestrictions + + // Create an inventory object for pruning. + DoPrune bool + + // Options related to kustomize plugins. + PluginConfig *types.PluginConfig +} + +// MakeDefaultOptions returns a default instance of Options. +func MakeDefaultOptions() *Options { + return &Options{ + DoLegacyResourceSort: false, + AddManagedbyLabel: false, + LoadRestrictions: types.LoadRestrictionsRootOnly, + DoPrune: false, + PluginConfig: types.DisabledPluginConfig(), + } +} + +// GetBuiltinPluginNames returns a list of builtin plugin names +func GetBuiltinPluginNames() []string { + var ret []string + for k := range builtinhelpers.GeneratorFactories { + ret = append(ret, k.String()) + } + for k := range builtinhelpers.TransformerFactories { + ret = append(ret, k.String()) + } + return ret +} diff --git a/go/internal/forked/api/krusty/originannotation_test.go b/go/internal/forked/api/krusty/originannotation_test.go new file mode 100644 index 000000000..5381c3898 --- /dev/null +++ b/go/internal/forked/api/krusty/originannotation_test.go @@ -0,0 +1,1145 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package krusty_test + +import ( + "os" + "path/filepath" + "testing" + + "github.com/stretchr/testify/assert" + "sigs.k8s.io/kustomize/api/internal/utils" + "sigs.k8s.io/kustomize/api/krusty" + kusttest_test "sigs.k8s.io/kustomize/api/testutils/kusttest" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/filesys" +) + +func TestAnnoOriginLocalFiles(t *testing.T) { + th := kusttest_test.MakeHarness(t) + th.WriteF("service.yaml", ` +apiVersion: v1 +kind: Service +metadata: + name: myService +spec: + ports: + - port: 7002 +`) + th.WriteK(".", ` +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization +resources: +- service.yaml +buildMetadata: [originAnnotations] +`) + options := th.MakeDefaultOptions() + m := th.Run(".", options) + th.AssertActualEqualsExpected(m, ` +apiVersion: v1 +kind: Service +metadata: + annotations: + config.kubernetes.io/origin: | + path: service.yaml + name: myService +spec: + ports: + - port: 7002 +`) +} + +func TestAnnoOriginLocalFilesWithOverlay(t *testing.T) { + th := kusttest_test.MakeHarness(t) + th.WriteK("base", ` +namePrefix: b- +resources: +- namespace.yaml +- role.yaml +- service.yaml +- deployment.yaml +`) + th.WriteF("base/service.yaml", ` +apiVersion: v1 +kind: Service +metadata: + name: myService +`) + th.WriteF("base/namespace.yaml", ` +apiVersion: v1 +kind: Namespace +metadata: + name: myNs +`) + th.WriteF("base/role.yaml", ` +apiVersion: v1 +kind: Role +metadata: + name: myRole +`) + th.WriteF("base/deployment.yaml", ` +apiVersion: v1 +kind: Deployment +metadata: + name: myDep +`) + th.WriteK("prod", ` +namePrefix: p- +resources: +- ../base +- service.yaml +- namespace.yaml +buildMetadata: [originAnnotations] +`) + th.WriteF("prod/service.yaml", ` +apiVersion: v1 +kind: Service +metadata: + name: myService2 +`) + th.WriteF("prod/namespace.yaml", ` +apiVersion: v1 +kind: Namespace +metadata: + name: myNs2 +`) + m := th.Run("prod", th.MakeDefaultOptions()) + th.AssertActualEqualsExpected(m, ` +apiVersion: v1 +kind: Namespace +metadata: + annotations: + config.kubernetes.io/origin: | + path: ../base/namespace.yaml + name: myNs +--- +apiVersion: v1 +kind: Role +metadata: + annotations: + config.kubernetes.io/origin: | + path: ../base/role.yaml + name: p-b-myRole +--- +apiVersion: v1 +kind: Service +metadata: + annotations: + config.kubernetes.io/origin: | + path: ../base/service.yaml + name: p-b-myService +--- +apiVersion: v1 +kind: Deployment +metadata: + annotations: + config.kubernetes.io/origin: | + path: ../base/deployment.yaml + name: p-b-myDep +--- +apiVersion: v1 +kind: Service +metadata: + annotations: + config.kubernetes.io/origin: | + path: service.yaml + name: p-myService2 +--- +apiVersion: v1 +kind: Namespace +metadata: + annotations: + config.kubernetes.io/origin: | + path: namespace.yaml + name: myNs2 +`) +} + +// This is a copy of TestGeneratorBasics in configmaps_test.go, +// except that we've enabled the addAnnoOrigin option. +func TestGeneratorWithAnnoOrigin(t *testing.T) { + th := kusttest_test.MakeHarness(t) + th.WriteK(".", ` +namePrefix: blah- +configMapGenerator: +- name: bob + literals: + - fruit=apple + - vegetable=broccoli + envs: + - foo.env + env: bar.env + files: + - passphrase=phrase.dat + - forces.txt +- name: json + literals: + - 'v2=[{"path": "var/druid/segment-cache"}]' + - >- + druid_segmentCache_locations=[{"path": + "var/druid/segment-cache", + "maxSize": 32000000000, + "freeSpacePercent": 1.0}] +secretGenerator: +- name: bob + literals: + - fruit=apple + - vegetable=broccoli + envs: + - foo.env + files: + - passphrase=phrase.dat + - forces.txt + env: bar.env +buildMetadata: [originAnnotations] +`) + th.WriteF("foo.env", ` +MOUNTAIN=everest +OCEAN=pacific +`) + th.WriteF("bar.env", ` +BIRD=falcon +`) + th.WriteF("phrase.dat", ` +Life is short. +But the years are long. +Not while the evil days come not. +`) + th.WriteF("forces.txt", ` +gravitational +electromagnetic +strong nuclear +weak nuclear +`) + opts := th.MakeDefaultOptions() + m := th.Run(".", opts) + th.AssertActualEqualsExpected( + m, ` +apiVersion: v1 +data: + BIRD: falcon + MOUNTAIN: everest + OCEAN: pacific + forces.txt: |2 + + gravitational + electromagnetic + strong nuclear + weak nuclear + fruit: apple + passphrase: |2 + + Life is short. + But the years are long. + Not while the evil days come not. + vegetable: broccoli +kind: ConfigMap +metadata: + annotations: + config.kubernetes.io/origin: | + configuredIn: kustomization.yaml + configuredBy: + apiVersion: builtin + kind: ConfigMapGenerator + name: blah-bob-g9df72cd5b +--- +apiVersion: v1 +data: + druid_segmentCache_locations: '[{"path": "var/druid/segment-cache", "maxSize": + 32000000000, "freeSpacePercent": 1.0}]' + v2: '[{"path": "var/druid/segment-cache"}]' +kind: ConfigMap +metadata: + annotations: + config.kubernetes.io/origin: | + configuredIn: kustomization.yaml + configuredBy: + apiVersion: builtin + kind: ConfigMapGenerator + name: blah-json-5298bc8g99 +--- +apiVersion: v1 +data: + BIRD: ZmFsY29u + MOUNTAIN: ZXZlcmVzdA== + OCEAN: cGFjaWZpYw== + forces.txt: | + CmdyYXZpdGF0aW9uYWwKZWxlY3Ryb21hZ25ldGljCnN0cm9uZyBudWNsZWFyCndlYWsgbn + VjbGVhcgo= + fruit: YXBwbGU= + passphrase: | + CkxpZmUgaXMgc2hvcnQuCkJ1dCB0aGUgeWVhcnMgYXJlIGxvbmcuCk5vdCB3aGlsZSB0aG + UgZXZpbCBkYXlzIGNvbWUgbm90Lgo= + vegetable: YnJvY2NvbGk= +kind: Secret +metadata: + annotations: + config.kubernetes.io/origin: | + configuredIn: kustomization.yaml + configuredBy: + apiVersion: builtin + kind: SecretGenerator + name: blah-bob-58g62h555c +type: Opaque +`) +} + +func TestAnnoOriginLocalBuiltinGenerator(t *testing.T) { + th := kusttest_test.MakeHarness(t) + th.WriteK(".", ` +resources: +- service.yaml +configMapGenerator: +- name: bob + literals: + - fruit=Indian Gooseberry + - year=2020 + - crisis=true +buildMetadata: [originAnnotations] + +`) + th.WriteF("service.yaml", ` +apiVersion: v1 +kind: Service +metadata: + name: demo +spec: + clusterIP: None +`) + m := th.Run(".", th.MakeDefaultOptions()) + th.AssertActualEqualsExpected( + m, ` +apiVersion: v1 +kind: Service +metadata: + annotations: + config.kubernetes.io/origin: | + path: service.yaml + name: demo +spec: + clusterIP: None +--- +apiVersion: v1 +data: + crisis: "true" + fruit: Indian Gooseberry + year: "2020" +kind: ConfigMap +metadata: + annotations: + config.kubernetes.io/origin: | + configuredIn: kustomization.yaml + configuredBy: + apiVersion: builtin + kind: ConfigMapGenerator + name: bob-79t79mt227 +`) +} + +func TestAnnoOriginConfigMapGeneratorMerge(t *testing.T) { + th := kusttest_test.MakeHarness(t) + th.WriteK("base", ` +configMapGenerator: +- name: bob + literals: + - fruit=Indian Gooseberry + - year=2020 + - crisis=true +`) + th.WriteK("overlay", ` +resources: +- ../base +configMapGenerator: +- name: bob + behavior: merge + literals: + - month=12 +buildMetadata: [originAnnotations] +`) + m := th.Run("overlay", th.MakeDefaultOptions()) + th.AssertActualEqualsExpected(m, `apiVersion: v1 +data: + crisis: "true" + fruit: Indian Gooseberry + month: "12" + year: "2020" +kind: ConfigMap +metadata: + annotations: + config.kubernetes.io/origin: | + configuredIn: ../base/kustomization.yaml + configuredBy: + apiVersion: builtin + kind: ConfigMapGenerator + name: bob-bk46gm59c6 +`) +} + +func TestAnnoOriginConfigMapGeneratorReplace(t *testing.T) { + th := kusttest_test.MakeHarness(t) + th.WriteK("base", ` +configMapGenerator: +- name: bob + literals: + - fruit=Indian Gooseberry + - year=2020 + - crisis=true +`) + th.WriteK("overlay", ` +resources: +- ../base +configMapGenerator: +- name: bob + behavior: replace + literals: + - month=12 +buildMetadata: [originAnnotations] +`) + m := th.Run("overlay", th.MakeDefaultOptions()) + th.AssertActualEqualsExpected(m, `apiVersion: v1 +data: + month: "12" +kind: ConfigMap +metadata: + annotations: + config.kubernetes.io/origin: | + configuredIn: kustomization.yaml + configuredBy: + apiVersion: builtin + kind: ConfigMapGenerator + name: bob-f8t5fhtbhc +`) +} + +func TestAnnoOriginCustomExecGenerator(t *testing.T) { + fSys := filesys.MakeFsOnDisk() + + th := kusttest_test.MakeHarnessWithFs(t, fSys) + o := th.MakeOptionsPluginsEnabled() + o.PluginConfig.FnpLoadingOptions.EnableExec = true + + tmpDir, err := filesys.NewTmpConfirmedDir() + assert.NoError(t, err) + th.WriteK(tmpDir.String(), ` +resources: +- short_secret.yaml +generators: +- gener.yaml +buildMetadata: [originAnnotations] +`) + + // Create some additional resource just to make sure everything is added + th.WriteF(filepath.Join(tmpDir.String(), "short_secret.yaml"), + ` +apiVersion: v1 +kind: Secret +metadata: + labels: + airshipit.org/ephemeral-user-data: "true" + name: node1-bmc-secret +type: Opaque +stringData: + userData: | + bootcmd: + - mkdir /mnt/vda +`) + th.WriteF(filepath.Join(tmpDir.String(), "generateDeployment.sh"), generateDeploymentDotSh) + + assert.NoError(t, os.Chmod(filepath.Join(tmpDir.String(), "generateDeployment.sh"), 0777)) + th.WriteF(filepath.Join(tmpDir.String(), "gener.yaml"), ` +kind: executable +metadata: + name: demo + annotations: + config.kubernetes.io/function: | + exec: + path: ./generateDeployment.sh +spec: +`) + + m := th.Run(tmpDir.String(), o) + assert.NoError(t, err) + yml, err := m.AsYaml() + assert.NoError(t, err) + assert.Equal(t, `apiVersion: v1 +kind: Secret +metadata: + annotations: + config.kubernetes.io/origin: | + path: short_secret.yaml + labels: + airshipit.org/ephemeral-user-data: "true" + name: node1-bmc-secret +stringData: + userData: | + bootcmd: + - mkdir /mnt/vda +type: Opaque +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + annotations: + config.kubernetes.io/origin: | + configuredIn: gener.yaml + configuredBy: + kind: executable + name: demo + tshirt-size: small + labels: + app: nginx + name: nginx +spec: + selector: + matchLabels: + app: nginx + template: + metadata: + labels: + app: nginx + spec: + containers: + - image: nginx + name: nginx +`, string(yml)) + assert.NoError(t, fSys.RemoveAll(tmpDir.String())) +} + +func TestAnnoOriginCustomInlineExecGenerator(t *testing.T) { + fSys := filesys.MakeFsOnDisk() + + th := kusttest_test.MakeHarnessWithFs(t, fSys) + o := th.MakeOptionsPluginsEnabled() + o.PluginConfig.FnpLoadingOptions.EnableExec = true + + tmpDir, err := filesys.NewTmpConfirmedDir() + assert.NoError(t, err) + th.WriteK(tmpDir.String(), ` +resources: +- short_secret.yaml +generators: +- |- + kind: executable + metadata: + name: demo + annotations: + config.kubernetes.io/function: | + exec: + path: ./generateDeployment.sh + spec: +buildMetadata: [originAnnotations] +`) + + // Create some additional resource just to make sure everything is added + th.WriteF(filepath.Join(tmpDir.String(), "short_secret.yaml"), + ` +apiVersion: v1 +kind: Secret +metadata: + labels: + airshipit.org/ephemeral-user-data: "true" + name: node1-bmc-secret +type: Opaque +stringData: + userData: | + bootcmd: + - mkdir /mnt/vda +`) + th.WriteF(filepath.Join(tmpDir.String(), "generateDeployment.sh"), generateDeploymentDotSh) + assert.NoError(t, os.Chmod(filepath.Join(tmpDir.String(), "generateDeployment.sh"), 0777)) + m := th.Run(tmpDir.String(), o) + assert.NoError(t, err) + yml, err := m.AsYaml() + assert.NoError(t, err) + assert.Equal(t, `apiVersion: v1 +kind: Secret +metadata: + annotations: + config.kubernetes.io/origin: | + path: short_secret.yaml + labels: + airshipit.org/ephemeral-user-data: "true" + name: node1-bmc-secret +stringData: + userData: | + bootcmd: + - mkdir /mnt/vda +type: Opaque +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + annotations: + config.kubernetes.io/origin: | + configuredIn: kustomization.yaml + configuredBy: + kind: executable + name: demo + tshirt-size: small + labels: + app: nginx + name: nginx +spec: + selector: + matchLabels: + app: nginx + template: + metadata: + labels: + app: nginx + spec: + containers: + - image: nginx + name: nginx +`, string(yml)) + assert.NoError(t, fSys.RemoveAll(tmpDir.String())) +} + +func TestAnnoOriginCustomExecGeneratorWithOverlay(t *testing.T) { + fSys := filesys.MakeFsOnDisk() + + th := kusttest_test.MakeHarnessWithFs(t, fSys) + o := th.MakeOptionsPluginsEnabled() + o.PluginConfig.FnpLoadingOptions.EnableExec = true + + tmpDir, err := filesys.NewTmpConfirmedDir() + assert.NoError(t, err) + base := filepath.Join(tmpDir.String(), "base") + prod := filepath.Join(tmpDir.String(), "prod") + assert.NoError(t, fSys.Mkdir(base)) + assert.NoError(t, fSys.Mkdir(prod)) + th.WriteK(base, ` +resources: +- short_secret.yaml +generators: +- gener.yaml +`) + th.WriteK(prod, ` +resources: +- ../base +buildMetadata: [originAnnotations] +`) + th.WriteF(filepath.Join(base, "short_secret.yaml"), + ` +apiVersion: v1 +kind: Secret +metadata: + labels: + airshipit.org/ephemeral-user-data: "true" + name: node1-bmc-secret +type: Opaque +stringData: + userData: | + bootcmd: + - mkdir /mnt/vda +`) + th.WriteF(filepath.Join(base, "generateDeployment.sh"), generateDeploymentDotSh) + + assert.NoError(t, os.Chmod(filepath.Join(base, "generateDeployment.sh"), 0777)) + th.WriteF(filepath.Join(base, "gener.yaml"), ` +kind: executable +metadata: + name: demo + annotations: + config.kubernetes.io/function: | + exec: + path: ./generateDeployment.sh +spec: +`) + + m := th.Run(prod, o) + assert.NoError(t, err) + yml, err := m.AsYaml() + assert.NoError(t, err) + assert.Equal(t, `apiVersion: v1 +kind: Secret +metadata: + annotations: + config.kubernetes.io/origin: | + path: ../base/short_secret.yaml + labels: + airshipit.org/ephemeral-user-data: "true" + name: node1-bmc-secret +stringData: + userData: | + bootcmd: + - mkdir /mnt/vda +type: Opaque +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + annotations: + config.kubernetes.io/origin: | + configuredIn: ../base/gener.yaml + configuredBy: + kind: executable + name: demo + tshirt-size: small + labels: + app: nginx + name: nginx +spec: + selector: + matchLabels: + app: nginx + template: + metadata: + labels: + app: nginx + spec: + containers: + - image: nginx + name: nginx +`, string(yml)) + assert.NoError(t, fSys.RemoveAll(tmpDir.String())) +} + +func TestAnnoOriginCustomInlineExecGeneratorWithOverlay(t *testing.T) { + fSys := filesys.MakeFsOnDisk() + + th := kusttest_test.MakeHarnessWithFs(t, fSys) + o := th.MakeOptionsPluginsEnabled() + o.PluginConfig.FnpLoadingOptions.EnableExec = true + + tmpDir, err := filesys.NewTmpConfirmedDir() + assert.NoError(t, err) + base := filepath.Join(tmpDir.String(), "base") + prod := filepath.Join(tmpDir.String(), "prod") + assert.NoError(t, fSys.Mkdir(base)) + assert.NoError(t, fSys.Mkdir(prod)) + th.WriteK(base, ` +resources: +- short_secret.yaml +generators: +- |- + kind: executable + metadata: + name: demo + annotations: + config.kubernetes.io/function: | + exec: + path: ./generateDeployment.sh + spec: +`) + th.WriteK(prod, ` +resources: +- ../base +buildMetadata: [originAnnotations] +`) + th.WriteF(filepath.Join(base, "short_secret.yaml"), + ` +apiVersion: v1 +kind: Secret +metadata: + labels: + airshipit.org/ephemeral-user-data: "true" + name: node1-bmc-secret +type: Opaque +stringData: + userData: | + bootcmd: + - mkdir /mnt/vda +`) + th.WriteF(filepath.Join(base, "generateDeployment.sh"), generateDeploymentDotSh) + assert.NoError(t, os.Chmod(filepath.Join(base, "generateDeployment.sh"), 0777)) + m := th.Run(prod, o) + assert.NoError(t, err) + yml, err := m.AsYaml() + assert.NoError(t, err) + assert.Equal(t, `apiVersion: v1 +kind: Secret +metadata: + annotations: + config.kubernetes.io/origin: | + path: ../base/short_secret.yaml + labels: + airshipit.org/ephemeral-user-data: "true" + name: node1-bmc-secret +stringData: + userData: | + bootcmd: + - mkdir /mnt/vda +type: Opaque +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + annotations: + config.kubernetes.io/origin: | + configuredIn: ../base/kustomization.yaml + configuredBy: + kind: executable + name: demo + tshirt-size: small + labels: + app: nginx + name: nginx +spec: + selector: + matchLabels: + app: nginx + template: + metadata: + labels: + app: nginx + spec: + containers: + - image: nginx + name: nginx +`, string(yml)) + assert.NoError(t, fSys.RemoveAll(tmpDir.String())) +} + +func TestAnnoOriginRemoteBuiltinGenerator(t *testing.T) { + fSys := filesys.MakeFsOnDisk() + b := krusty.MakeKustomizer(krusty.MakeDefaultOptions()) + tmpDir, err := filesys.NewTmpConfirmedDir() + assert.NoError(t, err) + assert.NoError(t, fSys.WriteFile(filepath.Join(tmpDir.String(), "kustomization.yaml"), []byte(` +resources: +- github.com/kubernetes-sigs/kustomize/examples/ldap/base/?ref=v1.0.6 +buildMetadata: [originAnnotations] +`))) + m, err := b.Run( + fSys, + tmpDir.String()) + if utils.IsErrTimeout(err) { + // Don't fail on timeouts. + t.SkipNow() + } + if !assert.NoError(t, err) { + t.FailNow() + } + yml, err := m.AsYaml() + assert.NoError(t, err) + assert.Contains(t, string(yml), `kind: ConfigMap +metadata: + annotations: + config.kubernetes.io/origin: | + repo: https://github.com/kubernetes-sigs/kustomize + ref: v1.0.6 + configuredIn: examples/ldap/base/kustomization.yaml + configuredBy: + apiVersion: builtin + kind: ConfigMapGenerator + name: ldap-configmap-4d7m6k5b42`) + assert.NoError(t, fSys.RemoveAll(tmpDir.String())) +} + +func TestAnnoOriginInlineBuiltinGenerator(t *testing.T) { + th := kusttest_test.MakeHarness(t) + th.WriteK(".", ` +resources: +- service.yaml +generators: +- |- + apiVersion: builtin + kind: ConfigMapGenerator + metadata: + name: notImportantHere + name: bob + literals: + - fruit=Indian Gooseberry + - year=2020 + - crisis=true +buildMetadata: [originAnnotations] +`) + + th.WriteF("service.yaml", ` +apiVersion: v1 +kind: Service +metadata: + name: apple +`) + m := th.Run(".", th.MakeDefaultOptions()) + th.AssertActualEqualsExpected(m, ` +apiVersion: v1 +kind: Service +metadata: + annotations: + config.kubernetes.io/origin: | + path: service.yaml + name: apple +--- +apiVersion: v1 +data: + crisis: "true" + fruit: Indian Gooseberry + year: "2020" +kind: ConfigMap +metadata: + annotations: + config.kubernetes.io/origin: | + configuredIn: kustomization.yaml + configuredBy: + apiVersion: builtin + kind: ConfigMapGenerator + name: notImportantHere + name: bob-79t79mt227 +`) +} + +func TestAnnoOriginGeneratorFromFile(t *testing.T) { + th := kusttest_test.MakeHarness(t) + th.WriteK(".", ` +resources: +- service.yaml +generators: +- configmap.yaml +buildMetadata: [originAnnotations] +`) + th.WriteF("configmap.yaml", ` +apiVersion: builtin +kind: ConfigMapGenerator +metadata: + name: notImportantHere +name: bob +literals: +- fruit=Indian Gooseberry +- year=2020 +- crisis=true +`) + th.WriteF("service.yaml", ` +apiVersion: v1 +kind: Service +metadata: + name: apple +`) + m := th.Run(".", th.MakeDefaultOptions()) + th.AssertActualEqualsExpected(m, ` +apiVersion: v1 +kind: Service +metadata: + annotations: + config.kubernetes.io/origin: | + path: service.yaml + name: apple +--- +apiVersion: v1 +data: + crisis: "true" + fruit: Indian Gooseberry + year: "2020" +kind: ConfigMap +metadata: + annotations: + config.kubernetes.io/origin: | + configuredIn: configmap.yaml + configuredBy: + apiVersion: builtin + kind: ConfigMapGenerator + name: notImportantHere + name: bob-79t79mt227 +`) +} + +func TestAnnoOriginBuiltinGeneratorFromFileWithOverlay(t *testing.T) { + th := kusttest_test.MakeHarness(t) + th.WriteK("base", ` +resources: +- short_secret.yaml +generators: +- configmap.yaml +`) + th.WriteF("base/configmap.yaml", `apiVersion: builtin +kind: ConfigMapGenerator +metadata: + name: notImportantHere +name: bob +literals: +- fruit=Indian Gooseberry +- year=2020 +- crisis=true +`) + th.WriteK("prod", ` +resources: +- ../base +buildMetadata: [originAnnotations] +`) + th.WriteF("base/short_secret.yaml", + ` +apiVersion: v1 +kind: Secret +metadata: + labels: + airshipit.org/ephemeral-user-data: "true" + name: node1-bmc-secret +type: Opaque +stringData: + userData: | + bootcmd: + - mkdir /mnt/vda +`) + m := th.Run("prod", th.MakeDefaultOptions()) + th.AssertActualEqualsExpected(m, `apiVersion: v1 +kind: Secret +metadata: + annotations: + config.kubernetes.io/origin: | + path: ../base/short_secret.yaml + labels: + airshipit.org/ephemeral-user-data: "true" + name: node1-bmc-secret +stringData: + userData: | + bootcmd: + - mkdir /mnt/vda +type: Opaque +--- +apiVersion: v1 +data: + crisis: "true" + fruit: Indian Gooseberry + year: "2020" +kind: ConfigMap +metadata: + annotations: + config.kubernetes.io/origin: | + configuredIn: ../base/configmap.yaml + configuredBy: + apiVersion: builtin + kind: ConfigMapGenerator + name: notImportantHere + name: bob-79t79mt227 +`) +} + +func TestAnnoOriginGeneratorInTransformersField(t *testing.T) { + fSys := filesys.MakeFsOnDisk() + + th := kusttest_test.MakeHarnessWithFs(t, fSys) + o := th.MakeOptionsPluginsEnabled() + o.PluginConfig.FnpLoadingOptions.EnableExec = true + + tmpDir, err := filesys.NewTmpConfirmedDir() + assert.NoError(t, err) + th.WriteK(tmpDir.String(), ` +transformers: +- gener.yaml +buildMetadata: [originAnnotations] +`) + + th.WriteF(filepath.Join(tmpDir.String(), "generateDeployment.sh"), generateDeploymentDotSh) + + assert.NoError(t, os.Chmod(filepath.Join(tmpDir.String(), "generateDeployment.sh"), 0777)) + th.WriteF(filepath.Join(tmpDir.String(), "gener.yaml"), ` +kind: executable +metadata: + name: demo + annotations: + config.kubernetes.io/function: | + exec: + path: ./generateDeployment.sh +spec: +`) + + m := th.Run(tmpDir.String(), o) + assert.NoError(t, err) + yml, err := m.AsYaml() + assert.NoError(t, err) + assert.Equal(t, `apiVersion: apps/v1 +kind: Deployment +metadata: + annotations: + config.kubernetes.io/origin: | + configuredIn: gener.yaml + configuredBy: + kind: executable + name: demo + tshirt-size: small + labels: + app: nginx + name: nginx +spec: + selector: + matchLabels: + app: nginx + template: + metadata: + labels: + app: nginx + spec: + containers: + - image: nginx + name: nginx +`, string(yml)) + assert.NoError(t, fSys.RemoveAll(tmpDir.String())) +} + +func TestAnnoOriginGeneratorInTransformersFieldWithOverlay(t *testing.T) { + fSys := filesys.MakeFsOnDisk() + + th := kusttest_test.MakeHarnessWithFs(t, fSys) + o := th.MakeOptionsPluginsEnabled() + o.PluginConfig.FnpLoadingOptions.EnableExec = true + + tmpDir, err := filesys.NewTmpConfirmedDir() + assert.NoError(t, err) + base := filepath.Join(tmpDir.String(), "base") + prod := filepath.Join(tmpDir.String(), "prod") + assert.NoError(t, fSys.Mkdir(base)) + assert.NoError(t, fSys.Mkdir(prod)) + + th.WriteK(base, ` +transformers: +- gener.yaml +`) + + th.WriteF(filepath.Join(base, "generateDeployment.sh"), generateDeploymentDotSh) + + assert.NoError(t, os.Chmod(filepath.Join(base, "generateDeployment.sh"), 0777)) + th.WriteF(filepath.Join(base, "gener.yaml"), ` +kind: executable +metadata: + name: demo + annotations: + config.kubernetes.io/function: | + exec: + path: ./generateDeployment.sh +spec: +`) + th.WriteK(prod, ` +resources: +- ../base +nameSuffix: -foo +buildMetadata: [originAnnotations, transformerAnnotations] +`) + + m := th.Run(prod, o) + assert.NoError(t, err) + yml, err := m.AsYaml() + assert.NoError(t, err) + assert.Equal(t, `apiVersion: apps/v1 +kind: Deployment +metadata: + annotations: + alpha.config.kubernetes.io/transformations: | + - configuredIn: kustomization.yaml + configuredBy: + apiVersion: builtin + kind: SuffixTransformer + config.kubernetes.io/origin: | + configuredIn: ../base/gener.yaml + configuredBy: + kind: executable + name: demo + tshirt-size: small + labels: + app: nginx + name: nginx-foo +spec: + selector: + matchLabels: + app: nginx + template: + metadata: + labels: + app: nginx + spec: + containers: + - image: nginx + name: nginx +`, string(yml)) + assert.NoError(t, fSys.RemoveAll(tmpDir.String())) +} diff --git a/go/internal/forked/api/krusty/originannotation_test.go b/go/internal/forked/api/krusty/originannotation_test.go new file mode 100644 index 000000000..aed8f6f53 --- /dev/null +++ b/go/internal/forked/api/krusty/originannotation_test.go @@ -0,0 +1,1145 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package krusty_test + +import ( + "os" + "path/filepath" + "testing" + + "github.com/stretchr/testify/assert" + "sigs.k8s.io/kustomize/api/internal/utils" + "sigs.k8s.io/kustomize/api/krusty" + kusttest_test "sigs.k8s.io/kustomize/api/testutils/kusttest" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/filesys" +) + +func TestAnnoOriginLocalFiles(t *testing.T) { + th := kusttest_test.MakeHarness(t) + th.WriteF("service.yaml", ` +apiVersion: v1 +kind: Service +metadata: + name: myService +spec: + ports: + - port: 7002 +`) + th.WriteK(".", ` +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization +resources: +- service.yaml +buildMetadata: [originAnnotations] +`) + options := th.MakeDefaultOptions() + m := th.Run(".", options) + th.AssertActualEqualsExpected(m, ` +apiVersion: v1 +kind: Service +metadata: + annotations: + config.kubernetes.io/origin: | + path: service.yaml + name: myService +spec: + ports: + - port: 7002 +`) +} + +func TestAnnoOriginLocalFilesWithOverlay(t *testing.T) { + th := kusttest_test.MakeHarness(t) + th.WriteK("base", ` +namePrefix: b- +resources: +- namespace.yaml +- role.yaml +- service.yaml +- deployment.yaml +`) + th.WriteF("base/service.yaml", ` +apiVersion: v1 +kind: Service +metadata: + name: myService +`) + th.WriteF("base/namespace.yaml", ` +apiVersion: v1 +kind: Namespace +metadata: + name: myNs +`) + th.WriteF("base/role.yaml", ` +apiVersion: v1 +kind: Role +metadata: + name: myRole +`) + th.WriteF("base/deployment.yaml", ` +apiVersion: v1 +kind: Deployment +metadata: + name: myDep +`) + th.WriteK("prod", ` +namePrefix: p- +resources: +- ../base +- service.yaml +- namespace.yaml +buildMetadata: [originAnnotations] +`) + th.WriteF("prod/service.yaml", ` +apiVersion: v1 +kind: Service +metadata: + name: myService2 +`) + th.WriteF("prod/namespace.yaml", ` +apiVersion: v1 +kind: Namespace +metadata: + name: myNs2 +`) + m := th.Run("prod", th.MakeDefaultOptions()) + th.AssertActualEqualsExpected(m, ` +apiVersion: v1 +kind: Namespace +metadata: + annotations: + config.kubernetes.io/origin: | + path: ../base/namespace.yaml + name: myNs +--- +apiVersion: v1 +kind: Role +metadata: + annotations: + config.kubernetes.io/origin: | + path: ../base/role.yaml + name: p-b-myRole +--- +apiVersion: v1 +kind: Service +metadata: + annotations: + config.kubernetes.io/origin: | + path: ../base/service.yaml + name: p-b-myService +--- +apiVersion: v1 +kind: Deployment +metadata: + annotations: + config.kubernetes.io/origin: | + path: ../base/deployment.yaml + name: p-b-myDep +--- +apiVersion: v1 +kind: Service +metadata: + annotations: + config.kubernetes.io/origin: | + path: service.yaml + name: p-myService2 +--- +apiVersion: v1 +kind: Namespace +metadata: + annotations: + config.kubernetes.io/origin: | + path: namespace.yaml + name: myNs2 +`) +} + +// This is a copy of TestGeneratorBasics in configmaps_test.go, +// except that we've enabled the addAnnoOrigin option. +func TestGeneratorWithAnnoOrigin(t *testing.T) { + th := kusttest_test.MakeHarness(t) + th.WriteK(".", ` +namePrefix: blah- +configMapGenerator: +- name: bob + literals: + - fruit=apple + - vegetable=broccoli + envs: + - foo.env + env: bar.env + files: + - passphrase=phrase.dat + - forces.txt +- name: json + literals: + - 'v2=[{"path": "var/druid/segment-cache"}]' + - >- + druid_segmentCache_locations=[{"path": + "var/druid/segment-cache", + "maxSize": 32000000000, + "freeSpacePercent": 1.0}] +secretGenerator: +- name: bob + literals: + - fruit=apple + - vegetable=broccoli + envs: + - foo.env + files: + - passphrase=phrase.dat + - forces.txt + env: bar.env +buildMetadata: [originAnnotations] +`) + th.WriteF("foo.env", ` +MOUNTAIN=everest +OCEAN=pacific +`) + th.WriteF("bar.env", ` +BIRD=falcon +`) + th.WriteF("phrase.dat", ` +Life is short. +But the years are long. +Not while the evil days come not. +`) + th.WriteF("forces.txt", ` +gravitational +electromagnetic +strong nuclear +weak nuclear +`) + opts := th.MakeDefaultOptions() + m := th.Run(".", opts) + th.AssertActualEqualsExpected( + m, ` +apiVersion: v1 +data: + BIRD: falcon + MOUNTAIN: everest + OCEAN: pacific + forces.txt: |2 + + gravitational + electromagnetic + strong nuclear + weak nuclear + fruit: apple + passphrase: |2 + + Life is short. + But the years are long. + Not while the evil days come not. + vegetable: broccoli +kind: ConfigMap +metadata: + annotations: + config.kubernetes.io/origin: | + configuredIn: kustomization.yaml + configuredBy: + apiVersion: builtin + kind: ConfigMapGenerator + name: blah-bob-g9df72cd5b +--- +apiVersion: v1 +data: + druid_segmentCache_locations: '[{"path": "var/druid/segment-cache", "maxSize": + 32000000000, "freeSpacePercent": 1.0}]' + v2: '[{"path": "var/druid/segment-cache"}]' +kind: ConfigMap +metadata: + annotations: + config.kubernetes.io/origin: | + configuredIn: kustomization.yaml + configuredBy: + apiVersion: builtin + kind: ConfigMapGenerator + name: blah-json-5298bc8g99 +--- +apiVersion: v1 +data: + BIRD: ZmFsY29u + MOUNTAIN: ZXZlcmVzdA== + OCEAN: cGFjaWZpYw== + forces.txt: | + CmdyYXZpdGF0aW9uYWwKZWxlY3Ryb21hZ25ldGljCnN0cm9uZyBudWNsZWFyCndlYWsgbn + VjbGVhcgo= + fruit: YXBwbGU= + passphrase: | + CkxpZmUgaXMgc2hvcnQuCkJ1dCB0aGUgeWVhcnMgYXJlIGxvbmcuCk5vdCB3aGlsZSB0aG + UgZXZpbCBkYXlzIGNvbWUgbm90Lgo= + vegetable: YnJvY2NvbGk= +kind: Secret +metadata: + annotations: + config.kubernetes.io/origin: | + configuredIn: kustomization.yaml + configuredBy: + apiVersion: builtin + kind: SecretGenerator + name: blah-bob-58g62h555c +type: Opaque +`) +} + +func TestAnnoOriginLocalBuiltinGenerator(t *testing.T) { + th := kusttest_test.MakeHarness(t) + th.WriteK(".", ` +resources: +- service.yaml +configMapGenerator: +- name: bob + literals: + - fruit=Indian Gooseberry + - year=2020 + - crisis=true +buildMetadata: [originAnnotations] + +`) + th.WriteF("service.yaml", ` +apiVersion: v1 +kind: Service +metadata: + name: demo +spec: + clusterIP: None +`) + m := th.Run(".", th.MakeDefaultOptions()) + th.AssertActualEqualsExpected( + m, ` +apiVersion: v1 +kind: Service +metadata: + annotations: + config.kubernetes.io/origin: | + path: service.yaml + name: demo +spec: + clusterIP: None +--- +apiVersion: v1 +data: + crisis: "true" + fruit: Indian Gooseberry + year: "2020" +kind: ConfigMap +metadata: + annotations: + config.kubernetes.io/origin: | + configuredIn: kustomization.yaml + configuredBy: + apiVersion: builtin + kind: ConfigMapGenerator + name: bob-79t79mt227 +`) +} + +func TestAnnoOriginConfigMapGeneratorMerge(t *testing.T) { + th := kusttest_test.MakeHarness(t) + th.WriteK("base", ` +configMapGenerator: +- name: bob + literals: + - fruit=Indian Gooseberry + - year=2020 + - crisis=true +`) + th.WriteK("overlay", ` +resources: +- ../base +configMapGenerator: +- name: bob + behavior: merge + literals: + - month=12 +buildMetadata: [originAnnotations] +`) + m := th.Run("overlay", th.MakeDefaultOptions()) + th.AssertActualEqualsExpected(m, `apiVersion: v1 +data: + crisis: "true" + fruit: Indian Gooseberry + month: "12" + year: "2020" +kind: ConfigMap +metadata: + annotations: + config.kubernetes.io/origin: | + configuredIn: ../base/kustomization.yaml + configuredBy: + apiVersion: builtin + kind: ConfigMapGenerator + name: bob-bk46gm59c6 +`) +} + +func TestAnnoOriginConfigMapGeneratorReplace(t *testing.T) { + th := kusttest_test.MakeHarness(t) + th.WriteK("base", ` +configMapGenerator: +- name: bob + literals: + - fruit=Indian Gooseberry + - year=2020 + - crisis=true +`) + th.WriteK("overlay", ` +resources: +- ../base +configMapGenerator: +- name: bob + behavior: replace + literals: + - month=12 +buildMetadata: [originAnnotations] +`) + m := th.Run("overlay", th.MakeDefaultOptions()) + th.AssertActualEqualsExpected(m, `apiVersion: v1 +data: + month: "12" +kind: ConfigMap +metadata: + annotations: + config.kubernetes.io/origin: | + configuredIn: kustomization.yaml + configuredBy: + apiVersion: builtin + kind: ConfigMapGenerator + name: bob-f8t5fhtbhc +`) +} + +func TestAnnoOriginCustomExecGenerator(t *testing.T) { + fSys := filesys.MakeFsOnDisk() + + th := kusttest_test.MakeHarnessWithFs(t, fSys) + o := th.MakeOptionsPluginsEnabled() + o.PluginConfig.FnpLoadingOptions.EnableExec = true + + tmpDir, err := filesys.NewTmpConfirmedDir() + assert.NoError(t, err) + th.WriteK(tmpDir.String(), ` +resources: +- short_secret.yaml +generators: +- gener.yaml +buildMetadata: [originAnnotations] +`) + + // Create some additional resource just to make sure everything is added + th.WriteF(filepath.Join(tmpDir.String(), "short_secret.yaml"), + ` +apiVersion: v1 +kind: Secret +metadata: + labels: + airshipit.org/ephemeral-user-data: "true" + name: node1-bmc-secret +type: Opaque +stringData: + userData: | + bootcmd: + - mkdir /mnt/vda +`) + th.WriteF(filepath.Join(tmpDir.String(), "generateDeployment.sh"), generateDeploymentDotSh) + + assert.NoError(t, os.Chmod(filepath.Join(tmpDir.String(), "generateDeployment.sh"), 0777)) + th.WriteF(filepath.Join(tmpDir.String(), "gener.yaml"), ` +kind: executable +metadata: + name: demo + annotations: + config.kubernetes.io/function: | + exec: + path: ./generateDeployment.sh +spec: +`) + + m := th.Run(tmpDir.String(), o) + assert.NoError(t, err) + yml, err := m.AsYaml() + assert.NoError(t, err) + assert.Equal(t, `apiVersion: v1 +kind: Secret +metadata: + annotations: + config.kubernetes.io/origin: | + path: short_secret.yaml + labels: + airshipit.org/ephemeral-user-data: "true" + name: node1-bmc-secret +stringData: + userData: | + bootcmd: + - mkdir /mnt/vda +type: Opaque +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + annotations: + config.kubernetes.io/origin: | + configuredIn: gener.yaml + configuredBy: + kind: executable + name: demo + tshirt-size: small + labels: + app: nginx + name: nginx +spec: + selector: + matchLabels: + app: nginx + template: + metadata: + labels: + app: nginx + spec: + containers: + - image: nginx + name: nginx +`, string(yml)) + assert.NoError(t, fSys.RemoveAll(tmpDir.String())) +} + +func TestAnnoOriginCustomInlineExecGenerator(t *testing.T) { + fSys := filesys.MakeFsOnDisk() + + th := kusttest_test.MakeHarnessWithFs(t, fSys) + o := th.MakeOptionsPluginsEnabled() + o.PluginConfig.FnpLoadingOptions.EnableExec = true + + tmpDir, err := filesys.NewTmpConfirmedDir() + assert.NoError(t, err) + th.WriteK(tmpDir.String(), ` +resources: +- short_secret.yaml +generators: +- |- + kind: executable + metadata: + name: demo + annotations: + config.kubernetes.io/function: | + exec: + path: ./generateDeployment.sh + spec: +buildMetadata: [originAnnotations] +`) + + // Create some additional resource just to make sure everything is added + th.WriteF(filepath.Join(tmpDir.String(), "short_secret.yaml"), + ` +apiVersion: v1 +kind: Secret +metadata: + labels: + airshipit.org/ephemeral-user-data: "true" + name: node1-bmc-secret +type: Opaque +stringData: + userData: | + bootcmd: + - mkdir /mnt/vda +`) + th.WriteF(filepath.Join(tmpDir.String(), "generateDeployment.sh"), generateDeploymentDotSh) + assert.NoError(t, os.Chmod(filepath.Join(tmpDir.String(), "generateDeployment.sh"), 0777)) + m := th.Run(tmpDir.String(), o) + assert.NoError(t, err) + yml, err := m.AsYaml() + assert.NoError(t, err) + assert.Equal(t, `apiVersion: v1 +kind: Secret +metadata: + annotations: + config.kubernetes.io/origin: | + path: short_secret.yaml + labels: + airshipit.org/ephemeral-user-data: "true" + name: node1-bmc-secret +stringData: + userData: | + bootcmd: + - mkdir /mnt/vda +type: Opaque +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + annotations: + config.kubernetes.io/origin: | + configuredIn: kustomization.yaml + configuredBy: + kind: executable + name: demo + tshirt-size: small + labels: + app: nginx + name: nginx +spec: + selector: + matchLabels: + app: nginx + template: + metadata: + labels: + app: nginx + spec: + containers: + - image: nginx + name: nginx +`, string(yml)) + assert.NoError(t, fSys.RemoveAll(tmpDir.String())) +} + +func TestAnnoOriginCustomExecGeneratorWithOverlay(t *testing.T) { + fSys := filesys.MakeFsOnDisk() + + th := kusttest_test.MakeHarnessWithFs(t, fSys) + o := th.MakeOptionsPluginsEnabled() + o.PluginConfig.FnpLoadingOptions.EnableExec = true + + tmpDir, err := filesys.NewTmpConfirmedDir() + assert.NoError(t, err) + base := filepath.Join(tmpDir.String(), "base") + prod := filepath.Join(tmpDir.String(), "prod") + assert.NoError(t, fSys.Mkdir(base)) + assert.NoError(t, fSys.Mkdir(prod)) + th.WriteK(base, ` +resources: +- short_secret.yaml +generators: +- gener.yaml +`) + th.WriteK(prod, ` +resources: +- ../base +buildMetadata: [originAnnotations] +`) + th.WriteF(filepath.Join(base, "short_secret.yaml"), + ` +apiVersion: v1 +kind: Secret +metadata: + labels: + airshipit.org/ephemeral-user-data: "true" + name: node1-bmc-secret +type: Opaque +stringData: + userData: | + bootcmd: + - mkdir /mnt/vda +`) + th.WriteF(filepath.Join(base, "generateDeployment.sh"), generateDeploymentDotSh) + + assert.NoError(t, os.Chmod(filepath.Join(base, "generateDeployment.sh"), 0777)) + th.WriteF(filepath.Join(base, "gener.yaml"), ` +kind: executable +metadata: + name: demo + annotations: + config.kubernetes.io/function: | + exec: + path: ./generateDeployment.sh +spec: +`) + + m := th.Run(prod, o) + assert.NoError(t, err) + yml, err := m.AsYaml() + assert.NoError(t, err) + assert.Equal(t, `apiVersion: v1 +kind: Secret +metadata: + annotations: + config.kubernetes.io/origin: | + path: ../base/short_secret.yaml + labels: + airshipit.org/ephemeral-user-data: "true" + name: node1-bmc-secret +stringData: + userData: | + bootcmd: + - mkdir /mnt/vda +type: Opaque +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + annotations: + config.kubernetes.io/origin: | + configuredIn: ../base/gener.yaml + configuredBy: + kind: executable + name: demo + tshirt-size: small + labels: + app: nginx + name: nginx +spec: + selector: + matchLabels: + app: nginx + template: + metadata: + labels: + app: nginx + spec: + containers: + - image: nginx + name: nginx +`, string(yml)) + assert.NoError(t, fSys.RemoveAll(tmpDir.String())) +} + +func TestAnnoOriginCustomInlineExecGeneratorWithOverlay(t *testing.T) { + fSys := filesys.MakeFsOnDisk() + + th := kusttest_test.MakeHarnessWithFs(t, fSys) + o := th.MakeOptionsPluginsEnabled() + o.PluginConfig.FnpLoadingOptions.EnableExec = true + + tmpDir, err := filesys.NewTmpConfirmedDir() + assert.NoError(t, err) + base := filepath.Join(tmpDir.String(), "base") + prod := filepath.Join(tmpDir.String(), "prod") + assert.NoError(t, fSys.Mkdir(base)) + assert.NoError(t, fSys.Mkdir(prod)) + th.WriteK(base, ` +resources: +- short_secret.yaml +generators: +- |- + kind: executable + metadata: + name: demo + annotations: + config.kubernetes.io/function: | + exec: + path: ./generateDeployment.sh + spec: +`) + th.WriteK(prod, ` +resources: +- ../base +buildMetadata: [originAnnotations] +`) + th.WriteF(filepath.Join(base, "short_secret.yaml"), + ` +apiVersion: v1 +kind: Secret +metadata: + labels: + airshipit.org/ephemeral-user-data: "true" + name: node1-bmc-secret +type: Opaque +stringData: + userData: | + bootcmd: + - mkdir /mnt/vda +`) + th.WriteF(filepath.Join(base, "generateDeployment.sh"), generateDeploymentDotSh) + assert.NoError(t, os.Chmod(filepath.Join(base, "generateDeployment.sh"), 0777)) + m := th.Run(prod, o) + assert.NoError(t, err) + yml, err := m.AsYaml() + assert.NoError(t, err) + assert.Equal(t, `apiVersion: v1 +kind: Secret +metadata: + annotations: + config.kubernetes.io/origin: | + path: ../base/short_secret.yaml + labels: + airshipit.org/ephemeral-user-data: "true" + name: node1-bmc-secret +stringData: + userData: | + bootcmd: + - mkdir /mnt/vda +type: Opaque +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + annotations: + config.kubernetes.io/origin: | + configuredIn: ../base/kustomization.yaml + configuredBy: + kind: executable + name: demo + tshirt-size: small + labels: + app: nginx + name: nginx +spec: + selector: + matchLabels: + app: nginx + template: + metadata: + labels: + app: nginx + spec: + containers: + - image: nginx + name: nginx +`, string(yml)) + assert.NoError(t, fSys.RemoveAll(tmpDir.String())) +} + +func TestAnnoOriginRemoteBuiltinGenerator(t *testing.T) { + fSys := filesys.MakeFsOnDisk() + b := krusty.MakeKustomizer(krusty.MakeDefaultOptions()) + tmpDir, err := filesys.NewTmpConfirmedDir() + assert.NoError(t, err) + assert.NoError(t, fSys.WriteFile(filepath.Join(tmpDir.String(), "kustomization.yaml"), []byte(` +resources: +- github.com/kubernetes-sigs/kustomize/examples/ldap/base/?ref=v1.0.6 +buildMetadata: [originAnnotations] +`))) + m, err := b.Run( + fSys, + tmpDir.String()) + if utils.IsErrTimeout(err) { + // Don't fail on timeouts. + t.SkipNow() + } + if !assert.NoError(t, err) { + t.FailNow() + } + yml, err := m.AsYaml() + assert.NoError(t, err) + assert.Contains(t, string(yml), `kind: ConfigMap +metadata: + annotations: + config.kubernetes.io/origin: | + repo: https://github.com/kubernetes-sigs/kustomize + ref: v1.0.6 + configuredIn: examples/ldap/base/kustomization.yaml + configuredBy: + apiVersion: builtin + kind: ConfigMapGenerator + name: ldap-configmap-4d7m6k5b42`) + assert.NoError(t, fSys.RemoveAll(tmpDir.String())) +} + +func TestAnnoOriginInlineBuiltinGenerator(t *testing.T) { + th := kusttest_test.MakeHarness(t) + th.WriteK(".", ` +resources: +- service.yaml +generators: +- |- + apiVersion: builtin + kind: ConfigMapGenerator + metadata: + name: notImportantHere + name: bob + literals: + - fruit=Indian Gooseberry + - year=2020 + - crisis=true +buildMetadata: [originAnnotations] +`) + + th.WriteF("service.yaml", ` +apiVersion: v1 +kind: Service +metadata: + name: apple +`) + m := th.Run(".", th.MakeDefaultOptions()) + th.AssertActualEqualsExpected(m, ` +apiVersion: v1 +kind: Service +metadata: + annotations: + config.kubernetes.io/origin: | + path: service.yaml + name: apple +--- +apiVersion: v1 +data: + crisis: "true" + fruit: Indian Gooseberry + year: "2020" +kind: ConfigMap +metadata: + annotations: + config.kubernetes.io/origin: | + configuredIn: kustomization.yaml + configuredBy: + apiVersion: builtin + kind: ConfigMapGenerator + name: notImportantHere + name: bob-79t79mt227 +`) +} + +func TestAnnoOriginGeneratorFromFile(t *testing.T) { + th := kusttest_test.MakeHarness(t) + th.WriteK(".", ` +resources: +- service.yaml +generators: +- configmap.yaml +buildMetadata: [originAnnotations] +`) + th.WriteF("configmap.yaml", ` +apiVersion: builtin +kind: ConfigMapGenerator +metadata: + name: notImportantHere +name: bob +literals: +- fruit=Indian Gooseberry +- year=2020 +- crisis=true +`) + th.WriteF("service.yaml", ` +apiVersion: v1 +kind: Service +metadata: + name: apple +`) + m := th.Run(".", th.MakeDefaultOptions()) + th.AssertActualEqualsExpected(m, ` +apiVersion: v1 +kind: Service +metadata: + annotations: + config.kubernetes.io/origin: | + path: service.yaml + name: apple +--- +apiVersion: v1 +data: + crisis: "true" + fruit: Indian Gooseberry + year: "2020" +kind: ConfigMap +metadata: + annotations: + config.kubernetes.io/origin: | + configuredIn: configmap.yaml + configuredBy: + apiVersion: builtin + kind: ConfigMapGenerator + name: notImportantHere + name: bob-79t79mt227 +`) +} + +func TestAnnoOriginBuiltinGeneratorFromFileWithOverlay(t *testing.T) { + th := kusttest_test.MakeHarness(t) + th.WriteK("base", ` +resources: +- short_secret.yaml +generators: +- configmap.yaml +`) + th.WriteF("base/configmap.yaml", `apiVersion: builtin +kind: ConfigMapGenerator +metadata: + name: notImportantHere +name: bob +literals: +- fruit=Indian Gooseberry +- year=2020 +- crisis=true +`) + th.WriteK("prod", ` +resources: +- ../base +buildMetadata: [originAnnotations] +`) + th.WriteF("base/short_secret.yaml", + ` +apiVersion: v1 +kind: Secret +metadata: + labels: + airshipit.org/ephemeral-user-data: "true" + name: node1-bmc-secret +type: Opaque +stringData: + userData: | + bootcmd: + - mkdir /mnt/vda +`) + m := th.Run("prod", th.MakeDefaultOptions()) + th.AssertActualEqualsExpected(m, `apiVersion: v1 +kind: Secret +metadata: + annotations: + config.kubernetes.io/origin: | + path: ../base/short_secret.yaml + labels: + airshipit.org/ephemeral-user-data: "true" + name: node1-bmc-secret +stringData: + userData: | + bootcmd: + - mkdir /mnt/vda +type: Opaque +--- +apiVersion: v1 +data: + crisis: "true" + fruit: Indian Gooseberry + year: "2020" +kind: ConfigMap +metadata: + annotations: + config.kubernetes.io/origin: | + configuredIn: ../base/configmap.yaml + configuredBy: + apiVersion: builtin + kind: ConfigMapGenerator + name: notImportantHere + name: bob-79t79mt227 +`) +} + +func TestAnnoOriginGeneratorInTransformersField(t *testing.T) { + fSys := filesys.MakeFsOnDisk() + + th := kusttest_test.MakeHarnessWithFs(t, fSys) + o := th.MakeOptionsPluginsEnabled() + o.PluginConfig.FnpLoadingOptions.EnableExec = true + + tmpDir, err := filesys.NewTmpConfirmedDir() + assert.NoError(t, err) + th.WriteK(tmpDir.String(), ` +transformers: +- gener.yaml +buildMetadata: [originAnnotations] +`) + + th.WriteF(filepath.Join(tmpDir.String(), "generateDeployment.sh"), generateDeploymentDotSh) + + assert.NoError(t, os.Chmod(filepath.Join(tmpDir.String(), "generateDeployment.sh"), 0777)) + th.WriteF(filepath.Join(tmpDir.String(), "gener.yaml"), ` +kind: executable +metadata: + name: demo + annotations: + config.kubernetes.io/function: | + exec: + path: ./generateDeployment.sh +spec: +`) + + m := th.Run(tmpDir.String(), o) + assert.NoError(t, err) + yml, err := m.AsYaml() + assert.NoError(t, err) + assert.Equal(t, `apiVersion: apps/v1 +kind: Deployment +metadata: + annotations: + config.kubernetes.io/origin: | + configuredIn: gener.yaml + configuredBy: + kind: executable + name: demo + tshirt-size: small + labels: + app: nginx + name: nginx +spec: + selector: + matchLabels: + app: nginx + template: + metadata: + labels: + app: nginx + spec: + containers: + - image: nginx + name: nginx +`, string(yml)) + assert.NoError(t, fSys.RemoveAll(tmpDir.String())) +} + +func TestAnnoOriginGeneratorInTransformersFieldWithOverlay(t *testing.T) { + fSys := filesys.MakeFsOnDisk() + + th := kusttest_test.MakeHarnessWithFs(t, fSys) + o := th.MakeOptionsPluginsEnabled() + o.PluginConfig.FnpLoadingOptions.EnableExec = true + + tmpDir, err := filesys.NewTmpConfirmedDir() + assert.NoError(t, err) + base := filepath.Join(tmpDir.String(), "base") + prod := filepath.Join(tmpDir.String(), "prod") + assert.NoError(t, fSys.Mkdir(base)) + assert.NoError(t, fSys.Mkdir(prod)) + + th.WriteK(base, ` +transformers: +- gener.yaml +`) + + th.WriteF(filepath.Join(base, "generateDeployment.sh"), generateDeploymentDotSh) + + assert.NoError(t, os.Chmod(filepath.Join(base, "generateDeployment.sh"), 0777)) + th.WriteF(filepath.Join(base, "gener.yaml"), ` +kind: executable +metadata: + name: demo + annotations: + config.kubernetes.io/function: | + exec: + path: ./generateDeployment.sh +spec: +`) + th.WriteK(prod, ` +resources: +- ../base +nameSuffix: -foo +buildMetadata: [originAnnotations, transformerAnnotations] +`) + + m := th.Run(prod, o) + assert.NoError(t, err) + yml, err := m.AsYaml() + assert.NoError(t, err) + assert.Equal(t, `apiVersion: apps/v1 +kind: Deployment +metadata: + annotations: + alpha.config.kubernetes.io/transformations: | + - configuredIn: kustomization.yaml + configuredBy: + apiVersion: builtin + kind: SuffixTransformer + config.kubernetes.io/origin: | + configuredIn: ../base/gener.yaml + configuredBy: + kind: executable + name: demo + tshirt-size: small + labels: + app: nginx + name: nginx-foo +spec: + selector: + matchLabels: + app: nginx + template: + metadata: + labels: + app: nginx + spec: + containers: + - image: nginx + name: nginx +`, string(yml)) + assert.NoError(t, fSys.RemoveAll(tmpDir.String())) +} diff --git a/go/internal/forked/api/krusty/patchdelete_test.go b/go/internal/forked/api/krusty/patchdelete_test.go new file mode 100644 index 000000000..148f50d1b --- /dev/null +++ b/go/internal/forked/api/krusty/patchdelete_test.go @@ -0,0 +1,74 @@ +package krusty_test + +import ( + "testing" + + kusttest_test "sigs.k8s.io/kustomize/api/testutils/kusttest" +) + +func TestPatchDeleteOfNotExistingAttributesShouldNotAddExtraElements(t *testing.T) { + th := kusttest_test.MakeEnhancedHarness(t) + defer th.Reset() + + th.WriteF("resource.yaml", ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: whatever +spec: + template: + spec: + containers: + - env: + - name: EXISTING + value: EXISTING_VALUE + - name: FOR_REMOVAL + value: FOR_REMOVAL_VALUE + name: whatever + image: helloworld +`) + th.WriteF("patch.yaml", ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: whatever +spec: + template: + spec: + containers: + - name: whatever + env: + - name: FOR_REMOVAL + $patch: delete + - name: NOT_EXISTING_FOR_REMOVAL + $patch: delete +`) + th.WriteK(".", ` +resources: +- resource.yaml +patches: +- path: patch.yaml + target: + kind: Deployment +`) + + // It's expected that removal of not existing elements should not introduce extra values, + // as a patch can be applied to multiple resources, not all of them can have all the elements being deleted. + expected := ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: whatever +spec: + template: + spec: + containers: + - env: + - name: EXISTING + value: EXISTING_VALUE + image: helloworld + name: whatever +` + m := th.Run(".", th.MakeDefaultOptions()) + th.AssertActualEqualsExpected(m, expected) +} diff --git a/go/internal/forked/api/krusty/pluginenv_test.go b/go/internal/forked/api/krusty/pluginenv_test.go new file mode 100644 index 000000000..b80a67fab --- /dev/null +++ b/go/internal/forked/api/krusty/pluginenv_test.go @@ -0,0 +1,79 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package krusty_test + +import ( + "io/ioutil" + "os" + "path/filepath" + "testing" + + "sigs.k8s.io/kustomize/api/konfig" + kusttest_test "sigs.k8s.io/kustomize/api/testutils/kusttest" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/filesys" +) + +// The PrintPluginEnv plugin is a toy plugin that emits +// its working directory and some environment variables, +// to add regression protection to plugin loading logic. +func TestPluginEnvironment(t *testing.T) { + th := kusttest_test.MakeEnhancedHarness(t). + PrepExecPlugin( + "someteam.example.com", "v1", "PrintPluginEnv") + defer th.Reset() + + confirmBehavior( + kusttest_test.MakeHarnessWithFs(t, filesys.MakeFsInMemory()), + filesys.Separator) + + dir := makeTmpDir(t) + defer os.RemoveAll(dir) + confirmBehavior( + kusttest_test.MakeHarnessWithFs(t, filesys.MakeFsOnDisk()), + dir) +} + +func confirmBehavior(th kusttest_test.Harness, dir string) { + th.WriteK(dir, ` +generators: +- config.yaml +`) + th.WriteF(filepath.Join(dir, "config.yaml"), ` +apiVersion: someteam.example.com/v1 +kind: PrintPluginEnv +metadata: + name: irrelevantHere +`) + m := th.Run(dir, th.MakeOptionsPluginsEnabled()) + + pHome, ok := os.LookupEnv(konfig.KustomizePluginHomeEnv) + if !ok { + th.GetT().Fatalf( + "expected env var '%s' to be defined", + konfig.KustomizePluginHomeEnv) + } + + th.AssertActualEqualsExpected(m, ` +apiVersion: v1 +env: + kustomize_plugin_config_root: `+dir+` + kustomize_plugin_home: `+pHome+` + pwd: `+dir+` +kind: GeneratedEnv +metadata: + name: hello +`) +} + +func makeTmpDir(t *testing.T) string { + base, err := os.Getwd() + if err != nil { + t.Fatalf("err %v", err) + } + dir, err := ioutil.TempDir(base, "kustomize-tmp-test-") + if err != nil { + t.Fatalf("err %v", err) + } + return dir +} diff --git a/go/internal/forked/api/krusty/pluginenv_test.go b/go/internal/forked/api/krusty/pluginenv_test.go new file mode 100644 index 000000000..af9e43158 --- /dev/null +++ b/go/internal/forked/api/krusty/pluginenv_test.go @@ -0,0 +1,79 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package krusty_test + +import ( + "io/ioutil" + "os" + "path/filepath" + "testing" + + "sigs.k8s.io/kustomize/api/konfig" + kusttest_test "sigs.k8s.io/kustomize/api/testutils/kusttest" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/filesys" +) + +// The PrintPluginEnv plugin is a toy plugin that emits +// its working directory and some environment variables, +// to add regression protection to plugin loading logic. +func TestPluginEnvironment(t *testing.T) { + th := kusttest_test.MakeEnhancedHarness(t). + PrepExecPlugin( + "someteam.example.com", "v1", "PrintPluginEnv") + defer th.Reset() + + confirmBehavior( + kusttest_test.MakeHarnessWithFs(t, filesys.MakeFsInMemory()), + filesys.Separator) + + dir := makeTmpDir(t) + defer os.RemoveAll(dir) + confirmBehavior( + kusttest_test.MakeHarnessWithFs(t, filesys.MakeFsOnDisk()), + dir) +} + +func confirmBehavior(th kusttest_test.Harness, dir string) { + th.WriteK(dir, ` +generators: +- config.yaml +`) + th.WriteF(filepath.Join(dir, "config.yaml"), ` +apiVersion: someteam.example.com/v1 +kind: PrintPluginEnv +metadata: + name: irrelevantHere +`) + m := th.Run(dir, th.MakeOptionsPluginsEnabled()) + + pHome, ok := os.LookupEnv(konfig.KustomizePluginHomeEnv) + if !ok { + th.GetT().Fatalf( + "expected env var '%s' to be defined", + konfig.KustomizePluginHomeEnv) + } + + th.AssertActualEqualsExpected(m, ` +apiVersion: v1 +env: + kustomize_plugin_config_root: `+dir+` + kustomize_plugin_home: `+pHome+` + pwd: `+dir+` +kind: GeneratedEnv +metadata: + name: hello +`) +} + +func makeTmpDir(t *testing.T) string { + base, err := os.Getwd() + if err != nil { + t.Fatalf("err %v", err) + } + dir, err := ioutil.TempDir(base, "kustomize-tmp-test-") + if err != nil { + t.Fatalf("err %v", err) + } + return dir +} diff --git a/go/internal/forked/api/krusty/poddisruptionbudget_test.go b/go/internal/forked/api/krusty/poddisruptionbudget_test.go new file mode 100644 index 000000000..4f423fb96 --- /dev/null +++ b/go/internal/forked/api/krusty/poddisruptionbudget_test.go @@ -0,0 +1,127 @@ +// Copyright 2020 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package krusty_test + +import ( + "testing" + + kusttest_test "sigs.k8s.io/kustomize/api/testutils/kusttest" +) + +func TestPodDisruptionBudgetBasics(t *testing.T) { + th := kusttest_test.MakeHarness(t) + th.WriteF("pdbLiteral.yaml", ` +apiVersion: policy/v1beta1 +kind: PodDisruptionBudget +metadata: + name: pdbLiteral +spec: + maxUnavailable: 90 +`) + th.WriteF("pdbPercentage.yaml", ` +apiVersion: policy/v1beta1 +kind: PodDisruptionBudget +metadata: + name: pdbPercentage +spec: + maxUnavailable: 90% +`) + th.WriteK(".", ` +resources: +- pdbLiteral.yaml +- pdbPercentage.yaml +`) + m := th.Run(".", th.MakeDefaultOptions()) + // In a PodDisruptionBudget, the fields maxUnavailable + // minAvailable are mutually exclusive, and both can hold + // either an integer, i.e. 10, or string that has to be + // an int followed by a percent sign, e.g. 10%. + th.AssertActualEqualsExpected(m, ` +apiVersion: policy/v1beta1 +kind: PodDisruptionBudget +metadata: + name: pdbLiteral +spec: + maxUnavailable: 90 +--- +apiVersion: policy/v1beta1 +kind: PodDisruptionBudget +metadata: + name: pdbPercentage +spec: + maxUnavailable: 90% +`) +} + +func TestPodDisruptionBudgetMerging(t *testing.T) { + th := kusttest_test.MakeHarness(t) + th.WriteF("pdb-patch.yaml", ` +apiVersion: policy/v1beta1 +kind: PodDisruptionBudget +metadata: + name: generic-pdb +spec: + maxUnavailable: 1 +`) + th.WriteF("my_file.yaml", ` +apiVersion: policy/v1beta1 +kind: PodDisruptionBudget +metadata: + name: championships-api + labels: + faceit-pdb: default +spec: + maxUnavailable: 100% +--- +apiVersion: policy/v1beta1 +kind: PodDisruptionBudget +metadata: + name: championships-api-2 + labels: + faceit-pdb: default +spec: + maxUnavailable: 100% +`) + th.WriteK(".", ` +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization +patches: +- path: pdb-patch.yaml + target: + kind: PodDisruptionBudget + labelSelector: faceit-pdb=default + +resources: +- my_file.yaml +`) + m := th.Run(".", th.MakeDefaultOptions()) + // In a PodDisruptionBudget, the fields maxUnavailable + // minAvailable are mutually exclusive, and both can hold + // either an integer, i.e. 10, or string that has to be + // an int followed by a percent sign, e.g. 10%. + // In the former case - bare integer - they should NOT be quoted + // as the api server will reject it. In the latter case with + // the percent sign, quotes can be added and the API server will + // accept it, but they don't have to be added. + th.AssertActualEqualsExpected( + m, ` +apiVersion: policy/v1beta1 +kind: PodDisruptionBudget +metadata: + labels: + faceit-pdb: default + name: championships-api +spec: + maxUnavailable: 1 +--- +apiVersion: policy/v1beta1 +kind: PodDisruptionBudget +metadata: + labels: + faceit-pdb: default + name: championships-api-2 +spec: + maxUnavailable: 1 +`) +} diff --git a/go/internal/forked/api/krusty/remoteload_test.go b/go/internal/forked/api/krusty/remoteload_test.go new file mode 100644 index 000000000..1108f5119 --- /dev/null +++ b/go/internal/forked/api/krusty/remoteload_test.go @@ -0,0 +1,191 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package krusty_test + +import ( + "fmt" + "net/http" + "path/filepath" + "testing" + + "github.com/stretchr/testify/assert" + "sigs.k8s.io/kustomize/api/internal/utils" + "sigs.k8s.io/kustomize/api/krusty" + "sigs.k8s.io/kustomize/api/loader" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/filesys" +) + +func TestRemoteLoad(t *testing.T) { + fSys := filesys.MakeFsOnDisk() + b := krusty.MakeKustomizer(krusty.MakeDefaultOptions()) + m, err := b.Run( + fSys, + "github.com/kubernetes-sigs/kustomize/examples/multibases/dev/?ref=v1.0.6") + if utils.IsErrTimeout(err) { + // Don't fail on timeouts. + t.SkipNow() + } + if !assert.NoError(t, err) { + t.FailNow() + } + yml, err := m.AsYaml() + assert.NoError(t, err) + assert.Equal(t, `apiVersion: v1 +kind: Pod +metadata: + labels: + app: myapp + name: dev-myapp-pod +spec: + containers: + - image: nginx:1.7.9 + name: nginx +`, string(yml)) +} + +func TestRemoteResource(t *testing.T) { + fSys := filesys.MakeFsOnDisk() + b := krusty.MakeKustomizer(krusty.MakeDefaultOptions()) + tmpDir, err := filesys.NewTmpConfirmedDir() + assert.NoError(t, err) + assert.NoError(t, fSys.WriteFile(filepath.Join(tmpDir.String(), "kustomization.yaml"), []byte(` +resources: +- github.com/kubernetes-sigs/kustomize/examples/multibases/dev/?ref=v1.0.6 +`))) + m, err := b.Run( + fSys, + tmpDir.String()) + if utils.IsErrTimeout(err) { + // Don't fail on timeouts. + t.SkipNow() + } + assert.NoError(t, err) + yml, err := m.AsYaml() + assert.NoError(t, err) + assert.Equal(t, `apiVersion: v1 +kind: Pod +metadata: + labels: + app: myapp + name: dev-myapp-pod +spec: + containers: + - image: nginx:1.7.9 + name: nginx +`, string(yml)) + assert.NoError(t, fSys.RemoveAll(tmpDir.String())) +} + +func TestRemoteResourceWithHTTPError(t *testing.T) { + fSys := filesys.MakeFsOnDisk() + b := krusty.MakeKustomizer(krusty.MakeDefaultOptions()) + tmpDir, err := filesys.NewTmpConfirmedDir() + assert.NoError(t, err) + + url404 := "https://github.com/thisisa404.yaml" + kusto := filepath.Join(tmpDir.String(), "kustomization.yaml") + assert.NoError(t, fSys.WriteFile(kusto, []byte(fmt.Sprintf(` +resources: +- %s +`, url404)))) + + _, err = b.Run(fSys, tmpDir.String()) + if utils.IsErrTimeout(err) { + // Don't fail on timeouts. + t.SkipNow() + } + + httpErr := fmt.Errorf("%w: status code %d (%s)", loader.ErrorHTTP, 404, http.StatusText(404)) + accuFromErr := fmt.Errorf("accumulating resources from '%s': %w", url404, httpErr) + expectedErr := fmt.Errorf("accumulating resources: %w", accuFromErr) + assert.EqualErrorf(t, err, expectedErr.Error(), url404) +} + +func TestRemoteResourceAnnoOrigin(t *testing.T) { + fSys := filesys.MakeFsOnDisk() + b := krusty.MakeKustomizer(krusty.MakeDefaultOptions()) + tmpDir, err := filesys.NewTmpConfirmedDir() + assert.NoError(t, err) + assert.NoError(t, fSys.WriteFile(filepath.Join(tmpDir.String(), "kustomization.yaml"), []byte(` +resources: +- github.com/kubernetes-sigs/kustomize/examples/multibases/dev/?ref=v1.0.6 +buildMetadata: [originAnnotations] +`))) + m, err := b.Run( + fSys, + tmpDir.String()) + if utils.IsErrTimeout(err) { + // Don't fail on timeouts. + t.SkipNow() + } + assert.NoError(t, err) + yml, err := m.AsYaml() + assert.NoError(t, err) + assert.Equal(t, `apiVersion: v1 +kind: Pod +metadata: + annotations: + config.kubernetes.io/origin: | + path: examples/multibases/base/pod.yaml + repo: https://github.com/kubernetes-sigs/kustomize + ref: v1.0.6 + labels: + app: myapp + name: dev-myapp-pod +spec: + containers: + - image: nginx:1.7.9 + name: nginx +`, string(yml)) + assert.NoError(t, fSys.RemoveAll(tmpDir.String())) +} + +func TestRemoteResourceAsBaseWithAnnoOrigin(t *testing.T) { + fSys := filesys.MakeFsOnDisk() + b := krusty.MakeKustomizer(krusty.MakeDefaultOptions()) + tmpDir, err := filesys.NewTmpConfirmedDir() + assert.NoError(t, err) + base := filepath.Join(tmpDir.String(), "base") + prod := filepath.Join(tmpDir.String(), "prod") + assert.NoError(t, fSys.Mkdir(base)) + assert.NoError(t, fSys.Mkdir(prod)) + assert.NoError(t, fSys.WriteFile(filepath.Join(base, "kustomization.yaml"), []byte(` +resources: +- github.com/kubernetes-sigs/kustomize/examples/multibases/dev/?ref=v1.0.6 +`))) + assert.NoError(t, fSys.WriteFile(filepath.Join(prod, "kustomization.yaml"), []byte(` +resources: +- ../base +namePrefix: prefix- +buildMetadata: [originAnnotations] +`))) + + m, err := b.Run( + fSys, + prod) + if utils.IsErrTimeout(err) { + // Don't fail on timeouts. + t.SkipNow() + } + assert.NoError(t, err) + yml, err := m.AsYaml() + assert.NoError(t, err) + assert.Equal(t, `apiVersion: v1 +kind: Pod +metadata: + annotations: + config.kubernetes.io/origin: | + path: examples/multibases/base/pod.yaml + repo: https://github.com/kubernetes-sigs/kustomize + ref: v1.0.6 + labels: + app: myapp + name: prefix-dev-myapp-pod +spec: + containers: + - image: nginx:1.7.9 + name: nginx +`, string(yml)) + assert.NoError(t, fSys.RemoveAll(tmpDir.String())) +} diff --git a/go/internal/forked/api/krusty/remoteload_test.go b/go/internal/forked/api/krusty/remoteload_test.go new file mode 100644 index 000000000..b93ec3654 --- /dev/null +++ b/go/internal/forked/api/krusty/remoteload_test.go @@ -0,0 +1,191 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package krusty_test + +import ( + "fmt" + "net/http" + "path/filepath" + "testing" + + "github.com/stretchr/testify/assert" + "sigs.k8s.io/kustomize/api/internal/utils" + "sigs.k8s.io/kustomize/api/krusty" + "sigs.k8s.io/kustomize/api/loader" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/filesys" +) + +func TestRemoteLoad(t *testing.T) { + fSys := filesys.MakeFsOnDisk() + b := krusty.MakeKustomizer(krusty.MakeDefaultOptions()) + m, err := b.Run( + fSys, + "github.com/kubernetes-sigs/kustomize/examples/multibases/dev/?ref=v1.0.6") + if utils.IsErrTimeout(err) { + // Don't fail on timeouts. + t.SkipNow() + } + if !assert.NoError(t, err) { + t.FailNow() + } + yml, err := m.AsYaml() + assert.NoError(t, err) + assert.Equal(t, `apiVersion: v1 +kind: Pod +metadata: + labels: + app: myapp + name: dev-myapp-pod +spec: + containers: + - image: nginx:1.7.9 + name: nginx +`, string(yml)) +} + +func TestRemoteResource(t *testing.T) { + fSys := filesys.MakeFsOnDisk() + b := krusty.MakeKustomizer(krusty.MakeDefaultOptions()) + tmpDir, err := filesys.NewTmpConfirmedDir() + assert.NoError(t, err) + assert.NoError(t, fSys.WriteFile(filepath.Join(tmpDir.String(), "kustomization.yaml"), []byte(` +resources: +- github.com/kubernetes-sigs/kustomize/examples/multibases/dev/?ref=v1.0.6 +`))) + m, err := b.Run( + fSys, + tmpDir.String()) + if utils.IsErrTimeout(err) { + // Don't fail on timeouts. + t.SkipNow() + } + assert.NoError(t, err) + yml, err := m.AsYaml() + assert.NoError(t, err) + assert.Equal(t, `apiVersion: v1 +kind: Pod +metadata: + labels: + app: myapp + name: dev-myapp-pod +spec: + containers: + - image: nginx:1.7.9 + name: nginx +`, string(yml)) + assert.NoError(t, fSys.RemoveAll(tmpDir.String())) +} + +func TestRemoteResourceWithHTTPError(t *testing.T) { + fSys := filesys.MakeFsOnDisk() + b := krusty.MakeKustomizer(krusty.MakeDefaultOptions()) + tmpDir, err := filesys.NewTmpConfirmedDir() + assert.NoError(t, err) + + url404 := "https://github.com/thisisa404.yaml" + kusto := filepath.Join(tmpDir.String(), "kustomization.yaml") + assert.NoError(t, fSys.WriteFile(kusto, []byte(fmt.Sprintf(` +resources: +- %s +`, url404)))) + + _, err = b.Run(fSys, tmpDir.String()) + if utils.IsErrTimeout(err) { + // Don't fail on timeouts. + t.SkipNow() + } + + httpErr := fmt.Errorf("%w: status code %d (%s)", loader.ErrorHTTP, 404, http.StatusText(404)) + accuFromErr := fmt.Errorf("accumulating resources from '%s': %w", url404, httpErr) + expectedErr := fmt.Errorf("accumulating resources: %w", accuFromErr) + assert.EqualErrorf(t, err, expectedErr.Error(), url404) +} + +func TestRemoteResourceAnnoOrigin(t *testing.T) { + fSys := filesys.MakeFsOnDisk() + b := krusty.MakeKustomizer(krusty.MakeDefaultOptions()) + tmpDir, err := filesys.NewTmpConfirmedDir() + assert.NoError(t, err) + assert.NoError(t, fSys.WriteFile(filepath.Join(tmpDir.String(), "kustomization.yaml"), []byte(` +resources: +- github.com/kubernetes-sigs/kustomize/examples/multibases/dev/?ref=v1.0.6 +buildMetadata: [originAnnotations] +`))) + m, err := b.Run( + fSys, + tmpDir.String()) + if utils.IsErrTimeout(err) { + // Don't fail on timeouts. + t.SkipNow() + } + assert.NoError(t, err) + yml, err := m.AsYaml() + assert.NoError(t, err) + assert.Equal(t, `apiVersion: v1 +kind: Pod +metadata: + annotations: + config.kubernetes.io/origin: | + path: examples/multibases/base/pod.yaml + repo: https://github.com/kubernetes-sigs/kustomize + ref: v1.0.6 + labels: + app: myapp + name: dev-myapp-pod +spec: + containers: + - image: nginx:1.7.9 + name: nginx +`, string(yml)) + assert.NoError(t, fSys.RemoveAll(tmpDir.String())) +} + +func TestRemoteResourceAsBaseWithAnnoOrigin(t *testing.T) { + fSys := filesys.MakeFsOnDisk() + b := krusty.MakeKustomizer(krusty.MakeDefaultOptions()) + tmpDir, err := filesys.NewTmpConfirmedDir() + assert.NoError(t, err) + base := filepath.Join(tmpDir.String(), "base") + prod := filepath.Join(tmpDir.String(), "prod") + assert.NoError(t, fSys.Mkdir(base)) + assert.NoError(t, fSys.Mkdir(prod)) + assert.NoError(t, fSys.WriteFile(filepath.Join(base, "kustomization.yaml"), []byte(` +resources: +- github.com/kubernetes-sigs/kustomize/examples/multibases/dev/?ref=v1.0.6 +`))) + assert.NoError(t, fSys.WriteFile(filepath.Join(prod, "kustomization.yaml"), []byte(` +resources: +- ../base +namePrefix: prefix- +buildMetadata: [originAnnotations] +`))) + + m, err := b.Run( + fSys, + prod) + if utils.IsErrTimeout(err) { + // Don't fail on timeouts. + t.SkipNow() + } + assert.NoError(t, err) + yml, err := m.AsYaml() + assert.NoError(t, err) + assert.Equal(t, `apiVersion: v1 +kind: Pod +metadata: + annotations: + config.kubernetes.io/origin: | + path: examples/multibases/base/pod.yaml + repo: https://github.com/kubernetes-sigs/kustomize + ref: v1.0.6 + labels: + app: myapp + name: prefix-dev-myapp-pod +spec: + containers: + - image: nginx:1.7.9 + name: nginx +`, string(yml)) + assert.NoError(t, fSys.RemoveAll(tmpDir.String())) +} diff --git a/go/internal/forked/api/krusty/repeatbase_test.go b/go/internal/forked/api/krusty/repeatbase_test.go new file mode 100644 index 000000000..438b7af28 --- /dev/null +++ b/go/internal/forked/api/krusty/repeatbase_test.go @@ -0,0 +1,177 @@ +// Copyright 2021 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package krusty_test + +import ( + "strings" + "testing" + + kusttest_test "sigs.k8s.io/kustomize/api/testutils/kusttest" +) + +// This is broken since kustomize v3.9.3. +// See https://github.com/kubernetes-sigs/kustomize/issues/3609 for details. + +// Here is a structure of a kustomization of one resource inheriting from +// two bases. One of those bases is shared between the canary base and the +// final resource. This is named canary as it is a simple pattern to +// duplicate a resource that can be used with canary deployments. +// +// base +// | deployment.yaml +// | kustomization.yaml +// canary +// | deployment-canary-patch.yaml +// | kustomization.yaml +// mango +// | deployment-mango-patch.yaml +// | deployment-mango-canary-patch.yaml +// | kustomization.yaml +func TestRepeatBase(t *testing.T) { + th := kusttest_test.MakeHarness(t) + th.WriteK("base", ` +resources: + - deployment.yaml +`) + th.WriteF("base/deployment.yaml", ` +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + name: banana +spec: + selector: + matchLabels: + component: banana + template: + metadata: + labels: + component: banana + spec: + containers: + - name: banana + image: image +`) + + th.WriteK("canary", ` +resources: + - ../base +patches: +- patch: | + - op: replace + path: /metadata/name + value: banana-canary + target: + kind: Deployment +- path: deployment-canary-patch.yaml +`) + th.WriteF("canary/deployment-canary-patch.yaml", ` +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + name: banana-canary + labels: + type: canary +spec: + selector: + matchLabels: + component: banana + type: canary + template: + metadata: + labels: + component: banana + type: canary + spec: + containers: + - name: banana + image: image-canary +`) + + th.WriteK("mango", ` +nameSuffix: -mango +resources: + - ../base + - ../canary +patches: +- path: deployment-mango-base-patch.yaml +- path: deployment-mango-canary-patch.yaml +`) + th.WriteF("mango/deployment-mango-base-patch.yaml", ` +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + name: banana +spec: + template: + spec: + containers: + - name: banana + image: image-mango +`) + th.WriteF("mango/deployment-mango-canary-patch.yaml", ` +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + name: banana-canary +spec: + template: + spec: + containers: + - name: banana + image: image-canary-mango +`) + + err := th.RunWithErr("mango", th.MakeDefaultOptions()) + if !strings.Contains( + err.Error(), "multiple matches for Id Deployment.v1.apps/banana.[noNs]; failed to find unique target for patch Deployment.v1.apps/banana.[noNs]") { + t.Fatalf("Unexpected err: %v", err) + } + + // Uncomenting the following makes it work with kustomize v3.9.2 and bellow. + + // m := th.Run("/app", th.MakeDefaultOptions()) + // th.AssertActualEqualsExpected(m, ` + //apiVersion: apps/v1 + //kind: Deployment + //metadata: + // name: deployment-a + //spec: + // selector: + // matchLabels: + // component: deployment + // template: + // metadata: + // labels: + // component: deployment + // spec: + // containers: + // - image: image-a + // name: container-a + //--- + //apiVersion: apps/v1 + //kind: Deployment + //metadata: + // labels: + // type: canary + // name: deployment-canary-a + //spec: + // selector: + // matchLabels: + // component: deployment + // type: canary + // template: + // metadata: + // labels: + // component: deployment + // spec: + // containers: + // - image: image-canary-a + // name: container-a + //`) + +} diff --git a/go/internal/forked/api/krusty/replacementtransformer_test.go b/go/internal/forked/api/krusty/replacementtransformer_test.go new file mode 100644 index 000000000..15c088818 --- /dev/null +++ b/go/internal/forked/api/krusty/replacementtransformer_test.go @@ -0,0 +1,484 @@ +package krusty_test + +import ( + "testing" + + kusttest_test "sigs.k8s.io/kustomize/api/testutils/kusttest" +) + +// end to end tests to demonstrate functionality of ReplacementTransformer +func TestReplacementsField(t *testing.T) { + th := kusttest_test.MakeEnhancedHarness(t) + defer th.Reset() + + th.WriteK(".", ` +resources: +- resource.yaml + +replacements: +- source: + kind: Deployment + fieldPath: spec.template.spec.containers.0.image + targets: + - select: + kind: Deployment + fieldPaths: + - spec.template.spec.containers.1.image +`) + th.WriteF("resource.yaml", ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: deploy +spec: + template: + spec: + containers: + - image: foobar:1 + name: replaced-with-digest + - image: postgres:1.8.0 + name: postgresdb +`) + expected := ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: deploy +spec: + template: + spec: + containers: + - image: foobar:1 + name: replaced-with-digest + - image: foobar:1 + name: postgresdb +` + m := th.Run(".", th.MakeDefaultOptions()) + th.AssertActualEqualsExpected(m, expected) +} + +func TestReplacementsFieldWithPath(t *testing.T) { + th := kusttest_test.MakeEnhancedHarness(t) + defer th.Reset() + + th.WriteK(".", ` +resources: +- resource.yaml + +replacements: +- path: replacement.yaml +`) + th.WriteF("replacement.yaml", ` +source: + kind: Deployment + fieldPath: spec.template.spec.containers.0.image +targets: +- select: + kind: Deployment + fieldPaths: + - spec.template.spec.containers.1.image +`) + th.WriteF("resource.yaml", ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: deploy +spec: + template: + spec: + containers: + - image: foobar:1 + name: replaced-with-digest + - image: postgres:1.8.0 + name: postgresdb +`) + expected := ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: deploy +spec: + template: + spec: + containers: + - image: foobar:1 + name: replaced-with-digest + - image: foobar:1 + name: postgresdb +` + m := th.Run(".", th.MakeDefaultOptions()) + th.AssertActualEqualsExpected(m, expected) +} + +func TestReplacementTransformerWithDiamondShape(t *testing.T) { + th := kusttest_test.MakeEnhancedHarness(t) + defer th.Reset() + + th.WriteF("base/deployments.yaml", ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: deploy +spec: + template: + spec: + containers: + - image: nginx:1.7.9 + name: nginx +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + name: sourceA +spec: + template: + spec: + containers: + - image: nginx:newtagA + name: nginx +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + name: sourceB +spec: + template: + spec: + containers: + - image: nginx:newtagB + name: nginx +`) + th.WriteK("base", ` +resources: +- deployments.yaml +`) + th.WriteK("a", ` +namePrefix: a- +resources: +- ../base +replacements: +- path: replacement.yaml +`) + th.WriteF("a/replacement.yaml", ` +source: + name: a-sourceA + fieldPath: spec.template.spec.containers.0.image +targets: +- select: + name: a-deploy + fieldPaths: + - spec.template.spec.containers.[name=nginx].image +`) + th.WriteK("b", ` +namePrefix: b- +resources: +- ../base +replacements: +- path: replacement.yaml +`) + th.WriteF("b/replacement.yaml", ` +source: + name: b-sourceB + fieldPath: spec.template.spec.containers.0.image +targets: +- select: + name: b-deploy + fieldPaths: + - spec.template.spec.containers.[name=nginx].image +`) + th.WriteK(".", ` +resources: +- a +- b +`) + + m := th.Run(".", th.MakeDefaultOptions()) + th.AssertActualEqualsExpected(m, ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: a-deploy +spec: + template: + spec: + containers: + - image: nginx:newtagA + name: nginx +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + name: a-sourceA +spec: + template: + spec: + containers: + - image: nginx:newtagA + name: nginx +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + name: a-sourceB +spec: + template: + spec: + containers: + - image: nginx:newtagB + name: nginx +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + name: b-deploy +spec: + template: + spec: + containers: + - image: nginx:newtagB + name: nginx +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + name: b-sourceA +spec: + template: + spec: + containers: + - image: nginx:newtagA + name: nginx +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + name: b-sourceB +spec: + template: + spec: + containers: + - image: nginx:newtagB + name: nginx +`) +} + +func TestReplacementTransformerWithOriginalName(t *testing.T) { + th := kusttest_test.MakeEnhancedHarness(t) + defer th.Reset() + + th.WriteF("base/deployments.yaml", ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: target +spec: + template: + spec: + containers: + - image: nginx:oldtag + name: nginx +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + name: source +spec: + template: + spec: + containers: + - image: nginx:newtag + name: nginx +`) + th.WriteK("base", ` +resources: +- deployments.yaml +`) + th.WriteK("overlay", ` +namePrefix: prefix1- +resources: +- ../base +`) + + th.WriteK(".", ` +namePrefix: prefix2- +resources: +- overlay +replacements: +- path: replacement.yaml +`) + th.WriteF("replacement.yaml", ` +source: + name: source + fieldPath: spec.template.spec.containers.0.image +targets: +- select: + name: prefix1-target + fieldPaths: + - spec.template.spec.containers.[name=nginx].image +`) + + m := th.Run(".", th.MakeDefaultOptions()) + th.AssertActualEqualsExpected(m, ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: prefix2-prefix1-target +spec: + template: + spec: + containers: + - image: nginx:newtag + name: nginx +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + name: prefix2-prefix1-source +spec: + template: + spec: + containers: + - image: nginx:newtag + name: nginx +`) +} + +// TODO: Address namePrefix in overlay not applying to replacement targets +// The property `data.blue-name` should end up being `overlay-blue` instead of `blue` +// https://github.com/kubernetes-sigs/kustomize/issues/4034 +func TestReplacementTransformerWithNamePrefixOverlay(t *testing.T) { + th := kusttest_test.MakeEnhancedHarness(t) + defer th.Reset() + + th.WriteK("base", ` +generatorOptions: + disableNameSuffixHash: true +configMapGenerator: +- name: blue +- name: red +replacements: +- source: + kind: ConfigMap + name: blue + fieldPath: metadata.name + targets: + - select: + name: red + fieldPaths: + - data.blue-name + options: + create: true +`) + + th.WriteK(".", ` +namePrefix: overlay- +resources: +- base +`) + m := th.Run(".", th.MakeDefaultOptions()) + th.AssertActualEqualsExpected(m, ` +apiVersion: v1 +kind: ConfigMap +metadata: + name: overlay-blue +--- +apiVersion: v1 +data: + blue-name: blue +kind: ConfigMap +metadata: + name: overlay-red +`) +} + +// TODO: Address namespace in overlay not applying to replacement targets +// The property `data.blue-namespace` should end up being `overlay-namespace` instead of `base-namespace` +// https://github.com/kubernetes-sigs/kustomize/issues/4034 +func TestReplacementTransformerWithNamespaceOverlay(t *testing.T) { + th := kusttest_test.MakeEnhancedHarness(t) + defer th.Reset() + + th.WriteK("base", ` +namespace: base-namespace +generatorOptions: + disableNameSuffixHash: true +configMapGenerator: +- name: blue +- name: red +replacements: +- source: + kind: ConfigMap + name: blue + fieldPath: metadata.namespace + targets: + - select: + name: red + fieldPaths: + - data.blue-namespace + options: + create: true +`) + + th.WriteK(".", ` +namespace: overlay-namespace +resources: +- base +`) + m := th.Run(".", th.MakeDefaultOptions()) + th.AssertActualEqualsExpected(m, ` +apiVersion: v1 +kind: ConfigMap +metadata: + name: blue + namespace: overlay-namespace +--- +apiVersion: v1 +data: + blue-namespace: base-namespace +kind: ConfigMap +metadata: + name: red + namespace: overlay-namespace +`) +} + +// TODO: Address configMapGenerator suffix not applying to replacement targets +// The property `data.blue-name` should end up being `blue-6ct58987ht` instead of `blue` +// https://github.com/kubernetes-sigs/kustomize/issues/4034 +func TestReplacementTransformerWithConfigMapGenerator(t *testing.T) { + th := kusttest_test.MakeEnhancedHarness(t) + defer th.Reset() + + th.WriteK(".", ` +configMapGenerator: +- name: blue +- name: red +replacements: +- source: + kind: ConfigMap + name: blue + fieldPath: metadata.name + targets: + - select: + name: red + fieldPaths: + - data.blue-name + options: + create: true +`) + + m := th.Run(".", th.MakeDefaultOptions()) + th.AssertActualEqualsExpected(m, ` +apiVersion: v1 +kind: ConfigMap +metadata: + name: blue-6ct58987ht +--- +apiVersion: v1 +data: + blue-name: blue +kind: ConfigMap +metadata: + name: red-dc6gc5btkc +`) +} diff --git a/go/internal/forked/api/krusty/resourceconflict_test.go b/go/internal/forked/api/krusty/resourceconflict_test.go new file mode 100644 index 000000000..713e21feb --- /dev/null +++ b/go/internal/forked/api/krusty/resourceconflict_test.go @@ -0,0 +1,368 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package krusty_test + +import ( + "strings" + "testing" + + kusttest_test "sigs.k8s.io/kustomize/api/testutils/kusttest" +) + +func writeBase(th kusttest_test.Harness) { + th.WriteK("base", ` +resources: +- serviceaccount.yaml +- rolebinding.yaml +- clusterrolebinding.yaml +- clusterrole.yaml +namePrefix: pfx- +nameSuffix: -sfx +`) + th.WriteF("base/serviceaccount.yaml", ` +apiVersion: v1 +kind: ServiceAccount +metadata: + name: serviceaccount +`) + th.WriteF("base/rolebinding.yaml", ` +apiVersion: rbac.authorization.k8s.io/v1beta1 +kind: RoleBinding +metadata: + name: rolebinding +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: role +subjects: +- kind: ServiceAccount + name: serviceaccount +`) + th.WriteF("base/clusterrolebinding.yaml", ` +apiVersion: rbac.authorization.k8s.io/v1beta1 +kind: ClusterRoleBinding +metadata: + name: rolebinding +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: role +subjects: +- kind: ServiceAccount + name: serviceaccount +`) + th.WriteF("base/clusterrole.yaml", ` +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + name: role +rules: +- apiGroups: [""] + resources: ["secrets"] + verbs: ["get", "watch", "list"] +`) +} + +func writeMidOverlays(th kusttest_test.Harness) { + // Mid-level overlays + th.WriteK("overlays/a", ` +resources: +- ../../base +namePrefix: a- +nameSuffix: -suffixA +`) + th.WriteK("overlays/b", ` +resources: +- ../../base +namePrefix: b- +nameSuffix: -suffixB +`) +} + +func writeTopOverlay(th kusttest_test.Harness) { + // Top overlay, combining the mid-level overlays + th.WriteK("combined", ` +resources: +- ../overlays/a +- ../overlays/b +`) +} + +func TestBase(t *testing.T) { + th := kusttest_test.MakeHarness(t) + writeBase(th) + m := th.Run("base", th.MakeDefaultOptions()) + th.AssertActualEqualsExpected(m, ` +apiVersion: v1 +kind: ServiceAccount +metadata: + name: pfx-serviceaccount-sfx +--- +apiVersion: rbac.authorization.k8s.io/v1beta1 +kind: RoleBinding +metadata: + name: pfx-rolebinding-sfx +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: pfx-role-sfx +subjects: +- kind: ServiceAccount + name: pfx-serviceaccount-sfx +--- +apiVersion: rbac.authorization.k8s.io/v1beta1 +kind: ClusterRoleBinding +metadata: + name: pfx-rolebinding-sfx +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: pfx-role-sfx +subjects: +- kind: ServiceAccount + name: pfx-serviceaccount-sfx +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + name: pfx-role-sfx +rules: +- apiGroups: + - "" + resources: + - secrets + verbs: + - get + - watch + - list +`) +} + +func TestMidLevelA(t *testing.T) { + th := kusttest_test.MakeHarness(t) + writeBase(th) + writeMidOverlays(th) + m := th.Run("overlays/a", th.MakeDefaultOptions()) + th.AssertActualEqualsExpected(m, ` +apiVersion: v1 +kind: ServiceAccount +metadata: + name: a-pfx-serviceaccount-sfx-suffixA +--- +apiVersion: rbac.authorization.k8s.io/v1beta1 +kind: RoleBinding +metadata: + name: a-pfx-rolebinding-sfx-suffixA +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: a-pfx-role-sfx-suffixA +subjects: +- kind: ServiceAccount + name: a-pfx-serviceaccount-sfx-suffixA +--- +apiVersion: rbac.authorization.k8s.io/v1beta1 +kind: ClusterRoleBinding +metadata: + name: a-pfx-rolebinding-sfx-suffixA +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: a-pfx-role-sfx-suffixA +subjects: +- kind: ServiceAccount + name: a-pfx-serviceaccount-sfx-suffixA +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + name: a-pfx-role-sfx-suffixA +rules: +- apiGroups: + - "" + resources: + - secrets + verbs: + - get + - watch + - list +`) +} + +func TestMidLevelB(t *testing.T) { + th := kusttest_test.MakeHarness(t) + writeBase(th) + writeMidOverlays(th) + m := th.Run("overlays/b", th.MakeDefaultOptions()) + th.AssertActualEqualsExpected(m, ` +apiVersion: v1 +kind: ServiceAccount +metadata: + name: b-pfx-serviceaccount-sfx-suffixB +--- +apiVersion: rbac.authorization.k8s.io/v1beta1 +kind: RoleBinding +metadata: + name: b-pfx-rolebinding-sfx-suffixB +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: b-pfx-role-sfx-suffixB +subjects: +- kind: ServiceAccount + name: b-pfx-serviceaccount-sfx-suffixB +--- +apiVersion: rbac.authorization.k8s.io/v1beta1 +kind: ClusterRoleBinding +metadata: + name: b-pfx-rolebinding-sfx-suffixB +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: b-pfx-role-sfx-suffixB +subjects: +- kind: ServiceAccount + name: b-pfx-serviceaccount-sfx-suffixB +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + name: b-pfx-role-sfx-suffixB +rules: +- apiGroups: + - "" + resources: + - secrets + verbs: + - get + - watch + - list +`) +} + +func TestMultibasesNoConflict(t *testing.T) { + th := kusttest_test.MakeHarness(t) + writeBase(th) + writeMidOverlays(th) + writeTopOverlay(th) + m := th.Run("combined", th.MakeDefaultOptions()) + th.AssertActualEqualsExpected(m, ` +apiVersion: v1 +kind: ServiceAccount +metadata: + name: a-pfx-serviceaccount-sfx-suffixA +--- +apiVersion: rbac.authorization.k8s.io/v1beta1 +kind: RoleBinding +metadata: + name: a-pfx-rolebinding-sfx-suffixA +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: a-pfx-role-sfx-suffixA +subjects: +- kind: ServiceAccount + name: a-pfx-serviceaccount-sfx-suffixA +--- +apiVersion: rbac.authorization.k8s.io/v1beta1 +kind: ClusterRoleBinding +metadata: + name: a-pfx-rolebinding-sfx-suffixA +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: a-pfx-role-sfx-suffixA +subjects: +- kind: ServiceAccount + name: a-pfx-serviceaccount-sfx-suffixA +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + name: a-pfx-role-sfx-suffixA +rules: +- apiGroups: + - "" + resources: + - secrets + verbs: + - get + - watch + - list +--- +apiVersion: v1 +kind: ServiceAccount +metadata: + name: b-pfx-serviceaccount-sfx-suffixB +--- +apiVersion: rbac.authorization.k8s.io/v1beta1 +kind: RoleBinding +metadata: + name: b-pfx-rolebinding-sfx-suffixB +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: b-pfx-role-sfx-suffixB +subjects: +- kind: ServiceAccount + name: b-pfx-serviceaccount-sfx-suffixB +--- +apiVersion: rbac.authorization.k8s.io/v1beta1 +kind: ClusterRoleBinding +metadata: + name: b-pfx-rolebinding-sfx-suffixB +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: b-pfx-role-sfx-suffixB +subjects: +- kind: ServiceAccount + name: b-pfx-serviceaccount-sfx-suffixB +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + name: b-pfx-role-sfx-suffixB +rules: +- apiGroups: + - "" + resources: + - secrets + verbs: + - get + - watch + - list +`) +} + +func TestMultibasesWithConflict(t *testing.T) { + th := kusttest_test.MakeHarness(t) + writeBase(th) + writeMidOverlays(th) + writeTopOverlay(th) + + th.WriteK("overlays/a", ` +namePrefix: a- +nameSuffix: -suffixA +resources: +- serviceaccount.yaml +- ../../base +`) + // Expect an error because this resource in the overlay + // matches a resource in the base. + th.WriteF("overlays/a/serviceaccount.yaml", ` +apiVersion: v1 +kind: ServiceAccount +metadata: + name: serviceaccount +`) + + err := th.RunWithErr("combined", th.MakeDefaultOptions()) + if err == nil { + t.Fatalf("expected error") + } + if !strings.Contains(err.Error(), "found multiple possible referrals") { + t.Fatalf("unexpected error %v", err) + } +} diff --git a/go/internal/forked/api/krusty/rolebindingacrossnamespace_test.go b/go/internal/forked/api/krusty/rolebindingacrossnamespace_test.go new file mode 100644 index 000000000..e446c890a --- /dev/null +++ b/go/internal/forked/api/krusty/rolebindingacrossnamespace_test.go @@ -0,0 +1,344 @@ +package krusty_test + +import ( + "testing" + + kusttest_test "sigs.k8s.io/kustomize/api/testutils/kusttest" +) + +func TestRoleBindingAcrossNamespace(t *testing.T) { + th := kusttest_test.MakeEnhancedHarness(t) + defer th.Reset() + + th.WriteK(".", ` +resources: +- resource.yaml +nameSuffix: -ns2 +`) + th.WriteF("resource.yaml", ` +apiVersion: v1 +kind: ServiceAccount +metadata: + name: my-sa1 + namespace: ns1 +--- +apiVersion: v1 +kind: ServiceAccount +metadata: + name: my-sa2 + namespace: ns2 +--- +apiVersion: v1 +kind: ServiceAccount +metadata: + name: my-sa3 + namespace: ns3 +--- +apiVersion: v1 +kind: NotServiceAccount +metadata: + name: my-nsa + namespace: ns1 +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + name: my-role + namespace: ns2 +rules: + - apiGroups: + - '*' + resources: + - '*' + verbs: + - '*' +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + name: my-role-binding + namespace: ns2 +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: my-role +subjects: + - kind: ServiceAccount + name: my-sa1 + namespace: ns1 + - kind: ServiceAccount + name: my-sa2 + namespace: ns2 + - kind: ServiceAccount + name: my-sa3 + namespace: ns3 + - kind: NotServiceAccount + name: my-nsa + namespace: ns1 +`) + + m := th.Run(".", th.MakeDefaultOptions()) + th.AssertActualEqualsExpected(m, ` +apiVersion: v1 +kind: ServiceAccount +metadata: + name: my-sa1-ns2 + namespace: ns1 +--- +apiVersion: v1 +kind: ServiceAccount +metadata: + name: my-sa2-ns2 + namespace: ns2 +--- +apiVersion: v1 +kind: ServiceAccount +metadata: + name: my-sa3-ns2 + namespace: ns3 +--- +apiVersion: v1 +kind: NotServiceAccount +metadata: + name: my-nsa-ns2 + namespace: ns1 +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + name: my-role-ns2 + namespace: ns2 +rules: +- apiGroups: + - '*' + resources: + - '*' + verbs: + - '*' +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + name: my-role-binding-ns2 + namespace: ns2 +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: my-role-ns2 +subjects: +- kind: ServiceAccount + name: my-sa1-ns2 + namespace: ns1 +- kind: ServiceAccount + name: my-sa2-ns2 + namespace: ns2 +- kind: ServiceAccount + name: my-sa3-ns2 + namespace: ns3 +- kind: NotServiceAccount + name: my-nsa + namespace: ns1 +`) +} + +func TestRoleBindingAcrossNamespaceWoSubjects(t *testing.T) { + th := kusttest_test.MakeEnhancedHarness(t) + defer th.Reset() + + th.WriteK(".", ` +resources: +- resource.yaml +nameSuffix: -ns2 +`) + th.WriteF("resource.yaml", ` +apiVersion: v1 +kind: ServiceAccount +metadata: + name: my-sa1 + namespace: ns1 +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + name: my-role + namespace: ns2 +rules: + - apiGroups: + - '*' + resources: + - '*' + verbs: + - '*' +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + name: my-role-binding + namespace: ns2 +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: my-role +`) + + m := th.Run(".", th.MakeDefaultOptions()) + th.AssertActualEqualsExpected(m, ` +apiVersion: v1 +kind: ServiceAccount +metadata: + name: my-sa1-ns2 + namespace: ns1 +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + name: my-role-ns2 + namespace: ns2 +rules: +- apiGroups: + - '*' + resources: + - '*' + verbs: + - '*' +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + name: my-role-binding-ns2 + namespace: ns2 +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: my-role-ns2 +`) +} + +// The ServiceAccount in subjects in role binding can be across namespace +// but the roleRef is not. This test is used to cover such case. +func TestRoleBindingWhenSubjectsAcrossNamespace(t *testing.T) { + th := kusttest_test.MakeEnhancedHarness(t) + defer th.Reset() + th.WriteK(".", ` +resources: +- ./ns1 +- ./ns2 +`) + th.WriteK("ns1", ` +namespace: namespace-1 +resources: +- role-ns1.yaml +- rolebinding-ns1.yaml +`) + th.WriteF("ns1/role-ns1.yaml", ` +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + name: testRole +rules: + - apiGroups: [""] + resources: ["pods"] + verbs: ["get"] +`) + th.WriteF("ns1/rolebinding-ns1.yaml", ` +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + name: testRoleBinding +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: testRole +subjects: + - kind: ServiceAccount + name: testAccount + namespace: namespace-2 +`) + th.WriteK("ns2", ` +namespace: namespace-2 +resources: +- role-ns2.yaml +- rolebinding-ns2.yaml +`) + th.WriteF("ns2/role-ns2.yaml", ` +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + name: testRole +rules: + - apiGroups: [""] + resources: ["pods"] + verbs: ["get"] +`) + th.WriteF("ns2/rolebinding-ns2.yaml", ` +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + name: testRoleBinding +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: testRole +subjects: + - kind: ServiceAccount + name: testAccount + namespace: namespace-1 +`) + + m := th.Run(".", th.MakeDefaultOptions()) + th.AssertActualEqualsExpected(m, ` +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + name: testRole + namespace: namespace-1 +rules: +- apiGroups: + - "" + resources: + - pods + verbs: + - get +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + name: testRoleBinding + namespace: namespace-1 +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: testRole +subjects: +- kind: ServiceAccount + name: testAccount + namespace: namespace-2 +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + name: testRole + namespace: namespace-2 +rules: +- apiGroups: + - "" + resources: + - pods + verbs: + - get +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + name: testRoleBinding + namespace: namespace-2 +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: testRole +subjects: +- kind: ServiceAccount + name: testAccount + namespace: namespace-1 +`) +} diff --git a/go/internal/forked/api/krusty/simple_test.go b/go/internal/forked/api/krusty/simple_test.go new file mode 100644 index 000000000..c9f2cd985 --- /dev/null +++ b/go/internal/forked/api/krusty/simple_test.go @@ -0,0 +1,47 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package krusty_test + +import ( + "testing" + + kusttest_test "sigs.k8s.io/kustomize/api/testutils/kusttest" +) + +func TestSimple1(t *testing.T) { + th := kusttest_test.MakeHarness(t) + th.WriteF("dep.yaml", ` +apiVersion: v1 +kind: Deployment +metadata: + name: clown +spec: + numReplicas: 1 +`) + th.WriteF("patch.yaml", ` +apiVersion: v1 +kind: Deployment +metadata: + name: clown +spec: + numReplicas: 999 +`) + + th.WriteK(".", ` +resources: +- dep.yaml +patchesStrategicMerge: +- patch.yaml +`) + m := th.Run(".", th.MakeDefaultOptions()) + + th.AssertActualEqualsExpected(m, ` +apiVersion: v1 +kind: Deployment +metadata: + name: clown +spec: + numReplicas: 999 +`) +} diff --git a/go/internal/forked/api/krusty/stringquoteblank_test.go b/go/internal/forked/api/krusty/stringquoteblank_test.go new file mode 100644 index 000000000..1ed4fc14b --- /dev/null +++ b/go/internal/forked/api/krusty/stringquoteblank_test.go @@ -0,0 +1,82 @@ +package krusty_test + +import ( + "testing" + + kusttest_test "sigs.k8s.io/kustomize/api/testutils/kusttest" +) + +// This test is for output string style. +// Currently all quotes will be removed if the string is valid as plain (unquoted) style. +// If a string cannot be unquoted, it will be put into a pair of single quotes. +// See https://yaml.org/spec/1.2/spec.html#id2788859 for more details about what kind of string +// is invalid as plain style. +func TestLongLineBreaks(t *testing.T) { + th := kusttest_test.MakeHarness(t) + th.WriteF("deployment.yaml", ` +apiVersion: extensions/v1beta1 +kind: Deployment +metadata: + name: test +spec: + template: + spec: + containers: + - name: mariadb + image: test + env: + - name: SHORT_STRING + value: short_string + - name: SHORT_STRING_WITH_SINGLE_QUOTE + value: 'short_string' + - name: SHORT_STRING_WITH_DOUBLE_QUOTE + value: "short_string" + - name: SHORT_STRING_BLANK + value: short string + - name: LONG_STRING_BLANK + value: Lorem ipsum dolor sit amet, consectetur adipiscing elit. Maecenas suscipit ex non molestie varius. + - name: LONG_STRING_BLANK_WITH_SINGLE_QUOTE + value: 'Lorem ipsum dolor sit amet, consectetur adipiscing elit. Maecenas suscipit ex non molestie varius.' + - name: LONG_STRING_BLANK_WITH_DOUBLE_QUOTE + value: "Lorem ipsum dolor sit amet, consectetur adipiscing elit. Maecenas suscipit ex non molestie varius." + - name: INVALID_PLAIN_STYLE_STRING + value: ': test' +`) + th.WriteK(".", ` +resources: +- deployment.yaml +`) + m := th.Run(".", th.MakeDefaultOptions()) + th.AssertActualEqualsExpected(m, ` +apiVersion: extensions/v1beta1 +kind: Deployment +metadata: + name: test +spec: + template: + spec: + containers: + - env: + - name: SHORT_STRING + value: short_string + - name: SHORT_STRING_WITH_SINGLE_QUOTE + value: short_string + - name: SHORT_STRING_WITH_DOUBLE_QUOTE + value: short_string + - name: SHORT_STRING_BLANK + value: short string + - name: LONG_STRING_BLANK + value: Lorem ipsum dolor sit amet, consectetur adipiscing elit. Maecenas + suscipit ex non molestie varius. + - name: LONG_STRING_BLANK_WITH_SINGLE_QUOTE + value: Lorem ipsum dolor sit amet, consectetur adipiscing elit. Maecenas + suscipit ex non molestie varius. + - name: LONG_STRING_BLANK_WITH_DOUBLE_QUOTE + value: Lorem ipsum dolor sit amet, consectetur adipiscing elit. Maecenas + suscipit ex non molestie varius. + - name: INVALID_PLAIN_STYLE_STRING + value: ': test' + image: test + name: mariadb +`) +} diff --git a/go/internal/forked/api/krusty/testdata/customschema.json b/go/internal/forked/api/krusty/testdata/customschema.json new file mode 100644 index 000000000..04903e225 --- /dev/null +++ b/go/internal/forked/api/krusty/testdata/customschema.json @@ -0,0 +1,123 @@ +{ + "definitions": { + "v1alpha1.MyCRD": { + "properties": { + "apiVersion": { + "type": "string" + }, + "kind": { + "type": "string" + }, + "metadata": { + "type": "object" + }, + "spec": { + "properties": { + "template": { + "$ref": "#/definitions/io.k8s.api.core.v1.PodTemplateSpec" + } + }, + "type": "object" + }, + "status": { + "properties": { + "success": { + "type": "boolean" + } + }, + "type": "object" + } + }, + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "example.com", + "kind": "MyCRD", + "version": "v1alpha1" + }, + { + "group": "", + "kind": "MyCRD", + "version": "v1alpha1" + } + ] + }, + "io.k8s.api.core.v1.PodTemplateSpec": { + "properties": { + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + }, + "spec": { + "$ref": "#/definitions/io.k8s.api.core.v1.PodSpec" + } + }, + "type": "object" + }, + "io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta": { + "properties": { + "name": { + "type": "string" + } + }, + "type": "object" + }, + "io.k8s.api.core.v1.PodSpec": { + "properties": { + "containers": { + "items": { + "$ref": "#/definitions/io.k8s.api.core.v1.Container" + }, + "type": "array", + "x-kubernetes-patch-merge-key": "name", + "x-kubernetes-patch-strategy": "merge" + } + }, + "type": "object" + }, + "io.k8s.api.core.v1.Container": { + "properties": { + "command": { + "items": { + "type": "string" + }, + "type": "array" + }, + "image": { + "type": "string" + }, + "name": { + "type": "string" + }, + "ports": { + "items": { + "$ref": "#/definitions/io.k8s.api.core.v1.ContainerPort" + }, + "type": "array", + "x-kubernetes-list-map-keys": [ + "containerPort", + "protocol" + ], + "x-kubernetes-list-type": "map", + "x-kubernetes-patch-merge-key": "containerPort", + "x-kubernetes-patch-strategy": "merge" + } + }, + "type": "object" + }, + "io.k8s.api.core.v1.ContainerPort": { + "properties": { + "containerPort": { + "format": "int32", + "type": "integer" + }, + "name": { + "type": "string" + }, + "protocol": { + "type": "string" + } + }, + "type": "object" + } + } +} diff --git a/go/internal/forked/api/krusty/testdata/customschema.yaml b/go/internal/forked/api/krusty/testdata/customschema.yaml new file mode 100644 index 000000000..0f46cba92 --- /dev/null +++ b/go/internal/forked/api/krusty/testdata/customschema.yaml @@ -0,0 +1,78 @@ +definitions: + v1alpha1.MyCRD: + properties: + apiVersion: + type: string + kind: + type: string + metadata: + type: object + spec: + properties: + template: + "$ref": "#/definitions/io.k8s.api.core.v1.PodTemplateSpec" + type: object + status: + properties: + success: + type: boolean + type: object + type: object + x-kubernetes-group-version-kind: + - group: example.com + kind: MyCRD + version: v1alpha1 + - group: "" + kind: MyCRD + version: v1alpha1 + io.k8s.api.core.v1.PodTemplateSpec: + properties: + metadata: + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + spec: + "$ref": "#/definitions/io.k8s.api.core.v1.PodSpec" + type: object + io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta: + properties: + name: + type: string + type: object + io.k8s.api.core.v1.PodSpec: + properties: + containers: + items: + "$ref": "#/definitions/io.k8s.api.core.v1.Container" + type: array + x-kubernetes-patch-merge-key: name + x-kubernetes-patch-strategy: merge + type: object + io.k8s.api.core.v1.Container: + properties: + command: + items: + type: string + type: array + image: + type: string + name: + type: string + ports: + items: + "$ref": "#/definitions/io.k8s.api.core.v1.ContainerPort" + type: array + x-kubernetes-list-map-keys: + - containerPort + - protocol + x-kubernetes-list-type: map + x-kubernetes-patch-merge-key: containerPort + x-kubernetes-patch-strategy: merge + type: object + io.k8s.api.core.v1.ContainerPort: + properties: + containerPort: + type: integer + name: + type: string + protocol: + type: string + type: object diff --git a/go/internal/forked/api/krusty/testdata/openshiftschema.json b/go/internal/forked/api/krusty/testdata/openshiftschema.json new file mode 100644 index 000000000..b2efc185d --- /dev/null +++ b/go/internal/forked/api/krusty/testdata/openshiftschema.json @@ -0,0 +1,76 @@ +{ + "definitions": { + "com.github.openshift.api.apps.v1.DeploymentConfig": { + "type": "object", + "required": [ + "spec" + ], + "properties": { + "apiVersion": { + "type": "string" + }, + "kind": { + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + }, + "spec": { + "$ref": "#/definitions/com.github.openshift.api.apps.v1.DeploymentConfigSpec" + } + }, + "x-kubernetes-group-version-kind": [ + { + "group": "apps.openshift.io", + "kind": "DeploymentConfig", + "version": "v1" + } + ] + }, + "com.github.openshift.api.apps.v1.DeploymentConfigSpec": { + "type": "object", + "properties": { + "template": { + "$ref": "#/definitions/io.k8s.api.core.v1.PodTemplateSpec" + } + } + }, + "io.k8s.api.core.v1.Volume": { + "type": "object", + "required": [ + "name" + ], + "properties": { + "configMap": { + "$ref": "#/definitions/io.k8s.api.core.v1.ConfigMapVolumeSource" + }, + "name": { + "type": "string" + } + } + }, + "io.k8s.api.core.v1.VolumeMount": { + "type": "object", + "required": [ + "name", + "mountPath" + ], + "properties": { + "mountPath": { + "type": "string" + }, + "name": { + "type": "string" + } + } + }, + "io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta": { + "type": "object", + "properties": { + "name": { + "type": "string" + } + } + } + } +} diff --git a/go/internal/forked/api/krusty/transformerannotation_test.go b/go/internal/forked/api/krusty/transformerannotation_test.go new file mode 100644 index 000000000..2ccf8f6d5 --- /dev/null +++ b/go/internal/forked/api/krusty/transformerannotation_test.go @@ -0,0 +1,495 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package krusty_test + +import ( + "os" + "path/filepath" + "testing" + + "github.com/stretchr/testify/assert" + "sigs.k8s.io/kustomize/api/internal/utils" + "sigs.k8s.io/kustomize/api/krusty" + kusttest_test "sigs.k8s.io/kustomize/api/testutils/kusttest" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/filesys" +) + +const generateDeploymentWithOriginDotSh = `#!/bin/sh + +cat < + # + # All addresses used to contact a node must be specified in the --addresses arg. + # + # In addition to the node certificate and key, the init-certs entrypoint will symlink + # the cluster CA to the certs directory. + - name: init-certs + image: cockroachdb/cockroach-k8s-request-cert:0.2 + imagePullPolicy: IfNotPresent + command: + - "/bin/ash" + - "-ecx" + - "/request-cert" + - -namespace=${POD_NAMESPACE} + - -certs-dir=/cockroach-certs + - -type=node + - -addresses=localhost,127.0.0.1,${POD_IP},$(hostname -f),$(hostname -f|cut -f 1-2 -d '.'),$(CDB_PUBLIC_SVC) + - -symlink-ca-from=/var/run/secrets/kubernetes.io/serviceaccount/ca.crt + env: + - name: POD_IP + valueFrom: + fieldRef: + fieldPath: status.podIP + - name: POD_NAMESPACE + valueFrom: + fieldRef: + fieldPath: metadata.namespace + volumeMounts: + - name: certs + mountPath: /cockroach-certs + + affinity: + podAntiAffinity: + preferredDuringSchedulingIgnoredDuringExecution: + - weight: 100 + podAffinityTerm: + labelSelector: + matchExpressions: + - key: app + operator: In + values: + - cockroachdb + topologyKey: kubernetes.io/hostname + containers: + - name: cockroachdb + image: cockroachdb/cockroach:v1.1.5 + imagePullPolicy: IfNotPresent + ports: + - containerPort: 26257 + name: grpc + - containerPort: 8080 + name: http + volumeMounts: + - name: datadir + mountPath: /cockroach/cockroach-data + - name: certs + mountPath: /cockroach/cockroach-certs + command: + - "/bin/bash" + - "-ecx" + - "exec /cockroach/cockroach start --logtostderr" + - --certs-dir /cockroach/cockroach-certs + - --host $(hostname -f) + - --http-host 0.0.0.0 + - --join $(CDB_STATEFULSET_NAME)-0.$(CDB_STATEFULSET_SVC),$(CDB_STATEFULSET_NAME)-1.$(CDB_STATEFULSET_SVC),$(CDB_STATEFULSET_NAME)-2.$(CDB_STATEFULSET_SVC) + - --cache 25% + - --max-sql-memory 25% + # No pre-stop hook is required, a SIGTERM plus some time is all that's + # needed for graceful shutdown of a node. + terminationGracePeriodSeconds: 60 + volumes: + - name: datadir + persistentVolumeClaim: + claimName: datadir + - name: certs + emptyDir: {} + updateStrategy: + type: RollingUpdate + volumeClaimTemplates: + - metadata: + name: datadir + spec: + accessModes: + - "ReadWriteOnce" + resources: + requests: + storage: 1Gi +`) + th.WriteK("overlay/staging", ` +namePrefix: dev- +resources: +- ../../base +`) + m := th.Run("overlay/staging", th.MakeDefaultOptions()) + th.AssertActualEqualsExpected(m, ` +apiVersion: v1 +kind: ServiceAccount +metadata: + labels: + app: cockroachdb + name: dev-base-cockroachdb +--- +apiVersion: rbac.authorization.k8s.io/v1beta1 +kind: Role +metadata: + labels: + app: cockroachdb + name: dev-base-cockroachdb +rules: +- apiGroups: + - "" + resources: + - secrets + verbs: + - create + - get +--- +apiVersion: rbac.authorization.k8s.io/v1beta1 +kind: ClusterRole +metadata: + labels: + app: cockroachdb + name: dev-base-cockroachdb +rules: +- apiGroups: + - certificates.k8s.io + resources: + - certificatesigningrequests + verbs: + - create + - get + - watch +--- +apiVersion: rbac.authorization.k8s.io/v1beta1 +kind: RoleBinding +metadata: + labels: + app: cockroachdb + name: dev-base-cockroachdb +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: dev-base-cockroachdb +subjects: +- kind: ServiceAccount + name: dev-base-cockroachdb + namespace: default +--- +apiVersion: rbac.authorization.k8s.io/v1beta1 +kind: ClusterRoleBinding +metadata: + labels: + app: cockroachdb + name: dev-base-cockroachdb +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: dev-base-cockroachdb +subjects: +- kind: ServiceAccount + name: dev-base-cockroachdb + namespace: default +--- +apiVersion: v1 +kind: Service +metadata: + annotations: + prometheus.io/path: _status/vars + prometheus.io/port: "8080" + prometheus.io/scrape: "true" + service.alpha.kubernetes.io/tolerate-unready-endpoints: "true" + labels: + app: cockroachdb + name: dev-base-cockroachdb +spec: + clusterIP: None + ports: + - name: grpc + port: 26257 + targetPort: 26257 + - name: http + port: 8080 + targetPort: 8080 + selector: + app: cockroachdb +--- +apiVersion: v1 +kind: Service +metadata: + labels: + app: cockroachdb + name: dev-base-cockroachdb-public +spec: + ports: + - name: grpc + port: 26257 + targetPort: 26257 + - name: http + port: 8080 + targetPort: 8080 + selector: + app: cockroachdb +--- +apiVersion: apps/v1beta1 +kind: StatefulSet +metadata: + name: dev-base-cockroachdb +spec: + replicas: 3 + serviceName: dev-base-cockroachdb + template: + metadata: + labels: + app: cockroachdb + spec: + affinity: + podAntiAffinity: + preferredDuringSchedulingIgnoredDuringExecution: + - podAffinityTerm: + labelSelector: + matchExpressions: + - key: app + operator: In + values: + - cockroachdb + topologyKey: kubernetes.io/hostname + weight: 100 + containers: + - command: + - /bin/bash + - -ecx + - exec /cockroach/cockroach start --logtostderr + - --certs-dir /cockroach/cockroach-certs + - --host $(hostname -f) + - --http-host 0.0.0.0 + - --join dev-base-cockroachdb-0.dev-base-cockroachdb,dev-base-cockroachdb-1.dev-base-cockroachdb,dev-base-cockroachdb-2.dev-base-cockroachdb + - --cache 25% + - --max-sql-memory 25% + image: cockroachdb/cockroach:v1.1.5 + imagePullPolicy: IfNotPresent + name: cockroachdb + ports: + - containerPort: 26257 + name: grpc + - containerPort: 8080 + name: http + volumeMounts: + - mountPath: /cockroach/cockroach-data + name: datadir + - mountPath: /cockroach/cockroach-certs + name: certs + initContainers: + - command: + - /bin/ash + - -ecx + - /request-cert + - -namespace=${POD_NAMESPACE} + - -certs-dir=/cockroach-certs + - -type=node + - -addresses=localhost,127.0.0.1,${POD_IP},$(hostname -f),$(hostname -f|cut + -f 1-2 -d '.'),dev-base-cockroachdb-public + - -symlink-ca-from=/var/run/secrets/kubernetes.io/serviceaccount/ca.crt + env: + - name: POD_IP + valueFrom: + fieldRef: + fieldPath: status.podIP + - name: POD_NAMESPACE + valueFrom: + fieldRef: + fieldPath: metadata.namespace + image: cockroachdb/cockroach-k8s-request-cert:0.2 + imagePullPolicy: IfNotPresent + name: init-certs + volumeMounts: + - mountPath: /cockroach-certs + name: certs + serviceAccountName: dev-base-cockroachdb + terminationGracePeriodSeconds: 60 + volumes: + - name: datadir + persistentVolumeClaim: + claimName: datadir + - emptyDir: {} + name: certs + updateStrategy: + type: RollingUpdate + volumeClaimTemplates: + - metadata: + name: datadir + spec: + accessModes: + - ReadWriteOnce + resources: + requests: + storage: 1Gi +--- +apiVersion: batch/v1beta1 +kind: CronJob +metadata: + name: dev-base-cronjob-example +spec: + concurrencyPolicy: Forbid + jobTemplate: + spec: + template: + spec: + containers: + - command: + - echo + - dev-base-cockroachdb + - dev-base-test-config-map-6b85g79g7g + env: + - name: CDB_PUBLIC_SVC + value: dev-base-cockroachdb-public + image: cockroachdb/cockroach:v1.1.5 + name: cronjob-example + schedule: '*/1 * * * *' +--- +apiVersion: policy/v1beta1 +kind: PodDisruptionBudget +metadata: + labels: + app: cockroachdb + name: dev-base-cockroachdb-budget +spec: + maxUnavailable: 1 + selector: + matchLabels: + app: cockroachdb +--- +apiVersion: v1 +data: + baz: qux + foo: bar +kind: ConfigMap +metadata: + name: dev-base-test-config-map-6b85g79g7g +`) +} + +func TestVariableRefIngressBasic(t *testing.T) { + th := kusttest_test.MakeHarness(t) + th.WriteK(".", ` +resources: +- ingress.yaml +- deployment.yaml + +vars: +- name: DEPLOYMENT_NAME + objref: + apiVersion: apps/v1 + kind: Deployment + name: nginxDep + fieldref: + fieldpath: metadata.name +`) + th.WriteF("deployment.yaml", ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: nginxDep +`) + + th.WriteF("ingress.yaml", ` +apiVersion: networking.k8s.io/v1beta1 +kind: Ingress +metadata: + name: nginxIngress +spec: + rules: + - host: $(DEPLOYMENT_NAME).example.com + tls: + - hosts: + - $(DEPLOYMENT_NAME).example.com + secretName: $(DEPLOYMENT_NAME).example.com-tls +`) + m := th.Run(".", th.MakeDefaultOptions()) + th.AssertActualEqualsExpected(m, ` +apiVersion: networking.k8s.io/v1beta1 +kind: Ingress +metadata: + name: nginxIngress +spec: + rules: + - host: nginxDep.example.com + tls: + - hosts: + - nginxDep.example.com + secretName: nginxDep.example.com-tls +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + name: nginxDep +`) +} + +func TestVariableRefIngressOverlay(t *testing.T) { + th := kusttest_test.MakeHarness(t) + th.WriteK("base", ` +resources: +- service.yaml +- deployment.yaml +- ingress.yaml + +vars: +- name: DEPLOYMENT_NAME + objref: + apiVersion: apps/v1 + kind: Deployment + name: nginx + fieldref: + fieldpath: metadata.name +`) + th.WriteF("base/deployment.yaml", ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: nginx + labels: + app.kubernetes.io/component: nginx +spec: + selector: + matchLabels: + app.kubernetes.io/component: nginx + template: + metadata: + labels: + app.kubernetes.io/component: nginx + spec: + containers: + - name: nginx + image: nginx:1.15.7-alpine + ports: + - name: http + containerPort: 80 +`) + th.WriteF("base/ingress.yaml", ` +apiVersion: networking.k8s.io/v1beta1 +kind: Ingress +metadata: + name: nginx + labels: + app.kubernetes.io/component: nginx +spec: + rules: + - host: $(DEPLOYMENT_NAME).example.com + http: + paths: + - backend: + serviceName: nginx + servicePort: 80 + path: / + tls: + - hosts: + - $(DEPLOYMENT_NAME).example.com + secretName: $(DEPLOYMENT_NAME).example.com-tls +`) + th.WriteF("base/service.yaml", ` +apiVersion: v1 +kind: Service +metadata: + name: nginx + labels: + app.kubernetes.io/component: nginx +spec: + ports: + - name: http + port: 80 + protocol: TCP + targetPort: http +`) + th.WriteK("overlay", ` +nameprefix: kustomized- +resources: +- ../base +`) + m := th.Run("overlay", th.MakeDefaultOptions()) + th.AssertActualEqualsExpected(m, ` +apiVersion: v1 +kind: Service +metadata: + labels: + app.kubernetes.io/component: nginx + name: kustomized-nginx +spec: + ports: + - name: http + port: 80 + protocol: TCP + targetPort: http +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + labels: + app.kubernetes.io/component: nginx + name: kustomized-nginx +spec: + selector: + matchLabels: + app.kubernetes.io/component: nginx + template: + metadata: + labels: + app.kubernetes.io/component: nginx + spec: + containers: + - image: nginx:1.15.7-alpine + name: nginx + ports: + - containerPort: 80 + name: http +--- +apiVersion: networking.k8s.io/v1beta1 +kind: Ingress +metadata: + labels: + app.kubernetes.io/component: nginx + name: kustomized-nginx +spec: + rules: + - host: kustomized-nginx.example.com + http: + paths: + - backend: + serviceName: kustomized-nginx + servicePort: 80 + path: / + tls: + - hosts: + - kustomized-nginx.example.com + secretName: kustomized-nginx.example.com-tls +`) +} + +func TestVariableRefMountPath(t *testing.T) { + th := kusttest_test.MakeHarness(t) + th.WriteK("base", ` +resources: +- deployment.yaml +- namespace.yaml + +vars: +- name: NAMESPACE + objref: + apiVersion: v1 + kind: Namespace + name: my-namespace + +`) + th.WriteF("base/deployment.yaml", ` + apiVersion: apps/v1 + kind: Deployment + metadata: + name: my-deployment + spec: + template: + spec: + containers: + - name: app + image: busybox + volumeMounts: + - name: my-volume + mountPath: "/$(NAMESPACE)" + env: + - name: NAMESPACE + value: $(NAMESPACE) + volumes: + - name: my-volume + emptyDir: {} +`) + th.WriteF("base/namespace.yaml", ` + apiVersion: v1 + kind: Namespace + metadata: + name: my-namespace +`) + + m := th.Run("base", th.MakeDefaultOptions()) + th.AssertActualEqualsExpected(m, ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: my-deployment +spec: + template: + spec: + containers: + - env: + - name: NAMESPACE + value: my-namespace + image: busybox + name: app + volumeMounts: + - mountPath: /my-namespace + name: my-volume + volumes: + - emptyDir: {} + name: my-volume +--- +apiVersion: v1 +kind: Namespace +metadata: + name: my-namespace +`) +} + +func TestVariableRefMaps(t *testing.T) { + th := kusttest_test.MakeHarness(t) + th.WriteK("base", ` +resources: +- deployment.yaml +- namespace.yaml +vars: +- name: NAMESPACE + objref: + apiVersion: v1 + kind: Namespace + name: my-namespace +`) + th.WriteF("base/deployment.yaml", ` + apiVersion: apps/v1 + kind: Deployment + metadata: + name: my-deployment + labels: + my-label: $(NAMESPACE) + annotations: + my-annotation: $(NAMESPACE) + spec: + template: + spec: + containers: + - name: app + image: busybox +`) + th.WriteF("base/namespace.yaml", ` + apiVersion: v1 + kind: Namespace + metadata: + name: my-namespace +`) + + m := th.Run("base", th.MakeDefaultOptions()) + th.AssertActualEqualsExpected(m, ` +apiVersion: apps/v1 +kind: Deployment +metadata: + annotations: + my-annotation: my-namespace + labels: + my-label: my-namespace + name: my-deployment +spec: + template: + spec: + containers: + - image: busybox + name: app +--- +apiVersion: v1 +kind: Namespace +metadata: + name: my-namespace +`) +} + +func TestVaribaleRefDifferentPrefix(t *testing.T) { + th := kusttest_test.MakeHarness(t) + th.WriteK("base", ` +namePrefix: base- +resources: +- dev +- test +`) + + th.WriteK("base/dev", ` +namePrefix: dev- +resources: +- elasticsearch-dev-service.yml +vars: +- name: elasticsearch-dev-service-name + objref: + kind: Service + name: elasticsearch + apiVersion: v1 + fieldref: + fieldpath: metadata.name + +`) + th.WriteF("base/dev/elasticsearch-dev-service.yml", ` +apiVersion: apps/v1 +kind: StatefulSet +metadata: + name: elasticsearch +spec: + template: + spec: + containers: + - name: elasticsearch + env: + - name: DISCOVERY_SERVICE + value: "$(elasticsearch-dev-service-name).monitoring.svc.cluster.local" +--- +apiVersion: v1 +kind: Service +metadata: + name: elasticsearch +spec: + ports: + - name: transport + port: 9300 + protocol: TCP + clusterIP: None +`) + + th.WriteK("base/test", ` +namePrefix: test- +resources: +- elasticsearch-test-service.yml +vars: +- name: elasticsearch-test-service-name + objref: + kind: Service + name: elasticsearch + apiVersion: v1 + fieldref: + fieldpath: metadata.name +`) + th.WriteF("base/test/elasticsearch-test-service.yml", ` +apiVersion: apps/v1 +kind: StatefulSet +metadata: + name: elasticsearch +spec: + template: + spec: + containers: + - name: elasticsearch + env: + - name: DISCOVERY_SERVICE + value: "$(elasticsearch-test-service-name).monitoring.svc.cluster.local" +--- +apiVersion: v1 +kind: Service +metadata: + name: elasticsearch +spec: + ports: + - name: transport + port: 9300 + protocol: TCP + clusterIP: None +`) + + m := th.Run("base", th.MakeDefaultOptions()) + th.AssertActualEqualsExpected(m, ` +apiVersion: apps/v1 +kind: StatefulSet +metadata: + name: base-dev-elasticsearch +spec: + template: + spec: + containers: + - env: + - name: DISCOVERY_SERVICE + value: base-dev-elasticsearch.monitoring.svc.cluster.local + name: elasticsearch +--- +apiVersion: v1 +kind: Service +metadata: + name: base-dev-elasticsearch +spec: + clusterIP: None + ports: + - name: transport + port: 9300 + protocol: TCP +--- +apiVersion: apps/v1 +kind: StatefulSet +metadata: + name: base-test-elasticsearch +spec: + template: + spec: + containers: + - env: + - name: DISCOVERY_SERVICE + value: base-test-elasticsearch.monitoring.svc.cluster.local + name: elasticsearch +--- +apiVersion: v1 +kind: Service +metadata: + name: base-test-elasticsearch +spec: + clusterIP: None + ports: + - name: transport + port: 9300 + protocol: TCP +`) +} + +func TestVariableRefNFSServer(t *testing.T) { + th := kusttest_test.MakeHarness(t) + th.WriteK("base", ` +resources: +- pv_pvc.yaml +- nfs_deployment.yaml +- nfs_service.yaml +- Deployment.yaml +- CronJob.yaml +- DaemonSet.yaml +- ReplicaSet.yaml +- StatefulSet.yaml +- Pod.yaml +- Job.yaml +- nfs_pv.yaml + +vars: +- name: NFS_SERVER_SERVICE_NAME + objref: + kind: Service + name: nfs-server-service + apiVersion: v1 + fieldref: + fieldpath: metadata.name +`) + th.WriteF("base/pv_pvc.yaml", ` +apiVersion: v1 +kind: PersistentVolumeClaim +metadata: + name: shared-volume-claim +spec: + accessModes: + - ReadWriteOnce + resources: + requests: + storage: 10Gi +`) + th.WriteF("base/nfs_deployment.yaml", ` +apiVersion: extensions/v1beta1 +kind: Deployment +metadata: + name: nfs-server +spec: + replicas: 1 + template: + spec: + metadata: + labels: + role: nfs-server + containers: + - name: nfs-server + image: gcr.io/google_containers/volume-nfs:0.8 + ports: + - name: nfs + containerPort: 2049 + - name: mountd + containerPort: 20048 + - name: rpcbind + containerPort: 111 + securityContext: + privileged: true + volumeMounts: + - mountPath: /exports + name: shared-files + volumes: + - name: shared-files + persistentVolumeClaim: + claimName: shared-volume-claim +`) + th.WriteF("base/nfs_service.yaml", ` +apiVersion: v1 +kind: Service +metadata: + name: nfs-server-service +spec: + ports: + - name: nfs + port: 2049 + - name: mountd + port: 20048 + - name: rpcbind + port: 111 + selector: + role: nfs-server +`) + th.WriteF("base/Deployment.yaml", ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: nginx + labels: + app.kubernetes.io/component: nginx +spec: + selector: + matchLabels: + app.kubernetes.io/component: nginx + template: + metadata: + labels: + app.kubernetes.io/component: nginx + spec: + containers: + - name: nginx + image: nginx:1.15.7-alpine + ports: + - name: http + containerPort: 80 + volumeMounts: + - mountPath: shared-files + name: nfs-files-vol + volumes: + - name: nfs-files-vol + nfs: + server: $(NFS_SERVER_SERVICE_NAME).default.srv.cluster.local + path: / + readOnly: false +`) + th.WriteF("base/CronJob.yaml", ` +apiVersion: batch/v1beta1 +kind: CronJob +metadata: + name: hello +spec: + schedule: "*/1 * * * *" + jobTemplate: + spec: + template: + spec: + containers: + - name: hello + image: busybox + args: + - /bin/sh + - -c + - date; echo Hello from the Kubernetes cluster + restartPolicy: OnFailure + volumeMounts: + - mountPath: shared-files + name: nfs-files-vol + volumes: + - name: nfs-files-vol + nfs: + server: $(NFS_SERVER_SERVICE_NAME).default.srv.cluster.local + path: / + readOnly: false +`) + th.WriteF("base/DaemonSet.yaml", ` +apiVersion: apps/v1 +kind: DaemonSet +metadata: + name: fluentd-elasticsearch + namespace: kube-system + labels: + k8s-app: fluentd-logging +spec: + selector: + matchLabels: + name: fluentd-elasticsearch + template: + metadata: + labels: + name: fluentd-elasticsearch + spec: + tolerations: + - key: node-role.kubernetes.io/master + effect: NoSchedule + containers: + - name: fluentd-elasticsearch + image: quay.io/fluentd_elasticsearch/fluentd:v2.5.2 + resources: + limits: + memory: 200Mi + requests: + cpu: 100m + memory: 200Mi + volumeMounts: + - name: varlog + mountPath: /var/log + - name: varlibdockercontainers + mountPath: /var/lib/docker/containers + readOnly: true + - mountPath: shared-files + name: nfs-files-vol + terminationGracePeriodSeconds: 30 + volumes: + - name: varlog + hostPath: + path: /var/log + - name: varlibdockercontainers + hostPath: + path: /var/lib/docker/containers + - name: nfs-files-vol + nfs: + server: $(NFS_SERVER_SERVICE_NAME).default.srv.cluster.local + path: / + readOnly: false +`) + th.WriteF("base/ReplicaSet.yaml", ` +apiVersion: apps/v1 +kind: ReplicaSet +metadata: + name: frontend + labels: + app: guestbook + tier: frontend +spec: + # modify replicas according to your case + replicas: 3 + selector: + matchLabels: + tier: frontend + template: + metadata: + labels: + tier: frontend + spec: + containers: + - name: php-redis + image: gcr.io/google_samples/gb-frontend:v3 + volumeMounts: + - mountPath: shared-files + name: nfs-files-vol + volumes: + - name: nfs-files-vol + nfs: + server: $(NFS_SERVER_SERVICE_NAME).default.srv.cluster.local + path: / + readOnly: false +`) + + th.WriteF("base/Job.yaml", ` +apiVersion: batch/v1 +kind: Job +metadata: + name: pi +spec: + template: + spec: + containers: + - name: pi + image: perl + command: ["perl", "-Mbignum=bpi", "-wle", "print bpi(2000)"] + volumeMounts: + - mountPath: shared-files + name: nfs-files-vol + restartPolicy: Never + volumes: + - name: nfs-files-vol + nfs: + server: $(NFS_SERVER_SERVICE_NAME).default.srv.cluster.local + path: / + readOnly: false + backoffLimit: 4 +`) + th.WriteF("base/StatefulSet.yaml", ` +apiVersion: apps/v1 +kind: StatefulSet +metadata: + name: web +spec: + selector: + matchLabels: + app: nginx # has to match .spec.template.metadata.labels + serviceName: "nginx" + replicas: 3 # by default is 1 + template: + metadata: + labels: + app: nginx # has to match .spec.selector.matchLabels + spec: + terminationGracePeriodSeconds: 10 + containers: + - name: nginx + image: k8s.gcr.io/nginx-slim:0.8 + ports: + - containerPort: 80 + name: web + volumeMounts: + - name: www + mountPath: /usr/share/nginx/html + volumeClaimTemplates: + - metadata: + name: www + spec: + accessModes: [ "ReadWriteMany" ] + nfs: + server: $(NFS_SERVER_SERVICE_NAME).default.srv.cluster.local + path: / + readOnly: false +`) + th.WriteF("base/Pod.yaml", ` +apiVersion: v1 +kind: Pod +metadata: + name: myapp-pod + labels: + app: myapp +spec: + containers: + - name: nginx + image: nginx:1.15.7-alpine + ports: + - name: http + containerPort: 80 + volumeMounts: + - name: nfs-files-vol + mountPath: shared-files + volumes: + - name: nfs-files-vol + nfs: + server: $(NFS_SERVER_SERVICE_NAME).default.srv.cluster.local + path: / + readOnly: false +`) + th.WriteF("base/nfs_pv.yaml", ` +apiVersion: v1 +kind: PersistentVolume +metadata: + name: nfs-files-pv +spec: + capacity: + storage: 10Gi + accessModes: + - ReadWriteMany + nfs: + server: $(NFS_SERVER_SERVICE_NAME).default.srv.cluster.local + path: / + readOnly: false +`) + th.WriteK("overlay", ` +nameprefix: kustomized- +resources: +- ../base +`) + m := th.Run("overlay", th.MakeDefaultOptions()) + th.AssertActualEqualsExpected(m, ` +apiVersion: v1 +kind: PersistentVolumeClaim +metadata: + name: kustomized-shared-volume-claim +spec: + accessModes: + - ReadWriteOnce + resources: + requests: + storage: 10Gi +--- +apiVersion: extensions/v1beta1 +kind: Deployment +metadata: + name: kustomized-nfs-server +spec: + replicas: 1 + template: + spec: + containers: + - image: gcr.io/google_containers/volume-nfs:0.8 + name: nfs-server + ports: + - containerPort: 2049 + name: nfs + - containerPort: 20048 + name: mountd + - containerPort: 111 + name: rpcbind + securityContext: + privileged: true + volumeMounts: + - mountPath: /exports + name: shared-files + metadata: + labels: + role: nfs-server + volumes: + - name: shared-files + persistentVolumeClaim: + claimName: kustomized-shared-volume-claim +--- +apiVersion: v1 +kind: Service +metadata: + name: kustomized-nfs-server-service +spec: + ports: + - name: nfs + port: 2049 + - name: mountd + port: 20048 + - name: rpcbind + port: 111 + selector: + role: nfs-server +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + labels: + app.kubernetes.io/component: nginx + name: kustomized-nginx +spec: + selector: + matchLabels: + app.kubernetes.io/component: nginx + template: + metadata: + labels: + app.kubernetes.io/component: nginx + spec: + containers: + - image: nginx:1.15.7-alpine + name: nginx + ports: + - containerPort: 80 + name: http + volumeMounts: + - mountPath: shared-files + name: nfs-files-vol + volumes: + - name: nfs-files-vol + nfs: + path: / + readOnly: false + server: kustomized-nfs-server-service.default.srv.cluster.local +--- +apiVersion: batch/v1beta1 +kind: CronJob +metadata: + name: kustomized-hello +spec: + jobTemplate: + spec: + template: + spec: + containers: + - args: + - /bin/sh + - -c + - date; echo Hello from the Kubernetes cluster + image: busybox + name: hello + restartPolicy: OnFailure + volumeMounts: + - mountPath: shared-files + name: nfs-files-vol + volumes: + - name: nfs-files-vol + nfs: + path: / + readOnly: false + server: kustomized-nfs-server-service.default.srv.cluster.local + schedule: '*/1 * * * *' +--- +apiVersion: apps/v1 +kind: DaemonSet +metadata: + labels: + k8s-app: fluentd-logging + name: kustomized-fluentd-elasticsearch + namespace: kube-system +spec: + selector: + matchLabels: + name: fluentd-elasticsearch + template: + metadata: + labels: + name: fluentd-elasticsearch + spec: + containers: + - image: quay.io/fluentd_elasticsearch/fluentd:v2.5.2 + name: fluentd-elasticsearch + resources: + limits: + memory: 200Mi + requests: + cpu: 100m + memory: 200Mi + volumeMounts: + - mountPath: /var/log + name: varlog + - mountPath: /var/lib/docker/containers + name: varlibdockercontainers + readOnly: true + - mountPath: shared-files + name: nfs-files-vol + terminationGracePeriodSeconds: 30 + tolerations: + - effect: NoSchedule + key: node-role.kubernetes.io/master + volumes: + - hostPath: + path: /var/log + name: varlog + - hostPath: + path: /var/lib/docker/containers + name: varlibdockercontainers + - name: nfs-files-vol + nfs: + path: / + readOnly: false + server: kustomized-nfs-server-service.default.srv.cluster.local +--- +apiVersion: apps/v1 +kind: ReplicaSet +metadata: + labels: + app: guestbook + tier: frontend + name: kustomized-frontend +spec: + replicas: 3 + selector: + matchLabels: + tier: frontend + template: + metadata: + labels: + tier: frontend + spec: + containers: + - image: gcr.io/google_samples/gb-frontend:v3 + name: php-redis + volumeMounts: + - mountPath: shared-files + name: nfs-files-vol + volumes: + - name: nfs-files-vol + nfs: + path: / + readOnly: false + server: kustomized-nfs-server-service.default.srv.cluster.local +--- +apiVersion: apps/v1 +kind: StatefulSet +metadata: + name: kustomized-web +spec: + replicas: 3 + selector: + matchLabels: + app: nginx + serviceName: nginx + template: + metadata: + labels: + app: nginx + spec: + containers: + - image: k8s.gcr.io/nginx-slim:0.8 + name: nginx + ports: + - containerPort: 80 + name: web + volumeMounts: + - mountPath: /usr/share/nginx/html + name: www + terminationGracePeriodSeconds: 10 + volumeClaimTemplates: + - metadata: + name: www + spec: + accessModes: + - ReadWriteMany + nfs: + path: / + readOnly: false + server: kustomized-nfs-server-service.default.srv.cluster.local +--- +apiVersion: v1 +kind: Pod +metadata: + labels: + app: myapp + name: kustomized-myapp-pod +spec: + containers: + - image: nginx:1.15.7-alpine + name: nginx + ports: + - containerPort: 80 + name: http + volumeMounts: + - mountPath: shared-files + name: nfs-files-vol + volumes: + - name: nfs-files-vol + nfs: + path: / + readOnly: false + server: kustomized-nfs-server-service.default.srv.cluster.local +--- +apiVersion: batch/v1 +kind: Job +metadata: + name: kustomized-pi +spec: + backoffLimit: 4 + template: + spec: + containers: + - command: + - perl + - -Mbignum=bpi + - -wle + - print bpi(2000) + image: perl + name: pi + volumeMounts: + - mountPath: shared-files + name: nfs-files-vol + restartPolicy: Never + volumes: + - name: nfs-files-vol + nfs: + path: / + readOnly: false + server: kustomized-nfs-server-service.default.srv.cluster.local +--- +apiVersion: v1 +kind: PersistentVolume +metadata: + name: kustomized-nfs-files-pv +spec: + accessModes: + - ReadWriteMany + capacity: + storage: 10Gi + nfs: + path: / + readOnly: false + server: kustomized-nfs-server-service.default.srv.cluster.local +`) +} + +func TestDeploymentAnnotations(t *testing.T) { + th := kusttest_test.MakeHarness(t) + th.WriteK(".", ` +configMapGenerator: +- name: theConfigMap + envs: + - test.properties + +vars: +- name: SOMERIVER + objref: + kind: ConfigMap + name: theConfigMap + apiVersion: v1 + fieldref: + fieldpath: data.waterway + +commonAnnotations: + river: $(SOMERIVER) + +resources: +- deployment.yaml +`) + + th.WriteF("deployment.yaml", ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: theDeployment +spec: + template: + spec: + containers: + - name: test +`) + th.WriteF("test.properties", `waterway=mississippi`) + m := th.Run(".", th.MakeDefaultOptions()) + th.AssertActualEqualsExpected(m, ` +apiVersion: apps/v1 +kind: Deployment +metadata: + annotations: + river: mississippi + name: theDeployment +spec: + template: + metadata: + annotations: + river: mississippi + spec: + containers: + - name: test +--- +apiVersion: v1 +data: + waterway: mississippi +kind: ConfigMap +metadata: + annotations: + river: mississippi + name: theConfigMap-hdd8h8cgdt +`) +} diff --git a/go/internal/forked/api/kv/kv.go b/go/internal/forked/api/kv/kv.go new file mode 100644 index 000000000..719b761c9 --- /dev/null +++ b/go/internal/forked/api/kv/kv.go @@ -0,0 +1,225 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package kv + +import ( + "bufio" + "bytes" + "fmt" + "os" + "path" + "strings" + "unicode" + "unicode/utf8" + + "github.com/pkg/errors" + "sigs.k8s.io/kustomize/api/ifc" + "sigs.k8s.io/kustomize/api/types" +) + +var utf8bom = []byte{0xEF, 0xBB, 0xBF} + +// loader reads and validates KV pairs. +type loader struct { + // Used to read the filesystem. + ldr ifc.Loader + + // Used to validate various k8s data fields. + validator ifc.Validator +} + +func NewLoader(ldr ifc.Loader, v ifc.Validator) ifc.KvLoader { + return &loader{ldr: ldr, validator: v} +} + +func (kvl *loader) Validator() ifc.Validator { + return kvl.validator +} + +func (kvl *loader) Load( + args types.KvPairSources) (all []types.Pair, err error) { + pairs, err := kvl.keyValuesFromEnvFiles(args.EnvSources) + if err != nil { + return nil, errors.Wrap(err, fmt.Sprintf( + "env source files: %v", + args.EnvSources)) + } + all = append(all, pairs...) + + pairs, err = keyValuesFromLiteralSources(args.LiteralSources) + if err != nil { + return nil, errors.Wrap(err, fmt.Sprintf( + "literal sources %v", args.LiteralSources)) + } + all = append(all, pairs...) + + pairs, err = kvl.keyValuesFromFileSources(args.FileSources) + if err != nil { + return nil, errors.Wrap(err, fmt.Sprintf( + "file sources: %v", args.FileSources)) + } + return append(all, pairs...), nil +} + +func keyValuesFromLiteralSources(sources []string) ([]types.Pair, error) { + var kvs []types.Pair + for _, s := range sources { + k, v, err := parseLiteralSource(s) + if err != nil { + return nil, err + } + kvs = append(kvs, types.Pair{Key: k, Value: v}) + } + return kvs, nil +} + +func (kvl *loader) keyValuesFromFileSources(sources []string) ([]types.Pair, error) { + var kvs []types.Pair + for _, s := range sources { + k, fPath, err := parseFileSource(s) + if err != nil { + return nil, err + } + content, err := kvl.ldr.Load(fPath) + if err != nil { + return nil, err + } + kvs = append(kvs, types.Pair{Key: k, Value: string(content)}) + } + return kvs, nil +} + +func (kvl *loader) keyValuesFromEnvFiles(paths []string) ([]types.Pair, error) { + var kvs []types.Pair + for _, p := range paths { + content, err := kvl.ldr.Load(p) + if err != nil { + return nil, err + } + more, err := kvl.keyValuesFromLines(content) + if err != nil { + return nil, err + } + kvs = append(kvs, more...) + } + return kvs, nil +} + +// keyValuesFromLines parses given content in to a list of key-value pairs. +func (kvl *loader) keyValuesFromLines(content []byte) ([]types.Pair, error) { + var kvs []types.Pair + + scanner := bufio.NewScanner(bytes.NewReader(content)) + currentLine := 0 + for scanner.Scan() { + // Process the current line, retrieving a key/value pair if + // possible. + scannedBytes := scanner.Bytes() + kv, err := kvl.keyValuesFromLine(scannedBytes, currentLine) + if err != nil { + return nil, err + } + currentLine++ + + if len(kv.Key) == 0 { + // no key means line was empty or a comment + continue + } + + kvs = append(kvs, kv) + } + return kvs, nil +} + +// KeyValuesFromLine returns a kv with blank key if the line is empty or a comment. +// The value will be retrieved from the environment if necessary. +func (kvl *loader) keyValuesFromLine(line []byte, currentLine int) (types.Pair, error) { + kv := types.Pair{} + + if !utf8.Valid(line) { + return kv, fmt.Errorf("line %d has invalid utf8 bytes : %v", line, string(line)) + } + + // We trim UTF8 BOM from the first line of the file but no others + if currentLine == 0 { + line = bytes.TrimPrefix(line, utf8bom) + } + + // trim the line from all leading whitespace first + line = bytes.TrimLeftFunc(line, unicode.IsSpace) + + // If the line is empty or a comment, we return a blank key/value pair. + if len(line) == 0 || line[0] == '#' { + return kv, nil + } + + data := strings.SplitN(string(line), "=", 2) + key := data[0] + if err := kvl.validator.IsEnvVarName(key); err != nil { + return kv, err + } + + if len(data) == 2 { + kv.Value = data[1] + } else { + // No value (no `=` in the line) is a signal to obtain the value + // from the environment. + kv.Value = os.Getenv(key) + } + kv.Key = key + return kv, nil +} + +// ParseFileSource parses the source given. +// +// Acceptable formats include: +// 1. source-path: the basename will become the key name +// 2. source-name=source-path: the source-name will become the key name and +// source-path is the path to the key file. +// +// Key names cannot include '='. +func parseFileSource(source string) (keyName, filePath string, err error) { + numSeparators := strings.Count(source, "=") + switch { + case numSeparators == 0: + return path.Base(source), source, nil + case numSeparators == 1 && strings.HasPrefix(source, "="): + return "", "", fmt.Errorf("key name for file path %v missing", strings.TrimPrefix(source, "=")) + case numSeparators == 1 && strings.HasSuffix(source, "="): + return "", "", fmt.Errorf("file path for key name %v missing", strings.TrimSuffix(source, "=")) + case numSeparators > 1: + return "", "", errors.New("key names or file paths cannot contain '='") + default: + components := strings.Split(source, "=") + return components[0], components[1], nil + } +} + +// ParseLiteralSource parses the source key=val pair into its component pieces. +// This functionality is distinguished from strings.SplitN(source, "=", 2) since +// it returns an error in the case of empty keys, values, or a missing equals sign. +func parseLiteralSource(source string) (keyName, value string, err error) { + // leading equal is invalid + if strings.Index(source, "=") == 0 { + return "", "", fmt.Errorf("invalid literal source %v, expected key=value", source) + } + // split after the first equal (so values can have the = character) + items := strings.SplitN(source, "=", 2) + if len(items) != 2 { + return "", "", fmt.Errorf("invalid literal source %v, expected key=value", source) + } + return items[0], removeQuotes(items[1]), nil +} + +// removeQuotes removes the surrounding quotes from the provided string only if it is surrounded on both sides +// rather than blindly trimming all quotation marks on either side. +func removeQuotes(str string) string { + if len(str) == 0 || str[0] != str[len(str)-1] { + return str + } + if str[0] == '"' || str[0] == '\'' { + return str[1 : len(str)-1] + } + return str +} diff --git a/go/internal/forked/api/kv/kv_test.go b/go/internal/forked/api/kv/kv_test.go new file mode 100644 index 000000000..91ff73242 --- /dev/null +++ b/go/internal/forked/api/kv/kv_test.go @@ -0,0 +1,99 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package kv + +import ( + "reflect" + "testing" + + "github.com/stretchr/testify/require" + ldr "sigs.k8s.io/kustomize/api/loader" + valtest_test "sigs.k8s.io/kustomize/api/testutils/valtest" + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/filesys" +) + +func makeKvLoader(fSys filesys.FileSystem) *loader { + return &loader{ + ldr: ldr.NewFileLoaderAtRoot(fSys), + validator: valtest_test.MakeFakeValidator()} +} + +func TestKeyValuesFromLines(t *testing.T) { + tests := []struct { + desc string + content string + expectedPairs []types.Pair + expectedErr bool + }{ + { + desc: "valid kv content parse", + content: ` + k1=v1 + k2=v2 + `, + expectedPairs: []types.Pair{ + {Key: "k1", Value: "v1"}, + {Key: "k2", Value: "v2"}, + }, + expectedErr: false, + }, + { + desc: "content with comments", + content: ` + k1=v1 + #k2=v2 + `, + expectedPairs: []types.Pair{ + {Key: "k1", Value: "v1"}, + }, + expectedErr: false, + }, + // TODO: add negative testcases + } + + kvl := makeKvLoader(filesys.MakeFsInMemory()) + for _, test := range tests { + pairs, err := kvl.keyValuesFromLines([]byte(test.content)) + if test.expectedErr && err == nil { + t.Fatalf("%s should not return error", test.desc) + } + if !reflect.DeepEqual(pairs, test.expectedPairs) { + t.Errorf("%s should succeed, got:%v exptected:%v", test.desc, pairs, test.expectedPairs) + } + } +} + +func TestKeyValuesFromFileSources(t *testing.T) { + tests := []struct { + description string + sources []string + expected []types.Pair + }{ + { + description: "create kvs from file sources", + sources: []string{"files/app-init.ini"}, + expected: []types.Pair{ + { + Key: "app-init.ini", + Value: "FOO=bar", + }, + }, + }, + } + + fSys := filesys.MakeFsInMemory() + err := fSys.WriteFile("/files/app-init.ini", []byte("FOO=bar")) + require.NoError(t, err) + kvl := makeKvLoader(fSys) + for _, tc := range tests { + kvs, err := kvl.keyValuesFromFileSources(tc.sources) + if err != nil { + t.Fatalf("unexpected error: %v", err) + } + if !reflect.DeepEqual(kvs, tc.expected) { + t.Fatalf("in testcase: %q updated:\n%#v\ndoesn't match expected:\n%#v\n", tc.description, kvs, tc.expected) + } + } +} diff --git a/go/internal/forked/api/kv/kv_test.go b/go/internal/forked/api/kv/kv_test.go new file mode 100644 index 000000000..f384cf2dc --- /dev/null +++ b/go/internal/forked/api/kv/kv_test.go @@ -0,0 +1,99 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package kv + +import ( + "reflect" + "testing" + + "github.com/stretchr/testify/require" + ldr "sigs.k8s.io/kustomize/api/loader" + valtest_test "sigs.k8s.io/kustomize/api/testutils/valtest" + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/filesys" +) + +func makeKvLoader(fSys filesys.FileSystem) *loader { + return &loader{ + ldr: ldr.NewFileLoaderAtRoot(fSys), + validator: valtest_test.MakeFakeValidator()} +} + +func TestKeyValuesFromLines(t *testing.T) { + tests := []struct { + desc string + content string + expectedPairs []types.Pair + expectedErr bool + }{ + { + desc: "valid kv content parse", + content: ` + k1=v1 + k2=v2 + `, + expectedPairs: []types.Pair{ + {Key: "k1", Value: "v1"}, + {Key: "k2", Value: "v2"}, + }, + expectedErr: false, + }, + { + desc: "content with comments", + content: ` + k1=v1 + #k2=v2 + `, + expectedPairs: []types.Pair{ + {Key: "k1", Value: "v1"}, + }, + expectedErr: false, + }, + // TODO: add negative testcases + } + + kvl := makeKvLoader(filesys.MakeFsInMemory()) + for _, test := range tests { + pairs, err := kvl.keyValuesFromLines([]byte(test.content)) + if test.expectedErr && err == nil { + t.Fatalf("%s should not return error", test.desc) + } + if !reflect.DeepEqual(pairs, test.expectedPairs) { + t.Errorf("%s should succeed, got:%v exptected:%v", test.desc, pairs, test.expectedPairs) + } + } +} + +func TestKeyValuesFromFileSources(t *testing.T) { + tests := []struct { + description string + sources []string + expected []types.Pair + }{ + { + description: "create kvs from file sources", + sources: []string{"files/app-init.ini"}, + expected: []types.Pair{ + { + Key: "app-init.ini", + Value: "FOO=bar", + }, + }, + }, + } + + fSys := filesys.MakeFsInMemory() + err := fSys.WriteFile("/files/app-init.ini", []byte("FOO=bar")) + require.NoError(t, err) + kvl := makeKvLoader(fSys) + for _, tc := range tests { + kvs, err := kvl.keyValuesFromFileSources(tc.sources) + if err != nil { + t.Fatalf("unexpected error: %v", err) + } + if !reflect.DeepEqual(kvs, tc.expected) { + t.Fatalf("in testcase: %q updated:\n%#v\ndoesn't match expected:\n%#v\n", tc.description, kvs, tc.expected) + } + } +} diff --git a/go/internal/forked/api/loader/errors.go b/go/internal/forked/api/loader/errors.go new file mode 100644 index 000000000..5281a1cd7 --- /dev/null +++ b/go/internal/forked/api/loader/errors.go @@ -0,0 +1,5 @@ +package loader + +import "fmt" + +var ErrorHTTP = fmt.Errorf("HTTP Error") diff --git a/go/internal/forked/api/loader/fileloader.go b/go/internal/forked/api/loader/fileloader.go new file mode 100644 index 000000000..c234cee46 --- /dev/null +++ b/go/internal/forked/api/loader/fileloader.go @@ -0,0 +1,338 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package loader + +import ( + "fmt" + "io/ioutil" + "log" + "net/http" + "net/url" + "path/filepath" + "strings" + + "sigs.k8s.io/kustomize/api/ifc" + "sigs.k8s.io/kustomize/api/internal/git" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/filesys" +) + +// fileLoader is a kustomization's interface to files. +// +// The directory in which a kustomization file sits +// is referred to below as the kustomization's _root_. +// +// An instance of fileLoader has an immutable root, +// and offers a `New` method returning a new loader +// with a new root. +// +// A kustomization file refers to two kinds of files: +// +// * supplemental data paths +// +// `Load` is used to visit these paths. +// +// These paths refer to resources, patches, +// data for ConfigMaps and Secrets, etc. +// +// The loadRestrictor may disallow certain paths +// or classes of paths. +// +// * bases (other kustomizations) +// +// `New` is used to load bases. +// +// A base can be either a remote git repo URL, or +// a directory specified relative to the current +// root. In the former case, the repo is locally +// cloned, and the new loader is rooted on a path +// in that clone. +// +// As loaders create new loaders, a root history +// is established, and used to disallow: +// +// - A base that is a repository that, in turn, +// specifies a base repository seen previously +// in the loading stack (a cycle). +// +// - An overlay depending on a base positioned at +// or above it. I.e. '../foo' is OK, but '.', +// '..', '../..', etc. are disallowed. Allowing +// such a base has no advantages and encourages +// cycles, particularly if some future change +// were to introduce globbing to file +// specifications in the kustomization file. +// +// These restrictions assure that kustomizations +// are self-contained and relocatable, and impose +// some safety when relying on remote kustomizations, +// e.g. a remotely loaded ConfigMap generator specified +// to read from /etc/passwd will fail. +// +type fileLoader struct { + // Loader that spawned this loader. + // Used to avoid cycles. + referrer *fileLoader + + // An absolute, cleaned path to a directory. + // The Load function will read non-absolute + // paths relative to this directory. + root filesys.ConfirmedDir + + // Restricts behavior of Load function. + loadRestrictor LoadRestrictorFunc + + // If this is non-nil, the files were + // obtained from the given repository. + repoSpec *git.RepoSpec + + // File system utilities. + fSys filesys.FileSystem + + // Used to load from HTTP + http *http.Client + + // Used to clone repositories. + cloner git.Cloner + + // Used to clean up, as needed. + cleaner func() error +} + +// NewFileLoaderAtCwd returns a loader that loads from PWD. +// A convenience for kustomize edit commands. +func NewFileLoaderAtCwd(fSys filesys.FileSystem) *fileLoader { + return newLoaderOrDie( + RestrictionRootOnly, fSys, filesys.SelfDir) +} + +// NewFileLoaderAtRoot returns a loader that loads from "/". +// A convenience for tests. +func NewFileLoaderAtRoot(fSys filesys.FileSystem) *fileLoader { + return newLoaderOrDie( + RestrictionRootOnly, fSys, filesys.Separator) +} + +// Root returns the absolute path that is prepended to any +// relative paths used in Load. +func (fl *fileLoader) Root() string { + return fl.root.String() +} + +func newLoaderOrDie( + lr LoadRestrictorFunc, + fSys filesys.FileSystem, path string) *fileLoader { + root, err := demandDirectoryRoot(fSys, path) + if err != nil { + log.Fatalf("unable to make loader at '%s'; %v", path, err) + } + return newLoaderAtConfirmedDir( + lr, root, fSys, nil, git.ClonerUsingGitExec) +} + +// newLoaderAtConfirmedDir returns a new fileLoader with given root. +func newLoaderAtConfirmedDir( + lr LoadRestrictorFunc, + root filesys.ConfirmedDir, fSys filesys.FileSystem, + referrer *fileLoader, cloner git.Cloner) *fileLoader { + return &fileLoader{ + loadRestrictor: lr, + root: root, + referrer: referrer, + fSys: fSys, + cloner: cloner, + cleaner: func() error { return nil }, + } +} + +// Assure that the given path is in fact a directory. +func demandDirectoryRoot( + fSys filesys.FileSystem, path string) (filesys.ConfirmedDir, error) { + if path == "" { + return "", fmt.Errorf( + "loader root cannot be empty") + } + d, f, err := fSys.CleanedAbs(path) + if err != nil { + return "", err + } + if f != "" { + return "", fmt.Errorf( + "got file '%s', but '%s' must be a directory to be a root", + f, path) + } + return d, nil +} + +// New returns a new Loader, rooted relative to current loader, +// or rooted in a temp directory holding a git repo clone. +func (fl *fileLoader) New(path string) (ifc.Loader, error) { + if path == "" { + return nil, fmt.Errorf("new root cannot be empty") + } + + repoSpec, err := git.NewRepoSpecFromUrl(path) + if err == nil { + // Treat this as git repo clone request. + if err = fl.errIfRepoCycle(repoSpec); err != nil { + return nil, err + } + return newLoaderAtGitClone( + repoSpec, fl.fSys, fl, fl.cloner) + } + + if filepath.IsAbs(path) { + return nil, fmt.Errorf("new root '%s' cannot be absolute", path) + } + root, err := demandDirectoryRoot(fl.fSys, fl.root.Join(path)) + if err != nil { + return nil, err + } + if err = fl.errIfGitContainmentViolation(root); err != nil { + return nil, err + } + if err = fl.errIfArgEqualOrHigher(root); err != nil { + return nil, err + } + return newLoaderAtConfirmedDir( + fl.loadRestrictor, root, fl.fSys, fl, fl.cloner), nil +} + +// newLoaderAtGitClone returns a new Loader pinned to a temporary +// directory holding a cloned git repo. +func newLoaderAtGitClone( + repoSpec *git.RepoSpec, fSys filesys.FileSystem, + referrer *fileLoader, cloner git.Cloner) (ifc.Loader, error) { + cleaner := repoSpec.Cleaner(fSys) + err := cloner(repoSpec) + if err != nil { + cleaner() + return nil, err + } + root, f, err := fSys.CleanedAbs(repoSpec.AbsPath()) + if err != nil { + cleaner() + return nil, err + } + // We don't know that the path requested in repoSpec + // is a directory until we actually clone it and look + // inside. That just happened, hence the error check + // is here. + if f != "" { + cleaner() + return nil, fmt.Errorf( + "'%s' refers to file '%s'; expecting directory", + repoSpec.AbsPath(), f) + } + return &fileLoader{ + // Clones never allowed to escape root. + loadRestrictor: RestrictionRootOnly, + root: root, + referrer: referrer, + repoSpec: repoSpec, + fSys: fSys, + cloner: cloner, + cleaner: cleaner, + }, nil +} + +func (fl *fileLoader) errIfGitContainmentViolation( + base filesys.ConfirmedDir) error { + containingRepo := fl.containingRepo() + if containingRepo == nil { + return nil + } + if !base.HasPrefix(containingRepo.CloneDir()) { + return fmt.Errorf( + "security; bases in kustomizations found in "+ + "cloned git repos must be within the repo, "+ + "but base '%s' is outside '%s'", + base, containingRepo.CloneDir()) + } + return nil +} + +// Looks back through referrers for a git repo, returning nil +// if none found. +func (fl *fileLoader) containingRepo() *git.RepoSpec { + if fl.repoSpec != nil { + return fl.repoSpec + } + if fl.referrer == nil { + return nil + } + return fl.referrer.containingRepo() +} + +// errIfArgEqualOrHigher tests whether the argument, +// is equal to or above the root of any ancestor. +func (fl *fileLoader) errIfArgEqualOrHigher( + candidateRoot filesys.ConfirmedDir) error { + if fl.root.HasPrefix(candidateRoot) { + return fmt.Errorf( + "cycle detected: candidate root '%s' contains visited root '%s'", + candidateRoot, fl.root) + } + if fl.referrer == nil { + return nil + } + return fl.referrer.errIfArgEqualOrHigher(candidateRoot) +} + +// TODO(monopole): Distinguish branches? +// I.e. Allow a distinction between git URI with +// path foo and tag bar and a git URI with the same +// path but a different tag? +func (fl *fileLoader) errIfRepoCycle(newRepoSpec *git.RepoSpec) error { + // TODO(monopole): Use parsed data instead of Raw(). + if fl.repoSpec != nil && + strings.HasPrefix(fl.repoSpec.Raw(), newRepoSpec.Raw()) { + return fmt.Errorf( + "cycle detected: URI '%s' referenced by previous URI '%s'", + newRepoSpec.Raw(), fl.repoSpec.Raw()) + } + if fl.referrer == nil { + return nil + } + return fl.referrer.errIfRepoCycle(newRepoSpec) +} + +// Load returns the content of file at the given path, +// else an error. Relative paths are taken relative +// to the root. +func (fl *fileLoader) Load(path string) ([]byte, error) { + if u, err := url.Parse(path); err == nil && (u.Scheme == "http" || u.Scheme == "https") { + var hc *http.Client + if fl.http != nil { + hc = fl.http + } else { + hc = &http.Client{} + } + resp, err := hc.Get(path) + if err != nil { + return nil, err + } + defer resp.Body.Close() + if resp.StatusCode < 200 || resp.StatusCode > 299 { + return nil, fmt.Errorf("%w: status code %d (%s)", ErrorHTTP, resp.StatusCode, http.StatusText(resp.StatusCode)) + } + body, err := ioutil.ReadAll(resp.Body) + if err != nil { + return nil, err + } + return body, nil + } + if !filepath.IsAbs(path) { + path = fl.root.Join(path) + } + path, err := fl.loadRestrictor(fl.fSys, fl.root, path) + if err != nil { + return nil, err + } + return fl.fSys.ReadFile(path) +} + +// Cleanup runs the cleaner. +func (fl *fileLoader) Cleanup() error { + return fl.cleaner() +} diff --git a/go/internal/forked/api/loader/fileloader.go b/go/internal/forked/api/loader/fileloader.go new file mode 100644 index 000000000..4be8aa676 --- /dev/null +++ b/go/internal/forked/api/loader/fileloader.go @@ -0,0 +1,338 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package loader + +import ( + "fmt" + "io/ioutil" + "log" + "net/http" + "net/url" + "path/filepath" + "strings" + + "sigs.k8s.io/kustomize/api/ifc" + "sigs.k8s.io/kustomize/api/internal/git" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/filesys" +) + +// fileLoader is a kustomization's interface to files. +// +// The directory in which a kustomization file sits +// is referred to below as the kustomization's _root_. +// +// An instance of fileLoader has an immutable root, +// and offers a `New` method returning a new loader +// with a new root. +// +// A kustomization file refers to two kinds of files: +// +// * supplemental data paths +// +// `Load` is used to visit these paths. +// +// These paths refer to resources, patches, +// data for ConfigMaps and Secrets, etc. +// +// The loadRestrictor may disallow certain paths +// or classes of paths. +// +// * bases (other kustomizations) +// +// `New` is used to load bases. +// +// A base can be either a remote git repo URL, or +// a directory specified relative to the current +// root. In the former case, the repo is locally +// cloned, and the new loader is rooted on a path +// in that clone. +// +// As loaders create new loaders, a root history +// is established, and used to disallow: +// +// - A base that is a repository that, in turn, +// specifies a base repository seen previously +// in the loading stack (a cycle). +// +// - An overlay depending on a base positioned at +// or above it. I.e. '../foo' is OK, but '.', +// '..', '../..', etc. are disallowed. Allowing +// such a base has no advantages and encourages +// cycles, particularly if some future change +// were to introduce globbing to file +// specifications in the kustomization file. +// +// These restrictions assure that kustomizations +// are self-contained and relocatable, and impose +// some safety when relying on remote kustomizations, +// e.g. a remotely loaded ConfigMap generator specified +// to read from /etc/passwd will fail. +// +type fileLoader struct { + // Loader that spawned this loader. + // Used to avoid cycles. + referrer *fileLoader + + // An absolute, cleaned path to a directory. + // The Load function will read non-absolute + // paths relative to this directory. + root filesys.ConfirmedDir + + // Restricts behavior of Load function. + loadRestrictor LoadRestrictorFunc + + // If this is non-nil, the files were + // obtained from the given repository. + repoSpec *git.RepoSpec + + // File system utilities. + fSys filesys.FileSystem + + // Used to load from HTTP + http *http.Client + + // Used to clone repositories. + cloner git.Cloner + + // Used to clean up, as needed. + cleaner func() error +} + +// NewFileLoaderAtCwd returns a loader that loads from PWD. +// A convenience for kustomize edit commands. +func NewFileLoaderAtCwd(fSys filesys.FileSystem) *fileLoader { + return newLoaderOrDie( + RestrictionRootOnly, fSys, filesys.SelfDir) +} + +// NewFileLoaderAtRoot returns a loader that loads from "/". +// A convenience for tests. +func NewFileLoaderAtRoot(fSys filesys.FileSystem) *fileLoader { + return newLoaderOrDie( + RestrictionRootOnly, fSys, filesys.Separator) +} + +// Root returns the absolute path that is prepended to any +// relative paths used in Load. +func (fl *fileLoader) Root() string { + return fl.root.String() +} + +func newLoaderOrDie( + lr LoadRestrictorFunc, + fSys filesys.FileSystem, path string) *fileLoader { + root, err := demandDirectoryRoot(fSys, path) + if err != nil { + log.Fatalf("unable to make loader at '%s'; %v", path, err) + } + return newLoaderAtConfirmedDir( + lr, root, fSys, nil, git.ClonerUsingGitExec) +} + +// newLoaderAtConfirmedDir returns a new fileLoader with given root. +func newLoaderAtConfirmedDir( + lr LoadRestrictorFunc, + root filesys.ConfirmedDir, fSys filesys.FileSystem, + referrer *fileLoader, cloner git.Cloner) *fileLoader { + return &fileLoader{ + loadRestrictor: lr, + root: root, + referrer: referrer, + fSys: fSys, + cloner: cloner, + cleaner: func() error { return nil }, + } +} + +// Assure that the given path is in fact a directory. +func demandDirectoryRoot( + fSys filesys.FileSystem, path string) (filesys.ConfirmedDir, error) { + if path == "" { + return "", fmt.Errorf( + "loader root cannot be empty") + } + d, f, err := fSys.CleanedAbs(path) + if err != nil { + return "", err + } + if f != "" { + return "", fmt.Errorf( + "got file '%s', but '%s' must be a directory to be a root", + f, path) + } + return d, nil +} + +// New returns a new Loader, rooted relative to current loader, +// or rooted in a temp directory holding a git repo clone. +func (fl *fileLoader) New(path string) (ifc.Loader, error) { + if path == "" { + return nil, fmt.Errorf("new root cannot be empty") + } + + repoSpec, err := git.NewRepoSpecFromUrl(path) + if err == nil { + // Treat this as git repo clone request. + if err = fl.errIfRepoCycle(repoSpec); err != nil { + return nil, err + } + return newLoaderAtGitClone( + repoSpec, fl.fSys, fl, fl.cloner) + } + + if filepath.IsAbs(path) { + return nil, fmt.Errorf("new root '%s' cannot be absolute", path) + } + root, err := demandDirectoryRoot(fl.fSys, fl.root.Join(path)) + if err != nil { + return nil, err + } + if err = fl.errIfGitContainmentViolation(root); err != nil { + return nil, err + } + if err = fl.errIfArgEqualOrHigher(root); err != nil { + return nil, err + } + return newLoaderAtConfirmedDir( + fl.loadRestrictor, root, fl.fSys, fl, fl.cloner), nil +} + +// newLoaderAtGitClone returns a new Loader pinned to a temporary +// directory holding a cloned git repo. +func newLoaderAtGitClone( + repoSpec *git.RepoSpec, fSys filesys.FileSystem, + referrer *fileLoader, cloner git.Cloner) (ifc.Loader, error) { + cleaner := repoSpec.Cleaner(fSys) + err := cloner(repoSpec) + if err != nil { + cleaner() + return nil, err + } + root, f, err := fSys.CleanedAbs(repoSpec.AbsPath()) + if err != nil { + cleaner() + return nil, err + } + // We don't know that the path requested in repoSpec + // is a directory until we actually clone it and look + // inside. That just happened, hence the error check + // is here. + if f != "" { + cleaner() + return nil, fmt.Errorf( + "'%s' refers to file '%s'; expecting directory", + repoSpec.AbsPath(), f) + } + return &fileLoader{ + // Clones never allowed to escape root. + loadRestrictor: RestrictionRootOnly, + root: root, + referrer: referrer, + repoSpec: repoSpec, + fSys: fSys, + cloner: cloner, + cleaner: cleaner, + }, nil +} + +func (fl *fileLoader) errIfGitContainmentViolation( + base filesys.ConfirmedDir) error { + containingRepo := fl.containingRepo() + if containingRepo == nil { + return nil + } + if !base.HasPrefix(containingRepo.CloneDir()) { + return fmt.Errorf( + "security; bases in kustomizations found in "+ + "cloned git repos must be within the repo, "+ + "but base '%s' is outside '%s'", + base, containingRepo.CloneDir()) + } + return nil +} + +// Looks back through referrers for a git repo, returning nil +// if none found. +func (fl *fileLoader) containingRepo() *git.RepoSpec { + if fl.repoSpec != nil { + return fl.repoSpec + } + if fl.referrer == nil { + return nil + } + return fl.referrer.containingRepo() +} + +// errIfArgEqualOrHigher tests whether the argument, +// is equal to or above the root of any ancestor. +func (fl *fileLoader) errIfArgEqualOrHigher( + candidateRoot filesys.ConfirmedDir) error { + if fl.root.HasPrefix(candidateRoot) { + return fmt.Errorf( + "cycle detected: candidate root '%s' contains visited root '%s'", + candidateRoot, fl.root) + } + if fl.referrer == nil { + return nil + } + return fl.referrer.errIfArgEqualOrHigher(candidateRoot) +} + +// TODO(monopole): Distinguish branches? +// I.e. Allow a distinction between git URI with +// path foo and tag bar and a git URI with the same +// path but a different tag? +func (fl *fileLoader) errIfRepoCycle(newRepoSpec *git.RepoSpec) error { + // TODO(monopole): Use parsed data instead of Raw(). + if fl.repoSpec != nil && + strings.HasPrefix(fl.repoSpec.Raw(), newRepoSpec.Raw()) { + return fmt.Errorf( + "cycle detected: URI '%s' referenced by previous URI '%s'", + newRepoSpec.Raw(), fl.repoSpec.Raw()) + } + if fl.referrer == nil { + return nil + } + return fl.referrer.errIfRepoCycle(newRepoSpec) +} + +// Load returns the content of file at the given path, +// else an error. Relative paths are taken relative +// to the root. +func (fl *fileLoader) Load(path string) ([]byte, error) { + if u, err := url.Parse(path); err == nil && (u.Scheme == "http" || u.Scheme == "https") { + var hc *http.Client + if fl.http != nil { + hc = fl.http + } else { + hc = &http.Client{} + } + resp, err := hc.Get(path) + if err != nil { + return nil, err + } + defer resp.Body.Close() + if resp.StatusCode < 200 || resp.StatusCode > 299 { + return nil, fmt.Errorf("%w: status code %d (%s)", ErrorHTTP, resp.StatusCode, http.StatusText(resp.StatusCode)) + } + body, err := ioutil.ReadAll(resp.Body) + if err != nil { + return nil, err + } + return body, nil + } + if !filepath.IsAbs(path) { + path = fl.root.Join(path) + } + path, err := fl.loadRestrictor(fl.fSys, fl.root, path) + if err != nil { + return nil, err + } + return fl.fSys.ReadFile(path) +} + +// Cleanup runs the cleaner. +func (fl *fileLoader) Cleanup() error { + return fl.cleaner() +} diff --git a/go/internal/forked/api/loader/fileloader_test.go b/go/internal/forked/api/loader/fileloader_test.go new file mode 100644 index 000000000..3feb3dea8 --- /dev/null +++ b/go/internal/forked/api/loader/fileloader_test.go @@ -0,0 +1,673 @@ +/// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package loader + +import ( + "bytes" + "io/ioutil" + "net/http" + "os" + "path" + "path/filepath" + "reflect" + "strings" + "testing" + + "sigs.k8s.io/kustomize/api/ifc" + "sigs.k8s.io/kustomize/api/internal/git" + "sigs.k8s.io/kustomize/api/konfig" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/filesys" +) + +type testData struct { + path string + expectedContent string +} + +var testCases = []testData{ + { + path: "foo/project/fileA.yaml", + expectedContent: "fileA content", + }, + { + path: "foo/project/subdir1/fileB.yaml", + expectedContent: "fileB content", + }, + { + path: "foo/project/subdir2/fileC.yaml", + expectedContent: "fileC content", + }, + { + path: "foo/project/fileD.yaml", + expectedContent: "fileD content", + }, +} + +func MakeFakeFs(td []testData) filesys.FileSystem { + fSys := filesys.MakeFsInMemory() + for _, x := range td { + fSys.WriteFile(x.path, []byte(x.expectedContent)) + } + return fSys +} + +func makeLoader() *fileLoader { + return NewFileLoaderAtRoot(MakeFakeFs(testCases)) +} + +func TestLoaderLoad(t *testing.T) { + l1 := makeLoader() + if "/" != l1.Root() { + t.Fatalf("incorrect root: '%s'\n", l1.Root()) + } + for _, x := range testCases { + b, err := l1.Load(x.path) + if err != nil { + t.Fatalf("unexpected load error: %v", err) + } + if !reflect.DeepEqual([]byte(x.expectedContent), b) { + t.Fatalf("in load expected %s, but got %s", x.expectedContent, b) + } + } + l2, err := l1.New("foo/project") + if err != nil { + t.Fatalf("unexpected err: %v\n", err) + } + if "/foo/project" != l2.Root() { + t.Fatalf("incorrect root: %s\n", l2.Root()) + } + for _, x := range testCases { + b, err := l2.Load(strings.TrimPrefix(x.path, "foo/project/")) + if err != nil { + t.Fatalf("unexpected load error %v", err) + } + if !reflect.DeepEqual([]byte(x.expectedContent), b) { + t.Fatalf("in load expected %s, but got %s", x.expectedContent, b) + } + } + l2, err = l1.New("foo/project/") // Assure trailing slash stripped + if err != nil { + t.Fatalf("unexpected err: %v\n", err) + } + if "/foo/project" != l2.Root() { + t.Fatalf("incorrect root: %s\n", l2.Root()) + } +} + +func TestLoaderNewSubDir(t *testing.T) { + l1, err := makeLoader().New("foo/project") + if err != nil { + t.Fatalf("unexpected err: %v\n", err) + } + l2, err := l1.New("subdir1") + if err != nil { + t.Fatalf("unexpected err: %v\n", err) + } + if "/foo/project/subdir1" != l2.Root() { + t.Fatalf("incorrect root: %s\n", l2.Root()) + } + x := testCases[1] + b, err := l2.Load("fileB.yaml") + if err != nil { + t.Fatalf("unexpected load error %v", err) + } + if !reflect.DeepEqual([]byte(x.expectedContent), b) { + t.Fatalf("in load expected %s, but got %s", x.expectedContent, b) + } +} + +func TestLoaderBadRelative(t *testing.T) { + l1, err := makeLoader().New("foo/project/subdir1") + if err != nil { + t.Fatalf("unexpected err: %v\n", err) + } + if "/foo/project/subdir1" != l1.Root() { + t.Fatalf("incorrect root: %s\n", l1.Root()) + } + + // Cannot cd into a file. + l2, err := l1.New("fileB.yaml") + if err == nil { + t.Fatalf("expected err, but got root %s", l2.Root()) + } + + // It's not okay to stay at the same place. + l2, err = l1.New(filesys.SelfDir) + if err == nil { + t.Fatalf("expected err, but got root %s", l2.Root()) + } + + // It's not okay to go up and back down into same place. + l2, err = l1.New("../subdir1") + if err == nil { + t.Fatalf("expected err, but got root %s", l2.Root()) + } + + // It's not okay to go up via a relative path. + l2, err = l1.New("..") + if err == nil { + t.Fatalf("expected err, but got root %s", l2.Root()) + } + + // It's not okay to go up via an absolute path. + l2, err = l1.New("/foo/project") + if err == nil { + t.Fatalf("expected err, but got root %s", l2.Root()) + } + + // It's not okay to go to the root. + l2, err = l1.New("/") + if err == nil { + t.Fatalf("expected err, but got root %s", l2.Root()) + } + + // It's okay to go up and down to a sibling. + l2, err = l1.New("../subdir2") + if err != nil { + t.Fatalf("unexpected new error %v", err) + } + if "/foo/project/subdir2" != l2.Root() { + t.Fatalf("incorrect root: %s\n", l2.Root()) + } + x := testCases[2] + b, err := l2.Load("fileC.yaml") + if err != nil { + t.Fatalf("unexpected load error %v", err) + } + if !reflect.DeepEqual([]byte(x.expectedContent), b) { + t.Fatalf("in load expected %s, but got %s", x.expectedContent, b) + } + + // It's not OK to go over to a previously visited directory. + // Must disallow going back and forth in a cycle. + l1, err = l2.New("../subdir1") + if err == nil { + t.Fatalf("expected err, but got root %s", l1.Root()) + } +} + +func TestLoaderMisc(t *testing.T) { + l := makeLoader() + _, err := l.New("") + if err == nil { + t.Fatalf("Expected error for empty root location not returned") + } + _, err = l.New("https://google.com/project") + if err == nil { + t.Fatalf("Expected error") + } +} + +const ( + contentOk = "hi there, i'm OK data" + contentExteriorData = "i am data from outside the root" +) + +// Create a structure like this +// +// /tmp/kustomize-test-random +// ├── base +// │ ├── okayData +// │ ├── symLinkToOkayData -> okayData +// │ └── symLinkToExteriorData -> ../exteriorData +// └── exteriorData +// +func commonSetupForLoaderRestrictionTest() (string, filesys.FileSystem, error) { + dir, err := ioutil.TempDir("", "kustomize-test-") + if err != nil { + return "", nil, err + } + fSys := filesys.MakeFsOnDisk() + fSys.Mkdir(filepath.Join(dir, "base")) + + fSys.WriteFile( + filepath.Join(dir, "base", "okayData"), []byte(contentOk)) + + fSys.WriteFile( + filepath.Join(dir, "exteriorData"), []byte(contentExteriorData)) + + os.Symlink( + filepath.Join(dir, "base", "okayData"), + filepath.Join(dir, "base", "symLinkToOkayData")) + os.Symlink( + filepath.Join(dir, "exteriorData"), + filepath.Join(dir, "base", "symLinkToExteriorData")) + return dir, fSys, nil +} + +// Make sure everything works when loading files +// in or below the loader root. +func doSanityChecksAndDropIntoBase( + t *testing.T, l ifc.Loader) ifc.Loader { + data, err := l.Load(path.Join("base", "okayData")) + if err != nil { + t.Fatalf("unexpected error: %v", err) + } + if string(data) != contentOk { + t.Fatalf("unexpected content: %v", data) + } + data, err = l.Load("exteriorData") + if err != nil { + t.Fatalf("unexpected error: %v", err) + } + if string(data) != contentExteriorData { + t.Fatalf("unexpected content: %v", data) + } + + // Drop in. + l, err = l.New("base") + if err != nil { + t.Fatalf("unexpected error: %v", err) + } + + // Reading okayData works. + data, err = l.Load("okayData") + if err != nil { + t.Fatalf("unexpected error: %v", err) + } + if string(data) != contentOk { + t.Fatalf("unexpected content: %v", data) + } + + // Reading local symlink to okayData works. + data, err = l.Load("symLinkToOkayData") + if err != nil { + t.Fatalf("unexpected error: %v", err) + } + if string(data) != contentOk { + t.Fatalf("unexpected content: %v", data) + } + return l +} + +func TestRestrictionRootOnlyInRealLoader(t *testing.T) { + dir, fSys, err := commonSetupForLoaderRestrictionTest() + if err != nil { + t.Fatalf("unexpected error: %v", err) + } + defer os.RemoveAll(dir) + + var l ifc.Loader + + l = newLoaderOrDie(RestrictionRootOnly, fSys, dir) + + l = doSanityChecksAndDropIntoBase(t, l) + + // Reading symlink to exteriorData fails. + _, err = l.Load("symLinkToExteriorData") + if err == nil { + t.Fatalf("expected error") + } + if !strings.Contains(err.Error(), "is not in or below") { + t.Fatalf("unexpected err: %v", err) + } + + // Attempt to read "up" fails, though earlier we were + // able to read this file when root was "..". + _, err = l.Load("../exteriorData") + if err == nil { + t.Fatalf("expected error") + } + if !strings.Contains(err.Error(), "is not in or below") { + t.Fatalf("unexpected err: %v", err) + } +} + +func TestRestrictionNoneInRealLoader(t *testing.T) { + dir, fSys, err := commonSetupForLoaderRestrictionTest() + if err != nil { + t.Fatalf("unexpected error: %v", err) + } + defer os.RemoveAll(dir) + + var l ifc.Loader + + l = newLoaderOrDie(RestrictionNone, fSys, dir) + + l = doSanityChecksAndDropIntoBase(t, l) + + // Reading symlink to exteriorData works. + _, err = l.Load("symLinkToExteriorData") + if err != nil { + t.Fatalf("unexpected error: %v", err) + } + + // Attempt to read "up" works. + _, err = l.Load("../exteriorData") + if err != nil { + t.Fatalf("unexpected error: %v", err) + } +} + +func splitOnNthSlash(v string, n int) (string, string) { + left := "" + for i := 0; i < n; i++ { + k := strings.Index(v, "/") + if k < 0 { + break + } + left = left + v[:k+1] + v = v[k+1:] + } + return left[:len(left)-1], v +} + +func TestSplit(t *testing.T) { + p := "a/b/c/d/e/f/g" + if left, right := splitOnNthSlash(p, 2); left != "a/b" || right != "c/d/e/f/g" { + t.Fatalf("got left='%s', right='%s'", left, right) + } + if left, right := splitOnNthSlash(p, 3); left != "a/b/c" || right != "d/e/f/g" { + t.Fatalf("got left='%s', right='%s'", left, right) + } + if left, right := splitOnNthSlash(p, 6); left != "a/b/c/d/e/f" || right != "g" { + t.Fatalf("got left='%s', right='%s'", left, right) + } +} + +func TestNewLoaderAtGitClone(t *testing.T) { + rootUrl := "github.com/someOrg/someRepo" + pathInRepo := "foo/base" + url := rootUrl + "/" + pathInRepo + coRoot := "/tmp" + fSys := filesys.MakeFsInMemory() + fSys.MkdirAll(coRoot) + fSys.MkdirAll(coRoot + "/" + pathInRepo) + fSys.WriteFile( + coRoot+"/"+pathInRepo+"/"+ + konfig.DefaultKustomizationFileName(), + []byte(` +whatever +`)) + + repoSpec, err := git.NewRepoSpecFromUrl(url) + if err != nil { + t.Fatalf("unexpected err: %v\n", err) + } + l, err := newLoaderAtGitClone( + repoSpec, fSys, nil, + git.DoNothingCloner(filesys.ConfirmedDir(coRoot))) + if err != nil { + t.Fatalf("unexpected err: %v\n", err) + } + if coRoot+"/"+pathInRepo != l.Root() { + t.Fatalf("expected root '%s', got '%s'\n", + coRoot+"/"+pathInRepo, l.Root()) + } + if _, err = l.New(url); err == nil { + t.Fatalf("expected cycle error 1") + } + if _, err = l.New(rootUrl + "/" + "foo"); err == nil { + t.Fatalf("expected cycle error 2") + } + + pathInRepo = "foo/overlay" + fSys.MkdirAll(coRoot + "/" + pathInRepo) + url = rootUrl + "/" + pathInRepo + l2, err := l.New(url) + if err != nil { + t.Fatalf("unexpected error: %v", err) + } + if coRoot+"/"+pathInRepo != l2.Root() { + t.Fatalf("expected root '%s', got '%s'\n", + coRoot+"/"+pathInRepo, l2.Root()) + } +} + +func TestLoaderDisallowsLocalBaseFromRemoteOverlay(t *testing.T) { + // Define an overlay-base structure in the file system. + topDir := "/whatever" + cloneRoot := topDir + "/someClone" + fSys := filesys.MakeFsInMemory() + fSys.MkdirAll(topDir + "/highBase") + fSys.MkdirAll(cloneRoot + "/foo/base") + fSys.MkdirAll(cloneRoot + "/foo/overlay") + + var l1 ifc.Loader + + // Establish that a local overlay can navigate + // to the local bases. + l1 = newLoaderOrDie( + RestrictionRootOnly, fSys, cloneRoot+"/foo/overlay") + if l1.Root() != cloneRoot+"/foo/overlay" { + t.Fatalf("unexpected root %s", l1.Root()) + } + l2, err := l1.New("../base") + if err != nil { + t.Fatalf("unexpected err: %v\n", err) + } + if l2.Root() != cloneRoot+"/foo/base" { + t.Fatalf("unexpected root %s", l2.Root()) + } + l3, err := l2.New("../../../highBase") + if err != nil { + t.Fatalf("unexpected err: %v\n", err) + } + if l3.Root() != topDir+"/highBase" { + t.Fatalf("unexpected root %s", l3.Root()) + } + + // Establish that a Kustomization found in cloned + // repo can reach (non-remote) bases inside the clone + // but cannot reach a (non-remote) base outside the + // clone but legitimately on the local file system. + // This is to avoid a surprising interaction between + // a remote K and local files. The remote K would be + // non-functional on its own since by definition it + // would refer to a non-remote base file that didn't + // exist in its own repository, so presumably the + // remote K would be deliberately designed to phish + // for local K's. + repoSpec, err := git.NewRepoSpecFromUrl( + "github.com/someOrg/someRepo/foo/overlay") + if err != nil { + t.Fatalf("unexpected err: %v\n", err) + } + l1, err = newLoaderAtGitClone( + repoSpec, fSys, nil, + git.DoNothingCloner(filesys.ConfirmedDir(cloneRoot))) + if err != nil { + t.Fatalf("unexpected err: %v\n", err) + } + if l1.Root() != cloneRoot+"/foo/overlay" { + t.Fatalf("unexpected root %s", l1.Root()) + } + // This is okay. + l2, err = l1.New("../base") + if err != nil { + t.Fatalf("unexpected err: %v\n", err) + } + if l2.Root() != cloneRoot+"/foo/base" { + t.Fatalf("unexpected root %s", l2.Root()) + } + // This is not okay. + _, err = l2.New("../../../highBase") + if err == nil { + t.Fatalf("expected err") + } + if !strings.Contains(err.Error(), + "base '/whatever/highBase' is outside '/whatever/someClone'") { + t.Fatalf("unexpected err: %v", err) + } +} + +func TestLocalLoaderReferencingGitBase(t *testing.T) { + topDir := "/whatever" + cloneRoot := topDir + "/someClone" + fSys := filesys.MakeFsInMemory() + fSys.MkdirAll(topDir) + fSys.MkdirAll(cloneRoot + "/foo/base") + + root, err := demandDirectoryRoot(fSys, topDir) + if err != nil { + t.Fatalf("unexpected err: %v\n", err) + } + l1 := newLoaderAtConfirmedDir( + RestrictionRootOnly, root, fSys, nil, + git.DoNothingCloner(filesys.ConfirmedDir(cloneRoot))) + if l1.Root() != topDir { + t.Fatalf("unexpected root %s", l1.Root()) + } + l2, err := l1.New("github.com/someOrg/someRepo/foo/base") + if err != nil { + t.Fatalf("unexpected err: %v\n", err) + } + if l2.Root() != cloneRoot+"/foo/base" { + t.Fatalf("unexpected root %s", l2.Root()) + } +} + +func TestRepoDirectCycleDetection(t *testing.T) { + topDir := "/cycles" + cloneRoot := topDir + "/someClone" + fSys := filesys.MakeFsInMemory() + fSys.MkdirAll(topDir) + fSys.MkdirAll(cloneRoot) + + root, err := demandDirectoryRoot(fSys, topDir) + if err != nil { + t.Fatalf("unexpected err: %v\n", err) + } + l1 := newLoaderAtConfirmedDir( + RestrictionRootOnly, root, fSys, nil, + git.DoNothingCloner(filesys.ConfirmedDir(cloneRoot))) + p1 := "github.com/someOrg/someRepo/foo" + rs1, err := git.NewRepoSpecFromUrl(p1) + if err != nil { + t.Fatalf("unexpected err: %v", err) + } + l1.repoSpec = rs1 + _, err = l1.New(p1) + if err == nil { + t.Fatalf("expected error") + } + if !strings.Contains(err.Error(), "cycle detected") { + t.Fatalf("unexpected err: %v", err) + } +} + +func TestRepoIndirectCycleDetection(t *testing.T) { + topDir := "/cycles" + cloneRoot := topDir + "/someClone" + fSys := filesys.MakeFsInMemory() + fSys.MkdirAll(topDir) + fSys.MkdirAll(cloneRoot) + + root, err := demandDirectoryRoot(fSys, topDir) + if err != nil { + t.Fatalf("unexpected err: %v", err) + } + l0 := newLoaderAtConfirmedDir( + RestrictionRootOnly, root, fSys, nil, + git.DoNothingCloner(filesys.ConfirmedDir(cloneRoot))) + + p1 := "github.com/someOrg/someRepo1" + p2 := "github.com/someOrg/someRepo2" + + l1, err := l0.New(p1) + if err != nil { + t.Fatalf("unexpected err: %v", err) + } + l2, err := l1.New(p2) + if err != nil { + t.Fatalf("unexpected err: %v", err) + } + _, err = l2.New(p1) + if err == nil { + t.Fatalf("expected error") + } + if !strings.Contains(err.Error(), "cycle detected") { + t.Fatalf("unexpected err: %v", err) + } +} + +// Inspired by https://hassansin.github.io/Unit-Testing-http-client-in-Go +type fakeRoundTripper func(req *http.Request) *http.Response + +func (f fakeRoundTripper) RoundTrip(req *http.Request) (*http.Response, error) { + return f(req), nil +} + +func makeFakeHTTPClient(fn fakeRoundTripper) *http.Client { + return &http.Client{ + Transport: fn, + } +} + +// TestLoaderHTTP test http file loader +func TestLoaderHTTP(t *testing.T) { + var testCasesFile = []testData{ + { + path: "http/file.yaml", + expectedContent: "file content", + }, + } + + l1 := NewFileLoaderAtRoot(MakeFakeFs(testCasesFile)) + if "/" != l1.Root() { + t.Fatalf("incorrect root: '%s'\n", l1.Root()) + } + for _, x := range testCasesFile { + b, err := l1.Load(x.path) + if err != nil { + t.Fatalf("unexpected load error: %v", err) + } + if !reflect.DeepEqual([]byte(x.expectedContent), b) { + t.Fatalf("in load expected %s, but got %s", x.expectedContent, b) + } + } + + var testCasesHTTP = []testData{ + { + path: "http://example.com/resource.yaml", + expectedContent: "http content", + }, + { + path: "https://example.com/resource.yaml", + expectedContent: "https content", + }, + } + + for _, x := range testCasesHTTP { + hc := makeFakeHTTPClient(func(req *http.Request) *http.Response { + u := req.URL.String() + if x.path != u { + t.Fatalf("expected URL %s, but got %s", x.path, u) + } + return &http.Response{ + StatusCode: 200, + Body: ioutil.NopCloser(bytes.NewBufferString(x.expectedContent)), + Header: make(http.Header), + } + }) + l2 := l1 + l2.http = hc + b, err := l2.Load(x.path) + if err != nil { + t.Fatalf("unexpected load error: %v", err) + } + if !reflect.DeepEqual([]byte(x.expectedContent), b) { + t.Fatalf("in load expected %s, but got %s", x.expectedContent, b) + } + } + + var testCaseUnsupported = []testData{ + { + path: "httpsnotreal://example.com/resource.yaml", + expectedContent: "invalid", + }, + } + for _, x := range testCaseUnsupported { + hc := makeFakeHTTPClient(func(req *http.Request) *http.Response { + t.Fatalf("unexpected request to URL %s", req.URL.String()) + return nil + }) + l2 := l1 + l2.http = hc + _, err := l2.Load(x.path) + if err == nil { + t.Fatalf("expect error but get %v", err) + } + } +} diff --git a/go/internal/forked/api/loader/fileloader_test.go b/go/internal/forked/api/loader/fileloader_test.go new file mode 100644 index 000000000..0e42e1781 --- /dev/null +++ b/go/internal/forked/api/loader/fileloader_test.go @@ -0,0 +1,673 @@ +/// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package loader + +import ( + "bytes" + "io/ioutil" + "net/http" + "os" + "path" + "path/filepath" + "reflect" + "strings" + "testing" + + "sigs.k8s.io/kustomize/api/ifc" + "sigs.k8s.io/kustomize/api/internal/git" + "sigs.k8s.io/kustomize/api/konfig" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/filesys" +) + +type testData struct { + path string + expectedContent string +} + +var testCases = []testData{ + { + path: "foo/project/fileA.yaml", + expectedContent: "fileA content", + }, + { + path: "foo/project/subdir1/fileB.yaml", + expectedContent: "fileB content", + }, + { + path: "foo/project/subdir2/fileC.yaml", + expectedContent: "fileC content", + }, + { + path: "foo/project/fileD.yaml", + expectedContent: "fileD content", + }, +} + +func MakeFakeFs(td []testData) filesys.FileSystem { + fSys := filesys.MakeFsInMemory() + for _, x := range td { + fSys.WriteFile(x.path, []byte(x.expectedContent)) + } + return fSys +} + +func makeLoader() *fileLoader { + return NewFileLoaderAtRoot(MakeFakeFs(testCases)) +} + +func TestLoaderLoad(t *testing.T) { + l1 := makeLoader() + if "/" != l1.Root() { + t.Fatalf("incorrect root: '%s'\n", l1.Root()) + } + for _, x := range testCases { + b, err := l1.Load(x.path) + if err != nil { + t.Fatalf("unexpected load error: %v", err) + } + if !reflect.DeepEqual([]byte(x.expectedContent), b) { + t.Fatalf("in load expected %s, but got %s", x.expectedContent, b) + } + } + l2, err := l1.New("foo/project") + if err != nil { + t.Fatalf("unexpected err: %v\n", err) + } + if "/foo/project" != l2.Root() { + t.Fatalf("incorrect root: %s\n", l2.Root()) + } + for _, x := range testCases { + b, err := l2.Load(strings.TrimPrefix(x.path, "foo/project/")) + if err != nil { + t.Fatalf("unexpected load error %v", err) + } + if !reflect.DeepEqual([]byte(x.expectedContent), b) { + t.Fatalf("in load expected %s, but got %s", x.expectedContent, b) + } + } + l2, err = l1.New("foo/project/") // Assure trailing slash stripped + if err != nil { + t.Fatalf("unexpected err: %v\n", err) + } + if "/foo/project" != l2.Root() { + t.Fatalf("incorrect root: %s\n", l2.Root()) + } +} + +func TestLoaderNewSubDir(t *testing.T) { + l1, err := makeLoader().New("foo/project") + if err != nil { + t.Fatalf("unexpected err: %v\n", err) + } + l2, err := l1.New("subdir1") + if err != nil { + t.Fatalf("unexpected err: %v\n", err) + } + if "/foo/project/subdir1" != l2.Root() { + t.Fatalf("incorrect root: %s\n", l2.Root()) + } + x := testCases[1] + b, err := l2.Load("fileB.yaml") + if err != nil { + t.Fatalf("unexpected load error %v", err) + } + if !reflect.DeepEqual([]byte(x.expectedContent), b) { + t.Fatalf("in load expected %s, but got %s", x.expectedContent, b) + } +} + +func TestLoaderBadRelative(t *testing.T) { + l1, err := makeLoader().New("foo/project/subdir1") + if err != nil { + t.Fatalf("unexpected err: %v\n", err) + } + if "/foo/project/subdir1" != l1.Root() { + t.Fatalf("incorrect root: %s\n", l1.Root()) + } + + // Cannot cd into a file. + l2, err := l1.New("fileB.yaml") + if err == nil { + t.Fatalf("expected err, but got root %s", l2.Root()) + } + + // It's not okay to stay at the same place. + l2, err = l1.New(filesys.SelfDir) + if err == nil { + t.Fatalf("expected err, but got root %s", l2.Root()) + } + + // It's not okay to go up and back down into same place. + l2, err = l1.New("../subdir1") + if err == nil { + t.Fatalf("expected err, but got root %s", l2.Root()) + } + + // It's not okay to go up via a relative path. + l2, err = l1.New("..") + if err == nil { + t.Fatalf("expected err, but got root %s", l2.Root()) + } + + // It's not okay to go up via an absolute path. + l2, err = l1.New("/foo/project") + if err == nil { + t.Fatalf("expected err, but got root %s", l2.Root()) + } + + // It's not okay to go to the root. + l2, err = l1.New("/") + if err == nil { + t.Fatalf("expected err, but got root %s", l2.Root()) + } + + // It's okay to go up and down to a sibling. + l2, err = l1.New("../subdir2") + if err != nil { + t.Fatalf("unexpected new error %v", err) + } + if "/foo/project/subdir2" != l2.Root() { + t.Fatalf("incorrect root: %s\n", l2.Root()) + } + x := testCases[2] + b, err := l2.Load("fileC.yaml") + if err != nil { + t.Fatalf("unexpected load error %v", err) + } + if !reflect.DeepEqual([]byte(x.expectedContent), b) { + t.Fatalf("in load expected %s, but got %s", x.expectedContent, b) + } + + // It's not OK to go over to a previously visited directory. + // Must disallow going back and forth in a cycle. + l1, err = l2.New("../subdir1") + if err == nil { + t.Fatalf("expected err, but got root %s", l1.Root()) + } +} + +func TestLoaderMisc(t *testing.T) { + l := makeLoader() + _, err := l.New("") + if err == nil { + t.Fatalf("Expected error for empty root location not returned") + } + _, err = l.New("https://google.com/project") + if err == nil { + t.Fatalf("Expected error") + } +} + +const ( + contentOk = "hi there, i'm OK data" + contentExteriorData = "i am data from outside the root" +) + +// Create a structure like this +// +// /tmp/kustomize-test-random +// ├── base +// │ ├── okayData +// │ ├── symLinkToOkayData -> okayData +// │ └── symLinkToExteriorData -> ../exteriorData +// └── exteriorData +// +func commonSetupForLoaderRestrictionTest() (string, filesys.FileSystem, error) { + dir, err := ioutil.TempDir("", "kustomize-test-") + if err != nil { + return "", nil, err + } + fSys := filesys.MakeFsOnDisk() + fSys.Mkdir(filepath.Join(dir, "base")) + + fSys.WriteFile( + filepath.Join(dir, "base", "okayData"), []byte(contentOk)) + + fSys.WriteFile( + filepath.Join(dir, "exteriorData"), []byte(contentExteriorData)) + + os.Symlink( + filepath.Join(dir, "base", "okayData"), + filepath.Join(dir, "base", "symLinkToOkayData")) + os.Symlink( + filepath.Join(dir, "exteriorData"), + filepath.Join(dir, "base", "symLinkToExteriorData")) + return dir, fSys, nil +} + +// Make sure everything works when loading files +// in or below the loader root. +func doSanityChecksAndDropIntoBase( + t *testing.T, l ifc.Loader) ifc.Loader { + data, err := l.Load(path.Join("base", "okayData")) + if err != nil { + t.Fatalf("unexpected error: %v", err) + } + if string(data) != contentOk { + t.Fatalf("unexpected content: %v", data) + } + data, err = l.Load("exteriorData") + if err != nil { + t.Fatalf("unexpected error: %v", err) + } + if string(data) != contentExteriorData { + t.Fatalf("unexpected content: %v", data) + } + + // Drop in. + l, err = l.New("base") + if err != nil { + t.Fatalf("unexpected error: %v", err) + } + + // Reading okayData works. + data, err = l.Load("okayData") + if err != nil { + t.Fatalf("unexpected error: %v", err) + } + if string(data) != contentOk { + t.Fatalf("unexpected content: %v", data) + } + + // Reading local symlink to okayData works. + data, err = l.Load("symLinkToOkayData") + if err != nil { + t.Fatalf("unexpected error: %v", err) + } + if string(data) != contentOk { + t.Fatalf("unexpected content: %v", data) + } + return l +} + +func TestRestrictionRootOnlyInRealLoader(t *testing.T) { + dir, fSys, err := commonSetupForLoaderRestrictionTest() + if err != nil { + t.Fatalf("unexpected error: %v", err) + } + defer os.RemoveAll(dir) + + var l ifc.Loader + + l = newLoaderOrDie(RestrictionRootOnly, fSys, dir) + + l = doSanityChecksAndDropIntoBase(t, l) + + // Reading symlink to exteriorData fails. + _, err = l.Load("symLinkToExteriorData") + if err == nil { + t.Fatalf("expected error") + } + if !strings.Contains(err.Error(), "is not in or below") { + t.Fatalf("unexpected err: %v", err) + } + + // Attempt to read "up" fails, though earlier we were + // able to read this file when root was "..". + _, err = l.Load("../exteriorData") + if err == nil { + t.Fatalf("expected error") + } + if !strings.Contains(err.Error(), "is not in or below") { + t.Fatalf("unexpected err: %v", err) + } +} + +func TestRestrictionNoneInRealLoader(t *testing.T) { + dir, fSys, err := commonSetupForLoaderRestrictionTest() + if err != nil { + t.Fatalf("unexpected error: %v", err) + } + defer os.RemoveAll(dir) + + var l ifc.Loader + + l = newLoaderOrDie(RestrictionNone, fSys, dir) + + l = doSanityChecksAndDropIntoBase(t, l) + + // Reading symlink to exteriorData works. + _, err = l.Load("symLinkToExteriorData") + if err != nil { + t.Fatalf("unexpected error: %v", err) + } + + // Attempt to read "up" works. + _, err = l.Load("../exteriorData") + if err != nil { + t.Fatalf("unexpected error: %v", err) + } +} + +func splitOnNthSlash(v string, n int) (string, string) { + left := "" + for i := 0; i < n; i++ { + k := strings.Index(v, "/") + if k < 0 { + break + } + left = left + v[:k+1] + v = v[k+1:] + } + return left[:len(left)-1], v +} + +func TestSplit(t *testing.T) { + p := "a/b/c/d/e/f/g" + if left, right := splitOnNthSlash(p, 2); left != "a/b" || right != "c/d/e/f/g" { + t.Fatalf("got left='%s', right='%s'", left, right) + } + if left, right := splitOnNthSlash(p, 3); left != "a/b/c" || right != "d/e/f/g" { + t.Fatalf("got left='%s', right='%s'", left, right) + } + if left, right := splitOnNthSlash(p, 6); left != "a/b/c/d/e/f" || right != "g" { + t.Fatalf("got left='%s', right='%s'", left, right) + } +} + +func TestNewLoaderAtGitClone(t *testing.T) { + rootUrl := "github.com/someOrg/someRepo" + pathInRepo := "foo/base" + url := rootUrl + "/" + pathInRepo + coRoot := "/tmp" + fSys := filesys.MakeFsInMemory() + fSys.MkdirAll(coRoot) + fSys.MkdirAll(coRoot + "/" + pathInRepo) + fSys.WriteFile( + coRoot+"/"+pathInRepo+"/"+ + konfig.DefaultKustomizationFileName(), + []byte(` +whatever +`)) + + repoSpec, err := git.NewRepoSpecFromUrl(url) + if err != nil { + t.Fatalf("unexpected err: %v\n", err) + } + l, err := newLoaderAtGitClone( + repoSpec, fSys, nil, + git.DoNothingCloner(filesys.ConfirmedDir(coRoot))) + if err != nil { + t.Fatalf("unexpected err: %v\n", err) + } + if coRoot+"/"+pathInRepo != l.Root() { + t.Fatalf("expected root '%s', got '%s'\n", + coRoot+"/"+pathInRepo, l.Root()) + } + if _, err = l.New(url); err == nil { + t.Fatalf("expected cycle error 1") + } + if _, err = l.New(rootUrl + "/" + "foo"); err == nil { + t.Fatalf("expected cycle error 2") + } + + pathInRepo = "foo/overlay" + fSys.MkdirAll(coRoot + "/" + pathInRepo) + url = rootUrl + "/" + pathInRepo + l2, err := l.New(url) + if err != nil { + t.Fatalf("unexpected error: %v", err) + } + if coRoot+"/"+pathInRepo != l2.Root() { + t.Fatalf("expected root '%s', got '%s'\n", + coRoot+"/"+pathInRepo, l2.Root()) + } +} + +func TestLoaderDisallowsLocalBaseFromRemoteOverlay(t *testing.T) { + // Define an overlay-base structure in the file system. + topDir := "/whatever" + cloneRoot := topDir + "/someClone" + fSys := filesys.MakeFsInMemory() + fSys.MkdirAll(topDir + "/highBase") + fSys.MkdirAll(cloneRoot + "/foo/base") + fSys.MkdirAll(cloneRoot + "/foo/overlay") + + var l1 ifc.Loader + + // Establish that a local overlay can navigate + // to the local bases. + l1 = newLoaderOrDie( + RestrictionRootOnly, fSys, cloneRoot+"/foo/overlay") + if l1.Root() != cloneRoot+"/foo/overlay" { + t.Fatalf("unexpected root %s", l1.Root()) + } + l2, err := l1.New("../base") + if err != nil { + t.Fatalf("unexpected err: %v\n", err) + } + if l2.Root() != cloneRoot+"/foo/base" { + t.Fatalf("unexpected root %s", l2.Root()) + } + l3, err := l2.New("../../../highBase") + if err != nil { + t.Fatalf("unexpected err: %v\n", err) + } + if l3.Root() != topDir+"/highBase" { + t.Fatalf("unexpected root %s", l3.Root()) + } + + // Establish that a Kustomization found in cloned + // repo can reach (non-remote) bases inside the clone + // but cannot reach a (non-remote) base outside the + // clone but legitimately on the local file system. + // This is to avoid a surprising interaction between + // a remote K and local files. The remote K would be + // non-functional on its own since by definition it + // would refer to a non-remote base file that didn't + // exist in its own repository, so presumably the + // remote K would be deliberately designed to phish + // for local K's. + repoSpec, err := git.NewRepoSpecFromUrl( + "github.com/someOrg/someRepo/foo/overlay") + if err != nil { + t.Fatalf("unexpected err: %v\n", err) + } + l1, err = newLoaderAtGitClone( + repoSpec, fSys, nil, + git.DoNothingCloner(filesys.ConfirmedDir(cloneRoot))) + if err != nil { + t.Fatalf("unexpected err: %v\n", err) + } + if l1.Root() != cloneRoot+"/foo/overlay" { + t.Fatalf("unexpected root %s", l1.Root()) + } + // This is okay. + l2, err = l1.New("../base") + if err != nil { + t.Fatalf("unexpected err: %v\n", err) + } + if l2.Root() != cloneRoot+"/foo/base" { + t.Fatalf("unexpected root %s", l2.Root()) + } + // This is not okay. + _, err = l2.New("../../../highBase") + if err == nil { + t.Fatalf("expected err") + } + if !strings.Contains(err.Error(), + "base '/whatever/highBase' is outside '/whatever/someClone'") { + t.Fatalf("unexpected err: %v", err) + } +} + +func TestLocalLoaderReferencingGitBase(t *testing.T) { + topDir := "/whatever" + cloneRoot := topDir + "/someClone" + fSys := filesys.MakeFsInMemory() + fSys.MkdirAll(topDir) + fSys.MkdirAll(cloneRoot + "/foo/base") + + root, err := demandDirectoryRoot(fSys, topDir) + if err != nil { + t.Fatalf("unexpected err: %v\n", err) + } + l1 := newLoaderAtConfirmedDir( + RestrictionRootOnly, root, fSys, nil, + git.DoNothingCloner(filesys.ConfirmedDir(cloneRoot))) + if l1.Root() != topDir { + t.Fatalf("unexpected root %s", l1.Root()) + } + l2, err := l1.New("github.com/someOrg/someRepo/foo/base") + if err != nil { + t.Fatalf("unexpected err: %v\n", err) + } + if l2.Root() != cloneRoot+"/foo/base" { + t.Fatalf("unexpected root %s", l2.Root()) + } +} + +func TestRepoDirectCycleDetection(t *testing.T) { + topDir := "/cycles" + cloneRoot := topDir + "/someClone" + fSys := filesys.MakeFsInMemory() + fSys.MkdirAll(topDir) + fSys.MkdirAll(cloneRoot) + + root, err := demandDirectoryRoot(fSys, topDir) + if err != nil { + t.Fatalf("unexpected err: %v\n", err) + } + l1 := newLoaderAtConfirmedDir( + RestrictionRootOnly, root, fSys, nil, + git.DoNothingCloner(filesys.ConfirmedDir(cloneRoot))) + p1 := "github.com/someOrg/someRepo/foo" + rs1, err := git.NewRepoSpecFromUrl(p1) + if err != nil { + t.Fatalf("unexpected err: %v", err) + } + l1.repoSpec = rs1 + _, err = l1.New(p1) + if err == nil { + t.Fatalf("expected error") + } + if !strings.Contains(err.Error(), "cycle detected") { + t.Fatalf("unexpected err: %v", err) + } +} + +func TestRepoIndirectCycleDetection(t *testing.T) { + topDir := "/cycles" + cloneRoot := topDir + "/someClone" + fSys := filesys.MakeFsInMemory() + fSys.MkdirAll(topDir) + fSys.MkdirAll(cloneRoot) + + root, err := demandDirectoryRoot(fSys, topDir) + if err != nil { + t.Fatalf("unexpected err: %v", err) + } + l0 := newLoaderAtConfirmedDir( + RestrictionRootOnly, root, fSys, nil, + git.DoNothingCloner(filesys.ConfirmedDir(cloneRoot))) + + p1 := "github.com/someOrg/someRepo1" + p2 := "github.com/someOrg/someRepo2" + + l1, err := l0.New(p1) + if err != nil { + t.Fatalf("unexpected err: %v", err) + } + l2, err := l1.New(p2) + if err != nil { + t.Fatalf("unexpected err: %v", err) + } + _, err = l2.New(p1) + if err == nil { + t.Fatalf("expected error") + } + if !strings.Contains(err.Error(), "cycle detected") { + t.Fatalf("unexpected err: %v", err) + } +} + +// Inspired by https://hassansin.github.io/Unit-Testing-http-client-in-Go +type fakeRoundTripper func(req *http.Request) *http.Response + +func (f fakeRoundTripper) RoundTrip(req *http.Request) (*http.Response, error) { + return f(req), nil +} + +func makeFakeHTTPClient(fn fakeRoundTripper) *http.Client { + return &http.Client{ + Transport: fn, + } +} + +// TestLoaderHTTP test http file loader +func TestLoaderHTTP(t *testing.T) { + var testCasesFile = []testData{ + { + path: "http/file.yaml", + expectedContent: "file content", + }, + } + + l1 := NewFileLoaderAtRoot(MakeFakeFs(testCasesFile)) + if "/" != l1.Root() { + t.Fatalf("incorrect root: '%s'\n", l1.Root()) + } + for _, x := range testCasesFile { + b, err := l1.Load(x.path) + if err != nil { + t.Fatalf("unexpected load error: %v", err) + } + if !reflect.DeepEqual([]byte(x.expectedContent), b) { + t.Fatalf("in load expected %s, but got %s", x.expectedContent, b) + } + } + + var testCasesHTTP = []testData{ + { + path: "http://example.com/resource.yaml", + expectedContent: "http content", + }, + { + path: "https://example.com/resource.yaml", + expectedContent: "https content", + }, + } + + for _, x := range testCasesHTTP { + hc := makeFakeHTTPClient(func(req *http.Request) *http.Response { + u := req.URL.String() + if x.path != u { + t.Fatalf("expected URL %s, but got %s", x.path, u) + } + return &http.Response{ + StatusCode: 200, + Body: ioutil.NopCloser(bytes.NewBufferString(x.expectedContent)), + Header: make(http.Header), + } + }) + l2 := l1 + l2.http = hc + b, err := l2.Load(x.path) + if err != nil { + t.Fatalf("unexpected load error: %v", err) + } + if !reflect.DeepEqual([]byte(x.expectedContent), b) { + t.Fatalf("in load expected %s, but got %s", x.expectedContent, b) + } + } + + var testCaseUnsupported = []testData{ + { + path: "httpsnotreal://example.com/resource.yaml", + expectedContent: "invalid", + }, + } + for _, x := range testCaseUnsupported { + hc := makeFakeHTTPClient(func(req *http.Request) *http.Response { + t.Fatalf("unexpected request to URL %s", req.URL.String()) + return nil + }) + l2 := l1 + l2.http = hc + _, err := l2.Load(x.path) + if err == nil { + t.Fatalf("expect error but get %v", err) + } + } +} diff --git a/go/internal/forked/api/loader/loader.go b/go/internal/forked/api/loader/loader.go new file mode 100644 index 000000000..01fc91877 --- /dev/null +++ b/go/internal/forked/api/loader/loader.go @@ -0,0 +1,34 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +// Package loader has a data loading interface and various implementations. +package loader + +import ( + "sigs.k8s.io/kustomize/api/ifc" + "sigs.k8s.io/kustomize/api/internal/git" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/filesys" +) + +// NewLoader returns a Loader pointed at the given target. +// If the target is remote, the loader will be restricted +// to the root and below only. If the target is local, the +// loader will have the restrictions passed in. Regardless, +// if a local target attempts to transitively load remote bases, +// the remote bases will all be root-only restricted. +func NewLoader( + lr LoadRestrictorFunc, + target string, fSys filesys.FileSystem) (ifc.Loader, error) { + repoSpec, err := git.NewRepoSpecFromUrl(target) + if err == nil { + // The target qualifies as a remote git target. + return newLoaderAtGitClone( + repoSpec, fSys, nil, git.ClonerUsingGitExec) + } + root, err := demandDirectoryRoot(fSys, target) + if err != nil { + return nil, err + } + return newLoaderAtConfirmedDir( + lr, root, fSys, nil, git.ClonerUsingGitExec), nil +} diff --git a/go/internal/forked/api/loader/loader.go b/go/internal/forked/api/loader/loader.go new file mode 100644 index 000000000..d9347426c --- /dev/null +++ b/go/internal/forked/api/loader/loader.go @@ -0,0 +1,34 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +// Package loader has a data loading interface and various implementations. +package loader + +import ( + "sigs.k8s.io/kustomize/api/ifc" + "sigs.k8s.io/kustomize/api/internal/git" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/filesys" +) + +// NewLoader returns a Loader pointed at the given target. +// If the target is remote, the loader will be restricted +// to the root and below only. If the target is local, the +// loader will have the restrictions passed in. Regardless, +// if a local target attempts to transitively load remote bases, +// the remote bases will all be root-only restricted. +func NewLoader( + lr LoadRestrictorFunc, + target string, fSys filesys.FileSystem) (ifc.Loader, error) { + repoSpec, err := git.NewRepoSpecFromUrl(target) + if err == nil { + // The target qualifies as a remote git target. + return newLoaderAtGitClone( + repoSpec, fSys, nil, git.ClonerUsingGitExec) + } + root, err := demandDirectoryRoot(fSys, target) + if err != nil { + return nil, err + } + return newLoaderAtConfirmedDir( + lr, root, fSys, nil, git.ClonerUsingGitExec), nil +} diff --git a/go/internal/forked/api/loader/loadrestrictions.go b/go/internal/forked/api/loader/loadrestrictions.go new file mode 100644 index 000000000..5710738b7 --- /dev/null +++ b/go/internal/forked/api/loader/loadrestrictions.go @@ -0,0 +1,35 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package loader + +import ( + "fmt" + + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/filesys" +) + +type LoadRestrictorFunc func( + filesys.FileSystem, filesys.ConfirmedDir, string) (string, error) + +func RestrictionRootOnly( + fSys filesys.FileSystem, root filesys.ConfirmedDir, path string) (string, error) { + d, f, err := fSys.CleanedAbs(path) + if err != nil { + return "", err + } + if f == "" { + return "", fmt.Errorf("'%s' must resolve to a file", path) + } + if !d.HasPrefix(root) { + return "", fmt.Errorf( + "security; file '%s' is not in or below '%s'", + path, root) + } + return d.Join(f), nil +} + +func RestrictionNone( + _ filesys.FileSystem, _ filesys.ConfirmedDir, path string) (string, error) { + return path, nil +} diff --git a/go/internal/forked/api/loader/loadrestrictions.go b/go/internal/forked/api/loader/loadrestrictions.go new file mode 100644 index 000000000..23a515f72 --- /dev/null +++ b/go/internal/forked/api/loader/loadrestrictions.go @@ -0,0 +1,35 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package loader + +import ( + "fmt" + + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/filesys" +) + +type LoadRestrictorFunc func( + filesys.FileSystem, filesys.ConfirmedDir, string) (string, error) + +func RestrictionRootOnly( + fSys filesys.FileSystem, root filesys.ConfirmedDir, path string) (string, error) { + d, f, err := fSys.CleanedAbs(path) + if err != nil { + return "", err + } + if f == "" { + return "", fmt.Errorf("'%s' must resolve to a file", path) + } + if !d.HasPrefix(root) { + return "", fmt.Errorf( + "security; file '%s' is not in or below '%s'", + path, root) + } + return d.Join(f), nil +} + +func RestrictionNone( + _ filesys.FileSystem, _ filesys.ConfirmedDir, path string) (string, error) { + return path, nil +} diff --git a/go/internal/forked/api/loader/loadrestrictions_test.go b/go/internal/forked/api/loader/loadrestrictions_test.go new file mode 100644 index 000000000..3b89bd45d --- /dev/null +++ b/go/internal/forked/api/loader/loadrestrictions_test.go @@ -0,0 +1,67 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package loader + +import ( + "path/filepath" + "strings" + "testing" + + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/filesys" +) + +func TestRestrictionNone(t *testing.T) { + fSys := filesys.MakeFsInMemory() + root := filesys.ConfirmedDir("irrelevant") + path := "whatever" + p, err := RestrictionNone(fSys, root, path) + if err != nil { + t.Fatal(err) + } + if p != path { + t.Fatalf("expected '%s', got '%s'", path, p) + } +} + +func TestRestrictionRootOnly(t *testing.T) { + fSys := filesys.MakeFsInMemory() + root := filesys.ConfirmedDir( + filesys.Separator + filepath.Join("tmp", "foo")) + path := filepath.Join(string(root), "whatever", "beans") + + fSys.Create(path) + p, err := RestrictionRootOnly(fSys, root, path) + if err != nil { + t.Fatal(err) + } + if p != path { + t.Fatalf("expected '%s', got '%s'", path, p) + } + + // Legal. + path = filepath.Join( + string(root), "whatever", "..", "..", "foo", "whatever", "beans") + p, err = RestrictionRootOnly(fSys, root, path) + if err != nil { + t.Fatal(err) + } + path = filepath.Join( + string(root), "whatever", "beans") + if p != path { + t.Fatalf("expected '%s', got '%s'", path, p) + } + + // Illegal; file exists but is out of bounds. + path = filepath.Join(filesys.Separator+"tmp", "illegal") + fSys.Create(path) + _, err = RestrictionRootOnly(fSys, root, path) + if err == nil { + t.Fatal("should have an error") + } + if !strings.Contains( + err.Error(), + "file '/tmp/illegal' is not in or below '/tmp/foo'") { + t.Fatalf("unexpected err: %s", err) + } +} diff --git a/go/internal/forked/api/loader/loadrestrictions_test.go b/go/internal/forked/api/loader/loadrestrictions_test.go new file mode 100644 index 000000000..8621b23c0 --- /dev/null +++ b/go/internal/forked/api/loader/loadrestrictions_test.go @@ -0,0 +1,67 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package loader + +import ( + "path/filepath" + "strings" + "testing" + + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/filesys" +) + +func TestRestrictionNone(t *testing.T) { + fSys := filesys.MakeFsInMemory() + root := filesys.ConfirmedDir("irrelevant") + path := "whatever" + p, err := RestrictionNone(fSys, root, path) + if err != nil { + t.Fatal(err) + } + if p != path { + t.Fatalf("expected '%s', got '%s'", path, p) + } +} + +func TestRestrictionRootOnly(t *testing.T) { + fSys := filesys.MakeFsInMemory() + root := filesys.ConfirmedDir( + filesys.Separator + filepath.Join("tmp", "foo")) + path := filepath.Join(string(root), "whatever", "beans") + + fSys.Create(path) + p, err := RestrictionRootOnly(fSys, root, path) + if err != nil { + t.Fatal(err) + } + if p != path { + t.Fatalf("expected '%s', got '%s'", path, p) + } + + // Legal. + path = filepath.Join( + string(root), "whatever", "..", "..", "foo", "whatever", "beans") + p, err = RestrictionRootOnly(fSys, root, path) + if err != nil { + t.Fatal(err) + } + path = filepath.Join( + string(root), "whatever", "beans") + if p != path { + t.Fatalf("expected '%s', got '%s'", path, p) + } + + // Illegal; file exists but is out of bounds. + path = filepath.Join(filesys.Separator+"tmp", "illegal") + fSys.Create(path) + _, err = RestrictionRootOnly(fSys, root, path) + if err == nil { + t.Fatal("should have an error") + } + if !strings.Contains( + err.Error(), + "file '/tmp/illegal' is not in or below '/tmp/foo'") { + t.Fatalf("unexpected err: %s", err) + } +} diff --git a/go/internal/forked/api/main.go b/go/internal/forked/api/main.go new file mode 100644 index 000000000..ba84e6f5d --- /dev/null +++ b/go/internal/forked/api/main.go @@ -0,0 +1,20 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +// A dummy main to help with releasing the kustomize API module. +package main + +import ( + "fmt" + + "sigs.k8s.io/kustomize/api/provenance" +) + +// TODO: delete this when we find a better way to generate release notes. +func main() { + fmt.Println(` +This 'main' exists only to make goreleaser create release notes for the API. +See https://github.com/goreleaser/goreleaser/issues/981 +and https://github.com/kubernetes-sigs/kustomize/tree/master/releasing`) + fmt.Println(provenance.GetProvenance()) +} diff --git a/go/internal/forked/api/provenance/provenance.go b/go/internal/forked/api/provenance/provenance.go new file mode 100644 index 000000000..4ad40395a --- /dev/null +++ b/go/internal/forked/api/provenance/provenance.go @@ -0,0 +1,68 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package provenance + +import ( + "fmt" + "runtime" + "strings" +) + +var ( + version = "unknown" + // sha1 from git, output of $(git rev-parse HEAD) + gitCommit = "$Format:%H$" + // build date in ISO8601 format, output of $(date -u +'%Y-%m-%dT%H:%M:%SZ') + buildDate = "1970-01-01T00:00:00Z" + goos = runtime.GOOS + goarch = runtime.GOARCH +) + +// Provenance holds information about the build of an executable. +type Provenance struct { + // Version of the kustomize binary. + Version string `json:"version,omitempty"` + // GitCommit is a git commit + GitCommit string `json:"gitCommit,omitempty"` + // BuildDate is date of the build. + BuildDate string `json:"buildDate,omitempty"` + // GoOs holds OS name. + GoOs string `json:"goOs,omitempty"` + // GoArch holds architecture name. + GoArch string `json:"goArch,omitempty"` +} + +// GetProvenance returns an instance of Provenance. +func GetProvenance() Provenance { + return Provenance{ + version, + gitCommit, + buildDate, + goos, + goarch, + } +} + +// Full returns the full provenance stamp. +func (v Provenance) Full() string { + return fmt.Sprintf("%+v", v) +} + +// Short returns the shortened provenance stamp. +func (v Provenance) Short() string { + return fmt.Sprintf( + "%v", + Provenance{ + Version: v.Version, + BuildDate: v.BuildDate, + }) +} + +// Semver returns the semantic version of kustomize. +// kustomize version is set in format "kustomize/vX.X.X" in every release. +// X.X.X is a semver. If the version string is not in this format, +// return the original version string +func (v Provenance) Semver() string { + return strings.TrimPrefix(v.Version, "kustomize/") +} diff --git a/go/internal/forked/api/provider/depprovider.go b/go/internal/forked/api/provider/depprovider.go new file mode 100644 index 000000000..0102c89ce --- /dev/null +++ b/go/internal/forked/api/provider/depprovider.go @@ -0,0 +1,42 @@ +// Copyright 2020 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package provider + +import ( + "sigs.k8s.io/kustomize/api/hasher" + "sigs.k8s.io/kustomize/api/ifc" + "sigs.k8s.io/kustomize/api/internal/validate" + "sigs.k8s.io/kustomize/api/resource" +) + +// DepProvider is a dependency provider, injecting different +// implementations depending on the context. +type DepProvider struct { + resourceFactory *resource.Factory + // implemented by api/internal/validate.FieldValidator + // See TODO inside the validator for status. + // At time of writing, this is a do-nothing + // validator as it's not critical to kustomize function. + fieldValidator ifc.Validator +} + +func NewDepProvider() *DepProvider { + rf := resource.NewFactory(&hasher.Hasher{}) + return &DepProvider{ + resourceFactory: rf, + fieldValidator: validate.NewFieldValidator(), + } +} + +func NewDefaultDepProvider() *DepProvider { + return NewDepProvider() +} + +func (dp *DepProvider) GetResourceFactory() *resource.Factory { + return dp.resourceFactory +} + +func (dp *DepProvider) GetFieldValidator() ifc.Validator { + return dp.fieldValidator +} diff --git a/go/internal/forked/api/resmap/factory.go b/go/internal/forked/api/resmap/factory.go new file mode 100644 index 000000000..e1b81d96d --- /dev/null +++ b/go/internal/forked/api/resmap/factory.go @@ -0,0 +1,145 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package resmap + +import ( + "github.com/pkg/errors" + "sigs.k8s.io/kustomize/api/ifc" + "sigs.k8s.io/kustomize/api/internal/kusterr" + "sigs.k8s.io/kustomize/api/resource" + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" +) + +// Factory makes instances of ResMap. +type Factory struct { + // Makes resources. + resF *resource.Factory +} + +// NewFactory returns a new resmap.Factory. +func NewFactory(rf *resource.Factory) *Factory { + return &Factory{resF: rf} +} + +// RF returns a resource.Factory. +func (rmF *Factory) RF() *resource.Factory { + return rmF.resF +} + +func New() ResMap { + return newOne() +} + +// FromResource returns a ResMap with one entry. +func (rmF *Factory) FromResource(res *resource.Resource) ResMap { + m, err := newResMapFromResourceSlice([]*resource.Resource{res}) + if err != nil { + panic(err) + } + return m +} + +// FromResourceSlice returns a ResMap with a slice of resources. +func (rmF *Factory) FromResourceSlice(ress []*resource.Resource) ResMap { + m, err := newResMapFromResourceSlice(ress) + if err != nil { + panic(err) + } + return m +} + +// FromFile returns a ResMap given a resource path. +func (rmF *Factory) FromFile( + loader ifc.Loader, path string) (ResMap, error) { + content, err := loader.Load(path) + if err != nil { + return nil, err + } + m, err := rmF.NewResMapFromBytes(content) + if err != nil { + return nil, kusterr.Handler(err, path) + } + return m, nil +} + +// NewResMapFromBytes decodes a list of objects in byte array format. +func (rmF *Factory) NewResMapFromBytes(b []byte) (ResMap, error) { + resources, err := rmF.resF.SliceFromBytes(b) + if err != nil { + return nil, err + } + return newResMapFromResourceSlice(resources) +} + +// NewResMapFromConfigMapArgs returns a Resource slice given +// a configmap metadata slice from kustomization file. +func (rmF *Factory) NewResMapFromConfigMapArgs( + kvLdr ifc.KvLoader, argList []types.ConfigMapArgs) (ResMap, error) { + var resources []*resource.Resource + for _, args := range argList { + res, err := rmF.resF.MakeConfigMap(kvLdr, &args) + if err != nil { + return nil, errors.Wrap(err, "NewResMapFromConfigMapArgs") + } + resources = append(resources, res) + } + return newResMapFromResourceSlice(resources) +} + +// FromConfigMapArgs creates a new ResMap containing one ConfigMap. +func (rmF *Factory) FromConfigMapArgs( + kvLdr ifc.KvLoader, args types.ConfigMapArgs) (ResMap, error) { + res, err := rmF.resF.MakeConfigMap(kvLdr, &args) + if err != nil { + return nil, err + } + return rmF.FromResource(res), nil +} + +// NewResMapFromSecretArgs takes a SecretArgs slice, generates +// secrets from each entry, and accumulates them in a ResMap. +func (rmF *Factory) NewResMapFromSecretArgs( + kvLdr ifc.KvLoader, argsList []types.SecretArgs) (ResMap, error) { + var resources []*resource.Resource + for _, args := range argsList { + res, err := rmF.resF.MakeSecret(kvLdr, &args) + if err != nil { + return nil, errors.Wrap(err, "NewResMapFromSecretArgs") + } + resources = append(resources, res) + } + return newResMapFromResourceSlice(resources) +} + +// FromSecretArgs creates a new ResMap containing one secret. +func (rmF *Factory) FromSecretArgs( + kvLdr ifc.KvLoader, args types.SecretArgs) (ResMap, error) { + res, err := rmF.resF.MakeSecret(kvLdr, &args) + if err != nil { + return nil, err + } + return rmF.FromResource(res), nil +} + +func newResMapFromResourceSlice( + resources []*resource.Resource) (ResMap, error) { + result := New() + for _, res := range resources { + err := result.Append(res) + if err != nil { + return nil, err + } + } + return result, nil +} + +// NewResMapFromRNodeSlice returns a ResMap from a slice of RNodes +func (rmF *Factory) NewResMapFromRNodeSlice(s []*yaml.RNode) (ResMap, error) { + rs, err := rmF.resF.ResourcesFromRNodes(s) + if err != nil { + return nil, err + } + return newResMapFromResourceSlice(rs) +} diff --git a/go/internal/forked/api/resmap/factory.go b/go/internal/forked/api/resmap/factory.go new file mode 100644 index 000000000..c8d16f806 --- /dev/null +++ b/go/internal/forked/api/resmap/factory.go @@ -0,0 +1,145 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package resmap + +import ( + "github.com/pkg/errors" + "sigs.k8s.io/kustomize/api/ifc" + "sigs.k8s.io/kustomize/api/internal/kusterr" + "sigs.k8s.io/kustomize/api/resource" + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/yaml" +) + +// Factory makes instances of ResMap. +type Factory struct { + // Makes resources. + resF *resource.Factory +} + +// NewFactory returns a new resmap.Factory. +func NewFactory(rf *resource.Factory) *Factory { + return &Factory{resF: rf} +} + +// RF returns a resource.Factory. +func (rmF *Factory) RF() *resource.Factory { + return rmF.resF +} + +func New() ResMap { + return newOne() +} + +// FromResource returns a ResMap with one entry. +func (rmF *Factory) FromResource(res *resource.Resource) ResMap { + m, err := newResMapFromResourceSlice([]*resource.Resource{res}) + if err != nil { + panic(err) + } + return m +} + +// FromResourceSlice returns a ResMap with a slice of resources. +func (rmF *Factory) FromResourceSlice(ress []*resource.Resource) ResMap { + m, err := newResMapFromResourceSlice(ress) + if err != nil { + panic(err) + } + return m +} + +// FromFile returns a ResMap given a resource path. +func (rmF *Factory) FromFile( + loader ifc.Loader, path string) (ResMap, error) { + content, err := loader.Load(path) + if err != nil { + return nil, err + } + m, err := rmF.NewResMapFromBytes(content) + if err != nil { + return nil, kusterr.Handler(err, path) + } + return m, nil +} + +// NewResMapFromBytes decodes a list of objects in byte array format. +func (rmF *Factory) NewResMapFromBytes(b []byte) (ResMap, error) { + resources, err := rmF.resF.SliceFromBytes(b) + if err != nil { + return nil, err + } + return newResMapFromResourceSlice(resources) +} + +// NewResMapFromConfigMapArgs returns a Resource slice given +// a configmap metadata slice from kustomization file. +func (rmF *Factory) NewResMapFromConfigMapArgs( + kvLdr ifc.KvLoader, argList []types.ConfigMapArgs) (ResMap, error) { + var resources []*resource.Resource + for _, args := range argList { + res, err := rmF.resF.MakeConfigMap(kvLdr, &args) + if err != nil { + return nil, errors.Wrap(err, "NewResMapFromConfigMapArgs") + } + resources = append(resources, res) + } + return newResMapFromResourceSlice(resources) +} + +// FromConfigMapArgs creates a new ResMap containing one ConfigMap. +func (rmF *Factory) FromConfigMapArgs( + kvLdr ifc.KvLoader, args types.ConfigMapArgs) (ResMap, error) { + res, err := rmF.resF.MakeConfigMap(kvLdr, &args) + if err != nil { + return nil, err + } + return rmF.FromResource(res), nil +} + +// NewResMapFromSecretArgs takes a SecretArgs slice, generates +// secrets from each entry, and accumulates them in a ResMap. +func (rmF *Factory) NewResMapFromSecretArgs( + kvLdr ifc.KvLoader, argsList []types.SecretArgs) (ResMap, error) { + var resources []*resource.Resource + for _, args := range argsList { + res, err := rmF.resF.MakeSecret(kvLdr, &args) + if err != nil { + return nil, errors.Wrap(err, "NewResMapFromSecretArgs") + } + resources = append(resources, res) + } + return newResMapFromResourceSlice(resources) +} + +// FromSecretArgs creates a new ResMap containing one secret. +func (rmF *Factory) FromSecretArgs( + kvLdr ifc.KvLoader, args types.SecretArgs) (ResMap, error) { + res, err := rmF.resF.MakeSecret(kvLdr, &args) + if err != nil { + return nil, err + } + return rmF.FromResource(res), nil +} + +func newResMapFromResourceSlice( + resources []*resource.Resource) (ResMap, error) { + result := New() + for _, res := range resources { + err := result.Append(res) + if err != nil { + return nil, err + } + } + return result, nil +} + +// NewResMapFromRNodeSlice returns a ResMap from a slice of RNodes +func (rmF *Factory) NewResMapFromRNodeSlice(s []*yaml.RNode) (ResMap, error) { + rs, err := rmF.resF.ResourcesFromRNodes(s) + if err != nil { + return nil, err + } + return newResMapFromResourceSlice(rs) +} diff --git a/go/internal/forked/api/resmap/factory_test.go b/go/internal/forked/api/resmap/factory_test.go new file mode 100644 index 000000000..809fc271d --- /dev/null +++ b/go/internal/forked/api/resmap/factory_test.go @@ -0,0 +1,354 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package resmap_test + +import ( + "encoding/base64" + "testing" + + "github.com/stretchr/testify/assert" + "sigs.k8s.io/kustomize/api/ifc" + "sigs.k8s.io/kustomize/api/kv" + "sigs.k8s.io/kustomize/api/loader" + "sigs.k8s.io/kustomize/api/resmap" + resmaptest_test "sigs.k8s.io/kustomize/api/testutils/resmaptest" + valtest_test "sigs.k8s.io/kustomize/api/testutils/valtest" + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/filesys" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" +) + +func TestFromFile(t *testing.T) { + resourceStr := `apiVersion: apps/v1 +kind: Deployment +metadata: + name: dply1 +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + name: dply2 +--- +# some comment +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + name: dply2 + namespace: test +--- +` + expected := resmaptest_test.NewRmBuilder(t, rf). + Add(map[string]interface{}{ + "apiVersion": "apps/v1", + "kind": "Deployment", + "metadata": map[string]interface{}{ + "name": "dply1", + }}). + Add(map[string]interface{}{ + "apiVersion": "apps/v1", + "kind": "Deployment", + "metadata": map[string]interface{}{ + "name": "dply2", + }}). + Add(map[string]interface{}{ + "apiVersion": "apps/v1", + "kind": "Deployment", + "metadata": map[string]interface{}{ + "name": "dply2", + "namespace": "test", + }}).ResMap() + expYaml, err := expected.AsYaml() + assert.NoError(t, err) + + fSys := filesys.MakeFsInMemory() + assert.NoError(t, fSys.WriteFile("deployment.yaml", []byte(resourceStr))) + + ldr, err := loader.NewLoader( + loader.RestrictionRootOnly, filesys.Separator, fSys) + assert.NoError(t, err) + + m, err := rmF.FromFile(ldr, "deployment.yaml") + assert.NoError(t, err) + mYaml, err := m.AsYaml() + assert.NoError(t, err) + assert.Equal(t, expYaml, mYaml) +} + +func TestFromBytes(t *testing.T) { + encoded := []byte(`apiVersion: v1 +kind: ConfigMap +metadata: + name: cm1 +--- +apiVersion: v1 +kind: ConfigMap +metadata: + name: cm2 +`) + expected := resmaptest_test.NewRmBuilder(t, rf). + Add(map[string]interface{}{ + "apiVersion": "v1", + "kind": "ConfigMap", + "metadata": map[string]interface{}{ + "name": "cm1", + }}). + Add(map[string]interface{}{ + "apiVersion": "v1", + "kind": "ConfigMap", + "metadata": map[string]interface{}{ + "name": "cm2", + }}).ResMap() + expYaml, err := expected.AsYaml() + assert.NoError(t, err) + m, err := rmF.NewResMapFromBytes(encoded) + assert.NoError(t, err) + mYaml, err := m.AsYaml() + assert.NoError(t, err) + assert.Equal(t, expYaml, mYaml) +} + +func TestNewFromConfigMaps(t *testing.T) { + type testCase struct { + description string + input []types.ConfigMapArgs + filepath string + content string + expected resmap.ResMap + } + + fSys := filesys.MakeFsInMemory() + ldr, err := loader.NewLoader( + loader.RestrictionRootOnly, filesys.Separator, fSys) + if err != nil { + t.Fatal(err) + } + kvLdr := kv.NewLoader(ldr, valtest_test.MakeFakeValidator()) + testCases := []testCase{ + { + description: "construct config map from env", + input: []types.ConfigMapArgs{ + { + GeneratorArgs: types.GeneratorArgs{ + Name: "envConfigMap", + KvPairSources: types.KvPairSources{ + EnvSources: []string{"app.env"}, + }, + }, + }, + }, + filepath: "app.env", + content: "DB_USERNAME=admin\nDB_PASSWORD=somepw", + expected: resmaptest_test.NewRmBuilder(t, rf).Add( + map[string]interface{}{ + "apiVersion": "v1", + "kind": "ConfigMap", + "metadata": map[string]interface{}{ + "name": "envConfigMap", + }, + "data": map[string]interface{}{ + "DB_USERNAME": "admin", + "DB_PASSWORD": "somepw", + }}).ResMap(), + }, + + { + description: "construct config map from file", + input: []types.ConfigMapArgs{{ + GeneratorArgs: types.GeneratorArgs{ + Name: "fileConfigMap", + KvPairSources: types.KvPairSources{ + FileSources: []string{"app-init.ini"}, + }, + }, + }, + }, + filepath: "app-init.ini", + content: "FOO=bar\nBAR=baz\n", + expected: resmaptest_test.NewRmBuilder(t, rf).Add( + map[string]interface{}{ + "apiVersion": "v1", + "kind": "ConfigMap", + "metadata": map[string]interface{}{ + "name": "fileConfigMap", + }, + "data": map[string]interface{}{ + "app-init.ini": `FOO=bar +BAR=baz +`, + }, + }).ResMap(), + }, + { + description: "construct config map from literal", + input: []types.ConfigMapArgs{ + { + GeneratorArgs: types.GeneratorArgs{ + Name: "literalConfigMap", + KvPairSources: types.KvPairSources{ + LiteralSources: []string{"a=x", "b=y", "c=\"Good Morning\"", "d=\"false\""}, + }, + }, + }, + }, + expected: resmaptest_test.NewRmBuilder(t, rf).Add( + map[string]interface{}{ + "apiVersion": "v1", + "kind": "ConfigMap", + "metadata": map[string]interface{}{ + "name": "literalConfigMap", + }, + "data": map[string]interface{}{ + "a": "x", + "b": "y", + "c": "Good Morning", + "d": "false", + }, + }).ResMap(), + }, + + // TODO: add testcase for data coming from multiple sources like + // files/literal/env etc. + } + for _, tc := range testCases { + if tc.filepath != "" { + if fErr := fSys.WriteFile(tc.filepath, []byte(tc.content)); fErr != nil { + t.Fatalf("error adding file '%s': %v\n", tc.filepath, fErr) + } + } + r, err := rmF.NewResMapFromConfigMapArgs(kvLdr, tc.input) + assert.NoError(t, err, tc.description) + r.RemoveBuildAnnotations() + rYaml, err := r.AsYaml() + assert.NoError(t, err, tc.description) + tc.expected.RemoveBuildAnnotations() + expYaml, err := tc.expected.AsYaml() + assert.NoError(t, err, tc.description) + assert.Equal(t, expYaml, rYaml) + } +} + +func TestNewResMapFromSecretArgs(t *testing.T) { + secrets := []types.SecretArgs{ + { + GeneratorArgs: types.GeneratorArgs{ + Name: "apple", + KvPairSources: types.KvPairSources{ + LiteralSources: []string{ + "DB_USERNAME=admin", + "DB_PASSWORD=somepw", + }, + }, + }, + Type: ifc.SecretTypeOpaque, + }, + } + fSys := filesys.MakeFsInMemory() + fSys.Mkdir(filesys.SelfDir) + + actual, err := rmF.NewResMapFromSecretArgs( + kv.NewLoader( + loader.NewFileLoaderAtRoot(fSys), + valtest_test.MakeFakeValidator()), secrets) + if err != nil { + t.Fatalf("unexpected error: %v", err) + } + actual.RemoveBuildAnnotations() + actYaml, err := actual.AsYaml() + assert.NoError(t, err) + + expected := resmaptest_test.NewRmBuilder(t, rf).Add( + map[string]interface{}{ + "apiVersion": "v1", + "kind": "Secret", + "metadata": map[string]interface{}{ + "name": "apple", + }, + "type": ifc.SecretTypeOpaque, + "data": map[string]interface{}{ + "DB_USERNAME": base64.StdEncoding.EncodeToString([]byte("admin")), + "DB_PASSWORD": base64.StdEncoding.EncodeToString([]byte("somepw")), + }, + }).ResMap() + expYaml, err := expected.AsYaml() + assert.NoError(t, err) + + assert.Equal(t, string(expYaml), string(actYaml)) +} + +func TestFromRNodeSlice(t *testing.T) { + type testcase struct { + input string + expected resmap.ResMap + } + testcases := map[string]testcase{ + "no resource": { + input: "---", + expected: resmaptest_test.NewRmBuilder(t, rf).ResMap(), + }, + "single resource": { + input: `apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + name: namespace-reader +rules: +- apiGroups: + - "" + resources: + - namespaces + verbs: + - get + - watch + - list + `, + expected: resmaptest_test.NewRmBuilder(t, rf).Add( + map[string]interface{}{ + "apiVersion": "rbac.authorization.k8s.io/v1", + "kind": "ClusterRole", + "metadata": map[string]interface{}{ + "name": "namespace-reader", + }, + "rules": []interface{}{ + map[string]interface{}{ + "apiGroups": []interface{}{ + "", + }, + "resources": []interface{}{ + "namespaces", + }, + "verbs": []interface{}{ + "get", + "watch", + "list", + }, + }, + }, + }).ResMap(), + }, + "local config": { + // local config should be ignored + input: `apiVersion: v1 +kind: ConfigMap +metadata: + name: my-config + annotations: + config.kubernetes.io/local-config: 'true' +`, + expected: resmaptest_test.NewRmBuilder(t, rf).ResMap(), + }, + } + for name := range testcases { + tc := testcases[name] + t.Run(name, func(t *testing.T) { + rm, err := rmF.NewResMapFromRNodeSlice( + []*yaml.RNode{yaml.MustParse(tc.input)}) + if err != nil { + t.Fatalf("unexpected error in test case [%s]: %v", name, err) + } + if err = tc.expected.ErrorIfNotEqualLists(rm); err != nil { + t.Fatalf("error in test case [%s]: %s", name, err) + } + }) + } +} diff --git a/go/internal/forked/api/resmap/factory_test.go b/go/internal/forked/api/resmap/factory_test.go new file mode 100644 index 000000000..257c02a5d --- /dev/null +++ b/go/internal/forked/api/resmap/factory_test.go @@ -0,0 +1,354 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package resmap_test + +import ( + "encoding/base64" + "testing" + + "github.com/stretchr/testify/assert" + "sigs.k8s.io/kustomize/api/ifc" + "sigs.k8s.io/kustomize/api/kv" + "sigs.k8s.io/kustomize/api/loader" + "sigs.k8s.io/kustomize/api/resmap" + resmaptest_test "sigs.k8s.io/kustomize/api/testutils/resmaptest" + valtest_test "sigs.k8s.io/kustomize/api/testutils/valtest" + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/filesys" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/yaml" +) + +func TestFromFile(t *testing.T) { + resourceStr := `apiVersion: apps/v1 +kind: Deployment +metadata: + name: dply1 +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + name: dply2 +--- +# some comment +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + name: dply2 + namespace: test +--- +` + expected := resmaptest_test.NewRmBuilder(t, rf). + Add(map[string]interface{}{ + "apiVersion": "apps/v1", + "kind": "Deployment", + "metadata": map[string]interface{}{ + "name": "dply1", + }}). + Add(map[string]interface{}{ + "apiVersion": "apps/v1", + "kind": "Deployment", + "metadata": map[string]interface{}{ + "name": "dply2", + }}). + Add(map[string]interface{}{ + "apiVersion": "apps/v1", + "kind": "Deployment", + "metadata": map[string]interface{}{ + "name": "dply2", + "namespace": "test", + }}).ResMap() + expYaml, err := expected.AsYaml() + assert.NoError(t, err) + + fSys := filesys.MakeFsInMemory() + assert.NoError(t, fSys.WriteFile("deployment.yaml", []byte(resourceStr))) + + ldr, err := loader.NewLoader( + loader.RestrictionRootOnly, filesys.Separator, fSys) + assert.NoError(t, err) + + m, err := rmF.FromFile(ldr, "deployment.yaml") + assert.NoError(t, err) + mYaml, err := m.AsYaml() + assert.NoError(t, err) + assert.Equal(t, expYaml, mYaml) +} + +func TestFromBytes(t *testing.T) { + encoded := []byte(`apiVersion: v1 +kind: ConfigMap +metadata: + name: cm1 +--- +apiVersion: v1 +kind: ConfigMap +metadata: + name: cm2 +`) + expected := resmaptest_test.NewRmBuilder(t, rf). + Add(map[string]interface{}{ + "apiVersion": "v1", + "kind": "ConfigMap", + "metadata": map[string]interface{}{ + "name": "cm1", + }}). + Add(map[string]interface{}{ + "apiVersion": "v1", + "kind": "ConfigMap", + "metadata": map[string]interface{}{ + "name": "cm2", + }}).ResMap() + expYaml, err := expected.AsYaml() + assert.NoError(t, err) + m, err := rmF.NewResMapFromBytes(encoded) + assert.NoError(t, err) + mYaml, err := m.AsYaml() + assert.NoError(t, err) + assert.Equal(t, expYaml, mYaml) +} + +func TestNewFromConfigMaps(t *testing.T) { + type testCase struct { + description string + input []types.ConfigMapArgs + filepath string + content string + expected resmap.ResMap + } + + fSys := filesys.MakeFsInMemory() + ldr, err := loader.NewLoader( + loader.RestrictionRootOnly, filesys.Separator, fSys) + if err != nil { + t.Fatal(err) + } + kvLdr := kv.NewLoader(ldr, valtest_test.MakeFakeValidator()) + testCases := []testCase{ + { + description: "construct config map from env", + input: []types.ConfigMapArgs{ + { + GeneratorArgs: types.GeneratorArgs{ + Name: "envConfigMap", + KvPairSources: types.KvPairSources{ + EnvSources: []string{"app.env"}, + }, + }, + }, + }, + filepath: "app.env", + content: "DB_USERNAME=admin\nDB_PASSWORD=somepw", + expected: resmaptest_test.NewRmBuilder(t, rf).Add( + map[string]interface{}{ + "apiVersion": "v1", + "kind": "ConfigMap", + "metadata": map[string]interface{}{ + "name": "envConfigMap", + }, + "data": map[string]interface{}{ + "DB_USERNAME": "admin", + "DB_PASSWORD": "somepw", + }}).ResMap(), + }, + + { + description: "construct config map from file", + input: []types.ConfigMapArgs{{ + GeneratorArgs: types.GeneratorArgs{ + Name: "fileConfigMap", + KvPairSources: types.KvPairSources{ + FileSources: []string{"app-init.ini"}, + }, + }, + }, + }, + filepath: "app-init.ini", + content: "FOO=bar\nBAR=baz\n", + expected: resmaptest_test.NewRmBuilder(t, rf).Add( + map[string]interface{}{ + "apiVersion": "v1", + "kind": "ConfigMap", + "metadata": map[string]interface{}{ + "name": "fileConfigMap", + }, + "data": map[string]interface{}{ + "app-init.ini": `FOO=bar +BAR=baz +`, + }, + }).ResMap(), + }, + { + description: "construct config map from literal", + input: []types.ConfigMapArgs{ + { + GeneratorArgs: types.GeneratorArgs{ + Name: "literalConfigMap", + KvPairSources: types.KvPairSources{ + LiteralSources: []string{"a=x", "b=y", "c=\"Good Morning\"", "d=\"false\""}, + }, + }, + }, + }, + expected: resmaptest_test.NewRmBuilder(t, rf).Add( + map[string]interface{}{ + "apiVersion": "v1", + "kind": "ConfigMap", + "metadata": map[string]interface{}{ + "name": "literalConfigMap", + }, + "data": map[string]interface{}{ + "a": "x", + "b": "y", + "c": "Good Morning", + "d": "false", + }, + }).ResMap(), + }, + + // TODO: add testcase for data coming from multiple sources like + // files/literal/env etc. + } + for _, tc := range testCases { + if tc.filepath != "" { + if fErr := fSys.WriteFile(tc.filepath, []byte(tc.content)); fErr != nil { + t.Fatalf("error adding file '%s': %v\n", tc.filepath, fErr) + } + } + r, err := rmF.NewResMapFromConfigMapArgs(kvLdr, tc.input) + assert.NoError(t, err, tc.description) + r.RemoveBuildAnnotations() + rYaml, err := r.AsYaml() + assert.NoError(t, err, tc.description) + tc.expected.RemoveBuildAnnotations() + expYaml, err := tc.expected.AsYaml() + assert.NoError(t, err, tc.description) + assert.Equal(t, expYaml, rYaml) + } +} + +func TestNewResMapFromSecretArgs(t *testing.T) { + secrets := []types.SecretArgs{ + { + GeneratorArgs: types.GeneratorArgs{ + Name: "apple", + KvPairSources: types.KvPairSources{ + LiteralSources: []string{ + "DB_USERNAME=admin", + "DB_PASSWORD=somepw", + }, + }, + }, + Type: ifc.SecretTypeOpaque, + }, + } + fSys := filesys.MakeFsInMemory() + fSys.Mkdir(filesys.SelfDir) + + actual, err := rmF.NewResMapFromSecretArgs( + kv.NewLoader( + loader.NewFileLoaderAtRoot(fSys), + valtest_test.MakeFakeValidator()), secrets) + if err != nil { + t.Fatalf("unexpected error: %v", err) + } + actual.RemoveBuildAnnotations() + actYaml, err := actual.AsYaml() + assert.NoError(t, err) + + expected := resmaptest_test.NewRmBuilder(t, rf).Add( + map[string]interface{}{ + "apiVersion": "v1", + "kind": "Secret", + "metadata": map[string]interface{}{ + "name": "apple", + }, + "type": ifc.SecretTypeOpaque, + "data": map[string]interface{}{ + "DB_USERNAME": base64.StdEncoding.EncodeToString([]byte("admin")), + "DB_PASSWORD": base64.StdEncoding.EncodeToString([]byte("somepw")), + }, + }).ResMap() + expYaml, err := expected.AsYaml() + assert.NoError(t, err) + + assert.Equal(t, string(expYaml), string(actYaml)) +} + +func TestFromRNodeSlice(t *testing.T) { + type testcase struct { + input string + expected resmap.ResMap + } + testcases := map[string]testcase{ + "no resource": { + input: "---", + expected: resmaptest_test.NewRmBuilder(t, rf).ResMap(), + }, + "single resource": { + input: `apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + name: namespace-reader +rules: +- apiGroups: + - "" + resources: + - namespaces + verbs: + - get + - watch + - list + `, + expected: resmaptest_test.NewRmBuilder(t, rf).Add( + map[string]interface{}{ + "apiVersion": "rbac.authorization.k8s.io/v1", + "kind": "ClusterRole", + "metadata": map[string]interface{}{ + "name": "namespace-reader", + }, + "rules": []interface{}{ + map[string]interface{}{ + "apiGroups": []interface{}{ + "", + }, + "resources": []interface{}{ + "namespaces", + }, + "verbs": []interface{}{ + "get", + "watch", + "list", + }, + }, + }, + }).ResMap(), + }, + "local config": { + // local config should be ignored + input: `apiVersion: v1 +kind: ConfigMap +metadata: + name: my-config + annotations: + config.kubernetes.io/local-config: 'true' +`, + expected: resmaptest_test.NewRmBuilder(t, rf).ResMap(), + }, + } + for name := range testcases { + tc := testcases[name] + t.Run(name, func(t *testing.T) { + rm, err := rmF.NewResMapFromRNodeSlice( + []*yaml.RNode{yaml.MustParse(tc.input)}) + if err != nil { + t.Fatalf("unexpected error in test case [%s]: %v", name, err) + } + if err = tc.expected.ErrorIfNotEqualLists(rm); err != nil { + t.Fatalf("error in test case [%s]: %s", name, err) + } + }) + } +} diff --git a/go/internal/forked/api/resmap/idslice.go b/go/internal/forked/api/resmap/idslice.go new file mode 100644 index 000000000..cbbdb3ce2 --- /dev/null +++ b/go/internal/forked/api/resmap/idslice.go @@ -0,0 +1,37 @@ +/* +Copyright 2018 The Kubernetes Authors. + +Licensed under the Apache License, Version 2.0 (the "License"); +you may not use this file except in compliance with the License. +You may obtain a copy of the License at + + http://www.apache.org/licenses/LICENSE-2.0 + +Unless required by applicable law or agreed to in writing, software +distributed under the License is distributed on an "AS IS" BASIS, +WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. +See the License for the specific language governing permissions and +limitations under the License. +*/ + +package resmap + +import ( + "sort" + + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/resid" +) + +// IdSlice implements the sort interface. +type IdSlice []resid.ResId + +var _ sort.Interface = IdSlice{} + +func (a IdSlice) Len() int { return len(a) } +func (a IdSlice) Swap(i, j int) { a[i], a[j] = a[j], a[i] } +func (a IdSlice) Less(i, j int) bool { + if !a[i].Gvk.Equals(a[j].Gvk) { + return a[i].Gvk.IsLessThan(a[j].Gvk) + } + return a[i].String() < a[j].String() +} diff --git a/go/internal/forked/api/resmap/idslice.go b/go/internal/forked/api/resmap/idslice.go new file mode 100644 index 000000000..f6d75dd20 --- /dev/null +++ b/go/internal/forked/api/resmap/idslice.go @@ -0,0 +1,37 @@ +/* +Copyright 2018 The Kubernetes Authors. + +Licensed under the Apache License, Version 2.0 (the "License"); +you may not use this file except in compliance with the License. +You may obtain a copy of the License at + + http://www.apache.org/licenses/LICENSE-2.0 + +Unless required by applicable law or agreed to in writing, software +distributed under the License is distributed on an "AS IS" BASIS, +WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. +See the License for the specific language governing permissions and +limitations under the License. +*/ + +package resmap + +import ( + "sort" + + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/resid" +) + +// IdSlice implements the sort interface. +type IdSlice []resid.ResId + +var _ sort.Interface = IdSlice{} + +func (a IdSlice) Len() int { return len(a) } +func (a IdSlice) Swap(i, j int) { a[i], a[j] = a[j], a[i] } +func (a IdSlice) Less(i, j int) bool { + if !a[i].Gvk.Equals(a[j].Gvk) { + return a[i].Gvk.IsLessThan(a[j].Gvk) + } + return a[i].String() < a[j].String() +} diff --git a/go/internal/forked/api/resmap/idslice_test.go b/go/internal/forked/api/resmap/idslice_test.go new file mode 100644 index 000000000..db00d58db --- /dev/null +++ b/go/internal/forked/api/resmap/idslice_test.go @@ -0,0 +1,52 @@ +/* +Copyright 2018 The Kubernetes Authors. + +Licensed under the Apache License, Version 2.0 (the "License"); +you may not use this file except in compliance with the License. +You may obtain a copy of the License at + + http://www.apache.org/licenses/LICENSE-2.0 + +Unless required by applicable law or agreed to in writing, software +distributed under the License is distributed on an "AS IS" BASIS, +WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. +See the License for the specific language governing permissions and +limitations under the License. +*/ + +package resmap + +import ( + "reflect" + "sort" + "testing" + + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/resid" +) + +func TestLess(t *testing.T) { + ids := IdSlice{ + resid.NewResIdKindOnly("ConfigMap", "cm"), + resid.NewResIdKindOnly("Pod", "pod"), + resid.NewResIdKindOnly("Namespace", "ns1"), + resid.NewResIdKindOnly("Namespace", "ns2"), + resid.NewResIdKindOnly("Role", "ro"), + resid.NewResIdKindOnly("RoleBinding", "rb"), + resid.NewResIdKindOnly("CustomResourceDefinition", "crd"), + resid.NewResIdKindOnly("ServiceAccount", "sa"), + } + expected := IdSlice{ + resid.NewResIdKindOnly("Namespace", "ns1"), + resid.NewResIdKindOnly("Namespace", "ns2"), + resid.NewResIdKindOnly("CustomResourceDefinition", "crd"), + resid.NewResIdKindOnly("ServiceAccount", "sa"), + resid.NewResIdKindOnly("Role", "ro"), + resid.NewResIdKindOnly("RoleBinding", "rb"), + resid.NewResIdKindOnly("ConfigMap", "cm"), + resid.NewResIdKindOnly("Pod", "pod"), + } + sort.Sort(ids) + if !reflect.DeepEqual(ids, expected) { + t.Fatalf("expected %+v but got %+v", expected, ids) + } +} diff --git a/go/internal/forked/api/resmap/idslice_test.go b/go/internal/forked/api/resmap/idslice_test.go new file mode 100644 index 000000000..96cd7c65a --- /dev/null +++ b/go/internal/forked/api/resmap/idslice_test.go @@ -0,0 +1,52 @@ +/* +Copyright 2018 The Kubernetes Authors. + +Licensed under the Apache License, Version 2.0 (the "License"); +you may not use this file except in compliance with the License. +You may obtain a copy of the License at + + http://www.apache.org/licenses/LICENSE-2.0 + +Unless required by applicable law or agreed to in writing, software +distributed under the License is distributed on an "AS IS" BASIS, +WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. +See the License for the specific language governing permissions and +limitations under the License. +*/ + +package resmap + +import ( + "reflect" + "sort" + "testing" + + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/resid" +) + +func TestLess(t *testing.T) { + ids := IdSlice{ + resid.NewResIdKindOnly("ConfigMap", "cm"), + resid.NewResIdKindOnly("Pod", "pod"), + resid.NewResIdKindOnly("Namespace", "ns1"), + resid.NewResIdKindOnly("Namespace", "ns2"), + resid.NewResIdKindOnly("Role", "ro"), + resid.NewResIdKindOnly("RoleBinding", "rb"), + resid.NewResIdKindOnly("CustomResourceDefinition", "crd"), + resid.NewResIdKindOnly("ServiceAccount", "sa"), + } + expected := IdSlice{ + resid.NewResIdKindOnly("Namespace", "ns1"), + resid.NewResIdKindOnly("Namespace", "ns2"), + resid.NewResIdKindOnly("CustomResourceDefinition", "crd"), + resid.NewResIdKindOnly("ServiceAccount", "sa"), + resid.NewResIdKindOnly("Role", "ro"), + resid.NewResIdKindOnly("RoleBinding", "rb"), + resid.NewResIdKindOnly("ConfigMap", "cm"), + resid.NewResIdKindOnly("Pod", "pod"), + } + sort.Sort(ids) + if !reflect.DeepEqual(ids, expected) { + t.Fatalf("expected %+v but got %+v", expected, ids) + } +} diff --git a/go/internal/forked/api/resmap/resmap.go b/go/internal/forked/api/resmap/resmap.go new file mode 100644 index 000000000..d74baf6da --- /dev/null +++ b/go/internal/forked/api/resmap/resmap.go @@ -0,0 +1,333 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +// Package resmap implements a map from ResId to Resource that +// tracks all resources in a kustomization. +package resmap + +import ( + "sigs.k8s.io/kustomize/api/ifc" + "sigs.k8s.io/kustomize/api/resource" + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/kio" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/resid" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" +) + +// A Transformer modifies an instance of ResMap. +type Transformer interface { + // Transform modifies data in the argument, + // e.g. adding labels to resources that can be labelled. + Transform(m ResMap) error +} + +// A TransformerWithProperties contains a Transformer and stores +// some of its properties +type TransformerWithProperties struct { + Transformer + Origin *resource.Origin +} + +// A Generator creates an instance of ResMap. +type Generator interface { + Generate() (ResMap, error) +} + +// A GeneratorWithProperties contains a Generator and stores +// some of its properties +type GeneratorWithProperties struct { + Generator + Origin *resource.Origin +} + +// Something that's configurable accepts an +// instance of PluginHelpers and a raw config +// object (YAML in []byte form). +type Configurable interface { + Config(h *PluginHelpers, config []byte) error +} + +// NewPluginHelpers makes an instance of PluginHelpers. +func NewPluginHelpers( + ldr ifc.Loader, v ifc.Validator, rf *Factory, + pc *types.PluginConfig) *PluginHelpers { + return &PluginHelpers{ldr: ldr, v: v, rf: rf, pc: pc} +} + +// PluginHelpers holds things that any or all plugins might need. +// This should be available to each plugin, in addition to +// any plugin-specific configuration. +type PluginHelpers struct { + ldr ifc.Loader + v ifc.Validator + rf *Factory + pc *types.PluginConfig +} + +func (c *PluginHelpers) GeneralConfig() *types.PluginConfig { + return c.pc +} + +func (c *PluginHelpers) Loader() ifc.Loader { + return c.ldr +} + +func (c *PluginHelpers) ResmapFactory() *Factory { + return c.rf +} + +func (c *PluginHelpers) Validator() ifc.Validator { + return c.v +} + +type GeneratorPlugin interface { + Generator + Configurable +} + +type TransformerPlugin interface { + Transformer + Configurable +} + +// ResMap is an interface describing operations on the +// core kustomize data structure, a list of Resources. +// +// Every Resource has two ResIds: OrgId and CurId. +// +// In a ResMap, no two resources may have the same CurId, +// but they may have the same OrgId. The latter can happen +// when mixing two or more different overlays apply different +// transformations to a common base. When looking for a +// resource to transform, try the OrgId first, and if this +// fails or finds too many, it might make sense to then try +// the CurrId. Depends on the situation. +// +// TODO: get rid of this interface (use bare resWrangler). +// There aren't multiple implementations any more. +type ResMap interface { + // Size reports the number of resources. + Size() int + + // Resources provides a discardable slice + // of resource pointers, returned in the order + // as appended. + Resources() []*resource.Resource + + // Append adds a Resource. Error on CurId collision. + // + // A class invariant of ResMap is that all of its + // resources must differ in their value of + // CurId(), aka current Id. The Id is the tuple + // of {namespace, group, version, kind, name} + // (see ResId). + // + // This invariant reflects the invariant of a + // kubernetes cluster, where if one tries to add + // a resource to the cluster whose Id matches + // that of a resource already in the cluster, + // only two outcomes are allowed. Either the + // incoming resource is _merged_ into the existing + // one, or the incoming resource is rejected. + // One cannot end up with two resources + // in the cluster with the same Id. + Append(*resource.Resource) error + + // AppendAll appends another ResMap to self, + // failing on any CurId collision. + AppendAll(ResMap) error + + // AbsorbAll appends, replaces or merges the contents + // of another ResMap into self, + // allowing and sometimes demanding ID collisions. + // A collision would be demanded, say, when a generated + // ConfigMap has the "replace" option in its generation + // instructions, meaning it _must_ replace + // something in the known set of resources. + // If a resource id for resource X is found to already + // be in self, then the behavior field for X must + // be BehaviorMerge or BehaviorReplace. If X is not in + // self, then its behavior _cannot_ be merge or replace. + AbsorbAll(ResMap) error + + // AddOriginAnnotation will add the provided origin as + // an origin annotation to all resources in the ResMap, if + // the origin is not nil. + AddOriginAnnotation(origin *resource.Origin) error + + // RemoveOriginAnnotation will remove the origin annotation + // from all resources in the ResMap + RemoveOriginAnnotations() error + + // AddTransformerAnnotation will add the provided origin as + // an origin annotation if the resource doesn't have one; a + // transformer annotation otherwise; to all resources in + // ResMap + AddTransformerAnnotation(origin *resource.Origin) error + + // RemoveTransformerAnnotation will remove the transformer annotation + // from all resources in the ResMap + RemoveTransformerAnnotations() error + + // AnnotateAll annotates all resources in the ResMap with + // the provided key value pair. + AnnotateAll(key string, value string) error + + // AsYaml returns the yaml form of resources. + AsYaml() ([]byte, error) + + // GetByIndex returns a resource at the given index, + // nil if out of range. + GetByIndex(int) *resource.Resource + + // GetIndexOfCurrentId returns the index of the resource + // with the given CurId. + // Returns error if there is more than one match. + // Returns (-1, nil) if there is no match. + GetIndexOfCurrentId(id resid.ResId) (int, error) + + // GetMatchingResourcesByCurrentId returns the resources + // who's CurId is matched by the argument. + GetMatchingResourcesByCurrentId(matches IdMatcher) []*resource.Resource + + // GetMatchingResourcesByAnyId returns the resources + // who's current or previous IDs is matched by the argument. + GetMatchingResourcesByAnyId(matches IdMatcher) []*resource.Resource + + // GetByCurrentId is shorthand for calling + // GetMatchingResourcesByCurrentId with a matcher requiring + // an exact match, returning an error on multiple or no matches. + GetByCurrentId(resid.ResId) (*resource.Resource, error) + + // GetById is shorthand for calling + // GetMatchingResourcesByAnyId with a matcher requiring + // an exact match, returning an error on multiple or no matches. + GetById(resid.ResId) (*resource.Resource, error) + + // GroupedByCurrentNamespace returns a map of namespace + // to a slice of *Resource in that namespace. + // Cluster-scoped Resources are not included (see ClusterScoped). + // Resources with an empty namespace are placed + // in the resid.DefaultNamespace entry. + GroupedByCurrentNamespace() map[string][]*resource.Resource + + // GroupedByOriginalNamespace performs as GroupByNamespace + // but use the original namespace instead of the current + // one to perform the grouping. + GroupedByOriginalNamespace() map[string][]*resource.Resource + + // ClusterScoped returns a slice of resources that + // cannot be placed in a namespace, e.g. + // Node, ClusterRole, Namespace itself, etc. + ClusterScoped() []*resource.Resource + + // AllIds returns all CurrentIds. + AllIds() []resid.ResId + + // Replace replaces the resource with the matching CurId. + // Error if there's no match or more than one match. + // Returns the index where the replacement happened. + Replace(*resource.Resource) (int, error) + + // Remove removes the resource whose CurId matches the argument. + // Error if not found. + Remove(resid.ResId) error + + // Clear removes all resources and Ids. + Clear() + + // DropEmpties drops empty resources from the ResMap. + DropEmpties() + + // SubsetThatCouldBeReferencedByResource returns a ResMap subset + // of self with resources that could be referenced by the + // resource argument. + // This is a filter; it excludes things that cannot be + // referenced by the resource, e.g. objects in other + // namespaces. Cluster wide objects are never excluded. + SubsetThatCouldBeReferencedByResource(*resource.Resource) (ResMap, error) + + // DeAnchor replaces YAML aliases with structured data copied from anchors. + // This cannot be undone; if desired, call DeepCopy first. + // Subsequent marshalling to YAML will no longer have anchor + // definitions ('&') or aliases ('*'). + // + // Anchors are not expected to work across YAML 'documents'. + // If three resources are loaded from one file containing three YAML docs: + // + // {resourceA} + // --- + // {resourceB} + // --- + // {resourceC} + // + // then anchors defined in A cannot be seen from B and C and vice versa. + // OTOH, cross-resource links (a field in B referencing fields in A) will + // work if the resources are gathered in a ResourceList: + // + // apiVersion: config.kubernetes.io/v1 + // kind: ResourceList + // metadata: + // name: someList + // items: + // - {resourceA} + // - {resourceB} + // - {resourceC} + // + DeAnchor() error + + // DeepCopy copies the ResMap and underlying resources. + DeepCopy() ResMap + + // ShallowCopy copies the ResMap but + // not the underlying resources. + ShallowCopy() ResMap + + // ErrorIfNotEqualSets returns an error if the + // argument doesn't have the same resources as self. + // Ordering is _not_ taken into account, + // as this function was solely used in tests written + // before internal resource order was maintained, + // and those tests are initialized with maps which + // by definition have random ordering, and will + // fail spuriously. + // TODO: modify tests to not use resmap.FromMap, + // TODO: - and replace this with a stricter equals. + ErrorIfNotEqualSets(ResMap) error + + // ErrorIfNotEqualLists returns an error if the + // argument doesn't have the resource objects + // data as self, in the same order. + // Meta information is ignored; this is similar + // to comparing the AsYaml() strings, but allows + // for more informed errors on not equals. + ErrorIfNotEqualLists(ResMap) error + + // Debug prints the ResMap. + Debug(title string) + + // Select returns a list of resources that + // are selected by a Selector + Select(types.Selector) ([]*resource.Resource, error) + + // ToRNodeSlice returns a copy of the resources as RNodes. + ToRNodeSlice() []*yaml.RNode + + // ApplySmPatch applies a strategic-merge patch to the + // selected set of resources. + ApplySmPatch( + selectedSet *resource.IdSet, patch *resource.Resource) error + + // RemoveBuildAnnotations removes annotations created by the build process. + RemoveBuildAnnotations() + + // ApplyFilter applies an RNode filter to all Resources in the ResMap. + // TODO: Send/recover ancillary Resource data to/from subprocesses. + // Assure that the ancillary data in Resource (everything not in the RNode) + // is sent to and re-captured from transformer subprocess (as the process + // might edit that information). One way to do this would be to solely use + // RNode metadata annotation reading and writing instead of using Resource + // struct data members, i.e. the Resource struct is replaced by RNode + // and use of (slow) k8s metadata annotations inside the RNode. + ApplyFilter(f kio.Filter) error +} diff --git a/go/internal/forked/api/resmap/resmap.go b/go/internal/forked/api/resmap/resmap.go new file mode 100644 index 000000000..2f3783636 --- /dev/null +++ b/go/internal/forked/api/resmap/resmap.go @@ -0,0 +1,333 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +// Package resmap implements a map from ResId to Resource that +// tracks all resources in a kustomization. +package resmap + +import ( + "sigs.k8s.io/kustomize/api/ifc" + "sigs.k8s.io/kustomize/api/resource" + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/kio" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/resid" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/yaml" +) + +// A Transformer modifies an instance of ResMap. +type Transformer interface { + // Transform modifies data in the argument, + // e.g. adding labels to resources that can be labelled. + Transform(m ResMap) error +} + +// A TransformerWithProperties contains a Transformer and stores +// some of its properties +type TransformerWithProperties struct { + Transformer + Origin *resource.Origin +} + +// A Generator creates an instance of ResMap. +type Generator interface { + Generate() (ResMap, error) +} + +// A GeneratorWithProperties contains a Generator and stores +// some of its properties +type GeneratorWithProperties struct { + Generator + Origin *resource.Origin +} + +// Something that's configurable accepts an +// instance of PluginHelpers and a raw config +// object (YAML in []byte form). +type Configurable interface { + Config(h *PluginHelpers, config []byte) error +} + +// NewPluginHelpers makes an instance of PluginHelpers. +func NewPluginHelpers( + ldr ifc.Loader, v ifc.Validator, rf *Factory, + pc *types.PluginConfig) *PluginHelpers { + return &PluginHelpers{ldr: ldr, v: v, rf: rf, pc: pc} +} + +// PluginHelpers holds things that any or all plugins might need. +// This should be available to each plugin, in addition to +// any plugin-specific configuration. +type PluginHelpers struct { + ldr ifc.Loader + v ifc.Validator + rf *Factory + pc *types.PluginConfig +} + +func (c *PluginHelpers) GeneralConfig() *types.PluginConfig { + return c.pc +} + +func (c *PluginHelpers) Loader() ifc.Loader { + return c.ldr +} + +func (c *PluginHelpers) ResmapFactory() *Factory { + return c.rf +} + +func (c *PluginHelpers) Validator() ifc.Validator { + return c.v +} + +type GeneratorPlugin interface { + Generator + Configurable +} + +type TransformerPlugin interface { + Transformer + Configurable +} + +// ResMap is an interface describing operations on the +// core kustomize data structure, a list of Resources. +// +// Every Resource has two ResIds: OrgId and CurId. +// +// In a ResMap, no two resources may have the same CurId, +// but they may have the same OrgId. The latter can happen +// when mixing two or more different overlays apply different +// transformations to a common base. When looking for a +// resource to transform, try the OrgId first, and if this +// fails or finds too many, it might make sense to then try +// the CurrId. Depends on the situation. +// +// TODO: get rid of this interface (use bare resWrangler). +// There aren't multiple implementations any more. +type ResMap interface { + // Size reports the number of resources. + Size() int + + // Resources provides a discardable slice + // of resource pointers, returned in the order + // as appended. + Resources() []*resource.Resource + + // Append adds a Resource. Error on CurId collision. + // + // A class invariant of ResMap is that all of its + // resources must differ in their value of + // CurId(), aka current Id. The Id is the tuple + // of {namespace, group, version, kind, name} + // (see ResId). + // + // This invariant reflects the invariant of a + // kubernetes cluster, where if one tries to add + // a resource to the cluster whose Id matches + // that of a resource already in the cluster, + // only two outcomes are allowed. Either the + // incoming resource is _merged_ into the existing + // one, or the incoming resource is rejected. + // One cannot end up with two resources + // in the cluster with the same Id. + Append(*resource.Resource) error + + // AppendAll appends another ResMap to self, + // failing on any CurId collision. + AppendAll(ResMap) error + + // AbsorbAll appends, replaces or merges the contents + // of another ResMap into self, + // allowing and sometimes demanding ID collisions. + // A collision would be demanded, say, when a generated + // ConfigMap has the "replace" option in its generation + // instructions, meaning it _must_ replace + // something in the known set of resources. + // If a resource id for resource X is found to already + // be in self, then the behavior field for X must + // be BehaviorMerge or BehaviorReplace. If X is not in + // self, then its behavior _cannot_ be merge or replace. + AbsorbAll(ResMap) error + + // AddOriginAnnotation will add the provided origin as + // an origin annotation to all resources in the ResMap, if + // the origin is not nil. + AddOriginAnnotation(origin *resource.Origin) error + + // RemoveOriginAnnotation will remove the origin annotation + // from all resources in the ResMap + RemoveOriginAnnotations() error + + // AddTransformerAnnotation will add the provided origin as + // an origin annotation if the resource doesn't have one; a + // transformer annotation otherwise; to all resources in + // ResMap + AddTransformerAnnotation(origin *resource.Origin) error + + // RemoveTransformerAnnotation will remove the transformer annotation + // from all resources in the ResMap + RemoveTransformerAnnotations() error + + // AnnotateAll annotates all resources in the ResMap with + // the provided key value pair. + AnnotateAll(key string, value string) error + + // AsYaml returns the yaml form of resources. + AsYaml() ([]byte, error) + + // GetByIndex returns a resource at the given index, + // nil if out of range. + GetByIndex(int) *resource.Resource + + // GetIndexOfCurrentId returns the index of the resource + // with the given CurId. + // Returns error if there is more than one match. + // Returns (-1, nil) if there is no match. + GetIndexOfCurrentId(id resid.ResId) (int, error) + + // GetMatchingResourcesByCurrentId returns the resources + // who's CurId is matched by the argument. + GetMatchingResourcesByCurrentId(matches IdMatcher) []*resource.Resource + + // GetMatchingResourcesByAnyId returns the resources + // who's current or previous IDs is matched by the argument. + GetMatchingResourcesByAnyId(matches IdMatcher) []*resource.Resource + + // GetByCurrentId is shorthand for calling + // GetMatchingResourcesByCurrentId with a matcher requiring + // an exact match, returning an error on multiple or no matches. + GetByCurrentId(resid.ResId) (*resource.Resource, error) + + // GetById is shorthand for calling + // GetMatchingResourcesByAnyId with a matcher requiring + // an exact match, returning an error on multiple or no matches. + GetById(resid.ResId) (*resource.Resource, error) + + // GroupedByCurrentNamespace returns a map of namespace + // to a slice of *Resource in that namespace. + // Cluster-scoped Resources are not included (see ClusterScoped). + // Resources with an empty namespace are placed + // in the resid.DefaultNamespace entry. + GroupedByCurrentNamespace() map[string][]*resource.Resource + + // GroupedByOriginalNamespace performs as GroupByNamespace + // but use the original namespace instead of the current + // one to perform the grouping. + GroupedByOriginalNamespace() map[string][]*resource.Resource + + // ClusterScoped returns a slice of resources that + // cannot be placed in a namespace, e.g. + // Node, ClusterRole, Namespace itself, etc. + ClusterScoped() []*resource.Resource + + // AllIds returns all CurrentIds. + AllIds() []resid.ResId + + // Replace replaces the resource with the matching CurId. + // Error if there's no match or more than one match. + // Returns the index where the replacement happened. + Replace(*resource.Resource) (int, error) + + // Remove removes the resource whose CurId matches the argument. + // Error if not found. + Remove(resid.ResId) error + + // Clear removes all resources and Ids. + Clear() + + // DropEmpties drops empty resources from the ResMap. + DropEmpties() + + // SubsetThatCouldBeReferencedByResource returns a ResMap subset + // of self with resources that could be referenced by the + // resource argument. + // This is a filter; it excludes things that cannot be + // referenced by the resource, e.g. objects in other + // namespaces. Cluster wide objects are never excluded. + SubsetThatCouldBeReferencedByResource(*resource.Resource) (ResMap, error) + + // DeAnchor replaces YAML aliases with structured data copied from anchors. + // This cannot be undone; if desired, call DeepCopy first. + // Subsequent marshalling to YAML will no longer have anchor + // definitions ('&') or aliases ('*'). + // + // Anchors are not expected to work across YAML 'documents'. + // If three resources are loaded from one file containing three YAML docs: + // + // {resourceA} + // --- + // {resourceB} + // --- + // {resourceC} + // + // then anchors defined in A cannot be seen from B and C and vice versa. + // OTOH, cross-resource links (a field in B referencing fields in A) will + // work if the resources are gathered in a ResourceList: + // + // apiVersion: config.kubernetes.io/v1 + // kind: ResourceList + // metadata: + // name: someList + // items: + // - {resourceA} + // - {resourceB} + // - {resourceC} + // + DeAnchor() error + + // DeepCopy copies the ResMap and underlying resources. + DeepCopy() ResMap + + // ShallowCopy copies the ResMap but + // not the underlying resources. + ShallowCopy() ResMap + + // ErrorIfNotEqualSets returns an error if the + // argument doesn't have the same resources as self. + // Ordering is _not_ taken into account, + // as this function was solely used in tests written + // before internal resource order was maintained, + // and those tests are initialized with maps which + // by definition have random ordering, and will + // fail spuriously. + // TODO: modify tests to not use resmap.FromMap, + // TODO: - and replace this with a stricter equals. + ErrorIfNotEqualSets(ResMap) error + + // ErrorIfNotEqualLists returns an error if the + // argument doesn't have the resource objects + // data as self, in the same order. + // Meta information is ignored; this is similar + // to comparing the AsYaml() strings, but allows + // for more informed errors on not equals. + ErrorIfNotEqualLists(ResMap) error + + // Debug prints the ResMap. + Debug(title string) + + // Select returns a list of resources that + // are selected by a Selector + Select(types.Selector) ([]*resource.Resource, error) + + // ToRNodeSlice returns a copy of the resources as RNodes. + ToRNodeSlice() []*yaml.RNode + + // ApplySmPatch applies a strategic-merge patch to the + // selected set of resources. + ApplySmPatch( + selectedSet *resource.IdSet, patch *resource.Resource) error + + // RemoveBuildAnnotations removes annotations created by the build process. + RemoveBuildAnnotations() + + // ApplyFilter applies an RNode filter to all Resources in the ResMap. + // TODO: Send/recover ancillary Resource data to/from subprocesses. + // Assure that the ancillary data in Resource (everything not in the RNode) + // is sent to and re-captured from transformer subprocess (as the process + // might edit that information). One way to do this would be to solely use + // RNode metadata annotation reading and writing instead of using Resource + // struct data members, i.e. the Resource struct is replaced by RNode + // and use of (slow) k8s metadata annotations inside the RNode. + ApplyFilter(f kio.Filter) error +} diff --git a/go/internal/forked/api/resmap/resmap_test.go b/go/internal/forked/api/resmap/resmap_test.go new file mode 100644 index 000000000..f250c9775 --- /dev/null +++ b/go/internal/forked/api/resmap/resmap_test.go @@ -0,0 +1,6 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package resmap_test + +// See reswrangler_test.go diff --git a/go/internal/forked/api/resmap/reswrangler.go b/go/internal/forked/api/resmap/reswrangler.go new file mode 100644 index 000000000..71e85b29c --- /dev/null +++ b/go/internal/forked/api/resmap/reswrangler.go @@ -0,0 +1,765 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package resmap + +import ( + "bytes" + "fmt" + "reflect" + + "github.com/pkg/errors" + "sigs.k8s.io/kustomize/api/filters/annotations" + "sigs.k8s.io/kustomize/api/resource" + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/kio" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/resid" + kyaml "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" +) + +// resWrangler implements ResMap. +type resWrangler struct { + // Resource list maintained in load (append) order. + // This is important for transformers, which must + // be performed in a specific order, and for users + // who for whatever reasons wish the order they + // specify in kustomizations to be maintained and + // available as an option for final YAML rendering. + rList []*resource.Resource +} + +func newOne() *resWrangler { + result := &resWrangler{} + result.Clear() + return result +} + +// Clear implements ResMap. +func (m *resWrangler) Clear() { + m.rList = nil +} + +// DropEmpties quickly drops empty resources. +// It doesn't use Append, which checks for Id collisions. +func (m *resWrangler) DropEmpties() { + var rList []*resource.Resource + for _, r := range m.rList { + if !r.IsNilOrEmpty() { + rList = append(rList, r) + } + } + m.rList = rList +} + +// Size implements ResMap. +func (m *resWrangler) Size() int { + return len(m.rList) +} + +func (m *resWrangler) indexOfResource(other *resource.Resource) int { + for i, r := range m.rList { + if r == other { + return i + } + } + return -1 +} + +// Resources implements ResMap. +func (m *resWrangler) Resources() []*resource.Resource { + tmp := make([]*resource.Resource, len(m.rList)) + copy(tmp, m.rList) + return tmp +} + +// Append implements ResMap. +func (m *resWrangler) Append(res *resource.Resource) error { + id := res.CurId() + if r := m.GetMatchingResourcesByCurrentId(id.Equals); len(r) > 0 { + return fmt.Errorf( + "may not add resource with an already registered id: %s", id) + } + m.append(res) + return nil +} + +// append appends without performing an Id check +func (m *resWrangler) append(res *resource.Resource) { + m.rList = append(m.rList, res) +} + +// Remove implements ResMap. +func (m *resWrangler) Remove(adios resid.ResId) error { + var rList []*resource.Resource + for _, r := range m.rList { + if r.CurId() != adios { + rList = append(rList, r) + } + } + if len(rList) != m.Size()-1 { + return fmt.Errorf("id %s not found in removal", adios) + } + m.rList = rList + return nil +} + +// Replace implements ResMap. +func (m *resWrangler) Replace(res *resource.Resource) (int, error) { + id := res.CurId() + i, err := m.GetIndexOfCurrentId(id) + if err != nil { + return -1, errors.Wrap(err, "in Replace") + } + if i < 0 { + return -1, fmt.Errorf("cannot find resource with id %s to replace", id) + } + m.rList[i] = res + return i, nil +} + +// AllIds implements ResMap. +func (m *resWrangler) AllIds() (ids []resid.ResId) { + ids = make([]resid.ResId, m.Size()) + for i, r := range m.rList { + ids[i] = r.CurId() + } + return +} + +// Debug implements ResMap. +func (m *resWrangler) Debug(title string) { + fmt.Println("--------------------------- " + title) + firstObj := true + for i, r := range m.rList { + if firstObj { + firstObj = false + } else { + fmt.Println("---") + } + fmt.Printf("# %d %s\n%s\n", i, r.OrgId(), r.String()) + } +} + +type IdMatcher func(resid.ResId) bool + +// GetByIndex implements ResMap. +func (m *resWrangler) GetByIndex(i int) *resource.Resource { + if i < 0 || i >= m.Size() { + return nil + } + return m.rList[i] +} + +// GetIndexOfCurrentId implements ResMap. +func (m *resWrangler) GetIndexOfCurrentId(id resid.ResId) (int, error) { + count := 0 + result := -1 + for i, r := range m.rList { + if id.Equals(r.CurId()) { + count++ + result = i + } + } + if count > 1 { + return -1, fmt.Errorf("id matched %d resources", count) + } + return result, nil +} + +type IdFromResource func(r *resource.Resource) resid.ResId + +func GetCurrentId(r *resource.Resource) resid.ResId { return r.CurId() } + +// GetMatchingResourcesByCurrentId implements ResMap. +func (m *resWrangler) GetMatchingResourcesByCurrentId( + matches IdMatcher) []*resource.Resource { + return m.filteredById(matches, GetCurrentId) +} + +// GetMatchingResourcesByAnyId implements ResMap. +func (m *resWrangler) GetMatchingResourcesByAnyId( + matches IdMatcher) []*resource.Resource { + var result []*resource.Resource + for _, r := range m.rList { + for _, id := range append(r.PrevIds(), r.CurId()) { + if matches(id) { + result = append(result, r) + break + } + } + } + return result +} + +func (m *resWrangler) filteredById( + matches IdMatcher, idGetter IdFromResource) []*resource.Resource { + var result []*resource.Resource + for _, r := range m.rList { + if matches(idGetter(r)) { + result = append(result, r) + } + } + return result +} + +// GetByCurrentId implements ResMap. +func (m *resWrangler) GetByCurrentId( + id resid.ResId) (*resource.Resource, error) { + return demandOneMatch(m.GetMatchingResourcesByCurrentId, id, "Current") +} + +// GetById implements ResMap. +func (m *resWrangler) GetById( + id resid.ResId) (*resource.Resource, error) { + r, err := demandOneMatch(m.GetMatchingResourcesByAnyId, id, "Id") + if err != nil { + return nil, fmt.Errorf( + "%s; failed to find unique target for patch %s", + err.Error(), id.String()) + } + return r, nil +} + +type resFinder func(IdMatcher) []*resource.Resource + +func demandOneMatch( + f resFinder, id resid.ResId, s string) (*resource.Resource, error) { + r := f(id.Equals) + if len(r) == 1 { + return r[0], nil + } + if len(r) > 1 { + return nil, fmt.Errorf("multiple matches for %s %s", s, id) + } + return nil, fmt.Errorf("no matches for %s %s", s, id) +} + +// GroupedByCurrentNamespace implements ResMap. +func (m *resWrangler) GroupedByCurrentNamespace() map[string][]*resource.Resource { + items := m.groupedByCurrentNamespace() + delete(items, resid.TotallyNotANamespace) + return items +} + +// ClusterScoped implements ResMap. +func (m *resWrangler) ClusterScoped() []*resource.Resource { + return m.groupedByCurrentNamespace()[resid.TotallyNotANamespace] +} + +func (m *resWrangler) groupedByCurrentNamespace() map[string][]*resource.Resource { + byNamespace := make(map[string][]*resource.Resource) + for _, res := range m.rList { + namespace := res.CurId().EffectiveNamespace() + if _, found := byNamespace[namespace]; !found { + byNamespace[namespace] = []*resource.Resource{} + } + byNamespace[namespace] = append(byNamespace[namespace], res) + } + return byNamespace +} + +// GroupedByOriginalNamespace implements ResMap. +func (m *resWrangler) GroupedByOriginalNamespace() map[string][]*resource.Resource { + items := m.groupedByOriginalNamespace() + delete(items, resid.TotallyNotANamespace) + return items +} + +func (m *resWrangler) groupedByOriginalNamespace() map[string][]*resource.Resource { + byNamespace := make(map[string][]*resource.Resource) + for _, res := range m.rList { + namespace := res.OrgId().EffectiveNamespace() + if _, found := byNamespace[namespace]; !found { + byNamespace[namespace] = []*resource.Resource{} + } + byNamespace[namespace] = append(byNamespace[namespace], res) + } + return byNamespace +} + +// AsYaml implements ResMap. +func (m *resWrangler) AsYaml() ([]byte, error) { + firstObj := true + var b []byte + buf := bytes.NewBuffer(b) + for _, res := range m.rList { + out, err := res.AsYAML() + if err != nil { + m, _ := res.Map() + return nil, errors.Wrapf(err, "%#v", m) + } + if firstObj { + firstObj = false + } else { + if _, err = buf.WriteString("---\n"); err != nil { + return nil, err + } + } + if _, err = buf.Write(out); err != nil { + return nil, err + } + } + return buf.Bytes(), nil +} + +// ErrorIfNotEqualSets implements ResMap. +func (m *resWrangler) ErrorIfNotEqualSets(other ResMap) error { + m2, ok := other.(*resWrangler) + if !ok { + return fmt.Errorf("bad cast to resWrangler 1") + } + if m.Size() != m2.Size() { + return fmt.Errorf( + "lists have different number of entries: %#v doesn't equal %#v", + m.rList, m2.rList) + } + seen := make(map[int]bool) + for _, r1 := range m.rList { + id := r1.CurId() + others := m2.GetMatchingResourcesByCurrentId(id.Equals) + if len(others) == 0 { + return fmt.Errorf( + "id in self missing from other; id: %s", id) + } + if len(others) > 1 { + return fmt.Errorf( + "id in self matches %d in other; id: %s", len(others), id) + } + r2 := others[0] + if !reflect.DeepEqual(r1.RNode, r2.RNode) { + return fmt.Errorf( + "nodes unequal: \n -- %s,\n -- %s\n\n--\n%#v\n------\n%#v\n", + r1, r2, r1, r2) + } + seen[m2.indexOfResource(r2)] = true + } + if len(seen) != m.Size() { + return fmt.Errorf("counting problem %d != %d", len(seen), m.Size()) + } + return nil +} + +// ErrorIfNotEqualLists implements ResMap. +func (m *resWrangler) ErrorIfNotEqualLists(other ResMap) error { + m2, ok := other.(*resWrangler) + if !ok { + return fmt.Errorf("bad cast to resWrangler 2") + } + if m.Size() != m2.Size() { + return fmt.Errorf( + "lists have different number of entries: %#v doesn't equal %#v", + m.rList, m2.rList) + } + for i, r1 := range m.rList { + r2 := m2.rList[i] + if err := r1.ErrIfNotEquals(r2); err != nil { + return err + } + } + return nil +} + +type resCopier func(r *resource.Resource) *resource.Resource + +// ShallowCopy implements ResMap. +func (m *resWrangler) ShallowCopy() ResMap { + return m.makeCopy( + func(r *resource.Resource) *resource.Resource { + return r + }) +} + +// DeepCopy implements ResMap. +func (m *resWrangler) DeepCopy() ResMap { + return m.makeCopy( + func(r *resource.Resource) *resource.Resource { + return r.DeepCopy() + }) +} + +// makeCopy copies the ResMap. +func (m *resWrangler) makeCopy(copier resCopier) ResMap { + result := &resWrangler{} + result.rList = make([]*resource.Resource, m.Size()) + for i, r := range m.rList { + result.rList[i] = copier(r) + } + return result +} + +// SubsetThatCouldBeReferencedByResource implements ResMap. +func (m *resWrangler) SubsetThatCouldBeReferencedByResource( + referrer *resource.Resource) (ResMap, error) { + referrerId := referrer.CurId() + if referrerId.IsClusterScoped() { + // A cluster scoped resource can refer to anything. + return m, nil + } + result := newOne() + roleBindingNamespaces, err := getNamespacesForRoleBinding(referrer) + if err != nil { + return nil, err + } + for _, possibleTarget := range m.rList { + id := possibleTarget.CurId() + if id.IsClusterScoped() { + // A cluster-scoped resource can be referred to by anything. + result.append(possibleTarget) + continue + } + if id.IsNsEquals(referrerId) { + // The two objects are in the same namespace. + result.append(possibleTarget) + continue + } + // The two objects are namespaced (not cluster-scoped), AND + // are in different namespaces. + // There's still a chance they can refer to each other. + if roleBindingNamespaces[possibleTarget.GetNamespace()] { + result.append(possibleTarget) + } + } + return result, nil +} + +// getNamespacesForRoleBinding returns referenced ServiceAccount namespaces +// if the resource is a RoleBinding +func getNamespacesForRoleBinding(r *resource.Resource) (map[string]bool, error) { + result := make(map[string]bool) + if r.GetKind() != "RoleBinding" { + return result, nil + } + //nolint staticcheck + subjects, err := r.GetSlice("subjects") + if err != nil || subjects == nil { + return result, nil + } + for _, s := range subjects { + subject := s.(map[string]interface{}) + if ns, ok1 := subject["namespace"]; ok1 { + if kind, ok2 := subject["kind"]; ok2 { + if kind.(string) == "ServiceAccount" { + if n, ok3 := ns.(string); ok3 { + result[n] = true + } else { + return nil, errors.New(fmt.Sprintf("Invalid Input: namespace is blank for resource %q\n", r.CurId())) + } + } + } + } + } + return result, nil +} + +// AppendAll implements ResMap. +func (m *resWrangler) AppendAll(other ResMap) error { + if other == nil { + return nil + } + m2, ok := other.(*resWrangler) + if !ok { + return fmt.Errorf("bad cast to resWrangler 3") + } + return m.appendAll(m2.rList) +} + +// appendAll appends all the resources, error on Id collision. +func (m *resWrangler) appendAll(list []*resource.Resource) error { + for _, res := range list { + if err := m.Append(res); err != nil { + return err + } + } + return nil +} + +// AbsorbAll implements ResMap. +func (m *resWrangler) AbsorbAll(other ResMap) error { + if other == nil { + return nil + } + m2, ok := other.(*resWrangler) + if !ok { + return fmt.Errorf("bad cast to resWrangler 4") + } + for _, r := range m2.rList { + err := m.appendReplaceOrMerge(r) + if err != nil { + return err + } + } + return nil +} + +// AddOriginAnnotation implements ResMap. +func (m *resWrangler) AddOriginAnnotation(origin *resource.Origin) error { + if origin == nil { + return nil + } + for _, res := range m.rList { + or, err := res.GetOrigin() + if or != nil || err != nil { + // if any resources already have an origin annotation, + // skip it + continue + } + if err := res.SetOrigin(origin); err != nil { + return err + } + } + return nil +} + +// RemoveOriginAnnotation implements ResMap +func (m *resWrangler) RemoveOriginAnnotations() error { + for _, res := range m.rList { + if err := res.SetOrigin(nil); err != nil { + return err + } + } + return nil +} + +// AddTransformerAnnotation implements ResMap +func (m *resWrangler) AddTransformerAnnotation(origin *resource.Origin) error { + for _, res := range m.rList { + or, err := res.GetOrigin() + if err != nil { + return err + } + if or == nil { + // the resource does not have an origin annotation, so + // we assume that the transformer generated the resource + // rather than modifying it + err = res.SetOrigin(origin) + } else { + // the resource already has an origin annotation, so we + // record the provided origin as a transformation + err = res.AddTransformation(origin) + } + if err != nil { + return err + } + } + return nil +} + +// RemoveTransformerAnnotations implements ResMap +func (m *resWrangler) RemoveTransformerAnnotations() error { + for _, res := range m.rList { + if err := res.ClearTransformations(); err != nil { + return err + } + } + return nil +} + +func (m *resWrangler) appendReplaceOrMerge(res *resource.Resource) error { + id := res.CurId() + matches := m.GetMatchingResourcesByAnyId(id.Equals) + switch len(matches) { + case 0: + switch res.Behavior() { + case types.BehaviorMerge, types.BehaviorReplace: + return fmt.Errorf( + "id %#v does not exist; cannot merge or replace", id) + default: + // presumably types.BehaviorCreate + return m.Append(res) + } + case 1: + old := matches[0] + if old == nil { + return fmt.Errorf("id lookup failure") + } + index := m.indexOfResource(old) + if index < 0 { + return fmt.Errorf("indexing problem") + } + switch res.Behavior() { + case types.BehaviorReplace: + res.CopyMergeMetaDataFieldsFrom(old) + case types.BehaviorMerge: + // ensure the origin annotation doesn't get overwritten + orig, err := old.GetOrigin() + if err != nil { + return err + } + res.CopyMergeMetaDataFieldsFrom(old) + res.MergeDataMapFrom(old) + res.MergeBinaryDataMapFrom(old) + if orig != nil { + res.SetOrigin(orig) + } + + default: + return fmt.Errorf( + "id %#v exists; behavior must be merge or replace", id) + } + i, err := m.Replace(res) + if err != nil { + return err + } + if i != index { + return fmt.Errorf("unexpected target index in replacement") + } + return nil + default: + return fmt.Errorf( + "found multiple objects %v that could accept merge of %v", + matches, id) + } +} + +// AnnotateAll implements ResMap +func (m *resWrangler) AnnotateAll(key string, value string) error { + return m.ApplyFilter(annotations.Filter{ + Annotations: map[string]string{ + key: value, + }, + FsSlice: []types.FieldSpec{{ + Path: "metadata/annotations", + CreateIfNotPresent: true, + }}, + }) +} + +// Select returns a list of resources that +// are selected by a Selector +func (m *resWrangler) Select(s types.Selector) ([]*resource.Resource, error) { + var result []*resource.Resource + sr, err := types.NewSelectorRegex(&s) + if err != nil { + return nil, err + } + for _, r := range m.rList { + curId := r.CurId() + orgId := r.OrgId() + + // It first tries to match with the original namespace + // then matches with the current namespace + if !sr.MatchNamespace(orgId.EffectiveNamespace()) && + !sr.MatchNamespace(curId.EffectiveNamespace()) { + continue + } + + // It first tries to match with the original name + // then matches with the current name + if !sr.MatchName(orgId.Name) && + !sr.MatchName(curId.Name) { + continue + } + + // matches the GVK + if !sr.MatchGvk(r.GetGvk()) { + continue + } + + // matches the label selector + matched, err := r.MatchesLabelSelector(s.LabelSelector) + if err != nil { + return nil, err + } + if !matched { + continue + } + + // matches the annotation selector + matched, err = r.MatchesAnnotationSelector(s.AnnotationSelector) + if err != nil { + return nil, err + } + if !matched { + continue + } + result = append(result, r) + } + return result, nil +} + +// ToRNodeSlice returns a copy of the resources as RNodes. +func (m *resWrangler) ToRNodeSlice() []*kyaml.RNode { + result := make([]*kyaml.RNode, len(m.rList)) + for i := range m.rList { + result[i] = m.rList[i].Copy() + } + return result +} + +// DeAnchor implements ResMap. +func (m *resWrangler) DeAnchor() (err error) { + for i := range m.rList { + if err = m.rList[i].DeAnchor(); err != nil { + return err + } + } + return nil +} + +// ApplySmPatch applies the patch, and errors on Id collisions. +func (m *resWrangler) ApplySmPatch( + selectedSet *resource.IdSet, patch *resource.Resource) error { + var list []*resource.Resource + for _, res := range m.rList { + if selectedSet.Contains(res.CurId()) { + patchCopy := patch.DeepCopy() + patchCopy.CopyMergeMetaDataFieldsFrom(patch) + patchCopy.SetGvk(res.GetGvk()) + patchCopy.SetKind(patch.GetKind()) + if err := res.ApplySmPatch(patchCopy); err != nil { + return err + } + } + if !res.IsNilOrEmpty() { + list = append(list, res) + } + } + m.Clear() + return m.appendAll(list) +} + +func (m *resWrangler) RemoveBuildAnnotations() { + for _, r := range m.rList { + r.RemoveBuildAnnotations() + } +} + +// ApplyFilter implements ResMap. +func (m *resWrangler) ApplyFilter(f kio.Filter) error { + reverseLookup := make(map[*kyaml.RNode]*resource.Resource, len(m.rList)) + nodes := make([]*kyaml.RNode, len(m.rList)) + for i, r := range m.rList { + ptr := &(r.RNode) + nodes[i] = ptr + reverseLookup[ptr] = r + } + // The filter can modify nodes, but also delete and create them. + // The filtered list might be smaller or larger than the nodes list. + filtered, err := f.Filter(nodes) + if err != nil { + return err + } + // Rebuild the resmap from the filtered RNodes. + var nRList []*resource.Resource + for _, rn := range filtered { + if rn.IsNilOrEmpty() { + // A node might make it through the filter as an object, + // but still be empty. Drop such entries. + continue + } + res, ok := reverseLookup[rn] + if !ok { + // A node was created; make a Resource to wrap it. + res = &resource.Resource{ + RNode: *rn, + // Leave remaining fields empty. + // At at time of writing, seeking to eliminate those fields. + // Alternatively, could just return error on creation attempt + // until remaining fields eliminated. + } + } + nRList = append(nRList, res) + } + m.rList = nRList + return nil +} diff --git a/go/internal/forked/api/resmap/reswrangler.go b/go/internal/forked/api/resmap/reswrangler.go new file mode 100644 index 000000000..ac2b562e7 --- /dev/null +++ b/go/internal/forked/api/resmap/reswrangler.go @@ -0,0 +1,765 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package resmap + +import ( + "bytes" + "fmt" + "reflect" + + "github.com/pkg/errors" + "sigs.k8s.io/kustomize/api/filters/annotations" + "sigs.k8s.io/kustomize/api/resource" + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/kio" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/resid" + kyaml "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/yaml" +) + +// resWrangler implements ResMap. +type resWrangler struct { + // Resource list maintained in load (append) order. + // This is important for transformers, which must + // be performed in a specific order, and for users + // who for whatever reasons wish the order they + // specify in kustomizations to be maintained and + // available as an option for final YAML rendering. + rList []*resource.Resource +} + +func newOne() *resWrangler { + result := &resWrangler{} + result.Clear() + return result +} + +// Clear implements ResMap. +func (m *resWrangler) Clear() { + m.rList = nil +} + +// DropEmpties quickly drops empty resources. +// It doesn't use Append, which checks for Id collisions. +func (m *resWrangler) DropEmpties() { + var rList []*resource.Resource + for _, r := range m.rList { + if !r.IsNilOrEmpty() { + rList = append(rList, r) + } + } + m.rList = rList +} + +// Size implements ResMap. +func (m *resWrangler) Size() int { + return len(m.rList) +} + +func (m *resWrangler) indexOfResource(other *resource.Resource) int { + for i, r := range m.rList { + if r == other { + return i + } + } + return -1 +} + +// Resources implements ResMap. +func (m *resWrangler) Resources() []*resource.Resource { + tmp := make([]*resource.Resource, len(m.rList)) + copy(tmp, m.rList) + return tmp +} + +// Append implements ResMap. +func (m *resWrangler) Append(res *resource.Resource) error { + id := res.CurId() + if r := m.GetMatchingResourcesByCurrentId(id.Equals); len(r) > 0 { + return fmt.Errorf( + "may not add resource with an already registered id: %s", id) + } + m.append(res) + return nil +} + +// append appends without performing an Id check +func (m *resWrangler) append(res *resource.Resource) { + m.rList = append(m.rList, res) +} + +// Remove implements ResMap. +func (m *resWrangler) Remove(adios resid.ResId) error { + var rList []*resource.Resource + for _, r := range m.rList { + if r.CurId() != adios { + rList = append(rList, r) + } + } + if len(rList) != m.Size()-1 { + return fmt.Errorf("id %s not found in removal", adios) + } + m.rList = rList + return nil +} + +// Replace implements ResMap. +func (m *resWrangler) Replace(res *resource.Resource) (int, error) { + id := res.CurId() + i, err := m.GetIndexOfCurrentId(id) + if err != nil { + return -1, errors.Wrap(err, "in Replace") + } + if i < 0 { + return -1, fmt.Errorf("cannot find resource with id %s to replace", id) + } + m.rList[i] = res + return i, nil +} + +// AllIds implements ResMap. +func (m *resWrangler) AllIds() (ids []resid.ResId) { + ids = make([]resid.ResId, m.Size()) + for i, r := range m.rList { + ids[i] = r.CurId() + } + return +} + +// Debug implements ResMap. +func (m *resWrangler) Debug(title string) { + fmt.Println("--------------------------- " + title) + firstObj := true + for i, r := range m.rList { + if firstObj { + firstObj = false + } else { + fmt.Println("---") + } + fmt.Printf("# %d %s\n%s\n", i, r.OrgId(), r.String()) + } +} + +type IdMatcher func(resid.ResId) bool + +// GetByIndex implements ResMap. +func (m *resWrangler) GetByIndex(i int) *resource.Resource { + if i < 0 || i >= m.Size() { + return nil + } + return m.rList[i] +} + +// GetIndexOfCurrentId implements ResMap. +func (m *resWrangler) GetIndexOfCurrentId(id resid.ResId) (int, error) { + count := 0 + result := -1 + for i, r := range m.rList { + if id.Equals(r.CurId()) { + count++ + result = i + } + } + if count > 1 { + return -1, fmt.Errorf("id matched %d resources", count) + } + return result, nil +} + +type IdFromResource func(r *resource.Resource) resid.ResId + +func GetCurrentId(r *resource.Resource) resid.ResId { return r.CurId() } + +// GetMatchingResourcesByCurrentId implements ResMap. +func (m *resWrangler) GetMatchingResourcesByCurrentId( + matches IdMatcher) []*resource.Resource { + return m.filteredById(matches, GetCurrentId) +} + +// GetMatchingResourcesByAnyId implements ResMap. +func (m *resWrangler) GetMatchingResourcesByAnyId( + matches IdMatcher) []*resource.Resource { + var result []*resource.Resource + for _, r := range m.rList { + for _, id := range append(r.PrevIds(), r.CurId()) { + if matches(id) { + result = append(result, r) + break + } + } + } + return result +} + +func (m *resWrangler) filteredById( + matches IdMatcher, idGetter IdFromResource) []*resource.Resource { + var result []*resource.Resource + for _, r := range m.rList { + if matches(idGetter(r)) { + result = append(result, r) + } + } + return result +} + +// GetByCurrentId implements ResMap. +func (m *resWrangler) GetByCurrentId( + id resid.ResId) (*resource.Resource, error) { + return demandOneMatch(m.GetMatchingResourcesByCurrentId, id, "Current") +} + +// GetById implements ResMap. +func (m *resWrangler) GetById( + id resid.ResId) (*resource.Resource, error) { + r, err := demandOneMatch(m.GetMatchingResourcesByAnyId, id, "Id") + if err != nil { + return nil, fmt.Errorf( + "%s; failed to find unique target for patch %s", + err.Error(), id.String()) + } + return r, nil +} + +type resFinder func(IdMatcher) []*resource.Resource + +func demandOneMatch( + f resFinder, id resid.ResId, s string) (*resource.Resource, error) { + r := f(id.Equals) + if len(r) == 1 { + return r[0], nil + } + if len(r) > 1 { + return nil, fmt.Errorf("multiple matches for %s %s", s, id) + } + return nil, fmt.Errorf("no matches for %s %s", s, id) +} + +// GroupedByCurrentNamespace implements ResMap. +func (m *resWrangler) GroupedByCurrentNamespace() map[string][]*resource.Resource { + items := m.groupedByCurrentNamespace() + delete(items, resid.TotallyNotANamespace) + return items +} + +// ClusterScoped implements ResMap. +func (m *resWrangler) ClusterScoped() []*resource.Resource { + return m.groupedByCurrentNamespace()[resid.TotallyNotANamespace] +} + +func (m *resWrangler) groupedByCurrentNamespace() map[string][]*resource.Resource { + byNamespace := make(map[string][]*resource.Resource) + for _, res := range m.rList { + namespace := res.CurId().EffectiveNamespace() + if _, found := byNamespace[namespace]; !found { + byNamespace[namespace] = []*resource.Resource{} + } + byNamespace[namespace] = append(byNamespace[namespace], res) + } + return byNamespace +} + +// GroupedByOriginalNamespace implements ResMap. +func (m *resWrangler) GroupedByOriginalNamespace() map[string][]*resource.Resource { + items := m.groupedByOriginalNamespace() + delete(items, resid.TotallyNotANamespace) + return items +} + +func (m *resWrangler) groupedByOriginalNamespace() map[string][]*resource.Resource { + byNamespace := make(map[string][]*resource.Resource) + for _, res := range m.rList { + namespace := res.OrgId().EffectiveNamespace() + if _, found := byNamespace[namespace]; !found { + byNamespace[namespace] = []*resource.Resource{} + } + byNamespace[namespace] = append(byNamespace[namespace], res) + } + return byNamespace +} + +// AsYaml implements ResMap. +func (m *resWrangler) AsYaml() ([]byte, error) { + firstObj := true + var b []byte + buf := bytes.NewBuffer(b) + for _, res := range m.rList { + out, err := res.AsYAML() + if err != nil { + m, _ := res.Map() + return nil, errors.Wrapf(err, "%#v", m) + } + if firstObj { + firstObj = false + } else { + if _, err = buf.WriteString("---\n"); err != nil { + return nil, err + } + } + if _, err = buf.Write(out); err != nil { + return nil, err + } + } + return buf.Bytes(), nil +} + +// ErrorIfNotEqualSets implements ResMap. +func (m *resWrangler) ErrorIfNotEqualSets(other ResMap) error { + m2, ok := other.(*resWrangler) + if !ok { + return fmt.Errorf("bad cast to resWrangler 1") + } + if m.Size() != m2.Size() { + return fmt.Errorf( + "lists have different number of entries: %#v doesn't equal %#v", + m.rList, m2.rList) + } + seen := make(map[int]bool) + for _, r1 := range m.rList { + id := r1.CurId() + others := m2.GetMatchingResourcesByCurrentId(id.Equals) + if len(others) == 0 { + return fmt.Errorf( + "id in self missing from other; id: %s", id) + } + if len(others) > 1 { + return fmt.Errorf( + "id in self matches %d in other; id: %s", len(others), id) + } + r2 := others[0] + if !reflect.DeepEqual(r1.RNode, r2.RNode) { + return fmt.Errorf( + "nodes unequal: \n -- %s,\n -- %s\n\n--\n%#v\n------\n%#v\n", + r1, r2, r1, r2) + } + seen[m2.indexOfResource(r2)] = true + } + if len(seen) != m.Size() { + return fmt.Errorf("counting problem %d != %d", len(seen), m.Size()) + } + return nil +} + +// ErrorIfNotEqualLists implements ResMap. +func (m *resWrangler) ErrorIfNotEqualLists(other ResMap) error { + m2, ok := other.(*resWrangler) + if !ok { + return fmt.Errorf("bad cast to resWrangler 2") + } + if m.Size() != m2.Size() { + return fmt.Errorf( + "lists have different number of entries: %#v doesn't equal %#v", + m.rList, m2.rList) + } + for i, r1 := range m.rList { + r2 := m2.rList[i] + if err := r1.ErrIfNotEquals(r2); err != nil { + return err + } + } + return nil +} + +type resCopier func(r *resource.Resource) *resource.Resource + +// ShallowCopy implements ResMap. +func (m *resWrangler) ShallowCopy() ResMap { + return m.makeCopy( + func(r *resource.Resource) *resource.Resource { + return r + }) +} + +// DeepCopy implements ResMap. +func (m *resWrangler) DeepCopy() ResMap { + return m.makeCopy( + func(r *resource.Resource) *resource.Resource { + return r.DeepCopy() + }) +} + +// makeCopy copies the ResMap. +func (m *resWrangler) makeCopy(copier resCopier) ResMap { + result := &resWrangler{} + result.rList = make([]*resource.Resource, m.Size()) + for i, r := range m.rList { + result.rList[i] = copier(r) + } + return result +} + +// SubsetThatCouldBeReferencedByResource implements ResMap. +func (m *resWrangler) SubsetThatCouldBeReferencedByResource( + referrer *resource.Resource) (ResMap, error) { + referrerId := referrer.CurId() + if referrerId.IsClusterScoped() { + // A cluster scoped resource can refer to anything. + return m, nil + } + result := newOne() + roleBindingNamespaces, err := getNamespacesForRoleBinding(referrer) + if err != nil { + return nil, err + } + for _, possibleTarget := range m.rList { + id := possibleTarget.CurId() + if id.IsClusterScoped() { + // A cluster-scoped resource can be referred to by anything. + result.append(possibleTarget) + continue + } + if id.IsNsEquals(referrerId) { + // The two objects are in the same namespace. + result.append(possibleTarget) + continue + } + // The two objects are namespaced (not cluster-scoped), AND + // are in different namespaces. + // There's still a chance they can refer to each other. + if roleBindingNamespaces[possibleTarget.GetNamespace()] { + result.append(possibleTarget) + } + } + return result, nil +} + +// getNamespacesForRoleBinding returns referenced ServiceAccount namespaces +// if the resource is a RoleBinding +func getNamespacesForRoleBinding(r *resource.Resource) (map[string]bool, error) { + result := make(map[string]bool) + if r.GetKind() != "RoleBinding" { + return result, nil + } + //nolint staticcheck + subjects, err := r.GetSlice("subjects") + if err != nil || subjects == nil { + return result, nil + } + for _, s := range subjects { + subject := s.(map[string]interface{}) + if ns, ok1 := subject["namespace"]; ok1 { + if kind, ok2 := subject["kind"]; ok2 { + if kind.(string) == "ServiceAccount" { + if n, ok3 := ns.(string); ok3 { + result[n] = true + } else { + return nil, errors.New(fmt.Sprintf("Invalid Input: namespace is blank for resource %q\n", r.CurId())) + } + } + } + } + } + return result, nil +} + +// AppendAll implements ResMap. +func (m *resWrangler) AppendAll(other ResMap) error { + if other == nil { + return nil + } + m2, ok := other.(*resWrangler) + if !ok { + return fmt.Errorf("bad cast to resWrangler 3") + } + return m.appendAll(m2.rList) +} + +// appendAll appends all the resources, error on Id collision. +func (m *resWrangler) appendAll(list []*resource.Resource) error { + for _, res := range list { + if err := m.Append(res); err != nil { + return err + } + } + return nil +} + +// AbsorbAll implements ResMap. +func (m *resWrangler) AbsorbAll(other ResMap) error { + if other == nil { + return nil + } + m2, ok := other.(*resWrangler) + if !ok { + return fmt.Errorf("bad cast to resWrangler 4") + } + for _, r := range m2.rList { + err := m.appendReplaceOrMerge(r) + if err != nil { + return err + } + } + return nil +} + +// AddOriginAnnotation implements ResMap. +func (m *resWrangler) AddOriginAnnotation(origin *resource.Origin) error { + if origin == nil { + return nil + } + for _, res := range m.rList { + or, err := res.GetOrigin() + if or != nil || err != nil { + // if any resources already have an origin annotation, + // skip it + continue + } + if err := res.SetOrigin(origin); err != nil { + return err + } + } + return nil +} + +// RemoveOriginAnnotation implements ResMap +func (m *resWrangler) RemoveOriginAnnotations() error { + for _, res := range m.rList { + if err := res.SetOrigin(nil); err != nil { + return err + } + } + return nil +} + +// AddTransformerAnnotation implements ResMap +func (m *resWrangler) AddTransformerAnnotation(origin *resource.Origin) error { + for _, res := range m.rList { + or, err := res.GetOrigin() + if err != nil { + return err + } + if or == nil { + // the resource does not have an origin annotation, so + // we assume that the transformer generated the resource + // rather than modifying it + err = res.SetOrigin(origin) + } else { + // the resource already has an origin annotation, so we + // record the provided origin as a transformation + err = res.AddTransformation(origin) + } + if err != nil { + return err + } + } + return nil +} + +// RemoveTransformerAnnotations implements ResMap +func (m *resWrangler) RemoveTransformerAnnotations() error { + for _, res := range m.rList { + if err := res.ClearTransformations(); err != nil { + return err + } + } + return nil +} + +func (m *resWrangler) appendReplaceOrMerge(res *resource.Resource) error { + id := res.CurId() + matches := m.GetMatchingResourcesByAnyId(id.Equals) + switch len(matches) { + case 0: + switch res.Behavior() { + case types.BehaviorMerge, types.BehaviorReplace: + return fmt.Errorf( + "id %#v does not exist; cannot merge or replace", id) + default: + // presumably types.BehaviorCreate + return m.Append(res) + } + case 1: + old := matches[0] + if old == nil { + return fmt.Errorf("id lookup failure") + } + index := m.indexOfResource(old) + if index < 0 { + return fmt.Errorf("indexing problem") + } + switch res.Behavior() { + case types.BehaviorReplace: + res.CopyMergeMetaDataFieldsFrom(old) + case types.BehaviorMerge: + // ensure the origin annotation doesn't get overwritten + orig, err := old.GetOrigin() + if err != nil { + return err + } + res.CopyMergeMetaDataFieldsFrom(old) + res.MergeDataMapFrom(old) + res.MergeBinaryDataMapFrom(old) + if orig != nil { + res.SetOrigin(orig) + } + + default: + return fmt.Errorf( + "id %#v exists; behavior must be merge or replace", id) + } + i, err := m.Replace(res) + if err != nil { + return err + } + if i != index { + return fmt.Errorf("unexpected target index in replacement") + } + return nil + default: + return fmt.Errorf( + "found multiple objects %v that could accept merge of %v", + matches, id) + } +} + +// AnnotateAll implements ResMap +func (m *resWrangler) AnnotateAll(key string, value string) error { + return m.ApplyFilter(annotations.Filter{ + Annotations: map[string]string{ + key: value, + }, + FsSlice: []types.FieldSpec{{ + Path: "metadata/annotations", + CreateIfNotPresent: true, + }}, + }) +} + +// Select returns a list of resources that +// are selected by a Selector +func (m *resWrangler) Select(s types.Selector) ([]*resource.Resource, error) { + var result []*resource.Resource + sr, err := types.NewSelectorRegex(&s) + if err != nil { + return nil, err + } + for _, r := range m.rList { + curId := r.CurId() + orgId := r.OrgId() + + // It first tries to match with the original namespace + // then matches with the current namespace + if !sr.MatchNamespace(orgId.EffectiveNamespace()) && + !sr.MatchNamespace(curId.EffectiveNamespace()) { + continue + } + + // It first tries to match with the original name + // then matches with the current name + if !sr.MatchName(orgId.Name) && + !sr.MatchName(curId.Name) { + continue + } + + // matches the GVK + if !sr.MatchGvk(r.GetGvk()) { + continue + } + + // matches the label selector + matched, err := r.MatchesLabelSelector(s.LabelSelector) + if err != nil { + return nil, err + } + if !matched { + continue + } + + // matches the annotation selector + matched, err = r.MatchesAnnotationSelector(s.AnnotationSelector) + if err != nil { + return nil, err + } + if !matched { + continue + } + result = append(result, r) + } + return result, nil +} + +// ToRNodeSlice returns a copy of the resources as RNodes. +func (m *resWrangler) ToRNodeSlice() []*kyaml.RNode { + result := make([]*kyaml.RNode, len(m.rList)) + for i := range m.rList { + result[i] = m.rList[i].Copy() + } + return result +} + +// DeAnchor implements ResMap. +func (m *resWrangler) DeAnchor() (err error) { + for i := range m.rList { + if err = m.rList[i].DeAnchor(); err != nil { + return err + } + } + return nil +} + +// ApplySmPatch applies the patch, and errors on Id collisions. +func (m *resWrangler) ApplySmPatch( + selectedSet *resource.IdSet, patch *resource.Resource) error { + var list []*resource.Resource + for _, res := range m.rList { + if selectedSet.Contains(res.CurId()) { + patchCopy := patch.DeepCopy() + patchCopy.CopyMergeMetaDataFieldsFrom(patch) + patchCopy.SetGvk(res.GetGvk()) + patchCopy.SetKind(patch.GetKind()) + if err := res.ApplySmPatch(patchCopy); err != nil { + return err + } + } + if !res.IsNilOrEmpty() { + list = append(list, res) + } + } + m.Clear() + return m.appendAll(list) +} + +func (m *resWrangler) RemoveBuildAnnotations() { + for _, r := range m.rList { + r.RemoveBuildAnnotations() + } +} + +// ApplyFilter implements ResMap. +func (m *resWrangler) ApplyFilter(f kio.Filter) error { + reverseLookup := make(map[*kyaml.RNode]*resource.Resource, len(m.rList)) + nodes := make([]*kyaml.RNode, len(m.rList)) + for i, r := range m.rList { + ptr := &(r.RNode) + nodes[i] = ptr + reverseLookup[ptr] = r + } + // The filter can modify nodes, but also delete and create them. + // The filtered list might be smaller or larger than the nodes list. + filtered, err := f.Filter(nodes) + if err != nil { + return err + } + // Rebuild the resmap from the filtered RNodes. + var nRList []*resource.Resource + for _, rn := range filtered { + if rn.IsNilOrEmpty() { + // A node might make it through the filter as an object, + // but still be empty. Drop such entries. + continue + } + res, ok := reverseLookup[rn] + if !ok { + // A node was created; make a Resource to wrap it. + res = &resource.Resource{ + RNode: *rn, + // Leave remaining fields empty. + // At at time of writing, seeking to eliminate those fields. + // Alternatively, could just return error on creation attempt + // until remaining fields eliminated. + } + } + nRList = append(nRList, res) + } + m.rList = nRList + return nil +} diff --git a/go/internal/forked/api/resmap/reswrangler_test.go b/go/internal/forked/api/resmap/reswrangler_test.go new file mode 100644 index 000000000..1e57b612d --- /dev/null +++ b/go/internal/forked/api/resmap/reswrangler_test.go @@ -0,0 +1,1723 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package resmap_test + +import ( + "bytes" + "fmt" + "reflect" + "strings" + "testing" + + "github.com/stretchr/testify/assert" + "sigs.k8s.io/kustomize/api/filters/labels" + "sigs.k8s.io/kustomize/api/provider" + "sigs.k8s.io/kustomize/api/resmap" + "sigs.k8s.io/kustomize/api/resource" + kusttest_test "sigs.k8s.io/kustomize/api/testutils/kusttest" + resmaptest_test "sigs.k8s.io/kustomize/api/testutils/resmaptest" + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/kio" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/resid" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" +) + +var depProvider = provider.NewDefaultDepProvider() +var rf = depProvider.GetResourceFactory() +var rmF = resmap.NewFactory(rf) +var origin1 = &resource.Origin{ + Repo: "github.com/myrepo", + Ref: "master", + ConfiguredIn: "config.yaml", + ConfiguredBy: yaml.ResourceIdentifier{ + TypeMeta: yaml.TypeMeta{ + APIVersion: "builtin", + Kind: "Generator", + }, + NameMeta: yaml.NameMeta{ + Name: "my-name", + Namespace: "my-namespace", + }, + }, +} +var origin2 = &resource.Origin{ + ConfiguredIn: "../base/config.yaml", + ConfiguredBy: yaml.ResourceIdentifier{ + TypeMeta: yaml.TypeMeta{ + APIVersion: "builtin", + Kind: "Generator", + }, + NameMeta: yaml.NameMeta{ + Name: "my-name", + Namespace: "my-namespace", + }, + }, +} + +func doAppend(t *testing.T, w resmap.ResMap, r *resource.Resource) { + err := w.Append(r) + if err != nil { + t.Fatalf("append error: %v", err) + } +} +func doRemove(t *testing.T, w resmap.ResMap, id resid.ResId) { + err := w.Remove(id) + if err != nil { + t.Fatalf("remove error: %v", err) + } +} + +// Make a resource with a predictable name. +func makeCm(i int) *resource.Resource { + return rf.FromMap( + map[string]interface{}{ + "apiVersion": "v1", + "kind": "ConfigMap", + "metadata": map[string]interface{}{ + "name": fmt.Sprintf("cm%03d", i), + }, + }) +} + +// Maintain the class invariant that no two +// resources can have the same CurId(). +func TestAppendRejectsDuplicateResId(t *testing.T) { + w := resmap.New() + if err := w.Append(makeCm(1)); err != nil { + t.Fatalf("append error: %v", err) + } + err := w.Append(makeCm(1)) + if err == nil { + t.Fatalf("expected append error") + } + if !strings.Contains( + err.Error(), + "may not add resource with an already registered id") { + t.Fatalf("unexpected error: %v", err) + } +} + +func TestAppendRemove(t *testing.T) { + w1 := resmap.New() + doAppend(t, w1, makeCm(1)) + doAppend(t, w1, makeCm(2)) + doAppend(t, w1, makeCm(3)) + doAppend(t, w1, makeCm(4)) + doAppend(t, w1, makeCm(5)) + doAppend(t, w1, makeCm(6)) + doAppend(t, w1, makeCm(7)) + doRemove(t, w1, makeCm(1).OrgId()) + doRemove(t, w1, makeCm(3).OrgId()) + doRemove(t, w1, makeCm(5).OrgId()) + doRemove(t, w1, makeCm(7).OrgId()) + + w2 := resmap.New() + doAppend(t, w2, makeCm(2)) + doAppend(t, w2, makeCm(4)) + doAppend(t, w2, makeCm(6)) + if !reflect.DeepEqual(w1, w1) { + w1.Debug("w1") + w2.Debug("w2") + t.Fatalf("mismatch") + } + + err := w2.Append(makeCm(6)) + if err == nil { + t.Fatalf("expected error") + } +} + +func TestRemove(t *testing.T) { + w := resmap.New() + r := makeCm(1) + err := w.Remove(r.OrgId()) + if err == nil { + t.Fatalf("expected error") + } + err = w.Append(r) + if err != nil { + t.Fatalf("unexpected error: %v", err) + } + err = w.Remove(r.OrgId()) + if err != nil { + t.Fatalf("unexpected error: %v", err) + } + err = w.Remove(r.OrgId()) + if err == nil { + t.Fatalf("expected error") + } +} + +func TestReplace(t *testing.T) { + cm5 := makeCm(5) + cm700 := makeCm(700) + otherCm5 := makeCm(5) + + w := resmap.New() + doAppend(t, w, makeCm(1)) + doAppend(t, w, makeCm(2)) + doAppend(t, w, makeCm(3)) + doAppend(t, w, makeCm(4)) + doAppend(t, w, cm5) + doAppend(t, w, makeCm(6)) + doAppend(t, w, makeCm(7)) + + oldSize := w.Size() + _, err := w.Replace(otherCm5) + if err != nil { + t.Fatalf("unexpected error: %v", err) + } + if w.Size() != oldSize { + t.Fatalf("unexpected size %d", w.Size()) + } + if r, err := w.GetByCurrentId(cm5.OrgId()); err != nil || r != otherCm5 { + t.Fatalf("unexpected result r=%s, err=%v", r.CurId(), err) + } + if err := w.Append(cm5); err == nil { + t.Fatalf("expected id already there error") + } + if err := w.Remove(cm5.OrgId()); err != nil { + t.Fatalf("unexpected err: %v", err) + } + if err := w.Append(cm700); err != nil { + t.Fatalf("unexpected err: %v", err) + } + if err := w.Append(cm5); err != nil { + t.Fatalf("unexpected err: %v", err) + } +} + +func TestEncodeAsYaml(t *testing.T) { + encoded := []byte(`apiVersion: v1 +kind: ConfigMap +metadata: + name: cm1 +--- +apiVersion: v1 +kind: ConfigMap +metadata: + name: cm2 +`) + input := resmaptest_test.NewRmBuilder(t, rf).Add( + map[string]interface{}{ + "apiVersion": "v1", + "kind": "ConfigMap", + "metadata": map[string]interface{}{ + "name": "cm1", + }, + }).Add( + map[string]interface{}{ + "apiVersion": "v1", + "kind": "ConfigMap", + "metadata": map[string]interface{}{ + "name": "cm2", + }, + }).ResMap() + out, err := input.AsYaml() + if err != nil { + t.Fatalf("unexpected error: %v", err) + } + if !reflect.DeepEqual(out, encoded) { + t.Fatalf("%s doesn't match expected %s", out, encoded) + } +} + +func TestGetMatchingResourcesByCurrentId(t *testing.T) { + cmap := resid.NewGvk("", "v1", "ConfigMap") + + r1 := rf.FromMap( + map[string]interface{}{ + "apiVersion": "v1", + "kind": "ConfigMap", + "metadata": map[string]interface{}{ + "name": "alice", + }, + }) + r2 := rf.FromMap( + map[string]interface{}{ + "apiVersion": "v1", + "kind": "ConfigMap", + "metadata": map[string]interface{}{ + "name": "bob", + }, + }) + r3 := rf.FromMap( + map[string]interface{}{ + "apiVersion": "v1", + "kind": "ConfigMap", + "metadata": map[string]interface{}{ + "name": "bob", + "namespace": "happy", + }, + }) + r4 := rf.FromMap( + map[string]interface{}{ + "apiVersion": "v1", + "kind": "ConfigMap", + "metadata": map[string]interface{}{ + "name": "charlie", + "namespace": "happy", + }, + }) + r5 := rf.FromMap( + map[string]interface{}{ + "apiVersion": "v1", + "kind": "Deployment", + "metadata": map[string]interface{}{ + "name": "charlie", + "namespace": "happy", + }, + }) + + m := resmaptest_test.NewRmBuilder(t, rf). + AddR(r1).AddR(r2).AddR(r3).AddR(r4).AddR(r5).ResMap() + + result := m.GetMatchingResourcesByCurrentId( + resid.NewResId(cmap, "alice").GvknEquals) + if len(result) != 1 { + t.Fatalf("Expected single map entry but got %v", result) + } + result = m.GetMatchingResourcesByCurrentId( + resid.NewResId(cmap, "bob").GvknEquals) + if len(result) != 2 { + t.Fatalf("Expected two, got %v", result) + } + result = m.GetMatchingResourcesByCurrentId( + resid.NewResIdWithNamespace(cmap, "bob", "system").GvknEquals) + if len(result) != 2 { + t.Fatalf("Expected two but got %v", result) + } + result = m.GetMatchingResourcesByCurrentId( + resid.NewResIdWithNamespace(cmap, "bob", "happy").Equals) + if len(result) != 1 { + t.Fatalf("Expected single map entry but got %v", result) + } + result = m.GetMatchingResourcesByCurrentId( + resid.NewResId(cmap, "charlie").GvknEquals) + if len(result) != 1 { + t.Fatalf("Expected single map entry but got %v", result) + } + + // nolint:goconst + tests := []struct { + name string + matcher resmap.IdMatcher + count int + }{ + { + "match everything", + func(resid.ResId) bool { return true }, + 5, + }, + { + "match nothing", + func(resid.ResId) bool { return false }, + 0, + }, + { + "name is alice", + func(x resid.ResId) bool { return x.Name == "alice" }, + 1, + }, + { + "name is charlie", + func(x resid.ResId) bool { return x.Name == "charlie" }, + 2, + }, + { + "name is bob", + func(x resid.ResId) bool { return x.Name == "bob" }, + 2, + }, + { + "happy namespace", + func(x resid.ResId) bool { + return x.Namespace == "happy" + }, + 3, + }, + { + "happy deployment", + func(x resid.ResId) bool { + return x.Namespace == "happy" && + x.Gvk.Kind == "Deployment" + }, + 1, + }, + { + "happy ConfigMap", + func(x resid.ResId) bool { + return x.Namespace == "happy" && + x.Gvk.Kind == "ConfigMap" + }, + 2, + }, + } + for _, tst := range tests { + result := m.GetMatchingResourcesByCurrentId(tst.matcher) + if len(result) != tst.count { + t.Fatalf("test '%s'; actual: %d, expected: %d", + tst.name, len(result), tst.count) + } + } +} + +func TestGetMatchingResourcesByAnyId(t *testing.T) { + r1 := rf.FromMap( + map[string]interface{}{ + "apiVersion": "v1", + "kind": "ConfigMap", + "metadata": map[string]interface{}{ + "name": "new-alice", + "annotations": map[string]interface{}{ + "internal.config.kubernetes.io/previousKinds": "ConfigMap", + "internal.config.kubernetes.io/previousNames": "alice", + "internal.config.kubernetes.io/previousNamespaces": "default", + }, + }, + }) + r2 := rf.FromMap( + map[string]interface{}{ + "apiVersion": "v1", + "kind": "ConfigMap", + "metadata": map[string]interface{}{ + "name": "new-bob", + "annotations": map[string]interface{}{ + "internal.config.kubernetes.io/previousKinds": "ConfigMap,ConfigMap", + "internal.config.kubernetes.io/previousNames": "bob,bob2", + "internal.config.kubernetes.io/previousNamespaces": "default,default", + }, + }, + }) + r3 := rf.FromMap( + map[string]interface{}{ + "apiVersion": "v1", + "kind": "ConfigMap", + "metadata": map[string]interface{}{ + "name": "new-bob", + "namespace": "new-happy", + "annotations": map[string]interface{}{ + "internal.config.kubernetes.io/previousKinds": "ConfigMap", + "internal.config.kubernetes.io/previousNames": "bob", + "internal.config.kubernetes.io/previousNamespaces": "happy", + }, + }, + }) + r4 := rf.FromMap( + map[string]interface{}{ + "apiVersion": "v1", + "kind": "ConfigMap", + "metadata": map[string]interface{}{ + "name": "charlie", + "namespace": "happy", + "annotations": map[string]interface{}{ + "internal.config.kubernetes.io/previousKinds": "ConfigMap", + "internal.config.kubernetes.io/previousNames": "charlie", + "internal.config.kubernetes.io/previousNamespaces": "default", + }, + }, + }) + r5 := rf.FromMap( + map[string]interface{}{ + "apiVersion": "v1", + "kind": "Deployment", + "metadata": map[string]interface{}{ + "name": "charlie", + "namespace": "happy", + }, + }) + + m := resmaptest_test.NewRmBuilder(t, rf). + AddR(r1).AddR(r2).AddR(r3).AddR(r4).AddR(r5).ResMap() + + // nolint:goconst + tests := []struct { + name string + matcher resmap.IdMatcher + count int + }{ + { + "match everything", + func(resid.ResId) bool { return true }, + 5, + }, + { + "match nothing", + func(resid.ResId) bool { return false }, + 0, + }, + { + "name is alice", + func(x resid.ResId) bool { return x.Name == "alice" }, + 1, + }, + { + "name is charlie", + func(x resid.ResId) bool { return x.Name == "charlie" }, + 2, + }, + { + "name is bob", + func(x resid.ResId) bool { return x.Name == "bob" }, + 2, + }, + { + "happy namespace", + func(x resid.ResId) bool { + return x.Namespace == "happy" + }, + 3, + }, + { + "happy deployment", + func(x resid.ResId) bool { + return x.Namespace == "happy" && + x.Gvk.Kind == "Deployment" + }, + 1, + }, + { + "happy ConfigMap", + func(x resid.ResId) bool { + return x.Namespace == "happy" && + x.Gvk.Kind == "ConfigMap" + }, + 2, + }, + } + for _, tst := range tests { + result := m.GetMatchingResourcesByAnyId(tst.matcher) + if len(result) != tst.count { + t.Fatalf("test '%s'; actual: %d, expected: %d", + tst.name, len(result), tst.count) + } + } +} + +func TestSubsetThatCouldBeReferencedByResource(t *testing.T) { + r1 := rf.FromMap( + map[string]interface{}{ + "apiVersion": "v1", + "kind": "ConfigMap", + "metadata": map[string]interface{}{ + "name": "alice", + }, + }) + r2 := rf.FromMap( + map[string]interface{}{ + "apiVersion": "v1", + "kind": "ConfigMap", + "metadata": map[string]interface{}{ + "name": "bob", + }, + }) + r3 := rf.FromMap( + map[string]interface{}{ + "apiVersion": "v1", + "kind": "ConfigMap", + "metadata": map[string]interface{}{ + "name": "bob", + "namespace": "happy", + }, + }) + r4 := rf.FromMap( + map[string]interface{}{ + "apiVersion": "apps/v1", + "kind": "Deployment", + "metadata": map[string]interface{}{ + "name": "charlie", + "namespace": "happy", + }, + }) + r5 := rf.FromMap( + map[string]interface{}{ + "apiVersion": "v1", + "kind": "ConfigMap", + "metadata": map[string]interface{}{ + "name": "charlie", + "namespace": "happy", + }, + }) + r5.AddNamePrefix("little-") + r6 := rf.FromMap( + map[string]interface{}{ + "apiVersion": "apps/v1", + "kind": "Deployment", + "metadata": map[string]interface{}{ + "name": "domino", + "namespace": "happy", + }, + }) + r6.AddNamePrefix("little-") + r7 := rf.FromMap( + map[string]interface{}{ + "apiVersion": "rbac.authorization.k8s.io/v1", + "kind": "ClusterRoleBinding", + "metadata": map[string]interface{}{ + "name": "meh", + }, + }) + + tests := map[string]struct { + filter *resource.Resource + expected resmap.ResMap + }{ + "default namespace 1": { + filter: r2, + expected: resmaptest_test.NewRmBuilder(t, rf). + AddR(r1).AddR(r2).AddR(r7).ResMap(), + }, + "default namespace 2": { + filter: r1, + expected: resmaptest_test.NewRmBuilder(t, rf). + AddR(r1).AddR(r2).AddR(r7).ResMap(), + }, + "happy namespace no prefix": { + filter: r3, + expected: resmaptest_test.NewRmBuilder(t, rf). + AddR(r3).AddR(r4).AddR(r5).AddR(r6).AddR(r7).ResMap(), + }, + "happy namespace with prefix": { + filter: r5, + expected: resmaptest_test.NewRmBuilder(t, rf). + AddR(r3).AddR(r4).AddR(r5).AddR(r6).AddR(r7).ResMap(), + }, + "cluster level": { + filter: r7, + expected: resmaptest_test.NewRmBuilder(t, rf). + AddR(r1).AddR(r2).AddR(r3).AddR(r4).AddR(r5).AddR(r6).AddR(r7).ResMap(), + }, + } + m := resmaptest_test.NewRmBuilder(t, rf). + AddR(r1).AddR(r2).AddR(r3).AddR(r4).AddR(r5).AddR(r6).AddR(r7).ResMap() + for name, test := range tests { + test := test + t.Run(name, func(t *testing.T) { + got, err1 := m.SubsetThatCouldBeReferencedByResource(test.filter) + if err1 != nil { + t.Fatalf("Expected error %v: ", err1) + } + err := test.expected.ErrorIfNotEqualLists(got) + if err != nil { + test.expected.Debug("expected") + got.Debug("actual") + t.Fatalf("Expected match") + } + }) + } +} + +func TestDeepCopy(t *testing.T) { + rm1 := resmaptest_test.NewRmBuilder(t, rf).Add( + map[string]interface{}{ + "apiVersion": "v1", + "kind": "ConfigMap", + "metadata": map[string]interface{}{ + "name": "cm1", + }, + }).Add( + map[string]interface{}{ + "apiVersion": "v1", + "kind": "ConfigMap", + "metadata": map[string]interface{}{ + "name": "cm2", + }, + }).ResMap() + + rm2 := rm1.DeepCopy() + + if &rm1 == &rm2 { + t.Fatal("DeepCopy returned a reference to itself instead of a copy") + } + err := rm1.ErrorIfNotEqualLists(rm1) + if err != nil { + t.Fatal(err) + } +} + +func TestErrorIfNotEqualSets(t *testing.T) { + r1 := rf.FromMap( + map[string]interface{}{ + "apiVersion": "v1", + "kind": "ConfigMap", + "metadata": map[string]interface{}{ + "name": "cm1", + }, + }) + r2 := rf.FromMap( + map[string]interface{}{ + "apiVersion": "v1", + "kind": "ConfigMap", + "metadata": map[string]interface{}{ + "name": "cm2", + }, + }) + r3 := rf.FromMap( + map[string]interface{}{ + "apiVersion": "v1", + "kind": "ConfigMap", + "metadata": map[string]interface{}{ + "name": "cm2", + "namespace": "system", + }, + }) + + m1 := resmaptest_test.NewRmBuilder(t, rf).AddR(r1).AddR(r2).AddR(r3).ResMap() + if err := m1.ErrorIfNotEqualSets(m1); err != nil { + t.Fatalf("object should equal itself %v", err) + } + + m2 := resmaptest_test.NewRmBuilder(t, rf).AddR(r1).ResMap() + if err := m1.ErrorIfNotEqualSets(m2); err == nil { + t.Fatalf("%v should not equal %v %v", m1, m2, err) + } + + m3 := resmaptest_test.NewRmBuilder(t, rf).AddR(r2).ResMap() + if err := m2.ErrorIfNotEqualSets(m3); err == nil { + t.Fatalf("%v should not equal %v %v", m2, m3, err) + } + + m3 = resmaptest_test.NewRmBuilder(t, rf).Add( + map[string]interface{}{ + "apiVersion": "v1", + "kind": "ConfigMap", + "metadata": map[string]interface{}{ + "name": "cm1", + }}).ResMap() + if err := m2.ErrorIfNotEqualSets(m3); err != nil { + t.Fatalf("%v should equal %v %v", m2, m3, err) + } + + m4 := resmaptest_test.NewRmBuilder(t, rf).AddR(r1).AddR(r2).AddR(r3).ResMap() + if err := m1.ErrorIfNotEqualSets(m4); err != nil { + t.Fatalf("expected equality between %v and %v, %v", m1, m4, err) + } + + m4 = resmaptest_test.NewRmBuilder(t, rf).AddR(r3).AddR(r1).AddR(r2).ResMap() + if err := m1.ErrorIfNotEqualSets(m4); err != nil { + t.Fatalf("expected equality between %v and %v, %v", m1, m4, err) + } + + m4 = m1.ShallowCopy() + if err := m1.ErrorIfNotEqualSets(m4); err != nil { + t.Fatalf("expected equality between %v and %v, %v", m1, m4, err) + } + m4 = m1.DeepCopy() + if err := m1.ErrorIfNotEqualSets(m4); err != nil { + t.Fatalf("expected equality between %v and %v, %v", m1, m4, err) + } +} + +func TestErrorIfNotEqualLists(t *testing.T) { + r1 := rf.FromMap( + map[string]interface{}{ + "apiVersion": "v1", + "kind": "ConfigMap", + "metadata": map[string]interface{}{ + "name": "cm1", + }, + }) + r2 := rf.FromMap( + map[string]interface{}{ + "apiVersion": "v1", + "kind": "ConfigMap", + "metadata": map[string]interface{}{ + "name": "cm2", + }, + }) + r3 := rf.FromMap( + map[string]interface{}{ + "apiVersion": "v1", + "kind": "ConfigMap", + "metadata": map[string]interface{}{ + "name": "cm2", + "namespace": "system", + }, + }) + + m1 := resmaptest_test.NewRmBuilder(t, rf).AddR(r1).AddR(r2).AddR(r3).ResMap() + if err := m1.ErrorIfNotEqualLists(m1); err != nil { + t.Fatalf("object should equal itself %v", err) + } + + m2 := resmaptest_test.NewRmBuilder(t, rf).AddR(r1).ResMap() + if err := m1.ErrorIfNotEqualLists(m2); err == nil { + t.Fatalf("%v should not equal %v %v", m1, m2, err) + } + + m3 := resmaptest_test.NewRmBuilder(t, rf).Add( + map[string]interface{}{ + "apiVersion": "v1", + "kind": "ConfigMap", + "metadata": map[string]interface{}{ + "name": "cm1", + }}).ResMap() + if err := m2.ErrorIfNotEqualLists(m3); err != nil { + t.Fatalf("%v should equal %v %v", m2, m3, err) + } + + m4 := resmaptest_test.NewRmBuilder(t, rf).AddR(r1).AddR(r2).AddR(r3).ResMap() + if err := m1.ErrorIfNotEqualLists(m4); err != nil { + t.Fatalf("expected equality between %v and %v, %v", m1, m4, err) + } + + m4 = resmaptest_test.NewRmBuilder(t, rf).AddR(r3).AddR(r1).AddR(r2).ResMap() + if err := m1.ErrorIfNotEqualLists(m4); err == nil { + t.Fatalf("expected inequality between %v and %v, %v", m1, m4, err) + } + + m4 = m1.ShallowCopy() + if err := m1.ErrorIfNotEqualLists(m4); err != nil { + t.Fatalf("expected equality between %v and %v, %v", m1, m4, err) + } + m4 = m1.DeepCopy() + if err := m1.ErrorIfNotEqualLists(m4); err != nil { + t.Fatalf("expected equality between %v and %v, %v", m1, m4, err) + } +} + +func TestAppendAll(t *testing.T) { + r1 := rf.FromMap( + map[string]interface{}{ + "apiVersion": "apps/v1", + "kind": "Deployment", + "metadata": map[string]interface{}{ + "name": "foo-deploy1", + }, + }) + input1 := rmF.FromResource(r1) + r2 := rf.FromMap( + map[string]interface{}{ + "apiVersion": "apps/v1", + "kind": "StatefulSet", + "metadata": map[string]interface{}{ + "name": "bar-stateful", + }, + }) + input2 := rmF.FromResource(r2) + + expected := resmap.New() + if err := expected.Append(r1); err != nil { + t.Fatalf("unexpected error: %v", err) + } + if err := expected.Append(r2); err != nil { + t.Fatalf("unexpected error: %v", err) + } + + if err := input1.AppendAll(input2); err != nil { + t.Fatalf("unexpected error: %v", err) + } + if err := expected.ErrorIfNotEqualLists(input1); err != nil { + input1.Debug("1") + expected.Debug("ex") + t.Fatalf("%#v doesn't equal expected %#v", input1, expected) + } + if err := input1.AppendAll(nil); err != nil { + t.Fatalf("unexpected error: %v", err) + } + if err := expected.ErrorIfNotEqualLists(input1); err != nil { + t.Fatalf("%#v doesn't equal expected %#v", input1, expected) + } +} + +func makeMap1() resmap.ResMap { + return rmF.FromResource(rf.FromMapAndOption( + map[string]interface{}{ + "apiVersion": "apps/v1", + "kind": "ConfigMap", + "metadata": map[string]interface{}{ + "name": "cmap", + }, + "data": map[string]interface{}{ + "a": "x", + "b": "y", + }, + }, &types.GeneratorArgs{ + Behavior: "create", + })) +} + +func makeMap2(b types.GenerationBehavior) resmap.ResMap { + return rmF.FromResource(rf.FromMapAndOption( + map[string]interface{}{ + "apiVersion": "apps/v1", + "kind": "ConfigMap", + "metadata": map[string]interface{}{ + "name": "cmap", + }, + "data": map[string]interface{}{ + "a": "u", + "b": "v", + "c": "w", + }, + }, &types.GeneratorArgs{ + Behavior: b.String(), + })) +} + +func TestAbsorbAll(t *testing.T) { + metadata := map[string]interface{}{ + "name": "cmap", + } + expected := rmF.FromResource(rf.FromMapAndOption( + map[string]interface{}{ + "apiVersion": "apps/v1", + "kind": "ConfigMap", + "metadata": metadata, + "data": map[string]interface{}{ + "a": "u", + "b": "v", + "c": "w", + }, + }, + &types.GeneratorArgs{ + Behavior: "create", + })) + w := makeMap1() + assert.NoError(t, w.AbsorbAll(makeMap2(types.BehaviorMerge))) + expected.RemoveBuildAnnotations() + w.RemoveBuildAnnotations() + assert.NoError(t, expected.ErrorIfNotEqualLists(w)) + w = makeMap1() + assert.NoError(t, w.AbsorbAll(nil)) + assert.NoError(t, w.ErrorIfNotEqualLists(makeMap1())) + + w = makeMap1() + w2 := makeMap2(types.BehaviorReplace) + assert.NoError(t, w.AbsorbAll(w2)) + w2.RemoveBuildAnnotations() + assert.NoError(t, w2.ErrorIfNotEqualLists(w)) + w = makeMap1() + w2 = makeMap2(types.BehaviorUnspecified) + err := w.AbsorbAll(w2) + assert.Error(t, err) + assert.True( + t, strings.Contains(err.Error(), "behavior must be merge or replace")) +} + +func TestToRNodeSlice(t *testing.T) { + input := `apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + name: namespace-reader +rules: +- apiGroups: + - "" + resources: + - namespaces + verbs: + - get + - watch + - list +` + rm, err := rmF.NewResMapFromBytes([]byte(input)) + if err != nil { + t.Fatalf("unexpected error: %v", err) + } + b := bytes.NewBufferString("") + for i, n := range rm.ToRNodeSlice() { + if i != 0 { + b.WriteString("---\n") + } + s, err := n.String() + if err != nil { + t.Fatalf("unexpected error: %v", err) + } + b.WriteString(s) + } + + if !reflect.DeepEqual(input, b.String()) { + t.Fatalf("actual doesn't match expected.\nActual:\n%s\n===\nExpected:\n%s\n", + b.String(), input) + } +} + +func TestDeAnchorSingleDoc(t *testing.T) { + input := `apiVersion: v1 +kind: ConfigMap +metadata: + name: wildcard +data: + color: &color-used blue + feeling: *color-used +` + rm, err := rmF.NewResMapFromBytes([]byte(input)) + assert.NoError(t, err) + assert.NoError(t, rm.DeAnchor()) + yaml, err := rm.AsYaml() + assert.NoError(t, err) + assert.Equal(t, strings.TrimSpace(` +apiVersion: v1 +data: + color: blue + feeling: blue +kind: ConfigMap +metadata: + name: wildcard +`), strings.TrimSpace(string(yaml))) +} + +// Anchor references don't cross YAML document boundaries. +func TestDeAnchorMultiDoc(t *testing.T) { + input := `apiVersion: v1 +kind: ConfigMap +metadata: + name: betty +data: + color: &color-used blue + feeling: *color-used +--- +apiVersion: v1 +kind: ConfigMap +metadata: + name: bob +data: + color: red + feeling: *color-used +` + _, err := rmF.NewResMapFromBytes([]byte(input)) + assert.Error(t, err) + assert.Contains(t, err.Error(), "unknown anchor 'color-used' referenced") +} + +// Anchor references cross list elements in a ResourceList. +func TestDeAnchorResourceList(t *testing.T) { + input := `apiVersion: config.kubernetes.io/v1 +kind: ResourceList +metadata: + name: aShortList +items: +- apiVersion: v1 + kind: ConfigMap + metadata: + name: betty + data: + color: &color-used blue + feeling: *color-used +- apiVersion: v1 + kind: ConfigMap + metadata: + name: bob + data: + color: red + feeling: *color-used +` + rm, err := rmF.NewResMapFromBytes([]byte(input)) + assert.NoError(t, err) + assert.NoError(t, rm.DeAnchor()) + yaml, err := rm.AsYaml() + assert.NoError(t, err) + assert.Equal(t, strings.TrimSpace(` +apiVersion: v1 +data: + color: blue + feeling: blue +kind: ConfigMap +metadata: + name: betty +--- +apiVersion: v1 +data: + color: red + feeling: blue +kind: ConfigMap +metadata: + name: bob +`), strings.TrimSpace(string(yaml))) +} + +func TestApplySmPatch_General(t *testing.T) { + const ( + myDeployment = "Deployment" + myCRD = "myCRD" + expectedResultSMP = `apiVersion: apps/v1 +kind: Deployment +metadata: + name: deploy1 +spec: + template: + metadata: + labels: + old-label: old-value + some-label: some-value + spec: + containers: + - env: + - name: SOMEENV + value: SOMEVALUE + image: nginx + name: nginx +` + ) + tests := map[string]struct { + base []string + patches []string + expected []string + errorExpected bool + errorMsg string + }{ + "clown": { + base: []string{`apiVersion: v1 +kind: Deployment +metadata: + name: clown +spec: + numReplicas: 1 +`, + }, + patches: []string{`apiVersion: v1 +kind: Deployment +metadata: + name: clown +spec: + numReplicas: 999 +`, + }, + errorExpected: false, + expected: []string{ + `apiVersion: v1 +kind: Deployment +metadata: + name: clown +spec: + numReplicas: 999 +`, + }, + }, + "confusion": { + base: []string{`apiVersion: example.com/v1 +kind: Foo +metadata: + name: my-foo +spec: + bar: + A: X + B: Y +`, + }, + patches: []string{`apiVersion: example.com/v1 +kind: Foo +metadata: + name: my-foo +spec: + bar: + B: + C: Z +`, `apiVersion: example.com/v1 +kind: Foo +metadata: + name: my-foo +spec: + bar: + C: Z + D: W + baz: + hello: world +`, + }, + errorExpected: false, + expected: []string{ + `apiVersion: example.com/v1 +kind: Foo +metadata: + name: my-foo +spec: + bar: + A: X + C: Z + D: W + baz: + hello: world +`, + }, + }, + "withschema-ns1-ns2-one": { + base: []string{ + addNamespace("ns1", baseResource(myDeployment)), + addNamespace("ns2", baseResource(myDeployment)), + }, + patches: []string{ + addNamespace("ns1", addLabelAndEnvPatch(myDeployment)), + addNamespace("ns2", addLabelAndEnvPatch(myDeployment)), + }, + errorExpected: false, + expected: []string{ + addNamespace("ns1", expectedResultSMP), + addNamespace("ns2", expectedResultSMP), + }, + }, + "withschema-ns1-ns2-two": { + base: []string{ + addNamespace("ns1", baseResource(myDeployment)), + }, + patches: []string{ + addNamespace("ns2", changeImagePatch(myDeployment)), + }, + expected: []string{ + addNamespace("ns1", baseResource(myDeployment)), + }, + }, + "withschema-ns1-ns2-three": { + base: []string{ + addNamespace("ns1", baseResource(myDeployment)), + }, + patches: []string{ + addNamespace("ns1", changeImagePatch(myDeployment)), + }, + expected: []string{ + `apiVersion: apps/v1 +kind: Deployment +metadata: + name: deploy1 + namespace: ns1 +spec: + template: + metadata: + labels: + old-label: old-value + spec: + containers: + - image: nginx:1.7.9 + name: nginx +`, + }, + }, + "withschema-nil-ns2": { + base: []string{ + baseResource(myDeployment), + }, + patches: []string{ + addNamespace("ns2", changeImagePatch(myDeployment)), + }, + expected: []string{ + baseResource(myDeployment), + }, + }, + "withschema-ns1-nil": { + base: []string{ + addNamespace("ns1", baseResource(myDeployment)), + }, + patches: []string{ + changeImagePatch(myDeployment), + }, + expected: []string{ + addNamespace("ns1", baseResource(myDeployment)), + }, + }, + "noschema-ns1-ns2-one": { + base: []string{ + addNamespace("ns1", baseResource(myCRD)), + addNamespace("ns2", baseResource(myCRD)), + }, + patches: []string{ + addNamespace("ns1", addLabelAndEnvPatch(myCRD)), + addNamespace("ns2", addLabelAndEnvPatch(myCRD)), + }, + errorExpected: false, + expected: []string{ + addNamespace("ns1", expectedResultJMP("")), + addNamespace("ns2", expectedResultJMP("")), + }, + }, + "noschema-ns1-ns2-two": { + base: []string{addNamespace("ns1", baseResource(myCRD))}, + patches: []string{addNamespace("ns2", changeImagePatch(myCRD))}, + expected: []string{addNamespace("ns1", baseResource(myCRD))}, + }, + "noschema-nil-ns2": { + base: []string{baseResource(myCRD)}, + patches: []string{addNamespace("ns2", changeImagePatch(myCRD))}, + expected: []string{baseResource(myCRD)}, + }, + "noschema-ns1-nil": { + base: []string{addNamespace("ns1", baseResource(myCRD))}, + patches: []string{changeImagePatch(myCRD)}, + expected: []string{addNamespace("ns1", baseResource(myCRD))}, + }, + } + for n := range tests { + tc := tests[n] + t.Run(n, func(t *testing.T) { + m, err := rmF.NewResMapFromBytes([]byte(strings.Join(tc.base, "\n---\n"))) + assert.NoError(t, err) + foundError := false + for _, patch := range tc.patches { + rp, err := rf.FromBytes([]byte(patch)) + assert.NoError(t, err) + idSet := resource.MakeIdSet([]*resource.Resource{rp}) + if err = m.ApplySmPatch(idSet, rp); err != nil { + foundError = true + break + } + } + if foundError { + assert.True(t, tc.errorExpected) + // compare error message? + return + } + assert.False(t, tc.errorExpected) + m.RemoveBuildAnnotations() + yml, err := m.AsYaml() + assert.NoError(t, err) + assert.Equal(t, strings.Join(tc.expected, "---\n"), string(yml)) + }) + } +} + +// simple utility function to add an namespace in a resource +// used as base, patch or expected result. Simply looks +// for specs: in order to add namespace: xxxx before this line +func addNamespace(namespace string, base string) string { + res := strings.Replace(base, + "\nspec:\n", + "\n namespace: "+namespace+"\nspec:\n", + 1) + return res +} + +// DeleteOddsFilter deletes the odd entries, removing nodes. +// This is a ridiculous filter for testing. +type DeleteOddsFilter struct{} + +func (f DeleteOddsFilter) Filter( + nodes []*yaml.RNode) (result []*yaml.RNode, err error) { + for i := range nodes { + if i%2 == 0 { + // Keep the even entries, drop the odd entries. + result = append(result, nodes[i]) + } + } + return +} + +// CloneOddsFilter deletes even entries and clones odd entries, +// making new nodes. +// This is a ridiculous filter for testing. +type CloneOddsFilter struct{} + +func (f CloneOddsFilter) Filter( + nodes []*yaml.RNode) (result []*yaml.RNode, err error) { + for i := range nodes { + if i%2 != 0 { + newNode := nodes[i].Copy() + // Add suffix to the name, so that it's unique (w/r to this test). + newNode.SetName(newNode.GetName() + "Clone") + // Return a ptr to the copy. + result = append(result, nodes[i], newNode) + } + } + return +} + +func TestApplyFilter(t *testing.T) { + tests := map[string]struct { + input string + f kio.Filter + expected string + }{ + "labels": { + input: ` +apiVersion: example.com/v1 +kind: Beans +metadata: + name: myBeans +--- +apiVersion: example.com/v1 +kind: Franks +metadata: + name: myFranks +`, + f: labels.Filter{ + Labels: map[string]string{ + "a": "foo", + "b": "bar", + }, + FsSlice: types.FsSlice{ + { + Gvk: resid.NewGvk("example.com", "v1", "Beans"), + Path: "metadata/labels", + CreateIfNotPresent: true, + }, + }, + }, + expected: ` +apiVersion: example.com/v1 +kind: Beans +metadata: + labels: + a: foo + b: bar + name: myBeans +--- +apiVersion: example.com/v1 +kind: Franks +metadata: + name: myFranks +`, + }, + "deleteOddNodes": { + input: ` +apiVersion: example.com/v1 +kind: Zero +metadata: + name: r0 +--- +apiVersion: example.com/v1 +kind: One +metadata: + name: r1 +--- +apiVersion: example.com/v1 +kind: Two +metadata: + name: r2 +--- +apiVersion: example.com/v1 +kind: Three +metadata: + name: r3 +`, + f: DeleteOddsFilter{}, + expected: ` +apiVersion: example.com/v1 +kind: Zero +metadata: + name: r0 +--- +apiVersion: example.com/v1 +kind: Two +metadata: + name: r2 +`, + }, + "cloneOddNodes": { + // input list has five entries + input: ` +apiVersion: example.com/v1 +kind: Zero +metadata: + name: r0 +--- +apiVersion: example.com/v1 +kind: One +metadata: + name: r1 +--- +apiVersion: example.com/v1 +kind: Two +metadata: + name: r2 +--- +apiVersion: example.com/v1 +kind: Three +metadata: + name: r3 +--- +apiVersion: example.com/v1 +kind: Four +metadata: + name: r4 +`, + f: CloneOddsFilter{}, + // output has four, but half are newly created nodes. + expected: ` +apiVersion: example.com/v1 +kind: One +metadata: + name: r1 +--- +apiVersion: example.com/v1 +kind: One +metadata: + name: r1Clone +--- +apiVersion: example.com/v1 +kind: Three +metadata: + name: r3 +--- +apiVersion: example.com/v1 +kind: Three +metadata: + name: r3Clone +`, + }, + } + for name := range tests { + tc := tests[name] + t.Run(name, func(t *testing.T) { + m, err := rmF.NewResMapFromBytes([]byte(tc.input)) + assert.NoError(t, err) + assert.NoError(t, m.ApplyFilter(tc.f)) + kusttest_test.AssertActualEqualsExpectedWithTweak( + t, m, nil, tc.expected) + }) + } +} + +func TestApplySmPatch_Deletion(t *testing.T) { + target := ` +apiVersion: apps/v1 +metadata: + name: myDeploy +kind: Deployment +spec: + replica: 2 + template: + metadata: + labels: + old-label: old-value + spec: + containers: + - name: nginx + image: nginx +` + tests := map[string]struct { + patch string + expected string + finalMapSize int + }{ + "delete1": { + patch: `apiVersion: apps/v1 +metadata: + name: myDeploy +kind: Deployment +spec: + replica: 2 + template: + $patch: delete + metadata: + labels: + old-label: old-value + spec: + containers: + - name: nginx + image: nginx +`, + expected: `apiVersion: apps/v1 +kind: Deployment +metadata: + name: myDeploy +spec: + replica: 2 +`, + finalMapSize: 1, + }, + "delete2": { + patch: `apiVersion: apps/v1 +metadata: + name: myDeploy +kind: Deployment +spec: + $patch: delete + replica: 2 + template: + metadata: + labels: + old-label: old-value + spec: + containers: + - name: nginx + image: nginx +`, + expected: `apiVersion: apps/v1 +kind: Deployment +metadata: + name: myDeploy +`, + finalMapSize: 1, + }, + "delete3": { + patch: `apiVersion: apps/v1 +metadata: + name: myDeploy +kind: Deployment +$patch: delete +`, + expected: "", + finalMapSize: 0, + }, + } + for name := range tests { + tc := tests[name] + t.Run(name, func(t *testing.T) { + m, err := rmF.NewResMapFromBytes([]byte(target)) + assert.NoError(t, err, name) + idSet := resource.MakeIdSet(m.Resources()) + assert.Equal(t, 1, idSet.Size(), name) + p, err := rf.FromBytes([]byte(tc.patch)) + assert.NoError(t, err, name) + assert.NoError(t, m.ApplySmPatch(idSet, p), name) + assert.Equal(t, tc.finalMapSize, m.Size(), name) + m.RemoveBuildAnnotations() + yml, err := m.AsYaml() + assert.NoError(t, err, name) + assert.Equal(t, tc.expected, string(yml), name) + }) + } +} + +func TestOriginAnnotations(t *testing.T) { + w := resmap.New() + for i := 0; i < 3; i++ { + assert.NoError(t, w.Append(makeCm(i))) + } + // this should add an origin annotation to every resource + assert.NoError(t, w.AddOriginAnnotation(origin1)) + resources := w.Resources() + for _, res := range resources { + or, err := res.GetOrigin() + assert.NoError(t, err) + assert.Equal(t, origin1, or) + } + // this should not overwrite the existing origin annotations + assert.NoError(t, w.AddOriginAnnotation(origin2)) + for _, res := range resources { + or, err := res.GetOrigin() + assert.NoError(t, err) + assert.Equal(t, origin1, or) + } + // this should remove origin annotations from all resources + assert.NoError(t, w.RemoveOriginAnnotations()) + for _, res := range resources { + or, err := res.GetOrigin() + assert.NoError(t, err) + assert.Nil(t, or) + } +} + +func TestTransformerAnnotations(t *testing.T) { + w := resmap.New() + for i := 0; i < 3; i++ { + assert.NoError(t, w.Append(makeCm(i))) + } + // this should add an origin annotation to every resource + assert.NoError(t, w.AddTransformerAnnotation(origin1)) + resources := w.Resources() + for _, res := range resources { + or, err := res.GetOrigin() + assert.NoError(t, err) + assert.Equal(t, origin1, or) + } + // this should add a transformer annotation to every resource + assert.NoError(t, w.AddTransformerAnnotation(origin2)) + for _, res := range resources { + or, err := res.GetOrigin() + assert.NoError(t, err) + assert.Equal(t, origin1, or) + tr, err := res.GetTransformations() + assert.NoError(t, err) + assert.Equal(t, resource.Transformations{origin2}, tr) + } + // remove transformer annotations from all resources + assert.NoError(t, w.RemoveTransformerAnnotations()) + for _, res := range resources { + tr, err := res.GetTransformations() + assert.NoError(t, err) + assert.Nil(t, tr) + } +} + +// baseResource produces a base object which used to test +// patch transformation +// Also the structure is matching the Deployment syntax +// the kind can be replaced to allow testing using CRD +// without access to the schema +func baseResource(kind string) string { + return fmt.Sprintf(`apiVersion: apps/v1 +kind: %s +metadata: + name: deploy1 +spec: + template: + metadata: + labels: + old-label: old-value + spec: + containers: + - image: nginx + name: nginx +`, kind) +} + +// addContainerAndEnvPatch produces a patch object which adds +// an entry in the env slice of the first/nginx container +// as well as adding a label in the metadata +// Note that for SMP/WithSchema merge, the name:nginx entry +// is mandatory +func addLabelAndEnvPatch(kind string) string { + return fmt.Sprintf(`apiVersion: apps/v1 +kind: %s +metadata: + name: deploy1 +spec: + template: + metadata: + labels: + some-label: some-value + spec: + containers: + - name: nginx + env: + - name: SOMEENV + value: SOMEVALUE`, kind) +} + +// changeImagePatch produces a patch object which replaces +// the value of the image field in the first/nginx container +// Note that for SMP/WithSchema merge, the name:nginx entry +// is mandatory +func changeImagePatch(kind string) string { + return fmt.Sprintf(`apiVersion: apps/v1 +kind: %s +metadata: + name: deploy1 +spec: + template: + spec: + containers: + - name: nginx + image: "nginx:1.7.9"`, kind) +} + +// utility method building the expected output of a JMP. +// imagename parameter allows to build a result consistent +// with the JMP behavior which basically overrides the +// entire "containers" list. +func expectedResultJMP(imagename string) string { + if imagename == "" { + return `apiVersion: apps/v1 +kind: myCRD +metadata: + name: deploy1 +spec: + template: + metadata: + labels: + old-label: old-value + some-label: some-value + spec: + containers: + - env: + - name: SOMEENV + value: SOMEVALUE + name: nginx +` + } + return fmt.Sprintf(`apiVersion: apps/v1 +kind: myCRD +metadata: + name: deploy1 +spec: + template: + metadata: + labels: + old-label: old-value + some-label: some-value + spec: + containers: + - image: %s + name: nginx +`, imagename) +} diff --git a/go/internal/forked/api/resmap/reswrangler_test.go b/go/internal/forked/api/resmap/reswrangler_test.go new file mode 100644 index 000000000..a70434fe5 --- /dev/null +++ b/go/internal/forked/api/resmap/reswrangler_test.go @@ -0,0 +1,1723 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package resmap_test + +import ( + "bytes" + "fmt" + "reflect" + "strings" + "testing" + + "github.com/stretchr/testify/assert" + "sigs.k8s.io/kustomize/api/filters/labels" + "sigs.k8s.io/kustomize/api/provider" + "sigs.k8s.io/kustomize/api/resmap" + "sigs.k8s.io/kustomize/api/resource" + kusttest_test "sigs.k8s.io/kustomize/api/testutils/kusttest" + resmaptest_test "sigs.k8s.io/kustomize/api/testutils/resmaptest" + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/kio" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/resid" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/yaml" +) + +var depProvider = provider.NewDefaultDepProvider() +var rf = depProvider.GetResourceFactory() +var rmF = resmap.NewFactory(rf) +var origin1 = &resource.Origin{ + Repo: "github.com/myrepo", + Ref: "master", + ConfiguredIn: "config.yaml", + ConfiguredBy: yaml.ResourceIdentifier{ + TypeMeta: yaml.TypeMeta{ + APIVersion: "builtin", + Kind: "Generator", + }, + NameMeta: yaml.NameMeta{ + Name: "my-name", + Namespace: "my-namespace", + }, + }, +} +var origin2 = &resource.Origin{ + ConfiguredIn: "../base/config.yaml", + ConfiguredBy: yaml.ResourceIdentifier{ + TypeMeta: yaml.TypeMeta{ + APIVersion: "builtin", + Kind: "Generator", + }, + NameMeta: yaml.NameMeta{ + Name: "my-name", + Namespace: "my-namespace", + }, + }, +} + +func doAppend(t *testing.T, w resmap.ResMap, r *resource.Resource) { + err := w.Append(r) + if err != nil { + t.Fatalf("append error: %v", err) + } +} +func doRemove(t *testing.T, w resmap.ResMap, id resid.ResId) { + err := w.Remove(id) + if err != nil { + t.Fatalf("remove error: %v", err) + } +} + +// Make a resource with a predictable name. +func makeCm(i int) *resource.Resource { + return rf.FromMap( + map[string]interface{}{ + "apiVersion": "v1", + "kind": "ConfigMap", + "metadata": map[string]interface{}{ + "name": fmt.Sprintf("cm%03d", i), + }, + }) +} + +// Maintain the class invariant that no two +// resources can have the same CurId(). +func TestAppendRejectsDuplicateResId(t *testing.T) { + w := resmap.New() + if err := w.Append(makeCm(1)); err != nil { + t.Fatalf("append error: %v", err) + } + err := w.Append(makeCm(1)) + if err == nil { + t.Fatalf("expected append error") + } + if !strings.Contains( + err.Error(), + "may not add resource with an already registered id") { + t.Fatalf("unexpected error: %v", err) + } +} + +func TestAppendRemove(t *testing.T) { + w1 := resmap.New() + doAppend(t, w1, makeCm(1)) + doAppend(t, w1, makeCm(2)) + doAppend(t, w1, makeCm(3)) + doAppend(t, w1, makeCm(4)) + doAppend(t, w1, makeCm(5)) + doAppend(t, w1, makeCm(6)) + doAppend(t, w1, makeCm(7)) + doRemove(t, w1, makeCm(1).OrgId()) + doRemove(t, w1, makeCm(3).OrgId()) + doRemove(t, w1, makeCm(5).OrgId()) + doRemove(t, w1, makeCm(7).OrgId()) + + w2 := resmap.New() + doAppend(t, w2, makeCm(2)) + doAppend(t, w2, makeCm(4)) + doAppend(t, w2, makeCm(6)) + if !reflect.DeepEqual(w1, w1) { + w1.Debug("w1") + w2.Debug("w2") + t.Fatalf("mismatch") + } + + err := w2.Append(makeCm(6)) + if err == nil { + t.Fatalf("expected error") + } +} + +func TestRemove(t *testing.T) { + w := resmap.New() + r := makeCm(1) + err := w.Remove(r.OrgId()) + if err == nil { + t.Fatalf("expected error") + } + err = w.Append(r) + if err != nil { + t.Fatalf("unexpected error: %v", err) + } + err = w.Remove(r.OrgId()) + if err != nil { + t.Fatalf("unexpected error: %v", err) + } + err = w.Remove(r.OrgId()) + if err == nil { + t.Fatalf("expected error") + } +} + +func TestReplace(t *testing.T) { + cm5 := makeCm(5) + cm700 := makeCm(700) + otherCm5 := makeCm(5) + + w := resmap.New() + doAppend(t, w, makeCm(1)) + doAppend(t, w, makeCm(2)) + doAppend(t, w, makeCm(3)) + doAppend(t, w, makeCm(4)) + doAppend(t, w, cm5) + doAppend(t, w, makeCm(6)) + doAppend(t, w, makeCm(7)) + + oldSize := w.Size() + _, err := w.Replace(otherCm5) + if err != nil { + t.Fatalf("unexpected error: %v", err) + } + if w.Size() != oldSize { + t.Fatalf("unexpected size %d", w.Size()) + } + if r, err := w.GetByCurrentId(cm5.OrgId()); err != nil || r != otherCm5 { + t.Fatalf("unexpected result r=%s, err=%v", r.CurId(), err) + } + if err := w.Append(cm5); err == nil { + t.Fatalf("expected id already there error") + } + if err := w.Remove(cm5.OrgId()); err != nil { + t.Fatalf("unexpected err: %v", err) + } + if err := w.Append(cm700); err != nil { + t.Fatalf("unexpected err: %v", err) + } + if err := w.Append(cm5); err != nil { + t.Fatalf("unexpected err: %v", err) + } +} + +func TestEncodeAsYaml(t *testing.T) { + encoded := []byte(`apiVersion: v1 +kind: ConfigMap +metadata: + name: cm1 +--- +apiVersion: v1 +kind: ConfigMap +metadata: + name: cm2 +`) + input := resmaptest_test.NewRmBuilder(t, rf).Add( + map[string]interface{}{ + "apiVersion": "v1", + "kind": "ConfigMap", + "metadata": map[string]interface{}{ + "name": "cm1", + }, + }).Add( + map[string]interface{}{ + "apiVersion": "v1", + "kind": "ConfigMap", + "metadata": map[string]interface{}{ + "name": "cm2", + }, + }).ResMap() + out, err := input.AsYaml() + if err != nil { + t.Fatalf("unexpected error: %v", err) + } + if !reflect.DeepEqual(out, encoded) { + t.Fatalf("%s doesn't match expected %s", out, encoded) + } +} + +func TestGetMatchingResourcesByCurrentId(t *testing.T) { + cmap := resid.NewGvk("", "v1", "ConfigMap") + + r1 := rf.FromMap( + map[string]interface{}{ + "apiVersion": "v1", + "kind": "ConfigMap", + "metadata": map[string]interface{}{ + "name": "alice", + }, + }) + r2 := rf.FromMap( + map[string]interface{}{ + "apiVersion": "v1", + "kind": "ConfigMap", + "metadata": map[string]interface{}{ + "name": "bob", + }, + }) + r3 := rf.FromMap( + map[string]interface{}{ + "apiVersion": "v1", + "kind": "ConfigMap", + "metadata": map[string]interface{}{ + "name": "bob", + "namespace": "happy", + }, + }) + r4 := rf.FromMap( + map[string]interface{}{ + "apiVersion": "v1", + "kind": "ConfigMap", + "metadata": map[string]interface{}{ + "name": "charlie", + "namespace": "happy", + }, + }) + r5 := rf.FromMap( + map[string]interface{}{ + "apiVersion": "v1", + "kind": "Deployment", + "metadata": map[string]interface{}{ + "name": "charlie", + "namespace": "happy", + }, + }) + + m := resmaptest_test.NewRmBuilder(t, rf). + AddR(r1).AddR(r2).AddR(r3).AddR(r4).AddR(r5).ResMap() + + result := m.GetMatchingResourcesByCurrentId( + resid.NewResId(cmap, "alice").GvknEquals) + if len(result) != 1 { + t.Fatalf("Expected single map entry but got %v", result) + } + result = m.GetMatchingResourcesByCurrentId( + resid.NewResId(cmap, "bob").GvknEquals) + if len(result) != 2 { + t.Fatalf("Expected two, got %v", result) + } + result = m.GetMatchingResourcesByCurrentId( + resid.NewResIdWithNamespace(cmap, "bob", "system").GvknEquals) + if len(result) != 2 { + t.Fatalf("Expected two but got %v", result) + } + result = m.GetMatchingResourcesByCurrentId( + resid.NewResIdWithNamespace(cmap, "bob", "happy").Equals) + if len(result) != 1 { + t.Fatalf("Expected single map entry but got %v", result) + } + result = m.GetMatchingResourcesByCurrentId( + resid.NewResId(cmap, "charlie").GvknEquals) + if len(result) != 1 { + t.Fatalf("Expected single map entry but got %v", result) + } + + // nolint:goconst + tests := []struct { + name string + matcher resmap.IdMatcher + count int + }{ + { + "match everything", + func(resid.ResId) bool { return true }, + 5, + }, + { + "match nothing", + func(resid.ResId) bool { return false }, + 0, + }, + { + "name is alice", + func(x resid.ResId) bool { return x.Name == "alice" }, + 1, + }, + { + "name is charlie", + func(x resid.ResId) bool { return x.Name == "charlie" }, + 2, + }, + { + "name is bob", + func(x resid.ResId) bool { return x.Name == "bob" }, + 2, + }, + { + "happy namespace", + func(x resid.ResId) bool { + return x.Namespace == "happy" + }, + 3, + }, + { + "happy deployment", + func(x resid.ResId) bool { + return x.Namespace == "happy" && + x.Gvk.Kind == "Deployment" + }, + 1, + }, + { + "happy ConfigMap", + func(x resid.ResId) bool { + return x.Namespace == "happy" && + x.Gvk.Kind == "ConfigMap" + }, + 2, + }, + } + for _, tst := range tests { + result := m.GetMatchingResourcesByCurrentId(tst.matcher) + if len(result) != tst.count { + t.Fatalf("test '%s'; actual: %d, expected: %d", + tst.name, len(result), tst.count) + } + } +} + +func TestGetMatchingResourcesByAnyId(t *testing.T) { + r1 := rf.FromMap( + map[string]interface{}{ + "apiVersion": "v1", + "kind": "ConfigMap", + "metadata": map[string]interface{}{ + "name": "new-alice", + "annotations": map[string]interface{}{ + "internal.config.kubernetes.io/previousKinds": "ConfigMap", + "internal.config.kubernetes.io/previousNames": "alice", + "internal.config.kubernetes.io/previousNamespaces": "default", + }, + }, + }) + r2 := rf.FromMap( + map[string]interface{}{ + "apiVersion": "v1", + "kind": "ConfigMap", + "metadata": map[string]interface{}{ + "name": "new-bob", + "annotations": map[string]interface{}{ + "internal.config.kubernetes.io/previousKinds": "ConfigMap,ConfigMap", + "internal.config.kubernetes.io/previousNames": "bob,bob2", + "internal.config.kubernetes.io/previousNamespaces": "default,default", + }, + }, + }) + r3 := rf.FromMap( + map[string]interface{}{ + "apiVersion": "v1", + "kind": "ConfigMap", + "metadata": map[string]interface{}{ + "name": "new-bob", + "namespace": "new-happy", + "annotations": map[string]interface{}{ + "internal.config.kubernetes.io/previousKinds": "ConfigMap", + "internal.config.kubernetes.io/previousNames": "bob", + "internal.config.kubernetes.io/previousNamespaces": "happy", + }, + }, + }) + r4 := rf.FromMap( + map[string]interface{}{ + "apiVersion": "v1", + "kind": "ConfigMap", + "metadata": map[string]interface{}{ + "name": "charlie", + "namespace": "happy", + "annotations": map[string]interface{}{ + "internal.config.kubernetes.io/previousKinds": "ConfigMap", + "internal.config.kubernetes.io/previousNames": "charlie", + "internal.config.kubernetes.io/previousNamespaces": "default", + }, + }, + }) + r5 := rf.FromMap( + map[string]interface{}{ + "apiVersion": "v1", + "kind": "Deployment", + "metadata": map[string]interface{}{ + "name": "charlie", + "namespace": "happy", + }, + }) + + m := resmaptest_test.NewRmBuilder(t, rf). + AddR(r1).AddR(r2).AddR(r3).AddR(r4).AddR(r5).ResMap() + + // nolint:goconst + tests := []struct { + name string + matcher resmap.IdMatcher + count int + }{ + { + "match everything", + func(resid.ResId) bool { return true }, + 5, + }, + { + "match nothing", + func(resid.ResId) bool { return false }, + 0, + }, + { + "name is alice", + func(x resid.ResId) bool { return x.Name == "alice" }, + 1, + }, + { + "name is charlie", + func(x resid.ResId) bool { return x.Name == "charlie" }, + 2, + }, + { + "name is bob", + func(x resid.ResId) bool { return x.Name == "bob" }, + 2, + }, + { + "happy namespace", + func(x resid.ResId) bool { + return x.Namespace == "happy" + }, + 3, + }, + { + "happy deployment", + func(x resid.ResId) bool { + return x.Namespace == "happy" && + x.Gvk.Kind == "Deployment" + }, + 1, + }, + { + "happy ConfigMap", + func(x resid.ResId) bool { + return x.Namespace == "happy" && + x.Gvk.Kind == "ConfigMap" + }, + 2, + }, + } + for _, tst := range tests { + result := m.GetMatchingResourcesByAnyId(tst.matcher) + if len(result) != tst.count { + t.Fatalf("test '%s'; actual: %d, expected: %d", + tst.name, len(result), tst.count) + } + } +} + +func TestSubsetThatCouldBeReferencedByResource(t *testing.T) { + r1 := rf.FromMap( + map[string]interface{}{ + "apiVersion": "v1", + "kind": "ConfigMap", + "metadata": map[string]interface{}{ + "name": "alice", + }, + }) + r2 := rf.FromMap( + map[string]interface{}{ + "apiVersion": "v1", + "kind": "ConfigMap", + "metadata": map[string]interface{}{ + "name": "bob", + }, + }) + r3 := rf.FromMap( + map[string]interface{}{ + "apiVersion": "v1", + "kind": "ConfigMap", + "metadata": map[string]interface{}{ + "name": "bob", + "namespace": "happy", + }, + }) + r4 := rf.FromMap( + map[string]interface{}{ + "apiVersion": "apps/v1", + "kind": "Deployment", + "metadata": map[string]interface{}{ + "name": "charlie", + "namespace": "happy", + }, + }) + r5 := rf.FromMap( + map[string]interface{}{ + "apiVersion": "v1", + "kind": "ConfigMap", + "metadata": map[string]interface{}{ + "name": "charlie", + "namespace": "happy", + }, + }) + r5.AddNamePrefix("little-") + r6 := rf.FromMap( + map[string]interface{}{ + "apiVersion": "apps/v1", + "kind": "Deployment", + "metadata": map[string]interface{}{ + "name": "domino", + "namespace": "happy", + }, + }) + r6.AddNamePrefix("little-") + r7 := rf.FromMap( + map[string]interface{}{ + "apiVersion": "rbac.authorization.k8s.io/v1", + "kind": "ClusterRoleBinding", + "metadata": map[string]interface{}{ + "name": "meh", + }, + }) + + tests := map[string]struct { + filter *resource.Resource + expected resmap.ResMap + }{ + "default namespace 1": { + filter: r2, + expected: resmaptest_test.NewRmBuilder(t, rf). + AddR(r1).AddR(r2).AddR(r7).ResMap(), + }, + "default namespace 2": { + filter: r1, + expected: resmaptest_test.NewRmBuilder(t, rf). + AddR(r1).AddR(r2).AddR(r7).ResMap(), + }, + "happy namespace no prefix": { + filter: r3, + expected: resmaptest_test.NewRmBuilder(t, rf). + AddR(r3).AddR(r4).AddR(r5).AddR(r6).AddR(r7).ResMap(), + }, + "happy namespace with prefix": { + filter: r5, + expected: resmaptest_test.NewRmBuilder(t, rf). + AddR(r3).AddR(r4).AddR(r5).AddR(r6).AddR(r7).ResMap(), + }, + "cluster level": { + filter: r7, + expected: resmaptest_test.NewRmBuilder(t, rf). + AddR(r1).AddR(r2).AddR(r3).AddR(r4).AddR(r5).AddR(r6).AddR(r7).ResMap(), + }, + } + m := resmaptest_test.NewRmBuilder(t, rf). + AddR(r1).AddR(r2).AddR(r3).AddR(r4).AddR(r5).AddR(r6).AddR(r7).ResMap() + for name, test := range tests { + test := test + t.Run(name, func(t *testing.T) { + got, err1 := m.SubsetThatCouldBeReferencedByResource(test.filter) + if err1 != nil { + t.Fatalf("Expected error %v: ", err1) + } + err := test.expected.ErrorIfNotEqualLists(got) + if err != nil { + test.expected.Debug("expected") + got.Debug("actual") + t.Fatalf("Expected match") + } + }) + } +} + +func TestDeepCopy(t *testing.T) { + rm1 := resmaptest_test.NewRmBuilder(t, rf).Add( + map[string]interface{}{ + "apiVersion": "v1", + "kind": "ConfigMap", + "metadata": map[string]interface{}{ + "name": "cm1", + }, + }).Add( + map[string]interface{}{ + "apiVersion": "v1", + "kind": "ConfigMap", + "metadata": map[string]interface{}{ + "name": "cm2", + }, + }).ResMap() + + rm2 := rm1.DeepCopy() + + if &rm1 == &rm2 { + t.Fatal("DeepCopy returned a reference to itself instead of a copy") + } + err := rm1.ErrorIfNotEqualLists(rm1) + if err != nil { + t.Fatal(err) + } +} + +func TestErrorIfNotEqualSets(t *testing.T) { + r1 := rf.FromMap( + map[string]interface{}{ + "apiVersion": "v1", + "kind": "ConfigMap", + "metadata": map[string]interface{}{ + "name": "cm1", + }, + }) + r2 := rf.FromMap( + map[string]interface{}{ + "apiVersion": "v1", + "kind": "ConfigMap", + "metadata": map[string]interface{}{ + "name": "cm2", + }, + }) + r3 := rf.FromMap( + map[string]interface{}{ + "apiVersion": "v1", + "kind": "ConfigMap", + "metadata": map[string]interface{}{ + "name": "cm2", + "namespace": "system", + }, + }) + + m1 := resmaptest_test.NewRmBuilder(t, rf).AddR(r1).AddR(r2).AddR(r3).ResMap() + if err := m1.ErrorIfNotEqualSets(m1); err != nil { + t.Fatalf("object should equal itself %v", err) + } + + m2 := resmaptest_test.NewRmBuilder(t, rf).AddR(r1).ResMap() + if err := m1.ErrorIfNotEqualSets(m2); err == nil { + t.Fatalf("%v should not equal %v %v", m1, m2, err) + } + + m3 := resmaptest_test.NewRmBuilder(t, rf).AddR(r2).ResMap() + if err := m2.ErrorIfNotEqualSets(m3); err == nil { + t.Fatalf("%v should not equal %v %v", m2, m3, err) + } + + m3 = resmaptest_test.NewRmBuilder(t, rf).Add( + map[string]interface{}{ + "apiVersion": "v1", + "kind": "ConfigMap", + "metadata": map[string]interface{}{ + "name": "cm1", + }}).ResMap() + if err := m2.ErrorIfNotEqualSets(m3); err != nil { + t.Fatalf("%v should equal %v %v", m2, m3, err) + } + + m4 := resmaptest_test.NewRmBuilder(t, rf).AddR(r1).AddR(r2).AddR(r3).ResMap() + if err := m1.ErrorIfNotEqualSets(m4); err != nil { + t.Fatalf("expected equality between %v and %v, %v", m1, m4, err) + } + + m4 = resmaptest_test.NewRmBuilder(t, rf).AddR(r3).AddR(r1).AddR(r2).ResMap() + if err := m1.ErrorIfNotEqualSets(m4); err != nil { + t.Fatalf("expected equality between %v and %v, %v", m1, m4, err) + } + + m4 = m1.ShallowCopy() + if err := m1.ErrorIfNotEqualSets(m4); err != nil { + t.Fatalf("expected equality between %v and %v, %v", m1, m4, err) + } + m4 = m1.DeepCopy() + if err := m1.ErrorIfNotEqualSets(m4); err != nil { + t.Fatalf("expected equality between %v and %v, %v", m1, m4, err) + } +} + +func TestErrorIfNotEqualLists(t *testing.T) { + r1 := rf.FromMap( + map[string]interface{}{ + "apiVersion": "v1", + "kind": "ConfigMap", + "metadata": map[string]interface{}{ + "name": "cm1", + }, + }) + r2 := rf.FromMap( + map[string]interface{}{ + "apiVersion": "v1", + "kind": "ConfigMap", + "metadata": map[string]interface{}{ + "name": "cm2", + }, + }) + r3 := rf.FromMap( + map[string]interface{}{ + "apiVersion": "v1", + "kind": "ConfigMap", + "metadata": map[string]interface{}{ + "name": "cm2", + "namespace": "system", + }, + }) + + m1 := resmaptest_test.NewRmBuilder(t, rf).AddR(r1).AddR(r2).AddR(r3).ResMap() + if err := m1.ErrorIfNotEqualLists(m1); err != nil { + t.Fatalf("object should equal itself %v", err) + } + + m2 := resmaptest_test.NewRmBuilder(t, rf).AddR(r1).ResMap() + if err := m1.ErrorIfNotEqualLists(m2); err == nil { + t.Fatalf("%v should not equal %v %v", m1, m2, err) + } + + m3 := resmaptest_test.NewRmBuilder(t, rf).Add( + map[string]interface{}{ + "apiVersion": "v1", + "kind": "ConfigMap", + "metadata": map[string]interface{}{ + "name": "cm1", + }}).ResMap() + if err := m2.ErrorIfNotEqualLists(m3); err != nil { + t.Fatalf("%v should equal %v %v", m2, m3, err) + } + + m4 := resmaptest_test.NewRmBuilder(t, rf).AddR(r1).AddR(r2).AddR(r3).ResMap() + if err := m1.ErrorIfNotEqualLists(m4); err != nil { + t.Fatalf("expected equality between %v and %v, %v", m1, m4, err) + } + + m4 = resmaptest_test.NewRmBuilder(t, rf).AddR(r3).AddR(r1).AddR(r2).ResMap() + if err := m1.ErrorIfNotEqualLists(m4); err == nil { + t.Fatalf("expected inequality between %v and %v, %v", m1, m4, err) + } + + m4 = m1.ShallowCopy() + if err := m1.ErrorIfNotEqualLists(m4); err != nil { + t.Fatalf("expected equality between %v and %v, %v", m1, m4, err) + } + m4 = m1.DeepCopy() + if err := m1.ErrorIfNotEqualLists(m4); err != nil { + t.Fatalf("expected equality between %v and %v, %v", m1, m4, err) + } +} + +func TestAppendAll(t *testing.T) { + r1 := rf.FromMap( + map[string]interface{}{ + "apiVersion": "apps/v1", + "kind": "Deployment", + "metadata": map[string]interface{}{ + "name": "foo-deploy1", + }, + }) + input1 := rmF.FromResource(r1) + r2 := rf.FromMap( + map[string]interface{}{ + "apiVersion": "apps/v1", + "kind": "StatefulSet", + "metadata": map[string]interface{}{ + "name": "bar-stateful", + }, + }) + input2 := rmF.FromResource(r2) + + expected := resmap.New() + if err := expected.Append(r1); err != nil { + t.Fatalf("unexpected error: %v", err) + } + if err := expected.Append(r2); err != nil { + t.Fatalf("unexpected error: %v", err) + } + + if err := input1.AppendAll(input2); err != nil { + t.Fatalf("unexpected error: %v", err) + } + if err := expected.ErrorIfNotEqualLists(input1); err != nil { + input1.Debug("1") + expected.Debug("ex") + t.Fatalf("%#v doesn't equal expected %#v", input1, expected) + } + if err := input1.AppendAll(nil); err != nil { + t.Fatalf("unexpected error: %v", err) + } + if err := expected.ErrorIfNotEqualLists(input1); err != nil { + t.Fatalf("%#v doesn't equal expected %#v", input1, expected) + } +} + +func makeMap1() resmap.ResMap { + return rmF.FromResource(rf.FromMapAndOption( + map[string]interface{}{ + "apiVersion": "apps/v1", + "kind": "ConfigMap", + "metadata": map[string]interface{}{ + "name": "cmap", + }, + "data": map[string]interface{}{ + "a": "x", + "b": "y", + }, + }, &types.GeneratorArgs{ + Behavior: "create", + })) +} + +func makeMap2(b types.GenerationBehavior) resmap.ResMap { + return rmF.FromResource(rf.FromMapAndOption( + map[string]interface{}{ + "apiVersion": "apps/v1", + "kind": "ConfigMap", + "metadata": map[string]interface{}{ + "name": "cmap", + }, + "data": map[string]interface{}{ + "a": "u", + "b": "v", + "c": "w", + }, + }, &types.GeneratorArgs{ + Behavior: b.String(), + })) +} + +func TestAbsorbAll(t *testing.T) { + metadata := map[string]interface{}{ + "name": "cmap", + } + expected := rmF.FromResource(rf.FromMapAndOption( + map[string]interface{}{ + "apiVersion": "apps/v1", + "kind": "ConfigMap", + "metadata": metadata, + "data": map[string]interface{}{ + "a": "u", + "b": "v", + "c": "w", + }, + }, + &types.GeneratorArgs{ + Behavior: "create", + })) + w := makeMap1() + assert.NoError(t, w.AbsorbAll(makeMap2(types.BehaviorMerge))) + expected.RemoveBuildAnnotations() + w.RemoveBuildAnnotations() + assert.NoError(t, expected.ErrorIfNotEqualLists(w)) + w = makeMap1() + assert.NoError(t, w.AbsorbAll(nil)) + assert.NoError(t, w.ErrorIfNotEqualLists(makeMap1())) + + w = makeMap1() + w2 := makeMap2(types.BehaviorReplace) + assert.NoError(t, w.AbsorbAll(w2)) + w2.RemoveBuildAnnotations() + assert.NoError(t, w2.ErrorIfNotEqualLists(w)) + w = makeMap1() + w2 = makeMap2(types.BehaviorUnspecified) + err := w.AbsorbAll(w2) + assert.Error(t, err) + assert.True( + t, strings.Contains(err.Error(), "behavior must be merge or replace")) +} + +func TestToRNodeSlice(t *testing.T) { + input := `apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + name: namespace-reader +rules: +- apiGroups: + - "" + resources: + - namespaces + verbs: + - get + - watch + - list +` + rm, err := rmF.NewResMapFromBytes([]byte(input)) + if err != nil { + t.Fatalf("unexpected error: %v", err) + } + b := bytes.NewBufferString("") + for i, n := range rm.ToRNodeSlice() { + if i != 0 { + b.WriteString("---\n") + } + s, err := n.String() + if err != nil { + t.Fatalf("unexpected error: %v", err) + } + b.WriteString(s) + } + + if !reflect.DeepEqual(input, b.String()) { + t.Fatalf("actual doesn't match expected.\nActual:\n%s\n===\nExpected:\n%s\n", + b.String(), input) + } +} + +func TestDeAnchorSingleDoc(t *testing.T) { + input := `apiVersion: v1 +kind: ConfigMap +metadata: + name: wildcard +data: + color: &color-used blue + feeling: *color-used +` + rm, err := rmF.NewResMapFromBytes([]byte(input)) + assert.NoError(t, err) + assert.NoError(t, rm.DeAnchor()) + yaml, err := rm.AsYaml() + assert.NoError(t, err) + assert.Equal(t, strings.TrimSpace(` +apiVersion: v1 +data: + color: blue + feeling: blue +kind: ConfigMap +metadata: + name: wildcard +`), strings.TrimSpace(string(yaml))) +} + +// Anchor references don't cross YAML document boundaries. +func TestDeAnchorMultiDoc(t *testing.T) { + input := `apiVersion: v1 +kind: ConfigMap +metadata: + name: betty +data: + color: &color-used blue + feeling: *color-used +--- +apiVersion: v1 +kind: ConfigMap +metadata: + name: bob +data: + color: red + feeling: *color-used +` + _, err := rmF.NewResMapFromBytes([]byte(input)) + assert.Error(t, err) + assert.Contains(t, err.Error(), "unknown anchor 'color-used' referenced") +} + +// Anchor references cross list elements in a ResourceList. +func TestDeAnchorResourceList(t *testing.T) { + input := `apiVersion: config.kubernetes.io/v1 +kind: ResourceList +metadata: + name: aShortList +items: +- apiVersion: v1 + kind: ConfigMap + metadata: + name: betty + data: + color: &color-used blue + feeling: *color-used +- apiVersion: v1 + kind: ConfigMap + metadata: + name: bob + data: + color: red + feeling: *color-used +` + rm, err := rmF.NewResMapFromBytes([]byte(input)) + assert.NoError(t, err) + assert.NoError(t, rm.DeAnchor()) + yaml, err := rm.AsYaml() + assert.NoError(t, err) + assert.Equal(t, strings.TrimSpace(` +apiVersion: v1 +data: + color: blue + feeling: blue +kind: ConfigMap +metadata: + name: betty +--- +apiVersion: v1 +data: + color: red + feeling: blue +kind: ConfigMap +metadata: + name: bob +`), strings.TrimSpace(string(yaml))) +} + +func TestApplySmPatch_General(t *testing.T) { + const ( + myDeployment = "Deployment" + myCRD = "myCRD" + expectedResultSMP = `apiVersion: apps/v1 +kind: Deployment +metadata: + name: deploy1 +spec: + template: + metadata: + labels: + old-label: old-value + some-label: some-value + spec: + containers: + - env: + - name: SOMEENV + value: SOMEVALUE + image: nginx + name: nginx +` + ) + tests := map[string]struct { + base []string + patches []string + expected []string + errorExpected bool + errorMsg string + }{ + "clown": { + base: []string{`apiVersion: v1 +kind: Deployment +metadata: + name: clown +spec: + numReplicas: 1 +`, + }, + patches: []string{`apiVersion: v1 +kind: Deployment +metadata: + name: clown +spec: + numReplicas: 999 +`, + }, + errorExpected: false, + expected: []string{ + `apiVersion: v1 +kind: Deployment +metadata: + name: clown +spec: + numReplicas: 999 +`, + }, + }, + "confusion": { + base: []string{`apiVersion: example.com/v1 +kind: Foo +metadata: + name: my-foo +spec: + bar: + A: X + B: Y +`, + }, + patches: []string{`apiVersion: example.com/v1 +kind: Foo +metadata: + name: my-foo +spec: + bar: + B: + C: Z +`, `apiVersion: example.com/v1 +kind: Foo +metadata: + name: my-foo +spec: + bar: + C: Z + D: W + baz: + hello: world +`, + }, + errorExpected: false, + expected: []string{ + `apiVersion: example.com/v1 +kind: Foo +metadata: + name: my-foo +spec: + bar: + A: X + C: Z + D: W + baz: + hello: world +`, + }, + }, + "withschema-ns1-ns2-one": { + base: []string{ + addNamespace("ns1", baseResource(myDeployment)), + addNamespace("ns2", baseResource(myDeployment)), + }, + patches: []string{ + addNamespace("ns1", addLabelAndEnvPatch(myDeployment)), + addNamespace("ns2", addLabelAndEnvPatch(myDeployment)), + }, + errorExpected: false, + expected: []string{ + addNamespace("ns1", expectedResultSMP), + addNamespace("ns2", expectedResultSMP), + }, + }, + "withschema-ns1-ns2-two": { + base: []string{ + addNamespace("ns1", baseResource(myDeployment)), + }, + patches: []string{ + addNamespace("ns2", changeImagePatch(myDeployment)), + }, + expected: []string{ + addNamespace("ns1", baseResource(myDeployment)), + }, + }, + "withschema-ns1-ns2-three": { + base: []string{ + addNamespace("ns1", baseResource(myDeployment)), + }, + patches: []string{ + addNamespace("ns1", changeImagePatch(myDeployment)), + }, + expected: []string{ + `apiVersion: apps/v1 +kind: Deployment +metadata: + name: deploy1 + namespace: ns1 +spec: + template: + metadata: + labels: + old-label: old-value + spec: + containers: + - image: nginx:1.7.9 + name: nginx +`, + }, + }, + "withschema-nil-ns2": { + base: []string{ + baseResource(myDeployment), + }, + patches: []string{ + addNamespace("ns2", changeImagePatch(myDeployment)), + }, + expected: []string{ + baseResource(myDeployment), + }, + }, + "withschema-ns1-nil": { + base: []string{ + addNamespace("ns1", baseResource(myDeployment)), + }, + patches: []string{ + changeImagePatch(myDeployment), + }, + expected: []string{ + addNamespace("ns1", baseResource(myDeployment)), + }, + }, + "noschema-ns1-ns2-one": { + base: []string{ + addNamespace("ns1", baseResource(myCRD)), + addNamespace("ns2", baseResource(myCRD)), + }, + patches: []string{ + addNamespace("ns1", addLabelAndEnvPatch(myCRD)), + addNamespace("ns2", addLabelAndEnvPatch(myCRD)), + }, + errorExpected: false, + expected: []string{ + addNamespace("ns1", expectedResultJMP("")), + addNamespace("ns2", expectedResultJMP("")), + }, + }, + "noschema-ns1-ns2-two": { + base: []string{addNamespace("ns1", baseResource(myCRD))}, + patches: []string{addNamespace("ns2", changeImagePatch(myCRD))}, + expected: []string{addNamespace("ns1", baseResource(myCRD))}, + }, + "noschema-nil-ns2": { + base: []string{baseResource(myCRD)}, + patches: []string{addNamespace("ns2", changeImagePatch(myCRD))}, + expected: []string{baseResource(myCRD)}, + }, + "noschema-ns1-nil": { + base: []string{addNamespace("ns1", baseResource(myCRD))}, + patches: []string{changeImagePatch(myCRD)}, + expected: []string{addNamespace("ns1", baseResource(myCRD))}, + }, + } + for n := range tests { + tc := tests[n] + t.Run(n, func(t *testing.T) { + m, err := rmF.NewResMapFromBytes([]byte(strings.Join(tc.base, "\n---\n"))) + assert.NoError(t, err) + foundError := false + for _, patch := range tc.patches { + rp, err := rf.FromBytes([]byte(patch)) + assert.NoError(t, err) + idSet := resource.MakeIdSet([]*resource.Resource{rp}) + if err = m.ApplySmPatch(idSet, rp); err != nil { + foundError = true + break + } + } + if foundError { + assert.True(t, tc.errorExpected) + // compare error message? + return + } + assert.False(t, tc.errorExpected) + m.RemoveBuildAnnotations() + yml, err := m.AsYaml() + assert.NoError(t, err) + assert.Equal(t, strings.Join(tc.expected, "---\n"), string(yml)) + }) + } +} + +// simple utility function to add an namespace in a resource +// used as base, patch or expected result. Simply looks +// for specs: in order to add namespace: xxxx before this line +func addNamespace(namespace string, base string) string { + res := strings.Replace(base, + "\nspec:\n", + "\n namespace: "+namespace+"\nspec:\n", + 1) + return res +} + +// DeleteOddsFilter deletes the odd entries, removing nodes. +// This is a ridiculous filter for testing. +type DeleteOddsFilter struct{} + +func (f DeleteOddsFilter) Filter( + nodes []*yaml.RNode) (result []*yaml.RNode, err error) { + for i := range nodes { + if i%2 == 0 { + // Keep the even entries, drop the odd entries. + result = append(result, nodes[i]) + } + } + return +} + +// CloneOddsFilter deletes even entries and clones odd entries, +// making new nodes. +// This is a ridiculous filter for testing. +type CloneOddsFilter struct{} + +func (f CloneOddsFilter) Filter( + nodes []*yaml.RNode) (result []*yaml.RNode, err error) { + for i := range nodes { + if i%2 != 0 { + newNode := nodes[i].Copy() + // Add suffix to the name, so that it's unique (w/r to this test). + newNode.SetName(newNode.GetName() + "Clone") + // Return a ptr to the copy. + result = append(result, nodes[i], newNode) + } + } + return +} + +func TestApplyFilter(t *testing.T) { + tests := map[string]struct { + input string + f kio.Filter + expected string + }{ + "labels": { + input: ` +apiVersion: example.com/v1 +kind: Beans +metadata: + name: myBeans +--- +apiVersion: example.com/v1 +kind: Franks +metadata: + name: myFranks +`, + f: labels.Filter{ + Labels: map[string]string{ + "a": "foo", + "b": "bar", + }, + FsSlice: types.FsSlice{ + { + Gvk: resid.NewGvk("example.com", "v1", "Beans"), + Path: "metadata/labels", + CreateIfNotPresent: true, + }, + }, + }, + expected: ` +apiVersion: example.com/v1 +kind: Beans +metadata: + labels: + a: foo + b: bar + name: myBeans +--- +apiVersion: example.com/v1 +kind: Franks +metadata: + name: myFranks +`, + }, + "deleteOddNodes": { + input: ` +apiVersion: example.com/v1 +kind: Zero +metadata: + name: r0 +--- +apiVersion: example.com/v1 +kind: One +metadata: + name: r1 +--- +apiVersion: example.com/v1 +kind: Two +metadata: + name: r2 +--- +apiVersion: example.com/v1 +kind: Three +metadata: + name: r3 +`, + f: DeleteOddsFilter{}, + expected: ` +apiVersion: example.com/v1 +kind: Zero +metadata: + name: r0 +--- +apiVersion: example.com/v1 +kind: Two +metadata: + name: r2 +`, + }, + "cloneOddNodes": { + // input list has five entries + input: ` +apiVersion: example.com/v1 +kind: Zero +metadata: + name: r0 +--- +apiVersion: example.com/v1 +kind: One +metadata: + name: r1 +--- +apiVersion: example.com/v1 +kind: Two +metadata: + name: r2 +--- +apiVersion: example.com/v1 +kind: Three +metadata: + name: r3 +--- +apiVersion: example.com/v1 +kind: Four +metadata: + name: r4 +`, + f: CloneOddsFilter{}, + // output has four, but half are newly created nodes. + expected: ` +apiVersion: example.com/v1 +kind: One +metadata: + name: r1 +--- +apiVersion: example.com/v1 +kind: One +metadata: + name: r1Clone +--- +apiVersion: example.com/v1 +kind: Three +metadata: + name: r3 +--- +apiVersion: example.com/v1 +kind: Three +metadata: + name: r3Clone +`, + }, + } + for name := range tests { + tc := tests[name] + t.Run(name, func(t *testing.T) { + m, err := rmF.NewResMapFromBytes([]byte(tc.input)) + assert.NoError(t, err) + assert.NoError(t, m.ApplyFilter(tc.f)) + kusttest_test.AssertActualEqualsExpectedWithTweak( + t, m, nil, tc.expected) + }) + } +} + +func TestApplySmPatch_Deletion(t *testing.T) { + target := ` +apiVersion: apps/v1 +metadata: + name: myDeploy +kind: Deployment +spec: + replica: 2 + template: + metadata: + labels: + old-label: old-value + spec: + containers: + - name: nginx + image: nginx +` + tests := map[string]struct { + patch string + expected string + finalMapSize int + }{ + "delete1": { + patch: `apiVersion: apps/v1 +metadata: + name: myDeploy +kind: Deployment +spec: + replica: 2 + template: + $patch: delete + metadata: + labels: + old-label: old-value + spec: + containers: + - name: nginx + image: nginx +`, + expected: `apiVersion: apps/v1 +kind: Deployment +metadata: + name: myDeploy +spec: + replica: 2 +`, + finalMapSize: 1, + }, + "delete2": { + patch: `apiVersion: apps/v1 +metadata: + name: myDeploy +kind: Deployment +spec: + $patch: delete + replica: 2 + template: + metadata: + labels: + old-label: old-value + spec: + containers: + - name: nginx + image: nginx +`, + expected: `apiVersion: apps/v1 +kind: Deployment +metadata: + name: myDeploy +`, + finalMapSize: 1, + }, + "delete3": { + patch: `apiVersion: apps/v1 +metadata: + name: myDeploy +kind: Deployment +$patch: delete +`, + expected: "", + finalMapSize: 0, + }, + } + for name := range tests { + tc := tests[name] + t.Run(name, func(t *testing.T) { + m, err := rmF.NewResMapFromBytes([]byte(target)) + assert.NoError(t, err, name) + idSet := resource.MakeIdSet(m.Resources()) + assert.Equal(t, 1, idSet.Size(), name) + p, err := rf.FromBytes([]byte(tc.patch)) + assert.NoError(t, err, name) + assert.NoError(t, m.ApplySmPatch(idSet, p), name) + assert.Equal(t, tc.finalMapSize, m.Size(), name) + m.RemoveBuildAnnotations() + yml, err := m.AsYaml() + assert.NoError(t, err, name) + assert.Equal(t, tc.expected, string(yml), name) + }) + } +} + +func TestOriginAnnotations(t *testing.T) { + w := resmap.New() + for i := 0; i < 3; i++ { + assert.NoError(t, w.Append(makeCm(i))) + } + // this should add an origin annotation to every resource + assert.NoError(t, w.AddOriginAnnotation(origin1)) + resources := w.Resources() + for _, res := range resources { + or, err := res.GetOrigin() + assert.NoError(t, err) + assert.Equal(t, origin1, or) + } + // this should not overwrite the existing origin annotations + assert.NoError(t, w.AddOriginAnnotation(origin2)) + for _, res := range resources { + or, err := res.GetOrigin() + assert.NoError(t, err) + assert.Equal(t, origin1, or) + } + // this should remove origin annotations from all resources + assert.NoError(t, w.RemoveOriginAnnotations()) + for _, res := range resources { + or, err := res.GetOrigin() + assert.NoError(t, err) + assert.Nil(t, or) + } +} + +func TestTransformerAnnotations(t *testing.T) { + w := resmap.New() + for i := 0; i < 3; i++ { + assert.NoError(t, w.Append(makeCm(i))) + } + // this should add an origin annotation to every resource + assert.NoError(t, w.AddTransformerAnnotation(origin1)) + resources := w.Resources() + for _, res := range resources { + or, err := res.GetOrigin() + assert.NoError(t, err) + assert.Equal(t, origin1, or) + } + // this should add a transformer annotation to every resource + assert.NoError(t, w.AddTransformerAnnotation(origin2)) + for _, res := range resources { + or, err := res.GetOrigin() + assert.NoError(t, err) + assert.Equal(t, origin1, or) + tr, err := res.GetTransformations() + assert.NoError(t, err) + assert.Equal(t, resource.Transformations{origin2}, tr) + } + // remove transformer annotations from all resources + assert.NoError(t, w.RemoveTransformerAnnotations()) + for _, res := range resources { + tr, err := res.GetTransformations() + assert.NoError(t, err) + assert.Nil(t, tr) + } +} + +// baseResource produces a base object which used to test +// patch transformation +// Also the structure is matching the Deployment syntax +// the kind can be replaced to allow testing using CRD +// without access to the schema +func baseResource(kind string) string { + return fmt.Sprintf(`apiVersion: apps/v1 +kind: %s +metadata: + name: deploy1 +spec: + template: + metadata: + labels: + old-label: old-value + spec: + containers: + - image: nginx + name: nginx +`, kind) +} + +// addContainerAndEnvPatch produces a patch object which adds +// an entry in the env slice of the first/nginx container +// as well as adding a label in the metadata +// Note that for SMP/WithSchema merge, the name:nginx entry +// is mandatory +func addLabelAndEnvPatch(kind string) string { + return fmt.Sprintf(`apiVersion: apps/v1 +kind: %s +metadata: + name: deploy1 +spec: + template: + metadata: + labels: + some-label: some-value + spec: + containers: + - name: nginx + env: + - name: SOMEENV + value: SOMEVALUE`, kind) +} + +// changeImagePatch produces a patch object which replaces +// the value of the image field in the first/nginx container +// Note that for SMP/WithSchema merge, the name:nginx entry +// is mandatory +func changeImagePatch(kind string) string { + return fmt.Sprintf(`apiVersion: apps/v1 +kind: %s +metadata: + name: deploy1 +spec: + template: + spec: + containers: + - name: nginx + image: "nginx:1.7.9"`, kind) +} + +// utility method building the expected output of a JMP. +// imagename parameter allows to build a result consistent +// with the JMP behavior which basically overrides the +// entire "containers" list. +func expectedResultJMP(imagename string) string { + if imagename == "" { + return `apiVersion: apps/v1 +kind: myCRD +metadata: + name: deploy1 +spec: + template: + metadata: + labels: + old-label: old-value + some-label: some-value + spec: + containers: + - env: + - name: SOMEENV + value: SOMEVALUE + name: nginx +` + } + return fmt.Sprintf(`apiVersion: apps/v1 +kind: myCRD +metadata: + name: deploy1 +spec: + template: + metadata: + labels: + old-label: old-value + some-label: some-value + spec: + containers: + - image: %s + name: nginx +`, imagename) +} diff --git a/go/internal/forked/api/resmap/selector_test.go b/go/internal/forked/api/resmap/selector_test.go new file mode 100644 index 000000000..af1a9801c --- /dev/null +++ b/go/internal/forked/api/resmap/selector_test.go @@ -0,0 +1,189 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2. + +package resmap_test + +import ( + "testing" + + "github.com/stretchr/testify/assert" + "sigs.k8s.io/kustomize/api/resmap" + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/resid" +) + +func setupRMForPatchTargets(t *testing.T) resmap.ResMap { + result, err := rmF.NewResMapFromBytes([]byte(` +apiVersion: group1/v1 +kind: Kind1 +metadata: + name: name1 + namespace: ns1 + labels: + app: name1 + annotations: + foo: bar +--- +apiVersion: group1/v1 +kind: Kind1 +metadata: + name: name2 + namespace: default + labels: + app: name2 + annotations: + foo: bar +--- +apiVersion: group1/v1 +kind: Kind2 +metadata: + name: name3 + labels: + app: name3 + annotations: + bar: baz +--- +apiVersion: group1/v1 +kind: Kind2 +metadata: + name: x-name1 + namespace: x-default +`)) + assert.NoError(t, err) + return result +} + +func TestFindPatchTargets(t *testing.T) { + rm := setupRMForPatchTargets(t) + testcases := map[string]struct { + target types.Selector + count int + }{ + "select_01": { + target: types.Selector{ + ResId: resid.ResId{Name: "name.*"}, + }, + count: 3, + }, + "select_02": { + target: types.Selector{ + ResId: resid.ResId{Name: "name.*"}, + AnnotationSelector: "foo=bar", + }, + count: 2, + }, + "select_03": { + target: types.Selector{ + LabelSelector: "app=name1", + }, + count: 1, + }, + "select_04": { + target: types.Selector{ + ResId: resid.ResId{ + Gvk: resid.Gvk{ + Kind: "Kind1", + }, + Name: "name.*", + }, + }, + count: 2, + }, + "select_05": { + target: types.Selector{ + ResId: resid.ResId{Name: "NotMatched"}, + }, + count: 0, + }, + "select_06": { + target: types.Selector{ + ResId: resid.ResId{Name: ""}, + }, + count: 4, + }, + "select_07": { + target: types.Selector{ + ResId: resid.ResId{Namespace: "default"}, + }, + count: 2, + }, + "select_08": { + target: types.Selector{ + ResId: resid.ResId{Namespace: ""}, + }, + count: 4, + }, + "select_09": { + target: types.Selector{ + ResId: resid.ResId{ + Namespace: "default", + Name: "name.*", + Gvk: resid.Gvk{ + Kind: "Kind1", + }, + }, + }, + count: 1, + }, + "select_10": { + target: types.Selector{ + ResId: resid.ResId{Name: "^name.*"}, + }, + count: 3, + }, + "select_11": { + target: types.Selector{ + ResId: resid.ResId{Name: "name.*$"}, + }, + count: 3, + }, + "select_12": { + target: types.Selector{ + ResId: resid.ResId{Name: "^name.*$"}, + }, + count: 3, + }, + "select_13": { + target: types.Selector{ + ResId: resid.ResId{Namespace: "^def.*"}, + }, + count: 2, + }, + "select_14": { + target: types.Selector{ + ResId: resid.ResId{Namespace: "def.*$"}, + }, + count: 2, + }, + "select_15": { + target: types.Selector{ + ResId: resid.ResId{Namespace: "^def.*$"}, + }, + count: 2, + }, + "select_16": { + target: types.Selector{ + ResId: resid.ResId{Namespace: "default"}, + }, + count: 2, + }, + "select_17": { + target: types.Selector{ + ResId: resid.ResId{Namespace: "NotMatched"}, + }, + count: 0, + }, + "select_18": { + target: types.Selector{ + ResId: resid.ResId{Namespace: "ns1"}, + }, + count: 1, + }, + } + for n, testcase := range testcases { + actual, err := rm.Select(testcase.target) + assert.NoError(t, err) + assert.Equalf( + t, testcase.count, len(actual), "test=%s target=%v", n, testcase.target) + } +} diff --git a/go/internal/forked/api/resmap/selector_test.go b/go/internal/forked/api/resmap/selector_test.go new file mode 100644 index 000000000..033f2b062 --- /dev/null +++ b/go/internal/forked/api/resmap/selector_test.go @@ -0,0 +1,189 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2. + +package resmap_test + +import ( + "testing" + + "github.com/stretchr/testify/assert" + "sigs.k8s.io/kustomize/api/resmap" + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/resid" +) + +func setupRMForPatchTargets(t *testing.T) resmap.ResMap { + result, err := rmF.NewResMapFromBytes([]byte(` +apiVersion: group1/v1 +kind: Kind1 +metadata: + name: name1 + namespace: ns1 + labels: + app: name1 + annotations: + foo: bar +--- +apiVersion: group1/v1 +kind: Kind1 +metadata: + name: name2 + namespace: default + labels: + app: name2 + annotations: + foo: bar +--- +apiVersion: group1/v1 +kind: Kind2 +metadata: + name: name3 + labels: + app: name3 + annotations: + bar: baz +--- +apiVersion: group1/v1 +kind: Kind2 +metadata: + name: x-name1 + namespace: x-default +`)) + assert.NoError(t, err) + return result +} + +func TestFindPatchTargets(t *testing.T) { + rm := setupRMForPatchTargets(t) + testcases := map[string]struct { + target types.Selector + count int + }{ + "select_01": { + target: types.Selector{ + ResId: resid.ResId{Name: "name.*"}, + }, + count: 3, + }, + "select_02": { + target: types.Selector{ + ResId: resid.ResId{Name: "name.*"}, + AnnotationSelector: "foo=bar", + }, + count: 2, + }, + "select_03": { + target: types.Selector{ + LabelSelector: "app=name1", + }, + count: 1, + }, + "select_04": { + target: types.Selector{ + ResId: resid.ResId{ + Gvk: resid.Gvk{ + Kind: "Kind1", + }, + Name: "name.*", + }, + }, + count: 2, + }, + "select_05": { + target: types.Selector{ + ResId: resid.ResId{Name: "NotMatched"}, + }, + count: 0, + }, + "select_06": { + target: types.Selector{ + ResId: resid.ResId{Name: ""}, + }, + count: 4, + }, + "select_07": { + target: types.Selector{ + ResId: resid.ResId{Namespace: "default"}, + }, + count: 2, + }, + "select_08": { + target: types.Selector{ + ResId: resid.ResId{Namespace: ""}, + }, + count: 4, + }, + "select_09": { + target: types.Selector{ + ResId: resid.ResId{ + Namespace: "default", + Name: "name.*", + Gvk: resid.Gvk{ + Kind: "Kind1", + }, + }, + }, + count: 1, + }, + "select_10": { + target: types.Selector{ + ResId: resid.ResId{Name: "^name.*"}, + }, + count: 3, + }, + "select_11": { + target: types.Selector{ + ResId: resid.ResId{Name: "name.*$"}, + }, + count: 3, + }, + "select_12": { + target: types.Selector{ + ResId: resid.ResId{Name: "^name.*$"}, + }, + count: 3, + }, + "select_13": { + target: types.Selector{ + ResId: resid.ResId{Namespace: "^def.*"}, + }, + count: 2, + }, + "select_14": { + target: types.Selector{ + ResId: resid.ResId{Namespace: "def.*$"}, + }, + count: 2, + }, + "select_15": { + target: types.Selector{ + ResId: resid.ResId{Namespace: "^def.*$"}, + }, + count: 2, + }, + "select_16": { + target: types.Selector{ + ResId: resid.ResId{Namespace: "default"}, + }, + count: 2, + }, + "select_17": { + target: types.Selector{ + ResId: resid.ResId{Namespace: "NotMatched"}, + }, + count: 0, + }, + "select_18": { + target: types.Selector{ + ResId: resid.ResId{Namespace: "ns1"}, + }, + count: 1, + }, + } + for n, testcase := range testcases { + actual, err := rm.Select(testcase.target) + assert.NoError(t, err) + assert.Equalf( + t, testcase.count, len(actual), "test=%s target=%v", n, testcase.target) + } +} diff --git a/go/internal/forked/api/resource/doc.go b/go/internal/forked/api/resource/doc.go new file mode 100644 index 000000000..32d34b162 --- /dev/null +++ b/go/internal/forked/api/resource/doc.go @@ -0,0 +1,5 @@ +// Copyright 2020 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +// Package resource implements representations of k8s API resources. +package resource diff --git a/go/internal/forked/api/resource/factory.go b/go/internal/forked/api/resource/factory.go new file mode 100644 index 000000000..dcd14e8d6 --- /dev/null +++ b/go/internal/forked/api/resource/factory.go @@ -0,0 +1,293 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package resource + +import ( + "encoding/json" + "fmt" + "log" + "strings" + + "sigs.k8s.io/kustomize/api/ifc" + "sigs.k8s.io/kustomize/api/internal/generators" + "sigs.k8s.io/kustomize/api/internal/kusterr" + "sigs.k8s.io/kustomize/api/konfig" + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/kio" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/resid" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" +) + +// Factory makes instances of Resource. +type Factory struct { + hasher ifc.KustHasher + + // When set to true, IncludeLocalConfigs indicates + // that Factory should include resources with the + // annotation 'config.kubernetes.io/local-config'. + // By default these resources are ignored. + IncludeLocalConfigs bool +} + +// NewFactory makes an instance of Factory. +func NewFactory(h ifc.KustHasher) *Factory { + return &Factory{hasher: h} +} + +// Hasher returns an ifc.KustHasher +func (rf *Factory) Hasher() ifc.KustHasher { + return rf.hasher +} + +// FromMap returns a new instance of Resource. +func (rf *Factory) FromMap(m map[string]interface{}) *Resource { + return rf.FromMapAndOption(m, nil) +} + +// FromMapWithName returns a new instance with the given "original" name. +func (rf *Factory) FromMapWithName(n string, m map[string]interface{}) *Resource { + return rf.FromMapWithNamespaceAndName(resid.DefaultNamespace, n, m) +} + +// FromMapWithNamespaceAndName returns a new instance with the given "original" namespace. +func (rf *Factory) FromMapWithNamespaceAndName(ns string, n string, m map[string]interface{}) *Resource { + r := rf.FromMapAndOption(m, nil) + return r.setPreviousId(ns, n, r.GetKind()) +} + +// FromMapAndOption returns a new instance of Resource with given options. +func (rf *Factory) FromMapAndOption( + m map[string]interface{}, args *types.GeneratorArgs) *Resource { + n, err := yaml.FromMap(m) + if err != nil { + // TODO: return err instead of log. + log.Fatal(err) + } + return rf.makeOne(n, args) +} + +// makeOne returns a new instance of Resource. +func (rf *Factory) makeOne(rn *yaml.RNode, o *types.GeneratorArgs) *Resource { + if rn == nil { + log.Fatal("RNode must not be null") + } + resource := &Resource{RNode: *rn} + if o != nil { + if o.Options == nil || !o.Options.DisableNameSuffixHash { + resource.EnableHashSuffix() + } + resource.SetBehavior(types.NewGenerationBehavior(o.Behavior)) + } + + return resource +} + +// SliceFromPatches returns a slice of resources given a patch path +// slice from a kustomization file. +func (rf *Factory) SliceFromPatches( + ldr ifc.Loader, paths []types.PatchStrategicMerge) ([]*Resource, error) { + var result []*Resource + for _, path := range paths { + content, err := ldr.Load(string(path)) + if err != nil { + return nil, err + } + res, err := rf.SliceFromBytes(content) + if err != nil { + return nil, kusterr.Handler(err, string(path)) + } + result = append(result, res...) + } + return result, nil +} + +// FromBytes unmarshalls bytes into one Resource. +func (rf *Factory) FromBytes(in []byte) (*Resource, error) { + result, err := rf.SliceFromBytes(in) + if err != nil { + return nil, err + } + if len(result) != 1 { + return nil, fmt.Errorf( + "expected 1 resource, found %d in %v", len(result), in) + } + return result[0], nil +} + +// SliceFromBytes unmarshals bytes into a Resource slice. +func (rf *Factory) SliceFromBytes(in []byte) ([]*Resource, error) { + nodes, err := rf.RNodesFromBytes(in) + if err != nil { + return nil, err + } + return rf.resourcesFromRNodes(nodes), nil +} + +// DropLocalNodes removes the local nodes by default. Local nodes are detected via the annotation `config.kubernetes.io/local-config: "true"` +func (rf *Factory) DropLocalNodes(nodes []*yaml.RNode) ([]*Resource, error) { + var result []*yaml.RNode + for _, node := range nodes { + if node.IsNilOrEmpty() { + continue + } + md, err := node.GetValidatedMetadata() + if err != nil { + return nil, err + } + + if rf.IncludeLocalConfigs { + result = append(result, node) + continue + } + localConfig, exist := md.ObjectMeta.Annotations[konfig.IgnoredByKustomizeAnnotation] + if !exist || localConfig == "false" { + result = append(result, node) + } + } + return rf.resourcesFromRNodes(result), nil +} + +// ResourcesFromRNodes converts RNodes to Resources. +func (rf *Factory) ResourcesFromRNodes( + nodes []*yaml.RNode) (result []*Resource, err error) { + return rf.DropLocalNodes(nodes) +} + +// resourcesFromRNode assumes all nodes are good. +func (rf *Factory) resourcesFromRNodes( + nodes []*yaml.RNode) (result []*Resource) { + for _, n := range nodes { + result = append(result, rf.makeOne(n, nil)) + } + return +} + +func (rf *Factory) RNodesFromBytes(b []byte) ([]*yaml.RNode, error) { + nodes, err := kio.FromBytes(b) + if err != nil { + return nil, err + } + nodes, err = rf.dropBadNodes(nodes) + if err != nil { + return nil, err + } + return rf.inlineAnyEmbeddedLists(nodes) +} + +// inlineAnyEmbeddedLists scans the RNode slice for nodes named FooList. +// Such nodes are expected to be lists of resources, each of type Foo. +// These lists are replaced in the result by their inlined resources. +func (rf *Factory) inlineAnyEmbeddedLists( + nodes []*yaml.RNode) (result []*yaml.RNode, err error) { + var n0 *yaml.RNode + for len(nodes) > 0 { + n0, nodes = nodes[0], nodes[1:] + kind := n0.GetKind() + if !strings.HasSuffix(kind, "List") { + result = append(result, n0) + continue + } + // Convert a FooList into a slice of Foo. + var m map[string]interface{} + m, err = n0.Map() + if err != nil { + return nil, fmt.Errorf("trouble expanding list of %s; %w", kind, err) + } + items, ok := m["items"] + if !ok { + // treat as an empty list + continue + } + slice, ok := items.([]interface{}) + if !ok { + if items == nil { + // an empty list + continue + } + return nil, fmt.Errorf( + "expected array in %s/items, but found %T", kind, items) + } + innerNodes, err := rf.convertObjectSliceToNodeSlice(slice) + if err != nil { + return nil, err + } + nodes = append(nodes, innerNodes...) + } + return result, nil +} + +// convertObjectSlice converts a list of objects to a list of RNode. +func (rf *Factory) convertObjectSliceToNodeSlice( + objects []interface{}) (result []*yaml.RNode, err error) { + var bytes []byte + var nodes []*yaml.RNode + for _, obj := range objects { + bytes, err = json.Marshal(obj) + if err != nil { + return + } + nodes, err = kio.FromBytes(bytes) + if err != nil { + return + } + nodes, err = rf.dropBadNodes(nodes) + if err != nil { + return + } + result = append(result, nodes...) + } + return +} + +// dropBadNodes may drop some nodes from its input argument. +func (rf *Factory) dropBadNodes(nodes []*yaml.RNode) ([]*yaml.RNode, error) { + var result []*yaml.RNode + for _, n := range nodes { + if n.IsNilOrEmpty() { + continue + } + if _, err := n.GetValidatedMetadata(); err != nil { + return nil, err + } + if foundNil, path := n.HasNilEntryInList(); foundNil { + return nil, fmt.Errorf("empty item at %v in object %v", path, n) + } + result = append(result, n) + } + return result, nil +} + +// SliceFromBytesWithNames unmarshals bytes into a Resource slice with specified original +// name. +func (rf *Factory) SliceFromBytesWithNames(names []string, in []byte) ([]*Resource, error) { + result, err := rf.SliceFromBytes(in) + if err != nil { + return nil, err + } + if len(names) != len(result) { + return nil, fmt.Errorf("number of names doesn't match number of resources") + } + for i, res := range result { + res.setPreviousId(resid.DefaultNamespace, names[i], res.GetKind()) + } + return result, nil +} + +// MakeConfigMap makes an instance of Resource for ConfigMap +func (rf *Factory) MakeConfigMap(kvLdr ifc.KvLoader, args *types.ConfigMapArgs) (*Resource, error) { + rn, err := generators.MakeConfigMap(kvLdr, args) + if err != nil { + return nil, err + } + return rf.makeOne(rn, &args.GeneratorArgs), nil +} + +// MakeSecret makes an instance of Resource for Secret +func (rf *Factory) MakeSecret(kvLdr ifc.KvLoader, args *types.SecretArgs) (*Resource, error) { + rn, err := generators.MakeSecret(kvLdr, args) + if err != nil { + return nil, err + } + return rf.makeOne(rn, &args.GeneratorArgs), nil +} diff --git a/go/internal/forked/api/resource/factory.go b/go/internal/forked/api/resource/factory.go new file mode 100644 index 000000000..b370fc63a --- /dev/null +++ b/go/internal/forked/api/resource/factory.go @@ -0,0 +1,293 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package resource + +import ( + "encoding/json" + "fmt" + "log" + "strings" + + "sigs.k8s.io/kustomize/api/ifc" + "sigs.k8s.io/kustomize/api/internal/generators" + "sigs.k8s.io/kustomize/api/internal/kusterr" + "sigs.k8s.io/kustomize/api/konfig" + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/kio" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/resid" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/yaml" +) + +// Factory makes instances of Resource. +type Factory struct { + hasher ifc.KustHasher + + // When set to true, IncludeLocalConfigs indicates + // that Factory should include resources with the + // annotation 'config.kubernetes.io/local-config'. + // By default these resources are ignored. + IncludeLocalConfigs bool +} + +// NewFactory makes an instance of Factory. +func NewFactory(h ifc.KustHasher) *Factory { + return &Factory{hasher: h} +} + +// Hasher returns an ifc.KustHasher +func (rf *Factory) Hasher() ifc.KustHasher { + return rf.hasher +} + +// FromMap returns a new instance of Resource. +func (rf *Factory) FromMap(m map[string]interface{}) *Resource { + return rf.FromMapAndOption(m, nil) +} + +// FromMapWithName returns a new instance with the given "original" name. +func (rf *Factory) FromMapWithName(n string, m map[string]interface{}) *Resource { + return rf.FromMapWithNamespaceAndName(resid.DefaultNamespace, n, m) +} + +// FromMapWithNamespaceAndName returns a new instance with the given "original" namespace. +func (rf *Factory) FromMapWithNamespaceAndName(ns string, n string, m map[string]interface{}) *Resource { + r := rf.FromMapAndOption(m, nil) + return r.setPreviousId(ns, n, r.GetKind()) +} + +// FromMapAndOption returns a new instance of Resource with given options. +func (rf *Factory) FromMapAndOption( + m map[string]interface{}, args *types.GeneratorArgs) *Resource { + n, err := yaml.FromMap(m) + if err != nil { + // TODO: return err instead of log. + log.Fatal(err) + } + return rf.makeOne(n, args) +} + +// makeOne returns a new instance of Resource. +func (rf *Factory) makeOne(rn *yaml.RNode, o *types.GeneratorArgs) *Resource { + if rn == nil { + log.Fatal("RNode must not be null") + } + resource := &Resource{RNode: *rn} + if o != nil { + if o.Options == nil || !o.Options.DisableNameSuffixHash { + resource.EnableHashSuffix() + } + resource.SetBehavior(types.NewGenerationBehavior(o.Behavior)) + } + + return resource +} + +// SliceFromPatches returns a slice of resources given a patch path +// slice from a kustomization file. +func (rf *Factory) SliceFromPatches( + ldr ifc.Loader, paths []types.PatchStrategicMerge) ([]*Resource, error) { + var result []*Resource + for _, path := range paths { + content, err := ldr.Load(string(path)) + if err != nil { + return nil, err + } + res, err := rf.SliceFromBytes(content) + if err != nil { + return nil, kusterr.Handler(err, string(path)) + } + result = append(result, res...) + } + return result, nil +} + +// FromBytes unmarshalls bytes into one Resource. +func (rf *Factory) FromBytes(in []byte) (*Resource, error) { + result, err := rf.SliceFromBytes(in) + if err != nil { + return nil, err + } + if len(result) != 1 { + return nil, fmt.Errorf( + "expected 1 resource, found %d in %v", len(result), in) + } + return result[0], nil +} + +// SliceFromBytes unmarshals bytes into a Resource slice. +func (rf *Factory) SliceFromBytes(in []byte) ([]*Resource, error) { + nodes, err := rf.RNodesFromBytes(in) + if err != nil { + return nil, err + } + return rf.resourcesFromRNodes(nodes), nil +} + +// DropLocalNodes removes the local nodes by default. Local nodes are detected via the annotation `config.kubernetes.io/local-config: "true"` +func (rf *Factory) DropLocalNodes(nodes []*yaml.RNode) ([]*Resource, error) { + var result []*yaml.RNode + for _, node := range nodes { + if node.IsNilOrEmpty() { + continue + } + md, err := node.GetValidatedMetadata() + if err != nil { + return nil, err + } + + if rf.IncludeLocalConfigs { + result = append(result, node) + continue + } + localConfig, exist := md.ObjectMeta.Annotations[konfig.IgnoredByKustomizeAnnotation] + if !exist || localConfig == "false" { + result = append(result, node) + } + } + return rf.resourcesFromRNodes(result), nil +} + +// ResourcesFromRNodes converts RNodes to Resources. +func (rf *Factory) ResourcesFromRNodes( + nodes []*yaml.RNode) (result []*Resource, err error) { + return rf.DropLocalNodes(nodes) +} + +// resourcesFromRNode assumes all nodes are good. +func (rf *Factory) resourcesFromRNodes( + nodes []*yaml.RNode) (result []*Resource) { + for _, n := range nodes { + result = append(result, rf.makeOne(n, nil)) + } + return +} + +func (rf *Factory) RNodesFromBytes(b []byte) ([]*yaml.RNode, error) { + nodes, err := kio.FromBytes(b) + if err != nil { + return nil, err + } + nodes, err = rf.dropBadNodes(nodes) + if err != nil { + return nil, err + } + return rf.inlineAnyEmbeddedLists(nodes) +} + +// inlineAnyEmbeddedLists scans the RNode slice for nodes named FooList. +// Such nodes are expected to be lists of resources, each of type Foo. +// These lists are replaced in the result by their inlined resources. +func (rf *Factory) inlineAnyEmbeddedLists( + nodes []*yaml.RNode) (result []*yaml.RNode, err error) { + var n0 *yaml.RNode + for len(nodes) > 0 { + n0, nodes = nodes[0], nodes[1:] + kind := n0.GetKind() + if !strings.HasSuffix(kind, "List") { + result = append(result, n0) + continue + } + // Convert a FooList into a slice of Foo. + var m map[string]interface{} + m, err = n0.Map() + if err != nil { + return nil, fmt.Errorf("trouble expanding list of %s; %w", kind, err) + } + items, ok := m["items"] + if !ok { + // treat as an empty list + continue + } + slice, ok := items.([]interface{}) + if !ok { + if items == nil { + // an empty list + continue + } + return nil, fmt.Errorf( + "expected array in %s/items, but found %T", kind, items) + } + innerNodes, err := rf.convertObjectSliceToNodeSlice(slice) + if err != nil { + return nil, err + } + nodes = append(nodes, innerNodes...) + } + return result, nil +} + +// convertObjectSlice converts a list of objects to a list of RNode. +func (rf *Factory) convertObjectSliceToNodeSlice( + objects []interface{}) (result []*yaml.RNode, err error) { + var bytes []byte + var nodes []*yaml.RNode + for _, obj := range objects { + bytes, err = json.Marshal(obj) + if err != nil { + return + } + nodes, err = kio.FromBytes(bytes) + if err != nil { + return + } + nodes, err = rf.dropBadNodes(nodes) + if err != nil { + return + } + result = append(result, nodes...) + } + return +} + +// dropBadNodes may drop some nodes from its input argument. +func (rf *Factory) dropBadNodes(nodes []*yaml.RNode) ([]*yaml.RNode, error) { + var result []*yaml.RNode + for _, n := range nodes { + if n.IsNilOrEmpty() { + continue + } + if _, err := n.GetValidatedMetadata(); err != nil { + return nil, err + } + if foundNil, path := n.HasNilEntryInList(); foundNil { + return nil, fmt.Errorf("empty item at %v in object %v", path, n) + } + result = append(result, n) + } + return result, nil +} + +// SliceFromBytesWithNames unmarshals bytes into a Resource slice with specified original +// name. +func (rf *Factory) SliceFromBytesWithNames(names []string, in []byte) ([]*Resource, error) { + result, err := rf.SliceFromBytes(in) + if err != nil { + return nil, err + } + if len(names) != len(result) { + return nil, fmt.Errorf("number of names doesn't match number of resources") + } + for i, res := range result { + res.setPreviousId(resid.DefaultNamespace, names[i], res.GetKind()) + } + return result, nil +} + +// MakeConfigMap makes an instance of Resource for ConfigMap +func (rf *Factory) MakeConfigMap(kvLdr ifc.KvLoader, args *types.ConfigMapArgs) (*Resource, error) { + rn, err := generators.MakeConfigMap(kvLdr, args) + if err != nil { + return nil, err + } + return rf.makeOne(rn, &args.GeneratorArgs), nil +} + +// MakeSecret makes an instance of Resource for Secret +func (rf *Factory) MakeSecret(kvLdr ifc.KvLoader, args *types.SecretArgs) (*Resource, error) { + rn, err := generators.MakeSecret(kvLdr, args) + if err != nil { + return nil, err + } + return rf.makeOne(rn, &args.GeneratorArgs), nil +} diff --git a/go/internal/forked/api/resource/factory_test.go b/go/internal/forked/api/resource/factory_test.go new file mode 100644 index 000000000..d10393cbf --- /dev/null +++ b/go/internal/forked/api/resource/factory_test.go @@ -0,0 +1,739 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package resource_test + +import ( + "fmt" + "strings" + "testing" + + "github.com/stretchr/testify/assert" + "sigs.k8s.io/kustomize/api/loader" + "sigs.k8s.io/kustomize/api/resource" + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/filesys" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/kio" +) + +func TestRNodesFromBytes(t *testing.T) { + type testCase struct { + input string + expected []string + } + testCases := map[string]testCase{ + "empty1": { + input: "", + expected: []string{}, + }, + "empty2": { + input: ` +--- +--- +`, + expected: []string{}, + }, + "deployment1": { + input: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: pooh +--- +`, + expected: []string{ + `apiVersion: apps/v1 +kind: Deployment +metadata: + name: pooh +`, + }, + }, + "deployment2": { + input: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + annotations: + baseAnno: This is a base annotation + labels: + app: mungebot + foo: bar + name: baseprefix-mungebot +spec: + replicas: 1 + selector: + matchLabels: + foo: bar + template: + metadata: + annotations: + baseAnno: This is a base annotation + labels: + app: mungebot + foo: bar + spec: + containers: + - env: + - name: foo + value: bar + image: nginx + name: nginx + ports: + - containerPort: 80 +--- +apiVersion: v1 +kind: Service +metadata: + annotations: + baseAnno: This is a base annotation + labels: + app: mungebot + foo: bar + name: baseprefix-mungebot-service +spec: + ports: + - port: 7002 + selector: + app: mungebot + foo: bar +`, + expected: []string{ + `apiVersion: apps/v1 +kind: Deployment +metadata: + annotations: + baseAnno: This is a base annotation + labels: + app: mungebot + foo: bar + name: baseprefix-mungebot +spec: + replicas: 1 + selector: + matchLabels: + foo: bar + template: + metadata: + annotations: + baseAnno: This is a base annotation + labels: + app: mungebot + foo: bar + spec: + containers: + - env: + - name: foo + value: bar + image: nginx + name: nginx + ports: + - containerPort: 80 +`, + `apiVersion: v1 +kind: Service +metadata: + annotations: + baseAnno: This is a base annotation + labels: + app: mungebot + foo: bar + name: baseprefix-mungebot-service +spec: + ports: + - port: 7002 + selector: + app: mungebot + foo: bar +`, + }, + }, + } + + for name := range testCases { + tc := testCases[name] + t.Run(name, func(t *testing.T) { + result, err := factory.RNodesFromBytes([]byte(tc.input)) + if err != nil { + t.Fatalf("%v: fails with err: %v", name, err) + } + if len(result) != len(tc.expected) { + for i := range result { + str, err := result[i].String() + if err != nil { + t.Fatalf("%v: result to YAML fails with err: %v", name, err) + } + t.Logf("--- %d:\n%s", i, str) + } + t.Fatalf( + "%v: actual len %d != expected len %d", + name, len(result), len(tc.expected)) + } + for i := range tc.expected { + str, err := result[i].String() + if err != nil { + t.Fatalf("%v: result to YAML fails with err: %v", name, err) + } + if str != tc.expected[i] { + t.Fatalf( + "%v: string mismatch in item %d\n"+ + "actual:\n-----\n%s\n-----\n"+ + "expected:\n-----\n%s\n-----\n", + name, i, str, tc.expected[i]) + } + } + }) + } +} + +func TestSliceFromPatches(t *testing.T) { + patchGood1 := types.PatchStrategicMerge("patch1.yaml") + patch1 := ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: pooh +` + patchGood2 := types.PatchStrategicMerge("patch2.yaml") + patch2 := ` +apiVersion: v1 +kind: ConfigMap +metadata: + name: winnie + namespace: hundred-acre-wood +--- +# some comment +--- +--- +` + patchBad := types.PatchStrategicMerge("patch3.yaml") + patch3 := ` +WOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOT: woot +` + patchList := types.PatchStrategicMerge("patch4.yaml") + patch4 := ` +apiVersion: v1 +kind: List +items: +- apiVersion: apps/v1 + kind: Deployment + metadata: + name: pooh +- apiVersion: v1 + kind: ConfigMap + metadata: + name: winnie + namespace: hundred-acre-wood +` + patchList2 := types.PatchStrategicMerge("patch5.yaml") + patch5 := ` +apiVersion: v1 +kind: DeploymentList +items: +- apiVersion: apps/v1 + kind: Deployment + metadata: + name: deployment-a + spec: &hostAliases + template: + spec: + hostAliases: + - hostnames: + - a.example.com + ip: 8.8.8.8 +- apiVersion: apps/v1 + kind: Deployment + metadata: + name: deployment-b + spec: + <<: *hostAliases +` + patchList3 := types.PatchStrategicMerge("patch6.yaml") + patch6 := ` +apiVersion: v1 +kind: List +items: +` + patchList4 := types.PatchStrategicMerge("patch7.yaml") + patch7 := ` +apiVersion: v1 +kind: List +` + testDeploymentSpec := map[string]interface{}{ + "template": map[string]interface{}{ + "spec": map[string]interface{}{ + "hostAliases": []interface{}{ + map[string]interface{}{ + "hostnames": []interface{}{ + "a.example.com", + }, + "ip": "8.8.8.8", + }, + }, + }, + }, + } + testDeploymentA := factory.FromMap( + map[string]interface{}{ + "apiVersion": "apps/v1", + "kind": "Deployment", + "metadata": map[string]interface{}{ + "name": "deployment-a", + }, + "spec": testDeploymentSpec, + }) + testDeploymentB := factory.FromMap( + map[string]interface{}{ + "apiVersion": "apps/v1", + "kind": "Deployment", + "metadata": map[string]interface{}{ + "name": "deployment-b", + }, + "spec": testDeploymentSpec, + }) + + fSys := filesys.MakeFsInMemory() + fSys.WriteFile(string(patchGood1), []byte(patch1)) + fSys.WriteFile(string(patchGood2), []byte(patch2)) + fSys.WriteFile(string(patchBad), []byte(patch3)) + fSys.WriteFile(string(patchList), []byte(patch4)) + fSys.WriteFile(string(patchList2), []byte(patch5)) + fSys.WriteFile(string(patchList3), []byte(patch6)) + fSys.WriteFile(string(patchList4), []byte(patch7)) + + ldr, err := loader.NewLoader( + loader.RestrictionRootOnly, filesys.Separator, fSys) + if err != nil { + t.Fatal(err) + } + + tests := map[string]struct { + input []types.PatchStrategicMerge + expectedOut []*resource.Resource + expectedErr bool + }{ + "happy": { + input: []types.PatchStrategicMerge{patchGood1, patchGood2}, + expectedOut: []*resource.Resource{testDeployment, testConfigMap}, + expectedErr: false, + }, + "badFileName": { + input: []types.PatchStrategicMerge{patchGood1, "doesNotExist"}, + expectedOut: []*resource.Resource{}, + expectedErr: true, + }, + "badData": { + input: []types.PatchStrategicMerge{patchGood1, patchBad}, + expectedOut: []*resource.Resource{}, + expectedErr: true, + }, + "listOfPatches": { + input: []types.PatchStrategicMerge{patchList}, + expectedOut: []*resource.Resource{testDeployment, testConfigMap}, + expectedErr: false, + }, + "listWithAnchorReference": { + input: []types.PatchStrategicMerge{patchList2}, + expectedOut: []*resource.Resource{testDeploymentA, testDeploymentB}, + // The error using kyaml is: + // json: unsupported type: map[interface {}]interface {} + // maybe arising from too many conversions between + // yaml, json, Resource, RNode, etc. + // These conversions go away after closing #3506 + // TODO(#3271) This shouldn't have an error, but does when kyaml is used. + expectedErr: true, + }, + "listWithNoEntries": { + input: []types.PatchStrategicMerge{patchList3}, + expectedOut: []*resource.Resource{}, + expectedErr: false, + }, + "listWithNoItems": { + input: []types.PatchStrategicMerge{patchList4}, + expectedOut: []*resource.Resource{}, + expectedErr: false, + }, + } + for n, test := range tests { + t.Run(n, func(t *testing.T) { + rs, err := factory.SliceFromPatches(ldr, test.input) + if err != nil { + assert.True(t, test.expectedErr, + fmt.Sprintf("in test %s, got unexpected error: %v", n, err)) + return + } + assert.False(t, test.expectedErr, "expected no error in "+n) + assert.Equal(t, len(test.expectedOut), len(rs)) + for i := range rs { + expYaml, err := test.expectedOut[i].AsYAML() + assert.NoError(t, err) + actYaml, err := rs[i].AsYAML() + assert.NoError(t, err) + assert.Equal(t, expYaml, actYaml) + } + }) + } +} + +func TestHash(t *testing.T) { + input := ` +apiVersion: v1 +kind: ConfigMap +metadata: + name: foo +data: + one: "" +binaryData: + two: "" +` + expect := "698h7c7t9m" + k, err := factory.SliceFromBytes([]byte(input)) + if err != nil { + t.Fatal(err) + } + result, err := k[0].Hash(factory.Hasher()) + if err != nil { + t.Fatal(err) + } + if result != expect { + t.Fatalf("expect %s but got %s", expect, result) + } +} + +func TestMoreRNodesFromBytes(t *testing.T) { + type expected struct { + out []string + isErr bool + } + testCases := map[string]struct { + input []byte + exp expected + }{ + "garbage": { + input: []byte("garbageIn: garbageOut"), + exp: expected{ + isErr: true, + }, + }, + "noBytes": { + input: []byte{}, + exp: expected{}, + }, + "goodJson": { + input: []byte(` +{"apiVersion":"v1","kind":"ConfigMap","metadata":{"name":"winnie"}} +`), + exp: expected{ + out: []string{ + `{"apiVersion": "v1", "kind": "ConfigMap", "metadata": {"name": "winnie"}}`, + }, + }, + }, + "goodYaml1": { + input: []byte(` +apiVersion: v1 +kind: ConfigMap +metadata: + name: winnie +`), + exp: expected{ + out: []string{` +apiVersion: v1 +kind: ConfigMap +metadata: + name: winnie +`}, + }, + }, + "goodYaml2": { + input: []byte(` +apiVersion: v1 +kind: ConfigMap +metadata: + name: winnie +--- +apiVersion: v1 +kind: ConfigMap +metadata: + name: winnie +`), + exp: expected{ + out: []string{` +apiVersion: v1 +kind: ConfigMap +metadata: + name: winnie +`, ` +apiVersion: v1 +kind: ConfigMap +metadata: + name: winnie +`}, + }, + }, + "garbageInOneOfTwoObjects": { + input: []byte(` +apiVersion: v1 +kind: ConfigMap +metadata: + name: winnie +--- +WOOOOOOOOOOOOOOOOOOOOOOOOT: woot +`), + exp: expected{ + isErr: true, + }, + }, + "emptyObjects": { + input: []byte(` +--- +#a comment + +--- + +`), + exp: expected{ + out: []string{}, + }, + }, + "Missing .metadata.name in object": { + input: []byte(` +apiVersion: v1 +kind: Namespace +metadata: + annotations: + foo: bar +`), + exp: expected{ + isErr: true, + }, + }, + "nil value in list": { + input: []byte(` +apiVersion: builtin +kind: ConfigMapGenerator +metadata: + name: kube100-site + labels: + app: web +testList: +- testA +- +`), + exp: expected{ + isErr: true, + }, + }, + "List": { + input: []byte(` +apiVersion: v1 +kind: List +items: +- apiVersion: v1 + kind: ConfigMap + metadata: + name: winnie +- apiVersion: v1 + kind: ConfigMap + metadata: + name: winnie +`), + exp: expected{ + out: []string{` +apiVersion: v1 +kind: ConfigMap +metadata: + name: winnie +`, ` +apiVersion: v1 +kind: ConfigMap +metadata: + name: winnie +`, + }, + }, + }, + "ConfigMapList": { + input: []byte(` +apiVersion: v1 +kind: ConfigMapList +items: +- apiVersion: v1 + kind: ConfigMap + metadata: + name: winnie +- apiVersion: v1 + kind: ConfigMap + metadata: + name: winnie +`), + exp: expected{ + out: []string{ + `{"apiVersion": "v1", "kind": "ConfigMap", "metadata": {"name": "winnie"}}`, + `{"apiVersion": "v1", "kind": "ConfigMap", "metadata": {"name": "winnie"}}`, + }, + }, + }, + "listWithAnchors": { + input: []byte(` +apiVersion: v1 +kind: DeploymentList +items: +- apiVersion: apps/v1 + kind: Deployment + metadata: + name: deployment-a + spec: &foo + template: + spec: + hostAliases: + - hostnames: + - a.example.com + ip: 8.8.8.8 +- apiVersion: apps/v1 + kind: Deployment + metadata: + name: deployment-b + spec: + *foo +`), + exp: expected{ + out: []string{ + `{"apiVersion": "apps/v1", "kind": "Deployment", "metadata": {"name": "deployment-a"}, ` + + `"spec": {"template": {"spec": {"hostAliases": [{"hostnames": ["a.example.com"], "ip": "8.8.8.8"}]}}}}`, + `{"apiVersion": "apps/v1", "kind": "Deployment", "metadata": {"name": "deployment-b"}, ` + + `"spec": {"template": {"spec": {"hostAliases": [{"hostnames": ["a.example.com"], "ip": "8.8.8.8"}]}}}}`}, + }, + }, + "simpleAnchor": { + input: []byte(` +apiVersion: v1 +kind: ConfigMap +metadata: + name: wildcard +data: + color: &color-used blue + feeling: *color-used +`), + exp: expected{ + out: []string{` +apiVersion: v1 +kind: ConfigMap +metadata: + name: wildcard +data: + color: blue + feeling: blue +`}, + }, + }, + } + for n := range testCases { + tc := testCases[n] + t.Run(n, func(t *testing.T) { + rs, err := factory.RNodesFromBytes(tc.input) + if err != nil { + assert.True(t, tc.exp.isErr) + return + } + assert.False(t, tc.exp.isErr) + assert.Equal(t, len(tc.exp.out), len(rs)) + for i := range rs { + actual, err := rs[i].String() + assert.NoError(t, err) + assert.Equal( + t, strings.TrimSpace(tc.exp.out[i]), strings.TrimSpace(actual)) + } + }) + } +} + +func TestDropLocalNodes(t *testing.T) { + testCases := map[string]struct { + input []byte + expected []byte + }{ + "localConfigUnset": { + input: []byte(`apiVersion: v1 +kind: ConfigMap +metadata: + name: winnie +`), + expected: []byte(`apiVersion: v1 +kind: ConfigMap +metadata: + name: winnie +`), + }, + "localConfigSet": { + input: []byte(`apiVersion: v1 +kind: ConfigMap +metadata: + name: winnie-skip + annotations: + # this annotation causes the Resource to be ignored by kustomize + config.kubernetes.io/local-config: "" +`), + expected: nil, + }, + "localConfigSetToTrue": { + input: []byte(`apiVersion: v1 +kind: ConfigMap +metadata: + name: winnie-skip + annotations: + config.kubernetes.io/local-config: "true" + `), + expected: nil, + }, + "localConfigSetToFalse": { + input: []byte(`apiVersion: v1 +kind: ConfigMap +metadata: + name: winnie + annotations: + config.kubernetes.io/local-config: "false" +`), + expected: []byte(`apiVersion: v1 +kind: ConfigMap +metadata: + annotations: + config.kubernetes.io/local-config: "false" + name: winnie +`), + }, + "localConfigMultiInput": { + input: []byte(`apiVersion: v1 +kind: ConfigMap +metadata: + name: winnie +--- +apiVersion: v1 +kind: ConfigMap +metadata: + name: winnie-skip + annotations: + config.kubernetes.io/local-config: "true" +`), + expected: []byte(`apiVersion: v1 +kind: ConfigMap +metadata: + name: winnie +`), + }, + } + for n := range testCases { + tc := testCases[n] + t.Run(n, func(t *testing.T) { + nin, _ := kio.FromBytes(tc.input) + res, err := factory.DropLocalNodes(nin) + assert.NoError(t, err) + if tc.expected == nil { + assert.Equal(t, 0, len(res)) + } else { + actual, _ := res[0].AsYAML() + assert.Equal(t, tc.expected, actual) + } + }) + } +} diff --git a/go/internal/forked/api/resource/factory_test.go b/go/internal/forked/api/resource/factory_test.go new file mode 100644 index 000000000..efd4a08ad --- /dev/null +++ b/go/internal/forked/api/resource/factory_test.go @@ -0,0 +1,739 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package resource_test + +import ( + "fmt" + "strings" + "testing" + + "github.com/stretchr/testify/assert" + "sigs.k8s.io/kustomize/api/loader" + "sigs.k8s.io/kustomize/api/resource" + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/filesys" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/kio" +) + +func TestRNodesFromBytes(t *testing.T) { + type testCase struct { + input string + expected []string + } + testCases := map[string]testCase{ + "empty1": { + input: "", + expected: []string{}, + }, + "empty2": { + input: ` +--- +--- +`, + expected: []string{}, + }, + "deployment1": { + input: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: pooh +--- +`, + expected: []string{ + `apiVersion: apps/v1 +kind: Deployment +metadata: + name: pooh +`, + }, + }, + "deployment2": { + input: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + annotations: + baseAnno: This is a base annotation + labels: + app: mungebot + foo: bar + name: baseprefix-mungebot +spec: + replicas: 1 + selector: + matchLabels: + foo: bar + template: + metadata: + annotations: + baseAnno: This is a base annotation + labels: + app: mungebot + foo: bar + spec: + containers: + - env: + - name: foo + value: bar + image: nginx + name: nginx + ports: + - containerPort: 80 +--- +apiVersion: v1 +kind: Service +metadata: + annotations: + baseAnno: This is a base annotation + labels: + app: mungebot + foo: bar + name: baseprefix-mungebot-service +spec: + ports: + - port: 7002 + selector: + app: mungebot + foo: bar +`, + expected: []string{ + `apiVersion: apps/v1 +kind: Deployment +metadata: + annotations: + baseAnno: This is a base annotation + labels: + app: mungebot + foo: bar + name: baseprefix-mungebot +spec: + replicas: 1 + selector: + matchLabels: + foo: bar + template: + metadata: + annotations: + baseAnno: This is a base annotation + labels: + app: mungebot + foo: bar + spec: + containers: + - env: + - name: foo + value: bar + image: nginx + name: nginx + ports: + - containerPort: 80 +`, + `apiVersion: v1 +kind: Service +metadata: + annotations: + baseAnno: This is a base annotation + labels: + app: mungebot + foo: bar + name: baseprefix-mungebot-service +spec: + ports: + - port: 7002 + selector: + app: mungebot + foo: bar +`, + }, + }, + } + + for name := range testCases { + tc := testCases[name] + t.Run(name, func(t *testing.T) { + result, err := factory.RNodesFromBytes([]byte(tc.input)) + if err != nil { + t.Fatalf("%v: fails with err: %v", name, err) + } + if len(result) != len(tc.expected) { + for i := range result { + str, err := result[i].String() + if err != nil { + t.Fatalf("%v: result to YAML fails with err: %v", name, err) + } + t.Logf("--- %d:\n%s", i, str) + } + t.Fatalf( + "%v: actual len %d != expected len %d", + name, len(result), len(tc.expected)) + } + for i := range tc.expected { + str, err := result[i].String() + if err != nil { + t.Fatalf("%v: result to YAML fails with err: %v", name, err) + } + if str != tc.expected[i] { + t.Fatalf( + "%v: string mismatch in item %d\n"+ + "actual:\n-----\n%s\n-----\n"+ + "expected:\n-----\n%s\n-----\n", + name, i, str, tc.expected[i]) + } + } + }) + } +} + +func TestSliceFromPatches(t *testing.T) { + patchGood1 := types.PatchStrategicMerge("patch1.yaml") + patch1 := ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: pooh +` + patchGood2 := types.PatchStrategicMerge("patch2.yaml") + patch2 := ` +apiVersion: v1 +kind: ConfigMap +metadata: + name: winnie + namespace: hundred-acre-wood +--- +# some comment +--- +--- +` + patchBad := types.PatchStrategicMerge("patch3.yaml") + patch3 := ` +WOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOT: woot +` + patchList := types.PatchStrategicMerge("patch4.yaml") + patch4 := ` +apiVersion: v1 +kind: List +items: +- apiVersion: apps/v1 + kind: Deployment + metadata: + name: pooh +- apiVersion: v1 + kind: ConfigMap + metadata: + name: winnie + namespace: hundred-acre-wood +` + patchList2 := types.PatchStrategicMerge("patch5.yaml") + patch5 := ` +apiVersion: v1 +kind: DeploymentList +items: +- apiVersion: apps/v1 + kind: Deployment + metadata: + name: deployment-a + spec: &hostAliases + template: + spec: + hostAliases: + - hostnames: + - a.example.com + ip: 8.8.8.8 +- apiVersion: apps/v1 + kind: Deployment + metadata: + name: deployment-b + spec: + <<: *hostAliases +` + patchList3 := types.PatchStrategicMerge("patch6.yaml") + patch6 := ` +apiVersion: v1 +kind: List +items: +` + patchList4 := types.PatchStrategicMerge("patch7.yaml") + patch7 := ` +apiVersion: v1 +kind: List +` + testDeploymentSpec := map[string]interface{}{ + "template": map[string]interface{}{ + "spec": map[string]interface{}{ + "hostAliases": []interface{}{ + map[string]interface{}{ + "hostnames": []interface{}{ + "a.example.com", + }, + "ip": "8.8.8.8", + }, + }, + }, + }, + } + testDeploymentA := factory.FromMap( + map[string]interface{}{ + "apiVersion": "apps/v1", + "kind": "Deployment", + "metadata": map[string]interface{}{ + "name": "deployment-a", + }, + "spec": testDeploymentSpec, + }) + testDeploymentB := factory.FromMap( + map[string]interface{}{ + "apiVersion": "apps/v1", + "kind": "Deployment", + "metadata": map[string]interface{}{ + "name": "deployment-b", + }, + "spec": testDeploymentSpec, + }) + + fSys := filesys.MakeFsInMemory() + fSys.WriteFile(string(patchGood1), []byte(patch1)) + fSys.WriteFile(string(patchGood2), []byte(patch2)) + fSys.WriteFile(string(patchBad), []byte(patch3)) + fSys.WriteFile(string(patchList), []byte(patch4)) + fSys.WriteFile(string(patchList2), []byte(patch5)) + fSys.WriteFile(string(patchList3), []byte(patch6)) + fSys.WriteFile(string(patchList4), []byte(patch7)) + + ldr, err := loader.NewLoader( + loader.RestrictionRootOnly, filesys.Separator, fSys) + if err != nil { + t.Fatal(err) + } + + tests := map[string]struct { + input []types.PatchStrategicMerge + expectedOut []*resource.Resource + expectedErr bool + }{ + "happy": { + input: []types.PatchStrategicMerge{patchGood1, patchGood2}, + expectedOut: []*resource.Resource{testDeployment, testConfigMap}, + expectedErr: false, + }, + "badFileName": { + input: []types.PatchStrategicMerge{patchGood1, "doesNotExist"}, + expectedOut: []*resource.Resource{}, + expectedErr: true, + }, + "badData": { + input: []types.PatchStrategicMerge{patchGood1, patchBad}, + expectedOut: []*resource.Resource{}, + expectedErr: true, + }, + "listOfPatches": { + input: []types.PatchStrategicMerge{patchList}, + expectedOut: []*resource.Resource{testDeployment, testConfigMap}, + expectedErr: false, + }, + "listWithAnchorReference": { + input: []types.PatchStrategicMerge{patchList2}, + expectedOut: []*resource.Resource{testDeploymentA, testDeploymentB}, + // The error using kyaml is: + // json: unsupported type: map[interface {}]interface {} + // maybe arising from too many conversions between + // yaml, json, Resource, RNode, etc. + // These conversions go away after closing #3506 + // TODO(#3271) This shouldn't have an error, but does when kyaml is used. + expectedErr: true, + }, + "listWithNoEntries": { + input: []types.PatchStrategicMerge{patchList3}, + expectedOut: []*resource.Resource{}, + expectedErr: false, + }, + "listWithNoItems": { + input: []types.PatchStrategicMerge{patchList4}, + expectedOut: []*resource.Resource{}, + expectedErr: false, + }, + } + for n, test := range tests { + t.Run(n, func(t *testing.T) { + rs, err := factory.SliceFromPatches(ldr, test.input) + if err != nil { + assert.True(t, test.expectedErr, + fmt.Sprintf("in test %s, got unexpected error: %v", n, err)) + return + } + assert.False(t, test.expectedErr, "expected no error in "+n) + assert.Equal(t, len(test.expectedOut), len(rs)) + for i := range rs { + expYaml, err := test.expectedOut[i].AsYAML() + assert.NoError(t, err) + actYaml, err := rs[i].AsYAML() + assert.NoError(t, err) + assert.Equal(t, expYaml, actYaml) + } + }) + } +} + +func TestHash(t *testing.T) { + input := ` +apiVersion: v1 +kind: ConfigMap +metadata: + name: foo +data: + one: "" +binaryData: + two: "" +` + expect := "698h7c7t9m" + k, err := factory.SliceFromBytes([]byte(input)) + if err != nil { + t.Fatal(err) + } + result, err := k[0].Hash(factory.Hasher()) + if err != nil { + t.Fatal(err) + } + if result != expect { + t.Fatalf("expect %s but got %s", expect, result) + } +} + +func TestMoreRNodesFromBytes(t *testing.T) { + type expected struct { + out []string + isErr bool + } + testCases := map[string]struct { + input []byte + exp expected + }{ + "garbage": { + input: []byte("garbageIn: garbageOut"), + exp: expected{ + isErr: true, + }, + }, + "noBytes": { + input: []byte{}, + exp: expected{}, + }, + "goodJson": { + input: []byte(` +{"apiVersion":"v1","kind":"ConfigMap","metadata":{"name":"winnie"}} +`), + exp: expected{ + out: []string{ + `{"apiVersion": "v1", "kind": "ConfigMap", "metadata": {"name": "winnie"}}`, + }, + }, + }, + "goodYaml1": { + input: []byte(` +apiVersion: v1 +kind: ConfigMap +metadata: + name: winnie +`), + exp: expected{ + out: []string{` +apiVersion: v1 +kind: ConfigMap +metadata: + name: winnie +`}, + }, + }, + "goodYaml2": { + input: []byte(` +apiVersion: v1 +kind: ConfigMap +metadata: + name: winnie +--- +apiVersion: v1 +kind: ConfigMap +metadata: + name: winnie +`), + exp: expected{ + out: []string{` +apiVersion: v1 +kind: ConfigMap +metadata: + name: winnie +`, ` +apiVersion: v1 +kind: ConfigMap +metadata: + name: winnie +`}, + }, + }, + "garbageInOneOfTwoObjects": { + input: []byte(` +apiVersion: v1 +kind: ConfigMap +metadata: + name: winnie +--- +WOOOOOOOOOOOOOOOOOOOOOOOOT: woot +`), + exp: expected{ + isErr: true, + }, + }, + "emptyObjects": { + input: []byte(` +--- +#a comment + +--- + +`), + exp: expected{ + out: []string{}, + }, + }, + "Missing .metadata.name in object": { + input: []byte(` +apiVersion: v1 +kind: Namespace +metadata: + annotations: + foo: bar +`), + exp: expected{ + isErr: true, + }, + }, + "nil value in list": { + input: []byte(` +apiVersion: builtin +kind: ConfigMapGenerator +metadata: + name: kube100-site + labels: + app: web +testList: +- testA +- +`), + exp: expected{ + isErr: true, + }, + }, + "List": { + input: []byte(` +apiVersion: v1 +kind: List +items: +- apiVersion: v1 + kind: ConfigMap + metadata: + name: winnie +- apiVersion: v1 + kind: ConfigMap + metadata: + name: winnie +`), + exp: expected{ + out: []string{` +apiVersion: v1 +kind: ConfigMap +metadata: + name: winnie +`, ` +apiVersion: v1 +kind: ConfigMap +metadata: + name: winnie +`, + }, + }, + }, + "ConfigMapList": { + input: []byte(` +apiVersion: v1 +kind: ConfigMapList +items: +- apiVersion: v1 + kind: ConfigMap + metadata: + name: winnie +- apiVersion: v1 + kind: ConfigMap + metadata: + name: winnie +`), + exp: expected{ + out: []string{ + `{"apiVersion": "v1", "kind": "ConfigMap", "metadata": {"name": "winnie"}}`, + `{"apiVersion": "v1", "kind": "ConfigMap", "metadata": {"name": "winnie"}}`, + }, + }, + }, + "listWithAnchors": { + input: []byte(` +apiVersion: v1 +kind: DeploymentList +items: +- apiVersion: apps/v1 + kind: Deployment + metadata: + name: deployment-a + spec: &foo + template: + spec: + hostAliases: + - hostnames: + - a.example.com + ip: 8.8.8.8 +- apiVersion: apps/v1 + kind: Deployment + metadata: + name: deployment-b + spec: + *foo +`), + exp: expected{ + out: []string{ + `{"apiVersion": "apps/v1", "kind": "Deployment", "metadata": {"name": "deployment-a"}, ` + + `"spec": {"template": {"spec": {"hostAliases": [{"hostnames": ["a.example.com"], "ip": "8.8.8.8"}]}}}}`, + `{"apiVersion": "apps/v1", "kind": "Deployment", "metadata": {"name": "deployment-b"}, ` + + `"spec": {"template": {"spec": {"hostAliases": [{"hostnames": ["a.example.com"], "ip": "8.8.8.8"}]}}}}`}, + }, + }, + "simpleAnchor": { + input: []byte(` +apiVersion: v1 +kind: ConfigMap +metadata: + name: wildcard +data: + color: &color-used blue + feeling: *color-used +`), + exp: expected{ + out: []string{` +apiVersion: v1 +kind: ConfigMap +metadata: + name: wildcard +data: + color: blue + feeling: blue +`}, + }, + }, + } + for n := range testCases { + tc := testCases[n] + t.Run(n, func(t *testing.T) { + rs, err := factory.RNodesFromBytes(tc.input) + if err != nil { + assert.True(t, tc.exp.isErr) + return + } + assert.False(t, tc.exp.isErr) + assert.Equal(t, len(tc.exp.out), len(rs)) + for i := range rs { + actual, err := rs[i].String() + assert.NoError(t, err) + assert.Equal( + t, strings.TrimSpace(tc.exp.out[i]), strings.TrimSpace(actual)) + } + }) + } +} + +func TestDropLocalNodes(t *testing.T) { + testCases := map[string]struct { + input []byte + expected []byte + }{ + "localConfigUnset": { + input: []byte(`apiVersion: v1 +kind: ConfigMap +metadata: + name: winnie +`), + expected: []byte(`apiVersion: v1 +kind: ConfigMap +metadata: + name: winnie +`), + }, + "localConfigSet": { + input: []byte(`apiVersion: v1 +kind: ConfigMap +metadata: + name: winnie-skip + annotations: + # this annotation causes the Resource to be ignored by kustomize + config.kubernetes.io/local-config: "" +`), + expected: nil, + }, + "localConfigSetToTrue": { + input: []byte(`apiVersion: v1 +kind: ConfigMap +metadata: + name: winnie-skip + annotations: + config.kubernetes.io/local-config: "true" + `), + expected: nil, + }, + "localConfigSetToFalse": { + input: []byte(`apiVersion: v1 +kind: ConfigMap +metadata: + name: winnie + annotations: + config.kubernetes.io/local-config: "false" +`), + expected: []byte(`apiVersion: v1 +kind: ConfigMap +metadata: + annotations: + config.kubernetes.io/local-config: "false" + name: winnie +`), + }, + "localConfigMultiInput": { + input: []byte(`apiVersion: v1 +kind: ConfigMap +metadata: + name: winnie +--- +apiVersion: v1 +kind: ConfigMap +metadata: + name: winnie-skip + annotations: + config.kubernetes.io/local-config: "true" +`), + expected: []byte(`apiVersion: v1 +kind: ConfigMap +metadata: + name: winnie +`), + }, + } + for n := range testCases { + tc := testCases[n] + t.Run(n, func(t *testing.T) { + nin, _ := kio.FromBytes(tc.input) + res, err := factory.DropLocalNodes(nin) + assert.NoError(t, err) + if tc.expected == nil { + assert.Equal(t, 0, len(res)) + } else { + actual, _ := res[0].AsYAML() + assert.Equal(t, tc.expected, actual) + } + }) + } +} diff --git a/go/internal/forked/api/resource/idset.go b/go/internal/forked/api/resource/idset.go new file mode 100644 index 000000000..774c41b97 --- /dev/null +++ b/go/internal/forked/api/resource/idset.go @@ -0,0 +1,30 @@ +// Copyright 2020 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package resource + +import "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/resid" + +type IdSet struct { + ids map[resid.ResId]bool +} + +func MakeIdSet(slice []*Resource) *IdSet { + set := make(map[resid.ResId]bool) + for _, r := range slice { + id := r.CurId() + if _, ok := set[id]; !ok { + set[id] = true + } + } + return &IdSet{ids: set} +} + +func (s IdSet) Contains(id resid.ResId) bool { + _, ok := s.ids[id] + return ok +} + +func (s IdSet) Size() int { + return len(s.ids) +} diff --git a/go/internal/forked/api/resource/idset.go b/go/internal/forked/api/resource/idset.go new file mode 100644 index 000000000..d46ec7755 --- /dev/null +++ b/go/internal/forked/api/resource/idset.go @@ -0,0 +1,30 @@ +// Copyright 2020 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package resource + +import "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/resid" + +type IdSet struct { + ids map[resid.ResId]bool +} + +func MakeIdSet(slice []*Resource) *IdSet { + set := make(map[resid.ResId]bool) + for _, r := range slice { + id := r.CurId() + if _, ok := set[id]; !ok { + set[id] = true + } + } + return &IdSet{ids: set} +} + +func (s IdSet) Contains(id resid.ResId) bool { + _, ok := s.ids[id] + return ok +} + +func (s IdSet) Size() int { + return len(s.ids) +} diff --git a/go/internal/forked/api/resource/idset_test.go b/go/internal/forked/api/resource/idset_test.go new file mode 100644 index 000000000..eda864323 --- /dev/null +++ b/go/internal/forked/api/resource/idset_test.go @@ -0,0 +1,32 @@ +// Copyright 2020 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package resource_test + +import ( + "testing" + + "github.com/stretchr/testify/assert" + "sigs.k8s.io/kustomize/api/resource" +) + +func TestIdSet_Empty(t *testing.T) { + s := resource.MakeIdSet([]*resource.Resource{}) + assert.Equal(t, 0, s.Size()) + assert.False(t, s.Contains(testDeployment.CurId())) + assert.False(t, s.Contains(testConfigMap.CurId())) +} + +func TestIdSet_One(t *testing.T) { + s := resource.MakeIdSet([]*resource.Resource{testDeployment}) + assert.Equal(t, 1, s.Size()) + assert.True(t, s.Contains(testDeployment.CurId())) + assert.False(t, s.Contains(testConfigMap.CurId())) +} + +func TestIdSet_Two(t *testing.T) { + s := resource.MakeIdSet([]*resource.Resource{testDeployment, testConfigMap}) + assert.Equal(t, 2, s.Size()) + assert.True(t, s.Contains(testDeployment.CurId())) + assert.True(t, s.Contains(testConfigMap.CurId())) +} diff --git a/go/internal/forked/api/resource/origin.go b/go/internal/forked/api/resource/origin.go new file mode 100644 index 000000000..1013ff793 --- /dev/null +++ b/go/internal/forked/api/resource/origin.go @@ -0,0 +1,106 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package resource + +import ( + "path/filepath" + "strings" + + "sigs.k8s.io/kustomize/api/internal/git" + kyaml "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" +) + +// Origin retains information about the origin of resources and transformer configs +// that contributed to the output of `kustomize build` +type Origin struct { + // Path is the path to the resource. If a local resource, this path is + // rooted from the directory upon which `kustomize build` was invoked. If a + // remote resource, this path is rooted from the root of the remote repo. + Path string `json:"path,omitempty" yaml:"path,omitempty"` + + // Repo is the remote repository that the resource or transformer originated from if it is + // not from a local file + Repo string `json:"repo,omitempty" yaml:"repo,omitempty"` + + // Ref is the ref of the remote repository that the resource or transformer originated from + // if it is not from a local file + Ref string `json:"ref,omitempty" yaml:"ref,omitempty"` + + // The following fields only apply to resources that have been + // generated by fields other than the `resources` field, or to transformer + // configs. + + // ConfiguredIn is the file path to the generator or transformer config that created the + // resource + ConfiguredIn string `json:"configuredIn,omitempty" yaml:"configuredIn,omitempty"` + + // ConfiguredBy is the ObjectReference of the generator or transformer config + ConfiguredBy kyaml.ResourceIdentifier `json:"configuredBy,omitempty" yaml:"configuredBy,omitempty"` +} + +// Copy returns a copy of origin +func (origin *Origin) Copy() Origin { + if origin == nil { + return Origin{} + } + return *origin +} + +// Append returns a copy of origin with a path appended to it +func (origin *Origin) Append(path string) *Origin { + originCopy := origin.Copy() + repoSpec, err := git.NewRepoSpecFromUrl(path) + if err == nil { + originCopy.Repo = repoSpec.Host + repoSpec.OrgRepo + absPath := repoSpec.AbsPath() + path = absPath[strings.Index(absPath[1:], "/")+1:][1:] + originCopy.Path = "" + originCopy.Ref = repoSpec.Ref + } + originCopy.Path = filepath.Join(originCopy.Path, path) + return &originCopy +} + +// String returns a string version of origin +func (origin *Origin) String() (string, error) { + anno, err := kyaml.Marshal(origin) + return string(anno), err +} + +// Transformations is a list of Origin +type Transformations []*Origin + +// String returns a string version of Transformations +func (transformations *Transformations) String() (string, error) { + anno, err := kyaml.Marshal(transformations) + return string(anno), err +} + +// OriginFromCustomPlugin takes a custom plugin defined as a resource +// and returns an origin object to describe it +func OriginFromCustomPlugin(res *Resource) (*Origin, error) { + origin, err := res.GetOrigin() + if err != nil { + return nil, err + } + var result *Origin + if origin != nil { + result = &Origin{ + Repo: origin.Repo, + Ref: origin.Ref, + ConfiguredIn: origin.Path, + ConfiguredBy: kyaml.ResourceIdentifier{ + TypeMeta: kyaml.TypeMeta{ + APIVersion: res.GetApiVersion(), + Kind: res.GetKind(), + }, + NameMeta: kyaml.NameMeta{ + Name: res.GetName(), + Namespace: res.GetNamespace(), + }, + }, + } + } + return result, nil +} diff --git a/go/internal/forked/api/resource/origin.go b/go/internal/forked/api/resource/origin.go new file mode 100644 index 000000000..65f1480b5 --- /dev/null +++ b/go/internal/forked/api/resource/origin.go @@ -0,0 +1,106 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package resource + +import ( + "path/filepath" + "strings" + + "sigs.k8s.io/kustomize/api/internal/git" + kyaml "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/yaml" +) + +// Origin retains information about the origin of resources and transformer configs +// that contributed to the output of `kustomize build` +type Origin struct { + // Path is the path to the resource. If a local resource, this path is + // rooted from the directory upon which `kustomize build` was invoked. If a + // remote resource, this path is rooted from the root of the remote repo. + Path string `json:"path,omitempty" yaml:"path,omitempty"` + + // Repo is the remote repository that the resource or transformer originated from if it is + // not from a local file + Repo string `json:"repo,omitempty" yaml:"repo,omitempty"` + + // Ref is the ref of the remote repository that the resource or transformer originated from + // if it is not from a local file + Ref string `json:"ref,omitempty" yaml:"ref,omitempty"` + + // The following fields only apply to resources that have been + // generated by fields other than the `resources` field, or to transformer + // configs. + + // ConfiguredIn is the file path to the generator or transformer config that created the + // resource + ConfiguredIn string `json:"configuredIn,omitempty" yaml:"configuredIn,omitempty"` + + // ConfiguredBy is the ObjectReference of the generator or transformer config + ConfiguredBy kyaml.ResourceIdentifier `json:"configuredBy,omitempty" yaml:"configuredBy,omitempty"` +} + +// Copy returns a copy of origin +func (origin *Origin) Copy() Origin { + if origin == nil { + return Origin{} + } + return *origin +} + +// Append returns a copy of origin with a path appended to it +func (origin *Origin) Append(path string) *Origin { + originCopy := origin.Copy() + repoSpec, err := git.NewRepoSpecFromUrl(path) + if err == nil { + originCopy.Repo = repoSpec.Host + repoSpec.OrgRepo + absPath := repoSpec.AbsPath() + path = absPath[strings.Index(absPath[1:], "/")+1:][1:] + originCopy.Path = "" + originCopy.Ref = repoSpec.Ref + } + originCopy.Path = filepath.Join(originCopy.Path, path) + return &originCopy +} + +// String returns a string version of origin +func (origin *Origin) String() (string, error) { + anno, err := kyaml.Marshal(origin) + return string(anno), err +} + +// Transformations is a list of Origin +type Transformations []*Origin + +// String returns a string version of Transformations +func (transformations *Transformations) String() (string, error) { + anno, err := kyaml.Marshal(transformations) + return string(anno), err +} + +// OriginFromCustomPlugin takes a custom plugin defined as a resource +// and returns an origin object to describe it +func OriginFromCustomPlugin(res *Resource) (*Origin, error) { + origin, err := res.GetOrigin() + if err != nil { + return nil, err + } + var result *Origin + if origin != nil { + result = &Origin{ + Repo: origin.Repo, + Ref: origin.Ref, + ConfiguredIn: origin.Path, + ConfiguredBy: kyaml.ResourceIdentifier{ + TypeMeta: kyaml.TypeMeta{ + APIVersion: res.GetApiVersion(), + Kind: res.GetKind(), + }, + NameMeta: kyaml.NameMeta{ + Name: res.GetName(), + Namespace: res.GetNamespace(), + }, + }, + } + } + return result, nil +} diff --git a/go/internal/forked/api/resource/origin_test.go b/go/internal/forked/api/resource/origin_test.go new file mode 100644 index 000000000..3e143bf9e --- /dev/null +++ b/go/internal/forked/api/resource/origin_test.go @@ -0,0 +1,160 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package resource_test + +import ( + "testing" + + "github.com/stretchr/testify/assert" + "sigs.k8s.io/kustomize/api/resource" + kyaml "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" +) + +func TestOriginAppend(t *testing.T) { + tests := []struct { + in *resource.Origin + path string + expected string + }{ + { + in: &resource.Origin{ + Path: "prod", + }, + path: "service.yaml", + expected: `path: prod/service.yaml +`, + }, + { + in: &resource.Origin{ + Path: "overlay/prod", + }, + path: "github.com/kubernetes-sigs/kustomize/examples/multibases/dev/", + expected: `path: examples/multibases/dev +repo: https://github.com/kubernetes-sigs/kustomize +`, + }, + } + for _, test := range tests { + actual, err := test.in.Append(test.path).String() + assert.NoError(t, err) + assert.Equal(t, actual, test.expected) + } +} + +func TestOriginString(t *testing.T) { + tests := []struct { + in *resource.Origin + expected string + }{ + { + in: &resource.Origin{ + Path: "prod/service.yaml", + Repo: "github.com/kubernetes-sigs/kustomize/examples/multibases/dev/", + Ref: "v1.0.6", + }, + expected: `path: prod/service.yaml +repo: github.com/kubernetes-sigs/kustomize/examples/multibases/dev/ +ref: v1.0.6 +`, + }, + { + in: &resource.Origin{ + Path: "prod/service.yaml", + Repo: "github.com/kubernetes-sigs/kustomize/examples/multibases/dev/", + }, + expected: `path: prod/service.yaml +repo: github.com/kubernetes-sigs/kustomize/examples/multibases/dev/ +`, + }, + { + in: &resource.Origin{ + Path: "prod/service.yaml", + }, + expected: `path: prod/service.yaml +`, + }, + } + + for _, test := range tests { + actual, err := test.in.String() + assert.NoError(t, err) + assert.Equal(t, test.expected, actual) + } +} + +func TestTransformationsString(t *testing.T) { + origin1 := &resource.Origin{ + Repo: "github.com/myrepo", + Ref: "master", + ConfiguredIn: "config.yaml", + ConfiguredBy: kyaml.ResourceIdentifier{ + TypeMeta: kyaml.TypeMeta{ + APIVersion: "builtin", + Kind: "Generator", + }, + NameMeta: kyaml.NameMeta{ + Name: "my-name", + Namespace: "my-namespace", + }, + }, + } + origin2 := &resource.Origin{ + ConfiguredIn: "../base/config.yaml", + ConfiguredBy: kyaml.ResourceIdentifier{ + TypeMeta: kyaml.TypeMeta{ + APIVersion: "builtin", + Kind: "Generator", + }, + NameMeta: kyaml.NameMeta{ + Name: "my-name", + Namespace: "my-namespace", + }, + }, + } + tests := []struct { + in resource.Transformations + expected string + }{ + { + in: resource.Transformations{origin1}, + expected: `- repo: github.com/myrepo + ref: master + configuredIn: config.yaml + configuredBy: + apiVersion: builtin + kind: Generator + name: my-name + namespace: my-namespace +`, + }, + { + in: resource.Transformations{origin1, origin2}, + expected: `- repo: github.com/myrepo + ref: master + configuredIn: config.yaml + configuredBy: + apiVersion: builtin + kind: Generator + name: my-name + namespace: my-namespace +- configuredIn: ../base/config.yaml + configuredBy: + apiVersion: builtin + kind: Generator + name: my-name + namespace: my-namespace +`, + }, + { + in: resource.Transformations{}, + expected: `[] +`, + }, + } + for _, test := range tests { + actual, err := test.in.String() + assert.NoError(t, err) + assert.Equal(t, test.expected, actual) + } +} diff --git a/go/internal/forked/api/resource/origin_test.go b/go/internal/forked/api/resource/origin_test.go new file mode 100644 index 000000000..9a332f6da --- /dev/null +++ b/go/internal/forked/api/resource/origin_test.go @@ -0,0 +1,160 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package resource_test + +import ( + "testing" + + "github.com/stretchr/testify/assert" + "sigs.k8s.io/kustomize/api/resource" + kyaml "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/yaml" +) + +func TestOriginAppend(t *testing.T) { + tests := []struct { + in *resource.Origin + path string + expected string + }{ + { + in: &resource.Origin{ + Path: "prod", + }, + path: "service.yaml", + expected: `path: prod/service.yaml +`, + }, + { + in: &resource.Origin{ + Path: "overlay/prod", + }, + path: "github.com/kubernetes-sigs/kustomize/examples/multibases/dev/", + expected: `path: examples/multibases/dev +repo: https://github.com/kubernetes-sigs/kustomize +`, + }, + } + for _, test := range tests { + actual, err := test.in.Append(test.path).String() + assert.NoError(t, err) + assert.Equal(t, actual, test.expected) + } +} + +func TestOriginString(t *testing.T) { + tests := []struct { + in *resource.Origin + expected string + }{ + { + in: &resource.Origin{ + Path: "prod/service.yaml", + Repo: "github.com/kubernetes-sigs/kustomize/examples/multibases/dev/", + Ref: "v1.0.6", + }, + expected: `path: prod/service.yaml +repo: github.com/kubernetes-sigs/kustomize/examples/multibases/dev/ +ref: v1.0.6 +`, + }, + { + in: &resource.Origin{ + Path: "prod/service.yaml", + Repo: "github.com/kubernetes-sigs/kustomize/examples/multibases/dev/", + }, + expected: `path: prod/service.yaml +repo: github.com/kubernetes-sigs/kustomize/examples/multibases/dev/ +`, + }, + { + in: &resource.Origin{ + Path: "prod/service.yaml", + }, + expected: `path: prod/service.yaml +`, + }, + } + + for _, test := range tests { + actual, err := test.in.String() + assert.NoError(t, err) + assert.Equal(t, test.expected, actual) + } +} + +func TestTransformationsString(t *testing.T) { + origin1 := &resource.Origin{ + Repo: "github.com/myrepo", + Ref: "master", + ConfiguredIn: "config.yaml", + ConfiguredBy: kyaml.ResourceIdentifier{ + TypeMeta: kyaml.TypeMeta{ + APIVersion: "builtin", + Kind: "Generator", + }, + NameMeta: kyaml.NameMeta{ + Name: "my-name", + Namespace: "my-namespace", + }, + }, + } + origin2 := &resource.Origin{ + ConfiguredIn: "../base/config.yaml", + ConfiguredBy: kyaml.ResourceIdentifier{ + TypeMeta: kyaml.TypeMeta{ + APIVersion: "builtin", + Kind: "Generator", + }, + NameMeta: kyaml.NameMeta{ + Name: "my-name", + Namespace: "my-namespace", + }, + }, + } + tests := []struct { + in resource.Transformations + expected string + }{ + { + in: resource.Transformations{origin1}, + expected: `- repo: github.com/myrepo + ref: master + configuredIn: config.yaml + configuredBy: + apiVersion: builtin + kind: Generator + name: my-name + namespace: my-namespace +`, + }, + { + in: resource.Transformations{origin1, origin2}, + expected: `- repo: github.com/myrepo + ref: master + configuredIn: config.yaml + configuredBy: + apiVersion: builtin + kind: Generator + name: my-name + namespace: my-namespace +- configuredIn: ../base/config.yaml + configuredBy: + apiVersion: builtin + kind: Generator + name: my-name + namespace: my-namespace +`, + }, + { + in: resource.Transformations{}, + expected: `[] +`, + }, + } + for _, test := range tests { + actual, err := test.in.String() + assert.NoError(t, err) + assert.Equal(t, test.expected, actual) + } +} diff --git a/go/internal/forked/api/resource/resource.go b/go/internal/forked/api/resource/resource.go new file mode 100644 index 000000000..83f96c47a --- /dev/null +++ b/go/internal/forked/api/resource/resource.go @@ -0,0 +1,532 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package resource + +import ( + "fmt" + "log" + "strings" + + "sigs.k8s.io/kustomize/api/filters/patchstrategicmerge" + "sigs.k8s.io/kustomize/api/ifc" + "sigs.k8s.io/kustomize/api/internal/utils" + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/kio" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/kio/kioutil" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/resid" + kyaml "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" + "sigs.k8s.io/yaml" +) + +// Resource is an RNode, representing a Kubernetes Resource Model object, +// paired with metadata used by kustomize. +type Resource struct { + kyaml.RNode + refVarNames []string +} + +// nolint +var BuildAnnotations = []string{ + utils.BuildAnnotationPreviousKinds, + utils.BuildAnnotationPreviousNames, + utils.BuildAnnotationPrefixes, + utils.BuildAnnotationSuffixes, + utils.BuildAnnotationPreviousNamespaces, + utils.BuildAnnotationAllowNameChange, + utils.BuildAnnotationAllowKindChange, + utils.BuildAnnotationsRefBy, + utils.BuildAnnotationsGenBehavior, + utils.BuildAnnotationsGenAddHashSuffix, + + kioutil.PathAnnotation, + kioutil.IndexAnnotation, + kioutil.SeqIndentAnnotation, + kioutil.IdAnnotation, + kioutil.InternalAnnotationsMigrationResourceIDAnnotation, + + kioutil.LegacyPathAnnotation, + kioutil.LegacyIndexAnnotation, + kioutil.LegacyIdAnnotation, +} + +func (r *Resource) ResetRNode(incoming *Resource) { + r.RNode = *incoming.Copy() +} + +func (r *Resource) GetGvk() resid.Gvk { + return resid.GvkFromNode(&r.RNode) +} + +func (r *Resource) Hash(h ifc.KustHasher) (string, error) { + return h.Hash(&r.RNode) +} + +func (r *Resource) SetGvk(gvk resid.Gvk) { + r.SetKind(gvk.Kind) + r.SetApiVersion(gvk.ApiVersion()) +} + +func (r *Resource) GetOrigin() (*Origin, error) { + annotations := r.GetAnnotations() + originAnnotations, ok := annotations[utils.OriginAnnotationKey] + if !ok { + return nil, nil + } + var origin Origin + if err := yaml.Unmarshal([]byte(originAnnotations), &origin); err != nil { + return nil, err + } + return &origin, nil +} + +func (r *Resource) SetOrigin(origin *Origin) error { + annotations := r.GetAnnotations() + if origin == nil { + delete(annotations, utils.OriginAnnotationKey) + } else { + originStr, err := origin.String() + if err != nil { + return err + } + annotations[utils.OriginAnnotationKey] = originStr + } + return r.SetAnnotations(annotations) +} + +func (r *Resource) GetTransformations() (Transformations, error) { + annotations := r.GetAnnotations() + transformerAnnotations, ok := annotations[utils.TransformerAnnotationKey] + if !ok { + return nil, nil + } + var transformations Transformations + if err := yaml.Unmarshal([]byte(transformerAnnotations), &transformations); err != nil { + return nil, err + } + return transformations, nil +} + +func (r *Resource) AddTransformation(origin *Origin) error { + annotations := r.GetAnnotations() + transformations, err := r.GetTransformations() + if err != nil { + return err + } + if transformations == nil { + transformations = Transformations{} + } + transformations = append(transformations, origin) + transformationStr, err := transformations.String() + if err != nil { + return err + } + annotations[utils.TransformerAnnotationKey] = transformationStr + return r.SetAnnotations(annotations) +} + +func (r *Resource) ClearTransformations() error { + annotations := r.GetAnnotations() + delete(annotations, utils.TransformerAnnotationKey) + return r.SetAnnotations(annotations) +} + +// ResCtx is an interface describing the contextual added +// kept kustomize in the context of each Resource object. +// Currently mainly the name prefix and name suffix are added. +type ResCtx interface { + AddNamePrefix(p string) + AddNameSuffix(s string) + GetNamePrefixes() []string + GetNameSuffixes() []string +} + +// ResCtxMatcher returns true if two Resources are being +// modified in the same kustomize context. +type ResCtxMatcher func(ResCtx) bool + +// DeepCopy returns a new copy of resource +func (r *Resource) DeepCopy() *Resource { + rc := &Resource{ + RNode: *r.Copy(), + } + rc.copyKustomizeSpecificFields(r) + return rc +} + +// CopyMergeMetaDataFieldsFrom copies everything but the non-metadata in +// the resource. +// TODO: move to RNode, use GetMeta to improve performance. +// TODO: make a version of mergeStringMaps that is build-annotation aware +// to avoid repeatedly setting refby and genargs annotations +// Must remove the kustomize bit at the end. +func (r *Resource) CopyMergeMetaDataFieldsFrom(other *Resource) error { + if err := r.SetLabels( + mergeStringMaps(other.GetLabels(), r.GetLabels())); err != nil { + return fmt.Errorf("copyMerge cannot set labels - %w", err) + } + if err := r.SetAnnotations( + mergeStringMapsWithBuildAnnotations(other.GetAnnotations(), r.GetAnnotations())); err != nil { + return fmt.Errorf("copyMerge cannot set annotations - %w", err) + } + if err := r.SetName(other.GetName()); err != nil { + return fmt.Errorf("copyMerge cannot set name - %w", err) + } + if err := r.SetNamespace(other.GetNamespace()); err != nil { + return fmt.Errorf("copyMerge cannot set namespace - %w", err) + } + r.copyKustomizeSpecificFields(other) + return nil +} + +func (r *Resource) copyKustomizeSpecificFields(other *Resource) { + r.refVarNames = copyStringSlice(other.refVarNames) +} + +func (r *Resource) MergeDataMapFrom(o *Resource) { + r.SetDataMap(mergeStringMaps(o.GetDataMap(), r.GetDataMap())) +} + +func (r *Resource) MergeBinaryDataMapFrom(o *Resource) { + r.SetBinaryDataMap(mergeStringMaps(o.GetBinaryDataMap(), r.GetBinaryDataMap())) +} + +func (r *Resource) ErrIfNotEquals(o *Resource) error { + meYaml, err := r.AsYAML() + if err != nil { + return err + } + otherYaml, err := o.AsYAML() + if err != nil { + return err + } + if !r.ReferencesEqual(o) { + return fmt.Errorf( + `unequal references - self: +%sreferenced by: %s +--- other: +%sreferenced by: %s +`, meYaml, r.GetRefBy(), otherYaml, o.GetRefBy()) + } + if string(meYaml) != string(otherYaml) { + return fmt.Errorf(`--- self: +%s +--- other: +%s +`, meYaml, otherYaml) + } + return nil +} + +func (r *Resource) ReferencesEqual(other *Resource) bool { + setSelf := make(map[resid.ResId]bool) + setOther := make(map[resid.ResId]bool) + for _, ref := range other.GetRefBy() { + setOther[ref] = true + } + for _, ref := range r.GetRefBy() { + if _, ok := setOther[ref]; !ok { + return false + } + setSelf[ref] = true + } + return len(setSelf) == len(setOther) +} + +func copyStringSlice(s []string) []string { + if s == nil { + return nil + } + c := make([]string, len(s)) + copy(c, s) + return c +} + +// Implements ResCtx AddNamePrefix +func (r *Resource) AddNamePrefix(p string) { + r.appendCsvAnnotation(utils.BuildAnnotationPrefixes, p) +} + +// Implements ResCtx AddNameSuffix +func (r *Resource) AddNameSuffix(s string) { + r.appendCsvAnnotation(utils.BuildAnnotationSuffixes, s) +} + +func (r *Resource) appendCsvAnnotation(name, value string) { + if value == "" { + return + } + annotations := r.GetAnnotations() + if existing, ok := annotations[name]; ok { + annotations[name] = existing + "," + value + } else { + annotations[name] = value + } + if err := r.SetAnnotations(annotations); err != nil { + panic(err) + } +} + +// Implements ResCtx GetNamePrefixes +func (r *Resource) GetNamePrefixes() []string { + return r.getCsvAnnotation(utils.BuildAnnotationPrefixes) +} + +// Implements ResCtx GetNameSuffixes +func (r *Resource) GetNameSuffixes() []string { + return r.getCsvAnnotation(utils.BuildAnnotationSuffixes) +} + +func (r *Resource) getCsvAnnotation(name string) []string { + annotations := r.GetAnnotations() + if _, ok := annotations[name]; !ok { + return nil + } + return strings.Split(annotations[name], ",") +} + +// PrefixesSuffixesEquals is conceptually doing the same task +// as OutermostPrefixSuffix but performs a deeper comparison +// of the suffix and prefix slices. +func (r *Resource) PrefixesSuffixesEquals(o ResCtx) bool { + return utils.SameEndingSubSlice(r.GetNamePrefixes(), o.GetNamePrefixes()) && + utils.SameEndingSubSlice(r.GetNameSuffixes(), o.GetNameSuffixes()) +} + +// RemoveBuildAnnotations removes annotations created by the build process. +// These are internal-only to kustomize, added to the data pipeline to +// track name changes so name references can be fixed. +func (r *Resource) RemoveBuildAnnotations() { + annotations := r.GetAnnotations() + if len(annotations) == 0 { + return + } + for _, a := range BuildAnnotations { + delete(annotations, a) + } + if err := r.SetAnnotations(annotations); err != nil { + panic(err) + } +} + +func (r *Resource) setPreviousId(ns string, n string, k string) *Resource { + r.appendCsvAnnotation(utils.BuildAnnotationPreviousNames, n) + r.appendCsvAnnotation(utils.BuildAnnotationPreviousNamespaces, ns) + r.appendCsvAnnotation(utils.BuildAnnotationPreviousKinds, k) + return r +} + +// AllowNameChange allows name changes to the resource. +func (r *Resource) AllowNameChange() { + r.enable(utils.BuildAnnotationAllowNameChange) +} + +// NameChangeAllowed checks if a patch resource is allowed to change another resource's name. +func (r *Resource) NameChangeAllowed() bool { + return r.isEnabled(utils.BuildAnnotationAllowNameChange) +} + +// AllowKindChange allows kind changes to the resource. +func (r *Resource) AllowKindChange() { + r.enable(utils.BuildAnnotationAllowKindChange) +} + +// KindChangeAllowed checks if a patch resource is allowed to change another resource's kind. +func (r *Resource) KindChangeAllowed() bool { + return r.isEnabled(utils.BuildAnnotationAllowKindChange) +} + +func (r *Resource) isEnabled(annoKey string) bool { + annotations := r.GetAnnotations() + v, ok := annotations[annoKey] + return ok && v == utils.Enabled +} + +func (r *Resource) enable(annoKey string) { + annotations := r.GetAnnotations() + annotations[annoKey] = utils.Enabled + if err := r.SetAnnotations(annotations); err != nil { + panic(err) + } +} + +// String returns resource as JSON. +func (r *Resource) String() string { + bs, err := r.MarshalJSON() + if err != nil { + return "<" + err.Error() + ">" + } + return strings.TrimSpace(string(bs)) +} + +// AsYAML returns the resource in Yaml form. +// Easier to read than JSON. +func (r *Resource) AsYAML() ([]byte, error) { + json, err := r.MarshalJSON() + if err != nil { + return nil, err + } + return yaml.JSONToYAML(json) +} + +// MustYaml returns YAML or panics. +func (r *Resource) MustYaml() string { + yml, err := r.AsYAML() + if err != nil { + log.Fatal(err) + } + return string(yml) +} + +// Behavior returns the behavior for the resource. +func (r *Resource) Behavior() types.GenerationBehavior { + annotations := r.GetAnnotations() + if v, ok := annotations[utils.BuildAnnotationsGenBehavior]; ok { + return types.NewGenerationBehavior(v) + } + return types.NewGenerationBehavior("") +} + +// SetBehavior sets the behavior for the resource. +func (r *Resource) SetBehavior(behavior types.GenerationBehavior) { + annotations := r.GetAnnotations() + annotations[utils.BuildAnnotationsGenBehavior] = behavior.String() + if err := r.SetAnnotations(annotations); err != nil { + panic(err) + } +} + +// NeedHashSuffix returns true if a resource content +// hash should be appended to the name of the resource. +func (r *Resource) NeedHashSuffix() bool { + return r.isEnabled(utils.BuildAnnotationsGenAddHashSuffix) +} + +// EnableHashSuffix marks the resource as needing a content +// hash to be appended to the name of the resource. +func (r *Resource) EnableHashSuffix() { + r.enable(utils.BuildAnnotationsGenAddHashSuffix) +} + +// OrgId returns the original, immutable ResId for the resource. +// This doesn't have to be unique in a ResMap. +func (r *Resource) OrgId() resid.ResId { + ids := r.PrevIds() + if len(ids) > 0 { + return ids[0] + } + return r.CurId() +} + +// PrevIds returns a list of ResIds that includes every +// previous ResId the resource has had through all of its +// GVKN transformations, in the order that it had that ID. +// I.e. the oldest ID is first. +// The returned array does not include the resource's current +// ID. If there are no previous IDs, this will return nil. +func (r *Resource) PrevIds() []resid.ResId { + prevIds, err := utils.PrevIds(&r.RNode) + if err != nil { + // this should never happen + panic(err) + } + return prevIds +} + +// StorePreviousId stores the resource's current ID via build annotations. +func (r *Resource) StorePreviousId() { + id := r.CurId() + r.setPreviousId(id.EffectiveNamespace(), id.Name, id.Kind) +} + +// CurId returns a ResId for the resource using the +// mutable parts of the resource. +// This should be unique in any ResMap. +func (r *Resource) CurId() resid.ResId { + return resid.NewResIdWithNamespace( + r.GetGvk(), r.GetName(), r.GetNamespace()) +} + +// GetRefBy returns the ResIds that referred to current resource +func (r *Resource) GetRefBy() []resid.ResId { + var resIds []resid.ResId + asStrings := r.getCsvAnnotation(utils.BuildAnnotationsRefBy) + for _, s := range asStrings { + resIds = append(resIds, resid.FromString(s)) + } + return resIds +} + +// AppendRefBy appends a ResId into the refBy list +// Using any type except fmt.Stringer here results in a compilation error +func (r *Resource) AppendRefBy(id fmt.Stringer) { + r.appendCsvAnnotation(utils.BuildAnnotationsRefBy, id.String()) +} + +// GetRefVarNames returns vars that refer to current resource +func (r *Resource) GetRefVarNames() []string { + return r.refVarNames +} + +// AppendRefVarName appends a name of a var into the refVar list +func (r *Resource) AppendRefVarName(variable types.Var) { + r.refVarNames = append(r.refVarNames, variable.Name) +} + +// ApplySmPatch applies the provided strategic merge patch. +func (r *Resource) ApplySmPatch(patch *Resource) error { + n, ns, k := r.GetName(), r.GetNamespace(), r.GetKind() + if patch.NameChangeAllowed() || patch.KindChangeAllowed() { + r.StorePreviousId() + } + if err := r.ApplyFilter(patchstrategicmerge.Filter{ + Patch: &patch.RNode, + }); err != nil { + return err + } + if r.IsNilOrEmpty() { + return nil + } + if !patch.KindChangeAllowed() { + r.SetKind(k) + } + if !patch.NameChangeAllowed() { + r.SetName(n) + } + r.SetNamespace(ns) + return nil +} + +func (r *Resource) ApplyFilter(f kio.Filter) error { + l, err := f.Filter([]*kyaml.RNode{&r.RNode}) + if len(l) == 0 { + // The node was deleted, which means the entire resource + // must be deleted. Signal that via the following: + r.SetYNode(nil) + } + return err +} + +func mergeStringMaps(maps ...map[string]string) map[string]string { + result := map[string]string{} + for _, m := range maps { + for key, value := range m { + result[key] = value + } + } + return result +} + +func mergeStringMapsWithBuildAnnotations(maps ...map[string]string) map[string]string { + result := mergeStringMaps(maps...) + for i := range BuildAnnotations { + if len(maps) > 0 { + if v, ok := maps[0][BuildAnnotations[i]]; ok { + result[BuildAnnotations[i]] = v + continue + } + } + delete(result, BuildAnnotations[i]) + } + return result +} diff --git a/go/internal/forked/api/resource/resource.go b/go/internal/forked/api/resource/resource.go new file mode 100644 index 000000000..2285b465d --- /dev/null +++ b/go/internal/forked/api/resource/resource.go @@ -0,0 +1,532 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package resource + +import ( + "fmt" + "log" + "strings" + + "sigs.k8s.io/kustomize/api/filters/patchstrategicmerge" + "sigs.k8s.io/kustomize/api/ifc" + "sigs.k8s.io/kustomize/api/internal/utils" + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/kio" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/kio/kioutil" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/resid" + kyaml "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/yaml" + "sigs.k8s.io/yaml" +) + +// Resource is an RNode, representing a Kubernetes Resource Model object, +// paired with metadata used by kustomize. +type Resource struct { + kyaml.RNode + refVarNames []string +} + +// nolint +var BuildAnnotations = []string{ + utils.BuildAnnotationPreviousKinds, + utils.BuildAnnotationPreviousNames, + utils.BuildAnnotationPrefixes, + utils.BuildAnnotationSuffixes, + utils.BuildAnnotationPreviousNamespaces, + utils.BuildAnnotationAllowNameChange, + utils.BuildAnnotationAllowKindChange, + utils.BuildAnnotationsRefBy, + utils.BuildAnnotationsGenBehavior, + utils.BuildAnnotationsGenAddHashSuffix, + + kioutil.PathAnnotation, + kioutil.IndexAnnotation, + kioutil.SeqIndentAnnotation, + kioutil.IdAnnotation, + kioutil.InternalAnnotationsMigrationResourceIDAnnotation, + + kioutil.LegacyPathAnnotation, + kioutil.LegacyIndexAnnotation, + kioutil.LegacyIdAnnotation, +} + +func (r *Resource) ResetRNode(incoming *Resource) { + r.RNode = *incoming.Copy() +} + +func (r *Resource) GetGvk() resid.Gvk { + return resid.GvkFromNode(&r.RNode) +} + +func (r *Resource) Hash(h ifc.KustHasher) (string, error) { + return h.Hash(&r.RNode) +} + +func (r *Resource) SetGvk(gvk resid.Gvk) { + r.SetKind(gvk.Kind) + r.SetApiVersion(gvk.ApiVersion()) +} + +func (r *Resource) GetOrigin() (*Origin, error) { + annotations := r.GetAnnotations() + originAnnotations, ok := annotations[utils.OriginAnnotationKey] + if !ok { + return nil, nil + } + var origin Origin + if err := yaml.Unmarshal([]byte(originAnnotations), &origin); err != nil { + return nil, err + } + return &origin, nil +} + +func (r *Resource) SetOrigin(origin *Origin) error { + annotations := r.GetAnnotations() + if origin == nil { + delete(annotations, utils.OriginAnnotationKey) + } else { + originStr, err := origin.String() + if err != nil { + return err + } + annotations[utils.OriginAnnotationKey] = originStr + } + return r.SetAnnotations(annotations) +} + +func (r *Resource) GetTransformations() (Transformations, error) { + annotations := r.GetAnnotations() + transformerAnnotations, ok := annotations[utils.TransformerAnnotationKey] + if !ok { + return nil, nil + } + var transformations Transformations + if err := yaml.Unmarshal([]byte(transformerAnnotations), &transformations); err != nil { + return nil, err + } + return transformations, nil +} + +func (r *Resource) AddTransformation(origin *Origin) error { + annotations := r.GetAnnotations() + transformations, err := r.GetTransformations() + if err != nil { + return err + } + if transformations == nil { + transformations = Transformations{} + } + transformations = append(transformations, origin) + transformationStr, err := transformations.String() + if err != nil { + return err + } + annotations[utils.TransformerAnnotationKey] = transformationStr + return r.SetAnnotations(annotations) +} + +func (r *Resource) ClearTransformations() error { + annotations := r.GetAnnotations() + delete(annotations, utils.TransformerAnnotationKey) + return r.SetAnnotations(annotations) +} + +// ResCtx is an interface describing the contextual added +// kept kustomize in the context of each Resource object. +// Currently mainly the name prefix and name suffix are added. +type ResCtx interface { + AddNamePrefix(p string) + AddNameSuffix(s string) + GetNamePrefixes() []string + GetNameSuffixes() []string +} + +// ResCtxMatcher returns true if two Resources are being +// modified in the same kustomize context. +type ResCtxMatcher func(ResCtx) bool + +// DeepCopy returns a new copy of resource +func (r *Resource) DeepCopy() *Resource { + rc := &Resource{ + RNode: *r.Copy(), + } + rc.copyKustomizeSpecificFields(r) + return rc +} + +// CopyMergeMetaDataFieldsFrom copies everything but the non-metadata in +// the resource. +// TODO: move to RNode, use GetMeta to improve performance. +// TODO: make a version of mergeStringMaps that is build-annotation aware +// to avoid repeatedly setting refby and genargs annotations +// Must remove the kustomize bit at the end. +func (r *Resource) CopyMergeMetaDataFieldsFrom(other *Resource) error { + if err := r.SetLabels( + mergeStringMaps(other.GetLabels(), r.GetLabels())); err != nil { + return fmt.Errorf("copyMerge cannot set labels - %w", err) + } + if err := r.SetAnnotations( + mergeStringMapsWithBuildAnnotations(other.GetAnnotations(), r.GetAnnotations())); err != nil { + return fmt.Errorf("copyMerge cannot set annotations - %w", err) + } + if err := r.SetName(other.GetName()); err != nil { + return fmt.Errorf("copyMerge cannot set name - %w", err) + } + if err := r.SetNamespace(other.GetNamespace()); err != nil { + return fmt.Errorf("copyMerge cannot set namespace - %w", err) + } + r.copyKustomizeSpecificFields(other) + return nil +} + +func (r *Resource) copyKustomizeSpecificFields(other *Resource) { + r.refVarNames = copyStringSlice(other.refVarNames) +} + +func (r *Resource) MergeDataMapFrom(o *Resource) { + r.SetDataMap(mergeStringMaps(o.GetDataMap(), r.GetDataMap())) +} + +func (r *Resource) MergeBinaryDataMapFrom(o *Resource) { + r.SetBinaryDataMap(mergeStringMaps(o.GetBinaryDataMap(), r.GetBinaryDataMap())) +} + +func (r *Resource) ErrIfNotEquals(o *Resource) error { + meYaml, err := r.AsYAML() + if err != nil { + return err + } + otherYaml, err := o.AsYAML() + if err != nil { + return err + } + if !r.ReferencesEqual(o) { + return fmt.Errorf( + `unequal references - self: +%sreferenced by: %s +--- other: +%sreferenced by: %s +`, meYaml, r.GetRefBy(), otherYaml, o.GetRefBy()) + } + if string(meYaml) != string(otherYaml) { + return fmt.Errorf(`--- self: +%s +--- other: +%s +`, meYaml, otherYaml) + } + return nil +} + +func (r *Resource) ReferencesEqual(other *Resource) bool { + setSelf := make(map[resid.ResId]bool) + setOther := make(map[resid.ResId]bool) + for _, ref := range other.GetRefBy() { + setOther[ref] = true + } + for _, ref := range r.GetRefBy() { + if _, ok := setOther[ref]; !ok { + return false + } + setSelf[ref] = true + } + return len(setSelf) == len(setOther) +} + +func copyStringSlice(s []string) []string { + if s == nil { + return nil + } + c := make([]string, len(s)) + copy(c, s) + return c +} + +// Implements ResCtx AddNamePrefix +func (r *Resource) AddNamePrefix(p string) { + r.appendCsvAnnotation(utils.BuildAnnotationPrefixes, p) +} + +// Implements ResCtx AddNameSuffix +func (r *Resource) AddNameSuffix(s string) { + r.appendCsvAnnotation(utils.BuildAnnotationSuffixes, s) +} + +func (r *Resource) appendCsvAnnotation(name, value string) { + if value == "" { + return + } + annotations := r.GetAnnotations() + if existing, ok := annotations[name]; ok { + annotations[name] = existing + "," + value + } else { + annotations[name] = value + } + if err := r.SetAnnotations(annotations); err != nil { + panic(err) + } +} + +// Implements ResCtx GetNamePrefixes +func (r *Resource) GetNamePrefixes() []string { + return r.getCsvAnnotation(utils.BuildAnnotationPrefixes) +} + +// Implements ResCtx GetNameSuffixes +func (r *Resource) GetNameSuffixes() []string { + return r.getCsvAnnotation(utils.BuildAnnotationSuffixes) +} + +func (r *Resource) getCsvAnnotation(name string) []string { + annotations := r.GetAnnotations() + if _, ok := annotations[name]; !ok { + return nil + } + return strings.Split(annotations[name], ",") +} + +// PrefixesSuffixesEquals is conceptually doing the same task +// as OutermostPrefixSuffix but performs a deeper comparison +// of the suffix and prefix slices. +func (r *Resource) PrefixesSuffixesEquals(o ResCtx) bool { + return utils.SameEndingSubSlice(r.GetNamePrefixes(), o.GetNamePrefixes()) && + utils.SameEndingSubSlice(r.GetNameSuffixes(), o.GetNameSuffixes()) +} + +// RemoveBuildAnnotations removes annotations created by the build process. +// These are internal-only to kustomize, added to the data pipeline to +// track name changes so name references can be fixed. +func (r *Resource) RemoveBuildAnnotations() { + annotations := r.GetAnnotations() + if len(annotations) == 0 { + return + } + for _, a := range BuildAnnotations { + delete(annotations, a) + } + if err := r.SetAnnotations(annotations); err != nil { + panic(err) + } +} + +func (r *Resource) setPreviousId(ns string, n string, k string) *Resource { + r.appendCsvAnnotation(utils.BuildAnnotationPreviousNames, n) + r.appendCsvAnnotation(utils.BuildAnnotationPreviousNamespaces, ns) + r.appendCsvAnnotation(utils.BuildAnnotationPreviousKinds, k) + return r +} + +// AllowNameChange allows name changes to the resource. +func (r *Resource) AllowNameChange() { + r.enable(utils.BuildAnnotationAllowNameChange) +} + +// NameChangeAllowed checks if a patch resource is allowed to change another resource's name. +func (r *Resource) NameChangeAllowed() bool { + return r.isEnabled(utils.BuildAnnotationAllowNameChange) +} + +// AllowKindChange allows kind changes to the resource. +func (r *Resource) AllowKindChange() { + r.enable(utils.BuildAnnotationAllowKindChange) +} + +// KindChangeAllowed checks if a patch resource is allowed to change another resource's kind. +func (r *Resource) KindChangeAllowed() bool { + return r.isEnabled(utils.BuildAnnotationAllowKindChange) +} + +func (r *Resource) isEnabled(annoKey string) bool { + annotations := r.GetAnnotations() + v, ok := annotations[annoKey] + return ok && v == utils.Enabled +} + +func (r *Resource) enable(annoKey string) { + annotations := r.GetAnnotations() + annotations[annoKey] = utils.Enabled + if err := r.SetAnnotations(annotations); err != nil { + panic(err) + } +} + +// String returns resource as JSON. +func (r *Resource) String() string { + bs, err := r.MarshalJSON() + if err != nil { + return "<" + err.Error() + ">" + } + return strings.TrimSpace(string(bs)) +} + +// AsYAML returns the resource in Yaml form. +// Easier to read than JSON. +func (r *Resource) AsYAML() ([]byte, error) { + json, err := r.MarshalJSON() + if err != nil { + return nil, err + } + return yaml.JSONToYAML(json) +} + +// MustYaml returns YAML or panics. +func (r *Resource) MustYaml() string { + yml, err := r.AsYAML() + if err != nil { + log.Fatal(err) + } + return string(yml) +} + +// Behavior returns the behavior for the resource. +func (r *Resource) Behavior() types.GenerationBehavior { + annotations := r.GetAnnotations() + if v, ok := annotations[utils.BuildAnnotationsGenBehavior]; ok { + return types.NewGenerationBehavior(v) + } + return types.NewGenerationBehavior("") +} + +// SetBehavior sets the behavior for the resource. +func (r *Resource) SetBehavior(behavior types.GenerationBehavior) { + annotations := r.GetAnnotations() + annotations[utils.BuildAnnotationsGenBehavior] = behavior.String() + if err := r.SetAnnotations(annotations); err != nil { + panic(err) + } +} + +// NeedHashSuffix returns true if a resource content +// hash should be appended to the name of the resource. +func (r *Resource) NeedHashSuffix() bool { + return r.isEnabled(utils.BuildAnnotationsGenAddHashSuffix) +} + +// EnableHashSuffix marks the resource as needing a content +// hash to be appended to the name of the resource. +func (r *Resource) EnableHashSuffix() { + r.enable(utils.BuildAnnotationsGenAddHashSuffix) +} + +// OrgId returns the original, immutable ResId for the resource. +// This doesn't have to be unique in a ResMap. +func (r *Resource) OrgId() resid.ResId { + ids := r.PrevIds() + if len(ids) > 0 { + return ids[0] + } + return r.CurId() +} + +// PrevIds returns a list of ResIds that includes every +// previous ResId the resource has had through all of its +// GVKN transformations, in the order that it had that ID. +// I.e. the oldest ID is first. +// The returned array does not include the resource's current +// ID. If there are no previous IDs, this will return nil. +func (r *Resource) PrevIds() []resid.ResId { + prevIds, err := utils.PrevIds(&r.RNode) + if err != nil { + // this should never happen + panic(err) + } + return prevIds +} + +// StorePreviousId stores the resource's current ID via build annotations. +func (r *Resource) StorePreviousId() { + id := r.CurId() + r.setPreviousId(id.EffectiveNamespace(), id.Name, id.Kind) +} + +// CurId returns a ResId for the resource using the +// mutable parts of the resource. +// This should be unique in any ResMap. +func (r *Resource) CurId() resid.ResId { + return resid.NewResIdWithNamespace( + r.GetGvk(), r.GetName(), r.GetNamespace()) +} + +// GetRefBy returns the ResIds that referred to current resource +func (r *Resource) GetRefBy() []resid.ResId { + var resIds []resid.ResId + asStrings := r.getCsvAnnotation(utils.BuildAnnotationsRefBy) + for _, s := range asStrings { + resIds = append(resIds, resid.FromString(s)) + } + return resIds +} + +// AppendRefBy appends a ResId into the refBy list +// Using any type except fmt.Stringer here results in a compilation error +func (r *Resource) AppendRefBy(id fmt.Stringer) { + r.appendCsvAnnotation(utils.BuildAnnotationsRefBy, id.String()) +} + +// GetRefVarNames returns vars that refer to current resource +func (r *Resource) GetRefVarNames() []string { + return r.refVarNames +} + +// AppendRefVarName appends a name of a var into the refVar list +func (r *Resource) AppendRefVarName(variable types.Var) { + r.refVarNames = append(r.refVarNames, variable.Name) +} + +// ApplySmPatch applies the provided strategic merge patch. +func (r *Resource) ApplySmPatch(patch *Resource) error { + n, ns, k := r.GetName(), r.GetNamespace(), r.GetKind() + if patch.NameChangeAllowed() || patch.KindChangeAllowed() { + r.StorePreviousId() + } + if err := r.ApplyFilter(patchstrategicmerge.Filter{ + Patch: &patch.RNode, + }); err != nil { + return err + } + if r.IsNilOrEmpty() { + return nil + } + if !patch.KindChangeAllowed() { + r.SetKind(k) + } + if !patch.NameChangeAllowed() { + r.SetName(n) + } + r.SetNamespace(ns) + return nil +} + +func (r *Resource) ApplyFilter(f kio.Filter) error { + l, err := f.Filter([]*kyaml.RNode{&r.RNode}) + if len(l) == 0 { + // The node was deleted, which means the entire resource + // must be deleted. Signal that via the following: + r.SetYNode(nil) + } + return err +} + +func mergeStringMaps(maps ...map[string]string) map[string]string { + result := map[string]string{} + for _, m := range maps { + for key, value := range m { + result[key] = value + } + } + return result +} + +func mergeStringMapsWithBuildAnnotations(maps ...map[string]string) map[string]string { + result := mergeStringMaps(maps...) + for i := range BuildAnnotations { + if len(maps) > 0 { + if v, ok := maps[0][BuildAnnotations[i]]; ok { + result[BuildAnnotations[i]] = v + continue + } + } + delete(result, BuildAnnotations[i]) + } + return result +} diff --git a/go/internal/forked/api/resource/resource_test.go b/go/internal/forked/api/resource/resource_test.go new file mode 100644 index 000000000..8633dbf59 --- /dev/null +++ b/go/internal/forked/api/resource/resource_test.go @@ -0,0 +1,1556 @@ +// Copyright 2020 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package resource_test + +import ( + "fmt" + "reflect" + "testing" + + "github.com/stretchr/testify/assert" + "sigs.k8s.io/kustomize/api/internal/utils" + "sigs.k8s.io/kustomize/api/provider" + "sigs.k8s.io/kustomize/api/resource" + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/resid" + kyaml "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" +) + +var factory = provider.NewDefaultDepProvider().GetResourceFactory() + +var testConfigMap = factory.FromMap( + map[string]interface{}{ + "apiVersion": "v1", + "kind": "ConfigMap", + "metadata": map[string]interface{}{ + "name": "winnie", + "namespace": "hundred-acre-wood", + }, + }) + +//nolint:gosec +const configMapAsString = `{"apiVersion":"v1","kind":"ConfigMap","metadata":{"name":"winnie","namespace":"hundred-acre-wood"}}` + +var testDeployment = factory.FromMap( + map[string]interface{}{ + "apiVersion": "apps/v1", + "kind": "Deployment", + "metadata": map[string]interface{}{ + "name": "pooh", + }, + }) + +const deploymentAsString = `{"apiVersion":"apps/v1","kind":"Deployment","metadata":{"name":"pooh"}}` + +func TestAsYAML(t *testing.T) { + expected := `apiVersion: apps/v1 +kind: Deployment +metadata: + name: pooh +` + yaml, err := testDeployment.AsYAML() + if err != nil { + t.Fatal(err) + } + if string(yaml) != expected { + t.Fatalf("--- expected\n%s\n--- got\n%s\n", expected, string(yaml)) + } +} + +func TestResourceString(t *testing.T) { + tests := []struct { + in *resource.Resource + s string + }{ + { + in: testConfigMap, + s: configMapAsString, + }, + { + in: testDeployment, + s: deploymentAsString, + }, + } + for _, test := range tests { + assert.Equal(t, test.in.String(), test.s) + } +} + +func TestResourceId(t *testing.T) { + tests := []struct { + in *resource.Resource + id resid.ResId + }{ + { + in: testConfigMap, + id: resid.NewResIdWithNamespace( + resid.NewGvk("", "v1", "ConfigMap"), + "winnie", "hundred-acre-wood"), + }, + { + in: testDeployment, + id: resid.NewResId( + resid.NewGvk("apps", "v1", "Deployment"), "pooh"), + }, + } + for _, test := range tests { + if test.in.OrgId() != test.id { + t.Fatalf("Expected %v, but got %v\n", test.id, test.in.OrgId()) + } + } +} + +func TestDeepCopy(t *testing.T) { + r := factory.FromMap( + map[string]interface{}{ + "apiVersion": "apps/v1", + "kind": "Deployment", + "metadata": map[string]interface{}{ + "name": "pooh", + }, + }) + r.AppendRefBy(resid.NewResId(resid.Gvk{Group: "somegroup", Kind: "MyKind"}, "random")) + + var1 := types.Var{ + Name: "SERVICE_ONE", + ObjRef: types.Target{ + Gvk: resid.Gvk{Version: "v1", Kind: "Service"}, + Name: "backendOne"}, + } + r.AppendRefVarName(var1) + + cr := r.DeepCopy() + if !reflect.DeepEqual(r, cr) { + t.Errorf("expected %v\nbut got%v", r, cr) + } +} + +func TestApplySmPatch_1(t *testing.T) { + resource, err := factory.FromBytes([]byte(` +apiVersion: apps/v1 +kind: Deployment +metadata: + annotations: + baseAnno: This is a base annotation + labels: + app: mungebot + foo: bar + name: bingo +spec: + replicas: 1 + selector: + matchLabels: + foo: bar + template: + metadata: + labels: + app: mungebot + spec: + containers: + - env: + - name: foo + value: bar + image: nginx + name: nginx + ports: + - containerPort: 80 +`)) + assert.NoError(t, err) + patch, err := factory.FromBytes([]byte(` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: baseprefix-mungebot +spec: + template: + spec: + containers: + - image: nginx + name: nginx + ports: + - containerPort: 777 +`)) + assert.NoError(t, err) + + assert.NoError(t, resource.ApplySmPatch(patch)) + bytes, err := resource.AsYAML() + assert.NoError(t, err) + assert.Equal(t, `apiVersion: apps/v1 +kind: Deployment +metadata: + annotations: + baseAnno: This is a base annotation + labels: + app: mungebot + foo: bar + name: bingo +spec: + replicas: 1 + selector: + matchLabels: + foo: bar + template: + metadata: + labels: + app: mungebot + spec: + containers: + - env: + - name: foo + value: bar + image: nginx + name: nginx + ports: + - containerPort: 777 + - containerPort: 80 +`, string(bytes)) +} + +func TestApplySmPatch_2(t *testing.T) { + resource, err := factory.FromBytes([]byte(` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: my-foo +spec: + bar: + A: X + B: Y +`)) + assert.NoError(t, err) + patch, err := factory.FromBytes([]byte(` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: my-foo +spec: + bar: + B: + C: Z + D: W + baz: + hello: world +`)) + assert.NoError(t, err) + assert.NoError(t, resource.ApplySmPatch(patch)) + bytes, err := resource.AsYAML() + assert.NoError(t, err) + assert.Equal(t, `apiVersion: example.com/v1 +kind: Foo +metadata: + name: my-foo +spec: + bar: + A: X + C: Z + D: W + baz: + hello: world +`, string(bytes)) +} + +func TestApplySmPatch_3(t *testing.T) { + resource, err := factory.FromBytes([]byte(` +apiVersion: v1 +kind: Deployment +metadata: + name: clown +spec: + numReplicas: 1 +`)) + assert.NoError(t, err) + patch, err := factory.FromBytes([]byte(` +apiVersion: v1 +kind: Deployment +metadata: + name: clown +spec: + numReplicas: 999 +`)) + assert.NoError(t, err) + assert.NoError(t, resource.ApplySmPatch(patch)) + bytes, err := resource.AsYAML() + assert.NoError(t, err) + assert.Equal(t, `apiVersion: v1 +kind: Deployment +metadata: + name: clown +spec: + numReplicas: 999 +`, string(bytes)) +} + +func TestApplySmPatchShouldOutputListItemsInCorrectOrder(t *testing.T) { + cases := []struct { + name string + skip bool + patch string + expectedOutput string + }{ + { + name: "Order should not change when patch has foo only", + patch: `apiVersion: v1 +kind: Pod +metadata: + name: test +spec: + initContainers: + - name: foo +`, + expectedOutput: `apiVersion: v1 +kind: Pod +metadata: + name: test +spec: + initContainers: + - name: foo + - name: bar +`, + }, + { + name: "Order changes when patch has bar only", + patch: `apiVersion: v1 +kind: Pod +metadata: + name: test +spec: + initContainers: + - name: bar +`, + // This test records current behavior, but this behavior might be undesirable. + // If so, feel free to change the test to pass with some improved algorithm. + expectedOutput: `apiVersion: v1 +kind: Pod +metadata: + name: test +spec: + initContainers: + - name: bar + - name: foo +`, + }, + { + name: "Order should not change and should include a new item at the beginning when patch has a new list item", + patch: `apiVersion: v1 +kind: Pod +metadata: + name: test +spec: + initContainers: + - name: baz +`, + expectedOutput: `apiVersion: v1 +kind: Pod +metadata: + name: test +spec: + initContainers: + - name: baz + - name: foo + - name: bar +`, + }, + { + name: "Order should not change when patch has foo and bar in same order", + patch: `apiVersion: v1 +kind: Pod +metadata: + name: test +spec: + initContainers: + - name: foo + - name: bar +`, + expectedOutput: `apiVersion: v1 +kind: Pod +metadata: + name: test +spec: + initContainers: + - name: foo + - name: bar +`, + }, + { + name: "Order should change when patch has foo and bar in different order", + patch: `apiVersion: v1 +kind: Pod +metadata: + name: test +spec: + initContainers: + - name: bar + - name: foo +`, + expectedOutput: `apiVersion: v1 +kind: Pod +metadata: + name: test +spec: + initContainers: + - name: bar + - name: foo +`, + }, + } + for _, tc := range cases { + t.Run(tc.name, func(t *testing.T) { + if tc.skip { + t.Skip() + } + + resource, err := factory.FromBytes([]byte(` +apiVersion: v1 +kind: Pod +metadata: + name: test +spec: + initContainers: + - name: foo + - name: bar +`)) + assert.NoError(t, err) + + patch, err := factory.FromBytes([]byte(tc.patch)) + assert.NoError(t, err) + assert.NoError(t, resource.ApplySmPatch(patch)) + bytes, err := resource.AsYAML() + assert.NoError(t, err) + assert.Equal(t, tc.expectedOutput, string(bytes)) + }) + } +} + +func TestApplySmPatchShouldOutputPrimitiveListItemsInCorrectOrder(t *testing.T) { + cases := []struct { + name string + skip bool + patch string + expectedOutput string + }{ + { + name: "Order should not change when patch has foo only", + patch: `apiVersion: v1 +kind: Pod +metadata: + name: test + finalizers: ["foo"] +`, + expectedOutput: `apiVersion: v1 +kind: Pod +metadata: + finalizers: + - foo + - bar + name: test +`, + }, + { + name: "Order should not change when patch has bar only", + skip: true, // TODO: This test should pass but fails currently. Fix the problem and unskip this test + patch: `apiVersion: v1 +kind: Pod +metadata: + name: test + finalizers: ["bar"] +`, + expectedOutput: `apiVersion: v1 +kind: Pod +metadata: + finalizers: + - foo + - bar + name: test +`, + }, + { + name: "Order should not change and should include a new item at the beginning when patch has a new list item", + patch: `apiVersion: v1 +kind: Pod +metadata: + name: test + finalizers: ["baz"] +`, + expectedOutput: `apiVersion: v1 +kind: Pod +metadata: + finalizers: + - baz + - foo + - bar + name: test +`, + }, + { + name: "Order should not change when patch has foo and bar in same order", + patch: `apiVersion: v1 +kind: Pod +metadata: + name: test + finalizers: ["foo", "bar"] +`, + expectedOutput: `apiVersion: v1 +kind: Pod +metadata: + finalizers: + - foo + - bar + name: test +`, + }, + { + name: "Order should change when patch has foo and bar in different order", + patch: `apiVersion: v1 +kind: Pod +metadata: + name: test + finalizers: ["bar", "foo"] +`, + expectedOutput: `apiVersion: v1 +kind: Pod +metadata: + finalizers: + - bar + - foo + name: test +`, + }, + } + for _, tc := range cases { + t.Run(tc.name, func(t *testing.T) { + if tc.skip { + t.Skip() + } + + resource, err := factory.FromBytes([]byte(` +kind: Pod +metadata: + name: test + finalizers: ["foo", "bar"] +`)) + assert.NoError(t, err) + + patch, err := factory.FromBytes([]byte(tc.patch)) + assert.NoError(t, err) + assert.NoError(t, resource.ApplySmPatch(patch)) + bytes, err := resource.AsYAML() + assert.NoError(t, err) + assert.Equal(t, tc.expectedOutput, string(bytes)) + }) + } +} + +func TestMergeDataMapFrom(t *testing.T) { + resource, err := factory.FromBytes([]byte(` +apiVersion: v1 +kind: BlahBlah +metadata: + name: clown +data: + fruit: pear +`)) + if !assert.NoError(t, err) { + t.FailNow() + } + patch, err := factory.FromBytes([]byte(` +apiVersion: v1 +kind: Whatever +metadata: + name: spaceship +data: + spaceship: enterprise +`)) + if !assert.NoError(t, err) { + t.FailNow() + } + resource.MergeDataMapFrom(patch) + bytes, err := resource.AsYAML() + assert.NoError(t, err) + assert.Equal(t, `apiVersion: v1 +data: + fruit: pear + spaceship: enterprise +kind: BlahBlah +metadata: + name: clown +`, string(bytes)) +} + +func TestApplySmPatch_SwapOrder(t *testing.T) { + s1 := ` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: my-foo +spec: + bar: + B: + C: Z +` + s2 := ` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: my-foo +spec: + bar: + C: Z + D: W + baz: + hello: world +` + expected := `apiVersion: example.com/v1 +kind: Foo +metadata: + name: my-foo +spec: + bar: + C: Z + D: W + baz: + hello: world +` + r1, err := factory.FromBytes([]byte(s1)) + assert.NoError(t, err) + r2, err := factory.FromBytes([]byte(s2)) + assert.NoError(t, err) + assert.NoError(t, r1.ApplySmPatch(r2)) + bytes, err := r1.AsYAML() + assert.NoError(t, err) + assert.Equal(t, expected, string(bytes)) + + r1, _ = factory.FromBytes([]byte(s1)) + r2, _ = factory.FromBytes([]byte(s2)) + assert.NoError(t, r2.ApplySmPatch(r1)) + bytes, err = r2.AsYAML() + assert.NoError(t, err) + assert.Equal(t, expected, string(bytes)) +} + +func TestApplySmPatch(t *testing.T) { + const ( + myDeployment = "Deployment" + myCRD = "myCRD" + ) + + tests := map[string]struct { + base string + patch []string + expected string + errorExpected bool + errorMsg string + }{ + "withschema-label-image-container": { + base: baseResource(myDeployment), + patch: []string{ + addLabelAndEnvPatch(myDeployment), + changeImagePatch(myDeployment, "nginx:latest"), + addContainerAndEnvPatch(myDeployment), + }, + errorExpected: false, + expected: expectedResultMultiPatch(myDeployment, false), + }, + "withschema-image-container-label": { + base: baseResource(myDeployment), + patch: []string{ + changeImagePatch(myDeployment, "nginx:latest"), + addContainerAndEnvPatch(myDeployment), + addLabelAndEnvPatch(myDeployment), + }, + errorExpected: false, + expected: expectedResultMultiPatch(myDeployment, true), + }, + "withschema-container-label-image": { + base: baseResource(myDeployment), + patch: []string{ + addContainerAndEnvPatch(myDeployment), + addLabelAndEnvPatch(myDeployment), + changeImagePatch(myDeployment, "nginx:latest"), + }, + errorExpected: false, + expected: expectedResultMultiPatch(myDeployment, true), + }, + "noschema-label-image-container": { + base: baseResource(myCRD), + patch: []string{ + addLabelAndEnvPatch(myCRD), + changeImagePatch(myCRD, "nginx:latest"), + addContainerAndEnvPatch(myCRD), + }, + // Might be better if this complained about patch conflict. + // See plugin/builtin/patchstrategicmergetransformer/psmt_test.go + expected: `apiVersion: apps/v1 +kind: myCRD +metadata: + name: deploy1 +spec: + template: + metadata: + labels: + old-label: old-value + some-label: some-value + spec: + containers: + - env: + - name: ANOTHERENV + value: ANOTHERVALUE + name: nginx + - image: anotherimage + name: anothercontainer +`, + }, + "noschema-image-container-label": { + base: baseResource(myCRD), + patch: []string{ + changeImagePatch(myCRD, "nginx:latest"), + addContainerAndEnvPatch(myCRD), + addLabelAndEnvPatch(myCRD), + }, + // Might be better if this complained about patch conflict. + expected: `apiVersion: apps/v1 +kind: myCRD +metadata: + name: deploy1 +spec: + template: + metadata: + labels: + old-label: old-value + some-label: some-value + spec: + containers: + - env: + - name: SOMEENV + value: SOMEVALUE + name: nginx +`, + }, + "noschema-container-label-image": { + base: baseResource(myCRD), + patch: []string{ + addContainerAndEnvPatch(myCRD), + addLabelAndEnvPatch(myCRD), + changeImagePatch(myCRD, "nginx:latest"), + }, + // Might be better if this complained about patch conflict. + expected: `apiVersion: apps/v1 +kind: myCRD +metadata: + name: deploy1 +spec: + template: + metadata: + labels: + old-label: old-value + some-label: some-value + spec: + containers: + - image: nginx:latest + name: nginx +`, + }, + + "withschema-label-latest-someV-01": { + base: baseResource(myDeployment), + patch: []string{ + addLabelAndEnvPatch(myDeployment), + changeImagePatch(myDeployment, "nginx:latest"), + changeImagePatch(myDeployment, "nginx:1.7.9"), + }, + expected: `apiVersion: apps/v1 +kind: Deployment +metadata: + name: deploy1 +spec: + template: + metadata: + labels: + old-label: old-value + some-label: some-value + spec: + containers: + - env: + - name: SOMEENV + value: SOMEVALUE + image: nginx:1.7.9 + name: nginx +`, + }, + "withschema-latest-label-someV-02": { + base: baseResource(myDeployment), + patch: []string{ + changeImagePatch(myDeployment, "nginx:latest"), + addLabelAndEnvPatch(myDeployment), + changeImagePatch(myDeployment, "nginx:1.7.9"), + }, + expected: `apiVersion: apps/v1 +kind: Deployment +metadata: + name: deploy1 +spec: + template: + metadata: + labels: + old-label: old-value + some-label: some-value + spec: + containers: + - env: + - name: SOMEENV + value: SOMEVALUE + image: nginx:1.7.9 + name: nginx +`, + }, + "withschema-latest-label-someV-03": { + base: baseResource(myDeployment), + patch: []string{ + changeImagePatch(myDeployment, "nginx:1.7.9"), + addLabelAndEnvPatch(myDeployment), + changeImagePatch(myDeployment, "nginx:latest"), + }, + expected: `apiVersion: apps/v1 +kind: Deployment +metadata: + name: deploy1 +spec: + template: + metadata: + labels: + old-label: old-value + some-label: some-value + spec: + containers: + - env: + - name: SOMEENV + value: SOMEVALUE + image: nginx:latest + name: nginx +`, + }, + "withschema-latest-label-someV-04": { + base: baseResource(myDeployment), + patch: []string{ + changeImagePatch(myDeployment, "nginx:1.7.9"), + changeImagePatch(myDeployment, "nginx:latest"), + addLabelAndEnvPatch(myDeployment), + changeImagePatch(myDeployment, "nginx:nginx"), + }, + expected: `apiVersion: apps/v1 +kind: Deployment +metadata: + name: deploy1 +spec: + template: + metadata: + labels: + old-label: old-value + some-label: some-value + spec: + containers: + - env: + - name: SOMEENV + value: SOMEVALUE + image: nginx:nginx + name: nginx +`, + }, + "noschema-latest-label-someV-01": { + base: baseResource(myCRD), + patch: []string{ + addLabelAndEnvPatch(myCRD), + changeImagePatch(myCRD, "nginx:latest"), + changeImagePatch(myCRD, "nginx:1.7.9"), + }, + expected: `apiVersion: apps/v1 +kind: myCRD +metadata: + name: deploy1 +spec: + template: + metadata: + labels: + old-label: old-value + some-label: some-value + spec: + containers: + - image: nginx:1.7.9 + name: nginx +`, + }, + "noschema-latest-label-someV-02": { + base: baseResource(myCRD), + patch: []string{ + changeImagePatch(myCRD, "nginx:latest"), + addLabelAndEnvPatch(myCRD), + changeImagePatch(myCRD, "nginx:1.7.9"), + }, + expected: expectedResultJMP("nginx:1.7.9"), + }, + "noschema-latest-label-someV-03": { + base: baseResource(myCRD), + patch: []string{ + changeImagePatch(myCRD, "nginx:1.7.9"), + addLabelAndEnvPatch(myCRD), + changeImagePatch(myCRD, "nginx:latest"), + }, + expected: `apiVersion: apps/v1 +kind: myCRD +metadata: + name: deploy1 +spec: + template: + metadata: + labels: + old-label: old-value + some-label: some-value + spec: + containers: + - image: nginx:latest + name: nginx +`, + }, + "noschema-latest-label-someV-04": { + base: baseResource(myCRD), + patch: []string{ + changeImagePatch(myCRD, "nginx:1.7.9"), + changeImagePatch(myCRD, "nginx:latest"), + addLabelAndEnvPatch(myCRD), + changeImagePatch(myCRD, "nginx:nginx"), + }, + expected: `apiVersion: apps/v1 +kind: myCRD +metadata: + name: deploy1 +spec: + template: + metadata: + labels: + old-label: old-value + some-label: some-value + spec: + containers: + - image: nginx:nginx + name: nginx +`, + }, + } + + for name, test := range tests { + resource, err := factory.FromBytes([]byte(test.base)) + assert.NoError(t, err) + for _, p := range test.patch { + patch, err := factory.FromBytes([]byte(p)) + assert.NoError(t, err, name) + assert.NoError(t, resource.ApplySmPatch(patch), name) + } + bytes, err := resource.AsYAML() + if test.errorExpected { + assert.Error(t, err, name) + } else { + assert.NoError(t, err, name) + assert.Equal(t, test.expected, string(bytes), name) + } + } +} + +func TestResourceStorePreviousId(t *testing.T) { + tests := map[string]struct { + input string + newName string + newNs string + expected string + }{ + "default namespace, first previous name": { + input: `apiVersion: apps/v1 +kind: Secret +metadata: + name: oldName +`, + newName: "newName", + newNs: "", + expected: `apiVersion: apps/v1 +kind: Secret +metadata: + annotations: + internal.config.kubernetes.io/previousKinds: Secret + internal.config.kubernetes.io/previousNames: oldName + internal.config.kubernetes.io/previousNamespaces: default + name: newName +`, + }, + + "default namespace, second previous name": { + input: `apiVersion: apps/v1 +kind: Secret +metadata: + annotations: + internal.config.kubernetes.io/previousKinds: Secret + internal.config.kubernetes.io/previousNames: oldName + internal.config.kubernetes.io/previousNamespaces: default + name: oldName2 +`, + newName: "newName", + newNs: "", + expected: `apiVersion: apps/v1 +kind: Secret +metadata: + annotations: + internal.config.kubernetes.io/previousKinds: Secret,Secret + internal.config.kubernetes.io/previousNames: oldName,oldName2 + internal.config.kubernetes.io/previousNamespaces: default,default + name: newName +`, + }, + + "non-default namespace": { + input: `apiVersion: apps/v1 +kind: Secret +metadata: + annotations: + internal.config.kubernetes.io/previousKinds: Secret + internal.config.kubernetes.io/previousNames: oldName + internal.config.kubernetes.io/previousNamespaces: default + name: oldName2 + namespace: oldNamespace +`, + newName: "newName", + newNs: "newNamespace", + expected: `apiVersion: apps/v1 +kind: Secret +metadata: + annotations: + internal.config.kubernetes.io/previousKinds: Secret,Secret + internal.config.kubernetes.io/previousNames: oldName,oldName2 + internal.config.kubernetes.io/previousNamespaces: default,oldNamespace + name: newName + namespace: newNamespace +`, + }, + } + factory := provider.NewDefaultDepProvider().GetResourceFactory() + for i := range tests { + test := tests[i] + t.Run(i, func(t *testing.T) { + resources, err := factory.SliceFromBytes([]byte(test.input)) + if !assert.NoError(t, err) || len(resources) == 0 { + t.FailNow() + } + r := resources[0] + r.StorePreviousId() + r.SetName(test.newName) + if test.newNs != "" { + r.SetNamespace(test.newNs) + } + bytes, err := r.AsYAML() + if !assert.NoError(t, err) { + t.FailNow() + } + assert.Equal(t, test.expected, string(bytes)) + }) + } +} + +func TestResource_PrevIds(t *testing.T) { + tests := map[string]struct { + input string + expected []resid.ResId + }{ + "no previous IDs": { + input: `apiVersion: apps/v1 +kind: Secret +metadata: + name: name +`, + expected: nil, + }, + + "one previous ID": { + input: `apiVersion: apps/v1 +kind: Secret +metadata: + annotations: + internal.config.kubernetes.io/previousKinds: Secret + internal.config.kubernetes.io/previousNames: oldName + internal.config.kubernetes.io/previousNamespaces: default + name: newName +`, + expected: []resid.ResId{ + { + Gvk: resid.Gvk{Group: "apps", Version: "v1", Kind: "Secret"}, + Name: "oldName", + Namespace: resid.DefaultNamespace, + }, + }, + }, + + "two ids": { + input: `apiVersion: apps/v1 +kind: Secret +metadata: + annotations: + internal.config.kubernetes.io/previousKinds: Secret,Secret + internal.config.kubernetes.io/previousNames: oldName,oldName2 + internal.config.kubernetes.io/previousNamespaces: default,oldNamespace + name: newName + namespace: newNamespace +`, + expected: []resid.ResId{ + { + Gvk: resid.Gvk{Group: "apps", Version: "v1", Kind: "Secret"}, + Name: "oldName", + Namespace: resid.DefaultNamespace, + }, + { + Gvk: resid.Gvk{Group: "apps", Version: "v1", Kind: "Secret"}, + Name: "oldName2", + Namespace: "oldNamespace", + }, + }, + }, + } + factory := provider.NewDefaultDepProvider().GetResourceFactory() + for i := range tests { + test := tests[i] + t.Run(i, func(t *testing.T) { + resources, err := factory.SliceFromBytes([]byte(test.input)) + if !assert.NoError(t, err) || len(resources) == 0 { + t.FailNow() + } + r := resources[0] + assert.Equal(t, test.expected, r.PrevIds()) + }) + } +} + +// baseResource produces a base object which used to test +// patch transformation +// Also the structure is matching the Deployment syntax +// the kind can be replaced to allow testing using CRD +// without access to the schema +func baseResource(kind string) string { + res := ` +apiVersion: apps/v1 +kind: %s +metadata: + name: deploy1 +spec: + template: + metadata: + labels: + old-label: old-value + spec: + containers: + - name: nginx + image: nginx` + return fmt.Sprintf(res, kind) +} + +// addContainerAndEnvPatch produces a patch object which adds +// an entry in the env slice of the first/nginx container +// as well as adding a label in the metadata +// Note that for SMP/WithSchema merge, the name:nginx entry +// is mandatory +func addLabelAndEnvPatch(kind string) string { + return fmt.Sprintf(` +apiVersion: apps/v1 +kind: %s +metadata: + name: deploy1 +spec: + template: + metadata: + labels: + some-label: some-value + spec: + containers: + - name: nginx + env: + - name: SOMEENV + value: SOMEVALUE`, kind) +} + +// addContainerAndEnvPatch produces a patch object which adds +// an entry in the env slice of the first/nginx container +// as well as adding a second container in the container list +// Note that for SMP/WithSchema merge, the name:nginx entry +// is mandatory +func addContainerAndEnvPatch(kind string) string { + return fmt.Sprintf(` +apiVersion: apps/v1 +kind: %s +metadata: + name: deploy1 +spec: + template: + spec: + containers: + - name: nginx + env: + - name: ANOTHERENV + value: ANOTHERVALUE + - name: anothercontainer + image: anotherimage`, kind) +} + +// addContainerAndEnvPatch produces a patch object which replaces +// the value of the image field in the first/nginx container +// Note that for SMP/WithSchema merge, the name:nginx entry +// is mandatory +func changeImagePatch(kind string, newImage string) string { + return fmt.Sprintf(` +apiVersion: apps/v1 +kind: %s +metadata: + name: deploy1 +spec: + template: + spec: + containers: + - name: nginx + image: %s`, kind, newImage) +} + +// utility method to build the expected result of a multipatch +// the order of the patches still have influence especially +// in the insertion location within arrays. +func expectedResultMultiPatch(kind string, reversed bool) string { + pattern := `apiVersion: apps/v1 +kind: %s +metadata: + name: deploy1 +spec: + template: + metadata: + labels: + old-label: old-value + some-label: some-value + spec: + containers: + - env: + %s + image: nginx:latest + name: nginx + - image: anotherimage + name: anothercontainer +` + if reversed { + return fmt.Sprintf(pattern, kind, `- name: SOMEENV + value: SOMEVALUE + - name: ANOTHERENV + value: ANOTHERVALUE`) + } + return fmt.Sprintf(pattern, kind, `- name: ANOTHERENV + value: ANOTHERVALUE + - name: SOMEENV + value: SOMEVALUE`) +} + +// utility method building the expected output of a JMP. +// imagename parameter allows to build a result consistent +// with the JMP behavior which basically overrides the +// entire "containers" list. +func expectedResultJMP(imagename string) string { + if imagename == "" { + return `apiVersion: apps/v1 +kind: myCRD +metadata: + name: deploy1 +spec: + template: + metadata: + labels: + old-label: old-value + some-label: some-value + spec: + containers: + - env: + - name: SOMEENV + value: SOMEVALUE + name: nginx +` + } + return fmt.Sprintf(`apiVersion: apps/v1 +kind: myCRD +metadata: + name: deploy1 +spec: + template: + metadata: + labels: + old-label: old-value + some-label: some-value + spec: + containers: + - image: %s + name: nginx +`, imagename) +} + +func TestSameEndingSubarray(t *testing.T) { + testCases := map[string]struct { + a []string + b []string + expected bool + }{ + "both nil": { + expected: true, + }, + "one nil": { + b: []string{}, + expected: true, + }, + "both empty": { + a: []string{}, + b: []string{}, + expected: true, + }, + "no1": { + a: []string{"a"}, + b: []string{}, + expected: false, + }, + "no2": { + a: []string{"b", "a"}, + b: []string{"b"}, + expected: false, + }, + "yes1": { + a: []string{"a", "b"}, + b: []string{"b"}, + expected: true, + }, + "yes2": { + a: []string{"a", "b", "c"}, + b: []string{"b", "c"}, + expected: true, + }, + "yes3": { + a: []string{"a", "b", "c", "d", "e", "f"}, + b: []string{"f"}, + expected: true, + }, + } + for n := range testCases { + tc := testCases[n] + t.Run(n, func(t *testing.T) { + assert.Equal(t, tc.expected, utils.SameEndingSubSlice(tc.a, tc.b)) + }) + } +} + +func TestGetGvk(t *testing.T) { + r, err := factory.FromBytes([]byte(` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: clown +spec: + numReplicas: 1 +`)) + assert.NoError(t, err) + + gvk := r.GetGvk() + expected := "apps" + actual := gvk.Group + if expected != actual { + t.Fatalf("expected '%s', got '%s'", expected, actual) + } + expected = "v1" + actual = gvk.Version + if expected != actual { + t.Fatalf("expected '%s', got '%s'", expected, actual) + } + expected = "Deployment" + actual = gvk.Kind + if expected != actual { + t.Fatalf("expected '%s', got '%s'", expected, actual) + } +} +func TestSetGvk(t *testing.T) { + r, err := factory.FromBytes([]byte(` +apiVersion: v1 +kind: Deployment +metadata: + name: clown +spec: + numReplicas: 1 +`)) + assert.NoError(t, err) + r.SetGvk(resid.GvkFromString("knd.ver.grp")) + gvk := r.GetGvk() + if expected, actual := "grp", gvk.Group; expected != actual { + t.Fatalf("expected '%s', got '%s'", expected, actual) + } + if expected, actual := "ver", gvk.Version; expected != actual { + t.Fatalf("expected '%s', got '%s'", expected, actual) + } + if expected, actual := "knd", gvk.Kind; expected != actual { + t.Fatalf("expected '%s', got '%s'", expected, actual) + } +} + +func TestRefBy(t *testing.T) { + r, err := factory.FromBytes([]byte(` +apiVersion: v1 +kind: Deployment +metadata: + name: clown +spec: + numReplicas: 1 +`)) + assert.NoError(t, err) + r.AppendRefBy(resid.FromString("knd1.ver1.gr1/name1.ns1")) + assert.Equal(t, r.RNode.MustString(), `apiVersion: v1 +kind: Deployment +metadata: + name: clown + annotations: + internal.config.kubernetes.io/refBy: knd1.ver1.gr1/name1.ns1 +spec: + numReplicas: 1 +`) + assert.Equal(t, r.GetRefBy(), []resid.ResId{resid.FromString("knd1.ver1.gr1/name1.ns1")}) + + r.AppendRefBy(resid.FromString("knd2.ver2.gr2/name2.ns2")) + assert.Equal(t, r.RNode.MustString(), `apiVersion: v1 +kind: Deployment +metadata: + name: clown + annotations: + internal.config.kubernetes.io/refBy: knd1.ver1.gr1/name1.ns1,knd2.ver2.gr2/name2.ns2 +spec: + numReplicas: 1 +`) + assert.Equal(t, r.GetRefBy(), []resid.ResId{ + resid.FromString("knd1.ver1.gr1/name1.ns1"), + resid.FromString("knd2.ver2.gr2/name2.ns2"), + }) +} + +func TestOrigin(t *testing.T) { + r, err := factory.FromBytes([]byte(` +apiVersion: v1 +kind: Deployment +metadata: + name: clown +spec: + numReplicas: 1 +`)) + assert.NoError(t, err) + origin := &resource.Origin{ + Path: "deployment.yaml", + Repo: "github.com/myrepo", + Ref: "master", + } + assert.NoError(t, r.SetOrigin(origin)) + assert.Equal(t, `apiVersion: v1 +kind: Deployment +metadata: + name: clown + annotations: + config.kubernetes.io/origin: | + path: deployment.yaml + repo: github.com/myrepo + ref: master +spec: + numReplicas: 1 +`, r.MustString()) + or, err := r.GetOrigin() + assert.NoError(t, err) + assert.Equal(t, origin, or) +} + +func TestTransformations(t *testing.T) { + r, err := factory.FromBytes([]byte(` +apiVersion: v1 +kind: Deployment +metadata: + name: clown +spec: + numReplicas: 1 +`)) + assert.NoError(t, err) + origin1 := &resource.Origin{ + Repo: "github.com/myrepo", + Ref: "master", + ConfiguredIn: "config.yaml", + ConfiguredBy: kyaml.ResourceIdentifier{ + TypeMeta: kyaml.TypeMeta{ + APIVersion: "builtin", + Kind: "Generator", + }, + NameMeta: kyaml.NameMeta{ + Name: "my-name", + Namespace: "my-namespace", + }, + }, + } + origin2 := &resource.Origin{ + ConfiguredIn: "../base/config.yaml", + ConfiguredBy: kyaml.ResourceIdentifier{ + TypeMeta: kyaml.TypeMeta{ + APIVersion: "builtin", + Kind: "Generator", + }, + NameMeta: kyaml.NameMeta{ + Name: "my-name", + Namespace: "my-namespace", + }, + }, + } + assert.NoError(t, r.AddTransformation(origin1)) + assert.Equal(t, `apiVersion: v1 +kind: Deployment +metadata: + name: clown + annotations: + alpha.config.kubernetes.io/transformations: | + - repo: github.com/myrepo + ref: master + configuredIn: config.yaml + configuredBy: + apiVersion: builtin + kind: Generator + name: my-name + namespace: my-namespace +spec: + numReplicas: 1 +`, r.MustString()) + assert.NoError(t, r.AddTransformation(origin2)) + assert.Equal(t, `apiVersion: v1 +kind: Deployment +metadata: + name: clown + annotations: + alpha.config.kubernetes.io/transformations: | + - repo: github.com/myrepo + ref: master + configuredIn: config.yaml + configuredBy: + apiVersion: builtin + kind: Generator + name: my-name + namespace: my-namespace + - configuredIn: ../base/config.yaml + configuredBy: + apiVersion: builtin + kind: Generator + name: my-name + namespace: my-namespace +spec: + numReplicas: 1 +`, r.MustString()) + transformations, err := r.GetTransformations() + assert.NoError(t, err) + assert.Equal(t, resource.Transformations{origin1, origin2}, transformations) + assert.NoError(t, r.ClearTransformations()) + assert.Equal(t, `apiVersion: v1 +kind: Deployment +metadata: + name: clown +spec: + numReplicas: 1 +`, r.MustString()) +} diff --git a/go/internal/forked/api/resource/resource_test.go b/go/internal/forked/api/resource/resource_test.go new file mode 100644 index 000000000..2b6328082 --- /dev/null +++ b/go/internal/forked/api/resource/resource_test.go @@ -0,0 +1,1556 @@ +// Copyright 2020 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package resource_test + +import ( + "fmt" + "reflect" + "testing" + + "github.com/stretchr/testify/assert" + "sigs.k8s.io/kustomize/api/internal/utils" + "sigs.k8s.io/kustomize/api/provider" + "sigs.k8s.io/kustomize/api/resource" + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/resid" + kyaml "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/yaml" +) + +var factory = provider.NewDefaultDepProvider().GetResourceFactory() + +var testConfigMap = factory.FromMap( + map[string]interface{}{ + "apiVersion": "v1", + "kind": "ConfigMap", + "metadata": map[string]interface{}{ + "name": "winnie", + "namespace": "hundred-acre-wood", + }, + }) + +//nolint:gosec +const configMapAsString = `{"apiVersion":"v1","kind":"ConfigMap","metadata":{"name":"winnie","namespace":"hundred-acre-wood"}}` + +var testDeployment = factory.FromMap( + map[string]interface{}{ + "apiVersion": "apps/v1", + "kind": "Deployment", + "metadata": map[string]interface{}{ + "name": "pooh", + }, + }) + +const deploymentAsString = `{"apiVersion":"apps/v1","kind":"Deployment","metadata":{"name":"pooh"}}` + +func TestAsYAML(t *testing.T) { + expected := `apiVersion: apps/v1 +kind: Deployment +metadata: + name: pooh +` + yaml, err := testDeployment.AsYAML() + if err != nil { + t.Fatal(err) + } + if string(yaml) != expected { + t.Fatalf("--- expected\n%s\n--- got\n%s\n", expected, string(yaml)) + } +} + +func TestResourceString(t *testing.T) { + tests := []struct { + in *resource.Resource + s string + }{ + { + in: testConfigMap, + s: configMapAsString, + }, + { + in: testDeployment, + s: deploymentAsString, + }, + } + for _, test := range tests { + assert.Equal(t, test.in.String(), test.s) + } +} + +func TestResourceId(t *testing.T) { + tests := []struct { + in *resource.Resource + id resid.ResId + }{ + { + in: testConfigMap, + id: resid.NewResIdWithNamespace( + resid.NewGvk("", "v1", "ConfigMap"), + "winnie", "hundred-acre-wood"), + }, + { + in: testDeployment, + id: resid.NewResId( + resid.NewGvk("apps", "v1", "Deployment"), "pooh"), + }, + } + for _, test := range tests { + if test.in.OrgId() != test.id { + t.Fatalf("Expected %v, but got %v\n", test.id, test.in.OrgId()) + } + } +} + +func TestDeepCopy(t *testing.T) { + r := factory.FromMap( + map[string]interface{}{ + "apiVersion": "apps/v1", + "kind": "Deployment", + "metadata": map[string]interface{}{ + "name": "pooh", + }, + }) + r.AppendRefBy(resid.NewResId(resid.Gvk{Group: "somegroup", Kind: "MyKind"}, "random")) + + var1 := types.Var{ + Name: "SERVICE_ONE", + ObjRef: types.Target{ + Gvk: resid.Gvk{Version: "v1", Kind: "Service"}, + Name: "backendOne"}, + } + r.AppendRefVarName(var1) + + cr := r.DeepCopy() + if !reflect.DeepEqual(r, cr) { + t.Errorf("expected %v\nbut got%v", r, cr) + } +} + +func TestApplySmPatch_1(t *testing.T) { + resource, err := factory.FromBytes([]byte(` +apiVersion: apps/v1 +kind: Deployment +metadata: + annotations: + baseAnno: This is a base annotation + labels: + app: mungebot + foo: bar + name: bingo +spec: + replicas: 1 + selector: + matchLabels: + foo: bar + template: + metadata: + labels: + app: mungebot + spec: + containers: + - env: + - name: foo + value: bar + image: nginx + name: nginx + ports: + - containerPort: 80 +`)) + assert.NoError(t, err) + patch, err := factory.FromBytes([]byte(` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: baseprefix-mungebot +spec: + template: + spec: + containers: + - image: nginx + name: nginx + ports: + - containerPort: 777 +`)) + assert.NoError(t, err) + + assert.NoError(t, resource.ApplySmPatch(patch)) + bytes, err := resource.AsYAML() + assert.NoError(t, err) + assert.Equal(t, `apiVersion: apps/v1 +kind: Deployment +metadata: + annotations: + baseAnno: This is a base annotation + labels: + app: mungebot + foo: bar + name: bingo +spec: + replicas: 1 + selector: + matchLabels: + foo: bar + template: + metadata: + labels: + app: mungebot + spec: + containers: + - env: + - name: foo + value: bar + image: nginx + name: nginx + ports: + - containerPort: 777 + - containerPort: 80 +`, string(bytes)) +} + +func TestApplySmPatch_2(t *testing.T) { + resource, err := factory.FromBytes([]byte(` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: my-foo +spec: + bar: + A: X + B: Y +`)) + assert.NoError(t, err) + patch, err := factory.FromBytes([]byte(` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: my-foo +spec: + bar: + B: + C: Z + D: W + baz: + hello: world +`)) + assert.NoError(t, err) + assert.NoError(t, resource.ApplySmPatch(patch)) + bytes, err := resource.AsYAML() + assert.NoError(t, err) + assert.Equal(t, `apiVersion: example.com/v1 +kind: Foo +metadata: + name: my-foo +spec: + bar: + A: X + C: Z + D: W + baz: + hello: world +`, string(bytes)) +} + +func TestApplySmPatch_3(t *testing.T) { + resource, err := factory.FromBytes([]byte(` +apiVersion: v1 +kind: Deployment +metadata: + name: clown +spec: + numReplicas: 1 +`)) + assert.NoError(t, err) + patch, err := factory.FromBytes([]byte(` +apiVersion: v1 +kind: Deployment +metadata: + name: clown +spec: + numReplicas: 999 +`)) + assert.NoError(t, err) + assert.NoError(t, resource.ApplySmPatch(patch)) + bytes, err := resource.AsYAML() + assert.NoError(t, err) + assert.Equal(t, `apiVersion: v1 +kind: Deployment +metadata: + name: clown +spec: + numReplicas: 999 +`, string(bytes)) +} + +func TestApplySmPatchShouldOutputListItemsInCorrectOrder(t *testing.T) { + cases := []struct { + name string + skip bool + patch string + expectedOutput string + }{ + { + name: "Order should not change when patch has foo only", + patch: `apiVersion: v1 +kind: Pod +metadata: + name: test +spec: + initContainers: + - name: foo +`, + expectedOutput: `apiVersion: v1 +kind: Pod +metadata: + name: test +spec: + initContainers: + - name: foo + - name: bar +`, + }, + { + name: "Order changes when patch has bar only", + patch: `apiVersion: v1 +kind: Pod +metadata: + name: test +spec: + initContainers: + - name: bar +`, + // This test records current behavior, but this behavior might be undesirable. + // If so, feel free to change the test to pass with some improved algorithm. + expectedOutput: `apiVersion: v1 +kind: Pod +metadata: + name: test +spec: + initContainers: + - name: bar + - name: foo +`, + }, + { + name: "Order should not change and should include a new item at the beginning when patch has a new list item", + patch: `apiVersion: v1 +kind: Pod +metadata: + name: test +spec: + initContainers: + - name: baz +`, + expectedOutput: `apiVersion: v1 +kind: Pod +metadata: + name: test +spec: + initContainers: + - name: baz + - name: foo + - name: bar +`, + }, + { + name: "Order should not change when patch has foo and bar in same order", + patch: `apiVersion: v1 +kind: Pod +metadata: + name: test +spec: + initContainers: + - name: foo + - name: bar +`, + expectedOutput: `apiVersion: v1 +kind: Pod +metadata: + name: test +spec: + initContainers: + - name: foo + - name: bar +`, + }, + { + name: "Order should change when patch has foo and bar in different order", + patch: `apiVersion: v1 +kind: Pod +metadata: + name: test +spec: + initContainers: + - name: bar + - name: foo +`, + expectedOutput: `apiVersion: v1 +kind: Pod +metadata: + name: test +spec: + initContainers: + - name: bar + - name: foo +`, + }, + } + for _, tc := range cases { + t.Run(tc.name, func(t *testing.T) { + if tc.skip { + t.Skip() + } + + resource, err := factory.FromBytes([]byte(` +apiVersion: v1 +kind: Pod +metadata: + name: test +spec: + initContainers: + - name: foo + - name: bar +`)) + assert.NoError(t, err) + + patch, err := factory.FromBytes([]byte(tc.patch)) + assert.NoError(t, err) + assert.NoError(t, resource.ApplySmPatch(patch)) + bytes, err := resource.AsYAML() + assert.NoError(t, err) + assert.Equal(t, tc.expectedOutput, string(bytes)) + }) + } +} + +func TestApplySmPatchShouldOutputPrimitiveListItemsInCorrectOrder(t *testing.T) { + cases := []struct { + name string + skip bool + patch string + expectedOutput string + }{ + { + name: "Order should not change when patch has foo only", + patch: `apiVersion: v1 +kind: Pod +metadata: + name: test + finalizers: ["foo"] +`, + expectedOutput: `apiVersion: v1 +kind: Pod +metadata: + finalizers: + - foo + - bar + name: test +`, + }, + { + name: "Order should not change when patch has bar only", + skip: true, // TODO: This test should pass but fails currently. Fix the problem and unskip this test + patch: `apiVersion: v1 +kind: Pod +metadata: + name: test + finalizers: ["bar"] +`, + expectedOutput: `apiVersion: v1 +kind: Pod +metadata: + finalizers: + - foo + - bar + name: test +`, + }, + { + name: "Order should not change and should include a new item at the beginning when patch has a new list item", + patch: `apiVersion: v1 +kind: Pod +metadata: + name: test + finalizers: ["baz"] +`, + expectedOutput: `apiVersion: v1 +kind: Pod +metadata: + finalizers: + - baz + - foo + - bar + name: test +`, + }, + { + name: "Order should not change when patch has foo and bar in same order", + patch: `apiVersion: v1 +kind: Pod +metadata: + name: test + finalizers: ["foo", "bar"] +`, + expectedOutput: `apiVersion: v1 +kind: Pod +metadata: + finalizers: + - foo + - bar + name: test +`, + }, + { + name: "Order should change when patch has foo and bar in different order", + patch: `apiVersion: v1 +kind: Pod +metadata: + name: test + finalizers: ["bar", "foo"] +`, + expectedOutput: `apiVersion: v1 +kind: Pod +metadata: + finalizers: + - bar + - foo + name: test +`, + }, + } + for _, tc := range cases { + t.Run(tc.name, func(t *testing.T) { + if tc.skip { + t.Skip() + } + + resource, err := factory.FromBytes([]byte(` +kind: Pod +metadata: + name: test + finalizers: ["foo", "bar"] +`)) + assert.NoError(t, err) + + patch, err := factory.FromBytes([]byte(tc.patch)) + assert.NoError(t, err) + assert.NoError(t, resource.ApplySmPatch(patch)) + bytes, err := resource.AsYAML() + assert.NoError(t, err) + assert.Equal(t, tc.expectedOutput, string(bytes)) + }) + } +} + +func TestMergeDataMapFrom(t *testing.T) { + resource, err := factory.FromBytes([]byte(` +apiVersion: v1 +kind: BlahBlah +metadata: + name: clown +data: + fruit: pear +`)) + if !assert.NoError(t, err) { + t.FailNow() + } + patch, err := factory.FromBytes([]byte(` +apiVersion: v1 +kind: Whatever +metadata: + name: spaceship +data: + spaceship: enterprise +`)) + if !assert.NoError(t, err) { + t.FailNow() + } + resource.MergeDataMapFrom(patch) + bytes, err := resource.AsYAML() + assert.NoError(t, err) + assert.Equal(t, `apiVersion: v1 +data: + fruit: pear + spaceship: enterprise +kind: BlahBlah +metadata: + name: clown +`, string(bytes)) +} + +func TestApplySmPatch_SwapOrder(t *testing.T) { + s1 := ` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: my-foo +spec: + bar: + B: + C: Z +` + s2 := ` +apiVersion: example.com/v1 +kind: Foo +metadata: + name: my-foo +spec: + bar: + C: Z + D: W + baz: + hello: world +` + expected := `apiVersion: example.com/v1 +kind: Foo +metadata: + name: my-foo +spec: + bar: + C: Z + D: W + baz: + hello: world +` + r1, err := factory.FromBytes([]byte(s1)) + assert.NoError(t, err) + r2, err := factory.FromBytes([]byte(s2)) + assert.NoError(t, err) + assert.NoError(t, r1.ApplySmPatch(r2)) + bytes, err := r1.AsYAML() + assert.NoError(t, err) + assert.Equal(t, expected, string(bytes)) + + r1, _ = factory.FromBytes([]byte(s1)) + r2, _ = factory.FromBytes([]byte(s2)) + assert.NoError(t, r2.ApplySmPatch(r1)) + bytes, err = r2.AsYAML() + assert.NoError(t, err) + assert.Equal(t, expected, string(bytes)) +} + +func TestApplySmPatch(t *testing.T) { + const ( + myDeployment = "Deployment" + myCRD = "myCRD" + ) + + tests := map[string]struct { + base string + patch []string + expected string + errorExpected bool + errorMsg string + }{ + "withschema-label-image-container": { + base: baseResource(myDeployment), + patch: []string{ + addLabelAndEnvPatch(myDeployment), + changeImagePatch(myDeployment, "nginx:latest"), + addContainerAndEnvPatch(myDeployment), + }, + errorExpected: false, + expected: expectedResultMultiPatch(myDeployment, false), + }, + "withschema-image-container-label": { + base: baseResource(myDeployment), + patch: []string{ + changeImagePatch(myDeployment, "nginx:latest"), + addContainerAndEnvPatch(myDeployment), + addLabelAndEnvPatch(myDeployment), + }, + errorExpected: false, + expected: expectedResultMultiPatch(myDeployment, true), + }, + "withschema-container-label-image": { + base: baseResource(myDeployment), + patch: []string{ + addContainerAndEnvPatch(myDeployment), + addLabelAndEnvPatch(myDeployment), + changeImagePatch(myDeployment, "nginx:latest"), + }, + errorExpected: false, + expected: expectedResultMultiPatch(myDeployment, true), + }, + "noschema-label-image-container": { + base: baseResource(myCRD), + patch: []string{ + addLabelAndEnvPatch(myCRD), + changeImagePatch(myCRD, "nginx:latest"), + addContainerAndEnvPatch(myCRD), + }, + // Might be better if this complained about patch conflict. + // See plugin/builtin/patchstrategicmergetransformer/psmt_test.go + expected: `apiVersion: apps/v1 +kind: myCRD +metadata: + name: deploy1 +spec: + template: + metadata: + labels: + old-label: old-value + some-label: some-value + spec: + containers: + - env: + - name: ANOTHERENV + value: ANOTHERVALUE + name: nginx + - image: anotherimage + name: anothercontainer +`, + }, + "noschema-image-container-label": { + base: baseResource(myCRD), + patch: []string{ + changeImagePatch(myCRD, "nginx:latest"), + addContainerAndEnvPatch(myCRD), + addLabelAndEnvPatch(myCRD), + }, + // Might be better if this complained about patch conflict. + expected: `apiVersion: apps/v1 +kind: myCRD +metadata: + name: deploy1 +spec: + template: + metadata: + labels: + old-label: old-value + some-label: some-value + spec: + containers: + - env: + - name: SOMEENV + value: SOMEVALUE + name: nginx +`, + }, + "noschema-container-label-image": { + base: baseResource(myCRD), + patch: []string{ + addContainerAndEnvPatch(myCRD), + addLabelAndEnvPatch(myCRD), + changeImagePatch(myCRD, "nginx:latest"), + }, + // Might be better if this complained about patch conflict. + expected: `apiVersion: apps/v1 +kind: myCRD +metadata: + name: deploy1 +spec: + template: + metadata: + labels: + old-label: old-value + some-label: some-value + spec: + containers: + - image: nginx:latest + name: nginx +`, + }, + + "withschema-label-latest-someV-01": { + base: baseResource(myDeployment), + patch: []string{ + addLabelAndEnvPatch(myDeployment), + changeImagePatch(myDeployment, "nginx:latest"), + changeImagePatch(myDeployment, "nginx:1.7.9"), + }, + expected: `apiVersion: apps/v1 +kind: Deployment +metadata: + name: deploy1 +spec: + template: + metadata: + labels: + old-label: old-value + some-label: some-value + spec: + containers: + - env: + - name: SOMEENV + value: SOMEVALUE + image: nginx:1.7.9 + name: nginx +`, + }, + "withschema-latest-label-someV-02": { + base: baseResource(myDeployment), + patch: []string{ + changeImagePatch(myDeployment, "nginx:latest"), + addLabelAndEnvPatch(myDeployment), + changeImagePatch(myDeployment, "nginx:1.7.9"), + }, + expected: `apiVersion: apps/v1 +kind: Deployment +metadata: + name: deploy1 +spec: + template: + metadata: + labels: + old-label: old-value + some-label: some-value + spec: + containers: + - env: + - name: SOMEENV + value: SOMEVALUE + image: nginx:1.7.9 + name: nginx +`, + }, + "withschema-latest-label-someV-03": { + base: baseResource(myDeployment), + patch: []string{ + changeImagePatch(myDeployment, "nginx:1.7.9"), + addLabelAndEnvPatch(myDeployment), + changeImagePatch(myDeployment, "nginx:latest"), + }, + expected: `apiVersion: apps/v1 +kind: Deployment +metadata: + name: deploy1 +spec: + template: + metadata: + labels: + old-label: old-value + some-label: some-value + spec: + containers: + - env: + - name: SOMEENV + value: SOMEVALUE + image: nginx:latest + name: nginx +`, + }, + "withschema-latest-label-someV-04": { + base: baseResource(myDeployment), + patch: []string{ + changeImagePatch(myDeployment, "nginx:1.7.9"), + changeImagePatch(myDeployment, "nginx:latest"), + addLabelAndEnvPatch(myDeployment), + changeImagePatch(myDeployment, "nginx:nginx"), + }, + expected: `apiVersion: apps/v1 +kind: Deployment +metadata: + name: deploy1 +spec: + template: + metadata: + labels: + old-label: old-value + some-label: some-value + spec: + containers: + - env: + - name: SOMEENV + value: SOMEVALUE + image: nginx:nginx + name: nginx +`, + }, + "noschema-latest-label-someV-01": { + base: baseResource(myCRD), + patch: []string{ + addLabelAndEnvPatch(myCRD), + changeImagePatch(myCRD, "nginx:latest"), + changeImagePatch(myCRD, "nginx:1.7.9"), + }, + expected: `apiVersion: apps/v1 +kind: myCRD +metadata: + name: deploy1 +spec: + template: + metadata: + labels: + old-label: old-value + some-label: some-value + spec: + containers: + - image: nginx:1.7.9 + name: nginx +`, + }, + "noschema-latest-label-someV-02": { + base: baseResource(myCRD), + patch: []string{ + changeImagePatch(myCRD, "nginx:latest"), + addLabelAndEnvPatch(myCRD), + changeImagePatch(myCRD, "nginx:1.7.9"), + }, + expected: expectedResultJMP("nginx:1.7.9"), + }, + "noschema-latest-label-someV-03": { + base: baseResource(myCRD), + patch: []string{ + changeImagePatch(myCRD, "nginx:1.7.9"), + addLabelAndEnvPatch(myCRD), + changeImagePatch(myCRD, "nginx:latest"), + }, + expected: `apiVersion: apps/v1 +kind: myCRD +metadata: + name: deploy1 +spec: + template: + metadata: + labels: + old-label: old-value + some-label: some-value + spec: + containers: + - image: nginx:latest + name: nginx +`, + }, + "noschema-latest-label-someV-04": { + base: baseResource(myCRD), + patch: []string{ + changeImagePatch(myCRD, "nginx:1.7.9"), + changeImagePatch(myCRD, "nginx:latest"), + addLabelAndEnvPatch(myCRD), + changeImagePatch(myCRD, "nginx:nginx"), + }, + expected: `apiVersion: apps/v1 +kind: myCRD +metadata: + name: deploy1 +spec: + template: + metadata: + labels: + old-label: old-value + some-label: some-value + spec: + containers: + - image: nginx:nginx + name: nginx +`, + }, + } + + for name, test := range tests { + resource, err := factory.FromBytes([]byte(test.base)) + assert.NoError(t, err) + for _, p := range test.patch { + patch, err := factory.FromBytes([]byte(p)) + assert.NoError(t, err, name) + assert.NoError(t, resource.ApplySmPatch(patch), name) + } + bytes, err := resource.AsYAML() + if test.errorExpected { + assert.Error(t, err, name) + } else { + assert.NoError(t, err, name) + assert.Equal(t, test.expected, string(bytes), name) + } + } +} + +func TestResourceStorePreviousId(t *testing.T) { + tests := map[string]struct { + input string + newName string + newNs string + expected string + }{ + "default namespace, first previous name": { + input: `apiVersion: apps/v1 +kind: Secret +metadata: + name: oldName +`, + newName: "newName", + newNs: "", + expected: `apiVersion: apps/v1 +kind: Secret +metadata: + annotations: + internal.config.kubernetes.io/previousKinds: Secret + internal.config.kubernetes.io/previousNames: oldName + internal.config.kubernetes.io/previousNamespaces: default + name: newName +`, + }, + + "default namespace, second previous name": { + input: `apiVersion: apps/v1 +kind: Secret +metadata: + annotations: + internal.config.kubernetes.io/previousKinds: Secret + internal.config.kubernetes.io/previousNames: oldName + internal.config.kubernetes.io/previousNamespaces: default + name: oldName2 +`, + newName: "newName", + newNs: "", + expected: `apiVersion: apps/v1 +kind: Secret +metadata: + annotations: + internal.config.kubernetes.io/previousKinds: Secret,Secret + internal.config.kubernetes.io/previousNames: oldName,oldName2 + internal.config.kubernetes.io/previousNamespaces: default,default + name: newName +`, + }, + + "non-default namespace": { + input: `apiVersion: apps/v1 +kind: Secret +metadata: + annotations: + internal.config.kubernetes.io/previousKinds: Secret + internal.config.kubernetes.io/previousNames: oldName + internal.config.kubernetes.io/previousNamespaces: default + name: oldName2 + namespace: oldNamespace +`, + newName: "newName", + newNs: "newNamespace", + expected: `apiVersion: apps/v1 +kind: Secret +metadata: + annotations: + internal.config.kubernetes.io/previousKinds: Secret,Secret + internal.config.kubernetes.io/previousNames: oldName,oldName2 + internal.config.kubernetes.io/previousNamespaces: default,oldNamespace + name: newName + namespace: newNamespace +`, + }, + } + factory := provider.NewDefaultDepProvider().GetResourceFactory() + for i := range tests { + test := tests[i] + t.Run(i, func(t *testing.T) { + resources, err := factory.SliceFromBytes([]byte(test.input)) + if !assert.NoError(t, err) || len(resources) == 0 { + t.FailNow() + } + r := resources[0] + r.StorePreviousId() + r.SetName(test.newName) + if test.newNs != "" { + r.SetNamespace(test.newNs) + } + bytes, err := r.AsYAML() + if !assert.NoError(t, err) { + t.FailNow() + } + assert.Equal(t, test.expected, string(bytes)) + }) + } +} + +func TestResource_PrevIds(t *testing.T) { + tests := map[string]struct { + input string + expected []resid.ResId + }{ + "no previous IDs": { + input: `apiVersion: apps/v1 +kind: Secret +metadata: + name: name +`, + expected: nil, + }, + + "one previous ID": { + input: `apiVersion: apps/v1 +kind: Secret +metadata: + annotations: + internal.config.kubernetes.io/previousKinds: Secret + internal.config.kubernetes.io/previousNames: oldName + internal.config.kubernetes.io/previousNamespaces: default + name: newName +`, + expected: []resid.ResId{ + { + Gvk: resid.Gvk{Group: "apps", Version: "v1", Kind: "Secret"}, + Name: "oldName", + Namespace: resid.DefaultNamespace, + }, + }, + }, + + "two ids": { + input: `apiVersion: apps/v1 +kind: Secret +metadata: + annotations: + internal.config.kubernetes.io/previousKinds: Secret,Secret + internal.config.kubernetes.io/previousNames: oldName,oldName2 + internal.config.kubernetes.io/previousNamespaces: default,oldNamespace + name: newName + namespace: newNamespace +`, + expected: []resid.ResId{ + { + Gvk: resid.Gvk{Group: "apps", Version: "v1", Kind: "Secret"}, + Name: "oldName", + Namespace: resid.DefaultNamespace, + }, + { + Gvk: resid.Gvk{Group: "apps", Version: "v1", Kind: "Secret"}, + Name: "oldName2", + Namespace: "oldNamespace", + }, + }, + }, + } + factory := provider.NewDefaultDepProvider().GetResourceFactory() + for i := range tests { + test := tests[i] + t.Run(i, func(t *testing.T) { + resources, err := factory.SliceFromBytes([]byte(test.input)) + if !assert.NoError(t, err) || len(resources) == 0 { + t.FailNow() + } + r := resources[0] + assert.Equal(t, test.expected, r.PrevIds()) + }) + } +} + +// baseResource produces a base object which used to test +// patch transformation +// Also the structure is matching the Deployment syntax +// the kind can be replaced to allow testing using CRD +// without access to the schema +func baseResource(kind string) string { + res := ` +apiVersion: apps/v1 +kind: %s +metadata: + name: deploy1 +spec: + template: + metadata: + labels: + old-label: old-value + spec: + containers: + - name: nginx + image: nginx` + return fmt.Sprintf(res, kind) +} + +// addContainerAndEnvPatch produces a patch object which adds +// an entry in the env slice of the first/nginx container +// as well as adding a label in the metadata +// Note that for SMP/WithSchema merge, the name:nginx entry +// is mandatory +func addLabelAndEnvPatch(kind string) string { + return fmt.Sprintf(` +apiVersion: apps/v1 +kind: %s +metadata: + name: deploy1 +spec: + template: + metadata: + labels: + some-label: some-value + spec: + containers: + - name: nginx + env: + - name: SOMEENV + value: SOMEVALUE`, kind) +} + +// addContainerAndEnvPatch produces a patch object which adds +// an entry in the env slice of the first/nginx container +// as well as adding a second container in the container list +// Note that for SMP/WithSchema merge, the name:nginx entry +// is mandatory +func addContainerAndEnvPatch(kind string) string { + return fmt.Sprintf(` +apiVersion: apps/v1 +kind: %s +metadata: + name: deploy1 +spec: + template: + spec: + containers: + - name: nginx + env: + - name: ANOTHERENV + value: ANOTHERVALUE + - name: anothercontainer + image: anotherimage`, kind) +} + +// addContainerAndEnvPatch produces a patch object which replaces +// the value of the image field in the first/nginx container +// Note that for SMP/WithSchema merge, the name:nginx entry +// is mandatory +func changeImagePatch(kind string, newImage string) string { + return fmt.Sprintf(` +apiVersion: apps/v1 +kind: %s +metadata: + name: deploy1 +spec: + template: + spec: + containers: + - name: nginx + image: %s`, kind, newImage) +} + +// utility method to build the expected result of a multipatch +// the order of the patches still have influence especially +// in the insertion location within arrays. +func expectedResultMultiPatch(kind string, reversed bool) string { + pattern := `apiVersion: apps/v1 +kind: %s +metadata: + name: deploy1 +spec: + template: + metadata: + labels: + old-label: old-value + some-label: some-value + spec: + containers: + - env: + %s + image: nginx:latest + name: nginx + - image: anotherimage + name: anothercontainer +` + if reversed { + return fmt.Sprintf(pattern, kind, `- name: SOMEENV + value: SOMEVALUE + - name: ANOTHERENV + value: ANOTHERVALUE`) + } + return fmt.Sprintf(pattern, kind, `- name: ANOTHERENV + value: ANOTHERVALUE + - name: SOMEENV + value: SOMEVALUE`) +} + +// utility method building the expected output of a JMP. +// imagename parameter allows to build a result consistent +// with the JMP behavior which basically overrides the +// entire "containers" list. +func expectedResultJMP(imagename string) string { + if imagename == "" { + return `apiVersion: apps/v1 +kind: myCRD +metadata: + name: deploy1 +spec: + template: + metadata: + labels: + old-label: old-value + some-label: some-value + spec: + containers: + - env: + - name: SOMEENV + value: SOMEVALUE + name: nginx +` + } + return fmt.Sprintf(`apiVersion: apps/v1 +kind: myCRD +metadata: + name: deploy1 +spec: + template: + metadata: + labels: + old-label: old-value + some-label: some-value + spec: + containers: + - image: %s + name: nginx +`, imagename) +} + +func TestSameEndingSubarray(t *testing.T) { + testCases := map[string]struct { + a []string + b []string + expected bool + }{ + "both nil": { + expected: true, + }, + "one nil": { + b: []string{}, + expected: true, + }, + "both empty": { + a: []string{}, + b: []string{}, + expected: true, + }, + "no1": { + a: []string{"a"}, + b: []string{}, + expected: false, + }, + "no2": { + a: []string{"b", "a"}, + b: []string{"b"}, + expected: false, + }, + "yes1": { + a: []string{"a", "b"}, + b: []string{"b"}, + expected: true, + }, + "yes2": { + a: []string{"a", "b", "c"}, + b: []string{"b", "c"}, + expected: true, + }, + "yes3": { + a: []string{"a", "b", "c", "d", "e", "f"}, + b: []string{"f"}, + expected: true, + }, + } + for n := range testCases { + tc := testCases[n] + t.Run(n, func(t *testing.T) { + assert.Equal(t, tc.expected, utils.SameEndingSubSlice(tc.a, tc.b)) + }) + } +} + +func TestGetGvk(t *testing.T) { + r, err := factory.FromBytes([]byte(` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: clown +spec: + numReplicas: 1 +`)) + assert.NoError(t, err) + + gvk := r.GetGvk() + expected := "apps" + actual := gvk.Group + if expected != actual { + t.Fatalf("expected '%s', got '%s'", expected, actual) + } + expected = "v1" + actual = gvk.Version + if expected != actual { + t.Fatalf("expected '%s', got '%s'", expected, actual) + } + expected = "Deployment" + actual = gvk.Kind + if expected != actual { + t.Fatalf("expected '%s', got '%s'", expected, actual) + } +} +func TestSetGvk(t *testing.T) { + r, err := factory.FromBytes([]byte(` +apiVersion: v1 +kind: Deployment +metadata: + name: clown +spec: + numReplicas: 1 +`)) + assert.NoError(t, err) + r.SetGvk(resid.GvkFromString("knd.ver.grp")) + gvk := r.GetGvk() + if expected, actual := "grp", gvk.Group; expected != actual { + t.Fatalf("expected '%s', got '%s'", expected, actual) + } + if expected, actual := "ver", gvk.Version; expected != actual { + t.Fatalf("expected '%s', got '%s'", expected, actual) + } + if expected, actual := "knd", gvk.Kind; expected != actual { + t.Fatalf("expected '%s', got '%s'", expected, actual) + } +} + +func TestRefBy(t *testing.T) { + r, err := factory.FromBytes([]byte(` +apiVersion: v1 +kind: Deployment +metadata: + name: clown +spec: + numReplicas: 1 +`)) + assert.NoError(t, err) + r.AppendRefBy(resid.FromString("knd1.ver1.gr1/name1.ns1")) + assert.Equal(t, r.RNode.MustString(), `apiVersion: v1 +kind: Deployment +metadata: + name: clown + annotations: + internal.config.kubernetes.io/refBy: knd1.ver1.gr1/name1.ns1 +spec: + numReplicas: 1 +`) + assert.Equal(t, r.GetRefBy(), []resid.ResId{resid.FromString("knd1.ver1.gr1/name1.ns1")}) + + r.AppendRefBy(resid.FromString("knd2.ver2.gr2/name2.ns2")) + assert.Equal(t, r.RNode.MustString(), `apiVersion: v1 +kind: Deployment +metadata: + name: clown + annotations: + internal.config.kubernetes.io/refBy: knd1.ver1.gr1/name1.ns1,knd2.ver2.gr2/name2.ns2 +spec: + numReplicas: 1 +`) + assert.Equal(t, r.GetRefBy(), []resid.ResId{ + resid.FromString("knd1.ver1.gr1/name1.ns1"), + resid.FromString("knd2.ver2.gr2/name2.ns2"), + }) +} + +func TestOrigin(t *testing.T) { + r, err := factory.FromBytes([]byte(` +apiVersion: v1 +kind: Deployment +metadata: + name: clown +spec: + numReplicas: 1 +`)) + assert.NoError(t, err) + origin := &resource.Origin{ + Path: "deployment.yaml", + Repo: "github.com/myrepo", + Ref: "master", + } + assert.NoError(t, r.SetOrigin(origin)) + assert.Equal(t, `apiVersion: v1 +kind: Deployment +metadata: + name: clown + annotations: + config.kubernetes.io/origin: | + path: deployment.yaml + repo: github.com/myrepo + ref: master +spec: + numReplicas: 1 +`, r.MustString()) + or, err := r.GetOrigin() + assert.NoError(t, err) + assert.Equal(t, origin, or) +} + +func TestTransformations(t *testing.T) { + r, err := factory.FromBytes([]byte(` +apiVersion: v1 +kind: Deployment +metadata: + name: clown +spec: + numReplicas: 1 +`)) + assert.NoError(t, err) + origin1 := &resource.Origin{ + Repo: "github.com/myrepo", + Ref: "master", + ConfiguredIn: "config.yaml", + ConfiguredBy: kyaml.ResourceIdentifier{ + TypeMeta: kyaml.TypeMeta{ + APIVersion: "builtin", + Kind: "Generator", + }, + NameMeta: kyaml.NameMeta{ + Name: "my-name", + Namespace: "my-namespace", + }, + }, + } + origin2 := &resource.Origin{ + ConfiguredIn: "../base/config.yaml", + ConfiguredBy: kyaml.ResourceIdentifier{ + TypeMeta: kyaml.TypeMeta{ + APIVersion: "builtin", + Kind: "Generator", + }, + NameMeta: kyaml.NameMeta{ + Name: "my-name", + Namespace: "my-namespace", + }, + }, + } + assert.NoError(t, r.AddTransformation(origin1)) + assert.Equal(t, `apiVersion: v1 +kind: Deployment +metadata: + name: clown + annotations: + alpha.config.kubernetes.io/transformations: | + - repo: github.com/myrepo + ref: master + configuredIn: config.yaml + configuredBy: + apiVersion: builtin + kind: Generator + name: my-name + namespace: my-namespace +spec: + numReplicas: 1 +`, r.MustString()) + assert.NoError(t, r.AddTransformation(origin2)) + assert.Equal(t, `apiVersion: v1 +kind: Deployment +metadata: + name: clown + annotations: + alpha.config.kubernetes.io/transformations: | + - repo: github.com/myrepo + ref: master + configuredIn: config.yaml + configuredBy: + apiVersion: builtin + kind: Generator + name: my-name + namespace: my-namespace + - configuredIn: ../base/config.yaml + configuredBy: + apiVersion: builtin + kind: Generator + name: my-name + namespace: my-namespace +spec: + numReplicas: 1 +`, r.MustString()) + transformations, err := r.GetTransformations() + assert.NoError(t, err) + assert.Equal(t, resource.Transformations{origin1, origin2}, transformations) + assert.NoError(t, r.ClearTransformations()) + assert.Equal(t, `apiVersion: v1 +kind: Deployment +metadata: + name: clown +spec: + numReplicas: 1 +`, r.MustString()) +} diff --git a/go/internal/forked/api/testutils/filtertest/runfilter.go b/go/internal/forked/api/testutils/filtertest/runfilter.go new file mode 100644 index 000000000..a7e594f6d --- /dev/null +++ b/go/internal/forked/api/testutils/filtertest/runfilter.go @@ -0,0 +1,48 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package filtertest_test + +import ( + "bytes" + "testing" + + "github.com/stretchr/testify/assert" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/kio" +) + +func run(input string, f kio.Filter) (string, error) { + var out bytes.Buffer + rw := kio.ByteReadWriter{ + Reader: bytes.NewBufferString(input), + Writer: &out, + } + + err := kio.Pipeline{ + Inputs: []kio.Reader{&rw}, + Filters: []kio.Filter{f}, + Outputs: []kio.Writer{&rw}, + }.Execute() + if err != nil { + return "", err + } + return out.String(), nil +} + +// RunFilter runs filter and panic if there is error +func RunFilter(t *testing.T, input string, f kio.Filter) string { + output, err := run(input, f) + if !assert.NoError(t, err) { + t.FailNow() + } + return output +} + +// RunFilterE runs filter and return error if there is +func RunFilterE(t *testing.T, input string, f kio.Filter) (string, error) { + output, err := run(input, f) + if err != nil { + return "", err + } + return output, nil +} diff --git a/go/internal/forked/api/testutils/filtertest/runfilter.go b/go/internal/forked/api/testutils/filtertest/runfilter.go new file mode 100644 index 000000000..9cf060694 --- /dev/null +++ b/go/internal/forked/api/testutils/filtertest/runfilter.go @@ -0,0 +1,48 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package filtertest_test + +import ( + "bytes" + "testing" + + "github.com/stretchr/testify/assert" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/kio" +) + +func run(input string, f kio.Filter) (string, error) { + var out bytes.Buffer + rw := kio.ByteReadWriter{ + Reader: bytes.NewBufferString(input), + Writer: &out, + } + + err := kio.Pipeline{ + Inputs: []kio.Reader{&rw}, + Filters: []kio.Filter{f}, + Outputs: []kio.Writer{&rw}, + }.Execute() + if err != nil { + return "", err + } + return out.String(), nil +} + +// RunFilter runs filter and panic if there is error +func RunFilter(t *testing.T, input string, f kio.Filter) string { + output, err := run(input, f) + if !assert.NoError(t, err) { + t.FailNow() + } + return output +} + +// RunFilterE runs filter and return error if there is +func RunFilterE(t *testing.T, input string, f kio.Filter) (string, error) { + output, err := run(input, f) + if err != nil { + return "", err + } + return output, nil +} diff --git a/go/internal/forked/api/testutils/kusttest/harness.go b/go/internal/forked/api/testutils/kusttest/harness.go new file mode 100644 index 000000000..c8780d4ed --- /dev/null +++ b/go/internal/forked/api/testutils/kusttest/harness.go @@ -0,0 +1,137 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package kusttest_test + +import ( + "path/filepath" + "testing" + + "sigs.k8s.io/kustomize/api/konfig" + "sigs.k8s.io/kustomize/api/konfig/builtinpluginconsts" + "sigs.k8s.io/kustomize/api/krusty" + "sigs.k8s.io/kustomize/api/resmap" + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/filesys" +) + +// Harness manages a test environment. +type Harness struct { + t *testing.T + fSys filesys.FileSystem +} + +func MakeHarness(t *testing.T) Harness { + return MakeHarnessWithFs(t, filesys.MakeFsInMemory()) +} + +func MakeHarnessWithFs( + t *testing.T, fSys filesys.FileSystem) Harness { + return Harness{ + t: t, + fSys: fSys, + } +} + +func (th Harness) GetT() *testing.T { + return th.t +} + +func (th Harness) GetFSys() filesys.FileSystem { + return th.fSys +} + +func (th Harness) WriteK(path string, content string) { + err := th.fSys.WriteFile( + filepath.Join( + path, + konfig.DefaultKustomizationFileName()), []byte(` +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization +`+content)) + if err != nil { + th.t.Fatalf("unexpected error while writing Kustomization to %s: %v", path, err) + } +} + +func (th Harness) WriteC(path string, content string) { + err := th.fSys.WriteFile( + filepath.Join( + path, + konfig.DefaultKustomizationFileName()), []byte(` +apiVersion: kustomize.config.k8s.io/v1alpha1 +kind: Component +`+content)) + if err != nil { + th.t.Fatalf("unexpected error while writing Component to %s: %v", path, err) + } +} + +func (th Harness) WriteF(path string, content string) { + err := th.fSys.WriteFile(path, []byte(content)) + if err != nil { + th.t.Fatalf("unexpected error while writing file to %s: %v", path, err) + } +} + +func (th Harness) MakeDefaultOptions() krusty.Options { + return th.MakeOptionsPluginsDisabled() +} + +// This has no impact on Builtin plugins, as they are always enabled. +func (th Harness) MakeOptionsPluginsDisabled() krusty.Options { + return *krusty.MakeDefaultOptions() +} + +// Enables use of non-builtin plugins. +func (th Harness) MakeOptionsPluginsEnabled() krusty.Options { + pc := types.EnabledPluginConfig(types.BploLoadFromFileSys) + o := *krusty.MakeDefaultOptions() + o.PluginConfig = pc + return o +} + +// Run, failing on error. +func (th Harness) Run(path string, o krusty.Options) resmap.ResMap { + m, err := krusty.MakeKustomizer(&o).Run(th.fSys, path) + if err != nil { + th.t.Fatal(err) + } + return m +} + +// Run, failing if there is no error. +func (th Harness) RunWithErr(path string, o krusty.Options) error { + _, err := krusty.MakeKustomizer(&o).Run(th.fSys, path) + if err == nil { + th.t.Fatalf("expected error") + } + return err +} + +func (th Harness) WriteLegacyConfigs(fName string) { + m := builtinpluginconsts.GetDefaultFieldSpecsAsMap() + var content []byte + for _, tCfg := range m { + content = append(content, []byte(tCfg)...) + } + err := th.fSys.WriteFile(fName, content) + if err != nil { + th.t.Fatalf("unable to add file %s", fName) + } +} + +func (th Harness) AssertActualEqualsExpected( + m resmap.ResMap, expected string) { + th.AssertActualEqualsExpectedWithTweak(m, nil, expected) +} + +func (th Harness) AssertActualEqualsExpectedNoIdAnnotations(m resmap.ResMap, expected string) { + m.RemoveBuildAnnotations() + th.AssertActualEqualsExpectedWithTweak(m, nil, expected) +} + +func (th Harness) AssertActualEqualsExpectedWithTweak( + m resmap.ResMap, tweaker func([]byte) []byte, expected string) { + assertActualEqualsExpectedWithTweak(th, m, tweaker, expected) +} diff --git a/go/internal/forked/api/testutils/kusttest/harness.go b/go/internal/forked/api/testutils/kusttest/harness.go new file mode 100644 index 000000000..34cbbe3cf --- /dev/null +++ b/go/internal/forked/api/testutils/kusttest/harness.go @@ -0,0 +1,137 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package kusttest_test + +import ( + "path/filepath" + "testing" + + "sigs.k8s.io/kustomize/api/konfig" + "sigs.k8s.io/kustomize/api/konfig/builtinpluginconsts" + "sigs.k8s.io/kustomize/api/krusty" + "sigs.k8s.io/kustomize/api/resmap" + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/filesys" +) + +// Harness manages a test environment. +type Harness struct { + t *testing.T + fSys filesys.FileSystem +} + +func MakeHarness(t *testing.T) Harness { + return MakeHarnessWithFs(t, filesys.MakeFsInMemory()) +} + +func MakeHarnessWithFs( + t *testing.T, fSys filesys.FileSystem) Harness { + return Harness{ + t: t, + fSys: fSys, + } +} + +func (th Harness) GetT() *testing.T { + return th.t +} + +func (th Harness) GetFSys() filesys.FileSystem { + return th.fSys +} + +func (th Harness) WriteK(path string, content string) { + err := th.fSys.WriteFile( + filepath.Join( + path, + konfig.DefaultKustomizationFileName()), []byte(` +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization +`+content)) + if err != nil { + th.t.Fatalf("unexpected error while writing Kustomization to %s: %v", path, err) + } +} + +func (th Harness) WriteC(path string, content string) { + err := th.fSys.WriteFile( + filepath.Join( + path, + konfig.DefaultKustomizationFileName()), []byte(` +apiVersion: kustomize.config.k8s.io/v1alpha1 +kind: Component +`+content)) + if err != nil { + th.t.Fatalf("unexpected error while writing Component to %s: %v", path, err) + } +} + +func (th Harness) WriteF(path string, content string) { + err := th.fSys.WriteFile(path, []byte(content)) + if err != nil { + th.t.Fatalf("unexpected error while writing file to %s: %v", path, err) + } +} + +func (th Harness) MakeDefaultOptions() krusty.Options { + return th.MakeOptionsPluginsDisabled() +} + +// This has no impact on Builtin plugins, as they are always enabled. +func (th Harness) MakeOptionsPluginsDisabled() krusty.Options { + return *krusty.MakeDefaultOptions() +} + +// Enables use of non-builtin plugins. +func (th Harness) MakeOptionsPluginsEnabled() krusty.Options { + pc := types.EnabledPluginConfig(types.BploLoadFromFileSys) + o := *krusty.MakeDefaultOptions() + o.PluginConfig = pc + return o +} + +// Run, failing on error. +func (th Harness) Run(path string, o krusty.Options) resmap.ResMap { + m, err := krusty.MakeKustomizer(&o).Run(th.fSys, path) + if err != nil { + th.t.Fatal(err) + } + return m +} + +// Run, failing if there is no error. +func (th Harness) RunWithErr(path string, o krusty.Options) error { + _, err := krusty.MakeKustomizer(&o).Run(th.fSys, path) + if err == nil { + th.t.Fatalf("expected error") + } + return err +} + +func (th Harness) WriteLegacyConfigs(fName string) { + m := builtinpluginconsts.GetDefaultFieldSpecsAsMap() + var content []byte + for _, tCfg := range m { + content = append(content, []byte(tCfg)...) + } + err := th.fSys.WriteFile(fName, content) + if err != nil { + th.t.Fatalf("unable to add file %s", fName) + } +} + +func (th Harness) AssertActualEqualsExpected( + m resmap.ResMap, expected string) { + th.AssertActualEqualsExpectedWithTweak(m, nil, expected) +} + +func (th Harness) AssertActualEqualsExpectedNoIdAnnotations(m resmap.ResMap, expected string) { + m.RemoveBuildAnnotations() + th.AssertActualEqualsExpectedWithTweak(m, nil, expected) +} + +func (th Harness) AssertActualEqualsExpectedWithTweak( + m resmap.ResMap, tweaker func([]byte) []byte, expected string) { + assertActualEqualsExpectedWithTweak(th, m, tweaker, expected) +} diff --git a/go/internal/forked/api/testutils/kusttest/harnessenhanced.go b/go/internal/forked/api/testutils/kusttest/harnessenhanced.go new file mode 100644 index 000000000..205a53449 --- /dev/null +++ b/go/internal/forked/api/testutils/kusttest/harnessenhanced.go @@ -0,0 +1,227 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package kusttest_test + +import ( + "io/ioutil" + "os" + "os/exec" + "path/filepath" + "strings" + "testing" + + "sigs.k8s.io/kustomize/api/ifc" + pLdr "sigs.k8s.io/kustomize/api/internal/plugins/loader" + "sigs.k8s.io/kustomize/api/konfig" + fLdr "sigs.k8s.io/kustomize/api/loader" + "sigs.k8s.io/kustomize/api/provider" + "sigs.k8s.io/kustomize/api/resmap" + valtest_test "sigs.k8s.io/kustomize/api/testutils/valtest" + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/filesys" +) + +// HarnessEnhanced manages a full plugin environment for tests. +type HarnessEnhanced struct { + // An instance of *testing.T, and a filesystem (likely in-memory) + // for loading test data - plugin config, resources to transform, etc. + Harness + + // plugintestEnv holds the plugin compiler and data needed to + // create compilation sub-processes. + pte *pluginTestEnv + + // rf creates Resources from byte streams. + rf *resmap.Factory + + // A file loader using the Harness.fSys to read test data. + ldr ifc.Loader + + // If true, wipe the ifc.loader root (not the plugin loader root) + // as part of cleanup. + shouldWipeLdrRoot bool + + // A plugin loader that loads plugins from a (real) file system. + pl *pLdr.Loader +} + +func MakeEnhancedHarness(t *testing.T) *HarnessEnhanced { + r := makeBaseEnhancedHarness(t) + r.Harness = MakeHarnessWithFs(t, filesys.MakeFsInMemory()) + // Point the Harness's file loader to the root ('/') + // of the in-memory file system. + r.ResetLoaderRoot(filesys.Separator) + return r +} + +func MakeEnhancedHarnessWithTmpRoot(t *testing.T) *HarnessEnhanced { + r := makeBaseEnhancedHarness(t) + fSys := filesys.MakeFsOnDisk() + r.Harness = MakeHarnessWithFs(t, fSys) + tmpDir, err := ioutil.TempDir("", "kust-testing-") + if err != nil { + panic("test harness cannot make tmp dir: " + err.Error()) + } + r.ldr, err = fLdr.NewLoader(fLdr.RestrictionRootOnly, tmpDir, fSys) + if err != nil { + panic("test harness cannot make ldr at tmp dir: " + err.Error()) + } + r.shouldWipeLdrRoot = true + return r +} + +func makeBaseEnhancedHarness(t *testing.T) *HarnessEnhanced { + rf := resmap.NewFactory( + provider.NewDefaultDepProvider().GetResourceFactory()) + return &HarnessEnhanced{ + pte: newPluginTestEnv(t).set(), + rf: rf, + pl: pLdr.NewLoader( + types.EnabledPluginConfig(types.BploLoadFromFileSys), + rf, + // Plugin configs are always located on disk, + // regardless of the test harness's FS + filesys.MakeFsOnDisk())} +} + +func (th *HarnessEnhanced) ErrIfNoHelm() error { + _, err := exec.LookPath(th.GetPluginConfig().HelmConfig.Command) + return err +} + +func (th *HarnessEnhanced) GetRoot() string { + return th.ldr.Root() +} + +func (th *HarnessEnhanced) MkDir(path string) string { + dir := filepath.Join(th.ldr.Root(), path) + th.GetFSys().Mkdir(dir) + return dir +} + +func (th *HarnessEnhanced) Reset() { + if th.shouldWipeLdrRoot { + root, _ := filepath.EvalSymlinks(th.ldr.Root()) + tmpdir, _ := filepath.EvalSymlinks(os.TempDir()) + + if !strings.HasPrefix(root, tmpdir) { + // sanity check. + panic("something strange about th.ldr.Root() = " + th.ldr.Root()) + } + os.RemoveAll(th.ldr.Root()) + } + th.pte.reset() +} + +func (th *HarnessEnhanced) GetPluginConfig() *types.PluginConfig { + return th.pl.Config() +} + +func (th *HarnessEnhanced) PrepBuiltin(k string) *HarnessEnhanced { + return th.BuildGoPlugin(konfig.BuiltinPluginPackage, "", k) +} + +func (th *HarnessEnhanced) BuildGoPlugin(g, v, k string) *HarnessEnhanced { + th.pte.prepareGoPlugin(g, v, k) + return th +} + +func (th *HarnessEnhanced) PrepExecPlugin(g, v, k string) *HarnessEnhanced { + th.pte.prepareExecPlugin(g, v, k) + return th +} + +// ResetLoaderRoot interprets its argument as an absolute directory path. +// It creates the directory, and creates the harness's file loader +// rooted in that directory. +func (th *HarnessEnhanced) ResetLoaderRoot(root string) { + if err := th.fSys.Mkdir(root); err != nil { + th.t.Fatal(err) + } + ldr, err := fLdr.NewLoader( + fLdr.RestrictionRootOnly, root, th.fSys) + if err != nil { + th.t.Fatalf("Unable to make loader: %v", err) + } + th.ldr = ldr +} + +func (th *HarnessEnhanced) LoadAndRunGenerator( + config string) resmap.ResMap { + rm := th.LoadAndRunGeneratorWithBuildAnnotations(config) + rm.RemoveBuildAnnotations() + return rm +} + +func (th *HarnessEnhanced) LoadAndRunGeneratorWithBuildAnnotations( + config string) resmap.ResMap { + res, err := th.rf.RF().FromBytes([]byte(config)) + if err != nil { + th.t.Fatalf("Err: %v", err) + } + g, err := th.pl.LoadGenerator( + th.ldr, valtest_test.MakeFakeValidator(), res) + if err != nil { + th.t.Fatalf("Err: %v", err) + } + rm, err := g.Generate() + if err != nil { + th.t.Fatalf("generate err: %v", err) + } + return rm +} + +func (th *HarnessEnhanced) LoadAndRunTransformer( + config, input string) resmap.ResMap { + resMap, err := th.RunTransformer(config, input) + if err != nil { + th.t.Fatalf("Err: %v", err) + } + return resMap +} + +func (th *HarnessEnhanced) RunTransformerAndCheckResult( + config, input, expected string) { + resMap := th.LoadAndRunTransformer(config, input) + th.AssertActualEqualsExpectedNoIdAnnotations(resMap, expected) +} + +func (th *HarnessEnhanced) ErrorFromLoadAndRunTransformer( + config, input string) error { + _, err := th.RunTransformer(config, input) + return err +} + +type AssertFunc func(t *testing.T, err error) + +func (th *HarnessEnhanced) RunTransformerAndCheckError( + config, input string, assertFn AssertFunc) { + _, err := th.RunTransformer(config, input) + assertFn(th.t, err) +} + +func (th *HarnessEnhanced) RunTransformer( + config, input string) (resmap.ResMap, error) { + resMap, err := th.rf.NewResMapFromBytes([]byte(input)) + if err != nil { + th.t.Fatalf("Err: %v", err) + } + return th.RunTransformerFromResMap(config, resMap) +} + +func (th *HarnessEnhanced) RunTransformerFromResMap( + config string, resMap resmap.ResMap) (resmap.ResMap, error) { + transConfig, err := th.rf.RF().FromBytes([]byte(config)) + if err != nil { + th.t.Logf("config: '%s'", config) + th.t.Fatalf("Err: %v", err) + } + g, err := th.pl.LoadTransformer( + th.ldr, valtest_test.MakeFakeValidator(), transConfig) + if err != nil { + return nil, err + } + err = g.Transform(resMap) + return resMap, err +} diff --git a/go/internal/forked/api/testutils/kusttest/harnessenhanced.go b/go/internal/forked/api/testutils/kusttest/harnessenhanced.go new file mode 100644 index 000000000..cc0c7f9ec --- /dev/null +++ b/go/internal/forked/api/testutils/kusttest/harnessenhanced.go @@ -0,0 +1,227 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package kusttest_test + +import ( + "io/ioutil" + "os" + "os/exec" + "path/filepath" + "strings" + "testing" + + "sigs.k8s.io/kustomize/api/ifc" + pLdr "sigs.k8s.io/kustomize/api/internal/plugins/loader" + "sigs.k8s.io/kustomize/api/konfig" + fLdr "sigs.k8s.io/kustomize/api/loader" + "sigs.k8s.io/kustomize/api/provider" + "sigs.k8s.io/kustomize/api/resmap" + valtest_test "sigs.k8s.io/kustomize/api/testutils/valtest" + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/filesys" +) + +// HarnessEnhanced manages a full plugin environment for tests. +type HarnessEnhanced struct { + // An instance of *testing.T, and a filesystem (likely in-memory) + // for loading test data - plugin config, resources to transform, etc. + Harness + + // plugintestEnv holds the plugin compiler and data needed to + // create compilation sub-processes. + pte *pluginTestEnv + + // rf creates Resources from byte streams. + rf *resmap.Factory + + // A file loader using the Harness.fSys to read test data. + ldr ifc.Loader + + // If true, wipe the ifc.loader root (not the plugin loader root) + // as part of cleanup. + shouldWipeLdrRoot bool + + // A plugin loader that loads plugins from a (real) file system. + pl *pLdr.Loader +} + +func MakeEnhancedHarness(t *testing.T) *HarnessEnhanced { + r := makeBaseEnhancedHarness(t) + r.Harness = MakeHarnessWithFs(t, filesys.MakeFsInMemory()) + // Point the Harness's file loader to the root ('/') + // of the in-memory file system. + r.ResetLoaderRoot(filesys.Separator) + return r +} + +func MakeEnhancedHarnessWithTmpRoot(t *testing.T) *HarnessEnhanced { + r := makeBaseEnhancedHarness(t) + fSys := filesys.MakeFsOnDisk() + r.Harness = MakeHarnessWithFs(t, fSys) + tmpDir, err := ioutil.TempDir("", "kust-testing-") + if err != nil { + panic("test harness cannot make tmp dir: " + err.Error()) + } + r.ldr, err = fLdr.NewLoader(fLdr.RestrictionRootOnly, tmpDir, fSys) + if err != nil { + panic("test harness cannot make ldr at tmp dir: " + err.Error()) + } + r.shouldWipeLdrRoot = true + return r +} + +func makeBaseEnhancedHarness(t *testing.T) *HarnessEnhanced { + rf := resmap.NewFactory( + provider.NewDefaultDepProvider().GetResourceFactory()) + return &HarnessEnhanced{ + pte: newPluginTestEnv(t).set(), + rf: rf, + pl: pLdr.NewLoader( + types.EnabledPluginConfig(types.BploLoadFromFileSys), + rf, + // Plugin configs are always located on disk, + // regardless of the test harness's FS + filesys.MakeFsOnDisk())} +} + +func (th *HarnessEnhanced) ErrIfNoHelm() error { + _, err := exec.LookPath(th.GetPluginConfig().HelmConfig.Command) + return err +} + +func (th *HarnessEnhanced) GetRoot() string { + return th.ldr.Root() +} + +func (th *HarnessEnhanced) MkDir(path string) string { + dir := filepath.Join(th.ldr.Root(), path) + th.GetFSys().Mkdir(dir) + return dir +} + +func (th *HarnessEnhanced) Reset() { + if th.shouldWipeLdrRoot { + root, _ := filepath.EvalSymlinks(th.ldr.Root()) + tmpdir, _ := filepath.EvalSymlinks(os.TempDir()) + + if !strings.HasPrefix(root, tmpdir) { + // sanity check. + panic("something strange about th.ldr.Root() = " + th.ldr.Root()) + } + os.RemoveAll(th.ldr.Root()) + } + th.pte.reset() +} + +func (th *HarnessEnhanced) GetPluginConfig() *types.PluginConfig { + return th.pl.Config() +} + +func (th *HarnessEnhanced) PrepBuiltin(k string) *HarnessEnhanced { + return th.BuildGoPlugin(konfig.BuiltinPluginPackage, "", k) +} + +func (th *HarnessEnhanced) BuildGoPlugin(g, v, k string) *HarnessEnhanced { + th.pte.prepareGoPlugin(g, v, k) + return th +} + +func (th *HarnessEnhanced) PrepExecPlugin(g, v, k string) *HarnessEnhanced { + th.pte.prepareExecPlugin(g, v, k) + return th +} + +// ResetLoaderRoot interprets its argument as an absolute directory path. +// It creates the directory, and creates the harness's file loader +// rooted in that directory. +func (th *HarnessEnhanced) ResetLoaderRoot(root string) { + if err := th.fSys.Mkdir(root); err != nil { + th.t.Fatal(err) + } + ldr, err := fLdr.NewLoader( + fLdr.RestrictionRootOnly, root, th.fSys) + if err != nil { + th.t.Fatalf("Unable to make loader: %v", err) + } + th.ldr = ldr +} + +func (th *HarnessEnhanced) LoadAndRunGenerator( + config string) resmap.ResMap { + rm := th.LoadAndRunGeneratorWithBuildAnnotations(config) + rm.RemoveBuildAnnotations() + return rm +} + +func (th *HarnessEnhanced) LoadAndRunGeneratorWithBuildAnnotations( + config string) resmap.ResMap { + res, err := th.rf.RF().FromBytes([]byte(config)) + if err != nil { + th.t.Fatalf("Err: %v", err) + } + g, err := th.pl.LoadGenerator( + th.ldr, valtest_test.MakeFakeValidator(), res) + if err != nil { + th.t.Fatalf("Err: %v", err) + } + rm, err := g.Generate() + if err != nil { + th.t.Fatalf("generate err: %v", err) + } + return rm +} + +func (th *HarnessEnhanced) LoadAndRunTransformer( + config, input string) resmap.ResMap { + resMap, err := th.RunTransformer(config, input) + if err != nil { + th.t.Fatalf("Err: %v", err) + } + return resMap +} + +func (th *HarnessEnhanced) RunTransformerAndCheckResult( + config, input, expected string) { + resMap := th.LoadAndRunTransformer(config, input) + th.AssertActualEqualsExpectedNoIdAnnotations(resMap, expected) +} + +func (th *HarnessEnhanced) ErrorFromLoadAndRunTransformer( + config, input string) error { + _, err := th.RunTransformer(config, input) + return err +} + +type AssertFunc func(t *testing.T, err error) + +func (th *HarnessEnhanced) RunTransformerAndCheckError( + config, input string, assertFn AssertFunc) { + _, err := th.RunTransformer(config, input) + assertFn(th.t, err) +} + +func (th *HarnessEnhanced) RunTransformer( + config, input string) (resmap.ResMap, error) { + resMap, err := th.rf.NewResMapFromBytes([]byte(input)) + if err != nil { + th.t.Fatalf("Err: %v", err) + } + return th.RunTransformerFromResMap(config, resMap) +} + +func (th *HarnessEnhanced) RunTransformerFromResMap( + config string, resMap resmap.ResMap) (resmap.ResMap, error) { + transConfig, err := th.rf.RF().FromBytes([]byte(config)) + if err != nil { + th.t.Logf("config: '%s'", config) + th.t.Fatalf("Err: %v", err) + } + g, err := th.pl.LoadTransformer( + th.ldr, valtest_test.MakeFakeValidator(), transConfig) + if err != nil { + return nil, err + } + err = g.Transform(resMap) + return resMap, err +} diff --git a/go/internal/forked/api/testutils/kusttest/hasgett.go b/go/internal/forked/api/testutils/kusttest/hasgett.go new file mode 100644 index 000000000..33496b9d2 --- /dev/null +++ b/go/internal/forked/api/testutils/kusttest/hasgett.go @@ -0,0 +1,111 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package kusttest_test + +import ( + "fmt" + "strings" + "testing" + + "sigs.k8s.io/kustomize/api/resmap" +) + +type hasGetT interface { + GetT() *testing.T +} + +func assertActualEqualsExpectedWithTweak( + ht hasGetT, + m resmap.ResMap, + tweaker func([]byte) []byte, expected string) { + AssertActualEqualsExpectedWithTweak(ht.GetT(), m, tweaker, expected) +} + +func AssertActualEqualsExpectedWithTweak( + t *testing.T, + m resmap.ResMap, + tweaker func([]byte) []byte, expected string) { + if m == nil { + t.Fatalf("Map should not be nil.") + } + // Ignore leading linefeed in expected value + // to ease readability of tests. + if len(expected) > 0 && expected[0] == 10 { + expected = expected[1:] + } + actual, err := m.AsYaml() + if err != nil { + t.Fatalf("Unexpected err: %v", err) + } + if tweaker != nil { + actual = tweaker(actual) + } + if string(actual) != expected { + reportDiffAndFail(t, actual, expected) + } +} + +// Pretty printing of file differences. +func reportDiffAndFail( + t *testing.T, actual []byte, expected string) { + sE, maxLen := convertToArray(expected) + sA, _ := convertToArray(string(actual)) + fmt.Println("===== ACTUAL BEGIN ========================================") + fmt.Print(string(actual)) + fmt.Println("===== ACTUAL END ==========================================") + format := fmt.Sprintf("%%s %%-%ds %%s\n", maxLen+4) + limit := 0 + if len(sE) < len(sA) { + limit = len(sE) + } else { + limit = len(sA) + } + fmt.Printf(format, " ", "EXPECTED", "ACTUAL") + fmt.Printf(format, " ", "--------", "------") + for i := 0; i < limit; i++ { + fmt.Printf(format, hint(sE[i], sA[i]), sE[i], sA[i]) + } + if len(sE) < len(sA) { + for i := len(sE); i < len(sA); i++ { + fmt.Printf(format, "X", "", sA[i]) + } + } else { + for i := len(sA); i < len(sE); i++ { + fmt.Printf(format, "X", sE[i], "") + } + } + t.Fatalf("Expected not equal to actual") +} + +func hint(a, b string) string { + if a == b { + return " " + } + return "X" +} + +func convertToArray(x string) ([]string, int) { + a := strings.Split(strings.TrimSuffix(x, "\n"), "\n") + maxLen := 0 + for i, v := range a { + z := tabToSpace(v) + if len(z) > maxLen { + maxLen = len(z) + } + a[i] = z + } + return a, maxLen +} + +func tabToSpace(input string) string { + var result []string + for _, i := range input { + if i == 9 { + result = append(result, " ") + } else { + result = append(result, string(i)) + } + } + return strings.Join(result, "") +} diff --git a/go/internal/forked/api/testutils/kusttest/plugintestenv.go b/go/internal/forked/api/testutils/kusttest/plugintestenv.go new file mode 100644 index 000000000..c623616ed --- /dev/null +++ b/go/internal/forked/api/testutils/kusttest/plugintestenv.go @@ -0,0 +1,82 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package kusttest_test + +import ( + "os" + "testing" + + "sigs.k8s.io/kustomize/api/internal/plugins/compiler" + "sigs.k8s.io/kustomize/api/internal/plugins/utils" + "sigs.k8s.io/kustomize/api/konfig" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/filesys" +) + +// pluginTestEnv manages compiling plugins for tests. +// It manages a Go plugin compiler, and sets/resets shell env vars as needed. +type pluginTestEnv struct { + t *testing.T + compiler *compiler.Compiler + pluginRoot string + oldXdg string + wasSet bool +} + +// newPluginTestEnv returns a new instance of pluginTestEnv. +func newPluginTestEnv(t *testing.T) *pluginTestEnv { + return &pluginTestEnv{t: t} +} + +// set creates a test environment. +// Uses a filesystem on disk for compilation (or copying) of +// plugin code - this FileSystem has nothing to do with +// the FileSystem used for loading config yaml in the tests. +func (x *pluginTestEnv) set() *pluginTestEnv { + var err error + x.pluginRoot, err = utils.DeterminePluginSrcRoot(filesys.MakeFsOnDisk()) + if err != nil { + x.t.Error(err) + } + x.compiler = compiler.NewCompiler(x.pluginRoot) + x.setEnv() + return x +} + +// reset restores the environment to pre-test state. +func (x *pluginTestEnv) reset() { + // Calling Cleanup forces recompilation in a test file with multiple + // calls to MakeEnhancedHarness - so leaving it out. Your .gitignore + // should ignore .so files anyway. + // x.compiler.Cleanup() + x.resetEnv() +} + +// prepareGoPlugin compiles a Go plugin, leaving the newly +// created object code alongside the src code. +func (x *pluginTestEnv) prepareGoPlugin(g, v, k string) { + x.compiler.SetGVK(g, v, k) + err := x.compiler.Compile() + if err != nil { + x.t.Errorf("compile failed: %v", err) + } +} + +func (x *pluginTestEnv) prepareExecPlugin(_, _, _ string) { + // Do nothing. At one point this method + // copied the exec plugin directory to a temp dir + // and ran it from there. Left as a hook. +} + +func (x *pluginTestEnv) setEnv() { + x.oldXdg, x.wasSet = os.LookupEnv(konfig.KustomizePluginHomeEnv) + os.Setenv(konfig.KustomizePluginHomeEnv, x.pluginRoot) +} + +func (x *pluginTestEnv) resetEnv() { + if x.wasSet { + os.Setenv(konfig.KustomizePluginHomeEnv, x.oldXdg) + } else { + os.Unsetenv(konfig.KustomizePluginHomeEnv) + } +} diff --git a/go/internal/forked/api/testutils/kusttest/plugintestenv.go b/go/internal/forked/api/testutils/kusttest/plugintestenv.go new file mode 100644 index 000000000..8236e501a --- /dev/null +++ b/go/internal/forked/api/testutils/kusttest/plugintestenv.go @@ -0,0 +1,82 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package kusttest_test + +import ( + "os" + "testing" + + "sigs.k8s.io/kustomize/api/internal/plugins/compiler" + "sigs.k8s.io/kustomize/api/internal/plugins/utils" + "sigs.k8s.io/kustomize/api/konfig" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/filesys" +) + +// pluginTestEnv manages compiling plugins for tests. +// It manages a Go plugin compiler, and sets/resets shell env vars as needed. +type pluginTestEnv struct { + t *testing.T + compiler *compiler.Compiler + pluginRoot string + oldXdg string + wasSet bool +} + +// newPluginTestEnv returns a new instance of pluginTestEnv. +func newPluginTestEnv(t *testing.T) *pluginTestEnv { + return &pluginTestEnv{t: t} +} + +// set creates a test environment. +// Uses a filesystem on disk for compilation (or copying) of +// plugin code - this FileSystem has nothing to do with +// the FileSystem used for loading config yaml in the tests. +func (x *pluginTestEnv) set() *pluginTestEnv { + var err error + x.pluginRoot, err = utils.DeterminePluginSrcRoot(filesys.MakeFsOnDisk()) + if err != nil { + x.t.Error(err) + } + x.compiler = compiler.NewCompiler(x.pluginRoot) + x.setEnv() + return x +} + +// reset restores the environment to pre-test state. +func (x *pluginTestEnv) reset() { + // Calling Cleanup forces recompilation in a test file with multiple + // calls to MakeEnhancedHarness - so leaving it out. Your .gitignore + // should ignore .so files anyway. + // x.compiler.Cleanup() + x.resetEnv() +} + +// prepareGoPlugin compiles a Go plugin, leaving the newly +// created object code alongside the src code. +func (x *pluginTestEnv) prepareGoPlugin(g, v, k string) { + x.compiler.SetGVK(g, v, k) + err := x.compiler.Compile() + if err != nil { + x.t.Errorf("compile failed: %v", err) + } +} + +func (x *pluginTestEnv) prepareExecPlugin(_, _, _ string) { + // Do nothing. At one point this method + // copied the exec plugin directory to a temp dir + // and ran it from there. Left as a hook. +} + +func (x *pluginTestEnv) setEnv() { + x.oldXdg, x.wasSet = os.LookupEnv(konfig.KustomizePluginHomeEnv) + os.Setenv(konfig.KustomizePluginHomeEnv, x.pluginRoot) +} + +func (x *pluginTestEnv) resetEnv() { + if x.wasSet { + os.Setenv(konfig.KustomizePluginHomeEnv, x.oldXdg) + } else { + os.Unsetenv(konfig.KustomizePluginHomeEnv) + } +} diff --git a/go/internal/forked/api/testutils/resmaptest/rmbuilder.go b/go/internal/forked/api/testutils/resmaptest/rmbuilder.go new file mode 100644 index 000000000..09a684852 --- /dev/null +++ b/go/internal/forked/api/testutils/resmaptest/rmbuilder.go @@ -0,0 +1,78 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package resmaptest_test + +import ( + "testing" + + "sigs.k8s.io/kustomize/api/provider" + "sigs.k8s.io/kustomize/api/resmap" + "sigs.k8s.io/kustomize/api/resource" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/resid" +) + +// Builds ResMaps for tests, with test-aware error handling. +type rmBuilder struct { + t *testing.T + m resmap.ResMap + rf *resource.Factory +} + +func NewSeededRmBuilder(t *testing.T, rf *resource.Factory, m resmap.ResMap) *rmBuilder { + return &rmBuilder{t: t, rf: rf, m: m} +} + +func NewRmBuilder(t *testing.T, rf *resource.Factory) *rmBuilder { + return NewSeededRmBuilder(t, rf, resmap.New()) +} + +func NewRmBuilderDefault(t *testing.T) *rmBuilder { + return NewSeededRmBuilderDefault(t, resmap.New()) +} + +func NewSeededRmBuilderDefault(t *testing.T, m resmap.ResMap) *rmBuilder { + return NewSeededRmBuilder( + t, provider.NewDefaultDepProvider().GetResourceFactory(), m) +} + +func (rm *rmBuilder) Add(m map[string]interface{}) *rmBuilder { + return rm.AddR(rm.rf.FromMap(m)) +} + +func (rm *rmBuilder) AddR(r *resource.Resource) *rmBuilder { + err := rm.m.Append(r) + if err != nil { + rm.t.Fatalf("test setup failure: %v", err) + } + return rm +} + +func (rm *rmBuilder) AddWithName(n string, m map[string]interface{}) *rmBuilder { + err := rm.m.Append(rm.rf.FromMapWithNamespaceAndName(resid.DefaultNamespace, n, m)) + if err != nil { + rm.t.Fatalf("test setup failure: %v", err) + } + return rm +} + +func (rm *rmBuilder) AddWithNsAndName(ns string, n string, m map[string]interface{}) *rmBuilder { + err := rm.m.Append(rm.rf.FromMapWithNamespaceAndName(ns, n, m)) + if err != nil { + rm.t.Fatalf("test setup failure: %v", err) + } + return rm +} + +func (rm *rmBuilder) ReplaceResource(m map[string]interface{}) *rmBuilder { + r := rm.rf.FromMap(m) + _, err := rm.m.Replace(r) + if err != nil { + rm.t.Fatalf("test setup failure: %v", err) + } + return rm +} + +func (rm *rmBuilder) ResMap() resmap.ResMap { + return rm.m +} diff --git a/go/internal/forked/api/testutils/resmaptest/rmbuilder.go b/go/internal/forked/api/testutils/resmaptest/rmbuilder.go new file mode 100644 index 000000000..2d6f7e7ce --- /dev/null +++ b/go/internal/forked/api/testutils/resmaptest/rmbuilder.go @@ -0,0 +1,78 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package resmaptest_test + +import ( + "testing" + + "sigs.k8s.io/kustomize/api/provider" + "sigs.k8s.io/kustomize/api/resmap" + "sigs.k8s.io/kustomize/api/resource" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/resid" +) + +// Builds ResMaps for tests, with test-aware error handling. +type rmBuilder struct { + t *testing.T + m resmap.ResMap + rf *resource.Factory +} + +func NewSeededRmBuilder(t *testing.T, rf *resource.Factory, m resmap.ResMap) *rmBuilder { + return &rmBuilder{t: t, rf: rf, m: m} +} + +func NewRmBuilder(t *testing.T, rf *resource.Factory) *rmBuilder { + return NewSeededRmBuilder(t, rf, resmap.New()) +} + +func NewRmBuilderDefault(t *testing.T) *rmBuilder { + return NewSeededRmBuilderDefault(t, resmap.New()) +} + +func NewSeededRmBuilderDefault(t *testing.T, m resmap.ResMap) *rmBuilder { + return NewSeededRmBuilder( + t, provider.NewDefaultDepProvider().GetResourceFactory(), m) +} + +func (rm *rmBuilder) Add(m map[string]interface{}) *rmBuilder { + return rm.AddR(rm.rf.FromMap(m)) +} + +func (rm *rmBuilder) AddR(r *resource.Resource) *rmBuilder { + err := rm.m.Append(r) + if err != nil { + rm.t.Fatalf("test setup failure: %v", err) + } + return rm +} + +func (rm *rmBuilder) AddWithName(n string, m map[string]interface{}) *rmBuilder { + err := rm.m.Append(rm.rf.FromMapWithNamespaceAndName(resid.DefaultNamespace, n, m)) + if err != nil { + rm.t.Fatalf("test setup failure: %v", err) + } + return rm +} + +func (rm *rmBuilder) AddWithNsAndName(ns string, n string, m map[string]interface{}) *rmBuilder { + err := rm.m.Append(rm.rf.FromMapWithNamespaceAndName(ns, n, m)) + if err != nil { + rm.t.Fatalf("test setup failure: %v", err) + } + return rm +} + +func (rm *rmBuilder) ReplaceResource(m map[string]interface{}) *rmBuilder { + r := rm.rf.FromMap(m) + _, err := rm.m.Replace(r) + if err != nil { + rm.t.Fatalf("test setup failure: %v", err) + } + return rm +} + +func (rm *rmBuilder) ResMap() resmap.ResMap { + return rm.m +} diff --git a/go/internal/forked/api/testutils/valtest/fakevalidator.go b/go/internal/forked/api/testutils/valtest/fakevalidator.go new file mode 100644 index 000000000..7e7daadfa --- /dev/null +++ b/go/internal/forked/api/testutils/valtest/fakevalidator.go @@ -0,0 +1,108 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +// Package valtest_test defines a fakeValidator that can be used in tests +package valtest_test + +import ( + "errors" + "regexp" + "testing" +) + +// fakeValidator can be used in tests. +type fakeValidator struct { + happy bool + called bool + t *testing.T +} + +// SAD is an error string. +const SAD = "i'm not happy Bob, NOT HAPPY" + +// MakeHappyMapValidator makes a fakeValidator that always passes. +func MakeHappyMapValidator(t *testing.T) *fakeValidator { + return &fakeValidator{happy: true, t: t} +} + +// MakeSadMapValidator makes a fakeValidator that always fails. +func MakeSadMapValidator(t *testing.T) *fakeValidator { + return &fakeValidator{happy: false, t: t} +} + +// MakeFakeValidator makes an empty Fake Validator. +func MakeFakeValidator() *fakeValidator { + return &fakeValidator{} +} + +// ErrIfInvalidKey returns nil +func (v *fakeValidator) ErrIfInvalidKey(_ string) error { + return nil +} + +// IsEnvVarName returns nil +func (v *fakeValidator) IsEnvVarName(_ string) error { + return nil +} + +// MakeAnnotationValidator returns a nil function +func (v *fakeValidator) MakeAnnotationValidator() func(map[string]string) error { + return nil +} + +// MakeAnnotationNameValidator returns a nil function +func (v *fakeValidator) MakeAnnotationNameValidator() func([]string) error { + return nil +} + +// MakeLabelValidator returns a nil function +func (v *fakeValidator) MakeLabelValidator() func(map[string]string) error { + return nil +} + +// MakeLabelNameValidator returns a nil function +func (v *fakeValidator) MakeLabelNameValidator() func([]string) error { + return nil +} + +// ValidateNamespace validates namespace by regexp +func (v *fakeValidator) ValidateNamespace(s string) []string { + pattern := regexp.MustCompile(`^[a-zA-Z].*`) + if pattern.MatchString(s) { + return nil + } + return []string{"doesn't match"} +} + +// Validator replaces apimachinery validation in tests. +// Can be set to fail or succeed to test error handling. +// Can confirm if run or not run by surrounding code. +func (v *fakeValidator) Validator(_ map[string]string) error { + v.called = true + if v.happy { + return nil + } + return errors.New(SAD) +} + +func (v *fakeValidator) ValidatorArray(_ []string) error { + v.called = true + if v.happy { + return nil + } + return errors.New(SAD) +} + +// VerifyCall returns true if Validator was used. +func (v *fakeValidator) VerifyCall() { + if !v.called { + v.t.Errorf("should have called Validator") + } +} + +// VerifyNoCall returns true if Validator was not used. +func (v *fakeValidator) VerifyNoCall() { + if v.called { + v.t.Errorf("should not have called Validator") + } +} diff --git a/go/internal/forked/api/types/builtinpluginloadingoptions_string.go b/go/internal/forked/api/types/builtinpluginloadingoptions_string.go new file mode 100644 index 000000000..033a45123 --- /dev/null +++ b/go/internal/forked/api/types/builtinpluginloadingoptions_string.go @@ -0,0 +1,25 @@ +// Code generated by "stringer -type=BuiltinPluginLoadingOptions"; DO NOT EDIT. + +package types + +import "strconv" + +func _() { + // An "invalid array index" compiler error signifies that the constant values have changed. + // Re-run the stringer command to generate them again. + var x [1]struct{} + _ = x[BploUndefined-0] + _ = x[BploUseStaticallyLinked-1] + _ = x[BploLoadFromFileSys-2] +} + +const _BuiltinPluginLoadingOptions_name = "BploUndefinedBploUseStaticallyLinkedBploLoadFromFileSys" + +var _BuiltinPluginLoadingOptions_index = [...]uint8{0, 13, 36, 55} + +func (i BuiltinPluginLoadingOptions) String() string { + if i < 0 || i >= BuiltinPluginLoadingOptions(len(_BuiltinPluginLoadingOptions_index)-1) { + return "BuiltinPluginLoadingOptions(" + strconv.FormatInt(int64(i), 10) + ")" + } + return _BuiltinPluginLoadingOptions_name[_BuiltinPluginLoadingOptions_index[i]:_BuiltinPluginLoadingOptions_index[i+1]] +} diff --git a/go/internal/forked/api/types/configmapargs.go b/go/internal/forked/api/types/configmapargs.go new file mode 100644 index 000000000..69877769f --- /dev/null +++ b/go/internal/forked/api/types/configmapargs.go @@ -0,0 +1,10 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package types + +// ConfigMapArgs contains the metadata of how to generate a configmap. +type ConfigMapArgs struct { + // GeneratorArgs for the configmap. + GeneratorArgs `json:",inline,omitempty" yaml:",inline,omitempty"` +} diff --git a/go/internal/forked/api/types/doc.go b/go/internal/forked/api/types/doc.go new file mode 100644 index 000000000..22c38a651 --- /dev/null +++ b/go/internal/forked/api/types/doc.go @@ -0,0 +1,9 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +// Package types holds the definition of the kustomization struct and +// supporting structs. It's the k8s API conformant object that describes +// a set of generation and transformation operations to create and/or +// modify k8s resources. +// A kustomization file is a serialization of this struct. +package types diff --git a/go/internal/forked/api/types/erronlybuiltinpluginsallowed.go b/go/internal/forked/api/types/erronlybuiltinpluginsallowed.go new file mode 100644 index 000000000..73ee95fd7 --- /dev/null +++ b/go/internal/forked/api/types/erronlybuiltinpluginsallowed.go @@ -0,0 +1,33 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package types + +import ( + "fmt" + + "github.com/pkg/errors" +) + +type errOnlyBuiltinPluginsAllowed struct { + name string +} + +func (e *errOnlyBuiltinPluginsAllowed) Error() string { + return fmt.Sprintf( + "external plugins disabled; unable to load external plugin '%s'", + e.name) +} + +func NewErrOnlyBuiltinPluginsAllowed(n string) *errOnlyBuiltinPluginsAllowed { + return &errOnlyBuiltinPluginsAllowed{name: n} +} + +func IsErrOnlyBuiltinPluginsAllowed(err error) bool { + _, ok := err.(*errOnlyBuiltinPluginsAllowed) + if ok { + return true + } + _, ok = errors.Cause(err).(*errOnlyBuiltinPluginsAllowed) + return ok +} diff --git a/go/internal/forked/api/types/errunabletofind.go b/go/internal/forked/api/types/errunabletofind.go new file mode 100644 index 000000000..f95b8edd5 --- /dev/null +++ b/go/internal/forked/api/types/errunabletofind.go @@ -0,0 +1,40 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package types + +import ( + "fmt" + "strings" + + "github.com/pkg/errors" +) + +type errUnableToFind struct { + // What are we unable to find? + what string + // What things did we try? + attempts []Pair +} + +func (e *errUnableToFind) Error() string { + var m []string + for _, p := range e.attempts { + m = append(m, "('"+p.Value+"'; "+p.Key+")") + } + return fmt.Sprintf( + "unable to find %s - tried: %s", e.what, strings.Join(m, ", ")) +} + +func NewErrUnableToFind(w string, a []Pair) *errUnableToFind { + return &errUnableToFind{what: w, attempts: a} +} + +func IsErrUnableToFind(err error) bool { + _, ok := err.(*errUnableToFind) + if ok { + return true + } + _, ok = errors.Cause(err).(*errUnableToFind) + return ok +} diff --git a/go/internal/forked/api/types/fieldspec.go b/go/internal/forked/api/types/fieldspec.go new file mode 100644 index 000000000..042cf23ed --- /dev/null +++ b/go/internal/forked/api/types/fieldspec.go @@ -0,0 +1,91 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package types + +import ( + "fmt" + + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/resid" +) + +// FieldSpec completely specifies a kustomizable field in a k8s API object. +// It helps define the operands of transformations. +// +// For example, a directive to add a common label to objects +// will need to know that a 'Deployment' object (in API group +// 'apps', any version) can have labels at field path +// 'spec/template/metadata/labels', and further that it is OK +// (or not OK) to add that field path to the object if the +// field path doesn't exist already. +// +// This would look like +// { +// group: apps +// kind: Deployment +// path: spec/template/metadata/labels +// create: true +// } +type FieldSpec struct { + resid.Gvk `json:",inline,omitempty" yaml:",inline,omitempty"` + Path string `json:"path,omitempty" yaml:"path,omitempty"` + CreateIfNotPresent bool `json:"create,omitempty" yaml:"create,omitempty"` +} + +func (fs FieldSpec) String() string { + return fmt.Sprintf( + "%s:%v:%s", fs.Gvk.String(), fs.CreateIfNotPresent, fs.Path) +} + +// If true, the primary key is the same, but other fields might not be. +func (fs FieldSpec) effectivelyEquals(other FieldSpec) bool { + return fs.IsSelected(&other.Gvk) && fs.Path == other.Path +} + +type FsSlice []FieldSpec + +func (s FsSlice) Len() int { return len(s) } +func (s FsSlice) Swap(i, j int) { s[i], s[j] = s[j], s[i] } +func (s FsSlice) Less(i, j int) bool { + return s[i].Gvk.IsLessThan(s[j].Gvk) +} + +// MergeAll merges the argument into this, returning the result. +// Items already present are ignored. +// Items that conflict (primary key matches, but remain data differs) +// result in an error. +func (s FsSlice) MergeAll(incoming FsSlice) (result FsSlice, err error) { + result = s + for _, x := range incoming { + result, err = result.MergeOne(x) + if err != nil { + return nil, err + } + } + return result, nil +} + +// MergeOne merges the argument into this, returning the result. +// If the item's primary key is already present, and there are no +// conflicts, it is ignored (we don't want duplicates). +// If there is a conflict, the merge fails. +func (s FsSlice) MergeOne(x FieldSpec) (FsSlice, error) { + i := s.index(x) + if i > -1 { + // It's already there. + if s[i].CreateIfNotPresent != x.CreateIfNotPresent { + return nil, fmt.Errorf("conflicting fieldspecs") + } + return s, nil + } + return append(s, x), nil +} + +func (s FsSlice) index(fs FieldSpec) int { + for i, x := range s { + if x.effectivelyEquals(fs) { + return i + } + } + return -1 +} diff --git a/go/internal/forked/api/types/fieldspec.go b/go/internal/forked/api/types/fieldspec.go new file mode 100644 index 000000000..79e93466b --- /dev/null +++ b/go/internal/forked/api/types/fieldspec.go @@ -0,0 +1,91 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package types + +import ( + "fmt" + + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/resid" +) + +// FieldSpec completely specifies a kustomizable field in a k8s API object. +// It helps define the operands of transformations. +// +// For example, a directive to add a common label to objects +// will need to know that a 'Deployment' object (in API group +// 'apps', any version) can have labels at field path +// 'spec/template/metadata/labels', and further that it is OK +// (or not OK) to add that field path to the object if the +// field path doesn't exist already. +// +// This would look like +// { +// group: apps +// kind: Deployment +// path: spec/template/metadata/labels +// create: true +// } +type FieldSpec struct { + resid.Gvk `json:",inline,omitempty" yaml:",inline,omitempty"` + Path string `json:"path,omitempty" yaml:"path,omitempty"` + CreateIfNotPresent bool `json:"create,omitempty" yaml:"create,omitempty"` +} + +func (fs FieldSpec) String() string { + return fmt.Sprintf( + "%s:%v:%s", fs.Gvk.String(), fs.CreateIfNotPresent, fs.Path) +} + +// If true, the primary key is the same, but other fields might not be. +func (fs FieldSpec) effectivelyEquals(other FieldSpec) bool { + return fs.IsSelected(&other.Gvk) && fs.Path == other.Path +} + +type FsSlice []FieldSpec + +func (s FsSlice) Len() int { return len(s) } +func (s FsSlice) Swap(i, j int) { s[i], s[j] = s[j], s[i] } +func (s FsSlice) Less(i, j int) bool { + return s[i].Gvk.IsLessThan(s[j].Gvk) +} + +// MergeAll merges the argument into this, returning the result. +// Items already present are ignored. +// Items that conflict (primary key matches, but remain data differs) +// result in an error. +func (s FsSlice) MergeAll(incoming FsSlice) (result FsSlice, err error) { + result = s + for _, x := range incoming { + result, err = result.MergeOne(x) + if err != nil { + return nil, err + } + } + return result, nil +} + +// MergeOne merges the argument into this, returning the result. +// If the item's primary key is already present, and there are no +// conflicts, it is ignored (we don't want duplicates). +// If there is a conflict, the merge fails. +func (s FsSlice) MergeOne(x FieldSpec) (FsSlice, error) { + i := s.index(x) + if i > -1 { + // It's already there. + if s[i].CreateIfNotPresent != x.CreateIfNotPresent { + return nil, fmt.Errorf("conflicting fieldspecs") + } + return s, nil + } + return append(s, x), nil +} + +func (s FsSlice) index(fs FieldSpec) int { + for i, x := range s { + if x.effectivelyEquals(fs) { + return i + } + } + return -1 +} diff --git a/go/internal/forked/api/types/fieldspec_test.go b/go/internal/forked/api/types/fieldspec_test.go new file mode 100644 index 000000000..7d8911435 --- /dev/null +++ b/go/internal/forked/api/types/fieldspec_test.go @@ -0,0 +1,144 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package types_test + +import ( + "fmt" + "reflect" + "strings" + "testing" + + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/resid" +) + +var mergeTests = []struct { + name string + original types.FsSlice + incoming types.FsSlice + err error + result types.FsSlice +}{ + { + "normal", + types.FsSlice{ + { + Path: "whatever", + Gvk: resid.Gvk{Group: "apple"}, + CreateIfNotPresent: false, + }, + { + Path: "whatever", + Gvk: resid.Gvk{Group: "pear"}, + CreateIfNotPresent: false, + }, + }, + types.FsSlice{ + { + Path: "home", + Gvk: resid.Gvk{Group: "beans"}, + CreateIfNotPresent: false, + }, + }, + nil, + types.FsSlice{ + { + Path: "whatever", + Gvk: resid.Gvk{Group: "apple"}, + CreateIfNotPresent: false, + }, + { + Path: "whatever", + Gvk: resid.Gvk{Group: "pear"}, + CreateIfNotPresent: false, + }, + { + Path: "home", + Gvk: resid.Gvk{Group: "beans"}, + CreateIfNotPresent: false, + }, + }, + }, + { + "ignore copy", + types.FsSlice{ + { + Path: "whatever", + Gvk: resid.Gvk{Group: "apple"}, + CreateIfNotPresent: false, + }, + { + Path: "whatever", + Gvk: resid.Gvk{Group: "pear"}, + CreateIfNotPresent: false, + }, + }, + types.FsSlice{ + { + Path: "whatever", + Gvk: resid.Gvk{Group: "apple"}, + CreateIfNotPresent: false, + }, + }, + nil, + types.FsSlice{ + { + Path: "whatever", + Gvk: resid.Gvk{Group: "apple"}, + CreateIfNotPresent: false, + }, + { + Path: "whatever", + Gvk: resid.Gvk{Group: "pear"}, + CreateIfNotPresent: false, + }, + }, + }, + { + "error on conflict", + types.FsSlice{ + { + Path: "whatever", + Gvk: resid.Gvk{Group: "apple"}, + CreateIfNotPresent: false, + }, + { + Path: "whatever", + Gvk: resid.Gvk{Group: "pear"}, + CreateIfNotPresent: false, + }, + }, + types.FsSlice{ + { + Path: "whatever", + Gvk: resid.Gvk{Group: "apple"}, + CreateIfNotPresent: true, + }, + }, + fmt.Errorf("hey"), + types.FsSlice{}, + }, +} + +func TestFsSlice_MergeAll(t *testing.T) { + for _, item := range mergeTests { + result, err := item.original.MergeAll(item.incoming) + if item.err == nil { + if err != nil { + t.Fatalf("test %s: unexpected err %v", item.name, err) + } + if !reflect.DeepEqual(item.result, result) { + t.Fatalf("test %s: expected: %v\n but got: %v\n", + item.name, item.result, result) + } + } else { + if err == nil { + t.Fatalf("test %s: expected err: %v", item.name, err) + } + if !strings.Contains(err.Error(), "conflicting fieldspecs") { + t.Fatalf("test %s: unexpected err: %v", item.name, err) + } + } + } +} diff --git a/go/internal/forked/api/types/fieldspec_test.go b/go/internal/forked/api/types/fieldspec_test.go new file mode 100644 index 000000000..32d3f9664 --- /dev/null +++ b/go/internal/forked/api/types/fieldspec_test.go @@ -0,0 +1,144 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package types_test + +import ( + "fmt" + "reflect" + "strings" + "testing" + + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/resid" +) + +var mergeTests = []struct { + name string + original types.FsSlice + incoming types.FsSlice + err error + result types.FsSlice +}{ + { + "normal", + types.FsSlice{ + { + Path: "whatever", + Gvk: resid.Gvk{Group: "apple"}, + CreateIfNotPresent: false, + }, + { + Path: "whatever", + Gvk: resid.Gvk{Group: "pear"}, + CreateIfNotPresent: false, + }, + }, + types.FsSlice{ + { + Path: "home", + Gvk: resid.Gvk{Group: "beans"}, + CreateIfNotPresent: false, + }, + }, + nil, + types.FsSlice{ + { + Path: "whatever", + Gvk: resid.Gvk{Group: "apple"}, + CreateIfNotPresent: false, + }, + { + Path: "whatever", + Gvk: resid.Gvk{Group: "pear"}, + CreateIfNotPresent: false, + }, + { + Path: "home", + Gvk: resid.Gvk{Group: "beans"}, + CreateIfNotPresent: false, + }, + }, + }, + { + "ignore copy", + types.FsSlice{ + { + Path: "whatever", + Gvk: resid.Gvk{Group: "apple"}, + CreateIfNotPresent: false, + }, + { + Path: "whatever", + Gvk: resid.Gvk{Group: "pear"}, + CreateIfNotPresent: false, + }, + }, + types.FsSlice{ + { + Path: "whatever", + Gvk: resid.Gvk{Group: "apple"}, + CreateIfNotPresent: false, + }, + }, + nil, + types.FsSlice{ + { + Path: "whatever", + Gvk: resid.Gvk{Group: "apple"}, + CreateIfNotPresent: false, + }, + { + Path: "whatever", + Gvk: resid.Gvk{Group: "pear"}, + CreateIfNotPresent: false, + }, + }, + }, + { + "error on conflict", + types.FsSlice{ + { + Path: "whatever", + Gvk: resid.Gvk{Group: "apple"}, + CreateIfNotPresent: false, + }, + { + Path: "whatever", + Gvk: resid.Gvk{Group: "pear"}, + CreateIfNotPresent: false, + }, + }, + types.FsSlice{ + { + Path: "whatever", + Gvk: resid.Gvk{Group: "apple"}, + CreateIfNotPresent: true, + }, + }, + fmt.Errorf("hey"), + types.FsSlice{}, + }, +} + +func TestFsSlice_MergeAll(t *testing.T) { + for _, item := range mergeTests { + result, err := item.original.MergeAll(item.incoming) + if item.err == nil { + if err != nil { + t.Fatalf("test %s: unexpected err %v", item.name, err) + } + if !reflect.DeepEqual(item.result, result) { + t.Fatalf("test %s: expected: %v\n but got: %v\n", + item.name, item.result, result) + } + } else { + if err == nil { + t.Fatalf("test %s: expected err: %v", item.name, err) + } + if !strings.Contains(err.Error(), "conflicting fieldspecs") { + t.Fatalf("test %s: unexpected err: %v", item.name, err) + } + } + } +} diff --git a/go/internal/forked/api/types/fix.go b/go/internal/forked/api/types/fix.go new file mode 100644 index 000000000..de70467ed --- /dev/null +++ b/go/internal/forked/api/types/fix.go @@ -0,0 +1,54 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package types + +import ( + "regexp" + + "sigs.k8s.io/yaml" +) + +// FixKustomizationPreUnmarshalling modifies the raw data +// before marshalling - e.g. changes old field names to +// new field names. +func FixKustomizationPreUnmarshalling(data []byte) ([]byte, error) { + deprecatedFieldsMap := map[string]string{ + "imageTags:": "images:", + } + for oldname, newname := range deprecatedFieldsMap { + pattern := regexp.MustCompile(oldname) + data = pattern.ReplaceAll(data, []byte(newname)) + } + doLegacy, err := useLegacyPatch(data) + if err != nil { + return nil, err + } + if doLegacy { + pattern := regexp.MustCompile("patches:") + data = pattern.ReplaceAll(data, []byte("patchesStrategicMerge:")) + } + return data, nil +} + +func useLegacyPatch(data []byte) (bool, error) { + found := false + var object map[string]interface{} + err := yaml.Unmarshal(data, &object) + if err != nil { + return false, err + } + if rawPatches, ok := object["patches"]; ok { + patches, ok := rawPatches.([]interface{}) + if !ok { + return false, err + } + for _, p := range patches { + _, ok := p.(string) + if ok { + found = true + } + } + } + return found, nil +} diff --git a/go/internal/forked/api/types/generationbehavior.go b/go/internal/forked/api/types/generationbehavior.go new file mode 100644 index 000000000..f8f362780 --- /dev/null +++ b/go/internal/forked/api/types/generationbehavior.go @@ -0,0 +1,46 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package types + +// GenerationBehavior specifies generation behavior of configmaps, secrets and maybe other resources. +type GenerationBehavior int + +const ( + // BehaviorUnspecified is an Unspecified behavior; typically treated as a Create. + BehaviorUnspecified GenerationBehavior = iota + // BehaviorCreate makes a new resource. + BehaviorCreate + // BehaviorReplace replaces a resource. + BehaviorReplace + // BehaviorMerge attempts to merge a new resource with an existing resource. + BehaviorMerge +) + +// String converts a GenerationBehavior to a string. +func (b GenerationBehavior) String() string { + switch b { + case BehaviorReplace: + return "replace" + case BehaviorMerge: + return "merge" + case BehaviorCreate: + return "create" + default: + return "unspecified" + } +} + +// NewGenerationBehavior converts a string to a GenerationBehavior. +func NewGenerationBehavior(s string) GenerationBehavior { + switch s { + case "replace": + return BehaviorReplace + case "merge": + return BehaviorMerge + case "create": + return BehaviorCreate + default: + return BehaviorUnspecified + } +} diff --git a/go/internal/forked/api/types/generatorargs.go b/go/internal/forked/api/types/generatorargs.go new file mode 100644 index 000000000..a4145db3d --- /dev/null +++ b/go/internal/forked/api/types/generatorargs.go @@ -0,0 +1,27 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package types + +// GeneratorArgs contains arguments common to ConfigMap and Secret generators. +type GeneratorArgs struct { + // Namespace for the configmap, optional + Namespace string `json:"namespace,omitempty" yaml:"namespace,omitempty"` + + // Name - actually the partial name - of the generated resource. + // The full name ends up being something like + // NamePrefix + this.Name + hash(content of generated resource). + Name string `json:"name,omitempty" yaml:"name,omitempty"` + + // Behavior of generated resource, must be one of: + // 'create': create a new one + // 'replace': replace the existing one + // 'merge': merge with the existing one + Behavior string `json:"behavior,omitempty" yaml:"behavior,omitempty"` + + // KvPairSources for the generator. + KvPairSources `json:",inline,omitempty" yaml:",inline,omitempty"` + + // Local overrides to global generatorOptions field. + Options *GeneratorOptions `json:"options,omitempty" yaml:"options,omitempty"` +} diff --git a/go/internal/forked/api/types/generatoroptions.go b/go/internal/forked/api/types/generatoroptions.go new file mode 100644 index 000000000..683d89bfd --- /dev/null +++ b/go/internal/forked/api/types/generatoroptions.go @@ -0,0 +1,76 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package types + +// GeneratorOptions modify behavior of all ConfigMap and Secret generators. +type GeneratorOptions struct { + // Labels to add to all generated resources. + Labels map[string]string `json:"labels,omitempty" yaml:"labels,omitempty"` + + // Annotations to add to all generated resources. + Annotations map[string]string `json:"annotations,omitempty" yaml:"annotations,omitempty"` + + // DisableNameSuffixHash if true disables the default behavior of adding a + // suffix to the names of generated resources that is a hash of the + // resource contents. + DisableNameSuffixHash bool `json:"disableNameSuffixHash,omitempty" yaml:"disableNameSuffixHash,omitempty"` + + // Immutable if true add to all generated resources. + Immutable bool `json:"immutable,omitempty" yaml:"immutable,omitempty"` +} + +// MergeGlobalOptionsIntoLocal merges two instances of GeneratorOptions. +// Values in the first 'local' argument cannot be overridden by the second +// 'global' argument, except in the case of booleans. +// +// With booleans, there's no way to distinguish an 'intentional' +// false from 'default' false. So the rule is, if the global value +// of the value of a boolean is true, i.e. disable, it trumps the +// local value. If the global value is false, then the local value is +// respected. Bottom line: a local false cannot override a global true. +// +// boolean fields are always a bad idea; should always use enums instead. +func MergeGlobalOptionsIntoLocal( + localOpts *GeneratorOptions, + globalOpts *GeneratorOptions) *GeneratorOptions { + if globalOpts == nil { + return localOpts + } + if localOpts == nil { + localOpts = &GeneratorOptions{} + } + overrideMap(&localOpts.Labels, globalOpts.Labels) + overrideMap(&localOpts.Annotations, globalOpts.Annotations) + if globalOpts.DisableNameSuffixHash { + localOpts.DisableNameSuffixHash = true + } + if globalOpts.Immutable { + localOpts.Immutable = true + } + return localOpts +} + +func overrideMap(localMap *map[string]string, globalMap map[string]string) { + if *localMap == nil { + if globalMap != nil { + *localMap = CopyMap(globalMap) + } + return + } + for k, v := range globalMap { + _, ok := (*localMap)[k] + if !ok { + (*localMap)[k] = v + } + } +} + +// CopyMap copies a map. +func CopyMap(in map[string]string) map[string]string { + out := make(map[string]string) + for k, v := range in { + out[k] = v + } + return out +} diff --git a/go/internal/forked/api/types/generatoroptions_test.go b/go/internal/forked/api/types/generatoroptions_test.go new file mode 100644 index 000000000..a30e70c94 --- /dev/null +++ b/go/internal/forked/api/types/generatoroptions_test.go @@ -0,0 +1,137 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package types_test + +import ( + "reflect" + "testing" + + "sigs.k8s.io/kustomize/api/types" +) + +func TestMergeGlobalOptionsIntoLocal(t *testing.T) { + tests := []struct { + name string + local *types.GeneratorOptions + global *types.GeneratorOptions + expected *types.GeneratorOptions + }{ + { + name: "everything nil", + local: nil, + global: nil, + expected: nil, + }, + { + name: "nil global", + local: &types.GeneratorOptions{ + Labels: map[string]string{"pet": "dog"}, + Annotations: map[string]string{"fruit": "apple"}, + }, + global: nil, + expected: &types.GeneratorOptions{ + Labels: map[string]string{"pet": "dog"}, + Annotations: map[string]string{"fruit": "apple"}, + DisableNameSuffixHash: false, + Immutable: false, + }, + }, + { + name: "nil local", + local: nil, + global: &types.GeneratorOptions{ + Labels: map[string]string{"pet": "dog"}, + Annotations: map[string]string{"fruit": "apple"}, + }, + expected: &types.GeneratorOptions{ + Labels: map[string]string{"pet": "dog"}, + Annotations: map[string]string{"fruit": "apple"}, + DisableNameSuffixHash: false, + Immutable: false, + }, + }, + { + name: "global doesn't damage local", + local: &types.GeneratorOptions{ + Labels: map[string]string{"pet": "dog"}, + Annotations: map[string]string{ + "fruit": "apple"}, + }, + global: &types.GeneratorOptions{ + Labels: map[string]string{ + "pet": "cat", + "simpson": "homer", + }, + Annotations: map[string]string{ + "fruit": "peach", + "tesla": "Y", + }, + }, + expected: &types.GeneratorOptions{ + Labels: map[string]string{ + "pet": "dog", + "simpson": "homer", + }, + Annotations: map[string]string{ + "fruit": "apple", + "tesla": "Y", + }, + DisableNameSuffixHash: false, + Immutable: false, + }, + }, + { + name: "global disable trumps local", + local: &types.GeneratorOptions{ + DisableNameSuffixHash: false, + Immutable: false, + }, + global: &types.GeneratorOptions{ + DisableNameSuffixHash: true, + Immutable: true, + }, + expected: &types.GeneratorOptions{ + DisableNameSuffixHash: true, + Immutable: true, + }, + }, + { + name: "local disable works", + local: &types.GeneratorOptions{ + DisableNameSuffixHash: true, + Immutable: true, + }, + global: &types.GeneratorOptions{ + DisableNameSuffixHash: false, + Immutable: false, + }, + expected: &types.GeneratorOptions{ + DisableNameSuffixHash: true, + Immutable: true, + }, + }, + { + name: "everyone wants disable", + local: &types.GeneratorOptions{ + DisableNameSuffixHash: true, + Immutable: true, + }, + global: &types.GeneratorOptions{ + DisableNameSuffixHash: true, + Immutable: true, + }, + expected: &types.GeneratorOptions{ + DisableNameSuffixHash: true, + Immutable: true, + }, + }, + } + for _, tc := range tests { + actual := types.MergeGlobalOptionsIntoLocal(tc.local, tc.global) + if !reflect.DeepEqual(tc.expected, actual) { + t.Fatalf("%s annotations: Expected '%v', got '%v'", + tc.name, tc.expected, *actual) + } + } +} diff --git a/go/internal/forked/api/types/helmchartargs.go b/go/internal/forked/api/types/helmchartargs.go new file mode 100644 index 000000000..c0fff2457 --- /dev/null +++ b/go/internal/forked/api/types/helmchartargs.go @@ -0,0 +1,122 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package types + +type HelmGlobals struct { + // ChartHome is a file path, relative to the kustomization root, + // to a directory containing a subdirectory for each chart to be + // included in the kustomization. + // The default value of this field is "charts". + // So, for example, kustomize looks for the minecraft chart + // at {kustomizationRoot}/{ChartHome}/minecraft. + // If the chart is there at build time, kustomize will use it as found, + // and not check version numbers or dates. + // If the chart is not there, kustomize will attempt to pull it + // using the version number specified in the kustomization file, + // and put it there. To suppress the pull attempt, simply assure + // that the chart is already there. + ChartHome string `json:"chartHome,omitempty" yaml:"chartHome,omitempty"` + + // ConfigHome defines a value that kustomize should pass to helm via + // the HELM_CONFIG_HOME environment variable. kustomize doesn't attempt + // to read or write this directory. + // If omitted, {tmpDir}/helm is used, where {tmpDir} is some temporary + // directory created by kustomize for the benefit of helm. + // Likewise, kustomize sets + // HELM_CACHE_HOME={ConfigHome}/.cache + // HELM_DATA_HOME={ConfigHome}/.data + // for the helm subprocess. + ConfigHome string `json:"configHome,omitempty" yaml:"configHome,omitempty"` +} + +type HelmChart struct { + // Name is the name of the chart, e.g. 'minecraft'. + Name string `json:"name,omitempty" yaml:"name,omitempty"` + + // Version is the version of the chart, e.g. '3.1.3' + Version string `json:"version,omitempty" yaml:"version,omitempty"` + + // Repo is a URL locating the chart on the internet. + // This is the argument to helm's `--repo` flag, e.g. + // `https://itzg.github.io/minecraft-server-charts`. + Repo string `json:"repo,omitempty" yaml:"repo,omitempty"` + + // ReleaseName replaces RELEASE-NAME in chart template output, + // making a particular inflation of a chart unique with respect to + // other inflations of the same chart in a cluster. It's the first + // argument to the helm `install` and `template` commands, i.e. + // helm install {RELEASE-NAME} {chartName} + // helm template {RELEASE-NAME} {chartName} + // If omitted, the flag --generate-name is passed to 'helm template'. + ReleaseName string `json:"releaseName,omitempty" yaml:"releaseName,omitempty"` + + // Namespace set the target namespace for a release. It is .Release.Namespace + // in the helm template + Namespace string `json:"namespace,omitempty" yaml:"namespace,omitempty"` + + // ValuesFile is local file path to a values file to use _instead of_ + // the default values that accompanied the chart. + // The default values are in '{ChartHome}/{Name}/values.yaml'. + ValuesFile string `json:"valuesFile,omitempty" yaml:"valuesFile,omitempty"` + + // ValuesInline holds value mappings specified directly, + // rather than in a separate file. + ValuesInline map[string]interface{} `json:"valuesInline,omitempty" yaml:"valuesInline,omitempty"` + + // ValuesMerge specifies how to treat ValuesInline with respect to Values. + // Legal values: 'merge', 'override', 'replace'. + // Defaults to 'override'. + ValuesMerge string `json:"valuesMerge,omitempty" yaml:"valuesMerge,omitempty"` + + // IncludeCRDs specifies if Helm should also generate CustomResourceDefinitions. + // Defaults to 'false'. + IncludeCRDs bool `json:"includeCRDs,omitempty" yaml:"includeCRDs,omitempty"` +} + +// HelmChartArgs contains arguments to helm. +// Deprecated. Use HelmGlobals and HelmChart instead. +type HelmChartArgs struct { + ChartName string `json:"chartName,omitempty" yaml:"chartName,omitempty"` + ChartVersion string `json:"chartVersion,omitempty" yaml:"chartVersion,omitempty"` + ChartRepoURL string `json:"chartRepoUrl,omitempty" yaml:"chartRepoUrl,omitempty"` + ChartHome string `json:"chartHome,omitempty" yaml:"chartHome,omitempty"` + ChartRepoName string `json:"chartRepoName,omitempty" yaml:"chartRepoName,omitempty"` + HelmBin string `json:"helmBin,omitempty" yaml:"helmBin,omitempty"` + HelmHome string `json:"helmHome,omitempty" yaml:"helmHome,omitempty"` + Values string `json:"values,omitempty" yaml:"values,omitempty"` + ValuesLocal map[string]interface{} `json:"valuesLocal,omitempty" yaml:"valuesLocal,omitempty"` + ValuesMerge string `json:"valuesMerge,omitempty" yaml:"valuesMerge,omitempty"` + ReleaseName string `json:"releaseName,omitempty" yaml:"releaseName,omitempty"` + ReleaseNamespace string `json:"releaseNamespace,omitempty" yaml:"releaseNamespace,omitempty"` + ExtraArgs []string `json:"extraArgs,omitempty" yaml:"extraArgs,omitempty"` +} + +// SplitHelmParameters splits helm parameters into +// per-chart params and global chart-independent parameters. +func SplitHelmParameters( + oldArgs []HelmChartArgs) (charts []HelmChart, globals HelmGlobals) { + for _, old := range oldArgs { + charts = append(charts, makeHelmChartFromHca(&old)) + if old.HelmHome != "" { + // last non-empty wins + globals.ConfigHome = old.HelmHome + } + if old.ChartHome != "" { + // last non-empty wins + globals.ChartHome = old.ChartHome + } + } + return charts, globals +} + +func makeHelmChartFromHca(old *HelmChartArgs) (c HelmChart) { + c.Name = old.ChartName + c.Version = old.ChartVersion + c.Repo = old.ChartRepoURL + c.ValuesFile = old.Values + c.ValuesInline = old.ValuesLocal + c.ValuesMerge = old.ValuesMerge + c.ReleaseName = old.ReleaseName + return +} diff --git a/go/internal/forked/api/types/iampolicygenerator.go b/go/internal/forked/api/types/iampolicygenerator.go new file mode 100644 index 000000000..f1d27ba7b --- /dev/null +++ b/go/internal/forked/api/types/iampolicygenerator.go @@ -0,0 +1,36 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package types + +type Cloud string + +const GKE Cloud = "gke" + +// IAMPolicyGeneratorArgs contains arguments to generate a GKE service account resource. +type IAMPolicyGeneratorArgs struct { + // which cloud provider to generate for (e.g. "gke") + Cloud `json:"cloud" yaml:"cloud"` + + // information about the kubernetes cluster for this object + KubernetesService `json:"kubernetesService" yaml:"kubernetesService"` + + // information about the service account and project + ServiceAccount `json:"serviceAccount" yaml:"serviceAccount"` +} + +type KubernetesService struct { + // the name used for the Kubernetes service account + Name string `json:"name" yaml:"name"` + + // the name of the Kubernetes namespace for this object + Namespace string `json:"namespace,omitempty" yaml:"namespace,omitempty"` +} + +type ServiceAccount struct { + // the name of the new cloud provider service account + Name string `json:"name" yaml:"name"` + + // The ID of the project + ProjectId string `json:"projectId" yaml:"projectId"` +} diff --git a/go/internal/forked/api/types/image.go b/go/internal/forked/api/types/image.go new file mode 100644 index 000000000..c7982338f --- /dev/null +++ b/go/internal/forked/api/types/image.go @@ -0,0 +1,21 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package types + +// Image contains an image name, a new name, a new tag or digest, +// which will replace the original name and tag. +type Image struct { + // Name is a tag-less image name. + Name string `json:"name,omitempty" yaml:"name,omitempty"` + + // NewName is the value used to replace the original name. + NewName string `json:"newName,omitempty" yaml:"newName,omitempty"` + + // NewTag is the value used to replace the original tag. + NewTag string `json:"newTag,omitempty" yaml:"newTag,omitempty"` + + // Digest is the value used to replace the original image tag. + // If digest is present NewTag value is ignored. + Digest string `json:"digest,omitempty" yaml:"digest,omitempty"` +} diff --git a/go/internal/forked/api/types/inventory.go b/go/internal/forked/api/types/inventory.go new file mode 100644 index 000000000..544deb5e5 --- /dev/null +++ b/go/internal/forked/api/types/inventory.go @@ -0,0 +1,16 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package types + +// Inventory records all objects touched in a build operation. +type Inventory struct { + Type string `json:"type,omitempty" yaml:"type,omitempty"` + ConfigMap NameArgs `json:"configMap,omitempty" yaml:"configMap,omitempty"` +} + +// NameArgs holds both namespace and name. +type NameArgs struct { + Name string `json:"name,omitempty" yaml:"name,omitempty"` + Namespace string `json:"namespace,omitempty" yaml:"namespace,omitempty"` +} diff --git a/go/internal/forked/api/types/kustomization.go b/go/internal/forked/api/types/kustomization.go new file mode 100644 index 000000000..a128c7749 --- /dev/null +++ b/go/internal/forked/api/types/kustomization.go @@ -0,0 +1,274 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package types + +import ( + "bytes" + "encoding/json" + "fmt" + + "sigs.k8s.io/yaml" +) + +const ( + KustomizationVersion = "kustomize.config.k8s.io/v1beta1" + KustomizationKind = "Kustomization" + ComponentVersion = "kustomize.config.k8s.io/v1alpha1" + ComponentKind = "Component" + MetadataNamespacePath = "metadata/namespace" + + OriginAnnotations = "originAnnotations" + TransformerAnnotations = "transformerAnnotations" + ManagedByLabelOption = "managedByLabel" +) + +var BuildMetadataOptions = []string{OriginAnnotations, TransformerAnnotations, ManagedByLabelOption} + +// Kustomization holds the information needed to generate customized k8s api resources. +type Kustomization struct { + TypeMeta `json:",inline" yaml:",inline"` + + // MetaData is a pointer to avoid marshalling empty struct + MetaData *ObjectMeta `json:"metadata,omitempty" yaml:"metadata,omitempty"` + + // OpenAPI contains information about what kubernetes schema to use. + OpenAPI map[string]string `json:"openapi,omitempty" yaml:"openapi,omitempty"` + + // + // Operators - what kustomize can do. + // + + // NamePrefix will prefix the names of all resources mentioned in the kustomization + // file including generated configmaps and secrets. + NamePrefix string `json:"namePrefix,omitempty" yaml:"namePrefix,omitempty"` + + // NameSuffix will suffix the names of all resources mentioned in the kustomization + // file including generated configmaps and secrets. + NameSuffix string `json:"nameSuffix,omitempty" yaml:"nameSuffix,omitempty"` + + // Namespace to add to all objects. + Namespace string `json:"namespace,omitempty" yaml:"namespace,omitempty"` + + // CommonLabels to add to all objects and selectors. + CommonLabels map[string]string `json:"commonLabels,omitempty" yaml:"commonLabels,omitempty"` + + // Labels to add to all objects but not selectors. + Labels []Label `json:"labels,omitempty" yaml:"labels,omitempty"` + + // CommonAnnotations to add to all objects. + CommonAnnotations map[string]string `json:"commonAnnotations,omitempty" yaml:"commonAnnotations,omitempty"` + + // PatchesStrategicMerge specifies the relative path to a file + // containing a strategic merge patch. Format documented at + // https://github.com/kubernetes/community/blob/master/contributors/devel/strategic-merge-patch.md + // URLs and globs are not supported. + PatchesStrategicMerge []PatchStrategicMerge `json:"patchesStrategicMerge,omitempty" yaml:"patchesStrategicMerge,omitempty"` + + // JSONPatches is a list of JSONPatch for applying JSON patch. + // Format documented at https://tools.ietf.org/html/rfc6902 + // and http://jsonpatch.com + PatchesJson6902 []Patch `json:"patchesJson6902,omitempty" yaml:"patchesJson6902,omitempty"` + + // Patches is a list of patches, where each one can be either a + // Strategic Merge Patch or a JSON patch. + // Each patch can be applied to multiple target objects. + Patches []Patch `json:"patches,omitempty" yaml:"patches,omitempty"` + + // Images is a list of (image name, new name, new tag or digest) + // for changing image names, tags or digests. This can also be achieved with a + // patch, but this operator is simpler to specify. + Images []Image `json:"images,omitempty" yaml:"images,omitempty"` + + // Replacements is a list of replacements, which will copy nodes from a + // specified source to N specified targets. + Replacements []ReplacementField `json:"replacements,omitempty" yaml:"replacements,omitempty"` + + // Replicas is a list of {resourcename, count} that allows for simpler replica + // specification. This can also be done with a patch. + Replicas []Replica `json:"replicas,omitempty" yaml:"replicas,omitempty"` + + // Vars allow things modified by kustomize to be injected into a + // kubernetes object specification. A var is a name (e.g. FOO) associated + // with a field in a specific resource instance. The field must + // contain a value of type string/bool/int/float, and defaults to the name field + // of the instance. Any appearance of "$(FOO)" in the object + // spec will be replaced at kustomize build time, after the final + // value of the specified field has been determined. + Vars []Var `json:"vars,omitempty" yaml:"vars,omitempty"` + + // + // Operands - what kustomize operates on. + // + + // Resources specifies relative paths to files holding YAML representations + // of kubernetes API objects, or specifications of other kustomizations + // via relative paths, absolute paths, or URLs. + Resources []string `json:"resources,omitempty" yaml:"resources,omitempty"` + + // Components specifies relative paths to specifications of other Components + // via relative paths, absolute paths, or URLs. + Components []string `json:"components,omitempty" yaml:"components,omitempty"` + + // Crds specifies relative paths to Custom Resource Definition files. + // This allows custom resources to be recognized as operands, making + // it possible to add them to the Resources list. + // CRDs themselves are not modified. + Crds []string `json:"crds,omitempty" yaml:"crds,omitempty"` + + // Deprecated. + // Anything that would have been specified here should + // be specified in the Resources field instead. + Bases []string `json:"bases,omitempty" yaml:"bases,omitempty"` + + // + // Generators (operators that create operands) + // + + // ConfigMapGenerator is a list of configmaps to generate from + // local data (one configMap per list item). + // The resulting resource is a normal operand, subject to + // name prefixing, patching, etc. By default, the name of + // the map will have a suffix hash generated from its contents. + ConfigMapGenerator []ConfigMapArgs `json:"configMapGenerator,omitempty" yaml:"configMapGenerator,omitempty"` + + // SecretGenerator is a list of secrets to generate from + // local data (one secret per list item). + // The resulting resource is a normal operand, subject to + // name prefixing, patching, etc. By default, the name of + // the map will have a suffix hash generated from its contents. + SecretGenerator []SecretArgs `json:"secretGenerator,omitempty" yaml:"secretGenerator,omitempty"` + + // HelmGlobals contains helm configuration that isn't chart specific. + HelmGlobals *HelmGlobals `json:"helmGlobals,omitempty" yaml:"helmGlobals,omitempty"` + + // HelmCharts is a list of helm chart configuration instances. + HelmCharts []HelmChart `json:"helmCharts,omitempty" yaml:"helmCharts,omitempty"` + + // HelmChartInflationGenerator is a list of helm chart configurations. + // Deprecated. Auto-converted to HelmGlobals and HelmCharts. + HelmChartInflationGenerator []HelmChartArgs `json:"helmChartInflationGenerator,omitempty" yaml:"helmChartInflationGenerator,omitempty"` + + // GeneratorOptions modify behavior of all ConfigMap and Secret generators. + GeneratorOptions *GeneratorOptions `json:"generatorOptions,omitempty" yaml:"generatorOptions,omitempty"` + + // Configurations is a list of transformer configuration files + Configurations []string `json:"configurations,omitempty" yaml:"configurations,omitempty"` + + // Generators is a list of files containing custom generators + Generators []string `json:"generators,omitempty" yaml:"generators,omitempty"` + + // Transformers is a list of files containing transformers + Transformers []string `json:"transformers,omitempty" yaml:"transformers,omitempty"` + + // Validators is a list of files containing validators + Validators []string `json:"validators,omitempty" yaml:"validators,omitempty"` + + // Inventory appends an object that contains the record + // of all other objects, which can be used in apply, prune and delete + Inventory *Inventory `json:"inventory,omitempty" yaml:"inventory,omitempty"` + + // BuildMetadata is a list of strings used to toggle different build options + BuildMetadata []string `json:"buildMetadata,omitempty" yaml:"buildMetadata,omitempty"` +} + +// FixKustomizationPostUnmarshalling fixes things +// like empty fields that should not be empty, or +// moving content of deprecated fields to newer +// fields. +func (k *Kustomization) FixKustomizationPostUnmarshalling() { + if k.Kind == "" { + k.Kind = KustomizationKind + } + if k.APIVersion == "" { + if k.Kind == ComponentKind { + k.APIVersion = ComponentVersion + } else { + k.APIVersion = KustomizationVersion + } + } + k.Resources = append(k.Resources, k.Bases...) + k.Bases = nil + for i, g := range k.ConfigMapGenerator { + if g.EnvSource != "" { + k.ConfigMapGenerator[i].EnvSources = + append(g.EnvSources, g.EnvSource) + k.ConfigMapGenerator[i].EnvSource = "" + } + } + for i, g := range k.SecretGenerator { + if g.EnvSource != "" { + k.SecretGenerator[i].EnvSources = + append(g.EnvSources, g.EnvSource) + k.SecretGenerator[i].EnvSource = "" + } + } + charts, globals := SplitHelmParameters(k.HelmChartInflationGenerator) + if k.HelmGlobals == nil { + if globals.ChartHome != "" || globals.ConfigHome != "" { + k.HelmGlobals = &globals + } + } + k.HelmCharts = append(k.HelmCharts, charts...) + // Wipe it for the fix command. + k.HelmChartInflationGenerator = nil +} + +// FixKustomizationPreMarshalling fixes things +// that should occur after the kustomization file +// has been processed. +func (k *Kustomization) FixKustomizationPreMarshalling() error { + // PatchesJson6902 should be under the Patches field. + k.Patches = append(k.Patches, k.PatchesJson6902...) + k.PatchesJson6902 = nil + + // this fix is not in FixKustomizationPostUnmarshalling because + // it will break some commands like `create` and `add`. those + // commands depend on 'commonLabels' field + if cl := labelFromCommonLabels(k.CommonLabels); cl != nil { + // check conflicts between commonLabels and labels + for _, l := range k.Labels { + for k := range l.Pairs { + if _, exist := cl.Pairs[k]; exist { + return fmt.Errorf("label name '%s' exists in both commonLabels and labels", k) + } + } + } + k.Labels = append(k.Labels, *cl) + k.CommonLabels = nil + } + + return nil +} + +func (k *Kustomization) EnforceFields() []string { + var errs []string + if k.Kind != "" && k.Kind != KustomizationKind && k.Kind != ComponentKind { + errs = append(errs, "kind should be "+KustomizationKind+" or "+ComponentKind) + } + requiredVersion := KustomizationVersion + if k.Kind == ComponentKind { + requiredVersion = ComponentVersion + } + if k.APIVersion != "" && k.APIVersion != requiredVersion { + errs = append(errs, "apiVersion for "+k.Kind+" should be "+requiredVersion) + } + return errs +} + +// Unmarshal replace k with the content in YAML input y +func (k *Kustomization) Unmarshal(y []byte) error { + j, err := yaml.YAMLToJSON(y) + if err != nil { + return err + } + dec := json.NewDecoder(bytes.NewReader(j)) + dec.DisallowUnknownFields() + var nk Kustomization + err = dec.Decode(&nk) + if err != nil { + return err + } + *k = nk + return nil +} diff --git a/go/internal/forked/api/types/kustomization_test.go b/go/internal/forked/api/types/kustomization_test.go new file mode 100644 index 000000000..74101b1ab --- /dev/null +++ b/go/internal/forked/api/types/kustomization_test.go @@ -0,0 +1,225 @@ +package types + +import ( + "reflect" + "testing" +) + +func fixKustomizationPostUnmarshallingCheck(k, e *Kustomization) bool { + return k.Kind == e.Kind && + k.APIVersion == e.APIVersion && + len(k.Resources) == len(e.Resources) && + k.Resources[0] == e.Resources[0] && + k.Bases == nil +} + +func TestFixKustomizationPostUnmarshalling(t *testing.T) { + var k Kustomization + k.Bases = append(k.Bases, "foo") + k.ConfigMapGenerator = []ConfigMapArgs{{GeneratorArgs{ + KvPairSources: KvPairSources{ + EnvSources: []string{"a", "b"}, + EnvSource: "c", + }, + }}} + k.CommonLabels = map[string]string{ + "foo": "bar", + } + k.FixKustomizationPostUnmarshalling() + + expected := Kustomization{ + TypeMeta: TypeMeta{ + Kind: KustomizationKind, + APIVersion: KustomizationVersion, + }, + Resources: []string{"foo"}, + ConfigMapGenerator: []ConfigMapArgs{{GeneratorArgs{ + KvPairSources: KvPairSources{ + EnvSources: []string{"a", "b", "c"}, + }, + }}}, + CommonLabels: map[string]string{ + "foo": "bar", + }, + } + if !reflect.DeepEqual(k, expected) { + t.Fatalf("unexpected output: %v", k) + } + if !fixKustomizationPostUnmarshallingCheck(&k, &expected) { + t.Fatalf("unexpected output: %v", k) + } +} + +func TestFixKustomizationPostUnmarshalling_2(t *testing.T) { + k := Kustomization{ + TypeMeta: TypeMeta{ + Kind: ComponentKind, + }, + } + k.Bases = append(k.Bases, "foo") + k.FixKustomizationPostUnmarshalling() + + expected := Kustomization{ + TypeMeta: TypeMeta{ + Kind: ComponentKind, + APIVersion: ComponentVersion, + }, + Resources: []string{"foo"}, + } + + if !fixKustomizationPostUnmarshallingCheck(&k, &expected) { + t.Fatalf("unexpected output: %v", k) + } +} + +func TestEnforceFields_InvalidKindAndVersion(t *testing.T) { + k := Kustomization{ + TypeMeta: TypeMeta{ + Kind: "foo", + APIVersion: "bar", + }, + } + + errs := k.EnforceFields() + if len(errs) != 2 { + t.Fatalf("number of errors should be 2 but got: %v", errs) + } +} + +func TestEnforceFields_InvalidKind(t *testing.T) { + k := Kustomization{ + TypeMeta: TypeMeta{ + Kind: "foo", + APIVersion: KustomizationVersion, + }, + } + + errs := k.EnforceFields() + if len(errs) != 1 { + t.Fatalf("number of errors should be 1 but got: %v", errs) + } + + expected := "kind should be " + KustomizationKind + " or " + ComponentKind + if errs[0] != expected { + t.Fatalf("error should be %v but got: %v", expected, errs[0]) + } +} + +func TestEnforceFields_InvalidVersion(t *testing.T) { + k := Kustomization{ + TypeMeta: TypeMeta{ + Kind: KustomizationKind, + APIVersion: "bar", + }, + } + + errs := k.EnforceFields() + if len(errs) != 1 { + t.Fatalf("number of errors should be 1 but got: %v", errs) + } + + expected := "apiVersion for " + k.Kind + " should be " + KustomizationVersion + if errs[0] != expected { + t.Fatalf("error should be %v but got: %v", expected, errs[0]) + } +} + +func TestEnforceFields_ComponentKind(t *testing.T) { + k := Kustomization{ + TypeMeta: TypeMeta{ + Kind: ComponentKind, + APIVersion: "bar", + }, + } + + errs := k.EnforceFields() + if len(errs) != 1 { + t.Fatalf("number of errors should be 1 but got: %v", errs) + } + + expected := "apiVersion for " + k.Kind + " should be " + ComponentVersion + if errs[0] != expected { + t.Fatalf("error should be %v but got: %v", expected, errs[0]) + } +} + +func TestEnforceFields(t *testing.T) { + k := Kustomization{ + TypeMeta: TypeMeta{ + Kind: KustomizationKind, + APIVersion: KustomizationVersion, + }, + } + + errs := k.EnforceFields() + if len(errs) != 0 { + t.Fatalf("number of errors should be 0 but got: %v", errs) + } +} + +func TestUnmarshal(t *testing.T) { + y := []byte(` +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization +metadata: + name: kust + namespace: default + labels: + foo: bar + annotations: + foo: bar +resources: +- foo +- bar +nameSuffix: dog +namePrefix: cat`) + var k Kustomization + err := k.Unmarshal(y) + if err != nil { + t.Fatal(err) + } + meta := ObjectMeta{ + Name: "kust", + Namespace: "default", + Labels: map[string]string{ + "foo": "bar", + }, + Annotations: map[string]string{ + "foo": "bar", + }, + } + if k.Kind != KustomizationKind || k.APIVersion != KustomizationVersion || + len(k.Resources) != 2 || k.NamePrefix != "cat" || k.NameSuffix != "dog" || + k.MetaData.Name != meta.Name || k.MetaData.Namespace != meta.Namespace || + k.MetaData.Labels["foo"] != meta.Labels["foo"] || k.MetaData.Annotations["foo"] != meta.Annotations["foo"] { + t.Fatalf("wrong unmarshal result: %v", k) + } +} + +func TestUnmarshal_UnkownField(t *testing.T) { + y := []byte(` +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization +unknown: foo`) + var k Kustomization + err := k.Unmarshal(y) + if err == nil { + t.Fatalf("expect an error") + } + expect := "json: unknown field \"unknown\"" + if err.Error() != expect { + t.Fatalf("expect %v but got: %v", expect, err.Error()) + } +} + +func TestUnmarshal_InvalidYaml(t *testing.T) { + y := []byte(` +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization +unknown`) + var k Kustomization + err := k.Unmarshal(y) + if err == nil { + t.Fatalf("expect an error") + } +} diff --git a/go/internal/forked/api/types/kvpairsources.go b/go/internal/forked/api/types/kvpairsources.go new file mode 100644 index 000000000..9898defad --- /dev/null +++ b/go/internal/forked/api/types/kvpairsources.go @@ -0,0 +1,36 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package types + +// KvPairSources defines places to obtain key value pairs. +type KvPairSources struct { + // LiteralSources is a list of literal + // pair sources. Each literal source should + // be a key and literal value, e.g. `key=value` + LiteralSources []string `json:"literals,omitempty" yaml:"literals,omitempty"` + + // FileSources is a list of file "sources" to + // use in creating a list of key, value pairs. + // A source takes the form: [{key}=]{path} + // If the "key=" part is missing, the key is the + // path's basename. If they "key=" part is present, + // it becomes the key (replacing the basename). + // In either case, the value is the file contents. + // Specifying a directory will iterate each named + // file in the directory whose basename is a + // valid configmap key. + FileSources []string `json:"files,omitempty" yaml:"files,omitempty"` + + // EnvSources is a list of file paths. + // The contents of each file should be one + // key=value pair per line, e.g. a Docker + // or npm ".env" file or a ".ini" file + // (wikipedia.org/wiki/INI_file) + EnvSources []string `json:"envs,omitempty" yaml:"envs,omitempty"` + + // Older, singular form of EnvSources. + // On edits (e.g. `kustomize fix`) this is merged into the plural form + // for consistency with LiteralSources and FileSources. + EnvSource string `json:"env,omitempty" yaml:"env,omitempty"` +} diff --git a/go/internal/forked/api/types/labels.go b/go/internal/forked/api/types/labels.go new file mode 100644 index 000000000..e2a2aee78 --- /dev/null +++ b/go/internal/forked/api/types/labels.go @@ -0,0 +1,25 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package types + +type Label struct { + // Pairs contains the key-value pairs for labels to add + Pairs map[string]string `json:"pairs,omitempty" yaml:"pairs,omitempty"` + // IncludeSelectors inidicates should transformer include the + // fieldSpecs for selectors. Custom fieldSpecs specified by + // FieldSpecs will be merged with builtin fieldSpecs if this + // is true. + IncludeSelectors bool `json:"includeSelectors,omitempty" yaml:"includeSelectors,omitempty"` + FieldSpecs []FieldSpec `json:"fields,omitempty" yaml:"fields,omitempty"` +} + +func labelFromCommonLabels(commonLabels map[string]string) *Label { + if len(commonLabels) == 0 { + return nil + } + return &Label{ + Pairs: commonLabels, + IncludeSelectors: true, + } +} diff --git a/go/internal/forked/api/types/loadrestrictions.go b/go/internal/forked/api/types/loadrestrictions.go new file mode 100644 index 000000000..6617abdac --- /dev/null +++ b/go/internal/forked/api/types/loadrestrictions.go @@ -0,0 +1,24 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package types + +// Restrictions on what things can be referred to +// in a kustomization file. +// +//go:generate stringer -type=LoadRestrictions +type LoadRestrictions int + +const ( + LoadRestrictionsUnknown LoadRestrictions = iota + + // Files referenced by a kustomization file must be in + // or under the directory holding the kustomization + // file itself. + LoadRestrictionsRootOnly + + // The kustomization file may specify absolute or + // relative paths to patch or resources files outside + // its own tree. + LoadRestrictionsNone +) diff --git a/go/internal/forked/api/types/loadrestrictions_string.go b/go/internal/forked/api/types/loadrestrictions_string.go new file mode 100644 index 000000000..d2355950b --- /dev/null +++ b/go/internal/forked/api/types/loadrestrictions_string.go @@ -0,0 +1,25 @@ +// Code generated by "stringer -type=LoadRestrictions"; DO NOT EDIT. + +package types + +import "strconv" + +func _() { + // An "invalid array index" compiler error signifies that the constant values have changed. + // Re-run the stringer command to generate them again. + var x [1]struct{} + _ = x[LoadRestrictionsUnknown-0] + _ = x[LoadRestrictionsRootOnly-1] + _ = x[LoadRestrictionsNone-2] +} + +const _LoadRestrictions_name = "LoadRestrictionsUnknownLoadRestrictionsRootOnlyLoadRestrictionsNone" + +var _LoadRestrictions_index = [...]uint8{0, 23, 47, 67} + +func (i LoadRestrictions) String() string { + if i < 0 || i >= LoadRestrictions(len(_LoadRestrictions_index)-1) { + return "LoadRestrictions(" + strconv.FormatInt(int64(i), 10) + ")" + } + return _LoadRestrictions_name[_LoadRestrictions_index[i]:_LoadRestrictions_index[i+1]] +} diff --git a/go/internal/forked/api/types/objectmeta.go b/go/internal/forked/api/types/objectmeta.go new file mode 100644 index 000000000..4f5d41f4a --- /dev/null +++ b/go/internal/forked/api/types/objectmeta.go @@ -0,0 +1,13 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package types + +// ObjectMeta partially copies apimachinery/pkg/apis/meta/v1.ObjectMeta +// No need for a direct dependence; the fields are stable. +type ObjectMeta struct { + Name string `json:"name,omitempty" yaml:"name,omitempty"` + Namespace string `json:"namespace,omitempty" yaml:"namespace,omitempty"` + Labels map[string]string `json:"labels,omitempty" yaml:"labels,omitempty"` + Annotations map[string]string `json:"annotations,omitempty" yaml:"annotations,omitempty"` +} diff --git a/go/internal/forked/api/types/pair.go b/go/internal/forked/api/types/pair.go new file mode 100644 index 000000000..63cfb776e --- /dev/null +++ b/go/internal/forked/api/types/pair.go @@ -0,0 +1,10 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package types + +// Pair is a key value pair. +type Pair struct { + Key string + Value string +} diff --git a/go/internal/forked/api/types/patch.go b/go/internal/forked/api/types/patch.go new file mode 100644 index 000000000..5310a6e66 --- /dev/null +++ b/go/internal/forked/api/types/patch.go @@ -0,0 +1,34 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package types + +import "reflect" + +// Patch represent either a Strategic Merge Patch or a JSON patch +// and its targets. +// The content of the patch can either be from a file +// or from an inline string. +type Patch struct { + // Path is a relative file path to the patch file. + Path string `json:"path,omitempty" yaml:"path,omitempty"` + + // Patch is the content of a patch. + Patch string `json:"patch,omitempty" yaml:"patch,omitempty"` + + // Target points to the resources that the patch is applied to + Target *Selector `json:"target,omitempty" yaml:"target,omitempty"` + + // Options is a list of options for the patch + Options map[string]bool `json:"options,omitempty" yaml:"options,omitempty"` +} + +// Equals return true if p equals o. +func (p *Patch) Equals(o Patch) bool { + targetEqual := (p.Target == o.Target) || + (p.Target != nil && o.Target != nil && *p.Target == *o.Target) + return p.Path == o.Path && + p.Patch == o.Patch && + targetEqual && + reflect.DeepEqual(p.Options, o.Options) +} diff --git a/go/internal/forked/api/types/patch_test.go b/go/internal/forked/api/types/patch_test.go new file mode 100644 index 000000000..9a8205382 --- /dev/null +++ b/go/internal/forked/api/types/patch_test.go @@ -0,0 +1,131 @@ +package types_test + +import ( + "testing" + + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/resid" +) + +func TestPatchEquals(t *testing.T) { + selector := types.Selector{ + ResId: resid.ResId{ + Gvk: resid.Gvk{ + Group: "group", + Version: "version", + Kind: "kind", + }, + Name: "name", + Namespace: "namespace", + }, + LabelSelector: "selector", + AnnotationSelector: "selector", + } + type testcase struct { + patch1 types.Patch + patch2 types.Patch + expect bool + name string + } + testcases := []testcase{ + { + name: "empty patches", + patch1: types.Patch{}, + patch2: types.Patch{}, + expect: true, + }, + { + name: "full patches", + patch1: types.Patch{ + Path: "foo", + Patch: "bar", + Target: &types.Selector{ + ResId: resid.ResId{ + Gvk: resid.Gvk{ + Group: "group", + Version: "version", + Kind: "kind", + }, + Name: "name", + Namespace: "namespace", + }, + LabelSelector: "selector", + AnnotationSelector: "selector", + }, + }, + patch2: types.Patch{ + Path: "foo", + Patch: "bar", + Target: &types.Selector{ + ResId: resid.ResId{ + Gvk: resid.Gvk{ + Group: "group", + Version: "version", + Kind: "kind", + }, + Name: "name", + Namespace: "namespace", + }, + LabelSelector: "selector", + AnnotationSelector: "selector", + }, + }, + expect: true, + }, + { + name: "same target", + patch1: types.Patch{ + Path: "foo", + Patch: "bar", + Target: &selector, + }, + patch2: types.Patch{ + Path: "foo", + Patch: "bar", + Target: &selector, + }, + expect: true, + }, + { + name: "omit target", + patch1: types.Patch{ + Path: "foo", + Patch: "bar", + }, + patch2: types.Patch{ + Path: "foo", + Patch: "bar", + }, + expect: true, + }, + { + name: "one nil target", + patch1: types.Patch{ + Path: "foo", + Patch: "bar", + Target: &selector, + }, + patch2: types.Patch{ + Path: "foo", + Patch: "bar", + }, + expect: false, + }, + { + name: "different path", + patch1: types.Patch{ + Path: "foo", + }, + patch2: types.Patch{ + Path: "bar", + }, + expect: false, + }, + } + + for _, tc := range testcases { + if tc.expect != tc.patch1.Equals(tc.patch2) { + t.Fatalf("%s: unexpected result %v", tc.name, !tc.expect) + } + } +} diff --git a/go/internal/forked/api/types/patch_test.go b/go/internal/forked/api/types/patch_test.go new file mode 100644 index 000000000..5e80b00be --- /dev/null +++ b/go/internal/forked/api/types/patch_test.go @@ -0,0 +1,131 @@ +package types_test + +import ( + "testing" + + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/resid" +) + +func TestPatchEquals(t *testing.T) { + selector := types.Selector{ + ResId: resid.ResId{ + Gvk: resid.Gvk{ + Group: "group", + Version: "version", + Kind: "kind", + }, + Name: "name", + Namespace: "namespace", + }, + LabelSelector: "selector", + AnnotationSelector: "selector", + } + type testcase struct { + patch1 types.Patch + patch2 types.Patch + expect bool + name string + } + testcases := []testcase{ + { + name: "empty patches", + patch1: types.Patch{}, + patch2: types.Patch{}, + expect: true, + }, + { + name: "full patches", + patch1: types.Patch{ + Path: "foo", + Patch: "bar", + Target: &types.Selector{ + ResId: resid.ResId{ + Gvk: resid.Gvk{ + Group: "group", + Version: "version", + Kind: "kind", + }, + Name: "name", + Namespace: "namespace", + }, + LabelSelector: "selector", + AnnotationSelector: "selector", + }, + }, + patch2: types.Patch{ + Path: "foo", + Patch: "bar", + Target: &types.Selector{ + ResId: resid.ResId{ + Gvk: resid.Gvk{ + Group: "group", + Version: "version", + Kind: "kind", + }, + Name: "name", + Namespace: "namespace", + }, + LabelSelector: "selector", + AnnotationSelector: "selector", + }, + }, + expect: true, + }, + { + name: "same target", + patch1: types.Patch{ + Path: "foo", + Patch: "bar", + Target: &selector, + }, + patch2: types.Patch{ + Path: "foo", + Patch: "bar", + Target: &selector, + }, + expect: true, + }, + { + name: "omit target", + patch1: types.Patch{ + Path: "foo", + Patch: "bar", + }, + patch2: types.Patch{ + Path: "foo", + Patch: "bar", + }, + expect: true, + }, + { + name: "one nil target", + patch1: types.Patch{ + Path: "foo", + Patch: "bar", + Target: &selector, + }, + patch2: types.Patch{ + Path: "foo", + Patch: "bar", + }, + expect: false, + }, + { + name: "different path", + patch1: types.Patch{ + Path: "foo", + }, + patch2: types.Patch{ + Path: "bar", + }, + expect: false, + }, + } + + for _, tc := range testcases { + if tc.expect != tc.patch1.Equals(tc.patch2) { + t.Fatalf("%s: unexpected result %v", tc.name, !tc.expect) + } + } +} diff --git a/go/internal/forked/api/types/patchstrategicmerge.go b/go/internal/forked/api/types/patchstrategicmerge.go new file mode 100644 index 000000000..81a5ba456 --- /dev/null +++ b/go/internal/forked/api/types/patchstrategicmerge.go @@ -0,0 +1,9 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package types + +// PatchStrategicMerge represents a relative path to a +// stategic merge patch with the format +// https://github.com/kubernetes/community/blob/master/contributors/devel/sig-api-machinery/strategic-merge-patch.md +type PatchStrategicMerge string diff --git a/go/internal/forked/api/types/pluginconfig.go b/go/internal/forked/api/types/pluginconfig.go new file mode 100644 index 000000000..741e5debc --- /dev/null +++ b/go/internal/forked/api/types/pluginconfig.go @@ -0,0 +1,47 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package types + +type HelmConfig struct { + Enabled bool + Command string +} + +// PluginConfig holds plugin configuration. +type PluginConfig struct { + // PluginRestrictions distinguishes plugin restrictions. + PluginRestrictions PluginRestrictions + + // BpLoadingOptions distinguishes builtin plugin behaviors. + BpLoadingOptions BuiltinPluginLoadingOptions + + // FnpLoadingOptions sets the way function-based plugin behaviors. + FnpLoadingOptions FnPluginLoadingOptions + + // HelmConfig contains metadata needed for allowing and running helm. + HelmConfig HelmConfig +} + +func EnabledPluginConfig(b BuiltinPluginLoadingOptions) (pc *PluginConfig) { + pc = MakePluginConfig(PluginRestrictionsNone, b) + pc.FnpLoadingOptions.EnableStar = true + pc.HelmConfig.Enabled = true + // If this command is not on PATH, tests needing it should skip. + pc.HelmConfig.Command = "helmV3" + return +} + +func DisabledPluginConfig() *PluginConfig { + return MakePluginConfig( + PluginRestrictionsBuiltinsOnly, + BploUseStaticallyLinked) +} + +func MakePluginConfig(pr PluginRestrictions, + b BuiltinPluginLoadingOptions) *PluginConfig { + return &PluginConfig{ + PluginRestrictions: pr, + BpLoadingOptions: b, + } +} diff --git a/go/internal/forked/api/types/pluginrestrictions.go b/go/internal/forked/api/types/pluginrestrictions.go new file mode 100644 index 000000000..88b03b3f5 --- /dev/null +++ b/go/internal/forked/api/types/pluginrestrictions.go @@ -0,0 +1,62 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package types + +// Some plugin classes +// - builtin: plugins defined in the kustomize repo. +// May be freely used and re-configured. +// - local: plugins that aren't builtin but are +// locally defined (presumably by the user), meaning +// the kustomization refers to them via a relative +// file path, not a URL. +// - remote: require a build-time download to obtain. +// Unadvised, unless one controls the +// serving site. +// +//go:generate stringer -type=PluginRestrictions +type PluginRestrictions int + +const ( + PluginRestrictionsUnknown PluginRestrictions = iota + + // Non-builtin plugins completely disabled. + PluginRestrictionsBuiltinsOnly + + // No restrictions, do whatever you want. + PluginRestrictionsNone +) + +// BuiltinPluginLoadingOptions distinguish ways in which builtin plugins are used. +//go:generate stringer -type=BuiltinPluginLoadingOptions +type BuiltinPluginLoadingOptions int + +const ( + BploUndefined BuiltinPluginLoadingOptions = iota + + // Desired in production use for performance. + BploUseStaticallyLinked + + // Desired in testing and development cycles where it's undesirable + // to generate static code. + BploLoadFromFileSys +) + +// FnPluginLoadingOptions set way functions-based plugins are restricted +type FnPluginLoadingOptions struct { + // Allow to run executables + EnableExec bool + // Allow to run starlark + EnableStar bool + // Allow container access to network + Network bool + NetworkName string + // list of mounts + Mounts []string + // list of env variables to pass to fn + Env []string + // Run as uid and gid of the command executor + AsCurrentUser bool + // Run in this working directory + WorkingDir string +} diff --git a/go/internal/forked/api/types/pluginrestrictions_string.go b/go/internal/forked/api/types/pluginrestrictions_string.go new file mode 100644 index 000000000..b9dba7dfc --- /dev/null +++ b/go/internal/forked/api/types/pluginrestrictions_string.go @@ -0,0 +1,25 @@ +// Code generated by "stringer -type=PluginRestrictions"; DO NOT EDIT. + +package types + +import "strconv" + +func _() { + // An "invalid array index" compiler error signifies that the constant values have changed. + // Re-run the stringer command to generate them again. + var x [1]struct{} + _ = x[PluginRestrictionsUnknown-0] + _ = x[PluginRestrictionsBuiltinsOnly-1] + _ = x[PluginRestrictionsNone-2] +} + +const _PluginRestrictions_name = "PluginRestrictionsUnknownPluginRestrictionsBuiltinsOnlyPluginRestrictionsNone" + +var _PluginRestrictions_index = [...]uint8{0, 25, 55, 77} + +func (i PluginRestrictions) String() string { + if i < 0 || i >= PluginRestrictions(len(_PluginRestrictions_index)-1) { + return "PluginRestrictions(" + strconv.FormatInt(int64(i), 10) + ")" + } + return _PluginRestrictions_name[_PluginRestrictions_index[i]:_PluginRestrictions_index[i+1]] +} diff --git a/go/internal/forked/api/types/replacement.go b/go/internal/forked/api/types/replacement.go new file mode 100644 index 000000000..8fe08bbf8 --- /dev/null +++ b/go/internal/forked/api/types/replacement.go @@ -0,0 +1,87 @@ +// Copyright 2021 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package types + +import ( + "fmt" + "strings" + + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/resid" +) + +const DefaultReplacementFieldPath = "metadata.name" + +// Replacement defines how to perform a substitution +// where it is from and where it is to. +type Replacement struct { + // The source of the value. + Source *SourceSelector `json:"source,omitempty" yaml:"source,omitempty"` + + // The N fields to write the value to. + Targets []*TargetSelector `json:"targets,omitempty" yaml:"targets,omitempty"` +} + +// SourceSelector is the source of the replacement transformer. +type SourceSelector struct { + // A specific object to read it from. + resid.ResId `json:",inline,omitempty" yaml:",inline,omitempty"` + + // Structured field path expected in the allowed object. + FieldPath string `json:"fieldPath,omitempty" yaml:"fieldPath,omitempty"` + + // Used to refine the interpretation of the field. + Options *FieldOptions `json:"options,omitempty" yaml:"options,omitempty"` +} + +func (s *SourceSelector) String() string { + if s == nil { + return "" + } + result := []string{s.ResId.String()} + if s.FieldPath != "" { + result = append(result, s.FieldPath) + } + if opts := s.Options.String(); opts != "" { + result = append(result, opts) + } + return strings.Join(result, ":") +} + +// TargetSelector specifies fields in one or more objects. +type TargetSelector struct { + // Include objects that match this. + Select *Selector `json:"select" yaml:"select"` + + // From the allowed set, remove objects that match this. + Reject []*Selector `json:"reject,omitempty" yaml:"reject,omitempty"` + + // Structured field paths expected in each allowed object. + FieldPaths []string `json:"fieldPaths,omitempty" yaml:"fieldPaths,omitempty"` + + // Used to refine the interpretation of the field. + Options *FieldOptions `json:"options,omitempty" yaml:"options,omitempty"` +} + +// FieldOptions refine the interpretation of FieldPaths. +type FieldOptions struct { + // Used to split/join the field. + Delimiter string `json:"delimiter,omitempty" yaml:"delimiter,omitempty"` + + // Which position in the split to consider. + Index int `json:"index,omitempty" yaml:"index,omitempty"` + + // TODO (#3492): Implement use of this option + // None, Base64, URL, Hex, etc + Encoding string `json:"encoding,omitempty" yaml:"encoding,omitempty"` + + // If field missing, add it. + Create bool `json:"create,omitempty" yaml:"create,omitempty"` +} + +func (fo *FieldOptions) String() string { + if fo == nil || (fo.Delimiter == "" && !fo.Create) { + return "" + } + return fmt.Sprintf("%s(%d), create=%t", fo.Delimiter, fo.Index, fo.Create) +} diff --git a/go/internal/forked/api/types/replacement.go b/go/internal/forked/api/types/replacement.go new file mode 100644 index 000000000..13bd3ba1d --- /dev/null +++ b/go/internal/forked/api/types/replacement.go @@ -0,0 +1,87 @@ +// Copyright 2021 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package types + +import ( + "fmt" + "strings" + + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/resid" +) + +const DefaultReplacementFieldPath = "metadata.name" + +// Replacement defines how to perform a substitution +// where it is from and where it is to. +type Replacement struct { + // The source of the value. + Source *SourceSelector `json:"source,omitempty" yaml:"source,omitempty"` + + // The N fields to write the value to. + Targets []*TargetSelector `json:"targets,omitempty" yaml:"targets,omitempty"` +} + +// SourceSelector is the source of the replacement transformer. +type SourceSelector struct { + // A specific object to read it from. + resid.ResId `json:",inline,omitempty" yaml:",inline,omitempty"` + + // Structured field path expected in the allowed object. + FieldPath string `json:"fieldPath,omitempty" yaml:"fieldPath,omitempty"` + + // Used to refine the interpretation of the field. + Options *FieldOptions `json:"options,omitempty" yaml:"options,omitempty"` +} + +func (s *SourceSelector) String() string { + if s == nil { + return "" + } + result := []string{s.ResId.String()} + if s.FieldPath != "" { + result = append(result, s.FieldPath) + } + if opts := s.Options.String(); opts != "" { + result = append(result, opts) + } + return strings.Join(result, ":") +} + +// TargetSelector specifies fields in one or more objects. +type TargetSelector struct { + // Include objects that match this. + Select *Selector `json:"select" yaml:"select"` + + // From the allowed set, remove objects that match this. + Reject []*Selector `json:"reject,omitempty" yaml:"reject,omitempty"` + + // Structured field paths expected in each allowed object. + FieldPaths []string `json:"fieldPaths,omitempty" yaml:"fieldPaths,omitempty"` + + // Used to refine the interpretation of the field. + Options *FieldOptions `json:"options,omitempty" yaml:"options,omitempty"` +} + +// FieldOptions refine the interpretation of FieldPaths. +type FieldOptions struct { + // Used to split/join the field. + Delimiter string `json:"delimiter,omitempty" yaml:"delimiter,omitempty"` + + // Which position in the split to consider. + Index int `json:"index,omitempty" yaml:"index,omitempty"` + + // TODO (#3492): Implement use of this option + // None, Base64, URL, Hex, etc + Encoding string `json:"encoding,omitempty" yaml:"encoding,omitempty"` + + // If field missing, add it. + Create bool `json:"create,omitempty" yaml:"create,omitempty"` +} + +func (fo *FieldOptions) String() string { + if fo == nil || (fo.Delimiter == "" && !fo.Create) { + return "" + } + return fmt.Sprintf("%s(%d), create=%t", fo.Delimiter, fo.Index, fo.Create) +} diff --git a/go/internal/forked/api/types/replacementfield.go b/go/internal/forked/api/types/replacementfield.go new file mode 100644 index 000000000..a5684f848 --- /dev/null +++ b/go/internal/forked/api/types/replacementfield.go @@ -0,0 +1,6 @@ +package types + +type ReplacementField struct { + Replacement `json:",inline,omitempty" yaml:",inline,omitempty"` + Path string `json:"path,omitempty" yaml:"path,omitempty"` +} diff --git a/go/internal/forked/api/types/replica.go b/go/internal/forked/api/types/replica.go new file mode 100644 index 000000000..8267366b5 --- /dev/null +++ b/go/internal/forked/api/types/replica.go @@ -0,0 +1,16 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package types + +// Replica specifies a modification to a replica config. +// The number of replicas of a resource whose name matches will be set to count. +// This struct is used by the ReplicaCountTransform, and is meant to supplement +// the existing patch functionality with a simpler syntax for replica configuration. +type Replica struct { + // The name of the resource to change the replica count + Name string `json:"name,omitempty" yaml:"name,omitempty"` + + // The number of replicas required. + Count int64 `json:"count" yaml:"count"` +} diff --git a/go/internal/forked/api/types/secretargs.go b/go/internal/forked/api/types/secretargs.go new file mode 100644 index 000000000..62dbe26a7 --- /dev/null +++ b/go/internal/forked/api/types/secretargs.go @@ -0,0 +1,19 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package types + +// SecretArgs contains the metadata of how to generate a secret. +type SecretArgs struct { + // GeneratorArgs for the secret. + GeneratorArgs `json:",inline,omitempty" yaml:",inline,omitempty"` + + // Type of the secret. + // + // This is the same field as the secret type field in v1/Secret: + // It can be "Opaque" (default), or "kubernetes.io/tls". + // + // If type is "kubernetes.io/tls", then "literals" or "files" must have exactly two + // keys: "tls.key" and "tls.crt" + Type string `json:"type,omitempty" yaml:"type,omitempty"` +} diff --git a/go/internal/forked/api/types/selector.go b/go/internal/forked/api/types/selector.go new file mode 100644 index 000000000..23cf1478f --- /dev/null +++ b/go/internal/forked/api/types/selector.go @@ -0,0 +1,124 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package types + +import ( + "fmt" + "regexp" + + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/resid" +) + +// Selector specifies a set of resources. +// Any resource that matches intersection of all conditions +// is included in this set. +type Selector struct { + // ResId refers to a GVKN/Ns of a resource. + resid.ResId `json:",inline,omitempty" yaml:",inline,omitempty"` + + // AnnotationSelector is a string that follows the label selection expression + // https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api + // It matches with the resource annotations. + AnnotationSelector string `json:"annotationSelector,omitempty" yaml:"annotationSelector,omitempty"` + + // LabelSelector is a string that follows the label selection expression + // https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api + // It matches with the resource labels. + LabelSelector string `json:"labelSelector,omitempty" yaml:"labelSelector,omitempty"` +} + +func (s *Selector) Copy() Selector { + return *s +} + +func (s *Selector) String() string { + return fmt.Sprintf( + "%s:a=%s:l=%s", s.ResId, s.AnnotationSelector, s.LabelSelector) +} + +// SelectorRegex is a Selector with regex in GVK +// Any resource that matches intersection of all conditions +// is included in this set. +type SelectorRegex struct { + selector *Selector + groupRegex *regexp.Regexp + versionRegex *regexp.Regexp + kindRegex *regexp.Regexp + nameRegex *regexp.Regexp + namespaceRegex *regexp.Regexp +} + +// NewSelectorRegex returns a pointer to a new SelectorRegex +// which uses the same condition as s. +func NewSelectorRegex(s *Selector) (*SelectorRegex, error) { + sr := new(SelectorRegex) + var err error + sr.selector = s + sr.groupRegex, err = regexp.Compile(anchorRegex(s.Gvk.Group)) + if err != nil { + return nil, err + } + sr.versionRegex, err = regexp.Compile(anchorRegex(s.Gvk.Version)) + if err != nil { + return nil, err + } + sr.kindRegex, err = regexp.Compile(anchorRegex(s.Gvk.Kind)) + if err != nil { + return nil, err + } + sr.nameRegex, err = regexp.Compile(anchorRegex(s.Name)) + if err != nil { + return nil, err + } + sr.namespaceRegex, err = regexp.Compile(anchorRegex(s.Namespace)) + if err != nil { + return nil, err + } + return sr, nil +} + +func anchorRegex(pattern string) string { + if pattern == "" { + return pattern + } + return "^(?:" + pattern + ")$" +} + +// MatchGvk return true if gvk can be matched by s. +func (s *SelectorRegex) MatchGvk(gvk resid.Gvk) bool { + if len(s.selector.Gvk.Group) > 0 { + if !s.groupRegex.MatchString(gvk.Group) { + return false + } + } + if len(s.selector.Gvk.Version) > 0 { + if !s.versionRegex.MatchString(gvk.Version) { + return false + } + } + if len(s.selector.Gvk.Kind) > 0 { + if !s.kindRegex.MatchString(gvk.Kind) { + return false + } + } + return true +} + +// MatchName returns true if the name in selector is +// empty or the n can be matches by the name in selector +func (s *SelectorRegex) MatchName(n string) bool { + if s.selector.Name == "" { + return true + } + return s.nameRegex.MatchString(n) +} + +// MatchNamespace returns true if the namespace in selector is +// empty or the ns can be matches by the namespace in selector +func (s *SelectorRegex) MatchNamespace(ns string) bool { + if s.selector.Namespace == "" { + return true + } + return s.namespaceRegex.MatchString(ns) +} diff --git a/go/internal/forked/api/types/selector.go b/go/internal/forked/api/types/selector.go new file mode 100644 index 000000000..4df4e829e --- /dev/null +++ b/go/internal/forked/api/types/selector.go @@ -0,0 +1,124 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package types + +import ( + "fmt" + "regexp" + + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/resid" +) + +// Selector specifies a set of resources. +// Any resource that matches intersection of all conditions +// is included in this set. +type Selector struct { + // ResId refers to a GVKN/Ns of a resource. + resid.ResId `json:",inline,omitempty" yaml:",inline,omitempty"` + + // AnnotationSelector is a string that follows the label selection expression + // https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api + // It matches with the resource annotations. + AnnotationSelector string `json:"annotationSelector,omitempty" yaml:"annotationSelector,omitempty"` + + // LabelSelector is a string that follows the label selection expression + // https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#api + // It matches with the resource labels. + LabelSelector string `json:"labelSelector,omitempty" yaml:"labelSelector,omitempty"` +} + +func (s *Selector) Copy() Selector { + return *s +} + +func (s *Selector) String() string { + return fmt.Sprintf( + "%s:a=%s:l=%s", s.ResId, s.AnnotationSelector, s.LabelSelector) +} + +// SelectorRegex is a Selector with regex in GVK +// Any resource that matches intersection of all conditions +// is included in this set. +type SelectorRegex struct { + selector *Selector + groupRegex *regexp.Regexp + versionRegex *regexp.Regexp + kindRegex *regexp.Regexp + nameRegex *regexp.Regexp + namespaceRegex *regexp.Regexp +} + +// NewSelectorRegex returns a pointer to a new SelectorRegex +// which uses the same condition as s. +func NewSelectorRegex(s *Selector) (*SelectorRegex, error) { + sr := new(SelectorRegex) + var err error + sr.selector = s + sr.groupRegex, err = regexp.Compile(anchorRegex(s.Gvk.Group)) + if err != nil { + return nil, err + } + sr.versionRegex, err = regexp.Compile(anchorRegex(s.Gvk.Version)) + if err != nil { + return nil, err + } + sr.kindRegex, err = regexp.Compile(anchorRegex(s.Gvk.Kind)) + if err != nil { + return nil, err + } + sr.nameRegex, err = regexp.Compile(anchorRegex(s.Name)) + if err != nil { + return nil, err + } + sr.namespaceRegex, err = regexp.Compile(anchorRegex(s.Namespace)) + if err != nil { + return nil, err + } + return sr, nil +} + +func anchorRegex(pattern string) string { + if pattern == "" { + return pattern + } + return "^(?:" + pattern + ")$" +} + +// MatchGvk return true if gvk can be matched by s. +func (s *SelectorRegex) MatchGvk(gvk resid.Gvk) bool { + if len(s.selector.Gvk.Group) > 0 { + if !s.groupRegex.MatchString(gvk.Group) { + return false + } + } + if len(s.selector.Gvk.Version) > 0 { + if !s.versionRegex.MatchString(gvk.Version) { + return false + } + } + if len(s.selector.Gvk.Kind) > 0 { + if !s.kindRegex.MatchString(gvk.Kind) { + return false + } + } + return true +} + +// MatchName returns true if the name in selector is +// empty or the n can be matches by the name in selector +func (s *SelectorRegex) MatchName(n string) bool { + if s.selector.Name == "" { + return true + } + return s.nameRegex.MatchString(n) +} + +// MatchNamespace returns true if the namespace in selector is +// empty or the ns can be matches by the namespace in selector +func (s *SelectorRegex) MatchNamespace(ns string) bool { + if s.selector.Namespace == "" { + return true + } + return s.namespaceRegex.MatchString(ns) +} diff --git a/go/internal/forked/api/types/selector_test.go b/go/internal/forked/api/types/selector_test.go new file mode 100644 index 000000000..69a19dc20 --- /dev/null +++ b/go/internal/forked/api/types/selector_test.go @@ -0,0 +1,244 @@ +package types_test + +import ( + "testing" + + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/resid" +) + +func TestSelectorRegexMatchGvk(t *testing.T) { + testcases := []struct { + S types.Selector + G resid.Gvk + Expected bool + }{ + { + S: types.Selector{ + ResId: resid.ResId{ + Gvk: resid.Gvk{ + Group: "group", + Version: "version", + Kind: "kind", + }, + }, + }, + G: resid.Gvk{ + Group: "group", + Version: "version", + Kind: "kind", + }, + Expected: true, + }, + { + S: types.Selector{ + ResId: resid.ResId{ + Gvk: resid.Gvk{ + Group: "group", + Version: "", + Kind: "", + }, + }, + }, + G: resid.Gvk{ + Group: "group", + Version: "version", + Kind: "kind", + }, + Expected: true, + }, + { + S: types.Selector{ + ResId: resid.ResId{ + Gvk: resid.Gvk{ + Group: "group", + Version: "version", + Kind: "kind", + }, + }, + }, + G: resid.Gvk{ + Group: "group", + Version: "version", + Kind: "", + }, + Expected: false, + }, + { + S: types.Selector{ + ResId: resid.ResId{ + Gvk: resid.Gvk{ + Group: "group", + Version: "version", + Kind: "kind", + }, + }, + }, + G: resid.Gvk{ + Group: "group", + Version: "version", + Kind: "kind2", + }, + Expected: false, + }, + { + S: types.Selector{ + ResId: resid.ResId{ + Gvk: resid.Gvk{ + Group: "g.*", + Version: "\\d+", + Kind: ".{4}", + }, + }, + }, + G: resid.Gvk{ + Group: "group", + Version: "123", + Kind: "abcd", + }, + Expected: true, + }, + { + S: types.Selector{ + ResId: resid.ResId{ + Gvk: resid.Gvk{ + Group: "g.*", + Version: "\\d+", + Kind: ".{4}", + }, + }, + }, + G: resid.Gvk{ + Group: "group", + Version: "123", + Kind: "abc", + }, + Expected: false, + }, + } + + for _, tc := range testcases { + sr, err := types.NewSelectorRegex(&tc.S) + if err != nil { + t.Fatal(err) + } + if sr.MatchGvk(tc.G) != tc.Expected { + t.Fatalf("unexpected result for selector gvk %s and gvk %s", + tc.S.Gvk.String(), tc.G.String()) + } + } +} + +func TestSelectorRegexMatchName(t *testing.T) { + testcases := []struct { + S types.Selector + Name string + Expected bool + }{ + { + S: types.Selector{ + ResId: resid.ResId{ + Name: "foo", + Namespace: "bar", + }, + }, + Name: "foo", + Expected: true, + }, + { + S: types.Selector{ + ResId: resid.ResId{ + Name: "foo", + Namespace: "bar", + }, + }, + Name: "bar", + Expected: false, + }, + { + S: types.Selector{ + ResId: resid.ResId{ + Name: "f.*", + }, + }, + Name: "foo", + Expected: true, + }, + { + S: types.Selector{ + ResId: resid.ResId{ + Name: "b.*", + }, + }, + Name: "foo", + Expected: false, + }, + } + for _, tc := range testcases { + sr, err := types.NewSelectorRegex(&tc.S) + if err != nil { + t.Fatal(err) + } + if sr.MatchName(tc.Name) != tc.Expected { + t.Fatalf("unexpected result for selector name %s and name %s", + tc.S.Name, tc.Name) + } + } +} + +func TestSelectorRegexMatchNamespace(t *testing.T) { + testcases := []struct { + S types.Selector + Namespace string + Expected bool + }{ + { + S: types.Selector{ + ResId: resid.ResId{ + Name: "bar", + Namespace: "foo", + }, + }, + Namespace: "foo", + Expected: true, + }, + { + S: types.Selector{ + ResId: resid.ResId{ + Name: "foo", + Namespace: "bar", + }, + }, + Namespace: "foo", + Expected: false, + }, + { + S: types.Selector{ + ResId: resid.ResId{ + Namespace: "f.*", + }, + }, + Namespace: "foo", + Expected: true, + }, + { + S: types.Selector{ + ResId: resid.ResId{ + Namespace: "b.*", + }, + }, + Namespace: "foo", + Expected: false, + }, + } + for _, tc := range testcases { + sr, err := types.NewSelectorRegex(&tc.S) + if err != nil { + t.Fatal(err) + } + if sr.MatchNamespace(tc.Namespace) != tc.Expected { + t.Fatalf("unexpected result for selector namespace %s and namespace %s", + tc.S.Namespace, tc.Namespace) + } + } +} diff --git a/go/internal/forked/api/types/selector_test.go b/go/internal/forked/api/types/selector_test.go new file mode 100644 index 000000000..d4f425aa9 --- /dev/null +++ b/go/internal/forked/api/types/selector_test.go @@ -0,0 +1,244 @@ +package types_test + +import ( + "testing" + + "sigs.k8s.io/kustomize/api/types" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/resid" +) + +func TestSelectorRegexMatchGvk(t *testing.T) { + testcases := []struct { + S types.Selector + G resid.Gvk + Expected bool + }{ + { + S: types.Selector{ + ResId: resid.ResId{ + Gvk: resid.Gvk{ + Group: "group", + Version: "version", + Kind: "kind", + }, + }, + }, + G: resid.Gvk{ + Group: "group", + Version: "version", + Kind: "kind", + }, + Expected: true, + }, + { + S: types.Selector{ + ResId: resid.ResId{ + Gvk: resid.Gvk{ + Group: "group", + Version: "", + Kind: "", + }, + }, + }, + G: resid.Gvk{ + Group: "group", + Version: "version", + Kind: "kind", + }, + Expected: true, + }, + { + S: types.Selector{ + ResId: resid.ResId{ + Gvk: resid.Gvk{ + Group: "group", + Version: "version", + Kind: "kind", + }, + }, + }, + G: resid.Gvk{ + Group: "group", + Version: "version", + Kind: "", + }, + Expected: false, + }, + { + S: types.Selector{ + ResId: resid.ResId{ + Gvk: resid.Gvk{ + Group: "group", + Version: "version", + Kind: "kind", + }, + }, + }, + G: resid.Gvk{ + Group: "group", + Version: "version", + Kind: "kind2", + }, + Expected: false, + }, + { + S: types.Selector{ + ResId: resid.ResId{ + Gvk: resid.Gvk{ + Group: "g.*", + Version: "\\d+", + Kind: ".{4}", + }, + }, + }, + G: resid.Gvk{ + Group: "group", + Version: "123", + Kind: "abcd", + }, + Expected: true, + }, + { + S: types.Selector{ + ResId: resid.ResId{ + Gvk: resid.Gvk{ + Group: "g.*", + Version: "\\d+", + Kind: ".{4}", + }, + }, + }, + G: resid.Gvk{ + Group: "group", + Version: "123", + Kind: "abc", + }, + Expected: false, + }, + } + + for _, tc := range testcases { + sr, err := types.NewSelectorRegex(&tc.S) + if err != nil { + t.Fatal(err) + } + if sr.MatchGvk(tc.G) != tc.Expected { + t.Fatalf("unexpected result for selector gvk %s and gvk %s", + tc.S.Gvk.String(), tc.G.String()) + } + } +} + +func TestSelectorRegexMatchName(t *testing.T) { + testcases := []struct { + S types.Selector + Name string + Expected bool + }{ + { + S: types.Selector{ + ResId: resid.ResId{ + Name: "foo", + Namespace: "bar", + }, + }, + Name: "foo", + Expected: true, + }, + { + S: types.Selector{ + ResId: resid.ResId{ + Name: "foo", + Namespace: "bar", + }, + }, + Name: "bar", + Expected: false, + }, + { + S: types.Selector{ + ResId: resid.ResId{ + Name: "f.*", + }, + }, + Name: "foo", + Expected: true, + }, + { + S: types.Selector{ + ResId: resid.ResId{ + Name: "b.*", + }, + }, + Name: "foo", + Expected: false, + }, + } + for _, tc := range testcases { + sr, err := types.NewSelectorRegex(&tc.S) + if err != nil { + t.Fatal(err) + } + if sr.MatchName(tc.Name) != tc.Expected { + t.Fatalf("unexpected result for selector name %s and name %s", + tc.S.Name, tc.Name) + } + } +} + +func TestSelectorRegexMatchNamespace(t *testing.T) { + testcases := []struct { + S types.Selector + Namespace string + Expected bool + }{ + { + S: types.Selector{ + ResId: resid.ResId{ + Name: "bar", + Namespace: "foo", + }, + }, + Namespace: "foo", + Expected: true, + }, + { + S: types.Selector{ + ResId: resid.ResId{ + Name: "foo", + Namespace: "bar", + }, + }, + Namespace: "foo", + Expected: false, + }, + { + S: types.Selector{ + ResId: resid.ResId{ + Namespace: "f.*", + }, + }, + Namespace: "foo", + Expected: true, + }, + { + S: types.Selector{ + ResId: resid.ResId{ + Namespace: "b.*", + }, + }, + Namespace: "foo", + Expected: false, + }, + } + for _, tc := range testcases { + sr, err := types.NewSelectorRegex(&tc.S) + if err != nil { + t.Fatal(err) + } + if sr.MatchNamespace(tc.Namespace) != tc.Expected { + t.Fatalf("unexpected result for selector namespace %s and namespace %s", + tc.S.Namespace, tc.Namespace) + } + } +} diff --git a/go/internal/forked/api/types/typemeta.go b/go/internal/forked/api/types/typemeta.go new file mode 100644 index 000000000..0ddafd3d8 --- /dev/null +++ b/go/internal/forked/api/types/typemeta.go @@ -0,0 +1,11 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package types + +// TypeMeta partially copies apimachinery/pkg/apis/meta/v1.TypeMeta +// No need for a direct dependence; the fields are stable. +type TypeMeta struct { + Kind string `json:"kind,omitempty" yaml:"kind,omitempty"` + APIVersion string `json:"apiVersion,omitempty" yaml:"apiVersion,omitempty"` +} diff --git a/go/internal/forked/api/types/var.go b/go/internal/forked/api/types/var.go new file mode 100644 index 000000000..437c43049 --- /dev/null +++ b/go/internal/forked/api/types/var.go @@ -0,0 +1,211 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package types + +import ( + "fmt" + "reflect" + "sort" + "strings" + + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/resid" +) + +// Var represents a variable whose value will be sourced +// from a field in a Kubernetes object. +type Var struct { + // Value of identifier name e.g. FOO used in container args, annotations + // Appears in pod template as $(FOO) + Name string `json:"name" yaml:"name"` + + // ObjRef must refer to a Kubernetes resource under the + // purview of this kustomization. ObjRef should use the + // raw name of the object (the name specified in its YAML, + // before addition of a namePrefix and a nameSuffix). + ObjRef Target `json:"objref" yaml:"objref"` + + // FieldRef refers to the field of the object referred to by + // ObjRef whose value will be extracted for use in + // replacing $(FOO). + // If unspecified, this defaults to fieldPath: $defaultFieldPath + FieldRef FieldSelector `json:"fieldref,omitempty" yaml:"fieldref,omitempty"` +} + +// Target refers to a kubernetes object by Group, Version, Kind and Name +// gvk.Gvk contains Group, Version and Kind +// APIVersion is added to keep the backward compatibility of using ObjectReference +// for Var.ObjRef +type Target struct { + APIVersion string `json:"apiVersion,omitempty" yaml:"apiVersion,omitempty"` + resid.Gvk `json:",inline,omitempty" yaml:",inline,omitempty"` + Name string `json:"name" yaml:"name"` + Namespace string `json:"namespace,omitempty" yaml:"namespace,omitempty"` +} + +// GVK returns the Gvk object in Target +func (t *Target) GVK() resid.Gvk { + if t.APIVersion == "" { + return t.Gvk + } + versions := strings.Split(t.APIVersion, "/") + if len(versions) == 2 { + t.Group = versions[0] + t.Version = versions[1] + } + if len(versions) == 1 { + t.Version = versions[0] + } + return t.Gvk +} + +// FieldSelector contains the fieldPath to an object field. +// This struct is added to keep the backward compatibility of using ObjectFieldSelector +// for Var.FieldRef +type FieldSelector struct { + FieldPath string `json:"fieldPath,omitempty" yaml:"fieldPath,omitempty"` +} + +// defaulting sets reference to field used by default. +func (v *Var) Defaulting() { + if v.FieldRef.FieldPath == "" { + v.FieldRef.FieldPath = DefaultReplacementFieldPath + } + v.ObjRef.GVK() +} + +// DeepEqual returns true if var a and b are Equals. +// Note 1: The objects are unchanged by the VarEqual +// Note 2: Should be normalize be FieldPath before doing +// the DeepEqual. spec.a[b] is supposed to be the same +// as spec.a.b +func (v Var) DeepEqual(other Var) bool { + v.Defaulting() + other.Defaulting() + return reflect.DeepEqual(v, other) +} + +// VarSet is a set of Vars where no var.Name is repeated. +type VarSet struct { + set map[string]Var +} + +// NewVarSet returns an initialized VarSet +func NewVarSet() VarSet { + return VarSet{set: map[string]Var{}} +} + +// AsSlice returns the vars as a slice. +func (vs *VarSet) AsSlice() []Var { + s := make([]Var, len(vs.set)) + i := 0 + for _, v := range vs.set { + s[i] = v + i++ + } + sort.Sort(byName(s)) + return s +} + +// Copy returns a copy of the var set. +func (vs *VarSet) Copy() VarSet { + newSet := make(map[string]Var, len(vs.set)) + for k, v := range vs.set { + newSet[k] = v + } + return VarSet{set: newSet} +} + +// MergeSet absorbs other vars with error on name collision. +func (vs *VarSet) MergeSet(incoming VarSet) error { + for _, incomingVar := range incoming.set { + if err := vs.Merge(incomingVar); err != nil { + return err + } + } + return nil +} + +// MergeSlice absorbs a Var slice with error on name collision. +// Empty fields in incoming vars are defaulted. +func (vs *VarSet) MergeSlice(incoming []Var) error { + for _, v := range incoming { + if err := vs.Merge(v); err != nil { + return err + } + } + return nil +} + +// Merge absorbs another Var with error on name collision. +// Empty fields in incoming Var is defaulted. +func (vs *VarSet) Merge(v Var) error { + if vs.Contains(v) { + return fmt.Errorf( + "var '%s' already encountered", v.Name) + } + v.Defaulting() + vs.set[v.Name] = v + return nil +} + +// AbsorbSet absorbs other vars with error on (name,value) collision. +func (vs *VarSet) AbsorbSet(incoming VarSet) error { + for _, v := range incoming.set { + if err := vs.Absorb(v); err != nil { + return err + } + } + return nil +} + +// AbsorbSlice absorbs a Var slice with error on (name,value) collision. +// Empty fields in incoming vars are defaulted. +func (vs *VarSet) AbsorbSlice(incoming []Var) error { + for _, v := range incoming { + if err := vs.Absorb(v); err != nil { + return err + } + } + return nil +} + +// Absorb absorbs another Var with error on (name,value) collision. +// Empty fields in incoming Var is defaulted. +func (vs *VarSet) Absorb(v Var) error { + conflicting := vs.Get(v.Name) + if conflicting == nil { + // no conflict. The var is valid. + v.Defaulting() + vs.set[v.Name] = v + return nil + } + + if !reflect.DeepEqual(v, *conflicting) { + // two vars with the same name are pointing at two + // different resources. + return fmt.Errorf( + "var '%s' already encountered", v.Name) + } + return nil +} + +// Contains is true if the set has the other var. +func (vs *VarSet) Contains(other Var) bool { + return vs.Get(other.Name) != nil +} + +// Get returns the var with the given name, else nil. +func (vs *VarSet) Get(name string) *Var { + if v, found := vs.set[name]; found { + return &v + } + return nil +} + +// byName is a sort interface which sorts Vars by name alphabetically +type byName []Var + +func (v byName) Len() int { return len(v) } +func (v byName) Swap(i, j int) { v[i], v[j] = v[j], v[i] } +func (v byName) Less(i, j int) bool { return v[i].Name < v[j].Name } diff --git a/go/internal/forked/api/types/var.go b/go/internal/forked/api/types/var.go new file mode 100644 index 000000000..81d26dbd0 --- /dev/null +++ b/go/internal/forked/api/types/var.go @@ -0,0 +1,211 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package types + +import ( + "fmt" + "reflect" + "sort" + "strings" + + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/resid" +) + +// Var represents a variable whose value will be sourced +// from a field in a Kubernetes object. +type Var struct { + // Value of identifier name e.g. FOO used in container args, annotations + // Appears in pod template as $(FOO) + Name string `json:"name" yaml:"name"` + + // ObjRef must refer to a Kubernetes resource under the + // purview of this kustomization. ObjRef should use the + // raw name of the object (the name specified in its YAML, + // before addition of a namePrefix and a nameSuffix). + ObjRef Target `json:"objref" yaml:"objref"` + + // FieldRef refers to the field of the object referred to by + // ObjRef whose value will be extracted for use in + // replacing $(FOO). + // If unspecified, this defaults to fieldPath: $defaultFieldPath + FieldRef FieldSelector `json:"fieldref,omitempty" yaml:"fieldref,omitempty"` +} + +// Target refers to a kubernetes object by Group, Version, Kind and Name +// gvk.Gvk contains Group, Version and Kind +// APIVersion is added to keep the backward compatibility of using ObjectReference +// for Var.ObjRef +type Target struct { + APIVersion string `json:"apiVersion,omitempty" yaml:"apiVersion,omitempty"` + resid.Gvk `json:",inline,omitempty" yaml:",inline,omitempty"` + Name string `json:"name" yaml:"name"` + Namespace string `json:"namespace,omitempty" yaml:"namespace,omitempty"` +} + +// GVK returns the Gvk object in Target +func (t *Target) GVK() resid.Gvk { + if t.APIVersion == "" { + return t.Gvk + } + versions := strings.Split(t.APIVersion, "/") + if len(versions) == 2 { + t.Group = versions[0] + t.Version = versions[1] + } + if len(versions) == 1 { + t.Version = versions[0] + } + return t.Gvk +} + +// FieldSelector contains the fieldPath to an object field. +// This struct is added to keep the backward compatibility of using ObjectFieldSelector +// for Var.FieldRef +type FieldSelector struct { + FieldPath string `json:"fieldPath,omitempty" yaml:"fieldPath,omitempty"` +} + +// defaulting sets reference to field used by default. +func (v *Var) Defaulting() { + if v.FieldRef.FieldPath == "" { + v.FieldRef.FieldPath = DefaultReplacementFieldPath + } + v.ObjRef.GVK() +} + +// DeepEqual returns true if var a and b are Equals. +// Note 1: The objects are unchanged by the VarEqual +// Note 2: Should be normalize be FieldPath before doing +// the DeepEqual. spec.a[b] is supposed to be the same +// as spec.a.b +func (v Var) DeepEqual(other Var) bool { + v.Defaulting() + other.Defaulting() + return reflect.DeepEqual(v, other) +} + +// VarSet is a set of Vars where no var.Name is repeated. +type VarSet struct { + set map[string]Var +} + +// NewVarSet returns an initialized VarSet +func NewVarSet() VarSet { + return VarSet{set: map[string]Var{}} +} + +// AsSlice returns the vars as a slice. +func (vs *VarSet) AsSlice() []Var { + s := make([]Var, len(vs.set)) + i := 0 + for _, v := range vs.set { + s[i] = v + i++ + } + sort.Sort(byName(s)) + return s +} + +// Copy returns a copy of the var set. +func (vs *VarSet) Copy() VarSet { + newSet := make(map[string]Var, len(vs.set)) + for k, v := range vs.set { + newSet[k] = v + } + return VarSet{set: newSet} +} + +// MergeSet absorbs other vars with error on name collision. +func (vs *VarSet) MergeSet(incoming VarSet) error { + for _, incomingVar := range incoming.set { + if err := vs.Merge(incomingVar); err != nil { + return err + } + } + return nil +} + +// MergeSlice absorbs a Var slice with error on name collision. +// Empty fields in incoming vars are defaulted. +func (vs *VarSet) MergeSlice(incoming []Var) error { + for _, v := range incoming { + if err := vs.Merge(v); err != nil { + return err + } + } + return nil +} + +// Merge absorbs another Var with error on name collision. +// Empty fields in incoming Var is defaulted. +func (vs *VarSet) Merge(v Var) error { + if vs.Contains(v) { + return fmt.Errorf( + "var '%s' already encountered", v.Name) + } + v.Defaulting() + vs.set[v.Name] = v + return nil +} + +// AbsorbSet absorbs other vars with error on (name,value) collision. +func (vs *VarSet) AbsorbSet(incoming VarSet) error { + for _, v := range incoming.set { + if err := vs.Absorb(v); err != nil { + return err + } + } + return nil +} + +// AbsorbSlice absorbs a Var slice with error on (name,value) collision. +// Empty fields in incoming vars are defaulted. +func (vs *VarSet) AbsorbSlice(incoming []Var) error { + for _, v := range incoming { + if err := vs.Absorb(v); err != nil { + return err + } + } + return nil +} + +// Absorb absorbs another Var with error on (name,value) collision. +// Empty fields in incoming Var is defaulted. +func (vs *VarSet) Absorb(v Var) error { + conflicting := vs.Get(v.Name) + if conflicting == nil { + // no conflict. The var is valid. + v.Defaulting() + vs.set[v.Name] = v + return nil + } + + if !reflect.DeepEqual(v, *conflicting) { + // two vars with the same name are pointing at two + // different resources. + return fmt.Errorf( + "var '%s' already encountered", v.Name) + } + return nil +} + +// Contains is true if the set has the other var. +func (vs *VarSet) Contains(other Var) bool { + return vs.Get(other.Name) != nil +} + +// Get returns the var with the given name, else nil. +func (vs *VarSet) Get(name string) *Var { + if v, found := vs.set[name]; found { + return &v + } + return nil +} + +// byName is a sort interface which sorts Vars by name alphabetically +type byName []Var + +func (v byName) Len() int { return len(v) } +func (v byName) Swap(i, j int) { v[i], v[j] = v[j], v[i] } +func (v byName) Less(i, j int) bool { return v[i].Name < v[j].Name } diff --git a/go/internal/forked/api/types/var_test.go b/go/internal/forked/api/types/var_test.go new file mode 100644 index 000000000..b526a874a --- /dev/null +++ b/go/internal/forked/api/types/var_test.go @@ -0,0 +1,171 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package types + +import ( + "reflect" + "strings" + "testing" + + "gopkg.in/yaml.v2" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/resid" +) + +func TestGVK(t *testing.T) { + type testcase struct { + data string + expected resid.Gvk + } + + testcases := []testcase{ + { + data: ` +apiVersion: v1 +kind: Secret +name: my-secret +`, + expected: resid.Gvk{Group: "", Version: "v1", Kind: "Secret"}, + }, + { + data: ` +apiVersion: myapps/v1 +kind: MyKind +name: my-kind +`, + expected: resid.Gvk{Group: "myapps", Version: "v1", Kind: "MyKind"}, + }, + { + data: ` +version: v2 +kind: MyKind +name: my-kind +`, + expected: resid.Gvk{Version: "v2", Kind: "MyKind"}, + }, + } + + for _, tc := range testcases { + var targ Target + err := yaml.Unmarshal([]byte(tc.data), &targ) + if err != nil { + t.Fatalf("Unexpected error %v", err) + } + if !reflect.DeepEqual(targ.GVK(), tc.expected) { + t.Fatalf("Expected %v, but got %v", tc.expected, targ.GVK()) + } + } +} + +func TestDefaulting(t *testing.T) { + v := &Var{ + Name: "SOME_VARIABLE_NAME", + ObjRef: Target{ + Gvk: resid.Gvk{ + Version: "v1", + Kind: "Secret", + }, + Name: "my-secret", + }, + } + v.Defaulting() + if v.FieldRef.FieldPath != DefaultReplacementFieldPath { + t.Fatalf("expected %s, got %v", + DefaultReplacementFieldPath, v.FieldRef.FieldPath) + } +} + +func TestVarSet(t *testing.T) { + set := NewVarSet() + vars := []Var{ + { + Name: "SHELLVARS", + ObjRef: Target{ + APIVersion: "v7", + Gvk: resid.Gvk{Kind: "ConfigMap"}, + Name: "bash"}, + }, + { + Name: "BACKEND", + ObjRef: Target{ + APIVersion: "v7", + Gvk: resid.Gvk{Kind: "Deployment"}, + Name: "myTiredBackend"}, + }, + { + Name: "AWARD", + ObjRef: Target{ + APIVersion: "v7", + Gvk: resid.Gvk{Kind: "Service"}, + Name: "nobelPrize"}, + FieldRef: FieldSelector{FieldPath: "some.arbitrary.path"}, + }, + } + err := set.MergeSlice(vars) + if err != nil { + t.Fatalf("unexpected err: %v", err) + } + for _, v := range vars { + if !set.Contains(v) { + t.Fatalf("set %v should contain var %v", set.AsSlice(), v) + } + } + set2 := NewVarSet() + err = set2.MergeSet(set) + if err != nil { + t.Fatalf("unexpected err: %v", err) + } + err = set2.MergeSlice(vars) + if err == nil { + t.Fatalf("expected err") + } + if !strings.Contains(err.Error(), "var 'SHELLVARS' already encountered") { + t.Fatalf("unexpected err: %v", err) + } + v := set2.Get("BACKEND") + if v == nil { + t.Fatalf("expected var") + } + // Confirm defaulting. + if v.FieldRef.FieldPath != DefaultReplacementFieldPath { + t.Fatalf("unexpected field path: %v", v.FieldRef.FieldPath) + } + // Confirm sorting. + names := set2.AsSlice() + if names[0].Name != "AWARD" || + names[1].Name != "BACKEND" || + names[2].Name != "SHELLVARS" { + t.Fatalf("unexpected order in : %v", names) + } +} + +func TestVarSetCopy(t *testing.T) { + set1 := NewVarSet() + vars := []Var{ + {Name: "First"}, + {Name: "Second"}, + {Name: "Third"}, + } + err := set1.MergeSlice(vars) + if err != nil { + t.Fatalf("unexpected err: %v", err) + } + // Confirm copying + set2 := set1.Copy() + for _, varInSet1 := range set1.AsSlice() { + if v := set2.Get(varInSet1.Name); v == nil { + t.Fatalf("set %v should contain a Var named %s", set2.AsSlice(), varInSet1) + } else if !set2.Contains(*v) { + t.Fatalf("set %v should contain %v", set2.AsSlice(), v) + } + } + // Confirm that the copy is deep + w := Var{Name: "Only in set2"} + set2.Merge(w) + if !set2.Contains(w) { + t.Fatalf("set %v should contain %v", set2.AsSlice(), w) + } + if set1.Contains(w) { + t.Fatalf("set %v should not contain %v", set1.AsSlice(), w) + } +} diff --git a/go/internal/forked/api/types/var_test.go b/go/internal/forked/api/types/var_test.go new file mode 100644 index 000000000..4f0294d00 --- /dev/null +++ b/go/internal/forked/api/types/var_test.go @@ -0,0 +1,171 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package types + +import ( + "reflect" + "strings" + "testing" + + "gopkg.in/yaml.v2" + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/resid" +) + +func TestGVK(t *testing.T) { + type testcase struct { + data string + expected resid.Gvk + } + + testcases := []testcase{ + { + data: ` +apiVersion: v1 +kind: Secret +name: my-secret +`, + expected: resid.Gvk{Group: "", Version: "v1", Kind: "Secret"}, + }, + { + data: ` +apiVersion: myapps/v1 +kind: MyKind +name: my-kind +`, + expected: resid.Gvk{Group: "myapps", Version: "v1", Kind: "MyKind"}, + }, + { + data: ` +version: v2 +kind: MyKind +name: my-kind +`, + expected: resid.Gvk{Version: "v2", Kind: "MyKind"}, + }, + } + + for _, tc := range testcases { + var targ Target + err := yaml.Unmarshal([]byte(tc.data), &targ) + if err != nil { + t.Fatalf("Unexpected error %v", err) + } + if !reflect.DeepEqual(targ.GVK(), tc.expected) { + t.Fatalf("Expected %v, but got %v", tc.expected, targ.GVK()) + } + } +} + +func TestDefaulting(t *testing.T) { + v := &Var{ + Name: "SOME_VARIABLE_NAME", + ObjRef: Target{ + Gvk: resid.Gvk{ + Version: "v1", + Kind: "Secret", + }, + Name: "my-secret", + }, + } + v.Defaulting() + if v.FieldRef.FieldPath != DefaultReplacementFieldPath { + t.Fatalf("expected %s, got %v", + DefaultReplacementFieldPath, v.FieldRef.FieldPath) + } +} + +func TestVarSet(t *testing.T) { + set := NewVarSet() + vars := []Var{ + { + Name: "SHELLVARS", + ObjRef: Target{ + APIVersion: "v7", + Gvk: resid.Gvk{Kind: "ConfigMap"}, + Name: "bash"}, + }, + { + Name: "BACKEND", + ObjRef: Target{ + APIVersion: "v7", + Gvk: resid.Gvk{Kind: "Deployment"}, + Name: "myTiredBackend"}, + }, + { + Name: "AWARD", + ObjRef: Target{ + APIVersion: "v7", + Gvk: resid.Gvk{Kind: "Service"}, + Name: "nobelPrize"}, + FieldRef: FieldSelector{FieldPath: "some.arbitrary.path"}, + }, + } + err := set.MergeSlice(vars) + if err != nil { + t.Fatalf("unexpected err: %v", err) + } + for _, v := range vars { + if !set.Contains(v) { + t.Fatalf("set %v should contain var %v", set.AsSlice(), v) + } + } + set2 := NewVarSet() + err = set2.MergeSet(set) + if err != nil { + t.Fatalf("unexpected err: %v", err) + } + err = set2.MergeSlice(vars) + if err == nil { + t.Fatalf("expected err") + } + if !strings.Contains(err.Error(), "var 'SHELLVARS' already encountered") { + t.Fatalf("unexpected err: %v", err) + } + v := set2.Get("BACKEND") + if v == nil { + t.Fatalf("expected var") + } + // Confirm defaulting. + if v.FieldRef.FieldPath != DefaultReplacementFieldPath { + t.Fatalf("unexpected field path: %v", v.FieldRef.FieldPath) + } + // Confirm sorting. + names := set2.AsSlice() + if names[0].Name != "AWARD" || + names[1].Name != "BACKEND" || + names[2].Name != "SHELLVARS" { + t.Fatalf("unexpected order in : %v", names) + } +} + +func TestVarSetCopy(t *testing.T) { + set1 := NewVarSet() + vars := []Var{ + {Name: "First"}, + {Name: "Second"}, + {Name: "Third"}, + } + err := set1.MergeSlice(vars) + if err != nil { + t.Fatalf("unexpected err: %v", err) + } + // Confirm copying + set2 := set1.Copy() + for _, varInSet1 := range set1.AsSlice() { + if v := set2.Get(varInSet1.Name); v == nil { + t.Fatalf("set %v should contain a Var named %s", set2.AsSlice(), varInSet1) + } else if !set2.Contains(*v) { + t.Fatalf("set %v should contain %v", set2.AsSlice(), v) + } + } + // Confirm that the copy is deep + w := Var{Name: "Only in set2"} + set2.Merge(w) + if !set2.Contains(w) { + t.Fatalf("set %v should contain %v", set2.AsSlice(), w) + } + if set1.Contains(w) { + t.Fatalf("set %v should not contain %v", set1.AsSlice(), w) + } +} diff --git a/go/internal/forked/kyaml/.golangci.yml b/go/internal/forked/kyaml/.golangci.yml new file mode 100644 index 000000000..cd3cee6d4 --- /dev/null +++ b/go/internal/forked/kyaml/.golangci.yml @@ -0,0 +1,55 @@ +# Copyright 2019 The Kubernetes Authors. +# SPDX-License-Identifier: Apache-2.0 + +run: + deadline: 5m + skip-dirs: + - yaml/internal/k8sgen/pkg + +linters: + # please, do not use `enable-all`: it's deprecated and will be removed soon. + # inverted configuration with `enable-all` and `disable` is not scalable during updates of golangci-lint + disable-all: true + enable: + - bodyclose + - deadcode + - depguard + # - dogsled # uncomment after upgrading golangci-lint (Issue #3663) + - dupl + - errcheck + - gochecknoinits + - goconst + - gocritic + - gocyclo + - gofmt + - goimports + - golint +# - gosec + - gosimple + - govet + - ineffassign + - interfacer + - lll + - misspell + - nakedret + - scopelint + - staticcheck + - structcheck + - stylecheck + - typecheck + - unconvert + - unparam + - unused + - varcheck + # - whitespace # uncomment after upgrading golangci-lint (Issue #3663) + + +linters-settings: + dupl: + threshold: 400 + lll: + line-length: 170 + gocyclo: + min-complexity: 30 + golint: + min-confidence: 0.85 diff --git a/go/internal/forked/kyaml/LICENSE_TEMPLATE b/go/internal/forked/kyaml/LICENSE_TEMPLATE new file mode 100644 index 000000000..0c2b3b655 --- /dev/null +++ b/go/internal/forked/kyaml/LICENSE_TEMPLATE @@ -0,0 +1,2 @@ +Copyright {{.Year}} {{.Holder}} +SPDX-License-Identifier: Apache-2.0 diff --git a/go/internal/forked/kyaml/Makefile b/go/internal/forked/kyaml/Makefile new file mode 100644 index 000000000..65707874e --- /dev/null +++ b/go/internal/forked/kyaml/Makefile @@ -0,0 +1,58 @@ +# Copyright 2019 The Kubernetes Authors. +# SPDX-License-Identifier: Apache-2.0 + +MYGOBIN = $(shell go env GOBIN) +ifeq ($(MYGOBIN),) +MYGOBIN = $(shell go env GOPATH)/bin +endif +export PATH := $(MYGOBIN):$(PATH) + +.PHONY: generate license fix vet fmt test lint tidy clean + +$(MYGOBIN)/addlicense: + go get github.com/google/addlicense + +# TODO: Issue #3663 +# Update this version of golangci-lint +# Ideally use same version as in {REPO}/hack/go.mod +$(MYGOBIN)/golangci-lint: + go get github.com/golangci/golangci-lint/cmd/golangci-lint@v1.17.0 + +$(MYGOBIN)/k8scopy: + ( cd ../cmd/k8scopy; go install . ) + +$(MYGOBIN)/stringer: + go get golang.org/x/tools/cmd/stringer + +all: license fix vet fmt test tidy + +k8sGenDir := yaml/internal/k8sgen/pkg + +generate: $(MYGOBIN)/stringer $(MYGOBIN)/k8scopy + go generate ./... + +clean: + rm -rf $(k8sGenDir) + +lint: $(MYGOBIN)/golangci-lint + $(MYGOBIN)/golangci-lint \ + run ./... + + +license: $(MYGOBIN)/addlicense + ( find . -type f -not -path "*/internal/forked/github.com/go-yaml*" -exec bash -c "$(MYGOBIN)/addlicense -y 2021 -c 'The Kubernetes Authors.' -f LICENSE_TEMPLATE {}" ";" ) + +test: + go test -cover ./... + +fix: + go fix ./... + +fmt: + go fmt $(shell go list ./... | grep -v "/kyaml/internal/forked/github.com/go-yaml/yaml") + +tidy: + go mod tidy + +vet: + go vet $(shell go list ./... | grep -v "/kyaml/internal/forked/github.com/go-yaml/yaml") diff --git a/go/internal/forked/kyaml/OWNERS b/go/internal/forked/kyaml/OWNERS new file mode 100644 index 000000000..69cde09ea --- /dev/null +++ b/go/internal/forked/kyaml/OWNERS @@ -0,0 +1,6 @@ +# See https://github.com/kubernetes/community/blob/master/community-membership.md +approvers: + - kyaml-approvers + +reviewers: + - kyaml-reviewers diff --git a/go/internal/forked/kyaml/commandutil/commandutil.go b/go/internal/forked/kyaml/commandutil/commandutil.go new file mode 100644 index 000000000..d4f4f9023 --- /dev/null +++ b/go/internal/forked/kyaml/commandutil/commandutil.go @@ -0,0 +1,17 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package commandutil + +import ( + "os" +) + +// EnabkeAlphaCommmandsEnvName is the environment variable used to enable Alpha kustomize commands. +// If set to "true" alpha commands will be enabled. +const EnableAlphaCommmandsEnvName = "KUSTOMIZE_ENABLE_ALPHA_COMMANDS" + +// GetAlphaEnabled returns true if alpha commands should be enabled. +func GetAlphaEnabled() bool { + return os.Getenv(EnableAlphaCommmandsEnvName) == "true" +} diff --git a/go/internal/forked/kyaml/comments/comments.go b/go/internal/forked/kyaml/comments/comments.go new file mode 100644 index 000000000..6f0617b87 --- /dev/null +++ b/go/internal/forked/kyaml/comments/comments.go @@ -0,0 +1,83 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package comments + +import ( + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/openapi" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml/walk" +) + +// CopyComments recursively copies the comments on fields in from to fields in to +func CopyComments(from, to *yaml.RNode) error { + // from node should not be modified, it should be just used as a reference + fromCopy := from.Copy() + copyFieldComments(fromCopy, to) + // walk the fields copying comments + _, err := walk.Walker{ + Sources: []*yaml.RNode{fromCopy, to}, + Visitor: &copier{}, + VisitKeysAsScalars: true}.Walk() + return err +} + +// copier implements walk.Visitor, and copies comments to fields shared between 2 instances +// of a resource +type copier struct{} + +func (c *copier) VisitMap(s walk.Sources, _ *openapi.ResourceSchema) (*yaml.RNode, error) { + copyFieldComments(s.Dest(), s.Origin()) + return s.Dest(), nil +} + +func (c *copier) VisitScalar(s walk.Sources, _ *openapi.ResourceSchema) (*yaml.RNode, error) { + to := s.Origin() + // TODO: File a bug with upstream yaml to handle comments for FoldedStyle scalar nodes + // Hack: convert FoldedStyle scalar node to DoubleQuotedStyle as the line comments are + // being serialized without space + // https://github.com/GoogleContainerTools/kpt/issues/766 + if to != nil && to.Document().Style == yaml.FoldedStyle { + to.Document().Style = yaml.DoubleQuotedStyle + } + + copyFieldComments(s.Dest(), to) + return s.Dest(), nil +} + +func (c *copier) VisitList(s walk.Sources, _ *openapi.ResourceSchema, _ walk.ListKind) ( + *yaml.RNode, error) { + copyFieldComments(s.Dest(), s.Origin()) + destItems := s.Dest().Content() + originItems := s.Origin().Content() + + for i := 0; i < len(destItems) && i < len(originItems); i++ { + dest := destItems[i] + origin := originItems[i] + + if dest.Value == origin.Value { + // We copy the comments recursively on each node in the list. + if err := CopyComments(yaml.NewRNode(dest), yaml.NewRNode(origin)); err != nil { + return nil, err + } + } + } + + return s.Dest(), nil +} + +// copyFieldComments copies the comment from one field to another +func copyFieldComments(from, to *yaml.RNode) { + if from == nil || to == nil { + return + } + if to.Document().LineComment == "" { + to.Document().LineComment = from.Document().LineComment + } + if to.Document().HeadComment == "" { + to.Document().HeadComment = from.Document().HeadComment + } + if to.Document().FootComment == "" { + to.Document().FootComment = from.Document().FootComment + } +} diff --git a/go/internal/forked/kyaml/comments/comments_test.go b/go/internal/forked/kyaml/comments/comments_test.go new file mode 100644 index 000000000..46cf0807e --- /dev/null +++ b/go/internal/forked/kyaml/comments/comments_test.go @@ -0,0 +1,419 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package comments + +import ( + "strings" + "testing" + + "github.com/stretchr/testify/assert" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" +) + +func TestCopyComments(t *testing.T) { + testCases := []struct { + name string + from string + to string + expected string + }{ + { + name: "copy_comments", + from: `# A +# +# B + +# C +apiVersion: apps/v1 +kind: Deployment +spec: # comment 1 + # comment 2 + replicas: 3 # comment 3 + # comment 4 +`, + to: `apiVersion: apps/v1 +kind: Deployment +spec: + replicas: 4 +`, + expected: `# A +# +# B + +# C +apiVersion: apps/v1 +kind: Deployment +spec: # comment 1 + # comment 2 + replicas: 4 # comment 3 + # comment 4 +`, + }, + + { + name: "associative_list", + from: ` +apiVersion: apps/v1 +kind: Deployment +spec: + template: + spec: + containers: + - name: foo + image: bar # comment 1 +`, + to: ` +apiVersion: apps/v1 +kind: Deployment +spec: + template: + spec: + containers: + - name: foo + image: bar +`, + expected: ` +apiVersion: apps/v1 +kind: Deployment +spec: + template: + spec: + containers: + - name: foo + image: bar # comment 1 +`, + }, + + { + name: "associative_list_2", + from: ` +apiVersion: constraints.gatekeeper.sh/v1beta1 +kind: EnforceFoo +metadata: + name: enforce-foo +spec: + parameters: + naming_rules: + - kind: Bar + patterns: + # comment 1 + - ^(dev|prod|staging|qa|shared)$ +`, + to: ` +apiVersion: constraints.gatekeeper.sh/v1beta1 +kind: EnforceFoo +metadata: + name: enforce-foo +spec: + parameters: + naming_rules: + - kind: Bar + patterns: + - ^(dev|prod|staging|qa|shared)$ +`, + expected: ` +apiVersion: constraints.gatekeeper.sh/v1beta1 +kind: EnforceFoo +metadata: + name: enforce-foo +spec: + parameters: + naming_rules: + - kind: Bar + patterns: + # comment 1 + - ^(dev|prod|staging|qa|shared)$ +`, + }, + + { + name: "keep_comments", + from: `# A +# +# B + +# C +apiVersion: apps/v1 +kind: Deployment +spec: # comment 1 + # comment 2 + replicas: 3 # comment 3 + # comment 4 +`, + to: `apiVersion: apps/v1 +kind: Deployment +spec: + replicas: 4 # comment 5 +`, + expected: `# A +# +# B + +# C +apiVersion: apps/v1 +kind: Deployment +spec: # comment 1 + # comment 2 + replicas: 4 # comment 5 + # comment 4 +`, + }, + + { + name: "copy_item_comments", + from: ` +apiVersion: apps/v1 +kind: Deployment +items: +- a # comment +`, + to: ` +apiVersion: apps/v1 +kind: Deployment +items: +- a +`, + expected: ` +apiVersion: apps/v1 +kind: Deployment +items: +- a # comment +`, + }, + + { + name: "copy_item_comments_2", + from: ` +apiVersion: apps/v1 +kind: Deployment +items: +# comment +- a +`, + to: ` +apiVersion: apps/v1 +kind: Deployment +items: +- a +`, + expected: ` +apiVersion: apps/v1 +kind: Deployment +items: +# comment +- a +`, + }, + + { + name: "copy_item_comments_middle", + from: ` +apiVersion: apps/v1 +kind: Deployment +items: +- a +- b # comment +- c +`, + to: ` +apiVersion: apps/v1 +kind: Deployment +items: +- d +- b +- e +`, + expected: ` +apiVersion: apps/v1 +kind: Deployment +items: +- d +- b # comment +- e +`, + }, + + { + name: "copy_item_comments_moved", + from: ` +apiVersion: apps/v1 +kind: Deployment +items: +- a +- b # comment +- c +`, + to: ` +apiVersion: apps/v1 +kind: Deployment +items: +- a +- c +- b +`, + expected: ` +apiVersion: apps/v1 +kind: Deployment +items: +- a +- c +- b +`, + }, + + { + name: "copy_item_comments_no_match", + from: ` +apiVersion: apps/v1 +kind: Deployment +items: +- a # comment +`, + to: ` +apiVersion: apps/v1 +kind: Deployment +items: +- b +`, + expected: ` +apiVersion: apps/v1 +kind: Deployment +items: +- b +`, + }, + + { + name: "copy_item_comments_add", + from: ` +apiVersion: apps/v1 +kind: Deployment +items: +- a # comment +`, + to: ` +apiVersion: apps/v1 +kind: Deployment +items: +- a +- b +`, + expected: ` +apiVersion: apps/v1 +kind: Deployment +items: +- a # comment +- b +`, + }, + + { + name: "copy_item_comments_remove", + from: ` +apiVersion: apps/v1 +kind: Deployment +items: +- a # comment +- b +`, + to: ` +apiVersion: apps/v1 +kind: Deployment +items: +- a +`, + expected: ` +apiVersion: apps/v1 +kind: Deployment +items: +- a # comment +`, + }, + + { + name: "copy_comments_folded_style", + from: ` +apiVersion: v1 +kind: ConfigMap +data: + somekey: "012345678901234567890123456789012345678901234567890123456789012345678901234" # x +`, + to: ` +apiVersion: v1 +kind: ConfigMap +data: + somekey: >- + 012345678901234567890123456789012345678901234567890123456789012345678901234 +`, + expected: ` +apiVersion: v1 +kind: ConfigMap +data: + somekey: "012345678901234567890123456789012345678901234567890123456789012345678901234" # x +`, + }, + { + name: "sort fields with null value", + from: `apiVersion: v1 +kind: ConfigMap +metadata: + name: workspaces.app.terraform.io + creationTimestamp: null # this field is null + namespace: staging +`, + to: `apiVersion: v1 +kind: ConfigMap +metadata: + name: workspaces.app.terraform.io + creationTimestamp: null + namespace: staging +`, + expected: `apiVersion: v1 +kind: ConfigMap +metadata: + name: workspaces.app.terraform.io + creationTimestamp: null # this field is null + namespace: staging +`, + }, + } + + for i := range testCases { + tc := testCases[i] + t.Run(tc.name, func(t *testing.T) { + from, err := yaml.Parse(tc.from) + if !assert.NoError(t, err) { + t.FailNow() + } + + to, err := yaml.Parse(tc.to) + if !assert.NoError(t, err) { + t.FailNow() + } + + err = CopyComments(from, to) + if !assert.NoError(t, err) { + t.FailNow() + } + + actual, err := to.String() + if !assert.NoError(t, err) { + t.FailNow() + } + + actualFrom, err := from.String() + if !assert.NoError(t, err) { + t.FailNow() + } + + if !assert.Equal(t, strings.TrimSpace(tc.expected), strings.TrimSpace(actual)) { + t.FailNow() + } + + if !assert.Equal(t, strings.TrimSpace(tc.from), strings.TrimSpace(actualFrom)) { + t.FailNow() + } + }) + } +} diff --git a/go/internal/forked/kyaml/copyutil/copyutil.go b/go/internal/forked/kyaml/copyutil/copyutil.go new file mode 100644 index 000000000..957ab2b1b --- /dev/null +++ b/go/internal/forked/kyaml/copyutil/copyutil.go @@ -0,0 +1,197 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +// The copyutil package contains libraries for copying directories of configuration. +package copyutil + +import ( + "bytes" + "fmt" + "io/ioutil" + "os" + "path/filepath" + "strings" + + "github.com/sergi/go-diff/diffmatchpatch" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/sets" +) + +// CopyDir copies a src directory to a dst directory. CopyDir skips copying the .git directory from the src. +func CopyDir(src string, dst string) error { + return filepath.Walk(src, func(path string, info os.FileInfo, err error) error { + if err != nil { + return err + } + // don't copy the .git dir + if path != src { + rel := strings.TrimPrefix(path, src) + if IsDotGitFolder(rel) { + return nil + } + } + + // path is an absolute path, rather than a path relative to src. + // e.g. if src is /path/to/package, then path might be /path/to/package/and/sub/dir + // we need the path relative to src `and/sub/dir` when we are copying the files to dest. + copyTo := strings.TrimPrefix(path, src) + + // make directories that don't exist + if info.IsDir() { + return os.MkdirAll(filepath.Join(dst, copyTo), info.Mode()) + } + + // copy file by reading and writing it + b, err := ioutil.ReadFile(filepath.Join(src, copyTo)) + if err != nil { + return err + } + err = ioutil.WriteFile(filepath.Join(dst, copyTo), b, info.Mode()) + if err != nil { + return err + } + + return nil + }) +} + +// Diff returns a list of files that differ between the source and destination. +// +// Diff is guaranteed to return a non-empty set if any files differ, but +// this set is not guaranteed to contain all differing files. +func Diff(sourceDir, destDir string) (sets.String, error) { + // get set of filenames in the package source + upstreamFiles := sets.String{} + err := filepath.Walk(sourceDir, func(path string, info os.FileInfo, err error) error { + if err != nil { + return err + } + + // skip git repo if it exists + if IsDotGitFolder(path) { + return nil + } + + upstreamFiles.Insert(strings.TrimPrefix(strings.TrimPrefix(path, sourceDir), string(filepath.Separator))) + return nil + }) + if err != nil { + return sets.String{}, err + } + + // get set of filenames in the cloned package + localFiles := sets.String{} + err = filepath.Walk(destDir, func(path string, info os.FileInfo, err error) error { + if err != nil { + return err + } + + // skip git repo if it exists + if IsDotGitFolder(path) { + return nil + } + + localFiles.Insert(strings.TrimPrefix(strings.TrimPrefix(path, destDir), string(filepath.Separator))) + return nil + }) + if err != nil { + return sets.String{}, err + } + + // verify the source and cloned packages have the same set of filenames + diff := upstreamFiles.SymmetricDifference(localFiles) + + // verify file contents match + for _, f := range upstreamFiles.Intersection(localFiles).List() { + fi, err := os.Stat(filepath.Join(destDir, f)) + if err != nil { + return diff, err + } + if fi.Mode().IsDir() { + // already checked that this directory exists in the local files + continue + } + + // compare upstreamFiles + b1, err := ioutil.ReadFile(filepath.Join(destDir, f)) + if err != nil { + return diff, err + } + b2, err := ioutil.ReadFile(filepath.Join(sourceDir, f)) + if err != nil { + return diff, err + } + if !bytes.Equal(b1, b2) { + fmt.Println(PrettyFileDiff(string(b1), string(b2))) + diff.Insert(f) + } + } + // return the differing files + return diff, nil +} + +// IsDotGitFolder checks if the provided path is either the .git folder or +// a file underneath the .git folder. +func IsDotGitFolder(path string) bool { + cleanPath := filepath.ToSlash(filepath.Clean(path)) + for _, c := range strings.Split(cleanPath, "/") { + if c == ".git" { + return true + } + } + return false +} + +// PrettyFileDiff takes the content of two files and returns the pretty diff +func PrettyFileDiff(s1, s2 string) string { + dmp := diffmatchpatch.New() + wSrc, wDst, warray := dmp.DiffLinesToRunes(s1, s2) + diffs := dmp.DiffMainRunes(wSrc, wDst, false) + diffs = dmp.DiffCharsToLines(diffs, warray) + return dmp.DiffPrettyText(diffs) +} + +// SyncFile copies file from src file path to a dst file path by replacement +// deletes dst file if src file doesn't exist +func SyncFile(src, dst string) error { + srcFileInfo, err := os.Stat(src) + if err != nil { + // delete dst if source doesn't exist + if err = deleteFile(dst); err != nil { + return err + } + return nil + } + + input, err := ioutil.ReadFile(src) + if err != nil { + return err + } + + var filePerm os.FileMode + + // get the destination file perm if file exists + dstFileInfo, err := os.Stat(dst) + if err != nil { + // get source file perm if destination file doesn't exist + filePerm = srcFileInfo.Mode().Perm() + } else { + filePerm = dstFileInfo.Mode().Perm() + } + + err = ioutil.WriteFile(dst, input, filePerm) + if err != nil { + return err + } + + return nil +} + +// deleteFile deletes file from path, returns no error if file doesn't exist +func deleteFile(path string) error { + _, err := os.Stat(path) + if err != nil { + // return nil if file doesn't exist + return nil + } + return os.Remove(path) +} diff --git a/go/internal/forked/kyaml/copyutil/copyutil_test.go b/go/internal/forked/kyaml/copyutil/copyutil_test.go new file mode 100644 index 000000000..e8a81ba28 --- /dev/null +++ b/go/internal/forked/kyaml/copyutil/copyutil_test.go @@ -0,0 +1,390 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package copyutil_test + +import ( + "fmt" + "io/ioutil" + "os" + "path/filepath" + "testing" + + "github.com/stretchr/testify/assert" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/copyutil" +) + +// TestDiff_identical verifies identical directories return an empty set +func TestDiff_identical(t *testing.T) { + s, err := ioutil.TempDir("", "copyutilsrc") + assert.NoError(t, err) + d, err := ioutil.TempDir("", "copyutildest") + assert.NoError(t, err) + + err = os.Mkdir(filepath.Join(s, "a1"), 0700) + assert.NoError(t, err) + err = ioutil.WriteFile( + filepath.Join(s, "a1", "f.yaml"), []byte(`a`), 0600) + assert.NoError(t, err) + + err = os.Mkdir(filepath.Join(d, "a1"), 0700) + assert.NoError(t, err) + err = ioutil.WriteFile( + filepath.Join(d, "a1", "f.yaml"), []byte(`a`), 0600) + assert.NoError(t, err) + + diff, err := copyutil.Diff(s, d) + assert.NoError(t, err) + assert.Empty(t, diff.List()) +} + +// TestDiff_additionalSourceFiles verifies if there are additional files +// in the source, the diff will contain them +func TestDiff_additionalSourceFiles(t *testing.T) { + s, err := ioutil.TempDir("", "copyutilsrc") + assert.NoError(t, err) + d, err := ioutil.TempDir("", "copyutildest") + assert.NoError(t, err) + + err = os.Mkdir(filepath.Join(s, "a1"), 0700) + assert.NoError(t, err) + + err = os.Mkdir(filepath.Join(s, "a2"), 0700) + assert.NoError(t, err) + + err = os.Mkdir(filepath.Join(d, "a1"), 0700) + assert.NoError(t, err) + + diff, err := copyutil.Diff(s, d) + assert.NoError(t, err) + assert.ElementsMatch(t, diff.List(), []string{"a2"}) +} + +// TestDiff_additionalDestFiles verifies if there are additional files +// in the dest, the diff will contain them +func TestDiff_additionalDestFiles(t *testing.T) { + s, err := ioutil.TempDir("", "copyutilsrc") + assert.NoError(t, err) + d, err := ioutil.TempDir("", "copyutildest") + assert.NoError(t, err) + + err = os.Mkdir(filepath.Join(s, "a1"), 0700) + assert.NoError(t, err) + + err = os.Mkdir(filepath.Join(d, "a1"), 0700) + assert.NoError(t, err) + + err = os.Mkdir(filepath.Join(d, "a2"), 0700) + assert.NoError(t, err) + + diff, err := copyutil.Diff(s, d) + assert.NoError(t, err) + assert.ElementsMatch(t, diff.List(), []string{"a2"}) +} + +// TestDiff_srcDestContentsDiffer verifies if the file contents +// differ between the source and destination, the diff +// contains the differing files +func TestDiff_srcDestContentsDiffer(t *testing.T) { + s, err := ioutil.TempDir("", "copyutilsrc") + assert.NoError(t, err) + d, err := ioutil.TempDir("", "copyutildest") + assert.NoError(t, err) + + err = os.Mkdir(filepath.Join(s, "a1"), 0700) + assert.NoError(t, err) + err = ioutil.WriteFile( + filepath.Join(s, "a1", "f.yaml"), []byte(`a`), 0600) + assert.NoError(t, err) + + err = os.Mkdir(filepath.Join(d, "a1"), 0700) + assert.NoError(t, err) + err = ioutil.WriteFile( + filepath.Join(d, "a1", "f.yaml"), []byte(`b`), 0600) + assert.NoError(t, err) + + diff, err := copyutil.Diff(s, d) + assert.NoError(t, err) + assert.ElementsMatch(t, diff.List(), []string{ + fmt.Sprintf("a1%sf.yaml", string(filepath.Separator)), + }) +} + +// TestDiff_srcDestContentsDifferInDirs verifies if identical files +// exist in different directories, they are included in the diff +func TestDiff_srcDestContentsDifferInDirs(t *testing.T) { + s, err := ioutil.TempDir("", "copyutilsrc") + assert.NoError(t, err) + d, err := ioutil.TempDir("", "copyutildest") + assert.NoError(t, err) + + err = os.Mkdir(filepath.Join(s, "a1"), 0700) + assert.NoError(t, err) + err = ioutil.WriteFile( + filepath.Join(s, "a1", "f.yaml"), []byte(`a`), 0600) + assert.NoError(t, err) + + err = os.Mkdir(filepath.Join(d, "b1"), 0700) + assert.NoError(t, err) + err = ioutil.WriteFile( + filepath.Join(d, "b1", "f.yaml"), []byte(`a`), 0600) + assert.NoError(t, err) + + diff, err := copyutil.Diff(s, d) + assert.NoError(t, err) + assert.ElementsMatch(t, diff.List(), []string{ + "a1", + fmt.Sprintf("a1%sf.yaml", string(filepath.Separator)), + fmt.Sprintf("b1%sf.yaml", string(filepath.Separator)), + "b1", + }) +} + +// TestDiff_skipGitSrc verifies that .git directories in the source +// are not looked at +func TestDiff_skipGitSrc(t *testing.T) { + s, err := ioutil.TempDir("", "copyutilsrc") + assert.NoError(t, err) + d, err := ioutil.TempDir("", "copyutildest") + assert.NoError(t, err) + + err = os.Mkdir(filepath.Join(s, "a1"), 0700) + assert.NoError(t, err) + err = ioutil.WriteFile( + filepath.Join(s, "a1", "f.yaml"), []byte(`a`), 0600) + assert.NoError(t, err) + + // files that just happen to start with .git should not be ignored. + err = ioutil.WriteFile( + filepath.Join(s, ".gitlab-ci.yml"), []byte(`a`), 0600) + assert.NoError(t, err) + + // git should be ignored + err = os.Mkdir(filepath.Join(s, ".git"), 0700) + assert.NoError(t, err) + err = ioutil.WriteFile( + filepath.Join(s, ".git", "f.yaml"), []byte(`a`), 0600) + assert.NoError(t, err) + + err = os.Mkdir(filepath.Join(d, "a1"), 0700) + assert.NoError(t, err) + err = ioutil.WriteFile( + filepath.Join(d, "a1", "f.yaml"), []byte(`a`), 0600) + assert.NoError(t, err) + + err = ioutil.WriteFile( + filepath.Join(d, ".gitlab-ci.yml"), []byte(`a`), 0600) + assert.NoError(t, err) + + diff, err := copyutil.Diff(s, d) + assert.NoError(t, err) + assert.Empty(t, diff.List()) +} + +// TestDiff_skipGitDest verifies that .git directories in the destination +// are not looked at +func TestDiff_skipGitDest(t *testing.T) { + s, err := ioutil.TempDir("", "copyutilsrc") + assert.NoError(t, err) + d, err := ioutil.TempDir("", "copyutildest") + assert.NoError(t, err) + + err = os.Mkdir(filepath.Join(s, "a1"), 0700) + assert.NoError(t, err) + err = ioutil.WriteFile( + filepath.Join(s, "a1", "f.yaml"), []byte(`a`), 0600) + assert.NoError(t, err) + + err = os.Mkdir(filepath.Join(d, "a1"), 0700) + assert.NoError(t, err) + err = ioutil.WriteFile( + filepath.Join(d, "a1", "f.yaml"), []byte(`a`), 0600) + assert.NoError(t, err) + + // git should be ignored + err = os.Mkdir(filepath.Join(d, ".git"), 0700) + assert.NoError(t, err) + err = ioutil.WriteFile( + filepath.Join(d, ".git", "f.yaml"), []byte(`a`), 0600) + assert.NoError(t, err) + + diff, err := copyutil.Diff(s, d) + assert.NoError(t, err) + assert.Empty(t, diff.List()) +} + +// TestSyncFile tests if destination file is replaced by source file content +func TestSyncFile(t *testing.T) { + d1, err := ioutil.TempDir("", "") + assert.NoError(t, err) + d2, err := ioutil.TempDir("", "") + assert.NoError(t, err) + f1Name := d1 + "/temp.txt" + f2Name := d2 + "/temp.txt" + err = ioutil.WriteFile(f1Name, []byte("abc"), 0600) + assert.NoError(t, err) + err = ioutil.WriteFile(f2Name, []byte("def"), 0644) + expectedFileInfo, _ := os.Stat(f2Name) + assert.NoError(t, err) + err = copyutil.SyncFile(f1Name, f2Name) + assert.NoError(t, err) + actual, err := ioutil.ReadFile(f2Name) + assert.NoError(t, err) + assert.Equal(t, "abc", string(actual)) + dstFileInfo, _ := os.Stat(f2Name) + assert.Equal(t, expectedFileInfo.Mode().String(), dstFileInfo.Mode().String()) +} + +// TestSyncFileNoDestFile tests if new file is created at destination with source file content +func TestSyncFileNoDestFile(t *testing.T) { + d1, err := ioutil.TempDir("", "") + assert.NoError(t, err) + d2, err := ioutil.TempDir("", "") + assert.NoError(t, err) + f1Name := d1 + "/temp.txt" + f2Name := d2 + "/temp.txt" + err = ioutil.WriteFile(f1Name, []byte("abc"), 0644) + assert.NoError(t, err) + err = copyutil.SyncFile(f1Name, f2Name) + assert.NoError(t, err) + actual, err := ioutil.ReadFile(f2Name) + assert.NoError(t, err) + assert.Equal(t, "abc", string(actual)) + dstFileInfo, _ := os.Stat(f2Name) + srcFileInfo, _ := os.Stat(f1Name) + assert.Equal(t, srcFileInfo.Mode().String(), dstFileInfo.Mode().String()) +} + +// TestSyncFileNoSrcFile tests if destination file is deleted if source file doesn't exist +func TestSyncFileNoSrcFile(t *testing.T) { + d1, err := ioutil.TempDir("", "") + assert.NoError(t, err) + d2, err := ioutil.TempDir("", "") + assert.NoError(t, err) + f1Name := d1 + "/temp.txt" + f2Name := d2 + "/temp.txt" + err = ioutil.WriteFile(f2Name, []byte("abc"), 0644) + assert.NoError(t, err) + err = copyutil.SyncFile(f1Name, f2Name) + assert.NoError(t, err) + _, err = ioutil.ReadFile(f2Name) + assert.Error(t, err) +} + +func TestPrettyFileDiff(t *testing.T) { + s1 := `apiVersion: someversion/v1alpha2 +kind: ContainerCluster +metadata: + clusterName: "some_cluster" + name: asm-cluster + namespace: "PROJECT_ID" # {"$ref":"#/definitions/io.k8s.cli.setters.gcloud.core.project"}` + + s2 := `apiVersion: someversion/v1alpha2 +kind: ContainerCluster +metadata: + clusterName: "some_cluster" + name: asm-cluster + namespace: "some_project" # {"$ref":"#/definitions/io.k8s.cli.setters.gcloud.core.project"}` + + expectedLine1 := `[31m namespace: "PROJECT_ID" # {"$ref":"#/definitions/io.k8s.cli.setters.gcloud.core.project"}` + expectedLine2 := `[32m namespace: "some_project" # {"$ref":"#/definitions/io.k8s.cli.setters.gcloud.core.project"}` + + assert.Contains(t, copyutil.PrettyFileDiff(s1, s2), expectedLine1) + assert.Contains(t, copyutil.PrettyFileDiff(s1, s2), expectedLine2) +} + +func TestCopyDir(t *testing.T) { + s, err := ioutil.TempDir("", "copyutilsrc") + assert.NoError(t, err) + v, err := ioutil.TempDir("", "copyutilvalidate") + assert.NoError(t, err) + + err = os.Mkdir(filepath.Join(s, "a1"), 0700) + assert.NoError(t, err) + err = ioutil.WriteFile( + filepath.Join(s, "a1", "f.yaml"), []byte(`a`), 0600) + assert.NoError(t, err) + + // files that just happen to start with .git should not be ignored. + err = ioutil.WriteFile( + filepath.Join(s, ".gitlab-ci.yml"), []byte(`a`), 0600) + assert.NoError(t, err) + + // git should be ignored + err = os.Mkdir(filepath.Join(s, ".git"), 0700) + assert.NoError(t, err) + err = ioutil.WriteFile( + filepath.Join(s, ".git", "f.yaml"), []byte(`a`), 0600) + assert.NoError(t, err) + + err = os.Mkdir(filepath.Join(v, "a1"), 0700) + assert.NoError(t, err) + err = ioutil.WriteFile( + filepath.Join(v, "a1", "f.yaml"), []byte(`a`), 0600) + assert.NoError(t, err) + + err = ioutil.WriteFile( + filepath.Join(v, ".gitlab-ci.yml"), []byte(`a`), 0600) + assert.NoError(t, err) + + d, err := ioutil.TempDir("", "copyutildestination") + assert.NoError(t, err) + + err = copyutil.CopyDir(s, d) + assert.NoError(t, err) + + diff, err := copyutil.Diff(d, v) + assert.NoError(t, err) + assert.Empty(t, diff.List()) +} + +func TestIsDotGitFolder(t *testing.T) { + testCases := []struct { + name string + path string + isDotGitFolder bool + }{ + { + name: ".git folder", + path: "/foo/bar/.git", + isDotGitFolder: true, + }, + { + name: "subfolder of .git folder", + path: "/foo/.git/bar/zoo", + isDotGitFolder: true, + }, + { + name: "subfolder of .gitignore folder", + path: "/foo/.gitignore/bar", + isDotGitFolder: false, + }, + { + name: ".gitignore file", + path: "foo/bar/.gitignore", + isDotGitFolder: false, + }, + { + name: ".gitlab-ci.yml under .git folder", + path: "/foo/.git/bar/.gitignore", + isDotGitFolder: true, + }, + { + name: "windows path with .git folder", + path: "c:/foo/.git/bar", + isDotGitFolder: true, + }, + { + name: "windows path with .gitignore file", + path: "d:/foo/bar/.gitignore", + isDotGitFolder: false, + }, + } + + for i := range testCases { + test := testCases[i] + t.Run(test.name, func(t *testing.T) { + assert.Equal(t, test.isDotGitFolder, copyutil.IsDotGitFolder(test.path)) + }) + } +} diff --git a/go/internal/forked/kyaml/doc.go b/go/internal/forked/kyaml/doc.go new file mode 100644 index 000000000..c84e4acfb --- /dev/null +++ b/go/internal/forked/kyaml/doc.go @@ -0,0 +1,20 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +// Package kyaml contains libraries for reading and writing Kubernetes Resource configuration +// as yaml. +// +// Resources +// +// Individual Resources are manipulated using the yaml package. +// import ( +// "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" +// ) +// +// Collections of Resources +// +// Collections of Resources are manipulated using the kio package. +// import ( +// "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/kio" +// ) +package kyaml diff --git a/go/internal/forked/kyaml/errors/errors.go b/go/internal/forked/kyaml/errors/errors.go new file mode 100644 index 000000000..f072c3c97 --- /dev/null +++ b/go/internal/forked/kyaml/errors/errors.go @@ -0,0 +1,40 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +// Package errors provides libraries for working with the go-errors/errors library. +package errors + +import ( + "fmt" + + goerrors "github.com/go-errors/errors" +) + +// Wrap returns err wrapped in a go-error. If err is nil, returns nil. +func Wrap(err interface{}) error { + if err == nil { + return nil + } + return goerrors.Wrap(err, 1) +} + +// WrapPrefixf returns err wrapped in a go-error with a message prefix. If err is nil, returns nil. +func WrapPrefixf(err interface{}, msg string, args ...interface{}) error { + if err == nil { + return nil + } + return goerrors.WrapPrefix(err, fmt.Sprintf(msg, args...), 1) +} + +// Errorf returns a new go-error. +func Errorf(msg string, args ...interface{}) error { + return goerrors.Wrap(fmt.Errorf(msg, args...), 1) +} + +// GetStack returns a stack trace for the error if it has one +func GetStack(err error) string { + if e, ok := err.(*goerrors.Error); ok { + return string(e.Stack()) + } + return "" +} diff --git a/go/internal/forked/kyaml/ext/ext.go b/go/internal/forked/kyaml/ext/ext.go new file mode 100644 index 000000000..c946577cc --- /dev/null +++ b/go/internal/forked/kyaml/ext/ext.go @@ -0,0 +1,10 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package ext + +// IgnoreFileName returns the name for ignore files in +// packages. It can be overridden by tools using this library. +var IgnoreFileName = func() string { + return ".krmignore" +} diff --git a/go/internal/forked/kyaml/fieldmeta/fieldmeta.go b/go/internal/forked/kyaml/fieldmeta/fieldmeta.go new file mode 100644 index 000000000..c3b8068ac --- /dev/null +++ b/go/internal/forked/kyaml/fieldmeta/fieldmeta.go @@ -0,0 +1,275 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package fieldmeta + +import ( + "encoding/json" + "fmt" + "reflect" + "strconv" + "strings" + + "k8s.io/kube-openapi/pkg/validation/spec" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/errors" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/openapi" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" +) + +// FieldMeta contains metadata that may be attached to fields as comments +type FieldMeta struct { + Schema spec.Schema + + Extensions XKustomize + + SettersSchema *spec.Schema +} + +type XKustomize struct { + SetBy string `yaml:"setBy,omitempty" json:"setBy,omitempty"` + PartialFieldSetters []PartialFieldSetter `yaml:"partialSetters,omitempty" json:"partialSetters,omitempty"` + FieldSetter *PartialFieldSetter `yaml:"setter,omitempty" json:"setter,omitempty"` +} + +// PartialFieldSetter defines how to set part of a field rather than the full field +// value. e.g. the tag part of an image field +type PartialFieldSetter struct { + // Name is the name of this setter. + Name string `yaml:"name" json:"name"` + + // Value is the current value that has been set. + Value string `yaml:"value" json:"value"` +} + +// IsEmpty returns true if the FieldMeta has any empty Schema +func (fm *FieldMeta) IsEmpty() bool { + if fm == nil { + return true + } + return reflect.DeepEqual(fm.Schema, spec.Schema{}) +} + +// Read reads the FieldMeta from a node +func (fm *FieldMeta) Read(n *yaml.RNode) error { + // check for metadata on head and line comments + comments := []string{n.YNode().LineComment, n.YNode().HeadComment} + for _, c := range comments { + if c == "" { + continue + } + c := strings.TrimLeft(c, "#") + + // check for new short hand notation or fall back to openAPI ref format + if !fm.processShortHand(c) { + // if it doesn't Unmarshal that is fine, it means there is no metadata + // other comments are valid, they just don't parse + // TODO: consider more sophisticated parsing techniques similar to what is used + // for go struct tags. + if err := fm.Schema.UnmarshalJSON([]byte(c)); err != nil { + // note: don't return an error if the comment isn't a fieldmeta struct + return nil + } + } + fe := fm.Schema.VendorExtensible.Extensions["x-kustomize"] + if fe == nil { + return nil + } + b, err := json.Marshal(fe) + if err != nil { + return errors.Wrap(err) + } + return json.Unmarshal(b, &fm.Extensions) + } + return nil +} + +// processShortHand parses the comment for short hand ref, loads schema to fm +// and returns true if successful, returns false for any other cases and not throw +// error, as the comment might not be a setter ref +func (fm *FieldMeta) processShortHand(comment string) bool { + input := map[string]string{} + err := json.Unmarshal([]byte(comment), &input) + if err != nil { + return false + } + name := input[shortHandRef] + if name == "" { + return false + } + + // check if setter with the name exists, else check for a substitution + // setter and substitution can't have same name in shorthand + + setterRef, err := spec.NewRef(DefinitionsPrefix + SetterDefinitionPrefix + name) + if err != nil { + return false + } + + setterRefBytes, err := setterRef.MarshalJSON() + if err != nil { + return false + } + + if _, err := openapi.Resolve(&setterRef, fm.SettersSchema); err == nil { + setterErr := fm.Schema.UnmarshalJSON(setterRefBytes) + return setterErr == nil + } + + substRef, err := spec.NewRef(DefinitionsPrefix + SubstitutionDefinitionPrefix + name) + if err != nil { + return false + } + + substRefBytes, err := substRef.MarshalJSON() + if err != nil { + return false + } + + if _, err := openapi.Resolve(&substRef, fm.SettersSchema); err == nil { + substErr := fm.Schema.UnmarshalJSON(substRefBytes) + return substErr == nil + } + return false +} + +func isExtensionEmpty(x XKustomize) bool { + if x.FieldSetter != nil { + return false + } + if x.SetBy != "" { + return false + } + if len(x.PartialFieldSetters) > 0 { + return false + } + return true +} + +// Write writes the FieldMeta to a node +func (fm *FieldMeta) Write(n *yaml.RNode) error { + if !isExtensionEmpty(fm.Extensions) { + return fm.WriteV1Setters(n) + } + + // Ref is removed when a setter is deleted, so the Ref string could be empty. + if fm.Schema.Ref.String() != "" { + // Ex: {"$ref":"#/definitions/io.k8s.cli.setters.replicas"} should be converted to + // {"$openAPI":"replicas"} and added to the line comment + ref := fm.Schema.Ref.String() + var shortHandRefValue string + switch { + case strings.HasPrefix(ref, DefinitionsPrefix+SetterDefinitionPrefix): + shortHandRefValue = strings.TrimPrefix(ref, DefinitionsPrefix+SetterDefinitionPrefix) + case strings.HasPrefix(ref, DefinitionsPrefix+SubstitutionDefinitionPrefix): + shortHandRefValue = strings.TrimPrefix(ref, DefinitionsPrefix+SubstitutionDefinitionPrefix) + default: + return fmt.Errorf("unexpected ref format: %s", ref) + } + n.YNode().LineComment = fmt.Sprintf(`{"%s":"%s"}`, shortHandRef, + shortHandRefValue) + } else { + n.YNode().LineComment = "" + } + + return nil +} + +// WriteV1Setters is the v1 setters way of writing setter definitions +// TODO: pmarupaka - remove this method after migration +func (fm *FieldMeta) WriteV1Setters(n *yaml.RNode) error { + fm.Schema.VendorExtensible.AddExtension("x-kustomize", fm.Extensions) + b, err := json.Marshal(fm.Schema) + if err != nil { + return errors.Wrap(err) + } + n.YNode().LineComment = string(b) + return nil +} + +// FieldValueType defines the type of input to register +type FieldValueType string + +const ( + // String defines a string flag + String FieldValueType = "string" + // Bool defines a bool flag + Bool = "boolean" + // Int defines an int flag + Int = "integer" +) + +func (it FieldValueType) String() string { + if it == "" { + return "string" + } + return string(it) +} + +func (it FieldValueType) Validate(value string) error { + switch it { + case Int: + if _, err := strconv.Atoi(value); err != nil { + return errors.WrapPrefixf(err, "value must be an int") + } + case Bool: + if _, err := strconv.ParseBool(value); err != nil { + return errors.WrapPrefixf(err, "value must be a bool") + } + } + return nil +} + +func (it FieldValueType) Tag() string { + switch it { + case String: + return yaml.NodeTagString + case Bool: + return yaml.NodeTagBool + case Int: + return yaml.NodeTagInt + } + return "" +} + +func (it FieldValueType) TagForValue(value string) string { + switch it { + case String: + return yaml.NodeTagString + case Bool: + if _, err := strconv.ParseBool(string(it)); err != nil { + return "" + } + return yaml.NodeTagBool + case Int: + if _, err := strconv.ParseInt(string(it), 0, 32); err != nil { + return "" + } + return yaml.NodeTagInt + } + return "" +} + +const ( + // CLIDefinitionsPrefix is the prefix for cli definition keys. + CLIDefinitionsPrefix = "io.k8s.cli." + + // SetterDefinitionPrefix is the prefix for setter definition keys. + SetterDefinitionPrefix = CLIDefinitionsPrefix + "setters." + + // SubstitutionDefinitionPrefix is the prefix for substitution definition keys. + SubstitutionDefinitionPrefix = CLIDefinitionsPrefix + "substitutions." + + // DefinitionsPrefix is the prefix used to reference definitions in the OpenAPI + DefinitionsPrefix = "#/definitions/" +) + +// shortHandRef is the shorthand reference to setters and substitutions +var shortHandRef = "$openapi" + +func SetShortHandRef(ref string) { + shortHandRef = ref +} + +func ShortHandRef() string { + return shortHandRef +} diff --git a/go/internal/forked/kyaml/filesys/confirmeddir.go b/go/internal/forked/kyaml/filesys/confirmeddir.go new file mode 100644 index 000000000..4b0008427 --- /dev/null +++ b/go/internal/forked/kyaml/filesys/confirmeddir.go @@ -0,0 +1,79 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package filesys + +import ( + "io/ioutil" + "path/filepath" + "strings" +) + +// ConfirmedDir is a clean, absolute, delinkified path +// that was confirmed to point to an existing directory. +type ConfirmedDir string + +// NewTmpConfirmedDir returns a temporary dir, else error. +// The directory is cleaned, no symlinks, etc. so it's +// returned as a ConfirmedDir. +func NewTmpConfirmedDir() (ConfirmedDir, error) { + n, err := ioutil.TempDir("", "kustomize-") + if err != nil { + return "", err + } + + // In MacOs `ioutil.TempDir` creates a directory + // with root in the `/var` folder, which is in turn + // a symlinked path to `/private/var`. + // Function `filepath.EvalSymlinks`is used to + // resolve the real absolute path. + deLinked, err := filepath.EvalSymlinks(n) + return ConfirmedDir(deLinked), err +} + +// HasPrefix returns true if the directory argument +// is a prefix of self (d) from the point of view of +// a file system. +// +// I.e., it's true if the argument equals or contains +// self (d) in a file path sense. +// +// HasPrefix emulates the semantics of strings.HasPrefix +// such that the following are true: +// +// strings.HasPrefix("foobar", "foobar") +// strings.HasPrefix("foobar", "foo") +// strings.HasPrefix("foobar", "") +// +// d := fSys.ConfirmDir("/foo/bar") +// d.HasPrefix("/foo/bar") +// d.HasPrefix("/foo") +// d.HasPrefix("/") +// +// Not contacting a file system here to check for +// actual path existence. +// +// This is tested on linux, but will have trouble +// on other operating systems. +// TODO(monopole) Refactor when #golang/go/18358 closes. +// See also: +// https://github.com/golang/go/issues/18358 +// https://github.com/golang/dep/issues/296 +// https://github.com/golang/dep/blob/master/internal/fs/fs.go#L33 +// https://codereview.appspot.com/5712045 +func (d ConfirmedDir) HasPrefix(path ConfirmedDir) bool { + if path.String() == string(filepath.Separator) || path == d { + return true + } + return strings.HasPrefix( + string(d), + string(path)+string(filepath.Separator)) +} + +func (d ConfirmedDir) Join(path string) string { + return filepath.Join(string(d), path) +} + +func (d ConfirmedDir) String() string { + return string(d) +} diff --git a/go/internal/forked/kyaml/filesys/confirmeddir_test.go b/go/internal/forked/kyaml/filesys/confirmeddir_test.go new file mode 100644 index 000000000..bcdb817c3 --- /dev/null +++ b/go/internal/forked/kyaml/filesys/confirmeddir_test.go @@ -0,0 +1,112 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +//go:build !windows +// +build !windows + +package filesys + +import ( + "os" + "path/filepath" + "testing" +) + +func TestJoin(t *testing.T) { + fSys := MakeFsInMemory() + err := fSys.Mkdir("/foo") + if err != nil { + t.Fatalf("unexpected err: %v", err) + } + d, f, err := fSys.CleanedAbs("/foo") + if err != nil { + t.Fatalf("unexpected err: %v", err) + } + if f != "" { + t.Fatalf("unexpected file: %v", f) + } + if d.Join("bar") != "/foo/bar" { + t.Fatalf("expected join %s", d.Join("bar")) + } +} + +func TestHasPrefix_Slash(t *testing.T) { + fSys := MakeFsInMemory() + d, f, err := fSys.CleanedAbs("/") + if err != nil { + t.Fatalf("unexpected err: %v", err) + } + if f != "" { + t.Fatalf("unexpected file: %v", f) + } + if d.HasPrefix("/hey") { + t.Fatalf("should be false") + } + if !d.HasPrefix("/") { + t.Fatalf("/ should have the prefix /") + } +} + +func TestHasPrefix_SlashFoo(t *testing.T) { + fSys := MakeFsInMemory() + err := fSys.Mkdir("/foo") + if err != nil { + t.Fatalf("unexpected err: %v", err) + } + d, _, err := fSys.CleanedAbs("/foo") + if err != nil { + t.Fatalf("unexpected err: %v", err) + } + if d.HasPrefix("/fo") { + t.Fatalf("/foo does not have path prefix /fo") + } + if d.HasPrefix("/fod") { + t.Fatalf("/foo does not have path prefix /fod") + } + if !d.HasPrefix("/foo") { + t.Fatalf("/foo should have prefix /foo") + } +} + +func TestHasPrefix_SlashFooBar(t *testing.T) { + fSys := MakeFsInMemory() + err := fSys.MkdirAll("/foo/bar") + if err != nil { + t.Fatalf("unexpected err: %v", err) + } + d, _, err := fSys.CleanedAbs("/foo/bar") + if err != nil { + t.Fatalf("unexpected err: %v", err) + } + if d.HasPrefix("/fo") { + t.Fatalf("/foo/bar does not have path prefix /fo") + } + if d.HasPrefix("/foobar") { + t.Fatalf("/foo/bar does not have path prefix /foobar") + } + if !d.HasPrefix("/foo/bar") { + t.Fatalf("/foo/bar should have prefix /foo/bar") + } + if !d.HasPrefix("/foo") { + t.Fatalf("/foo/bar should have prefix /foo") + } + if !d.HasPrefix("/") { + t.Fatalf("/foo/bar should have prefix /") + } +} + +func TestNewTempConfirmDir(t *testing.T) { + tmp, err := NewTmpConfirmedDir() + if err != nil { + t.Fatalf("unexpected error: %v", err) + } + defer os.RemoveAll(string(tmp)) + + delinked, err := filepath.EvalSymlinks(string(tmp)) + if err != nil { + t.Fatalf("unexpected error: %v", err) + } + if string(tmp) != delinked { + t.Fatalf("unexpected path containing symlinks") + } +} diff --git a/go/internal/forked/kyaml/filesys/doc.go b/go/internal/forked/kyaml/filesys/doc.go new file mode 100644 index 000000000..bd3963441 --- /dev/null +++ b/go/internal/forked/kyaml/filesys/doc.go @@ -0,0 +1,7 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +// Package filesys provides a file system abstraction, +// a subset of that provided by golang.org/pkg/os, +// with an on-disk and in-memory representation. +package filesys diff --git a/go/internal/forked/kyaml/filesys/file.go b/go/internal/forked/kyaml/filesys/file.go new file mode 100644 index 000000000..5044c653e --- /dev/null +++ b/go/internal/forked/kyaml/filesys/file.go @@ -0,0 +1,15 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package filesys + +import ( + "io" + "os" +) + +// File groups the basic os.File methods. +type File interface { + io.ReadWriteCloser + Stat() (os.FileInfo, error) +} diff --git a/go/internal/forked/kyaml/filesys/fileinfo.go b/go/internal/forked/kyaml/filesys/fileinfo.go new file mode 100644 index 000000000..57646d244 --- /dev/null +++ b/go/internal/forked/kyaml/filesys/fileinfo.go @@ -0,0 +1,34 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package filesys + +import ( + "os" + "time" +) + +var _ os.FileInfo = fileInfo{} + +// fileInfo implements os.FileInfo for a fileInMemory instance. +type fileInfo struct { + node *fsNode +} + +// Name returns the name of the file +func (fi fileInfo) Name() string { return fi.node.Name() } + +// Size returns the size of the file +func (fi fileInfo) Size() int64 { return fi.node.Size() } + +// Mode returns the file mode +func (fi fileInfo) Mode() os.FileMode { return 0777 } + +// ModTime returns a bogus time +func (fi fileInfo) ModTime() time.Time { return time.Time{} } + +// IsDir returns true if it is a directory +func (fi fileInfo) IsDir() bool { return fi.node.isNodeADir() } + +// Sys should return underlying data source, but it now returns nil +func (fi fileInfo) Sys() interface{} { return nil } diff --git a/go/internal/forked/kyaml/filesys/fileondisk.go b/go/internal/forked/kyaml/filesys/fileondisk.go new file mode 100644 index 000000000..8ed92d90e --- /dev/null +++ b/go/internal/forked/kyaml/filesys/fileondisk.go @@ -0,0 +1,27 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package filesys + +import ( + "os" +) + +var _ File = &fileOnDisk{} + +// fileOnDisk implements File using the local filesystem. +type fileOnDisk struct { + file *os.File +} + +// Close closes a file. +func (f *fileOnDisk) Close() error { return f.file.Close() } + +// Read reads a file's content. +func (f *fileOnDisk) Read(p []byte) (n int, err error) { return f.file.Read(p) } + +// Write writes bytes to a file +func (f *fileOnDisk) Write(p []byte) (n int, err error) { return f.file.Write(p) } + +// Stat returns an interface which has all the information regarding the file. +func (f *fileOnDisk) Stat() (os.FileInfo, error) { return f.file.Stat() } diff --git a/go/internal/forked/kyaml/filesys/filesystem.go b/go/internal/forked/kyaml/filesys/filesystem.go new file mode 100644 index 000000000..53e0f1921 --- /dev/null +++ b/go/internal/forked/kyaml/filesys/filesystem.go @@ -0,0 +1,120 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package filesys + +import ( + "path/filepath" +) + +const ( + Separator = string(filepath.Separator) + SelfDir = "." + ParentDir = ".." +) + +// FileSystem groups basic os filesystem methods. +// It's supposed be functional subset of https://golang.org/pkg/os +type FileSystem interface { + // Create a file. + Create(path string) (File, error) + // MkDir makes a directory. + Mkdir(path string) error + // MkDirAll makes a directory path, creating intervening directories. + MkdirAll(path string) error + // RemoveAll removes path and any children it contains. + RemoveAll(path string) error + // Open opens the named file for reading. + Open(path string) (File, error) + // IsDir returns true if the path is a directory. + IsDir(path string) bool + // ReadDir returns a list of files and directories within a directory. + ReadDir(path string) ([]string, error) + // CleanedAbs converts the given path into a + // directory and a file name, where the directory + // is represented as a ConfirmedDir and all that implies. + // If the entire path is a directory, the file component + // is an empty string. + CleanedAbs(path string) (ConfirmedDir, string, error) + // Exists is true if the path exists in the file system. + Exists(path string) bool + // Glob returns the list of matching files, + // emulating https://golang.org/pkg/path/filepath/#Glob + Glob(pattern string) ([]string, error) + // ReadFile returns the contents of the file at the given path. + ReadFile(path string) ([]byte, error) + // WriteFile writes the data to a file at the given path, + // overwriting anything that's already there. + WriteFile(path string, data []byte) error + // Walk walks the file system with the given WalkFunc. + Walk(path string, walkFn filepath.WalkFunc) error +} + +// FileSystemOrOnDisk satisfies the FileSystem interface by forwarding +// all of its method calls to the given FileSystem whenever it's not nil. +// If it's nil, the call is forwarded to the OS's underlying file system. +type FileSystemOrOnDisk struct { + FileSystem FileSystem +} + +// Set sets the given FileSystem as the target for all the FileSystem method calls. +func (fs *FileSystemOrOnDisk) Set(f FileSystem) { fs.FileSystem = f } + +func (fs FileSystemOrOnDisk) fs() FileSystem { + if fs.FileSystem != nil { + return fs.FileSystem + } + return MakeFsOnDisk() +} + +func (fs FileSystemOrOnDisk) Create(path string) (File, error) { + return fs.fs().Create(path) +} + +func (fs FileSystemOrOnDisk) Mkdir(path string) error { + return fs.fs().Mkdir(path) +} + +func (fs FileSystemOrOnDisk) MkdirAll(path string) error { + return fs.fs().MkdirAll(path) +} + +func (fs FileSystemOrOnDisk) RemoveAll(path string) error { + return fs.fs().RemoveAll(path) +} + +func (fs FileSystemOrOnDisk) Open(path string) (File, error) { + return fs.fs().Open(path) +} + +func (fs FileSystemOrOnDisk) IsDir(path string) bool { + return fs.fs().IsDir(path) +} + +func (fs FileSystemOrOnDisk) ReadDir(path string) ([]string, error) { + return fs.fs().ReadDir(path) +} + +func (fs FileSystemOrOnDisk) CleanedAbs(path string) (ConfirmedDir, string, error) { + return fs.fs().CleanedAbs(path) +} + +func (fs FileSystemOrOnDisk) Exists(path string) bool { + return fs.fs().Exists(path) +} + +func (fs FileSystemOrOnDisk) Glob(pattern string) ([]string, error) { + return fs.fs().Glob(pattern) +} + +func (fs FileSystemOrOnDisk) ReadFile(path string) ([]byte, error) { + return fs.fs().ReadFile(path) +} + +func (fs FileSystemOrOnDisk) WriteFile(path string, data []byte) error { + return fs.fs().WriteFile(path, data) +} + +func (fs FileSystemOrOnDisk) Walk(path string, walkFn filepath.WalkFunc) error { + return fs.fs().Walk(path, walkFn) +} diff --git a/go/internal/forked/kyaml/filesys/filesystem_test.go b/go/internal/forked/kyaml/filesys/filesystem_test.go new file mode 100644 index 000000000..9599e6c45 --- /dev/null +++ b/go/internal/forked/kyaml/filesys/filesystem_test.go @@ -0,0 +1,43 @@ +// Copyright 2021 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package filesys + +import ( + "os" + "testing" + + "github.com/pkg/errors" + "github.com/stretchr/testify/assert" +) + +var filesysBuilders = map[string]func() FileSystem{ + "MakeFsInMemory": MakeFsInMemory, + "MakeFsOnDisk": MakeFsOnDisk, + "MakeEmptyDirInMemory": func() FileSystem { return MakeEmptyDirInMemory() }, +} + +func TestNotExistErr(t *testing.T) { + for name, builder := range filesysBuilders { + t.Run(name, func(t *testing.T) { + testNotExistErr(t, builder()) + }) + } +} + +func testNotExistErr(t *testing.T, fs FileSystem) { + const path = "bad-dir/file.txt" + + err := fs.RemoveAll(path) + assert.Falsef(t, errors.Is(err, os.ErrNotExist), "RemoveAll should not return ErrNotExist, got %v", err) + _, err = fs.Open(path) + assert.Truef(t, errors.Is(err, os.ErrNotExist), "Open should return ErrNotExist, got %v", err) + _, err = fs.ReadDir(path) + assert.Truef(t, errors.Is(err, os.ErrNotExist), "ReadDir should return ErrNotExist, got %v", err) + _, _, err = fs.CleanedAbs(path) + assert.Truef(t, errors.Is(err, os.ErrNotExist), "CleanedAbs should return ErrNotExist, got %v", err) + _, err = fs.ReadFile(path) + assert.Truef(t, errors.Is(err, os.ErrNotExist), "ReadFile should return ErrNotExist, got %v", err) + err = fs.Walk(path, func(_ string, _ os.FileInfo, err error) error { return err }) + assert.Truef(t, errors.Is(err, os.ErrNotExist), "Walk should return ErrNotExist, got %v", err) +} diff --git a/go/internal/forked/kyaml/filesys/fsnode.go b/go/internal/forked/kyaml/filesys/fsnode.go new file mode 100644 index 000000000..983815fa9 --- /dev/null +++ b/go/internal/forked/kyaml/filesys/fsnode.go @@ -0,0 +1,648 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package filesys + +import ( + "bytes" + "fmt" + "io" + "log" + "os" + "path/filepath" + "regexp" + "sort" + "strings" + + "github.com/pkg/errors" +) + +var _ File = &fsNode{} +var _ FileSystem = &fsNode{} + +// fsNode is either a file or a directory. +type fsNode struct { + // What node owns me? + parent *fsNode + + // Value to return as the Name() when the + // parent is nil. + nilParentName string + + // A directory mapping names to nodes. + // If dir is nil, then self node is a file. + // If dir is non-nil, then self node is a directory, + // albeit possibly an empty directory. + dir map[string]*fsNode + + // if this node is a file, this is the content. + content []byte + + // if offset is not nil the file is open and it tracks + // the current file offset. + offset *int +} + +// MakeEmptyDirInMemory returns an empty directory. +// The paths of nodes in this object will never +// report a leading Separator, meaning they +// aren't "absolute" in the sense defined by +// https://golang.org/pkg/path/filepath/#IsAbs. +func MakeEmptyDirInMemory() *fsNode { + return &fsNode{ + dir: make(map[string]*fsNode), + } +} + +// MakeFsInMemory returns an empty 'file system'. +// The paths of nodes in this object will always +// report a leading Separator, meaning they +// are "absolute" in the sense defined by +// https://golang.org/pkg/path/filepath/#IsAbs. +// This is a relevant difference when using Walk, +// Glob, Match, etc. +func MakeFsInMemory() FileSystem { + return &fsNode{ + nilParentName: Separator, + dir: make(map[string]*fsNode), + } +} + +// Name returns the name of the node. +func (n *fsNode) Name() string { + if n.parent == nil { + // Unable to lookup name in parent. + return n.nilParentName + } + if !n.parent.isNodeADir() { + log.Fatal("parent not a dir") + } + for key, value := range n.parent.dir { + if value == n { + return key + } + } + log.Fatal("unable to find fsNode name") + return "" +} + +// Path returns the full path to the node. +func (n *fsNode) Path() string { + if n.parent == nil { + return n.nilParentName + } + if !n.parent.isNodeADir() { + log.Fatal("parent not a dir, structural error") + } + return filepath.Join(n.parent.Path(), n.Name()) +} + +// mySplit trims trailing separators from the directory +// result of filepath.Split. +func mySplit(s string) (string, string) { + dName, fName := filepath.Split(s) + return StripTrailingSeps(dName), fName +} + +func (n *fsNode) addFile(name string, c []byte) (result *fsNode, err error) { + parent := n + dName, fileName := mySplit(name) + if dName != "" { + parent, err = parent.addDir(dName) + if err != nil { + return nil, err + } + } + if !isLegalFileNameForCreation(fileName) { + return nil, fmt.Errorf( + "illegal name '%s' in file creation", fileName) + } + result, ok := parent.dir[fileName] + if ok { + // File already exists; overwrite it. + if result.offset != nil { + return nil, fmt.Errorf("cannot add already opened file '%s'", n.Path()) + } + result.content = append(result.content[:0], c...) + return result, nil + } + result = &fsNode{ + content: append([]byte(nil), c...), + parent: parent, + } + parent.dir[fileName] = result + return result, nil +} + +// Create implements FileSystem. +// Create makes an empty file. +func (n *fsNode) Create(path string) (result File, err error) { + f, err := n.AddFile(path, nil) + if err != nil { + return f, err + } + f.offset = new(int) + return f, nil +} + +// WriteFile implements FileSystem. +func (n *fsNode) WriteFile(path string, d []byte) error { + _, err := n.AddFile(path, d) + return err +} + +// AddFile adds a file and any necessary containing +// directories to the node. +func (n *fsNode) AddFile( + name string, c []byte) (result *fsNode, err error) { + if n.dir == nil { + return nil, fmt.Errorf( + "cannot add a file to a non-directory '%s'", n.Name()) + } + return n.addFile(cleanQueryPath(name), c) +} + +func (n *fsNode) addDir(path string) (result *fsNode, err error) { + + parent := n + dName, subDirName := mySplit(path) + if dName != "" { + parent, err = n.addDir(dName) + if err != nil { + return nil, err + } + } + switch subDirName { + case "", SelfDir: + return n, nil + case ParentDir: + if n.parent == nil { + return nil, fmt.Errorf( + "cannot add a directory above '%s'", n.Path()) + } + return n.parent, nil + default: + if !isLegalFileNameForCreation(subDirName) { + return nil, fmt.Errorf( + "illegal name '%s' in directory creation", subDirName) + } + result, ok := parent.dir[subDirName] + if ok { + if result.isNodeADir() { + // it's already there. + return result, nil + } + return nil, fmt.Errorf( + "cannot make dir '%s'; a file of that name already exists in '%s'", + subDirName, parent.Name()) + } + result = &fsNode{ + dir: make(map[string]*fsNode), + parent: parent, + } + parent.dir[subDirName] = result + return result, nil + } +} + +// Mkdir implements FileSystem. +// Mkdir creates a directory. +func (n *fsNode) Mkdir(path string) error { + _, err := n.AddDir(path) + return err +} + +// MkdirAll implements FileSystem. +// MkdirAll creates a directory. +func (n *fsNode) MkdirAll(path string) error { + _, err := n.AddDir(path) + return err +} + +// AddDir adds a directory to the node, not complaining +// if it is already there. +func (n *fsNode) AddDir(path string) (result *fsNode, err error) { + if n.dir == nil { + return nil, fmt.Errorf( + "cannot add a directory to file node '%s'", n.Name()) + } + return n.addDir(cleanQueryPath(path)) +} + +// CleanedAbs implements FileSystem. +func (n *fsNode) CleanedAbs(path string) (ConfirmedDir, string, error) { + node, err := n.Find(path) + if err != nil { + return "", "", errors.Wrap(err, "unable to clean") + } + if node == nil { + return "", "", notExistError(path) + } + if node.isNodeADir() { + return ConfirmedDir(node.Path()), "", nil + } + return ConfirmedDir(node.parent.Path()), node.Name(), nil +} + +// Exists implements FileSystem. +// Exists returns true if the path exists. +func (n *fsNode) Exists(path string) bool { + if !n.isNodeADir() { + return n.Name() == path + } + result, err := n.Find(path) + if err != nil { + return false + } + return result != nil +} + +func cleanQueryPath(path string) string { + // Always ignore leading separator? + // Remember that filepath.Clean returns "." if + // given an empty string argument. + return filepath.Clean(StripLeadingSeps(path)) +} + +// Find finds the given node, else nil if not found. +// Return error on structural/argument errors. +func (n *fsNode) Find(path string) (*fsNode, error) { + if !n.isNodeADir() { + return nil, fmt.Errorf("can only find inside a dir") + } + if path == "" { + // Special case; check *before* cleaning and *before* + // comparison to nilParentName. + return nil, nil + } + if (n.parent == nil && path == n.nilParentName) || path == SelfDir { + // Special case + return n, nil + } + return n.findIt(cleanQueryPath(path)) +} + +func (n *fsNode) findIt(path string) (result *fsNode, err error) { + parent := n + dName, item := mySplit(path) + if dName != "" { + parent, err = n.findIt(dName) + if err != nil { + return nil, err + } + if parent == nil { + // all done, target doesn't exist. + return nil, nil + } + } + if !parent.isNodeADir() { + return nil, fmt.Errorf("'%s' is not a directory", parent.Path()) + } + return parent.dir[item], nil +} + +// RemoveAll implements FileSystem. +// RemoveAll removes an item and everything it contains. +func (n *fsNode) RemoveAll(path string) error { + result, err := n.Find(path) + if err != nil { + return err + } + if result == nil { + // If the path doesn't exist, no need to remove anything. + return nil + } + return result.Remove() +} + +// Remove drop the node, and everything it contains, from its parent. +func (n *fsNode) Remove() error { + if n.parent == nil { + return fmt.Errorf("cannot remove a root node") + } + if !n.parent.isNodeADir() { + log.Fatal("parent not a dir") + } + for key, value := range n.parent.dir { + if value == n { + delete(n.parent.dir, key) + return nil + } + } + log.Fatal("unable to find self in parent") + return nil +} + +// isNodeADir returns true if the node is a directory. +// Cannot collide with the poorly named "IsDir". +func (n *fsNode) isNodeADir() bool { + return n.dir != nil +} + +// IsDir implements FileSystem. +// IsDir returns true if the argument resolves +// to a directory rooted at the node. +func (n *fsNode) IsDir(path string) bool { + result, err := n.Find(path) + if err != nil || result == nil { + return false + } + return result.isNodeADir() +} + +// ReadDir implements FileSystem. +func (n *fsNode) ReadDir(path string) ([]string, error) { + if !n.Exists(path) { + return nil, notExistError(path) + } + if !n.IsDir(path) { + return nil, fmt.Errorf("%s is not a directory", path) + } + + dir, err := n.Find(path) + if err != nil { + return nil, err + } + if dir == nil { + return nil, fmt.Errorf("could not find directory %s", path) + } + + keys := make([]string, len(dir.dir)) + i := 0 + for k := range dir.dir { + keys[i] = k + i++ + } + return keys, nil +} + +// Size returns the size of the node. +func (n *fsNode) Size() int64 { + if n.isNodeADir() { + return int64(len(n.dir)) + } + return int64(len(n.content)) +} + +// Open implements FileSystem. +// Open opens the node in read-write mode and sets the offset its start. +// Writing right after opening the file will replace the original content +// and move the offset forward, as with a file opened with O_RDWR | O_CREATE. +// +// As an example, let's consider a file with content "content": +// - open: sets offset to start, content is "content" +// - write "@": offset increases by one, the content is now "@ontent" +// - read the rest: since offset is 1, the read operation returns "ontent" +// - write "$": offset is at EOF, so "$" is appended and content is now "@ontent$" +// - read the rest: returns 0 bytes and EOF +// - close: the content is still "@ontent$" +func (n *fsNode) Open(path string) (File, error) { + result, err := n.Find(path) + if err != nil { + return nil, err + } + if result == nil { + return nil, notExistError(path) + } + if result.offset != nil { + return nil, fmt.Errorf("cannot open previously opened file '%s'", path) + } + result.offset = new(int) + return result, nil +} + +// Close marks the node closed. +func (n *fsNode) Close() error { + if n.offset == nil { + return fmt.Errorf("cannot close already closed file '%s'", n.Path()) + } + n.offset = nil + return nil +} + +// ReadFile implements FileSystem. +func (n *fsNode) ReadFile(path string) (c []byte, err error) { + result, err := n.Find(path) + if err != nil { + return nil, err + } + if result == nil { + return nil, notExistError(path) + } + if result.isNodeADir() { + return nil, fmt.Errorf("cannot read content from non-file '%s'", n.Path()) + } + c = make([]byte, len(result.content)) + copy(c, result.content) + return c, nil +} + +// Read returns the content of the file node. +func (n *fsNode) Read(d []byte) (c int, err error) { + if n.isNodeADir() { + return 0, fmt.Errorf( + "cannot read content from non-file '%s'", n.Path()) + } + if n.offset == nil { + return 0, fmt.Errorf("cannot read from closed file '%s'", n.Path()) + } + + rest := n.content[*n.offset:] + if len(d) < len(rest) { + rest = rest[:len(d)] + } else { + err = io.EOF + } + copy(d, rest) + *n.offset += len(rest) + return len(rest), err +} + +// Write saves the contents of the argument to the file node. +func (n *fsNode) Write(p []byte) (c int, err error) { + if n.isNodeADir() { + return 0, fmt.Errorf( + "cannot write content to non-file '%s'", n.Path()) + } + if n.offset == nil { + return 0, fmt.Errorf("cannot write to closed file '%s'", n.Path()) + } + n.content = append(n.content[:*n.offset], p...) + *n.offset = len(n.content) + return len(p), nil +} + +// ContentMatches returns true if v matches fake file's content. +func (n *fsNode) ContentMatches(v []byte) bool { + return bytes.Equal(v, n.content) +} + +// GetContent the content of a fake file. +func (n *fsNode) GetContent() []byte { + return n.content +} + +// Stat returns an instance of FileInfo. +func (n *fsNode) Stat() (os.FileInfo, error) { + return fileInfo{node: n}, nil +} + +// Walk implements FileSystem. +func (n *fsNode) Walk(path string, walkFn filepath.WalkFunc) error { + result, err := n.Find(path) + if err != nil { + return err + } + if result == nil { + return notExistError(path) + } + return result.WalkMe(walkFn) +} + +// Walk runs the given walkFn on each node. +func (n *fsNode) WalkMe(walkFn filepath.WalkFunc) error { + fi, err := n.Stat() + // always visit self first + err = walkFn(n.Path(), fi, err) + if !n.isNodeADir() { + // it's a file, so nothing more to do + return err + } + // process self as a directory + if err == filepath.SkipDir { + return nil + } + // Walk is supposed to visit in lexical order. + for _, k := range n.sortedDirEntries() { + if err := n.dir[k].WalkMe(walkFn); err != nil { + if err == filepath.SkipDir { + // stop processing this directory + break + } + // bail out completely + return err + } + } + return nil +} + +func (n *fsNode) sortedDirEntries() []string { + keys := make([]string, len(n.dir)) + i := 0 + for k := range n.dir { + keys[i] = k + i++ + } + sort.Strings(keys) + return keys +} + +// FileCount returns a count of files. +// Directories, empty or otherwise, not counted. +func (n *fsNode) FileCount() int { + count := 0 + n.WalkMe(func(path string, info os.FileInfo, err error) error { + if err != nil { + return err + } + if !info.IsDir() { + count++ + } + return nil + }) + return count +} + +func (n *fsNode) DebugPrint() { + n.WalkMe(func(path string, info os.FileInfo, err error) error { + if err != nil { + fmt.Printf("err '%v' at path %q\n", err, path) + return nil + } + if info.IsDir() { + if info.Size() == 0 { + fmt.Println("empty dir: " + path) + } + } else { + fmt.Println(" file: " + path) + } + return nil + }) +} + +var legalFileNamePattern = regexp.MustCompile("^[a-zA-Z0-9-_.]+$") + +// This rules enforced here should be simpler and tighter +// than what's allowed on a real OS. +// Should be fine for testing or in-memory purposes. +func isLegalFileNameForCreation(n string) bool { + if n == "" || n == SelfDir || !legalFileNamePattern.MatchString(n) { + return false + } + return !strings.Contains(n, ParentDir) +} + +// RegExpGlob returns a list of file paths matching the regexp. +// Excludes directories. +func (n *fsNode) RegExpGlob(pattern string) ([]string, error) { + var result []string + var expression = regexp.MustCompile(pattern) + err := n.WalkMe(func(path string, info os.FileInfo, err error) error { + if err != nil { + return err + } + if !info.IsDir() { + if expression.MatchString(path) { + result = append(result, path) + } + } + return nil + }) + if err != nil { + return nil, err + } + sort.Strings(result) + return result, nil +} + +// Glob implements FileSystem. +// Glob returns the list of file paths matching +// per filepath.Match semantics, i.e. unlike RegExpGlob, +// Match("foo/a*") will not match sub-sub directories of foo. +// This is how /bin/ls behaves. +func (n *fsNode) Glob(pattern string) ([]string, error) { + var result []string + var allFiles []string + err := n.WalkMe(func(path string, info os.FileInfo, err error) error { + if err != nil { + return err + } + if !info.IsDir() { + match, err := filepath.Match(pattern, path) + if err != nil { + return err + } + if match { + allFiles = append(allFiles, path) + } + } + return nil + }) + if err != nil { + return nil, err + } + if IsHiddenFilePath(pattern) { + result = allFiles + } else { + result = RemoveHiddenFiles(allFiles) + } + sort.Strings(result) + return result, nil +} + +// notExistError indicates that a file or directory does not exist. +// Unwrapping returns os.ErrNotExist so errors.Is(err, os.ErrNotExist) works correctly. +type notExistError string + +func (err notExistError) Error() string { return fmt.Sprintf("'%s' doesn't exist", string(err)) } +func (err notExistError) Unwrap() error { return os.ErrNotExist } diff --git a/go/internal/forked/kyaml/filesys/fsnode_test.go b/go/internal/forked/kyaml/filesys/fsnode_test.go new file mode 100644 index 000000000..27751f302 --- /dev/null +++ b/go/internal/forked/kyaml/filesys/fsnode_test.go @@ -0,0 +1,889 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +//go:build !windows +// +build !windows + +package filesys + +import ( + "fmt" + "io" + "io/ioutil" + "math/rand" + "os" + "path/filepath" + "sort" + "strings" + "testing" +) + +const content = ` +Lorem ipsum dolor sit amet, +consectetur adipiscing elit, +sed do eiusmod tempor incididunt +ut labore et dolore magna aliqua. +` +const shortContent = "hi" + +var topCases = []pathCase{ + { + what: "dotdot", + arg: ParentDir, + errStr: "illegal name '..' in file creation", + }, + { + what: "empty", + arg: "", + name: "", + errStr: "illegal name '.' in file creation", + }, + { + what: "simple", + arg: "bob", + name: "bob", + path: "bob", + }, + { + what: "longer", + arg: filepath.Join("longer", "bob"), + name: "bob", + path: filepath.Join("longer", "bob"), + }, + { + what: "longer yet", + arg: filepath.Join("longer", "foo", "bar", "beans", "bob"), + name: "bob", + path: filepath.Join("longer", "foo", "bar", "beans", "bob"), + }, + { + what: "tricky", + arg: filepath.Join("bob", ParentDir, "sally"), + name: "sally", + path: "sally", + }, + { + what: "trickier", + arg: filepath.Join("bob", "sally", ParentDir, ParentDir, "jean"), + name: "jean", + path: "jean", + }, +} + +func TestMakeEmptyDirInMemory(t *testing.T) { + n := MakeEmptyDirInMemory() + if !n.isNodeADir() { + t.Fatalf("not a directory") + } + if n.Size() != 0 { + t.Fatalf("unexpected size %d", n.Size()) + } + if n.Name() != "" { + t.Fatalf("unexpected name '%s'", n.Name()) + } + if n.Path() != "" { + t.Fatalf("unexpected path '%s'", n.Path()) + } + runBasicOperations( + t, "MakeEmptyDirInMemory", false, topCases, n) +} + +func TestMakeFsInMemory(t *testing.T) { + runBasicOperations( + t, "MakeFsInMemory", true, topCases, MakeFsInMemory()) +} + +//nolint:gocyclo +func runBasicOperations( + t *testing.T, tName string, isFSysRooted bool, + cases []pathCase, fSys FileSystem) { + for _, c := range cases { + err := fSys.WriteFile(c.arg, []byte(content)) + if c.errStr != "" { + if err == nil { + t.Fatalf("%s; expected error writing to '%s'!", c.what, c.arg) + } + if !strings.Contains(err.Error(), c.errStr) { + t.Fatalf("%s; expected err containing '%s', got '%v'", + c.what, c.errStr, err) + } + continue + } + if err != nil { + t.Fatalf("%s; unexpected error: %v", c.what, err) + } + if !fSys.Exists(c.path) { + t.Fatalf("%s; expect existence of '%s'", c.what, c.path) + } + stuff, err := fSys.ReadFile(c.path) + if err != nil { + t.Fatalf("%s; unexpected error: %v", c.what, err) + } + if string(stuff) != content { + t.Fatalf("%s; unexpected content '%s'", c.what, stuff) + } + f, err := fSys.Open(c.arg) + if err != nil { + t.Fatalf("%s; unexpected error: %v", c.what, err) + } + fi, err := f.Stat() + if err != nil { + t.Fatalf("%s; unexpected error: %v", c.what, err) + } + if fi.Name() != c.name { + t.Fatalf("%s; expected name '%s', got '%s'", c.what, c.name, fi.Name()) + } + buff, err := ioutil.ReadAll(f) + if err != nil { + t.Fatalf("%s; unexpected error: %v", c.what, err) + } + if string(buff) != content { + t.Fatalf("%s; unexpected buff '%s'", c.what, buff) + } + count, err := f.Write([]byte(shortContent)) + if err != nil { + t.Fatalf("%s; unexpected error: %v", c.what, err) + } + if count != len(shortContent) { + t.Fatalf("%s; unexpected count: %d", c.what, len(shortContent)) + } + if err := f.Close(); err != nil { + t.Fatalf("%s; unexpected error: %v", c.what, err) + } + stuff, err = fSys.ReadFile(c.path) + if err != nil { + t.Fatalf("%s; unexpected error: %v", c.what, err) + } + both := content + shortContent + if string(stuff) != both { + t.Fatalf("%s; unexpected content '%s', expected '%s'", c.what, stuff, both) + } + + content := []byte(shortContent) + if err := fSys.WriteFile(c.path, content); err != nil { + t.Fatalf("%s; unexpected error: %v", c.what, err) + } + // This ensures that modifying the original slice does not change the contents of the file. + content[0] = '@' + stuff, err = fSys.ReadFile(c.path) + if err != nil { + t.Fatalf("%s; unexpected error: %v", c.what, err) + } + if string(stuff) != shortContent { + t.Fatalf("%s; unexpected content '%s', expected '%s'", c.what, stuff, shortContent) + } + } + + var actualPaths []string + var err error + prefix := "" + { + root := SelfDir + if isFSysRooted { + root = Separator + prefix = Separator + } + err = fSys.Walk(root, func(path string, info os.FileInfo, err error) error { + if err != nil { + fmt.Printf("err '%v' at path %q\n", err, path) + return nil + } + if !info.IsDir() { + actualPaths = append(actualPaths, path) + } + return nil + }) + } + if err != nil { + t.Fatalf("unexpected error %v", err) + } + var expectedPaths []string + for _, c := range cases { + if c.errStr == "" { + expectedPaths = append(expectedPaths, prefix+c.path) + } + } + sort.Strings(expectedPaths) + assertEqualStringSlices(t, expectedPaths, actualPaths, tName) +} + +type pathCase struct { + what string + arg string + name string + path string + errStr string +} + +func TestAddDir(t *testing.T) { + cases := []pathCase{ + { + what: "dotdot", + arg: ParentDir, + errStr: "cannot add a directory above ''", + }, + { + what: "empty", + arg: "", + name: "", + path: "", + }, + { + what: "simple", + arg: "bob", + name: "bob", + path: "bob", + }, + { + what: "longer", + arg: filepath.Join("longer", "bob"), + name: "bob", + path: filepath.Join("longer", "bob"), + }, + { + what: "longer yet", + arg: filepath.Join("longer", "foo", "bar", "beans", "bob"), + name: "bob", + path: filepath.Join("longer", "foo", "bar", "beans", "bob"), + }, + { + what: "tricky", + arg: filepath.Join("bob", ParentDir, "sally"), + name: "sally", + path: "sally", + }, + { + what: "trickier", + arg: filepath.Join("bob", "sally", ParentDir, ParentDir, "jean"), + name: "jean", + path: "jean", + }, + } + for _, c := range cases { + n := MakeEmptyDirInMemory() + f, err := n.AddDir(c.arg) + if c.errStr != "" { + if err == nil { + t.Fatalf("%s; expected error!", c.what) + } + if !strings.Contains(err.Error(), c.errStr) { + t.Fatalf( + "%s; expected error with '%s', got '%v'", + c.what, c.errStr, err) + } + continue + } + if err != nil { + t.Fatalf("%s; unexpected error: %v", c.what, err) + } + checkNode(t, c.what, f, c.name, 0, true, c.path) + checkOsStat(t, c.what, f, f.Name(), 0, true) + } +} + +var bagOfCases = []pathCase{ + { + what: "empty", + arg: "", + errStr: "illegal name '.' in file creation", + }, + { + what: "simple", + arg: "bob", + name: "bob", + path: "bob", + }, + { + what: "longer", + arg: filepath.Join("longer", "bob"), + name: "bob", + path: filepath.Join("longer", "bob"), + }, + { + what: "longer", + arg: filepath.Join("longer", "sally"), + name: "sally", + path: filepath.Join("longer", "sally"), + }, + { + what: "even longer", + arg: filepath.Join("longer", "than", "the", "other", "bob"), + name: "bob", + path: filepath.Join("longer", "than", "the", "other", "bob"), + }, + { + what: "even longer", + arg: filepath.Join("even", "much", "longer", "than", "the", "other", "bob"), + name: "bob", + path: filepath.Join("even", "much", "longer", "than", "the", "other", "bob"), + }, +} + +func TestAddFile(t *testing.T) { + n := MakeEmptyDirInMemory() + if n.FileCount() != 0 { + t.Fatalf("expected no files, got %d", n.FileCount()) + } + expectedFileCount := 0 + for _, c := range bagOfCases { + f, err := n.AddFile(c.arg, []byte(content)) + if c.errStr != "" { + if err == nil { + t.Fatalf("%s; expected error!", c.what) + } + if !strings.Contains(err.Error(), c.errStr) { + t.Fatalf("%s; expected err containing '%s', got '%v'", + c.what, c.errStr, err) + } + continue + } + if err != nil { + t.Fatalf("%s; unexpected error %v", c.what, err) + } + checkNode(t, c.what, f, c.name, len(content), false, c.path) + checkOsStat(t, c.what, f, f.Name(), len(content), false) + + result, err := n.Find(c.arg) + if err != nil { + t.Fatalf("%s; unexpected find error %v", c.what, err) + } + if result != f { + t.Fatalf("%s; unexpected find result %v", c.what, result) + } + + result, err = n.Find(filepath.Join("longer", "bogus")) + if err != nil { + t.Fatalf("%s; unexpected find error %v", c.what, err) + } + if result != nil { + t.Fatalf("%s; unexpected find result %v", c.what, result) + } + + expectedFileCount++ + fc := n.FileCount() + if fc != expectedFileCount { + t.Fatalf("expected file count %d, got %d", + expectedFileCount, fc) + } + } +} + +func checkNode( + t *testing.T, what string, f *fsNode, name string, + size int, isDir bool, path string) { + if f.isNodeADir() != isDir { + t.Fatalf("%s; unexpected isNodeADir = %v", what, f.isNodeADir()) + } + if f.Size() != int64(size) { + t.Fatalf("%s; unexpected size %d", what, f.Size()) + } + if name != f.Name() { + t.Fatalf("%s; expected name '%s', got '%s'", what, name, f.Name()) + } + if path != f.Path() { + t.Fatalf("%s; expected path '%s', got '%s'", what, path, f.Path()) + } +} + +func checkOsStat( + t *testing.T, what string, f File, name string, + size int, isDir bool) { + info, err := f.Stat() + if err != nil { + t.Fatalf("%s; unexpected stat error %v", what, err) + } + if info.IsDir() != isDir { + t.Fatalf("%s; unexpected info.isNodeADir = %v", what, info.IsDir()) + } + if info.Size() != int64(size) { + t.Fatalf("%s; unexpected info.size %d", what, info.Size()) + } + if info.Name() != name { + t.Fatalf("%s; expected name '%s', got info.Name '%s'", what, name, info.Name()) + } +} + +var bunchOfFiles = []struct { + path string + addAsDir bool +}{ + { + path: filepath.Join("b", "e", "a", "c", "g"), + }, + { + path: filepath.Join("z", "r", "a", "b", "g"), + }, + { + path: filepath.Join("b", "q", "a", "c", "g"), + }, + { + path: filepath.Join("b", "a", "a", "m", "g"), + addAsDir: true, + }, + { + path: filepath.Join("b", "w"), + }, + { + path: filepath.Join("b", "d", "a", "c", "m"), + }, + { + path: filepath.Join("b", "d", "z"), + }, + { + path: filepath.Join("b", "d", "y"), + }, + { + path: filepath.Join("b", "d", "ignore", "c", "n"), + }, + { + path: filepath.Join("b", "d", "x"), + }, + { + path: filepath.Join("b", "d", "ignore", "c", "o"), + }, + { + path: filepath.Join("b", "d", "ignore", "c", "m"), + }, + { + path: filepath.Join("b", "d", "a", "c", "i"), + addAsDir: true, + }, + { + path: filepath.Join("x"), + }, + { + path: filepath.Join("y"), + }, + { + path: filepath.Join("b", "d", "a", "c", "i", "beans"), + }, + { + path: filepath.Join("b", "d", "a", "c", "r", "w"), + addAsDir: true, + }, + { + path: filepath.Join("b", "d", "a", "c", "u"), + }, + { + path: filepath.Join("b", "d", ".hidden_file"), + }, + { + path: filepath.Join("b", "d", ".hidden_dir"), + addAsDir: true, + }, +} + +func makeLoadedFileTree(t *testing.T) *fsNode { + n := MakeEmptyDirInMemory() + var err error + expectedFileCount := 0 + for _, item := range bunchOfFiles { + if item.addAsDir { + _, err = n.AddDir(item.path) + } else { + _, err = n.AddFile(item.path, []byte(content)) + expectedFileCount++ + } + if err != nil { + t.Fatalf("unexpected error %v", err) + } + } + fc := n.FileCount() + if fc != expectedFileCount { + t.Fatalf("expected file count %d, got %d", + expectedFileCount, fc) + } + return n +} + +func TestWalkMe(t *testing.T) { + n := makeLoadedFileTree(t) + var actualPaths []string + err := n.WalkMe(func(path string, info os.FileInfo, err error) error { + if err != nil { + fmt.Printf("err '%v' at path %q\n", err, path) + return nil + } + if info.IsDir() { + if info.Name() == "ignore" { + return filepath.SkipDir + } + } else { + actualPaths = append(actualPaths, path) + } + return nil + }) + if err != nil { + t.Fatalf("unexpected error %v", err) + } + var expectedPaths []string + for _, c := range bunchOfFiles { + if !c.addAsDir && !strings.Contains(c.path, "ignore") { + expectedPaths = append(expectedPaths, c.path) + } + } + sort.Strings(expectedPaths) + assertEqualStringSlices(t, expectedPaths, actualPaths, "testWalkMe") +} + +func TestRemove(t *testing.T) { + n := makeLoadedFileTree(t) + orgCount := n.FileCount() + + // Remove the "ignore" directory and everything below it. + path := filepath.Join("b", "d", "ignore") + result, err := n.Find(path) + if err != nil { + t.Fatalf("%s; unexpected error %v", path, err) + } + if result == nil { + t.Fatalf("%s; expected to find '%s'", path, path) + } + if !result.isNodeADir() { + t.Fatalf("%s; expected to find a directory", path) + } + err = result.Remove() + if err != nil { + t.Fatalf("%s; unable to remove: %v", path, err) + } + result, err = n.Find(path) + if err != nil { + // Just because it's gone doesn't mean error. + t.Fatalf("%s; unexpected error %v", path, err) + } + if result != nil { + t.Fatalf("%s; should not have been able to find '%s'", path, path) + } + + // There were three files below "ignore". + orgCount -= 3 + + // Now drop one more for a total of four dropped. + result, _ = n.Find(filepath.Join("y")) + err = result.Remove() + if err != nil { + t.Fatalf("%s; unable to remove: %v", path, err) + } + orgCount -= 1 + + fc := n.FileCount() + if fc != orgCount { + t.Fatalf("expected file count %d, got %d", + orgCount, fc) + } +} + +func TestExists(t *testing.T) { + n := makeLoadedFileTree(t) + path := filepath.Join("b", "d", "a") + if !n.Exists(path) { + t.Fatalf("expected existence at %s", path) + } + if !n.IsDir(path) { + t.Fatalf("expected directory at %s", path) + } +} + +func TestRegExpGlob(t *testing.T) { + n := makeLoadedFileTree(t) + expected := []string{ + filepath.Join("b", "d", ".hidden_file"), + filepath.Join("b", "d", "a", "c", "i", "beans"), + filepath.Join("b", "d", "a", "c", "m"), + filepath.Join("b", "d", "a", "c", "u"), + filepath.Join("b", "d", "ignore", "c", "m"), + filepath.Join("b", "d", "ignore", "c", "n"), + filepath.Join("b", "d", "ignore", "c", "o"), + filepath.Join("b", "d", "x"), + filepath.Join("b", "d", "y"), + filepath.Join("b", "d", "z"), + } + paths, err := n.RegExpGlob("b/d/*") + if err != nil { + t.Fatalf("glob error: %v", err) + } + assertEqualStringSlices(t, expected, paths, "glob test") +} + +func TestGlob(t *testing.T) { + n := makeLoadedFileTree(t) + + tests := map[string]struct { + globPattern string + expectedFiles []string + }{ + "VisibleFiles": { + globPattern: "b/d/*", + expectedFiles: []string{ + filepath.Join("b", "d", "x"), + filepath.Join("b", "d", "y"), + filepath.Join("b", "d", "z"), + }, + }, + "HiddenFiles": { + globPattern: "b/d/.*", + expectedFiles: []string{ + filepath.Join("b", "d", ".hidden_file"), + }, + }, + } + + for test, c := range tests { + t.Run(test, func(t *testing.T) { + paths, err := n.Glob(c.globPattern) + if err != nil { + t.Fatalf("glob error: %v", err) + } + assertEqualStringSlices(t, c.expectedFiles, paths, "glob test") + }) + } +} + +func assertEqualStringSlices(t *testing.T, expected, actual []string, message string) { + t.Helper() + if len(expected) != len(actual) { + t.Fatalf( + "%s; unequal sizes; len(expected)=%d, len(actual)=%d\n%+v\n%+v\n", + message, len(expected), len(actual), expected, actual) + } + for i := range expected { + if expected[i] != actual[i] { + t.Fatalf( + "%s; unequal entries; expected=%s, actual=%s", + message, expected[i], actual[i]) + } + } +} + +func TestFind(t *testing.T) { + cases := []struct { + what string + arg string + expectDir bool + expectFile bool + errStr string + }{ + { + what: "garbage", + arg: "///1(*&SA", + }, + { + what: "simple", + arg: "bob", + }, + { + what: "no directory", + arg: filepath.Join("b", "rrrrrr"), + }, + { + what: "is a directory", + arg: filepath.Join("b", "d", "ignore"), + expectDir: true, + }, + { + what: "longer, ending in file", + arg: filepath.Join("b", "d", "x"), + expectFile: true, + }, + { + what: "moar longer, ending in file", + arg: filepath.Join("b", "d", "a", "c", "u"), + expectFile: true, + }, + { + what: "directory", + arg: filepath.Join("b"), + expectDir: true, + }, + { + // Querying for the empty string could + // 1) be an error, + // 2) return no result (and no error) as with + // any illegal and therefore non-existent + // file name, + // 3) return the node itself, like running + // 'ls' with no argument. + // Going with option 2 (no result, no error), + // since at this low level it makes more sense + // if the results for the empty string query + // differ from the results for the "." query. + what: "empty name", + arg: "", + }, + { + what: "self dir", + arg: SelfDir, + expectDir: true, + }, + { + what: "parent dir - doesn't exist", + arg: ParentDir, + }, + { + what: "many parents - doesn't exist", + arg: filepath.Join(ParentDir, ParentDir, ParentDir), + }, + } + + n := makeLoadedFileTree(t) + for _, item := range cases { + result, err := n.Find(item.arg) + if item.errStr != "" { + if err == nil { + t.Fatalf("%s; expected error", item.what) + } + if !strings.Contains(err.Error(), item.errStr) { + t.Fatalf("%s; expected err containing '%s', got '%v'", + item.what, item.errStr, err) + } + continue + } + if err != nil { + t.Fatalf("%s; unexpected error: %v", item.what, err) + } + if result == nil { + if item.expectDir { + t.Fatalf( + "%s; expected to find directory '%s'", item.what, item.arg) + } + if item.expectFile { + t.Fatalf( + "%s; expected to find file '%s'", item.what, item.arg) + } + continue + } + if item.expectDir { + if !result.isNodeADir() { + t.Fatalf( + "%s; expected '%s' to be a directory", item.what, item.arg) + } + continue + } + if item.expectFile { + if result.isNodeADir() { + t.Fatalf("%s; expected '%s' to be a file", item.what, item.arg) + } + continue + } + t.Fatalf( + "%s; expected nothing for '%s', but got '%s'", + item.what, item.arg, result.Path()) + } +} + +func TestCleanedAbs(t *testing.T) { + cases := []struct { + what string + full string + cDir string + name string + errStr string + }{ + { + what: "empty", + full: "", + errStr: "doesn't exist", + }, + { + what: "simple", + full: "bob", + errStr: "'bob' doesn't exist", + }, + { + what: "no directory", + full: filepath.Join("b", "rrrrrr"), + errStr: "'b/rrrrrr' doesn't exist", + }, + { + what: "longer, ending in file", + full: filepath.Join("b", "d", "x"), + cDir: filepath.Join("b", "d"), + name: "x", + }, + { + what: "moar longer, ending in file", + full: filepath.Join("b", "d", "a", "c", "u"), + cDir: filepath.Join("b", "d", "a", "c"), + name: "u", + }, + { + what: "directory", + full: filepath.Join("b", "d"), + cDir: filepath.Join("b", "d"), + name: "", + }, + } + + n := makeLoadedFileTree(t) + for _, item := range cases { + cDir, name, err := n.CleanedAbs(item.full) + if item.errStr != "" { + if err == nil { + t.Fatalf("%s; expected error", item.what) + } + if !strings.Contains(err.Error(), item.errStr) { + t.Fatalf("%s; expected err containing '%s', got '%v'", + item.what, item.errStr, err) + } + continue + } + if err != nil { + t.Fatalf("%s; unexpected error: %v", item.what, err) + } + if cDir != ConfirmedDir(item.cDir) { + t.Fatalf("%s; expected cDir=%s, got '%s'", item.what, item.cDir, cDir) + } + if name != item.name { + t.Fatalf("%s; expected name=%s, got '%s'", item.what, item.name, name) + } + } +} + +func TestFileOps(t *testing.T) { + const path = "foo.txt" + content := strings.Repeat("longest content", 100) + + fs := MakeFsInMemory() + f, err := fs.Create(path) + if err != nil { + t.Fatalf("unexpected error: %v", err) + } + if _, err := fs.Open(path); err == nil { + t.Fatalf("expected already opened error, got nil") + } + if _, err := fmt.Fprint(f, content); err != nil { + t.Fatalf("unexpected error: %v", err) + } + + if err := f.Close(); err != nil { + t.Fatalf("unexpected error: %v", err) + } + if err := f.Close(); err == nil { + t.Fatalf("expected already closed error, got nil") + } + + f, err = fs.Open(path) + if err != nil { + t.Fatalf("unexpected error: %v", err) + } + defer f.Close() + + for { + buf := make([]byte, rand.Intn(10)) + n, err := f.Read(buf) + if err != nil && err != io.EOF { + t.Fatalf("unexpected error: %v", err) + } + if content[:n] != string(buf[:n]) { + t.Fatalf("unexpected read: expected %q got %q", content[:n], buf[:n]) + } + content = content[n:] + if err != io.EOF { + continue + } + if len(content) == 0 { + break + } + t.Fatalf("unexpected EOF: remaining %d bytes", len(content)) + } +} diff --git a/go/internal/forked/kyaml/filesys/fsondisk.go b/go/internal/forked/kyaml/filesys/fsondisk.go new file mode 100644 index 000000000..7fd02a255 --- /dev/null +++ b/go/internal/forked/kyaml/filesys/fsondisk.go @@ -0,0 +1,137 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package filesys + +import ( + "fmt" + "io/ioutil" + "log" + "os" + "path/filepath" +) + +var _ FileSystem = fsOnDisk{} + +// fsOnDisk implements FileSystem using the local filesystem. +type fsOnDisk struct{} + +// MakeFsOnDisk makes an instance of fsOnDisk. +func MakeFsOnDisk() FileSystem { + return fsOnDisk{} +} + +// Create delegates to os.Create. +func (fsOnDisk) Create(name string) (File, error) { return os.Create(name) } + +// Mkdir delegates to os.Mkdir. +func (fsOnDisk) Mkdir(name string) error { + return os.Mkdir(name, 0777|os.ModeDir) +} + +// MkdirAll delegates to os.MkdirAll. +func (fsOnDisk) MkdirAll(name string) error { + return os.MkdirAll(name, 0777|os.ModeDir) +} + +// RemoveAll delegates to os.RemoveAll. +func (fsOnDisk) RemoveAll(name string) error { + return os.RemoveAll(name) +} + +// Open delegates to os.Open. +func (fsOnDisk) Open(name string) (File, error) { return os.Open(name) } + +// CleanedAbs converts the given path into a +// directory and a file name, where the directory +// is represented as a ConfirmedDir and all that implies. +// If the entire path is a directory, the file component +// is an empty string. +func (x fsOnDisk) CleanedAbs( + path string) (ConfirmedDir, string, error) { + absRoot, err := filepath.Abs(path) + if err != nil { + return "", "", fmt.Errorf( + "abs path error on '%s' : %v", path, err) + } + deLinked, err := filepath.EvalSymlinks(absRoot) + if err != nil { + return "", "", fmt.Errorf( + "evalsymlink failure on '%s' : %w", path, err) + } + if x.IsDir(deLinked) { + return ConfirmedDir(deLinked), "", nil + } + d := filepath.Dir(deLinked) + if !x.IsDir(d) { + // Programmer/assumption error. + log.Fatalf("first part of '%s' not a directory", deLinked) + } + if d == deLinked { + // Programmer/assumption error. + log.Fatalf("d '%s' should be a subset of deLinked", d) + } + f := filepath.Base(deLinked) + if filepath.Join(d, f) != deLinked { + // Programmer/assumption error. + log.Fatalf("these should be equal: '%s', '%s'", + filepath.Join(d, f), deLinked) + } + return ConfirmedDir(d), f, nil +} + +// Exists returns true if os.Stat succeeds. +func (fsOnDisk) Exists(name string) bool { + _, err := os.Stat(name) + return err == nil +} + +// Glob returns the list of matching files +func (fsOnDisk) Glob(pattern string) ([]string, error) { + var result []string + allFilePaths, err := filepath.Glob(pattern) + if err != nil { + return nil, err + } + if IsHiddenFilePath(pattern) { + result = allFilePaths + } else { + result = RemoveHiddenFiles(allFilePaths) + } + return result, nil +} + +// IsDir delegates to os.Stat and FileInfo.IsDir +func (fsOnDisk) IsDir(name string) bool { + info, err := os.Stat(name) + if err != nil { + return false + } + return info.IsDir() +} + +// ReadDir delegates to os.ReadDir +func (fsOnDisk) ReadDir(name string) ([]string, error) { + dirEntries, err := os.ReadDir(name) + if err != nil { + return nil, err + } + result := make([]string, len(dirEntries)) + for i := range dirEntries { + result[i] = dirEntries[i].Name() + } + return result, nil +} + +// ReadFile delegates to ioutil.ReadFile. +func (fsOnDisk) ReadFile(name string) ([]byte, error) { return ioutil.ReadFile(name) } + +// WriteFile delegates to ioutil.WriteFile with read/write permissions. +func (fsOnDisk) WriteFile(name string, c []byte) error { + return ioutil.WriteFile(name, c, 0666) +} + +// Walk delegates to filepath.Walk. +func (fsOnDisk) Walk(path string, walkFn filepath.WalkFunc) error { + return filepath.Walk(path, walkFn) +} diff --git a/go/internal/forked/kyaml/filesys/fsondisk_test.go b/go/internal/forked/kyaml/filesys/fsondisk_test.go new file mode 100644 index 000000000..8de95f7ea --- /dev/null +++ b/go/internal/forked/kyaml/filesys/fsondisk_test.go @@ -0,0 +1,249 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +//go:build !windows +// +build !windows + +package filesys + +import ( + "io/ioutil" + "os" + "path" + "path/filepath" + "reflect" + "sort" + "testing" +) + +func makeTestDir(t *testing.T) (FileSystem, string) { + fSys := MakeFsOnDisk() + td, err := ioutil.TempDir("", "kustomize_testing_dir") + if err != nil { + t.Fatalf("unexpected error %s", err) + } + testDir, err := filepath.EvalSymlinks(td) + if err != nil { + t.Fatalf("unexpected error %s", err) + } + if !fSys.Exists(testDir) { + t.Fatalf("expected existence") + } + if !fSys.IsDir(testDir) { + t.Fatalf("expected directory") + } + return fSys, testDir +} + +func TestCleanedAbs_1(t *testing.T) { + fSys, testDir := makeTestDir(t) + defer os.RemoveAll(testDir) + + d, f, err := fSys.CleanedAbs("") + if err != nil { + t.Fatalf("unexpected err=%v", err) + } + wd, err := os.Getwd() + if err != nil { + t.Fatalf("unexpected err=%v", err) + } + if d.String() != wd { + t.Fatalf("unexpected d=%s", d) + } + if f != "" { + t.Fatalf("unexpected f=%s", f) + } +} + +func TestCleanedAbs_2(t *testing.T) { + fSys, testDir := makeTestDir(t) + defer os.RemoveAll(testDir) + + d, f, err := fSys.CleanedAbs("/") + if err != nil { + t.Fatalf("unexpected err=%v", err) + } + if d != "/" { + t.Fatalf("unexpected d=%s", d) + } + if f != "" { + t.Fatalf("unexpected f=%s", f) + } +} + +func TestCleanedAbs_3(t *testing.T) { + fSys, testDir := makeTestDir(t) + defer os.RemoveAll(testDir) + + err := fSys.WriteFile( + filepath.Join(testDir, "foo"), []byte(`foo`)) + if err != nil { + t.Fatalf("unexpected err=%v", err) + } + + d, f, err := fSys.CleanedAbs(filepath.Join(testDir, "foo")) + if err != nil { + t.Fatalf("unexpected err=%v", err) + } + if d.String() != testDir { + t.Fatalf("unexpected d=%s", d) + } + if f != "foo" { + t.Fatalf("unexpected f=%s", f) + } +} + +func TestCleanedAbs_4(t *testing.T) { + fSys, testDir := makeTestDir(t) + defer os.RemoveAll(testDir) + + err := fSys.MkdirAll(filepath.Join(testDir, "d1", "d2")) + if err != nil { + t.Fatalf("unexpected err=%v", err) + } + err = fSys.WriteFile( + filepath.Join(testDir, "d1", "d2", "bar"), + []byte(`bar`)) + if err != nil { + t.Fatalf("unexpected err=%v", err) + } + + d, f, err := fSys.CleanedAbs( + filepath.Join(testDir, "d1", "d2")) + if err != nil { + t.Fatalf("unexpected err=%v", err) + } + if d.String() != filepath.Join(testDir, "d1", "d2") { + t.Fatalf("unexpected d=%s", d) + } + if f != "" { + t.Fatalf("unexpected f=%s", f) + } + + d, f, err = fSys.CleanedAbs( + filepath.Join(testDir, "d1", "d2", "bar")) + if err != nil { + t.Fatalf("unexpected err=%v", err) + } + if d.String() != filepath.Join(testDir, "d1", "d2") { + t.Fatalf("unexpected d=%s", d) + } + if f != "bar" { + t.Fatalf("unexpected f=%s", f) + } +} + +func TestReadFilesRealFS(t *testing.T) { + fSys, testDir := makeTestDir(t) + defer os.RemoveAll(testDir) + + dir := path.Join(testDir, "dir") + nestedDir := path.Join(dir, "nestedDir") + hiddenDir := path.Join(testDir, ".hiddenDir") + dirs := []string{ + testDir, + dir, + nestedDir, + hiddenDir, + } + // all directories will have all these files + files := []string{ + "bar", + "foo", + "file-1.xtn", + ".file-2.xtn", + ".some-file-3.xtn", + ".some-file-4.xtn", + } + + err := fSys.MkdirAll(nestedDir) + if err != nil { + t.Fatalf("Unexpected Error %v\n", err) + } + err = fSys.MkdirAll(hiddenDir) + if err != nil { + t.Fatalf("Unexpected Error %v\n", err) + } + + // adding all files in every directory that we had defined + for _, d := range dirs { + if !fSys.IsDir(d) { + t.Fatalf("Expected %s to be a dir\n", d) + } + for _, f := range files { + err = fSys.WriteFile(path.Join(d, f), []byte(f)) + if err != nil { + t.Fatalf("unexpected error %s", err) + } + if !fSys.Exists(path.Join(d, f)) { + t.Fatalf("expected %s", f) + } + } + } + + tests := map[string]struct { + globPattern string + expectedFiles []string + expectedDirs map[string][]string // glob returns directories as well, so we need to add those to expected files + }{ + "AllVisibleFiles": { + globPattern: "*", + expectedFiles: []string{ + "bar", + "foo", + "file-1.xtn", + }, + expectedDirs: map[string][]string{ + testDir: []string{dir}, + dir: []string{nestedDir}, + }, + }, + "AllHiddenFiles": { + globPattern: ".*", + expectedFiles: []string{ + ".file-2.xtn", + ".some-file-3.xtn", + ".some-file-4.xtn", + }, + expectedDirs: map[string][]string{ + testDir: []string{hiddenDir}, + }, + }, + "foo_File": { + globPattern: "foo", + expectedFiles: []string{ + "foo", + }, + }, + "dotsome-file_PrefixedFiles": { + globPattern: ".some-file*", + expectedFiles: []string{ + ".some-file-3.xtn", + ".some-file-4.xtn", + }, + }, + } + + for n, c := range tests { + t.Run(n, func(t *testing.T) { + for _, d := range dirs { + var expectedPaths []string + for _, f := range c.expectedFiles { + expectedPaths = append(expectedPaths, path.Join(d, f)) + } + if c.expectedDirs != nil { + expectedPaths = append(expectedPaths, c.expectedDirs[d]...) + } + actualPaths, globErr := fSys.Glob(path.Join(d, c.globPattern)) + if globErr != nil { + t.Fatalf("Unexpected Error : %v\n", globErr) + } + sort.Strings(actualPaths) + sort.Strings(expectedPaths) + if !reflect.DeepEqual(actualPaths, expectedPaths) { + t.Fatalf("incorrect files found by glob: expected=%v, actual=%v", expectedPaths, actualPaths) + } + } + }) + } +} diff --git a/go/internal/forked/kyaml/filesys/util.go b/go/internal/forked/kyaml/filesys/util.go new file mode 100644 index 000000000..4d8958a2b --- /dev/null +++ b/go/internal/forked/kyaml/filesys/util.go @@ -0,0 +1,143 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package filesys + +import ( + "os" + "path/filepath" + "strings" +) + +// RootedPath returns a rooted path, e.g. "/foo/bar" as +// opposed to "foo/bar". +func RootedPath(elem ...string) string { + return Separator + filepath.Join(elem...) +} + +// StripTrailingSeps trims trailing filepath separators from input. +func StripTrailingSeps(s string) string { + k := len(s) + for k > 0 && s[k-1] == filepath.Separator { + k-- + } + return s[:k] +} + +// StripLeadingSeps trims leading filepath separators from input. +func StripLeadingSeps(s string) string { + k := 0 + for k < len(s) && s[k] == filepath.Separator { + k++ + } + return s[k:] +} + +// PathSplit converts a file path to a slice of string. +// If the path is absolute (if the path has a leading slash), +// then the first entry in the result is an empty string. +// Desired: path == PathJoin(PathSplit(path)) +func PathSplit(incoming string) []string { + if incoming == "" { + return []string{} + } + dir, path := filepath.Split(incoming) + if dir == string(os.PathSeparator) { + if path == "" { + return []string{""} + } + return []string{"", path} + } + dir = strings.TrimSuffix(dir, string(os.PathSeparator)) + if dir == "" { + return []string{path} + } + return append(PathSplit(dir), path) +} + +// PathJoin converts a slice of string to a file path. +// If the first entry is an empty string, then the returned +// path is absolute (it has a leading slash). +// Desired: path == PathJoin(PathSplit(path)) +func PathJoin(incoming []string) string { + if len(incoming) == 0 { + return "" + } + if incoming[0] == "" { + return string(os.PathSeparator) + filepath.Join(incoming[1:]...) + } + return filepath.Join(incoming...) +} + +// InsertPathPart inserts 'part' at position 'pos' in the given filepath. +// The first position is 0. +// +// E.g. if part == 'PEACH' +// +// OLD : NEW : POS +// -------------------------------------------------------- +// {empty} : PEACH : irrelevant +// / : /PEACH : irrelevant +// pie : PEACH/pie : 0 (or negative) +// /pie : /PEACH/pie : 0 (or negative) +// raw : raw/PEACH : 1 (or larger) +// /raw : /raw/PEACH : 1 (or larger) +// a/nice/warm/pie : a/nice/warm/PEACH/pie : 3 +// /a/nice/warm/pie : /a/nice/warm/PEACH/pie : 3 +// +// * An empty part results in no change. +// +// * Absolute paths get their leading '/' stripped, treated like +// relative paths, and the leading '/' is re-added on output. +// The meaning of pos is intentionally the same in either absolute or +// relative paths; if it weren't, this function could convert absolute +// paths to relative paths, which is not desirable. +// +// * For robustness (liberal input, conservative output) Pos values that +// that are too small (large) to index the split filepath result in a +// prefix (postfix) rather than an error. Use extreme position values +// to assure a prefix or postfix (e.g. 0 will always prefix, and +// 9999 will presumably always postfix). +func InsertPathPart(path string, pos int, part string) string { + if part == "" { + return path + } + parts := PathSplit(path) + if pos < 0 { + pos = 0 + } else if pos > len(parts) { + pos = len(parts) + } + if len(parts) > 0 && parts[0] == "" && pos < len(parts) { + // An empty string at 0 indicates an absolute path, and means + // we must increment pos. This change means that a position + // specification has the same meaning in relative and absolute paths. + // E.g. in either the path 'a/b/c' or the path '/a/b/c', + // 'a' is at 0, 'b' is at 1 and 'c' is at 2, and inserting at + // zero means a new first field _without_ changing an absolute + // path to a relative path. + pos++ + } + result := make([]string, len(parts)+1) + copy(result, parts[0:pos]) + result[pos] = part + return PathJoin(append(result, parts[pos:]...)) +} + +func IsHiddenFilePath(pattern string) bool { + return strings.HasPrefix(filepath.Base(pattern), ".") +} + +// Removes paths containing hidden files/folders from a list of paths +func RemoveHiddenFiles(paths []string) []string { + if len(paths) == 0 { + return paths + } + var result []string + for _, path := range paths { + if !IsHiddenFilePath(path) { + result = append(result, path) + } + } + return result +} diff --git a/go/internal/forked/kyaml/filesys/util_test.go b/go/internal/forked/kyaml/filesys/util_test.go new file mode 100644 index 000000000..da8d3f6bc --- /dev/null +++ b/go/internal/forked/kyaml/filesys/util_test.go @@ -0,0 +1,466 @@ +// Copyright 2021 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +//go:build !windows +// +build !windows + +package filesys + +import ( + "os" + "path/filepath" + "reflect" + "testing" +) + +// Confirm behavior of filepath.Match +func TestFilePathMatch(t *testing.T) { + cases := []struct { + pattern string + path string + expected bool + }{ + { + pattern: "*e*", + path: "hey", + expected: true, + }, + { + pattern: "*e*", + path: "hay", + expected: false, + }, + { + pattern: "*e*", + path: filepath.Join("h", "e", "y"), + expected: false, + }, + { + pattern: "*/e/*", + path: filepath.Join("h", "e", "y"), + expected: true, + }, + { + pattern: "h/e/*", + path: filepath.Join("h", "e", "y"), + expected: true, + }, + { + pattern: "*/e/y", + path: filepath.Join("h", "e", "y"), + expected: true, + }, + { + pattern: "*/*/*", + path: filepath.Join("h", "e", "y"), + expected: true, + }, + { + pattern: "*/*/*", + path: filepath.Join("h", "e", "y", "there"), + expected: false, + }, + { + pattern: "*/*/*/t*e", + path: filepath.Join("h", "e", "y", "there"), + expected: true, + }, + } + for _, item := range cases { + match, err := filepath.Match(item.pattern, item.path) + if err != nil { + t.Fatalf("unexpected err: %v", err) + } + if match != item.expected { + t.Fatalf("'%s' '%s' %v\n", item.pattern, item.path, match) + } + } +} + +// Confirm behavior of filepath.Split +func TestFilePathSplit(t *testing.T) { + cases := []struct { + full string + dir string + file string + }{ + { + full: "", + dir: "", + file: "", + }, + { + full: SelfDir, + dir: "", + file: SelfDir, + }, + { + full: "rabbit.jpg", + dir: "", + file: "rabbit.jpg", + }, + { + full: "/", + dir: "/", + file: "", + }, + { + full: "/beans", + dir: "/", + file: "beans", + }, + { + full: "/home/foo/bar", + dir: "/home/foo/", + file: "bar", + }, + { + full: "/usr/local/", + dir: "/usr/local/", + file: "", + }, + { + full: "/usr//local//go", + dir: "/usr//local//", + file: "go", + }, + } + for _, p := range cases { + dir, file := filepath.Split(p.full) + if dir != p.dir || file != p.file { + t.Fatalf( + "in '%s',\ngot dir='%s' (expected '%s'),\n got file='%s' (expected %s).", + p.full, dir, p.dir, file, p.file) + } + } +} + +func TestPathSplitAndJoin(t *testing.T) { + cases := map[string]struct { + original string + expected []string + }{ + "Empty": { + original: "", + expected: []string{}, + }, + "One": { + original: "hello", + expected: []string{"hello"}, + }, + "Two": { + original: "hello/there", + expected: []string{"hello", "there"}, + }, + "Three": { + original: "hello/my/friend", + expected: []string{"hello", "my", "friend"}, + }, + } + for n, c := range cases { + f := func(t *testing.T, original string, expected []string) { + actual := PathSplit(original) + if len(actual) != len(expected) { + t.Fatalf( + "expected len %d, got len %d", + len(expected), len(actual)) + } + for i := range expected { + if expected[i] != actual[i] { + t.Fatalf( + "at i=%d, expected '%s', got '%s'", + i, expected[i], actual[i]) + } + } + joined := PathJoin(actual) + if joined != original { + t.Fatalf( + "when rejoining, expected '%s', got '%s'", + original, joined) + } + } + t.Run("relative"+n, func(t *testing.T) { + f(t, c.original, c.expected) + }) + t.Run("absolute"+n, func(t *testing.T) { + f(t, + string(os.PathSeparator)+c.original, + append([]string{""}, c.expected...)) + }) + } +} + +func TestInsertPathPart(t *testing.T) { + cases := map[string]struct { + original string + pos int + part string + expected string + }{ + "rootOne": { + original: "/", + pos: 0, + part: "___", + expected: "/___", + }, + "rootTwo": { + original: "/", + pos: 444, + part: "___", + expected: "/___", + }, + "rootedFirst": { + original: "/apple", + pos: 0, + part: "___", + expected: "/___/apple", + }, + "rootedSecond": { + original: "/apple", + pos: 444, + part: "___", + expected: "/apple/___", + }, + "rootedThird": { + original: "/apple/banana", + pos: 444, + part: "___", + expected: "/apple/banana/___", + }, + "emptyLow": { + original: "", + pos: -3, + part: "___", + expected: "___", + }, + "emptyHigh": { + original: "", + pos: 444, + part: "___", + expected: "___", + }, + "peachPie": { + original: "a/nice/warm/pie", + pos: 3, + part: "PEACH", + expected: "a/nice/warm/PEACH/pie", + }, + "rootedPeachPie": { + original: "/a/nice/warm/pie", + pos: 3, + part: "PEACH", + expected: "/a/nice/warm/PEACH/pie", + }, + "longStart": { + original: "a/b/c/d/e/f", + pos: 0, + part: "___", + expected: "___/a/b/c/d/e/f", + }, + "rootedLongStart": { + original: "/a/b/c/d/e/f", + pos: 0, + part: "___", + expected: "/___/a/b/c/d/e/f", + }, + "longMiddle": { + original: "a/b/c/d/e/f", + pos: 3, + part: "___", + expected: "a/b/c/___/d/e/f", + }, + "rootedLongMiddle": { + original: "/a/b/c/d/e/f", + pos: 3, + part: "___", + expected: "/a/b/c/___/d/e/f", + }, + "longEnd": { + original: "a/b/c/d/e/f", + pos: 444, + part: "___", + expected: "a/b/c/d/e/f/___", + }, + "rootedLongEnd": { + original: "/a/b/c/d/e/f", + pos: 444, + part: "___", + expected: "/a/b/c/d/e/f/___", + }, + } + for n, c := range cases { + t.Run(n, func(t *testing.T) { + actual := InsertPathPart(c.original, c.pos, c.part) + if actual != c.expected { + t.Fatalf("expected '%s', got '%s'", c.expected, actual) + } + }) + } +} + +func TestStripTrailingSeps(t *testing.T) { + cases := []struct { + full string + rem string + }{ + { + full: "foo", + rem: "foo", + }, + { + full: "", + rem: "", + }, + { + full: "foo/", + rem: "foo", + }, + { + full: "foo///bar///", + rem: "foo///bar", + }, + { + full: "/////", + rem: "", + }, + { + full: "/", + rem: "", + }, + } + for _, p := range cases { + dir := StripTrailingSeps(p.full) + if dir != p.rem { + t.Fatalf( + "in '%s', got dir='%s' (expected '%s')", + p.full, dir, p.rem) + } + } +} + +func TestStripLeadingSeps(t *testing.T) { + cases := []struct { + full string + rem string + }{ + { + full: "foo", + rem: "foo", + }, + { + full: "", + rem: "", + }, + { + full: "/foo", + rem: "foo", + }, + { + full: "///foo///bar///", + rem: "foo///bar///", + }, + { + full: "/////", + rem: "", + }, + { + full: "/", + rem: "", + }, + } + for _, p := range cases { + dir := StripLeadingSeps(p.full) + if dir != p.rem { + t.Fatalf( + "in '%s', got dir='%s' (expected '%s')", + p.full, dir, p.rem) + } + } +} + +func TestIsHiddenFilePath(t *testing.T) { + tests := map[string]struct { + paths []string + expectHidden bool + }{ + "hiddenGlobs": { + expectHidden: true, + paths: []string{ + ".*", + "/.*", + "dir/.*", + "dir1/dir2/dir3/.*", + "../../.*", + "../../dir/.*", + }, + }, + "visibleGlobes": { + expectHidden: false, + paths: []string{ + "*", + "/*", + "dir/*", + "dir1/dir2/dir3/*", + "../../*", + "../../dir/*", + }, + }, + "hiddenFiles": { + expectHidden: true, + paths: []string{ + ".root_file.xtn", + "/.file_1.xtn", + "dir/.file_2.xtn", + "dir1/dir2/dir3/.file_3.xtn", + "../../.file_4.xtn", + "../../dir/.file_5.xtn", + }, + }, + "visibleFiles": { + expectHidden: false, + paths: []string{ + "root_file.xtn", + "/file_1.xtn", + "dir/file_2.xtn", + "dir1/dir2/dir3/file_3.xtn", + "../../file_4.xtn", + "../../dir/file_5.xtn", + }, + }, + } + for n, c := range tests { + t.Run(n, func(t *testing.T) { + for _, path := range c.paths { + actual := IsHiddenFilePath(path) + if actual != c.expectHidden { + t.Fatalf("For file path %q, expected hidden: %v, got hidden: %v", path, c.expectHidden, actual) + } + } + }) + } +} + +func TestRemoveHiddenFiles(t *testing.T) { + paths := []string{ + "file1.xtn", + ".file2.xtn", + "dir/fa1", + "dir/fa2", + "dir/.fa3", + "../../.fa4", + "../../fa5", + "../../dir/fa6", + "../../dir/.fa7", + } + result := RemoveHiddenFiles(paths) + expected := []string{ + "file1.xtn", + "dir/fa1", + "dir/fa2", + "../../fa5", + "../../dir/fa6", + } + if !reflect.DeepEqual(result, expected) { + t.Fatalf("Hidden dirs not correctly removed, expected %v but got %v\n", expected, result) + } +} diff --git a/go/internal/forked/kyaml/filtersutil/doc.go b/go/internal/forked/kyaml/filtersutil/doc.go new file mode 100644 index 000000000..b5cb975fa --- /dev/null +++ b/go/internal/forked/kyaml/filtersutil/doc.go @@ -0,0 +1,6 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +// Package filtersutil provides utilities for working with yaml.Filter and +// kio.Filter interfaces. +package filtersutil diff --git a/go/internal/forked/kyaml/filtersutil/example_test.go b/go/internal/forked/kyaml/filtersutil/example_test.go new file mode 100644 index 000000000..e31ca2906 --- /dev/null +++ b/go/internal/forked/kyaml/filtersutil/example_test.go @@ -0,0 +1,58 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package filtersutil_test + +import ( + "bytes" + "fmt" + "log" + "testing" + + "github.com/stretchr/testify/assert" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/filtersutil" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/kio" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" +) + +func TestApplyToJSON(t *testing.T) { + // testFilter sets `foo: bar` on each resource + testFilter := kio.FilterAll(yaml.FilterFunc( + func(node *yaml.RNode) (*yaml.RNode, error) { + set := yaml.SetField( + "foo", yaml.NewScalarRNode("bar")) + err := node.PipeE(set) + if !assert.NoError(t, err) { + t.FailNow() + } + return node, nil + })) + + obj1 := buffer{Buffer: bytes.NewBufferString(`{"kind": "Foo"}`)} + obj2 := buffer{Buffer: bytes.NewBufferString(`{"kind": "Bar"}`)} + err := filtersutil.ApplyToJSON(testFilter, obj1, obj2) + if err != nil { + log.Fatal(err) + } + + fmt.Println(obj1.String()) + fmt.Println(obj2.String()) + + // Output: + // {"foo":"bar","kind":"Foo"} + // {"foo":"bar","kind":"Bar"} +} + +type buffer struct { + *bytes.Buffer +} + +func (buff buffer) UnmarshalJSON(b []byte) error { + buff.Reset() + buff.Write(b) + return nil +} + +func (buff buffer) MarshalJSON() ([]byte, error) { + return buff.Bytes(), nil +} diff --git a/go/internal/forked/kyaml/filtersutil/filtersutil.go b/go/internal/forked/kyaml/filtersutil/filtersutil.go new file mode 100644 index 000000000..cdeb95764 --- /dev/null +++ b/go/internal/forked/kyaml/filtersutil/filtersutil.go @@ -0,0 +1,83 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package filtersutil + +import ( + "encoding/json" + + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/errors" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/kio" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" +) + +// ApplyToJSON applies the filter to the json objects. +// +// ApplyToJSON marshals the objects into a slice of yaml.RNodes, runs +// the filter on the slice, and then unmarshals the values back. +// +// The filter must not create or delete objects because the objects +// are updated in place. +func ApplyToJSON(filter kio.Filter, objs ...marshalerUnmarshaler) error { + var nodes []*yaml.RNode + + // convert the json objects to rnodes + for i := range objs { + node, err := GetRNode(objs[i]) + if err != nil { + return err + } + nodes = append(nodes, node) + } + + // apply the filter + nodes, err := filter.Filter(nodes) + if err != nil { + return err + } + if len(nodes) != len(objs) { + return errors.Errorf("filter cannot create or delete objects") + } + + // convert the rnodes to json objects + for i := range nodes { + err = setRNode(objs[i], nodes[i]) + if err != nil { + return err + } + } + + return nil +} + +type marshalerUnmarshaler interface { + json.Unmarshaler + json.Marshaler +} + +// GetRNode converts k into an RNode +func GetRNode(k json.Marshaler) (*yaml.RNode, error) { + j, err := k.MarshalJSON() + if err != nil { + return nil, err + } + return yaml.Parse(string(j)) +} + +// setRNode marshals node into k +func setRNode(k json.Unmarshaler, node *yaml.RNode) error { + s, err := node.String() + if err != nil { + return err + } + m := map[string]interface{}{} + if err := yaml.Unmarshal([]byte(s), &m); err != nil { + return err + } + + b, err := json.Marshal(m) + if err != nil { + return err + } + return k.UnmarshalJSON(b) +} diff --git a/go/internal/forked/kyaml/fix/fixsetters/fieldmetav1.go b/go/internal/forked/kyaml/fix/fixsetters/fieldmetav1.go new file mode 100644 index 000000000..793fc6d7a --- /dev/null +++ b/go/internal/forked/kyaml/fix/fixsetters/fieldmetav1.go @@ -0,0 +1,74 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package fixsetters + +import ( + "encoding/json" + "fmt" + "strings" + + "k8s.io/kube-openapi/pkg/validation/spec" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/errors" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/fieldmeta" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" +) + +// FieldMeta contains metadata that may be attached to fields as comments +type FieldMetaV1 struct { + Schema spec.Schema + + Extensions XKustomize +} + +type XKustomize struct { + SetBy string `yaml:"setBy,omitempty" json:"setBy,omitempty"` + PartialFieldSetters []PartialFieldSetter `yaml:"partialSetters,omitempty" json:"partialSetters,omitempty"` + FieldSetter *PartialFieldSetter `yaml:"setter,omitempty" json:"setter,omitempty"` +} + +// PartialFieldSetter defines how to set part of a field rather than the full field +// value. e.g. the tag part of an image field +type PartialFieldSetter struct { + // Name is the name of this setter. + Name string `yaml:"name" json:"name"` + + // Value is the current value that has been set. + Value string `yaml:"value" json:"value"` +} + +// UpgradeV1SetterComment reads the FieldMeta from a node and upgrade the +// setters comment to latest +func (fm *FieldMetaV1) UpgradeV1SetterComment(n *yaml.RNode) error { + // check for metadata on head and line comments + comments := []string{n.YNode().LineComment, n.YNode().HeadComment} + for _, c := range comments { + if c == "" { + continue + } + c := strings.TrimLeft(c, "#") + + if err := fm.Schema.UnmarshalJSON([]byte(c)); err != nil { + // note: don't return an error if the comment isn't a fieldmeta struct + return nil + } + + fe := fm.Schema.VendorExtensible.Extensions["x-kustomize"] + if fe == nil { + return nil + } + b, err := json.Marshal(fe) + if err != nil { + return errors.Wrap(err) + } + // delete line comment after parsing info into fieldmeta + n.YNode().HeadComment = "" + n.YNode().LineComment = "" + err = json.Unmarshal(b, &fm.Extensions) + if fm.Extensions.FieldSetter != nil { + n.YNode().LineComment = fmt.Sprintf(`{"%s":"%s"}`, fieldmeta.ShortHandRef(), fm.Extensions.FieldSetter.Name) + } + return err + } + return nil +} diff --git a/go/internal/forked/kyaml/fix/fixsetters/fixsetters.go b/go/internal/forked/kyaml/fix/fixsetters/fixsetters.go new file mode 100644 index 000000000..83b9b0d45 --- /dev/null +++ b/go/internal/forked/kyaml/fix/fixsetters/fixsetters.go @@ -0,0 +1,141 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package fixsetters + +import ( + "os" + + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/kio" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/setters2" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/setters2/settersutil" +) + +// SetterFixer fixes setters in the input package +type SetterFixer struct { + // PkgPath is path to the resource package + PkgPath string + + // OpenAPIPath is path to the openAPI file in the package + OpenAPIPath string + + // DryRun only displays the actions without performing + DryRun bool +} + +// SetterFixerV1Result holds the results of V1 setters fix +type SetterFixerV1Result struct { + // NeedFix indicates if the resource in pkgPath are on V1 version of setters + // and need to be fixed + NeedFix bool + + // CreatedSetters are setters created as part of this fix + CreatedSetters []string + + // CreatedSubst are substitutions created as part of this fix + CreatedSubst []string + + // FailedSetters are setters failed to create from current V1 setters + FailedSetters map[string]error + + // FailedSubst are substitutions failed to be created from V1 partial setters + FailedSubst map[string]error +} + +// FixSettersV1 reads the package and upgrades v1 version of setters +// to latest +func (f *SetterFixer) FixV1Setters() (SetterFixerV1Result, error) { + sfr := SetterFixerV1Result{ + FailedSetters: make(map[string]error), + FailedSubst: make(map[string]error), + } + // KrmFile need not exist for dryRun + if !f.DryRun { + _, err := os.Stat(f.OpenAPIPath) + if err != nil { + return sfr, err + } + } + + var err error + // lookup for all setters and partial setters in v1 format + // delete the v1 format comments after lookup + l := UpgradeV1Setters{} + if f.DryRun { + err = applyReadFilter(&l, f.PkgPath) + } else { + err = applyWriteFilter(&l, f.PkgPath) + } + if err != nil { + return sfr, err + } + if len(l.SetterCounts) > 0 { + sfr.NeedFix = true + } else { + return sfr, nil + } + + // for each v1 setter create the equivalent in v2, + for _, setter := range l.SetterCounts { + sd := setters2.SetterDefinition{ + Name: setter.Name, + Value: setter.Value, + Description: setter.Description, + SetBy: setter.SetBy, + Type: setter.Type, + } + var err error + if !f.DryRun { + err = sd.AddToFile(f.OpenAPIPath) + } + + if err != nil { + sfr.FailedSetters[setter.Name] = err + } else { + sfr.CreatedSetters = append(sfr.CreatedSetters, setter.Name) + } + } + + // for each group of partial setters, create equivalent substitution + for _, subst := range l.Substitutions { + sc := settersutil.SubstitutionCreator{ + Name: subst.Name, + FieldValue: subst.FieldVale, + Pattern: subst.Pattern, + ResourcesPath: f.PkgPath, + OpenAPIPath: f.OpenAPIPath, + } + var err error + if !f.DryRun { + err = applyWriteFilter(&sc, f.PkgPath) + } + if err != nil { + sfr.FailedSubst[subst.Name] = err + } else { + sfr.CreatedSubst = append(sfr.CreatedSubst, subst.Name) + } + } + + return sfr, nil +} + +func applyWriteFilter(f kio.Filter, pkgPath string) error { + rw := &kio.LocalPackageReadWriter{ + PackagePath: pkgPath, + } + return kio.Pipeline{ + Inputs: []kio.Reader{rw}, + Filters: []kio.Filter{f}, + Outputs: []kio.Writer{rw}, + }.Execute() +} + +func applyReadFilter(f kio.Filter, pkgPath string) error { + rw := &kio.LocalPackageReader{ + PackagePath: pkgPath, + } + return kio.Pipeline{ + Inputs: []kio.Reader{rw}, + Filters: []kio.Filter{f}, + }.Execute() +} diff --git a/go/internal/forked/kyaml/fix/fixsetters/fixsetters_test.go b/go/internal/forked/kyaml/fix/fixsetters/fixsetters_test.go new file mode 100644 index 000000000..a46739e30 --- /dev/null +++ b/go/internal/forked/kyaml/fix/fixsetters/fixsetters_test.go @@ -0,0 +1,466 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package fixsetters + +import ( + "io/ioutil" + "os" + "path/filepath" + "testing" + + "github.com/stretchr/testify/assert" +) + +func TestFixSettersV1(t *testing.T) { + var tests = []struct { + name string + input string + err string + dryRun bool + openAPIFile string + expectedOutput string + expectedOpenAPI string + needFix bool + createdSetters []string + createdSubst []string + failedSetters map[string]error + failedSubst map[string]error + }{ + { + name: "upgrade-delete-partial-setters", + input: ` +apiVersion: install.istio.io/v1alpha2 +kind: IstioControlPlane +metadata: + cluster: "someproj/someclus" # {"type":"string","x-kustomize":{"partialSetters":[{"name":"project","value":"someproj"},{"name":"cluster","value":"someclus"}]}} +spec: + profile: asm # {"type":"string","x-kustomize":{"setter":{"name":"profile","value":"asm"}}} + cluster: "someproj/someclus" # {"type":"string","x-kustomize":{"partialSetters":[{"name":"project","value":"someproj"},{"name":"cluster","value":"someclus"}]}} + `, + + openAPIFile: `apiVersion: kustomization.dev/v1alpha1 +kind: Kustomization`, + + needFix: true, + createdSetters: []string{"cluster", "profile", "project"}, + createdSubst: []string{"project-cluster-54235872"}, + failedSetters: map[string]error{}, + failedSubst: map[string]error{}, + + expectedOutput: `apiVersion: install.istio.io/v1alpha2 +kind: IstioControlPlane +metadata: + cluster: "someproj/someclus" # {"$openapi":"project-cluster-54235872"} +spec: + profile: asm # {"$openapi":"profile"} + cluster: "someproj/someclus" # {"$openapi":"project-cluster-54235872"} +`, + + expectedOpenAPI: `apiVersion: kustomization.dev/v1alpha1 +kind: Kustomization +openAPI: + definitions: + io.k8s.cli.setters.cluster: + type: string + x-k8s-cli: + setter: + name: cluster + value: someclus + io.k8s.cli.setters.profile: + type: string + x-k8s-cli: + setter: + name: profile + value: asm + io.k8s.cli.setters.project: + type: string + x-k8s-cli: + setter: + name: project + value: someproj + io.k8s.cli.substitutions.project-cluster-54235872: + x-k8s-cli: + substitution: + name: project-cluster-54235872 + pattern: ${project}/${cluster} + values: + - marker: ${project} + ref: '#/definitions/io.k8s.cli.setters.project' + - marker: ${cluster} + ref: '#/definitions/io.k8s.cli.setters.cluster' +`, + }, + + { + name: "upgrade-delete-partial-setters-dryRun", + dryRun: true, + input: `apiVersion: install.istio.io/v1alpha2 +kind: IstioControlPlane +metadata: + cluster: "someproj/someclus" # {"type":"string","x-kustomize":{"partialSetters":[{"name":"project","value":"someproj"},{"name":"cluster","value":"someclus"}]}} +spec: + profile: asm # {"type":"string","x-kustomize":{"setter":{"name":"profile","value":"asm"}}} + cluster: "someproj/someclus" # {"type":"string","x-kustomize":{"partialSetters":[{"name":"project","value":"someproj"},{"name":"cluster","value":"someclus"}]}} +`, + needFix: true, + createdSetters: []string{"cluster", "profile", "project"}, + createdSubst: []string{"project-cluster-54235872"}, + failedSetters: map[string]error{}, + failedSubst: map[string]error{}, + + expectedOutput: `apiVersion: install.istio.io/v1alpha2 +kind: IstioControlPlane +metadata: + cluster: "someproj/someclus" # {"type":"string","x-kustomize":{"partialSetters":[{"name":"project","value":"someproj"},{"name":"cluster","value":"someclus"}]}} +spec: + profile: asm # {"type":"string","x-kustomize":{"setter":{"name":"profile","value":"asm"}}} + cluster: "someproj/someclus" # {"type":"string","x-kustomize":{"partialSetters":[{"name":"project","value":"someproj"},{"name":"cluster","value":"someclus"}]}} +`, + }, + + { + name: "partial-setters-same-value", + input: ` +apiVersion: install.istio.io/v1alpha2 +kind: IstioControlPlane +spec: + profile: asm # {"type":"string","x-kustomize":{"setter":{"name":"profile","value":"asm"}}} + team: asm # {"type":"string","x-kustomize":{"setter":{"name":"team","value":"asm"}}} + profile-team: asm/asm # {"type":"string","x-kustomize":{"partialSetters":[{"name":"profile","value":"asm"},{"name":"team","value":"asm"}]}} + `, + + openAPIFile: `apiVersion: kustomization.dev/v1alpha1 +kind: Kustomization`, + + needFix: true, + createdSetters: []string{"profile", "team"}, + createdSubst: []string{"profile-team-1851878264"}, + failedSetters: map[string]error{}, + failedSubst: map[string]error{}, + + expectedOutput: `apiVersion: install.istio.io/v1alpha2 +kind: IstioControlPlane +spec: + profile: asm # {"$openapi":"profile"} + team: asm # {"$openapi":"team"} + profile-team: asm/asm # {"$openapi":"profile-team-1851878264"} +`, + + expectedOpenAPI: `apiVersion: kustomization.dev/v1alpha1 +kind: Kustomization +openAPI: + definitions: + io.k8s.cli.setters.profile: + type: string + x-k8s-cli: + setter: + name: profile + value: asm + io.k8s.cli.setters.team: + type: string + x-k8s-cli: + setter: + name: team + value: asm + io.k8s.cli.substitutions.profile-team-1851878264: + x-k8s-cli: + substitution: + name: profile-team-1851878264 + pattern: ${profile}/${team} + values: + - marker: ${profile} + ref: '#/definitions/io.k8s.cli.setters.profile' + - marker: ${team} + ref: '#/definitions/io.k8s.cli.setters.team' +`, + }, + + { + name: "partial-setters-suffix-subst", + input: ` +apiVersion: install.istio.io/v1alpha2 +kind: IstioControlPlane +spec: + profile: asm-profile # {"type":"string","x-kustomize":{"partialSetters":[{"name":"asm","value":"asm"}]}} + team: asm-team # {"type":"string","x-kustomize":{"partialSetters":[{"name":"asm","value":"asm"}]}} + `, + + openAPIFile: `apiVersion: kustomization.dev/v1alpha1 +kind: Kustomization`, + + needFix: true, + createdSetters: []string{"asm"}, + createdSubst: []string{"asm-3472570278", "asm-3647054792"}, + failedSetters: map[string]error{}, + failedSubst: map[string]error{}, + + expectedOutput: `apiVersion: install.istio.io/v1alpha2 +kind: IstioControlPlane +spec: + profile: asm-profile # {"$openapi":"asm-3647054792"} + team: asm-team # {"$openapi":"asm-3472570278"} +`, + + expectedOpenAPI: `apiVersion: kustomization.dev/v1alpha1 +kind: Kustomization +openAPI: + definitions: + io.k8s.cli.setters.asm: + type: string + x-k8s-cli: + setter: + name: asm + value: asm + io.k8s.cli.substitutions.asm-3472570278: + x-k8s-cli: + substitution: + name: asm-3472570278 + pattern: ${asm}-team + values: + - marker: ${asm} + ref: '#/definitions/io.k8s.cli.setters.asm' + io.k8s.cli.substitutions.asm-3647054792: + x-k8s-cli: + substitution: + name: asm-3647054792 + pattern: ${asm}-profile + values: + - marker: ${asm} + ref: '#/definitions/io.k8s.cli.setters.asm' +`, + }, + + { + name: "upgrade-with-both-versions", + + input: ` +apiVersion: install.istio.io/v1alpha2 +kind: IstioControlPlane +metadata: + clusterName: "project-id/us-east1-d/cluster-name" +spec: + profile: asm # {"type":"string","x-kustomize":{"setter":{"name":"profilesetter","value":"asm"}}} + hub: gcr.io/asm-testing # {"$openapi":"hubsetter"} + `, + + openAPIFile: `apiVersion: kustomization.dev/v1alpha1 +kind: Kustomization +openAPI: + definitions: + io.k8s.cli.setters.hubsetter: + type: string + x-k8s-cli: + setter: + name: hubsetter + value: gcr.io/asm-testing`, + + needFix: true, + createdSetters: []string{"profilesetter"}, + failedSetters: map[string]error{}, + failedSubst: map[string]error{}, + + expectedOutput: `apiVersion: install.istio.io/v1alpha2 +kind: IstioControlPlane +metadata: + clusterName: "project-id/us-east1-d/cluster-name" +spec: + profile: asm # {"$openapi":"profilesetter"} + hub: gcr.io/asm-testing # {"$openapi":"hubsetter"} +`, + + expectedOpenAPI: `apiVersion: kustomization.dev/v1alpha1 +kind: Kustomization +openAPI: + definitions: + io.k8s.cli.setters.hubsetter: + type: string + x-k8s-cli: + setter: + name: hubsetter + value: gcr.io/asm-testing + io.k8s.cli.setters.profilesetter: + type: string + x-k8s-cli: + setter: + name: profilesetter + value: asm +`, + }, + + { + name: "setter-already-exists", + + input: ` +apiVersion: install.istio.io/v1alpha2 +kind: IstioControlPlane +metadata: + clusterName: "project-id/us-east1-d/cluster-name" +spec: + profile: asm # {"type":"string","x-kustomize":{"setter":{"name":"profilesetter","value":"asm"}}} + hub: asm # {"$openapi":"profilesetter"} + `, + + openAPIFile: `apiVersion: kustomization.dev/v1alpha1 +kind: Kustomization +openAPI: + definitions: + io.k8s.cli.setters.profilesetter: + type: string + x-k8s-cli: + setter: + name: profilesetter + value: asm +`, + + needFix: true, + createdSetters: []string{"profilesetter"}, + failedSetters: map[string]error{}, + failedSubst: map[string]error{}, + expectedOutput: `apiVersion: install.istio.io/v1alpha2 +kind: IstioControlPlane +metadata: + clusterName: "project-id/us-east1-d/cluster-name" +spec: + profile: asm # {"$openapi":"profilesetter"} + hub: asm # {"$openapi":"profilesetter"} +`, + + expectedOpenAPI: `apiVersion: kustomization.dev/v1alpha1 +kind: Kustomization +openAPI: + definitions: + io.k8s.cli.setters.profilesetter: + type: string + x-k8s-cli: + setter: + name: profilesetter + value: asm +`, + }, + { + name: "do-not-delete-latest setters", + + input: ` +apiVersion: install.istio.io/v1alpha2 +kind: IstioControlPlane +metadata: + clusterName: "project-id/us-east1-d/cluster-name" +spec: + profile: asm # {"$openapi":"profilesetter"} + hub: gcr.io/asm-testing + `, + failedSetters: map[string]error{}, + failedSubst: map[string]error{}, + + openAPIFile: `apiVersion: kustomization.dev/v1alpha1 +kind: Kustomization +openAPI: + definitions: + io.k8s.cli.setters.profilesetter: + type: string + x-k8s-cli: + setter: + name: profilesetter + value: asm +`, + + expectedOutput: `apiVersion: install.istio.io/v1alpha2 +kind: IstioControlPlane +metadata: + clusterName: "project-id/us-east1-d/cluster-name" +spec: + profile: asm # {"$openapi":"profilesetter"} + hub: gcr.io/asm-testing +`, + + expectedOpenAPI: `apiVersion: kustomization.dev/v1alpha1 +kind: Kustomization +openAPI: + definitions: + io.k8s.cli.setters.profilesetter: + type: string + x-k8s-cli: + setter: + name: profilesetter + value: asm +`, + }, + + { + name: "no-openAPI-file-error", + input: ` +apiVersion: install.istio.io/v1alpha2 +kind: IstioControlPlane +metadata: + clusterName: "project-id/us-east1-d/cluster-name" +spec: + profile: asm # {"type":"string","x-kustomize":{"setter":{"name":"profilesetter","value":"asm"}}} + hub: gcr.io/asm-testing + `, + + err: "Krmfile:", + }, + } + for i := range tests { + test := tests[i] + t.Run(test.name, func(t *testing.T) { + openAPIFileName := "Krmfile" + + dir, err := ioutil.TempDir("", "") + if !assert.NoError(t, err) { + t.FailNow() + } + + defer os.RemoveAll(dir) + + err = ioutil.WriteFile(filepath.Join(dir, "deploy.yaml"), []byte(test.input), 0600) + if !assert.NoError(t, err) { + t.FailNow() + } + + if test.openAPIFile != "" { + err = ioutil.WriteFile(filepath.Join(dir, openAPIFileName), []byte(test.openAPIFile), 0600) + if !assert.NoError(t, err) { + t.FailNow() + } + } + sf := SetterFixer{ + PkgPath: dir, + DryRun: test.dryRun, + OpenAPIPath: filepath.Join(dir, "Krmfile"), + } + + sfr, err := sf.FixV1Setters() + if test.err == "" { + if !assert.NoError(t, err) { + t.FailNow() + } + } else { + if !assert.Contains(t, err.Error(), test.err) { + t.FailNow() + } + return + } + + actualOutput, err := ioutil.ReadFile(filepath.Join(dir, "deploy.yaml")) + if !assert.NoError(t, err) { + t.FailNow() + } + assert.Equal(t, test.expectedOutput, string(actualOutput)) + + if test.expectedOpenAPI != "" { + actualOpenAPI, err := ioutil.ReadFile(filepath.Join(dir, openAPIFileName)) + if !assert.NoError(t, err) { + t.FailNow() + } + assert.Equal(t, test.expectedOpenAPI, string(actualOpenAPI)) + } + assert.Equal(t, test.needFix, sfr.NeedFix) + assert.Equal(t, test.createdSetters, sfr.CreatedSetters) + assert.Equal(t, test.createdSubst, sfr.CreatedSubst) + assert.Equal(t, test.failedSubst, sfr.FailedSubst) + assert.Equal(t, test.failedSetters, sfr.FailedSetters) + }) + } +} diff --git a/go/internal/forked/kyaml/fix/fixsetters/lookupupgrade.go b/go/internal/forked/kyaml/fix/fixsetters/lookupupgrade.go new file mode 100644 index 000000000..49a12b891 --- /dev/null +++ b/go/internal/forked/kyaml/fix/fixsetters/lookupupgrade.go @@ -0,0 +1,134 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package fixsetters + +import ( + "fmt" + "hash/fnv" + "strings" + + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/errors" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" +) + +var _ yaml.Filter = &upgradeV1Setters{} + +// upgradeV1Setters looks up v1 setters in a Resource and upgrades +// all the setters related comments +type upgradeV1Setters struct { + // Name of the setter to lookup. Optional + Name string + + // Setters is a list of setters that were found + Setters []setter + + // Substitutions is a list of substitutions that were found + Substitutions []substitution +} + +type substitution struct { + Name string + FieldVale string + Pattern string +} + +type setter struct { + PartialFieldSetter + Description string + Type string + SetBy string + SubstName string +} + +func (ls *upgradeV1Setters) Filter(object *yaml.RNode) (*yaml.RNode, error) { + switch object.YNode().Kind { + case yaml.DocumentNode: + // skip the document node + return ls.Filter(yaml.NewRNode(object.YNode().Content[0])) + case yaml.MappingNode: + return object, object.VisitFields(func(node *yaml.MapNode) error { + return node.Value.PipeE(ls) + }) + case yaml.SequenceNode: + return object, object.VisitElements(func(node *yaml.RNode) error { + return node.PipeE(ls) + }) + case yaml.ScalarNode: + return object, ls.lookupAndUpgrade(object) + default: + return object, nil + } +} + +// lookupAndUpgrade finds any setters for a field and upgrades the setters comment +func (ls *upgradeV1Setters) lookupAndUpgrade(field *yaml.RNode) error { + // check if there is a substitution for this field + var fm = FieldMetaV1{} + if err := fm.UpgradeV1SetterComment(field); err != nil { + return err + } + + if fm.Extensions.FieldSetter != nil { + if ls.Name != "" && ls.Name != fm.Extensions.FieldSetter.Name { + // skip this setter, it doesn't match the specified setter + return nil + } + // full setter + ls.Setters = append(ls.Setters, setter{ + PartialFieldSetter: *fm.Extensions.FieldSetter, + Description: fm.Schema.Description, + Type: fm.Schema.Type[0], + SetBy: fm.Extensions.SetBy, + }) + return nil + } + + if len(fm.Extensions.PartialFieldSetters) > 0 { + fieldValue := field.YNode().Value + pattern := fieldValue + + var substName string + // derive substitution pattern from partial setters + for i := range fm.Extensions.PartialFieldSetters { + substName += fm.Extensions.PartialFieldSetters[i].Name + "-" + pattern = strings.Replace(pattern, fm.Extensions.PartialFieldSetters[i].Value, `${`+fm.Extensions.PartialFieldSetters[i].Name+"}", 1) + } + + fvHash, err := FNV32aHash(fieldValue) + if err != nil { + return err + } + + substName += fvHash + ls.Substitutions = append(ls.Substitutions, substitution{ + Name: substName, + FieldVale: fieldValue, + Pattern: pattern, + }) + } + + for i := range fm.Extensions.PartialFieldSetters { + if ls.Name != "" && ls.Name != fm.Extensions.PartialFieldSetters[i].Name { + // skip this setter + continue + } + ls.Setters = append(ls.Setters, setter{ + PartialFieldSetter: fm.Extensions.PartialFieldSetters[i], + Description: fm.Schema.Description, + Type: fm.Schema.Type[0], + SetBy: fm.Extensions.SetBy, + }) + } + return nil +} + +// FNV32aHash generates 32-bit FNV-1a hash for input string +func FNV32aHash(text string) (string, error) { + algorithm := fnv.New32a() + _, err := algorithm.Write([]byte(text)) + if err != nil { + return "", errors.Wrap(err) + } + return fmt.Sprint(algorithm.Sum32()), nil +} diff --git a/go/internal/forked/kyaml/fix/fixsetters/lookupupgradekio.go b/go/internal/forked/kyaml/fix/fixsetters/lookupupgradekio.go new file mode 100644 index 000000000..405a16d0b --- /dev/null +++ b/go/internal/forked/kyaml/fix/fixsetters/lookupupgradekio.go @@ -0,0 +1,86 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package fixsetters + +import ( + "sort" + + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/kio" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" +) + +var _ kio.Filter = &UpgradeV1Setters{} + +// UpgradeV1Setters identifies setters for a collection of Resources to upgrade +type UpgradeV1Setters struct { + // Name is the name of the setter to match. Optional. + Name string + + // SetterCounts is populated by Filter and contains the count of fields matching each setter. + SetterCounts []setterCount + + // Substitutions are groups of partial setters + Substitutions []substitution +} + +// setterCount records the identified setters and number of fields matching those setters +type setterCount struct { + // Count is the number of substitutions possible to perform + Count int + + // setter is the substitution found + setter +} + +// Filter implements kio.Filter +func (l *UpgradeV1Setters) Filter(input []*yaml.RNode) ([]*yaml.RNode, error) { + setters := map[string]*setterCount{} + substitutions := map[string]*substitution{} + + for i := range input { + // lookup substitutions for this object + ls := &upgradeV1Setters{Name: l.Name} + if err := input[i].PipeE(ls); err != nil { + return nil, err + } + + // aggregate counts for each setter by name. takes the description and value from + // the first setter for each name encountered. + for j := range ls.Setters { + setter := ls.Setters[j] + curr, found := setters[setter.Name] + if !found { + curr = &setterCount{setter: setter} + setters[setter.Name] = curr + } + curr.Count++ + } + + for j := range ls.Substitutions { + subst := ls.Substitutions[j] + _, found := substitutions[subst.Name] + if !found { + substitutions[subst.Name] = &subst + } + } + } + + // pull out and sort the results by setter name + for _, v := range setters { + l.SetterCounts = append(l.SetterCounts, *v) + } + + for _, subst := range substitutions { + l.Substitutions = append(l.Substitutions, *subst) + } + + sort.Slice(l.Substitutions, func(i, j int) bool { + return l.Substitutions[i].Name < l.Substitutions[j].Name + }) + + sort.Slice(l.SetterCounts, func(i, j int) bool { + return l.SetterCounts[i].Name < l.SetterCounts[j].Name + }) + return input, nil +} diff --git a/go/internal/forked/kyaml/fn/framework/command/command.go b/go/internal/forked/kyaml/fn/framework/command/command.go new file mode 100644 index 000000000..edfb949e1 --- /dev/null +++ b/go/internal/forked/kyaml/fn/framework/command/command.go @@ -0,0 +1,200 @@ +// Copyright 2021 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package command + +import ( + "bytes" + "fmt" + "io" + "io/ioutil" + "os" + "path/filepath" + + "github.com/spf13/cobra" + + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/errors" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/fn/framework" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/kio" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" +) + +type CLIMode byte + +const ( + StandaloneEnabled CLIMode = iota + StandaloneDisabled +) + +// Build returns a cobra.Command to run a function. +// +// The cobra.Command reads the input from STDIN, invokes the provided processor, +// and then writes the output to STDOUT. +// +// The cobra.Command has a boolean `--stack` flag to print stack traces on failure. +// +// By default, invoking the returned cobra.Command with arguments triggers "standalone" mode. +// In this mode: +// - The first argument must be the name of a file containing the FunctionConfig. +// - The remaining arguments must be filenames containing input resources for ResourceList.Items. +// - The argument "-", if present, will cause resources to be read from STDIN as well. +// The output will be a raw stream of resources (not wrapped in a List type). +// Example usage: `cat input1.yaml | go run main.go config.yaml input2.yaml input3.yaml -` +// +// If mode is `StandaloneDisabled`, all arguments are ignored, and STDIN must contain +// a Kubernetes List type. To pass a function config in this mode, use a ResourceList as the input. +// The output will be of the same type as the input (e.g. ResourceList). +// Example usage: `cat resource_list.yaml | go run main.go` +// +// By default, any error returned by the ResourceListProcessor will be printed to STDERR. +// Set noPrintError to true to suppress this. +func Build(p framework.ResourceListProcessor, mode CLIMode, noPrintError bool) *cobra.Command { + cmd := cobra.Command{} + + var printStack bool + cmd.Flags().BoolVar(&printStack, "stack", false, "print the stack trace on failure") + cmd.Args = cobra.MinimumNArgs(0) + cmd.SilenceErrors = true + cmd.SilenceUsage = true + + cmd.RunE = func(cmd *cobra.Command, args []string) error { + var readers []io.Reader + rw := &kio.ByteReadWriter{ + Writer: cmd.OutOrStdout(), + KeepReaderAnnotations: true, + } + + if len(args) > 0 && mode == StandaloneEnabled { + // Don't keep the reader annotations if we are in standalone mode + rw.KeepReaderAnnotations = false + // Don't wrap the resources in a resourceList -- we are in + // standalone mode and writing to stdout to be applied + rw.NoWrap = true + + for i := range args { + // the first argument is the resourceList.FunctionConfig + if i == 0 { + var err error + if rw.FunctionConfig, err = functionConfigFromFile(args[0]); err != nil { + return errors.Wrap(err) + } + continue + } + if args[i] == "-" { + readers = append([]io.Reader{cmd.InOrStdin()}, readers...) + } else { + readers = append(readers, &deferredFileReader{path: args[i]}) + } + } + } else { + // legacy kustomize plugin input style + legacyPlugin := os.Getenv("KUSTOMIZE_PLUGIN_CONFIG_STRING") + if legacyPlugin != "" && rw.FunctionConfig != nil { + if err := yaml.Unmarshal([]byte(legacyPlugin), rw.FunctionConfig); err != nil { + return err + } + } + readers = append(readers, cmd.InOrStdin()) + } + rw.Reader = io.MultiReader(readers...) + + err := framework.Execute(p, rw) + if err != nil && !noPrintError { + _, _ = fmt.Fprintf(cmd.ErrOrStderr(), "%v", err) + } + // print the stack if requested + if s := errors.GetStack(err); printStack && s != "" { + _, _ = fmt.Fprintln(cmd.ErrOrStderr(), s) + } + return err + } + + return &cmd +} + +// AddGenerateDockerfile adds a "gen" subcommand to create a Dockerfile for building +// the function into a container image. +// The gen command takes one argument: the directory where the Dockerfile will be created. +// +// go run main.go gen DIR/ +func AddGenerateDockerfile(cmd *cobra.Command) { + gen := &cobra.Command{ + Use: "gen [DIR]", + Args: cobra.ExactArgs(1), + RunE: func(cmd *cobra.Command, args []string) error { + return ioutil.WriteFile(filepath.Join(args[0], "Dockerfile"), []byte(`FROM golang:1.16-alpine as builder +ENV CGO_ENABLED=0 +WORKDIR /go/src/ +COPY go.mod go.sum ./ +RUN go mod download +COPY . . +RUN go build -ldflags '-w -s' -v -o /usr/local/bin/function ./ + +FROM alpine:latest +COPY --from=builder /usr/local/bin/function /usr/local/bin/function +ENTRYPOINT ["function"] +`), 0600) + }, + } + cmd.AddCommand(gen) +} + +func functionConfigFromFile(file string) (*yaml.RNode, error) { + b, err := ioutil.ReadFile(file) + if err != nil { + return nil, errors.WrapPrefixf(err, "unable to read configuration file %q", file) + } + fc, err := yaml.Parse(string(b)) + if err != nil { + return nil, errors.WrapPrefixf(err, "unable to parse configuration file %q", file) + } + return fc, nil +} + +type deferredFileReader struct { + path string + srcReader io.Reader +} + +func (fr *deferredFileReader) Read(dest []byte) (int, error) { + if fr.srcReader == nil { + src, err := ioutil.ReadFile(fr.path) + if err != nil { + return 0, errors.WrapPrefixf(err, "unable to read input file %s", fr.path) + } + fr.srcReader = bytes.NewReader(src) + } + return fr.srcReader.Read(dest) +} + +// AsMain reads the resourceList in yaml format from stdin, evaluates the +// function and write the updated resourceList in yaml to stdout. Errors if any +// will be printed to stderr. +func AsMain(p framework.ResourceListProcessor) error { + e := func() error { + in, err := ioutil.ReadAll(os.Stdin) + if err != nil { + return fmt.Errorf("unable to read from stdin: %v", err) + } + out, err := framework.Run(p, in) + if err != nil { + switch err.(type) { + case framework.Results, *framework.Results, framework.Result, *framework.Result: + // do nothing + default: + return err + } + } + // If there is an error and the error is Result(s), we don't return the + // error immediately. We write out to stdout before returning any error. + _, er := os.Stdout.Write(out) + if er != nil { + return fmt.Errorf("unable to write to stdout: %v", er) + } + return err + }() + if e != nil { + framework.Log(e) + } + return e +} diff --git a/go/internal/forked/kyaml/fn/framework/command/command_test.go b/go/internal/forked/kyaml/fn/framework/command/command_test.go new file mode 100644 index 000000000..6e083b19e --- /dev/null +++ b/go/internal/forked/kyaml/fn/framework/command/command_test.go @@ -0,0 +1,165 @@ +// Copyright 2021 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package command_test + +import ( + "bytes" + "io/ioutil" + "os" + "path/filepath" + "strings" + "testing" + + "github.com/spf13/cobra" + "github.com/stretchr/testify/assert" + "github.com/stretchr/testify/require" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/fn/framework" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/fn/framework/command" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/fn/framework/frameworktestutil" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/kio" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" +) + +func TestCommand_dockerfile(t *testing.T) { + d, err := ioutil.TempDir("", "kustomize") + if !assert.NoError(t, err) { + t.FailNow() + } + defer os.RemoveAll(d) + + // create a function + cmd := command.Build(&framework.SimpleProcessor{}, command.StandaloneEnabled, false) + // add the Dockerfile generator + command.AddGenerateDockerfile(cmd) + + // generate the Dockerfile + cmd.SetArgs([]string{"gen", d}) + if !assert.NoError(t, cmd.Execute()) { + t.FailNow() + } + + b, err := ioutil.ReadFile(filepath.Join(d, "Dockerfile")) + if !assert.NoError(t, err) { + t.FailNow() + } + + expected := `FROM golang:1.16-alpine as builder +ENV CGO_ENABLED=0 +WORKDIR /go/src/ +COPY go.mod go.sum ./ +RUN go mod download +COPY . . +RUN go build -ldflags '-w -s' -v -o /usr/local/bin/function ./ + +FROM alpine:latest +COPY --from=builder /usr/local/bin/function /usr/local/bin/function +ENTRYPOINT ["function"] +` + if !assert.Equal(t, expected, string(b)) { + t.FailNow() + } +} + +// TestCommand_standalone tests the framework works in standalone mode +func TestCommand_standalone(t *testing.T) { + var config struct { + A string `json:"a" yaml:"a"` + } + + fn := func(items []*yaml.RNode) ([]*yaml.RNode, error) { + items = append(items, yaml.MustParse(` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: bar1 + namespace: default + annotations: + foo: bar1 +`)) + for i := range items { + err := items[i].PipeE(yaml.SetAnnotation("a", config.A)) + if err != nil { + return nil, err + } + } + + return items, nil + } + + cmdFn := func() *cobra.Command { + return command.Build(&framework.SimpleProcessor{Filter: kio.FilterFunc(fn), Config: &config}, command.StandaloneEnabled, false) + } + + tc := frameworktestutil.CommandResultsChecker{Command: cmdFn} + tc.Assert(t) +} + +func TestCommand_standalone_stdin(t *testing.T) { + var config struct { + A string `json:"a" yaml:"a"` + } + + p := &framework.SimpleProcessor{ + Config: &config, + + Filter: kio.FilterFunc(func(items []*yaml.RNode) ([]*yaml.RNode, error) { + items = append(items, yaml.MustParse(` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: bar2 + namespace: default + annotations: + foo: bar2 +`)) + for i := range items { + err := items[i].PipeE(yaml.SetAnnotation("a", config.A)) + if err != nil { + return nil, err + } + } + + return items, nil + }), + } + cmd := command.Build(p, command.StandaloneEnabled, false) + cmd.SetIn(bytes.NewBufferString(` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: bar1 + namespace: default + annotations: + foo: bar1 +spec: + replicas: 1 +`)) + var out bytes.Buffer + cmd.SetOut(&out) + cmd.SetArgs([]string{filepath.Join("testdata", "standalone", "config.yaml"), "-"}) + + require.NoError(t, cmd.Execute()) + + require.Equal(t, strings.TrimSpace(` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: bar1 + namespace: default + annotations: + foo: bar1 + a: 'b' +spec: + replicas: 1 +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + name: bar2 + namespace: default + annotations: + foo: bar2 + a: 'b' +`), strings.TrimSpace(out.String())) +} diff --git a/go/internal/forked/kyaml/fn/framework/command/doc.go b/go/internal/forked/kyaml/fn/framework/command/doc.go new file mode 100644 index 000000000..1f1a7fe25 --- /dev/null +++ b/go/internal/forked/kyaml/fn/framework/command/doc.go @@ -0,0 +1,90 @@ +// Copyright 2021 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +// Package command contains a builder for creating cobra.Commands based on configuration functions +// written using the kyaml function framework. The commands this package generates can be used as +// standalone executables or as part of a configuration management pipeline that complies with the +// Configuration Functions Specification (e.g. Kustomize generators or transformers): +// https://github.com/kubernetes-sigs/kustomize/blob/master/cmd/config/docs/api-conventions/functions-spec.md +// +// Example standalone usage +// +// Function template input: +// +// # config.yaml -- this is the input to the template +// apiVersion: example.com/v1alpha1 +// kind: Example +// Key: a +// Value: b +// +// Additional function inputs: +// +// # patch.yaml -- this will be applied as a patch +// apiVersion: apps/v1 +// kind: Deployment +// metadata: +// name: foo +// namespace: default +// annotations: +// patch-key: patch-value +// +// Manually run the function: +// +// # build the function +// $ go build example-fn/ +// +// # run the function +// $ ./example-fn config.yaml patch.yaml +// +// Go implementation +// +// // example-fn/main.go +// func main() { +// // Define the template used to generate resources +// p := framework.TemplateProcessor{ +// MergeResources: true, // apply inputs as patches to the template output +// TemplateData: new(struct { +// Key string `json:"key" yaml:"key"` +// Value string `json:"value" yaml:"value"` +// }), +// ResourceTemplates: []framework.ResourceTemplate{{ +// Templates: framework.StringTemplates(` +// apiVersion: apps/v1 +// kind: Deployment +// metadata: +// name: foo +// namespace: default +// annotations: +// {{ .Key }}: {{ .Value }} +// `)}}, +// } +// +// // Run the command +// if err := command.Build(p, command.StandaloneEnabled, true).Execute(); err != nil { +// fmt.Fprintf(cmd.ErrOrStderr(), "%v\n", err) +// os.Exit(1) +// } +// } +// +// Example function implementation using command.Build with flag input +// +// func main() { +// var value string +// fn := func(rl *framework.ResourceList) error { +// for i := range rl.Items { +// // set the annotation on each resource item +// if err := rl.Items[i].PipeE(yaml.SetAnnotation("value", value)); err != nil { +// return err +// } +// } +// return nil +// } +// cmd := command.Build(framework.ResourceListProcessorFunc(fn), command.StandaloneEnabled, false) +// cmd.Flags().StringVar(&value, "value", "", "annotation value") +// +// if err := cmd.Execute(); err != nil { +// fmt.Println(err) +// os.Exit(1) +// } +// } +package command diff --git a/go/internal/forked/kyaml/fn/framework/command/example_test.go b/go/internal/forked/kyaml/fn/framework/command/example_test.go new file mode 100644 index 000000000..f256a73f8 --- /dev/null +++ b/go/internal/forked/kyaml/fn/framework/command/example_test.go @@ -0,0 +1,379 @@ +// Copyright 2021 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package command_test + +import ( + "bytes" + "fmt" + + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/fn/framework" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/fn/framework/command" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/kio" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" +) + +const service = "Service" + +// ExampleBuild_modify implements a function that sets an annotation on each resource. +// The annotation value is configured via ResourceList.FunctionConfig. +func ExampleBuild_modify() { + // create a struct matching the structure of ResourceList.FunctionConfig to hold its data + var config struct { + Data map[string]string `yaml:"data"` + } + fn := func(items []*yaml.RNode) ([]*yaml.RNode, error) { + for i := range items { + // set the annotation on each resource item + err := items[i].PipeE(yaml.SetAnnotation("value", config.Data["value"])) + if err != nil { + return nil, err + } + } + return items, nil + } + p := framework.SimpleProcessor{Filter: kio.FilterFunc(fn), Config: &config} + cmd := command.Build(p, command.StandaloneDisabled, false) + + // for testing purposes only -- normally read from stdin when Executing + cmd.SetIn(bytes.NewBufferString(` +apiVersion: config.kubernetes.io/v1 +kind: ResourceList +# items are provided as nodes +items: +- apiVersion: apps/v1 + kind: Deployment + metadata: + name: foo +- apiVersion: v1 + kind: Service + metadata: + name: foo +functionConfig: + apiVersion: v1 + kind: ConfigMap + data: + value: baz +`)) + // run the command + if err := cmd.Execute(); err != nil { + panic(err) + } + + // Output: + // apiVersion: config.kubernetes.io/v1 + // kind: ResourceList + // items: + // - apiVersion: apps/v1 + // kind: Deployment + // metadata: + // name: foo + // annotations: + // value: 'baz' + // - apiVersion: v1 + // kind: Service + // metadata: + // name: foo + // annotations: + // value: 'baz' + // functionConfig: + // apiVersion: v1 + // kind: ConfigMap + // data: + // value: baz +} + +// ExampleBuild_generateReplace generates a resource from a FunctionConfig. +// If the resource already exists, it replaces the resource with a new copy. +func ExampleBuild_generateReplace() { + // function API definition which will be parsed from the ResourceList.FunctionConfig + // read from stdin + type Spec struct { + Name string `yaml:"name,omitempty"` + } + type ExampleServiceGenerator struct { + Spec Spec `yaml:"spec,omitempty"` + } + functionConfig := &ExampleServiceGenerator{} + + // function implementation -- generate a Service resource + p := &framework.SimpleProcessor{ + Config: functionConfig, + Filter: kio.FilterFunc(func(items []*yaml.RNode) ([]*yaml.RNode, error) { + var newNodes []*yaml.RNode + for i := range items { + meta, err := items[i].GetMeta() + if err != nil { + return nil, err + } + + // something we already generated, remove it from the list so we regenerate it + if meta.Name == functionConfig.Spec.Name && + meta.Kind == service && + meta.APIVersion == "v1" { + continue + } + newNodes = append(newNodes, items[i]) + } + + // generate the resource + n, err := yaml.Parse(fmt.Sprintf(`apiVersion: v1 +kind: Service +metadata: + name: %s +`, functionConfig.Spec.Name)) + if err != nil { + return nil, err + } + newNodes = append(newNodes, n) + return newNodes, nil + }), + } + cmd := command.Build(p, command.StandaloneDisabled, false) + + // for testing purposes only -- normally read from stdin when Executing + cmd.SetIn(bytes.NewBufferString(` +apiVersion: config.kubernetes.io/v1 +kind: ResourceList +# items are provided as nodes +items: +- apiVersion: apps/v1 + kind: Deployment + metadata: + name: foo +functionConfig: + apiVersion: example.com/v1alpha1 + kind: ExampleServiceGenerator + spec: + name: bar +`)) + + // run the command + if err := cmd.Execute(); err != nil { + panic(err) + } + + // Output: + // apiVersion: config.kubernetes.io/v1 + // kind: ResourceList + // items: + // - apiVersion: apps/v1 + // kind: Deployment + // metadata: + // name: foo + // - apiVersion: v1 + // kind: Service + // metadata: + // name: bar + // functionConfig: + // apiVersion: example.com/v1alpha1 + // kind: ExampleServiceGenerator + // spec: + // name: bar +} + +// ExampleBuild_generateUpdate generates a resource, updating the previously generated +// copy rather than replacing it. +// +// Note: This will keep manual edits to the previously generated copy. +func ExampleBuild_generateUpdate() { + // function API definition which will be parsed from the ResourceList.FunctionConfig + // read from stdin + type Spec struct { + Name string `yaml:"name,omitempty"` + Annotations map[string]string `yaml:"annotations,omitempty"` + } + type ExampleServiceGenerator struct { + Spec Spec `yaml:"spec,omitempty"` + } + functionConfig := &ExampleServiceGenerator{} + + // function implementation -- generate or update a Service resource + fn := func(items []*yaml.RNode) ([]*yaml.RNode, error) { + var found bool + for i := range items { + meta, err := items[i].GetMeta() + if err != nil { + return nil, err + } + + // something we already generated, reconcile it to make sure it matches what + // is specified by the FunctionConfig + if meta.Name == functionConfig.Spec.Name && + meta.Kind == service && + meta.APIVersion == "v1" { + // set some values + for k, v := range functionConfig.Spec.Annotations { + err := items[i].PipeE(yaml.SetAnnotation(k, v)) + if err != nil { + return nil, err + } + } + found = true + break + } + } + if found { + return items, nil + } + + // generate the resource if not found + n, err := yaml.Parse(fmt.Sprintf(`apiVersion: v1 +kind: Service +metadata: + name: %s +`, functionConfig.Spec.Name)) + if err != nil { + return nil, err + } + for k, v := range functionConfig.Spec.Annotations { + err := n.PipeE(yaml.SetAnnotation(k, v)) + if err != nil { + return nil, err + } + } + items = append(items, n) + return items, nil + } + + p := &framework.SimpleProcessor{Config: functionConfig, Filter: kio.FilterFunc(fn)} + cmd := command.Build(p, command.StandaloneDisabled, false) + + // for testing purposes only -- normally read from stdin when Executing + cmd.SetIn(bytes.NewBufferString(` +apiVersion: config.kubernetes.io/v1 +kind: ResourceList +# items are provided as nodes +items: +- apiVersion: apps/v1 + kind: Deployment + metadata: + name: foo +- apiVersion: v1 + kind: Service + metadata: + name: bar +functionConfig: + apiVersion: example.com/v1alpha1 + kind: ExampleServiceGenerator + spec: + name: bar + annotations: + a: b +`)) + + // run the command + if err := cmd.Execute(); err != nil { + panic(err) + } + + // Output: + // apiVersion: config.kubernetes.io/v1 + // kind: ResourceList + // items: + // - apiVersion: apps/v1 + // kind: Deployment + // metadata: + // name: foo + // - apiVersion: v1 + // kind: Service + // metadata: + // name: bar + // annotations: + // a: 'b' + // functionConfig: + // apiVersion: example.com/v1alpha1 + // kind: ExampleServiceGenerator + // spec: + // name: bar + // annotations: + // a: b +} + +// ExampleBuild_validate validates that all Deployment resources have the replicas field set. +// If any Deployments do not contain spec.replicas, then the function will return results +// which will be set on ResourceList.results +func ExampleBuild_validate() { + fn := func(rl *framework.ResourceList) error { + // validation results + var validationResults framework.Results + + // validate that each Deployment resource has spec.replicas set + for i := range rl.Items { + // only check Deployment resources + meta, err := rl.Items[i].GetMeta() + if err != nil { + return err + } + if meta.Kind != "Deployment" { + continue + } + + // lookup replicas field + r, err := rl.Items[i].Pipe(yaml.Lookup("spec", "replicas")) + if err != nil { + return err + } + + // check replicas not specified + if r != nil { + continue + } + validationResults = append(validationResults, &framework.Result{ + Severity: framework.Error, + Message: "field is required", + ResourceRef: &yaml.ResourceIdentifier{ + TypeMeta: meta.TypeMeta, + NameMeta: meta.ObjectMeta.NameMeta, + }, + Field: &framework.Field{ + Path: "spec.replicas", + ProposedValue: "1", + }, + }) + } + + if len(validationResults) > 0 { + rl.Results = validationResults + } + + return rl.Results + } + + cmd := command.Build(framework.ResourceListProcessorFunc(fn), command.StandaloneDisabled, true) + // for testing purposes only -- normally read from stdin when Executing + cmd.SetIn(bytes.NewBufferString(` +apiVersion: config.kubernetes.io/v1 +kind: ResourceList +# items are provided as nodes +items: +- apiVersion: apps/v1 + kind: Deployment + metadata: + name: foo +`)) + + // run the command + if err := cmd.Execute(); err != nil { + // normally exit 1 here + } + + // Output: + // apiVersion: config.kubernetes.io/v1 + // kind: ResourceList + // items: + // - apiVersion: apps/v1 + // kind: Deployment + // metadata: + // name: foo + // results: + // - message: field is required + // severity: error + // resourceRef: + // apiVersion: apps/v1 + // kind: Deployment + // name: foo + // field: + // path: spec.replicas + // proposedValue: "1" +} diff --git a/go/internal/forked/kyaml/fn/framework/command/testdata/standalone/config.yaml b/go/internal/forked/kyaml/fn/framework/command/testdata/standalone/config.yaml new file mode 100644 index 000000000..81f93e066 --- /dev/null +++ b/go/internal/forked/kyaml/fn/framework/command/testdata/standalone/config.yaml @@ -0,0 +1,6 @@ +# Copyright 2019 The Kubernetes Authors. +# SPDX-License-Identifier: Apache-2.0 + +apiVersion: example.com/v1alpha1 +kind: Foo +a: b \ No newline at end of file diff --git a/go/internal/forked/kyaml/fn/framework/command/testdata/standalone/expected.yaml b/go/internal/forked/kyaml/fn/framework/command/testdata/standalone/expected.yaml new file mode 100644 index 000000000..381ccf4c9 --- /dev/null +++ b/go/internal/forked/kyaml/fn/framework/command/testdata/standalone/expected.yaml @@ -0,0 +1,20 @@ +# Copyright 2019 The Kubernetes Authors. +# SPDX-License-Identifier: Apache-2.0 + +apiVersion: apps/v1 +kind: Deployment +metadata: + name: bar2 + namespace: default + annotations: + foo: bar2 + a: 'b' +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + name: bar1 + namespace: default + annotations: + foo: bar1 + a: 'b' diff --git a/go/internal/forked/kyaml/fn/framework/command/testdata/standalone/input.yaml b/go/internal/forked/kyaml/fn/framework/command/testdata/standalone/input.yaml new file mode 100644 index 000000000..a604d4ebe --- /dev/null +++ b/go/internal/forked/kyaml/fn/framework/command/testdata/standalone/input.yaml @@ -0,0 +1,10 @@ +# Copyright 2019 The Kubernetes Authors. +# SPDX-License-Identifier: Apache-2.0 + +apiVersion: apps/v1 +kind: Deployment +metadata: + name: bar2 + namespace: default + annotations: + foo: bar2 \ No newline at end of file diff --git a/go/internal/forked/kyaml/fn/framework/doc.go b/go/internal/forked/kyaml/fn/framework/doc.go new file mode 100644 index 000000000..1c6d59108 --- /dev/null +++ b/go/internal/forked/kyaml/fn/framework/doc.go @@ -0,0 +1,115 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +// Package framework contains a framework for writing functions in Go. The function specification +// is defined at: https://github.com/kubernetes-sigs/kustomize/blob/master/cmd/config/docs/api-conventions/functions-spec.md +// +// Functions are executables that generate, modify, delete or validate Kubernetes resources. +// They are often used used to implement abstractions ("kind: JavaSpringBoot") and +// cross-cutting logic ("kind: SidecarInjector"). +// +// Functions may be run as standalone executables or invoked as part of an orchestrated +// pipeline (e.g. kustomize). +// +// Example function implementation using framework.SimpleProcessor with a struct input +// +// type Spec struct { +// Value string `yaml:"value,omitempty"` +// } +// type Example struct { +// Spec Spec `yaml:"spec,omitempty"` +// } +// +// func runFunction(rlSource *kio.ByteReadWriter) error { +// functionConfig := &Example{} +// +// fn := func(items []*yaml.RNode) ([]*yaml.RNode, error) { +// for i := range rl.Items { +// // modify the items... +// } +// return items, nil +// } +// +// p := framework.SimpleProcessor{Config: functionConfig, Filter: kio.FilterFunc(fn)} +// err := framework.Execute(p, rlSource) +// return errors.Wrap(err) +// } +// +// Architecture +// +// Functions modify a slice of resources (ResourceList.Items) which are read as input and written +// as output. The function itself may be configured through a functionConfig +// (ResourceList.FunctionConfig). +// +// Example function input: +// +// kind: ResourceList +// items: +// - kind: Deployment +// ... +// - kind: Service +// .... +// functionConfig: +// kind: Example +// spec: +// value: foo +// +// The functionConfig may be specified declaratively and run with +// +// config run DIR/ +// +// Declarative function declaration: +// +// kind: Example +// metadata: +// annotations: +// # run the function by creating this container and providing this +// # Example as the functionConfig +// config.kubernetes.io/function: | +// image: image/containing/function:impl +// spec: +// value: foo +// +// The framework takes care of serializing and deserializing the ResourceList. +// +// Generated ResourceList.functionConfig -- ConfigMaps +// Functions may also be specified imperatively and run using: +// +// kpt fn run DIR/ --image image/containing/function:impl -- value=foo +// +// When run imperatively, a ConfigMap is generated for the functionConfig, and the command +// arguments are set as ConfigMap data entries. +// +// kind: ConfigMap +// data: +// value: foo +// +// To write a function that can be run imperatively on the commandline, have it take a +// ConfigMap as its functionConfig. +// +// Mutator and Generator Functions +// +// Functions may add, delete or modify resources by modifying the ResourceList.Items slice. +// +// Validator Functions +// +// A function may emit validation results by setting the ResourceList.Result +// +// Configuring Functions +// +// Functions may be configured through a functionConfig (i.e. a client-side custom resource), +// or through flags (which the framework parses from a ConfigMap provided as input). +// +// Functions may also access environment variables set by the caller. +// +// Building a container image for the function +// +// The go program may be built into a container and run as a function. The framework +// can be used to generate a Dockerfile to build the function container. +// +// # create the ./Dockerfile for the container +// $ go run ./main.go gen ./ +// +// # build the function's container +// $ docker build . -t gcr.io/my-project/my-image:my-version +package framework diff --git a/go/internal/forked/kyaml/fn/framework/example/Dockerfile b/go/internal/forked/kyaml/fn/framework/example/Dockerfile new file mode 100644 index 000000000..d177d7df1 --- /dev/null +++ b/go/internal/forked/kyaml/fn/framework/example/Dockerfile @@ -0,0 +1,12 @@ +# Copyright 2019 The Kubernetes Authors. +# SPDX-License-Identifier: Apache-2.0 + +FROM golang:1.13-stretch +ENV CGO_ENABLED=0 +WORKDIR /go/src/ +COPY . . +RUN go build -v -o /usr/local/bin/function ./ + +FROM alpine:latest +COPY --from=0 /usr/local/bin/function /usr/local/bin/function +CMD ["function"] diff --git a/go/internal/forked/kyaml/fn/framework/example/doc.go b/go/internal/forked/kyaml/fn/framework/example/doc.go new file mode 100644 index 000000000..a88333744 --- /dev/null +++ b/go/internal/forked/kyaml/fn/framework/example/doc.go @@ -0,0 +1,19 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +// Package main contains an example using the the framework. +// The example annotates all resources in the input with the value provided as a flag, +// and adds all resources in the templates/ directory to the list. +// +// To execute the function, run: +// +// $ cat testdata/basic/input.yaml | go run ./main.go --value=foo +// +// Alternatively, you can provide the value via a config file instead of a flag: +// +// $ go run ./main.go testdata/basic/config.yaml testdata/basic/input.yaml +// +// To generate the Dockerfile for the function image run: +// +// $ go run ./main.go gen ./ +package main diff --git a/go/internal/forked/kyaml/fn/framework/example/main.go b/go/internal/forked/kyaml/fn/framework/example/main.go new file mode 100644 index 000000000..3cf6a2c49 --- /dev/null +++ b/go/internal/forked/kyaml/fn/framework/example/main.go @@ -0,0 +1,53 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package main + +import ( + "embed" + "fmt" + "os" + + "github.com/spf13/cobra" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/fn/framework" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/fn/framework/command" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/fn/framework/parser" +) + +//go:embed templates/* +var templateFS embed.FS + +var annotationTemplate = ` +metadata: + annotations: + value: {{ .Value }} +` + +func buildProcessor(value *string) framework.ResourceListProcessor { + return framework.TemplateProcessor{ + ResourceTemplates: []framework.ResourceTemplate{{ + Templates: parser.TemplateFiles("templates").FromFS(templateFS), + }}, + PatchTemplates: []framework.PatchTemplate{&framework.ResourcePatchTemplate{ + Templates: parser.TemplateStrings(annotationTemplate), + }}, + // This will be populated from the --value flag if provided, + // or the config file's `value` field if provided, with the latter taking precedence. + TemplateData: struct { + Value *string `yaml:"value"` + }{Value: value}} +} + +func buildCmd() *cobra.Command { + var value string + cmd := command.Build(buildProcessor(&value), command.StandaloneEnabled, false) + cmd.Flags().StringVar(&value, "value", "", "annotation value") + return cmd +} + +func main() { + if err := buildCmd().Execute(); err != nil { + fmt.Println(err) + os.Exit(1) + } +} diff --git a/go/internal/forked/kyaml/fn/framework/example/main_test.go b/go/internal/forked/kyaml/fn/framework/example/main_test.go new file mode 100644 index 000000000..2bf6fb797 --- /dev/null +++ b/go/internal/forked/kyaml/fn/framework/example/main_test.go @@ -0,0 +1,17 @@ +// Copyright 2021 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package main + +import ( + "testing" + + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/fn/framework/frameworktestutil" +) + +func TestRun(t *testing.T) { + prc := frameworktestutil.CommandResultsChecker{ + Command: buildCmd, + } + prc.Assert(t) +} diff --git a/go/internal/forked/kyaml/fn/framework/example/templates/service_account.template.yaml b/go/internal/forked/kyaml/fn/framework/example/templates/service_account.template.yaml new file mode 100644 index 000000000..8c5def1ba --- /dev/null +++ b/go/internal/forked/kyaml/fn/framework/example/templates/service_account.template.yaml @@ -0,0 +1,7 @@ +# Copyright 2021 The Kubernetes Authors. +# SPDX-License-Identifier: Apache-2.0 + +apiVersion: v1 +kind: ServiceAccount +metadata: + name: {{ .Value }} diff --git a/go/internal/forked/kyaml/fn/framework/example/testdata/basic/config.yaml b/go/internal/forked/kyaml/fn/framework/example/testdata/basic/config.yaml new file mode 100644 index 000000000..35f401146 --- /dev/null +++ b/go/internal/forked/kyaml/fn/framework/example/testdata/basic/config.yaml @@ -0,0 +1,6 @@ +# Copyright 2019 The Kubernetes Authors. +# SPDX-License-Identifier: Apache-2.0 + +apiVersion: example.com/v1alpha1 +kind: Tester +value: foo diff --git a/go/internal/forked/kyaml/fn/framework/example/testdata/basic/expected.yaml b/go/internal/forked/kyaml/fn/framework/example/testdata/basic/expected.yaml new file mode 100644 index 000000000..be1c86cb8 --- /dev/null +++ b/go/internal/forked/kyaml/fn/framework/example/testdata/basic/expected.yaml @@ -0,0 +1,21 @@ +# Copyright 2021 The Kubernetes Authors. +# SPDX-License-Identifier: Apache-2.0 + +kind: ConfigMap +apiVersion: v1 +metadata: + name: tester + annotations: + value: foo +data: + some: data +--- +# Copyright 2021 The Kubernetes Authors. +# SPDX-License-Identifier: Apache-2.0 + +apiVersion: v1 +kind: ServiceAccount +metadata: + name: foo + annotations: + value: foo diff --git a/go/internal/forked/kyaml/fn/framework/example/testdata/basic/input.yaml b/go/internal/forked/kyaml/fn/framework/example/testdata/basic/input.yaml new file mode 100644 index 000000000..3c66a10b5 --- /dev/null +++ b/go/internal/forked/kyaml/fn/framework/example/testdata/basic/input.yaml @@ -0,0 +1,9 @@ +# Copyright 2021 The Kubernetes Authors. +# SPDX-License-Identifier: Apache-2.0 + +kind: ConfigMap +apiVersion: v1 +metadata: + name: tester +data: + some: data diff --git a/go/internal/forked/kyaml/fn/framework/example_filter_GVK_test.go b/go/internal/forked/kyaml/fn/framework/example_filter_GVK_test.go new file mode 100644 index 000000000..0870a7384 --- /dev/null +++ b/go/internal/forked/kyaml/fn/framework/example_filter_GVK_test.go @@ -0,0 +1,34 @@ +package framework_test + +import ( + "os" + + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/fn/framework" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/fn/framework/command" +) + +// This example implements a function that reads the desired replicas from the +// functionConfig and updates the replicas field for all deployments. + +func Example_filterGVK() { + if err := command.AsMain(framework.ResourceListProcessorFunc(updateReplicas)); err != nil { + os.Exit(1) + } +} + +// updateReplicas sets a field in resources selecting by GVK. +func updateReplicas(rl *framework.ResourceList) error { + if rl.FunctionConfig == nil { + return framework.ErrMissingFnConfig{} + } + replicas, found, err := rl.FunctionConfig.GetNestedInt("replicas") + if !found || err != nil { + return err + } + for i, obj := range rl.Items { + if obj.GetApiVersion() == "apps/v1" && obj.GetKind() == "Deployment" { + rl.Items[i].SetOrDie(replicas, "spec", "replicas") + } + } + return nil +} diff --git a/go/internal/forked/kyaml/fn/framework/example_generator_test.go b/go/internal/forked/kyaml/fn/framework/example_generator_test.go new file mode 100644 index 000000000..413cb17eb --- /dev/null +++ b/go/internal/forked/kyaml/fn/framework/example_generator_test.go @@ -0,0 +1,87 @@ +package framework_test + +import ( + "fmt" + "io/ioutil" + "net/http" + "os" + + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/fn/framework" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/fn/framework/command" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" +) + +// This function generates Graphana configuration in the form of ConfigMap. It +// accepts Revision and ID as input. + +func Example_generator() { + if err := command.AsMain(framework.ResourceListProcessorFunc(generate)); err != nil { + os.Exit(1) + } +} + +// generate generates a ConfigMap. +func generate(rl *framework.ResourceList) error { + if rl.FunctionConfig == nil { + return framework.ErrMissingFnConfig{} + } + + revision, foundRevision, err := rl.FunctionConfig.GetNestedString("data", "revision") + if err != nil { + return fmt.Errorf("failed to find field revision: %w", err) + } + id, foundId, err := rl.FunctionConfig.GetNestedString("data", "id") + if err != nil { + return fmt.Errorf("failed to find field id: %w", err) + } + if !foundRevision || !foundId { + return nil + } + js, err := fetchDashboard(revision, id) + if err != nil { + return fmt.Errorf("fetch dashboard: %v", err) + } + + // corev1.ConfigMap should be used here. But we can't use it here due to dependency restriction in the kustomize repo. + cm := ConfigMap{ + ResourceMeta: yaml.ResourceMeta{ + TypeMeta: yaml.TypeMeta{ + APIVersion: "v1", + Kind: "ConfigMap", + }, + ObjectMeta: yaml.ObjectMeta{ + NameMeta: yaml.NameMeta{ + Name: fmt.Sprintf("%v-gen", rl.FunctionConfig.GetName()), + Namespace: rl.FunctionConfig.GetNamespace(), + }, + Labels: map[string]string{ + "grafana_dashboard": "true", + }, + }, + }, + Data: map[string]string{ + fmt.Sprintf("%v.json", rl.FunctionConfig.GetName()): fmt.Sprintf("%q", js), + }, + } + return rl.UpsertObjectToItems(cm, nil, false) +} + +func fetchDashboard(revision, id string) (string, error) { + url := fmt.Sprintf("https://grafana.com/api/dashboards/%s/revisions/%s/download", id, revision) + resp, err := http.Get(url) + if err != nil { + return "", err + } + defer resp.Body.Close() + b, err := ioutil.ReadAll(resp.Body) + if err != nil { + return "", err + } + return string(b), nil +} + +// ConfigMap is a copy of corev1.ConfigMap. +type ConfigMap struct { + yaml.ResourceMeta `json:",inline" yaml:",inline"` + Data map[string]string `json:"data,omitempty" yaml:"data,omitempty"` +} diff --git a/go/internal/forked/kyaml/fn/framework/example_logger_injector_test.go b/go/internal/forked/kyaml/fn/framework/example_logger_injector_test.go new file mode 100644 index 000000000..dae5993ac --- /dev/null +++ b/go/internal/forked/kyaml/fn/framework/example_logger_injector_test.go @@ -0,0 +1,63 @@ +package framework_test + +import ( + "fmt" + "os" + + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/fn/framework" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/fn/framework/command" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" +) + +// In this example, we implement a function that injects a logger as a sidecar +// container in workload APIs. + +func Example_loggeInjector() { + if err := command.AsMain(framework.ResourceListProcessorFunc(injectLogger)); err != nil { + os.Exit(1) + } +} + +// injectLogger injects a logger container into the workload API resources. +// generate implements the goframework.KRMFunction interface. +func injectLogger(rl *framework.ResourceList) error { + var li LoggerInjection + if err := rl.FunctionConfig.As(&li); err != nil { + return err + } + for i, obj := range rl.Items { + if obj.GetApiVersion() == "apps/v1" && (obj.GetKind() == "Deployment" || obj.GetKind() == "StatefulSet" || obj.GetKind() == "DaemonSet" || obj.GetKind() == "ReplicaSet") { + var container Container + found, err := obj.Get(&container, "spec", "template", "spec", "containers", fmt.Sprintf("[name=%v]", li.ContainerName)) + if err != nil { + return err + } + if found { + container.Image = li.ImageName + } else { + container = Container{ + Name: li.ContainerName, + Image: li.ImageName, + } + } + if err = rl.Items[i].Set(container, "spec", "template", "spec", "containers", fmt.Sprintf("[name=%v]", li.ContainerName)); err != nil { + return err + } + } + } + return nil +} + +// LoggerInjection is type definition of the functionConfig. +type LoggerInjection struct { + yaml.ResourceMeta `json:",inline" yaml:",inline"` + + ContainerName string `json:"containerName" yaml:"containerName"` + ImageName string `json:"imageName" yaml:"imageName"` +} + +// Container is a copy of corev1.Container. +type Container struct { + Name string `json:"name" yaml:"name"` + Image string `json:"image,omitempty" yaml:"image,omitempty"` +} diff --git a/go/internal/forked/kyaml/fn/framework/example_mutate_comments_test.go b/go/internal/forked/kyaml/fn/framework/example_mutate_comments_test.go new file mode 100644 index 000000000..d392cadbc --- /dev/null +++ b/go/internal/forked/kyaml/fn/framework/example_mutate_comments_test.go @@ -0,0 +1,38 @@ +package framework_test + +import ( + "os" + "strings" + + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/fn/framework" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/fn/framework/command" +) + +// In this example, we mutate line comments for field metadata.name. +// Some function may want to store some information in the comments (e.g. +// apply-setters function: https://catalog.kpt.dev/apply-setters/v0.2/) + +func Example_dMutateComments() { + if err := command.AsMain(framework.ResourceListProcessorFunc(mutateComments)); err != nil { + os.Exit(1) + } +} + +func mutateComments(rl *framework.ResourceList) error { + for i := range rl.Items { + lineComment, err := rl.Items[i].GetLineComment("metadata", "name") + if err != nil { + return err + } + + if strings.TrimSpace(lineComment) == "" { + lineComment = "# bar-system" + } else { + lineComment = strings.Replace(lineComment, "foo", "bar", -1) + } + if err = rl.Items[i].SetLineComment(lineComment, "metadata", "name"); err != nil { + return err + } + } + return nil +} diff --git a/go/internal/forked/kyaml/fn/framework/example_read_field_test.go b/go/internal/forked/kyaml/fn/framework/example_read_field_test.go new file mode 100644 index 000000000..7655bb9b9 --- /dev/null +++ b/go/internal/forked/kyaml/fn/framework/example_read_field_test.go @@ -0,0 +1,29 @@ +package framework_test + +import ( + "os" + + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/fn/framework" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/fn/framework/command" +) + +// In this example, we read a field from the input object and print it to the log. + +func Example_aReadField() { + if err := command.AsMain(framework.ResourceListProcessorFunc(readField)); err != nil { + os.Exit(1) + } +} + +func readField(rl *framework.ResourceList) error { + for _, obj := range rl.Items { + if obj.GetApiVersion() == "apps/v1" && obj.GetKind() == "Deployment" { + replicas, found, err := obj.GetNestedInt("spec", "replicas") + if !found || err != nil { + return err + } + framework.Logf("replicas is %v\n", replicas) + } + } + return nil +} diff --git a/go/internal/forked/kyaml/fn/framework/example_read_functionConfig_test.go b/go/internal/forked/kyaml/fn/framework/example_read_functionConfig_test.go new file mode 100644 index 000000000..e0b962033 --- /dev/null +++ b/go/internal/forked/kyaml/fn/framework/example_read_functionConfig_test.go @@ -0,0 +1,33 @@ +package framework_test + +import ( + "os" + + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/fn/framework" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/fn/framework/command" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" +) + +// In this example, we convert the functionConfig as strong typed object and then +// read a field from the functionConfig object. + +func Example_bReadFunctionConfig() { + if err := command.AsMain(framework.ResourceListProcessorFunc(readFunctionConfig)); err != nil { + os.Exit(1) + } +} + +func readFunctionConfig(rl *framework.ResourceList) error { + var sr SetReplicas + if err := rl.FunctionConfig.As(&sr); err != nil { + return err + } + framework.Logf("desired replicas is %v\n", sr.DesiredReplicas) + return nil +} + +// SetReplicas is the type definition of the functionConfig +type SetReplicas struct { + yaml.ResourceIdentifier `json:",inline" yaml:",inline"` + DesiredReplicas int `json:"desiredReplicas,omitempty" yaml:"desiredReplicas,omitempty"` +} diff --git a/go/internal/forked/kyaml/fn/framework/example_set_field_test.go b/go/internal/forked/kyaml/fn/framework/example_set_field_test.go new file mode 100644 index 000000000..d874c57fc --- /dev/null +++ b/go/internal/forked/kyaml/fn/framework/example_set_field_test.go @@ -0,0 +1,25 @@ +package framework_test + +import ( + "os" + + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/fn/framework" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/fn/framework/command" +) + +// In this example, we read a field from the input object and print it to the log. + +func Example_cSetField() { + if err := command.AsMain(framework.ResourceListProcessorFunc(setField)); err != nil { + os.Exit(1) + } +} + +func setField(rl *framework.ResourceList) error { + for _, obj := range rl.Items { + if obj.GetKind() == "Deployment" && obj.GetName() == "nginx" { + return obj.Set(10, "spec", "replicas") + } + } + return nil +} diff --git a/go/internal/forked/kyaml/fn/framework/example_test.go b/go/internal/forked/kyaml/fn/framework/example_test.go new file mode 100644 index 000000000..579b36e1a --- /dev/null +++ b/go/internal/forked/kyaml/fn/framework/example_test.go @@ -0,0 +1,1066 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package framework_test + +import ( + "bytes" + "fmt" + "log" + "path/filepath" + "strings" + + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/errors" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/fn/framework" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/fn/framework/command" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/fn/framework/parser" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/kio" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" +) + +const service = "Service" + +// ExampleSimpleProcessor_modify implements a function that sets an annotation on each resource. +func ExampleSimpleProcessor_modify() { + input := bytes.NewBufferString(` +apiVersion: config.kubernetes.io/v1 +kind: ResourceList +# items are provided as nodes +items: +- apiVersion: apps/v1 + kind: Deployment + metadata: + name: foo +- apiVersion: v1 + kind: Service + metadata: + name: foo +functionConfig: + apiVersion: v1 + kind: ConfigMap + data: + value: baz +`) + config := new(struct { + Data map[string]string `yaml:"data" json:"data"` + }) + fn := func(items []*yaml.RNode) ([]*yaml.RNode, error) { + for i := range items { + // set the annotation on each resource item + if err := items[i].PipeE(yaml.SetAnnotation("value", config.Data["value"])); err != nil { + return nil, err + } + } + return items, nil + } + + err := framework.Execute(framework.SimpleProcessor{Config: config, Filter: kio.FilterFunc(fn)}, &kio.ByteReadWriter{Reader: input}) + if err != nil { + panic(err) + } + + // Output: + // apiVersion: config.kubernetes.io/v1 + // kind: ResourceList + // items: + // - apiVersion: apps/v1 + // kind: Deployment + // metadata: + // name: foo + // annotations: + // value: 'baz' + // - apiVersion: v1 + // kind: Service + // metadata: + // name: foo + // annotations: + // value: 'baz' + // functionConfig: + // apiVersion: v1 + // kind: ConfigMap + // data: + // value: baz +} + +// ExampleSimpleProcessor_generateReplace generates a resource from a FunctionConfig. +// If the resource already exists, it replaces the resource with a new copy. +func ExampleSimpleProcessor_generateReplace() { + input := bytes.NewBufferString(` +apiVersion: config.kubernetes.io/v1 +kind: ResourceList +# items are provided as nodes +items: +- apiVersion: apps/v1 + kind: Deployment + metadata: + name: foo +functionConfig: + apiVersion: example.com/v1alpha1 + kind: ExampleServiceGenerator + spec: + name: bar +`) + + // function API definition which will be parsed from the ResourceList.FunctionConfig + // read from stdin + type Spec struct { + Name string `yaml:"name,omitempty"` + } + type ExampleServiceGenerator struct { + Spec Spec `yaml:"spec,omitempty"` + } + + functionConfig := &ExampleServiceGenerator{} + + fn := func(items []*yaml.RNode) ([]*yaml.RNode, error) { + // remove the last generated resource + var newNodes []*yaml.RNode + for i := range items { + meta, err := items[i].GetMeta() + if err != nil { + return nil, err + } + // something we already generated, remove it from the list so we regenerate it + if meta.Name == functionConfig.Spec.Name && + meta.Kind == service && + meta.APIVersion == "v1" { + continue + } + newNodes = append(newNodes, items[i]) + } + items = newNodes + + // generate the resource again + n, err := yaml.Parse(fmt.Sprintf(`apiVersion: v1 +kind: Service +metadata: + name: %s +`, functionConfig.Spec.Name)) + if err != nil { + return nil, err + } + items = append(items, n) + return items, nil + } + + p := framework.SimpleProcessor{Config: functionConfig, Filter: kio.FilterFunc(fn)} + err := framework.Execute(p, &kio.ByteReadWriter{Reader: input}) + if err != nil { + panic(err) + } + + // Output: + // apiVersion: config.kubernetes.io/v1 + // kind: ResourceList + // items: + // - apiVersion: apps/v1 + // kind: Deployment + // metadata: + // name: foo + // - apiVersion: v1 + // kind: Service + // metadata: + // name: bar + // functionConfig: + // apiVersion: example.com/v1alpha1 + // kind: ExampleServiceGenerator + // spec: + // name: bar +} + +// ExampleTemplateProcessor provides an example for using the TemplateProcessor to add resources +// from templates defined inline +func ExampleTemplateProcessor_generate_inline() { + api := new(struct { + Key string `json:"key" yaml:"key"` + Value string `json:"value" yaml:"value"` + }) + // create the template + fn := framework.TemplateProcessor{ + // Templates input + TemplateData: api, + // Templates + ResourceTemplates: []framework.ResourceTemplate{{ + Templates: parser.TemplateStrings(` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: foo + namespace: default + annotations: + {{ .Key }}: {{ .Value }} +`)}}, + } + cmd := command.Build(fn, command.StandaloneEnabled, false) + + // mimic standalone mode: testdata/template/config.yaml will be parsed into `api` + cmd.SetArgs([]string{filepath.Join("testdata", "example", "template", "config.yaml")}) + if err := cmd.Execute(); err != nil { + _, _ = fmt.Fprintf(cmd.ErrOrStderr(), "%v\n", err) + } + + // Output: + // apiVersion: apps/v1 + // kind: Deployment + // metadata: + // name: foo + // namespace: default + // annotations: + // a: b +} + +// ExampleTemplateProcessor_files provides an example for using the TemplateProcessor to add +// resources from templates defined in files. +func ExampleTemplateProcessor_generate_files() { + api := new(struct { + Key string `json:"key" yaml:"key"` + Value string `json:"value" yaml:"value"` + }) + // create the template + templateFn := framework.TemplateProcessor{ + // Templates input + TemplateData: api, + // Templates + ResourceTemplates: []framework.ResourceTemplate{{ + Templates: parser.TemplateFiles("testdata/example/templatefiles/deployment.template.yaml"), + }}, + } + cmd := command.Build(templateFn, command.StandaloneEnabled, false) + // mimic standalone mode: testdata/template/config.yaml will be parsed into `api` + cmd.SetArgs([]string{filepath.Join("testdata", "example", "templatefiles", "config.yaml")}) + if err := cmd.Execute(); err != nil { + _, _ = fmt.Fprintf(cmd.ErrOrStderr(), "%v\n", err) + } + + // Output: + // # Copyright 2021 The Kubernetes Authors. + // # SPDX-License-Identifier: Apache-2.0 + // + // apiVersion: apps/v1 + // kind: Deployment + // metadata: + // name: foo + // namespace: default + // annotations: + // a: b +} + +// ExampleTemplateProcessor_preprocess provides an example for using the TemplateProcessor +// with PreProcess to configure the template based on the input resources observed. +func ExampleTemplateProcessor_preprocess() { + config := new(struct { + Key string `json:"key" yaml:"key"` + Value string `json:"value" yaml:"value"` + Short bool + }) + + // create the template + fn := framework.TemplateProcessor{ + // Templates input + TemplateData: config, + PreProcessFilters: []kio.Filter{ + kio.FilterFunc(func(items []*yaml.RNode) ([]*yaml.RNode, error) { + config.Short = len(items) < 3 + return items, nil + }), + }, + // Templates + ResourceTemplates: []framework.ResourceTemplate{{ + Templates: parser.TemplateStrings(` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: foo + namespace: default + annotations: + {{ .Key }}: {{ .Value }} +{{- if .Short }} + short: 'true' +{{- end }} +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + name: bar + namespace: default + annotations: + {{ .Key }}: {{ .Value }} +{{- if .Short }} + short: 'true' +{{- end }} +`), + }}, + } + + cmd := command.Build(fn, command.StandaloneEnabled, false) + // mimic standalone mode: testdata/template/config.yaml will be parsed into `api` + cmd.SetArgs([]string{filepath.Join("testdata", "example", "template", "config.yaml")}) + if err := cmd.Execute(); err != nil { + _, _ = fmt.Fprintf(cmd.ErrOrStderr(), "%v\n", err) + } + + // Output: + // apiVersion: apps/v1 + // kind: Deployment + // metadata: + // name: foo + // namespace: default + // annotations: + // a: b + // short: 'true' + // --- + // apiVersion: apps/v1 + // kind: Deployment + // metadata: + // name: bar + // namespace: default + // annotations: + // a: b + // short: 'true' +} + +// ExampleTemplateProcessor_postprocess provides an example for using the TemplateProcessor +// with PostProcess to modify the results. +func ExampleTemplateProcessor_postprocess() { + config := new(struct { + Key string `json:"key" yaml:"key"` + Value string `json:"value" yaml:"value"` + }) + + // create the template + fn := framework.TemplateProcessor{ + // Templates input + TemplateData: config, + ResourceTemplates: []framework.ResourceTemplate{{ + Templates: parser.TemplateStrings(` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: foo + namespace: default + annotations: + {{ .Key }}: {{ .Value }} +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + name: bar + namespace: default + annotations: + {{ .Key }}: {{ .Value }} +`), + }}, + PostProcessFilters: []kio.Filter{ + kio.FilterFunc(func(items []*yaml.RNode) ([]*yaml.RNode, error) { + items = items[1:] + return items, nil + }), + }, + } + cmd := command.Build(fn, command.StandaloneEnabled, false) + + cmd.SetArgs([]string{filepath.Join("testdata", "example", "template", "config.yaml")}) + if err := cmd.Execute(); err != nil { + _, _ = fmt.Fprintf(cmd.ErrOrStderr(), "%v\n", err) + } + + // Output: + // apiVersion: apps/v1 + // kind: Deployment + // metadata: + // name: bar + // namespace: default + // annotations: + // a: b +} + +// ExampleTemplateProcessor_patch provides an example for using the TemplateProcessor to +// create a function that patches resources. +func ExampleTemplateProcessor_patch() { + fn := framework.TemplateProcessor{ + TemplateData: new(struct { + Key string `json:"key" yaml:"key"` + Value string `json:"value" yaml:"value"` + }), + ResourceTemplates: []framework.ResourceTemplate{{ + Templates: parser.TemplateStrings(` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: foo + namespace: default + annotations: + {{ .Key }}: {{ .Value }} +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + name: bar + namespace: default + annotations: + {{ .Key }}: {{ .Value }} +`), + }}, + // PatchTemplates are applied to BOTH ResourceList input resources AND templated resources + PatchTemplates: []framework.PatchTemplate{ + &framework.ResourcePatchTemplate{ + // patch the foo resource only + Selector: &framework.Selector{Names: []string{"foo"}}, + Templates: parser.TemplateStrings(` +metadata: + annotations: + patched: 'true' +`), + }}, + } + cmd := command.Build(fn, command.StandaloneEnabled, false) + + cmd.SetArgs([]string{filepath.Join("testdata", "example", "template", "config.yaml")}) + if err := cmd.Execute(); err != nil { + _, _ = fmt.Fprintf(cmd.ErrOrStderr(), "%v\n", err) + } + + // Output: + // apiVersion: apps/v1 + // kind: Deployment + // metadata: + // name: foo + // namespace: default + // annotations: + // a: b + // patched: 'true' + // --- + // apiVersion: apps/v1 + // kind: Deployment + // metadata: + // name: bar + // namespace: default + // annotations: + // a: b +} + +// ExampleTemplateProcessor_MergeResources provides an example for using the TemplateProcessor to +// create a function that treats incoming resources as potential patches +// for the resources the function generates itself. +func ExampleTemplateProcessor_MergeResources() { + p := framework.TemplateProcessor{ + TemplateData: new(struct { + Name string `json:"name" yaml:"name"` + }), + ResourceTemplates: []framework.ResourceTemplate{{ + // This is the generated resource the input will patch + Templates: parser.TemplateStrings(` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: {{ .Name }} +spec: + replicas: 1 + selector: + app: foo + template: + spec: + containers: + - name: app + image: example.io/team/app +`), + }}, + MergeResources: true, + } + + // The second resource will be treated as a patch since its metadata matches the resource + // generated by ResourceTemplates and MergeResources is true. + rw := kio.ByteReadWriter{Reader: bytes.NewBufferString(` +apiVersion: config.kubernetes.io/v1 +kind: ResourceList +items: +- kind: Deployment + apiVersion: apps/v1 + metadata: + name: custom + spec: + replicas: 6 + selector: + app: custom + template: + spec: + containers: + - name: app + image: example.io/team/custom +- kind: Deployment + apiVersion: apps/v1 + metadata: + name: mergeTest + spec: + replicas: 6 +functionConfig: + name: mergeTest +`)} + if err := framework.Execute(p, &rw); err != nil { + panic(err) + } + + // Output: + // apiVersion: config.kubernetes.io/v1 + // kind: ResourceList + // items: + // - apiVersion: apps/v1 + // kind: Deployment + // metadata: + // name: mergeTest + // spec: + // replicas: 6 + // selector: + // app: foo + // template: + // spec: + // containers: + // - name: app + // image: example.io/team/app + // - kind: Deployment + // apiVersion: apps/v1 + // metadata: + // name: custom + // spec: + // replicas: 6 + // selector: + // app: custom + // template: + // spec: + // containers: + // - name: app + // image: example.io/team/custom + // functionConfig: + // name: mergeTest +} + +// ExampleSelector_templatizeKinds provides an example of using a template as a selector value, +// to dynamically match resources based on the functionConfig input. It also shows how Selector +// can be used with SimpleProcessor to implement a ResourceListProcessor the filters the input. +func ExampleSelector_templatizeKinds() { + type api struct { + KindName string `yaml:"kindName"` + } + rw := &kio.ByteReadWriter{ + Reader: bytes.NewBufferString(` +apiVersion: config.kubernetes.io/v1 +kind: ResourceList +functionConfig: + kindName: Deployment +items: +- apiVersion: apps/v1 + kind: Deployment + metadata: + name: foo + namespace: default +- apiVersion: apps/v1 + kind: StatefulSet + metadata: + name: bar + namespace: default +`), + } + config := &api{} + p := framework.SimpleProcessor{ + Config: config, + Filter: &framework.Selector{ + TemplateData: config, + Kinds: []string{"{{ .KindName }}"}, + }, + } + + err := framework.Execute(p, rw) + if err != nil { + panic(err) + } + + // Output: + // apiVersion: config.kubernetes.io/v1 + // kind: ResourceList + // items: + // - apiVersion: apps/v1 + // kind: Deployment + // metadata: + // name: foo + // namespace: default + // functionConfig: + // kindName: Deployment +} + +// ExampleSelector_templatizeKinds provides an example of using a template as a selector value, +// to dynamically match resources based on the functionConfig input. It also shows how Selector +// can be used with SimpleProcessor to implement a ResourceListProcessor the filters the input. +func ExampleSelector_templatizeAnnotations() { + type api struct { + Value string `yaml:"value"` + } + rw := &kio.ByteReadWriter{Reader: bytes.NewBufferString(` +apiVersion: config.kubernetes.io/v1 +kind: ResourceList +functionConfig: + value: bar +items: +- apiVersion: apps/v1 + kind: Deployment + metadata: + name: foo + namespace: default + annotations: + key: foo +- apiVersion: apps/v1 + kind: Deployment + metadata: + name: bar + namespace: default + annotations: + key: bar +`)} + config := &api{} + p := framework.SimpleProcessor{ + Config: config, + Filter: &framework.Selector{ + TemplateData: config, + Annotations: map[string]string{"key": "{{ .Value }}"}, + }, + } + + if err := framework.Execute(p, rw); err != nil { + panic(err) + } + + // Output: + // apiVersion: config.kubernetes.io/v1 + // kind: ResourceList + // items: + // - apiVersion: apps/v1 + // kind: Deployment + // metadata: + // name: bar + // namespace: default + // annotations: + // key: bar + // functionConfig: + // value: bar +} + +// ExampleTemplateProcessor_container_patch provides an example for using TemplateProcessor to +// patch all of the containers in the input. +func ExampleTemplateProcessor_container_patch() { + input := ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: foo +spec: + template: + spec: + containers: + - name: foo + image: a + - name: bar + image: b +--- +apiVersion: v1 +kind: Service +metadata: + name: foo +spec: + selector: + foo: bar +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + name: bar +spec: + template: + spec: + containers: + - name: foo + image: a + - name: baz + image: b +--- +apiVersion: v1 +kind: Service +metadata: + name: bar +spec: + selector: + foo: bar +` + p := framework.TemplateProcessor{ + PatchTemplates: []framework.PatchTemplate{ + &framework.ContainerPatchTemplate{ + Templates: parser.TemplateStrings(` +env: +- name: KEY + value: {{ .Value }} +`), + TemplateData: struct{ Value string }{Value: "new-value"}, + }}, + } + err := framework.Execute(p, &kio.ByteReadWriter{Reader: bytes.NewBufferString(input)}) + if err != nil { + log.Fatal(err) + } + + // Output: + // apiVersion: apps/v1 + // kind: Deployment + // metadata: + // name: foo + // spec: + // template: + // spec: + // containers: + // - name: foo + // image: a + // env: + // - name: KEY + // value: new-value + // - name: bar + // image: b + // env: + // - name: KEY + // value: new-value + // --- + // apiVersion: v1 + // kind: Service + // metadata: + // name: foo + // spec: + // selector: + // foo: bar + // --- + // apiVersion: apps/v1 + // kind: Deployment + // metadata: + // name: bar + // spec: + // template: + // spec: + // containers: + // - name: foo + // image: a + // env: + // - name: KEY + // value: new-value + // - name: baz + // image: b + // env: + // - name: KEY + // value: new-value + // --- + // apiVersion: v1 + // kind: Service + // metadata: + // name: bar + // spec: + // selector: + // foo: bar +} + +// PatchTemplateContainersWithString patches containers matching +// a specific name. +func ExampleTemplateProcessor_container_patch_by_name() { + input := ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: foo +spec: + template: + spec: + containers: + - name: foo + image: a + env: + - name: EXISTING + value: variable + - name: bar + image: b +--- +apiVersion: v1 +kind: Service +metadata: + name: foo +spec: + selector: + foo: bar +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + name: bar +spec: + template: + spec: + containers: + - name: foo + image: a + - name: baz + image: b +--- +apiVersion: v1 +kind: Service +metadata: + name: bar +spec: + selector: + foo: bar +` + p := framework.TemplateProcessor{ + TemplateData: struct{ Value string }{Value: "new-value"}, + PatchTemplates: []framework.PatchTemplate{ + &framework.ContainerPatchTemplate{ + // Only patch containers named "foo" + ContainerMatcher: framework.ContainerNameMatcher("foo"), + Templates: parser.TemplateStrings(` +env: +- name: KEY + value: {{ .Value }} +`), + }}, + } + + err := framework.Execute(p, &kio.ByteReadWriter{Reader: bytes.NewBufferString(input)}) + if err != nil { + log.Fatal(err) + } + + // Output: + // apiVersion: apps/v1 + // kind: Deployment + // metadata: + // name: foo + // spec: + // template: + // spec: + // containers: + // - name: foo + // image: a + // env: + // - name: EXISTING + // value: variable + // - name: KEY + // value: new-value + // - name: bar + // image: b + // --- + // apiVersion: v1 + // kind: Service + // metadata: + // name: foo + // spec: + // selector: + // foo: bar + // --- + // apiVersion: apps/v1 + // kind: Deployment + // metadata: + // name: bar + // spec: + // template: + // spec: + // containers: + // - name: foo + // image: a + // env: + // - name: KEY + // value: new-value + // - name: baz + // image: b + // --- + // apiVersion: v1 + // kind: Service + // metadata: + // name: bar + // spec: + // selector: + // foo: bar +} + +type v1alpha1JavaSpringBoot struct { + Metadata Metadata `yaml:"metadata" json:"metadata"` + Spec v1alpha1JavaSpringBootSpec `yaml:"spec" json:"spec"` +} + +type Metadata struct { + Name string `yaml:"name" json:"name"` +} + +type v1alpha1JavaSpringBootSpec struct { + Replicas int `yaml:"replicas" json:"replicas"` + Domain string `yaml:"domain" json:"domain"` + Image string `yaml:"image" json:"image"` +} + +func (a v1alpha1JavaSpringBoot) Filter(items []*yaml.RNode) ([]*yaml.RNode, error) { + filter := framework.TemplateProcessor{ + ResourceTemplates: []framework.ResourceTemplate{{ + TemplateData: &a, + Templates: parser.TemplateStrings(` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: {{ .Metadata.Name }} + selector: + app: {{ .Metadata.Name }} +spec: + replicas: {{ .Spec.Replicas }} + template: + spec: + containers: + - name: app + image: {{ .Spec.Image }} + {{ if .Spec.Domain }} + ports: + - containerPort: 80 + name: http + {{ end }} + +{{ if .Spec.Domain }} +--- +apiVersion: v1 +kind: Service +metadata: + name: {{ .Metadata.Name }}-svc +spec: + selector: + app: {{ .Metadata.Name }} + ports: + - protocol: TCP + port: 80 + targetPort: 80 +--- +apiVersion: networking.k8s.io/v1 +kind: Ingress +metadata: + name: {{ .Metadata.Name }}-ingress +spec: + tls: + - hosts: + - {{ .Spec.Domain }} + secretName: secret-tls + defaultBackend: + service: + name: {{ .Metadata.Name }} + port: + number: 80 +{{ end }} +`), + }}, + } + return filter.Filter(items) +} + +func (a *v1alpha1JavaSpringBoot) Default() error { + if a.Spec.Replicas == 0 { + a.Spec.Replicas = 3 + } + return nil +} + +func (a *v1alpha1JavaSpringBoot) Validate() error { + var messages []string + if a.Metadata.Name == "" { + messages = append(messages, "name is required") + } + if a.Spec.Replicas > 10 { + messages = append(messages, "replicas must be less than 10") + } + if !strings.HasSuffix(a.Spec.Domain, "example.com") { + messages = append(messages, "domain must be a subdomain of example.com") + } + if strings.HasSuffix(a.Spec.Image, ":latest") { + messages = append(messages, "image should not have latest tag") + } + if len(messages) == 0 { + return nil + } + errMsg := fmt.Sprintf("JavaSpringBoot had %d errors:\n", len(messages)) + for i, msg := range messages { + errMsg += fmt.Sprintf(" [%d] %s\n", i+1, msg) + } + return errors.Errorf(errMsg) +} + +// ExampleVersionedAPIProcessor shows how to use the VersionedAPIProcessor and TemplateProcessor to +// build functions that implement complex multi-version APIs that require defaulting and validation. +func ExampleVersionedAPIProcessor() { + p := &framework.VersionedAPIProcessor{FilterProvider: framework.GVKFilterMap{ + "JavaSpringBoot": { + "example.com/v1alpha1": &v1alpha1JavaSpringBoot{}, + }}} + + source := &kio.ByteReadWriter{Reader: bytes.NewBufferString(` +apiVersion: config.kubernetes.io/v1 +kind: ResourceList +functionConfig: + apiVersion: example.com/v1alpha1 + kind: JavaSpringBoot + metadata: + name: my-app + spec: + image: example.docker.com/team/app:1.0 + domain: demo.example.com +`)} + if err := framework.Execute(p, source); err != nil { + log.Fatal(err) + } + + // Output: + // apiVersion: config.kubernetes.io/v1 + // kind: ResourceList + // items: + // - apiVersion: apps/v1 + // kind: Deployment + // metadata: + // name: my-app + // selector: + // app: my-app + // spec: + // replicas: 3 + // template: + // spec: + // containers: + // - name: app + // image: example.docker.com/team/app:1.0 + // ports: + // - containerPort: 80 + // name: http + // - apiVersion: v1 + // kind: Service + // metadata: + // name: my-app-svc + // spec: + // selector: + // app: my-app + // ports: + // - protocol: TCP + // port: 80 + // targetPort: 80 + // - apiVersion: networking.k8s.io/v1 + // kind: Ingress + // metadata: + // name: my-app-ingress + // spec: + // tls: + // - hosts: + // - demo.example.com + // secretName: secret-tls + // defaultBackend: + // service: + // name: my-app + // port: + // number: 80 + // functionConfig: + // apiVersion: example.com/v1alpha1 + // kind: JavaSpringBoot + // metadata: + // name: my-app + // spec: + // image: example.docker.com/team/app:1.0 + // domain: demo.example.com +} diff --git a/go/internal/forked/kyaml/fn/framework/example_validator_test.go b/go/internal/forked/kyaml/fn/framework/example_validator_test.go new file mode 100644 index 000000000..301bf4930 --- /dev/null +++ b/go/internal/forked/kyaml/fn/framework/example_validator_test.go @@ -0,0 +1,33 @@ +package framework_test + +import ( + "os" + + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/fn/framework" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/fn/framework/command" +) + +// This example implements a function that validate resources to ensure +// spec.template.spec.securityContext.runAsNonRoot is set in workload APIs. + +func Example_validator() { + if err := command.AsMain(framework.ResourceListProcessorFunc(validator)); err != nil { + os.Exit(1) + } +} + +func validator(rl *framework.ResourceList) error { + var results framework.Results + for _, obj := range rl.Items { + if obj.GetApiVersion() == "apps/v1" && (obj.GetKind() == "Deployment" || obj.GetKind() == "StatefulSet" || obj.GetKind() == "DaemonSet" || obj.GetKind() == "ReplicaSet") { + runAsNonRoot, _, err := obj.GetNestedBool("spec", "template", "spec", "securityContext", "runAsNonRoot") + if err != nil { + return framework.ErrorConfigObjectResult(err, obj) + } + if !runAsNonRoot { + results = append(results, framework.ConfigObjectResult("`spec.template.spec.securityContext.runAsNonRoot` must be set to true", obj, framework.Error)) + } + } + } + return results +} diff --git a/go/internal/forked/kyaml/fn/framework/framework.go b/go/internal/forked/kyaml/fn/framework/framework.go new file mode 100644 index 000000000..4c2957735 --- /dev/null +++ b/go/internal/forked/kyaml/fn/framework/framework.go @@ -0,0 +1,441 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package framework + +import ( + "bytes" + goerrors "errors" + "fmt" + "io" + "os" + "reflect" + "sort" + "strconv" + + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/kio/kioutil" + + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/errors" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/kio" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" +) + +// ResourceList is a Kubernetes list type used as the primary data interchange format +// in the Configuration Functions Specification: +// https://github.com/kubernetes-sigs/kustomize/blob/master/cmd/config/docs/api-conventions/functions-spec.md +// This framework facilitates building functions that receive and emit ResourceLists, +// as required by the specification. +type ResourceList struct { + // Items is the ResourceList.items input and output value. + // + // e.g. given the function input: + // + // kind: ResourceList + // items: + // - kind: Deployment + // ... + // - kind: Service + // ... + // + // Items will be a slice containing the Deployment and Service resources + // Mutating functions will alter this field during processing. + // This field is required. + Items []*yaml.RNode `yaml:"items" json:"items"` + + // FunctionConfig is the ResourceList.functionConfig input value. + // + // e.g. given the input: + // + // kind: ResourceList + // functionConfig: + // kind: Example + // spec: + // foo: var + // + // FunctionConfig will contain the RNodes for the Example: + // kind: Example + // spec: + // foo: var + FunctionConfig *yaml.RNode `yaml:"functionConfig,omitempty" json:"functionConfig,omitempty"` + + // Results is ResourceList.results output value. + // Validating functions can optionally use this field to communicate structured + // validation error data to downstream functions. + Results Results `yaml:"results,omitempty" json:"results,omitempty"` +} + +// ParseResourceList parses a ResourceList from the input byte array. +func ParseResourceList(in []byte) (*ResourceList, error) { + rl := &ResourceList{ + Items: []*yaml.RNode{}, + } + + var nodes []*yaml.Node + decoder := yaml.NewDecoder(bytes.NewReader(in)) + for { + node := &yaml.Node{} + if err := decoder.Decode(node); err != nil { + if err == io.EOF { + break + } + return nil, err + } + nodes = append(nodes, node) + } + + if len(nodes) != 1 { + return nil, fmt.Errorf("expected exactly one resouceList object, got %d", len(nodes)) + } + rlRNode := yaml.NewRNode(nodes[0]) + + if rlRNode.GetKind() != kio.ResourceListKind { + return nil, fmt.Errorf("input was of unexpected kind %q; expected ResourceList", rlRNode.GetKind()) + } + fc := &yaml.RNode{} + found, err := rlRNode.Get(fc, "functionConfig") + if err != nil { + return nil, fmt.Errorf("failed when tried to get functionConfig: %w", err) + } + if found { + rl.FunctionConfig = fc + } + + itemsRN := &yaml.RNode{} + found, err = rlRNode.Get(itemsRN, "items") + if err != nil { + return nil, fmt.Errorf("failed when tried to get items: %w", err) + } + if !found { + return rl, nil + } + itemYNodes := itemsRN.Content() + var items []*yaml.RNode + for i := range itemYNodes { + items = append(items, yaml.NewRNode(itemYNodes[i])) + } + rl.Items = items + return rl, nil +} + +// ToYAML convert the ResourceList to its yaml representation. +func (rl *ResourceList) ToYAML() (string, error) { + rl.SortItems() + var yml string + if err := func() error { + ko, err := rl.toRNode() + if err != nil { + return err + } + yml, err = ko.String() + return err + }(); err != nil { + return "", fmt.Errorf("failed to convert the resourceList to yaml: %v", err) + } + return yml, nil +} + +// toRNode converts the ResourceList to a RNode. +func (rl *ResourceList) toRNode() (*yaml.RNode, error) { + obj, err := yaml.NewEmptyRNode() + if err != nil { + return nil, err + } + obj.SetApiVersion(kio.ResourceListAPIVersion) + obj.SetKind(kio.ResourceListKind) + + if rl.Items != nil && len(rl.Items) > 0 { + if err := obj.Set(rl.Items, "items"); err != nil { + return nil, err + } + } + + if rl.FunctionConfig != nil { + if err := obj.Set(rl.FunctionConfig, "functionConfig"); err != nil { + return nil, err + } + } + + if rl.Results != nil && len(rl.Results) > 0 { + if err = obj.Set(rl.Results, "results"); err != nil { + return nil, err + } + } + + return obj, nil +} + +// UpsertObjectToItems adds an object to ResourceList.items. The input object can +// be a RNode or any typed object (e.g. corev1.Pod). +func (rl *ResourceList) UpsertObjectToItems(obj interface{}, checkExistence func(obj, another *yaml.RNode) bool, replaceIfAlreadyExist bool) error { + if checkExistence == nil { + checkExistence = func(obj, another *yaml.RNode) bool { + ri1 := obj.GetResourceIdentifier() + ri2 := another.GetResourceIdentifier() + return reflect.DeepEqual(ri1, ri2) + } + } + + var ko *yaml.RNode + switch obj := obj.(type) { + case yaml.RNode: + ko = &obj + case *yaml.RNode: + ko = obj + case yaml.Node: + ko = yaml.NewRNode(&obj) + case *yaml.Node: + ko = yaml.NewRNode(obj) + default: + var err error + ko, err = yaml.NewRNodeFrom(obj) + if err != nil { + return err + } + } + + idx := -1 + for i, item := range rl.Items { + if checkExistence(ko, item) { + idx = i + break + } + } + if idx == -1 { + rl.Items = append(rl.Items, ko) + } else if replaceIfAlreadyExist { + rl.Items[idx] = ko + } + return nil +} + +// ResourceListProcessor is implemented by configuration functions built with this framework +// to conform to the Configuration Functions Specification: +// https://github.com/kubernetes-sigs/kustomize/blob/master/cmd/config/docs/api-conventions/functions-spec.md +// To invoke a processor, pass it to framework.Execute, which will also handle ResourceList IO. +// +// This framework provides several ready-to-use ResourceListProcessors, including +// SimpleProcessor, VersionedAPIProcessor and TemplateProcessor. +// You can also build your own by implementing this interface. +type ResourceListProcessor interface { + Process(rl *ResourceList) error +} + +// ResourceListProcessorFunc converts a compatible function to a ResourceListProcessor. +type ResourceListProcessorFunc func(rl *ResourceList) error + +// Process makes ResourceListProcessorFunc implement the ResourceListProcessor interface. +func (p ResourceListProcessorFunc) Process(rl *ResourceList) error { + return p(rl) +} + +// Defaulter is implemented by APIs to have Default invoked. +// The standard application is to create a type to hold your FunctionConfig data, and +// implement Defaulter on that type. All of the framework's processors will invoke Default() +// on your type after unmarshalling the FunctionConfig data into it. +type Defaulter interface { + Default() error +} + +// Validator is implemented by APIs to have Validate invoked. +// The standard application is to create a type to hold your FunctionConfig data, and +// implement Validator on that type. All of the framework's processors will invoke Validate() +// on your type after unmarshalling the FunctionConfig data into it. +type Validator interface { + Validate() error +} + +// Execute is the entrypoint for invoking configuration functions built with this framework +// from code. See framework/command#Build for a Cobra-based command-line equivalent. +// Execute reads a ResourceList from the given source, passes it to a ResourceListProcessor, +// and then writes the result to the target. +// STDIN and STDOUT will be used if no reader or writer respectively is provided. +func Execute(p ResourceListProcessor, rlSource *kio.ByteReadWriter) error { + // Prepare the resource list source + if rlSource == nil { + rlSource = &kio.ByteReadWriter{KeepReaderAnnotations: true} + } + if rlSource.Reader == nil { + rlSource.Reader = os.Stdin + } + if rlSource.Writer == nil { + rlSource.Writer = os.Stdout + } + + // Read the input + rl := ResourceList{} + var err error + if rl.Items, err = rlSource.Read(); err != nil { + return errors.WrapPrefixf(err, "failed to read ResourceList input") + } + rl.FunctionConfig = rlSource.FunctionConfig + + // We store the original + nodeAnnos, err := kio.PreprocessResourcesForInternalAnnotationMigration(rl.Items) + if err != nil { + return err + } + + retErr := p.Process(&rl) + + // If either the internal annotations for path, index, and id OR the legacy + // annotations for path, index, and id are changed, we have to update the other. + err = kio.ReconcileInternalAnnotations(rl.Items, nodeAnnos) + if err != nil { + return err + } + + // Write the results + // Set the ResourceList.results for validating functions + if len(rl.Results) > 0 { + b, err := yaml.Marshal(rl.Results) + if err != nil { + return errors.Wrap(err) + } + y, err := yaml.Parse(string(b)) + if err != nil { + return errors.Wrap(err) + } + rlSource.Results = y + } + if err := rlSource.Write(rl.Items); err != nil { + return err + } + + return retErr +} + +// Filter executes the given kio.Filter and replaces the ResourceList's items with the result. +// This can be used to help implement ResourceListProcessors. See SimpleProcessor for example. +// +// Filters that return a Result as error will store the result in the ResourceList +// and continue processing instead of erroring out. +func (rl *ResourceList) Filter(api kio.Filter) error { + var err error + rl.Items, err = api.Filter(rl.Items) + if err != nil { + var r Results + if goerrors.As(err, &r) { + rl.Results = append(rl.Results, r...) + return nil + } + return errors.Wrap(err) + } + return nil +} + +// SortItems sorts the ResourceList.items by apiVersion, kind, namespace and name. +func (rl *ResourceList) SortItems() { + sort.Sort(sortRNodeObjects(rl.Items)) +} + +type sortRNodeObjects []*yaml.RNode + +func (o sortRNodeObjects) Len() int { return len(o) } +func (o sortRNodeObjects) Swap(i, j int) { o[i], o[j] = o[j], o[i] } +func (o sortRNodeObjects) Less(i, j int) bool { + idi := o[i].GetResourceIdentifier() + idj := o[j].GetResourceIdentifier() + idStrI := fmt.Sprintf("%s %s %s %s", idi.GetAPIVersion(), idi.GetKind(), idi.GetNamespace(), idi.GetName()) + idStrJ := fmt.Sprintf("%s %s %s %s", idj.GetAPIVersion(), idj.GetKind(), idj.GetNamespace(), idj.GetName()) + return idStrI < idStrJ +} + +// Run evaluates the function. input must be a resourceList in yaml format. An +// updated resourceList will be returned. +func Run(p ResourceListProcessor, input []byte) ([]byte, error) { + rl, err := ParseResourceList(input) + if err != nil { + return nil, err + } + err = p.Process(rl) + if err != nil { + // If the error is not a Results type, we wrap the error as a Result. + if results, ok := err.(Results); ok { + rl.Results = append(rl.Results, results...) + } else if result, ok := err.(Result); ok { + rl.Results = append(rl.Results, &result) + } else if result, ok := err.(*Result); ok { + rl.Results = append(rl.Results, result) + } else { + rl.Results = append(rl.Results, ErrorResult(err)) + } + } + yml, er := rl.ToYAML() + if er != nil { + return []byte(yml), er + } + if len(rl.Results) > 0 { + return []byte(yml), rl.Results + } + return []byte(yml), nil +} + +type ErrMissingFnConfig struct{} + +func (ErrMissingFnConfig) Error() string { + return "unable to find the functionConfig in the resourceList" +} + +// Chain chains a list of ResourceListProcessor as a single ResourceListProcessor. +func Chain(processors ...ResourceListProcessor) ResourceListProcessor { + return ResourceListProcessorFunc(func(rl *ResourceList) error { + for _, processor := range processors { + if err := processor.Process(rl); err != nil { + return err + } + } + return nil + }) +} + +// ChainFunctions chains a list of ResourceListProcessorFunc as a single ResourceListProcessorFunc. +func ChainFunctions(fns ...ResourceListProcessorFunc) ResourceListProcessorFunc { + return func(rl *ResourceList) error { + for _, fn := range fns { + if err := fn.Process(rl); err != nil { + return err + } + } + return nil + } +} + +// GetPathAnnotation checks the path annotation first and then the legacy path +// annotation. See: https://github.com/kubernetes-sigs/kustomize/blob/master/cmd/config/docs/api-conventions/functions-spec.md#internalconfigkubernetesiopath +func GetPathAnnotation(rn *yaml.RNode) string { + anno := rn.GetAnnotation(kioutil.PathAnnotation) + if anno == "" { + anno = rn.GetAnnotation(kioutil.LegacyPathAnnotation) + } + return anno +} + +// GetIndexAnnotation checks the index annotation first and then the legacy index +// annotation. It returns -1 if not found. See: https://github.com/kubernetes-sigs/kustomize/blob/master/cmd/config/docs/api-conventions/functions-spec.md#internalconfigkubernetesioindex +func GetIndexAnnotation(rn *yaml.RNode) int { + anno := rn.GetAnnotation(kioutil.IndexAnnotation) + if anno == "" { + anno = rn.GetAnnotation(kioutil.LegacyIndexAnnotation) + } + + if anno == "" { + return -1 + } + i, _ := strconv.Atoi(anno) + return i +} + +// GetIdAnnotation checks the id annotation first and then the legacy id annotation. +// It returns -1 if not found. +func GetIdAnnotation(rn *yaml.RNode) int { + anno := rn.GetAnnotation(kioutil.IdAnnotation) + if anno == "" { + anno = rn.GetAnnotation(kioutil.LegacyIdAnnotation) + } + + if anno == "" { + return -1 + } + i, _ := strconv.Atoi(anno) + return i +} diff --git a/go/internal/forked/kyaml/fn/framework/framework_test.go b/go/internal/forked/kyaml/fn/framework/framework_test.go new file mode 100644 index 000000000..fafaa6a17 --- /dev/null +++ b/go/internal/forked/kyaml/fn/framework/framework_test.go @@ -0,0 +1,195 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package framework_test + +import ( + "bytes" + "strings" + "testing" + + "github.com/stretchr/testify/assert" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/fn/framework" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/kio" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" +) + +func TestExecute_Result(t *testing.T) { + p := framework.SimpleProcessor{Filter: kio.FilterFunc(func(in []*yaml.RNode) ([]*yaml.RNode, error) { + return in, framework.Results{ + { + Message: "bad value for replicas", + Severity: framework.Error, + ResourceRef: &yaml.ResourceIdentifier{ + TypeMeta: yaml.TypeMeta{APIVersion: "v1", Kind: "Deployment"}, + NameMeta: yaml.NameMeta{Name: "tester", Namespace: "default"}, + }, + Field: &framework.Field{ + Path: ".spec.Replicas", + CurrentValue: "0", + ProposedValue: "3", + }, + File: &framework.File{ + Path: "/path/to/deployment.yaml", + Index: 0, + }, + }, + { + Message: "some error", + Severity: framework.Error, + Tags: map[string]string{"foo": "bar"}, + }, + } + })} + out := new(bytes.Buffer) + source := &kio.ByteReadWriter{Reader: bytes.NewBufferString(` +kind: ResourceList +apiVersion: config.kubernetes.io/v1 +items: +- kind: Deployment + apiVersion: v1 + metadata: + name: tester + namespace: default + spec: + replicas: 0 +`), Writer: out} + err := framework.Execute(p, source) + assert.NoError(t, err) + assert.Equal(t, `apiVersion: config.kubernetes.io/v1 +kind: ResourceList +items: +- kind: Deployment + apiVersion: v1 + metadata: + name: tester + namespace: default + spec: + replicas: 0 +results: +- message: bad value for replicas + severity: error + resourceRef: + apiVersion: v1 + kind: Deployment + name: tester + namespace: default + field: + path: .spec.Replicas + currentValue: "0" + proposedValue: "3" + file: + path: /path/to/deployment.yaml +- message: some error + severity: error + tags: + foo: bar`, strings.TrimSpace(out.String())) +} + +const intputResourceList = `apiVersion: config.kubernetes.io/v1 +kind: ResourceList +items: +- apiVersion: apps/v1 + kind: Deployment + metadata: + name: nginx-deployment #foo-system + spec: + replicas: 3 + selector: + matchLabels: + app: nginx + template: + metadata: + labels: + app: nginx + spec: + containers: + - name: nginx + image: nginx:1.14.2 + ports: + - containerPort: 80 +functionConfig: + apiVersion: v1 + kind: ConfigMap + metadata: + name: cm + data: + foo: bar +` + +func TestRoundtripResourceList(t *testing.T) { + rl, err := framework.ParseResourceList([]byte(intputResourceList)) + assert.NoError(t, err) + yml, err := rl.ToYAML() + assert.NoError(t, err) + assert.Equal(t, intputResourceList, yml) +} + +const resourceListToSort = `apiVersion: config.kubernetes.io/v1 +kind: ResourceList +items: +- apiVersion: v1 + kind: ConfigMap + metadata: + name: nginx-configmap + data: + foo: bar +- apiVersion: apps/v1 + kind: Deployment + metadata: + name: nginx-deployment + spec: + replicas: 3 +- apiVersion: v1 + kind: ConfigMap + metadata: + name: cm1 + data: + foo: bar +- apiVersion: v1 + kind: ConfigMap + metadata: + name: cm2 + namespace: staging + data: + foo: bar +` + +const sortedResourceList = `apiVersion: config.kubernetes.io/v1 +kind: ResourceList +items: +- apiVersion: apps/v1 + kind: Deployment + metadata: + name: nginx-deployment + spec: + replicas: 3 +- apiVersion: v1 + kind: ConfigMap + metadata: + name: cm1 + data: + foo: bar +- apiVersion: v1 + kind: ConfigMap + metadata: + name: nginx-configmap + data: + foo: bar +- apiVersion: v1 + kind: ConfigMap + metadata: + name: cm2 + namespace: staging + data: + foo: bar +` + +func TestSortItems(t *testing.T) { + rl, err := framework.ParseResourceList([]byte(resourceListToSort)) + assert.NoError(t, err) + rl.SortItems() + yml, err := rl.ToYAML() + assert.NoError(t, err) + assert.Equal(t, sortedResourceList, yml) +} diff --git a/go/internal/forked/kyaml/fn/framework/frameworktestutil/frameworktestutil.go b/go/internal/forked/kyaml/fn/framework/frameworktestutil/frameworktestutil.go new file mode 100644 index 000000000..5127416e0 --- /dev/null +++ b/go/internal/forked/kyaml/fn/framework/frameworktestutil/frameworktestutil.go @@ -0,0 +1,444 @@ +// Copyright 2020 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +// Package frameworktestutil contains utilities for testing functions written using the framework. +package frameworktestutil + +import ( + "bytes" + "io/ioutil" + "os" + "path/filepath" + "regexp" + "strings" + "testing" + + "github.com/spf13/cobra" + "github.com/stretchr/testify/assert" + "github.com/stretchr/testify/require" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/fn/framework" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/kio" +) + +const ( + DefaultTestDataDirectory = "testdata" + DefaultConfigInputFilename = "config.yaml" + DefaultInputFilename = "input.yaml" + DefaultInputFilenameGlob = "input*.yaml" + DefaultOutputFilename = "expected.yaml" + DefaultErrorFilename = "errors.txt" +) + +// CommandResultsChecker tests a command-wrapped function by running it with predefined inputs +// and comparing the outputs to expected results. +type CommandResultsChecker struct { + // TestDataDirectory is the directory containing the testdata subdirectories. + // CommandResultsChecker will recurse into each test directory and run the Command + // if the directory contains at least one of ExpectedOutputFilename or ExpectedErrorFilename. + // Defaults to "testdata" + TestDataDirectory string + + // ExpectedOutputFilename is the file with the expected output of the function + // Defaults to "expected.yaml". Directories containing neither this file + // nor ExpectedErrorFilename will be skipped. + ExpectedOutputFilename string + + // ExpectedErrorFilename is the file containing elements of an expected error message. + // Each line of the file will be treated as a regex that must match the actual error. + // Defaults to "errors.txt". Directories containing neither this file + // nor ExpectedOutputFilename will be skipped. + ExpectedErrorFilename string + + // UpdateExpectedFromActual if set to true will write the actual results to the + // expected testdata files. This is useful for updating test data. + UpdateExpectedFromActual bool + + // OutputAssertionFunc allows you to swap out the logic used to compare the expected output + // from the fixture file to the actual output. + // By default, it performs a string comparison after normalizing whitespace. + OutputAssertionFunc AssertionFunc + + // ErrorAssertionFunc allows you to swap out the logic used to compare the expected error + // message from the fixture file to the actual error message. + // By default, it interprets each line of the fixture as a regex that the actual error must match. + ErrorAssertionFunc AssertionFunc + + // ConfigInputFilename is the name of the config file provided as the first + // argument to the function. Directories without this file will be skipped. + // Defaults to "config.yaml" + ConfigInputFilename string + + // InputFilenameGlob matches function inputs + // Defaults to "input*.yaml" + InputFilenameGlob string + + // Command provides the function to run. + Command func() *cobra.Command + + *checkerCore +} + +// Assert runs the command with the input provided in each valid test directory +// and verifies that the actual output and error match the fixtures in the directory. +func (rc *CommandResultsChecker) Assert(t *testing.T) bool { + if rc.ConfigInputFilename == "" { + rc.ConfigInputFilename = DefaultConfigInputFilename + } + if rc.InputFilenameGlob == "" { + rc.InputFilenameGlob = DefaultInputFilenameGlob + } + rc.checkerCore = &checkerCore{ + testDataDirectory: rc.TestDataDirectory, + expectedOutputFilename: rc.ExpectedOutputFilename, + expectedErrorFilename: rc.ExpectedErrorFilename, + updateExpectedFromActual: rc.UpdateExpectedFromActual, + outputAssertionFunc: rc.OutputAssertionFunc, + errorAssertionFunc: rc.ErrorAssertionFunc, + } + rc.checkerCore.setDefaults() + runAllTestCases(t, rc) + return true +} + +func (rc *CommandResultsChecker) isTestDir(path string) bool { + return atLeastOneFileExists( + filepath.Join(path, rc.ConfigInputFilename), + filepath.Join(path, rc.checkerCore.expectedOutputFilename), + filepath.Join(path, rc.checkerCore.expectedErrorFilename), + ) +} + +func (rc *CommandResultsChecker) runInCurrentDir(t *testing.T) (string, string) { + _, err := os.Stat(rc.ConfigInputFilename) + if os.IsNotExist(err) { + t.Errorf("Test case is missing FunctionConfig input file (default: %s)", DefaultConfigInputFilename) + } + require.NoError(t, err) + args := []string{rc.ConfigInputFilename} + + if rc.InputFilenameGlob != "" { + inputs, err := filepath.Glob(rc.InputFilenameGlob) + require.NoError(t, err) + args = append(args, inputs...) + } + + var stdOut, stdErr bytes.Buffer + cmd := rc.Command() + cmd.SetArgs(args) + cmd.SetOut(&stdOut) + cmd.SetErr(&stdErr) + + _ = cmd.Execute() + return stdOut.String(), stdErr.String() +} + +// ProcessorResultsChecker tests a processor function by running it with predefined inputs +// and comparing the outputs to expected results. +type ProcessorResultsChecker struct { + // TestDataDirectory is the directory containing the testdata subdirectories. + // ProcessorResultsChecker will recurse into each test directory and run the Command + // if the directory contains at least one of ExpectedOutputFilename or ExpectedErrorFilename. + // Defaults to "testdata" + TestDataDirectory string + + // ExpectedOutputFilename is the file with the expected output of the function + // Defaults to "expected.yaml". Directories containing neither this file + // nor ExpectedErrorFilename will be skipped. + ExpectedOutputFilename string + + // ExpectedErrorFilename is the file containing elements of an expected error message. + // Each line of the file will be treated as a regex that must match the actual error. + // Defaults to "errors.txt". Directories containing neither this file + // nor ExpectedOutputFilename will be skipped. + ExpectedErrorFilename string + + // UpdateExpectedFromActual if set to true will write the actual results to the + // expected testdata files. This is useful for updating test data. + UpdateExpectedFromActual bool + + // InputFilename is the name of the file containing the ResourceList input. + // Directories without this file will be skipped. + // Defaults to "input.yaml" + InputFilename string + + // OutputAssertionFunc allows you to swap out the logic used to compare the expected output + // from the fixture file to the actual output. + // By default, it performs a string comparison after normalizing whitespace. + OutputAssertionFunc AssertionFunc + + // ErrorAssertionFunc allows you to swap out the logic used to compare the expected error + // message from the fixture file to the actual error message. + // By default, it interprets each line of the fixture as a regex that the actual error must match. + ErrorAssertionFunc AssertionFunc + + // Processor returns a ResourceListProcessor to run. + Processor func() framework.ResourceListProcessor + + *checkerCore +} + +// Assert runs the processor with the input provided in each valid test directory +// and verifies that the actual output and error match the fixtures in the directory. +func (rc *ProcessorResultsChecker) Assert(t *testing.T) bool { + if rc.InputFilename == "" { + rc.InputFilename = DefaultInputFilename + } + rc.checkerCore = &checkerCore{ + testDataDirectory: rc.TestDataDirectory, + expectedOutputFilename: rc.ExpectedOutputFilename, + expectedErrorFilename: rc.ExpectedErrorFilename, + updateExpectedFromActual: rc.UpdateExpectedFromActual, + outputAssertionFunc: rc.OutputAssertionFunc, + errorAssertionFunc: rc.ErrorAssertionFunc, + } + rc.checkerCore.setDefaults() + runAllTestCases(t, rc) + return true +} + +func (rc *ProcessorResultsChecker) isTestDir(path string) bool { + return atLeastOneFileExists( + filepath.Join(path, rc.InputFilename), + filepath.Join(path, rc.checkerCore.expectedOutputFilename), + filepath.Join(path, rc.checkerCore.expectedErrorFilename), + ) +} + +func (rc *ProcessorResultsChecker) runInCurrentDir(t *testing.T) (string, string) { + _, err := os.Stat(rc.InputFilename) + if os.IsNotExist(err) { + t.Errorf("Test case is missing input file (default: %s)", DefaultInputFilename) + } + require.NoError(t, err) + + actualOutput := bytes.NewBuffer([]byte{}) + rlBytes, err := ioutil.ReadFile(rc.InputFilename) + require.NoError(t, err) + + rw := kio.ByteReadWriter{ + Reader: bytes.NewBuffer(rlBytes), + Writer: actualOutput, + } + err = framework.Execute(rc.Processor(), &rw) + if err != nil { + require.NotEmptyf(t, err.Error(), "processor returned error with empty message") + return actualOutput.String(), err.Error() + } + return actualOutput.String(), "" +} + +type AssertionFunc func(t *testing.T, expected string, actual string) + +// RequireEachLineMatches is an AssertionFunc that treats each line of expected string +// as a regex that must match the actual string. +func RequireEachLineMatches(t *testing.T, expected, actual string) { + // Check that each expected line matches the output + actual = standardizeSpacing(actual) + for _, msg := range strings.Split(standardizeSpacing(expected), "\n") { + require.Regexp(t, regexp.MustCompile(msg), actual) + } +} + +// RequireStrippedStringsEqual is an AssertionFunc that does a simple string comparison +// of expected and actual after normalizing whitespace. +func RequireStrippedStringsEqual(t *testing.T, expected, actual string) { + require.Equal(t, + standardizeSpacing(expected), + standardizeSpacing(actual)) +} + +func standardizeSpacing(s string) string { + // remove extra whitespace and convert Windows line endings + return strings.ReplaceAll(strings.TrimSpace(s), "\r\n", "\n") +} + +// resultsChecker is implemented by ProcessorResultsChecker and CommandResultsChecker, partially via checkerCore +type resultsChecker interface { + // TestCasesRun returns a list of the test case directories that have been seen. + TestCasesRun() (paths []string) + + // rootDir is the root of the tree of test directories to be searched for fixtures. + rootDir() string + // isTestDir takes the name of directory and returns whether or not it contains the files required to be a test case. + isTestDir(dir string) bool + // runInCurrentDir executes the code the checker is checking in the context of the current working directory. + runInCurrentDir(t *testing.T) (stdOut, stdErr string) + // resetTestCasesRun resets the list of test case directories seen. + resetTestCasesRun() + // recordTestCase adds to the list of test case directories seen. + recordTestCase(path string) + // readAssertionFiles returns the contents of the output and error fixtures + readAssertionFiles(t *testing.T) (expectedOutput string, expectedError string) + // shouldUpdateFixtures indicates whether or not this checker is currently being used to update fixtures instead of run them. + shouldUpdateFixtures() bool + // updateFixtures modifies the test fixture files to match the given content + updateFixtures(t *testing.T, actualOutput string, actualError string) + // assertOutputMatches compares the expected output to the output recieved. + assertOutputMatches(t *testing.T, expected string, actual string) + // assertErrorMatches compares teh expected error to the error received. + assertErrorMatches(t *testing.T, expected string, actual string) +} + +// checkerCore implements the resultsChecker methods that are shared between the two checker types +type checkerCore struct { + testDataDirectory string + expectedOutputFilename string + expectedErrorFilename string + updateExpectedFromActual bool + outputAssertionFunc AssertionFunc + errorAssertionFunc AssertionFunc + + testsCasesRun []string +} + +func (rc *checkerCore) setDefaults() { + if rc.testDataDirectory == "" { + rc.testDataDirectory = DefaultTestDataDirectory + } + if rc.expectedOutputFilename == "" { + rc.expectedOutputFilename = DefaultOutputFilename + } + if rc.expectedErrorFilename == "" { + rc.expectedErrorFilename = DefaultErrorFilename + } + if rc.outputAssertionFunc == nil { + rc.outputAssertionFunc = RequireStrippedStringsEqual + } + if rc.errorAssertionFunc == nil { + rc.errorAssertionFunc = RequireEachLineMatches + } +} + +func (rc *checkerCore) rootDir() string { + return rc.testDataDirectory +} + +func (rc *checkerCore) TestCasesRun() []string { + return rc.testsCasesRun +} + +func (rc *checkerCore) resetTestCasesRun() { + rc.testsCasesRun = []string{} +} + +func (rc *checkerCore) recordTestCase(s string) { + rc.testsCasesRun = append(rc.testsCasesRun, s) +} + +func (rc *checkerCore) shouldUpdateFixtures() bool { + return rc.updateExpectedFromActual +} + +func (rc *checkerCore) updateFixtures(t *testing.T, actualOutput string, actualError string) { + if actualError != "" { + require.NoError(t, ioutil.WriteFile(rc.expectedErrorFilename, []byte(actualError), 0600)) + } + if len(actualOutput) > 0 { + require.NoError(t, ioutil.WriteFile(rc.expectedOutputFilename, []byte(actualOutput), 0600)) + } + t.Skip("Updated fixtures for test case") +} + +func (rc *checkerCore) assertOutputMatches(t *testing.T, expected string, actual string) { + rc.outputAssertionFunc(t, expected, actual) +} + +func (rc *checkerCore) assertErrorMatches(t *testing.T, expected string, actual string) { + rc.errorAssertionFunc(t, expected, actual) +} + +func (rc *checkerCore) readAssertionFiles(t *testing.T) (string, string) { + // read the expected results + var expectedOutput, expectedError string + if rc.expectedOutputFilename != "" { + _, err := os.Stat(rc.expectedOutputFilename) + if !os.IsNotExist(err) && err != nil { + t.FailNow() + } + if err == nil { + // only read the file if it exists + b, err := ioutil.ReadFile(rc.expectedOutputFilename) + if !assert.NoError(t, err) { + t.FailNow() + } + expectedOutput = string(b) + } + } + if rc.expectedErrorFilename != "" { + _, err := os.Stat(rc.expectedErrorFilename) + if !os.IsNotExist(err) && err != nil { + t.FailNow() + } + if err == nil { + // only read the file if it exists + b, err := ioutil.ReadFile(rc.expectedErrorFilename) + if !assert.NoError(t, err) { + t.FailNow() + } + expectedError = string(b) + } + } + return expectedOutput, expectedError +} + +// runAllTestCases traverses rootDir to find test cases, calls getResult to invoke the function +// under test in each directory, and then runs assertions on the returned output and error results. +// It triggers a test failure if no valid test directories were found. +func runAllTestCases(t *testing.T, checker resultsChecker) { + checker.resetTestCasesRun() + err := filepath.Walk(checker.rootDir(), + func(path string, info os.FileInfo, err error) error { + require.NoError(t, err) + if info.IsDir() && checker.isTestDir(path) { + runDirectoryTestCase(t, path, checker) + } + return nil + }) + require.NoError(t, err) + require.NotZero(t, len(checker.TestCasesRun()), "No complete test cases found in %s", checker.rootDir()) +} + +func runDirectoryTestCase(t *testing.T, path string, checker resultsChecker) { + // cd into the directory so we can test functions that refer to local files by relative paths + d, err := os.Getwd() + require.NoError(t, err) + + defer func() { require.NoError(t, os.Chdir(d)) }() + require.NoError(t, os.Chdir(path)) + + expectedOutput, expectedError := checker.readAssertionFiles(t) + if expectedError == "" && expectedOutput == "" && !checker.shouldUpdateFixtures() { + t.Fatalf("test directory %s must include either expected output or expected error fixture", path) + } + + // run the test + t.Run(path, func(t *testing.T) { + checker.recordTestCase(path) + actualOutput, actualError := checker.runInCurrentDir(t) + + // Configured to update the assertion files instead of comparing them + if checker.shouldUpdateFixtures() { + checker.updateFixtures(t, actualOutput, actualError) + } + + // Compare the results to the assertion files + if expectedError != "" { + // We expected an error, so make sure there was one + require.NotEmptyf(t, actualError, "test expected an error but message was empty, and output was:\n%s", actualOutput) + checker.assertErrorMatches(t, expectedError, actualError) + } else { + // We didn't expect an error, and the output should match + require.Emptyf(t, actualError, "test expected no error but got an error message, and output was:\n%s", actualOutput) + checker.assertOutputMatches(t, expectedOutput, actualOutput) + } + }) +} + +func atLeastOneFileExists(files ...string) bool { + for _, file := range files { + if _, err := os.Stat(file); err == nil { + return true + } + } + return false +} diff --git a/go/internal/forked/kyaml/fn/framework/frameworktestutil/frameworktestutil_test.go b/go/internal/forked/kyaml/fn/framework/frameworktestutil/frameworktestutil_test.go new file mode 100644 index 000000000..c66056edc --- /dev/null +++ b/go/internal/forked/kyaml/fn/framework/frameworktestutil/frameworktestutil_test.go @@ -0,0 +1,68 @@ +// Copyright 2021 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package frameworktestutil + +import ( + "path/filepath" + "testing" + + "github.com/spf13/cobra" + "github.com/stretchr/testify/require" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/fn/framework" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/fn/framework/command" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/kio" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" +) + +func TestProcessorResultsChecker_UpdateExpectedFromActual(t *testing.T) { + dir := filepath.FromSlash("testdata/update_expectations/processor") + checker := ProcessorResultsChecker{ + TestDataDirectory: dir, + UpdateExpectedFromActual: true, + Processor: testProcessor, + } + // This should result in the test being skipped. If no tests are found, it will instead fail. + checker.Assert(t) + require.Contains(t, checker.TestCasesRun(), filepath.Join(dir, "important_subdir")) + + checker.UpdateExpectedFromActual = false + // This time should inherently pass + checker.Assert(t) + require.Contains(t, checker.TestCasesRun(), filepath.Join(dir, "important_subdir")) +} + +func TestCommandResultsChecker_UpdateExpectedFromActual(t *testing.T) { + dir := filepath.FromSlash("testdata/update_expectations/command") + checker := CommandResultsChecker{ + TestDataDirectory: dir, + UpdateExpectedFromActual: true, + Command: testCommand, + } + // This should result in the test being skipped. If no tests are found, it will instead fail. + checker.Assert(t) + require.Contains(t, checker.TestCasesRun(), filepath.Join(dir, "important_subdir")) + + checker.UpdateExpectedFromActual = false + // This time should inherently pass + checker.Assert(t) + require.Contains(t, checker.TestCasesRun(), filepath.Join(dir, "important_subdir")) +} + +func testCommand() *cobra.Command { + return command.Build(testProcessor(), command.StandaloneEnabled, false) +} + +func testProcessor() framework.ResourceListProcessor { + return framework.SimpleProcessor{ + Filter: kio.FilterFunc(func(nodes []*yaml.RNode) ([]*yaml.RNode, error) { + for _, node := range nodes { + err := node.SetAnnotations(map[string]string{"updated": "true"}) + if err != nil { + return nil, err + } + } + return nodes, nil + }), + } +} diff --git a/go/internal/forked/kyaml/fn/framework/frameworktestutil/testdata/update_expectations/command/important_subdir/config.yaml b/go/internal/forked/kyaml/fn/framework/frameworktestutil/testdata/update_expectations/command/important_subdir/config.yaml new file mode 100644 index 000000000..7417863f2 --- /dev/null +++ b/go/internal/forked/kyaml/fn/framework/frameworktestutil/testdata/update_expectations/command/important_subdir/config.yaml @@ -0,0 +1,7 @@ +# Copyright 2019 The Kubernetes Authors. +# SPDX-License-Identifier: Apache-2.0 + +apiVersion: example.com/v1alpha1 +kind: Demo +spec: + value: a diff --git a/go/internal/forked/kyaml/fn/framework/frameworktestutil/testdata/update_expectations/command/important_subdir/expected.yaml b/go/internal/forked/kyaml/fn/framework/frameworktestutil/testdata/update_expectations/command/important_subdir/expected.yaml new file mode 100644 index 000000000..fa406342e --- /dev/null +++ b/go/internal/forked/kyaml/fn/framework/frameworktestutil/testdata/update_expectations/command/important_subdir/expected.yaml @@ -0,0 +1,16 @@ +# Copyright 2019 The Kubernetes Authors. +# SPDX-License-Identifier: Apache-2.0 + +apiVersion: apps/v1 +kind: Deployment +metadata: + name: test-1 + annotations: + updated: "true" +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + name: test-2 + annotations: + updated: "true" diff --git a/go/internal/forked/kyaml/fn/framework/frameworktestutil/testdata/update_expectations/command/important_subdir/input.yaml b/go/internal/forked/kyaml/fn/framework/frameworktestutil/testdata/update_expectations/command/important_subdir/input.yaml new file mode 100644 index 000000000..83e896dc4 --- /dev/null +++ b/go/internal/forked/kyaml/fn/framework/frameworktestutil/testdata/update_expectations/command/important_subdir/input.yaml @@ -0,0 +1,16 @@ +# Copyright 2019 The Kubernetes Authors. +# SPDX-License-Identifier: Apache-2.0 + +apiVersion: apps/v1 +kind: Deployment +metadata: + name: test-1 + annotations: + baz: foo +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + name: test-2 + annotations: + foo: bar diff --git a/go/internal/forked/kyaml/fn/framework/frameworktestutil/testdata/update_expectations/processor/important_subdir/expected.yaml b/go/internal/forked/kyaml/fn/framework/frameworktestutil/testdata/update_expectations/processor/important_subdir/expected.yaml new file mode 100644 index 000000000..e41a70ce6 --- /dev/null +++ b/go/internal/forked/kyaml/fn/framework/frameworktestutil/testdata/update_expectations/processor/important_subdir/expected.yaml @@ -0,0 +1,20 @@ +apiVersion: +kind: ResourceList +items: +- apiVersion: apps/v1 + kind: Deployment + metadata: + name: test-1 + annotations: + updated: "true" +- apiVersion: apps/v1 + kind: Deployment + metadata: + name: test-2 + annotations: + updated: "true" +functionConfig: + apiVersion: example.com/v1alpha1 + kind: Demo + spec: + value: a diff --git a/go/internal/forked/kyaml/fn/framework/frameworktestutil/testdata/update_expectations/processor/important_subdir/input.yaml b/go/internal/forked/kyaml/fn/framework/frameworktestutil/testdata/update_expectations/processor/important_subdir/input.yaml new file mode 100644 index 000000000..db6501dcf --- /dev/null +++ b/go/internal/forked/kyaml/fn/framework/frameworktestutil/testdata/update_expectations/processor/important_subdir/input.yaml @@ -0,0 +1,22 @@ +# Copyright 2019 The Kubernetes Authors. +# SPDX-License-Identifier: Apache-2.0 + +kind: ResourceList +items: +- apiVersion: apps/v1 + kind: Deployment + metadata: + name: test-1 + annotations: + baz: foo +- apiVersion: apps/v1 + kind: Deployment + metadata: + name: test-2 + annotations: + foo: bar +functionConfig: + apiVersion: example.com/v1alpha1 + kind: Demo + spec: + value: a diff --git a/go/internal/forked/kyaml/fn/framework/log.go b/go/internal/forked/kyaml/fn/framework/log.go new file mode 100644 index 000000000..2a8b85770 --- /dev/null +++ b/go/internal/forked/kyaml/fn/framework/log.go @@ -0,0 +1,16 @@ +package framework + +import ( + "fmt" + "os" +) + +// Log prints to stderr. +func Log(in ...interface{}) { + fmt.Fprintln(os.Stderr, in...) +} + +// Logf prints formatted messages to stderr. +func Logf(format string, in ...interface{}) { + fmt.Fprintf(os.Stderr, format, in...) +} diff --git a/go/internal/forked/kyaml/fn/framework/matchers.go b/go/internal/forked/kyaml/fn/framework/matchers.go new file mode 100644 index 000000000..2e04c9862 --- /dev/null +++ b/go/internal/forked/kyaml/fn/framework/matchers.go @@ -0,0 +1,349 @@ +// Copyright 2021 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package framework + +import ( + "bytes" + "strings" + "text/template" + + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/errors" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/kio" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/sets" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" +) + +// ResourceMatcher is implemented by types designed for use in or as selectors. +type ResourceMatcher interface { + // kio.Filter applies the matcher to multiple resources. + // This makes individual matchers usable as selectors directly. + kio.Filter + // Match returns true if the given resource matches the matcher's configuration. + Match(node *yaml.RNode) bool +} + +// ResourceMatcherFunc converts a compliant function into a ResourceMatcher +type ResourceMatcherFunc func(node *yaml.RNode) bool + +// Match runs the ResourceMatcherFunc on the given node. +func (m ResourceMatcherFunc) Match(node *yaml.RNode) bool { + return m(node) +} + +// Filter applies ResourceMatcherFunc to a list of items, returning only those that match. +func (m ResourceMatcherFunc) Filter(items []*yaml.RNode) ([]*yaml.RNode, error) { + // MatchAll or MatchAny doesn't really matter here since there is only one matcher (m). + return MatchAll(m).Filter(items) +} + +// ResourceTemplateMatcher is implemented by ResourceMatcher types that accept text templates as +// part of their configuration. +type ResourceTemplateMatcher interface { + // ResourceMatcher makes matchers usable in or as selectors. + ResourceMatcher + // DefaultTemplateData is used to pass default template values down a chain of matchers. + DefaultTemplateData(interface{}) + // InitTemplates is used to render the templates in selectors that support + // ResourceTemplateMatcher. The selector should call this exactly once per filter + // operation, before beginning match comparisons. + InitTemplates() error +} + +// ContainerNameMatcher returns a function that returns true if the "name" field +// of the provided container node matches one of the given container names. +// If no names are provided, the function always returns true. +// Note that this is not a ResourceMatcher, since the node it matches against must be +// container-level (e.g. "name", "env" and "image" would be top level fields). +func ContainerNameMatcher(names ...string) func(node *yaml.RNode) bool { + namesSet := sets.String{} + namesSet.Insert(names...) + return func(node *yaml.RNode) bool { + if len(namesSet) == 0 { + return true + } + f := node.Field("name") + if f == nil { + return false + } + return namesSet.Has(yaml.GetValue(f.Value)) + } +} + +// NameMatcher matches resources whose metadata.name is equal to one of the provided values. +// e.g. `NameMatcher("foo", "bar")` matches if `metadata.name` is either "foo" or "bar". +// +// NameMatcher supports templating. +// e.g. `NameMatcher("{{.AppName}}")` will match `metadata.name` "foo" if TemplateData is +// `struct{ AppName string }{ AppName: "foo" }` +func NameMatcher(names ...string) ResourceTemplateMatcher { + return &TemplatedMetaSliceMatcher{ + Templates: names, + MetaMatcher: func(names sets.String, meta yaml.ResourceMeta) bool { + return names.Has(meta.Name) + }, + } +} + +// NamespaceMatcher matches resources whose metadata.namespace is equal to one of the provided values. +// e.g. `NamespaceMatcher("foo", "bar")` matches if `metadata.namespace` is either "foo" or "bar". +// +// NamespaceMatcher supports templating. +// e.g. `NamespaceMatcher("{{.AppName}}")` will match `metadata.namespace` "foo" if TemplateData is +// `struct{ AppName string }{ AppName: "foo" }` +func NamespaceMatcher(names ...string) ResourceTemplateMatcher { + return &TemplatedMetaSliceMatcher{ + Templates: names, + MetaMatcher: func(names sets.String, meta yaml.ResourceMeta) bool { + return names.Has(meta.Namespace) + }, + } +} + +// KindMatcher matches resources whose kind is equal to one of the provided values. +// e.g. `KindMatcher("foo", "bar")` matches if `kind` is either "foo" or "bar". +// +// KindMatcher supports templating. +// e.g. `KindMatcher("{{.TargetKind}}")` will match `kind` "foo" if TemplateData is +// `struct{ TargetKind string }{ TargetKind: "foo" }` +func KindMatcher(names ...string) ResourceTemplateMatcher { + return &TemplatedMetaSliceMatcher{ + Templates: names, + MetaMatcher: func(names sets.String, meta yaml.ResourceMeta) bool { + return names.Has(meta.Kind) + }, + } +} + +// APIVersionMatcher matches resources whose kind is equal to one of the provided values. +// e.g. `APIVersionMatcher("foo/v1", "bar/v1")` matches if `apiVersion` is either "foo/v1" or +// "bar/v1". +// +// APIVersionMatcher supports templating. +// e.g. `APIVersionMatcher("{{.TargetAPI}}")` will match `apiVersion` "foo/v1" if TemplateData is +// `struct{ TargetAPI string }{ TargetAPI: "foo/v1" }` +func APIVersionMatcher(names ...string) ResourceTemplateMatcher { + return &TemplatedMetaSliceMatcher{ + Templates: names, + MetaMatcher: func(names sets.String, meta yaml.ResourceMeta) bool { + return names.Has(meta.APIVersion) + }, + } +} + +// GVKMatcher matches resources whose API group, version and kind match one of the provided values. +// e.g. `GVKMatcher("foo/v1/Widget", "bar/v1/App")` matches if `apiVersion` concatenated with `kind` +// is either "foo/v1/Widget" or "bar/v1/App". +// +// GVKMatcher supports templating. +// e.g. `GVKMatcher("{{.TargetAPI}}")` will match "foo/v1/Widget" if TemplateData is +// `struct{ TargetAPI string }{ TargetAPI: "foo/v1/Widget" }` +func GVKMatcher(names ...string) ResourceTemplateMatcher { + return &TemplatedMetaSliceMatcher{ + Templates: names, + MetaMatcher: func(names sets.String, meta yaml.ResourceMeta) bool { + gvk := strings.Join([]string{meta.APIVersion, meta.Kind}, "/") + return names.Has(gvk) + }, + } +} + +// TemplatedMetaSliceMatcher is a utility type for constructing matchers that compare resource +// metadata to a slice of (possibly templated) strings. +type TemplatedMetaSliceMatcher struct { + // Templates is the list of possibly templated strings to compare to. + Templates []string + // values is the set of final (possibly rendered) strings to compare to. + values sets.String + // TemplateData is the data to use in template rendering. + // Rendering will not take place if it is nil when InitTemplates is called. + TemplateData interface{} + // MetaMatcher is a function that returns true if the given resource metadata matches at + // least one of the given names. + // The matcher implemented using TemplatedMetaSliceMatcher can compare names to any meta field. + MetaMatcher func(names sets.String, meta yaml.ResourceMeta) bool +} + +// Match parses the resource node's metadata and delegates matching logic to the provided +// MetaMatcher func. This allows ResourceMatchers build with TemplatedMetaSliceMatcher to match +// against any field in resource metadata. +func (m *TemplatedMetaSliceMatcher) Match(node *yaml.RNode) bool { + var err error + meta, err := node.GetMeta() + if err != nil { + return false + } + return m.MetaMatcher(m.values, meta) +} + +// Filter applies the matcher to a list of items, returning only those that match. +func (m *TemplatedMetaSliceMatcher) Filter(items []*yaml.RNode) ([]*yaml.RNode, error) { + // AndSelector or OrSelector doesn't really matter here since there is only one matcher (m). + s := AndSelector{Matchers: []ResourceMatcher{m}, TemplateData: m.TemplateData} + return s.Filter(items) +} + +// DefaultTemplateData sets TemplateData to the provided default values if it has not already +// been set. +func (m *TemplatedMetaSliceMatcher) DefaultTemplateData(data interface{}) { + if m.TemplateData == nil { + m.TemplateData = data + } +} + +// InitTemplates is used to render any templates the selector's list of strings may contain +// before the selector is applied. It should be called exactly once per filter +// operation, before beginning match comparisons. +func (m *TemplatedMetaSliceMatcher) InitTemplates() error { + values, err := templatizeSlice(m.Templates, m.TemplateData) + if err != nil { + return errors.Wrap(err) + } + m.values = sets.String{} + m.values.Insert(values...) + return nil +} + +var _ ResourceTemplateMatcher = &TemplatedMetaSliceMatcher{} + +// LabelMatcher matches resources that are labelled with all of the provided key-value pairs. +// e.g. `LabelMatcher(map[string]string{"app": "foo", "env": "prod"})` matches resources labelled +// app=foo AND env=prod. +// +// LabelMatcher supports templating. +// e.g. `LabelMatcher(map[string]string{"app": "{{ .AppName}}"})` will match label app=foo if +// TemplateData is `struct{ AppName string }{ AppName: "foo" }` +func LabelMatcher(labels map[string]string) ResourceTemplateMatcher { + return &TemplatedMetaMapMatcher{ + Templates: labels, + MetaMatcher: func(labels map[string]string, meta yaml.ResourceMeta) bool { + return compareMaps(labels, meta.Labels) + }, + } +} + +func compareMaps(desired, actual map[string]string) bool { + for k := range desired { + // actual either doesn't have the key or has the wrong value for it + if actual[k] != desired[k] { + return false + } + } + return true +} + +// AnnotationMatcher matches resources that are annotated with all of the provided key-value pairs. +// e.g. `AnnotationMatcher(map[string]string{"app": "foo", "env": "prod"})` matches resources +// annotated app=foo AND env=prod. +// +// AnnotationMatcher supports templating. +// e.g. `AnnotationMatcher(map[string]string{"app": "{{ .AppName}}"})` will match label app=foo if +// TemplateData is `struct{ AppName string }{ AppName: "foo" }` +func AnnotationMatcher(ann map[string]string) ResourceTemplateMatcher { + return &TemplatedMetaMapMatcher{ + Templates: ann, + MetaMatcher: func(ann map[string]string, meta yaml.ResourceMeta) bool { + return compareMaps(ann, meta.Annotations) + }, + } +} + +// TemplatedMetaMapMatcher is a utility type for constructing matchers that compare resource +// metadata to a map of (possibly templated) key-value pairs. +type TemplatedMetaMapMatcher struct { + // Templates is the list of possibly templated strings to compare to. + Templates map[string]string + // values is the map of final (possibly rendered) strings to compare to. + values map[string]string + // TemplateData is the data to use in template rendering. + // Rendering will not take place if it is nil when InitTemplates is called. + TemplateData interface{} + // MetaMatcher is a function that returns true if the given resource metadata matches at + // least one of the given names. + // The matcher implemented using TemplatedMetaSliceMatcher can compare names to any meta field. + MetaMatcher func(names map[string]string, meta yaml.ResourceMeta) bool +} + +// Match parses the resource node's metadata and delegates matching logic to the provided +// MetaMatcher func. This allows ResourceMatchers build with TemplatedMetaMapMatcher to match +// against any field in resource metadata. +func (m *TemplatedMetaMapMatcher) Match(node *yaml.RNode) bool { + var err error + meta, err := node.GetMeta() + if err != nil { + return false + } + + return m.MetaMatcher(m.values, meta) +} + +// DefaultTemplateData sets TemplateData to the provided default values if it has not already +// been set. +func (m *TemplatedMetaMapMatcher) DefaultTemplateData(data interface{}) { + if m.TemplateData == nil { + m.TemplateData = data + } +} + +// InitTemplates is used to render any templates the selector's key-value pairs may contain +// before the selector is applied. It should be called exactly once per filter +// operation, before beginning match comparisons. +func (m *TemplatedMetaMapMatcher) InitTemplates() error { + var err error + m.values, err = templatizeMap(m.Templates, m.TemplateData) + return errors.Wrap(err) +} + +// Filter applies the matcher to a list of items, returning only those that match. +func (m *TemplatedMetaMapMatcher) Filter(items []*yaml.RNode) ([]*yaml.RNode, error) { + // AndSelector or OrSelector doesn't really matter here since there is only one matcher (m). + s := AndSelector{Matchers: []ResourceMatcher{m}, TemplateData: m.TemplateData} + return s.Filter(items) +} + +var _ ResourceTemplateMatcher = &TemplatedMetaMapMatcher{} + +func templatizeSlice(values []string, data interface{}) ([]string, error) { + if data == nil { + return values, nil + } + var err error + results := make([]string, len(values)) + for i := range values { + results[i], err = templatize(values[i], data) + if err != nil { + return nil, errors.WrapPrefixf(err, "unable to render template %s", values[i]) + } + } + return results, nil +} + +func templatizeMap(values map[string]string, data interface{}) (map[string]string, error) { + if data == nil { + return values, nil + } + var err error + results := make(map[string]string, len(values)) + + for k := range values { + results[k], err = templatize(values[k], data) + if err != nil { + return nil, errors.WrapPrefixf(err, "unable to render template for %s=%s", k, values[k]) + } + } + return results, nil +} + +// templatize renders the value as a template, using the provided data +func templatize(value string, data interface{}) (string, error) { + t, err := template.New("kinds").Parse(value) + if err != nil { + return "", errors.Wrap(err) + } + var b bytes.Buffer + err = t.Execute(&b, data) + if err != nil { + return "", errors.Wrap(err) + } + return b.String(), nil +} diff --git a/go/internal/forked/kyaml/fn/framework/parser/doc.go b/go/internal/forked/kyaml/fn/framework/parser/doc.go new file mode 100644 index 000000000..20662842a --- /dev/null +++ b/go/internal/forked/kyaml/fn/framework/parser/doc.go @@ -0,0 +1,43 @@ +// Copyright 2021 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +// Package parser contains implementations of the framework.TemplateParser and framework.SchemaParser interfaces. +// Typically, you would use these in a framework.TemplateProcessor. +// +// Example: +// +// processor := framework.TemplateProcessor{ +// ResourceTemplates: []framework.ResourceTemplate{{ +// Templates: parser.TemplateFiles("path/to/templates"), +// }}, +// PatchTemplates: []framework.PatchTemplate{ +// &framework.ResourcePatchTemplate{ +// Templates: parser.TemplateFiles("path/to/patches/ingress.template.yaml"), +// }, +// }, +// AdditionalSchemas: parser.SchemaFiles("path/to/crd-schemas"), +// } +// +// +// All the parser in this file are compatible with embed.FS filesystems. To load from an embed.FS +// instead of local disk, use `.FromFS`. For example, if you embed filesystems as follows: +// +// //go:embed resources/* patches/* +// var templateFS embed.FS +// //go:embed schemas/* +// var schemaFS embed.FS +// +// Then you can use them like so: +// +// processor := framework.TemplateProcessor{ +// ResourceTemplates: []framework.ResourceTemplate{{ +// Templates: parser.TemplateFiles("resources").FromFS(templateFS), +// }}, +// PatchTemplates: []framework.PatchTemplate{ +// &framework.ResourcePatchTemplate{ +// Templates: parser.TemplateFiles("patches/ingress.template.yaml").FromFS(templateFS), +// }, +// }, +// AdditionalSchemas: parser.SchemaFiles("schemas").FromFS(schemaFS), +// } +package parser diff --git a/go/internal/forked/kyaml/fn/framework/parser/parser.go b/go/internal/forked/kyaml/fn/framework/parser/parser.go new file mode 100644 index 000000000..875fd3456 --- /dev/null +++ b/go/internal/forked/kyaml/fn/framework/parser/parser.go @@ -0,0 +1,95 @@ +// Copyright 2021 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package parser + +import ( + iofs "io/fs" + "io/ioutil" + "path" + "strings" + + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/errors" +) + +type parser struct { + fs iofs.FS + paths []string + extension string +} + +type contentProcessor func(content []byte, name string) error + +func (l parser) parse(processContent contentProcessor) error { + for _, path := range l.paths { + if err := l.readPath(path, processContent); err != nil { + return err + } + } + return nil +} + +func (l parser) readPath(path string, processContent contentProcessor) error { + f, err := l.fs.Open(path) + if err != nil { + return err + } + defer f.Close() + + info, err := f.Stat() + if err != nil { + return err + } + + // File is directory -- read templates among its immediate children + if info.IsDir() { + dir, ok := f.(iofs.ReadDirFile) + if !ok { + return errors.Errorf("%s is a directory but could not be opened as one", path) + } + return l.readDir(dir, path, processContent) + } + + // Path is a file -- check extension and read it + if !strings.HasSuffix(path, l.extension) { + return errors.Errorf("file %s did not have required extension %s", path, l.extension) + } + b, err := ioutil.ReadAll(f) + if err != nil { + return err + } + return processContent(b, path) +} + +func (l parser) readDir(dir iofs.ReadDirFile, dirname string, processContent contentProcessor) error { + entries, err := dir.ReadDir(0) + if err != nil { + return err + } + + for _, entry := range entries { + if entry.IsDir() || !strings.HasSuffix(entry.Name(), l.extension) { + continue + } + // Note: using filepath.Join will break Windows, because io/fs.FS implementations require slashes on all OS. + // See https://golang.org/pkg/io/fs/#ValidPath + b, err := l.readFile(path.Join(dirname, entry.Name())) + if err != nil { + return err + } + if err := processContent(b, entry.Name()); err != nil { + return err + } + } + return nil +} + +func (l parser) readFile(path string) ([]byte, error) { + f, err := l.fs.Open(path) + if err != nil { + return nil, err + } + defer f.Close() + + return ioutil.ReadAll(f) +} diff --git a/go/internal/forked/kyaml/fn/framework/parser/schema.go b/go/internal/forked/kyaml/fn/framework/parser/schema.go new file mode 100644 index 000000000..ced85c540 --- /dev/null +++ b/go/internal/forked/kyaml/fn/framework/parser/schema.go @@ -0,0 +1,95 @@ +// Copyright 2021 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package parser + +import ( + iofs "io/fs" + "os" + + "k8s.io/kube-openapi/pkg/validation/spec" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/errors" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/fn/framework" +) + +const ( + // SchemaExtension is the file extension this package requires schema files to have + SchemaExtension = ".json" +) + +// SchemaStrings returns a SchemaParser that will parse the schemas in the given strings. +// +// This is a helper for use with framework.TemplateProcessor#AdditionalSchemas. Example: +// +// processor := framework.TemplateProcessor{ +// //... +// AdditionalSchemas: parser.SchemaStrings(` +// { +// "definitions": { +// "com.example.v1.Foo": { +// ... +// } +// } +// } +// `), +// +func SchemaStrings(data ...string) framework.SchemaParser { + return framework.SchemaParserFunc(func() ([]*spec.Definitions, error) { + var defs []*spec.Definitions + for _, content := range data { + var schema spec.Schema + if err := schema.UnmarshalJSON([]byte(content)); err != nil { + return nil, err + } else if schema.Definitions == nil { + return nil, errors.Errorf("inline schema did not contain any definitions") + } + defs = append(defs, &schema.Definitions) + } + return defs, nil + }) +} + +// SchemaFiles returns a SchemaParser that will parse the schemas in the given files. +// This is a helper for use with framework.TemplateProcessor#AdditionalSchemas. +// processor := framework.TemplateProcessor{ +// //... +// AdditionalSchemas: parser.SchemaFiles("path/to/crd-schemas", "path/to/special-schema.json), +// } +func SchemaFiles(paths ...string) SchemaParser { + return SchemaParser{parser{paths: paths, extension: SchemaExtension}} +} + +// SchemaParser is a framework.SchemaParser that can parse files or directories containing openapi schemas. +type SchemaParser struct { + parser +} + +// Parse implements framework.SchemaParser +func (l SchemaParser) Parse() ([]*spec.Definitions, error) { + if l.fs == nil { + l.fs = os.DirFS(".") + } + + var defs []*spec.Definitions + err := l.parse(func(content []byte, name string) error { + var schema spec.Schema + if err := schema.UnmarshalJSON(content); err != nil { + return err + } else if schema.Definitions == nil { + return errors.Errorf("schema %s did not contain any definitions", name) + } + defs = append(defs, &schema.Definitions) + return nil + }) + if err != nil { + return nil, err + } + return defs, nil +} + +// FromFS allows you to replace the filesystem in which the parser will look up the given paths. +// For example, you can use an embed.FS. +func (l SchemaParser) FromFS(fs iofs.FS) SchemaParser { + l.parser.fs = fs + return l +} diff --git a/go/internal/forked/kyaml/fn/framework/parser/schema_test.go b/go/internal/forked/kyaml/fn/framework/parser/schema_test.go new file mode 100644 index 000000000..4bc2c543a --- /dev/null +++ b/go/internal/forked/kyaml/fn/framework/parser/schema_test.go @@ -0,0 +1,100 @@ +// Copyright 2021 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package parser_test + +import ( + _ "embed" + iofs "io/fs" + "os" + "testing" + + "github.com/stretchr/testify/assert" + "github.com/stretchr/testify/require" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/fn/framework/parser" +) + +//go:embed testdata/schema1.json +var schema1String string + +//go:embed testdata/schema2.json +var schema2String string + +func TestSchemaFiles(t *testing.T) { + tests := []struct { + name string + paths []string + fs iofs.FS + expectedCount int + wantErr string + }{ + { + name: "parses schema from file", + paths: []string{"testdata/schema1.json"}, + expectedCount: 1, + }, + { + name: "accepts multiple inputs", + paths: []string{"testdata/schema1.json", "testdata/schema2.json"}, + expectedCount: 2, + }, + { + name: "parses templates from directory", + paths: []string{"testdata"}, + expectedCount: 2, + }, + { + name: "can be configured with an alternative FS", + fs: os.DirFS("testdata"), // changes the root of the input paths + paths: []string{"schema1.json"}, + expectedCount: 1, + }, + { + name: "rejects non-.template.yaml files", + paths: []string{"testdata/ignore.yaml"}, + wantErr: "file testdata/ignore.yaml did not have required extension .json", + }, + } + for _, tt := range tests { + t.Run(tt.name, func(t *testing.T) { + p := parser.SchemaFiles(tt.paths...) + if tt.fs != nil { + p = p.FromFS(tt.fs) + } + schemas, err := p.Parse() + if tt.wantErr != "" { + require.EqualError(t, err, tt.wantErr) + return + } + require.NoError(t, err) + assert.Equal(t, tt.expectedCount, len(schemas)) + }) + } +} + +func TestSchemaStrings(t *testing.T) { + tests := []struct { + name string + data []string + expectedCount int + }{ + { + name: "parses templates from strings", + data: []string{schema1String}, + expectedCount: 1, + }, + { + name: "accepts multiple inputs", + data: []string{schema1String, schema2String}, + expectedCount: 2, + }, + } + for _, tt := range tests { + t.Run(tt.name, func(t *testing.T) { + p := parser.SchemaStrings(tt.data...) + schemas, err := p.Parse() + require.NoError(t, err) + assert.Equal(t, tt.expectedCount, len(schemas)) + }) + } +} diff --git a/go/internal/forked/kyaml/fn/framework/parser/template.go b/go/internal/forked/kyaml/fn/framework/parser/template.go new file mode 100644 index 000000000..93510ca7e --- /dev/null +++ b/go/internal/forked/kyaml/fn/framework/parser/template.go @@ -0,0 +1,97 @@ +// Copyright 2021 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package parser + +import ( + "fmt" + iofs "io/fs" + "os" + "path/filepath" + "text/template" + + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/fn/framework" +) + +const ( + // TemplateExtension is the file extension this package requires template files to have + TemplateExtension = ".template.yaml" +) + +// TemplateStrings returns a TemplateParser that will parse the templates from the given strings. +// +// This is a helper for use with framework.TemplateProcessor's template subfields. Example: +// +// processor := framework.TemplateProcessor{ +// ResourceTemplates: []framework.ResourceTemplate{{ +// Templates: parser.TemplateStrings(` +// apiVersion: apps/v1 +// kind: Deployment +// metadata: +// name: foo +// namespace: default +// annotations: +// {{ .Key }}: {{ .Value }} +// `) +// }}, +// } +func TemplateStrings(data ...string) framework.TemplateParser { + return framework.TemplateParserFunc(func() ([]*template.Template, error) { + var templates []*template.Template + for i := range data { + t, err := template.New(fmt.Sprintf("inline%d", i)).Parse(data[i]) + if err != nil { + return nil, err + } + templates = append(templates, t) + } + return templates, nil + }) +} + +// TemplateFiles returns a TemplateParser that will parse the templates from the given files or directories. +// Only immediate children of any given directories will be parsed. +// All files must end in .template.yaml. +// +// This is a helper for use with framework.TemplateProcessor's template subfields. Example: +// +// processor := framework.TemplateProcessor{ +// ResourceTemplates: []framework.ResourceTemplate{{ +// Templates: parser.TemplateFiles("path/to/templates", "path/to/special.template.yaml") +// }}, +// } +func TemplateFiles(paths ...string) TemplateParser { + return TemplateParser{parser{paths: paths, extension: TemplateExtension}} +} + +// TemplateParser is a framework.TemplateParser that can parse files or directories containing Go templated YAML. +type TemplateParser struct { + parser +} + +// Parse implements framework.TemplateParser +func (l TemplateParser) Parse() ([]*template.Template, error) { + if l.fs == nil { + l.fs = os.DirFS(".") + } + + var templates []*template.Template + err := l.parse(func(content []byte, file string) error { + t, err := template.New(filepath.Base(file)).Parse(string(content)) + if err == nil { + templates = append(templates, t) + } + return err + }) + if err != nil { + return nil, err + } + return templates, nil +} + +// FromFS allows you to replace the filesystem in which the parser will look up the given paths. +// For example, you can use an embed.FS. +func (l TemplateParser) FromFS(fs iofs.FS) TemplateParser { + l.parser.fs = fs + return l +} diff --git a/go/internal/forked/kyaml/fn/framework/parser/template_test.go b/go/internal/forked/kyaml/fn/framework/parser/template_test.go new file mode 100644 index 000000000..a2ea52d0d --- /dev/null +++ b/go/internal/forked/kyaml/fn/framework/parser/template_test.go @@ -0,0 +1,155 @@ +// Copyright 2021 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package parser_test + +import ( + "bytes" + _ "embed" + iofs "io/fs" + "os" + "sort" + "strings" + "testing" + + "github.com/stretchr/testify/assert" + "github.com/stretchr/testify/require" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/fn/framework/parser" +) + +//go:embed testdata/cm1.template.yaml +var cm1String string + +//go:embed testdata/cm2.template.yaml +var cm2String string + +var templateData = struct { + Name string `yaml:"name"` +}{Name: "tester"} + +var cm1Success = strings.TrimSpace(` +apiVersion: v1 +kind: ConfigMap +metadata: + name: appconfig + labels: + app: tester +data: + app: tester +`) + +var cm2Success = strings.TrimSpace(` +apiVersion: v1 +kind: ConfigMap +metadata: + name: env + labels: + app: tester +data: + env: production +`) + +func TestTemplateFiles(t *testing.T) { + tests := []struct { + name string + paths []string + fs iofs.FS + expected []string + wantErr string + }{ + { + name: "parses templates from file", + paths: []string{"testdata/cm1.template.yaml"}, + expected: []string{cm1Success}, + }, + { + name: "accepts multiple inputs", + paths: []string{"testdata/cm1.template.yaml", "testdata/cm2.template.yaml"}, + expected: []string{cm1Success, cm2Success}, + }, + { + name: "parses templates from directory", + paths: []string{"testdata"}, + expected: []string{cm1Success, cm2Success}, + }, + { + name: "can be configured with an alternative FS", + fs: os.DirFS("testdata"), // changes the root of the input paths + paths: []string{"cm1.template.yaml"}, + expected: []string{cm1Success}, + }, + { + name: "rejects non-.template.yaml files", + paths: []string{"testdata/ignore.yaml"}, + wantErr: "file testdata/ignore.yaml did not have required extension .template.yaml", + }, + } + for _, tt := range tests { + t.Run(tt.name, func(t *testing.T) { + p := parser.TemplateFiles(tt.paths...) + if tt.fs != nil { + p = p.FromFS(tt.fs) + } + templates, err := p.Parse() + if tt.wantErr != "" { + require.EqualError(t, err, tt.wantErr) + return + } + require.NoError(t, err) + + result := []string{} + for _, template := range templates { + w := bytes.NewBuffer([]byte{}) + err := template.Execute(w, templateData) + require.NoError(t, err) + result = append(result, strings.TrimSpace(w.String())) + } + sort.Strings(tt.expected) + sort.Strings(result) + assert.Equal(t, len(result), len(tt.expected)) + for i := range tt.expected { + assert.YAMLEq(t, tt.expected[i], result[i]) + } + }) + } +} + +func TestTemplateStrings(t *testing.T) { + tests := []struct { + name string + data []string + expected []string + }{ + { + name: "parses templates from strings", + data: []string{cm1String}, + expected: []string{cm1Success}, + }, + { + name: "accepts multiple inputs", + data: []string{cm1String, cm2String}, + expected: []string{cm1Success, cm2Success}, + }, + } + for _, tt := range tests { + t.Run(tt.name, func(t *testing.T) { + p := parser.TemplateStrings(tt.data...) + templates, err := p.Parse() + require.NoError(t, err) + + result := []string{} + for _, template := range templates { + w := bytes.NewBuffer([]byte{}) + err := template.Execute(w, templateData) + require.NoError(t, err) + result = append(result, strings.TrimSpace(w.String())) + } + sort.Strings(tt.expected) + sort.Strings(result) + assert.Equal(t, len(result), len(tt.expected)) + for i := range tt.expected { + assert.YAMLEq(t, tt.expected[i], result[i]) + } + }) + } +} diff --git a/go/internal/forked/kyaml/fn/framework/parser/testdata/cm1.template.yaml b/go/internal/forked/kyaml/fn/framework/parser/testdata/cm1.template.yaml new file mode 100644 index 000000000..ab6cf4dae --- /dev/null +++ b/go/internal/forked/kyaml/fn/framework/parser/testdata/cm1.template.yaml @@ -0,0 +1,11 @@ +# Copyright 2021 The Kubernetes Authors. +# SPDX-License-Identifier: Apache-2.0 + +apiVersion: v1 +kind: ConfigMap +metadata: + name: appconfig + labels: + app: {{ .Name }} +data: + app: {{ .Name }} diff --git a/go/internal/forked/kyaml/fn/framework/parser/testdata/cm2.template.yaml b/go/internal/forked/kyaml/fn/framework/parser/testdata/cm2.template.yaml new file mode 100644 index 000000000..e02a40f34 --- /dev/null +++ b/go/internal/forked/kyaml/fn/framework/parser/testdata/cm2.template.yaml @@ -0,0 +1,11 @@ +# Copyright 2021 The Kubernetes Authors. +# SPDX-License-Identifier: Apache-2.0 + +apiVersion: v1 +kind: ConfigMap +metadata: + name: env + labels: + app: {{ .Name }} +data: + env: production diff --git a/go/internal/forked/kyaml/fn/framework/parser/testdata/ignore.yaml b/go/internal/forked/kyaml/fn/framework/parser/testdata/ignore.yaml new file mode 100644 index 000000000..450759479 --- /dev/null +++ b/go/internal/forked/kyaml/fn/framework/parser/testdata/ignore.yaml @@ -0,0 +1,4 @@ +# Copyright 2021 The Kubernetes Authors. +# SPDX-License-Identifier: Apache-2.0 + +not: a_resource diff --git a/go/internal/forked/kyaml/fn/framework/parser/testdata/schema1.json b/go/internal/forked/kyaml/fn/framework/parser/testdata/schema1.json new file mode 100644 index 000000000..fdf53675e --- /dev/null +++ b/go/internal/forked/kyaml/fn/framework/parser/testdata/schema1.json @@ -0,0 +1,58 @@ +{ + "definitions": { + "com.example.v1.Foo": { + "type": "object", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + }, + "spec": { + "type": "object", + "required": [ + "targets" + ], + "properties": { + "targets": { + "type": "array", + "x-kubernetes-patch-merge-key": "app", + "x-kubernetes-patch-strategy": "merge", + "items": { + "type": "object", + "required": [ + "app" + ], + "properties": { + "app": { + "type": "string" + }, + "size": { + "type": "string" + }, + "type": { + "type": "string" + } + } + } + } + } + } + }, + "x-kubernetes-group-version-kind": [ + { + "group": "example.com", + "kind": "Foo", + "version": "v1" + } + ] + } + } +} diff --git a/go/internal/forked/kyaml/fn/framework/parser/testdata/schema2.json b/go/internal/forked/kyaml/fn/framework/parser/testdata/schema2.json new file mode 100644 index 000000000..6daa2c177 --- /dev/null +++ b/go/internal/forked/kyaml/fn/framework/parser/testdata/schema2.json @@ -0,0 +1,58 @@ +{ + "definitions": { + "com.example.v1.Bar": { + "type": "object", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + }, + "spec": { + "type": "object", + "required": [ + "targets" + ], + "properties": { + "targets": { + "type": "array", + "x-kubernetes-patch-merge-key": "app", + "x-kubernetes-patch-strategy": "merge", + "items": { + "type": "object", + "required": [ + "app" + ], + "properties": { + "app": { + "type": "string" + }, + "size": { + "type": "string" + }, + "type": { + "type": "string" + } + } + } + } + } + } + }, + "x-kubernetes-group-version-kind": [ + { + "group": "example.com", + "kind": "Bar", + "version": "v1" + } + ] + } + } +} diff --git a/go/internal/forked/kyaml/fn/framework/patch.go b/go/internal/forked/kyaml/fn/framework/patch.go new file mode 100644 index 000000000..82433d5b5 --- /dev/null +++ b/go/internal/forked/kyaml/fn/framework/patch.go @@ -0,0 +1,241 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package framework + +import ( + "bytes" + "fmt" + "strings" + "text/template" + + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/errors" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/kio" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/openapi" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml/merge2" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml/walk" +) + +// ResourcePatchTemplate applies a patch to a collection of resources +type ResourcePatchTemplate struct { + // Templates provides a list of templates to render into one or more patches. + Templates TemplateParser + + // Selector targets the rendered patches to specific resources. If no Selector is provided, + // all resources will be patched. + // + // Although any Filter can be used, this framework provides several especially for Selector use: + // framework.Selector, framework.AndSelector, framework.OrSelector. You can also use any of the + // framework's ResourceMatchers here directly. + Selector kio.Filter + + // TemplateData is the data to use when rendering the templates provided by the Templates field. + TemplateData interface{} +} + +// DefaultTemplateData sets TemplateData to the provided default values if it has not already +// been set. +func (t *ResourcePatchTemplate) DefaultTemplateData(data interface{}) { + if t.TemplateData == nil { + t.TemplateData = data + } +} + +// Filter applies the ResourcePatchTemplate to the appropriate resources in the input. +// First, it applies the Selector to identify target resources. Then, it renders the Templates +// into patches using TemplateData. Finally, it identifies applies the patch to each resource. +func (t ResourcePatchTemplate) Filter(items []*yaml.RNode) ([]*yaml.RNode, error) { + var err error + target := items + if t.Selector != nil { + target, err = t.Selector.Filter(items) + if err != nil { + return nil, err + } + } + if len(target) == 0 { + // nothing to do + return items, nil + } + + if err := t.apply(target); err != nil { + return nil, errors.Wrap(err) + } + return items, nil +} + +func (t *ResourcePatchTemplate) apply(matches []*yaml.RNode) error { + templates, err := t.Templates.Parse() + if err != nil { + return errors.Wrap(err) + } + var patches []*yaml.RNode + for i := range templates { + newP, err := renderPatches(templates[i], t.TemplateData) + if err != nil { + return errors.Wrap(err) + } + patches = append(patches, newP...) + } + + // apply the patches to the matching resources + for j := range matches { + for i := range patches { + matches[j], err = merge2.Merge(patches[i], matches[j], yaml.MergeOptions{}) + if err != nil { + return errors.WrapPrefixf(err, "failed to apply templated patch") + } + } + } + return nil +} + +// ContainerPatchTemplate defines a patch to be applied to containers +type ContainerPatchTemplate struct { + // Templates provides a list of templates to render into one or more patches that apply at the container level. + // For example, "name", "env" and "image" would be top-level fields in container patches. + Templates TemplateParser + + // Selector targets the rendered patches to containers within specific resources. + // If no Selector is provided, all resources with containers will be patched (subject to + // ContainerMatcher, if provided). + // + // Although any Filter can be used, this framework provides several especially for Selector use: + // framework.Selector, framework.AndSelector, framework.OrSelector. You can also use any of the + // framework's ResourceMatchers here directly. + Selector kio.Filter + + // TemplateData is the data to use when rendering the templates provided by the Templates field. + TemplateData interface{} + + // ContainerMatcher targets the rendered patch to only those containers it matches. + // For example, it can be used with ContainerNameMatcher to patch only containers with + // specific names. If no ContainerMatcher is provided, all containers will be patched. + // + // The node passed to ContainerMatcher will be container-level, not a full resource node. + // For example, "name", "env" and "image" would be top level fields. + // To filter based on resource-level context, use the Selector field. + ContainerMatcher func(node *yaml.RNode) bool +} + +// DefaultTemplateData sets TemplateData to the provided default values if it has not already +// been set. +func (cpt *ContainerPatchTemplate) DefaultTemplateData(data interface{}) { + if cpt.TemplateData == nil { + cpt.TemplateData = data + } +} + +// Filter applies the ContainerPatchTemplate to the appropriate resources in the input. +// First, it applies the Selector to identify target resources. Then, it renders the Templates +// into patches using TemplateData. Finally, it identifies target containers and applies the +// patches. +func (cpt ContainerPatchTemplate) Filter(items []*yaml.RNode) ([]*yaml.RNode, error) { + var err error + target := items + if cpt.Selector != nil { + target, err = cpt.Selector.Filter(items) + if err != nil { + return nil, err + } + } + if len(target) == 0 { + // nothing to do + return items, nil + } + + if err := cpt.apply(target); err != nil { + return nil, err + } + + return items, nil +} + +// PatchContainers applies the patch to each matching container in each resource. +func (cpt ContainerPatchTemplate) apply(matches []*yaml.RNode) error { + templates, err := cpt.Templates.Parse() + if err != nil { + return errors.Wrap(err) + } + var patches []*yaml.RNode + for i := range templates { + newP, err := renderPatches(templates[i], cpt.TemplateData) + if err != nil { + return errors.Wrap(err) + } + patches = append(patches, newP...) + } + + for i := range matches { + containers, err := matches[i].Pipe(yaml.LookupFirstMatch(yaml.ConventionalContainerPaths)) + if err != nil { + return errors.Wrap(err) + } + if containers == nil { + continue + } + err = containers.VisitElements(func(node *yaml.RNode) error { + if cpt.ContainerMatcher != nil && !cpt.ContainerMatcher(node) { + return nil + } + for j := range patches { + merger := walk.Walker{ + Sources: []*yaml.RNode{node, patches[j]}, // dest, src + Visitor: merge2.Merger{}, + MergeOptions: yaml.MergeOptions{}, + Schema: openapi.SchemaForResourceType(yaml.TypeMeta{ + APIVersion: "v1", + Kind: "Pod", + }).Lookup("spec", "containers").Elements(), + } + _, err = merger.Walk() + if err != nil { + return errors.WrapPrefixf(err, "failed to apply templated patch") + } + } + return nil + }) + if err != nil { + return errors.Wrap(err) + } + } + return nil +} + +func renderPatches(t *template.Template, data interface{}) ([]*yaml.RNode, error) { + // render the patches + var b bytes.Buffer + if err := t.Execute(&b, data); err != nil { + return nil, errors.WrapPrefixf(err, "failed to render patch template %v", t.DefinedTemplates()) + } + + // parse the patches into RNodes + var nodes []*yaml.RNode + for _, s := range strings.Split(b.String(), "\n---\n") { + s = strings.TrimSpace(s) + if s == "" { + continue + } + r := &kio.ByteReader{Reader: bytes.NewBufferString(s), OmitReaderAnnotations: true} + newNodes, err := r.Read() + if err != nil { + return nil, errors.WrapPrefixf(err, + "failed to parse rendered patch template into a resource:\n%s\n", addLineNumbers(s)) + } + if err := yaml.ErrorIfAnyInvalidAndNonNull(yaml.MappingNode, newNodes...); err != nil { + return nil, errors.WrapPrefixf(err, + "failed to parse rendered patch template into a resource:\n%s\n", addLineNumbers(s)) + } + nodes = append(nodes, newNodes...) + } + return nodes, nil +} + +func addLineNumbers(s string) string { + lines := strings.Split(s, "\n") + for j := range lines { + lines[j] = fmt.Sprintf("%03d %s", j+1, lines[j]) + } + return strings.Join(lines, "\n") +} diff --git a/go/internal/forked/kyaml/fn/framework/patch_test.go b/go/internal/forked/kyaml/fn/framework/patch_test.go new file mode 100644 index 000000000..dba7b8724 --- /dev/null +++ b/go/internal/forked/kyaml/fn/framework/patch_test.go @@ -0,0 +1,85 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package framework_test + +import ( + "testing" + + "github.com/spf13/cobra" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/fn/framework" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/fn/framework/parser" + + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/fn/framework/command" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/fn/framework/frameworktestutil" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/kio" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" +) + +func TestResourcePatchTemplate_ComplexSelectors(t *testing.T) { + cmdFn := func() *cobra.Command { + type api struct { + Selector framework.Selector `json:"selector" yaml:"selector"` + A string `json:"a" yaml:"a"` + B string `json:"b" yaml:"b"` + Special string `json:"special" yaml:"special"` + LongList bool + } + var config api + filter := framework.Selector{ + // this is a special manual filter for the Selector for when the built-in matchers + // are insufficient + ResourceMatcher: func(rn *yaml.RNode) bool { + m, _ := rn.GetMeta() + return config.Special != "" && m.Annotations["foo"] == config.Special + }, + } + pt1 := framework.ResourcePatchTemplate{ + // Apply these rendered patches + Templates: parser.TemplateStrings(` +spec: + template: + spec: + containers: + - name: foo + image: example/sidecar:{{ .B }} +--- +metadata: + annotations: + patched: '{{ .A }}' +{{- if .LongList }} + long: 'true' +{{- end }} +`), + // Use the selector from the input + Selector: &config.Selector, + } + + pt2 := framework.ResourcePatchTemplate{ + // Apply these rendered patches + Templates: parser.TemplateStrings(` +metadata: + annotations: + filterPatched: '{{ .A }}' +`), + // Use an explicit selector + Selector: &filter, + } + + fn := framework.TemplateProcessor{ + TemplateData: &config, + PreProcessFilters: []kio.Filter{kio.FilterFunc(func(items []*yaml.RNode) ([]*yaml.RNode, error) { + // do some extra processing based on the inputs + config.LongList = len(items) > 2 + return items, nil + })}, + PatchTemplates: []framework.PatchTemplate{&pt1, &pt2}, + } + + return command.Build(fn, command.StandaloneEnabled, false) + } + + tc := frameworktestutil.CommandResultsChecker{Command: cmdFn, + TestDataDirectory: "testdata/patch-selector"} + tc.Assert(t) +} diff --git a/go/internal/forked/kyaml/fn/framework/processors.go b/go/internal/forked/kyaml/fn/framework/processors.go new file mode 100644 index 000000000..c53f30862 --- /dev/null +++ b/go/internal/forked/kyaml/fn/framework/processors.go @@ -0,0 +1,347 @@ +// Copyright 2021 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package framework + +import ( + "strings" + + "k8s.io/kube-openapi/pkg/validation/spec" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/errors" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/kio" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/kio/filters" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/openapi" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" +) + +// SimpleProcessor processes a ResourceList by loading the FunctionConfig into +// the given Config type and then running the provided Filter on the ResourceList. +// The provided Config MAY implement Defaulter and Validator to have Default and Validate +// respectively called between unmarshalling and filter execution. +// +// Typical uses include functions that do not actually require config, and simple functions built +// with a filter that closes over the Config instance to access ResourceList.functionConfig values. +type SimpleProcessor struct { + // Filter is the kio.Filter that will be used to process the ResourceList's items. + // Note that kio.FilterFunc is available to transform a compatible func into a kio.Filter. + Filter kio.Filter + // Config must be a struct capable of receiving the data from ResourceList.functionConfig. + // Filter functions may close over this struct to access its data. + Config interface{} +} + +// Process makes SimpleProcessor implement the ResourceListProcessor interface. +// It loads the ResourceList.functionConfig into the provided Config type, applying +// defaulting and validation if supported by Config. It then executes the processor's filter. +func (p SimpleProcessor) Process(rl *ResourceList) error { + if err := LoadFunctionConfig(rl.FunctionConfig, p.Config); err != nil { + return errors.Wrap(err) + } + return errors.Wrap(rl.Filter(p.Filter)) +} + +// GVKFilterMap is a FilterProvider that resolves Filters through a simple lookup in a map. +// It is intended for use in VersionedAPIProcessor. +type GVKFilterMap map[string]map[string]kio.Filter + +// ProviderFor makes GVKFilterMap implement the FilterProvider interface. +// It uses the given apiVersion and kind to do a simple lookup in the map and +// returns an error if no exact match is found. +func (m GVKFilterMap) ProviderFor(apiVersion, kind string) (kio.Filter, error) { + if kind == "" { + return nil, errors.Errorf("kind is required") + } + if apiVersion == "" { + return nil, errors.Errorf("apiVersion is required") + } + + var ok bool + var versionMap map[string]kio.Filter + if versionMap, ok = m[kind]; !ok { + return nil, errors.Errorf("kind %q is not supported", kind) + } + + var p kio.Filter + if p, ok = versionMap[apiVersion]; !ok { + return nil, errors.Errorf("apiVersion %q is not supported for kind %q", apiVersion, kind) + } + return p, nil +} + +// FilterProvider is implemented by types that provide a way to look up which Filter +// should be used to process a ResourceList based on the ApiVersion and Kind of the +// ResourceList.functionConfig in the input. FilterProviders are intended to be used +// as part of VersionedAPIProcessor. +type FilterProvider interface { + // ProviderFor returns the appropriate filter for the given APIVersion and Kind. + ProviderFor(apiVersion, kind string) (kio.Filter, error) +} + +// FilterProviderFunc converts a compatible function to a FilterProvider. +type FilterProviderFunc func(apiVersion, kind string) (kio.Filter, error) + +// ProviderFor makes FilterProviderFunc implement FilterProvider. +func (f FilterProviderFunc) ProviderFor(apiVersion, kind string) (kio.Filter, error) { + return f(apiVersion, kind) +} + +// VersionedAPIProcessor selects the appropriate kio.Filter based on the ApiVersion +// and Kind of the ResourceList.functionConfig in the input. +// It can be used to implement configuration function APIs that evolve over time, +// or create processors that support multiple configuration APIs with a single entrypoint. +// All provided Filters MUST be structs capable of receiving ResourceList.functionConfig data. +// Provided Filters MAY implement Defaulter and Validator to have Default and Validate +// respectively called between unmarshalling and filter execution. +type VersionedAPIProcessor struct { + // FilterProvider resolves a kio.Filter for each supported API, based on its APIVersion and Kind. + // GVKFilterMap is a simple FilterProvider implementation for use here. + FilterProvider FilterProvider +} + +// Process makes VersionedAPIProcessor implement the ResourceListProcessor interface. +// It looks up the configuration object to use based on the ApiVersion and Kind of the +// input ResourceList.functionConfig, loads ResourceList.functionConfig into that object, +// invokes Validate and Default if supported, and finally invokes Filter. +func (p *VersionedAPIProcessor) Process(rl *ResourceList) error { + api, err := p.FilterProvider.ProviderFor(extractGVK(rl.FunctionConfig)) + if err != nil { + return errors.WrapPrefixf(err, "unable to identify provider for resource") + } + if err := LoadFunctionConfig(rl.FunctionConfig, api); err != nil { + return errors.Wrap(err) + } + return errors.Wrap(rl.Filter(api)) +} + +// extractGVK returns the apiVersion and kind fields from the given RNodes if it contains +// valid TypeMeta. It returns an empty string if a value is not found. +func extractGVK(src *yaml.RNode) (apiVersion, kind string) { + if src == nil { + return "", "" + } + if versionNode := src.Field("apiVersion"); versionNode != nil { + if a, err := versionNode.Value.String(); err == nil { + apiVersion = strings.TrimSpace(a) + } + } + if kindNode := src.Field("kind"); kindNode != nil { + if k, err := kindNode.Value.String(); err == nil { + kind = strings.TrimSpace(k) + } + } + return apiVersion, kind +} + +// LoadFunctionConfig reads a configuration resource from YAML into the provided data structure +// and then prepares it for use by running defaulting and validation on it, if supported. +// ResourceListProcessors should use this function to load ResourceList.functionConfig. +func LoadFunctionConfig(src *yaml.RNode, api interface{}) error { + if api == nil { + return nil + } + if err := yaml.Unmarshal([]byte(src.MustString()), api); err != nil { + return errors.Wrap(err) + } + + if d, ok := api.(Defaulter); ok { + if err := d.Default(); err != nil { + return err + } + } + + if v, ok := api.(Validator); ok { + return v.Validate() + } + return nil +} + +// TemplateProcessor is a ResourceListProcessor based on rendering templates with the data in +// ResourceList.functionConfig. It works as follows: +// - loads ResourceList.functionConfig into TemplateData +// - runs PreProcessFilters +// - renders ResourceTemplates and adds them to ResourceList.items +// - renders PatchTemplates and applies them to ResourceList.items +// - executes a merge on ResourceList.items if configured to +// - runs PostProcessFilters +// The TemplateData struct MAY implement Defaulter and Validator to have Default and Validate +// respectively called between unmarshalling and filter execution. +// +// TemplateProcessor also implements kio.Filter directly and can be used in the construction of +// higher-level processors. For example, you might use TemplateProcessors as the filters for each +// API supported by a VersionedAPIProcessor (see VersionedAPIProcessor examples). +type TemplateProcessor struct { + // TemplateData will will be exposed to all the templates in the processor (unless explicitly + // overridden for a template). + // If TemplateProcessor is used directly as a ResourceListProcessor, TemplateData will contain the + // value of ResourceList.functionConfig. + TemplateData interface{} + + // ResourceTemplates returns a list of templates to render into resources. + // If MergeResources is set, any matching resources in ResourceList.items will be used as patches + // modifying the rendered templates. Otherwise, the rendered resources will be appended to + // the input resources as-is. + ResourceTemplates []ResourceTemplate + + // PatchTemplates is a list of templates to render into patches that apply to ResourceList.items. + // ResourcePatchTemplate can be used here to patch entire resources. + // ContainerPatchTemplate can be used here to patch specific containers within resources. + PatchTemplates []PatchTemplate + + // MergeResources, if set to true, will cause the resources in ResourceList.items to be + // will be applied as patches on any matching resources generated by ResourceTemplates. + MergeResources bool + + // PreProcessFilters provides a hook to manipulate the ResourceList's items or config after + // TemplateData has been populated but before template-based filters are applied. + PreProcessFilters []kio.Filter + + // PostProcessFilters provides a hook to manipulate the ResourceList's items after template + // filters are applied. + PostProcessFilters []kio.Filter + + // AdditionalSchemas is a function that returns a list of schema definitions to add to openapi. + // This enables correct merging of custom resource fields. + AdditionalSchemas SchemaParser +} + +type SchemaParser interface { + Parse() ([]*spec.Definitions, error) +} + +type SchemaParserFunc func() ([]*spec.Definitions, error) + +func (s SchemaParserFunc) Parse() ([]*spec.Definitions, error) { + return s() +} + +// Filter implements the kio.Filter interface, enabling you to use TemplateProcessor +// as part of a higher-level ResourceListProcessor like VersionedAPIProcessor. +// It sets up all the features of TemplateProcessors as a pipeline of filters and executes them. +func (tp TemplateProcessor) Filter(items []*yaml.RNode) ([]*yaml.RNode, error) { + if tp.AdditionalSchemas != nil { + defs, err := tp.AdditionalSchemas.Parse() + if err != nil { + return nil, errors.WrapPrefixf(err, "parsing AdditionalSchemas") + } + defer openapi.ResetOpenAPI() + for i := range defs { + openapi.AddDefinitions(*defs[i]) + } + } + + buf := &kio.PackageBuffer{Nodes: items} + pipeline := kio.Pipeline{ + Inputs: []kio.Reader{buf}, + Filters: []kio.Filter{ + kio.FilterFunc(tp.doPreProcess), + kio.FilterFunc(tp.doResourceTemplates), + kio.FilterFunc(tp.doPatchTemplates), + kio.FilterFunc(tp.doMerge), + kio.FilterFunc(tp.doPostProcess), + }, + Outputs: []kio.Writer{buf}, + ContinueOnEmptyResult: true, + } + if err := pipeline.Execute(); err != nil { + return nil, err + } + + return buf.Nodes, nil +} + +// Process implements the ResourceListProcessor interface, enabling you to use TemplateProcessor +// directly as a processor. As a Processor, it loads the ResourceList.functionConfig into the +// TemplateData field, exposing it to all templates by default. +func (tp TemplateProcessor) Process(rl *ResourceList) error { + if err := LoadFunctionConfig(rl.FunctionConfig, tp.TemplateData); err != nil { + return errors.Wrap(err) + } + return errors.Wrap(rl.Filter(tp)) +} + +// PatchTemplate is implemented by kio.Filters that work by rendering patches and applying them to +// the given resource nodes. +type PatchTemplate interface { + // Filter is a kio.Filter-compliant function that applies PatchTemplate's templates as patches + // on the given resource nodes. + Filter(items []*yaml.RNode) ([]*yaml.RNode, error) + // DefaultTemplateData accepts default data to be used in template rendering when no template + // data was explicitly provided to the PatchTemplate. + DefaultTemplateData(interface{}) +} + +func (tp *TemplateProcessor) doPreProcess(items []*yaml.RNode) ([]*yaml.RNode, error) { + if tp.PreProcessFilters == nil { + return items, nil + } + for i := range tp.PreProcessFilters { + filter := tp.PreProcessFilters[i] + var err error + items, err = filter.Filter(items) + if err != nil { + return nil, err + } + } + return items, nil +} + +func (tp *TemplateProcessor) doMerge(items []*yaml.RNode) ([]*yaml.RNode, error) { + var err error + if tp.MergeResources { + items, err = filters.MergeFilter{}.Filter(items) + } + return items, err +} + +func (tp *TemplateProcessor) doPostProcess(items []*yaml.RNode) ([]*yaml.RNode, error) { + if tp.PostProcessFilters == nil { + return items, nil + } + for i := range tp.PostProcessFilters { + filter := tp.PostProcessFilters[i] + var err error + items, err = filter.Filter(items) + if err != nil { + return nil, err + } + } + return items, nil +} + +func (tp *TemplateProcessor) doResourceTemplates(items []*yaml.RNode) ([]*yaml.RNode, error) { + if tp.ResourceTemplates == nil { + return items, nil + } + + for i := range tp.ResourceTemplates { + tp.ResourceTemplates[i].DefaultTemplateData(tp.TemplateData) + newItems, err := tp.ResourceTemplates[i].Render() + if err != nil { + return nil, err + } + if tp.MergeResources { + // apply inputs as patches -- add the new items to the front of the list + items = append(newItems, items...) + } else { + // assume these are new unique resources--append to the list + items = append(items, newItems...) + } + } + return items, nil +} + +func (tp *TemplateProcessor) doPatchTemplates(items []*yaml.RNode) ([]*yaml.RNode, error) { + if tp.PatchTemplates == nil { + return items, nil + } + + for i := range tp.PatchTemplates { + // Default the template data for the patch to the processor's data + tp.PatchTemplates[i].DefaultTemplateData(tp.TemplateData) + var err error + if items, err = tp.PatchTemplates[i].Filter(items); err != nil { + return nil, err + } + } + return items, nil +} diff --git a/go/internal/forked/kyaml/fn/framework/processors_test.go b/go/internal/forked/kyaml/fn/framework/processors_test.go new file mode 100644 index 000000000..4f36ff6d8 --- /dev/null +++ b/go/internal/forked/kyaml/fn/framework/processors_test.go @@ -0,0 +1,660 @@ +// Copyright 2021 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package framework_test + +import ( + "bytes" + "regexp" + "strings" + "testing" + + "github.com/stretchr/testify/assert" + "github.com/stretchr/testify/require" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/errors" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/fn/framework" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/fn/framework/frameworktestutil" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/fn/framework/parser" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/openapi" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" + + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/kio" +) + +func TestTemplateProcessor_ResourceTemplates(t *testing.T) { + type API struct { + Image string `json:"image" yaml:"image"` + } + + p := framework.TemplateProcessor{ + TemplateData: &API{}, + ResourceTemplates: []framework.ResourceTemplate{{ + Templates: parser.TemplateFiles("testdata/template-processor/templates/basic"), + }}, + } + + out := new(bytes.Buffer) + rw := &kio.ByteReadWriter{Reader: bytes.NewBufferString(` +apiVersion: config.kubernetes.io/v1 +kind: ResourceList +items: +- apiVersion: v1 + kind: Service +functionConfig: + image: baz +`), + Writer: out} + + require.NoError(t, framework.Execute(p, rw)) + require.Equal(t, strings.TrimSpace(` +apiVersion: config.kubernetes.io/v1 +kind: ResourceList +items: +- apiVersion: v1 + kind: Service +- apiVersion: apps/v1 + kind: Deployment + metadata: + name: foo + namespace: bar + spec: + template: + spec: + containers: + - name: foo + image: baz +functionConfig: + image: baz +`), strings.TrimSpace(out.String())) +} + +func TestTemplateProcessor_PatchTemplates(t *testing.T) { + type API struct { + Spec struct { + Replicas int `json:"replicas" yaml:"replicas"` + A string `json:"a" yaml:"a"` + } `json:"spec" yaml:"spec"` + } + + config := &API{} + p := framework.TemplateProcessor{ + TemplateData: config, + PatchTemplates: []framework.PatchTemplate{ + // Patch from dir with no selector templating + &framework.ResourcePatchTemplate{ + Templates: parser.TemplateFiles("testdata/template-processor/patches/basic"), + Selector: &framework.Selector{Names: []string{"foo"}}, + }, + // Patch from string with selector templating + &framework.ResourcePatchTemplate{ + Selector: &framework.Selector{Names: []string{"{{.Spec.A}}"}, TemplateData: &config}, + Templates: parser.TemplateStrings(` +metadata: + annotations: + baz: buz +`)}, + }, + } + out := new(bytes.Buffer) + + rw := &kio.ByteReadWriter{Reader: bytes.NewBufferString(` +apiVersion: config.kubernetes.io/v1 +kind: ResourceList +items: +- apiVersion: apps/v1 + kind: Deployment + metadata: + name: foo + spec: + template: + spec: + containers: + - name: foo + image: baz +- apiVersion: apps/v1 + kind: Deployment + metadata: + name: bar + spec: + template: + spec: + containers: + - name: foo + image: baz +functionConfig: + spec: + replicas: 5 + a: bar +`), + Writer: out} + + require.NoError(t, framework.Execute(p, rw)) + require.Equal(t, strings.TrimSpace(` +apiVersion: config.kubernetes.io/v1 +kind: ResourceList +items: +- apiVersion: apps/v1 + kind: Deployment + metadata: + name: foo + spec: + template: + spec: + containers: + - name: foo + image: baz + replicas: 5 +- apiVersion: apps/v1 + kind: Deployment + metadata: + name: bar + annotations: + baz: buz + spec: + template: + spec: + containers: + - name: foo + image: baz +functionConfig: + spec: + replicas: 5 + a: bar +`), strings.TrimSpace(out.String())) +} + +func TestTemplateProcessor_ContainerPatchTemplates(t *testing.T) { + type API struct { + Spec struct { + Key string `json:"key" yaml:"key"` + Value string `json:"value" yaml:"value"` + A string `json:"a" yaml:"a"` + } + } + + config := &API{} + p := framework.TemplateProcessor{ + TemplateData: config, + PatchTemplates: []framework.PatchTemplate{ + // patch from dir with no selector templating + &framework.ContainerPatchTemplate{ + Templates: parser.TemplateFiles("testdata/template-processor/container-patches"), + Selector: &framework.Selector{Names: []string{"foo"}}, + }, + // patch from string with selector templating + &framework.ContainerPatchTemplate{ + Selector: &framework.Selector{Names: []string{"{{.Spec.A}}"}, TemplateData: &config}, + Templates: parser.TemplateStrings(` +env: +- name: Foo + value: Bar +`)}, + }, + } + + out := new(bytes.Buffer) + rw := &kio.ByteReadWriter{Reader: bytes.NewBufferString(` +apiVersion: config.kubernetes.io/v1 +kind: ResourceList +items: +- apiVersion: apps/v1 + kind: Deployment + metadata: + name: foo + spec: + template: + spec: + containers: + - name: a + env: + - name: EXISTING + value: variable + - name: b + - name: c +- apiVersion: apps/v1 + kind: Deployment + metadata: + name: bar + spec: + template: + spec: + containers: + - name: foo + image: baz +functionConfig: + spec: + key: Hello + value: World + a: bar +`), + Writer: out} + + require.NoError(t, framework.Execute(p, rw)) + require.Equal(t, strings.TrimSpace(` +apiVersion: config.kubernetes.io/v1 +kind: ResourceList +items: +- apiVersion: apps/v1 + kind: Deployment + metadata: + name: foo + spec: + template: + spec: + containers: + - name: a + env: + - name: EXISTING + value: variable + - name: Hello + value: World + - name: b + env: + - name: Hello + value: World + - name: c + env: + - name: Hello + value: World +- apiVersion: apps/v1 + kind: Deployment + metadata: + name: bar + spec: + template: + spec: + containers: + - name: foo + image: baz + env: + - name: Foo + value: Bar +functionConfig: + spec: + key: Hello + value: World + a: bar +`), strings.TrimSpace(out.String())) +} + +func TestTemplateProcessor_ContainerPatchTemplates_MultipleWorkloadKinds(t *testing.T) { + type API struct { + Spec struct { + Key string `json:"key" yaml:"key"` + Value string `json:"value" yaml:"value"` + A string `json:"a" yaml:"a"` + } + } + config := &API{} + p := framework.TemplateProcessor{ + TemplateData: config, + ResourceTemplates: []framework.ResourceTemplate{{ + Templates: parser.TemplateFiles("testdata/template-processor/templates/container-sources"), + }}, + PatchTemplates: []framework.PatchTemplate{ + &framework.ContainerPatchTemplate{ + Templates: parser.TemplateFiles("testdata/template-processor/container-patches"), + }, + }, + } + + out := new(bytes.Buffer) + rw := &kio.ByteReadWriter{Writer: out, Reader: bytes.NewBufferString(` +apiVersion: config.kubernetes.io/v1 +kind: ResourceList +items: [] +functionConfig: + spec: + key: Hello + value: World + a: bar +`)} + + require.NoError(t, framework.Execute(p, rw)) + resources, err := (&kio.ByteReader{Reader: out}).Read() + require.NoError(t, err) + envRegex := regexp.MustCompile(strings.TrimSpace(` +\s+ env: +\s+ - name: EXISTING +\s+ value: variable +\s+ - name: Hello +\s+ value: World +`)) + require.Equal(t, 9, len(resources)) + for i, r := range resources { + t.Run(r.GetKind(), func(t *testing.T) { + assert.Regexp(t, envRegex, resources[i].MustString()) + }) + } +} + +func TestSimpleProcessor_Process_loads_config(t *testing.T) { + cfg := new(struct { + Value string `yaml:"value"` + }) + p := framework.SimpleProcessor{ + Filter: kio.FilterFunc(func(items []*yaml.RNode) ([]*yaml.RNode, error) { + if cfg.Value != "dataFromResourceList" { + return nil, errors.Errorf("got incorrect config value %q", cfg.Value) + } + return items, nil + }), + Config: &cfg, + } + rl := framework.ResourceList{ + FunctionConfig: yaml.NewMapRNode(&map[string]string{ + "value": "dataFromResourceList", + }), + } + require.NoError(t, p.Process(&rl)) +} + +func TestSimpleProcessor_Process_Error(t *testing.T) { + tests := []struct { + name string + filter kio.Filter + config interface{} + wantErr string + }{ + { + name: "error when given func as Config", + config: func() {}, + wantErr: "cannot unmarshal !!map into func()", + }, + { + name: "error in filter", + wantErr: "err from filter", + filter: kio.FilterFunc(func(_ []*yaml.RNode) ([]*yaml.RNode, error) { + return nil, errors.Errorf("err from filter") + }), + }, + } + for _, tt := range tests { + tt := tt + t.Run(tt.name, func(t *testing.T) { + p := framework.SimpleProcessor{ + Filter: tt.filter, + Config: tt.config, + } + rl := framework.ResourceList{ + FunctionConfig: yaml.NewMapRNode(&map[string]string{ + "value": "dataFromResourceList", + }), + } + err := p.Process(&rl) + require.Error(t, err) + assert.Contains(t, err.Error(), tt.wantErr) + }) + } +} + +func TestVersionedAPIProcessor_Process_Error(t *testing.T) { + tests := []struct { + name string + filterProvider framework.FilterProvider + apiVersion string + kind string + wantErr string + }{ + { + name: "error when given FilterFunc as Filter", + filterProvider: framework.FilterProviderFunc(func(_, _ string) (kio.Filter, error) { + return kio.FilterFunc(func(items []*yaml.RNode) ([]*yaml.RNode, error) { + return items, nil + }), nil + }), + wantErr: "cannot unmarshal !!map into kio.FilterFunc", + }, + { + name: "error in filter", + filterProvider: framework.FilterProviderFunc(func(_, _ string) (kio.Filter, error) { + return &framework.AndSelector{FailOnEmptyMatch: true}, nil + }), + wantErr: "selector did not select any items", + }, + { + name: "error GVKFilterMap no filter for kind", + filterProvider: framework.GVKFilterMap{ + "puppy": { + "pets.example.com/v1beta1": &framework.Selector{}, + }, + }, + kind: "kitten", + apiVersion: "pets.example.com/v1beta1", + wantErr: "kind \"kitten\" is not supported", + }, + { + name: "error GVKFilterMap no filter for version", + filterProvider: framework.GVKFilterMap{ + "kitten": { + "pets.example.com/v1alpha1": &framework.Selector{}, + }, + }, + kind: "kitten", + apiVersion: "pets.example.com/v1beta1", + wantErr: "apiVersion \"pets.example.com/v1beta1\" is not supported for kind \"kitten\"", + }, + { + name: "error GVKFilterMap blank kind", + filterProvider: framework.GVKFilterMap{}, + kind: "", + apiVersion: "pets.example.com/v1beta1", + wantErr: "unable to identify provider for resource: kind is required", + }, + { + name: "error GVKFilterMap blank version", + filterProvider: framework.GVKFilterMap{}, + kind: "kitten", + apiVersion: "", + wantErr: "unable to identify provider for resource: apiVersion is required", + }, + } + for _, tt := range tests { + tt := tt + t.Run(tt.name, func(t *testing.T) { + p := framework.VersionedAPIProcessor{ + FilterProvider: tt.filterProvider, + } + rl := framework.ResourceList{ + FunctionConfig: yaml.NewMapRNode(&map[string]string{ + "apiVersion": tt.apiVersion, + "kind": tt.kind, + }), + } + err := p.Process(&rl) + require.Error(t, err) + assert.Contains(t, err.Error(), tt.wantErr) + }) + } +} + +func TestTemplateProcessor_Process_Error(t *testing.T) { + tests := []struct { + name string + processor framework.TemplateProcessor + wantErr string + }{ + { + name: "ResourcePatchTemplate is not a resource", + processor: framework.TemplateProcessor{ + PatchTemplates: []framework.PatchTemplate{ + &framework.ResourcePatchTemplate{ + Templates: parser.TemplateStrings(`aString +another`), + }}, + }, + wantErr: `failed to parse rendered patch template into a resource: +001 aString +002 another +: wrong Node Kind for expected: MappingNode was ScalarNode: value: {aString another}`, + }, + { + name: "ResourcePatchTemplate is invalid template", + processor: framework.TemplateProcessor{ + PatchTemplates: []framework.PatchTemplate{ + &framework.ResourcePatchTemplate{ + Templates: parser.TemplateStrings("foo: {{ .OOPS }}"), + }}, + }, + wantErr: "can't evaluate field OOPS", + }, + { + name: "ContainerPatchTemplate is not a resource", + processor: framework.TemplateProcessor{ + PatchTemplates: []framework.PatchTemplate{ + &framework.ContainerPatchTemplate{ + Templates: parser.TemplateStrings(`aString +another`), + }}, + }, + wantErr: `failed to parse rendered patch template into a resource: +001 aString +002 another +: wrong Node Kind for expected: MappingNode was ScalarNode: value: {aString another}`, + }, + { + name: "ContainerPatchTemplate is invalid template", + processor: framework.TemplateProcessor{ + PatchTemplates: []framework.PatchTemplate{ + &framework.ContainerPatchTemplate{ + Templates: parser.TemplateStrings("foo: {{ .OOPS }}"), + }}, + }, + wantErr: "can't evaluate field OOPS", + }, + { + name: "ResourceTemplate is not a resource", + processor: framework.TemplateProcessor{ + ResourceTemplates: []framework.ResourceTemplate{{ + Templates: parser.TemplateStrings(`aString +another`), + }}, + }, + wantErr: `failed to parse rendered template into a resource: +001 aString +002 another +: wrong Node Kind for expected: MappingNode was ScalarNode: value: {aString another}`, + }, + { + name: "ResourceTemplate is invalid template", + processor: framework.TemplateProcessor{ + ResourceTemplates: []framework.ResourceTemplate{{ + Templates: parser.TemplateStrings("foo: {{ .OOPS }}"), + }}, + }, + wantErr: "can't evaluate field OOPS", + }, + } + for _, tt := range tests { + tt := tt + t.Run(tt.name, func(t *testing.T) { + rl := framework.ResourceList{ + Items: []*yaml.RNode{ + yaml.MustParse(` +kind: Deployment +apiVersion: apps/v1 +metadata: + name: foo +spec: + replicas: 5 + template: + spec: + containers: + - name: foo +`), + }, + FunctionConfig: yaml.NewMapRNode(&map[string]string{ + "value": "dataFromResourceList", + }), + } + tt.processor.TemplateData = new(struct { + Value string `yaml:"value"` + }) + err := tt.processor.Process(&rl) + require.Error(t, err) + assert.Contains(t, err.Error(), tt.wantErr) + }) + } +} + +func TestTemplateProcessor_AdditionalSchemas(t *testing.T) { + p := framework.TemplateProcessor{ + AdditionalSchemas: parser.SchemaFiles("testdata/template-processor/schemas"), + ResourceTemplates: []framework.ResourceTemplate{{ + Templates: parser.TemplateFiles("testdata/template-processor/templates/custom-resource/foo.template.yaml"), + }}, + PatchTemplates: []framework.PatchTemplate{ + &framework.ResourcePatchTemplate{ + Templates: parser.TemplateFiles("testdata/template-processor/patches/custom-resource/patch.template.yaml")}, + }, + } + out := new(bytes.Buffer) + + rw := &kio.ByteReadWriter{Reader: bytes.NewBufferString(` +apiVersion: config.kubernetes.io/v1 +kind: ResourceList +items: +- apiVersion: example.com/v1 + kind: Foo + metadata: + name: source + spec: + targets: + - app: C + size: medium +`), + Writer: out} + require.NoError(t, framework.Execute(p, rw)) + require.Equal(t, strings.TrimSpace(` +apiVersion: config.kubernetes.io/v1 +kind: ResourceList +items: +- apiVersion: example.com/v1 + kind: Foo + metadata: + name: source + spec: + targets: + - app: C + size: large + type: Ruby + - app: B + size: small +- apiVersion: example.com/v1 + kind: Foo + metadata: + name: example + spec: + targets: + - app: A + type: Go + size: small + - app: B + type: Go + size: small + - app: C + type: Ruby + size: large +`), strings.TrimSpace(out.String())) + found := openapi.SchemaForResourceType(yaml.TypeMeta{ + APIVersion: "example.com/v1", + Kind: "Foo", + }) + require.Nil(t, found, "openAPI schema was not reset") +} + +func TestTemplateProcessor_Validator(t *testing.T) { + // This test proves the Validate method is called when implemented + // and demonstrates the use of ProcessorResultsChecker's error matching + p := func() framework.ResourceListProcessor { + return &framework.VersionedAPIProcessor{FilterProvider: framework.GVKFilterMap{ + "JavaSpringBoot": { + "example.com/v1alpha1": &v1alpha1JavaSpringBoot{}, + }}} + } + c := frameworktestutil.ProcessorResultsChecker{ + TestDataDirectory: "testdata/validation", + Processor: p, + } + c.Assert(t) +} diff --git a/go/internal/forked/kyaml/fn/framework/result.go b/go/internal/forked/kyaml/fn/framework/result.go new file mode 100644 index 000000000..bf242c0a3 --- /dev/null +++ b/go/internal/forked/kyaml/fn/framework/result.go @@ -0,0 +1,241 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package framework + +import ( + "fmt" + "sort" + "strings" + + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" +) + +// Severity indicates the severity of the Result +type Severity string + +const ( + // Error indicates the result is an error. Will cause the function to exit non-0. + Error Severity = "error" + // Warning indicates the result is a warning + Warning Severity = "warning" + // Info indicates the result is an informative message + Info Severity = "info" +) + +// Result defines a validation result +type Result struct { + // Message is a human readable message. This field is required. + Message string `yaml:"message,omitempty" json:"message,omitempty"` + + // Severity is the severity of this result + Severity Severity `yaml:"severity,omitempty" json:"severity,omitempty"` + + // ResourceRef is a reference to a resource. + // Required fields: apiVersion, kind, name. + ResourceRef *yaml.ResourceIdentifier `yaml:"resourceRef,omitempty" json:"resourceRef,omitempty"` + + // Field is a reference to the field in a resource this result refers to + Field *Field `yaml:"field,omitempty" json:"field,omitempty"` + + // File references a file containing the resource this result refers to + File *File `yaml:"file,omitempty" json:"file,omitempty"` + + // Tags is an unstructured key value map stored with a result that may be set + // by external tools to store and retrieve arbitrary metadata + Tags map[string]string `yaml:"tags,omitempty" json:"tags,omitempty"` +} + +// String provides a human-readable message for the result item +func (i Result) String() string { + identifier := i.ResourceRef + var idStringList []string + if identifier != nil { + if identifier.APIVersion != "" { + idStringList = append(idStringList, identifier.APIVersion) + } + if identifier.Kind != "" { + idStringList = append(idStringList, identifier.Kind) + } + if identifier.Namespace != "" { + idStringList = append(idStringList, identifier.Namespace) + } + if identifier.Name != "" { + idStringList = append(idStringList, identifier.Name) + } + } + formatString := "[%s]" + severity := i.Severity + // We default Severity to Info when converting a result to a message. + if i.Severity == "" { + severity = Info + } + list := []interface{}{severity} + if len(idStringList) > 0 { + formatString += " %s" + list = append(list, strings.Join(idStringList, "/")) + } + if i.Field != nil { + formatString += " %s" + list = append(list, i.Field.Path) + } + formatString += ": %s" + list = append(list, i.Message) + return fmt.Sprintf(formatString, list...) +} + +func (i Result) Error() string { + return (i).String() +} + +// File references a file containing a resource +type File struct { + // Path is relative path to the file containing the resource. + // This field is required. + Path string `yaml:"path,omitempty" json:"path,omitempty"` + + // Index is the index into the file containing the resource + // (i.e. if there are multiple resources in a single file) + Index int `yaml:"index,omitempty" json:"index,omitempty"` +} + +// Field references a field in a resource +type Field struct { + // Path is the field path. This field is required. + Path string `yaml:"path,omitempty" json:"path,omitempty"` + + // CurrentValue is the current field value + CurrentValue interface{} `yaml:"currentValue,omitempty" json:"currentValue,omitempty"` + + // ProposedValue is the proposed value of the field to fix an issue. + ProposedValue interface{} `yaml:"proposedValue,omitempty" json:"proposedValue,omitempty"` +} + +type Results []*Result + +// Error enables Results to be returned as an error +func (e Results) Error() string { + var msgs []string + for _, i := range e { + msgs = append(msgs, i.String()) + } + return strings.Join(msgs, "\n\n") +} + +// ExitCode provides the exit code based on the result's severity +func (e Results) ExitCode() int { + for _, i := range e { + if i.Severity == Error { + return 1 + } + } + return 0 +} + +// Sort performs an in place stable sort of Results +func (e Results) Sort() { + sort.SliceStable(e, func(i, j int) bool { + if fileLess(e, i, j) != 0 { + return fileLess(e, i, j) < 0 + } + if severityLess(e, i, j) != 0 { + return severityLess(e, i, j) < 0 + } + return resultToString(*e[i]) < resultToString(*e[j]) + }) +} + +func severityLess(items Results, i, j int) int { + severityToNumber := map[Severity]int{ + Error: 0, + Warning: 1, + Info: 2, + } + + severityLevelI, found := severityToNumber[items[i].Severity] + if !found { + severityLevelI = 3 + } + severityLevelJ, found := severityToNumber[items[j].Severity] + if !found { + severityLevelJ = 3 + } + return severityLevelI - severityLevelJ +} + +func fileLess(items Results, i, j int) int { + var fileI, fileJ File + if items[i].File == nil { + fileI = File{} + } else { + fileI = *items[i].File + } + if items[j].File == nil { + fileJ = File{} + } else { + fileJ = *items[j].File + } + if fileI.Path != fileJ.Path { + if fileI.Path < fileJ.Path { + return -1 + } else { + return 1 + } + } + return fileI.Index - fileJ.Index +} + +func resultToString(item Result) string { + return fmt.Sprintf("resource-ref:%s,field:%s,message:%s", + item.ResourceRef, item.Field, item.Message) +} + +func ErrorConfigFileResult(err error, path string) *Result { + return ConfigFileResult(err.Error(), path, Error) +} + +func ConfigFileResult(msg, path string, severity Severity) *Result { + return &Result{ + Message: msg, + Severity: severity, + File: &File{ + Path: path, + }, + } +} + +func ErrorResult(err error) *Result { + return GeneralResult(err.Error(), Error) +} + +func GeneralResult(msg string, severity Severity) *Result { + return &Result{ + Message: msg, + Severity: severity, + } +} + +func ErrorConfigObjectResult(err error, rn *yaml.RNode) *Result { + return ConfigObjectResult(err.Error(), rn, Error) +} + +func ConfigObjectResult(msg string, rn *yaml.RNode, severity Severity) *Result { + return &Result{ + Message: msg, + Severity: severity, + ResourceRef: &yaml.ResourceIdentifier{ + TypeMeta: yaml.TypeMeta{ + APIVersion: rn.GetApiVersion(), + Kind: rn.GetKind(), + }, + NameMeta: yaml.NameMeta{ + Name: rn.GetName(), + Namespace: rn.GetNamespace(), + }, + }, + File: &File{ + Path: GetPathAnnotation(rn), + Index: GetIndexAnnotation(rn), + }, + } +} diff --git a/go/internal/forked/kyaml/fn/framework/result_test.go b/go/internal/forked/kyaml/fn/framework/result_test.go new file mode 100644 index 000000000..0f29765cd --- /dev/null +++ b/go/internal/forked/kyaml/fn/framework/result_test.go @@ -0,0 +1,274 @@ +// Copyright 2021 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package framework_test + +import ( + "reflect" + "testing" + + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/fn/framework" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" +) + +func TestResults_Sort(t *testing.T) { + testcases := []struct { + name string + input framework.Results + output framework.Results + }{ + { + name: "sort based on severity", + input: framework.Results{ + { + Message: "Error message 1", + Severity: framework.Info, + }, + { + Message: "Error message 2", + Severity: framework.Error, + }, + }, + output: framework.Results{ + { + Message: "Error message 2", + Severity: framework.Error, + }, + { + Message: "Error message 1", + Severity: framework.Info, + }, + }, + }, + { + name: "sort based on file", + input: framework.Results{ + { + Message: "Error message", + Severity: framework.Error, + File: &framework.File{ + Path: "resource.yaml", + Index: 1, + }, + }, + { + Message: "Error message", + Severity: framework.Info, + File: &framework.File{ + Path: "resource.yaml", + Index: 0, + }, + }, + { + Message: "Error message", + Severity: framework.Info, + File: &framework.File{ + Path: "other-resource.yaml", + Index: 0, + }, + }, + { + Message: "Error message", + Severity: framework.Warning, + File: &framework.File{ + Path: "resource.yaml", + Index: 2, + }, + }, + { + Message: "Error message", + Severity: framework.Warning, + }, + }, + output: framework.Results{ + { + Message: "Error message", + Severity: framework.Warning, + }, + { + Message: "Error message", + Severity: framework.Info, + File: &framework.File{ + Path: "other-resource.yaml", + Index: 0, + }, + }, + { + Message: "Error message", + Severity: framework.Info, + File: &framework.File{ + Path: "resource.yaml", + Index: 0, + }, + }, + { + Message: "Error message", + Severity: framework.Error, + File: &framework.File{ + Path: "resource.yaml", + Index: 1, + }, + }, + { + Message: "Error message", + Severity: framework.Warning, + File: &framework.File{ + Path: "resource.yaml", + Index: 2, + }, + }, + }, + }, + + { + name: "sort based on other fields", + input: framework.Results{ + { + Message: "Error message", + Severity: framework.Error, + ResourceRef: &yaml.ResourceIdentifier{ + TypeMeta: yaml.TypeMeta{ + APIVersion: "v1", + Kind: "Pod", + }, + NameMeta: yaml.NameMeta{ + Namespace: "foo-ns", + Name: "bar", + }, + }, + Field: &framework.Field{ + Path: "spec", + }, + }, + { + Message: "Error message", + Severity: framework.Error, + ResourceRef: &yaml.ResourceIdentifier{ + TypeMeta: yaml.TypeMeta{ + APIVersion: "v1", + Kind: "Pod", + }, + NameMeta: yaml.NameMeta{ + Namespace: "foo-ns", + Name: "bar", + }, + }, + Field: &framework.Field{ + Path: "metadata.name", + }, + }, + { + Message: "Another error message", + Severity: framework.Error, + ResourceRef: &yaml.ResourceIdentifier{ + TypeMeta: yaml.TypeMeta{ + APIVersion: "v1", + Kind: "Pod", + }, + NameMeta: yaml.NameMeta{ + Namespace: "foo-ns", + Name: "bar", + }, + }, + Field: &framework.Field{ + Path: "metadata.name", + }, + }, + { + Message: "Another error message", + Severity: framework.Error, + ResourceRef: &yaml.ResourceIdentifier{ + TypeMeta: yaml.TypeMeta{ + APIVersion: "v1", + Kind: "ConfigMap", + }, + NameMeta: yaml.NameMeta{ + Namespace: "foo-ns", + Name: "bar", + }, + }, + Field: &framework.Field{ + Path: "metadata.name", + }, + }, + }, + output: framework.Results{ + { + Message: "Another error message", + Severity: framework.Error, + ResourceRef: &yaml.ResourceIdentifier{ + TypeMeta: yaml.TypeMeta{ + APIVersion: "v1", + Kind: "ConfigMap", + }, + NameMeta: yaml.NameMeta{ + Namespace: "foo-ns", + Name: "bar", + }, + }, + Field: &framework.Field{ + Path: "metadata.name", + }, + }, + { + Message: "Another error message", + Severity: framework.Error, + ResourceRef: &yaml.ResourceIdentifier{ + TypeMeta: yaml.TypeMeta{ + APIVersion: "v1", + Kind: "Pod", + }, + NameMeta: yaml.NameMeta{ + Namespace: "foo-ns", + Name: "bar", + }, + }, + Field: &framework.Field{ + Path: "metadata.name", + }, + }, + { + Message: "Error message", + Severity: framework.Error, + ResourceRef: &yaml.ResourceIdentifier{ + TypeMeta: yaml.TypeMeta{ + APIVersion: "v1", + Kind: "Pod", + }, + NameMeta: yaml.NameMeta{ + Namespace: "foo-ns", + Name: "bar", + }, + }, + Field: &framework.Field{ + Path: "metadata.name", + }, + }, + { + Message: "Error message", + Severity: framework.Error, + ResourceRef: &yaml.ResourceIdentifier{ + TypeMeta: yaml.TypeMeta{ + APIVersion: "v1", + Kind: "Pod", + }, + NameMeta: yaml.NameMeta{ + Namespace: "foo-ns", + Name: "bar", + }, + }, + Field: &framework.Field{ + Path: "spec", + }, + }, + }, + }, + } + + for _, tc := range testcases { + tc.input.Sort() + if !reflect.DeepEqual(tc.input, tc.output) { + t.Errorf("in testcase %q, expect: %#v, but got: %#v", tc.name, tc.output, tc.input) + } + } +} diff --git a/go/internal/forked/kyaml/fn/framework/selector.go b/go/internal/forked/kyaml/fn/framework/selector.go new file mode 100644 index 000000000..3989cdf19 --- /dev/null +++ b/go/internal/forked/kyaml/fn/framework/selector.go @@ -0,0 +1,219 @@ +// Copyright 2021 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package framework + +import ( + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/errors" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" +) + +// Selector matches resources. A resource matches if and only if ALL of the Selector fields +// match the resource. An empty Selector matches all resources. +type Selector struct { + // Names is a list of metadata.names to match. If empty match all names. + // e.g. Names: ["foo", "bar"] matches if `metadata.name` is either "foo" or "bar". + Names []string `json:"names" yaml:"names"` + + // Namespaces is a list of metadata.namespaces to match. If empty match all namespaces. + // e.g. Namespaces: ["foo", "bar"] matches if `metadata.namespace` is either "foo" or "bar". + Namespaces []string `json:"namespaces" yaml:"namespaces"` + + // Kinds is a list of kinds to match. If empty match all kinds. + // e.g. Kinds: ["foo", "bar"] matches if `kind` is either "foo" or "bar". + Kinds []string `json:"kinds" yaml:"kinds"` + + // APIVersions is a list of apiVersions to match. If empty apply match all apiVersions. + // e.g. APIVersions: ["foo/v1", "bar/v1"] matches if `apiVersion` is either "foo/v1" or "bar/v1". + APIVersions []string `json:"apiVersions" yaml:"apiVersions"` + + // Labels is a collection of labels to match. All labels must match exactly. + // e.g. Labels: {"foo": "bar", "baz": "buz"] matches if BOTH "foo" and "baz" labels match. + Labels map[string]string `json:"labels" yaml:"labels"` + + // Annotations is a collection of annotations to match. All annotations must match exactly. + // e.g. Annotations: {"foo": "bar", "baz": "buz"] matches if BOTH "foo" and "baz" annotations match. + Annotations map[string]string `json:"annotations" yaml:"annotations"` + + // ResourceMatcher is an arbitrary function used to match resources. + // Selector matches if the function returns true. + ResourceMatcher func(*yaml.RNode) bool + + // TemplateData if present will cause the selector values to be parsed as templates + // and rendered using TemplateData before they are used. + TemplateData interface{} + + // FailOnEmptyMatch makes the selector return an error when no items are selected. + FailOnEmptyMatch bool +} + +// Filter implements kio.Filter, returning only those items from the list that the selector +// matches. +func (s *Selector) Filter(items []*yaml.RNode) ([]*yaml.RNode, error) { + andSel := AndSelector{TemplateData: s.TemplateData, FailOnEmptyMatch: s.FailOnEmptyMatch} + if s.Names != nil { + andSel.Matchers = append(andSel.Matchers, NameMatcher(s.Names...)) + } + if s.Namespaces != nil { + andSel.Matchers = append(andSel.Matchers, NamespaceMatcher(s.Namespaces...)) + } + if s.Kinds != nil { + andSel.Matchers = append(andSel.Matchers, KindMatcher(s.Kinds...)) + } + if s.APIVersions != nil { + andSel.Matchers = append(andSel.Matchers, APIVersionMatcher(s.APIVersions...)) + } + if s.Labels != nil { + andSel.Matchers = append(andSel.Matchers, LabelMatcher(s.Labels)) + } + if s.Annotations != nil { + andSel.Matchers = append(andSel.Matchers, AnnotationMatcher(s.Annotations)) + } + if s.ResourceMatcher != nil { + andSel.Matchers = append(andSel.Matchers, ResourceMatcherFunc(s.ResourceMatcher)) + } + return andSel.Filter(items) +} + +// MatchAll is a shorthand for building an AndSelector from a list of ResourceMatchers. +func MatchAll(matchers ...ResourceMatcher) *AndSelector { + return &AndSelector{Matchers: matchers} +} + +// MatchAny is a shorthand for building an OrSelector from a list of ResourceMatchers. +func MatchAny(matchers ...ResourceMatcher) *OrSelector { + return &OrSelector{Matchers: matchers} +} + +// OrSelector is a kio.Filter that selects resources when that match at least one of its embedded +// matchers. +type OrSelector struct { + // Matchers is the list of ResourceMatchers to try on the input resources. + Matchers []ResourceMatcher + // TemplateData, if present, is used to initialize any matchers that implement + // ResourceTemplateMatcher. + TemplateData interface{} + // FailOnEmptyMatch makes the selector return an error when no items are selected. + FailOnEmptyMatch bool +} + +// Match implements ResourceMatcher so that OrSelectors can be composed +func (s *OrSelector) Match(item *yaml.RNode) bool { + for _, matcher := range s.Matchers { + if matcher.Match(item) { + return true + } + } + return false +} + +// Filter implements kio.Filter, returning only those items from the list that the selector +// matches. +func (s *OrSelector) Filter(items []*yaml.RNode) ([]*yaml.RNode, error) { + if err := initMatcherTemplates(s.Matchers, s.TemplateData); err != nil { + return nil, err + } + + var selectedItems []*yaml.RNode + for i := range items { + for _, matcher := range s.Matchers { + if matcher.Match(items[i]) { + selectedItems = append(selectedItems, items[i]) + break + } + } + } + if s.FailOnEmptyMatch && len(selectedItems) == 0 { + return nil, errors.Errorf("selector did not select any items") + } + return selectedItems, nil +} + +// DefaultTemplateData makes OrSelector a ResourceTemplateMatcher. +// Although it does not contain templates itself, this allows it to support ResourceTemplateMatchers +// when being used as a matcher itself. +func (s *OrSelector) DefaultTemplateData(data interface{}) { + if s.TemplateData == nil { + s.TemplateData = data + } +} + +func (s *OrSelector) InitTemplates() error { + return initMatcherTemplates(s.Matchers, s.TemplateData) +} + +func initMatcherTemplates(matchers []ResourceMatcher, data interface{}) error { + for _, matcher := range matchers { + if tm, ok := matcher.(ResourceTemplateMatcher); ok { + tm.DefaultTemplateData(data) + if err := tm.InitTemplates(); err != nil { + return err + } + } + } + return nil +} + +var _ ResourceTemplateMatcher = &OrSelector{} + +// OrSelector is a kio.Filter that selects resources when that match all of its embedded +// matchers. +type AndSelector struct { + // Matchers is the list of ResourceMatchers to try on the input resources. + Matchers []ResourceMatcher + // TemplateData, if present, is used to initialize any matchers that implement + // ResourceTemplateMatcher. + TemplateData interface{} + // FailOnEmptyMatch makes the selector return an error when no items are selected. + FailOnEmptyMatch bool +} + +// Match implements ResourceMatcher so that AndSelectors can be composed +func (s *AndSelector) Match(item *yaml.RNode) bool { + for _, matcher := range s.Matchers { + if !matcher.Match(item) { + return false + } + } + return true +} + +// Filter implements kio.Filter, returning only those items from the list that the selector +// matches. +func (s *AndSelector) Filter(items []*yaml.RNode) ([]*yaml.RNode, error) { + if err := initMatcherTemplates(s.Matchers, s.TemplateData); err != nil { + return nil, err + } + var selectedItems []*yaml.RNode + for i := range items { + isSelected := true + for _, matcher := range s.Matchers { + if !matcher.Match(items[i]) { + isSelected = false + break + } + } + if isSelected { + selectedItems = append(selectedItems, items[i]) + } + } + if s.FailOnEmptyMatch && len(selectedItems) == 0 { + return nil, errors.Errorf("selector did not select any items") + } + return selectedItems, nil +} + +// DefaultTemplateData makes AndSelector a ResourceTemplateMatcher. +// Although it does not contain templates itself, this allows it to support ResourceTemplateMatchers +// when being used as a matcher itself. +func (s *AndSelector) DefaultTemplateData(data interface{}) { + if s.TemplateData == nil { + s.TemplateData = data + } +} + +func (s *AndSelector) InitTemplates() error { + return initMatcherTemplates(s.Matchers, s.TemplateData) +} + +var _ ResourceTemplateMatcher = &AndSelector{} diff --git a/go/internal/forked/kyaml/fn/framework/selector_test.go b/go/internal/forked/kyaml/fn/framework/selector_test.go new file mode 100644 index 000000000..4157bc2ab --- /dev/null +++ b/go/internal/forked/kyaml/fn/framework/selector_test.go @@ -0,0 +1,467 @@ +// Copyright 2021 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package framework_test + +import ( + "bytes" + "strings" + "testing" + + "github.com/stretchr/testify/assert" + "github.com/stretchr/testify/require" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/fn/framework" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" + + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/kio" +) + +func TestSelector(t *testing.T) { + type Test struct { + // Name is the name of the test + Name string + + // Filter configures the selector + Fn func(*framework.Selector) + + // ValueFoo is the value to substitute to select the foo resource + ValueFoo string + + // ValueBar is the value to substitute to select the bar resource + ValueBar string + + // Value is set by the test to either ValueFoo or ValueBar + // and substituted into the selector + Value string + } + tests := []Test{ + // Test the name template + { + Name: "names", + Fn: func(s *framework.Selector) { + s.Names = []string{"{{ .Value }}"} + }, + ValueFoo: "foo", + ValueBar: "bar", + }, + + // Test the kind template + { + Name: "kinds", + Fn: func(s *framework.Selector) { + s.Kinds = []string{"{{ .Value }}"} + }, + ValueFoo: "StatefulSet", + ValueBar: "Deployment", + }, + + // Test the apiVersion template + { + Name: "apiVersion", + Fn: func(s *framework.Selector) { + s.APIVersions = []string{"{{ .Value }}"} + }, + ValueFoo: "apps/v1beta1", + ValueBar: "apps/v1", + }, + + // Test the namespace template + { + Name: "namespaces", + Fn: func(s *framework.Selector) { + s.Namespaces = []string{"{{ .Value }}"} + }, + ValueFoo: "foo-default", + ValueBar: "bar-default", + }, + + // Test the annotations template + { + Name: "annotations", + Fn: func(s *framework.Selector) { + s.Annotations = map[string]string{"key": "{{ .Value }}"} + }, + ValueFoo: "foo-a", + ValueBar: "bar-a", + }, + + // Test the labels template + { + Name: "labels", + Fn: func(s *framework.Selector) { + s.Labels = map[string]string{"key": "{{ .Value }}"} + }, + ValueFoo: "foo-l", + ValueBar: "bar-l", + }, + } + + // input is the input resources that are selected + input := ` +apiVersion: apps/v1beta1 +kind: StatefulSet +metadata: + name: foo + namespace: foo-default + annotations: + key: foo-a + labels: + key: foo-l +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + name: bar + namespace: bar-default + annotations: + key: bar-a + labels: + key: bar-l +` + // expectedFoo is the expected output when the FooValue is substituted + expectedFoo := ` +apiVersion: apps/v1beta1 +kind: StatefulSet +metadata: + name: foo + namespace: foo-default + annotations: + key: foo-a + config.kubernetes.io/index: '0' + internal.config.kubernetes.io/index: '0' + labels: + key: foo-l +` + // expectedFoo is the expected output when the BarValue is substituted + expectedBar := ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: bar + namespace: bar-default + annotations: + key: bar-a + config.kubernetes.io/index: '1' + internal.config.kubernetes.io/index: '1' + labels: + key: bar-l +` + + // Run the tests by substituting the FooValues + var err error + for i := range tests { + test := tests[i] + t.Run(tests[i].Name+"-foo", func(t *testing.T) { + test.Value = test.ValueFoo + var out bytes.Buffer + rw := &kio.ByteReadWriter{ + Reader: bytes.NewBufferString(input), + Writer: &out, + KeepReaderAnnotations: true, + } + p := func(rl *framework.ResourceList) error { + s := &framework.Selector{TemplateData: test} + test.Fn(s) + rl.Items, err = s.Filter(rl.Items) + return err + } + + require.NoError(t, framework.Execute(framework.ResourceListProcessorFunc(p), rw)) + require.Equal(t, strings.TrimSpace(expectedFoo), strings.TrimSpace(out.String())) + }) + } + + // Run the tests by substituting the BarValues + for i := range tests { + test := tests[i] + t.Run(tests[i].Name+"-bar", func(t *testing.T) { + test.Value = test.ValueBar + var out bytes.Buffer + rw := &kio.ByteReadWriter{ + Reader: bytes.NewBufferString(input), + Writer: &out, + KeepReaderAnnotations: true, + } + + p := func(rl *framework.ResourceList) error { + s := &framework.Selector{TemplateData: test} + test.Fn(s) + rl.Items, err = s.Filter(rl.Items) + return err + } + require.NoError(t, framework.Execute(framework.ResourceListProcessorFunc(p), rw)) + require.Equal(t, strings.TrimSpace(expectedBar), strings.TrimSpace(out.String())) + }) + } +} + +func TestAndOrSelector_Composition(t *testing.T) { + // This selector should pick the "prime-target" deployment by name + // as well as any resources with the given labels or annotations regardless of kind + s := framework.MatchAny( + framework.MatchAll( + framework.GVKMatcher("apps/v1/Deployment"), + framework.NameMatcher("prime-target"), + ), + framework.MatchAny( + framework.LabelMatcher(map[string]string{ + "select": "yes", + }), + framework.AnnotationMatcher(map[string]string{ + "example.io/select": "yes", + }), + ), + ) + + input, err := kio.FromBytes([]byte(` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: prime-target +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + name: exclude-one +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + name: exclude-two + labels: + select: no +--- +apiVersion: v1 +kind: ConfigMap +metadata: + name: extra-target + labels: + select: yes +--- +apiVersion: apps/v1 +kind: ConfigMap +metadata: + name: prime-target +data: + shouldSelect: false +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + name: extra-target-one + labels: + select: yes +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + name: extra-target-two + annotations: + example.io/select: yes +`)) + require.NoError(t, err) + result, err := s.Filter(input) + require.NoError(t, err) + + expected := ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: prime-target +--- +apiVersion: v1 +kind: ConfigMap +metadata: + name: extra-target + labels: + select: yes +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + name: extra-target-one + labels: + select: yes +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + name: extra-target-two + annotations: + example.io/select: yes +` + resultStr, err := kio.StringAll(result) + require.NoError(t, err) + assert.Equal(t, strings.TrimSpace(expected), strings.TrimSpace(resultStr)) +} + +func TestAndOrSelector_CompositionTemplated(t *testing.T) { + // This selector should pick the "prime-target" deployment by name + // as well as any resources with the given labels or annotations regardless of kind + // Note: very similar to above test, but uses verbose expression to access templating + type templateStruct struct { + GVK string + Name string + LabelValue string + AnnotationValue string + } + + s := framework.OrSelector{ + // This should get propagated to matchers without explicit data + TemplateData: &templateStruct{ + GVK: "apps/v1/Oops", + Name: "extra-target", + LabelValue: "yes", + AnnotationValue: "yes", + }, + Matchers: []framework.ResourceMatcher{ + &framework.AndSelector{ + TemplateData: &templateStruct{ + GVK: "apps/v1/Deployment", + Name: "prime-target", + }, + Matchers: []framework.ResourceMatcher{ + framework.GVKMatcher("{{.GVK}}"), + framework.NameMatcher("{{.Name}}"), + }, + }, + &framework.OrSelector{ + Matchers: []framework.ResourceMatcher{ + framework.LabelMatcher(map[string]string{ + "select": "{{.LabelValue}}", + }), + framework.AnnotationMatcher(map[string]string{ + "example.io/select": "{{.AnnotationValue}}", + }), + }, + }, + }, + } + + input, err := kio.FromBytes([]byte(` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: prime-target +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + name: exclude-one +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + name: exclude-two + labels: + select: no +--- +apiVersion: v1 +kind: ConfigMap +metadata: + name: extra-target + labels: + select: yes +--- +apiVersion: apps/v1 +kind: ConfigMap +metadata: + name: prime-target +data: + shouldSelect: false +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + name: extra-target-one + labels: + select: yes +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + name: extra-target-two + annotations: + example.io/select: yes +`)) + require.NoError(t, err) + result, err := s.Filter(input) + require.NoError(t, err) + + expected := ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: prime-target +--- +apiVersion: v1 +kind: ConfigMap +metadata: + name: extra-target + labels: + select: yes +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + name: extra-target-one + labels: + select: yes +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + name: extra-target-two + annotations: + example.io/select: yes +` + resultStr, err := kio.StringAll(result) + require.NoError(t, err) + assert.Equal(t, strings.TrimSpace(expected), strings.TrimSpace(resultStr)) +} + +func TestMatchersAsFilters(t *testing.T) { + input, err := kio.FromBytes([]byte(` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: target + labels: + select: me +--- +apiVersion: extensions/v1beta2 +kind: Deployment +metadata: + name: exclude + labels: + select: no +`)) + require.NoError(t, err) + + expected := ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: target + labels: + select: me +` + matchers := map[string]framework.ResourceMatcher{ + "slice": framework.NameMatcher("target"), + "map": framework.LabelMatcher(map[string]string{"select": "me"}), + "func": framework.ResourceMatcherFunc(func(node *yaml.RNode) bool { + v := node.Field("apiVersion").Value + return strings.TrimSpace(v.MustString()) == "apps/v1" + }), + } + for desc, m := range matchers { + matcher := m + t.Run(desc, func(t *testing.T) { + result, err := matcher.Filter(input) + require.NoError(t, err) + resultStr, err := kio.StringAll(result) + require.NoError(t, err) + assert.Equal(t, strings.TrimSpace(expected), strings.TrimSpace(resultStr)) + }) + } +} diff --git a/go/internal/forked/kyaml/fn/framework/template.go b/go/internal/forked/kyaml/fn/framework/template.go new file mode 100644 index 000000000..7755cd09a --- /dev/null +++ b/go/internal/forked/kyaml/fn/framework/template.go @@ -0,0 +1,90 @@ +// Copyright 2021 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package framework + +import ( + "bytes" + "strings" + "text/template" + + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/errors" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/kio" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" +) + +// ResourceTemplate generates resources from templates. +type ResourceTemplate struct { + // Templates provides a list of templates to render into one or more resources. + Templates TemplateParser + + // TemplateData is the data to use when rendering the templates provided by the Templates field. + TemplateData interface{} +} + +type TemplateParser interface { + Parse() ([]*template.Template, error) +} + +type TemplateParserFunc func() ([]*template.Template, error) + +func (s TemplateParserFunc) Parse() ([]*template.Template, error) { + return s() +} + +// DefaultTemplateData sets TemplateData to the provided default values if it has not already +// been set. +func (rt *ResourceTemplate) DefaultTemplateData(data interface{}) { + if rt.TemplateData == nil { + rt.TemplateData = data + } +} + +// Render renders the Templates into resource nodes using TemplateData. +func (rt *ResourceTemplate) Render() ([]*yaml.RNode, error) { + var items []*yaml.RNode + + if rt.Templates == nil { + return items, nil + } + + templates, err := rt.Templates.Parse() + if err != nil { + return nil, errors.WrapPrefixf(err, "failed to retrieve ResourceTemplates") + } + + for i := range templates { + newItems, err := rt.doTemplate(templates[i]) + if err != nil { + return nil, err + } + items = append(items, newItems...) + } + return items, nil +} + +func (rt *ResourceTemplate) doTemplate(t *template.Template) ([]*yaml.RNode, error) { + // invoke the template + var b bytes.Buffer + err := t.Execute(&b, rt.TemplateData) + if err != nil { + return nil, errors.WrapPrefixf(err, "failed to render template %v", t.DefinedTemplates()) + } + var items []*yaml.RNode + + // split the resources so the error messaging is better + for _, s := range strings.Split(b.String(), "\n---\n") { + s = strings.TrimSpace(s) + if s == "" { + continue + } + newItems, err := (&kio.ByteReader{Reader: bytes.NewBufferString(s)}).Read() + if err != nil { + return nil, errors.WrapPrefixf(err, + "failed to parse rendered template into a resource:\n%s\n", addLineNumbers(s)) + } + + items = append(items, newItems...) + } + return items, nil +} diff --git a/go/internal/forked/kyaml/fn/framework/testdata/example/template/config.yaml b/go/internal/forked/kyaml/fn/framework/testdata/example/template/config.yaml new file mode 100644 index 000000000..51460d7bb --- /dev/null +++ b/go/internal/forked/kyaml/fn/framework/testdata/example/template/config.yaml @@ -0,0 +1,7 @@ +# Copyright 2019 The Kubernetes Authors. +# SPDX-License-Identifier: Apache-2.0 + +apiVersion: example.com/v1alpha1 +kind: Example +key: a +value: b \ No newline at end of file diff --git a/go/internal/forked/kyaml/fn/framework/testdata/example/templatefiles/config.yaml b/go/internal/forked/kyaml/fn/framework/testdata/example/templatefiles/config.yaml new file mode 100644 index 000000000..51460d7bb --- /dev/null +++ b/go/internal/forked/kyaml/fn/framework/testdata/example/templatefiles/config.yaml @@ -0,0 +1,7 @@ +# Copyright 2019 The Kubernetes Authors. +# SPDX-License-Identifier: Apache-2.0 + +apiVersion: example.com/v1alpha1 +kind: Example +key: a +value: b \ No newline at end of file diff --git a/go/internal/forked/kyaml/fn/framework/testdata/example/templatefiles/deployment.template.yaml b/go/internal/forked/kyaml/fn/framework/testdata/example/templatefiles/deployment.template.yaml new file mode 100644 index 000000000..87a5a7ad4 --- /dev/null +++ b/go/internal/forked/kyaml/fn/framework/testdata/example/templatefiles/deployment.template.yaml @@ -0,0 +1,10 @@ +# Copyright 2021 The Kubernetes Authors. +# SPDX-License-Identifier: Apache-2.0 + +apiVersion: apps/v1 +kind: Deployment +metadata: + name: foo + namespace: default + annotations: + {{ .Key }}: {{ .Value }} diff --git a/go/internal/forked/kyaml/fn/framework/testdata/patch-selector/annotationselector/config.yaml b/go/internal/forked/kyaml/fn/framework/testdata/patch-selector/annotationselector/config.yaml new file mode 100644 index 000000000..0b800704e --- /dev/null +++ b/go/internal/forked/kyaml/fn/framework/testdata/patch-selector/annotationselector/config.yaml @@ -0,0 +1,10 @@ +# Copyright 2019 The Kubernetes Authors. +# SPDX-License-Identifier: Apache-2.0 + +apiVersion: example.com/v1alpha1 +kind: patcher +selector: + annotations: + foo: bar +a: a +b: b \ No newline at end of file diff --git a/go/internal/forked/kyaml/fn/framework/testdata/patch-selector/annotationselector/expected.yaml b/go/internal/forked/kyaml/fn/framework/testdata/patch-selector/annotationselector/expected.yaml new file mode 100644 index 000000000..820220ae1 --- /dev/null +++ b/go/internal/forked/kyaml/fn/framework/testdata/patch-selector/annotationselector/expected.yaml @@ -0,0 +1,23 @@ +# Copyright 2019 The Kubernetes Authors. +# SPDX-License-Identifier: Apache-2.0 + +apiVersion: apps/v1 +kind: Deployment +metadata: + name: test-1 + annotations: + baz: foo +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + name: test-2 + annotations: + foo: bar + patched: 'a' +spec: + template: + spec: + containers: + - name: foo + image: example/sidecar:b \ No newline at end of file diff --git a/go/internal/forked/kyaml/fn/framework/testdata/patch-selector/annotationselector/input.yaml b/go/internal/forked/kyaml/fn/framework/testdata/patch-selector/annotationselector/input.yaml new file mode 100644 index 000000000..83e896dc4 --- /dev/null +++ b/go/internal/forked/kyaml/fn/framework/testdata/patch-selector/annotationselector/input.yaml @@ -0,0 +1,16 @@ +# Copyright 2019 The Kubernetes Authors. +# SPDX-License-Identifier: Apache-2.0 + +apiVersion: apps/v1 +kind: Deployment +metadata: + name: test-1 + annotations: + baz: foo +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + name: test-2 + annotations: + foo: bar diff --git a/go/internal/forked/kyaml/fn/framework/testdata/patch-selector/apiversionselector/config.yaml b/go/internal/forked/kyaml/fn/framework/testdata/patch-selector/apiversionselector/config.yaml new file mode 100644 index 000000000..4639f3c13 --- /dev/null +++ b/go/internal/forked/kyaml/fn/framework/testdata/patch-selector/apiversionselector/config.yaml @@ -0,0 +1,9 @@ +# Copyright 2019 The Kubernetes Authors. +# SPDX-License-Identifier: Apache-2.0 + +apiVersion: example.com/v1alpha1 +kind: patcher +selector: + apiVersions: ["apps/v1alpha1"] +a: a +b: b \ No newline at end of file diff --git a/go/internal/forked/kyaml/fn/framework/testdata/patch-selector/apiversionselector/expected.yaml b/go/internal/forked/kyaml/fn/framework/testdata/patch-selector/apiversionselector/expected.yaml new file mode 100644 index 000000000..2b87f041c --- /dev/null +++ b/go/internal/forked/kyaml/fn/framework/testdata/patch-selector/apiversionselector/expected.yaml @@ -0,0 +1,23 @@ +# Copyright 2019 The Kubernetes Authors. +# SPDX-License-Identifier: Apache-2.0 + +apiVersion: apps/v1alpha1 +kind: Deployment +metadata: + name: test-1 + annotations: + baz: foo + patched: 'a' +spec: + template: + spec: + containers: + - name: foo + image: example/sidecar:b +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + name: test-2 + annotations: + foo: bar diff --git a/go/internal/forked/kyaml/fn/framework/testdata/patch-selector/apiversionselector/input.yaml b/go/internal/forked/kyaml/fn/framework/testdata/patch-selector/apiversionselector/input.yaml new file mode 100644 index 000000000..934468e94 --- /dev/null +++ b/go/internal/forked/kyaml/fn/framework/testdata/patch-selector/apiversionselector/input.yaml @@ -0,0 +1,16 @@ +# Copyright 2019 The Kubernetes Authors. +# SPDX-License-Identifier: Apache-2.0 + +apiVersion: apps/v1alpha1 +kind: Deployment +metadata: + name: test-1 + annotations: + baz: foo +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + name: test-2 + annotations: + foo: bar diff --git a/go/internal/forked/kyaml/fn/framework/testdata/patch-selector/filterselector/config.yaml b/go/internal/forked/kyaml/fn/framework/testdata/patch-selector/filterselector/config.yaml new file mode 100644 index 000000000..70ae89b79 --- /dev/null +++ b/go/internal/forked/kyaml/fn/framework/testdata/patch-selector/filterselector/config.yaml @@ -0,0 +1,8 @@ +# Copyright 2019 The Kubernetes Authors. +# SPDX-License-Identifier: Apache-2.0 + +apiVersion: example.com/v1alpha1 +kind: patcher +a: a +b: b +special: bar \ No newline at end of file diff --git a/go/internal/forked/kyaml/fn/framework/testdata/patch-selector/filterselector/expected.yaml b/go/internal/forked/kyaml/fn/framework/testdata/patch-selector/filterselector/expected.yaml new file mode 100644 index 000000000..fa6066a32 --- /dev/null +++ b/go/internal/forked/kyaml/fn/framework/testdata/patch-selector/filterselector/expected.yaml @@ -0,0 +1,32 @@ +# Copyright 2019 The Kubernetes Authors. +# SPDX-License-Identifier: Apache-2.0 + +apiVersion: apps/v1 +kind: Deployment +metadata: + name: test-1 + annotations: + baz: foo + patched: 'a' +spec: + template: + spec: + containers: + - name: foo + image: example/sidecar:b +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + name: test-2 + namespace: test + annotations: + foo: bar + patched: 'a' + filterPatched: 'a' +spec: + template: + spec: + containers: + - name: foo + image: example/sidecar:b \ No newline at end of file diff --git a/go/internal/forked/kyaml/fn/framework/testdata/patch-selector/filterselector/input.yaml b/go/internal/forked/kyaml/fn/framework/testdata/patch-selector/filterselector/input.yaml new file mode 100644 index 000000000..c48080aa9 --- /dev/null +++ b/go/internal/forked/kyaml/fn/framework/testdata/patch-selector/filterselector/input.yaml @@ -0,0 +1,17 @@ +# Copyright 2019 The Kubernetes Authors. +# SPDX-License-Identifier: Apache-2.0 + +apiVersion: apps/v1 +kind: Deployment +metadata: + name: test-1 + annotations: + baz: foo +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + name: test-2 + namespace: test + annotations: + foo: bar diff --git a/go/internal/forked/kyaml/fn/framework/testdata/patch-selector/kindselector/config.yaml b/go/internal/forked/kyaml/fn/framework/testdata/patch-selector/kindselector/config.yaml new file mode 100644 index 000000000..6ec10f8ed --- /dev/null +++ b/go/internal/forked/kyaml/fn/framework/testdata/patch-selector/kindselector/config.yaml @@ -0,0 +1,9 @@ +# Copyright 2019 The Kubernetes Authors. +# SPDX-License-Identifier: Apache-2.0 + +apiVersion: example.com/v1alpha1 +kind: patcher +selector: + kinds: ["Deployment"] +a: a +b: b \ No newline at end of file diff --git a/go/internal/forked/kyaml/fn/framework/testdata/patch-selector/kindselector/expected.yaml b/go/internal/forked/kyaml/fn/framework/testdata/patch-selector/kindselector/expected.yaml new file mode 100644 index 000000000..4bc25c387 --- /dev/null +++ b/go/internal/forked/kyaml/fn/framework/testdata/patch-selector/kindselector/expected.yaml @@ -0,0 +1,23 @@ +# Copyright 2019 The Kubernetes Authors. +# SPDX-License-Identifier: Apache-2.0 + +apiVersion: apps/v1 +kind: Deployment +metadata: + name: test-1 + annotations: + baz: foo + patched: 'a' +spec: + template: + spec: + containers: + - name: foo + image: example/sidecar:b +--- +apiVersion: apps/v1 +kind: StatefulSet +metadata: + name: test-2 + annotations: + foo: bar diff --git a/go/internal/forked/kyaml/fn/framework/testdata/patch-selector/kindselector/input.yaml b/go/internal/forked/kyaml/fn/framework/testdata/patch-selector/kindselector/input.yaml new file mode 100644 index 000000000..04c97d7a5 --- /dev/null +++ b/go/internal/forked/kyaml/fn/framework/testdata/patch-selector/kindselector/input.yaml @@ -0,0 +1,16 @@ +# Copyright 2019 The Kubernetes Authors. +# SPDX-License-Identifier: Apache-2.0 + +apiVersion: apps/v1 +kind: Deployment +metadata: + name: test-1 + annotations: + baz: foo +--- +apiVersion: apps/v1 +kind: StatefulSet +metadata: + name: test-2 + annotations: + foo: bar diff --git a/go/internal/forked/kyaml/fn/framework/testdata/patch-selector/labelselector/config.yaml b/go/internal/forked/kyaml/fn/framework/testdata/patch-selector/labelselector/config.yaml new file mode 100644 index 000000000..fb885f2ad --- /dev/null +++ b/go/internal/forked/kyaml/fn/framework/testdata/patch-selector/labelselector/config.yaml @@ -0,0 +1,10 @@ +# Copyright 2019 The Kubernetes Authors. +# SPDX-License-Identifier: Apache-2.0 + +apiVersion: example.com/v1alpha1 +kind: patcher +selector: + labels: + foo: bar +a: a +b: b \ No newline at end of file diff --git a/go/internal/forked/kyaml/fn/framework/testdata/patch-selector/labelselector/expected.yaml b/go/internal/forked/kyaml/fn/framework/testdata/patch-selector/labelselector/expected.yaml new file mode 100644 index 000000000..5b08fc4ab --- /dev/null +++ b/go/internal/forked/kyaml/fn/framework/testdata/patch-selector/labelselector/expected.yaml @@ -0,0 +1,24 @@ +# Copyright 2019 The Kubernetes Authors. +# SPDX-License-Identifier: Apache-2.0 + +apiVersion: apps/v1 +kind: Deployment +metadata: + name: test-1 + labels: + baz: foo +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + name: test-2 + labels: + foo: bar + annotations: + patched: 'a' +spec: + template: + spec: + containers: + - name: foo + image: example/sidecar:b \ No newline at end of file diff --git a/go/internal/forked/kyaml/fn/framework/testdata/patch-selector/labelselector/input.yaml b/go/internal/forked/kyaml/fn/framework/testdata/patch-selector/labelselector/input.yaml new file mode 100644 index 000000000..117a25c8d --- /dev/null +++ b/go/internal/forked/kyaml/fn/framework/testdata/patch-selector/labelselector/input.yaml @@ -0,0 +1,16 @@ +# Copyright 2019 The Kubernetes Authors. +# SPDX-License-Identifier: Apache-2.0 + +apiVersion: apps/v1 +kind: Deployment +metadata: + name: test-1 + labels: + baz: foo +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + name: test-2 + labels: + foo: bar diff --git a/go/internal/forked/kyaml/fn/framework/testdata/patch-selector/longlistpreprocess/config.yaml b/go/internal/forked/kyaml/fn/framework/testdata/patch-selector/longlistpreprocess/config.yaml new file mode 100644 index 000000000..6ec10f8ed --- /dev/null +++ b/go/internal/forked/kyaml/fn/framework/testdata/patch-selector/longlistpreprocess/config.yaml @@ -0,0 +1,9 @@ +# Copyright 2019 The Kubernetes Authors. +# SPDX-License-Identifier: Apache-2.0 + +apiVersion: example.com/v1alpha1 +kind: patcher +selector: + kinds: ["Deployment"] +a: a +b: b \ No newline at end of file diff --git a/go/internal/forked/kyaml/fn/framework/testdata/patch-selector/longlistpreprocess/expected.yaml b/go/internal/forked/kyaml/fn/framework/testdata/patch-selector/longlistpreprocess/expected.yaml new file mode 100644 index 000000000..9d820acb0 --- /dev/null +++ b/go/internal/forked/kyaml/fn/framework/testdata/patch-selector/longlistpreprocess/expected.yaml @@ -0,0 +1,39 @@ +# Copyright 2019 The Kubernetes Authors. +# SPDX-License-Identifier: Apache-2.0 + +apiVersion: apps/v1 +kind: Deployment +metadata: + name: test-1 + annotations: + baz: foo + long: 'true' + patched: 'a' +spec: + template: + spec: + containers: + - name: foo + image: example/sidecar:b +--- +apiVersion: apps/v1 +kind: StatefulSet +metadata: + name: test-2 + annotations: + foo: bar +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + name: test-3 + annotations: + foo: bar + long: 'true' + patched: 'a' +spec: + template: + spec: + containers: + - name: foo + image: example/sidecar:b \ No newline at end of file diff --git a/go/internal/forked/kyaml/fn/framework/testdata/patch-selector/longlistpreprocess/input.yaml b/go/internal/forked/kyaml/fn/framework/testdata/patch-selector/longlistpreprocess/input.yaml new file mode 100644 index 000000000..d22cff50d --- /dev/null +++ b/go/internal/forked/kyaml/fn/framework/testdata/patch-selector/longlistpreprocess/input.yaml @@ -0,0 +1,23 @@ +# Copyright 2019 The Kubernetes Authors. +# SPDX-License-Identifier: Apache-2.0 + +apiVersion: apps/v1 +kind: Deployment +metadata: + name: test-1 + annotations: + baz: foo +--- +apiVersion: apps/v1 +kind: StatefulSet +metadata: + name: test-2 + annotations: + foo: bar +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + name: test-3 + annotations: + foo: bar diff --git a/go/internal/forked/kyaml/fn/framework/testdata/patch-selector/nameselector/config.yaml b/go/internal/forked/kyaml/fn/framework/testdata/patch-selector/nameselector/config.yaml new file mode 100644 index 000000000..3242579b9 --- /dev/null +++ b/go/internal/forked/kyaml/fn/framework/testdata/patch-selector/nameselector/config.yaml @@ -0,0 +1,9 @@ +# Copyright 2019 The Kubernetes Authors. +# SPDX-License-Identifier: Apache-2.0 + +apiVersion: example.com/v1alpha1 +kind: patcher +selector: + names: ["test-2"] +a: a +b: b \ No newline at end of file diff --git a/go/internal/forked/kyaml/fn/framework/testdata/patch-selector/nameselector/expected.yaml b/go/internal/forked/kyaml/fn/framework/testdata/patch-selector/nameselector/expected.yaml new file mode 100644 index 000000000..820220ae1 --- /dev/null +++ b/go/internal/forked/kyaml/fn/framework/testdata/patch-selector/nameselector/expected.yaml @@ -0,0 +1,23 @@ +# Copyright 2019 The Kubernetes Authors. +# SPDX-License-Identifier: Apache-2.0 + +apiVersion: apps/v1 +kind: Deployment +metadata: + name: test-1 + annotations: + baz: foo +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + name: test-2 + annotations: + foo: bar + patched: 'a' +spec: + template: + spec: + containers: + - name: foo + image: example/sidecar:b \ No newline at end of file diff --git a/go/internal/forked/kyaml/fn/framework/testdata/patch-selector/nameselector/input.yaml b/go/internal/forked/kyaml/fn/framework/testdata/patch-selector/nameselector/input.yaml new file mode 100644 index 000000000..83e896dc4 --- /dev/null +++ b/go/internal/forked/kyaml/fn/framework/testdata/patch-selector/nameselector/input.yaml @@ -0,0 +1,16 @@ +# Copyright 2019 The Kubernetes Authors. +# SPDX-License-Identifier: Apache-2.0 + +apiVersion: apps/v1 +kind: Deployment +metadata: + name: test-1 + annotations: + baz: foo +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + name: test-2 + annotations: + foo: bar diff --git a/go/internal/forked/kyaml/fn/framework/testdata/patch-selector/namespaceselector/config.yaml b/go/internal/forked/kyaml/fn/framework/testdata/patch-selector/namespaceselector/config.yaml new file mode 100644 index 000000000..82912baa4 --- /dev/null +++ b/go/internal/forked/kyaml/fn/framework/testdata/patch-selector/namespaceselector/config.yaml @@ -0,0 +1,9 @@ +# Copyright 2019 The Kubernetes Authors. +# SPDX-License-Identifier: Apache-2.0 + +apiVersion: example.com/v1alpha1 +kind: patcher +selector: + namespaces: ["test"] +a: a +b: b \ No newline at end of file diff --git a/go/internal/forked/kyaml/fn/framework/testdata/patch-selector/namespaceselector/expected.yaml b/go/internal/forked/kyaml/fn/framework/testdata/patch-selector/namespaceselector/expected.yaml new file mode 100644 index 000000000..1e7b5e42b --- /dev/null +++ b/go/internal/forked/kyaml/fn/framework/testdata/patch-selector/namespaceselector/expected.yaml @@ -0,0 +1,24 @@ +# Copyright 2019 The Kubernetes Authors. +# SPDX-License-Identifier: Apache-2.0 + +apiVersion: apps/v1 +kind: Deployment +metadata: + name: test-1 + annotations: + baz: foo +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + name: test-2 + namespace: test + annotations: + foo: bar + patched: 'a' +spec: + template: + spec: + containers: + - name: foo + image: example/sidecar:b \ No newline at end of file diff --git a/go/internal/forked/kyaml/fn/framework/testdata/patch-selector/namespaceselector/input.yaml b/go/internal/forked/kyaml/fn/framework/testdata/patch-selector/namespaceselector/input.yaml new file mode 100644 index 000000000..c48080aa9 --- /dev/null +++ b/go/internal/forked/kyaml/fn/framework/testdata/patch-selector/namespaceselector/input.yaml @@ -0,0 +1,17 @@ +# Copyright 2019 The Kubernetes Authors. +# SPDX-License-Identifier: Apache-2.0 + +apiVersion: apps/v1 +kind: Deployment +metadata: + name: test-1 + annotations: + baz: foo +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + name: test-2 + namespace: test + annotations: + foo: bar diff --git a/go/internal/forked/kyaml/fn/framework/testdata/template-processor/container-patches/container.template.yaml b/go/internal/forked/kyaml/fn/framework/testdata/template-processor/container-patches/container.template.yaml new file mode 100644 index 000000000..c00bbe7ef --- /dev/null +++ b/go/internal/forked/kyaml/fn/framework/testdata/template-processor/container-patches/container.template.yaml @@ -0,0 +1,6 @@ +# Copyright 2019 The Kubernetes Authors. +# SPDX-License-Identifier: Apache-2.0 + +env: +- name: {{ .Spec.Key }} + value: {{ .Spec.Value }} diff --git a/go/internal/forked/kyaml/fn/framework/testdata/template-processor/patches/basic/patch.template.yaml b/go/internal/forked/kyaml/fn/framework/testdata/template-processor/patches/basic/patch.template.yaml new file mode 100644 index 000000000..1ec6a3323 --- /dev/null +++ b/go/internal/forked/kyaml/fn/framework/testdata/template-processor/patches/basic/patch.template.yaml @@ -0,0 +1,5 @@ +# Copyright 2019 The Kubernetes Authors. +# SPDX-License-Identifier: Apache-2.0 + +spec: + replicas: {{ .Spec.Replicas }} diff --git a/go/internal/forked/kyaml/fn/framework/testdata/template-processor/patches/custom-resource/patch.template.yaml b/go/internal/forked/kyaml/fn/framework/testdata/template-processor/patches/custom-resource/patch.template.yaml new file mode 100644 index 000000000..c17b03fe3 --- /dev/null +++ b/go/internal/forked/kyaml/fn/framework/testdata/template-processor/patches/custom-resource/patch.template.yaml @@ -0,0 +1,10 @@ +# Copyright 2021 The Kubernetes Authors. +# SPDX-License-Identifier: Apache-2.0 + +spec: + targets: + - app: B + size: small + - app: C + type: Ruby + size: large diff --git a/go/internal/forked/kyaml/fn/framework/testdata/template-processor/schemas/foo.json b/go/internal/forked/kyaml/fn/framework/testdata/template-processor/schemas/foo.json new file mode 100644 index 000000000..fdf53675e --- /dev/null +++ b/go/internal/forked/kyaml/fn/framework/testdata/template-processor/schemas/foo.json @@ -0,0 +1,58 @@ +{ + "definitions": { + "com.example.v1.Foo": { + "type": "object", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + }, + "spec": { + "type": "object", + "required": [ + "targets" + ], + "properties": { + "targets": { + "type": "array", + "x-kubernetes-patch-merge-key": "app", + "x-kubernetes-patch-strategy": "merge", + "items": { + "type": "object", + "required": [ + "app" + ], + "properties": { + "app": { + "type": "string" + }, + "size": { + "type": "string" + }, + "type": { + "type": "string" + } + } + } + } + } + } + }, + "x-kubernetes-group-version-kind": [ + { + "group": "example.com", + "kind": "Foo", + "version": "v1" + } + ] + } + } +} diff --git a/go/internal/forked/kyaml/fn/framework/testdata/template-processor/templates/basic/deploy.template.yaml b/go/internal/forked/kyaml/fn/framework/testdata/template-processor/templates/basic/deploy.template.yaml new file mode 100644 index 000000000..e2fd90442 --- /dev/null +++ b/go/internal/forked/kyaml/fn/framework/testdata/template-processor/templates/basic/deploy.template.yaml @@ -0,0 +1,14 @@ +# Copyright 2019 The Kubernetes Authors. +# SPDX-License-Identifier: Apache-2.0 + +apiVersion: apps/v1 +kind: Deployment +metadata: + name: foo + namespace: bar +spec: + template: + spec: + containers: + - name: foo + image: {{ .Image }} diff --git a/go/internal/forked/kyaml/fn/framework/testdata/template-processor/templates/container-sources/cron_job.template.yaml b/go/internal/forked/kyaml/fn/framework/testdata/template-processor/templates/container-sources/cron_job.template.yaml new file mode 100644 index 000000000..d6a47caed --- /dev/null +++ b/go/internal/forked/kyaml/fn/framework/testdata/template-processor/templates/container-sources/cron_job.template.yaml @@ -0,0 +1,19 @@ +# Copyright 2021 The Kubernetes Authors. +# SPDX-License-Identifier: Apache-2.0 + +apiVersion: batch/v1 +kind: CronJob +metadata: + name: hello +spec: + schedule: "*/1 * * * *" + jobTemplate: + spec: + template: + spec: + containers: + - name: hello + image: nginx + env: + - name: EXISTING + value: variable diff --git a/go/internal/forked/kyaml/fn/framework/testdata/template-processor/templates/container-sources/daemon_set.template.yaml b/go/internal/forked/kyaml/fn/framework/testdata/template-processor/templates/container-sources/daemon_set.template.yaml new file mode 100644 index 000000000..1ef61dc2a --- /dev/null +++ b/go/internal/forked/kyaml/fn/framework/testdata/template-processor/templates/container-sources/daemon_set.template.yaml @@ -0,0 +1,23 @@ +# Copyright 2021 The Kubernetes Authors. +# SPDX-License-Identifier: Apache-2.0 + +apiVersion: apps/v1 +kind: DaemonSet +metadata: + name: hello +spec: + selector: + matchLabels: + name: hello + template: + metadata: + labels: + name: hello + spec: + containers: + - name: hello + image: nginx + env: + - name: EXISTING + value: variable + diff --git a/go/internal/forked/kyaml/fn/framework/testdata/template-processor/templates/container-sources/deployment.template.yaml b/go/internal/forked/kyaml/fn/framework/testdata/template-processor/templates/container-sources/deployment.template.yaml new file mode 100644 index 000000000..a9e8882a6 --- /dev/null +++ b/go/internal/forked/kyaml/fn/framework/testdata/template-processor/templates/container-sources/deployment.template.yaml @@ -0,0 +1,22 @@ +# Copyright 2021 The Kubernetes Authors. +# SPDX-License-Identifier: Apache-2.0 + +apiVersion: apps/v1 +kind: Deployment +metadata: + name: hello +spec: + selector: + matchLabels: + app: hello + template: + metadata: + labels: + app: hello + spec: + containers: + - name: hello + image: nginx + env: + - name: EXISTING + value: variable diff --git a/go/internal/forked/kyaml/fn/framework/testdata/template-processor/templates/container-sources/job.template.yaml b/go/internal/forked/kyaml/fn/framework/testdata/template-processor/templates/container-sources/job.template.yaml new file mode 100644 index 000000000..8cbd7e46f --- /dev/null +++ b/go/internal/forked/kyaml/fn/framework/testdata/template-processor/templates/container-sources/job.template.yaml @@ -0,0 +1,16 @@ +# Copyright 2021 The Kubernetes Authors. +# SPDX-License-Identifier: Apache-2.0 + +apiVersion: batch/v1 +kind: Job +metadata: + name: hello +spec: + template: + spec: + containers: + - name: hello + image: nginx + env: + - name: EXISTING + value: variable diff --git a/go/internal/forked/kyaml/fn/framework/testdata/template-processor/templates/container-sources/pod.template.yaml b/go/internal/forked/kyaml/fn/framework/testdata/template-processor/templates/container-sources/pod.template.yaml new file mode 100644 index 000000000..0ff1a656e --- /dev/null +++ b/go/internal/forked/kyaml/fn/framework/testdata/template-processor/templates/container-sources/pod.template.yaml @@ -0,0 +1,14 @@ +# Copyright 2021 The Kubernetes Authors. +# SPDX-License-Identifier: Apache-2.0 + +apiVersion: v1 +kind: Pod +metadata: + name: hello +spec: + containers: + - name: hello + image: nginx + env: + - name: EXISTING + value: variable diff --git a/go/internal/forked/kyaml/fn/framework/testdata/template-processor/templates/container-sources/pod_template.template.yaml b/go/internal/forked/kyaml/fn/framework/testdata/template-processor/templates/container-sources/pod_template.template.yaml new file mode 100644 index 000000000..a3069a080 --- /dev/null +++ b/go/internal/forked/kyaml/fn/framework/testdata/template-processor/templates/container-sources/pod_template.template.yaml @@ -0,0 +1,17 @@ +# Copyright 2021 The Kubernetes Authors. +# SPDX-License-Identifier: Apache-2.0 + +apiVersion: v1 +kind: PodTemplate +metadata: + name: hello + labels: + tier: hello +template: + spec: + containers: + - name: hello + image: nginx + env: + - name: EXISTING + value: variable diff --git a/go/internal/forked/kyaml/fn/framework/testdata/template-processor/templates/container-sources/replica_set.template.yaml b/go/internal/forked/kyaml/fn/framework/testdata/template-processor/templates/container-sources/replica_set.template.yaml new file mode 100644 index 000000000..d0c0f9b72 --- /dev/null +++ b/go/internal/forked/kyaml/fn/framework/testdata/template-processor/templates/container-sources/replica_set.template.yaml @@ -0,0 +1,22 @@ +# Copyright 2021 The Kubernetes Authors. +# SPDX-License-Identifier: Apache-2.0 + +apiVersion: apps/v1 +kind: ReplicaSet +metadata: + name: hello +spec: + selector: + matchLabels: + app: hello + template: + metadata: + labels: + app: hello + spec: + containers: + - name: hello + image: nginx + env: + - name: EXISTING + value: variable diff --git a/go/internal/forked/kyaml/fn/framework/testdata/template-processor/templates/container-sources/replication_controller.template.yaml b/go/internal/forked/kyaml/fn/framework/testdata/template-processor/templates/container-sources/replication_controller.template.yaml new file mode 100644 index 000000000..3c8e386c8 --- /dev/null +++ b/go/internal/forked/kyaml/fn/framework/testdata/template-processor/templates/container-sources/replication_controller.template.yaml @@ -0,0 +1,22 @@ +# Copyright 2021 The Kubernetes Authors. +# SPDX-License-Identifier: Apache-2.0 + +apiVersion: v1 +kind: ReplicationController +metadata: + name: hello +spec: + selector: + app: hello + template: + metadata: + name: hello + labels: + app: hello + spec: + containers: + - name: hello + image: nginx + env: + - name: EXISTING + value: variable diff --git a/go/internal/forked/kyaml/fn/framework/testdata/template-processor/templates/container-sources/stateful_set.template.yaml b/go/internal/forked/kyaml/fn/framework/testdata/template-processor/templates/container-sources/stateful_set.template.yaml new file mode 100644 index 000000000..1aa312fce --- /dev/null +++ b/go/internal/forked/kyaml/fn/framework/testdata/template-processor/templates/container-sources/stateful_set.template.yaml @@ -0,0 +1,24 @@ +# Copyright 2021 The Kubernetes Authors. +# SPDX-License-Identifier: Apache-2.0 + +apiVersion: apps/v1 +kind: StatefulSet +metadata: + name: hello +spec: + serviceName: "nginx" + selector: + matchLabels: + app: hello + template: + metadata: + labels: + app: hello + spec: + containers: + - name: hello + image: nginx + env: + - name: EXISTING + value: variable + diff --git a/go/internal/forked/kyaml/fn/framework/testdata/template-processor/templates/custom-resource/foo.template.yaml b/go/internal/forked/kyaml/fn/framework/testdata/template-processor/templates/custom-resource/foo.template.yaml new file mode 100644 index 000000000..fdce207fd --- /dev/null +++ b/go/internal/forked/kyaml/fn/framework/testdata/template-processor/templates/custom-resource/foo.template.yaml @@ -0,0 +1,14 @@ +# Copyright 2021 The Kubernetes Authors. +# SPDX-License-Identifier: Apache-2.0 + +apiVersion: example.com/v1 +kind: Foo +metadata: + name: example +spec: + targets: + - app: A + type: Go + size: small + - app: B + type: Go diff --git a/go/internal/forked/kyaml/fn/framework/testdata/validation/error/errors.txt b/go/internal/forked/kyaml/fn/framework/testdata/validation/error/errors.txt new file mode 100644 index 000000000..92f3c6a51 --- /dev/null +++ b/go/internal/forked/kyaml/fn/framework/testdata/validation/error/errors.txt @@ -0,0 +1,5 @@ +JavaSpringBoot had 4 errors: +\[\d\] replicas must be less than 10 +\[\d\] name is required +\[\d\] image should not have latest tag +\[\d\] domain must be a subdomain of example.com diff --git a/go/internal/forked/kyaml/fn/framework/testdata/validation/error/input.yaml b/go/internal/forked/kyaml/fn/framework/testdata/validation/error/input.yaml new file mode 100644 index 000000000..ad461dfd7 --- /dev/null +++ b/go/internal/forked/kyaml/fn/framework/testdata/validation/error/input.yaml @@ -0,0 +1,14 @@ +# Copyright 2021 The Kubernetes Authors. +# SPDX-License-Identifier: Apache-2.0 + +kind: ResourceList +apiVersion: config.kubernetes.io/v1 +functionConfig: + apiVersion: example.com/v1alpha1 + kind: JavaSpringBoot + metadata: + name: "" + spec: + replicas: 1000 + image: foo:latest + domain: bad diff --git a/go/internal/forked/kyaml/fn/runtime/container/container.go b/go/internal/forked/kyaml/fn/runtime/container/container.go new file mode 100644 index 000000000..52ba95f4b --- /dev/null +++ b/go/internal/forked/kyaml/fn/runtime/container/container.go @@ -0,0 +1,201 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package container + +import ( + "fmt" + "os" + + runtimeexec "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/fn/runtime/exec" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/fn/runtime/runtimeutil" + + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" +) + +// Filter filters Resources using a container image. +// The container must start a process that reads the list of +// input Resources from stdin, reads the Configuration from the env +// API_CONFIG, and writes the filtered Resources to stdout. +// If there is a error or validation failure, the process must exit +// non-zero. +// The full set of environment variables from the parent process +// are passed to the container. +// +// Function Scoping: +// Filter applies the function only to Resources to which it is scoped. +// +// Resources are scoped to a function if any of the following are true: +// - the Resource were read from the same directory as the function config +// - the Resource were read from a subdirectory of the function config directory +// - the function config is in a directory named "functions" and +// they were read from a subdirectory of "functions" parent +// - the function config doesn't have a path annotation (considered globally scoped) +// - the Filter has GlobalScope == true +// +// In Scope Examples: +// +// Example 1: deployment.yaml and service.yaml in function.yaml scope +// same directory as the function config directory +// . +// ├── function.yaml +// ├── deployment.yaml +// └── service.yaml +// +// Example 2: apps/deployment.yaml and apps/service.yaml in function.yaml scope +// subdirectory of the function config directory +// . +// ├── function.yaml +// └── apps +//    ├── deployment.yaml +//    └── service.yaml +// +// Example 3: apps/deployment.yaml and apps/service.yaml in functions/function.yaml scope +// function config is in a directory named "functions" +// . +// ├── functions +// │   └── function.yaml +// └── apps +//    ├── deployment.yaml +//    └── service.yaml +// +// Out of Scope Examples: +// +// Example 1: apps/deployment.yaml and apps/service.yaml NOT in stuff/function.yaml scope +// . +// ├── stuff +// │   └── function.yaml +// └── apps +//    ├── deployment.yaml +//    └── service.yaml +// +// Example 2: apps/deployment.yaml and apps/service.yaml NOT in stuff/functions/function.yaml scope +// . +// ├── stuff +// │   └── functions +// │    └── function.yaml +// └── apps +//    ├── deployment.yaml +//    └── service.yaml +// +// Default Paths: +// Resources emitted by functions will have default path applied as annotations +// if none is present. +// The default path will be the function-dir/ (or parent directory in the case of "functions") +// + function-file-name/ + namespace/ + kind_name.yaml +// +// Example 1: Given a function in fn.yaml that produces a Deployment name foo and a Service named bar +// dir +// └── fn.yaml +// +// Would default newly generated Resources to: +// +// dir +// ├── fn.yaml +// └── fn +//    ├── deployment_foo.yaml +//    └── service_bar.yaml +// +// Example 2: Given a function in functions/fn.yaml that produces a Deployment name foo and a Service named bar +// dir +// └── fn.yaml +// +// Would default newly generated Resources to: +// +// dir +// ├── functions +// │   └── fn.yaml +// └── fn +//    ├── deployment_foo.yaml +//    └── service_bar.yaml +// +// Example 3: Given a function in fn.yaml that produces a Deployment name foo, namespace baz and a Service named bar namespace baz +// dir +// └── fn.yaml +// +// Would default newly generated Resources to: +// +// dir +// ├── fn.yaml +// └── fn +// └── baz +//    ├── deployment_foo.yaml +//    └── service_bar.yaml +type Filter struct { + runtimeutil.ContainerSpec `json:",inline" yaml:",inline"` + + Exec runtimeexec.Filter + + UIDGID string +} + +func (c Filter) String() string { + if c.Exec.DeferFailure { + return fmt.Sprintf("%s deferFailure: %v", c.Image, c.Exec.DeferFailure) + } + return c.Image +} +func (c Filter) GetExit() error { + return c.Exec.GetExit() +} + +func (c *Filter) Filter(nodes []*yaml.RNode) ([]*yaml.RNode, error) { + if err := c.setupExec(); err != nil { + return nil, err + } + return c.Exec.Filter(nodes) +} + +func (c *Filter) setupExec() error { + // don't init 2x + if c.Exec.Path != "" { + return nil + } + wd, err := os.Getwd() + if err != nil { + return err + } + c.Exec.WorkingDir = wd + + path, args := c.getCommand() + c.Exec.Path = path + c.Exec.Args = args + return nil +} + +// getArgs returns the command + args to run to spawn the container +func (c *Filter) getCommand() (string, []string) { + network := runtimeutil.NetworkNameNone + if c.ContainerSpec.Network { + network = runtimeutil.NetworkNameHost + } + // run the container using docker. this is simpler than using the docker + // libraries, and ensures things like auth work the same as if the container + // was run from the cli. + args := []string{"run", + "--rm", // delete the container afterward + "-i", "-a", "STDIN", "-a", "STDOUT", "-a", "STDERR", // attach stdin, stdout, stderr + "--network", string(network), + + // added security options + "--user", c.UIDGID, + "--security-opt=no-new-privileges", // don't allow the user to escalate privileges + // note: don't make fs readonly because things like heredoc rely on writing tmp files + } + + // TODO(joncwong): Allow StorageMount fields to have default values. + for _, storageMount := range c.StorageMounts { + args = append(args, "--mount", storageMount.String()) + } + + args = append(args, runtimeutil.NewContainerEnvFromStringSlice(c.Env).GetDockerFlags()...) + a := append(args, c.Image) + return "docker", a +} + +// NewContainer returns a new container filter +func NewContainer(spec runtimeutil.ContainerSpec, uidgid string) Filter { + f := Filter{ContainerSpec: spec, UIDGID: uidgid} + + return f +} diff --git a/go/internal/forked/kyaml/fn/runtime/container/container_test.go b/go/internal/forked/kyaml/fn/runtime/container/container_test.go new file mode 100644 index 000000000..1aa938ffe --- /dev/null +++ b/go/internal/forked/kyaml/fn/runtime/container/container_test.go @@ -0,0 +1,249 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package container + +import ( + "bytes" + "fmt" + "os" + "testing" + + "github.com/stretchr/testify/require" + + "github.com/stretchr/testify/assert" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/fn/runtime/runtimeutil" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/kio" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" +) + +func TestFilter_setupExec(t *testing.T) { + var tests = []struct { + name string + functionConfig string + expectedArgs []string + containerSpec runtimeutil.ContainerSpec + UIDGID string + }{ + { + name: "command", + functionConfig: `apiVersion: apps/v1 +kind: Deployment +metadata: + name: foo +`, + expectedArgs: []string{ + "run", + "--rm", + "-i", "-a", "STDIN", "-a", "STDOUT", "-a", "STDERR", + "--network", "none", + "--user", "nobody", + "--security-opt=no-new-privileges", + }, + containerSpec: runtimeutil.ContainerSpec{ + Image: "example.com:version", + }, + UIDGID: "nobody", + }, + + { + name: "network", + functionConfig: `apiVersion: apps/v1 +kind: Deployment +metadata: + name: foo +`, + expectedArgs: []string{ + "run", + "--rm", + "-i", "-a", "STDIN", "-a", "STDOUT", "-a", "STDERR", + "--network", "host", + "--user", "nobody", + "--security-opt=no-new-privileges", + }, + containerSpec: runtimeutil.ContainerSpec{ + Image: "example.com:version", + Network: true, + }, + UIDGID: "nobody", + }, + + { + name: "storage_mounts", + functionConfig: `apiVersion: apps/v1 +kind: Deployment +metadata: + name: foo +`, + expectedArgs: []string{ + "run", + "--rm", + "-i", "-a", "STDIN", "-a", "STDOUT", "-a", "STDERR", + "--network", "none", + "--user", "nobody", + "--security-opt=no-new-privileges", + "--mount", fmt.Sprintf("type=%s,source=%s,target=%s,readonly", "bind", "/mount/path", "/local/"), + "--mount", fmt.Sprintf("type=%s,source=%s,target=%s", "bind", "/mount/pathrw", "/localrw/"), + "--mount", fmt.Sprintf("type=%s,source=%s,target=%s,readonly", "volume", "myvol", "/local/"), + "--mount", fmt.Sprintf("type=%s,source=%s,target=%s,readonly", "tmpfs", "", "/local/"), + }, + containerSpec: runtimeutil.ContainerSpec{ + Image: "example.com:version", + StorageMounts: []runtimeutil.StorageMount{ + {MountType: "bind", Src: "/mount/path", DstPath: "/local/"}, + {MountType: "bind", Src: "/mount/pathrw", DstPath: "/localrw/", ReadWriteMode: true}, + {MountType: "volume", Src: "myvol", DstPath: "/local/"}, + {MountType: "tmpfs", Src: "", DstPath: "/local/"}, + }, + }, + UIDGID: "nobody", + }, + { + name: "as current user", + functionConfig: `apiVersion: apps/v1 +kind: Deployment +metadata: + name: foo +`, + expectedArgs: []string{ + "run", + "--rm", + "-i", "-a", "STDIN", "-a", "STDOUT", "-a", "STDERR", + "--network", "none", + "--user", "1:2", + "--security-opt=no-new-privileges", + }, + containerSpec: runtimeutil.ContainerSpec{ + Image: "example.com:version", + }, + UIDGID: "1:2", + }, + } + + for i := range tests { + tt := tests[i] + t.Run(tt.name, func(t *testing.T) { + cfg, err := yaml.Parse(tt.functionConfig) + if !assert.NoError(t, err) { + t.FailNow() + } + + instance := NewContainer(tt.containerSpec, tt.UIDGID) + instance.Exec.FunctionConfig = cfg + instance.Env = append(instance.Env, "KYAML_TEST=FOO") + assert.NoError(t, instance.setupExec()) + + tt.expectedArgs = append(tt.expectedArgs, + runtimeutil.NewContainerEnvFromStringSlice(instance.Env).GetDockerFlags()...) + tt.expectedArgs = append(tt.expectedArgs, instance.Image) + + if !assert.Equal(t, "docker", instance.Exec.Path) { + t.FailNow() + } + if !assert.Equal(t, tt.expectedArgs, instance.Exec.Args) { + t.FailNow() + } + }) + } +} + +func TestFilter_Filter(t *testing.T) { + cfg, err := yaml.Parse(`apiVersion: apps/v1 +kind: Deployment +metadata: + name: foo +`) + if !assert.NoError(t, err) { + return + } + + input, err := (&kio.ByteReader{Reader: bytes.NewBufferString(` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: deployment-foo +--- +apiVersion: v1 +kind: Service +metadata: + name: service-foo +`)}).Read() + if !assert.NoError(t, err) { + return + } + + instance := Filter{} + instance.Exec.FunctionConfig = cfg + instance.Exec.Path = "sed" + instance.Exec.Args = []string{"s/Deployment/StatefulSet/g"} + instance.Exec.WorkingDir = getWorkingDir(t) + + output, err := instance.Filter(input) + if !assert.NoError(t, err) { + t.FailNow() + } + + b := &bytes.Buffer{} + err = kio.ByteWriter{Writer: b, KeepReaderAnnotations: true}.Write(output) + if !assert.NoError(t, err) { + t.FailNow() + } + + if !assert.Equal(t, `apiVersion: apps/v1 +kind: StatefulSet +metadata: + name: deployment-foo + annotations: + config.kubernetes.io/index: '0' + internal.config.kubernetes.io/index: '0' + internal.config.kubernetes.io/path: 'statefulset_deployment-foo.yaml' + config.kubernetes.io/path: 'statefulset_deployment-foo.yaml' +--- +apiVersion: v1 +kind: Service +metadata: + name: service-foo + annotations: + config.kubernetes.io/index: '1' + internal.config.kubernetes.io/index: '1' + internal.config.kubernetes.io/path: 'service_service-foo.yaml' + config.kubernetes.io/path: 'service_service-foo.yaml' +`, b.String()) { + t.FailNow() + } +} +func TestFilter_String(t *testing.T) { + instance := Filter{ContainerSpec: runtimeutil.ContainerSpec{Image: "foo"}} + if !assert.Equal(t, "foo", instance.String()) { + t.FailNow() + } + + instance.Exec.DeferFailure = true + if !assert.Equal(t, "foo deferFailure: true", instance.String()) { + t.FailNow() + } +} + +func TestFilter_ExitCode(t *testing.T) { + instance := Filter{} + instance.Exec.Path = "/not/real/command" + instance.Exec.DeferFailure = true + instance.Exec.WorkingDir = getWorkingDir(t) + _, err := instance.Filter(nil) + if !assert.NoError(t, err) { + t.FailNow() + } + + if !assert.Error(t, instance.GetExit()) { + t.FailNow() + } + if !assert.Contains(t, instance.GetExit().Error(), "/not/real/command") { + t.FailNow() + } +} + +func getWorkingDir(t *testing.T) string { + wd, err := os.Getwd() + require.NoError(t, err) + return wd +} diff --git a/go/internal/forked/kyaml/fn/runtime/exec/doc.go b/go/internal/forked/kyaml/fn/runtime/exec/doc.go new file mode 100644 index 000000000..2747a96fb --- /dev/null +++ b/go/internal/forked/kyaml/fn/runtime/exec/doc.go @@ -0,0 +1,5 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +// Package exec contains the exec function implementation. +package exec diff --git a/go/internal/forked/kyaml/fn/runtime/exec/exec.go b/go/internal/forked/kyaml/fn/runtime/exec/exec.go new file mode 100644 index 000000000..3ae8508e4 --- /dev/null +++ b/go/internal/forked/kyaml/fn/runtime/exec/exec.go @@ -0,0 +1,54 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package exec + +import ( + "io" + "os" + "os/exec" + "path/filepath" + + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/errors" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/fn/runtime/runtimeutil" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" +) + +type Filter struct { + // Path is the path to the executable to run + Path string `yaml:"path,omitempty"` + + // Args are the arguments to the executable + Args []string `yaml:"args,omitempty"` + + // WorkingDir is the working directory that the executable + // should run in + WorkingDir string + + runtimeutil.FunctionFilter +} + +func (c *Filter) Filter(nodes []*yaml.RNode) ([]*yaml.RNode, error) { + c.FunctionFilter.Run = c.Run + return c.FunctionFilter.Filter(nodes) +} + +func (c *Filter) Run(reader io.Reader, writer io.Writer) error { + cmd := exec.Command(c.Path, c.Args...) + cmd.Stdin = reader + cmd.Stdout = writer + cmd.Stderr = os.Stderr + if c.WorkingDir == "" { + return errors.Errorf("no working directory set for exec function") + } + if !filepath.IsAbs(c.WorkingDir) { + return errors.Errorf( + "relative working directory %s not allowed", c.WorkingDir) + } + if c.WorkingDir == "/" { + return errors.Errorf( + "root working directory '/' not allowed") + } + cmd.Dir = c.WorkingDir + return cmd.Run() +} diff --git a/go/internal/forked/kyaml/fn/runtime/exec/exec_test.go b/go/internal/forked/kyaml/fn/runtime/exec/exec_test.go new file mode 100644 index 000000000..483ca1aad --- /dev/null +++ b/go/internal/forked/kyaml/fn/runtime/exec/exec_test.go @@ -0,0 +1,119 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package exec_test + +import ( + "os" + "strings" + "testing" + + "github.com/stretchr/testify/assert" + "github.com/stretchr/testify/require" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/fn/runtime/exec" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" +) + +func TestFunctionFilter_Filter(t *testing.T) { + wd, err := os.Getwd() + require.NoError(t, err) + var tests = []struct { + name string + input []string + functionConfig string + expectedOutput []string + expectedError string + instance exec.Filter + }{ + { + name: "exec_sed", + input: []string{ + `apiVersion: apps/v1 +kind: Deployment +metadata: + name: deployment-foo`, + `apiVersion: v1 +kind: Service +metadata: + name: service-foo`, + }, + expectedOutput: []string{ + `apiVersion: apps/v1 +kind: StatefulSet +metadata: + name: deployment-foo + annotations: + internal.config.kubernetes.io/path: 'statefulset_deployment-foo.yaml' + config.kubernetes.io/path: 'statefulset_deployment-foo.yaml' +`, + `apiVersion: v1 +kind: Service +metadata: + name: service-foo + annotations: + internal.config.kubernetes.io/path: 'service_service-foo.yaml' + config.kubernetes.io/path: 'service_service-foo.yaml' +`, + }, + expectedError: "", + instance: exec.Filter{ + Path: "sed", + Args: []string{"s/Deployment/StatefulSet/g"}, + WorkingDir: wd, + }, + }, + } + + for i := range tests { + tt := tests[i] + t.Run(tt.name, func(t *testing.T) { + // initialize the inputs for the FunctionFilter + var inputs []*yaml.RNode + for i := range tt.input { + node, err := yaml.Parse(tt.input[i]) + if !assert.NoError(t, err) { + t.FailNow() + } + inputs = append(inputs, node) + } + if tt.functionConfig != "" { + fc, err := yaml.Parse(tt.functionConfig) + if !assert.NoError(t, err) { + t.FailNow() + } + tt.instance.FunctionConfig = fc + } + + // run the function + output, err := tt.instance.Filter(inputs) + + // check for errors + if tt.expectedError != "" { + if !assert.EqualError(t, err, tt.expectedError) { + t.FailNow() + } + return + } + if !assert.NoError(t, err) { + t.FailNow() + } + + // verify the output + var actual []string + for i := range output { + s, err := output[i].String() + if !assert.NoError(t, err) { + t.FailNow() + } + actual = append(actual, strings.TrimSpace(s)) + } + var expected []string + for i := range tt.expectedOutput { + expected = append(expected, strings.TrimSpace(tt.expectedOutput[i])) + } + if !assert.Equal(t, expected, actual) { + t.FailNow() + } + }) + } +} diff --git a/go/internal/forked/kyaml/fn/runtime/runtimeutil/doc.go b/go/internal/forked/kyaml/fn/runtime/runtimeutil/doc.go new file mode 100644 index 000000000..89f9036a4 --- /dev/null +++ b/go/internal/forked/kyaml/fn/runtime/runtimeutil/doc.go @@ -0,0 +1,5 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +// Package runtimeutil contains libraries for implementing function runtimes. +package runtimeutil diff --git a/go/internal/forked/kyaml/fn/runtime/runtimeutil/functiontypes.go b/go/internal/forked/kyaml/fn/runtime/runtimeutil/functiontypes.go new file mode 100644 index 000000000..77f168221 --- /dev/null +++ b/go/internal/forked/kyaml/fn/runtime/runtimeutil/functiontypes.go @@ -0,0 +1,305 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package runtimeutil + +import ( + "fmt" + "os" + "sort" + "strings" + + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" +) + +const ( + FunctionAnnotationKey = "config.kubernetes.io/function" + oldFunctionAnnotationKey = "config.k8s.io/function" +) + +var functionAnnotationKeys = []string{FunctionAnnotationKey, oldFunctionAnnotationKey} + +// ContainerNetworkName is a type for network name used in container +type ContainerNetworkName string + +const ( + NetworkNameNone ContainerNetworkName = "none" + NetworkNameHost ContainerNetworkName = "host" +) +const defaultEnvValue string = "true" + +// ContainerEnv defines the environment present in a container. +type ContainerEnv struct { + // EnvVars is a key-value map that will be set as env in container + EnvVars map[string]string + + // VarsToExport are only env key. Value will be the value in the host system + VarsToExport []string +} + +// GetDockerFlags returns docker run style env flags +func (ce *ContainerEnv) GetDockerFlags() []string { + envs := ce.EnvVars + if envs == nil { + envs = make(map[string]string) + } + + flags := []string{} + // return in order to keep consistent among different runs + keys := []string{} + for k := range envs { + keys = append(keys, k) + } + sort.Strings(keys) + for _, key := range keys { + flags = append(flags, "-e", key+"="+envs[key]) + } + + for _, key := range ce.VarsToExport { + flags = append(flags, "-e", key) + } + + return flags +} + +// AddKeyValue adds a key-value pair into the envs +func (ce *ContainerEnv) AddKeyValue(key, value string) { + if ce.EnvVars == nil { + ce.EnvVars = make(map[string]string) + } + ce.EnvVars[key] = value +} + +// HasExportedKey returns true if the key is a exported key +func (ce *ContainerEnv) HasExportedKey(key string) bool { + for _, k := range ce.VarsToExport { + if k == key { + return true + } + } + return false +} + +// AddKey adds a key into the envs +func (ce *ContainerEnv) AddKey(key string) { + if !ce.HasExportedKey(key) { + ce.VarsToExport = append(ce.VarsToExport, key) + } +} + +// Raw returns a slice of string which represents the envs. +// Example: [foo=bar, baz] +func (ce *ContainerEnv) Raw() []string { + var ret []string + for k, v := range ce.EnvVars { + ret = append(ret, k+"="+v) + } + + ret = append(ret, ce.VarsToExport...) + return ret +} + +// NewContainerEnv returns a pointer to a new ContainerEnv +func NewContainerEnv() *ContainerEnv { + var ce ContainerEnv + ce.EnvVars = make(map[string]string) + // default envs + ce.EnvVars["LOG_TO_STDERR"] = defaultEnvValue + ce.EnvVars["STRUCTURED_RESULTS"] = defaultEnvValue + return &ce +} + +// NewContainerEnvFromStringSlice returns a new ContainerEnv pointer with parsing +// input envStr. envStr example: ["foo=bar", "baz"] +func NewContainerEnvFromStringSlice(envStr []string) *ContainerEnv { + ce := NewContainerEnv() + for _, e := range envStr { + parts := strings.SplitN(e, "=", 2) + if len(parts) == 1 { + ce.AddKey(e) + } else { + ce.AddKeyValue(parts[0], parts[1]) + } + } + return ce +} + +// FunctionSpec defines a spec for running a function +type FunctionSpec struct { + DeferFailure bool `json:"deferFailure,omitempty" yaml:"deferFailure,omitempty"` + + // Container is the spec for running a function as a container + Container ContainerSpec `json:"container,omitempty" yaml:"container,omitempty"` + + // Starlark is the spec for running a function as a starlark script + Starlark StarlarkSpec `json:"starlark,omitempty" yaml:"starlark,omitempty"` + + // ExecSpec is the spec for running a function as an executable + Exec ExecSpec `json:"exec,omitempty" yaml:"exec,omitempty"` + + // Mounts are the storage or directories to mount into the container + StorageMounts []StorageMount `json:"mounts,omitempty" yaml:"mounts,omitempty"` +} + +type ExecSpec struct { + Path string `json:"path,omitempty" yaml:"path,omitempty"` +} + +// ContainerSpec defines a spec for running a function as a container +type ContainerSpec struct { + // Image is the container image to run + Image string `json:"image,omitempty" yaml:"image,omitempty"` + + // Network defines network specific configuration + Network bool `json:"network,omitempty" yaml:"network,omitempty"` + + // Mounts are the storage or directories to mount into the container + StorageMounts []StorageMount `json:"mounts,omitempty" yaml:"mounts,omitempty"` + + // Env is a slice of env string that will be exposed to container + Env []string `json:"envs,omitempty" yaml:"envs,omitempty"` +} + +// StarlarkSpec defines how to run a function as a starlark program +type StarlarkSpec struct { + Name string `json:"name,omitempty" yaml:"name,omitempty"` + + // Path specifies a path to a starlark script + Path string `json:"path,omitempty" yaml:"path,omitempty"` + + // URL specifies a url containing a starlark script + URL string `json:"url,omitempty" yaml:"url,omitempty"` +} + +// StorageMount represents a container's mounted storage option(s) +type StorageMount struct { + // Type of mount e.g. bind mount, local volume, etc. + MountType string `json:"type,omitempty" yaml:"type,omitempty"` + + // Source for the storage to be mounted. + // For named volumes, this is the name of the volume. + // For anonymous volumes, this field is omitted (empty string). + // For bind mounts, this is the path to the file or directory on the host. + Src string `json:"src,omitempty" yaml:"src,omitempty"` + + // The path where the file or directory is mounted in the container. + DstPath string `json:"dst,omitempty" yaml:"dst,omitempty"` + + // Mount in ReadWrite mode if it's explicitly configured + // See https://docs.docker.com/storage/bind-mounts/#use-a-read-only-bind-mount + ReadWriteMode bool `json:"rw,omitempty" yaml:"rw,omitempty"` +} + +func (s *StorageMount) String() string { + mode := "" + if !s.ReadWriteMode { + mode = ",readonly" + } + return fmt.Sprintf("type=%s,source=%s,target=%s%s", s.MountType, s.Src, s.DstPath, mode) +} + +// GetFunctionSpec returns the FunctionSpec for a resource. Returns +// nil if the resource does not have a FunctionSpec. +// +// The FunctionSpec is read from the resource metadata.annotation +// "config.kubernetes.io/function" +func GetFunctionSpec(n *yaml.RNode) *FunctionSpec { + meta, err := n.GetMeta() + if err != nil { + return nil + } + + if fn := getFunctionSpecFromAnnotation(n, meta); fn != nil { + fn.StorageMounts = []StorageMount{} + return fn + } + + // legacy function specification for backwards compatibility + container := meta.Annotations["config.kubernetes.io/container"] + if container != "" { + return &FunctionSpec{Container: ContainerSpec{Image: container}} + } + return nil +} + +// getFunctionSpecFromAnnotation parses the config function from an annotation +// if it is found +func getFunctionSpecFromAnnotation(n *yaml.RNode, meta yaml.ResourceMeta) *FunctionSpec { + var fs FunctionSpec + for _, s := range functionAnnotationKeys { + fn := meta.Annotations[s] + if fn != "" { + err := yaml.Unmarshal([]byte(fn), &fs) + if err != nil { + fmt.Fprintf(os.Stderr, "%v\n", err) + } + return &fs + } + } + n, err := n.Pipe(yaml.Lookup("metadata", "configFn")) + if err != nil || yaml.IsMissingOrNull(n) { + return nil + } + s, err := n.String() + if err != nil { + fmt.Fprintf(os.Stderr, "%v\n", err) + } + err = yaml.Unmarshal([]byte(s), &fs) + if err != nil { + fmt.Fprintf(os.Stderr, "%v\n", err) + } + return &fs +} + +func StringToStorageMount(s string) StorageMount { + m := make(map[string]string) + options := strings.Split(s, ",") + for _, option := range options { + keyVal := strings.SplitN(option, "=", 2) + if len(keyVal) == 2 { + m[keyVal[0]] = keyVal[1] + } + } + var sm StorageMount + for key, value := range m { + switch { + case key == "type": + sm.MountType = value + case key == "src" || key == "source": + sm.Src = value + case key == "dst" || key == "target": + sm.DstPath = value + case key == "rw" && value == "true": + sm.ReadWriteMode = true + } + } + return sm +} + +// IsReconcilerFilter filters Resources based on whether or not they are Reconciler Resource. +// Resources with an apiVersion starting with '*.gcr.io', 'gcr.io' or 'docker.io' are considered +// Reconciler Resources. +type IsReconcilerFilter struct { + // ExcludeReconcilers if set to true, then Reconcilers will be excluded -- e.g. + // Resources with a reconcile container through the apiVersion (gcr.io prefix) or + // through the annotations + ExcludeReconcilers bool `yaml:"excludeReconcilers,omitempty"` + + // IncludeNonReconcilers if set to true, the NonReconciler will be included. + IncludeNonReconcilers bool `yaml:"includeNonReconcilers,omitempty"` +} + +// Filter implements kio.Filter +func (c *IsReconcilerFilter) Filter(inputs []*yaml.RNode) ([]*yaml.RNode, error) { + var out []*yaml.RNode + for i := range inputs { + isFnResource := GetFunctionSpec(inputs[i]) != nil + if isFnResource && !c.ExcludeReconcilers { + out = append(out, inputs[i]) + } + if !isFnResource && c.IncludeNonReconcilers { + out = append(out, inputs[i]) + } + } + return out, nil +} diff --git a/go/internal/forked/kyaml/fn/runtime/runtimeutil/runtimeutil.go b/go/internal/forked/kyaml/fn/runtime/runtimeutil/runtimeutil.go new file mode 100644 index 000000000..896bb3abf --- /dev/null +++ b/go/internal/forked/kyaml/fn/runtime/runtimeutil/runtimeutil.go @@ -0,0 +1,281 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package runtimeutil + +import ( + "bytes" + "fmt" + "io" + "io/ioutil" + "path" + "strings" + + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/comments" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/errors" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/kio" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/kio/kioutil" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/order" + + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" +) + +// FunctionFilter wraps another filter to be invoked in the context of a function. +// FunctionFilter manages scoping the function, deferring failures, and saving results +// to files. +type FunctionFilter struct { + // Run implements the function. + Run func(reader io.Reader, writer io.Writer) error + + // FunctionConfig is passed to the function through ResourceList.functionConfig. + FunctionConfig *yaml.RNode `yaml:"functionConfig,omitempty"` + + // GlobalScope explicitly scopes the function to all input resources rather than only those + // resources scoped to it by path. + GlobalScope bool + + // ResultsFile is the file to write function ResourceList.results to. + // If unset, results will not be written. + ResultsFile string + + // DeferFailure will cause the Filter to return a nil error even if Run returns an error. + // The Run error will be available through GetExit(). + DeferFailure bool + + // results saves the results emitted from Run + Results *yaml.RNode + + // exit saves the error returned from Run + exit error + + ids map[string]*yaml.RNode +} + +// GetExit returns the error from Run +func (c FunctionFilter) GetExit() error { + return c.exit +} + +// functionsDirectoryName is keyword directory name for functions scoped 1 directory higher +const functionsDirectoryName = "functions" + +// getFunctionScope returns the path of the directory containing the function config, +// or its parent directory if the base directory is named "functions" +func (c *FunctionFilter) getFunctionScope() (string, error) { + m, err := c.FunctionConfig.GetMeta() + if err != nil { + return "", errors.Wrap(err) + } + var p string + var found bool + p, found = m.Annotations[kioutil.PathAnnotation] + if !found { + p, found = m.Annotations[kioutil.LegacyPathAnnotation] + if !found { + return "", nil + } + } + + functionDir := path.Clean(path.Dir(p)) + + if path.Base(functionDir) == functionsDirectoryName { + // the scope of functions in a directory called "functions" is 1 level higher + // this is similar to how the golang "internal" directory scoping works + functionDir = path.Dir(functionDir) + } + return functionDir, nil +} + +// scope partitions the input nodes into 2 slices. The first slice contains only Resources +// which are scoped under dir, and the second slice contains the Resources which are not. +func (c *FunctionFilter) scope(dir string, nodes []*yaml.RNode) ([]*yaml.RNode, []*yaml.RNode, error) { + // scope container filtered Resources to Resources under that directory + var input, saved []*yaml.RNode + if c.GlobalScope { + return nodes, nil, nil + } + + // global function + if dir == "" || dir == "." { + return nodes, nil, nil + } + + // identify Resources read from directories under the function configuration + for i := range nodes { + m, err := nodes[i].GetMeta() + if err != nil { + return nil, nil, err + } + var p string + var found bool + p, found = m.Annotations[kioutil.PathAnnotation] + if !found { + p, found = m.Annotations[kioutil.LegacyPathAnnotation] + if !found { + // this Resource isn't scoped under the function -- don't know where it came from + // consider it out of scope + saved = append(saved, nodes[i]) + continue + } + } + + resourceDir := path.Clean(path.Dir(p)) + if path.Base(resourceDir) == functionsDirectoryName { + // Functions in the `functions` directory are scoped to + // themselves, and should see themselves as input + resourceDir = path.Dir(resourceDir) + } + if !strings.HasPrefix(resourceDir, dir) { + // this Resource doesn't fall under the function scope if it + // isn't in a subdirectory of where the function lives + saved = append(saved, nodes[i]) + continue + } + + // this input is scoped under the function + input = append(input, nodes[i]) + } + + return input, saved, nil +} + +func (c *FunctionFilter) Filter(nodes []*yaml.RNode) ([]*yaml.RNode, error) { + in := &bytes.Buffer{} + out := &bytes.Buffer{} + + // only process Resources scoped to this function, save the others + functionDir, err := c.getFunctionScope() + if err != nil { + return nil, err + } + input, saved, err := c.scope(functionDir, nodes) + if err != nil { + return nil, err + } + + // set ids on each input so it is possible to copy comments from inputs back to outputs + if err := c.setIds(input); err != nil { + return nil, err + } + + // write the input + err = kio.ByteWriter{ + WrappingAPIVersion: kio.ResourceListAPIVersion, + WrappingKind: kio.ResourceListKind, + Writer: in, + KeepReaderAnnotations: true, + FunctionConfig: c.FunctionConfig}.Write(input) + if err != nil { + return nil, err + } + + // capture the command stdout for the return value + r := &kio.ByteReader{Reader: out} + + // don't exit immediately if the function fails -- write out the validation + c.exit = c.Run(in, out) + + output, err := r.Read() + if err != nil { + return nil, err + } + + // copy the comments and sync the order of fields from the inputs to the outputs + if err := c.copyCommentsAndSyncOrder(output); err != nil { + return nil, err + } + + if err := c.doResults(r); err != nil { + return nil, err + } + + if c.exit != nil && !c.DeferFailure { + return append(output, saved...), c.exit + } + + // annotate any generated Resources with a path and index if they don't already have one + if err := kioutil.DefaultPathAnnotation(functionDir, output); err != nil { + return nil, err + } + + // emit both the Resources output from the function, and the out-of-scope Resources + // which were not provided to the function + return append(output, saved...), nil +} + +func (c *FunctionFilter) setIds(nodes []*yaml.RNode) error { + // set the id on each node to map inputs to outputs + var id int + c.ids = map[string]*yaml.RNode{} + for i := range nodes { + id++ + idStr := fmt.Sprintf("%v", id) + err := nodes[i].PipeE(yaml.SetAnnotation(kioutil.IdAnnotation, idStr)) + if err != nil { + return errors.Wrap(err) + } + err = nodes[i].PipeE(yaml.SetAnnotation(kioutil.LegacyIdAnnotation, idStr)) + if err != nil { + return errors.Wrap(err) + } + c.ids[idStr] = nodes[i] + } + return nil +} + +func (c *FunctionFilter) copyCommentsAndSyncOrder(nodes []*yaml.RNode) error { + for i := range nodes { + node := nodes[i] + anID, err := node.Pipe(yaml.GetAnnotation(kioutil.IdAnnotation)) + if err != nil { + return errors.Wrap(err) + } + if anID == nil { + anID, err = node.Pipe(yaml.GetAnnotation(kioutil.LegacyIdAnnotation)) + if err != nil { + return errors.Wrap(err) + } + if anID == nil { + continue + } + } + + var in *yaml.RNode + var found bool + if in, found = c.ids[anID.YNode().Value]; !found { + continue + } + if err := comments.CopyComments(in, node); err != nil { + return errors.Wrap(err) + } + if err := order.SyncOrder(in, node); err != nil { + return errors.Wrap(err) + } + if err := node.PipeE(yaml.ClearAnnotation(kioutil.IdAnnotation)); err != nil { + return errors.Wrap(err) + } + if err := node.PipeE(yaml.ClearAnnotation(kioutil.LegacyIdAnnotation)); err != nil { + return errors.Wrap(err) + } + } + return nil +} + +func (c *FunctionFilter) doResults(r *kio.ByteReader) error { + // Write the results to a file if configured to do so + if c.ResultsFile != "" && r.Results != nil { + results, err := r.Results.String() + if err != nil { + return err + } + err = ioutil.WriteFile(c.ResultsFile, []byte(results), 0600) + if err != nil { + return err + } + } + + if r.Results != nil { + c.Results = r.Results + } + return nil +} diff --git a/go/internal/forked/kyaml/fn/runtime/runtimeutil/runtimeutil_test.go b/go/internal/forked/kyaml/fn/runtime/runtimeutil/runtimeutil_test.go new file mode 100644 index 000000000..dc7926182 --- /dev/null +++ b/go/internal/forked/kyaml/fn/runtime/runtimeutil/runtimeutil_test.go @@ -0,0 +1,1539 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package runtimeutil + +import ( + "fmt" + "io" + "io/ioutil" + "os" + "strings" + "testing" + + "github.com/stretchr/testify/assert" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" +) + +type testRun struct { + err error + expectedInput string + output string + t *testing.T +} + +func (r testRun) run(reader io.Reader, writer io.Writer) error { + if r.expectedInput != "" { + input, err := ioutil.ReadAll(reader) + if !assert.NoError(r.t, err) { + r.t.FailNow() + } + + // verify input matches expected + if !assert.Equal(r.t, r.expectedInput, string(input)) { + r.t.FailNow() + } + } + + _, err := writer.Write([]byte(r.output)) + if !assert.NoError(r.t, err) { + r.t.FailNow() + } + + return r.err +} + +func TestFunctionFilter_Filter(t *testing.T) { + var tests = []struct { + run testRun + name string + input []string + functionConfig string + expectedOutput []string + expectedError string + expectedSavedError string + expectedResults string + noMakeResultsFile bool + instance FunctionFilter + }{ + // verify that resources emitted from the function have a file path defaulted + // if none already exists + { + name: "default_file_path_annotation", + run: testRun{ + output: ` +apiVersion: config.kubernetes.io/v1 +kind: ResourceList +items: +- apiVersion: apps/v1 + kind: Deployment + metadata: + name: deployment-foo +- apiVersion: v1 + kind: Service + metadata: + name: service-foo +`, + }, + expectedOutput: []string{ + ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: deployment-foo + annotations: + internal.config.kubernetes.io/path: 'deployment_deployment-foo.yaml' + config.kubernetes.io/path: 'deployment_deployment-foo.yaml' +`, + ` +apiVersion: v1 +kind: Service +metadata: + name: service-foo + annotations: + internal.config.kubernetes.io/path: 'service_service-foo.yaml' + config.kubernetes.io/path: 'service_service-foo.yaml' +`, + }, + }, + + // verify that resources emitted from the function do not have a file path defaulted + // if one already exists + { + name: "no_default_file_path_annotation", + run: testRun{ + output: ` +apiVersion: config.kubernetes.io/v1 +kind: ResourceList +items: +- apiVersion: apps/v1 + kind: Deployment + metadata: + name: deployment-foo +- apiVersion: v1 + kind: Service + metadata: + name: service-foo + annotations: + config.kubernetes.io/path: 'foo.yaml' +`, + }, + expectedOutput: []string{ + ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: deployment-foo + annotations: + internal.config.kubernetes.io/path: 'deployment_deployment-foo.yaml' + config.kubernetes.io/path: 'deployment_deployment-foo.yaml' +`, + ` +apiVersion: v1 +kind: Service +metadata: + name: service-foo + annotations: + config.kubernetes.io/path: 'foo.yaml' + internal.config.kubernetes.io/path: 'foo.yaml' +`, + }, + }, + + // verify the FunctionFilter correctly writes the inputs and reads the outputs + // of Run + { + name: "write_read", + run: testRun{ + output: ` +apiVersion: config.kubernetes.io/v1 +kind: ResourceList +items: +- apiVersion: v1 + kind: Service + metadata: + name: service-foo + annotations: + config.kubernetes.io/path: 'foo.yaml' +- apiVersion: v1 + kind: ConfigMap + metadata: + name: configmap-foo + annotations: + config.kubernetes.io/path: 'foo.yaml' +`, + }, + input: []string{ + ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: deployment-foo +`, + ` +apiVersion: v1 +kind: Service +metadata: + name: service-foo +`, + }, + expectedOutput: []string{` +apiVersion: v1 +kind: Service +metadata: + name: service-foo + annotations: + config.kubernetes.io/path: 'foo.yaml' + internal.config.kubernetes.io/path: 'foo.yaml' +`, + ` +apiVersion: v1 +kind: ConfigMap +metadata: + name: configmap-foo + annotations: + config.kubernetes.io/path: 'foo.yaml' + internal.config.kubernetes.io/path: 'foo.yaml' +`, + }, + }, + + // verify that the results file is written + // + { + name: "write_results_file", + run: testRun{ + output: `apiVersion: config.kubernetes.io/v1 +kind: ResourceList +items: +- apiVersion: apps/v1 + kind: Deployment + metadata: + name: deployment-foo +- apiVersion: v1 + kind: Service + metadata: + name: service-foo +results: +- apiVersion: config.k8s.io/v1alpha1 + kind: ObjectError + name: "some-validator" + items: + - type: error + message: "some message" + resourceRef: + apiVersion: apps/v1 + kind: Deployment + name: foo + namespace: bar + file: + path: deploy.yaml + index: 0 + field: + path: "spec.template.spec.containers[3].resources.limits.cpu" + currentValue: "200" + suggestedValue: "2" +`, + }, + expectedOutput: []string{` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: deployment-foo + annotations: + internal.config.kubernetes.io/path: 'deployment_deployment-foo.yaml' + config.kubernetes.io/path: 'deployment_deployment-foo.yaml' +`, ` +apiVersion: v1 +kind: Service +metadata: + name: service-foo + annotations: + internal.config.kubernetes.io/path: 'service_service-foo.yaml' + config.kubernetes.io/path: 'service_service-foo.yaml' +`, + }, + expectedResults: ` +- apiVersion: config.k8s.io/v1alpha1 + kind: ObjectError + name: "some-validator" + items: + - type: error + message: "some message" + resourceRef: + apiVersion: apps/v1 + kind: Deployment + name: foo + namespace: bar + file: + path: deploy.yaml + index: 0 + field: + path: "spec.template.spec.containers[3].resources.limits.cpu" + currentValue: "200" + suggestedValue: "2" +`, + }, + + // verify that the results file is written for functions that exist non-0 + // and the FunctionFilter returns the error + { + name: "write_results_file_function_exit_non_0", + expectedError: "failed", + run: testRun{ + err: fmt.Errorf("failed"), + output: ` +apiVersion: config.kubernetes.io/v1 +kind: ResourceList +items: +- apiVersion: apps/v1 + kind: Deployment + metadata: + name: deployment-foo +- apiVersion: v1 + kind: Service + metadata: + name: service-foo +results: +- apiVersion: config.k8s.io/v1alpha1 + kind: ObjectError + name: "some-validator" + items: + - type: error + message: "some message" + resourceRef: + apiVersion: apps/v1 + kind: Deployment + name: foo + namespace: bar + file: + path: deploy.yaml + index: 0 + field: + path: "spec.template.spec.containers[3].resources.limits.cpu" + currentValue: "200" + suggestedValue: "2" +`, + }, + expectedOutput: []string{ + ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: deployment-foo + annotations: + config.kubernetes.io/path: 'deployment_deployment-foo.yaml' + `, ` +apiVersion: v1 +kind: Service +metadata: + name: service-foo + annotations: + config.kubernetes.io/path: 'service_service-foo.yaml' + `, + }, + expectedResults: ` +- apiVersion: config.k8s.io/v1alpha1 + kind: ObjectError + name: "some-validator" + items: + - type: error + message: "some message" + resourceRef: + apiVersion: apps/v1 + kind: Deployment + name: foo + namespace: bar + file: + path: deploy.yaml + index: 0 + field: + path: "spec.template.spec.containers[3].resources.limits.cpu" + currentValue: "200" + suggestedValue: "2" + `, + }, + + // verify that if deferFailure is set, the results file is written and the + // exit error is saved, but the FunctionFilter does not return an error. + { + name: "write_results_defer_failure", + instance: FunctionFilter{DeferFailure: true}, + expectedSavedError: "failed", + run: testRun{ + err: fmt.Errorf("failed"), + output: ` +apiVersion: config.kubernetes.io/v1 +kind: ResourceList +items: +- apiVersion: apps/v1 + kind: Deployment + metadata: + name: deployment-foo +- apiVersion: v1 + kind: Service + metadata: + name: service-foo +results: +- apiVersion: config.k8s.io/v1alpha1 + kind: ObjectError + name: "some-validator" + items: + - type: error + message: "some message" + resourceRef: + apiVersion: apps/v1 + kind: Deployment + name: foo + namespace: bar + file: + path: deploy.yaml + index: 0 + field: + path: "spec.template.spec.containers[3].resources.limits.cpu" + currentValue: "200" + suggestedValue: "2"`, + }, + expectedOutput: []string{ + ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: deployment-foo + annotations: + internal.config.kubernetes.io/path: 'deployment_deployment-foo.yaml' + config.kubernetes.io/path: 'deployment_deployment-foo.yaml' + `, ` +apiVersion: v1 +kind: Service +metadata: + name: service-foo + annotations: + internal.config.kubernetes.io/path: 'service_service-foo.yaml' + config.kubernetes.io/path: 'service_service-foo.yaml' + `, + }, + expectedResults: ` +- apiVersion: config.k8s.io/v1alpha1 + kind: ObjectError + name: "some-validator" + items: + - type: error + message: "some message" + resourceRef: + apiVersion: apps/v1 + kind: Deployment + name: foo + namespace: bar + file: + path: deploy.yaml + index: 0 + field: + path: "spec.template.spec.containers[3].resources.limits.cpu" + currentValue: "200" + suggestedValue: "2"`, + }, + + { + name: "write_results_bad_results_file", + expectedError: "open /not/real/file:", + noMakeResultsFile: true, + run: testRun{ + output: ` +apiVersion: config.kubernetes.io/v1 +kind: ResourceList +items: +- apiVersion: apps/v1 + kind: Deployment + metadata: + name: deployment-foo +- apiVersion: v1 + kind: Service + metadata: + name: service-foo +results: +- apiVersion: config.k8s.io/v1alpha1 + name: "some-validator" +`, + }, + expectedOutput: []string{ + ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: deployment-foo + annotations: + config.kubernetes.io/path: 'deployment_deployment-foo.yaml' + `, ` +apiVersion: v1 +kind: Service +metadata: + name: service-foo + annotations: + config.kubernetes.io/path: 'service_service-foo.yaml' + `, + }, + // these aren't written, expect an error + expectedResults: ` +- apiVersion: config.k8s.io/v1alpha1 + name: "some-validator" +`, + }, + + // verify the function only sees resources scoped to it based on the directory + // containing the functionConfig and the directory containing each resource. + // resources not provided to the function should still appear in the FunctionFilter + // output + { + name: "scope_resources_by_directory", + run: testRun{ + expectedInput: `apiVersion: config.kubernetes.io/v1 +kind: ResourceList +items: +- apiVersion: v1 + kind: Service + metadata: + name: service-foo + annotations: + config.kubernetes.io/path: 'foo/bar/s.yaml' + internal.config.kubernetes.io/id: '1' + config.k8s.io/id: '1' +functionConfig: + apiVersion: example.com/v1 + kind: Example + metadata: + name: foo + annotations: + config.kubernetes.io/path: 'foo/bar.yaml' +`, + output: `apiVersion: config.kubernetes.io/v1 +kind: ResourceList +items: +- apiVersion: v1 + kind: Service + metadata: + name: service-foo + annotations: + config.kubernetes.io/path: 'foo/bar/s.yaml' + new: annotation + internal.config.kubernetes.io/id: '1' +functionConfig: + apiVersion: example.com/v1 + kind: Example + metadata: + name: foo + annotations: + config.kubernetes.io/path: 'foo/bar.yaml' +`, + }, + functionConfig: ` +apiVersion: example.com/v1 +kind: Example +metadata: + name: foo + annotations: + config.kubernetes.io/path: 'foo/bar.yaml' +`, + input: []string{ + // this should not be in scope + ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: deployment-foo + annotations: + config.kubernetes.io/path: 'baz/bar/d.yaml' +`, + // this should be in scope + ` +apiVersion: v1 +kind: Service +metadata: + name: service-foo + annotations: + config.kubernetes.io/path: 'foo/bar/s.yaml' +`}, + expectedOutput: []string{ + ` +apiVersion: v1 +kind: Service +metadata: + name: service-foo + annotations: + config.kubernetes.io/path: 'foo/bar/s.yaml' + new: annotation + internal.config.kubernetes.io/path: 'foo/bar/s.yaml' +`, ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: deployment-foo + annotations: + config.kubernetes.io/path: 'baz/bar/d.yaml' +`, + }, + }, + + // verify functions without file path annotation are not scoped to functions + { + name: "scope_resources_by_directory_resources_missing_path", + run: testRun{ + expectedInput: `apiVersion: config.kubernetes.io/v1 +kind: ResourceList +items: +- apiVersion: v1 + kind: Service + metadata: + name: service-foo + annotations: + config.kubernetes.io/path: 'foo/bar/s.yaml' + internal.config.kubernetes.io/id: '1' + config.k8s.io/id: '1' +functionConfig: + apiVersion: example.com/v1 + kind: Example + metadata: + name: foo + annotations: + config.kubernetes.io/path: 'foo/bar.yaml' +`, + output: `apiVersion: config.kubernetes.io/v1 +kind: ResourceList +items: +- apiVersion: v1 + kind: Service + metadata: + name: service-foo + annotations: + config.kubernetes.io/path: 'foo/bar/s.yaml' + new: annotation + internal.config.kubernetes.io/id: '1' +functionConfig: + apiVersion: example.com/v1 + kind: Example + metadata: + name: foo + annotations: + config.kubernetes.io/path: 'foo/bar.yaml' +`, + }, + functionConfig: ` +apiVersion: example.com/v1 +kind: Example +metadata: + name: foo + annotations: + config.kubernetes.io/path: 'foo/bar.yaml' +`, + input: []string{ + // this should not be in scope + ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: deployment-foo +`, + // this should be in scope + ` +apiVersion: v1 +kind: Service +metadata: + name: service-foo + annotations: + config.kubernetes.io/path: 'foo/bar/s.yaml' +`}, + expectedOutput: []string{ + ` +apiVersion: v1 +kind: Service +metadata: + name: service-foo + annotations: + config.kubernetes.io/path: 'foo/bar/s.yaml' + new: annotation + internal.config.kubernetes.io/path: 'foo/bar/s.yaml' +`, ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: deployment-foo +`, + }, + }, + + // verify the functions can see all resources if global scope is set + { + name: "scope_resources_global", + instance: FunctionFilter{GlobalScope: true}, + run: testRun{ + expectedInput: `apiVersion: config.kubernetes.io/v1 +kind: ResourceList +items: +- apiVersion: apps/v1 + kind: Deployment + metadata: + name: deployment-foo + annotations: + config.kubernetes.io/path: 'baz/bar/d.yaml' + internal.config.kubernetes.io/id: '1' + config.k8s.io/id: '1' +- apiVersion: v1 + kind: Service + metadata: + name: service-foo + annotations: + config.kubernetes.io/path: 'foo/bar/s.yaml' + internal.config.kubernetes.io/id: '2' + config.k8s.io/id: '2' +functionConfig: + apiVersion: example.com/v1 + kind: Example + metadata: + name: foo + annotations: + config.kubernetes.io/path: 'foo/bar.yaml' +`, + output: `apiVersion: config.kubernetes.io/v1 +kind: ResourceList +items: +- apiVersion: apps/v1 + kind: Deployment + metadata: + name: deployment-foo + annotations: + config.kubernetes.io/path: 'baz/bar/d.yaml' + internal.config.kubernetes.io/id: '1' +- apiVersion: v1 + kind: Service + metadata: + name: service-foo + annotations: + config.kubernetes.io/path: 'foo/bar/s.yaml' + new: annotation + config.k8s.io/id: '2' +functionConfig: + apiVersion: example.com/v1 + kind: Example + metadata: + name: foo + annotations: + config.kubernetes.io/path: 'foo/bar.yaml' +`, + }, + functionConfig: ` +apiVersion: example.com/v1 +kind: Example +metadata: + name: foo + annotations: + config.kubernetes.io/path: 'foo/bar.yaml' +`, + input: []string{ + ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: deployment-foo + annotations: + config.kubernetes.io/path: 'baz/bar/d.yaml' +`, + ` +apiVersion: v1 +kind: Service +metadata: + name: service-foo + annotations: + config.kubernetes.io/path: 'foo/bar/s.yaml' +`}, + expectedOutput: []string{ + ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: deployment-foo + annotations: + config.kubernetes.io/path: 'baz/bar/d.yaml' + internal.config.kubernetes.io/path: 'baz/bar/d.yaml' +`, ` +apiVersion: v1 +kind: Service +metadata: + name: service-foo + annotations: + config.kubernetes.io/path: 'foo/bar/s.yaml' + new: annotation + internal.config.kubernetes.io/path: 'foo/bar/s.yaml' +`, + }, + }, + + { + name: "scope_no_resources", + run: testRun{ + expectedInput: `apiVersion: config.kubernetes.io/v1 +kind: ResourceList +items: [] +functionConfig: + apiVersion: example.com/v1 + kind: Example + metadata: + name: foo + annotations: + config.kubernetes.io/path: 'foo/bar.yaml' +`, + output: `apiVersion: config.kubernetes.io/v1 +kind: ResourceList +items: [] +functionConfig: + apiVersion: example.com/v1 + kind: Example + metadata: + name: foo + annotations: + config.kubernetes.io/path: 'foo/bar.yaml' +`, + }, + functionConfig: ` +apiVersion: example.com/v1 +kind: Example +metadata: + name: foo + annotations: + config.kubernetes.io/path: 'foo/bar.yaml' +`, + input: []string{ + // these should not be in scope + ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: deployment-foo + annotations: + config.kubernetes.io/path: 'baz/bar/d.yaml' +`, ` +apiVersion: v1 +kind: Service +metadata: + name: service-foo + annotations: + config.kubernetes.io/path: 'biz/bar/s.yaml' +`}, + expectedOutput: []string{ + ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: deployment-foo + annotations: + config.kubernetes.io/path: 'baz/bar/d.yaml' +`, ` +apiVersion: v1 +kind: Service +metadata: + name: service-foo + annotations: + config.kubernetes.io/path: 'biz/bar/s.yaml' +`, + }, + }, + + { + name: "scope_functions_dir", + run: testRun{ + expectedInput: `apiVersion: config.kubernetes.io/v1 +kind: ResourceList +items: +- apiVersion: v1 + kind: Service + metadata: + name: service-foo + annotations: + config.kubernetes.io/path: 'foo/bar/s.yaml' + internal.config.kubernetes.io/id: '1' + config.k8s.io/id: '1' +functionConfig: + apiVersion: example.com/v1 + kind: Example + metadata: + name: foo + annotations: + config.kubernetes.io/path: 'foo/functions/bar.yaml' +`, + output: `apiVersion: config.kubernetes.io/v1 +kind: ResourceList +items: +- apiVersion: v1 + kind: Service + metadata: + name: service-foo + annotations: + config.kubernetes.io/path: 'foo/bar/s.yaml' + internal.config.kubernetes.io/id: '1' + new: annotation + internal.config.kubernetes.io/path: 'foo/bar/s.yaml' +functionConfig: + apiVersion: example.com/v1 + kind: Example + metadata: + name: foo + annotations: + config.kubernetes.io/path: 'foo/functions/bar.yaml' +`, + }, + functionConfig: ` +apiVersion: example.com/v1 +kind: Example +metadata: + name: foo + annotations: + config.kubernetes.io/path: 'foo/functions/bar.yaml' +`, + input: []string{ + // this should not be in scope + ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: deployment-foo + annotations: + config.kubernetes.io/path: 'baz/bar/d.yaml' +`, + // this should be in scope + ` +apiVersion: v1 +kind: Service +metadata: + name: service-foo + annotations: + config.kubernetes.io/path: 'foo/bar/s.yaml' +`}, + expectedOutput: []string{ + ` +apiVersion: v1 +kind: Service +metadata: + name: service-foo + annotations: + config.kubernetes.io/path: 'foo/bar/s.yaml' + new: annotation + internal.config.kubernetes.io/path: 'foo/bar/s.yaml' +`, ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: deployment-foo + annotations: + config.kubernetes.io/path: 'baz/bar/d.yaml' +`, + }, + }, + + { + name: "copy_comments", + run: testRun{ + expectedInput: `apiVersion: config.kubernetes.io/v1 +kind: ResourceList +items: +- apiVersion: apps/v1 + kind: Deployment + metadata: + name: deployment-foo + annotations: + config.kubernetes.io/path: 'foo/b.yaml' + internal.config.kubernetes.io/id: '1' + config.k8s.io/id: '1' +- apiVersion: v1 + kind: Service + metadata: + name: service-foo # name comment + annotations: + config.kubernetes.io/path: 'foo/a.yaml' + internal.config.kubernetes.io/id: '2' + config.k8s.io/id: '2' +functionConfig: + apiVersion: example.com/v1 + kind: Example + metadata: + name: foo + annotations: + config.kubernetes.io/path: 'foo/f.yaml' +`, + // delete the comment + output: `apiVersion: config.kubernetes.io/v1 +kind: ResourceList +items: +- apiVersion: apps/v1 + kind: Deployment + metadata: + name: deployment-foo + annotations: + config.kubernetes.io/path: 'foo/b.yaml' + internal.config.kubernetes.io/id: '1' +- apiVersion: v1 + kind: Service + metadata: + name: service-foo + annotations: + config.kubernetes.io/path: 'foo/a.yaml' + internal.config.kubernetes.io/id: '2' + new: annotation +functionConfig: + apiVersion: example.com/v1 + kind: Example + metadata: + name: foo + annotations: + config.kubernetes.io/path: 'foo/f.yaml' +`, + }, + functionConfig: ` +apiVersion: example.com/v1 +kind: Example +metadata: + name: foo + annotations: + config.kubernetes.io/path: 'foo/f.yaml' +`, + input: []string{ + ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: deployment-foo + annotations: + config.kubernetes.io/path: 'foo/b.yaml' +`, + ` +apiVersion: v1 +kind: Service +metadata: + name: service-foo # name comment + annotations: + config.kubernetes.io/path: 'foo/a.yaml' +`}, + expectedOutput: []string{ + ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: deployment-foo + annotations: + config.kubernetes.io/path: 'foo/b.yaml' + internal.config.kubernetes.io/path: 'foo/b.yaml' +`, ` +apiVersion: v1 +kind: Service +metadata: + name: service-foo # name comment + annotations: + config.kubernetes.io/path: 'foo/a.yaml' + new: annotation + internal.config.kubernetes.io/path: 'foo/a.yaml' +`, + }, + }, + } + + for i := range tests { + tt := tests[i] + t.Run(tt.name, func(t *testing.T) { + // results file setup + if len(tt.expectedResults) > 0 && !tt.noMakeResultsFile { + // expect result files to be written -- create a directory for them + f, err := ioutil.TempFile("", "test-kyaml-*.yaml") + if !assert.NoError(t, err) { + t.FailNow() + } + defer os.RemoveAll(f.Name()) + tt.instance.ResultsFile = f.Name() + } else if len(tt.expectedResults) > 0 { + // failure case for writing to bad results location + tt.instance.ResultsFile = "/not/real/file" + } + + // initialize the inputs for the FunctionFilter + var inputs []*yaml.RNode + for i := range tt.input { + node, err := yaml.Parse(tt.input[i]) + if !assert.NoError(t, err) { + t.FailNow() + } + inputs = append(inputs, node) + } + + // run the FunctionFilter + tt.run.t = t + tt.instance.Run = tt.run.run + if tt.functionConfig != "" { + fc, err := yaml.Parse(tt.functionConfig) + if !assert.NoError(t, err) { + t.FailNow() + } + tt.instance.FunctionConfig = fc + } + output, err := tt.instance.Filter(inputs) + if tt.expectedError != "" { + if !assert.Error(t, err) { + t.FailNow() + } + if !assert.Contains(t, err.Error(), tt.expectedError) { + t.FailNow() + } + return + } + + // check for saved error + if tt.expectedSavedError != "" { + if !assert.EqualError(t, tt.instance.exit, tt.expectedSavedError) { + t.FailNow() + } + } + + if !assert.NoError(t, err) { + t.FailNow() + } + + // verify function output + var actual []string + for i := range output { + s, err := output[i].String() + if !assert.NoError(t, err) { + t.FailNow() + } + actual = append(actual, strings.TrimSpace(s)) + } + var expected []string + for i := range tt.expectedOutput { + expected = append(expected, strings.TrimSpace(tt.expectedOutput[i])) + } + + if !assert.Equal(t, expected, actual) { + t.FailNow() + } + + // verify results files + if len(tt.instance.ResultsFile) > 0 { + tt.expectedResults = strings.TrimSpace(tt.expectedResults) + + results, err := tt.instance.Results.String() + if !assert.NoError(t, err) { + t.FailNow() + } + if !assert.Equal(t, tt.expectedResults, strings.TrimSpace(results)) { + t.FailNow() + } + + b, err := ioutil.ReadFile(tt.instance.ResultsFile) + writtenResults := strings.TrimSpace(string(b)) + if !assert.NoError(t, err) { + t.FailNow() + } + if !assert.Equal(t, tt.expectedResults, writtenResults) { + t.FailNow() + } + } + }) + } +} + +func Test_GetFunction(t *testing.T) { + var tests = []struct { + name string + resource string + expectedFn string + missingFn bool + }{ + + // fn annotation + { + name: "fn annotation", + resource: ` +apiVersion: v1beta1 +kind: Example +metadata: + annotations: + config.kubernetes.io/function: |- + container: + image: foo:v1.0.0 +`, + expectedFn: ` +container: + image: foo:v1.0.0`, + }, + + { + name: "storage mounts json style", + resource: ` +apiVersion: v1beta1 +kind: Example +metadata: + annotations: + config.kubernetes.io/function: |- + container: + image: foo:v1.0.0 + mounts: [ {type: bind, src: /mount/path, dst: /local/}, {src: myvol, dst: /local/, type: volume}, {dst: /local/, type: tmpfs} ] +`, + expectedFn: ` +container: + image: foo:v1.0.0 + mounts: + - type: bind + src: /mount/path + dst: /local/ + - type: volume + src: myvol + dst: /local/ + - type: tmpfs + dst: /local/ +`, + }, + + { + name: "storage mounts yaml style", + resource: ` +apiVersion: v1beta1 +kind: Example +metadata: + annotations: + config.kubernetes.io/function: |- + container: + image: foo:v1.0.0 + mounts: + - src: /mount/path + type: bind + dst: /local/ + - dst: /local/ + src: myvol + type: volume + - type: tmpfs + dst: /local/ +`, + expectedFn: ` +container: + image: foo:v1.0.0 + mounts: + - type: bind + src: /mount/path + dst: /local/ + - type: volume + src: myvol + dst: /local/ + - type: tmpfs + dst: /local/ +`, + }, + + { + name: "network", + resource: ` +apiVersion: v1beta1 +kind: Example +metadata: + annotations: + config.kubernetes.io/function: |- + container: + image: foo:v1.0.0 + network: true +`, + expectedFn: ` +container: + image: foo:v1.0.0 + network: true +`, + }, + + { + name: "path", + resource: ` +apiVersion: v1beta1 +kind: Example +metadata: + annotations: + config.kubernetes.io/function: |- + path: foo + container: + image: foo:v1.0.0 +`, + // path should be erased + expectedFn: ` +container: + image: foo:v1.0.0 +`, + }, + + { + name: "network", + resource: ` +apiVersion: v1beta1 +kind: Example +metadata: + annotations: + config.kubernetes.io/function: |- + network: foo + container: + image: foo:v1.0.0 +`, + // network should be erased + expectedFn: ` +container: + image: foo:v1.0.0 +`, + }, + + // legacy fn style + {name: "legacy fn meta", + resource: ` +apiVersion: v1beta1 +kind: Example +metadata: + configFn: + container: + image: foo:v1.0.0 +`, + expectedFn: ` +container: + image: foo:v1.0.0 +`, + }, + + // no fn + {name: "no fn", + resource: ` +apiVersion: v1beta1 +kind: Example +metadata: + annotations: {} +`, + missingFn: true, + }, + + // test network, etc... + } + + for i := range tests { + tt := tests[i] + t.Run(tt.name, func(t *testing.T) { + resource := yaml.MustParse(tt.resource) + fn := GetFunctionSpec(resource) + if tt.missingFn { + if !assert.Nil(t, fn) { + t.FailNow() + } + } else { + b, err := yaml.Marshal(fn) + if !assert.NoError(t, err) { + t.FailNow() + } + if !assert.Equal(t, + strings.TrimSpace(tt.expectedFn), + strings.TrimSpace(string(b))) { + t.FailNow() + } + } + }) + } +} + +func Test_GetContainerNetworkRequired(t *testing.T) { + tests := []struct { + input string + required bool + }{ + { + input: `apiVersion: v1 +kind: Foo +metadata: + name: foo + configFn: + container: + image: gcr.io/kustomize-functions/example-tshirt:v0.1.0 + network: true +`, + required: true, + }, + { + input: `apiVersion: v1 +kind: Foo +metadata: + name: foo + configFn: + container: + image: gcr.io/kustomize-functions/example-tshirt:v0.1.0 + network: false +`, + required: false, + }, + { + + input: `apiVersion: v1 +kind: Foo +metadata: + name: foo + configFn: + container: + image: gcr.io/kustomize-functions/example-tshirt:v0.1.0 +`, + required: false, + }, + { + input: `apiVersion: v1 +kind: Foo +metadata: + name: foo + annotations: + config.kubernetes.io/function: | + container: + image: gcr.io/kustomize-functions/example-tshirt:v0.1.0 + network: true +`, + required: true, + }, + } + + for _, tc := range tests { + cfg, err := yaml.Parse(tc.input) + if !assert.NoError(t, err) { + return + } + fn := GetFunctionSpec(cfg) + assert.Equal(t, tc.required, fn.Container.Network) + } +} + +func Test_StringToStorageMount(t *testing.T) { + tests := []struct { + in string + expectedOut string + }{ + { + in: "type=bind,src=/tmp/test/,dst=/tmp/source/", + expectedOut: "type=bind,source=/tmp/test/,target=/tmp/source/,readonly", + }, + { + in: "type=bind,src=/tmp/test/,dst=/tmp/source/,rw=true", + expectedOut: "type=bind,source=/tmp/test/,target=/tmp/source/", + }, + { + in: "type=bind,src=/tmp/test/,dst=/tmp/source/,rw=false", + expectedOut: "type=bind,source=/tmp/test/,target=/tmp/source/,readonly", + }, + { + in: "type=bind,src=/tmp/test/,dst=/tmp/source/,rw=", + expectedOut: "type=bind,source=/tmp/test/,target=/tmp/source/,readonly", + }, + { + in: "type=tmpfs,src=/tmp/test/,dst=/tmp/source/,rw=invalid", + expectedOut: "type=tmpfs,source=/tmp/test/,target=/tmp/source/,readonly", + }, + { + in: "type=tmpfs,src=/tmp/test/,dst=/tmp/source/,rwe=invalid", + expectedOut: "type=tmpfs,source=/tmp/test/,target=/tmp/source/,readonly", + }, + { + in: "type=tmpfs,src=/tmp/test/,dst", + expectedOut: "type=tmpfs,source=/tmp/test/,target=,readonly", + }, + { + in: "type=bind,source=/tmp/test/,target=/tmp/source/,rw=true", + expectedOut: "type=bind,source=/tmp/test/,target=/tmp/source/", + }, + { + in: "type=bind,source=/tmp/test/,target=/tmp/source/", + expectedOut: "type=bind,source=/tmp/test/,target=/tmp/source/,readonly", + }, + } + + for _, tc := range tests { + s := StringToStorageMount(tc.in) + assert.Equal(t, tc.expectedOut, (&s).String()) + } +} + +func TestContainerEnvGetDockerFlags(t *testing.T) { + tests := []struct { + input *ContainerEnv + output []string + }{ + { + input: NewContainerEnvFromStringSlice([]string{"foo=bar"}), + output: []string{"-e", "LOG_TO_STDERR=true", "-e", "STRUCTURED_RESULTS=true", "-e", "foo=bar"}, + }, + { + input: NewContainerEnvFromStringSlice([]string{"foo"}), + output: []string{"-e", "LOG_TO_STDERR=true", "-e", "STRUCTURED_RESULTS=true", "-e", "foo"}, + }, + { + input: NewContainerEnvFromStringSlice([]string{"foo=bar", "baz"}), + output: []string{"-e", "LOG_TO_STDERR=true", "-e", "STRUCTURED_RESULTS=true", "-e", "foo=bar", "-e", "baz"}, + }, + { + input: NewContainerEnv(), + output: []string{"-e", "LOG_TO_STDERR=true", "-e", "STRUCTURED_RESULTS=true"}, + }, + } + + for _, tc := range tests { + flags := tc.input.GetDockerFlags() + assert.Equal(t, tc.output, flags) + } +} + +func TestGetContainerEnv(t *testing.T) { + tests := []struct { + input string + expected ContainerEnv + }{ + { + input: ` +apiVersion: v1 +kind: Foo +metadata: + name: foo + configFn: + container: + image: gcr.io/kustomize-functions/example-tshirt:v0.1.0 + envs: + - foo=bar +`, + expected: *NewContainerEnvFromStringSlice([]string{"foo=bar"}), + }, + { + input: ` +apiVersion: v1 +kind: Foo +metadata: + name: foo + configFn: + container: + image: gcr.io/kustomize-functions/example-tshirt:v0.1.0 + envs: + - foo=bar + - baz +`, + expected: *NewContainerEnvFromStringSlice([]string{"foo=bar", "baz"}), + }, + { + input: ` +apiVersion: v1 +kind: Foo +metadata: + name: foo + configFn: + container: + image: gcr.io/kustomize-functions/example-tshirt:v0.1.0 + envs: + - KUBECONFIG +`, + expected: *NewContainerEnvFromStringSlice([]string{"KUBECONFIG"}), + }, + } + + for _, tc := range tests { + cfg, err := yaml.Parse(tc.input) + if !assert.NoError(t, err) { + return + } + fn := GetFunctionSpec(cfg) + assert.Equal(t, tc.expected, *NewContainerEnvFromStringSlice(fn.Container.Env)) + } +} diff --git a/go/internal/forked/kyaml/fn/runtime/runtimeutil/types.go b/go/internal/forked/kyaml/fn/runtime/runtimeutil/types.go new file mode 100644 index 000000000..5edc4ebc3 --- /dev/null +++ b/go/internal/forked/kyaml/fn/runtime/runtimeutil/types.go @@ -0,0 +1,8 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package runtimeutil + +type DeferFailureFunction interface { + GetExit() error +} diff --git a/go/internal/forked/kyaml/fn/runtime/starlark/context.go b/go/internal/forked/kyaml/fn/runtime/starlark/context.go new file mode 100644 index 000000000..dcc88878c --- /dev/null +++ b/go/internal/forked/kyaml/fn/runtime/starlark/context.go @@ -0,0 +1,79 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package starlark + +import ( + "encoding/json" + "os" + "strings" + + "go.starlark.net/starlark" + "go.starlark.net/starlarkstruct" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/errors" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/internal/forked/github.com/qri-io/starlib/util" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/openapi" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" +) + +type Context struct { + resourceList starlark.Value +} + +func (c *Context) predeclared() (starlark.StringDict, error) { + e, err := env() + if err != nil { + return nil, err + } + oa, err := oa() + if err != nil { + return nil, err + } + dict := starlark.StringDict{ + "resource_list": c.resourceList, + "open_api": oa, + "environment": e, + } + + return starlark.StringDict{ + "ctx": starlarkstruct.FromStringDict(starlarkstruct.Default, dict), + }, nil +} + +func oa() (starlark.Value, error) { + return interfaceToValue(openapi.Schema()) +} + +func env() (starlark.Value, error) { + env := map[string]interface{}{} + for _, e := range os.Environ() { + pair := strings.SplitN(e, "=", 2) + if len(pair) < 2 { + continue + } + env[pair[0]] = pair[1] + } + value, err := util.Marshal(env) + if err != nil { + return nil, errors.Wrap(err) + } + return value, nil +} + +func interfaceToValue(i interface{}) (starlark.Value, error) { + b, err := json.Marshal(i) + if err != nil { + return nil, err + } + + var in map[string]interface{} + if err := yaml.Unmarshal(b, &in); err != nil { + return nil, errors.Wrap(err) + } + + value, err := util.Marshal(in) + if err != nil { + return nil, errors.Wrap(err) + } + return value, nil +} diff --git a/go/internal/forked/kyaml/fn/runtime/starlark/doc.go b/go/internal/forked/kyaml/fn/runtime/starlark/doc.go new file mode 100644 index 000000000..70f0a2c7b --- /dev/null +++ b/go/internal/forked/kyaml/fn/runtime/starlark/doc.go @@ -0,0 +1,36 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +// Package starlark contains a kio.Filter which can be applied to resources to transform +// them through starlark program. +// +// Starlark has become a popular runtime embedding in go programs, especially for Kubernetes +// and data processing. +// Examples: https://github.com/cruise-automation/isopod, https://qri.io/docs/starlark/starlib, +// https://github.com/stripe/skycfg, https://github.com/k14s/ytt +// +// The resources are provided to the starlark program through the global variable "resourceList". +// "resourceList" is a dictionary containing an "items" field with a list of resources. +// The starlark modified "resourceList" is the Filter output. +// +// After being run through the starlark program, the filter will copy the comments from the input +// resources to restore them -- due to them being dropped as a result of serializing the resources +// as starlark values. +// +// "resourceList" may also contain a "functionConfig" entry to configure the starlark script itself. +// Changes made by the starlark program to the "functionConfig" will be reflected in the +// Filter.FunctionConfig value. +// +// The Filter will also format the output so that output has the preferred field ordering +// rather than an alphabetical field ordering. +// +// The resourceList variable adheres to the kustomize function spec as specified by: +// https://github.com/kubernetes-sigs/kustomize/blob/master/cmd/config/docs/api-conventions/functions-spec.md +// +// All items in the resourceList are resources represented as starlark dictionaries/ +// The items in the resourceList respect the io spec specified by: +// https://github.com/kubernetes-sigs/kustomize/blob/master/cmd/config/docs/api-conventions/config-io.md +// +// The starlark language spec can be found here: +// https://github.com/google/starlark-go/blob/master/doc/spec.md +package starlark diff --git a/go/internal/forked/kyaml/fn/runtime/starlark/example_test.go b/go/internal/forked/kyaml/fn/runtime/starlark/example_test.go new file mode 100644 index 000000000..8a1b58fba --- /dev/null +++ b/go/internal/forked/kyaml/fn/runtime/starlark/example_test.go @@ -0,0 +1,303 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package starlark_test + +import ( + "bytes" + "fmt" + "io/ioutil" + "log" + "os" + "path/filepath" + + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/fn/runtime/runtimeutil" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/fn/runtime/starlark" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/kio" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/kio/kioutil" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" +) + +func ExampleFilter_Filter() { + // input contains the items that will provided to the starlark program + input := bytes.NewBufferString(` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: deployment-1 +spec: + template: + spec: + containers: + - name: nginx + image: nginx:1.8.1 # {"$ref": "#/definitions/io.k8s.cli.substitutions.image-1"} +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + name: deployment-2 +spec: + template: + spec: + containers: + - name: nginx + image: nginx:1.7.9 # {"$ref": "#/definitions/io.k8s.cli.substitutions.image-2"} +`) + + // fltr transforms the input using a starlark program + fltr := &starlark.Filter{ + Name: "annotate", + Program: ` +def run(items): + for item in items: + item["metadata"]["annotations"]["foo"] = "bar" + +run(ctx.resource_list["items"]) +`, + } + + // output contains the transformed resources + output := &bytes.Buffer{} + + // run the fltr against the inputs using a kio.Pipeline + err := kio.Pipeline{ + Inputs: []kio.Reader{&kio.ByteReader{Reader: input}}, + Filters: []kio.Filter{fltr}, + Outputs: []kio.Writer{&kio.ByteWriter{Writer: output}}}.Execute() + if err != nil { + log.Println(err) + } + + fmt.Println(output.String()) + + // Output: + // apiVersion: apps/v1 + // kind: Deployment + // metadata: + // name: deployment-1 + // annotations: + // foo: bar + // internal.config.kubernetes.io/path: 'deployment_deployment-1.yaml' + // config.kubernetes.io/path: 'deployment_deployment-1.yaml' + // spec: + // template: + // spec: + // containers: + // - name: nginx + // image: nginx:1.8.1 # {"$ref": "#/definitions/io.k8s.cli.substitutions.image-1"} + //--- + // apiVersion: apps/v1 + // kind: Deployment + // metadata: + // name: deployment-2 + // annotations: + // foo: bar + // internal.config.kubernetes.io/path: 'deployment_deployment-2.yaml' + // config.kubernetes.io/path: 'deployment_deployment-2.yaml' + // spec: + // template: + // spec: + // containers: + // - name: nginx + // image: nginx:1.7.9 # {"$ref": "#/definitions/io.k8s.cli.substitutions.image-2"} +} + +func ExampleFilter_Filter_functionConfig() { + // input contains the items that will provided to the starlark program + input := bytes.NewBufferString(` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: deployment-1 +spec: + template: + spec: + containers: + - name: nginx + image: nginx:1.8.1 # {"$ref": "#/definitions/io.k8s.cli.substitutions.image-1"} +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + name: deployment-2 +spec: + template: + spec: + containers: + - name: nginx + image: nginx:1.7.9 # {"$ref": "#/definitions/io.k8s.cli.substitutions.image-2"} +`) + + fc, err := yaml.Parse(` +kind: AnnotationSetter +spec: + value: "hello world" +`) + if err != nil { + log.Println(err) + } + + // fltr transforms the input using a starlark program + fltr := &starlark.Filter{ + Name: "annotate", + Program: ` +def run(items, value): + for item in items: + item["metadata"]["annotations"]["foo"] = value + +run(ctx.resource_list["items"], ctx.resource_list["functionConfig"]["spec"]["value"]) +`, + FunctionFilter: runtimeutil.FunctionFilter{FunctionConfig: fc}, + } + + // output contains the transformed resources + output := &bytes.Buffer{} + + // run the fltr against the inputs using a kio.Pipeline + err = kio.Pipeline{ + Inputs: []kio.Reader{&kio.ByteReader{Reader: input}}, + Filters: []kio.Filter{fltr}, + Outputs: []kio.Writer{&kio.ByteWriter{Writer: output}}}.Execute() + if err != nil { + log.Println(err) + } + + fmt.Println(output.String()) + + // Output: + // apiVersion: apps/v1 + // kind: Deployment + // metadata: + // name: deployment-1 + // annotations: + // foo: hello world + // internal.config.kubernetes.io/path: 'deployment_deployment-1.yaml' + // config.kubernetes.io/path: 'deployment_deployment-1.yaml' + // spec: + // template: + // spec: + // containers: + // - name: nginx + // image: nginx:1.8.1 # {"$ref": "#/definitions/io.k8s.cli.substitutions.image-1"} + //--- + // apiVersion: apps/v1 + // kind: Deployment + // metadata: + // name: deployment-2 + // annotations: + // foo: hello world + // internal.config.kubernetes.io/path: 'deployment_deployment-2.yaml' + // config.kubernetes.io/path: 'deployment_deployment-2.yaml' + // spec: + // template: + // spec: + // containers: + // - name: nginx + // image: nginx:1.7.9 # {"$ref": "#/definitions/io.k8s.cli.substitutions.image-2"} +} + +// ExampleFilter_Filter_file applies a starlark program in a local file to a collection of +// resource configuration read from a directory. +func ExampleFilter_Filter_file() { + // setup the configuration + d, err := ioutil.TempDir("", "") + if err != nil { + log.Println(err) + } + defer os.RemoveAll(d) + + err = ioutil.WriteFile(filepath.Join(d, "deploy1.yaml"), []byte(` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: deployment-1 +spec: + template: + spec: + containers: + - name: nginx + image: nginx:1.8.1 # {"$ref": "#/definitions/io.k8s.cli.substitutions.image-1"} +`), 0600) + if err != nil { + log.Println(err) + } + + err = ioutil.WriteFile(filepath.Join(d, "deploy2.yaml"), []byte(` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: deployment-2 +spec: + template: + spec: + containers: + - name: nginx + image: nginx:1.7.9 # {"$ref": "#/definitions/io.k8s.cli.substitutions.image-2"} +`), 0600) + if err != nil { + log.Println(err) + } + + err = ioutil.WriteFile(filepath.Join(d, "annotate.star"), []byte(` +def run(items): + for item in items: + item["metadata"]["annotations"]["foo"] = "bar" + +run(ctx.resource_list["items"]) +`), 0600) + if err != nil { + log.Println(err) + } + + fltr := &starlark.Filter{ + Name: "annotate", + Path: filepath.Join(d, "annotate.star"), + } + + // output contains the transformed resources + output := &bytes.Buffer{} + + // run the fltr against the inputs using a kio.Pipeline + err = kio.Pipeline{ + Inputs: []kio.Reader{&kio.LocalPackageReader{PackagePath: d}}, + Filters: []kio.Filter{fltr}, + Outputs: []kio.Writer{&kio.ByteWriter{ + Writer: output, + ClearAnnotations: []string{ + kioutil.PathAnnotation, + kioutil.LegacyPathAnnotation, + }, + }}}.Execute() + if err != nil { + log.Println(err) + } + + fmt.Println(output.String()) + + // Output: + // apiVersion: apps/v1 + // kind: Deployment + // metadata: + // name: deployment-1 + // annotations: + // foo: bar + // spec: + // template: + // spec: + // containers: + // - name: nginx + // image: nginx:1.8.1 # {"$ref": "#/definitions/io.k8s.cli.substitutions.image-1"} + //--- + // apiVersion: apps/v1 + // kind: Deployment + // metadata: + // name: deployment-2 + // annotations: + // foo: bar + // spec: + // template: + // spec: + // containers: + // - name: nginx + // image: nginx:1.7.9 # {"$ref": "#/definitions/io.k8s.cli.substitutions.image-2"} +} diff --git a/go/internal/forked/kyaml/fn/runtime/starlark/starlark.go b/go/internal/forked/kyaml/fn/runtime/starlark/starlark.go new file mode 100644 index 000000000..dd3bec270 --- /dev/null +++ b/go/internal/forked/kyaml/fn/runtime/starlark/starlark.go @@ -0,0 +1,181 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package starlark + +import ( + "bytes" + "fmt" + "io" + "io/ioutil" + "net/http" + + "go.starlark.net/starlark" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/errors" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/fn/runtime/runtimeutil" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/internal/forked/github.com/qri-io/starlib/util" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/kio/filters" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" +) + +// Filter transforms a set of resources through the provided program +type Filter struct { + Name string + + // Program is a starlark script which will be run against the resources + Program string + + // URL is the url of a starlark program to fetch and run + URL string + + // Path is the path to a starlark program to read and run + Path string + + runtimeutil.FunctionFilter +} + +func (sf *Filter) String() string { + return fmt.Sprintf( + "name: %v path: %v url: %v program: %v", sf.Name, sf.Path, sf.URL, sf.Program) +} + +func (sf *Filter) Filter(nodes []*yaml.RNode) ([]*yaml.RNode, error) { + err := sf.setup() + if err != nil { + return nil, err + } + sf.FunctionFilter.Run = sf.Run + + return sf.FunctionFilter.Filter(nodes) +} + +func (sf *Filter) setup() error { + if (sf.URL != "" && sf.Path != "") || + (sf.URL != "" && sf.Program != "") || + (sf.Path != "" && sf.Program != "") { + return errors.Errorf("Filter Path, Program and URL are mutually exclusive") + } + + // read the program from a file + if sf.Path != "" { + b, err := ioutil.ReadFile(sf.Path) + if err != nil { + return err + } + sf.Program = string(b) + } + + // read the program from a URL + if sf.URL != "" { + err := func() error { + resp, err := http.Get(sf.URL) + if err != nil { + return err + } + defer resp.Body.Close() + b, err := ioutil.ReadAll(resp.Body) + if err != nil { + return err + } + sf.Program = string(b) + return nil + }() + if err != nil { + return err + } + } + + return nil +} + +func (sf *Filter) Run(reader io.Reader, writer io.Writer) error { + // retain map of inputs to outputs by id so if the name is changed by the + // starlark program, we are able to match the same resources + value, err := sf.readResourceList(reader) + if err != nil { + return errors.Wrap(err) + } + + // run the starlark as program as transformation function + thread := &starlark.Thread{Name: sf.Name} + + ctx := &Context{resourceList: value} + pd, err := ctx.predeclared() + if err != nil { + return errors.Wrap(err) + } + _, err = starlark.ExecFile(thread, sf.Name, sf.Program, pd) + if err != nil { + return errors.Wrap(err) + } + + return sf.writeResourceList(value, writer) +} + +// inputToResourceList transforms input into a starlark.Value +func (sf *Filter) readResourceList(reader io.Reader) (starlark.Value, error) { + // read and parse the inputs + rl := bytes.Buffer{} + _, err := rl.ReadFrom(reader) + if err != nil { + return nil, errors.Wrap(err) + } + rn, err := yaml.Parse(rl.String()) + if err != nil { + return nil, errors.Wrap(err) + } + + // convert to a starlark value + b, err := yaml.Marshal(rn.Document()) // convert to bytes + if err != nil { + return nil, errors.Wrap(err) + } + var in map[string]interface{} + err = yaml.Unmarshal(b, &in) // convert to map[string]interface{} + if err != nil { + return nil, errors.Wrap(err) + } + return util.Marshal(in) // convert to starlark value +} + +// resourceListToOutput converts the output of the starlark program to the filter output +func (sf *Filter) writeResourceList(value starlark.Value, writer io.Writer) error { + // convert the modified resourceList back into a slice of RNodes + // by first converting to a map[string]interface{} + out, err := util.Unmarshal(value) + if err != nil { + return errors.Wrap(err) + } + b, err := yaml.Marshal(out) + if err != nil { + return errors.Wrap(err) + } + + rl, err := yaml.Parse(string(b)) + if err != nil { + return errors.Wrap(err) + } + + // preserve the comments from the input + items, err := rl.Pipe(yaml.Lookup("items")) + if err != nil { + return errors.Wrap(err) + } + err = items.VisitElements(func(node *yaml.RNode) error { + // starlark will serialize the resources sorting the fields alphabetically, + // format them to have a better ordering + _, err := filters.FormatFilter{}.Filter([]*yaml.RNode{node}) + return err + }) + if err != nil { + return errors.Wrap(err) + } + + s, err := rl.String() + if err != nil { + return errors.Wrap(err) + } + + _, err = writer.Write([]byte(s)) + return err +} diff --git a/go/internal/forked/kyaml/fn/runtime/starlark/starlark_test.go b/go/internal/forked/kyaml/fn/runtime/starlark/starlark_test.go new file mode 100644 index 000000000..cc126b0fd --- /dev/null +++ b/go/internal/forked/kyaml/fn/runtime/starlark/starlark_test.go @@ -0,0 +1,537 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package starlark + +import ( + "bytes" + "fmt" + "os" + "strings" + "testing" + + "github.com/go-errors/errors" + "github.com/stretchr/testify/assert" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/kio" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" +) + +func TestFilter_Filter(t *testing.T) { + var tests = []struct { + name string + input string + functionConfig string + script string + expected string + expectedFunctionConfig string + env map[string]string + }{ + { + name: "add_annotation", + input: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: nginx-deployment +spec: + template: + spec: + containers: + - name: nginx + # head comment + image: nginx:1.8.1 # {"$ref": "#/definitions/io.k8s.cli.substitutions.image"} +`, + script: ` +# set the foo annotation on each resource +def run(r): + for resource in r: + resource["metadata"]["annotations"]["foo"] = "bar" + +run(ctx.resource_list["items"]) +`, + expected: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: nginx-deployment + annotations: + foo: bar + internal.config.kubernetes.io/path: 'deployment_nginx-deployment.yaml' + config.kubernetes.io/path: 'deployment_nginx-deployment.yaml' +spec: + template: + spec: + containers: + - name: nginx + # head comment + image: nginx:1.8.1 # {"$ref": "#/definitions/io.k8s.cli.substitutions.image"} +`, + }, + { + name: "add_annotation_from_env", + input: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: nginx-deployment +spec: + template: + spec: + containers: + - name: nginx + # head comment + image: nginx:1.8.1 # {"$ref": "#/definitions/io.k8s.cli.substitutions.image"} +`, + script: ` +def run(r): + for resource in r: + resource["metadata"]["annotations"]["foo"] = ctx.environment["ANNOTATION"] + +run(ctx.resource_list["items"]) +`, + env: map[string]string{"ANNOTATION": "annotation-value"}, + expected: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: nginx-deployment + annotations: + foo: annotation-value + internal.config.kubernetes.io/path: 'deployment_nginx-deployment.yaml' + config.kubernetes.io/path: 'deployment_nginx-deployment.yaml' +spec: + template: + spec: + containers: + - name: nginx + # head comment + image: nginx:1.8.1 # {"$ref": "#/definitions/io.k8s.cli.substitutions.image"} +`, + }, + { + name: "add_annotation_from_open_api", + input: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: nginx-deployment +spec: + template: + spec: + containers: + - name: nginx + # head comment + image: nginx:1.8.1 # {"$ref": "#/definitions/io.k8s.cli.substitutions.image"} +`, + script: ` +def run(r): + for resource in r: + resource["metadata"]["annotations"]["foo"] = ctx.open_api["definitions"]["io.k8s.api.apps.v1.Deployment"]["description"] + +run(ctx.resource_list["items"]) +`, + expected: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: nginx-deployment + annotations: + foo: Deployment enables declarative updates for Pods and ReplicaSets. + internal.config.kubernetes.io/path: 'deployment_nginx-deployment.yaml' + config.kubernetes.io/path: 'deployment_nginx-deployment.yaml' +spec: + template: + spec: + containers: + - name: nginx + # head comment + image: nginx:1.8.1 # {"$ref": "#/definitions/io.k8s.cli.substitutions.image"} +`, + }, + { + name: "update_annotation", + input: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: nginx-deployment + annotations: + foo: baz +spec: + template: + spec: + containers: + - name: nginx + # head comment + image: nginx:1.8.1 # {"$ref": "#/definitions/io.k8s.cli.substitutions.image"} +`, + script: ` +# set the foo annotation on each resource +def run(r): + for resource in r: + resource["metadata"]["annotations"]["foo"] = "bar" + +run(ctx.resource_list["items"]) +`, + expected: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: nginx-deployment + annotations: + foo: bar + internal.config.kubernetes.io/path: 'deployment_nginx-deployment.yaml' + config.kubernetes.io/path: 'deployment_nginx-deployment.yaml' +spec: + template: + spec: + containers: + - name: nginx + # head comment + image: nginx:1.8.1 # {"$ref": "#/definitions/io.k8s.cli.substitutions.image"} +`, + }, + { + name: "delete_annotation", + input: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: nginx-deployment + annotations: + foo: baz +spec: + template: + spec: + containers: + - name: nginx + # head comment + image: nginx:1.8.1 # {"$ref": "#/definitions/io.k8s.cli.substitutions.image"} +`, + script: ` +# set the foo annotation on each resource +def run(r): + for resource in r: + resource["metadata"]["annotations"].pop("foo") + +run(ctx.resource_list["items"]) +`, + expected: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: nginx-deployment + annotations: + internal.config.kubernetes.io/path: 'deployment_nginx-deployment.yaml' + config.kubernetes.io/path: 'deployment_nginx-deployment.yaml' +spec: + template: + spec: + containers: + - name: nginx + # head comment + image: nginx:1.8.1 # {"$ref": "#/definitions/io.k8s.cli.substitutions.image"} +`, + }, + { + name: "update_annotation_multiple", + input: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: nginx-deployment-1 + annotations: + foo: baz +spec: + template: + spec: + containers: + - name: nginx + # head comment + image: nginx:1.8.1 # {"$ref": "#/definitions/io.k8s.cli.substitutions.image"} +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + name: nginx-deployment-2 +spec: + template: + spec: + containers: + - name: nginx + # head comment + image: nginx:1.8.1 # {"$ref": "#/definitions/io.k8s.cli.substitutions.image"} +`, + script: ` +# set the foo annotation on each resource +def run(r): + for resource in r: + resource["metadata"]["annotations"]["foo"] = "bar" + +run(ctx.resource_list["items"]) +`, + expected: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: nginx-deployment-1 + annotations: + foo: bar + internal.config.kubernetes.io/path: 'deployment_nginx-deployment-1.yaml' + config.kubernetes.io/path: 'deployment_nginx-deployment-1.yaml' +spec: + template: + spec: + containers: + - name: nginx + # head comment + image: nginx:1.8.1 # {"$ref": "#/definitions/io.k8s.cli.substitutions.image"} +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + name: nginx-deployment-2 + annotations: + foo: bar + internal.config.kubernetes.io/path: 'deployment_nginx-deployment-2.yaml' + config.kubernetes.io/path: 'deployment_nginx-deployment-2.yaml' +spec: + template: + spec: + containers: + - name: nginx + # head comment + image: nginx:1.8.1 # {"$ref": "#/definitions/io.k8s.cli.substitutions.image"}`, + }, + { + name: "add_resource", + input: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: nginx-deployment-1 +spec: + template: + spec: + containers: + - name: nginx + # head comment + image: nginx:1.8.1 # {"$ref": "#/definitions/io.k8s.cli.substitutions.image"} +`, + script: ` +def run(r): + d = { + "apiVersion": "apps/v1", + "kind": "Deployment", + "metadata": { + "name": "nginx-deployment-2", + }, +} + r.append(d) +run(ctx.resource_list["items"]) +`, + expected: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: nginx-deployment-1 + annotations: + internal.config.kubernetes.io/path: 'deployment_nginx-deployment-1.yaml' + config.kubernetes.io/path: 'deployment_nginx-deployment-1.yaml' +spec: + template: + spec: + containers: + - name: nginx + # head comment + image: nginx:1.8.1 # {"$ref": "#/definitions/io.k8s.cli.substitutions.image"} +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + name: nginx-deployment-2 + annotations: + internal.config.kubernetes.io/path: 'deployment_nginx-deployment-2.yaml' + config.kubernetes.io/path: 'deployment_nginx-deployment-2.yaml' +`, + }, + { + name: "remove_resource", + input: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: nginx-deployment-1 +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + name: nginx-deployment-2 +`, + script: ` +def run(r): + r.pop() +run(ctx.resource_list["items"]) +`, + expected: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: nginx-deployment-1 + annotations: + internal.config.kubernetes.io/path: 'deployment_nginx-deployment-1.yaml' + config.kubernetes.io/path: 'deployment_nginx-deployment-1.yaml' +`, + }, + { + name: "functionConfig", + input: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: nginx-deployment +spec: + template: + spec: + containers: + - name: nginx + # head comment + image: nginx:1.8.1 # {"$ref": "#/definitions/io.k8s.cli.substitutions.image"} +`, + functionConfig: ` +kind: Script +spec: + value: "hello world" +`, + script: ` +# set the foo annotation on each resource +def run(r, an): + for resource in r: + resource["metadata"]["annotations"]["foo"] = an + +an = ctx.resource_list["functionConfig"]["spec"]["value"] +run(ctx.resource_list["items"], an) +`, + expected: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: nginx-deployment + annotations: + foo: hello world + internal.config.kubernetes.io/path: 'deployment_nginx-deployment.yaml' + config.kubernetes.io/path: 'deployment_nginx-deployment.yaml' +spec: + template: + spec: + containers: + - name: nginx + # head comment + image: nginx:1.8.1 # {"$ref": "#/definitions/io.k8s.cli.substitutions.image"} +`, + expectedFunctionConfig: ` +kind: Script +spec: + value: "hello world" +`, + }, + + { + name: "functionConfig_update_functionConfig", + input: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: nginx-deployment +spec: + template: + spec: + containers: + - name: nginx + # head comment + image: nginx:1.8.1 # {"$ref": "#/definitions/io.k8s.cli.substitutions.image"} +`, + functionConfig: ` +kind: Script +spec: + value: "hello world" +`, + script: ` +# set the foo annotation on each resource +def run(r, an): + for resource in r: + resource["metadata"]["annotations"]["foo"] = an + +an = ctx.resource_list["functionConfig"]["spec"]["value"] +run(ctx.resource_list["items"], an) +ctx.resource_list["functionConfig"]["spec"]["value"] = "updated" +`, + expected: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: nginx-deployment + annotations: + foo: hello world + internal.config.kubernetes.io/path: 'deployment_nginx-deployment.yaml' + config.kubernetes.io/path: 'deployment_nginx-deployment.yaml' +spec: + template: + spec: + containers: + - name: nginx + # head comment + image: nginx:1.8.1 # {"$ref": "#/definitions/io.k8s.cli.substitutions.image"} +`, + expectedFunctionConfig: ` +kind: Script +spec: + value: "hello world" +`, + }, + } + for i := range tests { + test := tests[i] + t.Run(test.name, func(t *testing.T) { + for k, v := range test.env { + os.Setenv(k, v) + } + f := &Filter{Name: test.name, Program: test.script} + + if test.functionConfig != "" { + fc, err := yaml.Parse(test.functionConfig) + if !assert.NoError(t, err) { + t.FailNow() + } + f.FunctionConfig = fc + } + + r := &kio.ByteReader{Reader: bytes.NewBufferString(test.input)} + o := &bytes.Buffer{} + w := &kio.ByteWriter{Writer: o} + p := kio.Pipeline{ + Inputs: []kio.Reader{r}, + Filters: []kio.Filter{f}, + Outputs: []kio.Writer{w}, + } + err := p.Execute() + if !assert.NoError(t, err) { + if e, ok := err.(*errors.Error); ok { + fmt.Fprintf(os.Stderr, "%s\n", e.Stack()) + } + t.FailNow() + } + if !assert.Equal(t, strings.TrimSpace(test.expected), strings.TrimSpace(o.String())) { + t.FailNow() + } + + if test.expectedFunctionConfig != "" { + if !assert.Equal(t, + strings.TrimSpace(test.expectedFunctionConfig), + strings.TrimSpace(f.FunctionConfig.MustString())) { + t.FailNow() + } + } + }) + } +} diff --git a/go/internal/forked/kyaml/inpututil/inpututil.go b/go/internal/forked/kyaml/inpututil/inpututil.go new file mode 100644 index 000000000..bd5f4bd8d --- /dev/null +++ b/go/internal/forked/kyaml/inpututil/inpututil.go @@ -0,0 +1,65 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package inpututil + +import ( + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/errors" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/kio/kioutil" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" +) + +type MapInputsEFn func(*yaml.RNode, yaml.ResourceMeta) error + +// MapInputsE runs the function against each input Resource, providing the parsed metadata +func MapInputsE(inputs []*yaml.RNode, fn MapInputsEFn) error { + for i := range inputs { + meta, err := inputs[i].GetMeta() + if err != nil { + return errors.Wrap(err) + } + if err := fn(inputs[i], meta); err != nil { + return WrapErrorWithFile(err, meta) + } + } + return nil +} + +type MapInputsFn func(*yaml.RNode, yaml.ResourceMeta) ([]*yaml.RNode, error) + +// MapInputs runs the function against each input Resource, providing the parsed metadata +// and returning the aggregated result +func MapInputs(inputs []*yaml.RNode, fn MapInputsFn) ([]*yaml.RNode, error) { + var outputs []*yaml.RNode + for i := range inputs { + meta, err := inputs[i].GetMeta() + if err != nil { + return nil, errors.Wrap(err) + } + o, err := fn(inputs[i], meta) + if err != nil { + return nil, WrapErrorWithFile(err, meta) + } + outputs = append(outputs, o...) + } + return outputs, nil +} + +// WrapErrorWithFile returns the original error wrapped with information about the file +// that the Resource was parsed from. +func WrapErrorWithFile(err error, meta yaml.ResourceMeta) error { + if err == nil { + return err + } + path := meta.Annotations[kioutil.PathAnnotation] + index := meta.Annotations[kioutil.IndexAnnotation] + if path == "" { + path = meta.Annotations[kioutil.LegacyPathAnnotation] + } + if index == "" { + index = meta.Annotations[kioutil.LegacyPathAnnotation] + } + return errors.WrapPrefixf(err, "%s [%s]", + meta.Annotations[path], + meta.Annotations[index]) +} diff --git a/go/internal/forked/kyaml/internal/forked/README.md b/go/internal/forked/kyaml/internal/forked/README.md new file mode 100644 index 000000000..fccf454f0 --- /dev/null +++ b/go/internal/forked/kyaml/internal/forked/README.md @@ -0,0 +1,11 @@ +# kyaml internal forks + +## qri-io/starlib + +This code is used by the starlark runtime. We copied it in to reduce the dependencies being brought over to kubectl by the kustomize integration. Should it need updating, do so via manual copy-paste. + +## go-yaml/yaml + +This code is used extensively by kyaml. It is a copy of upstream at a particular revision that kubectl is using, with fixes we need cherry-picked on top ([#753](https://github.com/go-yaml/yaml/pull/753)). For background information on this problem, see https://github.com/kubernetes-sigs/kustomize/issues/3946. + +This copy was created using the [git subtree technique](https://medium.com/@porteneuve/mastering-git-subtrees-943d29a798ec) and can be recreated on top of a new version of go-yaml v3 using the [update-go-yaml.sh](update-go-yaml.sh) script. To add an additional go-yaml PR to be cherry-picked, simply update the script's `GO_YAML_PRS` variable. Please note that there is nothing special about the fork directory, so copy-paste with manual edits will work just fine if you prefer. diff --git a/go/internal/forked/kyaml/internal/forked/github.com/go-yaml/yaml/.github/workflows/go.yaml b/go/internal/forked/kyaml/internal/forked/github.com/go-yaml/yaml/.github/workflows/go.yaml new file mode 100644 index 000000000..d2bb00b07 --- /dev/null +++ b/go/internal/forked/kyaml/internal/forked/github.com/go-yaml/yaml/.github/workflows/go.yaml @@ -0,0 +1,61 @@ +--- +name: Go +on: [push, pull_request] +jobs: + test: + name: Test + runs-on: ubuntu-20.04 + strategy: + fail-fast: false + matrix: + go: + - "1.5" + - "1.6" + - "1.7" + - "1.8" + - "1.9" + - "1.10" + - "1.11" + - "1.12" + - "1.13" + - "1.14" + - "1.15" + - "1.16.0-beta1" + - "tip" + env: + GOPATH: ${{ github.workspace }}/go + steps: + - name: Check out code into the Go module directory + uses: actions/checkout@v2 + with: + path: ${{ github.workspace }}/go/src/gopkg.in/yaml.v3 + - name: Set up Go ${{ matrix.go }} + if: matrix.go != 'tip' + uses: actions/setup-go@v2 + with: + go-version: ${{ matrix.go }} + stable: false + - name: Set up Go ${{ matrix.go }} + if: matrix.go == 'tip' + run: | + export GOROOT_BOOTSTRAP=`go env GOROOT` + export GOROOT=$HOME/gotip + mkdir $HOME/gotip + cd $HOME/gotip + + curl -s 'https://go.googlesource.com/go/+/refs/heads/master?format=JSON' | awk '/"commit"/{print substr($2,2,40);exit}' >HEAD + awk '{printf("gotip-%s",substr($0,0,7))}' VERSION + + curl -s -o go.tar.gz https://go.googlesource.com/go/+archive/`cat HEAD`.tar.gz + tar xfz go.tar.gz + + cd src + bash make.bash + + echo "GOROOT=$GOROOT" >> $GITHUB_ENV + echo "$GOROOT/bin" >> $GITHUB_PATH + - run: go version + - run: go get -t ./... + working-directory: ${{ github.workspace }}/go/src/gopkg.in/yaml.v3 + - run: go test . + working-directory: ${{ github.workspace }}/go/src/gopkg.in/yaml.v3 diff --git a/go/internal/forked/kyaml/internal/forked/github.com/go-yaml/yaml/.github/workflows/semgrep.yaml b/go/internal/forked/kyaml/internal/forked/github.com/go-yaml/yaml/.github/workflows/semgrep.yaml new file mode 100644 index 000000000..200c00a5a --- /dev/null +++ b/go/internal/forked/kyaml/internal/forked/github.com/go-yaml/yaml/.github/workflows/semgrep.yaml @@ -0,0 +1,16 @@ +--- +name: Semgrep +on: [push, pull_request] +jobs: + semgrep: + name: semgrep + runs-on: ubuntu-20.04 + steps: + - uses: actions/checkout@v2 + with: + fetch-depth: 0 + - name: Semgrep + id: semgrep + uses: returntocorp/semgrep-action@v1 + with: + config: p/dgryski.semgrep-go diff --git a/go/internal/forked/kyaml/internal/forked/github.com/go-yaml/yaml/LICENSE b/go/internal/forked/kyaml/internal/forked/github.com/go-yaml/yaml/LICENSE new file mode 100644 index 000000000..2683e4bb1 --- /dev/null +++ b/go/internal/forked/kyaml/internal/forked/github.com/go-yaml/yaml/LICENSE @@ -0,0 +1,50 @@ + +This project is covered by two different licenses: MIT and Apache. + +#### MIT License #### + +The following files were ported to Go from C files of libyaml, and thus +are still covered by their original MIT license, with the additional +copyright staring in 2011 when the project was ported over: + + apic.go emitterc.go parserc.go readerc.go scannerc.go + writerc.go yamlh.go yamlprivateh.go + +Copyright (c) 2006-2010 Kirill Simonov +Copyright (c) 2006-2011 Kirill Simonov + +Permission is hereby granted, free of charge, to any person obtaining a copy of +this software and associated documentation files (the "Software"), to deal in +the Software without restriction, including without limitation the rights to +use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies +of the Software, and to permit persons to whom the Software is furnished to do +so, subject to the following conditions: + +The above copyright notice and this permission notice shall be included in all +copies or substantial portions of the Software. + +THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR +IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, +FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE +AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER +LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, +OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE +SOFTWARE. + +### Apache License ### + +All the remaining project files are covered by the Apache license: + +Copyright (c) 2011-2019 Canonical Ltd + +Licensed under the Apache License, Version 2.0 (the "License"); +you may not use this file except in compliance with the License. +You may obtain a copy of the License at + + http://www.apache.org/licenses/LICENSE-2.0 + +Unless required by applicable law or agreed to in writing, software +distributed under the License is distributed on an "AS IS" BASIS, +WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. +See the License for the specific language governing permissions and +limitations under the License. diff --git a/go/internal/forked/kyaml/internal/forked/github.com/go-yaml/yaml/NOTICE b/go/internal/forked/kyaml/internal/forked/github.com/go-yaml/yaml/NOTICE new file mode 100644 index 000000000..866d74a7a --- /dev/null +++ b/go/internal/forked/kyaml/internal/forked/github.com/go-yaml/yaml/NOTICE @@ -0,0 +1,13 @@ +Copyright 2011-2016 Canonical Ltd. + +Licensed under the Apache License, Version 2.0 (the "License"); +you may not use this file except in compliance with the License. +You may obtain a copy of the License at + + http://www.apache.org/licenses/LICENSE-2.0 + +Unless required by applicable law or agreed to in writing, software +distributed under the License is distributed on an "AS IS" BASIS, +WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. +See the License for the specific language governing permissions and +limitations under the License. diff --git a/go/internal/forked/kyaml/internal/forked/github.com/go-yaml/yaml/README.md b/go/internal/forked/kyaml/internal/forked/github.com/go-yaml/yaml/README.md new file mode 100644 index 000000000..08eb1babd --- /dev/null +++ b/go/internal/forked/kyaml/internal/forked/github.com/go-yaml/yaml/README.md @@ -0,0 +1,150 @@ +# YAML support for the Go language + +Introduction +------------ + +The yaml package enables Go programs to comfortably encode and decode YAML +values. It was developed within [Canonical](https://www.canonical.com) as +part of the [juju](https://juju.ubuntu.com) project, and is based on a +pure Go port of the well-known [libyaml](http://pyyaml.org/wiki/LibYAML) +C library to parse and generate YAML data quickly and reliably. + +Compatibility +------------- + +The yaml package supports most of YAML 1.2, but preserves some behavior +from 1.1 for backwards compatibility. + +Specifically, as of v3 of the yaml package: + + - YAML 1.1 bools (_yes/no, on/off_) are supported as long as they are being + decoded into a typed bool value. Otherwise they behave as a string. Booleans + in YAML 1.2 are _true/false_ only. + - Octals encode and decode as _0777_ per YAML 1.1, rather than _0o777_ + as specified in YAML 1.2, because most parsers still use the old format. + Octals in the _0o777_ format are supported though, so new files work. + - Does not support base-60 floats. These are gone from YAML 1.2, and were + actually never supported by this package as it's clearly a poor choice. + +and offers backwards +compatibility with YAML 1.1 in some cases. +1.2, including support for +anchors, tags, map merging, etc. Multi-document unmarshalling is not yet +implemented, and base-60 floats from YAML 1.1 are purposefully not +supported since they're a poor design and are gone in YAML 1.2. + +Installation and usage +---------------------- + +The import path for the package is *gopkg.in/yaml.v3*. + +To install it, run: + + go get gopkg.in/yaml.v3 + +API documentation +----------------- + +If opened in a browser, the import path itself leads to the API documentation: + + - [https://gopkg.in/yaml.v3](https://gopkg.in/yaml.v3) + +API stability +------------- + +The package API for yaml v3 will remain stable as described in [gopkg.in](https://gopkg.in). + + +License +------- + +The yaml package is licensed under the MIT and Apache License 2.0 licenses. +Please see the LICENSE file for details. + + +Example +------- + +```Go +package main + +import ( + "fmt" + "log" + + "gopkg.in/yaml.v3" +) + +var data = ` +a: Easy! +b: + c: 2 + d: [3, 4] +` + +// Note: struct fields must be public in order for unmarshal to +// correctly populate the data. +type T struct { + A string + B struct { + RenamedC int `yaml:"c"` + D []int `yaml:",flow"` + } +} + +func main() { + t := T{} + + err := yaml.Unmarshal([]byte(data), &t) + if err != nil { + log.Fatalf("error: %v", err) + } + fmt.Printf("--- t:\n%v\n\n", t) + + d, err := yaml.Marshal(&t) + if err != nil { + log.Fatalf("error: %v", err) + } + fmt.Printf("--- t dump:\n%s\n\n", string(d)) + + m := make(map[interface{}]interface{}) + + err = yaml.Unmarshal([]byte(data), &m) + if err != nil { + log.Fatalf("error: %v", err) + } + fmt.Printf("--- m:\n%v\n\n", m) + + d, err = yaml.Marshal(&m) + if err != nil { + log.Fatalf("error: %v", err) + } + fmt.Printf("--- m dump:\n%s\n\n", string(d)) +} +``` + +This example will generate the following output: + +``` +--- t: +{Easy! {2 [3 4]}} + +--- t dump: +a: Easy! +b: + c: 2 + d: [3, 4] + + +--- m: +map[a:Easy! b:map[c:2 d:[3 4]]] + +--- m dump: +a: Easy! +b: + c: 2 + d: + - 3 + - 4 +``` + diff --git a/go/internal/forked/kyaml/internal/forked/github.com/go-yaml/yaml/apic.go b/go/internal/forked/kyaml/internal/forked/github.com/go-yaml/yaml/apic.go new file mode 100644 index 000000000..ae7d049f1 --- /dev/null +++ b/go/internal/forked/kyaml/internal/forked/github.com/go-yaml/yaml/apic.go @@ -0,0 +1,747 @@ +// +// Copyright (c) 2011-2019 Canonical Ltd +// Copyright (c) 2006-2010 Kirill Simonov +// +// Permission is hereby granted, free of charge, to any person obtaining a copy of +// this software and associated documentation files (the "Software"), to deal in +// the Software without restriction, including without limitation the rights to +// use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies +// of the Software, and to permit persons to whom the Software is furnished to do +// so, subject to the following conditions: +// +// The above copyright notice and this permission notice shall be included in all +// copies or substantial portions of the Software. +// +// THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR +// IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, +// FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE +// AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER +// LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, +// OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE +// SOFTWARE. + +package yaml + +import ( + "io" +) + +func yaml_insert_token(parser *yaml_parser_t, pos int, token *yaml_token_t) { + //fmt.Println("yaml_insert_token", "pos:", pos, "typ:", token.typ, "head:", parser.tokens_head, "len:", len(parser.tokens)) + + // Check if we can move the queue at the beginning of the buffer. + if parser.tokens_head > 0 && len(parser.tokens) == cap(parser.tokens) { + if parser.tokens_head != len(parser.tokens) { + copy(parser.tokens, parser.tokens[parser.tokens_head:]) + } + parser.tokens = parser.tokens[:len(parser.tokens)-parser.tokens_head] + parser.tokens_head = 0 + } + parser.tokens = append(parser.tokens, *token) + if pos < 0 { + return + } + copy(parser.tokens[parser.tokens_head+pos+1:], parser.tokens[parser.tokens_head+pos:]) + parser.tokens[parser.tokens_head+pos] = *token +} + +// Create a new parser object. +func yaml_parser_initialize(parser *yaml_parser_t) bool { + *parser = yaml_parser_t{ + raw_buffer: make([]byte, 0, input_raw_buffer_size), + buffer: make([]byte, 0, input_buffer_size), + } + return true +} + +// Destroy a parser object. +func yaml_parser_delete(parser *yaml_parser_t) { + *parser = yaml_parser_t{} +} + +// String read handler. +func yaml_string_read_handler(parser *yaml_parser_t, buffer []byte) (n int, err error) { + if parser.input_pos == len(parser.input) { + return 0, io.EOF + } + n = copy(buffer, parser.input[parser.input_pos:]) + parser.input_pos += n + return n, nil +} + +// Reader read handler. +func yaml_reader_read_handler(parser *yaml_parser_t, buffer []byte) (n int, err error) { + return parser.input_reader.Read(buffer) +} + +// Set a string input. +func yaml_parser_set_input_string(parser *yaml_parser_t, input []byte) { + if parser.read_handler != nil { + panic("must set the input source only once") + } + parser.read_handler = yaml_string_read_handler + parser.input = input + parser.input_pos = 0 +} + +// Set a file input. +func yaml_parser_set_input_reader(parser *yaml_parser_t, r io.Reader) { + if parser.read_handler != nil { + panic("must set the input source only once") + } + parser.read_handler = yaml_reader_read_handler + parser.input_reader = r +} + +// Set the source encoding. +func yaml_parser_set_encoding(parser *yaml_parser_t, encoding yaml_encoding_t) { + if parser.encoding != yaml_ANY_ENCODING { + panic("must set the encoding only once") + } + parser.encoding = encoding +} + +// Create a new emitter object. +func yaml_emitter_initialize(emitter *yaml_emitter_t) { + *emitter = yaml_emitter_t{ + buffer: make([]byte, output_buffer_size), + raw_buffer: make([]byte, 0, output_raw_buffer_size), + states: make([]yaml_emitter_state_t, 0, initial_stack_size), + events: make([]yaml_event_t, 0, initial_queue_size), + best_width: -1, + } +} + +// Destroy an emitter object. +func yaml_emitter_delete(emitter *yaml_emitter_t) { + *emitter = yaml_emitter_t{} +} + +// String write handler. +func yaml_string_write_handler(emitter *yaml_emitter_t, buffer []byte) error { + *emitter.output_buffer = append(*emitter.output_buffer, buffer...) + return nil +} + +// yaml_writer_write_handler uses emitter.output_writer to write the +// emitted text. +func yaml_writer_write_handler(emitter *yaml_emitter_t, buffer []byte) error { + _, err := emitter.output_writer.Write(buffer) + return err +} + +// Set a string output. +func yaml_emitter_set_output_string(emitter *yaml_emitter_t, output_buffer *[]byte) { + if emitter.write_handler != nil { + panic("must set the output target only once") + } + emitter.write_handler = yaml_string_write_handler + emitter.output_buffer = output_buffer +} + +// Set a file output. +func yaml_emitter_set_output_writer(emitter *yaml_emitter_t, w io.Writer) { + if emitter.write_handler != nil { + panic("must set the output target only once") + } + emitter.write_handler = yaml_writer_write_handler + emitter.output_writer = w +} + +// Set the output encoding. +func yaml_emitter_set_encoding(emitter *yaml_emitter_t, encoding yaml_encoding_t) { + if emitter.encoding != yaml_ANY_ENCODING { + panic("must set the output encoding only once") + } + emitter.encoding = encoding +} + +// Set the canonical output style. +func yaml_emitter_set_canonical(emitter *yaml_emitter_t, canonical bool) { + emitter.canonical = canonical +} + +// Set the indentation increment. +func yaml_emitter_set_indent(emitter *yaml_emitter_t, indent int) { + if indent < 2 || indent > 9 { + indent = 2 + } + emitter.best_indent = indent +} + +// Set the preferred line width. +func yaml_emitter_set_width(emitter *yaml_emitter_t, width int) { + if width < 0 { + width = -1 + } + emitter.best_width = width +} + +// Set if unescaped non-ASCII characters are allowed. +func yaml_emitter_set_unicode(emitter *yaml_emitter_t, unicode bool) { + emitter.unicode = unicode +} + +// Set the preferred line break character. +func yaml_emitter_set_break(emitter *yaml_emitter_t, line_break yaml_break_t) { + emitter.line_break = line_break +} + +///* +// * Destroy a token object. +// */ +// +//YAML_DECLARE(void) +//yaml_token_delete(yaml_token_t *token) +//{ +// assert(token); // Non-NULL token object expected. +// +// switch (token.type) +// { +// case YAML_TAG_DIRECTIVE_TOKEN: +// yaml_free(token.data.tag_directive.handle); +// yaml_free(token.data.tag_directive.prefix); +// break; +// +// case YAML_ALIAS_TOKEN: +// yaml_free(token.data.alias.value); +// break; +// +// case YAML_ANCHOR_TOKEN: +// yaml_free(token.data.anchor.value); +// break; +// +// case YAML_TAG_TOKEN: +// yaml_free(token.data.tag.handle); +// yaml_free(token.data.tag.suffix); +// break; +// +// case YAML_SCALAR_TOKEN: +// yaml_free(token.data.scalar.value); +// break; +// +// default: +// break; +// } +// +// memset(token, 0, sizeof(yaml_token_t)); +//} +// +///* +// * Check if a string is a valid UTF-8 sequence. +// * +// * Check 'reader.c' for more details on UTF-8 encoding. +// */ +// +//static int +//yaml_check_utf8(yaml_char_t *start, size_t length) +//{ +// yaml_char_t *end = start+length; +// yaml_char_t *pointer = start; +// +// while (pointer < end) { +// unsigned char octet; +// unsigned int width; +// unsigned int value; +// size_t k; +// +// octet = pointer[0]; +// width = (octet & 0x80) == 0x00 ? 1 : +// (octet & 0xE0) == 0xC0 ? 2 : +// (octet & 0xF0) == 0xE0 ? 3 : +// (octet & 0xF8) == 0xF0 ? 4 : 0; +// value = (octet & 0x80) == 0x00 ? octet & 0x7F : +// (octet & 0xE0) == 0xC0 ? octet & 0x1F : +// (octet & 0xF0) == 0xE0 ? octet & 0x0F : +// (octet & 0xF8) == 0xF0 ? octet & 0x07 : 0; +// if (!width) return 0; +// if (pointer+width > end) return 0; +// for (k = 1; k < width; k ++) { +// octet = pointer[k]; +// if ((octet & 0xC0) != 0x80) return 0; +// value = (value << 6) + (octet & 0x3F); +// } +// if (!((width == 1) || +// (width == 2 && value >= 0x80) || +// (width == 3 && value >= 0x800) || +// (width == 4 && value >= 0x10000))) return 0; +// +// pointer += width; +// } +// +// return 1; +//} +// + +// Create STREAM-START. +func yaml_stream_start_event_initialize(event *yaml_event_t, encoding yaml_encoding_t) { + *event = yaml_event_t{ + typ: yaml_STREAM_START_EVENT, + encoding: encoding, + } +} + +// Create STREAM-END. +func yaml_stream_end_event_initialize(event *yaml_event_t) { + *event = yaml_event_t{ + typ: yaml_STREAM_END_EVENT, + } +} + +// Create DOCUMENT-START. +func yaml_document_start_event_initialize( + event *yaml_event_t, + version_directive *yaml_version_directive_t, + tag_directives []yaml_tag_directive_t, + implicit bool, +) { + *event = yaml_event_t{ + typ: yaml_DOCUMENT_START_EVENT, + version_directive: version_directive, + tag_directives: tag_directives, + implicit: implicit, + } +} + +// Create DOCUMENT-END. +func yaml_document_end_event_initialize(event *yaml_event_t, implicit bool) { + *event = yaml_event_t{ + typ: yaml_DOCUMENT_END_EVENT, + implicit: implicit, + } +} + +// Create ALIAS. +func yaml_alias_event_initialize(event *yaml_event_t, anchor []byte) bool { + *event = yaml_event_t{ + typ: yaml_ALIAS_EVENT, + anchor: anchor, + } + return true +} + +// Create SCALAR. +func yaml_scalar_event_initialize(event *yaml_event_t, anchor, tag, value []byte, plain_implicit, quoted_implicit bool, style yaml_scalar_style_t) bool { + *event = yaml_event_t{ + typ: yaml_SCALAR_EVENT, + anchor: anchor, + tag: tag, + value: value, + implicit: plain_implicit, + quoted_implicit: quoted_implicit, + style: yaml_style_t(style), + } + return true +} + +// Create SEQUENCE-START. +func yaml_sequence_start_event_initialize(event *yaml_event_t, anchor, tag []byte, implicit bool, style yaml_sequence_style_t) bool { + *event = yaml_event_t{ + typ: yaml_SEQUENCE_START_EVENT, + anchor: anchor, + tag: tag, + implicit: implicit, + style: yaml_style_t(style), + } + return true +} + +// Create SEQUENCE-END. +func yaml_sequence_end_event_initialize(event *yaml_event_t) bool { + *event = yaml_event_t{ + typ: yaml_SEQUENCE_END_EVENT, + } + return true +} + +// Create MAPPING-START. +func yaml_mapping_start_event_initialize(event *yaml_event_t, anchor, tag []byte, implicit bool, style yaml_mapping_style_t) { + *event = yaml_event_t{ + typ: yaml_MAPPING_START_EVENT, + anchor: anchor, + tag: tag, + implicit: implicit, + style: yaml_style_t(style), + } +} + +// Create MAPPING-END. +func yaml_mapping_end_event_initialize(event *yaml_event_t) { + *event = yaml_event_t{ + typ: yaml_MAPPING_END_EVENT, + } +} + +// Destroy an event object. +func yaml_event_delete(event *yaml_event_t) { + *event = yaml_event_t{} +} + +///* +// * Create a document object. +// */ +// +//YAML_DECLARE(int) +//yaml_document_initialize(document *yaml_document_t, +// version_directive *yaml_version_directive_t, +// tag_directives_start *yaml_tag_directive_t, +// tag_directives_end *yaml_tag_directive_t, +// start_implicit int, end_implicit int) +//{ +// struct { +// error yaml_error_type_t +// } context +// struct { +// start *yaml_node_t +// end *yaml_node_t +// top *yaml_node_t +// } nodes = { NULL, NULL, NULL } +// version_directive_copy *yaml_version_directive_t = NULL +// struct { +// start *yaml_tag_directive_t +// end *yaml_tag_directive_t +// top *yaml_tag_directive_t +// } tag_directives_copy = { NULL, NULL, NULL } +// value yaml_tag_directive_t = { NULL, NULL } +// mark yaml_mark_t = { 0, 0, 0 } +// +// assert(document) // Non-NULL document object is expected. +// assert((tag_directives_start && tag_directives_end) || +// (tag_directives_start == tag_directives_end)) +// // Valid tag directives are expected. +// +// if (!STACK_INIT(&context, nodes, INITIAL_STACK_SIZE)) goto error +// +// if (version_directive) { +// version_directive_copy = yaml_malloc(sizeof(yaml_version_directive_t)) +// if (!version_directive_copy) goto error +// version_directive_copy.major = version_directive.major +// version_directive_copy.minor = version_directive.minor +// } +// +// if (tag_directives_start != tag_directives_end) { +// tag_directive *yaml_tag_directive_t +// if (!STACK_INIT(&context, tag_directives_copy, INITIAL_STACK_SIZE)) +// goto error +// for (tag_directive = tag_directives_start +// tag_directive != tag_directives_end; tag_directive ++) { +// assert(tag_directive.handle) +// assert(tag_directive.prefix) +// if (!yaml_check_utf8(tag_directive.handle, +// strlen((char *)tag_directive.handle))) +// goto error +// if (!yaml_check_utf8(tag_directive.prefix, +// strlen((char *)tag_directive.prefix))) +// goto error +// value.handle = yaml_strdup(tag_directive.handle) +// value.prefix = yaml_strdup(tag_directive.prefix) +// if (!value.handle || !value.prefix) goto error +// if (!PUSH(&context, tag_directives_copy, value)) +// goto error +// value.handle = NULL +// value.prefix = NULL +// } +// } +// +// DOCUMENT_INIT(*document, nodes.start, nodes.end, version_directive_copy, +// tag_directives_copy.start, tag_directives_copy.top, +// start_implicit, end_implicit, mark, mark) +// +// return 1 +// +//error: +// STACK_DEL(&context, nodes) +// yaml_free(version_directive_copy) +// while (!STACK_EMPTY(&context, tag_directives_copy)) { +// value yaml_tag_directive_t = POP(&context, tag_directives_copy) +// yaml_free(value.handle) +// yaml_free(value.prefix) +// } +// STACK_DEL(&context, tag_directives_copy) +// yaml_free(value.handle) +// yaml_free(value.prefix) +// +// return 0 +//} +// +///* +// * Destroy a document object. +// */ +// +//YAML_DECLARE(void) +//yaml_document_delete(document *yaml_document_t) +//{ +// struct { +// error yaml_error_type_t +// } context +// tag_directive *yaml_tag_directive_t +// +// context.error = YAML_NO_ERROR // Eliminate a compiler warning. +// +// assert(document) // Non-NULL document object is expected. +// +// while (!STACK_EMPTY(&context, document.nodes)) { +// node yaml_node_t = POP(&context, document.nodes) +// yaml_free(node.tag) +// switch (node.type) { +// case YAML_SCALAR_NODE: +// yaml_free(node.data.scalar.value) +// break +// case YAML_SEQUENCE_NODE: +// STACK_DEL(&context, node.data.sequence.items) +// break +// case YAML_MAPPING_NODE: +// STACK_DEL(&context, node.data.mapping.pairs) +// break +// default: +// assert(0) // Should not happen. +// } +// } +// STACK_DEL(&context, document.nodes) +// +// yaml_free(document.version_directive) +// for (tag_directive = document.tag_directives.start +// tag_directive != document.tag_directives.end +// tag_directive++) { +// yaml_free(tag_directive.handle) +// yaml_free(tag_directive.prefix) +// } +// yaml_free(document.tag_directives.start) +// +// memset(document, 0, sizeof(yaml_document_t)) +//} +// +///** +// * Get a document node. +// */ +// +//YAML_DECLARE(yaml_node_t *) +//yaml_document_get_node(document *yaml_document_t, index int) +//{ +// assert(document) // Non-NULL document object is expected. +// +// if (index > 0 && document.nodes.start + index <= document.nodes.top) { +// return document.nodes.start + index - 1 +// } +// return NULL +//} +// +///** +// * Get the root object. +// */ +// +//YAML_DECLARE(yaml_node_t *) +//yaml_document_get_root_node(document *yaml_document_t) +//{ +// assert(document) // Non-NULL document object is expected. +// +// if (document.nodes.top != document.nodes.start) { +// return document.nodes.start +// } +// return NULL +//} +// +///* +// * Add a scalar node to a document. +// */ +// +//YAML_DECLARE(int) +//yaml_document_add_scalar(document *yaml_document_t, +// tag *yaml_char_t, value *yaml_char_t, length int, +// style yaml_scalar_style_t) +//{ +// struct { +// error yaml_error_type_t +// } context +// mark yaml_mark_t = { 0, 0, 0 } +// tag_copy *yaml_char_t = NULL +// value_copy *yaml_char_t = NULL +// node yaml_node_t +// +// assert(document) // Non-NULL document object is expected. +// assert(value) // Non-NULL value is expected. +// +// if (!tag) { +// tag = (yaml_char_t *)YAML_DEFAULT_SCALAR_TAG +// } +// +// if (!yaml_check_utf8(tag, strlen((char *)tag))) goto error +// tag_copy = yaml_strdup(tag) +// if (!tag_copy) goto error +// +// if (length < 0) { +// length = strlen((char *)value) +// } +// +// if (!yaml_check_utf8(value, length)) goto error +// value_copy = yaml_malloc(length+1) +// if (!value_copy) goto error +// memcpy(value_copy, value, length) +// value_copy[length] = '\0' +// +// SCALAR_NODE_INIT(node, tag_copy, value_copy, length, style, mark, mark) +// if (!PUSH(&context, document.nodes, node)) goto error +// +// return document.nodes.top - document.nodes.start +// +//error: +// yaml_free(tag_copy) +// yaml_free(value_copy) +// +// return 0 +//} +// +///* +// * Add a sequence node to a document. +// */ +// +//YAML_DECLARE(int) +//yaml_document_add_sequence(document *yaml_document_t, +// tag *yaml_char_t, style yaml_sequence_style_t) +//{ +// struct { +// error yaml_error_type_t +// } context +// mark yaml_mark_t = { 0, 0, 0 } +// tag_copy *yaml_char_t = NULL +// struct { +// start *yaml_node_item_t +// end *yaml_node_item_t +// top *yaml_node_item_t +// } items = { NULL, NULL, NULL } +// node yaml_node_t +// +// assert(document) // Non-NULL document object is expected. +// +// if (!tag) { +// tag = (yaml_char_t *)YAML_DEFAULT_SEQUENCE_TAG +// } +// +// if (!yaml_check_utf8(tag, strlen((char *)tag))) goto error +// tag_copy = yaml_strdup(tag) +// if (!tag_copy) goto error +// +// if (!STACK_INIT(&context, items, INITIAL_STACK_SIZE)) goto error +// +// SEQUENCE_NODE_INIT(node, tag_copy, items.start, items.end, +// style, mark, mark) +// if (!PUSH(&context, document.nodes, node)) goto error +// +// return document.nodes.top - document.nodes.start +// +//error: +// STACK_DEL(&context, items) +// yaml_free(tag_copy) +// +// return 0 +//} +// +///* +// * Add a mapping node to a document. +// */ +// +//YAML_DECLARE(int) +//yaml_document_add_mapping(document *yaml_document_t, +// tag *yaml_char_t, style yaml_mapping_style_t) +//{ +// struct { +// error yaml_error_type_t +// } context +// mark yaml_mark_t = { 0, 0, 0 } +// tag_copy *yaml_char_t = NULL +// struct { +// start *yaml_node_pair_t +// end *yaml_node_pair_t +// top *yaml_node_pair_t +// } pairs = { NULL, NULL, NULL } +// node yaml_node_t +// +// assert(document) // Non-NULL document object is expected. +// +// if (!tag) { +// tag = (yaml_char_t *)YAML_DEFAULT_MAPPING_TAG +// } +// +// if (!yaml_check_utf8(tag, strlen((char *)tag))) goto error +// tag_copy = yaml_strdup(tag) +// if (!tag_copy) goto error +// +// if (!STACK_INIT(&context, pairs, INITIAL_STACK_SIZE)) goto error +// +// MAPPING_NODE_INIT(node, tag_copy, pairs.start, pairs.end, +// style, mark, mark) +// if (!PUSH(&context, document.nodes, node)) goto error +// +// return document.nodes.top - document.nodes.start +// +//error: +// STACK_DEL(&context, pairs) +// yaml_free(tag_copy) +// +// return 0 +//} +// +///* +// * Append an item to a sequence node. +// */ +// +//YAML_DECLARE(int) +//yaml_document_append_sequence_item(document *yaml_document_t, +// sequence int, item int) +//{ +// struct { +// error yaml_error_type_t +// } context +// +// assert(document) // Non-NULL document is required. +// assert(sequence > 0 +// && document.nodes.start + sequence <= document.nodes.top) +// // Valid sequence id is required. +// assert(document.nodes.start[sequence-1].type == YAML_SEQUENCE_NODE) +// // A sequence node is required. +// assert(item > 0 && document.nodes.start + item <= document.nodes.top) +// // Valid item id is required. +// +// if (!PUSH(&context, +// document.nodes.start[sequence-1].data.sequence.items, item)) +// return 0 +// +// return 1 +//} +// +///* +// * Append a pair of a key and a value to a mapping node. +// */ +// +//YAML_DECLARE(int) +//yaml_document_append_mapping_pair(document *yaml_document_t, +// mapping int, key int, value int) +//{ +// struct { +// error yaml_error_type_t +// } context +// +// pair yaml_node_pair_t +// +// assert(document) // Non-NULL document is required. +// assert(mapping > 0 +// && document.nodes.start + mapping <= document.nodes.top) +// // Valid mapping id is required. +// assert(document.nodes.start[mapping-1].type == YAML_MAPPING_NODE) +// // A mapping node is required. +// assert(key > 0 && document.nodes.start + key <= document.nodes.top) +// // Valid key id is required. +// assert(value > 0 && document.nodes.start + value <= document.nodes.top) +// // Valid value id is required. +// +// pair.key = key +// pair.value = value +// +// if (!PUSH(&context, +// document.nodes.start[mapping-1].data.mapping.pairs, pair)) +// return 0 +// +// return 1 +//} +// +// diff --git a/go/internal/forked/kyaml/internal/forked/github.com/go-yaml/yaml/decode.go b/go/internal/forked/kyaml/internal/forked/github.com/go-yaml/yaml/decode.go new file mode 100644 index 000000000..df36e3a30 --- /dev/null +++ b/go/internal/forked/kyaml/internal/forked/github.com/go-yaml/yaml/decode.go @@ -0,0 +1,950 @@ +// +// Copyright (c) 2011-2019 Canonical Ltd +// +// Licensed under the Apache License, Version 2.0 (the "License"); +// you may not use this file except in compliance with the License. +// You may obtain a copy of the License at +// +// http://www.apache.org/licenses/LICENSE-2.0 +// +// Unless required by applicable law or agreed to in writing, software +// distributed under the License is distributed on an "AS IS" BASIS, +// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. +// See the License for the specific language governing permissions and +// limitations under the License. + +package yaml + +import ( + "encoding" + "encoding/base64" + "fmt" + "io" + "math" + "reflect" + "strconv" + "time" +) + +// ---------------------------------------------------------------------------- +// Parser, produces a node tree out of a libyaml event stream. + +type parser struct { + parser yaml_parser_t + event yaml_event_t + doc *Node + anchors map[string]*Node + doneInit bool + textless bool +} + +func newParser(b []byte) *parser { + p := parser{} + if !yaml_parser_initialize(&p.parser) { + panic("failed to initialize YAML emitter") + } + if len(b) == 0 { + b = []byte{'\n'} + } + yaml_parser_set_input_string(&p.parser, b) + return &p +} + +func newParserFromReader(r io.Reader) *parser { + p := parser{} + if !yaml_parser_initialize(&p.parser) { + panic("failed to initialize YAML emitter") + } + yaml_parser_set_input_reader(&p.parser, r) + return &p +} + +func (p *parser) init() { + if p.doneInit { + return + } + p.anchors = make(map[string]*Node) + p.expect(yaml_STREAM_START_EVENT) + p.doneInit = true +} + +func (p *parser) destroy() { + if p.event.typ != yaml_NO_EVENT { + yaml_event_delete(&p.event) + } + yaml_parser_delete(&p.parser) +} + +// expect consumes an event from the event stream and +// checks that it's of the expected type. +func (p *parser) expect(e yaml_event_type_t) { + if p.event.typ == yaml_NO_EVENT { + if !yaml_parser_parse(&p.parser, &p.event) { + p.fail() + } + } + if p.event.typ == yaml_STREAM_END_EVENT { + failf("attempted to go past the end of stream; corrupted value?") + } + if p.event.typ != e { + p.parser.problem = fmt.Sprintf("expected %s event but got %s", e, p.event.typ) + p.fail() + } + yaml_event_delete(&p.event) + p.event.typ = yaml_NO_EVENT +} + +// peek peeks at the next event in the event stream, +// puts the results into p.event and returns the event type. +func (p *parser) peek() yaml_event_type_t { + if p.event.typ != yaml_NO_EVENT { + return p.event.typ + } + if !yaml_parser_parse(&p.parser, &p.event) { + p.fail() + } + return p.event.typ +} + +func (p *parser) fail() { + var where string + var line int + if p.parser.context_mark.line != 0 { + line = p.parser.context_mark.line + // Scanner errors don't iterate line before returning error + if p.parser.error == yaml_SCANNER_ERROR { + line++ + } + } else if p.parser.problem_mark.line != 0 { + line = p.parser.problem_mark.line + // Scanner errors don't iterate line before returning error + if p.parser.error == yaml_SCANNER_ERROR { + line++ + } + } + if line != 0 { + where = "line " + strconv.Itoa(line) + ": " + } + var msg string + if len(p.parser.problem) > 0 { + msg = p.parser.problem + } else { + msg = "unknown problem parsing YAML content" + } + failf("%s%s", where, msg) +} + +func (p *parser) anchor(n *Node, anchor []byte) { + if anchor != nil { + n.Anchor = string(anchor) + p.anchors[n.Anchor] = n + } +} + +func (p *parser) parse() *Node { + p.init() + switch p.peek() { + case yaml_SCALAR_EVENT: + return p.scalar() + case yaml_ALIAS_EVENT: + return p.alias() + case yaml_MAPPING_START_EVENT: + return p.mapping() + case yaml_SEQUENCE_START_EVENT: + return p.sequence() + case yaml_DOCUMENT_START_EVENT: + return p.document() + case yaml_STREAM_END_EVENT: + // Happens when attempting to decode an empty buffer. + return nil + case yaml_TAIL_COMMENT_EVENT: + panic("internal error: unexpected tail comment event (please report)") + default: + panic("internal error: attempted to parse unknown event (please report): " + p.event.typ.String()) + } +} + +func (p *parser) node(kind Kind, defaultTag, tag, value string) *Node { + var style Style + if tag != "" && tag != "!" { + tag = shortTag(tag) + style = TaggedStyle + } else if defaultTag != "" { + tag = defaultTag + } else if kind == ScalarNode { + tag, _ = resolve("", value) + } + n := &Node{ + Kind: kind, + Tag: tag, + Value: value, + Style: style, + } + if !p.textless { + n.Line = p.event.start_mark.line + 1 + n.Column = p.event.start_mark.column + 1 + n.HeadComment = string(p.event.head_comment) + n.LineComment = string(p.event.line_comment) + n.FootComment = string(p.event.foot_comment) + } + return n +} + +func (p *parser) parseChild(parent *Node) *Node { + child := p.parse() + parent.Content = append(parent.Content, child) + return child +} + +func (p *parser) document() *Node { + n := p.node(DocumentNode, "", "", "") + p.doc = n + p.expect(yaml_DOCUMENT_START_EVENT) + p.parseChild(n) + if p.peek() == yaml_DOCUMENT_END_EVENT { + n.FootComment = string(p.event.foot_comment) + } + p.expect(yaml_DOCUMENT_END_EVENT) + return n +} + +func (p *parser) alias() *Node { + n := p.node(AliasNode, "", "", string(p.event.anchor)) + n.Alias = p.anchors[n.Value] + if n.Alias == nil { + failf("unknown anchor '%s' referenced", n.Value) + } + p.expect(yaml_ALIAS_EVENT) + return n +} + +func (p *parser) scalar() *Node { + var parsedStyle = p.event.scalar_style() + var nodeStyle Style + switch { + case parsedStyle&yaml_DOUBLE_QUOTED_SCALAR_STYLE != 0: + nodeStyle = DoubleQuotedStyle + case parsedStyle&yaml_SINGLE_QUOTED_SCALAR_STYLE != 0: + nodeStyle = SingleQuotedStyle + case parsedStyle&yaml_LITERAL_SCALAR_STYLE != 0: + nodeStyle = LiteralStyle + case parsedStyle&yaml_FOLDED_SCALAR_STYLE != 0: + nodeStyle = FoldedStyle + } + var nodeValue = string(p.event.value) + var nodeTag = string(p.event.tag) + var defaultTag string + if nodeStyle == 0 { + if nodeValue == "<<" { + defaultTag = mergeTag + } + } else { + defaultTag = strTag + } + n := p.node(ScalarNode, defaultTag, nodeTag, nodeValue) + n.Style |= nodeStyle + p.anchor(n, p.event.anchor) + p.expect(yaml_SCALAR_EVENT) + return n +} + +func (p *parser) sequence() *Node { + n := p.node(SequenceNode, seqTag, string(p.event.tag), "") + if p.event.sequence_style()&yaml_FLOW_SEQUENCE_STYLE != 0 { + n.Style |= FlowStyle + } + p.anchor(n, p.event.anchor) + p.expect(yaml_SEQUENCE_START_EVENT) + for p.peek() != yaml_SEQUENCE_END_EVENT { + p.parseChild(n) + } + n.LineComment = string(p.event.line_comment) + n.FootComment = string(p.event.foot_comment) + p.expect(yaml_SEQUENCE_END_EVENT) + return n +} + +func (p *parser) mapping() *Node { + n := p.node(MappingNode, mapTag, string(p.event.tag), "") + block := true + if p.event.mapping_style()&yaml_FLOW_MAPPING_STYLE != 0 { + block = false + n.Style |= FlowStyle + } + p.anchor(n, p.event.anchor) + p.expect(yaml_MAPPING_START_EVENT) + for p.peek() != yaml_MAPPING_END_EVENT { + k := p.parseChild(n) + if block && k.FootComment != "" { + // Must be a foot comment for the prior value when being dedented. + if len(n.Content) > 2 { + n.Content[len(n.Content)-3].FootComment = k.FootComment + k.FootComment = "" + } + } + v := p.parseChild(n) + if k.FootComment == "" && v.FootComment != "" { + k.FootComment = v.FootComment + v.FootComment = "" + } + if p.peek() == yaml_TAIL_COMMENT_EVENT { + if k.FootComment == "" { + k.FootComment = string(p.event.foot_comment) + } + p.expect(yaml_TAIL_COMMENT_EVENT) + } + } + n.LineComment = string(p.event.line_comment) + n.FootComment = string(p.event.foot_comment) + if n.Style&FlowStyle == 0 && n.FootComment != "" && len(n.Content) > 1 { + n.Content[len(n.Content)-2].FootComment = n.FootComment + n.FootComment = "" + } + p.expect(yaml_MAPPING_END_EVENT) + return n +} + +// ---------------------------------------------------------------------------- +// Decoder, unmarshals a node into a provided value. + +type decoder struct { + doc *Node + aliases map[*Node]bool + terrors []string + + stringMapType reflect.Type + generalMapType reflect.Type + + knownFields bool + uniqueKeys bool + decodeCount int + aliasCount int + aliasDepth int +} + +var ( + nodeType = reflect.TypeOf(Node{}) + durationType = reflect.TypeOf(time.Duration(0)) + stringMapType = reflect.TypeOf(map[string]interface{}{}) + generalMapType = reflect.TypeOf(map[interface{}]interface{}{}) + ifaceType = generalMapType.Elem() + timeType = reflect.TypeOf(time.Time{}) + ptrTimeType = reflect.TypeOf(&time.Time{}) +) + +func newDecoder() *decoder { + d := &decoder{ + stringMapType: stringMapType, + generalMapType: generalMapType, + uniqueKeys: true, + } + d.aliases = make(map[*Node]bool) + return d +} + +func (d *decoder) terror(n *Node, tag string, out reflect.Value) { + if n.Tag != "" { + tag = n.Tag + } + value := n.Value + if tag != seqTag && tag != mapTag { + if len(value) > 10 { + value = " `" + value[:7] + "...`" + } else { + value = " `" + value + "`" + } + } + d.terrors = append(d.terrors, fmt.Sprintf("line %d: cannot unmarshal %s%s into %s", n.Line, shortTag(tag), value, out.Type())) +} + +func (d *decoder) callUnmarshaler(n *Node, u Unmarshaler) (good bool) { + err := u.UnmarshalYAML(n) + if e, ok := err.(*TypeError); ok { + d.terrors = append(d.terrors, e.Errors...) + return false + } + if err != nil { + fail(err) + } + return true +} + +func (d *decoder) callObsoleteUnmarshaler(n *Node, u obsoleteUnmarshaler) (good bool) { + terrlen := len(d.terrors) + err := u.UnmarshalYAML(func(v interface{}) (err error) { + defer handleErr(&err) + d.unmarshal(n, reflect.ValueOf(v)) + if len(d.terrors) > terrlen { + issues := d.terrors[terrlen:] + d.terrors = d.terrors[:terrlen] + return &TypeError{issues} + } + return nil + }) + if e, ok := err.(*TypeError); ok { + d.terrors = append(d.terrors, e.Errors...) + return false + } + if err != nil { + fail(err) + } + return true +} + +// d.prepare initializes and dereferences pointers and calls UnmarshalYAML +// if a value is found to implement it. +// It returns the initialized and dereferenced out value, whether +// unmarshalling was already done by UnmarshalYAML, and if so whether +// its types unmarshalled appropriately. +// +// If n holds a null value, prepare returns before doing anything. +func (d *decoder) prepare(n *Node, out reflect.Value) (newout reflect.Value, unmarshaled, good bool) { + if n.ShortTag() == nullTag { + return out, false, false + } + again := true + for again { + again = false + if out.Kind() == reflect.Ptr { + if out.IsNil() { + out.Set(reflect.New(out.Type().Elem())) + } + out = out.Elem() + again = true + } + if out.CanAddr() { + outi := out.Addr().Interface() + if u, ok := outi.(Unmarshaler); ok { + good = d.callUnmarshaler(n, u) + return out, true, good + } + if u, ok := outi.(obsoleteUnmarshaler); ok { + good = d.callObsoleteUnmarshaler(n, u) + return out, true, good + } + } + } + return out, false, false +} + +func (d *decoder) fieldByIndex(n *Node, v reflect.Value, index []int) (field reflect.Value) { + if n.ShortTag() == nullTag { + return reflect.Value{} + } + for _, num := range index { + for { + if v.Kind() == reflect.Ptr { + if v.IsNil() { + v.Set(reflect.New(v.Type().Elem())) + } + v = v.Elem() + continue + } + break + } + v = v.Field(num) + } + return v +} + +const ( + // 400,000 decode operations is ~500kb of dense object declarations, or + // ~5kb of dense object declarations with 10000% alias expansion + alias_ratio_range_low = 400000 + + // 4,000,000 decode operations is ~5MB of dense object declarations, or + // ~4.5MB of dense object declarations with 10% alias expansion + alias_ratio_range_high = 4000000 + + // alias_ratio_range is the range over which we scale allowed alias ratios + alias_ratio_range = float64(alias_ratio_range_high - alias_ratio_range_low) +) + +func allowedAliasRatio(decodeCount int) float64 { + switch { + case decodeCount <= alias_ratio_range_low: + // allow 99% to come from alias expansion for small-to-medium documents + return 0.99 + case decodeCount >= alias_ratio_range_high: + // allow 10% to come from alias expansion for very large documents + return 0.10 + default: + // scale smoothly from 99% down to 10% over the range. + // this maps to 396,000 - 400,000 allowed alias-driven decodes over the range. + // 400,000 decode operations is ~100MB of allocations in worst-case scenarios (single-item maps). + return 0.99 - 0.89*(float64(decodeCount-alias_ratio_range_low)/alias_ratio_range) + } +} + +func (d *decoder) unmarshal(n *Node, out reflect.Value) (good bool) { + d.decodeCount++ + if d.aliasDepth > 0 { + d.aliasCount++ + } + if d.aliasCount > 100 && d.decodeCount > 1000 && float64(d.aliasCount)/float64(d.decodeCount) > allowedAliasRatio(d.decodeCount) { + failf("document contains excessive aliasing") + } + if out.Type() == nodeType { + out.Set(reflect.ValueOf(n).Elem()) + return true + } + switch n.Kind { + case DocumentNode: + return d.document(n, out) + case AliasNode: + return d.alias(n, out) + } + out, unmarshaled, good := d.prepare(n, out) + if unmarshaled { + return good + } + switch n.Kind { + case ScalarNode: + good = d.scalar(n, out) + case MappingNode: + good = d.mapping(n, out) + case SequenceNode: + good = d.sequence(n, out) + case 0: + if n.IsZero() { + return d.null(out) + } + fallthrough + default: + failf("cannot decode node with unknown kind %d", n.Kind) + } + return good +} + +func (d *decoder) document(n *Node, out reflect.Value) (good bool) { + if len(n.Content) == 1 { + d.doc = n + d.unmarshal(n.Content[0], out) + return true + } + return false +} + +func (d *decoder) alias(n *Node, out reflect.Value) (good bool) { + if d.aliases[n] { + // TODO this could actually be allowed in some circumstances. + failf("anchor '%s' value contains itself", n.Value) + } + d.aliases[n] = true + d.aliasDepth++ + good = d.unmarshal(n.Alias, out) + d.aliasDepth-- + delete(d.aliases, n) + return good +} + +var zeroValue reflect.Value + +func resetMap(out reflect.Value) { + for _, k := range out.MapKeys() { + out.SetMapIndex(k, zeroValue) + } +} + +func (d *decoder) null(out reflect.Value) bool { + if out.CanAddr() { + switch out.Kind() { + case reflect.Interface, reflect.Ptr, reflect.Map, reflect.Slice: + out.Set(reflect.Zero(out.Type())) + return true + } + } + return false +} + +func (d *decoder) scalar(n *Node, out reflect.Value) bool { + var tag string + var resolved interface{} + if n.indicatedString() { + tag = strTag + resolved = n.Value + } else { + tag, resolved = resolve(n.Tag, n.Value) + if tag == binaryTag { + data, err := base64.StdEncoding.DecodeString(resolved.(string)) + if err != nil { + failf("!!binary value contains invalid base64 data") + } + resolved = string(data) + } + } + if resolved == nil { + return d.null(out) + } + if resolvedv := reflect.ValueOf(resolved); out.Type() == resolvedv.Type() { + // We've resolved to exactly the type we want, so use that. + out.Set(resolvedv) + return true + } + // Perhaps we can use the value as a TextUnmarshaler to + // set its value. + if out.CanAddr() { + u, ok := out.Addr().Interface().(encoding.TextUnmarshaler) + if ok { + var text []byte + if tag == binaryTag { + text = []byte(resolved.(string)) + } else { + // We let any value be unmarshaled into TextUnmarshaler. + // That might be more lax than we'd like, but the + // TextUnmarshaler itself should bowl out any dubious values. + text = []byte(n.Value) + } + err := u.UnmarshalText(text) + if err != nil { + fail(err) + } + return true + } + } + switch out.Kind() { + case reflect.String: + if tag == binaryTag { + out.SetString(resolved.(string)) + return true + } + out.SetString(n.Value) + return true + case reflect.Interface: + out.Set(reflect.ValueOf(resolved)) + return true + case reflect.Int, reflect.Int8, reflect.Int16, reflect.Int32, reflect.Int64: + // This used to work in v2, but it's very unfriendly. + isDuration := out.Type() == durationType + + switch resolved := resolved.(type) { + case int: + if !isDuration && !out.OverflowInt(int64(resolved)) { + out.SetInt(int64(resolved)) + return true + } + case int64: + if !isDuration && !out.OverflowInt(resolved) { + out.SetInt(resolved) + return true + } + case uint64: + if !isDuration && resolved <= math.MaxInt64 && !out.OverflowInt(int64(resolved)) { + out.SetInt(int64(resolved)) + return true + } + case float64: + if !isDuration && resolved <= math.MaxInt64 && !out.OverflowInt(int64(resolved)) { + out.SetInt(int64(resolved)) + return true + } + case string: + if out.Type() == durationType { + d, err := time.ParseDuration(resolved) + if err == nil { + out.SetInt(int64(d)) + return true + } + } + } + case reflect.Uint, reflect.Uint8, reflect.Uint16, reflect.Uint32, reflect.Uint64, reflect.Uintptr: + switch resolved := resolved.(type) { + case int: + if resolved >= 0 && !out.OverflowUint(uint64(resolved)) { + out.SetUint(uint64(resolved)) + return true + } + case int64: + if resolved >= 0 && !out.OverflowUint(uint64(resolved)) { + out.SetUint(uint64(resolved)) + return true + } + case uint64: + if !out.OverflowUint(uint64(resolved)) { + out.SetUint(uint64(resolved)) + return true + } + case float64: + if resolved <= math.MaxUint64 && !out.OverflowUint(uint64(resolved)) { + out.SetUint(uint64(resolved)) + return true + } + } + case reflect.Bool: + switch resolved := resolved.(type) { + case bool: + out.SetBool(resolved) + return true + case string: + // This offers some compatibility with the 1.1 spec (https://yaml.org/type/bool.html). + // It only works if explicitly attempting to unmarshal into a typed bool value. + switch resolved { + case "y", "Y", "yes", "Yes", "YES", "on", "On", "ON": + out.SetBool(true) + return true + case "n", "N", "no", "No", "NO", "off", "Off", "OFF": + out.SetBool(false) + return true + } + } + case reflect.Float32, reflect.Float64: + switch resolved := resolved.(type) { + case int: + out.SetFloat(float64(resolved)) + return true + case int64: + out.SetFloat(float64(resolved)) + return true + case uint64: + out.SetFloat(float64(resolved)) + return true + case float64: + out.SetFloat(resolved) + return true + } + case reflect.Struct: + if resolvedv := reflect.ValueOf(resolved); out.Type() == resolvedv.Type() { + out.Set(resolvedv) + return true + } + case reflect.Ptr: + panic("yaml internal error: please report the issue") + } + d.terror(n, tag, out) + return false +} + +func settableValueOf(i interface{}) reflect.Value { + v := reflect.ValueOf(i) + sv := reflect.New(v.Type()).Elem() + sv.Set(v) + return sv +} + +func (d *decoder) sequence(n *Node, out reflect.Value) (good bool) { + l := len(n.Content) + + var iface reflect.Value + switch out.Kind() { + case reflect.Slice: + out.Set(reflect.MakeSlice(out.Type(), l, l)) + case reflect.Array: + if l != out.Len() { + failf("invalid array: want %d elements but got %d", out.Len(), l) + } + case reflect.Interface: + // No type hints. Will have to use a generic sequence. + iface = out + out = settableValueOf(make([]interface{}, l)) + default: + d.terror(n, seqTag, out) + return false + } + et := out.Type().Elem() + + j := 0 + for i := 0; i < l; i++ { + e := reflect.New(et).Elem() + if ok := d.unmarshal(n.Content[i], e); ok { + out.Index(j).Set(e) + j++ + } + } + if out.Kind() != reflect.Array { + out.Set(out.Slice(0, j)) + } + if iface.IsValid() { + iface.Set(out) + } + return true +} + +func (d *decoder) mapping(n *Node, out reflect.Value) (good bool) { + l := len(n.Content) + if d.uniqueKeys { + nerrs := len(d.terrors) + for i := 0; i < l; i += 2 { + ni := n.Content[i] + for j := i + 2; j < l; j += 2 { + nj := n.Content[j] + if ni.Kind == nj.Kind && ni.Value == nj.Value { + d.terrors = append(d.terrors, fmt.Sprintf("line %d: mapping key %#v already defined at line %d", nj.Line, nj.Value, ni.Line)) + } + } + } + if len(d.terrors) > nerrs { + return false + } + } + switch out.Kind() { + case reflect.Struct: + return d.mappingStruct(n, out) + case reflect.Map: + // okay + case reflect.Interface: + iface := out + if isStringMap(n) { + out = reflect.MakeMap(d.stringMapType) + } else { + out = reflect.MakeMap(d.generalMapType) + } + iface.Set(out) + default: + d.terror(n, mapTag, out) + return false + } + + outt := out.Type() + kt := outt.Key() + et := outt.Elem() + + stringMapType := d.stringMapType + generalMapType := d.generalMapType + if outt.Elem() == ifaceType { + if outt.Key().Kind() == reflect.String { + d.stringMapType = outt + } else if outt.Key() == ifaceType { + d.generalMapType = outt + } + } + + mapIsNew := false + if out.IsNil() { + out.Set(reflect.MakeMap(outt)) + mapIsNew = true + } + for i := 0; i < l; i += 2 { + if isMerge(n.Content[i]) { + d.merge(n.Content[i+1], out) + continue + } + k := reflect.New(kt).Elem() + if d.unmarshal(n.Content[i], k) { + kkind := k.Kind() + if kkind == reflect.Interface { + kkind = k.Elem().Kind() + } + if kkind == reflect.Map || kkind == reflect.Slice { + failf("invalid map key: %#v", k.Interface()) + } + e := reflect.New(et).Elem() + if d.unmarshal(n.Content[i+1], e) || n.Content[i+1].ShortTag() == nullTag && (mapIsNew || !out.MapIndex(k).IsValid()) { + out.SetMapIndex(k, e) + } + } + } + d.stringMapType = stringMapType + d.generalMapType = generalMapType + return true +} + +func isStringMap(n *Node) bool { + if n.Kind != MappingNode { + return false + } + l := len(n.Content) + for i := 0; i < l; i += 2 { + if n.Content[i].ShortTag() != strTag { + return false + } + } + return true +} + +func (d *decoder) mappingStruct(n *Node, out reflect.Value) (good bool) { + sinfo, err := getStructInfo(out.Type()) + if err != nil { + panic(err) + } + + var inlineMap reflect.Value + var elemType reflect.Type + if sinfo.InlineMap != -1 { + inlineMap = out.Field(sinfo.InlineMap) + inlineMap.Set(reflect.New(inlineMap.Type()).Elem()) + elemType = inlineMap.Type().Elem() + } + + for _, index := range sinfo.InlineUnmarshalers { + field := d.fieldByIndex(n, out, index) + d.prepare(n, field) + } + + var doneFields []bool + if d.uniqueKeys { + doneFields = make([]bool, len(sinfo.FieldsList)) + } + name := settableValueOf("") + l := len(n.Content) + for i := 0; i < l; i += 2 { + ni := n.Content[i] + if isMerge(ni) { + d.merge(n.Content[i+1], out) + continue + } + if !d.unmarshal(ni, name) { + continue + } + if info, ok := sinfo.FieldsMap[name.String()]; ok { + if d.uniqueKeys { + if doneFields[info.Id] { + d.terrors = append(d.terrors, fmt.Sprintf("line %d: field %s already set in type %s", ni.Line, name.String(), out.Type())) + continue + } + doneFields[info.Id] = true + } + var field reflect.Value + if info.Inline == nil { + field = out.Field(info.Num) + } else { + field = d.fieldByIndex(n, out, info.Inline) + } + d.unmarshal(n.Content[i+1], field) + } else if sinfo.InlineMap != -1 { + if inlineMap.IsNil() { + inlineMap.Set(reflect.MakeMap(inlineMap.Type())) + } + value := reflect.New(elemType).Elem() + d.unmarshal(n.Content[i+1], value) + inlineMap.SetMapIndex(name, value) + } else if d.knownFields { + d.terrors = append(d.terrors, fmt.Sprintf("line %d: field %s not found in type %s", ni.Line, name.String(), out.Type())) + } + } + return true +} + +func failWantMap() { + failf("map merge requires map or sequence of maps as the value") +} + +func (d *decoder) merge(n *Node, out reflect.Value) { + switch n.Kind { + case MappingNode: + d.unmarshal(n, out) + case AliasNode: + if n.Alias != nil && n.Alias.Kind != MappingNode { + failWantMap() + } + d.unmarshal(n, out) + case SequenceNode: + // Step backwards as earlier nodes take precedence. + for i := len(n.Content) - 1; i >= 0; i-- { + ni := n.Content[i] + if ni.Kind == AliasNode { + if ni.Alias != nil && ni.Alias.Kind != MappingNode { + failWantMap() + } + } else if ni.Kind != MappingNode { + failWantMap() + } + d.unmarshal(ni, out) + } + default: + failWantMap() + } +} + +func isMerge(n *Node) bool { + return n.Kind == ScalarNode && n.Value == "<<" && (n.Tag == "" || n.Tag == "!" || shortTag(n.Tag) == mergeTag) +} diff --git a/go/internal/forked/kyaml/internal/forked/github.com/go-yaml/yaml/decode_test.go b/go/internal/forked/kyaml/internal/forked/github.com/go-yaml/yaml/decode_test.go new file mode 100644 index 000000000..9fc07b321 --- /dev/null +++ b/go/internal/forked/kyaml/internal/forked/github.com/go-yaml/yaml/decode_test.go @@ -0,0 +1,1675 @@ +// +// Copyright (c) 2011-2019 Canonical Ltd +// +// Licensed under the Apache License, Version 2.0 (the "License"); +// you may not use this file except in compliance with the License. +// You may obtain a copy of the License at +// +// http://www.apache.org/licenses/LICENSE-2.0 +// +// Unless required by applicable law or agreed to in writing, software +// distributed under the License is distributed on an "AS IS" BASIS, +// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. +// See the License for the specific language governing permissions and +// limitations under the License. + +package yaml_test + +import ( + "bytes" + "errors" + "fmt" + "io" + "math" + "reflect" + "strings" + "time" + + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/internal/forked/github.com/go-yaml/yaml" +) + +var unmarshalIntTest = 123 + +var unmarshalTests = []struct { + data string + value interface{} +}{ + { + "", + (*struct{})(nil), + }, + { + "{}", &struct{}{}, + }, { + "v: hi", + map[string]string{"v": "hi"}, + }, { + "v: hi", map[string]interface{}{"v": "hi"}, + }, { + "v: true", + map[string]string{"v": "true"}, + }, { + "v: true", + map[string]interface{}{"v": true}, + }, { + "v: 10", + map[string]interface{}{"v": 10}, + }, { + "v: 0b10", + map[string]interface{}{"v": 2}, + }, { + "v: 0xA", + map[string]interface{}{"v": 10}, + }, { + "v: 4294967296", + map[string]int64{"v": 4294967296}, + }, { + "v: 0.1", + map[string]interface{}{"v": 0.1}, + }, { + "v: .1", + map[string]interface{}{"v": 0.1}, + }, { + "v: .Inf", + map[string]interface{}{"v": math.Inf(+1)}, + }, { + "v: -.Inf", + map[string]interface{}{"v": math.Inf(-1)}, + }, { + "v: -10", + map[string]interface{}{"v": -10}, + }, { + "v: -.1", + map[string]interface{}{"v": -0.1}, + }, + + // Simple values. + { + "123", + &unmarshalIntTest, + }, + + // Floats from spec + { + "canonical: 6.8523e+5", + map[string]interface{}{"canonical": 6.8523e+5}, + }, { + "expo: 685.230_15e+03", + map[string]interface{}{"expo": 685.23015e+03}, + }, { + "fixed: 685_230.15", + map[string]interface{}{"fixed": 685230.15}, + }, { + "neginf: -.inf", + map[string]interface{}{"neginf": math.Inf(-1)}, + }, { + "fixed: 685_230.15", + map[string]float64{"fixed": 685230.15}, + }, + //{"sexa: 190:20:30.15", map[string]interface{}{"sexa": 0}}, // Unsupported + //{"notanum: .NaN", map[string]interface{}{"notanum": math.NaN()}}, // Equality of NaN fails. + + // Bools are per 1.2 spec. + { + "canonical: true", + map[string]interface{}{"canonical": true}, + }, { + "canonical: false", + map[string]interface{}{"canonical": false}, + }, { + "bool: True", + map[string]interface{}{"bool": true}, + }, { + "bool: False", + map[string]interface{}{"bool": false}, + }, { + "bool: TRUE", + map[string]interface{}{"bool": true}, + }, { + "bool: FALSE", + map[string]interface{}{"bool": false}, + }, + // For backwards compatibility with 1.1, decoding old strings into typed values still works. + { + "option: on", + map[string]bool{"option": true}, + }, { + "option: y", + map[string]bool{"option": true}, + }, { + "option: Off", + map[string]bool{"option": false}, + }, { + "option: No", + map[string]bool{"option": false}, + }, { + "option: other", + map[string]bool{}, + }, + // Ints from spec + { + "canonical: 685230", + map[string]interface{}{"canonical": 685230}, + }, { + "decimal: +685_230", + map[string]interface{}{"decimal": 685230}, + }, { + "octal: 02472256", + map[string]interface{}{"octal": 685230}, + }, { + "octal: -02472256", + map[string]interface{}{"octal": -685230}, + }, { + "octal: 0o2472256", + map[string]interface{}{"octal": 685230}, + }, { + "octal: -0o2472256", + map[string]interface{}{"octal": -685230}, + }, { + "hexa: 0x_0A_74_AE", + map[string]interface{}{"hexa": 685230}, + }, { + "bin: 0b1010_0111_0100_1010_1110", + map[string]interface{}{"bin": 685230}, + }, { + "bin: -0b101010", + map[string]interface{}{"bin": -42}, + }, { + "bin: -0b1000000000000000000000000000000000000000000000000000000000000000", + map[string]interface{}{"bin": -9223372036854775808}, + }, { + "decimal: +685_230", + map[string]int{"decimal": 685230}, + }, + + //{"sexa: 190:20:30", map[string]interface{}{"sexa": 0}}, // Unsupported + + // Nulls from spec + { + "empty:", + map[string]interface{}{"empty": nil}, + }, { + "canonical: ~", + map[string]interface{}{"canonical": nil}, + }, { + "english: null", + map[string]interface{}{"english": nil}, + }, { + "~: null key", + map[interface{}]string{nil: "null key"}, + }, { + "empty:", + map[string]*bool{"empty": nil}, + }, + + // Flow sequence + { + "seq: [A,B]", + map[string]interface{}{"seq": []interface{}{"A", "B"}}, + }, { + "seq: [A,B,C,]", + map[string][]string{"seq": []string{"A", "B", "C"}}, + }, { + "seq: [A,1,C]", + map[string][]string{"seq": []string{"A", "1", "C"}}, + }, { + "seq: [A,1,C]", + map[string][]int{"seq": []int{1}}, + }, { + "seq: [A,1,C]", + map[string]interface{}{"seq": []interface{}{"A", 1, "C"}}, + }, + // Block sequence + { + "seq:\n - A\n - B", + map[string]interface{}{"seq": []interface{}{"A", "B"}}, + }, { + "seq:\n - A\n - B\n - C", + map[string][]string{"seq": []string{"A", "B", "C"}}, + }, { + "seq:\n - A\n - 1\n - C", + map[string][]string{"seq": []string{"A", "1", "C"}}, + }, { + "seq:\n - A\n - 1\n - C", + map[string][]int{"seq": []int{1}}, + }, { + "seq:\n - A\n - 1\n - C", + map[string]interface{}{"seq": []interface{}{"A", 1, "C"}}, + }, + + // Literal block scalar + { + "scalar: | # Comment\n\n literal\n\n \ttext\n\n", + map[string]string{"scalar": "\nliteral\n\n\ttext\n"}, + }, + + // Folded block scalar + { + "scalar: > # Comment\n\n folded\n line\n \n next\n line\n * one\n * two\n\n last\n line\n\n", + map[string]string{"scalar": "\nfolded line\nnext line\n * one\n * two\n\nlast line\n"}, + }, + + // Map inside interface with no type hints. + { + "a: {b: c}", + map[interface{}]interface{}{"a": map[string]interface{}{"b": "c"}}, + }, + // Non-string map inside interface with no type hints. + { + "a: {b: c, 1: d}", + map[interface{}]interface{}{"a": map[interface{}]interface{}{"b": "c", 1: "d"}}, + }, + + // Structs and type conversions. + { + "hello: world", + &struct{ Hello string }{"world"}, + }, { + "a: {b: c}", + &struct{ A struct{ B string } }{struct{ B string }{"c"}}, + }, { + "a: {b: c}", + &struct{ A *struct{ B string } }{&struct{ B string }{"c"}}, + }, { + "a: 'null'", + &struct{ A *unmarshalerType }{&unmarshalerType{"null"}}, + }, { + "a: {b: c}", + &struct{ A map[string]string }{map[string]string{"b": "c"}}, + }, { + "a: {b: c}", + &struct{ A *map[string]string }{&map[string]string{"b": "c"}}, + }, { + "a:", + &struct{ A map[string]string }{}, + }, { + "a: 1", + &struct{ A int }{1}, + }, { + "a: 1", + &struct{ A float64 }{1}, + }, { + "a: 1.0", + &struct{ A int }{1}, + }, { + "a: 1.0", + &struct{ A uint }{1}, + }, { + "a: [1, 2]", + &struct{ A []int }{[]int{1, 2}}, + }, { + "a: [1, 2]", + &struct{ A [2]int }{[2]int{1, 2}}, + }, { + "a: 1", + &struct{ B int }{0}, + }, { + "a: 1", + &struct { + B int "a" + }{1}, + }, { + // Some limited backwards compatibility with the 1.1 spec. + "a: YES", + &struct{ A bool }{true}, + }, + + // Some cross type conversions + { + "v: 42", + map[string]uint{"v": 42}, + }, { + "v: -42", + map[string]uint{}, + }, { + "v: 4294967296", + map[string]uint64{"v": 4294967296}, + }, { + "v: -4294967296", + map[string]uint64{}, + }, + + // int + { + "int_max: 2147483647", + map[string]int{"int_max": math.MaxInt32}, + }, + { + "int_min: -2147483648", + map[string]int{"int_min": math.MinInt32}, + }, + { + "int_overflow: 9223372036854775808", // math.MaxInt64 + 1 + map[string]int{}, + }, + + // int64 + { + "int64_max: 9223372036854775807", + map[string]int64{"int64_max": math.MaxInt64}, + }, + { + "int64_max_base2: 0b111111111111111111111111111111111111111111111111111111111111111", + map[string]int64{"int64_max_base2": math.MaxInt64}, + }, + { + "int64_min: -9223372036854775808", + map[string]int64{"int64_min": math.MinInt64}, + }, + { + "int64_neg_base2: -0b111111111111111111111111111111111111111111111111111111111111111", + map[string]int64{"int64_neg_base2": -math.MaxInt64}, + }, + { + "int64_overflow: 9223372036854775808", // math.MaxInt64 + 1 + map[string]int64{}, + }, + + // uint + { + "uint_min: 0", + map[string]uint{"uint_min": 0}, + }, + { + "uint_max: 4294967295", + map[string]uint{"uint_max": math.MaxUint32}, + }, + { + "uint_underflow: -1", + map[string]uint{}, + }, + + // uint64 + { + "uint64_min: 0", + map[string]uint{"uint64_min": 0}, + }, + { + "uint64_max: 18446744073709551615", + map[string]uint64{"uint64_max": math.MaxUint64}, + }, + { + "uint64_max_base2: 0b1111111111111111111111111111111111111111111111111111111111111111", + map[string]uint64{"uint64_max_base2": math.MaxUint64}, + }, + { + "uint64_maxint64: 9223372036854775807", + map[string]uint64{"uint64_maxint64": math.MaxInt64}, + }, + { + "uint64_underflow: -1", + map[string]uint64{}, + }, + + // float32 + { + "float32_max: 3.40282346638528859811704183484516925440e+38", + map[string]float32{"float32_max": math.MaxFloat32}, + }, + { + "float32_nonzero: 1.401298464324817070923729583289916131280e-45", + map[string]float32{"float32_nonzero": math.SmallestNonzeroFloat32}, + }, + { + "float32_maxuint64: 18446744073709551615", + map[string]float32{"float32_maxuint64": float32(math.MaxUint64)}, + }, + { + "float32_maxuint64+1: 18446744073709551616", + map[string]float32{"float32_maxuint64+1": float32(math.MaxUint64 + 1)}, + }, + + // float64 + { + "float64_max: 1.797693134862315708145274237317043567981e+308", + map[string]float64{"float64_max": math.MaxFloat64}, + }, + { + "float64_nonzero: 4.940656458412465441765687928682213723651e-324", + map[string]float64{"float64_nonzero": math.SmallestNonzeroFloat64}, + }, + { + "float64_maxuint64: 18446744073709551615", + map[string]float64{"float64_maxuint64": float64(math.MaxUint64)}, + }, + { + "float64_maxuint64+1: 18446744073709551616", + map[string]float64{"float64_maxuint64+1": float64(math.MaxUint64 + 1)}, + }, + + // Overflow cases. + { + "v: 4294967297", + map[string]int32{}, + }, { + "v: 128", + map[string]int8{}, + }, + + // Quoted values. + { + "'1': '\"2\"'", + map[interface{}]interface{}{"1": "\"2\""}, + }, { + "v:\n- A\n- 'B\n\n C'\n", + map[string][]string{"v": []string{"A", "B\nC"}}, + }, + + // Explicit tags. + { + "v: !!float '1.1'", + map[string]interface{}{"v": 1.1}, + }, { + "v: !!float 0", + map[string]interface{}{"v": float64(0)}, + }, { + "v: !!float -1", + map[string]interface{}{"v": float64(-1)}, + }, { + "v: !!null ''", + map[string]interface{}{"v": nil}, + }, { + "%TAG !y! tag:yaml.org,2002:\n---\nv: !y!int '1'", + map[string]interface{}{"v": 1}, + }, + + // Non-specific tag (Issue #75) + { + "v: ! test", + map[string]interface{}{"v": "test"}, + }, + + // Anchors and aliases. + { + "a: &x 1\nb: &y 2\nc: *x\nd: *y\n", + &struct{ A, B, C, D int }{1, 2, 1, 2}, + }, { + "a: &a {c: 1}\nb: *a", + &struct { + A, B struct { + C int + } + }{struct{ C int }{1}, struct{ C int }{1}}, + }, { + "a: &a [1, 2]\nb: *a", + &struct{ B []int }{[]int{1, 2}}, + }, + + // Bug #1133337 + { + "foo: ''", + map[string]*string{"foo": new(string)}, + }, { + "foo: null", + map[string]*string{"foo": nil}, + }, { + "foo: null", + map[string]string{"foo": ""}, + }, { + "foo: null", + map[string]interface{}{"foo": nil}, + }, + + // Support for ~ + { + "foo: ~", + map[string]*string{"foo": nil}, + }, { + "foo: ~", + map[string]string{"foo": ""}, + }, { + "foo: ~", + map[string]interface{}{"foo": nil}, + }, + + // Ignored field + { + "a: 1\nb: 2\n", + &struct { + A int + B int "-" + }{1, 0}, + }, + + // Bug #1191981 + { + "" + + "%YAML 1.1\n" + + "--- !!str\n" + + `"Generic line break (no glyph)\n\` + "\n" + + ` Generic line break (glyphed)\n\` + "\n" + + ` Line separator\u2028\` + "\n" + + ` Paragraph separator\u2029"` + "\n", + "" + + "Generic line break (no glyph)\n" + + "Generic line break (glyphed)\n" + + "Line separator\u2028Paragraph separator\u2029", + }, + + // Struct inlining + { + "a: 1\nb: 2\nc: 3\n", + &struct { + A int + C inlineB `yaml:",inline"` + }{1, inlineB{2, inlineC{3}}}, + }, + + // Struct inlining as a pointer. + { + "a: 1\nb: 2\nc: 3\n", + &struct { + A int + C *inlineB `yaml:",inline"` + }{1, &inlineB{2, inlineC{3}}}, + }, { + "a: 1\n", + &struct { + A int + C *inlineB `yaml:",inline"` + }{1, nil}, + }, { + "a: 1\nc: 3\nd: 4\n", + &struct { + A int + C *inlineD `yaml:",inline"` + }{1, &inlineD{&inlineC{3}, 4}}, + }, + + // Map inlining + { + "a: 1\nb: 2\nc: 3\n", + &struct { + A int + C map[string]int `yaml:",inline"` + }{1, map[string]int{"b": 2, "c": 3}}, + }, + + // bug 1243827 + { + "a: -b_c", + map[string]interface{}{"a": "-b_c"}, + }, + { + "a: +b_c", + map[string]interface{}{"a": "+b_c"}, + }, + { + "a: 50cent_of_dollar", + map[string]interface{}{"a": "50cent_of_dollar"}, + }, + + // issue #295 (allow scalars with colons in flow mappings and sequences) + { + "a: {b: https://github.com/go-yaml/yaml}", + map[string]interface{}{"a": map[string]interface{}{ + "b": "https://github.com/go-yaml/yaml", + }}, + }, + { + "a: [https://github.com/go-yaml/yaml]", + map[string]interface{}{"a": []interface{}{"https://github.com/go-yaml/yaml"}}, + }, + + // Duration + { + "a: 3s", + map[string]time.Duration{"a": 3 * time.Second}, + }, + + // Issue #24. + { + "a: ", + map[string]string{"a": ""}, + }, + + // Base 60 floats are obsolete and unsupported. + { + "a: 1:1\n", + map[string]string{"a": "1:1"}, + }, + + // Binary data. + { + "a: !!binary gIGC\n", + map[string]string{"a": "\x80\x81\x82"}, + }, { + "a: !!binary |\n " + strings.Repeat("kJCQ", 17) + "kJ\n CQ\n", + map[string]string{"a": strings.Repeat("\x90", 54)}, + }, { + "a: !!binary |\n " + strings.Repeat("A", 70) + "\n ==\n", + map[string]string{"a": strings.Repeat("\x00", 52)}, + }, + + // Issue #39. + { + "a:\n b:\n c: d\n", + map[string]struct{ B interface{} }{"a": {map[string]interface{}{"c": "d"}}}, + }, + + // Custom map type. + { + "a: {b: c}", + M{"a": M{"b": "c"}}, + }, + + // Support encoding.TextUnmarshaler. + { + "a: 1.2.3.4\n", + map[string]textUnmarshaler{"a": textUnmarshaler{S: "1.2.3.4"}}, + }, + { + "a: 2015-02-24T18:19:39Z\n", + map[string]textUnmarshaler{"a": textUnmarshaler{"2015-02-24T18:19:39Z"}}, + }, + + // Timestamps + { + // Date only. + "a: 2015-01-01\n", + map[string]time.Time{"a": time.Date(2015, 1, 1, 0, 0, 0, 0, time.UTC)}, + }, + { + // RFC3339 + "a: 2015-02-24T18:19:39.12Z\n", + map[string]time.Time{"a": time.Date(2015, 2, 24, 18, 19, 39, .12e9, time.UTC)}, + }, + { + // RFC3339 with short dates. + "a: 2015-2-3T3:4:5Z", + map[string]time.Time{"a": time.Date(2015, 2, 3, 3, 4, 5, 0, time.UTC)}, + }, + { + // ISO8601 lower case t + "a: 2015-02-24t18:19:39Z\n", + map[string]time.Time{"a": time.Date(2015, 2, 24, 18, 19, 39, 0, time.UTC)}, + }, + { + // space separate, no time zone + "a: 2015-02-24 18:19:39\n", + map[string]time.Time{"a": time.Date(2015, 2, 24, 18, 19, 39, 0, time.UTC)}, + }, + // Some cases not currently handled. Uncomment these when + // the code is fixed. + // { + // // space separated with time zone + // "a: 2001-12-14 21:59:43.10 -5", + // map[string]interface{}{"a": time.Date(2001, 12, 14, 21, 59, 43, .1e9, time.UTC)}, + // }, + // { + // // arbitrary whitespace between fields + // "a: 2001-12-14 \t\t \t21:59:43.10 \t Z", + // map[string]interface{}{"a": time.Date(2001, 12, 14, 21, 59, 43, .1e9, time.UTC)}, + // }, + { + // explicit string tag + "a: !!str 2015-01-01", + map[string]interface{}{"a": "2015-01-01"}, + }, + { + // explicit timestamp tag on quoted string + "a: !!timestamp \"2015-01-01\"", + map[string]time.Time{"a": time.Date(2015, 1, 1, 0, 0, 0, 0, time.UTC)}, + }, + { + // explicit timestamp tag on unquoted string + "a: !!timestamp 2015-01-01", + map[string]time.Time{"a": time.Date(2015, 1, 1, 0, 0, 0, 0, time.UTC)}, + }, + { + // quoted string that's a valid timestamp + "a: \"2015-01-01\"", + map[string]interface{}{"a": "2015-01-01"}, + }, + { + // explicit timestamp tag into interface. + "a: !!timestamp \"2015-01-01\"", + map[string]interface{}{"a": time.Date(2015, 1, 1, 0, 0, 0, 0, time.UTC)}, + }, + { + // implicit timestamp tag into interface. + "a: 2015-01-01", + map[string]interface{}{"a": time.Date(2015, 1, 1, 0, 0, 0, 0, time.UTC)}, + }, + + // Encode empty lists as zero-length slices. + { + "a: []", + &struct{ A []int }{[]int{}}, + }, + + // UTF-16-LE + { + "\xff\xfe\xf1\x00o\x00\xf1\x00o\x00:\x00 \x00v\x00e\x00r\x00y\x00 \x00y\x00e\x00s\x00\n\x00", + M{"ñoño": "very yes"}, + }, + // UTF-16-LE with surrogate. + { + "\xff\xfe\xf1\x00o\x00\xf1\x00o\x00:\x00 \x00v\x00e\x00r\x00y\x00 \x00y\x00e\x00s\x00 \x00=\xd8\xd4\xdf\n\x00", + M{"ñoño": "very yes 🟔"}, + }, + + // UTF-16-BE + { + "\xfe\xff\x00\xf1\x00o\x00\xf1\x00o\x00:\x00 \x00v\x00e\x00r\x00y\x00 \x00y\x00e\x00s\x00\n", + M{"ñoño": "very yes"}, + }, + // UTF-16-BE with surrogate. + { + "\xfe\xff\x00\xf1\x00o\x00\xf1\x00o\x00:\x00 \x00v\x00e\x00r\x00y\x00 \x00y\x00e\x00s\x00 \xd8=\xdf\xd4\x00\n", + M{"ñoño": "very yes 🟔"}, + }, + + // This *is* in fact a float number, per the spec. #171 was a mistake. + { + "a: 123456e1\n", + M{"a": 123456e1}, + }, { + "a: 123456E1\n", + M{"a": 123456e1}, + }, + // yaml-test-suite 3GZX: Spec Example 7.1. Alias Nodes + { + "First occurrence: &anchor Foo\nSecond occurrence: *anchor\nOverride anchor: &anchor Bar\nReuse anchor: *anchor\n", + map[string]interface{}{ + "First occurrence": "Foo", + "Second occurrence": "Foo", + "Override anchor": "Bar", + "Reuse anchor": "Bar", + }, + }, + // Single document with garbage following it. + { + "---\nhello\n...\n}not yaml", + "hello", + }, + + // Comment scan exhausting the input buffer (issue #469). + { + "true\n#" + strings.Repeat(" ", 512*3), + "true", + }, { + "true #" + strings.Repeat(" ", 512*3), + "true", + }, + + // CRLF + { + "a: b\r\nc:\r\n- d\r\n- e\r\n", + map[string]interface{}{ + "a": "b", + "c": []interface{}{"d", "e"}, + }, + }, +} + +type M map[string]interface{} + +type inlineB struct { + B int + inlineC `yaml:",inline"` +} + +type inlineC struct { + C int +} + +type inlineD struct { + C *inlineC `yaml:",inline"` + D int +} + +func (s *S) TestUnmarshal(c *C) { + for i, item := range unmarshalTests { + c.Logf("test %d: %q", i, item.data) + t := reflect.ValueOf(item.value).Type() + value := reflect.New(t) + err := yaml.Unmarshal([]byte(item.data), value.Interface()) + if _, ok := err.(*yaml.TypeError); !ok { + c.Assert(err, IsNil) + } + c.Assert(value.Elem().Interface(), DeepEquals, item.value, Commentf("error: %v", err)) + } +} + +func (s *S) TestUnmarshalFullTimestamp(c *C) { + // Full timestamp in same format as encoded. This is confirmed to be + // properly decoded by Python as a timestamp as well. + var str = "2015-02-24T18:19:39.123456789-03:00" + var t interface{} + err := yaml.Unmarshal([]byte(str), &t) + c.Assert(err, IsNil) + c.Assert(t, Equals, time.Date(2015, 2, 24, 18, 19, 39, 123456789, t.(time.Time).Location())) + c.Assert(t.(time.Time).In(time.UTC), Equals, time.Date(2015, 2, 24, 21, 19, 39, 123456789, time.UTC)) +} + +func (s *S) TestDecoderSingleDocument(c *C) { + // Test that Decoder.Decode works as expected on + // all the unmarshal tests. + for i, item := range unmarshalTests { + c.Logf("test %d: %q", i, item.data) + if item.data == "" { + // Behaviour differs when there's no YAML. + continue + } + t := reflect.ValueOf(item.value).Type() + value := reflect.New(t) + err := yaml.NewDecoder(strings.NewReader(item.data)).Decode(value.Interface()) + if _, ok := err.(*yaml.TypeError); !ok { + c.Assert(err, IsNil) + } + c.Assert(value.Elem().Interface(), DeepEquals, item.value) + } +} + +var decoderTests = []struct { + data string + values []interface{} +}{{ + "", + nil, +}, { + "a: b", + []interface{}{ + map[string]interface{}{"a": "b"}, + }, +}, { + "---\na: b\n...\n", + []interface{}{ + map[string]interface{}{"a": "b"}, + }, +}, { + "---\n'hello'\n...\n---\ngoodbye\n...\n", + []interface{}{ + "hello", + "goodbye", + }, +}} + +func (s *S) TestDecoder(c *C) { + for i, item := range decoderTests { + c.Logf("test %d: %q", i, item.data) + var values []interface{} + dec := yaml.NewDecoder(strings.NewReader(item.data)) + for { + var value interface{} + err := dec.Decode(&value) + if err == io.EOF { + break + } + c.Assert(err, IsNil) + values = append(values, value) + } + c.Assert(values, DeepEquals, item.values) + } +} + +type errReader struct{} + +func (errReader) Read([]byte) (int, error) { + return 0, errors.New("some read error") +} + +func (s *S) TestDecoderReadError(c *C) { + err := yaml.NewDecoder(errReader{}).Decode(&struct{}{}) + c.Assert(err, ErrorMatches, `yaml: input error: some read error`) +} + +func (s *S) TestUnmarshalNaN(c *C) { + value := map[string]interface{}{} + err := yaml.Unmarshal([]byte("notanum: .NaN"), &value) + c.Assert(err, IsNil) + c.Assert(math.IsNaN(value["notanum"].(float64)), Equals, true) +} + +func (s *S) TestUnmarshalDurationInt(c *C) { + // Don't accept plain ints as durations as it's unclear (issue #200). + var d time.Duration + err := yaml.Unmarshal([]byte("123"), &d) + c.Assert(err, ErrorMatches, "(?s).* line 1: cannot unmarshal !!int `123` into time.Duration") +} + +var unmarshalErrorTests = []struct { + data, error string +}{ + {"v: !!float 'error'", "yaml: cannot decode !!str `error` as a !!float"}, + {"v: [A,", "yaml: line 1: did not find expected node content"}, + {"v:\n- [A,", "yaml: line 2: did not find expected node content"}, + {"a:\n- b: *,", "yaml: line 2: did not find expected alphabetic or numeric character"}, + {"a: *b\n", "yaml: unknown anchor 'b' referenced"}, + {"a: &a\n b: *a\n", "yaml: anchor 'a' value contains itself"}, + {"value: -", "yaml: block sequence entries are not allowed in this context"}, + {"a: !!binary ==", "yaml: !!binary value contains invalid base64 data"}, + {"{[.]}", `yaml: invalid map key: \[\]interface \{\}\{"\."\}`}, + {"{{.}}", `yaml: invalid map key: map\[string]interface \{\}\{".":interface \{\}\(nil\)\}`}, + {"b: *a\na: &a {c: 1}", `yaml: unknown anchor 'a' referenced`}, + {"%TAG !%79! tag:yaml.org,2002:\n---\nv: !%79!int '1'", "yaml: did not find expected whitespace"}, + {"a:\n 1:\nb\n 2:", ".*could not find expected ':'"}, + {"a: 1\nb: 2\nc 2\nd: 3\n", "^yaml: line 3: could not find expected ':'$"}, + { + "a: &a [00,00,00,00,00,00,00,00,00]\n" + + "b: &b [*a,*a,*a,*a,*a,*a,*a,*a,*a]\n" + + "c: &c [*b,*b,*b,*b,*b,*b,*b,*b,*b]\n" + + "d: &d [*c,*c,*c,*c,*c,*c,*c,*c,*c]\n" + + "e: &e [*d,*d,*d,*d,*d,*d,*d,*d,*d]\n" + + "f: &f [*e,*e,*e,*e,*e,*e,*e,*e,*e]\n" + + "g: &g [*f,*f,*f,*f,*f,*f,*f,*f,*f]\n" + + "h: &h [*g,*g,*g,*g,*g,*g,*g,*g,*g]\n" + + "i: &i [*h,*h,*h,*h,*h,*h,*h,*h,*h]\n", + "yaml: document contains excessive aliasing", + }, +} + +func (s *S) TestUnmarshalErrors(c *C) { + for i, item := range unmarshalErrorTests { + c.Logf("test %d: %q", i, item.data) + var value interface{} + err := yaml.Unmarshal([]byte(item.data), &value) + c.Assert(err, ErrorMatches, item.error, Commentf("Partial unmarshal: %#v", value)) + } +} + +func (s *S) TestDecoderErrors(c *C) { + for _, item := range unmarshalErrorTests { + var value interface{} + err := yaml.NewDecoder(strings.NewReader(item.data)).Decode(&value) + c.Assert(err, ErrorMatches, item.error, Commentf("Partial unmarshal: %#v", value)) + } +} + +var unmarshalerTests = []struct { + data, tag string + value interface{} +}{ + {"_: {hi: there}", "!!map", map[string]interface{}{"hi": "there"}}, + {"_: [1,A]", "!!seq", []interface{}{1, "A"}}, + {"_: 10", "!!int", 10}, + {"_: null", "!!null", nil}, + {`_: BAR!`, "!!str", "BAR!"}, + {`_: "BAR!"`, "!!str", "BAR!"}, + {"_: !!foo 'BAR!'", "!!foo", "BAR!"}, + {`_: ""`, "!!str", ""}, +} + +var unmarshalerResult = map[int]error{} + +type unmarshalerType struct { + value interface{} +} + +func (o *unmarshalerType) UnmarshalYAML(value *yaml.Node) error { + if err := value.Decode(&o.value); err != nil { + return err + } + if i, ok := o.value.(int); ok { + if result, ok := unmarshalerResult[i]; ok { + return result + } + } + return nil +} + +type unmarshalerPointer struct { + Field *unmarshalerType "_" +} + +type unmarshalerValue struct { + Field unmarshalerType "_" +} + +type unmarshalerInlined struct { + Field *unmarshalerType "_" + Inlined unmarshalerType `yaml:",inline"` +} + +type unmarshalerInlinedTwice struct { + InlinedTwice unmarshalerInlined `yaml:",inline"` +} + +type obsoleteUnmarshalerType struct { + value interface{} +} + +func (o *obsoleteUnmarshalerType) UnmarshalYAML(unmarshal func(v interface{}) error) error { + if err := unmarshal(&o.value); err != nil { + return err + } + if i, ok := o.value.(int); ok { + if result, ok := unmarshalerResult[i]; ok { + return result + } + } + return nil +} + +type obsoleteUnmarshalerPointer struct { + Field *obsoleteUnmarshalerType "_" +} + +type obsoleteUnmarshalerValue struct { + Field obsoleteUnmarshalerType "_" +} + +func (s *S) TestUnmarshalerPointerField(c *C) { + for _, item := range unmarshalerTests { + obj := &unmarshalerPointer{} + err := yaml.Unmarshal([]byte(item.data), obj) + c.Assert(err, IsNil) + if item.value == nil { + c.Assert(obj.Field, IsNil) + } else { + c.Assert(obj.Field, NotNil, Commentf("Pointer not initialized (%#v)", item.value)) + c.Assert(obj.Field.value, DeepEquals, item.value) + } + } + for _, item := range unmarshalerTests { + obj := &obsoleteUnmarshalerPointer{} + err := yaml.Unmarshal([]byte(item.data), obj) + c.Assert(err, IsNil) + if item.value == nil { + c.Assert(obj.Field, IsNil) + } else { + c.Assert(obj.Field, NotNil, Commentf("Pointer not initialized (%#v)", item.value)) + c.Assert(obj.Field.value, DeepEquals, item.value) + } + } +} + +func (s *S) TestUnmarshalerValueField(c *C) { + for _, item := range unmarshalerTests { + obj := &obsoleteUnmarshalerValue{} + err := yaml.Unmarshal([]byte(item.data), obj) + c.Assert(err, IsNil) + c.Assert(obj.Field, NotNil, Commentf("Pointer not initialized (%#v)", item.value)) + c.Assert(obj.Field.value, DeepEquals, item.value) + } +} + +func (s *S) TestUnmarshalerInlinedField(c *C) { + obj := &unmarshalerInlined{} + err := yaml.Unmarshal([]byte("_: a\ninlined: b\n"), obj) + c.Assert(err, IsNil) + c.Assert(obj.Field, DeepEquals, &unmarshalerType{"a"}) + c.Assert(obj.Inlined, DeepEquals, unmarshalerType{map[string]interface{}{"_": "a", "inlined": "b"}}) + + twc := &unmarshalerInlinedTwice{} + err = yaml.Unmarshal([]byte("_: a\ninlined: b\n"), twc) + c.Assert(err, IsNil) + c.Assert(twc.InlinedTwice.Field, DeepEquals, &unmarshalerType{"a"}) + c.Assert(twc.InlinedTwice.Inlined, DeepEquals, unmarshalerType{map[string]interface{}{"_": "a", "inlined": "b"}}) +} + +func (s *S) TestUnmarshalerWholeDocument(c *C) { + obj := &obsoleteUnmarshalerType{} + err := yaml.Unmarshal([]byte(unmarshalerTests[0].data), obj) + c.Assert(err, IsNil) + value, ok := obj.value.(map[string]interface{}) + c.Assert(ok, Equals, true, Commentf("value: %#v", obj.value)) + c.Assert(value["_"], DeepEquals, unmarshalerTests[0].value) +} + +func (s *S) TestUnmarshalerTypeError(c *C) { + unmarshalerResult[2] = &yaml.TypeError{[]string{"foo"}} + unmarshalerResult[4] = &yaml.TypeError{[]string{"bar"}} + defer func() { + delete(unmarshalerResult, 2) + delete(unmarshalerResult, 4) + }() + + type T struct { + Before int + After int + M map[string]*unmarshalerType + } + var v T + data := `{before: A, m: {abc: 1, def: 2, ghi: 3, jkl: 4}, after: B}` + err := yaml.Unmarshal([]byte(data), &v) + c.Assert(err, ErrorMatches, ""+ + "yaml: unmarshal errors:\n"+ + " line 1: cannot unmarshal !!str `A` into int\n"+ + " foo\n"+ + " bar\n"+ + " line 1: cannot unmarshal !!str `B` into int") + c.Assert(v.M["abc"], NotNil) + c.Assert(v.M["def"], IsNil) + c.Assert(v.M["ghi"], NotNil) + c.Assert(v.M["jkl"], IsNil) + + c.Assert(v.M["abc"].value, Equals, 1) + c.Assert(v.M["ghi"].value, Equals, 3) +} + +func (s *S) TestObsoleteUnmarshalerTypeError(c *C) { + unmarshalerResult[2] = &yaml.TypeError{[]string{"foo"}} + unmarshalerResult[4] = &yaml.TypeError{[]string{"bar"}} + defer func() { + delete(unmarshalerResult, 2) + delete(unmarshalerResult, 4) + }() + + type T struct { + Before int + After int + M map[string]*obsoleteUnmarshalerType + } + var v T + data := `{before: A, m: {abc: 1, def: 2, ghi: 3, jkl: 4}, after: B}` + err := yaml.Unmarshal([]byte(data), &v) + c.Assert(err, ErrorMatches, ""+ + "yaml: unmarshal errors:\n"+ + " line 1: cannot unmarshal !!str `A` into int\n"+ + " foo\n"+ + " bar\n"+ + " line 1: cannot unmarshal !!str `B` into int") + c.Assert(v.M["abc"], NotNil) + c.Assert(v.M["def"], IsNil) + c.Assert(v.M["ghi"], NotNil) + c.Assert(v.M["jkl"], IsNil) + + c.Assert(v.M["abc"].value, Equals, 1) + c.Assert(v.M["ghi"].value, Equals, 3) +} + +type proxyTypeError struct{} + +func (v *proxyTypeError) UnmarshalYAML(node *yaml.Node) error { + var s string + var a int32 + var b int64 + if err := node.Decode(&s); err != nil { + panic(err) + } + if s == "a" { + if err := node.Decode(&b); err == nil { + panic("should have failed") + } + return node.Decode(&a) + } + if err := node.Decode(&a); err == nil { + panic("should have failed") + } + return node.Decode(&b) +} + +func (s *S) TestUnmarshalerTypeErrorProxying(c *C) { + type T struct { + Before int + After int + M map[string]*proxyTypeError + } + var v T + data := `{before: A, m: {abc: a, def: b}, after: B}` + err := yaml.Unmarshal([]byte(data), &v) + c.Assert(err, ErrorMatches, ""+ + "yaml: unmarshal errors:\n"+ + " line 1: cannot unmarshal !!str `A` into int\n"+ + " line 1: cannot unmarshal !!str `a` into int32\n"+ + " line 1: cannot unmarshal !!str `b` into int64\n"+ + " line 1: cannot unmarshal !!str `B` into int") +} + +type obsoleteProxyTypeError struct{} + +func (v *obsoleteProxyTypeError) UnmarshalYAML(unmarshal func(interface{}) error) error { + var s string + var a int32 + var b int64 + if err := unmarshal(&s); err != nil { + panic(err) + } + if s == "a" { + if err := unmarshal(&b); err == nil { + panic("should have failed") + } + return unmarshal(&a) + } + if err := unmarshal(&a); err == nil { + panic("should have failed") + } + return unmarshal(&b) +} + +func (s *S) TestObsoleteUnmarshalerTypeErrorProxying(c *C) { + type T struct { + Before int + After int + M map[string]*obsoleteProxyTypeError + } + var v T + data := `{before: A, m: {abc: a, def: b}, after: B}` + err := yaml.Unmarshal([]byte(data), &v) + c.Assert(err, ErrorMatches, ""+ + "yaml: unmarshal errors:\n"+ + " line 1: cannot unmarshal !!str `A` into int\n"+ + " line 1: cannot unmarshal !!str `a` into int32\n"+ + " line 1: cannot unmarshal !!str `b` into int64\n"+ + " line 1: cannot unmarshal !!str `B` into int") +} + +var failingErr = errors.New("failingErr") + +type failingUnmarshaler struct{} + +func (ft *failingUnmarshaler) UnmarshalYAML(node *yaml.Node) error { + return failingErr +} + +func (s *S) TestUnmarshalerError(c *C) { + err := yaml.Unmarshal([]byte("a: b"), &failingUnmarshaler{}) + c.Assert(err, Equals, failingErr) +} + +type obsoleteFailingUnmarshaler struct{} + +func (ft *obsoleteFailingUnmarshaler) UnmarshalYAML(unmarshal func(interface{}) error) error { + return failingErr +} + +func (s *S) TestObsoleteUnmarshalerError(c *C) { + err := yaml.Unmarshal([]byte("a: b"), &obsoleteFailingUnmarshaler{}) + c.Assert(err, Equals, failingErr) +} + +type sliceUnmarshaler []int + +func (su *sliceUnmarshaler) UnmarshalYAML(node *yaml.Node) error { + var slice []int + err := node.Decode(&slice) + if err == nil { + *su = slice + return nil + } + + var intVal int + err = node.Decode(&intVal) + if err == nil { + *su = []int{intVal} + return nil + } + + return err +} + +func (s *S) TestUnmarshalerRetry(c *C) { + var su sliceUnmarshaler + err := yaml.Unmarshal([]byte("[1, 2, 3]"), &su) + c.Assert(err, IsNil) + c.Assert(su, DeepEquals, sliceUnmarshaler([]int{1, 2, 3})) + + err = yaml.Unmarshal([]byte("1"), &su) + c.Assert(err, IsNil) + c.Assert(su, DeepEquals, sliceUnmarshaler([]int{1})) +} + +type obsoleteSliceUnmarshaler []int + +func (su *obsoleteSliceUnmarshaler) UnmarshalYAML(unmarshal func(interface{}) error) error { + var slice []int + err := unmarshal(&slice) + if err == nil { + *su = slice + return nil + } + + var intVal int + err = unmarshal(&intVal) + if err == nil { + *su = []int{intVal} + return nil + } + + return err +} + +func (s *S) TestObsoleteUnmarshalerRetry(c *C) { + var su obsoleteSliceUnmarshaler + err := yaml.Unmarshal([]byte("[1, 2, 3]"), &su) + c.Assert(err, IsNil) + c.Assert(su, DeepEquals, obsoleteSliceUnmarshaler([]int{1, 2, 3})) + + err = yaml.Unmarshal([]byte("1"), &su) + c.Assert(err, IsNil) + c.Assert(su, DeepEquals, obsoleteSliceUnmarshaler([]int{1})) +} + +// From http://yaml.org/type/merge.html +var mergeTests = ` +anchors: + list: + - &CENTER { "x": 1, "y": 2 } + - &LEFT { "x": 0, "y": 2 } + - &BIG { "r": 10 } + - &SMALL { "r": 1 } + +# All the following maps are equal: + +plain: + # Explicit keys + "x": 1 + "y": 2 + "r": 10 + label: center/big + +mergeOne: + # Merge one map + << : *CENTER + "r": 10 + label: center/big + +mergeMultiple: + # Merge multiple maps + << : [ *CENTER, *BIG ] + label: center/big + +override: + # Override + << : [ *BIG, *LEFT, *SMALL ] + "x": 1 + label: center/big + +shortTag: + # Explicit short merge tag + !!merge "<<" : [ *CENTER, *BIG ] + label: center/big + +longTag: + # Explicit merge long tag + ! "<<" : [ *CENTER, *BIG ] + label: center/big + +inlineMap: + # Inlined map + << : {"x": 1, "y": 2, "r": 10} + label: center/big + +inlineSequenceMap: + # Inlined map in sequence + << : [ *CENTER, {"r": 10} ] + label: center/big +` + +func (s *S) TestMerge(c *C) { + var want = map[interface{}]interface{}{ + "x": 1, + "y": 2, + "r": 10, + "label": "center/big", + } + + wantStringMap := make(map[string]interface{}) + for k, v := range want { + wantStringMap[fmt.Sprintf("%v", k)] = v + } + + var m map[interface{}]interface{} + err := yaml.Unmarshal([]byte(mergeTests), &m) + c.Assert(err, IsNil) + for name, test := range m { + if name == "anchors" { + continue + } + if name == "plain" { + c.Assert(test, DeepEquals, wantStringMap, Commentf("test %q failed", name)) + continue + } + c.Assert(test, DeepEquals, want, Commentf("test %q failed", name)) + } +} + +func (s *S) TestMergeStruct(c *C) { + type Data struct { + X, Y, R int + Label string + } + want := Data{1, 2, 10, "center/big"} + + var m map[string]Data + err := yaml.Unmarshal([]byte(mergeTests), &m) + c.Assert(err, IsNil) + for name, test := range m { + if name == "anchors" { + continue + } + c.Assert(test, Equals, want, Commentf("test %q failed", name)) + } +} + +var unmarshalNullTests = []struct { + input string + pristine, expected func() interface{} +}{{ + "null", + func() interface{} { var v interface{}; v = "v"; return &v }, + func() interface{} { var v interface{}; v = nil; return &v }, +}, { + "null", + func() interface{} { var s = "s"; return &s }, + func() interface{} { var s = "s"; return &s }, +}, { + "null", + func() interface{} { var s = "s"; sptr := &s; return &sptr }, + func() interface{} { var sptr *string; return &sptr }, +}, { + "null", + func() interface{} { var i = 1; return &i }, + func() interface{} { var i = 1; return &i }, +}, { + "null", + func() interface{} { var i = 1; iptr := &i; return &iptr }, + func() interface{} { var iptr *int; return &iptr }, +}, { + "null", + func() interface{} { var m = map[string]int{"s": 1}; return &m }, + func() interface{} { var m map[string]int; return &m }, +}, { + "null", + func() interface{} { var m = map[string]int{"s": 1}; return m }, + func() interface{} { var m = map[string]int{"s": 1}; return m }, +}, { + "s2: null\ns3: null", + func() interface{} { var m = map[string]int{"s1": 1, "s2": 2}; return m }, + func() interface{} { var m = map[string]int{"s1": 1, "s2": 2, "s3": 0}; return m }, +}, { + "s2: null\ns3: null", + func() interface{} { var m = map[string]interface{}{"s1": 1, "s2": 2}; return m }, + func() interface{} { var m = map[string]interface{}{"s1": 1, "s2": nil, "s3": nil}; return m }, +}} + +func (s *S) TestUnmarshalNull(c *C) { + for _, test := range unmarshalNullTests { + pristine := test.pristine() + expected := test.expected() + err := yaml.Unmarshal([]byte(test.input), pristine) + c.Assert(err, IsNil) + c.Assert(pristine, DeepEquals, expected) + } +} + +func (s *S) TestUnmarshalPreservesData(c *C) { + var v struct { + A, B int + C int `yaml:"-"` + } + v.A = 42 + v.C = 88 + err := yaml.Unmarshal([]byte("---"), &v) + c.Assert(err, IsNil) + c.Assert(v.A, Equals, 42) + c.Assert(v.B, Equals, 0) + c.Assert(v.C, Equals, 88) + + err = yaml.Unmarshal([]byte("b: 21\nc: 99"), &v) + c.Assert(err, IsNil) + c.Assert(v.A, Equals, 42) + c.Assert(v.B, Equals, 21) + c.Assert(v.C, Equals, 88) +} + +func (s *S) TestUnmarshalSliceOnPreset(c *C) { + // Issue #48. + v := struct{ A []int }{[]int{1}} + yaml.Unmarshal([]byte("a: [2]"), &v) + c.Assert(v.A, DeepEquals, []int{2}) +} + +var unmarshalStrictTests = []struct { + known bool + unique bool + data string + value interface{} + error string +}{{ + known: true, + data: "a: 1\nc: 2\n", + value: struct{ A, B int }{A: 1}, + error: `yaml: unmarshal errors:\n line 2: field c not found in type struct { A int; B int }`, +}, { + unique: true, + data: "a: 1\nb: 2\na: 3\n", + value: struct{ A, B int }{A: 3, B: 2}, + error: `yaml: unmarshal errors:\n line 3: mapping key "a" already defined at line 1`, +}, { + unique: true, + data: "c: 3\na: 1\nb: 2\nc: 4\n", + value: struct { + A int + inlineB `yaml:",inline"` + }{ + A: 1, + inlineB: inlineB{ + B: 2, + inlineC: inlineC{ + C: 4, + }, + }, + }, + error: `yaml: unmarshal errors:\n line 4: mapping key "c" already defined at line 1`, +}, { + unique: true, + data: "c: 0\na: 1\nb: 2\nc: 1\n", + value: struct { + A int + inlineB `yaml:",inline"` + }{ + A: 1, + inlineB: inlineB{ + B: 2, + inlineC: inlineC{ + C: 1, + }, + }, + }, + error: `yaml: unmarshal errors:\n line 4: mapping key "c" already defined at line 1`, +}, { + unique: true, + data: "c: 1\na: 1\nb: 2\nc: 3\n", + value: struct { + A int + M map[string]interface{} `yaml:",inline"` + }{ + A: 1, + M: map[string]interface{}{ + "b": 2, + "c": 3, + }, + }, + error: `yaml: unmarshal errors:\n line 4: mapping key "c" already defined at line 1`, +}, { + unique: true, + data: "a: 1\n9: 2\nnull: 3\n9: 4", + value: map[interface{}]interface{}{ + "a": 1, + nil: 3, + 9: 4, + }, + error: `yaml: unmarshal errors:\n line 4: mapping key "9" already defined at line 2`, +}} + +func (s *S) TestUnmarshalKnownFields(c *C) { + for i, item := range unmarshalStrictTests { + c.Logf("test %d: %q", i, item.data) + // First test that normal Unmarshal unmarshals to the expected value. + if !item.unique { + t := reflect.ValueOf(item.value).Type() + value := reflect.New(t) + err := yaml.Unmarshal([]byte(item.data), value.Interface()) + c.Assert(err, Equals, nil) + c.Assert(value.Elem().Interface(), DeepEquals, item.value) + } + + // Then test that it fails on the same thing with KnownFields on. + t := reflect.ValueOf(item.value).Type() + value := reflect.New(t) + dec := yaml.NewDecoder(bytes.NewBuffer([]byte(item.data))) + dec.KnownFields(item.known) + err := dec.Decode(value.Interface()) + c.Assert(err, ErrorMatches, item.error) + } +} + +type textUnmarshaler struct { + S string +} + +func (t *textUnmarshaler) UnmarshalText(s []byte) error { + t.S = string(s) + return nil +} + +func (s *S) TestFuzzCrashers(c *C) { + cases := []string{ + // runtime error: index out of range + "\"\\0\\\r\n", + + // should not happen + " 0: [\n] 0", + "? ? \"\n\" 0", + " - {\n000}0", + "0:\n 0: [0\n] 0", + " - \"\n000\"0", + " - \"\n000\"\"", + "0:\n - {\n000}0", + "0:\n - \"\n000\"0", + "0:\n - \"\n000\"\"", + + // runtime error: index out of range + " \ufeff\n", + "? \ufeff\n", + "? \ufeff:\n", + "0: \ufeff\n", + "? \ufeff: \ufeff\n", + } + for _, data := range cases { + var v interface{} + _ = yaml.Unmarshal([]byte(data), &v) + } +} + +//var data []byte +//func init() { +// var err error +// data, err = ioutil.ReadFile("/tmp/file.yaml") +// if err != nil { +// panic(err) +// } +//} +// +//func (s *S) BenchmarkUnmarshal(c *C) { +// var err error +// for i := 0; i < c.N; i++ { +// var v map[string]interface{} +// err = yaml.Unmarshal(data, &v) +// } +// if err != nil { +// panic(err) +// } +//} +// +//func (s *S) BenchmarkMarshal(c *C) { +// var v map[string]interface{} +// yaml.Unmarshal(data, &v) +// c.ResetTimer() +// for i := 0; i < c.N; i++ { +// yaml.Marshal(&v) +// } +//} diff --git a/go/internal/forked/kyaml/internal/forked/github.com/go-yaml/yaml/emitterc.go b/go/internal/forked/kyaml/internal/forked/github.com/go-yaml/yaml/emitterc.go new file mode 100644 index 000000000..f0f3d1867 --- /dev/null +++ b/go/internal/forked/kyaml/internal/forked/github.com/go-yaml/yaml/emitterc.go @@ -0,0 +1,2028 @@ +// +// Copyright (c) 2011-2019 Canonical Ltd +// Copyright (c) 2006-2010 Kirill Simonov +// +// Permission is hereby granted, free of charge, to any person obtaining a copy of +// this software and associated documentation files (the "Software"), to deal in +// the Software without restriction, including without limitation the rights to +// use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies +// of the Software, and to permit persons to whom the Software is furnished to do +// so, subject to the following conditions: +// +// The above copyright notice and this permission notice shall be included in all +// copies or substantial portions of the Software. +// +// THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR +// IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, +// FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE +// AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER +// LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, +// OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE +// SOFTWARE. + +package yaml + +import ( + "bytes" + "fmt" +) + +// Flush the buffer if needed. +func flush(emitter *yaml_emitter_t) bool { + if emitter.buffer_pos+5 >= len(emitter.buffer) { + return yaml_emitter_flush(emitter) + } + return true +} + +// Put a character to the output buffer. +func put(emitter *yaml_emitter_t, value byte) bool { + if emitter.buffer_pos+5 >= len(emitter.buffer) && !yaml_emitter_flush(emitter) { + return false + } + emitter.buffer[emitter.buffer_pos] = value + emitter.buffer_pos++ + emitter.column++ + return true +} + +// Put a line break to the output buffer. +func put_break(emitter *yaml_emitter_t) bool { + if emitter.buffer_pos+5 >= len(emitter.buffer) && !yaml_emitter_flush(emitter) { + return false + } + switch emitter.line_break { + case yaml_CR_BREAK: + emitter.buffer[emitter.buffer_pos] = '\r' + emitter.buffer_pos += 1 + case yaml_LN_BREAK: + emitter.buffer[emitter.buffer_pos] = '\n' + emitter.buffer_pos += 1 + case yaml_CRLN_BREAK: + emitter.buffer[emitter.buffer_pos+0] = '\r' + emitter.buffer[emitter.buffer_pos+1] = '\n' + emitter.buffer_pos += 2 + default: + panic("unknown line break setting") + } + if emitter.column == 0 { + emitter.space_above = true + } + emitter.column = 0 + emitter.line++ + // [Go] Do this here and below and drop from everywhere else (see commented lines). + emitter.indention = true + return true +} + +// Copy a character from a string into buffer. +func write(emitter *yaml_emitter_t, s []byte, i *int) bool { + if emitter.buffer_pos+5 >= len(emitter.buffer) && !yaml_emitter_flush(emitter) { + return false + } + p := emitter.buffer_pos + w := width(s[*i]) + switch w { + case 4: + emitter.buffer[p+3] = s[*i+3] + fallthrough + case 3: + emitter.buffer[p+2] = s[*i+2] + fallthrough + case 2: + emitter.buffer[p+1] = s[*i+1] + fallthrough + case 1: + emitter.buffer[p+0] = s[*i+0] + default: + panic("unknown character width") + } + emitter.column++ + emitter.buffer_pos += w + *i += w + return true +} + +// Write a whole string into buffer. +func write_all(emitter *yaml_emitter_t, s []byte) bool { + for i := 0; i < len(s); { + if !write(emitter, s, &i) { + return false + } + } + return true +} + +// Copy a line break character from a string into buffer. +func write_break(emitter *yaml_emitter_t, s []byte, i *int) bool { + if s[*i] == '\n' { + if !put_break(emitter) { + return false + } + *i++ + } else { + if !write(emitter, s, i) { + return false + } + if emitter.column == 0 { + emitter.space_above = true + } + emitter.column = 0 + emitter.line++ + // [Go] Do this here and above and drop from everywhere else (see commented lines). + emitter.indention = true + } + return true +} + +// Set an emitter error and return false. +func yaml_emitter_set_emitter_error(emitter *yaml_emitter_t, problem string) bool { + emitter.error = yaml_EMITTER_ERROR + emitter.problem = problem + return false +} + +// Emit an event. +func yaml_emitter_emit(emitter *yaml_emitter_t, event *yaml_event_t) bool { + emitter.events = append(emitter.events, *event) + for !yaml_emitter_need_more_events(emitter) { + event := &emitter.events[emitter.events_head] + if !yaml_emitter_analyze_event(emitter, event) { + return false + } + if !yaml_emitter_state_machine(emitter, event) { + return false + } + yaml_event_delete(event) + emitter.events_head++ + } + return true +} + +// Check if we need to accumulate more events before emitting. +// +// We accumulate extra +// - 1 event for DOCUMENT-START +// - 2 events for SEQUENCE-START +// - 3 events for MAPPING-START +// +func yaml_emitter_need_more_events(emitter *yaml_emitter_t) bool { + if emitter.events_head == len(emitter.events) { + return true + } + var accumulate int + switch emitter.events[emitter.events_head].typ { + case yaml_DOCUMENT_START_EVENT: + accumulate = 1 + break + case yaml_SEQUENCE_START_EVENT: + accumulate = 2 + break + case yaml_MAPPING_START_EVENT: + accumulate = 3 + break + default: + return false + } + if len(emitter.events)-emitter.events_head > accumulate { + return false + } + var level int + for i := emitter.events_head; i < len(emitter.events); i++ { + switch emitter.events[i].typ { + case yaml_STREAM_START_EVENT, yaml_DOCUMENT_START_EVENT, yaml_SEQUENCE_START_EVENT, yaml_MAPPING_START_EVENT: + level++ + case yaml_STREAM_END_EVENT, yaml_DOCUMENT_END_EVENT, yaml_SEQUENCE_END_EVENT, yaml_MAPPING_END_EVENT: + level-- + } + if level == 0 { + return false + } + } + return true +} + +// Append a directive to the directives stack. +func yaml_emitter_append_tag_directive(emitter *yaml_emitter_t, value *yaml_tag_directive_t, allow_duplicates bool) bool { + for i := 0; i < len(emitter.tag_directives); i++ { + if bytes.Equal(value.handle, emitter.tag_directives[i].handle) { + if allow_duplicates { + return true + } + return yaml_emitter_set_emitter_error(emitter, "duplicate %TAG directive") + } + } + + // [Go] Do we actually need to copy this given garbage collection + // and the lack of deallocating destructors? + tag_copy := yaml_tag_directive_t{ + handle: make([]byte, len(value.handle)), + prefix: make([]byte, len(value.prefix)), + } + copy(tag_copy.handle, value.handle) + copy(tag_copy.prefix, value.prefix) + emitter.tag_directives = append(emitter.tag_directives, tag_copy) + return true +} + +// Increase the indentation level. +func yaml_emitter_increase_indent(emitter *yaml_emitter_t, flow, indentless bool, compact_seq bool) bool { + emitter.indents = append(emitter.indents, emitter.indent) + if emitter.indent < 0 { + if flow { + emitter.indent = emitter.best_indent + } else { + emitter.indent = 0 + } + } else if !indentless { + // [Go] This was changed so that indentations are more regular. + if emitter.states[len(emitter.states)-1] == yaml_EMIT_BLOCK_SEQUENCE_ITEM_STATE { + // The first indent inside a sequence will just skip the "- " indicator. + emitter.indent += 2 + } else { + // Everything else aligns to the chosen indentation. + emitter.indent = emitter.best_indent*((emitter.indent+emitter.best_indent)/emitter.best_indent) + } + if compact_seq { + emitter.indent = emitter.indent - 2 + } + } + return true +} + +// State dispatcher. +func yaml_emitter_state_machine(emitter *yaml_emitter_t, event *yaml_event_t) bool { + switch emitter.state { + default: + case yaml_EMIT_STREAM_START_STATE: + return yaml_emitter_emit_stream_start(emitter, event) + + case yaml_EMIT_FIRST_DOCUMENT_START_STATE: + return yaml_emitter_emit_document_start(emitter, event, true) + + case yaml_EMIT_DOCUMENT_START_STATE: + return yaml_emitter_emit_document_start(emitter, event, false) + + case yaml_EMIT_DOCUMENT_CONTENT_STATE: + return yaml_emitter_emit_document_content(emitter, event) + + case yaml_EMIT_DOCUMENT_END_STATE: + return yaml_emitter_emit_document_end(emitter, event) + + case yaml_EMIT_FLOW_SEQUENCE_FIRST_ITEM_STATE: + return yaml_emitter_emit_flow_sequence_item(emitter, event, true, false) + + case yaml_EMIT_FLOW_SEQUENCE_TRAIL_ITEM_STATE: + return yaml_emitter_emit_flow_sequence_item(emitter, event, false, true) + + case yaml_EMIT_FLOW_SEQUENCE_ITEM_STATE: + return yaml_emitter_emit_flow_sequence_item(emitter, event, false, false) + + case yaml_EMIT_FLOW_MAPPING_FIRST_KEY_STATE: + return yaml_emitter_emit_flow_mapping_key(emitter, event, true, false) + + case yaml_EMIT_FLOW_MAPPING_TRAIL_KEY_STATE: + return yaml_emitter_emit_flow_mapping_key(emitter, event, false, true) + + case yaml_EMIT_FLOW_MAPPING_KEY_STATE: + return yaml_emitter_emit_flow_mapping_key(emitter, event, false, false) + + case yaml_EMIT_FLOW_MAPPING_SIMPLE_VALUE_STATE: + return yaml_emitter_emit_flow_mapping_value(emitter, event, true) + + case yaml_EMIT_FLOW_MAPPING_VALUE_STATE: + return yaml_emitter_emit_flow_mapping_value(emitter, event, false) + + case yaml_EMIT_BLOCK_SEQUENCE_FIRST_ITEM_STATE: + return yaml_emitter_emit_block_sequence_item(emitter, event, true) + + case yaml_EMIT_BLOCK_SEQUENCE_ITEM_STATE: + return yaml_emitter_emit_block_sequence_item(emitter, event, false) + + case yaml_EMIT_BLOCK_MAPPING_FIRST_KEY_STATE: + return yaml_emitter_emit_block_mapping_key(emitter, event, true) + + case yaml_EMIT_BLOCK_MAPPING_KEY_STATE: + return yaml_emitter_emit_block_mapping_key(emitter, event, false) + + case yaml_EMIT_BLOCK_MAPPING_SIMPLE_VALUE_STATE: + return yaml_emitter_emit_block_mapping_value(emitter, event, true) + + case yaml_EMIT_BLOCK_MAPPING_VALUE_STATE: + return yaml_emitter_emit_block_mapping_value(emitter, event, false) + + case yaml_EMIT_END_STATE: + return yaml_emitter_set_emitter_error(emitter, "expected nothing after STREAM-END") + } + panic("invalid emitter state") +} + +// Expect STREAM-START. +func yaml_emitter_emit_stream_start(emitter *yaml_emitter_t, event *yaml_event_t) bool { + if event.typ != yaml_STREAM_START_EVENT { + return yaml_emitter_set_emitter_error(emitter, "expected STREAM-START") + } + if emitter.encoding == yaml_ANY_ENCODING { + emitter.encoding = event.encoding + if emitter.encoding == yaml_ANY_ENCODING { + emitter.encoding = yaml_UTF8_ENCODING + } + } + if emitter.best_indent < 2 || emitter.best_indent > 9 { + emitter.best_indent = 2 + } + if emitter.best_width >= 0 && emitter.best_width <= emitter.best_indent*2 { + emitter.best_width = 80 + } + if emitter.best_width < 0 { + emitter.best_width = 1<<31 - 1 + } + if emitter.line_break == yaml_ANY_BREAK { + emitter.line_break = yaml_LN_BREAK + } + + emitter.indent = -1 + emitter.line = 0 + emitter.column = 0 + emitter.whitespace = true + emitter.indention = true + emitter.space_above = true + emitter.foot_indent = -1 + + if emitter.encoding != yaml_UTF8_ENCODING { + if !yaml_emitter_write_bom(emitter) { + return false + } + } + emitter.state = yaml_EMIT_FIRST_DOCUMENT_START_STATE + return true +} + +// Expect DOCUMENT-START or STREAM-END. +func yaml_emitter_emit_document_start(emitter *yaml_emitter_t, event *yaml_event_t, first bool) bool { + + if event.typ == yaml_DOCUMENT_START_EVENT { + + if event.version_directive != nil { + if !yaml_emitter_analyze_version_directive(emitter, event.version_directive) { + return false + } + } + + for i := 0; i < len(event.tag_directives); i++ { + tag_directive := &event.tag_directives[i] + if !yaml_emitter_analyze_tag_directive(emitter, tag_directive) { + return false + } + if !yaml_emitter_append_tag_directive(emitter, tag_directive, false) { + return false + } + } + + for i := 0; i < len(default_tag_directives); i++ { + tag_directive := &default_tag_directives[i] + if !yaml_emitter_append_tag_directive(emitter, tag_directive, true) { + return false + } + } + + implicit := event.implicit + if !first || emitter.canonical { + implicit = false + } + + if emitter.open_ended && (event.version_directive != nil || len(event.tag_directives) > 0) { + if !yaml_emitter_write_indicator(emitter, []byte("..."), true, false, false) { + return false + } + if !yaml_emitter_write_indent(emitter) { + return false + } + } + + if event.version_directive != nil { + implicit = false + if !yaml_emitter_write_indicator(emitter, []byte("%YAML"), true, false, false) { + return false + } + if !yaml_emitter_write_indicator(emitter, []byte("1.1"), true, false, false) { + return false + } + if !yaml_emitter_write_indent(emitter) { + return false + } + } + + if len(event.tag_directives) > 0 { + implicit = false + for i := 0; i < len(event.tag_directives); i++ { + tag_directive := &event.tag_directives[i] + if !yaml_emitter_write_indicator(emitter, []byte("%TAG"), true, false, false) { + return false + } + if !yaml_emitter_write_tag_handle(emitter, tag_directive.handle) { + return false + } + if !yaml_emitter_write_tag_content(emitter, tag_directive.prefix, true) { + return false + } + if !yaml_emitter_write_indent(emitter) { + return false + } + } + } + + if yaml_emitter_check_empty_document(emitter) { + implicit = false + } + if !implicit { + if !yaml_emitter_write_indent(emitter) { + return false + } + if !yaml_emitter_write_indicator(emitter, []byte("---"), true, false, false) { + return false + } + if emitter.canonical || true { + if !yaml_emitter_write_indent(emitter) { + return false + } + } + } + + if len(emitter.head_comment) > 0 { + if !yaml_emitter_process_head_comment(emitter) { + return false + } + if !put_break(emitter) { + return false + } + } + + emitter.state = yaml_EMIT_DOCUMENT_CONTENT_STATE + return true + } + + if event.typ == yaml_STREAM_END_EVENT { + if emitter.open_ended { + if !yaml_emitter_write_indicator(emitter, []byte("..."), true, false, false) { + return false + } + if !yaml_emitter_write_indent(emitter) { + return false + } + } + if !yaml_emitter_flush(emitter) { + return false + } + emitter.state = yaml_EMIT_END_STATE + return true + } + + return yaml_emitter_set_emitter_error(emitter, "expected DOCUMENT-START or STREAM-END") +} + +// Expect the root node. +func yaml_emitter_emit_document_content(emitter *yaml_emitter_t, event *yaml_event_t) bool { + emitter.states = append(emitter.states, yaml_EMIT_DOCUMENT_END_STATE) + + if !yaml_emitter_process_head_comment(emitter) { + return false + } + if !yaml_emitter_emit_node(emitter, event, true, false, false, false) { + return false + } + if !yaml_emitter_process_line_comment(emitter, false) { + return false + } + if !yaml_emitter_process_foot_comment(emitter) { + return false + } + return true +} + +// Expect DOCUMENT-END. +func yaml_emitter_emit_document_end(emitter *yaml_emitter_t, event *yaml_event_t) bool { + if event.typ != yaml_DOCUMENT_END_EVENT { + return yaml_emitter_set_emitter_error(emitter, "expected DOCUMENT-END") + } + // [Go] Force document foot separation. + emitter.foot_indent = 0 + if !yaml_emitter_process_foot_comment(emitter) { + return false + } + emitter.foot_indent = -1 + if !yaml_emitter_write_indent(emitter) { + return false + } + if !event.implicit { + // [Go] Allocate the slice elsewhere. + if !yaml_emitter_write_indicator(emitter, []byte("..."), true, false, false) { + return false + } + if !yaml_emitter_write_indent(emitter) { + return false + } + } + if !yaml_emitter_flush(emitter) { + return false + } + emitter.state = yaml_EMIT_DOCUMENT_START_STATE + emitter.tag_directives = emitter.tag_directives[:0] + return true +} + +// Expect a flow item node. +func yaml_emitter_emit_flow_sequence_item(emitter *yaml_emitter_t, event *yaml_event_t, first, trail bool) bool { + if first { + if !yaml_emitter_write_indicator(emitter, []byte{'['}, true, true, false) { + return false + } + if !yaml_emitter_increase_indent(emitter, true, false, false) { + return false + } + emitter.flow_level++ + } + + if event.typ == yaml_SEQUENCE_END_EVENT { + if emitter.canonical && !first && !trail { + if !yaml_emitter_write_indicator(emitter, []byte{','}, false, false, false) { + return false + } + } + emitter.flow_level-- + emitter.indent = emitter.indents[len(emitter.indents)-1] + emitter.indents = emitter.indents[:len(emitter.indents)-1] + if emitter.column == 0 || emitter.canonical && !first { + if !yaml_emitter_write_indent(emitter) { + return false + } + } + if !yaml_emitter_write_indicator(emitter, []byte{']'}, false, false, false) { + return false + } + if !yaml_emitter_process_line_comment(emitter, false) { + return false + } + if !yaml_emitter_process_foot_comment(emitter) { + return false + } + emitter.state = emitter.states[len(emitter.states)-1] + emitter.states = emitter.states[:len(emitter.states)-1] + + return true + } + + if !first && !trail { + if !yaml_emitter_write_indicator(emitter, []byte{','}, false, false, false) { + return false + } + } + + if !yaml_emitter_process_head_comment(emitter) { + return false + } + if emitter.column == 0 { + if !yaml_emitter_write_indent(emitter) { + return false + } + } + + if emitter.canonical || emitter.column > emitter.best_width { + if !yaml_emitter_write_indent(emitter) { + return false + } + } + if len(emitter.line_comment)+len(emitter.foot_comment)+len(emitter.tail_comment) > 0 { + emitter.states = append(emitter.states, yaml_EMIT_FLOW_SEQUENCE_TRAIL_ITEM_STATE) + } else { + emitter.states = append(emitter.states, yaml_EMIT_FLOW_SEQUENCE_ITEM_STATE) + } + if !yaml_emitter_emit_node(emitter, event, false, true, false, false) { + return false + } + if len(emitter.line_comment)+len(emitter.foot_comment)+len(emitter.tail_comment) > 0 { + if !yaml_emitter_write_indicator(emitter, []byte{','}, false, false, false) { + return false + } + } + if !yaml_emitter_process_line_comment(emitter, false) { + return false + } + if !yaml_emitter_process_foot_comment(emitter) { + return false + } + return true +} + +// Expect a flow key node. +func yaml_emitter_emit_flow_mapping_key(emitter *yaml_emitter_t, event *yaml_event_t, first, trail bool) bool { + if first { + if !yaml_emitter_write_indicator(emitter, []byte{'{'}, true, true, false) { + return false + } + if !yaml_emitter_increase_indent(emitter, true, false, false) { + return false + } + emitter.flow_level++ + } + + if event.typ == yaml_MAPPING_END_EVENT { + if (emitter.canonical || len(emitter.head_comment)+len(emitter.foot_comment)+len(emitter.tail_comment) > 0) && !first && !trail { + if !yaml_emitter_write_indicator(emitter, []byte{','}, false, false, false) { + return false + } + } + if !yaml_emitter_process_head_comment(emitter) { + return false + } + emitter.flow_level-- + emitter.indent = emitter.indents[len(emitter.indents)-1] + emitter.indents = emitter.indents[:len(emitter.indents)-1] + if emitter.canonical && !first { + if !yaml_emitter_write_indent(emitter) { + return false + } + } + if !yaml_emitter_write_indicator(emitter, []byte{'}'}, false, false, false) { + return false + } + if !yaml_emitter_process_line_comment(emitter, false) { + return false + } + if !yaml_emitter_process_foot_comment(emitter) { + return false + } + emitter.state = emitter.states[len(emitter.states)-1] + emitter.states = emitter.states[:len(emitter.states)-1] + return true + } + + if !first && !trail { + if !yaml_emitter_write_indicator(emitter, []byte{','}, false, false, false) { + return false + } + } + + if !yaml_emitter_process_head_comment(emitter) { + return false + } + + if emitter.column == 0 { + if !yaml_emitter_write_indent(emitter) { + return false + } + } + + if emitter.canonical || emitter.column > emitter.best_width { + if !yaml_emitter_write_indent(emitter) { + return false + } + } + + if !emitter.canonical && yaml_emitter_check_simple_key(emitter) { + emitter.states = append(emitter.states, yaml_EMIT_FLOW_MAPPING_SIMPLE_VALUE_STATE) + return yaml_emitter_emit_node(emitter, event, false, false, true, true) + } + if !yaml_emitter_write_indicator(emitter, []byte{'?'}, true, false, false) { + return false + } + emitter.states = append(emitter.states, yaml_EMIT_FLOW_MAPPING_VALUE_STATE) + return yaml_emitter_emit_node(emitter, event, false, false, true, false) +} + +// Expect a flow value node. +func yaml_emitter_emit_flow_mapping_value(emitter *yaml_emitter_t, event *yaml_event_t, simple bool) bool { + if simple { + if !yaml_emitter_write_indicator(emitter, []byte{':'}, false, false, false) { + return false + } + } else { + if emitter.canonical || emitter.column > emitter.best_width { + if !yaml_emitter_write_indent(emitter) { + return false + } + } + if !yaml_emitter_write_indicator(emitter, []byte{':'}, true, false, false) { + return false + } + } + if len(emitter.line_comment)+len(emitter.foot_comment)+len(emitter.tail_comment) > 0 { + emitter.states = append(emitter.states, yaml_EMIT_FLOW_MAPPING_TRAIL_KEY_STATE) + } else { + emitter.states = append(emitter.states, yaml_EMIT_FLOW_MAPPING_KEY_STATE) + } + if !yaml_emitter_emit_node(emitter, event, false, false, true, false) { + return false + } + if len(emitter.line_comment)+len(emitter.foot_comment)+len(emitter.tail_comment) > 0 { + if !yaml_emitter_write_indicator(emitter, []byte{','}, false, false, false) { + return false + } + } + if !yaml_emitter_process_line_comment(emitter, false) { + return false + } + if !yaml_emitter_process_foot_comment(emitter) { + return false + } + return true +} + +// Expect a block item node. +func yaml_emitter_emit_block_sequence_item(emitter *yaml_emitter_t, event *yaml_event_t, first bool) bool { + if first { + seq := emitter.mapping_context && (emitter.column == 0 || !emitter.indention) && + emitter.compact_sequence_indent + if !yaml_emitter_increase_indent(emitter, false, false, seq){ + return false + } + } + if event.typ == yaml_SEQUENCE_END_EVENT { + emitter.indent = emitter.indents[len(emitter.indents)-1] + emitter.indents = emitter.indents[:len(emitter.indents)-1] + emitter.state = emitter.states[len(emitter.states)-1] + emitter.states = emitter.states[:len(emitter.states)-1] + return true + } + if !yaml_emitter_process_head_comment(emitter) { + return false + } + if !yaml_emitter_write_indent(emitter) { + return false + } + if !yaml_emitter_write_indicator(emitter, []byte{'-'}, true, false, true) { + return false + } + emitter.states = append(emitter.states, yaml_EMIT_BLOCK_SEQUENCE_ITEM_STATE) + if !yaml_emitter_emit_node(emitter, event, false, true, false, false) { + return false + } + if !yaml_emitter_process_line_comment(emitter, false) { + return false + } + if !yaml_emitter_process_foot_comment(emitter) { + return false + } + return true +} + +// Expect a block key node. +func yaml_emitter_emit_block_mapping_key(emitter *yaml_emitter_t, event *yaml_event_t, first bool) bool { + if first { + if !yaml_emitter_increase_indent(emitter, false, false, false) { + return false + } + } + if !yaml_emitter_process_head_comment(emitter) { + return false + } + if event.typ == yaml_MAPPING_END_EVENT { + emitter.indent = emitter.indents[len(emitter.indents)-1] + emitter.indents = emitter.indents[:len(emitter.indents)-1] + emitter.state = emitter.states[len(emitter.states)-1] + emitter.states = emitter.states[:len(emitter.states)-1] + return true + } + if !yaml_emitter_write_indent(emitter) { + return false + } + if len(emitter.line_comment) > 0 { + // [Go] A line comment was provided for the key. That's unusual as the + // scanner associates line comments with the value. Either way, + // save the line comment and render it appropriately later. + emitter.key_line_comment = emitter.line_comment + emitter.line_comment = nil + } + if yaml_emitter_check_simple_key(emitter) { + emitter.states = append(emitter.states, yaml_EMIT_BLOCK_MAPPING_SIMPLE_VALUE_STATE) + return yaml_emitter_emit_node(emitter, event, false, false, true, true) + } + if !yaml_emitter_write_indicator(emitter, []byte{'?'}, true, false, true) { + return false + } + emitter.states = append(emitter.states, yaml_EMIT_BLOCK_MAPPING_VALUE_STATE) + return yaml_emitter_emit_node(emitter, event, false, false, true, false) +} + +// Expect a block value node. +func yaml_emitter_emit_block_mapping_value(emitter *yaml_emitter_t, event *yaml_event_t, simple bool) bool { + if simple { + if !yaml_emitter_write_indicator(emitter, []byte{':'}, false, false, false) { + return false + } + } else { + if !yaml_emitter_write_indent(emitter) { + return false + } + if !yaml_emitter_write_indicator(emitter, []byte{':'}, true, false, true) { + return false + } + } + if len(emitter.key_line_comment) > 0 { + // [Go] Line comments are generally associated with the value, but when there's + // no value on the same line as a mapping key they end up attached to the + // key itself. + if event.typ == yaml_SCALAR_EVENT { + if len(emitter.line_comment) == 0 { + // A scalar is coming and it has no line comments by itself yet, + // so just let it handle the line comment as usual. If it has a + // line comment, we can't have both so the one from the key is lost. + emitter.line_comment = emitter.key_line_comment + emitter.key_line_comment = nil + } + } else if event.sequence_style() != yaml_FLOW_SEQUENCE_STYLE && (event.typ == yaml_MAPPING_START_EVENT || event.typ == yaml_SEQUENCE_START_EVENT) { + // An indented block follows, so write the comment right now. + emitter.line_comment, emitter.key_line_comment = emitter.key_line_comment, emitter.line_comment + if !yaml_emitter_process_line_comment(emitter, false) { + return false + } + emitter.line_comment, emitter.key_line_comment = emitter.key_line_comment, emitter.line_comment + } + } + emitter.states = append(emitter.states, yaml_EMIT_BLOCK_MAPPING_KEY_STATE) + if !yaml_emitter_emit_node(emitter, event, false, false, true, false) { + return false + } + if !yaml_emitter_process_line_comment(emitter, false) { + return false + } + if !yaml_emitter_process_foot_comment(emitter) { + return false + } + return true +} + +func yaml_emitter_silent_nil_event(emitter *yaml_emitter_t, event *yaml_event_t) bool { + return event.typ == yaml_SCALAR_EVENT && event.implicit && !emitter.canonical && len(emitter.scalar_data.value) == 0 +} + +// Expect a node. +func yaml_emitter_emit_node(emitter *yaml_emitter_t, event *yaml_event_t, + root bool, sequence bool, mapping bool, simple_key bool) bool { + + emitter.root_context = root + emitter.sequence_context = sequence + emitter.mapping_context = mapping + emitter.simple_key_context = simple_key + + switch event.typ { + case yaml_ALIAS_EVENT: + return yaml_emitter_emit_alias(emitter, event) + case yaml_SCALAR_EVENT: + return yaml_emitter_emit_scalar(emitter, event) + case yaml_SEQUENCE_START_EVENT: + return yaml_emitter_emit_sequence_start(emitter, event) + case yaml_MAPPING_START_EVENT: + return yaml_emitter_emit_mapping_start(emitter, event) + default: + return yaml_emitter_set_emitter_error(emitter, + fmt.Sprintf("expected SCALAR, SEQUENCE-START, MAPPING-START, or ALIAS, but got %v", event.typ)) + } +} + +// Expect ALIAS. +func yaml_emitter_emit_alias(emitter *yaml_emitter_t, event *yaml_event_t) bool { + if !yaml_emitter_process_anchor(emitter) { + return false + } + emitter.state = emitter.states[len(emitter.states)-1] + emitter.states = emitter.states[:len(emitter.states)-1] + return true +} + +// Expect SCALAR. +func yaml_emitter_emit_scalar(emitter *yaml_emitter_t, event *yaml_event_t) bool { + if !yaml_emitter_select_scalar_style(emitter, event) { + return false + } + if !yaml_emitter_process_anchor(emitter) { + return false + } + if !yaml_emitter_process_tag(emitter) { + return false + } + if !yaml_emitter_increase_indent(emitter, true, false, false) { + return false + } + if !yaml_emitter_process_scalar(emitter) { + return false + } + emitter.indent = emitter.indents[len(emitter.indents)-1] + emitter.indents = emitter.indents[:len(emitter.indents)-1] + emitter.state = emitter.states[len(emitter.states)-1] + emitter.states = emitter.states[:len(emitter.states)-1] + return true +} + +// Expect SEQUENCE-START. +func yaml_emitter_emit_sequence_start(emitter *yaml_emitter_t, event *yaml_event_t) bool { + if !yaml_emitter_process_anchor(emitter) { + return false + } + if !yaml_emitter_process_tag(emitter) { + return false + } + if emitter.flow_level > 0 || emitter.canonical || event.sequence_style() == yaml_FLOW_SEQUENCE_STYLE || + yaml_emitter_check_empty_sequence(emitter) { + emitter.state = yaml_EMIT_FLOW_SEQUENCE_FIRST_ITEM_STATE + } else { + emitter.state = yaml_EMIT_BLOCK_SEQUENCE_FIRST_ITEM_STATE + } + return true +} + +// Expect MAPPING-START. +func yaml_emitter_emit_mapping_start(emitter *yaml_emitter_t, event *yaml_event_t) bool { + if !yaml_emitter_process_anchor(emitter) { + return false + } + if !yaml_emitter_process_tag(emitter) { + return false + } + if emitter.flow_level > 0 || emitter.canonical || event.mapping_style() == yaml_FLOW_MAPPING_STYLE || + yaml_emitter_check_empty_mapping(emitter) { + emitter.state = yaml_EMIT_FLOW_MAPPING_FIRST_KEY_STATE + } else { + emitter.state = yaml_EMIT_BLOCK_MAPPING_FIRST_KEY_STATE + } + return true +} + +// Check if the document content is an empty scalar. +func yaml_emitter_check_empty_document(emitter *yaml_emitter_t) bool { + return false // [Go] Huh? +} + +// Check if the next events represent an empty sequence. +func yaml_emitter_check_empty_sequence(emitter *yaml_emitter_t) bool { + if len(emitter.events)-emitter.events_head < 2 { + return false + } + return emitter.events[emitter.events_head].typ == yaml_SEQUENCE_START_EVENT && + emitter.events[emitter.events_head+1].typ == yaml_SEQUENCE_END_EVENT +} + +// Check if the next events represent an empty mapping. +func yaml_emitter_check_empty_mapping(emitter *yaml_emitter_t) bool { + if len(emitter.events)-emitter.events_head < 2 { + return false + } + return emitter.events[emitter.events_head].typ == yaml_MAPPING_START_EVENT && + emitter.events[emitter.events_head+1].typ == yaml_MAPPING_END_EVENT +} + +// Check if the next node can be expressed as a simple key. +func yaml_emitter_check_simple_key(emitter *yaml_emitter_t) bool { + length := 0 + switch emitter.events[emitter.events_head].typ { + case yaml_ALIAS_EVENT: + length += len(emitter.anchor_data.anchor) + case yaml_SCALAR_EVENT: + if emitter.scalar_data.multiline { + return false + } + length += len(emitter.anchor_data.anchor) + + len(emitter.tag_data.handle) + + len(emitter.tag_data.suffix) + + len(emitter.scalar_data.value) + case yaml_SEQUENCE_START_EVENT: + if !yaml_emitter_check_empty_sequence(emitter) { + return false + } + length += len(emitter.anchor_data.anchor) + + len(emitter.tag_data.handle) + + len(emitter.tag_data.suffix) + case yaml_MAPPING_START_EVENT: + if !yaml_emitter_check_empty_mapping(emitter) { + return false + } + length += len(emitter.anchor_data.anchor) + + len(emitter.tag_data.handle) + + len(emitter.tag_data.suffix) + default: + return false + } + return length <= 128 +} + +// Determine an acceptable scalar style. +func yaml_emitter_select_scalar_style(emitter *yaml_emitter_t, event *yaml_event_t) bool { + + no_tag := len(emitter.tag_data.handle) == 0 && len(emitter.tag_data.suffix) == 0 + if no_tag && !event.implicit && !event.quoted_implicit { + return yaml_emitter_set_emitter_error(emitter, "neither tag nor implicit flags are specified") + } + + style := event.scalar_style() + if style == yaml_ANY_SCALAR_STYLE { + style = yaml_PLAIN_SCALAR_STYLE + } + if emitter.canonical { + style = yaml_DOUBLE_QUOTED_SCALAR_STYLE + } + if emitter.simple_key_context && emitter.scalar_data.multiline { + style = yaml_DOUBLE_QUOTED_SCALAR_STYLE + } + + if style == yaml_PLAIN_SCALAR_STYLE { + if emitter.flow_level > 0 && !emitter.scalar_data.flow_plain_allowed || + emitter.flow_level == 0 && !emitter.scalar_data.block_plain_allowed { + style = yaml_SINGLE_QUOTED_SCALAR_STYLE + } + if len(emitter.scalar_data.value) == 0 && (emitter.flow_level > 0 || emitter.simple_key_context) { + style = yaml_SINGLE_QUOTED_SCALAR_STYLE + } + if no_tag && !event.implicit { + style = yaml_SINGLE_QUOTED_SCALAR_STYLE + } + } + if style == yaml_SINGLE_QUOTED_SCALAR_STYLE { + if !emitter.scalar_data.single_quoted_allowed { + style = yaml_DOUBLE_QUOTED_SCALAR_STYLE + } + } + if style == yaml_LITERAL_SCALAR_STYLE || style == yaml_FOLDED_SCALAR_STYLE { + if !emitter.scalar_data.block_allowed || emitter.flow_level > 0 || emitter.simple_key_context { + style = yaml_DOUBLE_QUOTED_SCALAR_STYLE + } + } + + if no_tag && !event.quoted_implicit && style != yaml_PLAIN_SCALAR_STYLE { + emitter.tag_data.handle = []byte{'!'} + } + emitter.scalar_data.style = style + return true +} + +// Write an anchor. +func yaml_emitter_process_anchor(emitter *yaml_emitter_t) bool { + if emitter.anchor_data.anchor == nil { + return true + } + c := []byte{'&'} + if emitter.anchor_data.alias { + c[0] = '*' + } + if !yaml_emitter_write_indicator(emitter, c, true, false, false) { + return false + } + return yaml_emitter_write_anchor(emitter, emitter.anchor_data.anchor) +} + +// Write a tag. +func yaml_emitter_process_tag(emitter *yaml_emitter_t) bool { + if len(emitter.tag_data.handle) == 0 && len(emitter.tag_data.suffix) == 0 { + return true + } + if len(emitter.tag_data.handle) > 0 { + if !yaml_emitter_write_tag_handle(emitter, emitter.tag_data.handle) { + return false + } + if len(emitter.tag_data.suffix) > 0 { + if !yaml_emitter_write_tag_content(emitter, emitter.tag_data.suffix, false) { + return false + } + } + } else { + // [Go] Allocate these slices elsewhere. + if !yaml_emitter_write_indicator(emitter, []byte("!<"), true, false, false) { + return false + } + if !yaml_emitter_write_tag_content(emitter, emitter.tag_data.suffix, false) { + return false + } + if !yaml_emitter_write_indicator(emitter, []byte{'>'}, false, false, false) { + return false + } + } + return true +} + +// Write a scalar. +func yaml_emitter_process_scalar(emitter *yaml_emitter_t) bool { + switch emitter.scalar_data.style { + case yaml_PLAIN_SCALAR_STYLE: + return yaml_emitter_write_plain_scalar(emitter, emitter.scalar_data.value, !emitter.simple_key_context) + + case yaml_SINGLE_QUOTED_SCALAR_STYLE: + return yaml_emitter_write_single_quoted_scalar(emitter, emitter.scalar_data.value, !emitter.simple_key_context) + + case yaml_DOUBLE_QUOTED_SCALAR_STYLE: + return yaml_emitter_write_double_quoted_scalar(emitter, emitter.scalar_data.value, !emitter.simple_key_context) + + case yaml_LITERAL_SCALAR_STYLE: + return yaml_emitter_write_literal_scalar(emitter, emitter.scalar_data.value) + + case yaml_FOLDED_SCALAR_STYLE: + return yaml_emitter_write_folded_scalar(emitter, emitter.scalar_data.value) + } + panic("unknown scalar style") +} + +// Write a head comment. +func yaml_emitter_process_head_comment(emitter *yaml_emitter_t) bool { + if len(emitter.tail_comment) > 0 { + if !yaml_emitter_write_indent(emitter) { + return false + } + if !yaml_emitter_write_comment(emitter, emitter.tail_comment) { + return false + } + emitter.tail_comment = emitter.tail_comment[:0] + emitter.foot_indent = emitter.indent + if emitter.foot_indent < 0 { + emitter.foot_indent = 0 + } + } + + if len(emitter.head_comment) == 0 { + return true + } + if !yaml_emitter_write_indent(emitter) { + return false + } + if !yaml_emitter_write_comment(emitter, emitter.head_comment) { + return false + } + emitter.head_comment = emitter.head_comment[:0] + return true +} + +// Write an line comment. +func yaml_emitter_process_line_comment(emitter *yaml_emitter_t, linebreak bool) bool { + if len(emitter.line_comment) == 0 { + if linebreak && !put_break(emitter) { + return false + } + return true + } + if !emitter.whitespace { + if !put(emitter, ' ') { + return false + } + } + if !yaml_emitter_write_comment(emitter, emitter.line_comment) { + return false + } + emitter.line_comment = emitter.line_comment[:0] + return true +} + +// Write a foot comment. +func yaml_emitter_process_foot_comment(emitter *yaml_emitter_t) bool { + if len(emitter.foot_comment) == 0 { + return true + } + if !yaml_emitter_write_indent(emitter) { + return false + } + if !yaml_emitter_write_comment(emitter, emitter.foot_comment) { + return false + } + emitter.foot_comment = emitter.foot_comment[:0] + emitter.foot_indent = emitter.indent + if emitter.foot_indent < 0 { + emitter.foot_indent = 0 + } + return true +} + +// Check if a %YAML directive is valid. +func yaml_emitter_analyze_version_directive(emitter *yaml_emitter_t, version_directive *yaml_version_directive_t) bool { + if version_directive.major != 1 || version_directive.minor != 1 { + return yaml_emitter_set_emitter_error(emitter, "incompatible %YAML directive") + } + return true +} + +// Check if a %TAG directive is valid. +func yaml_emitter_analyze_tag_directive(emitter *yaml_emitter_t, tag_directive *yaml_tag_directive_t) bool { + handle := tag_directive.handle + prefix := tag_directive.prefix + if len(handle) == 0 { + return yaml_emitter_set_emitter_error(emitter, "tag handle must not be empty") + } + if handle[0] != '!' { + return yaml_emitter_set_emitter_error(emitter, "tag handle must start with '!'") + } + if handle[len(handle)-1] != '!' { + return yaml_emitter_set_emitter_error(emitter, "tag handle must end with '!'") + } + for i := 1; i < len(handle)-1; i += width(handle[i]) { + if !is_alpha(handle, i) { + return yaml_emitter_set_emitter_error(emitter, "tag handle must contain alphanumerical characters only") + } + } + if len(prefix) == 0 { + return yaml_emitter_set_emitter_error(emitter, "tag prefix must not be empty") + } + return true +} + +// Check if an anchor is valid. +func yaml_emitter_analyze_anchor(emitter *yaml_emitter_t, anchor []byte, alias bool) bool { + if len(anchor) == 0 { + problem := "anchor value must not be empty" + if alias { + problem = "alias value must not be empty" + } + return yaml_emitter_set_emitter_error(emitter, problem) + } + for i := 0; i < len(anchor); i += width(anchor[i]) { + if !is_alpha(anchor, i) { + problem := "anchor value must contain alphanumerical characters only" + if alias { + problem = "alias value must contain alphanumerical characters only" + } + return yaml_emitter_set_emitter_error(emitter, problem) + } + } + emitter.anchor_data.anchor = anchor + emitter.anchor_data.alias = alias + return true +} + +// Check if a tag is valid. +func yaml_emitter_analyze_tag(emitter *yaml_emitter_t, tag []byte) bool { + if len(tag) == 0 { + return yaml_emitter_set_emitter_error(emitter, "tag value must not be empty") + } + for i := 0; i < len(emitter.tag_directives); i++ { + tag_directive := &emitter.tag_directives[i] + if bytes.HasPrefix(tag, tag_directive.prefix) { + emitter.tag_data.handle = tag_directive.handle + emitter.tag_data.suffix = tag[len(tag_directive.prefix):] + return true + } + } + emitter.tag_data.suffix = tag + return true +} + +// Check if a scalar is valid. +func yaml_emitter_analyze_scalar(emitter *yaml_emitter_t, value []byte) bool { + var ( + block_indicators = false + flow_indicators = false + line_breaks = false + special_characters = false + tab_characters = false + + leading_space = false + leading_break = false + trailing_space = false + trailing_break = false + break_space = false + space_break = false + + preceded_by_whitespace = false + followed_by_whitespace = false + previous_space = false + previous_break = false + ) + + emitter.scalar_data.value = value + + if len(value) == 0 { + emitter.scalar_data.multiline = false + emitter.scalar_data.flow_plain_allowed = false + emitter.scalar_data.block_plain_allowed = true + emitter.scalar_data.single_quoted_allowed = true + emitter.scalar_data.block_allowed = false + return true + } + + if len(value) >= 3 && ((value[0] == '-' && value[1] == '-' && value[2] == '-') || (value[0] == '.' && value[1] == '.' && value[2] == '.')) { + block_indicators = true + flow_indicators = true + } + + preceded_by_whitespace = true + for i, w := 0, 0; i < len(value); i += w { + w = width(value[i]) + followed_by_whitespace = i+w >= len(value) || is_blank(value, i+w) + + if i == 0 { + switch value[i] { + case '#', ',', '[', ']', '{', '}', '&', '*', '!', '|', '>', '\'', '"', '%', '@', '`': + flow_indicators = true + block_indicators = true + case '?', ':': + flow_indicators = true + if followed_by_whitespace { + block_indicators = true + } + case '-': + if followed_by_whitespace { + flow_indicators = true + block_indicators = true + } + } + } else { + switch value[i] { + case ',', '?', '[', ']', '{', '}': + flow_indicators = true + case ':': + flow_indicators = true + if followed_by_whitespace { + block_indicators = true + } + case '#': + if preceded_by_whitespace { + flow_indicators = true + block_indicators = true + } + } + } + + if value[i] == '\t' { + tab_characters = true + } else if !is_printable(value, i) || !is_ascii(value, i) && !emitter.unicode { + special_characters = true + } + if is_space(value, i) { + if i == 0 { + leading_space = true + } + if i+width(value[i]) == len(value) { + trailing_space = true + } + if previous_break { + break_space = true + } + previous_space = true + previous_break = false + } else if is_break(value, i) { + line_breaks = true + if i == 0 { + leading_break = true + } + if i+width(value[i]) == len(value) { + trailing_break = true + } + if previous_space { + space_break = true + } + previous_space = false + previous_break = true + } else { + previous_space = false + previous_break = false + } + + // [Go]: Why 'z'? Couldn't be the end of the string as that's the loop condition. + preceded_by_whitespace = is_blankz(value, i) + } + + emitter.scalar_data.multiline = line_breaks + emitter.scalar_data.flow_plain_allowed = true + emitter.scalar_data.block_plain_allowed = true + emitter.scalar_data.single_quoted_allowed = true + emitter.scalar_data.block_allowed = true + + if leading_space || leading_break || trailing_space || trailing_break { + emitter.scalar_data.flow_plain_allowed = false + emitter.scalar_data.block_plain_allowed = false + } + if trailing_space { + emitter.scalar_data.block_allowed = false + } + if break_space { + emitter.scalar_data.flow_plain_allowed = false + emitter.scalar_data.block_plain_allowed = false + emitter.scalar_data.single_quoted_allowed = false + } + if space_break || tab_characters || special_characters { + emitter.scalar_data.flow_plain_allowed = false + emitter.scalar_data.block_plain_allowed = false + emitter.scalar_data.single_quoted_allowed = false + } + if space_break || special_characters { + emitter.scalar_data.block_allowed = false + } + if line_breaks { + emitter.scalar_data.flow_plain_allowed = false + emitter.scalar_data.block_plain_allowed = false + } + if flow_indicators { + emitter.scalar_data.flow_plain_allowed = false + } + if block_indicators { + emitter.scalar_data.block_plain_allowed = false + } + return true +} + +// Check if the event data is valid. +func yaml_emitter_analyze_event(emitter *yaml_emitter_t, event *yaml_event_t) bool { + + emitter.anchor_data.anchor = nil + emitter.tag_data.handle = nil + emitter.tag_data.suffix = nil + emitter.scalar_data.value = nil + + if len(event.head_comment) > 0 { + emitter.head_comment = event.head_comment + } + if len(event.line_comment) > 0 { + emitter.line_comment = event.line_comment + } + if len(event.foot_comment) > 0 { + emitter.foot_comment = event.foot_comment + } + if len(event.tail_comment) > 0 { + emitter.tail_comment = event.tail_comment + } + + switch event.typ { + case yaml_ALIAS_EVENT: + if !yaml_emitter_analyze_anchor(emitter, event.anchor, true) { + return false + } + + case yaml_SCALAR_EVENT: + if len(event.anchor) > 0 { + if !yaml_emitter_analyze_anchor(emitter, event.anchor, false) { + return false + } + } + if len(event.tag) > 0 && (emitter.canonical || (!event.implicit && !event.quoted_implicit)) { + if !yaml_emitter_analyze_tag(emitter, event.tag) { + return false + } + } + if !yaml_emitter_analyze_scalar(emitter, event.value) { + return false + } + + case yaml_SEQUENCE_START_EVENT: + if len(event.anchor) > 0 { + if !yaml_emitter_analyze_anchor(emitter, event.anchor, false) { + return false + } + } + if len(event.tag) > 0 && (emitter.canonical || !event.implicit) { + if !yaml_emitter_analyze_tag(emitter, event.tag) { + return false + } + } + + case yaml_MAPPING_START_EVENT: + if len(event.anchor) > 0 { + if !yaml_emitter_analyze_anchor(emitter, event.anchor, false) { + return false + } + } + if len(event.tag) > 0 && (emitter.canonical || !event.implicit) { + if !yaml_emitter_analyze_tag(emitter, event.tag) { + return false + } + } + } + return true +} + +// Write the BOM character. +func yaml_emitter_write_bom(emitter *yaml_emitter_t) bool { + if !flush(emitter) { + return false + } + pos := emitter.buffer_pos + emitter.buffer[pos+0] = '\xEF' + emitter.buffer[pos+1] = '\xBB' + emitter.buffer[pos+2] = '\xBF' + emitter.buffer_pos += 3 + return true +} + +func yaml_emitter_write_indent(emitter *yaml_emitter_t) bool { + indent := emitter.indent + if indent < 0 { + indent = 0 + } + if !emitter.indention || emitter.column > indent || (emitter.column == indent && !emitter.whitespace) { + if !put_break(emitter) { + return false + } + } + if emitter.foot_indent == indent { + if !put_break(emitter) { + return false + } + } + for emitter.column < indent { + if !put(emitter, ' ') { + return false + } + } + emitter.whitespace = true + //emitter.indention = true + emitter.space_above = false + emitter.foot_indent = -1 + return true +} + +func yaml_emitter_write_indicator(emitter *yaml_emitter_t, indicator []byte, need_whitespace, is_whitespace, is_indention bool) bool { + if need_whitespace && !emitter.whitespace { + if !put(emitter, ' ') { + return false + } + } + if !write_all(emitter, indicator) { + return false + } + emitter.whitespace = is_whitespace + emitter.indention = (emitter.indention && is_indention) + emitter.open_ended = false + return true +} + +func yaml_emitter_write_anchor(emitter *yaml_emitter_t, value []byte) bool { + if !write_all(emitter, value) { + return false + } + emitter.whitespace = false + emitter.indention = false + return true +} + +func yaml_emitter_write_tag_handle(emitter *yaml_emitter_t, value []byte) bool { + if !emitter.whitespace { + if !put(emitter, ' ') { + return false + } + } + if !write_all(emitter, value) { + return false + } + emitter.whitespace = false + emitter.indention = false + return true +} + +func yaml_emitter_write_tag_content(emitter *yaml_emitter_t, value []byte, need_whitespace bool) bool { + if need_whitespace && !emitter.whitespace { + if !put(emitter, ' ') { + return false + } + } + for i := 0; i < len(value); { + var must_write bool + switch value[i] { + case ';', '/', '?', ':', '@', '&', '=', '+', '$', ',', '_', '.', '~', '*', '\'', '(', ')', '[', ']': + must_write = true + default: + must_write = is_alpha(value, i) + } + if must_write { + if !write(emitter, value, &i) { + return false + } + } else { + w := width(value[i]) + for k := 0; k < w; k++ { + octet := value[i] + i++ + if !put(emitter, '%') { + return false + } + + c := octet >> 4 + if c < 10 { + c += '0' + } else { + c += 'A' - 10 + } + if !put(emitter, c) { + return false + } + + c = octet & 0x0f + if c < 10 { + c += '0' + } else { + c += 'A' - 10 + } + if !put(emitter, c) { + return false + } + } + } + } + emitter.whitespace = false + emitter.indention = false + return true +} + +func yaml_emitter_write_plain_scalar(emitter *yaml_emitter_t, value []byte, allow_breaks bool) bool { + if len(value) > 0 && !emitter.whitespace { + if !put(emitter, ' ') { + return false + } + } + + spaces := false + breaks := false + for i := 0; i < len(value); { + if is_space(value, i) { + if allow_breaks && !spaces && emitter.column > emitter.best_width && !is_space(value, i+1) { + if !yaml_emitter_write_indent(emitter) { + return false + } + i += width(value[i]) + } else { + if !write(emitter, value, &i) { + return false + } + } + spaces = true + } else if is_break(value, i) { + if !breaks && value[i] == '\n' { + if !put_break(emitter) { + return false + } + } + if !write_break(emitter, value, &i) { + return false + } + //emitter.indention = true + breaks = true + } else { + if breaks { + if !yaml_emitter_write_indent(emitter) { + return false + } + } + if !write(emitter, value, &i) { + return false + } + emitter.indention = false + spaces = false + breaks = false + } + } + + if len(value) > 0 { + emitter.whitespace = false + } + emitter.indention = false + if emitter.root_context { + emitter.open_ended = true + } + + return true +} + +func yaml_emitter_write_single_quoted_scalar(emitter *yaml_emitter_t, value []byte, allow_breaks bool) bool { + + if !yaml_emitter_write_indicator(emitter, []byte{'\''}, true, false, false) { + return false + } + + spaces := false + breaks := false + for i := 0; i < len(value); { + if is_space(value, i) { + if allow_breaks && !spaces && emitter.column > emitter.best_width && i > 0 && i < len(value)-1 && !is_space(value, i+1) { + if !yaml_emitter_write_indent(emitter) { + return false + } + i += width(value[i]) + } else { + if !write(emitter, value, &i) { + return false + } + } + spaces = true + } else if is_break(value, i) { + if !breaks && value[i] == '\n' { + if !put_break(emitter) { + return false + } + } + if !write_break(emitter, value, &i) { + return false + } + //emitter.indention = true + breaks = true + } else { + if breaks { + if !yaml_emitter_write_indent(emitter) { + return false + } + } + if value[i] == '\'' { + if !put(emitter, '\'') { + return false + } + } + if !write(emitter, value, &i) { + return false + } + emitter.indention = false + spaces = false + breaks = false + } + } + if !yaml_emitter_write_indicator(emitter, []byte{'\''}, false, false, false) { + return false + } + emitter.whitespace = false + emitter.indention = false + return true +} + +func yaml_emitter_write_double_quoted_scalar(emitter *yaml_emitter_t, value []byte, allow_breaks bool) bool { + spaces := false + if !yaml_emitter_write_indicator(emitter, []byte{'"'}, true, false, false) { + return false + } + + for i := 0; i < len(value); { + if !is_printable(value, i) || (!emitter.unicode && !is_ascii(value, i)) || + is_bom(value, i) || is_break(value, i) || + value[i] == '"' || value[i] == '\\' { + + octet := value[i] + + var w int + var v rune + switch { + case octet&0x80 == 0x00: + w, v = 1, rune(octet&0x7F) + case octet&0xE0 == 0xC0: + w, v = 2, rune(octet&0x1F) + case octet&0xF0 == 0xE0: + w, v = 3, rune(octet&0x0F) + case octet&0xF8 == 0xF0: + w, v = 4, rune(octet&0x07) + } + for k := 1; k < w; k++ { + octet = value[i+k] + v = (v << 6) + (rune(octet) & 0x3F) + } + i += w + + if !put(emitter, '\\') { + return false + } + + var ok bool + switch v { + case 0x00: + ok = put(emitter, '0') + case 0x07: + ok = put(emitter, 'a') + case 0x08: + ok = put(emitter, 'b') + case 0x09: + ok = put(emitter, 't') + case 0x0A: + ok = put(emitter, 'n') + case 0x0b: + ok = put(emitter, 'v') + case 0x0c: + ok = put(emitter, 'f') + case 0x0d: + ok = put(emitter, 'r') + case 0x1b: + ok = put(emitter, 'e') + case 0x22: + ok = put(emitter, '"') + case 0x5c: + ok = put(emitter, '\\') + case 0x85: + ok = put(emitter, 'N') + case 0xA0: + ok = put(emitter, '_') + case 0x2028: + ok = put(emitter, 'L') + case 0x2029: + ok = put(emitter, 'P') + default: + if v <= 0xFF { + ok = put(emitter, 'x') + w = 2 + } else if v <= 0xFFFF { + ok = put(emitter, 'u') + w = 4 + } else { + ok = put(emitter, 'U') + w = 8 + } + for k := (w - 1) * 4; ok && k >= 0; k -= 4 { + digit := byte((v >> uint(k)) & 0x0F) + if digit < 10 { + ok = put(emitter, digit+'0') + } else { + ok = put(emitter, digit+'A'-10) + } + } + } + if !ok { + return false + } + spaces = false + } else if is_space(value, i) { + if allow_breaks && !spaces && emitter.column > emitter.best_width && i > 0 && i < len(value)-1 { + if !yaml_emitter_write_indent(emitter) { + return false + } + if is_space(value, i+1) { + if !put(emitter, '\\') { + return false + } + } + i += width(value[i]) + } else if !write(emitter, value, &i) { + return false + } + spaces = true + } else { + if !write(emitter, value, &i) { + return false + } + spaces = false + } + } + if !yaml_emitter_write_indicator(emitter, []byte{'"'}, false, false, false) { + return false + } + emitter.whitespace = false + emitter.indention = false + return true +} + +func yaml_emitter_write_block_scalar_hints(emitter *yaml_emitter_t, value []byte) bool { + if is_space(value, 0) || is_break(value, 0) { + indent_hint := []byte{'0' + byte(emitter.best_indent)} + if !yaml_emitter_write_indicator(emitter, indent_hint, false, false, false) { + return false + } + } + + emitter.open_ended = false + + var chomp_hint [1]byte + if len(value) == 0 { + chomp_hint[0] = '-' + } else { + i := len(value) - 1 + for value[i]&0xC0 == 0x80 { + i-- + } + if !is_break(value, i) { + chomp_hint[0] = '-' + } else if i == 0 { + chomp_hint[0] = '+' + emitter.open_ended = true + } else { + i-- + for value[i]&0xC0 == 0x80 { + i-- + } + if is_break(value, i) { + chomp_hint[0] = '+' + emitter.open_ended = true + } + } + } + if chomp_hint[0] != 0 { + if !yaml_emitter_write_indicator(emitter, chomp_hint[:], false, false, false) { + return false + } + } + return true +} + +func yaml_emitter_write_literal_scalar(emitter *yaml_emitter_t, value []byte) bool { + if !yaml_emitter_write_indicator(emitter, []byte{'|'}, true, false, false) { + return false + } + if !yaml_emitter_write_block_scalar_hints(emitter, value) { + return false + } + if !yaml_emitter_process_line_comment(emitter, true) { + return false + } + //emitter.indention = true + emitter.whitespace = true + breaks := true + for i := 0; i < len(value); { + if is_break(value, i) { + if !write_break(emitter, value, &i) { + return false + } + //emitter.indention = true + breaks = true + } else { + if breaks { + if !yaml_emitter_write_indent(emitter) { + return false + } + } + if !write(emitter, value, &i) { + return false + } + emitter.indention = false + breaks = false + } + } + + return true +} + +func yaml_emitter_write_folded_scalar(emitter *yaml_emitter_t, value []byte) bool { + if !yaml_emitter_write_indicator(emitter, []byte{'>'}, true, false, false) { + return false + } + if !yaml_emitter_write_block_scalar_hints(emitter, value) { + return false + } + if !yaml_emitter_process_line_comment(emitter, true) { + return false + } + + //emitter.indention = true + emitter.whitespace = true + + breaks := true + leading_spaces := true + for i := 0; i < len(value); { + if is_break(value, i) { + if !breaks && !leading_spaces && value[i] == '\n' { + k := 0 + for is_break(value, k) { + k += width(value[k]) + } + if !is_blankz(value, k) { + if !put_break(emitter) { + return false + } + } + } + if !write_break(emitter, value, &i) { + return false + } + //emitter.indention = true + breaks = true + } else { + if breaks { + if !yaml_emitter_write_indent(emitter) { + return false + } + leading_spaces = is_blank(value, i) + } + if !breaks && is_space(value, i) && !is_space(value, i+1) && emitter.column > emitter.best_width { + if !yaml_emitter_write_indent(emitter) { + return false + } + i += width(value[i]) + } else { + if !write(emitter, value, &i) { + return false + } + } + emitter.indention = false + breaks = false + } + } + return true +} + +func yaml_emitter_write_comment(emitter *yaml_emitter_t, comment []byte) bool { + breaks := false + pound := false + for i := 0; i < len(comment); { + if is_break(comment, i) { + if !write_break(emitter, comment, &i) { + return false + } + //emitter.indention = true + breaks = true + pound = false + } else { + if breaks && !yaml_emitter_write_indent(emitter) { + return false + } + if !pound { + if comment[i] != '#' && (!put(emitter, '#') || !put(emitter, ' ')) { + return false + } + pound = true + } + if !write(emitter, comment, &i) { + return false + } + emitter.indention = false + breaks = false + } + } + if !breaks && !put_break(emitter) { + return false + } + + emitter.whitespace = true + //emitter.indention = true + return true +} diff --git a/go/internal/forked/kyaml/internal/forked/github.com/go-yaml/yaml/encode.go b/go/internal/forked/kyaml/internal/forked/github.com/go-yaml/yaml/encode.go new file mode 100644 index 000000000..de9e72a3e --- /dev/null +++ b/go/internal/forked/kyaml/internal/forked/github.com/go-yaml/yaml/encode.go @@ -0,0 +1,577 @@ +// +// Copyright (c) 2011-2019 Canonical Ltd +// +// Licensed under the Apache License, Version 2.0 (the "License"); +// you may not use this file except in compliance with the License. +// You may obtain a copy of the License at +// +// http://www.apache.org/licenses/LICENSE-2.0 +// +// Unless required by applicable law or agreed to in writing, software +// distributed under the License is distributed on an "AS IS" BASIS, +// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. +// See the License for the specific language governing permissions and +// limitations under the License. + +package yaml + +import ( + "encoding" + "fmt" + "io" + "reflect" + "regexp" + "sort" + "strconv" + "strings" + "time" + "unicode/utf8" +) + +type encoder struct { + emitter yaml_emitter_t + event yaml_event_t + out []byte + flow bool + indent int + doneInit bool +} + +func newEncoder() *encoder { + e := &encoder{} + yaml_emitter_initialize(&e.emitter) + yaml_emitter_set_output_string(&e.emitter, &e.out) + yaml_emitter_set_unicode(&e.emitter, true) + return e +} + +func newEncoderWithWriter(w io.Writer) *encoder { + e := &encoder{} + yaml_emitter_initialize(&e.emitter) + yaml_emitter_set_output_writer(&e.emitter, w) + yaml_emitter_set_unicode(&e.emitter, true) + return e +} + +func (e *encoder) init() { + if e.doneInit { + return + } + if e.indent == 0 { + e.indent = 4 + } + e.emitter.best_indent = e.indent + yaml_stream_start_event_initialize(&e.event, yaml_UTF8_ENCODING) + e.emit() + e.doneInit = true +} + +func (e *encoder) finish() { + e.emitter.open_ended = false + yaml_stream_end_event_initialize(&e.event) + e.emit() +} + +func (e *encoder) destroy() { + yaml_emitter_delete(&e.emitter) +} + +func (e *encoder) emit() { + // This will internally delete the e.event value. + e.must(yaml_emitter_emit(&e.emitter, &e.event)) +} + +func (e *encoder) must(ok bool) { + if !ok { + msg := e.emitter.problem + if msg == "" { + msg = "unknown problem generating YAML content" + } + failf("%s", msg) + } +} + +func (e *encoder) marshalDoc(tag string, in reflect.Value) { + e.init() + var node *Node + if in.IsValid() { + node, _ = in.Interface().(*Node) + } + if node != nil && node.Kind == DocumentNode { + e.nodev(in) + } else { + yaml_document_start_event_initialize(&e.event, nil, nil, true) + e.emit() + e.marshal(tag, in) + yaml_document_end_event_initialize(&e.event, true) + e.emit() + } +} + +func (e *encoder) marshal(tag string, in reflect.Value) { + tag = shortTag(tag) + if !in.IsValid() || in.Kind() == reflect.Ptr && in.IsNil() { + e.nilv() + return + } + iface := in.Interface() + switch value := iface.(type) { + case *Node: + e.nodev(in) + return + case Node: + if !in.CanAddr() { + var n = reflect.New(in.Type()).Elem() + n.Set(in) + in = n + } + e.nodev(in.Addr()) + return + case time.Time: + e.timev(tag, in) + return + case *time.Time: + e.timev(tag, in.Elem()) + return + case time.Duration: + e.stringv(tag, reflect.ValueOf(value.String())) + return + case Marshaler: + v, err := value.MarshalYAML() + if err != nil { + fail(err) + } + if v == nil { + e.nilv() + return + } + e.marshal(tag, reflect.ValueOf(v)) + return + case encoding.TextMarshaler: + text, err := value.MarshalText() + if err != nil { + fail(err) + } + in = reflect.ValueOf(string(text)) + case nil: + e.nilv() + return + } + switch in.Kind() { + case reflect.Interface: + e.marshal(tag, in.Elem()) + case reflect.Map: + e.mapv(tag, in) + case reflect.Ptr: + e.marshal(tag, in.Elem()) + case reflect.Struct: + e.structv(tag, in) + case reflect.Slice, reflect.Array: + e.slicev(tag, in) + case reflect.String: + e.stringv(tag, in) + case reflect.Int, reflect.Int8, reflect.Int16, reflect.Int32, reflect.Int64: + e.intv(tag, in) + case reflect.Uint, reflect.Uint8, reflect.Uint16, reflect.Uint32, reflect.Uint64, reflect.Uintptr: + e.uintv(tag, in) + case reflect.Float32, reflect.Float64: + e.floatv(tag, in) + case reflect.Bool: + e.boolv(tag, in) + default: + panic("cannot marshal type: " + in.Type().String()) + } +} + +func (e *encoder) mapv(tag string, in reflect.Value) { + e.mappingv(tag, func() { + keys := keyList(in.MapKeys()) + sort.Sort(keys) + for _, k := range keys { + e.marshal("", k) + e.marshal("", in.MapIndex(k)) + } + }) +} + +func (e *encoder) fieldByIndex(v reflect.Value, index []int) (field reflect.Value) { + for _, num := range index { + for { + if v.Kind() == reflect.Ptr { + if v.IsNil() { + return reflect.Value{} + } + v = v.Elem() + continue + } + break + } + v = v.Field(num) + } + return v +} + +func (e *encoder) structv(tag string, in reflect.Value) { + sinfo, err := getStructInfo(in.Type()) + if err != nil { + panic(err) + } + e.mappingv(tag, func() { + for _, info := range sinfo.FieldsList { + var value reflect.Value + if info.Inline == nil { + value = in.Field(info.Num) + } else { + value = e.fieldByIndex(in, info.Inline) + if !value.IsValid() { + continue + } + } + if info.OmitEmpty && isZero(value) { + continue + } + e.marshal("", reflect.ValueOf(info.Key)) + e.flow = info.Flow + e.marshal("", value) + } + if sinfo.InlineMap >= 0 { + m := in.Field(sinfo.InlineMap) + if m.Len() > 0 { + e.flow = false + keys := keyList(m.MapKeys()) + sort.Sort(keys) + for _, k := range keys { + if _, found := sinfo.FieldsMap[k.String()]; found { + panic(fmt.Sprintf("cannot have key %q in inlined map: conflicts with struct field", k.String())) + } + e.marshal("", k) + e.flow = false + e.marshal("", m.MapIndex(k)) + } + } + } + }) +} + +func (e *encoder) mappingv(tag string, f func()) { + implicit := tag == "" + style := yaml_BLOCK_MAPPING_STYLE + if e.flow { + e.flow = false + style = yaml_FLOW_MAPPING_STYLE + } + yaml_mapping_start_event_initialize(&e.event, nil, []byte(tag), implicit, style) + e.emit() + f() + yaml_mapping_end_event_initialize(&e.event) + e.emit() +} + +func (e *encoder) slicev(tag string, in reflect.Value) { + implicit := tag == "" + style := yaml_BLOCK_SEQUENCE_STYLE + if e.flow { + e.flow = false + style = yaml_FLOW_SEQUENCE_STYLE + } + e.must(yaml_sequence_start_event_initialize(&e.event, nil, []byte(tag), implicit, style)) + e.emit() + n := in.Len() + for i := 0; i < n; i++ { + e.marshal("", in.Index(i)) + } + e.must(yaml_sequence_end_event_initialize(&e.event)) + e.emit() +} + +// isBase60 returns whether s is in base 60 notation as defined in YAML 1.1. +// +// The base 60 float notation in YAML 1.1 is a terrible idea and is unsupported +// in YAML 1.2 and by this package, but these should be marshalled quoted for +// the time being for compatibility with other parsers. +func isBase60Float(s string) (result bool) { + // Fast path. + if s == "" { + return false + } + c := s[0] + if !(c == '+' || c == '-' || c >= '0' && c <= '9') || strings.IndexByte(s, ':') < 0 { + return false + } + // Do the full match. + return base60float.MatchString(s) +} + +// From http://yaml.org/type/float.html, except the regular expression there +// is bogus. In practice parsers do not enforce the "\.[0-9_]*" suffix. +var base60float = regexp.MustCompile(`^[-+]?[0-9][0-9_]*(?::[0-5]?[0-9])+(?:\.[0-9_]*)?$`) + +// isOldBool returns whether s is bool notation as defined in YAML 1.1. +// +// We continue to force strings that YAML 1.1 would interpret as booleans to be +// rendered as quotes strings so that the marshalled output valid for YAML 1.1 +// parsing. +func isOldBool(s string) (result bool) { + switch s { + case "y", "Y", "yes", "Yes", "YES", "on", "On", "ON", + "n", "N", "no", "No", "NO", "off", "Off", "OFF": + return true + default: + return false + } +} + +func (e *encoder) stringv(tag string, in reflect.Value) { + var style yaml_scalar_style_t + s := in.String() + canUsePlain := true + switch { + case !utf8.ValidString(s): + if tag == binaryTag { + failf("explicitly tagged !!binary data must be base64-encoded") + } + if tag != "" { + failf("cannot marshal invalid UTF-8 data as %s", shortTag(tag)) + } + // It can't be encoded directly as YAML so use a binary tag + // and encode it as base64. + tag = binaryTag + s = encodeBase64(s) + case tag == "": + // Check to see if it would resolve to a specific + // tag when encoded unquoted. If it doesn't, + // there's no need to quote it. + rtag, _ := resolve("", s) + canUsePlain = rtag == strTag && !(isBase60Float(s) || isOldBool(s)) + } + // Note: it's possible for user code to emit invalid YAML + // if they explicitly specify a tag and a string containing + // text that's incompatible with that tag. + switch { + case strings.Contains(s, "\n"): + if e.flow { + style = yaml_DOUBLE_QUOTED_SCALAR_STYLE + } else { + style = yaml_LITERAL_SCALAR_STYLE + } + case canUsePlain: + style = yaml_PLAIN_SCALAR_STYLE + default: + style = yaml_DOUBLE_QUOTED_SCALAR_STYLE + } + e.emitScalar(s, "", tag, style, nil, nil, nil, nil) +} + +func (e *encoder) boolv(tag string, in reflect.Value) { + var s string + if in.Bool() { + s = "true" + } else { + s = "false" + } + e.emitScalar(s, "", tag, yaml_PLAIN_SCALAR_STYLE, nil, nil, nil, nil) +} + +func (e *encoder) intv(tag string, in reflect.Value) { + s := strconv.FormatInt(in.Int(), 10) + e.emitScalar(s, "", tag, yaml_PLAIN_SCALAR_STYLE, nil, nil, nil, nil) +} + +func (e *encoder) uintv(tag string, in reflect.Value) { + s := strconv.FormatUint(in.Uint(), 10) + e.emitScalar(s, "", tag, yaml_PLAIN_SCALAR_STYLE, nil, nil, nil, nil) +} + +func (e *encoder) timev(tag string, in reflect.Value) { + t := in.Interface().(time.Time) + s := t.Format(time.RFC3339Nano) + e.emitScalar(s, "", tag, yaml_PLAIN_SCALAR_STYLE, nil, nil, nil, nil) +} + +func (e *encoder) floatv(tag string, in reflect.Value) { + // Issue #352: When formatting, use the precision of the underlying value + precision := 64 + if in.Kind() == reflect.Float32 { + precision = 32 + } + + s := strconv.FormatFloat(in.Float(), 'g', -1, precision) + switch s { + case "+Inf": + s = ".inf" + case "-Inf": + s = "-.inf" + case "NaN": + s = ".nan" + } + e.emitScalar(s, "", tag, yaml_PLAIN_SCALAR_STYLE, nil, nil, nil, nil) +} + +func (e *encoder) nilv() { + e.emitScalar("null", "", "", yaml_PLAIN_SCALAR_STYLE, nil, nil, nil, nil) +} + +func (e *encoder) emitScalar(value, anchor, tag string, style yaml_scalar_style_t, head, line, foot, tail []byte) { + // TODO Kill this function. Replace all initialize calls by their underlining Go literals. + implicit := tag == "" + if !implicit { + tag = longTag(tag) + } + e.must(yaml_scalar_event_initialize(&e.event, []byte(anchor), []byte(tag), []byte(value), implicit, implicit, style)) + e.event.head_comment = head + e.event.line_comment = line + e.event.foot_comment = foot + e.event.tail_comment = tail + e.emit() +} + +func (e *encoder) nodev(in reflect.Value) { + e.node(in.Interface().(*Node), "") +} + +func (e *encoder) node(node *Node, tail string) { + // Zero nodes behave as nil. + if node.Kind == 0 && node.IsZero() { + e.nilv() + return + } + + // If the tag was not explicitly requested, and dropping it won't change the + // implicit tag of the value, don't include it in the presentation. + var tag = node.Tag + var stag = shortTag(tag) + var forceQuoting bool + if tag != "" && node.Style&TaggedStyle == 0 { + if node.Kind == ScalarNode { + if stag == strTag && node.Style&(SingleQuotedStyle|DoubleQuotedStyle|LiteralStyle|FoldedStyle) != 0 { + tag = "" + } else { + rtag, _ := resolve("", node.Value) + if rtag == stag { + tag = "" + } else if stag == strTag { + tag = "" + forceQuoting = true + } + } + } else { + var rtag string + switch node.Kind { + case MappingNode: + rtag = mapTag + case SequenceNode: + rtag = seqTag + } + if rtag == stag { + tag = "" + } + } + } + + switch node.Kind { + case DocumentNode: + yaml_document_start_event_initialize(&e.event, nil, nil, true) + e.event.head_comment = []byte(node.HeadComment) + e.emit() + for _, node := range node.Content { + e.node(node, "") + } + yaml_document_end_event_initialize(&e.event, true) + e.event.foot_comment = []byte(node.FootComment) + e.emit() + + case SequenceNode: + style := yaml_BLOCK_SEQUENCE_STYLE + if node.Style&FlowStyle != 0 { + style = yaml_FLOW_SEQUENCE_STYLE + } + e.must(yaml_sequence_start_event_initialize(&e.event, []byte(node.Anchor), []byte(longTag(tag)), tag == "", style)) + e.event.head_comment = []byte(node.HeadComment) + e.emit() + for _, node := range node.Content { + e.node(node, "") + } + e.must(yaml_sequence_end_event_initialize(&e.event)) + e.event.line_comment = []byte(node.LineComment) + e.event.foot_comment = []byte(node.FootComment) + e.emit() + + case MappingNode: + style := yaml_BLOCK_MAPPING_STYLE + if node.Style&FlowStyle != 0 { + style = yaml_FLOW_MAPPING_STYLE + } + yaml_mapping_start_event_initialize(&e.event, []byte(node.Anchor), []byte(longTag(tag)), tag == "", style) + e.event.tail_comment = []byte(tail) + e.event.head_comment = []byte(node.HeadComment) + e.emit() + + // The tail logic below moves the foot comment of prior keys to the following key, + // since the value for each key may be a nested structure and the foot needs to be + // processed only the entirety of the value is streamed. The last tail is processed + // with the mapping end event. + var tail string + for i := 0; i+1 < len(node.Content); i += 2 { + k := node.Content[i] + foot := k.FootComment + if foot != "" { + kopy := *k + kopy.FootComment = "" + k = &kopy + } + e.node(k, tail) + tail = foot + + v := node.Content[i+1] + e.node(v, "") + } + + yaml_mapping_end_event_initialize(&e.event) + e.event.tail_comment = []byte(tail) + e.event.line_comment = []byte(node.LineComment) + e.event.foot_comment = []byte(node.FootComment) + e.emit() + + case AliasNode: + yaml_alias_event_initialize(&e.event, []byte(node.Value)) + e.event.head_comment = []byte(node.HeadComment) + e.event.line_comment = []byte(node.LineComment) + e.event.foot_comment = []byte(node.FootComment) + e.emit() + + case ScalarNode: + value := node.Value + if !utf8.ValidString(value) { + if stag == binaryTag { + failf("explicitly tagged !!binary data must be base64-encoded") + } + if stag != "" { + failf("cannot marshal invalid UTF-8 data as %s", stag) + } + // It can't be encoded directly as YAML so use a binary tag + // and encode it as base64. + tag = binaryTag + value = encodeBase64(value) + } + + style := yaml_PLAIN_SCALAR_STYLE + switch { + case node.Style&DoubleQuotedStyle != 0: + style = yaml_DOUBLE_QUOTED_SCALAR_STYLE + case node.Style&SingleQuotedStyle != 0: + style = yaml_SINGLE_QUOTED_SCALAR_STYLE + case node.Style&LiteralStyle != 0: + style = yaml_LITERAL_SCALAR_STYLE + case node.Style&FoldedStyle != 0: + style = yaml_FOLDED_SCALAR_STYLE + case strings.Contains(value, "\n"): + style = yaml_LITERAL_SCALAR_STYLE + case forceQuoting: + style = yaml_DOUBLE_QUOTED_SCALAR_STYLE + } + + e.emitScalar(value, node.Anchor, tag, style, []byte(node.HeadComment), []byte(node.LineComment), []byte(node.FootComment), []byte(tail)) + default: + failf("cannot encode node with unknown kind %d", node.Kind) + } +} diff --git a/go/internal/forked/kyaml/internal/forked/github.com/go-yaml/yaml/encode_test.go b/go/internal/forked/kyaml/internal/forked/github.com/go-yaml/yaml/encode_test.go new file mode 100644 index 000000000..f419410b5 --- /dev/null +++ b/go/internal/forked/kyaml/internal/forked/github.com/go-yaml/yaml/encode_test.go @@ -0,0 +1,883 @@ +// +// Copyright (c) 2011-2019 Canonical Ltd +// +// Licensed under the Apache License, Version 2.0 (the "License"); +// you may not use this file except in compliance with the License. +// You may obtain a copy of the License at +// +// http://www.apache.org/licenses/LICENSE-2.0 +// +// Unless required by applicable law or agreed to in writing, software +// distributed under the License is distributed on an "AS IS" BASIS, +// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. +// See the License for the specific language governing permissions and +// limitations under the License. + +package yaml_test + +import ( + "bytes" + "fmt" + "math" + "strconv" + "strings" + "time" + + "net" + "os" + + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/internal/forked/github.com/go-yaml/yaml" +) + +var marshalIntTest = 123 + +var marshalTests = []struct { + value interface{} + data string + compact string +}{ + { + nil, + "null\n", + "null\n", + }, { + (*marshalerType)(nil), + "null\n", + "null\n", + }, { + &struct{}{}, + "{}\n", + "{}\n", + }, { + map[string]string{"v": "hi"}, + "v: hi\n", + "v: hi\n", + }, { + map[string]interface{}{"v": "hi"}, + "v: hi\n", + "v: hi\n", + }, { + map[string]string{"v": "true"}, + "v: \"true\"\n", + "v: \"true\"\n", + }, { + map[string]string{"v": "false"}, + "v: \"false\"\n", + "v: \"false\"\n", + }, { + map[string]interface{}{"v": true}, + "v: true\n", + "v: true\n", + }, { + map[string]interface{}{"v": false}, + "v: false\n", + "v: false\n", + }, { + map[string]interface{}{"v": 10}, + "v: 10\n", + "v: 10\n", + }, { + map[string]interface{}{"v": -10}, + "v: -10\n", + "v: -10\n", + }, { + map[string]uint{"v": 42}, + "v: 42\n", + "v: 42\n", + }, { + map[string]interface{}{"v": int64(4294967296)}, + "v: 4294967296\n", + "v: 4294967296\n", + }, { + map[string]int64{"v": int64(4294967296)}, + "v: 4294967296\n", + "v: 4294967296\n", + }, { + map[string]uint64{"v": 4294967296}, + "v: 4294967296\n", + "v: 4294967296\n", + }, { + map[string]interface{}{"v": "10"}, + "v: \"10\"\n", + "v: \"10\"\n", + }, { + map[string]interface{}{"v": 0.1}, + "v: 0.1\n", + "v: 0.1\n", + }, { + map[string]interface{}{"v": float64(0.1)}, + "v: 0.1\n", + "v: 0.1\n", + }, { + map[string]interface{}{"v": float32(0.99)}, + "v: 0.99\n", + "v: 0.99\n", + }, { + map[string]interface{}{"v": -0.1}, + "v: -0.1\n", + "v: -0.1\n", + }, { + map[string]interface{}{"v": math.Inf(+1)}, + "v: .inf\n", + "v: .inf\n", + }, { + map[string]interface{}{"v": math.Inf(-1)}, + "v: -.inf\n", + "v: -.inf\n", + }, { + map[string]interface{}{"v": math.NaN()}, + "v: .nan\n", + "v: .nan\n", + }, { + map[string]interface{}{"v": nil}, + "v: null\n", + "v: null\n", + }, { + map[string]interface{}{"v": ""}, + "v: \"\"\n", + "v: \"\"\n", + }, { + map[string][]string{"v": {"A", "B"}}, + "v:\n - A\n - B\n", + "v:\n - A\n - B\n", + }, { + map[string][]string{"v": {"A", "B\nC"}}, + "v:\n - A\n - |-\n B\n C\n", + "v:\n - A\n - |-\n B\n C\n", + }, { + map[string][]interface{}{"v": {"A", 1, map[string][]int{"B": {2, 3}}}}, + "v:\n - A\n - 1\n - B:\n - 2\n - 3\n", + "v:\n - A\n - 1\n - B:\n - 2\n - 3\n", + }, { + map[string]interface{}{"a": map[interface{}]interface{}{"b": "c"}}, + "a:\n b: c\n", + "a:\n b: c\n", + }, { + map[string]interface{}{"a": "-"}, + "a: '-'\n", + "a: '-'\n", + }, + + // Simple values. + { + &marshalIntTest, + "123\n", + "123\n", + }, + + // Structures + { + &struct{ Hello string }{"world"}, + "hello: world\n", + "hello: world\n", + }, { + &struct { + A struct { + B string + } + }{struct{ B string }{"c"}}, + "a:\n b: c\n", + "a:\n b: c\n", + }, { + &struct { + A *struct { + B string + } + }{&struct{ B string }{"c"}}, + "a:\n b: c\n", + "a:\n b: c\n", + }, { + &struct { + A *struct { + B string + } + }{}, + "a: null\n", + "a: null\n", + }, { + &struct{ A int }{1}, + "a: 1\n", + "a: 1\n", + }, { + &struct{ A []int }{[]int{1, 2}}, + "a:\n - 1\n - 2\n", + "a:\n - 1\n - 2\n", + }, { + &struct{ A [2]int }{[2]int{1, 2}}, + "a:\n - 1\n - 2\n", + "a:\n - 1\n - 2\n", + }, { + &struct { + B int "a" + }{1}, + "a: 1\n", + "a: 1\n", + }, { + &struct{ A bool }{true}, + "a: true\n", + "a: true\n", + }, { + &struct{ A string }{"true"}, + "a: \"true\"\n", + "a: \"true\"\n", + }, { + &struct{ A string }{"off"}, + "a: \"off\"\n", + "a: \"off\"\n", + }, + + // Conditional flag + { + &struct { + A int "a,omitempty" + B int "b,omitempty" + }{1, 0}, + "a: 1\n", + "a: 1\n", + }, { + &struct { + A int "a,omitempty" + B int "b,omitempty" + }{0, 0}, + "{}\n", + "{}\n", + }, { + &struct { + A *struct{ X, y int } "a,omitempty,flow" + }{&struct{ X, y int }{1, 2}}, + "a: {x: 1}\n", + "a: {x: 1}\n", + }, { + &struct { + A *struct{ X, y int } "a,omitempty,flow" + }{nil}, + "{}\n", + "{}\n", + }, { + &struct { + A *struct{ X, y int } "a,omitempty,flow" + }{&struct{ X, y int }{}}, + "a: {x: 0}\n", + "a: {x: 0}\n", + }, { + &struct { + A struct{ X, y int } "a,omitempty,flow" + }{struct{ X, y int }{1, 2}}, + "a: {x: 1}\n", + "a: {x: 1}\n", + }, { + &struct { + A struct{ X, y int } "a,omitempty,flow" + }{struct{ X, y int }{0, 1}}, + "{}\n", + "{}\n", + }, { + &struct { + A float64 "a,omitempty" + B float64 "b,omitempty" + }{1, 0}, + "a: 1\n", + "a: 1\n", + }, + { + &struct { + T1 time.Time "t1,omitempty" + T2 time.Time "t2,omitempty" + T3 *time.Time "t3,omitempty" + T4 *time.Time "t4,omitempty" + }{ + T2: time.Date(2018, 1, 9, 10, 40, 47, 0, time.UTC), + T4: newTime(time.Date(2098, 1, 9, 10, 40, 47, 0, time.UTC)), + }, + "t2: 2018-01-09T10:40:47Z\nt4: 2098-01-09T10:40:47Z\n", + "t2: 2018-01-09T10:40:47Z\nt4: 2098-01-09T10:40:47Z\n", + }, + // Nil interface that implements Marshaler. + { + map[string]yaml.Marshaler{ + "a": nil, + }, + "a: null\n", + "a: null\n", + }, + + // Flow flag + { + &struct { + A []int "a,flow" + }{[]int{1, 2}}, + "a: [1, 2]\n", + "a: [1, 2]\n", + }, { + &struct { + A map[string]string "a,flow" + }{map[string]string{"b": "c", "d": "e"}}, + "a: {b: c, d: e}\n", + "a: {b: c, d: e}\n", + }, { + &struct { + A struct { + B, D string + } "a,flow" + }{struct{ B, D string }{"c", "e"}}, + "a: {b: c, d: e}\n", + "a: {b: c, d: e}\n", + }, { + &struct { + A string "a,flow" + }{"b\nc"}, + "a: \"b\\nc\"\n", + "a: \"b\\nc\"\n", + }, + + // Unexported field + { + &struct { + u int + A int + }{0, 1}, + "a: 1\n", + "a: 1\n", + }, + + // Ignored field + { + &struct { + A int + B int "-" + }{1, 2}, + "a: 1\n", + "a: 1\n", + }, + + // Struct inlining + { + &struct { + A int + C inlineB `yaml:",inline"` + }{1, inlineB{2, inlineC{3}}}, + "a: 1\nb: 2\nc: 3\n", + "a: 1\nb: 2\nc: 3\n", + }, + // Struct inlining as a pointer + { + &struct { + A int + C *inlineB `yaml:",inline"` + }{1, &inlineB{2, inlineC{3}}}, + "a: 1\nb: 2\nc: 3\n", + "a: 1\nb: 2\nc: 3\n", + }, { + &struct { + A int + C *inlineB `yaml:",inline"` + }{1, nil}, + "a: 1\n", + "a: 1\n", + }, { + &struct { + A int + D *inlineD `yaml:",inline"` + }{1, &inlineD{&inlineC{3}, 4}}, + "a: 1\nc: 3\nd: 4\n", + "a: 1\nc: 3\nd: 4\n", + }, + + // Map inlining + { + &struct { + A int + C map[string]int `yaml:",inline"` + }{1, map[string]int{"b": 2, "c": 3}}, + "a: 1\nb: 2\nc: 3\n", + "a: 1\nb: 2\nc: 3\n", + }, + + // Duration + { + map[string]time.Duration{"a": 3 * time.Second}, + "a: 3s\n", + "a: 3s\n", + }, + + // Issue #24: bug in map merging logic. + { + map[string]string{"a": ""}, + "a: \n", + "a: \n", + }, + + // Issue #34: marshal unsupported base 60 floats quoted for compatibility + // with old YAML 1.1 parsers. + { + map[string]string{"a": "1:1"}, + "a: \"1:1\"\n", + "a: \"1:1\"\n", + }, + + // Binary data. + { + map[string]string{"a": "\x00"}, + "a: \"\\0\"\n", + "a: \"\\0\"\n", + }, { + map[string]string{"a": "\x80\x81\x82"}, + "a: !!binary gIGC\n", + "a: !!binary gIGC\n", + }, { + map[string]string{"a": strings.Repeat("\x90", 54)}, + "a: !!binary |\n " + strings.Repeat("kJCQ", 17) + "kJ\n CQ\n", + "a: !!binary |\n " + strings.Repeat("kJCQ", 17) + "kJ\n CQ\n", + }, + + // Encode unicode as utf-8 rather than in escaped form. + { + map[string]string{"a": "你好"}, + "a: 你好\n", + "a: 你好\n", + }, + + // Support encoding.TextMarshaler. + { + map[string]net.IP{"a": net.IPv4(1, 2, 3, 4)}, + "a: 1.2.3.4\n", + "a: 1.2.3.4\n", + }, + // time.Time gets a timestamp tag. + { + map[string]time.Time{"a": time.Date(2015, 2, 24, 18, 19, 39, 0, time.UTC)}, + "a: 2015-02-24T18:19:39Z\n", + "a: 2015-02-24T18:19:39Z\n", + }, + { + map[string]*time.Time{"a": newTime(time.Date(2015, 2, 24, 18, 19, 39, 0, time.UTC))}, + "a: 2015-02-24T18:19:39Z\n", + "a: 2015-02-24T18:19:39Z\n", + }, + { + // This is confirmed to be properly decoded in Python (libyaml) without a timestamp tag. + map[string]time.Time{"a": time.Date(2015, 2, 24, 18, 19, 39, 123456789, time.FixedZone("FOO", -3*60*60))}, + "a: 2015-02-24T18:19:39.123456789-03:00\n", + "a: 2015-02-24T18:19:39.123456789-03:00\n", + }, + // Ensure timestamp-like strings are quoted. + { + map[string]string{"a": "2015-02-24T18:19:39Z"}, + "a: \"2015-02-24T18:19:39Z\"\n", + "a: \"2015-02-24T18:19:39Z\"\n", + }, + + // Ensure strings containing ": " are quoted (reported as PR #43, but not reproducible). + { + map[string]string{"a": "b: c"}, + "a: 'b: c'\n", + "a: 'b: c'\n", + }, + + // Containing hash mark ('#') in string should be quoted + { + map[string]string{"a": "Hello #comment"}, + "a: 'Hello #comment'\n", + "a: 'Hello #comment'\n", + }, + { + map[string]string{"a": "你好 #comment"}, + "a: '你好 #comment'\n", + "a: '你好 #comment'\n", + }, + + // Ensure MarshalYAML also gets called on the result of MarshalYAML itself. + { + &marshalerType{marshalerType{true}}, + "true\n", + "true\n", + }, { + &marshalerType{&marshalerType{true}}, + "true\n", + "true\n", + }, + + // Check indentation of maps inside sequences inside maps. + { + map[string]interface{}{"a": map[string]interface{}{"b": []map[string]int{{"c": 1, "d": 2}}}}, + "a:\n b:\n - c: 1\n d: 2\n", + "a:\n b:\n - c: 1\n d: 2\n", + }, + + // Strings with tabs were disallowed as literals (issue #471). + { + map[string]string{"a": "\tB\n\tC\n"}, + "a: |\n \tB\n \tC\n", + "a: |\n \tB\n \tC\n", + }, + + // Ensure that strings do not wrap + { + map[string]string{"a": "abcdefghijklmnopqrstuvwxyz ABCDEFGHIJKLMNOPQRSTUVWXYZ 1234567890 abcdefghijklmnopqrstuvwxyz ABCDEFGHIJKLMNOPQRSTUVWXYZ 1234567890 "}, + "a: 'abcdefghijklmnopqrstuvwxyz ABCDEFGHIJKLMNOPQRSTUVWXYZ 1234567890 abcdefghijklmnopqrstuvwxyz ABCDEFGHIJKLMNOPQRSTUVWXYZ 1234567890 '\n", + "a: 'abcdefghijklmnopqrstuvwxyz ABCDEFGHIJKLMNOPQRSTUVWXYZ 1234567890 abcdefghijklmnopqrstuvwxyz ABCDEFGHIJKLMNOPQRSTUVWXYZ 1234567890 '\n", + }, + + // yaml.Node + { + &struct { + Value yaml.Node + }{ + yaml.Node{ + Kind: yaml.ScalarNode, + Tag: "!!str", + Value: "foo", + Style: yaml.SingleQuotedStyle, + }, + }, + "value: 'foo'\n", + "value: 'foo'\n", + }, { + yaml.Node{ + Kind: yaml.ScalarNode, + Tag: "!!str", + Value: "foo", + Style: yaml.SingleQuotedStyle, + }, + "'foo'\n", + "'foo'\n", + }, + + // Enforced tagging with shorthand notation (issue #616). + { + &struct { + Value yaml.Node + }{ + yaml.Node{ + Kind: yaml.ScalarNode, + Style: yaml.TaggedStyle, + Value: "foo", + Tag: "!!str", + }, + }, + "value: !!str foo\n", + "value: !!str foo\n", + }, { + &struct { + Value yaml.Node + }{ + yaml.Node{ + Kind: yaml.MappingNode, + Style: yaml.TaggedStyle, + Tag: "!!map", + }, + }, + "value: !!map {}\n", + "value: !!map {}\n", + }, { + &struct { + Value yaml.Node + }{ + yaml.Node{ + Kind: yaml.SequenceNode, + Style: yaml.TaggedStyle, + Tag: "!!seq", + }, + }, + "value: !!seq []\n", + "value: !!seq []\n", + }, +} + +func (s *S) TestMarshal(c *C) { + defer os.Setenv("TZ", os.Getenv("TZ")) + os.Setenv("TZ", "UTC") + for i, item := range marshalTests { + c.Logf("test %d: %q", i, item.data) + data, err := yaml.Marshal(item.value) + c.Assert(err, IsNil) + c.Assert(string(data), Equals, item.data) + } +} + +func (s *S) TestEncoderCompactIndents(c *C) { + for i, item := range marshalTests { + c.Logf("test %d. %q", i, item.data) + var buf bytes.Buffer + enc := yaml.NewEncoder(&buf) + enc.CompactSeqIndent() + err := enc.Encode(item.value) + c.Assert(err, Equals, nil) + err = enc.Close() + c.Assert(err, Equals, nil) + c.Assert(buf.String(), Equals, item.compact) + } +} + +func (s *S) TestEncoderSingleDocument(c *C) { + for i, item := range marshalTests { + c.Logf("test %d. %q", i, item.data) + var buf bytes.Buffer + enc := yaml.NewEncoder(&buf) + err := enc.Encode(item.value) + c.Assert(err, Equals, nil) + err = enc.Close() + c.Assert(err, Equals, nil) + c.Assert(buf.String(), Equals, item.data) + } +} + +func (s *S) TestEncoderMultipleDocuments(c *C) { + var buf bytes.Buffer + enc := yaml.NewEncoder(&buf) + err := enc.Encode(map[string]string{"a": "b"}) + c.Assert(err, Equals, nil) + err = enc.Encode(map[string]string{"c": "d"}) + c.Assert(err, Equals, nil) + err = enc.Close() + c.Assert(err, Equals, nil) + c.Assert(buf.String(), Equals, "a: b\n---\nc: d\n") +} + +func (s *S) TestEncoderWriteError(c *C) { + enc := yaml.NewEncoder(errorWriter{}) + err := enc.Encode(map[string]string{"a": "b"}) + c.Assert(err, ErrorMatches, `yaml: write error: some write error`) // Data not flushed yet +} + +type errorWriter struct{} + +func (errorWriter) Write([]byte) (int, error) { + return 0, fmt.Errorf("some write error") +} + +var marshalErrorTests = []struct { + value interface{} + error string + panic string +}{{ + value: &struct { + B int + inlineB ",inline" + }{1, inlineB{2, inlineC{3}}}, + panic: `duplicated key 'b' in struct struct \{ B int; .*`, +}, { + value: &struct { + A int + B map[string]int ",inline" + }{1, map[string]int{"a": 2}}, + panic: `cannot have key "a" in inlined map: conflicts with struct field`, +}} + +func (s *S) TestMarshalErrors(c *C) { + for _, item := range marshalErrorTests { + if item.panic != "" { + c.Assert(func() { yaml.Marshal(item.value) }, PanicMatches, item.panic) + } else { + _, err := yaml.Marshal(item.value) + c.Assert(err, ErrorMatches, item.error) + } + } +} + +func (s *S) TestMarshalTypeCache(c *C) { + var data []byte + var err error + func() { + type T struct{ A int } + data, err = yaml.Marshal(&T{}) + c.Assert(err, IsNil) + }() + func() { + type T struct{ B int } + data, err = yaml.Marshal(&T{}) + c.Assert(err, IsNil) + }() + c.Assert(string(data), Equals, "b: 0\n") +} + +var marshalerTests = []struct { + data string + value interface{} +}{ + {"_:\n hi: there\n", map[interface{}]interface{}{"hi": "there"}}, + {"_:\n - 1\n - A\n", []interface{}{1, "A"}}, + {"_: 10\n", 10}, + {"_: null\n", nil}, + {"_: BAR!\n", "BAR!"}, +} + +type marshalerType struct { + value interface{} +} + +func (o marshalerType) MarshalText() ([]byte, error) { + panic("MarshalText called on type with MarshalYAML") +} + +func (o marshalerType) MarshalYAML() (interface{}, error) { + return o.value, nil +} + +type marshalerValue struct { + Field marshalerType "_" +} + +func (s *S) TestMarshaler(c *C) { + for _, item := range marshalerTests { + obj := &marshalerValue{} + obj.Field.value = item.value + data, err := yaml.Marshal(obj) + c.Assert(err, IsNil) + c.Assert(string(data), Equals, string(item.data)) + } +} + +func (s *S) TestMarshalerWholeDocument(c *C) { + obj := &marshalerType{} + obj.value = map[string]string{"hello": "world!"} + data, err := yaml.Marshal(obj) + c.Assert(err, IsNil) + c.Assert(string(data), Equals, "hello: world!\n") +} + +type failingMarshaler struct{} + +func (ft *failingMarshaler) MarshalYAML() (interface{}, error) { + return nil, failingErr +} + +func (s *S) TestMarshalerError(c *C) { + _, err := yaml.Marshal(&failingMarshaler{}) + c.Assert(err, Equals, failingErr) +} + +func (s *S) TestSetIndent(c *C) { + var buf bytes.Buffer + enc := yaml.NewEncoder(&buf) + enc.SetIndent(8) + err := enc.Encode(map[string]interface{}{"a": map[string]interface{}{"b": map[string]string{"c": "d"}}}) + c.Assert(err, Equals, nil) + err = enc.Close() + c.Assert(err, Equals, nil) + c.Assert(buf.String(), Equals, "a:\n b:\n c: d\n") +} + +func (s *S) TestCompactSeqIndentDefault(c *C) { + var buf bytes.Buffer + enc := yaml.NewEncoder(&buf) + enc.CompactSeqIndent() + err := enc.Encode(map[string]interface{}{"a": []string{"b", "c"}}) + c.Assert(err, Equals, nil) + err = enc.Close() + c.Assert(err, Equals, nil) + // The default indent is 4, so these sequence elements get 2 indents as before + c.Assert(buf.String(), Equals, `a: + - b + - c +`) +} + +func (s *S) TestCompactSequenceWithSetIndent(c *C) { + var buf bytes.Buffer + enc := yaml.NewEncoder(&buf) + enc.CompactSeqIndent() + enc.SetIndent(2) + err := enc.Encode(map[string]interface{}{"a": []string{"b", "c"}}) + c.Assert(err, Equals, nil) + err = enc.Close() + c.Assert(err, Equals, nil) + // The sequence indent is 2, so these sequence elements don't get indented at all + c.Assert(buf.String(), Equals, `a: +- b +- c +`) +} + +func (s *S) TestNewLinePreserved(c *C) { + obj := &marshalerValue{} + obj.Field.value = "a:\n b:\n c: d\n" + data, err := yaml.Marshal(obj) + c.Assert(err, IsNil) + c.Assert(string(data), Equals, "_: |\n a:\n b:\n c: d\n") + + obj.Field.value = "\na:\n b:\n c: d\n" + data, err = yaml.Marshal(obj) + c.Assert(err, IsNil) + // the newline at the start of the file should be preserved + c.Assert(string(data), Equals, "_: |4\n\n a:\n b:\n c: d\n") +} + +func (s *S) TestSortedOutput(c *C) { + order := []interface{}{ + false, + true, + 1, + uint(1), + 1.0, + 1.1, + 1.2, + 2, + uint(2), + 2.0, + 2.1, + "", + ".1", + ".2", + ".a", + "1", + "2", + "a!10", + "a/0001", + "a/002", + "a/3", + "a/10", + "a/11", + "a/0012", + "a/100", + "a~10", + "ab/1", + "b/1", + "b/01", + "b/2", + "b/02", + "b/3", + "b/03", + "b1", + "b01", + "b3", + "c2.10", + "c10.2", + "d1", + "d7", + "d7abc", + "d12", + "d12a", + "e2b", + "e4b", + "e21a", + } + m := make(map[interface{}]int) + for _, k := range order { + m[k] = 1 + } + data, err := yaml.Marshal(m) + c.Assert(err, IsNil) + out := "\n" + string(data) + last := 0 + for i, k := range order { + repr := fmt.Sprint(k) + if s, ok := k.(string); ok { + if _, err = strconv.ParseFloat(repr, 32); s == "" || err == nil { + repr = `"` + repr + `"` + } + } + index := strings.Index(out, "\n"+repr+":") + if index == -1 { + c.Fatalf("%#v is not in the output: %#v", k, out) + } + if index < last { + c.Fatalf("%#v was generated before %#v: %q", k, order[i-1], out) + } + last = index + } +} + +func newTime(t time.Time) *time.Time { + return &t +} diff --git a/go/internal/forked/kyaml/internal/forked/github.com/go-yaml/yaml/example_embedded_test.go b/go/internal/forked/kyaml/internal/forked/github.com/go-yaml/yaml/example_embedded_test.go new file mode 100644 index 000000000..30834dc85 --- /dev/null +++ b/go/internal/forked/kyaml/internal/forked/github.com/go-yaml/yaml/example_embedded_test.go @@ -0,0 +1,56 @@ +// +// Copyright (c) 2011-2019 Canonical Ltd +// +// Licensed under the Apache License, Version 2.0 (the "License"); +// you may not use this file except in compliance with the License. +// You may obtain a copy of the License at +// +// http://www.apache.org/licenses/LICENSE-2.0 +// +// Unless required by applicable law or agreed to in writing, software +// distributed under the License is distributed on an "AS IS" BASIS, +// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. +// See the License for the specific language governing permissions and +// limitations under the License. + +package yaml_test + +import ( + "fmt" + "log" + + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/internal/forked/github.com/go-yaml/yaml" +) + +// An example showing how to unmarshal embedded +// structs from YAML. + +type StructA struct { + A string `yaml:"a"` +} + +type StructB struct { + // Embedded structs are not treated as embedded in YAML by default. To do that, + // add the ",inline" annotation below + StructA `yaml:",inline"` + B string `yaml:"b"` +} + +var data = ` +a: a string from struct A +b: a string from struct B +` + +func ExampleUnmarshal_embedded() { + var b StructB + + err := yaml.Unmarshal([]byte(data), &b) + if err != nil { + log.Fatalf("cannot unmarshal data: %v", err) + } + fmt.Println(b.A) + fmt.Println(b.B) + // Output: + // a string from struct A + // a string from struct B +} diff --git a/go/internal/forked/kyaml/internal/forked/github.com/go-yaml/yaml/limit_test.go b/go/internal/forked/kyaml/internal/forked/github.com/go-yaml/yaml/limit_test.go new file mode 100644 index 000000000..ffbd6ca1c --- /dev/null +++ b/go/internal/forked/kyaml/internal/forked/github.com/go-yaml/yaml/limit_test.go @@ -0,0 +1,127 @@ +package yaml_test + +import ( + "strings" + "testing" + + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/internal/forked/github.com/go-yaml/yaml" +) + +var limitTests = []struct { + name string + data []byte + error string +}{ + { + name: "1000kb of maps with 100 aliases", + data: []byte(`{a: &a [{a}` + strings.Repeat(`,{a}`, 1000*1024/4-100) + `], b: &b [*a` + strings.Repeat(`,*a`, 99) + `]}`), + error: "yaml: document contains excessive aliasing", + }, { + name: "1000kb of deeply nested slices", + data: []byte(strings.Repeat(`[`, 1000*1024)), + error: "yaml: exceeded max depth of 10000", + }, { + name: "1000kb of deeply nested maps", + data: []byte("x: " + strings.Repeat(`{`, 1000*1024)), + error: "yaml: exceeded max depth of 10000", + }, { + name: "1000kb of deeply nested indents", + data: []byte(strings.Repeat(`- `, 1000*1024)), + error: "yaml: exceeded max depth of 10000", + }, { + name: "1000kb of 1000-indent lines", + data: []byte(strings.Repeat(strings.Repeat(`- `, 1000)+"\n", 1024/2)), + }, + {name: "1kb of maps", data: []byte(`a: &a [{a}` + strings.Repeat(`,{a}`, 1*1024/4-1) + `]`)}, + {name: "10kb of maps", data: []byte(`a: &a [{a}` + strings.Repeat(`,{a}`, 10*1024/4-1) + `]`)}, + {name: "100kb of maps", data: []byte(`a: &a [{a}` + strings.Repeat(`,{a}`, 100*1024/4-1) + `]`)}, + {name: "1000kb of maps", data: []byte(`a: &a [{a}` + strings.Repeat(`,{a}`, 1000*1024/4-1) + `]`)}, + {name: "1000kb slice nested at max-depth", data: []byte(strings.Repeat(`[`, 10000) + `1` + strings.Repeat(`,1`, 1000*1024/2-20000-1) + strings.Repeat(`]`, 10000))}, + {name: "1000kb slice nested in maps at max-depth", data: []byte("{a,b:\n" + strings.Repeat(" {a,b:", 10000-2) + ` [1` + strings.Repeat(",1", 1000*1024/2-6*10000-1) + `]` + strings.Repeat(`}`, 10000-1))}, + {name: "1000kb of 10000-nested lines", data: []byte(strings.Repeat(`- `+strings.Repeat(`[`, 10000)+strings.Repeat(`]`, 10000)+"\n", 1000*1024/20000))}, +} + +func (s *S) TestLimits(c *C) { + if testing.Short() { + return + } + for _, tc := range limitTests { + var v interface{} + err := yaml.Unmarshal(tc.data, &v) + if len(tc.error) > 0 { + c.Assert(err, ErrorMatches, tc.error, Commentf("testcase: %s", tc.name)) + } else { + c.Assert(err, IsNil, Commentf("testcase: %s", tc.name)) + } + } +} + +func Benchmark1000KB100Aliases(b *testing.B) { + benchmark(b, "1000kb of maps with 100 aliases") +} +func Benchmark1000KBDeeplyNestedSlices(b *testing.B) { + benchmark(b, "1000kb of deeply nested slices") +} +func Benchmark1000KBDeeplyNestedMaps(b *testing.B) { + benchmark(b, "1000kb of deeply nested maps") +} +func Benchmark1000KBDeeplyNestedIndents(b *testing.B) { + benchmark(b, "1000kb of deeply nested indents") +} +func Benchmark1000KB1000IndentLines(b *testing.B) { + benchmark(b, "1000kb of 1000-indent lines") +} +func Benchmark1KBMaps(b *testing.B) { + benchmark(b, "1kb of maps") +} +func Benchmark10KBMaps(b *testing.B) { + benchmark(b, "10kb of maps") +} +func Benchmark100KBMaps(b *testing.B) { + benchmark(b, "100kb of maps") +} +func Benchmark1000KBMaps(b *testing.B) { + benchmark(b, "1000kb of maps") +} + +func BenchmarkDeepSlice(b *testing.B) { + benchmark(b, "1000kb slice nested at max-depth") +} + +func BenchmarkDeepFlow(b *testing.B) { + benchmark(b, "1000kb slice nested in maps at max-depth") +} + +func Benchmark1000KBMaxDepthNested(b *testing.B) { + benchmark(b, "1000kb of 10000-nested lines") +} + +func benchmark(b *testing.B, name string) { + for _, t := range limitTests { + if t.name != name { + continue + } + + b.ResetTimer() + + for i := 0; i < b.N; i++ { + var v interface{} + err := yaml.Unmarshal(t.data, &v) + if len(t.error) > 0 { + if err == nil { + b.Errorf("expected error, got none") + } else if err.Error() != t.error { + b.Errorf("expected error '%s', got '%s'", t.error, err.Error()) + } + } else { + if err != nil { + b.Errorf("unexpected error: %v", err) + } + } + } + + return + } + + b.Errorf("testcase %q not found", name) +} diff --git a/go/internal/forked/kyaml/internal/forked/github.com/go-yaml/yaml/node_test.go b/go/internal/forked/kyaml/internal/forked/github.com/go-yaml/yaml/node_test.go new file mode 100644 index 000000000..177fe1daf --- /dev/null +++ b/go/internal/forked/kyaml/internal/forked/github.com/go-yaml/yaml/node_test.go @@ -0,0 +1,2886 @@ +// +// Copyright (c) 2011-2019 Canonical Ltd +// +// Licensed under the Apache License, Version 2.0 (the "License"); +// you may not use this file except in compliance with the License. +// You may obtain a copy of the License at +// +// http://www.apache.org/licenses/LICENSE-2.0 +// +// Unless required by applicable law or agreed to in writing, software +// distributed under the License is distributed on an "AS IS" BASIS, +// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. +// See the License for the specific language governing permissions and +// limitations under the License. + +package yaml_test + +import ( + "bytes" + "fmt" + "os" + + "io" + "strings" + + yaml2 "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/internal/forked/github.com/go-yaml/yaml" +) + +var nodeTests = []struct { + yaml string + node yaml2.yaml2 +}{ + { + "null\n", + yaml2.Node{ + Kind: yaml2.DocumentNode, + Line: 1, + Column: 1, + Content: []*yaml2.Node{{ + Kind: yaml2.ScalarNode, + Value: "null", + Tag: "!!null", + Line: 1, + Column: 1, + }}, + }, + }, { + "[encode]null\n", + yaml2.Node{}, + }, { + "foo\n", + yaml2.Node{ + Kind: yaml2.DocumentNode, + Line: 1, + Column: 1, + Content: []*yaml2.Node{{ + Kind: yaml2.ScalarNode, + Value: "foo", + Tag: "!!str", + Line: 1, + Column: 1, + }}, + }, + }, { + "\"foo\"\n", + yaml2.Node{ + Kind: yaml2.DocumentNode, + Line: 1, + Column: 1, + Content: []*yaml2.Node{{ + Kind: yaml2.ScalarNode, + Style: yaml2.DoubleQuotedStyle, + Value: "foo", + Tag: "!!str", + Line: 1, + Column: 1, + }}, + }, + }, { + "'foo'\n", + yaml2.Node{ + Kind: yaml2.DocumentNode, + Line: 1, + Column: 1, + Content: []*yaml2.Node{{ + Kind: yaml2.ScalarNode, + Style: yaml2.SingleQuotedStyle, + Value: "foo", + Tag: "!!str", + Line: 1, + Column: 1, + }}, + }, + }, { + "!!str 123\n", + yaml2.Node{ + Kind: yaml2.DocumentNode, + Line: 1, + Column: 1, + Content: []*yaml2.Node{{ + Kind: yaml2.ScalarNode, + Style: yaml2.TaggedStyle, + Value: "123", + Tag: "!!str", + Line: 1, + Column: 1, + }}, + }, + }, { + // Although the node isn't TaggedStyle, dropping the tag would change the value. + "[encode]!!binary gIGC\n", + yaml2.Node{ + Kind: yaml2.DocumentNode, + Line: 1, + Column: 1, + Content: []*yaml2.Node{{ + Kind: yaml2.ScalarNode, + Value: "gIGC", + Tag: "!!binary", + Line: 1, + Column: 1, + }}, + }, + }, { + // Item doesn't have a tag, but needs to be binary encoded due to its content. + "[encode]!!binary gIGC\n", + yaml2.Node{ + Kind: yaml2.DocumentNode, + Line: 1, + Column: 1, + Content: []*yaml2.Node{{ + Kind: yaml2.ScalarNode, + Value: "\x80\x81\x82", + Line: 1, + Column: 1, + }}, + }, + }, { + // Same, but with strings we can just quote them. + "[encode]\"123\"\n", + yaml2.Node{ + Kind: yaml2.DocumentNode, + Line: 1, + Column: 1, + Content: []*yaml2.Node{{ + Kind: yaml2.ScalarNode, + Value: "123", + Tag: "!!str", + Line: 1, + Column: 1, + }}, + }, + }, { + "!tag:something 123\n", + yaml2.Node{ + Kind: yaml2.DocumentNode, + Line: 1, + Column: 1, + Content: []*yaml2.Node{{ + Kind: yaml2.ScalarNode, + Style: yaml2.TaggedStyle, + Value: "123", + Tag: "!tag:something", + Line: 1, + Column: 1, + }}, + }, + }, { + "[encode]!tag:something 123\n", + yaml2.Node{ + Kind: yaml2.DocumentNode, + Line: 1, + Column: 1, + Content: []*yaml2.Node{{ + Kind: yaml2.ScalarNode, + Value: "123", + Tag: "!tag:something", + Line: 1, + Column: 1, + }}, + }, + }, { + "!tag:something {}\n", + yaml2.Node{ + Kind: yaml2.DocumentNode, + Line: 1, + Column: 1, + Content: []*yaml2.Node{{ + Kind: yaml2.MappingNode, + Style: yaml2.TaggedStyle | yaml2.FlowStyle, + Tag: "!tag:something", + Line: 1, + Column: 1, + }}, + }, + }, { + "[encode]!tag:something {}\n", + yaml2.Node{ + Kind: yaml2.DocumentNode, + Line: 1, + Column: 1, + Content: []*yaml2.Node{{ + Kind: yaml2.MappingNode, + Style: yaml2.FlowStyle, + Tag: "!tag:something", + Line: 1, + Column: 1, + }}, + }, + }, { + "!tag:something []\n", + yaml2.Node{ + Kind: yaml2.DocumentNode, + Line: 1, + Column: 1, + Content: []*yaml2.Node{{ + Kind: yaml2.SequenceNode, + Style: yaml2.TaggedStyle | yaml2.FlowStyle, + Tag: "!tag:something", + Line: 1, + Column: 1, + }}, + }, + }, { + "[encode]!tag:something []\n", + yaml2.Node{ + Kind: yaml2.DocumentNode, + Line: 1, + Column: 1, + Content: []*yaml2.Node{{ + Kind: yaml2.SequenceNode, + Style: yaml2.FlowStyle, + Tag: "!tag:something", + Line: 1, + Column: 1, + }}, + }, + }, { + "''\n", + yaml2.Node{ + Kind: yaml2.DocumentNode, + Line: 1, + Column: 1, + Content: []*yaml2.Node{{ + Kind: yaml2.ScalarNode, + Style: yaml2.SingleQuotedStyle, + Value: "", + Tag: "!!str", + Line: 1, + Column: 1, + }}, + }, + }, { + "|\n foo\n bar\n", + yaml2.Node{ + Kind: yaml2.DocumentNode, + Line: 1, + Column: 1, + Content: []*yaml2.Node{{ + Kind: yaml2.ScalarNode, + Style: yaml2.LiteralStyle, + Value: "foo\nbar\n", + Tag: "!!str", + Line: 1, + Column: 1, + }}, + }, + }, { + "true\n", + yaml2.Node{ + Kind: yaml2.DocumentNode, + Line: 1, + Column: 1, + Content: []*yaml2.Node{{ + Kind: yaml2.ScalarNode, + Value: "true", + Tag: "!!bool", + Line: 1, + Column: 1, + }}, + }, + }, { + "-10\n", + yaml2.Node{ + Kind: yaml2.DocumentNode, + Line: 1, + Column: 1, + Content: []*yaml2.Node{{ + Kind: yaml2.ScalarNode, + Value: "-10", + Tag: "!!int", + Line: 1, + Column: 1, + }}, + }, + }, { + "4294967296\n", + yaml2.Node{ + Kind: yaml2.DocumentNode, + Line: 1, + Column: 1, + Content: []*yaml2.Node{{ + Kind: yaml2.ScalarNode, + Value: "4294967296", + Tag: "!!int", + Line: 1, + Column: 1, + }}, + }, + }, { + "0.1000\n", + yaml2.Node{ + Kind: yaml2.DocumentNode, + Line: 1, + Column: 1, + Content: []*yaml2.Node{{ + Kind: yaml2.ScalarNode, + Value: "0.1000", + Tag: "!!float", + Line: 1, + Column: 1, + }}, + }, + }, { + "-.inf\n", + yaml2.Node{ + Kind: yaml2.DocumentNode, + Line: 1, + Column: 1, + Content: []*yaml2.Node{{ + Kind: yaml2.ScalarNode, + Value: "-.inf", + Tag: "!!float", + Line: 1, + Column: 1, + }}, + }, + }, { + ".nan\n", + yaml2.Node{ + Kind: yaml2.DocumentNode, + Line: 1, + Column: 1, + Content: []*yaml2.Node{{ + Kind: yaml2.ScalarNode, + Value: ".nan", + Tag: "!!float", + Line: 1, + Column: 1, + }}, + }, + }, { + "{}\n", + yaml2.Node{ + Kind: yaml2.DocumentNode, + Line: 1, + Column: 1, + Content: []*yaml2.Node{{ + Kind: yaml2.MappingNode, + Style: yaml2.FlowStyle, + Value: "", + Tag: "!!map", + Line: 1, + Column: 1, + }}, + }, + }, { + "a: b c\n", + yaml2.Node{ + Kind: yaml2.DocumentNode, + Line: 1, + Column: 1, + Content: []*yaml2.Node{{ + Kind: yaml2.MappingNode, + Value: "", + Tag: "!!map", + Line: 1, + Column: 1, + Content: []*yaml2.Node{{ + Kind: yaml2.ScalarNode, + Value: "a", + Tag: "!!str", + Line: 1, + Column: 1, + }, { + Kind: yaml2.ScalarNode, + Value: "b c", + Tag: "!!str", + Line: 1, + Column: 4, + }}, + }}, + }, + }, { + "a:\n b: c\n d: e\n", + yaml2.Node{ + Kind: yaml2.DocumentNode, + Line: 1, + Column: 1, + Content: []*yaml2.Node{{ + Kind: yaml2.MappingNode, + Tag: "!!map", + Line: 1, + Column: 1, + Content: []*yaml2.Node{{ + Kind: yaml2.ScalarNode, + Value: "a", + Tag: "!!str", + Line: 1, + Column: 1, + }, { + Kind: yaml2.MappingNode, + Tag: "!!map", + Line: 2, + Column: 3, + Content: []*yaml2.Node{{ + Kind: yaml2.ScalarNode, + Value: "b", + Tag: "!!str", + Line: 2, + Column: 3, + }, { + Kind: yaml2.ScalarNode, + Value: "c", + Tag: "!!str", + Line: 2, + Column: 6, + }, { + Kind: yaml2.ScalarNode, + Value: "d", + Tag: "!!str", + Line: 3, + Column: 3, + }, { + Kind: yaml2.ScalarNode, + Value: "e", + Tag: "!!str", + Line: 3, + Column: 6, + }}, + }}, + }}, + }, + }, { + "a:\n - b: c\n d: e\n", + yaml2.Node{ + Kind: yaml2.DocumentNode, + Line: 1, + Column: 1, + Content: []*yaml2.Node{{ + Kind: yaml2.MappingNode, + Tag: "!!map", + Line: 1, + Column: 1, + Content: []*yaml2.Node{{ + Kind: yaml2.ScalarNode, + Value: "a", + Tag: "!!str", + Line: 1, + Column: 1, + }, { + Kind: yaml2.SequenceNode, + Tag: "!!seq", + Line: 2, + Column: 3, + Content: []*yaml2.Node{{ + Kind: yaml2.MappingNode, + Tag: "!!map", + Line: 2, + Column: 5, + Content: []*yaml2.Node{{ + Kind: yaml2.ScalarNode, + Value: "b", + Tag: "!!str", + Line: 2, + Column: 5, + }, { + Kind: yaml2.ScalarNode, + Value: "c", + Tag: "!!str", + Line: 2, + Column: 8, + }, { + Kind: yaml2.ScalarNode, + Value: "d", + Tag: "!!str", + Line: 3, + Column: 5, + }, { + Kind: yaml2.ScalarNode, + Value: "e", + Tag: "!!str", + Line: 3, + Column: 8, + }}, + }}, + }}, + }}, + }, + }, { + "a: # AI\n - b\nc:\n - d\n", + yaml2.Node{ + Kind: yaml2.DocumentNode, + Line: 1, + Column: 1, + Content: []*yaml2.Node{{ + Kind: yaml2.MappingNode, + Tag: "!!map", + Line: 1, + Column: 1, + Content: []*yaml2.Node{{ + Kind: yaml2.ScalarNode, + Tag: "!!str", + Value: "a", + LineComment: "# AI", + Line: 1, + Column: 1, + }, { + Kind: yaml2.SequenceNode, + Tag: "!!seq", + Content: []*yaml2.Node{{ + Kind: yaml2.ScalarNode, + Tag: "!!str", + Value: "b", + Line: 2, + Column: 5, + }}, + Line: 2, + Column: 3, + }, { + Kind: yaml2.ScalarNode, + Tag: "!!str", + Value: "c", + Line: 3, + Column: 1, + }, { + Kind: yaml2.SequenceNode, + Tag: "!!seq", + Content: []*yaml2.Node{{ + Kind: yaml2.ScalarNode, + Tag: "!!str", + Value: "d", + Line: 4, + Column: 5, + }}, + Line: 4, + Column: 3, + }}, + }}, + }, + }, { + "[decode]a:\n # HM\n - # HB1\n # HB2\n b: # IB\n c # IC\n", + yaml2.Node{ + Kind: yaml2.DocumentNode, + Line: 1, + Column: 1, + Content: []*yaml2.Node{{ + Kind: yaml2.MappingNode, + Tag: "!!map", + Line: 1, + Column: 1, + Content: []*yaml2.Node{{ + Kind: yaml2.ScalarNode, + Style: 0x0, + Tag: "!!str", + Value: "a", + Line: 1, + Column: 1, + }, { + Kind: yaml2.SequenceNode, + Tag: "!!seq", + Line: 3, + Column: 3, + Content: []*yaml2.Node{{ + Kind: yaml2.MappingNode, + Tag: "!!map", + HeadComment: "# HM", + Line: 5, + Column: 5, + Content: []*yaml2.Node{{ + Kind: yaml2.ScalarNode, + Tag: "!!str", + Value: "b", + HeadComment: "# HB1\n# HB2", + LineComment: "# IB", + Line: 5, + Column: 5, + }, { + Kind: yaml2.ScalarNode, + Tag: "!!str", + Value: "c", + LineComment: "# IC", + Line: 6, + Column: 7, + }}, + }}, + }}, + }}, + }, + }, { + // When encoding the value above, it loses b's inline comment. + "[encode]a:\n # HM\n - # HB1\n # HB2\n b: c # IC\n", + yaml2.Node{ + Kind: yaml2.DocumentNode, + Line: 1, + Column: 1, + Content: []*yaml2.Node{{ + Kind: yaml2.MappingNode, + Tag: "!!map", + Line: 1, + Column: 1, + Content: []*yaml2.Node{{ + Kind: yaml2.ScalarNode, + Style: 0x0, + Tag: "!!str", + Value: "a", + Line: 1, + Column: 1, + }, { + Kind: yaml2.SequenceNode, + Tag: "!!seq", + Line: 3, + Column: 3, + Content: []*yaml2.Node{{ + Kind: yaml2.MappingNode, + Tag: "!!map", + HeadComment: "# HM", + Line: 5, + Column: 5, + Content: []*yaml2.Node{{ + Kind: yaml2.ScalarNode, + Tag: "!!str", + Value: "b", + HeadComment: "# HB1\n# HB2", + LineComment: "# IB", + Line: 5, + Column: 5, + }, { + Kind: yaml2.ScalarNode, + Tag: "!!str", + Value: "c", + LineComment: "# IC", + Line: 6, + Column: 7, + }}, + }}, + }}, + }}, + }, + }, { + // Multiple cases of comment inlining next to mapping keys. + "a: | # IA\n str\nb: >- # IB\n str\nc: # IC\n - str\nd: # ID\n str:\n", + yaml2.Node{ + Kind: yaml2.DocumentNode, + Line: 1, + Column: 1, + Content: []*yaml2.Node{{ + Kind: yaml2.MappingNode, + Tag: "!!map", + Line: 1, + Column: 1, + Content: []*yaml2.Node{{ + Kind: yaml2.ScalarNode, + Tag: "!!str", + Value: "a", + Line: 1, + Column: 1, + }, { + Kind: yaml2.ScalarNode, + Style: yaml2.LiteralStyle, + Tag: "!!str", + Value: "str\n", + LineComment: "# IA", + Line: 1, + Column: 4, + }, { + Kind: yaml2.ScalarNode, + Tag: "!!str", + Value: "b", + Line: 3, + Column: 1, + }, { + Kind: yaml2.ScalarNode, + Style: yaml2.FoldedStyle, + Tag: "!!str", + Value: "str", + LineComment: "# IB", + Line: 3, + Column: 4, + }, { + Kind: yaml2.ScalarNode, + Tag: "!!str", + Value: "c", + LineComment: "# IC", + Line: 5, + Column: 1, + }, { + Kind: yaml2.SequenceNode, + Tag: "!!seq", + Line: 6, + Column: 3, + Content: []*yaml2.Node{{ + Kind: yaml2.ScalarNode, + Tag: "!!str", + Value: "str", + Line: 6, + Column: 5, + }}, + }, { + Kind: yaml2.ScalarNode, + Tag: "!!str", + Value: "d", + LineComment: "# ID", + Line: 7, + Column: 1, + }, { + Kind: yaml2.MappingNode, + Tag: "!!map", + Line: 8, + Column: 3, + Content: []*yaml2.Node{{ + Kind: yaml2.ScalarNode, + Tag: "!!str", + Value: "str", + Line: 8, + Column: 3, + }, { + Kind: yaml2.ScalarNode, + Tag: "!!null", + Line: 8, + Column: 7, + }}, + }}, + }}, + }, + }, { + // Indentless sequence. + "[decode]a:\n# HM\n- # HB1\n # HB2\n b: # IB\n c # IC\n", + yaml2.Node{ + Kind: yaml2.DocumentNode, + Line: 1, + Column: 1, + Content: []*yaml2.Node{{ + Kind: yaml2.MappingNode, + Tag: "!!map", + Line: 1, + Column: 1, + Content: []*yaml2.Node{{ + Kind: yaml2.ScalarNode, + Tag: "!!str", + Value: "a", + Line: 1, + Column: 1, + }, { + Kind: yaml2.SequenceNode, + Tag: "!!seq", + Line: 3, + Column: 1, + Content: []*yaml2.Node{{ + Kind: yaml2.MappingNode, + Tag: "!!map", + HeadComment: "# HM", + Line: 5, + Column: 3, + Content: []*yaml2.Node{{ + Kind: yaml2.ScalarNode, + Tag: "!!str", + Value: "b", + HeadComment: "# HB1\n# HB2", + LineComment: "# IB", + Line: 5, + Column: 3, + }, { + Kind: yaml2.ScalarNode, + Tag: "!!str", + Value: "c", + LineComment: "# IC", + Line: 6, + Column: 5, + }}, + }}, + }}, + }}, + }, + }, { + "- a\n- b\n", + yaml2.Node{ + Kind: yaml2.DocumentNode, + Line: 1, + Column: 1, + Content: []*yaml2.Node{{ + Kind: yaml2.SequenceNode, + Value: "", + Tag: "!!seq", + Line: 1, + Column: 1, + Content: []*yaml2.Node{{ + Kind: yaml2.ScalarNode, + Value: "a", + Tag: "!!str", + Line: 1, + Column: 3, + }, { + Kind: yaml2.ScalarNode, + Value: "b", + Tag: "!!str", + Line: 2, + Column: 3, + }}, + }}, + }, + }, { + "- a\n- - b\n - c\n", + yaml2.Node{ + Kind: yaml2.DocumentNode, + Line: 1, + Column: 1, + Content: []*yaml2.Node{{ + Kind: yaml2.SequenceNode, + Tag: "!!seq", + Line: 1, + Column: 1, + Content: []*yaml2.Node{{ + Kind: yaml2.ScalarNode, + Value: "a", + Tag: "!!str", + Line: 1, + Column: 3, + }, { + Kind: yaml2.SequenceNode, + Tag: "!!seq", + Line: 2, + Column: 3, + Content: []*yaml2.Node{{ + Kind: yaml2.ScalarNode, + Value: "b", + Tag: "!!str", + Line: 2, + Column: 5, + }, { + Kind: yaml2.ScalarNode, + Value: "c", + Tag: "!!str", + Line: 3, + Column: 5, + }}, + }}, + }}, + }, + }, { + "[a, b]\n", + yaml2.Node{ + Kind: yaml2.DocumentNode, + Line: 1, + Column: 1, + Content: []*yaml2.Node{{ + Kind: yaml2.SequenceNode, + Style: yaml2.FlowStyle, + Value: "", + Tag: "!!seq", + Line: 1, + Column: 1, + Content: []*yaml2.Node{{ + Kind: yaml2.ScalarNode, + Value: "a", + Tag: "!!str", + Line: 1, + Column: 2, + }, { + Kind: yaml2.ScalarNode, + Value: "b", + Tag: "!!str", + Line: 1, + Column: 5, + }}, + }}, + }, + }, { + "- a\n- [b, c]\n", + yaml2.Node{ + Kind: yaml2.DocumentNode, + Line: 1, + Column: 1, + Content: []*yaml2.Node{{ + Kind: yaml2.SequenceNode, + Tag: "!!seq", + Line: 1, + Column: 1, + Content: []*yaml2.Node{{ + Kind: yaml2.ScalarNode, + Value: "a", + Tag: "!!str", + Line: 1, + Column: 3, + }, { + Kind: yaml2.SequenceNode, + Tag: "!!seq", + Style: yaml2.FlowStyle, + Line: 2, + Column: 3, + Content: []*yaml2.Node{{ + Kind: yaml2.ScalarNode, + Value: "b", + Tag: "!!str", + Line: 2, + Column: 4, + }, { + Kind: yaml2.ScalarNode, + Value: "c", + Tag: "!!str", + Line: 2, + Column: 7, + }}, + }}, + }}, + }, + }, { + "a: &x 1\nb: &y 2\nc: *x\nd: *y\n", + yaml2.Node{ + Kind: yaml2.DocumentNode, + Line: 1, + Column: 1, + Content: []*yaml2.Node{{ + Kind: yaml2.MappingNode, + Line: 1, + Column: 1, + Tag: "!!map", + Content: []*yaml2.Node{{ + Kind: yaml2.ScalarNode, + Value: "a", + Tag: "!!str", + Line: 1, + Column: 1, + }, + saveNode("x", &yaml2.Node{ + Kind: yaml2.ScalarNode, + Value: "1", + Tag: "!!int", + Anchor: "x", + Line: 1, + Column: 4, + }), + { + Kind: yaml2.ScalarNode, + Value: "b", + Tag: "!!str", + Line: 2, + Column: 1, + }, + saveNode("y", &yaml2.Node{ + Kind: yaml2.ScalarNode, + Value: "2", + Tag: "!!int", + Anchor: "y", + Line: 2, + Column: 4, + }), + { + Kind: yaml2.ScalarNode, + Value: "c", + Tag: "!!str", + Line: 3, + Column: 1, + }, { + Kind: yaml2.AliasNode, + Value: "x", + Alias: dropNode("x"), + Line: 3, + Column: 4, + }, { + Kind: yaml2.ScalarNode, + Value: "d", + Tag: "!!str", + Line: 4, + Column: 1, + }, { + Kind: yaml2.AliasNode, + Value: "y", + Tag: "", + Alias: dropNode("y"), + Line: 4, + Column: 4, + }}, + }}, + }, + }, { + + "# One\n# Two\ntrue # Three\n# Four\n# Five\n", + yaml2.Node{ + Kind: yaml2.DocumentNode, + Line: 3, + Column: 1, + Content: []*yaml2.Node{{ + Kind: yaml2.ScalarNode, + Value: "true", + Tag: "!!bool", + Line: 3, + Column: 1, + HeadComment: "# One\n# Two", + LineComment: "# Three", + FootComment: "# Four\n# Five", + }}, + }, + }, { + + "# Å¡\ntrue # Å¡\n", + yaml2.Node{ + Kind: yaml2.DocumentNode, + Line: 2, + Column: 1, + Content: []*yaml2.Node{{ + Kind: yaml2.ScalarNode, + Value: "true", + Tag: "!!bool", + Line: 2, + Column: 1, + HeadComment: "# Å¡", + LineComment: "# Å¡", + }}, + }, + }, { + + "[decode]\n# One\n\n# Two\n\n# Three\ntrue # Four\n# Five\n\n# Six\n\n# Seven\n", + yaml2.Node{ + Kind: yaml2.DocumentNode, + Line: 7, + Column: 1, + HeadComment: "# One\n\n# Two", + FootComment: "# Six\n\n# Seven", + Content: []*yaml2.Node{{ + Kind: yaml2.ScalarNode, + Value: "true", + Tag: "!!bool", + Line: 7, + Column: 1, + HeadComment: "# Three", + LineComment: "# Four", + FootComment: "# Five", + }}, + }, + }, { + // Write out the pound character if missing from comments. + "[encode]# One\n# Two\ntrue # Three\n# Four\n# Five\n", + yaml2.Node{ + Kind: yaml2.DocumentNode, + Line: 3, + Column: 1, + Content: []*yaml2.Node{{ + Kind: yaml2.ScalarNode, + Value: "true", + Tag: "!!bool", + Line: 3, + Column: 1, + HeadComment: "One\nTwo\n", + LineComment: "Three\n", + FootComment: "Four\nFive\n", + }}, + }, + }, { + "[encode]# One\n# Two\ntrue # Three\n# Four\n# Five\n", + yaml2.Node{ + Kind: yaml2.DocumentNode, + Line: 3, + Column: 1, + Content: []*yaml2.Node{{ + Kind: yaml2.ScalarNode, + Value: "true", + Tag: "!!bool", + Line: 3, + Column: 1, + HeadComment: " One\n Two", + LineComment: " Three", + FootComment: " Four\n Five", + }}, + }, + }, { + "# DH1\n\n# DH2\n\n# H1\n# H2\ntrue # I\n# F1\n# F2\n\n# DF1\n\n# DF2\n", + yaml2.Node{ + Kind: yaml2.DocumentNode, + Line: 7, + Column: 1, + HeadComment: "# DH1\n\n# DH2", + FootComment: "# DF1\n\n# DF2", + Content: []*yaml2.Node{{ + Kind: yaml2.ScalarNode, + Value: "true", + Tag: "!!bool", + Line: 7, + Column: 1, + HeadComment: "# H1\n# H2", + LineComment: "# I", + FootComment: "# F1\n# F2", + }}, + }, + }, { + "# DH1\n\n# DH2\n\n# HA1\n# HA2\nka: va # IA\n# FA1\n# FA2\n\n# HB1\n# HB2\nkb: vb # IB\n# FB1\n# FB2\n\n# DF1\n\n# DF2\n", + yaml2.Node{ + Kind: yaml2.DocumentNode, + Line: 7, + Column: 1, + HeadComment: "# DH1\n\n# DH2", + FootComment: "# DF1\n\n# DF2", + Content: []*yaml2.Node{{ + Kind: yaml2.MappingNode, + Tag: "!!map", + Line: 7, + Column: 1, + Content: []*yaml2.Node{{ + Kind: yaml2.ScalarNode, + Line: 7, + Column: 1, + Tag: "!!str", + Value: "ka", + HeadComment: "# HA1\n# HA2", + FootComment: "# FA1\n# FA2", + }, { + Kind: yaml2.ScalarNode, + Line: 7, + Column: 5, + Tag: "!!str", + Value: "va", + LineComment: "# IA", + }, { + Kind: yaml2.ScalarNode, + Line: 13, + Column: 1, + Tag: "!!str", + Value: "kb", + HeadComment: "# HB1\n# HB2", + FootComment: "# FB1\n# FB2", + }, { + Kind: yaml2.ScalarNode, + Line: 13, + Column: 5, + Tag: "!!str", + Value: "vb", + LineComment: "# IB", + }}, + }}, + }, + }, { + "# DH1\n\n# DH2\n\n# HA1\n# HA2\n- la # IA\n# FA1\n# FA2\n\n# HB1\n# HB2\n- lb # IB\n# FB1\n# FB2\n\n# DF1\n\n# DF2\n", + yaml2.Node{ + Kind: yaml2.DocumentNode, + Line: 7, + Column: 1, + HeadComment: "# DH1\n\n# DH2", + FootComment: "# DF1\n\n# DF2", + Content: []*yaml2.Node{{ + Kind: yaml2.SequenceNode, + Tag: "!!seq", + Line: 7, + Column: 1, + Content: []*yaml2.Node{{ + Kind: yaml2.ScalarNode, + Tag: "!!str", + Line: 7, + Column: 3, + Value: "la", + HeadComment: "# HA1\n# HA2", + LineComment: "# IA", + FootComment: "# FA1\n# FA2", + }, { + Kind: yaml2.ScalarNode, + Tag: "!!str", + Line: 13, + Column: 3, + Value: "lb", + HeadComment: "# HB1\n# HB2", + LineComment: "# IB", + FootComment: "# FB1\n# FB2", + }}, + }}, + }, + }, { + "# DH1\n\n- la # IA\n# HB1\n- lb\n", + yaml2.Node{ + Kind: yaml2.DocumentNode, + Line: 3, + Column: 1, + HeadComment: "# DH1", + Content: []*yaml2.Node{{ + Kind: yaml2.SequenceNode, + Tag: "!!seq", + Line: 3, + Column: 1, + Content: []*yaml2.Node{{ + Kind: yaml2.ScalarNode, + Tag: "!!str", + Line: 3, + Column: 3, + Value: "la", + LineComment: "# IA", + }, { + Kind: yaml2.ScalarNode, + Tag: "!!str", + Line: 5, + Column: 3, + Value: "lb", + HeadComment: "# HB1", + }}, + }}, + }, + }, { + "- la # IA\n- lb # IB\n- lc # IC\n", + yaml2.Node{ + Kind: yaml2.DocumentNode, + Line: 1, + Column: 1, + Content: []*yaml2.Node{{ + Kind: yaml2.SequenceNode, + Tag: "!!seq", + Line: 1, + Column: 1, + Content: []*yaml2.Node{{ + Kind: yaml2.ScalarNode, + Tag: "!!str", + Line: 1, + Column: 3, + Value: "la", + LineComment: "# IA", + }, { + Kind: yaml2.ScalarNode, + Tag: "!!str", + Line: 2, + Column: 3, + Value: "lb", + LineComment: "# IB", + }, { + Kind: yaml2.ScalarNode, + Tag: "!!str", + Line: 3, + Column: 3, + Value: "lc", + LineComment: "# IC", + }}, + }}, + }, + }, { + "# DH1\n\n# HL1\n- - la\n # HB1\n - lb\n", + yaml2.Node{ + Kind: yaml2.DocumentNode, + Line: 4, + Column: 1, + HeadComment: "# DH1", + Content: []*yaml2.Node{{ + Kind: yaml2.SequenceNode, + Tag: "!!seq", + Line: 4, + Column: 1, + Content: []*yaml2.Node{{ + Kind: yaml2.SequenceNode, + Tag: "!!seq", + Line: 4, + Column: 3, + HeadComment: "# HL1", + Content: []*yaml2.Node{{ + Kind: yaml2.ScalarNode, + Tag: "!!str", + Line: 4, + Column: 5, + Value: "la", + }, { + Kind: yaml2.ScalarNode, + Tag: "!!str", + Line: 6, + Column: 5, + Value: "lb", + HeadComment: "# HB1", + }}, + }}, + }}, + }, + }, { + "# DH1\n\n# HL1\n- # HA1\n - la\n # HB1\n - lb\n", + yaml2.Node{ + Kind: yaml2.DocumentNode, + Line: 4, + Column: 1, + HeadComment: "# DH1", + Content: []*yaml2.Node{{ + Kind: yaml2.SequenceNode, + Tag: "!!seq", + Line: 4, + Column: 1, + Content: []*yaml2.Node{{ + Kind: yaml2.SequenceNode, + Tag: "!!seq", + Line: 5, + Column: 3, + HeadComment: "# HL1", + Content: []*yaml2.Node{{ + Kind: yaml2.ScalarNode, + Tag: "!!str", + Line: 5, + Column: 5, + Value: "la", + HeadComment: "# HA1", + }, { + Kind: yaml2.ScalarNode, + Tag: "!!str", + Line: 7, + Column: 5, + Value: "lb", + HeadComment: "# HB1", + }}, + }}, + }}, + }, + }, { + "[decode]# DH1\n\n# HL1\n- # HA1\n\n - la\n # HB1\n - lb\n", + yaml2.Node{ + Kind: yaml2.DocumentNode, + Line: 4, + Column: 1, + HeadComment: "# DH1", + Content: []*yaml2.Node{{ + Kind: yaml2.SequenceNode, + Tag: "!!seq", + Line: 4, + Column: 1, + Content: []*yaml2.Node{{ + Kind: yaml2.SequenceNode, + Tag: "!!seq", + Line: 6, + Column: 3, + HeadComment: "# HL1", + Content: []*yaml2.Node{{ + Kind: yaml2.ScalarNode, + Tag: "!!str", + Line: 6, + Column: 5, + Value: "la", + HeadComment: "# HA1\n", + }, { + Kind: yaml2.ScalarNode, + Tag: "!!str", + Line: 8, + Column: 5, + Value: "lb", + HeadComment: "# HB1", + }}, + }}, + }}, + }, + }, { + "# DH1\n\n# HA1\nka:\n # HB1\n kb:\n # HC1\n # HC2\n - lc # IC\n # FC1\n # FC2\n\n # HD1\n - ld # ID\n # FD1\n\n# DF1\n", + yaml2.Node{ + Kind: yaml2.DocumentNode, + Line: 4, + Column: 1, + HeadComment: "# DH1", + FootComment: "# DF1", + Content: []*yaml2.Node{{ + Kind: yaml2.MappingNode, + Tag: "!!map", + Line: 4, + Column: 1, + Content: []*yaml2.Node{{ + Kind: yaml2.ScalarNode, + Tag: "!!str", + Line: 4, + Column: 1, + Value: "ka", + HeadComment: "# HA1", + }, { + Kind: yaml2.MappingNode, + Tag: "!!map", + Line: 6, + Column: 3, + Content: []*yaml2.Node{{ + Kind: yaml2.ScalarNode, + Tag: "!!str", + Line: 6, + Column: 3, + Value: "kb", + HeadComment: "# HB1", + }, { + Kind: yaml2.SequenceNode, + Line: 9, + Column: 5, + Tag: "!!seq", + Content: []*yaml2.Node{{ + Kind: yaml2.ScalarNode, + Tag: "!!str", + Line: 9, + Column: 7, + Value: "lc", + HeadComment: "# HC1\n# HC2", + LineComment: "# IC", + FootComment: "# FC1\n# FC2", + }, { + Kind: yaml2.ScalarNode, + Tag: "!!str", + Line: 14, + Column: 7, + Value: "ld", + HeadComment: "# HD1", + + LineComment: "# ID", + FootComment: "# FD1", + }}, + }}, + }}, + }}, + }, + }, { + "# DH1\n\n# HA1\nka:\n # HB1\n kb:\n # HC1\n # HC2\n - lc # IC\n # FC1\n # FC2\n\n # HD1\n - ld # ID\n # FD1\nke: ve\n\n# DF1\n", + yaml2.Node{ + Kind: yaml2.DocumentNode, + Line: 4, + Column: 1, + HeadComment: "# DH1", + FootComment: "# DF1", + Content: []*yaml2.Node{{ + Kind: yaml2.MappingNode, + Tag: "!!map", + Line: 4, + Column: 1, + Content: []*yaml2.Node{{ + Kind: yaml2.ScalarNode, + Tag: "!!str", + Line: 4, + Column: 1, + Value: "ka", + HeadComment: "# HA1", + }, { + Kind: yaml2.MappingNode, + Tag: "!!map", + Line: 6, + Column: 3, + Content: []*yaml2.Node{{ + Kind: yaml2.ScalarNode, + Tag: "!!str", + Line: 6, + Column: 3, + Value: "kb", + HeadComment: "# HB1", + }, { + Kind: yaml2.SequenceNode, + Line: 9, + Column: 5, + Tag: "!!seq", + Content: []*yaml2.Node{{ + Kind: yaml2.ScalarNode, + Tag: "!!str", + Line: 9, + Column: 7, + Value: "lc", + HeadComment: "# HC1\n# HC2", + LineComment: "# IC", + FootComment: "# FC1\n# FC2", + }, { + Kind: yaml2.ScalarNode, + Tag: "!!str", + Line: 14, + Column: 7, + Value: "ld", + HeadComment: "# HD1", + LineComment: "# ID", + FootComment: "# FD1", + }}, + }}, + }, { + Kind: yaml2.ScalarNode, + Tag: "!!str", + Line: 16, + Column: 1, + Value: "ke", + }, { + Kind: yaml2.ScalarNode, + Tag: "!!str", + Line: 16, + Column: 5, + Value: "ve", + }}, + }}, + }, + }, { + "# DH1\n\n# DH2\n\n# HA1\n# HA2\nka:\n # HB1\n # HB2\n kb:\n" + + " # HC1\n # HC2\n kc:\n # HD1\n # HD2\n kd: vd\n # FD1\n # FD2\n" + + " # FC1\n # FC2\n # FB1\n # FB2\n# FA1\n# FA2\n\n# HE1\n# HE2\nke: ve\n# FE1\n# FE2\n\n# DF1\n\n# DF2\n", + yaml2.Node{ + Kind: yaml2.DocumentNode, + HeadComment: "# DH1\n\n# DH2", + FootComment: "# DF1\n\n# DF2", + Line: 7, + Column: 1, + Content: []*yaml2.Node{{ + Kind: yaml2.MappingNode, + Tag: "!!map", + Line: 7, + Column: 1, + Content: []*yaml2.Node{{ + Kind: yaml2.ScalarNode, + Tag: "!!str", + Value: "ka", + HeadComment: "# HA1\n# HA2", + FootComment: "# FA1\n# FA2", + Line: 7, + Column: 1, + }, { + Kind: yaml2.MappingNode, + Tag: "!!map", + Line: 10, + Column: 3, + Content: []*yaml2.Node{{ + Kind: yaml2.ScalarNode, + Tag: "!!str", + Value: "kb", + HeadComment: "# HB1\n# HB2", + FootComment: "# FB1\n# FB2", + Line: 10, + Column: 3, + }, { + Kind: yaml2.MappingNode, + Tag: "!!map", + Line: 13, + Column: 5, + Content: []*yaml2.Node{{ + Kind: yaml2.ScalarNode, + Tag: "!!str", + Value: "kc", + HeadComment: "# HC1\n# HC2", + FootComment: "# FC1\n# FC2", + Line: 13, + Column: 5, + }, { + Kind: yaml2.MappingNode, + Tag: "!!map", + Line: 16, + Column: 7, + Content: []*yaml2.Node{{ + Kind: yaml2.ScalarNode, + Tag: "!!str", + Value: "kd", + HeadComment: "# HD1\n# HD2", + FootComment: "# FD1\n# FD2", + Line: 16, + Column: 7, + }, { + Kind: yaml2.ScalarNode, + Tag: "!!str", + Value: "vd", + Line: 16, + Column: 11, + }}, + }}, + }}, + }, { + Kind: yaml2.ScalarNode, + Tag: "!!str", + Value: "ke", + HeadComment: "# HE1\n# HE2", + FootComment: "# FE1\n# FE2", + Line: 28, + Column: 1, + }, { + Kind: yaml2.ScalarNode, + Tag: "!!str", + Value: "ve", + Line: 28, + Column: 5, + }}, + }}, + }, + }, { + // Same as above but indenting ke in so it's also part of ka's value. + "# DH1\n\n# DH2\n\n# HA1\n# HA2\nka:\n # HB1\n # HB2\n kb:\n" + + " # HC1\n # HC2\n kc:\n # HD1\n # HD2\n kd: vd\n # FD1\n # FD2\n" + + " # FC1\n # FC2\n # FB1\n # FB2\n\n # HE1\n # HE2\n ke: ve\n # FE1\n # FE2\n# FA1\n# FA2\n\n# DF1\n\n# DF2\n", + yaml2.Node{ + Kind: yaml2.DocumentNode, + HeadComment: "# DH1\n\n# DH2", + FootComment: "# DF1\n\n# DF2", + Line: 7, + Column: 1, + Content: []*yaml2.Node{{ + Kind: yaml2.MappingNode, + Tag: "!!map", + Line: 7, + Column: 1, + Content: []*yaml2.Node{{ + Kind: yaml2.ScalarNode, + Tag: "!!str", + Value: "ka", + HeadComment: "# HA1\n# HA2", + FootComment: "# FA1\n# FA2", + Line: 7, + Column: 1, + }, { + Kind: yaml2.MappingNode, + Tag: "!!map", + Line: 10, + Column: 3, + Content: []*yaml2.Node{{ + Kind: yaml2.ScalarNode, + Tag: "!!str", + Value: "kb", + HeadComment: "# HB1\n# HB2", + FootComment: "# FB1\n# FB2", + Line: 10, + Column: 3, + }, { + Kind: yaml2.MappingNode, + Tag: "!!map", + Line: 13, + Column: 5, + Content: []*yaml2.Node{{ + Kind: yaml2.ScalarNode, + Tag: "!!str", + Value: "kc", + HeadComment: "# HC1\n# HC2", + FootComment: "# FC1\n# FC2", + Line: 13, + Column: 5, + }, { + Kind: yaml2.MappingNode, + Tag: "!!map", + Line: 16, + Column: 7, + Content: []*yaml2.Node{{ + Kind: yaml2.ScalarNode, + Tag: "!!str", + Value: "kd", + HeadComment: "# HD1\n# HD2", + FootComment: "# FD1\n# FD2", + Line: 16, + Column: 7, + }, { + Kind: yaml2.ScalarNode, + Tag: "!!str", + Value: "vd", + Line: 16, + Column: 11, + }}, + }}, + }, { + Kind: yaml2.ScalarNode, + Tag: "!!str", + Value: "ke", + HeadComment: "# HE1\n# HE2", + FootComment: "# FE1\n# FE2", + Line: 26, + Column: 3, + }, { + Kind: yaml2.ScalarNode, + Tag: "!!str", + Value: "ve", + Line: 26, + Column: 7, + }}, + }}, + }}, + }, + }, { + // Decode only due to lack of newline at the end. + "[decode]# HA1\nka:\n # HB1\n kb: vb\n # FB1\n# FA1", + yaml2.Node{ + Kind: yaml2.DocumentNode, + Line: 2, + Column: 1, + Content: []*yaml2.Node{{ + Kind: yaml2.MappingNode, + Tag: "!!map", + Line: 2, + Column: 1, + Content: []*yaml2.Node{{ + Kind: yaml2.ScalarNode, + Tag: "!!str", + Value: "ka", + HeadComment: "# HA1", + FootComment: "# FA1", + Line: 2, + Column: 1, + }, { + Kind: yaml2.MappingNode, + Tag: "!!map", + Line: 4, + Column: 3, + Content: []*yaml2.Node{{ + Kind: yaml2.ScalarNode, + Tag: "!!str", + Value: "kb", + HeadComment: "# HB1", + FootComment: "# FB1", + Line: 4, + Column: 3, + }, { + Kind: yaml2.ScalarNode, + Tag: "!!str", + Value: "vb", + Line: 4, + Column: 7, + }}, + }}, + }}, + }, + }, { + // Same as above, but with newline at the end. + "# HA1\nka:\n # HB1\n kb: vb\n # FB1\n# FA1\n", + yaml2.Node{ + Kind: yaml2.DocumentNode, + Line: 2, + Column: 1, + Content: []*yaml2.Node{{ + Kind: yaml2.MappingNode, + Tag: "!!map", + Line: 2, + Column: 1, + Content: []*yaml2.Node{{ + Kind: yaml2.ScalarNode, + Tag: "!!str", + Value: "ka", + HeadComment: "# HA1", + FootComment: "# FA1", + Line: 2, + Column: 1, + }, { + Kind: yaml2.MappingNode, + Tag: "!!map", + Line: 4, + Column: 3, + Content: []*yaml2.Node{{ + Kind: yaml2.ScalarNode, + Tag: "!!str", + Value: "kb", + HeadComment: "# HB1", + FootComment: "# FB1", + Line: 4, + Column: 3, + }, { + Kind: yaml2.ScalarNode, + Tag: "!!str", + Value: "vb", + Line: 4, + Column: 7, + }}, + }}, + }}, + }, + }, { + // Same as above, but without FB1. + "# HA1\nka:\n # HB1\n kb: vb\n# FA1\n", + yaml2.Node{ + Kind: yaml2.DocumentNode, + Line: 2, + Column: 1, + Content: []*yaml2.Node{{ + Kind: yaml2.MappingNode, + Tag: "!!map", + Line: 2, + Column: 1, + Content: []*yaml2.Node{{ + Kind: yaml2.ScalarNode, + Tag: "!!str", + Value: "ka", + HeadComment: "# HA1", + FootComment: "# FA1", + Line: 2, + Column: 1, + }, { + Kind: yaml2.MappingNode, + Tag: "!!map", + Line: 4, + Column: 3, + Content: []*yaml2.Node{{ + Kind: yaml2.ScalarNode, + Tag: "!!str", + Value: "kb", + HeadComment: "# HB1", + Line: 4, + Column: 3, + }, { + Kind: yaml2.ScalarNode, + Tag: "!!str", + Value: "vb", + Line: 4, + Column: 7, + }}, + }}, + }}, + }, + }, { + // Same as above, but with two newlines at the end. Decode-only for that. + "[decode]# HA1\nka:\n # HB1\n kb: vb\n # FB1\n# FA1\n\n", + yaml2.Node{ + Kind: yaml2.DocumentNode, + Line: 2, + Column: 1, + Content: []*yaml2.Node{{ + Kind: yaml2.MappingNode, + Tag: "!!map", + Line: 2, + Column: 1, + Content: []*yaml2.Node{{ + Kind: yaml2.ScalarNode, + Tag: "!!str", + Value: "ka", + HeadComment: "# HA1", + FootComment: "# FA1", + Line: 2, + Column: 1, + }, { + Kind: yaml2.MappingNode, + Tag: "!!map", + Line: 4, + Column: 3, + Content: []*yaml2.Node{{ + Kind: yaml2.ScalarNode, + Tag: "!!str", + Value: "kb", + HeadComment: "# HB1", + FootComment: "# FB1", + Line: 4, + Column: 3, + }, { + Kind: yaml2.ScalarNode, + Tag: "!!str", + Value: "vb", + Line: 4, + Column: 7, + }}, + }}, + }}, + }, + }, { + // Similar to above, but make HB1 look more like a footer of ka. + "[decode]# HA1\nka:\n# HB1\n\n kb: vb\n# FA1\n", + yaml2.Node{ + Kind: yaml2.DocumentNode, + Line: 2, + Column: 1, + Content: []*yaml2.Node{{ + Kind: yaml2.MappingNode, + Tag: "!!map", + Line: 2, + Column: 1, + Content: []*yaml2.Node{{ + Kind: yaml2.ScalarNode, + Tag: "!!str", + Value: "ka", + HeadComment: "# HA1", + FootComment: "# FA1", + Line: 2, + Column: 1, + }, { + Kind: yaml2.MappingNode, + Tag: "!!map", + Line: 5, + Column: 3, + Content: []*yaml2.Node{{ + Kind: yaml2.ScalarNode, + Tag: "!!str", + Value: "kb", + HeadComment: "# HB1\n", + Line: 5, + Column: 3, + }, { + Kind: yaml2.ScalarNode, + Tag: "!!str", + Value: "vb", + Line: 5, + Column: 7, + }}, + }}, + }}, + }, + }, { + "ka:\n kb: vb\n# FA1\n\nkc: vc\n", + yaml2.Node{ + Kind: yaml2.DocumentNode, + Line: 1, + Column: 1, + Content: []*yaml2.Node{{ + Kind: yaml2.MappingNode, + Tag: "!!map", + Line: 1, + Column: 1, + Content: []*yaml2.Node{{ + Kind: yaml2.ScalarNode, + Tag: "!!str", + Value: "ka", + Line: 1, + Column: 1, + FootComment: "# FA1", + }, { + Kind: yaml2.MappingNode, + Tag: "!!map", + Line: 2, + Column: 3, + Content: []*yaml2.Node{{ + Kind: yaml2.ScalarNode, + Tag: "!!str", + Value: "kb", + Line: 2, + Column: 3, + }, { + Kind: yaml2.ScalarNode, + Tag: "!!str", + Value: "vb", + Line: 2, + Column: 7, + }}, + }, { + Kind: yaml2.ScalarNode, + Tag: "!!str", + Value: "kc", + Line: 5, + Column: 1, + }, { + Kind: yaml2.ScalarNode, + Tag: "!!str", + Value: "vc", + Line: 5, + Column: 5, + }}, + }}, + }, + }, { + "ka:\n kb: vb\n# HC1\nkc: vc\n", + yaml2.Node{ + Kind: yaml2.DocumentNode, + Line: 1, + Column: 1, + Content: []*yaml2.Node{{ + Kind: yaml2.MappingNode, + Tag: "!!map", + Line: 1, + Column: 1, + Content: []*yaml2.Node{{ + Kind: yaml2.ScalarNode, + Tag: "!!str", + Value: "ka", + Line: 1, + Column: 1, + }, { + Kind: yaml2.MappingNode, + Tag: "!!map", + Line: 2, + Column: 3, + Content: []*yaml2.Node{{ + Kind: yaml2.ScalarNode, + Tag: "!!str", + Value: "kb", + Line: 2, + Column: 3, + }, { + Kind: yaml2.ScalarNode, + Tag: "!!str", + Value: "vb", + Line: 2, + Column: 7, + }}, + }, { + Kind: yaml2.ScalarNode, + Tag: "!!str", + Value: "kc", + HeadComment: "# HC1", + Line: 4, + Column: 1, + }, { + Kind: yaml2.ScalarNode, + Tag: "!!str", + Value: "vc", + Line: 4, + Column: 5, + }}, + }}, + }, + }, { + // Decode only due to empty line before HC1. + "[decode]ka:\n kb: vb\n\n# HC1\nkc: vc\n", + yaml2.Node{ + Kind: yaml2.DocumentNode, + Line: 1, + Column: 1, + Content: []*yaml2.Node{{ + Kind: yaml2.MappingNode, + Tag: "!!map", + Line: 1, + Column: 1, + Content: []*yaml2.Node{{ + Kind: yaml2.ScalarNode, + Tag: "!!str", + Value: "ka", + Line: 1, + Column: 1, + }, { + Kind: yaml2.MappingNode, + Tag: "!!map", + Line: 2, + Column: 3, + Content: []*yaml2.Node{{ + Kind: yaml2.ScalarNode, + Tag: "!!str", + Value: "kb", + Line: 2, + Column: 3, + }, { + Kind: yaml2.ScalarNode, + Tag: "!!str", + Value: "vb", + Line: 2, + Column: 7, + }}, + }, { + Kind: yaml2.ScalarNode, + Tag: "!!str", + Value: "kc", + HeadComment: "# HC1", + Line: 5, + Column: 1, + }, { + Kind: yaml2.ScalarNode, + Tag: "!!str", + Value: "vc", + Line: 5, + Column: 5, + }}, + }}, + }, + }, { + // Decode-only due to empty lines around HC1. + "[decode]ka:\n kb: vb\n\n# HC1\n\nkc: vc\n", + yaml2.Node{ + Kind: yaml2.DocumentNode, + Line: 1, + Column: 1, + Content: []*yaml2.Node{{ + Kind: yaml2.MappingNode, + Tag: "!!map", + Line: 1, + Column: 1, + Content: []*yaml2.Node{{ + Kind: yaml2.ScalarNode, + Tag: "!!str", + Value: "ka", + Line: 1, + Column: 1, + }, { + Kind: yaml2.MappingNode, + Tag: "!!map", + Line: 2, + Column: 3, + Content: []*yaml2.Node{{ + Kind: yaml2.ScalarNode, + Tag: "!!str", + Value: "kb", + Line: 2, + Column: 3, + }, { + Kind: yaml2.ScalarNode, + Tag: "!!str", + Value: "vb", + Line: 2, + Column: 7, + }}, + }, { + Kind: yaml2.ScalarNode, + Tag: "!!str", + Value: "kc", + HeadComment: "# HC1\n", + Line: 6, + Column: 1, + }, { + Kind: yaml2.ScalarNode, + Tag: "!!str", + Value: "vc", + Line: 6, + Column: 5, + }}, + }}, + }, + }, { + "ka: # IA\n kb: # IB\n", + yaml2.Node{ + Kind: yaml2.DocumentNode, + Line: 1, + Column: 1, + Content: []*yaml2.Node{{ + Kind: yaml2.MappingNode, + Tag: "!!map", + Line: 1, + Column: 1, + Content: []*yaml2.Node{{ + Kind: yaml2.ScalarNode, + Tag: "!!str", + Value: "ka", + Line: 1, + Column: 1, + LineComment: "# IA", + }, { + Kind: yaml2.MappingNode, + Tag: "!!map", + Line: 2, + Column: 3, + Content: []*yaml2.Node{{ + Kind: yaml2.ScalarNode, + Tag: "!!str", + Value: "kb", + Line: 2, + Column: 3, + LineComment: "# IB", + }, { + Kind: yaml2.ScalarNode, + Tag: "!!null", + Line: 2, + Column: 6, + }}, + }}, + }}, + }, + }, { + "# HA1\nka:\n # HB1\n kb: vb\n # FB1\n# HC1\n# HC2\nkc: vc\n# FC1\n# FC2\n", + yaml2.Node{ + Kind: yaml2.DocumentNode, + Line: 2, + Column: 1, + Content: []*yaml2.Node{{ + Kind: yaml2.MappingNode, + Tag: "!!map", + Line: 2, + Column: 1, + Content: []*yaml2.Node{{ + Kind: yaml2.ScalarNode, + Tag: "!!str", + Value: "ka", + HeadComment: "# HA1", + Line: 2, + Column: 1, + }, { + Kind: yaml2.MappingNode, + Tag: "!!map", + Line: 4, + Column: 3, + Content: []*yaml2.Node{{ + Kind: yaml2.ScalarNode, + Tag: "!!str", + Value: "kb", + HeadComment: "# HB1", + FootComment: "# FB1", + Line: 4, + Column: 3, + }, { + Kind: yaml2.ScalarNode, + Tag: "!!str", + Value: "vb", + Line: 4, + Column: 7, + }}, + }, { + Kind: yaml2.ScalarNode, + Tag: "!!str", + Value: "kc", + HeadComment: "# HC1\n# HC2", + FootComment: "# FC1\n# FC2", + Line: 8, + Column: 1, + }, { + Kind: yaml2.ScalarNode, + Tag: "!!str", + Value: "vc", + Line: 8, + Column: 5, + }}, + }}, + }, + }, { + // Same as above, but decode only due to empty line between ka's value and kc's headers. + "[decode]# HA1\nka:\n # HB1\n kb: vb\n # FB1\n\n# HC1\n# HC2\nkc: vc\n# FC1\n# FC2\n", + yaml2.Node{ + Kind: yaml2.DocumentNode, + Line: 2, + Column: 1, + Content: []*yaml2.Node{{ + Kind: yaml2.MappingNode, + Tag: "!!map", + Line: 2, + Column: 1, + Content: []*yaml2.Node{{ + Kind: yaml2.ScalarNode, + Tag: "!!str", + Value: "ka", + HeadComment: "# HA1", + Line: 2, + Column: 1, + }, { + Kind: yaml2.MappingNode, + Tag: "!!map", + Line: 4, + Column: 3, + Content: []*yaml2.Node{{ + Kind: yaml2.ScalarNode, + Tag: "!!str", + Value: "kb", + HeadComment: "# HB1", + FootComment: "# FB1", + Line: 4, + Column: 3, + }, { + Kind: yaml2.ScalarNode, + Tag: "!!str", + Value: "vb", + Line: 4, + Column: 7, + }}, + }, { + Kind: yaml2.ScalarNode, + Tag: "!!str", + Value: "kc", + HeadComment: "# HC1\n# HC2", + FootComment: "# FC1\n# FC2", + Line: 9, + Column: 1, + }, { + Kind: yaml2.ScalarNode, + Tag: "!!str", + Value: "vc", + Line: 9, + Column: 5, + }}, + }}, + }, + }, { + "# H1\n[la, lb] # I\n# F1\n", + yaml2.Node{ + Kind: yaml2.DocumentNode, + Line: 2, + Column: 1, + Content: []*yaml2.Node{{ + Kind: yaml2.SequenceNode, + Tag: "!!seq", + Style: yaml2.FlowStyle, + Line: 2, + Column: 1, + HeadComment: "# H1", + LineComment: "# I", + FootComment: "# F1", + Content: []*yaml2.Node{{ + Kind: yaml2.ScalarNode, + Tag: "!!str", + Line: 2, + Column: 2, + Value: "la", + }, { + Kind: yaml2.ScalarNode, + Tag: "!!str", + Line: 2, + Column: 6, + Value: "lb", + }}, + }}, + }, + }, { + "# DH1\n\n# SH1\n[\n # HA1\n la, # IA\n # FA1\n\n # HB1\n lb, # IB\n # FB1\n]\n# SF1\n\n# DF1\n", + yaml2.Node{ + Kind: yaml2.DocumentNode, + Line: 4, + Column: 1, + HeadComment: "# DH1", + FootComment: "# DF1", + Content: []*yaml2.Node{{ + Kind: yaml2.SequenceNode, + Tag: "!!seq", + Style: yaml2.FlowStyle, + Line: 4, + Column: 1, + HeadComment: "# SH1", + FootComment: "# SF1", + Content: []*yaml2.Node{{ + Kind: yaml2.ScalarNode, + Tag: "!!str", + Line: 6, + Column: 3, + Value: "la", + HeadComment: "# HA1", + LineComment: "# IA", + FootComment: "# FA1", + }, { + Kind: yaml2.ScalarNode, + Tag: "!!str", + Line: 10, + Column: 3, + Value: "lb", + HeadComment: "# HB1", + LineComment: "# IB", + FootComment: "# FB1", + }}, + }}, + }, + }, { + // Same as above, but with extra newlines before FB1 and FB2 + "[decode]# DH1\n\n# SH1\n[\n # HA1\n la, # IA\n # FA1\n\n # HB1\n lb, # IB\n\n\n # FB1\n\n# FB2\n]\n# SF1\n\n# DF1\n", + yaml2.Node{ + Kind: yaml2.DocumentNode, + Line: 4, + Column: 1, + HeadComment: "# DH1", + FootComment: "# DF1", + Content: []*yaml2.Node{{ + Kind: yaml2.SequenceNode, + Tag: "!!seq", + Style: yaml2.FlowStyle, + Line: 4, + Column: 1, + HeadComment: "# SH1", + FootComment: "# SF1", + Content: []*yaml2.Node{{ + Kind: yaml2.ScalarNode, + Tag: "!!str", + Line: 6, + Column: 3, + Value: "la", + HeadComment: "# HA1", + LineComment: "# IA", + FootComment: "# FA1", + }, { + Kind: yaml2.ScalarNode, + Tag: "!!str", + Line: 10, + Column: 3, + Value: "lb", + HeadComment: "# HB1", + LineComment: "# IB", + FootComment: "# FB1\n\n# FB2", + }}, + }}, + }, + }, { + "# DH1\n\n# SH1\n[\n # HA1\n la,\n # FA1\n\n # HB1\n lb,\n # FB1\n]\n# SF1\n\n# DF1\n", + yaml2.Node{ + Kind: yaml2.DocumentNode, + Line: 4, + Column: 1, + HeadComment: "# DH1", + FootComment: "# DF1", + Content: []*yaml2.Node{{ + Kind: yaml2.SequenceNode, + Tag: "!!seq", + Style: yaml2.FlowStyle, + Line: 4, + Column: 1, + HeadComment: "# SH1", + FootComment: "# SF1", + Content: []*yaml2.Node{{ + Kind: yaml2.ScalarNode, + Tag: "!!str", + Line: 6, + Column: 3, + Value: "la", + HeadComment: "# HA1", + FootComment: "# FA1", + }, { + Kind: yaml2.ScalarNode, + Tag: "!!str", + Line: 10, + Column: 3, + Value: "lb", + HeadComment: "# HB1", + FootComment: "# FB1", + }}, + }}, + }, + }, { + "ka:\n kb: [\n # HA1\n la,\n # FA1\n\n # HB1\n lb,\n # FB1\n ]\n", + yaml2.Node{ + Kind: yaml2.DocumentNode, + Line: 1, + Column: 1, + Content: []*yaml2.Node{{ + Kind: yaml2.MappingNode, + Tag: "!!map", + Line: 1, + Column: 1, + Content: []*yaml2.Node{{ + Kind: yaml2.ScalarNode, + Tag: "!!str", + Value: "ka", + Line: 1, + Column: 1, + }, { + Kind: 0x4, + Tag: "!!map", + Line: 2, + Column: 3, + Content: []*yaml2.Node{{ + Kind: yaml2.ScalarNode, + Tag: "!!str", + Value: "kb", + Line: 2, + Column: 3, + }, { + Kind: yaml2.SequenceNode, + Style: 0x20, + Tag: "!!seq", + Line: 2, + Column: 7, + Content: []*yaml2.Node{{ + Kind: yaml2.ScalarNode, + Tag: "!!str", + Value: "la", + HeadComment: "# HA1", + FootComment: "# FA1", + Line: 4, + Column: 5, + }, { + Kind: yaml2.ScalarNode, + Tag: "!!str", + Value: "lb", + HeadComment: "# HB1", + FootComment: "# FB1", + Line: 8, + Column: 5, + }}, + }}, + }}, + }}, + }, + }, { + "# DH1\n\n# MH1\n{\n # HA1\n ka: va, # IA\n # FA1\n\n # HB1\n kb: vb, # IB\n # FB1\n}\n# MF1\n\n# DF1\n", + yaml2.Node{ + Kind: yaml2.DocumentNode, + Line: 4, + Column: 1, + HeadComment: "# DH1", + FootComment: "# DF1", + Content: []*yaml2.Node{{ + Kind: yaml2.MappingNode, + Tag: "!!map", + Style: yaml2.FlowStyle, + Line: 4, + Column: 1, + HeadComment: "# MH1", + FootComment: "# MF1", + Content: []*yaml2.Node{{ + Kind: yaml2.ScalarNode, + Tag: "!!str", + Line: 6, + Column: 3, + Value: "ka", + HeadComment: "# HA1", + FootComment: "# FA1", + }, { + Kind: yaml2.ScalarNode, + Tag: "!!str", + Line: 6, + Column: 7, + Value: "va", + LineComment: "# IA", + }, { + Kind: yaml2.ScalarNode, + Tag: "!!str", + Line: 10, + Column: 3, + Value: "kb", + HeadComment: "# HB1", + FootComment: "# FB1", + }, { + Kind: yaml2.ScalarNode, + Tag: "!!str", + Line: 10, + Column: 7, + Value: "vb", + LineComment: "# IB", + }}, + }}, + }, + }, { + "# DH1\n\n# MH1\n{\n # HA1\n ka: va,\n # FA1\n\n # HB1\n kb: vb,\n # FB1\n}\n# MF1\n\n# DF1\n", + yaml2.Node{ + Kind: yaml2.DocumentNode, + Line: 4, + Column: 1, + HeadComment: "# DH1", + FootComment: "# DF1", + Content: []*yaml2.Node{{ + Kind: yaml2.MappingNode, + Tag: "!!map", + Style: yaml2.FlowStyle, + Line: 4, + Column: 1, + HeadComment: "# MH1", + FootComment: "# MF1", + Content: []*yaml2.Node{{ + Kind: yaml2.ScalarNode, + Tag: "!!str", + Line: 6, + Column: 3, + Value: "ka", + HeadComment: "# HA1", + FootComment: "# FA1", + }, { + Kind: yaml2.ScalarNode, + Tag: "!!str", + Line: 6, + Column: 7, + Value: "va", + }, { + Kind: yaml2.ScalarNode, + Tag: "!!str", + Line: 10, + Column: 3, + Value: "kb", + HeadComment: "# HB1", + FootComment: "# FB1", + }, { + Kind: yaml2.ScalarNode, + Tag: "!!str", + Line: 10, + Column: 7, + Value: "vb", + }}, + }}, + }, + }, { + "# DH1\n\n# DH2\n\n# HA1\n# HA2\n- &x la # IA\n# FA1\n# FA2\n\n# HB1\n# HB2\n- *x # IB\n# FB1\n# FB2\n\n# DF1\n\n# DF2\n", + yaml2.Node{ + Kind: yaml2.DocumentNode, + Line: 7, + Column: 1, + HeadComment: "# DH1\n\n# DH2", + FootComment: "# DF1\n\n# DF2", + Content: []*yaml2.Node{{ + Kind: yaml2.SequenceNode, + Tag: "!!seq", + Line: 7, + Column: 1, + Content: []*yaml2.Node{ + saveNode("x", &yaml2.Node{ + Kind: yaml2.ScalarNode, + Tag: "!!str", + Line: 7, + Column: 3, + Value: "la", + HeadComment: "# HA1\n# HA2", + LineComment: "# IA", + FootComment: "# FA1\n# FA2", + Anchor: "x", + }), { + Kind: yaml2.AliasNode, + Line: 13, + Column: 3, + Value: "x", + Alias: dropNode("x"), + HeadComment: "# HB1\n# HB2", + LineComment: "# IB", + FootComment: "# FB1\n# FB2", + }, + }, + }}, + }, + }, +} + +func (s *S) TestNodeRoundtrip(c *C) { + defer os.Setenv("TZ", os.Getenv("TZ")) + os.Setenv("TZ", "UTC") + for i, item := range nodeTests { + c.Logf("test %d: %q", i, item.yaml) + + if strings.Contains(item.yaml, "#") { + var buf bytes.Buffer + fprintComments(&buf, &item.node, " ") + c.Logf(" expected comments:\n%s", buf.Bytes()) + } + + decode := true + encode := true + + testYaml := item.yaml + if s := strings.TrimPrefix(testYaml, "[decode]"); s != testYaml { + encode = false + testYaml = s + } + if s := strings.TrimPrefix(testYaml, "[encode]"); s != testYaml { + decode = false + testYaml = s + } + + if decode { + var node yaml2.Node + err := yaml2.Unmarshal([]byte(testYaml), &node) + c.Assert(err, IsNil) + if strings.Contains(item.yaml, "#") { + var buf bytes.Buffer + fprintComments(&buf, &node, " ") + c.Logf(" obtained comments:\n%s", buf.Bytes()) + } + c.Assert(&node, DeepEquals, &item.node) + } + if encode { + node := deepCopyNode(&item.node, nil) + buf := bytes.Buffer{} + enc := yaml2.NewEncoder(&buf) + enc.SetIndent(2) + err := enc.Encode(node) + c.Assert(err, IsNil) + err = enc.Close() + c.Assert(err, IsNil) + c.Assert(buf.String(), Equals, testYaml) + + // Ensure there were no mutations to the tree. + c.Assert(node, DeepEquals, &item.node) + } + } +} + +func deepCopyNode(node *yaml2.Node, cache map[*yaml2.Node]*yaml2.Node) *yaml2.Node { + if n, ok := cache[node]; ok { + return n + } + if cache == nil { + cache = make(map[*yaml2.Node]*yaml2.Node) + } + copy := *node + cache[node] = © + copy.Content = nil + for _, elem := range node.Content { + copy.Content = append(copy.Content, deepCopyNode(elem, cache)) + } + if node.Alias != nil { + copy.Alias = deepCopyNode(node.Alias, cache) + } + return © +} + +var savedNodes = make(map[string]*yaml2.Node) + +func saveNode(name string, node *yaml2.Node) *yaml2.Node { + savedNodes[name] = node + return node +} + +func peekNode(name string) *yaml2.Node { + return savedNodes[name] +} + +func dropNode(name string) *yaml2.Node { + node := savedNodes[name] + delete(savedNodes, name) + return node +} + +var setStringTests = []struct { + str string + yaml string + node yaml2.Node +}{ + { + "something simple", + "something simple\n", + yaml2.Node{ + Kind: yaml2.ScalarNode, + Value: "something simple", + Tag: "!!str", + }, + }, { + `"quoted value"`, + "'\"quoted value\"'\n", + yaml2.Node{ + Kind: yaml2.ScalarNode, + Value: `"quoted value"`, + Tag: "!!str", + }, + }, { + "multi\nline", + "|-\n multi\n line\n", + yaml2.Node{ + Kind: yaml2.ScalarNode, + Value: "multi\nline", + Tag: "!!str", + Style: yaml2.LiteralStyle, + }, + }, { + "123", + "\"123\"\n", + yaml2.Node{ + Kind: yaml2.ScalarNode, + Value: "123", + Tag: "!!str", + }, + }, { + "multi\nline\n", + "|\n multi\n line\n", + yaml2.Node{ + Kind: yaml2.ScalarNode, + Value: "multi\nline\n", + Tag: "!!str", + Style: yaml2.LiteralStyle, + }, + }, { + "\x80\x81\x82", + "!!binary gIGC\n", + yaml2.Node{ + Kind: yaml2.ScalarNode, + Value: "gIGC", + Tag: "!!binary", + }, + }, +} + +func (s *S) TestSetString(c *C) { + defer os.Setenv("TZ", os.Getenv("TZ")) + os.Setenv("TZ", "UTC") + for i, item := range setStringTests { + c.Logf("test %d: %q", i, item.str) + + var node yaml2.Node + + node.SetString(item.str) + + c.Assert(node, DeepEquals, item.node) + + buf := bytes.Buffer{} + enc := yaml2.NewEncoder(&buf) + enc.SetIndent(2) + err := enc.Encode(&item.node) + c.Assert(err, IsNil) + err = enc.Close() + c.Assert(err, IsNil) + c.Assert(buf.String(), Equals, item.yaml) + + var doc yaml2.Node + err = yaml2.Unmarshal([]byte(item.yaml), &doc) + c.Assert(err, IsNil) + + var str string + err = node.Decode(&str) + c.Assert(err, IsNil) + c.Assert(str, Equals, item.str) + } +} + +var nodeEncodeDecodeTests = []struct { + value interface{} + yaml string + node yaml2.Node +}{{ + "something simple", + "something simple\n", + yaml2.Node{ + Kind: yaml2.ScalarNode, + Value: "something simple", + Tag: "!!str", + }, +}, { + `"quoted value"`, + "'\"quoted value\"'\n", + yaml2.Node{ + Kind: yaml2.ScalarNode, + Style: yaml2.SingleQuotedStyle, + Value: `"quoted value"`, + Tag: "!!str", + }, +}, { + 123, + "123", + yaml2.Node{ + Kind: yaml2.ScalarNode, + Value: `123`, + Tag: "!!int", + }, +}, { + []interface{}{1, 2}, + "[1, 2]", + yaml2.Node{ + Kind: yaml2.SequenceNode, + Tag: "!!seq", + Content: []*yaml2.Node{{ + Kind: yaml2.ScalarNode, + Value: "1", + Tag: "!!int", + }, { + Kind: yaml2.ScalarNode, + Value: "2", + Tag: "!!int", + }}, + }, +}, { + map[string]interface{}{"a": "b"}, + "a: b", + yaml2.Node{ + Kind: yaml2.MappingNode, + Tag: "!!map", + Content: []*yaml2.Node{{ + Kind: yaml2.ScalarNode, + Value: "a", + Tag: "!!str", + }, { + Kind: yaml2.ScalarNode, + Value: "b", + Tag: "!!str", + }}, + }, +}} + +func (s *S) TestNodeEncodeDecode(c *C) { + for i, item := range nodeEncodeDecodeTests { + c.Logf("Encode/Decode test value #%d: %#v", i, item.value) + + var v interface{} + err := item.node.Decode(&v) + c.Assert(err, IsNil) + c.Assert(v, DeepEquals, item.value) + + var n yaml2.Node + err = n.Encode(item.value) + c.Assert(err, IsNil) + c.Assert(n, DeepEquals, item.node) + } +} + +func (s *S) TestNodeZeroEncodeDecode(c *C) { + // Zero node value behaves as nil when encoding... + var n yaml2.Node + data, err := yaml2.Marshal(&n) + c.Assert(err, IsNil) + c.Assert(string(data), Equals, "null\n") + + // ... and decoding. + var v *struct{} = &struct{}{} + c.Assert(n.Decode(&v), IsNil) + c.Assert(v, IsNil) + + // ... and even when looking for its tag. + c.Assert(n.ShortTag(), Equals, "!!null") + + // Kind zero is still unknown, though. + n.Line = 1 + _, err = yaml2.Marshal(&n) + c.Assert(err, ErrorMatches, "yaml: cannot encode node with unknown kind 0") + c.Assert(n.Decode(&v), ErrorMatches, "yaml: cannot decode node with unknown kind 0") +} + +func (s *S) TestNodeOmitEmpty(c *C) { + var v struct { + A int + B yaml2.Node ",omitempty" + } + v.A = 1 + data, err := yaml2.Marshal(&v) + c.Assert(err, IsNil) + c.Assert(string(data), Equals, "a: 1\n") + + v.B.Line = 1 + _, err = yaml2.Marshal(&v) + c.Assert(err, ErrorMatches, "yaml: cannot encode node with unknown kind 0") +} + +func fprintComments(out io.Writer, node *yaml2.Node, indent string) { + switch node.Kind { + case yaml2.ScalarNode: + fmt.Fprintf(out, "%s<%s> ", indent, node.Value) + fprintCommentSet(out, node) + fmt.Fprintf(out, "\n") + case yaml2.DocumentNode: + fmt.Fprintf(out, "%s ", indent) + fprintCommentSet(out, node) + fmt.Fprintf(out, "\n") + for i := 0; i < len(node.Content); i++ { + fprintComments(out, node.Content[i], indent+" ") + } + case yaml2.MappingNode: + fmt.Fprintf(out, "%s ", indent) + fprintCommentSet(out, node) + fmt.Fprintf(out, "\n") + for i := 0; i < len(node.Content); i += 2 { + fprintComments(out, node.Content[i], indent+" ") + fprintComments(out, node.Content[i+1], indent+" ") + } + case yaml2.SequenceNode: + fmt.Fprintf(out, "%s ", indent) + fprintCommentSet(out, node) + fmt.Fprintf(out, "\n") + for i := 0; i < len(node.Content); i++ { + fprintComments(out, node.Content[i], indent+" ") + } + } +} + +func fprintCommentSet(out io.Writer, node *yaml2.Node) { + if len(node.HeadComment)+len(node.LineComment)+len(node.FootComment) > 0 { + fmt.Fprintf(out, "%q / %q / %q", node.HeadComment, node.LineComment, node.FootComment) + } +} diff --git a/go/internal/forked/kyaml/internal/forked/github.com/go-yaml/yaml/parserc.go b/go/internal/forked/kyaml/internal/forked/github.com/go-yaml/yaml/parserc.go new file mode 100644 index 000000000..ac66fccc0 --- /dev/null +++ b/go/internal/forked/kyaml/internal/forked/github.com/go-yaml/yaml/parserc.go @@ -0,0 +1,1249 @@ +// +// Copyright (c) 2011-2019 Canonical Ltd +// Copyright (c) 2006-2010 Kirill Simonov +// +// Permission is hereby granted, free of charge, to any person obtaining a copy of +// this software and associated documentation files (the "Software"), to deal in +// the Software without restriction, including without limitation the rights to +// use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies +// of the Software, and to permit persons to whom the Software is furnished to do +// so, subject to the following conditions: +// +// The above copyright notice and this permission notice shall be included in all +// copies or substantial portions of the Software. +// +// THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR +// IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, +// FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE +// AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER +// LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, +// OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE +// SOFTWARE. + +package yaml + +import ( + "bytes" +) + +// The parser implements the following grammar: +// +// stream ::= STREAM-START implicit_document? explicit_document* STREAM-END +// implicit_document ::= block_node DOCUMENT-END* +// explicit_document ::= DIRECTIVE* DOCUMENT-START block_node? DOCUMENT-END* +// block_node_or_indentless_sequence ::= +// ALIAS +// | properties (block_content | indentless_block_sequence)? +// | block_content +// | indentless_block_sequence +// block_node ::= ALIAS +// | properties block_content? +// | block_content +// flow_node ::= ALIAS +// | properties flow_content? +// | flow_content +// properties ::= TAG ANCHOR? | ANCHOR TAG? +// block_content ::= block_collection | flow_collection | SCALAR +// flow_content ::= flow_collection | SCALAR +// block_collection ::= block_sequence | block_mapping +// flow_collection ::= flow_sequence | flow_mapping +// block_sequence ::= BLOCK-SEQUENCE-START (BLOCK-ENTRY block_node?)* BLOCK-END +// indentless_sequence ::= (BLOCK-ENTRY block_node?)+ +// block_mapping ::= BLOCK-MAPPING_START +// ((KEY block_node_or_indentless_sequence?)? +// (VALUE block_node_or_indentless_sequence?)?)* +// BLOCK-END +// flow_sequence ::= FLOW-SEQUENCE-START +// (flow_sequence_entry FLOW-ENTRY)* +// flow_sequence_entry? +// FLOW-SEQUENCE-END +// flow_sequence_entry ::= flow_node | KEY flow_node? (VALUE flow_node?)? +// flow_mapping ::= FLOW-MAPPING-START +// (flow_mapping_entry FLOW-ENTRY)* +// flow_mapping_entry? +// FLOW-MAPPING-END +// flow_mapping_entry ::= flow_node | KEY flow_node? (VALUE flow_node?)? + +// Peek the next token in the token queue. +func peek_token(parser *yaml_parser_t) *yaml_token_t { + if parser.token_available || yaml_parser_fetch_more_tokens(parser) { + token := &parser.tokens[parser.tokens_head] + yaml_parser_unfold_comments(parser, token) + return token + } + return nil +} + +// yaml_parser_unfold_comments walks through the comments queue and joins all +// comments behind the position of the provided token into the respective +// top-level comment slices in the parser. +func yaml_parser_unfold_comments(parser *yaml_parser_t, token *yaml_token_t) { + for parser.comments_head < len(parser.comments) && token.start_mark.index >= parser.comments[parser.comments_head].token_mark.index { + comment := &parser.comments[parser.comments_head] + if len(comment.head) > 0 { + if token.typ == yaml_BLOCK_END_TOKEN { + // No heads on ends, so keep comment.head for a follow up token. + break + } + if len(parser.head_comment) > 0 { + parser.head_comment = append(parser.head_comment, '\n') + } + parser.head_comment = append(parser.head_comment, comment.head...) + } + if len(comment.foot) > 0 { + if len(parser.foot_comment) > 0 { + parser.foot_comment = append(parser.foot_comment, '\n') + } + parser.foot_comment = append(parser.foot_comment, comment.foot...) + } + if len(comment.line) > 0 { + if len(parser.line_comment) > 0 { + parser.line_comment = append(parser.line_comment, '\n') + } + parser.line_comment = append(parser.line_comment, comment.line...) + } + *comment = yaml_comment_t{} + parser.comments_head++ + } +} + +// Remove the next token from the queue (must be called after peek_token). +func skip_token(parser *yaml_parser_t) { + parser.token_available = false + parser.tokens_parsed++ + parser.stream_end_produced = parser.tokens[parser.tokens_head].typ == yaml_STREAM_END_TOKEN + parser.tokens_head++ +} + +// Get the next event. +func yaml_parser_parse(parser *yaml_parser_t, event *yaml_event_t) bool { + // Erase the event object. + *event = yaml_event_t{} + + // No events after the end of the stream or error. + if parser.stream_end_produced || parser.error != yaml_NO_ERROR || parser.state == yaml_PARSE_END_STATE { + return true + } + + // Generate the next event. + return yaml_parser_state_machine(parser, event) +} + +// Set parser error. +func yaml_parser_set_parser_error(parser *yaml_parser_t, problem string, problem_mark yaml_mark_t) bool { + parser.error = yaml_PARSER_ERROR + parser.problem = problem + parser.problem_mark = problem_mark + return false +} + +func yaml_parser_set_parser_error_context(parser *yaml_parser_t, context string, context_mark yaml_mark_t, problem string, problem_mark yaml_mark_t) bool { + parser.error = yaml_PARSER_ERROR + parser.context = context + parser.context_mark = context_mark + parser.problem = problem + parser.problem_mark = problem_mark + return false +} + +// State dispatcher. +func yaml_parser_state_machine(parser *yaml_parser_t, event *yaml_event_t) bool { + //trace("yaml_parser_state_machine", "state:", parser.state.String()) + + switch parser.state { + case yaml_PARSE_STREAM_START_STATE: + return yaml_parser_parse_stream_start(parser, event) + + case yaml_PARSE_IMPLICIT_DOCUMENT_START_STATE: + return yaml_parser_parse_document_start(parser, event, true) + + case yaml_PARSE_DOCUMENT_START_STATE: + return yaml_parser_parse_document_start(parser, event, false) + + case yaml_PARSE_DOCUMENT_CONTENT_STATE: + return yaml_parser_parse_document_content(parser, event) + + case yaml_PARSE_DOCUMENT_END_STATE: + return yaml_parser_parse_document_end(parser, event) + + case yaml_PARSE_BLOCK_NODE_STATE: + return yaml_parser_parse_node(parser, event, true, false) + + case yaml_PARSE_BLOCK_NODE_OR_INDENTLESS_SEQUENCE_STATE: + return yaml_parser_parse_node(parser, event, true, true) + + case yaml_PARSE_FLOW_NODE_STATE: + return yaml_parser_parse_node(parser, event, false, false) + + case yaml_PARSE_BLOCK_SEQUENCE_FIRST_ENTRY_STATE: + return yaml_parser_parse_block_sequence_entry(parser, event, true) + + case yaml_PARSE_BLOCK_SEQUENCE_ENTRY_STATE: + return yaml_parser_parse_block_sequence_entry(parser, event, false) + + case yaml_PARSE_INDENTLESS_SEQUENCE_ENTRY_STATE: + return yaml_parser_parse_indentless_sequence_entry(parser, event) + + case yaml_PARSE_BLOCK_MAPPING_FIRST_KEY_STATE: + return yaml_parser_parse_block_mapping_key(parser, event, true) + + case yaml_PARSE_BLOCK_MAPPING_KEY_STATE: + return yaml_parser_parse_block_mapping_key(parser, event, false) + + case yaml_PARSE_BLOCK_MAPPING_VALUE_STATE: + return yaml_parser_parse_block_mapping_value(parser, event) + + case yaml_PARSE_FLOW_SEQUENCE_FIRST_ENTRY_STATE: + return yaml_parser_parse_flow_sequence_entry(parser, event, true) + + case yaml_PARSE_FLOW_SEQUENCE_ENTRY_STATE: + return yaml_parser_parse_flow_sequence_entry(parser, event, false) + + case yaml_PARSE_FLOW_SEQUENCE_ENTRY_MAPPING_KEY_STATE: + return yaml_parser_parse_flow_sequence_entry_mapping_key(parser, event) + + case yaml_PARSE_FLOW_SEQUENCE_ENTRY_MAPPING_VALUE_STATE: + return yaml_parser_parse_flow_sequence_entry_mapping_value(parser, event) + + case yaml_PARSE_FLOW_SEQUENCE_ENTRY_MAPPING_END_STATE: + return yaml_parser_parse_flow_sequence_entry_mapping_end(parser, event) + + case yaml_PARSE_FLOW_MAPPING_FIRST_KEY_STATE: + return yaml_parser_parse_flow_mapping_key(parser, event, true) + + case yaml_PARSE_FLOW_MAPPING_KEY_STATE: + return yaml_parser_parse_flow_mapping_key(parser, event, false) + + case yaml_PARSE_FLOW_MAPPING_VALUE_STATE: + return yaml_parser_parse_flow_mapping_value(parser, event, false) + + case yaml_PARSE_FLOW_MAPPING_EMPTY_VALUE_STATE: + return yaml_parser_parse_flow_mapping_value(parser, event, true) + + default: + panic("invalid parser state") + } +} + +// Parse the production: +// stream ::= STREAM-START implicit_document? explicit_document* STREAM-END +// ************ +func yaml_parser_parse_stream_start(parser *yaml_parser_t, event *yaml_event_t) bool { + token := peek_token(parser) + if token == nil { + return false + } + if token.typ != yaml_STREAM_START_TOKEN { + return yaml_parser_set_parser_error(parser, "did not find expected ", token.start_mark) + } + parser.state = yaml_PARSE_IMPLICIT_DOCUMENT_START_STATE + *event = yaml_event_t{ + typ: yaml_STREAM_START_EVENT, + start_mark: token.start_mark, + end_mark: token.end_mark, + encoding: token.encoding, + } + skip_token(parser) + return true +} + +// Parse the productions: +// implicit_document ::= block_node DOCUMENT-END* +// * +// explicit_document ::= DIRECTIVE* DOCUMENT-START block_node? DOCUMENT-END* +// ************************* +func yaml_parser_parse_document_start(parser *yaml_parser_t, event *yaml_event_t, implicit bool) bool { + + token := peek_token(parser) + if token == nil { + return false + } + + // Parse extra document end indicators. + if !implicit { + for token.typ == yaml_DOCUMENT_END_TOKEN { + skip_token(parser) + token = peek_token(parser) + if token == nil { + return false + } + } + } + + if implicit && token.typ != yaml_VERSION_DIRECTIVE_TOKEN && + token.typ != yaml_TAG_DIRECTIVE_TOKEN && + token.typ != yaml_DOCUMENT_START_TOKEN && + token.typ != yaml_STREAM_END_TOKEN { + // Parse an implicit document. + if !yaml_parser_process_directives(parser, nil, nil) { + return false + } + parser.states = append(parser.states, yaml_PARSE_DOCUMENT_END_STATE) + parser.state = yaml_PARSE_BLOCK_NODE_STATE + + var head_comment []byte + if len(parser.head_comment) > 0 { + // [Go] Scan the header comment backwards, and if an empty line is found, break + // the header so the part before the last empty line goes into the + // document header, while the bottom of it goes into a follow up event. + for i := len(parser.head_comment) - 1; i > 0; i-- { + if parser.head_comment[i] == '\n' { + if i == len(parser.head_comment)-1 { + head_comment = parser.head_comment[:i] + parser.head_comment = parser.head_comment[i+1:] + break + } else if parser.head_comment[i-1] == '\n' { + head_comment = parser.head_comment[:i-1] + parser.head_comment = parser.head_comment[i+1:] + break + } + } + } + } + + *event = yaml_event_t{ + typ: yaml_DOCUMENT_START_EVENT, + start_mark: token.start_mark, + end_mark: token.end_mark, + + head_comment: head_comment, + } + + } else if token.typ != yaml_STREAM_END_TOKEN { + // Parse an explicit document. + var version_directive *yaml_version_directive_t + var tag_directives []yaml_tag_directive_t + start_mark := token.start_mark + if !yaml_parser_process_directives(parser, &version_directive, &tag_directives) { + return false + } + token = peek_token(parser) + if token == nil { + return false + } + if token.typ != yaml_DOCUMENT_START_TOKEN { + yaml_parser_set_parser_error(parser, + "did not find expected ", token.start_mark) + return false + } + parser.states = append(parser.states, yaml_PARSE_DOCUMENT_END_STATE) + parser.state = yaml_PARSE_DOCUMENT_CONTENT_STATE + end_mark := token.end_mark + + *event = yaml_event_t{ + typ: yaml_DOCUMENT_START_EVENT, + start_mark: start_mark, + end_mark: end_mark, + version_directive: version_directive, + tag_directives: tag_directives, + implicit: false, + } + skip_token(parser) + + } else { + // Parse the stream end. + parser.state = yaml_PARSE_END_STATE + *event = yaml_event_t{ + typ: yaml_STREAM_END_EVENT, + start_mark: token.start_mark, + end_mark: token.end_mark, + } + skip_token(parser) + } + + return true +} + +// Parse the productions: +// explicit_document ::= DIRECTIVE* DOCUMENT-START block_node? DOCUMENT-END* +// *********** +// +func yaml_parser_parse_document_content(parser *yaml_parser_t, event *yaml_event_t) bool { + token := peek_token(parser) + if token == nil { + return false + } + + if token.typ == yaml_VERSION_DIRECTIVE_TOKEN || + token.typ == yaml_TAG_DIRECTIVE_TOKEN || + token.typ == yaml_DOCUMENT_START_TOKEN || + token.typ == yaml_DOCUMENT_END_TOKEN || + token.typ == yaml_STREAM_END_TOKEN { + parser.state = parser.states[len(parser.states)-1] + parser.states = parser.states[:len(parser.states)-1] + return yaml_parser_process_empty_scalar(parser, event, + token.start_mark) + } + return yaml_parser_parse_node(parser, event, true, false) +} + +// Parse the productions: +// implicit_document ::= block_node DOCUMENT-END* +// ************* +// explicit_document ::= DIRECTIVE* DOCUMENT-START block_node? DOCUMENT-END* +// +func yaml_parser_parse_document_end(parser *yaml_parser_t, event *yaml_event_t) bool { + token := peek_token(parser) + if token == nil { + return false + } + + start_mark := token.start_mark + end_mark := token.start_mark + + implicit := true + if token.typ == yaml_DOCUMENT_END_TOKEN { + end_mark = token.end_mark + skip_token(parser) + implicit = false + } + + parser.tag_directives = parser.tag_directives[:0] + + parser.state = yaml_PARSE_DOCUMENT_START_STATE + *event = yaml_event_t{ + typ: yaml_DOCUMENT_END_EVENT, + start_mark: start_mark, + end_mark: end_mark, + implicit: implicit, + } + yaml_parser_set_event_comments(parser, event) + if len(event.head_comment) > 0 && len(event.foot_comment) == 0 { + event.foot_comment = event.head_comment + event.head_comment = nil + } + return true +} + +func yaml_parser_set_event_comments(parser *yaml_parser_t, event *yaml_event_t) { + event.head_comment = parser.head_comment + event.line_comment = parser.line_comment + event.foot_comment = parser.foot_comment + parser.head_comment = nil + parser.line_comment = nil + parser.foot_comment = nil + parser.tail_comment = nil + parser.stem_comment = nil +} + +// Parse the productions: +// block_node_or_indentless_sequence ::= +// ALIAS +// ***** +// | properties (block_content | indentless_block_sequence)? +// ********** * +// | block_content | indentless_block_sequence +// * +// block_node ::= ALIAS +// ***** +// | properties block_content? +// ********** * +// | block_content +// * +// flow_node ::= ALIAS +// ***** +// | properties flow_content? +// ********** * +// | flow_content +// * +// properties ::= TAG ANCHOR? | ANCHOR TAG? +// ************************* +// block_content ::= block_collection | flow_collection | SCALAR +// ****** +// flow_content ::= flow_collection | SCALAR +// ****** +func yaml_parser_parse_node(parser *yaml_parser_t, event *yaml_event_t, block, indentless_sequence bool) bool { + //defer trace("yaml_parser_parse_node", "block:", block, "indentless_sequence:", indentless_sequence)() + + token := peek_token(parser) + if token == nil { + return false + } + + if token.typ == yaml_ALIAS_TOKEN { + parser.state = parser.states[len(parser.states)-1] + parser.states = parser.states[:len(parser.states)-1] + *event = yaml_event_t{ + typ: yaml_ALIAS_EVENT, + start_mark: token.start_mark, + end_mark: token.end_mark, + anchor: token.value, + } + yaml_parser_set_event_comments(parser, event) + skip_token(parser) + return true + } + + start_mark := token.start_mark + end_mark := token.start_mark + + var tag_token bool + var tag_handle, tag_suffix, anchor []byte + var tag_mark yaml_mark_t + if token.typ == yaml_ANCHOR_TOKEN { + anchor = token.value + start_mark = token.start_mark + end_mark = token.end_mark + skip_token(parser) + token = peek_token(parser) + if token == nil { + return false + } + if token.typ == yaml_TAG_TOKEN { + tag_token = true + tag_handle = token.value + tag_suffix = token.suffix + tag_mark = token.start_mark + end_mark = token.end_mark + skip_token(parser) + token = peek_token(parser) + if token == nil { + return false + } + } + } else if token.typ == yaml_TAG_TOKEN { + tag_token = true + tag_handle = token.value + tag_suffix = token.suffix + start_mark = token.start_mark + tag_mark = token.start_mark + end_mark = token.end_mark + skip_token(parser) + token = peek_token(parser) + if token == nil { + return false + } + if token.typ == yaml_ANCHOR_TOKEN { + anchor = token.value + end_mark = token.end_mark + skip_token(parser) + token = peek_token(parser) + if token == nil { + return false + } + } + } + + var tag []byte + if tag_token { + if len(tag_handle) == 0 { + tag = tag_suffix + tag_suffix = nil + } else { + for i := range parser.tag_directives { + if bytes.Equal(parser.tag_directives[i].handle, tag_handle) { + tag = append([]byte(nil), parser.tag_directives[i].prefix...) + tag = append(tag, tag_suffix...) + break + } + } + if len(tag) == 0 { + yaml_parser_set_parser_error_context(parser, + "while parsing a node", start_mark, + "found undefined tag handle", tag_mark) + return false + } + } + } + + implicit := len(tag) == 0 + if indentless_sequence && token.typ == yaml_BLOCK_ENTRY_TOKEN { + end_mark = token.end_mark + parser.state = yaml_PARSE_INDENTLESS_SEQUENCE_ENTRY_STATE + *event = yaml_event_t{ + typ: yaml_SEQUENCE_START_EVENT, + start_mark: start_mark, + end_mark: end_mark, + anchor: anchor, + tag: tag, + implicit: implicit, + style: yaml_style_t(yaml_BLOCK_SEQUENCE_STYLE), + } + return true + } + if token.typ == yaml_SCALAR_TOKEN { + var plain_implicit, quoted_implicit bool + end_mark = token.end_mark + if (len(tag) == 0 && token.style == yaml_PLAIN_SCALAR_STYLE) || (len(tag) == 1 && tag[0] == '!') { + plain_implicit = true + } else if len(tag) == 0 { + quoted_implicit = true + } + parser.state = parser.states[len(parser.states)-1] + parser.states = parser.states[:len(parser.states)-1] + + *event = yaml_event_t{ + typ: yaml_SCALAR_EVENT, + start_mark: start_mark, + end_mark: end_mark, + anchor: anchor, + tag: tag, + value: token.value, + implicit: plain_implicit, + quoted_implicit: quoted_implicit, + style: yaml_style_t(token.style), + } + yaml_parser_set_event_comments(parser, event) + skip_token(parser) + return true + } + if token.typ == yaml_FLOW_SEQUENCE_START_TOKEN { + // [Go] Some of the events below can be merged as they differ only on style. + end_mark = token.end_mark + parser.state = yaml_PARSE_FLOW_SEQUENCE_FIRST_ENTRY_STATE + *event = yaml_event_t{ + typ: yaml_SEQUENCE_START_EVENT, + start_mark: start_mark, + end_mark: end_mark, + anchor: anchor, + tag: tag, + implicit: implicit, + style: yaml_style_t(yaml_FLOW_SEQUENCE_STYLE), + } + yaml_parser_set_event_comments(parser, event) + return true + } + if token.typ == yaml_FLOW_MAPPING_START_TOKEN { + end_mark = token.end_mark + parser.state = yaml_PARSE_FLOW_MAPPING_FIRST_KEY_STATE + *event = yaml_event_t{ + typ: yaml_MAPPING_START_EVENT, + start_mark: start_mark, + end_mark: end_mark, + anchor: anchor, + tag: tag, + implicit: implicit, + style: yaml_style_t(yaml_FLOW_MAPPING_STYLE), + } + yaml_parser_set_event_comments(parser, event) + return true + } + if block && token.typ == yaml_BLOCK_SEQUENCE_START_TOKEN { + end_mark = token.end_mark + parser.state = yaml_PARSE_BLOCK_SEQUENCE_FIRST_ENTRY_STATE + *event = yaml_event_t{ + typ: yaml_SEQUENCE_START_EVENT, + start_mark: start_mark, + end_mark: end_mark, + anchor: anchor, + tag: tag, + implicit: implicit, + style: yaml_style_t(yaml_BLOCK_SEQUENCE_STYLE), + } + if parser.stem_comment != nil { + event.head_comment = parser.stem_comment + parser.stem_comment = nil + } + return true + } + if block && token.typ == yaml_BLOCK_MAPPING_START_TOKEN { + end_mark = token.end_mark + parser.state = yaml_PARSE_BLOCK_MAPPING_FIRST_KEY_STATE + *event = yaml_event_t{ + typ: yaml_MAPPING_START_EVENT, + start_mark: start_mark, + end_mark: end_mark, + anchor: anchor, + tag: tag, + implicit: implicit, + style: yaml_style_t(yaml_BLOCK_MAPPING_STYLE), + } + if parser.stem_comment != nil { + event.head_comment = parser.stem_comment + parser.stem_comment = nil + } + return true + } + if len(anchor) > 0 || len(tag) > 0 { + parser.state = parser.states[len(parser.states)-1] + parser.states = parser.states[:len(parser.states)-1] + + *event = yaml_event_t{ + typ: yaml_SCALAR_EVENT, + start_mark: start_mark, + end_mark: end_mark, + anchor: anchor, + tag: tag, + implicit: implicit, + quoted_implicit: false, + style: yaml_style_t(yaml_PLAIN_SCALAR_STYLE), + } + return true + } + + context := "while parsing a flow node" + if block { + context = "while parsing a block node" + } + yaml_parser_set_parser_error_context(parser, context, start_mark, + "did not find expected node content", token.start_mark) + return false +} + +// Parse the productions: +// block_sequence ::= BLOCK-SEQUENCE-START (BLOCK-ENTRY block_node?)* BLOCK-END +// ******************** *********** * ********* +// +func yaml_parser_parse_block_sequence_entry(parser *yaml_parser_t, event *yaml_event_t, first bool) bool { + if first { + token := peek_token(parser) + parser.marks = append(parser.marks, token.start_mark) + skip_token(parser) + } + + token := peek_token(parser) + if token == nil { + return false + } + + if token.typ == yaml_BLOCK_ENTRY_TOKEN { + mark := token.end_mark + prior_head_len := len(parser.head_comment) + skip_token(parser) + yaml_parser_split_stem_comment(parser, prior_head_len) + token = peek_token(parser) + if token == nil { + return false + } + if token.typ != yaml_BLOCK_ENTRY_TOKEN && token.typ != yaml_BLOCK_END_TOKEN { + parser.states = append(parser.states, yaml_PARSE_BLOCK_SEQUENCE_ENTRY_STATE) + return yaml_parser_parse_node(parser, event, true, false) + } else { + parser.state = yaml_PARSE_BLOCK_SEQUENCE_ENTRY_STATE + return yaml_parser_process_empty_scalar(parser, event, mark) + } + } + if token.typ == yaml_BLOCK_END_TOKEN { + parser.state = parser.states[len(parser.states)-1] + parser.states = parser.states[:len(parser.states)-1] + parser.marks = parser.marks[:len(parser.marks)-1] + + *event = yaml_event_t{ + typ: yaml_SEQUENCE_END_EVENT, + start_mark: token.start_mark, + end_mark: token.end_mark, + } + + skip_token(parser) + return true + } + + context_mark := parser.marks[len(parser.marks)-1] + parser.marks = parser.marks[:len(parser.marks)-1] + return yaml_parser_set_parser_error_context(parser, + "while parsing a block collection", context_mark, + "did not find expected '-' indicator", token.start_mark) +} + +// Parse the productions: +// indentless_sequence ::= (BLOCK-ENTRY block_node?)+ +// *********** * +func yaml_parser_parse_indentless_sequence_entry(parser *yaml_parser_t, event *yaml_event_t) bool { + token := peek_token(parser) + if token == nil { + return false + } + + if token.typ == yaml_BLOCK_ENTRY_TOKEN { + mark := token.end_mark + prior_head_len := len(parser.head_comment) + skip_token(parser) + yaml_parser_split_stem_comment(parser, prior_head_len) + token = peek_token(parser) + if token == nil { + return false + } + if token.typ != yaml_BLOCK_ENTRY_TOKEN && + token.typ != yaml_KEY_TOKEN && + token.typ != yaml_VALUE_TOKEN && + token.typ != yaml_BLOCK_END_TOKEN { + parser.states = append(parser.states, yaml_PARSE_INDENTLESS_SEQUENCE_ENTRY_STATE) + return yaml_parser_parse_node(parser, event, true, false) + } + parser.state = yaml_PARSE_INDENTLESS_SEQUENCE_ENTRY_STATE + return yaml_parser_process_empty_scalar(parser, event, mark) + } + parser.state = parser.states[len(parser.states)-1] + parser.states = parser.states[:len(parser.states)-1] + + *event = yaml_event_t{ + typ: yaml_SEQUENCE_END_EVENT, + start_mark: token.start_mark, + end_mark: token.start_mark, // [Go] Shouldn't this be token.end_mark? + } + return true +} + +// Split stem comment from head comment. +// +// When a sequence or map is found under a sequence entry, the former head comment +// is assigned to the underlying sequence or map as a whole, not the individual +// sequence or map entry as would be expected otherwise. To handle this case the +// previous head comment is moved aside as the stem comment. +func yaml_parser_split_stem_comment(parser *yaml_parser_t, stem_len int) { + if stem_len == 0 { + return + } + + token := peek_token(parser) + if token.typ != yaml_BLOCK_SEQUENCE_START_TOKEN && token.typ != yaml_BLOCK_MAPPING_START_TOKEN { + return + } + + parser.stem_comment = parser.head_comment[:stem_len] + if len(parser.head_comment) == stem_len { + parser.head_comment = nil + } else { + // Copy suffix to prevent very strange bugs if someone ever appends + // further bytes to the prefix in the stem_comment slice above. + parser.head_comment = append([]byte(nil), parser.head_comment[stem_len+1:]...) + } +} + +// Parse the productions: +// block_mapping ::= BLOCK-MAPPING_START +// ******************* +// ((KEY block_node_or_indentless_sequence?)? +// *** * +// (VALUE block_node_or_indentless_sequence?)?)* +// +// BLOCK-END +// ********* +// +func yaml_parser_parse_block_mapping_key(parser *yaml_parser_t, event *yaml_event_t, first bool) bool { + if first { + token := peek_token(parser) + parser.marks = append(parser.marks, token.start_mark) + skip_token(parser) + } + + token := peek_token(parser) + if token == nil { + return false + } + + // [Go] A tail comment was left from the prior mapping value processed. Emit an event + // as it needs to be processed with that value and not the following key. + if len(parser.tail_comment) > 0 { + *event = yaml_event_t{ + typ: yaml_TAIL_COMMENT_EVENT, + start_mark: token.start_mark, + end_mark: token.end_mark, + foot_comment: parser.tail_comment, + } + parser.tail_comment = nil + return true + } + + if token.typ == yaml_KEY_TOKEN { + mark := token.end_mark + skip_token(parser) + token = peek_token(parser) + if token == nil { + return false + } + if token.typ != yaml_KEY_TOKEN && + token.typ != yaml_VALUE_TOKEN && + token.typ != yaml_BLOCK_END_TOKEN { + parser.states = append(parser.states, yaml_PARSE_BLOCK_MAPPING_VALUE_STATE) + return yaml_parser_parse_node(parser, event, true, true) + } else { + parser.state = yaml_PARSE_BLOCK_MAPPING_VALUE_STATE + return yaml_parser_process_empty_scalar(parser, event, mark) + } + } else if token.typ == yaml_BLOCK_END_TOKEN { + parser.state = parser.states[len(parser.states)-1] + parser.states = parser.states[:len(parser.states)-1] + parser.marks = parser.marks[:len(parser.marks)-1] + *event = yaml_event_t{ + typ: yaml_MAPPING_END_EVENT, + start_mark: token.start_mark, + end_mark: token.end_mark, + } + yaml_parser_set_event_comments(parser, event) + skip_token(parser) + return true + } + + context_mark := parser.marks[len(parser.marks)-1] + parser.marks = parser.marks[:len(parser.marks)-1] + return yaml_parser_set_parser_error_context(parser, + "while parsing a block mapping", context_mark, + "did not find expected key", token.start_mark) +} + +// Parse the productions: +// block_mapping ::= BLOCK-MAPPING_START +// +// ((KEY block_node_or_indentless_sequence?)? +// +// (VALUE block_node_or_indentless_sequence?)?)* +// ***** * +// BLOCK-END +// +// +func yaml_parser_parse_block_mapping_value(parser *yaml_parser_t, event *yaml_event_t) bool { + token := peek_token(parser) + if token == nil { + return false + } + if token.typ == yaml_VALUE_TOKEN { + mark := token.end_mark + skip_token(parser) + token = peek_token(parser) + if token == nil { + return false + } + if token.typ != yaml_KEY_TOKEN && + token.typ != yaml_VALUE_TOKEN && + token.typ != yaml_BLOCK_END_TOKEN { + parser.states = append(parser.states, yaml_PARSE_BLOCK_MAPPING_KEY_STATE) + return yaml_parser_parse_node(parser, event, true, true) + } + parser.state = yaml_PARSE_BLOCK_MAPPING_KEY_STATE + return yaml_parser_process_empty_scalar(parser, event, mark) + } + parser.state = yaml_PARSE_BLOCK_MAPPING_KEY_STATE + return yaml_parser_process_empty_scalar(parser, event, token.start_mark) +} + +// Parse the productions: +// flow_sequence ::= FLOW-SEQUENCE-START +// ******************* +// (flow_sequence_entry FLOW-ENTRY)* +// * ********** +// flow_sequence_entry? +// * +// FLOW-SEQUENCE-END +// ***************** +// flow_sequence_entry ::= flow_node | KEY flow_node? (VALUE flow_node?)? +// * +// +func yaml_parser_parse_flow_sequence_entry(parser *yaml_parser_t, event *yaml_event_t, first bool) bool { + if first { + token := peek_token(parser) + parser.marks = append(parser.marks, token.start_mark) + skip_token(parser) + } + token := peek_token(parser) + if token == nil { + return false + } + if token.typ != yaml_FLOW_SEQUENCE_END_TOKEN { + if !first { + if token.typ == yaml_FLOW_ENTRY_TOKEN { + skip_token(parser) + token = peek_token(parser) + if token == nil { + return false + } + } else { + context_mark := parser.marks[len(parser.marks)-1] + parser.marks = parser.marks[:len(parser.marks)-1] + return yaml_parser_set_parser_error_context(parser, + "while parsing a flow sequence", context_mark, + "did not find expected ',' or ']'", token.start_mark) + } + } + + if token.typ == yaml_KEY_TOKEN { + parser.state = yaml_PARSE_FLOW_SEQUENCE_ENTRY_MAPPING_KEY_STATE + *event = yaml_event_t{ + typ: yaml_MAPPING_START_EVENT, + start_mark: token.start_mark, + end_mark: token.end_mark, + implicit: true, + style: yaml_style_t(yaml_FLOW_MAPPING_STYLE), + } + skip_token(parser) + return true + } else if token.typ != yaml_FLOW_SEQUENCE_END_TOKEN { + parser.states = append(parser.states, yaml_PARSE_FLOW_SEQUENCE_ENTRY_STATE) + return yaml_parser_parse_node(parser, event, false, false) + } + } + + parser.state = parser.states[len(parser.states)-1] + parser.states = parser.states[:len(parser.states)-1] + parser.marks = parser.marks[:len(parser.marks)-1] + + *event = yaml_event_t{ + typ: yaml_SEQUENCE_END_EVENT, + start_mark: token.start_mark, + end_mark: token.end_mark, + } + yaml_parser_set_event_comments(parser, event) + + skip_token(parser) + return true +} + +// +// Parse the productions: +// flow_sequence_entry ::= flow_node | KEY flow_node? (VALUE flow_node?)? +// *** * +// +func yaml_parser_parse_flow_sequence_entry_mapping_key(parser *yaml_parser_t, event *yaml_event_t) bool { + token := peek_token(parser) + if token == nil { + return false + } + if token.typ != yaml_VALUE_TOKEN && + token.typ != yaml_FLOW_ENTRY_TOKEN && + token.typ != yaml_FLOW_SEQUENCE_END_TOKEN { + parser.states = append(parser.states, yaml_PARSE_FLOW_SEQUENCE_ENTRY_MAPPING_VALUE_STATE) + return yaml_parser_parse_node(parser, event, false, false) + } + mark := token.end_mark + skip_token(parser) + parser.state = yaml_PARSE_FLOW_SEQUENCE_ENTRY_MAPPING_VALUE_STATE + return yaml_parser_process_empty_scalar(parser, event, mark) +} + +// Parse the productions: +// flow_sequence_entry ::= flow_node | KEY flow_node? (VALUE flow_node?)? +// ***** * +// +func yaml_parser_parse_flow_sequence_entry_mapping_value(parser *yaml_parser_t, event *yaml_event_t) bool { + token := peek_token(parser) + if token == nil { + return false + } + if token.typ == yaml_VALUE_TOKEN { + skip_token(parser) + token := peek_token(parser) + if token == nil { + return false + } + if token.typ != yaml_FLOW_ENTRY_TOKEN && token.typ != yaml_FLOW_SEQUENCE_END_TOKEN { + parser.states = append(parser.states, yaml_PARSE_FLOW_SEQUENCE_ENTRY_MAPPING_END_STATE) + return yaml_parser_parse_node(parser, event, false, false) + } + } + parser.state = yaml_PARSE_FLOW_SEQUENCE_ENTRY_MAPPING_END_STATE + return yaml_parser_process_empty_scalar(parser, event, token.start_mark) +} + +// Parse the productions: +// flow_sequence_entry ::= flow_node | KEY flow_node? (VALUE flow_node?)? +// * +// +func yaml_parser_parse_flow_sequence_entry_mapping_end(parser *yaml_parser_t, event *yaml_event_t) bool { + token := peek_token(parser) + if token == nil { + return false + } + parser.state = yaml_PARSE_FLOW_SEQUENCE_ENTRY_STATE + *event = yaml_event_t{ + typ: yaml_MAPPING_END_EVENT, + start_mark: token.start_mark, + end_mark: token.start_mark, // [Go] Shouldn't this be end_mark? + } + return true +} + +// Parse the productions: +// flow_mapping ::= FLOW-MAPPING-START +// ****************** +// (flow_mapping_entry FLOW-ENTRY)* +// * ********** +// flow_mapping_entry? +// ****************** +// FLOW-MAPPING-END +// **************** +// flow_mapping_entry ::= flow_node | KEY flow_node? (VALUE flow_node?)? +// * *** * +// +func yaml_parser_parse_flow_mapping_key(parser *yaml_parser_t, event *yaml_event_t, first bool) bool { + if first { + token := peek_token(parser) + parser.marks = append(parser.marks, token.start_mark) + skip_token(parser) + } + + token := peek_token(parser) + if token == nil { + return false + } + + if token.typ != yaml_FLOW_MAPPING_END_TOKEN { + if !first { + if token.typ == yaml_FLOW_ENTRY_TOKEN { + skip_token(parser) + token = peek_token(parser) + if token == nil { + return false + } + } else { + context_mark := parser.marks[len(parser.marks)-1] + parser.marks = parser.marks[:len(parser.marks)-1] + return yaml_parser_set_parser_error_context(parser, + "while parsing a flow mapping", context_mark, + "did not find expected ',' or '}'", token.start_mark) + } + } + + if token.typ == yaml_KEY_TOKEN { + skip_token(parser) + token = peek_token(parser) + if token == nil { + return false + } + if token.typ != yaml_VALUE_TOKEN && + token.typ != yaml_FLOW_ENTRY_TOKEN && + token.typ != yaml_FLOW_MAPPING_END_TOKEN { + parser.states = append(parser.states, yaml_PARSE_FLOW_MAPPING_VALUE_STATE) + return yaml_parser_parse_node(parser, event, false, false) + } else { + parser.state = yaml_PARSE_FLOW_MAPPING_VALUE_STATE + return yaml_parser_process_empty_scalar(parser, event, token.start_mark) + } + } else if token.typ != yaml_FLOW_MAPPING_END_TOKEN { + parser.states = append(parser.states, yaml_PARSE_FLOW_MAPPING_EMPTY_VALUE_STATE) + return yaml_parser_parse_node(parser, event, false, false) + } + } + + parser.state = parser.states[len(parser.states)-1] + parser.states = parser.states[:len(parser.states)-1] + parser.marks = parser.marks[:len(parser.marks)-1] + *event = yaml_event_t{ + typ: yaml_MAPPING_END_EVENT, + start_mark: token.start_mark, + end_mark: token.end_mark, + } + yaml_parser_set_event_comments(parser, event) + skip_token(parser) + return true +} + +// Parse the productions: +// flow_mapping_entry ::= flow_node | KEY flow_node? (VALUE flow_node?)? +// * ***** * +// +func yaml_parser_parse_flow_mapping_value(parser *yaml_parser_t, event *yaml_event_t, empty bool) bool { + token := peek_token(parser) + if token == nil { + return false + } + if empty { + parser.state = yaml_PARSE_FLOW_MAPPING_KEY_STATE + return yaml_parser_process_empty_scalar(parser, event, token.start_mark) + } + if token.typ == yaml_VALUE_TOKEN { + skip_token(parser) + token = peek_token(parser) + if token == nil { + return false + } + if token.typ != yaml_FLOW_ENTRY_TOKEN && token.typ != yaml_FLOW_MAPPING_END_TOKEN { + parser.states = append(parser.states, yaml_PARSE_FLOW_MAPPING_KEY_STATE) + return yaml_parser_parse_node(parser, event, false, false) + } + } + parser.state = yaml_PARSE_FLOW_MAPPING_KEY_STATE + return yaml_parser_process_empty_scalar(parser, event, token.start_mark) +} + +// Generate an empty scalar event. +func yaml_parser_process_empty_scalar(parser *yaml_parser_t, event *yaml_event_t, mark yaml_mark_t) bool { + *event = yaml_event_t{ + typ: yaml_SCALAR_EVENT, + start_mark: mark, + end_mark: mark, + value: nil, // Empty + implicit: true, + style: yaml_style_t(yaml_PLAIN_SCALAR_STYLE), + } + return true +} + +var default_tag_directives = []yaml_tag_directive_t{ + {[]byte("!"), []byte("!")}, + {[]byte("!!"), []byte("tag:yaml.org,2002:")}, +} + +// Parse directives. +func yaml_parser_process_directives(parser *yaml_parser_t, + version_directive_ref **yaml_version_directive_t, + tag_directives_ref *[]yaml_tag_directive_t) bool { + + var version_directive *yaml_version_directive_t + var tag_directives []yaml_tag_directive_t + + token := peek_token(parser) + if token == nil { + return false + } + + for token.typ == yaml_VERSION_DIRECTIVE_TOKEN || token.typ == yaml_TAG_DIRECTIVE_TOKEN { + if token.typ == yaml_VERSION_DIRECTIVE_TOKEN { + if version_directive != nil { + yaml_parser_set_parser_error(parser, + "found duplicate %YAML directive", token.start_mark) + return false + } + if token.major != 1 || token.minor != 1 { + yaml_parser_set_parser_error(parser, + "found incompatible YAML document", token.start_mark) + return false + } + version_directive = &yaml_version_directive_t{ + major: token.major, + minor: token.minor, + } + } else if token.typ == yaml_TAG_DIRECTIVE_TOKEN { + value := yaml_tag_directive_t{ + handle: token.value, + prefix: token.prefix, + } + if !yaml_parser_append_tag_directive(parser, value, false, token.start_mark) { + return false + } + tag_directives = append(tag_directives, value) + } + + skip_token(parser) + token = peek_token(parser) + if token == nil { + return false + } + } + + for i := range default_tag_directives { + if !yaml_parser_append_tag_directive(parser, default_tag_directives[i], true, token.start_mark) { + return false + } + } + + if version_directive_ref != nil { + *version_directive_ref = version_directive + } + if tag_directives_ref != nil { + *tag_directives_ref = tag_directives + } + return true +} + +// Append a tag directive to the directives stack. +func yaml_parser_append_tag_directive(parser *yaml_parser_t, value yaml_tag_directive_t, allow_duplicates bool, mark yaml_mark_t) bool { + for i := range parser.tag_directives { + if bytes.Equal(value.handle, parser.tag_directives[i].handle) { + if allow_duplicates { + return true + } + return yaml_parser_set_parser_error(parser, "found duplicate %TAG directive", mark) + } + } + + // [Go] I suspect the copy is unnecessary. This was likely done + // because there was no way to track ownership of the data. + value_copy := yaml_tag_directive_t{ + handle: make([]byte, len(value.handle)), + prefix: make([]byte, len(value.prefix)), + } + copy(value_copy.handle, value.handle) + copy(value_copy.prefix, value.prefix) + parser.tag_directives = append(parser.tag_directives, value_copy) + return true +} diff --git a/go/internal/forked/kyaml/internal/forked/github.com/go-yaml/yaml/readerc.go b/go/internal/forked/kyaml/internal/forked/github.com/go-yaml/yaml/readerc.go new file mode 100644 index 000000000..b7de0a89c --- /dev/null +++ b/go/internal/forked/kyaml/internal/forked/github.com/go-yaml/yaml/readerc.go @@ -0,0 +1,434 @@ +// +// Copyright (c) 2011-2019 Canonical Ltd +// Copyright (c) 2006-2010 Kirill Simonov +// +// Permission is hereby granted, free of charge, to any person obtaining a copy of +// this software and associated documentation files (the "Software"), to deal in +// the Software without restriction, including without limitation the rights to +// use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies +// of the Software, and to permit persons to whom the Software is furnished to do +// so, subject to the following conditions: +// +// The above copyright notice and this permission notice shall be included in all +// copies or substantial portions of the Software. +// +// THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR +// IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, +// FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE +// AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER +// LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, +// OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE +// SOFTWARE. + +package yaml + +import ( + "io" +) + +// Set the reader error and return 0. +func yaml_parser_set_reader_error(parser *yaml_parser_t, problem string, offset int, value int) bool { + parser.error = yaml_READER_ERROR + parser.problem = problem + parser.problem_offset = offset + parser.problem_value = value + return false +} + +// Byte order marks. +const ( + bom_UTF8 = "\xef\xbb\xbf" + bom_UTF16LE = "\xff\xfe" + bom_UTF16BE = "\xfe\xff" +) + +// Determine the input stream encoding by checking the BOM symbol. If no BOM is +// found, the UTF-8 encoding is assumed. Return 1 on success, 0 on failure. +func yaml_parser_determine_encoding(parser *yaml_parser_t) bool { + // Ensure that we had enough bytes in the raw buffer. + for !parser.eof && len(parser.raw_buffer)-parser.raw_buffer_pos < 3 { + if !yaml_parser_update_raw_buffer(parser) { + return false + } + } + + // Determine the encoding. + buf := parser.raw_buffer + pos := parser.raw_buffer_pos + avail := len(buf) - pos + if avail >= 2 && buf[pos] == bom_UTF16LE[0] && buf[pos+1] == bom_UTF16LE[1] { + parser.encoding = yaml_UTF16LE_ENCODING + parser.raw_buffer_pos += 2 + parser.offset += 2 + } else if avail >= 2 && buf[pos] == bom_UTF16BE[0] && buf[pos+1] == bom_UTF16BE[1] { + parser.encoding = yaml_UTF16BE_ENCODING + parser.raw_buffer_pos += 2 + parser.offset += 2 + } else if avail >= 3 && buf[pos] == bom_UTF8[0] && buf[pos+1] == bom_UTF8[1] && buf[pos+2] == bom_UTF8[2] { + parser.encoding = yaml_UTF8_ENCODING + parser.raw_buffer_pos += 3 + parser.offset += 3 + } else { + parser.encoding = yaml_UTF8_ENCODING + } + return true +} + +// Update the raw buffer. +func yaml_parser_update_raw_buffer(parser *yaml_parser_t) bool { + size_read := 0 + + // Return if the raw buffer is full. + if parser.raw_buffer_pos == 0 && len(parser.raw_buffer) == cap(parser.raw_buffer) { + return true + } + + // Return on EOF. + if parser.eof { + return true + } + + // Move the remaining bytes in the raw buffer to the beginning. + if parser.raw_buffer_pos > 0 && parser.raw_buffer_pos < len(parser.raw_buffer) { + copy(parser.raw_buffer, parser.raw_buffer[parser.raw_buffer_pos:]) + } + parser.raw_buffer = parser.raw_buffer[:len(parser.raw_buffer)-parser.raw_buffer_pos] + parser.raw_buffer_pos = 0 + + // Call the read handler to fill the buffer. + size_read, err := parser.read_handler(parser, parser.raw_buffer[len(parser.raw_buffer):cap(parser.raw_buffer)]) + parser.raw_buffer = parser.raw_buffer[:len(parser.raw_buffer)+size_read] + if err == io.EOF { + parser.eof = true + } else if err != nil { + return yaml_parser_set_reader_error(parser, "input error: "+err.Error(), parser.offset, -1) + } + return true +} + +// Ensure that the buffer contains at least `length` characters. +// Return true on success, false on failure. +// +// The length is supposed to be significantly less that the buffer size. +func yaml_parser_update_buffer(parser *yaml_parser_t, length int) bool { + if parser.read_handler == nil { + panic("read handler must be set") + } + + // [Go] This function was changed to guarantee the requested length size at EOF. + // The fact we need to do this is pretty awful, but the description above implies + // for that to be the case, and there are tests + + // If the EOF flag is set and the raw buffer is empty, do nothing. + if parser.eof && parser.raw_buffer_pos == len(parser.raw_buffer) { + // [Go] ACTUALLY! Read the documentation of this function above. + // This is just broken. To return true, we need to have the + // given length in the buffer. Not doing that means every single + // check that calls this function to make sure the buffer has a + // given length is Go) panicking; or C) accessing invalid memory. + //return true + } + + // Return if the buffer contains enough characters. + if parser.unread >= length { + return true + } + + // Determine the input encoding if it is not known yet. + if parser.encoding == yaml_ANY_ENCODING { + if !yaml_parser_determine_encoding(parser) { + return false + } + } + + // Move the unread characters to the beginning of the buffer. + buffer_len := len(parser.buffer) + if parser.buffer_pos > 0 && parser.buffer_pos < buffer_len { + copy(parser.buffer, parser.buffer[parser.buffer_pos:]) + buffer_len -= parser.buffer_pos + parser.buffer_pos = 0 + } else if parser.buffer_pos == buffer_len { + buffer_len = 0 + parser.buffer_pos = 0 + } + + // Open the whole buffer for writing, and cut it before returning. + parser.buffer = parser.buffer[:cap(parser.buffer)] + + // Fill the buffer until it has enough characters. + first := true + for parser.unread < length { + + // Fill the raw buffer if necessary. + if !first || parser.raw_buffer_pos == len(parser.raw_buffer) { + if !yaml_parser_update_raw_buffer(parser) { + parser.buffer = parser.buffer[:buffer_len] + return false + } + } + first = false + + // Decode the raw buffer. + inner: + for parser.raw_buffer_pos != len(parser.raw_buffer) { + var value rune + var width int + + raw_unread := len(parser.raw_buffer) - parser.raw_buffer_pos + + // Decode the next character. + switch parser.encoding { + case yaml_UTF8_ENCODING: + // Decode a UTF-8 character. Check RFC 3629 + // (http://www.ietf.org/rfc/rfc3629.txt) for more details. + // + // The following table (taken from the RFC) is used for + // decoding. + // + // Char. number range | UTF-8 octet sequence + // (hexadecimal) | (binary) + // --------------------+------------------------------------ + // 0000 0000-0000 007F | 0xxxxxxx + // 0000 0080-0000 07FF | 110xxxxx 10xxxxxx + // 0000 0800-0000 FFFF | 1110xxxx 10xxxxxx 10xxxxxx + // 0001 0000-0010 FFFF | 11110xxx 10xxxxxx 10xxxxxx 10xxxxxx + // + // Additionally, the characters in the range 0xD800-0xDFFF + // are prohibited as they are reserved for use with UTF-16 + // surrogate pairs. + + // Determine the length of the UTF-8 sequence. + octet := parser.raw_buffer[parser.raw_buffer_pos] + switch { + case octet&0x80 == 0x00: + width = 1 + case octet&0xE0 == 0xC0: + width = 2 + case octet&0xF0 == 0xE0: + width = 3 + case octet&0xF8 == 0xF0: + width = 4 + default: + // The leading octet is invalid. + return yaml_parser_set_reader_error(parser, + "invalid leading UTF-8 octet", + parser.offset, int(octet)) + } + + // Check if the raw buffer contains an incomplete character. + if width > raw_unread { + if parser.eof { + return yaml_parser_set_reader_error(parser, + "incomplete UTF-8 octet sequence", + parser.offset, -1) + } + break inner + } + + // Decode the leading octet. + switch { + case octet&0x80 == 0x00: + value = rune(octet & 0x7F) + case octet&0xE0 == 0xC0: + value = rune(octet & 0x1F) + case octet&0xF0 == 0xE0: + value = rune(octet & 0x0F) + case octet&0xF8 == 0xF0: + value = rune(octet & 0x07) + default: + value = 0 + } + + // Check and decode the trailing octets. + for k := 1; k < width; k++ { + octet = parser.raw_buffer[parser.raw_buffer_pos+k] + + // Check if the octet is valid. + if (octet & 0xC0) != 0x80 { + return yaml_parser_set_reader_error(parser, + "invalid trailing UTF-8 octet", + parser.offset+k, int(octet)) + } + + // Decode the octet. + value = (value << 6) + rune(octet&0x3F) + } + + // Check the length of the sequence against the value. + switch { + case width == 1: + case width == 2 && value >= 0x80: + case width == 3 && value >= 0x800: + case width == 4 && value >= 0x10000: + default: + return yaml_parser_set_reader_error(parser, + "invalid length of a UTF-8 sequence", + parser.offset, -1) + } + + // Check the range of the value. + if value >= 0xD800 && value <= 0xDFFF || value > 0x10FFFF { + return yaml_parser_set_reader_error(parser, + "invalid Unicode character", + parser.offset, int(value)) + } + + case yaml_UTF16LE_ENCODING, yaml_UTF16BE_ENCODING: + var low, high int + if parser.encoding == yaml_UTF16LE_ENCODING { + low, high = 0, 1 + } else { + low, high = 1, 0 + } + + // The UTF-16 encoding is not as simple as one might + // naively think. Check RFC 2781 + // (http://www.ietf.org/rfc/rfc2781.txt). + // + // Normally, two subsequent bytes describe a Unicode + // character. However a special technique (called a + // surrogate pair) is used for specifying character + // values larger than 0xFFFF. + // + // A surrogate pair consists of two pseudo-characters: + // high surrogate area (0xD800-0xDBFF) + // low surrogate area (0xDC00-0xDFFF) + // + // The following formulas are used for decoding + // and encoding characters using surrogate pairs: + // + // U = U' + 0x10000 (0x01 00 00 <= U <= 0x10 FF FF) + // U' = yyyyyyyyyyxxxxxxxxxx (0 <= U' <= 0x0F FF FF) + // W1 = 110110yyyyyyyyyy + // W2 = 110111xxxxxxxxxx + // + // where U is the character value, W1 is the high surrogate + // area, W2 is the low surrogate area. + + // Check for incomplete UTF-16 character. + if raw_unread < 2 { + if parser.eof { + return yaml_parser_set_reader_error(parser, + "incomplete UTF-16 character", + parser.offset, -1) + } + break inner + } + + // Get the character. + value = rune(parser.raw_buffer[parser.raw_buffer_pos+low]) + + (rune(parser.raw_buffer[parser.raw_buffer_pos+high]) << 8) + + // Check for unexpected low surrogate area. + if value&0xFC00 == 0xDC00 { + return yaml_parser_set_reader_error(parser, + "unexpected low surrogate area", + parser.offset, int(value)) + } + + // Check for a high surrogate area. + if value&0xFC00 == 0xD800 { + width = 4 + + // Check for incomplete surrogate pair. + if raw_unread < 4 { + if parser.eof { + return yaml_parser_set_reader_error(parser, + "incomplete UTF-16 surrogate pair", + parser.offset, -1) + } + break inner + } + + // Get the next character. + value2 := rune(parser.raw_buffer[parser.raw_buffer_pos+low+2]) + + (rune(parser.raw_buffer[parser.raw_buffer_pos+high+2]) << 8) + + // Check for a low surrogate area. + if value2&0xFC00 != 0xDC00 { + return yaml_parser_set_reader_error(parser, + "expected low surrogate area", + parser.offset+2, int(value2)) + } + + // Generate the value of the surrogate pair. + value = 0x10000 + ((value & 0x3FF) << 10) + (value2 & 0x3FF) + } else { + width = 2 + } + + default: + panic("impossible") + } + + // Check if the character is in the allowed range: + // #x9 | #xA | #xD | [#x20-#x7E] (8 bit) + // | #x85 | [#xA0-#xD7FF] | [#xE000-#xFFFD] (16 bit) + // | [#x10000-#x10FFFF] (32 bit) + switch { + case value == 0x09: + case value == 0x0A: + case value == 0x0D: + case value >= 0x20 && value <= 0x7E: + case value == 0x85: + case value >= 0xA0 && value <= 0xD7FF: + case value >= 0xE000 && value <= 0xFFFD: + case value >= 0x10000 && value <= 0x10FFFF: + default: + return yaml_parser_set_reader_error(parser, + "control characters are not allowed", + parser.offset, int(value)) + } + + // Move the raw pointers. + parser.raw_buffer_pos += width + parser.offset += width + + // Finally put the character into the buffer. + if value <= 0x7F { + // 0000 0000-0000 007F . 0xxxxxxx + parser.buffer[buffer_len+0] = byte(value) + buffer_len += 1 + } else if value <= 0x7FF { + // 0000 0080-0000 07FF . 110xxxxx 10xxxxxx + parser.buffer[buffer_len+0] = byte(0xC0 + (value >> 6)) + parser.buffer[buffer_len+1] = byte(0x80 + (value & 0x3F)) + buffer_len += 2 + } else if value <= 0xFFFF { + // 0000 0800-0000 FFFF . 1110xxxx 10xxxxxx 10xxxxxx + parser.buffer[buffer_len+0] = byte(0xE0 + (value >> 12)) + parser.buffer[buffer_len+1] = byte(0x80 + ((value >> 6) & 0x3F)) + parser.buffer[buffer_len+2] = byte(0x80 + (value & 0x3F)) + buffer_len += 3 + } else { + // 0001 0000-0010 FFFF . 11110xxx 10xxxxxx 10xxxxxx 10xxxxxx + parser.buffer[buffer_len+0] = byte(0xF0 + (value >> 18)) + parser.buffer[buffer_len+1] = byte(0x80 + ((value >> 12) & 0x3F)) + parser.buffer[buffer_len+2] = byte(0x80 + ((value >> 6) & 0x3F)) + parser.buffer[buffer_len+3] = byte(0x80 + (value & 0x3F)) + buffer_len += 4 + } + + parser.unread++ + } + + // On EOF, put NUL into the buffer and return. + if parser.eof { + parser.buffer[buffer_len] = 0 + buffer_len++ + parser.unread++ + break + } + } + // [Go] Read the documentation of this function above. To return true, + // we need to have the given length in the buffer. Not doing that means + // every single check that calls this function to make sure the buffer + // has a given length is Go) panicking; or C) accessing invalid memory. + // This happens here due to the EOF above breaking early. + for buffer_len < length { + parser.buffer[buffer_len] = 0 + buffer_len++ + } + parser.buffer = parser.buffer[:buffer_len] + return true +} diff --git a/go/internal/forked/kyaml/internal/forked/github.com/go-yaml/yaml/resolve.go b/go/internal/forked/kyaml/internal/forked/github.com/go-yaml/yaml/resolve.go new file mode 100644 index 000000000..64ae88805 --- /dev/null +++ b/go/internal/forked/kyaml/internal/forked/github.com/go-yaml/yaml/resolve.go @@ -0,0 +1,326 @@ +// +// Copyright (c) 2011-2019 Canonical Ltd +// +// Licensed under the Apache License, Version 2.0 (the "License"); +// you may not use this file except in compliance with the License. +// You may obtain a copy of the License at +// +// http://www.apache.org/licenses/LICENSE-2.0 +// +// Unless required by applicable law or agreed to in writing, software +// distributed under the License is distributed on an "AS IS" BASIS, +// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. +// See the License for the specific language governing permissions and +// limitations under the License. + +package yaml + +import ( + "encoding/base64" + "math" + "regexp" + "strconv" + "strings" + "time" +) + +type resolveMapItem struct { + value interface{} + tag string +} + +var resolveTable = make([]byte, 256) +var resolveMap = make(map[string]resolveMapItem) + +func init() { + t := resolveTable + t[int('+')] = 'S' // Sign + t[int('-')] = 'S' + for _, c := range "0123456789" { + t[int(c)] = 'D' // Digit + } + for _, c := range "yYnNtTfFoO~" { + t[int(c)] = 'M' // In map + } + t[int('.')] = '.' // Float (potentially in map) + + var resolveMapList = []struct { + v interface{} + tag string + l []string + }{ + {true, boolTag, []string{"true", "True", "TRUE"}}, + {false, boolTag, []string{"false", "False", "FALSE"}}, + {nil, nullTag, []string{"", "~", "null", "Null", "NULL"}}, + {math.NaN(), floatTag, []string{".nan", ".NaN", ".NAN"}}, + {math.Inf(+1), floatTag, []string{".inf", ".Inf", ".INF"}}, + {math.Inf(+1), floatTag, []string{"+.inf", "+.Inf", "+.INF"}}, + {math.Inf(-1), floatTag, []string{"-.inf", "-.Inf", "-.INF"}}, + {"<<", mergeTag, []string{"<<"}}, + } + + m := resolveMap + for _, item := range resolveMapList { + for _, s := range item.l { + m[s] = resolveMapItem{item.v, item.tag} + } + } +} + +const ( + nullTag = "!!null" + boolTag = "!!bool" + strTag = "!!str" + intTag = "!!int" + floatTag = "!!float" + timestampTag = "!!timestamp" + seqTag = "!!seq" + mapTag = "!!map" + binaryTag = "!!binary" + mergeTag = "!!merge" +) + +var longTags = make(map[string]string) +var shortTags = make(map[string]string) + +func init() { + for _, stag := range []string{nullTag, boolTag, strTag, intTag, floatTag, timestampTag, seqTag, mapTag, binaryTag, mergeTag} { + ltag := longTag(stag) + longTags[stag] = ltag + shortTags[ltag] = stag + } +} + +const longTagPrefix = "tag:yaml.org,2002:" + +func shortTag(tag string) string { + if strings.HasPrefix(tag, longTagPrefix) { + if stag, ok := shortTags[tag]; ok { + return stag + } + return "!!" + tag[len(longTagPrefix):] + } + return tag +} + +func longTag(tag string) string { + if strings.HasPrefix(tag, "!!") { + if ltag, ok := longTags[tag]; ok { + return ltag + } + return longTagPrefix + tag[2:] + } + return tag +} + +func resolvableTag(tag string) bool { + switch tag { + case "", strTag, boolTag, intTag, floatTag, nullTag, timestampTag: + return true + } + return false +} + +var yamlStyleFloat = regexp.MustCompile(`^[-+]?(\.[0-9]+|[0-9]+(\.[0-9]*)?)([eE][-+]?[0-9]+)?$`) + +func resolve(tag string, in string) (rtag string, out interface{}) { + tag = shortTag(tag) + if !resolvableTag(tag) { + return tag, in + } + + defer func() { + switch tag { + case "", rtag, strTag, binaryTag: + return + case floatTag: + if rtag == intTag { + switch v := out.(type) { + case int64: + rtag = floatTag + out = float64(v) + return + case int: + rtag = floatTag + out = float64(v) + return + } + } + } + failf("cannot decode %s `%s` as a %s", shortTag(rtag), in, shortTag(tag)) + }() + + // Any data is accepted as a !!str or !!binary. + // Otherwise, the prefix is enough of a hint about what it might be. + hint := byte('N') + if in != "" { + hint = resolveTable[in[0]] + } + if hint != 0 && tag != strTag && tag != binaryTag { + // Handle things we can lookup in a map. + if item, ok := resolveMap[in]; ok { + return item.tag, item.value + } + + // Base 60 floats are a bad idea, were dropped in YAML 1.2, and + // are purposefully unsupported here. They're still quoted on + // the way out for compatibility with other parser, though. + + switch hint { + case 'M': + // We've already checked the map above. + + case '.': + // Not in the map, so maybe a normal float. + floatv, err := strconv.ParseFloat(in, 64) + if err == nil { + return floatTag, floatv + } + + case 'D', 'S': + // Int, float, or timestamp. + // Only try values as a timestamp if the value is unquoted or there's an explicit + // !!timestamp tag. + if tag == "" || tag == timestampTag { + t, ok := parseTimestamp(in) + if ok { + return timestampTag, t + } + } + + plain := strings.Replace(in, "_", "", -1) + intv, err := strconv.ParseInt(plain, 0, 64) + if err == nil { + if intv == int64(int(intv)) { + return intTag, int(intv) + } else { + return intTag, intv + } + } + uintv, err := strconv.ParseUint(plain, 0, 64) + if err == nil { + return intTag, uintv + } + if yamlStyleFloat.MatchString(plain) { + floatv, err := strconv.ParseFloat(plain, 64) + if err == nil { + return floatTag, floatv + } + } + if strings.HasPrefix(plain, "0b") { + intv, err := strconv.ParseInt(plain[2:], 2, 64) + if err == nil { + if intv == int64(int(intv)) { + return intTag, int(intv) + } else { + return intTag, intv + } + } + uintv, err := strconv.ParseUint(plain[2:], 2, 64) + if err == nil { + return intTag, uintv + } + } else if strings.HasPrefix(plain, "-0b") { + intv, err := strconv.ParseInt("-"+plain[3:], 2, 64) + if err == nil { + if true || intv == int64(int(intv)) { + return intTag, int(intv) + } else { + return intTag, intv + } + } + } + // Octals as introduced in version 1.2 of the spec. + // Octals from the 1.1 spec, spelled as 0777, are still + // decoded by default in v3 as well for compatibility. + // May be dropped in v4 depending on how usage evolves. + if strings.HasPrefix(plain, "0o") { + intv, err := strconv.ParseInt(plain[2:], 8, 64) + if err == nil { + if intv == int64(int(intv)) { + return intTag, int(intv) + } else { + return intTag, intv + } + } + uintv, err := strconv.ParseUint(plain[2:], 8, 64) + if err == nil { + return intTag, uintv + } + } else if strings.HasPrefix(plain, "-0o") { + intv, err := strconv.ParseInt("-"+plain[3:], 8, 64) + if err == nil { + if true || intv == int64(int(intv)) { + return intTag, int(intv) + } else { + return intTag, intv + } + } + } + default: + panic("internal error: missing handler for resolver table: " + string(rune(hint)) + " (with " + in + ")") + } + } + return strTag, in +} + +// encodeBase64 encodes s as base64 that is broken up into multiple lines +// as appropriate for the resulting length. +func encodeBase64(s string) string { + const lineLen = 70 + encLen := base64.StdEncoding.EncodedLen(len(s)) + lines := encLen/lineLen + 1 + buf := make([]byte, encLen*2+lines) + in := buf[0:encLen] + out := buf[encLen:] + base64.StdEncoding.Encode(in, []byte(s)) + k := 0 + for i := 0; i < len(in); i += lineLen { + j := i + lineLen + if j > len(in) { + j = len(in) + } + k += copy(out[k:], in[i:j]) + if lines > 1 { + out[k] = '\n' + k++ + } + } + return string(out[:k]) +} + +// This is a subset of the formats allowed by the regular expression +// defined at http://yaml.org/type/timestamp.html. +var allowedTimestampFormats = []string{ + "2006-1-2T15:4:5.999999999Z07:00", // RCF3339Nano with short date fields. + "2006-1-2t15:4:5.999999999Z07:00", // RFC3339Nano with short date fields and lower-case "t". + "2006-1-2 15:4:5.999999999", // space separated with no time zone + "2006-1-2", // date only + // Notable exception: time.Parse cannot handle: "2001-12-14 21:59:43.10 -5" + // from the set of examples. +} + +// parseTimestamp parses s as a timestamp string and +// returns the timestamp and reports whether it succeeded. +// Timestamp formats are defined at http://yaml.org/type/timestamp.html +func parseTimestamp(s string) (time.Time, bool) { + // TODO write code to check all the formats supported by + // http://yaml.org/type/timestamp.html instead of using time.Parse. + + // Quick check: all date formats start with YYYY-. + i := 0 + for ; i < len(s); i++ { + if c := s[i]; c < '0' || c > '9' { + break + } + } + if i != 4 || i == len(s) || s[i] != '-' { + return time.Time{}, false + } + for _, format := range allowedTimestampFormats { + if t, err := time.Parse(format, s); err == nil { + return t, true + } + } + return time.Time{}, false +} diff --git a/go/internal/forked/kyaml/internal/forked/github.com/go-yaml/yaml/scannerc.go b/go/internal/forked/kyaml/internal/forked/github.com/go-yaml/yaml/scannerc.go new file mode 100644 index 000000000..ca0070108 --- /dev/null +++ b/go/internal/forked/kyaml/internal/forked/github.com/go-yaml/yaml/scannerc.go @@ -0,0 +1,3038 @@ +// +// Copyright (c) 2011-2019 Canonical Ltd +// Copyright (c) 2006-2010 Kirill Simonov +// +// Permission is hereby granted, free of charge, to any person obtaining a copy of +// this software and associated documentation files (the "Software"), to deal in +// the Software without restriction, including without limitation the rights to +// use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies +// of the Software, and to permit persons to whom the Software is furnished to do +// so, subject to the following conditions: +// +// The above copyright notice and this permission notice shall be included in all +// copies or substantial portions of the Software. +// +// THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR +// IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, +// FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE +// AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER +// LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, +// OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE +// SOFTWARE. + +package yaml + +import ( + "bytes" + "fmt" +) + +// Introduction +// ************ +// +// The following notes assume that you are familiar with the YAML specification +// (http://yaml.org/spec/1.2/spec.html). We mostly follow it, although in +// some cases we are less restrictive that it requires. +// +// The process of transforming a YAML stream into a sequence of events is +// divided on two steps: Scanning and Parsing. +// +// The Scanner transforms the input stream into a sequence of tokens, while the +// parser transform the sequence of tokens produced by the Scanner into a +// sequence of parsing events. +// +// The Scanner is rather clever and complicated. The Parser, on the contrary, +// is a straightforward implementation of a recursive-descendant parser (or, +// LL(1) parser, as it is usually called). +// +// Actually there are two issues of Scanning that might be called "clever", the +// rest is quite straightforward. The issues are "block collection start" and +// "simple keys". Both issues are explained below in details. +// +// Here the Scanning step is explained and implemented. We start with the list +// of all the tokens produced by the Scanner together with short descriptions. +// +// Now, tokens: +// +// STREAM-START(encoding) # The stream start. +// STREAM-END # The stream end. +// VERSION-DIRECTIVE(major,minor) # The '%YAML' directive. +// TAG-DIRECTIVE(handle,prefix) # The '%TAG' directive. +// DOCUMENT-START # '---' +// DOCUMENT-END # '...' +// BLOCK-SEQUENCE-START # Indentation increase denoting a block +// BLOCK-MAPPING-START # sequence or a block mapping. +// BLOCK-END # Indentation decrease. +// FLOW-SEQUENCE-START # '[' +// FLOW-SEQUENCE-END # ']' +// BLOCK-SEQUENCE-START # '{' +// BLOCK-SEQUENCE-END # '}' +// BLOCK-ENTRY # '-' +// FLOW-ENTRY # ',' +// KEY # '?' or nothing (simple keys). +// VALUE # ':' +// ALIAS(anchor) # '*anchor' +// ANCHOR(anchor) # '&anchor' +// TAG(handle,suffix) # '!handle!suffix' +// SCALAR(value,style) # A scalar. +// +// The following two tokens are "virtual" tokens denoting the beginning and the +// end of the stream: +// +// STREAM-START(encoding) +// STREAM-END +// +// We pass the information about the input stream encoding with the +// STREAM-START token. +// +// The next two tokens are responsible for tags: +// +// VERSION-DIRECTIVE(major,minor) +// TAG-DIRECTIVE(handle,prefix) +// +// Example: +// +// %YAML 1.1 +// %TAG ! !foo +// %TAG !yaml! tag:yaml.org,2002: +// --- +// +// The correspoding sequence of tokens: +// +// STREAM-START(utf-8) +// VERSION-DIRECTIVE(1,1) +// TAG-DIRECTIVE("!","!foo") +// TAG-DIRECTIVE("!yaml","tag:yaml.org,2002:") +// DOCUMENT-START +// STREAM-END +// +// Note that the VERSION-DIRECTIVE and TAG-DIRECTIVE tokens occupy a whole +// line. +// +// The document start and end indicators are represented by: +// +// DOCUMENT-START +// DOCUMENT-END +// +// Note that if a YAML stream contains an implicit document (without '---' +// and '...' indicators), no DOCUMENT-START and DOCUMENT-END tokens will be +// produced. +// +// In the following examples, we present whole documents together with the +// produced tokens. +// +// 1. An implicit document: +// +// 'a scalar' +// +// Tokens: +// +// STREAM-START(utf-8) +// SCALAR("a scalar",single-quoted) +// STREAM-END +// +// 2. An explicit document: +// +// --- +// 'a scalar' +// ... +// +// Tokens: +// +// STREAM-START(utf-8) +// DOCUMENT-START +// SCALAR("a scalar",single-quoted) +// DOCUMENT-END +// STREAM-END +// +// 3. Several documents in a stream: +// +// 'a scalar' +// --- +// 'another scalar' +// --- +// 'yet another scalar' +// +// Tokens: +// +// STREAM-START(utf-8) +// SCALAR("a scalar",single-quoted) +// DOCUMENT-START +// SCALAR("another scalar",single-quoted) +// DOCUMENT-START +// SCALAR("yet another scalar",single-quoted) +// STREAM-END +// +// We have already introduced the SCALAR token above. The following tokens are +// used to describe aliases, anchors, tag, and scalars: +// +// ALIAS(anchor) +// ANCHOR(anchor) +// TAG(handle,suffix) +// SCALAR(value,style) +// +// The following series of examples illustrate the usage of these tokens: +// +// 1. A recursive sequence: +// +// &A [ *A ] +// +// Tokens: +// +// STREAM-START(utf-8) +// ANCHOR("A") +// FLOW-SEQUENCE-START +// ALIAS("A") +// FLOW-SEQUENCE-END +// STREAM-END +// +// 2. A tagged scalar: +// +// !!float "3.14" # A good approximation. +// +// Tokens: +// +// STREAM-START(utf-8) +// TAG("!!","float") +// SCALAR("3.14",double-quoted) +// STREAM-END +// +// 3. Various scalar styles: +// +// --- # Implicit empty plain scalars do not produce tokens. +// --- a plain scalar +// --- 'a single-quoted scalar' +// --- "a double-quoted scalar" +// --- |- +// a literal scalar +// --- >- +// a folded +// scalar +// +// Tokens: +// +// STREAM-START(utf-8) +// DOCUMENT-START +// DOCUMENT-START +// SCALAR("a plain scalar",plain) +// DOCUMENT-START +// SCALAR("a single-quoted scalar",single-quoted) +// DOCUMENT-START +// SCALAR("a double-quoted scalar",double-quoted) +// DOCUMENT-START +// SCALAR("a literal scalar",literal) +// DOCUMENT-START +// SCALAR("a folded scalar",folded) +// STREAM-END +// +// Now it's time to review collection-related tokens. We will start with +// flow collections: +// +// FLOW-SEQUENCE-START +// FLOW-SEQUENCE-END +// FLOW-MAPPING-START +// FLOW-MAPPING-END +// FLOW-ENTRY +// KEY +// VALUE +// +// The tokens FLOW-SEQUENCE-START, FLOW-SEQUENCE-END, FLOW-MAPPING-START, and +// FLOW-MAPPING-END represent the indicators '[', ']', '{', and '}' +// correspondingly. FLOW-ENTRY represent the ',' indicator. Finally the +// indicators '?' and ':', which are used for denoting mapping keys and values, +// are represented by the KEY and VALUE tokens. +// +// The following examples show flow collections: +// +// 1. A flow sequence: +// +// [item 1, item 2, item 3] +// +// Tokens: +// +// STREAM-START(utf-8) +// FLOW-SEQUENCE-START +// SCALAR("item 1",plain) +// FLOW-ENTRY +// SCALAR("item 2",plain) +// FLOW-ENTRY +// SCALAR("item 3",plain) +// FLOW-SEQUENCE-END +// STREAM-END +// +// 2. A flow mapping: +// +// { +// a simple key: a value, # Note that the KEY token is produced. +// ? a complex key: another value, +// } +// +// Tokens: +// +// STREAM-START(utf-8) +// FLOW-MAPPING-START +// KEY +// SCALAR("a simple key",plain) +// VALUE +// SCALAR("a value",plain) +// FLOW-ENTRY +// KEY +// SCALAR("a complex key",plain) +// VALUE +// SCALAR("another value",plain) +// FLOW-ENTRY +// FLOW-MAPPING-END +// STREAM-END +// +// A simple key is a key which is not denoted by the '?' indicator. Note that +// the Scanner still produce the KEY token whenever it encounters a simple key. +// +// For scanning block collections, the following tokens are used (note that we +// repeat KEY and VALUE here): +// +// BLOCK-SEQUENCE-START +// BLOCK-MAPPING-START +// BLOCK-END +// BLOCK-ENTRY +// KEY +// VALUE +// +// The tokens BLOCK-SEQUENCE-START and BLOCK-MAPPING-START denote indentation +// increase that precedes a block collection (cf. the INDENT token in Python). +// The token BLOCK-END denote indentation decrease that ends a block collection +// (cf. the DEDENT token in Python). However YAML has some syntax pecularities +// that makes detections of these tokens more complex. +// +// The tokens BLOCK-ENTRY, KEY, and VALUE are used to represent the indicators +// '-', '?', and ':' correspondingly. +// +// The following examples show how the tokens BLOCK-SEQUENCE-START, +// BLOCK-MAPPING-START, and BLOCK-END are emitted by the Scanner: +// +// 1. Block sequences: +// +// - item 1 +// - item 2 +// - +// - item 3.1 +// - item 3.2 +// - +// key 1: value 1 +// key 2: value 2 +// +// Tokens: +// +// STREAM-START(utf-8) +// BLOCK-SEQUENCE-START +// BLOCK-ENTRY +// SCALAR("item 1",plain) +// BLOCK-ENTRY +// SCALAR("item 2",plain) +// BLOCK-ENTRY +// BLOCK-SEQUENCE-START +// BLOCK-ENTRY +// SCALAR("item 3.1",plain) +// BLOCK-ENTRY +// SCALAR("item 3.2",plain) +// BLOCK-END +// BLOCK-ENTRY +// BLOCK-MAPPING-START +// KEY +// SCALAR("key 1",plain) +// VALUE +// SCALAR("value 1",plain) +// KEY +// SCALAR("key 2",plain) +// VALUE +// SCALAR("value 2",plain) +// BLOCK-END +// BLOCK-END +// STREAM-END +// +// 2. Block mappings: +// +// a simple key: a value # The KEY token is produced here. +// ? a complex key +// : another value +// a mapping: +// key 1: value 1 +// key 2: value 2 +// a sequence: +// - item 1 +// - item 2 +// +// Tokens: +// +// STREAM-START(utf-8) +// BLOCK-MAPPING-START +// KEY +// SCALAR("a simple key",plain) +// VALUE +// SCALAR("a value",plain) +// KEY +// SCALAR("a complex key",plain) +// VALUE +// SCALAR("another value",plain) +// KEY +// SCALAR("a mapping",plain) +// BLOCK-MAPPING-START +// KEY +// SCALAR("key 1",plain) +// VALUE +// SCALAR("value 1",plain) +// KEY +// SCALAR("key 2",plain) +// VALUE +// SCALAR("value 2",plain) +// BLOCK-END +// KEY +// SCALAR("a sequence",plain) +// VALUE +// BLOCK-SEQUENCE-START +// BLOCK-ENTRY +// SCALAR("item 1",plain) +// BLOCK-ENTRY +// SCALAR("item 2",plain) +// BLOCK-END +// BLOCK-END +// STREAM-END +// +// YAML does not always require to start a new block collection from a new +// line. If the current line contains only '-', '?', and ':' indicators, a new +// block collection may start at the current line. The following examples +// illustrate this case: +// +// 1. Collections in a sequence: +// +// - - item 1 +// - item 2 +// - key 1: value 1 +// key 2: value 2 +// - ? complex key +// : complex value +// +// Tokens: +// +// STREAM-START(utf-8) +// BLOCK-SEQUENCE-START +// BLOCK-ENTRY +// BLOCK-SEQUENCE-START +// BLOCK-ENTRY +// SCALAR("item 1",plain) +// BLOCK-ENTRY +// SCALAR("item 2",plain) +// BLOCK-END +// BLOCK-ENTRY +// BLOCK-MAPPING-START +// KEY +// SCALAR("key 1",plain) +// VALUE +// SCALAR("value 1",plain) +// KEY +// SCALAR("key 2",plain) +// VALUE +// SCALAR("value 2",plain) +// BLOCK-END +// BLOCK-ENTRY +// BLOCK-MAPPING-START +// KEY +// SCALAR("complex key") +// VALUE +// SCALAR("complex value") +// BLOCK-END +// BLOCK-END +// STREAM-END +// +// 2. Collections in a mapping: +// +// ? a sequence +// : - item 1 +// - item 2 +// ? a mapping +// : key 1: value 1 +// key 2: value 2 +// +// Tokens: +// +// STREAM-START(utf-8) +// BLOCK-MAPPING-START +// KEY +// SCALAR("a sequence",plain) +// VALUE +// BLOCK-SEQUENCE-START +// BLOCK-ENTRY +// SCALAR("item 1",plain) +// BLOCK-ENTRY +// SCALAR("item 2",plain) +// BLOCK-END +// KEY +// SCALAR("a mapping",plain) +// VALUE +// BLOCK-MAPPING-START +// KEY +// SCALAR("key 1",plain) +// VALUE +// SCALAR("value 1",plain) +// KEY +// SCALAR("key 2",plain) +// VALUE +// SCALAR("value 2",plain) +// BLOCK-END +// BLOCK-END +// STREAM-END +// +// YAML also permits non-indented sequences if they are included into a block +// mapping. In this case, the token BLOCK-SEQUENCE-START is not produced: +// +// key: +// - item 1 # BLOCK-SEQUENCE-START is NOT produced here. +// - item 2 +// +// Tokens: +// +// STREAM-START(utf-8) +// BLOCK-MAPPING-START +// KEY +// SCALAR("key",plain) +// VALUE +// BLOCK-ENTRY +// SCALAR("item 1",plain) +// BLOCK-ENTRY +// SCALAR("item 2",plain) +// BLOCK-END +// + +// Ensure that the buffer contains the required number of characters. +// Return true on success, false on failure (reader error or memory error). +func cache(parser *yaml_parser_t, length int) bool { + // [Go] This was inlined: !cache(A, B) -> unread < B && !update(A, B) + return parser.unread >= length || yaml_parser_update_buffer(parser, length) +} + +// Advance the buffer pointer. +func skip(parser *yaml_parser_t) { + if !is_blank(parser.buffer, parser.buffer_pos) { + parser.newlines = 0 + } + parser.mark.index++ + parser.mark.column++ + parser.unread-- + parser.buffer_pos += width(parser.buffer[parser.buffer_pos]) +} + +func skip_line(parser *yaml_parser_t) { + if is_crlf(parser.buffer, parser.buffer_pos) { + parser.mark.index += 2 + parser.mark.column = 0 + parser.mark.line++ + parser.unread -= 2 + parser.buffer_pos += 2 + parser.newlines++ + } else if is_break(parser.buffer, parser.buffer_pos) { + parser.mark.index++ + parser.mark.column = 0 + parser.mark.line++ + parser.unread-- + parser.buffer_pos += width(parser.buffer[parser.buffer_pos]) + parser.newlines++ + } +} + +// Copy a character to a string buffer and advance pointers. +func read(parser *yaml_parser_t, s []byte) []byte { + if !is_blank(parser.buffer, parser.buffer_pos) { + parser.newlines = 0 + } + w := width(parser.buffer[parser.buffer_pos]) + if w == 0 { + panic("invalid character sequence") + } + if len(s) == 0 { + s = make([]byte, 0, 32) + } + if w == 1 && len(s)+w <= cap(s) { + s = s[:len(s)+1] + s[len(s)-1] = parser.buffer[parser.buffer_pos] + parser.buffer_pos++ + } else { + s = append(s, parser.buffer[parser.buffer_pos:parser.buffer_pos+w]...) + parser.buffer_pos += w + } + parser.mark.index++ + parser.mark.column++ + parser.unread-- + return s +} + +// Copy a line break character to a string buffer and advance pointers. +func read_line(parser *yaml_parser_t, s []byte) []byte { + buf := parser.buffer + pos := parser.buffer_pos + switch { + case buf[pos] == '\r' && buf[pos+1] == '\n': + // CR LF . LF + s = append(s, '\n') + parser.buffer_pos += 2 + parser.mark.index++ + parser.unread-- + case buf[pos] == '\r' || buf[pos] == '\n': + // CR|LF . LF + s = append(s, '\n') + parser.buffer_pos += 1 + case buf[pos] == '\xC2' && buf[pos+1] == '\x85': + // NEL . LF + s = append(s, '\n') + parser.buffer_pos += 2 + case buf[pos] == '\xE2' && buf[pos+1] == '\x80' && (buf[pos+2] == '\xA8' || buf[pos+2] == '\xA9'): + // LS|PS . LS|PS + s = append(s, buf[parser.buffer_pos:pos+3]...) + parser.buffer_pos += 3 + default: + return s + } + parser.mark.index++ + parser.mark.column = 0 + parser.mark.line++ + parser.unread-- + parser.newlines++ + return s +} + +// Get the next token. +func yaml_parser_scan(parser *yaml_parser_t, token *yaml_token_t) bool { + // Erase the token object. + *token = yaml_token_t{} // [Go] Is this necessary? + + // No tokens after STREAM-END or error. + if parser.stream_end_produced || parser.error != yaml_NO_ERROR { + return true + } + + // Ensure that the tokens queue contains enough tokens. + if !parser.token_available { + if !yaml_parser_fetch_more_tokens(parser) { + return false + } + } + + // Fetch the next token from the queue. + *token = parser.tokens[parser.tokens_head] + parser.tokens_head++ + parser.tokens_parsed++ + parser.token_available = false + + if token.typ == yaml_STREAM_END_TOKEN { + parser.stream_end_produced = true + } + return true +} + +// Set the scanner error and return false. +func yaml_parser_set_scanner_error(parser *yaml_parser_t, context string, context_mark yaml_mark_t, problem string) bool { + parser.error = yaml_SCANNER_ERROR + parser.context = context + parser.context_mark = context_mark + parser.problem = problem + parser.problem_mark = parser.mark + return false +} + +func yaml_parser_set_scanner_tag_error(parser *yaml_parser_t, directive bool, context_mark yaml_mark_t, problem string) bool { + context := "while parsing a tag" + if directive { + context = "while parsing a %TAG directive" + } + return yaml_parser_set_scanner_error(parser, context, context_mark, problem) +} + +func trace(args ...interface{}) func() { + pargs := append([]interface{}{"+++"}, args...) + fmt.Println(pargs...) + pargs = append([]interface{}{"---"}, args...) + return func() { fmt.Println(pargs...) } +} + +// Ensure that the tokens queue contains at least one token which can be +// returned to the Parser. +func yaml_parser_fetch_more_tokens(parser *yaml_parser_t) bool { + // While we need more tokens to fetch, do it. + for { + // [Go] The comment parsing logic requires a lookahead of two tokens + // so that foot comments may be parsed in time of associating them + // with the tokens that are parsed before them, and also for line + // comments to be transformed into head comments in some edge cases. + if parser.tokens_head < len(parser.tokens)-2 { + // If a potential simple key is at the head position, we need to fetch + // the next token to disambiguate it. + head_tok_idx, ok := parser.simple_keys_by_tok[parser.tokens_parsed] + if !ok { + break + } else if valid, ok := yaml_simple_key_is_valid(parser, &parser.simple_keys[head_tok_idx]); !ok { + return false + } else if !valid { + break + } + } + // Fetch the next token. + if !yaml_parser_fetch_next_token(parser) { + return false + } + } + + parser.token_available = true + return true +} + +// The dispatcher for token fetchers. +func yaml_parser_fetch_next_token(parser *yaml_parser_t) (ok bool) { + // Ensure that the buffer is initialized. + if parser.unread < 1 && !yaml_parser_update_buffer(parser, 1) { + return false + } + + // Check if we just started scanning. Fetch STREAM-START then. + if !parser.stream_start_produced { + return yaml_parser_fetch_stream_start(parser) + } + + scan_mark := parser.mark + + // Eat whitespaces and comments until we reach the next token. + if !yaml_parser_scan_to_next_token(parser) { + return false + } + + // [Go] While unrolling indents, transform the head comments of prior + // indentation levels observed after scan_start into foot comments at + // the respective indexes. + + // Check the indentation level against the current column. + if !yaml_parser_unroll_indent(parser, parser.mark.column, scan_mark) { + return false + } + + // Ensure that the buffer contains at least 4 characters. 4 is the length + // of the longest indicators ('--- ' and '... '). + if parser.unread < 4 && !yaml_parser_update_buffer(parser, 4) { + return false + } + + // Is it the end of the stream? + if is_z(parser.buffer, parser.buffer_pos) { + return yaml_parser_fetch_stream_end(parser) + } + + // Is it a directive? + if parser.mark.column == 0 && parser.buffer[parser.buffer_pos] == '%' { + return yaml_parser_fetch_directive(parser) + } + + buf := parser.buffer + pos := parser.buffer_pos + + // Is it the document start indicator? + if parser.mark.column == 0 && buf[pos] == '-' && buf[pos+1] == '-' && buf[pos+2] == '-' && is_blankz(buf, pos+3) { + return yaml_parser_fetch_document_indicator(parser, yaml_DOCUMENT_START_TOKEN) + } + + // Is it the document end indicator? + if parser.mark.column == 0 && buf[pos] == '.' && buf[pos+1] == '.' && buf[pos+2] == '.' && is_blankz(buf, pos+3) { + return yaml_parser_fetch_document_indicator(parser, yaml_DOCUMENT_END_TOKEN) + } + + comment_mark := parser.mark + if len(parser.tokens) > 0 && (parser.flow_level == 0 && buf[pos] == ':' || parser.flow_level > 0 && buf[pos] == ',') { + // Associate any following comments with the prior token. + comment_mark = parser.tokens[len(parser.tokens)-1].start_mark + } + defer func() { + if !ok { + return + } + if len(parser.tokens) > 0 && parser.tokens[len(parser.tokens)-1].typ == yaml_BLOCK_ENTRY_TOKEN { + // Sequence indicators alone have no line comments. It becomes + // a head comment for whatever follows. + return + } + if !yaml_parser_scan_line_comment(parser, comment_mark) { + ok = false + return + } + }() + + // Is it the flow sequence start indicator? + if buf[pos] == '[' { + return yaml_parser_fetch_flow_collection_start(parser, yaml_FLOW_SEQUENCE_START_TOKEN) + } + + // Is it the flow mapping start indicator? + if parser.buffer[parser.buffer_pos] == '{' { + return yaml_parser_fetch_flow_collection_start(parser, yaml_FLOW_MAPPING_START_TOKEN) + } + + // Is it the flow sequence end indicator? + if parser.buffer[parser.buffer_pos] == ']' { + return yaml_parser_fetch_flow_collection_end(parser, + yaml_FLOW_SEQUENCE_END_TOKEN) + } + + // Is it the flow mapping end indicator? + if parser.buffer[parser.buffer_pos] == '}' { + return yaml_parser_fetch_flow_collection_end(parser, + yaml_FLOW_MAPPING_END_TOKEN) + } + + // Is it the flow entry indicator? + if parser.buffer[parser.buffer_pos] == ',' { + return yaml_parser_fetch_flow_entry(parser) + } + + // Is it the block entry indicator? + if parser.buffer[parser.buffer_pos] == '-' && is_blankz(parser.buffer, parser.buffer_pos+1) { + return yaml_parser_fetch_block_entry(parser) + } + + // Is it the key indicator? + if parser.buffer[parser.buffer_pos] == '?' && (parser.flow_level > 0 || is_blankz(parser.buffer, parser.buffer_pos+1)) { + return yaml_parser_fetch_key(parser) + } + + // Is it the value indicator? + if parser.buffer[parser.buffer_pos] == ':' && (parser.flow_level > 0 || is_blankz(parser.buffer, parser.buffer_pos+1)) { + return yaml_parser_fetch_value(parser) + } + + // Is it an alias? + if parser.buffer[parser.buffer_pos] == '*' { + return yaml_parser_fetch_anchor(parser, yaml_ALIAS_TOKEN) + } + + // Is it an anchor? + if parser.buffer[parser.buffer_pos] == '&' { + return yaml_parser_fetch_anchor(parser, yaml_ANCHOR_TOKEN) + } + + // Is it a tag? + if parser.buffer[parser.buffer_pos] == '!' { + return yaml_parser_fetch_tag(parser) + } + + // Is it a literal scalar? + if parser.buffer[parser.buffer_pos] == '|' && parser.flow_level == 0 { + return yaml_parser_fetch_block_scalar(parser, true) + } + + // Is it a folded scalar? + if parser.buffer[parser.buffer_pos] == '>' && parser.flow_level == 0 { + return yaml_parser_fetch_block_scalar(parser, false) + } + + // Is it a single-quoted scalar? + if parser.buffer[parser.buffer_pos] == '\'' { + return yaml_parser_fetch_flow_scalar(parser, true) + } + + // Is it a double-quoted scalar? + if parser.buffer[parser.buffer_pos] == '"' { + return yaml_parser_fetch_flow_scalar(parser, false) + } + + // Is it a plain scalar? + // + // A plain scalar may start with any non-blank characters except + // + // '-', '?', ':', ',', '[', ']', '{', '}', + // '#', '&', '*', '!', '|', '>', '\'', '\"', + // '%', '@', '`'. + // + // In the block context (and, for the '-' indicator, in the flow context + // too), it may also start with the characters + // + // '-', '?', ':' + // + // if it is followed by a non-space character. + // + // The last rule is more restrictive than the specification requires. + // [Go] TODO Make this logic more reasonable. + //switch parser.buffer[parser.buffer_pos] { + //case '-', '?', ':', ',', '?', '-', ',', ':', ']', '[', '}', '{', '&', '#', '!', '*', '>', '|', '"', '\'', '@', '%', '-', '`': + //} + if !(is_blankz(parser.buffer, parser.buffer_pos) || parser.buffer[parser.buffer_pos] == '-' || + parser.buffer[parser.buffer_pos] == '?' || parser.buffer[parser.buffer_pos] == ':' || + parser.buffer[parser.buffer_pos] == ',' || parser.buffer[parser.buffer_pos] == '[' || + parser.buffer[parser.buffer_pos] == ']' || parser.buffer[parser.buffer_pos] == '{' || + parser.buffer[parser.buffer_pos] == '}' || parser.buffer[parser.buffer_pos] == '#' || + parser.buffer[parser.buffer_pos] == '&' || parser.buffer[parser.buffer_pos] == '*' || + parser.buffer[parser.buffer_pos] == '!' || parser.buffer[parser.buffer_pos] == '|' || + parser.buffer[parser.buffer_pos] == '>' || parser.buffer[parser.buffer_pos] == '\'' || + parser.buffer[parser.buffer_pos] == '"' || parser.buffer[parser.buffer_pos] == '%' || + parser.buffer[parser.buffer_pos] == '@' || parser.buffer[parser.buffer_pos] == '`') || + (parser.buffer[parser.buffer_pos] == '-' && !is_blank(parser.buffer, parser.buffer_pos+1)) || + (parser.flow_level == 0 && + (parser.buffer[parser.buffer_pos] == '?' || parser.buffer[parser.buffer_pos] == ':') && + !is_blankz(parser.buffer, parser.buffer_pos+1)) { + return yaml_parser_fetch_plain_scalar(parser) + } + + // If we don't determine the token type so far, it is an error. + return yaml_parser_set_scanner_error(parser, + "while scanning for the next token", parser.mark, + "found character that cannot start any token") +} + +func yaml_simple_key_is_valid(parser *yaml_parser_t, simple_key *yaml_simple_key_t) (valid, ok bool) { + if !simple_key.possible { + return false, true + } + + // The 1.2 specification says: + // + // "If the ? indicator is omitted, parsing needs to see past the + // implicit key to recognize it as such. To limit the amount of + // lookahead required, the “:†indicator must appear at most 1024 + // Unicode characters beyond the start of the key. In addition, the key + // is restricted to a single line." + // + if simple_key.mark.line < parser.mark.line || simple_key.mark.index+1024 < parser.mark.index { + // Check if the potential simple key to be removed is required. + if simple_key.required { + return false, yaml_parser_set_scanner_error(parser, + "while scanning a simple key", simple_key.mark, + "could not find expected ':'") + } + simple_key.possible = false + return false, true + } + return true, true +} + +// Check if a simple key may start at the current position and add it if +// needed. +func yaml_parser_save_simple_key(parser *yaml_parser_t) bool { + // A simple key is required at the current position if the scanner is in + // the block context and the current column coincides with the indentation + // level. + + required := parser.flow_level == 0 && parser.indent == parser.mark.column + + // + // If the current position may start a simple key, save it. + // + if parser.simple_key_allowed { + simple_key := yaml_simple_key_t{ + possible: true, + required: required, + token_number: parser.tokens_parsed + (len(parser.tokens) - parser.tokens_head), + mark: parser.mark, + } + + if !yaml_parser_remove_simple_key(parser) { + return false + } + parser.simple_keys[len(parser.simple_keys)-1] = simple_key + parser.simple_keys_by_tok[simple_key.token_number] = len(parser.simple_keys) - 1 + } + return true +} + +// Remove a potential simple key at the current flow level. +func yaml_parser_remove_simple_key(parser *yaml_parser_t) bool { + i := len(parser.simple_keys) - 1 + if parser.simple_keys[i].possible { + // If the key is required, it is an error. + if parser.simple_keys[i].required { + return yaml_parser_set_scanner_error(parser, + "while scanning a simple key", parser.simple_keys[i].mark, + "could not find expected ':'") + } + // Remove the key from the stack. + parser.simple_keys[i].possible = false + delete(parser.simple_keys_by_tok, parser.simple_keys[i].token_number) + } + return true +} + +// max_flow_level limits the flow_level +const max_flow_level = 10000 + +// Increase the flow level and resize the simple key list if needed. +func yaml_parser_increase_flow_level(parser *yaml_parser_t) bool { + // Reset the simple key on the next level. + parser.simple_keys = append(parser.simple_keys, yaml_simple_key_t{ + possible: false, + required: false, + token_number: parser.tokens_parsed + (len(parser.tokens) - parser.tokens_head), + mark: parser.mark, + }) + + // Increase the flow level. + parser.flow_level++ + if parser.flow_level > max_flow_level { + return yaml_parser_set_scanner_error(parser, + "while increasing flow level", parser.simple_keys[len(parser.simple_keys)-1].mark, + fmt.Sprintf("exceeded max depth of %d", max_flow_level)) + } + return true +} + +// Decrease the flow level. +func yaml_parser_decrease_flow_level(parser *yaml_parser_t) bool { + if parser.flow_level > 0 { + parser.flow_level-- + last := len(parser.simple_keys) - 1 + delete(parser.simple_keys_by_tok, parser.simple_keys[last].token_number) + parser.simple_keys = parser.simple_keys[:last] + } + return true +} + +// max_indents limits the indents stack size +const max_indents = 10000 + +// Push the current indentation level to the stack and set the new level +// the current column is greater than the indentation level. In this case, +// append or insert the specified token into the token queue. +func yaml_parser_roll_indent(parser *yaml_parser_t, column, number int, typ yaml_token_type_t, mark yaml_mark_t) bool { + // In the flow context, do nothing. + if parser.flow_level > 0 { + return true + } + + if parser.indent < column { + // Push the current indentation level to the stack and set the new + // indentation level. + parser.indents = append(parser.indents, parser.indent) + parser.indent = column + if len(parser.indents) > max_indents { + return yaml_parser_set_scanner_error(parser, + "while increasing indent level", parser.simple_keys[len(parser.simple_keys)-1].mark, + fmt.Sprintf("exceeded max depth of %d", max_indents)) + } + + // Create a token and insert it into the queue. + token := yaml_token_t{ + typ: typ, + start_mark: mark, + end_mark: mark, + } + if number > -1 { + number -= parser.tokens_parsed + } + yaml_insert_token(parser, number, &token) + } + return true +} + +// Pop indentation levels from the indents stack until the current level +// becomes less or equal to the column. For each indentation level, append +// the BLOCK-END token. +func yaml_parser_unroll_indent(parser *yaml_parser_t, column int, scan_mark yaml_mark_t) bool { + // In the flow context, do nothing. + if parser.flow_level > 0 { + return true + } + + block_mark := scan_mark + block_mark.index-- + + // Loop through the indentation levels in the stack. + for parser.indent > column { + + // [Go] Reposition the end token before potential following + // foot comments of parent blocks. For that, search + // backwards for recent comments that were at the same + // indent as the block that is ending now. + stop_index := block_mark.index + for i := len(parser.comments) - 1; i >= 0; i-- { + comment := &parser.comments[i] + + if comment.end_mark.index < stop_index { + // Don't go back beyond the start of the comment/whitespace scan, unless column < 0. + // If requested indent column is < 0, then the document is over and everything else + // is a foot anyway. + break + } + if comment.start_mark.column == parser.indent+1 { + // This is a good match. But maybe there's a former comment + // at that same indent level, so keep searching. + block_mark = comment.start_mark + } + + // While the end of the former comment matches with + // the start of the following one, we know there's + // nothing in between and scanning is still safe. + stop_index = comment.scan_mark.index + } + + // Create a token and append it to the queue. + token := yaml_token_t{ + typ: yaml_BLOCK_END_TOKEN, + start_mark: block_mark, + end_mark: block_mark, + } + yaml_insert_token(parser, -1, &token) + + // Pop the indentation level. + parser.indent = parser.indents[len(parser.indents)-1] + parser.indents = parser.indents[:len(parser.indents)-1] + } + return true +} + +// Initialize the scanner and produce the STREAM-START token. +func yaml_parser_fetch_stream_start(parser *yaml_parser_t) bool { + + // Set the initial indentation. + parser.indent = -1 + + // Initialize the simple key stack. + parser.simple_keys = append(parser.simple_keys, yaml_simple_key_t{}) + + parser.simple_keys_by_tok = make(map[int]int) + + // A simple key is allowed at the beginning of the stream. + parser.simple_key_allowed = true + + // We have started. + parser.stream_start_produced = true + + // Create the STREAM-START token and append it to the queue. + token := yaml_token_t{ + typ: yaml_STREAM_START_TOKEN, + start_mark: parser.mark, + end_mark: parser.mark, + encoding: parser.encoding, + } + yaml_insert_token(parser, -1, &token) + return true +} + +// Produce the STREAM-END token and shut down the scanner. +func yaml_parser_fetch_stream_end(parser *yaml_parser_t) bool { + + // Force new line. + if parser.mark.column != 0 { + parser.mark.column = 0 + parser.mark.line++ + } + + // Reset the indentation level. + if !yaml_parser_unroll_indent(parser, -1, parser.mark) { + return false + } + + // Reset simple keys. + if !yaml_parser_remove_simple_key(parser) { + return false + } + + parser.simple_key_allowed = false + + // Create the STREAM-END token and append it to the queue. + token := yaml_token_t{ + typ: yaml_STREAM_END_TOKEN, + start_mark: parser.mark, + end_mark: parser.mark, + } + yaml_insert_token(parser, -1, &token) + return true +} + +// Produce a VERSION-DIRECTIVE or TAG-DIRECTIVE token. +func yaml_parser_fetch_directive(parser *yaml_parser_t) bool { + // Reset the indentation level. + if !yaml_parser_unroll_indent(parser, -1, parser.mark) { + return false + } + + // Reset simple keys. + if !yaml_parser_remove_simple_key(parser) { + return false + } + + parser.simple_key_allowed = false + + // Create the YAML-DIRECTIVE or TAG-DIRECTIVE token. + token := yaml_token_t{} + if !yaml_parser_scan_directive(parser, &token) { + return false + } + // Append the token to the queue. + yaml_insert_token(parser, -1, &token) + return true +} + +// Produce the DOCUMENT-START or DOCUMENT-END token. +func yaml_parser_fetch_document_indicator(parser *yaml_parser_t, typ yaml_token_type_t) bool { + // Reset the indentation level. + if !yaml_parser_unroll_indent(parser, -1, parser.mark) { + return false + } + + // Reset simple keys. + if !yaml_parser_remove_simple_key(parser) { + return false + } + + parser.simple_key_allowed = false + + // Consume the token. + start_mark := parser.mark + + skip(parser) + skip(parser) + skip(parser) + + end_mark := parser.mark + + // Create the DOCUMENT-START or DOCUMENT-END token. + token := yaml_token_t{ + typ: typ, + start_mark: start_mark, + end_mark: end_mark, + } + // Append the token to the queue. + yaml_insert_token(parser, -1, &token) + return true +} + +// Produce the FLOW-SEQUENCE-START or FLOW-MAPPING-START token. +func yaml_parser_fetch_flow_collection_start(parser *yaml_parser_t, typ yaml_token_type_t) bool { + + // The indicators '[' and '{' may start a simple key. + if !yaml_parser_save_simple_key(parser) { + return false + } + + // Increase the flow level. + if !yaml_parser_increase_flow_level(parser) { + return false + } + + // A simple key may follow the indicators '[' and '{'. + parser.simple_key_allowed = true + + // Consume the token. + start_mark := parser.mark + skip(parser) + end_mark := parser.mark + + // Create the FLOW-SEQUENCE-START of FLOW-MAPPING-START token. + token := yaml_token_t{ + typ: typ, + start_mark: start_mark, + end_mark: end_mark, + } + // Append the token to the queue. + yaml_insert_token(parser, -1, &token) + return true +} + +// Produce the FLOW-SEQUENCE-END or FLOW-MAPPING-END token. +func yaml_parser_fetch_flow_collection_end(parser *yaml_parser_t, typ yaml_token_type_t) bool { + // Reset any potential simple key on the current flow level. + if !yaml_parser_remove_simple_key(parser) { + return false + } + + // Decrease the flow level. + if !yaml_parser_decrease_flow_level(parser) { + return false + } + + // No simple keys after the indicators ']' and '}'. + parser.simple_key_allowed = false + + // Consume the token. + + start_mark := parser.mark + skip(parser) + end_mark := parser.mark + + // Create the FLOW-SEQUENCE-END of FLOW-MAPPING-END token. + token := yaml_token_t{ + typ: typ, + start_mark: start_mark, + end_mark: end_mark, + } + // Append the token to the queue. + yaml_insert_token(parser, -1, &token) + return true +} + +// Produce the FLOW-ENTRY token. +func yaml_parser_fetch_flow_entry(parser *yaml_parser_t) bool { + // Reset any potential simple keys on the current flow level. + if !yaml_parser_remove_simple_key(parser) { + return false + } + + // Simple keys are allowed after ','. + parser.simple_key_allowed = true + + // Consume the token. + start_mark := parser.mark + skip(parser) + end_mark := parser.mark + + // Create the FLOW-ENTRY token and append it to the queue. + token := yaml_token_t{ + typ: yaml_FLOW_ENTRY_TOKEN, + start_mark: start_mark, + end_mark: end_mark, + } + yaml_insert_token(parser, -1, &token) + return true +} + +// Produce the BLOCK-ENTRY token. +func yaml_parser_fetch_block_entry(parser *yaml_parser_t) bool { + // Check if the scanner is in the block context. + if parser.flow_level == 0 { + // Check if we are allowed to start a new entry. + if !parser.simple_key_allowed { + return yaml_parser_set_scanner_error(parser, "", parser.mark, + "block sequence entries are not allowed in this context") + } + // Add the BLOCK-SEQUENCE-START token if needed. + if !yaml_parser_roll_indent(parser, parser.mark.column, -1, yaml_BLOCK_SEQUENCE_START_TOKEN, parser.mark) { + return false + } + } else { + // It is an error for the '-' indicator to occur in the flow context, + // but we let the Parser detect and report about it because the Parser + // is able to point to the context. + } + + // Reset any potential simple keys on the current flow level. + if !yaml_parser_remove_simple_key(parser) { + return false + } + + // Simple keys are allowed after '-'. + parser.simple_key_allowed = true + + // Consume the token. + start_mark := parser.mark + skip(parser) + end_mark := parser.mark + + // Create the BLOCK-ENTRY token and append it to the queue. + token := yaml_token_t{ + typ: yaml_BLOCK_ENTRY_TOKEN, + start_mark: start_mark, + end_mark: end_mark, + } + yaml_insert_token(parser, -1, &token) + return true +} + +// Produce the KEY token. +func yaml_parser_fetch_key(parser *yaml_parser_t) bool { + + // In the block context, additional checks are required. + if parser.flow_level == 0 { + // Check if we are allowed to start a new key (not nessesary simple). + if !parser.simple_key_allowed { + return yaml_parser_set_scanner_error(parser, "", parser.mark, + "mapping keys are not allowed in this context") + } + // Add the BLOCK-MAPPING-START token if needed. + if !yaml_parser_roll_indent(parser, parser.mark.column, -1, yaml_BLOCK_MAPPING_START_TOKEN, parser.mark) { + return false + } + } + + // Reset any potential simple keys on the current flow level. + if !yaml_parser_remove_simple_key(parser) { + return false + } + + // Simple keys are allowed after '?' in the block context. + parser.simple_key_allowed = parser.flow_level == 0 + + // Consume the token. + start_mark := parser.mark + skip(parser) + end_mark := parser.mark + + // Create the KEY token and append it to the queue. + token := yaml_token_t{ + typ: yaml_KEY_TOKEN, + start_mark: start_mark, + end_mark: end_mark, + } + yaml_insert_token(parser, -1, &token) + return true +} + +// Produce the VALUE token. +func yaml_parser_fetch_value(parser *yaml_parser_t) bool { + + simple_key := &parser.simple_keys[len(parser.simple_keys)-1] + + // Have we found a simple key? + if valid, ok := yaml_simple_key_is_valid(parser, simple_key); !ok { + return false + + } else if valid { + + // Create the KEY token and insert it into the queue. + token := yaml_token_t{ + typ: yaml_KEY_TOKEN, + start_mark: simple_key.mark, + end_mark: simple_key.mark, + } + yaml_insert_token(parser, simple_key.token_number-parser.tokens_parsed, &token) + + // In the block context, we may need to add the BLOCK-MAPPING-START token. + if !yaml_parser_roll_indent(parser, simple_key.mark.column, + simple_key.token_number, + yaml_BLOCK_MAPPING_START_TOKEN, simple_key.mark) { + return false + } + + // Remove the simple key. + simple_key.possible = false + delete(parser.simple_keys_by_tok, simple_key.token_number) + + // A simple key cannot follow another simple key. + parser.simple_key_allowed = false + + } else { + // The ':' indicator follows a complex key. + + // In the block context, extra checks are required. + if parser.flow_level == 0 { + + // Check if we are allowed to start a complex value. + if !parser.simple_key_allowed { + return yaml_parser_set_scanner_error(parser, "", parser.mark, + "mapping values are not allowed in this context") + } + + // Add the BLOCK-MAPPING-START token if needed. + if !yaml_parser_roll_indent(parser, parser.mark.column, -1, yaml_BLOCK_MAPPING_START_TOKEN, parser.mark) { + return false + } + } + + // Simple keys after ':' are allowed in the block context. + parser.simple_key_allowed = parser.flow_level == 0 + } + + // Consume the token. + start_mark := parser.mark + skip(parser) + end_mark := parser.mark + + // Create the VALUE token and append it to the queue. + token := yaml_token_t{ + typ: yaml_VALUE_TOKEN, + start_mark: start_mark, + end_mark: end_mark, + } + yaml_insert_token(parser, -1, &token) + return true +} + +// Produce the ALIAS or ANCHOR token. +func yaml_parser_fetch_anchor(parser *yaml_parser_t, typ yaml_token_type_t) bool { + // An anchor or an alias could be a simple key. + if !yaml_parser_save_simple_key(parser) { + return false + } + + // A simple key cannot follow an anchor or an alias. + parser.simple_key_allowed = false + + // Create the ALIAS or ANCHOR token and append it to the queue. + var token yaml_token_t + if !yaml_parser_scan_anchor(parser, &token, typ) { + return false + } + yaml_insert_token(parser, -1, &token) + return true +} + +// Produce the TAG token. +func yaml_parser_fetch_tag(parser *yaml_parser_t) bool { + // A tag could be a simple key. + if !yaml_parser_save_simple_key(parser) { + return false + } + + // A simple key cannot follow a tag. + parser.simple_key_allowed = false + + // Create the TAG token and append it to the queue. + var token yaml_token_t + if !yaml_parser_scan_tag(parser, &token) { + return false + } + yaml_insert_token(parser, -1, &token) + return true +} + +// Produce the SCALAR(...,literal) or SCALAR(...,folded) tokens. +func yaml_parser_fetch_block_scalar(parser *yaml_parser_t, literal bool) bool { + // Remove any potential simple keys. + if !yaml_parser_remove_simple_key(parser) { + return false + } + + // A simple key may follow a block scalar. + parser.simple_key_allowed = true + + // Create the SCALAR token and append it to the queue. + var token yaml_token_t + if !yaml_parser_scan_block_scalar(parser, &token, literal) { + return false + } + yaml_insert_token(parser, -1, &token) + return true +} + +// Produce the SCALAR(...,single-quoted) or SCALAR(...,double-quoted) tokens. +func yaml_parser_fetch_flow_scalar(parser *yaml_parser_t, single bool) bool { + // A plain scalar could be a simple key. + if !yaml_parser_save_simple_key(parser) { + return false + } + + // A simple key cannot follow a flow scalar. + parser.simple_key_allowed = false + + // Create the SCALAR token and append it to the queue. + var token yaml_token_t + if !yaml_parser_scan_flow_scalar(parser, &token, single) { + return false + } + yaml_insert_token(parser, -1, &token) + return true +} + +// Produce the SCALAR(...,plain) token. +func yaml_parser_fetch_plain_scalar(parser *yaml_parser_t) bool { + // A plain scalar could be a simple key. + if !yaml_parser_save_simple_key(parser) { + return false + } + + // A simple key cannot follow a flow scalar. + parser.simple_key_allowed = false + + // Create the SCALAR token and append it to the queue. + var token yaml_token_t + if !yaml_parser_scan_plain_scalar(parser, &token) { + return false + } + yaml_insert_token(parser, -1, &token) + return true +} + +// Eat whitespaces and comments until the next token is found. +func yaml_parser_scan_to_next_token(parser *yaml_parser_t) bool { + + scan_mark := parser.mark + + // Until the next token is not found. + for { + // Allow the BOM mark to start a line. + if parser.unread < 1 && !yaml_parser_update_buffer(parser, 1) { + return false + } + if parser.mark.column == 0 && is_bom(parser.buffer, parser.buffer_pos) { + skip(parser) + } + + // Eat whitespaces. + // Tabs are allowed: + // - in the flow context + // - in the block context, but not at the beginning of the line or + // after '-', '?', or ':' (complex value). + if parser.unread < 1 && !yaml_parser_update_buffer(parser, 1) { + return false + } + + for parser.buffer[parser.buffer_pos] == ' ' || ((parser.flow_level > 0 || !parser.simple_key_allowed) && parser.buffer[parser.buffer_pos] == '\t') { + skip(parser) + if parser.unread < 1 && !yaml_parser_update_buffer(parser, 1) { + return false + } + } + + // Check if we just had a line comment under a sequence entry that + // looks more like a header to the following content. Similar to this: + // + // - # The comment + // - Some data + // + // If so, transform the line comment to a head comment and reposition. + if len(parser.comments) > 0 && len(parser.tokens) > 1 { + tokenA := parser.tokens[len(parser.tokens)-2] + tokenB := parser.tokens[len(parser.tokens)-1] + comment := &parser.comments[len(parser.comments)-1] + if tokenA.typ == yaml_BLOCK_SEQUENCE_START_TOKEN && tokenB.typ == yaml_BLOCK_ENTRY_TOKEN && len(comment.line) > 0 && !is_break(parser.buffer, parser.buffer_pos) { + // If it was in the prior line, reposition so it becomes a + // header of the follow up token. Otherwise, keep it in place + // so it becomes a header of the former. + comment.head = comment.line + comment.line = nil + if comment.start_mark.line == parser.mark.line-1 { + comment.token_mark = parser.mark + } + } + } + + // Eat a comment until a line break. + if parser.buffer[parser.buffer_pos] == '#' { + if !yaml_parser_scan_comments(parser, scan_mark) { + return false + } + } + + // If it is a line break, eat it. + if is_break(parser.buffer, parser.buffer_pos) { + if parser.unread < 2 && !yaml_parser_update_buffer(parser, 2) { + return false + } + skip_line(parser) + + // In the block context, a new line may start a simple key. + if parser.flow_level == 0 { + parser.simple_key_allowed = true + } + } else { + break // We have found a token. + } + } + + return true +} + +// Scan a YAML-DIRECTIVE or TAG-DIRECTIVE token. +// +// Scope: +// %YAML 1.1 # a comment \n +// ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ +// %TAG !yaml! tag:yaml.org,2002: \n +// ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ +// +func yaml_parser_scan_directive(parser *yaml_parser_t, token *yaml_token_t) bool { + // Eat '%'. + start_mark := parser.mark + skip(parser) + + // Scan the directive name. + var name []byte + if !yaml_parser_scan_directive_name(parser, start_mark, &name) { + return false + } + + // Is it a YAML directive? + if bytes.Equal(name, []byte("YAML")) { + // Scan the VERSION directive value. + var major, minor int8 + if !yaml_parser_scan_version_directive_value(parser, start_mark, &major, &minor) { + return false + } + end_mark := parser.mark + + // Create a VERSION-DIRECTIVE token. + *token = yaml_token_t{ + typ: yaml_VERSION_DIRECTIVE_TOKEN, + start_mark: start_mark, + end_mark: end_mark, + major: major, + minor: minor, + } + + // Is it a TAG directive? + } else if bytes.Equal(name, []byte("TAG")) { + // Scan the TAG directive value. + var handle, prefix []byte + if !yaml_parser_scan_tag_directive_value(parser, start_mark, &handle, &prefix) { + return false + } + end_mark := parser.mark + + // Create a TAG-DIRECTIVE token. + *token = yaml_token_t{ + typ: yaml_TAG_DIRECTIVE_TOKEN, + start_mark: start_mark, + end_mark: end_mark, + value: handle, + prefix: prefix, + } + + // Unknown directive. + } else { + yaml_parser_set_scanner_error(parser, "while scanning a directive", + start_mark, "found unknown directive name") + return false + } + + // Eat the rest of the line including any comments. + if parser.unread < 1 && !yaml_parser_update_buffer(parser, 1) { + return false + } + + for is_blank(parser.buffer, parser.buffer_pos) { + skip(parser) + if parser.unread < 1 && !yaml_parser_update_buffer(parser, 1) { + return false + } + } + + if parser.buffer[parser.buffer_pos] == '#' { + // [Go] Discard this inline comment for the time being. + //if !yaml_parser_scan_line_comment(parser, start_mark) { + // return false + //} + for !is_breakz(parser.buffer, parser.buffer_pos) { + skip(parser) + if parser.unread < 1 && !yaml_parser_update_buffer(parser, 1) { + return false + } + } + } + + // Check if we are at the end of the line. + if !is_breakz(parser.buffer, parser.buffer_pos) { + yaml_parser_set_scanner_error(parser, "while scanning a directive", + start_mark, "did not find expected comment or line break") + return false + } + + // Eat a line break. + if is_break(parser.buffer, parser.buffer_pos) { + if parser.unread < 2 && !yaml_parser_update_buffer(parser, 2) { + return false + } + skip_line(parser) + } + + return true +} + +// Scan the directive name. +// +// Scope: +// %YAML 1.1 # a comment \n +// ^^^^ +// %TAG !yaml! tag:yaml.org,2002: \n +// ^^^ +// +func yaml_parser_scan_directive_name(parser *yaml_parser_t, start_mark yaml_mark_t, name *[]byte) bool { + // Consume the directive name. + if parser.unread < 1 && !yaml_parser_update_buffer(parser, 1) { + return false + } + + var s []byte + for is_alpha(parser.buffer, parser.buffer_pos) { + s = read(parser, s) + if parser.unread < 1 && !yaml_parser_update_buffer(parser, 1) { + return false + } + } + + // Check if the name is empty. + if len(s) == 0 { + yaml_parser_set_scanner_error(parser, "while scanning a directive", + start_mark, "could not find expected directive name") + return false + } + + // Check for an blank character after the name. + if !is_blankz(parser.buffer, parser.buffer_pos) { + yaml_parser_set_scanner_error(parser, "while scanning a directive", + start_mark, "found unexpected non-alphabetical character") + return false + } + *name = s + return true +} + +// Scan the value of VERSION-DIRECTIVE. +// +// Scope: +// %YAML 1.1 # a comment \n +// ^^^^^^ +func yaml_parser_scan_version_directive_value(parser *yaml_parser_t, start_mark yaml_mark_t, major, minor *int8) bool { + // Eat whitespaces. + if parser.unread < 1 && !yaml_parser_update_buffer(parser, 1) { + return false + } + for is_blank(parser.buffer, parser.buffer_pos) { + skip(parser) + if parser.unread < 1 && !yaml_parser_update_buffer(parser, 1) { + return false + } + } + + // Consume the major version number. + if !yaml_parser_scan_version_directive_number(parser, start_mark, major) { + return false + } + + // Eat '.'. + if parser.buffer[parser.buffer_pos] != '.' { + return yaml_parser_set_scanner_error(parser, "while scanning a %YAML directive", + start_mark, "did not find expected digit or '.' character") + } + + skip(parser) + + // Consume the minor version number. + if !yaml_parser_scan_version_directive_number(parser, start_mark, minor) { + return false + } + return true +} + +const max_number_length = 2 + +// Scan the version number of VERSION-DIRECTIVE. +// +// Scope: +// %YAML 1.1 # a comment \n +// ^ +// %YAML 1.1 # a comment \n +// ^ +func yaml_parser_scan_version_directive_number(parser *yaml_parser_t, start_mark yaml_mark_t, number *int8) bool { + + // Repeat while the next character is digit. + if parser.unread < 1 && !yaml_parser_update_buffer(parser, 1) { + return false + } + var value, length int8 + for is_digit(parser.buffer, parser.buffer_pos) { + // Check if the number is too long. + length++ + if length > max_number_length { + return yaml_parser_set_scanner_error(parser, "while scanning a %YAML directive", + start_mark, "found extremely long version number") + } + value = value*10 + int8(as_digit(parser.buffer, parser.buffer_pos)) + skip(parser) + if parser.unread < 1 && !yaml_parser_update_buffer(parser, 1) { + return false + } + } + + // Check if the number was present. + if length == 0 { + return yaml_parser_set_scanner_error(parser, "while scanning a %YAML directive", + start_mark, "did not find expected version number") + } + *number = value + return true +} + +// Scan the value of a TAG-DIRECTIVE token. +// +// Scope: +// %TAG !yaml! tag:yaml.org,2002: \n +// ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ +// +func yaml_parser_scan_tag_directive_value(parser *yaml_parser_t, start_mark yaml_mark_t, handle, prefix *[]byte) bool { + var handle_value, prefix_value []byte + + // Eat whitespaces. + if parser.unread < 1 && !yaml_parser_update_buffer(parser, 1) { + return false + } + + for is_blank(parser.buffer, parser.buffer_pos) { + skip(parser) + if parser.unread < 1 && !yaml_parser_update_buffer(parser, 1) { + return false + } + } + + // Scan a handle. + if !yaml_parser_scan_tag_handle(parser, true, start_mark, &handle_value) { + return false + } + + // Expect a whitespace. + if parser.unread < 1 && !yaml_parser_update_buffer(parser, 1) { + return false + } + if !is_blank(parser.buffer, parser.buffer_pos) { + yaml_parser_set_scanner_error(parser, "while scanning a %TAG directive", + start_mark, "did not find expected whitespace") + return false + } + + // Eat whitespaces. + for is_blank(parser.buffer, parser.buffer_pos) { + skip(parser) + if parser.unread < 1 && !yaml_parser_update_buffer(parser, 1) { + return false + } + } + + // Scan a prefix. + if !yaml_parser_scan_tag_uri(parser, true, nil, start_mark, &prefix_value) { + return false + } + + // Expect a whitespace or line break. + if parser.unread < 1 && !yaml_parser_update_buffer(parser, 1) { + return false + } + if !is_blankz(parser.buffer, parser.buffer_pos) { + yaml_parser_set_scanner_error(parser, "while scanning a %TAG directive", + start_mark, "did not find expected whitespace or line break") + return false + } + + *handle = handle_value + *prefix = prefix_value + return true +} + +func yaml_parser_scan_anchor(parser *yaml_parser_t, token *yaml_token_t, typ yaml_token_type_t) bool { + var s []byte + + // Eat the indicator character. + start_mark := parser.mark + skip(parser) + + // Consume the value. + if parser.unread < 1 && !yaml_parser_update_buffer(parser, 1) { + return false + } + + for is_alpha(parser.buffer, parser.buffer_pos) { + s = read(parser, s) + if parser.unread < 1 && !yaml_parser_update_buffer(parser, 1) { + return false + } + } + + end_mark := parser.mark + + /* + * Check if length of the anchor is greater than 0 and it is followed by + * a whitespace character or one of the indicators: + * + * '?', ':', ',', ']', '}', '%', '@', '`'. + */ + + if len(s) == 0 || + !(is_blankz(parser.buffer, parser.buffer_pos) || parser.buffer[parser.buffer_pos] == '?' || + parser.buffer[parser.buffer_pos] == ':' || parser.buffer[parser.buffer_pos] == ',' || + parser.buffer[parser.buffer_pos] == ']' || parser.buffer[parser.buffer_pos] == '}' || + parser.buffer[parser.buffer_pos] == '%' || parser.buffer[parser.buffer_pos] == '@' || + parser.buffer[parser.buffer_pos] == '`') { + context := "while scanning an alias" + if typ == yaml_ANCHOR_TOKEN { + context = "while scanning an anchor" + } + yaml_parser_set_scanner_error(parser, context, start_mark, + "did not find expected alphabetic or numeric character") + return false + } + + // Create a token. + *token = yaml_token_t{ + typ: typ, + start_mark: start_mark, + end_mark: end_mark, + value: s, + } + + return true +} + +/* + * Scan a TAG token. + */ + +func yaml_parser_scan_tag(parser *yaml_parser_t, token *yaml_token_t) bool { + var handle, suffix []byte + + start_mark := parser.mark + + // Check if the tag is in the canonical form. + if parser.unread < 2 && !yaml_parser_update_buffer(parser, 2) { + return false + } + + if parser.buffer[parser.buffer_pos+1] == '<' { + // Keep the handle as '' + + // Eat '!<' + skip(parser) + skip(parser) + + // Consume the tag value. + if !yaml_parser_scan_tag_uri(parser, false, nil, start_mark, &suffix) { + return false + } + + // Check for '>' and eat it. + if parser.buffer[parser.buffer_pos] != '>' { + yaml_parser_set_scanner_error(parser, "while scanning a tag", + start_mark, "did not find the expected '>'") + return false + } + + skip(parser) + } else { + // The tag has either the '!suffix' or the '!handle!suffix' form. + + // First, try to scan a handle. + if !yaml_parser_scan_tag_handle(parser, false, start_mark, &handle) { + return false + } + + // Check if it is, indeed, handle. + if handle[0] == '!' && len(handle) > 1 && handle[len(handle)-1] == '!' { + // Scan the suffix now. + if !yaml_parser_scan_tag_uri(parser, false, nil, start_mark, &suffix) { + return false + } + } else { + // It wasn't a handle after all. Scan the rest of the tag. + if !yaml_parser_scan_tag_uri(parser, false, handle, start_mark, &suffix) { + return false + } + + // Set the handle to '!'. + handle = []byte{'!'} + + // A special case: the '!' tag. Set the handle to '' and the + // suffix to '!'. + if len(suffix) == 0 { + handle, suffix = suffix, handle + } + } + } + + // Check the character which ends the tag. + if parser.unread < 1 && !yaml_parser_update_buffer(parser, 1) { + return false + } + if !is_blankz(parser.buffer, parser.buffer_pos) { + yaml_parser_set_scanner_error(parser, "while scanning a tag", + start_mark, "did not find expected whitespace or line break") + return false + } + + end_mark := parser.mark + + // Create a token. + *token = yaml_token_t{ + typ: yaml_TAG_TOKEN, + start_mark: start_mark, + end_mark: end_mark, + value: handle, + suffix: suffix, + } + return true +} + +// Scan a tag handle. +func yaml_parser_scan_tag_handle(parser *yaml_parser_t, directive bool, start_mark yaml_mark_t, handle *[]byte) bool { + // Check the initial '!' character. + if parser.unread < 1 && !yaml_parser_update_buffer(parser, 1) { + return false + } + if parser.buffer[parser.buffer_pos] != '!' { + yaml_parser_set_scanner_tag_error(parser, directive, + start_mark, "did not find expected '!'") + return false + } + + var s []byte + + // Copy the '!' character. + s = read(parser, s) + + // Copy all subsequent alphabetical and numerical characters. + if parser.unread < 1 && !yaml_parser_update_buffer(parser, 1) { + return false + } + for is_alpha(parser.buffer, parser.buffer_pos) { + s = read(parser, s) + if parser.unread < 1 && !yaml_parser_update_buffer(parser, 1) { + return false + } + } + + // Check if the trailing character is '!' and copy it. + if parser.buffer[parser.buffer_pos] == '!' { + s = read(parser, s) + } else { + // It's either the '!' tag or not really a tag handle. If it's a %TAG + // directive, it's an error. If it's a tag token, it must be a part of URI. + if directive && string(s) != "!" { + yaml_parser_set_scanner_tag_error(parser, directive, + start_mark, "did not find expected '!'") + return false + } + } + + *handle = s + return true +} + +// Scan a tag. +func yaml_parser_scan_tag_uri(parser *yaml_parser_t, directive bool, head []byte, start_mark yaml_mark_t, uri *[]byte) bool { + //size_t length = head ? strlen((char *)head) : 0 + var s []byte + hasTag := len(head) > 0 + + // Copy the head if needed. + // + // Note that we don't copy the leading '!' character. + if len(head) > 1 { + s = append(s, head[1:]...) + } + + // Scan the tag. + if parser.unread < 1 && !yaml_parser_update_buffer(parser, 1) { + return false + } + + // The set of characters that may appear in URI is as follows: + // + // '0'-'9', 'A'-'Z', 'a'-'z', '_', '-', ';', '/', '?', ':', '@', '&', + // '=', '+', '$', ',', '.', '!', '~', '*', '\'', '(', ')', '[', ']', + // '%'. + // [Go] TODO Convert this into more reasonable logic. + for is_alpha(parser.buffer, parser.buffer_pos) || parser.buffer[parser.buffer_pos] == ';' || + parser.buffer[parser.buffer_pos] == '/' || parser.buffer[parser.buffer_pos] == '?' || + parser.buffer[parser.buffer_pos] == ':' || parser.buffer[parser.buffer_pos] == '@' || + parser.buffer[parser.buffer_pos] == '&' || parser.buffer[parser.buffer_pos] == '=' || + parser.buffer[parser.buffer_pos] == '+' || parser.buffer[parser.buffer_pos] == '$' || + parser.buffer[parser.buffer_pos] == ',' || parser.buffer[parser.buffer_pos] == '.' || + parser.buffer[parser.buffer_pos] == '!' || parser.buffer[parser.buffer_pos] == '~' || + parser.buffer[parser.buffer_pos] == '*' || parser.buffer[parser.buffer_pos] == '\'' || + parser.buffer[parser.buffer_pos] == '(' || parser.buffer[parser.buffer_pos] == ')' || + parser.buffer[parser.buffer_pos] == '[' || parser.buffer[parser.buffer_pos] == ']' || + parser.buffer[parser.buffer_pos] == '%' { + // Check if it is a URI-escape sequence. + if parser.buffer[parser.buffer_pos] == '%' { + if !yaml_parser_scan_uri_escapes(parser, directive, start_mark, &s) { + return false + } + } else { + s = read(parser, s) + } + if parser.unread < 1 && !yaml_parser_update_buffer(parser, 1) { + return false + } + hasTag = true + } + + if !hasTag { + yaml_parser_set_scanner_tag_error(parser, directive, + start_mark, "did not find expected tag URI") + return false + } + *uri = s + return true +} + +// Decode an URI-escape sequence corresponding to a single UTF-8 character. +func yaml_parser_scan_uri_escapes(parser *yaml_parser_t, directive bool, start_mark yaml_mark_t, s *[]byte) bool { + + // Decode the required number of characters. + w := 1024 + for w > 0 { + // Check for a URI-escaped octet. + if parser.unread < 3 && !yaml_parser_update_buffer(parser, 3) { + return false + } + + if !(parser.buffer[parser.buffer_pos] == '%' && + is_hex(parser.buffer, parser.buffer_pos+1) && + is_hex(parser.buffer, parser.buffer_pos+2)) { + return yaml_parser_set_scanner_tag_error(parser, directive, + start_mark, "did not find URI escaped octet") + } + + // Get the octet. + octet := byte((as_hex(parser.buffer, parser.buffer_pos+1) << 4) + as_hex(parser.buffer, parser.buffer_pos+2)) + + // If it is the leading octet, determine the length of the UTF-8 sequence. + if w == 1024 { + w = width(octet) + if w == 0 { + return yaml_parser_set_scanner_tag_error(parser, directive, + start_mark, "found an incorrect leading UTF-8 octet") + } + } else { + // Check if the trailing octet is correct. + if octet&0xC0 != 0x80 { + return yaml_parser_set_scanner_tag_error(parser, directive, + start_mark, "found an incorrect trailing UTF-8 octet") + } + } + + // Copy the octet and move the pointers. + *s = append(*s, octet) + skip(parser) + skip(parser) + skip(parser) + w-- + } + return true +} + +// Scan a block scalar. +func yaml_parser_scan_block_scalar(parser *yaml_parser_t, token *yaml_token_t, literal bool) bool { + // Eat the indicator '|' or '>'. + start_mark := parser.mark + skip(parser) + + // Scan the additional block scalar indicators. + if parser.unread < 1 && !yaml_parser_update_buffer(parser, 1) { + return false + } + + // Check for a chomping indicator. + var chomping, increment int + if parser.buffer[parser.buffer_pos] == '+' || parser.buffer[parser.buffer_pos] == '-' { + // Set the chomping method and eat the indicator. + if parser.buffer[parser.buffer_pos] == '+' { + chomping = +1 + } else { + chomping = -1 + } + skip(parser) + + // Check for an indentation indicator. + if parser.unread < 1 && !yaml_parser_update_buffer(parser, 1) { + return false + } + if is_digit(parser.buffer, parser.buffer_pos) { + // Check that the indentation is greater than 0. + if parser.buffer[parser.buffer_pos] == '0' { + yaml_parser_set_scanner_error(parser, "while scanning a block scalar", + start_mark, "found an indentation indicator equal to 0") + return false + } + + // Get the indentation level and eat the indicator. + increment = as_digit(parser.buffer, parser.buffer_pos) + skip(parser) + } + + } else if is_digit(parser.buffer, parser.buffer_pos) { + // Do the same as above, but in the opposite order. + + if parser.buffer[parser.buffer_pos] == '0' { + yaml_parser_set_scanner_error(parser, "while scanning a block scalar", + start_mark, "found an indentation indicator equal to 0") + return false + } + increment = as_digit(parser.buffer, parser.buffer_pos) + skip(parser) + + if parser.unread < 1 && !yaml_parser_update_buffer(parser, 1) { + return false + } + if parser.buffer[parser.buffer_pos] == '+' || parser.buffer[parser.buffer_pos] == '-' { + if parser.buffer[parser.buffer_pos] == '+' { + chomping = +1 + } else { + chomping = -1 + } + skip(parser) + } + } + + // Eat whitespaces and comments to the end of the line. + if parser.unread < 1 && !yaml_parser_update_buffer(parser, 1) { + return false + } + for is_blank(parser.buffer, parser.buffer_pos) { + skip(parser) + if parser.unread < 1 && !yaml_parser_update_buffer(parser, 1) { + return false + } + } + if parser.buffer[parser.buffer_pos] == '#' { + if !yaml_parser_scan_line_comment(parser, start_mark) { + return false + } + for !is_breakz(parser.buffer, parser.buffer_pos) { + skip(parser) + if parser.unread < 1 && !yaml_parser_update_buffer(parser, 1) { + return false + } + } + } + + // Check if we are at the end of the line. + if !is_breakz(parser.buffer, parser.buffer_pos) { + yaml_parser_set_scanner_error(parser, "while scanning a block scalar", + start_mark, "did not find expected comment or line break") + return false + } + + // Eat a line break. + if is_break(parser.buffer, parser.buffer_pos) { + if parser.unread < 2 && !yaml_parser_update_buffer(parser, 2) { + return false + } + skip_line(parser) + } + + end_mark := parser.mark + + // Set the indentation level if it was specified. + var indent int + if increment > 0 { + if parser.indent >= 0 { + indent = parser.indent + increment + } else { + indent = increment + } + } + + // Scan the leading line breaks and determine the indentation level if needed. + var s, leading_break, trailing_breaks []byte + if !yaml_parser_scan_block_scalar_breaks(parser, &indent, &trailing_breaks, start_mark, &end_mark) { + return false + } + + // Scan the block scalar content. + if parser.unread < 1 && !yaml_parser_update_buffer(parser, 1) { + return false + } + var leading_blank, trailing_blank bool + for parser.mark.column == indent && !is_z(parser.buffer, parser.buffer_pos) { + // We are at the beginning of a non-empty line. + + // Is it a trailing whitespace? + trailing_blank = is_blank(parser.buffer, parser.buffer_pos) + + // Check if we need to fold the leading line break. + if !literal && !leading_blank && !trailing_blank && len(leading_break) > 0 && leading_break[0] == '\n' { + // Do we need to join the lines by space? + if len(trailing_breaks) == 0 { + s = append(s, ' ') + } + } else { + s = append(s, leading_break...) + } + leading_break = leading_break[:0] + + // Append the remaining line breaks. + s = append(s, trailing_breaks...) + trailing_breaks = trailing_breaks[:0] + + // Is it a leading whitespace? + leading_blank = is_blank(parser.buffer, parser.buffer_pos) + + // Consume the current line. + for !is_breakz(parser.buffer, parser.buffer_pos) { + s = read(parser, s) + if parser.unread < 1 && !yaml_parser_update_buffer(parser, 1) { + return false + } + } + + // Consume the line break. + if parser.unread < 2 && !yaml_parser_update_buffer(parser, 2) { + return false + } + + leading_break = read_line(parser, leading_break) + + // Eat the following indentation spaces and line breaks. + if !yaml_parser_scan_block_scalar_breaks(parser, &indent, &trailing_breaks, start_mark, &end_mark) { + return false + } + } + + // Chomp the tail. + if chomping != -1 { + s = append(s, leading_break...) + } + if chomping == 1 { + s = append(s, trailing_breaks...) + } + + // Create a token. + *token = yaml_token_t{ + typ: yaml_SCALAR_TOKEN, + start_mark: start_mark, + end_mark: end_mark, + value: s, + style: yaml_LITERAL_SCALAR_STYLE, + } + if !literal { + token.style = yaml_FOLDED_SCALAR_STYLE + } + return true +} + +// Scan indentation spaces and line breaks for a block scalar. Determine the +// indentation level if needed. +func yaml_parser_scan_block_scalar_breaks(parser *yaml_parser_t, indent *int, breaks *[]byte, start_mark yaml_mark_t, end_mark *yaml_mark_t) bool { + *end_mark = parser.mark + + // Eat the indentation spaces and line breaks. + max_indent := 0 + for { + // Eat the indentation spaces. + if parser.unread < 1 && !yaml_parser_update_buffer(parser, 1) { + return false + } + for (*indent == 0 || parser.mark.column < *indent) && is_space(parser.buffer, parser.buffer_pos) { + skip(parser) + if parser.unread < 1 && !yaml_parser_update_buffer(parser, 1) { + return false + } + } + if parser.mark.column > max_indent { + max_indent = parser.mark.column + } + + // Check for a tab character messing the indentation. + if (*indent == 0 || parser.mark.column < *indent) && is_tab(parser.buffer, parser.buffer_pos) { + return yaml_parser_set_scanner_error(parser, "while scanning a block scalar", + start_mark, "found a tab character where an indentation space is expected") + } + + // Have we found a non-empty line? + if !is_break(parser.buffer, parser.buffer_pos) { + break + } + + // Consume the line break. + if parser.unread < 2 && !yaml_parser_update_buffer(parser, 2) { + return false + } + // [Go] Should really be returning breaks instead. + *breaks = read_line(parser, *breaks) + *end_mark = parser.mark + } + + // Determine the indentation level if needed. + if *indent == 0 { + *indent = max_indent + if *indent < parser.indent+1 { + *indent = parser.indent + 1 + } + if *indent < 1 { + *indent = 1 + } + } + return true +} + +// Scan a quoted scalar. +func yaml_parser_scan_flow_scalar(parser *yaml_parser_t, token *yaml_token_t, single bool) bool { + // Eat the left quote. + start_mark := parser.mark + skip(parser) + + // Consume the content of the quoted scalar. + var s, leading_break, trailing_breaks, whitespaces []byte + for { + // Check that there are no document indicators at the beginning of the line. + if parser.unread < 4 && !yaml_parser_update_buffer(parser, 4) { + return false + } + + if parser.mark.column == 0 && + ((parser.buffer[parser.buffer_pos+0] == '-' && + parser.buffer[parser.buffer_pos+1] == '-' && + parser.buffer[parser.buffer_pos+2] == '-') || + (parser.buffer[parser.buffer_pos+0] == '.' && + parser.buffer[parser.buffer_pos+1] == '.' && + parser.buffer[parser.buffer_pos+2] == '.')) && + is_blankz(parser.buffer, parser.buffer_pos+3) { + yaml_parser_set_scanner_error(parser, "while scanning a quoted scalar", + start_mark, "found unexpected document indicator") + return false + } + + // Check for EOF. + if is_z(parser.buffer, parser.buffer_pos) { + yaml_parser_set_scanner_error(parser, "while scanning a quoted scalar", + start_mark, "found unexpected end of stream") + return false + } + + // Consume non-blank characters. + leading_blanks := false + for !is_blankz(parser.buffer, parser.buffer_pos) { + if single && parser.buffer[parser.buffer_pos] == '\'' && parser.buffer[parser.buffer_pos+1] == '\'' { + // Is is an escaped single quote. + s = append(s, '\'') + skip(parser) + skip(parser) + + } else if single && parser.buffer[parser.buffer_pos] == '\'' { + // It is a right single quote. + break + } else if !single && parser.buffer[parser.buffer_pos] == '"' { + // It is a right double quote. + break + + } else if !single && parser.buffer[parser.buffer_pos] == '\\' && is_break(parser.buffer, parser.buffer_pos+1) { + // It is an escaped line break. + if parser.unread < 3 && !yaml_parser_update_buffer(parser, 3) { + return false + } + skip(parser) + skip_line(parser) + leading_blanks = true + break + + } else if !single && parser.buffer[parser.buffer_pos] == '\\' { + // It is an escape sequence. + code_length := 0 + + // Check the escape character. + switch parser.buffer[parser.buffer_pos+1] { + case '0': + s = append(s, 0) + case 'a': + s = append(s, '\x07') + case 'b': + s = append(s, '\x08') + case 't', '\t': + s = append(s, '\x09') + case 'n': + s = append(s, '\x0A') + case 'v': + s = append(s, '\x0B') + case 'f': + s = append(s, '\x0C') + case 'r': + s = append(s, '\x0D') + case 'e': + s = append(s, '\x1B') + case ' ': + s = append(s, '\x20') + case '"': + s = append(s, '"') + case '\'': + s = append(s, '\'') + case '\\': + s = append(s, '\\') + case 'N': // NEL (#x85) + s = append(s, '\xC2') + s = append(s, '\x85') + case '_': // #xA0 + s = append(s, '\xC2') + s = append(s, '\xA0') + case 'L': // LS (#x2028) + s = append(s, '\xE2') + s = append(s, '\x80') + s = append(s, '\xA8') + case 'P': // PS (#x2029) + s = append(s, '\xE2') + s = append(s, '\x80') + s = append(s, '\xA9') + case 'x': + code_length = 2 + case 'u': + code_length = 4 + case 'U': + code_length = 8 + default: + yaml_parser_set_scanner_error(parser, "while parsing a quoted scalar", + start_mark, "found unknown escape character") + return false + } + + skip(parser) + skip(parser) + + // Consume an arbitrary escape code. + if code_length > 0 { + var value int + + // Scan the character value. + if parser.unread < code_length && !yaml_parser_update_buffer(parser, code_length) { + return false + } + for k := 0; k < code_length; k++ { + if !is_hex(parser.buffer, parser.buffer_pos+k) { + yaml_parser_set_scanner_error(parser, "while parsing a quoted scalar", + start_mark, "did not find expected hexdecimal number") + return false + } + value = (value << 4) + as_hex(parser.buffer, parser.buffer_pos+k) + } + + // Check the value and write the character. + if (value >= 0xD800 && value <= 0xDFFF) || value > 0x10FFFF { + yaml_parser_set_scanner_error(parser, "while parsing a quoted scalar", + start_mark, "found invalid Unicode character escape code") + return false + } + if value <= 0x7F { + s = append(s, byte(value)) + } else if value <= 0x7FF { + s = append(s, byte(0xC0+(value>>6))) + s = append(s, byte(0x80+(value&0x3F))) + } else if value <= 0xFFFF { + s = append(s, byte(0xE0+(value>>12))) + s = append(s, byte(0x80+((value>>6)&0x3F))) + s = append(s, byte(0x80+(value&0x3F))) + } else { + s = append(s, byte(0xF0+(value>>18))) + s = append(s, byte(0x80+((value>>12)&0x3F))) + s = append(s, byte(0x80+((value>>6)&0x3F))) + s = append(s, byte(0x80+(value&0x3F))) + } + + // Advance the pointer. + for k := 0; k < code_length; k++ { + skip(parser) + } + } + } else { + // It is a non-escaped non-blank character. + s = read(parser, s) + } + if parser.unread < 2 && !yaml_parser_update_buffer(parser, 2) { + return false + } + } + + if parser.unread < 1 && !yaml_parser_update_buffer(parser, 1) { + return false + } + + // Check if we are at the end of the scalar. + if single { + if parser.buffer[parser.buffer_pos] == '\'' { + break + } + } else { + if parser.buffer[parser.buffer_pos] == '"' { + break + } + } + + // Consume blank characters. + for is_blank(parser.buffer, parser.buffer_pos) || is_break(parser.buffer, parser.buffer_pos) { + if is_blank(parser.buffer, parser.buffer_pos) { + // Consume a space or a tab character. + if !leading_blanks { + whitespaces = read(parser, whitespaces) + } else { + skip(parser) + } + } else { + if parser.unread < 2 && !yaml_parser_update_buffer(parser, 2) { + return false + } + + // Check if it is a first line break. + if !leading_blanks { + whitespaces = whitespaces[:0] + leading_break = read_line(parser, leading_break) + leading_blanks = true + } else { + trailing_breaks = read_line(parser, trailing_breaks) + } + } + if parser.unread < 1 && !yaml_parser_update_buffer(parser, 1) { + return false + } + } + + // Join the whitespaces or fold line breaks. + if leading_blanks { + // Do we need to fold line breaks? + if len(leading_break) > 0 && leading_break[0] == '\n' { + if len(trailing_breaks) == 0 { + s = append(s, ' ') + } else { + s = append(s, trailing_breaks...) + } + } else { + s = append(s, leading_break...) + s = append(s, trailing_breaks...) + } + trailing_breaks = trailing_breaks[:0] + leading_break = leading_break[:0] + } else { + s = append(s, whitespaces...) + whitespaces = whitespaces[:0] + } + } + + // Eat the right quote. + skip(parser) + end_mark := parser.mark + + // Create a token. + *token = yaml_token_t{ + typ: yaml_SCALAR_TOKEN, + start_mark: start_mark, + end_mark: end_mark, + value: s, + style: yaml_SINGLE_QUOTED_SCALAR_STYLE, + } + if !single { + token.style = yaml_DOUBLE_QUOTED_SCALAR_STYLE + } + return true +} + +// Scan a plain scalar. +func yaml_parser_scan_plain_scalar(parser *yaml_parser_t, token *yaml_token_t) bool { + + var s, leading_break, trailing_breaks, whitespaces []byte + var leading_blanks bool + var indent = parser.indent + 1 + + start_mark := parser.mark + end_mark := parser.mark + + // Consume the content of the plain scalar. + for { + // Check for a document indicator. + if parser.unread < 4 && !yaml_parser_update_buffer(parser, 4) { + return false + } + if parser.mark.column == 0 && + ((parser.buffer[parser.buffer_pos+0] == '-' && + parser.buffer[parser.buffer_pos+1] == '-' && + parser.buffer[parser.buffer_pos+2] == '-') || + (parser.buffer[parser.buffer_pos+0] == '.' && + parser.buffer[parser.buffer_pos+1] == '.' && + parser.buffer[parser.buffer_pos+2] == '.')) && + is_blankz(parser.buffer, parser.buffer_pos+3) { + break + } + + // Check for a comment. + if parser.buffer[parser.buffer_pos] == '#' { + break + } + + // Consume non-blank characters. + for !is_blankz(parser.buffer, parser.buffer_pos) { + + // Check for indicators that may end a plain scalar. + if (parser.buffer[parser.buffer_pos] == ':' && is_blankz(parser.buffer, parser.buffer_pos+1)) || + (parser.flow_level > 0 && + (parser.buffer[parser.buffer_pos] == ',' || + parser.buffer[parser.buffer_pos] == '?' || parser.buffer[parser.buffer_pos] == '[' || + parser.buffer[parser.buffer_pos] == ']' || parser.buffer[parser.buffer_pos] == '{' || + parser.buffer[parser.buffer_pos] == '}')) { + break + } + + // Check if we need to join whitespaces and breaks. + if leading_blanks || len(whitespaces) > 0 { + if leading_blanks { + // Do we need to fold line breaks? + if leading_break[0] == '\n' { + if len(trailing_breaks) == 0 { + s = append(s, ' ') + } else { + s = append(s, trailing_breaks...) + } + } else { + s = append(s, leading_break...) + s = append(s, trailing_breaks...) + } + trailing_breaks = trailing_breaks[:0] + leading_break = leading_break[:0] + leading_blanks = false + } else { + s = append(s, whitespaces...) + whitespaces = whitespaces[:0] + } + } + + // Copy the character. + s = read(parser, s) + + end_mark = parser.mark + if parser.unread < 2 && !yaml_parser_update_buffer(parser, 2) { + return false + } + } + + // Is it the end? + if !(is_blank(parser.buffer, parser.buffer_pos) || is_break(parser.buffer, parser.buffer_pos)) { + break + } + + // Consume blank characters. + if parser.unread < 1 && !yaml_parser_update_buffer(parser, 1) { + return false + } + + for is_blank(parser.buffer, parser.buffer_pos) || is_break(parser.buffer, parser.buffer_pos) { + if is_blank(parser.buffer, parser.buffer_pos) { + + // Check for tab characters that abuse indentation. + if leading_blanks && parser.mark.column < indent && is_tab(parser.buffer, parser.buffer_pos) { + yaml_parser_set_scanner_error(parser, "while scanning a plain scalar", + start_mark, "found a tab character that violates indentation") + return false + } + + // Consume a space or a tab character. + if !leading_blanks { + whitespaces = read(parser, whitespaces) + } else { + skip(parser) + } + } else { + if parser.unread < 2 && !yaml_parser_update_buffer(parser, 2) { + return false + } + + // Check if it is a first line break. + if !leading_blanks { + whitespaces = whitespaces[:0] + leading_break = read_line(parser, leading_break) + leading_blanks = true + } else { + trailing_breaks = read_line(parser, trailing_breaks) + } + } + if parser.unread < 1 && !yaml_parser_update_buffer(parser, 1) { + return false + } + } + + // Check indentation level. + if parser.flow_level == 0 && parser.mark.column < indent { + break + } + } + + // Create a token. + *token = yaml_token_t{ + typ: yaml_SCALAR_TOKEN, + start_mark: start_mark, + end_mark: end_mark, + value: s, + style: yaml_PLAIN_SCALAR_STYLE, + } + + // Note that we change the 'simple_key_allowed' flag. + if leading_blanks { + parser.simple_key_allowed = true + } + return true +} + +func yaml_parser_scan_line_comment(parser *yaml_parser_t, token_mark yaml_mark_t) bool { + if parser.newlines > 0 { + return true + } + + var start_mark yaml_mark_t + var text []byte + + for peek := 0; peek < 512; peek++ { + if parser.unread < peek+1 && !yaml_parser_update_buffer(parser, peek+1) { + break + } + if is_blank(parser.buffer, parser.buffer_pos+peek) { + continue + } + if parser.buffer[parser.buffer_pos+peek] == '#' { + seen := parser.mark.index+peek + for { + if parser.unread < 1 && !yaml_parser_update_buffer(parser, 1) { + return false + } + if is_breakz(parser.buffer, parser.buffer_pos) { + if parser.mark.index >= seen { + break + } + if parser.unread < 2 && !yaml_parser_update_buffer(parser, 2) { + return false + } + skip_line(parser) + } else if parser.mark.index >= seen { + if len(text) == 0 { + start_mark = parser.mark + } + text = read(parser, text) + } else { + skip(parser) + } + } + } + break + } + if len(text) > 0 { + parser.comments = append(parser.comments, yaml_comment_t{ + token_mark: token_mark, + start_mark: start_mark, + line: text, + }) + } + return true +} + +func yaml_parser_scan_comments(parser *yaml_parser_t, scan_mark yaml_mark_t) bool { + token := parser.tokens[len(parser.tokens)-1] + + if token.typ == yaml_FLOW_ENTRY_TOKEN && len(parser.tokens) > 1 { + token = parser.tokens[len(parser.tokens)-2] + } + + var token_mark = token.start_mark + var start_mark yaml_mark_t + var next_indent = parser.indent + if next_indent < 0 { + next_indent = 0 + } + + var recent_empty = false + var first_empty = parser.newlines <= 1 + + var line = parser.mark.line + var column = parser.mark.column + + var text []byte + + // The foot line is the place where a comment must start to + // still be considered as a foot of the prior content. + // If there's some content in the currently parsed line, then + // the foot is the line below it. + var foot_line = -1 + if scan_mark.line > 0 { + foot_line = parser.mark.line-parser.newlines+1 + if parser.newlines == 0 && parser.mark.column > 1 { + foot_line++ + } + } + + var peek = 0 + for ; peek < 512; peek++ { + if parser.unread < peek+1 && !yaml_parser_update_buffer(parser, peek+1) { + break + } + column++ + if is_blank(parser.buffer, parser.buffer_pos+peek) { + continue + } + c := parser.buffer[parser.buffer_pos+peek] + var close_flow = parser.flow_level > 0 && (c == ']' || c == '}') + if close_flow || is_breakz(parser.buffer, parser.buffer_pos+peek) { + // Got line break or terminator. + if close_flow || !recent_empty { + if close_flow || first_empty && (start_mark.line == foot_line && token.typ != yaml_VALUE_TOKEN || start_mark.column-1 < next_indent) { + // This is the first empty line and there were no empty lines before, + // so this initial part of the comment is a foot of the prior token + // instead of being a head for the following one. Split it up. + // Alternatively, this might also be the last comment inside a flow + // scope, so it must be a footer. + if len(text) > 0 { + if start_mark.column-1 < next_indent { + // If dedented it's unrelated to the prior token. + token_mark = start_mark + } + parser.comments = append(parser.comments, yaml_comment_t{ + scan_mark: scan_mark, + token_mark: token_mark, + start_mark: start_mark, + end_mark: yaml_mark_t{parser.mark.index + peek, line, column}, + foot: text, + }) + scan_mark = yaml_mark_t{parser.mark.index + peek, line, column} + token_mark = scan_mark + text = nil + } + } else { + if len(text) > 0 && parser.buffer[parser.buffer_pos+peek] != 0 { + text = append(text, '\n') + } + } + } + if !is_break(parser.buffer, parser.buffer_pos+peek) { + break + } + first_empty = false + recent_empty = true + column = 0 + line++ + continue + } + + if len(text) > 0 && (close_flow || column-1 < next_indent && column != start_mark.column) { + // The comment at the different indentation is a foot of the + // preceding data rather than a head of the upcoming one. + parser.comments = append(parser.comments, yaml_comment_t{ + scan_mark: scan_mark, + token_mark: token_mark, + start_mark: start_mark, + end_mark: yaml_mark_t{parser.mark.index + peek, line, column}, + foot: text, + }) + scan_mark = yaml_mark_t{parser.mark.index + peek, line, column} + token_mark = scan_mark + text = nil + } + + if parser.buffer[parser.buffer_pos+peek] != '#' { + break + } + + if len(text) == 0 { + start_mark = yaml_mark_t{parser.mark.index + peek, line, column} + } else { + text = append(text, '\n') + } + + recent_empty = false + + // Consume until after the consumed comment line. + seen := parser.mark.index+peek + for { + if parser.unread < 1 && !yaml_parser_update_buffer(parser, 1) { + return false + } + if is_breakz(parser.buffer, parser.buffer_pos) { + if parser.mark.index >= seen { + break + } + if parser.unread < 2 && !yaml_parser_update_buffer(parser, 2) { + return false + } + skip_line(parser) + } else if parser.mark.index >= seen { + text = read(parser, text) + } else { + skip(parser) + } + } + + peek = 0 + column = 0 + line = parser.mark.line + next_indent = parser.indent + if next_indent < 0 { + next_indent = 0 + } + } + + if len(text) > 0 { + parser.comments = append(parser.comments, yaml_comment_t{ + scan_mark: scan_mark, + token_mark: start_mark, + start_mark: start_mark, + end_mark: yaml_mark_t{parser.mark.index + peek - 1, line, column}, + head: text, + }) + } + return true +} diff --git a/go/internal/forked/kyaml/internal/forked/github.com/go-yaml/yaml/sorter.go b/go/internal/forked/kyaml/internal/forked/github.com/go-yaml/yaml/sorter.go new file mode 100644 index 000000000..9210ece7e --- /dev/null +++ b/go/internal/forked/kyaml/internal/forked/github.com/go-yaml/yaml/sorter.go @@ -0,0 +1,134 @@ +// +// Copyright (c) 2011-2019 Canonical Ltd +// +// Licensed under the Apache License, Version 2.0 (the "License"); +// you may not use this file except in compliance with the License. +// You may obtain a copy of the License at +// +// http://www.apache.org/licenses/LICENSE-2.0 +// +// Unless required by applicable law or agreed to in writing, software +// distributed under the License is distributed on an "AS IS" BASIS, +// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. +// See the License for the specific language governing permissions and +// limitations under the License. + +package yaml + +import ( + "reflect" + "unicode" +) + +type keyList []reflect.Value + +func (l keyList) Len() int { return len(l) } +func (l keyList) Swap(i, j int) { l[i], l[j] = l[j], l[i] } +func (l keyList) Less(i, j int) bool { + a := l[i] + b := l[j] + ak := a.Kind() + bk := b.Kind() + for (ak == reflect.Interface || ak == reflect.Ptr) && !a.IsNil() { + a = a.Elem() + ak = a.Kind() + } + for (bk == reflect.Interface || bk == reflect.Ptr) && !b.IsNil() { + b = b.Elem() + bk = b.Kind() + } + af, aok := keyFloat(a) + bf, bok := keyFloat(b) + if aok && bok { + if af != bf { + return af < bf + } + if ak != bk { + return ak < bk + } + return numLess(a, b) + } + if ak != reflect.String || bk != reflect.String { + return ak < bk + } + ar, br := []rune(a.String()), []rune(b.String()) + digits := false + for i := 0; i < len(ar) && i < len(br); i++ { + if ar[i] == br[i] { + digits = unicode.IsDigit(ar[i]) + continue + } + al := unicode.IsLetter(ar[i]) + bl := unicode.IsLetter(br[i]) + if al && bl { + return ar[i] < br[i] + } + if al || bl { + if digits { + return al + } else { + return bl + } + } + var ai, bi int + var an, bn int64 + if ar[i] == '0' || br[i] == '0' { + for j := i - 1; j >= 0 && unicode.IsDigit(ar[j]); j-- { + if ar[j] != '0' { + an = 1 + bn = 1 + break + } + } + } + for ai = i; ai < len(ar) && unicode.IsDigit(ar[ai]); ai++ { + an = an*10 + int64(ar[ai]-'0') + } + for bi = i; bi < len(br) && unicode.IsDigit(br[bi]); bi++ { + bn = bn*10 + int64(br[bi]-'0') + } + if an != bn { + return an < bn + } + if ai != bi { + return ai < bi + } + return ar[i] < br[i] + } + return len(ar) < len(br) +} + +// keyFloat returns a float value for v if it is a number/bool +// and whether it is a number/bool or not. +func keyFloat(v reflect.Value) (f float64, ok bool) { + switch v.Kind() { + case reflect.Int, reflect.Int8, reflect.Int16, reflect.Int32, reflect.Int64: + return float64(v.Int()), true + case reflect.Float32, reflect.Float64: + return v.Float(), true + case reflect.Uint, reflect.Uint8, reflect.Uint16, reflect.Uint32, reflect.Uint64, reflect.Uintptr: + return float64(v.Uint()), true + case reflect.Bool: + if v.Bool() { + return 1, true + } + return 0, true + } + return 0, false +} + +// numLess returns whether a < b. +// a and b must necessarily have the same kind. +func numLess(a, b reflect.Value) bool { + switch a.Kind() { + case reflect.Int, reflect.Int8, reflect.Int16, reflect.Int32, reflect.Int64: + return a.Int() < b.Int() + case reflect.Float32, reflect.Float64: + return a.Float() < b.Float() + case reflect.Uint, reflect.Uint8, reflect.Uint16, reflect.Uint32, reflect.Uint64, reflect.Uintptr: + return a.Uint() < b.Uint() + case reflect.Bool: + return !a.Bool() && b.Bool() + } + panic("not a number") +} diff --git a/go/internal/forked/kyaml/internal/forked/github.com/go-yaml/yaml/suite_test.go b/go/internal/forked/kyaml/internal/forked/github.com/go-yaml/yaml/suite_test.go new file mode 100644 index 000000000..e8a2974c0 --- /dev/null +++ b/go/internal/forked/kyaml/internal/forked/github.com/go-yaml/yaml/suite_test.go @@ -0,0 +1,26 @@ +// +// Copyright (c) 2011-2019 Canonical Ltd +// +// Licensed under the Apache License, Version 2.0 (the "License"); +// you may not use this file except in compliance with the License. +// You may obtain a copy of the License at +// +// http://www.apache.org/licenses/LICENSE-2.0 +// +// Unless required by applicable law or agreed to in writing, software +// distributed under the License is distributed on an "AS IS" BASIS, +// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. +// See the License for the specific language governing permissions and +// limitations under the License. + +package yaml_test + +import ( + "testing" +) + +func Test(t *testing.T) { TestingT(t) } + +type S struct{} + +var _ = Suite(&S{}) diff --git a/go/internal/forked/kyaml/internal/forked/github.com/go-yaml/yaml/writerc.go b/go/internal/forked/kyaml/internal/forked/github.com/go-yaml/yaml/writerc.go new file mode 100644 index 000000000..b8a116bf9 --- /dev/null +++ b/go/internal/forked/kyaml/internal/forked/github.com/go-yaml/yaml/writerc.go @@ -0,0 +1,48 @@ +// +// Copyright (c) 2011-2019 Canonical Ltd +// Copyright (c) 2006-2010 Kirill Simonov +// +// Permission is hereby granted, free of charge, to any person obtaining a copy of +// this software and associated documentation files (the "Software"), to deal in +// the Software without restriction, including without limitation the rights to +// use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies +// of the Software, and to permit persons to whom the Software is furnished to do +// so, subject to the following conditions: +// +// The above copyright notice and this permission notice shall be included in all +// copies or substantial portions of the Software. +// +// THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR +// IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, +// FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE +// AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER +// LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, +// OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE +// SOFTWARE. + +package yaml + +// Set the writer error and return false. +func yaml_emitter_set_writer_error(emitter *yaml_emitter_t, problem string) bool { + emitter.error = yaml_WRITER_ERROR + emitter.problem = problem + return false +} + +// Flush the output buffer. +func yaml_emitter_flush(emitter *yaml_emitter_t) bool { + if emitter.write_handler == nil { + panic("write handler not set") + } + + // Check if the buffer is empty. + if emitter.buffer_pos == 0 { + return true + } + + if err := emitter.write_handler(emitter, emitter.buffer[:emitter.buffer_pos]); err != nil { + return yaml_emitter_set_writer_error(emitter, "write error: "+err.Error()) + } + emitter.buffer_pos = 0 + return true +} diff --git a/go/internal/forked/kyaml/internal/forked/github.com/go-yaml/yaml/yaml.go b/go/internal/forked/kyaml/internal/forked/github.com/go-yaml/yaml/yaml.go new file mode 100644 index 000000000..e218ffae3 --- /dev/null +++ b/go/internal/forked/kyaml/internal/forked/github.com/go-yaml/yaml/yaml.go @@ -0,0 +1,707 @@ +// +// Copyright (c) 2011-2019 Canonical Ltd +// +// Licensed under the Apache License, Version 2.0 (the "License"); +// you may not use this file except in compliance with the License. +// You may obtain a copy of the License at +// +// http://www.apache.org/licenses/LICENSE-2.0 +// +// Unless required by applicable law or agreed to in writing, software +// distributed under the License is distributed on an "AS IS" BASIS, +// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. +// See the License for the specific language governing permissions and +// limitations under the License. + +// Package yaml implements YAML support for the Go language. +// +// Source code and other details for the project are available at GitHub: +// +// https://github.com/go-yaml/yaml +// +package yaml + +import ( + "errors" + "fmt" + "io" + "reflect" + "strings" + "sync" + "unicode/utf8" +) + +// The Unmarshaler interface may be implemented by types to customize their +// behavior when being unmarshaled from a YAML document. +type Unmarshaler interface { + UnmarshalYAML(value *Node) error +} + +type obsoleteUnmarshaler interface { + UnmarshalYAML(unmarshal func(interface{}) error) error +} + +// The Marshaler interface may be implemented by types to customize their +// behavior when being marshaled into a YAML document. The returned value +// is marshaled in place of the original value implementing Marshaler. +// +// If an error is returned by MarshalYAML, the marshaling procedure stops +// and returns with the provided error. +type Marshaler interface { + MarshalYAML() (interface{}, error) +} + +// Unmarshal decodes the first document found within the in byte slice +// and assigns decoded values into the out value. +// +// Maps and pointers (to a struct, string, int, etc) are accepted as out +// values. If an internal pointer within a struct is not initialized, +// the yaml package will initialize it if necessary for unmarshalling +// the provided data. The out parameter must not be nil. +// +// The type of the decoded values should be compatible with the respective +// values in out. If one or more values cannot be decoded due to a type +// mismatches, decoding continues partially until the end of the YAML +// content, and a *yaml.TypeError is returned with details for all +// missed values. +// +// Struct fields are only unmarshalled if they are exported (have an +// upper case first letter), and are unmarshalled using the field name +// lowercased as the default key. Custom keys may be defined via the +// "yaml" name in the field tag: the content preceding the first comma +// is used as the key, and the following comma-separated options are +// used to tweak the marshalling process (see Marshal). +// Conflicting names result in a runtime error. +// +// For example: +// +// type T struct { +// F int `yaml:"a,omitempty"` +// B int +// } +// var t T +// yaml.Unmarshal([]byte("a: 1\nb: 2"), &t) +// +// See the documentation of Marshal for the format of tags and a list of +// supported tag options. +// +func Unmarshal(in []byte, out interface{}) (err error) { + return unmarshal(in, out, false) +} + +// A Decoder reads and decodes YAML values from an input stream. +type Decoder struct { + parser *parser + knownFields bool +} + +// NewDecoder returns a new decoder that reads from r. +// +// The decoder introduces its own buffering and may read +// data from r beyond the YAML values requested. +func NewDecoder(r io.Reader) *Decoder { + return &Decoder{ + parser: newParserFromReader(r), + } +} + +// KnownFields ensures that the keys in decoded mappings to +// exist as fields in the struct being decoded into. +func (dec *Decoder) KnownFields(enable bool) { + dec.knownFields = enable +} + +// Decode reads the next YAML-encoded value from its input +// and stores it in the value pointed to by v. +// +// See the documentation for Unmarshal for details about the +// conversion of YAML into a Go value. +func (dec *Decoder) Decode(v interface{}) (err error) { + d := newDecoder() + d.knownFields = dec.knownFields + defer handleErr(&err) + node := dec.parser.parse() + if node == nil { + return io.EOF + } + out := reflect.ValueOf(v) + if out.Kind() == reflect.Ptr && !out.IsNil() { + out = out.Elem() + } + d.unmarshal(node, out) + if len(d.terrors) > 0 { + return &TypeError{d.terrors} + } + return nil +} + +// Decode decodes the node and stores its data into the value pointed to by v. +// +// See the documentation for Unmarshal for details about the +// conversion of YAML into a Go value. +func (n *Node) Decode(v interface{}) (err error) { + d := newDecoder() + defer handleErr(&err) + out := reflect.ValueOf(v) + if out.Kind() == reflect.Ptr && !out.IsNil() { + out = out.Elem() + } + d.unmarshal(n, out) + if len(d.terrors) > 0 { + return &TypeError{d.terrors} + } + return nil +} + +func unmarshal(in []byte, out interface{}, strict bool) (err error) { + defer handleErr(&err) + d := newDecoder() + p := newParser(in) + defer p.destroy() + node := p.parse() + if node != nil { + v := reflect.ValueOf(out) + if v.Kind() == reflect.Ptr && !v.IsNil() { + v = v.Elem() + } + d.unmarshal(node, v) + } + if len(d.terrors) > 0 { + return &TypeError{d.terrors} + } + return nil +} + +// Marshal serializes the value provided into a YAML document. The structure +// of the generated document will reflect the structure of the value itself. +// Maps and pointers (to struct, string, int, etc) are accepted as the in value. +// +// Struct fields are only marshalled if they are exported (have an upper case +// first letter), and are marshalled using the field name lowercased as the +// default key. Custom keys may be defined via the "yaml" name in the field +// tag: the content preceding the first comma is used as the key, and the +// following comma-separated options are used to tweak the marshalling process. +// Conflicting names result in a runtime error. +// +// The field tag format accepted is: +// +// `(...) yaml:"[][,[,]]" (...)` +// +// The following flags are currently supported: +// +// omitempty Only include the field if it's not set to the zero +// value for the type or to empty slices or maps. +// Zero valued structs will be omitted if all their public +// fields are zero, unless they implement an IsZero +// method (see the IsZeroer interface type), in which +// case the field will be excluded if IsZero returns true. +// +// flow Marshal using a flow style (useful for structs, +// sequences and maps). +// +// inline Inline the field, which must be a struct or a map, +// causing all of its fields or keys to be processed as if +// they were part of the outer struct. For maps, keys must +// not conflict with the yaml keys of other struct fields. +// +// In addition, if the key is "-", the field is ignored. +// +// For example: +// +// type T struct { +// F int `yaml:"a,omitempty"` +// B int +// } +// yaml.Marshal(&T{B: 2}) // Returns "b: 2\n" +// yaml.Marshal(&T{F: 1}} // Returns "a: 1\nb: 0\n" +// +func Marshal(in interface{}) (out []byte, err error) { + defer handleErr(&err) + e := newEncoder() + defer e.destroy() + e.marshalDoc("", reflect.ValueOf(in)) + e.finish() + out = e.out + return +} + +// An Encoder writes YAML values to an output stream. +type Encoder struct { + encoder *encoder +} + +// NewEncoder returns a new encoder that writes to w. +// The Encoder should be closed after use to flush all data +// to w. +func NewEncoder(w io.Writer) *Encoder { + return &Encoder{ + encoder: newEncoderWithWriter(w), + } +} + +// Encode writes the YAML encoding of v to the stream. +// If multiple items are encoded to the stream, the +// second and subsequent document will be preceded +// with a "---" document separator, but the first will not. +// +// See the documentation for Marshal for details about the conversion of Go +// values to YAML. +func (e *Encoder) Encode(v interface{}) (err error) { + defer handleErr(&err) + e.encoder.marshalDoc("", reflect.ValueOf(v)) + return nil +} + +// Encode encodes value v and stores its representation in n. +// +// See the documentation for Marshal for details about the +// conversion of Go values into YAML. +func (n *Node) Encode(v interface{}) (err error) { + defer handleErr(&err) + e := newEncoder() + defer e.destroy() + e.marshalDoc("", reflect.ValueOf(v)) + e.finish() + p := newParser(e.out) + p.textless = true + defer p.destroy() + doc := p.parse() + *n = *doc.Content[0] + return nil +} + +// SetIndent changes the used indentation used when encoding. +func (e *Encoder) SetIndent(spaces int) { + if spaces < 0 { + panic("yaml: cannot indent to a negative number of spaces") + } + e.encoder.indent = spaces +} + +// CompactSeqIndent makes it so that '- ' is considered part of the indentation. +func (e *Encoder) CompactSeqIndent() { + e.encoder.emitter.compact_sequence_indent = true +} + +// DefaultSeqIndent makes it so that '- ' is not considered part of the indentation. +func (e *Encoder) DefaultSeqIndent() { + e.encoder.emitter.compact_sequence_indent = false +} + +// Close closes the encoder by writing any remaining data. +// It does not write a stream terminating string "...". +func (e *Encoder) Close() (err error) { + defer handleErr(&err) + e.encoder.finish() + return nil +} + +func handleErr(err *error) { + if v := recover(); v != nil { + if e, ok := v.(yamlError); ok { + *err = e.err + } else { + panic(v) + } + } +} + +type yamlError struct { + err error +} + +func fail(err error) { + panic(yamlError{err}) +} + +func failf(format string, args ...interface{}) { + panic(yamlError{fmt.Errorf("yaml: "+format, args...)}) +} + +// A TypeError is returned by Unmarshal when one or more fields in +// the YAML document cannot be properly decoded into the requested +// types. When this error is returned, the value is still +// unmarshaled partially. +type TypeError struct { + Errors []string +} + +func (e *TypeError) Error() string { + return fmt.Sprintf("yaml: unmarshal errors:\n %s", strings.Join(e.Errors, "\n ")) +} + +type Kind uint32 + +const ( + DocumentNode Kind = 1 << iota + SequenceNode + MappingNode + ScalarNode + AliasNode +) + +type Style uint32 + +const ( + TaggedStyle Style = 1 << iota + DoubleQuotedStyle + SingleQuotedStyle + LiteralStyle + FoldedStyle + FlowStyle +) + +// Node represents an element in the YAML document hierarchy. While documents +// are typically encoded and decoded into higher level types, such as structs +// and maps, Node is an intermediate representation that allows detailed +// control over the content being decoded or encoded. +// +// It's worth noting that although Node offers access into details such as +// line numbers, colums, and comments, the content when re-encoded will not +// have its original textual representation preserved. An effort is made to +// render the data plesantly, and to preserve comments near the data they +// describe, though. +// +// Values that make use of the Node type interact with the yaml package in the +// same way any other type would do, by encoding and decoding yaml data +// directly or indirectly into them. +// +// For example: +// +// var person struct { +// Name string +// Address yaml.Node +// } +// err := yaml.Unmarshal(data, &person) +// +// Or by itself: +// +// var person Node +// err := yaml.Unmarshal(data, &person) +// +type Node struct { + // Kind defines whether the node is a document, a mapping, a sequence, + // a scalar value, or an alias to another node. The specific data type of + // scalar nodes may be obtained via the ShortTag and LongTag methods. + Kind Kind + + // Style allows customizing the apperance of the node in the tree. + Style Style + + // Tag holds the YAML tag defining the data type for the value. + // When decoding, this field will always be set to the resolved tag, + // even when it wasn't explicitly provided in the YAML content. + // When encoding, if this field is unset the value type will be + // implied from the node properties, and if it is set, it will only + // be serialized into the representation if TaggedStyle is used or + // the implicit tag diverges from the provided one. + Tag string + + // Value holds the unescaped and unquoted represenation of the value. + Value string + + // Anchor holds the anchor name for this node, which allows aliases to point to it. + Anchor string + + // Alias holds the node that this alias points to. Only valid when Kind is AliasNode. + Alias *Node + + // Content holds contained nodes for documents, mappings, and sequences. + Content []*Node + + // HeadComment holds any comments in the lines preceding the node and + // not separated by an empty line. + HeadComment string + + // LineComment holds any comments at the end of the line where the node is in. + LineComment string + + // FootComment holds any comments following the node and before empty lines. + FootComment string + + // Line and Column hold the node position in the decoded YAML text. + // These fields are not respected when encoding the node. + Line int + Column int +} + +// IsZero returns whether the node has all of its fields unset. +func (n *Node) IsZero() bool { + return n.Kind == 0 && n.Style == 0 && n.Tag == "" && n.Value == "" && n.Anchor == "" && n.Alias == nil && n.Content == nil && + n.HeadComment == "" && n.LineComment == "" && n.FootComment == "" && n.Line == 0 && n.Column == 0 +} + +// LongTag returns the long form of the tag that indicates the data type for +// the node. If the Tag field isn't explicitly defined, one will be computed +// based on the node properties. +func (n *Node) LongTag() string { + return longTag(n.ShortTag()) +} + +// ShortTag returns the short form of the YAML tag that indicates data type for +// the node. If the Tag field isn't explicitly defined, one will be computed +// based on the node properties. +func (n *Node) ShortTag() string { + if n.indicatedString() { + return strTag + } + if n.Tag == "" || n.Tag == "!" { + switch n.Kind { + case MappingNode: + return mapTag + case SequenceNode: + return seqTag + case AliasNode: + if n.Alias != nil { + return n.Alias.ShortTag() + } + case ScalarNode: + tag, _ := resolve("", n.Value) + return tag + case 0: + // Special case to make the zero value convenient. + if n.IsZero() { + return nullTag + } + } + return "" + } + return shortTag(n.Tag) +} + +func (n *Node) indicatedString() bool { + return n.Kind == ScalarNode && + (shortTag(n.Tag) == strTag || + (n.Tag == "" || n.Tag == "!") && n.Style&(SingleQuotedStyle|DoubleQuotedStyle|LiteralStyle|FoldedStyle) != 0) +} + +// SetString is a convenience function that sets the node to a string value +// and defines its style in a pleasant way depending on its content. +func (n *Node) SetString(s string) { + n.Kind = ScalarNode + if utf8.ValidString(s) { + n.Value = s + n.Tag = strTag + } else { + n.Value = encodeBase64(s) + n.Tag = binaryTag + } + if strings.Contains(n.Value, "\n") { + n.Style = LiteralStyle + } +} + +// -------------------------------------------------------------------------- +// Maintain a mapping of keys to structure field indexes + +// The code in this section was copied from mgo/bson. + +// structInfo holds details for the serialization of fields of +// a given struct. +type structInfo struct { + FieldsMap map[string]fieldInfo + FieldsList []fieldInfo + + // InlineMap is the number of the field in the struct that + // contains an ,inline map, or -1 if there's none. + InlineMap int + + // InlineUnmarshalers holds indexes to inlined fields that + // contain unmarshaler values. + InlineUnmarshalers [][]int +} + +type fieldInfo struct { + Key string + Num int + OmitEmpty bool + Flow bool + // Id holds the unique field identifier, so we can cheaply + // check for field duplicates without maintaining an extra map. + Id int + + // Inline holds the field index if the field is part of an inlined struct. + Inline []int +} + +var structMap = make(map[reflect.Type]*structInfo) +var fieldMapMutex sync.RWMutex +var unmarshalerType reflect.Type + +func init() { + var v Unmarshaler + unmarshalerType = reflect.ValueOf(&v).Elem().Type() +} + +func getStructInfo(st reflect.Type) (*structInfo, error) { + fieldMapMutex.RLock() + sinfo, found := structMap[st] + fieldMapMutex.RUnlock() + if found { + return sinfo, nil + } + + n := st.NumField() + fieldsMap := make(map[string]fieldInfo) + fieldsList := make([]fieldInfo, 0, n) + inlineMap := -1 + inlineUnmarshalers := [][]int(nil) + for i := 0; i != n; i++ { + field := st.Field(i) + if field.PkgPath != "" && !field.Anonymous { + continue // Private field + } + + info := fieldInfo{Num: i} + + tag := field.Tag.Get("yaml") + if tag == "" && strings.Index(string(field.Tag), ":") < 0 { + tag = string(field.Tag) + } + if tag == "-" { + continue + } + + inline := false + fields := strings.Split(tag, ",") + if len(fields) > 1 { + for _, flag := range fields[1:] { + switch flag { + case "omitempty": + info.OmitEmpty = true + case "flow": + info.Flow = true + case "inline": + inline = true + default: + return nil, errors.New(fmt.Sprintf("unsupported flag %q in tag %q of type %s", flag, tag, st)) + } + } + tag = fields[0] + } + + if inline { + switch field.Type.Kind() { + case reflect.Map: + if inlineMap >= 0 { + return nil, errors.New("multiple ,inline maps in struct " + st.String()) + } + if field.Type.Key() != reflect.TypeOf("") { + return nil, errors.New("option ,inline needs a map with string keys in struct " + st.String()) + } + inlineMap = info.Num + case reflect.Struct, reflect.Ptr: + ftype := field.Type + for ftype.Kind() == reflect.Ptr { + ftype = ftype.Elem() + } + if ftype.Kind() != reflect.Struct { + return nil, errors.New("option ,inline may only be used on a struct or map field") + } + if reflect.PtrTo(ftype).Implements(unmarshalerType) { + inlineUnmarshalers = append(inlineUnmarshalers, []int{i}) + } else { + sinfo, err := getStructInfo(ftype) + if err != nil { + return nil, err + } + for _, index := range sinfo.InlineUnmarshalers { + inlineUnmarshalers = append(inlineUnmarshalers, append([]int{i}, index...)) + } + for _, finfo := range sinfo.FieldsList { + if _, found := fieldsMap[finfo.Key]; found { + msg := "duplicated key '" + finfo.Key + "' in struct " + st.String() + return nil, errors.New(msg) + } + if finfo.Inline == nil { + finfo.Inline = []int{i, finfo.Num} + } else { + finfo.Inline = append([]int{i}, finfo.Inline...) + } + finfo.Id = len(fieldsList) + fieldsMap[finfo.Key] = finfo + fieldsList = append(fieldsList, finfo) + } + } + default: + return nil, errors.New("option ,inline may only be used on a struct or map field") + } + continue + } + + if tag != "" { + info.Key = tag + } else { + info.Key = strings.ToLower(field.Name) + } + + if _, found = fieldsMap[info.Key]; found { + msg := "duplicated key '" + info.Key + "' in struct " + st.String() + return nil, errors.New(msg) + } + + info.Id = len(fieldsList) + fieldsList = append(fieldsList, info) + fieldsMap[info.Key] = info + } + + sinfo = &structInfo{ + FieldsMap: fieldsMap, + FieldsList: fieldsList, + InlineMap: inlineMap, + InlineUnmarshalers: inlineUnmarshalers, + } + + fieldMapMutex.Lock() + structMap[st] = sinfo + fieldMapMutex.Unlock() + return sinfo, nil +} + +// IsZeroer is used to check whether an object is zero to +// determine whether it should be omitted when marshaling +// with the omitempty flag. One notable implementation +// is time.Time. +type IsZeroer interface { + IsZero() bool +} + +func isZero(v reflect.Value) bool { + kind := v.Kind() + if z, ok := v.Interface().(IsZeroer); ok { + if (kind == reflect.Ptr || kind == reflect.Interface) && v.IsNil() { + return true + } + return z.IsZero() + } + switch kind { + case reflect.String: + return len(v.String()) == 0 + case reflect.Interface, reflect.Ptr: + return v.IsNil() + case reflect.Slice: + return v.Len() == 0 + case reflect.Map: + return v.Len() == 0 + case reflect.Int, reflect.Int8, reflect.Int16, reflect.Int32, reflect.Int64: + return v.Int() == 0 + case reflect.Float32, reflect.Float64: + return v.Float() == 0 + case reflect.Uint, reflect.Uint8, reflect.Uint16, reflect.Uint32, reflect.Uint64, reflect.Uintptr: + return v.Uint() == 0 + case reflect.Bool: + return !v.Bool() + case reflect.Struct: + vt := v.Type() + for i := v.NumField() - 1; i >= 0; i-- { + if vt.Field(i).PkgPath != "" { + continue // Private field + } + if !isZero(v.Field(i)) { + return false + } + } + return true + } + return false +} diff --git a/go/internal/forked/kyaml/internal/forked/github.com/go-yaml/yaml/yamlh.go b/go/internal/forked/kyaml/internal/forked/github.com/go-yaml/yaml/yamlh.go new file mode 100644 index 000000000..40c74de49 --- /dev/null +++ b/go/internal/forked/kyaml/internal/forked/github.com/go-yaml/yaml/yamlh.go @@ -0,0 +1,809 @@ +// +// Copyright (c) 2011-2019 Canonical Ltd +// Copyright (c) 2006-2010 Kirill Simonov +// +// Permission is hereby granted, free of charge, to any person obtaining a copy of +// this software and associated documentation files (the "Software"), to deal in +// the Software without restriction, including without limitation the rights to +// use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies +// of the Software, and to permit persons to whom the Software is furnished to do +// so, subject to the following conditions: +// +// The above copyright notice and this permission notice shall be included in all +// copies or substantial portions of the Software. +// +// THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR +// IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, +// FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE +// AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER +// LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, +// OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE +// SOFTWARE. + +package yaml + +import ( + "fmt" + "io" +) + +// The version directive data. +type yaml_version_directive_t struct { + major int8 // The major version number. + minor int8 // The minor version number. +} + +// The tag directive data. +type yaml_tag_directive_t struct { + handle []byte // The tag handle. + prefix []byte // The tag prefix. +} + +type yaml_encoding_t int + +// The stream encoding. +const ( + // Let the parser choose the encoding. + yaml_ANY_ENCODING yaml_encoding_t = iota + + yaml_UTF8_ENCODING // The default UTF-8 encoding. + yaml_UTF16LE_ENCODING // The UTF-16-LE encoding with BOM. + yaml_UTF16BE_ENCODING // The UTF-16-BE encoding with BOM. +) + +type yaml_break_t int + +// Line break types. +const ( + // Let the parser choose the break type. + yaml_ANY_BREAK yaml_break_t = iota + + yaml_CR_BREAK // Use CR for line breaks (Mac style). + yaml_LN_BREAK // Use LN for line breaks (Unix style). + yaml_CRLN_BREAK // Use CR LN for line breaks (DOS style). +) + +type yaml_error_type_t int + +// Many bad things could happen with the parser and emitter. +const ( + // No error is produced. + yaml_NO_ERROR yaml_error_type_t = iota + + yaml_MEMORY_ERROR // Cannot allocate or reallocate a block of memory. + yaml_READER_ERROR // Cannot read or decode the input stream. + yaml_SCANNER_ERROR // Cannot scan the input stream. + yaml_PARSER_ERROR // Cannot parse the input stream. + yaml_COMPOSER_ERROR // Cannot compose a YAML document. + yaml_WRITER_ERROR // Cannot write to the output stream. + yaml_EMITTER_ERROR // Cannot emit a YAML stream. +) + +// The pointer position. +type yaml_mark_t struct { + index int // The position index. + line int // The position line. + column int // The position column. +} + +// Node Styles + +type yaml_style_t int8 + +type yaml_scalar_style_t yaml_style_t + +// Scalar styles. +const ( + // Let the emitter choose the style. + yaml_ANY_SCALAR_STYLE yaml_scalar_style_t = 0 + + yaml_PLAIN_SCALAR_STYLE yaml_scalar_style_t = 1 << iota // The plain scalar style. + yaml_SINGLE_QUOTED_SCALAR_STYLE // The single-quoted scalar style. + yaml_DOUBLE_QUOTED_SCALAR_STYLE // The double-quoted scalar style. + yaml_LITERAL_SCALAR_STYLE // The literal scalar style. + yaml_FOLDED_SCALAR_STYLE // The folded scalar style. +) + +type yaml_sequence_style_t yaml_style_t + +// Sequence styles. +const ( + // Let the emitter choose the style. + yaml_ANY_SEQUENCE_STYLE yaml_sequence_style_t = iota + + yaml_BLOCK_SEQUENCE_STYLE // The block sequence style. + yaml_FLOW_SEQUENCE_STYLE // The flow sequence style. +) + +type yaml_mapping_style_t yaml_style_t + +// Mapping styles. +const ( + // Let the emitter choose the style. + yaml_ANY_MAPPING_STYLE yaml_mapping_style_t = iota + + yaml_BLOCK_MAPPING_STYLE // The block mapping style. + yaml_FLOW_MAPPING_STYLE // The flow mapping style. +) + +// Tokens + +type yaml_token_type_t int + +// Token types. +const ( + // An empty token. + yaml_NO_TOKEN yaml_token_type_t = iota + + yaml_STREAM_START_TOKEN // A STREAM-START token. + yaml_STREAM_END_TOKEN // A STREAM-END token. + + yaml_VERSION_DIRECTIVE_TOKEN // A VERSION-DIRECTIVE token. + yaml_TAG_DIRECTIVE_TOKEN // A TAG-DIRECTIVE token. + yaml_DOCUMENT_START_TOKEN // A DOCUMENT-START token. + yaml_DOCUMENT_END_TOKEN // A DOCUMENT-END token. + + yaml_BLOCK_SEQUENCE_START_TOKEN // A BLOCK-SEQUENCE-START token. + yaml_BLOCK_MAPPING_START_TOKEN // A BLOCK-SEQUENCE-END token. + yaml_BLOCK_END_TOKEN // A BLOCK-END token. + + yaml_FLOW_SEQUENCE_START_TOKEN // A FLOW-SEQUENCE-START token. + yaml_FLOW_SEQUENCE_END_TOKEN // A FLOW-SEQUENCE-END token. + yaml_FLOW_MAPPING_START_TOKEN // A FLOW-MAPPING-START token. + yaml_FLOW_MAPPING_END_TOKEN // A FLOW-MAPPING-END token. + + yaml_BLOCK_ENTRY_TOKEN // A BLOCK-ENTRY token. + yaml_FLOW_ENTRY_TOKEN // A FLOW-ENTRY token. + yaml_KEY_TOKEN // A KEY token. + yaml_VALUE_TOKEN // A VALUE token. + + yaml_ALIAS_TOKEN // An ALIAS token. + yaml_ANCHOR_TOKEN // An ANCHOR token. + yaml_TAG_TOKEN // A TAG token. + yaml_SCALAR_TOKEN // A SCALAR token. +) + +func (tt yaml_token_type_t) String() string { + switch tt { + case yaml_NO_TOKEN: + return "yaml_NO_TOKEN" + case yaml_STREAM_START_TOKEN: + return "yaml_STREAM_START_TOKEN" + case yaml_STREAM_END_TOKEN: + return "yaml_STREAM_END_TOKEN" + case yaml_VERSION_DIRECTIVE_TOKEN: + return "yaml_VERSION_DIRECTIVE_TOKEN" + case yaml_TAG_DIRECTIVE_TOKEN: + return "yaml_TAG_DIRECTIVE_TOKEN" + case yaml_DOCUMENT_START_TOKEN: + return "yaml_DOCUMENT_START_TOKEN" + case yaml_DOCUMENT_END_TOKEN: + return "yaml_DOCUMENT_END_TOKEN" + case yaml_BLOCK_SEQUENCE_START_TOKEN: + return "yaml_BLOCK_SEQUENCE_START_TOKEN" + case yaml_BLOCK_MAPPING_START_TOKEN: + return "yaml_BLOCK_MAPPING_START_TOKEN" + case yaml_BLOCK_END_TOKEN: + return "yaml_BLOCK_END_TOKEN" + case yaml_FLOW_SEQUENCE_START_TOKEN: + return "yaml_FLOW_SEQUENCE_START_TOKEN" + case yaml_FLOW_SEQUENCE_END_TOKEN: + return "yaml_FLOW_SEQUENCE_END_TOKEN" + case yaml_FLOW_MAPPING_START_TOKEN: + return "yaml_FLOW_MAPPING_START_TOKEN" + case yaml_FLOW_MAPPING_END_TOKEN: + return "yaml_FLOW_MAPPING_END_TOKEN" + case yaml_BLOCK_ENTRY_TOKEN: + return "yaml_BLOCK_ENTRY_TOKEN" + case yaml_FLOW_ENTRY_TOKEN: + return "yaml_FLOW_ENTRY_TOKEN" + case yaml_KEY_TOKEN: + return "yaml_KEY_TOKEN" + case yaml_VALUE_TOKEN: + return "yaml_VALUE_TOKEN" + case yaml_ALIAS_TOKEN: + return "yaml_ALIAS_TOKEN" + case yaml_ANCHOR_TOKEN: + return "yaml_ANCHOR_TOKEN" + case yaml_TAG_TOKEN: + return "yaml_TAG_TOKEN" + case yaml_SCALAR_TOKEN: + return "yaml_SCALAR_TOKEN" + } + return "" +} + +// The token structure. +type yaml_token_t struct { + // The token type. + typ yaml_token_type_t + + // The start/end of the token. + start_mark, end_mark yaml_mark_t + + // The stream encoding (for yaml_STREAM_START_TOKEN). + encoding yaml_encoding_t + + // The alias/anchor/scalar value or tag/tag directive handle + // (for yaml_ALIAS_TOKEN, yaml_ANCHOR_TOKEN, yaml_SCALAR_TOKEN, yaml_TAG_TOKEN, yaml_TAG_DIRECTIVE_TOKEN). + value []byte + + // The tag suffix (for yaml_TAG_TOKEN). + suffix []byte + + // The tag directive prefix (for yaml_TAG_DIRECTIVE_TOKEN). + prefix []byte + + // The scalar style (for yaml_SCALAR_TOKEN). + style yaml_scalar_style_t + + // The version directive major/minor (for yaml_VERSION_DIRECTIVE_TOKEN). + major, minor int8 +} + +// Events + +type yaml_event_type_t int8 + +// Event types. +const ( + // An empty event. + yaml_NO_EVENT yaml_event_type_t = iota + + yaml_STREAM_START_EVENT // A STREAM-START event. + yaml_STREAM_END_EVENT // A STREAM-END event. + yaml_DOCUMENT_START_EVENT // A DOCUMENT-START event. + yaml_DOCUMENT_END_EVENT // A DOCUMENT-END event. + yaml_ALIAS_EVENT // An ALIAS event. + yaml_SCALAR_EVENT // A SCALAR event. + yaml_SEQUENCE_START_EVENT // A SEQUENCE-START event. + yaml_SEQUENCE_END_EVENT // A SEQUENCE-END event. + yaml_MAPPING_START_EVENT // A MAPPING-START event. + yaml_MAPPING_END_EVENT // A MAPPING-END event. + yaml_TAIL_COMMENT_EVENT +) + +var eventStrings = []string{ + yaml_NO_EVENT: "none", + yaml_STREAM_START_EVENT: "stream start", + yaml_STREAM_END_EVENT: "stream end", + yaml_DOCUMENT_START_EVENT: "document start", + yaml_DOCUMENT_END_EVENT: "document end", + yaml_ALIAS_EVENT: "alias", + yaml_SCALAR_EVENT: "scalar", + yaml_SEQUENCE_START_EVENT: "sequence start", + yaml_SEQUENCE_END_EVENT: "sequence end", + yaml_MAPPING_START_EVENT: "mapping start", + yaml_MAPPING_END_EVENT: "mapping end", + yaml_TAIL_COMMENT_EVENT: "tail comment", +} + +func (e yaml_event_type_t) String() string { + if e < 0 || int(e) >= len(eventStrings) { + return fmt.Sprintf("unknown event %d", e) + } + return eventStrings[e] +} + +// The event structure. +type yaml_event_t struct { + + // The event type. + typ yaml_event_type_t + + // The start and end of the event. + start_mark, end_mark yaml_mark_t + + // The document encoding (for yaml_STREAM_START_EVENT). + encoding yaml_encoding_t + + // The version directive (for yaml_DOCUMENT_START_EVENT). + version_directive *yaml_version_directive_t + + // The list of tag directives (for yaml_DOCUMENT_START_EVENT). + tag_directives []yaml_tag_directive_t + + // The comments + head_comment []byte + line_comment []byte + foot_comment []byte + tail_comment []byte + + // The anchor (for yaml_SCALAR_EVENT, yaml_SEQUENCE_START_EVENT, yaml_MAPPING_START_EVENT, yaml_ALIAS_EVENT). + anchor []byte + + // The tag (for yaml_SCALAR_EVENT, yaml_SEQUENCE_START_EVENT, yaml_MAPPING_START_EVENT). + tag []byte + + // The scalar value (for yaml_SCALAR_EVENT). + value []byte + + // Is the document start/end indicator implicit, or the tag optional? + // (for yaml_DOCUMENT_START_EVENT, yaml_DOCUMENT_END_EVENT, yaml_SEQUENCE_START_EVENT, yaml_MAPPING_START_EVENT, yaml_SCALAR_EVENT). + implicit bool + + // Is the tag optional for any non-plain style? (for yaml_SCALAR_EVENT). + quoted_implicit bool + + // The style (for yaml_SCALAR_EVENT, yaml_SEQUENCE_START_EVENT, yaml_MAPPING_START_EVENT). + style yaml_style_t +} + +func (e *yaml_event_t) scalar_style() yaml_scalar_style_t { return yaml_scalar_style_t(e.style) } +func (e *yaml_event_t) sequence_style() yaml_sequence_style_t { return yaml_sequence_style_t(e.style) } +func (e *yaml_event_t) mapping_style() yaml_mapping_style_t { return yaml_mapping_style_t(e.style) } + +// Nodes + +const ( + yaml_NULL_TAG = "tag:yaml.org,2002:null" // The tag !!null with the only possible value: null. + yaml_BOOL_TAG = "tag:yaml.org,2002:bool" // The tag !!bool with the values: true and false. + yaml_STR_TAG = "tag:yaml.org,2002:str" // The tag !!str for string values. + yaml_INT_TAG = "tag:yaml.org,2002:int" // The tag !!int for integer values. + yaml_FLOAT_TAG = "tag:yaml.org,2002:float" // The tag !!float for float values. + yaml_TIMESTAMP_TAG = "tag:yaml.org,2002:timestamp" // The tag !!timestamp for date and time values. + + yaml_SEQ_TAG = "tag:yaml.org,2002:seq" // The tag !!seq is used to denote sequences. + yaml_MAP_TAG = "tag:yaml.org,2002:map" // The tag !!map is used to denote mapping. + + // Not in original libyaml. + yaml_BINARY_TAG = "tag:yaml.org,2002:binary" + yaml_MERGE_TAG = "tag:yaml.org,2002:merge" + + yaml_DEFAULT_SCALAR_TAG = yaml_STR_TAG // The default scalar tag is !!str. + yaml_DEFAULT_SEQUENCE_TAG = yaml_SEQ_TAG // The default sequence tag is !!seq. + yaml_DEFAULT_MAPPING_TAG = yaml_MAP_TAG // The default mapping tag is !!map. +) + +type yaml_node_type_t int + +// Node types. +const ( + // An empty node. + yaml_NO_NODE yaml_node_type_t = iota + + yaml_SCALAR_NODE // A scalar node. + yaml_SEQUENCE_NODE // A sequence node. + yaml_MAPPING_NODE // A mapping node. +) + +// An element of a sequence node. +type yaml_node_item_t int + +// An element of a mapping node. +type yaml_node_pair_t struct { + key int // The key of the element. + value int // The value of the element. +} + +// The node structure. +type yaml_node_t struct { + typ yaml_node_type_t // The node type. + tag []byte // The node tag. + + // The node data. + + // The scalar parameters (for yaml_SCALAR_NODE). + scalar struct { + value []byte // The scalar value. + length int // The length of the scalar value. + style yaml_scalar_style_t // The scalar style. + } + + // The sequence parameters (for YAML_SEQUENCE_NODE). + sequence struct { + items_data []yaml_node_item_t // The stack of sequence items. + style yaml_sequence_style_t // The sequence style. + } + + // The mapping parameters (for yaml_MAPPING_NODE). + mapping struct { + pairs_data []yaml_node_pair_t // The stack of mapping pairs (key, value). + pairs_start *yaml_node_pair_t // The beginning of the stack. + pairs_end *yaml_node_pair_t // The end of the stack. + pairs_top *yaml_node_pair_t // The top of the stack. + style yaml_mapping_style_t // The mapping style. + } + + start_mark yaml_mark_t // The beginning of the node. + end_mark yaml_mark_t // The end of the node. + +} + +// The document structure. +type yaml_document_t struct { + + // The document nodes. + nodes []yaml_node_t + + // The version directive. + version_directive *yaml_version_directive_t + + // The list of tag directives. + tag_directives_data []yaml_tag_directive_t + tag_directives_start int // The beginning of the tag directives list. + tag_directives_end int // The end of the tag directives list. + + start_implicit int // Is the document start indicator implicit? + end_implicit int // Is the document end indicator implicit? + + // The start/end of the document. + start_mark, end_mark yaml_mark_t +} + +// The prototype of a read handler. +// +// The read handler is called when the parser needs to read more bytes from the +// source. The handler should write not more than size bytes to the buffer. +// The number of written bytes should be set to the size_read variable. +// +// [in,out] data A pointer to an application data specified by +// yaml_parser_set_input(). +// [out] buffer The buffer to write the data from the source. +// [in] size The size of the buffer. +// [out] size_read The actual number of bytes read from the source. +// +// On success, the handler should return 1. If the handler failed, +// the returned value should be 0. On EOF, the handler should set the +// size_read to 0 and return 1. +type yaml_read_handler_t func(parser *yaml_parser_t, buffer []byte) (n int, err error) + +// This structure holds information about a potential simple key. +type yaml_simple_key_t struct { + possible bool // Is a simple key possible? + required bool // Is a simple key required? + token_number int // The number of the token. + mark yaml_mark_t // The position mark. +} + +// The states of the parser. +type yaml_parser_state_t int + +const ( + yaml_PARSE_STREAM_START_STATE yaml_parser_state_t = iota + + yaml_PARSE_IMPLICIT_DOCUMENT_START_STATE // Expect the beginning of an implicit document. + yaml_PARSE_DOCUMENT_START_STATE // Expect DOCUMENT-START. + yaml_PARSE_DOCUMENT_CONTENT_STATE // Expect the content of a document. + yaml_PARSE_DOCUMENT_END_STATE // Expect DOCUMENT-END. + yaml_PARSE_BLOCK_NODE_STATE // Expect a block node. + yaml_PARSE_BLOCK_NODE_OR_INDENTLESS_SEQUENCE_STATE // Expect a block node or indentless sequence. + yaml_PARSE_FLOW_NODE_STATE // Expect a flow node. + yaml_PARSE_BLOCK_SEQUENCE_FIRST_ENTRY_STATE // Expect the first entry of a block sequence. + yaml_PARSE_BLOCK_SEQUENCE_ENTRY_STATE // Expect an entry of a block sequence. + yaml_PARSE_INDENTLESS_SEQUENCE_ENTRY_STATE // Expect an entry of an indentless sequence. + yaml_PARSE_BLOCK_MAPPING_FIRST_KEY_STATE // Expect the first key of a block mapping. + yaml_PARSE_BLOCK_MAPPING_KEY_STATE // Expect a block mapping key. + yaml_PARSE_BLOCK_MAPPING_VALUE_STATE // Expect a block mapping value. + yaml_PARSE_FLOW_SEQUENCE_FIRST_ENTRY_STATE // Expect the first entry of a flow sequence. + yaml_PARSE_FLOW_SEQUENCE_ENTRY_STATE // Expect an entry of a flow sequence. + yaml_PARSE_FLOW_SEQUENCE_ENTRY_MAPPING_KEY_STATE // Expect a key of an ordered mapping. + yaml_PARSE_FLOW_SEQUENCE_ENTRY_MAPPING_VALUE_STATE // Expect a value of an ordered mapping. + yaml_PARSE_FLOW_SEQUENCE_ENTRY_MAPPING_END_STATE // Expect the and of an ordered mapping entry. + yaml_PARSE_FLOW_MAPPING_FIRST_KEY_STATE // Expect the first key of a flow mapping. + yaml_PARSE_FLOW_MAPPING_KEY_STATE // Expect a key of a flow mapping. + yaml_PARSE_FLOW_MAPPING_VALUE_STATE // Expect a value of a flow mapping. + yaml_PARSE_FLOW_MAPPING_EMPTY_VALUE_STATE // Expect an empty value of a flow mapping. + yaml_PARSE_END_STATE // Expect nothing. +) + +func (ps yaml_parser_state_t) String() string { + switch ps { + case yaml_PARSE_STREAM_START_STATE: + return "yaml_PARSE_STREAM_START_STATE" + case yaml_PARSE_IMPLICIT_DOCUMENT_START_STATE: + return "yaml_PARSE_IMPLICIT_DOCUMENT_START_STATE" + case yaml_PARSE_DOCUMENT_START_STATE: + return "yaml_PARSE_DOCUMENT_START_STATE" + case yaml_PARSE_DOCUMENT_CONTENT_STATE: + return "yaml_PARSE_DOCUMENT_CONTENT_STATE" + case yaml_PARSE_DOCUMENT_END_STATE: + return "yaml_PARSE_DOCUMENT_END_STATE" + case yaml_PARSE_BLOCK_NODE_STATE: + return "yaml_PARSE_BLOCK_NODE_STATE" + case yaml_PARSE_BLOCK_NODE_OR_INDENTLESS_SEQUENCE_STATE: + return "yaml_PARSE_BLOCK_NODE_OR_INDENTLESS_SEQUENCE_STATE" + case yaml_PARSE_FLOW_NODE_STATE: + return "yaml_PARSE_FLOW_NODE_STATE" + case yaml_PARSE_BLOCK_SEQUENCE_FIRST_ENTRY_STATE: + return "yaml_PARSE_BLOCK_SEQUENCE_FIRST_ENTRY_STATE" + case yaml_PARSE_BLOCK_SEQUENCE_ENTRY_STATE: + return "yaml_PARSE_BLOCK_SEQUENCE_ENTRY_STATE" + case yaml_PARSE_INDENTLESS_SEQUENCE_ENTRY_STATE: + return "yaml_PARSE_INDENTLESS_SEQUENCE_ENTRY_STATE" + case yaml_PARSE_BLOCK_MAPPING_FIRST_KEY_STATE: + return "yaml_PARSE_BLOCK_MAPPING_FIRST_KEY_STATE" + case yaml_PARSE_BLOCK_MAPPING_KEY_STATE: + return "yaml_PARSE_BLOCK_MAPPING_KEY_STATE" + case yaml_PARSE_BLOCK_MAPPING_VALUE_STATE: + return "yaml_PARSE_BLOCK_MAPPING_VALUE_STATE" + case yaml_PARSE_FLOW_SEQUENCE_FIRST_ENTRY_STATE: + return "yaml_PARSE_FLOW_SEQUENCE_FIRST_ENTRY_STATE" + case yaml_PARSE_FLOW_SEQUENCE_ENTRY_STATE: + return "yaml_PARSE_FLOW_SEQUENCE_ENTRY_STATE" + case yaml_PARSE_FLOW_SEQUENCE_ENTRY_MAPPING_KEY_STATE: + return "yaml_PARSE_FLOW_SEQUENCE_ENTRY_MAPPING_KEY_STATE" + case yaml_PARSE_FLOW_SEQUENCE_ENTRY_MAPPING_VALUE_STATE: + return "yaml_PARSE_FLOW_SEQUENCE_ENTRY_MAPPING_VALUE_STATE" + case yaml_PARSE_FLOW_SEQUENCE_ENTRY_MAPPING_END_STATE: + return "yaml_PARSE_FLOW_SEQUENCE_ENTRY_MAPPING_END_STATE" + case yaml_PARSE_FLOW_MAPPING_FIRST_KEY_STATE: + return "yaml_PARSE_FLOW_MAPPING_FIRST_KEY_STATE" + case yaml_PARSE_FLOW_MAPPING_KEY_STATE: + return "yaml_PARSE_FLOW_MAPPING_KEY_STATE" + case yaml_PARSE_FLOW_MAPPING_VALUE_STATE: + return "yaml_PARSE_FLOW_MAPPING_VALUE_STATE" + case yaml_PARSE_FLOW_MAPPING_EMPTY_VALUE_STATE: + return "yaml_PARSE_FLOW_MAPPING_EMPTY_VALUE_STATE" + case yaml_PARSE_END_STATE: + return "yaml_PARSE_END_STATE" + } + return "" +} + +// This structure holds aliases data. +type yaml_alias_data_t struct { + anchor []byte // The anchor. + index int // The node id. + mark yaml_mark_t // The anchor mark. +} + +// The parser structure. +// +// All members are internal. Manage the structure using the +// yaml_parser_ family of functions. +type yaml_parser_t struct { + + // Error handling + + error yaml_error_type_t // Error type. + + problem string // Error description. + + // The byte about which the problem occurred. + problem_offset int + problem_value int + problem_mark yaml_mark_t + + // The error context. + context string + context_mark yaml_mark_t + + // Reader stuff + + read_handler yaml_read_handler_t // Read handler. + + input_reader io.Reader // File input data. + input []byte // String input data. + input_pos int + + eof bool // EOF flag + + buffer []byte // The working buffer. + buffer_pos int // The current position of the buffer. + + unread int // The number of unread characters in the buffer. + + newlines int // The number of line breaks since last non-break/non-blank character + + raw_buffer []byte // The raw buffer. + raw_buffer_pos int // The current position of the buffer. + + encoding yaml_encoding_t // The input encoding. + + offset int // The offset of the current position (in bytes). + mark yaml_mark_t // The mark of the current position. + + // Comments + + head_comment []byte // The current head comments + line_comment []byte // The current line comments + foot_comment []byte // The current foot comments + tail_comment []byte // Foot comment that happens at the end of a block. + stem_comment []byte // Comment in item preceding a nested structure (list inside list item, etc) + + comments []yaml_comment_t // The folded comments for all parsed tokens + comments_head int + + // Scanner stuff + + stream_start_produced bool // Have we started to scan the input stream? + stream_end_produced bool // Have we reached the end of the input stream? + + flow_level int // The number of unclosed '[' and '{' indicators. + + tokens []yaml_token_t // The tokens queue. + tokens_head int // The head of the tokens queue. + tokens_parsed int // The number of tokens fetched from the queue. + token_available bool // Does the tokens queue contain a token ready for dequeueing. + + indent int // The current indentation level. + indents []int // The indentation levels stack. + + simple_key_allowed bool // May a simple key occur at the current position? + simple_keys []yaml_simple_key_t // The stack of simple keys. + simple_keys_by_tok map[int]int // possible simple_key indexes indexed by token_number + + // Parser stuff + + state yaml_parser_state_t // The current parser state. + states []yaml_parser_state_t // The parser states stack. + marks []yaml_mark_t // The stack of marks. + tag_directives []yaml_tag_directive_t // The list of TAG directives. + + // Dumper stuff + + aliases []yaml_alias_data_t // The alias data. + + document *yaml_document_t // The currently parsed document. +} + +type yaml_comment_t struct { + + scan_mark yaml_mark_t // Position where scanning for comments started + token_mark yaml_mark_t // Position after which tokens will be associated with this comment + start_mark yaml_mark_t // Position of '#' comment mark + end_mark yaml_mark_t // Position where comment terminated + + head []byte + line []byte + foot []byte +} + +// Emitter Definitions + +// The prototype of a write handler. +// +// The write handler is called when the emitter needs to flush the accumulated +// characters to the output. The handler should write @a size bytes of the +// @a buffer to the output. +// +// @param[in,out] data A pointer to an application data specified by +// yaml_emitter_set_output(). +// @param[in] buffer The buffer with bytes to be written. +// @param[in] size The size of the buffer. +// +// @returns On success, the handler should return @c 1. If the handler failed, +// the returned value should be @c 0. +// +type yaml_write_handler_t func(emitter *yaml_emitter_t, buffer []byte) error + +type yaml_emitter_state_t int + +// The emitter states. +const ( + // Expect STREAM-START. + yaml_EMIT_STREAM_START_STATE yaml_emitter_state_t = iota + + yaml_EMIT_FIRST_DOCUMENT_START_STATE // Expect the first DOCUMENT-START or STREAM-END. + yaml_EMIT_DOCUMENT_START_STATE // Expect DOCUMENT-START or STREAM-END. + yaml_EMIT_DOCUMENT_CONTENT_STATE // Expect the content of a document. + yaml_EMIT_DOCUMENT_END_STATE // Expect DOCUMENT-END. + yaml_EMIT_FLOW_SEQUENCE_FIRST_ITEM_STATE // Expect the first item of a flow sequence. + yaml_EMIT_FLOW_SEQUENCE_TRAIL_ITEM_STATE // Expect the next item of a flow sequence, with the comma already written out + yaml_EMIT_FLOW_SEQUENCE_ITEM_STATE // Expect an item of a flow sequence. + yaml_EMIT_FLOW_MAPPING_FIRST_KEY_STATE // Expect the first key of a flow mapping. + yaml_EMIT_FLOW_MAPPING_TRAIL_KEY_STATE // Expect the next key of a flow mapping, with the comma already written out + yaml_EMIT_FLOW_MAPPING_KEY_STATE // Expect a key of a flow mapping. + yaml_EMIT_FLOW_MAPPING_SIMPLE_VALUE_STATE // Expect a value for a simple key of a flow mapping. + yaml_EMIT_FLOW_MAPPING_VALUE_STATE // Expect a value of a flow mapping. + yaml_EMIT_BLOCK_SEQUENCE_FIRST_ITEM_STATE // Expect the first item of a block sequence. + yaml_EMIT_BLOCK_SEQUENCE_ITEM_STATE // Expect an item of a block sequence. + yaml_EMIT_BLOCK_MAPPING_FIRST_KEY_STATE // Expect the first key of a block mapping. + yaml_EMIT_BLOCK_MAPPING_KEY_STATE // Expect the key of a block mapping. + yaml_EMIT_BLOCK_MAPPING_SIMPLE_VALUE_STATE // Expect a value for a simple key of a block mapping. + yaml_EMIT_BLOCK_MAPPING_VALUE_STATE // Expect a value of a block mapping. + yaml_EMIT_END_STATE // Expect nothing. +) + +// The emitter structure. +// +// All members are internal. Manage the structure using the @c yaml_emitter_ +// family of functions. +type yaml_emitter_t struct { + + // Error handling + + error yaml_error_type_t // Error type. + problem string // Error description. + + // Writer stuff + + write_handler yaml_write_handler_t // Write handler. + + output_buffer *[]byte // String output data. + output_writer io.Writer // File output data. + + buffer []byte // The working buffer. + buffer_pos int // The current position of the buffer. + + raw_buffer []byte // The raw buffer. + raw_buffer_pos int // The current position of the buffer. + + encoding yaml_encoding_t // The stream encoding. + + // Emitter stuff + + canonical bool // If the output is in the canonical style? + best_indent int // The number of indentation spaces. + best_width int // The preferred width of the output lines. + unicode bool // Allow unescaped non-ASCII characters? + line_break yaml_break_t // The preferred line break. + + state yaml_emitter_state_t // The current emitter state. + states []yaml_emitter_state_t // The stack of states. + + events []yaml_event_t // The event queue. + events_head int // The head of the event queue. + + indents []int // The stack of indentation levels. + + tag_directives []yaml_tag_directive_t // The list of tag directives. + + indent int // The current indentation level. + + compact_sequence_indent bool // Is '- ' is considered part of the indentation for sequence elements? + + flow_level int // The current flow level. + + root_context bool // Is it the document root context? + sequence_context bool // Is it a sequence context? + mapping_context bool // Is it a mapping context? + simple_key_context bool // Is it a simple mapping key context? + + line int // The current line. + column int // The current column. + whitespace bool // If the last character was a whitespace? + indention bool // If the last character was an indentation character (' ', '-', '?', ':')? + open_ended bool // If an explicit document end is required? + + space_above bool // Is there's an empty line above? + foot_indent int // The indent used to write the foot comment above, or -1 if none. + + // Anchor analysis. + anchor_data struct { + anchor []byte // The anchor value. + alias bool // Is it an alias? + } + + // Tag analysis. + tag_data struct { + handle []byte // The tag handle. + suffix []byte // The tag suffix. + } + + // Scalar analysis. + scalar_data struct { + value []byte // The scalar value. + multiline bool // Does the scalar contain line breaks? + flow_plain_allowed bool // Can the scalar be expessed in the flow plain style? + block_plain_allowed bool // Can the scalar be expressed in the block plain style? + single_quoted_allowed bool // Can the scalar be expressed in the single quoted style? + block_allowed bool // Can the scalar be expressed in the literal or folded styles? + style yaml_scalar_style_t // The output style. + } + + // Comments + head_comment []byte + line_comment []byte + foot_comment []byte + tail_comment []byte + + key_line_comment []byte + + // Dumper stuff + + opened bool // If the stream was already opened? + closed bool // If the stream was already closed? + + // The information associated with the document nodes. + anchors *struct { + references int // The number of references. + anchor int // The anchor id. + serialized bool // If the node has been emitted? + } + + last_anchor_id int // The last assigned anchor id. + + document *yaml_document_t // The currently emitted document. +} diff --git a/go/internal/forked/kyaml/internal/forked/github.com/go-yaml/yaml/yamlprivateh.go b/go/internal/forked/kyaml/internal/forked/github.com/go-yaml/yaml/yamlprivateh.go new file mode 100644 index 000000000..e88f9c54a --- /dev/null +++ b/go/internal/forked/kyaml/internal/forked/github.com/go-yaml/yaml/yamlprivateh.go @@ -0,0 +1,198 @@ +// +// Copyright (c) 2011-2019 Canonical Ltd +// Copyright (c) 2006-2010 Kirill Simonov +// +// Permission is hereby granted, free of charge, to any person obtaining a copy of +// this software and associated documentation files (the "Software"), to deal in +// the Software without restriction, including without limitation the rights to +// use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies +// of the Software, and to permit persons to whom the Software is furnished to do +// so, subject to the following conditions: +// +// The above copyright notice and this permission notice shall be included in all +// copies or substantial portions of the Software. +// +// THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR +// IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, +// FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE +// AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER +// LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, +// OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE +// SOFTWARE. + +package yaml + +const ( + // The size of the input raw buffer. + input_raw_buffer_size = 512 + + // The size of the input buffer. + // It should be possible to decode the whole raw buffer. + input_buffer_size = input_raw_buffer_size * 3 + + // The size of the output buffer. + output_buffer_size = 128 + + // The size of the output raw buffer. + // It should be possible to encode the whole output buffer. + output_raw_buffer_size = (output_buffer_size*2 + 2) + + // The size of other stacks and queues. + initial_stack_size = 16 + initial_queue_size = 16 + initial_string_size = 16 +) + +// Check if the character at the specified position is an alphabetical +// character, a digit, '_', or '-'. +func is_alpha(b []byte, i int) bool { + return b[i] >= '0' && b[i] <= '9' || b[i] >= 'A' && b[i] <= 'Z' || b[i] >= 'a' && b[i] <= 'z' || b[i] == '_' || b[i] == '-' +} + +// Check if the character at the specified position is a digit. +func is_digit(b []byte, i int) bool { + return b[i] >= '0' && b[i] <= '9' +} + +// Get the value of a digit. +func as_digit(b []byte, i int) int { + return int(b[i]) - '0' +} + +// Check if the character at the specified position is a hex-digit. +func is_hex(b []byte, i int) bool { + return b[i] >= '0' && b[i] <= '9' || b[i] >= 'A' && b[i] <= 'F' || b[i] >= 'a' && b[i] <= 'f' +} + +// Get the value of a hex-digit. +func as_hex(b []byte, i int) int { + bi := b[i] + if bi >= 'A' && bi <= 'F' { + return int(bi) - 'A' + 10 + } + if bi >= 'a' && bi <= 'f' { + return int(bi) - 'a' + 10 + } + return int(bi) - '0' +} + +// Check if the character is ASCII. +func is_ascii(b []byte, i int) bool { + return b[i] <= 0x7F +} + +// Check if the character at the start of the buffer can be printed unescaped. +func is_printable(b []byte, i int) bool { + return ((b[i] == 0x0A) || // . == #x0A + (b[i] >= 0x20 && b[i] <= 0x7E) || // #x20 <= . <= #x7E + (b[i] == 0xC2 && b[i+1] >= 0xA0) || // #0xA0 <= . <= #xD7FF + (b[i] > 0xC2 && b[i] < 0xED) || + (b[i] == 0xED && b[i+1] < 0xA0) || + (b[i] == 0xEE) || + (b[i] == 0xEF && // #xE000 <= . <= #xFFFD + !(b[i+1] == 0xBB && b[i+2] == 0xBF) && // && . != #xFEFF + !(b[i+1] == 0xBF && (b[i+2] == 0xBE || b[i+2] == 0xBF)))) +} + +// Check if the character at the specified position is NUL. +func is_z(b []byte, i int) bool { + return b[i] == 0x00 +} + +// Check if the beginning of the buffer is a BOM. +func is_bom(b []byte, i int) bool { + return b[0] == 0xEF && b[1] == 0xBB && b[2] == 0xBF +} + +// Check if the character at the specified position is space. +func is_space(b []byte, i int) bool { + return b[i] == ' ' +} + +// Check if the character at the specified position is tab. +func is_tab(b []byte, i int) bool { + return b[i] == '\t' +} + +// Check if the character at the specified position is blank (space or tab). +func is_blank(b []byte, i int) bool { + //return is_space(b, i) || is_tab(b, i) + return b[i] == ' ' || b[i] == '\t' +} + +// Check if the character at the specified position is a line break. +func is_break(b []byte, i int) bool { + return (b[i] == '\r' || // CR (#xD) + b[i] == '\n' || // LF (#xA) + b[i] == 0xC2 && b[i+1] == 0x85 || // NEL (#x85) + b[i] == 0xE2 && b[i+1] == 0x80 && b[i+2] == 0xA8 || // LS (#x2028) + b[i] == 0xE2 && b[i+1] == 0x80 && b[i+2] == 0xA9) // PS (#x2029) +} + +func is_crlf(b []byte, i int) bool { + return b[i] == '\r' && b[i+1] == '\n' +} + +// Check if the character is a line break or NUL. +func is_breakz(b []byte, i int) bool { + //return is_break(b, i) || is_z(b, i) + return ( + // is_break: + b[i] == '\r' || // CR (#xD) + b[i] == '\n' || // LF (#xA) + b[i] == 0xC2 && b[i+1] == 0x85 || // NEL (#x85) + b[i] == 0xE2 && b[i+1] == 0x80 && b[i+2] == 0xA8 || // LS (#x2028) + b[i] == 0xE2 && b[i+1] == 0x80 && b[i+2] == 0xA9 || // PS (#x2029) + // is_z: + b[i] == 0) +} + +// Check if the character is a line break, space, or NUL. +func is_spacez(b []byte, i int) bool { + //return is_space(b, i) || is_breakz(b, i) + return ( + // is_space: + b[i] == ' ' || + // is_breakz: + b[i] == '\r' || // CR (#xD) + b[i] == '\n' || // LF (#xA) + b[i] == 0xC2 && b[i+1] == 0x85 || // NEL (#x85) + b[i] == 0xE2 && b[i+1] == 0x80 && b[i+2] == 0xA8 || // LS (#x2028) + b[i] == 0xE2 && b[i+1] == 0x80 && b[i+2] == 0xA9 || // PS (#x2029) + b[i] == 0) +} + +// Check if the character is a line break, space, tab, or NUL. +func is_blankz(b []byte, i int) bool { + //return is_blank(b, i) || is_breakz(b, i) + return ( + // is_blank: + b[i] == ' ' || b[i] == '\t' || + // is_breakz: + b[i] == '\r' || // CR (#xD) + b[i] == '\n' || // LF (#xA) + b[i] == 0xC2 && b[i+1] == 0x85 || // NEL (#x85) + b[i] == 0xE2 && b[i+1] == 0x80 && b[i+2] == 0xA8 || // LS (#x2028) + b[i] == 0xE2 && b[i+1] == 0x80 && b[i+2] == 0xA9 || // PS (#x2029) + b[i] == 0) +} + +// Determine the width of the character. +func width(b byte) int { + // Don't replace these by a switch without first + // confirming that it is being inlined. + if b&0x80 == 0x00 { + return 1 + } + if b&0xE0 == 0xC0 { + return 2 + } + if b&0xF0 == 0xE0 { + return 3 + } + if b&0xF8 == 0xF0 { + return 4 + } + return 0 + +} diff --git a/go/internal/forked/kyaml/internal/forked/github.com/qri-io/starlib/util/LICENSE b/go/internal/forked/kyaml/internal/forked/github.com/qri-io/starlib/util/LICENSE new file mode 100644 index 000000000..31f292dce --- /dev/null +++ b/go/internal/forked/kyaml/internal/forked/github.com/qri-io/starlib/util/LICENSE @@ -0,0 +1,21 @@ +The MIT License (MIT) + +Copyright (c) 2018 QRI, Inc. + +Permission is hereby granted, free of charge, to any person obtaining a copy +of this software and associated documentation files (the "Software"), to deal +in the Software without restriction, including without limitation the rights +to use, copy, modify, merge, publish, distribute, sublicense, and/or sell +copies of the Software, and to permit persons to whom the Software is +furnished to do so, subject to the following conditions: + +The above copyright notice and this permission notice shall be included in +all copies or substantial portions of the Software. + +THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR +IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, +FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE +AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER +LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, +OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN +THE SOFTWARE. diff --git a/go/internal/forked/kyaml/internal/forked/github.com/qri-io/starlib/util/doc.go b/go/internal/forked/kyaml/internal/forked/github.com/qri-io/starlib/util/doc.go new file mode 100644 index 000000000..035b47921 --- /dev/null +++ b/go/internal/forked/kyaml/internal/forked/github.com/qri-io/starlib/util/doc.go @@ -0,0 +1,25 @@ +// The MIT License (MIT) + +// Copyright (c) 2018 QRI, Inc. + +// Permission is hereby granted, free of charge, to any person obtaining a copy +// of this software and associated documentation files (the "Software"), to deal +// in the Software without restriction, including without limitation the rights +// to use, copy, modify, merge, publish, distribute, sublicense, and/or sell +// copies of the Software, and to permit persons to whom the Software is +// furnished to do so, subject to the following conditions: + +// The above copyright notice and this permission notice shall be included in +// all copies or substantial portions of the Software. + +// THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR +// IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, +// FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE +// AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER +// LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, +// OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN +// THE SOFTWARE. + +// Package util is forked from https://github.com/qri-io/starlib in order to prune +// excessive transitive dependencies from pulling in that library. +package util diff --git a/go/internal/forked/kyaml/internal/forked/github.com/qri-io/starlib/util/util.go b/go/internal/forked/kyaml/internal/forked/github.com/qri-io/starlib/util/util.go new file mode 100644 index 000000000..96b4a9aea --- /dev/null +++ b/go/internal/forked/kyaml/internal/forked/github.com/qri-io/starlib/util/util.go @@ -0,0 +1,273 @@ +// The MIT License (MIT) + +// Copyright (c) 2018 QRI, Inc. + +// Permission is hereby granted, free of charge, to any person obtaining a copy +// of this software and associated documentation files (the "Software"), to deal +// in the Software without restriction, including without limitation the rights +// to use, copy, modify, merge, publish, distribute, sublicense, and/or sell +// copies of the Software, and to permit persons to whom the Software is +// furnished to do so, subject to the following conditions: + +// The above copyright notice and this permission notice shall be included in +// all copies or substantial portions of the Software. + +// THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR +// IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, +// FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE +// AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER +// LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, +// OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN +// THE SOFTWARE. + +package util + +import ( + "fmt" + + "github.com/pkg/errors" + "go.starlark.net/starlark" + "go.starlark.net/starlarkstruct" +) + +// // asString unquotes a starlark string value +// func asString(x starlark.Value) (string, error) { +// return strconv.Unquote(x.String()) +// } + +// IsEmptyString checks is a starlark string is empty ("" for a go string) +// starlark.String.String performs repr-style quotation, which is necessary +// for the starlark.Value contract but a frequent source of errors in API +// clients. This helper method makes sure it'll work properly +func IsEmptyString(s starlark.String) bool { + return s.String() == `""` +} + +// Unmarshal decodes a starlark.Value into it's golang counterpart +//nolint:nakedret +func Unmarshal(x starlark.Value) (val interface{}, err error) { + switch v := x.(type) { + case starlark.NoneType: + val = nil + case starlark.Bool: + val = v.Truth() == starlark.True + case starlark.Int: + val, err = starlark.AsInt32(x) + case starlark.Float: + if f, ok := starlark.AsFloat(x); !ok { + err = fmt.Errorf("couldn't parse float") + } else { + val = f + } + case starlark.String: + val = v.GoString() + // case starlibtime.Time: + // val = time.Time(v) + case *starlark.Dict: + var ( + dictVal starlark.Value + pval interface{} + kval interface{} + keys []interface{} + vals []interface{} + // key as interface if found one key is not a string + ki bool + ) + + for _, k := range v.Keys() { + dictVal, _, err = v.Get(k) + if err != nil { + return + } + + pval, err = Unmarshal(dictVal) + if err != nil { + err = fmt.Errorf("unmarshaling starlark value: %w", err) + return + } + + kval, err = Unmarshal(k) + if err != nil { + err = fmt.Errorf("unmarshaling starlark key: %w", err) + return + } + + if _, ok := kval.(string); !ok { + // found key as not a string + ki = true + } + + keys = append(keys, kval) + vals = append(vals, pval) + } + + // prepare result + + rs := map[string]interface{}{} + ri := map[interface{}]interface{}{} + + for i, key := range keys { + // key as interface + if ki { + ri[key] = vals[i] + } else { + rs[key.(string)] = vals[i] + } + } + + if ki { + val = ri // map[interface{}]interface{} + } else { + val = rs // map[string]interface{} + } + case *starlark.List: + var ( + i int + listVal starlark.Value + iter = v.Iterate() + value = make([]interface{}, v.Len()) + ) + + defer iter.Done() + for iter.Next(&listVal) { + value[i], err = Unmarshal(listVal) + if err != nil { + return + } + i++ + } + val = value + case starlark.Tuple: + var ( + i int + tupleVal starlark.Value + iter = v.Iterate() + value = make([]interface{}, v.Len()) + ) + + defer iter.Done() + for iter.Next(&tupleVal) { + value[i], err = Unmarshal(tupleVal) + if err != nil { + return + } + i++ + } + val = value + case *starlark.Set: + fmt.Println("errnotdone: SET") + err = fmt.Errorf("sets aren't yet supported") + case *starlarkstruct.Struct: + if _var, ok := v.Constructor().(Unmarshaler); ok { + err = _var.UnmarshalStarlark(x) + if err != nil { + err = errors.Wrapf(err, "failed marshal %q to Starlark object", v.Constructor().Type()) + return + } + val = _var + } else { + err = fmt.Errorf("constructor object from *starlarkstruct.Struct not supported Marshaler to starlark object: %s", v.Constructor().Type()) + } + default: + fmt.Println("errbadtype:", x.Type()) + err = fmt.Errorf("unrecognized starlark type: %s", x.Type()) + } + return +} + +// Marshal turns go values into starlark types +//nolint:nakedret +func Marshal(data interface{}) (v starlark.Value, err error) { + switch x := data.(type) { + case nil: + v = starlark.None + case bool: + v = starlark.Bool(x) + case string: + v = starlark.String(x) + case int: + v = starlark.MakeInt(x) + case int8: + v = starlark.MakeInt(int(x)) + case int16: + v = starlark.MakeInt(int(x)) + case int32: + v = starlark.MakeInt(int(x)) + case int64: + v = starlark.MakeInt64(x) + case uint: + v = starlark.MakeUint(x) + case uint8: + v = starlark.MakeUint(uint(x)) + case uint16: + v = starlark.MakeUint(uint(x)) + case uint32: + v = starlark.MakeUint(uint(x)) + case uint64: + v = starlark.MakeUint64(x) + case float32: + v = starlark.Float(float64(x)) + case float64: + v = starlark.Float(x) + // case time.Time: + // v = starlibtime.Time(x) + case []interface{}: + var elems = make([]starlark.Value, len(x)) + for i, val := range x { + elems[i], err = Marshal(val) + if err != nil { + return + } + } + v = starlark.NewList(elems) + case map[interface{}]interface{}: + dict := &starlark.Dict{} + var elem starlark.Value + for ki, val := range x { + var key starlark.Value + key, err = Marshal(ki) + if err != nil { + return + } + + elem, err = Marshal(val) + if err != nil { + return + } + if err = dict.SetKey(key, elem); err != nil { + return + } + } + v = dict + case map[string]interface{}: + dict := &starlark.Dict{} + var elem starlark.Value + for key, val := range x { + elem, err = Marshal(val) + if err != nil { + return + } + if err = dict.SetKey(starlark.String(key), elem); err != nil { + return + } + } + v = dict + case Marshaler: + v, err = x.MarshalStarlark() + default: + return starlark.None, fmt.Errorf("unrecognized type: %#v", x) + } + return +} + +// Unmarshaler is the interface use to unmarshal starlark custom types. +type Unmarshaler interface { + // UnmarshalStarlark unmarshal a starlark object to custom type. + UnmarshalStarlark(starlark.Value) error +} + +// Marshaler is the interface use to marshal starlark custom types. +type Marshaler interface { + // MarshalStarlark marshal a custom type to starlark object. + MarshalStarlark() (starlark.Value, error) +} diff --git a/go/internal/forked/kyaml/internal/forked/update-go-yaml.sh b/go/internal/forked/kyaml/internal/forked/update-go-yaml.sh new file mode 100755 index 000000000..09dac52dc --- /dev/null +++ b/go/internal/forked/kyaml/internal/forked/update-go-yaml.sh @@ -0,0 +1,108 @@ +#!/bin/bash +# Copyright 2021 The Kubernetes Authors. +# SPDX-License-Identifier: Apache-2.0 + +set -euo pipefail + +if [ "$#" -ne 1 ]; then + echo "Usage: $0 \$GOYAML_V3_SHA" + exit 1 + fi + +if [ "$(git branch --show-current)" == "master" ]; then + echo "You must be on a branch to use this script." + exit 1 +fi + +blue=$(tput setaf 4) +normal=$(tput sgr0) + +# This should be the version of go-yaml v3 used by kubectl +# In the original fork, this is 496545a6307b2a7d7a710fd516e5e16e8ab62dbc +export GOYAML_SHA=$1 +export GOYAML_REF="goyaml-$GOYAML_SHA" + +# The PRs we need to cherry-pick onto the above commit +declare -r GO_YAML_PRS=(753) + +REPO_ROOT=$(git rev-parse --show-toplevel) +declare -r REPO_ROOT +declare -r REBASEMAGIC="${REPO_ROOT}/.git/rebase-apply" + +function explain() { + printf "\n\n%s\n" "${blue}$1${normal}" +} + +# cherry-pick REPO PR +function cherry-pick(){ + repo=$1 + pull=$2 + echo "+++ Downloading patch to /tmp/${pull}.patch (in case you need to do this again)" + + curl -o "/tmp/${pull}.patch" -sSL "${repo}/pull/${pull}.patch" + echo + echo "+++ About to attempt cherry pick of PR. To reattempt:" + echo " $ git am -x -X subtree=kyaml/internal/forked/github.com/go-yaml/yaml -3 /tmp/${pull}.patch" + echo + git am -3 "/tmp/${pull}.patch" || { + conflicts=false + while unmerged=$(git status --porcelain | grep ^U) && [[ -n ${unmerged} ]] \ + || [[ -e "${REBASEMAGIC}" ]]; do + conflicts=true # <-- We should have detected conflicts once + echo + explain "+++ Conflicts detected:" + echo + (git status --porcelain | grep ^U) || echo "!!! None. Did you git am --continue?" + echo + explain "+++ Please resolve the conflicts in another window (and remember to 'git add / git am --continue')" + read -p "+++ Proceed (anything but 'y' aborts the cherry-pick)? [y/n] " -r + echo + if ! [[ "${REPLY}" =~ ^[yY]$ ]]; then + explain "Aborting." >&2 + exit 1 + fi + done + + if [[ "${conflicts}" != "true" ]]; then + explain "!!! git am failed, likely because of an in-progress 'git am' or 'git rebase'" + exit 1 + fi + } + + # remove the patch file from /tmp + rm -f "/tmp/${pull}.patch" +} + +subtree_commit_flag="" + +explain "Removing the fork's tree from git, if it exists. We'll write over this commit in a moment, but \`read-tree\` requires a clean directory." +find kyaml/internal/forked/github.com/go-yaml/yaml -type f -delete + +if [[ $(git diff --exit-code kyaml/internal/forked/github.com/go-yaml/yaml) ]]; then + git add kyaml/internal/forked/github.com/go-yaml/yaml + git commit -m "Temporarily remove go-yaml fork" + subtree_commit_flag="--amend" +fi + +explain "Fetching the version of go-yaml used by kubectl. Tag it more explicitly in case of conflicts with commits local to this repo." +git fetch --depth=1 https://github.com/go-yaml/yaml.git "$GOYAML_SHA:$GOYAML_REF" + +explain "Inserting the content we just pulled as a subtree of this repository and squash the changes into the last commit." +git read-tree --prefix=kyaml/internal/forked/github.com/go-yaml/yaml/ -u "$GOYAML_REF" +git add kyaml/internal/forked/github.com/go-yaml/yaml +git commit $subtree_commit_flag -m "Internal copy of go-yaml at $GOYAML_SHA" + +explain "Subtree creation successful." + +explain "Cherry-picking the commits from our go-yaml/yaml PRs" +for pr in "${GO_YAML_PRS[@]}" ; do + cherry-pick https://github.com/go-yaml/yaml "$pr" +done + +explain "Converting module to be internal." +find kyaml/internal/forked/github.com/go-yaml/yaml -name "*.go" -type f | xargs sed -i '' s+"gopkg.in/yaml.v3"+"github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/internal/forked/github.com/go-yaml/yaml"+g +rm kyaml/internal/forked/github.com/go-yaml/yaml/go.mod +git commit --all -m "Internalize forked code" + +explain "SUCCEEDED." +exit 0 diff --git a/go/internal/forked/kyaml/internal/forked/update-go-yaml.sh b/go/internal/forked/kyaml/internal/forked/update-go-yaml.sh new file mode 100755 index 000000000..5f1f47f94 --- /dev/null +++ b/go/internal/forked/kyaml/internal/forked/update-go-yaml.sh @@ -0,0 +1,108 @@ +#!/bin/bash +# Copyright 2021 The Kubernetes Authors. +# SPDX-License-Identifier: Apache-2.0 + +set -euo pipefail + +if [ "$#" -ne 1 ]; then + echo "Usage: $0 \$GOYAML_V3_SHA" + exit 1 + fi + +if [ "$(git branch --show-current)" == "master" ]; then + echo "You must be on a branch to use this script." + exit 1 +fi + +blue=$(tput setaf 4) +normal=$(tput sgr0) + +# This should be the version of go-yaml v3 used by kubectl +# In the original fork, this is 496545a6307b2a7d7a710fd516e5e16e8ab62dbc +export GOYAML_SHA=$1 +export GOYAML_REF="goyaml-$GOYAML_SHA" + +# The PRs we need to cherry-pick onto the above commit +declare -r GO_YAML_PRS=(753) + +REPO_ROOT=$(git rev-parse --show-toplevel) +declare -r REPO_ROOT +declare -r REBASEMAGIC="${REPO_ROOT}/.git/rebase-apply" + +function explain() { + printf "\n\n%s\n" "${blue}$1${normal}" +} + +# cherry-pick REPO PR +function cherry-pick(){ + repo=$1 + pull=$2 + echo "+++ Downloading patch to /tmp/${pull}.patch (in case you need to do this again)" + + curl -o "/tmp/${pull}.patch" -sSL "${repo}/pull/${pull}.patch" + echo + echo "+++ About to attempt cherry pick of PR. To reattempt:" + echo " $ git am -x -X subtree=kyaml/internal/forked/github.com/go-yaml/yaml -3 /tmp/${pull}.patch" + echo + git am -3 "/tmp/${pull}.patch" || { + conflicts=false + while unmerged=$(git status --porcelain | grep ^U) && [[ -n ${unmerged} ]] \ + || [[ -e "${REBASEMAGIC}" ]]; do + conflicts=true # <-- We should have detected conflicts once + echo + explain "+++ Conflicts detected:" + echo + (git status --porcelain | grep ^U) || echo "!!! None. Did you git am --continue?" + echo + explain "+++ Please resolve the conflicts in another window (and remember to 'git add / git am --continue')" + read -p "+++ Proceed (anything but 'y' aborts the cherry-pick)? [y/n] " -r + echo + if ! [[ "${REPLY}" =~ ^[yY]$ ]]; then + explain "Aborting." >&2 + exit 1 + fi + done + + if [[ "${conflicts}" != "true" ]]; then + explain "!!! git am failed, likely because of an in-progress 'git am' or 'git rebase'" + exit 1 + fi + } + + # remove the patch file from /tmp + rm -f "/tmp/${pull}.patch" +} + +subtree_commit_flag="" + +explain "Removing the fork's tree from git, if it exists. We'll write over this commit in a moment, but \`read-tree\` requires a clean directory." +find kyaml/internal/forked/github.com/go-yaml/yaml -type f -delete + +if [[ $(git diff --exit-code kyaml/internal/forked/github.com/go-yaml/yaml) ]]; then + git add kyaml/internal/forked/github.com/go-yaml/yaml + git commit -m "Temporarily remove go-yaml fork" + subtree_commit_flag="--amend" +fi + +explain "Fetching the version of go-yaml used by kubectl. Tag it more explicitly in case of conflicts with commits local to this repo." +git fetch --depth=1 https://github.com/go-yaml/yaml.git "$GOYAML_SHA:$GOYAML_REF" + +explain "Inserting the content we just pulled as a subtree of this repository and squash the changes into the last commit." +git read-tree --prefix=kyaml/internal/forked/github.com/go-yaml/yaml/ -u "$GOYAML_REF" +git add kyaml/internal/forked/github.com/go-yaml/yaml +git commit $subtree_commit_flag -m "Internal copy of go-yaml at $GOYAML_SHA" + +explain "Subtree creation successful." + +explain "Cherry-picking the commits from our go-yaml/yaml PRs" +for pr in "${GO_YAML_PRS[@]}" ; do + cherry-pick https://github.com/go-yaml/yaml "$pr" +done + +explain "Converting module to be internal." +find kyaml/internal/forked/github.com/go-yaml/yaml -name "*.go" -type f | xargs sed -i '' s+"gopkg.in/yaml.v3"+"github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/internal/forked/github.com/go-yaml/yaml"+g +rm kyaml/internal/forked/github.com/go-yaml/yaml/go.mod +git commit --all -m "Internalize forked code" + +explain "SUCCEEDED." +exit 0 diff --git a/go/internal/forked/kyaml/kio/byteio_reader.go b/go/internal/forked/kyaml/kio/byteio_reader.go new file mode 100644 index 000000000..38803139a --- /dev/null +++ b/go/internal/forked/kyaml/kio/byteio_reader.go @@ -0,0 +1,349 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package kio + +import ( + "bytes" + "fmt" + "io" + "regexp" + "sort" + "strings" + + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/errors" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/kio/kioutil" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" +) + +const ( + ResourceListKind = "ResourceList" + ResourceListAPIVersion = "config.kubernetes.io/v1" +) + +// ByteReadWriter reads from an input and writes to an output. +type ByteReadWriter struct { + // Reader is where ResourceNodes are decoded from. + Reader io.Reader + + // Writer is where ResourceNodes are encoded. + Writer io.Writer + + // OmitReaderAnnotations will configures Read to skip setting the config.kubernetes.io/index + // annotation on Resources as they are Read. + OmitReaderAnnotations bool + + // KeepReaderAnnotations if set will keep the Reader specific annotations when writing + // the Resources, otherwise they will be cleared. + KeepReaderAnnotations bool + + // PreserveSeqIndent if true adds kioutil.SeqIndentAnnotation to each resource + PreserveSeqIndent bool + + // Style is a style that is set on the Resource Node Document. + Style yaml.Style + + // WrapBareSeqNode wraps the bare sequence node document with map node, + // kyaml uses reader annotations to track resources, it is not possible to + // add them to bare sequence nodes, this option enables wrapping such bare + // sequence nodes into map node with key yaml.BareSeqNodeWrappingKey + // note that this wrapping is different and not related to ResourceList wrapping + WrapBareSeqNode bool + + FunctionConfig *yaml.RNode + + Results *yaml.RNode + + NoWrap bool + WrappingAPIVersion string + WrappingKind string +} + +func (rw *ByteReadWriter) Read() ([]*yaml.RNode, error) { + b := &ByteReader{ + Reader: rw.Reader, + OmitReaderAnnotations: rw.OmitReaderAnnotations, + PreserveSeqIndent: rw.PreserveSeqIndent, + WrapBareSeqNode: rw.WrapBareSeqNode, + } + val, err := b.Read() + rw.Results = b.Results + + if rw.FunctionConfig == nil { + rw.FunctionConfig = b.FunctionConfig + } + if !rw.NoWrap && rw.WrappingKind == "" { + rw.WrappingAPIVersion = b.WrappingAPIVersion + rw.WrappingKind = b.WrappingKind + } + return val, errors.Wrap(err) +} + +func (rw *ByteReadWriter) Write(nodes []*yaml.RNode) error { + w := ByteWriter{ + Writer: rw.Writer, + KeepReaderAnnotations: rw.KeepReaderAnnotations, + Style: rw.Style, + FunctionConfig: rw.FunctionConfig, + Results: rw.Results, + } + if !rw.NoWrap { + w.WrappingAPIVersion = rw.WrappingAPIVersion + w.WrappingKind = rw.WrappingKind + } + return w.Write(nodes) +} + +// ParseAll reads all of the inputs into resources +func ParseAll(inputs ...string) ([]*yaml.RNode, error) { + return (&ByteReader{ + Reader: bytes.NewBufferString(strings.Join(inputs, "\n---\n")), + }).Read() +} + +// FromBytes reads from a byte slice. +func FromBytes(bs []byte) ([]*yaml.RNode, error) { + return (&ByteReader{ + OmitReaderAnnotations: true, + AnchorsAweigh: true, + Reader: bytes.NewBuffer(bs), + }).Read() +} + +// StringAll writes all of the resources to a string +func StringAll(resources []*yaml.RNode) (string, error) { + var b bytes.Buffer + err := (&ByteWriter{Writer: &b}).Write(resources) + return b.String(), err +} + +// ByteReader decodes ResourceNodes from bytes. +// By default, Read will set the config.kubernetes.io/index annotation on each RNode as it +// is read so they can be written back in the same order. +type ByteReader struct { + // Reader is where ResourceNodes are decoded from. + Reader io.Reader + + // OmitReaderAnnotations will configures Read to skip setting the config.kubernetes.io/index + // and internal.config.kubernetes.io/seqindent annotations on Resources as they are Read. + OmitReaderAnnotations bool + + // PreserveSeqIndent if true adds kioutil.SeqIndentAnnotation to each resource + PreserveSeqIndent bool + + // SetAnnotations is a map of caller specified annotations to set on resources as they are read + // These are independent of the annotations controlled by OmitReaderAnnotations + SetAnnotations map[string]string + + FunctionConfig *yaml.RNode + + Results *yaml.RNode + + // DisableUnwrapping prevents Resources in Lists and ResourceLists from being unwrapped + DisableUnwrapping bool + + // WrappingAPIVersion is set by Read(), and is the apiVersion of the object that + // the read objects were originally wrapped in. + WrappingAPIVersion string + + // WrappingKind is set by Read(), and is the kind of the object that + // the read objects were originally wrapped in. + WrappingKind string + + // WrapBareSeqNode wraps the bare sequence node document with map node, + // kyaml uses reader annotations to track resources, it is not possible to + // add them to bare sequence nodes, this option enables wrapping such bare + // sequence nodes into map node with key yaml.BareSeqNodeWrappingKey + // note that this wrapping is different and not related to ResourceList wrapping + WrapBareSeqNode bool + + // AnchorsAweigh set to true attempts to replace all YAML anchor aliases + // with their definitions (anchor values) immediately after the read. + AnchorsAweigh bool +} + +var _ Reader = &ByteReader{} + +// splitDocuments returns a slice of all documents contained in a YAML string. Multiple documents can be divided by the +// YAML document separator (---). It allows for white space and comments to be after the separator on the same line, +// but will return an error if anything else is on the line. +func splitDocuments(s string) ([]string, error) { + docs := make([]string, 0) + if len(s) > 0 { + // The YAML document separator is any line that starts with --- + yamlSeparatorRegexp := regexp.MustCompile(`\n---.*\n`) + + // Find all separators, check them for invalid content, and append each document to docs + separatorLocations := yamlSeparatorRegexp.FindAllStringIndex(s, -1) + prev := 0 + for i := range separatorLocations { + loc := separatorLocations[i] + separator := s[loc[0]:loc[1]] + + // If the next non-whitespace character on the line following the separator is not a comment, return an error + trimmedContentAfterSeparator := strings.TrimSpace(separator[4:]) + if len(trimmedContentAfterSeparator) > 0 && trimmedContentAfterSeparator[0] != '#' { + return nil, errors.Errorf("invalid document separator: %s", strings.TrimSpace(separator)) + } + + docs = append(docs, s[prev:loc[0]]) + prev = loc[1] + } + docs = append(docs, s[prev:]) + } + + return docs, nil +} + +func (r *ByteReader) Read() ([]*yaml.RNode, error) { + if r.PreserveSeqIndent && r.OmitReaderAnnotations { + return nil, errors.Errorf(`"PreserveSeqIndent" option adds a reader annotation, please set "OmitReaderAnnotations" to false`) + } + + output := ResourceNodeSlice{} + + // by manually splitting resources -- otherwise the decoder will get the Resource + // boundaries wrong for header comments. + input := &bytes.Buffer{} + _, err := io.Copy(input, r.Reader) + if err != nil { + return nil, errors.Wrap(err) + } + + // Replace the ending \r\n (line ending used in windows) with \n and then split it into multiple YAML documents + // if it contains document separators (---) + values, err := splitDocuments(strings.ReplaceAll(input.String(), "\r\n", "\n")) + if err != nil { + return nil, errors.Wrap(err) + } + + index := 0 + for i := range values { + // the Split used above will eat the tail '\n' from each resource. This may affect the + // literal string value since '\n' is meaningful in it. + if i != len(values)-1 { + values[i] += "\n" + } + decoder := yaml.NewDecoder(bytes.NewBufferString(values[i])) + node, err := r.decode(values[i], index, decoder) + if err == io.EOF { + continue + } + + if err != nil { + return nil, errors.Wrap(err) + } + if yaml.IsMissingOrNull(node) { + // empty value + continue + } + + // ok if no metadata -- assume not an InputList + meta, err := node.GetMeta() + if err != yaml.ErrMissingMetadata && err != nil { + return nil, errors.WrapPrefixf(err, "[%d]", i) + } + + // the elements are wrapped in an InputList, unwrap them + // don't check apiVersion, we haven't standardized on the domain + if !r.DisableUnwrapping && + len(values) == 1 && // Only unwrap if there is only 1 value + (meta.Kind == ResourceListKind || meta.Kind == "List") && + (node.Field("items") != nil || node.Field("functionConfig") != nil) { + r.WrappingKind = meta.Kind + r.WrappingAPIVersion = meta.APIVersion + + // unwrap the list + if fc := node.Field("functionConfig"); fc != nil { + r.FunctionConfig = fc.Value + } + if res := node.Field("results"); res != nil { + r.Results = res.Value + } + + items := node.Field("items") + if items != nil { + for i := range items.Value.Content() { + // add items + output = append(output, yaml.NewRNode(items.Value.Content()[i])) + } + } + continue + } + + // add the node to the list + output = append(output, node) + + // increment the index annotation value + index++ + } + if r.AnchorsAweigh { + for _, n := range output { + if err = n.DeAnchor(); err != nil { + return nil, err + } + } + } + return output, nil +} + +func (r *ByteReader) decode(originalYAML string, index int, decoder *yaml.Decoder) (*yaml.RNode, error) { + node := &yaml.Node{} + err := decoder.Decode(node) + if err == io.EOF { + return nil, io.EOF + } + if err != nil { + return nil, errors.Wrap(err) + } + + if yaml.IsYNodeEmptyDoc(node) { + return nil, nil + } + + // set annotations on the read Resources + // sort the annotations by key so the output Resources is consistent (otherwise the + // annotations will be in a random order) + n := yaml.NewRNode(node) + // check if it is a bare sequence node and wrap it with a yaml.BareSeqNodeWrappingKey + if r.WrapBareSeqNode && node.Kind == yaml.DocumentNode && len(node.Content) > 0 && + node.Content[0] != nil && node.Content[0].Kind == yaml.SequenceNode { + wrappedNode := yaml.NewRNode(&yaml.Node{ + Kind: yaml.MappingNode, + }) + wrappedNode.PipeE(yaml.SetField(yaml.BareSeqNodeWrappingKey, n)) + n = wrappedNode + } + + if r.SetAnnotations == nil { + r.SetAnnotations = map[string]string{} + } + if !r.OmitReaderAnnotations { + err := kioutil.CopyLegacyAnnotations(n) + if err != nil { + return nil, err + } + r.SetAnnotations[kioutil.IndexAnnotation] = fmt.Sprintf("%d", index) + r.SetAnnotations[kioutil.LegacyIndexAnnotation] = fmt.Sprintf("%d", index) + + if r.PreserveSeqIndent { + // derive and add the seqindent annotation + seqIndentStyle := yaml.DeriveSeqIndentStyle(originalYAML) + if seqIndentStyle != "" { + r.SetAnnotations[kioutil.SeqIndentAnnotation] = fmt.Sprintf("%s", seqIndentStyle) + } + } + } + var keys []string + for k := range r.SetAnnotations { + keys = append(keys, k) + } + sort.Strings(keys) + for _, k := range keys { + _, err = n.Pipe(yaml.SetAnnotation(k, r.SetAnnotations[k])) + if err != nil { + return nil, errors.Wrap(err) + } + } + return n, nil +} diff --git a/go/internal/forked/kyaml/kio/byteio_reader_test.go b/go/internal/forked/kyaml/kio/byteio_reader_test.go new file mode 100644 index 000000000..741819a60 --- /dev/null +++ b/go/internal/forked/kyaml/kio/byteio_reader_test.go @@ -0,0 +1,1052 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package kio_test + +import ( + "bytes" + "strings" + "testing" + + "github.com/stretchr/testify/assert" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/kio" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/kio/kioutil" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" +) + +func TestByteReader(t *testing.T) { + type testCase struct { + name string + input string + err string + expectedItems []string + expectedFunctionConfig string + expectedResults string + wrappingAPIVersion string + wrappingAPIKind string + instance kio.ByteReader + } + + testCases := []testCase{ + // + // + // + { + name: "wrapped_resource_list", + input: `apiVersion: config.kubernetes.io/v1 +kind: ResourceList +items: +- kind: Deployment + spec: + replicas: 1 +- kind: Service + spec: + selectors: + foo: bar +`, + expectedItems: []string{ + `kind: Deployment +spec: + replicas: 1 +`, + `kind: Service +spec: + selectors: + foo: bar +`, + }, + wrappingAPIVersion: kio.ResourceListAPIVersion, + wrappingAPIKind: kio.ResourceListKind, + }, + + // + // + // + { + name: "wrapped_resource_list_function_config", + input: `apiVersion: config.kubernetes.io/v1 +kind: ResourceList +functionConfig: + foo: bar + elems: + - a + - b + - c +items: +- kind: Deployment + spec: + replicas: 1 +- kind: Service + spec: + selectors: + foo: bar +`, + expectedItems: []string{ + `kind: Deployment +spec: + replicas: 1 +`, + `kind: Service +spec: + selectors: + foo: bar +`, + }, + expectedFunctionConfig: `foo: bar +elems: +- a +- b +- c`, + wrappingAPIVersion: kio.ResourceListAPIVersion, + wrappingAPIKind: kio.ResourceListKind, + }, + // + // + // + { + name: "wrapped_resource_list_function_config_without_items", + input: `apiVersion: config.kubernetes.io/v1 +kind: ResourceList +functionConfig: + foo: bar + elems: + - a + - b + - c +`, + expectedItems: []string{}, + expectedFunctionConfig: `foo: bar +elems: +- a +- b +- c`, + wrappingAPIVersion: kio.ResourceListAPIVersion, + wrappingAPIKind: kio.ResourceListKind, + }, + + // + // + // + { + name: "wrapped_list", + input: ` +apiVersion: v1 +kind: List +items: +- kind: Deployment + spec: + replicas: 1 +- kind: Service + spec: + selectors: + foo: bar +`, + expectedItems: []string{ + ` +kind: Deployment +spec: + replicas: 1 +`, + ` +kind: Service +spec: + selectors: + foo: bar +`, + }, + wrappingAPIKind: "List", + wrappingAPIVersion: "v1", + }, + + // + // + // + { + name: "unwrapped_items", + input: ` +--- +a: b # first resource +c: d +--- +# second resource +e: f +g: +- h +--- +--- +i: j +`, + expectedItems: []string{ + `a: b # first resource +c: d +metadata: + annotations: + config.kubernetes.io/index: '0' + internal.config.kubernetes.io/index: '0' +`, + `# second resource +e: f +g: +- h +metadata: + annotations: + config.kubernetes.io/index: '1' + internal.config.kubernetes.io/index: '1' +`, + `i: j +metadata: + annotations: + config.kubernetes.io/index: '2' + internal.config.kubernetes.io/index: '2' +`, + }, + }, + + // + // + // + { + name: "omit_annotations", + input: ` +--- +a: b # first resource +c: d +--- +# second resource +e: f +g: +- h +--- +--- +i: j +`, + expectedItems: []string{ + ` +a: b # first resource +c: d +`, + ` +# second resource +e: f +g: +- h +`, + ` +i: j +`, + }, + instance: kio.ByteReader{OmitReaderAnnotations: true}, + }, + + // + // + // + { + name: "no_omit_annotations", + input: ` +--- +a: b # first resource +c: d +--- +# second resource +e: f +g: +- h +--- +--- +i: j +`, + expectedItems: []string{ + ` +a: b # first resource +c: d +metadata: + annotations: + config.kubernetes.io/index: '0' + internal.config.kubernetes.io/index: '0' +`, + ` +# second resource +e: f +g: +- h +metadata: + annotations: + config.kubernetes.io/index: '1' + internal.config.kubernetes.io/index: '1' +`, + ` +i: j +metadata: + annotations: + config.kubernetes.io/index: '2' + internal.config.kubernetes.io/index: '2' +`, + }, + instance: kio.ByteReader{}, + }, + + // + // + // + { + name: "set_annotation", + input: ` +--- +a: b # first resource +c: d +--- +# second resource +e: f +g: +- h +--- +--- +i: j +`, + expectedItems: []string{ + `a: b # first resource +c: d +metadata: + annotations: + foo: 'bar' +`, + `# second resource +e: f +g: +- h +metadata: + annotations: + foo: 'bar' +`, + `i: j +metadata: + annotations: + foo: 'bar' +`, + }, + instance: kio.ByteReader{ + OmitReaderAnnotations: true, + SetAnnotations: map[string]string{"foo": "bar"}}, + }, + + // + // + // + { + name: "windows_line_ending", + input: "\r\n---\r\na: b # first resource\r\nc: d\r\n---\r\n# second resource\r\ne: f\r\ng:\r\n- h\r\n---\r\n\r\n---\r\n i: j", + expectedItems: []string{ + `a: b # first resource +c: d +metadata: + annotations: + foo: 'bar' +`, + `# second resource +e: f +g: +- h +metadata: + annotations: + foo: 'bar' +`, + `i: j +metadata: + annotations: + foo: 'bar' +`, + }, + instance: kio.ByteReader{ + OmitReaderAnnotations: true, + SetAnnotations: map[string]string{"foo": "bar"}}, + }, + + // + // + // + { + name: "json", + input: ` +{ + "a": "b", + "c": [1, 2] +} +`, + expectedItems: []string{ + ` +{"a": "b", "c": [1, 2], metadata: {annotations: {config.kubernetes.io/index: '0', internal.config.kubernetes.io/index: '0'}}} +`, + }, + instance: kio.ByteReader{}, + }, + + // + // + // + { + name: "white_space_after_document_separator_should_be_ignored", + input: ` +a: b +--- +c: d +`, + expectedItems: []string{ + ` +a: b +`, + ` +c: d +`, + }, + instance: kio.ByteReader{OmitReaderAnnotations: true}, + }, + + // + // + // + { + name: "comment_after_document_separator_should_be_ignored", + input: ` +a: b +--- #foo +c: d +`, + expectedItems: []string{ + ` +a: b +`, + ` +c: d +`, + }, + instance: kio.ByteReader{OmitReaderAnnotations: true}, + }, + + // + // + // + { + name: "anything_after_document_separator_other_than_white_space_or_comment_is_an_error", + input: ` +a: b +--- foo +c: d +`, + err: "invalid document separator: --- foo", + instance: kio.ByteReader{OmitReaderAnnotations: true}, + }, + } + + for i := range testCases { + tc := testCases[i] + t.Run(tc.name, func(t *testing.T) { + r := tc.instance + r.Reader = bytes.NewBufferString(tc.input) + nodes, err := r.Read() + if tc.err != "" { + if !assert.EqualError(t, err, tc.err) { + t.FailNow() + } + return + } + + if !assert.NoError(t, err) { + t.FailNow() + } + + // verify the contents + if !assert.Len(t, nodes, len(tc.expectedItems)) { + t.FailNow() + } + for i := range nodes { + actual, err := nodes[i].String() + if !assert.NoError(t, err) { + t.FailNow() + } + if !assert.Equal(t, + strings.TrimSpace(tc.expectedItems[i]), + strings.TrimSpace(actual)) { + t.FailNow() + } + } + + // verify the function config + if tc.expectedFunctionConfig != "" { + actual, err := r.FunctionConfig.String() + if !assert.NoError(t, err) { + t.FailNow() + } + if !assert.Equal(t, + strings.TrimSpace(tc.expectedFunctionConfig), + strings.TrimSpace(actual)) { + t.FailNow() + } + } else if !assert.Nil(t, r.FunctionConfig) { + t.FailNow() + } + + if tc.expectedResults != "" { + actual, err := r.Results.String() + actual = strings.TrimSpace(actual) + if !assert.NoError(t, err) { + t.FailNow() + } + + tc.expectedResults = strings.TrimSpace(tc.expectedResults) + if !assert.Equal(t, tc.expectedResults, actual) { + t.FailNow() + } + } else if !assert.Nil(t, r.Results) { + t.FailNow() + } + + if !assert.Equal(t, tc.wrappingAPIKind, r.WrappingKind) { + t.FailNow() + } + if !assert.Equal(t, tc.wrappingAPIVersion, r.WrappingAPIVersion) { + t.FailNow() + } + }) + } +} + +func TestFromBytes(t *testing.T) { + type expected struct { + isErr bool + sOut []string + } + + testCases := map[string]struct { + input []byte + exp expected + }{ + "garbage": { + input: []byte("garbageIn: garbageOut"), + exp: expected{ + sOut: []string{"garbageIn: garbageOut"}, + }, + }, + "noBytes": { + input: []byte{}, + exp: expected{ + sOut: []string{}, + }, + }, + "goodJson": { + input: []byte(` +{"apiVersion":"v1","kind":"ConfigMap","metadata":{"name":"winnie"}} +`), + exp: expected{ + sOut: []string{` +{"apiVersion": "v1", "kind": "ConfigMap", "metadata": {"name": "winnie"}} +`}, + }, + }, + "goodYaml1": { + input: []byte(` +apiVersion: v1 +kind: ConfigMap +metadata: + name: winnie +`), + exp: expected{ + sOut: []string{` +apiVersion: v1 +kind: ConfigMap +metadata: + name: winnie +`}, + }, + }, + "goodYaml2": { + input: []byte(` +apiVersion: v1 +kind: ConfigMap +metadata: + name: winnie +--- +apiVersion: v1 +kind: ConfigMap +metadata: + name: winnie +`), + exp: expected{ + sOut: []string{` +apiVersion: v1 +kind: ConfigMap +metadata: + name: winnie +`, ` +apiVersion: v1 +kind: ConfigMap +metadata: + name: winnie +`}, + }, + }, + "localConfigYaml": { + input: []byte(` +apiVersion: v1 +kind: ConfigMap +metadata: + name: winnie-skip + annotations: + # this annotation causes the Resource to be ignored by kustomize + config.kubernetes.io/local-config: "" +--- +apiVersion: v1 +kind: ConfigMap +metadata: + name: winnie +`), + exp: expected{ + sOut: []string{` +apiVersion: v1 +kind: ConfigMap +metadata: + name: winnie-skip + annotations: + # this annotation causes the Resource to be ignored by kustomize + config.kubernetes.io/local-config: "" +`, + ` +apiVersion: v1 +kind: ConfigMap +metadata: + name: winnie +`}, + }, + }, + "garbageInOneOfTwoObjects": { + input: []byte(` +apiVersion: v1 +kind: ConfigMap +metadata: + name: winnie +--- +WOOOOOOOOOOOOOOOOOOOOOOOOT: woot +`), + exp: expected{ + sOut: []string{` +apiVersion: v1 +kind: ConfigMap +metadata: + name: winnie +`, + ` +WOOOOOOOOOOOOOOOOOOOOOOOOT: woot +`}, + }, + }, + "emptyObjects": { + input: []byte(` +--- +#a comment + +--- + +`), + exp: expected{ + sOut: []string{}, + }, + }, + "Missing .metadata.name in object": { + input: []byte(` +apiVersion: v1 +kind: Namespace +metadata: + annotations: + foo: bar +`), + exp: expected{ + sOut: []string{` +apiVersion: v1 +kind: Namespace +metadata: + annotations: + foo: bar +`}, + }, + }, + "nil value in list": { + input: []byte(` +apiVersion: builtin +kind: ConfigMapGenerator +metadata: + name: kube100-site + labels: + app: web +testList: +- testA +- +`), + exp: expected{ + isErr: true, + }, + }, + "List": { + input: []byte(` +apiVersion: v1 +kind: List +items: +- apiVersion: v1 + kind: ConfigMap + metadata: + name: winnie +- apiVersion: v1 + kind: ConfigMap + metadata: + name: winnie +`), + exp: expected{ + sOut: []string{` +apiVersion: v1 +kind: ConfigMap +metadata: + name: winnie +`, ` +apiVersion: v1 +kind: ConfigMap +metadata: + name: winnie +`}, + }, + }, + "ConfigMapList": { + input: []byte(` +apiVersion: v1 +kind: ConfigMapList +items: +- apiVersion: v1 + kind: ConfigMap + metadata: + name: winnie +- apiVersion: v1 + kind: ConfigMap + metadata: + name: winnie +`), + exp: expected{ + sOut: []string{` +apiVersion: v1 +kind: ConfigMapList +items: +- apiVersion: v1 + kind: ConfigMap + metadata: + name: winnie +- apiVersion: v1 + kind: ConfigMap + metadata: + name: winnie +`}, + }, + }, + "listWithAnchors": { + input: []byte(` +apiVersion: v1 +kind: DeploymentList +items: +- apiVersion: apps/v1 + kind: Deployment + metadata: + name: deployment-a + spec: &hostAliases + template: + spec: + hostAliases: + - hostnames: + - a.example.com + ip: 8.8.8.8 +- apiVersion: apps/v1 + kind: Deployment + metadata: + name: deployment-b + spec: + *hostAliases +`), + exp: expected{ + sOut: []string{` +apiVersion: v1 +kind: DeploymentList +items: +- apiVersion: apps/v1 + kind: Deployment + metadata: + name: deployment-a + spec: + template: + spec: + hostAliases: + - hostnames: + - a.example.com + ip: 8.8.8.8 +- apiVersion: apps/v1 + kind: Deployment + metadata: + name: deployment-b + spec: + template: + spec: + hostAliases: + - hostnames: + - a.example.com + ip: 8.8.8.8 +`}, + }, + }, + } + + for n := range testCases { + tc := testCases[n] + t.Run(n, func(t *testing.T) { + rNodes, err := kio.FromBytes(tc.input) + if err != nil { + assert.True(t, tc.exp.isErr) + return + } + assert.False(t, tc.exp.isErr) + assert.Equal(t, len(tc.exp.sOut), len(rNodes)) + for i, n := range rNodes { + json, err := n.String() + assert.NoError(t, err) + assert.Equal( + t, strings.TrimSpace(tc.exp.sOut[i]), + strings.TrimSpace(json), n) + } + }) + } +} + +// Show the low level (go-yaml) representation of a small doc with a +// YAML anchor and alias after reading it with anchor expansion on or off. +func TestByteReader_AnchorsAweigh(t *testing.T) { + const input = ` +data: + color: &color-used blue + feeling: *color-used +` + var rNode *yaml.RNode + { + rNodes, err := (&kio.ByteReader{ + OmitReaderAnnotations: true, + AnchorsAweigh: false, + Reader: bytes.NewBuffer([]byte(input)), + }).Read() + assert.NoError(t, err) + assert.Equal(t, 1, len(rNodes)) + rNode = rNodes[0] + } + // Confirm internal representation. + { + yNode := rNode.YNode() + + // The high level object is a map of "data" to some value. + assert.Equal(t, yaml.NodeTagMap, yNode.Tag) + + yNodes := yNode.Content + assert.Equal(t, 2, len(yNodes)) + + // Confirm that the key is "data". + assert.Equal(t, yaml.NodeTagString, yNodes[0].Tag) + assert.Equal(t, "data", yNodes[0].Value) + + assert.Equal(t, yaml.NodeTagMap, yNodes[1].Tag) + + // The value of the "data" key. + yNodes = yNodes[1].Content + // Expect two name-value pairs. + assert.Equal(t, 4, len(yNodes)) + + assert.Equal(t, yaml.ScalarNode, yNodes[0].Kind) + assert.Equal(t, yaml.NodeTagString, yNodes[0].Tag) + assert.Equal(t, "color", yNodes[0].Value) + assert.Empty(t, yNodes[0].Anchor) + assert.Nil(t, yNodes[0].Alias) + + assert.Equal(t, yaml.ScalarNode, yNodes[1].Kind) + assert.Equal(t, yaml.NodeTagString, yNodes[1].Tag) + assert.Equal(t, "blue", yNodes[1].Value) + assert.Equal(t, "color-used", yNodes[1].Anchor) + assert.Nil(t, yNodes[1].Alias) + + assert.Equal(t, yaml.ScalarNode, yNodes[2].Kind) + assert.Equal(t, yaml.NodeTagString, yNodes[2].Tag) + assert.Equal(t, "feeling", yNodes[2].Value) + assert.Empty(t, yNodes[2].Anchor) + assert.Nil(t, yNodes[2].Alias) + + assert.Equal(t, yaml.AliasNode, yNodes[3].Kind) + assert.Empty(t, yNodes[3].Tag) + assert.Equal(t, "color-used", yNodes[3].Value) + assert.Empty(t, yNodes[3].Anchor) + assert.NotNil(t, yNodes[3].Alias) + } + + str, err := rNode.String() + assert.NoError(t, err) + // The string version matches the input (it still has anchors and aliases). + assert.Equal(t, strings.TrimSpace(input), strings.TrimSpace(str)) + + // Now do same thing again, but this time set AnchorsAweigh = true. + { + rNodes, err := (&kio.ByteReader{ + OmitReaderAnnotations: true, + AnchorsAweigh: true, + Reader: bytes.NewBuffer([]byte(input)), + }).Read() + assert.NoError(t, err) + assert.Equal(t, 1, len(rNodes)) + rNode = rNodes[0] + } + // Again make assertions on the internals. + { + yNode := rNode.YNode() + + assert.Equal(t, yaml.NodeTagMap, yNode.Tag) + + yNodes := yNode.Content + assert.Equal(t, 2, len(yNodes)) + + assert.Equal(t, yaml.NodeTagString, yNodes[0].Tag) + assert.Equal(t, "data", yNodes[0].Value) + + assert.Equal(t, yaml.NodeTagMap, yNodes[1].Tag) + + yNodes = yNodes[1].Content + assert.Equal(t, 4, len(yNodes)) + + assert.Equal(t, yaml.ScalarNode, yNodes[0].Kind) + assert.Equal(t, yaml.NodeTagString, yNodes[0].Tag) + assert.Equal(t, "color", yNodes[0].Value) + assert.Empty(t, yNodes[0].Anchor) + assert.Nil(t, yNodes[0].Alias) + + assert.Equal(t, yaml.ScalarNode, yNodes[1].Kind) + assert.Equal(t, yaml.NodeTagString, yNodes[1].Tag) + assert.Equal(t, "blue", yNodes[1].Value) + assert.Empty(t, yNodes[1].Anchor) + assert.Nil(t, yNodes[1].Alias) + + assert.Equal(t, yaml.ScalarNode, yNodes[2].Kind) + assert.Equal(t, yaml.NodeTagString, yNodes[2].Tag) + assert.Equal(t, "feeling", yNodes[2].Value) + assert.Empty(t, yNodes[2].Anchor) + assert.Nil(t, yNodes[2].Alias) + + assert.Equal(t, yaml.ScalarNode, yNodes[3].Kind) + assert.Equal(t, yaml.NodeTagString, yNodes[3].Tag) + assert.Equal(t, "blue", yNodes[3].Value) + assert.Empty(t, yNodes[3].Anchor) + assert.Nil(t, yNodes[3].Alias) + } + + str, err = rNode.String() + assert.NoError(t, err) + // This time, the alias has been replaced with the anchor definition. + assert.Equal(t, strings.TrimSpace(` +data: + color: blue + feeling: blue +`), strings.TrimSpace(str)) +} + +// TestByteReader_AddSeqIndentAnnotation tests if the internal.config.kubernetes.io/seqindent +// annotation is added to resources appropriately +func TestByteReader_AddSeqIndentAnnotation(t *testing.T) { + type testCase struct { + name string + err string + input string + expectedAnnoValue string + OmitReaderAnnotations bool + } + + testCases := []testCase{ + { + name: "read with wide indentation", + input: `apiVersion: apps/v1 +kind: Deployment +spec: + - foo + - bar + - baz +`, + expectedAnnoValue: "wide", + }, + { + name: "read with compact indentation", + input: `apiVersion: apps/v1 +kind: Deployment +spec: +- foo +- bar +- baz +`, + expectedAnnoValue: "compact", + }, + { + name: "read with mixed indentation, wide wins", + input: `apiVersion: apps/v1 +kind: Deployment +spec: + - foo + - bar + - baz +env: +- foo +- bar +`, + expectedAnnoValue: "wide", + }, + { + name: "read with mixed indentation, compact wins", + input: `apiVersion: apps/v1 +kind: Deployment +spec: +- foo +- bar +- baz +env: + - foo + - bar +`, + expectedAnnoValue: "compact", + }, + { + name: "error if conflicting options", + input: `apiVersion: apps/v1 +kind: Deployment +spec: +- foo +- bar +- baz +env: + - foo + - bar +`, + OmitReaderAnnotations: true, + err: `"PreserveSeqIndent" option adds a reader annotation, please set "OmitReaderAnnotations" to false`, + }, + } + + for i := range testCases { + tc := testCases[i] + t.Run(tc.name, func(t *testing.T) { + rNodes, err := (&kio.ByteReader{ + OmitReaderAnnotations: tc.OmitReaderAnnotations, + PreserveSeqIndent: true, + Reader: bytes.NewBuffer([]byte(tc.input)), + }).Read() + if tc.err != "" { + assert.Error(t, err) + assert.Equal(t, tc.err, err.Error()) + return + } + assert.NoError(t, err) + actual := rNodes[0].GetAnnotations()[kioutil.SeqIndentAnnotation] + assert.Equal(t, tc.expectedAnnoValue, actual) + }) + } +} diff --git a/go/internal/forked/kyaml/kio/byteio_readwriter_test.go b/go/internal/forked/kyaml/kio/byteio_readwriter_test.go new file mode 100644 index 000000000..e1a8b224e --- /dev/null +++ b/go/internal/forked/kyaml/kio/byteio_readwriter_test.go @@ -0,0 +1,868 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package kio_test + +import ( + "bytes" + "strings" + "testing" + + "github.com/stretchr/testify/assert" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/kio" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" +) + +func TestByteReadWriter(t *testing.T) { + type testCase struct { + name string + err string + input string + expectedOutput string + instance kio.ByteReadWriter + } + + testCases := []testCase{ + { + name: "round_trip", + input: ` +apiVersion: config.kubernetes.io/v1 +kind: ResourceList +items: +- kind: Deployment + spec: + replicas: 1 +- kind: Service + spec: + selectors: + foo: bar +`, + expectedOutput: ` +apiVersion: config.kubernetes.io/v1 +kind: ResourceList +items: +- kind: Deployment + spec: + replicas: 1 +- kind: Service + spec: + selectors: + foo: bar +`, + }, + + { + name: "function_config", + input: ` +apiVersion: config.kubernetes.io/v1 +kind: ResourceList +items: +- kind: Deployment + spec: + replicas: 1 +- kind: Service + spec: + selectors: + foo: bar +functionConfig: + a: b # something +`, + expectedOutput: ` +apiVersion: config.kubernetes.io/v1 +kind: ResourceList +items: +- kind: Deployment + spec: + replicas: 1 +- kind: Service + spec: + selectors: + foo: bar +functionConfig: + a: b # something +`, + }, + + { + name: "results", + input: ` +apiVersion: config.kubernetes.io/v1 +kind: ResourceList +items: +- kind: Deployment + spec: + replicas: 1 +- kind: Service + spec: + selectors: + foo: bar +results: + a: b # something +`, + expectedOutput: ` +apiVersion: config.kubernetes.io/v1 +kind: ResourceList +items: +- kind: Deployment + spec: + replicas: 1 +- kind: Service + spec: + selectors: + foo: bar +results: + a: b # something +`, + }, + + { + name: "drop_invalid_resource_list_field", + input: ` +apiVersion: config.kubernetes.io/v1 +kind: ResourceList +items: +- kind: Deployment + spec: + replicas: 1 +- kind: Service + spec: + selectors: + foo: bar +foo: + a: b # something +`, + expectedOutput: ` +apiVersion: config.kubernetes.io/v1 +kind: ResourceList +items: +- kind: Deployment + spec: + replicas: 1 +- kind: Service + spec: + selectors: + foo: bar +`, + }, + + { + name: "list", + input: ` +apiVersion: v1 +kind: List +items: +- kind: Deployment + spec: + replicas: 1 +- kind: Service + spec: + selectors: + foo: bar +`, + expectedOutput: ` +apiVersion: v1 +kind: List +items: +- kind: Deployment + spec: + replicas: 1 +- kind: Service + spec: + selectors: + foo: bar +`, + }, + + { + name: "multiple_documents", + input: ` +kind: Deployment +spec: + replicas: 1 +--- +kind: Service +spec: + selectors: + foo: bar +`, + expectedOutput: ` +kind: Deployment +spec: + replicas: 1 +--- +kind: Service +spec: + selectors: + foo: bar +`, + }, + + { + name: "keep_annotations", + input: ` +kind: Deployment +spec: + replicas: 1 +--- +kind: Service +spec: + selectors: + foo: bar +`, + expectedOutput: ` +kind: Deployment +spec: + replicas: 1 +metadata: + annotations: + config.kubernetes.io/index: '0' + internal.config.kubernetes.io/index: '0' +--- +kind: Service +spec: + selectors: + foo: bar +metadata: + annotations: + config.kubernetes.io/index: '1' + internal.config.kubernetes.io/index: '1' +`, + instance: kio.ByteReadWriter{KeepReaderAnnotations: true}, + }, + + { + name: "manual_override_wrap", + input: ` +apiVersion: config.kubernetes.io/v1 +kind: ResourceList +items: +- kind: Deployment + spec: + replicas: 1 +- kind: Service + spec: + selectors: + foo: bar +functionConfig: + a: b # something +`, + expectedOutput: ` +kind: Deployment +spec: + replicas: 1 +--- +kind: Service +spec: + selectors: + foo: bar +`, + instance: kio.ByteReadWriter{NoWrap: true}, + }, + + { + name: "manual_override_function_config", + input: ` +apiVersion: config.kubernetes.io/v1 +kind: ResourceList +items: +- kind: Deployment + spec: + replicas: 1 +- kind: Service + spec: + selectors: + foo: bar +functionConfig: + a: b # something +`, + expectedOutput: ` +apiVersion: config.kubernetes.io/v1 +kind: ResourceList +items: +- kind: Deployment + spec: + replicas: 1 +- kind: Service + spec: + selectors: + foo: bar +functionConfig: + c: d +`, + instance: kio.ByteReadWriter{FunctionConfig: yaml.MustParse(`c: d`)}, + }, + { + name: "anchors_not_inflated", + input: ` +kind: ConfigMap +metadata: + name: foo +data: + color: &color-used blue + feeling: *color-used +`, + // If YAML anchors were automagically inflated, + // the expectedOutput would be something like + // + // kind: ConfigMap + // metadata: + // name: foo + // data: + // color: blue + // feeling: blue + expectedOutput: ` +kind: ConfigMap +metadata: + name: foo +data: + color: &color-used blue + feeling: *color-used +`, + }, + } + + for i := range testCases { + tc := testCases[i] + t.Run(tc.name, func(t *testing.T) { + var in, out bytes.Buffer + in.WriteString(tc.input) + w := tc.instance + w.Writer = &out + w.Reader = &in + + nodes, err := w.Read() + if !assert.NoError(t, err) { + t.FailNow() + } + + err = w.Write(nodes) + if !assert.NoError(t, err) { + t.FailNow() + } + + if tc.err != "" { + if !assert.EqualError(t, err, tc.err) { + t.FailNow() + } + return + } + + if !assert.Equal(t, + strings.TrimSpace(tc.expectedOutput), strings.TrimSpace(out.String())) { + t.FailNow() + } + }) + } +} + +func TestByteReadWriter_RetainSeqIndent(t *testing.T) { + type testCase struct { + name string + err string + input string + expectedOutput string + instance kio.ByteReadWriter + } + + testCases := []testCase{ + { + name: "round_trip with 2 space seq indent", + input: ` +apiVersion: apps/v1 +kind: Deployment +spec: + - foo + - bar +--- +apiVersion: v1 +kind: Service +spec: + - foo + - bar +`, + expectedOutput: ` +apiVersion: apps/v1 +kind: Deployment +spec: + - foo + - bar +--- +apiVersion: v1 +kind: Service +spec: + - foo + - bar +`, + }, + { + name: "round_trip with 0 space seq indent", + input: ` +apiVersion: apps/v1 +kind: Deployment +spec: +- foo +- bar +--- +apiVersion: v1 +kind: Service +spec: +- foo +- bar +`, + expectedOutput: ` +apiVersion: apps/v1 +kind: Deployment +spec: +- foo +- bar +--- +apiVersion: v1 +kind: Service +spec: +- foo +- bar +`, + }, + { + name: "round_trip with different indentations", + input: ` +apiVersion: apps/v1 +kind: Deployment +spec: + - foo + - bar + - baz +--- +apiVersion: v1 +kind: Service +spec: +- foo +- bar +`, + expectedOutput: ` +apiVersion: apps/v1 +kind: Deployment +spec: + - foo + - bar + - baz +--- +apiVersion: v1 +kind: Service +spec: +- foo +- bar +`, + }, + { + name: "round_trip with mixed indentations in same resource, wide wins as it is first", + input: ` +apiVersion: apps/v1 +kind: Deployment +spec: + - foo +env: +- foo +- bar +`, + expectedOutput: ` +apiVersion: apps/v1 +kind: Deployment +spec: + - foo +env: + - foo + - bar +`, + }, + { + name: "round_trip with mixed indentations in same resource, compact wins as it is first", + input: ` +apiVersion: apps/v1 +kind: Deployment +spec: +- foo +env: + - foo + - bar +`, + expectedOutput: ` +apiVersion: apps/v1 +kind: Deployment +spec: +- foo +env: +- foo +- bar +`, + }, + { + name: "unwrap ResourceList with annotations", + input: ` +apiVersion: config.kubernetes.io/v1 +kind: ResourceList +items: + - kind: Deployment + metadata: + annotations: + internal.config.kubernetes.io/seqindent: "compact" + spec: + - foo + - bar + - kind: Service + metadata: + annotations: + internal.config.kubernetes.io/seqindent: "wide" + spec: + - foo + - bar +`, + expectedOutput: ` +kind: Deployment +spec: +- foo +- bar +--- +kind: Service +spec: + - foo + - bar +`, + }, + { + name: "round_trip with mixed indentations in same resource, wide wins as it is first", + input: ` +apiVersion: apps/v1 +kind: Deployment +spec: + - foo + - bar +env: +- foo +- bar +- baz +`, + expectedOutput: ` +apiVersion: apps/v1 +kind: Deployment +spec: + - foo + - bar +env: + - foo + - bar + - baz +`, + }, + } + + for i := range testCases { + tc := testCases[i] + t.Run(tc.name, func(t *testing.T) { + var in, out bytes.Buffer + in.WriteString(tc.input) + w := tc.instance + w.Writer = &out + w.Reader = &in + w.PreserveSeqIndent = true + + nodes, err := w.Read() + if !assert.NoError(t, err) { + t.FailNow() + } + + w.WrappingKind = "" + err = w.Write(nodes) + if !assert.NoError(t, err) { + t.FailNow() + } + + if tc.err != "" { + if !assert.EqualError(t, err, tc.err) { + t.FailNow() + } + return + } + + if !assert.Equal(t, + strings.TrimSpace(tc.expectedOutput), strings.TrimSpace(out.String())) { + t.FailNow() + } + }) + } +} + +func TestByteReadWriter_WrapBareSeqNode(t *testing.T) { + type testCase struct { + name string + readerErr string + writerErr string + input string + wrapBareSeqNode bool + expectedOutput string + instance kio.ByteReadWriter + } + + testCases := []testCase{ + { + name: "round_trip bare seq node simple", + wrapBareSeqNode: true, + input: ` +- foo +- bar +`, + expectedOutput: ` +- foo +- bar +`, + }, + { + name: "round_trip bare seq node", + wrapBareSeqNode: true, + input: `# Use the old CRD because of the quantity validation issue: +# https://github.com/kubeflow/kubeflow/issues/5722 +- op: replace + path: /spec + value: + group: kubeflow.org + names: + kind: Notebook + plural: notebooks + singular: notebook + scope: Namespaced + subresources: + status: {} + versions: + - name: v1alpha1 + served: true + storage: false +`, + expectedOutput: `# Use the old CRD because of the quantity validation issue: +# https://github.com/kubeflow/kubeflow/issues/5722 +- op: replace + path: /spec + value: + group: kubeflow.org + names: + kind: Notebook + plural: notebooks + singular: notebook + scope: Namespaced + subresources: + status: {} + versions: + - name: v1alpha1 + served: true + storage: false +`, + }, + { + name: "error round_trip bare seq node simple", + wrapBareSeqNode: false, + input: ` +- foo +- bar +`, + readerErr: "wrong Node Kind for expected: MappingNode was SequenceNode", + }, + { + name: "error round_trip bare seq node", + wrapBareSeqNode: false, + input: `# Use the old CRD because of the quantity validation issue: +# https://github.com/kubeflow/kubeflow/issues/5722 +- op: replace + path: /spec + value: + group: kubeflow.org + names: + kind: Notebook + plural: notebooks + singular: notebook + scope: Namespaced + subresources: + status: {} + versions: + - name: v1alpha1 + served: true + storage: false +`, + readerErr: "wrong Node Kind for expected: MappingNode was SequenceNode", + }, + { + name: "round_trip bare seq node json", + wrapBareSeqNode: true, + input: `[{"op": "add", "path": "/spec/template/spec/containers/0/args/-", "value": "--namespaced"}]`, + expectedOutput: `[{"op": "add", "path": "/spec/template/spec/containers/0/args/-", "value": "--namespaced"}]`, + }, + { + name: "error round_trip invalid yaml node", + wrapBareSeqNode: false, + input: "I am not valid", + readerErr: "wrong Node Kind for expected: MappingNode was ScalarNode", + }, + } + + for i := range testCases { + tc := testCases[i] + t.Run(tc.name, func(t *testing.T) { + var in, out bytes.Buffer + in.WriteString(tc.input) + w := tc.instance + w.Writer = &out + w.Reader = &in + w.PreserveSeqIndent = true + w.WrapBareSeqNode = tc.wrapBareSeqNode + + nodes, err := w.Read() + if tc.readerErr != "" { + if !assert.Error(t, err) { + t.FailNow() + } + if !assert.Contains(t, err.Error(), tc.readerErr) { + t.FailNow() + } + return + } + + w.WrappingKind = "" + err = w.Write(nodes) + if !assert.NoError(t, err) { + t.FailNow() + } + + if tc.writerErr != "" { + if !assert.Error(t, err) { + t.FailNow() + } + if !assert.Contains(t, err.Error(), tc.writerErr) { + t.FailNow() + } + return + } + + if !assert.Equal(t, + strings.TrimSpace(tc.expectedOutput), strings.TrimSpace(out.String())) { + t.FailNow() + } + }) + } +} + +func TestByteReadWriter_ResourceListWrapping(t *testing.T) { + singleDeployment := `kind: Deployment +apiVersion: v1 +metadata: + name: tester + namespace: default +spec: + replicas: 0` + resourceList := `apiVersion: config.kubernetes.io/v1 +kind: ResourceList +items: +- kind: Deployment + apiVersion: v1 + metadata: + name: tester + namespace: default + spec: + replicas: 0` + resourceListWithError := `apiVersion: config.kubernetes.io/v1 +kind: ResourceList +items: +- kind: Deployment + apiVersion: v1 + metadata: + name: tester + namespace: default + spec: + replicas: 0 +results: +- message: some error + severity: error` + resourceListDifferentWrapper := strings.NewReplacer( + "kind: ResourceList", "kind: SomethingElse", + "apiVersion: config.kubernetes.io/v1", "apiVersion: fakeVersion", + ).Replace(resourceList) + + testCases := []struct { + desc string + noWrap bool + wrapKind string + wrapAPIVersion string + input string + want string + }{ + { + desc: "resource list", + input: resourceList, + want: resourceList, + }, + { + desc: "individual resources", + input: singleDeployment, + want: singleDeployment, + }, + { + desc: "no nested wrapping", + wrapKind: kio.ResourceListKind, + wrapAPIVersion: kio.ResourceListAPIVersion, + input: resourceList, + want: resourceList, + }, + { + desc: "unwrap resource list", + noWrap: true, + input: resourceList, + want: singleDeployment, + }, + { + desc: "wrap individual resources", + wrapKind: kio.ResourceListKind, + wrapAPIVersion: kio.ResourceListAPIVersion, + input: singleDeployment, + want: resourceList, + }, + { + desc: "NoWrap has precedence", + noWrap: true, + wrapKind: kio.ResourceListKind, + wrapAPIVersion: kio.ResourceListAPIVersion, + input: singleDeployment, + want: singleDeployment, + }, + { + desc: "honor specified wrapping kind", + wrapKind: "SomethingElse", + wrapAPIVersion: "fakeVersion", + input: resourceList, + want: resourceListDifferentWrapper, + }, + { + desc: "passthrough results", + input: resourceListWithError, + want: resourceListWithError, + }, + } + + for i := range testCases { + tc := testCases[i] + t.Run(tc.desc, func(t *testing.T) { + var got bytes.Buffer + rw := kio.ByteReadWriter{ + Reader: strings.NewReader(tc.input), + Writer: &got, + NoWrap: tc.noWrap, + WrappingAPIVersion: tc.wrapAPIVersion, + WrappingKind: tc.wrapKind, + } + + rnodes, err := rw.Read() + assert.NoError(t, err) + + err = rw.Write(rnodes) + assert.NoError(t, err) + + assert.Equal(t, tc.want, strings.TrimSpace(got.String())) + }) + } +} diff --git a/go/internal/forked/kyaml/kio/byteio_writer.go b/go/internal/forked/kyaml/kio/byteio_writer.go new file mode 100644 index 000000000..df8646288 --- /dev/null +++ b/go/internal/forked/kyaml/kio/byteio_writer.go @@ -0,0 +1,198 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package kio + +import ( + "encoding/json" + "io" + "path/filepath" + + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/errors" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/kio/kioutil" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" +) + +// ByteWriter writes ResourceNodes to bytes. Generally YAML encoding will be used but in the special +// case of writing a single, bare yaml.RNode that has a kioutil.PathAnnotation indicating that the +// target is a JSON file JSON encoding is used. See shouldJSONEncodeSingleBareNode below for more +// information. +type ByteWriter struct { + // Writer is where ResourceNodes are encoded. + Writer io.Writer + + // KeepReaderAnnotations if set will keep the Reader specific annotations when writing + // the Resources, otherwise they will be cleared. + KeepReaderAnnotations bool + + // ClearAnnotations is a list of annotations to clear when writing the Resources. + ClearAnnotations []string + + // Style is a style that is set on the Resource Node Document. + Style yaml.Style + + // FunctionConfig is the function config for an ResourceList. If non-nil + // wrap the results in an ResourceList. + FunctionConfig *yaml.RNode + + Results *yaml.RNode + + // WrappingKind if set will cause ByteWriter to wrap the Resources in + // an 'items' field in this kind. e.g. if WrappingKind is 'List', + // ByteWriter will wrap the Resources in a List .items field. + WrappingKind string + + // WrappingAPIVersion is the apiVersion for WrappingKind + WrappingAPIVersion string + + // Sort if set, will cause ByteWriter to sort the the nodes before writing them. + Sort bool +} + +var _ Writer = ByteWriter{} + +func (w ByteWriter) Write(inputNodes []*yaml.RNode) error { + // Copy the nodes to prevent writer from mutating the original nodes. + nodes := copyRNodes(inputNodes) + if w.Sort { + if err := kioutil.SortNodes(nodes); err != nil { + return errors.Wrap(err) + } + } + + // Even though we use the this value further down we must check this before removing annotations + jsonEncodeSingleBareNode := w.shouldJSONEncodeSingleBareNode(nodes) + + // store seqindent annotation value for each node in order to set the encoder indentation + var seqIndentsForNodes []string + for i := range nodes { + seqIndentsForNodes = append(seqIndentsForNodes, nodes[i].GetAnnotations()[kioutil.SeqIndentAnnotation]) + } + + for i := range nodes { + // clean resources by removing annotations set by the Reader + if !w.KeepReaderAnnotations { + _, err := nodes[i].Pipe(yaml.ClearAnnotation(kioutil.IndexAnnotation)) + if err != nil { + return errors.Wrap(err) + } + _, err = nodes[i].Pipe(yaml.ClearAnnotation(kioutil.LegacyIndexAnnotation)) + if err != nil { + return errors.Wrap(err) + } + + _, err = nodes[i].Pipe(yaml.ClearAnnotation(kioutil.SeqIndentAnnotation)) + if err != nil { + return errors.Wrap(err) + } + } + for _, a := range w.ClearAnnotations { + _, err := nodes[i].Pipe(yaml.ClearAnnotation(a)) + if err != nil { + return errors.Wrap(err) + } + } + + if err := yaml.ClearEmptyAnnotations(nodes[i]); err != nil { + return err + } + + if w.Style != 0 { + nodes[i].YNode().Style = w.Style + } + } + + if jsonEncodeSingleBareNode { + encoder := json.NewEncoder(w.Writer) + encoder.SetIndent("", " ") + return errors.Wrap(encoder.Encode(nodes[0])) + } + + encoder := yaml.NewEncoder(w.Writer) + defer encoder.Close() + // don't wrap the elements + if w.WrappingKind == "" { + for i := range nodes { + if seqIndentsForNodes[i] == string(yaml.WideSequenceStyle) { + encoder.DefaultSeqIndent() + } else { + encoder.CompactSeqIndent() + } + if err := encoder.Encode(upWrapBareSequenceNode(nodes[i].Document())); err != nil { + return errors.Wrap(err) + } + } + return nil + } + // wrap the elements in a list + items := &yaml.Node{Kind: yaml.SequenceNode} + list := &yaml.Node{ + Kind: yaml.MappingNode, + Style: w.Style, + Content: []*yaml.Node{ + {Kind: yaml.ScalarNode, Value: "apiVersion"}, + {Kind: yaml.ScalarNode, Value: w.WrappingAPIVersion}, + {Kind: yaml.ScalarNode, Value: "kind"}, + {Kind: yaml.ScalarNode, Value: w.WrappingKind}, + {Kind: yaml.ScalarNode, Value: "items"}, items, + }} + if w.FunctionConfig != nil { + list.Content = append(list.Content, + &yaml.Node{Kind: yaml.ScalarNode, Value: "functionConfig"}, + w.FunctionConfig.YNode()) + } + if w.Results != nil { + list.Content = append(list.Content, + &yaml.Node{Kind: yaml.ScalarNode, Value: "results"}, + w.Results.YNode()) + } + doc := &yaml.Node{ + Kind: yaml.DocumentNode, + Content: []*yaml.Node{list}} + for i := range nodes { + items.Content = append(items.Content, nodes[i].YNode()) + } + return encoder.Encode(doc) +} + +func copyRNodes(in []*yaml.RNode) []*yaml.RNode { + out := make([]*yaml.RNode, len(in)) + for i := range in { + out[i] = in[i].Copy() + } + return out +} + +// shouldJSONEncodeSingleBareNode determines if nodes contain a single node that should not be +// wrapped and has a JSON file extension, which in turn means that the node should be JSON encoded. +// Note 1: this must be checked before any annotations to avoid losing information about the target +// filename extension. +// Note 2: JSON encoding should only be used for single, unwrapped nodes because multiple unwrapped +// nodes cannot be represented in JSON (no multi doc support). Furthermore, the typical use +// cases for wrapping nodes would likely not include later writing the whole wrapper to a +// .json file, i.e. there is no point risking any edge case information loss e.g. comments +// disappearing, that could come from JSON encoding the whole wrapper just to ensure that +// one (or all nodes) can be read as JSON. +func (w ByteWriter) shouldJSONEncodeSingleBareNode(nodes []*yaml.RNode) bool { + if w.WrappingKind == "" && len(nodes) == 1 { + if path, _, _ := kioutil.GetFileAnnotations(nodes[0]); path != "" { + filename := filepath.Base(path) + for _, glob := range JSONMatch { + if match, _ := filepath.Match(glob, filename); match { + return true + } + } + } + } + return false +} + +// upWrapBareSequenceNode unwraps the bare sequence nodes wrapped by yaml.BareSeqNodeWrappingKey +func upWrapBareSequenceNode(node *yaml.Node) *yaml.Node { + rNode := yaml.NewRNode(node) + seqNode, err := rNode.Pipe(yaml.Lookup(yaml.BareSeqNodeWrappingKey)) + if err == nil && !seqNode.IsNilOrEmpty() { + return seqNode.YNode() + } + return node +} diff --git a/go/internal/forked/kyaml/kio/byteio_writer_test.go b/go/internal/forked/kyaml/kio/byteio_writer_test.go new file mode 100644 index 000000000..68676fd44 --- /dev/null +++ b/go/internal/forked/kyaml/kio/byteio_writer_test.go @@ -0,0 +1,553 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package kio_test + +import ( + "bytes" + "strings" + "testing" + + "github.com/stretchr/testify/assert" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/kio" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" +) + +func TestByteWriter(t *testing.T) { + type testCase struct { + name string + err string + items []string + functionConfig string + results string + expectedOutput string + instance kio.ByteWriter + } + + testCases := []testCase{ + // + // Test Case + // + { + name: "wrap_resource_list", + instance: kio.ByteWriter{ + Sort: true, + WrappingKind: kio.ResourceListKind, + WrappingAPIVersion: kio.ResourceListAPIVersion, + }, + items: []string{ + `a: b #first`, + `c: d # second`, + }, + functionConfig: ` +e: f +g: + h: + - i # has a list + - j`, + expectedOutput: `apiVersion: config.kubernetes.io/v1 +kind: ResourceList +items: +- a: b #first +- c: d # second +functionConfig: + e: f + g: + h: + - i # has a list + - j +`, + }, + + // + // Test Case + // + { + name: "multiple_items", + items: []string{ + `c: d # second`, + `e: f +g: + h: + # has a list + - i : [i1, i2] # line comment + # has a list 2 + - j : j1 +`, + `a: b #first`, + }, + expectedOutput: ` +c: d # second +--- +e: f +g: + h: + # has a list + - i: [i1, i2] # line comment + # has a list 2 + - j: j1 +--- +a: b #first +`, + }, + + // + // Test Case + // + { + name: "handle_comments", + items: []string{ + `# comment 0 +apiVersion: apps/v1 +kind: Deployment +metadata: + name: my-nginx + namespace: my-space + labels: + env: dev + foo: bar +spec: + # comment 1 + replicas: 3 + selector: + # comment 2 + matchLabels: # comment 3 + # comment 4 + app: nginx # comment 5 + template: + metadata: + labels: + app: nginx + spec: + # comment 6 + containers: + # comment 7 + - name: nginx + image: nginx:1.14.2 # comment 8 + ports: + # comment 9 + - containerPort: 80 # comment 10 +`, + `apiVersion: v1 +kind: Service +metadata: + name: my-service +spec: + ports: + # comment 1 + - name: etcd-server-ssl + port: 2380 + # comment 2 + - name: etcd-client-ssl + port: 2379 +`, + `apiVersion: constraints.gatekeeper.sh/v1beta1 +kind: EnforceFoo +metadata: + name: enforce-foo +spec: + parameters: + naming_rules: + - kind: Folder + patterns: + # comment 1 + - ^(dev|prod|staging|qa|shared)$ +`, + }, + expectedOutput: `# comment 0 +apiVersion: apps/v1 +kind: Deployment +metadata: + name: my-nginx + namespace: my-space + labels: + env: dev + foo: bar +spec: + # comment 1 + replicas: 3 + selector: + # comment 2 + matchLabels: # comment 3 + # comment 4 + app: nginx # comment 5 + template: + metadata: + labels: + app: nginx + spec: + # comment 6 + containers: + # comment 7 + - name: nginx + image: nginx:1.14.2 # comment 8 + ports: + # comment 9 + - containerPort: 80 # comment 10 +--- +apiVersion: v1 +kind: Service +metadata: + name: my-service +spec: + ports: + # comment 1 + - name: etcd-server-ssl + port: 2380 + # comment 2 + - name: etcd-client-ssl + port: 2379 +--- +apiVersion: constraints.gatekeeper.sh/v1beta1 +kind: EnforceFoo +metadata: + name: enforce-foo +spec: + parameters: + naming_rules: + - kind: Folder + patterns: + # comment 1 + - ^(dev|prod|staging|qa|shared)$ +`, + }, + + // + // Test Case + // + { + name: "sort_keep_annotation", + instance: kio.ByteWriter{Sort: true, KeepReaderAnnotations: true}, + items: []string{ + `a: b #first +metadata: + annotations: + internal.config.kubernetes.io/index: 0 + internal.config.kubernetes.io/path: "a/b/a_test.yaml" +`, + `e: f +g: + h: + - i # has a list + - j +metadata: + annotations: + internal.config.kubernetes.io/index: 0 + internal.config.kubernetes.io/path: "a/b/b_test.yaml" +`, + `c: d # second +metadata: + annotations: + internal.config.kubernetes.io/index: 1 + internal.config.kubernetes.io/path: "a/b/a_test.yaml" +`, + }, + + expectedOutput: `a: b #first +metadata: + annotations: + internal.config.kubernetes.io/index: 0 + internal.config.kubernetes.io/path: "a/b/a_test.yaml" + config.kubernetes.io/path: 'a/b/a_test.yaml' + config.kubernetes.io/index: '0' +--- +c: d # second +metadata: + annotations: + internal.config.kubernetes.io/index: 1 + internal.config.kubernetes.io/path: "a/b/a_test.yaml" + config.kubernetes.io/path: 'a/b/a_test.yaml' + config.kubernetes.io/index: '1' +--- +e: f +g: + h: + - i # has a list + - j +metadata: + annotations: + internal.config.kubernetes.io/index: 0 + internal.config.kubernetes.io/path: "a/b/b_test.yaml" + config.kubernetes.io/path: 'a/b/b_test.yaml' + config.kubernetes.io/index: '0' +`, + }, + + // + // Test Case + // + { + name: "sort_partial_annotations", + instance: kio.ByteWriter{Sort: true}, + items: []string{ + `a: b #first +metadata: + annotations: + internal.config.kubernetes.io/path: "a/b/a_test.yaml" +`, + `c: d # second +metadata: + annotations: + internal.config.kubernetes.io/index: 1 + internal.config.kubernetes.io/path: "a/b/a_test.yaml" +`, + `e: f +g: + h: + - i # has a list + - j +`, + }, + + expectedOutput: `e: f +g: + h: + - i # has a list + - j +--- +a: b #first +metadata: + annotations: + internal.config.kubernetes.io/path: "a/b/a_test.yaml" + config.kubernetes.io/path: 'a/b/a_test.yaml' +--- +c: d # second +metadata: + annotations: + internal.config.kubernetes.io/path: "a/b/a_test.yaml" + config.kubernetes.io/path: 'a/b/a_test.yaml' +`, + }, + + // + // Test Case + // + { + name: "keep_annotation_seqindent", + instance: kio.ByteWriter{KeepReaderAnnotations: true}, + items: []string{ + `a: b #first +metadata: + annotations: + internal.config.kubernetes.io/index: 0 + internal.config.kubernetes.io/path: "a/b/a_test.yaml" + internal.config.kubernetes.io/index: "compact" +`, + `e: f +g: + h: + - i # has a list + - j +metadata: + annotations: + internal.config.kubernetes.io/index: 0 + internal.config.kubernetes.io/path: "a/b/b_test.yaml" + internal.config.kubernetes.io/seqindent: "wide" +`, + `c: d # second +metadata: + annotations: + internal.config.kubernetes.io/index: 1 + internal.config.kubernetes.io/path: "a/b/a_test.yaml" + internal.config.kubernetes.io/seqindent: "compact" +`, + }, + + expectedOutput: `a: b #first +metadata: + annotations: + internal.config.kubernetes.io/index: 0 + internal.config.kubernetes.io/path: "a/b/a_test.yaml" + internal.config.kubernetes.io/index: "compact" +--- +e: f +g: + h: + - i # has a list + - j +metadata: + annotations: + internal.config.kubernetes.io/index: 0 + internal.config.kubernetes.io/path: "a/b/b_test.yaml" + internal.config.kubernetes.io/seqindent: "wide" +--- +c: d # second +metadata: + annotations: + internal.config.kubernetes.io/index: 1 + internal.config.kubernetes.io/path: "a/b/a_test.yaml" + internal.config.kubernetes.io/seqindent: "compact" +`, + }, + + // + // Test Case + // + { + name: "encode_valid_json", + items: []string{ + `{ + "a": "a long string that would certainly see a newline introduced by the YAML marshaller abcd123", + metadata: { + annotations: { + internal.config.kubernetes.io/path: test.json + } + } +}`, + }, + + expectedOutput: `{ + "a": "a long string that would certainly see a newline introduced by the YAML marshaller abcd123", + "metadata": { + "annotations": { + "internal.config.kubernetes.io/path": "test.json" + } + } +}`, + }, + + // + // Test Case + // + { + name: "encode_valid_json_remove_seqindent_annotation", + items: []string{ + `{ + "a": "a long string that would certainly see a newline introduced by the YAML marshaller abcd123", + metadata: { + annotations: { + "internal.config.kubernetes.io/seqindent": "compact", + "internal.config.kubernetes.io/index": "0", + "internal.config.kubernetes.io/path": "test.json" + } + } +}`, + }, + + expectedOutput: `{ + "a": "a long string that would certainly see a newline introduced by the YAML marshaller abcd123", + "metadata": { + "annotations": { + "internal.config.kubernetes.io/path": "test.json" + } + } +}`, + }, + + // + // Test Case + // + { + name: "encode_unformatted_valid_json", + items: []string{ + `{ "a": "b", metadata: { annotations: { internal.config.kubernetes.io/path: test.json } } }`, + }, + + expectedOutput: `{ + "a": "b", + "metadata": { + "annotations": { + "internal.config.kubernetes.io/path": "test.json" + } + } +}`, + }, + + // + // Test Case + // + { + name: "encode_wrapped_json_as_yaml", + instance: kio.ByteWriter{ + Sort: true, + WrappingKind: kio.ResourceListKind, + WrappingAPIVersion: kio.ResourceListAPIVersion, + }, + items: []string{ + `{ + "a": "b", + "metadata": { + "annotations": { + "internal.config.kubernetes.io/path": "test.json" + } + } +}`, + }, + + expectedOutput: `apiVersion: config.kubernetes.io/v1 +kind: ResourceList +items: +- {"a": "b", "metadata": {"annotations": {"internal.config.kubernetes.io/path": "test.json"}}} +`, + }, + + // + // Test Case + // + { + name: "encode_multi_doc_json_as_yaml", + items: []string{ + `{ + "a": "b", + "metadata": { + "annotations": { + "internal.config.kubernetes.io/path": "test-1.json" + } + } +}`, + `{ + "c": "d", + "metadata": { + "annotations": { + "internal.config.kubernetes.io/path": "test-2.json" + } + } +}`, + }, + + expectedOutput: ` +{"a": "b", "metadata": {"annotations": {"internal.config.kubernetes.io/path": "test-1.json"}}} +--- +{"c": "d", "metadata": {"annotations": {"internal.config.kubernetes.io/path": "test-2.json"}}} +`, + }, + } + + for i := range testCases { + tc := testCases[i] + t.Run(tc.name, func(t *testing.T) { + actual := &bytes.Buffer{} + w := tc.instance + w.Writer = actual + + if tc.functionConfig != "" { + w.FunctionConfig = yaml.MustParse(tc.functionConfig) + } + + if tc.results != "" { + w.Results = yaml.MustParse(tc.results) + } + + var items []*yaml.RNode + for i := range tc.items { + items = append(items, yaml.MustParse(tc.items[i])) + } + err := w.Write(items) + + if tc.err != "" { + if !assert.EqualError(t, err, tc.err) { + t.FailNow() + } + return + } + + if !assert.NoError(t, err) { + t.FailNow() + } + if !assert.Equal(t, + strings.TrimSpace(tc.expectedOutput), strings.TrimSpace(actual.String())) { + t.FailNow() + } + }) + } +} diff --git a/go/internal/forked/kyaml/kio/doc.go b/go/internal/forked/kyaml/kio/doc.go new file mode 100644 index 000000000..9c11a1463 --- /dev/null +++ b/go/internal/forked/kyaml/kio/doc.go @@ -0,0 +1,35 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +// Package kio contains libraries for reading and writing collections of Resources. +// +// Reading Resources +// +// Resources are Read using a kio.Reader function. Examples: +// [kio.LocalPackageReader{}, kio.ByteReader{}] +// +// Resources read using a LocalPackageReader will have annotations applied so they can be +// written back to the files they were read from. +// +// Modifying Resources +// +// Resources are modified using a kio.Filter. The kio.Filter accepts a collection of +// Resources as input, and returns a new collection as output. +// It is recommended to use the yaml package for manipulating individual Resources in +// the collection. +// +// Writing Resources +// +// Resources are Read using a kio.Reader function. Examples: +// [kio.LocalPackageWriter{}, kio.ByteWriter{}] +// +// ReadWriters +// +// It is preferred to use a ReadWriter when reading and writing from / to the same source. +// +// Building Pipelines +// +// The preferred way to transforms a collection of Resources is to use kio.Pipeline to Read, +// Modify and Write the collection of Resources. Pipeline will automatically sequentially +// invoke the Read, Modify, Write steps, returning and error immediately on any failure. +package kio diff --git a/go/internal/forked/kyaml/kio/example_test.go b/go/internal/forked/kyaml/kio/example_test.go new file mode 100644 index 000000000..88a6eb5b0 --- /dev/null +++ b/go/internal/forked/kyaml/kio/example_test.go @@ -0,0 +1,110 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package kio_test + +import ( + "bytes" + "log" + "os" + + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/kio" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" +) + +func Example() { + input := bytes.NewReader([]byte(`apiVersion: apps/v1 +kind: Deployment +metadata: + name: nginx + labels: + app: nginx +spec: + replicas: 3 + selector: + matchLabels: + app: nginx + template: + metadata: + labels: + app: nginx + spec: + containers: + - name: nginx + image: nginx:1.7.9 + ports: + - containerPort: 80 +--- +apiVersion: v1 +kind: Service +metadata: + name: nginx +spec: + selector: + app: nginx + ports: + - protocol: TCP + port: 80 + targetPort: 80 +`)) + + // setAnnotationFn + setAnnotationFn := kio.FilterFunc(func(operand []*yaml.RNode) ([]*yaml.RNode, error) { + for i := range operand { + resource := operand[i] + _, err := resource.Pipe(yaml.SetAnnotation("foo", "bar")) + if err != nil { + return nil, err + } + } + return operand, nil + }) + + err := kio.Pipeline{ + Inputs: []kio.Reader{&kio.ByteReader{Reader: input}}, + Filters: []kio.Filter{setAnnotationFn}, + Outputs: []kio.Writer{kio.ByteWriter{Writer: os.Stdout}}, + }.Execute() + if err != nil { + log.Fatal(err) + } + + // Output: + // apiVersion: apps/v1 + // kind: Deployment + // metadata: + // name: nginx + // labels: + // app: nginx + // annotations: + // foo: 'bar' + // spec: + // replicas: 3 + // selector: + // matchLabels: + // app: nginx + // template: + // metadata: + // labels: + // app: nginx + // spec: + // containers: + // - name: nginx + // image: nginx:1.7.9 + // ports: + // - containerPort: 80 + // --- + // apiVersion: v1 + // kind: Service + // metadata: + // name: nginx + // annotations: + // foo: 'bar' + // spec: + // selector: + // app: nginx + // ports: + // - protocol: TCP + // port: 80 + // targetPort: 80 +} diff --git a/go/internal/forked/kyaml/kio/filters/filters.go b/go/internal/forked/kyaml/kio/filters/filters.go new file mode 100644 index 000000000..9230105f3 --- /dev/null +++ b/go/internal/forked/kyaml/kio/filters/filters.go @@ -0,0 +1,210 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package filters + +import ( + "fmt" + "sort" + "strings" + + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/kio" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/kio/kioutil" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" +) + +// Filters are the list of known filters for unmarshalling a filter into a concrete +// implementation. +var Filters = map[string]func() kio.Filter{ + "FileSetter": func() kio.Filter { return &FileSetter{} }, + "FormatFilter": func() kio.Filter { return &FormatFilter{} }, + "GrepFilter": func() kio.Filter { return GrepFilter{} }, + "MatchModifier": func() kio.Filter { return &MatchModifyFilter{} }, + "Modifier": func() kio.Filter { return &Modifier{} }, +} + +// filter wraps a kio.filter so that it can be unmarshalled from yaml. +type KFilter struct { + kio.Filter +} + +func (t KFilter) MarshalYAML() (interface{}, error) { + return t.Filter, nil +} + +func (t *KFilter) UnmarshalYAML(unmarshal func(interface{}) error) error { + i := map[string]interface{}{} + if err := unmarshal(i); err != nil { + return err + } + meta := &yaml.ResourceMeta{} + if err := unmarshal(meta); err != nil { + return err + } + filter, found := Filters[meta.Kind] + if !found { + var knownFilters []string + for k := range Filters { + knownFilters = append(knownFilters, k) + } + sort.Strings(knownFilters) + return fmt.Errorf("unsupported filter Kind %v: may be one of: [%s]", + meta, strings.Join(knownFilters, ",")) + } + t.Filter = filter() + + return unmarshal(t.Filter) +} + +// Modifier modifies the input Resources by invoking the provided pipeline. +// Modifier will return any Resources for which the pipeline does not return an error. +type Modifier struct { + Kind string `yaml:"kind,omitempty"` + + Filters yaml.YFilters `yaml:"pipeline,omitempty"` +} + +var _ kio.Filter = &Modifier{} + +func (f Modifier) Filter(input []*yaml.RNode) ([]*yaml.RNode, error) { + for i := range input { + if _, err := input[i].Pipe(f.Filters.Filters()...); err != nil { + return nil, err + } + } + return input, nil +} + +type MatchModifyFilter struct { + Kind string `yaml:"kind,omitempty"` + + MatchFilters []yaml.YFilters `yaml:"match,omitempty"` + + ModifyFilters yaml.YFilters `yaml:"modify,omitempty"` +} + +var _ kio.Filter = &MatchModifyFilter{} + +func (f MatchModifyFilter) Filter(input []*yaml.RNode) ([]*yaml.RNode, error) { + var matches = input + var err error + for _, filter := range f.MatchFilters { + matches, err = MatchFilter{Filters: filter}.Filter(matches) + if err != nil { + return nil, err + } + } + _, err = Modifier{Filters: f.ModifyFilters}.Filter(matches) + if err != nil { + return nil, err + } + return input, nil +} + +type MatchFilter struct { + Kind string `yaml:"kind,omitempty"` + + Filters yaml.YFilters `yaml:"pipeline,omitempty"` +} + +var _ kio.Filter = &MatchFilter{} + +func (f MatchFilter) Filter(input []*yaml.RNode) ([]*yaml.RNode, error) { + var output []*yaml.RNode + for i := range input { + if v, err := input[i].Pipe(f.Filters.Filters()...); err != nil { + return nil, err + } else if v == nil { + continue + } + output = append(output, input[i]) + } + return output, nil +} + +type FilenameFmtVerb string + +const ( + // KindFmt substitutes kind + KindFmt FilenameFmtVerb = "%k" + + // NameFmt substitutes metadata.name + NameFmt FilenameFmtVerb = "%n" + + // NamespaceFmt substitutes metdata.namespace + NamespaceFmt FilenameFmtVerb = "%s" +) + +// FileSetter sets the file name and mode annotations on Resources. +type FileSetter struct { + Kind string `yaml:"kind,omitempty"` + + // FilenamePattern is the pattern to use for generating filenames. FilenameFmtVerb + // FielnameFmtVerbs may be specified to substitute Resource metadata into the filename. + FilenamePattern string `yaml:"filenamePattern,omitempty"` + + // Mode is the filemode to write. + Mode string `yaml:"mode,omitempty"` + + // Override will override the existing filename if it is set on the pattern. + // Otherwise the existing filename is kept. + Override bool `yaml:"override,omitempty"` +} + +var _ kio.Filter = &FileSetter{} + +const DefaultFilenamePattern = "%n_%k.yaml" + +func (f *FileSetter) Filter(input []*yaml.RNode) ([]*yaml.RNode, error) { + if f.Mode == "" { + f.Mode = fmt.Sprintf("%d", 0600) + } + if f.FilenamePattern == "" { + f.FilenamePattern = DefaultFilenamePattern + } + + resources := map[string][]*yaml.RNode{} + for i := range input { + if err := kioutil.CopyLegacyAnnotations(input[i]); err != nil { + return nil, err + } + + m, err := input[i].GetMeta() + if err != nil { + return nil, err + } + file := f.FilenamePattern + file = strings.ReplaceAll(file, string(KindFmt), strings.ToLower(m.Kind)) + file = strings.ReplaceAll(file, string(NameFmt), strings.ToLower(m.Name)) + file = strings.ReplaceAll(file, string(NamespaceFmt), strings.ToLower(m.Namespace)) + + if _, found := m.Annotations[kioutil.PathAnnotation]; !found || f.Override { + if _, err := input[i].Pipe(yaml.SetAnnotation(kioutil.PathAnnotation, file)); err != nil { + return nil, err + } + if _, err := input[i].Pipe(yaml.SetAnnotation(kioutil.LegacyPathAnnotation, file)); err != nil { + return nil, err + } + } + resources[file] = append(resources[file], input[i]) + } + + var output []*yaml.RNode + for i := range resources { + if err := kioutil.SortNodes(resources[i]); err != nil { + return nil, err + } + for j := range resources[i] { + if _, err := resources[i][j].Pipe( + yaml.SetAnnotation(kioutil.IndexAnnotation, fmt.Sprintf("%d", j))); err != nil { + return nil, err + } + if _, err := resources[i][j].Pipe( + yaml.SetAnnotation(kioutil.LegacyIndexAnnotation, fmt.Sprintf("%d", j))); err != nil { + return nil, err + } + output = append(output, resources[i][j]) + } + } + return output, nil +} diff --git a/go/internal/forked/kyaml/kio/filters/filters_test.go b/go/internal/forked/kyaml/kio/filters/filters_test.go new file mode 100644 index 000000000..5672d8c6b --- /dev/null +++ b/go/internal/forked/kyaml/kio/filters/filters_test.go @@ -0,0 +1,182 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package filters_test + +import ( + "bytes" + "testing" + + "github.com/stretchr/testify/assert" + . "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/kio" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/kio/filters" +) + +var r = ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: foo1 + namespace: bar +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + name: foo2 +--- +apiVersion: v1 +kind: Service +metadata: + name: foo2 + namespace: bar +--- +apiVersion: v1 +kind: Service +metadata: + name: foo1 +` + +func TestFileSetter_Filter(t *testing.T) { + in := bytes.NewBufferString(r) + out := &bytes.Buffer{} + err := Pipeline{ + Inputs: []Reader{&ByteReader{Reader: in}}, + Filters: []Filter{&filters.FileSetter{}}, + Outputs: []Writer{ByteWriter{Sort: true, Writer: out}}, + }.Execute() + if !assert.NoError(t, err) { + return + } + assert.Equal(t, `apiVersion: apps/v1 +kind: Deployment +metadata: + name: foo1 + namespace: bar + annotations: + internal.config.kubernetes.io/path: 'foo1_deployment.yaml' + config.kubernetes.io/path: 'foo1_deployment.yaml' +--- +apiVersion: v1 +kind: Service +metadata: + name: foo1 + annotations: + internal.config.kubernetes.io/path: 'foo1_service.yaml' + config.kubernetes.io/path: 'foo1_service.yaml' +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + name: foo2 + annotations: + internal.config.kubernetes.io/path: 'foo2_deployment.yaml' + config.kubernetes.io/path: 'foo2_deployment.yaml' +--- +apiVersion: v1 +kind: Service +metadata: + name: foo2 + namespace: bar + annotations: + internal.config.kubernetes.io/path: 'foo2_service.yaml' + config.kubernetes.io/path: 'foo2_service.yaml' +`, out.String()) +} + +func TestFileSetter_Filter_pattern(t *testing.T) { + in := bytes.NewBufferString(r) + out := &bytes.Buffer{} + err := Pipeline{ + Inputs: []Reader{&ByteReader{Reader: in}}, + Filters: []Filter{&filters.FileSetter{ + FilenamePattern: "%n_%s_%k.yaml", + }}, + Outputs: []Writer{ByteWriter{Sort: true, Writer: out}}, + }.Execute() + if !assert.NoError(t, err) { + return + } + assert.Equal(t, `apiVersion: v1 +kind: Service +metadata: + name: foo1 + annotations: + internal.config.kubernetes.io/path: 'foo1__service.yaml' + config.kubernetes.io/path: 'foo1__service.yaml' +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + name: foo1 + namespace: bar + annotations: + internal.config.kubernetes.io/path: 'foo1_bar_deployment.yaml' + config.kubernetes.io/path: 'foo1_bar_deployment.yaml' +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + name: foo2 + annotations: + internal.config.kubernetes.io/path: 'foo2__deployment.yaml' + config.kubernetes.io/path: 'foo2__deployment.yaml' +--- +apiVersion: v1 +kind: Service +metadata: + name: foo2 + namespace: bar + annotations: + internal.config.kubernetes.io/path: 'foo2_bar_service.yaml' + config.kubernetes.io/path: 'foo2_bar_service.yaml' +`, out.String()) +} + +func TestFileSetter_Filter_empty(t *testing.T) { + in := bytes.NewBufferString(r) + out := &bytes.Buffer{} + err := Pipeline{ + Inputs: []Reader{&ByteReader{Reader: in}}, + Filters: []Filter{&filters.FileSetter{ + FilenamePattern: "resource.yaml", + }}, + Outputs: []Writer{ByteWriter{Writer: out}}, + }.Execute() + if !assert.NoError(t, err) { + return + } + assert.Equal(t, `apiVersion: apps/v1 +kind: Deployment +metadata: + name: foo1 + namespace: bar + annotations: + internal.config.kubernetes.io/path: 'resource.yaml' + config.kubernetes.io/path: 'resource.yaml' +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + name: foo2 + annotations: + internal.config.kubernetes.io/path: 'resource.yaml' + config.kubernetes.io/path: 'resource.yaml' +--- +apiVersion: v1 +kind: Service +metadata: + name: foo2 + namespace: bar + annotations: + internal.config.kubernetes.io/path: 'resource.yaml' + config.kubernetes.io/path: 'resource.yaml' +--- +apiVersion: v1 +kind: Service +metadata: + name: foo1 + annotations: + internal.config.kubernetes.io/path: 'resource.yaml' + config.kubernetes.io/path: 'resource.yaml' +`, out.String()) +} diff --git a/go/internal/forked/kyaml/kio/filters/fmtr.go b/go/internal/forked/kyaml/kio/filters/fmtr.go new file mode 100644 index 000000000..b04a556a8 --- /dev/null +++ b/go/internal/forked/kyaml/kio/filters/fmtr.go @@ -0,0 +1,314 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +// Package yamlfmt contains libraries for formatting yaml files containing +// Kubernetes Resource configuration. +// +// Yaml files are formatted by: +// - Sorting fields and map values +// - Sorting unordered lists for whitelisted types +// - Applying a canonical yaml Style +// +// Fields are ordered using a relative ordering applied to commonly +// encountered Resource fields. All Resources, including non-builtin +// Resources such as CRDs, share the same field precedence. +// +// Fields that do not appear in the explicit ordering are ordered +// lexicographically. +// +// A subset of well known known unordered lists are sorted by element field +// values. +package filters + +import ( + "bytes" + "fmt" + "io" + "sort" + + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/kio" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/openapi" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" +) + +type FormattingStrategy = string + +const ( + // NoFmtAnnotation determines if the resource should be formatted. + FmtAnnotation string = "config.kubernetes.io/formatting" + + // FmtStrategyStandard means the resource will be formatted according + // to the default rules. + FmtStrategyStandard FormattingStrategy = "standard" + + // FmtStrategyNone means the resource will not be formatted. + FmtStrategyNone FormattingStrategy = "none" +) + +// FormatInput returns the formatted input. +func FormatInput(input io.Reader) (*bytes.Buffer, error) { + buff := &bytes.Buffer{} + err := kio.Pipeline{ + Inputs: []kio.Reader{&kio.ByteReader{Reader: input}}, + Filters: []kio.Filter{FormatFilter{}}, + Outputs: []kio.Writer{kio.ByteWriter{Writer: buff}}, + }.Execute() + + return buff, err +} + +// FormatFileOrDirectory reads the file or directory and formats each file's +// contents by writing it back to the file. +func FormatFileOrDirectory(path string) error { + return kio.Pipeline{ + Inputs: []kio.Reader{kio.LocalPackageReader{ + PackagePath: path, + }}, + Filters: []kio.Filter{FormatFilter{}}, + Outputs: []kio.Writer{kio.LocalPackageWriter{PackagePath: path}}, + }.Execute() +} + +type FormatFilter struct { + Process func(n *yaml.Node) error + UseSchema bool +} + +var _ kio.Filter = FormatFilter{} + +func (f FormatFilter) Filter(slice []*yaml.RNode) ([]*yaml.RNode, error) { + for i := range slice { + fmtStrategy, err := getFormattingStrategy(slice[i]) + if err != nil { + return nil, err + } + + if fmtStrategy == FmtStrategyNone { + continue + } + + kindNode, err := slice[i].Pipe(yaml.Get("kind")) + if err != nil { + return nil, err + } + if kindNode == nil { + continue + } + apiVersionNode, err := slice[i].Pipe(yaml.Get("apiVersion")) + if err != nil { + return nil, err + } + if apiVersionNode == nil { + continue + } + kind, apiVersion := kindNode.YNode().Value, apiVersionNode.YNode().Value + var s *openapi.ResourceSchema + if f.UseSchema { + s = openapi.SchemaForResourceType(yaml.TypeMeta{APIVersion: apiVersion, Kind: kind}) + } else { + s = nil + } + err = (&formatter{apiVersion: apiVersion, kind: kind, process: f.Process}). + fmtNode(slice[i].YNode(), "", s) + if err != nil { + return nil, err + } + } + return slice, nil +} + +// getFormattingStrategy looks for the formatting annotation to determine +// which strategy should be used for formatting. The default is standard +// if no annotation is found. +func getFormattingStrategy(node *yaml.RNode) (FormattingStrategy, error) { + value, err := node.Pipe(yaml.GetAnnotation(FmtAnnotation)) + if err != nil || value == nil { + return FmtStrategyStandard, err + } + + fmtStrategy := value.YNode().Value + + switch fmtStrategy { + case FmtStrategyStandard: + return FmtStrategyStandard, nil + case FmtStrategyNone: + return FmtStrategyNone, nil + default: + return "", fmt.Errorf( + "formatting annotation has illegal value %s", fmtStrategy) + } +} + +type formatter struct { + apiVersion string + kind string + process func(n *yaml.Node) error +} + +// fmtNode recursively formats the Document Contents. +// See: https://godoc.org/gopkg.in/yaml.v3#Node +func (f *formatter) fmtNode(n *yaml.Node, path string, schema *openapi.ResourceSchema) error { + if n.Kind == yaml.ScalarNode && schema != nil && schema.Schema != nil { + // ensure values that are interpreted as non-string values (e.g. "true") + // are properly quoted + yaml.FormatNonStringStyle(n, *schema.Schema) + } + + // sort the order of mapping fields + if n.Kind == yaml.MappingNode { + sort.Sort(sortedMapContents(*n)) + } + + // sort the order of sequence elements if it is whitelisted + if n.Kind == yaml.SequenceNode { + if yaml.WhitelistedListSortKinds.Has(f.kind) && + yaml.WhitelistedListSortApis.Has(f.apiVersion) { + if sortField, found := yaml.WhitelistedListSortFields[path]; found { + sort.Sort(sortedSeqContents{Node: *n, sortField: sortField}) + } + } + } + + // format the Content + for i := range n.Content { + // MappingNode are structured as having their fields as Content, + // with the field-key and field-value alternating. e.g. Even elements + // are the keys and odd elements are the values + isFieldKey := n.Kind == yaml.MappingNode && i%2 == 0 + isFieldValue := n.Kind == yaml.MappingNode && i%2 == 1 + isElement := n.Kind == yaml.SequenceNode + + // run the process callback on the node if it has been set + // don't process keys: their format should be fixed + if f.process != nil && !isFieldKey { + if err := f.process(n.Content[i]); err != nil { + return err + } + } + + // get the schema for this Node + p := path + var s *openapi.ResourceSchema + switch { + case isFieldValue: + // if the node is a field, lookup the schema using the field name + p = fmt.Sprintf("%s.%s", path, n.Content[i-1].Value) + if schema != nil { + s = schema.Field(n.Content[i-1].Value) + } + case isElement: + // if the node is a list element, lookup the schema for the array items + if schema != nil { + s = schema.Elements() + } + } + // format the node using the schema + err := f.fmtNode(n.Content[i], p, s) + if err != nil { + return err + } + } + return nil +} + +// sortedMapContents sorts the Contents field of a MappingNode by the field names using a statically +// defined field precedence, and falling back on lexicographical sorting +type sortedMapContents yaml.Node + +func (s sortedMapContents) Len() int { + return len(s.Content) / 2 +} +func (s sortedMapContents) Swap(i, j int) { + // yaml MappingNode Contents are a list of field names followed by + // field values, rather than a list of field pairs. + // increment. + // + // e.g. ["field1Name", "field1Value", "field2Name", "field2Value"] + iFieldNameIndex := i * 2 + jFieldNameIndex := j * 2 + iFieldValueIndex := iFieldNameIndex + 1 + jFieldValueIndex := jFieldNameIndex + 1 + + // swap field names + s.Content[iFieldNameIndex], s.Content[jFieldNameIndex] = + s.Content[jFieldNameIndex], s.Content[iFieldNameIndex] + + // swap field values + s.Content[iFieldValueIndex], s.Content[jFieldValueIndex] = s. + Content[jFieldValueIndex], s.Content[iFieldValueIndex] +} + +func (s sortedMapContents) Less(i, j int) bool { + iFieldNameIndex := i * 2 + jFieldNameIndex := j * 2 + iFieldName := s.Content[iFieldNameIndex].Value + jFieldName := s.Content[jFieldNameIndex].Value + + // order by their precedence values looked up from the index + iOrder, foundI := yaml.FieldOrder[iFieldName] + jOrder, foundJ := yaml.FieldOrder[jFieldName] + if foundI && foundJ { + return iOrder < jOrder + } + + // known fields come before unknown fields + if foundI { + return true + } + if foundJ { + return false + } + + // neither field is known, sort them lexicographically + return iFieldName < jFieldName +} + +// sortedSeqContents sorts the Contents field of a SequenceNode by the value of +// the elements sortField. +// e.g. it will sort spec.template.spec.containers by the value of the container `name` field +type sortedSeqContents struct { + yaml.Node + sortField string +} + +func (s sortedSeqContents) Len() int { + return len(s.Content) +} +func (s sortedSeqContents) Swap(i, j int) { + s.Content[i], s.Content[j] = s.Content[j], s.Content[i] +} +func (s sortedSeqContents) Less(i, j int) bool { + // primitive lists -- sort by the element's primitive values + if s.sortField == "" { + iValue := s.Content[i].Value + jValue := s.Content[j].Value + return iValue < jValue + } + + // map lists -- sort by the element's sortField values + var iValue, jValue string + for a := range s.Content[i].Content { + if a%2 != 0 { + continue // not a fieldNameIndex + } + // locate the index of the sortField field + if s.Content[i].Content[a].Value == s.sortField { + // a is the yaml node for the field key, a+1 is the node for the field value + iValue = s.Content[i].Content[a+1].Value + } + } + for a := range s.Content[j].Content { + if a%2 != 0 { + continue // not a fieldNameIndex + } + + // locate the index of the sortField field + if s.Content[j].Content[a].Value == s.sortField { + // a is the yaml node for the field key, a+1 is the node for the field value + jValue = s.Content[j].Content[a+1].Value + } + } + + // compare the field values + return iValue < jValue +} diff --git a/go/internal/forked/kyaml/kio/filters/fmtr_test.go b/go/internal/forked/kyaml/kio/filters/fmtr_test.go new file mode 100644 index 000000000..c7bfb8de2 --- /dev/null +++ b/go/internal/forked/kyaml/kio/filters/fmtr_test.go @@ -0,0 +1,1099 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package filters_test + +import ( + "bytes" + "io" + "io/ioutil" + "os" + "path/filepath" + "strings" + "testing" + + "github.com/stretchr/testify/assert" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/kio" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/kio/filters" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/kio/filters/testyaml" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" +) + +func TestFormatInput_FixYaml1_1Compatibility(t *testing.T) { + y := ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: foo + labels: + foo: on + foo2: hello1 + annotations: + bar: 1 + bar2: hello2 +spec: + template: + spec: + containers: + - name: nginx + image: nginx:1.0.0 + args: + - on + - 1 + - hello + ports: + - name: http + targetPort: 80 + containerPort: 80 +` + + // keep the style on values that parse as non-string types + expected := `apiVersion: apps/v1 +kind: Deployment +metadata: + name: foo + labels: + foo: "on" + foo2: hello1 + annotations: + bar: "1" + bar2: hello2 +spec: + template: + spec: + containers: + - name: nginx + image: nginx:1.0.0 + args: + - "on" + - "1" + - hello + ports: + - name: http + targetPort: 80 + containerPort: 80 +` + + buff := &bytes.Buffer{} + err := kio.Pipeline{ + Inputs: []kio.Reader{&kio.ByteReader{Reader: strings.NewReader(y)}}, + Filters: []kio.Filter{filters.FormatFilter{ + UseSchema: true, + }}, + Outputs: []kio.Writer{kio.ByteWriter{Writer: buff}}, + }.Execute() + assert.NoError(t, err) + assert.Equal(t, expected, buff.String()) +} + +func TestFormat_UnsortedInput_No_Schema(t *testing.T) { + y := ` +apiVersion: apps/v1 +spec: + template: + spec: + containers: + - name: nginx + image: nginx:1.0.0 + args: + - on + - 1 + - hello + ports: + - name: http + targetPort: 80 + containerPort: 80 +kind: Deployment +metadata: + name: foo + labels: + foo: on + foo2: hello1 + annotations: + bar: 1 + bar2: hello2 +` + + // keep the style on values that parse as non-string types + expected := `apiVersion: apps/v1 +kind: Deployment +metadata: + name: foo + labels: + foo: on + foo2: hello1 + annotations: + bar: 1 + bar2: hello2 +spec: + template: + spec: + containers: + - name: nginx + image: nginx:1.0.0 + args: + - on + - 1 + - hello + ports: + - name: http + targetPort: 80 + containerPort: 80 +` + + buff := &bytes.Buffer{} + err := kio.Pipeline{ + Inputs: []kio.Reader{&kio.ByteReader{Reader: strings.NewReader(y)}}, + Filters: []kio.Filter{filters.FormatFilter{}}, + Outputs: []kio.Writer{kio.ByteWriter{Writer: buff}}, + }.Execute() + assert.NoError(t, err) + assert.Equal(t, expected, buff.String()) +} + +func TestFormatInput_PostprocessStyle(t *testing.T) { + y := ` +apiVersion: v1 +kind: Foo +metadata: + name: foo +spec: + notBoolean: "true" + notBoolean2: "on" + isBoolean: on + isBoolean2: true + notInt: "12345" + isInt: 12345 + isString1: hello world + isString2: "hello world" +` + + // keep the style on values that parse as non-string types + expected := `apiVersion: v1 +kind: Foo +metadata: + name: foo +spec: + isBoolean: on + isBoolean2: true + isInt: 12345 + isString1: hello world + isString2: hello world + notBoolean: "true" + notBoolean2: "on" + notInt: "12345" +` + + buff := &bytes.Buffer{} + err := kio.Pipeline{ + Inputs: []kio.Reader{&kio.ByteReader{Reader: strings.NewReader(y)}}, + Filters: []kio.Filter{filters.FormatFilter{ + UseSchema: true, + Process: func(n *yaml.Node) error { + if yaml.IsYaml1_1NonString(n) { + // don't change these styles, they are important for backwards compatibility + // e.g. "on" must remain quoted, on must remain unquoted + return nil + } + // style does not have semantic meaning + n.Style = 0 + return nil + }}}, + Outputs: []kio.Writer{kio.ByteWriter{Writer: buff}}, + }.Execute() + assert.NoError(t, err) + assert.Equal(t, expected, buff.String()) + + y = ` +apiVersion: v1 +kind: Foo +metadata: + name: 'foo' +spec: + notBoolean: "true" + notBoolean2: "on" + notBoolean3: y is yes + isBoolean: on + isBoolean2: true + isBoolean3: y + notInt2: 1234 five + notInt3: one 2345 + notInt: "12345" + isInt1: 12345 + isInt2: -12345 + isFloat1: 1.1234 + isFloat2: 1.1234 + isString1: hello world + isString2: "hello world" + isString3: 'hello world' +` + + // keep the style on values that parse as non-string types + expected = `apiVersion: 'v1' +kind: 'Foo' +metadata: + name: 'foo' +spec: + isBoolean: on + isBoolean2: true + isBoolean3: y + isFloat1: 1.1234 + isFloat2: 1.1234 + isInt1: 12345 + isInt2: -12345 + isString1: 'hello world' + isString2: 'hello world' + isString3: 'hello world' + notBoolean: "true" + notBoolean2: "on" + notBoolean3: 'y is yes' + notInt: "12345" + notInt2: '1234 five' + notInt3: 'one 2345' +` + + buff = &bytes.Buffer{} + err = kio.Pipeline{ + Inputs: []kio.Reader{&kio.ByteReader{Reader: strings.NewReader(y)}}, + Filters: []kio.Filter{filters.FormatFilter{ + UseSchema: true, + Process: func(n *yaml.Node) error { + if yaml.IsYaml1_1NonString(n) { + // don't change these styles, they are important for backwards compatibility + // e.g. "on" must remain quoted, on must remain unquoted + return nil + } + // style does not have semantic meaning + n.Style = yaml.SingleQuotedStyle + return nil + }}}, + Outputs: []kio.Writer{kio.ByteWriter{Writer: buff}}, + }.Execute() + assert.NoError(t, err) + assert.Equal(t, expected, buff.String()) +} + +func TestFormatInput_Style(t *testing.T) { + y := ` +apiVersion: v1 +kind: Foo +metadata: + name: foo +spec: + notBoolean: "true" + notBoolean2: "on" + isBoolean: on + isBoolean2: true +` + + expected := `apiVersion: v1 +kind: Foo +metadata: + name: foo +spec: + isBoolean: on + isBoolean2: true + notBoolean: "true" + notBoolean2: "on" +` + + s, err := filters.FormatInput(strings.NewReader(y)) + assert.NoError(t, err) + assert.Equal(t, expected, s.String()) +} + +// TestFormatInput_configMap verifies a ConfigMap yaml is formatted correctly +func TestFormatInput_configMap(t *testing.T) { + y := ` + + +# this formatting is intentionally weird + +apiVersion: v1 +# this is data +data: + # this is color + color: purple + # that was color + + # this is textmode + textmode: "true" + # this is how + how: fairlyNice + + + +kind: ConfigMap + + +metadata: + selfLink: /api/v1/namespaces/default/configmaps/config-multi-env-files + namespace: default + creationTimestamp: 2017-12-27T18:38:34Z + name: config-multi-env-files + resourceVersion: "810136" + uid: 252c4572-eb35-11e7-887b-42010a8002b8 # keep no trailing linefeed` + + expected := `# this formatting is intentionally weird + +apiVersion: v1 +kind: ConfigMap +metadata: + name: config-multi-env-files + namespace: default + creationTimestamp: 2017-12-27T18:38:34Z + resourceVersion: "810136" + selfLink: /api/v1/namespaces/default/configmaps/config-multi-env-files + uid: 252c4572-eb35-11e7-887b-42010a8002b8 # keep no trailing linefeed +# this is data +data: + # this is color + color: purple + # that was color + + # this is how + how: fairlyNice + # this is textmode + textmode: "true" +` + + s, err := filters.FormatInput(strings.NewReader(y)) + assert.NoError(t, err) + assert.Equal(t, expected, s.String()) +} + +// TestFormatInput_deployment verifies a Deployment yaml is formatted correctly +func TestFormatInput_deployment(t *testing.T) { + y := ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: nginx-deployment + labels: + app: nginx +spec: + selector: + matchLabels: + app: nginx + replicas: 3 + template: + metadata: + labels: + app: nginx + spec: + containers: + # this is a container + - ports: + # this is a port + - containerPort: 80 + name: b-nginx + image: nginx:1.7.9 + # this is another container + - name: a-nginx + image: nginx:1.7.9 + ports: + - containerPort: 80 +` + expected := `apiVersion: apps/v1 +kind: Deployment +metadata: + name: nginx-deployment + labels: + app: nginx +spec: + replicas: 3 + selector: + matchLabels: + app: nginx + template: + metadata: + labels: + app: nginx + spec: + containers: + # this is another container + - name: a-nginx + image: nginx:1.7.9 + ports: + - containerPort: 80 + # this is a container + - name: b-nginx + image: nginx:1.7.9 + ports: + # this is a port + - containerPort: 80 +` + s, err := filters.FormatInput(strings.NewReader(y)) + assert.NoError(t, err) + assert.Equal(t, expected, s.String()) +} + +// TestFormatInput_service verifies a Service yaml is formatted correctly +func TestFormatInput_service(t *testing.T) { + y := ` +apiVersion: v1 +kind: Service +metadata: + name: my-service +spec: + selector: + app: MyApp + ports: + - protocol: TCP + port: 80 + targetPort: 9376 +` + expected := `apiVersion: v1 +kind: Service +metadata: + name: my-service +spec: + selector: + app: MyApp + ports: + - protocol: TCP + port: 80 + targetPort: 9376 +` + s, err := filters.FormatInput(strings.NewReader(y)) + assert.NoError(t, err) + assert.Equal(t, expected, s.String()) +} + +// TestFormatInput_service verifies a Service yaml is formatted correctly +func TestFormatInput_validatingWebhookConfiguration(t *testing.T) { + y := ` +apiVersion: admissionregistration.k8s.io/v1 +kind: ValidatingWebhookConfiguration +metadata: + name: +webhooks: +- name: + rules: + - apiGroups: + - "" + apiVersions: + - v1 + operations: + - UPDATE # this list is indented by 2 + - CREATE + - CONNECT + resources: + - pods # this list is not indented by 2 + scope: "Namespaced" + clientConfig: + service: + namespace: + name: + caBundle: + admissionReviewVersions: + - v1beta1 + timeoutSeconds: 1 +` + expected := `apiVersion: admissionregistration.k8s.io/v1 +kind: ValidatingWebhookConfiguration +metadata: + name: +webhooks: +- name: + admissionReviewVersions: + - v1beta1 + clientConfig: + service: + name: + namespace: + caBundle: + rules: + - resources: + - pods # this list is not indented by 2 + apiGroups: + - "" + apiVersions: + - v1 + operations: + - CONNECT + - CREATE + - UPDATE # this list is indented by 2 + scope: "Namespaced" + timeoutSeconds: 1 +` + s, err := filters.FormatInput(strings.NewReader(y)) + assert.NoError(t, err) + assert.Equal(t, expected, s.String()) +} + +// TestFormatInput_unKnownType verifies an unknown type yaml is formatted correctly +func TestFormatInput_unKnownType(t *testing.T) { + y := ` +spec: + template: + spec: + # these shouldn't be sorted because the type isn't whitelisted + containers: + - name: b + - name: a + replicas: 1 +status: + conditions: + - 3 + - 1 + - 2 +other: + b: a1 + a: b1 +apiVersion: example.com/v1beta1 +kind: MyType +` + + expected := `apiVersion: example.com/v1beta1 +kind: MyType +spec: + replicas: 1 + template: + spec: + # these shouldn't be sorted because the type isn't whitelisted + containers: + - name: b + - name: a +status: + conditions: + - 3 + - 1 + - 2 +other: + a: b1 + b: a1 +` + s, err := filters.FormatInput(strings.NewReader(y)) + assert.NoError(t, err) + assert.Equal(t, expected, s.String()) +} + +// TestFormatInput_deployment verifies a Deployment yaml is formatted correctly +func TestFormatInput_resources(t *testing.T) { + input := &bytes.Buffer{} + _, err := io.Copy(input, bytes.NewReader(testyaml.UnformattedYaml1)) + assert.NoError(t, err) + _, err = io.Copy(input, strings.NewReader("---\n")) + assert.NoError(t, err) + _, err = io.Copy(input, bytes.NewReader(testyaml.UnformattedYaml2)) + assert.NoError(t, err) + _, err = io.Copy(input, strings.NewReader("---\n")) + assert.NoError(t, err) + _, err = io.Copy(input, bytes.NewReader(testyaml.UnformattedYaml3)) + assert.NoError(t, err) + + expectedOutput := &bytes.Buffer{} + _, err = io.Copy(expectedOutput, bytes.NewReader(testyaml.FormattedYaml1)) + assert.NoError(t, err) + _, err = io.Copy(expectedOutput, strings.NewReader("---\n")) + assert.NoError(t, err) + _, err = io.Copy(expectedOutput, bytes.NewReader(testyaml.FormattedYaml2)) + assert.NoError(t, err) + _, err = io.Copy(expectedOutput, strings.NewReader("---\n")) + assert.NoError(t, err) + _, err = io.Copy(expectedOutput, bytes.NewReader(testyaml.FormattedYaml3)) + assert.NoError(t, err) + + s, err := filters.FormatInput(input) + assert.NoError(t, err) + assert.Equal(t, expectedOutput.String(), s.String()) +} + +// +func TestFormatInput_failMissingKind(t *testing.T) { + y := ` +spec: + template: + spec: + containers: + - b + - a + replicas: 1 +status: + conditions: + - 3 + - 1 + - 2 +other: + b: a1 + a: b1 +apiVersion: example.com/v1beta1 +` + + b, err := filters.FormatInput(strings.NewReader(y)) + assert.NoError(t, err) + assert.Equal(t, strings.TrimLeft(y, "\n"), b.String()) +} + +func TestFormatInput_failMissingApiVersion(t *testing.T) { + y := ` +spec: + template: + spec: + containers: + - a + - b + replicas: 1 +status: + conditions: + - 3 + - 1 + - 2 +other: + b: a1 + a: b1 +kind: MyKind +` + + b, err := filters.FormatInput(strings.NewReader(y)) + assert.NoError(t, err) + assert.Equal(t, strings.TrimLeft(y, "\n"), b.String()) +} + +func TestFormatInput_failUnmarshal(t *testing.T) { + y := ` +spec: + template: + spec: + containers: + - a + - b + replicas: 1 +status: + conditions: + - 3 + - 1 + - 2 +other: + b: a1 + a: b1 +kind: MyKind +apiVersion: example.com/v1beta1 +` + + _, err := filters.FormatInput(strings.NewReader(y)) + assert.EqualError(t, err, "yaml: line 15: found character that cannot start any token") +} + +// TestFormatFileOrDirectory_yamlExtFile verifies that FormatFileOrDirectory will format a file +// with a .yaml extension. +func TestFormatFileOrDirectory_yamlExtFile(t *testing.T) { + // write the unformatted file + f, err := ioutil.TempFile("", "yamlfmt*.yaml") + if !assert.NoError(t, err) { + return + } + defer os.Remove(f.Name()) + err = ioutil.WriteFile(f.Name(), testyaml.UnformattedYaml1, 0600) + if !assert.NoError(t, err) { + return + } + + // format the file + err = filters.FormatFileOrDirectory(f.Name()) + if !assert.NoError(t, err) { + return + } + + // check the result is formatted + b, err := ioutil.ReadFile(f.Name()) + if !assert.NoError(t, err) { + return + } + assert.Equal(t, string(testyaml.FormattedYaml1), string(b)) +} + +func TestFormatFileOrDirectory_multipleYamlEntries(t *testing.T) { + // write the unformatted file + f, err := ioutil.TempFile("", "yamlfmt*.yaml") + assert.NoError(t, err) + defer os.Remove(f.Name()) + err = ioutil.WriteFile(f.Name(), + []byte(string(testyaml.UnformattedYaml1)+"---\n"+string(testyaml.UnformattedYaml2)), 0600) + assert.NoError(t, err) + + // format the file + err = filters.FormatFileOrDirectory(f.Name()) + assert.NoError(t, err) + + // check the result is formatted + b, err := ioutil.ReadFile(f.Name()) + assert.NoError(t, err) + assert.Equal(t, string(testyaml.FormattedYaml1)+"---\n"+string(testyaml.FormattedYaml2), string(b)) +} + +// TestFormatFileOrDirectory_ymlExtFile verifies that FormatFileOrDirectory will format a file +// with a .yml extension. +func TestFormatFileOrDirectory_ymlExtFile(t *testing.T) { + // write the unformatted file + f, err := ioutil.TempFile("", "yamlfmt*.yml") + assert.NoError(t, err) + defer os.Remove(f.Name()) + err = ioutil.WriteFile(f.Name(), testyaml.UnformattedYaml1, 0600) + assert.NoError(t, err) + + // format the file + err = filters.FormatFileOrDirectory(f.Name()) + assert.NoError(t, err) + + // check the result is formatted + b, err := ioutil.ReadFile(f.Name()) + assert.NoError(t, err) + assert.Equal(t, string(testyaml.FormattedYaml1), string(b)) +} + +// TestFormatFileOrDirectory_YamlExtFileWithJson verifies that the JSON compatible flow style +// YAML content is formatted as such. +func TestFormatFileOrDirectory_YamlExtFileWithJson(t *testing.T) { + // write the unformatted JSON file contents + f, err := ioutil.TempFile("", "yamlfmt*.yaml") + assert.NoError(t, err) + defer os.Remove(f.Name()) + err = ioutil.WriteFile(f.Name(), testyaml.UnformattedJSON1, 0600) + assert.NoError(t, err) + + // format the file + err = filters.FormatFileOrDirectory(f.Name()) + assert.NoError(t, err) + + // check the result is formatted as yaml + b, err := ioutil.ReadFile(f.Name()) + assert.NoError(t, err) + assert.Equal(t, string(testyaml.FormattedFlowYAML1), string(b)) +} + +// TestFormatFileOrDirectory_JsonExtFileWithNotModified verifies that a file with .json extensions +// and JSON contents won't be modified. +func TestFormatFileOrDirectory_JsonExtFileWithNotModified(t *testing.T) { + // write the unformatted JSON file contents + f, err := ioutil.TempFile("", "yamlfmt*.json") + assert.NoError(t, err) + defer os.Remove(f.Name()) + err = ioutil.WriteFile(f.Name(), testyaml.UnformattedJSON1, 0600) + assert.NoError(t, err) + + // format the file + err = filters.FormatFileOrDirectory(f.Name()) + assert.NoError(t, err) + + // check the result is formatted as yaml + b, err := ioutil.ReadFile(f.Name()) + assert.NoError(t, err) + assert.Equal(t, string(testyaml.UnformattedJSON1), string(b)) +} + +// TestFormatFileOrDirectory_partialKubernetesYamlFile verifies that if a yaml file contains both +// Kubernetes and non-Kubernetes documents, it will only format the Kubernetes documents +func TestFormatFileOrDirectory_partialKubernetesYamlFile(t *testing.T) { + // write the unformatted file + f, err := ioutil.TempFile("", "yamlfmt*.yaml") + assert.NoError(t, err) + defer os.Remove(f.Name()) + err = ioutil.WriteFile(f.Name(), []byte(string(testyaml.UnformattedYaml1)+`--- +status: + conditions: + - 3 + - 1 + - 2 +spec: a +--- +`+string(testyaml.UnformattedYaml2)), 0600) + assert.NoError(t, err) + + // format the file + err = filters.FormatFileOrDirectory(f.Name()) + assert.NoError(t, err) + + // check the result is NOT formatted + b, err := ioutil.ReadFile(f.Name()) + assert.NoError(t, err) + assert.Equal(t, string(testyaml.FormattedYaml1)+`--- +status: + conditions: + - 3 + - 1 + - 2 +spec: a +--- +`+string(testyaml.FormattedYaml2), string(b)) +} + +// TestFormatFileOrDirectory_nonKubernetesYamlFile verifies that if a yaml file does not contain +// kubernetes +func TestFormatFileOrDirectory_skipNonKubernetesYamlFile(t *testing.T) { + // write the unformatted JSON file contents + f, err := ioutil.TempFile("", "yamlfmt*.yaml") + assert.NoError(t, err) + defer os.Remove(f.Name()) + err = ioutil.WriteFile(f.Name(), []byte(` +status: + conditions: + - 3 + - 1 + - 2 +spec: a +`), 0600) + assert.NoError(t, err) + + // format the file + err = filters.FormatFileOrDirectory(f.Name()) + assert.NoError(t, err) + + // check the result is formatted as yaml + b, err := ioutil.ReadFile(f.Name()) + assert.NoError(t, err) + assert.Equal(t, `status: + conditions: + - 3 + - 1 + - 2 +spec: a +`, string(b)) +} + +// TestFormatFileOrDirectory_jsonFile should not fmt the file even though it contains yaml. +func TestFormatFileOrDirectory_skipJsonExtFile(t *testing.T) { + f, err := ioutil.TempFile("", "yamlfmt*.json") + assert.NoError(t, err) + defer os.Remove(f.Name()) + err = ioutil.WriteFile(f.Name(), testyaml.UnformattedYaml1, 0600) + assert.NoError(t, err) + + err = filters.FormatFileOrDirectory(f.Name()) + assert.NoError(t, err) + + b, err := ioutil.ReadFile(f.Name()) + assert.NoError(t, err) + + assert.Equal(t, string(testyaml.UnformattedYaml1), string(b)) +} + +// TestFormatFileOrDirectory_directory verifies that yaml files will be formatted, +// and other files will be ignored +func TestFormatFileOrDirectory_directory(t *testing.T) { + d, err := ioutil.TempDir("", "yamlfmt") + assert.NoError(t, err) + defer os.RemoveAll(d) + + err = os.Mkdir(filepath.Join(d, "config"), 0700) + assert.NoError(t, err) + + err = ioutil.WriteFile(filepath.Join(d, "c1.yaml"), testyaml.UnformattedYaml1, 0600) + assert.NoError(t, err) + + err = ioutil.WriteFile(filepath.Join(d, "config", "c2.yaml"), testyaml.UnformattedYaml2, 0600) + assert.NoError(t, err) + + err = ioutil.WriteFile(filepath.Join(d, "README.md"), []byte(`# Markdown`), 0600) + assert.NoError(t, err) + + err = filters.FormatFileOrDirectory(d) + assert.NoError(t, err) + + b, err := ioutil.ReadFile(filepath.Join(d, "c1.yaml")) + assert.NoError(t, err) + assert.Equal(t, string(testyaml.FormattedYaml1), string(b)) + + b, err = ioutil.ReadFile(filepath.Join(d, "config", "c2.yaml")) + assert.NoError(t, err) + assert.Equal(t, string(testyaml.FormattedYaml2), string(b)) + + b, err = ioutil.ReadFile(filepath.Join(d, "README.md")) + assert.NoError(t, err) + assert.Equal(t, `# Markdown`, string(b)) + + // verify no additional files were created + files := []string{ + ".", "c1.yaml", "README.md", "config", filepath.Join("config", "c2.yaml")} + err = filepath.Walk(d, func(path string, info os.FileInfo, err error) error { + assert.NoError(t, err) + path, err = filepath.Rel(d, path) + assert.NoError(t, err) + assert.Contains(t, files, path) + return nil + }) + assert.NoError(t, err) +} + +// TestFormatFileOrDirectory_trimWhiteSpace verifies that trailling and leading whitespace is +// trimmed +func TestFormatFileOrDirectory_trimWhiteSpace(t *testing.T) { + f, err := ioutil.TempFile("", "yamlfmt*.yaml") + assert.NoError(t, err) + defer os.Remove(f.Name()) + err = ioutil.WriteFile(f.Name(), []byte("\n\n"+string(testyaml.UnformattedYaml1)+"\n\n"), 0600) + assert.NoError(t, err) + + err = filters.FormatFileOrDirectory(f.Name()) + assert.NoError(t, err) + + b, err := ioutil.ReadFile(f.Name()) + assert.NoError(t, err) + + assert.Equal(t, string(testyaml.FormattedYaml1), string(b)) +} + +func TestFormatFileOrDirectory_FmtAnnotation(t *testing.T) { + testCases := []struct { + name string + input []byte + expectedOutput []byte + expectError bool + }{ + { + name: "no formatting annotation", + input: testyaml.UnformattedYaml1, + expectedOutput: testyaml.FormattedYaml1, + }, + { + name: "formatting strategy none", + input: []byte(` +spec: a +status: + conditions: + - 3 + - 1 + - 2 +apiVersion: example.com/v1beta1 +kind: MyType +metadata: + annotations: + config.kubernetes.io/formatting: none +`), + expectedOutput: []byte(` +spec: a +status: + conditions: + - 3 + - 1 + - 2 +apiVersion: example.com/v1beta1 +kind: MyType +metadata: + annotations: + config.kubernetes.io/formatting: none +`), + }, + { + name: "formatting strategy standard", + input: []byte(` +spec: a +status: + conditions: + - 3 + - 1 + - 2 +apiVersion: example.com/v1beta1 +kind: MyType +metadata: + annotations: + config.kubernetes.io/formatting: standard +`), + expectedOutput: []byte(` +apiVersion: example.com/v1beta1 +kind: MyType +metadata: + annotations: + config.kubernetes.io/formatting: standard +spec: a +status: + conditions: + - 3 + - 1 + - 2 +`), + }, + { + name: "unknown formatting strategy", + input: []byte(` +spec: a +status: + conditions: + - 3 + - 1 + - 2 +apiVersion: example.com/v1beta1 +kind: MyType +metadata: + annotations: + config.kubernetes.io/formatting: unknown +`), + expectError: true, + }, + } + + for i := range testCases { + test := testCases[i] + t.Run(test.name, func(t *testing.T) { + f, err := ioutil.TempFile("", "yamlfmt*.yaml") + assert.NoError(t, err) + defer os.Remove(f.Name()) + + err = ioutil.WriteFile(f.Name(), test.input, 0600) + assert.NoError(t, err) + + err = filters.FormatFileOrDirectory(f.Name()) + if test.expectError { + assert.Error(t, err) + return + } + assert.NoError(t, err) + + b, err := ioutil.ReadFile(f.Name()) + assert.NoError(t, err) + + assert.Equal(t, strings.TrimSpace(string(test.expectedOutput)), + strings.TrimSpace(string(b))) + }) + } +} + +func TestFormatInput_NullCases(t *testing.T) { + y := ` +apiVersion: v1 +kind: Service +metadata: + name: nginx + labels: + app: null +spec: + selector: + app: nginx + ports: + - name: http + port: 80 + targetPort: ~ + nodePort: null + allocateLoadBalancerNodePorts: null +` + + // keep the style on values that parse as non-string types + expected := `apiVersion: v1 +kind: Service +metadata: + name: nginx + labels: + app: null +spec: + selector: + app: nginx + ports: + - name: http + port: 80 + targetPort: ~ + nodePort: null + allocateLoadBalancerNodePorts: null +` + + buff := &bytes.Buffer{} + err := kio.Pipeline{ + Inputs: []kio.Reader{&kio.ByteReader{Reader: strings.NewReader(y)}}, + Filters: []kio.Filter{filters.FormatFilter{ + UseSchema: true, + }}, + Outputs: []kio.Writer{kio.ByteWriter{Writer: buff}}, + }.Execute() + assert.NoError(t, err) + assert.Equal(t, expected, buff.String()) +} diff --git a/go/internal/forked/kyaml/kio/filters/grep.go b/go/internal/forked/kyaml/kio/filters/grep.go new file mode 100644 index 000000000..2c0e2a09d --- /dev/null +++ b/go/internal/forked/kyaml/kio/filters/grep.go @@ -0,0 +1,117 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package filters + +import ( + "regexp" + "strings" + + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/kio" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" +) + +type GrepType int + +const ( + Regexp GrepType = 1 << iota + GreaterThanEq + GreaterThan + LessThan + LessThanEq +) + +// GrepFilter filters RNodes with a matching field +type GrepFilter struct { + Path []string `yaml:"path,omitempty"` + Value string `yaml:"value,omitempty"` + MatchType GrepType `yaml:"matchType,omitempty"` + InvertMatch bool `yaml:"invertMatch,omitempty"` + Compare func(a, b string) (int, error) +} + +var _ kio.Filter = GrepFilter{} + +func (f GrepFilter) Filter(input []*yaml.RNode) ([]*yaml.RNode, error) { + // compile the regular expression 1 time if we are matching using regex + var reg *regexp.Regexp + var err error + if f.MatchType == Regexp || f.MatchType == 0 { + reg, err = regexp.Compile(f.Value) + if err != nil { + return nil, err + } + } + + var output kio.ResourceNodeSlice + for i := range input { + node := input[i] + val, err := node.Pipe(&yaml.PathMatcher{Path: f.Path}) + if err != nil { + return nil, err + } + if val == nil || len(val.Content()) == 0 { + if f.InvertMatch { + output = append(output, input[i]) + } + continue + } + found := false + err = val.VisitElements(func(elem *yaml.RNode) error { + // get the value + var str string + if f.MatchType == Regexp { + style := elem.YNode().Style + defer func() { elem.YNode().Style = style }() + elem.YNode().Style = yaml.FlowStyle + str, err = elem.String() + if err != nil { + return err + } + str = strings.TrimSpace(strings.ReplaceAll(str, `"`, "")) + } else { + // if not regexp, then it needs to parse into a quantity and comments will + // break that + str = elem.YNode().Value + if str == "" { + return nil + } + } + + if f.MatchType == Regexp || f.MatchType == 0 { + if reg.MatchString(str) { + found = true + } + return nil + } + + comp, err := f.Compare(str, f.Value) + if err != nil { + return err + } + + if f.MatchType == GreaterThan && comp > 0 { + found = true + } + if f.MatchType == GreaterThanEq && comp >= 0 { + found = true + } + if f.MatchType == LessThan && comp < 0 { + found = true + } + if f.MatchType == LessThanEq && comp <= 0 { + found = true + } + return nil + }) + if err != nil { + return nil, err + } + if found == f.InvertMatch { + continue + } + + output = append(output, input[i]) + } + return output, nil +} diff --git a/go/internal/forked/kyaml/kio/filters/grep_test.go b/go/internal/forked/kyaml/kio/filters/grep_test.go new file mode 100644 index 000000000..90da630dd --- /dev/null +++ b/go/internal/forked/kyaml/kio/filters/grep_test.go @@ -0,0 +1,157 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package filters_test + +import ( + "bytes" + "testing" + + "github.com/stretchr/testify/assert" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/kio" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/kio/filters" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" +) + +func TestGrepFilter_Filter(t *testing.T) { + in := `kind: Deployment +metadata: + labels: + app: nginx2 + name: foo + annotations: + app: nginx2 +spec: + replicas: 1 +--- +kind: Deployment +metadata: + labels: + app: nginx + annotations: + app: nginx + name: bar +spec: + replicas: 3 +--- +kind: Service +metadata: + name: foo + annotations: + app: nginx +spec: + selector: + app: nginx +` + out := &bytes.Buffer{} + err := kio.Pipeline{ + Inputs: []kio.Reader{&kio.ByteReader{Reader: bytes.NewBufferString(in)}}, + Filters: []kio.Filter{filters.GrepFilter{Path: []string{"metadata", "name"}, Value: "foo"}}, + Outputs: []kio.Writer{kio.ByteWriter{Writer: out}}, + }.Execute() + if !assert.NoError(t, err) { + t.FailNow() + } + + if !assert.Equal(t, `kind: Deployment +metadata: + labels: + app: nginx2 + name: foo + annotations: + app: nginx2 +spec: + replicas: 1 +--- +kind: Service +metadata: + name: foo + annotations: + app: nginx +spec: + selector: + app: nginx +`, out.String()) { + t.FailNow() + } + + out = &bytes.Buffer{} + err = kio.Pipeline{ + Inputs: []kio.Reader{&kio.ByteReader{Reader: bytes.NewBufferString(in)}}, + Filters: []kio.Filter{filters.GrepFilter{Path: []string{"kind"}, Value: "Deployment"}}, + Outputs: []kio.Writer{kio.ByteWriter{Writer: out}}, + }.Execute() + if !assert.NoError(t, err) { + t.FailNow() + } + if !assert.Equal(t, `kind: Deployment +metadata: + labels: + app: nginx2 + name: foo + annotations: + app: nginx2 +spec: + replicas: 1 +--- +kind: Deployment +metadata: + labels: + app: nginx + annotations: + app: nginx + name: bar +spec: + replicas: 3 +`, out.String()) { + t.FailNow() + } + + out = &bytes.Buffer{} + err = kio.Pipeline{ + Inputs: []kio.Reader{&kio.ByteReader{Reader: bytes.NewBufferString(in)}}, + Filters: []kio.Filter{filters.GrepFilter{Path: []string{"spec", "replicas"}, Value: "3"}}, + Outputs: []kio.Writer{kio.ByteWriter{Writer: out}}, + }.Execute() + if !assert.NoError(t, err) { + t.FailNow() + } + if !assert.Equal(t, `kind: Deployment +metadata: + labels: + app: nginx + annotations: + app: nginx + name: bar +spec: + replicas: 3 +`, out.String()) { + t.FailNow() + } + + out = &bytes.Buffer{} + err = kio.Pipeline{ + Inputs: []kio.Reader{&kio.ByteReader{Reader: bytes.NewBufferString(in)}}, + Filters: []kio.Filter{filters.GrepFilter{Path: []string{"spec", "not-present"}, Value: "3"}}, + Outputs: []kio.Writer{kio.ByteWriter{Writer: out}}, + }.Execute() + if !assert.NoError(t, err) { + t.FailNow() + } + if !assert.Equal(t, ``, out.String()) { + t.FailNow() + } +} + +func TestGrepFilter_init(t *testing.T) { + assert.Equal(t, filters.GrepFilter{}, filters.Filters["GrepFilter"]()) +} + +func TestGrepFilter_error(t *testing.T) { + v, err := filters.GrepFilter{Path: []string{"metadata", "name"}, + Value: "foo"}.Filter([]*yaml.RNode{{}}) + if !assert.NoError(t, err) { + t.FailNow() + } + assert.Nil(t, v) +} diff --git a/go/internal/forked/kyaml/kio/filters/local.go b/go/internal/forked/kyaml/kio/filters/local.go new file mode 100644 index 000000000..25542f3b3 --- /dev/null +++ b/go/internal/forked/kyaml/kio/filters/local.go @@ -0,0 +1,38 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package filters + +import ( + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" +) + +const LocalConfigAnnotation = "config.kubernetes.io/local-config" + +// IsLocalConfig filters Resources using the config.kubernetes.io/local-config annotation +type IsLocalConfig struct { + // IncludeLocalConfig will include local-config if set to true + IncludeLocalConfig bool `yaml:"includeLocalConfig,omitempty"` + + // ExcludeNonLocalConfig will exclude non local-config if set to true + ExcludeNonLocalConfig bool `yaml:"excludeNonLocalConfig,omitempty"` +} + +// Filter implements kio.Filter +func (c *IsLocalConfig) Filter(inputs []*yaml.RNode) ([]*yaml.RNode, error) { + var out []*yaml.RNode + for i := range inputs { + meta, err := inputs[i].GetMeta() + if err != nil { + return nil, err + } + _, local := meta.Annotations[LocalConfigAnnotation] + + if local && c.IncludeLocalConfig { + out = append(out, inputs[i]) + } else if !local && !c.ExcludeNonLocalConfig { + out = append(out, inputs[i]) + } + } + return out, nil +} diff --git a/go/internal/forked/kyaml/kio/filters/merge.go b/go/internal/forked/kyaml/kio/filters/merge.go new file mode 100644 index 000000000..14d988394 --- /dev/null +++ b/go/internal/forked/kyaml/kio/filters/merge.go @@ -0,0 +1,86 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +// Package merge contains libraries for merging Resources and Patches +package filters + +import ( + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/kio" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml/merge2" +) + +// MergeFilter merges Resources with the Group/Version/Kind/Namespace/Name together using +// a 2-way merge strategy. +// +// - Fields set to null in the source will be cleared from the destination +// - Fields with matching keys will be merged recursively +// - Lists with an associative key (e.g. name) will have their elements merged using the key +// - List without an associative key will have the dest list replaced by the source list +type MergeFilter struct { + Reverse bool +} + +var _ kio.Filter = MergeFilter{} + +type mergeKey struct { + apiVersion string + kind string + namespace string + name string +} + +// MergeFilter implements kio.Filter by merging Resources with the same G/V/K/NS/N +func (c MergeFilter) Filter(input []*yaml.RNode) ([]*yaml.RNode, error) { + // invert the merge precedence + if c.Reverse { + for i, j := 0, len(input)-1; i < j; i, j = i+1, j-1 { + input[i], input[j] = input[j], input[i] + } + } + + // index the Resources by G/V/K/NS/N + index := map[mergeKey][]*yaml.RNode{} + // retain the original ordering + var order []mergeKey + for i := range input { + meta, err := input[i].GetMeta() + if err != nil { + return nil, err + } + key := mergeKey{ + apiVersion: meta.APIVersion, + kind: meta.Kind, + namespace: meta.Namespace, + name: meta.Name, + } + if _, found := index[key]; !found { + order = append(order, key) + } + index[key] = append(index[key], input[i]) + } + + // merge each of the G/V/K/NS/N lists + var output []*yaml.RNode + var err error + for _, k := range order { + var merged *yaml.RNode + resources := index[k] + for i := range resources { + patch := resources[i] + if merged == nil { + // first resources, don't merge it + merged = resources[i] + } else { + merged, err = merge2.Merge(patch, merged, yaml.MergeOptions{ + ListIncreaseDirection: yaml.MergeOptionsListPrepend, + }) + if err != nil { + return nil, err + } + } + } + output = append(output, merged) + } + return output, nil +} diff --git a/go/internal/forked/kyaml/kio/filters/merge3.go b/go/internal/forked/kyaml/kio/filters/merge3.go new file mode 100644 index 000000000..99e965107 --- /dev/null +++ b/go/internal/forked/kyaml/kio/filters/merge3.go @@ -0,0 +1,317 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package filters + +import ( + "fmt" + + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/kio" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/kio/kioutil" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml/merge3" +) + +const ( + mergeSourceAnnotation = "config.kubernetes.io/merge-source" + mergeSourceOriginal = "original" + mergeSourceUpdated = "updated" + mergeSourceDest = "dest" +) + +// ResourceMatcher interface is used to match two resources based on IsSameResource implementation +// This is the way to group same logical resources in upstream, local and origin for merge +// The default way to group them is using GVKNN similar to how kubernetes server identifies resources +// Users of this library might have their own interpretation of grouping similar resources +// for e.g. if consumer adds a name-prefix to local resource, it should not be treated as new resource +// for updates etc. +// Hence, the callers of this library may pass different implementation for IsSameResource +type ResourceMatcher interface { + IsSameResource(node1, node2 *yaml.RNode) bool +} + +// ResourceMergeStrategy is the return type from the Handle function in the +// ResourceHandler interface. It determines which version of a resource should +// be included in the output (if any). +type ResourceMergeStrategy int + +const ( + // Merge means the output to dest should be the 3-way merge of original, + // updated and dest. + Merge ResourceMergeStrategy = iota + // KeepDest means the version of the resource in dest should be the output. + KeepDest + // KeepUpdated means the version of the resource in updated should be the + // output. + KeepUpdated + // KeepOriginal means the version of the resource in original should be the + // output. + KeepOriginal + // Skip means the resource should not be included in the output. + Skip +) + +// ResourceHandler interface is used to determine what should be done for a +// resource once the versions in original, updated and dest has been +// identified based on the ResourceMatcher. This allows users to customize +// what should be the result in dest if a resource has been deleted from +// upstream. +type ResourceHandler interface { + Handle(original, updated, dest *yaml.RNode) (ResourceMergeStrategy, error) +} + +// Merge3 performs a 3-way merge on the original, updated, and destination packages. +type Merge3 struct { + OriginalPath string + UpdatedPath string + DestPath string + MatchFilesGlob []string + Matcher ResourceMatcher + Handler ResourceHandler +} + +func (m Merge3) Merge() error { + // Read the destination package. The ReadWriter will take take of deleting files + // for removed resources. + var inputs []kio.Reader + dest := &kio.LocalPackageReadWriter{ + PackagePath: m.DestPath, + MatchFilesGlob: m.MatchFilesGlob, + SetAnnotations: map[string]string{mergeSourceAnnotation: mergeSourceDest}, + } + inputs = append(inputs, dest) + + // Read the original package + inputs = append(inputs, kio.LocalPackageReader{ + PackagePath: m.OriginalPath, + MatchFilesGlob: m.MatchFilesGlob, + SetAnnotations: map[string]string{mergeSourceAnnotation: mergeSourceOriginal}, + }) + + // Read the updated package + inputs = append(inputs, kio.LocalPackageReader{ + PackagePath: m.UpdatedPath, + MatchFilesGlob: m.MatchFilesGlob, + SetAnnotations: map[string]string{mergeSourceAnnotation: mergeSourceUpdated}, + }) + + return kio.Pipeline{ + Inputs: inputs, + Filters: []kio.Filter{m}, + Outputs: []kio.Writer{dest}, + }.Execute() +} + +// Filter combines Resources with the same GVK + N + NS into tuples, and then merges them +func (m Merge3) Filter(nodes []*yaml.RNode) ([]*yaml.RNode, error) { + // index the nodes by their identity + matcher := m.Matcher + if matcher == nil { + matcher = &DefaultGVKNNMatcher{MergeOnPath: true} + } + handler := m.Handler + if handler == nil { + handler = &DefaultResourceHandler{} + } + + tl := tuples{matcher: matcher} + for i := range nodes { + if err := tl.add(nodes[i]); err != nil { + return nil, err + } + } + + // iterate over the inputs, merging as needed + var output []*yaml.RNode + for i := range tl.list { + t := tl.list[i] + strategy, err := handler.Handle(t.original, t.updated, t.dest) + if err != nil { + return nil, err + } + switch strategy { + case Merge: + node, err := t.merge() + if err != nil { + return nil, err + } + if node != nil { + output = append(output, node) + } + case KeepDest: + output = append(output, t.dest) + case KeepUpdated: + output = append(output, t.updated) + case KeepOriginal: + output = append(output, t.original) + case Skip: + // do nothing + } + } + return output, nil +} + +// tuples combines nodes with the same GVK + N + NS +type tuples struct { + list []*tuple + + // matcher matches the resources for merge + matcher ResourceMatcher +} + +// DefaultGVKNNMatcher holds the default matching of resources implementation based on +// Group, Version, Kind, Name and Namespace of the resource +type DefaultGVKNNMatcher struct { + // MergeOnPath will use the relative filepath as part of the merge key. + // This may be necessary if the directory contains multiple copies of + // the same resource, or resources patches. + MergeOnPath bool +} + +// IsSameResource returns true if metadata of node1 and metadata of node2 belongs to same logical resource +func (dm *DefaultGVKNNMatcher) IsSameResource(node1, node2 *yaml.RNode) bool { + if node1 == nil || node2 == nil { + return false + } + if err := kioutil.CopyLegacyAnnotations(node1); err != nil { + return false + } + if err := kioutil.CopyLegacyAnnotations(node2); err != nil { + return false + } + + meta1, err := node1.GetMeta() + if err != nil { + return false + } + + meta2, err := node2.GetMeta() + if err != nil { + return false + } + + if meta1.Name != meta2.Name { + return false + } + if meta1.Namespace != meta2.Namespace { + return false + } + if meta1.APIVersion != meta2.APIVersion { + return false + } + if meta1.Kind != meta2.Kind { + return false + } + if dm.MergeOnPath { + // directories may contain multiple copies of a resource with the same + // name, namespace, apiVersion and kind -- e.g. kustomize patches, or + // multiple environments + // mergeOnPath configures the merge logic to use the path as part of the + // resource key + if meta1.Annotations[kioutil.PathAnnotation] != meta2.Annotations[kioutil.PathAnnotation] { + return false + } + } + return true +} + +// add adds a node to the list, combining it with an existing matching Resource if found +func (ts *tuples) add(node *yaml.RNode) error { + for i := range ts.list { + t := ts.list[i] + if ts.matcher.IsSameResource(addedNode(t), node) { + return t.add(node) + } + } + t := &tuple{} + if err := t.add(node); err != nil { + return err + } + ts.list = append(ts.list, t) + return nil +} + +// addedNode returns one on the existing added nodes in the tuple +func addedNode(t *tuple) *yaml.RNode { + if t.updated != nil { + return t.updated + } + if t.original != nil { + return t.original + } + return t.dest +} + +// tuple wraps an original, updated, and dest tuple for a given Resource +type tuple struct { + original *yaml.RNode + updated *yaml.RNode + dest *yaml.RNode +} + +// add sets the corresponding tuple field for the node +func (t *tuple) add(node *yaml.RNode) error { + meta, err := node.GetMeta() + if err != nil { + return err + } + switch meta.Annotations[mergeSourceAnnotation] { + case mergeSourceDest: + if t.dest != nil { + return duplicateError("local", meta.Annotations[kioutil.PathAnnotation]) + } + t.dest = node + case mergeSourceOriginal: + if t.original != nil { + return duplicateError("original upstream", meta.Annotations[kioutil.PathAnnotation]) + } + t.original = node + case mergeSourceUpdated: + if t.updated != nil { + return duplicateError("updated upstream", meta.Annotations[kioutil.PathAnnotation]) + } + t.updated = node + default: + return fmt.Errorf("no source annotation for Resource") + } + return nil +} + +// merge performs a 3-way merge on the tuple +func (t *tuple) merge() (*yaml.RNode, error) { + return merge3.Merge(t.dest, t.original, t.updated) +} + +// duplicateError returns duplicate resources error +func duplicateError(source, filePath string) error { + return fmt.Errorf(`found duplicate %q resources in file %q, please refer to "update" documentation for the fix`, source, filePath) +} + +// DefaultResourceHandler is the default implementation of the ResourceHandler +// interface. It uses the following rules: +// * Keep dest if resource only exists in dest. +// * Keep updated if resource added in updated. +// * Delete dest if updated has been deleted. +// * Don't add the resource back if removed from dest. +// * Otherwise merge. +type DefaultResourceHandler struct{} + +func (*DefaultResourceHandler) Handle(original, updated, dest *yaml.RNode) (ResourceMergeStrategy, error) { + switch { + case original == nil && updated == nil && dest != nil: + // added locally -- keep dest + return KeepDest, nil + case updated != nil && dest == nil: + // added in the update -- add update + return KeepUpdated, nil + case original != nil && updated == nil: + // deleted in the update + return Skip, nil + case original != nil && dest == nil: + // deleted locally + return Skip, nil + default: + // dest and updated are non-nil -- merge them + return Merge, nil + } +} diff --git a/go/internal/forked/kyaml/kio/filters/merge3_test.go b/go/internal/forked/kyaml/kio/filters/merge3_test.go new file mode 100644 index 000000000..0602c2676 --- /dev/null +++ b/go/internal/forked/kyaml/kio/filters/merge3_test.go @@ -0,0 +1,143 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package filters_test + +import ( + "io/ioutil" + "os" + "path/filepath" + "runtime" + "testing" + + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/kio/filters" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/testutil" + + "github.com/stretchr/testify/assert" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/copyutil" +) + +func TestMerge3_Merge(t *testing.T) { + // TODO: make this test pass on windows -- currently failing due to comment whitespace changes + testutil.SkipWindows(t) + + _, datadir, _, ok := runtime.Caller(0) + if !assert.True(t, ok) { + t.FailNow() + } + datadir = filepath.Join(filepath.Dir(datadir), "testdata") + + // setup the local directory + dir, err := ioutil.TempDir("", "kyaml-test") + if !assert.NoError(t, err) { + t.FailNow() + } + defer os.RemoveAll(dir) + + if !assert.NoError(t, copyutil.CopyDir( + filepath.Join(datadir, "dataset1-localupdates"), + filepath.Join(dir, "dataset1"))) { + t.FailNow() + } + + err = filters.Merge3{ + OriginalPath: filepath.Join(datadir, "dataset1"), + UpdatedPath: filepath.Join(datadir, "dataset1-remoteupdates"), + DestPath: filepath.Join(dir, "dataset1"), + Matcher: &filters.DefaultGVKNNMatcher{MergeOnPath: false}, + }.Merge() + if !assert.NoError(t, err) { + t.FailNow() + } + + diffs, err := copyutil.Diff( + filepath.Join(dir, "dataset1"), + filepath.Join(datadir, "dataset1-expected")) + if !assert.NoError(t, err) { + t.FailNow() + } + if !assert.Empty(t, diffs.List()) { + t.FailNow() + } +} + +// TestMerge3_Merge_path tests that if the same resource is specified multiple times +// with MergeOnPath, that the resources will be merged by the filepath name. +func TestMerge3_Merge_path(t *testing.T) { + // TODO: make this test pass on windows -- currently failing due to comment whitespace changes + testutil.SkipWindows(t) + + _, datadir, _, ok := runtime.Caller(0) + if !assert.True(t, ok) { + t.FailNow() + } + datadir = filepath.Join(filepath.Dir(datadir), "testdata2") + + // setup the local directory + dir, err := ioutil.TempDir("", "kyaml-test") + if !assert.NoError(t, err) { + t.FailNow() + } + defer os.RemoveAll(dir) + + if !assert.NoError(t, copyutil.CopyDir( + filepath.Join(datadir, "dataset1-localupdates"), + filepath.Join(dir, "dataset1"))) { + t.FailNow() + } + + err = filters.Merge3{ + OriginalPath: filepath.Join(datadir, "dataset1"), + UpdatedPath: filepath.Join(datadir, "dataset1-remoteupdates"), + DestPath: filepath.Join(dir, "dataset1"), + }.Merge() + if !assert.NoError(t, err) { + t.FailNow() + } + + diffs, err := copyutil.Diff( + filepath.Join(dir, "dataset1"), + filepath.Join(datadir, "dataset1-expected")) + if !assert.NoError(t, err) { + t.FailNow() + } + if !assert.Empty(t, diffs.List()) { + t.FailNow() + } +} + +// TestMerge3_Merge_fail tests that if the same resource is defined multiple times +// that merge will fail +func TestMerge3_Merge_fail(t *testing.T) { + // TODO: make this test pass on windows -- currently failing due to comment whitespace changes + testutil.SkipWindows(t) + + _, datadir, _, ok := runtime.Caller(0) + if !assert.True(t, ok) { + t.FailNow() + } + datadir = filepath.Join(filepath.Dir(datadir), "testdata2") + + // setup the local directory + dir, err := ioutil.TempDir("", "kyaml-test") + if !assert.NoError(t, err) { + t.FailNow() + } + defer os.RemoveAll(dir) + + if !assert.NoError(t, copyutil.CopyDir( + filepath.Join(datadir, "dataset1-localupdates"), + filepath.Join(dir, "dataset1"))) { + t.FailNow() + } + + err = filters.Merge3{ + OriginalPath: filepath.Join(datadir, "dataset1"), + UpdatedPath: filepath.Join(datadir, "dataset1-remoteupdates"), + DestPath: filepath.Join(dir, "dataset1"), + Matcher: &filters.DefaultGVKNNMatcher{MergeOnPath: false}, + }.Merge() + if !assert.Error(t, err) { + t.FailNow() + } +} diff --git a/go/internal/forked/kyaml/kio/filters/merge_test.go b/go/internal/forked/kyaml/kio/filters/merge_test.go new file mode 100644 index 000000000..06c1d44d7 --- /dev/null +++ b/go/internal/forked/kyaml/kio/filters/merge_test.go @@ -0,0 +1,115 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package filters_test + +import ( + "bytes" + "strings" + "testing" + + "github.com/stretchr/testify/assert" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/kio" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/kio/filters" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" +) + +// TestMerge_Merge_order tests that the original order of elements +// retained after merge +func TestMerge_Merge_order(t *testing.T) { + r1, err := yaml.Parse(` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: foo-1 + namespace: bar-1 +spec: + template: + spec: {} +`) + if !assert.NoError(t, err) { + t.FailNow() + } + + r2, err := yaml.Parse(` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: foo-2 + namespace: bar-2 +spec: + template: + spec: {} +`) + if !assert.NoError(t, err) { + t.FailNow() + } + + var b bytes.Buffer + err = kio.Pipeline{ + Inputs: []kio.Reader{&kio.PackageBuffer{Nodes: []*yaml.RNode{r1, r2}}}, + Filters: []kio.Filter{filters.MatchFilter{}}, + Outputs: []kio.Writer{&kio.ByteWriter{Writer: &b}}, + }.Execute() + if !assert.NoError(t, err) { + t.FailNow() + } + + expected := strings.TrimSpace(` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: foo-1 + namespace: bar-1 +spec: + template: + spec: {} +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + name: foo-2 + namespace: bar-2 +spec: + template: + spec: {} +`) + + if !assert.Equal(t, expected, strings.TrimSpace(b.String())) { + t.FailNow() + } + + b.Reset() + err = kio.Pipeline{ + Inputs: []kio.Reader{&kio.PackageBuffer{Nodes: []*yaml.RNode{r2, r1}}}, + Filters: []kio.Filter{filters.MatchFilter{}}, + Outputs: []kio.Writer{&kio.ByteWriter{Writer: &b}}, + }.Execute() + if !assert.NoError(t, err) { + t.FailNow() + } + + expected = strings.TrimSpace(` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: foo-2 + namespace: bar-2 +spec: + template: + spec: {} +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + name: foo-1 + namespace: bar-1 +spec: + template: + spec: {} +`) + + if !assert.Equal(t, expected, strings.TrimSpace(b.String())) { + t.FailNow() + } +} diff --git a/go/internal/forked/kyaml/kio/filters/modify.go b/go/internal/forked/kyaml/kio/filters/modify.go new file mode 100644 index 000000000..b1090302a --- /dev/null +++ b/go/internal/forked/kyaml/kio/filters/modify.go @@ -0,0 +1,4 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package filters diff --git a/go/internal/forked/kyaml/kio/filters/stripcomments.go b/go/internal/forked/kyaml/kio/filters/stripcomments.go new file mode 100644 index 000000000..86d71f494 --- /dev/null +++ b/go/internal/forked/kyaml/kio/filters/stripcomments.go @@ -0,0 +1,32 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package filters + +import ( + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/kio" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" +) + +type StripCommentsFilter struct{} + +var _ kio.Filter = StripCommentsFilter{} + +func (f StripCommentsFilter) Filter(slice []*yaml.RNode) ([]*yaml.RNode, error) { + for i := range slice { + stripComments(slice[i].YNode()) + } + return slice, nil +} + +func stripComments(node *yaml.Node) { + if node == nil { + return + } + node.HeadComment = "" + node.LineComment = "" + node.FootComment = "" + for i := range node.Content { + stripComments(node.Content[i]) + } +} diff --git a/go/internal/forked/kyaml/kio/filters/testdata/dataset1-expected/java/java-configmap.resource.yaml b/go/internal/forked/kyaml/kio/filters/testdata/dataset1-expected/java/java-configmap.resource.yaml new file mode 100644 index 000000000..442c5ce51 --- /dev/null +++ b/go/internal/forked/kyaml/kio/filters/testdata/dataset1-expected/java/java-configmap.resource.yaml @@ -0,0 +1,11 @@ +# Copyright 2019 The Kubernetes Authors. +# SPDX-License-Identifier: Apache-2.0 +# +apiVersion: v1 +kind: ConfigMap +metadata: + name: app-config + labels: + app.kubernetes.io/component: undefined + app.kubernetes.io/instance: undefined +data: {} diff --git a/go/internal/forked/kyaml/kio/filters/testdata/dataset1-expected/java/java-deployment.resource.yaml b/go/internal/forked/kyaml/kio/filters/testdata/dataset1-expected/java/java-deployment.resource.yaml new file mode 100644 index 000000000..919936367 --- /dev/null +++ b/go/internal/forked/kyaml/kio/filters/testdata/dataset1-expected/java/java-deployment.resource.yaml @@ -0,0 +1,42 @@ +# Copyright 2019 The Kubernetes Authors. +# SPDX-License-Identifier: Apache-2.0 +# +apiVersion: apps/v1 +kind: Deployment +metadata: + name: app + labels: + app: java + new-local: label + new-remote: label +spec: + replicas: 3 + selector: + matchLabels: + app: java + template: + metadata: + labels: + app: java + spec: + restartPolicy: Always + containers: + - name: app + image: gcr.io/project/app:version + command: + - java + - -jar + - /app.jar + - otherstuff + args: + - foo + ports: + - containerPort: 8080 + envFrom: + - configMapRef: + name: app-config + env: + - name: JAVA_OPTS + value: -XX:+UnlockExperimentalVMOptions -XX:+UseCGroupMemoryLimitForHeap -Djava.security.egd=file:/dev/./urandom + imagePullPolicy: Always + minReadySeconds: 20 diff --git a/go/internal/forked/kyaml/kio/filters/testdata/dataset1-expected/java/java-service.resource.yaml b/go/internal/forked/kyaml/kio/filters/testdata/dataset1-expected/java/java-service.resource.yaml new file mode 100644 index 000000000..051996295 --- /dev/null +++ b/go/internal/forked/kyaml/kio/filters/testdata/dataset1-expected/java/java-service.resource.yaml @@ -0,0 +1,16 @@ +# Copyright 2019 The Kubernetes Authors. +# SPDX-License-Identifier: Apache-2.0 +# +apiVersion: v1 +kind: Service +metadata: + name: app + labels: + app: java +spec: + selector: + app: java + ports: + - name: "8080" + port: 8080 + targetPort: 8080 diff --git a/go/internal/forked/kyaml/kio/filters/testdata/dataset1-expected/mysql/mysql-configmap.resource.yaml b/go/internal/forked/kyaml/kio/filters/testdata/dataset1-expected/mysql/mysql-configmap.resource.yaml new file mode 100644 index 000000000..714af7037 --- /dev/null +++ b/go/internal/forked/kyaml/kio/filters/testdata/dataset1-expected/mysql/mysql-configmap.resource.yaml @@ -0,0 +1,23 @@ +# Copyright 2019 The Kubernetes Authors. +# SPDX-License-Identifier: Apache-2.0 +# +apiVersion: v1 +kind: ConfigMap +metadata: + name: mysql + labels: + app: mysql + annotations: + file/index: "0" + file/path: mysql-configmap.resource.yaml + package/name: mysql + package/original-name: mysql +data: + master.cnf: | + # Apply this config only on the master. + [mysqld] + log-bin + slave.cnf: | + # Apply this config only on slaves. + [mysqld] + super-read-only diff --git a/go/internal/forked/kyaml/kio/filters/testdata/dataset1-expected/mysql/mysql-service.resource.yaml b/go/internal/forked/kyaml/kio/filters/testdata/dataset1-expected/mysql/mysql-service.resource.yaml new file mode 100644 index 000000000..667544d15 --- /dev/null +++ b/go/internal/forked/kyaml/kio/filters/testdata/dataset1-expected/mysql/mysql-service.resource.yaml @@ -0,0 +1,29 @@ +# Copyright 2019 The Kubernetes Authors. +# SPDX-License-Identifier: Apache-2.0 +# +apiVersion: v1 +kind: Service +metadata: + name: mysql + labels: + app: mysql +spec: + selector: + app: mysql + ports: + - name: mysql + port: 3306 + clusterIP: None +--- +apiVersion: v1 +kind: Service +metadata: + name: mysql-read + labels: + app: mysql +spec: + selector: + app: mysql + ports: + - name: mysql + port: 3306 diff --git a/go/internal/forked/kyaml/kio/filters/testdata/dataset1-expected/mysql/mysql-statefulset.resource.yaml b/go/internal/forked/kyaml/kio/filters/testdata/dataset1-expected/mysql/mysql-statefulset.resource.yaml new file mode 100644 index 000000000..681a806bd --- /dev/null +++ b/go/internal/forked/kyaml/kio/filters/testdata/dataset1-expected/mysql/mysql-statefulset.resource.yaml @@ -0,0 +1,173 @@ +# Copyright 2019 The Kubernetes Authors. +# SPDX-License-Identifier: Apache-2.0 +# +apiVersion: apps/v1 +kind: StatefulSet +metadata: + name: mysql +spec: + replicas: 3 + selector: + matchLabels: + app: mysql + template: + metadata: + labels: + app: mysql + spec: + initContainers: + - name: init-mysql + image: mysql:5.7 + command: + - bash + - -c + - | + set -ex + # Generate mysql server-id from pod ordinal index. + [[ `hostname` =~ -([0-9]+)$ ]] || exit 1 + ordinal=${BASH_REMATCH[1]} + echo [mysqld] > /mnt/conf.d/server-id.cnf + # Add an offset to avoid reserved server-id=0 value. + echo server-id=$((100 + $ordinal)) >> /mnt/conf.d/server-id.cnf + # Copy appropriate conf.d files from config-map to emptyDir. + if [[ $ordinal -eq 0 ]]; then + cp /mnt/config-map/master.cnf /mnt/conf.d/ + else + cp /mnt/config-map/slave.cnf /mnt/conf.d/ + fi + volumeMounts: + - name: conf + mountPath: /mnt/conf.d + - name: config-map + mountPath: /mnt/config-map + - name: clone-mysql + image: gcr.io/google-samples/xtrabackup:1.0 + command: + - bash + - -c + - | + set -ex + # Skip the clone if data already exists. + [[ -d /var/lib/mysql/mysql ]] && exit 0 + # Skip the clone on master (ordinal index 0). + [[ `hostname` =~ -([0-9]+)$ ]] || exit 1 + ordinal=${BASH_REMATCH[1]} + [[ $ordinal -eq 0 ]] && exit 0 + # Clone data from previous peer. + ncat --recv-only mysql-$(($ordinal-1)).mysql 3307 | xbstream -x -C /var/lib/mysql + # Prepare the backup. + xtrabackup --prepare --target-dir=/var/lib/mysql + volumeMounts: + - name: data + mountPath: /var/lib/mysql + subPath: mysql + - name: conf + mountPath: /etc/mysql/conf.d + containers: + - name: mysql + image: mysql:5.7 + ports: + - name: mysql + containerPort: 3306 + env: + - name: MYSQL_ALLOW_EMPTY_PASSWORD + value: "1" + resources: + requests: + cpu: 500m + memory: 1Gi + volumeMounts: + - name: data + mountPath: /var/lib/mysql + subPath: mysql + - name: conf + mountPath: /etc/mysql/conf.d + livenessProbe: + exec: + command: + - mysqladmin + - ping + initialDelaySeconds: 30 + periodSeconds: 10 + timeoutSeconds: 5 + readinessProbe: + exec: + command: + - mysql + - -h + - 127.0.0.1 + - -e + - SELECT 1 + initialDelaySeconds: 5 + periodSeconds: 2 + timeoutSeconds: 1 + - name: xtrabackup + image: gcr.io/google-samples/xtrabackup:1.0 + command: + - bash + - -c + - | + set -ex + cd /var/lib/mysql + # Determine binlog position of cloned data, if any. + if [[ -f xtrabackup_slave_info ]]; then + # XtraBackup already generated a partial "CHANGE MASTER TO" query + # because we're cloning from an existing slave. + mv xtrabackup_slave_info change_master_to.sql.in + # Ignore xtrabackup_binlog_info in this case (it's useless). + rm -f xtrabackup_binlog_info + elif [[ -f xtrabackup_binlog_info ]]; then + # We're cloning directly from master. Parse binlog position. + [[ `cat xtrabackup_binlog_info` =~ ^(.*?)[[:space:]]+(.*?)$ ]] || exit 1 + rm xtrabackup_binlog_info + echo "CHANGE MASTER TO MASTER_LOG_FILE='${BASH_REMATCH[1]}',\ + MASTER_LOG_POS=${BASH_REMATCH[2]}" > change_master_to.sql.in + fi + # Check if we need to complete a clone by starting replication. + if [[ -f change_master_to.sql.in ]]; then + echo "Waiting for mysqld to be ready (accepting connections)" + until mysql -h 127.0.0.1 -e "SELECT 1"; do sleep 1; done + echo "Initializing replication from clone position" + # In case of container restart, attempt this at-most-once. + mv change_master_to.sql.in change_master_to.sql.orig + mysql -h 127.0.0.1 < /mnt/conf.d/server-id.cnf + # Add an offset to avoid reserved server-id=0 value. + echo server-id=$((100 + $ordinal)) >> /mnt/conf.d/server-id.cnf + # Copy appropriate conf.d files from config-map to emptyDir. + if [[ $ordinal -eq 0 ]]; then + cp /mnt/config-map/master.cnf /mnt/conf.d/ + else + cp /mnt/config-map/slave.cnf /mnt/conf.d/ + fi + volumeMounts: + - name: conf + mountPath: /mnt/conf.d + - name: config-map + mountPath: /mnt/config-map + - name: clone-mysql + image: gcr.io/google-samples/xtrabackup:1.0 + command: + - bash + - -c + - | + set -ex + # Skip the clone if data already exists. + [[ -d /var/lib/mysql/mysql ]] && exit 0 + # Skip the clone on master (ordinal index 0). + [[ `hostname` =~ -([0-9]+)$ ]] || exit 1 + ordinal=${BASH_REMATCH[1]} + [[ $ordinal -eq 0 ]] && exit 0 + # Clone data from previous peer. + ncat --recv-only mysql-$(($ordinal-1)).mysql 3307 | xbstream -x -C /var/lib/mysql + # Prepare the backup. + xtrabackup --prepare --target-dir=/var/lib/mysql + volumeMounts: + - name: data + mountPath: /var/lib/mysql + subPath: mysql + - name: conf + mountPath: /etc/mysql/conf.d + containers: + - name: mysql + image: mysql:5.7 + ports: + - name: mysql + containerPort: 3306 + env: + - name: MYSQL_ALLOW_EMPTY_PASSWORD + value: "1" + resources: + requests: + cpu: 500m + memory: 1Gi + volumeMounts: + - name: data + mountPath: /var/lib/mysql + subPath: mysql + - name: conf + mountPath: /etc/mysql/conf.d + livenessProbe: + exec: + command: + - mysqladmin + - ping + initialDelaySeconds: 30 + periodSeconds: 10 + timeoutSeconds: 5 + readinessProbe: + exec: + command: + - mysql + - -h + - 127.0.0.1 + - -e + - SELECT 1 + initialDelaySeconds: 5 + periodSeconds: 2 + timeoutSeconds: 1 + - name: xtrabackup + image: gcr.io/google-samples/xtrabackup:1.0 + command: + - bash + - -c + - | + set -ex + cd /var/lib/mysql + # Determine binlog position of cloned data, if any. + if [[ -f xtrabackup_slave_info ]]; then + # XtraBackup already generated a partial "CHANGE MASTER TO" query + # because we're cloning from an existing slave. + mv xtrabackup_slave_info change_master_to.sql.in + # Ignore xtrabackup_binlog_info in this case (it's useless). + rm -f xtrabackup_binlog_info + elif [[ -f xtrabackup_binlog_info ]]; then + # We're cloning directly from master. Parse binlog position. + [[ `cat xtrabackup_binlog_info` =~ ^(.*?)[[:space:]]+(.*?)$ ]] || exit 1 + rm xtrabackup_binlog_info + echo "CHANGE MASTER TO MASTER_LOG_FILE='${BASH_REMATCH[1]}',\ + MASTER_LOG_POS=${BASH_REMATCH[2]}" > change_master_to.sql.in + fi + # Check if we need to complete a clone by starting replication. + if [[ -f change_master_to.sql.in ]]; then + echo "Waiting for mysqld to be ready (accepting connections)" + until mysql -h 127.0.0.1 -e "SELECT 1"; do sleep 1; done + echo "Initializing replication from clone position" + # In case of container restart, attempt this at-most-once. + mv change_master_to.sql.in change_master_to.sql.orig + mysql -h 127.0.0.1 <= 0; j-- { + matcher := i.matchers[j] + if strings.HasPrefix(path, matcher.basePath) || path == matcher.basePath { + i.matchers = i.matchers[:j+1] + return + } + } +} + +// matchFile checks whether the file given by the provided path matches +// any of the patterns in the .krmignore file for the package. +func (i *ignoreFilesMatcher) matchFile(path string) bool { + if len(i.matchers) == 0 { + return false + } + i.verifyPath(filepath.Dir(path)) + return i.matchers[len(i.matchers)-1].matcher.Match(path, false) +} + +// matchFile checks whether the directory given by the provided path matches +// any of the patterns in the .krmignore file for the package. +func (i *ignoreFilesMatcher) matchDir(path string) bool { + if len(i.matchers) == 0 { + return false + } + i.verifyPath(path) + return i.matchers[len(i.matchers)-1].matcher.Match(path, true) +} + +// matcher wraps the gitignore matcher and the path to the folder +// where the file was found. +type matcher struct { + matcher gitignore.IgnoreMatcher + + basePath string +} diff --git a/go/internal/forked/kyaml/kio/ignorefilesmatcher_test.go b/go/internal/forked/kyaml/kio/ignorefilesmatcher_test.go new file mode 100644 index 000000000..462fcbf58 --- /dev/null +++ b/go/internal/forked/kyaml/kio/ignorefilesmatcher_test.go @@ -0,0 +1,268 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package kio + +import ( + "io/ioutil" + "path/filepath" + "strings" + "testing" + + "github.com/stretchr/testify/assert" + "github.com/stretchr/testify/require" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/filesys" +) + +func TestIgnoreFilesMatcher_readIgnoreFile(t *testing.T) { + testCases := []struct { + name string + writeIgnoreFile bool + isMatch bool + }{ + { + name: "has .krmignore file", + writeIgnoreFile: true, + isMatch: true, + }, + { + name: "no .krmignore file", + writeIgnoreFile: false, + isMatch: false, + }, + } + + const ( + ignoreFileName = ".krmignore" + testFileName = "testfile.yaml" + ignoreFileBody = "\n" + testFileName + "\n" + ) + + fsMakers := map[string]func(bool) (string, filesys.FileSystem){ + // onDisk creates a temp directory and returns a nil FileSystem, testing + // the normal conditions under which ignoreFileMatcher is used. + "onDisk": func(writeIgnoreFile bool) (string, filesys.FileSystem) { + dir, err := ioutil.TempDir("", "kyaml-test") + require.NoError(t, err) + + if writeIgnoreFile { + ignoreFilePath := filepath.Join(dir, ignoreFileName) + require.NoError(t, ioutil.WriteFile(ignoreFilePath, []byte(ignoreFileBody), 0600)) + } + testFilePath := filepath.Join(dir, testFileName) + require.NoError(t, ioutil.WriteFile(testFilePath, []byte{}, 0600)) + return dir, nil + }, + + // inMem creates an in-memory FileSystem and returns it. + "inMem": func(writeIgnoreFile bool) (string, filesys.FileSystem) { + fs := filesys.MakeEmptyDirInMemory() + if writeIgnoreFile { + require.NoError(t, fs.WriteFile(ignoreFileName, []byte(ignoreFileBody))) + } + require.NoError(t, fs.WriteFile(testFileName, nil)) + return ".", fs + }, + } + + for name, fsMaker := range fsMakers { + t.Run(name, func(t *testing.T) { + fsMaker := fsMaker + for i := range testCases { + test := testCases[i] + dir, fs := fsMaker(test.writeIgnoreFile) + t.Run(test.name, func(t *testing.T) { + m := ignoreFilesMatcher{} + m.fs.Set(fs) + require.NoError(t, m.readIgnoreFile(dir)) + require.Equal(t, test.isMatch, m.matchFile(filepath.Join(dir, testFileName))) + }) + } + }) + } +} + +var ( + readFileA = []byte(` +a: a +--- +c: c +`) + readFileB = []byte(` +b: b +`) +) + +func TestLocalPackageReader_Read_ignoreFile(t *testing.T) { + testCases := []struct { + name string + directories []string + files map[string][]byte + expected []string + }{ + { + name: "ignore file", + directories: []string{ + filepath.Join("a", "b"), + filepath.Join("a", "c"), + }, + files: map[string][]byte{ + filepath.Join("pkgFile"): {}, + filepath.Join("a", "b", "a_test.yaml"): readFileA, + filepath.Join("a", "c", "c_test.yaml"): readFileB, + filepath.Join(".krmignore"): []byte(` +a/c/c_test.yaml +`, + ), + }, + expected: []string{ + `a: a`, + `c: c`, + }, + }, + { + name: "ignore folder", + directories: []string{ + filepath.Join("a", "b"), + filepath.Join("a", "c"), + }, + files: map[string][]byte{ + filepath.Join("pkgFile"): {}, + filepath.Join("a", "b", "a_test.yaml"): readFileA, + filepath.Join("a", "c", "c_test.yaml"): readFileB, + filepath.Join(".krmignore"): []byte(` +a/c +`, + ), + }, + expected: []string{ + `a: a`, + `c: c`, + }, + }, + { + name: "krmignore file in subpackage", + directories: []string{ + filepath.Join("a", "c"), + }, + files: map[string][]byte{ + filepath.Join("pkgFile"): {}, + filepath.Join("a", "c", "a_test.yaml"): readFileA, + filepath.Join("a", "c", "c_test.yaml"): readFileB, + filepath.Join(".krmignore"): []byte(` +d/e/f.yaml +`, + ), + filepath.Join("a", "c", "pkgFile"): {}, + filepath.Join("a", "c", ".krmignore"): []byte(` +a_test.yaml +`), + }, + expected: []string{ + `b: b`, + }, + }, + { + name: "krmignore files does not affect subpackages", + directories: []string{ + filepath.Join("a", "c"), + }, + files: map[string][]byte{ + filepath.Join("pkgFile"): {}, + filepath.Join("a", "c", "a_test.yaml"): readFileA, + filepath.Join("a", "c", "c_test.yaml"): readFileB, + filepath.Join(".krmignore"): []byte(` +a/c/c_test.yaml +`, + ), + filepath.Join("a", "c", "pkgFile"): {}, + filepath.Join("a", "c", ".krmignore"): []byte(` +a_test.yaml +`), + }, + expected: []string{ + `b: b`, + }, + }, + { + name: "handles a combination of packages and directories", + directories: []string{ + filepath.Join("a"), + filepath.Join("d", "e"), + filepath.Join("f"), + }, + files: map[string][]byte{ + filepath.Join("pkgFile"): {}, + filepath.Join("d", "pkgFile"): {}, + filepath.Join("d", "e", "pkgFile"): {}, + filepath.Join("f", "pkgFile"): {}, + filepath.Join("manifest.yaml"): []byte(`root: root`), + filepath.Join("a", "manifest.yaml"): []byte(`a: a`), + filepath.Join("d", "manifest.yaml"): []byte(`d: d`), + filepath.Join("d", "e", "manifest.yaml"): []byte(`e: e`), + filepath.Join("f", "manifest.yaml"): []byte(`f: f`), + filepath.Join("d", ".krmignore"): []byte(` +manifest.yaml +`), + }, + expected: []string{ + `a: a`, + `e: e`, + `f: f`, + `root: root`, + }, + }, + { + name: "ignore file can exclude subpackages", + directories: []string{ + filepath.Join("a"), + }, + files: map[string][]byte{ + filepath.Join("pkgFile"): {}, + filepath.Join("a", "pkgFile"): {}, + filepath.Join("manifest.yaml"): []byte(`root: root`), + filepath.Join("a", "manifest.yaml"): []byte(`a: a`), + filepath.Join(".krmignore"): []byte(` +a +`), + }, + expected: []string{ + `root: root`, + }, + }, + } + + for i := range testCases { + test := testCases[i] + t.Run(test.name, func(t *testing.T) { + s := SetupDirectories(t, test.directories...) + defer s.Clean() + for path, content := range test.files { + s.WriteFile(t, path, content) + } + + // empty path + rfr := LocalPackageReader{ + PackagePath: s.Root, + IncludeSubpackages: true, + PackageFileName: "pkgFile", + OmitReaderAnnotations: true, + } + nodes, err := rfr.Read() + if !assert.NoError(t, err) { + assert.FailNow(t, err.Error()) + } + + if !assert.Len(t, nodes, len(test.expected)) { + assert.FailNow(t, "wrong number items") + } + + for i, node := range nodes { + val, err := node.String() + assert.NoError(t, err) + want := strings.ReplaceAll(test.expected[i], "${SEP}", string(filepath.Separator)) + assert.Equal(t, strings.TrimSpace(want), strings.TrimSpace(val)) + } + }) + } +} diff --git a/go/internal/forked/kyaml/kio/kio.go b/go/internal/forked/kyaml/kio/kio.go new file mode 100644 index 000000000..ec9d590a4 --- /dev/null +++ b/go/internal/forked/kyaml/kio/kio.go @@ -0,0 +1,442 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +// Package kio contains low-level libraries for reading, modifying and writing +// Resource Configuration and packages. +package kio + +import ( + "fmt" + "strconv" + + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/errors" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/kio/kioutil" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" +) + +// Reader reads ResourceNodes. Analogous to io.Reader. +type Reader interface { + Read() ([]*yaml.RNode, error) +} + +// ResourceNodeSlice is a collection of ResourceNodes. +// While ResourceNodeSlice has no inherent constraints on ordering or uniqueness, specific +// Readers, Filters or Writers may have constraints. +type ResourceNodeSlice []*yaml.RNode + +var _ Reader = ResourceNodeSlice{} + +func (o ResourceNodeSlice) Read() ([]*yaml.RNode, error) { + return o, nil +} + +// Writer writes ResourceNodes. Analogous to io.Writer. +type Writer interface { + Write([]*yaml.RNode) error +} + +// WriterFunc implements a Writer as a function. +type WriterFunc func([]*yaml.RNode) error + +func (fn WriterFunc) Write(o []*yaml.RNode) error { + return fn(o) +} + +// ReaderWriter implements both Reader and Writer interfaces +type ReaderWriter interface { + Reader + Writer +} + +// Filter modifies a collection of Resource Configuration by returning the modified slice. +// When possible, Filters should be serializable to yaml so that they can be described +// as either data or code. +// +// Analogous to http://www.linfo.org/filters.html +type Filter interface { + Filter([]*yaml.RNode) ([]*yaml.RNode, error) +} + +// TrackableFilter is an extension of Filter which is also capable of tracking +// which fields were mutated by the filter. +type TrackableFilter interface { + Filter + WithMutationTracker(func(key, value, tag string, node *yaml.RNode)) +} + +// FilterFunc implements a Filter as a function. +type FilterFunc func([]*yaml.RNode) ([]*yaml.RNode, error) + +func (fn FilterFunc) Filter(o []*yaml.RNode) ([]*yaml.RNode, error) { + return fn(o) +} + +// Pipeline reads Resource Configuration from a set of Inputs, applies some +// transformation filters, and writes the results to a set of Outputs. +// +// Analogous to http://www.linfo.org/pipes.html +type Pipeline struct { + // Inputs provide sources for Resource Configuration to be read. + Inputs []Reader `yaml:"inputs,omitempty"` + + // Filters are transformations applied to the Resource Configuration. + // They are applied in the order they are specified. + // Analogous to http://www.linfo.org/filters.html + Filters []Filter `yaml:"filters,omitempty"` + + // Outputs are where the transformed Resource Configuration is written. + Outputs []Writer `yaml:"outputs,omitempty"` + + // ContinueOnEmptyResult configures what happens when a filter in the pipeline + // returns an empty result. + // If it is false (default), subsequent filters will be skipped and the result + // will be returned immediately. This is useful as an optimization when you + // know that subsequent filters will not alter the empty result. + // If it is true, the empty result will be provided as input to the next + // filter in the list. This is useful when subsequent functions in the + // pipeline may generate new resources. + ContinueOnEmptyResult bool `yaml:"continueOnEmptyResult,omitempty"` +} + +// Execute executes each step in the sequence, returning immediately after encountering +// any error as part of the Pipeline. +func (p Pipeline) Execute() error { + return p.ExecuteWithCallback(nil) +} + +// PipelineExecuteCallbackFunc defines a callback function that will be called each time a step in the pipeline succeeds. +type PipelineExecuteCallbackFunc = func(op Filter) + +// ExecuteWithCallback executes each step in the sequence, returning immediately after encountering +// any error as part of the Pipeline. The callback will be called each time a step succeeds. +func (p Pipeline) ExecuteWithCallback(callback PipelineExecuteCallbackFunc) error { + var result []*yaml.RNode + + // read from the inputs + for _, i := range p.Inputs { + nodes, err := i.Read() + if err != nil { + return errors.Wrap(err) + } + result = append(result, nodes...) + } + + // apply operations + for i := range p.Filters { + // Not all RNodes passed through kio.Pipeline have metadata nor should + // they all be required to. + nodeAnnos, err := PreprocessResourcesForInternalAnnotationMigration(result) + if err != nil { + return err + } + + op := p.Filters[i] + if callback != nil { + callback(op) + } + result, err = op.Filter(result) + // TODO (issue 2872): This len(result) == 0 should be removed and empty result list should be + // handled by outputs. However currently some writer like LocalPackageReadWriter + // will clear the output directory and which will cause unpredictable results + if len(result) == 0 && !p.ContinueOnEmptyResult || err != nil { + return errors.Wrap(err) + } + + // If either the internal annotations for path, index, and id OR the legacy + // annotations for path, index, and id are changed, we have to update the other. + err = ReconcileInternalAnnotations(result, nodeAnnos) + if err != nil { + return err + } + } + + // write to the outputs + for _, o := range p.Outputs { + if err := o.Write(result); err != nil { + return errors.Wrap(err) + } + } + return nil +} + +// FilterAll runs the yaml.Filter against all inputs +func FilterAll(filter yaml.Filter) Filter { + return FilterFunc(func(nodes []*yaml.RNode) ([]*yaml.RNode, error) { + for i := range nodes { + _, err := filter.Filter(nodes[i]) + if err != nil { + return nil, errors.Wrap(err) + } + } + return nodes, nil + }) +} + +// PreprocessResourcesForInternalAnnotationMigration returns a mapping from id to all +// internal annotations, so that we can use it to reconcile the annotations +// later. This is necessary because currently both internal-prefixed annotations +// and legacy annotations are currently supported, and a change to one must be +// reflected in the other if needed. +func PreprocessResourcesForInternalAnnotationMigration(result []*yaml.RNode) (map[string]map[string]string, error) { + idToAnnosMap := make(map[string]map[string]string) + for i := range result { + idStr := strconv.Itoa(i) + err := result[i].PipeE(yaml.SetAnnotation(kioutil.InternalAnnotationsMigrationResourceIDAnnotation, idStr)) + if err != nil { + return nil, err + } + idToAnnosMap[idStr] = kioutil.GetInternalAnnotations(result[i]) + if err = kioutil.CopyLegacyAnnotations(result[i]); err != nil { + return nil, err + } + meta, _ := result[i].GetMeta() + if err = checkMismatchedAnnos(meta.Annotations); err != nil { + return nil, err + } + } + return idToAnnosMap, nil +} + +func checkMismatchedAnnos(annotations map[string]string) error { + path := annotations[kioutil.PathAnnotation] + index := annotations[kioutil.IndexAnnotation] + id := annotations[kioutil.IdAnnotation] + + legacyPath := annotations[kioutil.LegacyPathAnnotation] + legacyIndex := annotations[kioutil.LegacyIndexAnnotation] + legacyId := annotations[kioutil.LegacyIdAnnotation] + + // if prior to running the functions, the legacy and internal annotations differ, + // throw an error as we cannot infer the user's intent. + if path != "" && legacyPath != "" && path != legacyPath { + return fmt.Errorf("resource input to function has mismatched legacy and internal path annotations") + } + if index != "" && legacyIndex != "" && index != legacyIndex { + return fmt.Errorf("resource input to function has mismatched legacy and internal index annotations") + } + if id != "" && legacyId != "" && id != legacyId { + return fmt.Errorf("resource input to function has mismatched legacy and internal id annotations") + } + return nil +} + +type nodeAnnotations struct { + path string + index string + id string +} + +// ReconcileInternalAnnotations reconciles the annotation format for path, index and id annotations. +// It will ensure the output annotation format matches the format in the input. e.g. if the input +// format uses the legacy format and the output will be converted to the legacy format if it's not. +func ReconcileInternalAnnotations(result []*yaml.RNode, nodeAnnosMap map[string]map[string]string) error { + useInternal, useLegacy, err := determineAnnotationsFormat(nodeAnnosMap) + if err != nil { + return err + } + + for i := range result { + // if only one annotation is set, set the other. + err = missingInternalOrLegacyAnnotations(result[i]) + if err != nil { + return err + } + // we must check to see if the function changed either the new internal annotations + // or the old legacy annotations. If one is changed, the change must be reflected + // in the other. + err = checkAnnotationsAltered(result[i], nodeAnnosMap) + if err != nil { + return err + } + // We invoke determineAnnotationsFormat to find out if the original annotations + // use the internal or (and) the legacy format. We format the resources to + // make them consistent with original format. + err = formatInternalAnnotations(result[i], useInternal, useLegacy) + if err != nil { + return err + } + // if the annotations are still somehow out of sync, throw an error + meta, _ := result[i].GetMeta() + err = checkMismatchedAnnos(meta.Annotations) + if err != nil { + return err + } + + if _, err = result[i].Pipe(yaml.ClearAnnotation(kioutil.InternalAnnotationsMigrationResourceIDAnnotation)); err != nil { + return err + } + } + return nil +} + +// determineAnnotationsFormat determines if the resources are using one of the internal and legacy annotation format or both of them. +func determineAnnotationsFormat(nodeAnnosMap map[string]map[string]string) (useInternal, useLegacy bool, err error) { + if len(nodeAnnosMap) == 0 { + return true, true, nil + } + + var internal, legacy *bool + for _, annos := range nodeAnnosMap { + _, foundPath := annos[kioutil.PathAnnotation] + _, foundIndex := annos[kioutil.IndexAnnotation] + _, foundId := annos[kioutil.IdAnnotation] + _, foundLegacyPath := annos[kioutil.LegacyPathAnnotation] + _, foundLegacyIndex := annos[kioutil.LegacyIndexAnnotation] + _, foundLegacyId := annos[kioutil.LegacyIdAnnotation] + + if !(foundPath || foundIndex || foundId || foundLegacyPath || foundLegacyIndex || foundLegacyId) { + continue + } + + foundOneOf := foundPath || foundIndex || foundId + if internal == nil { + f := foundOneOf + internal = &f + } + if (foundOneOf && !*internal) || (!foundOneOf && *internal) { + err = fmt.Errorf("the annotation formatting in the input resources is not consistent") + return + } + + foundOneOf = foundLegacyPath || foundLegacyIndex || foundLegacyId + if legacy == nil { + f := foundOneOf + legacy = &f + } + if (foundOneOf && !*legacy) || (!foundOneOf && *legacy) { + err = fmt.Errorf("the annotation formatting in the input resources is not consistent") + return + } + } + if internal != nil { + useInternal = *internal + } + if legacy != nil { + useLegacy = *legacy + } + return +} + +func missingInternalOrLegacyAnnotations(rn *yaml.RNode) error { + if err := missingInternalOrLegacyAnnotation(rn, kioutil.PathAnnotation, kioutil.LegacyPathAnnotation); err != nil { + return err + } + if err := missingInternalOrLegacyAnnotation(rn, kioutil.IndexAnnotation, kioutil.LegacyIndexAnnotation); err != nil { + return err + } + if err := missingInternalOrLegacyAnnotation(rn, kioutil.IdAnnotation, kioutil.LegacyIdAnnotation); err != nil { + return err + } + return nil +} + +func missingInternalOrLegacyAnnotation(rn *yaml.RNode, newKey string, legacyKey string) error { + meta, _ := rn.GetMeta() + annotations := meta.Annotations + value := annotations[newKey] + legacyValue := annotations[legacyKey] + + if value == "" && legacyValue == "" { + // do nothing + return nil + } + + if value == "" { + // new key is not set, copy from legacy key + if err := rn.PipeE(yaml.SetAnnotation(newKey, legacyValue)); err != nil { + return err + } + } else if legacyValue == "" { + // legacy key is not set, copy from new key + if err := rn.PipeE(yaml.SetAnnotation(legacyKey, value)); err != nil { + return err + } + } + return nil +} + +func checkAnnotationsAltered(rn *yaml.RNode, nodeAnnosMap map[string]map[string]string) error { + meta, _ := rn.GetMeta() + annotations := meta.Annotations + // get the resource's current path, index, and ids from the new annotations + internal := nodeAnnotations{ + path: annotations[kioutil.PathAnnotation], + index: annotations[kioutil.IndexAnnotation], + id: annotations[kioutil.IdAnnotation], + } + + // get the resource's current path, index, and ids from the legacy annotations + legacy := nodeAnnotations{ + path: annotations[kioutil.LegacyPathAnnotation], + index: annotations[kioutil.LegacyIndexAnnotation], + id: annotations[kioutil.LegacyIdAnnotation], + } + + rid := annotations[kioutil.InternalAnnotationsMigrationResourceIDAnnotation] + originalAnnotations, found := nodeAnnosMap[rid] + if !found { + return nil + } + originalPath, found := originalAnnotations[kioutil.PathAnnotation] + if !found { + originalPath = originalAnnotations[kioutil.LegacyPathAnnotation] + } + if originalPath != "" { + if originalPath != internal.path && originalPath != legacy.path && internal.path != legacy.path { + return fmt.Errorf("resource input to function has mismatched legacy and internal path annotations") + } else if originalPath != internal.path { + if _, err := rn.Pipe(yaml.SetAnnotation(kioutil.LegacyPathAnnotation, internal.path)); err != nil { + return err + } + } else if originalPath != legacy.path { + if _, err := rn.Pipe(yaml.SetAnnotation(kioutil.PathAnnotation, legacy.path)); err != nil { + return err + } + } + } + + originalIndex, found := originalAnnotations[kioutil.IndexAnnotation] + if !found { + originalIndex = originalAnnotations[kioutil.LegacyIndexAnnotation] + } + if originalIndex != "" { + if originalIndex != internal.index && originalIndex != legacy.index && internal.index != legacy.index { + return fmt.Errorf("resource input to function has mismatched legacy and internal index annotations") + } else if originalIndex != internal.index { + if _, err := rn.Pipe(yaml.SetAnnotation(kioutil.LegacyIndexAnnotation, internal.index)); err != nil { + return err + } + } else if originalIndex != legacy.index { + if _, err := rn.Pipe(yaml.SetAnnotation(kioutil.IndexAnnotation, legacy.index)); err != nil { + return err + } + } + } + return nil +} + +func formatInternalAnnotations(rn *yaml.RNode, useInternal, useLegacy bool) error { + if !useInternal { + if err := rn.PipeE(yaml.ClearAnnotation(kioutil.IdAnnotation)); err != nil { + return err + } + if err := rn.PipeE(yaml.ClearAnnotation(kioutil.PathAnnotation)); err != nil { + return err + } + if err := rn.PipeE(yaml.ClearAnnotation(kioutil.IndexAnnotation)); err != nil { + return err + } + } + if !useLegacy { + if err := rn.PipeE(yaml.ClearAnnotation(kioutil.LegacyIdAnnotation)); err != nil { + return err + } + if err := rn.PipeE(yaml.ClearAnnotation(kioutil.LegacyPathAnnotation)); err != nil { + return err + } + if err := rn.PipeE(yaml.ClearAnnotation(kioutil.LegacyIndexAnnotation)); err != nil { + return err + } + } + return nil +} diff --git a/go/internal/forked/kyaml/kio/kio_test.go b/go/internal/forked/kyaml/kio/kio_test.go new file mode 100644 index 000000000..362418d56 --- /dev/null +++ b/go/internal/forked/kyaml/kio/kio_test.go @@ -0,0 +1,888 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package kio_test + +import ( + "bytes" + "reflect" + "strings" + "testing" + + "github.com/stretchr/testify/assert" + "github.com/stretchr/testify/mock" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/kio" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/kio/kioutil" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" +) + +func TestPipe(t *testing.T) { + p := kio.Pipeline{ + Inputs: []kio.Reader{}, + Filters: []kio.Filter{}, + Outputs: []kio.Writer{}, + } + + err := p.Execute() + if !assert.NoError(t, err) { + assert.FailNow(t, err.Error()) + } +} + +type mockCallback struct { + mock.Mock +} + +func (c *mockCallback) Callback(op kio.Filter) { + c.Called(op) +} + +func TestPipelineWithCallback(t *testing.T) { + input := kio.ResourceNodeSlice{yaml.MakeNullNode()} + noopFilter1 := func(nodes []*yaml.RNode) ([]*yaml.RNode, error) { + return nodes, nil + } + noopFilter2 := func(nodes []*yaml.RNode) ([]*yaml.RNode, error) { + return nodes, nil + } + filters := []kio.Filter{ + kio.FilterFunc(noopFilter1), + kio.FilterFunc(noopFilter2), + } + p := kio.Pipeline{ + Inputs: []kio.Reader{input}, + Filters: filters, + Outputs: []kio.Writer{}, + } + + callback := mockCallback{} + // setup expectations. `Times` means the function is called no more than `times`. + callback.On("Callback", mock.Anything).Times(len(filters)) + + err := p.ExecuteWithCallback(callback.Callback) + + if !assert.NoError(t, err) { + assert.FailNow(t, err.Error()) + } + + callback.AssertNumberOfCalls(t, "Callback", len(filters)) + + // assert filters are called in the order they are defined. + for i, filter := range filters { + assert.Equal( + t, + reflect.ValueOf(callback.Calls[i].Arguments[0]).Pointer(), + reflect.ValueOf(filter).Pointer(), + ) + } +} + +func TestEmptyInput(t *testing.T) { + actual := &bytes.Buffer{} + output := kio.ByteWriter{ + Sort: true, + WrappingKind: kio.ResourceListKind, + WrappingAPIVersion: kio.ResourceListAPIVersion, + } + output.Writer = actual + + p := kio.Pipeline{ + Outputs: []kio.Writer{output}, + } + + err := p.Execute() + if err != nil { + t.Fatal(err) + } + + expected := ` +apiVersion: config.kubernetes.io/v1 +kind: ResourceList +items: [] +` + + if !assert.Equal(t, + strings.TrimSpace(expected), strings.TrimSpace(actual.String())) { + t.FailNow() + } +} + +func TestEmptyInputWithFilter(t *testing.T) { + actual := &bytes.Buffer{} + output := kio.ByteWriter{ + Sort: true, + WrappingKind: kio.ResourceListKind, + WrappingAPIVersion: kio.ResourceListAPIVersion, + } + output.Writer = actual + + filters := []kio.Filter{ + kio.FilterFunc(func(nodes []*yaml.RNode) ([]*yaml.RNode, error) { + nodes = append(nodes, yaml.NewMapRNode(&map[string]string{ + "foo": "bar", + })) + return nodes, nil + }), + kio.FilterFunc(func(nodes []*yaml.RNode) ([]*yaml.RNode, error) { return nodes, nil }), + } + + p := kio.Pipeline{ + Outputs: []kio.Writer{output}, + Filters: filters, + } + + err := p.Execute() + if err != nil { + t.Fatal(err) + } + + expected := ` +apiVersion: config.kubernetes.io/v1 +kind: ResourceList +items: +- foo: bar +` + + if !assert.Equal(t, + strings.TrimSpace(expected), strings.TrimSpace(actual.String())) { + t.FailNow() + } +} + +func TestContinueOnEmptyBehavior(t *testing.T) { + cases := map[string]struct { + continueOnEmptyResult bool + expected string + }{ + "quit on empty": {continueOnEmptyResult: false, expected: ""}, + "continue on empty": {continueOnEmptyResult: true, expected: "foo: bar"}, + } + for _, tc := range cases { + actual := &bytes.Buffer{} + output := kio.ByteWriter{Writer: actual} + + generatorFunc := kio.FilterFunc(func(nodes []*yaml.RNode) ([]*yaml.RNode, error) { + nodes = append(nodes, yaml.NewMapRNode(&map[string]string{ + "foo": "bar", + })) + return nodes, nil + }) + emptyFunc := kio.FilterFunc(func(nodes []*yaml.RNode) ([]*yaml.RNode, error) { return nodes, nil }) + + p := kio.Pipeline{ + Outputs: []kio.Writer{output}, + Filters: []kio.Filter{emptyFunc, generatorFunc}, + ContinueOnEmptyResult: tc.continueOnEmptyResult, + } + + err := p.Execute() + if err != nil { + t.Fatal(err) + } + + if !assert.Equal(t, + tc.expected, strings.TrimSpace(actual.String())) { + t.Fail() + } + } +} + +func TestLegacyAnnotationReconciliation(t *testing.T) { + noopFilter1 := func(nodes []*yaml.RNode) ([]*yaml.RNode, error) { + return nodes, nil + } + noopFilter2 := func(nodes []*yaml.RNode) ([]*yaml.RNode, error) { + return nodes, nil + } + changeInternalAnnos := func(nodes []*yaml.RNode) ([]*yaml.RNode, error) { + for _, rn := range nodes { + if err := rn.PipeE(yaml.SetAnnotation(kioutil.PathAnnotation, "new")); err != nil { + return nil, err + } + if err := rn.PipeE(yaml.SetAnnotation(kioutil.IndexAnnotation, "new")); err != nil { + return nil, err + } + } + return nodes, nil + } + changeLegacyAnnos := func(nodes []*yaml.RNode) ([]*yaml.RNode, error) { + for _, rn := range nodes { + if err := rn.PipeE(yaml.SetAnnotation(kioutil.LegacyPathAnnotation, "new")); err != nil { + return nil, err + } + if err := rn.PipeE(yaml.SetAnnotation(kioutil.LegacyIndexAnnotation, "new")); err != nil { + return nil, err + } + } + return nodes, nil + } + changeBothPathAnnosMatch := func(nodes []*yaml.RNode) ([]*yaml.RNode, error) { + for _, rn := range nodes { + if err := rn.PipeE(yaml.SetAnnotation(kioutil.LegacyPathAnnotation, "new")); err != nil { + return nil, err + } + if err := rn.PipeE(yaml.SetAnnotation(kioutil.PathAnnotation, "new")); err != nil { + return nil, err + } + } + return nodes, nil + } + changeBothPathAnnosMismatch := func(nodes []*yaml.RNode) ([]*yaml.RNode, error) { + for _, rn := range nodes { + if err := rn.PipeE(yaml.SetAnnotation(kioutil.LegacyPathAnnotation, "foo")); err != nil { + return nil, err + } + if err := rn.PipeE(yaml.SetAnnotation(kioutil.PathAnnotation, "bar")); err != nil { + return nil, err + } + } + return nodes, nil + } + + noops := []kio.Filter{ + kio.FilterFunc(noopFilter1), + kio.FilterFunc(noopFilter2), + } + internal := []kio.Filter{kio.FilterFunc(changeInternalAnnos)} + legacy := []kio.Filter{kio.FilterFunc(changeLegacyAnnos)} + changeBothMatch := []kio.Filter{kio.FilterFunc(changeBothPathAnnosMatch), kio.FilterFunc(noopFilter1)} + changeBothMismatch := []kio.Filter{kio.FilterFunc(changeBothPathAnnosMismatch), kio.FilterFunc(noopFilter1)} + + testCases := map[string]struct { + input string + filters []kio.Filter + expected string + expectedErr string + }{ + // the orchestrator should copy the legacy annotations to the new + // annotations + "legacy annotations only": { + input: `apiVersion: v1 +kind: ConfigMap +metadata: + name: ports-from + annotations: + config.kubernetes.io/path: 'configmap.yaml' + config.kubernetes.io/index: '0' +data: + grpcPort: 8080 +--- +apiVersion: v1 +kind: ConfigMap +metadata: + name: ports-to + annotations: + config.kubernetes.io/path: "configmap.yaml" + config.kubernetes.io/index: '1' +data: + grpcPort: 8081 +`, + filters: noops, + expected: `apiVersion: v1 +kind: ConfigMap +metadata: + name: ports-from + annotations: + config.kubernetes.io/path: 'configmap.yaml' + config.kubernetes.io/index: '0' +data: + grpcPort: 8080 +--- +apiVersion: v1 +kind: ConfigMap +metadata: + name: ports-to + annotations: + config.kubernetes.io/path: "configmap.yaml" + config.kubernetes.io/index: '1' +data: + grpcPort: 8081 +`, + }, + // the orchestrator should copy the new annotations to the + // legacy annotations + "new annotations only": { + input: `apiVersion: v1 +kind: ConfigMap +metadata: + name: ports-from + annotations: + internal.config.kubernetes.io/path: 'configmap.yaml' + internal.config.kubernetes.io/index: '0' +data: + grpcPort: 8080 +--- +apiVersion: v1 +kind: ConfigMap +metadata: + name: ports-to + annotations: + internal.config.kubernetes.io/path: "configmap.yaml" + internal.config.kubernetes.io/index: '1' +data: + grpcPort: 8081 +`, + filters: noops, + expected: `apiVersion: v1 +kind: ConfigMap +metadata: + name: ports-from + annotations: + internal.config.kubernetes.io/path: 'configmap.yaml' + internal.config.kubernetes.io/index: '0' +data: + grpcPort: 8080 +--- +apiVersion: v1 +kind: ConfigMap +metadata: + name: ports-to + annotations: + internal.config.kubernetes.io/path: "configmap.yaml" + internal.config.kubernetes.io/index: '1' +data: + grpcPort: 8081 +`, + }, + // the orchestrator should detect that the legacy annotations + // have been changed by the function + "change only legacy annotations": { + input: `apiVersion: v1 +kind: ConfigMap +metadata: + name: ports-from + annotations: + config.kubernetes.io/path: 'configmap.yaml' + config.kubernetes.io/index: '0' +data: + grpcPort: 8080 +--- +apiVersion: v1 +kind: ConfigMap +metadata: + name: ports-to + annotations: + config.kubernetes.io/path: "configmap.yaml" + config.kubernetes.io/index: '1' +data: + grpcPort: 8081 +`, + filters: legacy, + expected: `apiVersion: v1 +kind: ConfigMap +metadata: + name: ports-from + annotations: + config.kubernetes.io/path: 'new' + config.kubernetes.io/index: 'new' +data: + grpcPort: 8080 +--- +apiVersion: v1 +kind: ConfigMap +metadata: + name: ports-to + annotations: + config.kubernetes.io/path: "new" + config.kubernetes.io/index: 'new' +data: + grpcPort: 8081 +`, + }, + // the orchestrator should detect that the new internal annotations + // have been changed by the function + "change only internal annotations": { + input: `apiVersion: v1 +kind: ConfigMap +metadata: + name: ports-from + annotations: + internal.config.kubernetes.io/path: 'configmap.yaml' + internal.config.kubernetes.io/index: '0' +data: + grpcPort: 8080 +--- +apiVersion: v1 +kind: ConfigMap +metadata: + name: ports-to + annotations: + internal.config.kubernetes.io/path: "configmap.yaml" + internal.config.kubernetes.io/index: '1' +data: + grpcPort: 8081 +`, + filters: internal, + expected: `apiVersion: v1 +kind: ConfigMap +metadata: + name: ports-from + annotations: + internal.config.kubernetes.io/path: 'new' + internal.config.kubernetes.io/index: 'new' +data: + grpcPort: 8080 +--- +apiVersion: v1 +kind: ConfigMap +metadata: + name: ports-to + annotations: + internal.config.kubernetes.io/path: "new" + internal.config.kubernetes.io/index: 'new' +data: + grpcPort: 8081 +`, + }, + // the orchestrator should detect that the legacy annotations + // have been changed by the function + "change only internal annotations while input is legacy annotations": { + input: `apiVersion: v1 +kind: ConfigMap +metadata: + name: ports-from + annotations: + config.kubernetes.io/path: 'configmap.yaml' + config.kubernetes.io/index: '0' +data: + grpcPort: 8080 +--- +apiVersion: v1 +kind: ConfigMap +metadata: + name: ports-to + annotations: + config.kubernetes.io/path: "configmap.yaml" + config.kubernetes.io/index: '1' +data: + grpcPort: 8081 +`, + filters: internal, + expected: `apiVersion: v1 +kind: ConfigMap +metadata: + name: ports-from + annotations: + config.kubernetes.io/path: 'new' + config.kubernetes.io/index: 'new' +data: + grpcPort: 8080 +--- +apiVersion: v1 +kind: ConfigMap +metadata: + name: ports-to + annotations: + config.kubernetes.io/path: "new" + config.kubernetes.io/index: 'new' +data: + grpcPort: 8081 +`, + }, + // the orchestrator should detect that the new internal annotations + // have been changed by the function + "change only legacy annotations while input is internal annotations": { + input: `apiVersion: v1 +kind: ConfigMap +metadata: + name: ports-from + annotations: + internal.config.kubernetes.io/path: 'configmap.yaml' + internal.config.kubernetes.io/index: '0' +data: + grpcPort: 8080 +--- +apiVersion: v1 +kind: ConfigMap +metadata: + name: ports-to + annotations: + internal.config.kubernetes.io/path: "configmap.yaml" + internal.config.kubernetes.io/index: '1' +data: + grpcPort: 8081 +`, + filters: legacy, + expected: `apiVersion: v1 +kind: ConfigMap +metadata: + name: ports-from + annotations: + internal.config.kubernetes.io/path: 'new' + internal.config.kubernetes.io/index: 'new' +data: + grpcPort: 8080 +--- +apiVersion: v1 +kind: ConfigMap +metadata: + name: ports-to + annotations: + internal.config.kubernetes.io/path: "new" + internal.config.kubernetes.io/index: 'new' +data: + grpcPort: 8081 +`, + }, + // the orchestrator should detect that the legacy annotations + // have been changed by the function + "change only legacy annotations while input has both": { + input: `apiVersion: v1 +kind: ConfigMap +metadata: + name: ports-from + annotations: + config.kubernetes.io/path: 'configmap.yaml' + config.kubernetes.io/index: '0' + internal.config.kubernetes.io/path: 'configmap.yaml' + internal.config.kubernetes.io/index: '0' +data: + grpcPort: 8080 +--- +apiVersion: v1 +kind: ConfigMap +metadata: + name: ports-to + annotations: + config.kubernetes.io/path: "configmap.yaml" + config.kubernetes.io/index: '1' + internal.config.kubernetes.io/path: 'configmap.yaml' + internal.config.kubernetes.io/index: '1' +data: + grpcPort: 8081 +`, + filters: legacy, + expected: `apiVersion: v1 +kind: ConfigMap +metadata: + name: ports-from + annotations: + config.kubernetes.io/path: 'new' + config.kubernetes.io/index: 'new' + internal.config.kubernetes.io/path: 'new' + internal.config.kubernetes.io/index: 'new' +data: + grpcPort: 8080 +--- +apiVersion: v1 +kind: ConfigMap +metadata: + name: ports-to + annotations: + config.kubernetes.io/path: "new" + config.kubernetes.io/index: 'new' + internal.config.kubernetes.io/path: 'new' + internal.config.kubernetes.io/index: 'new' +data: + grpcPort: 8081 +`, + }, + // the orchestrator should detect that the new internal annotations + // have been changed by the function + "change only internal annotations while input has both": { + input: `apiVersion: v1 +kind: ConfigMap +metadata: + name: ports-from + annotations: + config.kubernetes.io/path: "configmap.yaml" + config.kubernetes.io/index: '0' + internal.config.kubernetes.io/path: 'configmap.yaml' + internal.config.kubernetes.io/index: '0' +data: + grpcPort: 8080 +--- +apiVersion: v1 +kind: ConfigMap +metadata: + name: ports-to + annotations: + config.kubernetes.io/path: "configmap.yaml" + config.kubernetes.io/index: '1' + internal.config.kubernetes.io/path: "configmap.yaml" + internal.config.kubernetes.io/index: '1' +data: + grpcPort: 8081 +`, + filters: internal, + expected: `apiVersion: v1 +kind: ConfigMap +metadata: + name: ports-from + annotations: + config.kubernetes.io/path: "new" + config.kubernetes.io/index: 'new' + internal.config.kubernetes.io/path: 'new' + internal.config.kubernetes.io/index: 'new' +data: + grpcPort: 8080 +--- +apiVersion: v1 +kind: ConfigMap +metadata: + name: ports-to + annotations: + config.kubernetes.io/path: "new" + config.kubernetes.io/index: 'new' + internal.config.kubernetes.io/path: "new" + internal.config.kubernetes.io/index: 'new' +data: + grpcPort: 8081 +`, + }, + // the orchestrator should detect that the new internal annotations + // have been changed by the function + "change both to matching value while input has both": { + input: `apiVersion: v1 +kind: ConfigMap +metadata: + name: ports-from + annotations: + config.kubernetes.io/path: "configmap.yaml" + config.kubernetes.io/index: '0' + internal.config.kubernetes.io/path: 'configmap.yaml' + internal.config.kubernetes.io/index: '0' +data: + grpcPort: 8080 +--- +apiVersion: v1 +kind: ConfigMap +metadata: + name: ports-to + annotations: + config.kubernetes.io/path: "configmap.yaml" + config.kubernetes.io/index: '1' + internal.config.kubernetes.io/path: "configmap.yaml" + internal.config.kubernetes.io/index: '1' +data: + grpcPort: 8081 +`, + filters: changeBothMatch, + expected: `apiVersion: v1 +kind: ConfigMap +metadata: + name: ports-from + annotations: + config.kubernetes.io/path: "new" + config.kubernetes.io/index: '0' + internal.config.kubernetes.io/path: 'new' + internal.config.kubernetes.io/index: '0' +data: + grpcPort: 8080 +--- +apiVersion: v1 +kind: ConfigMap +metadata: + name: ports-to + annotations: + config.kubernetes.io/path: "new" + config.kubernetes.io/index: '1' + internal.config.kubernetes.io/path: "new" + internal.config.kubernetes.io/index: '1' +data: + grpcPort: 8081 +`, + }, + // the orchestrator should detect that the new internal annotations + // have been changed by the function + "change both to matching value while input is legacy": { + input: `apiVersion: v1 +kind: ConfigMap +metadata: + name: ports-from + annotations: + config.kubernetes.io/path: "configmap.yaml" + config.kubernetes.io/index: '0' +data: + grpcPort: 8080 +--- +apiVersion: v1 +kind: ConfigMap +metadata: + name: ports-to + annotations: + config.kubernetes.io/path: "configmap.yaml" + config.kubernetes.io/index: '1' +data: + grpcPort: 8081 +`, + filters: changeBothMatch, + expected: `apiVersion: v1 +kind: ConfigMap +metadata: + name: ports-from + annotations: + config.kubernetes.io/path: "new" + config.kubernetes.io/index: '0' +data: + grpcPort: 8080 +--- +apiVersion: v1 +kind: ConfigMap +metadata: + name: ports-to + annotations: + config.kubernetes.io/path: "new" + config.kubernetes.io/index: '1' +data: + grpcPort: 8081 +`, + }, + // the orchestrator should detect that the new internal annotations + // have been changed by the function + "change both to matching value while input is internal": { + input: `apiVersion: v1 +kind: ConfigMap +metadata: + name: ports-from + annotations: + internal.config.kubernetes.io/path: 'configmap.yaml' + internal.config.kubernetes.io/index: '0' +data: + grpcPort: 8080 +--- +apiVersion: v1 +kind: ConfigMap +metadata: + name: ports-to + annotations: + internal.config.kubernetes.io/path: "configmap.yaml" + internal.config.kubernetes.io/index: '1' +data: + grpcPort: 8081 +`, + filters: changeBothMatch, + expected: `apiVersion: v1 +kind: ConfigMap +metadata: + name: ports-from + annotations: + internal.config.kubernetes.io/path: 'new' + internal.config.kubernetes.io/index: '0' +data: + grpcPort: 8080 +--- +apiVersion: v1 +kind: ConfigMap +metadata: + name: ports-to + annotations: + internal.config.kubernetes.io/path: "new" + internal.config.kubernetes.io/index: '1' +data: + grpcPort: 8081 +`, + }, + // the function changes both the legacy and new path annotation, and they mismatch, + // so we should get an error + "change both but mismatch while input is legacy": { + input: `apiVersion: v1 +kind: ConfigMap +metadata: + name: ports-from + annotations: + config.kubernetes.io/path: 'configmap.yaml' + config.kubernetes.io/index: '0' +data: + grpcPort: 8080 +--- +apiVersion: v1 +kind: ConfigMap +metadata: + name: ports-to + annotations: + config.kubernetes.io/path: "configmap.yaml" + config.kubernetes.io/index: '1' +data: + grpcPort: 8081 +`, + filters: changeBothMismatch, + expectedErr: "resource input to function has mismatched legacy and internal path annotations", + }, + // the function changes both the legacy and new path annotation, and they mismatch, + // so we should get an error + "change both but mismatch while input is internal": { + input: `apiVersion: v1 +kind: ConfigMap +metadata: + name: ports-from + annotations: + internal.config.kubernetes.io/path: "configmap.yaml" + internal.config.kubernetes.io/index: '0' +data: + grpcPort: 8080 +--- +apiVersion: v1 +kind: ConfigMap +metadata: + name: ports-to + annotations: + internal.config.kubernetes.io/path: "configmap.yaml" + internal.config.kubernetes.io/index: '1' +data: + grpcPort: 8081 +`, + filters: changeBothMismatch, + expectedErr: "resource input to function has mismatched legacy and internal path annotations", + }, + // the function changes both the legacy and new path annotation, and they mismatch, + // so we should get an error + "change both but mismatch while input has both": { + input: `apiVersion: v1 +kind: ConfigMap +metadata: + name: ports-from + annotations: + config.kubernetes.io/path: 'configmap.yaml' + config.kubernetes.io/index: '0' + config.k8s.io/id: '1' + internal.config.kubernetes.io/path: "configmap.yaml" + internal.config.kubernetes.io/index: '0' +data: + grpcPort: 8080 +--- +apiVersion: v1 +kind: ConfigMap +metadata: + name: ports-to + annotations: + config.kubernetes.io/path: "configmap.yaml" + config.kubernetes.io/index: '1' + config.k8s.io/id: '2' + internal.config.kubernetes.io/path: "configmap.yaml" + internal.config.kubernetes.io/index: '1' +data: + grpcPort: 8081 +`, + filters: changeBothMismatch, + expectedErr: "resource input to function has mismatched legacy and internal path annotations", + }, + } + + for tn, tc := range testCases { + t.Run(tn, func(t *testing.T) { + var out bytes.Buffer + input := kio.ByteReadWriter{ + Reader: bytes.NewBufferString(tc.input), + Writer: &out, + OmitReaderAnnotations: true, + KeepReaderAnnotations: true, + } + p := kio.Pipeline{ + Inputs: []kio.Reader{&input}, + Filters: tc.filters, + Outputs: []kio.Writer{&input}, + } + + err := p.Execute() + if tc.expectedErr == "" { + assert.NoError(t, err) + assert.Equal(t, tc.expected, out.String()) + } else { + assert.Error(t, err) + assert.Equal(t, tc.expectedErr, err.Error()) + } + + }) + } +} diff --git a/go/internal/forked/kyaml/kio/kioutil/kioutil.go b/go/internal/forked/kyaml/kio/kioutil/kioutil.go new file mode 100644 index 000000000..992306f7f --- /dev/null +++ b/go/internal/forked/kyaml/kio/kioutil/kioutil.go @@ -0,0 +1,420 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package kioutil + +import ( + "fmt" + "path" + "sort" + "strconv" + "strings" + + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/errors" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" +) + +type AnnotationKey = string + +const ( + // internalPrefix is the prefix given to internal annotations that are used + // internally by the orchestrator + internalPrefix string = "internal.config.kubernetes.io/" + + // IndexAnnotation records the index of a specific resource in a file or input stream. + IndexAnnotation AnnotationKey = internalPrefix + "index" + + // PathAnnotation records the path to the file the Resource was read from + PathAnnotation AnnotationKey = internalPrefix + "path" + + // SeqIndentAnnotation records the sequence nodes indentation of the input resource + SeqIndentAnnotation AnnotationKey = internalPrefix + "seqindent" + + // IdAnnotation records the id of the resource to map inputs to outputs + IdAnnotation AnnotationKey = internalPrefix + "id" + + // Deprecated: Use IndexAnnotation instead. + LegacyIndexAnnotation AnnotationKey = "config.kubernetes.io/index" + + // Deprecated: use PathAnnotation instead. + LegacyPathAnnotation AnnotationKey = "config.kubernetes.io/path" + + // Deprecated: use IdAnnotation instead. + LegacyIdAnnotation = "config.k8s.io/id" + + // InternalAnnotationsMigrationResourceIDAnnotation is used to uniquely identify + // resources during round trip to and from a function execution. We will use it + // to track the internal annotations and reconcile them if needed. + InternalAnnotationsMigrationResourceIDAnnotation = internalPrefix + "annotations-migration-resource-id" +) + +func GetFileAnnotations(rn *yaml.RNode) (string, string, error) { + rm, _ := rn.GetMeta() + annotations := rm.Annotations + path, found := annotations[PathAnnotation] + if !found { + path = annotations[LegacyPathAnnotation] + } + index, found := annotations[IndexAnnotation] + if !found { + index = annotations[LegacyIndexAnnotation] + } + return path, index, nil +} + +func GetIdAnnotation(rn *yaml.RNode) string { + rm, _ := rn.GetMeta() + annotations := rm.Annotations + id, found := annotations[IdAnnotation] + if !found { + id = annotations[LegacyIdAnnotation] + } + return id +} + +func CopyLegacyAnnotations(rn *yaml.RNode) error { + meta, err := rn.GetMeta() + if err != nil { + if err == yaml.ErrMissingMetadata { + // resource has no metadata, this should be a no-op + return nil + } + return err + } + if err := copyAnnotations(meta, rn, LegacyPathAnnotation, PathAnnotation); err != nil { + return err + } + if err := copyAnnotations(meta, rn, LegacyIndexAnnotation, IndexAnnotation); err != nil { + return err + } + if err := copyAnnotations(meta, rn, LegacyIdAnnotation, IdAnnotation); err != nil { + return err + } + return nil +} + +func copyAnnotations(meta yaml.ResourceMeta, rn *yaml.RNode, legacyKey string, newKey string) error { + newValue := meta.Annotations[newKey] + legacyValue := meta.Annotations[legacyKey] + if newValue != "" { + if legacyValue == "" { + if err := rn.PipeE(yaml.SetAnnotation(legacyKey, newValue)); err != nil { + return err + } + } + } else { + if legacyValue != "" { + if err := rn.PipeE(yaml.SetAnnotation(newKey, legacyValue)); err != nil { + return err + } + } + } + return nil +} + +// ErrorIfMissingAnnotation validates the provided annotations are present on the given resources +func ErrorIfMissingAnnotation(nodes []*yaml.RNode, keys ...AnnotationKey) error { + for _, key := range keys { + for _, node := range nodes { + val, err := node.Pipe(yaml.GetAnnotation(key)) + if err != nil { + return errors.Wrap(err) + } + if val == nil { + return errors.Errorf("missing annotation %s", key) + } + } + } + return nil +} + +// CreatePathAnnotationValue creates a default path annotation value for a Resource. +// The path prefix will be dir. +func CreatePathAnnotationValue(dir string, m yaml.ResourceMeta) string { + filename := fmt.Sprintf("%s_%s.yaml", strings.ToLower(m.Kind), m.Name) + return path.Join(dir, m.Namespace, filename) +} + +// DefaultPathAndIndexAnnotation sets a default path or index value on any nodes missing the +// annotation +func DefaultPathAndIndexAnnotation(dir string, nodes []*yaml.RNode) error { + counts := map[string]int{} + + // check each node for the path annotation + for i := range nodes { + if err := CopyLegacyAnnotations(nodes[i]); err != nil { + return err + } + m, err := nodes[i].GetMeta() + if err != nil { + return err + } + + // calculate the max index in each file in case we are appending + if p, found := m.Annotations[PathAnnotation]; found { + // record the max indexes into each file + if i, found := m.Annotations[IndexAnnotation]; found { + index, _ := strconv.Atoi(i) + if index > counts[p] { + counts[p] = index + } + } + + // has the path annotation already -- do nothing + continue + } + + // set a path annotation on the Resource + path := CreatePathAnnotationValue(dir, m) + if err := nodes[i].PipeE(yaml.SetAnnotation(PathAnnotation, path)); err != nil { + return err + } + if err := nodes[i].PipeE(yaml.SetAnnotation(LegacyPathAnnotation, path)); err != nil { + return err + } + } + + // set the index annotations + for i := range nodes { + m, err := nodes[i].GetMeta() + if err != nil { + return err + } + + if _, found := m.Annotations[IndexAnnotation]; found { + continue + } + + p := m.Annotations[PathAnnotation] + + // set an index annotation on the Resource + c := counts[p] + counts[p] = c + 1 + if err := nodes[i].PipeE( + yaml.SetAnnotation(IndexAnnotation, fmt.Sprintf("%d", c))); err != nil { + return err + } + if err := nodes[i].PipeE( + yaml.SetAnnotation(LegacyIndexAnnotation, fmt.Sprintf("%d", c))); err != nil { + return err + } + } + return nil +} + +// DefaultPathAnnotation sets a default path annotation on any Reources +// missing it. +func DefaultPathAnnotation(dir string, nodes []*yaml.RNode) error { + // check each node for the path annotation + for i := range nodes { + if err := CopyLegacyAnnotations(nodes[i]); err != nil { + return err + } + m, err := nodes[i].GetMeta() + if err != nil { + return err + } + + if _, found := m.Annotations[PathAnnotation]; found { + // has the path annotation already -- do nothing + continue + } + + // set a path annotation on the Resource + path := CreatePathAnnotationValue(dir, m) + if err := nodes[i].PipeE(yaml.SetAnnotation(PathAnnotation, path)); err != nil { + return err + } + if err := nodes[i].PipeE(yaml.SetAnnotation(LegacyPathAnnotation, path)); err != nil { + return err + } + } + return nil +} + +// Map invokes fn for each element in nodes. +func Map(nodes []*yaml.RNode, fn func(*yaml.RNode) (*yaml.RNode, error)) ([]*yaml.RNode, error) { + var returnNodes []*yaml.RNode + for i := range nodes { + n, err := fn(nodes[i]) + if err != nil { + return nil, errors.Wrap(err) + } + if n != nil { + returnNodes = append(returnNodes, n) + } + } + return returnNodes, nil +} + +func MapMeta(nodes []*yaml.RNode, fn func(*yaml.RNode, yaml.ResourceMeta) (*yaml.RNode, error)) ( + []*yaml.RNode, error) { + var returnNodes []*yaml.RNode + for i := range nodes { + meta, err := nodes[i].GetMeta() + if err != nil { + return nil, errors.Wrap(err) + } + n, err := fn(nodes[i], meta) + if err != nil { + return nil, errors.Wrap(err) + } + if n != nil { + returnNodes = append(returnNodes, n) + } + } + return returnNodes, nil +} + +// SortNodes sorts nodes in place: +// - by PathAnnotation annotation +// - by IndexAnnotation annotation +func SortNodes(nodes []*yaml.RNode) error { + var err error + // use stable sort to keep ordering of equal elements + sort.SliceStable(nodes, func(i, j int) bool { + if err != nil { + return false + } + if err := CopyLegacyAnnotations(nodes[i]); err != nil { + return false + } + if err := CopyLegacyAnnotations(nodes[j]); err != nil { + return false + } + var iMeta, jMeta yaml.ResourceMeta + if iMeta, _ = nodes[i].GetMeta(); err != nil { + return false + } + if jMeta, _ = nodes[j].GetMeta(); err != nil { + return false + } + + iValue := iMeta.Annotations[PathAnnotation] + jValue := jMeta.Annotations[PathAnnotation] + if iValue != jValue { + return iValue < jValue + } + + iValue = iMeta.Annotations[IndexAnnotation] + jValue = jMeta.Annotations[IndexAnnotation] + + // put resource config without an index first + if iValue == jValue { + return false + } + if iValue == "" { + return true + } + if jValue == "" { + return false + } + + // sort by index + var iIndex, jIndex int + iIndex, err = strconv.Atoi(iValue) + if err != nil { + err = fmt.Errorf("unable to parse config.kubernetes.io/index %s :%v", iValue, err) + return false + } + jIndex, err = strconv.Atoi(jValue) + if err != nil { + err = fmt.Errorf("unable to parse config.kubernetes.io/index %s :%v", jValue, err) + return false + } + if iIndex != jIndex { + return iIndex < jIndex + } + + // elements are equal + return false + }) + return errors.Wrap(err) +} + +// CopyInternalAnnotations copies the annotations that begin with the prefix +// `internal.config.kubernetes.io` from the source RNode to the destination RNode. +// It takes a parameter exclusions, which is a list of annotation keys to ignore. +func CopyInternalAnnotations(src *yaml.RNode, dst *yaml.RNode, exclusions ...AnnotationKey) error { + srcAnnotations := GetInternalAnnotations(src) + for k, v := range srcAnnotations { + if stringSliceContains(exclusions, k) { + continue + } + if err := dst.PipeE(yaml.SetAnnotation(k, v)); err != nil { + return err + } + } + return nil +} + +// ConfirmInternalAnnotationUnchanged compares the annotations of the RNodes that begin with the prefix +// `internal.config.kubernetes.io`, throwing an error if they differ. It takes a parameter exclusions, +// which is a list of annotation keys to ignore. +func ConfirmInternalAnnotationUnchanged(r1 *yaml.RNode, r2 *yaml.RNode, exclusions ...AnnotationKey) error { + r1Annotations := GetInternalAnnotations(r1) + r2Annotations := GetInternalAnnotations(r2) + + // this is a map to prevent duplicates + diffAnnos := make(map[string]bool) + + for k, v1 := range r1Annotations { + if stringSliceContains(exclusions, k) { + continue + } + if v2, ok := r2Annotations[k]; !ok || v1 != v2 { + diffAnnos[k] = true + } + } + + for k, v2 := range r2Annotations { + if stringSliceContains(exclusions, k) { + continue + } + if v1, ok := r1Annotations[k]; !ok || v2 != v1 { + diffAnnos[k] = true + } + } + + if len(diffAnnos) > 0 { + keys := make([]string, 0, len(diffAnnos)) + for k := range diffAnnos { + keys = append(keys, k) + } + sort.Strings(keys) + + errorString := "internal annotations differ: " + for _, key := range keys { + errorString = errorString + key + ", " + } + return errors.Errorf(errorString[0 : len(errorString)-2]) + } + + return nil +} + +// GetInternalAnnotations returns a map of all the annotations of the provided +// RNode that satisfies one of the following: 1) begin with the prefix +// `internal.config.kubernetes.io` 2) is one of `config.kubernetes.io/path`, +// `config.kubernetes.io/index` and `config.k8s.io/id`. +func GetInternalAnnotations(rn *yaml.RNode) map[string]string { + meta, _ := rn.GetMeta() + annotations := meta.Annotations + result := make(map[string]string) + for k, v := range annotations { + if strings.HasPrefix(k, internalPrefix) || k == LegacyPathAnnotation || k == LegacyIndexAnnotation || k == LegacyIdAnnotation { + result[k] = v + } + } + return result +} + +// stringSliceContains returns true if the slice has the string. +func stringSliceContains(slice []string, str string) bool { + for _, s := range slice { + if s == str { + return true + } + } + return false +} diff --git a/go/internal/forked/kyaml/kio/kioutil/kioutil_test.go b/go/internal/forked/kyaml/kio/kioutil/kioutil_test.go new file mode 100644 index 000000000..8e8ac9d5f --- /dev/null +++ b/go/internal/forked/kyaml/kio/kioutil/kioutil_test.go @@ -0,0 +1,703 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package kioutil_test + +import ( + "bytes" + "math/rand" + "strings" + "testing" + "time" + + "github.com/stretchr/testify/assert" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/kio" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/kio/kioutil" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" +) + +func TestSortNodes_moreThan10(t *testing.T) { + input := ` +a: b +--- +c: d +--- +e: f +--- +g: h +--- +i: j +--- +k: l +--- +m: n +--- +o: p +--- +q: r +--- +s: t +--- +u: v +--- +w: x +--- +y: z +` + actual := &bytes.Buffer{} + rw := kio.ByteReadWriter{Reader: bytes.NewBufferString(input), Writer: actual} + nodes, err := rw.Read() + if !assert.NoError(t, err) { + t.Fail() + } + + // randomize the list + rand.Seed(time.Now().UnixNano()) + rand.Shuffle(len(nodes), func(i, j int) { nodes[i], nodes[j] = nodes[j], nodes[i] }) + + // sort them back into their original order + if !assert.NoError(t, kioutil.SortNodes(nodes)) { + t.Fail() + } + + // check the sorted values + expected := strings.Split(input, "---") + for i := range nodes { + a := strings.TrimSpace(nodes[i].MustString()) + b := strings.TrimSpace(expected[i]) + if !assert.Contains(t, a, b) { + t.Fail() + } + } + + if !assert.NoError(t, rw.Write(nodes)) { + t.Fail() + } + + assert.Equal(t, strings.TrimSpace(input), strings.TrimSpace(actual.String())) +} + +func TestDefaultPathAnnotation(t *testing.T) { + var tests = []struct { + dir string + input string // input + expected string // expected result + name string + }{ + { + `foo`, + `apiVersion: v1 +kind: Bar +metadata: + name: a + namespace: b +`, + `apiVersion: v1 +kind: Bar +metadata: + name: a + namespace: b + annotations: + internal.config.kubernetes.io/path: 'foo/b/bar_a.yaml' + config.kubernetes.io/path: 'foo/b/bar_a.yaml' +`, `with namespace`}, + { + `foo`, + `apiVersion: v1 +kind: Bar +metadata: + name: a +`, + `apiVersion: v1 +kind: Bar +metadata: + name: a + annotations: + internal.config.kubernetes.io/path: 'foo/bar_a.yaml' + config.kubernetes.io/path: 'foo/bar_a.yaml' +`, `without namespace`}, + + { + ``, + `apiVersion: v1 +kind: Bar +metadata: + name: a + namespace: b +`, + `apiVersion: v1 +kind: Bar +metadata: + name: a + namespace: b + annotations: + internal.config.kubernetes.io/path: 'b/bar_a.yaml' + config.kubernetes.io/path: 'b/bar_a.yaml' +`, `without dir`}, + { + ``, + `apiVersion: v1 +kind: Bar +metadata: + name: a + namespace: b + annotations: + internal.config.kubernetes.io/path: 'a/b.yaml' + config.kubernetes.io/path: 'a/b.yaml' +`, + `apiVersion: v1 +kind: Bar +metadata: + name: a + namespace: b + annotations: + internal.config.kubernetes.io/path: 'a/b.yaml' + config.kubernetes.io/path: 'a/b.yaml' +`, `skip`}, + } + + for _, s := range tests { + n := yaml.MustParse(s.input) + err := kioutil.DefaultPathAnnotation(s.dir, []*yaml.RNode{n}) + if !assert.NoError(t, err, s.name) { + t.FailNow() + } + if !assert.Equal(t, s.expected, n.MustString(), s.name) { + t.FailNow() + } + } +} + +func TestDefaultPathAndIndexAnnotation(t *testing.T) { + var tests = []struct { + dir string + input string // input + expected string // expected result + name string + }{ + { + `foo`, + `apiVersion: v1 +kind: Bar +metadata: + name: a + namespace: b +`, + `apiVersion: v1 +kind: Bar +metadata: + name: a + namespace: b + annotations: + internal.config.kubernetes.io/path: 'foo/b/bar_a.yaml' + config.kubernetes.io/path: 'foo/b/bar_a.yaml' + internal.config.kubernetes.io/index: '0' + config.kubernetes.io/index: '0' +`, `with namespace`}, + { + `foo`, + `apiVersion: v1 +kind: Bar +metadata: + name: a +`, + `apiVersion: v1 +kind: Bar +metadata: + name: a + annotations: + internal.config.kubernetes.io/path: 'foo/bar_a.yaml' + config.kubernetes.io/path: 'foo/bar_a.yaml' + internal.config.kubernetes.io/index: '0' + config.kubernetes.io/index: '0' +`, `without namespace`}, + + { + ``, + `apiVersion: v1 +kind: Bar +metadata: + name: a + namespace: b +`, + `apiVersion: v1 +kind: Bar +metadata: + name: a + namespace: b + annotations: + internal.config.kubernetes.io/path: 'b/bar_a.yaml' + config.kubernetes.io/path: 'b/bar_a.yaml' + internal.config.kubernetes.io/index: '0' + config.kubernetes.io/index: '0' +`, `without dir`}, + { + ``, + `apiVersion: v1 +kind: Bar +metadata: + name: a + namespace: b + annotations: + internal.config.kubernetes.io/path: 'a/b.yaml' + config.kubernetes.io/path: 'a/b.yaml' + internal.config.kubernetes.io/index: '5' + config.kubernetes.io/index: '5' +`, + `apiVersion: v1 +kind: Bar +metadata: + name: a + namespace: b + annotations: + internal.config.kubernetes.io/path: 'a/b.yaml' + config.kubernetes.io/path: 'a/b.yaml' + internal.config.kubernetes.io/index: '5' + config.kubernetes.io/index: '5' +`, `skip`}, + } + + for _, s := range tests { + out := &bytes.Buffer{} + r := kio.ByteReadWriter{ + Reader: bytes.NewBufferString(s.input), + Writer: out, + KeepReaderAnnotations: true, + OmitReaderAnnotations: true, + } + n, err := r.Read() + if !assert.NoError(t, err, s.name) { + t.FailNow() + } + if !assert.NoError(t, kioutil.DefaultPathAndIndexAnnotation(s.dir, n), s.name) { + t.FailNow() + } + if !assert.NoError(t, r.Write(n), s.name) { + t.FailNow() + } + if !assert.Equal(t, s.expected, out.String(), s.name) { + t.FailNow() + } + } +} + +func TestCreatePathAnnotationValue(t *testing.T) { + var tests = []struct { + dir string + meta yaml.ResourceMeta // input + expected string // expected result + name string + }{ + { + `dir`, + yaml.ResourceMeta{ + TypeMeta: yaml.TypeMeta{ + APIVersion: "apps/v1", + Kind: "foo", + }, + ObjectMeta: yaml.ObjectMeta{ + NameMeta: yaml.NameMeta{ + Name: "bar", Namespace: "baz", + }, + }, + }, + `dir/baz/foo_bar.yaml`, `with namespace`, + }, + { + ``, + yaml.ResourceMeta{ + TypeMeta: yaml.TypeMeta{ + APIVersion: "apps/v1", + Kind: "foo", + }, + ObjectMeta: yaml.ObjectMeta{ + NameMeta: yaml.NameMeta{ + Name: "bar", Namespace: "baz", + }, + }, + }, + `baz/foo_bar.yaml`, `without dir`, + }, + { + `dir`, + yaml.ResourceMeta{ + TypeMeta: yaml.TypeMeta{ + APIVersion: "apps/v1", + Kind: "foo", + }, + ObjectMeta: yaml.ObjectMeta{ + NameMeta: yaml.NameMeta{Name: "bar"}, + }, + }, + `dir/foo_bar.yaml`, `without namespace`, + }, + { + ``, + yaml.ResourceMeta{ + TypeMeta: yaml.TypeMeta{ + APIVersion: "apps/v1", + Kind: "foo", + }, + ObjectMeta: yaml.ObjectMeta{ + NameMeta: yaml.NameMeta{Name: "bar"}, + }, + }, + `foo_bar.yaml`, `without namespace or dir`, + }, + { + ``, + yaml.ResourceMeta{ + TypeMeta: yaml.TypeMeta{ + APIVersion: "apps/v1", + Kind: "foo", + }, + ObjectMeta: yaml.ObjectMeta{}, + }, + `foo_.yaml`, `without namespace, dir or name`, + }, + { + ``, + yaml.ResourceMeta{ + TypeMeta: yaml.TypeMeta{ + APIVersion: "apps/v1", + }, + ObjectMeta: yaml.ObjectMeta{}, + }, + `_.yaml`, `without any`, + }, + } + + for _, s := range tests { + p := kioutil.CreatePathAnnotationValue(s.dir, s.meta) + if !assert.Equal(t, s.expected, p, s.name) { + t.FailNow() + } + } +} + +func TestCopyLegacyAnnotations(t *testing.T) { + var tests = []struct { + input string + expected string + }{ + { + input: `apiVersion: v1 +kind: Foo +metadata: + name: foobar + annotations: + config.kubernetes.io/path: 'a/b.yaml' + config.kubernetes.io/index: '5' +`, + expected: `apiVersion: v1 +kind: Foo +metadata: + name: foobar + annotations: + config.kubernetes.io/path: 'a/b.yaml' + config.kubernetes.io/index: '5' + internal.config.kubernetes.io/path: 'a/b.yaml' + internal.config.kubernetes.io/index: '5' +`, + }, + { + input: `apiVersion: v1 +kind: Foo +metadata: + name: foobar + annotations: + internal.config.kubernetes.io/path: 'a/b.yaml' + internal.config.kubernetes.io/index: '5' +`, + expected: `apiVersion: v1 +kind: Foo +metadata: + name: foobar + annotations: + internal.config.kubernetes.io/path: 'a/b.yaml' + internal.config.kubernetes.io/index: '5' + config.kubernetes.io/path: 'a/b.yaml' + config.kubernetes.io/index: '5' +`, + }, + { + input: `apiVersion: v1 +kind: Foo +metadata: + name: foobar + annotations: + internal.config.kubernetes.io/path: 'a/b.yaml' + config.kubernetes.io/path: 'c/d.yaml' +`, + expected: `apiVersion: v1 +kind: Foo +metadata: + name: foobar + annotations: + internal.config.kubernetes.io/path: 'a/b.yaml' + config.kubernetes.io/path: 'c/d.yaml' +`, + }, + } + + for _, tc := range tests { + rw := kio.ByteReadWriter{ + Reader: bytes.NewBufferString(tc.input), + OmitReaderAnnotations: true, + } + nodes, err := rw.Read() + assert.NoError(t, err) + assert.NoError(t, kioutil.CopyLegacyAnnotations(nodes[0])) + assert.Equal(t, tc.expected, nodes[0].MustString()) + } +} + +func TestCopyInternalAnnotations(t *testing.T) { + var tests = []struct { + input string + exclusions []kioutil.AnnotationKey + expected string + }{ + { + input: `apiVersion: v1 +kind: Foo +metadata: + name: src + annotations: + internal.config.kubernetes.io/path: 'a/b.yaml' + internal.config.kubernetes.io/index: '5' + internal.config.kubernetes.io/foo: 'bar' +--- +apiVersion: v1 +kind: Foo +metadata: + name: dst + annotations: + internal.config.kubernetes.io/path: 'c/d.yaml' + internal.config.kubernetes.io/index: '10' +`, + expected: `apiVersion: v1 +kind: Foo +metadata: + name: dst + annotations: + internal.config.kubernetes.io/path: 'a/b.yaml' + internal.config.kubernetes.io/index: '5' + internal.config.kubernetes.io/foo: 'bar' +`, + }, + { + input: `apiVersion: v1 +kind: Foo +metadata: + name: src + annotations: + internal.config.kubernetes.io/path: 'a/b.yaml' + internal.config.kubernetes.io/index: '5' + internal.config.kubernetes.io/foo: 'bar-src' +--- +apiVersion: v1 +kind: Foo +metadata: + name: dst + annotations: + internal.config.kubernetes.io/path: 'c/d.yaml' + internal.config.kubernetes.io/index: '10' + internal.config.kubernetes.io/foo: 'bar-dst' +`, + exclusions: []kioutil.AnnotationKey{ + kioutil.PathAnnotation, + kioutil.IndexAnnotation, + }, + expected: `apiVersion: v1 +kind: Foo +metadata: + name: dst + annotations: + internal.config.kubernetes.io/path: 'c/d.yaml' + internal.config.kubernetes.io/index: '10' + internal.config.kubernetes.io/foo: 'bar-src' +`, + }, + } + + for _, tc := range tests { + rw := kio.ByteReadWriter{ + Reader: bytes.NewBufferString(tc.input), + OmitReaderAnnotations: true, + } + nodes, err := rw.Read() + assert.NoError(t, err) + assert.NoError(t, kioutil.CopyInternalAnnotations(nodes[0], nodes[1], tc.exclusions...)) + assert.Equal(t, tc.expected, nodes[1].MustString()) + } +} + +func TestConfirmInternalAnnotationUnchanged(t *testing.T) { + var tests = []struct { + input string + exclusions []kioutil.AnnotationKey + expectedErr string + }{ + { + input: `apiVersion: v1 +kind: Foo +metadata: + name: foo-1 + annotations: + internal.config.kubernetes.io/path: 'a/b.yaml' + internal.config.kubernetes.io/index: '5' +--- +apiVersion: v1 +kind: Foo +metadata: + name: foo-2 + annotations: + internal.config.kubernetes.io/path: 'c/d.yaml' + internal.config.kubernetes.io/index: '10' +`, + expectedErr: `internal annotations differ: internal.config.kubernetes.io/index, internal.config.kubernetes.io/path`, + }, + { + input: `apiVersion: v1 +kind: Foo +metadata: + name: foo-1 + annotations: + internal.config.kubernetes.io/path: 'a/b.yaml' + internal.config.kubernetes.io/index: '5' +--- +apiVersion: v1 +kind: Foo +metadata: + name: foo-2 + annotations: + internal.config.kubernetes.io/path: 'c/d.yaml' + internal.config.kubernetes.io/index: '10' +`, + exclusions: []kioutil.AnnotationKey{ + kioutil.PathAnnotation, + kioutil.IndexAnnotation, + }, + expectedErr: ``, + }, + { + input: `apiVersion: v1 +kind: Foo +metadata: + name: foo-1 + annotations: + internal.config.kubernetes.io/path: 'a/b.yaml' + internal.config.kubernetes.io/index: '5' + internal.config.kubernetes.io/foo: 'bar-1' +--- +apiVersion: v1 +kind: Foo +metadata: + name: foo-2 + annotations: + internal.config.kubernetes.io/path: 'c/d.yaml' + internal.config.kubernetes.io/index: '10' + internal.config.kubernetes.io/foo: 'bar-2' +`, + exclusions: []kioutil.AnnotationKey{ + kioutil.PathAnnotation, + kioutil.IndexAnnotation, + }, + expectedErr: `internal annotations differ: internal.config.kubernetes.io/foo`, + }, + { + input: `apiVersion: v1 +kind: Foo +metadata: + name: foo-1 + annotations: + internal.config.kubernetes.io/path: 'a/b.yaml' + internal.config.kubernetes.io/index: '5' + internal.config.kubernetes.io/foo: 'bar-1' +--- +apiVersion: v1 +kind: Foo +metadata: + name: foo-2 + annotations: + internal.config.kubernetes.io/path: 'c/d.yaml' + internal.config.kubernetes.io/index: '10' + internal.config.kubernetes.io/foo: 'bar-1' +`, + expectedErr: `internal annotations differ: internal.config.kubernetes.io/index, internal.config.kubernetes.io/path`, + }, + { + input: `apiVersion: v1 +kind: Foo +metadata: + name: foo-1 + annotations: + internal.config.kubernetes.io/a: 'b' + internal.config.kubernetes.io/c: 'd' +--- +apiVersion: v1 +kind: Foo +metadata: + name: foo-2 + annotations: + internal.config.kubernetes.io/e: 'f' + internal.config.kubernetes.io/g: 'h' +`, + expectedErr: `internal annotations differ: internal.config.kubernetes.io/a, internal.config.kubernetes.io/c, internal.config.kubernetes.io/e, internal.config.kubernetes.io/g`, + }, + } + + for _, tc := range tests { + rw := kio.ByteReadWriter{ + Reader: bytes.NewBufferString(tc.input), + OmitReaderAnnotations: true, + } + nodes, err := rw.Read() + assert.NoError(t, err) + err = kioutil.ConfirmInternalAnnotationUnchanged(nodes[0], nodes[1], tc.exclusions...) + if tc.expectedErr == "" { + assert.NoError(t, err) + } else { + if err == nil { + t.Fatalf("expected error: %s\n", tc.expectedErr) + } + assert.Equal(t, tc.expectedErr, err.Error()) + } + } +} + +func TestGetInternalAnnotations(t *testing.T) { + var tests = []struct { + input string + expected map[string]string + }{ + { + input: `apiVersion: v1 +kind: Foo +metadata: + name: foobar + annotations: + foo: bar + internal.config.kubernetes.io/path: 'a/b.yaml' + internal.config.kubernetes.io/index: '5' + internal.config.kubernetes.io/foo: 'bar' +`, + expected: map[string]string{ + "internal.config.kubernetes.io/path": "a/b.yaml", + "internal.config.kubernetes.io/index": "5", + "internal.config.kubernetes.io/foo": "bar", + }, + }, + } + + for _, tc := range tests { + rw := kio.ByteReadWriter{ + Reader: bytes.NewBufferString(tc.input), + OmitReaderAnnotations: true, + } + nodes, err := rw.Read() + assert.NoError(t, err) + assert.Equal(t, tc.expected, kioutil.GetInternalAnnotations(nodes[0])) + } +} diff --git a/go/internal/forked/kyaml/kio/pkgio_reader.go b/go/internal/forked/kyaml/kio/pkgio_reader.go new file mode 100644 index 000000000..0adb53ccd --- /dev/null +++ b/go/internal/forked/kyaml/kio/pkgio_reader.go @@ -0,0 +1,360 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package kio + +import ( + "fmt" + "os" + "path/filepath" + + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/errors" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/filesys" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/kio/kioutil" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/sets" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" +) + +// requiredResourcePackageAnnotations are annotations that are required to write resources back to +// files. +var requiredResourcePackageAnnotations = []string{kioutil.IndexAnnotation, kioutil.PathAnnotation} + +// PackageBuffer implements Reader and Writer, storing Resources in a local field. +type PackageBuffer struct { + Nodes []*yaml.RNode +} + +func (r *PackageBuffer) Read() ([]*yaml.RNode, error) { + return r.Nodes, nil +} + +func (r *PackageBuffer) Write(nodes []*yaml.RNode) error { + r.Nodes = nodes + return nil +} + +// LocalPackageReadWriter reads and writes Resources from / to a local directory. +// When writing, LocalPackageReadWriter will delete files if all of the Resources from +// that file have been removed from the output. +type LocalPackageReadWriter struct { + Kind string `yaml:"kind,omitempty"` + + KeepReaderAnnotations bool `yaml:"keepReaderAnnotations,omitempty"` + + // PreserveSeqIndent if true adds kioutil.SeqIndentAnnotation to each resource + PreserveSeqIndent bool + + // PackagePath is the path to the package directory. + PackagePath string `yaml:"path,omitempty"` + + // PackageFileName is the name of file containing package metadata. + // It will be used to identify package. + PackageFileName string `yaml:"packageFileName,omitempty"` + + // MatchFilesGlob configures Read to only read Resources from files matching any of the + // provided patterns. + // Defaults to ["*.yaml", "*.yml"] if empty. To match all files specify ["*"]. + MatchFilesGlob []string `yaml:"matchFilesGlob,omitempty"` + + // IncludeSubpackages will configure Read to read Resources from subpackages. + // Subpackages are identified by presence of PackageFileName. + IncludeSubpackages bool `yaml:"includeSubpackages,omitempty"` + + // ErrorIfNonResources will configure Read to throw an error if yaml missing missing + // apiVersion or kind is read. + ErrorIfNonResources bool `yaml:"errorIfNonResources,omitempty"` + + // OmitReaderAnnotations will cause the reader to skip annotating Resources with the file + // path and mode. + OmitReaderAnnotations bool `yaml:"omitReaderAnnotations,omitempty"` + + // SetAnnotations are annotations to set on the Resources as they are read. + SetAnnotations map[string]string `yaml:"setAnnotations,omitempty"` + + // NoDeleteFiles if set to true, LocalPackageReadWriter won't delete any files + NoDeleteFiles bool `yaml:"noDeleteFiles,omitempty"` + + files sets.String + + // FileSkipFunc is a function which returns true if reader should ignore + // the file + FileSkipFunc LocalPackageSkipFileFunc + + // FileSystem can be used to mock the disk file system. + FileSystem filesys.FileSystemOrOnDisk + + // WrapBareSeqNode wraps the bare sequence node document with map node, + // kyaml uses reader annotations to track resources, it is not possible to + // add them to bare sequence nodes, this option enables wrapping such bare + // sequence nodes into map node with key yaml.BareSeqNodeWrappingKey + // note that this wrapping is different and not related to ResourceList wrapping + WrapBareSeqNode bool +} + +func (r *LocalPackageReadWriter) Read() ([]*yaml.RNode, error) { + nodes, err := LocalPackageReader{ + PackagePath: r.PackagePath, + MatchFilesGlob: r.MatchFilesGlob, + IncludeSubpackages: r.IncludeSubpackages, + ErrorIfNonResources: r.ErrorIfNonResources, + SetAnnotations: r.SetAnnotations, + PackageFileName: r.PackageFileName, + FileSkipFunc: r.FileSkipFunc, + PreserveSeqIndent: r.PreserveSeqIndent, + FileSystem: r.FileSystem, + WrapBareSeqNode: r.WrapBareSeqNode, + }.Read() + if err != nil { + return nil, errors.Wrap(err) + } + // keep track of all the files + if !r.NoDeleteFiles { + r.files, err = r.getFiles(nodes) + if err != nil { + return nil, errors.Wrap(err) + } + } + return nodes, nil +} + +func (r *LocalPackageReadWriter) Write(nodes []*yaml.RNode) error { + newFiles, err := r.getFiles(nodes) + if err != nil { + return errors.Wrap(err) + } + var clear []string + for k := range r.SetAnnotations { + clear = append(clear, k) + } + err = LocalPackageWriter{ + PackagePath: r.PackagePath, + ClearAnnotations: clear, + KeepReaderAnnotations: r.KeepReaderAnnotations, + FileSystem: r.FileSystem, + }.Write(nodes) + if err != nil { + return errors.Wrap(err) + } + deleteFiles := r.files.Difference(newFiles) + for f := range deleteFiles { + if err = r.FileSystem.RemoveAll(filepath.Join(r.PackagePath, f)); err != nil { + return errors.Wrap(err) + } + } + return nil +} + +func (r *LocalPackageReadWriter) getFiles(nodes []*yaml.RNode) (sets.String, error) { + val := sets.String{} + for _, n := range nodes { + path, _, err := kioutil.GetFileAnnotations(n) + if err != nil { + return nil, errors.Wrap(err) + } + val.Insert(path) + } + return val, nil +} + +// LocalPackageSkipFileFunc is a function which returns true if the file +// in the package should be ignored by reader. +// relPath is an OS specific relative path +type LocalPackageSkipFileFunc func(relPath string) bool + +// LocalPackageReader reads ResourceNodes from a local package. +type LocalPackageReader struct { + Kind string `yaml:"kind,omitempty"` + + // PackagePath is the path to the package directory. + PackagePath string `yaml:"path,omitempty"` + + // PackageFileName is the name of file containing package metadata. + // It will be used to identify package. + PackageFileName string `yaml:"packageFileName,omitempty"` + + // MatchFilesGlob configures Read to only read Resources from files matching any of the + // provided patterns. + // Defaults to ["*.yaml", "*.yml"] if empty. To match all files specify ["*"]. + MatchFilesGlob []string `yaml:"matchFilesGlob,omitempty"` + + // IncludeSubpackages will configure Read to read Resources from subpackages. + // Subpackages are identified by presence of PackageFileName. + IncludeSubpackages bool `yaml:"includeSubpackages,omitempty"` + + // ErrorIfNonResources will configure Read to throw an error if yaml missing missing + // apiVersion or kind is read. + ErrorIfNonResources bool `yaml:"errorIfNonResources,omitempty"` + + // OmitReaderAnnotations will cause the reader to skip annotating Resources with the file + // path and mode. + OmitReaderAnnotations bool `yaml:"omitReaderAnnotations,omitempty"` + + // SetAnnotations are annotations to set on the Resources as they are read. + SetAnnotations map[string]string `yaml:"setAnnotations,omitempty"` + + // FileSkipFunc is a function which returns true if reader should ignore + // the file + FileSkipFunc LocalPackageSkipFileFunc + + // PreserveSeqIndent if true adds kioutil.SeqIndentAnnotation to each resource + PreserveSeqIndent bool + + // FileSystem can be used to mock the disk file system. + FileSystem filesys.FileSystemOrOnDisk + + // WrapBareSeqNode wraps the bare sequence node document with map node, + // kyaml uses reader annotations to track resources, it is not possible to + // add them to bare sequence nodes, this option enables wrapping such bare + // sequence nodes into map node with key yaml.BareSeqNodeWrappingKey + // note that this wrapping is different and not related to ResourceList wrapping + WrapBareSeqNode bool +} + +var _ Reader = LocalPackageReader{} + +var DefaultMatch = []string{"*.yaml", "*.yml"} +var JSONMatch = []string{"*.json"} +var MatchAll = append(DefaultMatch, JSONMatch...) + +// Read reads the Resources. +func (r LocalPackageReader) Read() ([]*yaml.RNode, error) { + if r.PackagePath == "" { + return nil, fmt.Errorf("must specify package path") + } + + // use slash for path + r.PackagePath = filepath.ToSlash(r.PackagePath) + if len(r.MatchFilesGlob) == 0 { + r.MatchFilesGlob = DefaultMatch + } + + var operand ResourceNodeSlice + var pathRelativeTo string + var err error + ignoreFilesMatcher := &ignoreFilesMatcher{ + fs: r.FileSystem, + } + dir, file, err := r.FileSystem.CleanedAbs(r.PackagePath) + if err != nil { + return nil, errors.Wrap(err) + } + r.PackagePath = filepath.Join(string(dir), file) + err = r.FileSystem.Walk(r.PackagePath, func( + path string, info os.FileInfo, err error) error { + if err != nil { + return errors.Wrap(err) + } + + // is this the user specified path? + if path == r.PackagePath { + if info.IsDir() { + // skip the root package directory, but check for a + // .krmignore file first. + pathRelativeTo = r.PackagePath + return ignoreFilesMatcher.readIgnoreFile(path) + } + + // user specified path is a file rather than a directory. + // make its path relative to its parent so it can be written to another file. + pathRelativeTo = filepath.Dir(r.PackagePath) + } + + // check if we should skip the directory or file + if info.IsDir() { + return r.shouldSkipDir(path, ignoreFilesMatcher) + } + + // get the relative path to file within the package so we can write the files back out + // to another location. + relPath, err := filepath.Rel(pathRelativeTo, path) + if err != nil { + return errors.WrapPrefixf(err, pathRelativeTo) + } + if match, err := r.shouldSkipFile(path, relPath, ignoreFilesMatcher); err != nil { + return err + } else if match { + // skip this file + return nil + } + + r.initReaderAnnotations(relPath, info) + nodes, err := r.readFile(path, info) + if err != nil { + return errors.WrapPrefixf(err, path) + } + operand = append(operand, nodes...) + return nil + }) + return operand, err +} + +// readFile reads the ResourceNodes from a file +func (r *LocalPackageReader) readFile(path string, _ os.FileInfo) ([]*yaml.RNode, error) { + f, err := r.FileSystem.Open(path) + if err != nil { + return nil, err + } + defer f.Close() + + rr := &ByteReader{ + DisableUnwrapping: true, + Reader: f, + OmitReaderAnnotations: r.OmitReaderAnnotations, + SetAnnotations: r.SetAnnotations, + PreserveSeqIndent: r.PreserveSeqIndent, + WrapBareSeqNode: r.WrapBareSeqNode, + } + return rr.Read() +} + +// shouldSkipFile returns true if the file should be skipped +func (r *LocalPackageReader) shouldSkipFile(path, relPath string, matcher *ignoreFilesMatcher) (bool, error) { + // check if the file is covered by a .krmignore file. + if matcher.matchFile(path) { + return true, nil + } + + if r.FileSkipFunc != nil && r.FileSkipFunc(relPath) { + return true, nil + } + + // check if the files are in scope + for _, g := range r.MatchFilesGlob { + if match, err := filepath.Match(g, filepath.Base(path)); err != nil { + return true, errors.Wrap(err) + } else if match { + return false, nil + } + } + return true, nil +} + +// initReaderAnnotations adds the LocalPackageReader Annotations to r.SetAnnotations +func (r *LocalPackageReader) initReaderAnnotations(path string, _ os.FileInfo) { + if r.SetAnnotations == nil { + r.SetAnnotations = map[string]string{} + } + if !r.OmitReaderAnnotations { + r.SetAnnotations[kioutil.PathAnnotation] = path + r.SetAnnotations[kioutil.LegacyPathAnnotation] = path + } +} + +// shouldSkipDir returns a filepath.SkipDir if the directory should be skipped +func (r *LocalPackageReader) shouldSkipDir(path string, matcher *ignoreFilesMatcher) error { + if matcher.matchDir(path) { + return filepath.SkipDir + } + + if r.PackageFileName == "" { + return nil + } + // check if this is a subpackage + if !r.FileSystem.Exists(filepath.Join(path, r.PackageFileName)) { + return nil + } + if !r.IncludeSubpackages { + return filepath.SkipDir + } + return matcher.readIgnoreFile(path) +} diff --git a/go/internal/forked/kyaml/kio/pkgio_reader_test.go b/go/internal/forked/kyaml/kio/pkgio_reader_test.go new file mode 100644 index 000000000..02ade40ff --- /dev/null +++ b/go/internal/forked/kyaml/kio/pkgio_reader_test.go @@ -0,0 +1,654 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package kio_test + +import ( + "path/filepath" + "runtime" + "strings" + "testing" + + "github.com/stretchr/testify/require" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/filesys" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/kio" +) + +var readFileA = []byte(`--- +a: b #first +--- +c: d # second +`) + +var readFileB = []byte(`# second thing +e: f +g: + h: + - i # has a list + - j +`) + +var readFileC = []byte(`--- +a: b #third +metadata: + annotations: +`) + +var readFileD = []byte(`--- +a: b #forth +metadata: +`) + +var readFileE = []byte(`--- +a: b #first +--- +- foo # second +- bar +`) + +var pkgFile = []byte(``) + +func TestLocalPackageReader_Read_empty(t *testing.T) { + var r kio.LocalPackageReader + nodes, err := r.Read() + require.Error(t, err) + require.Contains(t, err.Error(), "must specify package path") + require.Nil(t, nodes) +} + +func TestLocalPackageReader_Read_pkg(t *testing.T) { + testOnDiskAndOnMem(t, []mockFile{ + {path: "a/b"}, + {path: "a/c"}, + {path: "a_test.yaml", content: readFileA}, + {path: "b_test.yaml", content: readFileB}, + {path: "c_test.yaml", content: readFileC}, + {path: "d_test.yaml", content: readFileD}, + }, func(t *testing.T, path string, mockFS filesys.FileSystem) { + rfr := kio.LocalPackageReader{ + PackagePath: path, + FileSystem: filesys.FileSystemOrOnDisk{FileSystem: mockFS}, + } + nodes, err := rfr.Read() + require.NoError(t, err) + require.Len(t, nodes, 5) + expected := []string{ + `a: b #first +metadata: + annotations: + config.kubernetes.io/index: '0' + config.kubernetes.io/path: 'a_test.yaml' + internal.config.kubernetes.io/index: '0' + internal.config.kubernetes.io/path: 'a_test.yaml' +`, + `c: d # second +metadata: + annotations: + config.kubernetes.io/index: '1' + config.kubernetes.io/path: 'a_test.yaml' + internal.config.kubernetes.io/index: '1' + internal.config.kubernetes.io/path: 'a_test.yaml' +`, + `# second thing +e: f +g: + h: + - i # has a list + - j +metadata: + annotations: + config.kubernetes.io/index: '0' + config.kubernetes.io/path: 'b_test.yaml' + internal.config.kubernetes.io/index: '0' + internal.config.kubernetes.io/path: 'b_test.yaml' +`, + `a: b #third +metadata: + annotations: + config.kubernetes.io/index: '0' + config.kubernetes.io/path: 'c_test.yaml' + internal.config.kubernetes.io/index: '0' + internal.config.kubernetes.io/path: 'c_test.yaml' +`, + `a: b #forth +metadata: + annotations: + config.kubernetes.io/index: '0' + config.kubernetes.io/path: 'd_test.yaml' + internal.config.kubernetes.io/index: '0' + internal.config.kubernetes.io/path: 'd_test.yaml' +`, + } + for i := range nodes { + val, err := nodes[i].String() + require.NoError(t, err) + require.Equal(t, expected[i], val) + } + }) +} + +func TestLocalPackageReader_Read_pkgAndSkipFile(t *testing.T) { + testOnDiskAndOnMem(t, []mockFile{ + {path: "a/b"}, + {path: "a/c"}, + {path: "a_test.yaml", content: readFileA}, + {path: "b_test.yaml", content: readFileB}, + {path: "c_test.yaml", content: readFileC}, + {path: "d_test.yaml", content: readFileD}, + }, func(t *testing.T, path string, mockFS filesys.FileSystem) { + rfr := kio.LocalPackageReader{ + PackagePath: path, + FileSkipFunc: func(relPath string) bool { return relPath == "d_test.yaml" }, + FileSystem: filesys.FileSystemOrOnDisk{FileSystem: mockFS}, + } + nodes, err := rfr.Read() + require.NoError(t, err) + require.Len(t, nodes, 4) + expected := []string{ + `a: b #first +metadata: + annotations: + config.kubernetes.io/index: '0' + config.kubernetes.io/path: 'a_test.yaml' + internal.config.kubernetes.io/index: '0' + internal.config.kubernetes.io/path: 'a_test.yaml' +`, + `c: d # second +metadata: + annotations: + config.kubernetes.io/index: '1' + config.kubernetes.io/path: 'a_test.yaml' + internal.config.kubernetes.io/index: '1' + internal.config.kubernetes.io/path: 'a_test.yaml' +`, + `# second thing +e: f +g: + h: + - i # has a list + - j +metadata: + annotations: + config.kubernetes.io/index: '0' + config.kubernetes.io/path: 'b_test.yaml' + internal.config.kubernetes.io/index: '0' + internal.config.kubernetes.io/path: 'b_test.yaml' +`, + `a: b #third +metadata: + annotations: + config.kubernetes.io/index: '0' + config.kubernetes.io/path: 'c_test.yaml' + internal.config.kubernetes.io/index: '0' + internal.config.kubernetes.io/path: 'c_test.yaml' +`, + } + for i := range nodes { + val, err := nodes[i].String() + require.NoError(t, err) + require.Equal(t, expected[i], val) + } + }) +} + +func TestLocalPackageReader_Read_JSON(t *testing.T) { + testOnDiskAndOnMem(t, []mockFile{ + {path: "a/b"}, + {path: "a/c"}, + {path: "a_test.json", content: []byte(`{ + "a": "b" + }`), + }, + {path: "b_test.json", content: []byte(`{ + "e": "f", + "g": { + "h": ["i", "j"] + } + }`), + }, + }, func(t *testing.T, path string, mockFS filesys.FileSystem) { + rfr := kio.LocalPackageReader{ + PackagePath: path, + MatchFilesGlob: []string{"*.json"}, + FileSystem: filesys.FileSystemOrOnDisk{FileSystem: mockFS}, + } + nodes, err := rfr.Read() + require.NoError(t, err) + require.Len(t, nodes, 2) + expected := []string{ + `{"a": "b", metadata: {annotations: {config.kubernetes.io/index: '0', config.kubernetes.io/path: 'a_test.json', internal.config.kubernetes.io/index: '0', internal.config.kubernetes.io/path: 'a_test.json'}}} +`, + `{"e": "f", "g": {"h": ["i", "j"]}, metadata: {annotations: {config.kubernetes.io/index: '0', config.kubernetes.io/path: 'b_test.json', internal.config.kubernetes.io/index: '0', internal.config.kubernetes.io/path: 'b_test.json'}}} +`, + } + for i := range nodes { + val, err := nodes[i].String() + require.NoError(t, err) + require.Equal(t, expected[i], val) + } + }) +} + +func TestLocalPackageReader_Read_file(t *testing.T) { + testOnDiskAndOnMem(t, []mockFile{ + {path: "a/b"}, + {path: "a/c"}, + {path: "a_test.yaml", content: readFileA}, + {path: "b_test.yaml", content: readFileB}, + }, func(t *testing.T, path string, mockFS filesys.FileSystem) { + rfr := kio.LocalPackageReader{ + PackagePath: filepath.Join(path, "a_test.yaml"), + FileSystem: filesys.FileSystemOrOnDisk{FileSystem: mockFS}, + } + nodes, err := rfr.Read() + require.NoError(t, err) + require.Len(t, nodes, 2) + expected := []string{ + `a: b #first +metadata: + annotations: + config.kubernetes.io/index: '0' + config.kubernetes.io/path: 'a_test.yaml' + internal.config.kubernetes.io/index: '0' + internal.config.kubernetes.io/path: 'a_test.yaml' +`, + `c: d # second +metadata: + annotations: + config.kubernetes.io/index: '1' + config.kubernetes.io/path: 'a_test.yaml' + internal.config.kubernetes.io/index: '1' + internal.config.kubernetes.io/path: 'a_test.yaml' +`, + } + for i := range nodes { + val, err := nodes[i].String() + require.NoError(t, err) + require.Equal(t, expected[i], val) + } + }) +} + +func TestLocalPackageReader_Read_pkgOmitAnnotations(t *testing.T) { + testOnDiskAndOnMem(t, []mockFile{ + {path: "a/b"}, + {path: "a/c"}, + {path: "a_test.yaml", content: readFileA}, + {path: "b_test.yaml", content: readFileB}, + }, func(t *testing.T, path string, mockFS filesys.FileSystem) { + rfr := kio.LocalPackageReader{ + PackagePath: path, + OmitReaderAnnotations: true, + FileSystem: filesys.FileSystemOrOnDisk{FileSystem: mockFS}, + } + nodes, err := rfr.Read() + require.NoError(t, err) + require.Len(t, nodes, 3) + expected := []string{ + `a: b #first +`, + `c: d # second +`, + `# second thing +e: f +g: + h: + - i # has a list + - j +`, + } + for i := range nodes { + val, err := nodes[i].String() + require.NoError(t, err) + require.Equal(t, expected[i], val) + } + }) +} + +func TestLocalPackageReader_Read_PreserveSeqIndent(t *testing.T) { + testOnDiskAndOnMem(t, []mockFile{ + {path: "a/b"}, + {path: "a/c"}, + {path: "a_test.yaml", content: readFileA}, + {path: "b_test.yaml", content: readFileB}, + }, func(t *testing.T, path string, mockFS filesys.FileSystem) { + rfr := kio.LocalPackageReader{ + PackagePath: path, + PreserveSeqIndent: true, + FileSystem: filesys.FileSystemOrOnDisk{FileSystem: mockFS}, + } + nodes, err := rfr.Read() + require.NoError(t, err) + require.Len(t, nodes, 3) + expected := []string{ + `a: b #first +metadata: + annotations: + config.kubernetes.io/index: '0' + config.kubernetes.io/path: 'a_test.yaml' + internal.config.kubernetes.io/index: '0' + internal.config.kubernetes.io/path: 'a_test.yaml' + internal.config.kubernetes.io/seqindent: 'compact' +`, + `c: d # second +metadata: + annotations: + config.kubernetes.io/index: '1' + config.kubernetes.io/path: 'a_test.yaml' + internal.config.kubernetes.io/index: '1' + internal.config.kubernetes.io/path: 'a_test.yaml' + internal.config.kubernetes.io/seqindent: 'compact' +`, + `# second thing +e: f +g: + h: + - i # has a list + - j +metadata: + annotations: + config.kubernetes.io/index: '0' + config.kubernetes.io/path: 'b_test.yaml' + internal.config.kubernetes.io/index: '0' + internal.config.kubernetes.io/path: 'b_test.yaml' + internal.config.kubernetes.io/seqindent: 'compact' +`, + } + for i := range nodes { + val, err := nodes[i].String() + require.NoError(t, err) + require.Equal(t, expected[i], val) + } + }) +} + +func TestLocalPackageReader_Read_nestedDirs(t *testing.T) { + testOnDiskAndOnMem(t, []mockFile{ + {path: "a/b"}, + {path: "a/c"}, + {path: "a/b/a_test.yaml", content: readFileA}, + {path: "a/b/b_test.yaml", content: readFileB}, + }, func(t *testing.T, path string, mockFS filesys.FileSystem) { + rfr := kio.LocalPackageReader{ + PackagePath: path, + FileSystem: filesys.FileSystemOrOnDisk{FileSystem: mockFS}, + } + nodes, err := rfr.Read() + require.NoError(t, err) + require.Len(t, nodes, 3) + expected := []string{ + `a: b #first +metadata: + annotations: + config.kubernetes.io/index: '0' + config.kubernetes.io/path: 'a${SEP}b${SEP}a_test.yaml' + internal.config.kubernetes.io/index: '0' + internal.config.kubernetes.io/path: 'a${SEP}b${SEP}a_test.yaml' +`, + `c: d # second +metadata: + annotations: + config.kubernetes.io/index: '1' + config.kubernetes.io/path: 'a${SEP}b${SEP}a_test.yaml' + internal.config.kubernetes.io/index: '1' + internal.config.kubernetes.io/path: 'a${SEP}b${SEP}a_test.yaml' +`, + `# second thing +e: f +g: + h: + - i # has a list + - j +metadata: + annotations: + config.kubernetes.io/index: '0' + config.kubernetes.io/path: 'a${SEP}b${SEP}b_test.yaml' + internal.config.kubernetes.io/index: '0' + internal.config.kubernetes.io/path: 'a${SEP}b${SEP}b_test.yaml' +`, + } + for i := range nodes { + val, err := nodes[i].String() + require.NoError(t, err) + want := strings.ReplaceAll(expected[i], "${SEP}", string(filepath.Separator)) + require.Equal(t, want, val) + } + }) +} + +func TestLocalPackageReader_Read_matchRegex(t *testing.T) { + testOnDiskAndOnMem(t, []mockFile{ + {path: "a/b"}, + {path: "a/c"}, + {path: "a/b/a_test.yaml", content: readFileA}, + {path: "a/b/b_test.yaml", content: readFileB}, + }, func(t *testing.T, path string, mockFS filesys.FileSystem) { + rfr := kio.LocalPackageReader{ + PackagePath: path, + MatchFilesGlob: []string{`a*.yaml`}, + FileSystem: filesys.FileSystemOrOnDisk{FileSystem: mockFS}, + } + nodes, err := rfr.Read() + require.NoError(t, err) + require.Len(t, nodes, 2) + + expected := []string{ + `a: b #first +metadata: + annotations: + config.kubernetes.io/index: '0' + config.kubernetes.io/path: 'a${SEP}b${SEP}a_test.yaml' + internal.config.kubernetes.io/index: '0' + internal.config.kubernetes.io/path: 'a${SEP}b${SEP}a_test.yaml' +`, + `c: d # second +metadata: + annotations: + config.kubernetes.io/index: '1' + config.kubernetes.io/path: 'a${SEP}b${SEP}a_test.yaml' + internal.config.kubernetes.io/index: '1' + internal.config.kubernetes.io/path: 'a${SEP}b${SEP}a_test.yaml' +`, + } + + for i, node := range nodes { + val, err := node.String() + require.NoError(t, err) + want := strings.ReplaceAll(expected[i], "${SEP}", string(filepath.Separator)) + require.Equal(t, want, val) + } + }) +} + +func TestLocalPackageReader_Read_skipSubpackage(t *testing.T) { + testOnDiskAndOnMem(t, []mockFile{ + {path: "a/b"}, + {path: "a/c"}, + {path: "a/b/a_test.yaml", content: readFileA}, + {path: "a/c/c_test.yaml", content: readFileB}, + {path: "a/c/pkgFile", content: pkgFile}, + }, func(t *testing.T, path string, mockFS filesys.FileSystem) { + rfr := kio.LocalPackageReader{ + PackagePath: path, + PackageFileName: "pkgFile", + FileSystem: filesys.FileSystemOrOnDisk{FileSystem: mockFS}, + } + nodes, err := rfr.Read() + require.NoError(t, err) + require.Len(t, nodes, 2) + + expected := []string{ + `a: b #first +metadata: + annotations: + config.kubernetes.io/index: '0' + config.kubernetes.io/path: 'a${SEP}b${SEP}a_test.yaml' + internal.config.kubernetes.io/index: '0' + internal.config.kubernetes.io/path: 'a${SEP}b${SEP}a_test.yaml' +`, + `c: d # second +metadata: + annotations: + config.kubernetes.io/index: '1' + config.kubernetes.io/path: 'a${SEP}b${SEP}a_test.yaml' + internal.config.kubernetes.io/index: '1' + internal.config.kubernetes.io/path: 'a${SEP}b${SEP}a_test.yaml' +`, + } + + for i, node := range nodes { + val, err := node.String() + require.NoError(t, err) + want := strings.ReplaceAll(expected[i], "${SEP}", string(filepath.Separator)) + require.Equal(t, want, val) + } + }) +} + +func TestLocalPackageReader_Read_includeSubpackage(t *testing.T) { + testOnDiskAndOnMem(t, []mockFile{ + {path: "a/b"}, + {path: "a/c"}, + {path: "a/b/a_test.yaml", content: readFileA}, + {path: "a/c/c_test.yaml", content: readFileB}, + {path: "a/c/pkgFile", content: pkgFile}, + }, func(t *testing.T, path string, mockFS filesys.FileSystem) { + rfr := kio.LocalPackageReader{ + PackagePath: path, + IncludeSubpackages: true, + PackageFileName: "pkgFile", + FileSystem: filesys.FileSystemOrOnDisk{FileSystem: mockFS}, + } + nodes, err := rfr.Read() + require.NoError(t, err) + require.Len(t, nodes, 3) + + expected := []string{ + `a: b #first +metadata: + annotations: + config.kubernetes.io/index: '0' + config.kubernetes.io/path: 'a${SEP}b${SEP}a_test.yaml' + internal.config.kubernetes.io/index: '0' + internal.config.kubernetes.io/path: 'a${SEP}b${SEP}a_test.yaml' +`, + `c: d # second +metadata: + annotations: + config.kubernetes.io/index: '1' + config.kubernetes.io/path: 'a${SEP}b${SEP}a_test.yaml' + internal.config.kubernetes.io/index: '1' + internal.config.kubernetes.io/path: 'a${SEP}b${SEP}a_test.yaml' +`, + `# second thing +e: f +g: + h: + - i # has a list + - j +metadata: + annotations: + config.kubernetes.io/index: '0' + config.kubernetes.io/path: 'a${SEP}c${SEP}c_test.yaml' + internal.config.kubernetes.io/index: '0' + internal.config.kubernetes.io/path: 'a${SEP}c${SEP}c_test.yaml' +`, + } + + for i, node := range nodes { + val, err := node.String() + require.NoError(t, err) + want := strings.ReplaceAll(expected[i], "${SEP}", string(filepath.Separator)) + require.Equal(t, want, val) + } + }) +} + +type mockFile struct { + path string + // nil content implies this is a directory + content []byte +} + +func testOnDiskAndOnMem(t *testing.T, files []mockFile, f func(t *testing.T, path string, fs filesys.FileSystem)) { + t.Run("on_disk", func(t *testing.T) { + var dirs []string + for _, file := range files { + if file.content == nil { + dirs = append(dirs, filepath.FromSlash(file.path)) + } + } + + s := kio.SetupDirectories(t, dirs...) + defer s.Clean() + for _, file := range files { + if file.content != nil { + s.WriteFile(t, filepath.FromSlash(file.path), file.content) + } + } + + f(t, "./", nil) + f(t, s.Root, nil) + }) + + // TODO: Once fsnode supports Windows, we should also run the tests below. + if runtime.GOOS == "windows" { + return + } + + t.Run("on_mem", func(t *testing.T) { + fs := filesys.MakeFsInMemory() + for _, file := range files { + path := filepath.FromSlash(file.path) + if file.content == nil { + require.NoError(t, fs.MkdirAll(path)) + } else { + require.NoError(t, fs.WriteFile(path, file.content)) + } + } + + f(t, "/", fs) + }) +} + +func TestLocalPackageReader_ReadBareSeqNodes(t *testing.T) { + testOnDiskAndOnMem(t, []mockFile{ + {path: "a/b"}, + {path: "a/c"}, + {path: "e_test.yaml", content: readFileE}, + }, func(t *testing.T, path string, mockFS filesys.FileSystem) { + rfr := kio.LocalPackageReader{ + PackagePath: path, + FileSystem: filesys.FileSystemOrOnDisk{FileSystem: mockFS}, + WrapBareSeqNode: true, + } + nodes, err := rfr.Read() + require.NoError(t, err) + require.Len(t, nodes, 2) + expected := []string{ + `a: b #first +metadata: + annotations: + config.kubernetes.io/index: '0' + config.kubernetes.io/path: 'e_test.yaml' + internal.config.kubernetes.io/index: '0' + internal.config.kubernetes.io/path: 'e_test.yaml' +`, + `bareSeqNodeWrappingKey: +- foo # second +- bar +metadata: + annotations: + config.kubernetes.io/index: '1' + config.kubernetes.io/path: 'e_test.yaml' + internal.config.kubernetes.io/index: '1' + internal.config.kubernetes.io/path: 'e_test.yaml' +`, + } + for i := range nodes { + val, err := nodes[i].String() + require.NoError(t, err) + require.Equal(t, expected[i], val) + } + }) +} diff --git a/go/internal/forked/kyaml/kio/pkgio_writer.go b/go/internal/forked/kyaml/kio/pkgio_writer.go new file mode 100644 index 000000000..8e99152d6 --- /dev/null +++ b/go/internal/forked/kyaml/kio/pkgio_writer.go @@ -0,0 +1,150 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package kio + +import ( + "bytes" + "fmt" + "os" + "path/filepath" + "strings" + + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/errors" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/filesys" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/kio/kioutil" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" +) + +// LocalPackageWriter writes ResourceNodes to a filesystem +type LocalPackageWriter struct { + Kind string `yaml:"kind,omitempty"` + + // PackagePath is the path to the package directory. + PackagePath string `yaml:"path,omitempty"` + + // KeepReaderAnnotations if set will retain the annotations set by LocalPackageReader + KeepReaderAnnotations bool `yaml:"keepReaderAnnotations,omitempty"` + + // ClearAnnotations will clear annotations before writing the resources + ClearAnnotations []string `yaml:"clearAnnotations,omitempty"` + + // FileSystem can be used to mock the disk file system. + FileSystem filesys.FileSystemOrOnDisk +} + +var _ Writer = LocalPackageWriter{} + +func (r LocalPackageWriter) Write(nodes []*yaml.RNode) error { + // set the path and index annotations if they are missing + if err := kioutil.DefaultPathAndIndexAnnotation("", nodes); err != nil { + return err + } + + if !r.FileSystem.Exists(r.PackagePath) { + return errors.WrapPrefixf(os.ErrNotExist, "could not write to %q", r.PackagePath) + } + if !r.FileSystem.IsDir(r.PackagePath) { + // if the user specified input isn't a directory, the package is the directory of the + // target + r.PackagePath = filepath.Dir(r.PackagePath) + } + + // setup indexes for writing Resources back to files + if err := r.errorIfMissingRequiredAnnotation(nodes); err != nil { + return err + } + outputFiles, err := r.indexByFilePath(nodes) + if err != nil { + return err + } + for k := range outputFiles { + if err = kioutil.SortNodes(outputFiles[k]); err != nil { + return errors.Wrap(err) + } + } + + if !r.KeepReaderAnnotations { + r.ClearAnnotations = append(r.ClearAnnotations, kioutil.PathAnnotation) + r.ClearAnnotations = append(r.ClearAnnotations, kioutil.LegacyPathAnnotation) + } + + // validate outputs before writing any + for path := range outputFiles { + outputPath := filepath.Join(r.PackagePath, path) + if r.FileSystem.IsDir(outputPath) { + return fmt.Errorf("config.kubernetes.io/path cannot be a directory: %s", path) + } + + err = r.FileSystem.MkdirAll(filepath.Dir(outputPath)) + if err != nil { + return errors.Wrap(err) + } + } + + // write files + buf := bytes.NewBuffer(nil) + for path := range outputFiles { + outputPath := filepath.Join(r.PackagePath, path) + err = r.FileSystem.MkdirAll(filepath.Dir(filepath.Join(r.PackagePath, path))) + if err != nil { + return errors.Wrap(err) + } + + buf.Reset() + w := ByteWriter{ + Writer: buf, + KeepReaderAnnotations: r.KeepReaderAnnotations, + ClearAnnotations: r.ClearAnnotations, + } + if err = w.Write(outputFiles[path]); err != nil { + return errors.Wrap(err) + } + + if err := r.FileSystem.WriteFile(outputPath, buf.Bytes()); err != nil { + return errors.Wrap(err) + } + } + + return nil +} + +func (r LocalPackageWriter) errorIfMissingRequiredAnnotation(nodes []*yaml.RNode) error { + for i := range nodes { + for _, s := range requiredResourcePackageAnnotations { + key, err := nodes[i].Pipe(yaml.GetAnnotation(s)) + if err != nil { + return errors.Wrap(err) + } + if key == nil || key.YNode() == nil || key.YNode().Value == "" { + return errors.Errorf( + "resources must be annotated with %s to be written to files", s) + } + } + } + return nil +} + +func (r LocalPackageWriter) indexByFilePath(nodes []*yaml.RNode) (map[string][]*yaml.RNode, error) { + outputFiles := map[string][]*yaml.RNode{} + for i := range nodes { + // parse the file write path + node := nodes[i] + value, err := node.Pipe(yaml.GetAnnotation(kioutil.PathAnnotation)) + if err != nil { + // this should never happen if errorIfMissingRequiredAnnotation was run + return nil, errors.Wrap(err) + } + path := value.YNode().Value + outputFiles[path] = append(outputFiles[path], node) + + if filepath.IsAbs(path) { + return nil, errors.Errorf("package paths may not be absolute paths") + } + if strings.Contains(filepath.Clean(path), "..") { + return nil, fmt.Errorf("resource must be written under package %s: %s", + r.PackagePath, filepath.Clean(path)) + } + } + return outputFiles, nil +} diff --git a/go/internal/forked/kyaml/kio/pkgio_writer_test.go b/go/internal/forked/kyaml/kio/pkgio_writer_test.go new file mode 100644 index 000000000..f420ffc76 --- /dev/null +++ b/go/internal/forked/kyaml/kio/pkgio_writer_test.go @@ -0,0 +1,331 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package kio_test + +import ( + "fmt" + "math/rand" + "os" + "path/filepath" + "runtime" + "testing" + "time" + + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/filesys" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/kio" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/testutil" + + "github.com/stretchr/testify/assert" + "github.com/stretchr/testify/require" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" +) + +// TestLocalPackageWriter_Write tests: +// - ReaderAnnotations are cleared when writing the Resources +func TestLocalPackageWriter_Write(t *testing.T) { + testWriterOnDiskAndOnMem(t, func(t *testing.T, fs filesys.FileSystem) { + d, node1, node2, node3, cleanup := getWriterInputs(t, fs) + defer cleanup() + + w := kio.LocalPackageWriter{ + PackagePath: d, + FileSystem: filesys.FileSystemOrOnDisk{FileSystem: fs}, + } + err := w.Write([]*yaml.RNode{node2, node1, node3}) + require.NoError(t, err) + + b, err := fs.ReadFile(filepath.Join(d, "a", "b", "a_test.yaml")) + require.NoError(t, err) + require.Equal(t, `a: b #first +--- +c: d # second +`, string(b)) + + b, err = fs.ReadFile(filepath.Join(d, "a", "b", "b_test.yaml")) + require.NoError(t, err) + require.Equal(t, `e: f +g: + h: + - i # has a list + - j +`, string(b)) + }) +} + +// TestLocalPackageWriter_Write_keepReaderAnnotations tests: +// - ReaderAnnotations are kept when writing the Resources +func TestLocalPackageWriter_Write_keepReaderAnnotations(t *testing.T) { + testWriterOnDiskAndOnMem(t, func(t *testing.T, fs filesys.FileSystem) { + d, node1, node2, node3, cleanup := getWriterInputs(t, fs) + defer cleanup() + + w := kio.LocalPackageWriter{ + PackagePath: d, + KeepReaderAnnotations: true, + FileSystem: filesys.FileSystemOrOnDisk{FileSystem: fs}, + } + err := w.Write([]*yaml.RNode{node2, node1, node3}) + require.NoError(t, err) + + b, err := fs.ReadFile(filepath.Join(d, "a", "b", "a_test.yaml")) + require.NoError(t, err) + require.Equal(t, `a: b #first +metadata: + annotations: + config.kubernetes.io/index: "0" + config.kubernetes.io/path: "a/b/a_test.yaml" + internal.config.kubernetes.io/path: 'a/b/a_test.yaml' + internal.config.kubernetes.io/index: '0' +--- +c: d # second +metadata: + annotations: + config.kubernetes.io/index: "1" + config.kubernetes.io/path: "a/b/a_test.yaml" + internal.config.kubernetes.io/path: 'a/b/a_test.yaml' + internal.config.kubernetes.io/index: '1' +`, string(b)) + + b, err = fs.ReadFile(filepath.Join(d, "a", "b", "b_test.yaml")) + require.NoError(t, err) + require.Equal(t, `e: f +g: + h: + - i # has a list + - j +metadata: + annotations: + config.kubernetes.io/index: "0" + config.kubernetes.io/path: "a/b/b_test.yaml" + internal.config.kubernetes.io/path: 'a/b/b_test.yaml' + internal.config.kubernetes.io/index: '0' +`, string(b)) + }) +} + +// TestLocalPackageWriter_Write_clearAnnotations tests: +// - ClearAnnotations are removed from Resources +func TestLocalPackageWriter_Write_clearAnnotations(t *testing.T) { + testWriterOnDiskAndOnMem(t, func(t *testing.T, fs filesys.FileSystem) { + d, node1, node2, node3, cleanup := getWriterInputs(t, fs) + defer cleanup() + + w := kio.LocalPackageWriter{ + PackagePath: d, + ClearAnnotations: []string{"config.kubernetes.io/mode"}, + FileSystem: filesys.FileSystemOrOnDisk{FileSystem: fs}, + } + err := w.Write([]*yaml.RNode{node2, node1, node3}) + require.NoError(t, err) + + b, err := fs.ReadFile(filepath.Join(d, "a", "b", "a_test.yaml")) + require.NoError(t, err) + require.Equal(t, `a: b #first +--- +c: d # second +`, string(b)) + + b, err = fs.ReadFile(filepath.Join(d, "a", "b", "b_test.yaml")) + require.NoError(t, err) + require.Equal(t, `e: f +g: + h: + - i # has a list + - j +`, string(b)) + }) +} + +// TestLocalPackageWriter_Write_failRelativePath tests: +// - If a relative path above the package is defined, write fails +func TestLocalPackageWriter_Write_failRelativePath(t *testing.T) { + testWriterOnDiskAndOnMem(t, func(t *testing.T, fs filesys.FileSystem) { + d, node1, node2, node3, cleanup := getWriterInputs(t, fs) + defer cleanup() + + node4, err := yaml.Parse(`e: f +g: + h: + - i # has a list + - j +metadata: + annotations: + config.kubernetes.io/index: 0 + config.kubernetes.io/path: "a/b/../../../b_test.yaml" +`) + require.NoError(t, err) + + w := kio.LocalPackageWriter{ + PackagePath: d, + FileSystem: filesys.FileSystemOrOnDisk{FileSystem: fs}, + } + err = w.Write([]*yaml.RNode{node2, node1, node3, node4}) + if assert.Error(t, err) { + assert.Contains(t, err.Error(), "resource must be written under package") + } + }) +} + +// TestLocalPackageWriter_Write_invalidIndex tests: +// - If a non-int index is given, fail +func TestLocalPackageWriter_Write_invalidIndex(t *testing.T) { + testWriterOnDiskAndOnMem(t, func(t *testing.T, fs filesys.FileSystem) { + d, node1, node2, node3, cleanup := getWriterInputs(t, fs) + defer cleanup() + + node4, err := yaml.Parse(`e: f +g: + h: + - i # has a list + - j +metadata: + annotations: + config.kubernetes.io/index: a + config.kubernetes.io/path: "a/b/b_test.yaml" # use a different path, should still collide +`) + require.NoError(t, err) + + w := kio.LocalPackageWriter{ + PackagePath: d, + FileSystem: filesys.FileSystemOrOnDisk{FileSystem: fs}, + } + err = w.Write([]*yaml.RNode{node2, node1, node3, node4}) + if assert.Error(t, err) { + assert.Contains(t, err.Error(), "unable to parse config.kubernetes.io/index") + } + }) +} + +// TestLocalPackageWriter_Write_absPath tests: +// - If config.kubernetes.io/path is absolute, fail +func TestLocalPackageWriter_Write_absPath(t *testing.T) { + testWriterOnDiskAndOnMem(t, func(t *testing.T, fs filesys.FileSystem) { + d, node1, node2, node3, cleanup := getWriterInputs(t, fs) + defer cleanup() + + d = filepath.ToSlash(d) + + n4 := fmt.Sprintf(`e: f +g: + h: + - i # has a list + - j +metadata: + annotations: + config.kubernetes.io/index: a + config.kubernetes.io/path: "%s/a/b/b_test.yaml" # use a different path, should still collide +`, d) + node4, err := yaml.Parse(n4) + testutil.AssertNoError(t, err, n4) + + w := kio.LocalPackageWriter{ + PackagePath: d, + FileSystem: filesys.FileSystemOrOnDisk{FileSystem: fs}, + } + err = w.Write([]*yaml.RNode{node2, node1, node3, node4}) + testutil.AssertErrorContains(t, err, "package paths may not be absolute paths") + }) +} + +// TestLocalPackageWriter_Write_missingPath tests: +// - If config.kubernetes.io/path or index are missing, then default them +func TestLocalPackageWriter_Write_missingAnnotations(t *testing.T) { + testWriterOnDiskAndOnMem(t, func(t *testing.T, fs filesys.FileSystem) { + d, node1, node2, node3, cleanup := getWriterInputs(t, fs) + defer cleanup() + + node4String := `e: f +g: + h: + - i # has a list + - j +kind: Foo +metadata: + name: bar +` + node4, err := yaml.Parse(node4String) + require.NoError(t, err) + + w := kio.LocalPackageWriter{ + PackagePath: d, + FileSystem: filesys.FileSystemOrOnDisk{FileSystem: fs}, + } + err = w.Write([]*yaml.RNode{node2, node1, node3, node4}) + require.NoError(t, err) + b, err := fs.ReadFile(filepath.Join(d, "foo_bar.yaml")) + require.NoError(t, err) + require.Equal(t, node4String, string(b)) + }) +} + +// TestLocalPackageWriter_Write_pathIsDir tests: +// - If config.kubernetes.io/path is a directory, fail +func TestLocalPackageWriter_Write_pathIsDir(t *testing.T) { + testWriterOnDiskAndOnMem(t, func(t *testing.T, fs filesys.FileSystem) { + d, node1, node2, node3, cleanup := getWriterInputs(t, fs) + defer cleanup() + + node4, err := yaml.Parse(`e: f +g: + h: + - i # has a list + - j +metadata: + annotations: + config.kubernetes.io/path: a/ + config.kubernetes.io/index: "0" +`) + require.NoError(t, err) + + w := kio.LocalPackageWriter{ + PackagePath: d, + FileSystem: filesys.FileSystemOrOnDisk{FileSystem: fs}, + } + err = w.Write([]*yaml.RNode{node2, node1, node3, node4}) + require.Error(t, err) + require.Contains(t, err.Error(), "config.kubernetes.io/path cannot be a directory") + }) +} + +func testWriterOnDiskAndOnMem(t *testing.T, f func(t *testing.T, fs filesys.FileSystem)) { + t.Run("on_disk", func(t *testing.T) { f(t, filesys.MakeFsOnDisk()) }) + // TODO: Once fsnode supports Windows, these tests should also be run. + if runtime.GOOS != "windows" { + t.Run("on_mem", func(t *testing.T) { f(t, filesys.MakeFsInMemory()) }) + } +} + +func getWriterInputs(t *testing.T, mockFS filesys.FileSystem) (string, *yaml.RNode, *yaml.RNode, *yaml.RNode, func()) { + node1, err := yaml.Parse(`a: b #first +metadata: + annotations: + config.kubernetes.io/index: "0" + config.kubernetes.io/path: "a/b/a_test.yaml" +`) + require.NoError(t, err) + node2, err := yaml.Parse(`c: d # second +metadata: + annotations: + config.kubernetes.io/index: "1" + config.kubernetes.io/path: "a/b/a_test.yaml" +`) + require.NoError(t, err) + node3, err := yaml.Parse(`e: f +g: + h: + - i # has a list + - j +metadata: + annotations: + config.kubernetes.io/index: "0" + config.kubernetes.io/path: "a/b/b_test.yaml" +`) + require.NoError(t, err) + + // These two lines are similar to calling ioutil.TempDir, but we don't actually create any directory. + rand.Seed(time.Now().Unix()) + path := filepath.Join(os.TempDir(), fmt.Sprintf("kyaml-test%d", rand.Int31())) + require.NoError(t, mockFS.MkdirAll(filepath.Join(path, "a"))) + return path, node1, node2, node3, func() { require.NoError(t, mockFS.RemoveAll(path)) } +} diff --git a/go/internal/forked/kyaml/kio/testing.go b/go/internal/forked/kyaml/kio/testing.go new file mode 100644 index 000000000..b973e9fbb --- /dev/null +++ b/go/internal/forked/kyaml/kio/testing.go @@ -0,0 +1,45 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package kio + +import ( + "io/ioutil" + "os" + "path/filepath" + "testing" + + "github.com/stretchr/testify/require" +) + +// Setup creates directories and files for testing +type Setup struct { + // root is the tmp directory + Root string +} + +// setupDirectories creates directories for reading test configuration from +func SetupDirectories(t *testing.T, dirs ...string) Setup { + d, err := ioutil.TempDir("", "kyaml-test") + require.NoError(t, err) + err = os.Chdir(d) + require.NoError(t, err) + for _, s := range dirs { + err = os.MkdirAll(s, 0700) + require.NoError(t, err) + } + return Setup{Root: d} +} + +// writeFile writes a file under the test directory +func (s Setup) WriteFile(t *testing.T, path string, value []byte) { + err := os.MkdirAll(filepath.Dir(filepath.Join(s.Root, path)), 0700) + require.NoError(t, err) + err = ioutil.WriteFile(filepath.Join(s.Root, path), value, 0600) + require.NoError(t, err) +} + +// clean deletes the test config +func (s Setup) Clean() { + os.RemoveAll(s.Root) +} diff --git a/go/internal/forked/kyaml/kio/tree.go b/go/internal/forked/kyaml/kio/tree.go new file mode 100644 index 000000000..ffb580960 --- /dev/null +++ b/go/internal/forked/kyaml/kio/tree.go @@ -0,0 +1,519 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package kio + +import ( + "fmt" + "io" + "os" + "path/filepath" + "sort" + "strings" + + "github.com/xlab/treeprint" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/kio/kioutil" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" +) + +type TreeStructure string + +const ( + // TreeStructurePackage configures TreeWriter to generate the tree structure off of the + // Resources packages. + TreeStructurePackage TreeStructure = "directory" + + // TreeStructureOwners configures TreeWriter to generate the tree structure off of the + // Resource owners. + TreeStructureGraph TreeStructure = "owners" +) + +var GraphStructures = []string{string(TreeStructureGraph), string(TreeStructurePackage)} + +// TreeWriter prints the package structured as a tree. +// TODO(pwittrock): test this package better. it is lower-risk since it is only +// used for printing rather than updating or editing. +type TreeWriter struct { + Writer io.Writer + Root string + Fields []TreeWriterField + Structure TreeStructure + OpenAPIFileName string +} + +// TreeWriterField configures a Resource field to be included in the tree +type TreeWriterField struct { + yaml.PathMatcher + Name string + SubName string +} + +func (p TreeWriter) packageStructure(nodes []*yaml.RNode) error { + for i := range nodes { + if err := kioutil.CopyLegacyAnnotations(nodes[i]); err != nil { + return err + } + } + indexByPackage := p.index(nodes) + + // create the new tree + tree := treeprint.New() + tree.SetValue(p.Root) + + // add each package to the tree + treeIndex := map[string]treeprint.Tree{} + keys := p.sort(indexByPackage) + for _, pkg := range keys { + // create a branch for this package -- search for the parent package and create + // the branch under it -- requires that the keys are sorted + branch := tree + for parent, subTree := range treeIndex { + if strings.HasPrefix(pkg, parent) { + // found a package whose path is a prefix to our own, use this + // package if a closer one isn't found + branch = subTree + // don't break, continue searching for more closely related ancestors + } + } + + // create a new branch for the package + createOk := pkg != "." // special edge case logic for tree on current working dir + if createOk { + branch = branch.AddBranch(branchName(p.Root, pkg, p.OpenAPIFileName)) + } + + // cache the branch for this package + treeIndex[pkg] = branch + + // print each resource in the package + for i := range indexByPackage[pkg] { + var err error + if _, err = p.doResource(indexByPackage[pkg][i], "", branch); err != nil { + return err + } + } + } + + _, err := io.WriteString(p.Writer, tree.String()) + return err +} + +// branchName takes the root directory and relative path to the directory +// and returns the branch name +func branchName(root, dirRelPath, openAPIFileName string) string { + name := filepath.Base(dirRelPath) + _, err := os.Stat(filepath.Join(root, dirRelPath, openAPIFileName)) + if !os.IsNotExist(err) { + // add Pkg: prefix indicating that it is a separate package as it has + // openAPIFile + return fmt.Sprintf("Pkg: %s", name) + } + return name +} + +// Write writes the ascii tree to p.Writer +func (p TreeWriter) Write(nodes []*yaml.RNode) error { + switch p.Structure { + case TreeStructurePackage: + return p.packageStructure(nodes) + case TreeStructureGraph: + return p.graphStructure(nodes) + } + + // If any resource has an owner reference, default to the graph structure. Otherwise, use package structure. + for _, node := range nodes { + if owners, _ := node.Pipe(yaml.Lookup("metadata", "ownerReferences")); owners != nil { + return p.graphStructure(nodes) + } + } + return p.packageStructure(nodes) +} + +// node wraps a tree node, and any children nodes +type node struct { + p TreeWriter + *yaml.RNode + children []*node +} + +func (a node) Len() int { return len(a.children) } +func (a node) Swap(i, j int) { a.children[i], a.children[j] = a.children[j], a.children[i] } +func (a node) Less(i, j int) bool { + return compareNodes(a.children[i].RNode, a.children[j].RNode) +} + +// Tree adds this node to the root +func (a node) Tree(root treeprint.Tree) error { + sort.Sort(a) + branch := root + var err error + + // generate a node for the Resource + if a.RNode != nil { + branch, err = a.p.doResource(a.RNode, "Resource", root) + if err != nil { + return err + } + } + + // attach children to the branch + for _, n := range a.children { + if err := n.Tree(branch); err != nil { + return err + } + } + return nil +} + +// graphStructure writes the tree using owners for structure +func (p TreeWriter) graphStructure(nodes []*yaml.RNode) error { + resourceToOwner := map[string]*node{} + root := &node{} + // index each of the nodes by their owner + for _, n := range nodes { + ownerVal, err := ownerToString(n) + if err != nil { + return err + } + var owner *node + if ownerVal == "" { + // no owner -- attach to the root + owner = root + } else { + // owner found -- attach to the owner + var found bool + owner, found = resourceToOwner[ownerVal] + if !found { + // initialize the owner if not found + resourceToOwner[ownerVal] = &node{p: p} + owner = resourceToOwner[ownerVal] + } + } + + nodeVal, err := nodeToString(n) + if err != nil { + return err + } + val, found := resourceToOwner[nodeVal] + if !found { + // initialize the node if not found -- may have already been initialized if it + // is the owner of another node + resourceToOwner[nodeVal] = &node{p: p} + val = resourceToOwner[nodeVal] + } + val.RNode = n + owner.children = append(owner.children, val) + } + + for k, v := range resourceToOwner { + if v.RNode == nil { + return fmt.Errorf( + "owner '%s' not found in input, but found as an owner of input objects", k) + } + } + + // print the tree + tree := treeprint.New() + if err := root.Tree(tree); err != nil { + return err + } + + _, err := io.WriteString(p.Writer, tree.String()) + return err +} + +// nodeToString generates a string to identify the node -- matches ownerToString format +func nodeToString(node *yaml.RNode) (string, error) { + meta, err := node.GetMeta() + if err != nil { + return "", err + } + + return fmt.Sprintf("%s %s/%s", meta.Kind, meta.Namespace, meta.Name), nil +} + +// ownerToString generate a string to identify the owner -- matches nodeToString format +func ownerToString(node *yaml.RNode) (string, error) { + meta, err := node.GetMeta() + if err != nil { + return "", err + } + namespace := meta.Namespace + + owners, err := node.Pipe(yaml.Lookup("metadata", "ownerReferences")) + if err != nil { + return "", err + } + if owners == nil { + return "", nil + } + + elements, err := owners.Elements() + if err != nil { + return "", err + } + if len(elements) == 0 { + return "", err + } + owner := elements[0] + var kind, name string + + if value := owner.Field("kind"); !value.IsNilOrEmpty() { + kind = value.Value.YNode().Value + } + if value := owner.Field("name"); !value.IsNilOrEmpty() { + name = value.Value.YNode().Value + } + + return fmt.Sprintf("%s %s/%s", kind, namespace, name), nil +} + +// index indexes the Resources by their package +func (p TreeWriter) index(nodes []*yaml.RNode) map[string][]*yaml.RNode { + // index the ResourceNodes by package + indexByPackage := map[string][]*yaml.RNode{} + for i := range nodes { + meta, err := nodes[i].GetMeta() + if err != nil || meta.Kind == "" { + // not a resource + continue + } + pkg := filepath.Dir(meta.Annotations[kioutil.PathAnnotation]) + indexByPackage[pkg] = append(indexByPackage[pkg], nodes[i]) + } + return indexByPackage +} + +func compareNodes(i, j *yaml.RNode) bool { + metai, _ := i.GetMeta() + metaj, _ := j.GetMeta() + pi := metai.Annotations[kioutil.PathAnnotation] + pj := metaj.Annotations[kioutil.PathAnnotation] + + // compare file names + if filepath.Base(pi) != filepath.Base(pj) { + return filepath.Base(pi) < filepath.Base(pj) + } + + // compare namespace + if metai.Namespace != metaj.Namespace { + return metai.Namespace < metaj.Namespace + } + + // compare name + if metai.Name != metaj.Name { + return metai.Name < metaj.Name + } + + // compare kind + if metai.Kind != metaj.Kind { + return metai.Kind < metaj.Kind + } + + // compare apiVersion + if metai.APIVersion != metaj.APIVersion { + return metai.APIVersion < metaj.APIVersion + } + return true +} + +// sort sorts the Resources in the index in display order and returns the ordered +// keys for the index +// +// Packages are sorted by package name +// Resources within a package are sorted by: [filename, namespace, name, kind, apiVersion] +func (p TreeWriter) sort(indexByPackage map[string][]*yaml.RNode) []string { + var keys []string + for k := range indexByPackage { + pkgNodes := indexByPackage[k] + sort.Slice(pkgNodes, func(i, j int) bool { return compareNodes(pkgNodes[i], pkgNodes[j]) }) + keys = append(keys, k) + } + + // return the package names sorted lexicographically + sort.Strings(keys) + return keys +} + +func (p TreeWriter) doResource(leaf *yaml.RNode, metaString string, branch treeprint.Tree) (treeprint.Tree, error) { + meta, _ := leaf.GetMeta() + if metaString == "" { + path := meta.Annotations[kioutil.PathAnnotation] + path = filepath.Base(path) + metaString = path + } + + value := fmt.Sprintf("%s %s", meta.Kind, meta.Name) + if len(meta.Namespace) > 0 { + value = fmt.Sprintf("%s %s/%s", meta.Kind, meta.Namespace, meta.Name) + } + + fields, err := p.getFields(leaf) + if err != nil { + return nil, err + } + + n := branch.AddMetaBranch(metaString, value) + for i := range fields { + field := fields[i] + + // do leaf node + if len(field.matchingElementsAndFields) == 0 { + n.AddNode(fmt.Sprintf("%s: %s", field.name, field.value)) + continue + } + + // do nested nodes + b := n.AddBranch(field.name) + for j := range field.matchingElementsAndFields { + elem := field.matchingElementsAndFields[j] + b := b.AddBranch(elem.name) + for k := range elem.matchingElementsAndFields { + field := elem.matchingElementsAndFields[k] + b.AddNode(fmt.Sprintf("%s: %s", field.name, field.value)) + } + } + } + + return n, nil +} + +// getFields looks up p.Fields from leaf and structures them into treeFields. +// TODO(pwittrock): simplify this function +func (p TreeWriter) getFields(leaf *yaml.RNode) (treeFields, error) { + fieldsByName := map[string]*treeField{} + + // index nested and non-nested fields + for i := range p.Fields { + f := p.Fields[i] + seq, err := leaf.Pipe(&f) + if err != nil { + return nil, err + } + if seq == nil { + continue + } + + if fieldsByName[f.Name] == nil { + fieldsByName[f.Name] = &treeField{name: f.Name} + } + + // non-nested field -- add directly to the treeFields list + if f.SubName == "" { + // non-nested field -- only 1 element + val, err := yaml.String(seq.Content()[0], yaml.Trim, yaml.Flow) + if err != nil { + return nil, err + } + fieldsByName[f.Name].value = val + continue + } + + // nested-field -- create a parent elem, and index by the 'match' value + if fieldsByName[f.Name].subFieldByMatch == nil { + fieldsByName[f.Name].subFieldByMatch = map[string]treeFields{} + } + index := fieldsByName[f.Name].subFieldByMatch + for j := range seq.Content() { + elem := seq.Content()[j] + matches := f.Matches[elem] + str, err := yaml.String(elem, yaml.Trim, yaml.Flow) + if err != nil { + return nil, err + } + + // map the field by the name of the element + // index the subfields by the matching element so we can put all the fields for the + // same element under the same branch + matchKey := strings.Join(matches, "/") + index[matchKey] = append(index[matchKey], &treeField{name: f.SubName, value: str}) + } + } + + // iterate over collection of all queried fields in the Resource + for _, field := range fieldsByName { + // iterate over collection of elements under the field -- indexed by element name + for match, subFields := range field.subFieldByMatch { + // create a new element for this collection of fields + // note: we will convert name to an index later, but keep the match for sorting + elem := &treeField{name: match} + field.matchingElementsAndFields = append(field.matchingElementsAndFields, elem) + + // iterate over collection of queried fields for the element + for i := range subFields { + // add to the list of fields for this element + elem.matchingElementsAndFields = append(elem.matchingElementsAndFields, subFields[i]) + } + } + // clear this cached data + field.subFieldByMatch = nil + } + + // put the fields in a list so they are ordered + fieldList := treeFields{} + for _, v := range fieldsByName { + fieldList = append(fieldList, v) + } + + // sort the fields + sort.Sort(fieldList) + for i := range fieldList { + field := fieldList[i] + // sort the elements under this field + sort.Sort(field.matchingElementsAndFields) + + for i := range field.matchingElementsAndFields { + element := field.matchingElementsAndFields[i] + // sort the elements under a list field by their name + sort.Sort(element.matchingElementsAndFields) + // set the name of the element to its index + element.name = fmt.Sprintf("%d", i) + } + } + + return fieldList, nil +} + +// treeField wraps a field node +type treeField struct { + // name is the name of the node + name string + + // value is the value of the node -- may be empty + value string + + // matchingElementsAndFields is a slice of fields that go under this as a branch + matchingElementsAndFields treeFields + + // subFieldByMatch caches matchingElementsAndFields indexed by the name of the matching elem + subFieldByMatch map[string]treeFields +} + +// treeFields wraps a slice of treeField so they can be sorted +type treeFields []*treeField + +func (nodes treeFields) Len() int { return len(nodes) } + +func (nodes treeFields) Less(i, j int) bool { + iIndex, iFound := yaml.FieldOrder[nodes[i].name] + jIndex, jFound := yaml.FieldOrder[nodes[j].name] + if iFound && jFound { + return iIndex < jIndex + } + if iFound { + return true + } + if jFound { + return false + } + + if nodes[i].name != nodes[j].name { + return nodes[i].name < nodes[j].name + } + if nodes[i].value != nodes[j].value { + return nodes[i].value < nodes[j].value + } + return false +} + +func (nodes treeFields) Swap(i, j int) { nodes[i], nodes[j] = nodes[j], nodes[i] } diff --git a/go/internal/forked/kyaml/kio/tree_test.go b/go/internal/forked/kyaml/kio/tree_test.go new file mode 100644 index 000000000..8bdea4c70 --- /dev/null +++ b/go/internal/forked/kyaml/kio/tree_test.go @@ -0,0 +1,579 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package kio_test + +import ( + "bytes" + "testing" + + "github.com/stretchr/testify/assert" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/kio" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" +) + +func TestPrinter_Write_Package_Structure(t *testing.T) { + in := `kind: Deployment +metadata: + labels: + app: nginx3 + name: foo + namespace: default + annotations: + app: nginx3 + config.kubernetes.io/path: foo-package/3/f3.yaml +spec: + replicas: 1 +--- +kind: Deployment +metadata: + labels: + app: nginx2 + name: foo + namespace: default + annotations: + app: nginx2 + config.kubernetes.io/path: foo-package/f1.yaml +spec: + replicas: 1 +--- +kind: Deployment +metadata: + labels: + app: nginx + annotations: + app: nginx + config.kubernetes.io/path: bar-package/f2.yaml + name: bar +spec: + replicas: 3 +--- +kind: Service +metadata: + name: foo + namespace: default + annotations: + app: nginx + config.kubernetes.io/path: foo-package/f1.yaml +spec: + selector: + app: nginx +` + out := &bytes.Buffer{} + err := kio.Pipeline{ + Inputs: []kio.Reader{&kio.ByteReader{Reader: bytes.NewBufferString(in)}}, + Outputs: []kio.Writer{kio.TreeWriter{Writer: out, Structure: kio.TreeStructurePackage}}, + }.Execute() + if !assert.NoError(t, err) { + t.FailNow() + } + + if !assert.Equal(t, ` +├── bar-package +│   └── [f2.yaml] Deployment bar +└── foo-package + ├── [f1.yaml] Deployment default/foo + ├── [f1.yaml] Service default/foo + └── 3 + └── [f3.yaml] Deployment default/foo +`, out.String()) { + t.FailNow() + } +} + +func TestPrinter_Write_Package_Structure_base(t *testing.T) { + in := `kind: Deployment +metadata: + labels: + app: nginx3 + name: foo + namespace: default + annotations: + app: nginx3 + config.kubernetes.io/path: f3.yaml +spec: + replicas: 1 +--- +kind: Deployment +metadata: + labels: + app: nginx2 + name: foo + namespace: default + annotations: + app: nginx2 + config.kubernetes.io/path: foo-package/f1.yaml +spec: + replicas: 1 +--- +kind: Deployment +metadata: + labels: + app: nginx + annotations: + app: nginx + config.kubernetes.io/package: + config.kubernetes.io/path: bar-package/f2.yaml + name: bar +spec: + replicas: 3 +--- +kind: Service +metadata: + name: foo + namespace: default + annotations: + app: nginx + config.kubernetes.io/package: . + config.kubernetes.io/path: f1.yaml +spec: + selector: + app: nginx +` + out := &bytes.Buffer{} + err := kio.Pipeline{ + Inputs: []kio.Reader{&kio.ByteReader{Reader: bytes.NewBufferString(in)}}, + Outputs: []kio.Writer{kio.TreeWriter{Writer: out, Structure: kio.TreeStructurePackage}}, + }.Execute() + if !assert.NoError(t, err) { + t.FailNow() + } + + if !assert.Equal(t, ` +├── [f1.yaml] Service default/foo +├── [f3.yaml] Deployment default/foo +├── bar-package +│   └── [f2.yaml] Deployment bar +└── foo-package + └── [f1.yaml] Deployment default/foo +`, out.String()) { + t.FailNow() + } +} + +func TestPrinter_Write_Package_Structure_sort(t *testing.T) { + in := `apiVersion: extensions/v1 +kind: Deployment +metadata: + labels: + app: nginx2 + name: foo3 + namespace: default + annotations: + app: nginx2 + config.kubernetes.io/path: f1.yaml +spec: + replicas: 1 +--- +apiVersion: extensions/v1 +kind: Deployment +metadata: + labels: + app: nginx2 + name: foo3 + namespace: default + annotations: + app: nginx2 + config.kubernetes.io/path: f1.yaml +spec: + replicas: 1 +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + labels: + app: nginx2 + name: foo3 + namespace: default + annotations: + app: nginx2 + config.kubernetes.io/path: f1.yaml +spec: + replicas: 1 +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + labels: + app: nginx2 + name: foo2 + namespace: default2 + annotations: + app: nginx2 + config.kubernetes.io/path: f1.yaml +spec: + replicas: 1 +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + labels: + app: nginx3 + name: foo + namespace: default + annotations: + app: nginx3 + config.kubernetes.io/path: f1.yaml +spec: + replicas: 1 +--- +kind: Deployment +metadata: + labels: + app: nginx + annotations: + app: nginx + config.kubernetes.io/path: bar-package/f2.yaml + name: bar +spec: + replicas: 3 +--- +kind: Service +metadata: + name: foo + namespace: default + annotations: + app: nginx + config.kubernetes.io/path: f1.yaml +spec: + selector: + app: nginx +` + out := &bytes.Buffer{} + err := kio.Pipeline{ + Inputs: []kio.Reader{&kio.ByteReader{Reader: bytes.NewBufferString(in)}}, + Outputs: []kio.Writer{kio.TreeWriter{Writer: out, Structure: kio.TreeStructurePackage}}, + }.Execute() + if !assert.NoError(t, err) { + t.FailNow() + } + + if !assert.Equal(t, ` +├── [f1.yaml] Deployment default/foo +├── [f1.yaml] Service default/foo +├── [f1.yaml] Deployment default/foo3 +├── [f1.yaml] Deployment default/foo3 +├── [f1.yaml] Deployment default/foo3 +├── [f1.yaml] Deployment default2/foo2 +└── bar-package + └── [f2.yaml] Deployment bar +`, out.String()) { + t.FailNow() + } +} + +func TestPrinter_metaError(t *testing.T) { + out := &bytes.Buffer{} + err := kio.TreeWriter{Writer: out}.Write([]*yaml.RNode{{}}) + if !assert.NoError(t, err) { + t.FailNow() + } + if !assert.Equal(t, ` +`, out.String()) { + t.FailNow() + } +} + +func TestPrinter_Write_Graph_Structure(t *testing.T) { + in := ` +apiVersion: v1 +kind: Pod +metadata: + name: cockroachdb-0 + namespace: myapp-staging + ownerReferences: + - apiVersion: apps/v1 + kind: StatefulSet + name: cockroachdb +spec: + containers: + - name: cockroachdb + image: cockraochdb:1.1.1 +--- +apiVersion: v1 +kind: Pod +metadata: + name: cockroachdb-1 + namespace: myapp-staging + ownerReferences: + - apiVersion: apps/v1 + kind: StatefulSet + name: cockroachdb +spec: + containers: + - name: cockroachdb + image: cockraochdb:1.1.1 +--- +apiVersion: v1 +kind: Pod +metadata: + name: cockroachdb-2 + namespace: myapp-staging + ownerReferences: + - apiVersion: apps/v1 + kind: StatefulSet + name: cockroachdb +spec: + containers: + - name: cockroachdb + image: cockraochdb:1.1.0 +--- +apiVersion: apps/v1 +kind: StatefulSet +metadata: + name: cockroachdb + namespace: myapp-staging + ownerReferences: + - apiVersion: app.k8s.io/v1beta1 + kind: Application + name: myapp +spec: + replicas: 3 + containers: + - name: cockroachdb + image: cockraochdb:1.1.1 +--- +apiVersion: v1 +kind: Service +metadata: + name: cockroachdb + namespace: myapp-staging + ownerReferences: + - apiVersion: app.k8s.io/v1beta1 + kind: Application + name: myapp +--- +apiVersion: app.k8s.io/v1beta1 +kind: Application +metadata: + labels: + app.kubernetes.io/name: myapp + name: myapp + namespace: myapp-staging +` + out := &bytes.Buffer{} + err := kio.Pipeline{ + Inputs: []kio.Reader{&kio.ByteReader{Reader: bytes.NewBufferString(in)}}, + Outputs: []kio.Writer{kio.TreeWriter{Writer: out, Structure: kio.TreeStructureGraph}}, + }.Execute() + if !assert.NoError(t, err) { + t.FailNow() + } + + if !assert.Equal(t, `. +└── [Resource] Application myapp-staging/myapp + ├── [Resource] Service myapp-staging/cockroachdb + └── [Resource] StatefulSet myapp-staging/cockroachdb + ├── [Resource] Pod myapp-staging/cockroachdb-0 + ├── [Resource] Pod myapp-staging/cockroachdb-1 + └── [Resource] Pod myapp-staging/cockroachdb-2 +`, out.String()) { + t.FailNow() + } +} + +func TestPrinter_Write_Structure_Defaulting_when_ownerRefs_present(t *testing.T) { + in := ` +apiVersion: v1 +kind: Pod +metadata: + name: cockroachdb-0 + namespace: myapp-staging + ownerReferences: + - apiVersion: apps/v1 + kind: StatefulSet + name: cockroachdb +spec: + containers: + - name: cockroachdb + image: cockraochdb:1.1.1 +--- +apiVersion: v1 +kind: Pod +metadata: + name: cockroachdb-1 + namespace: myapp-staging + ownerReferences: + - apiVersion: apps/v1 + kind: StatefulSet + name: cockroachdb +spec: + containers: + - name: cockroachdb + image: cockraochdb:1.1.1 +--- +apiVersion: v1 +kind: Pod +metadata: + name: cockroachdb-2 + namespace: myapp-staging + ownerReferences: + - apiVersion: apps/v1 + kind: StatefulSet + name: cockroachdb +spec: + containers: + - name: cockroachdb + image: cockraochdb:1.1.0 +--- +apiVersion: apps/v1 +kind: StatefulSet +metadata: + name: cockroachdb + namespace: myapp-staging + ownerReferences: + - apiVersion: app.k8s.io/v1beta1 + kind: Application + name: myapp +spec: + replicas: 3 + containers: + - name: cockroachdb + image: cockraochdb:1.1.1 +--- +apiVersion: v1 +kind: Service +metadata: + name: cockroachdb + namespace: myapp-staging + ownerReferences: + - apiVersion: app.k8s.io/v1beta1 + kind: Application + name: myapp +--- +apiVersion: app.k8s.io/v1beta1 +kind: Application +metadata: + labels: + app.kubernetes.io/name: myapp + name: myapp + namespace: myapp-staging +` + out := &bytes.Buffer{} + err := kio.Pipeline{ + Inputs: []kio.Reader{&kio.ByteReader{Reader: bytes.NewBufferString(in)}}, + Outputs: []kio.Writer{kio.TreeWriter{Writer: out}}, // Structure unspecified + }.Execute() + if !assert.NoError(t, err) { + t.FailNow() + } + + if !assert.Equal(t, `. +└── [Resource] Application myapp-staging/myapp + ├── [Resource] Service myapp-staging/cockroachdb + └── [Resource] StatefulSet myapp-staging/cockroachdb + ├── [Resource] Pod myapp-staging/cockroachdb-0 + ├── [Resource] Pod myapp-staging/cockroachdb-1 + └── [Resource] Pod myapp-staging/cockroachdb-2 +`, out.String()) { + t.FailNow() + } +} + +func TestPrinter_Write_Structure_Defaulting_when_ownerRefs_absent(t *testing.T) { + in := ` +apiVersion: v1 +kind: Pod +metadata: + name: cockroachdb-0 + namespace: myapp-staging +spec: + containers: + - name: cockroachdb + image: cockraochdb:1.1.1 +--- +apiVersion: v1 +kind: Pod +metadata: + name: cockroachdb-1 + namespace: myapp-staging +spec: + containers: + - name: cockroachdb + image: cockraochdb:1.1.1 +--- +apiVersion: v1 +kind: Pod +metadata: + name: cockroachdb-2 + namespace: myapp-staging +spec: + containers: + - name: cockroachdb + image: cockraochdb:1.1.0 +--- +apiVersion: apps/v1 +kind: StatefulSet +metadata: + name: cockroachdb + namespace: myapp-staging +spec: + replicas: 3 + containers: + - name: cockroachdb + image: cockraochdb:1.1.1 +--- +apiVersion: v1 +kind: Service +metadata: + name: cockroachdb + namespace: myapp-staging +--- +apiVersion: app.k8s.io/v1beta1 +kind: Application +metadata: + labels: + app.kubernetes.io/name: myapp + name: myapp + namespace: myapp-staging +` + out := &bytes.Buffer{} + err := kio.Pipeline{ + Inputs: []kio.Reader{&kio.ByteReader{Reader: bytes.NewBufferString(in)}}, + Outputs: []kio.Writer{kio.TreeWriter{Writer: out}}, // Structure unspecified + }.Execute() + if !assert.NoError(t, err) { + t.FailNow() + } + + if !assert.Equal(t, ` +├── [.] Service myapp-staging/cockroachdb +├── [.] StatefulSet myapp-staging/cockroachdb +├── [.] Pod myapp-staging/cockroachdb-0 +├── [.] Pod myapp-staging/cockroachdb-1 +├── [.] Pod myapp-staging/cockroachdb-2 +└── [.] Application myapp-staging/myapp +`, out.String()) { + t.FailNow() + } +} + +func TestPrinter_Write_error_when_owner_missing(t *testing.T) { + in := ` +--- +apiVersion: v1 +kind: Service +metadata: + name: cockroachdb + namespace: myapp-staging + ownerReferences: + - apiVersion: app.k8s.io/v1beta1 + kind: Application + name: nginx +--- +apiVersion: app.k8s.io/v1beta1 +kind: Application +metadata: + labels: + app.kubernetes.io/name: myapp + name: myapp + namespace: myapp-staging +` + out := &bytes.Buffer{} + err := kio.Pipeline{ + Inputs: []kio.Reader{&kio.ByteReader{Reader: bytes.NewBufferString(in)}}, + Outputs: []kio.Writer{kio.TreeWriter{Writer: out}}, + }.Execute() + assert.Error(t, err) + assert.Equal(t, "owner 'Application myapp-staging/nginx' not found in input, but found as an owner of input objects", err.Error()) +} diff --git a/go/internal/forked/kyaml/krmfile/doc.go b/go/internal/forked/kyaml/krmfile/doc.go new file mode 100644 index 000000000..1c87e0b06 --- /dev/null +++ b/go/internal/forked/kyaml/krmfile/doc.go @@ -0,0 +1,19 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +// Package krmfile provides functionality for working with Krmfiles. +// +// Example Krmfile +// +// apiVersion: config.k8s.io/v1alpha1 +// kind: Krmfile +// openAPI: +// definitions: +// io.k8s.cli.setters.replicas: +// x-k8s-cli: +// setter: +// name: replicas +// value: "3" +// setBy: me +// description: "hello world" +package krmfile diff --git a/go/internal/forked/kyaml/krmfile/krmfile.go b/go/internal/forked/kyaml/krmfile/krmfile.go new file mode 100644 index 000000000..dbf5a9999 --- /dev/null +++ b/go/internal/forked/kyaml/krmfile/krmfile.go @@ -0,0 +1,10 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package krmfile + +// KRMFileName is the file where Krm metadata is stored +const ( + // KrmfileName is the name of the file that KRM metadata is written to + KrmfileName = "Krmfile" +) diff --git a/go/internal/forked/kyaml/openapi/Makefile b/go/internal/forked/kyaml/openapi/Makefile new file mode 100644 index 000000000..8de66aa29 --- /dev/null +++ b/go/internal/forked/kyaml/openapi/Makefile @@ -0,0 +1,62 @@ +# Copyright 2020 The Kubernetes Authors. +# SPDX-License-Identifier: Apache-2.0 + +MYGOBIN = $(shell go env GOBIN) +ifeq ($(MYGOBIN),) +MYGOBIN = $(shell go env GOPATH)/bin +endif +API_VERSION := "v1.21.2" +KIND_VERSION := "v0.11.1" + +.PHONY: all +all: \ + kustomizationapi/swagger.go \ + kubernetesapi/swagger.go \ + kubernetesapi/openapiinfo.go + +.PHONY: clean +clean: + rm kustomizationapi/swagger.go + rm kubernetesapi/openapiinfo.go + +# This will remove all currently built-in schema, +# so think twice before deleting. +# To replace what this will delete typically requires the ability +# to contact a live kubernetes API server. +.PHONY: nuke +nuke: clean + rm -r kubernetesapi/* + +$(MYGOBIN)/go-bindata: + go install github.com/go-bindata/go-bindata/v3/go-bindata + +$(MYGOBIN)/kind: + ( \ + set -e; \ + d=$(shell mktemp -d); cd $$d; \ + wget -O ./kind https://github.com/kubernetes-sigs/kind/releases/download/$(KIND_VERSION)/kind-$(shell uname)-amd64; \ + chmod +x ./kind; \ + mv ./kind $(MYGOBIN); \ + rm -rf $$d; \ + ) + +kustomizationapi/swagger.go: $(MYGOBIN)/go-bindata kustomizationapi/swagger.json + $(MYGOBIN)/go-bindata \ + --pkg kustomizationapi \ + -o kustomizationapi/swagger.go \ + kustomizationapi/swagger.json + +.PHONY: kubernetesapi/openapiinfo.go +kubernetesapi/openapiinfo.go: + ./scripts/makeOpenApiInfoDotGo.sh + +.PHONY: kubernetesapi/swagger.json +kubernetesapi/swagger.json: $(MYGOBIN)/kind $(MYGOBIN)/kustomize + ./scripts/fetchSchemaFromCluster.sh $(API_VERSION) + +.PHONY: kubernetesapi/swagger.go +kubernetesapi/swagger.go: $(MYGOBIN)/go-bindata kubernetesapi/swagger.json + ./scripts/generateSwaggerDotGo.sh $(API_VERSION) + +$(MYGOBIN)/kustomize: + $(shell cd ../.. && MYGOBIN=$(MYGOBIN) make $(MYGOBIN)/kustomize) diff --git a/go/internal/forked/kyaml/openapi/README.md b/go/internal/forked/kyaml/openapi/README.md new file mode 100644 index 000000000..fbe8103c3 --- /dev/null +++ b/go/internal/forked/kyaml/openapi/README.md @@ -0,0 +1,94 @@ +# Sampling New OpenAPI Data + +[OpenAPI schema]: ./kubernetesapi/ +[Kustomization schema]: ./kustomizationapi/ +[kind]: https://hub.docker.com/r/kindest/node/tags + +This document describes how to fetch OpenAPI data from a +live kubernetes API server. +The scripts used will create a clean [kind] instance for this purpose. + +## Replacing the default openapi schema version + +### Delete all currently built-in schema + +This will remove both the Kustomization and Kubernetes schemas: + +``` +make nuke +``` + +### Choose the new version to use + +The compiled-in schema version should maximize API availability with respect to all actively supported Kubernetes versions. For example, while 1.20, 1.21 and 1.22 are the actively supported versions, 1.21 is the best choice. This is because 1.21 introduces at least one new API and does not remove any, while 1.22 removes a large set of long-deprecated APIs that are still supported in 1.20/1.21. + +### Update the built-in schema to a new version + +In the Makefile in this directory, update the `API_VERSION` to your desired version. + +You may need to update the version of Kind these scripts use by changing `KIND_VERSION` in the Makefile in this directory. You can find compatibility information in the [kind release notes](https://github.com/kubernetes-sigs/kind/releases). + +In this directory, fetch the openapi schema and generate the +corresponding swagger.go for the kubernetes api: + +``` +make all +``` + +The above command will update the [OpenAPI schema] and the [Kustomization schema]. It will +create a directory kubernetesapi/v1212 and store the resulting +swagger.json and swagger.go files there. + +#### Precomputations + +To avoid expensive schema lookups, some functions have precomputed results based on the schema. Unit tests +ensure these are kept in sync with the schema; if these tests fail you will need to follow the suggested diff +to update the precomputed results. + +### Run all tests + +At the top of the repository, run the tests. + +``` +make prow-presubmit-check >& /tmp/k.txt; echo $? +``` + +The exit code should be zero; if not, examine `/tmp/k.txt`. + +## Generating additional schemas + +Instead of replacing the default version, you can specify a desired version as part of the make invocation: + +``` +rm kubernetesapi/swagger.go +make kubernetesapi/swagger.go API_VERSION=v1.21.2 +``` + +While the above commands generate the swagger.go files, they +do not make them available for use nor do they update the +info field reported by `kustomize openapi info`. To make the +newly fetched schema and swagger.go available: + +``` +rm kubernetesapi/openapiinfo.go +make kubernetesapi/openapiinfo.go +``` + +## Partial regeneration + +You can also regenerate the kubernetes api schemas specifically with: + +``` +rm kubernetesapi/swagger.go +make kubernetesapi/swagger.go +``` + +To fetch the schema without generating the swagger.go, you can +run: + +``` +rm kubernetesapi/swagger.json +make kubernetesapi/swagger.json +``` + +Note that generating the swagger.go will re-fetch the schema. diff --git a/go/internal/forked/kyaml/openapi/example_test.go b/go/internal/forked/kyaml/openapi/example_test.go new file mode 100644 index 000000000..74d26c742 --- /dev/null +++ b/go/internal/forked/kyaml/openapi/example_test.go @@ -0,0 +1,75 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package openapi_test + +import ( + "fmt" + + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/openapi" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" +) + +func Example() { + s := openapi.SchemaForResourceType(yaml.TypeMeta{APIVersion: "apps/v1", Kind: "Deployment"}) + + f := s.Lookup("spec", "replicas") + fmt.Println(f.Schema.Description[:70] + "...") + fmt.Println(f.Schema.Type) + + // Output: + // Number of desired pods. This is a pointer to distinguish between expli... + // [integer] +} + +func Example_arrayMerge() { + s := openapi.SchemaForResourceType(yaml.TypeMeta{APIVersion: "apps/v1", Kind: "Deployment"}) + + f := s.Lookup("spec", "template", "spec", "containers") + fmt.Println(f.Schema.Description[:70] + "...") + fmt.Println(f.Schema.Type) + fmt.Println(f.PatchStrategyAndKey()) // merge patch strategy on name + + // Output: + // List of containers belonging to the pod. Containers cannot currently b... + // [array] + // merge name +} + +func Example_arrayReplace() { + s := openapi.SchemaForResourceType(yaml.TypeMeta{APIVersion: "apps/v1", Kind: "Deployment"}) + + f := s.Lookup("spec", "template", "spec", "containers", openapi.Elements, "args") + fmt.Println(f.Schema.Description[:70] + "...") + fmt.Println(f.Schema.Type) + fmt.Println(f.PatchStrategyAndKey()) // no patch strategy or merge key + + // Output: + // Arguments to the entrypoint. The docker image's CMD is used if this is... + // [array] +} + +func Example_arrayElement() { + s := openapi.SchemaForResourceType(yaml.TypeMeta{APIVersion: "apps/v1", Kind: "Deployment"}) + + f := s.Lookup("spec", "template", "spec", "containers", + openapi.Elements, "ports", openapi.Elements, "containerPort") + fmt.Println(f.Schema.Description[:70] + "...") + fmt.Println(f.Schema.Type) + + // Output: + // Number of port to expose on the pod's IP address. This must be a valid... + // [integer] +} + +func Example_map() { + s := openapi.SchemaForResourceType(yaml.TypeMeta{APIVersion: "apps/v1", Kind: "Deployment"}) + + f := s.Lookup("metadata", "labels") + fmt.Println(f.Schema.Description[:70] + "...") + fmt.Println(f.Schema.Type) + + // Output: + // Map of string keys and values that can be used to organize and categor... + // [object] +} diff --git a/go/internal/forked/kyaml/openapi/kubernetesapi/openapiinfo.go b/go/internal/forked/kyaml/openapi/kubernetesapi/openapiinfo.go new file mode 100644 index 000000000..9b4c9b444 --- /dev/null +++ b/go/internal/forked/kyaml/openapi/kubernetesapi/openapiinfo.go @@ -0,0 +1,18 @@ +// Copyright 2020 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +// Code generated by ./scripts/makeOpenApiInfoDotGo.sh; DO NOT EDIT. + +package kubernetesapi + +import ( + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/openapi/kubernetesapi/v1212" +) + +const Info = "{title:Kubernetes,version:v1.21.2}" + +var OpenAPIMustAsset = map[string]func(string) []byte{ + "v1212": v1212.MustAsset, +} + +const DefaultOpenAPI = "v1212" diff --git a/go/internal/forked/kyaml/openapi/kubernetesapi/v1212/swagger.go b/go/internal/forked/kyaml/openapi/kubernetesapi/v1212/swagger.go new file mode 100644 index 000000000..79c7e06c8 --- /dev/null +++ b/go/internal/forked/kyaml/openapi/kubernetesapi/v1212/swagger.go @@ -0,0 +1,249 @@ +// Code generated by go-bindata. (@generated) DO NOT EDIT. + +//Package v1212 generated by go-bindata.// sources: +// kubernetesapi/v1212/swagger.json +package v1212 + +import ( + "bytes" + "compress/gzip" + "fmt" + "io" + "io/ioutil" + "os" + "path/filepath" + "strings" + "time" +) + +func bindataRead(data []byte, name string) ([]byte, error) { + gz, err := gzip.NewReader(bytes.NewBuffer(data)) + if err != nil { + return nil, fmt.Errorf("read %q: %v", name, err) + } + + var buf bytes.Buffer + _, err = io.Copy(&buf, gz) + clErr := gz.Close() + + if err != nil { + return nil, fmt.Errorf("read %q: %v", name, err) + } + if clErr != nil { + return nil, err + } + + return buf.Bytes(), nil +} + +type asset struct { + bytes []byte + info os.FileInfo +} + +type bindataFileInfo struct { + name string + size int64 + mode os.FileMode + modTime time.Time +} + +// Name return file name +func (fi bindataFileInfo) Name() string { + return fi.name +} + +// Size return file size +func (fi bindataFileInfo) Size() int64 { + return fi.size +} + +// Mode return file mode +func (fi bindataFileInfo) Mode() os.FileMode { + return fi.mode +} + +// ModTime return file modify time +func (fi bindataFileInfo) ModTime() time.Time { + return fi.modTime +} + +// IsDir return file whether a directory +func (fi bindataFileInfo) IsDir() bool { + return fi.mode&os.ModeDir != 0 +} + +// Sys return file is sys mode +func (fi bindataFileInfo) Sys() interface{} { + return nil +} + +var _kubernetesapiV1212SwaggerJson = []byte("\x1f\x8b\x08\x00\x00\x00\x00\x00\x00\xff\xec\xfd\x6d\x77\xdb\xb8\xf5\x28\x8a\xbf\x3f\x9f\x02\xcb\xfd\x77\x25\x99\x25\xcb\xc9\x4c\xa7\xfd\x9d\xcc\xea\xfa\x5f\x37\xc9\xb4\x69\x67\x32\x3e\xb1\xd3\xae\x73\xab\xde\x13\x88\x84\x24\xd4\x24\xc0\x01\x40\x3b\xea\x5d\xbf\xef\x7e\x17\xf6\x06\x40\x90\xa2\x44\x4a\x96\x6c\xd9\x61\x5f\x74\x62\x11\x04\x81\x8d\x8d\xfd\xfc\xf0\xff\xfe\x0f\x42\x4e\x52\x36\xe3\x82\x1b\x2e\x85\x3e\x79\x4d\xec\x4f\x84\x9c\x70\x39\xbe\xfe\x2f\x3d\xa6\x05\x1f\xd3\x34\xe7\x5a\x73\x29\x14\x9b\x73\x6d\x14\xb5\x43\xc7\x37\xaf\xc6\x3f\x97\x86\x1a\x2e\xe6\xff\x60\xd3\x85\x94\xd7\xe1\x65\x98\x53\x27\x8a\x17\x76\xe4\xc9\x6b\x72\xd2\x18\x49\xf0\xf1\x94\x69\x42\x05\x09\xf3\x93\x5b\xf7\x98\x8a\x94\x98\x05\x23\x8a\x69\x59\xaa\x04\x86\xa5\x44\x16\x0c\xbf\xad\x09\x37\x84\x16\x45\xc6\x99\x26\x46\x8e\x4f\x46\xfe\xb3\x85\xb2\x83\x0c\x67\x3a\x5a\x0c\x21\x27\xe1\x13\x1f\xd9\x0d\x67\xb7\x7f\x67\x4a\xd7\xb6\xdb\xbe\xea\xf3\xf6\xb7\x08\x87\x65\x4b\x95\x32\xc5\x52\x92\x71\x6d\x88\x9c\x91\x42\xb1\x19\x53\xf6\x97\xcf\x8d\x17\x3f\x93\x1b\xff\xaa\xdd\x95\x07\x02\xfb\x52\xb0\xc4\xe8\x31\x39\xbf\x78\x4f\x34\x53\x37\x4c\x91\x5b\x9e\x65\xc4\xa8\x25\x31\x92\x94\x9a\x91\x19\x57\xda\xf8\xd7\x09\x17\x30\x01\x7c\xf1\x76\xc1\x93\x85\x05\x84\x2e\x8b\x42\x2a\x3b\xcf\xfb\x19\x11\x52\x30\xbb\x18\x3b\x2c\x7c\x54\x17\x2c\xe1\x33\xce\x52\x9c\x80\x6b\x9c\xc1\xbd\xc8\x52\x32\x5d\x46\x6b\x18\x91\x1b\x9a\xf1\x14\x20\x8d\xeb\x99\x51\x9e\x91\x99\x54\xf8\xae\x9c\xfe\x9b\x25\x06\xbe\x46\x49\x61\xbf\xa1\xed\x1c\xfe\xec\x12\x29\x66\x7c\x5e\xe2\x49\x85\x4f\x6b\x42\xb3\x4c\xde\xb2\xb4\x5a\x95\x3d\xd2\x54\x32\x4d\x84\x34\x84\x8b\x24\x2b\x53\x46\xa8\x58\x56\x23\xae\x85\xbc\x15\x16\x12\x76\x37\x76\x81\x97\x6e\x81\x09\xcd\x32\xed\x1f\xf8\x0f\x57\x4b\xb5\x33\x4f\x19\xd1\x25\xac\xd4\x8f\xb3\x8f\x4a\xc5\x48\x21\x33\x9e\x2c\x2b\xa4\x41\x74\x37\x2c\x6f\xa2\x03\x21\x27\x66\x59\x30\x8b\x09\xda\x28\x2e\xe6\x27\xd1\xc3\xff\xae\xbd\xee\xc7\x51\xa5\xe8\xb2\x1a\x16\x0d\x3a\x49\x32\xce\x84\x79\x03\xd0\x69\xe2\xdd\xff\x4f\xb1\x99\x7d\xfd\x37\x67\xd1\x5d\x3c\xeb\x73\x05\x1d\x2e\xbd\x89\x27\x1f\x6d\x40\xe9\x78\x20\x81\x8f\x31\x4d\x16\xf2\xd6\x02\x29\x91\x79\x5e\x0a\x9e\x50\xc3\xc8\x2d\x37\x0b\x80\x9a\x9d\x7d\x4c\x3e\xb2\x5f\x4b\xae\x58\xda\xbe\x35\x07\xd9\x0b\x00\x6c\xc7\x9d\xfa\x31\x1e\x5b\x5b\x41\x29\x14\x4b\xe4\x5c\xf0\xff\xb0\x94\x30\xa5\xa4\xd2\x64\xa6\x64\x0e\xcb\xa8\x68\x04\x13\x69\x21\xb9\x30\x84\x2a\x46\x16\x54\xa4\x19\x4b\xc9\x69\x85\x5e\x34\x2b\x2d\xb6\x29\x46\xde\xcf\x85\x54\x8c\x48\x45\xec\x47\xc7\xe4\x2d\x9b\xd1\x32\x33\x80\x38\xf0\xcb\x49\xeb\x19\x36\xcf\x3a\xde\x69\x4e\x4d\xb2\xe8\xb5\xcf\x68\x64\x1d\xce\x0b\x46\x26\x27\xaa\xcc\x98\x9e\x9c\xe0\x3d\xe4\xda\x5e\xf5\xd4\x2e\x0b\xde\xb2\x97\x41\xe6\x5c\xcc\x89\x62\xbf\x96\x4c\x03\x89\x58\xdd\xde\xe4\xe4\xdd\x17\x9a\x98\xc9\x89\xdd\xe1\xe4\xe4\xdd\xaf\x25\xbf\xa1\x19\x13\x66\x72\x32\x9e\x88\x89\x38\x25\xf0\xfc\xb5\x9b\x94\xfa\xd9\x88\x14\xd9\x92\xf0\x99\xa5\x1d\xcc\x8e\xc8\x96\x38\xc4\xce\x1b\xd1\x0a\xbb\xc6\x31\xf9\x51\x2a\x3b\x2a\x2f\x32\x36\xb2\x2f\xa5\xac\xc8\xe4\x32\x67\xc2\x68\x92\x50\x61\xef\x59\x2e\x53\x7c\xe3\x86\x53\x4b\x96\xf5\xd9\xcd\xab\x91\xff\xc7\x94\x19\x6a\xff\x12\x29\x61\x5f\x0c\x13\x70\xb3\xab\xdf\xa7\xa5\x89\xc0\x81\x2b\x43\x52\x90\x92\xcf\xb4\xe0\x7f\x56\xb2\x2c\xf4\xeb\x7f\x4e\x4e\xec\x7c\x93\x93\x7f\xd9\x89\xb9\xa7\xc4\xf6\xf7\x9b\x57\xf0\x6b\x60\x15\xaf\xc9\x3f\x27\x27\xd1\x2a\x27\x27\xff\xfa\x3c\x8a\x76\x6f\x64\x6d\x69\x04\xf6\xd7\x5c\x18\xb9\x95\x65\x96\x02\x65\xb2\x84\x84\x09\xd3\xa0\x36\x1e\xc2\x01\xe8\xab\x60\xe6\x33\x0f\x19\x0d\xbf\xe2\xfa\xe0\xc8\x91\x12\xc3\xae\x47\x84\xdd\x30\x81\xa0\x13\xd2\x2c\x98\x02\x4a\x37\xb7\xfb\xb6\x6b\x73\xc4\xf0\xe0\x07\x61\x7f\x3f\xde\x83\x98\x32\xcb\x57\x6e\x18\x70\xab\xea\x45\x58\xf5\xba\xd3\x89\xaf\x7b\xfd\x7a\x6c\x7f\xef\x05\xcd\x59\xc7\x85\xbf\x5a\x30\x62\x87\x79\xee\xbb\x22\xd5\x8c\xc9\x07\xfb\x58\x2f\xfc\x8e\x66\x65\x96\x2d\xc9\xaf\x25\xcd\xe0\xd4\x46\x84\x8d\xe7\xe3\x11\xe1\x39\x9d\x33\xc7\xa4\xae\xcb\x29\x53\x82\x19\xa6\xc7\x5c\x8e\xc8\xed\x82\xc1\xc5\x8f\x86\x4c\x4e\x2c\xfd\x30\x8d\x8f\xbb\x4f\xe2\xb1\xd6\x26\x69\x1b\x2d\xd5\x9c\x0a\xfe\x1f\x64\x2a\x81\xd6\xef\x40\x1e\xed\xa4\xba\xa0\x09\xbb\x64\x19\x4b\x8c\x54\xdb\x32\xba\x9c\x26\x0b\x2e\x98\x5a\x8e\x8b\xeb\xb9\xfd\x41\x8f\x73\x66\xa8\xe5\x74\x3f\xd1\x29\xcb\xc2\xbc\x9b\x78\xdc\x87\xe6\x2a\x48\xca\x12\x9e\x32\x6d\xe1\x07\x37\xcc\x48\xa2\x4a\x51\x93\x1e\xa4\x00\x99\x0e\x25\x86\x29\xb5\xf4\xd8\x1e\x9d\x7f\xc1\x41\x0c\xa6\x75\xa2\x10\x35\x7e\xb8\xa7\x9e\x76\x94\x76\xdf\x04\xf9\x08\x80\x8b\x63\xb8\xd1\x2c\x9b\x81\xe8\x58\xcd\x34\x82\x11\xf0\xba\x25\xf7\x5c\x5b\x79\x6a\x26\x55\x8e\x5f\x77\x92\x96\x85\x40\x4a\x0d\x1d\x67\x16\x04\x7a\x65\x66\x1d\x28\x47\x92\x95\xda\x30\x45\x74\x22\x0b\x4b\xc1\xdd\x55\x1c\x59\x52\x2f\x98\x95\x2f\xf5\x35\x2f\xf4\xca\x55\xa9\xd1\x96\x75\xc0\x59\xba\x0f\x5a\x30\x4a\x1d\xc3\x83\xa3\x0c\x47\xb5\x96\x09\xa7\x20\x0c\x5a\xf1\xc1\x92\x13\x91\xb1\x1b\x96\x59\x8a\x32\x23\x93\x93\x97\x9e\x59\xbd\x9a\x9c\xfc\x40\xc8\x52\x96\x28\xb5\x69\x66\x6a\xc0\x23\x54\x93\x99\xb4\x2c\x4f\xbf\x26\x93\x55\xb4\x9a\x58\xbc\x9a\x08\x42\x26\xc8\x67\xdf\x7d\x29\x14\x83\xcb\xa6\xed\xa3\x7f\xda\x47\x04\x47\xd8\xff\x4d\x4e\xae\xd9\xd2\x3e\x88\x57\x34\xaa\x9e\xa2\x62\x81\xd3\x4e\x4e\x3e\x48\xf3\x5e\xd4\x9e\x23\xd3\x8d\x66\xc6\x9f\x5f\x46\x83\x08\x6e\xca\xff\xf9\x2f\xfc\xc7\x7f\xdb\xff\xfc\x6b\x22\xfe\xdb\x02\xf9\xfd\x8c\x70\xa1\x0d\xa3\x29\x6e\x9c\x22\xd9\x02\x52\xbb\x3d\xc0\x9b\xc0\x46\xb9\x82\x89\x1b\xae\xa4\xc8\x81\xcc\x21\xcc\x0b\x25\x53\x0f\x76\x6d\xe8\x9c\x8b\xb9\x05\xfe\x03\xc0\xbe\xb6\xb8\xb5\xe0\xef\x07\x7b\xdc\x55\x0d\xfc\x61\x73\x9b\x0e\xe1\x92\x31\xb2\x30\xa6\xd0\xaf\xcf\xce\x6a\x74\xf1\x2c\x95\x89\x3e\x4b\xa4\x48\x58\x61\xf4\x99\xbc\x61\xca\xaa\x6e\x67\xb7\x52\x5d\x73\x31\x3f\xb5\x40\x3e\x75\xe7\x71\x86\x17\xf1\x0c\x08\x41\x6e\x65\x4c\x77\x79\xb4\x05\x39\x3c\x0c\xe0\xd4\x31\x2f\xf2\x6c\x8a\xe5\x85\x59\x92\x1a\x45\x1b\x39\x85\xce\xd3\x12\x7b\x5b\x97\xc6\x92\x85\x71\x3b\xad\xc5\xb5\x3c\x28\xa1\xfd\xa5\xb6\x84\x3e\x54\x36\x10\x56\x5e\x23\x61\x0b\xaa\x2b\x2a\xe8\xa9\x5c\x7d\x83\x16\xe7\x99\x45\x06\x40\x79\x3a\xa7\xf6\x2e\x91\xa9\x74\xa8\x2f\xb3\x14\x57\x03\x1c\x4f\xb0\x5b\xf7\x17\x90\xe9\x20\x43\xb4\x88\x0a\xc8\x22\xb9\xb6\xf2\x85\xe6\xa8\xd1\x57\x82\xf8\x8c\x30\x0e\x7b\xd9\x48\xe9\xcf\x89\x28\xb3\xcc\x8f\x79\x5e\xad\xc5\xe9\xeb\x09\xd5\xc0\x6b\x13\xc5\xa8\x61\x23\x7b\x17\xab\x15\x36\xc6\xa4\x2c\x63\x86\xbd\xb0\x63\x2a\x7e\x04\xbb\x48\xa8\xb0\x54\x76\x41\x6f\x98\x83\x11\x79\x9e\xf1\x6b\x46\x28\x79\x1b\xa4\xac\x8f\x32\xcb\xa6\x34\xb9\x86\xf7\xc9\x85\x4c\x2f\x94\xfc\xb2\xfc\xa5\x40\xb3\x09\x4e\xf7\xc2\x13\xec\x96\x2d\x8f\xc9\x27\xcd\xe2\xa3\x09\x64\xc1\x6b\x0d\xf1\x71\x72\x4d\x64\x61\x4e\xb9\x18\x91\x29\x4b\x68\xa9\x99\x55\xcf\xac\x36\xa3\xec\x81\x2e\x81\xdd\xb4\x4b\x43\x64\xba\xb4\xa4\xc7\xd8\x13\x07\x9b\x86\x3b\xf5\x03\xdc\x14\xc5\xb8\xb8\x91\x09\x88\x37\xbd\x74\xb7\xd5\x17\x08\x17\x29\x28\xc6\x11\x76\x2f\xb8\x0e\x9b\xa9\x84\xba\x84\x66\x56\x21\xcd\xcb\xcc\xf0\x22\x63\xc4\xf0\xdc\xca\xff\x9a\x14\x54\x81\x99\x88\x12\xcd\xc5\x3c\xab\xa9\xb4\x88\xd7\x20\x7d\xb5\x2a\x7a\x1f\xec\x1e\x27\x27\x4e\x48\x7f\x3f\xfb\xc0\x58\xca\x52\xa7\xe7\xc1\xc3\xd7\xab\xa6\x10\xa7\xbc\xf8\x05\x59\x32\x65\x16\x16\xa7\x84\xe5\x20\xa2\x63\x21\xc8\xb1\xf0\x43\x2d\x93\x57\x13\x53\x43\x32\x46\x41\xad\xb4\x53\xa5\x40\x6a\x68\x06\x1b\x8f\xf7\xdd\xd0\xe2\xc3\x97\x1a\xa4\x60\xca\x2c\x46\xd8\x81\x06\xd4\x24\x5d\x69\x35\xd3\x25\x41\x31\xa7\x9a\xa6\xc8\xca\x39\x17\x9a\xd0\x99\x71\x52\x1a\xd0\x3a\x9a\x55\xe6\x28\x9a\x65\x63\x6f\x72\xd3\x78\x93\x50\xc7\x5d\x3a\x73\x16\x1c\x3b\xf9\x26\x2f\xb5\xf9\xc6\xee\x8b\xa7\x2c\x2f\xa4\x61\xc2\x8c\x08\x9d\xda\x23\x94\xa4\x50\x32\x61\x5a\x07\x86\x6c\x16\x6c\x49\x0a\xc5\x6e\xb8\x2c\x75\xb6\x0c\xeb\x1d\x93\x0f\xd2\xb0\xd7\xe4\x1b\x94\x18\xcb\x7c\x6a\x69\xc7\x2c\x86\x4b\x85\x5a\xda\xdf\xc3\x79\x49\x15\x15\x86\xe1\x3d\x9c\xb2\xa0\x96\x4b\xc1\xc6\xe4\x1b\x0b\xa1\x35\x13\x28\xa6\xed\x65\xe1\x82\xcc\x4a\x05\xb0\x41\x68\xf9\xe7\xee\x16\xe1\xb2\x47\x1e\x28\x88\x56\xad\x5f\xb6\x93\x5f\x7b\x02\x6b\xbf\x7d\x5b\x83\x5c\x09\xc4\xa1\x82\x9a\xbd\xe3\x53\x46\x14\xf3\xc6\x50\x4b\x47\xb8\xe0\x39\xff\x0f\xeb\x05\x02\xfb\x09\x23\xbd\xc5\x91\x45\x34\x0f\x8f\x94\x66\x19\xc9\xc1\x78\x0c\x26\x43\xc5\xe2\x25\x27\xd2\x32\x5d\x4b\x51\xed\xba\x68\xb0\x5b\x3a\x04\xaa\xd3\x1b\x27\x7b\xb5\xa8\x86\xee\x76\xed\xa0\xef\x80\xba\xdc\x41\x4c\x3e\xda\x31\x91\xc1\xfb\x16\x14\x87\xca\x94\x0d\x5a\x06\x35\x95\xde\x7c\xa6\xcb\x69\x65\xf8\x8e\x6f\x5e\x42\x95\x25\x09\x53\x59\x9a\x31\xb9\x6a\x7f\x00\x10\xf4\xb3\x3b\x2b\x8f\xa7\x94\xff\x87\x8a\xe5\xff\x21\x1f\xc1\xae\xf3\x17\x79\xcb\xc0\x96\xca\x9d\x25\x1b\xd1\x9c\xdd\x58\x16\xf9\xf7\x00\xc8\x60\xc9\x0e\x37\xc8\xd2\x20\x6f\xce\x5f\x7d\x0a\x06\xbb\xa2\xac\xe8\xba\x57\x49\x90\xe0\x18\xb0\x2d\x02\xf9\x76\xec\x0c\xb0\x27\xb1\xe2\x16\x4b\xf1\x6d\x2b\x69\xd9\x8d\xf8\xd3\xcd\x96\x24\xe5\x9a\x4e\x33\x3f\x25\x5e\xfa\xd1\x1d\x56\x09\xe8\x0f\xfa\x90\x23\x62\x32\xf6\x42\x78\xab\x1b\x88\x77\xd5\x47\xbc\xa9\xb5\x66\xdf\x8e\xbf\xd3\x3a\xc0\x51\x8c\x7e\xe6\xe6\xdd\xed\xc0\xf6\x50\xff\xc1\xcd\xe2\x97\x80\x58\x77\x32\x56\x5b\xb1\xe0\xdd\x6c\x66\x57\xde\x81\xde\x97\xd5\x48\x3c\xde\x35\x1c\xd2\x8a\x78\x76\x56\xc2\x70\xf0\x98\x9c\x27\x56\xd4\x06\x0a\x5b\x31\xbb\xd7\xe4\x83\x14\x6c\x04\xff\xff\x8b\x78\xab\x96\x1f\x4b\x41\x9e\x07\x22\x84\x12\x14\x1a\xb8\xbc\x85\xc8\xd2\x20\x9a\x69\x19\xc8\xfa\xa5\xcc\xc1\xea\xfb\x49\x80\x03\xe1\x45\x44\xfe\x41\x55\x8a\x97\x41\x7e\xfe\x74\x79\x45\xb8\xc5\x34\x2b\x3e\x81\x79\xca\x2a\x01\x3c\xe3\xce\x81\xb1\xd4\x86\xe5\x23\xcb\x2b\x13\x16\x59\xaf\x02\xe5\xb3\xc7\x8b\xcc\x89\x92\x59\x69\x4a\xc5\x88\x36\xac\xf0\x72\x5d\x85\x56\xc9\x82\x72\x11\x5c\x5b\xb5\x45\x58\x70\xb1\x99\x04\xac\x0c\xa4\xb8\x14\x29\xd0\xff\x8f\x1e\x1d\x83\x9e\x97\x22\x58\xa8\x31\x8a\x4f\x4b\xb0\xd6\x23\x4b\xa6\xa5\x91\xa7\x61\x49\xc8\x58\x97\xc1\x30\x59\x31\x70\x07\x04\x7f\x6e\x7f\xfc\xa3\x87\x95\x05\x9b\x05\xdf\x0e\xb4\xd0\xf2\x7b\x59\x9a\x4b\x0b\xbe\xb4\x0b\x6b\xae\x6a\x83\x23\x2f\x91\xdd\x9e\x9b\xa9\xf2\x38\x05\x03\xda\x79\x60\xf3\x7e\x4c\x41\xb5\x66\x7a\xd4\x20\x93\x59\x16\x40\xc2\xc1\x09\x90\x12\xa9\x82\x17\xa9\x7a\x0e\xde\xa2\xa0\x93\xb4\x38\x89\x80\xca\xfa\x6f\x01\x96\x12\x2b\x27\xd8\x89\xa7\xcc\xdc\x32\x26\x08\x1a\x21\xbf\x7b\x49\x34\x6e\xa6\x26\xc2\xbe\xaa\x7e\xae\x43\x74\x26\x55\x4e\x8d\x05\x05\x17\xe6\xbb\x6f\xdb\xc1\xcd\x85\x61\x73\xa6\x22\x78\xff\x8f\x06\xdc\x4f\x94\x77\xcc\xbc\x26\xff\x6c\x98\x2b\xd7\xf9\x9e\xd6\x5c\xf3\x51\xb7\xb7\xd4\x8d\xf8\x57\xf8\xba\x5f\x28\x12\x39\x7c\xee\xd6\xb6\x8b\x03\xb9\x46\x39\xfb\x7b\x93\xeb\x04\xb7\xe2\xb4\xc0\x7e\xea\xc4\x78\x06\x87\xb5\x2a\x1c\x80\x70\x43\x81\x20\x59\x4c\xc1\x2b\x04\x63\xed\x3d\x4f\x16\x54\xcc\x63\xad\xa8\x8f\xc7\x39\x18\xc7\xbb\x9c\xcc\x17\xef\xdd\xc0\xe0\x27\x8a\x9c\xb7\x2c\x25\x3a\x59\xb0\x9c\xa2\x08\xcd\xad\xc8\x57\x28\x66\x15\xd9\x68\x4b\xc1\x27\x8b\x0e\x52\xed\xf5\x11\x67\x33\x27\x91\x63\x0d\x67\x0b\x92\x61\x66\x29\xb6\x15\x20\x0d\x53\x56\x34\x03\x1c\x1f\x85\x9d\x3b\x40\xd4\x5c\x73\x48\xac\xc7\xe4\x67\x4b\xaf\xb8\x98\xc9\xd7\xc1\xa2\x32\xe7\x06\x0e\x9d\xcb\x33\xe7\x4c\x34\xcb\xb3\x44\x0a\xa4\x53\x52\xe9\xb3\x94\xdd\xb0\xec\x4c\xf3\xf9\x29\x55\xc9\x82\x1b\x96\x58\x8a\x79\x46\x0b\x7e\x0a\x8b\x15\x28\x15\xe6\xe9\x6f\x82\x08\xb4\x3d\x29\xba\xe6\x22\xed\x80\xfa\xdf\x38\x6a\xfd\x56\x26\xb1\x13\xb9\xcb\x1d\x80\xeb\x65\x8d\x8f\xef\x2e\xaf\x2a\xdf\x4d\xe4\xff\xae\x86\xea\x0a\xec\x16\x64\x5c\xcc\x3c\xef\x0b\xde\xcb\xe0\xb3\x44\x89\xc8\x5e\x46\xa2\xcb\x69\xce\x8d\xae\xa4\x0d\x23\xc7\xe4\x4d\x10\x8a\xca\xc2\xca\xc3\xe9\x98\xbc\x17\xe4\x0d\xcd\x59\xf6\x86\x6a\x76\x70\xa0\x5b\xe8\xea\x53\x0b\xbf\x1d\xc0\xee\xed\xd4\x7b\xb4\x45\xa1\x8d\xe4\x67\x66\xe8\x46\x43\xd4\xa5\xa1\x22\xa5\x2a\x0d\x66\x1a\xb7\x92\x1f\x0e\x0d\xaf\x60\x9a\x6f\x87\x88\x97\x5b\x3a\x90\x31\x88\x27\x80\x90\x3e\x9e\xe4\x36\x96\x65\x41\x94\x00\x4a\x1d\xd9\xf5\x9b\x61\x31\x87\x16\x32\x9b\xf1\x3e\x3d\x25\xcc\xda\xa3\x2f\xa7\x95\xd9\xf5\xb4\xb0\x92\xc9\x69\xce\xd4\x9c\x9d\x5e\xb3\xa5\x7d\xa5\xc1\xba\xda\xdf\x80\x45\xb1\x39\xbc\x00\x6f\x6f\x62\x91\x0d\x26\x15\x7e\xaf\xcd\x0b\xfe\xd6\x53\x47\x74\x4f\x1d\x01\xa9\x38\x6a\xed\xf4\x60\x2c\x6c\xaf\x15\x50\x88\x5b\xf5\x3d\xb8\x09\x37\x72\xae\xfa\x1b\x37\x81\x79\x9c\xdc\xbc\x5a\xdd\xde\xbf\xf6\xca\x6b\x7f\xe2\xda\xec\xc8\x6f\x7f\x72\x11\x0c\x15\xde\x6e\x1a\x3d\x30\xce\xa3\x66\x9c\x6d\x14\xa3\x09\xf6\x9f\xb6\x3a\xe6\xb5\xd3\xee\x93\x10\xd5\xaf\xd1\x5d\xf4\xde\x41\x72\x78\x2a\x92\x83\x45\xd3\xfe\x72\x03\xd0\xae\xc0\xcc\xef\x13\x56\x5b\xeb\x76\x78\x99\xba\x54\xb1\xa3\xe5\x72\xc0\x6a\x0e\xcb\xe9\x5a\x6c\x61\xeb\x79\xdb\xea\x60\xbc\xdc\xa6\x2c\x32\x70\xc8\x45\x0f\x2c\x71\xff\xe8\xa9\xeb\x98\xbc\x07\xc6\x67\x09\x7c\x9e\x33\x91\x7a\x2f\xda\x35\x23\xba\x44\x67\x8b\x01\xfb\x35\xd8\x2b\x60\x3a\xf6\xa5\xa0\x42\x07\x53\x36\xd8\xab\xfb\xb1\x44\x0c\xbf\xea\xe6\x88\x38\xce\x07\xf9\x84\x48\x32\xdd\x08\xa7\x9e\xb2\x4c\x5a\x3a\x25\xc7\xe4\xd9\x37\xcf\x60\xc7\x59\xe6\x86\x42\x7c\x89\xfb\xd5\x11\x2a\xb4\xaf\x64\x4c\xcc\xcd\xc2\xfb\x72\x74\xc6\x93\xca\x1a\x12\x2c\x55\x2d\x91\x43\x87\x8f\xad\x8d\x22\xd1\x7a\x0b\x0d\x35\x20\xd5\xe2\xb3\xbb\xc0\xe4\x07\x3f\x42\x40\xc9\xb6\x2b\xd1\x06\xa7\xfa\x75\x00\xcb\x47\xf5\x4b\xdd\xae\xb9\xe2\x81\x38\x25\x6f\x3e\xbe\x3b\xbf\x7a\x37\x22\x9f\x2e\xde\xc2\x7f\xdf\xbe\xfb\xe9\x9d\xfd\xef\x9b\x5f\x3e\x7c\x78\xf7\xe6\x8a\x48\x45\xbe\x01\xf3\x9e\x05\x27\x80\x49\xea\xda\x17\xc0\x4a\x23\x96\xde\xa0\x5a\x7d\xac\xb6\x0a\x8a\x41\xc0\x34\x4d\x81\xdd\x3d\xb6\xc3\xa8\x04\xb5\x0e\x0f\x52\xc0\xc7\x9a\x9c\x1d\xfb\x88\x2c\x1d\x2a\x33\x16\x27\x45\x34\xe2\xba\x5e\x93\x67\x85\x4c\xf5\x33\x92\x33\x2a\x34\xb1\xff\x1e\xe3\x4f\x67\x99\x9c\xfb\x9f\x01\x60\x72\x4e\x22\x17\x14\xa4\x36\xe0\xe8\x6f\xfc\x30\x7b\x6c\xe1\xf3\x18\xc4\x6b\x85\x8f\xd8\x71\xe5\x27\xaf\xbd\x53\xf3\x6c\x45\xf3\x9e\xe9\x84\x66\xac\x36\xd2\xfe\xd0\x9c\xf0\x9b\xb3\xf6\x15\x78\x0d\x99\xab\xfa\x1b\x2e\xea\xea\x96\x67\x69\x62\xb9\x7c\x13\x35\xa2\x3c\x07\x80\x1e\xd8\x84\x99\x00\xea\x5d\x4d\x9e\x4a\xd8\x9c\xbc\x61\x2a\xa3\x05\x5a\xcf\x19\x4d\x16\xe8\x8c\x76\xfe\xc4\x82\x89\xd4\x4a\x7e\xce\x8c\xcc\x44\x92\x49\x0d\x3f\x38\xd7\x6b\x6d\xeb\x39\x9f\x2f\x8c\x77\xd0\xbb\xc8\xf5\x07\x44\x44\x08\x17\xec\x40\x42\x18\xd3\x30\xd4\xe3\x6f\x41\xbf\x02\xbf\x22\xf8\xcb\xea\xd1\x0b\x6f\xd0\x05\x38\x39\x19\x91\x49\x15\x9c\x99\xda\xbf\x31\xa0\xe1\x9b\xc9\x49\x3c\x2c\xe0\x22\x75\xb1\xea\xce\x87\x78\xda\x08\x6b\xd4\x78\x60\xe8\xde\x88\x96\x10\x3e\x01\xa4\xdd\xbb\xec\xed\x5a\xea\x13\x8d\x1b\xcb\x59\xf9\x6e\x88\x7d\xeb\xfe\x26\x6e\x22\x9a\x00\x5c\x3a\xce\xcf\xee\x00\xa5\x98\x3d\xab\xc4\xf9\xbd\x2f\x6b\x08\xe1\xe6\xab\xc1\xd4\xe2\x73\x41\x95\x15\xf9\xfd\xc8\xca\xb9\xc0\x35\x7e\xb3\xaf\xa7\xa6\xcb\x2c\xb2\xb5\x94\x65\x35\x17\x9e\xb0\x8f\x6c\xc6\x14\x13\x09\xdb\x20\x63\x35\x87\x92\x85\xcc\x52\x0c\x8a\xf7\xbf\x18\x49\xdc\xa8\x71\xc6\xe6\x34\x59\x36\x05\xcc\xb5\xc2\x51\x8f\xd0\xec\xcf\x76\xcc\xe7\xb6\xc8\x67\xed\xbe\x59\x25\xb8\xec\x1e\xf3\xdc\x67\x11\x30\xb0\xb6\x12\x44\xd4\xfd\x2d\xa7\xa0\x66\xd1\xb5\x12\x3b\xe6\xb3\xcf\x62\x2b\x5c\x50\xc6\xa7\x8f\x3f\x11\xfb\xc0\xb9\xe7\xbd\xff\x0c\x42\xe6\x38\x86\xa3\x46\x91\xfb\x80\xfa\x7e\xb9\x3b\xac\x52\x2a\xd3\xb1\xca\xf7\xb3\x2a\x17\x05\xc9\xb5\x7d\xc9\x13\x58\xf7\x69\xbc\x6b\x0b\xa9\x41\xed\x0e\x7e\xc2\xc8\x03\xf7\xbb\xdf\x7d\x07\x92\xc6\x94\x26\xd7\xb7\x96\x09\x24\x32\x2f\xa8\xe1\x53\x9e\x71\xb3\x1c\x93\xcf\x76\xd6\xcf\x51\x00\x97\x0b\x23\xc1\xaf\xb9\xf0\x95\xe7\xaf\x4e\x7f\xff\xfd\xf7\xdf\x7d\x3f\xc2\x9c\x08\xcd\x6f\xd8\x8b\x7b\x77\xe8\x21\x92\x35\x93\x12\xba\x14\xc1\xad\xef\xf5\x4a\xc0\xc3\x86\x8b\xbd\x32\x76\x48\xec\x1c\x12\x3b\x87\xc4\xce\xea\xf5\x21\xb1\x73\x48\xec\x1c\x12\x3b\x8f\x2f\x9f\x70\x48\xec\x3c\x92\x83\x18\x12\x3b\x87\xc4\xce\x21\xb1\x73\x48\xec\x1c\x12\x3b\x87\xc4\xce\xa3\x49\xec\x1c\xf2\x3a\x87\xbc\xce\x21\xaf\xf3\xf8\xf3\x3a\x87\xec\xab\x21\xfb\x6a\xc8\xbe\x1a\xb2\xaf\x86\xec\xab\x21\xfb\x6a\xc8\xbe\xba\xbb\xa7\xa7\x6f\xfe\x55\x07\x55\xde\x73\x06\x96\x13\x58\x02\x63\x5a\x50\x31\x07\xa5\x7a\x48\xc3\x3a\xee\x68\xf2\x21\x98\xfa\xa9\x04\x53\x0f\x69\x58\xc7\x94\x86\xb5\xea\xa1\xef\x29\x6c\x0e\x89\x58\x21\x44\xbd\x83\xf7\x1d\x36\x40\x7d\xf3\xc7\x3b\x92\xb1\xba\x5f\xae\xe3\xef\xe6\xf1\x03\x0b\x3d\x6a\x16\xba\x4d\x42\x56\xdf\x83\x5e\x3b\xf1\x7e\x89\xd2\x90\x94\x35\xc8\x11\x43\x52\xd6\x63\xe1\x78\xf7\x90\x96\xd5\x16\xd1\xb4\x9e\xcd\xb5\x8c\xb6\x4c\xc0\x50\xee\x82\xed\x2c\x26\x58\x2d\xde\xb2\x0e\x9f\x77\x45\xc9\xd5\x4f\x97\x76\x98\x60\x89\x8b\x72\x73\x46\x1b\x27\xc5\x75\x73\xbb\x84\xfe\xa9\x14\x69\xd6\x19\xcd\xeb\xc7\x61\x1c\x2d\xb9\x78\xf7\x33\x61\x22\x91\x29\x4b\xc9\x9b\x73\x32\x85\x67\x8d\x50\x5a\x1f\x0b\x14\x8a\x9d\x45\x0b\x7b\xa6\x7d\xa0\x60\x62\x57\x05\x15\xdc\x18\x38\x84\x4b\x11\x85\xc1\xa2\x3d\x8c\x18\x55\x6a\x43\x94\x94\x46\x7b\xd3\x89\xbd\x67\x38\x01\x55\xf8\xa9\xb5\x36\x8f\xe9\xd2\xb0\xed\xc9\x81\x8b\xb8\xdd\x5f\x84\xdb\x4a\x00\xf9\x26\xa2\xf0\xd9\x7d\xde\x81\xbb\x16\x38\x1e\xc7\x03\xaf\x5a\xad\xde\xa1\xa3\xa7\x9a\x40\x2a\xf2\xb9\x54\xd9\xe7\x60\x4b\x0a\xf0\xf5\x09\x23\x0d\x57\x88\x2a\x85\x80\xf0\x62\x6e\x16\xde\xab\x83\x76\x75\xb0\x7c\x09\x70\xb9\x3a\x39\xa5\xd4\xac\xfa\xd4\x1a\x75\xa4\x54\x59\x17\x76\xc1\xfa\xe6\xfc\x86\xf9\x94\x9c\x24\xc8\x48\x35\x1f\x17\x17\x44\x7b\x72\xf9\xe9\xe3\x4f\x76\xfb\x39\x79\xfe\x19\x44\x23\xf6\xfa\xec\x6c\x21\xb5\x79\x5d\x48\x65\xce\x20\xe6\xfb\xc5\x18\x43\xc7\xb0\xb4\xa0\x9d\x0d\xbf\x24\x63\xf8\xb4\x83\xe5\x6a\xc1\xc8\x67\x3b\x5d\x88\x95\xb6\x9c\x0d\xce\x01\xe2\x76\xc2\x09\x78\x68\xd5\x21\xf5\x83\x2b\x1d\x18\x41\x87\xcc\x38\xcb\xd2\x50\x97\x0f\x8c\x7d\xf6\x03\x2e\x3b\x66\x8a\x51\xc2\xd9\x8d\x33\x38\xb3\x2f\x4e\xb0\x7b\xfb\xe1\x12\xf6\x2d\xf3\x08\xeb\x35\x79\x8e\x41\x36\x9f\x2d\x65\x3d\x0d\xbf\x7f\xf6\x9e\x0e\x37\x17\xe1\xe2\xd4\x3b\x45\xec\x44\x54\x37\x5c\x89\x94\x64\x74\xc9\x50\x86\xe0\x32\x03\xb0\xbf\x18\xfb\xad\x07\x6b\xf7\x14\x4a\x15\xbe\xbf\x20\x34\x4d\x15\xd3\xe8\x0d\xbe\xc8\x18\xd5\x50\x58\x91\xf9\x72\x89\x76\x9e\xcf\xf6\xf8\x32\x9c\xc0\x42\xfa\xd5\xb7\x7f\x18\xbf\x1c\xbf\x1c\xbf\xfa\x6c\x3f\x4f\xfd\xdc\x16\xd3\xb8\xbe\x5e\x92\x52\x64\x4c\x6b\xc0\x2a\x63\xa9\xda\x5c\x31\x70\x13\x2a\x56\xb9\x5e\x23\xdb\xbe\x14\x90\x0d\x65\x27\xd1\x8e\xe2\xd8\x31\x54\x44\x34\xc1\x79\xd6\x30\xed\x88\x45\x99\xaa\x51\xc0\x6d\x7c\x69\x2e\x4b\x88\x56\xd4\x06\x1e\xdb\x2f\x67\xfc\x9a\x65\x4b\x67\x1c\x17\x52\x9c\x5a\xac\xa2\x53\x88\x59\x1b\xb3\xf1\x08\xd0\x81\x51\x0d\x43\x4c\xa9\x04\x29\x0b\x74\x3b\x09\x76\xeb\xb1\x20\x60\x12\x22\x68\x40\xb5\xc9\x09\x70\xf4\xc9\xc9\x0f\x80\x22\x16\x93\xdd\xa3\x39\x17\x3e\xe6\xc4\x33\x7d\x17\x05\x79\x8e\xd9\x0a\xa1\x16\x25\xcd\x9c\xcb\x77\xe6\x93\xbc\xbc\x97\x80\x8a\xa5\x17\x0b\x0b\xa6\x80\x1a\x4d\x33\x57\x02\xf5\xd3\xc7\x9f\xc6\xe4\x7f\xcb\x12\xc6\x7a\x14\x85\x89\x8d\x04\xf3\x36\xc0\x51\x4d\xb9\x51\x54\x85\x69\x9a\xae\xe6\x59\x1c\x66\x43\x2b\xaf\x5b\x6a\xe5\x8b\x19\x77\x1b\x3f\x37\x86\xe5\x85\x71\x13\x60\xc9\xca\x52\x33\x45\x20\x3d\x41\xf3\x84\xd0\xd2\x2c\x20\x58\x8c\x4c\x4e\xec\x93\xd7\x76\x05\xb7\x52\xa5\xff\x17\x46\x83\x41\x30\x8e\x4f\x17\xfb\x51\xd1\x39\x46\x09\x3e\x9f\x9c\xfc\x66\x3c\x1e\x4f\x4e\x5e\x00\x04\x7e\x2d\x99\x5a\x92\x82\x2a\x9a\x33\x03\x57\x63\x72\xf2\xff\xf7\xcf\x5d\xe1\x4f\x37\xcb\xc8\xf9\xc1\x1f\x2a\x8b\x08\x7c\x48\x43\x1f\xa9\x21\xdd\xe0\xf1\xa6\x1b\xc4\x0e\xa7\xcf\xff\x7c\xe6\x70\xfa\xd9\xbf\x3e\x3f\x8d\x44\x04\xbc\xa1\x43\x36\xc2\x6e\xd9\x08\xf8\x6c\xc8\x47\x18\xf2\x11\x86\x7c\x84\xaf\x25\x1f\x01\xef\xca\x90\x8a\x30\xa4\x22\x0c\xa9\x08\x43\x2a\x82\x7f\x3a\xa4\x22\x0c\xa9\x08\x43\x8f\xa9\x21\x17\x61\xc8\x45\x78\x9a\xb9\x08\x43\x8f\xa9\xa1\xc7\xd4\xd0\x63\x6a\xe8\x31\x35\xf4\x98\x1a\xb2\x9c\x9e\x66\x96\x13\x5a\x82\x9f\x4e\xaa\x93\x4b\xba\x19\xb9\x9c\xa7\x4b\x99\x37\x33\x9f\x86\xc4\xa5\x6d\x13\x97\x6a\xc6\x6f\xf7\x70\xc8\x66\xda\x4f\x36\xd3\x77\x47\x98\xcd\xd4\x15\xf1\xb6\x17\x7f\xf0\xe3\x69\x0b\x65\x95\x24\xc5\x12\xea\xec\xee\x37\xaf\xc6\xaf\x7e\x3f\x22\x45\x46\x85\xb0\x9c\x07\xa6\xc8\xe5\x0d\x88\x27\xf0\xf4\x7f\xa2\x2e\xb4\x29\x9a\xef\xec\xe6\xd5\x66\xea\xef\x85\x8e\x21\x92\xfb\x98\x23\xb9\x87\x20\xe6\xa7\x12\xc4\x3c\x24\x43\x1d\x51\x32\x54\x7b\x00\x51\x4f\x89\x74\xc8\x87\xba\x6b\x63\x2a\x00\xff\x1e\x82\xc3\xbb\xf9\xfe\xd0\xa2\x6a\xe0\xa3\xdb\x66\x44\x3d\x60\x8b\xaa\x1e\x82\xec\x5d\xd4\xe6\x41\x9a\x78\x2a\xd2\xc4\x90\x12\x85\xbf\x1f\x1b\xd3\xeb\x48\x88\xda\x2f\xe3\x1b\x3a\x56\x0d\x1d\xab\x36\x80\x68\xe8\x58\x35\x74\xac\x3a\x8a\xc3\x18\x3a\x56\x0d\x1d\xab\x86\x8e\x55\x43\xc7\xaa\x47\xd9\xb1\x0a\x45\xad\xa1\x6d\x55\xf5\xfd\xa1\x6d\xd5\xb6\xab\x1c\xda\x56\xad\xb9\x9b\x0f\xdd\xb6\x0a\x2f\xf7\xd0\xbb\x6a\x48\x26\x1d\x92\x49\x87\x64\xd2\x21\x99\x74\x48\x26\x1d\x92\x49\x87\x64\xd2\x21\x99\x74\xc3\x5d\x1f\x92\x49\x87\x64\xd2\x21\x99\x74\x48\x26\x85\xff\x0d\xc9\xa4\x5f\x41\x32\xe9\x90\x4b\x3a\xe4\x92\x0e\xb9\xa4\xc7\x9f\x4b\x3a\x64\x7c\x0d\x19\x5f\x43\xc6\xd7\x90\xf1\x35\x64\x7c\xb5\x23\xc6\x90\xf1\xf5\xd4\x32\xbe\x1e\x7f\x2b\xaa\x43\xa5\x7e\x75\x6c\x70\x48\xfe\x7a\x0c\x41\xeb\x43\xb8\xf6\x53\x09\xd7\x1e\x92\xbf\x8e\x2e\xf9\x6b\x68\x87\xe5\x5e\x7c\x88\x76\x58\xfb\x8d\x83\x1f\x1a\x63\x0d\x1c\xf5\x89\x35\xc6\xea\x25\xdf\xde\x45\x9f\x1e\x64\x8b\xa7\x22\x5b\x0c\xa9\x60\xf8\xfb\xf1\x31\xc0\x7b\x4d\x06\x1b\xfa\x64\x0d\x7d\xb2\xba\xc3\xd6\x37\xd1\x88\xa1\x59\x96\x19\x9a\x65\x0d\xcd\xb2\x86\x66\x59\x43\xb3\xac\x47\xd9\x2c\xab\x28\xb4\x95\x07\xdf\x58\x51\x4d\x66\x19\x53\x1f\xd9\x0d\xd7\x9b\x0d\xe1\xab\x83\x2b\x67\x15\x9c\x0b\xcf\xf3\x12\x5d\x62\x5a\xd0\x42\x2f\x24\xe8\x46\xe8\x3b\x45\x11\x12\x65\x08\xc4\x60\xc5\x74\x21\x05\x9e\xbd\x3d\x30\xcd\x14\xa7\x19\xff\x0f\xd4\x3d\x15\x29\x49\x59\xfc\x4b\xe5\x7f\x77\x14\xc2\x49\x20\x2e\x25\x2c\xa8\x9e\xf0\xb5\x31\xf9\x05\x3d\x64\x2d\x4b\x5e\x50\x4d\xa6\x8c\x09\xa2\xcb\x24\x61\x5a\x63\xc4\x21\xc6\x21\xa4\x10\x15\x96\x50\x41\x9a\x5a\xc3\x55\x2d\x12\x3f\x72\xce\x44\x39\x03\x56\x89\x86\x0c\x4c\xaf\x80\x80\x91\x1f\x91\x0c\x2e\x78\x69\xbc\xa8\xf1\x96\x1a\x8a\xf4\x76\xdc\xb2\x46\x50\x7c\x46\x64\xe1\x3d\xdd\x53\xe6\x62\x20\x5c\x61\x5e\x98\x79\x44\xd2\x12\x08\x90\x55\x7a\x2c\xf2\x4e\x97\x55\xec\xc7\x5b\xca\x72\x29\x2e\x19\xfa\x14\x2e\xed\x77\x67\x65\x66\xff\x4e\xc2\xd7\xd0\x4d\x8c\x3b\x84\x61\xca\x05\x4a\x8c\x6a\x7a\x19\xb7\xe0\xb2\x67\x57\x39\xde\xc3\x4d\x8e\x32\x0d\x20\x76\x12\x66\xa9\x5b\x16\xb0\x82\x9d\xc6\xda\xbe\x06\x93\x48\x81\x2c\x6b\x24\x0f\x89\xc3\x88\x88\x89\xa5\x90\x38\x0a\x21\x31\xe8\x96\xf5\x19\x49\x58\x5b\xa0\x50\x3c\xa7\x8a\x67\x4b\x58\x7f\x38\x78\x07\x82\x68\x7f\x83\x7d\xe5\xa8\xed\x2b\x77\x57\x6d\x55\x29\x0c\xcf\xd9\xf8\x23\xbd\x7d\xe7\x03\xa4\x37\x4a\xad\x70\xed\xb8\x8f\x55\x42\xe2\xc2\x56\x50\xd6\xa7\x1c\x02\x25\x19\x2c\x22\x4f\xdb\x22\xb2\x9b\xb7\xe5\x99\xbe\x3f\xbb\x48\xd8\x74\x2b\x48\xd4\x2a\xdf\x6e\x5b\x7f\xc5\xb1\x43\x07\x00\x4c\x34\x74\x3f\xc7\x38\x5f\x21\x1e\xc6\x92\xbc\x05\x67\xcf\xfa\xe8\x80\xdf\xff\x6e\xcf\xd1\x01\x61\x4f\xf7\x69\xcf\x29\x0a\xdd\x6e\xb7\x69\x91\x91\xd6\xdb\x69\xb6\x31\xd1\xac\x95\xc1\x3a\xbc\x10\xed\x2f\x78\x45\xdc\x11\x12\x27\x1e\x81\x30\x15\xfc\x11\x2d\xe2\xd0\x4a\x98\xd7\xc0\x2b\x8f\x90\x57\xf6\xf1\x45\xbc\xb7\x63\x3c\x77\x5b\x7f\xe2\x7a\x4f\xce\x88\xf5\x1a\xc4\xe0\x6a\x18\x18\x6b\x4f\x57\xc3\xfd\xb3\xce\xa3\xf5\x27\x6c\xc1\x7f\x3a\x7c\x05\x3b\xf0\xa0\xa0\x2f\x6e\x60\x3b\x95\x4e\x59\xdd\x9f\x35\x31\x6f\x24\x85\xb1\x44\x33\x33\x30\x96\xa3\x66\x2c\x03\xbd\x7d\x2a\xf4\xf6\xb1\x2b\x32\xba\x60\xc9\xf6\x1e\xad\x26\xfd\xba\xb4\xb3\x6c\xda\xff\xd5\x82\x91\x94\x69\x4b\xf1\xc9\x94\x2d\xe8\x0d\x97\x2a\x10\x8c\x88\x6c\x1d\x1a\x18\x76\xbb\xa7\x54\xa4\xa7\x56\xe5\x2a\xf5\x1a\x98\xe0\xb3\xbb\x43\x05\xe7\xe9\x82\x4b\x52\x2a\x28\xac\x85\x9f\x6d\x85\xca\x15\xfe\x60\xa8\x37\x01\xca\x12\xe4\x4c\x30\x22\x4e\x97\xe8\x05\xba\xe5\x22\x95\xb7\xf0\x3e\xcf\xd9\x98\x5c\xc8\xa2\xcc\xa8\xd3\x26\x41\xcd\x04\xdf\xe9\x98\x7c\x64\x34\x3d\x95\x22\x5b\x3e\x20\xb8\xbb\x4c\xe8\xf7\xc2\xe3\x2b\xfe\x7b\x18\xb6\xfe\x46\x0a\x6c\x5b\xd6\x87\xbf\x87\xc1\x8d\xd8\x76\x34\x0e\x00\x7f\x8f\xec\xcb\x86\x50\x70\x94\x53\x2e\x08\x50\xee\x1e\x1c\x3f\xa3\xda\x5c\x29\x2a\x34\x7c\xe6\x8a\xaf\x16\x12\xb8\x03\x21\x84\xe9\x36\xa1\xfa\x4f\x54\x1b\xec\xeb\xe7\xa4\x17\xb7\x5b\x13\x56\xe4\x33\xba\xa4\x60\xfe\x32\x18\xe9\x33\xca\xd7\x98\x04\x73\xa6\x35\x9d\x77\x05\x2b\x9c\x93\x45\x99\x53\x41\x14\xa3\x29\x78\x4a\xdc\x6b\xde\x2e\x63\x99\x69\xca\x0c\xe5\x99\x4f\x8b\x83\x64\x92\xb0\xb2\x5d\xba\xbb\x31\xaa\x3b\x45\xab\x2b\x30\x06\xd9\x81\xce\x65\x1f\x01\xe6\x99\x26\x19\x80\xec\x2e\xab\x68\x27\x65\xab\xcc\x29\x10\x9e\x68\x01\x23\xef\x1d\xbf\x52\x56\xe2\xfa\x91\x66\x9a\x8d\xee\x92\x09\xb4\xec\xac\xec\x78\xb5\xc4\x82\x83\x15\xa2\x87\xd5\xec\xec\x9b\x6b\xd7\x34\xe0\xfd\x55\x40\x75\xa9\x1e\xbd\xaf\x7e\x87\x31\xa9\x36\x0e\xc5\xbc\xc4\x2a\x1b\x89\x17\x99\x2b\xea\x3f\x18\x89\x8e\x5b\x96\xef\x63\x24\x3a\x0f\x96\xa1\xd6\x73\x5d\x3b\xcf\x4e\x62\xc7\x60\x09\x1a\x34\x93\x23\x0f\x3a\x7d\x12\x16\xa2\x3a\xad\x3f\x8c\x04\x79\x59\x57\xcf\xd6\xb2\x11\x3b\x2e\xb8\x58\x31\x62\x2d\xd9\xd5\x30\x94\x73\x61\x35\x84\x65\xcf\x94\xdd\x05\xc3\xa6\xbd\x65\x1e\xf5\xeb\x75\xd9\xad\x20\xd5\x60\xd4\x15\x44\x40\x55\x21\x1f\x11\x8b\x2f\x64\x1a\x95\xa2\xb2\x22\xda\x32\x24\x62\x42\xe9\x99\x19\x44\x24\x38\xd7\x0a\x53\x24\x51\x54\x2f\xb8\x98\x63\xc4\x11\x37\x2e\x1c\x2b\x2a\x22\x41\x6f\x28\xcf\xac\xa0\x57\xcf\x62\x7e\x49\x9e\xdb\x8f\x85\x1e\xd4\x2d\x2f\x10\xaa\x89\x96\x52\xd8\xff\x72\xd7\x54\x81\xa6\xcb\x3d\x55\x57\x6d\xf1\x20\xfe\x85\x6b\x23\xd5\xf2\x27\x9e\xf3\xae\x0a\xb4\x57\xb5\x96\xc8\x32\x4b\xc9\x02\x5f\x86\x80\x38\x86\x71\x39\x12\x83\x9a\x42\x58\x89\x53\x1e\x81\x5e\x03\x21\xc5\x48\xc5\x94\x43\x89\xda\x92\xeb\x45\x48\x59\x66\x5f\x8a\x8c\x27\xdc\x90\xff\x30\x25\xb1\x7c\x89\x34\x51\x00\x64\x0d\x96\xaf\x5e\xee\x1d\x24\xfa\x21\x4b\xc8\x9c\xbb\x72\x39\x18\x36\x26\x6f\x98\x82\x92\xf0\x55\x69\xff\x9c\x0a\x3a\xaf\x94\xe9\x9a\xd1\xa2\xd4\x26\xd4\x4a\xac\xca\x63\x20\x8a\xa1\x15\x39\x85\x38\x9a\xbc\x1a\x88\x05\x84\x53\x62\x58\x5e\x58\xb9\x08\xc4\x7d\xac\x3c\xd2\x42\x7c\xef\x5a\x20\xe8\xec\x37\xf0\xdf\xd3\x50\x0c\x68\x8d\x88\xee\x16\xb3\xb5\xed\x23\x91\x8a\x59\x78\x5f\xc8\xf4\xca\xcd\xd1\x69\x13\x3a\xaf\x57\x95\xa9\x6b\xbd\x00\x1a\x08\x49\xf5\x97\x15\xe9\x06\xc6\x84\x55\xc4\x03\x1e\xe3\xb3\xb8\xf1\x39\x49\x64\xb1\x0c\x52\xac\x9d\x0c\xda\xc6\xdb\xa3\x15\x32\x75\x71\xa9\x71\x0d\x9d\xe8\x18\x60\x40\xa8\x36\xf3\x1c\x2a\xce\xc4\xef\xf2\x19\x11\xb2\x31\x8a\x47\x65\x6f\x5f\x6c\x7d\x82\xf6\xe0\x32\x49\x53\x7d\x16\xc5\x51\x9d\x29\x66\xaf\x23\x50\xf1\xea\xe7\xdf\x14\x32\x3d\x0d\xc7\xd4\x7a\x88\x28\xfe\x5c\x56\x19\x8b\x77\x34\x63\x7d\xaa\xcf\xd7\x71\xa4\x2e\xb2\xcd\x27\x4c\x22\x69\x2a\x32\x9a\xd8\xf3\x41\xa2\x53\xa7\xfd\xae\xaa\x85\x60\xb7\xd8\x83\x61\x7b\x99\x40\xaf\xde\xef\x93\x26\x88\xee\xae\xd1\x5d\x36\x55\xe9\xf5\xcc\x18\xf5\xe9\xa6\xbf\x66\xc5\xcc\xb7\x25\x5f\xb6\x0a\x22\xb0\x8c\x37\xb2\x14\x5d\xbc\x02\xc6\xd8\x8f\x2c\xa8\x5e\x90\xf0\xaa\x0e\x76\x86\xb0\xda\xe6\x8d\xaa\x70\x8d\x94\xda\x77\xf4\xc0\x20\x75\xea\xf5\x54\x0c\x62\xa0\x37\x92\xa7\x54\x24\x8c\xe4\x2c\x59\x50\xc1\x75\x4e\x6e\x17\x4c\x60\x8d\x3f\x96\x02\x9f\x70\x77\x33\x14\x7a\xf4\xdf\x17\xec\xd6\xea\x82\xab\x6e\xb6\xbd\xb3\x95\x60\x42\xe8\x6e\x6e\x52\x3b\x30\xa7\xad\x56\xa2\x81\x9c\x6a\xa6\x6e\x7c\x1d\xa6\x9a\x41\xee\x99\xae\x9d\x6f\xb3\x96\xef\xde\x74\xbb\xca\xa2\xd8\x53\xc9\xeb\x4a\x6c\xae\xa5\x42\x37\x8c\x22\xdb\xa7\x42\xc7\x50\x47\x70\x7c\x00\x79\xe5\x32\x59\xb0\xb4\xcc\x58\x97\x6a\x59\x97\x70\x2c\x89\x8d\x18\xb0\x4f\xa9\xa0\x86\x64\x8c\x6a\x43\x5e\xf9\xfb\x63\xe9\x3b\x54\xfc\x50\x0c\xcb\x8c\xbb\x3c\x23\x5f\xf4\xad\x1a\xb6\x27\xd2\x8c\x13\x6a\x66\xce\xf6\x8d\xac\xce\x49\xb2\x3d\xd8\x8c\x34\x34\x6b\x07\x5e\x24\x5c\x3b\x10\xd6\x81\x42\x9e\x63\x69\x5d\xfb\x04\x5f\x4b\xa4\x52\x0c\x78\x69\xfb\x1b\xfb\x62\x71\x87\x83\x23\x02\xe2\xdc\xdf\xdd\x5d\xf1\xae\x13\x74\x16\xed\xa0\x10\x1e\xd8\x4a\x5d\x11\x46\x67\x49\x8d\x86\x05\xdc\x15\xb1\xae\xf1\x1c\x95\x1d\xe8\x3e\xe5\x91\xda\x8a\x11\xe3\x86\x0a\xf6\xe2\x30\xd0\xf9\x99\x6b\xbd\xcf\x8b\x59\xdf\x33\x16\xd3\xf6\x99\x16\x8f\xfc\x5a\xe2\xde\xe1\x4c\x8e\x09\x95\x00\x7f\xf6\xce\x30\x71\xf9\x9f\x04\xbd\xbf\xdb\x13\x37\x92\x38\xde\x6b\x83\x02\x00\x4b\xff\xcc\x04\x5b\x29\x60\xb5\x0e\x32\xb9\xd4\x60\x13\xb7\xb2\xc1\x3c\xbc\x48\xfc\x5c\xab\xfa\x64\x24\x81\xed\x27\xfe\x77\x45\x37\xd8\x2f\x7b\x89\x49\x80\x9b\x3f\x3a\xc3\xfb\xac\x6f\xb6\x46\xe6\xd8\x4c\xf8\xba\x99\xef\x1a\x3a\xb0\x37\xcd\xe2\xd3\x3a\x85\x6d\xad\x86\x51\x7f\x23\x18\xe3\xcb\xc4\x84\x1c\x6b\x87\x44\x80\x5b\x4d\x9d\x0c\x6e\x4e\xa4\x01\x74\xeb\x1e\x16\x1d\xb9\x98\xe3\x77\x77\x56\x29\x3f\xc6\xb3\xac\x71\xbe\x37\x65\x72\x7c\xc5\x6f\x01\x83\xde\x30\xab\x4f\x8f\xc9\x85\x4b\x71\x0c\x25\x61\x97\x05\x23\x7f\x24\x93\x93\xda\x97\x26\x27\x6b\x9c\xc7\x5b\x78\x24\xa3\xeb\x89\x4b\x01\x87\x03\x66\x6d\x36\x3e\x86\x05\xae\x7f\x11\x6f\x21\x79\x6c\x72\x52\x6b\x94\x56\x1b\x7b\x5f\xf9\x86\x55\x55\xde\x4d\xc8\x15\x06\x11\x26\x2c\x9d\xd5\x24\x65\x49\x46\x2d\xbd\xba\xf1\x38\x84\xfa\xe3\x85\xd5\xda\xb1\x03\x2d\x98\x28\x2e\x07\x2f\xe5\xb1\x7b\x29\x07\xbf\xde\x53\xf1\xeb\xdd\xb1\x50\xdd\x1a\x52\x78\xb7\x38\xc0\x40\x3a\x3a\x8d\xbe\x97\x4d\xe7\x94\x59\x1b\x19\xc8\xa2\x6a\xe2\xeb\x56\x7d\xc7\x48\xbd\x6a\xdd\xdd\xa1\x7a\x3f\x57\x72\x5c\xb6\xac\xc4\x37\x5d\x0b\x9e\x69\x5f\x71\x17\xfd\xbe\x1f\x77\x65\xc5\x04\xf6\xeb\xab\x0c\xf3\xf6\x0a\x77\x5b\x1d\xbd\x3e\xde\xad\xea\xd6\x33\x04\xbc\xc5\x7b\x42\xe9\xe1\xbe\xf7\x73\x05\xbc\xb1\xda\x13\xb6\x2a\x70\x9b\xba\xa5\x3a\xd0\xe7\x21\x52\xef\xeb\x89\xd4\x8b\xae\xe8\x63\x0b\xd5\x0b\x2b\xef\x8a\xd5\xab\x0d\xac\x97\x9a\xac\x9e\x0d\x02\xf0\x71\x0b\xc0\x3b\xe7\x72\xb6\x1e\xf1\xda\x29\x77\x13\x3f\x86\x90\xbd\x41\xb4\xbf\x63\xc8\xde\xe3\x0e\xa5\xab\xd3\xe2\x03\xc9\xa7\x5d\xc1\x74\xb5\x81\x6b\xa3\xe9\xfa\x2a\x2c\x7b\x8e\xb3\xfb\x79\x87\x18\xbb\x47\x11\x59\xb7\x6f\x23\x7d\x41\x4b\xdd\x69\xd2\x7e\x1f\xd5\xe3\xa0\xc6\x9d\x69\x90\x64\xb8\x26\x38\xcb\x1a\x49\x66\x2a\x65\xc6\xa8\x58\xf3\x7d\x25\xe7\x8a\x69\xfd\x96\xd1\x34\xe3\x82\x6d\x11\x46\x49\xbf\xc0\x11\x83\x7c\xcd\x45\xed\x80\x6b\xca\x90\x2f\x5b\xe7\x3f\x45\xa6\xd8\x3a\x06\xc1\x5a\x6f\xa6\x35\xc5\xe6\x25\x3e\x72\xaa\x2e\xaf\xf9\x40\x0f\x8c\xa2\x92\x96\x11\x60\x75\xab\x42\xc9\xc4\x4e\x8c\xaf\xd6\x9a\xbb\x82\x2f\x26\x96\xfc\xb9\xb1\x98\x77\xd1\xd8\xf6\xbb\x2f\x09\x63\x29\x94\xf9\x01\xa9\x39\xf4\xef\x2f\xd5\x8c\x26\xbe\x39\x78\x6d\x41\x28\xd8\x45\xc5\xb6\xaa\x0d\xc2\xdb\x8e\x57\x30\x6d\x78\x8e\x5e\x86\x52\x79\xce\x05\x30\xa3\xed\x87\x58\xc3\xd4\xdf\xbf\x7c\xb9\xa7\xa6\x2b\x35\x15\x02\xec\xa0\x5d\x87\xfc\x21\xdc\x5d\x4f\x40\x20\xe2\xe9\x50\x11\x9a\xc7\x19\xb3\x1a\xd9\x8c\x87\xb8\xd5\xbb\xc7\xad\xfe\x54\x6b\xf2\x08\xb4\x02\x91\xea\x9d\x8f\xb6\x8b\x01\x8e\xed\x3b\x21\xea\x0e\x82\x65\xe0\x35\xef\x84\xe4\x3a\xdc\x52\xa8\xfb\x67\xd5\x8e\xd0\x09\xc2\x8f\xa8\x6e\x58\xff\x88\xd6\x75\x1a\xef\x5d\x23\x14\x23\xf3\x5d\x8f\xe0\xc4\xab\x26\xb5\xa9\x22\x14\xa1\xe4\x65\x4b\xa0\x62\x3d\x3c\xd1\x02\x64\xbc\x55\x7c\x14\x22\xf7\xdf\xd8\xf2\x18\xe2\x6d\xfd\xc0\xd5\x48\x5b\xdd\x1e\x6a\x7b\x6c\x91\x98\x4d\x6b\x6d\x2f\x51\x0e\x2d\x26\x4e\x98\xcb\xb7\xb5\xe1\x76\xab\xf4\x5e\xbc\xf9\xd8\x8f\x05\x5c\x35\xfc\xe8\x95\x78\x04\xe7\xd0\x16\xda\xd0\x8c\x6a\x20\x86\xaa\x39\x5b\x73\x27\xf7\x1f\x3c\xb9\xd7\xa0\xd3\x88\x78\x5c\xd5\xfe\xbe\xe7\xb0\xd3\x8a\x26\x3e\xa6\x70\xd3\xea\x9c\x0f\x1d\x6f\xda\x62\xd3\xef\x69\xa2\x78\xb0\x80\xd3\x9d\x82\x73\x36\x05\xe4\xb4\xe1\xe6\xde\x03\x72\xe0\xbe\xef\x48\x3b\x90\x56\x20\xfd\xbe\x47\x92\xd0\x53\xd8\x6d\xae\x56\x48\x71\x6a\x98\xca\xb9\xf0\xba\xe9\xc6\x65\x93\xe7\x58\x62\xd8\x35\x18\xae\x44\x0c\xcf\x63\xf6\x9f\x92\x55\x8a\xbb\x52\xf3\x68\x86\xee\x73\x09\x02\xae\x69\x89\xaf\xaa\xe7\x1e\x69\xc3\x5d\x89\x63\xd0\x1a\x3c\x31\xab\xab\x84\x10\x48\xf7\xea\xe5\xcb\xdf\x46\x34\x24\xa1\x05\x4d\xa0\x8a\xef\x15\xf6\x01\x5d\xfa\x3e\xd2\x53\xd6\xf8\x86\x0f\xe1\x9a\x96\x06\xe4\xe7\x25\xab\x11\xa3\x38\x1d\x0a\x97\xe3\x02\xf7\x0c\xd6\x75\x0e\x42\xc3\xbe\x0f\x05\x2d\x83\x3b\x1e\xc8\xb6\x48\x07\xdb\x83\x8d\xc5\x66\x1e\x2f\xc2\x60\x94\xe1\x61\x22\xda\xee\x20\x0c\x75\xc7\x8d\xad\x0c\x8e\x64\xc0\x85\xbc\xdd\x5a\xf6\xbd\xd7\x38\xb1\x35\x7e\xeb\x3b\x05\x8a\xad\x42\xe4\x0a\x43\xc7\x1a\xf1\x59\xed\x52\xfb\x2e\xee\xb1\x38\x5e\x8c\xe1\x65\xf1\xa1\x62\xcd\x60\xb5\x07\x8f\x17\xab\xa4\xa3\x0d\x48\x55\x0d\x22\x4c\xe8\x52\x85\x70\xd0\x4a\xf3\xae\xd3\x33\xe2\x19\x47\x33\x9b\x83\x8a\x25\x74\xf9\x10\x58\xb8\x68\xf0\xa3\x1d\xb3\x1f\x6d\xf0\x36\x3d\x15\x6f\x53\xcf\x40\x32\xd7\x09\xe8\x27\x94\xc3\x40\x0f\x89\xae\xbe\xbd\xca\x2c\x2f\xcc\x12\x9a\x00\x2d\xe1\xef\x14\xc9\x57\xb0\x3f\x83\xd4\x06\x8d\x0a\xf0\xfa\x5d\xc8\xf4\xb9\x55\x63\xbd\xe5\x3d\x9a\x0e\x93\xac\xed\xa9\x3f\xc9\x82\x79\xd5\x4e\x7b\x05\xca\xd5\x88\xd6\x56\x8e\xa8\x48\xbf\x7d\x0a\x25\xf5\x22\xb8\x75\x07\xea\xed\x60\xf2\x89\xc1\x35\xd4\xda\x3b\x88\x8b\x37\x92\x29\xf6\xea\xde\xad\xe6\xed\x13\x7e\xd8\x32\x7a\x7d\xf8\xa1\x93\x57\x20\xe8\xff\x11\xc6\x1f\x36\xe3\xf5\x86\xa2\x7b\x43\x28\x5f\x2b\x3c\x9c\xae\x12\xa3\xfb\x23\x8b\xe5\xab\xae\x75\x47\x2c\x5f\x7d\x60\x5b\xe1\xbd\x21\xa5\xe5\xb1\x68\x22\xdb\x74\x8a\x8e\x4f\xf5\x80\xd5\x59\xf6\x6b\x85\x8f\x58\x66\x4f\xe3\xfb\xa0\xb1\x3d\x69\x8d\xed\x98\x4b\xfa\x3d\xb2\x3e\xd2\x3d\xe4\xd4\xfd\x87\x22\x36\xd4\xbf\x3e\x6c\xaa\xa3\xb0\x5f\x9b\x1f\x73\x08\x38\xbc\xdf\x80\xc3\x9e\xfe\x30\xef\xc1\xf0\xa7\x29\x56\x82\xc1\xfc\x44\x77\x0a\x7d\x8a\xba\x65\x37\xc3\xc1\x0e\xc8\xf8\xce\x7e\x73\xbb\xa0\xe6\x94\xeb\x53\x7a\xda\x83\x33\x3e\xf2\x98\xab\xcb\xa8\xec\x1b\xdd\x54\x37\xd0\xdd\x85\xca\x79\xe9\x65\xec\x44\x96\xc2\x8c\xd1\xa8\x46\xae\xd9\x12\xc3\x2a\x51\xe6\x72\xc5\xe9\x7a\xd4\x14\x0c\x1e\xac\x48\x74\x1f\xea\x0c\xae\x8d\x7b\x72\x17\x6f\xfb\xa2\x83\x84\xcf\x08\x17\xba\x9c\xcd\x78\x02\xd2\x4a\xcd\x93\x91\x32\x03\x21\x72\x0f\x51\xf6\xaf\x27\x7f\x0d\xb7\x65\x7f\x8a\x56\x67\x0c\x56\x73\x68\x9f\x7a\x78\x5b\xb1\xb3\xad\x9d\xf5\x35\xa2\x5b\xb1\x89\x70\x98\xbd\x82\xaf\x42\x6b\xfd\xf8\xce\x3d\xa2\x18\xa2\x68\xd9\x07\x0e\x22\x6a\xb3\xcc\xf5\xd4\x63\x1e\x2c\x88\x08\xda\x52\x03\x55\xee\x1f\x72\x50\x43\xab\x8a\xf6\x43\x14\x41\x1c\xbd\xe2\x95\xa8\x2c\x78\x52\x9a\xb4\xd9\xff\xe6\x31\xf2\x00\x98\xb5\x75\x94\xd4\x2f\x2b\x2f\x10\xc5\x66\x99\xeb\x08\x5e\x8f\xa0\x9a\x6d\xb2\xb8\xf7\x0b\xb9\x3b\x7c\x10\x55\xed\xb8\xf0\xc6\x07\x0a\x70\x2f\x97\x7b\x47\x79\xb1\x09\x56\x84\x6a\xbc\x15\x2f\x3d\x3e\x76\x31\xaf\x27\x53\x0b\x70\xbc\x33\x53\x6b\x2f\x4b\xb4\x9e\xb5\x81\x52\xd6\xa8\xb1\xd4\xe6\x89\x8b\x8a\x06\xa9\x5a\x78\x4a\x1f\x65\x8d\x7e\xb9\x2c\xd5\xaa\x91\x7d\x3b\x01\xb7\x34\x3c\x1b\x73\x61\xb4\x51\xe3\xf7\xc2\xfc\xa2\x2e\xd1\x62\xd1\xe5\x37\xf0\xa9\x48\xcd\x82\x5f\x98\xec\x23\xaa\x28\xa1\x8a\xd5\xd4\x0b\xba\x03\x09\x4c\xa8\x40\x32\x48\x45\xa8\x0c\x56\x1f\xe6\x32\x78\xdc\x7f\xc2\xb0\x31\xf9\x3b\x18\xa0\x12\x0c\x99\xa1\x82\xd0\xa9\x96\x59\x69\xc2\xdd\x7d\xce\xbe\xbc\x26\xdf\xbf\x20\x90\x1a\x55\x30\x65\xaf\x05\x9d\xb3\x66\x6e\x0d\x8e\x7b\xf5\xf2\xb7\x2f\x9c\x52\x65\x67\x74\x36\xa5\x97\x56\xac\xfb\x99\x7e\x89\x0a\xdd\xd9\xbb\xf6\x72\x4c\xce\x1b\x1f\x83\xf7\xb2\xc4\x79\xf8\xc0\x8e\x15\x7d\x72\xba\x24\x4a\x96\x22\xc5\xe3\x05\xef\x49\xa8\x88\x2f\x67\x56\xef\xf2\xf1\x3c\x68\x55\xc3\x6f\xbc\xfb\x42\xf3\x22\x63\xaf\x31\x74\xd9\x38\x85\xcf\xa2\x8a\x91\xe4\xbb\x97\xbf\x1d\x59\x19\x04\xee\xfc\x77\x2f\x7f\xeb\x49\xeb\xdd\x8a\x7c\x8e\xd9\xd8\xe7\x58\xb5\x57\x3a\x7b\x51\x9d\x18\x06\x5f\x52\x5f\x96\x39\x48\xc2\x2e\xd3\x0c\xe4\xe8\x0c\x15\x7e\x6e\xf9\x9b\xba\x66\x10\xa8\x9d\x42\xd1\x2b\x97\x6c\x16\xea\x8e\x51\x65\xb4\x85\x53\x46\x4b\x81\x8c\xd0\x97\x7b\x26\x52\xf8\x0d\xc2\x66\xc6\xe4\x17\x91\xd4\x10\xc6\x7d\x22\x2a\xff\xf7\xb1\x4f\x8c\xbc\x5b\x60\x1d\xdd\xa4\x40\x60\x61\x1d\xef\xb0\xee\xb0\x68\x17\xeb\xe0\x77\x36\x65\x89\xcc\x99\xae\x85\x75\xc2\x67\xc5\xd2\x7b\x90\xdc\x62\x2a\x7f\x11\xe8\xda\x33\x74\xdb\x70\x4d\xd8\x0d\xb7\xba\xc1\x88\xa0\xb6\x98\x2a\xca\x85\x05\xf4\xea\x06\x79\x9e\xb3\x94\xdb\x5f\x22\x83\x4a\x6d\xc1\xde\x92\xe2\x8d\x1d\x16\x8e\xda\xd2\x08\x92\xf1\x9c\x1b\x3d\x26\xe7\x59\x26\x6f\xab\x9f\x79\x5e\x64\x3c\xe8\x36\x5a\xf3\x29\xcf\xb8\x59\x56\x91\x17\xc1\xfa\x0e\x73\x96\x79\xb3\x1c\xa1\x45\x47\x29\xa2\x00\x2d\x58\x87\x45\x92\x54\x96\x70\x5f\xbc\xc0\x42\x53\x2e\x98\xd6\x24\x59\xb0\xe4\x1a\xd2\x06\x35\xfa\x17\xb4\xac\x0c\xc6\x96\xd4\x0b\xcd\x6f\xa2\xe9\x83\x13\xc3\xd0\x6b\x18\x20\x09\x4d\x40\x3b\x0e\xab\xc4\xb0\xd5\x84\x96\x9a\x21\x38\x01\xca\x9e\x72\x70\xad\x4a\x20\x5d\x91\xd5\x44\x10\x9a\x15\x0b\xea\xd3\x07\xa0\x50\x26\x70\x10\x8d\xa5\xcd\x6a\x35\xc8\x5d\x2d\x3d\x00\xd8\x8c\x51\x53\x2a\x46\xe6\xeb\x83\xff\xf2\x1a\xc1\x38\x16\xea\xdc\xa8\xa8\x1e\xa8\xef\x94\xd5\x90\x37\x4a\x98\xdc\x03\xa1\x6d\x52\xa3\xc6\x22\x1c\x8e\xc1\xed\xf7\x04\xcc\x51\x84\x88\x2a\xef\x4e\x6b\x53\x79\x2b\x56\xa8\xad\x14\xac\xa2\xf4\x0d\x42\x8f\x67\x6c\xc9\xef\x2a\x45\x7e\xf5\x48\x28\x32\x40\x56\x1b\x59\x14\x2e\x0e\x3c\x10\x92\x96\x48\xca\x76\x22\x0c\x6f\xbb\xd0\xcb\xfa\x76\xa4\x66\x2b\x87\x28\x2c\x2f\x67\x82\x4c\x2d\xe6\x68\xcb\xe0\x2c\xe9\x6e\x8c\xc2\x5c\x5e\xbb\xbc\x8c\x26\xcc\xd1\x70\x97\x6e\x53\x65\x1b\x06\x3c\x1c\x81\xa5\xd7\xce\x0a\x79\xc6\x0c\xd8\x80\x91\x04\x62\x0e\x1a\x73\x8f\x88\x59\x94\x1a\x43\x4c\x11\x86\xd4\x54\x74\xff\x0f\xb8\x74\xa9\xf8\x9c\x8b\x8d\xc8\x18\x7f\x1f\x40\x95\x65\x00\x24\xdd\x72\x29\xf6\x19\x4a\xbb\x26\x94\xf9\xee\xc2\xe5\xa3\x97\x28\x57\x28\x55\xa8\xc9\x4a\xe8\x54\x36\x42\xf0\xeb\xaf\x3d\x62\xf9\xb0\x6e\x94\xff\xf6\xfb\xdf\xf6\x21\x3c\xfe\x2a\x45\x91\x92\x01\x66\xd4\x02\xac\x2c\x2a\xf9\x21\x5b\xfa\x89\x58\x03\x49\x1c\x11\x18\x11\x5d\x82\x65\xd8\x51\xe8\x26\x0d\x93\x8e\x69\x86\xcb\x9b\x4a\x80\x09\x83\x94\x7e\xf2\xca\xd1\x8b\x7a\x0e\x3b\x5c\x79\x27\x38\x69\xa4\x58\x90\x17\x72\xcd\xb3\xcc\xca\x3f\x5d\xcb\x9f\x95\xca\xde\xfe\x51\xe3\xa6\xb7\xe6\xc5\x34\x62\xc7\x21\xbe\x69\xe5\x16\x83\x24\xe0\x28\x5c\xeb\x92\x1f\x13\x7f\xbf\x47\xae\xbe\xee\x7a\xdc\x8d\x51\xaf\xbf\x5e\x15\x57\xde\xf9\x6a\xd4\xcb\x0a\x34\x70\xcb\x8b\x09\x7f\x58\x45\x81\x2d\xee\x8c\x43\xf0\x1a\x3f\x03\xe3\xd1\xa8\xc7\xd7\x03\x6e\xcf\xa4\x15\xd0\x51\xca\xb6\x03\xbc\xca\xb8\x72\xbd\x57\xae\xc1\xba\x14\xb1\xbe\x3c\xcd\xdd\x86\x1a\xd7\x5c\x77\x1b\xf6\xca\xf3\x2e\x0d\x35\x6c\x56\x66\xe0\x07\xe8\xcc\x54\xea\x7a\xd5\x6e\xa3\xaa\x70\x0d\x21\x0b\x89\xdd\x1d\xe4\xf9\x30\xc3\xb0\x00\x42\xd7\x2c\x57\xcb\xa2\x0f\xc3\x2c\xa8\x32\xcd\x80\xd2\xb6\x45\x5f\xf8\x71\x3e\xb2\xd1\xa9\x5c\x52\xa5\x20\x94\x50\xe3\xdc\xe5\xf6\xc7\x68\x39\x91\x84\x18\x3e\x15\x79\x6d\x63\x73\xc1\x51\xe4\x9c\x45\x4b\xdf\x24\xbf\x44\x1b\x8c\x5c\x3e\x18\x57\xe8\xd1\x16\xec\x48\xa0\xc7\x6a\x03\xc5\x5a\x52\x26\x2c\x00\x98\x1e\x93\xf7\xe1\xdf\x3e\x9b\xc0\xaa\xcc\x84\xea\xd7\x13\x41\x4e\xc9\x07\x66\x6e\xa5\xba\x7e\x4d\xce\x89\xe6\x62\x9e\xc1\x0d\x05\x03\xd4\x87\x4b\x6c\x28\x20\xb5\x11\x34\x67\x63\x18\x7e\x69\xa4\xa2\x73\xf6\x9a\x9c\x5b\x75\x5f\x2c\xc9\xdf\x65\x56\xe6\xec\x4d\x46\x79\xae\x09\x0d\x11\x47\x2c\x1d\x4f\xc4\x55\xe3\x80\xe6\x25\x55\x54\x18\x56\xe5\x36\x39\x35\x18\xd7\xe0\x97\xbd\x44\x87\x21\xcd\x6e\xe9\xd2\x7e\xa5\xf0\x71\x77\x90\xf5\xa0\x71\x05\x61\xf0\x10\x56\x78\xd4\x61\x85\x43\xb8\xdc\x53\x09\x97\x8b\x12\x9c\xda\x63\x48\xee\x92\xca\x13\xb3\x95\xad\x73\x79\x3c\xe7\xad\xc8\x5e\xa0\x8c\xdc\x89\x39\xe0\x79\x6a\x5f\xf6\xdd\x72\x69\x6a\xfc\x70\xcb\x64\x9a\x55\x9f\xfd\x45\xbc\xe6\x68\xea\xdd\xf2\x68\x8e\x2d\x69\x25\xe6\x78\x7b\x8d\x04\x8c\x26\xee\x93\xb6\xd2\x36\x7c\x7d\xde\x8a\x76\xa3\x1f\x69\xde\xca\x61\xea\x66\x0f\x39\x2b\x4f\x31\x67\x25\x46\xf5\x47\x96\xb3\x12\xdd\xe9\x8e\xa4\x95\xc6\xc8\xb6\xac\x95\x68\xc8\x90\xb6\x72\xdc\xf2\x65\x6b\xda\xca\x5d\x63\xad\x62\x46\x15\x4d\x31\xe4\x8a\x7c\xb5\xc2\x6f\xc8\x15\xd9\x9a\xde\x1d\x51\x32\x46\x93\x46\x1e\x4a\x06\xeb\x48\xc7\x38\x27\x8d\xb1\x1b\x32\x32\x62\x19\xb8\x87\x89\x49\xa6\x3f\x43\xc9\x83\x9c\x09\x73\x21\x33\x9e\x74\xf5\x97\x6c\x79\xc3\xbb\x8a\xb0\x96\x4f\x30\x4f\xfa\x18\x02\x67\x0b\x04\xf4\xa1\x19\x1a\x26\x49\x59\x8c\xd0\xe2\x89\x75\x7f\x42\xc1\x1f\x89\x3e\x7e\x0d\x01\x0b\x30\xc0\xdb\x29\xbd\x15\x37\xd4\x77\x20\x05\x7e\x9d\x6b\xf2\xf9\x17\x05\xc9\x17\x10\x0c\xf1\x19\x66\x56\x6c\x75\x25\x5c\x10\x2e\xec\x1f\xda\x4e\x88\x31\xed\xcf\x0b\x99\x9e\xbe\x1c\x39\x77\xa0\x4c\x4f\x5f\x8d\x08\x33\xc9\x0b\xef\x79\x5c\x29\x53\x7c\x4b\xb9\xa5\xf9\x86\x67\x84\xd1\x64\xe1\xc3\x27\x30\x92\xcf\x85\xa7\xb8\x52\xc6\x5c\xcc\xc7\xe4\x1f\xcd\x4d\x8c\xaa\xb2\x97\x68\xc5\xcd\xe5\x4d\x55\x8f\x58\x16\x85\xd4\xdc\x30\x5c\x1e\x6e\x98\x66\xc0\x80\xa0\x0f\x5a\xb4\xe9\x0b\xaa\x68\x96\xb1\xec\xb3\x33\xef\xc5\xbd\xe8\xbd\x2e\x57\xb8\x31\x58\xb3\xd9\x07\xe4\x7b\xfd\x0f\xcf\xc2\xc7\x75\xd8\x9d\x41\x2e\x8c\xdd\xba\x14\xee\x29\x58\x90\x61\x6a\x0c\x53\x01\x2b\xaf\x77\xb0\x4b\x91\xf4\xae\x0a\xb4\x7d\x08\xa2\x6a\x84\x20\xae\x3a\xe3\xc2\x08\x27\x13\xa2\x79\xcc\x47\xdc\x03\xf4\x34\x73\x60\xf6\x73\x09\x57\xc6\x4d\x68\x16\xc5\x78\x50\xa0\xce\xda\x50\x61\x78\x15\xaf\x1c\x8c\x68\x7e\x4a\xec\x2a\x6b\xa5\xf1\x1b\x9e\x96\x34\x8b\x42\xf1\x33\xed\x6a\xa0\xd1\x16\xcb\xe2\x12\x82\x7b\xa2\xe4\x98\x91\x47\xe3\xe3\xa9\x95\xdc\xf6\x4a\x88\xfe\x5c\x71\x09\xf9\xd1\x8d\xe2\xad\x39\xe5\x98\x5c\x15\x30\x3a\xa2\x48\xcf\x74\x78\x8d\x2c\xf0\x2b\x88\xe1\xcd\x5f\x3d\x04\x31\x68\x1c\x6a\xcf\xf9\xaf\x59\x2e\x1b\x38\x38\xba\x32\xa8\x37\x0c\x64\x4b\x42\x8b\x22\xe3\x2c\x5d\xa1\x98\x8e\x5a\xd7\x29\x48\x15\x7e\xf1\xc4\xaa\x32\xeb\x7d\x65\x08\x3d\x82\x64\x1e\x6d\x67\x4a\xd8\x07\xba\x6a\x26\x58\x81\x4a\x18\x19\xb2\xe0\xec\xbf\xfd\x45\xc7\xc7\x08\x98\xb9\x5d\xa1\xd0\xeb\x0c\x4b\x7e\x2c\x00\x07\xa2\x51\xe3\xd0\xc4\x68\x3c\x52\x53\x60\x10\xba\xb0\x48\xed\x83\xf8\xd0\xe9\xd6\xb0\xe3\x87\x95\x98\x31\x9a\xb6\xe6\xcc\x90\xb7\x1f\x2e\xcf\xbc\x53\xc1\x1d\x1b\x3a\xf2\xf0\x3c\xa8\xb1\xdc\xe1\x35\x30\x2f\x2f\x10\x9c\x22\xf5\x1d\x47\x3b\x1e\x3b\xa4\x1f\xeb\x9b\x64\x9c\x64\xa5\x36\x4c\x8d\x33\x99\xd0\xcc\xb1\xcb\xc9\x49\xcb\x0c\x93\x13\x8c\x53\xb4\x1c\x3f\x04\xe7\xc5\x2e\x8a\xb5\xb5\x49\x7b\x69\xda\xf7\x99\x87\x65\xee\x2d\x0f\xeb\x9d\x97\x0b\xb4\xa1\x79\xc1\x52\x30\x3d\xb6\xc0\x0e\xa6\x9f\x95\xd9\xcc\xfe\x17\x10\xad\xce\x66\x1c\x37\x29\x05\xff\xb5\xac\xfc\x37\x95\x72\xa2\x98\x0e\x91\x6d\x35\xb9\xaf\x15\xd8\xe5\xba\x36\xbf\xfd\x40\xde\x22\xb6\x36\x1a\x07\x6f\x02\x7e\xd9\xe8\x18\x5c\x73\x54\xae\x9d\xb2\x7e\x0a\x16\x36\x72\x89\xce\x57\xe7\x55\xae\xcc\xbf\x0d\xc8\x5a\xa1\x8b\x56\x6c\x05\x70\x38\x85\x22\xeb\x41\x38\x68\x87\xd2\x4d\xe5\x9e\xf3\x23\xbb\xc4\x94\xb6\x57\xea\x6d\xba\x12\xf4\xf6\x61\x4f\x89\x10\x0e\xe6\x7c\xf1\x50\xfc\x72\xc6\x14\xb3\xb2\x14\x69\xba\x00\x23\xf1\xb3\x85\x88\xe4\x14\x43\xe9\x1a\x84\x04\x82\x6e\xa5\xff\x2c\xb7\xa0\xb8\xa5\x0e\x9a\x9e\x41\x23\xe8\x63\xca\x43\xb1\x15\xfe\xbb\x1b\xcb\x27\xe0\xdd\x60\x59\xc7\x5c\x7e\x4b\xeb\x10\x27\xbd\x27\x5f\x0a\x56\x25\x17\x3d\x9f\x2e\x81\x9e\xbe\x20\x08\x91\x9f\x21\x8c\x96\x0b\x18\x55\xe5\x5c\xbb\xe3\x32\x41\x48\x3b\x6f\xfb\x98\xa1\xd7\x4c\x93\x42\xb1\x84\xa5\x0c\x62\x7b\x2c\xe3\xa2\x62\xe9\x26\xd7\xcd\x79\x46\xe8\xd4\x0d\x12\x1b\xb8\x60\xf7\x93\x51\x16\xa8\x8d\x95\x21\x40\xac\x8b\x9c\xb8\xdb\xdb\x3b\x7a\xea\xc1\x1b\x8b\xd9\xaf\xe1\x7f\x7b\x34\x0a\x76\x26\x58\xae\x8c\xdd\x94\x61\xc9\x76\xd1\x4e\xb7\x2a\xfe\x5e\x1f\x1c\x3c\x46\x5d\x25\xe1\x1b\xac\x7d\xed\xe5\xbb\x87\xa2\xf0\x6f\xc2\xd7\x3e\x3a\xba\xf5\x98\x12\x3b\x23\x53\xf8\x81\x13\x3b\x5b\x9d\x57\x3d\x6f\xe1\x83\x65\x76\x3a\x80\xf4\xcc\x12\x6c\x8c\x5e\xad\xd9\x00\x8c\x2f\x24\xc5\x6c\x12\xcb\x2a\x71\x21\x7e\xee\xd4\xa1\xc0\x88\x61\x92\xf0\xd5\x43\x61\x5f\x7d\xfe\xbe\x30\xc0\xd1\x23\x2b\x7d\x41\x18\x28\x96\xfb\xac\x8b\x10\x7e\x3f\xab\xd2\x50\x88\xd7\x72\x99\xa2\x75\xa1\x41\xb3\x5f\x4b\x60\x2f\xff\x7c\x39\x6a\x00\xbd\x59\xe0\xbd\x8f\x40\xbb\x75\x7a\xeb\xea\x0b\x2d\xf9\x96\xad\x6d\x02\x42\xae\x68\x8d\x82\xbd\xb7\x47\xaf\x50\x4c\x48\x83\x23\xa3\xae\x82\x57\xb3\x8d\x9c\xe5\x88\x87\xe6\xb9\x44\x0a\x92\x97\xce\x7d\xe2\xf0\xea\xfc\xe2\xbd\xb3\x93\x3f\x68\xe6\x6c\x6d\xec\x9d\x6e\x44\x95\x1f\x4d\x09\xe6\x4f\xbd\x59\xe3\xbb\xbb\xb7\x6c\xdb\xa6\xa9\x6b\x97\x7d\x1d\xa8\xf6\x7d\xcf\xeb\x5a\x1f\x7c\xe8\xdb\xea\xe1\x75\xda\xa8\xcf\x3f\xf2\x0f\x5e\x6c\x7f\x79\xb7\x2b\xf5\xdf\x18\x7d\x4f\x24\xba\x0e\xe5\x03\xc5\x65\x1e\x38\xdf\x79\xbd\x06\xd9\x4b\xd8\xfc\xb4\x49\x95\xd4\x35\xcd\x71\x03\xc8\x41\xa9\x74\x7d\xb7\x0a\xa6\x2c\xe8\x1c\x70\x35\x50\x51\x2e\x92\xac\x4c\x99\x06\x95\x83\xa6\x48\x1d\x68\x56\x45\xfa\x6a\x22\x58\xc2\xb4\xa6\x6a\x19\xcf\x11\x85\x3c\x7b\xf1\xae\x3a\x40\xbf\xba\x87\xe9\x64\xd0\x16\x0a\xbd\x49\x67\xaf\xbd\xdc\x19\xf9\xac\x51\xde\x85\xc8\x88\x66\xe3\x80\xb5\x31\xd0\xed\x56\xa1\x9e\xf1\x17\xf5\x93\x37\x2e\x24\x63\xa3\x41\xe1\x01\x7b\x1b\x94\x66\x61\x55\x6d\xf4\xd5\xd9\xb3\xf9\x93\x2c\x45\x8a\x31\x82\x1f\xbd\xfe\xbf\xe1\x06\xb4\x0d\x47\x2b\x43\xb0\x1e\x60\x14\x52\xcd\xb0\x45\x89\x91\xd7\x0c\x84\x8a\xa9\x9d\x80\x18\xb9\xe7\xf8\x8c\x26\x31\x77\xab\x69\xd6\xad\xd8\x67\xe8\x6b\xf3\x4b\xe4\xef\x34\xe3\x29\x01\xe7\x37\x98\x56\x9e\x5d\xc8\xf4\x19\x18\x5e\x9f\x5d\xb2\x44\x31\xf3\x6c\x87\xd5\x88\x6e\x83\xf2\x87\xc8\x7a\x7c\x87\x7d\x97\xbc\x6b\xdb\x9f\xde\xbf\xdd\xf5\x3b\xfb\x43\xd8\x2b\x8b\x49\x1f\x31\xe8\x61\x03\xa2\xc6\xc3\xaa\x18\x09\x8f\x88\xd8\x4c\x16\xfd\x74\xde\x88\xee\x32\xae\x87\xc0\xa1\xa3\x0e\x1c\x1a\x62\x73\x9e\x4a\x6c\xce\x61\x02\xd3\x37\xd2\x0b\xf0\xce\xb4\x7f\x6c\xc7\x70\xf2\xcd\x9f\xeb\xec\x41\xb0\xc6\xe6\x1a\x2d\xf3\x5e\x42\x8f\xea\xbb\x40\x84\x6b\x8f\x45\xaa\x51\xdf\xfd\x04\x22\x75\x9f\x58\x3f\x2a\x0f\x0e\x76\x67\xe0\xd7\xfe\x26\x16\x4a\xde\xf0\x94\xa5\xb1\x84\x08\x86\x42\xe4\x03\xee\x82\xf6\xa1\xf9\x65\xca\xad\x74\xd3\xa5\x90\x9d\xfb\x71\x20\x02\xa0\xe0\x6d\x98\x48\x99\x48\x49\x98\xa3\xaa\x9b\x70\xcd\xc4\x98\x9c\x5b\x22\xce\x0b\x58\x70\xb4\x38\xf0\x74\x38\xd7\xc8\x0c\x34\xb7\x5c\xb3\x6c\x16\xca\x0f\xe1\xa3\x19\xaf\xbc\x19\xde\xd3\xd3\xfe\x21\x17\x52\x63\x16\x4c\xdd\x72\xcd\x3c\x23\x71\x7c\xa0\xb6\x1e\x2f\xae\xe9\xd2\xd9\x78\xf2\x32\x33\xbc\xc8\x58\x34\xb5\x4b\x68\xf0\xe2\x78\x74\x8e\x8c\xd0\xb9\x3d\x84\x50\xee\xd6\xce\x5d\xbd\x68\x57\x69\xf5\xc8\xd2\x84\xda\x2c\x94\x2c\xf8\x7c\x41\x52\x36\x57\x0c\x65\x19\x55\x82\x33\x1b\x0b\xbc\xc2\xda\xa0\x61\x5d\x35\x4d\x3f\x73\xee\x3a\xda\xb6\x43\x54\xe8\xb4\x26\xfa\xee\x81\x54\xb4\x8a\xde\x9b\x54\xa1\xfa\x0b\xdd\x62\x77\x38\xd2\xe0\xbc\x0c\xd2\x37\x38\x19\xa2\x67\xd0\x12\x6e\xca\x2c\xab\xe4\xae\xa4\x86\x26\x99\x14\x73\xdf\xae\x08\xdf\x74\xb3\x43\xa8\x81\x1e\x93\x0f\xbf\x5c\xbd\x7b\x0d\x53\x59\x11\x1c\x4c\x82\xea\x99\x26\xee\x56\xde\x70\x76\x5b\xb1\x47\xf8\x0c\x4c\xef\xbd\x0f\xf5\xed\xa0\xb3\x19\x8b\x5f\xd4\x91\x4c\x48\x33\x26\x7f\x63\xac\x20\xef\xbe\x14\x1c\x6d\x86\xae\xc4\x11\xd1\x39\xcd\x32\xc2\x67\x64\x29\x4b\x72\x4b\xf1\xc6\xe7\x85\x65\xe1\x37\xd2\x81\xba\xfd\x38\x59\x73\xae\x8e\x8b\xbd\xfa\x6d\x67\x6b\x09\xa9\x93\x24\x2d\xab\x1a\x80\xb0\xd3\x28\x98\xc2\x53\x9a\x08\xf0\x70\xbd\x94\x93\xc5\x4c\xa9\x44\xb8\xf9\x78\xc3\x49\xca\x67\x28\x65\x57\xb3\x85\x4f\x68\x49\xa8\x27\x72\x95\x6b\x07\xea\x0e\xd9\xcf\x3d\xab\xb6\xf7\xcc\xf9\x8a\x38\xfa\xa2\xc1\x75\xdb\x54\x34\x77\xb4\xa1\xf6\xe4\x67\x15\xed\xdc\xd9\x68\xd3\x87\xcf\xf6\x64\x13\xb5\x5c\x2e\xc5\xb4\xd5\xc3\x77\x62\x09\x15\x88\xaf\x78\xce\x20\xca\xe2\x3e\x33\x84\xde\xad\x7e\x3e\xf4\x51\xe5\xa8\x11\x56\x2b\xac\xd0\xd0\x22\x1a\x50\x6c\x4b\xea\xd7\x98\x3e\xec\xb3\xce\x1e\xa3\x4e\xa1\xc7\x70\x51\xfa\x6b\xc9\xc8\x94\x51\x05\x05\x9a\x61\xea\xfd\xa6\x9f\xc0\x92\x5a\xaf\x6f\x05\xfc\xbd\x63\x97\xa5\x60\xdd\x68\x05\x74\x8e\x1a\xc3\xf2\x02\xe3\x28\xeb\xac\xd0\xe1\x15\xd4\x68\x82\x64\x20\xcb\x32\xd5\x98\x7c\x90\x86\xbd\xae\xd1\xca\xa0\x2e\x38\xd6\x9a\xd0\x64\x51\x59\x6d\x6f\xd9\x74\x21\xe5\xb5\x9b\x2e\xfa\x86\x54\xa4\xc8\xca\x39\xc4\x15\xc3\x48\x2b\x0f\x9e\x5a\x64\x6a\xb8\x4b\x06\x85\x76\x50\x68\x07\x85\x16\xc7\x3c\x7a\x85\xd6\x52\x8c\x7e\x39\xd7\x0b\x99\x81\xf3\x0a\x99\x3c\xc4\x89\x84\xa4\x4d\x77\xa0\x64\xca\x2c\x12\x31\x8b\x58\xf6\x24\xef\x47\x49\x86\x2d\x6c\x93\x7d\x3d\x83\x32\x4a\x96\xcc\xf9\x06\x83\x80\xcb\x18\xdc\x1a\xec\xf0\xb7\x0b\x06\x52\x64\xbc\x3f\x5f\x04\x28\xa2\xcc\xe9\xc6\x44\xeb\xc7\xaa\x99\x03\xcb\x3a\xac\x62\x1e\x30\xaf\x17\x67\xf4\x99\x42\x94\x44\x63\x6a\x7a\x29\xa9\x7f\xe9\xa0\x4a\x79\x2d\x20\xb2\x0a\x3d\xb4\x4a\xb4\x5e\xad\x08\xea\xf1\xab\x8a\xf3\x0f\xd1\x7d\x4e\x84\xf7\x6f\x6b\x42\xf5\x98\xf8\xef\x9c\xd2\x5b\xd0\xfe\x57\x39\xb5\x76\x7a\x10\x53\x7c\xb6\x5c\xd1\xd2\x20\x31\x04\xac\x05\x69\xbd\xb2\xab\x4b\x2d\xae\xeb\xd1\x71\xa4\x22\x24\x76\x08\x19\x3d\xb5\x0b\xf0\xd6\x8f\x51\xed\x4d\x9f\x47\x83\x2e\x28\xc7\x5b\xc3\x43\xf7\x99\xbf\x05\xcc\x25\x2d\x92\x04\xb9\x1f\x95\xfb\x41\x05\xd1\x7d\x08\x8f\x7d\x35\x93\x6a\xec\xaa\x62\xf2\x20\xf7\x04\x42\x83\x3d\x4a\xc4\x77\x24\x59\x48\xcd\x02\xfd\xad\x4b\xa1\xe8\xeb\x83\xcc\xb3\xbc\xa0\x06\xe2\x83\xe1\xc2\x4c\xa5\xbb\x35\x35\x89\x59\xa4\xc1\xe0\x54\x37\x66\xa1\xbb\x7b\xd5\xbc\x05\x82\x9f\xae\xf2\xbd\x1b\x33\x02\xa5\x89\x2e\x80\x4b\x9d\x83\x6f\x3c\xd3\x91\xe5\x08\x62\x7d\xbd\xb5\xad\xb9\xac\xf3\x8b\xf7\x2e\x29\x85\x99\x2a\xbf\x71\x5c\xcd\x8b\xda\xb4\x13\x5a\x23\x83\x06\x16\x99\xa8\x76\xde\x02\x3e\x0c\x9e\x76\x1a\x98\x8f\x26\xc1\xca\xa7\xcd\xf9\x8d\x74\x0d\xe5\x2b\x22\x11\xaf\xd2\x11\x26\x5e\x6d\x8b\x00\xcd\x01\x3a\x40\x1b\x5a\x85\xfd\x20\x14\x04\x86\x30\x98\xe6\x17\xdd\x07\x31\xfd\x22\x3c\x8b\xf8\xa4\xfd\xca\xe4\xc4\xa8\x92\x4d\x4e\x46\x31\xf1\xd3\xce\x5c\xe4\xad\x7d\x1d\x74\xa4\xb2\x11\xdd\x3b\x21\xa9\xed\xa7\xf3\x12\xd4\xf6\x1e\xb9\xf7\x57\x88\x35\xd5\x5a\x26\x50\xad\xda\x9b\x6c\x22\x05\xaf\x9d\xee\x4c\xa5\xcc\x18\x15\x6b\x6c\x52\x4a\xad\xa6\x6a\x35\xd5\x7e\x3b\x66\xfd\xb2\x12\x8b\x96\xe2\x19\x88\xe5\x60\x0e\x62\xe9\x0e\xae\x60\xcd\xb6\xce\x18\x6b\x21\x84\x9f\x34\x53\xef\xc5\x4c\x6e\x94\xee\xec\x20\x4f\xf4\xfc\x0b\x2b\x80\x85\x7c\x18\x6f\xca\x5f\x31\x5d\xec\x8f\x74\x87\x15\xaf\xa7\xd8\x61\x8d\x28\x56\x23\x5d\x6a\x13\xad\x2d\x10\xc1\x34\x87\xf6\x71\x9e\x17\x19\xa4\x2b\x87\x87\x63\x98\x06\x88\xda\x8c\x26\x7d\x6a\xf1\xb1\x2f\x46\xad\x68\x2c\x55\x58\xd0\x45\xfb\x6b\x64\xfd\x1d\xdb\x78\xcb\x1a\xf7\x6c\xfd\x4d\x6b\x5e\xc8\xe6\x85\xaa\xc7\x2e\xc5\xd0\x0a\x67\xda\xc6\x4f\xd6\xdc\xa0\xf8\x50\x9b\x88\x0b\x82\x73\xaf\xe6\x27\x90\xc5\x26\x67\x04\xdf\x40\x41\xaa\x74\xa8\x48\xa1\x12\x21\x91\xb3\x7b\xa7\x53\xdd\x31\x18\xe7\x3e\x11\x0b\x6d\x00\x70\xfb\x23\x29\xb4\xda\x07\x4d\x94\xd4\xda\x95\xc0\x7e\x3f\xab\xef\xd0\xd5\xfa\x07\x1e\xe9\x2a\x06\xe1\x33\xaf\x57\xf9\xdc\x15\x00\x47\xea\x45\x48\x57\xe2\x0f\x82\x56\x2b\xe3\xf4\xa7\xf7\x6f\x9b\xde\x98\xbe\x44\xa6\x47\x74\x8b\x3f\x2d\xdc\x2a\x6e\x3e\x5b\xae\xd9\x73\x0e\x1e\x8b\x2c\x23\x34\x81\x3c\x75\xfb\x6b\xef\xb5\xed\x8d\x8c\x4c\x99\xa1\x83\x0d\x71\x2d\x06\x0f\x36\xc4\xc1\x86\x38\xd8\x10\x1f\xd2\x86\xb8\x42\xa0\x1e\xa9\x21\x71\x75\x1f\x83\x35\x11\xfe\x77\x4f\xd6\x44\x80\xff\x5d\x4c\x8a\xed\x88\x38\xd8\x15\x07\xbb\xe2\x60\x57\xec\x4b\xec\x06\xe3\xe2\x60\x5c\x1c\x8c\x8b\x83\x71\xf1\xeb\x32\x2e\x22\x35\x7c\x74\x16\xc6\xc6\xb2\x07\x33\x23\x19\xcc\x8c\x83\x99\x71\x30\x33\xf6\xa4\x25\x52\xf1\xff\x04\x67\xc5\x4f\x32\xa1\xd9\x65\x09\x6f\x9d\x27\x09\xd3\xba\xd3\xda\xb8\xee\x15\xa4\xe6\x95\xb2\x2b\x15\xa4\xcd\x53\xdc\xaf\x54\x88\xbf\xa0\xf7\xfa\x14\x63\x2a\x60\xf7\x90\x1a\x5e\xb5\x84\xb1\xf8\x5e\x40\xf7\xc3\xbf\xd0\x1b\xe8\x4e\x56\xfd\x46\x74\x22\x0b\x96\x56\x5a\x50\x0e\xd5\x95\xb8\x21\x79\x99\x2c\x08\xa3\x9a\x83\x70\x4d\xe6\x8a\x0a\xb3\xfa\x9e\x2b\x3a\x8a\xb8\xe8\x13\xa3\x0b\xa6\x72\xae\xb1\x9a\x0e\x6c\x82\x8b\xf9\x60\xad\x1c\xac\x95\x83\xb5\xb2\x09\xf6\xc7\x64\xad\xac\xd1\xb9\x16\x7a\x75\x30\x7b\xe5\x98\xa0\x46\x56\x11\x9f\x1c\x13\x91\x08\xfb\xb5\xa4\x99\xbf\x97\xd5\xe3\xa5\x2c\x5d\x51\xbf\x68\x52\xa7\xb3\x8c\x89\xe5\x88\xbe\xf6\x88\x41\x8e\x08\xd6\x91\xba\xb9\x70\x3f\x96\xd1\x4e\x98\xdd\x8f\x6d\xd4\xde\x5a\x57\x53\x10\xb9\xc8\xe3\xb0\x8b\x56\xd0\xdb\x64\x16\x5d\xcb\x72\xf7\x16\x71\x59\x3b\xc5\x0f\x52\x7c\x74\xc4\xed\xdc\x20\xc1\x60\x9b\x0c\x3e\xad\xe3\x2b\x5e\xe9\x45\xdf\xf0\x0d\x42\xab\x51\xf5\xe6\xee\x42\x8a\xd3\x40\x57\x23\x1a\x08\x73\x9c\xbb\x39\xc0\x78\xe2\xd4\x8a\x3e\x8d\x04\xcd\xa2\x83\xec\x5f\x50\xb3\x08\x9a\xda\xc7\x9f\x88\x7d\xa5\x91\x40\xb5\x3d\xdd\xbb\x61\x6a\xda\xf1\xdd\xbf\x33\x35\x0d\xd5\xec\x0d\x15\x29\x55\x29\xf9\xcb\xd5\xd5\x05\x81\x97\xef\x59\xae\x8b\x4e\xf1\x63\x99\x6d\xaa\xc6\xd1\x18\xd9\x42\xf0\x1a\x75\x65\x29\x51\x65\x5c\xf9\x37\x3a\xe5\xee\x03\x14\xd5\xd7\x3e\x7d\xfc\xa9\x4b\xfd\xf9\x50\x1f\xed\xb8\xb9\xeb\x7e\x48\x15\x54\xe1\x2f\x55\x16\x7a\x0a\x82\xa4\xe9\x04\x23\xac\x8a\x05\xf7\x0b\xf8\x2e\xf9\xa6\x56\xac\xd4\xa5\x0a\x8a\x6c\xe9\xb3\x13\x67\x65\x96\x8d\xc8\x0c\x1a\x4d\x6a\xc3\x0a\x6f\xff\xb2\x08\x34\x26\x64\x72\xf2\xcd\xe4\x84\xe4\x8c\x0a\x20\x4e\xf7\xae\x6f\x59\x2c\xea\x82\x97\xc7\xc1\xca\x8d\x50\x91\xb5\xfa\x75\x74\xe5\x4e\xa6\x7a\x44\x32\x7e\xcd\x5e\x93\x39\x33\x23\x52\x48\x6d\xff\xbf\x34\x23\xa7\x76\x8d\x08\x94\x06\x1c\x91\x05\xa3\xe9\x88\xc8\x02\xc5\x88\x07\x82\x46\x4f\xd2\x8f\x90\xea\xa2\xfd\xbd\xaf\xd2\x56\xd4\x73\x4f\xa4\x73\xcf\x64\xd3\x73\xa9\x4d\xb8\xf3\x67\xd0\xce\x1c\x01\xb3\xe8\x81\x3f\x38\xca\xe9\xf7\xd5\x79\xf4\xfb\xac\x47\xd3\x52\xd9\x3c\x00\x06\x65\xae\x2a\x6f\x16\xab\xb1\x4c\x4e\xe6\xcc\x4c\x4e\xac\xd4\xe0\xed\x06\xfe\x01\xfe\x3d\x39\x19\x93\xc9\xc9\xe4\x84\x3c\x07\x91\xea\xc5\x9d\xf7\x01\x12\x5c\x8f\xcd\xa0\xa4\x17\xed\x08\x7f\xf0\x8e\x33\xd4\x82\x1b\x9b\x1a\x13\xf2\xc6\xb7\x03\x00\xa3\x86\x82\x19\x84\x24\x29\xd7\x86\x0b\xff\x12\x26\xb8\x0b\x19\xcd\x0b\xd6\x92\x2c\xab\x7e\xd1\xf5\x6d\xc7\x62\x24\x80\x68\x9d\x54\xb2\xfa\x1e\xda\xe8\xed\x3b\xae\xf6\xfa\x69\x43\x27\xd7\x6d\x10\x9e\x9c\xd0\x2c\x9b\x9c\xa0\x60\xb0\x4e\x9b\x77\xfa\x14\x25\x6d\xe6\x05\xa9\xc8\x25\xcb\x66\x9d\x92\x53\xbf\xb6\x1d\x8e\x61\x75\xd5\x8e\x75\xd8\x66\x75\xc2\xca\xcd\x09\xa9\xeb\x78\x52\x5e\x6b\xb4\x4a\xd5\x5e\xee\x86\x2e\xa7\x3d\x17\x77\x59\x8d\xdc\x62\x7d\x61\x79\x42\x8a\x5d\x1a\x9e\x6c\x21\x09\xd1\x98\xfb\xac\x70\x9e\x1a\xe3\xb1\xec\x6a\x44\x6e\x91\xd7\x60\xa5\xc1\x91\xd3\x8f\x23\x56\xa4\xe4\x97\xe5\x5e\x80\x7c\xd3\xcb\x6c\xe3\x6d\x36\x11\x4d\xfc\x7b\xbd\x42\xd8\xdd\xa9\xe2\xde\x04\xbe\x9e\xd2\x5e\x4d\xd4\x73\x1b\x0b\x15\x3f\x80\x9e\x38\x09\x16\x6f\x59\xac\x89\x45\xa5\x01\xc1\xb7\xeb\xae\x2c\x56\x23\xc0\x39\x54\xca\xb0\x43\x92\x16\xcf\x0c\xd1\x7c\x2e\xa0\xa7\x93\x30\x23\xb0\x9b\xb8\xc2\x2a\x24\x2d\xa1\xfe\xa2\x61\x1a\xcd\x50\x85\xd4\x9a\x4f\xb1\x78\x04\x17\x89\xcc\x0b\x7b\xe0\xfd\x2c\x70\x7f\xee\x63\x46\x3f\xbf\x78\x8f\xe3\xda\x58\x8a\x7f\x88\x42\x64\x28\xfe\x12\x73\x1b\x8d\x5a\x78\x28\x60\x62\x51\xc1\x59\xe3\xad\x48\x19\xb5\xc2\x81\x1a\x8b\x49\xec\xfd\x66\x95\xfb\x31\xbe\xa2\xa2\xcc\xa1\x2a\x68\x4c\xfc\xb8\x80\xf7\xc3\xec\xa1\xe4\x86\x3b\x82\x23\x90\x42\xfd\x62\x81\xa5\xf5\xa4\x9e\x30\x16\x9d\xe6\x4e\x82\x84\x4e\x1d\xdc\x54\xa8\x17\x35\x04\x01\xb8\x5b\xec\xc4\xfe\x37\x4e\x78\x3f\x0f\xbe\x61\x66\xdc\xf6\x61\x34\xbb\x61\x6a\x69\x16\x88\x74\x47\x08\xa7\xbe\x30\x6a\x44\xff\x54\x38\x81\x06\xe1\x15\x78\x34\xf6\x17\x7c\xf5\x1e\x13\x49\xb8\x1a\xe3\x89\xb0\xa3\xcf\x66\x52\x4e\x4e\x9a\x85\xed\x23\x6e\x43\x9e\xcd\xa4\x7c\x86\xe2\x12\xb4\x29\x8a\xb0\x72\xdd\xd4\x8f\x4e\x07\xea\xd0\x7f\xf6\xc8\x86\x9e\x94\x0a\xb4\x4e\xee\xda\x50\xe5\xb6\xfd\x8d\x16\x1f\x91\x89\xfa\x2b\x80\xfe\xde\xea\x20\x1a\x13\xf2\x41\x1a\x30\x29\x62\x0b\x3e\x42\x57\x8c\xac\x4e\xce\xb4\xcf\x6a\x92\xaf\x95\xf9\x41\x74\x74\xf6\x03\x8b\xc8\x34\x23\x09\xd5\x6c\x44\xa6\x2c\xa1\xa5\x76\xee\x37\x6f\x3b\xa0\xd9\x2d\x5d\x6a\xa0\xbc\x56\x23\x0b\x55\x71\x22\x5b\xe5\xb2\x7d\x9d\x83\xd7\x68\xf0\x1a\x0d\x5e\xa3\x27\xe3\x35\x6a\xa7\x62\x87\xf4\x1c\x61\x70\x80\x48\xbd\x7c\x19\x5c\x47\x56\xfa\x19\xfc\x3d\x8f\xd0\xdf\xd3\xcb\x68\xb1\x37\x77\xcf\x26\x94\xdd\x9a\x5d\x6f\x8c\x8f\x77\xb6\xf5\x50\x94\x8e\xbc\xfb\x42\x13\x93\x2d\xbd\x9a\x13\x4c\xa1\xf1\x12\x23\xbb\xa8\x45\x8b\xd8\xd9\xb4\x66\x98\xbf\x00\x9a\x99\xad\xdc\x0b\xad\xe6\xda\x1d\x6f\x46\xbb\x0f\x6d\xd3\xad\x68\xf7\xa2\x55\x4e\x94\x98\x2c\xa0\x85\xb2\x66\x9e\xaf\xc3\x76\xb3\x8a\xb1\xcf\x8d\x6e\xb9\xcb\xae\xb3\xdb\xb4\xdf\xee\xbd\xee\xcd\x36\x12\x61\xf7\xc7\x32\x63\x5b\x49\xaf\xd1\x0b\x95\xd2\xee\x94\x27\xb6\x62\x36\x59\x2b\xc8\xde\x72\xab\xa4\xc6\x91\x4c\xbe\x5d\xac\x0b\xb6\x6e\x1a\x61\x5c\xea\x65\x65\x0e\x21\x29\x2b\x98\x48\xa1\xdf\xb3\x88\xc8\x2b\x04\x8e\xc7\x4e\x85\x5c\xa6\x4e\x50\xa3\x62\x49\x20\x62\x57\x13\xf6\xa5\x60\x0a\xe2\x9e\x43\x1b\x6b\x90\x3f\x90\xf3\x80\x80\xbd\x66\xd3\x4e\x62\xf4\x55\x5a\xa7\x4b\xf2\xe9\x3d\x48\x89\x7a\x21\x6f\xcf\x16\x3c\xf5\xd6\x6b\xec\x74\x6d\x24\xf9\xb5\xe4\xc9\x75\xb6\x24\x19\x33\x10\xd3\x2d\x52\x84\x87\x62\x54\xc7\x5c\x90\xab\x38\xf2\x0a\x7a\x55\xb8\x8f\x7d\xf8\xe5\x8a\xfc\xa9\xfa\x20\xfb\xe2\x84\x50\xbd\xd4\x56\xad\xb2\x1f\x49\x15\xbf\x69\xba\x53\x52\x96\xb8\x9e\x68\xd4\x2b\xce\x94\x6b\xa6\xad\xb8\x3b\x83\xc9\x52\x56\x94\x66\x39\xc2\x8c\x56\x92\xf1\x19\x33\x3c\x67\x67\x55\xa1\x4f\x04\x1c\x34\x1e\x4a\x8c\xb0\x78\x09\x8d\x5e\x95\x5d\x5f\x0b\x81\xc4\xe1\x60\x3b\xaf\xa9\x39\xbe\x6e\xaf\x9b\x08\x7b\x16\x4a\x2b\xc7\x43\x65\xd2\xf6\x45\x7b\x17\x4f\x4b\x14\xfa\xa0\x4d\x0c\xda\xc4\xa0\x4d\xe0\x98\xa7\xa0\x4d\x44\x04\xf6\x70\xca\xc4\xbd\x68\x0b\xf1\x4e\xf6\xaf\x2c\xb4\xb0\x59\xba\xc2\x5c\x1f\x49\xd6\xec\xd6\xda\x42\x2c\xab\x1c\x5c\x59\x68\x62\x64\x24\x1c\xad\x15\xb6\xb7\x76\x7f\x1b\x19\xd0\x13\x6c\xda\xd0\xbc\x74\x4c\x3e\xba\x33\xba\x77\xa7\xd9\x96\x36\xcd\xfd\xc6\xbc\x0f\xdc\x7d\xe0\xee\x03\x77\x6f\x82\xfd\xf1\x72\xf7\x7b\xb4\x13\x0e\x76\xc0\xc7\xc8\xd9\xef\xcf\x06\xb8\xbd\xfd\xef\x09\xd8\xfe\x1e\x67\xc6\xe9\x3b\xbb\xea\xb6\x4e\xc7\x21\xed\x76\xfc\x67\x66\x60\xd4\xf3\x17\x24\x67\x66\x21\xd3\x8a\x27\xd4\x93\x50\x09\xb9\xe4\xd0\xc5\x05\xb2\xdb\x2c\x4d\x29\xca\xa8\x88\x46\x15\x39\xea\xdb\x7d\x40\xeb\x97\xcc\xd5\x2b\x58\x30\xb5\x2e\x20\xec\xce\x79\xac\xf5\xe8\x1b\xe7\xda\x58\xca\xf2\x99\x62\xc4\xca\x0e\x96\xba\xcd\x56\xd2\x68\x0f\x1f\x50\x30\xd8\x8b\x9f\x90\xbd\x38\xda\x6b\xbf\x3e\x94\x1b\x79\xae\x45\xc9\x0d\x65\x12\xb6\xad\x4e\xb0\xa1\x9e\x00\xe8\x0a\x2d\x97\x81\xbc\xc7\x96\x44\x18\x79\xb3\x24\x13\x78\x6b\x72\x02\x99\x0b\x56\xc2\x9b\xb8\x7b\xe5\xaa\x5e\x40\xa4\x22\x77\x72\x78\xa1\x30\x6b\x5a\x93\xc9\xc9\x3f\x80\x1e\xcc\xa0\x70\x01\xb9\x65\x8a\x39\x25\x25\x67\xbe\xc3\x33\x15\x4b\x77\x2b\x8f\x40\x05\xeb\xac\x49\xd3\x2d\xa0\xac\xd7\xa8\x50\xbc\xe8\x52\xa7\x9c\x10\xc2\x11\xcd\x40\x37\x25\x57\xaa\x64\x16\x8a\x51\xbc\xf6\xad\x37\x8d\x87\xa4\x92\x19\xcd\x34\xab\xfa\xa3\xed\x52\x63\x23\x65\x82\x77\xae\xf0\x2d\x0c\x82\xb8\x5f\x17\x51\xb7\x79\x81\x38\xe9\x28\xea\xdc\x06\x2b\x05\x1c\x83\xe2\x37\xb4\xda\x32\xee\xc1\xb2\xe8\x34\x7c\x05\x7e\x73\x58\xd6\xe0\x26\x0b\x0a\x21\xe9\xb2\xe0\x02\x24\x04\x51\x89\x76\xb2\x1a\x17\xad\x6a\x4c\xdc\xea\x5d\x63\x2e\xbb\x3e\xe3\xd6\x1e\x41\xde\xfe\xb4\x53\x8d\x92\xe0\xd3\x78\xd7\xa7\x5a\x49\x7d\xb4\x0b\x53\x74\x62\x6a\xc8\x7e\xd2\x32\x67\xe8\x4a\x21\x32\x01\x27\x4f\xcd\x8d\x52\xb7\xe8\x83\x4d\x00\x5b\x6f\x6b\x62\xb9\xb3\x62\xd9\xd2\x07\xb9\x32\x6c\x09\x8f\x9e\x11\x98\xd0\x02\x3a\x8e\x34\x92\x56\x71\x2c\xed\x91\x19\xa6\x72\x2e\x9a\xd3\x6b\x27\x68\x0b\xa2\x0b\x6e\x40\xdc\xe2\x66\x4c\x7e\x84\xa2\x2b\xda\x50\x91\xb0\x11\xf9\xf8\xa7\xf3\x37\xbe\xc4\x1c\x78\x58\x20\x8d\x5e\xc9\x8c\x61\xe2\x13\x13\xb2\x9c\x2f\xe0\x07\x17\xc3\x6a\x78\x96\xf9\x62\x62\xb8\x26\xd7\xe7\x6d\xc5\x6f\xb3\x5a\xd7\xa9\x37\x65\xc4\xa9\x3a\x63\x22\xe1\x7b\x35\xdc\xc6\x46\xe6\x95\xee\xb0\x04\x8e\x80\x5a\x03\x14\xba\xa9\xd4\x06\x44\xda\x3d\xf7\x8e\xf2\x74\xa3\x4b\xb3\xd8\x96\xee\xad\x9a\x4f\x3b\xc9\xde\xca\x2b\x2b\x31\xcb\xa1\x1b\x19\xda\xd8\x1c\x3e\x5e\x2d\xb8\xfb\xb7\x47\x8c\xcd\xce\x45\xd7\x05\xd2\xdf\x73\x1d\xab\x72\x1c\x7d\x6a\x7c\x5e\xaa\x50\x5a\xa8\xd3\xe1\x18\x3b\x1b\xff\xe4\xc2\xee\xea\xa8\x8d\xeb\x85\x2c\x3d\x90\xdb\x6f\xd8\xc8\x12\x05\x1a\x02\x60\x19\x55\x18\x26\x8d\xfe\x52\x6e\x9e\x69\xa2\xe9\x0c\x1b\x17\x6a\x5d\xe6\xac\x16\xbd\xbe\xa0\x2e\x4c\xb8\xf2\x33\x8e\x08\xbb\xb1\x9c\x72\x86\x0f\x70\x1a\xbd\x5d\xd8\xf9\xdd\x28\x8c\x05\x3e\x6e\xc5\xee\x24\x91\xf9\x94\x0b\xdc\x3e\xc0\x11\x8e\x77\x5c\xc7\xf7\x40\x2b\x9a\xc4\x07\xe0\x52\x2d\x67\x44\x74\x99\x2c\x2c\xd3\xa7\x22\x26\xd1\x98\xc1\x29\x19\x86\xe5\x97\x45\x21\x95\x59\x7d\x17\xeb\x91\x51\x43\xe2\x24\x01\xd0\xd5\xce\xa4\x22\x8d\x3c\xd1\x16\x0f\xf5\x0e\xf4\xa0\x7a\xb9\x03\x88\xef\x2b\x54\x75\xac\x01\x9b\xf4\xfb\x68\xf1\xa8\x6c\x19\x18\x1d\x2c\x82\x42\x71\x15\x55\x5b\x21\x5e\x02\xae\x49\x2e\xb5\x81\xee\xff\x90\x01\xca\x04\xb4\xed\x66\x80\xcc\x76\xda\x1a\xf8\x6a\x50\x0d\xbe\xe8\xf8\x79\x1b\x68\x75\x8c\xef\x3b\xb0\x31\xd1\x80\x77\xff\x54\x59\x3c\x9e\xbb\x24\x77\xc4\xba\xc5\x7d\x24\x78\x90\x0d\xda\xde\x9d\xb4\x2f\xc8\x86\xb9\x8b\x82\xa8\xb6\x38\x82\xfd\xc1\xff\xf1\xc2\xfe\x6e\x80\xef\xc9\x8c\xeb\x87\xb2\xe9\xce\xb4\x93\x9a\x7d\x31\x71\x2c\xc4\x36\x94\x50\x1a\x4a\x28\x0d\x0e\xae\xc1\xc1\xf5\xc4\x1d\x5c\x48\xec\x86\x3a\x4a\x7b\x04\xdc\xe0\x54\x7b\x88\x62\x4a\xbb\x14\x9c\x5f\x3d\xcf\xa1\xac\xd2\x57\x58\x56\x69\xe5\xe8\x87\xda\x4a\x43\x6d\xa5\xa1\xb6\xd2\x1d\xef\xd3\x50\x60\x69\x28\xb0\x34\x14\x58\x1a\x0a\x2c\x0d\x05\x96\xb6\x94\x89\x86\x02\x4b\xdd\x8b\xda\xaf\xe8\x37\x54\x59\xda\x6c\xa3\x1b\xaa\x2c\x0d\x55\x96\x1e\x00\x4e\x43\x95\xa5\xa3\xd2\x86\x86\x2a\x4b\xbb\x73\x98\xa1\xd4\xd2\x50\x6a\x69\xf0\x2e\x0d\xde\xa5\xaf\xd3\xbb\xf4\x35\xd5\x5b\x1a\xfc\x42\x47\x55\x74\x69\x3f\x6e\xa1\xa1\xfc\xd2\xfe\xb3\x4c\x36\x39\xdc\x9e\x5e\x4e\xcd\x5a\x9b\xf8\xc3\x25\xd6\xec\xd7\x86\x32\x54\x63\x1a\xaa\x31\x0d\xd5\x98\x06\x85\x63\x50\x38\x06\x85\xe3\x88\x14\x8e\xc7\x5f\x92\xa9\xa6\x50\x0c\x75\x99\x1e\xb8\x2e\xd3\xde\xf5\x89\xaf\xb1\x42\xd3\x5a\x1d\x79\x28\xd3\x34\xb0\x7d\x32\xb0\xfd\x81\xed\x1f\x7d\x14\xfb\x60\x43\x7c\xb4\x2c\xff\x21\xec\x87\x43\xe9\x26\xff\xe3\x50\xba\xe9\x5e\x4a\x37\x0d\x95\x9b\x06\x53\xf3\xf1\x98\x9a\xa3\x0d\x7f\x55\x35\x9c\x1e\x71\x09\xa7\x2e\x19\x64\xa8\xe3\xb4\x61\x85\x43\x1d\xa7\xa1\x8e\xd3\x50\xc7\xe9\xf1\xd6\x71\xea\xb0\xb9\x0e\xc5\x9c\x86\x62\x4e\x43\x31\xa7\xa1\x98\xd3\x50\xcc\x09\x7f\xbe\xbb\x42\x36\x54\x74\x7a\x88\x03\x78\xea\x65\x9d\xa4\x4e\x68\xc6\xc5\x7c\x7c\xf3\x6a\xfc\x46\x49\xad\x9d\x9b\x06\x6d\xd2\x1f\xd9\x8c\x29\xcb\xfd\x36\xf0\xf3\x0d\x6f\x55\x2c\xdd\x49\x6b\xb5\x02\x00\x12\x22\x73\xac\x8e\xc8\x53\x2b\x64\xce\x96\x8e\xf3\xcf\x18\x30\x07\x0f\x95\x3d\xfb\xa1\xbc\xd3\xa9\xca\xfb\x85\xd5\xee\x50\xc4\xa1\xaf\x07\xa6\xf1\xa1\x1f\xee\xd1\xbf\x31\x39\x39\x5c\x0e\x75\xd7\xb6\x5e\x9f\x9d\x55\x26\x6b\xbb\xb1\x54\x26\xfa\xac\xd4\x4c\x9d\xce\x4b\x9e\xb2\x33\x77\xec\x9c\x29\xfd\x1b\x70\xd8\xee\x57\xe2\x85\xe3\x69\xee\x6b\x4f\x57\xe5\x2f\x96\x52\x58\xe4\xce\x2e\x64\x7a\xee\x9e\xd5\xec\x26\x4d\x90\x79\x41\xb3\x72\x68\x92\x45\x98\x84\x14\x32\x25\x34\x4c\x33\x78\x5e\x07\xcf\xeb\xe0\x79\x6d\x82\xfd\xb0\x9e\xd7\x0e\x87\x21\x96\xdf\x71\x67\xe3\x57\x72\x70\x78\x85\x2d\xb7\x02\x64\x57\xbf\x70\x0f\x42\xd6\xe9\x14\x9e\xb2\x05\xbd\xe1\xb2\x54\x4e\xbd\xf6\x94\xeb\xd0\x10\xb1\x7b\x3e\xa5\x22\x3d\x45\x23\xd2\xde\xe3\xca\xfa\xc0\xa6\xdb\xc3\xec\xe3\xaf\xdb\x6d\xf4\x31\xa1\xef\x6f\x95\xde\xaf\x27\xd8\xef\xb3\xdd\x01\xbc\x8e\xbd\xad\x77\x02\x6f\xe7\xff\xed\x01\xe5\x9f\xb8\x36\x1b\xd8\xa9\xd7\x45\xd6\xf2\x50\x77\x57\xf5\xc0\x4b\x8f\x9a\x97\xb6\x69\x6b\x7b\x38\xeb\xb5\x73\xef\x8f\x0c\xdc\x49\x17\x1f\x44\x88\xa7\x22\x42\x58\x3a\xd5\x5f\x80\x00\x54\x0e\xe2\xc3\xf6\x3a\x0d\xa2\x74\x97\x12\x73\x04\xac\x02\xc8\xf7\x3d\xb2\x8b\x8e\x58\x21\x57\x5d\x22\xd9\x93\xf6\x95\xd3\x2f\x1f\x19\xd8\xa6\xba\x68\x57\x59\x14\x4c\x91\x8c\xe7\xdc\x54\xc5\x0d\x4b\xef\xba\x2e\x64\xea\x4c\xfb\xce\x97\xa1\x99\xf1\xa1\x68\xd5\x82\x7e\xb0\x4f\xdd\xa5\xd3\x39\xcd\x32\xb4\x85\x0b\xf2\x33\x17\x7e\x19\x0d\xd2\x87\x62\x87\x5d\x00\x17\xe6\xbb\x6f\xdb\x6f\x8a\xe5\x24\xf3\x98\x90\xd5\xae\x4a\x35\x77\xc7\x16\xa3\x91\xc1\x52\x28\x6f\x37\xec\x5a\xf9\xd1\x46\x92\xdb\x05\x4f\x16\x8d\xfd\x02\x30\xe0\x9f\x24\x95\xb7\x02\x7d\x67\xae\xa6\x18\xbc\xf4\xca\x02\x6e\x4c\x48\xe3\xcb\x91\x01\x72\xca\xc8\xcb\xe0\x49\xce\x8a\x05\x25\x33\x46\x2d\x49\x21\x73\x6a\x18\xf9\xcb\xc5\xf9\xa5\x9d\xff\x4a\xfe\xdf\x4c\x49\xf4\x72\xd2\x69\xc6\x52\xf4\xff\x18\x92\x31\xea\x0a\xea\xa0\x8a\x40\xa4\x22\xef\xbc\xcd\x3c\x67\x46\xf1\xa4\xee\x3d\x1a\x13\x72\x89\x48\x0a\x2b\x49\x0c\xa4\x85\x69\x92\x49\x31\x07\x9b\x7b\x3c\xa7\x9b\x00\x09\x3a\x8f\x2a\xf4\xed\xfd\x14\x01\x8a\x57\x54\xcd\x99\xf9\x08\x24\xee\x4e\x02\xf1\x26\x03\xe1\x26\xf2\xa7\x82\x41\xd0\x48\x3c\xd8\xca\xba\xf7\xc3\x06\xb6\x0e\xf5\x89\x32\x46\x95\xa8\x65\x35\x06\x66\x97\x48\xa1\xcb\x1c\x83\xfc\xec\xc1\xc1\x78\x7b\x85\xec\xe8\x94\x69\x4b\x3f\x9b\xb7\x6d\xba\x24\x25\x38\x93\x2d\x67\x03\x24\x88\xab\xd4\xac\xd1\x27\x0c\x40\xf0\xcd\xc5\xa7\x4f\x86\x67\xce\x44\x7c\xc1\x54\x62\x45\xbb\x79\x97\xb1\x0c\x5f\x26\xf4\x86\x29\x3a\x67\xe4\xcd\xc5\x27\x52\x56\xd3\x90\xe7\x81\x4d\x63\xc8\x0b\x25\x45\x98\x19\x6f\x8b\xaf\xf3\xf4\xe6\xe2\xd3\x0b\x22\x21\x3e\x35\xcb\xb0\x8a\xa8\x4c\xf5\x0f\x16\xcf\x2d\x75\xa8\x2a\xe8\xe0\xf6\xe1\xbe\x90\xe8\x08\x7d\x01\x7b\x5f\xf6\xa9\xd4\x2b\x5e\xe6\x1d\x31\xae\x27\xf7\x6a\x60\xe3\xa8\x9d\xa0\x1e\xd6\x44\xd7\xe9\x9f\xf6\x58\xe6\xa2\x14\x36\xf3\x8a\x6e\x56\xe1\xa6\xdb\x11\x77\xfc\x62\xd6\x21\x4f\xc0\x06\x8b\x09\x23\xb2\x0d\x2a\x8d\x08\x1b\xcf\xc7\xe4\x0f\x2f\xe3\x7a\x57\x54\x84\x4f\xd9\x8d\x72\xed\x2e\x8b\x90\xb7\xe4\x0f\x2f\x7f\x8b\xa1\x1a\xba\x3e\xd1\xde\x89\x96\xdb\x74\x4f\xf6\xe3\x41\xd4\xc2\x5f\xfc\x9d\xcf\xa9\xa0\xf3\xc8\xa7\xda\xc6\xeb\xf7\xb4\x76\x47\x75\x7a\xae\x7d\x95\x46\x3d\xe4\xda\x33\xaa\x0d\xb2\x45\xbe\xea\x01\xb8\x83\x88\x0c\xd3\x6d\xe2\x0f\xf6\xc3\xc4\x70\x17\xf6\xb0\xe6\xe2\x7a\xc6\xb1\x2a\x41\xfd\x10\x32\xb4\x1b\x72\x84\x0b\x46\x52\x32\x23\x0b\x79\x4b\xe4\xcc\x38\x5f\x7b\x83\x27\x40\x44\x09\x15\xf3\xb5\x79\x8a\x72\x0a\x11\x23\xe9\x9f\x99\x60\x68\xc1\xef\x92\x89\xa4\x06\x55\xde\x22\xe6\x3c\xbc\x44\xfc\x3c\x5b\x9e\xe6\xef\x7f\xb7\x67\x42\xdc\xbc\x61\x1b\x10\x78\x4f\xd4\x18\xf0\x6a\x53\x54\x10\x70\xe2\xa8\x7c\x1c\x25\x9e\x6b\xf9\x28\xa9\x7a\x24\xed\x60\xd7\x39\x6a\xbb\xce\x60\xe0\x78\x2a\x06\x8e\x3b\xfa\x48\x0e\xee\xed\x6e\xb3\xa6\xec\xd9\x49\x02\xc4\xa9\xd3\x25\x12\x93\x0e\xe7\x1e\x51\xde\x49\x0e\x34\xfe\x49\x39\x47\x10\x26\xfd\x5d\x21\x95\x38\xfd\x70\xf0\x20\x1f\x19\x4d\x4f\xa5\xc8\x96\xc7\xea\x78\x41\x36\x79\x08\xbb\x59\x85\xc3\x1d\x4c\x18\x72\xe8\xaa\x5c\x16\x10\xa9\xaa\x24\x17\x50\x87\xf4\xaa\xda\xdc\xc9\x8c\xd5\xae\x12\xb1\x0f\x09\xd7\xc1\x92\xe4\x04\x41\xc7\x70\x0f\xa3\xc0\xde\x41\xca\xe9\x8e\x80\xae\x46\x35\x0b\xe6\xb6\x29\x9f\x07\x84\x36\x4d\x4c\x49\xb3\x08\xd8\x41\x40\xad\xa0\x1e\xdf\xd8\xfd\x02\x3d\xa6\x49\x2c\x63\x89\xe9\x0c\x42\xce\xe8\x94\x65\xe4\xd7\x92\xa9\x25\xaa\xbe\x95\x01\xd5\x89\x5b\x39\x35\xce\x9e\x18\x34\x29\x08\x8a\xad\x62\x66\x35\xcd\x99\xef\xce\x82\xf3\xf9\x8f\x43\x5e\x81\x2f\x47\x8c\x22\x09\xee\x0c\xe2\xb2\x6f\x24\xb7\x60\x31\x4a\x5a\xb2\x02\x82\xdf\x74\xe9\x24\x09\x17\xdc\xe8\x5e\xf2\xf6\x15\x3f\x95\xfd\xa0\x9b\xc8\x7d\x17\x76\x70\x5a\x50\x45\x73\xa2\x97\xc2\xd0\x2f\x11\x2d\x74\x9e\xe2\xfa\xda\x74\xcf\x98\x2a\x78\x4b\xff\x06\xfe\x73\x1a\x5e\xde\x6f\x60\x95\xda\xab\x6e\xf0\x2d\x06\x5a\xbe\xc1\x50\x41\xa6\x7c\xc0\xe3\xcf\x60\x24\xbd\x6c\xf6\x2b\x58\x09\x3f\xdc\xf4\x5e\x14\x7c\x6e\x15\x40\x6f\x7d\x24\x52\xc4\x39\x79\xce\x1c\x7b\x2d\xe4\x2d\x84\x25\xfe\x2d\x40\x78\x64\x0f\xac\xb2\xab\x71\x51\x89\x8a\x56\x3c\x07\x03\xb7\x1e\x79\x6a\x09\xd9\x01\x34\x59\xa0\xe9\xa4\x6e\xb3\xc4\xef\x3a\x53\xe0\x73\xb0\xbc\xbc\xb9\xf8\x44\xa4\x22\x39\xcb\xa5\x5a\xbe\x18\x13\x40\x21\x94\xec\xab\xca\xec\x68\x8c\x49\x89\x91\x73\x4c\x49\x9a\xb2\x99\x45\x14\xcc\xb5\x4f\x64\x5e\x50\x85\x26\x6f\xfb\x35\x9c\x7f\x4c\xc8\x65\x99\x2c\xdc\xbe\x30\x13\x61\x5a\xf2\x0c\x91\xbb\xb1\x3f\xe1\x9a\x1a\xf9\x8a\xc5\x5e\xeb\x72\x5d\x79\x20\x91\x42\xba\x66\x2d\x52\xb3\xa8\x9b\x8c\x91\x44\x58\xac\xce\x48\xc1\xd4\xa9\xdd\xb3\xff\x20\xda\x8c\xec\x82\x26\x27\xf6\x86\x4e\x4e\x48\xe8\x66\xf0\x8b\x70\x19\xd7\x13\x67\x18\x9d\x9c\x40\x0f\x89\xa8\xc0\x9b\x66\xa6\x07\x89\x4b\xfc\xc1\x77\xd9\x87\xfc\xb8\xb6\xe2\xfc\xd1\x43\x11\x2c\xaa\x31\xc9\x83\x8d\xc0\x3a\x0f\x12\x48\x29\xba\x9a\xd1\x70\x41\x30\xa1\x73\x6d\xf8\xfd\xa6\x15\xe0\xca\xcf\x11\x89\x22\xfb\x63\x2f\x8b\xf5\xea\x6b\x7e\xa5\x0e\x8d\x51\x5f\xf3\xd9\xf5\xce\x6c\xd8\xdc\x80\xbb\x5c\x34\x51\x52\x6b\x57\xfa\x3d\x63\x37\x54\x98\x7e\x36\xcb\x28\x5d\xcb\x2b\xbe\x2b\xdf\xf0\x82\x81\x9d\x70\xef\xac\xa9\x06\x8c\xbf\xdb\xef\xdf\x59\xb9\x1a\x07\x4e\xfe\xbf\x4a\x2a\x0c\x37\xcb\x8d\x22\xf4\xea\x0a\x0e\x72\x10\x00\x7c\x45\x6f\xdd\x74\xcf\xad\x08\xc0\x28\x84\x2f\x6f\x3e\x97\x17\x23\xa2\x79\xce\x33\xaa\x3c\x1d\x0a\xd7\xde\x7d\x34\xea\x15\xb3\x83\xd3\x1b\xee\xd1\xa8\xed\xe6\xdf\x07\x03\xea\x92\xe6\x36\xbe\xd7\xa8\x1c\xe6\xb9\x41\x38\xb0\x03\x71\x21\x4a\x2c\x05\xce\x1a\xf4\xed\x2e\xbc\xe9\x58\x19\xca\x53\xe0\x13\xee\x1c\xb6\x26\xd3\x6b\xdf\xf3\x3b\x58\x41\xb7\xa3\x22\xd4\xe0\xd6\x07\x41\x07\xb2\xd7\xa6\x2c\x24\xef\xf2\x19\xf9\xbc\x4a\xf4\x3e\x43\x9e\xac\x66\x41\x46\xaf\x0a\x90\x58\xe8\x7b\x52\x13\x47\x7a\x1c\xca\x35\xf5\x90\xdc\xa0\x65\x09\x87\x39\xef\x7b\xe2\x07\x01\x0b\xaa\x86\x18\x9a\x19\x8b\x6e\x73\xaa\xd2\x8c\x69\x5d\x5d\xc2\xee\xf3\x3e\x26\x41\x6c\x57\xf6\xd6\x82\x63\x87\xe7\x7e\x43\xee\x57\xf7\x81\x0e\xb9\x5f\x43\xee\x97\xbb\x2f\x3e\x18\xac\xa7\x95\xa2\x6d\xf8\x46\xe3\x84\xa3\x6e\x50\xeb\x46\x6b\x99\x70\xe8\xe5\xe6\x4a\x14\x2c\x23\x89\xcb\xfb\x5b\x9e\x5b\xde\xca\xbe\xd0\xbc\xc8\x18\xc9\x98\x98\x63\x97\xea\x5f\x4b\x56\x02\xf1\x4a\x32\x59\x5a\x81\x4a\x6b\x3a\xb7\xe4\x53\x33\x75\xc3\x13\x06\xc5\xd2\xff\xd7\xc5\x25\x3a\xca\x32\x49\xd3\x29\xcd\xa8\x48\x98\x22\xaa\x14\x02\x04\xb7\xd2\x68\x9e\xc2\x99\xbb\xb6\x9c\x2f\xc6\xb5\xda\x69\x77\xd5\xe4\x71\xaf\x1f\xba\x51\xaf\x1a\xd8\x46\xaa\x7d\x58\xde\x9d\x34\x66\x9c\xe4\x72\x8d\x39\xf2\x2e\x71\xc2\x74\xca\xb2\x30\xef\x26\x06\x5f\x5f\x02\xc6\xe0\xa0\x89\x27\xd0\x4a\x1a\xd8\x1e\x86\x4d\x68\xa6\x38\x58\x8d\x5c\x75\xff\x39\xbf\x61\xc2\x01\x64\x63\x48\xdb\x51\xab\xb5\x5e\x0b\x08\xe2\xcc\x3c\x93\xd3\x2a\xfe\xf2\x39\x48\x21\xbf\xba\x4f\xbd\x18\x93\x9f\x4b\x53\xd2\x2c\x5b\x12\xf6\xc5\x22\x2a\xbf\x61\x78\x61\x30\xe2\x0c\xbe\xb0\x11\x18\x0f\x08\x85\x4e\xad\x7e\xb7\x3d\xc7\xc0\xdd\x41\xf1\x8e\x2e\xe6\x01\x69\x67\x97\x82\xdd\x36\xbc\x5b\xaf\xae\xe3\x4a\x6f\x3a\xda\x47\xa1\x7c\x5c\x3a\x80\x97\xf3\xbd\x25\x19\x43\x06\x7d\xdc\x51\xea\x8c\x66\x9b\xb4\x9d\x87\xdc\x62\xb7\x7e\xd3\x7e\x33\x36\x51\xf7\x3b\x71\x9a\xc0\x9a\x81\x28\x43\x4c\x52\x14\x61\xcb\x45\xd0\x4b\xa0\x47\xc8\xc0\x81\x1a\x1c\x68\x7b\xca\xb3\x0e\x1f\xf7\x49\x91\xb6\x4f\xe7\x5f\x17\xa4\xe8\x31\xb5\x96\xed\x8f\x91\x6b\x6b\x83\x88\x47\x2e\x0b\xc2\xfe\x62\x15\xa4\x04\x08\x3a\x06\x7e\xea\xd8\x97\x89\xae\x4c\x5f\xf3\xb0\x52\x4d\xad\xcc\x97\x47\x11\x53\x2b\x1e\x63\x32\xa5\xf6\x00\x5d\x51\x2c\x6f\x55\x0b\x26\xc5\x21\x96\x6e\x88\xa5\x1b\x62\xe9\x5a\x08\xf1\x03\xc5\xd2\xf9\x2f\x7b\x6a\xa2\x9f\x6a\xfd\x81\xcd\xe4\xb7\x33\xe2\x4e\xbb\x72\xdf\xa6\xea\x1f\x9d\x54\x14\x37\x8a\xc3\x2b\x43\x20\xde\x93\x2c\x55\xd0\x01\xc6\xee\x20\x3d\x1d\x2a\xe2\xc7\x62\xd6\x57\x53\xbd\xe0\xdb\x1d\x4a\xd8\xf7\x85\xfe\x1b\x29\xb0\x9a\xfb\xf6\xc2\x44\x78\xb5\x11\x8e\x67\x4f\xcb\xc9\xa2\xeb\xc4\x10\x6a\x08\x25\x09\x53\x50\x46\x0d\x68\x75\x0f\x1e\x9f\x51\x6d\xae\x14\x15\x1a\x3e\xfa\x10\x49\x20\xf5\xaf\x87\x6c\xd2\x5a\x7a\x48\x12\xa0\x62\xc2\x68\xe6\xca\xcb\x4b\xc1\x7c\xe8\x9c\x91\x84\x0a\x28\x16\xbc\x8e\xba\x6b\xdd\x9d\x7f\xe5\x46\x21\x6b\x5d\x94\x39\x15\xa7\x8a\xd1\x14\xdc\x95\xec\x4b\x91\x51\x57\xf3\xd2\x19\xbb\x2d\x9b\x4d\x99\xa1\x3c\xd3\xd1\x8d\xa9\xd6\x79\xa0\x7a\xb3\x2a\xd4\x9b\x45\x61\x11\xfe\xf2\x24\x30\xc0\xeb\x99\x76\x90\x0c\xcb\xd9\x41\x3b\x69\x27\x57\x1b\xc9\x49\x3d\xf2\xb7\x3a\xbe\xe7\x57\xca\xca\x66\x3f\x62\x61\xe6\x4f\x02\x3c\xdf\x2f\x76\x08\x72\xc1\x31\x1b\x03\x5a\x96\x05\x6b\x5c\x22\x4f\xe4\xc2\x7a\xf6\x6b\x80\x86\xf7\x57\xe1\x76\x0f\x4a\x4b\x47\xe1\x94\x0d\x8a\x0b\x25\x43\x55\x95\xa7\xa1\x31\xf4\xa9\xaa\x02\x63\x9a\xa5\x3d\x1f\xa4\xc4\x4a\x87\x12\x1e\x4d\x3d\xd4\x59\xf9\x6a\x55\xa7\x5e\x75\x56\xd6\x2a\x4e\x43\xdd\x95\x83\x0b\xba\x1d\xb9\x25\x1b\xde\x6a\x70\x66\x9f\x02\x32\x2b\x05\x84\xd9\xd3\x8c\x9b\xa5\x17\x1f\xd6\x4c\xb3\xd7\x9a\x2d\xd1\xc8\xd0\xe5\x64\x63\x19\x97\x2d\x0a\x9a\x94\x05\x04\xbc\x54\x05\x5d\x20\xc0\x05\x32\x18\xf2\x43\x56\x73\x41\x93\x5f\x2f\xab\x77\xa3\x12\x7f\x4d\xb1\xc6\x24\x1c\xb7\x47\x49\x4a\x8d\x1d\x1f\x68\x96\x94\x96\x91\xd6\xce\xaf\x6e\xb4\x7c\x0e\x96\x47\xfa\x85\xe7\x65\xde\x78\x14\x85\x20\xf9\x15\xc4\x25\x2a\x7c\x68\x7c\xfb\xbc\x58\x22\x1d\x3f\x9f\x92\xbc\xcc\x0c\x2f\xb2\xa5\x27\xda\x60\x80\x25\x53\x66\x6e\x99\x4b\xfd\xae\x39\xd7\xb0\x56\x7c\xd3\xb1\xe0\x12\xc9\x57\x0b\x0b\xb8\xb0\xb5\x77\x6a\x2e\x47\x51\x6c\x22\x7c\x57\x1b\x92\xb2\xc4\xca\xde\x21\xbb\xc4\x72\xd0\xb0\x48\x2e\xf0\x61\x8a\xb2\xc5\x0d\x4f\x18\xd0\x04\x3a\x26\xe4\x92\x21\xe4\xb8\x48\xf9\x0d\x4f\xcb\xca\x6f\x15\x05\x4a\x21\xe8\x73\x4f\xf5\xeb\x8a\xf9\x42\xde\x62\x78\x27\x48\xba\x95\xd7\x07\xd6\xe5\x82\xa6\x0e\xc8\xba\x9d\x6b\x2e\x6a\x68\x47\x76\xe1\xd6\x43\xcd\xa1\xa1\xe6\xd0\xd6\xd1\x69\x1b\xed\x5a\xb5\xa5\xa0\x21\x44\xd7\x93\x65\x22\x91\xce\x05\xe0\xe0\x05\x8d\x9c\x5e\x21\xde\xb7\xa2\x7d\xc1\x85\x12\x42\x5d\x12\x99\x65\x2c\x31\x70\xbf\x35\xb9\x65\x59\x46\x10\xdb\x30\xc7\x2e\x5b\xba\x12\x13\xab\xfe\x9c\x5d\xba\x45\xdf\x5f\x21\x9d\x5e\xb6\xc5\xed\xd9\x3e\xda\x04\xda\x55\xf2\x5e\x95\x77\xfa\x45\x7e\xa3\x6a\xdf\x59\x42\x26\x0c\x0c\x82\x23\xf6\x8d\x89\x1e\xf8\x83\x70\xb4\xa5\x56\xbb\xa3\x8a\xdd\xb2\x62\x3c\xe2\xd5\x68\x4d\x13\x51\xd7\x81\x19\x63\xdf\xa3\xf9\xa9\x82\x3b\x7a\xff\xfa\x55\x65\xa0\xbc\x0b\xe9\x76\x67\xf7\x73\x2f\x39\xa3\x3e\xb8\x66\xe6\x53\x8c\xa6\x95\x81\x33\xf6\x56\x56\x35\x5e\x36\xd5\x4d\x39\x00\x57\xab\x59\x6e\xee\x02\x9c\xed\x0a\x1a\xc5\x5c\xe6\x4e\x35\x8e\x80\x20\x01\x70\xb5\x15\x82\x56\xca\xe4\x1c\x47\x0d\xa4\x26\x3b\xbf\x53\x69\xa4\x6a\xcb\x91\x6c\x78\xf8\x8d\x3f\x68\x01\xa5\xf0\xe1\x76\xb3\xf9\xd6\x55\x95\x46\xc7\x57\x55\x69\xf5\x05\xbf\xd7\xa7\x53\x6f\x69\xd4\xca\xbf\xf6\xc9\xca\x23\x61\x7d\x3d\xdf\xae\x06\x85\x30\x91\x46\x98\x72\x08\x29\x09\xc9\x66\x3e\x12\x0b\xd2\x79\x3e\xdb\x15\x7e\x06\x26\x08\xfd\x95\x81\xf9\x41\x76\x3e\xe4\xd5\x73\x96\xa5\xf5\x40\x61\x2b\xae\x4a\x91\xb0\x17\xdb\xe4\x74\xf9\x9c\xbb\xfd\x48\x99\x1b\x53\xd0\x37\x06\xab\x85\xf4\xb0\x20\x4d\x42\x68\x3c\x0a\x80\x2b\x39\x37\xcf\x7d\x27\x2e\x94\x02\xba\x52\xfb\x5e\xb4\x25\x05\x6e\x91\xee\xe7\x3d\x2f\xfd\xd3\xfd\x8e\x35\xdb\x2f\x14\x71\xa0\xa2\xa1\x62\xd9\x85\xb8\x1a\xba\x5e\xad\x72\x94\xeb\x2f\x17\xe7\xe1\x60\xbd\xc4\xe1\xdf\x9a\x65\x74\xbe\x86\x38\xf9\x0e\x69\x7b\xc1\xac\xd6\x6c\x81\x4d\x08\x15\xfa\xb3\xc5\x68\x54\x0f\x69\xf5\x0d\xb3\xfb\x87\xb6\x5a\x95\x16\xf4\x55\x5d\x8b\x59\x0c\x17\x39\x36\x2b\x24\x32\x87\x7b\xaa\x64\x0e\x55\x06\xa4\x80\x1a\x25\xeb\x73\x02\xee\x39\x01\x61\x1d\x47\x01\x6a\xb8\x8f\x23\x0b\xa1\x3a\xfd\x0e\x2c\xb8\x02\xaa\xe3\x72\xe7\xd4\x76\x4f\xaf\x37\xa6\x6f\x8c\xc8\x82\x1b\x7d\x6a\xaf\x85\x66\x96\x09\x00\x95\x15\xe4\xbd\x98\x2b\x48\x87\x83\x57\xd6\xc1\xc0\xde\x98\xbd\x40\xe0\x42\xa6\xba\xf7\xfe\x81\xe3\x6f\xde\x7d\xbf\xf4\xe3\x1a\x1c\xc0\x55\xed\xda\xcd\x9d\x16\x4a\x26\x4c\x6b\x96\x46\x90\xd9\x67\xd9\x0c\x9c\x64\x0d\x54\xd5\x3e\x19\xcd\xd6\xfc\xe5\x41\xb8\xca\x1d\xd2\xc5\x8f\x95\x7f\xdc\x2d\x80\xc0\xa7\x67\xd4\x4d\xac\xa1\xb2\xc9\x7b\x13\x09\x34\x20\xf3\xcc\xc8\x64\xb5\x3c\xc0\xe4\x64\x44\x26\x21\xa9\x01\xff\x42\x62\x83\xff\xbe\xc0\x15\x4b\x45\x26\x27\xf1\x3b\x70\x1c\x39\x2d\x0a\xd8\x1c\x5c\xb1\xba\x34\xe5\x8e\xc9\x13\xfb\x0f\xd2\xb0\xd7\xed\x0b\x20\x7e\x3b\x15\x34\xb1\xe9\x35\xce\xe0\xb8\xe3\xa9\x37\x5b\xae\xb0\xcf\xca\x76\x79\x80\xa0\x89\x03\x88\xba\x5d\x46\xaa\x5a\x66\x49\xdd\x26\x65\x95\xa8\xd3\xba\x51\xa2\x21\xef\x1e\x9d\xb8\xda\xa3\x26\xdf\x51\x8b\xab\x4f\x9d\xdc\x1c\x52\xb2\xec\x3e\xfb\x41\xb2\x3c\x2a\xc9\xb2\xfb\xc0\x9e\xb6\x64\xd9\xbd\xff\x41\xb2\xdc\x5d\xb2\xec\x86\xee\x20\x59\x3e\x0e\xc9\xd2\xe3\xdf\x81\xe4\xca\xaa\xb4\x8a\x1e\x64\xcb\x7e\xb2\x65\x8b\x81\x60\xbd\x84\xb9\x3a\xb8\x4f\xf5\x87\x1a\x81\xdf\x13\x65\xef\x8e\xdb\x7d\xc0\xbc\x66\xba\x5b\x8d\xbb\x8e\x52\x46\xf7\x96\x1b\xbc\xb7\x2a\x14\xeb\xca\xe1\xde\x4b\xf6\xaf\x8e\xf2\x7e\x4d\xa8\x6a\x7b\xca\x44\x22\x53\xf4\x7f\xe7\x4e\x0d\xf2\xd1\x95\x11\x6a\x36\x2a\xea\xfa\x40\x9c\x38\x1d\x98\xfc\xc3\x12\x03\xa8\xf1\xc4\x41\xce\x2c\xa8\xe5\xbd\x10\xb1\x22\x08\x4d\xd1\xe7\x61\xa9\x2f\x55\x34\x67\x86\x85\x32\x52\x21\xea\x02\x82\x6c\xab\x78\xa8\x90\x8a\x1c\x06\x24\x12\xd4\x64\xf8\x52\x29\xe0\x5b\xff\x2e\xb5\x89\x66\x81\xf3\x8b\xc3\xcc\xec\x47\xe6\x14\xdd\x14\x38\xcd\xc6\x62\x11\x0f\x1a\xd7\xe2\xee\x44\xe5\x2a\x05\x8d\x35\x6d\x2b\x67\xb0\x61\x0b\x8f\xb0\xde\xc5\x0e\x74\xbf\x59\x94\x6f\x4d\x6e\x79\x0c\x92\x83\xb1\x89\x2e\x43\xc4\xea\xe0\xee\x42\x17\x03\xaf\xd8\xae\x00\xde\x5e\x98\xc5\x23\xae\x8c\xb1\x86\x24\x0c\xec\xef\xbe\xd9\x9f\x17\xaa\x57\x65\xc3\x83\x33\xc6\xf1\xc0\x19\x0f\xc8\x4a\x0e\x56\xa6\x64\xc5\x23\xb7\x9e\x93\x34\x87\x6e\xa9\x6e\x1c\xc8\xa2\xb2\x6f\x83\x4a\x77\xd2\xc7\xa1\xa8\xda\x40\xd4\x9e\xa0\x4c\x7f\xd4\xd5\xf0\x0e\x23\xd3\xf4\x24\x7d\x9b\x64\xe6\x1a\xd4\x0e\x44\xee\xba\x04\xe7\xe6\xd0\x5d\xc4\xe6\xc3\xd0\xbc\x27\x57\x4f\xee\xd1\xd9\x5f\x06\x52\xbd\x59\xfe\x6c\x8a\x0a\x8f\x4a\xfa\xbc\x13\xfd\x6a\xbb\x79\xfb\x24\x60\x5b\xb6\x32\x1a\x3a\x18\x7d\x5d\x1d\x8c\x86\xfe\x40\x43\x7f\xa0\x07\x17\x1d\x8f\xae\x1f\xc4\x8e\x0d\x14\x0e\x48\xb7\xbb\x84\xcf\x23\x6a\xfc\xf3\x95\xb6\xf8\x19\x1a\xe8\x0c\x0d\x74\x86\x06\x3a\x43\x03\x9d\xf5\x38\xb6\x3f\xf6\xf0\xed\xd0\xaa\x74\x10\xf4\x87\x56\xa5\x87\x51\x45\xf6\xe0\x3b\xfa\xd6\x45\xfd\x5f\xb5\x80\xa2\xdd\x59\x54\x25\xb8\xae\xc8\xcc\x6d\x06\x94\xbb\x13\xa8\x55\x47\xd2\x21\x9a\x7a\xad\x27\x54\x43\x4b\xcb\x47\x2e\xef\xf6\xa4\x27\x6f\x1e\xba\xa5\xe5\x1e\xaf\x33\xb0\xf1\x3e\xb9\x2d\x55\x5d\xd7\xaa\x86\x59\x1d\x49\x3b\x2e\xf5\x76\x64\x71\x9d\x1d\xfa\xe1\xe4\x9e\x7b\xa0\x2b\x43\xb3\xc0\xad\x6e\xc3\xd0\x2c\x70\xe3\xb6\x9e\x78\xb3\xc0\x6f\xbf\xf6\x66\x81\x7d\xc3\x34\xf6\xc8\x2d\xde\x07\x8c\xe9\xd1\xe8\x88\x04\xfc\xaa\x49\x80\xee\xe1\x74\x89\x74\xdd\x4a\x01\xc1\x31\xf8\xd5\x89\xb0\xee\xbd\xd5\xdd\x1e\xf0\x9e\x3c\xd2\xc6\x70\x8f\x5d\xe8\x79\xc4\x97\x71\x67\x64\xf6\x47\xb7\x4f\x6c\x76\x05\x3f\xb9\x98\x5f\xc8\x8c\x27\xcb\x4d\x55\x12\x1b\x43\x5d\x3d\x72\x54\x78\x0a\xfc\xc9\x15\x9e\x2c\xb5\x21\x0b\x99\xa5\xc4\x28\x77\xaa\x34\x52\xa4\x0a\xea\x6b\xd9\xdf\xd0\xac\x07\xca\x16\x4c\x71\x99\x5e\x42\xac\x4a\x57\xa1\xb6\x8b\x78\x6c\x83\xe2\xdc\x72\x91\x42\x2d\x30\x2c\x38\x16\x15\x09\x5e\x84\x0d\x38\xab\x49\x58\xfc\x98\xd4\x67\x84\xad\x4d\x19\x99\x2b\x46\x21\xba\x60\x41\x05\xf9\x0f\x53\x12\x55\x42\x57\x27\x59\x58\x1e\xc4\x7e\x2d\x69\x06\x55\x59\xff\xeb\xe5\x4b\xf2\xfc\xbb\x97\x24\xe7\xe2\xc5\xfe\x5d\x7b\xdd\xe9\x7b\x57\x2e\xdb\xcd\x47\x2a\x20\x58\x96\x35\x25\x0a\xf7\xbf\x83\x4d\xe4\xa6\xcd\x3c\xde\x58\x00\xda\xaf\x6b\x17\x9f\xe6\xbe\x4d\x9c\x2b\x39\x8a\x47\xc1\xb5\x55\x42\x73\x6e\xa2\x62\x78\x6e\x69\xe4\xbd\x59\x0f\xfe\xbd\x40\xb5\xe7\xcd\x6c\xb6\xcd\xb8\x69\x76\x3f\xaf\x23\xec\x61\xae\xeb\xc7\x32\x63\x1b\x6b\x9a\xd6\x47\x56\x15\x79\x75\xed\xd8\x5d\xef\x29\x0c\x88\x91\x82\x91\x94\x2b\x06\xb1\x62\x10\x08\xab\x19\xc1\xd7\xa9\x62\x84\x16\x45\x66\xef\x2f\x9d\x19\xa8\x45\x8c\x45\x0b\xed\x2c\x6f\x1b\xe5\x11\x41\xf4\xf2\x46\x04\x4f\xd4\xff\x72\x71\x0e\x73\x2e\xa1\x06\x16\xd6\x40\x8e\x97\x72\xc3\x32\x99\x70\xb3\xb4\xc7\xee\x30\x14\xc4\xba\x18\x41\x39\xd3\xd1\x1c\x85\x62\x56\x53\x20\xb3\xcc\x55\x1c\xa9\xbf\x89\x81\x49\x74\x5a\x79\xcc\x90\x02\x8c\x88\x96\x58\x3f\xc0\xb4\x97\x5f\x76\x65\x05\xd0\x09\xa5\x0d\x15\x26\x5b\x8e\x88\xf3\x8c\x8c\x70\x5e\x3a\x63\x3a\xb0\x2d\xdf\x38\xa1\xed\x6b\x58\x62\x50\x6a\x26\xfa\x90\x3a\xb7\xc9\x8e\xfb\xe4\x87\xd5\x1b\xa2\x14\xd2\x58\xae\x14\xd9\x7e\x60\x1c\xd4\x75\xb5\x77\xcb\x95\x1e\x03\x2a\x90\x96\x2a\x02\xee\x98\x9c\xc7\x65\x98\x1d\x2d\xf4\x97\x2d\x50\xee\x11\x56\xc8\xbb\xe5\x9a\xf9\x13\xad\xe1\x98\xb7\xb2\xa7\x5c\x27\x54\xa5\xe8\x41\xe4\xe2\x86\x66\x3c\x3d\x54\x05\xd4\x16\x16\x16\xcd\xb9\x75\x15\x54\xe4\xd7\x2b\xbc\xb0\xed\x10\xe2\xa1\x6d\xd4\x15\x81\x5e\xe7\x2b\x0e\xfc\x63\xf2\x7e\xe6\x51\x6c\xe4\x92\x00\xa0\x8a\xb7\x43\xa8\x9f\xe9\x17\x9c\x17\x83\xf1\xfc\xec\xbb\xb5\x42\xaa\x30\xf2\x1f\x80\x90\xfd\x18\xe9\xe5\xda\x17\x83\x21\x29\x5c\x1c\xed\x1e\x54\x1c\xb5\xc0\x32\xb9\x56\xf9\x67\x22\x75\x55\xf9\xe3\x3a\xd4\xc2\x2a\x60\xca\x0a\xb3\x0b\x9e\x55\x34\xa0\x2c\x2c\xe7\xf4\x7f\x61\x91\xf3\x0d\x2b\x69\x65\x07\x31\xeb\xed\xe0\xcc\xdf\xfd\xde\x72\x66\x8b\xf2\x0b\x59\xaa\x17\xf5\x63\x29\x35\x5b\x3d\x1a\xfd\x9a\x9c\x92\x1f\xdd\x1a\x19\x29\x8b\xd7\xe4\x25\x79\xce\xc7\x6c\x4c\x84\x6c\xdc\x7f\xae\x49\x2a\x05\x7b\x31\xae\xbd\x62\x37\xf5\x9a\x7c\xf7\xd2\xbf\xb6\x89\x6e\xd8\x51\x1e\xb8\x99\x14\xf3\x3d\x49\x0f\x2b\x7c\xee\x2e\x1c\x69\xe8\x4a\xdb\x41\xd3\x87\x1e\x53\x43\x57\xda\xa1\xb5\x12\xe9\xc3\xdf\x87\xae\xb4\x5b\x0b\x3f\x43\x57\xda\x43\x82\x71\xe8\x4a\xdb\xa7\x2b\xed\xb7\x77\x6a\xd6\xb5\x16\xfa\x7f\x72\xba\xe9\xf6\xb2\x84\x7f\xb3\x53\xeb\x75\xa8\xed\x13\x72\x05\x99\x4a\xb3\x20\x9f\x0a\x60\x7b\x6f\xe5\xad\xa8\xf4\x61\x4d\x9e\xc3\xe4\xee\x21\xfc\x1b\x46\x40\xf1\x21\x0d\x0d\x8c\x18\xb4\xb7\xc9\x96\x7d\xdc\x09\x61\x82\xfd\x20\x70\xc3\x30\xb0\x11\x65\xc3\xd2\xb9\x6e\xd8\x7f\xe0\xf6\xfb\x9f\xde\x82\xf8\xbd\x59\x53\xe1\x58\x8a\x29\xcb\x62\x7f\x4f\xea\x42\x29\xe2\x36\x44\x18\x6d\x88\xa6\xeb\x48\xae\x6d\x17\x7d\x41\x32\xc6\xcf\x2d\xf8\x7c\xc1\x56\x94\x89\x40\xa5\xa0\x7f\xc0\x77\x2f\x5f\x6a\x24\x67\xd8\x8a\x6b\x43\xcb\x9f\x4f\xc5\xc3\x80\xfb\x53\xd1\x01\xec\x4f\x45\x1f\x50\x7b\x80\x58\xcc\x7d\x3d\x11\x84\x7c\x13\x7a\x76\x59\xfd\x03\x32\x9a\x40\xcb\xf9\x1d\x46\x4a\x14\x4c\x91\xdf\x07\x1d\x02\x5f\x48\x65\x09\x51\x1f\xab\xcd\x10\x9a\xa3\x3f\xb4\x68\x34\xa8\x87\xde\xab\x2e\x31\x74\xa7\x1e\xba\x53\x0f\xdd\xa9\x87\xee\xd4\xfb\xee\x4e\xbd\x96\xe0\xec\xd6\x9d\xda\xbe\x35\x74\xa8\x7e\x4a\xd6\x83\x47\xd8\xa1\x7a\xbd\x41\xee\x2e\x56\xf1\xc1\x8c\xf2\x54\xcc\x28\x43\x87\xea\x1a\x46\xdf\xa1\x43\xf5\x81\x94\xde\x63\xef\x50\x3d\x5d\x55\xca\x7b\xe1\xe4\x4e\x8a\xff\x26\x24\x9d\x3e\xb8\x8e\xbf\x56\x5f\x6b\xfa\x45\x67\x91\xbf\xa8\x9a\x18\xd5\x64\xaa\xd8\x8a\x4e\x15\x93\x80\xa1\x21\xf8\xd0\x10\xfc\xab\x6e\x08\xbe\xf6\x96\xb9\xc1\x1e\xe8\x9a\x19\x7b\xaa\xff\xf5\xf2\xb7\x21\x19\xf6\xcd\xc5\x27\x52\x56\x09\xd3\x07\x14\xba\x86\xde\xe2\x43\x6f\xf1\x30\x48\xef\xbb\xb7\xf8\xe6\x64\x96\x4e\xdb\xe3\xd0\x5b\xfc\x70\xa6\x82\xa1\xb7\xf8\x63\xe9\x2d\xde\xc3\xbc\x7c\x17\xd2\xfd\xf4\x7a\x8b\x7f\x3b\xf4\x16\x1f\x7a\x8b\x6f\xb7\xf1\xa1\xb7\xf8\xd0\x5b\xfc\xd8\x7b\x8b\xb7\x24\xfc\x74\x35\x5d\xac\x86\xd6\x4c\xeb\x21\xc9\x07\x53\xec\x41\xc6\xa9\x55\xb5\xf4\x49\x8f\x07\xad\xb2\x57\xcb\x95\xda\xde\x19\xf5\x55\x54\x11\x7d\x8a\xd5\x42\xf7\x9e\x00\x3c\xb4\xdc\xdf\xa9\x94\xd2\xc6\x94\xc7\xa3\xee\x61\x3a\xb4\xdc\x7f\xd8\x96\xfb\x6b\x72\xee\x37\x21\xd4\xd0\x18\xf5\x61\x1b\xa3\x7e\xfb\xd5\xb7\xdc\xff\x76\x68\xb9\x7f\xa0\xc6\xa8\xdf\x0e\x2d\xf7\x9f\x6a\x63\xd4\xa1\xe5\xfe\x31\xb5\x45\xfd\xf6\x29\xb7\xdc\xef\x2a\xa8\xf7\x78\xc5\xd5\xa7\x4e\x6e\x0e\x29\x59\x0e\x2d\xf7\x1f\x99\x64\xf9\x15\xb6\xdc\xff\x76\x68\xb9\x7f\x5f\x92\xe5\xd0\x72\xff\xa9\x48\x96\x43\xcb\xfd\xe3\x94\x2d\xaf\x9a\x65\xf6\xda\x65\x4b\x1c\x56\xf3\x2a\xc4\xa4\x61\x14\x42\x99\xdc\x9f\x52\x85\x5f\xa2\xc0\x26\x27\x7d\xd6\x6d\xd3\x3d\x52\x0b\xb6\x6d\x45\xb1\xfa\xc2\xa3\x68\xa6\x43\xde\x20\x1d\x81\x42\xe9\xd9\x92\x40\x3d\x1a\x18\xf2\xb1\xb1\xa6\x28\x70\x6d\xdf\xae\xd1\x63\xeb\x42\x7d\xd0\x86\x8d\x3b\x90\xba\x2a\xfa\x3f\x44\x8a\x44\x6b\xf0\xc4\x23\x42\xbd\x11\xf9\x7b\xb8\x13\xb5\x2e\x0a\x5b\xfb\xc0\x5a\x2b\x98\x1d\xfa\x4c\x6e\xee\xaf\xb9\xfc\x61\x28\x5c\x5c\xf6\xb1\x8b\xcc\x45\x63\xa1\xb4\xde\xba\xda\x8f\xfd\x1d\xa6\x5b\xd3\xae\x47\xde\x46\xe7\xa9\x93\xa3\x7b\xeb\xe0\xf9\xf0\x97\x7d\xc7\x36\xf8\x2b\xb7\xfd\x0e\x37\xb8\xc5\x89\xb1\xfe\x0a\xaf\x0e\xde\xb2\x4f\x37\xdd\x97\xf6\xd9\x49\x15\x42\x2b\xf5\x5f\xf6\xa7\x96\x6f\x0a\xbd\x6d\xc5\xb0\x47\x5c\x9a\x36\xe6\xdb\x4f\xb8\x4e\x74\x13\x4d\x56\xb7\xbd\x7a\x9c\xfb\x64\xa0\x2d\x96\x9e\x9e\xd7\x6f\xe7\xbe\xd1\xf7\x77\x07\x9f\x48\x81\xe9\x81\x94\x3c\x70\x95\xeb\x0d\x67\xb1\xcf\xbb\xb8\xe2\xcd\x5e\x7f\x13\x9b\x43\xb7\x64\x83\x07\xb2\x46\xee\xdb\x18\xd9\x79\xc1\x1f\x31\x52\x7e\x25\xfc\xed\x5e\xfa\x20\xac\x18\xeb\x7b\x5d\x9c\x9d\x19\xd8\x61\x6e\xcf\x57\xc3\xce\x1e\xf1\xa5\xbd\x33\x27\xd9\x27\xd6\x0f\xdd\xf2\x87\x26\x9a\x8f\xa0\x5b\xfe\xd3\xe4\x6b\x6b\x5a\x54\x1e\xf0\x7e\x0f\x5d\xd5\x8f\xbd\xcb\xe4\xd3\x60\xcf\x8f\xb3\x87\xe3\xae\x17\x6f\x4a\x4d\xb2\x18\xdf\xbc\xb2\x0a\xb1\xf8\xab\x9c\x6e\xee\xc7\x68\x47\xc4\xee\x21\xb3\x52\x24\x3e\x0e\xbe\x4b\x94\x14\xe4\xdf\x72\x3a\x94\x56\x3b\xea\xd2\x6a\x43\x45\xb1\xa7\x52\x51\xac\x67\x61\xf6\xcb\x7a\x21\xf6\x67\xfa\x51\x97\x62\x6f\x52\xb0\xce\x7a\xeb\x97\xb5\x1a\xeb\x8e\x74\xfb\x14\xef\xb8\x54\x15\x0d\x14\x6c\x44\xb8\x48\xb2\x32\xad\x5a\x53\x2c\x58\x5a\x66\x87\xc7\xb0\x46\xf5\xf5\xbd\x16\x5f\x5f\x01\x5c\x37\xa3\x7d\xd3\x52\x15\x23\x50\xf9\x87\x83\xc5\x0a\xef\x3c\x5c\x15\x3b\x00\x5a\x7b\xfd\x3a\xcf\x41\x6b\x0f\xe3\x5a\x75\xaf\xb6\x28\x53\xd7\x3c\x9c\x8e\x3a\xa8\xd1\x28\xa4\xd3\xae\x04\x8c\xc3\x70\x7f\x46\x43\x95\xd3\xe3\x66\xc5\x3b\x57\x39\x75\xe7\xbf\xaf\x62\xa6\x2b\x52\x61\xf4\xfe\x50\xb1\xf4\xab\x95\x2f\x7a\x55\x2c\xbd\x6c\xaf\x50\xfa\x00\x92\x45\x4f\x95\xea\xde\x2b\xa1\x76\xf3\x90\xcd\x35\x4f\xef\xc2\x47\x3a\x6a\x0a\x44\xa3\xa2\x2c\x2b\xb0\x8d\x2e\x98\xe5\x20\x84\x7d\x61\x49\x69\xb0\x41\x44\x96\x91\x4c\xca\x6b\x92\xf1\x6b\x34\x19\x43\x0c\x31\x77\xa1\xd0\xa1\xd8\x98\x2a\xfb\xf4\x5b\x4c\xa4\x40\x65\x36\x59\xf6\xea\xf9\x77\xd9\xac\x79\x60\x14\xa3\x60\x03\xf0\x9a\x7f\x58\xaa\x93\x54\xfe\x6a\x85\x94\xbf\x43\xc4\xa9\x33\xa3\x52\xc5\x5e\x93\x53\x32\x39\x39\xcf\x32\x79\x3b\x39\x21\xcf\x5d\x99\xbd\x17\xaf\x7d\xb2\x8c\xa7\xac\xf6\x0b\xaa\x14\xd1\xfc\xd9\xf2\x07\x78\xf7\x47\xa9\xa6\x3c\x9d\x9c\xbc\x26\x33\xf8\x97\x8e\xd7\xa0\x4a\xa1\x47\x44\x5f\x73\x4c\x0a\x14\xec\x0b\xfc\x46\xf8\x0c\x5a\x66\x72\x59\x42\x5e\x0d\x59\x50\x2d\x9e\x19\x62\x2f\xa4\x5e\xb0\x94\x2c\x99\xc1\xd9\x3f\xb2\x22\xa3\x09\xb3\xd3\x27\x54\x24\x2c\x0b\x15\x98\x10\xb2\x90\x24\x63\x0f\xc6\xc2\x5f\xe1\x60\x8d\x67\x00\xfd\x3d\x04\xbb\x25\x52\xec\x10\x8a\x39\xa3\x3c\x63\xa9\xdd\xfa\x5f\xb8\x36\x52\x2d\x7f\xe2\x39\x5f\xb1\xee\x34\xdb\xdb\xd6\x4a\xef\xe0\x14\xd5\xa6\xfe\xed\xe1\xc8\x0c\xe5\x62\x8c\x51\xa3\xa1\x73\xa0\x90\xe2\x54\xb0\x39\x85\xd2\x81\x2e\x62\x6e\x4c\xde\xc6\x75\x0f\xf7\x1e\x7b\xf7\x6f\x39\xbd\x62\x79\x61\x85\x89\xdd\xe5\xe7\xbf\x56\x93\xf4\x55\x3e\x9c\xac\x64\xcf\x0d\x52\xb9\xbc\x3d\x3f\x81\xee\x89\xee\x22\x39\xfc\x85\x90\x11\x87\x86\x6b\xfb\xa9\xa0\x3e\xd2\xe3\x74\xfc\x50\xc2\x05\x4c\x4a\x10\x88\x23\xa2\x19\x0b\x84\x99\x89\xf1\x2d\xbf\xe6\x05\x4b\x39\x1d\x4b\x35\x3f\xb3\x7f\x9d\xd9\xe1\xbb\x35\x59\x50\x76\x17\x6f\x19\x4d\x33\x2e\x58\xbf\xa6\x97\xbf\xb8\x42\x3e\x24\x75\xaf\xd9\x05\xc7\xdd\x2d\xfd\xb4\x01\x90\x7c\x66\xd1\x3e\xe7\x5a\x33\x1d\xb6\x99\x56\x0d\xa6\xb1\xdb\x20\xd5\x52\x8c\x09\xf9\x99\x43\xf9\x19\xc0\xc8\x88\x4e\x84\x73\x90\xa5\x8f\x17\x75\x48\x2c\x05\xdb\x18\xfa\xd9\xbf\x4e\x53\x0c\x9a\x32\x49\x98\xd6\xb3\x32\xbb\xd3\x3d\xab\xa6\xd9\xdf\x5d\xfb\x6e\xff\xb5\x38\x4b\x5d\xb0\x4e\x51\x10\xca\x87\xcc\x32\x3a\x27\x86\x65\x59\x30\x31\x1a\x65\x15\x1a\xac\x6e\x88\xf3\x58\x91\x4d\x5b\x69\xad\x46\xe9\xa1\xbc\x50\x2a\x99\x4b\x8d\x2c\x8a\x6c\x89\x5d\x91\x14\xa3\xe9\x12\x91\x86\xa5\xd1\x0b\x63\x52\xdb\xf6\x8c\x66\xba\x59\x86\xd4\xef\x6e\x2a\x65\xc6\xa8\xd8\xa5\x44\xa6\xbb\x9e\x6b\x28\xcf\xbe\x8c\xb7\x9d\x3e\x92\xda\xb8\x15\x43\x6e\xa4\xdc\xb3\x86\x6e\xdf\x43\x6d\x84\x92\xaf\x5d\x2a\x63\xd4\x20\x19\x34\x37\x80\x79\x2b\x3f\xdb\x97\x2a\x93\x48\xc5\x2a\xdb\x58\x4b\x90\xd7\x66\x8d\xa6\xf6\xa8\x26\xfa\xd9\x9d\x9c\x86\xc1\x46\xe6\xeb\x1c\x0a\x58\x10\x0f\x31\xe0\xbe\x8b\xf1\xbd\x8f\xb2\x7a\x81\xa7\xdc\xd2\xb6\x82\x7c\x96\x7c\xda\x27\x15\x21\xc9\x96\x15\x09\x5d\xc3\x74\x60\x5f\xe1\x85\x23\xde\x59\x6d\x57\x89\xcc\x8b\x8c\x99\xfd\x74\xce\x8a\x45\x80\x0d\xd7\x6e\x2b\xaf\xc9\xe0\x30\x39\x76\x2b\xcd\x60\xd0\x78\x2a\x06\x8d\xaf\xdb\x61\xb2\x67\x67\xc9\xc3\xfa\x00\xf6\xe8\x0f\xd9\xdd\x17\x32\xb8\x41\x80\xd9\xed\xd9\x74\xf5\x57\x39\xed\xd3\x77\x32\x1e\x16\x19\xaf\x5a\xc4\xda\x7e\x2c\xd6\x0a\x12\x17\x4a\x4e\xef\x5d\x68\xfb\x69\x4d\x87\x48\x2b\xe1\x24\x0b\x96\x5c\x6f\x14\xc9\x1e\xae\xe7\xe5\xba\x75\xbb\x16\x8d\x1b\x9a\x5a\xae\xeb\xb8\xd3\xab\xab\xe5\x5f\xca\x9c\x0a\x12\x1a\x59\x86\x26\x97\x18\xfa\xb5\xda\xc4\xf2\xee\x6d\x23\x7b\xb5\xb1\x7c\x3e\x55\x9c\xcd\x5e\x1c\x41\x03\xcb\xcb\xf6\x96\x95\x23\x5f\xa9\xa2\xad\x73\xe5\x2e\xe1\x8e\xdd\xe9\xe5\x57\xae\x7a\x86\x95\xca\xa3\x75\xbc\x71\x32\x39\x91\x8a\xfc\x08\xe6\x96\x3d\x47\x4d\xed\xb9\x7f\x65\x4c\x99\x3a\x1c\xb3\x1b\x9c\xb2\x83\x3f\xf6\xe8\x25\xfd\x9d\xfd\xb1\x87\xf0\xc5\x0e\x7e\xd8\x41\x6d\x19\xfc\xb0\xf7\x26\xc4\x1e\xc0\x07\xdb\xed\x7f\xdd\xcd\xf7\xda\xdb\x3c\xbb\x9d\x0b\xa6\xee\xab\x4a\xbd\xb1\x2a\xf2\xc3\x28\x96\xa1\x0b\xc1\x31\x01\x30\xaf\x5f\xa1\x04\x48\x4d\x58\xb7\x25\x00\x53\x34\xe3\x73\x51\xca\x52\x67\x4b\xdf\x22\xcc\xa5\xab\xc0\xcb\x4b\x6d\x58\x4e\x8c\x82\x2f\x4a\x62\x98\xca\xb9\xb0\x42\x3b\x37\x3f\x38\x4a\xe4\xfd\x17\x85\xb4\x22\x53\xec\xbb\x78\xef\x3c\xbc\xd0\xdb\x1f\x3d\x04\x2c\x25\xcf\xa9\x41\x9f\x1a\x70\x38\x4b\x80\x94\x2c\xe7\x0b\xcb\xe9\x90\x94\xbc\x18\x21\x51\xb2\x62\xab\x42\xb0\xb2\xd9\xcc\x37\x96\x84\x6c\x13\x23\x8b\xc2\x75\x46\xb3\xa4\xcd\x54\x95\xb2\xdc\xe7\x14\xd3\x65\x6e\x47\xcc\x29\x6f\x0a\x4e\x77\xf7\x11\x4d\x69\x72\x2d\x67\xb3\x3e\x5e\xa1\xfa\x81\xc5\xdd\x6a\x10\xa8\x0e\xd8\x39\x55\xd7\x48\xc9\xb9\x86\xf3\x41\x17\x57\xdd\xff\xf3\xfb\x7d\xbb\x7f\x9c\xe1\x95\x4b\xf1\xb3\x4c\xbb\x04\xc5\x37\xb5\xc1\x8d\xfe\x06\x17\xd0\x16\xd1\x0f\xc0\x2c\x09\xa3\x28\xe8\x45\xae\x37\xa6\x3d\xb8\xcf\x1f\xa4\x78\x2f\x52\xf6\x85\xa5\x9f\x2b\xc7\xbe\xc5\x82\xcf\xfe\xe7\xf1\x44\x4c\x44\x6d\x5c\xce\xa8\xd0\x15\xf6\xba\x13\x4e\xa4\xd0\x3c\x65\x8a\x85\x0f\xb3\x80\x05\x8a\x61\x1a\xc6\x94\x31\x41\xc6\x76\xa5\xe3\x78\x71\xed\xc6\x67\xbb\x07\x3d\x26\xef\x68\xb2\x68\x6c\xc7\x7e\x6e\x21\x73\x99\xc9\xb9\x44\x1d\x09\xb2\x49\x50\x4d\x82\xe5\xae\x5b\xab\x9d\x32\x04\x3a\x90\x39\x33\x50\x82\xbf\x2a\x0e\x1a\x7f\xc3\x4e\x81\x8c\xf8\xa5\xfd\xc4\xf3\xd5\x75\x9f\x92\x57\x2f\x46\x51\xce\x88\x4b\x65\x01\x4e\x8c\xd7\x09\xc9\x5a\x45\x84\x2d\xfb\xf8\xb7\x9c\x9e\x56\xb3\x9c\xc2\x77\x30\x2f\xba\x1f\x24\xad\x20\x61\x15\xc4\xb5\x40\x03\x3d\x0a\x20\xe2\xe6\x86\x66\x1f\xa1\xa8\x4b\x00\xce\xa8\xe5\x28\x3c\xf1\xa8\x72\x79\xec\x9d\xfe\x8c\x03\x0b\xaa\x68\x96\xb1\x8c\xeb\xfc\x73\x18\xe9\x7b\xab\x02\xed\x60\xbf\x96\x34\x83\x30\x84\x97\xff\xcf\xf7\x70\x14\xe8\xab\xc4\xea\x7b\x1a\xbb\x1d\x9c\x66\x96\x53\xfa\xae\x7d\x50\xe3\x6c\x21\x85\x54\xd8\xec\x40\x3b\x89\x08\xce\x0c\x6b\xe8\x01\x54\xdd\xaa\x2d\x8c\xe2\x3e\x8d\x8e\x59\x47\x07\x97\xcb\x94\x69\x8f\xe0\x34\x4d\x59\xc8\x31\x9a\x95\xf6\x35\xa0\x83\x1e\x71\x23\xb7\xa9\x6b\x3e\x64\x25\x3b\x3b\x85\xab\x1f\x8b\x9e\x52\xf1\x2c\x92\xeb\x47\x4d\x87\xab\xbe\xe6\x85\x76\xc4\x52\x07\x2d\xf6\xaf\xb1\x05\x85\xf4\x15\x85\xa2\xc3\xd8\x8e\xf5\xac\xf4\xdf\xaa\x21\x48\xf0\x79\x43\xe9\xa1\xe0\xf5\x09\xf9\x82\xaa\x14\x10\x0d\x03\x8d\x52\x8d\x71\xc5\xb9\x05\xcf\x9a\x37\xc8\xcd\x8a\xaa\xd0\x12\x32\xb8\x34\x9f\x0b\xea\xdc\xd0\xf1\xe3\x2c\x73\xd5\xa5\xa0\x61\x26\x86\x0a\x45\x28\x64\x3f\x00\x54\x01\xe7\x71\xcc\x0a\xd3\xfa\x6b\xab\x78\x15\xaf\x21\x9e\x80\x6b\xcc\x2c\xc3\xe4\xcd\x57\xa1\xd3\x6c\xb4\x08\x7c\x67\xfd\x22\x1d\x24\x5a\x45\xbe\xfa\xb5\x4d\x65\xa2\xad\xc0\x97\xb0\xc2\xe8\xb3\x5b\xa9\xae\x33\x49\x53\x7d\x56\xe1\x81\xb6\x57\x5b\x9f\xaa\x52\x9c\x1a\x19\x5d\xf1\xb3\x7d\xb3\x89\x9c\x8a\x92\x56\x3d\x8b\x3a\x5a\xaf\xd6\x06\x7b\xb4\xd5\xb5\xb6\x5b\xd0\x01\x0c\x5b\x14\x61\xc2\x1e\x40\xcc\xbd\xa2\xc7\xe4\x27\x66\xcf\xe9\x73\x7d\xaa\xcf\xd8\x3f\x88\x94\x02\x48\xc0\x52\x96\xc0\x65\x12\xa6\x0c\xe5\x82\xdc\x5a\xc8\xfb\x1f\x53\x59\x75\x1d\x82\xf0\x01\x4b\x2c\x5c\xfb\xa1\x48\xae\x29\x78\x72\xed\x97\x51\x0a\xfe\x6b\xe9\xa4\x26\xc7\x83\x01\x8f\x0a\x2b\xb6\xf8\x1a\xae\x6e\x6c\xd5\xf4\x93\x18\x17\x30\x30\x26\xf8\x35\x03\x86\x1b\xfb\xb4\xd4\x4c\x39\x51\xa4\xb0\x14\xd6\x12\x16\x7b\x57\xed\x47\x2d\xa6\xb9\x0f\x46\x50\x40\x22\x18\xfa\x1c\x7b\x80\x8c\x09\x58\x60\x2c\x05\x32\x12\xd7\x4c\x6b\x6f\x83\x30\x97\x50\x68\xdc\x0c\x5d\xcc\x44\xea\x3a\x07\xf9\x88\x13\xab\xaa\xf9\x4e\xe7\x58\xb5\x34\x31\xd9\x72\x4c\xc8\x5f\xe4\x2d\xbb\x61\x6a\x44\xfe\xb7\x2c\x61\x1a\xcd\x56\x00\xff\x47\xbb\xa7\xcf\x96\xa8\xe1\x74\x10\x1c\x65\x39\x43\x88\x8c\xe2\x06\xfb\xe5\xca\x2c\x25\x9f\xd9\x17\xc3\x84\x06\xcd\xe9\xe6\xd5\x94\x19\xfa\xea\x33\x39\xbf\x78\x7f\x58\x94\xff\x4d\x05\xbb\xd3\xa5\x2c\xd5\xa9\xbc\x15\xa7\x85\x4c\x4f\x75\x6b\xa7\xad\xf5\xe1\x23\x11\xda\x47\x57\x7f\x2b\xd2\xe8\x1b\x62\xaf\x92\xc8\x36\x62\x68\x29\x21\x35\x40\x94\x30\x11\xd2\x8a\xbd\xc8\x9f\x31\x5a\xb3\xf9\xbe\x0f\xc8\xb0\x32\xbf\xf1\x11\x34\xa6\x6a\xa1\x55\x31\x48\x40\x06\xf7\x36\x30\xf4\xe7\xad\x42\xc5\x18\x4d\x6f\xe3\x8a\x80\xbf\x20\x93\xf2\xe5\xcb\xef\x12\xb2\xc2\x87\x5f\x8c\x08\x1f\xb3\x71\x25\x6f\xdb\x53\x22\x19\x9b\x41\x77\xe9\x14\xfa\x16\x57\x0b\xc8\xe9\x97\x98\x80\x3e\x2e\xaa\xf7\xa0\xbd\xdf\xce\xdd\xcd\xfe\xb5\x64\x6a\x49\xe4\x0d\x53\x1e\x79\x68\xe8\x97\x01\xc5\x86\x03\x21\xc2\x5e\xc1\xe4\x03\x24\x11\x67\xcb\x1a\x9d\xd3\x0c\x42\x1c\x82\x64\x64\xc9\xd0\x52\x96\x5b\x9f\x87\x5d\xc7\x0d\x67\xb7\x70\x30\xf6\xaa\xd9\x9b\x7f\x8a\x56\x00\x7d\x86\x94\xec\xec\x37\xf0\xdf\x70\xf1\xd6\x39\x04\x7b\x45\x9e\x5d\xfa\xb8\xb2\x70\xc1\xe2\xea\xa7\x0d\x81\xca\xdb\x45\x81\x2a\x39\xd1\x1b\xba\xe9\xd6\x35\xd1\x1a\xd5\x0a\x81\x6b\xd8\x1e\x1d\xa9\xb7\x90\xf8\x36\x8d\x68\x9c\x6b\x8b\x55\xff\xe4\x3a\x15\x97\xce\x0c\x53\x95\x92\xfb\x1c\xae\x0c\x48\x84\x19\x9d\x93\xb9\x64\xce\xe2\x86\xac\xc9\x7d\xf7\xc5\xa8\x6d\x53\x70\xab\x53\x06\x42\x39\xc5\x08\x6e\x2b\xb6\xe0\xfa\x1a\x5d\x06\xe0\x84\x21\xa2\xfa\x93\x06\x23\x1f\x36\xb0\xb7\xa2\x88\x9d\x9a\x2b\xe2\x2f\x14\xb4\xd8\x53\x34\x61\x28\xad\x2d\xa8\x48\x33\x64\x1e\x63\xe2\x60\x8e\x31\xae\x76\x35\xb0\x04\x54\xb3\xed\x02\x2f\x83\x41\x01\x91\x49\x06\xe9\x76\x54\xd3\xd3\xe1\x8d\x60\x9e\x3c\x6f\x33\x76\x38\x15\xdf\x48\xd9\xd6\xa3\x0c\x66\x47\x15\x1f\x6c\x53\x48\x3a\xdd\xf2\x9a\x72\xb9\xeb\xb0\xee\x8a\x60\xff\x80\xfc\xef\x96\x7b\x96\x88\x93\x59\x06\xe7\xac\x96\xd1\x81\x8f\xef\x10\x6d\x18\xfb\x5a\x76\x0d\x5a\xf6\xe1\x70\x17\x32\xed\x1d\xb3\xfc\xb6\xd6\x6e\x05\x04\x91\x5e\x31\xcb\x87\x97\x3d\xdb\x61\x63\x32\x77\xe4\xe7\xf6\x6a\xfc\xe8\xb4\x83\xae\xca\xc7\xed\x6f\xb9\xf2\x0e\xce\xb8\x3f\x63\xe0\xde\x0c\x4a\x36\xc0\x61\x41\x75\xa5\x82\x54\x26\xba\xe7\x8c\x03\xf1\x58\x75\x6e\xbd\x70\x5a\x5a\xac\x3c\xa2\xb4\xb8\x66\x0d\x78\xc5\xfd\x85\x75\xdf\xd2\xbe\x93\x26\xcb\xf8\x9c\xbb\xb2\x0e\x53\xec\x8e\x9b\x53\xc3\x13\xc8\xbd\xc0\xdb\x9c\x3a\xf1\x34\x32\x69\x60\x81\x18\xf7\x78\x04\xcd\xc2\xed\xfe\x92\x65\x92\x31\x32\x2f\xa9\xa2\xc2\x30\xa6\x5d\x99\x8a\x19\x17\x34\xe3\xff\x61\x4a\xbf\x08\xe7\xee\xf4\xda\x96\xcd\x44\xc2\x2f\xdc\x69\x69\x55\xcc\xf5\x4b\x6b\x03\x86\xdd\xcc\x7f\x98\x92\xd5\x2c\x53\x96\xc8\x9c\xad\x6c\xd7\xcd\x42\x78\x9e\xb3\xd4\xd2\xa7\x6c\xe9\xe0\xc5\x43\x3a\x85\x76\x37\x7e\x1f\xaa\xfa\xd5\xd5\x4f\xf5\xc3\x71\x84\x61\x3f\xe1\xd2\x7d\xfd\x99\x7b\x8b\x1c\xee\x13\x35\xbc\x4d\xc4\xf0\x5f\xf7\x17\x2c\x5c\x8f\x71\xa7\x81\xd4\x3b\x91\xf4\x20\xb5\x98\x83\xad\x09\x2d\x32\x5d\x66\x8a\x37\x8d\xe1\x71\x45\xed\x60\xb5\xe2\xee\x19\xd0\xc7\xa6\x4c\x0c\xe6\xcd\x3f\x92\xc9\x89\x33\x01\x4d\x4e\xac\xac\x4d\x89\x61\x5f\x8c\x4b\xcd\x40\xf9\xdc\xcf\x62\xe5\x84\x46\x45\xeb\x94\x25\x3c\xa7\x99\xb7\x85\xdb\xfb\x63\x05\x61\x27\x49\x24\x32\xcf\xa9\xc6\x49\x10\x9c\x38\x49\xc6\x35\xae\x8e\x70\x61\x49\x38\x54\x7e\x91\x2a\xb5\x92\xc6\xd5\x42\x31\x20\x58\x39\xda\x9f\x84\x06\xaa\x76\x53\x9f\xc1\xee\x42\x31\x6c\xe3\x8b\xc9\x47\x61\x55\x4e\x82\x99\x71\xa5\x0d\x56\xc9\xa1\xda\x10\x96\xb1\xdc\xe2\x8b\xe3\xe2\x9a\x29\x6e\xc9\x58\x6d\xb9\x94\x2c\x96\xc5\x82\x89\x31\xf9\x31\x2e\x20\xc7\x67\x6b\xa0\x6a\x17\xf2\x6a\x44\xbe\x1b\x91\xdf\x8d\xc8\xf7\xf0\xad\x3f\x00\xd1\x58\xb6\x81\x6a\x72\xf2\x6a\xf4\xdd\xe9\xf7\xa3\x3f\x4c\x4e\xee\x64\xbf\xba\xef\xd0\x9a\x8f\xd1\xc5\xb3\x1c\x28\xa8\x44\x3e\x72\xbb\x0a\x6b\x26\xef\x43\x67\xa8\x40\xc6\x53\x47\x2c\x2d\x61\xe5\x82\x2c\xc0\xd0\xa0\x4f\x9d\x3f\x00\x0e\xdd\xd7\xf2\xf6\x87\x41\xec\xcd\xa5\x2e\x45\x02\xa7\x8c\x61\xc9\x05\xf9\xf8\xe3\x9b\xef\xbe\xfb\xee\x7f\x62\x6f\x68\x47\x45\xb9\x20\x9f\xae\xde\x20\xb2\x45\x66\x4b\xe3\x5a\xc1\x03\x91\xad\xb9\x50\xfe\x1d\x31\xb4\x9a\x55\x6f\x4d\x48\x50\xd4\x87\xbc\x9b\x7a\xb8\x98\x84\xa8\xcd\x09\x98\x41\x69\x95\x13\x28\xaa\x90\xce\x1a\x31\x73\xfc\x12\xb9\xfc\x8c\xf2\x4c\x87\x68\x99\x5a\x0c\x8d\xcb\x18\x02\x53\x1f\x54\x29\x9b\x9c\x20\x8f\x9f\x9c\xa0\x95\xc5\x45\x3a\x81\xe4\x17\x4d\x19\x4b\xf0\xbd\x67\xbe\xf4\x6f\xac\x4e\xfe\xc3\x3a\xa7\xd4\xc8\xfb\xe5\x42\x04\x10\x1a\xe1\x7d\x48\x19\xf2\x72\xcb\x59\x9d\x30\xda\x58\x65\xc0\xab\xde\xab\xf4\x34\xb1\x0d\x02\xf7\xa7\x92\xef\x23\xda\xa2\x0a\x3a\xec\x19\x76\xb1\x5d\xb2\xc8\xfa\xd1\x85\x5d\xc4\x69\xce\xd4\x9c\x9d\x5e\xb3\xe5\xc9\xeb\x95\x08\xa6\xf6\x37\xb4\xb1\x37\x77\x0e\x2f\xc0\xdb\x9b\x32\x3b\xb7\xe2\xbe\x60\x0f\xb8\x5d\xf0\x64\x41\x14\xa3\x09\x18\xdb\x17\x54\xb3\xf6\x70\xad\x3d\xd8\x43\xbc\xde\x77\x34\x44\x36\xd6\xfd\x5d\x12\x99\xab\x63\x1a\x29\x3b\x8d\xbb\xe3\x14\x23\xe7\xa1\xa9\x54\x76\x20\x31\xa3\x86\xd0\x6b\x09\x36\x9a\x9c\x0d\xcf\x22\xee\x89\xb4\xd3\x44\x77\xba\x29\xcd\xa2\xba\xcc\x6e\x98\x5a\xe2\x68\xda\xf4\x4c\x83\x01\x00\xbf\xaf\xb9\x14\xdb\x13\xf4\x0d\xe9\x8b\x2c\xdd\x17\x2e\x5d\xfa\xe9\x0e\x24\x4b\xef\x20\x1b\xd7\x74\xe4\x8d\x12\x72\x3c\xb2\xd1\xa0\x34\xa5\x86\xba\x33\x71\x66\x23\xa0\x97\x80\x5e\x1e\x47\xe0\x84\x68\xb0\xf0\xf7\x2a\xfd\x7c\x74\xd9\x10\x91\xd3\x49\xd7\x77\x86\x31\x16\xc1\x7d\x31\x24\x4d\x60\xd2\xc4\x26\x0f\xdd\x71\xe4\x0c\x74\x5d\x12\xf0\xb9\x0c\xc5\x03\xbf\xda\x08\xd9\x21\xa8\xf4\xa9\x04\x95\x7e\xd5\xb9\x70\x35\x32\x36\x54\x10\xbc\x13\xf4\x86\x32\x82\x07\x2e\x23\x08\xe0\xde\x21\xfe\xb8\x76\x4c\x43\x41\xc1\xaf\x81\x3d\x1f\x5b\x41\xc1\xba\xb8\xd8\xd3\xac\x32\x08\x1e\x4f\x5a\xf0\x18\xb2\x59\x8e\xa3\xaa\xe0\x5e\xd8\xca\x50\x5f\x70\xa8\x2f\x78\x34\xf5\x05\x43\x98\x8f\x2f\x37\x05\x71\x83\x5c\x5b\xca\x5f\x72\xbd\x20\x53\x66\x6e\x19\x44\xad\x14\x19\x4f\xb8\x81\x90\x03\xd8\x29\x58\x63\x7d\x9e\xc0\x63\xa8\x42\x88\xb7\x70\x28\x45\x38\x94\x22\x3c\xfa\x52\x84\x87\xb9\x96\x43\xc1\xc2\x95\xdd\x1d\x6d\xc1\xc2\x36\x83\xc1\x50\xb5\x70\xa8\x5a\x38\x54\x2d\xbc\xcf\xaa\x85\xed\x22\xc3\xe0\xe5\x1c\xbc\x9c\x83\x97\xd3\x91\x61\x8b\x93\x33\xec\x20\x08\x75\x76\xab\xbf\x2f\xf9\xdc\x12\xfd\x8f\x68\xd9\xd9\xc4\xbd\xd6\xbd\xe3\x30\x4b\x93\x42\xc9\x1b\x9e\x32\xe8\xb5\x9b\x2c\xa8\x70\xf9\xa3\x72\x0a\xb9\x86\x5f\xbe\x7f\xf9\x3f\x49\xbc\x10\x88\x4e\x06\xc3\x92\x13\xc8\xa3\x87\x90\x0a\x6a\x7f\x75\x16\xa7\xd0\x26\x10\x92\xb8\x0c\xa1\x7a\x29\x92\x85\x92\xc2\x15\x61\x28\xec\xb7\x5d\xfc\x26\xd7\xba\x64\x29\x24\x36\xff\xad\x9c\xb2\x8c\x19\x4d\x42\x9a\xdf\xf9\xc5\xfb\x6a\x4d\xaf\x27\x82\xbc\x1a\x7b\x23\x57\x6d\x6d\x56\x74\x29\xcd\xc2\x9e\x4a\xe2\x32\x25\x2c\xf7\x39\xb5\x57\x10\x0c\x68\xe4\x79\xc8\xe0\x9b\x9c\xd4\x83\xbf\xea\x03\x4f\x71\x7a\x60\x5e\x19\xb4\x01\xb5\x7b\x63\xea\x03\xcd\xd9\x8b\xf1\x44\x90\x6f\xc7\x10\xa4\x0d\x7d\x4e\xe3\x25\x58\x01\xfb\xea\xa7\xcb\x60\x90\xd3\xcd\x15\x24\x14\xd4\x6c\xc1\x12\x08\x33\xd7\x2c\x29\x15\xcb\x96\x1d\x2b\xcb\x98\x39\x75\xdf\x5b\x59\x8b\x4b\x05\xb7\x40\x72\xb9\xd9\xa5\xc6\xa0\x4b\x77\x0e\xf7\x03\xab\xfa\xba\x46\x50\xf0\x22\xe0\x51\x1d\x46\x96\x5c\x25\xa5\x36\x32\x87\x5a\xe0\x55\x63\x49\x37\xc3\x60\xd8\x3f\x6e\xc3\xfe\x60\xfe\x7e\x2a\xe6\xef\x48\x1e\xd9\x1f\x23\xef\xcd\xb8\x3a\xb9\xbc\xfd\x7c\xa3\xb1\x6a\xc4\x6e\x6a\x6c\xc6\x6a\xf5\x79\x5e\x1a\x08\xb5\xae\xa7\x25\x8e\xb1\xaf\xb3\x59\x44\xaf\x54\xa4\x0a\x5f\x2f\x35\x9d\x33\x17\xd6\x18\x6a\x5c\x68\x66\x88\x14\xf1\x3c\x90\x54\xe5\x06\x41\xfa\x3d\x53\xfc\x06\x73\x07\x22\x2a\x66\x27\x4c\x02\xa6\xe5\x32\xc5\x82\x1f\xd3\x25\xa4\xca\xeb\x75\xc6\xab\xdd\xfc\xe0\xfd\xa1\xdd\xed\x1b\x77\x3e\xf1\x00\x71\x1e\x69\x0c\x58\xbf\x32\xce\x4a\xf5\xec\xc5\x5e\x73\xcf\xcb\xa5\x22\x29\x13\x9c\xa5\xa3\x50\x34\x22\x3e\x32\x64\xf3\x3e\x43\x03\x0f\x01\x59\xc5\x82\x81\x85\xa9\x54\x71\xf1\xce\xa8\x8c\x26\x8e\xf5\x63\x36\x6a\x22\x6b\xcc\x0a\x16\xd9\xee\xd1\x25\x52\x3b\x17\xa4\x1f\x6b\x1c\x24\x6b\xe5\xba\xf5\xee\x92\x2d\x3c\x25\xbd\xf1\xa3\x4f\x99\xdb\xee\x97\x23\xc5\x8c\x46\x27\x09\xb6\x91\x2e\x69\xb4\x5f\x59\xdc\x87\xab\x31\xbb\xfa\x75\xef\xb9\x6e\x29\x3c\xdb\xa8\xaf\xea\xd5\xb4\xf6\x12\xb4\xe4\xfd\xcc\x27\x2e\xde\x62\x18\xb7\x60\xb7\x71\x15\xdb\x65\x01\xdf\xc2\xaa\x3b\x60\xc4\x25\xec\x0b\x5a\x2d\x6b\x55\x5d\xdd\xd4\x5c\x13\x2b\xcc\xcf\x43\x0e\x06\x8a\x74\x69\xb0\xdd\x81\xb2\x28\x6b\x46\x2c\x28\xc7\xb0\xde\x6e\xf1\x09\x18\xe6\x43\x80\xbc\xfa\x72\x0d\xdc\x4e\xb9\x03\x38\x23\x37\x0f\x35\x4d\x92\xd5\xe4\x89\xed\x4b\xfb\xfa\x5a\xbe\x81\x1a\x52\xb2\x68\xaf\xf6\x0b\x82\x72\xbd\xce\x6f\x4c\x1f\xc1\x3a\x78\xa0\x42\xbf\xae\xc0\x6f\xd5\x6a\x9e\x12\x28\xfd\xdb\xac\xfc\x7b\xc7\xb5\xf4\x2a\xf5\xab\x77\x29\xf5\x4b\xce\x1d\xeb\x18\x91\xb7\x11\xe3\xc0\xd4\x8e\x38\xd7\x27\x4a\x69\x9f\x9c\xc0\x24\x93\x13\x7b\x13\x26\x27\x6e\xaa\x9d\xb2\xea\x7a\xd4\x0d\x36\xae\x6e\x70\x6d\x53\x63\xf2\x37\x68\xd6\x1f\x2d\xd0\xca\x03\x93\x13\xbf\x9d\xc9\xc9\x88\x4c\x4e\x70\x4b\xf6\xdf\x76\x53\x55\x7e\x16\xa8\x6d\xe7\xa2\x36\x3e\xe6\x7b\xfe\xa6\xdf\x70\x0a\xdf\x3d\x43\x06\x4b\x33\x2b\xd6\x7a\x71\x79\x14\xf3\xc7\xf8\x90\x6f\xa9\xae\x6b\xd7\x55\x39\xaa\x36\x06\x8c\x8b\x89\x56\xbb\xdf\x95\xa0\x3c\x10\xaf\xc3\x1d\xe3\xc6\xb5\x84\x4c\xb6\x4d\x6b\x71\x18\xb7\x69\x25\x91\xdc\x80\x4a\x31\x7c\xb5\x29\x98\xe0\x67\x63\x90\x21\x2c\x9a\xe7\x9b\x97\xce\xed\xcf\xbe\x24\x59\xa9\xf9\x0d\xeb\x8f\xc0\x95\x44\xa8\x58\x8e\xc2\x92\x48\x5c\x21\x35\xf8\x3e\x48\xa9\xf6\xae\x34\xd8\xa6\xab\x96\xe3\x59\x40\x96\xc9\xdb\x63\x2f\x52\xdd\x5b\xe8\xe8\x8a\x04\xdc\xf4\x5e\x5b\x6c\x60\xa7\xc1\x6b\xb0\x2c\x1c\xb3\x65\x61\xab\x90\xc1\xdd\xcf\x7e\xed\xb7\xf6\xaa\x70\x0d\x21\x86\x83\x8d\x25\x0e\x31\xdc\x9a\x28\xdf\x7b\x18\xdf\xdd\x75\xd6\xfd\x15\xae\xde\xce\x8a\xb4\x03\x0b\xb9\xec\x63\x5c\xea\x61\x89\x66\x5f\x8c\x5a\xc1\x17\x9a\x22\x07\xa7\xd9\x45\xfb\x6b\x64\x3d\x09\xda\x80\xaa\xa4\x49\x4a\xd6\x13\x93\x26\xcd\x69\x80\x05\x56\x5d\x6d\x1f\xff\xa4\x06\x2f\x1c\x0b\x52\x3c\xd4\x76\x84\xd0\x2c\xef\x6c\xb4\xbf\xae\x85\xe9\x98\x5c\xc8\xa2\xcc\xe2\x42\x62\xe7\x17\xef\xbd\xfa\x19\xd9\xd2\xd0\x66\xe7\x0d\x76\x6b\x84\x99\x58\xc8\x68\x6c\x08\x71\xb6\x8b\x55\xe0\xa0\x6a\x97\xf0\x37\xc9\x19\x94\x11\x59\xf0\xe2\x41\x77\xb9\x86\xff\xac\x3f\xfa\x03\x07\x5d\xa8\x15\x6f\x62\x1b\x48\x83\x4f\x29\x68\xc5\xab\x5e\xc2\xa6\x23\x90\x30\x91\x48\x57\x2e\x98\x92\xc9\xc9\x9b\x77\x1f\xaf\xde\xff\xf8\xfe\xcd\xf9\xd5\x3b\xf2\xf1\xdd\xff\xfa\xf4\xee\xf2\x6a\x72\x42\x2e\xde\xfd\x4c\xa6\x99\x4c\xae\x5d\x2a\xbb\x66\x8a\x43\xdd\x27\x08\x3f\xfb\xeb\xe5\x2f\x1f\xac\xba\xf7\xbf\xcf\x7f\xfe\x69\x54\xf9\xfc\x51\x27\x70\x57\x2d\x5b\x92\x29\xd5\xec\xf7\xbf\x3b\x75\x1f\x5c\x1b\x95\x35\x5d\x76\x68\xc1\x7b\x80\x67\x65\x62\xee\xd2\x9b\xc3\xc0\x48\x8f\x8f\xb4\x28\x96\x06\x4b\x29\xf5\x1c\xff\xd7\x92\x66\x68\x55\x16\x34\x47\xf5\xc5\x92\xde\xb3\x5b\x28\x95\x18\xf8\xb1\x55\xff\xd7\xa2\x31\xda\xb9\x67\x3c\x33\x88\xb5\x51\x49\x80\xd2\x15\x16\x98\x80\xd9\x74\x5c\xad\xf0\x8f\x1f\xce\x7f\x7e\x37\x39\xc1\x61\xbe\xc0\x23\x7c\xfe\x1f\x2c\xcb\x4e\x41\x11\x27\xab\x0e\x3d\x08\x46\x46\xc7\x6d\x4f\x67\xe2\x6b\x54\xd4\x74\xbb\xf3\x12\xae\x6a\xdd\xd9\xb9\xd9\x9b\x39\x9e\x08\x42\x3e\xc6\x60\x81\xdd\x3a\xed\xd0\xaa\x76\x82\xd9\xcb\x4b\x4b\x23\x4f\x83\xee\x3c\x5d\xe2\x34\x55\x48\xdd\x69\x4e\x05\x9d\xdb\xa3\x70\x9f\xaf\x2b\xb1\x93\x93\x44\x2b\x87\xfd\xa8\xbb\xfa\x50\x3c\x2e\xd6\x4d\xe5\xdc\xc9\x5b\x3a\xa4\xbb\xe1\x73\x5d\xf3\xa3\xdf\x0d\x40\xbe\xe8\x77\x13\x3a\x61\xcf\xf8\xe3\x16\xbb\x1e\x79\x2f\xc9\xfe\x80\xf8\x5d\x3b\x10\xeb\xbe\x73\x07\xb5\x56\xe7\x7d\x2b\xd8\x00\x3c\x75\x9f\xfe\xc8\x55\x90\xe8\xe7\xda\xdf\x3f\xea\xed\x1b\x72\x13\x01\x22\x79\xb0\x60\x2a\x16\x95\x2d\xa2\xa6\x2a\x97\xf3\x5f\x55\x9d\x1c\xe5\xc3\x02\xcf\x28\x84\x8a\x9d\x5a\xf4\x12\xf0\xff\xff\x39\x8b\xa0\x7a\xea\x96\x73\xea\x69\xd2\xd9\x6f\x22\x62\xea\xc8\x83\x5d\xc2\x1b\x0c\x08\xa8\x48\x0d\x92\x27\x9a\x69\x59\xab\x9b\x8f\xf5\x9d\x1c\xf4\x9c\xde\xed\x48\xcb\x95\x82\x3a\xa0\x5c\xa3\x14\xc3\xa5\x78\x8d\xf9\x13\xf0\xfb\xf3\x37\xe7\x64\x5a\x8a\x34\x63\xfa\x05\x3a\xef\xfc\x40\xb0\xbf\xd8\x3b\x78\xc1\x54\xce\x0d\x10\xdc\x12\x55\xc6\xd7\x00\xec\x10\x50\xe4\x8c\xf3\x29\xd7\xce\x0c\xe3\x07\x62\x45\x13\x47\xae\x1d\x32\x7e\x74\x42\xfd\x88\x14\x7e\x5e\xf0\x75\x61\x26\x45\xca\x1c\xe3\xac\xca\x48\xfb\x62\x2d\x9e\x6d\x3e\xaf\xd2\x76\xbd\xdf\xcd\x7d\xee\x3c\x33\x08\x22\x38\x2b\x5c\x8a\xc7\x4a\xd0\x7f\x46\x56\xe1\x33\x8a\x27\x2e\x45\x44\xf8\x51\xce\x08\xf0\xa2\x6b\x5f\x61\x55\x2b\x3b\xfb\x5d\x9f\x9d\x5d\xb3\xa5\xf7\xa9\x9e\xe1\x5c\x96\xff\x57\xbf\xda\x89\xbe\x1f\x93\x77\x5f\x0a\x8e\xf5\x17\x62\x9c\x09\xc5\x2e\x5f\x87\x7d\x63\x0d\x9a\x19\xff\xb2\xea\x3d\x0c\x65\x1c\x2c\xb6\xba\x67\x34\xcd\xb9\xb0\xdf\xf8\x3d\x08\x13\x30\x05\x96\xc8\x6d\xf0\xc6\xf3\x3a\x05\x88\xc0\xb9\x83\x31\xb9\xe4\x5d\x2a\x7b\xc9\xd3\xba\xca\x61\x7f\x38\x06\x51\x7b\xe3\xb6\xe0\xc4\xba\x76\x86\x87\x5d\xd5\x2f\xa6\xe8\x3e\x9f\xc5\xa8\x50\x09\x34\x0e\xd3\x1d\xf9\x6a\x5a\x62\x6b\xd4\xd2\x92\xde\x56\x26\xb7\x2c\x5c\x31\x4f\x37\xed\x6b\x32\x39\x49\xf9\x9c\x1b\x9a\x61\x57\x02\x53\x2a\x86\x76\x78\xbb\x06\x26\x12\x5e\x2c\x98\xca\x41\xbe\xb0\xbf\xba\x59\x2d\xcd\x72\x26\xf9\x95\x0f\xb7\xf3\x89\xb6\x2f\xb7\x7f\x62\xcd\x7a\xdc\x29\x45\x5f\x5e\x49\xdd\x9a\x08\x3b\xce\xd3\xf2\x0d\x73\x59\x7c\x02\xe0\xc8\x3c\xe7\xc6\x7d\x1a\xde\x6e\x5f\x92\xfd\x95\xce\x15\x63\xd1\x2a\xad\x28\xdd\x18\x09\x33\xd8\x6d\xc3\xf7\xdc\xa7\x54\x16\xfd\xe5\x5f\x80\xca\x7a\x6e\x22\xb6\xf2\x13\x15\x4b\x3f\x5b\x6d\xd7\x2b\x07\xe0\xbe\x08\x2d\x77\xe2\x6d\xb3\x9c\xf2\x8c\x14\x4a\x1a\x34\xf5\x39\x08\x9e\xe5\x3c\x67\xfe\x2d\x5e\x68\x96\x10\xc8\x73\x80\x42\xe0\x38\x06\x7f\x35\xa5\x10\x2c\x8b\x7f\xb1\x37\xcd\xbf\x69\xc9\x8c\x36\x34\x2f\xc2\xf7\x64\xa2\x8b\xfa\x0a\x72\x9e\x28\xa9\xe5\xcc\x10\x3d\x4f\xf0\x27\xc1\x8c\x4e\x68\xc1\xf0\x97\xe3\x56\xec\xec\x76\x45\xb7\x1a\xe2\x87\xd5\x09\x14\xfc\x72\x94\x14\xaa\xa7\x11\x4d\xad\x04\x53\xc4\x9a\xd9\xc1\x1d\x1c\xdd\x09\x26\x9b\xdf\xac\x4e\x23\x72\x25\x79\x9d\xc7\xab\x8b\xc1\xdb\x77\x86\xce\xb6\x33\xe7\xee\xaa\x7b\x64\x6b\xf1\x52\x6b\xa8\x6f\x8f\x54\xd6\x6a\x74\x07\x42\xd5\x03\x7f\x48\x11\x90\x01\xb3\x37\x45\xcb\xf7\xeb\xbc\xdd\xc5\x71\x51\x11\x7c\x6c\x75\x6f\xa0\x33\x5e\x37\x4b\xd2\x59\xbe\xb3\xc1\x45\x38\x26\xbf\x88\x84\x55\xcb\x69\xd6\xc2\xab\x10\xd1\xd2\x65\xd7\xd2\x68\x93\x75\x83\xeb\x2a\xe6\xa9\xee\xbb\x73\x55\x29\x83\x5f\x35\x78\x30\xf1\x04\xc2\x57\x95\xa5\x71\x42\x13\x96\x17\x66\x19\xda\x28\x55\xba\x97\x95\x5b\x5a\xfd\x96\xeb\xbe\x18\xbc\xa7\xfd\xbe\x18\x18\x10\x5e\x47\x77\x91\x2c\x23\xf0\xa2\x75\xbc\x7f\xa8\xb6\xef\xd0\x12\x7d\xfb\xae\x56\x6f\xb0\xe0\x68\x27\x4f\x9f\x67\x59\xf4\x23\xbe\x88\xe5\x3a\x41\x59\x89\xec\x40\x93\x13\xec\x03\x31\x0a\x13\x0b\x49\x16\x8c\xa6\x4c\xe9\x0a\x61\xbd\x1d\xc9\xf2\x2b\xab\x55\xf9\x56\x59\x94\xfc\xe9\xdd\x47\x6f\xf4\x21\xe7\x97\x1f\xc6\xaf\x62\xb2\x44\xb4\x51\x25\xf8\x0b\xb0\x62\x31\x06\x28\xa5\x2e\x93\x12\xb6\xfc\x3b\x0b\xbc\x8f\x3f\xbe\xf9\xfe\xdb\xff\x7a\xe9\xc4\xf7\x0f\x52\x9c\xda\xc5\x7b\xfe\x9a\x53\x88\x59\x67\x54\x91\x50\xbb\x36\xaa\x8e\xde\xdc\x4e\xb4\x6f\x67\xb5\x29\xc5\x0d\xc2\x98\xa5\x96\xf7\x60\xa6\x5d\x26\x6f\xb1\xad\xd8\x97\x22\xa3\x82\x1a\xa9\x96\x58\x7f\x79\xdd\x4a\xbf\x1f\x7f\xeb\xd6\xfa\x87\xdf\xfd\xfe\xbf\x3c\x8e\xe6\xd8\xc8\x90\xe2\x81\x84\x6f\x47\xb7\xa4\x82\x62\xe5\xc1\x68\x50\x06\x86\xfd\x27\x22\x73\x4f\x95\x1c\x18\x48\x4d\xe8\x37\x30\x8a\xea\x44\x86\x8f\xb5\x93\x15\xfc\x76\x94\x82\xe8\x00\x53\xc5\x25\x18\xc7\x50\xa8\x46\x8f\xa6\xab\xa7\xde\x90\xce\x45\x4a\x6a\x45\x23\xad\x84\xb6\xa0\x22\xd5\x0b\x7a\x0d\x3a\xc5\x44\x5c\xad\x44\x1c\xc6\xd6\x47\x0b\x18\x57\xd8\x1a\x6c\x56\x7b\xb2\x33\x8e\x88\x96\x56\x45\x81\x06\x73\x56\x7c\x94\xb3\xd7\x76\x7e\x4b\x15\x71\xe4\x73\xfc\xe3\xd4\xfe\xef\x4f\xef\xfe\xfc\xfe\x03\x89\xb0\x05\x7e\xc5\x01\xe3\xf1\x38\x1a\xf9\xee\xc3\xdb\x35\xe3\x5e\x3c\xa4\x65\xb3\x77\x1d\xe4\x38\x7a\xa2\x28\x32\x8e\x5c\x2b\xc2\xb8\xbb\x86\xd1\xdc\xb3\x47\x77\xdf\x45\x79\x73\x5a\x9c\x5e\xb3\xa5\xae\x49\x2c\xd5\x34\xd1\x4f\xff\xea\x79\x6c\x39\x2d\xf6\x9f\x7a\xe4\x32\x66\x77\xc8\x3f\x7a\x1b\x07\x83\xae\x67\xa1\x43\x50\xc6\x31\x07\x65\x0c\xa1\x08\x4f\x25\x14\xe1\x3e\xd2\x3d\x3a\x88\x45\x67\xce\x47\x93\x81\x07\x29\xdb\x68\x96\xcd\xb0\x55\xa1\x58\x46\xdc\x38\xce\x52\x38\x68\x6a\x45\xd7\xce\xba\xf3\x2b\xde\xba\x74\x91\xd5\xbc\x8a\x98\x27\x3e\x4c\x55\xc0\x83\xe6\x2b\x6c\x5b\xde\x69\x3b\xc8\xb7\x66\x2e\x0c\x29\x04\x43\x0a\x01\xc6\x6f\x7b\x0b\x5f\x08\x86\x3f\x58\xca\xc0\xf1\xe5\x07\x3c\x58\x32\xc0\xe5\x83\x27\x03\xd4\x2a\xd5\x4c\x4e\xec\x07\xed\xaf\xd5\x35\x69\xd5\x3e\xc3\xc0\x07\xcd\x25\x40\xc7\xdf\xce\x8a\xd0\x5e\xa2\xc1\xf7\x64\x1a\xfd\xff\xd8\x7b\xf7\xe5\x36\x72\x2c\x6f\xf0\xff\x7d\x0a\xac\x6b\x22\x2c\x7d\x1f\x49\xd9\x75\xed\xf6\xc4\xf7\x87\x4a\x92\xab\xf9\x95\x2d\x6b\x24\xd9\xb5\x1d\xad\x8e\x2a\x30\x13\x24\x31\x4a\x02\xd9\x09\xa4\x24\xd6\xec\x44\xec\x6b\xec\xeb\xed\x93\x6c\xe0\x9c\x03\x24\x32\x79\x4b\x5e\x24\xab\x5c\x8c\x99\xe8\xb2\x92\x48\x24\xae\xe7\x7e\x7e\x67\x05\xed\x6e\x06\x80\xef\x15\x80\xe7\xa7\x00\xcc\x8d\xca\xde\x91\xb2\xbd\x4a\xb7\x6c\xa9\x68\xef\x15\x97\x2f\x5a\x71\xd9\xc7\x50\x3f\x95\x2c\xbd\x22\x9a\x1a\xe1\xf3\x22\xf5\x65\x4e\xde\x7d\x23\x37\x9c\x7c\x85\x51\x16\xbe\x4f\xcb\x70\x54\xf1\x63\x8b\xc4\xfb\x0e\x15\x79\xdf\x3e\xf1\xfe\x0b\x0d\xe6\x3e\x83\xe8\xed\xa5\x5a\x25\x14\xe2\x37\x4e\x4f\xb8\x12\xe8\xc9\xed\xf5\xd5\x50\x23\xa7\x1a\xf2\x04\xb1\x21\x49\x48\x7d\xac\x78\xec\x9f\x20\xfe\xfa\xd1\xc6\xf9\xdc\x1c\xef\xed\x22\xaa\x7f\xac\xb9\x12\xd8\xc5\xcf\x27\x57\x5f\xbd\x7e\xc5\x4e\xae\x2e\xc1\xf5\xf0\x87\x08\x61\xbe\x6c\x44\x2a\x37\x55\x0d\x5f\xf4\xab\x19\xb8\xec\xe3\x80\xdc\xb4\xde\xb0\xdf\x4c\xa2\x73\xd1\x1d\x6b\x63\x21\xaa\x59\xea\x23\xf7\xdf\xdf\x40\x68\x07\x4f\x65\x27\x00\x30\x43\xf5\x5d\x90\xef\x45\x4a\x3e\xca\xfe\x90\x49\xfb\xd2\x7d\x84\x62\x38\xe7\x84\x0d\xf9\xba\xc5\xdc\xc0\x40\x53\xf4\xa6\xac\x19\x7b\x4b\xde\xcd\xd9\xef\xcd\x89\x16\x6a\xff\xc1\x5a\x9c\x2a\xf9\x20\x3f\x54\xce\xb6\x7a\x37\x33\x3d\x64\x62\xc4\x93\x69\xb7\x0c\xea\xcf\x8d\x3a\x8d\x02\x21\x41\xdc\x85\x30\x48\xc0\x8c\xa5\xa8\x6c\xaa\xc5\xc9\xdc\x1d\xd4\x43\x36\xe0\x2a\xed\xb1\xbf\xeb\x12\xe8\x30\xd6\xb5\x9f\x1b\x18\xfe\x5b\xc3\x4d\xf8\xdb\xa3\x04\xcb\x7d\xec\x9f\x3e\x3e\x4d\xdb\x3a\xf0\x8d\xc2\x05\x3f\x2e\x8c\x7f\x2b\x03\x8a\x80\x78\x20\xdc\xd0\x5b\x31\x0d\xa7\x18\x7c\xc2\x6e\xa0\x30\x8b\x4a\x9c\xb3\x5a\x67\xa6\x27\x85\x1d\x02\xf2\xf0\xd8\x4e\xb2\xa3\x62\x98\x7c\xf7\xf5\x5f\x5e\x7d\x45\xbe\xe0\xee\xb7\xbd\xaf\x7b\xaf\x7b\xdf\xe0\x99\xda\xe0\xcd\xd7\x5f\xaf\x0e\x3c\x83\x3f\xe7\x85\x9e\x51\xb8\xd6\x1a\xc1\x67\xe1\x79\x1c\x7e\x86\xfd\xb7\x09\x40\xc3\x07\x55\x08\x1a\xfc\xdd\x0c\x42\xc3\xee\xc4\x9c\x87\x0b\x03\xd1\xb0\xdf\x95\xa1\x68\xf8\xb9\xd9\x60\x34\xec\x71\x55\x38\x5a\xf4\x3c\x04\xa4\x45\xcf\x96\x84\xa4\xc1\xb3\x46\x50\x1a\x3c\x6b\x86\xa5\xc1\xc3\x2f\x30\x30\xad\xff\xe4\x34\xa0\xa5\x6e\x51\xd4\x75\xd4\x47\xb6\x94\xcc\x46\x92\x6d\x1f\xa2\xd5\x1f\xce\x05\x8d\xe8\x34\x81\xa4\x81\x58\x01\xfc\xfe\x82\x08\x0f\x36\x16\x4b\xca\xd0\x3f\xab\xa0\x84\x93\x55\x41\x09\x1d\x66\xca\x64\xcc\xc2\x7a\xf0\xcc\xc3\x5a\xf1\xec\x71\x22\x0e\x5a\xfb\x37\x76\x73\x37\x9f\x6d\xd8\x81\xd6\x45\x2a\x15\x7a\xf2\x9c\xd6\x2f\xb8\x11\x4b\x94\x51\xf8\x3d\x58\xf9\x38\xcb\xe0\x6f\xaa\xe0\xbc\xc7\x90\x7c\xd6\x36\xc5\xbd\x6d\xee\x4b\xb1\xcd\xb5\xc4\xb4\xfe\xe3\x01\x52\xcf\x25\x47\x9b\x21\x53\xc3\xab\xcf\x18\x83\x7a\x97\xf6\xcf\x78\xd5\x96\xd9\x3f\x91\xba\xef\x06\x2b\x62\xde\x4e\xad\x80\x16\x0a\x6d\x90\xc4\xf8\x2a\x0b\xc8\x53\x08\x30\x66\xcf\x43\x9e\x35\x0f\x69\x83\x16\xd4\xaf\xd0\x82\xfc\x16\xfb\x85\x6e\xee\xf1\xc2\x3e\x37\x26\x16\x7b\xef\xd5\x9e\x43\xee\x8b\x0c\xe2\xf3\xa7\xe6\x2c\x3b\x44\x22\x5a\x28\x07\xac\xe0\x2e\x80\x30\x84\xd7\xb3\x29\x14\x70\x12\x09\xda\x54\x09\x82\xc5\xdf\x71\xd4\xd4\x7b\x99\x14\x7a\x65\xe8\x54\xf4\x6d\x9c\x07\x04\xa9\x41\x78\x59\x1c\xf6\x85\x7a\x17\x18\x10\xf0\x85\x45\xf5\x6f\xc6\x3a\x4b\x45\xd1\x4f\xdd\xf9\xb3\xab\x6a\x20\xd6\x1b\xd7\xb3\x12\xa5\x7f\x4a\xf2\x15\xb6\xa5\x0a\x4c\xf1\xa8\x36\xb0\xfa\xc2\x7b\xa7\x25\xa6\xa5\xb7\x2b\xd2\x36\xef\x15\x5c\xb0\x94\x1e\x06\xc8\x92\x14\x12\x80\x30\xc1\xd8\x6b\xac\x4a\xa0\x0d\xe2\x9e\x4b\x40\x8e\x18\x6a\x47\xa6\x69\x2d\x99\xb4\x55\xd5\xb2\x89\xe0\x06\xd2\x98\x46\x6e\x29\x6c\x00\xc2\x85\x88\x36\x3d\x00\xbb\x66\xca\x2e\x85\x12\xf7\xd7\x10\x8b\xb7\xc0\x20\xb3\x69\x55\x32\x18\x6f\x15\xbf\xd8\x6a\x5d\xa2\xe6\x3e\xd6\xb1\x2a\xd9\x66\xa3\x1f\x61\xf7\x70\x45\x7c\x11\x36\xdc\xd7\xa5\x05\xe7\x36\x9a\x47\xe1\x57\xe8\xc9\xaf\x54\xf8\xf2\xb2\x0b\x15\x1f\x67\x5c\x90\x31\x37\x71\xd8\x22\x26\x72\xd1\x09\xdf\xb9\xe1\x05\xcd\x51\x7b\xeb\xcb\x97\x2b\x39\xef\x65\xcb\x2f\x45\xb6\xfc\xb3\x58\x5f\x22\x9a\xb4\x37\xc1\x3c\x95\x09\x66\xed\x50\xb3\x85\x7b\xb6\x37\xc6\x7c\xe9\x2c\xe5\x19\x1b\x63\x62\x79\x66\x6f\x91\xd9\x73\xcd\xbd\x45\x86\x3d\x43\x8b\xcc\xee\x98\xcd\xde\x36\xb3\xb7\xcd\xec\x6d\x33\x7b\xdb\xcc\x17\x62\x9b\xc1\x6a\xec\xc7\xbf\x5c\x9d\xb9\xaf\xc8\xe4\xc7\x4c\x27\xb7\x57\x56\x17\xe2\x93\xce\xca\x89\xb8\x02\x21\x62\x09\xc1\xbb\xac\xaa\xd6\x73\x76\xe1\x68\xae\x81\xa0\xcd\x53\x69\x6e\x2b\x21\x44\x2a\x76\xfc\xcb\x95\xaf\x4c\x74\xfc\xcb\x15\x3b\xfb\xf1\x8a\xa5\xae\x0d\xe0\x2c\x41\xb2\xb0\x87\x3e\x9a\xe8\x92\x84\x19\xcd\x02\x8c\xbc\x28\x10\x9c\xb5\x7a\xc7\xa3\xb7\x52\x98\xb7\xe1\x13\x01\x3d\xff\xae\x15\x60\x31\x41\x30\x2c\xc6\x3e\xf7\x58\xf3\xab\x09\xa0\x19\x65\x53\xcc\xe5\x28\x15\x65\x68\x16\x82\xa7\x47\xf7\x85\xb4\x02\x0a\xe8\xf4\xc2\x4b\x77\xb0\x1a\x86\x99\x32\xcf\x75\x61\x99\xbe\x57\x04\xf3\x8e\x50\xb7\x13\x08\xf0\x54\x29\xbb\x3a\x7b\x27\x55\xf9\xc0\x0a\x01\x98\x53\x52\x8d\x5a\xd0\xfa\xa1\xb9\x5e\x9d\xdf\xf9\x56\x66\x02\x43\x3e\x59\x9c\xea\x89\x23\x43\x3a\x33\xd5\x25\xbb\xe7\x0a\x88\x09\xcc\xaa\xc7\xae\x65\xfe\x86\x9d\x29\xa0\x1e\xd0\x06\x81\x95\xea\x5d\xc9\x30\xb1\x0a\x4e\x6f\xac\x1d\x69\xc9\x45\x41\x35\x12\xa1\x79\x8f\x9d\x3d\xf0\x49\x9e\x09\xf3\x86\xdd\xbc\x10\x0f\xf6\x5b\xcc\x1d\x7d\x18\x1a\xc2\x2e\xb4\xee\x5f\x3d\xd6\x9f\xe4\x99\x4c\xa4\xcd\x48\xb8\x2c\x90\xd2\x41\x4e\x2d\xbe\xc6\x24\x24\xcb\x56\xd0\xbb\x73\x44\x9f\x7a\x18\x3a\x60\x03\x93\x0d\xd0\x1c\x19\xab\x0b\x3e\x12\x47\xb4\x33\x5f\xf1\x7b\x23\xf0\x0c\x23\x00\x94\x3b\xc3\xeb\x33\x81\x9c\x17\xb6\x99\xee\x3f\x6f\x33\xdc\x51\x0c\x6d\xfd\x11\x5c\xb1\x15\xfd\x21\xd3\x1e\xd0\x96\xb0\xb2\x78\x99\x81\x5a\xea\x1b\xb9\xc5\xa7\x5e\x20\x4b\x21\x5a\xee\xb7\xba\xf0\x3f\x39\x81\xef\xc8\xa4\xfc\x75\x07\x3e\x83\x6b\x88\xbb\x56\x8d\x09\xf2\x8d\x5f\xbb\xbd\xb8\x92\x13\x99\xf1\x22\x9b\x76\xe2\x51\x56\x2d\x1d\x4b\xf2\x5d\xba\xc1\xdc\xbc\x78\x75\xf3\x82\x1d\xe8\x02\x7a\x77\x37\x25\x13\x1e\x58\x8d\x4e\xf0\x14\x53\x26\x0e\x1f\x81\x40\xf3\xf4\x83\xca\x56\xc9\x08\x57\x34\xe5\x9b\x17\x16\x32\xaa\x23\xee\xa9\x52\x08\x8e\xc7\x5c\x30\xec\xac\x1a\xb5\x54\x0c\xe9\xda\x7b\xb7\xda\x94\xbd\x6d\xab\xec\xed\x45\xfb\x73\xf3\x62\x88\x89\xe0\x4f\x78\x4c\x07\x5a\x67\x82\x2f\xc0\x0c\xc0\xee\xfa\xa7\xab\xd2\x1c\x94\xfc\x57\x29\x58\xff\xd4\x53\x8b\xbc\xa2\xd0\xe9\x1c\x0a\xcd\x0e\x8e\x27\xfc\x77\xad\x22\x9a\x77\xf8\x39\x6f\x66\x4b\xe5\x24\xac\xc6\x2a\xfd\x64\x25\x23\x1c\x02\xf3\x9f\x2e\x61\x78\xbe\x09\xf2\x71\xac\xfa\xe1\x18\xb6\x7f\x6c\x92\xb1\x48\xcb\x0c\x10\xa8\xca\x4c\xb4\x31\x2d\x29\x9d\x8a\x39\x5f\x66\x2d\xed\x11\x38\xf4\xf3\xb8\x93\x65\x92\x48\x85\x9b\xe5\xbe\xbb\x78\xe0\x21\xcf\x2a\xd7\x8b\xe4\xfa\x5c\xa7\x5b\x8f\xfb\x22\xea\xa3\xdd\xb0\x73\x9d\x2e\x19\xf5\x81\xe8\x8d\x7a\x2c\xd1\xdd\x4c\x63\x35\x82\xb1\xc4\x57\x62\x39\xc1\xcd\xbc\x03\x92\x42\x87\x09\x9b\xf4\x1c\xb5\x34\x7a\x42\x08\x84\xae\xf9\x81\x39\x3c\x5c\x32\x6b\x65\xe5\x4e\x66\x1e\xf7\xb3\xc6\xec\x95\x95\xdd\x55\x4b\xc0\xef\xb4\x4c\x59\x5e\x5a\x32\x0c\xed\x64\x19\xb6\x96\x34\xad\xe5\x6e\xb8\x48\x85\x97\x5d\xb3\x5a\xc3\x5a\xe5\x5f\x62\x60\x9c\x5a\xa0\x98\xe8\xa6\xb2\xfa\xa6\xa5\xe2\x4e\x26\xe2\x82\xdb\xf1\x0a\xc2\x79\x1a\x1a\x46\x46\x33\xe2\x0a\xee\x17\x96\xbb\x9f\xee\xc7\xa2\x10\x31\x53\xad\x60\x3f\x42\x91\x83\xf5\x65\x90\x16\x69\x2b\xe7\x11\x72\x72\x58\x07\x1c\xc3\x6e\x29\x2b\x8c\xa5\x33\x77\x01\xb7\xa6\xb5\xbf\x97\x85\x70\x6a\x42\x4b\x4d\x23\xb4\x8f\x77\x84\x2b\x06\xcf\xd9\x29\xb7\x1c\x95\x0e\x14\xa4\xb4\xaa\xa4\x58\x28\x47\x20\x55\x4a\x3f\x91\xa5\x1c\xc8\xda\xca\x13\x93\x80\xe2\x37\x7a\xef\x8e\xd7\xf2\x3d\xf9\x9b\xfb\xd4\x09\x36\x67\x13\x9d\x8a\x37\xec\x1c\x6e\x96\x13\x43\x20\x41\x9d\xfe\xf9\x8b\xd3\x2f\x36\x30\x50\x38\x86\xdd\x22\x5f\xd6\x89\xa6\xf1\xf9\x80\xfc\x37\x60\xf6\x74\xf5\x07\x99\x1e\x30\x62\xd2\x9b\x8d\xe2\xe3\x65\xbf\xc5\x20\x3e\x5e\xf6\x1f\x63\x00\x1b\x29\x4b\x95\x14\xfe\x3e\xe0\xfa\x36\xb5\xa0\xf6\x2a\x50\x6f\xd7\xca\xcf\xa3\x78\xd9\xcf\x1e\x72\x91\xd8\xe0\xe0\x61\x57\x63\x5e\x88\xf4\x0d\x9b\x94\x99\x95\x79\x46\xfb\xe0\x36\xc6\x38\xb9\xd0\xef\x08\xe3\x49\x02\xf7\x84\x9d\x0a\xc4\xe5\x4d\xdf\x30\x23\xd5\x28\x7e\x63\xfe\x0b\xef\x41\x17\x4e\xdf\x30\x0e\x77\x12\x55\xe3\x34\x3a\x00\x07\xa0\x73\x4b\x15\x7e\x22\x32\x29\x33\x60\x64\xc2\x1e\xf6\x22\x14\x30\xcd\x0c\x0c\x79\x23\xfc\xaa\x36\x6a\x44\x8c\xe2\x04\x02\x3e\x3b\xa8\x2c\x00\x87\xbd\x4a\x81\x00\x3a\x0f\x89\x6a\xa8\x65\xd4\xb4\x0b\x23\x90\xc5\x36\x94\x8b\x05\x9b\x3a\x2b\xd6\xb7\x24\xc5\xe1\xfa\xcf\xb9\x8c\x3b\xa1\xc5\xee\xce\x54\x16\x9c\x75\xa8\xb2\x7b\x73\x2e\x55\x86\x1f\xae\x44\x01\x2c\x73\xb7\x84\xf9\x0f\xb5\xc5\x71\xc0\x82\x48\x0a\x61\x5b\xd0\xf1\xb8\x42\x02\xbe\x44\xc6\x64\x6f\x10\xc7\x25\xbe\xa2\x4b\x78\x4c\x97\x10\x48\xbf\x5b\xd8\x9f\xc5\x74\x03\xfc\xb5\x30\x3a\x93\xf3\xa4\xed\x10\xa1\xad\xe7\x37\x1b\x8e\xb5\x66\x0e\xf1\x02\x2a\x99\xf1\x2e\xf4\x06\x34\x00\x68\x47\x8b\x75\x06\xb2\xc8\x1a\x37\x6b\x07\xa2\x53\xb4\xd1\x73\x47\xb5\xb3\x3b\xbb\xbf\xa9\x7f\xca\x9b\xfa\x85\x1f\xef\x1f\xa5\x4a\xdd\xc0\x16\x1f\x68\x6a\xc1\xdc\x89\x43\xe8\x47\x8c\x72\xa8\x80\x4b\xff\x9d\xca\x1f\x80\x0d\xb5\xc3\x38\x2a\xc0\x86\x0d\x74\xa9\x22\xbd\xd1\xc9\x7b\xdc\xab\xd1\xa2\xe8\xb1\x53\x77\x41\x40\xf2\x71\xe7\xe8\x75\xef\x87\x0e\xcb\xd1\x1f\x03\x85\xfb\x9c\x08\x8b\xdf\xae\x15\xff\x70\xdb\x9f\xeb\xd4\x30\xa9\x8c\x15\xbc\xcd\xd5\xd8\x07\x15\xed\xe3\x54\xf7\x11\x37\x6c\x4b\x0f\x6c\xcb\x38\xd5\x10\x73\x83\x7b\xf3\xd2\x7c\xd6\xb8\x9b\x68\x49\x2c\x2f\x46\x62\x06\xca\xab\xb5\x1d\x11\xa7\x7f\xe9\x8b\x66\xae\x44\x40\xc7\xcf\x05\x6a\xd9\xf4\x56\x01\x9b\xa7\x8b\x6f\xea\x4b\xb6\xd4\x12\xb8\x00\xee\x15\xe7\xb6\x8a\x1b\xec\x30\x70\x68\x7e\x94\x90\x67\x27\x8b\x63\x84\xd6\x0a\x0f\xc2\x95\x3f\xb9\xea\xaf\xad\x30\x45\x0e\x73\xaf\x3f\xc3\x16\x48\x13\x94\x62\xc7\x8e\x14\x54\xb6\x04\x6a\x7b\x72\xd5\xf7\xf6\xc5\xb4\x90\x77\xa2\x60\x07\x3f\x0a\xcb\xd9\x50\x00\x5c\xd2\x61\x0b\x23\x56\x40\x5b\x39\x7b\xc8\xb9\x4a\xaf\x80\x77\x5f\xc2\xf9\xda\xec\xcc\x85\x1e\x5a\x9c\xb9\x93\x45\x5f\x47\xd2\x1a\xaa\xbd\x86\x43\x87\x22\x14\x9d\x4f\x12\xa2\xc0\x00\x23\x20\x66\xe4\x4e\xd4\xa0\xbb\xac\x66\x39\x37\x81\x57\xb9\xd5\xa2\x65\xb2\x9a\x25\xda\xb1\x7e\x2b\xc2\x4f\xcd\xc1\x90\x7d\x39\xe1\x59\x56\x85\xdb\x40\x6d\xd8\x7c\xcc\x09\x98\xcc\xf1\x39\x3a\xdd\x86\x09\xc5\x07\x60\x6b\xc7\xf7\x4f\xae\xfa\x9f\x28\x36\x80\xf6\x83\x8d\xb8\x15\xcd\xba\x61\x1a\x56\x83\x67\x15\xd3\x1c\x08\xf4\xa1\x32\x39\x64\x4a\xfb\x49\x53\x41\x54\x88\xa5\x0a\xb5\xba\xe6\xad\x87\x69\x94\x65\xc2\x46\x1d\xc6\xb3\x8c\xfe\x8d\x60\x96\x6e\x69\x16\xc6\x65\x55\xe7\xe2\xa2\x1c\x64\xd2\x8c\x3f\xd7\xc1\x68\x7e\xfe\xf3\x9e\x0c\x1a\x0d\x1d\x0d\xb7\x61\xd5\x6f\x1f\x55\x5e\xfb\xd5\x1d\x1c\xf3\xc7\xd8\x6d\x9c\xfb\x2a\x2d\x0c\x17\x48\xce\x56\x68\xac\x96\xce\x09\xc1\xa1\xd6\x34\x52\xa6\xaa\x6e\xef\x06\xb6\xcc\x67\x6f\xd1\xdd\xc0\x87\xa3\x53\xf1\x59\xee\xd4\xf9\x9c\x0f\x7f\x8e\xdb\x14\x8d\x23\xba\x47\xee\xe9\x1f\xf8\x06\xb9\x5d\xbd\xb2\x7c\x24\x9e\x7e\x4f\xeb\x9f\xfd\x5c\x3b\x0a\xa3\x68\xec\xe7\xbc\x67\x1f\x95\x89\x9e\xfe\x81\x76\xb8\xa5\xad\xea\x03\x0d\xfe\x0d\xc4\x24\xa2\x56\x18\xad\xe6\x02\x56\x12\x6a\xd7\xae\x30\x75\x6d\x1c\x0f\x74\x6c\xa9\xe8\xfc\x4c\x80\x6e\x3b\x98\xe9\xb6\x68\x8d\xb3\xbe\x7a\xfa\x6c\x33\x28\x51\x33\xba\xeb\x1b\xa0\x3e\x63\x1f\x7f\xe3\x2a\xcd\x56\xf1\x86\x4f\x51\x53\xcf\xba\x4a\x0c\x7d\x8a\xa2\xe9\x58\x21\x6c\x59\xa8\x8a\x1b\x44\x82\x75\x9e\x95\x23\xa9\xfe\xbf\xff\xe7\xff\x35\xec\x04\x30\xc5\x3f\x85\x19\xc0\x2d\xf3\x77\x84\x9a\x63\xcd\xfb\xb8\xea\x24\x9d\xf1\x75\xb9\x60\x4b\x2d\x8a\x58\xf7\xa2\xd5\xd9\xd6\xd6\x16\x84\xd8\xf5\xc2\x7d\xc9\xde\x01\x81\x36\x21\xbf\xa1\xda\x7a\x60\xcf\x9d\x65\x5a\x4d\x63\x5a\x8b\xc3\x36\xb6\x93\x5c\x62\xc2\xe6\x54\xad\x31\xac\x9a\xa9\xcb\x2f\x27\x5a\x99\x32\xb3\x58\x50\x67\xaa\xcb\x02\x0b\xfd\x87\x28\xa8\x44\x17\x85\xa3\x36\x8a\xfc\x12\x85\x18\x39\xbd\xaf\xa8\x0a\xce\x27\x59\xe9\x1e\x3c\xbd\x00\xb4\xda\x21\x3d\x84\x8a\x36\x79\xa1\xef\x64\xea\xc3\x1b\x91\xd6\x22\xed\x92\x86\xc8\xa2\x3f\xe7\xdc\x18\x9d\x48\xb0\x80\x46\xab\x77\x3f\x96\xc9\x18\x4d\xef\xa9\xb0\xa2\x98\x48\x25\x6a\xa1\x92\xb1\x00\xa6\x01\x02\x73\xfa\xb9\x85\xa7\x77\x3a\xe1\xd9\x3a\x26\x92\x2f\x52\x82\x7a\x1a\x06\x5b\xad\xd0\xee\x58\xed\x55\x84\x7a\xed\x5e\xe9\x42\x08\x41\xa2\xd5\x50\x8e\x7c\x92\x8d\xbf\xa3\xfe\x2e\x7f\x61\xfc\xf5\x53\xe3\xe3\x60\x38\x12\x86\x0e\x4f\xd7\x27\x99\xb1\x8a\x7c\x22\x9d\xab\xb6\x60\xf6\xc8\x55\x04\x0f\x68\x1d\x3e\x7c\x69\x58\xaa\x93\x72\x12\xfc\x06\x00\xe8\x1e\x94\x28\xb2\xe9\xb7\x64\xe5\xeb\xb1\xb6\xad\x59\x18\xcf\x31\x8c\xa4\xbe\xf0\x33\xa2\x4a\x9a\x1a\xb2\xe7\x4c\xf4\x9d\x30\xec\xe2\xc3\x55\xff\xff\x62\x49\xf4\x36\x1a\xe4\x8b\x52\x29\xaa\x5e\x87\xe9\x27\xad\x72\xc4\xd3\x55\x1e\x85\x63\xa8\x90\x17\x7f\xee\x11\x61\xb4\x17\x58\x01\x74\xbe\xb2\xe2\xc2\x04\x0b\xe2\x3f\xf5\x30\x67\x8e\xcc\xba\x87\x40\xe4\xe3\xb7\x57\xdb\x98\x64\x39\x73\x7d\xb0\x88\xd7\x92\xc3\xdb\xdd\xa7\x8c\x1b\x0a\x02\xcd\xe4\x50\xf8\x1c\x3c\xf4\x2a\xba\xd7\x86\x26\xe4\x09\xa5\x1a\x38\xee\xd2\x74\x21\x5d\x6c\x96\x2d\x34\xd1\x4a\x5a\x5d\xac\x4a\xc2\xf3\xa2\xe8\x1b\xf6\x9e\x5e\x40\x2e\x96\x38\xc5\x24\xf1\x02\x1b\x4c\xd7\xf7\x38\xcf\x0d\x42\xde\x53\x5f\x6f\xc8\x47\xf5\x1f\x25\x30\xe1\xa3\xcb\xb3\xe3\xd3\xf7\x67\xbd\x49\xfa\xd5\x58\xdf\x77\xad\xee\x96\x46\x74\xa5\x7d\xea\x53\x9d\xaf\x0e\xe9\xad\x74\xb6\x8f\x06\xb3\xbd\xdc\x4e\xfa\xe4\xaf\x42\x6b\xdb\x61\x05\x87\xc0\x67\x60\x71\x90\x28\x55\x66\x19\x2e\x91\x2d\x84\xe8\xc4\x31\x2a\x47\x8f\x16\x95\x56\x0d\xf4\x71\x43\x22\x1e\x6b\xb7\xd7\x08\xae\x70\xf7\xac\xf5\x6a\x5c\x85\x57\xbc\x90\x0f\x41\xd8\x56\x43\xcd\x0b\xf0\xcf\x3a\x7e\xf5\xd1\x88\xa2\xbe\x53\xc2\x26\x30\x81\x23\x80\xf0\x27\x51\xe5\x91\x27\xbf\x3a\xc8\xea\xa9\xac\x47\xcd\x05\x24\x71\x76\x46\x98\xe5\xa5\x1d\x0b\x65\x7d\xb2\x3a\x2d\xd3\xdc\x15\x05\x29\x72\x97\xe7\x67\xee\x32\xb9\xdd\x5a\xe7\x4e\x07\xdd\xaf\xe0\xa9\x36\x50\xaf\x01\xb4\xb5\xda\xd0\x51\xa9\x7b\xea\xcd\x6f\x29\x0b\x05\xca\xbe\xb5\x34\x04\x8c\x70\xcf\xfe\xf6\xec\x6f\xcf\xfe\xf6\xec\xef\x8b\x63\x7f\x6b\xdb\x74\xf6\x3c\xf0\x4f\xc8\x03\xa5\x4a\x45\xb1\x9d\x32\x98\x40\x1f\xde\xa6\x1d\x27\x4b\x7f\xc8\x85\x32\x96\x27\xb7\x3d\x76\xcc\x4e\x6a\xcd\xd6\x44\xb4\x88\xdf\x9a\x87\x69\x51\x88\x11\xe5\xf3\xd7\x10\x2d\x6a\xdf\x7c\x56\xc0\x14\xbb\xf5\xcc\x3f\x21\xdc\x44\xf3\xf8\x4f\xa6\xe6\x5f\x59\x17\xcf\x40\x37\x4f\xab\xf3\xff\xa7\xe0\x7d\x6b\xce\xbe\x05\xbb\x7b\x7a\x8d\x07\xe2\x69\x0d\x5e\xbb\x85\xc6\xfa\x9c\x17\x7c\x22\xac\x28\x80\x5e\xa6\x68\x8c\x57\x8a\x42\xc9\xdd\x45\xbf\x82\x8b\xbe\x15\x12\x03\xdd\x72\x99\x86\x6f\x20\x96\x15\xe1\x76\xf8\x9f\x15\x91\x9c\x27\x39\x9f\x2d\x29\xf2\xce\xd0\x15\x90\x64\xed\xe9\xf0\x9e\x0e\xef\xe9\xf0\x1f\x95\x0e\x6f\x21\x7a\xef\x89\xf1\xb3\x22\xc6\x90\x60\xd2\xbf\x38\x01\x4f\xea\x12\x42\x5c\x6f\xd8\x84\xc3\xa8\x39\x62\x21\xfe\x07\xdb\xb3\xfe\x05\x1b\x70\xb7\xba\x46\x18\xc8\x5b\xf2\x78\x25\x2d\xc8\x9d\x95\x13\xa1\x4b\xdb\x0e\x84\xb1\xde\x38\xaa\x92\x4c\x8e\x6c\x78\x1a\xc6\xd5\xbf\x20\xc2\x47\xa3\x32\x56\x26\xb7\x53\xc0\xe3\xeb\x45\xc1\x5c\x13\xa2\x98\x37\xe5\xab\x57\xdf\x88\x57\xf0\xdf\xaf\xbf\xc7\xff\xc5\x87\xc9\xff\xfa\xcb\xf7\xdf\xbe\x7a\x75\xe0\x94\xc3\xd7\x2c\xe5\xd3\x43\x47\xda\x28\x83\x32\x80\x04\xfd\xaf\xff\xc5\x6e\xc2\x0a\x3a\x0a\x49\xf4\xa4\x8a\xbb\x78\xfd\xea\x2f\xd4\xcb\x37\x6c\xac\xcb\xc2\xec\x08\x54\x6b\xe6\x3c\xad\x7b\x3e\xf4\x24\xd7\x4a\xa8\xa8\x42\xe8\xe2\x33\x32\xbf\x8c\x6e\x28\x9b\x4a\x00\x9d\xbe\xc7\x16\x27\x40\x14\x85\x5e\xa5\xf8\x86\x81\x31\x68\xcd\xa0\xa6\x32\xe2\x6b\x56\x9f\x02\xdc\xb4\x28\x03\x70\x2c\x78\x66\xc7\x2c\x19\x8b\xe4\x36\x7a\x6f\x83\x28\x95\x89\x30\x86\x8f\x56\x31\xe5\xf7\xd8\x6a\xee\xaa\x2c\x1f\xeb\x6c\x79\xf2\xfa\xe8\x37\x18\xb2\x69\x96\xf9\x9d\x37\x62\xac\x05\xec\x63\xa7\x96\x8c\xb6\x56\xdd\xdb\xfd\x7a\xf3\xe2\x6f\x30\xbe\xe9\xcd\x0b\x27\x27\x5c\x03\xae\x9a\x13\x0f\xde\x22\x78\x5a\x87\x41\xa3\x8f\xa1\x8e\xfc\xfa\x33\xb0\xab\xc5\xa0\x6b\x02\x47\x6c\x37\xf2\x37\xf1\xa8\x77\x4b\xaa\xe1\xfd\xd9\xd5\xdf\x9a\x70\xfb\x79\xcc\x16\x6d\x9e\xb9\x20\xb5\x96\xec\x00\x53\x19\x6a\x0f\xdf\x49\x63\x0f\x01\x78\xd4\xc4\x41\x6c\x58\x3a\x1e\x0f\x9f\x3b\x88\x71\x4e\xec\x1b\x8c\x34\x3a\xbe\xe8\x3b\xfa\x95\xd6\x72\x65\xef\x5e\xf7\x5e\xff\xf5\x7f\xee\x13\x5f\x9f\x73\xe2\x6b\xeb\x6a\xd6\xef\x08\x47\x3f\xdc\x9c\xea\x4e\x99\x80\x3a\xbc\x2b\x54\xfd\x85\x5c\xa7\xa5\x5f\xa4\xf6\x53\x2d\x8b\x30\xe7\x36\x19\x77\x27\xa2\x18\x89\xee\xad\x98\x82\xcc\x50\xbf\x9a\xf3\xdf\x30\xb6\xe0\x56\x8c\xe0\x05\x78\x7b\x9f\x47\xbc\xcf\x23\x7e\x76\x79\xc4\xab\xe4\xbc\xf0\xfc\xb1\x32\x6b\x9b\xfc\xa8\xd6\x68\xeb\x0c\xdb\x59\x6e\xb5\x84\xe1\x55\xa2\x0b\xcf\xb2\xba\xf8\x62\xa2\x40\x6e\x4f\xcd\x78\x5c\x2c\xa4\xc9\x2c\x7d\xd5\x90\x3d\xe3\xfb\x62\x18\x5f\x9b\x32\x32\xef\x56\x1c\x87\x47\x62\x77\x57\x8d\x92\x4e\xfb\x0a\x32\x7f\x62\x3e\xf4\x9c\x2b\xc8\xc4\x6b\xb5\xb6\x46\xf4\xe4\x45\x64\x5a\x71\xac\x5d\x56\xf3\xf5\xd7\x5a\x0d\xe5\xe8\x3d\xcf\x97\x2a\x67\xd4\x86\x94\xaf\x7a\x46\x03\x40\x26\x3a\x8e\x05\x80\x42\x68\x04\x35\xe5\xa4\x55\xe1\x98\x3d\x87\xf9\x6c\x1c\x66\x20\x15\x2f\xa6\xa7\x73\xc8\x41\xbb\x04\x91\xca\xd6\x37\x98\xda\xba\x86\xb2\x79\xfa\xc8\x8f\x61\x50\xf5\x62\x3a\x38\x58\x86\x64\xe3\x8c\x27\x63\x08\x24\x02\xcb\xa7\x3b\x6d\xc4\x08\x01\x08\x43\x95\x13\x51\xc8\x84\x25\x63\x5e\xf0\xc4\x8a\xc2\x74\xd8\xcb\xee\xcb\x0e\x7b\xf9\xeb\x4b\xa6\x0b\xf6\xb2\xf7\xb2\xc7\xe2\xef\x70\xe5\xbf\xc5\xdc\x4c\x18\xa6\x49\x26\x71\x66\x8a\x23\xf9\xe4\x5f\xfb\x78\xfd\xb6\xfb\x17\x56\x70\x35\x22\x23\xec\xad\x98\x52\x96\x0b\x08\x57\x51\xcf\x30\x3c\xf7\xaa\xbe\x13\x45\xc6\x73\xcc\xd7\x73\x9d\x68\x77\x80\xa9\x43\x68\x0a\xa9\x50\x1d\x3c\xbb\xd2\x30\xa1\xc0\x31\x93\xb2\xb4\xf4\xbc\xcf\x5b\x38\xf2\x42\x27\xc2\x98\x1e\xfb\x68\x02\x56\x36\x26\x52\x81\x43\x87\x88\x19\x7b\xdd\x7b\xfd\xea\x7f\x32\x47\xaa\xe1\xb0\xc3\x59\xf5\x7e\xc0\xf5\xf3\x5b\xe7\x31\x8d\x47\x4d\x23\x9a\x3d\x01\xb3\x34\x67\x27\x07\xe1\x13\x9a\x04\x61\x67\x94\x56\x5d\xdc\xde\xc6\x39\x80\xee\x3d\x9c\x5a\xb4\xc1\xb0\xee\x73\x4f\xc1\x8a\xfd\x87\xd6\xb4\xff\xcd\xfe\xd6\x3a\x05\xeb\x6f\xa5\x9c\x4c\x4a\x0b\x60\xdf\xcb\x29\x6e\xdf\xb7\xeb\x30\x39\xc4\x32\x15\x9a\xd9\xc2\xd1\x3d\x01\x25\x5a\xe8\x7a\x00\xf5\xaf\x26\x0e\x99\x5b\x81\x5d\x24\x4d\x69\x89\x50\x75\x49\x42\xf3\x92\x00\xdc\x41\xa8\x6e\x93\x82\xa7\xf5\x30\xa4\x81\xd6\xbe\x0b\x61\x9e\x70\xd4\x1b\xed\x99\xbb\xa6\xca\x7b\x46\xc8\x6d\x81\xce\x32\x25\xb3\x4d\x72\xe8\xf6\x02\xea\x97\x22\xa0\xee\x0d\x25\xbe\xd7\xf5\xc4\x4e\x2f\x15\x3e\x8e\xb0\x79\xa6\xee\x56\x46\xd5\xcc\x36\x66\x46\x64\x4e\xb3\x65\x3c\xa2\x31\x56\xb3\x5c\xe7\x65\xc6\x29\x1f\x59\xa8\x3b\x59\x68\x05\x41\x2c\x77\xbc\x90\x8e\x86\x21\x81\x87\x9a\x5e\xd7\xc8\x4b\x2c\x78\x85\xc9\x71\x44\x28\x73\xa1\xcf\x97\x26\xe2\xca\x9e\xaf\xd2\x5d\xf5\xf4\xbb\x8b\xd7\x3d\xe7\xb2\x30\x8c\x9b\xf9\x9f\x6d\x53\x50\x65\xbd\x0a\x0a\x14\x06\x6c\xd7\xae\x74\xe3\x78\xd0\x9d\x14\xf7\x47\xf7\xba\xb8\x95\x6a\xd4\x75\x2b\xd2\x25\x53\xc1\x11\x20\x23\x1f\x7d\x05\xff\x59\xff\xda\xfa\xfc\xed\x96\x95\x90\xee\xc7\x82\x62\xf7\x63\x5e\xe1\xdd\xd8\x28\xdf\xb7\x8e\x18\x59\x75\x55\x5a\x1f\xc9\x9f\xc5\xf4\x0a\x8e\x57\xcd\x99\x3b\x33\x87\x70\x02\x9d\xdc\x01\xe4\x39\x3a\x8c\x2d\xf6\x1b\xad\xfa\xab\xea\x11\xb8\xce\xad\xa6\xf3\xbe\x09\x2c\xc1\xfe\x54\xe1\xa9\xd2\x05\x73\x2c\x32\x08\x89\x3b\x38\x60\xf3\xed\x05\x6e\x5f\x57\x59\x0b\x5a\x9f\xc5\x15\xb6\xe3\x5a\x3b\x8f\xf7\x40\x02\x46\x14\x9f\x14\x1b\x8c\xc3\x7a\xec\x8b\x88\xff\x01\x74\xf3\xb5\x8a\x88\x63\x96\x5b\x63\xa3\x77\x6f\xfd\xf5\x02\xc1\xde\xee\xbb\x17\xab\x5b\xda\x7d\x9f\x81\xe0\xfc\xcc\x8d\xbb\x31\xbd\x7f\x1c\x49\xfb\x5c\xa7\x02\xff\x68\x2f\x70\x37\xdf\x69\x14\xb6\xae\xc3\x04\x55\x89\x69\xb1\x54\xce\x31\x7f\x15\xc2\x30\xe9\x8e\x7a\xa7\xe6\x79\x2d\x86\x6d\xb1\xa0\x84\xd6\x2a\xec\xf2\xe7\x95\x52\xd3\xcf\x8d\xe6\x2c\x15\x49\xc6\x0b\x27\xfa\x03\x12\x94\x93\x00\xea\xd2\x4e\x22\xd2\xd8\x54\xa1\x8b\x42\x98\x1c\x22\x30\x89\xb5\xd4\xba\xf4\x96\x27\x63\x8b\x12\x4e\x64\x03\xc3\xc8\x1f\x34\x26\x11\x6f\x2d\xe1\x66\x21\xfe\xcc\x2e\x24\x37\x22\xfc\x41\x4b\x55\xb3\xe2\x5c\x6d\x82\x4d\xcc\xa5\x5d\x8e\xb7\x4d\xfd\x95\x50\xa7\x65\xee\xc8\x6b\x55\x59\x9e\x72\xf8\x9e\x83\xb4\x13\x75\x2e\xeb\xad\x67\xa6\xd2\xfc\x7d\x8d\x09\x0d\x75\x31\x90\x69\x2a\xa0\x42\x2f\x5c\x11\x27\xd8\x76\x62\x40\xe7\xb4\xfa\x09\x9c\x41\x1b\x4c\xb7\x94\xab\xf8\xef\xc7\xfe\xe9\xcc\xb4\x3e\x56\x45\x59\x3f\xf3\x54\x5a\xd2\xf7\xea\x50\x36\x6f\x56\x67\x09\x81\xd9\x99\xf8\x7e\x51\xe8\xff\xc4\xbc\xfd\xa5\xf0\x4e\x3c\x6f\x98\x32\xa4\x82\x84\x83\x1c\x5f\x0f\x65\x12\xb7\xb1\x5b\x0c\x04\x23\x69\x88\xee\xca\x4c\xef\x8e\x54\x43\xaa\x0d\x2b\x8d\x17\xae\x62\xfb\x74\xd4\x23\xe5\x13\xb9\xd6\x58\x4b\xa9\xc3\x4a\x95\x09\x43\x7c\x01\x04\x52\x91\x61\xfe\x10\x94\xf0\x44\xb3\x4c\x8a\x86\xef\x80\xfd\x35\xe1\x79\x0e\x05\x49\xf4\x10\xbf\x04\x60\x73\x76\x6c\x7a\xec\x5c\xdb\x50\xfb\x1b\x8d\xe0\x98\xed\x90\xf0\x2c\x24\x42\x0d\xe5\x68\xc2\xf3\x50\xc6\x12\x99\x8b\xfb\x82\x8f\x5a\xf6\xe9\xc3\x93\x76\x8c\xa6\x95\xb0\x5d\xcb\x04\xea\x30\x41\x9e\x87\xc8\x0a\x34\x67\xbd\x96\xf1\x9b\x6a\x77\xfc\x76\xc0\xee\x47\x39\x1d\xc0\x42\x61\xad\xef\xc7\xda\x10\x4c\x24\x5d\x4d\xc7\xcd\xdc\x75\xa2\x13\xe1\x1f\xc3\x68\xc0\x78\x1e\x8d\xd5\xeb\x07\x22\xc5\xd5\x5e\xf2\xe5\xf0\x16\xee\x07\x5e\xd9\x52\xcd\xbc\x4d\xa2\x30\x9d\x2c\xf8\x20\x1a\x44\xa4\x89\xfa\x40\xc6\x2b\x0d\x01\x3a\xa2\xf9\xac\xe9\x23\xa8\x15\xfa\x36\xc2\x96\xb4\x34\x18\xef\x4e\xc7\x4b\x52\xcd\x81\xe2\x56\xa4\x01\x2d\xb0\xc7\x2e\xdc\x20\x83\x5e\x5f\x88\x8c\x03\x8e\xa1\xd7\xfd\xdc\x67\xbd\x67\xcf\x7d\xe4\x65\xaf\xf7\x12\x81\x08\x74\xc1\x8c\xe5\x05\x21\x68\xba\xe7\x3b\x56\x97\x7e\x16\xd3\x6b\x1d\x97\x1e\x65\x9b\xa8\x4b\x7b\x2b\xce\x8c\x15\xc7\x7c\x76\x3b\x61\xdb\x12\x66\x0b\xc9\xfb\x63\x10\xf5\x67\x48\xca\xab\x79\x3f\x6e\xbe\x29\x51\xfb\x16\x55\x6f\xab\xf4\xbe\x09\x54\xd2\x72\x47\xca\x27\xd5\x19\x61\x59\x2e\x8a\x89\x84\x54\x2b\xc3\xb4\x62\x09\x80\x2b\xa7\xb4\xa2\x83\x50\xf5\x2f\xca\x51\x55\x4c\x27\xd6\x1b\x9d\xd8\x40\xd8\x7b\x21\x14\x7b\xf5\xea\xd5\x2b\x98\xcf\xab\x1f\x7e\xf8\x81\x41\x42\x47\x2a\x12\x39\x99\x6d\x08\xad\xbe\x7b\xfd\xba\xc7\xfe\x7e\xfc\xfe\x1d\xe3\x09\xdc\x47\x36\xd0\x8e\x46\x41\xcf\xae\x41\xed\x65\xd3\x61\xff\xfb\xea\xc3\x79\x55\xe4\xa3\xfe\x2b\x68\x59\x61\x7a\x75\x78\xd1\x57\xdf\x7f\xfb\x6d\x8f\x9d\xca\x02\x8c\xdc\x92\xbc\x22\x74\x36\x80\x2e\xfa\x58\x07\x3e\x1c\x22\x67\x80\x4c\x5b\x47\xd4\x31\x29\x94\x24\xbd\x89\x1c\x8d\x2d\xe5\x1c\x3b\x86\x9c\xc9\x84\x48\x29\x16\xe3\xc6\x3b\xef\xe3\x27\xa0\xaf\xea\xb4\x4d\xa0\x90\x77\x26\x6f\x05\x1b\x9a\x9f\x9c\x82\x8c\x6c\x06\x29\x18\xc0\x7c\x92\x7b\x17\x3b\xab\xf6\xca\xcc\xc4\x2e\x6c\x98\x6f\xb6\xae\xa5\x6d\xcf\xfc\xf7\xcc\x7f\xcf\xfc\xff\xdc\xcc\x1f\xe1\x17\x96\x31\x7c\x5f\x78\x9a\xe7\x79\xe6\x51\x99\x02\x6e\xc3\x6c\xed\xb2\xa2\x54\x9e\xfe\xf2\x96\xd5\x49\x79\x31\x5a\x45\xab\x8e\x8b\x11\x60\x22\x07\x23\x96\x50\xb6\x98\x82\x8d\x1b\x03\x95\x52\x9d\xdc\x8a\x82\xc9\x09\x1f\x89\x97\x86\x9d\xbc\x07\x75\x1f\xd8\xa0\x1c\x06\xad\x2b\x86\x60\xef\xb1\x4f\xe4\xcf\x8e\x31\xb3\xff\xed\xe0\xd3\xf1\xe5\xaf\xe7\xc7\xef\xcf\x0e\x81\x6d\x08\x28\x31\x25\xd2\x48\xf4\x08\x93\x7f\x59\x73\x8f\x13\xc5\xf0\x4e\xf2\x28\x48\xa8\x10\x46\x67\x77\x9e\x6c\x55\x86\x45\xba\xc2\x52\xe5\xa5\xf5\x6e\x01\x4f\xc8\x4a\x95\x8c\xb9\x1a\x09\x8a\xc3\x8a\x87\x65\xa6\xca\xf2\x07\xcf\x4d\x84\x49\x78\xee\x05\x18\xce\x52\x5d\xba\x8f\xff\xdb\xbf\x75\x98\x14\x6f\xd8\xbf\x45\x2f\xf6\xd8\x19\xb5\x8d\xe6\x8b\xa4\x4f\xdc\x89\x02\x3a\xa3\xd9\x76\x58\x21\x46\xbc\x48\x81\x50\xe9\x61\xed\x04\x87\x09\x02\xae\x87\x71\xe7\x58\x69\x3b\xd7\x95\xd0\xee\xca\x5a\x6e\x6e\xcd\x91\x54\xee\xc8\x76\x53\x6e\x79\x37\x3a\x6a\x48\x94\x44\x37\xd1\x93\x09\x57\x69\x97\xd3\x41\xe8\x86\x5d\x38\xfa\x8a\x80\xa2\xbb\x3c\xb4\x92\xaa\xcb\xbb\x66\x2c\xb2\xec\xa9\x61\x00\x69\x04\x2b\x8e\xf3\x59\x38\xbd\x0c\xfa\x02\x0b\x01\x13\x0f\x22\x29\xbd\x30\x0a\xf7\x07\xa6\x30\xf7\x80\x9f\x9d\x5f\x5f\xfe\xfd\xe2\x43\xff\xfc\x7a\x7f\xce\xf7\xe7\xfc\xe9\xcf\xb9\x50\x77\x2d\xd3\x78\xe6\x07\x2e\x91\x6e\xe2\xeb\x76\x54\x38\x40\xb3\xcb\xbb\x5b\x29\xe6\x4c\xdd\x7d\xe2\xc5\xa3\xa4\xb4\xaa\x99\x0a\xcf\x9b\xa7\xb4\x0a\x75\xf7\xb6\xd0\x93\x96\x6b\x4c\x1e\xf9\x5a\xd0\xd8\xfc\x75\x9f\x5d\xf0\x10\xe6\x4b\xc2\x47\x44\x7d\xd0\x06\x39\x09\xd0\x45\x27\xbf\xf6\x4f\xcf\xce\xaf\xfb\x6f\xfb\x67\x97\x3d\x76\x9c\x65\x4c\x2a\x88\xde\xad\x0b\xe1\x85\x20\x40\x23\x0e\x75\x1c\xc5\x9d\x1b\xc2\xfd\x58\x34\x3e\x0d\x82\xb5\x93\x58\x41\x03\xfb\xc5\xfd\x8e\x02\x37\x5d\x38\xa9\xd8\xa4\xcc\xac\xcc\x33\x6f\x0e\x35\x9d\x4a\x23\x88\xeb\xa3\x84\x00\xe4\x8c\x1b\x5b\x99\x4e\xb3\x8c\x59\x7e\x0b\x22\x7d\x22\x52\x47\x07\x42\x60\xb4\x9f\x2b\x56\xc4\x39\x53\x77\x81\xae\x94\x78\x25\x51\x1d\x99\xdf\xc7\x13\x1c\x51\xb7\xf7\x64\x8b\xd9\xe6\x96\x02\xb7\x58\x55\xb4\x27\x62\x2c\xa0\x8f\xad\x2d\x6a\x57\x05\x1a\x8e\xa0\x17\xb3\xa0\x0e\x0a\x98\xba\xb3\x4c\xdf\xb3\xb1\x1c\x39\x32\x9b\x89\x3b\x91\x79\x77\x6a\x64\x34\xb1\x3a\x18\xbb\x75\x01\x61\xe6\x85\x4c\x6b\x27\x07\x3f\x23\x15\x73\xd2\x7d\xa6\x39\x6a\x8d\x58\xf0\xcb\xa0\x16\x7e\x2a\xf2\x4c\x4f\x27\x54\x63\x3f\x65\x57\x96\x5b\x31\x2c\xb3\x2b\xb1\xb0\x16\xfd\xd2\xd8\x15\xf7\xc9\x8b\x32\xcb\x2e\x74\x26\x93\x55\x6e\xdb\x3e\xac\x66\x5e\x66\x19\xcb\xa1\x7d\x8f\x7d\x50\xa0\xd4\x1c\x67\xf7\x7c\x6a\x3a\xec\xdc\xf1\xa2\x0e\xeb\x0f\xcf\xb5\xbd\xf0\x3a\x67\x6c\xd6\xc0\x86\x8e\xab\xbf\xa1\x60\x20\xcb\x47\x35\x65\x14\xc0\x3c\xe2\x0e\xd0\xb4\x70\x2f\xcd\xdc\x43\xba\xf5\xb6\x7e\x05\x3d\x39\x0e\x84\x7f\xaf\xbf\x88\x99\x1c\x8a\x64\x9a\xcc\x46\xe9\xb7\x07\xbf\x0a\x3d\x2c\x8b\xd0\x38\x4e\x22\x4b\x0d\xf8\xfc\xaa\xc3\x45\xd8\x6b\x14\x89\x05\x97\x5b\x2a\x86\x4e\x72\x23\x28\xd1\x8b\xce\x59\x18\x2f\x12\x31\x33\xf7\xee\x2f\x98\xe9\x9d\x50\xc2\x98\x8b\x42\x0f\x36\x9f\x2d\xbe\xbd\x6c\xa6\x17\xa2\x90\x3a\xc5\xca\x33\x03\x0f\xba\x12\x46\x8f\x63\x00\xa3\x25\x3d\xab\x68\x34\x90\x5e\x2f\x36\x0a\x7a\x7f\xc8\x65\x36\x77\x96\xeb\x1e\x1e\x7f\x2f\xcd\x51\xae\xf1\x7f\xba\x61\x31\xbf\x0a\x43\xec\xc2\x57\xcd\x4e\x2c\x05\xd5\xbc\x2b\x6b\x0d\x98\x9b\x4e\xcf\xaf\x7e\x7d\x77\xfc\xe3\xd9\x3b\xca\xac\x89\xc8\x08\xe9\xa8\xc8\xe2\xc6\xfc\xce\x31\x39\xaa\x5a\x07\x96\xa9\x83\xf0\xee\xe1\x6a\xb2\xdf\xe6\x02\x38\xc6\xd8\x36\xff\x19\xda\xba\xf3\x28\x1e\x72\x6d\x44\x15\xdd\x15\x31\xef\x33\xf7\x13\x06\x45\x82\x0d\x1a\x20\xf0\x46\xf2\xce\x63\x6f\xe1\x59\xaf\x72\x9a\xe6\x40\x1a\xb9\x76\x4a\x58\xb7\x61\x1e\xe7\x0d\xee\x4e\x84\xce\xe8\xf4\x0b\xd3\x61\x83\x12\x8d\xe6\x85\x9c\xf0\x42\x22\xc0\xa0\xef\x8c\x67\xa8\xc3\xe0\xda\x4f\x9b\x43\x3a\xfd\x70\x76\xc5\xce\x3f\x5c\x3b\x3e\x7a\x27\x3c\x9c\x3d\xfc\x0e\xd3\x1a\x08\xf7\x06\x4e\x34\xed\xb1\x63\x35\xc5\x1f\x83\xb9\x0d\xcc\x75\x10\xfe\xa9\x55\xcd\x1b\x7a\xf3\xe2\x55\x0f\xfe\xef\xe6\x85\x9b\x67\x01\xa6\x35\x65\x1c\xbf\x88\x67\xe0\xcf\x3d\x4f\x12\x61\x8c\x74\x72\x7d\x58\x4f\x9a\xfd\xe3\x33\xf6\x70\x0d\x2f\x74\x61\xb7\x17\x41\xdd\x9a\x74\x27\x3c\x77\xf2\xa7\xa9\x45\x0a\x30\x46\xa5\xa5\xab\xaf\x35\x12\x19\xf3\x42\x5b\x9d\xe8\x2c\x1e\xc5\x3f\x57\x7c\xca\x8f\x6b\xd2\xcc\x9f\x58\x25\x18\x2f\x1e\xc9\x16\x12\x72\x21\x78\x2a\x3f\x37\x89\x35\x08\x36\xc7\xc2\x60\xe6\xd3\x5a\x2c\xe6\x04\x07\xce\xbf\xe1\x43\x34\xcd\xf3\x25\xc0\x55\xa4\xef\xa6\x8b\xeb\x03\x87\xa8\x12\x04\x08\x63\x4b\xd7\xfa\x44\x4f\xf2\xd2\x0a\xe6\x5f\x8c\x22\xa2\xbc\xcf\x66\xa9\xae\xb8\x81\x8c\x53\x05\xc1\x1d\xa1\x94\xd0\x0d\xf3\xee\x46\x22\xd0\x42\x34\xcf\xb2\x90\x76\xea\x36\x5d\x3c\xd8\x6d\xb0\x95\x6b\xfd\x2c\xcd\xe9\xa2\xb6\x91\x3f\x4a\x00\x17\x23\x91\xc6\x5b\x60\xd7\x5e\x0c\x94\x54\x8f\xfc\x9c\x60\xf6\xe2\xc1\x1e\xad\x65\xdf\xf0\x2b\x2a\xba\xee\xc8\x55\xd6\x8b\x99\x5e\x17\xe2\xe3\x15\xb6\xcc\x1f\xfb\x4e\x5f\x45\x9f\x61\x52\xa5\xa0\xf2\x45\xf2\xe2\x85\x4e\xd9\x98\x1b\x66\x4a\xe0\x17\xc3\x32\x03\x76\x27\xad\xe4\x99\xfc\x9d\xca\x34\x46\x82\xb8\xd2\xe4\xd6\xc3\xfb\x44\x26\x35\x32\xe7\x95\xca\xca\xcc\x1f\x5e\x2c\x31\x59\xef\x99\x8a\x3e\x02\x6f\x0d\x44\xa0\x13\x06\x32\x23\xb3\x75\xd8\x7f\x02\x44\x72\xa0\x1d\x35\x69\x13\x5e\x47\x83\x9a\xfb\x22\x9a\xcf\xbc\x43\x98\xac\x82\x2c\x95\x43\x74\xac\xd0\x27\x23\xd0\x57\x5a\x82\x81\x18\x49\x2c\xc0\x07\xd0\x91\x17\x3a\x7d\x69\x2a\x81\xb8\x83\x0a\xbd\xb4\xe4\x35\x05\x39\x9a\xb3\x4c\xab\x11\xe4\xab\xba\x6f\x81\x5e\x06\x89\xb0\xba\x60\xf7\xbc\x98\x38\x8e\xcc\x93\x31\xe4\xbc\x72\xe5\xf3\x7f\x8d\x15\x3c\x9d\x76\x8d\xd3\xcf\x3c\xee\xb1\x56\xd5\xf0\x3f\x3f\x21\x34\x36\x95\xab\x62\x28\x7f\x09\xa6\xc3\x98\x46\xf9\x3b\xe9\xd4\x5e\xb0\x2a\x70\x36\x28\xdd\xca\x63\x5d\x47\xd7\xef\x8c\x49\xc6\x5d\x60\x4c\xf9\xed\xd7\x2d\xba\x46\xd8\x0e\x70\x1a\x8a\xf4\x5f\xf0\x3a\x1c\x17\x8e\xda\x23\x79\x9e\xa5\x62\x67\x1f\xde\x56\xd0\xa7\x4e\x3b\xe7\x99\x59\x84\xb9\xb9\x1c\xc0\xd8\x7d\xf5\x83\x5a\x19\x19\xfb\x4b\x64\x4b\x9d\x99\x5b\x48\x84\xc9\x34\xe5\x9f\xe3\x64\x92\x31\x57\x4a\x64\x8c\x0f\xad\x93\xcf\x2d\x5c\xc2\x81\x10\xca\x1d\x0c\x6f\xb0\x09\x1e\x29\x6b\x79\x32\x26\xd3\x11\x2d\x86\x81\xa4\xea\xa8\x47\x63\x0b\xc1\x27\x3e\xdb\x71\xc2\x25\x76\xc5\x78\x52\x68\x63\x2a\x0b\x13\x76\xe6\x41\x69\x0d\x5e\x70\x3f\x55\x86\xb1\x02\x55\xce\x76\xf8\x1a\x0d\xab\xe6\x13\x83\x5b\xda\x09\x15\x4a\xc2\xfd\x17\x6c\x28\x0b\x63\x7d\x42\x06\x7e\x91\x6c\xa1\xae\xbf\x10\x30\xa0\x68\xa4\x86\x86\xaa\xd2\x10\x43\x01\xd7\xa9\xea\x90\xba\x4a\xa5\x21\xd1\xdd\x74\xdc\xfd\x45\xb1\x19\x17\xda\x8f\x14\x96\x3a\xf5\x95\x37\xa1\x77\x7a\x14\x75\x17\xdb\xe6\x02\xb9\xa9\x0e\xe2\x30\x43\x13\x04\x1c\x9e\x4e\x4d\xc0\xa6\xd4\x7d\x4f\x44\x67\x8e\x69\x64\x80\x2f\x44\x22\xd0\xa7\x3d\xff\x54\x6e\x70\x28\xb1\x12\x32\x10\x0e\x82\x7b\xbd\x58\xa7\x1e\xd3\x05\x44\x89\x84\x75\xf3\x31\x1d\x56\x47\x4f\x62\x77\x48\xf4\x39\x46\x20\xb4\x81\x4a\xdf\x17\xd2\x5a\x01\x4b\xee\x4b\x3b\x85\x58\x84\xb8\x8f\x0a\x07\xbe\xc7\x3c\x44\x6d\xf4\xae\x54\x56\x80\x43\x06\xc1\xdb\x07\x85\x14\x43\x36\x94\x4e\x87\x43\x14\xd3\x8e\x63\x21\x63\xb2\xb1\x72\x63\x44\x01\xc3\x71\xc4\xbf\x2c\x84\x1f\x56\x8f\xfd\x42\xe3\xb2\x45\xa9\x10\x2b\x8d\x70\xe6\x95\x4e\x85\x63\x20\x23\x08\x08\xa2\x9a\x53\xdf\xbe\xfa\xeb\xf7\x80\x13\x61\xd0\x32\x6c\xb5\xe5\x59\x98\x63\x26\xd4\xc8\xad\x14\xde\x1d\x08\x50\x0f\x12\x52\x58\x80\x4c\x4e\x24\xc1\x14\xbc\xfe\xfa\x76\x50\xb7\x6a\x1d\xa5\xe2\xee\x28\x5a\xbe\x6e\xa6\x47\xbb\x51\xad\xe7\x1c\x81\x56\x96\x3a\x62\xfe\x6c\xac\xef\x31\x50\x6d\xce\xde\x12\xb5\x72\x7c\xd2\x47\x8c\xf5\xa0\x44\x1b\x4e\xda\x63\x68\xd4\x62\xde\xe6\x9e\xc8\x99\xb4\xee\x1a\xd5\xb0\xa5\x09\x9f\xd4\x0a\xe3\xa5\x48\x4e\x80\x7b\x4b\x7b\xdb\x63\x6f\x79\x96\x0d\x78\x72\x7b\xad\xdf\xe9\x91\xf9\xa0\xce\x20\xb0\xa4\x36\x16\x30\x85\x27\xe3\x52\xdd\x36\x8c\x42\x7a\xc4\x74\x69\x73\xa7\xcb\x0f\x17\x4e\x78\x48\x35\xae\x90\x80\xf9\x38\xa6\xaa\x17\xf1\x20\x83\xe1\x9d\x13\xfa\x33\x1e\x98\xb8\x7f\x13\x9f\x85\xaf\x5f\x7d\x8b\x08\x24\xe0\x4a\xfb\xcb\x2b\x96\x39\x85\xa9\x83\x37\x4c\x50\xdd\x78\x33\xe1\x59\xe6\x44\xfb\xf8\xcc\xb8\x85\xde\xd1\x19\xb1\xab\x8e\x43\x6b\x36\x7e\x7d\xfd\x77\xe0\xe1\xd2\x1a\x91\x0d\x3b\x58\xaf\x22\x44\xaf\xbd\x04\xa2\xf7\x92\x2e\xaf\xe3\x19\xbb\x61\xbe\x18\x53\x74\x2a\x9c\x0a\xb9\xca\x8e\x54\x6b\xdb\xcc\xa8\x1c\x64\x3a\xb9\x65\x29\xfd\x88\xc3\x04\x19\x91\x88\x43\xa5\x65\xed\xd6\x04\xf2\x29\x1a\xd4\xa3\x38\xe1\x70\x4a\x40\xfd\x77\x64\x68\xb8\x8b\xca\x45\xac\x58\x72\x27\xad\xfb\xb0\x50\x5f\xfb\x63\x35\xf5\x7f\x6c\xb3\x53\x54\xef\xe2\x51\x96\x1c\xa6\xb9\xcb\x15\xa7\x90\xad\x53\xd9\x02\x7f\x3e\xac\x28\xbd\xc4\x52\x0a\x04\x9d\x56\x68\x3b\xf5\xb8\xc1\x19\x61\xf4\xa5\x09\xd6\xc4\x10\x96\x60\x5c\x6b\x64\xfe\x21\x2c\x34\xa8\xb6\xe9\xac\xd0\x0d\x1e\x91\x2d\x88\xd4\x4c\x28\xd7\xe2\x0c\xa0\x5d\x24\xf4\xe0\xa8\xfb\x0d\xf7\xe0\x8c\x6b\x10\xfe\x1c\xd4\x2d\xa9\xe8\x53\x5c\x19\xd4\x85\xa1\x75\x2d\x92\xe7\x1c\xc5\xf1\x52\x96\x93\x7b\xc0\x73\x26\x0d\x03\x84\xfa\x1e\x13\xbd\x51\x8f\xfd\xe3\xe6\x85\x9b\xc4\x28\x29\x9c\x7e\x37\x9e\xe6\xa2\x70\x67\xeb\xcd\xdd\xeb\xde\xab\xde\x0f\x88\x70\x8f\x01\x32\xe3\x72\xe0\x9a\x8c\xb4\x1e\x65\xe2\xd7\xc8\x7e\x33\xfb\xd2\x3f\x9f\x3a\x66\xc2\xc8\xdf\xc5\x8f\x8e\x01\xb6\x40\xca\x70\x6d\xbd\x67\x83\x96\x44\x91\x5c\xb6\x24\x56\xf8\xfb\x6f\x37\xae\x4d\xb1\x24\xe3\x6c\x77\x07\x0e\xec\xbf\x4b\x33\x75\xab\x76\x71\x99\x13\x1e\x3c\x14\xe0\x15\xc0\xe8\x04\x54\x02\xe7\x30\xaa\x85\x67\x32\x59\x30\x8e\xb9\x67\xb3\x9c\x0c\x44\xe1\xfd\x30\x91\x1b\x86\xfc\x0f\x39\xd8\x43\xfa\x17\xde\xe9\xe0\x63\xc8\x43\xb0\x04\x06\x46\xc0\xcb\x0a\xfa\xea\xb0\x57\x54\xb7\x84\x3d\xf8\x7f\x7c\xff\xdd\x77\xdf\x7c\xbf\xf3\xe8\xef\xb1\x36\xb6\x7f\xb1\x52\xd2\xe1\x16\x6b\x4d\xf5\x2f\x40\x00\x90\x24\xe5\x89\x07\xc2\x9c\xa0\x89\x6f\x20\x67\xb9\x6e\x77\xb0\xc6\xae\x9b\xd9\xc8\xef\x4d\x57\xd9\x75\xf4\x37\x6d\xec\x39\x1d\xa5\xba\x2b\xbd\xea\x77\xe2\x58\x15\xab\x9d\xc5\x1e\x7b\xaf\x8d\x8d\x95\x1d\x2a\xaf\xac\x84\x13\x6e\xc7\x72\xe9\xad\xdc\x68\x0f\x5b\x78\x3f\x97\x2d\x8c\x62\xfd\xe3\xf3\xe3\x5f\xaf\x3e\x9d\x40\x50\x1c\x05\xbd\x83\x67\x33\xce\x8e\xd0\x29\x39\x45\xdd\xe7\xd2\xe8\x76\x2d\xf1\x8a\xf6\x18\xb8\x5d\x7d\xde\x3b\x6e\x9d\x3b\x4c\x64\x6a\x84\xa8\x3b\x5f\x76\x6c\xea\x1d\x1e\x9b\xc4\x5c\x04\x27\xd5\x0a\xa9\x8b\x9a\x11\x5a\x6b\x11\xa5\xb2\x7c\x3c\xbd\xe8\xb0\xeb\x93\x0b\x08\x95\xb8\x3a\xb9\xbe\xa8\x6b\x16\x37\x2f\xae\x4f\x2e\xda\x57\x41\x69\x49\x34\x93\x79\x6e\xbe\xed\x89\x27\x04\xb0\xb4\xa1\x9e\xd0\x90\x30\x6d\xdd\x4e\x92\xbf\x93\x0c\xac\xc3\xd8\x83\x02\xa5\xd1\x34\x46\xa6\x48\xeb\xb4\x4f\x77\x87\x10\x58\x64\x10\xe5\x4e\x90\x2c\xa5\x3c\x4f\x9a\xcc\xdc\x9e\xca\x23\xeb\x5a\x49\xc3\xea\xc3\xf9\x85\x4b\xdb\x2e\xf1\x89\xa2\x1c\x37\x36\xfe\xd7\xbf\x7b\x49\xbd\x2d\x73\x06\x9c\x0a\xcb\x65\x66\x42\x89\x1f\x1a\x41\xb5\x4e\xcb\x0d\x0e\x62\x26\xda\x77\xc3\xb1\x5e\x57\x1d\xae\x33\xdc\x6a\x1c\xab\x46\x7c\x8f\x9b\xb0\xa3\xe1\xd2\x96\xae\x35\x56\x1a\xc1\xdc\x81\xce\xdc\xae\xad\x2e\xca\xe5\xcc\x31\x5a\x7e\x5f\xa8\x3d\xc1\x4e\xd1\x1f\xe1\xca\xf0\xb5\xe4\x0c\xb2\x9b\x1e\xaf\xed\x0f\x5c\x82\x4c\x73\x2d\x9b\xc1\xa5\x4d\xa9\x51\x4e\x44\xdd\x86\x19\xb9\x04\xb8\x41\x83\xd0\x41\x21\xba\x87\x34\xbc\x47\x5b\xfa\xeb\x79\x17\x63\xf9\xea\x57\xaf\xe0\x06\x44\x67\x7a\xc3\x3d\x08\x6d\x57\x96\x22\x8c\x95\xc8\xfe\xa9\x57\xed\x90\x83\xb3\x97\xa8\x56\xbc\x39\x3a\x42\x59\x22\x74\xfb\xab\x4c\xb1\x32\xdd\xcb\xf5\xf9\x9a\x78\x90\xf6\x64\x75\x62\xe7\xd9\x83\xb4\xde\x2c\x18\x82\x55\x60\x1b\x63\x93\x5d\x33\xfc\x69\xd7\x82\x88\x3b\xa7\x66\xfc\x9c\x4e\x73\x6d\x09\x6a\xe7\x38\x1a\xf6\x7a\xb5\xe1\x30\x0d\xc0\x67\x3e\xac\xb9\xc6\x2d\xab\x9e\x9a\x95\x38\x2c\x07\x60\xe5\x3f\x64\xd8\x78\xe3\x3d\x6f\x55\x87\x4e\x8e\x5a\x24\xb0\x41\xa3\xcf\x78\xf6\x9e\x01\x21\xcd\x0b\x71\x27\x75\x69\xc8\x9d\x3f\x6f\xd6\xac\x05\x41\x9d\x2f\x29\x06\x42\xb0\x5b\x21\xf1\x97\x19\x3e\xbf\x9c\xfa\x52\x7b\x24\xbd\x9e\x45\x6f\x48\x77\x37\xbd\x77\xf7\xe3\xe9\xac\x0b\xd2\xa9\x58\x53\x61\x3d\x3f\xde\x08\x08\x69\xfd\x7b\xb7\xab\x61\xec\x94\xab\xae\x28\x33\x58\x6b\x59\x01\x9b\xa5\x24\x7f\x85\xca\x4b\x65\x01\x41\x1f\x26\xaa\x30\x59\x8b\xa9\x7a\x4e\x8c\x75\xd3\x28\xfd\x16\xe6\x35\x34\xa9\xcd\xba\xbc\x69\x83\xb7\x0e\x95\xdf\x70\xe4\x2b\x97\xb4\x8f\xad\x66\x48\xd0\x4b\x32\x9c\x6e\xb0\x64\x8e\xa8\x37\x55\x4b\xb6\x85\x5a\xb0\x86\x3e\xd0\x9c\xc2\x0c\x7f\x09\xb5\xc3\x16\x44\xd9\xb7\x30\x92\x34\xac\x72\x9b\x07\x83\xef\xc6\x03\x59\x08\x9e\xae\xf2\x41\x5e\x85\xfa\xc9\xf7\x73\x63\x68\xc6\xdc\xb0\x9c\x1b\xc8\xf9\x04\x40\x4f\x8a\x3d\xc5\x50\xae\x4d\xdc\x8a\x14\xea\x71\x02\x2e\xa2\xd5\xb7\x47\x05\xbb\x9d\x95\x13\x61\xe6\x0c\x0f\x42\x76\xa2\x78\x35\xa2\x3b\xd9\x94\x2a\x52\x13\x95\xad\x3a\x4a\x05\x4f\x63\xfb\x1a\x18\x94\x60\x13\x3c\xf1\xa5\x2e\x21\x94\x76\x1e\xa2\x56\xc2\xb3\x84\xc0\x5c\x40\x60\x69\xf4\xd8\x63\x3f\xc2\x89\xd3\x46\xc4\xdf\xe1\x85\x60\xa6\x44\x84\x55\xab\xd9\x88\x17\x03\x47\x19\x12\x9d\x65\x18\x08\x4f\x76\x5d\xcc\x39\x03\xf7\xd0\x48\x58\x96\xf0\x3c\xc7\x02\x0d\xdf\xb1\xc1\x94\xfd\x74\xb2\x73\xfb\x9f\x97\x29\x76\x7a\x54\x28\xba\x92\x0e\x0a\xeb\x57\x01\x8d\x80\xb1\x83\x51\x3d\x03\x91\x68\xd8\xd5\xa2\x14\x14\x88\x65\x6a\xe1\x92\x06\x6b\x92\xa4\xa2\x70\xea\x59\x88\x63\xec\xb1\x4b\x61\x44\x5c\xa7\x7f\x7e\xce\x5f\x74\x2c\x74\xc1\xe4\xd0\x17\x70\x61\x99\x36\xc2\x90\xdc\x61\xc5\x24\xd7\x05\xa4\x19\xf4\x58\xdf\xf8\x78\x36\x18\x13\x74\xab\xf4\xcc\xa8\x28\xa9\x6f\xb3\xa0\xb6\x67\x41\x00\x3d\x7b\x9e\x4b\xf7\x5a\xca\x94\x4d\x3c\x40\xa4\x38\x8b\x2e\xfb\x0c\xef\x9c\xc3\x92\xb6\x15\x4e\x4f\xb9\x98\x68\x75\x46\x01\xef\xcb\xfc\x8d\xb5\x86\x95\x14\x33\xaf\x0e\x37\xb9\x7f\xf0\x95\x10\x4d\xdf\x42\x7e\x69\xe1\x97\xb8\xa8\xdc\x09\x9e\xd3\x8e\xe4\x9d\x98\xf7\x99\x6d\x6e\x7b\xcb\x0d\xdd\x89\x15\xf9\x54\xdf\xab\x7b\x5e\xa4\xc7\x17\xfd\x56\x30\x8e\x97\x95\xf3\x2d\xa5\x57\xb1\xea\xa6\x1a\x6a\xb4\xb3\x53\x2f\x4e\x6d\x58\x80\xef\xb8\x1a\xf6\x30\xad\x46\xf5\xc4\xc0\x87\x1e\x65\xbc\x02\x93\x8f\x56\x08\x03\x26\x20\x46\x63\xb7\x91\x18\x33\xdf\x78\xeb\x3e\x11\x75\xd6\xce\xa7\xbc\xad\x62\x31\x7f\x18\x4b\xee\xe5\xbc\xf6\xb1\x7f\xb6\x81\x9d\x8c\x10\x63\x55\x1c\x65\x04\xde\xef\x73\x15\x20\x39\x78\xf5\x5e\x42\xb3\x4b\x58\xdd\xcd\x48\x33\xd6\xc9\x79\xeb\xba\x09\x65\x30\x96\xd1\x67\xca\x54\x49\xdf\xb0\xaa\x24\x46\x0d\xf8\x2a\xd7\xe9\x1b\x06\xd5\x9e\x40\x1a\x84\x39\x9b\x0e\x03\x64\x37\xd3\xc1\xb4\x41\xae\x52\x56\xc1\xff\xa2\x88\x91\x63\x4e\xfc\x02\x41\x76\xb2\x73\x98\x37\xaa\xa0\x96\x89\x4e\xec\x14\x7c\xee\xb8\x6e\xf3\x23\x76\x88\x34\x44\x90\x78\xb5\x40\x9d\x2f\x0f\xbe\x2d\x5f\x1d\xbc\x5c\x1d\x54\x88\x2b\x95\x86\xd1\x58\x09\x30\x0c\x30\xc1\x62\xf4\x6c\x1f\xd1\x3c\x10\x1e\x02\x90\xdc\xa4\xa4\xd3\xf0\x81\xd1\x59\x69\x85\x3b\x01\x73\x11\xc6\x2a\xaf\x6a\x69\x87\xdd\xbf\x30\xa1\x12\x9d\x7a\xe0\x16\x8c\x6c\x77\xf4\xb1\x42\xee\x8a\x47\x12\x8a\xc6\x35\x30\xca\x36\x87\xb6\x7e\xbb\x2d\x69\xb8\x8c\x3b\x6a\x45\x1c\x2a\x92\x10\x2a\x34\x34\x15\x71\xa2\x0d\x21\x85\x0c\x23\x60\x4d\x00\x89\x86\xca\x0b\x07\xf8\xb0\x97\xe4\x65\x87\x1a\xf4\x26\x62\xa2\x8b\x69\x27\x34\x72\x3f\xd6\xde\xa2\x16\x08\xd7\x53\xe9\x53\x73\x29\x4b\x4b\xc9\x22\x8f\xc0\xdc\x76\x21\x59\xb4\xc4\x10\x5d\xf0\x46\x3d\xe0\x87\xee\x7c\xc4\x3a\x66\xe4\x90\x5e\xe0\xd9\xac\x12\x20\x9e\x27\x1e\xa7\xd5\x10\x98\xdd\x0e\x7e\x93\xed\x11\x3d\xf7\x88\x9e\x4d\xb2\xb7\xa1\x54\x9b\xce\xde\x90\x2f\x57\xae\x3d\x9b\xe4\x76\x7a\x2a\x8b\x96\x74\x28\xd2\x71\xb8\xa2\x54\x87\x10\x3d\x0c\xe7\x93\x53\x84\x54\xe3\xa7\xc7\xa5\x34\x13\x91\xca\x72\x15\xf2\x13\x44\xef\xb9\xe5\x01\xf8\x27\xab\x0b\x3e\x12\x0c\xdf\x0c\xd9\x2a\x3c\xb9\xc5\x4b\x11\x85\x44\x5f\x47\xfa\x94\x34\xec\xe6\xc5\xcd\x0b\x1f\xe6\x2c\xb8\x0a\x84\xca\xe7\x07\x45\xa1\xd1\xd8\x79\x8d\xa6\xe0\x92\x11\xa2\xdb\x01\x35\x3c\x74\x84\xe4\x3d\xf0\xaa\xb5\xed\xe8\x34\x91\x23\x5a\xe0\xaf\xe0\x03\xa9\xdc\xc8\xbf\xf9\xbb\x78\xe7\x38\xeb\xd6\x9e\xc3\x9e\xe7\xe5\xbd\xff\x28\xb9\xb2\xd2\x4e\x97\x7b\x0f\x21\x61\x8a\x63\xe8\xbf\x1e\xb2\x4c\x27\x90\xb2\x85\x3b\x14\xb2\xd9\xd1\x21\x23\x0d\xf3\x67\x36\x28\xcd\x21\xfa\x17\x04\x03\xb8\xcd\x99\xd1\x1e\x7e\x13\x80\x2b\x1c\xe5\x84\x05\x0e\x9b\x72\x0d\x18\x37\x0f\x72\x52\x4e\x58\xe9\xf3\x87\x6a\x6d\xaa\x0f\xdd\xfb\x5c\x26\x00\xc6\x91\x0a\x5e\xaa\xd3\x7b\xf7\xcb\x95\x5f\xc1\x08\x4f\x05\xb0\x3c\x3c\x0d\x34\x25\xc8\x7a\xf4\x15\x92\x73\xa0\x4a\x71\x2d\x2d\x2c\x00\x81\x36\xcf\x9e\x92\x59\xfd\xe8\xf9\xe4\xeb\x30\xf1\x52\x79\x93\x5e\xf3\x20\xcd\x3f\x47\xa5\x11\x45\x77\x54\xca\x74\xce\x09\xda\x21\x95\x21\x23\xd0\x31\x06\xfe\x2e\x21\x30\x8d\x96\x14\xda\x52\xe6\x19\x59\x45\x52\x8a\xaf\x37\xde\x9a\x15\x85\x13\xaf\xa6\x13\x63\x6d\x6c\x2b\x07\x88\x80\xb0\xd7\x4a\x17\x80\x1a\xcc\x64\x8c\x5b\xdf\x4f\x95\xb7\xf8\x5e\xff\x62\xe6\x4b\x3d\xf6\x9e\xe0\x8b\x07\x82\x65\x5a\xe7\x40\x9e\x0e\x5e\x7f\xfd\x03\xc2\xb7\x1c\xfd\xe5\xd0\x31\x5b\x75\xdb\xc5\x1b\x73\xf0\xfa\xfb\xbf\xf6\xbe\xfe\xee\x5b\xf8\xed\xf5\xf7\x87\x60\x2c\x8e\x7e\x87\xc4\xdd\x04\x62\x9a\x0e\xbe\xfe\xfa\x5b\xea\xe4\xeb\x6f\x0f\x7b\xac\x7f\x71\xf7\x7d\x75\x6f\x40\x54\x71\x12\x42\x89\x0a\x08\xe6\xf2\x07\xb1\xd9\x5d\x14\x77\x62\xf3\x8c\x5b\xc7\xa5\x4d\x8f\x1d\x67\x46\x77\x58\x22\x0a\xd0\x81\xaa\x73\x06\xd9\xfb\x5a\x39\x86\x41\x72\x81\xfb\xad\x9b\x17\xfa\x61\xda\x09\x22\x09\x7c\x1d\x8c\xae\x9b\x94\x1d\xd2\xa9\x38\x5f\xbd\xa7\x95\x80\x78\xee\x84\x0e\x77\x12\x42\xd5\xf4\x6a\xc1\xe7\xe5\xff\xa7\x02\xfd\x6b\x31\x00\x09\x2e\x28\x18\xe4\x54\xcd\xc4\xd6\x7a\xd8\x08\xee\xbf\xbd\x9d\xe6\xd2\x03\x76\xae\xb0\xd1\x78\x64\x51\xab\x7d\x75\x3c\xc4\x35\xf0\x16\xa6\xca\x4e\xbb\xb6\x4e\x24\xf3\xad\x35\x22\x7f\xed\x57\x64\x3b\xc4\xcd\x96\x90\x86\x60\xea\x86\xc8\xe6\x36\x05\x2e\xf3\x8b\x76\x71\xd3\xee\xa6\xc6\xa8\xce\x79\x1c\x47\x8d\x70\x14\x10\x4c\x1d\xa1\xf9\x0d\x75\x96\xe9\x7b\x70\xd2\x60\x5d\xe9\x9f\xab\xdb\x01\x22\x0e\xa1\xb6\xf6\xd8\x47\xd5\xcd\x0b\x31\x94\x0f\x82\x6c\x61\x70\x41\x9c\xbc\x55\xdc\x11\xff\xeb\x1f\x9f\x1f\x57\x3d\x79\x60\x1c\x6c\x7c\xc0\x8d\x53\x73\xd8\xe5\xdb\x93\xee\xf7\xdf\x7c\xf3\x1d\x70\x1d\xa2\xfc\xf7\xf7\xf7\x3d\xc9\x15\xef\xe9\x62\x74\xc4\x8d\x91\x23\x40\xb9\x34\x47\xd4\x45\x17\xba\x38\xec\xb1\x73\xad\xba\xa1\x7f\x3f\xbb\x50\x84\xd3\xc9\x39\x8d\x21\xfa\x8c\xea\xc9\xd4\x5d\x75\xae\xa6\xbd\x44\x4f\x8e\x26\xd3\x6e\x52\x1a\xab\x27\x5d\xdf\x07\xad\x09\x6c\xda\x40\x04\x6c\x7c\xd8\x39\x69\xd8\xa8\xe4\x45\x5a\xe5\x52\x5e\xe1\xb0\x8e\xab\x8d\x61\x43\xc1\xa1\xd8\xda\x08\x92\x49\x55\xca\x84\x72\xac\x3d\x8d\xb5\xb7\x47\x29\xb2\x06\xee\xdb\x98\x13\xe0\x16\x47\xc9\x2b\x98\xfe\x00\x96\x1f\xd7\xf0\xa5\xc7\x71\xf4\x9e\x3c\x5f\x4f\xce\xdd\x35\x9a\xd9\x45\x2d\xe6\xbe\xe6\x64\xf7\x94\x0a\xcd\x22\x72\x08\xd1\xe1\x39\x9d\xf8\xe5\x0e\xbb\x55\x38\x6a\x2d\x66\x9a\xcf\x3a\x72\x76\xeb\xc2\x59\x3f\x59\x81\xd8\xe3\xa2\xbb\xb6\x3a\x71\xc1\x2d\xdc\xf5\xc9\xc5\x8e\x73\x16\xf2\x5d\x38\x99\x3c\x45\xbb\x2a\x07\x46\xb4\x21\x7d\xd8\x10\xef\x11\x14\x95\x04\xf9\x11\x25\x20\xd2\xfa\x21\xfc\x6c\x32\xd1\x0a\x2c\x1f\x1e\x16\x0f\x85\xc9\x00\x5a\x4d\x3f\x45\x98\x5a\x18\x94\x70\xc2\x0b\x2b\x8c\xe4\x40\xdb\xd2\x32\x81\x56\xc7\xa1\xff\x07\x76\x81\x9d\xbd\xd5\x05\x13\x0f\x7c\x92\x67\xa2\x83\xae\xbe\x37\x37\x8a\xb1\xff\x72\xff\xc3\xaa\x17\xde\xb0\x7f\xfc\xd7\xcd\x0b\x99\xdf\xbc\x78\xc3\x6e\x5e\xbc\x7e\xd5\x73\xff\xdf\x7b\x7d\xf3\xe2\xbf\x3b\x6c\xe6\x87\xaf\x7b\x5f\xdf\xbc\xf8\xef\x7f\x76\xb0\x0f\xf8\xd0\x1b\x58\x0c\xd7\x87\xbb\x59\xd8\x98\x63\xf6\xa2\x9b\x95\x7b\xf0\x97\xef\x7f\xf8\x0e\x7b\xab\x9a\x0c\xea\x4d\xbe\x79\xf5\xd7\xff\xfe\xa7\xeb\xf5\xbf\xb1\xd2\x0e\xda\x22\x20\x64\xaf\xb9\x0c\xc4\xfc\xef\xa4\xb8\x07\x17\xff\x1b\x1c\x0c\x7f\xc3\xfe\xc1\xc2\xf0\xdf\xb8\x6f\x76\x58\x18\x35\xfc\xcd\xfc\xc0\x07\xf5\xb6\xdf\xbc\xfa\x6b\xdc\xf4\x9b\x57\x7f\x65\xff\x6c\xc1\x93\xfc\x0a\xae\x32\x60\x5c\xc4\xbb\x0f\xba\x81\x1e\x0e\x29\xaa\x01\x0c\xca\x94\xa4\xe4\x4d\x36\x85\xf0\x15\x34\xb8\x21\xa1\xcb\x9d\x0c\x13\x8b\x37\x15\x78\x43\x1c\xb6\xc0\x87\xa8\x48\x01\x48\xd1\x80\x67\x5c\x25\x10\x0f\xa2\x52\x02\x55\x41\x5d\xd8\xca\x4c\xfe\xde\x14\x89\xb6\x07\xf8\xad\x6b\x10\x6b\x1b\x4a\x6a\x12\xa3\xbd\x74\xf3\x3e\xde\xfd\x12\x3b\x89\xd9\x4b\xb5\x95\xc1\xb9\xb1\xde\x6c\x20\x12\x4e\x26\x83\x69\x3d\x62\xc7\x47\x8e\x07\x94\xe7\x0e\xfe\x5e\x88\x04\xbb\x42\xa0\x2a\x30\xa7\xfb\x10\xa6\x64\x2c\x92\x5b\x20\x7a\x0b\x9a\x7a\xa8\x2b\x6c\xf9\x8c\x37\xa6\x0d\xd4\x67\x14\x68\x60\x18\xbf\xe3\x32\x03\x05\x9f\xa2\xa3\xfc\x6e\xc4\x5b\xf6\x48\x13\x5e\x07\x90\x72\xf7\x9a\x74\x1b\x1d\x9a\xa4\xad\x2a\x30\xab\x4e\xe9\x50\xf4\x72\x04\x1c\x11\xa4\x9d\x68\x9b\xd8\x92\x67\x5e\xae\xec\xb1\x33\x24\xf0\x40\x03\x9d\x8e\xe5\x48\xeb\x64\x6a\xee\x92\x9b\x17\x40\xeb\x90\x19\x39\x22\x8f\x94\x8f\xa8\xff\x6e\xe8\x7f\xe0\x00\x3b\xa3\xfe\x6e\x65\xd7\x19\xe8\x37\xbd\x6f\xd6\x1e\xcf\x5f\xbf\x59\x31\x9a\x1f\xbe\xaf\x0d\xa6\x0d\x2b\xd8\xd7\xdf\xff\x6c\xf5\xf7\xf7\x75\xea\xbf\x94\x3a\xf5\x68\x2e\x59\x59\xa9\xfe\xca\x2b\xbf\xb8\x37\x2f\x4d\x55\xfc\xf8\xb1\x57\x6c\x4e\x15\xfb\xd8\x3c\x8f\xb4\xb6\x0d\x10\x06\xca\xb4\x3c\xcb\x66\xc5\xfb\x52\xf9\x9b\x9e\x65\x8c\xba\xec\x45\xf2\xbd\x13\x5e\xf2\x8c\x27\x1e\x82\x8d\x9a\x30\x9e\x24\x9a\xb2\xbd\xf0\xb6\xf7\x2f\x0c\xca\x2f\x66\xcc\x0b\xd1\x63\x55\xd1\x2b\xb2\xdc\x82\x26\x12\xb0\x02\x81\xb5\x77\x98\xd1\xa8\x47\xa3\x14\x85\xe6\x0d\x27\x11\x39\x22\x31\xfb\x9b\x3b\xbf\x07\x35\x61\x29\x71\x6d\x30\x56\x39\xa0\x71\x56\x86\xf3\x43\x8f\x59\xe8\x11\x1c\x81\xa7\xd1\x78\x10\x2f\x3b\x95\x26\xcf\xf8\x14\xf1\x68\xaa\x3e\xfc\x34\x7d\xd2\x47\x84\xf5\x89\xea\xce\xb9\x8e\x26\x96\x65\x8c\xe7\xb9\xe0\x10\x01\x0f\x0e\xdd\x68\x01\x55\xca\xce\x9b\x02\xa6\x1f\x8b\xe1\x13\x41\xdf\x72\x37\x9d\x8c\xff\xb5\x77\x23\x51\x3d\xd1\x93\xbc\x90\x46\x38\xca\x42\x1c\xf9\x71\x44\x19\x52\x3e\x77\x2e\xcc\x84\xe7\x35\x5c\x23\xd0\x5a\xbb\xc4\x94\xba\x44\x60\x2b\xbd\xba\x76\xba\xa1\xad\xeb\xb1\x3e\x71\x7a\xa9\x92\x74\xea\x3f\xdf\x05\x6e\xf9\xe2\xee\xf5\xec\x78\xff\xd9\x5a\xc8\x7a\x27\x4d\x1b\x9d\x1c\xda\xd5\x9d\xc8\xe1\xe2\xb5\x32\x3f\xee\xf9\xfb\xe7\xe2\xef\x6d\x62\x04\xde\x2d\xde\xd3\x9d\x5e\xc3\xed\x94\xa7\xbd\xa4\xf2\xa5\x48\x2a\xee\xbc\xb5\x97\x53\x80\xe2\x3c\x99\x8c\x12\xaf\xd5\xfa\x8e\x22\xb8\x28\xab\x4c\xa6\x4f\xc7\x35\x80\xbc\xef\x98\x73\xc4\x75\xa8\x96\x71\x8e\xa8\x5d\x1c\xc5\x07\x52\x42\x88\x93\xe4\x5e\x96\x0b\x35\x50\x4d\xab\x6c\x53\x6c\xbb\x8d\x73\x31\x7c\xf0\x4c\xdd\xd1\x6c\x96\x86\x70\xd4\xea\xb4\x42\xcc\x5d\xe6\xe8\x85\x23\x06\x8b\x6c\xff\x62\x28\x1f\x56\x31\x3c\x55\x55\xc2\xc2\x3c\x88\xa1\x74\x74\x46\xb3\xbc\x10\xb9\x50\xe0\x9f\xf5\x45\x98\x67\x6a\x0a\xc7\xfe\x95\x5a\x1d\xb6\x0d\x62\x63\x44\x52\x6c\xe7\xad\xbd\x82\x1e\xda\xaf\x26\xb6\x5f\xbc\x94\xdb\x1b\x92\xa0\xa8\xdf\xd2\x23\xfa\x89\x17\xb5\x08\x53\x35\xb7\x42\x5e\x5c\xd3\x99\x57\x18\x46\x2d\x04\x9f\x35\xcb\x15\xcd\xfb\xf8\x0e\xf7\x18\x98\xe1\x8a\xe1\x6c\x58\x17\x34\x20\x22\xf8\x22\x7a\xed\x2a\x0d\x22\x8c\xb9\x9a\x46\x15\x50\xe6\xbc\xf6\x67\xaf\x2e\x5a\x47\x27\x6b\x0f\x4d\xd6\xdc\xfa\x79\xc5\x23\xd7\xac\x91\xd9\xe2\x6e\x13\xc9\xf7\x8a\xe6\xbc\x1d\x7d\x69\x7c\x05\xf7\x48\x32\xa2\x72\xb5\x28\xb1\x11\xc0\x02\x44\x6a\x6d\x9a\xef\xb8\x8a\x0d\xb7\x23\x20\x6d\x38\x5d\x68\x56\x0f\x57\x37\xf5\x95\xc0\x99\xa1\x8e\x82\x2f\xb5\x43\x56\x40\x5a\xff\xb3\x98\xee\x84\xdd\xfd\x2c\xa6\x6b\xe6\x35\x38\xce\x03\xac\xba\xe2\x3b\x8b\x50\x81\x9e\x38\x31\x6b\x59\x3a\x16\x05\x73\x45\xd6\x2d\x77\x28\x3a\xf5\x3f\x21\x19\xab\xc3\x7e\x0b\x0f\x31\x65\xeb\x1f\x2f\x11\x7f\xe2\xe7\xb3\xbf\x13\xec\xc4\x3f\x7f\x8b\x5b\x45\x59\x5e\xf3\x9b\x9a\x5c\x24\x3d\x1f\xb7\x45\x7f\x12\x89\x3b\x4e\x12\x5d\x2a\x4b\x3f\x00\xe4\x46\x0f\xb1\x39\xc3\x9f\xb9\x4e\x9b\x7f\x99\x05\x4b\xfe\x85\x27\xbe\xd0\x9f\x22\x1f\x8b\x89\x28\x78\xd6\xa5\x98\xd9\x7a\x4a\x4c\xa7\x99\x0f\x53\xcf\x91\x99\x79\xbb\x55\xba\xcc\x8c\x6c\xb4\xe5\x05\xbc\xf2\x9d\x6c\x7a\xfb\x70\x14\x4c\xc6\x50\xb3\xe1\x0c\xef\x52\x6e\xf2\xcb\x15\x04\x9d\x25\xc4\xef\x58\xb1\xd9\xf6\xde\x2b\xe7\xff\x04\x5b\x1f\xa1\x47\xf2\x14\xea\x57\x54\x99\xfc\x10\x63\xa8\x90\xe5\x39\x36\x0d\x89\xa0\x1a\xca\x0b\x16\x5d\xac\xae\x04\x65\x83\x13\x2b\xef\xa4\xa3\x8f\x21\x20\x2b\x15\x83\x72\x34\x82\xc4\x8e\x30\x86\x38\xc8\x98\xfc\xce\xd1\xf1\x2c\xc0\xe2\x93\x96\x99\xfb\xd0\xa8\xe4\x05\x57\x56\x08\x13\x52\x38\xa8\xb8\x6f\x25\x5c\x50\x39\x4c\x8f\x59\x00\x65\x88\xa1\xfe\xec\x3d\x56\x26\x76\x83\x05\x33\x14\x16\x73\xd3\x45\xa3\x40\x8a\x9b\xd8\xec\xd0\x18\xd8\x7b\x0d\xbd\x0f\x08\xb7\x89\x08\xc0\x1d\x34\x58\x2a\x2b\x20\xb5\xea\x84\x04\x59\x5a\x43\x71\x27\x13\xf8\xc2\xdc\x69\x4f\xaa\x90\x5a\x5c\xec\x81\x4f\x53\xc8\xa6\xcc\x57\x6b\xad\xea\x83\x39\xd2\xe4\x04\xa1\x69\x95\x12\x0a\x6f\xdd\x49\x1e\x1d\xb4\x30\x8b\xe8\x43\xa6\x1c\xf8\xd1\x36\x57\xb0\x32\x1e\xc7\xdf\x61\xda\xc9\x66\xd0\x7d\x14\x2c\xa7\x18\xcf\xf2\x31\x0f\xe1\x6f\x51\xd4\x9b\x7b\x79\xf6\x78\x99\xd0\x74\x98\xf1\x36\xc9\x13\xbc\x18\xad\xb2\x80\x1d\x53\x69\xf5\x60\x0b\x14\xa1\x1a\xff\xdc\x52\xfb\x27\xef\x4f\xf7\x35\xf6\xf7\x35\xf6\x9f\xbe\xc6\x3e\x8d\x60\x15\x4a\x64\x38\xbd\x0c\xfa\xc2\x3a\xac\xa1\xf8\x5c\x55\xcd\xdd\x4d\x61\xee\x01\x3f\x3b\xbf\xbe\xfc\xfb\xc5\x87\xfe\xf9\xf5\xfe\x9c\xef\xcf\xf9\xd3\x9f\x73\xa1\xee\x5a\x3b\x2d\xe6\x59\x1a\x28\x2b\xb6\x69\x70\x78\x92\x42\xfd\x9f\x78\xf1\x28\x35\x55\x1a\x28\x3e\x5b\x95\x53\x11\x68\x9f\x6d\xb9\xc6\x5e\x7e\x8f\x2b\x55\xb5\xb3\xf0\xe0\xb5\xbb\x15\xd3\xca\x34\x54\x51\x1f\x94\x74\x26\xf3\xed\x5b\xec\x38\xcb\x98\x54\x08\xe6\x0f\x1d\x54\x35\x2f\x29\x4d\x07\xeb\x9c\x61\xf1\xe8\xf9\xb8\x52\x3e\xca\x90\x0a\x02\xa2\x38\x4d\x17\x4e\xaa\xca\x7b\x4f\x13\xec\x44\x8a\x3a\x37\x46\x27\x28\x7c\x02\x4d\x08\x60\xa7\x01\x8d\x26\xcb\xb0\xc4\x65\x5e\x88\x44\xa4\x8e\x0e\x38\x5a\x08\x89\xcc\x7e\xae\x83\x29\x69\xfb\x81\xae\x94\x78\x25\x61\x4d\x16\xf4\xf1\x04\x47\x34\xb2\xe1\x6f\x73\x4b\xdb\x40\x2b\x9e\x46\x8c\x85\x40\xf3\x3e\x13\x92\xe2\x45\x99\x65\xed\xea\xbf\xc1\x58\xf3\x32\xcb\x18\xd6\xbf\xed\xb1\x0f\x08\x73\x7f\x0c\x90\x63\x1d\x76\xee\x28\x7d\x87\xf5\x87\xe7\xda\x5e\xa0\xc5\xa7\x6e\xa7\xc3\x86\x8e\x67\xbe\x21\xb7\xb2\xc5\x32\x89\x11\x8c\x89\x2e\x6a\x1d\x60\xca\xf8\xbd\x34\x73\x8f\xc0\xd6\x8b\xf6\x95\x97\xfd\xbb\x9b\x2e\x62\x28\x91\xba\xb1\x12\xfc\x2e\xf4\xb0\x4c\xf9\x0d\xad\xbc\xa8\xe1\x74\xa1\x7b\x4a\x10\x9a\xa3\x4f\x2d\x32\x8e\xd4\x2a\xe0\x6e\x3c\xe6\x16\xc5\xc0\xab\xfa\xbe\x5b\x8c\x76\x5d\x5f\xc1\x1c\xbd\xb2\x4a\xca\x75\x94\x31\x4e\xb9\x01\x6d\x0b\x72\x7c\x3c\xb5\x25\x14\x4b\x3e\xd1\x6a\xd4\x48\xcf\xed\x40\x55\xe3\x1a\x22\xa2\x4a\x17\x4c\x65\xa3\x2c\x9d\x36\x21\xd0\xeb\xac\xe7\x4e\xa9\xe3\x46\x05\xf9\x17\x18\xe7\x9e\xaa\x1a\xfd\x4e\x0e\xe0\x67\x28\xed\x5e\x95\x74\x6f\x3d\xf6\xf9\x46\x8f\xd2\x08\x66\x72\xca\x26\xf4\x5d\x66\x14\x7a\x47\x05\x1a\x53\xaf\xdb\xe7\x7a\x89\xa5\xef\xb3\x95\x6e\xa7\xb6\x5b\xd2\xbc\x27\xaa\x95\xbe\x9b\x13\xb7\xaf\xa1\xdd\x5c\x8c\x7d\x0d\xed\x7d\x0d\xed\x67\x55\x43\x1b\x92\xf8\x03\x4b\x6c\x01\x43\xe0\xb6\xd7\xdd\x27\x5b\x4b\x2a\x8e\x97\x00\x06\x7f\xa1\xd3\xab\x5c\x24\x11\x12\xe8\x3c\x81\x06\x3f\xef\x33\x3b\xe7\x34\x08\x2a\x61\x19\x2e\x6c\xf0\x89\x18\x76\xd0\xbf\x38\xe9\xb0\x8b\xfe\x69\x87\x09\x9b\x1c\xce\x81\xb6\x0f\xe0\x82\xc2\xe2\x01\x59\x24\x5a\x21\x10\xbc\xfb\xc6\xfd\x98\x5b\x58\xee\xe8\x43\x00\xe7\x38\xe6\x15\x88\x0b\x95\x51\x8b\xc1\x4e\xe7\xdd\x56\x10\xc6\x3c\x62\x10\x9e\x04\x34\x6d\xef\xa6\xd6\xf5\xbe\xdc\xf9\xbe\xdc\xf9\xbe\xdc\xf9\xbe\xdc\xf9\xbe\xdc\xf9\xbe\xdc\xf9\xbe\xdc\xf9\xbe\xdc\xf9\xbe\xdc\xf9\x4c\x90\xcb\x66\xb0\x90\x41\x40\x24\xf4\x4c\x0f\xf2\x33\xe6\x2a\xcd\xbc\x36\xa5\x74\x31\x89\x60\xfe\xd2\x42\xde\xb5\x0a\x1a\xc6\x3e\x4f\x32\x2e\x27\xd7\x62\x92\x67\xdb\x54\xa1\xb8\x10\x85\x91\xc6\x71\xe4\x4f\x73\x7a\x5d\xa6\xe1\xff\x12\x1d\x83\x08\xbf\x9d\x23\x38\x53\x97\x67\x5a\x09\x76\xf1\xe9\x04\x63\xd5\xf5\x9d\x84\xac\xad\x0a\x99\x1b\x59\x21\x04\xc8\xa8\xb8\x96\xfb\xdc\x95\x47\x3e\x3b\x10\x10\x79\xe2\x0f\xa0\xeb\x0b\x50\x34\xbd\x0a\x71\xf1\xe9\xa4\xc3\x64\x4f\xf4\xfc\x5f\xa1\x69\x2a\x32\x81\x3c\x76\x84\xbc\x2b\x78\x6c\x40\x0c\x67\xd7\x0d\x65\x24\x7e\xf7\x37\x0c\xe0\x73\x23\x85\x94\x76\x88\xe2\xeb\xe2\x43\xda\xde\xea\xf9\x6f\xec\x1e\xf0\x0e\x7f\x5b\xf8\x3b\x31\x19\xf8\x5a\xc8\x14\xfa\x8d\xd4\x1d\xa2\x43\xe6\x37\x74\xcb\x63\x94\x49\x8f\x01\xcd\xe4\x99\x4c\x51\x02\x21\x9d\xfa\x3f\x3d\xf2\x2c\x2c\x62\xd0\xa2\x1c\xf3\xc5\x2a\x98\xf0\x0d\xb2\x61\xa0\x9b\x0c\xf1\x49\xdd\xec\x0e\x86\x31\x7c\x8d\xd5\x9a\x65\x5a\x8d\x0e\x7b\x37\xea\x46\x1d\x47\xe1\x56\xb8\x12\xb0\x58\xdc\x62\x8f\xfe\x30\xbb\x6e\xdd\xfa\x07\x86\xe8\xc6\x01\x63\xfb\x1f\x4a\xdb\xff\x11\x0e\x47\xa4\xf1\x40\x30\xd7\x9d\x96\xde\xcd\xcf\x15\xa4\xcb\x21\x64\x05\x2d\xd6\x60\xca\x26\xd2\x58\x7e\x2b\x7a\xec\x8a\xdc\x73\xd5\x34\x0d\xaa\x61\xc0\x9b\x6b\x2a\x74\xd5\x8f\x1b\x72\x15\x74\x85\x06\x05\x50\x03\x58\x5e\x88\xae\x07\x3e\xa6\x56\x13\xc1\x95\x9d\xc3\xdc\x73\x4d\xa4\xd0\xb5\x1b\x63\x0e\x20\xd1\xab\x20\xd2\xe1\xe1\x2b\x62\x64\x39\x3f\x4e\x88\x64\xf2\x7f\xa0\x3f\xd1\x69\x7b\xee\xc2\x67\x1e\x75\x18\xe5\x25\xa2\x85\x4a\x38\x11\x96\x17\xd3\x0e\x40\xa8\xc8\x10\x10\x57\x1a\x31\x2c\x33\x74\x5f\x4e\xb8\x2a\xa1\x83\x42\x24\x5a\x19\x5b\x94\x58\x4c\x83\xb3\x41\xa1\x6f\x85\x62\x49\x56\x1a\x2b\x0a\xd8\xc5\x08\x81\x4d\x22\xee\x4a\x97\x4a\x10\xb8\x8f\x32\x0c\x7b\xa8\x54\x92\x09\x4f\x61\xed\x23\x70\x36\x9a\x8f\x5b\x81\x59\xbb\x90\xc7\x83\x77\x9f\xf2\xb8\xf2\x9d\x0a\xb2\xdd\x4d\x49\x66\x4b\x43\xb3\xd7\x25\xc9\x77\x62\x69\x21\x18\xf8\x9d\x4a\xf1\x0a\x84\xd8\x1d\x56\xee\x5f\xa3\x27\x02\xaf\xa6\xe7\x4b\xb4\x54\x8c\xc1\x8b\xc6\x57\xef\xf2\xe2\x78\x21\x2c\x66\x7d\xa1\x39\x07\xe4\xfb\x42\x8e\x46\xde\xdd\x41\x6a\x00\xc6\xd3\x89\x3b\x9d\xdd\x09\xba\x28\x60\x42\xc4\x5e\x01\x3d\xa8\x9c\x44\x59\xa6\x6e\x6d\x0a\x01\x05\xb4\x51\xb3\x90\x13\xb7\x83\xf1\x50\xc9\x13\x8c\xd5\x63\x2e\xb1\xbc\x60\x21\x86\x99\xf0\x9b\x0d\x90\x44\x40\xb4\x01\xed\xb4\xc8\xa6\x70\x45\x70\x74\xe0\x36\xf4\x8c\x57\xaa\x52\xd0\xf9\x83\x13\xaa\x87\xf8\x0d\x13\xdd\x69\xfc\x42\xb5\x0e\x95\x22\x67\xe9\xaa\xf0\xa8\x58\xc7\x1d\x14\x7b\x32\xb6\x2b\x86\x43\x5d\xd8\x0e\x58\x27\x10\x40\x85\x67\x60\x25\x6b\x13\x70\xd7\xac\x24\x33\x97\xc1\x00\x58\x13\xc2\xb6\xdc\xbb\x0b\xc8\x6f\x85\x3a\x22\x4c\x9f\xa8\xf6\x2a\x1e\xd2\xcb\xf0\x80\xd2\x7b\xd7\xd7\x7c\xf6\x59\xc8\x9f\x2f\x0b\x39\xd9\xb8\x8a\x9c\x93\x0c\xe0\xda\x38\xca\xa4\x13\x88\xda\x6e\x8a\x94\xdb\x03\xf5\xc1\x27\xa0\x0a\xec\xee\xb2\x5c\xdf\xcb\xa4\xd0\xed\x2a\xcb\x52\xf0\x8a\x13\x8f\x90\x44\x70\x43\x36\x6d\x3d\x40\x70\xcc\x85\x29\x17\x85\x81\x71\x1b\xcb\x27\x33\x28\xbc\x8f\x5a\x11\x17\x89\x5b\xa3\x20\xb3\x68\x0c\xdf\x1d\xd2\x02\x82\x04\x0f\x60\xa2\x7a\x08\xa9\x5e\xde\x58\x9d\x5b\xb4\xf3\xb1\xeb\x69\x2e\xde\xbb\x4f\x1f\x2e\x88\xdf\x50\x40\x81\x53\xcc\x10\x79\x12\x44\x59\x37\x41\x4a\x0a\x8f\x8c\xd4\x81\x09\x0d\x74\x69\x17\x6c\xca\x3e\x51\xfd\xb3\x24\xaa\x67\xfc\x59\x5d\x85\x89\xc6\xf3\x0f\x91\x3d\x48\xb7\x54\x12\xa1\x6d\x87\x9b\x12\xee\xc8\x36\x45\xcb\x8f\xd9\xb8\x9c\x70\xd5\x75\x72\x20\x44\x95\x46\xbf\x7b\xad\xa7\x51\xe0\xd7\xf1\x6e\xe0\x58\x1b\xf0\xd2\x3d\x7c\xd1\xcc\x92\xb4\xaa\x2a\x7d\x1d\x69\x06\x10\xf2\x68\xc6\x20\x65\xd1\xba\xa0\xbc\x87\xf0\xc4\x6e\x13\x89\x38\x00\xfd\x71\xf2\xa2\xa1\xc8\x67\x2c\x05\x4f\x82\xa0\x2d\xb8\x32\xb0\xd2\x95\x9d\x2d\x2c\x4e\xbd\xb8\xf3\x46\xc5\x69\x41\xeb\x7a\x12\x92\x1b\x80\x81\x8d\xd3\x7f\x52\x5e\x4c\x3d\xb5\xc3\xc2\x30\x85\x00\xc8\xa0\x4c\x3c\x90\xe0\xb8\x38\x94\xc5\x29\x08\x52\x8d\x4e\x3c\x3a\xfb\x1a\x91\x55\x70\x3a\x74\x96\xf9\xcc\x25\x31\x91\x16\x8c\x0b\x81\x3f\x77\x98\xe8\x8d\x7a\xec\xb7\x7a\xfc\x1d\x95\x2c\xfd\x6d\xa3\x45\xa6\xf1\xf6\x95\xdb\xfc\x95\x31\x00\xf5\x6a\xcf\x34\x58\x49\xef\xc6\xa3\xcb\x84\xed\x3e\x4c\x7f\x1f\x6e\x32\x28\x23\x8a\xa6\x64\xbf\x56\x94\xa9\x5b\xa9\x2b\xec\x63\xd9\xa6\x9f\x72\xcb\xa3\xd2\xa7\x28\x00\xe1\xb7\x63\x4a\x19\x65\xd6\xea\x02\xea\x44\xc8\x21\x93\xee\x88\xfb\xb8\x05\xab\x15\xbe\xbd\x28\xda\xa4\x69\xe4\xdb\x64\x3e\xed\xb0\x0d\x42\x51\x00\x16\x76\x36\x9a\x4b\x8f\x5d\x35\x29\xc0\x72\x02\xb0\x60\x42\xb4\x89\x4b\xe9\x0d\x55\x83\x89\x16\xf2\x00\xcd\x14\x1d\xf6\x0b\x2f\x94\x54\xa3\xc3\x0e\x53\xe2\x1e\xea\xc6\x18\x96\x84\x71\x81\x29\xce\x97\x67\x2f\x1d\x49\xdc\xad\x19\x37\x10\xd3\xc5\x52\xde\x2a\x23\x6f\x78\xfe\x68\x38\x2a\x60\x92\xa8\xfd\xb4\x35\x7e\x8a\xeb\x72\x15\xea\x96\x6f\xd3\x40\xdc\x02\xfd\x7d\x0f\xb7\xf5\xac\x15\xdd\xb5\xe0\xb6\xee\x66\x03\x24\xb7\x8e\xed\x87\x23\xdb\xd2\xc5\xb5\xd7\x5e\x9e\x8f\xf6\xb2\x87\xd9\xfa\xe3\xc1\x6c\x05\x5a\xbe\x7b\x16\x71\xd5\x14\xbe\xe6\x32\x09\x6c\x15\x4a\xb3\xc6\x25\x97\xa1\x38\x02\xfc\x1a\x28\x4d\x70\x9e\x05\x9d\xe2\x9e\x9b\x23\x70\x5b\xe6\xb9\x80\x7a\x9a\x64\x54\xd6\xa5\xc9\xb0\xda\x1d\x60\x96\x82\xc9\xbb\x0d\x56\xc9\x6a\x23\xdf\x79\x30\xf0\x55\x3a\x31\x65\x8d\x41\x2c\x28\x8c\xb8\xcc\x2b\x1e\x61\x2c\x1b\x0b\x5e\xd8\x81\xe0\x16\x06\xb2\x6b\xd3\x9f\xfb\xc4\x07\xb2\xb2\x7d\x3e\x0b\x20\x89\xf3\x30\xdf\xd8\x5a\x40\x03\xdb\xb5\x9f\x65\x35\xaa\x4d\xd5\x6a\x7e\xcd\x7d\x70\x35\x92\x4b\xa3\xd5\xd9\x68\xa7\x88\x05\x85\x0d\xe9\x7f\xd3\xb2\x28\x0d\x1b\x09\x25\x8a\x0d\x83\x9f\xc6\xda\xac\x3c\xa0\x3a\xf5\xbe\x62\xb5\x93\xcf\x6f\xbd\x5f\x0f\x22\x39\x5e\x55\x9a\xbf\x6a\x54\xab\x12\x75\xf3\x82\x82\x56\x43\x94\xc6\xcd\x0b\x52\x9d\xdb\xed\x59\x8b\x5c\xf3\x13\x6c\xe5\x1d\xdf\xf4\x12\x84\xb6\x21\xb6\x05\x24\x9d\x3b\xed\x54\xa6\x8d\x80\x3f\xf4\xc0\xce\x44\xad\x04\xcb\x86\xef\x0b\x1c\x9c\x5a\x5b\x76\xf0\xf2\xe8\xe5\xe1\x4c\xe4\x49\x23\x96\xe8\x3a\x7a\xd3\xd1\x14\x39\xc9\xb3\x29\x8c\xe3\x65\xda\x61\x32\xf8\xb6\x71\x69\x60\x54\x94\x09\xdf\x61\x46\x33\x5b\xf0\x54\x7a\x3b\x84\x7b\x0a\x8a\x35\xb8\x62\xb5\x32\xec\xe0\xe5\xff\xfd\x92\xc2\x89\xef\xb5\x7a\x69\x61\xf8\x3d\x76\x8d\x35\x32\x43\x47\x53\x5d\x32\x25\x04\xc1\x7b\xe4\x99\x4c\xa4\xcd\xa6\x2c\xe1\x59\xc6\x40\xd5\xd5\x48\x81\x29\x03\xff\xec\x41\xda\xc8\x3e\xf7\x0a\x03\xee\x83\x7b\x2e\x93\x77\xe2\x68\x2c\x78\x66\xc7\xde\xc1\xab\xba\xbf\x8b\x42\x63\x45\x44\xfa\xa5\x5d\xcc\xd4\xb6\x49\xda\xdb\x9e\xe7\xb7\x27\x1b\xc4\xdc\xb0\xb7\x72\x50\x08\x76\x42\x69\x0c\x3e\xc4\x64\xde\x53\xac\x70\x03\xae\xf0\x81\x08\xf1\xc7\x54\x9a\xe4\xe8\xbe\x90\x56\x80\xfb\x7e\xd1\xdb\x8f\x53\xc0\x75\x68\xae\x57\x6b\xeb\x6f\xc3\x29\xc6\x32\xae\x3e\x7e\x2e\xc6\x00\x1c\x36\xda\x54\x45\x0b\x29\xb2\xc1\xd1\x38\x6f\xdb\x55\x23\xe6\x6f\xc5\xd9\x43\x8f\xdd\xbc\x10\x0f\xf6\x5b\xac\xd6\xf0\x30\x34\xf8\x0f\x65\xdd\xbf\x7a\xac\x3f\x09\xa7\x14\xa4\xf0\x22\x04\x5e\xfb\xd7\x98\x1c\xb2\x52\x85\x50\xb2\x0d\xe8\x6f\x56\xae\x52\x49\xab\x80\xf4\xb7\x27\x14\xfe\xcf\xb2\x52\x91\x63\x70\xd7\xbc\xdf\x1d\x89\x0f\x2a\x5b\x15\x11\x5b\x0d\x2a\x8e\xc9\x85\x08\x56\x76\x50\x1d\xab\xc3\x1e\xbb\xa4\x0e\xb1\x2a\x2a\xc4\x5e\x0c\x75\x41\xb1\x22\xe1\x47\x2a\x48\xed\x08\x59\x14\x98\xb8\xc8\x3a\xdb\x22\x41\xe3\x97\x5f\xce\x57\x29\x9d\xf3\x16\xf6\x5e\x17\x59\x7a\x2f\xd3\x50\x60\xcf\xf5\x73\xf8\xd4\x50\x0f\xf7\xf7\x32\x5d\x6b\xf4\x14\x48\x04\xa3\x67\x30\xfc\x0a\x3a\xd5\xb0\x03\xe8\xef\x90\x9d\x49\x8c\x04\x73\x7f\x31\x5d\x38\x96\x30\xf0\x31\xde\x4e\xda\x0a\x0b\x07\x97\xda\x9d\x31\x9f\x1a\x0b\xf9\x2b\xbe\x34\x28\x46\xa0\xcb\x49\x99\x59\xae\x04\x08\xc6\x7f\x10\x3a\x9b\x89\x87\x66\xf8\xdf\x4a\x9a\xbb\xf8\xa5\x3a\xb4\x21\x48\x41\x32\x61\x79\x68\xeb\x77\x25\x52\xf7\x31\x8c\x2c\x04\x07\x8a\xf4\x88\x52\xb3\xa2\xf0\x30\xc7\x96\xd9\x80\x1b\x91\xb2\x3c\x2b\x47\xb2\x8d\x5c\x82\x91\x94\xab\x60\x07\xa0\x51\x2d\x1c\x8f\x64\x6c\x7c\xdd\x57\xb5\x0e\xb5\xf6\x88\xa7\xac\x4f\xd4\x9e\x3f\x69\x8f\x8b\x2c\x47\x1f\x49\x01\x61\xd8\x38\x41\xd7\xed\x3b\xee\x36\xc3\x61\x6f\xb0\x0e\x54\x38\xbf\xb9\x10\x3c\xf5\xe2\xd4\xc5\xfc\xfd\x5c\xeb\xb6\x2c\xa4\x0b\x67\x0f\xb6\xe0\x41\xee\xf3\x45\xfc\xe5\x90\x71\xb5\xa8\xe8\xae\xae\x99\x99\xbf\x34\xce\xb0\x2b\x44\xe7\xf5\x5c\x77\x6f\x58\x78\x0b\xc3\x12\x1b\xc1\x93\x84\x62\x48\x66\x40\x12\xe1\xb1\x4e\x21\x38\x31\xef\x44\x4d\xcb\xb4\x9a\xe5\xdc\x04\x93\x31\x92\x08\x3a\xa2\x86\x60\x0d\x3c\x2a\x1e\xe4\xe9\xc8\x21\x53\xba\xf1\x95\x18\x75\x83\x72\x2e\x17\x0c\xc4\xa0\x93\x11\xd2\xc0\xb4\xf2\x8d\x3a\x58\x4b\x06\xfe\x4d\x05\x64\xb8\x31\x51\x3e\x79\x7d\x54\xeb\xdb\xb3\x88\xa0\xad\x32\x68\xb5\xa1\xf8\x6b\xd0\xf9\x4f\x9e\x60\xcf\xa1\xeb\x7b\x62\xbe\x27\xe6\x7b\x62\xfe\x25\x11\xf3\x77\x3a\xe1\xd9\x26\xc1\x18\x7b\x8a\xfe\x39\x29\x3a\x80\x67\x6d\x64\x30\xc1\x57\x3d\x25\xf7\x76\x10\x22\x3e\xfe\x57\x3e\x82\x78\x84\x0f\x0a\x23\xe0\xc1\x6a\xa2\x11\xea\x2a\xe5\x96\x1b\x01\x40\xd5\xf0\x1b\xfd\xfd\xf1\x63\xff\x34\x8a\x60\x82\x42\x5f\xf5\x6f\x19\x96\x6a\x4c\x3a\x5b\x66\x49\xd1\xc5\x66\x86\x94\x68\x58\x6b\xc4\xf4\xd0\x5b\x90\x8c\x85\xd6\x20\xef\xe9\x62\x98\xea\x53\xd9\x7c\xe3\xe6\x8e\x9f\xf8\xc9\xcd\x2d\x19\x0c\x30\xc4\x79\x21\x20\xab\x7c\x7d\x2a\x1b\xad\xe9\x8a\xc9\xc0\xb2\xd7\x27\x53\x61\xe8\x12\x96\x53\x54\x40\x04\x10\xa3\xfd\xc8\xa9\xfd\x13\xd9\xab\x7f\x3a\x39\xab\x34\xc8\x53\x69\x6e\x37\x39\xbd\x55\x0f\xcc\x75\x51\x09\x22\x52\xb1\x9f\xb4\x1e\x65\x82\x9d\xe8\x49\x5e\x5a\xc1\xce\xd4\x48\x2a\x81\x89\x4d\xec\xa7\x93\x33\x76\x71\x8a\x9a\x3c\xa4\x45\xb0\x81\x18\x3a\x02\x00\xe7\x9f\xf2\x09\x78\x13\x9e\x30\x75\x9f\x80\x77\x20\x85\x79\x20\x6a\xe5\xec\x5c\x9f\x79\xa1\x81\xaa\xb8\x8b\xf0\xbb\xbb\x20\x1c\x45\x11\x8a\xb1\xea\xb1\xf0\xe9\x76\xc6\x47\x84\x8a\xf6\x29\x3b\x13\xae\xa6\x18\xf0\xde\xa3\x6e\x9e\x95\x19\x92\x8e\x5d\x9c\xeb\x38\xd5\x25\xbb\xa7\xcc\x2a\x12\x7d\xae\x65\xfe\x86\x9d\x29\x53\x16\x11\xe4\x45\x53\x0a\x92\x66\x0d\x41\x08\x92\xd7\xcc\x9b\x5d\x9b\x2d\xd7\x45\xd2\xa3\x04\xce\x23\xa2\x6e\x5f\x8d\x12\x51\x99\x3d\xdc\xd1\xd9\x00\x04\x8d\x17\x56\xb6\xc8\x91\x81\x14\x4a\xdf\xd6\x1f\xca\x15\xfb\xd0\x1f\x32\x8d\x11\x8b\xe8\x5e\x49\xab\x9c\xfb\x90\x8f\x3d\x98\xb2\x28\x75\x31\x5e\xeb\xb7\x3a\xb0\x0c\xc0\xa9\x30\x29\x7f\x8d\xde\x0c\x5c\x40\xca\x9e\x0b\x63\xe2\x86\xdd\xbc\x78\xed\x36\xe2\x4a\x4e\x64\xc6\x8b\x6c\xda\x89\x47\x59\xb5\x74\xb4\xd4\x77\xe9\x06\x73\xf3\xe2\xd5\xcd\x0b\x76\xa0\x0b\xe8\xdd\x5d\x9b\x4c\xf0\x3b\xca\xaa\xc3\xe3\x3b\x45\x11\xe0\xf0\xb1\xb7\x6c\x7b\x43\x72\x9e\xb6\x60\x48\x1f\x91\x4c\xd7\x12\x51\x4f\xeb\xa4\xed\xe4\xac\xc7\x3e\x92\x20\x42\xe4\x1c\x57\x1c\x48\x94\x6f\xf1\xf9\x0f\x70\x4b\x89\x7a\x3b\x39\x79\x56\x0c\x7f\xaa\xa9\xcf\xca\xe2\x2d\xe5\x3e\x3a\x07\xdb\xca\x7d\x3f\x49\x7b\x29\x72\xbd\x09\xe7\x6c\x64\xa4\x07\xb0\x96\x2a\x25\x3a\x86\x68\xe1\x6c\x24\x31\x48\xd5\x48\x04\x0c\xf8\x89\xfe\x5e\x47\x98\x9b\xf3\x96\x6f\x3e\x87\x4b\x39\x4e\x7d\x7a\x76\x71\x79\x76\x72\x7c\x7d\x76\xfa\x86\xd1\x64\xdd\x68\x2b\x59\x0a\x3c\xaa\x55\x5e\x39\xaf\x61\x3e\x51\xfe\x24\x7e\xb2\x43\x34\x8d\x2b\x76\xe6\xa8\xc5\xa9\x2c\x30\x0e\x9e\x2b\xd6\x57\xb2\x02\xaf\xa2\x9a\xb3\x99\x56\x21\x8e\x3e\xd7\x64\xbc\x18\x49\x84\xac\x52\xd4\x19\x44\x22\xd7\x7a\x83\xdb\x0a\xb5\x10\xe6\xe0\x82\x2c\x96\x56\xbd\x4f\x7b\x15\xa1\x47\x87\x4c\xe5\x02\x27\xa0\x5c\x9f\x6e\xeb\x23\x7c\x34\xa1\xa0\xe1\x22\xbc\xec\xf5\x5e\xf6\x98\xa3\xf8\x2f\x7b\x2f\x3d\x6f\xcd\x02\xca\x03\x1d\x85\xaa\xd3\x38\xb3\xbe\xb9\xef\xec\x83\x47\x9f\xed\x38\x86\xd9\x00\x8c\xf0\x2e\x17\x59\xe1\x1d\xcd\xe9\x25\x88\x4d\xe5\x20\xfe\x28\x9d\x3b\x4c\x78\x85\x89\x6d\x16\x21\x8f\x1f\x59\x49\x72\xc2\x68\x3e\x5e\xbe\xdb\xe4\x43\x78\xe4\x5a\x44\x3d\x60\xba\xf4\x38\x84\x2b\x54\xf0\xab\xbe\x93\x1d\x43\x5f\x44\x8b\xb0\x35\x85\xc1\xf4\xe8\xa1\x59\xdb\x45\x54\xa3\x36\xa1\x9b\x70\x6f\xb8\x85\x20\x26\x0f\xb5\x33\x14\x96\xc2\x9b\x38\x62\x31\x54\x6f\x3c\x85\xb6\x18\x2a\xda\xae\x2c\x98\x40\xed\xce\x09\x53\xa1\x16\x78\x5a\xc1\x22\xa4\xc2\x72\x99\x99\x68\x16\x56\xe7\x3a\xd3\xa3\xe9\x5c\xd6\x44\x00\x0c\xc6\x87\x4d\xd2\x94\x8f\x46\xfe\xf5\xa3\xcb\xb3\xe3\xd3\xf7\x67\xbd\x49\xfa\x15\x26\xdc\x77\x79\x37\xd7\x1b\x68\x92\x22\x9e\x00\x96\x04\x5a\x63\xc6\xf0\x42\x6c\x5e\xc5\x07\x54\xa4\x9b\x0c\x29\xd5\x9c\xfd\xc7\x22\x00\x43\x8f\x43\x00\x02\x1b\xd2\x0c\xff\x85\xea\x03\x69\xc4\xcf\x83\x7a\x55\x7d\x8e\x74\xaa\x81\x2e\x15\xe0\x37\x7c\xe6\x25\xcd\x57\xc3\xe7\x01\x9e\x19\x2d\x5b\xf3\x60\x33\xf7\xfe\x67\x9e\xc2\x2e\xc4\xb4\x99\x79\xa1\x76\xe5\x75\x5b\x20\xef\x95\x2a\x9b\x8b\x62\x22\x3d\xd4\x67\x3b\xf9\x6d\xb7\xcb\xb1\xb1\xe8\x26\xe6\x94\x5a\xc7\x33\xb0\x33\x5a\xbb\xa7\xb0\x7f\x60\x0a\xbb\x27\x07\x7b\x72\xb0\x13\x72\xf0\xb7\xeb\xeb\x8b\x9f\x84\x5d\x19\xd3\x5b\x6b\x17\x87\xf5\x2a\x0f\x9b\x82\xae\x56\xad\x98\x6b\xca\x7e\x12\xb6\x2a\x7a\xb8\xfa\xe2\xb6\x88\x85\xfe\x9b\x36\xfe\x6a\x6a\x46\x40\xc8\xcc\xea\xce\x0c\x23\xcf\x75\xca\xfa\x17\x3d\xf6\x77\x5d\x3a\xa5\x6d\xc0\x07\xd9\x34\xd8\xa5\x8c\xb0\xec\x06\xfa\xba\x79\xe1\x34\x04\xb7\xd1\x7f\x13\x3c\x15\x85\x81\xd0\x5a\xc1\x37\x0a\xe5\xae\x7a\x59\x25\xaa\x97\xc6\xea\x09\x1b\xd3\x27\xeb\x95\x81\x68\xc1\x7a\xb8\x84\x80\x63\x0e\x79\x6e\x18\x7a\x4b\xef\xec\x18\x8c\xd0\x7d\x0a\x87\xbe\x55\xdc\x5c\x5b\x82\xe4\x54\x61\x04\x50\x25\xef\x06\x4c\x15\x61\x38\x36\x2c\xe0\xb0\x5d\x8e\x44\x69\x65\xd6\x73\x57\xcb\x16\xbd\xbe\xb2\x1f\x8a\x2b\xfc\xdc\x32\x6f\x24\x3a\x73\x8a\x18\x20\x06\xce\x5d\x61\x67\xe7\x17\x59\xf7\x29\xdd\xc4\x47\xf6\xf9\x4d\xe7\x6a\x24\xd8\x6b\xf7\xe6\xf7\xdf\x7d\xf7\xcd\x77\x3d\x76\x1e\x97\xc6\xe0\x8a\xf5\x8f\xcf\x8f\x7f\xbd\xfa\x74\x02\x15\xbf\x16\xe5\x13\x27\x63\xb1\xd2\xe6\x77\x05\x8d\xe2\xf8\x04\xba\x47\x11\xb6\x91\xbb\x89\x75\xea\xe8\x76\x68\xc7\xba\x63\x1e\x55\xb3\xd8\x8a\x74\xd1\xc9\x5d\x4e\xb7\xb0\x51\x2d\x17\x21\x89\xaf\x61\x8c\xc8\x26\x89\x7e\xe5\x50\x53\x60\x35\xe1\x6a\x51\x28\xe5\xda\xad\x2a\x7e\x08\x35\x93\xd9\xd2\x59\xbb\x2a\x98\x3e\xf3\x29\x7c\x69\xa7\x7b\xd7\x18\x3d\x8d\x6b\xeb\xcd\x04\xb0\xca\xa5\x3b\x89\x2d\x42\x72\x30\xf7\x26\x8e\xc4\x73\x20\xca\x61\x08\x88\x62\xfc\x56\xa8\x16\x32\xe3\x83\x48\x36\xcf\xc3\xaf\xf2\x61\x96\x86\x2f\xcc\x71\x69\x83\x47\x4a\x3b\x1a\x0f\x8e\xa6\xca\x89\x5d\xf9\x86\x5c\xef\xe1\x6f\x94\xe4\xfc\x54\x35\x4c\x6f\x01\x31\x70\xec\xe8\x27\xb1\x39\x32\x51\x5d\x28\x58\x36\x31\x6a\xd9\x18\xa4\xfb\xbe\x67\x66\x10\x63\x21\x8a\xa1\x2e\x26\x8b\x90\x03\x92\xfc\x4a\x27\xb7\x5b\x8c\xf7\xfa\xe4\x02\x7b\x68\x31\xe2\xd0\x36\x1a\x73\x25\xc4\x60\xd2\x3f\x22\xdf\x5d\x9f\x5c\x00\x4d\xef\xc1\xbf\xc6\x5a\xdf\x62\xaa\xce\x54\xd8\xca\x6f\xb8\x43\x5f\xb5\x13\x4a\x8e\x33\xc9\x97\x25\x5a\x86\x36\x6c\xac\xb3\x14\x57\x7b\xc2\xf3\xdc\x8d\x78\x20\xec\xbd\x10\x8a\xf5\x2f\xe0\xac\x39\x42\x8e\x91\xf4\x98\x5d\x49\xe6\x56\x2c\xc9\x58\xd5\xab\x53\xb6\x32\x95\x62\x79\x5d\xf7\x22\x26\x31\xb5\x14\xdc\xe0\x2b\x2d\xa4\x37\x1c\x8d\x37\x50\xf2\x81\xbe\x13\x30\xd8\x34\x2d\x84\x69\x29\xd7\xec\x30\xd4\x5f\xce\xe0\x32\x35\x81\x4d\xc2\xd8\xfc\x7d\x05\xef\x30\x60\xb1\x23\x58\xea\x13\x45\x31\xb8\xc5\x73\xd2\xd3\x26\x2a\x3b\x0c\xd9\x49\x67\x70\x4e\x7c\xf1\x03\xd2\xce\xff\x16\x7e\x7c\x0a\xed\xbc\xad\x8c\xe8\x23\x4b\x82\xd5\x9e\x44\x29\x14\x4d\x28\xc0\x2a\x27\xf5\x96\x33\x33\x9d\x64\x52\xdd\x42\x36\x1d\xe9\x87\x8e\xaa\x92\x45\x42\xdd\x7a\xc9\xa6\x10\x3c\x5b\xac\xf8\xae\xe3\xb8\x73\x03\xc9\x67\xf0\xb5\x5b\x01\xde\xb7\x44\x49\x71\x97\xc4\xef\x3a\xf9\x21\x6b\x32\xd9\xcd\x8b\x9b\x17\x4f\x3c\x8b\xb6\xa2\xdd\x2e\xb4\xd2\xfe\xd5\xc9\x55\x7f\x6d\x67\xc0\x92\xb7\x6a\x81\xc5\x8a\x41\x4b\x70\x63\xf7\xe8\xdf\xeb\xa6\xeb\xd5\xdf\x7a\x9c\xf8\x98\x64\xcc\xf3\xe3\xd2\x8e\x4f\xa5\x49\xf4\x9d\x58\xe9\x6d\xf2\x05\x7d\xfd\x68\x24\x8c\x31\xbc\xcd\x4e\xfe\x76\x7c\xc1\x78\x69\xc7\x42\x59\xaa\xc4\xbb\x41\xf4\xa7\x1f\xd5\x15\x16\x51\xda\x68\x4c\xf4\xee\x8e\x46\xb4\x8f\x23\xda\x3e\x8e\x48\x9a\xc4\xc8\x0d\x10\x66\x9c\x54\xc6\xad\x6e\x53\x8c\x89\x4c\x1f\x78\x02\xfa\xfe\x45\xd0\x76\x81\xaa\xd7\xfa\xaa\x45\xd5\xa2\x21\x0f\x86\xd8\x57\x56\x14\x43\x9e\x88\x46\x1a\x1c\xe2\x46\x61\xdf\x32\xb4\x41\x60\x74\x4a\x30\x74\x1b\xc4\x33\x0c\xb0\x7c\xb3\x00\x32\x3d\x88\x49\x1e\xb9\xbb\xca\xfe\x46\x45\x79\x23\x80\x42\xf9\xaf\x95\xb1\x55\x38\x44\x1c\xff\x7f\x94\x3c\xc3\x79\x9f\x6f\xe6\x9f\xae\xaf\xd4\x8a\x4f\xfb\xfd\xf0\x6b\x76\x1e\xac\xdf\xa5\x41\xd9\x18\x5b\x00\xb2\x1f\xca\xc3\x31\x27\x7a\x49\xe6\xb7\x97\xec\xc0\x26\xf9\xe1\xa3\xe4\xe1\xe2\x00\x68\x8d\xde\x85\x04\xdc\x9d\x03\xef\xe2\x09\x59\x25\xca\xd6\x46\x73\x01\xaf\xb0\x77\xd2\x58\x0c\xdf\xa4\x07\xd2\x30\x81\x39\x9f\x1c\x24\x72\x5d\x30\x99\xff\xea\xc4\xc9\x37\x48\x07\x23\x9b\x91\x34\x58\x6d\x17\x03\xc3\x7d\x88\xdc\x81\x9d\xe6\x32\x01\x04\x76\xaf\x89\x18\xf6\x97\xef\x5f\x01\x3f\xf9\xe6\xeb\xef\x5f\x35\xd7\xfa\xf1\x25\xe6\xcf\x15\x68\xf5\xec\x13\xce\x80\x8f\xe1\x0b\x58\x84\x08\x6f\x0c\x1e\x11\x80\x7e\x08\xe4\xae\xc1\xed\xe6\x4b\x89\xf0\x22\x9e\xa4\xf5\x0f\xe3\xe7\x3e\x87\xdb\x4a\x90\xb5\xd9\x37\xa8\x68\x83\x6c\xec\x44\xce\xdc\xa8\xea\xca\x5e\x82\xdc\x4b\x90\x7b\x09\x72\x2f\x41\xee\x25\xc8\xbd\x04\xb9\x63\x09\x32\xdf\x4b\x90\x5f\x86\x04\xb9\x76\x96\xeb\x5e\x8c\x6c\x71\xea\x9e\xa1\x18\xf9\xb3\x98\x5e\xeb\x46\x81\xe3\xe6\x0a\xbf\xe7\x79\x84\x51\x7b\x2b\xa6\x98\xfc\x07\x66\x6c\xc7\x9c\xa4\x0a\xf9\x12\x2d\x04\x3b\xac\xf4\xb8\xca\x15\x4c\x5f\xa1\x7c\xc1\x4d\x2a\x2b\xe8\x74\x15\xf1\xaf\x32\xb3\x5d\x63\x36\x90\xd6\x84\x32\x7d\xc6\xf1\xcc\x2a\xe8\x0a\xed\xf8\x92\x7c\x4b\x15\x3c\x81\x62\x3a\xb1\x1e\x73\x39\xb8\xb1\x5e\xbd\x7a\x85\x87\xe3\xd5\x0f\x3f\xfc\xc0\xa0\x96\x5c\x2a\x12\x39\x99\x6d\x08\xad\xbe\x7b\xfd\xba\xc7\xfe\x7e\xfc\xfe\x5d\xa8\xa2\x0e\x60\x49\xd8\x33\xa4\x0c\xc7\x2f\x9b\x0e\xfb\xdf\x57\x1f\xce\xab\x02\xb1\xf5\x5f\x09\xe2\x9f\xe6\xb3\xa8\x70\xa5\x4f\x69\xc0\x13\xfe\xde\x35\x8f\xeb\x55\xfa\xfc\x71\x5f\xae\x12\x91\x0f\x87\x99\x4c\x28\x63\x02\x6f\x89\x07\x14\x00\x86\xc9\x87\x43\x5f\x68\x0f\xdc\x4c\x6e\x0c\x1d\x96\xc9\x5b\xc1\x86\xe6\xa7\x42\x97\x79\xa8\x1f\xef\xcb\xfe\x3b\x7d\x63\x20\xa8\xb3\x6a\x0f\x8c\x68\x6e\xf8\x0e\xb8\xdb\x6a\x07\xce\x35\x0c\x2c\x83\xe2\x5d\x78\xb8\xbd\xab\x9b\x0a\x78\x4f\x78\x8e\xc9\xaa\x70\x36\x7b\xec\x3d\x9f\xfa\x1a\x6e\x5c\x31\x3e\x30\x3a\x2b\x6d\x08\x50\xa4\x1f\xe3\x2c\x0f\xe8\x54\x60\x15\x30\x4a\x3a\xf1\xcd\xa2\x6c\x14\x2c\x31\x02\x77\x0d\xda\xec\x96\xb6\xb8\xeb\xb7\xeb\x48\xbc\x77\x72\x28\x92\x69\x92\x2d\xd3\x41\x43\x9b\x38\x98\x25\x89\xce\x0f\xfa\x83\x83\xe2\x48\x3a\x06\x05\x17\x58\x7e\x0b\xa7\xb0\x10\x26\xd7\xca\xf8\x40\x3a\x5f\x88\x3a\xf4\x4d\xd8\xee\x90\x7e\x89\x99\x46\xc6\x42\x71\x44\x38\x7a\x17\x85\xb8\xb2\x3a\x8f\xda\x63\xa1\xd1\xc2\x74\x6a\x4e\xc2\x66\xa5\x7d\xa8\xa2\x68\xa2\x22\x8a\xde\xe5\x6e\xa8\x8e\x86\x15\x1d\x56\xaa\x4c\x18\xd3\x78\x33\x2f\x34\x44\x54\x0d\xb9\xcc\x4c\xa7\x2a\xe1\x99\x70\xaa\xad\x4d\x03\xa0\x52\x48\x45\x0d\x0f\x75\xb1\x37\xd2\xcf\x6a\xf3\x30\x09\x8a\x59\x59\xc6\xd2\xab\xb5\x73\xf3\xe4\x59\x26\x52\x26\x27\x13\x91\x4a\x6e\x45\x36\xa5\x5a\x87\xbc\x5e\xdc\xdf\x97\x3b\xf4\xbe\x4e\x3f\x3f\x5a\x80\xfa\xea\xc8\xaa\xfc\xbd\x48\x61\x87\x0a\x01\x17\xc1\xfd\x95\x24\x3a\x54\xae\x43\x88\x72\xbc\x23\x39\x94\x62\xef\x61\x9e\xd5\x7a\xdb\x36\xd6\xfa\x36\xec\xd8\x7c\xf8\xfb\x65\x6a\x63\x55\xa0\xbe\xfa\x67\x37\x9c\xa5\x2e\x84\x59\x1c\x7d\x55\xfd\x04\x0f\x16\x90\x23\x3c\x89\x8f\xbb\x7f\x74\xda\xe7\xef\x1e\xe5\xf3\xf3\x85\xdb\x91\x96\x70\xcb\xb8\x62\xc7\x17\xfd\x10\x12\xa3\x6b\x4b\x4e\x35\x23\xa1\x6a\x28\xa2\xab\x2a\x61\x9c\x7e\xcd\x0b\x5b\xe6\x18\x89\xe6\x4b\xcd\x77\x58\x5e\x08\x31\x81\xe1\x75\xaa\x6c\x5d\xca\xa2\x84\x87\xc2\x26\x28\xba\x45\xb7\x02\x68\x28\x0d\xbf\xb9\xc1\x49\xc1\xcd\x18\x8b\xc0\x8b\x07\x89\xb0\x27\xf5\xb2\x3e\x51\x3d\x7a\x69\x1a\xe0\x24\xf4\x11\x2f\x2c\xa6\x2f\x4d\xad\xfd\xa8\x70\x0a\x61\x2e\x0a\xa9\x53\x06\x90\xdc\xa9\xbe\x77\xfc\x6a\x24\x95\xf1\xcb\x07\x34\x86\xd6\xd9\x6d\xb7\xc0\xe4\x1d\xc4\xea\x4d\x7b\x54\x6e\x31\x8b\xe2\x30\x74\x69\x13\x5d\x25\x2e\xd3\x20\x9a\x37\x03\x98\x31\xac\x2e\x16\x32\x0d\xfb\xe2\x05\x2e\xbb\x72\xcc\x3b\xb8\x21\x6e\x61\xab\xdf\x16\x2e\x0e\x96\x4d\x4d\xc6\x1b\x58\x62\xb6\xbd\x52\x33\x4c\x6f\x6d\xce\x35\x91\xf6\x92\xab\xd1\x72\xd6\xe5\x1b\x39\xd1\xc4\x54\x67\xb7\x34\x7c\x24\xb0\x12\x2a\xca\x5d\x6e\x15\xd8\xad\x54\xa9\x5b\xea\x38\x21\x9d\xb3\x90\xbd\xb5\x2f\x3c\xf2\xac\x0b\x8f\xec\xcb\x76\x7c\x29\x65\x3b\xfe\xe8\x85\xf0\x9c\xca\xb6\xb9\x01\x27\xd0\xac\x2b\xd7\xcd\xd2\x05\xc8\x45\x52\x23\x1f\x44\xd0\x84\x02\xc3\xd5\x7c\xa2\xbe\xcb\x65\x70\x13\xed\x72\x95\x76\x11\xb8\x7d\x0d\xf2\x1e\x9e\x3f\x56\x69\x92\x88\x3f\xd4\x7e\xdf\xb6\x36\x49\xd5\x6f\xdf\x8a\x49\x2b\xde\xd3\x47\x74\x42\x1f\x41\x3e\x91\xea\x68\xc2\x1f\x62\x1e\x44\xb5\x24\xa6\x0d\xb8\xc9\x09\xb7\x09\x48\x49\x0a\x58\x53\x1b\xb4\x05\x34\x0b\x6c\x06\x5a\xb8\xf6\x8d\xed\xf9\xe1\xf6\xfe\xa3\xe4\xca\x4a\x3b\x6d\x8d\x74\x48\xd6\xd2\x6a\xc2\xa4\xf3\x82\xb4\x83\x6b\x42\x06\x97\x68\x51\xb0\xdc\x7f\xc4\x9f\xb1\xa1\xa3\xce\x88\xf7\xb3\x01\x32\x22\xad\xd8\x25\xd2\xe3\x3f\xcc\xc2\xd1\x78\x7d\xae\x65\xba\x6c\x39\xbd\x06\xd0\x62\x41\x8b\xaa\xdb\xcd\x97\x74\xc2\x1f\x9e\xff\x3a\xbe\x0f\x37\x30\xd1\xca\xd8\x82\x4b\x00\x84\x21\x63\x21\x48\x82\xcd\x95\xda\x6c\x29\x90\x0e\xe0\xba\x5e\x3a\xe9\xed\x0f\xb1\x36\x33\xa3\x9e\x03\x89\xe2\xd6\x24\xad\x96\x08\x92\xc7\xc6\xfc\xce\xa9\xa6\xfe\x1c\x61\x1d\x14\x77\x49\xd1\xd2\x58\x08\xb4\x90\x86\xea\x1d\xf7\xe0\x6c\xc1\x26\xa9\xbc\x93\xa9\xa0\x75\x0f\xe7\x90\x6c\x33\x1c\xa0\x5f\xc4\xbf\x4a\x9e\x79\x29\x56\xa8\x72\x82\x95\x68\xf0\x68\xff\x7b\x43\x54\xf6\x99\x0a\x0f\x6c\x50\x16\xc6\x06\xa7\x68\x7d\xdc\x9b\xec\xaa\x9c\x11\xef\x9f\xe1\x26\x4a\xf5\x04\x07\x7c\x8d\x0a\x9c\x75\xde\x06\xa3\xc0\x7d\xe7\x00\xd9\x03\xa2\xf0\x8e\xbd\x31\xee\xfd\xed\x4d\xa4\x9e\x8f\xaf\x28\x5a\x59\x6f\x58\xaf\x5c\x19\x29\xa2\xe0\xef\xdc\xab\x92\xcf\x5a\x95\x6c\x53\xc3\xd2\x49\x75\x66\xe1\x2e\xe3\x7a\x6e\x64\xa9\x1c\xca\x51\x89\x65\xc9\x8f\xd0\x02\xd4\x0d\x33\xe9\x46\x56\x97\xdd\x66\x64\x47\xe2\xf2\x42\x02\xb3\x2f\x9d\xf9\x27\xd2\xc1\xf7\xa5\x33\xf1\xf9\xe3\xeb\xa7\xbb\xaf\x9f\xd9\x30\x21\xb4\x61\x59\x35\x53\xc2\x62\x1d\x35\x50\xa2\x48\x41\x5d\x43\x3d\x45\xfb\xc4\x0a\x02\xf1\x0e\x8d\x18\xd2\x9b\x34\x9a\xb4\x15\xd4\x69\xa2\xaf\x95\x58\x19\x6c\x1e\x8f\x45\x17\x41\xdd\x5f\x9b\x36\xb6\x3c\x94\xb4\x30\x5b\xcb\x2a\x9a\xa7\x3f\xf2\x8c\xab\x44\x14\x7d\x35\x2a\x84\x59\x96\xd7\x3b\xa7\x75\x53\x78\xae\x0a\xf2\x71\x96\x69\x9e\x76\x07\xd4\x9e\x49\x7a\x01\xa8\xeb\x1b\x66\x0b\x3e\x1c\xca\x04\xe4\x00\x95\x46\x11\x88\x46\x14\x77\x32\x11\x35\xc0\x74\x8c\x55\xe5\xaa\xde\xc9\x1a\x89\xbf\x2d\xf3\x7e\x21\x1a\x93\xc2\x9a\x96\x8c\x3e\x3a\x45\xa7\xe7\x57\x84\x29\x13\x85\x0e\x1d\xff\x72\x55\x7f\xbd\x59\x21\xac\x95\x48\xd1\x22\xf1\x77\xed\xe1\xf6\x2f\x66\x47\xfb\xd3\xc9\x99\xd3\x94\x3e\xe4\x42\x5d\x59\x9e\xdc\x6e\x3f\x74\x08\x9b\x5a\x95\x43\x0b\xa1\x55\x35\x69\xc8\x49\x7c\x45\x0a\x87\xc7\x1f\x02\x0c\xc0\xea\x0f\x21\x54\xa5\xc3\x04\xc4\x77\x43\xfc\x16\x92\x9e\x50\x6f\xbf\x71\x6a\x50\xab\x8c\x12\xc7\xa5\xdd\xed\x35\x77\xc3\xbf\x6a\xd8\x30\x97\x5f\xf1\xda\x4f\x35\x26\xe1\xe6\xdf\x0d\x8d\xad\x9e\xc8\x64\x97\x7e\xaf\xe8\xd2\xd2\x88\xdb\xdd\x70\x6c\xdc\xfa\x82\xb7\xb8\x8d\x72\x86\xc2\xcc\x3d\xd7\x74\x76\xab\xb3\x11\x55\xc8\x68\x1c\x6c\x4f\x34\xea\x23\x61\xd7\xeb\x13\x17\x3b\x16\x46\x34\xba\xdf\x35\x6b\x98\x43\x6c\xb7\xe7\x0f\x6b\x1f\x87\x39\xe1\x9e\xcb\x0e\xc4\x6c\xf3\x0a\xdf\x52\x28\x5d\x8e\xc6\xcd\x62\x25\x99\xc0\x1c\x83\x4c\x27\xdc\x0a\x8a\x02\xa3\x77\xd3\x50\x8f\xa4\x2a\x6e\x5b\xc7\xb4\x6c\x71\x8e\x5a\x50\xf4\xb8\x92\x05\x7d\xdc\xae\xad\x5b\xe9\x3b\x77\x5c\xc4\xfd\x11\xd5\xdb\xed\xde\x4b\x3b\xee\x92\x24\x71\x04\x23\x3e\xfa\x0a\x71\x25\x36\x34\x43\x6c\xb2\x79\x2d\x33\x81\xa0\x6d\x7c\x7b\x11\xa9\x20\x9b\x76\x43\x15\x2a\x4a\x8e\xc0\x58\x34\xa5\x53\xc1\xdc\xb5\x71\x82\x36\x3b\xf8\x51\x58\xce\x86\x82\x3b\x91\xfa\xf0\x91\xaa\x24\x44\x08\xfc\x95\x51\x07\xb2\x92\xee\xc7\x82\x02\x1f\x02\x80\x02\x04\x30\xb0\x54\xb8\xfb\xfb\xe4\x55\xa3\x50\xe5\xc4\x7a\x00\xbc\xb4\xba\x6b\x44\x06\xc5\x2d\xe0\xf3\xf8\xf5\xad\x4b\xbd\xb6\x0c\x5c\x1c\x96\x19\x22\x44\x78\x8b\x0a\x45\x78\x12\xfe\x84\xdb\x47\x58\x50\x0a\xb9\xf4\x11\xd1\x31\x52\x45\x51\x5b\x4d\x76\x90\x4a\x73\xdb\xa9\x0a\x0f\x74\x58\xaf\xd7\xdb\x75\xa4\xf3\x4e\xc2\x0f\xcf\xdf\x5e\x6d\x94\x08\x77\xfe\xf6\xaa\x35\x18\xa8\x6b\xfb\x9c\x80\x46\x3c\x2e\xbd\x78\xa8\x9f\x6b\x37\x4e\x82\xa4\xdb\x36\x2b\x4a\x0d\x37\xb0\x21\xec\x22\x4b\xc2\xcd\x01\xe7\xb5\x73\x50\xcc\x9d\xcc\x7f\x45\xee\x45\xb1\xba\x0e\x1f\xda\x9b\xbc\x72\xea\xf5\x11\x77\x68\x66\x81\x7b\x3e\xcb\x8e\xb6\xbc\xbe\x34\xd9\x5d\xc7\x13\xcf\xc3\xde\x9e\xc7\xcb\x11\xee\x1a\xaa\x1b\xa4\x08\xab\x96\x68\x42\xa0\x81\x9f\xa1\x06\x88\x5b\xc7\x49\x99\x59\x99\x67\x91\x40\x01\x92\xa4\xa6\x04\x80\xbd\x1d\xfd\x59\xdb\xd1\xf7\xe6\xe0\x2f\xc5\x1c\xfc\xa7\x0e\xc9\x0a\x14\x6b\xfd\x88\xac\x81\x18\xf3\x3b\xa9\x03\x5e\x6b\x15\x4c\xfa\xf9\x62\xb3\xe2\x65\x69\x5a\x10\x36\x5d\x18\xec\x67\xc5\xd1\xb0\xa5\x89\x72\x48\xe0\x0a\x96\x45\x01\x77\x30\x32\x43\x3c\x87\x25\x5a\xa5\xd9\x3d\xba\x7b\xa0\x62\xa4\x3b\xf5\x0c\x84\x6e\x4f\xb4\x4a\x9b\xf5\xd7\x16\x32\xea\xd0\xb8\x32\x15\x78\x90\x7a\x3e\xd0\x25\x6e\x1f\xb0\xeb\x75\xd4\x7e\x27\xb5\x5f\x17\x1c\x4a\xa4\x6a\x75\x2d\x67\x8d\x00\x5b\xd0\x2b\xe8\x6e\x01\x71\x34\x86\x8f\x66\xbe\xd5\x52\x44\x36\xb3\x62\x44\x9b\x37\xe7\xdf\xb3\xf9\x37\xa4\x8a\xf5\x4f\x49\x7d\x23\xf0\xd6\xeb\xc2\x49\x04\x6f\x9d\x88\xdc\x61\x1f\xd5\xad\xd2\xf7\x9b\xa4\xf5\xaf\x11\xb2\x51\x55\x26\x81\x1b\xa6\xb3\x4c\x14\xd5\xc0\x1e\x23\x5a\x63\x76\xcd\x76\x26\x92\xae\x08\xdf\xa8\xb5\xab\x5b\xb2\xc3\x4f\xfb\xb8\x8d\xe7\x2d\x6f\xae\x15\xb7\x11\x7b\x17\x2b\x9d\xc4\x3b\x16\xc9\x11\x91\x01\x42\xc2\xee\x0d\x8d\x70\x9a\x76\x1c\xc3\x51\xf1\x8c\xb5\xcd\xd0\x7b\x99\xfd\x0b\x94\xd9\xf7\x21\x1c\xf8\xfc\xd1\x65\xb4\xdd\x47\x70\xd4\x35\x8e\x16\x4c\x8b\x14\x8f\x58\xb6\xe6\x16\x37\x06\x13\x08\xd6\xcb\x63\x1b\x4a\xc5\x33\xf9\xfb\xea\xd2\x22\x6f\x43\x43\x20\x08\x8a\xe9\x9c\xff\xab\xac\x08\x2b\x41\x1b\x60\xb4\x08\x19\xf9\xb1\xaa\x3d\x42\xb4\x4f\xb8\x12\xca\x66\x8e\xe1\x4c\xf4\x9d\x27\xbf\x78\xf9\xc9\x08\xd6\x96\xfc\x5a\x6e\x6e\xcd\x11\x4f\x27\x52\x49\x63\x45\xd1\x4d\xb0\x5e\xce\xda\x04\x77\x5b\xe8\x99\x55\xca\x43\xfb\xcd\x5f\xe5\xdf\x6d\xb4\x74\x5b\x10\x3b\xef\x50\x38\x5f\xad\x67\xb5\xc0\x74\xf3\x32\xdf\xaa\xf3\x70\x59\x77\x2f\x93\x94\xc1\xef\xb8\xcc\xf8\x20\x73\xfb\x6b\x44\x71\xc7\x11\x3d\x00\x86\x11\x76\xe7\xa5\xa9\x0d\xb3\x19\x8d\xbc\x33\xee\x58\xa9\x3e\x2d\x77\x76\xb1\xab\x3f\xe7\x36\x19\x77\x27\xa2\x18\x89\x2e\xa2\xa3\x34\xa5\xd8\xf9\x6f\x18\x5b\x70\x2b\x46\xf0\x02\xbc\xbd\xc0\x83\x34\xe6\x66\x95\xa8\x7e\xe1\xda\x78\x71\xc6\xaf\x5f\x05\x93\x00\x5d\x78\x95\x42\x2d\xd5\xac\x77\x72\xa5\x1e\xcd\x57\x7a\x5e\x47\x85\x99\xb9\x09\x3a\x15\x28\x92\x38\x99\x4b\x14\xe8\xff\x94\x8a\xfd\x5c\xcd\x8a\x9d\xf1\x84\x1c\xa3\xe0\xb7\xa0\x5c\x85\x12\x8b\x52\x53\xb1\x69\x09\xe1\x36\xb8\x9a\x3c\x19\x0b\x76\x20\x7b\xa2\xe7\x1e\x09\x9b\xa4\x87\x7b\x05\xe0\x59\x2b\x00\x7b\xe1\xf5\x4b\x11\x5e\xff\xdc\x06\x67\x9d\x6e\x69\x6b\xe6\x14\x38\xf0\x87\xb5\x2c\xbb\x15\x58\x6d\x54\x7e\xaf\x0d\xd0\x38\x94\x21\x51\xb8\x80\x48\x98\xd8\x92\x86\x2b\x71\x11\xea\xc0\x93\xc3\xdd\x47\x8e\x5c\x7a\xb7\xf4\x9f\xda\xde\xec\xd8\xeb\x6e\x55\x18\x9d\x8a\x63\x74\x88\xaf\xe0\xdb\xd4\xaa\x32\x2e\xc7\x32\x6c\x48\xda\xd3\xa9\x93\x10\x67\xea\xf6\x2c\x66\xc3\x33\xdf\x9e\xf7\xfd\x6b\xea\x7a\x41\x41\xa0\x1d\xd9\x53\xcf\xa3\x2f\x40\x58\x53\xb0\xe9\xfa\x50\xe5\x0e\x3b\x7b\x40\x46\x8c\x40\x87\x7d\xe5\xff\x7a\x64\x2b\xab\x5f\xa6\xad\xcd\xac\x6e\x23\x29\xdc\x6c\x95\x9c\x16\xc2\xd2\x80\x0d\xc3\xc9\x04\x6b\x73\xed\x37\x27\xae\xa4\x65\xe6\xd8\x71\x51\x66\xad\x4c\xaf\x39\x84\x06\x16\x22\x3d\x2d\xdd\xe2\x5c\x85\x1e\xfa\x23\xa5\xc3\xe3\x33\xc0\xf8\x59\x2d\x9e\xb9\xa3\x41\x83\xf0\xb8\x3e\xf8\x01\x40\x19\xa4\x1f\x58\xae\x53\x10\xa9\xdc\xe0\x49\xcf\x35\xdc\x4a\x33\x44\x22\x13\xa6\x23\x1e\x9c\xd0\x80\x90\x84\x15\x42\x30\x90\x22\x5f\x3d\xbc\xc3\x06\xa5\x65\xd2\x82\x30\x91\x8c\xb5\x36\x82\xe8\x38\xf6\x7b\x27\x35\x08\x6d\x78\x76\x0a\x36\x71\xd4\x8a\x68\x5c\xd4\x3d\x86\xba\x55\xaf\x49\xc3\x26\x50\x72\xc9\xaf\x8e\xd7\x16\x5c\x37\x01\xb7\x6e\x04\xf0\x5f\xc6\x49\x27\x13\xd7\xe9\xbd\x90\xa3\xb1\x35\x1d\x06\xe2\x6f\x80\xc8\xa9\xba\x9d\x08\x61\x0d\xe3\x59\xe6\x87\x10\x6f\x58\x95\x7d\x6e\xd8\x41\x33\xbb\xbc\xe3\x7f\x9f\xd9\xa7\xb9\xcb\x85\xe8\x52\x87\x1d\x40\x37\x2a\xad\x5b\x13\x37\xc6\xc1\x94\x49\xeb\xa3\x00\xed\xb8\x80\xd0\x55\x58\x8a\x8c\x3e\xac\x6b\xa5\xd9\x9d\x60\xcb\x53\xc0\x25\xbb\x79\x81\xb3\xbb\x79\x11\xea\xb0\x97\x13\x0f\x52\x05\x33\xf4\xc8\x0b\xe8\x88\x29\x10\xbc\x0e\xde\x85\x5f\xce\xaa\xd1\xfd\x7b\x78\xe9\xc0\x1c\x56\xcb\x39\x96\xa3\xb1\x5f\x4d\x4e\x70\x53\xf5\x5d\xd8\xb1\x7a\x7b\xe1\xfb\xad\x56\xf3\x5a\x14\x1b\x64\xac\xd4\xfc\x5d\xf3\xb7\xa9\xdd\x75\x5a\x8f\xd7\x43\x00\xa6\x5e\x8e\x8b\x46\xc8\x74\xe1\x90\xd4\x8e\xd9\x82\x4b\x05\xab\xef\x24\xeb\x89\xb0\xcc\x5d\xce\xea\xb0\x59\xe9\xe8\x2e\xd5\xa0\xc3\x0b\x4e\x22\xb8\xbf\xdd\x29\xd3\x8a\x4e\x08\xc5\x61\x6e\x32\x82\x44\x70\x13\xaa\x44\xd3\x28\xf4\x44\x60\x54\x3a\x4b\x61\x15\x61\x08\xc2\x2f\x25\x3b\x10\xbd\x51\x2f\x02\x72\x43\x9d\xe0\xb0\x13\x09\x2e\x40\x25\x00\xd4\x0d\x71\x28\x6d\x01\x36\xb5\x08\x7a\x4c\xdc\x49\x82\xf5\x74\x9d\x83\x4a\xe2\xd4\x0e\x98\xc9\x8e\x35\xf3\x56\xee\xe4\xb8\x5d\xc5\xec\x83\x69\x69\x86\xed\x93\x0c\xdb\xce\x93\xfc\x37\xc1\x0b\x3b\x10\xdc\x3e\x86\x23\x79\xd9\xa1\x7c\xc7\x8d\x85\xa3\xc4\xee\x05\x1b\x69\x5b\x6d\x17\x9a\x5d\x47\xf2\x4e\xa8\xd8\x69\x3a\xf7\xaa\x3d\xbe\x33\xbc\xdd\x1c\x6a\x9e\x67\x04\x4f\x97\x64\x8e\x75\xec\x82\x04\x6b\x38\x94\x00\xfe\xba\x60\x3a\x0b\x9c\xec\xcd\x3c\xad\x72\xc2\x15\x84\x85\x82\x6d\x90\x5e\x62\x52\xa5\x00\x31\xad\x46\x8d\x30\x83\x0c\x86\x19\x56\x69\x03\x59\x6d\xbe\x07\xbf\x31\xac\x83\x41\x21\xc5\xf0\xb0\x06\x47\x18\x2f\xcb\x4b\xb3\x83\x91\xfc\x51\x23\x02\x1c\x77\xfc\xa3\x45\x00\x20\xe1\x19\xca\xd1\xca\x30\xf3\x66\xd3\xb8\x5e\x2b\x23\x29\x26\x5a\x85\x2a\x55\x1f\x6a\x64\x24\x96\x2a\xed\x9a\x72\x80\xa4\xff\x40\x3c\x24\x59\x89\x82\x03\x99\x0b\x0e\x83\x1f\x44\x69\xd5\x55\xb2\x4d\x0c\x2b\x7e\xea\x3d\xdf\x1c\x76\xf4\xc4\xf7\x30\xb3\x18\xcb\xe8\x42\x78\x0b\x25\xf5\x90\xf6\x83\x30\xe2\xe7\xa8\x92\x85\x46\xbb\xe7\x29\x6e\x94\x2b\x7d\x20\x8d\xa6\x0d\x2f\x98\x69\x5e\xa1\xa1\x1c\x31\x6e\x8c\x1c\x29\x64\xd4\xee\xfd\xde\x55\x2e\x92\x5e\xbc\x2c\x6d\x14\xcc\xc4\xca\xbb\xb5\xc9\xf4\xe2\x53\xb9\x6c\x23\x8e\xe1\x5b\xac\x10\x98\x41\x09\x53\x19\x8b\xe4\x16\x44\x08\x91\xfa\x79\x05\xf9\x55\x22\x44\xf3\x9d\xc8\xa6\xac\x34\x52\x8d\x7a\x8c\xba\x00\x31\x27\x58\x30\x7d\x3a\x49\xec\x3c\x20\xc5\xdf\x2f\xd9\xb1\x5f\x2b\xfc\x46\x87\xe9\x7a\x73\xc7\x3b\x7e\x76\x84\xe7\x27\xad\xab\x46\xa9\xc8\x05\x0a\xcc\x5a\x31\x5f\x4d\x87\x5b\x0b\x30\xb2\x08\x0d\x5c\x12\x90\x72\xe3\x03\x04\x31\x0e\x11\x18\x5c\x31\x51\x14\x7a\x11\x97\xf1\xdb\xf8\x44\x7b\xe0\xc7\xd9\x7a\x17\x60\xad\x49\x2e\x2b\x8d\xe8\xb1\x5f\xc6\x42\x2d\x38\x70\x6e\xcb\xc8\xf2\xdb\xa9\x7a\xa8\xba\x27\x9f\xae\x31\x3a\x91\x3c\xfa\x58\xce\xa7\x99\xe6\x00\x8d\x9b\x41\x8a\x18\x26\xff\xf0\x4c\xab\x11\xaa\x23\x9c\x32\x71\x63\xbe\x1a\x32\x29\xb1\x97\x48\x65\x84\x3b\x4e\x4e\x02\xf0\x39\xc0\xab\x56\x7b\x85\xd4\x49\x90\xf4\xe9\x6a\x70\x1d\x82\x80\xf6\xeb\x52\xbd\x28\x55\xd8\xdf\x5e\xb5\xd3\x90\x04\x82\xb3\x0d\x91\x36\x74\x51\x11\x9b\x1a\xf3\xfc\xa0\x87\x31\x37\x6c\x20\x9c\x08\x15\x2f\xb5\xd5\x54\x07\xeb\x17\x9f\x5a\xf6\x73\x39\x10\x99\xb0\x88\x69\x4b\x58\xd4\x50\x9e\xd7\x16\x08\x2e\xc4\x26\xfc\x76\xfe\x89\x83\x67\x78\x3d\xe8\xc9\x60\x0a\x39\xa8\xa0\x92\x2a\x70\x7c\xc8\x94\x07\xd7\x40\x6d\x24\x7e\x03\x82\xff\x08\xa8\x4a\x98\xf4\xfc\x93\x0b\xa7\x7a\x05\xcb\x3d\x73\x6d\x62\xcc\x75\x35\x05\x5c\xe6\x4c\x4c\x70\x79\x55\x22\x33\x3f\xa4\xd9\xf3\x44\x7a\x4b\x6d\x5e\x3d\x06\x9d\xa2\xbb\x42\x27\x49\x59\x74\x50\xb5\xc7\xfa\x4e\x9d\xc6\x0d\xad\xe6\xb9\xb8\x7f\x3c\x74\xd1\xdd\x70\x9b\xb6\xa4\x23\x50\x47\x68\xc9\xa2\xd3\x0c\x27\x75\xe6\x23\xcd\x7e\xe0\x2d\x5d\xf8\xfd\x98\xbb\x9b\x04\x46\xdd\x9c\xa8\xd3\xba\x52\x39\xc4\xd4\x51\x9f\x6f\x7c\x3f\x96\x99\xd3\xa7\x54\xe2\x3e\x10\xd6\x88\x17\x99\x14\x05\x92\x1e\xe3\x75\x31\x7d\xaf\xfc\xe7\xab\xe9\xb8\xd7\xb0\xd9\x61\xa5\x40\x52\x8d\x04\x00\x0f\x2e\x74\x96\x0d\x78\x02\xf5\xa0\x6b\x94\x32\xf6\xb4\x19\x9d\xdd\x09\xc6\x93\x42\x1b\x13\xce\x71\x21\xe0\xe0\xf6\xd8\x3b\x6e\x9b\x83\xf1\x67\xb3\x5a\x0a\xac\x1e\x3f\x87\x1a\x1d\x7a\x8a\xdf\x62\x4c\xe0\x72\x22\xdf\xa0\xfb\x66\xc2\x9d\x5c\x89\x08\x8b\xa5\x41\xa5\x32\xd7\xc6\xc8\x01\x96\x55\xf0\x23\x07\xab\x0b\x9c\xd6\xc1\x94\x0d\xe5\x43\xb8\x27\x0d\x6e\x2b\xd5\xec\x16\xf7\xd8\xdf\x75\x09\xc9\x8d\x43\x49\x16\x1a\x4c\xed\x99\x51\x07\x53\x31\x28\x47\x23\x28\x3a\x3f\x65\x46\x80\xb1\x9d\x3e\x84\x1f\xaf\xf4\x87\x1a\x41\xc8\xb4\x3f\xf7\x28\xc5\x8c\x9d\xd6\xd1\x0d\x5a\x47\x74\xeb\x82\x31\x0d\x1a\x43\x10\xc2\xbf\x33\xd2\xab\xb0\xc6\x1e\x2c\x70\xe0\x67\xba\x80\xfd\x0e\x7d\x43\x60\x0b\x5a\xf1\xc8\x0d\x8b\xc7\x21\x0b\xd5\xc4\x8d\xe5\x03\x99\x49\x3b\xf5\x9f\xc2\x77\xad\x78\xb0\xcd\xfd\x27\x36\xbc\x89\x45\x3a\x8b\x37\xf5\x69\x98\x63\x5d\x0a\x58\x8f\x43\x0e\x79\x96\x31\x7f\x20\x21\x55\x58\x5a\x26\x14\x20\xb7\x3b\x5e\xe4\xa5\x80\x76\xf2\x03\xf2\xb2\x26\x89\x1f\x88\x44\x4f\x48\x24\x9c\x27\xb1\x54\x29\xca\x30\xae\x54\x20\x66\xba\x88\x4a\x5c\x34\xbb\x94\x06\xb6\x33\x13\x70\x93\xc1\x4a\x98\x58\xaa\xbf\x22\x43\x2c\x4b\x36\x65\xd2\xd1\xd6\x89\xf0\x45\x19\x39\x7b\xfd\xaa\x3b\x91\xaa\xb4\x82\x19\xcd\x6f\x3d\x18\x3b\xf0\x2c\x37\xb7\x30\x94\x8c\x72\xbe\x81\x0f\xea\xe1\xbc\x11\x54\xce\xe2\xb9\xd2\x9a\x6b\x42\x1c\x80\x66\x21\x10\xe2\x1c\x78\x34\x7e\x18\x6e\xf8\xc2\xf5\xe9\xb1\x73\x6d\xbd\x25\x79\x38\x87\x0f\x20\xbf\x15\x90\xf1\xa9\x64\xc6\x0e\xdc\xbe\x90\x28\x42\x99\x9d\x64\xb7\xaa\xaf\xbb\xbb\x8b\x99\xd1\xb5\xd2\x06\x71\x47\x1d\x37\x26\xee\x37\xb9\xd6\x61\x34\x39\x9e\xdd\xf3\xa9\x71\x24\xa6\x9c\x88\x94\x8d\x60\xc4\x8e\xa2\x44\x17\x10\xf8\x3e\xb4\xa0\xaa\x37\x55\x5c\x14\x79\x95\x26\xc2\x8e\x35\xac\x8b\xdf\xf8\x8a\x1f\x44\x77\x36\xda\x67\x25\x8c\xe9\xb8\xdd\x84\x85\x44\x83\x3d\x02\xbf\x15\xb4\x96\x95\x7e\xe8\x8e\x08\xd1\xa4\x61\x69\xcb\x62\xe7\xd6\xb7\x53\x2e\x26\x5a\x9d\x51\xa8\xc1\x2a\x65\xa9\xd1\x1a\x42\xf5\x0c\x41\xb3\xe8\x5c\x90\x5a\x94\x42\x2b\xc3\x8a\x52\x29\x12\xe3\x21\x7f\xa9\x9d\x45\xee\x16\x89\x98\xff\xc8\xc6\x34\xa8\x3e\xd6\xa5\x14\xc8\x37\x42\x85\x43\x26\xe3\x58\x22\xcc\xa0\x3a\x3f\x24\x72\xef\x76\xe9\x57\x25\x15\x50\x13\xef\x72\xb9\x1f\xeb\xac\x0a\x8e\x74\x74\xef\x1c\xfc\x46\x38\x60\x08\x48\x02\x59\xb7\x10\x23\x08\xb8\xf2\x92\xd1\x84\xbb\xbf\xf6\xc1\x47\xcf\x3a\xf8\xa8\x4d\xf6\xc1\x3b\xda\x7a\x70\x17\xee\x38\xc0\x51\xa7\xfb\xc8\xff\x7d\xf0\xd4\x3e\xf2\xff\x69\xa2\x65\x1e\x21\xe8\x3f\xf6\x83\x2e\xe6\x29\xc7\x28\xa2\x1a\x6a\xd9\x44\xf4\x2a\x55\xa4\xc9\x78\x5b\x9a\x1e\xd6\x82\x06\x00\xd6\x84\xfd\xab\x14\x60\x1a\xd1\x77\x00\x28\xe3\x44\x2f\x4f\x99\xfe\xdd\x87\x0e\x80\x70\xd8\xf8\xc2\x87\xcb\xe0\xf2\xa7\x31\x44\xec\xa1\x8a\xaf\xaa\x8f\xd2\x89\x55\x6d\x62\x38\x54\xb4\x08\xd7\xee\x9d\x95\x01\xe7\x78\x4e\x7a\xec\x38\xf0\xd5\x79\x5f\x06\xad\x00\xfe\x09\x1e\xe1\x0f\x97\x3b\xf7\xc0\x9f\x37\x46\xfe\x68\x60\x91\xb3\x4b\xb4\x0b\x0f\x89\xef\xf1\xb2\x72\x69\xaf\x75\x08\xab\x7a\x03\xc8\x1f\xc2\xf2\xbb\x83\x14\xbc\xbd\xbe\x10\x26\x67\xb7\x62\x8a\x0c\x1f\x92\x46\x44\xc1\x43\x63\x28\xe5\x48\xf2\xc8\xad\x98\x7a\x0b\x5c\xd9\x2a\x06\xa8\x5d\x91\x52\xbc\x00\x50\x0e\xd2\xab\x77\x61\xc0\xeb\xc3\x91\x47\xc4\xdc\xcf\xa4\x7d\x9a\x04\xac\xc4\x4b\x43\x05\x2c\xb5\x02\x3c\x22\xf0\xaf\xd0\x85\xf4\x82\xcf\x27\x9e\xc9\x34\x2c\x15\x1e\xe3\xbe\xea\x38\xfd\xcc\xfd\xe7\xec\xc1\xc9\xf1\x1d\x76\xaa\x85\x39\xd7\x16\xfe\xec\xb1\x9f\xc8\x36\xfb\x6e\x93\x4a\xac\xf8\xe5\x55\x82\xa4\x62\x70\x8e\x01\xe7\x31\x12\x0a\x4c\xd0\x49\xc3\xee\x4a\xe3\xd8\xb2\x2e\xfc\x90\x41\xe0\xc4\x04\x21\xec\x22\xf6\x8c\x81\x31\x65\x6e\x1f\x38\x53\xd7\x4f\x3c\xd7\x25\xdd\x2d\xee\xea\x27\xc0\x7b\x7a\xb7\xf0\x65\x4a\x11\x30\x52\x8d\xb2\x10\x59\xd4\x21\x71\xdd\xd7\x5d\x05\x29\x36\x2f\x84\xd7\xef\x15\xa3\x82\xa6\x64\x0c\xc0\xfe\x50\x86\xce\x78\x02\x15\xfa\x0a\x34\xd8\x51\x22\x88\x4c\x18\xa4\x81\x30\x48\x0f\x79\x9a\x02\xd9\x2d\x89\x4d\xa3\xea\x68\x38\xdf\xbb\x24\x39\x40\x2d\x97\xd2\x9a\x32\xcb\xa0\xfc\x03\x64\x8e\xcd\x92\xf7\x10\xaf\xa5\x74\x85\xbc\x8e\x15\x05\xa3\xf8\x1c\x64\x5a\x18\x8f\x75\x7c\x7e\x8a\xc5\x72\x05\xbb\xd6\xb9\xce\xf4\x68\x1a\x8f\x06\xb1\xe7\x82\xe1\x06\x08\x5a\x39\xa0\x0b\xe9\xf5\xe0\xf8\x85\x16\x94\xa9\x19\x39\xb6\xea\x5e\x2d\x60\x67\xb5\x29\x0d\xa6\xde\x84\x01\x14\x6d\xd7\x10\x97\x8b\xf8\xc2\x36\x5a\x06\x2c\xc3\x5b\x29\xb2\x74\xc7\x2b\x00\x1e\xf7\x67\xbb\x02\xbb\x30\x36\xac\x4a\x06\xa5\x26\x8b\xf3\x40\x11\x38\x38\xb8\x88\xa9\xe4\x2b\x98\x18\x5a\x47\x21\xcc\xc4\x50\xac\xbf\xa0\xad\xad\xca\xfd\x99\x9a\x33\x26\x38\x9f\x46\xc2\xce\x89\xc3\x40\xe5\xd1\x5d\xeb\xd3\xa9\xe2\x13\x99\x90\x11\x08\x3f\xe9\x11\x30\xd9\x88\x5b\x51\xb1\x07\xc5\x07\x59\x84\x2a\xeb\xed\x46\xc1\xc6\xec\x23\xf9\x16\xf8\xf2\x7c\xe0\xf6\xe9\x8a\xf3\x7c\xea\x98\x7e\x82\xea\xe9\xb9\xb6\x60\xfe\x21\x43\x99\x41\x66\x02\xd6\xcf\xf0\xb9\x1e\xbb\xc4\xa4\x58\x0a\x64\x04\xcf\xe8\xeb\xde\xeb\x6f\x7a\xcc\x08\x51\x69\x67\xd2\x18\xc7\x6e\x49\x41\xfb\xfe\xf5\x5f\xbf\xff\x7e\x13\x90\xe7\xf4\xa4\x7f\x7a\xb9\x12\xe6\x19\x5a\x35\x35\x82\x5c\xa7\xac\x7f\xc1\x0a\xb0\x80\x06\x77\x4f\x1c\x39\xb9\xf1\x80\x56\x11\x09\xdf\xac\x39\x24\x3f\x1c\x33\x77\x3c\xb0\xd7\x08\x6e\x3f\x98\xb2\x0b\x9d\x52\x65\x1c\x6e\xe3\x40\xcf\x10\xc1\x29\x4d\xf3\x1c\xbe\xb2\x63\x42\xa3\x86\x53\x84\x40\xf8\xb4\x14\xb0\x42\xb4\x83\x7d\x8a\xe6\xa6\x5a\xe2\xdc\x62\x14\xf0\x6b\x32\x9c\x84\xb8\x6a\x3d\x64\xfd\x8b\xbb\x6f\x41\x56\xeb\x5f\xdc\x7d\xff\x98\x32\xc0\xae\xb2\x53\x11\xbd\xaf\x58\x79\xee\xfb\xa7\x71\x26\x4e\x2d\xf8\x06\x0d\x3b\xba\x4c\x3d\x16\x60\x48\xbe\x44\xdf\xdf\x1b\x76\x53\xbe\x7a\xf5\x4d\x72\x41\xbf\x9e\xf3\x89\x80\x27\xe2\xcd\xd1\x51\xfd\xa7\x2b\xdc\xa0\xc4\x11\x98\xfe\x29\x36\xda\x20\x14\x8e\x37\x2c\xe8\x73\x27\x34\x5b\x0a\x0b\x59\x10\xbe\xbd\x63\x16\x74\xed\x3a\xdd\x8a\xe5\x96\x8a\x02\x9a\x1d\x9d\x5b\x31\xb7\x8f\x71\x5b\x0f\xfb\x63\x88\x03\xfb\x5f\x82\x0b\x53\x89\x7b\xc8\x80\xe8\xb1\x1f\xa7\xde\x3b\xd3\x09\xfc\x25\xea\x69\x6d\x0c\x15\x30\x43\xc0\xff\x1e\x7d\x35\xe1\xaa\xe4\x59\xd7\xfd\xd1\xf5\xc9\xc8\x48\xee\xdb\xc2\x7c\xee\x84\xfb\xb6\x89\x44\xdb\x24\x11\xbf\x65\x94\x33\x65\xea\xac\x54\xc8\xbc\x89\x39\xb4\xc7\x1a\xcf\x9c\x9c\xf6\x55\x30\xfb\x7f\x80\xfd\x87\x22\xc3\xeb\xb7\xb0\xc3\xe4\xb0\xca\xda\xdf\x6a\xf3\xaa\x61\x9c\x6b\x2b\xde\xa0\x4a\x14\xc8\x6a\x2a\x92\x8c\x17\xa8\x38\x01\xad\x71\xdf\x43\x17\x3a\xa4\x4c\x80\x56\xe4\xf4\x74\x2a\x28\x6e\xca\xe1\x50\x26\x12\x1d\xab\x98\xb9\xdd\x09\x95\xf9\x15\x43\x87\x61\xca\x2d\x07\x47\x5d\x89\x6e\x7d\xef\x53\x96\xf4\x8d\xb4\xc7\x4e\x78\x96\x45\x1e\x0b\xa9\x8c\x15\x3c\x05\x7e\xcf\x01\x92\xb9\x4b\xca\x1a\x58\x34\x50\x2d\x63\x57\x42\xc0\xf4\xdf\x1c\x1d\xe5\x85\xe7\xb7\x3f\xfc\xf5\x9b\xbf\xbe\xa6\x02\x9e\x3e\x90\xe6\x11\x84\xd0\xe3\x7a\x9e\xd6\x2a\x3a\xb0\x8a\xc6\x3f\x1a\x66\x01\xcf\x00\x27\x7e\x1e\xa5\x79\x7e\x35\xf2\x8e\xab\xc1\x36\xe5\x87\xaa\xd2\x4d\xb8\xa3\x55\xdd\x8d\x0a\xcf\xc2\xed\x7b\x95\x52\x52\x07\x33\x3e\xe1\x39\x4f\xa4\x9d\x6e\x50\x56\x2f\xa1\x57\x9f\xff\x12\xfa\x49\x36\xd7\xcf\x6a\x0b\xb1\x0b\x33\xab\xb8\x31\x16\x72\x2e\x0a\x03\x6e\x5c\xdb\xf5\xb0\xc8\x61\x99\xd6\x5f\xe0\xb6\x80\x26\x21\x63\xc5\x03\xdc\x04\x63\x97\x27\xe5\x21\xeb\xb8\x1e\x1b\xbf\x7e\xed\xb7\x98\x6a\x86\x6e\x76\x4f\x49\xfe\x38\xf8\x27\xa8\xd9\xed\x42\xd5\x6c\x0d\x4f\xba\x20\x4e\x3c\x56\x1d\xee\x24\x87\x3f\x52\x54\x30\x83\xba\x98\xd4\x54\xcc\x05\x81\x9f\xe9\xc2\x50\x8d\xf5\xe7\xd6\x0c\xfb\x68\x13\x1d\x01\x33\x5c\x1a\xdb\x31\x77\xd8\x72\xc2\x47\xad\x05\x8f\x50\xa4\x90\xe1\x6b\xa1\xe8\xa8\x9a\x49\x32\xdf\xf6\x3c\x9f\xf8\x4f\xf5\xdd\x97\xb6\x12\x92\xdd\xe0\xfa\x6a\x38\x53\x9e\x77\x3d\x53\x11\xa4\xe6\x41\x37\x4b\x0f\x1b\x1a\x12\x65\x6a\x8e\xca\x52\x62\x02\x31\x0a\x33\xd9\xd4\x07\x12\x4f\x23\x49\x6d\x0b\x42\xe2\xde\xda\x1c\x5d\xc8\xcd\xa9\x86\x30\x34\x8b\xb5\xb0\x08\x6b\x68\xdb\x81\x63\x6f\x50\x21\xc3\x0b\x8b\x4a\xdc\x89\x82\xe5\x1e\xc8\x01\x3d\x1b\x4a\xdf\xa3\x20\x19\x8c\x2b\x1b\x38\x3a\x90\x9f\x1c\x53\x25\x95\x96\xe7\xdc\x57\x95\xa8\xc4\x02\x5f\x89\x65\xb1\xe5\x63\xdb\x03\xef\x87\x88\x65\x33\xb6\x3a\xf0\x34\xfc\xbe\xfa\xb8\xf2\x18\x04\x95\x02\xbe\x0e\x82\x8f\x9f\x3c\x54\x19\x16\xec\x80\x2a\x3d\x1c\xc6\xde\xdf\xcf\xe4\xc8\xd8\x44\xb7\xab\xee\xed\x0a\xfd\x2e\x34\xf4\x6e\xce\xb5\x6e\x72\x0b\x2d\x2f\x0a\x9f\x68\xe1\xc8\x3c\x8e\x9a\x53\xd8\x6d\xdd\x03\xbf\xfe\x65\x18\x68\x6d\x57\xda\x74\x7e\xd4\xda\xb2\xfe\xe9\xdc\x4f\x6e\x70\x01\x03\xcb\xb8\x2c\x95\x95\x13\xd1\x2e\x86\xed\xa4\xf1\x16\xf3\x11\x6d\xf3\x46\x15\x30\x02\x0a\x6a\x5c\x88\x89\xb6\x82\x1d\x5f\xf4\x43\x88\x7f\x72\x2b\x8a\x37\x47\x47\xaf\x7b\xdf\xf5\x5e\xb5\x2e\x98\x13\x47\x50\x39\xca\x96\xb5\x1b\xfc\xcf\xd0\x76\xf9\x90\x41\x33\x7f\x59\x42\x89\x91\x6e\xf1\x92\xc6\xf9\x4d\xef\xf5\xf7\xbd\x57\xdd\x57\xbd\x41\xae\x7b\xdf\x76\xf9\x24\xfd\xfe\xdb\x8d\x46\x5b\x0e\xc4\x45\xa1\x1f\xa6\x2d\x07\xec\x9b\x2f\x1d\xf3\x86\xe3\xc8\x84\x6d\x3f\x0a\x27\x6d\xed\x78\x0c\xa4\x12\xad\x3c\xf7\xef\x7d\xbb\xf9\x1f\x66\x6f\x75\xe1\x01\xe5\xa8\xcb\x90\x18\x94\x70\xca\x72\x27\xab\x27\x20\xe9\x35\xac\xcc\x15\x3a\x04\x7b\x27\x78\xa1\x30\x5c\x07\x8e\xc1\x84\xab\x83\xef\x0e\x7d\xaf\x5d\x99\xbe\xf1\xb6\x88\x09\x57\x3f\xf4\x74\x31\x3a\xca\xa4\x2a\x1f\xdc\x9f\xdd\xdc\xc9\x5d\xee\x5f\xdf\x1d\x55\x2f\xf4\xbe\xeb\x8d\xed\x24\xdb\x34\xa8\x41\xaa\x11\x52\xbf\x16\x64\xe9\x43\xa8\xcf\x85\xaf\xec\x88\x34\x69\x83\x72\xde\xf2\x01\x7c\xb8\x62\xd0\x6c\xc9\x9d\x3a\x12\x36\x39\xd2\xa6\x5b\x88\x0c\xc0\x19\xf0\x62\x9d\x8a\x81\xe4\x8a\xfd\x74\xfe\xf1\x08\x0b\x40\xfd\xc0\x0e\xee\xc7\x42\xfc\x3e\x3d\xdc\xe4\x7e\x21\x4e\xc3\xc7\x8f\x2b\x0f\xd5\x55\x68\xb8\xf1\xa9\xaa\xce\x65\xfd\x14\x5d\xcf\x73\x62\x24\x8e\x4b\x5d\x8a\x94\xfd\x8d\x5b\xa8\x61\x64\x82\x74\xc6\x93\x44\x18\xd3\x2b\x44\x3a\xe6\xb6\x97\xe8\x89\x93\xd0\xca\x89\x8f\xfb\x3d\x12\xaa\x5b\x9a\xa3\x42\xa4\xbf\x8e\xb9\xfd\xd5\x94\x83\x30\x91\x5f\xab\x1a\x5a\x47\xaf\x8f\xdc\x41\x3b\x2a\xc6\x66\x02\x6c\x71\xb7\x69\xe2\xd5\x5d\x9d\xbf\xd8\xb3\xbc\x6c\x21\x89\x9e\x73\xb6\x5a\x70\xa5\xc5\xb4\x6b\x19\x75\x5d\x72\xa1\x3a\x0b\xf8\x3f\x3d\xde\x38\xc8\x02\x41\xf4\xc0\xd9\xde\x22\xb0\x70\x4e\x6b\x72\xba\x83\xe1\xa3\x8a\x18\x17\x29\x1d\xa9\x5a\x14\xf8\x0e\x83\xd3\x3f\xd5\x53\x90\x29\x14\xdd\xfd\x13\x46\xe7\xab\x08\xde\x17\xd2\x5a\x81\x24\x15\x22\xfb\xf4\xb0\x13\x92\x4e\xdc\x19\xbf\x79\x71\xf7\xfa\xe6\xc5\x06\x57\x77\xe8\x3f\xb3\xca\x1f\xea\x46\x42\xa3\xc4\x25\xb1\x9a\xd6\x2c\xe4\xb5\x06\x54\x18\x27\x69\x50\x8c\xe8\x8e\x81\x13\xaa\xe1\xee\xe6\xc4\xb4\x29\x25\xba\x61\x15\x51\x09\x35\x15\x2d\x86\xa2\xa6\x5e\x38\x0e\xd0\x54\xbb\x3f\x4b\xd1\xaa\xcf\x54\x10\x7d\xbc\x83\xd1\x1f\xd2\x9c\x28\x59\x8d\xb3\x5c\x0a\x04\x8f\x08\x37\x26\x78\x1d\xf0\xa1\xa3\xe7\x85\x47\xc0\xee\xa0\x60\x40\x01\x75\x55\x5e\x05\x7a\x91\x31\xeb\x93\xfd\xef\xab\x0f\xe7\x47\x3f\x69\x1f\x1f\x00\xa4\x1b\xd3\x16\x31\x4c\xcd\x94\xc9\x98\x71\x40\x44\x70\x67\xe6\x0a\x50\x95\x27\x5c\xc9\xa1\x30\x8e\xb8\x13\x75\x33\xff\xf8\xfa\x9f\xc8\x63\x42\x1e\x30\x61\x61\x85\x98\x7d\xbf\xc9\x54\x32\x33\x32\xf1\xdc\x4b\x3b\x86\x21\xe5\x3a\xa5\x41\xdf\xc3\x60\x2d\xbf\x25\x04\x1c\x74\x75\x67\xf2\x56\xbc\x61\x37\x00\x8c\x19\x7d\xfb\xbf\x9c\x70\xfb\xdf\x37\x2f\x80\xd3\x16\x82\xdd\x40\x39\xd8\x9b\x17\xb5\x44\x74\x84\x2e\x8e\x8c\x73\xf4\x71\x0c\xde\x2c\xe4\x68\x04\xa9\x32\x90\x33\x70\x27\x94\x3d\x74\xc7\x4b\x0e\x99\xd2\x51\xe3\x50\x11\x3c\x5c\xc8\x99\xc1\xfc\xe3\xeb\x7f\xba\x91\xd4\x67\xc7\xa4\x4a\xc5\x03\xfb\x1a\x2f\xb4\x63\xaf\x3a\x3d\x24\xce\x6a\xa6\xca\xf2\x07\x88\xa5\x19\x6b\x23\x14\x66\xb6\x5b\x8d\x81\x83\x80\xf2\x74\x2f\xb2\xac\xeb\xcb\x5b\xdf\xa3\xe9\xd8\x2f\x28\x06\x01\xe6\xbc\xb0\x0b\x48\x69\xeb\x73\xd9\x36\x77\xa3\x4d\x0d\xdd\x67\x93\x19\xf1\x87\x2d\x0c\xdc\x98\x43\xb3\x22\xe2\xa2\x89\x50\x05\x92\xc7\x9f\xcd\x5a\xc8\xdd\xd1\x64\xbc\x3b\xa7\x1d\xe5\xf5\x11\x19\xac\xf1\x1a\xa6\xf9\x4a\x08\x98\x81\xa8\xd8\x88\xba\x4c\x78\x8a\xe4\x87\xab\xc7\xc7\x63\x75\x4b\x06\x4e\x9c\x64\xda\xa5\x48\x07\x80\x67\x4d\xb4\x42\x4f\x53\xb2\xc0\xb3\xb4\x6c\x8d\x9c\xb8\xbb\x22\xc4\xa2\x0a\x88\x79\xdc\x23\x5b\xca\xd6\xb7\x6e\x5b\x23\xda\x45\x70\xce\x91\x65\x72\xb1\xe0\xd0\x6c\xca\x0e\x2e\x3e\x1d\xfa\xa4\x32\xac\x60\x1d\x32\xc7\x20\x1e\x81\x44\xce\xc1\x14\xdc\x6f\x55\xfc\x87\x2e\x20\xbe\x0a\xdc\x72\x3c\xd3\x23\x4d\xc8\x64\xbb\x76\x33\xee\xb3\x2e\x9f\x73\xd6\xe5\x3e\x6b\xf1\x4b\xc9\x5a\xfc\x53\x43\xbe\x37\xa9\xe2\x7a\xf0\xef\x3c\x98\x76\x2a\x42\xc1\x2a\x4a\x16\x6a\xca\xdf\xd7\xe2\x2e\xc1\x02\xd9\x63\x17\xab\x88\xec\xee\x02\x36\xe6\x10\xd7\xf9\x4b\xb9\x1d\x7a\xfc\xcc\x62\xb6\xf6\xff\x37\xa2\x58\x7c\x8c\x47\xa4\xcc\x1e\x51\xe8\x9e\x8f\x16\x9f\x59\xe5\x8d\xa1\xe6\x1f\x63\x4d\x57\xf1\xf5\xf0\xfc\xb1\x52\x65\x67\x04\x83\x5a\xab\x6d\x53\x66\x9b\xbd\x9f\x64\x5c\x2e\x4b\x25\x9a\xdb\x1e\x59\x43\x69\x44\xf1\x32\x50\x68\x0a\xe8\x4b\x59\x02\x2d\x50\x83\x6f\xee\xf4\x5e\x30\xd8\x0b\x06\x7b\xc1\x60\x2f\x18\x3c\xa9\x60\x00\x24\x6b\xfd\xe2\x30\x64\x03\x64\xc9\x98\x17\x3c\xb1\xa2\x90\xc6\xca\x84\xe2\x32\x49\x3c\xa0\x43\x48\x62\x00\x64\xf5\xf0\xd2\x8e\x1f\x4b\x04\xc0\x27\x40\x60\x9f\x46\x0c\xc0\xa5\x7b\x04\x59\x60\x81\xb8\x05\x53\x7b\x74\xae\xbf\x60\x19\x9f\x1d\xe7\x47\xde\xfc\xf8\xec\xbf\x0d\x16\xfd\xf2\x17\xc9\x68\x9c\x2d\x2c\x73\x9e\xdf\x25\xed\x50\xe9\x2f\x0a\x3d\x10\x9f\x15\x91\x3e\x77\x23\x48\xbd\xdd\xfc\x8f\x8b\x41\x4f\x6e\xc7\x47\x04\xa2\xef\x3e\x3b\x20\xfa\x8f\x94\xdf\x82\xae\x20\x14\xe6\x06\x80\x47\x30\xd6\x85\xed\x84\x58\x80\x52\xa5\xa2\x30\xc0\xfd\xdc\xf0\x49\x96\x01\xe7\xc8\x48\xde\x09\x1f\xb9\x19\xd0\xec\x97\x21\xd9\xb3\xfe\x90\x20\x5f\x00\x10\xee\xe6\xc5\xa5\x30\xf2\x77\xa7\x41\x15\x56\xa4\x37\x2f\x7c\xf1\x17\xae\x3c\xdc\x4c\x2a\x8a\x6c\x0a\x25\x2c\x66\x08\xa0\x34\x6c\x20\xb0\x20\x8c\xeb\x64\x93\xd0\xcc\xf9\x2c\x60\x53\x54\xfb\x67\x8a\x50\x3f\x97\x1c\xad\x80\x96\x5b\xf8\x4e\xbd\x76\xfd\x02\x8d\xc7\x8a\x56\x68\x3c\x7b\xfd\xe5\x79\xc3\xc9\x55\x10\x09\x0b\xa4\x8f\xf5\xb3\x50\xd6\x97\x39\x76\x1a\xe0\x3c\x5f\x6a\x88\x3a\xdb\xc3\xda\xfd\x69\xf5\xc0\x3d\xac\x1d\x3e\x7f\x52\x89\x7d\xf7\x38\x77\x8b\x35\xda\x35\xb9\xdd\x1c\xb0\x13\xb7\x8f\x5a\xd5\x6a\xdf\x0f\x83\x5b\x31\x15\x77\x32\x01\x24\xfd\x94\xf1\x2c\xd3\xf7\xee\xc6\x13\x8c\xb1\x93\x8b\x7c\xf6\x73\x37\xc4\x49\x56\xfd\xb4\xa9\x07\x92\x08\x63\xde\x03\xb0\xe7\x0a\xaa\x5d\xb5\xac\xc2\xa6\x62\x25\x9d\x42\x79\x26\x54\x53\xd0\x67\x5b\x78\x86\x38\xe6\x77\x3b\x4d\xa3\xc4\xcf\x75\xe1\x73\xdd\xd7\x4f\x92\xb4\x11\x11\x0a\x77\x3d\xb7\x04\x95\xb9\x9e\xe6\x22\x7d\xa7\x13\x9e\x35\xe3\xd7\x96\x51\x8a\x28\x36\x36\xe1\x0a\xc8\xac\xc1\xe4\x1d\xdc\xff\x29\x55\x47\x79\xc3\xfe\x07\x3b\x56\x4c\x3c\x48\x03\x9c\x80\x7c\x0a\x8a\xe7\x66\xac\xad\xe7\x00\x07\x86\x1e\xf4\x68\xa5\x3d\x69\xa9\x37\x3f\x6c\x74\x76\xf1\xe9\x84\x1d\xcc\x3d\xdd\xcd\x96\x49\x69\xac\x9e\xc4\xec\x87\xdb\x18\xa2\x0a\xb2\xde\x29\x39\x0a\x6a\xc8\x1d\x67\xf9\x98\x1f\x22\xe4\x5a\x8a\x65\x2b\x4b\x23\x66\xfb\x71\x94\xab\xd1\x5b\xb3\x33\x44\xb9\x38\x56\x53\x1c\xdf\x69\xd8\xb2\xa5\x88\x3a\x01\x72\xad\x72\xe3\x03\x68\x3e\x24\xca\x93\xa8\x46\x71\x17\x19\x94\x1b\x50\xcc\x94\xb9\x53\x3c\x1a\x91\x93\x30\x1a\x43\x25\x21\xa4\x45\xb0\x1c\x44\x2f\x62\x1c\x40\x28\xe8\x82\x0c\xb8\x81\xf2\x22\x21\x4e\x2c\x02\xfe\x9a\xdf\xdf\x02\xbd\xb1\x92\xdb\x36\x3d\x93\x97\xd4\x43\x84\x1a\xb5\xdc\xea\x74\x19\x72\xa5\x1b\x86\xa7\x89\x54\x72\x52\x4e\xa2\x64\xea\xc7\x27\x09\xd5\xfc\xe7\x6b\x65\xb3\xd1\xc4\xad\x56\x67\x19\x73\xe7\x03\x91\xb5\x2a\x03\x79\x1c\xe1\x97\x4e\x11\xbd\x34\xa4\xe2\x41\xc0\x9f\x01\x20\x19\x47\xd1\x07\x12\x8a\x10\x2d\xd8\x64\x9a\xff\x49\xc6\x8d\x39\x5f\x2f\xd6\xec\x2a\x7a\x35\x94\x33\xad\x3c\xab\x60\xf7\xdb\x61\x9e\xbb\xfb\x4c\x93\x32\xb7\x4f\x6c\x74\x9c\x66\xc5\xdc\xaa\x86\x41\x7f\xbb\x87\xe0\x4a\xaa\xfb\x56\x29\xf4\x0b\x26\xfb\x09\x24\x66\x3d\x64\x6f\x65\x26\xa8\x42\xa5\x34\x40\x51\xdc\x8d\x03\x08\x0e\x27\xcc\x4a\x95\x64\x65\x8a\xc5\x40\xd0\xb7\x06\x31\x98\x9b\x4e\xad\xc5\xb6\x7d\x0a\x0d\x7d\x12\x2b\x9d\x8a\x7a\x3d\x33\xf7\xc3\x4c\x68\xd2\x80\x27\xb7\x28\xfc\x4b\x43\x33\xfd\x4c\x01\x55\xb1\xed\x7a\x5d\x31\x29\x60\xd2\x2c\x42\xa0\x59\x64\xba\x7e\x12\xa1\x87\x27\xb6\xe4\xd9\x42\x99\xa7\xda\x02\x01\xcc\x72\xcc\x77\xaa\xd3\x7e\x5e\xd9\xe7\x8f\x83\xf3\x71\x59\xe7\x49\xb4\x69\x35\x7c\x8f\x86\x39\x90\xa2\x21\x1e\x13\x9b\x83\x8e\x72\x65\xb8\x5f\x6c\x08\x01\x59\x64\x2d\x63\xa5\x9b\x0f\x0a\x12\x55\xff\x1e\xf2\x95\xca\x94\xbc\xac\x19\x47\x5f\xee\xba\xa4\xf3\x72\xef\x46\xcb\x73\x57\xfb\xe9\x29\xd1\x3b\xda\xe0\x0b\x20\xb6\xc0\x02\x47\x5b\xc0\x13\x98\xbb\x10\x9f\x95\x10\x5f\x8b\x49\x9e\x71\xbb\x4e\x98\x6b\xed\x3d\xac\xa8\x85\xca\x46\x5e\xe8\xb4\x4c\x66\x99\x0f\x5a\x6a\x29\xa4\x97\x71\x13\xe7\x09\x9c\xe5\x63\x31\x11\x05\xcf\x48\xb9\x68\x5b\xb3\xf2\xf3\x39\xe7\xdf\x47\x28\x88\x88\x55\x4b\xe0\xdf\x4a\xa3\x0d\x98\x54\x10\x7f\xc3\x12\x9d\x4b\x90\x12\x3c\x6b\xfe\x74\x82\x42\x04\x88\xfd\x50\xc3\xd0\xf6\xd8\xb9\x66\xe0\xfd\x21\xf0\x57\x44\x61\x70\x9a\xbd\xc0\x82\xef\xbe\x37\xb4\x00\x57\xc8\xcb\xbe\x6a\xda\x42\x5f\xd8\x67\x70\xd9\x5f\x57\x2a\x4a\x52\x55\x3d\x9b\x27\x96\xe0\xf9\x07\x6c\x0c\x4a\x1a\x22\x55\x07\x12\x51\x70\xe1\x4a\x85\x05\x89\x1a\x4b\x88\x4e\x21\x61\x2b\xf0\x57\x32\x4b\x3a\xe9\x80\x0e\x27\xf6\x6c\x9c\xc0\xe4\x97\x15\xab\x71\x2e\x38\xa2\xb8\xe8\x46\x53\x56\xd2\x58\xac\xa8\x70\x34\xdf\x06\x06\x2b\xfe\x28\x8e\x94\xf8\x8e\xac\x7b\x61\xe3\x77\x2b\x79\x91\x5c\x5f\x18\x31\xe6\x96\xd5\xe7\xfa\xb9\x35\x0b\x19\x16\x94\x23\x44\xec\x65\x28\x55\x4a\xe2\xa7\x2e\x55\xca\x2e\x3e\xa1\x7f\x42\x97\x48\xf7\x78\x60\x44\x21\xb2\x50\x43\x55\x83\xd5\xe3\x92\xa6\xc3\x84\x01\x43\x35\xcf\xb2\x69\x87\x71\x76\x5f\xf0\x3c\x17\x05\xe3\x05\x7c\x8c\x9c\xa4\x4d\x71\x9e\x8a\x3c\x54\x71\xa1\x46\x4f\x84\x56\x82\x89\xcc\x08\x76\x50\x85\x2e\x1e\xb6\x81\x07\x76\xe3\x6a\x21\x8f\x9f\xf8\x76\x5e\x22\xf5\xb9\x5d\x8b\xce\xd7\xdc\xc5\xc5\xda\x5b\x08\x3d\x0b\x15\x6e\xf1\x0c\xfb\x10\xcc\xa7\x75\x7a\xb4\xf4\xf8\xa6\x1f\x54\xb6\xaa\x3a\xc1\x2f\x50\x11\x4f\xa3\x81\x47\x40\xec\x88\x7b\xcb\x49\x1c\x54\xb9\x95\xec\x4f\xef\xe1\xe0\x04\xc4\x39\x36\xe4\x99\x59\x24\x6d\xb5\x00\xc4\x9c\x7f\x29\xab\x3d\xdd\xf5\xcd\x5c\xd3\xbb\xb9\xda\xb1\xb9\xf7\x69\x7e\x21\x3e\xcd\x77\x8b\x3c\x9a\xbb\xd4\xfb\x1e\x57\x52\xdf\xfb\x2b\xf7\xfe\xca\xbd\xbf\xf2\xc9\xfd\x95\x8f\xef\xaa\x5c\xd3\x4b\x09\x0e\x4a\x92\x72\xda\x24\xe8\x3c\xbe\xc1\x8d\x67\x19\x83\x8a\xa9\x91\x85\x8d\x9c\x5f\x84\xe0\xf6\x58\xc6\xb5\xa7\x36\xad\xf1\x7b\x73\x96\x71\x63\x65\xf2\x63\xa6\x93\xdb\x2b\xab\x67\x01\xd5\xda\xc3\xee\xfd\x72\x35\xd3\x59\x4d\xad\x58\xea\xaf\x98\xf3\x72\x6c\xf3\xe0\x8a\x1d\xff\x72\xc5\x4e\xa5\xb9\x6d\x7a\xf7\x4c\x0d\x53\x90\xfb\x72\x11\x2f\x0d\xc0\xf6\x84\x00\x40\x27\x14\x80\xb5\x4a\x3c\xe4\xda\x54\x00\x84\xa0\x41\x6c\xb8\x9d\x61\x0f\xef\x8d\xc0\xd1\x0f\xdc\xe8\x0d\xac\xe3\xfc\x15\xff\xbd\x2c\x84\x9b\xc5\xe6\xcb\xec\x7b\x68\xbf\xb6\xfe\x8d\xe6\x82\xba\xe7\xec\x94\x5b\x8e\xeb\x0a\x87\xdb\x3b\x06\x61\xed\xdc\x9a\x0d\xa4\xd7\xc0\xe2\x15\x5b\x32\xbb\xb7\x72\x16\xd6\x7a\xbd\xd9\xb9\x1e\x66\xc8\x44\xcb\x79\xba\x77\xe7\xce\x13\x7e\x70\x6c\x5c\x26\x62\x07\x53\xfd\xe3\x58\xa5\x8f\xe7\x95\x6f\x9f\x21\xab\x90\xd6\xe5\x0d\xd5\x90\xd4\xe5\x91\xb9\x9f\x07\x16\xb5\xc8\xc7\xc3\xcd\x1d\xcd\x27\x22\x1f\xbf\xbd\xda\xe0\x4c\xe1\x8b\xb5\x03\xc5\xdc\x33\xf6\xf6\x6a\xce\x21\x02\x82\x64\xc6\xbc\x80\x74\xd3\x5c\xa7\x2f\x0d\x60\xbf\x5a\x39\x59\x04\xdf\x2c\x55\x2a\xd6\x76\x11\x57\xf3\x82\xd7\x37\x99\x17\xbc\x58\x9f\x17\x8e\xc5\x73\xbc\x40\x54\x83\x05\x06\xa3\x06\x42\x35\x9e\x98\xba\xce\x3d\x24\x84\x94\x13\xaa\xee\x4c\xa6\xe6\x5f\x59\x17\xbf\xd2\xcd\xd3\xa3\xcb\xb3\xe3\xd3\xf7\x67\xbd\xc9\x82\x9a\x41\xa0\x57\x5f\xc2\x42\x6c\xb6\x38\xeb\xc4\xb9\x9c\xd0\xc7\x00\x1a\xce\xdb\x90\xd9\x40\x76\x53\x59\x88\x04\x2f\x74\xf0\x89\x0e\x84\xbd\x17\x42\xcd\xaa\xd7\x6e\xa9\x16\x18\x22\xcf\x1e\x72\xb4\xae\x5a\xed\xab\xf7\x29\x99\xa1\xb9\x16\x8c\x5d\x3d\xf2\xc1\xcc\xba\x62\x31\xbf\x48\x3a\x95\xf9\x0e\x1d\xb3\xd5\x08\xd0\x40\x76\xf1\xe9\x64\x97\xd7\x94\xe6\xb9\x60\x5b\x8c\xdc\xfc\xb8\x5e\xf5\x37\x39\xab\x57\xfd\xf8\xa0\xfa\x48\x35\xcf\xfd\xc7\x5c\xa5\x59\x48\xcb\x0e\x41\x33\xee\xad\xb4\x90\x77\xa2\x60\x07\x3f\x0a\xcb\x7d\x14\xce\xe1\x02\x82\x3e\xdc\xdc\x96\xfd\xf6\xa4\xf5\x5c\xde\x9e\xd4\xef\xdc\x5b\x39\x28\x04\x3b\x19\x73\xa5\x44\xf6\x08\x92\xcd\x82\xb9\x66\xe2\x61\x06\x83\x64\xcd\x39\x67\xe2\x61\x83\xbd\x7c\x1b\xbe\x5c\x5f\x87\x91\x50\xa2\x90\x49\x95\x65\xd7\x58\x88\x08\xe4\xe4\x28\x2c\x0a\xda\x34\x61\xd3\x45\x42\x71\x4d\x79\x56\x8e\xe4\x22\x8f\xc5\x30\x03\xf8\xda\x2d\x26\x0d\xef\xaf\x31\x5b\x68\xdf\xd8\x72\x7a\xd8\xa4\xb3\xab\xb6\x78\x76\x77\xc1\x0a\x2e\xad\xc1\x2a\x5d\x64\x4a\x4f\x45\x2e\x94\xaf\xd5\x25\xc2\xd7\x28\x86\x8c\x19\x92\x80\xc8\x8d\x8b\xe8\xf6\xf3\x57\x6b\x94\x44\x52\xd8\x56\x32\xeb\x4f\x27\x67\xf5\x9e\x5a\xaf\xe0\xcc\x9b\xf5\xb5\xfc\xe9\xe4\xec\xd1\x74\x82\x05\x90\x0f\x5b\x2b\x0b\xa3\x44\x54\x34\x37\x75\xcb\x3a\x7f\xf5\x11\x7a\x62\x0b\xa1\xe7\x27\xdf\xc3\x06\xf7\x34\xbc\xdb\x58\xef\xf0\xb8\xe1\x1d\xa9\x2f\x77\x90\xa8\xb7\x5d\xd7\xa6\x08\x41\x6b\x78\x14\x16\x67\x95\x10\xe1\x46\x32\x0f\x8a\xb0\xf5\x22\xfe\x8d\x3a\x68\xbd\x72\xfe\x85\xfa\xc2\xa1\x18\xa1\x8b\x69\x2c\x2f\xce\xae\x05\x03\xe3\x94\xd3\x1b\x18\x94\x6d\x45\xf0\x11\xb8\xd7\xe8\x0d\x1f\x96\x19\xd6\xd3\x81\x6a\xbb\x50\xee\xcb\xbf\x03\x31\xa9\x70\xa2\x05\x06\xc3\x6a\x95\x4d\xff\x4f\xf6\x41\x75\x61\x3b\x3c\xdb\x0c\x45\xa2\x72\x42\xd1\x95\x8a\x71\x35\x05\xd8\x3d\xf7\xf6\x2f\xfd\x77\xef\xd8\xf9\x87\x6b\xf6\xcb\x87\xcb\x9f\xd1\xa5\x39\x29\x33\x2b\xf1\x5b\x01\x10\x65\xcb\x4b\xe0\x86\x94\x47\x60\x9c\x0d\x13\xb8\xd9\x46\xca\xe8\x5f\x6d\x26\x67\xc0\x7b\x0d\xdd\x11\x9f\x3d\x35\x89\x59\x90\x7b\xaa\x13\x9e\x6d\xbc\x2a\x10\xfa\xdd\x7a\x2d\xa0\x75\xbc\x16\x78\x80\xb3\x69\x37\xcc\xda\x1f\x28\xc0\x7f\xc4\xaa\x85\x43\x18\xc1\xa2\xa2\xb6\x4e\x87\xf8\x90\xb7\x09\x5a\xaa\x52\xb6\x48\xc7\xc2\xb7\x3a\x0c\x20\xa8\xff\x71\xf3\xa2\xd0\x37\x2f\x3a\xec\xe6\x85\xd1\x43\x7b\xf3\xe2\x9f\x58\x2b\x94\x02\x16\x44\xca\xba\xf4\x1e\x16\x0c\x95\x93\x3c\x9b\xb2\x21\x97\x19\x93\x58\xe3\x1f\x4a\xcf\x41\xf3\x1d\x8a\xcd\x47\x5f\xc1\x47\xbb\x34\xd8\xa7\xb6\xe5\xa9\x2d\x38\xc5\xf9\xdb\xab\xd6\x27\xe3\xbc\xa1\x0e\x2b\x76\x3e\x4f\x17\x7e\x3c\xfe\xe9\x26\x3a\x7f\x05\x74\x2a\x8e\xfd\x11\xdc\x74\x29\x48\xfd\x8a\xbb\x5a\xba\x1a\x51\xc3\xe0\x01\x4d\xb4\x32\xb6\x80\x3a\x97\x48\x2c\x32\x39\x91\x16\x83\x85\x15\xc5\x6e\x56\x41\x0f\x64\x5a\x46\x3b\x30\x05\x9b\xd4\x41\xc9\xd5\x30\x2b\xab\x90\x8a\xaa\x94\x1a\x78\x00\x75\x4a\x1f\x09\x75\x78\xbd\x9d\x7c\xee\x22\xe5\x0d\xba\x78\x89\xce\xfa\x0b\x9d\xc9\x64\xa5\xdf\xdd\x7d\x66\xcc\xf3\x5c\x28\xb3\x00\xee\x07\x15\x5a\x82\x8c\xa7\xc0\x19\x27\xa1\x56\x11\xd0\x50\x9f\x1f\x83\x99\x78\x21\xd8\xa5\x80\x70\xa7\x83\xd4\xbb\xe8\x75\xc1\xb0\x96\x65\x36\x0d\xf1\x37\x4d\x62\x6e\x0e\x3b\xec\xd4\x51\x5b\x51\x7f\x91\xca\x4d\xc1\xbb\x31\x2c\xe2\xbc\xf7\x1d\x61\xbe\xa4\xaa\x3c\x07\x55\x65\x9c\xc3\x5e\x78\xea\x33\x35\x2a\x56\x49\xe1\xdc\x34\x55\x54\x35\xe2\x80\x49\x58\xfe\xe6\xc7\x76\x9b\x72\x00\x0b\xe9\x68\xc5\xda\xce\xbb\x7c\xac\xad\x56\x3b\x92\xe8\x2f\xe6\x74\xd6\x9a\x84\xcc\x7b\xb9\x2e\x2e\x61\x8b\x93\x2a\xef\x25\x3a\x68\x4e\x64\x5e\xcf\x3a\xb5\x60\x3d\x74\x61\xef\x75\xb1\xad\x22\x7c\x51\xeb\xa6\xcd\xec\x6b\x2f\xd4\xe7\xed\xc7\xb4\x91\x11\x6e\xfe\x34\xff\x55\xea\xc1\xd4\x6e\x3e\xbf\xff\xc0\xf7\x5b\x4f\x8f\xda\xd7\xe7\xe5\x1f\xee\xc2\x64\x5a\x0c\x66\x5c\xff\xed\x13\x8e\x7e\x3c\xdd\x40\x30\xbc\xfc\xf1\xb4\x3e\x9d\x4b\x9e\x6a\xc3\xc0\x53\xc5\x4e\xc5\x02\x8f\xc2\xb2\x99\xad\xa5\xec\x14\x83\x95\xb6\x52\x93\xf0\x4c\xf4\x3f\x6c\xbc\x2e\x57\xf8\xfe\x06\x6b\x43\x6f\xd6\xd7\xc7\x3f\x9c\x65\x0f\x8b\x0e\xf4\xcf\x81\x1e\x22\x87\xdc\x6d\x36\x52\x2d\x13\xa9\x8e\xac\x3c\x3b\xc4\x81\xc8\xb4\x1a\x99\x1e\x3b\x9b\xe4\x76\x4a\x61\x23\x1e\xcc\x83\xdb\x1a\xef\x4e\xb5\x40\x75\x0a\x5f\x42\xac\x95\x69\xed\x7b\x1b\xe1\x79\xc0\xeb\x7a\x73\x81\x8e\x06\xf0\x61\x13\x97\x47\x78\xb7\xb1\xa7\xe1\xf1\x12\xd5\xdf\x1d\xfe\x25\x8a\x90\xdf\xf0\x10\x6e\x9b\xeb\x74\x9d\x9b\x10\x16\x66\xd5\x7d\xd8\x26\xa7\x4b\x46\x68\x5f\xa0\x28\x58\xa1\xd2\x60\xb8\x87\x88\x74\x50\x79\x38\xd5\x5f\x87\x00\xe1\x2a\xa1\x4b\x43\x12\x69\x21\x26\x4e\xac\x91\x8a\x15\xfc\x9e\x81\x57\x18\xa1\x91\x36\xcb\x02\xdb\x34\xff\xcb\xe4\x63\xe1\xbd\xf0\x9b\x8b\xc4\xd4\x8b\x2c\x6c\xc9\xb3\xb5\x38\xfd\xa7\x78\x00\xf5\xf3\x74\x77\x05\x3f\x6d\xcb\xe9\xfe\x8f\xc6\xac\xb7\x8d\xb9\x5c\x3b\x7d\x6c\x83\xcc\xb1\x56\x49\x08\x6d\x30\x99\x8e\xd9\x78\x4d\x54\xa6\xfb\x71\x4d\x84\x85\xf3\xed\xcb\x68\xb8\xd3\xb9\x89\x58\xd9\x36\x85\x85\x06\x35\x7b\xc5\x42\xa9\xe8\x0e\xc5\x7d\x63\xfd\x0c\x27\xe9\x76\xdc\x7d\x0a\xea\x04\x98\xc8\x76\x9e\x39\x8a\x33\xd8\x24\x58\x79\x35\x3c\xd5\x25\x22\x4a\x41\x1c\xe2\xa0\x90\x62\x58\x85\xfa\xd5\x30\xa8\x2a\x84\x06\xc7\x3f\x86\x5c\x66\x65\x81\x34\x13\x0a\xb2\x73\xe5\x35\x23\x24\xa6\x39\x2f\xc8\xf7\x91\x32\x2b\xd3\xa9\x13\x8a\xf3\x0c\x62\x13\x31\x1b\xeb\x5d\xff\xc9\x72\x7f\x56\x69\x02\x8b\xaf\xd2\xe5\xac\xc8\xcf\x96\xc8\xfc\x21\x04\x62\xf5\xf5\x19\x9a\xeb\x39\xc8\x56\x4d\xef\x4c\x45\x7f\x21\xe6\xdf\x6a\x24\x3c\x3d\xf6\x9e\x34\x3f\x1e\x13\x76\x68\x33\xa3\x0b\x02\x59\x0a\xb5\xaa\x02\x8a\xf1\xd9\x43\x8f\xdd\xbc\x10\x0f\xf6\x5b\x34\x54\x3d\x0c\x0d\xfe\x43\x59\xf7\xaf\x1e\xeb\x3b\x72\x9f\x48\x9b\x51\x3c\x69\x11\x38\x8c\x7f\xcd\xdd\x92\x52\x85\x84\xfc\x4d\xae\x66\xba\xb2\xac\x5a\xff\x94\xf8\x38\x95\x4a\x13\x66\xf5\x46\xec\xb6\x2e\x13\x0c\x92\xfe\xdc\x3c\x72\x5e\xa7\xcb\x48\xb6\xa6\x48\xe0\xc4\xcd\x27\xf1\x71\x30\x55\x4d\x1b\x5c\x83\x84\x2b\x56\x94\x0a\x0b\xf2\xa0\x0d\xeb\x1a\x63\xd6\x8d\xcf\x21\x09\x16\x89\xc1\x94\xa2\x7c\x31\x58\x86\x6c\x32\xc0\xb2\xac\xc6\x7a\x71\xfb\x30\xfb\x67\x1d\x66\xbf\x0f\x21\xff\x52\x42\xc8\xff\xdc\xd0\xc7\x3a\x6d\x05\x74\x5c\x0b\xab\x8e\x71\x94\x06\x62\xcc\xef\xa4\x2e\x42\x64\xe0\x82\x78\xd8\x5d\xae\x87\x9b\x31\x54\x11\xaa\x63\x43\xee\x16\xd8\x58\xa7\x2d\x60\x8c\xdf\x3b\xf6\x3d\x5b\xb0\xbd\x12\xdf\xc3\x92\x60\x70\x05\xb7\x1c\x2e\x70\xb8\x80\x8e\x46\xa6\xa0\xd7\x6d\x58\xd1\xe0\x69\xd6\x75\x95\x94\xf7\xf8\x79\x08\x3a\xdd\x71\xda\x81\x4e\xe7\x38\x7b\xe6\xb1\x7e\xef\x96\x44\x52\x0e\xe3\x84\x7a\xe4\x8e\x9d\x21\x80\xb7\x6f\x10\xb9\x56\x8a\x32\x13\x6d\x58\x78\xa8\x23\x7b\x0a\x59\xd3\x57\xa1\x87\xfe\x48\xe9\xf0\xf8\xec\x41\x24\xa5\x5d\xcd\xe7\xaf\x2b\xff\x0e\x54\xd6\xcb\x32\x2a\x54\x0b\x88\x5b\xf4\x03\xf9\x7c\x74\xf0\x25\x71\xcb\x0c\xb7\xd2\x50\xa1\xc8\x30\x1d\xf1\xe0\xb8\x8f\x01\x5f\x4b\x05\xec\x04\xa7\xd3\x3b\x97\x3a\x6c\x50\x5a\x26\x2d\x1c\xea\x64\xac\xb5\x11\x54\x1c\x8a\xd2\x6d\xa5\x06\xee\x0f\x6e\x53\xa8\x47\x59\x04\x7c\x9f\xa8\x7b\x4c\x87\xae\x5e\x73\x4a\x8b\xbb\x59\x61\x75\xbc\x7e\xec\xba\x01\xeb\x89\xfb\x63\x04\xc2\x94\x71\x6c\x6e\xe2\x3a\xbd\x17\x72\x34\xb6\xa6\xf3\xff\xb3\xf7\xee\xcd\x6d\x1c\x59\x9e\xe8\xff\xfb\x29\x32\xe8\xbb\x21\xb2\x03\x00\x25\xdb\xed\xde\xd5\xc4\xfc\x41\x93\x92\xcd\x6d\x8b\x42\x8b\xb4\x1d\xb3\xcb\x89\x9e\x64\x55\x02\xc8\x61\x21\xb3\x5c\x99\x45\x0a\x73\xf7\x7e\xf7\x1b\x79\xce\xc9\x57\xe1\x55\x00\x21\x59\xed\x66\x4c\xc4\xb4\x05\x66\xe5\xf3\xe4\xc9\xf3\xfc\x1d\x26\x47\x62\x04\xfa\x8e\xe0\xc5\x2c\xe9\x76\x2e\x84\xc5\xfc\x8c\xa4\xea\xa9\x3f\xb0\x04\x43\x8a\x1d\x87\xd7\x98\x5e\xce\x41\xc0\xe4\xe9\x9e\xd3\xca\xed\x1a\x30\x61\x8b\xd1\xc9\x80\x15\x7a\x5e\xb7\x80\xa0\xe5\xe6\x78\xb7\x60\xd2\x7a\x51\xdf\xd7\x4a\x87\xad\xf0\x00\x63\x5e\x00\xa3\x72\x93\xaa\x64\xbc\x84\x98\xd1\xdb\x23\x5c\xdd\xed\x91\x97\xaa\x5c\x87\x54\x43\x12\x56\x38\xe3\x06\x4f\x16\xad\x93\x73\x6e\x8b\x59\x40\xec\x6b\x1a\x61\x6a\x8d\xe1\xa7\x75\xa4\xfc\x1b\xd1\xcc\xff\x25\x74\x71\x6c\x4e\xe2\xe6\xce\xe4\x74\xe6\xf7\x96\x37\x98\x29\x9b\x9f\xc9\x81\xa1\x38\x7e\x85\xf5\x89\x72\x9c\x4f\xef\x49\x4e\xed\x75\x87\xb6\xd7\xe5\x22\xa0\xb5\x70\xde\x19\xc5\xac\xb9\x1f\xb0\x75\x8e\xd9\xcf\x85\x65\xee\x9e\x45\xba\xb1\x72\x2e\x06\xc1\x8a\x09\x77\x95\x5e\x85\x8e\x36\x60\x43\x8d\xea\xbd\x66\x50\x40\xf5\x6d\xd4\x0d\xfd\x2c\xf4\xdc\x8d\xea\x84\x45\x02\x6b\x70\x53\x10\x7e\x1f\x7c\xad\xfe\x56\x90\x97\x56\x97\x04\x07\x86\x02\xe3\xc9\x20\x79\x9f\xe0\xe6\x83\x69\x01\x5f\x35\xdb\x40\x71\x4e\xa8\x11\x8a\x5e\x58\xf1\x20\x0b\x1b\x63\x0e\xbd\x4b\x17\x97\xf4\x2b\x01\xc0\x34\x02\xb6\x0a\x42\x85\xea\x2a\xde\x08\x1c\xaa\x92\x06\x2f\x87\xa2\x54\xab\x94\x9e\xdd\x68\xee\x9e\x77\xe8\x1a\xfa\x03\x26\x6d\x20\x72\x9a\xd8\x82\xbb\xfd\x58\xc9\x38\xf8\x67\x81\xf7\x2d\xab\xc8\x4f\xce\x58\x7d\x2a\x21\x3f\xd9\xb4\xd2\x99\xc0\xfa\x67\xee\x22\xd6\xb8\x12\x36\x84\x05\x1c\x2b\xa7\x13\x38\x62\x72\x6c\x1d\x18\x8a\x57\x59\xaa\x14\x49\x8e\x35\xa2\xc2\xe0\x72\xa2\xd6\xa9\x7c\x10\x2a\xe2\x08\x1c\x9b\x93\x93\xc4\xf7\xe1\xa8\x20\x22\xad\x17\x7a\x58\x69\x70\x9d\xb3\x63\x4f\xd8\x50\x5b\xd6\x11\x53\xf6\x47\x65\xe5\x30\xb6\x70\x8c\x6a\xc0\xb0\xa0\x6d\xd2\x0c\x22\x58\xb1\x10\x2c\x37\x3e\x3e\x15\x55\x72\xe0\x92\x8f\xb0\x96\x07\x6f\x43\x0f\x6b\x41\xc6\x77\x2f\x16\xec\xb6\x7d\xf9\xf2\x9b\xc2\xea\x5a\x57\x7a\xba\xf8\xab\x58\xc0\x0f\x22\x61\xa8\x9c\x20\x62\x16\xd8\xa5\x56\xc4\x72\xf1\xa6\xf8\xa7\x25\xd9\x48\x19\x66\xd2\xa7\xa4\x41\x8a\xd1\xf7\x85\x60\xff\x05\xba\x08\x0a\xf3\x20\x18\x7e\x0b\xc7\x5e\xdc\x32\xd7\xf8\xdc\x02\x19\x7c\x69\x8b\x4a\x4e\x29\x56\x6c\xf5\x74\x2a\x80\x49\x30\x5e\xd7\x95\x14\xa8\x37\xdf\xf8\x1f\x9d\x1c\x58\xa3\xb7\x85\x08\xbe\x55\x89\x66\x94\x74\x86\x18\x8e\xcb\x8f\x02\x06\xf5\x39\x69\xc6\x00\x6f\x43\x2f\x4d\xe7\x63\x68\x3b\x62\xaa\xad\x2a\xe6\xc1\x20\xe1\x53\xf8\xc5\x49\x37\xe0\x60\x4c\xbe\xa0\xf4\x66\xae\x0c\xbb\x3d\xf2\x77\xed\x85\x89\x4d\x6e\x8f\x46\x80\x77\x0a\x1f\x86\x3e\x8f\xff\xdf\xff\xef\x24\x90\xb7\xe3\x8f\xb1\xcb\x3c\x90\xc8\xfd\xb5\x9e\xf1\x61\xe5\x34\x0a\x6f\x5d\x86\x72\xcc\x33\x0d\x0f\x2a\x7a\x9f\x12\xbe\x73\xd5\x3d\xfc\x00\x66\x2a\x4d\x80\x30\xdd\x42\x37\xdb\xa2\xfd\xd2\xfd\xa6\x37\x10\x6d\x2e\xdc\xca\x22\x44\x02\x46\x54\x13\xf8\xaf\xc3\x9e\x73\x7a\x86\xab\x4f\x39\xa5\x84\xa5\x1b\x31\xda\x72\xa4\xe1\xd0\x97\xbe\xdc\x72\xda\x9f\x3b\x88\x30\xe1\x9a\x5b\x35\x95\x83\xbe\x04\x5e\xbc\x30\x9b\x9e\x29\x0f\x72\x13\x04\xa5\xb8\xcf\x9f\xe4\x25\x49\x76\xa3\xcf\xeb\xa1\x16\xf1\xed\x20\x62\xe9\xbc\x1e\x3e\xa6\x20\xed\x98\xe2\xb1\x09\x91\x6b\x6f\xaf\xcd\x9a\x5a\x1c\xc9\x79\x1e\xc0\xc6\x7e\xa6\xac\xec\xab\x74\x2b\x2b\x7b\x68\xde\x59\xab\x3f\x88\xfa\x9d\x52\xf7\xb3\x0e\xde\x4f\x07\x5f\xb7\x67\xcf\x8a\x78\xf8\xf9\x8f\xa7\x88\x67\x87\xfe\xfb\x69\xe3\xbb\x4f\xe3\x59\x25\xff\x27\x56\xc9\x7b\xd5\xce\x4b\x9a\x45\x60\x19\x1f\x8a\xe3\xc1\x0b\x7d\xb0\x50\x91\x62\xf3\x7a\x41\xb0\xc7\xe3\xf7\x5c\x3d\xef\xb9\x7a\xde\x61\xaa\xe7\x69\x25\x86\x8f\xba\x29\x07\x49\x78\x52\x52\x0c\x2f\xdb\xaf\x15\x05\xf1\x0e\x55\xb2\x6e\x75\x8d\x51\x0f\x0e\x95\xf9\xe4\x22\xa9\xb1\x73\x4c\xa0\xb9\x69\xdc\x4a\xde\xf2\xca\x88\x01\xfb\x59\xdd\x2b\xfd\xb8\x7b\xb2\xd1\xa3\x6e\xee\x2b\xcd\x4b\x73\xea\x24\x00\xf7\xff\x86\x95\x9c\x60\x42\xc8\x57\xee\x5f\x09\xf0\xf6\xce\x8b\x5e\x55\x6d\xaf\x2b\x81\x2e\xea\x80\xfb\xe0\x81\x48\x3b\xcb\xfd\xdd\x57\xd4\x57\xf7\xf8\x44\x75\x00\x75\x79\x71\x75\x7d\xae\xd5\x44\x4e\x37\x73\xe0\xd0\x2c\x8b\x99\xb9\xb8\xba\x66\x35\x6f\xf8\x5c\xb8\x67\x8c\x22\x34\x35\xa6\xc1\x96\x9e\x23\x68\xb2\x99\x02\x2c\x41\x84\x00\xbe\xb8\xba\xc6\x44\xa9\x1e\xcc\x19\x74\x53\x0c\xf9\xe8\x9d\xed\xe8\xe6\x06\x48\xaf\xf8\x21\xbb\x1c\xbb\x39\x39\x59\x38\x58\x72\x3c\x5a\x33\x64\x61\x95\xd1\xb2\x71\xe7\xae\x6c\x32\xe6\xfa\xa9\xb3\x8b\xb6\xae\x24\xea\xc8\xe9\x07\x11\x07\x7a\xae\x1f\xfa\xbe\xdc\x07\xb4\x3d\xe8\x1d\x53\x43\xdd\x66\x39\x15\xa3\x72\x3b\x45\x1f\x77\x36\x09\x90\xd7\xcb\x28\x8a\xc3\x26\xf9\xec\xb3\x5e\x1b\x24\x94\x6d\xa4\x58\xde\x1c\xf6\xc1\x8d\x8c\xa2\x5d\xe8\x10\xac\xe6\x52\x31\x4a\x72\xc5\x8f\xf4\x83\x68\x1a\x09\xda\x93\x36\xa4\x43\xb9\xc3\xe3\xc1\x9e\x01\xb3\x5a\x41\x5a\x9b\xf6\x7d\x17\x89\x29\xdc\x03\x9c\xd7\x93\x0e\xc9\x08\xde\x38\x6d\x68\xa7\x53\xc2\x8f\x58\xa9\xe7\x20\x06\xb9\x17\x65\xa6\x8d\x1d\x02\xa9\x57\x5a\xdf\xb7\x75\x1f\xea\xa6\x6e\x6a\x6e\x67\x3d\x4f\x2f\xfb\xe2\x77\xa1\xef\x03\xc8\x9b\xdd\xe3\xeb\xc7\xf3\xb0\x71\xe0\x7c\xab\x2e\x4b\xe0\x7d\x3d\xb9\xd9\xd6\x50\x67\x7c\x05\xf6\xc9\x53\xe0\x55\xfb\x84\x3a\xb4\xbb\xef\xe9\xe5\x78\xc3\x36\x46\xae\x9b\xd6\x31\x47\x5b\x08\xb1\x03\xba\xb9\xc7\x75\xd5\x36\xbc\x3a\x61\xd0\x65\xb0\xf8\xbf\x71\xaa\x93\x6b\xba\xf0\x49\x1c\xe6\xf5\xad\x62\x8c\x5d\x8e\x5f\xb3\x33\x95\xb0\x75\x30\xfb\x21\xad\xa6\xb8\x00\x1f\x74\x6b\x41\x4e\xe4\x96\x55\xc2\x09\x5b\x8e\x85\xd1\xa0\x1e\x82\x61\xfb\xa1\xc9\x7a\xcb\x91\xc9\x1a\x2c\x73\xd9\x8c\x8e\x2f\xc7\x0f\xdf\x3a\xed\xf3\x72\xfc\xf0\xdd\x09\xe3\xc6\xc8\xa9\xca\xe6\xf7\xb9\x02\xcb\x75\xb9\x0d\x00\x1b\x5b\x74\x30\xaf\xc1\x93\xf5\x1c\x7a\xfb\x05\x87\xde\xee\x84\x70\xed\x8e\xf3\x13\xaf\xe5\xe0\x2f\xee\x33\xb6\xf5\x73\x60\xf2\x33\xb6\xf5\xe7\x88\x29\xfd\x04\x70\xd6\xba\xfc\x20\x78\xe9\x18\xbd\xf9\x61\x4b\xf9\xa2\x4e\xd3\xbc\x66\x5b\x56\x39\x0f\x75\xcc\xa0\x6a\xf7\xa8\x14\xe2\x9b\xf6\x48\x64\x3a\x4f\xdb\xe2\xb8\x84\xcf\x11\x8d\x5c\x24\x3c\xa0\x87\x39\xfe\x0c\x44\x07\xfa\x51\xf4\xbb\x2e\xea\xde\x79\x80\x3d\xe9\x25\x5f\xcc\x01\x2c\x00\xd7\xa2\x68\x1b\x69\x17\xe7\x5a\x59\xf1\x71\x8b\x8c\xd0\x69\xcc\x66\xba\x2a\xc1\xc4\x4a\x71\x10\x86\xfe\x9e\x56\x44\x06\x04\x5c\xac\x93\x1c\xd2\x84\x7c\x7d\x11\xc7\x32\x75\x52\xf8\xc7\x97\xf6\x21\x8e\x0a\x55\x1b\xfd\x37\x23\x93\x0f\x3e\x62\xec\x2d\xb8\x10\xf0\x95\xce\xd2\x90\xba\x6d\x99\xe5\xf7\xc2\xf5\x5a\x88\x12\xe8\x08\xa2\x5e\x26\x9d\xcf\x97\x17\xd8\x2b\x3f\xee\x07\xba\x5a\x9b\xb5\x38\x70\x80\xf0\x0a\xd2\xde\xd0\x7b\xc0\x2b\xf2\xe3\x7a\x45\x96\xc2\x2e\xc0\x09\x90\x64\x54\x01\x70\x18\x08\xb3\xb0\x57\x3e\x67\x1c\xea\xe8\x82\xaf\x1b\xc8\xf1\xaf\x98\xdd\x0b\x35\x49\xa1\x14\x13\x3a\x28\x1f\x5d\x17\x33\x59\xa3\x50\x15\xab\xfe\xa0\xc7\x25\x54\xe2\x21\x82\x7e\x7d\xab\x6e\xd5\x2b\x74\x7f\xea\x47\xf0\xf2\xff\x70\x79\x11\xf4\x3d\x40\x41\xbc\x86\xf5\xb2\xaf\xa9\x6e\x93\xb0\x53\x59\xb2\x3b\x09\xb2\xa3\x11\x96\x1d\x2b\xf1\x88\xc9\x7e\x21\xc5\x8b\x6e\x8c\xc7\xb5\xa1\xde\xc2\xe0\xd4\xe5\x09\xfb\x06\xfb\xac\x45\x33\x97\xe0\xb4\x74\xfd\x22\x59\xbc\xff\xf0\x82\xac\x0f\xcd\xe3\xb0\x79\x1c\x0e\x87\x43\x37\x57\xa8\xb2\x67\x84\x1d\x64\x7b\x10\x7c\x56\x73\x5d\x4a\xf2\x25\xc7\x9d\x70\x04\x19\x87\x30\x3e\x04\x61\x65\x01\x41\xd4\x59\x40\xc0\x57\xf6\xbb\x6f\x57\xdf\x65\x27\x52\x4e\x45\xb3\x06\x28\x13\xe9\xe3\x1c\xce\xa4\x17\x36\xd0\x8a\x2f\x82\xbc\x9c\xa6\x98\xc0\x31\x43\x20\xc6\x9a\xa5\x79\x8b\x67\x40\x63\x98\xb8\x87\x10\xe1\x2a\x3d\x86\x9a\x84\xf2\xb5\x8e\xf4\xb3\xf8\x26\xb4\xb7\xa8\x6a\x01\x74\x09\x3e\xb3\x8c\xee\xd0\x9f\xeb\xcb\x27\xd3\x8c\x7d\x3d\x64\x3f\x9d\xe3\xce\x4e\x9f\x8c\xd8\x25\x1d\xce\x8c\x3f\x08\xa6\x34\x13\x93\x89\x93\xa1\xb4\x62\xc2\xd7\x98\xcb\x07\x32\x6d\x31\x63\xdc\xbc\x76\xac\xa5\x71\xe7\x5c\x80\x4e\x3e\xe7\x35\x72\x16\x88\x12\x2a\x65\xe3\x01\x91\xe8\x36\x3b\x92\xb9\x3d\x7a\xaf\x3e\x68\x6d\xdf\x49\x03\x1c\xf9\xf6\x08\xbe\xb8\x3d\x3a\xab\x1e\xf9\x02\x53\x47\x27\x88\xe0\xe7\x9d\x93\x83\xe4\xaf\xbe\x68\xde\x3e\x0e\x83\x56\x9d\xf5\x62\x0b\x8e\xda\xdd\x05\xb3\x1a\xd2\x25\x51\x44\xb4\xcd\x02\x85\xc4\x68\xb0\x26\xae\x59\x37\xba\x10\xc6\x8c\xd8\xcf\x46\x40\x24\x0c\xb8\x60\x3c\x6c\x93\xa4\xbb\x30\x62\xef\xf8\x02\xf9\x28\xd5\x8e\x94\x8a\x75\x19\x1b\x73\x6b\xa7\xbf\xdd\x69\x3b\xeb\x36\x40\x30\xe4\x25\x86\x88\xf7\x0c\x65\xe4\xe8\xd2\x5d\xee\x1f\x18\xae\x49\x39\x2e\x3a\x3f\xb8\x4d\x98\xf4\xa1\xaf\x1a\x6c\xfb\x95\x86\x43\xdf\xe6\x37\x0f\x09\xf4\x21\xf8\x2d\x6e\x33\xb8\x5e\xdd\x79\x70\x03\xd1\x23\x6a\xd8\x68\x0d\xa8\x60\x0d\xba\xba\xc1\x3d\xb2\xc4\x70\x3c\x68\x1e\xfc\x45\xce\xf9\x14\x8c\x0e\xfe\x94\xac\x66\x42\x99\xb6\xf1\x21\x25\x36\x22\x9e\xd0\x50\x3f\x5f\x5e\xb0\x97\xec\xd8\x8d\x75\x02\xdb\x0f\x38\x7b\x56\x33\x63\x79\xd3\x9d\xa3\x9c\xf8\x2e\xa8\xd4\x28\x84\x6f\x36\x58\x97\x6b\xe0\xae\x16\xdc\x9c\x58\x79\x30\xb0\xdd\x5a\x34\x6e\xab\xa1\xf4\xc6\x97\x47\x27\xbd\x4b\x8a\x75\xcf\xfd\x67\xb3\x8c\x46\xbc\xe2\xb6\xfd\xbc\xc7\x6d\xa3\x9a\x67\x86\x4a\xda\x37\xf9\x8a\xf0\xa4\xbd\xb6\xd1\x4d\x35\xff\x12\xf7\xf8\x73\xdc\x45\x23\x7e\x92\xaa\xfd\xb8\x06\xa4\xb2\x3f\xfa\xce\x9b\xac\x9b\x4d\xda\x9f\x3b\x5d\x6a\x8e\x05\x2a\x3f\x5a\x92\x72\x92\xc8\xd5\x5c\xb4\xf2\x57\x27\xb2\xff\x9c\x02\xfc\xdd\x85\xab\xe3\xed\x8b\x8c\xb3\x86\xab\x52\xcf\x97\x46\x0b\x21\x5e\x71\x5b\xd9\x3f\xcc\xf9\xaf\x39\xc5\xa2\xd0\xf3\x7a\xdc\xe8\xc9\x53\x4a\x91\x5c\xe7\xdd\x6c\x3b\x45\x1a\x35\x18\xd7\xf1\xda\x85\x0a\xf0\x99\x64\x1c\x63\x3c\x56\x2f\x20\x91\xb6\xe1\x41\xee\xef\x6e\x01\xd9\x7c\x29\xec\x79\x22\x1b\x88\x37\x03\xd6\x00\x6c\x44\xaa\xce\xa1\x0f\x96\x1d\xa0\xc9\xac\x5f\xb8\x93\x90\x73\xde\x2c\xdc\xcb\x8f\x67\x9f\x91\xa0\xd2\x7e\xe8\xe0\xc2\x29\xc9\x7f\xe3\xc4\xd4\x75\x57\x76\x8d\xad\x6d\xd3\x4d\xde\x74\x97\xf7\x71\x68\x2d\x4c\x61\xab\xad\x91\x08\xd8\x0a\x54\xc7\xc4\xd6\x1c\xe2\x8f\x4b\x46\xfd\x20\x3e\x54\x56\x9d\x74\x0c\xa1\x84\x4e\x09\x68\x55\x84\x0f\xf1\xed\x8f\xbb\x04\xe2\xef\xef\x09\x9b\xcb\xe9\xcc\x86\xf7\xb4\xe2\xad\x2a\x66\x07\xf6\x0e\xe2\xba\x9e\xb4\x81\x8f\x52\x95\xfa\xd1\x3c\x95\x67\xfe\x8a\xdd\x74\xb8\x40\x5f\x16\x4a\x5f\x87\x02\x62\x41\x55\xdf\x95\x8d\xea\xe0\xba\x05\x7f\x0b\xcf\xae\x40\x97\x45\x79\x52\x07\x81\xfb\xb3\x8b\x1c\x07\xf5\xb4\x6c\x2b\xda\x86\x2d\xd0\xe6\xdc\x29\x27\xd4\xd7\x85\xc8\x0b\x2b\x1f\xc4\x85\xe0\x65\x25\x95\xb8\x16\x85\x56\xe5\xb6\x7b\x87\xe7\xcf\x2b\x56\xb6\x0d\xf7\x76\x2c\x83\x9f\x86\xf0\xc7\x39\x5f\x20\x80\x2e\xa4\xb0\x11\x04\x23\x44\xf2\xa6\x79\x6d\x50\x80\xfe\x46\x46\x95\x32\x89\xb7\xc4\xa7\x12\xbe\x77\x6a\x23\x86\x5b\xce\x79\x73\xef\xc4\x55\x77\x01\x09\x97\xec\x1e\xda\x19\xa3\x0b\x09\x26\x82\x94\x9a\x10\xd6\x6d\x1e\x90\x83\x6a\x6d\x24\x8c\x4d\x5c\xea\xe0\xc2\x0a\x7f\x2a\xd4\x71\x2f\x80\x63\x47\xd5\xf9\x15\x41\x13\x62\x12\x7a\x9b\xc0\x1d\xaf\x99\x69\x6b\x35\x20\x2b\x51\xf9\xad\xb3\xa2\x70\xff\xba\xd1\xf7\x62\xab\xf7\x6d\xc3\xa7\x09\xa0\xd8\xe3\x4c\x40\xed\x66\x1e\xea\x5b\x70\x6c\xc8\x2c\xb4\x8c\x49\x2a\x30\x17\x6e\x09\x24\xd8\xd7\xf3\xdb\x43\x7e\x8f\x67\xdf\xd3\x93\x95\x88\x00\x88\x16\x49\x81\xb6\xe1\xa1\x38\x8f\x0d\x0a\xf4\xa4\x50\x80\x68\xb5\x88\x0f\x2a\x64\x6b\x52\x0c\xca\x0d\xc4\xf8\x06\x92\xf3\xbe\x62\xad\x32\x9d\x0b\x8a\x92\x43\xff\x4b\xee\x99\xc3\x3e\x26\x61\xfe\x7d\xdf\x93\xec\x4f\x99\x93\xa0\xe6\xb6\x98\x0d\x21\x7c\x67\x78\x0f\xb9\x48\x18\x81\xb0\xed\x0b\x47\x87\x56\x4c\xe1\x03\xf8\x7a\xf5\xd9\x95\xca\x2c\x05\x90\xed\xb6\xd6\x2c\x0a\x6d\xa3\x7b\x27\x64\xb4\x6d\x08\x3e\x1b\xb1\x71\xfc\x31\x3e\x03\x70\xbc\x9d\x58\x26\x9f\xa1\x1b\xc2\x5f\x5c\x97\x68\x5e\xf2\x2c\x92\x0c\x5a\x2a\x8d\x29\x5a\xb7\x0d\xbd\x6c\x7b\xd7\xc2\xe2\xcc\xd1\xac\x97\x49\x37\xa9\x9a\x79\x7b\x74\x8e\xb1\x09\x6f\x9d\xbc\x79\x7b\xb4\xc2\xbc\xf5\x22\x6d\xf1\xab\xb4\xb3\x1f\xb5\xb1\x57\xc2\xbe\x18\xe4\x7f\x72\xff\xa6\xae\x5f\x38\x9a\x7f\x71\xa5\x95\x78\x31\xea\x6e\x60\x08\xb9\x8a\xb1\x7e\xeb\x62\xbf\x68\xf2\x21\x35\x0b\xfe\x90\x84\x0d\xdd\x68\xb4\xef\xb9\x11\xbc\x14\xe0\xde\x73\x0e\xc0\xae\xd0\x7a\x86\x73\x7d\xd4\xcd\xfd\x80\x2d\x74\x8b\x1f\x58\x4d\x47\xb6\x48\x37\x49\x7c\x0c\xf8\x6e\x56\xaf\x5f\xf6\x1e\x76\x3a\xcc\xba\x24\x7e\xf8\x93\x54\xf7\xdb\x18\xd0\x9b\xa5\x0f\x56\x70\xce\x34\xd2\x05\x43\x90\x89\x93\x9a\x84\x79\x4a\xf5\x9f\xb8\x79\x00\xe0\x8a\x0f\x81\x50\x0f\xb2\xd1\x0a\xaa\x8f\x3c\xf0\x46\xba\xb1\xcc\x20\x4f\xe3\x33\x0b\x65\xf9\x47\x08\x07\xc3\x6a\x44\x95\x9b\xc5\x88\xf9\xe7\xfd\x75\x46\x46\xb6\x69\xf7\xb2\xa8\x04\x63\xec\xf9\xae\xac\x39\x9a\x71\x13\x26\x4d\x6a\x52\xd0\xd5\xd8\x9b\x55\xad\x48\xf8\xa0\xc6\x50\x8b\x4a\x62\xf9\x15\x27\x9a\xb8\x5d\x42\xcb\x15\xd8\x60\x86\xc0\x52\xe0\xda\xf2\x82\x48\x0c\x4d\xc5\xac\x14\x77\xed\x74\x0a\x39\x82\x60\xd1\x06\x15\xa3\x08\x1c\x3b\x32\x05\xc8\xd0\x05\x1f\x05\x24\x4e\xb9\x61\x30\x1e\x44\xa6\xed\xc1\x87\x40\x89\x2b\xc0\xed\xfd\x51\x40\xca\x66\x2d\x0a\x70\xcd\xeb\xa6\xc4\xdc\x36\x5e\x96\x30\xf7\xe5\x15\xa2\x06\x97\xad\x6a\x40\xa5\x06\xbc\x28\x10\xbe\x4a\xb6\xc5\xb4\x77\x01\xae\x71\xc7\x14\xe4\xbb\x05\xf3\x21\xa9\xa0\xee\x23\xbd\xc3\x78\x6f\x96\x4f\xd8\xe7\x23\x1f\xf8\x2d\x5b\x1e\xe9\x8b\x7f\xd4\x1c\x77\x3a\xab\x24\x37\x5b\xa3\x33\x7f\x8c\x2d\x29\xfe\x4b\x7b\x39\xdb\x6b\xb6\x80\x60\x08\xc7\x73\x39\xa6\x73\xf0\x8c\x35\x67\x02\x91\x0c\xf0\x93\x89\xac\x04\x93\x89\xd0\x18\xcb\x17\xc1\x29\x83\x6d\x17\x9e\x10\xa5\xb1\x32\x11\x71\x54\x82\x20\x38\xe8\x29\x86\x85\x7e\x92\xc3\x93\xf5\x21\x8f\xee\x72\x7c\xbe\x2d\x59\x83\x6e\x9d\x6b\xfd\xc2\x30\x59\x17\xd1\x00\xb1\x82\x97\xba\x9b\x0b\x86\xf5\x7d\x78\x69\x72\x30\x3d\x88\x89\x29\x6c\xea\x73\x40\x05\x64\xd3\xa3\x9c\xe0\xb9\x67\x67\xf6\xf4\x45\xba\x82\x4b\x8a\xa0\x43\x62\x24\xcf\xac\xd7\x39\x1a\xdb\x21\x43\x30\xb4\x84\x7c\xb3\x48\x6d\x87\x5a\xfd\x78\x2b\x76\x6a\x67\x45\xb5\x2c\x3f\xed\x79\xf4\x88\xc1\xcd\xa5\x4d\xff\x91\xf7\x12\x8c\x75\xb9\xc2\x79\x98\xdf\x60\x68\xef\xf7\xd8\xa0\x6b\x9e\x93\x9e\x3c\xf4\xf9\xf4\x20\xd0\xed\x21\xba\x80\xd7\x61\xdc\x56\xd5\x35\xf8\x45\xb7\xf1\xa9\xcb\x4e\xf3\x75\xcc\x2a\x44\xda\x80\xf8\x60\x7c\x63\x42\x0b\x70\x0b\x8a\xe0\x11\x64\x96\x75\xb4\x59\xb7\x15\x25\x1f\x87\xc4\x7d\x98\x20\x19\xf1\x7c\xca\x27\xd9\x3e\xd0\xc0\x93\x6d\x1b\xc4\xa4\xe3\x60\xc1\x4f\xc5\x0d\x15\xf9\x72\x22\xd6\x83\x2c\x5b\x5e\xc1\x40\x4e\xc4\x9a\x7b\xab\x2e\x3e\xfd\x24\x47\xcf\x69\x4e\x23\xf6\x56\x37\x8c\xa0\xef\x07\x7e\xfa\x80\xce\xa2\x27\xac\x04\xc1\x69\x80\x4c\x14\xa5\x28\x12\x78\x11\x97\x98\xe6\xe1\x64\x6c\x7a\x48\x77\xce\x14\x8a\xcf\xf7\x29\xee\xc3\x57\x24\xd7\x4a\x35\x1d\xc2\x2f\x6e\x21\x34\xd2\x50\xab\x21\x1f\x2e\x45\x03\x3f\x95\x63\x43\xdd\xb1\x6e\xe1\xde\x2f\xfd\xe5\x75\x0b\xda\x59\xe6\x44\x51\xb0\x92\xff\xc5\xd3\x24\xd1\xf5\xd6\x81\x4b\x25\x6d\xda\xca\x9d\x34\xa6\x17\xa3\xc1\x10\x65\xb9\xba\x91\x58\x80\x20\xeb\x0f\x90\xa9\x2d\x6f\x2c\xd9\x29\x1d\xc5\xcb\xac\x3f\xb0\x72\x99\x98\x40\x2d\xb1\x8a\x95\x2c\x05\x01\x53\x83\xaa\x93\x98\xc2\x92\xc2\xbb\xbc\x28\x74\xe3\xd3\x86\x31\x28\x14\x06\x0b\x9a\x15\x61\xad\x00\xc1\x73\xd5\x1d\x19\x44\x81\x66\x9e\x09\x9d\x9e\xaf\xb7\x90\x9f\xc8\xf8\xdc\xe9\x60\x4b\xf6\xdb\xce\x8e\xf8\x74\x69\x98\xea\x4f\x3e\xc7\xcd\x4b\xda\x03\x16\x62\xf5\x30\x65\xd5\x0c\xd8\x4f\x4e\x7d\x4c\x7f\xd0\x0d\xda\x09\xdb\x9a\x7e\xc2\xd9\x7b\x51\xf6\x43\x9a\x1c\x8e\x91\xdd\x9d\xc5\x40\x82\x3f\x47\xe3\x94\xe3\x9c\x64\x85\xa2\x94\xf0\xc4\x68\x76\xb7\x60\x13\x2a\x27\x9d\x82\x04\xd0\xeb\x79\x8a\x15\xc3\x82\x6f\x2e\xc6\xf0\x2e\x6a\x0a\xff\x86\xa2\x82\x58\x01\x17\x10\x05\x50\xbf\x0a\x01\x53\x08\x6b\xd2\x04\x80\x03\x8f\x79\xd3\xd9\x69\x33\x62\x3f\xc9\xb9\x8f\x57\x4a\x8c\xe5\xb2\xb3\xb9\x60\x46\x32\x72\x2e\x2b\xee\x88\xc5\xcc\x20\x17\xb1\x7b\x04\xfd\xec\x56\x2b\xe2\x84\x9f\x96\xd4\xe8\x26\x3b\x4c\xd8\xd7\x3f\xab\x5d\x4b\xe9\x52\xf4\x29\x8b\x43\xcd\xd0\x9c\x4f\x24\x97\x41\x9c\x04\x9c\x37\x80\x4c\xe0\xd1\xaf\x12\x90\x13\x30\x74\xce\xc9\xf0\x10\xcc\x34\x48\xa1\x40\x44\xe3\x8b\x2e\xfa\x1f\x4c\xa7\x47\xeb\x4b\xe1\x0d\x18\x37\xa6\x9d\x87\x3a\x08\x8e\xe8\x89\x85\x44\xec\x10\x7f\xe5\xf6\x90\x38\xdc\x18\xeb\x70\xcb\xbc\xb7\x93\x57\xe3\xd5\x2e\x8b\x8d\xa3\x74\x49\x60\xc5\x1e\x47\xe0\x22\x44\xe6\xa3\x7f\x11\xac\x08\xb1\x38\xdb\xb4\x22\x35\xa9\x81\x98\x28\x6d\x04\x2a\x1a\xb1\xeb\x15\x5f\x82\x7d\x85\x5a\x40\x46\xf6\x9d\x48\x90\x05\xa8\x9f\x0e\xfa\x45\xdc\xf6\x7d\x64\x83\x68\x61\x3c\xc5\xa4\x20\xf7\xfa\x43\x55\xd8\xd3\xd5\xe7\x92\x7a\x9f\xba\xe7\xa2\x1f\x44\x33\x13\x7c\x29\xd1\xa1\xdf\x99\xec\x1c\x93\x3f\x0a\xc6\x88\xbf\xb5\x5c\xd9\xac\x46\xe9\x96\x83\x7c\x4f\x33\x4d\xab\xd7\xd8\xe4\x4d\x60\x7e\x29\xa9\x63\x08\x63\x3e\x09\x72\x8a\x87\x5a\xdd\x9c\x0c\x96\x1f\xd0\xc5\x8b\xf5\xa1\x96\x22\x18\xc9\x4b\x51\x07\x3c\x69\x6e\xa1\x74\x26\x86\x47\x42\x6c\x07\x39\x8d\xd3\x7e\x92\x26\x45\x28\xdd\x10\x40\x4e\xb6\xb6\x4c\xf0\xdc\x06\x71\x49\x40\x6a\xde\x04\x85\xce\x4d\xa7\x44\x60\x88\x6c\x48\xfe\xc0\x47\x72\xfb\x10\xb0\x3a\x4a\x59\x5a\xd1\x0d\x91\x37\x1a\x55\x67\xe9\xc6\x56\x8d\xe0\xe5\x82\x41\x98\xe0\xe5\x24\x1f\x09\x25\x15\x20\x4e\x12\x4d\x82\x89\x97\x44\x68\x12\xe0\x07\x2c\x1c\x65\x47\xbf\x89\x2e\x58\xaf\xe0\x78\xe1\x3b\x03\x45\x49\x87\x1d\x30\xc0\x84\x78\x94\x46\x38\x9e\x45\x2b\x83\x9a\x4f\x18\xd5\x06\x4f\x34\x45\x12\x73\xc3\xfe\x4b\x34\x7a\x5b\x4e\x87\x50\x33\xae\x0a\x64\x75\xa7\xf7\xa2\x36\x90\xc8\x01\x17\xec\xeb\x97\xaf\xfe\xe7\xcb\xaf\xbf\xfe\x0e\xae\x9c\xdf\x97\xd1\xbc\xdc\x64\x5a\x03\x09\x25\xa9\xab\xf6\xf0\x6a\xf4\xea\xbb\xc1\xae\x26\xb7\xb1\x2e\xc3\xb6\xad\x36\xb5\xf5\xb9\xee\x75\x23\xdc\x33\x21\xb5\xea\xe5\x70\x18\x77\x9a\x7b\x44\x84\x71\x74\x40\xf8\x1e\xd1\x24\x49\x01\x16\x95\x7e\xf4\x32\xb0\xb4\x8b\x11\x7b\xaf\x40\x77\xba\x12\x0f\x4e\x75\xa2\x5e\x7f\x72\x8d\xc6\xa1\x4d\x6a\x79\x5e\xd5\x22\x89\x50\xcd\x37\xfb\x4e\x58\xda\xeb\x01\x9b\xa6\xb8\xef\x57\x5a\x8d\xc3\xec\x42\x37\xb4\x79\xc3\xe9\x9e\x65\x96\xa8\x9f\x1e\xd1\x82\xbe\x29\xa9\xe9\xec\x17\xde\x48\xdd\x1a\xef\xec\x2e\xf4\xbc\xd6\x0a\xf8\x58\x28\x19\x8b\x8b\x82\x97\x87\x40\x0f\x43\x27\x29\x06\x3e\x20\x0b\x85\x15\x9d\x85\x3b\x7e\xbe\x9a\x8d\x48\xc0\xb8\x7a\xf0\x43\x35\x94\x53\x46\xb1\x19\xc9\xc8\xc8\x40\x56\xf2\x0c\xcf\x05\x4d\x3a\x51\xe8\xc6\xcf\x23\x14\x03\xc4\x5e\x40\x92\x6e\xe2\x9d\x1e\x44\xf9\xba\xc9\x56\xb6\xc9\x21\xff\xcd\xd7\x7b\x38\xe4\xeb\xee\x84\xb6\xc3\x60\x25\xf6\x04\x99\x04\xf7\x7a\x83\x4c\xa4\xe4\xdb\x23\x32\xc1\x38\x76\x30\x2c\x1a\x09\x1e\xec\x10\x1c\x4e\x7f\xa4\xd4\xe0\xec\xef\x4e\x21\x79\xd4\x21\x93\xe3\x5e\x2c\x1e\x75\x13\xc0\xcd\xfc\xa8\x99\x12\x42\xc3\x22\xee\x01\xb9\xcf\x20\xfa\xb6\x21\x5d\x72\x45\xe3\xc5\x88\x9d\xa9\x05\x72\x45\xd4\xf6\xbc\x80\xe3\x79\xea\xdd\x22\x75\x5b\x64\xa7\xe7\xb3\x12\x69\x34\x27\xa4\xc0\x79\xae\x35\x56\x45\xf2\xf4\xac\xdc\xc7\x93\xeb\x06\x78\x2d\x01\xba\x35\x54\xef\xde\xff\x79\x3f\x1c\x9d\x98\xe1\xb5\xd5\x62\x95\x1d\x29\x87\x47\xc1\x2b\x9d\x53\xf4\xb7\xd1\x7c\x85\x23\x4e\xee\xcd\xa4\x6e\x49\xa1\xe5\x88\x9d\x79\x1d\x1c\xdf\x3d\x70\xf9\xb8\xce\xa0\x92\x72\x6e\x02\xc0\x16\x67\x57\x17\x5e\x3d\x26\x2c\x97\x3c\x9a\x08\x05\x96\x7c\x26\xf0\xce\x12\xa8\x8e\xf8\xad\xe5\x15\xba\x70\x6f\x9a\x56\xdc\x1e\xed\xf7\x54\xa1\x4d\xf7\xf4\xe5\xcb\x97\x7f\x81\x97\x0a\x26\xf7\xdf\xbf\xfe\xfe\xbf\x7f\xfd\xfd\xa7\x48\xb3\xcd\xf3\xf4\x7a\x2a\x67\x6b\x0e\x39\xb1\x58\x6c\xc5\x39\xc0\xd0\xf6\xc4\x1b\xde\xc9\x7d\x4a\x92\xf5\x81\x6d\xd2\x33\x84\x39\x1a\x03\xf6\x5e\xbd\xc5\xfa\x6e\x03\x7c\x99\x32\x9b\x35\x36\x3a\x28\xca\xcf\xe9\x57\xb4\xbc\x21\x4e\x79\xaf\xd4\x90\x20\xf9\xf4\x60\x6c\x1f\x3a\xcd\xb3\x94\xc4\x4c\x78\xa3\x7b\x2f\x63\xcc\x16\x51\x18\x46\x93\x0e\x7c\xca\x4e\xf0\x40\xb7\x64\x5d\xc5\x50\x78\xef\x5b\x40\x46\x91\x77\x1d\xe4\xf3\x14\xbf\xd1\xb1\x95\x92\x15\x28\xc1\xad\x02\x0b\x6c\x5a\x95\xa7\x26\x24\xda\xed\xed\x51\x25\xa6\xbc\x58\xdc\x1e\xe5\x23\xa5\x1e\x09\x3f\x63\xb4\x54\x4b\x2a\xf2\x86\x23\x52\xd9\x50\x0f\xdf\x1c\xe9\x3b\xd4\x6f\xc7\x49\x7a\x56\xe6\x03\xb9\xd1\xce\xd6\x3c\x41\x7c\xa4\x9e\x86\x30\x8d\x20\x36\x62\x51\x42\x61\x79\xc0\x74\x5e\x29\x33\x7e\xbb\x0f\xbc\x97\x37\x04\xec\xfc\x0c\x66\x87\xe2\xf8\xba\x34\x60\x02\x21\x29\x35\x30\xb5\x30\xc2\xa6\x57\x62\x75\x27\x7e\x7f\x63\x17\x7b\x2c\x70\x6d\x02\xea\xce\x5c\xac\x9b\xcb\xba\x31\x9a\xe8\xf0\xa9\xac\xab\x63\x30\x80\x44\x47\x8c\x5d\x0b\xc2\x21\x4b\x83\x3e\xa1\xd4\x3e\x6d\x62\x4c\x44\x05\x43\x25\x8a\x73\xeb\xf6\x2c\x0d\xe1\xdb\x42\x15\x17\xa1\x22\x7f\x1e\xf9\xe7\x43\x50\xdd\x5f\x29\x92\xa2\x92\x1c\x2d\x1f\x79\x4b\x14\x09\x63\x3f\xaf\xc1\x05\x69\x96\xda\x30\xa9\x8c\x75\xea\xd4\x3e\x54\xd0\xed\x6c\x6b\x24\xd5\xf2\xe8\x91\x33\x79\x59\xbb\xb3\x62\x72\x59\x2d\x71\xbd\x7e\x4f\x84\xe5\xe6\x3e\xda\x6f\xc4\x90\x20\xdf\x90\x0e\x92\xdf\x69\x2d\x43\x32\x59\xaf\xb1\xe9\x6c\xde\x0d\xfb\x23\x79\x10\xcf\xcc\xdb\xbf\x5d\x5c\xf5\x80\x81\x6d\x5a\xb1\xc9\x01\x99\x6a\xf6\xa9\x60\xec\x7a\x1f\xb0\x86\x5b\x14\xea\x39\xbe\x1f\x95\xe0\x18\x93\xcf\x8e\x13\x3e\x7a\x02\xa1\x2e\x31\xe9\x05\x1f\xe9\x01\x6e\x24\xc2\xaf\x47\x8d\x44\x40\xd7\xfe\x41\x0a\xf3\x41\xb5\x83\x8e\xe7\xde\x6d\x71\x85\x63\x38\xf6\x9a\xb7\x30\xb6\x69\x0b\xcb\x5a\x6b\xdc\xef\x38\xb8\x0f\x4f\xef\x31\x7c\x23\xa6\xd2\xd8\x66\x11\x81\xc9\xe3\x24\xc8\xb8\x17\x9a\xdc\x8b\x05\xfb\xf1\xaf\x6f\xfe\xed\xef\x3f\xbd\x3f\x3f\xfb\xe9\xef\xef\xce\xce\x7f\xbc\xbc\x7a\x73\x7b\x7b\xfd\x6f\xd7\x37\x6f\xde\xdd\xde\x9e\xa3\x19\x9e\xb4\xb3\x6b\x61\x6f\x6f\x89\xb4\xcc\xed\xed\x4d\x51\xcb\xfa\xf6\x36\x09\x3c\xb4\x1a\x16\x8f\x1e\x22\xe0\x9f\x21\xd9\x0f\x64\x45\xdc\x74\x98\xf7\x8c\x9b\x98\x08\x7b\x18\x9f\x3b\x54\xca\x1f\x63\x8a\x4a\xa8\x3a\xb0\xed\x3a\xcd\xc0\x6b\xc1\x8c\x54\xd3\x4a\x84\x04\x97\xe8\xed\xbd\x13\xf6\x51\x90\xf0\xdc\x4d\x95\x4b\x73\xd4\x09\x32\x17\x1f\x45\xf7\xf2\x67\xd2\x1c\xd9\xe4\xc0\x24\xa2\xd9\x83\x14\x8f\x68\x67\x92\x53\xc5\x2b\x3f\xaa\x20\xed\x16\x35\xa0\x6e\xbe\x0f\xf9\xa1\x43\xb0\xd6\x72\x56\xce\x52\x46\x4e\x26\x97\x04\x18\xa6\xf1\xe5\x05\x7b\x35\x62\x3f\x62\x84\x02\xf4\x75\xbd\x6a\xe7\x42\x2c\x98\xb6\x33\x32\x75\x1d\x3a\x26\xc1\xb4\x77\x08\xe9\xb6\xf3\x03\x3f\x69\xab\x6a\xc1\x9c\xce\x81\x8f\xf9\x58\x97\xcb\x77\xff\xf6\x08\x2b\xb9\xf8\x3f\x60\x19\x97\x11\xfe\x18\xc6\xce\x7e\x75\x34\x1b\xab\x27\xe0\x5f\xcc\x43\x41\x7f\x25\xed\x98\xa5\x1f\xae\xce\xa7\x5e\x92\x0c\x81\xfe\x39\x7d\x09\xb3\xe4\x00\xd9\xbf\xc7\x9b\x61\x45\x33\x97\x0a\xec\xe8\x3f\x34\xbc\x10\x63\xd1\x48\x10\x02\x0e\x95\x0e\xa1\x84\x40\x7c\x7a\x3f\x92\x60\x53\x37\x10\x6c\x3a\xa6\x76\x82\xbe\xec\x94\x71\x4c\xa6\x67\xa5\xa8\x44\x34\xc4\x76\x73\x19\x94\x56\x43\x25\xa6\x3c\xcb\x66\x00\x5b\x0b\xf2\x28\xd4\xb7\x83\xf9\xc2\x58\x5d\x33\x39\x9f\x8b\xd2\xbd\xcf\xd5\x82\x3d\x48\x8e\x7c\xd3\xed\x26\x5d\x9a\x63\xa5\x99\x86\x5c\x28\x40\xb1\x01\xe7\xd3\xac\xb5\xac\xd4\x8f\xea\x24\x86\x02\xe1\x00\x4e\x85\x97\xd5\x20\x13\x8e\x61\x49\xac\x86\xcd\xcb\x63\x82\xfc\x73\x0e\x33\xcc\x9a\xd1\x53\xbb\x6a\xf3\xf8\xc4\x06\xf3\x90\xbf\xce\xde\x7e\x1f\x55\x39\xd0\xb8\x01\xe3\x83\xb3\xe4\x1c\xfd\xa2\xfc\xc5\xc6\xf4\x4b\x42\xe1\x4e\x3a\x74\x5f\x4f\x74\x53\xc8\xbb\x6a\xc1\x66\xbc\x0a\x9e\x02\x9e\xee\xcd\x88\x5d\x0b\x9b\x2e\xbf\xd2\x6a\x9a\x3e\x73\xe2\x63\x8d\xf6\xed\xc2\xdd\xcd\xb6\xc6\xf1\xdc\xeb\xb0\xd0\xed\x9a\x0c\xe0\x6f\x5e\xfa\xa5\x1e\x3c\x0f\xc5\xea\x4a\xe0\x86\xee\x66\x1d\x89\xaf\x79\xd2\xc3\x81\x03\x00\x6f\x42\xcf\x07\x29\x8b\x72\x5d\x37\x82\x97\xe7\x49\xbe\xcb\x16\x6b\xec\xba\xef\x92\x7a\xef\x33\xfd\x98\xd6\xc6\x00\x63\xb6\x6e\xa7\x33\x74\xc8\xc2\x87\x8c\x17\x8d\x36\x26\x94\x0d\xf1\x48\x9a\x23\x76\x9d\x17\xab\xc8\x4b\x54\xc0\xf3\xf6\xc8\x17\xbe\x3e\xc9\x9d\x2c\x85\x49\x12\x52\xfd\x64\x46\xec\xac\xaa\xd8\xda\x35\x02\xd9\x9e\x5d\x5d\x1c\x3c\x5f\x64\xdd\xee\x3c\xdd\xcd\x5e\x49\x63\x87\x73\x5e\x0f\xef\xc5\xc2\x64\x50\x44\xd9\x71\xfe\x55\x2c\xba\xa9\xa5\xee\xd6\xfe\xac\x08\xbe\xde\xbd\xf8\xe9\x64\xfe\x7d\xcb\x88\x7e\x7a\x73\xbe\x3d\x32\x34\x8b\x01\x58\x37\xa1\x27\x84\x02\x20\x1e\x49\xdf\x60\x24\x6a\x1d\xeb\xa0\x43\x08\x39\xe4\x46\x81\xdd\x76\x5b\x70\xd2\x8e\xd6\x2a\x63\x75\xc3\xa7\xe2\xd4\x4f\xf2\xa0\x64\xf5\x0b\x74\xfa\x05\xc5\x6a\x0c\x1a\xe1\x76\xef\xaf\x8e\x16\xe3\x59\xfd\xb7\xce\xdc\xd6\x43\x67\xf9\xb8\xb2\xff\xd6\xa1\xc2\x7d\xd2\x3c\xbb\xb0\xeb\xab\x12\x3d\xd1\x24\x9c\xb8\xbb\x97\x73\x43\x6c\x86\xc7\xee\x81\x9e\xf0\x87\x39\x5f\x30\x77\x91\x2b\x68\xc5\x0b\xdb\xf2\x0a\x1a\x0b\x6c\x8b\xbe\x8a\x01\x13\xe4\x92\xa8\x16\x59\xf5\x15\x20\x41\x8c\x25\xf7\xaf\xae\x8f\x2a\x72\x5b\x51\x44\x4c\x91\x46\x57\xac\xae\xb8\x12\x3d\x92\x4f\x13\x90\xf3\x2d\x58\x6a\x54\x93\xc1\xe7\x11\x86\x89\xef\x43\xe7\x7b\x63\xaf\x1f\xc0\x38\x1e\xcb\x54\x7c\x8a\x9b\xd0\x01\x77\x7f\x12\xab\x0a\x24\x8e\x04\xb4\x95\x69\xdd\x50\xf5\x12\xd0\x42\xb5\x22\x3c\x14\x27\xe4\xe5\x69\x8f\x18\x16\xa7\xe4\x04\x64\xda\x14\x94\xd7\x24\x11\x6a\x10\x69\xd0\xda\xba\x05\x46\xf8\x1f\x18\x67\xeb\x84\x48\x27\x64\xfd\xc7\xe1\x8f\x9c\xab\xc4\xfe\xe2\x0b\x75\x7f\x9a\x78\xb5\xeb\x4e\x15\xf0\x3d\x24\x9f\xe5\x9c\xaa\x9e\x87\x44\xcc\x00\x43\x3e\x17\xab\x33\xac\xf0\xaa\x3b\xd5\x6a\x29\xd7\xaa\x5f\xca\x50\x9d\x96\x5c\xff\xfd\x93\x86\x0e\xb9\xf1\x98\x12\xb2\x4d\xa0\x8e\xb0\xcd\x64\xdd\x70\x9f\xb9\x97\x19\x45\xbe\x24\x9a\xd7\x1b\x10\x7c\x09\x3a\x89\x4a\xef\x42\x44\x3b\xf8\x3e\x16\xd0\x2c\xf4\xf9\xe9\xf7\xb7\x13\x4d\xbb\x74\x89\x6f\x7c\xed\x2c\x2c\xd9\xcf\x4c\x5b\x38\x5d\x67\xd2\x56\xdd\x4f\x23\x60\x1b\x7a\x48\xff\x35\x01\xc0\x9a\x67\x45\xff\x29\x30\x7a\xe5\xb7\x26\x80\x06\x20\x44\xd9\x3f\x35\x2f\xe8\x57\xe9\xe6\x8c\xcd\xda\x39\x57\xac\x7f\xad\x9b\xc7\xd9\x22\xa5\xd4\x50\x97\x36\x16\x13\xda\x23\xec\x13\x2d\x1f\xe5\x55\xbf\x88\xd8\xa5\xf6\xde\x0e\x08\x6c\xe6\x31\x58\x07\x31\xf4\x00\x62\x7b\x0c\x59\xfa\x50\x61\x8b\x0e\xcc\x50\xcd\x2f\x49\xde\x0c\x31\x98\x0d\x40\xba\x70\xa7\x94\x71\xc3\x62\x54\x14\x7b\x90\x85\x95\x73\x03\x54\x29\x31\xfe\x4d\x36\xc1\x6e\x93\x19\x1b\xd0\x98\x91\xc7\x0d\x06\x43\xed\xb4\xe5\x0d\x57\x56\x88\x08\x11\x97\x3a\xc2\x3a\xd1\xa0\xd2\x97\x0c\x8b\x7a\xa4\x93\xde\x4a\x51\x40\xc1\x0a\xed\xc4\xab\x22\x18\xe8\x99\xa8\x8c\xc0\x32\x9b\x72\xe2\x23\x3d\xa0\x78\xd8\x9d\x28\xf4\x5c\x30\xfe\xc0\x65\x05\x67\x6e\xb4\x06\x20\xa9\xbc\x5f\x40\x94\x8a\x9d\x4f\x69\xa1\xb1\x28\x71\x36\x2b\x74\x17\x53\xe0\x4e\x88\xf7\x80\xc8\x56\x2a\x6f\xe8\x91\x3a\xd1\x78\x13\x77\x73\xc4\xce\x30\xb0\xd9\xb4\x95\x1d\xa4\x81\x43\x94\xad\x5b\xca\x09\xe4\x96\x58\x34\xaa\xf8\x0c\x1f\x1f\x3e\x9d\xd8\x6e\x90\x24\x9f\xc2\x21\xeb\x19\x37\x5b\xab\xfe\xb8\xa1\x66\x94\xe9\x03\x68\x0d\x14\x32\x2c\x31\x17\xc8\x6d\x82\xf7\xf0\xb5\x73\x80\x61\xd2\x13\xaa\x78\xea\x13\xbb\xf0\xe6\x48\x6b\x58\xe0\x31\xc8\x2f\x93\x98\x10\xb8\xdc\x03\x1f\x0d\x62\x9c\x38\xaf\xca\x70\x41\x11\xcf\x36\xda\xa7\x93\x0c\xa6\xc4\x71\x88\xef\x3a\xf4\x14\x1c\x1a\x58\x92\x12\x6f\x75\xa2\x21\x10\x52\x08\x7c\xe1\xd1\x2a\xc0\x06\xe6\x0e\xbe\xd6\xc6\x48\x47\x2b\xb8\x70\xf4\x23\x02\x94\xeb\x58\x40\xbc\xe5\x6b\x84\x55\xd5\x25\xbc\x13\x77\x60\xc6\x2f\x1c\x63\x8d\x91\x76\x89\xa7\xda\x6b\x15\xee\xf2\xad\xa8\x93\x99\xbc\x29\x98\xe2\x85\x1e\x0c\x8b\xfd\x12\x21\xf9\x54\x55\xaa\xd9\x40\xa1\xb6\x29\x00\x69\xbc\x3f\xdc\xb0\x47\x01\x68\x30\xd8\xcc\xd4\x8e\x9c\x4a\xfd\xa8\x1c\xc7\x07\xb3\x21\x0e\x14\x4a\x55\x2b\x8f\x1c\x80\x6f\x73\x01\x21\x0d\x00\xf1\xcb\xdd\x4f\xee\xb8\x3e\xa0\xc5\x71\xc5\xca\xef\x74\xab\x10\xc4\xc8\x87\xcd\xab\x72\x8d\x57\x03\x1e\xae\x7c\x59\x67\x6b\xa0\x41\xdc\xe1\x40\xe4\x2a\x8e\x0b\xf9\x2f\x32\x78\x2c\xbc\x67\x02\x9c\x5a\xbc\x01\xce\x0d\x69\x1c\xfe\x5f\x23\x76\xed\xde\x5f\x51\x8a\xf2\x35\xd8\x90\x96\xbd\x1e\xb8\x88\x07\x11\x8d\xd1\x60\x70\xa6\x77\x1b\x97\x91\xc5\x5f\x88\x90\xa7\xf4\x16\x92\x8d\x76\xe8\x98\x36\x65\xf5\x5a\xdd\x4e\xe6\x73\x98\x60\x10\x4e\xb8\x24\xd4\x50\x48\x60\x6c\xe2\xa3\x0c\xe6\x59\xa5\xd5\x10\x8c\xdc\x5e\xe5\x6d\xd8\x63\xde\x1d\xd1\x23\x12\xe1\xc8\x57\x1f\x7b\x0d\x19\x7d\x50\x19\x92\xae\x9b\xd7\x9b\x45\x12\x56\x49\x94\x40\x1b\xa0\xef\x60\x1e\xe5\x80\xd9\x45\x4d\x28\x35\xbe\x6a\xa4\x62\xa2\x69\xb0\x0e\x32\xe1\xbf\xd3\x7b\x1a\x6b\x8d\x6a\x63\xd3\x88\x4d\x77\x9d\x0e\x2d\xb4\x20\x43\xdb\x9d\x0f\x76\xaa\xae\xac\xe2\x83\x87\x29\x8c\xb2\x2c\xe1\x86\xce\xf6\xe1\xdf\x50\xda\x65\xcb\xc4\xb1\x11\x85\x63\xb8\xb9\xa4\x95\xbb\xd6\xac\xe5\x32\xab\x50\x2b\x4d\xd7\x36\xfe\xd2\x7a\x7d\x35\x49\xf8\xa0\xaf\x2f\xc7\x3e\x70\x76\x8c\x35\xb3\x31\xd3\x2a\x8c\xc3\x2d\x0a\xb9\xaf\xc8\x85\x10\x12\xc9\xf4\x84\x41\x7d\x17\xcc\xec\x7f\xf8\x2e\x45\x9b\x90\x86\x22\x93\x60\xe7\x20\xf1\x3f\xf2\x92\xd8\xf7\x42\x74\xc3\x28\x0f\x60\xad\xb8\x1c\x7f\xe1\x29\xfa\xbf\x69\x03\xd1\x5e\x3d\x5e\xf2\xbf\xb5\xbc\xa2\xc8\x69\x72\xb7\xb3\xe3\xbf\xbd\xbf\x3e\xc1\x28\x30\x39\x81\x5b\xeb\xde\xde\xe5\xd2\x3a\x11\xbb\x67\x65\x02\x14\x84\xe3\x8c\x75\xf9\xb7\xf7\xd7\x18\x7a\x06\xa1\x39\xa0\x63\x07\xd1\xeb\x6f\xef\xaf\x71\x20\x61\xf6\xad\x21\x81\xc9\x3d\x8d\xae\xb5\xe1\x95\x39\xc5\x10\x32\x9a\xcf\xf0\x37\xbd\x5c\x32\xe5\x60\xf5\x28\xcf\xd8\x5d\x23\xc5\x24\xa9\x42\xb9\xaf\xf6\x00\x5c\x76\xc4\xa0\xea\xee\x8b\x37\x4e\xbc\x16\xe5\x8b\xbd\xea\x54\xa2\x02\xf8\x39\x0b\x95\x7e\x78\x7b\xce\xbe\xf9\xe6\x9b\xff\xc9\x00\x98\x19\xc4\x31\x89\x2e\xe7\xa8\xd6\xfb\x88\x69\x6e\x18\x2f\xdc\x6b\x53\x89\x72\x9a\x4b\x46\x55\xc8\x59\x80\x6c\x85\x00\x7a\xe7\xf1\x9f\x21\x2d\xbd\x5c\x25\x1e\x1d\x9b\x93\x0c\xe5\xe9\xb0\x58\x83\x37\x62\x5e\x57\x5b\x2b\x6b\xf8\x56\x89\xab\x8c\x33\xeb\x7f\x74\xb3\x0b\xd1\xe4\x85\xae\xa5\xf0\x96\xe8\x46\xf8\x80\xf3\x9e\xb0\x84\xcf\x85\xa0\x7e\xb7\x42\x50\xcf\xa5\x8e\xfe\x28\xa5\x8e\x10\xb2\xa1\x7f\xb1\x23\x3c\x9b\x17\xe6\xf3\x15\x3c\x0a\x8b\x5e\xed\xe1\x5f\xe6\x49\xbd\xb6\x64\x15\x5f\x03\x2c\xd5\x4d\xbb\x90\xb0\xb6\xc8\x47\xc0\x8e\x94\x21\xdc\x78\xf3\x06\x51\x27\x99\x9f\xfc\x4c\x47\x9f\x64\x97\x9c\x0c\x0a\x66\x49\xd3\xb1\x17\x6e\x65\xfc\xe1\xf7\x4f\x58\xed\x29\xbc\x1c\x59\x83\x03\x54\x7c\xf2\x1d\x6f\x2f\x38\x98\xb6\x5c\x2a\x3c\xe8\xff\xf8\x5c\x80\xf0\xcb\x7e\x77\x76\x2c\x40\x18\xee\xdc\xe1\xbd\xb4\x81\xa2\x9f\x62\x98\x7f\x7e\x46\xff\x28\xcf\xe8\x73\xc5\x40\xfc\xfd\x33\xbc\x21\x9f\xa4\x72\x60\x26\x02\xf4\x7a\x47\x00\x56\x3d\xaa\x38\x10\x9f\xca\x2d\xa7\x00\x7c\x62\xd3\x60\x86\x89\xc0\x9f\x5e\x26\x88\xfa\xd0\xf6\xe7\xe6\x59\xe6\x5b\xba\xbf\x26\x3f\xa4\x5e\xdb\xb1\x84\x99\xbf\x71\xe5\x84\x9a\x13\x1e\x62\x0c\x60\x36\x12\x30\x17\x92\xa2\x68\x9b\xe2\xe8\xbe\x0c\xe9\x6e\x3b\xed\x37\x76\x39\xb8\x6c\x1d\x31\x82\x19\x7b\x1b\x6a\x31\x9a\xba\x41\x10\x71\xc2\x45\xe3\x71\x09\xf4\x5d\x05\x90\xfd\x64\xf2\xf6\x81\x5a\x50\xd3\xed\x86\x32\xd5\x79\xb0\x82\xa3\xc5\xdc\xcc\x30\x45\x17\x40\x89\x92\x9c\xf6\xaa\xd2\x8f\x00\x5a\xd9\x56\xc2\xbc\x66\x43\x76\xd7\xca\xca\x0e\xa5\xb7\xb4\x53\x76\x1b\x7e\x7e\x27\xba\x49\xd5\x92\xf0\x4e\xd1\x63\xa6\x8d\xa0\x96\xad\x11\xb7\x8a\x25\x56\x2c\x48\x4a\xb8\x55\x43\x56\x54\xba\x2d\xdd\x22\x1e\x64\x19\x6b\x32\x15\xf9\x70\x60\xef\xc5\x62\x73\x3c\x46\x65\xe6\x93\x77\xfd\xd3\x4a\x27\x5a\x8f\x08\x36\x70\x54\xe8\xf9\x69\x7c\x3e\xf7\xb1\x76\x37\xdb\x32\xf3\xdc\x51\xfb\x50\x7a\xd8\x74\xd5\xce\xef\x44\xa0\xe3\xec\x3c\xc0\x4b\x09\x19\xbc\xe8\x39\x01\xf1\xd4\x9d\x25\xa1\x9b\x1f\x1e\x82\x41\x5b\x5d\xe8\x6a\x2b\xbe\x08\x36\x0b\xcb\xf0\xff\xde\x67\x0d\x58\x51\x32\x14\x76\x89\x60\xe7\xaf\xd9\xed\xd1\xcd\xf9\xf8\xf6\x68\xc0\x6e\x8f\x7e\xbe\xa0\xff\xb8\x3e\xbf\x19\xdf\x1e\x1d\xb6\xbe\x2a\x9c\xda\xaa\x6d\xd8\xf6\xe0\xf6\xb9\xd6\x8f\xba\xf9\x88\x31\xb5\xd7\x20\x15\x6e\x7c\xd7\x96\x9b\xa7\x81\xa4\x9c\xf9\x16\xbe\x5e\x62\xc0\x65\xea\x53\xb3\xb4\x47\x29\xdc\xb7\xd7\x54\x03\x37\xc3\x6a\x82\xc2\x9e\x88\x7e\x02\x16\x73\xab\x31\xba\x99\xbd\x0b\xe5\x3a\xba\x4d\xe2\x81\x92\x45\x15\x5d\x6b\x35\xa4\x13\xa8\x69\x70\xf5\xbd\xf9\x38\x62\xb7\x47\xe2\xa3\xfd\x16\x8f\xf7\xe3\x04\x6b\x34\xce\x03\xfc\x3b\x08\xc8\x84\xa2\x08\x69\x4d\xd8\xb8\x5b\x73\x6d\x3f\x64\x8a\xf7\xaa\xda\x86\x57\x90\xa6\x81\x40\xae\x17\x3b\x76\x5f\x9e\x3e\x36\xd2\x8a\x93\x11\xc0\x22\xbe\x07\x34\xa0\x50\x6e\x60\xa2\x1b\x0a\xfb\x08\x7f\xf4\x39\x8a\x52\x31\x3c\xdd\x77\x6e\x03\xd7\x41\xb2\x6d\xcc\x1b\xc3\xa3\xdf\x0a\xaf\xfb\x0b\x35\x23\x10\x48\xb7\x93\xa5\x7b\xcb\x00\xde\x76\x89\x92\x0e\x7b\xa1\xc2\x14\x9f\x7c\x81\x00\xfa\xa0\x11\xe5\x75\x80\x7e\xbc\x11\xcd\x7c\xc3\x1d\x3a\xf3\xf8\x00\xb5\xff\x34\x85\x8d\xb4\xa2\x99\x07\x44\x03\xf0\xff\xc3\x3c\x08\x5b\x20\xe0\x0d\x3c\x0a\x08\x34\x7a\xc9\x8e\xe5\x48\x8c\x98\x74\x52\x17\x67\x4a\x0f\x75\x7d\x32\x62\x67\x4c\xb5\x55\xd5\x63\x00\xa5\x43\xff\xd4\x91\xc1\x20\x9e\xd0\xd7\xf6\x6b\x5b\x07\x74\xde\xbd\x65\xad\x14\x4b\x0f\x76\x6f\x93\xd0\x75\x86\xc1\x43\x01\x6d\xcf\x2d\x68\xb0\x84\xcd\xb6\x8c\xee\x85\x5b\xb6\x26\x75\x1d\xff\xb8\x85\x60\x7f\xc5\x4d\xef\x0e\x95\x55\x42\xc8\xc7\x54\x9d\x85\x05\xd4\xdf\x06\x6a\x21\xbf\x1a\xbe\x7a\xf9\xf2\x30\x30\x45\x3d\xe9\x9e\xd6\x39\x58\x79\x7c\x4f\xbf\x0b\xfa\x6e\xe3\xeb\xe1\xfe\x9e\xb9\x7b\x66\x82\x57\x76\xc6\x8a\x99\x28\xee\x89\x7d\x86\x42\xa0\x8c\x4f\xb9\x54\xc6\xa6\x35\xba\x5c\x9b\x52\x60\x5c\x86\x88\xa5\x2d\xd0\x50\x57\x41\x75\xa8\x86\xe2\x41\x51\xaa\xc4\x58\xbb\x86\x4f\x26\xb2\xe8\x41\xcb\xe2\xe3\x13\x34\x86\x37\x1f\x45\x71\x06\x58\xb4\x1b\xe9\xf7\xbd\x42\x79\x12\x22\x0f\xb5\x0a\x91\x22\x51\x58\x8d\x68\x28\x09\xec\xb9\xeb\x3d\xfc\xdb\xf8\xd4\x0b\x5f\xcb\x8f\xdf\x8b\x35\x94\x4d\x51\x30\x37\xb3\x46\x98\x99\xae\xb6\xd9\x91\xde\x49\x25\xe7\xed\x1c\xd2\xc7\x44\xd1\x42\x4a\x28\x75\x91\xa0\x4f\xc2\x41\xe2\x79\x25\x28\xc2\x1e\x3d\x18\xa2\xf5\x9c\xf2\xe3\xd6\xe2\x03\x88\x3a\xe9\x8a\x23\xe6\x47\x0a\x29\xa0\xaf\x0e\x0e\xd8\xe5\x54\xac\x1f\xc4\xfe\xe0\x1d\x3f\xde\xdc\x8c\x7f\x10\xb6\xc7\xa1\x52\xcb\xce\x01\xb9\xf1\x53\xf8\x55\xa2\xed\x35\x27\x45\x80\xd1\x17\xa2\xe2\x8b\x7e\xe9\xc2\x57\x41\x30\x5f\x4e\x73\xcd\x23\xa3\x7c\x0c\x34\x79\x89\xab\x1c\x17\x19\x82\xf6\x42\xe9\x92\xc3\x86\x41\xc7\xf0\x67\x1c\xeb\xe0\x1a\xc1\x0e\xe9\xd5\x3f\xea\x47\xa6\x27\x56\x28\x76\x1c\x53\x83\x4f\xd2\x22\x2e\x81\xba\x33\xcc\x83\x57\x31\xb9\xf6\x73\x90\x2d\x05\xcf\x3d\xe5\xca\x52\x17\xdb\xef\x6c\x12\x60\x9f\xdd\x5b\xbc\xcb\xf9\xa5\x7d\x35\x0a\xf2\xf4\x2b\xe8\x37\x90\x11\xa0\x25\x20\xae\xf6\x67\xd9\x21\x5b\xd4\xd7\xba\xb8\x7f\xc2\xd5\xbe\x39\x1f\x63\x0f\x3d\x2e\x77\x68\x9b\x5c\x6f\xae\x3c\xfb\x95\xea\x41\x57\x0f\x08\x7a\x77\x73\x3e\x06\x9d\x72\x04\xff\x35\xd3\xfa\xde\xc4\x2c\x0c\xaf\x70\x7c\x89\xb0\x01\xac\xad\xb5\x22\x1a\xc9\xe2\x26\xff\x99\xf3\xeb\xd7\x83\x14\x50\x5a\xfb\xa6\x23\xeb\x14\x0f\x7d\xef\xd1\x64\x07\x69\x9f\xfa\x41\x34\x0d\x64\x6d\xdb\x80\xb6\x40\xb6\xa3\xa0\x97\xc6\x82\x4e\xbf\x3b\x6a\x43\x40\x15\x53\x98\xb1\x45\xa1\x8d\xee\xd8\x48\xdc\x24\x70\x50\x77\xea\x20\xed\xdd\xac\xdc\xa2\x80\x47\xb6\x02\x2b\xf5\x00\x78\x05\x72\x2e\x74\x6b\x9f\xf6\x84\x26\xf9\x55\xc8\x38\xe5\x5c\x18\xa6\x5b\xdb\x61\x89\xf4\xd9\x4a\xae\xf7\xe5\xbf\xa3\x4f\xb6\x0a\x37\x1a\x6b\x45\xf5\xb4\x1f\x7d\x48\x4d\x45\xb5\xff\xd8\xdb\x8a\xd0\x52\xb4\x5d\x4a\x27\x88\x90\x77\xba\xdc\x66\x2d\x72\x4d\xd8\x9d\xb4\x26\xe0\x0a\x1a\x61\x1d\x37\x23\x20\x5a\x48\x48\x09\x2e\x17\x59\x21\x7c\x82\xc7\x12\x8d\xd6\x23\xc5\x74\x61\xbd\x73\x3c\x80\x0e\xbd\x7c\xf9\xf2\x25\x10\xff\xcb\xbf\xfc\xe5\x2f\x0c\xe0\xbf\x4b\x51\xc8\xf9\x72\x43\x68\xf5\xe7\x57\xaf\x46\xec\xdf\xce\xde\xfd\x44\x69\x0e\x06\xb1\x7b\xb0\x67\xd7\x20\xfb\xd8\x0c\xd8\xff\xba\x7e\x7f\x15\x2f\x56\xfe\x57\x60\x57\x73\xbf\xbc\x11\xbb\x90\x0d\x68\x99\x1e\xd3\xd5\xf3\x5c\xee\xb8\x63\x23\xe0\x15\xe2\x80\xe6\x94\x54\xbe\x21\x9b\x0f\x5d\x6c\x2c\x47\x0d\x05\xc0\x00\x97\xab\x92\x1e\xb1\x15\x53\x81\x42\xe1\xf3\x19\xf7\x7d\x05\xe3\x1b\x4c\x65\xc0\x2a\x79\x2f\xd8\xc4\xfc\x80\xd8\x8e\x9e\x9d\x63\x9e\x8e\x87\x1d\xc0\xce\xc2\xd4\x21\xf1\xee\xe0\x12\x14\x05\x0e\x6c\xa6\x8e\x2a\x03\x47\xf0\xf4\x78\xf8\x64\x6d\xbc\x1c\xe3\xd0\xfd\xee\xb1\x00\x4f\xbd\xa7\x7f\x6b\xf5\xdd\xc2\x8a\x7d\x6e\x29\x7d\x4a\xf6\x54\x38\xfb\x8a\xfb\xe4\x7d\xc7\x9e\xe0\xf1\x8c\x20\x01\xbe\xbd\x47\x9c\x28\x35\x82\x2f\xa1\xf4\xc3\xf4\xa3\x12\x8d\x99\xc9\x9a\xcd\xb9\xe2\x53\x08\x7b\x86\xaa\x2c\x6f\x10\xc0\xad\x11\x50\xe9\xc0\x51\xe5\x76\x46\xe0\x9d\xc1\x9b\x0e\x19\x68\x11\xcb\x3d\xd7\xfe\xa4\x39\xc8\xbc\xee\x47\x2f\xe4\x23\x88\x30\xf6\xf7\xa9\xec\xb4\x1b\xed\xb0\xf9\xb6\x91\x9c\xee\x11\x3a\xb0\xda\x80\xe0\xe5\x10\xb3\xa2\x23\xff\xca\x5f\xa3\xbd\x91\xbe\x3c\xe2\xdc\xd6\x15\x10\x30\x5d\x66\xf2\x27\x70\x36\xc7\x8f\xda\xca\xca\xba\x8a\xab\x09\x1f\xc4\x5a\xa3\xc1\xc1\xc6\x93\x60\x15\x8e\xd0\x80\xaf\x81\x44\x6a\x2e\x1b\x76\x1c\xfa\x12\xca\x02\x57\x43\xd1\xb1\xe6\x4d\xb4\xbc\x15\x7a\x3e\xe7\xe6\xc4\xe3\xdf\x14\x6e\x3a\x48\x98\x85\xfb\x8a\x57\x11\x4a\xcf\xb1\xcb\x95\x68\x24\xfd\x20\xbd\x14\xdf\x0a\x68\x79\x03\x8d\x1c\x81\x7b\x5b\x20\xd6\x82\xe8\x9c\x2c\x31\xe6\xef\x79\x71\x2f\x54\xc9\x7e\x36\x7e\x31\xe5\x42\xf1\x39\x25\x04\x81\x0c\x48\xd1\x5f\x9d\x0b\x35\x88\x12\x86\x7b\xcb\xbc\x90\x58\xb5\x53\xa9\x76\x5f\x59\x6b\xc4\x36\x3f\xed\xcf\x06\xed\x6e\x9b\xee\x0f\xd5\x65\x6b\xe4\x43\x21\x7c\x49\x24\xe8\x7a\xe7\x09\x91\xb1\xbf\x8f\xe7\x20\x0b\x77\x02\xc6\x94\xd4\x89\x03\x11\x15\x2d\x81\xfe\x7d\xef\x1c\xc4\xdd\x02\x41\xc8\x0f\xeb\x58\x08\x37\x69\x79\x4d\x4f\x35\xaf\x7e\xf8\xfe\x62\x2c\x1a\x23\x8d\x15\xca\xee\xc3\xca\x3f\xf0\x52\x1b\xf6\x7d\xa5\x8b\x7b\x76\x21\xc0\x01\xda\x97\xab\x7f\xf8\xfe\x22\x70\xf4\x8d\xac\x1c\xf0\x0a\xf7\xe1\xe5\xfd\xbc\x7f\x1d\x27\x1e\x99\x4e\x3d\xd3\x74\xcb\x58\xe8\x96\x3d\x72\x44\x55\x85\xd5\x8d\xd8\x8d\xac\x5f\xb3\x37\xca\xb4\x4d\x92\x35\xdd\xf5\x07\x4a\xb3\x83\x4b\x10\x7c\xf1\xe6\xf5\xb2\x63\xd0\xfd\x87\xb2\xfb\xba\x08\x9f\x08\xb3\xf4\x55\x73\xb7\x47\xde\x0e\x24\x84\xf4\xc8\x7a\x6a\x80\x7a\xa0\x35\xa1\xf7\xaf\x98\x2d\x85\x29\x18\x1f\xd1\x42\x33\x3b\x6d\xee\xca\xd3\x0f\x6f\xce\x2e\xde\xbd\x19\xcd\xcb\xaf\x66\xfa\x71\x68\xf5\xb0\x35\x62\x28\xed\x1e\x59\x05\x62\x01\x7f\xdc\x12\x11\x89\xad\x42\x08\x80\x93\x84\xad\x06\x4c\x55\xf8\xdd\xbd\x08\x1f\xbe\xbf\x70\xec\x6d\x94\xca\x01\xa7\xc2\x16\xa7\x85\xa8\x67\xa7\x34\xce\xef\xb7\xd0\xb9\x56\xd2\xea\xad\x15\x07\xcf\x58\xa1\xab\x0a\x65\x4b\x77\x25\xce\x45\x3d\x63\xfe\xdb\x4f\x33\xfb\x35\x22\x71\xdf\x5a\x5a\x3d\x62\x5e\x6b\xbd\x35\xca\x23\x52\xa5\x6b\x4c\x44\x99\x9c\x64\x73\xb7\xfa\x4a\x7d\x96\xb3\x3b\x84\x50\xb8\xd5\x39\xbf\x42\xfa\xfb\xa4\x0b\xde\x0c\x17\x0b\x85\x43\x3f\x80\x52\xb4\x9f\x51\xf6\xda\xf7\x40\x0e\xc9\x8d\xb1\x77\xbe\x2d\xc8\xee\x09\xb8\x36\x6f\xed\x4c\x28\xeb\xa3\xf2\x70\x56\xf9\x6d\xbf\x9c\x44\x2b\x5b\x34\xc1\x85\xeb\x9e\x2a\x05\xb2\x3a\xd8\x8e\xee\x2b\x80\x45\x32\x77\x8d\x97\xc9\x9c\x97\x73\xa9\x3e\x33\xa1\xf7\x94\x86\x02\x03\x5b\x7a\x6f\x0e\x20\x0c\x3d\x8b\x40\xcf\x22\xd0\xb3\x08\xf4\x2c\x02\x3d\x8b\x40\xcf\x22\xd0\x1f\x46\x04\x5a\x59\x1f\xfd\x59\x0e\x7a\x96\x83\xd6\xc9\x41\xc2\xbd\xb0\x70\xc4\xb1\x48\xe3\x66\x69\x68\xb9\x7d\x37\x9c\x3a\x2b\x06\x8c\x22\x50\x13\xbf\x4b\xcb\xcf\x3e\xa7\xc1\x7e\xc9\x69\xb0\xcf\x79\xa3\x7f\x94\xbc\xd1\x9e\xa9\x78\x54\x0c\xfa\x27\x2c\x16\x0e\x17\x77\xf5\x85\xe7\x8d\x48\x2a\xdf\x2d\xe0\xdf\xe4\xf6\x0e\x22\xba\xf5\x45\x6d\xb8\x2f\xce\x5b\x1e\x9b\x93\xa8\x3e\xac\x66\x09\xa4\x09\x19\x80\x0b\xff\x03\xe6\x05\xae\xdc\xcf\x5e\x99\x82\x19\x5b\x33\xbb\xa4\x0e\xae\x61\xbe\xbf\x5f\x36\x61\xba\x99\xdd\xa4\xc0\x43\x6c\xe7\x0a\xa0\xdc\xd5\xf0\xd3\xa4\xd9\xe4\x80\xbf\xfa\x0e\xa0\xa2\xcb\x04\xc1\x7e\xd3\x2e\x42\xf0\x03\xe4\xe4\x12\xcc\x9a\x46\xa8\x70\x00\x67\xba\x5b\x20\xbe\xdf\x23\x54\xf8\x82\xae\xa4\x93\x3b\xc6\x29\x32\x75\x0a\x0d\xf8\xc1\xbb\x69\xbf\xe0\x64\xcf\xf0\xfb\xa7\x4a\xc3\x5e\x2d\x95\x64\x4d\x9f\x9a\x8c\xbd\x72\x88\x88\x89\xbf\xa3\x04\x14\x3e\xec\xa4\x6a\x27\x65\x0d\xd6\xb0\x3b\x0e\x09\x0a\xa2\x01\x98\x54\x78\xdc\x7a\x08\x45\x15\x37\xf6\xa6\xe1\xca\xc0\x98\x9f\x1b\x7e\x0c\xf0\xb9\xb9\xb1\x18\xf7\x68\x53\x08\x59\x66\xc3\xac\x7c\x12\xba\x56\xa1\x14\x04\x60\x54\x42\xfc\xce\x9a\x10\xf6\x4f\x85\x20\x0d\x41\xa1\x61\x66\xfb\xa5\xd2\x6d\x07\xa7\xbb\x89\xb0\xb9\x3e\x6a\x3a\x6c\xcc\x0b\x43\x5b\xf6\x94\x59\xac\xe6\x95\xab\x39\x5b\xc4\x7d\xc5\x09\x0c\x7c\xae\xc8\x0d\xc0\x9c\xbf\x75\x9a\xee\xc0\x03\x91\xee\x53\xa6\x6c\xbb\xa9\xf1\x86\xec\x8b\x6b\x28\x7f\x67\xfc\xee\x9e\xca\x52\xa7\xf4\xc4\x51\xce\xde\x0e\xab\x29\x6d\xc1\x03\x5a\xfb\x0d\x8a\xcc\xb9\xcd\x69\xf5\x36\x3d\x43\x05\x7d\xd9\x3a\xd2\x2e\x50\x41\xeb\x4e\x78\xff\x40\xdf\xa4\x97\xd3\xa4\xf7\x62\xcd\xa3\xf9\xd4\x48\xc4\xd5\xef\xf2\x53\x6c\x94\xcf\x2a\xe6\x1f\x45\xc5\x7c\x86\x26\xc2\xdf\x3f\xab\x4c\x7c\x78\x90\xa2\xf5\xfa\xe9\x8e\xcf\x1c\xa8\xac\x72\x8d\xb6\xfa\x04\x83\xe0\x5c\x2a\xa7\x23\xf5\x4c\x71\xf4\x69\x15\x6a\x29\x4f\xc3\x89\x68\x14\xf8\xc9\x94\x78\xac\x62\xa0\x5f\x02\xac\x74\xe7\xcb\xc3\x3c\x4a\x3b\x73\x92\x24\x57\x80\xdb\xec\xb8\x41\xcc\x90\x2c\x1a\x6e\x66\x80\x8f\xef\x3a\x95\x76\x39\x4d\x2e\xc0\x2f\xe7\xfe\x86\x97\xec\x38\xad\xbe\xb1\xea\x03\xc6\x0d\x54\xcb\x70\xff\x8b\x89\xca\x30\xa1\x93\x43\x87\xbc\xd3\x79\x6c\xdb\x4f\x3a\xea\xa0\x39\xc7\x7d\xf5\xc6\x07\xdf\x51\x92\xee\x83\x7a\x0d\xa5\x5f\x4b\xe3\x38\x76\x2b\xcd\x2c\xe4\x37\x88\x8f\x04\x4b\x00\x39\x47\x4e\x1e\xc8\x5c\xba\xdd\x1c\xc2\x4f\xf6\x58\x7e\xf5\x38\xe3\x76\x28\xcd\x90\x0f\x7b\x3c\xa6\x07\x48\x33\xa0\xd4\xfe\xee\x9e\xf3\x12\x05\x63\x5e\x8d\x57\x5f\x02\xb6\x8b\xa7\x70\xc9\xe1\x43\xc0\x07\x08\x4e\xc9\xef\x44\xc5\x7e\x6b\x45\xb3\xc0\x4a\x14\x11\x66\x94\xae\x40\xc4\x95\x0f\x67\x5f\x60\x50\xc0\xe5\x84\xa5\x9d\x91\x3d\x10\x89\x34\x33\x06\xa2\xf0\x07\x36\x45\x7a\x88\x7d\x41\x9c\x71\x06\x58\x0a\x76\x47\x76\x2f\x16\x98\x11\x4a\x99\x2a\x30\x99\x04\xe2\x5e\x2a\xa6\x9b\x12\xa9\xe9\x4e\x44\xe6\x11\xf3\x52\x56\xf3\x96\x01\x93\x13\x82\xce\xc8\x66\x47\x33\xd3\xaa\x33\x9b\x1d\xe9\xcc\xed\xde\x83\x14\x8f\x40\x70\x52\x4d\x87\x8e\x65\x0c\x09\x1e\xe3\x14\x07\x39\xfd\x0a\xfe\x77\xe8\x0f\x7e\xcd\xcb\x9d\x6a\x24\x5d\x9a\xf9\x7d\x80\x68\xe9\xb6\x93\x3c\x05\x27\x92\x1b\x3a\x42\xd9\x9d\x2e\x38\xad\x9c\x30\xa9\x4c\x3b\x99\xc8\x02\x64\x29\xcf\x1e\xc8\x64\x6c\x21\xa3\x88\x78\x85\xe5\xf7\x02\x48\xa4\x10\xa5\x50\x05\xe6\x37\x32\xce\xfc\x34\x3e\x88\xc9\x27\xbd\xfe\xb5\x2e\x87\x76\x09\x70\xf3\xc9\xd9\x33\x9b\x6c\x94\xbb\x3e\xaa\x4b\xb5\x37\x41\x4c\xf5\x35\x29\x93\x8a\x9b\xfb\x3b\xdc\xfc\xcb\xf3\xa1\xdf\x8b\x70\x93\xbd\x02\xf1\xdd\x0a\x07\x7d\x8c\x2f\x28\x54\x21\xf0\x55\x39\x3a\x8f\xb8\x47\x93\x5f\x7b\x77\x0f\x9e\xe1\xd5\xbb\xde\xe7\x87\x7c\xab\x49\x87\x8d\xcb\x44\x63\x31\x16\xa7\xde\xb4\xf3\x2f\x4c\x76\x4c\x87\x2e\x2d\xb8\xc5\x9c\xd9\x53\x45\xcb\xfe\xf4\x39\x4b\x7c\x42\x12\x39\xb0\x7f\x51\xee\x45\x77\xf1\xd9\x02\x5c\x3c\xe2\xe9\x19\xb4\x4e\x15\xbc\x5a\x81\x61\x79\xf6\xb6\xd9\xc2\x7f\x68\xda\xf3\xfe\x85\x1f\x84\xf2\xc5\xc7\xb7\xe4\xe7\x2f\x7d\xc0\x1a\x31\xa9\x00\x77\x09\x12\x85\xe2\xef\xb4\x92\x35\x0e\x8d\xdd\x17\xb8\x57\x06\x35\x5c\xf8\xbd\x8e\x11\x59\x45\x60\x1d\x9f\x9b\x2b\xec\x29\x04\x77\x77\x1b\x37\x3b\x5d\x95\x17\x89\xff\xc1\x65\xd7\x9e\x1a\x73\xd8\xc6\xa7\xdb\x5c\xd1\x9a\xf3\x56\x8a\xaa\xbc\x5e\x96\x96\x97\x0f\x66\x45\xfb\xf4\xb5\x8c\x3a\x5b\xac\x29\x78\x5c\xd4\xed\x80\xcd\xc5\x5c\x37\x8b\x13\x9f\x74\x2c\x1b\x5f\xf4\x97\xb6\x6a\xeb\xbb\x19\xba\xee\x51\x4e\x32\x54\xdd\x84\x28\xa4\xd7\x3e\x49\xbb\x4c\xd3\x0c\x07\x94\x30\xcd\x2b\xac\xce\xa4\x1e\xd8\x03\x5f\x27\x31\x6e\xb2\xf5\x94\xf2\x41\x9a\x65\x25\x63\x67\x53\xcf\x28\x60\x31\xfe\xad\xe5\xca\x4a\xbb\xe8\x03\x6e\x4b\xf2\x61\xb6\x99\x01\x7b\xf5\x63\xad\x0d\xb0\x25\x3a\x8b\x81\x97\xcc\x41\xd7\xbb\x3d\x7a\x75\x7b\xb4\xee\xa2\x9a\x6e\xdc\xf6\x6a\x7a\xc0\x7d\x7d\x9d\xd8\x05\x35\x41\xbf\x1d\x3a\x6f\x8f\x26\x74\x28\x92\xff\x5b\xab\x33\xf3\xdc\x3a\x52\x87\x76\xcc\x08\x6b\x18\x9f\x4e\x1b\x31\x75\xef\xd9\x6f\xf0\x63\x23\xdc\x6a\x30\x23\x9d\x09\x05\x41\x91\x25\x94\xd1\x05\xd8\xd8\x9a\xf7\x01\x4b\x78\xf6\x2d\x3c\xc7\x5f\x3d\x1b\xc7\xf7\xe3\x98\xcf\x50\xe8\xcb\x2c\x6d\xf7\x50\x27\x6f\x58\x04\xa6\xf6\xb9\xab\xda\x1c\x32\x52\x29\xdd\x85\xde\x11\x4a\xe9\x4e\xf0\xc2\xb6\xbc\x8a\xac\x1c\xd9\x3c\x14\xbc\xb7\x51\xbd\x6c\x0d\x9f\xfe\xf3\x55\xff\xc9\xdf\xcd\x03\xbb\x44\x92\xae\xb7\x7a\xfc\x3b\x6d\xf3\x1a\x40\xf9\xab\x0d\x4a\xff\xb3\x7f\xff\x8b\x7e\x83\xfb\xf8\xf7\x2f\x5d\x9b\x4d\x07\x4d\x56\xe0\x9d\xf5\xbf\x5a\x57\xb2\x58\x24\xb5\x35\x5d\x6f\xe6\xf4\xd0\xa6\xa3\xf4\xe6\xf4\xb4\x14\x3d\xcb\x2b\x7f\x68\x79\xe5\xd9\x99\x8f\xbf\x7f\x96\xd7\xea\x53\x38\xf1\xbb\x12\x57\xcf\x17\x6b\xad\xf0\x35\xc3\x73\x86\x9b\x63\xb5\x17\x41\xc0\x32\x01\x1f\xf6\x78\xc5\x5c\x17\xfb\x79\x3a\x0f\x61\xaa\x58\xcb\xd7\x3a\xdb\x01\x0b\xf5\x61\x0b\xc2\xa6\x9e\xed\x74\x0f\x42\xc1\x6c\xa7\x4a\x47\x0b\xc6\xa7\xe1\xf0\x7d\xfc\x82\xa6\xd0\xb5\x58\x61\x22\xeb\xb5\x81\x11\x41\x21\xeb\x65\xd3\x3e\x65\xe3\x25\xb8\xff\x79\x4c\xe3\x44\x56\xd6\x31\x68\x00\xf6\x83\x4f\x96\xfd\xb9\x58\x77\x9c\x3c\x8b\x0d\x2f\xee\xd1\x93\xcb\x49\xbc\xbd\x6b\x2d\x13\x1f\x6b\x28\x95\x5e\xb2\xd6\xb8\x17\x22\x9b\xe6\x7b\xc8\x2e\x0f\x65\xef\xef\x3c\x28\x2c\xa0\x62\xd5\xda\x18\x79\x57\x89\x20\x69\xbc\x05\x9c\xc5\xd4\x1c\x04\xb3\x18\x20\x98\x22\x4d\xf1\xec\xea\x82\xe5\x0b\x3c\x96\x93\xbc\xb8\x8f\xfb\xc7\xc9\x20\xa0\xa9\x62\x45\x84\x72\x4d\x5c\x33\x76\xbb\x63\x0e\xb2\xdf\xbb\xdd\xf6\x0b\xdc\xf2\x80\x98\x97\x57\x8b\xc7\xcd\x5c\x51\x19\xa2\x9f\x23\xea\xa9\x69\xc9\xdb\xf4\x83\xdd\x38\xda\x76\xdf\xe9\x52\xeb\x8c\xab\x05\x0d\x2a\xbd\xd2\x00\xaa\xef\x3d\x25\xad\xe9\x53\x72\xe6\x1f\x83\xa5\xfd\xb8\xcc\xd2\x56\x6e\xc0\x17\xc7\xd3\x5a\x23\xfe\x01\xb6\x17\x20\xf8\x64\xee\x89\x0f\x74\x64\xb5\xe5\x15\xaa\xe4\xd1\xcb\x48\xbc\x87\xa0\xfc\x82\x31\x76\x4d\x1c\xfc\xd2\x0e\x1d\xea\x2e\x91\x75\x7c\xee\x64\xe9\x1e\x97\x29\x6d\xde\x89\xfe\x28\xf4\xbc\x6e\x6d\xb2\xb4\x26\x69\xdb\x27\x9f\x05\x08\xf0\xcb\x3f\xea\x9f\xf0\xa2\xe4\x8b\x9f\xf3\x8f\x10\x62\xc8\x11\x09\x46\x4f\x96\xb6\x03\xf8\xad\x7e\xdc\x03\x9e\x24\xcb\xa4\x3e\xc5\xd4\xc8\x61\xe8\x76\x18\x7c\x4e\xfb\xdc\x2e\xaf\x00\x7d\xf9\xdb\xfe\xc1\xab\x6a\x9d\x8d\xa7\xd8\xce\x4d\x1b\xef\xb5\x00\x78\x16\x43\x3f\x4e\x9b\x9c\x4b\x6b\xc9\xe3\x96\x54\x88\x81\xf8\xb5\xd4\x09\x45\x47\x2e\x27\xf8\x0e\x4b\x13\xa2\x15\xab\x45\xfa\xc6\x6a\x0f\xd0\x8e\x59\x4e\x50\x6a\x09\xe8\x1f\x8e\x6e\x88\xaf\x0f\x19\x3c\x7e\x7f\x32\x78\x2a\x0b\x21\x7c\x22\x2c\x1c\xb0\x89\x79\xe4\x0d\x21\xe8\x2b\x89\xc5\xc0\x08\x3e\x5e\xd7\x95\x8c\x91\x82\x61\x35\x3d\xf8\x86\x53\x1a\xb7\x25\x5f\xb8\x36\xee\xdc\x3c\xa6\x12\x7c\x44\x81\x8f\x88\x45\x0d\xe3\x9b\xa5\xf1\xf7\xc9\x13\xd3\xd5\x56\x9f\xa4\xae\x08\x7a\x34\x80\x3c\xb9\x5f\x3e\xcd\x7c\xfa\x66\x69\x65\xf3\x01\x30\xa7\x4f\x33\x9f\xbe\x78\xb1\xd9\x7c\x00\xae\xe3\x80\xf3\x79\x32\xf1\x17\xbc\x12\x97\xef\x77\x06\x53\xdd\xf8\x5d\x8e\x89\x5c\x87\x36\x8c\xbe\xea\x96\xb1\x3b\x2c\x0a\x58\x44\xfa\xfa\x44\x15\x0f\x53\x54\xaf\x04\x73\x85\xfe\xba\x3b\x21\x4d\xb9\x15\x8f\x7c\x1b\x34\xd0\x8d\x9f\x25\x2f\x4b\xa7\x40\x7a\x11\xcc\xef\xe9\xd9\xf8\x92\xfd\x80\x3d\xed\x53\x0b\xb5\xd1\x16\xd5\xb5\x0b\x3d\xe7\xb2\x4f\x7a\x68\x0a\xb0\xe3\x27\x31\x0e\xdd\x30\xec\x27\xcd\x1e\x05\xb6\x0f\xa9\xe8\x80\x53\xf6\x4f\x54\x05\xf2\xf7\x82\x83\x4c\x40\xa0\x89\xc1\x24\xd0\x47\xfe\xcc\x80\x25\x81\xc2\x08\xd5\x08\x8c\x80\xa4\xde\x07\x7c\xd3\x9b\x39\xbc\xd3\xb1\x00\x8c\xc4\x2a\x3e\x1e\x2b\x69\xc0\x7e\xd2\x53\xa9\xfc\xd5\x01\x53\x85\xdb\x4e\x2e\xab\x75\xf6\x03\x53\xbd\x51\xfc\xae\x5a\x56\x87\xba\xf7\xba\xe2\x53\xb4\xcf\xb9\xd6\xa7\xa5\x34\x10\xa4\x7a\x7d\xfd\x13\x23\xbb\x6b\x91\x18\x47\x88\xf4\x43\xd4\x0d\x1e\xfc\x3e\x67\x85\xd4\xd9\xa3\xa2\xc6\x65\x28\x28\xe3\xab\xef\x61\x9a\x3c\x7c\x4f\xc2\x98\x2f\xe7\x11\x52\x70\x6e\x66\xb2\xb8\x1f\x27\x98\xe6\xba\x71\xbf\xa9\xe4\xa7\x8c\xab\x74\xff\xb6\x4f\xa6\x35\x4c\x68\xdc\x0f\x41\xcd\x53\xc5\x35\x2d\xc3\x7d\xb6\xb2\xa2\x64\xe4\x18\xac\x84\xab\xbe\xcf\xd4\x80\xcd\xee\xc8\x6b\xfc\x06\x13\x3f\x87\x1c\x8e\xc0\x5b\xa4\xf2\x2b\xd8\x63\x3a\x78\x58\x3d\x62\xde\xd2\x29\x85\x33\xee\x62\xac\x93\x4a\xec\x37\xd4\x3f\x3f\x24\x79\x2f\x6f\xa9\x34\x79\xf1\x97\x03\xa7\x92\xfb\x57\x66\x79\xfb\x57\x32\x2a\xfa\x6d\xef\xd8\x2f\x5a\xf6\x6e\xe2\xc4\xb3\x10\xe1\x8b\x2a\x3f\x4b\x11\xcf\x52\x44\x77\xde\xbf\x2b\xa2\xe2\xb3\x28\xf1\x2c\x4a\x3c\x8b\x12\xbd\xa7\xf3\x2c\x4a\x1c\x52\x94\x58\xed\x0e\x5e\x76\x3a\x82\x6f\x32\x96\x43\xef\xa4\x16\x9e\x5d\x5d\x84\x83\xf7\x49\xab\xb1\x4d\x02\x5f\xe6\x7a\x29\x83\x4d\x32\xed\x6f\x27\x4f\x00\x38\x28\xdf\xa0\xbb\xb7\x47\x76\xde\x59\x08\xb8\x5a\x5a\x46\xe2\xac\xb8\x5b\xd0\x9f\x3b\x1e\x98\x9e\xbe\xcf\xdd\xbc\xe7\xa5\xf7\x97\xf8\xdd\x4f\xfc\x26\x9f\xdf\x6f\xba\x7d\x4a\x5b\x69\x63\xcb\xa9\x52\x34\x57\x28\xa7\xef\x2e\x18\x99\xe4\x4c\x28\x45\xc8\xe9\x00\xdc\xad\xc5\x88\x40\xee\x1f\x2d\xff\x4d\x23\x20\x7e\x30\x52\x13\x5e\xf1\x98\x08\xde\x83\x7a\x7c\x8f\xfd\x73\x3a\x69\x62\x2f\x0c\x8e\xef\x4e\x76\x26\xa1\xde\x1b\xf7\xbe\x52\x1f\x39\xf0\x0b\xaf\x64\x19\x26\x8d\xb6\xec\x4b\x35\x60\x57\xda\xba\xff\x79\xf3\x51\x1a\x6b\x06\xec\x42\x0b\x73\xa5\x2d\xfc\x73\x1f\x9e\xec\xa6\xb3\x23\x0f\x8c\x5b\x16\xc0\x35\xc3\x79\x44\x63\xe9\x3e\x1c\x19\x96\xbe\xed\x0e\x2a\x06\x54\x0b\xb7\x30\x09\xea\xf3\x15\x70\x45\x3c\x68\x69\xd8\xa5\x72\x4f\x2e\xed\x59\xa8\x5a\x6b\xa8\x8b\xb4\x38\x2d\xa4\xea\xaf\xec\x03\xb7\xda\xf5\x93\x6e\xf6\x86\xee\xa8\x2b\x48\x32\xc7\xbf\x50\x4e\x21\x2f\x44\xc9\xca\x16\x8b\xc8\x31\x4a\x56\x95\x05\x83\x54\x55\x06\x29\xac\xbf\x53\x7c\xc4\xea\x57\x24\x52\xc7\x60\x05\xd5\x3f\xf9\xd1\x10\x45\xa1\xe7\xf5\xb8\xd1\x4e\x6d\xdb\xa4\x7a\x66\x0d\x43\x68\x05\x54\xba\x38\x0d\xf6\xf8\x17\xc6\xc9\xbb\xae\xa1\x93\x56\xa0\x25\x49\xf6\x66\xc4\x40\xd0\xd7\x4a\xc4\x3f\x21\x8b\x21\x0c\xcd\xac\xaa\xe7\x7a\xff\x8f\x93\xcd\x9d\x6a\xb6\x3c\xe5\x55\xd3\xee\x36\x4f\xca\x1b\xf3\x30\x0f\xef\xa9\x93\x8a\xd4\x57\x8f\x55\xa1\x74\x99\x4a\x92\x58\x97\xf9\x66\x16\x57\xe0\xa9\xad\x6e\x44\x22\x12\xa5\x5f\x5b\xcd\x1e\x75\x73\x9f\x2a\xc8\x6e\x8a\x42\x95\x8e\x00\x6b\x6e\x67\x03\xe2\x43\x0f\xc2\xab\x0c\xf7\xed\x9d\xa8\x84\x7d\x91\xc9\x59\xdd\x7d\x75\x2b\x43\x45\x01\x7a\x86\x32\x8f\xb8\x8b\xe0\xb9\x24\x17\xcf\xed\xd1\x4f\x7e\x07\xf6\x52\x97\x7b\x78\x93\x70\xa8\x44\x32\x97\xc5\x8c\xdd\x4b\xa7\xde\x4c\x96\x66\xed\xb1\x22\xc8\x01\x18\x59\x6c\x70\x16\xbe\xbe\x55\xb7\x2a\x4c\x9a\x0d\xf7\x3e\xa7\x0f\xad\xb2\x72\x2e\xbc\x64\x3f\xcc\x3d\x47\xac\xc1\x3f\x07\xed\x25\x10\x65\xa7\x9b\x9f\x15\x1c\x82\x1b\x77\xc8\x94\x5e\xd1\xce\xaf\xe5\x13\x60\x1a\x6e\xbb\xde\xab\xa3\x56\x5b\x45\x72\xd4\x9a\x48\xd5\x52\xba\x03\x84\x2a\xdb\xf0\x70\xae\xc8\xeb\x87\x32\xdd\x66\x68\xf5\x30\x69\x2c\xbe\xef\x1a\x03\x56\x5f\xc8\x48\x73\xfe\xb7\x94\x39\x2e\xed\xc4\xd6\xd8\x56\x54\xaf\x37\x33\x27\xa7\x63\xcf\x74\x55\x1a\xaf\x70\x03\x3c\x2f\x68\x0b\x1e\x6a\xd5\xad\x12\xaf\x2f\x86\xe8\xdc\x2d\x1c\xbd\xfa\x6a\x38\xf8\x88\x90\x0a\x71\xe1\x3e\xc6\x52\xe5\xfe\x8a\x57\x50\xbf\x72\xc6\x15\x7b\xc7\x3f\xe2\x80\xd7\xf2\xbf\x04\xf6\xf2\x9c\xd1\xf1\x45\x67\x74\xac\x0a\x95\xef\x17\xf3\x12\xb3\xe6\xdd\x39\x67\x23\xef\x8f\xc7\x04\xd4\x15\x04\xe6\xc4\x48\x84\xc1\xf4\x6f\xb8\x63\xa0\x82\x64\x19\x40\x08\x43\x85\x07\x2a\xe8\xab\x76\x2e\x1a\x59\xb0\x62\xc6\x1b\x5e\x58\xd1\x98\x01\x7b\x31\x7c\x31\x60\x2f\xfe\xfe\xc2\xc9\x47\x2f\x46\x2f\x90\xc8\x8d\x68\x24\xaf\xe0\x84\xdc\x2a\xa2\x4e\x17\xaf\x07\xc8\xf1\x77\xdc\x88\xef\xbe\x65\x42\x15\xba\x04\x83\x61\x03\xb8\x66\x4b\xf9\x19\xbc\xb9\x93\xb6\xe1\xcd\x82\x1d\x53\x88\xed\x02\x84\x36\xfc\xe0\x04\x7b\xc4\xdc\x8e\x99\x68\x00\xf6\x0c\x43\x77\x80\x61\x7b\x8a\xb0\x5a\x57\x66\x24\x85\x9d\x8c\x74\x33\x3d\x9d\xd9\x79\x75\xda\x4c\x8a\x6f\xbf\xfb\xf6\x7f\x7c\x65\xd0\xba\x31\x5c\x03\x40\xb1\x29\xb2\x49\xce\xe7\xad\xe5\x77\x5b\xe5\x81\x4b\xdf\x0e\xa0\xa1\xdc\x63\xe9\xe8\x1e\xf0\x71\x05\xd4\xba\xa2\xe0\x5b\x58\x8c\xb1\xba\x49\xcc\x0a\xb8\x71\x45\x37\x6f\x84\x1d\xc3\xdb\x4b\xe1\xb9\x3e\x27\xc2\xd7\x2e\x9f\xeb\x12\xc2\x85\x4e\x62\x94\x6e\x3a\x28\x16\xd5\x72\x7c\xa6\xd3\x1e\x50\xa2\xd5\x82\xb0\xc3\x2f\x52\xf4\x2a\x25\xab\x7d\xec\xa2\xcf\xa9\x3a\x7f\x94\x54\x9d\x7f\xf8\xd4\x62\xd8\xae\x8b\xbd\x99\xf2\x9e\x6c\x37\x0e\x8b\xc1\x99\xbe\xb4\xf8\xc2\x91\xb5\xe3\x64\x77\x52\x71\xa8\x3c\x9e\x70\x48\xe5\xaf\x82\xe3\xa1\x23\x76\x09\xc6\x8f\x50\x02\x09\x2a\x92\x83\xa7\x03\xeb\xac\x4b\x05\x90\x17\x70\xa1\x27\xba\xc1\xf7\x56\x49\xa1\x0a\x31\x62\x67\xd5\x32\xd2\x1d\x6f\x04\x6a\x9e\x8e\xcd\xd0\x13\x5c\x46\xe1\x43\x2b\xec\x7d\x00\xb8\x68\xee\x3f\x41\x6d\x55\x0b\x26\x3e\x22\xaa\x62\x78\x7d\x81\xe5\xc7\x15\xe2\xf7\xd2\x30\x25\x1e\x44\x40\x36\x79\x9c\x09\x04\x51\x87\x15\xf9\x8b\x78\x36\xbe\xec\x1b\x88\xbc\x9b\x6a\x00\x71\xd2\xe0\x17\x2a\x64\x25\x01\x18\xbf\x6e\xf4\xb4\xe1\xf3\x39\xb7\xb2\x60\x33\xae\xca\xca\x4d\x05\x35\x85\xf0\x04\x1e\x28\xaa\x6b\xb5\x74\x7c\xc0\x9c\x2e\x12\x4c\xb3\xbf\x3d\x35\x91\x0b\xfb\x7c\xa3\x1e\xb6\x7b\x83\xf3\x96\x64\x00\x82\x30\x3a\xdc\x4b\xab\x59\x4d\x45\x27\x88\xe1\x3e\xc8\x46\x2b\x30\xe1\x3d\xf0\x46\xba\x77\xd0\x80\x31\x7c\xe4\x94\xae\x1b\xd2\x8f\xc0\x4a\x46\xd2\x82\xe5\xcd\x54\x58\xea\xf0\x85\x49\x05\x63\x50\xe5\x02\xbf\x47\xc5\x55\x2c\x86\xf8\x64\xd4\x5c\x36\x50\x5a\x7f\xe5\x98\x3d\xc4\x65\xb5\xdd\x1e\x76\x95\xd8\xc2\xc8\xef\x66\x0f\x8c\xe1\x08\x81\xfa\xa7\x5f\xc1\xff\xec\xce\xfa\x3d\x9a\xcf\x36\xf8\x7e\xe4\x42\x99\x4f\x8b\x4e\xd0\x2b\x1f\xa4\xf9\xf6\x7d\xf5\x9f\x6c\x42\x86\xd1\xff\x2a\x16\x3d\xdc\x09\x4b\x6d\x13\x3a\x74\x42\x2c\xa8\x60\xd8\xa8\xc7\xb1\x23\xd0\xdc\x36\x2b\x28\xf5\x9b\x88\xb3\x01\xe3\x07\xb8\xda\x88\x25\xe6\x96\x07\xb0\x30\x50\xbb\x7b\xb1\x8f\xc3\xfe\x99\x18\xdd\xde\x01\xd0\xb1\x89\x9a\xc9\x01\xe8\x72\xb5\xe9\xc3\x11\xc1\x01\x0c\x9b\x8d\xb0\x5b\xa0\x1b\x62\xa3\x3c\x95\xbf\x37\xb9\x3e\x2b\xf5\xff\x70\x30\x0d\xc4\x08\xf6\xc5\x67\xc8\xf3\x32\xcc\x0a\x01\xe0\xc9\x2e\x45\xec\x73\xad\x54\xfb\x8c\xca\xf0\x4f\xa4\xea\x3d\xa3\x32\xe0\xef\x9f\x56\x82\x3f\x3c\x1c\x03\xf6\x3b\x6e\xf4\x7f\xa2\x4d\x6b\x93\xcf\xbd\xe4\x35\xba\xa5\x91\x33\x81\x1e\x08\x4e\x8f\xff\x04\xa4\x6c\x8a\x51\xd9\x5b\x44\x47\xf7\x14\xc5\x6e\x80\xeb\xa4\xdb\xb5\x93\xd3\x21\x6a\x93\x72\xed\x49\x94\x5f\x65\x0d\xa7\xc2\x8e\xe0\x01\x01\x41\x64\xc4\xae\xb4\x0d\x5e\x68\x0c\x57\x93\x25\x56\x11\xae\xbc\x53\x1d\xd6\x95\x85\xda\x84\xea\x0a\x88\x38\x81\x2e\x98\xb9\x2e\xfb\xa4\x60\xf7\x62\xfc\x59\x8d\xf8\x01\x26\x39\xe7\xea\xc9\x8a\xd5\xe5\xf2\x5b\x21\x4a\x2f\xfa\xc4\x8d\xf4\x3b\x17\xb4\xf5\xb8\x85\xe4\x93\x7a\x9c\x69\x43\x8e\x7a\x4a\x11\x76\x12\x93\x7b\x6b\xe9\xe4\xfc\xcf\x94\x18\x78\x39\xe9\x26\xee\xbb\x6b\x2c\x4a\x3c\x82\x0d\x23\x47\x70\x82\x9a\xdb\x99\x19\x50\x19\x85\xa5\xaf\x89\xa1\x12\x11\xc0\x80\x28\x9a\x4b\x93\xf4\x81\x7e\xbb\x10\x6c\x88\x4a\x5d\x66\xfa\x1c\xa4\xeb\x35\xc2\xb6\x35\xf6\x2f\x9a\x46\x37\x6e\x60\x61\x7c\xc1\x8a\x39\x6f\xee\x45\x19\xe0\x4c\x47\x6c\xec\x66\x18\xc4\xc6\xe0\xf0\xf4\x12\x88\x1b\x93\x0c\xe2\x30\xc8\x8b\xd1\xe8\x05\x16\x9f\x77\xfa\x84\xe5\x8d\xc5\x98\x2d\xf7\xfb\x81\x23\x78\xfe\x2a\x16\x37\xda\x4d\xef\x49\x2f\xee\xb3\x86\xf0\x89\x34\x84\xbd\xc4\xfe\x18\xb5\xbb\x4d\xf6\x0f\x2d\xf3\x38\x7a\x5a\x4f\xf8\x2b\x18\xfe\x66\x60\xce\xd0\xed\x74\x96\x06\xea\x3a\x1e\xd7\x08\xdb\x48\xf1\x20\x22\x0b\x07\x1b\xdd\x0e\x98\xab\x7d\xe9\x47\x1a\xd6\x2a\xf9\x5b\x8b\x0c\x14\xb8\x79\x18\x05\x67\xe2\xd7\x13\xf8\x6e\x48\xc2\xde\x4f\xef\xc5\x05\x6c\x9f\x1a\x4e\x21\x2f\x58\xcb\x8b\x30\x4f\x64\x2f\x89\xc6\x0e\x0c\xd2\x53\x09\xae\xe9\xb3\x65\x73\xc2\x0c\x7a\xe6\x5c\x84\xe7\xf9\x3a\x7b\x9e\x0f\xfe\x28\x1f\xe2\x29\xbe\x4e\x5f\x5a\xe3\x33\x2f\x98\x7e\x54\xa2\x81\x20\x37\xcc\x23\x07\x63\x9c\x63\xbd\x21\x1d\x59\x40\xae\xad\x54\xd3\x1e\xcf\x2f\xbd\xd6\x3d\xc2\xb5\xdf\x13\x43\x79\x0d\x2f\x3b\xbb\x73\xbc\xa1\x25\x93\xb0\x11\x96\xd5\xa2\x99\x4b\x0c\xfa\x64\x5a\x85\x30\x5e\x5c\xff\x5d\xa8\xd9\x92\xc4\xce\x28\xa6\x0b\xeb\x15\xd8\x50\x4c\xe8\xe5\xcb\x97\x2f\x61\x3d\x2f\xff\xf2\x97\xbf\x30\x88\x02\x2f\x45\x21\xe7\xcb\x0d\xa1\xd5\x9f\x5f\xbd\x1a\xb1\x7f\x3b\x7b\xf7\x13\xe3\x05\x70\x55\x04\x02\xc2\x9e\x5d\x83\xec\x63\x33\x60\xff\xeb\xfa\xfd\x95\x8f\x7f\x34\x9d\xbf\x82\x99\x3f\x2c\xaf\x53\xeb\xe9\xbb\x6f\xbf\x1d\xb1\x0b\xd9\x80\x5d\x4c\x92\xad\x95\x4e\x12\x5e\x37\xde\x08\x78\xfb\xf8\x64\x82\x8f\xbb\xaf\x67\x43\x51\x53\x14\xc0\x36\x97\xd3\x19\x6c\x00\xe0\x1d\xa9\x49\x25\x0b\x7a\x10\x31\x83\xc0\x87\xcf\x60\xae\x34\xf4\x15\x69\xc3\x4d\x6e\x80\x70\x4c\x13\xf3\x83\x13\x87\x07\x1e\xf2\xdc\xf1\x06\x27\x78\x91\xef\x11\x3b\x8b\x67\x95\x45\x64\x31\x76\x10\xbc\xfd\x67\xe1\xed\x59\x78\x63\x1b\xa9\xe1\xf3\x0b\x6f\x87\x14\x7c\xcc\xbe\x92\xcf\x52\x4e\x40\x8f\x88\xe0\x54\xa4\x8c\xa2\x87\xc5\x5a\x27\x2f\x4c\x2e\x1a\xb4\x6b\xcc\x27\x9b\xc4\x4d\xca\xfc\x38\xa5\x17\xe5\xab\x55\xf6\xae\x4f\xf9\x4c\xb7\x8d\xb4\x8b\x73\x77\xf3\x3e\x6e\xb1\xe3\xa6\x2d\x63\x20\x18\xfc\xca\x32\x9b\x5d\x5e\xb3\x2a\x01\x22\x49\x20\x61\x46\xec\x5a\xcf\x29\x30\x03\x7d\xb4\xc9\x9d\x82\xc7\xa2\x3b\xa2\xbb\x0b\x63\x5d\x76\x7e\x1e\x31\xf6\xeb\x4c\xd0\x27\xae\x1b\x23\xf2\x98\x65\xa9\x96\x7a\xb2\xfc\x5e\x24\x05\xb1\xfa\x18\xa1\xab\x4a\x3f\x8e\x1b\xf9\x20\x2b\x31\x15\x6f\x4c\xc1\xab\x3e\x25\x66\xce\xd6\x7c\xe6\xab\xad\xc4\x24\x2b\xb0\x18\x14\x8e\x41\xb8\x87\x62\xea\xee\xf9\x5c\xc3\xa6\xd0\xc7\x14\x18\xe7\xae\x40\xcd\x01\x0d\x8b\x3e\xa0\xf7\xcb\x51\x3b\x2b\xe1\x1d\xac\x16\xb1\x7f\x39\xa1\xe8\xcd\xbf\x2b\xf1\xf8\x77\xd7\x9b\x61\x93\x8a\x4f\xc3\xe9\x40\x38\xbe\xea\x04\x6e\x86\xae\xd7\x2e\xc0\xb1\xe8\xa6\x15\x8c\x57\x8f\x7c\x61\xd0\xe9\x9d\xf7\x21\xcd\x6b\xf6\xea\x84\x35\x2d\x14\x59\x0c\x7d\x94\xec\xeb\x13\x10\xf3\xcf\xcf\xc6\x7f\xbf\xfe\xb7\xeb\xbf\x9f\x5d\xbc\xbb\xbc\xda\xe3\x06\x17\xbc\xe6\x77\xb2\x92\x2b\xe2\x17\xfa\x33\xb7\xf3\xb4\x93\x4d\xf6\x3f\x10\x40\x93\xc6\x40\xcd\x65\x79\x5a\x36\xba\x26\x97\x7f\xab\x94\x13\x27\x23\x6c\x50\x2e\xa9\xa4\x56\x18\xca\x81\xc8\x3a\x9c\x36\x3c\x4d\xfd\x59\x8a\xa2\x5d\x93\x79\x18\x08\x64\x9b\x35\xfa\x43\xab\xd2\xd3\x51\x91\xb4\x4a\xb4\x0a\xb1\x31\x9e\x3a\xde\x99\xe4\xaf\x71\x45\x70\xc1\x5c\x13\x65\x25\xaf\xaa\x05\x73\x02\xdb\x03\xaf\xc0\x39\xad\x59\xa3\x75\x20\xa6\x99\x36\x36\xdf\x00\xc8\x5d\xdc\x27\xaa\xca\x51\x23\xe4\xaa\x6e\x59\x61\x68\xc7\x4a\xa1\xb4\xcf\x7a\xb1\x54\x2f\xdd\xfd\x15\x33\xa9\x89\x53\xa7\xa9\xbc\xe1\xc4\x6e\x92\x53\x92\xc6\xcf\x7f\x1c\x7a\x46\x29\xa0\x35\x01\xa2\x6d\x4d\xac\x33\x0a\xad\x8d\xe0\x25\x04\xad\x80\x00\x42\xaf\xb9\xb9\xf7\x12\x09\x5d\xdd\x20\xf6\xba\x1e\xc3\x50\x80\x20\x34\x11\xdc\xb6\x8d\xc0\x2b\x8b\xb8\x4e\x98\x39\xba\x4f\xce\xa4\xcf\x36\xfe\xa0\xb5\x8d\x59\xe6\x5b\x36\xf5\xd7\xf0\x12\xcb\xb4\xd0\xcf\x0c\xe4\x39\xd7\x23\x46\xe5\xc0\xd1\xc7\xb4\xf4\x2c\xdb\x73\xef\x83\x6f\x5a\x75\x86\xe2\x74\x0f\x87\xf5\x0f\x97\x17\x40\x83\xad\x22\x77\x88\x6d\x16\xe8\x10\x89\x45\xfb\xbb\xec\xed\x67\x77\x8e\xdd\x28\x75\x09\xa2\xb1\x70\x3a\x11\x5f\x20\x00\xab\x0f\xfa\x57\xab\x1f\xa0\xcb\x89\xff\xf3\x0e\x0f\x57\xf2\x48\xe5\x18\xa8\xab\x5e\x2b\xb3\xf2\xb9\x62\x4b\xfa\xc2\x7e\x85\xc5\xdc\x36\x5f\x69\xe5\xe8\xa2\x77\x76\x70\xc8\x89\x8a\xdb\x0a\x52\x19\xf1\x7b\x0e\xd1\x5e\x40\x15\xad\x71\xaf\xfd\xe5\x24\x09\xc7\xfc\x2b\x66\x5f\xe0\x23\x04\xc1\x03\x3e\x7e\x46\xce\xf9\x54\x30\x6e\xc3\xa9\x40\xae\xb4\x69\x1b\xb2\x7f\x4b\xcb\x4a\x2d\x50\x08\xa7\xa1\x7e\xbe\xbc\x60\x2f\xd9\xb1\x1b\x0b\x0b\x4d\x4d\xb8\x04\xb3\x38\xca\xc5\x9d\x57\x69\xe2\xbb\x80\x29\xc1\x41\x3b\xd1\x12\x68\x74\xc0\x94\x66\xa6\x2d\x66\x7e\x4e\x21\xf5\xdb\xa9\x07\xa2\x71\x5b\x0d\x70\x83\xff\x08\x74\xd1\xff\x86\xfd\xbc\x1d\x3e\xcc\x5d\xb0\x9f\xf7\xb8\x60\x29\xff\x87\x94\xfc\x6c\x45\x78\xd8\x21\x9c\x57\x4e\xf2\x0a\xc5\xff\x10\xdb\xfc\xf4\xeb\x67\xc4\x1a\xd4\x3f\xb6\x9b\x4f\x3b\x07\x0f\xdc\x26\xcc\x78\xbb\x54\xe1\x97\xb9\x11\x34\xd0\x5f\x96\x5c\x0f\x5f\x7e\xfd\xe0\xb2\x38\x61\xd9\x31\x09\xf7\x40\x70\x55\xea\xf9\xd2\x60\x01\x13\x37\x19\xe0\x8b\x3d\xee\x75\xfa\xe3\xea\xa4\xbe\x1d\x0f\x2d\xef\x66\xdb\xa1\xf9\x54\xaf\x60\x8c\x42\x41\xc6\x5b\xb4\xf2\xe3\xea\x36\x46\x1d\xcb\x47\xd5\x5a\xdc\x3d\x52\x64\xd9\x6d\xfb\xf2\xe5\xd7\xdf\x25\x27\x0a\x78\x8e\xdd\x63\xf6\x5d\xe9\x07\xd1\x34\xb2\x14\xe1\x73\xfa\xc3\x9a\xcd\x7a\x94\xaa\xd4\x8f\xe6\xa9\x14\xfe\x2b\x76\xd3\x39\xb1\xbe\x04\x4f\x5f\x87\xaa\xf9\x21\x6b\x32\x53\x50\xab\x2a\x13\x07\x57\x51\xbd\xdf\x84\x10\x79\xb1\x4c\x6d\xe1\xd1\xc0\xfc\xb6\xdf\x8f\x62\x9f\x6e\x1f\x68\x1e\xe4\x16\x1f\x0f\xb4\xc0\x38\x17\x84\xb8\xe6\x77\xc6\x36\x3c\x20\xae\x1b\x3d\xb1\x8f\xa8\x99\x63\xd3\x63\xb8\xfe\x1f\xf9\xbc\xae\xc4\x80\xcd\x17\xe6\xb7\xea\xc4\xe7\xe0\x50\xa4\x32\x64\xbc\x31\xb0\xac\xa7\xad\xd9\x37\xdf\xbc\xfc\xee\x24\xca\x1e\x75\xa3\x3f\x2e\xd0\x1c\x08\xf6\xed\x68\x75\xcd\x33\xe7\x4b\x61\x45\x33\x07\xaf\x09\x0a\xf0\x50\xd8\x16\x99\x95\x32\x8f\xa2\x89\x11\x32\x14\x68\xdb\x80\x0f\x2a\x8c\xf1\x1c\xa7\xf6\x45\xc7\xa9\x3d\x07\x63\xfd\x51\x82\xb1\xfe\xe1\xf3\x6e\x9e\x52\xd2\x8f\x78\xe9\xee\xc5\xfc\xee\xc4\x8c\x3f\x48\x8d\xb5\xe2\x3d\x9f\xfd\xc7\x2d\xea\xe7\xf7\x61\x7b\x39\xbf\x77\xab\x2b\x72\xc7\x92\xfd\xf8\x16\xd0\x7e\x8c\x29\x53\x23\xe2\xeb\x90\xb1\xe2\x83\xb7\x63\x7c\x72\xea\xf9\x82\x6b\xfd\xf9\xb7\xfe\xc0\x41\x7a\xd0\xe9\x59\x51\x74\x0c\x78\x6b\xe4\x08\x6a\xc8\xee\x1c\x47\x62\x56\x4f\xc1\xfa\xf4\x9a\xfd\x89\xa4\x8b\x01\x6b\x55\x29\x1a\x63\xb5\x86\x53\x74\x4a\x25\x79\xf6\x6a\xd1\xcc\x78\x0d\x5e\xed\x5a\x34\xb2\x9e\x89\x86\x57\x74\xc4\x66\x80\xd0\x65\x8a\x02\xe7\xec\x02\x7a\xac\x1b\xa9\x0a\x59\x73\x82\xc0\x26\x1f\x2d\x6f\xed\x0c\xa3\xeb\x1c\xa9\x00\xac\x4e\x6b\x67\xba\x81\xc7\xf0\x4f\x11\xc2\x06\x3d\x35\xe6\x59\x34\xf8\x92\x45\x03\xde\x5a\x0d\x56\xdf\x9c\xc0\x6e\xf4\xbd\xd8\x7a\x1a\x1b\x3e\xcd\xd0\x38\xd0\x42\x0a\x32\xa5\xf7\x02\x40\xe4\x08\x04\x19\xa0\xcc\xcb\x89\xae\xe9\x30\x66\x1c\x9c\xbb\x00\x72\x69\xa1\x3f\x98\x27\x87\x90\xce\x6a\x81\x76\x6a\x27\x0c\x9c\x53\xd8\x00\x2a\x5c\xa5\x6b\x68\x83\xd6\x05\x3a\xda\x3e\x66\x1f\x30\xbc\x8c\xdb\xaa\xba\x26\x12\xde\x96\xd1\x9d\x37\xcf\xa3\xfd\x73\x3c\x46\xe3\x9b\xa0\x95\xc8\xf0\xb9\x58\xf2\x91\xc2\x5d\xac\xdb\xaa\xf2\x99\x96\x30\x1f\x74\x3b\xb8\x4d\x24\xe4\x2a\x1f\x66\x05\x1b\x99\x9f\xc1\x88\x2d\xcd\xc9\x69\x18\x25\x68\x10\x94\xa1\xc4\xfc\x5f\xee\x44\xc1\xdd\xa8\xfe\xdf\x21\x0d\xbc\x55\x09\xa4\x5d\xad\xcb\x01\x94\xc5\x5a\xd9\x33\x18\xb9\x79\x51\x60\xbd\x2c\x7a\x3e\x08\x44\x66\x9f\x04\x07\x5f\x59\x02\x57\x7e\xfa\x55\x4c\x93\x1d\xc2\x4f\x6e\x77\x68\x2b\x87\x5a\x0d\xf9\xb0\xd6\xe5\x61\xfd\xfa\x2b\x11\x38\x9f\xe2\xe2\x7f\x16\xc2\x9f\x85\xf0\x2f\x44\x08\xef\xc5\xd5\x12\x66\xe6\x83\x8a\x92\x57\xdd\x17\x17\x22\xc3\x68\x4b\xd7\x3e\x63\xf2\x3e\x7e\x70\x05\x7b\xfa\xe2\x52\x9e\xf6\xbc\xe9\xd9\x9f\x32\xc9\x13\x60\xdc\x86\x90\x58\x3f\xc4\x94\x52\x8c\xb0\xdd\xf6\x05\xc1\xc1\xc1\x07\xf0\xf5\x17\x28\x03\x7b\x71\xf5\x13\x8a\xc2\x5b\xd3\x26\xbb\x8d\xbb\xe9\x93\x99\xb8\x4c\xd1\xe9\xcf\xa2\xe8\x97\x2c\x8a\xf6\x89\xcb\xfc\x69\xe5\xf9\xf6\xce\xa1\xb4\xdc\xdc\x47\x6e\x22\x9c\xd4\x10\xeb\x58\x25\xbf\x93\x58\x3a\x24\xb1\xf4\xc0\xb5\xaf\x3b\xb7\xe8\x59\xa8\x78\x16\x2a\x9e\xd3\x2c\x3f\xef\xd3\xf5\x29\xd2\x2d\x97\x94\xe0\x5e\xb9\x97\x1b\xbf\xeb\x94\xd6\x08\x31\xdc\x5d\xb5\x19\x75\x64\x4a\x08\xc1\xa8\xa9\x3a\x76\x42\x0a\x9d\xcf\x7b\x90\xca\xb8\xd7\x85\xaf\xe9\x25\xc4\x87\x7b\x59\x0e\x3c\xd7\x49\x49\x0d\xa7\x9d\x3a\x7d\x91\x4f\xb9\x54\xc6\x3a\x25\xdd\xb0\xe3\xbf\x86\x53\x03\xad\x1d\xf9\x04\xd3\x4d\xac\x51\x78\xd2\xc7\x4b\xd4\x96\xb2\x93\x35\xb5\x6a\xd3\xce\xa8\x99\x17\x4e\xdd\x43\xa8\xc0\x6f\xeb\xff\xe0\x93\x60\xdc\x92\x46\xec\xcc\xbd\xa5\xb2\x06\x6e\x04\x36\x60\x5c\x2a\x44\xe4\xa0\xc5\x6b\xb2\x60\xd2\x1a\x51\x4d\x30\x50\x3c\x58\xc2\x26\xb2\x1b\x95\x01\x40\x74\xab\x86\x19\xc4\x82\x0a\x50\x92\x91\x5e\x73\x7a\x8c\x93\xd9\xdc\xa4\x3d\x94\x9d\x18\xc8\x64\x58\xea\xdc\xb1\x09\xd8\xcd\x3d\x62\xda\xc4\xc7\x5a\xa2\xd4\x7c\x2d\x0a\xed\xee\xef\xe6\x8d\x7d\xd3\x6d\xef\x77\x98\x78\x37\x02\x17\x07\x19\x06\xe2\x80\xa4\x5d\x74\x4c\xc9\x39\x45\x8d\xd8\x99\x89\xcb\x67\xbc\xae\x1b\xcd\xa1\x20\x74\x9c\xdd\x20\x35\x18\xf8\x1c\x81\xba\x6a\xa7\x92\x22\x8c\xe0\x1b\x2b\x1f\x04\x04\xd3\x59\x1f\x0f\xb5\x66\xc0\x9b\xa4\x33\xf8\x9c\x62\x9d\x1a\x00\xda\x82\x50\xcc\xd0\x05\x51\xfd\x24\xfd\x87\x61\xba\x2a\xe1\x6d\xe3\x8a\xfd\x8f\x97\xac\x16\x4d\x41\xb4\x03\xb5\xe8\x29\xf2\xaa\x92\x0f\x02\x02\xef\xd7\x7f\xfc\xf5\xb7\x6c\xa6\xdb\xc6\x8c\xd2\x50\x9f\x57\xf0\x1b\x8a\x6b\x3e\xaf\xc8\xb2\x4a\x70\x63\xd9\xab\x97\x6c\x2e\x55\x6b\x97\x70\xe2\x9f\x1e\x49\x53\x73\x3b\xdb\x72\xfe\x63\x6e\x67\xfe\xc8\x21\x7f\xa2\x0b\x0c\x8c\x11\xa2\x59\x5c\x13\x64\xad\x58\xed\x39\x4e\xba\x15\xaa\x3f\x00\x78\xcf\xd7\xa4\x4e\x32\x2d\x9e\x80\xcc\x02\x54\xd3\x4f\xc7\x00\x91\x13\xc3\xf9\x53\x08\x0f\xf8\xdb\x33\xea\xea\x1f\x47\xa5\xf0\x47\xfa\x49\x64\xfd\x67\x21\xff\x59\xc8\x7f\x16\xf2\x3f\x97\x90\xff\xc9\xa4\xfb\xb1\x6e\x7a\xbc\x18\xae\x55\x04\x57\x4e\x13\xf5\xb5\xf2\x6c\xe6\x85\x81\xf0\xad\x5e\xef\x47\x3d\x6e\xb4\xd5\x45\xaf\x52\x4e\x10\xac\x47\x35\xb2\x6a\xfa\x8c\x32\x39\x24\x0d\x89\xfa\x81\x47\x08\x25\x18\x52\x4f\x73\x89\x18\x8f\xc5\x8f\xcd\x42\x59\xfe\x71\xc4\x7e\x56\xc3\xba\x11\x13\xf9\x51\x94\xe8\xb0\x02\xbf\x8f\x63\x19\x10\x52\xe0\x86\xb8\x3c\xbb\x3a\x8b\x3d\x79\xd1\x0c\x1b\x1f\x73\xe3\xa4\x28\xf6\xe1\xed\xf9\xf0\xbb\x6f\xbe\xf9\x33\x3c\x2c\x8e\x8c\x5f\x9f\x9e\x3e\x3e\x3e\x8e\x24\x57\x1c\xe0\x98\xb9\x31\x72\x0a\x60\x8d\xe6\xd4\x9b\x61\xa0\x8b\x93\x11\xbb\x02\xac\x67\xea\xdf\xaf\x2e\xbc\x71\x4e\x27\xe9\x4c\x11\x82\xd5\xb9\x61\xf3\x45\xa1\xe7\x35\x57\x8b\x51\xa1\xe7\xa7\xf3\xc5\xb0\x68\x8d\xd5\xf3\xa1\xef\x83\xf6\x04\xc1\xa8\x45\xc8\xe7\xf5\x75\x9b\xa6\x2d\x6f\xca\xe8\xd7\xf2\x2a\x5b\x3c\x98\x90\x88\x32\x85\xb8\x5e\x55\xfa\x34\x94\x34\x87\xfc\x93\x80\xfe\xe5\x15\x59\xe8\x88\xd3\x24\xef\x10\xdd\x81\x69\xdc\x01\x93\xf0\xe2\xea\xfa\xef\x3f\x9d\x7d\xff\xe6\x27\x44\x85\x75\x9f\x99\x88\xe8\x90\x84\xda\xe0\x37\xe0\x91\x25\xdc\x07\x4a\xf5\x87\xbc\x42\x88\x4b\x2c\x45\xe3\x1f\x18\xff\x34\x18\xaa\x85\x46\x1d\x0d\x70\x72\xd0\x15\x54\x5b\xc2\x34\x5d\xd7\xd3\x0b\x0f\x14\x8b\xf3\x7d\x43\x1d\x8c\x81\x54\x7d\xfe\xbe\x13\xb1\xb5\x2f\xde\x91\x5e\x33\x69\x42\x4d\x06\xc8\xac\x8a\x3e\xe5\x7d\xf6\x5b\x97\xdd\x2b\xbe\x6e\xcf\x11\xd5\x40\x61\x98\x36\x14\x7f\xd0\x11\x61\x22\x71\x6c\x63\xe9\x7e\x6d\x20\x43\x5a\xa8\x50\x15\xe3\x8a\x86\x72\xea\xc3\x4f\x9a\x97\xdf\xf3\x8a\xab\x02\x02\xbd\x7f\x36\x2d\x38\xb9\xf1\x26\x2c\x47\xe3\x40\xfe\x35\xbe\xef\x69\x06\xf6\x80\x49\x35\x6c\xb8\x9a\x92\xd4\xe6\x1e\x5e\xa9\xe0\x56\xc8\x3c\xe2\x76\x90\x28\xa9\x36\x54\xb9\xc9\xeb\xf8\xb1\x80\x15\x1e\xfb\xe7\x9e\xb8\x28\x71\x95\xe2\xd8\x4b\xd4\x7f\xa2\x97\x27\x66\x6c\x69\x25\xb0\x27\x1b\x59\x4e\x27\x6b\x5c\x10\xea\x02\x16\xc3\xf1\x3d\xe0\x4e\x86\x54\x16\x25\xdc\x28\x76\x40\x4d\xf3\x99\x26\xec\xcc\x4f\xed\x51\xd6\xbe\x73\x10\x3c\xf2\xce\xad\x66\x4a\xb3\x4a\xab\xa9\x68\x7c\xd7\xec\x58\x8c\xa6\x23\x56\xcc\xb8\x9a\x02\x2d\x43\x7a\x99\x13\x78\xc2\x49\x59\xcd\xce\xab\xd6\x58\xd1\x5c\x8e\x4f\x76\xcf\x63\x26\xf1\x72\xa8\x84\x25\xe4\x1c\xff\xdb\x29\xbc\xbd\x43\x47\x45\x6e\x83\x0f\x8d\x77\x50\xef\x40\xd1\x59\x66\xb2\x27\xdc\x88\x08\xb1\xea\x62\x1d\x60\x82\xfd\x9f\xb7\xcb\xf1\xda\x57\xed\x1a\xa1\x46\x0c\xbb\x3d\xba\x39\x1f\x63\xdd\xd6\x9f\x2f\xe0\x3f\xdc\x75\xb8\x3d\xba\x3e\xbf\x19\x77\x8a\xb8\xde\x9c\x8f\xf7\xa9\x48\x03\xc8\x2a\xab\x18\xc5\x6e\xa2\x61\x6b\x65\x35\x72\xbc\xd2\x36\xa3\x4b\x65\xdf\x37\xd7\x38\xe8\x26\xe1\xf0\xaa\x9d\xdf\xa1\x5d\x2d\xad\xc3\x55\x13\x7d\x62\x04\x86\xcf\x31\xc5\x60\x11\x98\x6c\xc2\x45\xfc\x7b\x40\x3d\xf9\x17\x81\xd8\x2f\x30\x10\xf6\xca\x75\xf6\xdd\x9f\xff\xfc\xcd\x9f\x47\xec\x2a\x45\xc9\xe1\x0a\x5e\xf9\xbf\x5f\xff\x72\xfe\xf7\xab\xb3\x77\x6f\xb2\x1a\xa1\x3c\x54\x6e\x48\x18\x4e\xa5\xf5\xbd\x28\x59\x5b\x53\xda\x1b\x84\xc0\xc3\x7c\x69\x44\xc2\xa9\x19\x03\x5c\x40\x92\x23\xe5\xce\x72\xa9\x04\x69\x27\xd7\x00\xb9\x20\x6d\xc2\x0b\xf7\xc9\x8b\xc8\x65\xc0\xde\x79\x9c\xc6\xb4\xcd\x79\x7d\x92\xf1\x0b\xd7\xf1\x54\x41\x89\x85\x09\xc0\x06\xe3\x1d\x45\x1b\x60\xe1\x2f\xfb\xbf\x5e\x69\x45\x4c\x35\x96\xdc\xd1\x73\x69\x2d\x96\xf2\x34\xc2\x32\xf1\x5b\x8b\x60\x73\xdd\x99\x1c\x96\x51\x20\x59\xa9\xe9\x90\x7b\x1f\xd5\x1e\x26\x14\x47\xb8\x07\x32\xa1\x5c\xe7\xf1\xbc\x6b\x04\x62\x0a\xc8\xc5\x5a\x1c\x68\xd5\xe0\x16\x75\x14\x9f\x2a\xc9\x31\xff\x0d\x01\x78\x80\x82\xf9\x32\xbf\xd9\x88\x3f\xe0\x9e\xa2\xf4\x25\xf5\x7c\x7b\x9b\xfe\xbf\xf1\xdb\x60\x89\x91\x13\x16\x7f\x0c\x2f\x60\x16\x94\x16\xdf\xc3\x65\x5a\x82\xe7\xa4\xf3\xce\x67\xc5\xa4\x6d\xd3\x0a\xc7\x9c\x2e\x6d\x52\x8c\xcc\xd1\xd3\xed\x11\xe4\x5e\xde\x1e\x79\x2b\x23\x91\x25\xab\x34\x2f\x87\x77\xd4\x5d\x92\xf5\x29\x40\x4a\x8a\xb3\x1d\xb1\xcd\x2b\x74\xc3\xa5\xa5\xbb\x7a\x4c\x1e\xae\x82\xdf\x84\xa2\x12\xbc\xf1\x42\x80\x08\x02\x0e\xbc\xa4\x94\x35\xa4\x16\x04\xec\xe3\xeb\x1f\xa5\x17\x10\x4a\xca\x0c\x21\x56\x0f\xfa\x95\x06\xa7\x33\xd3\x78\x31\xef\x16\xcc\x90\x3d\x02\x28\x05\x25\xeb\x54\x10\xff\xe9\x7b\xbf\x9a\x73\xc4\x75\xf0\xe2\xf8\x3e\xb1\x7f\xe1\xd6\x6f\x21\x9b\xd0\xce\x9b\x4b\x2f\xc7\xdd\x52\xdd\xc1\x38\xad\x88\x1f\x75\xe4\x3a\xcc\xfe\xab\xb0\xdc\x20\x57\xe1\xf3\x4c\x42\x9a\x73\x05\x9f\x0d\x80\x59\x91\x84\x17\xd4\x29\x72\xc9\x64\xf1\x31\x27\x03\x3f\x62\x14\x01\x33\x96\x1c\x09\x35\x14\x88\x86\x89\xfe\x4b\x22\x17\x06\x41\xab\xb3\x96\xd5\x72\x97\xc7\xe0\x71\xe4\xe0\xcf\x9d\x72\x84\xd0\xf0\x63\x3c\xbe\x4f\x20\x91\xe4\xfc\x21\xa7\x11\xb0\x21\x22\xcd\xbc\xf9\x88\x76\x48\x78\x7d\x8e\x51\x1c\x4c\x80\x00\xc2\xc8\x18\x7e\x74\x57\x71\x75\x7f\xc2\x08\xb0\x20\xef\x3f\xef\x1a\x44\xba\xbc\xf3\x00\x0d\x57\x70\x23\xd2\xbe\xe1\x66\x90\x02\x42\xf7\x23\x11\x86\x4d\xe0\x68\x8c\xdf\xe9\x07\x71\x32\x62\x54\x4a\x2e\x29\xac\x71\x7b\xe4\xde\x0e\x27\x83\x40\x35\x48\x6f\x9d\x3b\xbe\x3d\xba\x3d\x3a\x19\x20\x50\x18\xa2\xc3\x47\xf2\x19\xb1\x6b\x2a\x45\x0e\x73\x01\x1e\x80\xbd\xb0\x39\xe4\xb2\x71\x76\x7b\x34\x13\xbc\x84\x0d\xa5\x83\xb9\x3d\x62\xc7\x4a\xb3\x07\xd9\x58\xf7\x10\x5d\x8e\x4f\x06\x11\x92\xa9\x35\x62\xd2\x56\x28\x0f\x23\x06\x4a\x34\xe1\x15\x5a\x29\xf4\x13\x06\x98\x99\x89\x68\x1a\x8a\xec\x86\xec\x2e\xa8\x8a\xee\xb9\x0b\xbe\x28\x23\x86\xb5\x14\x63\xa1\x4f\xd8\x75\x13\x25\xe4\x41\xe0\x40\x48\x8e\x39\xf3\xdb\x43\x25\xd0\x54\x52\x30\x3d\xbc\xc3\x29\x04\x4b\x5d\x1f\xf6\xdd\xa6\x73\x19\xca\xda\x60\x7a\x03\x59\x36\xdc\xfe\x2e\x61\xab\xf4\x91\x41\x03\xfb\xd9\xf6\xbc\x85\x03\xe9\x84\x25\x47\x7a\x13\x26\xb2\x24\x60\x08\x51\xd4\xa7\xaa\xb9\x8d\xd8\xc4\xbc\x9e\xb9\xd7\x13\xb9\x17\xb0\x86\x3f\x0e\xf7\x7a\x66\x5f\x5f\x04\xfb\x5a\x9e\x64\x47\x81\x4a\xee\x14\xa8\xaa\xbe\x52\x9f\xf7\xf2\x44\x09\x87\x14\x99\x0d\xcb\x1e\x90\x1b\x88\x4c\x7c\x29\x24\x49\xe4\x54\xff\xe7\xe5\xbf\x23\x8e\x61\xe8\x18\xac\x8a\x21\x0f\x02\x01\x0d\x6f\xd5\xad\xfa\x39\x5e\xb7\xdb\xa3\xcb\xf1\xc3\x77\x17\x2d\xaf\xae\x2d\x2f\xee\x6f\x8f\x72\x5b\xab\x34\xde\xd4\x3a\xe8\xcc\xad\x92\x73\x49\x5c\x42\x2b\xe1\xfd\x99\x48\x54\x5e\x9d\x0d\x43\x13\x92\xe9\x9a\x25\x8b\x5e\x63\xba\x0b\x37\xd3\x55\xc9\x38\x9b\xf3\x8f\x72\xde\x62\xc1\xc3\x47\x0d\x58\x20\x8e\xcc\x8e\x4b\xf7\x06\x18\xb7\x0e\x76\x39\x36\x03\xc7\xde\x84\x44\xfc\xcc\xa6\x14\x8d\xbb\x84\x37\x33\x61\x9c\x30\x69\x7c\xed\xc5\xa6\x11\xa6\xd6\x2a\xb0\x3b\xba\x9f\xc4\xd9\x64\xfd\x96\xcf\x25\x10\x31\x4d\xf9\x7b\x9d\xea\xae\x88\xaa\x94\xb4\x72\x97\x64\xaa\x1f\xdc\x33\x16\x6c\x02\xf4\xe7\xc5\x58\x57\xb2\x58\x7c\x0a\xbd\x75\xa7\xf7\xef\xa0\xd5\xae\xd7\xc7\x5b\xbb\x97\x70\x18\x1a\x5b\x3d\x97\xc5\xba\x20\x1a\xbc\x57\xdb\x1f\xdb\xa4\xe5\x86\xd7\xd6\x69\x58\x48\x87\x4a\x97\xb1\xe2\xab\x57\xec\x08\x24\xc4\x68\x02\x87\x65\xb6\xe1\x93\x89\x2c\xa2\xc1\x2b\xd8\x70\x12\x6a\xf1\x38\xae\x88\xaf\x0b\x47\x1b\x7d\x39\xd8\x12\x55\x6c\x88\x1c\x70\x14\x65\xa4\xd3\xa3\x00\x3e\xc0\x5d\x57\xe4\xd8\x3c\x0e\xc7\x9b\x46\x3e\x38\x8a\xb1\x00\x57\x54\x0a\xd2\x06\xdd\x0c\x2e\xc7\x23\xc6\xce\x58\xa1\xe7\x73\xad\x02\xfc\x00\x18\xbb\x29\x7e\x20\x53\x4f\xbd\x92\x4f\x73\xac\x79\x13\xa2\x47\x12\x87\x13\x19\xb8\x3f\x4b\xe9\xf3\x15\xc7\xdb\x03\xed\x32\x6d\xea\xf5\xbe\xb0\xe2\x34\x23\x8b\x5b\x56\x4a\x53\xb8\x7b\xb6\x60\x73\xe1\xde\x6f\x69\xe6\xc6\x57\x2c\xb3\x6d\x83\x30\x50\x8a\xf1\x4a\x72\xb3\x74\xb4\x64\x8e\x06\x37\x0d\x3b\xbf\x3a\x7b\xf7\x06\x42\x37\x9a\x12\xbc\x60\xf1\x5d\x8b\x0c\xfc\x41\x57\x0f\xf0\xb0\xc5\xb2\x53\x95\x7e\x14\x0d\x88\x05\x1f\xde\x9e\x0f\x5f\xbd\xfa\xfa\x1b\x80\x9d\x03\xc3\xe1\xf1\x96\x6a\xa8\xae\x35\xc2\x45\x05\xb9\xe5\x3f\xdc\x5e\xfe\x07\xc9\x2c\xb7\x47\xe9\x6b\xb3\x57\x61\x6f\xbf\x71\x37\x48\x6f\xc8\x7c\x7a\x1e\x40\xf6\x4d\xc0\xb3\xeb\xfa\x21\x4a\x61\x50\xe2\xd2\xac\xd1\xad\x4d\xce\xca\xd3\x38\xb8\x02\x4a\x31\x44\x40\x0d\xdd\xf8\x4b\x38\x7c\x94\x65\xe2\xcc\x1a\xf9\x2a\xe6\xb7\x47\x88\xc3\xd9\x3c\x78\x84\x3b\x8a\x7e\xc0\x80\x0a\x77\xcd\x9d\xc0\xfc\xa0\x65\x49\xf5\x34\x1c\xe7\x9e\xe9\x1a\x4e\x78\xc9\x86\x72\x45\x26\x7f\x7c\xbf\x3d\x07\xc5\x3c\xbb\x46\x9a\x7b\xc3\x6a\x6d\x03\x9a\xa0\x9c\xd3\x7d\x2a\xc3\xfc\x4d\x4d\xa5\x14\xdd\x0c\x49\x78\xb9\x3d\x62\xfa\xce\x14\x6d\xb3\x69\x8a\xee\xb1\xc2\xb4\xbf\x6c\x96\x60\xad\x41\x5b\x8d\x02\xd0\x66\x37\x93\x34\x29\x73\xaa\x75\x09\xe9\x96\xbc\xa2\x3b\x1e\xa7\xb0\x3b\x09\xcc\x04\xaf\xec\xec\x7c\x26\x8a\xfb\xab\x7e\xbe\xb7\x15\x5f\x04\x29\x04\x97\x8b\x2d\x0a\xd7\x82\x79\x87\x5e\xc0\x32\xcc\xbd\xa1\x3a\x95\x01\x33\xf7\x1c\x19\xdf\x96\x0e\x6c\x35\xfd\xa5\x1f\x14\xbc\xda\xe4\xa2\x33\x1d\x2f\xdd\x7a\x3d\x07\xb1\x71\x56\xba\xe1\xb0\xe7\x2d\x56\xc8\x11\x0b\x02\xa1\xcf\xf2\x26\xae\x92\xb3\xe6\x13\x88\x0f\x6e\xbd\xf2\xe0\x5d\x09\x01\x13\xc6\xdd\x2a\xce\xa6\xf2\x41\x28\x7c\x05\x30\x16\x2e\x77\xf4\x66\xbc\x4b\x3b\xe2\xb1\xff\xc0\x8e\xbf\x93\xc3\x63\x8e\xab\xdd\x79\xdd\xe5\xaa\x6f\x12\x62\xef\xd8\x83\x43\xe4\x5e\xe0\x0d\xc1\x57\x01\xcc\x2f\x00\x38\xc5\x93\xd3\x4d\xca\xfd\x92\xdf\x01\xea\x21\x65\x28\xd0\x83\x59\x1e\x03\x40\x8b\x93\xed\xcd\xfa\x4f\xb9\x26\x75\xb0\x9a\xef\xe6\x23\x0f\x42\x2b\x69\x58\xd9\xe8\xba\x46\xeb\xb2\x5a\xf3\x0d\xc6\xa1\xf0\x72\x91\xc3\x93\x86\xeb\x97\xac\x63\x0f\x16\x15\x45\xe7\x6d\xc7\x35\x0e\x32\x76\x57\xf4\x9b\xf8\x3f\x20\xad\x5d\x8e\x1f\xbe\x1d\xb8\xff\xff\xdd\xc9\x16\xcb\x8b\x34\xa0\x71\x04\x41\x7d\xb3\x32\x04\x52\x5e\x7a\xdd\x96\x8c\x36\x39\xab\xb8\xe3\x06\xc3\x26\x3c\x09\xe5\x28\xd5\x1e\x2b\x6a\xb5\x76\xb0\xe1\x6e\x47\xa3\x4f\x1e\x39\x0e\xdb\x00\xdc\x92\x3f\x70\x59\x81\x19\x3f\x97\x7d\x07\xa9\xb6\xe2\x07\xa4\x4a\xc9\x8e\x0b\x74\xd8\xe3\x8e\x26\x9f\xce\xee\xb8\x47\x4f\x06\xfb\x08\x15\x65\x7f\xed\xc6\xa0\x11\x21\x82\xa5\x84\x42\xc5\x00\x56\x3b\xd7\x0f\xc8\x4f\xf0\xc1\xe4\xcd\x22\x1c\xee\x02\x5f\xca\x14\x7e\x13\x3a\x49\xf8\x0a\x60\x65\xc9\x79\xf6\x95\x9f\xec\x75\x10\xe8\x57\xd8\x60\x1c\xb9\xdc\x1e\x91\x13\xdb\x9d\xff\xed\x51\xbe\x16\xdd\x31\x65\x5c\x7b\xef\x0d\xd9\x1c\x7a\x9a\x35\xf0\x17\x98\xbf\xeb\x6c\x81\xa6\x1b\x6f\xa9\xb9\x3d\x8a\x41\xcf\xec\x40\x36\x0a\x2c\x5d\xb2\xa7\x02\xed\x2f\xd5\x06\x2d\x3a\xdc\xbb\x5e\xaa\x74\xa2\x33\xc3\x7c\xb0\x3e\x7f\xc4\xdb\x3c\x94\x62\xfd\x65\x2b\xbb\xf9\x94\xfb\xf1\x3c\xbf\xbe\x24\x5b\xc9\xad\x3e\x1e\xd6\x50\x09\x63\x12\x4e\xa0\x9b\x60\x8a\x0b\xd1\x25\xd7\x4f\x62\x7c\x68\xa7\x69\x04\x0a\x54\xc4\xfc\x3d\x9c\x23\x30\x22\x95\xf2\xab\x14\xde\xdd\xdd\x18\xa9\xa6\x95\x80\xae\x47\xf1\xfa\x50\xde\xd4\xed\x51\xf2\xe7\xdb\x23\x76\xcc\x99\x81\x1f\xe2\x3d\x3e\x19\xb0\xdb\xa3\x31\x28\x80\xe9\x1c\x8f\x1d\xed\xa6\xfc\x5f\xab\x64\x53\x02\xbb\x15\xc1\x24\x66\xd0\xa6\xda\xed\x1e\xe2\x46\xe1\x37\xff\x25\x35\x47\x23\xec\xed\xd1\x07\xdc\xcc\xa7\x8d\x9d\x86\x85\x39\x86\x79\x82\xef\x69\x4a\xe2\xa9\xf1\xce\xf8\xe2\x04\xa5\xa8\x85\x2a\x7d\xd0\x49\x12\x92\x21\x83\x4d\xaa\x3f\xbf\x30\x9b\xf8\xc5\xee\xaf\x77\x95\xf0\xb7\xf3\x8a\x9b\x6d\x8f\xf8\x52\x7b\xaf\xe5\x17\xf0\x0f\xe2\x14\xae\x15\x0b\xae\x77\x39\xaf\x2b\x28\x68\xe4\x8b\x3b\x24\x1a\xe8\x9d\x70\xd2\x26\x06\xc3\x2f\x17\x6a\x59\xb1\x57\x49\x84\x26\xc4\xdf\x0e\x8d\x5d\x54\x69\x56\xd8\x20\x24\xa8\x79\xe3\x3e\x05\xbd\x0e\x18\x08\x17\xb7\x41\xd6\x1c\x3e\xc8\xda\xe9\x82\x8e\x40\xc8\x42\x03\xe1\xaf\xf9\xdf\x47\xec\x67\xb5\x2d\xb0\x57\xa8\x72\x08\x48\x52\x99\xcc\xed\xae\x47\x1a\x38\x10\x8a\x1c\x04\x9e\x4f\xca\xd4\x8b\xf4\x95\x79\x31\x0a\x2a\x8d\xaf\x44\xe1\x25\xb6\x8d\xdb\x4a\x01\x3d\x03\x66\x75\xc9\x17\x21\x28\xc8\x2e\x6a\x92\x66\x4a\xad\x44\x86\x4c\x59\x54\xba\x2d\x3d\x0f\x40\xf9\x78\xea\xb3\xcd\x12\xb5\x16\xdf\x3a\x84\xbf\x5a\x44\x94\xf3\x6c\x74\x8f\x51\x3a\xa0\xfa\x34\xdc\x98\x76\x2e\x4a\x1f\xba\xb2\x6d\xe2\x8f\xdc\x16\x33\x47\xdf\x6e\x94\xeb\x2c\xb6\x82\x63\x38\x2c\x38\x79\x1c\x89\x8d\xd8\x59\x32\x8b\x8d\x1d\x93\xe2\x92\xad\xd2\x9c\xf8\x65\x61\x5c\x53\x1c\x0d\xa6\x0a\xec\x2e\xb9\x97\xdb\x4e\x33\x28\x68\xba\xd9\xf4\xa8\x77\x0f\xf8\xbd\x2a\x44\xd8\x2e\xd7\x71\xee\x5d\xdb\xa6\xb9\xf1\x34\x7a\x96\x12\x47\x50\xd3\x50\x5a\x75\x06\xc3\x90\x92\xa7\x31\x86\xad\xb1\x1e\x5d\x5f\x91\x5f\xff\xcd\xa2\x16\xaf\x73\x23\x41\xf6\x0f\x58\xdb\x54\xd8\x50\x57\x8c\x0c\xa8\xc0\xda\x3b\x49\xa5\xdd\x43\xa1\xe7\x0d\x99\xab\xc1\xe8\xe2\x58\xf4\x07\x50\xde\xaa\x05\x92\x8d\x6e\xcb\x61\x20\x73\xe3\xc3\x20\x23\x64\x52\xe0\x59\x71\xc1\x7e\xa3\x3b\x04\x66\xfc\x4c\x57\x1e\x91\x0f\x95\x0b\x8a\x67\x36\x70\x10\x7c\x7d\xcd\xb7\xc4\x6f\xf2\xc4\x03\xc2\x0a\x79\x1f\x1c\xf1\xf4\x28\xdc\x15\x37\x16\x22\xf6\x70\x36\x51\x94\xa8\x2b\x6e\x9d\x42\x4f\xbe\x1b\xb2\xc8\xba\xa9\x14\xd1\xf6\xbd\xc4\x47\xe2\x3a\xf3\xb8\x2b\xbf\x37\xbe\x87\xc4\x2d\x1d\xa6\x41\x06\xb8\xcb\xb1\x39\xf4\xb6\xde\x1e\xed\x04\x7c\x81\xe1\xa1\xc3\x24\x47\x64\x48\xcf\x79\x82\x7d\x91\x8f\x3f\x9c\xc8\x46\x3c\xf2\xaa\xea\x87\x81\x71\x40\xb3\x7c\xdd\x23\x76\xef\x26\x01\x26\x42\xaa\x0f\x7e\x86\x75\xc1\xcb\x5f\x9c\x5b\x6b\xd7\x54\xc2\x71\x12\xbe\xb9\x6d\x63\xb7\xe8\x03\x73\x5e\x0f\xef\xc5\xc2\x64\xf1\xa1\x61\xf3\xb3\xaf\xd3\x30\xed\xe4\xe7\x7f\xef\xa9\x71\xcc\x79\xbd\x1b\x56\xd2\x72\x20\xfc\x8e\x58\x49\x29\x25\xb5\x77\x95\x34\xb3\x2b\x6d\x3f\x08\x5e\x2e\xce\xbc\x23\x6e\x5b\xbd\x9c\x35\x9f\x25\xd8\x86\x48\x6d\x6a\xc1\xf8\x54\x84\xea\x37\xa5\xe0\x15\xbd\xee\x2b\x8c\xa4\xfe\xed\xa0\x67\xba\x94\xa6\x11\x53\xde\x94\x08\xf4\x87\x3d\x23\x88\xfc\x04\xad\x5a\xa7\x4a\xdb\x61\x62\xdf\xf2\x46\x84\xd6\x08\x8c\xf9\xc0\x80\xcd\x24\xe4\x22\x58\x38\x28\x05\xc7\x72\x2b\x26\x6d\x75\x0d\x65\x40\x7f\xf4\x91\x17\xc9\x23\x5e\x37\xba\xe6\xe0\xda\xbe\xfe\xf0\x0b\xb8\x9c\xd0\xd9\x84\x3d\x48\x6b\xd8\x58\x97\x26\x18\xd1\xeb\xb6\x71\x77\x0b\x2e\x9d\x70\x2c\xca\x7b\xba\x70\x82\x89\x47\x8f\xea\x6c\x55\xc1\x03\x38\x15\x4a\xb8\x33\x0b\x69\x3e\xa8\x54\xf8\x7f\x5d\x57\x98\x3e\x42\x09\xbf\xb9\xbc\x04\x72\x6b\xdd\x78\x11\xc6\x6a\x36\x17\x9c\x8a\xa9\xe5\x76\x4d\x77\xff\x7d\x62\x92\x28\xd9\x2d\x94\xf6\x59\xdc\x1e\x31\xf1\x10\x53\xfd\xc7\x08\xa5\x28\xe6\x46\x54\x0f\x22\x38\x50\x47\xec\x6c\x0a\x1a\x2c\x45\xd5\x68\xe5\x44\x3d\x14\x8d\x92\x95\xf9\x85\x94\xc9\xb0\xe9\xa3\xf1\x26\x35\xb2\xae\x5b\x9e\x13\x8d\x0c\x9f\x08\x34\xd1\xb9\x61\x60\x65\x1e\xae\x78\x9f\xf0\x55\x0f\xec\xde\xa5\x6d\x5e\x7a\x5b\xd7\x78\x75\x0c\x35\xdb\x85\x7d\x77\x6b\x67\x81\x73\x2d\xa8\x6e\xd1\xc6\x4b\x38\xf2\x76\x46\xc9\x84\x50\x9d\xd0\x1d\x38\x59\x5e\x82\xec\x4b\x2c\x1a\xe7\x0e\xd2\x36\x46\x1c\xa1\x2b\xc1\xd7\xbe\x1b\x64\x96\xbd\x54\x0e\xd7\x01\x32\x34\xb8\xf8\x7c\xc1\x38\x70\x88\x43\x0c\x90\x4d\xbc\x16\x3e\x12\x24\x39\xd2\x50\xec\x72\xae\x4b\x39\x59\x8c\x9e\x18\x22\x94\xbc\xea\xa4\x07\x7d\xb2\xf0\xc2\xd5\x74\x92\x46\xf2\x2f\x93\x09\x14\xbd\x3d\x9b\xc0\x8b\xb3\xcd\xcc\x93\xa4\xd6\x9c\x83\x2c\x73\x39\x0e\x06\x49\x0c\xed\x82\x5a\x51\x70\x0e\x73\x2e\xb1\x0e\x27\x0d\xc1\x38\x8d\x31\x62\x6f\x30\x72\x3b\x88\x43\x64\x80\x5e\x6e\xe8\x5d\xd8\x7e\x30\x47\x06\x57\x90\x4b\x96\xa2\x68\xe0\x2f\x5f\x74\x94\x66\x67\x9b\xcf\x41\xc8\x7a\x02\xee\xf7\xaa\xde\x36\x5d\xcc\x95\xe3\xc7\xd4\x64\x8b\xd5\x4b\xa2\xcd\xdf\x20\x10\x42\xe7\x3c\xd6\x64\x41\xe9\x5a\x57\x7a\xba\xf8\x2b\x0a\x10\x9b\xe8\x27\x6d\x8a\xce\x91\x3a\x04\x4b\x0c\xc1\x66\x1b\xa4\x38\xdf\x94\xea\xcf\x62\x08\x60\xa6\xf7\x9a\x14\xac\x21\xcd\xfd\x85\x87\x8c\xaa\xda\xa3\xc3\xdc\x38\x79\x39\xf2\x67\xd4\x79\x40\x06\xee\x02\x53\x76\x35\x55\xc8\x1d\x22\x28\x61\x08\x10\x03\xc8\x17\x6e\x56\x3b\x80\xff\x95\xdc\xbe\x37\xd9\xe4\xbd\x25\x07\x23\x24\x3b\x0c\x90\x3b\x36\x63\x2c\x7b\xf5\x1d\x35\xe6\x79\x88\xe6\x28\x7d\x21\xdd\x73\x36\xd3\x46\xa8\xe8\xb2\x41\xe0\x95\xc6\xd8\x6c\xc7\xc8\xa6\x10\xbc\x2b\x77\xbc\xb8\x77\xea\xe3\x46\x77\x0d\x4c\x07\xde\x4f\x34\xb2\x03\x27\x55\x3a\x7c\x8c\x2f\x6c\xcc\xda\x0d\x03\x06\xbb\xb9\x5c\xe2\xcd\x33\x6e\xb2\x2e\x26\xbe\xd4\x08\x5d\x7e\x2a\x67\x1c\x42\x37\xe9\x18\xbd\x5f\x97\x36\x22\x54\xcf\xbe\x3d\xfa\x13\x84\x8f\x2e\x52\x1c\x2b\x78\xfd\x6f\x8f\x9c\xdc\xe4\xa7\xe4\x18\x11\x68\x58\x05\xc8\x87\xbc\x0a\x38\x26\x72\xe2\x53\x5f\x1d\x53\xc7\x40\x54\x23\x94\x09\xa1\x7f\x15\x37\xc1\x67\xa8\x02\xe2\xe9\xfa\x04\x34\xc7\x93\xe0\x8d\x82\xaa\x68\x61\x4f\x9c\xbc\x60\x1b\x8e\xf4\x96\x57\x78\x3d\x7c\xe2\x4b\xa0\x37\xaf\x0f\x76\x46\x28\x45\xdd\x88\x08\xd3\x1e\x75\xd5\xb9\x7e\xf0\x45\xdf\x27\x2d\xd8\x19\x08\x20\xe1\xb3\x07\x5f\x51\x93\x8d\xdc\xc3\x3d\x9f\x49\x89\x9a\x99\x7e\xcc\xcc\x8c\x31\xc5\x3a\x7f\x1f\xc2\x43\x3d\x22\xaf\x5a\x5a\xe9\x29\x0f\xc3\xed\xf9\xa6\xdf\xc6\x68\x7a\xf7\xfe\x51\xa4\x85\xe3\x67\x3e\x6c\x28\x38\xc8\x93\x6c\x20\x47\xfb\x89\xd1\x80\x10\xa8\x12\x2f\x79\x7e\xd3\xc3\x4a\x93\x94\x4d\x2a\xd6\xe3\xa1\xa6\x10\x95\xa0\x13\x16\x72\xb7\x20\xc7\x2b\xd1\x60\x5b\x24\xb0\x40\x89\x38\x8a\x70\x2f\x4b\x52\x29\x41\xa4\x02\xc1\x67\xb9\x4d\x31\x08\x3c\x0b\xd0\x46\x0a\xf6\xa1\xf8\xde\x57\x9c\xcb\xe0\xa4\x41\xb9\xbf\x9b\x58\x17\x20\xb6\x69\x38\x19\xb4\xb8\xa3\xc4\xd8\xf7\x08\x06\xc5\x73\xb8\x3d\x62\x77\xad\xac\xd0\x04\x16\xb6\xdf\x33\xad\x70\x00\x21\x1f\x1f\x22\xee\x30\x5a\x11\xc3\xee\x29\xf0\x40\x47\x5e\x9e\x4c\xb2\x13\xf6\x8b\x11\x0b\xf1\xc8\xb3\xc1\x43\xbc\x11\x30\x2f\x4a\x54\x4c\x25\xce\xdc\x32\x74\x2c\x27\x89\xf1\xc9\xfb\xb9\xdb\x06\x8a\x13\x83\x91\xe5\x64\xdf\x29\xe6\xa1\x77\x18\x42\x28\x3a\x88\xfa\x4b\x56\x28\x91\x49\x9f\xd7\x02\x62\xb8\x28\x2f\xcf\x7b\x72\x34\x7a\xae\xbd\xf7\x37\xcb\x34\x88\xde\xdf\x43\x8a\x5c\x44\x22\x52\x4d\x87\xa1\x9d\x17\xbb\x40\xde\xfe\x6c\x95\xbe\xd3\x9a\x2a\xdb\x33\x5a\xb1\x82\x4a\xc7\xe1\xe9\x4f\x37\xd6\x57\xd9\x25\x89\x35\xc4\x23\x6c\x4d\xe9\xf1\xc3\x78\x53\x82\x53\xf0\x0f\x62\x6b\xda\x00\x5d\x74\xee\x67\xf7\xc9\x6d\x4f\xd0\xcd\xe7\xb0\x31\xc1\x87\x07\xb2\x31\xa5\xe6\xea\xbd\x05\xfc\x94\xf5\xf4\xa8\xee\x93\xf9\x1a\x72\xa1\x7e\x89\x10\xbd\x0b\x20\xf0\xa7\x01\x42\xaa\xc0\xf3\x49\x44\x7c\xd8\xca\x78\x9b\x35\x9f\xe5\x7b\xb5\x4a\x53\xe9\xde\xaf\x1e\xba\xca\xf6\x6b\x46\x4a\xe5\xfe\x45\xd1\xa9\x83\x1e\xfa\x97\x1f\x6b\x9b\xca\x75\xbe\x4d\x25\x3e\xe4\xc9\x58\xdd\xf0\xa9\x78\x7f\x3d\x76\x22\x9f\xb1\x42\xd9\x5f\x00\x6f\x13\xbd\x2c\x1b\xce\xe8\x43\x0a\x46\x1b\xba\x61\x75\xe8\xc7\x03\x77\x7a\x0b\x57\x8f\xd3\x98\x98\x9b\xed\x12\x60\xac\xc6\x8d\xb6\x14\x27\xfc\x53\x1d\x81\xe0\x2d\x9f\x74\xda\x2c\xf9\x7d\x66\x4e\xdd\x22\xa8\x1b\x35\x0d\x68\x3a\x6f\x3e\x8e\xc0\x3f\x6e\xbf\x45\xc8\x90\x8f\x13\x83\xff\xa1\xac\xfb\xaf\x11\xbb\x9c\xd7\x95\x2c\xa4\xad\x08\x0b\xaf\x09\x45\x0f\xfc\x67\xdd\xca\xbc\xfb\x97\x1e\xdf\xb2\x0f\x4b\xe5\xe2\xd9\xb1\xfb\xf2\xf4\xb1\x91\x56\x9c\x60\x9d\x2e\x30\x5a\x41\x24\x0c\x46\xbe\x69\x04\xfa\x13\xf1\x8f\xde\x56\x2c\x15\xc3\x83\x7f\x87\x18\xea\x7b\x59\x1b\x8b\x46\xd8\x0f\x70\x71\xf6\xbb\x4c\xdd\xba\x0b\x1b\x81\xf1\xfc\x68\x9d\x88\x6f\x9c\x45\x5a\x3c\x47\xdf\xb9\xdb\xe6\x5d\x9f\x91\x54\xcf\xc6\x97\x4e\x72\x2b\xd1\x42\x60\x56\x86\x57\x67\xf1\xa3\x89\x12\x67\xad\x53\xf7\xdc\xf1\xae\xdc\x0a\x24\xfd\x1e\x39\x24\xbf\x84\x86\x3e\xb6\x64\xd6\xce\xb9\x02\x13\x3f\x28\x78\x29\xb0\x4b\x9c\xba\x07\x77\xa6\x33\x4b\x42\x35\x40\x69\x24\x68\xae\x00\xe0\x15\x6a\x0a\xed\x41\x8d\x71\x29\xd0\x43\xef\xf5\x60\x0d\xa3\xce\xd9\x14\xba\x0e\xab\x21\xf6\x40\x93\x0c\x6b\xf3\xc7\x90\x14\x42\xca\x0c\x14\xd6\x07\x96\x20\x46\x4c\x6c\xd5\x09\x95\x07\xe5\x97\x62\x37\x3b\xa9\x45\xb0\xa7\x6e\x2e\xa4\x7d\xdd\x09\x36\x97\x4d\x03\x7a\x76\x77\x3a\x68\xac\x90\xd3\x99\xcd\xa3\x46\x20\x2f\x9f\x25\xc7\x47\xd0\x16\x8a\xfe\x3b\xab\xfa\xeb\xa9\x88\x6c\xf9\x6d\x83\x5f\x43\x48\x25\xfd\x0d\x19\xc7\x42\xb7\x21\x2f\x0a\x0b\xa6\x84\xf5\x99\x15\x3b\x75\x15\xff\x88\x59\x46\xda\x1b\xc8\x87\xe2\xa3\x34\x76\x79\x35\x01\xa7\x83\x3c\xfb\x9f\x4b\xa0\xf6\x13\x78\x7e\x5c\x9e\x1f\x97\xdf\xe9\x71\x59\x59\xc3\xeb\xf9\x85\x79\x7e\x61\x9e\x5f\x98\x3f\xc2\x0b\xb3\x30\x85\xad\x36\xe9\x94\xd0\x20\x40\x78\x71\x76\xef\x0e\xab\x62\x35\x6f\xf8\x5c\xb8\xbd\xc7\x73\x32\x49\x31\xb1\xb5\x6f\x49\x0f\x2c\xd6\x2b\xba\x56\x50\xa9\xc3\x75\xb2\xc0\x8a\x8f\x76\x8f\x0b\xe2\x58\xc3\xb6\x6b\xe1\xa3\x87\xf7\x1d\x6f\xe9\x00\x56\xe3\xc5\x75\xca\x96\xd1\xdc\xe8\xdf\x7b\x03\xc8\xdd\x9c\x8f\xaf\x75\x71\x2f\xec\xd9\xb6\x0a\x29\x9d\x96\x09\x90\x1c\x57\x8c\xea\xe8\x07\xbf\x98\xae\x85\xa2\x48\x72\xf8\x66\xfb\xc1\xba\xa7\x7b\x5b\xfc\x27\x45\x5a\xbf\x66\x3f\xba\x77\xde\x5f\x47\x72\x60\x31\xab\x07\x4b\x65\x3c\x6a\x5d\xb2\xcb\x7d\xc0\x25\x57\xa1\x75\x7e\x59\xb0\x92\x01\xa3\xf1\x50\x18\x92\xbf\x13\x84\xe1\x0d\x97\x1b\x4b\x2e\x03\xb4\xb2\x2e\x29\x28\x07\x5a\x83\xd3\xc3\x5a\x5e\xcc\x7c\xd0\x89\x07\x29\x11\x93\x89\x28\x1c\xc3\x85\xc4\x39\x28\x84\xe8\xd9\x27\xc5\x6f\x5a\x5d\x61\xe8\x93\xfb\x00\x7a\xeb\x21\xc1\x62\xb7\x5b\xc8\xf3\x43\x40\xb5\x71\x53\xc6\x4f\x42\x65\x1a\x98\xb6\x4e\x2b\xc7\x12\x43\xcf\xe6\x03\xcd\xbc\x9f\x0c\x7b\xc0\xa7\xff\x4a\x5f\xbb\xc5\xb6\x95\x18\x30\x4c\x70\x89\xbf\x50\x0a\xfb\x9b\x8f\xa2\x68\xed\x3e\x62\x00\xda\x61\xfb\x2f\x0d\x17\x73\x2f\x16\xc4\xb8\xc9\xb1\xea\x63\xc3\xcb\x7d\xe6\x60\xe5\x5c\x9c\x95\xa5\x58\xaa\xb0\xf0\x04\x5b\xf9\x8d\xec\x16\x7a\xec\x92\x96\x1f\xb4\x6b\xe1\xc4\x30\x03\x1b\x90\xa4\xfd\x9a\x1f\xb9\x61\xdc\x7d\x00\x08\x91\xde\x53\xec\x44\x73\x2b\x14\x88\x13\xe1\x1c\xf0\x0b\xb3\x4e\x88\xec\xf1\xb0\xc4\xad\x46\x7f\x78\x4c\x9c\x23\xd9\xc6\xa6\x67\x71\xe0\x02\x2f\x8e\x26\x06\x4b\x17\xe0\xc9\x77\x1d\x89\x7d\xcb\x43\x43\x7c\x1b\xef\x7b\xf8\xa2\x7b\xe9\xfd\xc5\x31\x70\xd1\x71\x1f\x62\x88\x04\x49\xa5\xb6\x91\x75\x25\xd8\x6d\xfb\xf2\xe5\x37\xc5\xbd\x58\x0c\x30\x0e\x81\xd8\x84\xfb\x55\x84\xfa\xa8\x22\xc6\xc1\xa1\x0a\xa9\x1b\xfa\xd0\xff\x13\x3f\x38\x14\xbf\x78\x83\x1c\x22\x0d\x63\xf5\xe7\x49\xcc\x03\xe2\xb8\x6c\x31\x1b\xb1\x37\x10\x86\x37\x17\x5c\x51\xb4\x1e\x84\x8a\xa4\x8d\x3d\x12\x7c\x8a\x50\x40\xb5\x61\x93\x34\xd6\xdf\x99\x8f\xfc\x55\x2c\xbc\x2e\x94\x30\x91\x19\xf7\xd5\x8a\xc2\x59\xc7\x70\xbf\xcd\x6b\xbf\x17\x0b\x1f\x55\x23\xa0\x33\x69\x7c\x38\x48\x38\x43\xff\xe0\xbd\x71\x62\xb3\xf9\x17\xa4\xab\x42\xcf\xef\xa4\xc2\xc1\xb0\x6b\xbf\xd9\x2c\x84\xab\x98\x10\x93\x03\xc3\xec\xbe\x21\x7e\x0a\x5b\xe5\x1a\x9a\x69\x56\x66\xee\x5e\x2c\x5e\x18\x2a\xfc\xa4\x95\x99\xc9\x3a\xcb\x97\x8d\xd1\x14\xf8\xb1\x8f\xa7\x70\x6b\xc4\x60\xde\xdf\x5a\x5e\xe5\xa1\x18\xf4\x13\x35\x72\x5b\xf5\x5b\x2b\x1f\x78\x25\xa0\x64\x97\x53\x20\xca\x82\x37\x98\x6c\x46\x01\x3b\x46\xfb\xec\x2a\x77\x25\x0b\xae\xe2\x83\x15\x4e\x81\x5c\xac\x35\x6f\xac\x2c\xda\x8a\x37\xcc\xd1\xf3\x54\x37\xbd\x99\x52\x16\xcf\xe6\x89\xa0\x5f\xa9\xb4\x9b\x6e\xfb\x2e\x2f\xaf\x45\x23\x75\x09\x0f\x31\xd4\x0b\xcb\x09\xed\x38\x47\x22\xd3\x13\x7f\xf7\xc2\x45\xc8\x61\xfa\x57\x60\x56\x9f\x24\xac\x28\x79\xc4\xbf\x0f\xf9\x63\x3e\x5d\x2d\x64\xdb\xd1\x98\x44\x76\xdd\xf7\xdf\x6d\xbf\x78\x10\x0d\x3b\x26\x11\x41\x3c\xc8\xc2\x9e\x8c\xd8\xff\x16\x8d\xc6\x9a\x02\x62\x8a\xd5\xc0\x3a\xa6\x0b\x4b\xf9\x4d\xdc\xb0\x97\xec\x18\x3e\x63\x72\x3e\x17\xa5\xe4\x56\x54\x8b\x93\x4e\x09\x83\x43\x17\x36\xeb\xaf\x2d\x65\x3c\x00\x5f\xb7\xce\xb9\x04\x26\xae\xc3\xf5\x0e\x17\x1a\x62\x78\x1d\x09\xa7\xe9\x9b\x11\x66\xc3\xdf\xff\x70\x6a\xff\xe9\x0e\x97\xb3\x46\x4c\x81\x38\x91\xfa\x3e\x97\x7a\xec\x83\xc3\xae\x29\x7a\xe8\x27\x7e\x27\x2a\x92\xa7\xe6\x62\xa3\xe4\x7b\x16\xe3\xd9\x42\xec\x51\x13\xbf\x24\xac\x77\xff\x97\xec\xed\x43\x9c\x18\x08\x76\x4c\x8a\xaa\x28\x0c\x76\x0b\x59\x6d\x01\x81\x08\x12\x02\xbd\xde\x80\xa1\x68\x3d\x5e\xb9\xed\xfc\x1e\x12\x83\x7c\xc4\x65\x64\xf4\x61\xce\x09\x9b\xdf\x53\x39\xdf\xc6\x1e\xce\x14\x83\x38\x08\xf0\x52\x27\x35\xb9\xcc\x88\xbd\xf7\x70\x84\xdd\x7a\x28\x38\x63\x6f\x94\xa8\xa0\xd6\xe7\x88\xbd\xe1\xc5\x0c\x82\x33\x17\x60\x55\xc5\x9b\x27\x0d\x7b\xff\x61\xc9\xd6\xf2\x89\xe2\xf5\xf6\x13\xdd\x68\x9b\x9e\x2e\xba\xe5\x74\x7c\x23\x9a\xf9\x8e\xb4\x6b\x45\x33\xef\x72\xe7\x46\x98\xb6\x02\x35\x09\x77\xfd\xb7\x56\x34\xd2\x9d\xce\x19\x53\x6d\x55\x85\xf0\xce\x75\xdd\x79\x82\x57\x3a\x86\xce\xdd\xcc\x44\x7a\x4f\x7c\xe0\xc5\x1c\x5e\xc8\xb3\xab\x0b\x12\xdf\x29\xb7\x0e\x2e\x51\x7b\x47\x51\x71\x93\x56\x15\x68\x65\x90\x76\xe1\x18\xe9\x95\x2e\x45\xba\xe6\x4f\x77\x9d\x60\x29\xc0\x1e\xde\x7c\x74\x7b\x64\x7a\xc4\x20\x9d\x2d\x47\x6c\xaf\x62\x15\xc6\x71\x7e\xd8\xe0\xae\x18\xf3\xd4\x6c\xb8\xad\xec\xed\xe9\x54\xbe\x2f\xa1\x02\x20\xda\x79\x08\x04\xde\xa4\x71\xac\xf9\x24\x31\x71\x43\xb4\xab\x26\xa0\xb7\xa8\x28\x80\x3a\xcf\xe7\x9a\x14\x08\x64\xbb\xfe\x28\x7a\x9c\x39\x9c\xc9\xf5\x9a\x64\xa1\xa7\x54\xb8\xcb\xfa\xdd\x18\xbd\x94\xb6\x0c\xf5\x3a\xac\x66\x13\xa9\x3a\x0b\x1d\xf9\x64\xad\x24\x0e\x5d\x86\x02\x65\x81\xa7\x43\xd6\x57\xab\x28\x07\x37\x02\x98\xb9\x0d\x52\x64\xe0\x9a\xe0\xce\xe1\x15\x91\xcd\x92\x6e\x4b\xb4\x5c\xea\x39\x97\x6a\x8d\x0e\x3d\xe7\x1f\xaf\xef\xc5\xe3\x96\x1b\xf2\x0e\x5b\x75\xea\x5e\x94\x62\xda\x08\xb0\x1e\xa2\x2c\x06\xb3\xf1\x81\xed\x4a\x3c\x08\xa7\xd7\x97\xd2\x50\x75\x8c\x92\x94\xab\xff\x78\x9c\x09\xf5\xb3\x32\xdc\x4a\x33\x91\xfc\xae\x12\xff\x7a\xa1\xaf\xb4\xf5\x2a\xd4\x7f\x78\x51\x0f\xb5\x49\x04\xcf\xa9\xdd\xfa\xa1\x48\x49\x29\x27\x1e\x9b\xf2\x4e\xd8\x47\x41\xde\x8e\xb8\x29\x39\x5d\xe5\x95\x59\xc2\xa6\xf8\x20\xdf\x69\xa5\xef\x78\xc5\xe6\x52\xb9\x61\x46\xec\xad\xe3\x95\x08\x30\x31\xc0\xa0\xf2\x6f\x86\xff\xa5\x55\x82\xea\xe4\xf7\x22\x02\xe5\xbd\xc2\xf8\xea\x98\x20\x16\x42\x5f\x33\xca\xf4\x74\xcf\x0d\x7b\x75\xfa\xea\xf4\xe5\x6b\xf6\x7f\x99\xeb\xfa\x15\xfd\xef\xd7\xf4\xbf\xdf\xb0\xff\xcb\xfe\x2f\x63\x6c\xcc\x58\xf6\xbf\x0c\xfe\x77\xc8\xe4\x24\x9d\xc3\x2b\x37\xcd\x42\xcf\x69\xc1\x39\xf6\x01\xed\x28\xd0\x10\x76\x0d\x0f\x72\xa1\xe7\x02\xe6\xf0\xea\x5f\x7c\x1b\x4c\x2a\x63\x5a\x51\xcb\x57\xc7\x30\xa5\x13\xf6\x08\x12\xe1\x9c\xdf\x23\xed\x9d\x15\xb6\xe5\x95\x1b\xfc\xf8\xeb\xe1\xcb\x13\xa6\x55\xde\xfc\x41\xea\xca\x09\xe2\x34\xc3\xe3\x57\x27\xa3\xa5\x29\x7f\xbd\x62\xca\xd9\x6c\x61\x16\x5c\x2d\xa0\xeb\xf5\x54\xe3\x09\xe6\x4c\x2d\x1e\xf9\x22\x90\x8d\xbf\x7b\x8e\x8f\xb0\x99\x9c\xce\x44\xc3\xea\x46\x14\xa2\x44\x40\xd3\x90\xe1\x20\x03\x94\x04\x74\xba\x60\xd2\xba\x37\xed\x85\x01\x39\x97\x20\x7d\x08\xc8\xe0\xa2\x8b\xc4\xf6\x0a\xce\xfc\xa5\x57\x49\xc8\x4c\x70\x70\xb0\xbd\x24\xdd\x68\xab\x0e\x17\x5a\xfa\xcb\xe3\xe4\x45\x3d\x41\xc3\x2f\x3d\x5c\xf0\x14\xd3\xb2\x31\xcd\x90\x58\x4f\xc4\xc3\x75\x5f\x41\x0e\x07\x38\x7e\x0b\x5e\xa5\xb6\x8f\x24\x15\x15\x65\x3b\x5f\x9a\x0f\xfd\x08\xc4\xb3\xd9\xaf\xb1\x25\x96\x95\x8b\xc6\x23\xec\x8d\xcc\x46\x1c\x21\xd4\xef\xda\xe2\x5e\x58\x5f\xde\xca\x49\x87\x56\xb3\xba\xb5\x2c\x80\x84\x2e\xf1\x3c\xab\xb1\x63\xfc\x74\xdd\xb9\xed\x2e\x10\x2f\x91\xd9\x96\x6d\xff\xb5\xdb\x3e\xb1\x45\xd1\x7b\x57\x0a\x5e\x79\x84\x14\x47\xef\x72\xe2\xc1\xd5\xd4\x8b\x48\x7c\x18\xe1\x0e\x1c\x22\x26\xde\xb8\xcb\x93\x31\x47\x76\x4c\xfa\xf0\x09\xb3\xa2\xaa\xbc\xdb\x18\xff\xd8\x90\x31\x3c\xfc\x00\x14\x3d\x64\xf9\x45\x59\xf9\x61\xfa\x91\xf7\xf9\x48\x34\xff\x43\x62\x82\xd4\x6a\x70\xab\x18\x80\xcd\x4c\x25\x60\xc7\xf5\xba\x5a\xc8\x3e\x66\xa2\xaa\x59\x23\xca\x16\x43\x2c\x5c\x47\xe6\x5e\x3c\x8e\x6e\xd5\x59\xb2\x58\x02\xb2\x8b\xa9\xce\xd9\xbe\xde\x1e\x11\xb0\x4d\xce\x3c\xe4\x04\x4b\xd5\x3b\x96\x27\x27\x94\x33\x51\x6b\x83\x88\xd0\x40\xfa\x00\x19\x08\xca\x5e\x48\xdd\x72\x5f\xe2\xd4\x3c\xc3\xba\xf5\x8f\x1c\xfa\x3d\x8c\xce\xe8\xf9\xf3\x3c\x0b\xdf\x38\x96\xbc\xf9\x59\x18\xc3\xff\x2d\x3f\x0f\x97\x13\xb6\x82\x12\xc3\x5c\x32\x1a\xda\xe5\xc5\xf8\x1a\x18\xfb\x37\x27\xc9\xc3\xf1\xcd\xe9\xd7\xa7\xaf\x8e\xdd\x5c\xbf\x3e\x71\xb3\xce\x9e\x84\x57\xe1\x49\x08\x5f\xd2\x8c\x84\xc9\x1e\x85\x4b\x45\xf9\x1a\x8f\xba\x29\xc9\x08\x11\xb0\x1b\xb9\x62\xc6\x7a\x48\x91\x80\x14\x4c\x50\x47\x81\x66\x1f\xb5\xbb\x3f\xf0\x34\x49\xcb\xfe\x34\xd7\x8d\xf8\x53\xd2\xfc\x89\x3c\xa1\xa7\xa2\xe8\x05\xa8\x35\x3c\x7b\x23\x67\x79\xb2\x3a\xb9\xa8\x45\xb9\x32\x30\x68\x83\x98\xbe\xee\x9b\x18\xd7\x2d\x14\xa4\xfe\xa7\xc5\x7e\xad\x66\x95\xb0\x10\x7e\x81\x79\x4a\x28\x54\xb9\xbe\x22\x56\x78\xe9\x13\xb2\x24\xdc\xe1\x48\xef\x2b\xc2\x6b\x36\x95\x98\xff\x81\x0a\x23\x6f\x29\x30\x0f\xcd\xfc\x53\x07\xc5\x94\x03\xaa\x43\xa8\x0a\x8e\x25\x47\xe2\x0c\xc1\x0e\x96\x7e\xbb\xa2\x10\x5f\x0c\xa5\x81\x4a\xe4\x1d\x87\xb0\xdb\x7b\x88\x8c\x82\x11\x91\x33\x24\x45\xc1\x66\xb2\x29\x87\x35\x87\xf8\x85\x45\x2d\xcc\x20\x1b\x2d\xd4\xec\xd8\xc3\x2f\xd0\xbf\x70\xba\x3f\x1a\x84\xdd\x58\xb3\x13\x9f\xa4\x82\x6f\x1a\xa7\xe5\x9d\xef\x4f\x9d\x41\x5f\x83\x8d\xdb\x9f\xee\x6c\x9f\x7a\xc1\x30\x7c\x69\xc3\x6d\xfa\xc5\xc7\x71\x26\x3e\x07\x2c\x0b\x49\xd1\x5b\xf0\x56\x04\x07\x3a\x29\x47\x18\x83\x80\x11\x97\x8e\x76\x62\xa5\x48\x19\xaa\x5d\xf6\xb9\x2a\x8f\xe6\x4d\xc5\x8d\x95\xc5\xf7\x95\x2e\xee\xaf\xad\x6e\x96\x0e\xa8\xb7\x0d\xe2\xec\xd7\xeb\xa5\xce\xb2\x70\xd7\x4d\xfa\xef\xaa\x8f\xb3\x4d\x51\xec\xec\xd7\x6b\x76\x21\xcd\x7d\x5a\xb1\x9f\x2f\x05\x21\x70\x76\xdf\xde\x89\x0a\xd0\x5d\x20\x0e\x95\xd4\x73\xaf\xaf\xa9\x80\x85\x14\x63\x53\x76\x4f\xe2\xc3\x68\xaf\x53\x3c\x22\xf3\x15\x7f\x34\x02\x67\x7f\xe7\x66\x6f\x60\x1f\x57\x5e\x01\xfe\x5f\x6d\x23\xdc\x2a\xf6\xdf\x66\xdf\x43\xff\xbd\xf5\x5f\x74\x37\xd4\xfd\xce\x2e\xb8\xe5\xb8\xaf\x10\xe8\xeb\xe3\x5a\x60\xef\xdc\x9e\xdd\x01\x0b\x83\x3f\x25\x3b\xb6\x61\x75\x6f\xe5\xb2\xc8\xbb\xdb\xea\x5c\x0f\xbb\xad\xce\x7d\xb1\x72\x75\xf0\x07\x9f\x1b\xfd\xf4\x05\x16\xa2\x9e\x4d\x96\xac\x81\xfd\x93\xa5\x44\x3d\x7b\x7b\xdd\x7b\x69\xd8\x3c\xe7\x0d\xee\x37\xf6\xf6\x7a\xc5\x5a\x50\x11\x9d\xf1\x86\x52\x80\xcb\x17\x86\x55\x72\x22\xac\x9c\xaf\x21\xc6\x42\xaa\xf2\x09\x09\x7a\xe7\xf0\x79\xff\xd5\x40\xf3\x7c\x35\x38\x03\xcf\xea\xc2\x3d\xe6\xfe\x44\x30\x8c\x8d\x6e\x74\x7e\xa1\x57\x5e\x5a\x92\xb0\x0d\xcc\x55\xea\xd3\xf9\xc2\xfc\x56\x0d\x71\x94\x61\x5d\x9e\x7e\x78\x73\x76\xf1\xee\xcd\x68\x5e\xae\xd9\x10\xc8\x45\x7b\xc7\x97\x64\x87\xfe\x7b\xe2\x7b\xe8\xbf\x2d\xfe\x8b\xce\xce\x84\x9f\xe9\x5c\x41\xd7\xa8\x75\xdd\x56\x28\x3c\x49\x43\xdb\xb6\x66\x29\x46\xee\xbf\x88\xeb\xcb\xfe\xd3\xbf\xbe\x64\xc7\xe7\xe1\xf9\xa1\x38\x58\x06\x70\xfd\x13\x5e\x88\x93\x74\x59\xa2\x9e\x89\x39\x64\x5a\x13\x07\x0d\x2c\x7c\xc6\x55\x59\xe1\x7b\x56\x88\x06\x20\x73\x42\x26\xb9\x1b\xa2\x6c\x24\x60\x3f\x1c\x7f\x2f\x6c\x30\xf5\x9f\xac\xb9\xa5\xa5\x7e\x54\x8f\xbc\x29\xcf\xc6\x97\x7b\xef\xc1\x45\xec\xa3\xf7\x5e\x24\xdf\xa4\xab\xf6\xd3\x01\xa1\x8f\xdf\xe9\xd6\x06\x05\x79\xbf\xb3\x05\x57\xcc\x85\xdc\xff\xe6\xbe\xa1\x0e\x7a\xaf\xcc\x7f\x90\xd3\xa8\x15\xf3\x5a\x37\xbc\x59\x50\x21\x3a\xdd\x2c\x36\x72\xa1\x27\xbf\xb3\xb0\xf0\x52\xae\xb1\x74\x05\xea\xda\x7f\x5f\x7c\x0f\xfd\x37\x26\x50\x74\xb6\x33\xc4\xd0\x56\x50\x77\x40\xc7\x08\x57\x00\x49\x1b\xfd\x65\xf8\x1d\x6d\x59\xb1\x28\x50\x05\xb7\x32\x13\x57\x28\x70\xd1\xd7\x62\xb6\x6c\x98\x96\x02\xf0\xe8\xaa\x77\x62\xa2\x9b\x68\x8a\x31\x96\x37\xd6\x10\xaa\xbd\xe3\xa6\x1e\x5f\x36\xd8\x6a\x8c\x87\x42\xc1\xa2\x73\x3e\xce\x42\x4e\x5e\x33\x7e\x92\xe6\x13\xf8\x80\x3b\x25\x44\x09\xbd\xc8\xc4\xe4\xd3\xb4\xca\x0c\xd8\xdd\x89\xbf\xa3\x06\xed\x87\xcd\x9c\x57\xf4\xbd\x5b\xdc\x3d\x62\x84\x6a\xf0\x04\x43\x8d\x3d\xa3\x78\x6d\x66\x1a\xb0\x38\x0a\x5e\xf3\x42\xda\xc5\xad\x62\x8c\xd9\x86\x17\xf7\x10\xc4\xdc\x08\x1a\x72\x70\xab\x0a\x9c\x51\xbe\x87\xdd\x34\x06\x04\xa0\xe3\xa1\x15\x60\x0a\xd3\x16\xac\xfc\x3e\xc0\xc5\x96\x0b\xc5\xe7\xb2\xf0\x2b\x06\x1f\xa5\x91\x9a\x52\x5c\xa0\x5f\x98\x1c\x67\xdd\xbc\xe1\xf3\x8a\xcb\x39\x3b\x36\x42\xb0\x95\xd4\x04\x1a\xe6\x5c\x37\x60\xc2\xca\x34\xe4\x18\x50\x4c\x40\x40\x89\x77\x22\x30\x04\x50\xcb\x70\x68\x55\xae\x1e\xfc\x24\x9c\xdf\xea\xb9\xe9\x06\x32\xdd\x7d\x8e\x88\x50\xa5\x6e\x86\xb4\x6d\x85\xe3\x51\x08\xd2\xe2\x0f\x0b\xad\x5d\xd8\x13\xa1\xb7\x40\xc5\x18\xc0\x29\x41\x64\x20\x4f\xaa\x88\xae\x22\x55\x29\x1f\x64\xd9\xf2\x0a\x04\x29\x3f\x19\xc7\xc5\xe1\x73\x39\x9d\xd9\xe1\xa3\x70\xff\xc3\xa8\x7a\x49\xb8\x44\x7e\x50\x42\x25\x8c\x9c\xdf\x1d\xed\x5c\x70\x94\xd1\x02\xec\x11\xd8\x07\xf9\x82\x0d\x99\xdb\x6f\xf0\x28\xe9\xa2\x8d\xa0\xd0\xb4\x46\xea\xc2\xef\x7c\xba\xeb\x30\xbd\xb3\x60\xc5\x6a\x8d\x60\x77\x9a\xaa\x7c\x03\xe9\x2e\xcf\x0d\x4c\x72\xdd\x44\x3c\xb3\x84\x8f\x15\xeb\x39\x40\x80\xc8\x5d\xf2\x6e\x45\x7b\x63\x04\xa7\x0a\x77\xf1\x07\xa1\x44\x23\x8b\x0e\xf1\xac\xab\xb9\xb8\xe6\x05\x9c\x14\x7b\xf3\xc0\xb7\xe7\xbd\x99\xdf\xdb\xf3\x9c\xeb\xbd\x95\x77\x8d\x60\xe7\x33\xae\x94\xa8\x3e\x81\x9a\xb6\x66\xad\x95\xf8\xb8\xa4\x66\xef\xb8\xe6\xd0\x45\x9f\x55\x87\xc6\xf9\xea\xa7\x78\x70\xdd\xcc\xcc\xb0\xfc\xc0\x44\x44\x79\x1a\xb6\x02\xa3\x5e\x01\x37\x47\x14\x94\xb8\x51\x57\xed\x74\xad\xbb\x75\xe2\x14\xcc\x27\x08\xed\x6f\xf1\xfb\x1d\x56\x0b\xed\x3b\x07\x4d\x3f\x76\xe5\xf6\x0d\x07\x4b\x01\x1b\x09\x82\xb7\x3b\x55\xdf\x11\x41\xa3\x06\x10\x17\xb2\xf4\xb4\x4a\xad\x35\x26\x4d\x0b\x11\xf9\xdb\x93\x34\xea\x1f\xce\xdf\xe4\x3d\xf5\xde\x9c\xa5\x2f\xf3\x6d\xfa\xe1\xfc\xcd\x97\x6a\xb1\x98\x16\x22\xf2\xb0\xd2\xed\xde\xea\x4d\x96\xf6\x83\xa8\xf5\xfe\x5b\x8b\xdf\xf7\xdf\x50\x6c\xdf\xb9\x58\xd2\xba\x1f\xb4\x91\x20\x61\x62\x18\x6c\x8c\x72\x6d\x04\x5e\xab\x11\xbb\x78\x33\xfe\xf0\xe6\xfc\xec\xe6\xcd\xc5\x6b\xe6\x7b\xca\x80\xdf\x46\xec\x46\xc7\x7b\x88\x5a\x16\x29\x2e\xe4\x5d\xf3\x63\x0d\x48\xc1\xe6\x8a\x05\xd9\x57\xa2\x53\x99\x5d\x2a\x69\xa3\xc6\x43\x40\x7e\x5a\x09\x1f\x4a\x55\x6b\xba\xd6\x53\x69\xa9\xd8\x0a\x99\x17\x66\xa2\xd3\x5b\xcc\xb2\x8c\x79\x44\x6b\x4e\x02\xa5\xc6\x27\x18\x1f\x7e\xf0\x3d\xf4\x3f\x0d\xff\x45\x87\xac\xc3\xcf\xbb\x19\x21\x7a\x69\xec\x44\xa0\xa7\x61\xbd\xdb\x74\x76\x37\xec\x98\xdb\xd9\xde\xfb\xf2\x23\x75\xd0\x7b\x5b\xfc\x07\xf9\xae\x84\x94\x50\x10\x69\x9d\x48\xac\x9b\x44\x2f\x4a\x37\xc9\x5f\x70\xcf\x0d\xb0\x55\xb5\xe8\x5e\xf4\x24\xb7\xcc\x0b\x12\x88\xb4\x5c\x55\x0b\x94\x80\x00\xed\x1a\x53\xf1\x39\x02\x35\x3b\xe9\xce\xa2\x57\x55\x3e\xc8\x4a\x60\xfd\x76\x09\x65\x57\x3c\x1a\xbc\xcf\x48\x80\xfc\x48\xb1\x34\x2f\x77\x4e\x50\x21\x8a\x46\xa7\xc8\xe6\xab\xf7\x37\x58\x26\xd0\x89\xa3\x4f\x66\x40\x6e\xc0\xda\x1d\xdb\xca\x43\x95\xe6\x29\xf6\x8b\xcb\xeb\x5d\x2c\x18\xd0\xba\x63\x3c\xc4\xdf\x3e\x23\xef\x5e\x77\x0d\x60\x23\xb6\x5d\x81\x1e\x7e\x95\x5f\xbc\x62\xa9\x10\x6e\x39\x80\x39\x5c\x5c\x5d\xff\xfd\xa7\xb3\xef\xdf\xfc\x04\x53\xce\xd3\xda\xf7\x7d\x6c\xf4\x83\x7b\xc6\xc5\xe3\x29\x01\xdc\x0d\x5d\x7f\x43\x0a\x0c\x3d\x05\x5f\xde\xe9\x57\xf0\x3f\x7b\xf8\x90\x9e\xc0\x01\xaf\x76\xb0\xbd\x5e\x75\x0c\xaf\x8a\x5d\xed\x6c\x75\x7d\xea\x1d\x71\x6b\x5d\xb9\x09\xf5\x2a\xc5\x6e\xef\x6d\x59\xa9\x26\xf6\xde\xa8\xad\x5f\xe7\x6c\x32\xa9\x0b\xad\xd7\xaa\xcf\x69\x48\x50\x74\xfd\xee\xbb\x9d\x71\xb7\x86\x7e\x67\xe3\x4f\xf8\x4b\xe1\x86\x5d\xb7\xd9\x33\x6d\xb5\x3a\x90\xac\x39\x5e\xd1\x59\xff\xad\x5e\xf1\x71\xbe\xbb\xd8\xe2\x3c\x14\x1a\x48\x15\x55\x27\xe5\xed\x66\x62\x5f\x9f\x93\xfd\xa8\x9b\xa7\xea\x5c\xe3\xac\x9b\x3e\xab\xcf\x3e\xe8\x3c\xbe\xf4\xb7\xbd\x3c\x09\x6b\x96\xd9\xe8\xff\x84\x9c\x83\xfd\x57\xe8\x7b\xe8\xff\x14\x41\x5d\x62\x08\x52\xaa\x2a\x77\x0b\xb4\x4a\x2b\x24\x20\xf0\x8a\x19\x90\x73\x60\xce\x6b\x6f\xcd\x4a\x2c\xcc\xab\x57\xf3\x5b\xab\xef\x16\x76\xff\xd3\xfa\x1b\x7e\xdf\x7b\x25\xd4\x3e\x3f\x25\xff\xe3\x21\x7c\x57\xcd\xdd\xfe\x07\xf3\xe1\xfb\x8b\xde\x0b\xf9\xf0\xfd\x45\xbe\x88\x0f\xbc\xd4\x86\x81\x97\x9a\x5d\x88\x35\x7e\xc5\x83\x89\xc1\xcd\xdd\x56\xa7\x95\x29\x78\x25\x2e\xdf\xef\x0f\xa4\x8f\xdf\xf7\xde\x11\x6a\x9f\xef\x8a\xff\x71\x19\xa1\x6a\xdd\x55\x4c\xd1\x62\x74\x29\xd6\xa5\x68\x23\xcd\x3f\xa1\x4a\x80\xfb\xbc\xff\xda\x10\xda\x28\x5b\x9a\x87\x3b\xda\xe2\xaa\x79\xb2\x44\x4c\x2b\x5d\xbd\x0b\xd8\x56\xef\x2f\xfb\xac\x46\x20\xdb\xb8\x17\x01\xd2\xa6\x59\x8d\x46\x76\x98\x03\x7e\x30\xf5\x4c\xf8\x48\x91\xbd\x97\xf7\x0b\xf5\x82\xa8\xd9\x3b\xbd\xaa\xbf\xa4\x13\xe8\xb8\x71\xae\xe1\x4f\x4f\x7d\x55\xfe\x5b\x67\xd5\x9b\xa0\x65\xe8\x9f\x4f\x0c\x38\x42\xc6\xb4\x21\xec\xe8\x21\x69\x96\x62\xc8\xb0\x39\xaf\x01\xb4\x09\x72\x89\x1b\xfe\xc8\x20\xa2\x85\x95\x82\xea\x47\x13\xde\x55\x62\xae\xd8\x1a\x65\x84\xdf\xae\xd2\xd1\x3b\x93\x8a\x0d\x7d\x08\x58\x0d\xff\x8d\xc1\x80\xbe\xc0\x42\x6e\x79\xc1\x34\x92\x58\xdc\xfa\x4e\xc0\x12\x40\xe3\xda\x23\x48\xae\x87\x2a\xa5\x02\x7c\x4b\xcc\x55\x54\x11\xec\x68\x93\x40\x5b\xeb\x03\xc7\xac\x75\xd1\x88\x92\xad\x3e\x0c\x21\x01\x60\xdd\xd6\xf0\x35\x68\x95\x93\x91\xfb\x25\xd0\xd1\x2f\x19\x10\xd9\x6e\xd4\x03\x3d\xf5\x20\x1e\x20\x9b\x44\x71\x8d\x74\x92\x21\x88\xd0\x55\x8e\x79\xca\x74\x8f\x47\x0c\x95\x62\xa5\x83\xe5\x83\xbd\x78\xfd\x62\x0f\x12\xc2\x09\x53\x11\xb1\x1c\x63\x63\xd5\xbc\xbb\xcd\xbb\xc5\x1d\xe0\xef\x54\x41\xc0\x57\x26\x2b\xd1\x67\x1a\xc5\x0d\x9d\x2e\x97\x12\x93\x28\x38\x9a\x2f\x18\x6f\x74\xab\x7c\xf2\x54\x48\x7f\x7f\xd7\x19\xf8\x8a\xf0\xaf\x11\xdd\x2d\xaf\x9d\x01\xde\x2b\xa9\xd8\xab\xd1\xab\x97\x9f\xe6\x56\xc1\x78\x9d\x5b\x15\x21\xc4\x90\x80\x3e\x1d\xdc\xe3\x3b\x62\xe6\xae\xf9\xd0\x67\x02\xd8\xa6\x15\x03\xfc\x09\x60\x1f\x93\x5c\xf6\x63\xc4\x84\xd4\x4d\x8a\x46\x79\x92\xc3\x3c\x40\x93\xbd\xa0\x1e\xdb\xbb\x3d\xe8\x9d\x08\x1b\x08\x23\x92\x7b\x20\x8b\x17\x66\x03\xe9\xa7\xd3\xbe\x3d\xba\x3d\x62\xc7\x21\x10\xa1\xd1\xda\x9e\xec\xb1\xf1\xb4\x88\x37\x1f\xeb\x6d\xb8\x1b\x6f\x3e\xd6\x5c\x95\xa2\x44\x66\x7f\xa0\x15\x7d\x2f\x66\xfc\xc1\xa9\x4c\x72\x2e\x2b\xde\x60\x05\x87\x6b\x9c\x13\x24\x01\x08\xf5\x20\x1b\xad\x20\xa9\xe3\x81\x37\x98\xee\x10\x8c\x13\x86\xfd\x3f\xc7\xbf\x9c\x7d\x00\x44\xae\x13\x5f\x41\x13\x67\x19\x71\x6a\xd2\x99\x24\xdd\xf5\xd8\x4e\x3f\x13\xb7\x3b\x70\x5f\xfd\xcc\xdc\x48\xf3\xd6\x89\x30\x60\x0d\x2e\xaa\xd6\xc8\x87\xde\x74\xbf\xe7\xa3\x11\x39\xec\x61\xde\x8c\x2b\x5d\x8a\x15\xb5\xd4\xd6\x00\x59\x26\x8d\x43\x4c\x4b\x5a\x37\x08\x5e\xf9\x4a\xce\xa5\xe3\xe2\xdc\xa2\x2c\x99\x85\x44\x50\xf6\x5f\x88\x89\x76\x04\xd3\xe3\x61\x49\x36\x67\x4f\x73\x62\x92\x93\xbe\x59\x87\xf4\xe9\x23\x49\x22\xb3\xd3\xd6\x21\xb7\x68\x69\xad\x3e\x5d\x60\x2e\x0e\x5a\x83\x00\xb7\x9b\x6c\x12\x9b\xa1\x9f\x62\xa3\x2c\xe8\x3c\x58\x44\x18\xaf\xb4\x9a\xa2\xcb\x0c\x5f\x99\x08\x01\x9c\x84\xa9\x98\x5e\x55\x3e\x0e\x15\x70\x99\xac\x6c\xd3\x59\xa4\x11\x37\x31\x16\x2f\x46\x5b\x96\xdc\x72\xaa\x02\xba\xbe\x60\xe0\x81\x03\x0c\x9f\x34\xf5\x64\x2e\xfd\x26\x7f\x10\x8d\xfa\x49\x53\x26\x8d\xba\xe7\x6c\x21\x22\xe0\xac\x80\x64\xf6\x1b\x7d\x2f\x96\x04\xaa\x5d\x6b\x06\xa7\x7d\x3d\x71\x1d\x4b\xfd\x6d\x58\xd4\x93\x2f\xf0\x66\x15\xb7\x27\x98\x78\x47\xa5\x7d\xc6\x0f\x4f\xd6\xd2\x4b\xae\x41\xf3\x07\x96\x3a\xbc\xbc\xd8\x56\x2b\x94\xe2\x0b\xb1\x39\xfb\x1e\xe2\x7b\xde\x71\xc5\xa7\x88\x1d\x74\x7c\x3d\xfe\xfe\xdd\x89\x23\x16\xf0\x18\x5f\x5e\x30\x6e\x8c\x2e\x64\x5e\x1f\xff\x3a\x1d\x13\x2a\x56\x3d\x71\xde\x3d\x60\xb3\x77\x9c\xb9\xda\x6f\x56\x48\x85\x7d\xa5\x5d\xf4\xc0\x42\x52\x39\x3c\xa2\x1d\x5a\x7e\x98\x97\xf7\x87\x95\x94\x92\xe9\x3d\x55\x34\xfa\x15\x02\x1e\x45\x39\xd6\xa5\x17\x77\xb6\x60\xf7\xdc\xcc\x04\xc3\x30\x49\x44\x76\xab\x2a\x6f\x02\x41\xb4\x9d\x92\xad\xe9\xd3\x17\x30\x03\x57\x3f\xe0\x6a\xd6\xa2\x19\x22\x78\x2b\x01\x8a\x40\x2f\xee\x96\x61\x8d\x50\x77\x51\xdc\xdf\x8f\xcd\xc9\x76\x3e\x50\xaf\x5d\x01\xdb\xd1\x01\x94\xf7\xd3\x47\x82\x1a\x31\x8c\xd5\xf4\xa5\x80\x00\x7d\x68\xb0\xf2\xd2\xe4\x58\x26\xb8\x91\x6b\x4c\x90\xf8\xc7\x2d\x14\x48\x11\xab\xdd\xa1\x92\xa2\xcd\xdd\x31\x3b\x1b\x35\xe8\x20\x02\x0f\x5f\xbd\xec\xea\xd2\x7b\xa2\x3d\xf4\xa4\x66\x5a\xe6\x60\xfd\x51\x3e\x99\xc8\xa5\x2a\xf5\xa3\xb9\x16\x45\xdb\x60\xdd\x2a\x2b\x3e\x5a\x04\x8c\xde\x54\x47\x6e\xe3\x77\xc1\x1c\x43\xad\x62\xac\x72\x28\x61\x89\x25\x08\x43\x99\x81\xed\x34\x3c\x9d\x1b\x7e\x1e\xbe\xb8\xae\xc5\x52\xbc\x6c\x37\x14\xea\xdd\xf5\x59\xfe\x01\x93\x50\x43\x97\x42\xec\xdd\xdf\x19\x2f\xe7\x12\x4b\x55\x3d\x8a\xbb\x99\xd6\xf7\xec\xd8\x3b\x02\xa6\xd2\xce\xda\xbb\x51\xa1\xe7\x89\x4f\x60\x68\xe4\xd4\x9c\x3e\xd2\xb2\xdc\x9c\x4e\x98\x54\x95\xf4\xa1\x64\x6e\xe1\x09\x72\x16\x0e\x12\x17\x0a\xea\x04\x25\x8b\xd2\xcb\xb9\x3c\x4d\xb0\xa1\xec\x0b\x65\xb1\xbc\x4d\x3d\x5e\x8e\x35\x73\xe8\x24\xf5\xae\x5d\x0f\x96\x95\xd8\xc7\xd4\xd3\xaa\x33\xf3\xb3\x11\x4d\x8f\x39\x3a\xde\xea\x9b\xb2\x48\x5a\x6e\xf0\xa6\xc5\x5b\x0a\x18\x73\x50\x76\x72\xd9\xf2\x4c\xd5\xd4\x73\x4d\xdf\x35\x69\x8d\x53\x86\x42\x0a\x82\x54\x4c\xce\xdd\x2b\x3a\x17\x96\x83\x64\xd8\x91\x3f\xd8\x3b\xbe\x60\xbc\x32\x1e\x79\xdf\x7d\x31\xd6\x65\xe7\x22\x40\xce\x39\xfd\x15\xa2\xd3\x3b\x7f\xc7\x5c\x80\xa5\xcf\x32\x5c\xc6\x74\x4e\xdd\xcf\x2d\x14\x00\x8e\x30\x1c\x9f\x1a\x94\xb1\x94\xa6\xd0\x0f\xa2\x59\x40\xce\x0d\x15\xf7\xdc\xc0\x1e\x7c\x93\x8e\x5f\x4e\xaa\x69\x25\x58\xa5\xa7\x00\x31\x73\x7b\x44\xf5\x95\x9d\x94\xe7\x6b\x64\x13\xf8\x7d\xef\xaa\x93\x54\xa5\x76\x2b\x9e\x61\x68\x87\xb4\x21\x63\x2d\x7d\xcc\xe3\xc9\x6f\x6e\xb0\xa4\x72\x70\x10\x5a\xd1\xd4\x0d\x24\xe0\xf0\xa2\xd0\x4d\x8a\x23\x9d\x3f\x20\x79\x4d\x5a\x1a\xd3\x09\xe1\x1e\x53\xe8\x5c\x2b\xd3\xce\x45\x43\x96\x53\x4c\x33\x0a\xf8\x56\x36\x66\x31\xc4\xf9\x26\xd6\x71\x77\xf4\x48\xda\xb2\x61\xfa\x51\x41\xde\xcd\x9d\xac\xa4\x05\xe8\xbf\x68\x91\xf5\x0c\x98\x5b\x56\x09\xee\x64\x73\x15\xa6\x03\xc6\x34\xa5\x31\xb1\x02\x72\x42\x96\x9f\xb5\x83\x02\x31\x66\x7f\x5a\x5f\xff\xd2\xac\x73\xa5\xae\x2f\x2c\xba\x55\x72\x59\x49\xb7\xe7\xb1\xbf\x4d\x12\x4c\x1c\x36\xc2\x64\xac\xb1\x45\xac\x2c\x57\x19\xe8\x6b\x8d\x45\x22\xc4\x38\x7b\x14\xa7\xee\xea\x78\x89\xe3\xf3\x6a\xbc\x9a\xf8\x77\x3a\x93\x25\xcf\x5d\x77\xf8\xa4\xc8\xa3\xff\x25\x5d\x6e\xcd\x9b\xc0\x57\x1f\x5e\xdd\x09\xcb\x5f\xb1\xb3\xf1\xe5\xfa\x9a\xdd\x83\x95\x45\xbb\x43\xd6\x4c\xd2\x47\x92\xc9\xc6\x8e\x95\x66\x46\x6b\xe5\xf3\x95\x22\xb5\xb0\x87\x57\xa3\xaf\xbf\x3d\x19\x31\xf6\x2b\xe5\xaf\x85\x71\x0b\xae\xd8\x4c\x57\x1e\xb1\x3b\xc5\x0d\x7e\x6c\xa4\xa5\xba\xe3\x98\x5c\x86\x63\xbb\x61\x71\x82\x5c\x2d\x7c\xe9\x22\x78\x14\xd0\x71\x60\x75\x9a\xa1\x67\x64\x25\x14\x28\xa9\x88\x5c\x9c\x94\xca\x4f\xb7\x88\xcc\x9a\x13\xdd\xaa\x50\x31\x19\x10\x83\x00\x7b\x58\x97\x22\x3e\xed\x8e\x94\x8c\x15\x7c\xdd\x1b\x9f\xf2\xe3\x2e\xe5\xcc\xa4\xb2\x07\xba\x0a\x3f\x42\x57\x9b\xe8\x04\x06\x5b\x73\x01\x3a\x82\xf5\x4c\x3f\x42\x5e\x8c\xe7\xfd\xd1\xc8\x5f\x20\xd7\x5b\x97\x0f\x34\xd3\xc6\xf6\x70\x38\xf9\x66\x2b\x39\x78\xa0\x85\xb4\xca\xfe\xdd\xc2\x0f\xdd\x98\xbc\x74\xb7\xd5\x80\x52\x28\xd5\xb4\x95\x66\x96\xfc\x01\x7c\x17\x80\x32\x86\x76\xd2\x63\x31\x9a\x8e\xdc\x61\x5e\x5c\x5d\x63\x64\xe3\xc9\x88\xbd\x6b\x2b\x0b\xf8\xf8\xf1\x3b\x74\x77\xb4\x26\x81\xc0\x09\xf3\xcd\x37\x82\xa0\xae\x26\xad\x9a\x02\x5e\x15\x8e\x30\xf7\x5d\x9e\x79\xe8\x35\x1c\xf3\x24\xda\x61\x2a\xfd\x28\x9a\x82\x1b\xa4\xa7\x9a\x1b\x03\x93\x02\x20\x4a\x76\xfc\xe1\xed\x39\x7b\xf5\xea\xeb\x6f\x4e\xdc\xf7\xb2\xc4\x5c\xb9\x3d\x1c\x7f\x44\xa6\xdb\x5c\xea\x9e\x9a\x3b\xb0\xb4\xa9\xb0\x78\xe5\xf4\x57\xb7\x09\xa8\x6c\x2d\x1f\x18\xdd\x17\x0f\xde\x17\x11\x2f\xe3\xb6\x62\xba\x21\x04\x9e\xba\xee\xb2\x93\xa6\xcf\x29\xaf\x2e\xea\x91\xd9\x23\x7c\x15\xae\x5d\x92\x8e\xb7\x0f\xbc\x3a\x80\x49\x7e\xae\x52\xa1\x61\x34\x4c\x45\xec\x84\xe0\x26\x71\x3a\x84\xbe\x04\x76\x96\xec\x28\xd2\xdd\x5e\xbd\x22\xc7\x99\xb6\x9c\xf2\x7f\x91\x83\xb9\x7b\xb2\xff\x5b\x2b\x91\x8f\xc1\x04\x61\xe3\xf7\xa6\xb9\x9e\x2a\x70\x94\xef\xf6\x55\x75\xb7\xc9\x00\xdb\xa5\xd8\xd8\x78\x5d\xc5\xf4\x20\x2b\x50\x46\x6d\xdc\xfa\x1e\x4e\x2d\x5e\x6e\x73\x76\x43\x9b\xac\xe0\x05\xc4\xd1\xa4\xfb\x8f\x65\xb0\x6b\x4e\x16\x54\xa7\x19\xc8\x07\xc1\x6c\xc3\x27\x13\x59\x0c\x72\xc1\xf5\x71\xc6\x2d\x20\xe5\x93\x51\xd7\x89\x8d\x5c\xf1\xa9\xb7\x8a\xc4\x7b\x7a\xc6\x94\xac\x3c\x02\x66\x18\x9f\x2b\xd6\xaa\x7b\xe5\x24\x50\x28\xde\x0e\xd0\x6e\x60\x9d\x2a\xa0\x92\x7f\x64\xba\xc4\xfa\x82\x08\x8d\xb3\xce\x3e\x66\xdc\x80\xcb\x9e\x20\xf7\x0a\x3d\xaf\xb9\x95\x20\xd5\x2e\xdc\x1f\x8c\x56\x06\x9d\xfa\x0b\xdf\x9d\x82\xc9\x83\x95\xd8\x36\xad\x87\x09\x44\xee\x81\x16\xe8\xc0\x41\xf6\xab\xdc\xd8\x3c\x38\x62\xdd\x7c\x28\xd4\x0a\x0a\x1a\x04\xd8\x4c\xd8\x7a\x37\x53\xf1\xb1\x10\x35\x5d\x4c\x94\x46\x0c\x84\x29\x4e\x79\x53\x56\x50\x8d\x8a\x0a\x1c\x25\x93\xc6\xed\x48\xdf\x29\xcf\x28\x03\x79\xc5\xa7\x84\x50\xfe\xdc\xfa\x31\xfe\xd8\x0f\xec\x29\xc2\x67\xbf\x24\x23\x80\x5a\xaa\x64\x35\x58\x3e\xa1\xd2\xb1\x18\xaf\xd4\x60\x4f\x61\xd4\xdd\xb9\xee\x4d\x1c\x33\x5c\x9e\x3e\x1c\x78\xe3\xb1\x24\x0b\xd9\x72\x34\xe9\xa6\x6e\xbb\x35\xd9\xf6\xf4\x25\xf7\xf3\x9d\x08\xdc\x6a\xc8\x84\x8f\xe1\x6f\xe9\xf8\x00\xdf\x99\xce\xe1\xf7\xdb\xeb\x83\x5a\x07\x7e\xec\x48\xa9\xeb\x98\x2b\xb4\x8b\x98\xf2\x28\x6f\x52\x60\x1a\x40\x8e\xf6\x90\x2a\xb7\x7b\xc2\x74\xe3\xde\xac\x6d\x46\x02\xdf\xac\x53\x5b\xc8\x3d\x83\xc7\xe6\xa4\x43\x3b\xcb\x13\x01\x9b\x9e\xa6\xe3\x4a\x70\xa7\x1f\x79\x23\x58\xa3\x5b\xbb\x5c\x3e\x63\x5f\x18\xf9\x6c\xcb\xdf\xe2\xb4\x0f\xac\x8f\x73\xab\xe7\xb2\xf8\x54\xe4\x31\xce\xeb\x04\xae\xa3\x0e\xd7\xac\x93\x30\xe3\x7e\x69\x03\x92\x5e\x7e\x17\xfa\x60\x4d\xd6\xe3\x46\x5b\x5d\xe8\x25\xd0\x99\x15\x16\x47\xa8\xb3\x51\x90\x02\x4c\x9f\x11\xe2\xa4\x7b\x70\x75\x93\xeb\x1e\x13\x8d\xb5\x55\x8d\xe5\xaa\xe4\x4d\x99\x4a\x6a\x84\xf6\xbe\x50\x96\x7f\x1c\xb1\x9f\xd5\xb0\x6e\xc4\x44\x7e\x14\x65\x52\xa8\xd6\xad\xb2\x79\xa0\x2c\xd1\xcb\xb3\xab\xb3\xd8\x93\xcf\xb3\xc7\xc6\xc7\xdc\xb0\x5a\x34\xec\xc3\xdb\xf3\xe1\x77\xdf\x7c\xf3\x67\xd0\x08\x66\xd6\xd6\xaf\x4f\x4f\x1f\x1f\x1f\x47\x92\x2b\x3e\xd2\xcd\xf4\x14\x70\x70\x21\xc8\xc9\x9c\x52\x17\x43\xaf\xc5\x5c\x69\x35\x0c\xfd\xfb\xd5\x05\x8e\xe6\x54\x99\xce\x14\x4d\x5b\xcc\xdc\x6b\x3d\x5f\xc0\x23\xad\x16\x60\x1d\x9f\x2f\x86\x45\x6b\xac\x9e\x0f\x7d\x1f\x9f\x2a\xde\x30\x15\x42\xc3\xf6\x9f\x55\x15\x43\x08\x18\xc0\x2e\xee\x98\xe0\xc8\xca\x06\xa0\xd7\x94\x2a\x89\xf9\x94\x54\x1b\x27\x6f\x0d\xf6\x8b\xe6\x41\xfa\x70\xcd\x4c\xd4\xa6\xed\x1b\xf8\x3a\x58\xde\xee\x17\x4c\xc9\x14\xac\x30\x82\xd9\xfc\x9f\x7f\x1f\xe1\x40\xb1\x76\xa4\x90\xa0\x51\x62\x09\x49\x2c\xce\x41\x95\x55\x74\x13\xd4\x39\x4a\xed\x8c\x3a\xdc\x6b\xf6\xa7\x10\x60\x94\x59\xed\xbe\xfb\x86\x15\x33\xde\xf0\xc2\xba\x77\xa8\xd2\xee\xed\xf8\x53\x30\xff\x19\x2a\x6f\x01\x4a\x23\x43\xad\xb1\xaa\x67\x5c\xb9\x67\x4b\x16\xe9\xa7\xba\x61\x2f\x86\x2f\xc2\xc7\x80\x3b\x04\x04\x25\x14\xbd\x39\xbe\x62\xc7\xd2\xc7\x11\x24\xdd\xd7\x0f\xdb\xb1\x4a\x50\x27\x4b\xad\x07\x09\x40\x51\xcf\x08\x0d\x9e\x8b\xab\x97\x44\x1a\xcb\x28\xaf\x48\x22\xbe\x8e\x70\x23\xdc\x4c\x30\x32\x2a\xc3\x7b\x8d\x96\xde\x95\x66\x57\x16\x3c\x59\x5e\x80\x3a\x38\xfa\x7b\xdd\x9f\x3b\x5d\x8e\xd7\x32\x25\x6f\x33\xf8\xf9\x62\x3c\x60\x37\xe7\xe3\x81\x3b\xe5\xeb\xf3\x9b\x71\x76\x62\x37\xe7\xbd\x4b\xbc\x1e\x94\xf9\x23\xaf\xde\xce\xfd\xf1\x56\xe6\x3e\x84\x50\x71\x26\x3d\x79\x12\xee\x82\x17\x21\x71\x21\x20\x5a\x2f\x55\x18\xf1\x5c\xd4\x82\x1b\x90\x4c\x45\xc1\xf4\x92\x0f\x4b\xd9\xcf\x83\x50\xca\x28\xd6\x82\x09\x95\xc8\x68\x97\xff\x53\x4b\x85\x7a\x57\xdd\x68\x8f\x78\xce\x26\x6d\x55\x31\x9a\xec\x0a\x7d\x64\x9b\x4b\xa3\x47\xec\x4e\xea\x60\xc8\xab\x8a\x7b\x2c\x60\x6f\xf3\x2f\x78\xd3\x48\xef\x75\x94\x26\x5f\x2a\x32\xd1\x8e\xc7\xc1\x69\x2c\x91\x85\xde\x25\x76\x2d\xd7\x77\xd7\xec\x2b\xe7\xf3\x16\xed\xac\x7c\x02\x70\xde\x8d\xe0\x5e\x75\x10\xf4\x2e\x82\x6b\x87\xe6\x83\x7e\x0e\xa8\x2e\x80\x2a\x74\xb5\x88\x51\x45\x8e\xe5\x5d\x8e\x1f\xbe\x7d\xcd\x3e\xe4\x39\xfe\xe3\x87\x6f\xd9\x19\xf6\x30\xc2\x36\xdf\xad\x68\xf3\x5d\xda\xe6\xed\xdf\x2e\xae\xf2\x36\xec\x6d\x5b\x55\xff\x3f\x7b\x6f\xdb\xdc\x36\x92\xe4\x0f\xbe\xbf\x4f\x51\xa1\x8d\x0b\x59\x0e\x8a\xb2\xbb\x7b\xfb\x66\x3c\xb1\x31\xa1\x96\xdd\x33\x8a\x75\xbb\xb5\x92\xbb\x37\xf6\x86\x13\xab\x22\x50\x24\xeb\x0c\xa2\xb8\x28\x40\x32\xfb\x1f\xfb\xdd\x2f\x2a\x33\xeb\x09\x04\x09\x90\x22\x65\x59\xc6\xbe\xd8\x69\x53\x55\x85\x7a\xcc\xc7\x5f\x66\x2e\xd9\x7f\x54\x3c\x43\xff\xda\x5b\x28\x96\xc2\x76\x84\xe9\xf0\x85\xfc\x5d\x14\xba\x3d\x6c\xe0\xfc\xea\x92\x1a\x3a\xd4\x2c\xa6\xf3\x2a\x30\xc5\x10\x64\x39\x9f\x73\xc7\xde\xdc\xb5\xe7\x81\x61\x01\x2f\xe5\x10\x78\x4d\xa0\x7e\x24\x2a\xbf\x13\x20\x29\x25\x6a\x9a\xcb\x3f\xdc\x68\x8e\x39\x65\x46\x9a\x2d\x91\xc2\xe5\xb6\xbe\xc3\xc0\x95\x5e\x2a\x04\xd8\x91\xaa\x3c\x18\xc1\xd6\xfb\x6a\x88\x92\x9b\xca\xd2\xc6\x3d\x26\x6a\x3e\xaf\x72\x59\x2e\xcf\x20\x25\x90\x1c\x57\xa5\x2a\xf4\x59\x2a\xee\x44\x76\xa6\xe5\xf4\x94\x17\xc9\x4c\x96\x22\x31\xfa\xc8\x19\x5f\xc8\x53\x98\x6c\x0e\x22\xed\x70\x9e\xfe\x8b\x8b\x96\xdd\x7e\xef\xdd\xab\x6a\xd9\x7a\x4f\x26\xc0\x9c\x66\x4b\x3f\x91\x40\x10\xfc\x35\xbc\xf8\x54\xb9\x8c\x1e\x01\x5f\x32\x99\x27\x59\x95\x0a\x08\xb9\xc2\x0a\x35\x6a\xc2\x5e\xbf\x7a\xf5\x6a\xad\xb5\x61\x2f\xd2\xbd\x73\xb7\x1e\x58\xbc\x0f\xf6\x75\x8b\xc4\xe3\x3c\xaa\x0e\xe7\x2f\xad\x35\x25\x5d\xbf\xbb\xf9\x18\x66\xe4\x90\xce\x66\xe9\xc9\xba\xbf\xce\xb8\xcd\x13\x41\xbc\xcc\xc5\xcc\x04\x46\x0d\xc1\x92\x4c\x82\xb7\xad\x1a\xcf\x65\x89\x09\xd6\x85\x2e\xb1\xe4\xe1\x05\xcf\x0d\x7f\x1f\x0b\x56\x2d\x52\x4c\x20\x74\x99\xb3\x0b\x3e\x17\xd9\x05\xd7\xcd\x21\x9f\xfb\xbc\xcc\x40\xd7\x4e\xcd\xfe\xed\x70\x9d\x2d\xe6\x60\x8f\xf5\xac\xd0\xe8\xfc\x8b\x28\x79\x4b\xe4\x28\xa9\x01\x78\x36\xc7\xda\xe1\x1f\xd6\x18\x8f\x41\x9c\x6a\xb9\x22\x28\x72\xc5\x7c\xc9\x3e\xbd\x5c\x94\xf7\xaa\xf8\x44\x62\x99\x4d\xb9\x32\x5e\xa2\xeb\xc5\xdb\x47\x1a\x1e\x24\x08\x80\x6b\xe5\x7a\x88\x98\x22\x7d\xc0\x95\xb4\x95\xe5\xaa\x19\xc8\x08\x00\x28\x0e\x12\x39\x4e\xb1\x1b\x0d\x81\x19\x0a\x50\x23\xc0\xbf\x52\xbe\xa9\x5c\xa2\xbe\x61\x29\x68\x34\xf6\xe8\x88\x5b\x75\x64\x74\xd4\x99\x80\xd0\x87\x0f\x48\x3b\xae\x82\x82\xf3\x87\xa2\x1f\xdb\x19\xf4\x41\xba\x69\x24\xe5\x6d\x76\x7e\xf7\x7b\x34\x37\x28\xcd\x70\x4a\xcc\xf4\x94\x08\x98\xff\x6c\x74\x4f\xa7\x54\x6c\xe2\xc8\xef\x15\xbe\xff\x78\xed\x34\xc8\x51\xb3\x85\x01\x9a\xdc\x39\xce\x7f\x74\xf7\x7a\x75\x2f\xfe\xb9\xbd\x54\xfc\x5e\xea\x2e\x76\x11\xd7\x36\x96\x8e\xed\xf3\xf2\x46\x2a\xd3\xae\x43\x58\x47\x2f\xc5\x7c\x39\x29\xa6\xe9\xa5\xaf\x54\x1b\x6c\x39\xd8\xb5\x03\xed\x4c\x32\xf0\xb6\x77\xa4\x19\xbd\x14\xf1\xac\xa5\x08\x73\xfb\xba\xcb\x10\x40\x84\x9a\xe4\x87\x8e\x1c\x02\xaf\xf1\xd3\x66\x03\x40\xa6\xf7\xcf\x0a\xac\x25\x7f\x3d\x03\xa0\x16\xde\x61\xb2\x0a\x49\x43\xdb\xc4\x1f\xe0\xc8\xf0\x94\x55\x63\x7a\xf3\x08\x17\xd0\xca\x16\xba\x26\x57\xd8\x80\x02\x81\x7a\x8e\x07\x08\x87\x6d\xbb\x1f\x5d\xf6\x1b\x10\x68\x3d\x9e\xb5\xc7\xb3\x7e\x8d\x78\xd6\xf8\xf2\x3e\x0d\x50\xeb\xc3\xa1\x89\xf1\xaa\x7a\x7c\x62\x8f\x4f\xec\xf1\x89\xdf\x26\x3e\xb1\xfc\x12\xb0\xf8\x72\x05\x0c\xcf\x8b\xb1\x2c\xa1\x64\x4e\x23\x2c\xbe\x29\x90\x31\xe2\xc4\x1a\x6a\x32\x9f\xa1\x62\xb3\xe0\xb2\xf0\x2c\xcd\x8c\xe2\x7b\x21\x40\x00\x47\x1e\xee\x21\x6b\x2f\xba\xaa\x3c\x52\x7d\xbd\x05\xea\xc7\xfa\x0c\x6d\xf6\x6a\x6c\xad\xb1\x08\x2b\xf9\x54\x21\xb1\x87\x4f\x8f\xec\x5d\x3b\xf7\x22\xcb\x18\xc2\x9e\x3e\x89\xa5\x7e\xc3\x5e\xb2\x78\xf2\x96\xde\xbc\x09\xa2\x9c\x62\xa0\x4d\x4c\x41\xb1\x94\xef\x28\x67\x41\xd4\x5e\x88\x9c\xc2\xaa\xa4\x36\xf3\x11\x11\x31\x9f\x8b\x28\x92\x64\xcc\x28\xbe\x26\xf6\x70\x94\xbf\xf4\x95\x7e\xe3\x59\x1a\x79\x75\xfd\x0c\x01\x11\xeb\xa6\x63\x46\xdd\x75\x46\x1d\xa7\x53\x88\x29\x80\x00\xd6\x4d\x08\xff\x7e\x88\x29\xad\x8b\xeb\x68\x0c\xeb\x90\x39\x9b\x54\x58\x29\x65\x21\xad\x35\x68\x1d\xf8\x72\x25\xb8\x61\x3b\xd3\xe1\x9e\xb0\xc0\x6b\xe5\xa7\x1e\x10\xdc\x03\x82\x7b\x40\x70\x0f\x08\xee\x01\xc1\x2b\x74\xf9\xc1\x64\xb6\x47\x05\x37\xa3\x82\x21\xac\xdc\x59\x39\x42\xe9\xec\x4f\x10\xd7\x2e\xc5\x21\xfc\x83\x78\x36\x5f\x11\x7c\x38\xbe\x4c\x3d\x86\xb8\xc7\x10\xf7\x18\xe2\x1e\x43\xec\xaf\x40\x8f\x21\xb6\x84\xeb\xb9\x62\x88\x63\x0e\xd0\x03\x89\x3b\xf8\x92\x7a\x20\x71\x0f\x24\xee\x21\x38\xdf\x3c\x90\xb8\xe6\xec\x3e\xb0\xb4\xdf\xe3\x80\x9e\x21\x0e\xa8\x47\x13\x7f\xcb\x68\xe2\x06\xe5\xfb\xb1\x4d\x06\xdf\x1a\xa4\x18\xb6\x7c\x47\x30\x59\x83\xa4\xdc\x83\x8b\xbf\x39\xc9\xe6\x49\x81\x8b\x9b\x94\xb7\x8e\x24\xa4\x97\x2c\x9e\xb5\x64\xd1\x23\x8c\xb7\x44\x18\x3f\x9c\x33\xf4\x58\xe3\x2e\x57\xe5\x41\x58\x63\x71\x07\x64\xe3\xee\xf5\xf0\x9d\xf9\xaf\x4d\xac\xd7\xfc\xdd\x82\xa9\x40\x20\x24\xdc\x00\xfc\xae\xd5\x5c\x20\xc2\xc3\x5a\x14\xb1\xd6\xfe\x90\x5d\x96\x41\x81\xf9\x54\xe4\x0a\xac\xcc\x6a\x2e\xc8\xd3\x98\xcc\x20\x75\xb9\x2d\xcf\x6c\xeb\x32\xc0\xbc\xac\xc4\x6b\x11\x3d\x85\x28\x91\x42\x30\x28\x85\x0d\x55\xc9\x0a\x39\x9d\x1a\x82\x07\x4c\x50\x68\xcd\xa7\x02\xa9\x9f\xb8\x53\xd9\x9d\x20\x0f\x24\xd4\x48\xc5\x51\x57\x1d\xc9\x68\x2b\xcd\x5c\x41\xfd\x52\xce\x6d\x99\x39\xbb\x3e\x12\x86\xd1\xb4\x76\x0d\x1e\x7e\x56\x88\x49\x26\x12\xc2\x4f\x93\x31\xda\xb4\xad\xf2\x54\x14\xd9\x12\xe8\x36\xce\x0e\xec\x92\xd6\xce\x2a\xf3\x4a\xa4\x98\x8d\x0e\x00\x69\x86\xad\xe1\x6a\xc9\x59\xca\x4b\xfa\x82\x9d\xb1\x0e\x7c\x76\x65\x21\x10\xe2\x12\xdc\xf5\x3b\x31\x60\x63\xa1\xcb\x53\x31\x99\xa8\xa2\x1c\x80\x79\x09\xad\x83\x3c\x63\x48\x81\xda\x45\xa0\x7a\x05\x9f\xa6\x4b\x80\x8d\x30\x4d\x39\x2f\x19\xfd\xf3\xde\x48\x28\xfc\x93\xc8\xcf\x26\x5c\x66\x70\x4e\x53\x1e\x61\xb6\xfd\x0f\x56\xf6\xb9\x2c\x11\xc2\x01\xf4\xf6\xb4\x10\x3c\xe5\xe3\x6c\x05\x9d\x48\x1c\x08\x6d\xee\x13\x55\xb0\x5c\xdc\xdb\x3d\x31\x07\x2e\x4b\xcc\xac\x0a\xd7\xa4\x44\x3c\xc7\xeb\xef\xfe\x14\xd8\xfd\x7b\x33\xd7\x57\x25\x0c\x7a\x10\xd7\x45\xad\x4a\x64\xd3\x01\xd4\x5a\xdb\x44\x90\x01\x12\x8c\x62\x0a\xb4\xae\x40\xb4\x1a\xf3\xe4\x13\x14\xb5\x8e\x21\x3b\xf0\xf0\x08\x65\x4a\x44\x02\x2c\xbf\xfb\xf6\x7a\xf8\x89\xfd\x2c\x0b\x5d\x7e\x94\x73\xa1\x4b\x3e\xdf\xba\x52\xd5\x06\x31\xc5\x8c\xb9\x51\x44\x59\x37\x87\xfd\x6f\x5e\xcb\x16\xbc\xe7\x5f\x7c\x07\xa2\x29\x3c\xfa\x06\xac\x14\x59\xea\xb4\x72\x87\x86\x86\x2f\x75\xa8\x45\x5c\xff\xe0\x23\xad\x13\x78\x1a\x9c\xc5\xfe\x8e\xf6\x17\x99\x14\xaa\xf5\x7c\xdd\x97\xed\x4a\x41\x58\xa0\xb4\xde\x52\xd3\xd4\x0d\xd3\x9a\x98\x17\xc0\xd4\x18\xf1\x08\x96\x29\x59\x31\x6b\xcd\xc2\x7a\x95\xee\xb9\xa8\x74\x0f\x37\x16\x1f\x7a\xc7\xdc\xa2\x1b\xb7\xc4\xc8\xd2\xad\x51\x26\xa5\xc0\x9b\x38\xab\xe6\x3c\x77\x82\x16\x0b\xda\x39\xaf\x7f\x10\x47\x65\x6e\x22\x16\x4b\x33\x62\xe8\x2f\xfc\xb3\x9c\xf3\x8c\x65\x22\x9f\x96\x33\x8f\x7d\xc7\xb1\x5f\x7f\xfa\x09\xf1\xf7\x99\x1c\x17\xbc\x90\x22\x94\x57\x43\x84\x2f\xc5\xde\x51\x74\x4e\xb5\x30\xbf\xfd\xf8\xc3\xa7\x9f\x76\xab\xc1\xab\x5b\xe5\x33\x6c\x84\xd2\x2a\xd6\xb2\xa9\x0b\xac\xf6\xc9\xc7\x9b\xf3\x24\xa4\x50\x27\x32\x3f\x4a\xb8\x8c\x17\xd0\x7d\x8d\x85\x99\xf0\xc1\x31\x8e\x6c\x9a\xbb\x64\xf4\xea\x3a\x7e\x5a\x9a\x77\xc1\x73\xf6\xab\xa3\x5f\xaa\x28\xed\x78\x85\xca\x32\x51\x78\xcc\x82\x1e\x30\x08\xd9\xba\x16\x00\x3c\xbb\x11\xe5\x45\x53\xab\xe0\xef\x9a\x4a\x50\x1b\x85\xdd\xce\x43\xcc\x65\x09\x58\x05\x91\xf0\x4a\x0b\x73\x0c\x3c\x29\xb5\xd1\xe2\x40\xbf\x44\xcd\x12\x11\x53\xc1\x50\x56\xe2\x5e\xb7\xed\x46\xae\xde\xbd\x80\xeb\x76\x9b\x0e\xdf\xb2\x6c\x0a\x4b\x4f\xf1\x8c\x69\x91\x28\x43\x71\x96\x76\xff\xcd\x9d\x03\x48\x94\x61\xc8\x99\xf8\x4c\xf7\x58\x0f\xd9\x3b\xb3\x8d\xc0\xda\xea\x2a\x56\xa0\x19\x3b\x88\x82\x51\x43\x53\x91\x09\xfb\xea\xed\x04\x5a\x76\x84\x8e\xd2\x9f\x51\xeb\xbb\x5b\xe9\xd1\x94\xa3\x3d\xb8\x19\xa0\xf4\xda\xf3\xf4\xb7\x8d\xae\xc9\x6d\x1c\x70\x62\xfe\x95\x89\xf2\x76\x8b\x67\xba\xd3\xfb\xa3\x45\x5c\xe6\xba\xe4\xf9\xaa\xa0\xb6\x6e\xd1\xb6\xbd\x5d\xf2\xe5\xdb\x86\x05\x4b\x6a\x14\xae\x30\x13\xe5\xe9\xe7\xe5\x1f\x93\x6d\x16\x76\x38\xfa\xa3\x45\xb1\x1a\xb6\xd6\xfe\x0e\x6a\x06\xa5\x1b\x1c\x65\xd3\x2b\xc0\x0f\x81\xe7\x91\x97\x3c\x88\xef\x45\x82\x43\x7f\x0e\x9e\x7e\x60\x5e\x33\x7b\x21\x33\x26\x27\x44\x7f\x28\xe0\xbd\x54\x39\xf6\x5e\x17\xb8\xd7\x8e\x37\x02\x54\x91\x8c\x11\x46\xc1\x1c\x5e\x7c\x30\xca\x60\x36\x60\xff\xc9\x8b\x5c\xe6\xd3\x93\x01\x1c\x0a\x62\x7d\x12\xcb\xfc\xb0\x52\x22\x99\xb6\x30\xfa\x68\x0f\x96\x8f\x3d\xdb\x0f\xbd\xa0\xfe\x88\xe6\x66\xba\x26\x1b\x6d\xcd\x60\x90\x5c\x6f\x5f\xde\xc2\xb4\x5c\xbb\x94\x6d\x4e\x46\xdb\x26\x86\xd0\xe0\x75\x24\xa8\x5c\x17\x83\x5a\x6f\x46\x7a\xd2\x3e\x45\x68\x13\x1f\xb1\xdd\xe8\xfa\x19\xaf\x1d\x73\x07\x8a\xd8\xbb\x13\x7b\xdd\xf3\x81\xee\xc4\x2f\xa0\x75\x76\xe4\x25\x8f\xee\xb6\xec\xca\x47\xf6\x97\x0d\xa9\x59\xc0\x69\xe1\x26\xd8\xca\x85\x4f\x85\x5e\x4a\x95\x5b\x11\xc7\x39\x82\x06\x4c\x0e\xc5\xd0\xbc\x34\x78\xab\x1c\x8c\x55\x67\x46\x4d\xe5\x8b\x85\xc8\xad\x56\x25\xf3\x4a\x55\x3a\x43\xf1\x00\x34\x1e\x74\x73\xfd\x5d\xdd\x33\x35\x29\x45\x0e\x75\x4f\xe1\xb5\x79\x79\xea\xc6\x49\x5b\xa8\x7f\xc3\x23\xb6\x62\x95\x2a\x40\x58\x04\x20\x73\x4a\x00\xfa\xf8\x8f\x46\x98\x19\x1d\xd9\x8b\x06\xef\xfd\x74\xaa\xce\x4a\xa5\x32\x7d\x86\xb3\xc7\xff\xf9\xef\x71\xa1\x78\x9a\x70\x70\x02\x4e\xd5\xe8\xc8\x70\xa4\x7b\x0d\x61\x71\x08\x71\x2b\x8b\x2a\x29\x71\x22\x29\x6a\x21\x39\x9b\x09\x5e\x94\x63\xc1\x49\xb0\x35\x52\xed\xb4\x92\xa9\x60\x18\x7b\x03\xdc\xc7\x4f\xc5\x2a\x8a\xbc\x8c\x43\xb9\xd7\xb2\xe4\xa4\x83\x4f\x21\x09\x3d\x09\x3e\x02\x43\x25\x88\xde\x4e\x42\xd0\x38\xee\xa5\xdf\xc8\x8c\xeb\xd2\xaf\x01\x8f\x63\xdf\x3e\x04\xf3\x8d\x5f\xc9\x62\xf9\x45\xcc\xab\xf5\x09\xac\x5a\x59\x61\x1b\x50\x5c\x72\x8c\x82\xf6\xea\x9e\x9b\x6d\x13\x39\x1b\x8b\x89\x21\x62\xf1\x8e\xed\x00\x94\xc0\x23\xdd\xb4\x3f\x6d\xd4\xa8\xf5\xa1\x13\x26\xa8\xf7\x8f\xf7\xfe\xf1\xa7\xe6\x1f\xef\x3d\xdf\xcf\x46\x65\xe9\x3d\xdf\xbd\xe7\xbb\xf7\x7c\xf7\x9e\xef\xde\xf3\xdd\x5b\x1f\x7a\xcf\x77\xef\xf9\x7e\x12\x9e\xef\xde\xa7\xdd\xfb\xb4\x7b\x9f\x76\xef\xd3\xee\x7d\xda\x75\x4b\x50\xef\xd8\xee\xea\xd8\xee\xbd\xd5\xbb\x44\x43\x35\xdd\xb9\xde\x6f\xfd\xdc\x8d\x40\x4f\xd2\x6f\x1d\xda\xbf\x83\x31\x7a\xe7\xf5\x37\xab\x3e\xf6\xce\xeb\xa7\xe4\xbc\xde\x07\x6b\x79\x7a\x6e\xec\xde\x9b\xdb\x7b\x73\xf7\xe9\xcd\xfd\x5c\x8a\x1c\x53\xbe\xdb\x8b\xff\xf7\x8f\x1f\xaf\x2e\xf3\x69\x21\xb4\xbe\xe2\xe5\x6c\xc3\xe5\xaf\xb5\xf4\x25\x15\x0c\xa7\x5a\x98\x5f\xc8\xff\x49\xe5\x95\x0c\x7b\x48\x14\x38\x49\xab\x22\xd3\x98\xcd\xde\xf2\x2e\x68\xcf\x0b\x48\x81\x7d\xcf\x8b\xd4\x57\x2a\xb0\xbd\xdb\xaf\x3e\xb5\xdc\x5e\x93\x59\xdd\x05\x5a\xd7\x4f\x34\xe2\xa6\xbb\x42\x6d\x22\x69\xcf\x15\xd6\xf0\xc9\x5b\x3d\x5b\x55\x14\x7d\x0f\x17\x0a\xd3\xba\xbb\xbc\xfc\xe1\xea\xd7\x25\x5d\x8a\x4f\xa5\x69\x4a\x70\x1c\x92\x76\x58\xa4\x8c\x4f\xb9\x51\x43\xfd\x46\xa3\x94\x29\xed\x71\x10\x5b\x1f\xb2\x0b\x97\x8b\x8f\x34\x4d\x4b\xd4\x82\x94\xa1\xa9\xd4\x3c\xcb\xd4\xbd\x4d\x94\x4a\xfa\x2e\x71\x1b\xa8\xa7\x65\xbe\x31\x3a\x62\x0b\x4e\xfe\x7e\xf6\xdb\xf5\x7b\xc6\x7d\x12\xa5\xf1\x92\x5d\xff\x7c\xc1\xbe\xff\xf3\x9f\x7e\x1c\x32\x33\x59\x6d\x93\x0c\x4e\x65\x6e\x6f\xcd\xf1\xd9\x31\x65\x61\xaa\xf2\x20\x99\x27\xa4\x56\x82\x2e\xf0\xf5\xfa\x1a\x30\xa7\x20\x2d\x7c\x97\x4c\xa4\xbc\x9c\x75\x48\xbc\x78\x45\xcd\x7c\x71\x19\x3c\x78\x97\x45\x94\x87\x96\x54\x38\x0f\x7b\xdd\x71\xc5\xd0\x99\xd2\x82\xab\xdc\x59\x4a\x7c\xa2\x44\x14\xcb\xdf\xb0\x97\xec\xdd\x67\x9e\x94\x6f\xd8\x2f\xb0\x26\xfc\x8c\xd9\x4f\x38\x48\x61\xfe\x96\x2d\x87\xec\x25\xbb\x82\x84\xbd\xbe\xdd\x98\x6b\x84\x0f\x71\xdf\x1c\x93\xfa\x32\xbd\xc8\x64\x69\x4e\x01\xf6\xf8\x17\xfb\x0e\xa5\x1e\xe5\x8c\xa5\x30\x9d\xdc\xbe\x61\x41\x09\x35\xc7\x4b\xff\x9f\x5c\x4b\x3d\x64\xe7\x71\x03\xb8\xf3\x9a\x28\xa5\x19\xc8\xca\xe1\x54\xd0\x84\xf4\x62\xe8\xe3\x26\x60\x7e\x39\x3e\x3b\x66\x5a\x2c\x78\xc1\x4b\x55\x98\x61\xe9\x28\x41\xe4\x35\x03\x61\xd9\x8b\x09\x64\xca\x35\x8b\x60\x12\x98\x69\xb1\x64\xe0\xa4\xe3\xb9\x9d\xc3\xe9\xbd\x74\x99\x8b\xcd\x97\x17\xb4\xad\x66\x10\x3b\xa8\x19\x62\xc8\x3e\x28\x80\x7f\xf1\xd2\x8c\xe5\xd8\x9a\x5d\x0a\x1d\xc6\x82\x9e\x11\x26\x1d\x85\x4b\x63\x46\x52\x0d\x3d\x64\x1e\x7d\x60\x40\xa5\x02\x8c\x7c\xcc\x69\xfe\x58\x8f\xe9\x6c\xa2\xd4\xd9\x98\x17\x6e\x5d\x42\xbb\xdf\xce\xc6\xfc\x0f\xb4\x9c\xa7\x4a\x60\x67\xec\x6a\x1b\x8c\xf9\x1f\x27\x50\x74\xe4\x32\x02\x79\xdd\x50\x62\xda\x37\xec\xb2\xfd\xfa\x39\x90\x9b\x99\x01\x58\xad\x90\xd4\x5d\x64\x5c\xeb\x61\x6d\x64\xac\xa5\x04\xe8\x11\x14\x07\x38\xec\x06\x1e\x96\x70\x17\x19\x76\xa5\xa0\x76\x66\xe5\xb6\x8c\x42\x06\x29\xd4\xaf\xe8\x40\x0a\xbc\xca\xb8\xaf\x20\xbd\x0f\x47\x79\xfd\x83\x98\x0b\x1b\xd9\xa0\xe9\x4c\x49\x41\xdd\xbb\xa7\x8e\x36\x95\x2d\x68\xbe\xcd\xdb\xb1\x67\x1b\x8b\xe5\x2e\x87\xe1\xb5\xd7\x55\x26\x7e\x37\x4f\xbe\x1b\xc3\x75\xcd\x63\x95\xd7\xa8\x0e\x94\xae\x56\x15\x9a\x01\xc3\x21\x40\x0d\x4d\x5f\x83\x92\x06\x7a\xde\x67\x6e\xb6\xed\x8d\xcd\x1d\x3e\xaa\x5e\xbd\xfa\x3e\x99\x29\x5d\xc2\x7f\x09\xfa\x01\x68\x39\xfc\xf0\x57\xfc\x41\x0b\xa3\x6c\x18\xda\x8e\x3f\xb3\x53\xfa\x5f\xfa\x02\xd5\xb4\xc1\xff\x6f\x9a\xb9\x12\x19\x55\x91\x05\xb9\xb3\xcd\xa4\x2c\x17\x18\x58\x5b\x08\xe9\xae\x96\x1d\xda\x12\x5e\xf8\x0c\x2c\x1b\x83\xb7\x8f\x02\x34\x26\x9b\x75\xcf\xd1\x90\x12\x9e\xa7\x56\xf2\x02\x8a\x0a\x3e\xdd\xe3\xbf\x1e\x43\xae\xeb\x7f\x39\xee\x20\x47\x00\x7b\x69\x33\xf3\xb0\x44\x65\x00\xe4\xc2\x77\x86\x2c\x09\x28\xca\x9c\x2f\x42\x45\xd9\xef\xfc\x9e\x2c\x10\xed\x32\xdb\xd6\xf6\x88\x8e\x4f\x00\x37\x66\x8f\x0f\x80\x26\xbd\xe1\xce\x53\x0b\xbc\xe6\xf1\x96\x17\x55\x66\x13\x39\x82\x40\xc2\x64\x3e\x56\x55\x0e\x66\xb2\x1c\x9b\x69\xaa\xe3\x92\xcc\x6a\xd9\xa2\x03\x49\x24\x90\x4f\xcf\x73\x4b\x0d\x2d\x6b\x4e\x54\x3e\x91\xd3\x8a\x68\xd1\x54\xde\x09\x2b\xd0\x69\x66\xd6\x53\xe4\x86\xc8\x9d\xc2\x27\xc0\x8f\x6a\x24\xdb\x01\xcb\x14\x4f\xd9\x98\x67\xe0\x1d\x70\xa5\x7b\x6c\x75\x10\xc1\x6e\x6e\xde\x0f\x98\x9a\x4c\x44\x81\x7e\x12\xe4\xd5\x77\xb2\x28\x2b\x9e\xb9\xda\x76\xa2\x4c\x86\xec\xed\xbb\xab\xeb\x77\x17\xe7\x1f\xdf\xbd\x65\xa7\xe8\x2d\x00\x4d\xd9\x1a\x14\xcd\x46\x04\x7b\x14\x80\x38\xc6\x4b\x9b\x5f\xd3\x08\x1d\x64\x48\xa0\x8d\xb7\x5d\x86\xec\x46\x08\x92\x58\x33\xc1\x35\x3a\x71\xb5\x77\x43\x05\xca\x6c\x6f\x24\x7d\xd2\x46\xd2\xde\x8e\xf8\x5c\xec\x88\x5f\x3b\x0c\xc5\x28\x6b\x7b\xd4\xc1\x8d\x38\xb7\x79\x23\x16\x22\xf1\x20\x36\x0d\x82\xa3\xab\xc0\x15\x48\xb8\x07\xdf\x16\xb3\xf0\x53\x9e\xa7\xa7\x88\x9c\x59\xb3\x3b\xf8\xb7\x3d\xee\x0f\x0e\xd8\x72\x55\xca\xca\xaa\x66\x51\x85\xe0\x27\xb4\x47\x2b\x32\xc8\x01\x4d\xcc\x6e\x33\x9b\xed\xcb\x56\x2c\xd9\xa3\x75\xb9\xd5\xc4\xd4\x2a\x02\x79\x3b\x13\x54\xd3\x12\x1a\x54\xa2\xa0\xc2\x70\x43\x99\x0b\x28\xe8\xab\x8a\x6e\xe5\x0b\xf5\xc3\xf0\xa7\x46\x11\x4c\xdf\xab\x84\x67\xdb\x20\x63\xae\x2d\x9b\x91\x01\xa8\xe8\x5a\x4c\xa0\x22\x6d\x8e\xb5\x92\x83\x42\x3c\x8e\x2b\x91\x35\x01\x8a\x13\x2d\x78\x52\xbf\xc7\x3e\x62\x60\x12\xf4\xd1\x61\x55\x18\xda\x23\xa8\xd1\x63\xf6\x89\xfe\x7d\xe5\x12\x8b\x13\x53\x72\x5d\xd6\xd8\xe3\x82\x71\x5a\xf8\xef\x4d\x94\x04\x3d\x04\xc8\xac\xda\x0b\x77\xc3\x71\xd8\x05\x3c\x8c\x1b\x55\xa5\xcc\x86\xe6\x4e\x95\xc5\xf0\x32\x2f\x7f\x2d\x6e\xf0\xab\x6d\x44\xd8\xaf\xcd\x46\xfa\xac\x5b\x5b\xf7\x57\xbf\xfd\x83\x6a\xc1\x03\x04\xad\x9a\x94\x0a\x4b\x07\x7b\x61\xf7\x29\x0b\xbb\x5d\x10\x01\x97\x16\x11\x10\x56\x1c\x58\x39\xde\xb5\xc3\x3d\x8c\x29\xf7\x90\x80\x5e\x94\xdf\x1a\x12\xf0\x24\x04\xf9\x8e\xa6\xa0\xc7\x87\x05\x74\x93\xd9\xf6\x8d\x0a\x58\xfb\xc2\xaf\xab\x6c\x93\xad\x36\x68\x55\xcf\x7c\x8d\x76\xab\x39\x5f\x2c\x42\xe7\xa7\xc6\x08\x50\xf3\xa2\xad\xc0\x01\x86\x20\x1f\x0c\x89\x08\x5e\x6b\x65\xb5\x66\xa8\xc0\xab\x1a\xb9\xc0\xd0\xee\x29\x0c\x5d\xc0\x98\x1e\x10\x0f\x61\x44\xb0\xa6\x0e\xcc\xa8\x39\x14\x32\x5d\xf1\xb5\x36\x56\xc7\x77\x0e\x84\xba\x09\xba\x03\xaf\x34\x9f\x6d\xa1\x68\x7f\x57\xda\x41\x12\x26\x50\xa0\xeb\x7f\x5c\x81\xae\x14\x0b\x74\x59\x89\x89\xbb\xc2\x31\x66\xdc\xc1\x5a\xcf\x22\x39\x79\x42\xaf\x5a\x2a\xee\x24\x39\x1a\x1c\x75\x1b\xc1\xf4\x02\x7f\x25\x7a\xd8\x2e\xc3\x71\x65\xee\xc6\x7d\xc3\x5e\x0f\xd9\xe5\x95\x2f\x28\x48\xde\xd0\xd0\x7b\xca\xf3\x95\x5d\x02\x8b\xa2\xca\xcd\x1f\x17\x0b\xf0\x8b\x8c\x72\x46\x1e\x98\x2b\x2b\xce\x82\x2a\xeb\xbc\x4f\xa0\xa5\x59\x8e\x35\xca\xbf\xc3\x14\x04\xb7\x6f\x6e\x59\x2a\x30\xb8\xb9\xb0\x4e\xa6\x42\x98\x5b\x13\x62\xe4\xe3\xa2\x87\x76\x8e\xa3\x7c\x54\xb2\x60\xa2\xa1\xb0\xe6\x27\x8d\x05\xdd\x16\x99\x4c\xa4\x69\xf4\xe6\x4f\xaf\xe0\xfa\x80\x77\x81\xe7\x29\x0e\xf2\xe6\x87\x1f\xbe\x77\x3f\x9b\xf9\xfd\xa4\xf0\xa6\x68\xac\x73\x13\x87\x68\x3b\x38\xec\x26\x7f\x6d\xe4\xa8\x86\xab\x1a\x18\xf2\x57\xae\x9d\xad\xe3\x39\xa3\x9b\x13\xb9\x89\x43\x5d\x00\xee\x38\xaa\x4b\xd6\xdf\xee\x9c\xa3\xe5\x2c\x90\xf0\x57\xbf\x31\xca\x47\xf9\xdf\x31\xf6\x21\xc7\x3a\xe5\x8b\x42\x24\x52\x8b\xd1\x11\x79\xf1\x81\x09\x87\x17\xd4\x3c\x18\x8b\x69\x0e\xeb\x57\xa7\xaa\x5c\xbd\xbc\xe4\x15\x1c\x1d\x4d\x94\x1a\x8e\x79\x31\x4c\xd4\x7c\x74\x74\xc2\x54\xc1\x46\x47\xf7\x32\x4b\x13\x5e\xa4\xa3\xa3\xc1\xba\x8f\xb9\x2a\xad\xe4\x34\x47\x40\x34\xb3\x3d\xa9\xf2\xac\xfd\xc8\xcb\xa1\xf9\x0c\x7e\x02\x2f\x93\x6b\xe8\x1c\xfc\xec\xf8\xe5\x31\xea\x3f\x7c\xb1\x10\xbc\x30\x4f\x4a\x96\x5a\x64\x13\xf3\x1e\xbc\x47\xe5\xed\x87\x1b\x1a\x1d\x45\x49\x74\x65\xe2\x05\xb7\xd3\x80\xbf\x0f\xd9\x7f\xa9\xca\x82\xdb\x29\x34\xbf\x36\x3f\xff\x09\x9c\x29\xec\xf8\xbf\xfd\x9b\x99\x31\xcc\xf4\xda\xde\x15\xeb\x17\x6a\xba\x2f\xd0\x89\xea\x11\xe6\xb5\x67\x7f\xcf\x97\xf8\x6c\x27\xcc\xd2\x19\x3a\xc7\x01\x11\x57\xf4\xdd\xce\x9d\x8f\xdd\xc8\xe1\x86\x76\x93\x7b\x18\xae\x3e\x1c\xd8\x4c\xf0\x14\xdf\x9d\x30\x04\xca\x50\x4e\x33\xe4\x90\x7d\x17\x0d\xef\xd7\x48\x84\x76\xe7\xcf\x94\xca\x7f\x09\x6e\x6b\x35\x99\xc8\xcf\xec\x45\x21\xe6\xea\xce\x72\x10\x3c\x13\xd8\xcd\x13\x4b\x40\xdc\x26\x9b\x2f\xec\xa0\x4f\x9a\xc9\xec\xc3\x4e\xd5\xe8\xe5\x3c\xa4\x06\x78\x13\x1b\x20\xd7\xb0\x66\xa0\xb5\xde\x98\x12\x12\x0c\x70\x56\x6a\x51\xb0\x7b\xa9\xe1\x9c\x14\x66\x5e\x78\xb2\x18\xa4\x73\x97\x98\xc6\x72\xf0\x84\x2f\xc0\x1f\xa5\x26\x24\x29\x44\x34\x17\x9c\x66\xa9\xca\x8f\x2d\xc2\x80\xe7\x4b\xbc\x26\xec\xbc\x64\x99\xe0\x46\x5b\x42\x54\xca\x31\x8d\x88\xfe\x53\x90\x5d\x8e\x5d\x49\x50\x6f\x1b\xa9\x95\x03\x75\x11\x4e\xa5\x22\xe7\x1c\x68\x61\x8a\xa7\xe4\x15\x2b\xc2\x18\x19\x08\x56\x82\xf9\x9b\x59\x66\x6a\x2a\x13\x70\xfd\xc3\xe8\x86\x9e\x4c\x33\x35\xe6\x99\x6d\xb4\xc6\x10\x23\x03\x20\x43\x07\x6b\xcc\x65\xad\x79\x53\xe0\x52\xd8\xc6\x26\x27\x71\xea\x14\x52\xd0\x40\x54\x8a\x5a\x5b\x55\x1f\x09\x77\xb0\x58\xa0\x61\xbe\x50\x2d\xd2\x05\x3f\x22\x1a\x00\x32\x9e\x88\x95\xb0\xec\x5a\x74\x14\xad\x77\x98\x98\xef\xdd\x32\x20\xb0\x14\xa0\xf9\xb3\x2a\x5c\xd4\xb6\x8e\xc3\xb6\x07\x36\xf2\x99\x97\x41\x17\xb0\x8d\x89\x12\x70\x2b\xf6\x70\xd1\x94\x68\xbe\x2e\x52\xcc\x39\x72\xe7\x34\x43\x73\xce\xb8\xfe\x60\x65\x90\x3f\x65\x2e\x4b\x43\xfc\x30\x4e\xc6\xd2\x35\x0a\x28\x37\x92\xa5\xff\x24\xf0\x82\x54\x4e\xc0\x3c\x54\x3a\xab\x43\x1d\x10\x62\xcd\x22\xe7\x57\x97\xd6\xea\x21\xa7\xb9\x91\x0a\x68\xbf\x85\x76\x3c\x97\x33\xd8\x8c\xf0\x5e\x7a\x9f\x2e\x9e\x8b\x53\x86\x6d\xf1\x5f\x5e\x7c\xc2\xcc\x28\x74\xbb\x2c\xaf\x25\x8e\x6f\x21\x08\x5a\x98\xe1\xed\x33\x43\x75\xdb\x15\x5e\xa6\xfd\xf8\xb9\xc1\x6d\x3a\x40\x03\x98\xa5\xde\xf1\x1d\x51\x49\xe5\x56\xba\x4b\xe4\x9a\x79\x8d\xad\x40\x05\x07\x0e\x31\x7c\x05\x95\x0f\xbb\x28\xe7\xde\x8e\x7d\x00\x97\x93\x58\x98\x52\x05\xcb\x15\x32\x2a\x62\x5d\x83\x48\x9a\x82\xcb\x93\x3b\x55\xa5\x46\x8b\x0e\x6e\x6c\x01\x55\xec\x21\x06\x97\x32\x6b\xdb\xc5\x8f\xef\x6f\xdc\x66\xd1\x1b\x8b\x85\x68\x67\x77\xce\x7d\x21\x63\x1f\xa1\xc6\x4c\xff\x05\x64\xd9\xf9\xe1\x87\xef\x61\x83\x5d\xd1\xe9\xb9\x98\x8f\xa1\x14\x3b\xdd\x73\x38\x2e\x4b\xfa\xfc\xf3\x30\xa7\xa7\x41\x96\x58\x7a\x31\x88\xc6\xf8\x1c\xc8\xb2\x20\x15\x02\x60\x2a\x49\x54\x94\x4e\xc7\x8c\x00\xc4\xcd\xcb\xbb\xe5\xac\x50\xd5\x14\xf5\xbb\x9b\x0f\x97\x30\x4d\xb7\xcf\x03\xfb\x7a\xa5\xc5\x44\xf8\xa7\x3e\xa9\xb2\x89\xcc\x32\x2b\x7e\xd8\x16\x6e\xe1\x37\x1f\x2e\x0f\x7e\xec\x1f\xdf\xdf\xec\x01\xe9\xf2\x70\x69\xa3\xee\xd0\x5b\x27\x6f\xa0\x13\xce\x4a\x1c\xed\xae\xb8\x76\x61\xc3\xf0\xd3\x9f\x88\x9f\xee\xec\xb7\x79\x1f\x0c\xd2\xc1\x97\x18\x36\x8f\x43\xc8\xc3\xc5\x54\x0e\xf4\x65\xe6\x78\x6a\x99\xfe\x61\x2d\xff\xe6\x42\xb4\x1e\x83\xb9\xe2\xb1\xd4\x57\x16\x3c\xd7\xf0\x64\x32\xbe\x14\x05\xd3\x22\xa9\x0a\x59\x2e\x57\xac\x20\x5e\x41\xee\x68\xf2\x68\xa3\x2a\x46\x59\x40\x05\x98\x47\x54\x5a\xdb\x22\xb1\x4e\x95\x01\xfa\x63\x3e\x33\x81\x1a\xb3\xc8\x7a\x29\x71\x82\x0d\xd5\xc0\x88\xa2\xca\xea\x17\x4e\x98\x39\x23\x7a\x4f\x43\x95\x99\xbe\x11\x49\x21\xca\x18\x43\x19\x69\x0c\xc0\x2a\xb4\x28\x41\x1e\x9b\x50\x1a\xb2\x75\xd2\x5b\x44\x0b\xa4\xb6\x7b\x04\xe4\x23\x13\x93\x32\xe4\x25\xdd\x88\xc2\x3a\xde\xb7\x03\x69\xd7\xb0\xd4\x2e\xce\x39\xd7\xb0\x49\x10\xc4\x61\x1c\xdf\x8c\x90\x5c\x8e\x0d\xaa\x1c\xa9\xfb\xcf\x56\x0a\x86\xd5\xaf\x8a\xc2\xa6\x4f\xa1\xaa\x12\x73\xeb\x90\x21\xc2\x90\x5f\x47\xa1\x79\xa6\x72\x6f\xe0\xb0\x7f\xc2\xfc\x06\x19\xa4\x80\xc3\x23\x98\x64\x32\xf1\x29\xe0\x04\x1b\xc1\x95\x1a\x1d\x59\xf5\x11\xe5\xae\x8a\xaa\x2a\xc7\x56\xa9\x41\x6d\x6c\xba\x25\x70\xda\xd6\x6c\xa1\x72\x10\xda\x50\xda\xa1\xad\xf8\x7b\xac\x9e\xba\x4e\xb4\xa2\x9d\x51\xb7\x1d\x9f\xff\x24\x53\xf7\x74\xf9\x7c\x49\xc4\x4c\xdd\xbf\x95\x00\x9a\xab\x8c\xc6\x56\xfc\x22\xca\x99\xda\xe4\x53\x5f\xd3\xa3\x56\xa7\x7a\x8e\x3f\x82\xd5\xc6\x7c\x97\xa5\x61\x97\x0e\x44\xa0\x43\xe4\xf9\xad\x69\x73\x5b\x8f\x3d\x5f\xfd\x9a\x9d\xcc\x47\x30\x01\x00\x9b\x35\x77\x11\x22\xd0\x0d\x05\x19\x1d\xfd\xb4\xfc\x4d\x8b\x62\x74\x04\x47\x66\xfe\xf9\xc1\x3a\xc7\x47\x47\x68\x43\xc1\x2c\x46\x7b\x45\x45\x43\xff\x36\x37\xc0\xb6\x67\x79\x03\x2e\xcc\x96\xe3\xc3\x46\x91\x4b\xd5\x3b\x52\x39\xa1\x24\x69\x2b\x75\x88\xf8\xa7\xb3\x84\xf8\x98\x54\x30\x6c\xc5\x41\xc0\x57\x13\x07\x22\x35\xea\x46\xe1\xed\x4e\xe5\x8c\x69\x39\x97\x19\x2f\x18\x2f\xd1\xd5\x22\x28\x27\x83\x26\xbc\x3b\x48\x54\x00\x28\x5d\x70\x09\x01\x75\xb8\xa9\xfa\xcd\x0a\x39\x09\xe6\x0f\x4a\x11\x1b\x1d\xad\x9e\xf8\xe8\xa8\xf7\x42\x3f\x69\x2f\x74\xef\xa7\x7d\x2e\x7e\xda\x8e\x90\xcb\x5b\xfb\x69\x47\xaf\xf5\x93\xf2\xdd\x3e\x14\x84\xb9\x99\x1e\xb7\x02\x31\x6f\xcd\x47\xfd\xd6\x50\x18\x4e\x14\x8a\x64\xf1\x99\x63\x31\xe3\x77\x52\x15\x48\x7a\xfd\x37\xbe\x6a\x8c\x66\xcb\xf6\xb5\xeb\x56\xb7\xf8\xe1\xdb\x26\xa4\x26\x6a\x54\x4f\x64\xaf\xda\x84\xb7\x3d\xfa\xfd\xc3\x4d\x35\x6f\x16\x48\xe0\xc6\xec\x00\x81\x04\xb1\x3f\x20\xc0\xe6\xb3\xbd\x50\x79\x2a\xcb\x98\x09\xaf\x97\x59\x5c\xeb\x40\x11\x4d\xec\x6f\x16\xc8\x19\x9c\x73\x07\x43\x00\xd7\xe5\x47\xa3\xc6\xc2\x10\x7b\x0e\x99\x6f\x8d\x96\xbf\x5d\xfd\xbc\xbb\xc2\x10\x96\x05\x61\xf3\x14\x27\x4c\x2b\x2f\x5d\x73\x1b\x47\xac\x72\x97\x72\xd0\x63\x3f\xd7\x98\xfa\x29\x65\x77\x9b\x68\x4d\xcd\x6e\x1b\x33\x1e\xd2\x1f\x99\xcc\x53\x20\x52\x80\x0e\x28\xb9\xcc\x28\xef\x1d\x4d\xdd\xcd\xf3\x50\x59\x09\x6f\xb1\x15\x4d\xb2\xca\xe5\xff\x18\xc9\x48\xe5\xe2\xf4\x5e\x15\xe9\xc0\x73\x65\x46\xf9\x0b\x27\x3e\x2d\x38\x6e\xe6\xb1\xde\xc3\x5c\x9b\x69\x5e\x0b\x81\x8a\x4d\x3d\x6e\x42\x20\x60\x18\xe9\xe2\x63\x61\xd6\xf2\x33\xcf\xb4\x18\xb0\xdf\xf2\x4f\xb9\xba\xcf\xb7\x57\x45\x06\x7b\x50\xa8\x6a\xf3\x7b\xb0\x36\xb4\x17\x0d\xa7\x05\xaa\x1a\x37\x8c\x23\x3d\x03\x0d\xa2\x4f\x62\xf5\x35\x28\x0b\x5d\x20\xab\xb7\xd0\xe8\x76\xdd\x49\xef\x0b\xb6\xda\xa2\x76\x3f\xc4\xdc\xd6\xab\x44\xcf\x45\x25\xea\x04\x5d\xdd\xa0\x10\xf5\xf9\xad\x0e\x20\xd0\xee\x19\xdd\xda\x41\xdf\xeb\xc2\x9d\x6a\x48\x9a\x19\xa1\x3d\x7c\x83\x63\x5d\xd3\x06\x33\xa5\x3e\x69\x96\xc9\x4f\x5d\xc0\xa3\xe9\x46\xcb\x6e\xa7\x7b\xbe\x95\xd5\x78\xe3\x85\x6f\x98\xcc\xad\xe3\x91\xb0\x72\x05\x78\x8b\xca\x42\x4f\x57\x0d\xb9\x60\x2c\x8f\x90\x38\xd6\x5f\x23\x35\xb1\xc2\x21\xbb\xcd\x65\x76\x1b\x99\xa3\x39\xd2\xb0\x78\x2c\x89\xf9\x78\xc6\x99\x48\x29\x6f\x72\x45\x28\x39\x9e\xdd\xf3\xa5\x66\xe4\x68\xc4\x8c\xb2\x48\x42\xd6\xc9\xd4\x84\xef\xbd\x72\x80\x8f\x56\xf1\x7a\xa5\xc7\xad\xf3\x08\x98\x6d\x98\x29\xa5\x05\xe3\x73\x45\x14\x3d\xe0\x64\xe1\xba\x6d\xd0\x9a\xcb\x42\x04\xb0\x92\x99\xd2\x22\x0f\xc5\x1c\xc3\x32\x68\x28\x33\xac\xf3\x79\xe4\xd5\x5c\x14\x94\x6c\x24\x53\xf7\x46\x72\x78\x81\x08\x8e\x7b\x01\x59\xbd\x21\x07\x83\x40\x58\x11\xb4\x9a\xc9\xe9\x4c\xe8\xf2\xc4\x65\xbe\xf1\x0b\x18\x32\xf6\x8e\x27\xb3\x86\xbf\x10\x9b\xb2\xe0\x98\x82\xe7\x53\xf4\xa9\xfd\xe3\xf5\xe0\xf5\xab\x57\xaf\x5e\xfd\xb3\x21\xab\x4c\x00\x9e\x21\xa0\x6e\x80\xaa\x90\xa5\x73\xe4\x6b\x01\xe0\x09\x33\x4e\x80\x44\xd9\x7b\x5e\xb5\x45\x21\x55\x21\xcb\xe5\x7b\x43\x57\x2f\x42\x38\xc3\x5e\x1e\xd4\xd5\xda\xe1\xbb\xc5\x02\xde\xae\x9f\xdf\xad\x95\x1e\x5d\x34\x19\xe3\x6c\xfd\xf7\x56\xeb\x49\xd5\x62\xd1\x82\x64\xcb\x46\xc4\xc8\xee\x2c\x66\x38\xb8\x70\xf6\x70\x10\x6d\x94\x92\xfc\x69\xd1\x42\x32\xbf\xe3\x99\x84\x1b\x60\x64\x09\xd4\x84\x42\xc5\xa2\x59\x23\xec\x80\xd8\xb9\x85\x46\xb7\x01\x45\xc5\xeb\x5c\x44\x28\xd8\x80\x66\x00\x8d\xb1\x84\x03\x10\x64\xc1\x2a\x2c\xd6\x94\xfb\xb4\x4a\x13\x58\x0a\x20\x55\xcc\x7f\x87\x80\x3f\x04\xa3\xf8\xec\x1a\xf3\x20\xe9\x94\x7b\x9f\x90\x7f\xd9\x66\x5e\x42\xc2\x92\xc9\x04\x1d\x8a\x85\x4f\xde\x92\x2b\x3f\xe5\x28\xd7\x5b\x93\x69\x83\xed\x5b\xa0\xbd\x52\x99\x4c\x96\xd7\x66\x15\xff\x29\xcb\xd9\x4d\x85\x5a\x52\x57\xe9\x36\xfa\x53\xc4\xf4\x8d\x60\x73\xea\x1a\x97\x6a\x2e\x93\x1d\x32\xa9\xac\x7f\x89\x87\x71\xa6\xb5\xa2\x54\xea\x4d\xeb\x51\x2b\x2b\x50\x95\x2d\x4d\x54\xde\xc0\xd5\x76\xfd\x7d\xcb\x9a\x26\xb4\x32\x0d\x1d\xeb\x47\x8f\xa2\x1e\x79\x53\xdf\x7e\x6e\xd2\x9c\x2f\x4e\x3f\x89\xa5\x8e\xee\x07\xab\xbb\x56\xa3\x1b\xd1\x72\x27\xe7\x7c\x71\x20\xcb\xc5\xdf\x8c\x0c\x4b\x2f\x69\xc3\x55\x0a\x9b\xb1\x99\xca\x52\x4d\x96\x35\x60\x98\x3e\x3b\xaa\x11\x84\x50\x84\x36\x92\xae\x51\xcb\xb0\x38\x41\xeb\x5d\xca\xdb\xe1\x1c\x79\x00\xe4\x00\x28\x37\xfa\x83\xbd\xd8\x21\xf4\x00\xa3\x2c\x5e\x8e\x8e\x82\x14\x53\x59\x16\x34\xa7\xfc\x38\x81\xc2\x32\xab\xc6\xc3\x44\xcd\xcf\xfc\xde\x9f\x39\x19\xfe\x6c\x9c\xa9\xf1\xd9\x1c\x8a\x7b\x9e\x2d\x3e\x4d\xcf\x78\x55\xce\x30\x11\x9a\x99\xd5\x99\x19\x17\xfe\xdf\x70\xaa\x7c\x5a\xd7\x7b\x91\x65\xa7\x60\x18\xa3\x29\x42\x48\xfb\xc1\xfc\xf5\xb0\x75\xfb\x24\x31\xef\xe5\x5c\x96\xd7\x90\xd2\x4b\x6f\x0a\x88\x8b\xda\xd5\x25\x66\xaa\x04\x13\x4b\xc5\x09\xcf\x6d\x0c\xbe\xf8\x2c\x12\x88\x53\x2b\xe4\x74\x56\xb2\x5c\xdd\x77\xb8\x25\xff\x53\x89\x6a\x97\xaa\x2a\x4d\xab\xfc\x0f\x1c\x2b\xa6\xd4\x1b\x65\x19\xfa\xfa\x2d\x3d\x00\xb2\x3f\x06\x22\xca\x82\x17\x7c\x2e\x20\xa5\xa6\xb9\x0c\xd4\x3e\x02\xd2\x13\x44\x39\x57\xf9\x29\xf2\x59\xcb\xb3\xbd\x8d\xf3\x76\x74\x64\xe6\x26\x46\x47\xb7\xbb\x57\x3f\xf0\xc3\xb9\xd1\xf0\x6d\x5c\x83\xa9\x6d\x74\x34\x0c\xfe\x30\x17\x3c\xa7\x13\x6a\x3f\xaf\x6a\xa1\x72\xc6\x8b\x42\xde\xf1\x0c\x60\x2a\x33\x8a\xcf\xe1\xb0\x60\xc1\xaa\xbc\x94\x19\xa2\x5a\x09\x70\xed\xfa\x82\x1b\x84\xb6\x05\x8b\x79\x62\x35\x2e\x0e\xa9\x3d\x83\xd9\x3d\x70\x4a\x68\x4f\x34\x43\x7e\x49\x8c\x4c\xb3\x85\xa1\xca\x89\x63\xae\xb1\x2a\xa4\xd2\x1c\x24\x80\xb5\x54\x71\x44\x85\x2c\x6a\x6a\x83\xb9\x4a\xfa\xb4\x54\xa7\x41\x63\xf1\xd3\x72\x95\x33\xfa\x07\x73\x44\xf7\x3d\xe2\x71\x0f\xb3\x2b\xbc\xc7\x6a\xac\xeb\x65\xf6\x36\xda\xb1\xa9\x6f\xa0\x28\x6f\xa2\x28\xe6\xb4\x89\xcb\x98\x36\x70\xa7\x34\x94\xe8\xe0\x69\x4a\xa1\x04\xe5\xbd\x62\x52\xeb\x4a\xe8\x37\xa3\x9c\xbd\x84\xba\xd1\x36\x27\x25\x8c\xe4\x40\xff\x56\x86\x63\x99\x99\x8f\x2d\x37\xfb\x57\xe8\xf5\x9f\xe6\x73\xbe\xea\x15\xe4\x54\x05\x8d\x35\x9e\x90\xf8\x9c\x08\x80\x61\x0b\xec\xfe\xd7\x0e\x36\x7c\xad\xab\x42\xa4\x17\x2a\xa7\x64\xdd\xcb\x9b\x19\x2f\xda\x95\x8a\x75\xfd\x6e\xd9\x8b\xf3\x8b\x9b\x13\x1f\x0a\x80\xb4\x0a\x9f\x0b\xd8\x6a\xcc\xc4\xa2\x00\x44\x7c\x8b\x04\x38\xf7\xe9\xc3\xdd\xd2\xac\x57\xa0\xb6\x41\xc4\x7b\x97\xf4\x1a\x2b\x2a\x82\x5b\x3a\x03\x00\xd5\xdb\x3d\xbf\xb8\x71\x6a\x36\x67\x0b\xa5\x65\x29\xef\xec\x87\xd0\x3a\x80\x0c\xf7\x18\xdc\xa6\x76\x39\x34\xad\x17\x37\x17\xef\x4f\xd0\x2e\x72\x27\x53\xa3\xab\x39\xfb\x43\xd0\xf8\xd4\xe1\x57\xd3\xda\x34\x01\x4f\x6b\x36\x5f\x15\xe8\xa8\x04\x9f\x84\x2c\x18\x6d\x60\xf4\x49\x0d\x5b\x48\x34\x7b\x51\xa8\xb4\xb2\x61\x3b\x4d\xad\xd1\x82\xf0\xe2\xfc\xe2\xf7\x13\x76\x7a\x7a\xba\x6e\xfb\x6a\xfb\x94\x54\x7e\x9f\xc0\x91\x6a\xba\x9a\x4b\x08\x69\x0d\x75\x95\xcc\x6a\x2b\x78\x33\xca\x21\xb4\xd8\xfd\xdf\xf9\xc5\xef\x2f\xb2\x13\xf6\x6f\x2c\x11\x32\x7b\xc1\x6e\x2e\xde\xb3\x97\x66\x97\xcd\x8f\x67\xec\x05\xd3\xd5\xfc\x1f\xf5\x4d\xf8\xf4\x4f\x68\xf1\xe9\x84\x9d\xb0\x13\x33\xe0\x18\x6a\x4c\xd1\x7c\xe1\x8c\xe1\x9c\x04\xcf\x31\xe4\xc5\xe8\x0a\xc5\x5d\xb8\xe2\x80\x18\xbf\x20\xe3\x95\xf8\xbc\x10\x86\xfd\x2b\x9b\xc0\x17\x13\xfc\x5c\xbd\x3f\x89\xf8\xde\x0c\xd2\xcc\xc6\xb1\x36\x6a\xc2\xbe\x7f\xb5\xff\x4c\xf3\x6b\xa4\x17\xb6\xb3\xa4\x10\xcb\x43\x9b\xdd\xe6\x61\xd3\x5b\xeb\x88\x16\x54\x26\xb9\x54\x2c\x55\x4d\x44\x63\xa3\x5c\x74\x20\xc9\xff\x83\xca\x6d\xa6\x26\xaf\x58\x6f\xa0\xd8\x8d\xed\x91\x7a\x2c\x0a\x81\xeb\x8c\x84\x71\x10\x72\x9c\xb7\xc7\x07\x87\xd7\x82\x58\x64\xc1\xee\x44\x31\x26\x5b\xa7\x60\x25\x2f\xa6\xa2\x8c\x3b\xff\x76\xfd\x7e\xc8\xce\x59\xf3\x14\x5a\xcd\x21\x63\x55\xce\xd8\x0b\x7e\xb2\xce\x2e\x62\x3e\xdf\x68\x17\x81\x51\x5e\x8c\xd7\x76\xcc\xfd\x7c\x7e\xbb\x7e\xdf\x6c\x5a\xe9\xa0\xfa\xc4\xa3\xb4\x51\xfd\x5a\x73\x52\xa8\x09\xea\x5a\x15\x99\x0d\x20\xb7\x0c\x12\x95\x1f\x62\x5c\x18\xac\x9d\x24\x10\x12\xab\x9c\xff\x35\x2c\x52\x86\x31\x6f\x36\x95\xb0\x21\x3b\xa7\x6c\x74\x74\x36\x13\x3c\x2b\x67\x7f\x8c\x8e\x10\x05\x3f\xe5\x59\xf8\xa7\x97\xf8\xbb\xcc\x56\xfe\x12\x74\x80\x3c\xd8\xfe\x72\x40\xba\xdf\xb0\xe9\x99\x19\x85\x67\x5a\x6d\x6a\x64\x26\x01\x0d\xdd\xb1\x67\x19\x5b\x88\xe2\x34\x51\xf3\x85\xca\x21\xae\x0a\x5a\xb1\x64\x26\x92\x4f\x7a\x38\xca\x51\x21\x0c\xdb\x47\x97\xab\x2a\x32\x1d\x58\xc0\xc8\x44\x12\xc5\x4d\x9a\x03\x85\xdb\x24\xf2\xb2\x58\xae\x95\x2a\xf7\x1a\xfb\xd0\xd1\x34\xa0\x45\xd9\x4c\x07\xe1\x56\xb7\x5d\x26\x68\x54\xb3\xc9\x38\xc3\x1e\xbe\x8b\xe6\x3b\xb2\xba\xa7\xd0\x1a\xcc\xb2\xcf\x60\x1f\x3b\xaa\x01\xb8\xc7\x83\xf5\x6f\x79\x9f\x6a\xf9\x3a\xf3\xe7\x7a\x92\xbd\xa6\x07\x1c\x8d\x4d\x38\xc8\x00\x98\x81\xa4\x62\xb1\xc8\x24\xc6\xc6\x7b\x5a\x0a\x54\x82\x79\xaf\x26\x08\x6b\xd0\x27\x51\xb9\x96\xa9\x91\x1c\x30\x87\x01\x0a\xe1\x73\xfe\xc9\x1a\x85\x69\x88\x81\x05\x9a\x8c\xd9\x58\x04\x31\xeb\x50\xfa\x81\x88\xbe\x07\x05\x80\x63\x87\x27\x56\xad\x23\x21\x62\xdd\x4a\x1e\x4c\xfb\x75\x7d\xa4\x2d\xc8\xbf\x9d\x34\x4c\x0b\x23\x6a\xdd\xe9\x5f\xaf\xb5\xb5\x6f\xc5\x10\xae\xbb\x38\x17\xea\xed\x6b\xef\xb9\x91\x6b\x12\x77\xa0\x30\x87\xa5\x7f\xf4\x0f\xe6\xd3\x87\xb3\xd8\x36\x4b\x2c\x07\xb6\xfe\x47\xd8\xbf\x2d\x0e\xa5\x68\x38\x11\xf0\xa9\x98\x23\x39\xe0\x79\xf8\xc4\x03\xf5\xb4\x0f\xf5\x29\x99\x8e\x0d\x77\x67\x86\xa8\xad\xd0\x48\x75\xc0\x33\xfd\xa2\x07\xaa\x57\x49\x68\xd3\x59\x3a\x1a\x51\xcb\x3c\x98\x43\x05\x51\x90\xaf\x5c\xee\x51\x73\x4a\x95\xe1\x7a\x2a\xb2\x4f\xfb\xb4\x30\x89\x51\x2f\x6d\x19\xe6\x8f\xe0\x5d\x73\x9a\x71\x03\x99\x71\x45\xbb\xcc\xd5\x31\x32\x30\xde\x21\xbc\x2c\x18\x51\xaa\x91\xc8\x01\x11\x5e\xea\x52\xcc\xdf\x04\x56\x6a\x72\x72\xd2\x1f\xaa\x3c\xfe\x53\x60\x17\x77\xb4\x0a\xb5\x38\xe7\x19\xdc\x8e\x45\xef\x74\x07\xac\xfb\xe1\xc0\x07\xdf\x91\xa7\xeb\x9a\x5b\x71\x3f\xbc\x7b\x17\x1b\xd9\x06\xe3\x58\xdd\x93\x17\xfd\x11\x3c\x79\xb1\xf6\xdf\x23\x49\x9f\x34\x92\xb4\xc7\x58\x3e\x17\x8c\x65\x1f\x76\xb6\x03\x0d\x3c\x5c\x18\xda\xe8\x88\x6e\xeb\xa9\xa5\x87\xa3\xa3\x67\x17\x90\xb6\x61\x63\xf7\x13\xa0\xf6\xc4\x76\xb1\xcd\x0a\xfa\x45\x91\xbd\x1b\x38\xfd\x61\x51\xbe\xeb\x3f\xdc\x25\x94\xad\x43\xef\x88\xdb\xfb\xb0\x2f\x35\xd9\x5e\xd6\xe8\x83\xdb\x1a\xe7\xd5\x07\xb7\x75\x9f\x6b\x1f\xdc\xf6\x58\xc1\x6d\xeb\x49\x43\x4b\xb0\xdb\xe6\x8e\xb1\x91\x6a\x83\xae\xd3\x07\xc3\x7d\x0d\x2a\xcc\xce\xc1\x70\x35\xd1\x42\x8a\x43\xc6\xc4\x6d\xe0\xce\x1d\xad\x0f\xbd\xfe\xf6\xac\xf5\xb7\x87\xc6\xc8\x3d\x09\xed\xad\xa3\xa5\xeb\x2b\x88\x93\x6b\xe1\x3d\x5f\x4a\xa2\xf6\xc1\x2f\xbb\x70\xbf\x6b\x1f\xb2\x62\x93\x2d\x86\x18\x6a\xb0\xed\x52\x05\x30\xe2\x18\x4d\x0a\x18\x39\xd3\x2a\x2d\xba\x14\xd2\xef\x80\xaf\xbe\x35\x6d\x6e\x9b\x52\xe5\xd5\x50\x5f\xb1\xb5\xd1\xfa\xf4\x5c\x49\xa8\xaf\x05\xe6\xdc\x62\x8f\xd8\xe5\x64\x21\x6c\x32\x4e\x38\xb7\x0f\xd3\x2c\xe1\x10\xf7\x07\x66\xda\x08\xda\x6c\x07\x38\x89\xf4\xb6\x06\xcf\x8c\x4a\x3f\x20\x50\xd3\xd6\x27\xa1\x0f\xd6\x57\x1d\x81\xa2\xc9\x01\xe2\x51\xd1\x35\x2f\x6e\x04\x8e\xa6\x01\xf7\x02\x8f\x0e\xf0\x59\x02\x70\x6b\x4d\x28\x47\xa9\x57\x20\xa6\x74\x9a\xbe\x44\xbc\x03\x57\x0e\x19\x3b\xf7\xf8\xb6\xdb\xd1\xd1\xbb\xcf\x66\x49\xa3\xa3\xdb\x46\x4c\xf3\x1a\x60\xa5\x2d\xf2\x11\x7c\xd7\x82\x34\x5f\xb8\xa0\x50\x68\x24\xee\x04\x22\xcd\x45\x7a\x02\x7b\x96\x2a\xe8\x99\x8a\xb2\xe0\x49\xe9\x45\x82\x84\x2f\x78\x62\xbe\x00\x29\xf2\xf8\x1d\x97\x19\xe8\x95\xa5\x22\xc8\x5e\x0d\x2f\xb8\xb2\x10\xbf\xef\xe1\x4a\x5e\xf0\x93\xd6\xd5\xfc\x37\x2f\xc4\x7f\xaf\xc2\x74\x9d\x7f\x1d\xa2\x26\x5c\x5a\x4e\xc2\x81\xd2\x4d\xf3\xf3\xb6\xd9\xfd\xfc\xd4\xc5\xe7\x24\xab\xb4\xbc\x13\x58\x94\xbe\xe1\xd3\xdf\x3c\x00\xdc\x93\x0e\x7b\x7e\x7b\x04\x80\xb7\x1a\x1e\x77\xa2\xa1\x5d\x63\xd5\x1a\xad\x92\x07\x8c\x5a\x6b\x9c\xc6\xe6\x49\xb0\xc7\xd3\x5f\xbe\xe5\x20\xb6\xc6\x50\x9e\xf5\x77\xaf\xa9\xf9\x96\x31\x3d\x1d\x92\x45\xf3\x3c\xbd\x91\x7f\xb4\x32\x22\xdb\xce\x42\x44\xe6\x80\x67\x8c\x11\xf2\x04\x12\x8e\xe1\xfc\x7a\x56\x4d\x26\x99\x00\xc0\x3a\xc0\x42\x42\xc0\xb9\xcc\x4b\x85\x5c\xc1\xd0\xf1\xff\x9c\x89\x9c\x89\xdc\x06\xde\x78\xb0\x94\x45\x26\xac\xc0\xfa\x1d\x5c\xe9\x98\x62\x91\x5d\x3e\xd4\x82\xbd\x70\x2a\xec\x82\xcb\x02\x80\xf9\x33\xae\x67\x2e\x5d\x81\x80\x7f\x12\xeb\x08\x92\x07\xd8\x09\x87\x10\x0a\x9c\x22\xf2\x2d\xc1\x33\xc6\x41\x78\x70\xbc\x40\xfe\x11\xa6\xb6\x9f\x89\x42\x0c\x19\x00\xd0\x1c\xda\x4b\xb3\x45\x55\xe2\x72\x09\xe6\x82\x7b\xa3\x0a\xb0\xb1\xd0\xf8\x92\xa4\x6a\x33\xf8\x90\x05\x7b\xee\x25\x0f\x96\xf1\x62\x8a\x5b\x9d\xb3\x5b\xec\x77\x8b\x46\x19\x1f\xf4\xa1\xe5\x34\x07\xcf\x13\x14\x09\x80\xb3\x32\x1b\xa2\x95\x4b\x43\x2b\xee\xd9\x4c\xf0\xbb\x25\xe6\xa8\xb5\xcc\x58\xf3\xd2\xdc\x27\xc1\xe6\xca\xc7\xbd\xe2\x37\x4e\x86\xcc\x55\xec\xaf\xb4\x28\x4e\x27\x3c\xc1\xda\x52\x41\x21\x09\x5f\xbd\x9f\x52\xa5\xdf\x09\x36\xad\x64\xca\xa1\x86\x47\xee\xf2\x7a\x87\x95\x2b\x3a\xa0\xef\xff\xb4\x77\xf0\x3d\xac\xe9\xbd\xc8\xa7\xe5\x0c\xd8\x4d\xdb\xed\xaf\xb7\x77\x84\x76\xce\x3f\xcb\x79\x35\x6f\x0a\xa6\xa0\xc2\x67\x04\x52\xba\xe7\x12\x96\x0e\x01\x68\x18\x74\x82\x61\x68\xeb\x24\x2b\x1b\x74\xf1\x17\x08\xd5\xd1\x3a\x96\x5d\x7d\xe4\x18\xee\x5f\x9c\x22\xc2\xbe\xcb\x21\x63\x97\x93\x0d\xc9\x1f\x68\xa7\x71\x92\xff\xba\xff\x18\x07\xbc\x3a\x9d\x36\xd7\xf3\x2e\xbf\x95\xf4\x2a\xd6\x84\x3d\x21\xc4\x93\xda\x40\x91\x24\x23\x27\x8b\x85\xc8\x53\x2a\x85\x57\x62\xa0\x4a\x0d\x14\xba\x76\xab\x6e\xe8\x76\x4a\xcc\x88\xc1\xc4\x64\x22\x92\x12\xc5\xb6\x45\x21\x08\xc4\x44\xe4\xc1\x91\x33\x27\xe6\xce\xf9\x27\x5b\x38\xa7\x29\x7b\xb6\x91\x05\x7c\x56\xff\x20\x71\x82\x66\xb2\x28\x44\x26\xee\x78\x5e\x76\x7a\x0e\x3f\xfe\xb0\x9f\x83\xda\x27\x6b\xdb\x2a\x44\x63\xcb\xf8\x0c\x10\xbb\x57\x02\x34\x06\x80\xee\xad\x61\x78\x8f\x75\x1b\xd8\xb0\x01\xd3\x18\xa1\x73\xe3\xaf\xd4\x14\xbc\x37\x3b\x85\x67\x0c\x36\x81\x73\xf9\x42\xfe\x2d\x06\xb6\xc5\x3d\x93\x56\x58\xef\x9a\x9e\xa0\xb4\xa4\x27\xcd\x01\x21\x36\x3d\xfb\xae\xd0\x5f\x37\xeb\xd6\xd8\x3f\xdb\x70\x1d\x78\xff\xfc\xea\xd2\x22\xfb\xba\x22\xf8\xe3\x2e\x50\xec\xc1\x81\xf8\xbf\x3a\x04\x7f\x40\x2d\x29\x65\xcc\x4d\xa2\xda\xed\x02\x61\xdb\x46\xfb\x80\x4d\x2b\x50\x2f\xbc\x16\x70\x83\x25\xe3\x41\x15\x7b\xca\x5c\x34\xe3\x8b\x85\xc8\x35\x13\x12\xc6\xb1\x35\x3d\x23\xf0\x3b\x25\x14\x72\x7d\x21\x60\x3a\x04\xa4\xe3\xb3\xa3\x18\x16\x77\xd7\x4e\x28\x19\x4e\x54\xad\x6d\x2e\x4b\x8a\xb8\x9e\xf0\x0c\x3f\x84\xd1\x9d\xb7\xbe\xe3\x6d\x68\x7f\x21\x5b\xa4\x99\xbb\x33\xc3\x64\x51\x85\xbc\xe8\x68\xc6\x4a\x65\x82\xe7\xcd\x3b\xee\x3f\xd1\xc5\xe6\x68\x27\x13\x67\x06\x21\x78\xb9\x7f\x51\x64\x38\x31\x77\x27\x00\xec\x83\x99\xc2\xed\x0f\xc4\xe8\x3a\xcb\x14\x5f\x19\x25\xae\x6a\x29\x27\xf6\x38\x0c\xf9\xf1\x15\x57\x82\x1a\x38\xbc\x5c\x1d\x43\x15\x40\x78\x1a\xda\xc3\x9b\x1a\xb2\x20\x6b\x54\xed\x95\xe5\xcb\x40\x9e\xf5\x23\x8e\x2b\x73\x85\x30\xe0\xc9\xa5\xd0\x8a\x16\xf5\xdf\xee\xcf\x74\xc7\xfe\x3b\xbe\x64\x9a\x44\xc8\xda\x05\xc6\xf3\x45\x46\xcf\x4b\x1b\x92\x89\x89\xfc\x28\x1c\xd5\x1c\xf4\x00\x66\xe0\xac\x6d\xb5\x47\xa0\x59\x59\x54\xf5\x72\x93\x4f\xea\x85\x7b\xbf\x65\x47\x54\xfe\x5a\xb2\xe9\x89\xff\x0b\x39\x14\xc3\x01\xe4\x1f\x2b\x12\xae\x05\x90\xd1\x45\x56\x15\x3c\x3b\x81\x18\x4e\x20\x90\x04\x3b\x1b\x30\x5d\x8d\x3d\x37\x0c\x43\xe8\x06\xec\x1f\x6c\x74\x64\x6b\x3b\x8f\x8e\x06\x6c\x74\x94\xab\x54\xe8\x33\x44\x23\x8c\x8e\xd8\x3f\xad\x78\xe2\x0e\xa6\x8d\x54\xfb\x69\x3e\x2b\x4a\xfd\x45\x62\xd6\x9e\xc1\x16\x76\x34\x5a\xae\x84\xab\x79\x71\xa3\xf1\x31\xed\xd3\xdb\x72\x83\x0f\xe0\x1c\xe3\x23\xda\x33\x0e\x35\xb6\x6f\x4b\x3d\x44\xaf\xec\x94\xa2\x30\x0e\x90\x84\xa8\xd9\x49\xe6\xae\x5f\x3c\x6b\x0b\x5d\x69\x4a\x4b\x54\x88\x29\x2f\xd2\x0c\x0a\x0c\xa2\xe0\xf8\x20\xa0\x91\x63\x05\x9d\x19\x6e\xb4\x08\x62\x6c\xad\x2b\x39\x68\x12\x23\x9c\xff\xe0\x80\x2e\xbf\x0e\xd7\xce\x85\x31\x7a\xf1\x5d\x15\x72\x8a\xd6\x78\x34\x3c\x7b\x55\xa0\x5e\x27\x28\x0a\x1e\x8c\x52\x45\x51\x04\x8e\x0d\xf9\xe1\x50\x9f\xb3\x10\x82\x41\x4a\xcf\x70\xe3\x79\x1e\x7c\xf0\x2f\x66\x54\x0c\x30\x02\xc9\x1c\x6e\x12\xdd\x72\x46\xb7\xbc\xc3\xc5\xb6\x1e\xf8\x87\xbb\x0f\xa3\x7c\x61\x8d\x37\xb1\x03\x16\xc6\xde\xa1\x1d\x50\x7f\xd1\xad\xdc\xcb\x8a\x9a\x09\x53\xe3\xd7\xcd\x41\xec\xe5\x9b\xbf\x69\x51\xac\x7e\xa9\xe3\x53\x81\x0d\x6e\x7b\x15\x7b\x72\x3d\xc1\xb7\x76\x74\x3d\x39\xd8\x07\xdc\x99\x68\x94\xa6\x93\xac\x51\xfc\x7a\x7b\xda\xfb\x23\xb3\x75\x7b\x74\x61\x85\x27\xb1\x9e\x2a\x04\xad\xda\x58\x10\xd8\x70\x0f\xcd\x77\xcc\x47\x80\xf7\x74\x4d\x7e\xf7\x84\x33\xd0\xe5\xa2\xbc\x57\xc5\x27\x99\x4f\x87\x77\x51\x65\xf9\x2b\x5e\xce\x36\x9c\x49\xad\xa5\x37\x02\x82\xc5\xcb\xfc\x82\x15\x3e\x5d\xcd\x62\x76\x99\x27\x6a\x0e\x98\x99\x22\xab\xe5\x2f\x85\xf6\x86\x28\x4f\x54\x71\xcf\x8b\x94\x6a\x42\xce\xc4\x6a\xc5\xe3\xbd\xd7\x89\x8f\x37\x60\x8b\x12\xf1\xd4\x26\x82\xb0\x06\x38\x1c\xcb\x26\x3c\x16\x50\x51\xca\xa7\x12\x4b\xa4\x42\x85\x4b\x6b\xb2\x0e\x17\xbe\x06\x57\xb1\x88\x0f\xa4\x69\x4a\x70\x12\xd2\x2a\xe7\x29\xe3\x53\xa3\x17\x97\x7e\x8f\x11\x3a\x2b\xed\x49\xb8\x30\x53\x5f\x7a\x59\x62\x3a\x1c\x6b\x8e\x48\x66\xbc\xe0\x09\xf8\xdf\x52\xa9\xad\xed\xdf\xa3\x1a\x1c\x18\x8e\x67\x6c\x04\x53\x1c\x1d\xb1\x05\x2f\x4a\xe4\xd5\xbf\x5d\xbf\xa7\xf4\xcb\x32\x47\x1e\x7d\xfd\xf3\x05\xfb\xfe\xcf\x7f\xfa\x71\xc8\xcc\x64\xb5\x15\xf6\xa7\x32\xb7\x17\xe6\xf8\xec\x78\x88\x3e\xb3\xa8\x64\x36\x38\xe6\xa0\x0b\x7c\xbd\xbe\x06\xf4\x1f\xd0\xc2\x77\x90\xe0\xcc\xd0\x1f\xdb\x91\x2b\x57\xd4\xcc\x50\x20\xa8\xe9\x49\x07\x0f\x68\xe2\x45\x21\xca\x28\x2a\x0a\xce\xc3\xde\x74\x5c\x31\x74\xa6\xc4\x7c\x81\xcb\x6c\xa2\xcc\xd6\x3a\x60\xaa\x7e\xc3\x5e\xb2\x77\x9f\x79\x52\xbe\xc1\xcc\xd9\xf4\x19\xb3\x9f\x70\x90\xc2\xfc\x2d\x5b\x0e\xd9\x4b\x76\x05\x09\x67\x7c\x3b\x57\x00\x95\xfb\xe6\x98\x94\x86\xe9\x45\x26\x4b\x73\x0a\xb0\xc7\x36\x25\x37\x93\x7a\x94\x33\x4c\xa9\x06\xdd\xf0\x0b\x54\x4e\x7f\xbc\xf4\xff\xc9\xb5\xd4\x43\x76\x1e\x37\x80\x3b\x6f\xa3\xb3\xcd\x40\x56\x2b\xcc\xf8\x98\xb2\x7f\xb9\xfb\xe7\x26\x60\x7e\x39\x3e\x3b\x66\x5a\x2c\x78\x61\xd8\xdd\x30\xb0\x23\x19\xdd\xd2\x0c\x84\x44\xd4\x90\x75\x5c\x04\x58\x8c\x20\x3e\x7a\x61\x93\x25\xe3\x1c\x4e\xef\xa5\x16\x76\x91\x6a\xc2\x16\xb4\xad\x66\x10\x3b\xa8\x19\xa2\x21\xa1\x38\x84\x42\xd8\xa5\x58\xc0\x1d\x3d\x23\x6e\x98\x08\x5e\x1a\x33\x92\x6a\xe8\x21\xf3\xe8\x03\x03\xca\xbe\x62\x34\x5f\xca\x14\xcd\x5e\x88\xe1\x74\xc8\xce\x26\x4a\x9d\x8d\x79\xe1\xd6\x25\xb4\xfb\xed\x6c\xcc\xff\x18\x34\x59\xa1\x6c\x83\x31\xff\xe3\x64\x38\xca\x5f\xd6\x4a\xf9\xdf\x50\x24\xde\x1b\x76\xd9\x7e\xfd\xc0\x17\xbc\x60\xa5\x32\x33\x28\x6b\x85\xf3\x87\xb5\x91\x35\x5c\xd1\xb2\x10\xd6\x45\xcd\x31\xcb\x11\x1c\x96\x70\x17\x19\x76\xa5\xa0\x76\xd2\xe6\x4f\xc0\x9c\xf0\xa5\xa2\x9b\x69\x5a\xc0\x55\xc6\x7d\x05\xc8\xf1\x70\x94\xd7\x3f\x68\x53\x02\x42\x18\x61\xa9\x6c\x49\x56\xf7\xee\xa9\xe3\x7e\x59\xa7\x65\x1a\x7b\xe7\x9e\xd7\x55\x26\x7e\x37\x2f\xb9\x1b\x0b\x75\xcd\x63\xbb\xca\xac\x2c\x17\x4c\x8b\x4c\x24\xa5\x2a\x34\xa2\x52\x29\x05\x05\xcd\x5c\x03\x60\x1c\x33\xc1\x61\xca\x28\xe8\xf4\xe6\xec\x6c\x54\xbd\x7a\xf5\x7d\x32\x53\xba\x84\xff\x12\xf4\x03\x90\x68\xf8\xe1\xaf\xf8\x83\x16\xbc\x48\x66\x86\x64\xe3\xcf\xec\x94\xfe\x97\xbe\xc0\xee\x31\x07\x39\xfc\x7f\xd3\xcc\x05\xf0\x54\x45\xc6\x12\x55\x14\x90\x6f\x0d\xce\xcc\x12\xf7\x81\x8d\xdb\x20\xcb\xba\xe5\x72\x16\x8b\x40\xd2\x11\x71\x27\x78\xd2\x25\x6a\x5f\x93\x52\x14\xfe\x95\x19\x0a\xc1\xf3\x94\x8d\xc5\x44\x15\x54\xfe\x41\x16\xe6\x0f\x7f\x3d\x36\xd7\xea\xf8\x5f\x8e\x3b\x48\x06\xc0\x35\xda\x42\x52\x58\xa2\x32\xb3\xcf\x36\xa6\x0e\x38\x0d\xc9\x77\x8b\x10\xb4\xef\x77\x7e\x3f\x38\xa3\xcd\x02\xd8\x7e\xcd\x56\x3b\x27\x57\x87\x1d\xdc\xcf\x23\xb9\xbc\xfa\x29\x53\xc9\xa7\x0d\xef\x82\x5a\x04\xe9\xfa\x39\x5c\x3c\x99\x54\x19\x2f\xd8\xc5\xe5\xdb\x6b\xf6\xe2\xdd\xe7\x21\x1b\x1d\xbd\xfe\xf3\x77\xc3\xd7\x3f\xfe\x69\xf8\x7a\xf8\xfa\xec\xbb\x1f\x46\x47\x83\xd1\xd1\x77\xaf\x5e\xbd\x7e\x93\x8e\xff\xfc\xe6\xcd\xd9\x8f\x3f\x8c\x8e\x4e\x88\xda\x47\xc0\x05\x20\xf2\x2a\xf5\x82\x12\x14\x19\xfe\x80\xf3\x44\x0f\xaa\xa1\xad\xc7\xe6\xc9\xa5\x37\xf4\xfe\xd0\xcd\x2e\x3e\x27\x62\x51\xa2\x49\x32\x98\xa1\x99\x14\xdd\x17\xc2\xab\x90\xf1\xd3\xd5\x9d\x37\xd2\x8d\x4d\x27\x52\x54\x59\x97\x3a\x2d\x89\x4c\x57\x14\xde\xda\x5e\xc1\x66\x84\x71\x2d\x2b\x11\x2d\x97\x57\x0c\xb7\xf3\x77\xa8\xae\x40\x64\xc2\x96\xb8\xae\x6f\x20\x2a\x31\xb5\x3d\xdc\x5e\x9a\xc2\x5d\x6a\x99\xfb\x3b\xdc\xca\x38\x37\x4f\xe7\x8d\xe4\xf9\x3e\x96\xc6\x68\x12\x54\xf9\xdf\x12\x2a\x8b\x43\x21\x29\x61\x09\x43\xaa\xaa\xd4\x32\x45\x32\x04\xfb\x0e\x25\x4b\x0e\x68\x8c\xde\xfa\x9d\xc2\x85\xd9\xd3\x33\x45\x22\xb4\xe9\x99\x62\x0b\x3c\xbf\x98\x7a\x16\x3e\xa5\x12\x16\xe8\xb7\x35\xc0\x13\x95\xe7\xd8\x0c\x48\x29\xa4\x9e\x8e\x22\xa6\x22\x5d\x21\x50\x1e\xcf\x5d\xa5\x7d\x2b\x3c\x3b\x3c\x1e\xbc\xe8\xa9\xbc\x13\x56\xe5\xd2\x00\xd3\x2a\x72\x23\x86\x9c\xc2\x27\x00\xae\x6c\xd4\xce\x01\xcb\x14\x4f\xd9\x98\x67\x80\xdd\x22\x2d\x6c\xe0\xea\xf3\x0b\x76\x73\xf3\x7e\xc0\xd4\x64\x22\x0a\x34\x2f\xa3\x34\x7d\x27\x8b\xb2\xe2\x19\x14\xf6\x37\x0f\x4b\x94\x49\x1f\x10\xf9\xa4\x03\x22\xfb\x98\xc0\xe7\x12\x13\xd8\x31\xa7\xcb\xcd\x93\x8a\x01\x0c\x8d\xe6\xbb\x64\x70\x69\x24\xc6\xad\x89\x5a\x20\x00\x8a\x8c\x94\x36\x23\x8b\xc3\xca\x07\x3a\xdf\x57\x9d\x83\xa5\x79\x6b\xda\x53\xad\x50\x64\xc3\xba\x50\x82\xa7\xb1\x3d\x2b\x8c\xfe\x70\xe1\xa0\xc1\x3e\x6e\x8a\x01\xb5\x82\xc0\xfa\x60\xcf\x2d\xe2\x3c\x37\x1a\x5b\x5b\x45\x0d\x6f\x71\x75\x8a\x41\x96\x05\xa2\x03\x46\xbc\x21\x0a\xd9\x79\xe9\xf2\x94\x2d\x54\xd1\xc5\x0f\x60\x49\xfc\xd6\x37\x32\x51\x85\x80\xd4\x27\xcb\x85\x48\xdf\xab\x84\x67\x48\xb3\xba\x15\x69\xbb\x0e\xf0\x67\x3c\x67\xae\x6b\x90\xd7\x84\xfd\xbb\x3b\xeb\x00\xae\x96\xaf\xfa\x8f\x83\x4b\xec\xe4\x81\xcb\x49\x04\x71\x0b\x4d\xaa\x76\x97\x86\x1f\x8c\xa8\x03\x60\x7b\xfa\xe1\x4a\x15\x94\x37\x98\x78\x91\xeb\x46\x20\x26\xe0\x9b\xf3\xca\x48\x45\xd9\xd2\x87\x82\x39\x2c\x3c\x18\x73\x47\xd6\xab\x34\x3a\x5a\x63\xd4\xa6\xef\xed\x89\x08\xe0\x60\x5d\x8c\xf7\xd4\xd4\x1b\xec\xcd\x72\xec\x8f\x60\xec\xfa\xc9\x8a\x9e\xdb\x2c\xd7\x9e\x65\xbc\xde\xb6\x47\xbd\xd5\x6b\x01\x7b\x5d\xfb\x5b\x81\x66\x2b\x61\x5c\xf0\x63\x7c\x4f\x06\xa1\xd3\x82\x2c\xb3\xf6\x0a\x19\x7e\x82\x6a\xef\xad\xc4\x9f\x60\x84\xa1\x27\x3d\x86\x1c\x4a\x7d\x4a\x60\xee\x53\xf8\xf3\x2d\x03\x09\x06\x65\x53\x92\xd6\xad\xe5\xc7\x42\x3a\x49\x39\xc8\x23\x2b\x64\x10\xea\x61\xb3\x1b\x8b\xd4\xd5\x6e\x44\x9f\x00\x67\x5a\xe6\xd3\x2c\x36\x5f\xfa\x0b\x0e\xe9\x53\xc1\x60\xe9\xa7\x40\xb5\x20\x4b\xc8\x2e\x93\x8b\x7b\xb7\x3c\x0f\xe3\x32\xc7\xa7\xaa\xd2\x28\x32\x38\x11\x87\x12\xb4\x1a\x21\xd7\x5a\x4e\x73\x28\x2d\x22\x5d\x3d\x49\x6c\xdd\x6b\x02\xbd\x26\xd0\x6b\x02\xf5\x6d\xef\x35\x81\x55\x66\xb7\x37\x4d\x00\xa8\xde\xde\xd4\x01\x72\x01\xf5\x42\x6f\x5d\xe8\x45\x5e\x7b\x38\xc9\x17\xc6\x6f\x49\xe3\x55\x6f\xda\x64\x6f\x0b\xdb\x88\x9e\x1f\x3d\x6d\x7e\xd4\x25\x55\xd7\xa5\x69\x53\x4f\x78\xbe\xee\x94\xd7\x8e\xfa\x30\xf2\xd2\xa7\xe4\xea\x99\x6e\xd7\x94\x5c\x8e\xe5\x62\x08\x85\x65\xb7\x5f\x41\x52\xac\x1d\x18\x42\x4b\xee\xab\xbd\x30\x85\x2b\x97\xf7\xa0\x4b\xb2\xab\x96\x9e\x1e\x26\x0d\x16\x86\xf3\xab\x4b\x47\x92\x41\xb9\xad\xe9\x68\x3e\x8c\x8e\x22\x91\xa0\xb8\x8a\x35\x33\x9c\xea\x44\x2d\x44\xea\x83\x4f\xbb\x87\x55\xb6\xf3\x1a\x68\x66\xe9\x1e\x16\x70\x98\xb8\x20\x3c\xa2\x00\xf5\x8c\x57\x60\xe1\x08\xfb\xd6\x02\xc3\x83\x9c\xd5\x22\x65\x40\x75\x6c\x84\x89\x2d\x6a\x6f\x5e\xb4\x0b\xbf\xc4\x0a\x5c\x3c\xb7\xb5\xf4\xca\x99\x2c\xd2\xd3\x05\x2f\xca\x25\x62\x50\x06\xd1\xd7\x8a\xdd\xa3\x06\xb6\x20\x92\x61\x72\xd2\xf5\x3b\xb1\x5b\xe0\x42\xcb\x14\x3e\x04\x85\x9f\x6d\xc4\xc5\xbe\xa7\xd0\x25\x76\xe2\x83\x33\x74\x35\x45\x4e\xb4\x5c\x91\x8f\x51\x78\xa6\xc3\x19\xdd\xcf\x44\xce\xe0\x42\x83\x69\x0c\x0d\x05\x23\xff\xa9\xd1\x11\x0a\x1b\x74\x5f\xaa\xdc\x34\x59\xd3\xe9\x02\x1f\xcb\x4a\x02\x9a\x4e\xc0\xfa\x0e\xc1\xb1\x10\x0f\x18\x5a\x74\xa4\x93\xb9\x00\x80\x07\x49\xaa\x9a\x5e\x2c\xab\xbf\x58\xdc\x0d\x8a\x40\x5c\x9d\x3f\x7b\x41\xe6\x8d\x13\x74\x99\x07\xbb\x31\x64\x3f\xc3\x1e\xda\xca\xc2\x39\x1f\x67\xe4\x92\x8f\xc4\x13\xd7\x25\x05\x72\xa4\xd9\x44\x70\xc3\xf0\xd8\x94\x97\xf5\x50\xc6\x87\x62\xb8\x6a\x20\xf9\x7d\xc2\xa1\x57\xb4\xad\x6e\x24\x18\xf4\xae\x45\xa1\xee\x64\x2a\xe2\xe4\x82\x98\x2a\x3a\x32\xc5\x79\x1b\x58\xb7\xec\x49\x58\x64\xb5\x15\x17\xe2\x1a\x06\xd7\xa3\x9e\x58\xd0\x8f\x16\x01\x2e\xa8\xd2\x2f\xdc\x2d\x34\x70\xe1\x85\x01\x57\x3e\x5a\xd9\x53\x39\x81\xb7\x55\xb2\xd1\xd1\x24\xe3\x77\xaa\xd0\xa3\x23\x5f\x12\x38\xa8\x05\x4b\x16\x45\x6d\x3e\xeb\xbf\x37\x8c\x43\x34\x97\xaa\x82\xeb\x08\xf5\x11\xfd\xd8\x57\x71\xf2\x1f\x37\x8e\xb4\xd0\x41\xf3\xca\xc3\x41\x61\x9a\x41\xbe\x18\x47\xf5\x31\xe3\x84\x9a\x73\x99\x9f\x52\x81\xc6\x14\x51\x85\xb9\xc2\xcc\x2e\x90\x78\xe6\xbb\x7f\x7d\x15\x22\x9e\x65\xce\x32\x48\x8e\x32\x60\x80\xe1\x1c\x1d\xf1\x64\x2e\xc0\xe4\x89\x27\xe6\x8b\xde\x9a\x67\x5f\x23\x32\x72\x3e\xaf\x4a\xf3\x3e\x76\x42\x23\xdb\x95\xef\xd1\x5e\xd0\x24\x53\x6c\x12\xea\x82\xed\x27\x54\x62\xfe\x89\xa8\x4c\xa5\x4b\x35\xf7\xf4\x96\xd0\xe2\x80\xe0\x4b\x31\x0f\x16\xaf\x27\xaa\x0c\xf2\x90\xc7\xe7\x65\xe4\xf9\x05\x75\x91\x2b\x17\xd3\x21\x62\xe9\xf1\x33\xf1\xb9\x2c\x78\x90\x17\xea\x60\x86\xf6\x6e\x7a\x79\x8b\x4a\xde\xeb\xe2\xcf\x5a\x17\x3f\xa4\x12\xde\xeb\xdf\xbd\xfe\xbd\xb5\xfe\xfd\x24\x4c\xde\xcf\x43\xd7\x3f\xb0\x9a\xdf\x92\x4c\x2a\x68\x55\xf7\xe2\x16\x54\xdc\x74\xb1\x08\xe3\xe7\x34\xab\xf2\x54\x14\xe6\x39\xfb\x94\x7d\x0a\x4b\xc8\xa2\x72\x94\x41\x8a\x2e\x0b\xeb\xb7\x60\xc9\x20\x30\x2f\x0a\xa5\x42\xa0\xbd\x30\x44\x01\x53\x7b\x01\xb8\x02\x46\x04\xd4\xf4\x00\x73\xda\x14\xaa\x2a\x57\xc2\xf5\xc2\x94\x60\xa0\x1b\x60\x4e\x39\x0a\x44\xa9\xc7\x3c\x74\xe0\x91\xe6\xb3\x2d\xe4\xec\xef\x0a\x19\x31\x04\x09\x54\x59\xb6\x64\xff\x53\xf1\x0c\xf7\x01\x25\x3f\x27\xfb\x72\x46\x27\x02\xcb\x19\xac\x8d\x50\xa3\x60\xa1\x30\x3a\x2b\x15\x77\x92\x02\x56\x1c\x69\x1b\xc1\xf4\x82\xb8\x37\x8c\xd4\xba\x0c\xc7\x95\xb9\x1b\xf7\x0d\x7b\x3d\x64\x97\x57\xda\x65\x19\x26\x60\x7a\x18\x85\xe7\x95\x02\x1f\x19\x62\x74\x2e\x48\x87\xc1\x17\x0b\x88\xaf\x19\xe5\x8c\x59\x88\x37\x59\x32\x40\xf3\x70\x51\x4c\x20\x44\x5b\x4e\x35\xca\xbf\x23\x57\xfe\x9b\x5b\x96\x0a\xcc\x4c\x5b\x58\x7b\x49\x21\xcc\xad\x81\xfb\x41\xa9\x91\x16\xaa\x28\x57\xe7\x38\xca\x47\x25\x0b\x26\x8a\x48\x7a\x0a\xf7\xf3\x18\x5d\x10\x7f\x17\x99\x4c\xa4\x69\xf4\xe6\x4f\xaf\xe0\xfa\x40\x38\x0b\xcf\x53\x1c\xe4\xcd\x0f\x3f\x7c\xef\x7e\x36\xf3\xfb\x89\xea\x68\x6a\x01\x5c\x24\x99\xf1\x7c\xea\x6c\x34\x93\xca\x10\xa0\x75\x97\xb5\x29\xe0\x11\xae\x6a\x10\x39\xb2\x72\xed\x30\x6d\x13\x35\x94\x3a\x0e\x37\x0c\x61\x10\x70\xc7\x11\x6c\x64\xe3\x36\x5d\x90\x5d\x6c\x5d\x5a\xf9\xc6\x28\x1f\xe5\x70\x33\x49\x63\x1e\x1d\x2d\x0a\x91\x48\x2d\x46\x47\x14\x0d\x2a\xbd\x6a\x82\x17\xd4\x62\x11\xc0\xe4\x43\xb8\x64\x4c\x49\x59\xae\x5e\x5e\x8a\x2e\x1b\x1d\x4d\x94\x1a\x8e\x79\x31\x4c\xd4\x7c\x74\x44\x8a\xfb\xbd\xcc\xd2\x84\x17\xe9\xe8\x68\xb0\xee\x63\x4e\x19\xa2\xe0\x4b\x02\x57\xd8\x9e\x18\xc3\xe7\x3e\xf2\x72\x68\x3e\x83\x9f\xc0\xcb\xe4\x1a\x3a\xb5\x89\x1d\xbf\x3c\x46\x83\x09\x5f\x2c\x04\x2f\xcc\x93\x92\xa5\x16\xd9\x84\x71\x1d\x84\xf0\xbc\xfd\x70\x43\xa3\xa3\x08\x19\x24\x86\x72\xd3\x80\xbf\x0f\xd9\x7f\xa9\xca\xec\x9f\xb9\x87\x58\x41\xbf\x3e\x3f\xff\x09\x9c\x29\xec\xf8\xbf\xfd\x1b\x86\x63\x9f\x60\xe0\x35\xdc\x15\x8b\xe6\x68\xba\x2f\xd0\x89\xb4\xb7\xbc\xf6\xec\xef\xf9\x12\x9f\xed\x84\x59\x3a\x43\xe7\x38\x88\xb2\x4e\xf8\xbc\x15\xb6\xe0\x2c\x69\x34\x70\xf5\xe1\xc0\x66\x82\xa7\xf8\xee\x84\x21\x50\x86\x72\x9a\x21\x87\xec\xbb\x68\x78\xbf\xc6\x81\x4f\x1e\xb6\xd3\x67\x4a\xe5\xbf\x04\xb7\xb5\x9a\x4c\xe4\x67\xf6\xa2\x10\x73\x75\x67\x39\x08\x9e\x09\xec\xe6\x89\x25\x20\x6e\x93\xe3\x70\x95\xce\xc2\x90\x99\xcc\x03\xd5\xd7\xc6\x88\xba\x03\xe9\x7b\x35\xf4\x58\x2b\x6b\x8e\xdb\xc7\x48\xb2\x00\xaf\xd7\x08\x2a\xdb\x4b\x52\x82\xd0\x30\xbb\x1a\x78\x8e\xef\xd3\xc2\x20\xe1\x41\xda\x6c\xa2\xde\x92\xe2\x6d\x84\xf4\x36\x6b\xe0\xc1\x1d\x2c\x17\xaa\xd8\x3e\x31\x48\x7c\x1e\xf1\xc6\x5e\x99\x01\x37\x9a\x29\x94\xe7\xba\x4d\xdb\x70\x8e\x0c\x0a\x99\x7f\x41\xff\xc0\x64\xac\xa1\x29\x18\xe5\x9b\xc6\xb3\xdd\xc1\x8f\xb5\x7f\x23\x64\x37\xfb\x23\x08\x00\x1e\x1f\x1b\x1e\xa9\xcd\x5c\xc1\xee\xa5\x06\xe2\xa1\xf0\x42\x74\xb8\x8c\x64\x0f\x5e\x7d\x1a\xbb\x1c\xef\x16\x29\x16\xde\x46\xdf\xb5\x77\xdd\x0a\x99\x0d\x36\xcb\x7a\x5a\xc8\xfc\xd8\x25\xf4\xcb\x97\x48\xc7\x0c\x91\xc5\x92\xef\xae\xca\x83\xe7\xfa\xb5\x0f\x5a\xbb\x7f\x00\x7e\xbd\x9c\xd4\x1b\x59\x8f\x93\x28\x91\x17\xc0\x54\xea\x19\xc1\xc3\x34\x95\x7e\x42\xf6\xd6\xc2\x74\x5c\x90\xec\xc2\x52\x6a\x17\xf1\xe4\x4d\x66\x6b\xcc\x18\x35\xd3\x7b\x9b\x45\xa3\xd6\xbc\xa9\xe8\x4c\x04\xaf\xb4\x5e\x85\xd0\x83\x20\x42\x21\x3f\x6a\x6d\x8d\x53\x28\x72\x04\xb6\x3c\x58\xa1\x33\xde\x46\x2e\x1b\xb2\x05\x16\x62\x91\x51\xb6\x49\xc1\x52\xa3\xf6\x60\xa5\xf4\xdb\x1a\xe2\x94\x64\xda\x15\xb8\x29\xda\x95\xcd\x05\xb9\xe7\x45\x6a\x76\x6e\xbe\xe0\xa5\x1c\xcb\x4c\x96\xcb\x01\x7a\x6e\x08\x79\xea\xe0\xa1\xe8\xc3\x81\xc8\x7d\x7b\xde\x08\x21\x37\x5f\x17\x29\x38\x50\xd5\x9d\x33\x68\x60\x7a\xef\x8f\xb1\x95\xd2\xc8\xab\x62\x2e\x4b\xc3\xb6\x79\x01\x86\x50\xe2\xc8\x28\x50\x18\x11\x27\xf8\x64\xcd\xce\x6d\xed\x64\xf5\x90\x78\x6b\xc8\x3b\xbf\xba\xb4\xf7\x5c\x4e\x73\x23\xcf\xd2\x7e\x6f\x42\xae\x86\x31\x73\x35\x90\x2c\x79\x7e\xe6\xbc\xf8\x84\xb6\x71\x7a\xdf\x56\x4a\xac\xfb\x83\x45\xb9\x92\xaf\xd9\x25\xaf\xa6\xfd\xf8\xd9\x66\x48\x0f\xbc\x1d\x84\x2c\xae\xdd\x66\xba\x23\x61\x7e\xf5\x5d\x6a\x65\x9a\x27\xd3\x1a\xd3\xed\xe2\xe8\x8d\x44\x84\xaf\xcc\x2e\xca\x85\x0f\xc6\x81\x1f\x97\x93\x58\x0d\x50\x05\xcb\x15\x8a\x58\x2e\xcf\x4f\xa8\x07\xc0\xe5\xc9\x9d\x92\x6d\x37\x69\x25\x6d\x0d\xdb\xbb\x79\x10\xec\x07\x1d\x4d\x84\xbb\x86\x87\x07\x1b\x5e\x66\x6d\xdb\xfd\xf1\xfd\x4d\x6c\xf2\x1f\xd6\xf4\x44\x27\x5b\x18\x19\x9f\xd2\x3b\x68\x2f\xec\x9b\xfe\xe6\xa7\x01\xfb\xe1\x87\xef\xe1\x24\xe6\x55\x56\xca\x45\x66\x53\x3c\xfb\x07\x01\xe7\x6a\x61\x0a\xfe\x1d\x99\x63\xd6\x03\x0c\xd8\x75\x92\x3e\x8d\xf1\x39\x50\xd7\x40\xf1\x81\xdc\x12\x49\xa2\x30\xdd\x39\x9d\x9f\x19\x01\xa8\xa0\x57\xe9\xca\x59\xa1\xaa\x29\x9a\x30\x6e\x3e\x5c\xc2\x34\xa9\x0c\x80\xb9\xe2\xf4\xcc\xe5\x0a\xa9\x66\x93\x2a\x9b\xc8\x2c\xb3\x12\xb6\x6d\xe1\x16\x7e\xf3\xe1\xf2\x90\xf7\xe3\xe3\xfb\x9b\x47\xcf\x1e\xf0\x20\xf9\xa6\xad\x66\x4d\xd4\xce\xc9\x38\xed\xc1\x5c\x1d\x0a\x7c\x29\x9e\xfe\x84\x21\xc1\xdb\x27\x98\xb3\xc1\x3f\xef\x83\x41\x3a\x44\xa3\x85\xcd\xc3\x8c\xc7\x4d\x25\xc0\xc1\xf1\xa0\x78\x7a\x4a\x71\xcb\xc5\xc1\x7c\x5e\xe6\xd2\xb4\x9e\x80\x79\x01\xb1\x88\x09\xa5\x84\xe1\x45\x65\x7c\x29\x0a\xa6\x45\x52\x41\x45\x83\xba\x1d\x70\x2b\x67\x37\x3c\xe7\x0e\x56\x3f\x94\xe4\x78\x44\xed\xb5\xcf\x17\x40\xfa\x0e\x90\x27\xf3\x19\x28\x5d\x2f\x82\xa2\x09\x94\xa2\xc8\x25\x00\xae\xac\x86\xed\x84\xa2\x33\xe2\x1b\x34\x54\x99\xe9\x1b\x91\x14\xa2\x1c\x5a\x59\xd0\x79\xc9\x9c\xce\x0c\x2c\xc7\x46\x07\x59\xdf\xa7\x39\xc4\x71\x78\xe8\x4d\xa4\x42\x6a\x1f\x9a\x23\x27\x2c\x13\x93\x32\xe4\x49\x4f\x20\xfb\xed\x26\x3e\xa1\x61\x63\x3a\x08\xa1\x37\xae\x61\x93\xf8\x89\xc3\x38\x6e\xed\xe3\xf3\xcd\x31\x5a\xe6\xab\x72\x24\xe3\xc0\x2f\x7e\xb6\x7e\x77\xd8\x30\xe7\x51\x2e\x15\xa5\x20\x30\x1d\x0b\x55\xc1\x79\x38\xeb\x9d\x21\xe8\x8e\xe6\xf3\x4c\xe5\xde\x2a\x68\xff\x84\xa5\x4d\xcc\xfa\x45\x8e\xa7\x36\xc9\x20\x03\xba\x33\x6c\x8f\xe0\x16\x8e\x8e\xac\xcd\x05\x45\x3e\x98\xfa\xb8\x6e\xca\x1d\xd4\xc6\xa6\x8b\x05\x17\xc4\xda\xfa\x54\x0e\xf2\xa2\x2b\x8c\xe1\x8c\x53\xde\xa6\xe3\x3a\xd1\x8a\x0e\x5d\x98\x3a\x26\x16\x51\xa2\x94\x0d\xf4\x22\x6a\x17\x90\x8c\x7b\x23\x81\x5b\x2b\x66\x20\x49\xb9\xf4\x72\xa0\x8a\x1b\xb1\x53\x4d\xd8\x95\x0a\x1c\x71\xbd\x13\xfd\x09\x3a\xd1\x7b\x5f\xf3\x73\xf1\x35\xf7\x01\x56\xc3\x95\x24\x50\xad\x11\x56\x28\x50\x04\x69\xf7\x6c\xa8\xd5\x58\xcc\xf8\x9d\x54\x85\x57\x96\xa3\xc1\xb7\x11\xe2\x1e\xdf\x09\x1e\xd3\xf8\x03\xb8\xc1\xa3\x0f\xbc\xeb\xe2\x12\x5f\xd3\x63\x5d\x9e\x30\xe2\x1f\x96\xbf\xd4\xd3\x80\xa9\x0a\xfe\xbc\x63\x1a\x30\x3b\x6a\x20\x2c\x8e\x55\x39\xb3\x5e\x53\x48\x87\x47\x36\x2d\x80\x6d\x4b\xcd\xc6\xa2\xe4\xa7\x54\xd2\x36\x67\xaf\x87\x7f\xea\x90\xb9\xce\x8c\xd6\x42\x5a\xdf\x93\xd4\x9b\x42\xd9\x28\xaa\x9a\x08\xb3\x30\xd7\x4e\x55\xe5\x54\x01\x75\xc5\x09\x0f\xd9\x3b\x9e\xcc\x98\x91\x1a\x63\xa9\x57\x82\xb1\x6c\x0c\xce\xea\x4a\x63\x9d\xc2\x4c\x4d\x65\xc2\x33\xf6\xeb\x75\x43\x89\x1b\x2c\x51\xa3\x0a\x36\x97\xda\xb4\x1f\x04\xde\xa8\xb0\xc8\x03\xce\xe5\x85\xdd\x30\x72\x36\x43\x15\x19\xdc\x71\xd3\xa0\xa9\x86\x0e\xd1\x7b\xd8\x4c\xa7\x20\x45\x45\xa3\xcc\x2a\x9c\x77\xcc\x7e\x9b\x50\xaa\x5e\x46\xc4\xaa\x2a\x65\x78\x68\x76\x7a\xe1\x60\x20\x49\x92\x80\xdf\x50\x78\x67\x3f\xba\x79\x74\xb7\xc0\xb3\xd1\x51\x32\x6f\xb6\xc9\xa8\xed\xef\x46\xf3\xb5\x70\x2f\x01\x93\x4d\x5a\x89\xd4\xe5\xaa\x63\x04\x82\x0b\x6f\x0c\x02\x7d\xd7\x5e\x19\x66\xae\x34\xd9\x81\x76\xbe\x3c\xd1\xc4\x37\xdc\xa1\xa0\xdd\xc3\xae\xd2\x43\x6f\x91\x7f\x58\x02\x2b\x2d\x3f\xca\x45\x12\xb5\xa4\xec\x9d\x2e\xd2\x01\x74\x81\x6e\xd0\xa6\x75\x5d\x76\x24\xe4\x0f\xcb\xe7\xd8\x4e\xc8\x8d\x58\xd9\xc1\x5a\x61\x9a\x75\x7c\x8e\x2e\xeb\x04\x58\xdb\x3d\x5e\xdd\x16\x04\xe7\x49\x62\x1d\x76\x4f\xf1\x51\xba\x12\x4d\xeb\xdf\x23\x36\x79\x3a\x4f\x11\x54\x83\xa7\xfc\x18\x07\xbb\x31\x7d\xbc\xa5\xf5\x7b\x84\x75\xda\xe1\x12\x49\x73\xa5\xc8\xee\xbd\xf1\x2e\xf5\x62\xc1\xd7\x2d\x16\x1c\x80\x9a\xb7\x04\x40\xac\xb4\x8d\x73\x57\xc7\xc6\x1f\x5b\xc0\xa8\xb7\xe4\x3c\x65\x4b\xce\x56\xe1\x10\xfe\xa8\xed\x46\xd7\xcf\xf8\x50\x2f\xa4\x8f\x8c\xe8\xad\x55\x0f\xcc\x4c\xd0\x47\x45\x3c\xc8\x20\x74\xa8\xd8\x88\x55\x49\xaa\x23\xff\x31\x6d\x63\xfd\x41\x20\xf2\x04\x9d\x3f\x4e\x77\x50\x67\x20\xce\xb3\x5f\x0d\xff\x4f\x44\x81\x45\x6e\x40\xc2\xf1\xa0\x1b\x2c\xb2\x85\x5e\x45\x54\x32\xda\xd9\x96\x5c\xd4\xd3\xda\x77\xba\xde\x6b\x92\xe3\x6f\xba\xd1\x3e\x3d\x3e\x32\xbd\x05\x71\xd8\x3c\xd6\x9a\xa8\x59\x83\x04\x05\x11\xdf\x46\x3a\xca\xa9\xfc\x2e\xd9\x2d\x31\xdd\x01\x2d\x1e\x31\x40\x6b\xf0\x66\x0e\x36\x6a\x75\xa9\x7d\xbe\x6a\x3e\x16\x99\x1b\x77\xe3\xd3\x86\x46\x9a\x7d\xf0\x45\x8a\x51\x44\x25\xb8\x9a\xcd\x54\x81\x75\x68\xa2\xf0\x5c\x44\x76\x6b\xa6\x1d\x75\x00\x1c\xb9\x2d\xb5\xc1\xb4\x98\xf3\xbc\x94\x89\xfe\x4b\x50\x99\x14\x2a\xb4\x50\xc1\x5e\x59\x52\xe3\x7a\x35\x68\x40\xfc\x5f\x82\xdb\xca\x2e\x02\x95\x55\xad\x1c\x44\x10\xa5\xc9\xd5\xfb\x0b\x10\xe1\xfb\x99\xca\x84\x1b\xdc\x34\xbc\x72\x9a\xad\x59\x5c\x34\x30\x8d\xe4\x37\xc0\x89\xf7\xe3\xa5\xff\xd9\x6b\xbc\xbf\x9a\x23\x86\x62\x39\xb5\x05\xc0\x37\xb6\x1d\x6e\x9d\xfe\x92\x7e\xd1\x6b\xe1\xf3\x75\xd6\x0e\x95\xd4\x24\x5a\xb5\x59\xf1\x41\xef\x84\x51\xb7\xec\x6d\x58\xd9\xbb\xa7\x7e\x27\x3a\x7d\x03\x29\xcf\xb1\x66\xea\x3e\xf7\x23\xef\x1f\x9c\xb2\xaa\x1e\x75\xe5\x0a\x46\x79\x8b\xb8\x82\xf9\x61\x85\x2b\xa8\xbc\x9d\xbe\x5b\x24\x7a\x8b\x70\x3c\x21\x2c\xa9\xab\x5c\x8f\x35\xcc\x67\x02\x8b\x45\x78\x9d\x1d\xc4\x3f\x3b\x1d\x1a\x7c\x80\xa0\x15\x2d\xef\xc4\x20\x34\x0b\x91\xa1\x6b\xbc\x0c\x76\x3d\xba\xba\x89\x93\x0c\x5d\xbc\xd9\xc4\x87\x66\x39\xc2\x6f\xda\xd8\x06\xe6\x14\x9b\xda\xd8\xbf\xc3\xbd\x33\x64\x2d\x65\x2f\x50\xae\x3b\xc1\x3c\xca\x58\x05\x05\x27\xec\x00\xb3\x18\x60\xa2\x0a\x36\x2d\x04\xc7\x12\x3e\x3c\x77\xed\xa5\xcf\xff\x21\x81\xca\x9c\x67\x8b\x19\x27\xb4\x16\x64\x1d\x76\x6b\xb5\x19\x45\x90\x90\x9b\xe9\xfd\x4c\x3d\xff\x66\x1a\x8f\x6a\x4e\x20\x9c\xc6\x4a\xca\x15\x84\xa0\x9a\x03\x91\x79\xf9\xfd\x77\xcd\xd2\xaa\x51\xdd\xa6\xa1\xad\xe6\xa1\x61\x0c\x31\xf5\xaa\x4a\x99\x0d\x65\x5e\xea\xb2\x18\x5e\xe6\xe5\xaf\xc5\x0d\x4a\xc7\x9b\x49\x97\x8d\xa6\xc3\x07\x66\x71\xc8\xaa\x54\x89\xca\x82\x6c\x4d\xc4\xb8\xcd\xe5\x60\x79\x35\x17\x05\x18\x64\x28\xe9\x4b\xea\xc6\x30\x17\x3e\x6d\x90\x00\xcc\x45\xa0\xfc\x24\x29\x19\x68\xea\xb6\x19\x64\x69\x70\x3a\x18\x2c\x81\xe0\x58\x57\xa4\x1b\x0c\x28\x01\x10\x27\x8e\x83\xb3\x53\x66\xe7\x1f\xde\xe2\x70\xb5\xc8\xab\x75\xbc\x83\xfa\xb5\x41\x4d\xcd\x3e\xd9\x4f\xbc\xf8\x78\x71\x35\x60\xbf\xbd\xbd\x02\xb4\xee\xcd\xc5\xc7\xab\x13\x5b\x68\x71\xc5\xb6\x0b\x6b\x58\xc9\x0f\xe5\xb6\x26\x0d\xd0\x5c\x1f\x2f\xae\xbe\x20\xaa\xa6\x25\xda\x63\xa5\xad\x4f\x37\x13\x1c\x84\x77\x4b\xd7\x8c\xe1\x1d\xc8\x5d\xbd\xfa\x4b\xd3\x2c\xac\x15\x52\x50\x98\x24\x56\x7d\x51\x70\x2d\x17\x8b\x4c\x7a\xe3\xbc\x63\x41\xc0\x14\xd9\xaf\x75\xf7\x53\x60\xce\x47\xaa\x44\x45\x9a\x73\x15\x4d\x5c\x3a\x6e\xe6\x22\x9f\x55\xca\x5e\x80\x29\x90\x42\x14\xac\x34\xec\x98\x9a\x35\xfc\x79\x43\xdf\xc9\x80\xfd\x7a\xdd\xc9\xf8\x17\x2c\x8c\xf1\xa4\x50\x1a\xdf\x07\xc9\xcb\x8d\x16\x2e\xc3\xab\x21\x7a\xd6\x73\xcb\xb0\x98\x75\xf3\x7b\x44\xa3\xa9\xb7\x58\xc6\x23\x43\xa8\x2e\x7d\xb9\xbe\x71\x2f\x6c\xd2\x76\xb3\x33\x2a\x13\x58\x78\x4f\xe4\x1a\x91\xed\xc4\x7b\xc0\xf2\x1b\x8a\x27\x40\x89\x15\x05\x84\x2f\xed\xbd\x3f\xa9\xa7\xb0\x59\xef\xb2\x66\x07\x32\xed\xbc\xdb\x1a\xdb\xde\x6c\xc8\x5a\xa9\x5e\xb4\xe9\xfe\x5a\x68\x76\xf7\x0b\xfc\x71\xf5\xde\x42\x62\x1c\x73\x1d\xbf\xd0\x05\xf6\x19\xfe\x69\xd8\x63\xcd\x32\x65\xd8\x42\xae\x52\xd1\xf9\xca\x87\x7b\xf1\x05\xef\xbc\x4b\xfb\x83\x92\x1a\xcf\x97\x07\xba\xf2\x07\xbf\xd1\x3b\x84\x6b\x3c\x49\xb5\xea\x26\xd0\x0c\x60\x73\x83\x7a\xc6\x2b\xc7\x47\x66\x50\x7c\x44\x9a\xc2\xc5\xcc\xda\x56\x9f\x9b\x79\x42\xfe\xad\x99\x83\x8e\xfd\x54\x20\xf5\xfa\x40\xa3\x5f\x6c\x4c\x88\xc5\x8f\x2e\xec\xbb\x32\x72\x11\xf6\xf2\x51\x1e\xe4\x3a\xc6\x47\x7b\x49\x37\x2d\xe1\x36\x6c\x3b\x9e\xc9\x44\x15\x0c\x0a\x92\x45\x4e\x54\x4c\x68\x75\x27\xb2\x65\x9d\x3a\x7e\xf8\xf5\xa3\xc7\x19\x83\xa7\xb8\xab\x06\x09\xb1\x59\xf8\x00\x9a\x1e\x8d\xd5\x1e\x9d\x2b\x2e\x6f\xd2\xad\xa2\xbb\x61\x76\xfd\xe3\x72\xd1\x1a\x13\x65\x49\x1e\x3c\x6f\x30\xe8\xfa\x27\x13\x1f\x21\xe6\x0b\x41\xcb\x33\xd6\xd7\xc3\xb5\xe2\x53\xfa\xc7\xc8\x46\x03\x8c\x8e\xfe\x39\x30\xff\x7c\xe7\xff\xa5\x8a\xe8\xef\x03\x16\xfc\x75\x8d\x34\x1a\xc8\x63\x92\x84\x45\x1f\x4b\x15\xa4\x5a\x80\x88\x55\x0c\xc9\x9b\xf8\x80\xa2\x82\xbd\x0b\x0e\xf2\x2f\xfe\x4e\xc0\xda\x6c\x2d\x6b\x9e\xdb\x66\x9a\xf2\x74\x81\x85\x4f\xeb\x6a\x4e\x97\x6f\x32\x31\xb7\xe7\x1d\x81\xef\x21\x68\x0f\x8e\x82\x46\x7b\x71\x3f\x13\x68\x30\x2b\x60\xd2\x10\x68\x14\x8c\x6e\xe7\x43\xc3\x9f\xac\x19\x3f\x0c\x36\x5b\xaa\x8a\xdd\x73\xaa\x0e\x5e\x48\xd0\x87\x48\xec\x38\x05\x11\x1b\x8f\x96\x52\xe4\x61\x10\xb7\xcb\xab\x61\x23\xa0\x82\xe3\x67\xff\x08\x36\x9b\xfd\x73\xc8\xde\xcb\x4f\xe2\x1e\xf2\x14\xc8\xc6\xaf\x59\x7e\x83\xc1\xb4\x74\x0a\xb4\x71\xb9\xb2\x12\x90\xe7\x73\xc1\x4c\x7c\x9e\xd8\x70\x02\xe8\x2b\x41\x90\x06\x86\x60\x84\x33\x7a\xa1\xa5\x39\x3c\x5d\x99\x67\x66\xbf\x7d\xef\xea\x3c\xda\x1e\x0d\x47\x95\xa7\xd4\xce\x73\x46\x7b\x43\x4a\xc5\xfe\x3f\x33\x21\xb3\x76\x77\xeb\xd8\x3f\xf7\x24\xce\x3c\x52\xed\xc6\x90\xbe\xb7\x59\xff\xbb\x29\x14\x0d\x71\xf4\xeb\x35\x8a\xd5\xc6\x56\x94\xb0\x29\x04\x40\x8d\x5b\x9f\xef\x75\x5f\x99\x0c\xc2\x28\x90\x50\x17\xbe\xf1\x69\x0d\xba\xd7\xe3\xf9\x00\xaa\xeb\x4e\x29\x59\x51\xeb\x6d\x9b\xb8\xcb\x23\x00\x53\x77\x9a\x78\x98\x64\x00\x53\x92\xfc\xe9\xd5\xc9\xc3\x56\xc2\xe7\x62\x5f\x76\x8e\xbd\xe8\xab\xe6\x31\xad\xd6\x2b\xee\x54\xed\x1a\xea\x92\xbb\xd0\x30\x6d\x2b\xce\x53\x0a\x1a\x57\xf3\xd3\xa5\xfa\xa9\x8a\x2c\x30\x44\x96\xb6\x42\x3b\x64\xa9\x52\xc5\x3d\x2f\xd2\x95\x0c\x54\x1d\xee\xe5\x78\x1f\xd9\x0c\x70\x17\xb6\x48\x69\xe0\x6b\x98\x79\xc8\xc2\x6a\xd6\x8a\xc0\x29\xec\xa5\x2c\x2f\xb9\x5b\x63\x4a\xb8\xfa\x75\xa2\x41\x7c\x2a\x4d\x53\xba\xa2\x72\xf7\x4d\x49\x71\x60\xa3\x11\x2a\x21\x6b\x99\x97\xc2\xf0\x5e\x89\x09\x8e\x2c\x2f\x0c\x72\xa8\xa6\x52\xbb\xb0\x1e\xeb\xf1\xf6\xbe\x52\x9e\xb1\x11\x4c\x31\xc8\x9e\xc5\xd9\x6f\xd7\xef\xd7\xe6\xe4\xba\x82\x54\x67\x64\x77\x9c\xca\xdc\xde\x9a\xe3\xb3\x63\xaa\x10\x15\xc5\x6f\xdb\xea\xf1\x64\x70\xad\xaf\x21\xca\x1e\xb5\x53\x9e\x56\x2c\x84\xdf\x61\x87\x4d\x33\x96\x0a\x8c\xf2\xa2\x83\x97\xed\x65\xfb\x87\xae\xd8\xbe\x0d\xcb\x37\x5a\x1a\xb5\xf4\x09\x8a\x10\x5b\xf2\x86\xbd\xc4\x52\xfb\x6f\xd8\x2f\x81\x02\x66\xf6\x13\x0e\x52\x98\xbf\x19\x41\xf6\x25\xd5\xe6\xf7\xed\x9c\x94\xc5\x7d\x73\x4c\x0e\xc5\xf4\x22\x93\xa5\x39\x05\xd8\xe3\x5f\xec\x3b\x94\x7a\x94\x33\x96\xc2\x74\x72\xfb\x86\x05\xe5\x76\x18\x2f\xfd\x7f\x72\x2d\x35\xa4\x61\x09\x1b\x50\x56\x62\xa4\x9c\x66\x20\x0b\x26\x41\x6f\x9d\x73\x31\x98\x3e\x6e\x02\xe6\x97\xe3\xb3\x63\xa6\xc5\x82\x17\x1c\xbc\x17\xe7\x2e\x29\x92\x21\xa4\x66\x20\x04\x71\x1a\x61\x1e\x17\x61\x04\x1f\x28\x31\xcf\x16\x54\x62\x8f\xe6\x70\x0a\x42\x04\x2d\xd2\x68\x09\xb4\xad\x66\x10\x3b\xa8\x19\xc2\x25\x82\x33\x22\x0d\x45\xe3\x1a\x75\xd9\x2e\xc5\xe5\x5b\x2b\x29\xc1\x96\xae\xc6\x78\x69\xcc\x48\xaa\xa1\x87\xcc\xa3\x0f\x80\xcc\x4b\x82\x30\xa7\xf9\x23\xd7\x38\x9b\x28\x75\x36\xe6\x85\x5b\x97\xd0\xee\xb7\xb3\x31\xff\x63\x00\xfe\x27\xa7\x2c\x63\x57\xdb\x60\xcc\xff\x38\x19\x8e\xf2\x97\xb5\xbc\x12\x36\x66\xe5\x0d\xbb\x6c\xbf\x7e\x10\x6c\xb8\xa0\x64\x73\xf5\x2c\x0e\xab\x19\x2b\xcc\x15\x2d\x0b\x01\x0a\x85\xd9\x0a\xd8\x0d\x3c\x2c\xe1\x2e\x32\xec\x4a\x41\xed\xcc\xca\xa1\x3a\x41\x02\xfc\xaf\x54\x74\x33\x41\xa8\x37\xd7\x15\xf7\x15\x54\x95\xe1\x28\xaf\x7f\xd0\x3c\x5f\x97\xc2\xa7\x54\x36\xba\xde\xbd\x7b\xea\x18\xc5\xe9\x36\x6f\xc7\x9e\xb3\x92\x5b\xee\xb2\x17\x51\x6e\x85\xd7\xfa\x64\x58\x9d\x18\xae\x4f\x22\x18\xe1\xb6\x20\x5b\x98\xd5\x4e\x35\x03\x86\x43\xc9\x10\x68\xfa\x56\x6b\x16\x36\x57\x37\xa2\x65\xde\x9c\x9d\x8d\xaa\x57\xaf\xbe\x4f\x20\xf1\xa1\xf9\x2f\x41\x3f\x00\x2d\x87\x1f\xfe\x8a\x3f\x68\xc1\x8b\x64\x66\x68\x3b\xfe\xcc\x4e\xe9\x7f\x6d\x16\x9f\x7b\xb0\x95\xe1\xff\x37\xcd\x5c\xc4\x7b\x55\x64\x2c\x51\x45\x21\xf4\x42\x41\x3c\x8d\xe3\x02\x16\x53\x6a\x91\x57\x2e\x73\x0e\x45\x0b\x53\x82\x1d\x62\x63\xf0\xf6\x4b\xb8\xcc\x7c\x82\xbe\x29\x7a\x8e\x86\x94\x18\xbd\x22\x48\x12\x88\x79\xd0\x8e\xff\x7a\x6c\xee\xdf\xf1\xbf\x1c\x77\x90\x23\x80\xbd\xb4\xa6\x22\x89\xb3\x43\x23\x4b\x02\x8a\x32\xe7\x8b\x10\xe6\xe5\x77\xfe\x00\x96\xa9\x66\x99\xed\x60\x1a\x0d\x6c\xcc\x1e\x1f\x40\x5f\x93\xbe\xaf\x49\xff\x35\xc3\x6b\x7b\xe8\xe9\x73\x81\x9e\xf6\x81\xd2\x11\x45\xee\x0b\xd3\xb7\xec\x4f\x5f\x9d\xfe\x8b\x55\xa7\x87\x83\xd8\x15\x90\xdc\x68\xde\xe9\xeb\xd4\x3f\x72\x9d\x7a\xda\xa3\x7a\x91\xfa\x0d\x35\xea\x37\x16\x9b\xef\x92\x9c\x28\x70\x84\xc4\x26\xe9\x86\x0c\xb3\x3b\x94\xfb\xf2\x0b\x78\x7c\x90\x59\xbc\xb6\xc5\xe6\xec\xb9\x87\xb1\x1a\xf7\xa5\xec\xfb\x52\xf6\xbd\x02\xd1\x2b\x10\xbd\x02\xd1\x2b\x10\x7d\x3d\xfb\xa7\x53\xcf\x7e\x7f\xb2\x72\x5f\xd9\xfe\x1b\x64\x4f\x4f\xb8\xb2\x7d\x83\xdc\xb9\xb5\xd9\xbb\x67\xc4\xcf\x90\x11\xf7\xe5\xed\x9b\x48\xf1\xe3\xf1\x88\xbe\xd0\x7d\x5f\xe8\xfe\xa8\x2f\x74\xdf\x17\xba\xef\x0b\xdd\x7f\xb9\x42\xf7\x6b\x74\xb1\xbe\xda\x7d\x5f\xed\xfe\x6b\xaa\x76\xdf\x4d\xba\xd8\x24\xe8\x7d\xa3\x25\xef\xa3\x8d\xeb\xeb\xde\xf7\x9a\x7a\x9b\xa6\x7e\x70\x15\xbd\xd7\xce\x7b\xed\xbc\x2f\x7e\xff\x64\x8b\xdf\xef\xcf\x08\xd0\x97\xc1\xef\xcb\xe0\xf7\x65\xf0\xfb\x32\xf8\x7d\x19\xfc\xbe\x0c\x7e\x5f\x06\x7f\xeb\xf0\x9f\x43\x2a\x82\x5f\xb2\xe2\xf8\x97\x09\xce\x3d\xaf\x17\xf0\x65\x09\x5f\x40\xa0\x86\x9a\x90\xa4\x10\xd1\xdc\x0d\x55\xc6\xcf\xc3\xa4\x3a\x6a\xc2\x8e\x69\x44\x0c\x2c\x02\xd9\xe5\xb8\xa9\xbe\x78\x6c\x55\x59\x2d\x63\x58\x6e\x28\x23\xa9\x0a\x3b\x7f\x33\x4b\x48\xd3\x1f\xbb\x39\xa6\x99\x1a\x73\x97\x59\xa3\x2f\x26\xde\x17\x13\xef\x8b\x89\x7f\xd3\xc5\xc4\x57\x55\xb1\x87\xd8\x5d\xfa\x1a\xe1\x5f\x49\x8d\xf0\xe8\xd8\xb7\x28\x14\x7e\x50\x69\xa3\xaf\xff\xfd\xe5\xea\x7f\xaf\x5c\x88\xbe\x08\xf8\x37\x5b\x04\xbc\xd9\x6f\xdf\x97\xf5\x7e\x8e\x65\xbd\x55\x0a\xb4\xeb\xd7\x3b\x51\x98\x59\x6c\x78\xf6\xb6\x09\xd3\x65\x51\x81\x3d\x7c\xc5\x1e\x6b\x25\x42\x65\x9b\xd6\x1f\x7e\x51\xe5\xe8\x30\x85\x94\xa0\x5d\xca\x9f\xa6\x3f\xcb\xcf\x62\x45\x0b\xf4\x0e\xd7\xab\xe6\x9e\x6c\x27\xb7\xc3\xd0\xe9\x0f\xff\x51\xf1\xbc\x94\xe5\x86\x42\x43\x75\xbf\x31\xcd\xb4\xbe\x27\x13\xfa\x71\xc7\x9d\x59\x7b\x96\x7b\x39\xf5\xeb\x2a\x2f\xe5\x5c\xb4\x45\x61\x85\xcd\x9c\x3a\xc6\x3d\xa4\x83\x98\x97\xd1\xe8\xb0\xa5\x15\x5f\x3c\xad\x24\x95\x0f\xc9\x6d\x34\x9e\xf4\x42\xb4\xcb\x8d\x14\xe8\x7a\xf1\xb8\x41\xe3\xa2\xca\x41\x74\x76\x8d\x34\x3e\x68\xc8\x35\x1b\x7e\x41\x58\xcb\x68\x8e\x09\xd6\xa2\x54\x0e\x60\x9c\x50\x85\xcf\xbd\x5b\xa8\x3b\x09\x4e\xe5\x02\x3d\xbc\x41\x3c\x19\x2d\xe5\x4a\xa5\x3e\x94\xec\xdf\xab\xb1\xc8\x44\x89\x48\x2b\xbd\x50\x39\xd6\xdb\x83\x17\x2c\xb4\xca\x9c\x5d\x29\x9c\x11\xd0\x46\x37\xb0\x35\xcd\xda\x1b\x50\xda\x84\xb9\x5e\x0b\x4a\x45\xc9\x65\xa6\x07\x4c\x0b\xe1\xbc\x58\xb1\x0e\x9b\xaa\x44\x9f\x25\x2a\x4f\xc4\xa2\x84\xff\xa0\x4d\x39\xa3\xad\xc3\x68\xb6\xb3\xde\x29\xff\x94\x9d\xf2\x88\x44\x6a\xc3\x3a\xfd\x1d\x5b\x45\xb9\x3a\x05\x3a\xbd\xb2\x25\x58\xa7\xe8\xb5\x50\x81\xc4\x00\x8f\xe2\x32\xbd\x5e\x5c\x5f\x7a\xd3\x09\xfe\x0d\x74\xa1\x4a\x43\xfd\x51\x82\x44\x41\x0a\x5a\x7b\x7e\x0e\x1a\x65\x7e\xa7\xba\x92\x24\x38\x99\xf7\x65\x33\xce\x3b\xe0\x95\x4a\x05\x1b\x55\xaf\x5e\x7d\xf7\x23\x7c\xad\xa6\xf4\xb1\x4b\xb4\xee\xda\xdc\xa8\x94\x95\x85\xbe\x5c\x90\x30\x77\xc7\x65\xc6\xa9\x80\x25\x66\xf0\xc2\x54\xd6\x66\x65\xae\xa5\x95\x2c\xcc\xab\x42\x7e\x5f\x40\x3d\x0a\x79\xc7\x33\xc8\xce\x15\xf6\xad\x21\xb1\xb8\x1d\x86\x25\x1c\xf0\x5b\xa3\xa3\xa2\xca\x93\xd1\x11\x9b\xcb\xe9\xcc\xab\x8f\xbe\x88\x47\x95\x27\xec\xd7\x8b\x4b\xb7\xc9\x2f\xb0\x50\x85\xe1\xef\x77\x82\xbd\x97\x79\xf5\x39\xa0\x49\x27\x2b\xa9\x89\x0c\xdd\xb2\x70\x9f\x15\xba\x65\x36\xd7\x1e\xaf\xb5\x1e\x65\xea\x5e\x14\x98\xb1\xd8\xec\xa1\x2a\xe6\x76\x8b\xdf\x7e\xb8\x61\xef\xd1\x2f\x71\xfd\xf3\x05\x7b\xfd\xfa\xbb\xef\x4f\x2c\x64\xc8\x9c\x2b\x65\xb0\x7d\x20\x36\xab\xc7\x52\x3c\x17\x2c\x45\xc7\x90\xc3\x2f\x1a\x56\xa8\x56\x05\xd1\x4e\xcb\x5e\x95\x64\x37\x2d\xd1\xc9\xb2\x0f\x93\x60\xa3\x3c\x0e\x21\x87\x1f\x36\xf3\xee\x51\xde\x89\x7b\x1b\x56\x97\x56\x46\x0f\x3c\x15\x77\x12\x80\x75\x67\x0b\x95\x9e\xda\x49\x9d\x8d\xf2\x1a\xf4\x32\x87\xcc\xc6\x4c\x97\xbc\x80\xc7\x76\xf7\x7a\xf8\xfa\x4f\xf6\xf1\x83\x25\x6d\xa6\x72\x55\x50\x69\x66\x7a\x5f\x40\xd3\x10\xd7\x6c\x05\x1b\xb7\x2f\x04\x62\x5e\x97\x46\xc1\x4d\x70\xe7\x63\xba\xf1\x43\x6c\x44\xf6\xb8\x66\x6c\xa6\xb2\x94\xf2\x11\xfb\x1f\x13\x95\xeb\xb2\xe0\x90\x54\xa3\x56\x03\x00\x98\x97\x3d\x2e\xd2\xe9\xa4\x8e\x85\x4f\x60\x5c\x38\x1a\x52\x67\x33\x3d\xda\x19\x9b\x48\x50\x62\x66\x8a\xe0\xa3\x52\xb3\x5c\x66\x83\x86\xf1\x42\x8e\x06\x45\x24\xbc\x20\x6c\xc4\xcd\x0c\x4b\x31\x6c\x86\x6f\x36\xa3\x85\xac\x68\xf0\x98\x78\x21\x73\x54\x9b\x90\x42\x91\xfa\xb0\x1e\x2a\xb4\x0d\x4a\xa8\x41\x31\x69\x41\xa3\xd6\x9b\xc6\x09\x0e\xa3\xd3\xe9\x4b\x10\x7f\x0d\x42\xf0\x93\x2a\x41\xdc\xa4\x28\x3f\xc4\x8a\xd6\x0b\x53\xcf\x45\x98\xea\x6b\x0f\x3f\x3e\x93\xd9\x63\xd1\xe1\x55\x31\x64\x43\x65\x04\xcf\xfa\x63\x9d\x7b\x8d\x20\x32\x01\x37\xaf\x11\x24\x88\xfd\xa3\xc0\x18\x09\x88\x1d\xaa\x26\xa8\x74\x6d\x75\xdd\x6e\xf6\xcf\xae\xd6\xff\xda\x72\xc3\x0f\xc3\xc5\xd5\x36\x25\x37\xa6\xab\x25\xbd\xd4\xd6\x3f\x55\x79\x93\xd4\xb4\x22\x1b\x0d\xb1\x9a\xa8\x2d\xeb\x58\x97\x9c\x1c\xa8\x73\x5c\x93\xc8\x38\x5a\x12\x2c\x50\xcd\x16\x03\xd2\xae\x7a\xe9\x8a\x45\x31\x9a\xbf\xd4\x6c\x2e\x8a\xa9\x07\xf6\x61\x5d\x2c\x40\x21\x81\xde\x1e\x34\x1e\xb2\xf3\x7c\x19\x39\x02\xb2\x8c\x21\x08\x94\x8c\x72\x24\xd5\x21\x63\x45\x93\x20\x4f\xe7\x52\xeb\xf5\xb0\x83\x15\xa3\x6d\xe8\x2e\x57\x99\x40\x83\x48\x1b\xc3\x0b\x5a\xa2\x65\x64\xb1\x10\x79\x2a\x52\xf6\x02\xea\x45\x80\x77\x3a\xad\x16\x19\xd6\x1c\x3d\x31\xf3\xec\x22\xff\xa6\x55\x81\xf1\x4b\xb4\x86\x01\x13\x50\xa1\x06\xaa\x1d\xb1\x2a\x97\xca\x99\x24\xa9\x90\x12\x1d\x35\x4e\x27\x2c\x49\x8a\xa8\x94\xba\xa9\x73\x4f\x7c\xd8\xe5\xad\x73\xdb\xd0\x95\x0b\x47\x7f\x8a\xc8\x95\xb9\xd9\xa7\xae\x71\xa9\xe6\x32\xd9\x9f\x69\x1d\xdd\xa9\xbd\x57\xe5\x1b\xf4\xaa\xe0\xd1\x7f\x4b\xae\x95\x17\x89\x45\xf0\x9c\x3c\x3f\x37\x4b\x20\x97\x89\x7c\xc6\xf3\x04\x4d\xab\x67\x9f\xc4\x42\x83\x30\x66\x8e\x3d\xf6\xb2\x0c\xe7\x69\xaf\x62\x3e\x65\x15\xb3\xf7\xb3\xf4\x7e\x96\xde\xcf\xd2\x9b\x06\x7a\x3f\xcb\xce\x7e\x96\x9a\x80\xfb\x04\x9d\x2d\x5b\x72\xf0\xef\x5e\xbd\xfe\xf3\xab\xef\xbe\xfb\xf1\x34\xf4\xb4\x0c\xe7\x69\x2d\x1e\x83\x67\x8b\x99\x2d\x21\xc9\x81\x26\x06\x19\xaf\xef\x5e\x0f\x5f\xff\xeb\xe0\x29\xfb\x5d\xf0\xd8\x7a\xe7\x0b\xed\xed\xf3\x77\xbe\x6c\x1d\xa7\xbd\x4e\x89\xe9\xdd\x30\xdf\x96\x8c\xfc\x04\xdd\x30\x0d\x9a\x75\xef\x8b\xe9\x05\xae\xde\x17\xc3\x9e\x9e\x2f\xe6\x41\x7c\xa7\xf7\xca\xf4\x5e\x99\xde\x2b\xd3\x7b\x65\xf6\xe6\x95\x59\xa8\x4c\x26\x4b\x33\xd7\x2b\x95\xbe\x95\xba\xa8\xe0\x0c\x7f\xaa\xd2\xa9\xd8\x24\xd5\x36\xb4\xa6\xe2\x47\xc4\xde\xc1\xb4\x6e\x04\x4e\xca\xec\xf3\x99\xa5\xae\x3d\x3e\x3d\x5b\x18\x92\x5b\xc3\x54\x3d\x5f\x9e\xb9\x11\xbd\x28\xfc\x94\x45\xe1\x5e\x50\x7c\x2e\x82\xe2\x37\x59\x74\x65\x23\xf1\xeb\x54\x72\x05\x83\x65\x83\x0a\xe1\xb6\xf6\xca\x58\xcc\xf8\x9d\x54\x85\xab\x1c\xbe\xfa\x81\x75\xa6\xac\xdd\x2a\x2c\x6e\x5e\x4b\x7b\xd0\xf5\x2f\x90\xba\x41\x24\x98\x6f\x40\x8d\xc1\x26\x97\xd6\x22\xad\x5b\x56\xd1\xc6\x84\xf6\x28\x91\xe3\x72\x9b\x85\xf1\x26\x4e\xb6\x17\x6c\xd4\xc6\x3d\x6e\x31\x03\xad\xe9\xd1\x94\x27\xb6\xa1\x69\x6f\x13\x7a\xda\x8c\x70\x47\x9b\x50\xd3\x49\xef\x47\x02\xdd\x2c\xd7\xf5\xc6\xa1\x9e\xe7\xf7\x19\x64\xbf\x1c\x3b\xda\x1f\x5c\xb7\x5d\x84\xd9\x8a\x25\xd9\x32\x72\x9c\x05\x6d\x31\xa7\x64\x23\xef\x6f\x65\x4a\x73\xfe\xf9\xb7\xdc\xa1\x28\x1e\xbf\xa2\xeb\x79\xce\x6c\xa4\x18\xb3\x95\x0b\x44\xca\xe4\x84\xf1\x92\xcd\x8d\xcc\x33\xaa\xcd\x71\x74\x84\xa6\x08\xb4\xd8\xa0\xc9\x60\x74\x64\xed\x37\xa3\x23\xb0\x67\x54\xbe\x3d\xe3\x93\x52\x60\xfa\x12\xfb\xa5\x01\x93\x43\x31\x64\xe2\x4e\xe4\x60\x72\x19\x6b\x4c\x6e\x36\xf1\xad\x44\x8a\x78\x8b\x08\x0b\xa2\x72\xcc\xe1\xba\x28\x4c\x57\x84\xa3\xdc\xa9\xac\xca\x4b\x5e\x2c\xdd\xe8\x1a\x5c\xa6\x08\x0b\x31\x94\xf4\x95\xcf\x9c\xcf\xd9\xbc\x2a\x11\x65\x06\x76\x16\x2d\xef\x84\x4b\xb2\x02\x36\x95\xd1\xd1\x5c\xe6\xe7\x7e\xad\x6b\x84\xd0\xb0\xd1\x13\x3b\x34\x4c\x1d\x58\x5f\x47\xcb\x99\x81\x69\x4c\x97\xb6\xca\x6b\xf7\xb3\x33\x7f\xda\x74\x7e\xec\x46\x81\xfd\x94\xce\x10\x0a\x58\x6c\x7f\x84\xa3\xa3\xd7\xaf\x5e\xfd\xdf\x6b\x4f\x43\xaf\x31\xab\x3e\x84\xf6\xf3\xb1\xc8\x9c\xb9\x76\xd3\x61\x20\xbe\xe7\x7f\x2a\x51\x2c\x31\x3d\x1f\xec\xf4\xfd\x4c\x69\x11\xac\x87\x12\x49\xf0\xa9\xb7\xb1\x05\xf6\x9e\x31\x92\x0b\x76\xce\xf2\xca\x1c\x84\xb5\x76\xc2\xb1\x60\x2a\xa1\x1c\x2d\x80\x90\x1a\xcf\x1c\x4c\xce\xc4\x7c\x51\x2e\xd9\x8b\xff\xf3\xbf\x27\xb5\x0e\xf8\x2f\xd8\x5a\x9c\x8b\x2c\x67\xf5\x4a\xda\xc3\x0d\x96\xb4\x85\xf9\xe0\xa9\x2e\x0b\x5e\x8a\xe9\xd2\xac\x91\xd2\x21\x1e\xda\x9e\xd6\x9a\xc7\x6b\x6d\x9f\xa8\xe4\x4f\x63\x19\x19\xaf\xa8\x35\x93\x6a\x46\x03\x19\x29\xaa\x2c\xb8\xcc\xf0\x6a\x27\x86\x5c\xf8\xe4\x60\x9c\xe9\xa5\x2e\xc5\xbc\x5b\x05\x1a\x34\xea\xb7\xc9\xbd\x17\xae\xa1\x85\x9c\x31\xdf\x17\x1e\xcf\xd5\xdb\x9f\xd0\x2e\x1e\x5c\x99\x20\xfb\x93\x16\x84\x8b\xf1\x8b\x3a\x27\x92\xe0\x06\xc2\xfe\x3e\x1d\xaf\xb9\x8f\x9f\x72\x75\x9f\x5b\x84\xa0\x2f\x21\xc6\xb5\xca\x09\xb6\xf2\x22\xa8\x4f\x82\x7f\x30\x73\xa4\xa2\x31\x3c\x0d\xb2\x63\x61\x72\xe9\x93\x37\xec\x94\xdd\x2c\xf3\xe4\x67\x2e\x33\x91\xbe\xa9\xa7\xa7\x14\x79\xa2\x2a\xa3\xd8\x88\x14\x6e\x70\x51\x40\x15\xb1\x94\xdd\x73\x9d\x1f\x97\x0c\x91\x2d\x0a\xd2\x65\x56\xa5\x80\xf4\xdc\xc1\xff\xc1\x0d\xae\xe6\x63\x01\x66\x03\x4b\xf6\xfc\xa6\x20\xf8\xb1\x40\xb8\x6e\xae\xc2\xbf\x98\x05\xd7\x87\xb3\x03\x58\x43\x77\xac\xcb\xbb\xad\x73\x00\xc1\x9f\x79\xa6\xc5\x70\x94\x9f\xb2\xcb\x1c\x52\x00\x27\x46\x96\xbe\x52\xa9\xc6\x85\xfa\xa9\xc1\xb3\x03\x90\xa3\x84\xf2\x68\xbc\x64\xaa\x60\x63\x61\xb3\xb0\x62\xcb\xfa\x7c\xf0\xff\x5c\xdd\x2d\x22\x13\x8d\x97\xf5\x43\xeb\xe2\x1e\xba\xc4\x9b\xd5\x05\x16\x08\xdc\x04\xbc\x14\xac\x10\x4a\x01\x75\x99\x6f\xd3\xe4\x3e\x36\x4e\xe0\x63\x61\x95\xdd\xc6\xc3\x6e\x1a\xa8\xb6\x11\xb6\x9e\x54\x03\x9d\xd5\xf6\x59\xd0\x9b\x5d\xee\xc7\x9d\xb1\x81\x8d\xb8\xb7\xbd\x27\xff\xc6\x9c\x2f\x4e\x3f\x89\xa5\x8e\x44\x6e\x3f\x4c\xf0\xd3\x3f\x3b\x7a\x4a\xe6\x7c\xd1\xca\x0a\xc0\xe3\x66\xbe\x0b\xae\x2b\xd3\x71\x1b\xe6\x01\xbd\x9b\x19\x37\xc1\xff\xff\x2e\x78\x56\xce\x96\x2d\x74\xd2\x26\x37\xf4\x97\x62\x86\xfd\x62\x47\x08\x74\x45\x0e\x60\x7a\xc9\xbc\xfc\xfe\xbb\x66\x75\x52\xe6\xa5\x98\x7a\x70\x56\x3c\x35\x32\x54\x76\x9b\xda\x5c\xe6\x72\x5e\xcd\x9d\x75\xf3\x91\xa6\x88\x17\x5b\xa4\xe6\x85\x3e\x52\x48\x8e\xbf\xda\x1f\xe5\x7c\x43\xca\xd7\xda\x06\xbd\x0d\xa7\xea\x73\x56\xae\xb2\xea\x06\xe1\xc9\x30\x07\xf3\x62\x13\xa1\xb5\x7f\xd5\x90\x8b\x18\x2c\x1f\xbe\xa1\xae\xc6\xce\x5a\x62\x51\xe3\xe3\xaa\x64\x33\x8e\x25\x1a\x96\xa2\x64\x63\x21\x72\x6f\xbe\x5d\x4f\xb3\xa2\xca\x5b\xe7\xe0\x10\xb5\x34\xca\x66\x7b\x9c\xf3\x85\xb7\xb2\x00\xd4\xfc\xde\xa6\x99\x0f\x66\xe7\x67\x1e\x8a\xd1\x2e\x11\x3d\x59\xfd\xe2\xee\xe6\x6b\xe0\x14\x17\xb9\x99\xe2\xd5\xdb\x9f\x42\x2e\xca\x35\x9b\x71\x08\x5c\x81\xc5\x50\xfa\x64\xa8\x36\x27\x32\x01\xa3\xbf\x30\x7c\x15\x64\x77\x0e\x43\xab\xaa\xa4\x72\x03\x9f\xc4\xd2\xf2\x6c\x33\xff\x86\x44\x8b\xa1\xef\x17\x0d\x53\xb6\xb6\xe6\x6e\x4b\x74\xf9\x13\xdd\xec\x52\x99\x1a\x6e\xaf\x92\xa4\x42\xf6\xcf\xdd\x8a\x41\x05\x29\x81\xd7\xc8\xd2\xed\x38\x24\xda\x37\x6b\xb4\xbb\x0d\x06\x42\x5e\x95\xca\x5c\x9e\x04\x14\x3a\xb3\x4f\x1b\x8f\x91\x36\x44\xab\x39\x2e\x05\xe6\x05\x71\x07\x25\x14\x55\x99\x2a\xa1\x99\x9e\x2b\x65\x5d\xeb\x66\x7f\x7c\x8d\x3c\x14\xb7\xad\x98\x04\xaa\x31\x6d\x18\x0e\xf6\x9e\x17\xd3\x90\x63\x89\xbc\x2c\xa4\xcd\x0d\x8a\x9b\x8d\x16\xba\x14\x9c\xfa\x66\xd3\xc6\x99\x98\x53\xd6\x48\xb3\x7e\xbb\x3f\x75\x2f\x7b\x17\xe8\xc1\x2a\x93\x6b\xab\x14\x1a\x0a\x2b\x11\x0f\xf5\xc5\x09\x7d\x31\x15\xaa\x5d\xb2\x6f\x0a\x26\x3e\x63\xc9\x94\x26\x02\xb6\x82\x98\x28\x79\x56\x17\xb1\x50\x9a\xf4\x28\x92\x15\x95\x6a\xdf\x13\xb6\x84\xe3\x6f\x22\xb7\xc0\x85\xcd\xd3\x0e\xdc\x46\x6c\xea\x3a\x79\x02\x04\xcf\x09\xcc\xad\x0e\x47\x63\x5e\x3b\xca\x69\xc3\x40\xa2\x77\xb2\x8b\x79\x2f\x58\x74\x97\x84\xb9\x90\x88\x4a\x6d\x9e\xac\x4c\x11\x7b\x23\x27\x6c\x75\xc2\x58\xca\x02\xdc\x0d\x57\x6f\x7f\x3a\x76\x26\x65\x3f\xbb\x4d\xc7\xfc\xe3\x0f\x5d\x77\xad\xa3\x29\xb2\xe1\xe2\xae\x17\x10\xd6\xf3\xe7\x75\x97\xaa\xcd\xc6\xd9\xaa\xa7\x22\xae\x8c\xa6\x76\x71\x73\xf9\xb6\x90\x77\x51\x00\xd8\x8a\x71\xa6\xd6\x34\x54\x4d\x5d\x32\x72\x99\x67\x32\x17\xec\xe2\xe6\x92\x51\x2b\x78\x75\x81\x31\x07\x91\x49\x95\x16\x5d\xe2\x72\xb7\xac\x50\x5c\x88\xa9\xd4\xa8\x85\x85\x84\xdf\xcc\x26\xc5\xe5\x75\x33\xbf\x77\x3c\xe2\x07\x15\x9b\x6d\x3e\x88\x9f\x33\xf1\xf9\x77\x95\x55\xf3\x4d\x05\xc0\x56\xda\x36\x1e\x85\xf9\xf3\x1d\xfe\xf9\x41\x67\x90\xd6\x2f\x46\xd3\x94\xb0\x51\x13\xd7\x0d\xa6\x81\x8d\xf6\x5c\x01\x98\xa6\xb7\xdf\x63\xf8\xbb\xd2\xe5\x15\x2f\x67\xed\x87\x60\x5b\x46\x1e\x55\x48\x78\x4c\x8b\x0e\x4c\x1e\x70\x0c\x96\xf5\xdb\xf2\xc9\x10\x0d\x8c\xb3\x00\x26\x8c\x0a\xa8\x32\xa7\x33\x64\x97\xae\xe0\x29\x0e\x0c\x05\x6b\xb1\x30\x13\x1d\x22\x05\x15\x77\x89\x71\xe7\xe5\xec\x0a\xba\xb6\x9c\xa5\x6f\x68\xcf\x33\xfa\xac\x8d\x47\x0c\x17\xe9\x53\x83\xc3\x9c\x5d\xb5\x56\x8b\xb2\xbc\x7d\x79\x3b\x64\x1f\x0b\x2e\x11\x9c\x9a\x71\xa8\x7d\x63\x78\x71\x59\xc8\xf9\xdc\xf2\x0b\x20\xf1\xbc\x0c\x6b\xd7\xd9\xcf\x12\x2a\x12\x3e\x6a\x7e\x87\xf2\x59\xef\xd0\xf8\xaa\xdf\xb0\xdb\xb3\x89\x52\xb7\xec\x1e\x84\x1a\xcc\x82\x8d\x3f\x0d\xf0\x7f\xcf\x6e\x81\xbf\xe0\x7f\x8f\x79\x71\x1b\xf7\x70\x75\xcc\xf0\xe7\xf4\x96\xa9\x82\xdd\x9e\x89\x32\x81\x56\x3b\x94\xcf\x10\x3c\xfd\x35\xcf\xda\xf4\x2b\xac\x26\x8e\x45\xb8\x4b\xb0\x10\xc0\xf5\xc0\xa9\x04\x1b\xac\x7d\x89\x3c\xbb\x31\x74\x42\x96\x1f\x5a\x7b\xb3\x39\x0c\x23\x3c\xe0\xee\xda\x69\xac\x79\x73\x63\xa5\x32\xc1\xf3\x7d\x9a\x3f\xf1\x19\xbd\x23\x51\x79\xc3\xfb\xb1\x4d\x50\xac\xd6\x36\xa2\xcd\x08\xc2\xb2\x44\x70\xac\xd1\x7b\x2c\xa6\x30\x11\x05\x58\x10\xe1\x43\x46\xfc\x34\xc7\xa9\xf9\x44\x94\xcb\x10\xd3\x1c\xba\x44\x42\xad\x09\x7d\xee\x43\xc6\xce\x43\x05\x05\x31\xb3\xba\x82\x2a\x45\x91\xeb\x21\x29\x84\x85\x8d\x5e\xfd\x7a\xf3\x91\x4a\x5d\x0c\x87\xc3\x33\xf3\x3e\xcf\x46\xd5\xab\x57\xdf\x27\x66\xc2\x86\xd4\xc1\xbf\xc4\x99\x33\x8a\xf7\x98\x8d\x27\x8d\xd9\x00\x75\x44\xfc\xba\x68\xb4\x61\x3f\xc0\x70\xf0\x36\x1a\x77\xa3\xd5\x20\x6c\x69\xab\x05\x59\xf3\x5e\x8f\xbe\x78\xde\xe8\x8b\x8e\x88\x4b\xdf\xac\x56\x53\x04\xe0\xfd\x24\xd0\x8d\x85\x39\x54\x72\x4c\x3e\x41\x44\x9e\xe3\x03\xfb\x0b\x8b\xa9\x71\x9a\x9f\x6f\xfe\x66\x26\x72\x43\x76\xd9\xd5\x57\x5d\xdf\xd7\xe6\x0e\x11\x71\xb5\x46\x5e\x66\x36\x0d\xf5\x52\x6a\xe5\x8a\x5b\x01\x7b\x88\x1a\x77\x20\xfa\x05\xcf\xa7\xad\x45\xb5\xb0\x11\xca\x46\x33\xe1\x44\x76\xfa\x59\x4d\xd8\x44\x33\xd8\x7b\x3d\x64\xec\x72\x02\x8e\x67\x14\x62\x32\xf9\x09\x9c\x4c\x13\x65\xde\xb5\xd3\x03\x6c\x7b\x06\xb5\x22\x8d\x44\x16\xd6\xd1\x84\x71\x7d\x81\x0f\x48\x65\x01\x49\x73\x61\xdd\x22\x4f\xb1\x44\x26\x58\x7f\x8d\x78\xfa\x4b\xa5\xcb\xeb\x2a\x3f\xdf\x57\xc4\x44\xed\x38\x2f\xdf\x5e\x9b\x09\x3d\x08\xa8\x56\x54\xab\xd8\x85\xfa\x26\x43\x61\xcc\xfa\x69\x3b\xf1\x3c\x95\x09\x38\x46\xef\xcd\x2f\x74\x61\x5c\x3a\x20\x5b\x4f\x97\x4a\xf9\x5c\xa8\xbc\x14\x9f\xcb\x43\x97\x25\xa9\xed\x13\xa8\x1d\xaa\x28\x71\xb7\xd6\xdf\xf6\xa8\x5d\x90\x4e\x09\x8f\xdd\x56\x6e\xc3\xc2\x5a\xdb\xab\x27\x91\x7e\x32\x56\xf6\x0e\x85\xd7\x67\x6b\x35\x65\xce\xdb\xf4\x93\x39\x77\x8a\x89\xf9\x00\xe9\x99\xb0\xa2\x01\x56\x37\xd2\xf2\xae\x0e\x04\x78\xb8\x89\x6c\x2e\xdb\x64\xb5\xb9\xcc\xfd\xa5\x0a\x0a\x3e\x1f\x66\x6a\x1d\xf5\x63\x33\xed\x41\xbc\xbd\x7b\xd2\x95\xed\x5b\xdd\x50\x17\x0b\x5b\x58\xd1\x06\x70\x4a\x32\x3f\x33\x07\x88\x82\x69\x44\xdd\xcc\x6f\x97\x6f\xbb\x48\xcf\x8f\x71\x47\xba\x1b\x04\x1f\xfd\x8e\xec\xdd\x56\x79\xb8\x3b\xd2\x07\x97\xf5\xfa\xd9\xb6\x32\x77\xaf\xea\x3c\x43\x55\xa7\xf1\x93\x0f\x0b\xde\x5a\x4b\x61\xbe\xd6\x08\xae\xf5\x0b\xea\xc3\xb8\x0e\xa5\x3f\xf6\x01\x5d\x3d\xf3\x69\x0d\xe8\xda\x93\x72\xdb\x47\x64\xf5\x8c\xb2\x25\x22\x6b\x6b\xd1\xfd\x2b\x8f\x78\xda\x3f\xf5\xee\x63\x9f\xfa\xd8\xa7\x3e\xf6\xa9\x8f\x7d\x7a\xb2\xb1\x4f\xf8\x1f\xda\x06\x3e\x0d\xd9\xb9\x0d\x79\x72\x4d\x20\xf6\x89\x67\x5a\xd5\x1b\x0f\x28\x59\x7d\x2a\x27\x13\xc3\x88\x81\xf3\x6a\x1b\xa9\x1b\x6a\x2e\xd8\x11\x22\x62\x28\x5c\x0a\x58\x2c\xd2\xcf\xb3\xbb\xd7\x03\x1f\x69\xb5\x39\xc8\xea\xc9\x05\x58\xb5\x69\x49\x7d\x94\x55\x1f\x65\xd5\x47\x59\xf5\x51\x56\x7d\x94\x55\x1f\x65\xd5\x47\x59\xf5\x51\x56\x7d\x94\x55\x1f\x65\xd5\x47\x59\xf5\x51\x56\x7d\x94\x55\x1f\x65\x15\xee\xf3\x23\x46\x59\x5d\xa9\xd4\xc2\xc5\xae\xd0\x7c\xba\x51\x49\x8d\xdb\xb2\xa9\xba\x13\x45\xae\xc9\x2c\x23\x33\x59\x2e\xcd\xf6\xcf\xf9\x27\x11\x58\xd5\xe1\xd9\x41\x52\xe4\x08\x9e\xc6\x08\x9f\x16\xa3\xbb\xf8\x62\x91\x49\x8b\x8f\xb0\x14\xdb\xd5\x85\x1a\xb2\xb7\x46\x1f\x4e\x38\xa5\x8e\x7e\x3d\xfc\xee\x75\xef\xb6\x7a\xd2\x6e\xab\xde\x15\xf4\x5c\x5c\x41\xdf\x76\x42\xde\x35\xf4\xb2\x15\xd1\x61\xbe\x1a\x11\x13\x82\xac\x8a\x1c\xd0\xd0\x4f\x11\x1b\xbf\xca\x14\x0e\xe9\x26\x8b\x3f\xd5\x0e\x71\x58\x6d\xbf\x92\xc1\xb4\xc6\xa6\xfa\x22\x46\x5f\x03\xa3\xe8\x92\xb0\x56\x3e\x52\x11\xa3\x56\x29\xa9\xa3\xd5\xab\xe7\x88\xcf\x9a\x23\xf6\xb5\x8c\x1e\x9f\x17\x1d\x1c\xb6\xd1\xc0\xdf\xb7\xe0\x47\x37\xad\xec\xbe\x9d\x09\x19\x75\xf1\xaa\x90\x77\x32\x13\x53\xf1\x4e\x27\x3c\xeb\xa2\x91\xaf\xeb\xe6\xeb\x89\x6b\xf0\xd9\x83\x56\x95\xf0\xc8\x52\x87\x61\xdd\x0b\xdb\x99\x09\xd7\x1b\x8c\x49\x55\x6e\xab\x36\xa5\x03\xb3\x38\x5e\x65\x58\x46\xb2\x2c\xaa\x75\xe5\x73\x57\x23\xb8\x07\xb5\x25\x06\x19\x3b\xda\xe8\x7e\x3d\xc3\x87\x26\xf0\x3d\x8c\x63\x39\x41\x90\xe1\x23\xa5\x56\x51\xb9\x25\xf1\x79\x91\xc9\x44\x96\xd9\xd2\x06\xb6\x83\xf5\x6b\x2c\xc0\xdf\x47\x29\x3b\x71\x7b\x34\x54\x33\x77\xee\x6f\xb2\x16\x92\x85\xcb\xaa\xb4\xf9\x32\xf8\x96\x85\xf7\x03\xb8\x7f\xa2\x0a\x3b\x1b\xb1\x98\x89\xb9\x28\xb8\x8d\x81\x8f\xe2\xc0\xcd\x9d\x43\x8f\x64\x73\x21\x52\x39\x59\x31\x09\x43\xf0\x93\xb6\xc9\x43\x2e\xe1\x23\x94\x6a\x83\xea\x91\xb2\x29\x2f\xeb\x87\xb2\x27\x3e\xb8\x92\x93\xe5\x21\x6c\xd0\xde\x01\xbe\x40\xd3\xc1\xaa\x1d\xbf\xf1\x86\xc7\x3d\x62\x59\x20\x09\xff\x12\x06\x5d\xd0\x55\x27\xbb\x42\x9a\x5a\x41\x2a\x30\x2c\xc4\xa3\x92\x25\x1c\xbd\xc5\x14\x06\x8d\x7e\x61\xca\x31\x01\xa6\x89\xaa\x9c\xa9\xe2\x18\xcc\x73\x49\x21\xf0\xb9\xfc\x97\xaa\xf0\xc6\x19\x4e\x89\xe6\x5c\x3f\x2f\x30\x51\x43\x38\x5a\xd3\x5a\xb0\xb8\x3e\x92\xe4\xb7\x85\x5a\x84\x7f\xec\x76\xa0\x5d\xeb\x95\x75\x3f\x1e\x9f\xca\xa5\xe3\xe9\x04\x1d\x9a\x1e\xa9\x4f\xba\xa2\x87\x8c\xbd\x83\xe7\xa5\x0a\x96\xcb\x6c\xe5\x7d\x65\x59\xd8\xda\x9e\x02\xe4\x86\x61\xf8\x88\x16\xbc\xe0\x73\x43\xdd\xcc\x97\x5c\xdd\x2d\x7c\x43\xce\x9e\x5f\x69\x3e\x6d\xc8\xf9\xa2\x23\x2c\x13\x36\x1d\x1d\xd1\xdf\x46\x47\x78\xf4\x07\x7d\x46\x41\x46\x9d\x3d\x1c\x94\x4d\xf7\xd2\xf1\x98\x5c\xf3\xa6\x43\x72\xb9\x4c\xf4\x90\x8e\xa8\xe1\x6c\x7c\xa3\xe8\x68\x0e\xb9\x63\x2e\xf9\xcd\x1e\xf6\xeb\xaa\x50\xc9\x2f\xaa\xca\xcb\x8f\x46\xa8\xec\xc6\x7f\xe2\x3e\x4d\x3b\x67\x2f\x54\xdc\x72\xb8\xf1\xa2\xc3\x75\x05\x98\x0b\x72\xd6\xa8\x6f\x7c\xed\x3f\xa2\x2e\x19\xe4\xdd\x89\x1b\x5b\x16\x30\xc9\xf8\xd4\x32\x38\x0c\x97\xfd\x52\xf4\xe3\xb7\x5c\xf3\x89\xb8\x59\xea\xa4\xcc\x3a\x5e\xcd\xa8\x4b\x4c\xe0\x03\x16\x6e\x77\xba\x82\xd6\x4c\x63\xf3\x58\x3c\xc9\x55\x2e\x86\xec\x1d\x4f\x66\xe0\xb5\x5a\x02\x99\x20\xe4\x0a\x5b\x64\x5c\xe6\xd4\x8f\xfc\x84\x86\xbf\x22\xb0\x6c\x74\xf4\x72\x74\x64\xfe\x03\x51\x6d\x09\xd7\xe0\xb7\x93\xe0\xe3\xd5\x32\x45\xa4\x0f\xe4\x86\xa1\x6c\x37\xfe\xec\x69\x2a\x43\x76\x83\x81\xec\x2f\xd9\x5c\xf0\x1c\x88\x4d\x6d\xb6\x58\x88\x90\x7c\x50\x50\x9c\x3c\x13\xe8\xd5\xb5\x32\x19\x32\x10\x9b\x78\x67\x65\xb9\xe1\x86\x98\x2e\x77\x4a\xa6\xa4\xfe\x1b\x66\x14\x67\x22\x12\xc3\xe9\x90\x8d\x8e\x26\x4a\x9d\x99\xc5\xc1\x88\x9a\x7e\x18\xf3\x62\x74\x34\x70\xff\xf8\xc3\xfc\x43\x94\xc9\x30\xe8\x34\xac\x77\x1a\x86\x9d\x86\x41\xa7\xc7\xbe\x6a\x74\xe4\xe7\xe9\x36\xc2\x44\x73\x27\xeb\x12\xa6\xbf\xda\x9a\x8d\xab\x82\x85\xf3\x57\x80\x50\x50\x17\x27\x58\x95\x67\x42\xfb\xac\x18\x60\x04\xd4\x36\xb6\x2b\xcb\x96\x2c\x2d\xd4\x02\xff\xee\x85\x83\x21\x43\xe9\x81\x2f\x5b\x84\x87\x35\x73\xdf\x28\x3f\xc4\x02\x0e\x4e\xdb\x41\x9f\xe4\xbc\xfe\xae\x50\x20\xcd\x85\xc0\x14\x54\x80\x0e\x48\xb2\x2a\x40\xc6\x35\x49\x30\x66\xca\x5f\xec\xf8\x77\x53\x9b\x5a\x7a\x5b\x3f\xfb\xca\xb5\x00\x1b\x8c\x11\xf4\xef\x67\xc2\x52\x14\x84\x0b\x80\xd0\x39\x35\xc4\x05\x11\x65\x76\x50\xc2\x95\xc9\x12\x04\x17\x91\x97\xb6\xc3\x2e\x1a\xd4\x44\x15\x63\x99\xa6\x22\xef\x46\x5a\xeb\xcd\xd7\x92\x55\xd7\xf0\x29\x50\xd4\x95\xc9\x34\xd2\xd4\x90\x98\xba\x1e\x9b\x69\x1f\x36\xdb\x96\xf8\x45\xbd\x9e\x0c\xf5\x9b\xe8\xbf\x91\x21\xe5\x41\x9e\x8d\x35\xe9\x6a\x36\x59\xb6\xe8\xcb\x5d\xd3\x95\xb8\x74\x2f\x36\x5f\x09\x81\x94\x56\xf2\x95\x34\x2e\xd3\x88\x9b\x97\x57\x17\x2d\xf7\x9c\x5a\xd5\x6c\x1e\x81\x1d\x86\x18\x18\x2a\x06\xa0\x16\xfc\x9d\xba\xc8\x3c\x22\xd7\xbb\x3c\x4a\xf3\xf5\x0f\xa2\xbc\x57\xc5\xa7\x0e\xf3\xa4\x96\xdb\xce\xd5\x76\xdb\xd3\x7c\xaf\x2e\xdf\x76\x98\xeb\xd5\xe5\xdb\x6d\xe7\x69\xba\xec\x6b\x8e\xaa\x28\xdb\x28\x9c\x6b\x17\xce\x13\x69\x8d\xcb\x24\xc3\x82\x14\x46\x71\xc6\x51\xf1\x79\xa1\x0e\xa6\xbd\xc4\x29\x71\x1e\xf2\xd6\x1d\x2f\x69\x73\x20\xf8\x86\x5d\xcc\x7f\x63\xc1\x8a\x2a\x67\x00\x47\xb4\xfd\x76\x39\x2b\x9b\xd4\xf1\x5a\xa9\xf2\x67\x99\x09\x8c\x29\x68\xcb\x78\xd4\xd8\x89\xd5\x13\x50\x22\x41\xc1\x0c\x52\x4e\xce\x02\x9e\x64\xa6\x4e\x49\x38\xcd\x58\xa8\x4f\x15\x4a\x95\x6c\x22\x33\x61\x03\x1b\x98\x45\xeb\x79\x21\x2d\x12\xc8\x02\x47\x47\x38\x62\xae\xf2\xd3\xf5\xa3\xa2\x0a\x76\x73\x65\x5d\x77\xa9\xc8\x5d\x35\x6f\xb0\x9c\xd2\x02\x26\x3c\xa3\x12\xe8\xfe\xeb\xe0\xa9\xeb\x32\x75\x73\x6c\x80\x19\x84\xd4\xa4\xe3\xaa\x74\x08\x42\x92\xcc\xd0\xb2\xcc\x4a\xb5\xdb\x99\x35\x0b\x8c\xad\xa7\xd6\xdc\xcd\xa5\x07\x5b\x2f\x32\x1b\xd1\x77\x11\x82\x1e\x03\x2b\x1c\xfb\x38\x13\x5a\x50\x86\x50\xc2\xdf\x53\x9e\x26\xea\x05\x78\x20\xe7\x87\x02\x39\xf6\xd1\x59\x6e\x51\xe5\xe7\xfb\xe1\xba\xd7\x6e\xa4\x6d\x18\xaf\xef\xd5\x81\xf7\x3a\x59\x1d\x82\x50\x82\xae\x14\x20\x83\x36\x72\xb4\x32\x68\x61\x51\xad\xce\xf8\x29\x35\x53\x73\x59\x96\x46\x25\xa0\x9b\x7d\xac\xc3\x61\x0c\x2d\x29\xf9\x27\x01\x06\x71\x18\x93\xec\x14\xd8\x3f\xb2\x56\x04\xdd\x42\x6b\x75\xdd\x54\xb1\x7e\xd3\x7f\xd3\xab\x09\x9f\x77\xda\x73\x33\xd0\x36\x5b\xee\xbe\xbe\xdb\x8e\x43\xcf\x35\x1b\xbe\x76\xb9\xa5\x9c\x8b\x8b\x8c\xeb\x07\x27\xee\xb8\x0e\xc6\xda\x72\xd1\xae\xdf\x2e\xeb\x76\x9d\x29\x0e\x8b\x3b\xba\xd8\x7a\xc1\xc2\x4f\x43\x22\x75\xd7\xb8\xca\x0b\x61\xde\x30\x24\x96\x64\xef\xd0\xaf\x36\x37\xea\x94\x8a\xc6\x4d\xc5\x02\x74\x0f\x95\xdb\xab\xe7\xd7\x12\x5d\x3e\x4a\x55\xb9\xf1\xf2\x69\xf1\x5e\xe6\xd5\x4a\x6e\xaf\x6d\x0f\xe2\xe6\x1d\x0c\xb3\xcd\x19\xd0\x97\xb7\xde\xfe\x8c\x8f\x45\xd6\xf5\xb2\x41\xee\x45\xd8\x44\x9e\xc1\xf3\x7c\xf0\x95\xbb\x59\x19\x71\xab\x45\xaf\xf4\xee\xaa\x64\x84\x3d\x29\x1b\x25\x86\x88\x6f\xad\x70\xdc\x75\xf2\x7a\xdc\xad\x77\x75\x50\xd2\xeb\x45\x56\x4d\x65\xbe\xce\x92\x9e\x2b\xd6\xe8\xe0\xf8\x68\x9d\xb2\x3e\x7d\xb6\x86\x70\x66\xd3\xca\x48\xd9\xc7\x2f\x8f\x1f\x87\xef\xfd\x5f\xb5\xc6\x6b\x50\x03\xf6\x85\x34\x52\xec\xcd\x57\xad\x41\x99\xa5\x5f\x1e\x0a\x6f\x5e\xcf\x5e\xd7\xbb\xf4\xd7\xf6\x69\xc9\xc4\x6a\xd8\xdf\x53\xca\xc6\x3a\x95\x69\xfc\xfc\xf1\x62\x75\x49\xcc\x3a\x95\x10\xf1\xd2\xe7\x64\xdd\x2a\x27\xeb\xb6\x82\xd6\x7e\xab\x4d\xc0\x3a\xf6\xf9\x6c\x9a\x24\xa4\x96\x57\xd3\xd0\xe5\x2b\x7b\x34\xd5\xee\x8f\xa6\xea\x1f\xcd\x7e\x1e\xcd\x46\x59\xf9\x29\xbf\x99\xb5\x32\xf6\xc6\x67\xb3\xae\x57\x98\x4f\xf4\xe1\x42\x77\x47\xd8\x99\x48\xaf\x6b\x82\x77\x47\xa7\xed\x4a\xb7\x26\x89\x28\x92\xc1\x21\x6f\x47\x7c\xc0\x16\x64\x66\x64\x76\xd2\x15\xce\x09\x7c\xa5\x26\xe4\x41\x40\xbb\xbf\x43\x60\xad\x0c\x19\xc0\x3a\x08\x11\x4d\xf0\x2f\xb3\x51\x18\x3d\x06\x36\x95\xdc\xc5\x5b\x06\x40\x2f\x98\x68\x5d\x63\x6d\xd2\x43\xa8\x4e\x51\xbe\x7a\x27\x1f\xcd\xdf\x55\x9f\x59\x37\x3f\xd7\xca\x7a\x6a\x0e\xcf\x95\xbf\x97\x0a\x9d\xa0\xb9\xb7\x6b\x7d\x0c\xda\xff\xf2\xdb\xcd\x47\x30\xc4\x10\x29\x25\x11\x7b\xed\xad\xa0\x0d\xf7\xa7\x9a\xcb\xcc\x57\xe5\x99\x57\xee\x4e\x5f\xa9\x75\x26\xc8\x5d\x5f\xfb\xda\x0b\xbe\x27\x0a\xb0\x46\xb9\x5b\xff\xf8\x9b\x3b\x3c\x1e\xc7\x3c\x10\x11\x5f\xa7\x79\x6e\x8d\xd8\x26\x95\x62\xc7\x7a\x28\xc3\x44\x15\x62\x78\xe7\xce\x65\x0b\x65\xdb\x9e\x44\x68\x82\x44\x03\xf9\x5f\xfc\x6f\x11\xab\x6e\x42\x73\x7b\x58\xf4\x50\xaa\xb3\x54\x25\xfa\xac\xe4\xfa\x93\x3e\x4b\x54\x3e\x91\xd3\xaa\x10\xa7\x0b\x95\x9e\x3a\xeb\xe7\x99\x26\xbd\x14\x7e\x12\x9f\xcb\xb3\x2f\xcb\xd1\xda\x55\xf8\x0d\x57\xbb\xad\xef\x57\x54\xd6\xa2\xc1\xa4\xd0\xb1\xc0\xc5\x6a\xcf\x5e\x42\xdc\xad\xd4\x45\x93\x59\xe7\xcb\x96\xbd\x28\xc6\x3c\x31\xd4\xe5\x7c\x3a\x2d\xc4\x14\xb0\x22\xd7\xf1\x9a\x57\x40\x84\x71\xcb\xa0\x78\xce\x4c\xdd\x9b\xdb\x93\x29\x48\xa0\x70\x91\x55\xba\x14\xc5\xb5\x02\xa0\xb7\x62\x9c\xfa\x19\xfa\x42\x40\xa3\xa0\x49\x87\x84\x5d\xbe\xb1\x4d\x31\xd7\x9a\xba\xab\xa1\x0b\x9b\xa9\x2c\x8d\x22\xaf\xdc\x5f\xd0\xcd\x6a\xfd\x3b\xf6\xcd\x4e\x64\x9e\xc6\x8b\x01\xdf\x8d\x7f\xc9\xe6\x02\x68\x50\xae\x80\xa9\xa1\x7b\xce\x8f\x0a\x85\xe5\x06\xf8\x62\x6a\x8b\x3e\xd6\x6c\x21\x8a\xb9\xd4\x1a\xa8\x44\x04\xc6\x3a\x74\xea\xa3\x38\x57\xdf\xc3\xcd\x69\x5b\xde\xb7\xf0\xe8\xd7\xdf\xb5\xa0\x15\xa5\x7f\xc6\x1f\x58\x26\xee\x44\x36\x60\x99\x9a\xca\xc4\x3e\x25\x99\x4f\x31\x70\xd2\x50\x01\x73\x35\xeb\xe0\xf9\x89\x28\x44\x9e\x58\x7c\x4e\x95\xcb\x12\xab\xaf\x98\xe1\x7f\x92\x79\x0a\x03\x14\xe1\x01\xd1\xaf\x5d\xd4\x8e\xb5\xef\xa7\xd3\x41\xad\x7d\x87\x9b\xd8\x7c\xfd\x25\x52\x25\x07\xf8\x3b\xcf\xac\x88\x6f\xb6\x60\xe5\x8d\x8e\x2b\x99\xa5\xa4\x19\x64\x2e\xbd\x9c\xd4\xe1\xe2\xe1\x4a\x37\x7c\x43\x8b\x32\xb8\xce\xd8\x1f\xf2\x91\xf8\x54\x2e\x36\x69\xa3\x79\x29\xa9\x2c\x44\x52\xb2\x64\x86\x9c\xa8\x54\xd4\xc5\xde\x76\x5d\xaa\xf9\xc2\x8b\xdc\x41\x5e\x9f\x35\x88\xdc\x3e\xb8\xb5\xcf\x82\xd0\xc7\x7c\x3e\x90\xfc\x3f\x3c\x0b\xc2\x7a\x81\xa9\x8d\x2d\xe3\xfb\x27\x3e\x8c\xf9\xa4\x22\xaa\xdd\x44\x8c\xf6\x23\x21\x5a\x2a\xeb\xbf\xb6\x7f\xce\xb7\xc7\x88\x52\x98\x2e\x86\x67\xc9\x3f\x30\x8e\x11\xef\x63\x73\x90\xe9\xda\xed\x8a\x42\x4b\xb7\x88\x2a\x6d\x60\xd6\xc4\x11\xbb\xf1\x6c\xcb\x54\x1d\xeb\x35\x64\x21\xf8\xfb\x00\x60\x40\xe6\x5d\xda\xcc\xaa\xb2\xc4\xa2\x67\x88\xec\xa2\x5e\x71\x27\x2b\x28\x4f\x33\x35\xe6\x99\xcf\x9b\x8b\xb4\x95\xa7\x98\xa0\x2e\x4a\xbb\x74\x27\x39\xbb\xc1\x52\xb7\x7d\xf6\x84\x9e\xc1\xf4\x0c\xa6\xbe\xed\x5f\x13\x83\x51\x99\xb8\x86\x59\xed\x26\x60\x5f\x53\xff\x8d\xc0\x34\x6c\x03\x54\x08\xb1\x8c\xdb\x91\x22\x97\x52\x31\x18\x88\x2e\x87\xb9\x90\xd9\x9d\x05\x09\x9d\x13\x6d\x37\x22\x73\x05\x36\xfb\xb2\x2a\x72\x97\x7b\x79\x2d\xcc\x05\xb3\x84\xb4\x3c\x14\xa2\x78\x96\xd3\x06\x44\x98\x28\x08\x25\x1b\x41\x25\xd6\x2c\x07\xb3\x96\xe9\x55\x08\xe6\x43\xf9\x2d\x4d\xe5\x60\xa8\x0d\x7b\x29\xda\x4c\x86\x4f\x82\x37\x5b\x16\x7a\x60\x16\xdd\x92\x82\xa8\xb9\x43\x53\x91\xa5\xd5\x96\x7d\x7d\xbf\x27\xcd\x44\xbb\xa4\x20\xba\x5c\x4d\x41\xb4\xe9\x9c\xd7\x8e\xbb\x0d\x15\x68\x78\x03\x0f\xb1\xcd\xf6\xb2\xc2\x73\x91\x15\xb6\x4b\x40\xb4\x51\x52\xe8\xc8\x30\x1e\x3d\x39\xd0\x83\xd9\x45\x4b\xc2\xa0\x87\xb1\x8c\xee\xbc\xa2\x03\x93\xe8\xb9\xc3\x33\xe7\x0e\x87\x63\x0b\x3d\x3f\xe8\xf9\x41\xcf\x0f\x82\xf6\x0d\xfc\x60\xff\x8c\x20\xb0\x86\x6e\x4a\x11\x67\x1b\x91\x3e\x19\x1a\xd8\x6a\x4e\x26\x6e\x43\x6a\x8b\xca\x1a\xf9\x1c\x36\xca\x59\xfa\x56\x6a\x4b\xdc\xcf\x94\xf3\xa7\x06\xaa\x28\x83\xe4\x04\x32\x99\x79\xfd\xba\xa9\x59\x37\xc3\x5e\x73\x54\xc8\x2a\xd3\x89\xa3\x35\xc2\xf2\x0b\xf6\x8f\xe4\x5b\xb4\xa5\x32\x60\x46\x96\x28\x23\xae\x62\x5e\x65\xa5\x5c\x64\x98\xf8\x2c\x88\xe1\x08\x92\xd0\xf1\x7c\xc9\x78\x54\x8d\x41\xa4\x8c\x4f\xcd\x88\x25\x14\xee\xb3\xd5\xe1\xf2\x6a\x2e\x0a\x48\x17\xee\x3e\x02\x45\x00\xf3\xa5\x1f\xdd\xfb\x8f\x1b\xcb\x01\x1c\x1e\xd1\x97\xab\xfc\x9a\x66\xf7\xdb\xf5\xfb\xb6\x5d\xfe\x10\xb7\x26\xb2\x8c\x89\x4a\x16\xbc\x28\x25\xcf\x58\x55\x58\x04\x16\x67\x95\x16\x85\x65\xdd\x33\x7e\x27\x18\x4f\x20\x4d\x85\x21\xa0\xec\x65\x14\x0d\x8d\x57\x0e\x2c\x37\x1c\x8f\x66\x52\x65\xd9\x80\x4d\x64\x0e\xd5\xc2\xc4\xc2\x85\x74\xf3\x72\xc6\x6e\x64\x9e\x08\x0a\x91\x25\x92\x0f\x33\xe2\x50\xa6\xaa\xf4\xf7\x0e\xac\x36\x51\xc4\x17\x7c\xc2\xdc\xc1\x04\x30\x63\x93\xd8\x7d\xac\x43\xa7\x33\xb0\x05\xde\xe4\x5d\x26\x87\x68\xc2\x73\x97\x84\x02\x80\x35\xa5\x82\xc3\xf5\x27\xfe\x42\x57\xc9\xcc\x2c\x69\x74\xb4\x50\xa9\x1e\x1d\x99\xb7\x31\x3a\xd2\x22\x29\x44\xa9\x47\x47\x27\x90\x9a\xa9\xb6\x0e\x4a\x6e\x15\xf4\x35\x2c\x60\x74\x74\x32\x60\xce\xfc\x3e\x56\xe5\xec\xf1\xc3\x4f\x69\x92\x5d\xe0\xb9\xd7\x61\xdb\xba\xa3\xfb\xde\x30\x37\x27\xa8\x04\x80\xdc\x26\x32\xc1\xc2\x72\x80\x65\x88\xc3\x0d\x6a\x8d\x78\xf0\xed\x17\xdb\x95\xae\x3b\x52\x13\xd3\xfc\x65\x41\x79\x78\x65\xf5\xb6\xdf\x79\x96\x85\x55\xf9\x38\xfc\xd3\xd2\xaf\xc7\x5e\xf4\x9d\x28\xc6\x6d\x0b\xfe\xdd\xb4\x89\x17\x8b\x3f\x21\x7d\x70\x2f\xe6\xfd\x7b\x14\xe1\x68\x31\x46\xe4\x43\xc8\xce\x79\x89\xb2\x91\xb8\xa6\xc0\xcb\xb0\xa6\x9f\x05\x60\xd1\x9e\x0d\x19\x0c\xde\xb0\x49\x20\x25\x3d\xa9\x90\x35\xdc\xbc\x36\xd9\xa5\x4d\x08\x68\x41\xe2\x78\x08\x4e\x48\x0d\xf7\x8e\xbf\xe9\xdd\x73\x4f\x5a\x77\xec\x55\xac\xe7\xa2\x62\x7d\x15\xf8\x8f\x1e\xf8\xd1\x4d\x3b\xdc\x3f\xe2\xa3\x1b\xd4\x63\x2d\xc6\xa3\x50\xeb\xf5\xbe\x35\x08\x8f\xd0\x9f\x0a\xc8\x71\xaf\xed\x41\xf4\x57\x37\xb7\x6b\xd9\x0a\x00\x41\x59\xc0\x0f\x1e\x36\x1b\x2f\x57\x34\x4d\x59\x32\xf1\x59\x6a\xa8\x5b\x6c\xa4\xa7\xc0\x39\x02\x0a\x18\x9b\xca\x3b\x91\x87\x93\x85\xcc\xd7\x46\x3f\xc1\x4c\xbe\x38\x59\x5e\x36\x15\x78\xee\x79\x5c\xcf\xe3\x7a\x1e\x87\x6d\xbe\x26\x1e\xf7\xc8\x10\x94\x75\x64\xd2\x55\xdc\xdd\x85\x52\xf6\x00\x95\x1e\xa0\x52\x97\x21\x0e\x82\x4c\xe9\x0e\x49\xe9\x80\x45\xe9\x41\x28\x5f\x0b\x1b\xdd\xd1\xcd\x78\x38\xf4\x49\x0f\x3b\xe9\xe5\x83\xde\xcd\xd8\x99\x09\xec\xdf\xcd\xd8\x01\x68\xb2\x09\x61\xd2\x43\x4b\x9e\x33\xcd\x3f\x00\xb1\xef\xa9\x7c\x4f\xe5\x7b\x2a\x1f\xb4\x0f\xa9\xfc\x61\xc8\x7b\xac\x15\xaf\xd5\x69\x2d\x68\x62\x05\x42\x02\x37\xdc\xd1\x48\x50\xf9\x30\xad\x69\xa5\x83\x88\xf8\x56\x80\x47\x47\x7c\x87\x85\x77\x20\x7a\x02\xad\xce\x1e\xc5\x41\x5f\xf6\x6e\xab\x83\x9a\x92\xcc\x97\x21\x6d\x48\xe0\xc3\xdd\xc3\x0c\xf2\xf6\x8c\x4a\x61\xfa\x24\x0b\x74\x79\xe8\x0c\x3a\x3e\x14\x77\x5e\xf5\x3d\xab\xaf\xa0\xed\x2d\xb5\xdd\x4d\xab\xde\x6f\xca\xf4\x82\x24\xd9\xdd\x4d\x1e\x98\x5d\x22\x73\x04\x53\x05\x62\x51\x64\x6a\xa8\x1e\x66\x0b\xa7\xbb\x4a\xb6\xf0\xc8\xe1\x0e\x49\xa4\x03\x6c\xc7\x4c\x65\x29\xe3\x36\x2c\xfe\xfc\xea\xd2\x73\x03\xfa\xde\x00\xed\x38\xc8\x4e\x26\x04\xe9\xb0\xb6\x10\x0b\xe3\x80\x29\x18\x71\x01\x6f\x2f\x98\x76\xb6\xc0\x40\x75\x7d\x22\x68\x9a\x21\xe0\x13\x7d\x8b\x40\x49\x81\x43\x97\x0c\x3e\x43\x5b\xfb\x0b\x9e\xf0\xe8\x08\x8b\x8d\x00\x6b\x93\x89\x38\x4f\x12\x55\x21\xd7\xc2\x22\xc7\xb5\xd6\x6b\xa9\x18\x0d\xf3\x9b\x5d\x31\xce\xcc\x0d\x73\xb8\x77\xa9\x26\xf6\x6c\xea\xef\x60\xc8\x7e\xc7\xcc\x7e\x28\x3a\x52\xf6\x02\xa9\x83\x5d\xe2\x85\x60\xa3\x23\x33\x69\xac\xaf\x02\xb3\x36\xff\x69\x96\x30\x3a\x8a\x37\x65\x74\xe4\x4c\x72\x81\xc9\xcd\x39\x4f\x02\x29\xd0\x34\x31\xf3\xb7\x12\x63\xad\x0b\x09\xa0\x85\x80\x42\x11\xde\x4e\x77\x30\xca\x41\x97\x61\xdd\x3e\xed\xf6\x61\x30\x52\x76\xf8\x3a\x59\x3d\x57\xee\xa3\x15\xcb\xed\x9e\xd2\xec\x3e\x11\xb1\x35\xef\x29\x88\x1b\xf6\xc8\x28\x3c\x2d\x44\x55\x45\xe7\x05\x67\x4b\xf5\x53\xf1\x48\x10\x42\xb4\xd7\xdd\xef\x48\x35\x0f\x41\x21\xa9\x3e\x61\x9f\x04\xa8\x4f\x02\x54\x7f\x90\x87\x4b\x02\x84\x97\xee\xeb\xca\x04\xc4\xde\x1a\x9d\x2d\x01\x28\xae\xcc\xd9\xdd\xeb\xe1\xeb\xff\xc7\xfc\xc7\x84\xdf\xa9\x02\x44\xa7\x75\x5c\xec\xec\xee\x75\x9c\xfb\xc0\xdc\x20\xaa\x7f\xc2\x32\x95\x4f\x45\x81\x39\x06\x8b\x3b\x37\xf6\x77\xdf\x3d\x5e\xea\xa1\x66\x12\xb0\x49\x69\xea\xf3\x0f\xf5\x06\xa6\xde\x37\xdf\x5b\x65\x9e\x94\x6f\xfe\x6b\xc8\x3f\x84\xa4\xf6\x79\x62\xd1\xba\x25\x21\x82\x1d\xd8\xde\xc8\xb4\x22\x31\x7c\xf5\xe9\x88\xf6\x26\x4f\xd0\xe2\xf6\x28\x56\xf4\x7c\xae\xe7\x73\x3d\x9f\x7b\xaa\x7c\xee\x61\x18\x34\x2a\xf6\xd0\xe7\x42\x7a\x74\xa8\x99\x4d\x4a\xfe\xad\xe3\xcd\xb6\x4a\x88\xb4\x67\x71\xe1\x90\xa9\x91\xf6\xce\xd1\xcd\xb7\x7b\xae\xfe\x1c\xb8\xfa\x13\xcd\xcb\xb4\x56\xa8\xde\x9a\x38\xf5\x12\xcc\x33\x94\x60\x7a\xfc\x44\xed\x4e\x6f\x9f\x9c\x69\x5f\xec\x6b\xbf\x69\x9a\xf6\xc7\xa9\x74\xcf\x9f\x7a\xfe\xb4\x7f\x14\xdf\xaa\x7f\xa8\xe7\x48\x3d\x47\xea\x39\x12\xab\xdf\xe9\x2d\xd2\x43\x3d\x88\x15\xf5\x89\xa2\xfa\x44\x51\x7d\xa2\xa8\x3e\x51\xd4\x23\x5f\x97\x3e\x51\xd4\xa6\x5d\x39\x54\xa2\xa8\xe3\x97\xc7\x6b\x13\x44\xb9\x44\x0d\xae\xd4\xad\x23\x99\x43\x76\xfc\xf2\x6c\xa2\x54\xd4\x19\xda\x56\x63\x77\xdb\x8e\xa1\x01\x94\xf5\xed\x3a\x6c\x9f\x92\xea\x5b\x4b\x49\xe5\x7d\x14\x4f\x20\x2f\xd5\xc3\x74\xe5\x3d\x03\xbe\x7a\x1d\xb9\xf7\xcc\xf6\x5a\xe4\x53\xf5\xcc\x3e\xe9\x0c\x58\xcf\x19\x7a\x74\x48\xcc\x51\x9f\x10\xeb\x80\x09\xb1\x1e\xce\x5c\x7b\xf4\x53\xcf\x63\x7b\x1e\xfb\xed\xf0\xd8\x2f\x81\x7e\xea\xd3\x70\xf5\xd8\xa8\xa7\x94\x8b\x6b\x5f\xf2\xcc\x7e\xb3\x72\xed\x8d\x97\xf7\xb8\xa7\xe7\xc2\xcf\x9f\x5a\x2a\xb0\x55\x89\xfe\x21\x86\xc2\x5e\x5a\x79\x2e\xd2\x4a\xef\x57\xae\xdd\xe9\x2d\xf2\x81\x3d\x98\x19\x3d\x34\x33\xd8\xc3\xf9\x4e\xcf\x70\x7a\x86\x73\x10\x04\x53\x0f\x5d\xea\x59\x4c\xcf\x62\x76\x4f\x46\xf6\x60\xde\xd2\xa7\x25\xeb\xd3\x92\x3d\xc1\xb4\x64\xb1\xb9\xa3\xcf\x4d\xd6\xe7\x26\xeb\x73\x93\xf5\xb9\xc9\xfa\xdc\x64\x96\x4c\x1a\x55\x25\xad\x32\x99\x4f\xa1\x74\x53\x21\x55\x21\xcb\xe5\x45\xc6\xb5\xde\x84\x3f\x0e\xdb\x39\x95\x6a\xce\x17\x00\x04\x22\x70\xe5\x82\x1a\xb1\x04\x5a\x01\x83\x21\x4a\xea\xfe\x64\x74\x22\xa3\xfe\xc1\xd6\x0e\xd9\x47\xa3\x94\xc1\x2e\x13\x70\x88\xe7\x4b\xf3\x83\x4c\x6d\xcb\x5e\x2b\x7c\xd2\x5a\x61\xbc\xc3\x9b\x36\x3f\xf8\x27\x41\x48\x79\x31\x96\x65\xc1\x8b\xa5\x55\xaf\x40\x2e\xac\x74\xc5\xb3\x6c\xc9\x16\x85\xba\x93\xa9\xd0\x6c\x5a\xc9\x54\x64\x70\x5a\x2a\x67\xf7\x98\xa3\x4a\xea\xfa\x75\xa3\x73\xa0\xfc\x72\x3b\xd0\x21\x74\x24\x11\x8b\x6a\x59\x4c\xd4\xd6\x41\x2b\xb5\x99\x1d\xf0\x7c\x98\x60\xfc\x68\xfc\xfc\x12\x95\x6b\x99\x8a\x02\xc1\x71\xe6\x6a\xa4\x34\x90\x5b\x92\x61\x7f\x0b\x95\x12\xa8\x2e\x55\x40\x81\x10\x77\x9d\x2f\x6b\x2b\x1f\xb2\x5f\xf3\x6c\x09\x80\xf5\xf8\x8b\xf4\xa4\xe6\xbc\xf8\x84\x9f\xba\x8d\xa6\x7d\x3b\x64\x7f\x57\xf7\xe2\x4e\x14\x03\x26\x27\x6c\x6e\xee\x58\x39\x83\x8c\x04\xb5\x91\x84\xb6\xf0\x84\x7b\x59\xce\xcc\x8c\x65\x51\x1f\x8c\x60\xd9\x5a\x94\x70\xdf\x0b\xcb\xaa\xf4\x9c\x67\x99\xb9\xf7\xf8\xcc\xd5\x04\xa9\x2f\x79\xed\xec\xc2\xeb\x9f\x8b\x52\x05\xae\xd9\xa4\x35\x47\x3c\x56\x2a\x13\x3c\xef\x95\xfe\xe7\xad\xf4\x3f\xdc\x0b\x7e\xe8\x1d\x73\x8b\x6e\xdc\x92\x45\x21\x8c\x44\x21\x55\x8e\xb8\xb1\x96\x5b\x79\x55\x6b\x6e\xb5\x38\xfa\x17\xd0\x0b\x6a\x92\x4f\x91\x74\xc0\x5b\xcd\xd4\xbd\x28\xfc\x93\x61\xbf\x62\x58\xcb\x07\x7c\xf6\x34\xea\x7b\xd3\xe8\xca\xb5\x09\xa5\xf4\xa6\x16\x86\x5a\x54\xb9\x16\xe5\x10\x75\x1d\x17\x90\x61\x74\xaf\x53\xca\x1d\x39\x05\xa3\x31\xe5\xff\xfb\xa0\xf2\x2b\x37\x3b\x37\xcc\x44\x70\xb3\x77\xa7\xa6\xe9\x0e\xf4\x1a\xde\x65\xcb\xb6\x79\xf9\xc2\xf2\xf4\x3a\xed\x84\x15\xd0\x66\xf2\xa4\xac\x78\xe6\x9b\x90\x9d\x02\xfc\xf7\x89\x90\x77\xc2\x72\x1f\x41\xe0\xab\x38\x3c\xc9\xa8\x7d\x40\x78\x11\x99\x20\x81\x84\x03\x73\xa8\xad\x0e\x2d\x21\x66\x7e\x32\x2f\xbf\xff\xae\x79\xe9\x24\xff\xec\x80\x13\x87\x7d\x79\x44\xe3\x54\x20\x52\x6e\x32\x4a\xc5\xb2\xe6\x7a\xcb\xd4\x16\x46\xa9\x0d\xc2\x6c\x8b\xeb\x63\xa5\x6d\x93\x0f\x24\xbe\x2b\x5d\xd5\xed\x5e\x16\x7d\xc2\x1e\x0a\x69\x3d\x14\xb0\x0b\xe4\xa3\xa8\x49\x1f\xfb\xf1\x56\x6c\x52\xb4\x82\xa1\x7a\xbf\xc5\x37\x2b\xc2\x6c\xe7\xb7\x80\xcb\x6a\x67\xf1\x05\x64\x97\x8e\xdc\xe7\xd1\x5d\x23\xbb\x70\x9f\xfd\x15\x6a\x89\x5e\x39\xc5\x01\x74\xb4\xa9\xbc\x7d\x77\x75\xfd\xee\xe2\xfc\xe3\xbb\xb7\xec\x14\xc5\x10\xb4\x23\xd2\x54\x56\x08\x93\x79\xd1\xa9\xf7\xc7\x8f\x97\x6c\x65\xe9\x67\x77\xaf\xcf\xa2\x3e\x43\xd6\x5b\x6e\x7a\x6e\xd9\x5b\x6e\x7a\xcb\x4d\x6f\xb9\xe9\xc5\x9e\xa7\x21\xf6\xf4\x96\x9b\xde\x72\xd3\x5b\x6e\x9e\xa3\xe5\x66\x5b\x4c\x51\x9b\xf0\xdc\xdb\x70\xbe\x39\xa9\xf4\x09\xdb\x70\x9a\xb4\xbb\xde\x90\xd3\x4b\x34\xbd\x21\xe7\xc9\x1a\x72\xb6\x66\x48\xa5\x2a\xf8\x54\x98\x33\xbd\xb8\xb9\x7c\x5b\xc8\x3b\x51\x6c\xca\x0d\x6b\xdb\xb0\x84\x2f\xcc\x09\xe8\x86\xc4\x7a\x9c\x5d\x50\xea\xa1\x82\xdd\xe0\xf8\xec\xd2\xd0\xec\x09\x4f\x04\x7b\x71\x71\x73\x79\xc2\xee\x54\x56\xcd\x05\x4b\x71\xb0\x54\x2c\x32\xb5\x14\x29\x53\x14\x0b\x8b\x41\xaf\x43\xf6\xef\x6e\x87\x19\x2f\x4b\x9e\xcc\x58\x2a\xe0\x7f\x82\x2a\x5d\x95\xb6\xd9\xa7\x88\x02\x94\xca\xb4\x12\xc5\x5c\xe6\xc2\x69\xb9\xd4\x5d\xe2\xc3\x36\x87\x8f\xa3\x67\xa2\xec\x38\x82\x11\x90\xc2\xc5\xe6\x42\xa4\xc0\x9a\xc6\x82\x2d\x0c\x09\x86\xe9\xcf\x55\x95\x97\x43\xe6\x37\xca\xa2\x1a\x31\xbb\x5b\x80\xca\x4a\x7b\xc6\xfc\xa4\x19\x73\xcf\xad\x9e\x0b\xb7\xda\x4d\xff\x0e\xb4\x6f\xf7\x5f\x08\x27\xcf\x53\x99\x98\x1b\xbf\x92\xac\xf3\xe2\xe6\xd2\x92\x34\x4a\x08\x18\x9e\xf4\xc4\x1c\x6e\xa9\xfe\xc2\x64\xc9\x7e\xf9\xed\xe6\xa3\x39\xa0\x28\x2d\x0b\x05\xe4\x7b\x5d\xd4\x8c\xf7\x37\x51\x5e\x65\xd5\x54\xe6\xe6\xdb\x2f\x4e\x58\xc2\xb3\x8c\xe0\xfc\xbc\xa4\xaf\xa1\x71\x9a\xbe\x0c\x23\x41\x7c\xff\x58\xb0\x1f\xbf\x67\xc9\x8c\x17\x3c\x29\xcd\xc7\x55\xc1\x32\xa1\xf5\x80\x8d\xc5\x54\xe6\x39\x00\xb9\xf3\xd4\x5c\x2c\xf3\x9f\xa0\x84\xf3\x9c\xf1\x6c\x31\xe3\x90\x01\x54\x26\xbe\x37\x7b\xf1\x0f\x7e\xfa\xc7\xab\xd3\x3f\x9f\x9f\xfe\xbf\xff\x3c\xc1\xc6\x29\xd7\x33\xa1\xd9\x8b\xd3\x93\x01\x4b\x55\xa9\xd9\x8b\xe1\x09\x55\xac\x0a\xc6\x00\x65\xfb\x5e\x88\xfc\x0b\x9b\x31\x8c\x76\xbb\x75\xae\x87\x26\x06\x79\x63\x06\xda\x78\x93\xd0\xc8\x9a\x38\xe2\x6a\x0f\x13\xfb\xef\x10\x7f\x03\x73\x7f\x4c\xd1\x84\x96\xbd\x31\x5d\xb0\x13\x18\xf6\xe3\x58\x6a\xd8\xe9\xb6\x54\xf5\x61\xbb\xc6\x44\xf5\x75\x36\xdc\xf3\xdc\x27\xcd\x73\x77\x56\x86\xd7\xdc\xc5\x9d\xd5\xe0\x26\xb1\xb8\x57\x7d\x7b\x61\xa2\x57\x7d\xbf\x00\x7f\xd9\x23\x78\x61\x1d\x37\xef\xc0\x63\x4c\x3b\x4b\x76\x74\x9d\xc1\x73\x4f\x81\xba\xb0\x18\x50\x46\xaf\xfd\x51\x6c\xa2\x0b\x71\xe3\x48\xfa\x94\x1a\xa4\x8a\x58\x99\xa6\x13\x46\xb7\x35\x6a\xbd\x66\x16\x38\xd5\x17\x63\x91\xf0\x4a\x43\x02\x3e\x39\x5f\x64\x62\xee\x32\x2b\x9b\x91\x2e\x9c\x5a\x7d\x55\x8d\x33\xa9\x67\xbf\xc3\xd0\x2f\x4e\xcc\x1d\x9e\xa9\xf4\xc4\xc6\x0a\x51\xb6\xeb\x2e\xfa\xb9\xe5\x68\x36\x43\x25\x35\xa4\x49\x4b\x67\x18\xc0\x14\x81\xc9\x4c\x24\x9f\x88\x91\x42\x0b\x6c\x3e\x07\xfa\x54\xf2\xb2\xc2\x44\x83\xf7\xdc\x10\xaa\x2a\x2f\x65\x16\xb4\x05\xf2\x09\xed\x8d\x0c\x2d\x26\xe6\xb9\x2d\x0a\x95\x08\x01\x02\x6e\xa9\x50\x3d\x87\x4c\xbc\x1f\x69\xc9\xe2\x33\x32\xd0\x53\xea\x58\xb0\x44\xa9\x22\x95\x39\xec\x31\x88\xb9\xab\x7b\x6c\xa6\x80\xe4\x70\xf3\x54\xad\x0f\x66\xf5\x20\xa4\x66\x89\x32\x07\x50\xfa\xfc\x5d\xee\x0a\x5d\x8b\xa9\xd4\x65\xe1\xdc\x4e\xe0\xa1\x32\x5d\x44\xce\xc7\x19\x55\x24\x2f\x9d\xbf\x48\xea\x20\xd7\x75\xa9\xd8\x84\x67\x9a\x5c\xda\x2b\xdf\x75\xf5\xca\x3f\xc9\xc5\xc2\x10\xf3\x5f\xcb\x99\x28\xee\xa5\x16\x9b\xdb\x9b\xe3\x13\xe9\x70\x94\x8f\xf2\xd8\x91\x26\xe7\xf3\xaa\x34\xb3\xda\xc5\xc7\x3d\xd1\x10\x83\xd6\xc9\xad\xf8\x96\x64\x2c\x89\x9b\x55\xe5\xa9\x28\xb2\x25\x30\x4a\x3c\x1b\x5d\x2d\x16\xaa\x28\x35\x16\x69\x87\x7c\xcd\xf7\xb9\x28\xf4\x4c\x2e\x60\xc3\x16\xa2\x98\x4b\xad\x03\x91\x9c\x3a\xd2\x4d\xc1\xc8\x3e\xb8\x21\x66\x63\xae\x05\x70\x4d\x15\x3d\x78\xf6\xf3\x4d\x30\x63\x92\xa8\x30\x05\x79\x9a\x02\x1b\x01\xa4\x40\xc9\x65\xa6\xeb\x2e\x47\xd0\x89\xac\xcf\x91\xe7\x3e\xa3\xff\x4c\xe5\xaa\x20\x80\x13\xb1\x6d\xcc\x10\x0f\xa7\x6d\xaf\x06\x3e\xc5\xf8\xfb\xe1\xfd\xd8\xe1\x6c\x36\xb1\xce\x85\x4a\x2f\xf3\x89\xfa\x35\xff\xc5\x6c\x48\x5b\x1a\x8c\x49\x8c\xa6\x88\x3b\x6f\x43\xb3\xfc\x2e\xd6\xed\x6d\x2f\x32\xf9\x49\x98\x5f\x8d\x22\x0c\x9f\xf8\xed\xf2\xed\x80\x89\x32\x19\x9e\xb0\xb4\x2a\xdc\xe1\xf9\xdb\xab\xe1\x69\xd1\xcc\xe8\x55\xd4\x87\xa5\x2c\x2d\x65\xa3\x19\xcf\xa2\x66\xcc\xa6\x9a\xee\x9e\x6c\xd0\xc4\x3d\x9c\xa6\xb6\x64\xae\xa1\xaa\x84\xb9\x69\x91\x91\xd3\x50\x07\x7c\xf0\xb0\x51\xd6\x04\x09\xb3\x30\x9f\x5f\x99\x1f\xd7\x0c\x4f\xde\xd0\x66\xf1\xb9\xb4\x59\x00\xcd\x24\x3e\xa8\x54\xd4\x09\xb5\x79\xa8\x7a\x65\x9e\xa0\x7e\xe8\x85\xca\xb5\xb4\x85\x23\x16\xbc\xd0\xd6\x02\x00\x30\x36\xee\x44\xcc\xf0\xfb\xb4\x27\x72\x75\x26\xf8\x91\x89\xca\x32\x75\x6f\x7a\xba\x3f\x9a\x59\x5a\xba\x61\xbb\x4f\x56\xee\x84\x0e\xaf\x0c\xbd\x15\x14\x97\xe4\x74\x56\xb2\x69\xa1\xee\x31\xd7\x2d\x82\xf2\xc4\x44\x7e\x8e\xb0\x36\x43\x36\x3a\x4a\xb4\xe7\xe9\x24\x45\x2d\x54\x3a\xcc\xf9\x5c\x8c\x8e\xde\x98\x4f\xa2\xc9\x66\x63\x4b\xb0\xc6\x86\xcd\x31\xe6\x76\x6d\x9f\x4a\xa6\xa6\x35\x3e\x9e\x17\xe6\x97\xdf\x2e\xdf\x9e\x34\xb7\x17\x8b\x99\x98\x8b\x82\x67\xa6\xc7\xe8\xc8\x2c\x75\x74\x64\x49\x58\xc0\xb4\x72\xe6\x5a\x32\x99\x67\x32\xb7\x7f\x1d\xe5\xac\xe5\xff\x82\xf8\x6c\xee\xe9\xc4\x0d\xa8\x07\x03\xa6\x1c\x79\x1f\x1d\xc1\x15\x1e\x1d\x19\x3a\xd1\x36\x59\x4a\x86\x2f\xee\x1d\x89\x91\x79\xc8\xed\x5f\x0f\x5f\xff\x08\x79\x81\x2d\x0d\xb3\x72\x25\x5c\x2d\xbc\x74\x9a\x58\x3a\xd1\x65\xa8\xfa\x01\xeb\x1e\x1d\x5d\x19\xf9\x4d\x97\x22\x2f\x47\x47\x14\x2d\xfe\x2e\xf8\x38\x2e\xe1\xbd\x9c\x88\x64\x99\x64\xe2\x17\x95\x0a\x62\x54\x6e\xe8\x84\xe7\x2c\x13\xfc\x4e\xb8\x07\xc3\x52\xa9\x1d\x77\x3c\x53\x05\x93\xd3\x1c\x71\x62\x96\x24\x0e\xd9\xb9\xae\x2d\xe2\x5f\x21\x02\x3d\x3f\x2e\xdd\x2c\x7d\xf3\x41\xf4\x31\x58\xa5\x6d\xa4\x72\xc1\xe6\x2a\x25\x90\x45\xe8\xbe\xc0\x48\x6b\xeb\xc1\x70\x8c\xda\x3f\x7e\xef\x59\xb0\xfb\x03\x03\x01\xc1\x97\x7a\x00\xfb\x27\x3e\x73\x23\x1a\x40\x7e\x65\x6e\xe4\x84\xb9\x19\x07\x6e\xc5\x82\x17\x7c\x6e\x46\xb0\x3c\x8c\x2c\x80\x7b\x66\xcc\x96\x20\x5f\x8b\x05\xd2\x97\xd6\xf2\x20\xb5\xf6\x35\x2b\x69\x40\x8a\xee\xb9\x91\x38\x6f\x57\x68\xd7\x2d\x31\xe0\x85\x28\xa4\x32\x7d\xb3\x6c\x49\x62\x87\xa1\x12\x85\x98\x64\x46\xc9\x05\x50\xa1\xd2\x48\xc7\x80\xd3\xbb\xc4\xa8\xc4\xba\xe9\xe5\x44\xec\x37\x0d\x70\x42\x48\xc9\xcd\x86\x7d\x50\xa5\x78\xc3\xce\x27\x70\x52\xe6\xe8\x12\xa1\xf5\xa4\x32\x4f\x50\x42\x41\xa0\x95\x49\xc2\x84\x06\x46\x53\xd6\x46\x49\xce\x4b\xa4\xb7\x66\xd8\xd5\xb6\x24\xf9\xc2\xcd\x41\x69\x11\xb5\x6d\x43\x3e\xcd\x1e\x44\x52\xc8\x90\x7d\x10\xf7\xc4\xc0\x28\x53\x4c\xc8\x9a\xb4\x10\x39\x3e\xf1\xa2\x42\xcb\xad\xad\xef\x11\x9c\x3d\x3c\xda\xb1\x28\xb9\x7b\xb5\xe6\xde\x60\xd5\xa0\x3b\x2e\x33\x10\x27\x9c\x4c\x7a\x71\x73\x19\xa7\x68\xf8\xa8\x3e\x89\xdc\x3f\x78\x27\x6e\xee\x72\x81\x88\xb4\x5c\xf0\x05\x4f\x64\xd9\x26\xdb\xd5\xe5\x87\x5a\xef\xe8\x32\x91\xea\xb1\x2a\x44\xe0\xc5\x02\x1c\x93\x73\xac\x9a\x21\x2d\x86\x15\x05\x39\x72\x48\x26\x76\x68\x37\xe0\x0a\x9b\xc6\xfd\xa7\x4c\x07\xe3\x25\x4b\x0a\x81\x2c\xd2\x6c\x5c\x6d\x82\xd6\xcb\x07\xfa\x42\xe2\xa7\xed\xf8\x28\x1d\x92\x40\x05\xc7\xe2\x5d\xad\x3c\x2f\xe7\x73\x91\x4a\x5e\x8a\x6c\x19\x92\x14\x60\xcf\xce\xc6\x7f\x99\xdb\x8a\x23\x20\xc7\x14\xea\x4e\x1a\x61\xd6\x34\x32\x84\x1a\x37\xc3\x62\xe9\xcc\x65\xb3\xc9\x5a\x48\xb8\x30\x6a\x9f\xd7\x98\x56\x97\x3b\x33\x32\x0b\x5e\x60\x91\x32\xad\x40\xa4\x96\x40\x42\xd6\x2f\x19\xd6\x75\x9e\x81\x0e\x55\xca\x3b\x91\x2d\x07\xe1\xf0\xb4\x4e\x47\x21\x2d\x28\x97\x9e\x25\x40\xf3\x98\x2a\xf0\x4d\xa2\x50\xec\x4a\xaa\x4c\x32\x50\x51\x60\x2d\x05\x6e\xcb\xca\xe9\x85\x92\x8a\x99\xff\xd8\x3c\x13\xb7\x88\x8d\x54\xb1\xe9\xd5\x40\xab\xb6\x37\x53\xdb\x87\x86\xf7\x82\xee\x98\xba\xec\xb8\xc3\x2b\x2a\xcd\x8b\xbc\x26\x73\x5c\x1b\x7e\x30\x6c\xbb\x9e\xfc\xa2\xdb\x7a\xa1\x52\x7d\x0c\xda\x86\x4c\xa0\xb4\x19\xd0\x1d\xf8\x9c\x06\xdb\x80\x76\xaa\xb2\x7d\x65\xe0\x73\x52\x00\xf0\x16\x86\x4e\xf2\x62\xc9\x78\x55\xce\x44\x5e\x92\x21\x64\xd8\x20\xce\x42\xea\x27\x1a\x36\xdf\x42\x92\x5d\x23\xc7\x12\x49\x35\xb2\xab\x08\x25\x57\xa4\xac\x0d\xb2\xa8\xf9\xd0\x9b\x66\xd9\x4c\x47\xc4\x6f\x88\xb3\x34\x72\xda\xff\x31\x42\xd7\xe8\x68\x54\xbd\x7a\xf5\x7d\xc2\xab\x54\x8a\x3c\x11\xf0\x2f\xe1\xfe\x6c\x1a\x40\x0f\x10\xec\xa0\x25\xfe\x13\x9a\x0d\x6c\x13\xf1\x79\x21\x51\x17\xf9\x28\xe7\x42\x97\x7c\xbe\xf0\x1d\xfc\x1f\x59\x69\xff\x6a\x36\xe5\xfa\xe7\x8b\xef\xbf\xff\xfe\xcf\xc1\x50\xff\x0b\xff\x7f\x38\x1c\x8e\xf2\xff\x0d\x18\x17\x4d\xcd\xf4\x11\x46\x6d\x0f\xaf\x40\x00\xe2\x4f\xe5\x04\xf2\xc6\x94\xe8\x9a\x2b\xd9\x5c\x51\xbd\x3f\x98\x32\xdc\x5c\xac\x50\x06\x22\xed\x90\x7d\x54\x0e\x45\x8a\x42\x20\xb6\xe3\xc0\x28\x61\xd6\xcb\x01\x5b\x65\xf9\xf4\x6e\x01\x08\x0f\xa4\x5c\x4e\xa7\xa2\x68\x38\xdb\x90\xc5\x3f\x36\xf7\xda\x83\x4b\x20\xdc\xe6\xae\x5e\x81\xe8\x4f\x91\xfd\xd4\xe8\x3c\xa7\xae\x71\xa9\xe6\x32\x59\x03\x22\x5e\x95\x8a\xdb\x68\x42\x53\x17\xe7\xac\xba\x37\xcc\xe4\x13\x65\x81\xb2\xdc\x63\x8d\x82\x6e\x6d\x2b\x35\xd2\x36\xf1\x4e\x18\x77\x89\xa4\xae\x09\xf8\x03\x92\x73\xc9\x76\x5a\x69\x43\xc1\xa3\xac\x52\xf8\xc4\x63\xa3\x2a\xf0\x02\x6b\xa1\x44\x05\x34\x10\xdd\x8d\x64\x8c\x83\x55\x3c\x63\x57\xbf\x9f\x5d\xfd\x7e\xc1\xe6\xc2\xc8\x83\x52\xcf\x71\x96\xa0\xfa\xa0\x74\x0d\x73\x0a\x34\x0c\x62\xa6\x40\xe5\x52\x31\x70\xab\xe7\x85\x9f\x19\xa9\x61\x12\x84\x07\x54\x42\x09\x22\xed\xac\x82\xa1\xaa\x65\x45\x7d\x59\xb0\xcc\xee\x37\x2c\x99\x8c\x72\xb8\x51\xf6\x0f\x20\xfa\x21\x62\x7b\xc8\xce\xed\x2e\xcf\xb8\x05\x14\xf1\x7b\x33\x15\xeb\x39\x0c\x8d\xb6\xa4\x6f\x4d\x15\x49\x37\x53\x51\x32\xbe\x86\x7e\x02\xcd\x26\x8d\xc4\x4a\x99\x3f\xab\x02\xe3\x67\x56\x81\x5b\x6e\xbb\xd1\x0e\xe0\x76\x47\x0b\xe1\xfc\x15\xc1\xc5\x35\x24\x75\x2a\xcb\x59\x35\x36\xd4\x34\x55\x89\xf6\x1a\xe4\x69\xa6\x12\x9e\x9d\xd2\xbe\x0e\x67\xe5\x3c\xf3\xcb\x34\x74\x22\xd4\xa4\xec\x8c\x50\x1e\xd6\xa8\x5a\xa1\x9d\x17\x7e\xc7\x7f\xce\xf9\x12\x76\x26\x4d\x6d\x49\x3b\xc1\x26\x95\x79\xec\x4d\xd8\xfe\x2d\x14\xa2\xbd\x16\xb9\xeb\xf8\xce\xb5\x28\xb7\x28\x86\xd4\xcd\x9d\x61\xee\xc0\x66\x47\x86\x69\xd1\x50\x4e\x97\x60\x7b\x59\x16\x70\x5a\xd3\x42\x97\xa8\x7d\x99\x26\x2c\x07\x25\x3c\x6c\x40\xa1\x5e\x46\xa0\x00\x31\xdb\x88\xc7\xce\x5a\x09\x9f\x22\xbf\x24\x26\x02\xcc\x96\xa0\x7f\x67\xca\x08\xb5\x1a\x23\x13\x2a\x32\x3b\x9b\xc1\x4f\x71\xdc\xd3\x02\x8d\xdf\xbc\x60\xe6\xe1\x25\xbc\xf0\x9a\x0e\x8a\x96\x9f\x42\x21\x83\x57\xa5\x32\xcb\x40\x75\x71\xa1\x16\x55\xb6\x66\x16\x36\x05\x66\x20\x4d\x04\x46\x3a\x3b\xe8\x02\xb0\x36\xcc\x4e\x02\xc5\x1a\xb7\x75\x14\xde\xe5\x11\x3b\x50\xeb\x0f\xb7\x26\x4e\xc4\x66\x1e\x8f\xd4\x1a\xaa\x09\x49\x5b\xf7\x93\xf2\x23\x9a\xff\x27\x08\x10\x18\xc0\x42\x74\xc0\xe6\x08\x08\x99\xc3\xfb\xa3\x89\x5b\xe1\xca\x86\xcb\x4a\xb3\x99\xf7\x4c\xe4\xaa\x9a\xce\xc8\x80\x50\x3a\x7b\x86\x3b\x0e\xe7\x1f\x8e\xd7\xc1\x73\xf6\xeb\x7d\x2e\x8a\x6b\x9f\x03\x72\x35\x49\x69\xa2\x0a\x34\x1b\x82\x1e\x91\xfb\xdd\xec\x71\x14\x4f\x1a\x47\xd1\xc3\x0d\x9e\x0b\xdc\xa0\x23\x76\xd1\x21\x14\x23\xf4\x5f\xcd\x45\x0b\xef\xd7\x34\x58\x57\xe9\xe7\xe1\x00\x39\x43\x5e\x5a\xe1\x71\x7a\x93\x27\xdd\x32\xb2\xe7\x02\x91\x83\xc5\x1c\x00\xbc\x60\xc6\xed\x82\xd7\xf7\xed\xd6\x72\xfe\xc6\x73\x30\x82\x59\xe8\x40\x5a\x95\x06\x3a\xb0\x80\xcc\x88\x81\x20\x73\x3d\xe4\x5e\xa1\x44\x6b\x16\x72\xdd\x4c\x12\xeb\x88\x09\xff\xd9\x7a\xf9\x68\xd2\x6a\x7c\xad\x68\xc0\x6e\xe4\xce\x02\x0f\x55\xdd\x1d\x17\x06\xf1\xd9\x07\x69\x34\x89\x99\x3b\xa7\x96\x0d\x83\x39\xb7\xc6\x10\xd3\x54\xf6\x8c\x22\xde\x21\x93\xad\x4a\xc5\xe5\xdb\x96\x95\x62\x23\xbb\x3e\xd8\x6b\xc7\x17\x68\xa5\xc8\x1b\x8c\x1a\x2a\xc5\x7d\xb4\xcf\xa8\xc4\x47\x6e\x1b\x30\xe9\x02\x99\x4f\x8c\x84\x03\xca\x98\x35\x0c\xea\xa5\x06\x78\x60\x98\x8b\x40\xcf\x78\x11\xee\x91\x9a\x8b\x3c\xc9\xd0\x4c\x80\xb9\xa7\x53\xc3\xcd\x7f\xf6\x8e\x97\x41\xf8\x39\x94\x02\x08\x0b\xe0\x0a\x53\x9a\x55\x40\x42\x5d\xf3\x5f\xaf\x8d\x92\x6b\x5d\x95\xf1\x54\xe2\xee\xc1\x24\xc2\xfe\xe7\x46\x23\xfd\xcf\x99\x88\x54\x5c\xa9\x75\x25\x74\xe0\xff\xb1\xfd\xe3\xf1\xcd\xa4\x10\xb4\x61\x75\x3c\x9c\xa7\x43\x2c\xa0\x0c\x49\x66\x55\x14\xb8\xdd\xee\xa2\x5f\xc5\xcf\xcd\x71\x08\x56\x69\x2b\x00\x5c\xbe\xf5\x36\xf2\xda\xb7\x41\x02\x07\x20\x86\x2e\x79\x9e\x0e\x98\x18\x4e\x87\x7e\x4d\x40\x34\x04\x07\xfb\x82\xdb\xa8\xfa\x2b\x72\xe1\x38\xdb\xdf\xbe\x52\x2d\x54\xa6\xa6\xcb\x7f\x17\xcb\x36\x43\x48\xd8\xb4\x8e\x1d\xfd\x64\x7e\x23\x7d\xd4\xbf\x1a\x6b\x75\x87\x63\xe1\x81\x1f\x9d\x7c\x43\x20\x09\x02\x2d\x24\x5f\x1f\xec\xb1\xcb\x04\xc2\xc1\xa1\x61\xee\x3c\x7d\x19\x3f\x63\xa5\x74\xbf\x69\x9a\xbd\xa0\x5d\x4b\xd4\x7c\xc1\xf3\xe5\x30\x51\xf3\xb3\x3f\x54\x2e\x30\xa9\x76\xf8\xab\xd1\x4a\x54\x3e\x3a\x3a\xe9\x32\x2d\x77\xee\x6e\x4e\xee\xf6\xc5\x73\xe2\xa0\x92\xc1\x33\xb2\x92\x6d\x64\xc7\x15\x9f\x17\x0a\xf5\x34\xbd\xd2\x55\xb3\x8c\x8f\x45\x06\xe9\x4e\x8c\x2c\xa7\xee\xf3\x48\x4d\x58\xb9\xd5\x90\xf0\xdb\x0d\x82\x66\x8e\xd0\x95\xb1\x7a\x53\xe1\x98\x6a\x11\x59\x32\x99\xd9\x0f\xcb\xd2\xe7\xa4\x2e\x0b\x29\xee\x02\xea\x12\xcc\x04\x11\x40\x5c\x6b\x36\xe6\xc9\x27\x7b\xdf\x9d\x6b\x05\x14\x36\xe7\x56\x04\x1f\xb6\x33\x9a\x02\x7d\x30\x3d\xcc\x94\xfc\xcf\xd1\x4e\x0c\x7d\x12\xfc\xb1\xb0\x86\x30\x0f\xfd\xb0\x59\xce\x9d\x93\x99\xfa\x3e\xa9\x72\xfb\xc0\xb4\x56\x89\x7b\x9b\x48\xd5\x5d\x5c\x69\x47\xf3\xdb\x56\x6b\xb0\xfc\x81\x3a\xdf\x23\xf9\x9f\xb6\x06\xfa\x10\x24\xff\xaa\xc8\xbc\x1f\x1c\x7f\xac\x57\xf4\x28\xfe\x6f\x58\xad\xee\x51\xfc\x8f\xac\x02\x1f\x0a\xc3\xef\x0c\x0e\xad\x7c\x05\xf0\xfb\x5b\xa9\xc0\x1d\x2c\xe2\xed\x4c\x88\x3a\xb7\x65\x9c\xb3\x9f\x08\x2b\xc9\x85\xd3\x0c\xa6\x63\xad\xc5\x90\xe7\x0c\x60\xce\x79\x68\x84\x36\xcd\xfc\x8c\x3d\x6d\x35\x92\x56\x95\xbb\x35\x0c\x28\x0b\x10\x48\x2c\x89\x9a\x93\xd4\xb2\x7f\x6f\x69\x6c\xab\x78\xb0\x1b\x65\xc1\xcb\x64\x76\x3a\x17\xc5\x54\x9c\x7e\x12\x4b\x50\x30\x63\xc1\xa5\xb9\x07\x58\xf3\xc5\x74\x89\xd6\xb2\x62\xba\x83\x85\xc9\x1e\xe5\x1e\x24\x22\x0b\x22\x69\xc9\x98\x19\x36\x63\xf8\xb7\x31\x09\x27\x0e\x08\x48\xf0\x73\xca\xe7\xa4\x26\x4e\x49\x33\x3f\xa3\xa8\xec\xbd\xb1\xbf\x93\xa3\xd3\xe2\x72\x96\x39\x9f\x5b\xdf\x89\x95\xc2\x09\x37\x13\x7e\x5b\x34\xe5\x2f\xf8\xcb\x8a\xed\xc2\xc1\x73\x60\x2a\x3c\x49\x20\x90\x02\xdc\x94\xa2\x4c\xd0\x09\x97\x33\x6f\xd2\x04\xb4\x6d\x17\x41\x2e\xcb\xd4\x3d\x4e\xfd\xdd\xe7\x05\xcf\xbb\x88\x74\x0d\x5d\x8c\x48\x76\x1f\x26\x3e\x5c\x99\xb1\xe9\x64\xb5\x68\x61\xba\xad\xa9\x09\xb6\x11\xb4\x03\xa3\x88\xf4\x23\xca\xf8\xf5\xc5\x34\x61\x27\x0d\xf3\x4b\x4a\xaf\xb2\x94\xae\xab\x99\x6c\x21\x9c\x7f\xba\xe5\xd8\xd8\xbb\x20\xb2\x86\x3c\x59\x56\xa0\xb5\xda\x99\x57\x74\x9d\x02\x13\x11\x3e\x3d\x64\xe7\x39\x69\x30\xb4\x84\xe5\x8d\x30\x72\xb8\x2a\x3e\x8a\x62\x6e\x99\x21\xcf\x35\x39\xb2\xa0\x5c\x90\x1f\xad\xa0\xe5\x80\xe7\x2c\xd6\xf5\xbb\x46\x3b\x90\x5f\xdd\xa3\xf8\x08\xd5\xb1\x27\xe2\x94\xa8\x82\x70\x1c\xab\xcb\x7b\x90\x7c\xd8\x2b\x1c\xbd\xcb\xab\x97\xcd\x3b\x3d\xc2\x67\x9c\x2e\x13\x80\x93\xbf\xc2\x3c\xdb\x48\xff\xdb\x66\x42\xde\xc0\xb0\x2d\x25\xa8\x31\xac\x42\x90\xa3\xdf\x43\x6b\x35\x01\xe1\x69\x06\x64\x94\xfd\xc7\xe8\xa8\x50\x68\x51\xd4\x6a\x52\x8e\x8e\xfe\x39\x64\x1f\x54\xe9\xf0\x93\x29\x3b\xb5\xd1\x53\xc8\xcb\xaf\x7e\x27\x00\xba\x96\xf3\x45\xb6\x64\x13\x2e\x33\x26\xd1\x2f\x04\x7c\x1c\x7a\x3e\x8e\x01\x2b\x0c\x4b\x73\x62\x4f\x7d\x6b\x7d\xe8\xd8\x55\xb3\x18\xb1\xd5\x54\xea\x99\x17\xbd\xb4\xe5\xeb\x45\xd6\x44\x30\x8c\x53\xb2\x87\x48\xae\x15\x4b\x94\x11\x8d\x71\xb7\xe9\x34\xd7\x58\xc0\x43\xa1\x72\x65\x37\xfc\xe7\x5a\x93\xb2\xfa\x89\xc5\xd8\x60\x5b\x98\xb5\x36\xfd\x1d\xec\xf1\x85\x48\x32\x2e\xe7\xdd\xa2\x39\xf7\x7f\xf3\x81\x4f\x06\x33\x88\xb3\xc3\xbe\x15\x10\x6b\xbb\x43\xee\x56\x98\x07\xd5\xaf\xff\x25\xc6\x58\x35\xad\xec\xf7\x7a\xfb\x60\xbf\x67\xea\x7e\x65\x85\x17\x66\xc6\x61\xce\xed\x70\x3b\x0c\x4f\x1e\xab\x2a\x4f\x87\x0c\x4d\xe9\x80\x98\x1f\xb0\xe8\x23\x97\x36\x7a\xc0\x3c\x4c\x0c\x8d\x3b\xa8\xdc\xf5\xd0\xf2\x8e\xe1\xad\x7d\x62\xd6\x8a\x48\x2f\xdb\xb7\xb9\x22\x1c\xbc\xc5\x16\x5e\x6f\xda\x64\x10\x8f\x1e\x44\x9f\xe7\xf5\x89\xcb\xa7\x5d\x0c\xe2\x97\x4d\x06\xf1\x58\x0f\xdf\xbb\x79\x26\xba\xf1\xbd\x71\xbc\x17\xc0\x7b\xe3\xf8\x97\x61\x37\x07\xb1\x90\x47\xa1\x2a\xeb\xd9\x4d\x14\x38\xe4\x0a\xc4\x07\xf2\x2d\xc0\xa4\x1a\xc3\xc5\xba\xb0\x1d\x8a\x53\xfa\xff\xd9\x7b\xf3\xe5\x36\x92\x24\x4f\xf8\xff\x7d\x8a\x30\xd6\x98\x89\xec\x0f\x00\x2f\x49\xdd\xc5\xb6\xb1\x5a\xb6\x8e\x1a\x6e\x95\x24\xae\xc8\xaa\xde\x59\xa1\x66\x19\xc8\x0c\x00\xd1\x4a\x44\xa0\x33\x32\x41\xa1\x47\x65\x36\x0f\xb2\xfb\x72\xf3\x24\x9f\x85\xbb\xc7\x91\x07\x4e\x9e\x55\xc3\x36\x6b\x15\x01\x44\x46\xc6\xe1\xe1\xe1\xe7\xcf\x57\x5d\x3a\x3e\x9d\xc9\x10\x0a\x41\x21\x54\x6a\x85\x20\xf7\x03\x49\xa9\x94\xb5\xa4\x58\xbf\x32\xf0\x8b\xa9\x48\x20\xb5\x83\xe2\x16\x5c\x96\x0a\xdd\x2a\xae\x17\xe3\xc2\xbd\x99\x25\x7a\xe0\x21\x5b\x48\x85\x21\x77\xeb\x42\x24\xda\x9e\xdc\xe5\x93\x7b\x53\x6f\xef\x66\x99\x96\xb9\xbf\x34\x41\xa5\x82\xdc\xca\x75\x27\x5a\x89\x48\x77\x13\xf6\x55\x04\xfa\xcd\xd7\x42\x54\x4e\x7b\x7f\x4b\x80\xff\x5f\x3e\xbf\x65\xe0\x7f\x4f\x12\xb7\x60\x4b\x47\xa9\xf5\xd4\x83\xef\x2c\xa1\xf3\x7a\xd3\x00\x63\xec\x09\xae\x88\x22\xaa\x74\xee\xf0\x8c\x22\xff\x90\x4f\x30\x67\x85\xde\xf7\x97\x4d\xf8\x11\x1c\x31\x7d\xd5\x57\x8d\x97\x3d\x41\x01\xff\x46\x65\xb7\x27\xd1\xe6\xf7\x22\xda\xdc\x18\x0a\xf8\x37\x8d\x60\x5b\xe7\x48\xdb\x01\xd9\xa6\xc2\x00\xd2\x0b\x32\xc9\x7d\xe2\x90\x1e\x4b\x6b\xcc\x67\x52\xe7\x3d\x76\x4e\xb9\x58\x3e\xa2\x32\x8a\x02\xc4\xf8\xd1\x45\x69\x08\x80\x9d\x76\xab\xf3\xc4\x1e\x57\xec\x78\x51\x7a\x48\x8e\x06\xeb\xa6\x43\xd5\x32\x2b\xbb\x79\xc5\xdc\x81\xb9\xb9\x63\xde\xb8\x40\x3c\x26\x55\x87\xc9\x9e\xe8\xe1\xa3\x75\xe8\xb9\xdf\x09\x30\x70\xe3\x42\xbe\x6d\xa9\xb6\xfe\x82\x15\xc6\x94\xb6\xe6\x6d\x06\x95\x45\x17\xf6\xd3\xed\xfc\xa8\x6f\xe7\xad\x2d\x2b\xf5\xfd\xbe\x7d\xe3\x4a\xe3\x24\x3c\x19\x58\x9e\xa4\x90\x27\x03\xcb\xc3\x5d\x45\x77\x62\x64\x69\x88\x1b\x70\xac\x36\xb8\x90\x08\x41\x22\xca\x55\x0b\xb9\x3c\x91\x13\x71\x20\x3c\xba\x6d\x8f\x7d\x04\x94\x44\xa5\xaf\xd1\xbb\xe3\xbd\x4a\xb5\x08\x2f\x0f\x87\x3b\x93\xdc\x0b\x1c\xee\xdb\xbc\xc3\xa4\x22\x10\x05\x76\x2d\xe0\xa0\x63\x0c\x14\xcf\x8c\xae\x02\x11\x42\xe8\xd6\x54\xa7\xa6\xc7\xde\x7c\xe1\x49\x41\x65\x5c\x27\x62\x32\x08\x38\x4f\x46\xac\x93\x19\x8e\xfd\x92\xb3\x69\x1b\x91\xd6\x05\xf0\xd4\x5d\x69\x2b\xe5\xd9\xfa\x9b\x83\xad\xcb\xa1\x13\x57\x2b\xfc\x38\x9c\xa3\x38\xc9\x6a\xea\x5f\xea\x31\x52\x62\x04\xc6\xa9\x4e\x9f\x19\xb7\x74\x31\x40\x48\xdd\x29\x37\xf5\x92\x24\x6c\x60\x04\x4f\xf0\x4e\x8e\xc8\x26\xe4\xfc\x6f\xec\x2c\x32\xcb\x15\x39\x57\x06\x9f\x84\xce\x8c\x2f\x6a\xbd\xe8\xd5\x98\x11\xd6\xb6\x5a\x8b\xcb\x62\x6e\x80\x50\x9b\x2e\x1e\xf8\x02\xb7\x75\x6d\x24\xef\x57\xa7\x4b\xbe\x8f\xc2\x0c\x9b\x3b\xe0\xf7\x67\x6b\x4f\xe5\xcd\xcd\x4e\x2b\xa2\x90\xdb\x9a\x2f\x81\x13\x5f\xa8\x81\xac\x8b\x2e\xbe\x32\x22\xe0\xd4\xe1\x5d\x2f\xae\x67\x53\xc5\x00\x82\x1d\x87\x94\xd3\x31\x57\x69\x26\x9c\x80\x4a\x9a\x51\x23\xa1\x35\xce\x43\xad\xe5\x9f\x6e\x99\x6a\xba\x06\x9d\x5c\xfa\x18\x4a\x97\xb3\x38\xab\x80\x31\xc6\x2c\xb1\xd0\x5b\x8c\xc3\xd4\x99\xfb\x7a\x2c\x6b\xf5\x75\xb1\x54\x16\x68\x5c\x10\xd1\xcc\x16\x5d\x11\x5b\x58\x65\x1d\xe5\x34\xe7\xdb\xb6\x13\x77\x60\xbb\xbd\xa8\xeb\xfe\x2b\x8f\x11\xea\xed\xee\x20\x79\x2d\xfe\x16\x4e\xd0\x9b\x3c\xd7\x8d\x43\xb4\xf9\x46\x63\x37\xcb\x76\xf7\x12\x34\x33\x53\x30\x61\x9b\x32\xa1\xc0\xbd\x02\x45\xd7\x09\xd7\xba\x0e\xcb\x0e\x55\xd0\xb9\x9a\x57\xd8\x37\xa0\x3e\x00\xbb\xc6\x9b\x78\x3d\x0b\xc5\xa6\x76\x89\x4e\x83\x5c\x56\x29\x25\x67\x15\xfe\x12\x40\x8f\x03\xde\x6a\x36\x8f\x04\x9b\x7b\x9a\xd1\x16\x71\xdd\x9e\x94\xde\x2d\x50\x09\xee\x34\x04\xed\xa7\x29\xc2\x0b\x3b\x8c\x5a\x1c\x4e\x27\x4e\xe7\xae\x48\x15\x54\xce\xab\x8a\x91\x59\xc7\x06\x68\xe0\xfd\x03\x33\x71\xf8\x21\x1e\xfb\xbb\xd0\x31\xe4\xed\x5f\xb9\x2c\xde\xea\xfc\xd4\xdb\xb8\x10\xd1\xdb\x23\x36\x3e\xdc\xfe\x2d\x8b\x95\x43\x43\xdc\x23\x3a\xd4\x2d\x96\xc1\x9b\x1e\xea\x3b\x36\x36\xfa\x03\x7f\x6b\x9c\xbf\xbe\x1d\xed\xec\x1e\x5a\x05\x5f\x1d\x57\x4b\x38\xa5\x63\x30\x7e\x0d\xd6\xe0\xf7\x13\x2b\xe6\x8f\x56\x89\x16\x17\x85\xdf\x36\x99\xb9\x15\x5f\x38\x90\x70\x3a\x5e\xd7\x36\x85\xf6\x97\x2c\x34\x04\x6b\x97\xe9\xd1\x48\xa4\x1d\x66\xd5\x2e\x7f\x9b\x2b\xed\xc5\x7e\x66\x84\x32\xb2\x90\xb3\x8a\x8a\xb2\x0d\x68\x82\x6c\xca\x50\x37\x30\x65\x5c\xca\x7a\xee\x55\xfd\x1c\xc8\x89\x88\x56\xea\x9a\x9b\x78\xb5\x96\x12\xe1\xb6\x44\x55\x45\x8a\x59\x45\x5c\x95\xd6\x64\x3c\x43\xe8\x06\x6f\x20\xcb\x24\xd8\xb4\xaa\x70\x30\x11\x6a\xe6\x1a\x24\x96\xac\x51\x45\xe3\x1d\xff\x22\x27\xe5\x84\xa9\x12\x74\x6a\x3d\x64\xa5\x92\x7f\x2f\x83\x06\x3e\xe1\x8a\x8f\xaa\xc0\x2e\xb1\x6c\x1e\xe3\xaf\x46\x39\x81\xa7\x15\x41\xd1\x2a\x79\xda\xde\x0c\x4e\x0a\x46\x98\x45\x44\x4e\xf7\x4f\x61\x7d\x1a\xc4\xcd\x46\x78\xbf\xd0\x71\x22\x3a\x40\x99\xc5\xb5\x4c\xa8\x22\x06\x84\x1f\xe4\x65\x26\x18\x9f\x4e\x33\xe9\x4a\xa2\x54\xc7\xef\xdf\x0f\x80\x2c\x29\xe3\x13\x6d\xe9\xbf\xcc\x0a\x39\xcd\x00\x5d\xd3\x38\xdc\x3b\x8f\x91\x42\xb0\x7a\xf1\x0d\x07\x38\x0a\xce\xdb\x0e\x88\x80\xf4\x8c\x4f\x6c\x0a\xeb\xe7\xe3\xad\x09\xed\xd3\x4d\xad\x54\x10\x54\xdb\x40\x1d\xa9\x04\x3d\x1c\x1f\x6d\x1d\xf4\xb0\x31\xe5\x62\xa9\xf5\xc7\x58\x82\x79\x6d\xc4\xc7\x4a\xa1\xc5\x08\xf3\xf1\x8c\x40\x60\x00\xf0\xd1\x72\x3b\x07\xfa\x48\xaf\x58\x03\xf7\x91\x60\x44\xaa\x28\xe2\xbc\x02\x4f\x55\xd4\x90\x20\x71\x6c\x26\x2e\xcc\xd5\x30\x71\xfb\x5b\x93\x50\x40\x9e\xaa\x4d\x3f\x39\xb1\x9e\x42\x4c\x9e\x9c\x3b\x4f\xd5\xa6\x9f\xaa\x4d\x3f\x74\xac\x4e\x4d\x20\x78\x2a\x39\xbd\x76\xc9\x69\x58\xb9\xad\x1c\x79\xb5\x35\x7f\x2a\x3e\xfd\x5f\xeb\x0a\x7e\x7c\xc5\xa7\xeb\x5a\xc1\x42\x53\xe1\x53\xf4\xc8\x7f\x21\x01\xe3\x29\x7a\xe4\xb1\x55\xa0\xbe\xb5\x2b\xe7\xa9\x16\xf5\x53\x2d\xea\xa7\x5a\xd4\x4f\xb5\xa8\x9f\x6a\x51\x3f\xd5\xa2\x7e\xaa\x45\xdd\x08\xc8\x7b\xaa\x45\xfd\x54\x8b\xfa\xa9\x16\xf5\x53\x2d\xea\xa7\x5a\xd4\x4f\xb5\xa8\x37\x20\xa0\xa7\x5a\xd4\x4f\xb5\xa8\x9f\x6a\x51\x3f\xd5\xa2\x2e\x9e\x6a\x51\x3f\xd5\xa2\xfe\x7d\xd5\xa2\x46\xfb\xe1\x6f\xa7\x20\x75\x8b\x34\xfd\x54\x90\xfa\xa9\x20\xf5\xef\xad\x20\xf5\x03\x15\x9f\xbe\x93\x88\xc4\x15\x65\xa5\x5f\xbf\x39\xff\xf8\xe6\xd5\xe9\xe5\x9b\xd7\xac\x8b\x5a\x0e\xb8\x58\x7c\x95\xe2\xa8\x72\x93\xb4\x47\x7d\x9a\x8b\xc4\xe1\x67\xd0\xdb\xf6\x67\x87\xfb\xd4\xa6\xc7\x2e\x04\xd2\x76\x2e\x32\xc1\x8d\xb0\x3a\x07\x59\x35\xeb\x44\x12\xd5\x33\x7e\x2a\x69\xfd\x54\xd2\xfa\xa9\xa4\xf5\xef\x3a\x3a\xe3\x29\x7e\xe1\xf7\x12\xbf\xf0\x1b\x2a\x69\x5d\xb9\x04\x9f\xea\x5a\x6f\x50\xd7\xfa\x16\x42\x22\xfe\xeb\x54\xb8\xc6\x29\x3f\x96\x32\xd7\x4f\x25\xad\x9f\x4a\x5a\x3f\x95\xb4\x7e\x2a\x69\xfd\x54\xd2\xfa\xa9\xa4\xf5\x53\x49\xeb\x35\x84\x94\xa7\xba\xd6\xff\x75\xd4\xd0\xc7\x56\xd7\xba\x6a\xa6\xdb\xf8\x1c\x3d\x29\xd8\xbf\x43\x05\xfb\x29\x41\xe0\x71\x15\xb7\xbe\x25\x5d\xf8\xa9\xcc\xf5\x23\x2e\x73\xdd\x66\xb5\xb8\xb1\x27\xf6\x77\x51\xeb\xda\xaf\xcc\xc5\xc2\x30\xac\x16\x52\xae\x47\xb6\xd8\xfe\x48\x7c\xc9\x85\x29\xb3\x22\xb6\xe0\x7c\x2f\x0a\xdf\x30\xe1\x59\x86\x9a\xaf\x53\x6c\xe3\x22\x3b\x44\x0e\xd5\x52\xda\xc1\x12\x12\xc5\xf2\x30\x0e\x8e\x14\x99\x94\x19\xcf\xa3\x5a\xc9\x62\x84\x61\xd3\x15\xe9\x18\xc2\x0c\x20\x1c\xc0\x05\x78\x41\xac\x13\x38\x45\x0a\x8d\x27\x4a\x15\x50\xa2\x4f\x89\x66\x09\x40\x03\x0e\xc3\x48\x5b\x0f\x44\x2b\xbe\xd8\x0b\x13\xdc\xe0\x6a\x64\x35\x87\xcf\xe2\x84\x75\x2b\x73\x62\xfd\x1d\x43\xcc\xbc\xbf\x03\x8e\x90\xfe\xce\xe1\xd1\xf1\x73\xf6\xbd\xfc\x4b\x7f\x27\x9a\x1d\x14\x7e\xf1\x72\x7a\xa0\x1a\xcb\xd9\xad\x76\xf6\xcf\xa5\xe9\x0a\x6e\x8a\xc3\xfe\x4e\xf3\x15\xe0\x3f\x35\x26\x7a\xc5\x41\xfb\x0b\xaa\xfd\x8e\xb5\x29\x2c\xcd\xfe\xf3\x67\x70\x88\xf1\x41\x72\x78\x74\x8c\x71\xbf\xd5\x88\xed\x62\x9c\x0b\x01\xf1\x64\x08\xc6\x8a\x55\x47\x41\xb9\x54\x3a\xda\x18\x53\x33\x5c\x71\x96\x88\x1c\x10\x92\x12\x3d\x19\x48\x05\x7c\xc4\x2e\x91\xd2\x4e\xe8\x00\x0e\x42\xc1\x68\x3e\x8a\x2c\x28\x6c\x2a\xad\xd5\x96\x04\x6b\x41\x97\xfc\xd4\xaa\xda\x4b\x30\x8a\xc4\x43\xc2\xd8\xb1\x8d\x1e\xf9\x87\xc8\xb5\x5b\x85\x69\xae\xd3\x32\xf1\x71\xb4\xc6\x2b\x03\x40\x02\xa9\x48\x64\xea\x54\x44\x3e\x9d\xe6\x9a\xb0\x45\xc0\x21\xea\x26\xe4\x82\xfa\xe6\x58\x1a\x53\x2b\x53\x4e\x82\xea\x6f\x37\xa5\x4b\x36\x3e\xab\x5c\x0f\x17\x45\x90\x55\x62\x5e\xea\xa9\x3e\xe4\xe5\x53\x69\x15\x7c\x45\x4f\x21\xc8\xab\x08\xdb\xd4\x45\x2d\x38\x8a\x7d\x74\x11\x0a\x94\x97\x56\x7b\xed\x93\xd2\xf3\xa8\x95\x9e\x64\x41\xe4\xec\xc6\x32\x6a\xcf\x0d\xa2\xf7\x3f\x4b\x0e\x08\x76\x4b\x65\xd4\x57\xd1\x79\x09\x29\x66\x18\x05\xdb\x0a\x83\x25\xd1\x64\x13\xdd\x07\x1f\x31\xd3\xc4\xf1\x8a\xca\x2f\x18\x9b\x86\x61\xa0\x31\x37\x88\xea\x9e\x21\x1c\xa2\xbd\x54\x5d\xea\xc7\x4c\xea\x92\x6c\x7d\xc6\x07\xd2\x1a\x31\xb1\xd3\x01\xef\x4f\x52\xe6\xb9\x50\x45\x36\x07\x9c\x25\x8c\xcf\x39\xec\x1d\xed\xf9\x38\x1e\x6e\x4e\x20\x1c\xa8\x79\xed\x00\x1c\xf7\x60\x5e\x08\xd3\x71\xb6\x65\xc7\x99\x1a\x00\x5f\x85\x0e\x46\x26\x8f\x43\x66\x05\x23\x30\xca\x88\xa2\x43\x86\xb9\x48\xb8\xaa\x0c\xae\x54\xe1\xfd\x60\x8a\xa5\x62\xba\x90\xd9\x64\x99\x93\x1f\xd5\x02\x87\xc0\x93\xbe\xf8\x30\xfa\x22\x82\xc4\x51\xa4\x97\xfc\xc7\xcd\xc1\xfc\x36\x3c\x94\xef\xea\x03\x78\xe4\xa7\x13\x7d\x52\xee\xf0\x19\xa9\x92\x10\xdd\xc7\x0e\x7b\xcf\x7b\x07\x14\xbb\xc3\x32\x9e\x8f\x20\x5a\xd5\x4e\x8a\xfa\x9e\xfb\x03\x07\x22\xe1\x2b\x38\x25\x38\x77\x1a\x62\xcf\x9d\x93\xff\x93\x73\x35\x12\x3d\x27\x4f\xff\x1f\x38\xc8\xc1\x2b\x41\xd1\x2b\xde\xa5\xe1\xc3\xcf\xc1\x7e\x1d\xcd\x0a\x46\xa3\x0d\x88\x53\xcd\x15\xc1\x50\xc2\x6a\x14\x0b\xa5\xde\xaa\xba\x77\xfc\xf4\xfc\xcc\xce\xdd\xb9\x13\x29\x4a\x16\xd2\xac\x7b\x51\x74\x76\x18\x13\x54\xcf\x5e\x70\xde\x1f\x0d\x54\x52\xa5\xd2\xff\xa5\xf3\x35\x5a\xa1\x54\xe9\x58\x66\x9f\x08\xae\x20\x84\xf8\x2c\x20\xda\x0e\xec\x06\xbc\x7e\x7f\x61\x19\x43\xaa\x27\x56\x6c\xdc\x05\x2c\x21\x28\x7b\x60\xd5\xc5\xa3\x17\x31\x88\xd1\x1e\x04\x20\x0b\x65\xca\x3c\x40\x8a\x87\x48\xa7\x44\xab\x61\x26\x7d\xb2\x05\x06\x78\xc6\xba\x74\x15\x4d\xaf\x43\xfa\x8b\xe5\x20\x42\xa5\x9e\x2b\x93\x21\x3e\x31\xd2\x24\x5d\x8c\xc7\x2e\x4b\x99\x52\xd0\xb5\x55\x64\x84\x12\x39\xb0\x67\x05\x09\xa7\x70\x5a\x72\x61\x5f\x21\xba\x34\x0f\x58\x05\x14\x12\x85\x4a\x4d\xa0\x2f\x02\x61\x8c\xe3\xee\xf9\x04\xe5\xc5\x0f\x31\x5c\x5c\x80\x8a\xb3\x3f\x3d\x28\x78\x92\xd5\x15\x2e\xe9\xd0\xdf\xa6\x61\x8c\x0f\x44\x76\x21\x32\x91\x14\x2b\xd0\x7b\xdf\x47\x03\x88\xe2\x93\xed\xe2\xa2\xef\x64\xcc\x67\x90\xab\x00\xba\x59\xd5\x8b\x69\x79\x19\x01\x08\x38\xf9\xe5\x9a\x1b\xcf\x18\xeb\x97\x74\x78\x90\xc0\x2d\xb1\x57\xf4\xda\x40\x61\x07\x35\x27\xe0\xca\x1a\x34\xe3\xd9\x10\x8d\x19\x8d\x5e\x1a\x3d\x40\xee\x16\xb8\x84\x17\x46\xa5\xb6\x87\xcf\x44\x3a\xe0\xba\xe0\xfb\x91\xe3\xbf\xa2\x42\x7a\x8f\xab\xbf\x21\xfc\xf2\x38\xd0\x50\x7b\x39\xbb\xc3\x3a\x11\xa2\x08\xec\x31\x8f\x58\x97\x63\xd7\xee\x4d\xbc\xfa\x1e\x92\x1c\x76\x95\x56\x5d\x5a\x9e\xca\x81\xdf\xa3\xb8\x46\xee\xea\x7b\xd9\x83\x9c\x69\x35\x82\x7c\x02\x54\xd8\x16\x28\x47\x21\x10\x52\x0f\x8c\xce\x44\x81\xa2\x53\xc8\x6e\xc8\xc5\x44\xcf\xf0\xee\xb3\x37\x1d\xb0\x7c\x9d\x2f\x59\xf5\xf5\xae\xff\x75\x23\x85\xea\xbb\xf5\xf8\xac\xa5\x75\x1b\xd0\x9d\x1a\x4d\x6b\x2f\x5b\xed\xa6\x6b\x79\x60\x81\xc7\x6e\x41\xce\xdd\x93\x1e\xfb\xa8\xf5\xd8\xad\x2b\xc5\xad\xb3\xe3\x0b\xdf\xb0\xa5\x21\xb9\x7e\x54\x6e\x6c\x4d\x86\xbc\x9e\x09\x9f\x76\x3f\x63\x70\xc9\xa7\xea\x18\x55\xc4\x31\x58\xcc\x35\x16\xf4\xe4\x5e\x3b\xe1\xd3\x27\x05\xf1\x31\x29\x88\x4f\x0e\xc5\xea\x9a\xfc\xc6\x1c\x8a\x6d\xb7\xd6\xdd\x5d\x93\xb1\xe8\xb4\xe4\x72\xac\x48\x58\x55\xef\x49\xa4\xb9\x92\x3d\x1e\xc5\xb0\x61\x8b\x40\xdc\x70\x7c\xf8\xa4\xec\xb9\xe2\x13\x97\xf1\xe2\xcc\x5a\xa4\x89\xc4\xef\x16\x6d\xd0\xd6\x7f\x6e\x44\x9c\x56\xed\xf9\x3c\x49\x00\x45\x0b\xd2\xd3\x44\x91\xa0\x10\xa6\x58\x50\x3f\x01\x6a\x65\x9d\xcb\xdb\x6a\x89\x54\x93\xe2\xcb\x94\xab\x75\xae\xf1\x96\x47\xec\x35\x7c\x6d\x3c\xd6\x77\xcb\x88\xa1\x08\x1f\x29\xe5\xc2\x3e\x96\x6e\x53\xb0\x06\x75\x5a\xd2\x63\x9a\xb5\x68\x9a\xc0\x19\x96\xaf\x24\x45\x08\x34\x2b\xfc\xa3\xe4\xcc\x9a\xad\xb7\x6d\xec\x4d\x04\xab\x46\xf9\x47\x4e\x88\x71\x31\x75\x21\x3c\x31\x38\xd7\x62\xd7\xb4\xe9\xb1\x53\x45\x71\x67\x4e\x15\x73\xba\xdb\xa5\xc8\x27\x8e\xcf\x70\x65\x48\x29\x07\xfd\x29\xf4\x96\xd3\x74\x42\xc9\x0d\x2f\x81\xaf\x0b\x75\x45\x46\xae\xe0\xc6\xf0\x75\xed\x6e\xe5\xd6\x77\x75\x0c\xdb\xa6\x77\xa3\x58\x9e\x27\x21\xf3\x29\x51\xe9\x49\xec\x59\xeb\x10\xde\xad\x79\xf2\x41\xad\x68\x80\x9a\xf1\x01\xc6\xb9\x8a\xf5\xbf\x6e\x67\xe4\x2d\x17\xb6\xe3\x04\xb5\x0b\x2b\x17\x64\xe0\x0e\xb8\x2a\x86\x50\x90\x68\x04\x14\x4a\xff\xa9\xbf\x93\x6b\x8c\x03\x37\x7a\x58\xf4\x77\x7e\xe9\xb1\xf7\xba\xf0\xe0\x19\x29\xeb\x3a\xe8\x3c\xbc\xcb\xcf\x7f\x26\xf4\x21\x83\x21\x01\x43\x2e\x33\x26\x31\xf8\x03\xee\x71\x78\xf2\x7e\xc2\x8e\x63\x4c\x42\x2f\xf6\xdc\x6b\x15\xb8\xf3\x20\x6d\x61\x90\x57\x8b\x08\x86\xbe\x10\xb7\x89\x79\xa5\x40\x24\x79\x21\x66\xcb\x76\x73\x8b\xe2\x6a\xd1\xeb\x56\x50\xda\x79\x34\xb0\x2a\x30\x8c\x7d\x8f\x2f\xf1\x1a\x5a\x6d\x91\x45\x91\x0b\x70\x64\xac\x07\xe5\x79\xfb\x94\x0f\xf7\x64\x34\x02\x8f\xdd\x08\x17\xdf\x6b\x01\x40\xab\x9b\xcf\x0a\xf7\xec\x2f\x08\xa4\xf4\xae\x9a\x95\xdf\x36\xb3\x9f\xeb\xed\xa3\xf5\x1e\xeb\x66\x14\xd2\x2b\x3b\x62\x13\x59\x33\xe3\xe5\xb0\x77\x32\xd4\x4c\xea\x31\x4c\x80\x80\x90\x97\x0e\xab\xbc\xe4\xcc\x41\x47\x41\x4c\x8c\xa9\x55\x73\xbc\x7d\xb9\xeb\xa6\x06\xd3\x98\x6a\x1f\x99\x22\x58\xd1\xcb\xee\x47\xfd\x5b\x61\x1f\xad\x37\x6d\xb3\x8c\x56\x8e\xc6\x5a\x75\xd1\x9e\x24\xd5\xdf\xa0\x39\xb4\xaa\x91\xdf\x8d\x05\xb4\x72\x00\x6e\x72\x51\x3f\xc9\xe3\xbf\x17\x79\xfc\xc9\x0c\xf9\x10\xb7\xcf\x1d\x1b\x20\x2b\xd8\x65\x8b\x6f\x9f\x0a\x9c\x1c\xa1\xe7\x98\x58\xf0\x05\x47\x70\x2b\x88\xe0\x3a\xb7\x10\xa1\xd7\xad\xba\x83\x3c\xc8\x1d\xf2\x43\x7b\x1d\xa8\xd4\x4a\x47\xee\x07\x12\x5f\x09\xcb\x4e\xb1\x7e\x65\xe0\x17\x53\x91\x00\xd6\x17\xa5\xa1\x3a\xd8\x32\xba\x64\x5c\x2f\xc6\xa1\xf7\x30\x4b\xfe\xc0\x4d\xb6\x10\x17\x03\xa2\xdf\x85\x48\xb4\x3d\xc3\xcb\x27\xf7\xa6\xde\xde\xcd\x32\x2d\x73\x7f\x87\x82\xae\x05\xee\xaf\x75\x27\x5a\x01\x18\x72\x13\x46\xfe\x0a\x39\xd4\x8d\xd7\x42\x92\x75\x6b\x7f\x4b\x6a\x75\xbe\x7c\xbe\x75\xad\xce\x05\xa5\x8e\x1d\x45\xac\x3a\x99\xeb\xd2\x79\xbd\x1c\xfd\x06\x35\xee\x43\xa5\x4f\x4f\x74\x45\x94\x24\xaf\x73\x57\xe9\x22\x4a\xef\xf1\xd0\xc3\xac\xd0\xfb\xfe\xea\x09\x3f\x42\x1e\x4d\x5f\xf5\x55\xe3\x65\x4f\x25\x24\x7f\xa3\xe2\xdc\x93\xa0\xf3\x7b\x11\x74\x6e\x5c\x42\xf2\xb7\x5f\xf9\xb0\xce\x96\xb6\x2b\x80\x98\x0a\x03\x85\x00\x90\x53\xee\x13\x9b\xf4\xa5\x56\xc6\x7c\x26\x75\xde\x63\xe7\x84\xb1\xe7\x83\x96\xa3\x18\x5a\xc4\x05\x59\x18\x1f\xc7\x8b\xb2\x71\xb1\xde\x7c\xb2\xd8\xed\x8a\xbd\x2f\x4a\x0f\xdb\xde\x60\xe2\xb9\x0b\x16\x6e\x4c\x4d\x40\x84\xb7\x2b\xf8\xe3\x0e\x7c\xe3\x2a\xf1\x75\x4b\x3a\x4c\xf6\x44\x0f\x1f\xad\x97\x27\xfa\x9d\x54\x95\x6c\x5c\xcd\x77\x27\xed\xd6\x5f\xb5\xc2\xe6\xd2\xd6\xbc\xcd\xee\xb2\xe8\x12\x7f\xba\xb1\x1f\xf5\x8d\xbd\xb5\x01\xa6\xbe\xdf\x77\x64\x83\x69\x1c\x8c\x27\x3b\xcc\x93\x78\xf2\x64\x87\x79\xb8\x9b\xe9\x8e\x6d\x31\x0d\x39\x04\x0e\xd8\x06\xf7\x13\x21\x8f\x47\x68\x84\x01\xc1\x2d\x72\x42\x0e\x84\x2f\x8d\xd8\x63\x1f\xa1\xc4\x96\xd2\xd7\xe8\x1d\xf2\x5e\xa9\x5a\x84\x98\xaf\xa5\x38\x93\xdc\x4b\x22\xee\xdb\x1c\x32\x27\x11\x7c\x9b\x5d\x0b\x38\xf2\x18\x43\xc5\x33\xa3\xab\x55\xac\x20\xf4\x6b\xaa\x53\xd3\x63\x6f\xbe\xf0\xa4\xc8\xe6\x58\x42\x49\x4c\x06\xa1\x48\x88\x11\xeb\xe0\x01\x63\xbf\xe4\xac\xda\x46\xea\x75\x01\x40\x75\x57\xdc\x4a\x69\xb7\xfe\xe6\x60\x12\x73\xa5\x2d\xe3\xc4\xcf\x50\x24\x23\x86\xd6\x9b\xfa\x97\x7a\x6c\xfd\xb8\x7c\xd7\x54\xa7\xcf\x8c\x5b\xba\x18\x58\xbe\xee\xd4\x9b\x7a\x11\x13\x36\x30\x02\xa5\x7e\x27\x47\x64\x3a\x72\xfe\x3b\x76\x16\x59\xef\x8a\x9c\x2b\x83\x4f\x62\xc6\x1e\x65\xab\x2c\x7e\x35\xe2\x00\xb6\xad\x56\x7d\x50\x96\xa0\xb1\xbe\xe1\x06\xe5\x0d\xd3\xc5\x03\x5f\xe0\xf6\xae\x8d\x64\x8d\x1c\x99\xf7\x51\x98\x62\x73\x07\xfc\xfe\x6c\xed\xe9\xbc\x25\xf3\xd4\x0a\xb0\x99\xb6\xe6\x4b\x0a\xd2\x2e\xd4\x4f\xd6\xad\x4f\xbb\x32\xac\xe0\xd4\x55\x4c\xad\xc6\x14\xc4\x41\xa1\xd5\x02\x12\xb0\xed\x80\x36\x3a\xe6\x2a\x75\x90\x1b\x79\x48\xb2\xac\x61\x99\xc6\x10\xa4\x35\xe8\xd1\x2d\x51\x46\xd7\x4d\xa8\xf2\xa8\xad\xd1\x24\x9a\x8c\xd4\x4a\x2a\x9b\x8f\xc3\xd4\x39\xfc\x7a\x7c\x6b\xcd\x8b\x63\xa9\x7c\xd0\xb8\x2a\xa2\xe9\x2d\xba\x2c\xb6\xb0\xe3\x3a\xf2\x69\x4e\xba\x6d\x3b\xee\xca\xda\x7b\x51\x37\x14\xac\x3c\x50\xa8\xdf\xbb\x23\xe5\xb5\xfd\x5b\x38\x4b\x6f\xf2\x5c\x37\x8e\xd3\x96\x5b\x8e\x7d\x2d\xdb\xe7\x4b\x50\xde\x4c\xc1\x84\x6d\xca\x84\x02\xcf\x8c\xb0\x4c\x98\x0a\xa5\xd6\xeb\xfc\x76\x98\xb4\xba\xe2\xbc\xc2\xd2\x21\x27\x10\x58\x38\xde\xce\xeb\x99\x33\x36\x35\x62\x74\x1a\x84\xb3\x4a\x65\x39\xab\xb0\x9b\x50\x45\x33\x14\xf0\xcb\xe6\x91\xb0\x73\x4f\x33\xda\x22\x56\xdc\xd3\xd3\xbb\x05\x0a\xc3\x9d\x86\xb5\xfd\x34\xc5\x7a\x95\xae\xe8\x21\x0e\xa7\x13\x03\xfb\x56\x24\x0d\x88\xb4\xe2\xaa\x5a\x74\xad\x8e\x12\xdd\x28\x20\x8d\x39\xfd\x94\x0a\xee\x8b\xc9\x16\x3a\xae\xa1\xf8\x57\x2e\x8b\xb7\x3a\x3f\xf5\x06\x31\x2c\x11\xeb\x4b\x80\x3d\xdc\xfe\x2d\x8b\xbf\x43\xab\xdd\x63\x3b\xd9\x2d\xb6\xc4\x9b\x9e\xec\x3b\x36\x4f\xfa\x53\x7f\xbb\x17\x41\x7d\x63\xda\xb9\x3f\xb4\x0a\xce\x3e\xae\x96\xf0\x4c\xc7\x6a\xfc\x42\xac\xc1\xfe\x27\x56\x09\x18\xad\x92\x39\x2e\x0a\xbf\x77\x32\x73\xcb\xbe\x70\x20\xe1\x9c\xbc\xae\xed\x0c\x6d\x32\x59\x72\x08\x49\x23\xd3\xa3\x91\x48\x3b\xcc\x2a\x65\xfe\x86\x57\xda\x2b\x05\xcc\x08\x65\x64\x21\x67\xd5\x4a\x3f\x5b\x00\x69\xcb\xa6\x70\x75\x03\x93\xc7\xa5\xac\xc3\xee\xd5\x0f\x83\x9c\x88\x68\xa5\xae\xb9\x89\x57\x6b\x29\x25\xde\x88\xb2\xaa\xe5\x02\x56\x51\x58\xa5\x35\x59\xda\x10\xd3\xdb\x5b\xd3\x32\x09\x06\xb0\x6a\x4d\x80\xa8\x20\xdb\x1a\x74\x96\xac\x51\xa5\x9d\x50\x64\x98\x2a\x41\xed\xd6\x43\x07\x53\xe1\x94\xf4\x09\x57\x7c\xd4\x0a\x23\xd3\x80\x42\x8a\x80\x21\x4f\x2b\x12\xa4\xd5\x03\xb5\xbd\x28\x9c\x8c\x8c\x15\xbc\xb0\x32\xaf\x7f\x0a\x70\x91\x08\xb6\x0f\x81\x95\x42\xc7\x89\xe8\x00\x79\x16\xd7\x32\xa1\x8a\xeb\x88\x47\x50\x66\xc2\xc3\x16\x60\xda\x5b\x65\xfc\xfe\xfd\x80\xd4\x9f\x32\x3e\xd1\xf6\x10\x94\x59\x21\xa7\x19\x14\x6e\xf3\xd8\x20\x1e\x3c\x9f\x70\x09\xe2\x0b\x4f\xc9\x0c\xc0\x08\xa8\xa5\xcf\x98\x0a\xab\xe6\x03\xb9\xa9\x7c\x9c\x9b\x50\xa9\x20\x5a\xb7\x01\x42\x5f\x89\x9a\x38\x3e\xda\x3a\x6a\x62\x3d\xa2\xb5\x2c\x19\x32\xde\x4c\x37\x84\xb2\xf8\xc3\x55\x69\x60\x4f\xd9\xab\xd2\x14\x7a\xe2\x08\xf4\x95\x9d\x9a\x7a\xed\x8f\xea\xb2\xdc\xfd\xa5\x0f\x46\x95\xf1\xc1\x71\x52\x4e\x14\xd2\x37\x8c\x07\x6a\x72\xb1\x69\x2e\xc1\xbe\xbc\x06\x79\x57\xdf\xbd\x14\xee\x34\x7c\xc4\xc3\x36\x2e\x27\xdc\xca\x29\x3c\x85\x50\xe7\xf8\x77\xe7\x36\xc1\xf1\x6d\xc1\xf1\xfc\xce\x2e\x1b\x11\x36\xa2\x32\xef\x7a\x8a\xf2\x1c\xfb\x30\x15\xea\xf4\xfc\x0c\x23\xf0\x03\x6f\x24\x53\x4e\x18\x14\xd0\xff\x33\xab\x0e\x3f\x63\x51\x4f\x70\x0c\x7c\x31\x87\x69\x2e\x27\x3c\x9f\x33\x99\xda\x1b\x7c\x28\x45\xee\xd6\xbc\xd0\x8c\x1b\x03\x2e\x2c\x45\x06\x77\xe3\x9a\xcd\xb1\x8c\x34\xb4\x93\x1e\xe7\x13\x59\x12\xc0\xd5\x40\x61\xb8\xc8\x64\x3c\x2e\x07\x50\x40\xe0\xc3\xe9\xd9\x3e\x8d\xbf\x5b\xf1\x01\xef\x0f\x32\x3d\xd8\x9f\x70\x53\x88\x7c\x9f\xcc\xa4\x66\xff\xa8\x77\xd0\x9b\xa4\xdf\x58\x01\x17\x32\xd8\xf1\xf4\xe2\x65\xb7\x28\xf1\x61\xd9\xaa\xff\xcd\x68\x75\xce\x8b\x55\x35\xc9\x5d\x33\xe2\xb9\x50\xd8\x90\xfd\x8f\x8b\x0f\xef\xd9\xd4\x7e\xbb\x0b\x42\x0c\x0a\xb5\x79\xce\xe7\x96\xe7\xc0\x24\xf6\x42\xa9\x4a\x31\xe3\x59\x09\xc2\x2f\x1f\x71\xa9\xac\xdc\x65\xef\xdb\x04\x48\x3f\xf2\x86\x68\x07\x27\x19\x81\x72\xd5\x37\x72\x0b\x83\xc5\x6a\x63\x05\x98\x49\xda\xc8\x1c\x7e\x70\x66\xc1\xad\x47\x30\xcd\xa5\xce\x57\x97\xef\x76\xcd\x88\xc6\x89\x95\x11\x55\x93\x34\x93\x8b\x8c\xa3\x8c\x31\xb1\x0c\x95\xfb\xc8\x3d\xbf\x42\x20\x76\x72\xba\x0e\x00\xd6\xc9\xf4\xd8\x8f\xfa\x5a\xe4\xc4\x7b\x8d\x87\xd9\xa4\x6b\x63\x2c\x47\x63\x91\x33\xf7\xfa\x1e\x43\x2e\x64\x2a\x40\x62\x7a\x22\x0b\xaa\x1d\x0a\xf7\xac\x48\x19\x84\x56\x31\x93\x08\xc5\x73\xa9\xe3\xf4\x0b\x44\xaf\xe5\xbe\x4b\x36\x82\x34\x13\xb8\x00\x15\x3b\xb8\x1d\xc6\x1e\x8b\x4c\xd8\x68\x69\xcd\x11\xcb\x20\x70\x61\xd7\xe6\x19\x8f\xe8\xdc\xae\xa9\x04\xd4\xab\x46\x40\x7f\x6d\x67\x7e\x4b\x25\xe1\x86\xb7\xa2\x9a\x35\xfc\xf5\xab\xee\x43\xf7\x48\x94\xba\x3f\xd6\xd7\x54\x90\x1e\x3c\xef\xa1\x08\x88\x5b\x72\xb4\x36\xbd\xfa\xb8\xc6\x8d\x18\xe1\x4d\x2f\xa3\x1e\xd7\x2c\xba\x8f\xed\x28\x6a\x1c\xcc\x9f\x2c\x3b\x2e\x2b\x00\x8a\xe2\x5a\x08\xe5\xc7\xd5\x63\xa7\x98\xd7\x4e\x0e\x7e\xdb\xfc\x84\x75\xd9\xd5\x7b\xad\xc4\xd5\x09\xc1\xe3\xe1\xd3\x39\x2a\x96\xc9\x98\xab\x11\xf2\xc3\x10\xee\x00\xc2\xe0\xb5\x57\x40\x0a\x8d\xd8\xbd\x73\x42\x71\x23\x19\x8c\x20\xb7\xaa\x43\xec\xd9\xd7\xfd\x55\x0c\xc6\x5a\x7f\xbe\x3a\x01\x98\x3d\x74\x36\x63\x58\x2f\x54\xa2\xb2\x97\x9d\x0a\x8e\xaa\x6b\x6c\x4d\x55\xcb\x0b\x3f\x46\x03\x9a\xd2\xa9\xb7\xad\xc4\x6a\x4f\x5f\x31\x10\x02\x85\x48\x45\x1a\x0e\x16\x5e\xdb\xa4\x5e\x11\x05\x1b\x58\xd3\x1e\xd8\x52\xf3\x99\xf8\x49\x7d\x56\xfa\x5a\xbd\x45\xaf\x0a\x4a\xb4\x50\xf8\x1d\x23\x26\xa0\x6d\xf4\xfe\x68\x70\x75\xdf\xd7\xda\xec\x99\xfa\xd8\x54\xe7\xda\xf0\x2c\xd0\xa2\x47\x87\x60\x99\x52\xe6\xe6\xd5\xa4\x7a\xe7\x25\x0b\x8b\xe0\x76\xa8\xe7\x8a\x89\x13\xa0\xf7\x95\xa3\xda\x2b\x10\xe7\x05\x44\xde\xfa\xcd\xdf\x26\x02\xca\x1d\x96\x87\xe0\x1e\x5b\x48\xd3\x91\x1c\x5d\xf1\xeb\x46\xf1\x17\x15\x63\x3d\xd6\x56\x4a\x9d\x7a\x63\x0f\x07\x0d\x92\xb1\xb3\x82\xd0\xb5\x5d\x99\x37\x57\x36\x19\x85\x49\x84\x3e\xec\x01\x79\xda\x66\x08\x80\xd8\x8b\xbf\x06\xf7\x39\x7d\xff\x14\xdc\xf4\x98\x83\x9b\x9e\xe2\x7d\x7e\x2f\xf1\x3e\x51\x38\x72\xeb\x2b\xb7\x09\xf8\xbd\x25\x2e\xb6\x5e\x4d\xd6\x1a\xff\x87\x32\xfd\xf6\xb2\xe6\xce\xed\x18\x64\x0f\x7b\x6d\x4f\xa7\x82\x2f\x90\x91\xb7\x0b\xf8\xbd\xad\xc9\xae\x0e\x0b\x26\x47\x61\xd5\x09\xce\x93\xa2\xe4\x19\x38\x11\x43\x4d\xce\x45\xd7\xc2\xe6\xf7\xd9\x3d\x47\xf4\x56\x97\x6b\x29\x98\xd6\xa2\x39\x2e\x8e\xa0\x5a\x3f\x78\xea\x96\xf6\xf4\x95\x56\xe9\xb6\xf7\xb1\x7f\x36\x84\xd4\x90\x42\x14\xb4\x6d\xc4\x7b\xb7\x0d\xa8\xa9\xbb\xc1\xa6\x7a\x9d\x7c\x9e\x8c\x9b\xe2\x32\xe7\x60\x93\xd7\xea\xf2\x9e\x8d\xea\xcd\xb7\xa3\xc3\xa9\x70\xc6\xf6\x30\xad\xc2\x37\xb3\xa2\xb2\x65\xf9\x5a\x79\xbf\x39\xc8\xe2\x20\xd6\x2f\xc4\xb6\x5e\xc7\x33\x42\xad\x22\x1b\x47\xd7\xdb\x38\xfc\x6f\x78\xf2\x82\x07\xc5\x50\xe9\x25\x1c\xb8\x1f\xe5\x56\xa8\x16\xdc\xac\x14\x64\xb0\x11\x0e\x11\x2d\xd2\x1d\xbb\x12\xdd\x6b\x9d\xa7\x9d\x70\x87\x31\x6a\x17\xac\x32\xb4\x90\xcf\xcc\x2d\x8c\xb4\x9d\x4b\x2e\x60\x55\xf5\x08\x87\xca\x70\xe0\x32\xb6\x37\xf1\x65\x6e\x67\xf2\x16\x75\x18\x52\x6f\xb6\x71\x0b\xad\x6f\xe3\xa8\x43\x92\x44\x63\xba\x04\x03\x84\x54\x49\x56\xa6\x82\xbd\x31\x05\x1f\x64\xd2\x8c\x45\xda\x61\xef\xf9\x44\x98\xd3\x24\x11\xd3\x82\xfc\x0d\x97\x50\xe2\x93\x57\x8d\xcb\xcb\x07\xbc\x26\xe7\xad\xdb\x25\x68\xd9\x1f\x56\xaf\x58\x85\xb2\xbb\xe4\xb1\x6a\x59\xb0\x85\x5a\xc8\x53\x6e\xc3\x6f\x41\xfc\x5f\xbf\x50\x66\x86\x1e\x81\x54\xce\x64\x6a\xe5\x94\x55\x1b\x7f\x2b\xb9\x0e\xb7\xa5\x45\x47\x6f\x7d\xca\x88\xf8\x2f\xab\x21\xf9\x8c\x88\x8d\x79\xf8\xbd\xa7\x1d\xdc\x5c\x7c\x5e\x91\x84\x70\xef\x22\x34\x5c\xb9\x5b\x5c\x39\xf0\x5c\x4b\xbc\x30\xf0\x65\x18\x0d\x1e\x8f\x95\x6a\xc4\xe2\x40\x08\x5e\x88\x91\xce\x57\x23\xaf\x86\x86\xd5\x3b\x10\x76\x4d\xa4\xb1\x7e\x0a\xae\x95\x9a\xcf\x6f\x20\x32\xad\x46\x30\x6e\xac\xbc\xfe\x8c\x67\xd9\xb3\xbd\x10\xc5\x3c\x2d\x49\x40\x61\x52\x81\x45\x2e\x95\x26\xd1\x33\x91\xcf\x59\xaa\x93\x12\x52\xc8\xf0\xc2\x81\xb8\x87\xc1\xdc\xbb\x67\x21\x38\x0e\x2b\x7c\x4b\x35\xd3\x04\xcd\x8a\x55\xa2\xae\x2c\x2d\x26\x45\xc6\x46\xa2\x60\x3c\xcb\xae\xee\x1d\x84\x6f\x0d\x0e\xfa\x99\x38\x28\x08\x99\x22\x77\xf5\xe4\xe1\x6b\x92\xec\x82\x59\x1f\x8b\xa6\x2b\x9d\x4f\x00\x0f\x2e\x88\xcb\x60\x35\x97\x6a\x54\x66\x3c\xef\x11\x45\x84\xf5\xc7\xfa\x8e\x76\x7b\xc0\xfe\xef\xeb\xbc\x23\xb3\x26\x00\x8c\x2b\xfb\xca\x2b\xc6\x0b\x64\x78\xc2\x6d\x05\x46\x16\x6e\xce\xc6\x2c\x8d\xfc\xb0\x7a\xfe\xae\xd9\x8a\x35\x00\x8a\xf3\x2e\x86\xb0\x22\x31\x72\x5d\x7f\x07\xe7\x60\x19\x40\x7f\x67\x1b\x17\x6e\x56\xe6\x3c\x5b\xe5\xc0\x85\x46\x6e\xb8\xf4\x29\x8e\xe3\x8f\x5d\xdd\x70\x4c\xa9\x24\x52\x9b\x1b\x09\x7e\x4f\x59\xa9\x52\x91\xb3\x2b\x7b\x95\x98\x7d\x34\x27\x47\x86\x64\xfa\x86\xb8\x18\x7d\xd7\xeb\xf5\xe8\x7b\x1c\x02\x7e\x7d\xd5\x63\xef\xa0\x3a\x89\x2f\x3a\x15\x8f\x6c\xa1\xe4\xb2\x1b\xd9\xb9\xd9\x15\x76\x0b\xac\xa6\x17\x77\xde\x6b\x8c\xec\x6a\x8f\xde\x37\x10\x90\xd8\x93\xe9\x6b\x91\x27\xf6\x86\xdd\x42\x29\x1b\xeb\xbc\xa8\xf3\xca\xb6\x0d\x08\x0d\x71\x09\xed\x47\x62\x8c\x4e\x5d\x74\x8b\xdc\xf1\xd6\xfe\x3b\xe3\x2b\xb8\x26\x30\x88\xe0\x12\xb8\xaa\x14\x75\x5a\xb6\x32\x77\xcf\x83\x1c\x5b\x58\xb5\xaa\xd4\xcc\x9f\x43\xf7\xb9\x8d\xb4\x97\x4c\xaf\x72\x22\xfd\xd7\x29\xb1\x97\xdb\x06\x48\xc4\x03\x5b\xe7\xb8\x0f\xab\x61\xae\xaa\x83\xbd\xe4\xb1\x9a\x25\x98\xd7\xec\xc0\x32\xaf\x30\x17\x32\x04\xaf\x11\xef\xd8\xe2\x92\x67\x77\xae\x85\xac\xe9\x04\x4d\x62\xef\x3f\xea\xb6\xd1\x57\x46\x14\x05\x54\x16\xf6\x69\x7b\x1f\x5f\x2f\x30\x92\x39\x11\x72\x19\x95\x43\x1b\x47\xe2\x96\x21\xe0\x17\x1e\x8e\x03\xf3\x0b\x1b\xee\xf4\x1b\xf2\xef\x5e\xaf\x77\xff\x8c\x79\xbb\x18\xaa\x87\xf2\x1d\x20\xe3\x5f\x46\x27\xc8\xe1\x31\x34\x63\x5e\xbd\x68\x2d\x03\x07\x61\xa1\x7a\x0b\xd4\xb7\x71\x51\xdc\x56\x4b\x4c\xc2\xca\x20\xae\xb6\x38\x86\x58\x54\x0f\xd5\xbb\x28\x75\x94\xca\x23\x03\x68\x55\x11\x01\x5d\xd1\x06\xbb\x70\x25\x32\xe4\xc4\x20\xb7\x82\x88\x0c\xdc\xfd\x94\x92\x49\xc5\x22\x5c\xcc\x75\x14\x36\xd2\x81\x95\xe8\x84\x8c\x76\x58\x1c\x3b\x4a\x37\x12\x09\x31\x61\x51\x83\xdc\xf2\xf0\x6b\x3e\x37\xe1\x65\xf5\x74\xd5\xd4\x6a\xe9\x09\xa7\xd8\xb0\x21\x9f\x69\x88\xee\xa5\xd3\xc9\xae\xbe\x74\xdd\xa3\xdd\x12\xd7\xa4\x8b\x6f\xbb\x02\x23\x52\x8e\xe5\x1f\xaf\xc0\x45\xee\x02\x65\x3e\xfd\xe1\x97\x1e\x4e\xb7\xa7\x71\xf6\x3f\x1f\x5f\xc0\xe7\xab\x6a\x54\x56\xb5\x62\x77\xaa\x13\xb3\x5f\x70\xf3\xd9\xec\x63\x1d\xb9\x58\xe5\xe4\x53\xb9\x8f\xdb\xde\xf5\x07\xb5\xfe\x45\x37\x26\xe4\x6f\xa6\x79\xa9\xa4\x1a\x81\x9a\x5a\x1a\x37\x0d\xfb\x4d\x75\x22\x6b\xc4\x73\x2d\x4d\x60\x32\x89\x5e\x69\xda\x85\x36\x11\x19\xc5\x05\x38\x16\xf0\x26\x08\x0e\xc7\x82\x7b\x5d\xa6\xf3\x50\x25\xb1\x0b\x9d\xa5\x6d\xd1\x48\xec\xea\x15\x3e\x71\x05\xc4\x71\xf5\xde\x23\xa8\xad\x7d\x3f\x47\x13\x73\xdb\xb9\x62\x6e\x3e\x6c\xab\x06\x15\x62\xa5\x07\x4b\xf8\x71\x58\xd7\x52\x5e\xec\x0c\xa1\xca\x4b\x80\xae\xde\x70\xa2\x27\x53\xab\xb8\xd8\xc7\x75\x9e\x62\x45\x57\x3c\x77\x74\x84\xfc\x4b\xec\x63\x76\x04\x2d\x92\x21\x85\xb9\x7b\xeb\xaa\xb3\x6c\x49\x43\xc5\xe3\xbb\x56\x08\xec\xef\x74\x98\x24\x98\x44\x63\xa5\x44\x3e\xd0\x33\x00\xa4\xab\xb6\xaa\xf5\x62\x3a\x11\x23\x80\x31\x8a\x94\x65\xe2\x8b\x4c\xf4\x28\xe7\xd3\x31\x02\x7d\xf7\x58\x7f\xe7\x87\x66\x1f\x86\x99\x82\xe7\x54\x73\x96\xb3\xfe\xce\xcc\x8e\x02\xc2\xef\x6d\x77\x58\xab\xde\xa5\xc7\x53\x08\xfe\xae\x9d\xc9\x84\xff\x4d\xe7\xae\x97\x3d\x7a\xc4\x45\x57\x67\x73\x72\x70\xc0\x2c\xfb\x3b\x3c\x9b\x8e\x79\x7f\xc7\x12\x53\x7f\x67\x20\x0a\xfb\x37\x94\x54\x47\x0f\x55\xb5\x63\xa9\xa2\x8e\xe1\x9e\x34\x58\x7c\xd4\x60\x22\xc0\x50\xe6\x06\x32\xa6\xbe\x3f\x45\x49\x59\x60\x05\x77\xfa\x1b\xde\xc5\x76\xb1\x76\xcb\xf7\xa7\x68\x5c\xf0\x01\x4f\x76\x9a\xca\xca\xe1\xc3\xa1\xfc\x42\xb5\xeb\x31\x73\x1e\x0a\x8c\xda\x67\xf7\x50\x7a\x87\x09\x0d\xe6\x14\x15\x8b\xf9\x3c\xd1\x94\x69\xc6\x95\xd1\x62\xf5\x96\x2f\x1c\x22\x9d\x69\xb4\x8e\x26\xdd\x7a\x9f\xb0\xd9\xe1\x41\x87\xcd\x8e\x3a\x6c\x76\x68\xff\x0f\xa9\x2d\xf0\xe9\xc0\xfe\x75\xdc\x61\xb3\x63\xc8\x76\xb1\x5f\x1d\xc1\x88\xb0\x1d\xfc\x79\xd4\x61\x43\xad\x0f\xf1\xdf\x7a\x3c\xec\xc3\xda\x85\x9d\xdb\x61\x63\xc5\x62\x4d\xc1\x1c\x65\xb1\x86\x6c\xd1\xe0\x87\x6d\x7c\xe4\x81\xa5\xf7\x55\x99\xd0\xcb\x1f\xac\xd9\xeb\xd6\x8b\x69\x58\xed\x28\x22\x87\x5d\xab\x7a\xfc\x68\x24\xb4\xca\x28\x81\x0b\x44\x26\x4b\x2b\x11\x81\xa4\x01\xc1\x1e\x90\x4d\x69\xcf\xa9\xe3\xdd\x68\xcf\x8c\x98\xf0\xe5\x58\xcc\x5d\x58\x7a\x08\xfe\x85\xd0\xf2\xd0\xab\xc4\xdc\x99\x05\x92\x9d\xf7\x88\xae\x34\x6f\xfa\x86\x7e\xfb\x68\xe7\xec\xa5\x1f\x95\x6c\xe6\xf6\x6d\x85\x0b\x3d\x5e\x2b\x7c\xe3\x61\xcf\x79\x08\xdf\x58\xf3\xa4\x57\x7e\xda\xa4\x3c\x23\x74\x13\x7d\x75\xe3\xf2\x8c\x56\xb6\x15\xe9\xcf\xeb\x49\x17\xd5\xc6\xc0\xc8\x11\x6a\x26\x16\x2b\xaa\x8b\x44\x34\x79\x6d\xaf\x1e\x31\x13\xb9\x47\x3b\xb1\xc2\x6f\xce\x93\xcf\xe4\xbb\x32\x22\x12\x1b\xec\x0d\x6b\xef\xa8\x89\x07\x60\x81\xfc\x18\xc8\xd6\x82\x21\x84\xb6\x52\x41\x2d\x37\x54\x1e\xbd\x20\x4d\x95\x75\x99\xd1\x95\x5e\xc0\xcf\xa4\xb3\x8c\x10\x7e\xec\xf6\x99\x71\xa5\x45\x88\x11\xf1\x17\xe4\x2e\xd4\xfd\xb6\xc3\x54\x9a\xe9\x2c\xad\x40\xe3\x66\x62\x08\x79\x4c\xa4\x22\xc4\x17\x25\x56\x01\x76\x2a\x94\x2f\x64\xe3\x47\x4e\xfe\x36\x89\xeb\xe8\x25\x2e\xf4\xcb\x91\x5f\xcd\x55\x12\x86\xb6\x55\xb9\xfe\xca\x8a\x38\x58\x28\x63\x8e\x15\x8b\x51\xc9\x71\xfd\xdd\x8b\x01\xac\x71\x4f\xdd\xeb\x25\xd2\xf4\xea\xaf\x7b\x8b\xfc\xdc\x48\x84\x08\x02\x91\xa5\x32\x30\x7f\xac\xbe\x2f\x22\x2c\x04\x70\xdb\x53\xb2\xcf\x8a\x53\xb4\xe8\xb1\x38\x41\x31\x64\x02\x24\xf4\xa3\x87\x35\x90\x8a\x5d\x02\x71\xeb\xb2\x98\x96\xc5\x4a\x25\x2e\x17\xc0\xd5\x13\xb1\x5f\x1a\xab\x70\x59\xe5\x8d\x9c\xa9\xf6\x22\x31\xfb\xdf\xe4\x22\x11\x12\x94\x31\xaf\xcd\x75\xb9\xe9\xc2\x11\xaa\x6a\x64\x58\xb4\xdc\x8f\x09\x44\x50\xa7\x63\x77\x20\xa5\x4d\x8d\x32\x97\xdd\x65\xef\x99\x69\xc6\xe7\x1e\xfc\x60\x14\xa2\x68\x9a\xea\x15\x14\x8a\x79\x78\xa6\xde\x48\x37\xbd\x89\x51\x38\xe8\xf3\x2b\x53\x44\x23\xc5\x3f\x48\x36\xd2\x78\xaa\x5c\xb0\x70\x56\xa7\xaa\x18\x0e\x7a\x58\x97\x87\x32\x14\x0a\x88\x97\xb2\x8d\x22\xc7\x7d\xb5\x63\xdc\x7c\xc1\x38\xbb\xe6\x39\xe4\xc6\x8d\x05\x27\xad\x8e\x3c\x45\x96\x6d\xe7\xc2\x4c\xb5\xaa\x5b\x9e\x21\x9b\x64\x1b\x3d\xdd\x0d\x58\x6a\xf5\x57\x7c\xed\x9a\x2b\x14\x1e\x60\x56\x84\xc9\x65\x4a\x32\xa0\x03\x95\x77\xb3\xf0\xe7\xa5\xd0\xe8\x60\x43\x97\x43\x8f\xbd\xe3\xf3\x0a\xd0\x04\xe6\x77\x84\x15\x84\x0c\x0f\xbb\x70\x78\xa7\xd4\xfb\x5d\xb0\x3f\x55\xeb\x8d\xbd\x04\x72\x91\xe8\xc9\x44\xa8\x14\x68\xdb\x6d\xa0\x12\xd7\xf6\x32\xa8\x6a\xca\xf6\x47\xf1\xf7\x92\x67\x56\xe3\x72\xf9\x7d\xa6\xe0\x03\x99\xc9\x62\xde\x71\x75\xce\xb0\x2e\xfd\xdd\xa6\x6d\xc6\x2a\xb9\xfd\x8e\xea\xb5\xfd\xe7\x7f\xfc\xdf\xd9\xe1\x7f\xfe\xc7\xff\xeb\xc0\x5f\x47\xa0\x8d\xc1\x47\x51\x24\xeb\x1a\x6e\x2b\xeb\xc5\x8b\x8d\x1d\x71\x57\x76\x1d\xae\xb0\xcb\xb0\x49\x5b\xb8\xc0\xc0\xfa\x75\xaf\xf2\xfd\xcf\x58\xd6\x6e\x95\x91\x9e\xcc\x92\xd5\xca\xba\xf4\x25\x88\xf0\x96\x17\xcf\x7c\x5f\x1d\x46\x66\x35\x94\x3a\x88\x52\x09\xa8\x61\x0d\xee\xb1\x08\xce\x1a\x56\x78\x95\x28\x88\x3b\x0b\xa6\x84\x61\xc6\x47\x88\x9d\x27\xd5\x68\x3f\x95\x06\xff\xaa\x0e\x01\x44\x18\xd4\x46\x1c\xf1\x4b\x8e\x11\x4b\xa7\xe7\x67\x0b\x02\x78\x96\xdb\xfa\x50\xe6\x5a\x43\x66\x8d\x42\x72\xeb\xe7\x36\x98\x80\x61\x81\xeb\xd6\xdf\x06\x55\xc7\xe6\xe0\x4b\x30\xa8\x38\x07\x9d\x88\x60\x24\x2b\xc6\x15\x6a\xff\xcf\x4b\xc8\x75\xf9\x3c\xcb\x41\xde\x82\xed\x71\xf7\x54\x7b\x11\xbf\x78\x29\xdd\x46\x0d\xbd\xef\xe0\x1a\x12\xc2\xe2\x5f\xda\x48\x72\x91\xc1\x75\xcc\x67\x62\x8b\xb4\xba\x7a\xd2\x2e\xd1\x72\x0b\xd5\x3c\x84\xfd\x23\x5a\xd0\x8b\x84\x67\xcb\x30\x55\x97\x3f\xe8\x7d\x78\x94\xc9\xe8\xe2\x94\x2c\xb7\xb0\x3f\x47\xcb\x8e\xf2\x6c\x55\x27\x5b\x2b\xe4\x7f\x20\x32\x57\x89\x78\x0d\x68\x83\x46\xfb\x4a\x08\x6d\xc0\x38\x20\xb7\x08\xa8\xf6\x0d\xd0\x02\x80\x74\xd1\x39\xca\x1a\x98\xb2\x8a\xd3\xbd\xc2\xa0\xe6\x9e\xa1\x17\x5c\xf5\xd8\x07\x7b\x85\xfb\x7e\x0d\x1c\x35\x5d\x62\xd0\x62\x15\x3d\x81\x5c\x2f\x60\xb5\x8d\x02\x29\xf0\x61\x18\x2a\x39\x16\x7b\xf8\x96\x2b\x7b\x0b\x5f\x41\xa2\xe1\x55\x68\x4f\x12\xd5\xb5\xce\x3f\xe3\xb1\xfe\x17\x9d\xcb\x7f\x68\x55\xf0\xec\x5c\xa7\xa7\x65\xa1\x61\xe9\xf3\x58\x13\x85\x30\x4a\x87\x5e\x23\x4d\xb4\x0c\xde\xab\xef\x2c\xc2\xf8\xc0\xae\xd5\xfb\x38\xa1\x5d\x7d\x61\x6e\xba\xb6\x51\x99\x14\x0e\x06\x22\xa0\xbc\xc6\x71\x3c\xb0\x03\xe1\x11\xe9\x4d\xea\x43\x9d\x4f\x5a\x63\x31\xef\xd0\xe3\xf3\x0d\x2c\x46\x37\xa6\x43\xb4\xf7\xfb\x02\xdd\x18\x15\xe5\x24\x03\x87\x73\x40\x34\xd2\x76\x5b\x75\x30\x7e\xaa\x4e\x09\xd4\x11\x3d\x73\xb5\x0f\x2f\xbe\xaa\x9c\x80\xb6\x2a\x4b\x58\x51\x1c\x57\x68\x1b\x19\x62\x2a\x92\x8f\x62\x9a\xc9\x84\x9b\x35\x4e\x47\xbd\xf9\x2d\x1f\x8e\xa9\x48\x7a\x39\x75\x7f\x57\x47\x03\x4f\xc3\x2d\x6d\xe2\xc2\x5d\x42\xa9\x3d\x80\x9e\x69\xc5\xbe\x7f\x73\xb9\x75\xf2\xc9\x26\x5b\xd4\x78\xe0\x4e\x38\xd8\x5d\x6f\x13\x72\xb0\x5b\xdb\xa8\xfa\xa8\xb7\x38\x6d\x75\x97\xcc\x4d\xa3\x91\x1a\x47\x6f\xf9\xae\x3f\xf4\x3d\xbf\x99\xa3\xa3\xf1\xe4\x92\x9b\x1e\x7f\x5f\x75\xd5\xb3\x80\x21\xeb\x93\x00\x02\xa0\x5a\xb8\xf3\xda\x09\xbc\xda\x5b\x30\x2e\x74\xd8\x1f\x28\xe8\xcf\xde\x42\xfb\x0b\xc6\xd2\x66\xb1\xf8\x03\x3b\xff\xe9\xb2\x66\x8e\x10\xad\x3d\x14\xfc\xb3\x68\x39\x63\xb8\x6f\xa8\xf2\xc8\x91\xb2\xd7\x1a\x22\x7b\x50\x86\xdf\xbc\x18\xdb\x5b\x4f\x7c\x49\xc4\xb4\xa8\xac\x54\xc1\xd5\x3f\x38\x0e\x60\xff\xfc\xc3\xc5\xe5\xfe\xf9\xe9\xe5\xab\x7f\x69\x8c\xa5\x61\x9c\x6a\xbc\xa4\xd1\xe9\xce\x03\x51\xd7\x56\x84\x65\x2a\x8c\x8d\xe6\x01\xa1\xcd\x75\xd9\xd1\x6c\x29\x3c\x9a\x9a\x70\xcb\xee\x53\x55\x41\xc9\x7a\xb9\x9a\x6d\xe7\x59\x75\x21\xd6\x37\x9d\xf4\x42\x3c\x6e\xbc\x9d\xd3\x01\xb7\xc7\x1b\x0b\xc0\x90\xae\x38\x49\x81\x56\x0d\x9e\x1d\x5e\x11\xeb\xa7\x8c\xb0\x47\x93\x4a\xde\xe4\x4e\x1b\xe7\x92\xaf\x5e\x2d\xe2\x2a\xd1\x72\x11\xf3\x20\x8c\xfd\x13\x76\xd8\x5b\x79\xf2\x1c\x88\x9c\xcf\x48\x6a\x3f\x8a\x57\xfe\x6d\x78\xc2\x49\xb5\x74\x99\x78\x47\xab\x5f\xd4\x3a\xe0\x65\xdc\x45\x53\xc4\x10\xf9\x49\x97\x8f\xe0\x81\x1d\x26\x91\xf1\x69\x5d\x6e\x11\x1e\xa9\x66\xa2\x04\xdb\x13\x9b\x88\x62\xac\xd3\x6d\x39\x44\x2d\x14\xed\x8e\xe9\xdf\xde\x6d\xf8\xa2\xf3\x5c\x4f\x97\xd3\x7b\x6d\x64\xce\x26\xea\x22\x07\x67\xc7\xce\x20\x57\x68\xb0\xeb\x56\x4d\x72\xc0\x47\xc9\x2a\x77\xff\xfb\xfe\x86\x70\xa6\x5e\x53\xd4\xfd\xaa\x4d\x6f\x6d\xef\xdc\xaf\xce\x6f\x04\x40\xc3\x11\x86\x55\xe5\x86\x87\xf7\xa7\x22\xf5\x81\xfe\xeb\xa2\x10\x2f\x81\xcf\x5c\x47\xbc\x2f\xf3\x46\x02\xc9\x6d\x17\xc7\xd8\x82\xc6\x96\x2c\x35\x88\x57\x31\x72\x92\x9a\x23\xd9\xa0\xe0\x05\x62\xb5\x8b\xec\x42\x64\x3b\xb0\x9f\x3b\xac\xd7\x13\x36\xd0\x3a\xeb\x30\x28\x72\xdb\x61\xc3\x4c\x73\xf8\x03\x27\xdb\x61\x9f\x7e\x01\x4f\xe2\x90\x27\xe2\xdf\x7f\xed\xb0\x09\x9f\x7e\xc2\x9f\xe2\xef\x81\x38\x95\xcc\x7a\xb7\x38\xe5\xf8\x58\x2d\x9f\x7d\xd4\x12\x99\x8a\xfd\xb2\x4b\xa7\x0c\xa3\xea\x2c\xa9\x55\x2b\x38\xbe\xce\xf9\xb0\x60\xcf\xd9\xee\xb8\x28\xa6\x27\xfb\xfb\x7f\x33\x5a\x75\x5d\x38\x6b\x3e\xda\xdf\x5b\x83\xd4\x88\x99\x6c\x4c\x63\xff\xd4\xee\x28\x58\xe7\xd1\xe0\xbf\x3d\x6b\x4b\x80\xbe\x5b\xf6\xf6\x21\xff\x8b\xd6\xd9\xaa\x81\x2d\x84\xef\x7f\xc8\xd1\x65\xd9\x87\xc6\x56\xdd\x8f\x17\xb8\x4e\xcb\x37\x71\xfb\x72\x35\xff\x3d\x4c\x83\x74\xf8\x7b\x20\x8f\xa5\x17\xb2\x33\x25\x00\xcf\xa8\x96\x0e\xb7\x37\x50\xa9\x9c\x0b\xa1\x92\x09\xe0\xfd\xd4\x14\x54\xcc\x31\xa2\x95\x0a\x39\x45\x96\x90\x46\x88\x88\x7b\xc8\x35\x1d\xf1\x42\x54\x7a\xdb\x10\x6c\x71\x81\xe0\x1f\x2d\xde\x76\x35\x36\x1e\x9a\x72\x96\x17\xa2\x98\x5a\xb1\x40\x25\x2d\xec\xe5\x31\xcc\xee\x43\x8e\xf5\x0d\x4e\xab\xd4\xbf\xdd\x54\x6f\x24\xc8\x08\x55\x4e\x1e\x8e\x55\xdc\x88\x3f\x50\x58\xf7\x7d\xf0\x87\x05\xef\x4f\xb2\xd2\xc8\x99\xa0\x2a\x02\x8b\x96\x7f\xa9\x73\x35\x74\x22\xd5\x0d\x3a\xf1\x72\xf4\x5d\xdf\xa6\xed\x22\x7e\xeb\xa8\x36\x87\x82\x8f\x94\x1c\xfa\x9e\x1c\x24\x0e\x6b\x89\xbe\x46\xe1\x14\xd5\x63\x17\x7a\xe9\x05\xb8\xb8\x09\x29\x46\x22\x3d\xe9\xab\xbe\xea\xb2\x81\xd1\x0a\x0f\x93\x4c\x4f\x2c\x4f\x36\x1e\xd0\x85\x9d\xbd\xa6\x2a\x2e\x9c\x1d\x3d\xb7\x4a\x77\xce\x93\x42\xe4\x86\x8d\xc5\x17\xe7\xca\xea\xb2\x32\x97\x27\x76\xa8\x3f\x7d\x3c\x63\xdc\xb0\x29\xcf\x29\xa5\xf8\x7b\x9d\x71\x35\x62\x4a\x14\xfb\x65\x9e\xf5\xce\xed\x0f\x1f\x51\xed\xb7\x6d\xbb\x4c\x4c\xb8\xcc\xe0\x59\xf8\x8b\xf1\x34\xcd\x85\x31\x0b\x7b\xb1\x8d\xb0\x9b\x53\x6a\xd9\x65\x63\x6d\x20\xff\xd8\x8e\x1d\xa5\xf7\x1a\x06\x10\x14\x81\x50\xec\x0c\x40\x7c\x44\x01\x0f\x50\x1c\x0d\x37\x71\x65\xc5\x8f\x6f\x5f\xb1\xc3\x83\x63\x2b\xc2\x53\x01\xe7\xe3\xde\x21\xfb\xf4\xf1\xed\x2b\xfb\xed\x2f\x3d\xd6\x65\x72\x3a\x7b\x0e\xe3\x3d\x3b\x9f\x3d\x67\x67\xe7\x8b\x46\x8a\x83\x3c\x3b\xc7\x47\x5e\xba\x47\x5e\xae\xf7\x48\x22\xd3\xdc\x4e\xe7\xd5\xd9\xeb\x8f\xcb\x9b\x43\x8b\x2e\x9b\xf0\xc4\xb6\x7f\x77\xfa\x6a\xd5\x12\xe2\x63\xb6\x61\x97\x95\x25\xec\xb8\x62\x3f\xfd\x74\xf6\x9a\xe2\xd4\x51\xcf\x2c\xa7\x53\xcc\x5e\x8e\x97\x07\xa3\x66\x47\xe2\x0b\xdb\xfd\x4e\xee\xfd\xdb\xa7\x83\xee\xb7\xbc\x3b\xfc\xe5\xdf\xff\xf4\x6b\xf7\x3b\xff\xe1\xf9\x7a\x1f\x0e\x8f\x7e\xfd\x27\x1a\xc1\xb1\x1f\xc2\xf1\x2d\x8e\xe1\xd8\x7f\x3a\x5e\x67\x10\xcf\xfd\x20\x9e\xdf\xe2\x20\x9e\x57\x07\xf1\xa7\x6f\xf9\xe0\x97\xf6\x71\x45\x43\x79\xe1\x87\xf2\xe2\x16\x87\xf2\x62\xd3\xa1\x48\x33\x50\x48\xb6\x17\x7f\x79\x7f\x78\xc0\x74\x8e\x7f\x1d\xbb\x34\x28\x3a\xfe\x80\x0b\xd0\xdf\x39\x38\x3e\x3a\xfc\xe3\x8b\xc3\x83\xe7\xc7\x2e\x81\xea\xdb\x3f\xfe\xa9\xeb\xbf\x3d\xec\xef\x50\x9f\x87\x07\x71\xaf\xab\xfb\xa2\xa7\x8e\xc3\x53\x0b\x46\xd0\xf2\xbe\x24\x17\xa9\x2c\x12\x9e\x03\x63\xc3\x4f\xcc\x7e\x74\x3d\xb4\xae\xe4\xbf\xed\x7e\x77\x02\x3b\x07\x6b\xb1\xfb\xdd\x09\xfe\x7d\xfc\xeb\xde\x77\x5f\x5f\x7c\x3a\xec\xbe\xf8\x85\x7e\x7c\xfe\xeb\xd7\x97\xbb\xdf\x9d\x1c\x1c\x1e\x7e\x85\xe5\xc5\xef\xf7\xfc\xa3\x5f\x8f\x3f\x3d\xff\xa3\x6b\x7c\xfc\xeb\xd7\x63\xdb\xf8\xd3\x41\xf7\xc5\x2f\x5f\x3f\xbd\xfc\x53\xb5\xf5\xe1\xaf\x5f\x77\xbf\x3b\x39\x3a\x3c\x3e\xfc\x7a\xf8\xa7\x83\x83\xaf\xc7\x2f\xfa\xfd\xd4\xbe\xd3\xfe\xe7\xf0\xf0\xd7\xbd\x7f\x0a\x95\xd5\x94\x56\x2c\x95\x23\x3b\x97\xc0\x91\x27\xf2\x0b\x06\x22\x77\x99\x31\x76\xe7\xd8\x4f\xbd\x8b\x1e\x33\x3a\x91\x3c\xb3\x0c\xad\x84\x4a\x05\x34\xf1\x70\x35\x44\xf3\xc6\x37\x7e\xea\xb2\x5f\xbe\xb3\x7f\x1e\x85\x3f\x9f\x03\x49\x8c\xc5\x97\x44\x67\x3a\x87\xad\x18\x8b\x2f\x3c\x15\x89\x9c\x60\x3c\xb4\xce\x59\xa2\x53\xe1\x36\xe3\x9b\xb7\xf0\xbf\x93\xf6\x17\x7d\xf3\xdd\x2e\x91\xdb\x69\xf7\xad\x5d\xd9\xaf\xf1\xc7\x97\x76\xb2\x5d\x96\x8f\x06\xe1\x6d\x1f\xbf\xff\x4b\xe3\x2d\xf9\x68\xe0\x5e\x97\x8f\x06\xbb\x47\x2f\x5e\x74\xe8\xff\xdf\xc2\xee\x0f\xe6\x85\x38\x61\x03\x6e\xc4\xcb\xe7\x50\xf2\x29\xb5\x3b\x2d\x15\xcf\xe7\x0c\xd2\x7f\xbb\x50\x69\xee\x5a\x03\x79\xa8\xb9\x47\x5d\xf1\x17\x9b\xbd\x26\xed\x4a\xa6\x98\x16\x13\x53\xdb\xd1\xc1\xc1\xcb\xee\xc1\x61\xf7\xe0\xa8\xbf\x53\xbb\x46\x86\x65\x96\x75\xe1\x11\xa9\xec\x9d\x72\x7c\x7c\xfc\xad\xed\xac\xc4\x7c\x06\xe8\x90\xfe\xae\x77\x7a\xc4\x94\xc1\xfe\x1a\xbc\xbb\x90\x13\x81\xcc\xfb\xb5\x7b\x18\x56\x63\x32\xe5\x85\x1c\x64\x02\xc9\xe3\x22\xe1\x59\xd4\x3d\x49\x0c\x38\x13\xdb\x83\x9f\x0d\x00\x75\xd6\xa7\x74\xf8\xbc\x7b\x78\xd4\x3d\x7c\x71\x79\xf8\xed\xc9\xf1\xc1\xc9\xd1\x41\xef\xe0\xe0\xe0\x7f\x37\x26\x68\x3b\xe8\x42\x07\x61\x82\x5b\x84\x03\xc8\x46\x3c\xe3\xd6\xe8\x75\x77\xad\x99\x9c\x2e\x96\xb8\x27\xfc\x4b\xab\x3d\xa9\x52\xf5\xe3\xe5\xf3\x2d\xaa\x7e\x4c\xf8\x97\x1f\x85\x1a\x35\xa3\x24\x6e\xa5\xeb\xc5\xb6\xa6\x5b\xe9\xbe\x4d\x6e\x0f\x1d\xa7\xba\x1c\xd4\x1d\x82\xae\x67\xe4\x50\x0b\x3a\x96\xea\xae\x16\x5b\xaa\x3b\x5b\x6c\xa9\xee\x74\xb1\xdb\x95\xa4\x5b\x58\x6c\xaa\x89\xd6\xb4\x9b\xdd\xbc\x6f\xa5\xef\xc3\x86\xd5\x6a\x3b\xa9\x0c\xa3\xcc\x32\x3e\x68\xea\xcb\x6b\x69\x98\x5a\xb5\x2c\xcd\x6f\xcf\xa4\x38\xe5\x85\x55\x8c\xb6\xe1\xc5\xf4\xe8\x62\xea\x7e\x0c\x76\xa5\x9b\x99\x92\x16\x38\x30\x7e\x17\x73\x8b\x62\xb9\xd6\xa1\xe1\x5b\x44\xe6\x2a\x64\xb1\xf8\xd0\x6d\x8a\x12\xbd\x96\x6f\x12\x00\xb7\x5b\xef\x8e\xb5\xce\x7a\x25\x8b\x57\x4c\x06\x22\x4d\x45\xea\xa3\x6c\x57\xd8\x73\x96\x3f\x1c\x45\xfe\xb8\x4a\xf2\x18\xcf\x87\x75\x66\xa9\x39\xfb\xc1\x77\xc1\xf2\x52\x81\x34\xf8\x81\xa2\xae\x40\xf2\xbb\x9c\x4f\xc5\x3b\x41\xa8\x37\xa1\x2e\x04\x5a\x82\x00\x2d\xdb\xc5\x37\xbb\x18\x0c\x84\x54\xa4\x10\x46\xc8\x1c\x2b\x73\x08\xa1\xc8\x85\x5d\xca\xa4\xa0\xa0\x5c\x1a\x80\x7b\x0c\x41\x76\x6a\xd5\x9a\x2a\x90\x3a\xde\xc2\xc4\x78\x59\xe8\x09\x2f\x1c\xb6\x47\x65\x21\x16\xc0\xe6\xd4\xc6\x34\x10\x94\x30\x37\x28\x0b\x96\x6a\x61\x20\x0d\x77\xcc\x67\x82\x7e\x95\x71\x58\x87\x7d\x18\x0b\x7b\x07\x98\xa1\xdd\x72\x6a\x9b\xd6\x87\x1d\x70\x82\x16\x01\x46\xad\x4f\x10\x52\x15\x5d\x9d\x77\x89\x00\x37\x20\x86\xca\x83\x51\xae\x29\x91\x82\x07\xaa\x94\x86\x09\x09\x7b\x13\x15\xce\x83\xda\xa6\xce\x18\xe8\x0a\x94\x52\x0a\x56\x07\x69\x67\x5a\xcc\x99\xaf\x0c\x47\x8b\x0a\xc9\xd0\xf6\x3b\x6e\x58\x32\x96\x59\x8a\x20\xd9\xf3\x0f\x43\xc0\x23\x15\xb9\xab\x84\x37\x8c\x94\x37\xad\x7c\xb6\x5c\xf8\x92\xd8\xbf\x01\x43\xe2\xe1\x1e\x76\x72\xd2\x57\x8c\xb1\x2e\xbc\xe2\xc4\x8d\xb5\xf2\x1d\x0e\xb9\xaf\x8e\xf6\x18\x38\x17\xdd\x13\xd1\xe3\xed\x1d\x34\xbb\x80\xaf\x7a\xbd\x1e\xfb\x87\xc8\xb5\x5d\x90\x89\xce\x17\x48\x23\xeb\xef\x66\x3d\xdd\x7f\xed\xdd\xac\x3c\xc8\x00\x88\x19\xa2\xb3\xb8\xa2\xd8\x61\x38\xa8\x76\x0d\xdb\x41\x01\xd8\xd5\x84\x4f\xaf\xac\x86\x45\xf9\x3a\x4e\x6d\x86\xfe\x20\x17\x8a\x10\x4b\xa5\x4a\xc5\x17\xb7\x21\x13\x3e\xed\xd9\x1d\x00\xdc\xaa\x82\x8f\xb0\x84\x93\x4b\xa7\x74\x75\x78\x11\x18\x00\x08\x0b\x4f\xcf\xd8\xea\x7c\xed\x03\xe9\xef\x30\x7f\xed\xb8\x24\x8b\xfe\xce\x84\x4f\xfb\x3b\x3d\x76\x9a\x19\xdd\x09\x7c\xca\x44\x47\xcd\xa3\x94\x06\x28\xd5\x28\xa9\xc2\xaa\xa6\x39\x6c\x60\x4a\xa9\x15\x2e\x05\x0e\xa8\x10\xf3\x29\xca\x5c\xb0\x5d\xa5\x99\x12\xc6\xb9\x09\x7d\xc0\xc5\x1e\x4d\x53\xb0\x70\x2b\x47\x6f\x87\x57\xd1\x31\x81\x3c\x7d\x2a\x16\xa6\x73\x9c\x71\xcd\x53\xd9\xb1\xb3\x02\x1c\x01\xbb\x18\xda\x54\x7a\xb5\x6c\x8c\x8c\xc8\x68\x3f\xce\x32\x42\x43\xb7\x57\xc8\xbd\x23\x59\x2e\x04\x91\xd8\x8c\x36\xf1\xd8\x37\xe9\x32\xe2\xfd\x2e\xcf\x91\x49\x88\xcc\x9b\xea\x4c\x8f\x5c\x55\xf8\x40\x13\x95\xca\xf0\x55\x0a\x73\xd8\xf8\xb0\xe4\xc7\x6c\xaa\x8d\x01\xf3\x04\x12\x8b\x63\x15\x57\xbc\xd0\x13\x99\x5c\x9d\x04\x44\x2c\xe0\x5c\x02\xaf\x0d\x13\xf2\xd6\xb1\xd8\x7c\x07\x8d\x14\x8e\x8a\x7a\xc4\x0f\x4e\xa1\x17\x7a\x33\x04\xb9\x0f\xf0\x89\x5c\x64\x73\x96\x8b\x69\xc6\x13\x97\x41\xe8\xf1\xd0\xab\x73\xa1\x9e\x08\x6f\xc5\x57\xad\x56\x73\x5f\x62\x02\x46\xb7\x8b\xe4\xd9\xa1\x01\x74\x2c\xd7\xb1\xf4\x78\xb4\xc7\xae\x8c\x28\xae\x1c\xdf\xba\x10\x45\xc0\xd8\x72\x25\x46\xed\x6a\xf9\x6b\xcb\x97\x9a\x46\x8c\x7d\xcf\x13\xa0\xda\x34\xc5\x1c\xbd\xe1\xc9\x98\x3a\xc4\x0b\xa0\x7e\x8c\x3a\xa1\xac\x01\xf6\x50\xd9\x6c\xcb\x83\x90\xa1\xd0\x32\xc3\x5d\xe1\xa6\x1a\xf1\xa2\x45\x7c\x88\x1e\xeb\xf5\xd5\xf1\x1e\x72\x25\x37\x3f\x8c\x86\xa2\xad\xce\xc9\x12\x37\xe1\x53\x83\xf9\x07\x28\xc1\xc8\x9c\x89\x4c\x00\xc6\xac\x3b\x7a\x4a\xab\x2e\x72\xad\xcf\x62\x4e\x7d\x39\x04\x1c\x57\x68\xd8\x3e\x3a\xe9\xb1\x0f\x08\x60\x16\x61\xf2\xb1\x72\x0a\xd1\x8d\x39\x65\x78\xda\x17\x5a\x4e\xe7\xf6\xae\x8d\x1a\x29\x40\x12\xa6\xe9\x07\x63\x19\x0e\xec\x2a\xca\x32\x7d\x15\x27\xce\xe3\xa4\xf1\xb8\xdb\x25\xda\x26\xab\xbb\x75\x1b\x36\x39\xa7\x7e\xeb\x2a\xc7\x94\x76\xfa\x16\xce\x29\x1c\x05\x27\x12\x50\xb7\x95\x23\x7b\xb4\xf0\xc8\x8e\x72\xae\xca\x8c\xe7\x35\x5a\x80\xcd\x0f\xf8\x46\xf8\x79\xf7\xb3\x98\x77\x91\x74\xa7\x5c\xe6\x66\x0f\x5e\x02\x65\x91\x49\xcc\x03\x6f\xa5\x72\x41\x09\x05\x75\x09\x19\xc9\xd0\x0c\xa3\x79\x77\x01\x4a\x25\xb1\xc2\x8c\xfd\x72\x60\x5f\xa7\xe4\xb4\xcc\x38\x25\x4c\x18\x31\xe5\x39\x2f\xe0\xed\x3a\x37\x01\x59\x9d\x3a\x8c\x61\x08\x06\x62\xcc\x67\x52\x97\xb9\x67\xe9\x76\xac\x74\x88\x6f\x95\x21\xc1\x1a\xac\xc9\x8f\x6e\x48\x64\x0b\xc4\xe8\x4d\x68\x6e\x91\x24\x6e\x0a\x3d\x0d\x78\xb1\x04\x3a\x91\x8a\x44\xa7\x20\xad\x16\x62\x8a\xfb\x45\xb1\xb5\x6b\xe2\x7d\x46\x81\xb9\x14\x34\x88\x5b\xc6\x87\x43\x80\xf0\xa1\x5e\x72\x91\x94\xb9\x91\x33\x91\xcd\x51\xf8\x37\xd7\xb2\x48\xc6\xc2\xb0\x01\x4f\xa0\x20\x2a\x82\xc1\xfb\xb7\x87\xdd\x95\x43\x10\x1f\x44\x1a\xdf\xe8\x76\xc7\x5b\x34\xf6\x2a\x5e\x8a\x07\xd8\x88\x07\x06\xd4\xe7\xc5\x0a\x40\xf4\x8c\x63\x9c\x7a\x58\xfb\x08\x54\x0f\x9d\x0f\x64\x9a\x8a\x45\xf5\x8f\x9a\x32\xe8\x7f\xab\xed\xee\xdd\xc5\xc1\xb6\xd8\xb3\xd7\x8e\x0d\xa5\x07\xaa\x55\x46\xf1\x74\x63\x76\x5d\x65\x85\x30\x8a\x34\x0e\x2d\x45\x07\x3c\xde\x3b\x7a\x58\xff\xb9\xc7\xde\x71\x69\x79\x14\xe4\xc6\x51\xf9\x7f\xc8\xa0\x25\x9c\xa9\x32\x87\xa4\xa6\x3b\x0a\x91\xa5\xe0\xc7\x0d\x16\xc3\xb6\x8f\xd7\xa2\x6d\xba\x8c\xf6\xda\xdd\xe8\xf1\x45\x03\x24\xe4\x72\xb1\x5c\x3b\x22\xd5\xf9\x9d\xcd\x32\x8e\xae\xda\x60\xb2\xd1\x63\xd5\xfd\x6f\x9d\x35\x69\xb2\xb0\xd5\xb7\x35\x93\x0b\x91\xcf\x64\x22\x3e\x3a\xcc\xa4\x25\xa3\xaf\x37\x65\x63\x0d\x77\x8d\x0f\x9c\x07\xab\x01\xb5\xea\x65\x62\xc4\x93\x79\xbd\xd2\xca\xc2\x98\xe5\x0d\x11\x5b\x62\x94\x6b\x43\x6f\xf4\x15\x8c\xb7\x84\xa8\x9e\xf2\x95\xc6\x26\xdf\x2e\x1e\x07\x7e\x71\x7b\x83\x99\xae\xce\xdd\xc5\xb4\x45\x94\x5e\x08\x6f\x95\xfd\xf4\xf1\x47\x4c\x67\xe4\x05\xdd\x12\x76\x3c\xae\x16\xb4\xbb\x2f\x21\x95\x3e\xd9\xee\x6a\xb4\x8a\xe2\xaa\x81\x41\x65\x83\xea\xc0\x68\x49\x18\xfc\xb6\xe6\xe0\xd8\x95\x6d\x7d\x15\xa1\x95\xb8\xf8\x23\xe8\xc5\x81\xc5\x1e\x76\x5f\xbe\x78\x71\xfc\xa2\x83\x45\xe9\xec\x85\xb6\x57\xe5\x06\xcf\x9f\x43\x64\x17\x5c\x6b\xd7\x3c\x4f\xbd\x4f\x17\x80\x86\x6a\x6b\x50\x71\x17\x1d\x1f\xad\xeb\x2e\x6a\x5c\x33\x8b\x91\x3a\x90\xc6\xea\x40\x45\xf4\xf1\x8e\x33\x76\x5d\x0d\x71\x80\x85\x7a\xa5\xd5\x50\x8e\x96\x1c\xf6\x96\xd6\x01\x86\x01\xad\x24\xbe\x60\xbb\x5d\xe8\x09\xe6\xae\x5e\xfe\x78\x61\x9b\x29\x0a\xf1\xf2\xfa\x97\xab\x32\xbe\x4e\xf1\xa0\xbf\x94\x2a\x6d\x1a\xb0\x1b\xa5\x83\xb0\x19\x86\x3a\x9f\xbf\x79\xe7\x83\x10\x5e\x9d\xb2\x01\xfe\x84\x84\xe6\x88\xcb\x29\x44\xce\x80\x1a\x8f\xeb\x99\x71\x12\x58\x62\xc7\x04\xd9\x18\x02\xec\x7e\xa5\x8a\xf0\xde\xcc\xdc\x14\x62\x62\xaf\x18\x53\xb0\x5c\x6b\xab\xf4\xa0\x4c\xe3\x37\xc0\x23\x47\x2f\xa4\xad\xc1\xbc\x58\x60\x45\x5b\x9a\xde\x8f\x87\xe8\x8e\xfd\x7a\x8d\xdb\x60\x69\xa2\x24\x9d\x6b\xd9\xb8\x03\x22\x46\x18\xcc\x56\xbe\xd0\xfc\x1b\x14\x66\x5c\x03\x2b\xee\xe5\x99\x57\xc2\xfd\x72\x83\x3d\x8a\x30\xb3\x1d\xa3\x90\x60\x9f\x07\x89\xd4\x92\x96\xcb\xe4\x47\xd8\x71\x82\x63\x9e\xeb\xd2\xb1\x8d\xd2\x08\xc4\xcf\x92\x89\xb8\x5a\x10\x96\xde\x92\x58\x55\x9b\xa7\x1d\xdd\x48\xce\x28\x13\x34\xa3\xa2\x2d\x8e\xe1\xd3\xd0\x3a\x88\x3f\xc2\x55\x6a\xb9\x8c\xe5\xc5\x50\x5b\x61\xf7\x0a\xa4\x5d\x71\xb2\xbf\x3f\xd6\xa6\x38\xb1\xdc\x6b\xdf\x72\xe9\xab\xbd\x1e\x7b\x13\x01\x28\xe9\x21\xbb\x2a\xf3\x0c\xa1\x58\xdc\x90\x17\x2c\x8a\x55\xd2\xaf\x6c\x77\x9e\x3f\x5a\x5d\x00\x76\x00\x54\x6d\xbf\xb4\x6e\xad\xaa\xeb\xf4\x67\xaa\xd4\x14\xad\x8d\x03\x12\x55\xa6\x10\x9c\x02\x5c\x21\x92\x73\x22\x47\x63\x02\xe6\x34\x3a\x73\x20\x56\x3e\x35\xee\xf5\xfb\x0b\x98\xb7\x9e\x44\x47\xc0\x60\x35\xae\x0e\x16\xb4\x09\x74\x77\x65\x45\x59\x1c\x29\xf4\xc5\xa4\xea\xd2\x90\xa0\x23\xee\xa0\x53\x03\xcb\xcf\xf8\x5c\x60\xfd\x3f\xa9\x33\x58\xf6\xbd\x9e\x9b\xba\x55\xaa\x79\x66\xc0\x4f\x01\x01\xa0\x2e\x3a\x13\xd6\xe8\x3c\x13\xdc\x80\x92\x44\x62\x34\x60\x41\xb2\x2b\xbb\x7d\x19\x76\x60\x57\xfa\xf0\xe8\x8f\xbd\x83\xde\x41\xef\xf0\x0a\xd5\x50\xea\xdb\xd2\x99\x34\x9f\xe7\xac\x54\x99\x30\x06\x68\x0a\xb2\xf3\x01\xab\x8e\x25\x00\x42\xac\xed\xfa\x56\x68\x9b\x61\x32\x21\x2c\x9d\x53\xd5\x6c\x1b\x2b\x9f\x7b\x06\x81\x5f\xe3\xc2\x2a\x81\x3c\x09\xb8\x27\x54\xc4\xf2\x70\x85\xfe\xb8\x5c\x94\xc9\x18\x4b\x6d\xd9\x9f\x9d\x59\x28\x9b\x93\x8b\x46\x69\xd5\xb5\x54\xc5\x07\x99\xc0\x78\xe2\x0e\x90\x83\xe0\x06\x9a\x00\xbc\x48\x39\xb5\xdb\xc4\x99\x12\xd7\x8e\x0a\x3c\x25\x21\x81\x7a\x52\xeb\xef\x00\x5a\x4e\x7f\xe7\xcf\x40\x22\x96\x92\xe9\xa7\x91\x24\x86\x4e\x4d\x4e\xf6\xf7\xfb\x3b\xd0\xcd\x29\x73\x02\x89\xbb\xf4\x09\xad\x60\xe8\xed\xbc\x64\x02\xe4\xca\x61\xd0\xa0\x33\x84\x8c\x21\x30\xb8\x9f\x3e\xfe\xd8\x63\xff\xaa\x4b\x68\xeb\x48\x14\x3a\x2e\x34\x04\x93\xa1\x9e\x33\x90\x45\xce\x73\xdf\x0d\xb1\x1b\x7f\x0c\x31\x49\x13\x02\xf5\x3b\x8c\xbb\xd9\x3a\x33\x98\xa4\x89\x9f\x16\x85\x98\x4c\x5d\xbd\x0b\xfb\x32\x2a\x8a\x03\xb2\x82\x91\x09\xe3\x65\x31\x46\x28\xc0\xfe\x8e\xfd\xe5\xc4\x85\xb3\xfd\xf7\xfe\x0e\x62\x8c\x14\x01\xa1\xe4\x6d\xce\x47\x68\x04\xdb\xed\xef\x7c\xd3\xeb\xf5\xfa\x3b\x68\x94\xf9\x7b\x29\xf2\x39\x9b\xf2\x9c\x4f\x04\x44\x12\xee\xf6\x77\xbe\x73\xbf\x93\x12\x4f\xbd\x74\x48\xcb\xdb\x1a\x3d\xe4\x4e\xa5\x86\xb6\x5a\x3f\x8b\x64\x86\xb8\xf2\x4e\xa5\x02\xbd\x06\x1a\x07\xbc\x27\xdf\x84\x36\x6e\x0d\xc1\xa0\x5d\x70\xb9\x8b\x6b\xb0\x4d\x54\x5a\x76\x13\xc6\x43\x73\x9a\x81\x3d\xb1\x79\x99\x20\xfc\xb7\x25\xca\x78\x05\x2a\x77\x1a\xc4\x44\xf2\x42\x8c\xe6\xf6\xd9\x2b\x7a\xf9\xa2\xfb\x2a\x2c\xdd\x47\x31\x93\xe2\x7a\x4d\x24\xeb\x45\x8f\x39\x61\xdd\xd5\x8c\xa0\xbc\xf7\x29\xdc\x26\xf6\x9b\xab\x57\xb5\x27\xaf\x02\xa2\xb3\x9d\x06\x0d\x97\x89\x2f\x80\x61\x8e\x77\x47\x64\xd2\x8a\x4a\x03\x0a\xaa\xdb\xe0\x21\x44\x55\xb0\x07\x22\x57\x94\x85\x73\x48\x39\xe8\xdd\xe0\x1a\x0d\xd5\x2a\xaa\x06\x25\xc2\x7f\xae\xa6\x0f\xb3\xc1\x3c\x1a\x44\xa7\x42\x70\x76\x40\x43\x2e\xb3\x85\x05\x7d\xec\x9b\x79\xc0\xed\xf6\x53\x4c\x60\x83\x7d\x74\x69\x00\x2f\x76\xa5\x50\x3c\x9e\xb7\x4a\x83\x3b\xdd\xd5\xcb\x86\x04\x68\xd7\x02\x93\x4b\x88\x77\xd9\x81\x5e\xb8\x81\x86\x4b\xa0\xa6\x1f\xd9\x21\x3f\x10\xc8\x75\xbb\x42\xb3\x90\x12\xef\x45\x9f\x01\x44\xd6\x55\x58\xc6\xeb\xc2\x3f\xd4\x1f\x8c\x37\xd7\x81\x3b\x93\xed\xcc\xd2\x34\xc0\x05\x4d\x73\xa9\xaa\xd5\xcd\x17\xb2\xae\xff\x71\xf1\xe1\xfd\x1a\x88\x5c\xae\x19\x55\x3e\x96\x50\x43\x24\xc0\x14\xed\x42\xb2\x10\x06\xaa\x57\xd0\xb2\x1c\x4c\x9e\x34\x4c\xcc\x78\x56\xa2\x55\x7d\x64\x55\xb5\x02\x4d\xfb\x0d\xd8\x2e\xcd\xa6\xb9\x4e\xcb\x44\x44\x31\x31\x5e\x52\xc7\x09\x6f\x61\x20\x58\x92\x1a\xd8\xc8\x71\xf5\x1f\x71\xb6\xe3\x72\xc2\x15\xcb\x05\x4f\x01\xea\x3b\xfe\xdd\x61\xbb\x6e\x3d\xac\xcd\xf3\xc2\xbc\xed\xc2\x25\x88\x81\x53\x27\xdc\x2d\x8d\xb5\x02\xae\xf7\xcc\x6a\xf3\xcf\x58\xd4\xd3\x74\x9a\x49\x94\xf0\x40\x96\x21\x74\x97\x20\x8b\x38\xda\xb2\x52\xbb\x31\x04\x69\xef\x6a\x45\x3a\xcf\x1d\xc0\xb2\x62\x3b\xba\x5b\xfc\x3e\xda\x17\x56\xf1\xd0\x47\xb2\x18\x97\x83\x5e\xa2\x27\xfb\x1f\x4e\xcf\xf6\x69\xfc\xdd\x0a\xc8\xc0\xfe\x20\xd3\x83\xfd\x09\xb7\x82\xd1\xbe\x63\x49\xfb\x47\xbd\x83\xde\x24\xfd\x26\xe5\x05\xef\x22\x20\xc3\xea\xd2\x54\xb7\x84\xc1\xdc\xd8\x7e\xf8\xc1\xb3\xe7\x6d\xf7\x7d\x9a\x4b\x9d\xcb\x62\xbe\xb2\xea\x1a\x36\xa3\xbd\x77\x11\x40\xb8\xdb\x3e\xb7\xc2\xaa\x1f\x56\x67\x99\x80\xb0\xad\x9c\xc5\xcf\x93\x00\x15\x09\xc2\xdd\x06\xff\x9a\xe9\xb1\x1f\xf5\xb5\x2f\x6d\x84\xb2\x7b\xa2\x01\x6c\xcc\xb6\x1b\xcb\x91\xd5\x83\xdd\xeb\x7b\xcc\xc1\xe2\xa3\x5f\x1b\x05\x66\xed\x02\x86\x14\xcb\xe4\x44\xda\x3f\xd1\xde\x68\x12\xa1\x78\x2e\xb5\x89\x6c\x64\x08\x72\xc7\x7d\x97\x1e\x5a\x1b\x70\x7b\xea\xb8\x74\x5b\x9a\xbb\x56\x04\x0c\xd6\x16\xd7\x07\x48\xa9\xf5\xcf\xd2\x23\xa2\xe7\x0d\x6c\x7b\x3b\xf5\x85\xe9\xb4\x5c\x00\x0f\x78\x35\xae\x21\xc0\x2f\x7a\xa4\x45\x8e\x87\xdf\x8a\xa8\x84\x4e\x5c\x11\x85\xb3\x57\x1f\xd7\x31\xf5\x3d\x89\xb2\xff\x85\x45\xd9\x8a\x9d\xfe\xea\x53\x7f\x87\x08\xb7\xbf\xf3\xcb\xfd\x57\x54\x77\x1a\xd8\x4a\xcc\x54\x52\xd4\xc2\x8a\xd9\x03\xd1\x5a\x0a\x80\x8e\x88\xdd\x40\x51\x5c\x0b\xa1\xfc\x92\xb5\x15\x4f\x3c\x61\x5d\x76\xf5\x5e\x2b\x71\x75\x82\xd5\x05\xe8\xe9\x1c\x23\x4c\x10\x92\xcd\x99\x9a\xe3\xe0\xe0\x6b\x6f\x00\x2c\x34\x94\xb2\x53\x73\x0a\xef\x70\x36\xbd\x76\xc2\xe8\x06\x4d\xf3\x24\xda\x36\xdc\x20\x54\x52\x75\x05\x06\xcb\xed\x60\xa1\x59\x4a\xa0\x72\x9e\x12\x7b\xec\x34\x14\x70\x89\x3c\x03\x7d\xc5\xc0\x56\x22\x44\x1a\x47\x30\xa2\x78\x45\x11\x00\x1b\xa2\x8b\xa0\x65\x09\xda\x46\xef\xbf\x6e\x71\x57\xe0\x43\x46\xd4\x4b\x03\xad\x23\x3a\xb4\xf4\x77\xb7\x36\x07\xe4\xd9\x9b\x1a\x1e\xda\xa6\x7d\x6b\xf6\x07\xef\xc2\xa4\x8a\x21\xae\x15\x98\x47\x29\x70\xb5\xd5\x5a\xb1\xe6\xa5\xe9\xcf\xdc\x83\x5d\x8a\x5b\x68\x8a\x91\x8e\x58\x71\xd8\x57\x31\x32\x83\x48\xe6\x0a\xc5\x93\x9f\x28\x30\xf2\x1e\x63\x67\x85\x41\x49\x17\x62\x8a\x07\x1e\x65\x98\x14\x08\xac\x0a\x02\x40\xd4\xbd\x50\x03\xbe\x17\x7f\x1d\x15\x11\xb1\xfc\x34\x2e\xa6\x3b\x3b\xec\x1d\xbe\xec\xb0\x69\xc6\x95\xa2\xb3\x07\xc5\xb5\xe0\x80\xda\x5f\x8f\x8e\x7a\xec\x27\x03\xfc\x24\x5a\x28\xf4\xd7\xef\xcf\x0e\x17\x17\x8f\x76\x5e\x82\x35\xea\x45\x79\x56\xb5\x82\xaf\x9e\x9e\x9f\xfd\x5c\x2b\xd6\x1d\xdd\x93\x56\xe6\x45\xd4\x34\x27\x72\xd7\x40\x28\x20\xc6\xde\xe7\x50\x5c\x90\x17\x82\x36\xc1\x89\x2a\xb9\x48\xf4\x48\x01\x72\x3c\xf6\xe6\xef\xa6\x8c\x17\x02\x54\x2f\xe2\x74\x14\xc1\xec\x22\xf7\x72\x01\x81\x7c\xa5\x8a\x7a\x40\xc6\xdd\x0a\x32\x3f\x92\x85\x5b\xc5\x44\x4f\x26\xa5\x92\xc5\x7c\x1f\x0a\xb1\xc9\x41\x59\xe8\xdc\xec\xa7\x62\x26\xb2\x7d\x23\x47\x5d\x9e\x27\x63\x59\x08\x88\xcc\x76\x35\xaa\x66\x56\xeb\xb3\x5b\x31\x49\xbf\x59\x50\x8d\x62\x1d\x0e\x06\x15\xeb\x97\xaf\xfa\x0f\x52\x51\x41\x13\xb2\xa5\xa3\x1d\xc0\x2f\xae\x53\x7e\xa0\x66\x49\x44\xe0\x21\xb8\x31\x1c\x81\xb0\xec\x76\xc9\xa4\x1a\xba\xfa\x37\x54\xf5\x4d\x04\x4c\x53\x74\x45\x59\x8e\xc5\x4c\x39\x98\xc8\xc2\xc4\x70\xa5\x3d\xf6\x0a\xbd\x44\x03\x11\xa2\x8a\xcf\x14\x7b\xc5\x27\x22\x7b\xc5\x8d\xb8\xf3\x45\x07\x65\xa1\x6b\xd7\x6f\x8b\x65\x77\x79\x2f\x9b\xde\x16\x13\x9e\x8c\xa5\x12\xf9\x3c\x70\x30\xdb\x55\x6f\x76\xd8\x0b\xf9\x46\x8b\xa1\xf9\xef\xe3\x72\x5a\x58\xa1\xd4\xbe\x7f\xa9\xa3\x78\x2a\x92\xba\x0a\x31\x16\xe8\x6f\xb9\xe6\xaa\xa8\x1a\x35\x30\x5c\x78\x3a\x15\x7c\x81\xd6\x79\x1f\x08\xc2\x2b\x66\xbc\x25\x8a\x30\x05\xf1\xae\x57\xbd\x75\xf3\xfb\xd4\xee\xc3\xaa\xbb\xd4\x7f\x5f\x09\x52\x85\x7b\xa4\x4b\xec\xb6\x4b\xac\x23\x74\x5d\x59\x68\xac\xc1\x7b\x02\xdc\xbd\x71\x71\x54\xd7\x84\x3a\x5a\x78\x85\x56\x5b\x07\xfd\xd4\xa9\x02\xcd\x35\xf8\xe5\x1e\x64\x81\x50\xdc\x74\x73\xa1\xc0\x3f\x1b\x82\x65\xc8\xe2\x10\xa9\x68\x39\x28\xcc\xbe\x3a\xac\xbf\xd5\xa6\x7a\x9d\x4b\x35\xe3\xa6\xb8\xcc\xb9\x32\xf0\xf0\xa5\x6c\x5a\xd9\x6e\xc0\x6b\xa0\xbb\x65\x74\xdd\x7c\x3b\xb3\x5f\x21\xe4\x05\x29\x05\x34\xad\xc2\x37\x73\x05\x3d\xad\x0a\x4c\x07\x23\xd4\x1d\x5d\xe0\xe7\x9a\x08\x63\x56\x17\xbb\xa2\x56\x91\x11\xb1\xeb\x8d\x88\xfe\x37\x3c\x83\xf6\x36\x73\x7b\xc1\x07\xba\x2c\x68\xe0\x7e\x94\x5b\xa8\x09\xb9\xe0\x66\xa5\x70\x83\x8d\x70\x88\x98\x2a\xdb\xb1\x2b\xd1\xbd\xd6\x79\xda\x09\xf7\x1a\xa3\x76\xc1\xec\x49\x0b\xf9\xcc\xdc\xc2\x48\xdb\x99\xe6\x02\xa6\x55\x01\xca\x77\x79\x64\x6e\x38\x70\x41\xdb\xdb\xf9\x12\x52\x21\xdf\xa2\x52\x46\xfa\xda\x16\x23\xdb\xc0\x88\x58\xb8\x6c\xdb\xe6\x98\x2e\xc1\xc2\xe7\x0c\x14\x6f\x4c\xc1\x07\x99\x34\x63\x91\x76\x18\xd4\x8d\x3e\xa5\x22\xd2\x20\xd5\x5d\x8a\x7c\x22\x15\x2f\x36\x28\x85\xb3\x26\x0f\xae\x1b\xfe\x68\xd9\x1f\x81\x86\xf3\xa3\x34\xc5\x16\x0c\xed\x47\x4a\xd6\x08\x90\xe8\x0b\xf5\x02\x2a\x13\xfc\xa4\x17\x3c\x6a\xbd\xa0\x15\xe2\xa7\xb6\xec\x98\x3c\x87\x79\x3a\x2a\x95\x33\x99\x5a\xb1\x65\xd5\xc6\x3f\x40\x2d\xdb\x15\x4a\xfd\x4d\x2c\x82\x4f\xfa\xd3\xef\x45\x7f\xb2\x2c\xac\xa6\x3d\xad\xc9\xcd\x91\x86\x7f\x53\x22\x35\xb0\xf9\x47\x29\x56\xc3\x35\xbc\xc5\x0d\x04\xcf\xd5\x14\x29\x88\xa5\x8f\xab\x43\x49\xb3\x58\x91\x5a\x23\xe4\xbc\x10\x23\x9d\xb7\xc0\xd0\x34\x82\xce\x5d\xc3\xea\x95\x08\xfb\x27\x52\x56\xab\xfc\x59\x8f\xba\x18\x88\x4c\xab\x11\x8c\x1b\x22\x64\xd9\x33\x9e\x65\xcf\x42\x56\x25\x9b\x96\x24\xb4\x30\xa9\xc0\x54\x98\x4a\x93\xe8\x99\xc8\xe7\xbe\xdc\x84\xc1\xfb\xa7\x24\xfc\x3a\x17\x2b\x60\x97\x02\x1d\x46\x4c\xaa\x19\x85\x28\x1b\x4c\xa3\x84\x30\xdc\xa4\xc8\xd8\x48\x40\xb0\xe1\xfd\x7b\x57\xd6\xe0\xa5\x9f\x89\x97\x52\xe8\xb8\xab\xf1\xe8\x50\x03\x63\x03\x81\x03\x57\xc1\x14\xc5\x6c\x1e\x89\xd0\xe0\x1a\x90\x6a\x54\x66\x3c\xef\x11\x45\x44\x75\xad\x94\x01\xcf\xbd\x89\x3d\x79\x1e\x06\x84\xd0\x1f\xae\xec\x2b\xaf\x22\x90\x05\xda\x0a\xf0\x66\x6d\x21\xde\x5a\x1a\xf9\x61\xf5\xfc\x5d\xb3\x15\x6b\x00\x14\xe7\xfd\x28\x61\x45\x62\x5f\x5a\x7f\x07\xe7\x60\x59\x41\x7f\x67\x9b\xb8\x89\xac\xcc\xf9\xaa\xa8\x78\x6c\xe4\x86\x4b\x9f\xe2\xb4\xac\x38\xd8\x08\x8e\xe9\xba\x65\xb3\x37\x2d\x93\x4d\xdf\xe3\x10\xf0\x6b\x57\xc6\x74\xc2\x0b\x4a\x35\x8a\x47\xb6\x50\x90\xd9\x8d\x0c\xf0\xec\x0a\xbb\x05\x56\xd3\x8b\x3b\xef\x35\x46\x76\xb5\x17\x15\x29\xcc\x32\x96\xe9\x6b\x44\x93\xdd\x46\x51\x1b\xeb\xbc\xa8\xf3\xca\xb6\x0d\x08\x0d\x71\x09\xc7\x90\x18\x05\x9f\x9d\x0a\x19\x6a\x1b\x3a\x37\xc4\x9d\xf1\x15\x5c\x13\x18\x44\xf0\x55\x5c\xc1\x51\x9d\xac\xb1\x32\xf7\xe0\xe1\x25\xb6\xb0\x6a\x55\xa9\x99\x3f\x87\xee\x73\x1b\x69\x2f\x99\x5e\xe5\x44\xfa\xaf\x53\x62\x2f\xb7\xac\x75\xd2\x81\xad\x73\xdc\x47\xa0\x75\x5e\x54\x6d\xd3\xeb\xde\xf9\x17\x4d\x8b\x31\xaf\xd9\x8b\x65\x5e\xe1\x30\x64\x30\x5e\xad\x7a\x46\x69\xea\xa0\xd8\x51\xd0\xd5\x0a\xb2\x58\xf4\x58\x1c\x3a\x11\x3c\xe0\x09\xfd\x88\xa5\xf2\xf0\xd8\x5d\x82\x4d\x4a\x97\xc5\xb4\x2c\xaa\x21\x4e\x2d\x55\x89\x7d\x36\xd5\x3e\xa4\xad\x40\x35\x62\x92\xb4\x13\x31\x2d\xcc\xfe\x37\xb9\x48\x84\x9c\xd9\xdf\x3c\x27\xed\x72\xd3\x85\x34\x90\x6a\xa4\x13\x3b\xf3\x59\x18\x1d\x52\x29\x20\x30\xc0\x85\x80\x08\xe3\xc7\xeb\x90\x1b\x42\xa0\xc2\xa5\x9e\x76\x33\x2b\xf9\x63\x9d\x2f\x91\x3b\x89\xd6\x3f\xc3\xa1\x22\x7c\x51\xc2\x4d\xec\x8b\x0b\x50\xc8\x0b\x2b\xfc\xf3\x3a\x5f\xf8\x78\x94\x61\xe7\x81\x20\x28\xa8\x2e\x95\x66\x9a\x71\x8f\xd5\xc4\x47\x62\x41\x69\x7f\x7b\x5e\x5b\xd2\xee\x1e\x4c\x0b\x6d\x84\x22\xdf\x84\x77\x25\x6d\xc1\x5b\xf7\x36\x11\xff\xee\xa5\x29\x10\x71\xb0\x18\x5a\x6a\xa2\xaf\x8c\x28\xac\x36\x1c\x6e\xa6\x57\x1f\x5f\x2f\xb0\xfb\x3a\x5d\x68\xd9\x69\x84\x36\x8e\x43\xdb\xfb\x0c\xbf\x58\x5e\x61\xff\xc6\xe2\x47\xaf\xd7\xbb\x7f\xb9\x62\xcb\x5c\xf6\x87\xf4\x8e\xa1\xf0\xb2\x8c\x58\x50\x4a\x21\x1c\xb6\xaa\xb0\x68\xd9\x0c\x08\xbc\x55\x49\xa6\xbe\x97\x8b\x02\x7e\x5b\x82\x87\x56\x46\xff\xb6\x05\x1c\xc5\xea\x26\x2f\xaa\x95\x96\x56\x61\xb0\xb8\x38\x57\xb2\x4d\x86\x58\x90\x00\xb9\x04\x01\x35\x14\x95\x47\x39\x68\xa6\xd0\x39\x1f\x89\x5e\x05\x45\x11\x71\x15\x03\xfe\xa3\x5d\x1c\x2c\x4b\xe2\x86\x09\xa9\x08\x15\x80\x48\x9e\x5d\xf3\x79\x84\xef\x04\xac\x98\x42\xa7\x9c\x81\xd3\xc9\x2c\xee\xa8\x34\x19\x7f\x03\x52\x03\x82\x46\xb0\xa4\x54\x94\x4f\x6f\x6a\x09\xf5\x51\x10\xca\x89\xcf\xbc\xf6\x60\x71\x51\x18\x17\x05\xa1\xb0\x73\x1c\xa6\xb7\xd7\x96\xaa\x32\xc1\x04\x5d\x0d\xab\x71\x6e\x28\xbf\x13\x34\xb8\x75\xf0\x77\x4e\x60\x56\x57\x01\xce\x69\xe5\x9d\x5c\x70\xf3\xd9\xec\xf3\x24\x11\xc6\xc4\x2f\xb0\x77\x33\x92\x67\xb8\x8a\xeb\x5f\x74\xe3\x53\xf7\x0d\x81\xea\xc0\x5d\x58\xfa\x11\xda\x6f\x6a\x18\x41\xab\x03\x96\x97\x02\x2f\x9a\x44\xaf\x74\xad\x40\x9b\x88\xdc\xaf\xc7\x82\x2a\xbd\x2e\x64\xa4\x96\xf1\x52\x5a\x65\xd7\x5e\xeb\x1e\xd8\xa0\x0b\x9d\xa5\x6d\xe1\x8d\xec\xea\x15\x3e\x71\x05\x44\x7c\xf5\xde\x3d\x93\x5e\x79\x5a\x83\xe8\xb3\xf8\x87\x2d\x94\xa7\xf6\x4a\xd1\xf7\xc4\x02\x2b\x75\xaa\x97\x06\x07\xc4\x15\xa7\x1d\x1b\xbc\x86\xc0\xb1\xf8\x97\x65\x7b\x30\xe6\x6b\x49\x76\x8d\xda\xd6\xeb\x8a\x77\x95\x07\x17\xc8\x78\xed\x7b\x30\x6b\xab\xbe\x7b\x4f\x3b\x10\x55\xfe\x5d\xb6\xfe\x11\xf7\x08\x4a\x46\x80\xa6\x42\x2d\x78\x71\x9d\xdb\x05\x22\x68\xcb\x7e\x34\xd9\x14\x89\xa9\x15\x20\x8a\xb5\xf7\x84\xb8\xf7\x66\xdb\xb1\x96\xa3\xcd\xc7\xb1\x07\x99\xca\x7d\x75\xc7\x52\xd5\x02\xa3\xce\x72\x49\x0b\x83\xef\xad\x70\xef\x2e\x84\x2b\xb7\x80\x57\xe4\xb7\x1a\xfa\xaf\x88\xe5\x84\x06\x76\x70\x03\x5d\x8c\x23\x58\x05\xf6\xc1\x65\x7c\x45\x0f\x1a\x8c\x74\x0d\x8d\xe2\xcb\x0d\xb0\x25\xa2\x86\xf5\xa0\xc8\xb5\x79\xd6\x6c\xbd\xac\x87\x59\x94\xe5\xe0\x2d\x81\x7a\x08\xc4\x13\x6d\x97\x59\xb9\x5f\x6d\x33\xad\x4f\xf4\x72\xe3\xf5\x9e\x54\x37\x2b\x74\x4c\x51\xe8\x1b\x6e\x87\xf3\xfa\x2a\x6f\xdf\x72\xa7\xc6\xca\x1b\x25\xa1\xb7\x68\x04\xb3\x54\x24\x91\x11\xc1\x85\xdc\x05\x42\x0a\x6d\xb1\x7b\x11\xa6\xb3\x77\x25\x3b\x0f\x9e\x34\xac\xbf\x03\xb0\x15\x99\xfc\x2c\xfa\x3b\x1d\x26\x0b\x94\x63\x0c\xa0\x17\x0d\xf4\x0c\x20\x17\xaa\xad\x6a\xbd\x98\x4e\x24\x22\xfa\x74\x14\xf1\x45\x26\x7a\x94\xf3\xe9\xd8\x21\x76\xf7\x77\x7e\x68\xf6\x61\x98\x29\x78\x4e\xd8\x9a\x9c\xf5\x77\x66\x76\x14\x80\x6c\xc2\x73\x07\x10\x8d\x46\x3a\xee\x71\x90\x10\xa9\xf8\x6f\x96\x63\x61\x2f\x7b\xf4\x88\x4b\x64\xcc\xe6\x14\xd2\x01\xb3\xec\xef\xf0\x6c\x3a\xe6\xae\x98\x94\xe5\xa4\xfd\x1d\xd8\x16\x8a\xc9\xa9\x76\x2c\x55\xd4\xb1\xab\xd9\x0c\x27\x1c\x13\x54\x90\x3a\x06\x73\xf6\xfd\x29\xda\x01\x05\xd6\x1e\xa5\xbf\xe1\x5d\x6c\xf7\x1a\x10\xe8\xbe\x3f\x45\xd7\x49\x48\x61\x29\xc6\x4c\x69\x66\xca\xe1\x50\x7e\x61\x06\x52\x18\x0c\x3e\x0f\xd7\xd5\x74\xcc\xf7\xd0\x36\x09\x13\x1a\xcc\x29\xd1\xce\xce\xa3\x32\x65\x9a\x71\x65\xb4\x3d\x76\xaa\x1c\x1a\x84\x1b\xad\x2f\xed\x4e\xeb\x7d\xc2\x66\x87\x07\x1d\x36\x3b\xea\xb0\xd9\xa1\xfd\x3f\xdc\x2c\xf0\xe9\xc0\xfe\x75\xdc\x61\xb3\x63\xb8\x6c\xec\x57\x47\x30\x22\x6c\x07\x7f\x1e\x75\xd8\x50\xeb\x43\xfc\xb7\x9e\x62\xf7\x08\x9c\xe0\x2e\xd0\x62\x63\xfb\xc3\x9a\xb6\x47\xd4\xd7\x1b\xfa\x67\x43\x0c\x7d\x0c\xc6\xc8\x7a\x0c\xd4\xda\xe6\xc8\xb6\x60\xce\xf5\xa2\x38\x57\x1b\x24\x29\x30\xa9\xd5\xe4\xff\xb8\xd4\xf6\xca\x50\x81\x01\x44\xbe\x58\x28\xa6\xe7\x81\x6a\x01\x14\xd7\x1e\x51\xc7\xb6\xd1\x51\x1b\xf1\xdf\xcb\xb1\x98\xbb\x24\xd7\x90\x45\x08\x89\xaa\xa1\x57\x89\xb9\x69\x8b\xa1\x30\xd2\xf6\x82\xc2\x4d\xe3\x14\x35\xf4\x7b\x48\xdb\x67\x85\xbc\x29\xcf\x0b\x99\x80\x91\x9f\x1b\xc8\xfc\xa3\x1c\xc6\xb5\xa2\x56\x1f\xc1\x11\x0f\x01\xab\x6b\x1e\xf2\xca\x4f\x4b\xe1\xf9\x3f\xb5\xf8\x63\xa2\xaf\x7e\x59\xd1\x93\x7b\xed\x84\x4f\x17\x85\x25\xea\x5c\xa4\x6b\x26\x7e\x56\x1b\x3b\x9c\xec\x48\x78\x6e\x86\xa7\x39\x48\x29\x7b\xf5\x88\x99\xc8\x43\x2a\x64\x8f\x5d\xe6\x3c\xf9\x4c\x46\x03\x13\x25\x65\x52\x49\x48\xce\x26\x72\x44\x09\x92\x80\xbf\x00\x00\x10\x30\x84\xd0\x56\x2a\x26\x8a\xc4\x95\x84\x45\x51\xc7\x58\xe1\x1c\xac\xfd\x46\x57\x7a\x81\x78\x1a\x9d\x65\x22\x07\xbb\x86\xdd\x3e\x33\xae\xb4\x08\x51\xb1\xfe\x82\xdc\x05\x14\x7d\x3b\x4c\xa5\x99\xce\x5c\xa9\x10\x92\x6e\xc4\xb0\x40\xe0\x31\x30\x1e\xc5\x17\x25\x24\xfb\x08\x67\x5c\x2b\x1a\xa9\xa7\x14\x57\x44\x29\xa7\x5e\xe2\xc2\xf8\x23\x8a\x1f\xc2\x3e\x28\x78\xf7\x0a\x4e\x62\x10\xdb\xae\xc7\x32\x83\xfe\xad\x0e\x42\xd0\x05\xa1\xbf\x87\x01\x2a\xb9\xff\x3b\xa5\x19\xc7\xb8\xee\xa5\xf2\x73\x23\xb7\x3a\x48\x45\x96\xd4\xc0\x44\xfe\xe4\xcf\x6a\xfa\xb3\xb6\xf7\x49\x9d\xb7\xb4\xf5\xf5\x03\x38\x1a\x2b\x29\xb1\x11\xc1\x37\x12\x17\xf5\x69\xd8\x6e\x70\x65\xb9\x47\x83\x65\xb7\x44\xdf\x3a\xa8\x80\x7b\x4f\xbe\xaf\xdb\xf4\x7d\xa5\x5e\xe7\x5e\x09\x29\x13\xa5\x3f\x06\x41\x4d\x9a\xba\x25\xa3\xbe\x7a\x56\x31\x94\x86\x85\xe7\x7b\xec\xaf\x96\x83\x12\x25\x60\xc5\x1f\xdb\x28\x8a\xb2\xac\x76\x8c\xc4\x2b\x18\x67\xd7\x3c\x07\x0b\xd1\x58\x70\x52\x4d\x1d\x16\x26\x96\x7e\x9a\x6a\x55\x0f\x0e\x00\x73\xf8\x36\xe6\x5d\x37\x60\xa9\xd5\x5f\xf1\xb5\x6b\xae\x50\x78\x80\x59\x61\x2c\x97\x69\x30\x36\x82\x21\xd6\xcd\xc2\x9f\xf7\x42\x63\x0c\x14\x46\x85\xf4\xd8\x3b\x3e\xf7\x95\x0f\xec\x32\x61\x82\x70\x58\xc1\x2b\x57\x2a\x09\x2f\xc6\x7a\xbf\x0b\xf6\xa7\xb2\x09\x70\xb8\x73\x91\xe8\xc9\x44\xa8\x14\x08\xdc\x6d\xa0\x12\xd7\xf6\x46\xab\xaa\xfb\xf6\x47\xf1\xf7\x92\xc3\x69\x73\xb8\x27\xa6\xe0\xe8\x98\xe8\x30\x39\x84\xf4\x13\xb8\xaa\xee\x18\xce\x26\xb6\x2b\x60\x29\x74\x88\xf6\xfb\xcf\xff\xf8\xbf\xb3\xc3\xff\xfc\x8f\xff\xd7\x81\xbf\x8e\xe0\xe4\xc0\x47\x51\x24\xeb\x9a\xd1\x2a\xeb\xc5\x8b\xcd\xcd\x6a\x60\x89\xc1\x2e\xc3\x26\x6d\x61\x68\x07\x53\xe4\xa3\x35\xf0\x92\xb1\x75\x7b\xe3\xee\x4a\xae\x71\x03\x3b\x6d\xe5\x1a\xaa\x78\xe4\x36\xbb\x86\x9a\xc6\xe5\x45\x17\xd2\x62\x48\xe1\x95\x5c\x95\xa8\x0f\x6c\x36\xc3\x8c\x8f\x98\x50\x7c\x90\x49\x35\xda\x4f\xa5\xc1\xbf\xaa\xcb\x05\xb2\x22\xea\x7e\xee\x80\x4a\x8e\x21\xf0\xa7\xe7\x67\x0b\x22\xc2\x97\xbb\xb1\x50\xb8\x5d\x43\x39\x88\xb2\xbd\xea\xbc\xa5\xb6\x34\x75\x07\x6c\xe3\xe4\xc5\x1e\xd9\x4b\xb0\x5c\x39\x9f\xa9\x88\x50\x7b\x2b\x56\x2c\x6a\xff\xcf\x4b\x8e\xd4\xf2\x79\xfe\xce\x9c\x57\xcd\x33\xb4\xd8\x99\x35\x5b\x7e\xa0\xd6\x70\x46\x55\x4f\x55\xfc\xc0\x16\x47\xab\x3a\xc7\xd5\xa7\x6a\x4d\x5b\x59\x1d\x26\x8a\x4e\x60\x0b\xad\x3f\x98\xb5\x2c\x22\x83\x8b\x84\x67\xcb\xea\x41\x2c\x7f\xd0\x87\x01\x11\xee\x88\x8b\xd4\x17\x50\xd4\x47\xc4\x4b\x8c\xea\x4e\x55\x6f\x5f\x2b\x11\x76\x20\xb2\x0b\x91\x89\xa4\xd0\xf9\x1a\xf0\x8a\x8d\xf6\x95\x9c\xb2\x80\xb3\x48\x41\x15\x60\x03\x6a\x00\x27\x42\x45\x16\x9d\xa3\x28\x87\xc8\x34\x38\xdd\x2b\x4c\xf5\xeb\x19\x7a\xc1\x55\x8f\x7d\xb0\x12\x92\xef\x17\xab\x91\xe9\x12\x13\x78\xaa\x08\x8e\x14\xb8\x41\x68\xc2\x3e\x94\x18\x1f\x86\xa1\x92\x17\xad\x87\x6f\x41\xf0\x6a\xc0\x00\xb9\x0a\xed\x89\xb0\xaf\x75\xfe\x19\x39\xd2\xbf\xe8\x5c\xfe\x43\xab\x82\x67\xe7\x3a\x3d\x2d\x0b\x0d\x4b\x9f\xc7\xd6\x0a\x48\x29\x42\x77\x02\x9c\xd8\xb0\x0c\x51\x55\x34\xf4\x1a\xe0\x03\xbb\x70\x92\xc0\x08\x9f\x89\x2f\xcc\x4d\x97\x2a\x0c\x3a\x28\x4a\x9f\xfd\xcc\xe3\x48\x76\xd8\x81\xf0\x88\xf4\x6e\x97\xa1\xce\x27\xad\x79\x49\x77\x18\x87\xf1\x0d\x2c\x46\x37\xa6\x43\xf4\x09\xe5\x02\xb3\x0b\x28\x2f\xc0\x09\x5e\x0e\x5e\x8f\x68\xa4\x4d\x28\xe8\x10\xaa\x7a\x8d\x12\x5c\x9d\x51\xf2\x9c\xed\xc3\x8b\xaf\x2a\x27\x00\x5c\x4c\x4e\x4c\xa6\xf4\x43\xac\x30\x4a\x35\x48\xb7\x10\xd1\xa6\x22\xf9\x28\xa6\x99\x4c\xb8\x59\xe3\x74\xd4\x9b\xdf\xf2\xe1\x98\x8a\xa4\x97\x53\xf7\x77\x75\x34\xf0\x34\xdc\xd2\x26\x2e\xdc\x25\x54\x8a\x00\x1a\x2b\xcf\x75\xce\xb4\x62\xdf\xbf\xb9\xdc\x3a\x25\x7b\x93\x2d\x6a\x3c\x70\x27\x1c\xec\xae\xb7\x09\x39\xd8\xad\x6d\x54\x7d\xd4\x5b\x9c\xb6\xba\xdb\xee\xa6\xf1\xf8\x8d\xa3\xb7\x7c\xd7\x1f\xc5\x65\xbf\x99\x6f\xac\xf1\xe4\x92\xeb\x1e\x7f\x5f\x75\xdf\xb3\x0b\x0f\x3e\xe0\xb3\x62\xdd\xbd\x24\xa2\x8b\xaf\x9d\xca\xab\xbd\x05\x03\x4e\x87\xfd\x81\x72\x5f\xec\x55\xb4\xbf\x60\x2c\x6d\x56\xa1\x3f\xb0\xf3\x9f\x2e\x6b\x26\x1f\xd1\xda\x43\x81\xa5\x6f\xea\x1d\x68\x2a\x20\x0e\x85\x10\x46\xca\xde\x6d\x88\xe2\x47\xe0\x17\xf3\x62\x6c\xaf\x3e\xf1\x25\x11\xd3\xa2\xb2\x52\x05\x57\xff\xe0\x38\x80\xfd\xf3\x0f\x17\x97\xfb\xe7\xa7\x97\xaf\xfe\xa5\x31\x96\x86\x15\xb0\xf1\x92\x46\xa7\x3b\x0f\x49\x62\x5b\x51\x97\xa9\xb0\x38\x9a\x0c\xa4\xf9\xd5\xa5\x48\xb3\xa5\x18\x69\x6a\x62\x2e\xbb\x77\x7d\x0b\x05\xed\xe5\xf6\x0c\x9e\x89\x9a\xff\xb9\xbe\xfd\xa4\xa6\xe0\xc1\xe3\xed\x8c\x0f\x98\x3f\x5e\x60\x80\x95\x7a\xc5\x49\x28\xb4\x0a\xfd\xec\xf0\x8a\x6e\x02\x42\x4c\x78\x5c\xf0\x4b\x4d\x66\xb5\x74\xc5\xda\x5c\xf6\xab\x97\x8c\x98\x4c\xb4\x66\xc4\x4b\xc0\xec\x21\xd2\x13\x76\xd8\x5b\x79\x10\x1d\xce\xb7\xcf\xd8\x6f\x3f\x99\x57\xfe\x6d\x78\xe0\x75\x5c\x6c\xbf\xc7\x8e\x56\xbf\xa8\x75\xc0\xcb\x98\x8d\xa6\xd8\x5e\x72\xb2\x2f\x1f\xc1\x63\x70\xb4\xfd\xdc\x16\x4c\xba\x9c\x79\x84\x47\xaa\x49\xda\x91\xb9\x6c\x22\x8a\xb1\x4e\xb7\x65\x18\x1a\xe3\xfb\x7f\x3e\xbe\xb8\x37\x23\x68\xad\x1c\xe4\x52\xca\xaf\x0d\xcf\x19\xa4\x5d\x56\xc2\xec\xd8\x59\x0b\xa9\xf0\xcd\x62\x53\xe8\x03\x51\xc0\x1b\x42\x9c\x7d\x4d\xa9\xa9\xab\xb6\xbf\xb5\xbd\xf3\xe2\x3b\xcf\x23\x14\xce\x8c\xd0\x6c\x2b\xf7\x3f\x0c\x22\x15\xa9\xcf\x86\x85\x2e\xd6\x20\x85\x25\x05\x0f\xd6\xd1\x00\x5a\x6a\x8f\x3d\x6c\xb9\x9f\x40\x6d\x2b\xaa\x98\x56\xc0\x4f\xd5\x9c\x6a\x33\xc2\x2f\x54\x93\x15\xa3\x04\x11\x78\xbd\x82\x67\x7d\x02\x55\x59\x3b\x4c\xaa\xe2\xe5\xf3\x0e\x1b\x66\x9a\xc3\x1f\x38\xe3\x0e\xfb\xf4\x0b\x38\xa4\x87\x3c\x11\xff\xfe\x6b\x87\x4d\xf8\xf4\x13\xfe\x14\x7f\x0f\x64\xaa\x64\x76\x4b\x65\x50\xdb\x4f\xd9\xda\x85\x5c\x91\xd1\xd8\x2f\xbb\x74\xe8\x30\x4c\xd3\x12\x5d\x05\xa9\x9e\xbd\xce\xf9\xb0\x60\xcf\xd9\xee\xb8\x28\xa6\x27\xfb\xfb\x7f\x33\x5a\x75\xa9\x20\xb2\xce\x47\xfb\x7b\x6b\x10\x1d\x31\x98\x8d\xa9\xed\x9f\xda\x9d\x36\xeb\x3c\x1a\x62\x01\xce\xda\xe0\x83\xee\x81\xe5\x51\x21\xe1\x15\xa3\x3b\x6f\x5f\xb2\x47\x30\xc4\x2c\xfb\xd0\xd8\xb4\x7b\x74\xd0\xd7\x49\xfb\x26\x1e\x79\xae\xe6\xbf\x9b\xb9\x90\x11\xe0\xbe\xa8\x65\xe9\xc5\x9d\x86\x34\x28\xee\xad\x13\xa1\x34\x8f\xaf\x89\x5e\xcd\x46\xf4\xc1\x04\x14\xbe\xce\x31\x76\x7a\x28\x78\x51\xe6\xb1\x3d\xa5\x11\x87\xe4\x1e\x72\x4d\x47\x50\xf3\x74\x51\xb8\x12\x1a\x7f\xdc\xb8\x42\x0a\x61\x42\x55\xfc\x43\xfe\xdd\xec\x90\xed\xea\x1c\xbc\xf4\xf9\xde\xe2\xa4\xd8\xd3\xf3\xb3\x05\x1a\x46\xb4\xe6\xf5\x8d\x59\xe3\xa8\x3f\x16\xaa\x8b\xef\xe5\xe6\x0c\xa7\x56\xe0\x50\x49\x0b\xa7\x7a\x34\x53\xac\x56\x35\xbf\xe1\x7c\x6f\x24\x27\x09\x55\x4e\x1e\x98\xe1\xdc\x88\xcb\x50\x06\xc2\xbd\x71\x99\x05\x83\x20\x57\xe9\x3b\xfe\x45\x4e\x9a\x0b\xba\x96\x8f\x3a\x74\x22\xd5\x0d\x3a\xf1\x02\xfb\xbd\xdc\xd3\xed\x0a\x45\xeb\xd0\x36\x2f\x15\x16\xe9\x55\xf4\x3d\x79\x6c\x1c\x24\x2a\x7d\x8d\x52\x30\xea\xe6\x2e\x5e\xd8\x0b\x89\x71\x13\x97\x16\x98\x9e\xf4\x55\x5f\x75\xd9\xc0\x68\x85\x67\x4b\xa6\x27\x96\xbd\x1b\x0f\xb9\xc8\xce\x5e\x63\xc9\x57\xc6\xd9\xd1\x73\xab\xf1\xe7\x3c\x81\x32\xa3\x63\xf1\xc5\xf9\xd6\xba\xac\xcc\xe5\x89\x1d\xea\x4f\x1f\xcf\x18\x37\x6c\xca\x73\x42\xf9\xf9\x5e\x67\x5c\x8d\x98\x12\xc5\x7e\x99\x67\xbd\x73\xfb\xc3\x47\xb4\x39\xd8\xb6\x5d\x26\x26\x5c\x66\xf0\x2c\xfc\xe5\x2a\xec\x2e\xec\xc5\x36\xc2\x6e\x4e\xa9\x65\x17\x8a\xe1\x2a\x3e\x11\x27\xbe\x84\x7b\x0d\xa5\x13\xd2\x52\x15\x3b\x03\x98\x4d\x51\x60\xe1\x61\x8c\x9b\xe2\xc6\xc7\x0c\x0c\xe6\xec\xe3\xdb\x57\xec\xf0\xe0\xd8\xea\x0a\x54\x5f\xfc\xb8\x77\xc8\x3e\x7d\x7c\xfb\xca\x7e\xfb\x4b\x8f\x75\x99\x9c\xce\x9e\x9f\x60\x39\xe0\xd9\x73\xa8\x09\xdc\x3e\x52\x1c\xe4\xd9\x39\x3e\xf2\xd2\x3d\xf2\x72\xbd\x47\x12\x99\xe6\x76\x3a\xaf\xce\x5e\x7f\x5c\xde\x1c\x5a\x74\xd9\x84\x27\xb6\xfd\xbb\xd3\x57\xab\x96\x10\x1f\xb3\x0d\xbb\xac\x2c\x61\xc7\x15\xfb\xe9\xa7\xb3\xd7\x94\x61\x81\x5a\x6d\x39\x9d\x22\xa0\x50\xbc\x3c\x18\xea\x3d\x12\x5f\xd8\xee\x77\x72\xef\xdf\x3e\x1d\x74\xbf\xe5\xdd\xe1\x2f\xff\xfe\xa7\x5f\xbb\xdf\xf9\x0f\xcf\xd7\xfb\x70\x78\xf4\xeb\x3f\xd1\x08\x8e\xfd\x10\x8e\x6f\x71\x0c\xc7\xfe\xd3\xf1\x3a\x83\x78\xee\x07\xf1\xfc\x16\x07\xf1\xbc\x3a\x88\x3f\x7d\xcb\x07\xbf\xb4\x8f\x2b\x1a\xca\x0b\x3f\x94\x17\xb7\x38\x94\x17\x9b\x0e\x45\x9a\x81\x42\xb2\xbd\xf8\xcb\xfb\xc3\x03\xa6\x73\xfc\xeb\xd8\xe5\xee\xd1\xf1\x07\xa8\xae\xfe\xce\xc1\xf1\xd1\xe1\x1f\x5f\x1c\x1e\x3c\x3f\x76\x59\x7f\xdf\xfe\xf1\x4f\x5d\xff\xed\x61\x7f\x87\xfa\x3c\x3c\x88\x7b\x5d\xdd\x17\x3d\x75\x1c\x9e\x5a\x30\x82\x96\xf7\x25\xb9\x48\x65\x91\xf0\x1c\x18\x1b\x7e\x62\xf6\xa3\xeb\xa1\x75\x25\xff\x6d\xf7\xbb\x13\xd8\x39\x58\x8b\xdd\xef\x4e\xf0\xef\xe3\x5f\xf7\xbe\xfb\xfa\xe2\xd3\x61\xf7\xc5\x2f\xf4\xe3\xf3\x5f\xbf\xbe\xdc\xfd\xee\xe4\xe0\xf0\xf0\x2b\x2c\x2f\x7e\xbf\xe7\x1f\xfd\x7a\xfc\xe9\xf9\x1f\x5d\xe3\xe3\x5f\xbf\x1e\xdb\xc6\x9f\x0e\xba\x2f\x7e\xf9\xfa\xe9\xe5\x9f\xaa\xad\x0f\x7f\xfd\xba\xfb\xdd\xc9\xd1\xe1\xf1\xe1\xd7\xc3\x3f\x1d\x1c\x7c\x3d\x7e\xd1\xef\xa7\xf6\x9d\xf6\x3f\x87\x87\xbf\xee\xfd\x13\x65\x6c\xaa\x39\xe4\x87\xa6\x72\x64\xe7\x12\x38\xf2\x44\x7e\xc1\xc0\xf9\x2e\x33\xc6\xee\x1c\xfb\xa9\x77\xd1\x63\x46\x27\x92\x67\x96\xa1\x95\x50\xb1\x8f\x26\x1e\xae\x86\x68\xde\xf8\xc6\x4f\x5d\xf6\xcb\x77\xf6\xcf\xa3\xf0\xe7\x73\x20\x89\xb1\xf8\x92\xe8\x4c\xe7\xb0\x15\x63\xf1\x85\xa7\x22\x91\x13\x8c\xdf\xd7\x39\x4b\x74\x2a\xdc\x66\x7c\xf3\x16\xfe\x77\xd2\xfe\xa2\x6f\xbe\xdb\x25\x72\x3b\xed\xbe\xb5\x2b\xfb\x35\xfe\xf8\xd2\x4e\xb6\xcb\xf2\xd1\x20\xbc\xed\xe3\xf7\x7f\x69\xbc\x25\x1f\x0d\xdc\xeb\xf2\xd1\x60\xf7\xe8\xc5\x8b\x0e\xfd\xff\x5b\xd8\xfd\xc1\xbc\x10\x27\x6c\xc0\x8d\x78\xf9\x9c\x09\x65\x1f\x4c\xd9\x40\x2a\x9e\xcf\x19\xa0\x99\x74\x99\xab\xb9\x7d\x02\xeb\xea\x80\x10\xfd\xc5\x66\xaf\x49\xbb\x92\x29\x26\x74\xc5\xd4\x76\x74\x70\xf0\xb2\x7b\x70\xd8\x3d\x38\xea\xef\xd4\xae\x91\x61\x99\x65\x5d\x78\x44\x2a\x7b\xa7\x1c\x1f\x1f\x7f\x6b\x3b\xa3\x6a\x68\xd0\xa1\xaf\x8c\x56\xed\xf4\x88\x29\x83\xfd\x35\x78\x77\x21\x27\x02\x99\xf7\x6b\xf7\x30\xac\x06\xa2\xa3\x64\x02\xc9\xe3\x22\xe1\x59\xd4\x3d\x49\x0c\x38\x13\xdb\x83\x9f\x0d\xe0\xe9\xd7\xa7\x74\xf8\xbc\x7b\x78\xd4\x3d\x7c\x71\x79\xf8\xed\xc9\xf1\xc1\xc9\xd1\x41\xef\xe0\xe0\xe0\x7f\x37\x26\x68\x3b\xe8\x42\x07\x61\x82\x5b\xc4\x27\xc8\x46\x6c\xe8\xd6\xf8\xd2\xf7\xa2\xad\x9c\x2e\x16\xc0\x27\xfc\x4b\xab\xe1\xaa\x52\x02\xf3\xe5\xf3\x2d\x4a\x60\x4e\xf8\x97\x1f\x85\x1a\x35\x63\x37\x6e\xa5\xeb\xc5\xf6\xac\x5b\xe9\xbe\x4d\x82\x0f\x1d\xa7\xba\x1c\xd4\xfd\x92\xae\x67\x64\x53\x0b\x3a\x96\xea\xae\x16\x5b\xaa\x3b\x5b\x6c\xa9\xee\x74\xb1\xdb\xd5\xa5\x5b\x58\xec\x32\x2b\xe4\x34\x13\x4d\x8b\xdc\xcd\xfb\x56\xfa\xde\x0c\x63\xad\x96\x95\xca\x58\xca\x2c\xe3\x83\xa6\x0e\xbd\x96\xc2\xa9\x55\xcb\xfa\xfc\x46\x2d\x96\x53\x5e\x58\x3d\x69\x1b\xd6\x4c\x8f\x2e\xa6\xf3\x47\x63\x7a\xba\x99\xb5\x69\x81\xe3\xe4\xf7\x33\xc1\x28\xea\x6c\x1d\x92\xbe\x45\x14\xdd\x42\x16\x8b\xcf\xe0\xa6\x55\x5e\xd6\x72\x91\x42\xc1\x9c\xd6\xfb\x64\xad\xa3\x5f\xc9\x49\x17\x93\x81\x48\x53\x91\xfa\x78\xe0\x15\x86\x9e\xe5\x0f\x47\x91\x49\xbc\x70\xa8\x74\xa5\xab\x76\xed\x9a\xb3\x1f\x7c\x17\x2c\x2f\x15\x88\x89\x1f\x28\x34\x0c\x44\xc2\xcb\xf9\x54\xbc\x13\x84\xee\x17\x6a\xbd\xa1\x89\x08\xaa\xdd\x38\x53\xbb\x8b\x0c\x41\xf8\x73\x57\xaa\xb7\xd0\x6c\x58\xe6\x10\xd8\x91\x0b\xbb\x94\x49\x41\xe1\xc3\x34\x00\xf7\x18\x82\x09\xd6\xca\xc7\x56\xa0\x03\xbd\xe9\x89\xf1\xb2\xd0\x13\x5e\x38\xa4\x9a\x75\x10\xf5\x6a\x63\x1a\x08\xca\x9c\x1c\x94\x45\xa8\x20\x3c\xe6\x33\x41\xbf\xca\x38\xd8\xc4\x3e\x6c\xe5\xf2\x79\x04\xf5\xb7\x5b\x4e\x6d\xd3\xfa\xb0\x03\x1e\xe2\x22\x74\xcc\xf5\x09\x42\xaa\xa2\xab\xf3\x2e\x11\xe0\x06\xc4\x50\x79\x30\x4a\x9a\x26\x52\xf0\xa0\xf2\xd2\x30\x21\x61\x6f\xa2\xca\xf2\x3a\xf7\x41\xf5\x14\x05\x8b\xf0\xff\xb8\x5e\x40\x3b\xd3\x62\xce\x7c\xe9\x74\x5a\x54\x48\xed\xb7\xdf\x71\xc3\x92\xb1\xcc\x52\xac\x6f\x33\xff\x30\x84\xda\x01\x22\x77\xa5\xe2\x87\x91\x56\x17\x55\x9d\x0e\x5f\xd2\x45\x60\xc0\xc2\x78\xb8\x87\x9d\x9c\xf4\x15\x63\xac\x0b\xaf\x38\x71\x63\xad\x7c\x87\x43\xee\xab\xa3\x3d\x06\xfe\x4c\xf7\x44\xf4\x78\x7b\x07\xcd\x2e\xe0\xab\x5e\xaf\xc7\xfe\x21\x72\x6d\x17\x64\xa2\xf3\x05\x12\xca\xfa\xbb\x59\x07\xaf\x58\x7b\x37\x2b\x0f\x32\x28\x9f\x02\x31\x63\x5c\x51\x94\x33\x1c\x54\xbb\x86\xed\x10\x17\xec\x6a\xc2\xa7\x57\x56\xf5\xa2\x7c\x28\xa7\x4f\x43\x7f\x90\x35\xc4\x5d\x55\xde\x54\x7c\x71\x1b\x32\xe1\xd3\x9e\xdd\x01\x28\xff\x50\xf0\x11\xd6\x81\x75\x79\xb5\x25\x95\x8d\x45\x98\x0b\x20\x2c\x3c\x3d\x63\xab\x0c\xb6\x0f\xa4\xbf\x13\x00\x2d\x5d\x3a\x48\x7f\x67\xc2\xa7\xfd\x9d\x1e\x3b\xcd\x8c\xee\x04\x3e\x15\x57\x1f\xf7\x15\x05\x42\xd9\x83\x28\xfd\xc3\xea\xac\x39\x6c\x60\x4a\x49\x20\x2e\x27\x12\xa8\x10\x33\x3f\xca\x5c\xb0\x5d\xa5\x99\x12\xc6\xb9\x22\x7d\xc8\xc7\x1e\x4d\x53\xb0\x70\x35\x47\x6f\x87\x57\xd1\x31\x89\xe1\x42\x75\x8e\x33\xae\x79\x43\x3b\x76\x56\x80\x8a\x61\x17\x43\x9b\x4a\xaf\x96\x8d\x91\x75\xd9\xe3\x1d\x22\x20\x9c\xbd\x42\xee\x1d\x75\x7e\x21\x24\xca\x66\xb4\x89\xc7\xbe\x49\x97\x11\xef\x77\xb9\xae\x4c\x42\xbc\xe0\x54\x67\x7a\x34\xa7\xd2\x22\x81\x26\x60\xa9\xdb\x29\xcc\x95\xb5\x82\x25\x3f\x66\x53\x6d\x0c\xd8\x2d\x90\x58\x1c\xab\xb8\xe2\x85\x9e\xc8\xe4\xea\x24\x80\xd0\x01\xe7\x42\x27\x30\x37\x01\xc5\x40\xa8\x02\x12\xaf\xc1\x7a\xe1\xa8\xa8\x47\xfc\xe0\x14\x7a\xa1\x37\x3b\x9c\x58\xfb\x44\x2e\xb2\x39\xcb\xc5\x34\xe3\x89\x4b\xd3\xf4\x55\x8c\xaa\x73\xa1\x9e\x08\x42\xc8\xcd\x85\xab\xb9\x2f\x11\x07\xa3\xdb\x45\xf2\xec\xd0\x00\x3a\x96\xeb\x58\x7a\x3c\xda\x63\x57\x46\x14\x57\x8e\x6f\x5d\x88\x22\x20\xc6\xd1\x79\xf3\x99\x83\xb0\x26\x4e\xd5\x42\x52\x0a\x3c\xc1\xf0\x89\x70\x51\x4f\x6f\x78\x32\xa6\x0e\xf1\x02\xa8\x1f\xa3\x4e\xa8\x48\x86\x3d\x54\x36\xdb\xf2\x20\x64\x28\xb4\xcc\x70\x57\xb8\xa9\x46\xbc\x68\x11\x1f\xa2\xc7\x7a\x7d\x75\xbc\x87\x5c\xc9\xcd\x0f\xe3\xb1\x68\xab\x73\x32\xd1\x4d\xf8\xd4\x60\xa6\x04\x4a\x30\x32\x67\x22\x13\x50\x0f\xc2\x1d\x3d\xa5\x55\x17\xb9\xd6\x67\x31\xa7\xbe\x1c\xa8\x13\xa6\x50\x22\x84\xf3\xa4\xc7\x3e\x20\x1c\x5f\x84\x3d\xcc\xca\x29\x84\x5b\xe6\x94\x46\x6b\x5f\x68\x39\x9d\xdb\xbb\x36\x6a\xa4\x88\x4d\x98\xa6\x1f\x8c\x65\x38\xb0\xab\x28\xcb\xf4\x55\x8c\xa0\x80\x93\xc6\xe3\x6e\x97\x68\x9b\xf4\xfe\xd6\x6d\xd8\xe4\x9c\xfa\xad\xab\x1c\x53\xda\xe9\x5b\x38\xa7\x70\x14\x9c\x48\x40\xdd\x56\x8e\xec\xd1\xc2\x23\x3b\xca\xb9\x2a\x33\x9e\xd7\x68\x01\x36\x3f\x40\x76\xe1\xe7\xdd\xcf\x62\xde\x45\xd2\x9d\x72\x99\x9b\x3d\x78\x89\xe0\xc9\xd8\x41\x32\x83\x1b\x53\xb9\x08\x86\x82\xba\x84\xb4\x6f\x68\x86\x31\xc6\xbb\x00\x0c\x94\x58\x61\xc6\x7e\x39\xb0\xaf\x53\x72\x5a\x66\x9c\xb2\x3a\x8c\x98\xf2\x1c\xd0\x4f\x93\x42\xe7\x26\x54\x41\xa2\x0e\x63\x3c\x8a\x81\x18\xf3\x99\xd4\x65\xee\x59\xba\x1d\x2b\x1d\xe2\x5b\x65\x48\xb0\x06\x6b\xf2\xa3\x1b\x12\xd9\x02\x31\x7a\x13\x9a\x5b\x24\x89\x9b\x42\x4f\x03\x90\x2b\xa1\x8f\xa4\x22\xd1\x29\x48\xab\x85\x98\xe2\x7e\x39\xc8\x83\xf5\x70\xcd\x1b\x78\x03\xb4\x65\x7c\x38\x04\x40\x2a\xea\x25\x17\x49\x99\x1b\x39\x13\xd9\x1c\x85\x7f\x73\x2d\x8b\x64\x2c\x0c\x80\x86\xdb\xa3\x80\x85\x9b\xfc\xdb\xc3\xee\xca\x21\x88\x0f\x22\x8d\x6f\x74\xbb\xe3\x2d\x6a\x7b\x15\x3d\xc7\x23\xad\xc4\x03\x03\xea\xf3\x62\x05\xa0\x98\xc7\x71\x54\x3d\xac\x5d\x0a\xaa\x87\xce\x07\x32\x4d\xc5\xa2\xfa\xa5\x4d\x19\xf4\xbf\xd5\x76\xf7\x8e\xc3\x71\x5b\x0c\xdd\x6b\x47\xa7\xd2\x03\x95\x90\x5d\xba\x9d\x30\x19\xb0\xb2\x4c\x18\xc7\x1a\x07\xb7\xa2\x7b\x1e\x2f\x1f\x3d\xac\xff\xdc\x63\xef\xb8\xb4\x8c\x0a\x52\xf9\x00\x23\x8d\x12\x7e\x09\x3a\xad\xcc\x21\xfd\xea\x2e\x23\x75\x29\xf2\x72\x83\x15\xb1\xed\xe3\x05\x69\x9b\x33\xa3\x5d\x77\x77\x7b\x03\x12\xdf\xa5\x8e\xb9\x76\x44\xb4\xf3\xbb\x9d\x6a\x1c\x94\xb5\xc1\x8c\xa3\xc7\xaa\x94\xd0\x3a\x75\x52\x6c\x61\xd3\x6f\x75\x3a\x17\x22\x9f\xc9\x44\x7c\x74\x80\x60\x4b\xa6\x50\x6f\xca\xc6\x1a\xee\x1f\x1f\xd3\x0f\x96\x04\x6a\xd5\xcb\xc4\x88\x27\xf3\x7a\xcd\xc4\x85\x41\xd4\x1b\xc2\xf9\xc4\x60\xc8\x86\xde\xc8\x3e\x3a\x33\xdc\x56\x60\x42\x80\x72\xbf\xc6\x10\xa0\x5d\x3c\x0e\xfc\xe2\xf6\x06\x33\x5d\x9d\x79\x8c\xf9\x96\x28\xd1\x38\xf8\xe8\x9f\x3e\xfe\x88\x79\x98\xbc\xa0\x9b\xc3\x8e\xe7\x5a\x0c\xc6\x5a\x7f\xf6\x77\x28\x00\x01\x24\xdb\x5d\x97\x56\x79\x5c\x35\x30\xa8\x4c\x56\x1d\x18\x2d\x09\x83\xdf\xd6\x1c\x1c\xbb\xb2\xad\xaf\x22\xac\x0f\x17\xac\x04\xbd\x38\x38\xe4\xc3\xee\xcb\x17\x2f\x8e\x5f\x74\xb0\xd0\xb4\xbd\xe4\xf6\xaa\x7c\xe1\xf9\xf3\xe3\x4a\x7d\x8c\x5a\x79\x8c\xea\x1a\x54\xdc\x4a\xc7\x47\xeb\xba\x95\x1a\x57\xcf\x62\xb0\x11\xa4\xb1\x3a\x8a\x15\x7d\xbc\x8f\x7c\xe3\xbf\xe2\x8a\xbf\x02\xe0\xb0\x57\x50\x97\x60\xc9\x89\x6f\x69\x1d\x90\x24\xd0\x7c\x82\x6b\x46\x58\x99\x13\xcc\xbc\xbd\xfc\xf1\xc2\x36\x53\x14\x14\xe6\x15\x33\xda\xee\x35\x52\x2a\x12\xfe\x97\x52\xa5\x4d\xcb\x76\xa3\xfe\x27\x36\xc3\x38\xeb\xf3\x37\xef\x7c\xd8\xc2\xab\x53\x36\xc0\x9f\x90\xda\x1c\x85\x35\xb0\xfe\xa3\x71\x3d\x33\x4e\x34\x4b\xec\x98\x20\x47\x04\x8b\x08\x94\x2a\x82\x05\x34\x73\x53\x88\x89\xbd\x71\x4c\xc1\x72\xad\xad\x36\x84\xc2\x8e\xdf\x05\x0f\x90\xbe\x90\xc0\x06\xf3\x62\x81\x79\x6d\x29\x42\x01\x9e\xa4\xfb\x70\x02\x36\xee\x85\xa5\xc9\x9d\x74\xc2\x65\xe3\x36\x88\x58\x62\x30\x6a\x39\x3a\x60\x6f\x50\xca\x71\x0d\xac\x30\x98\x67\x5e\x45\x0f\xf0\xf3\x56\x71\x22\x7c\x78\xc7\x32\x24\x58\xef\x41\x5e\xb5\xf4\xe5\x10\x09\xb0\xa8\x09\x41\x8f\xcf\x75\xe9\x18\x08\x54\x07\xa0\xf7\x5c\x2d\x08\x73\x6f\xc9\xfe\xaa\xcd\xd3\x8e\x6e\x24\x67\x94\xbd\x9a\x51\xf9\x45\xc7\xfa\x69\x68\x1d\xc4\x51\xe1\x2a\xb5\xfc\xc6\x72\x65\x28\x33\xb5\x7b\x05\xb2\xb0\x38\xd9\xdf\x1f\x6b\x53\x9c\x58\x3e\xb6\x6f\xf9\xf5\xd5\x5e\x8f\xbd\x89\x30\xac\xf4\x90\x5d\x95\x79\x86\x90\x32\x6e\xc8\x0b\x16\xc5\xaa\xf0\x57\xb6\x3b\xcf\x29\xad\xa6\x00\x3b\x00\x8a\xb8\x5f\x5a\xb7\x56\xd5\x75\xfa\x33\xd5\x5c\x8d\xd6\xc6\x81\xe6\x52\xf9\x04\x30\x12\x40\x00\xe8\x44\x8e\xc6\x04\x42\x6b\x74\xe6\x70\xc4\x7c\xfe\xde\xeb\xf7\x17\x30\x6f\x3d\x89\xce\x81\xc1\xba\xba\x1d\x2c\x4d\x19\x88\xef\xca\xca\xb8\x38\x52\xe8\x8b\x49\xd5\xa5\x21\x41\x47\xdc\xc1\x04\x07\xe6\x9f\xf1\xb9\xc0\x9a\xde\x52\x67\xb0\xec\x7b\x3d\x37\x75\xab\x72\xf3\xcc\x80\x17\x03\xe2\x46\x5d\x50\x27\xac\xd1\x79\x26\xb8\x01\x15\x8a\xe4\x6b\xcc\x8c\xb8\xb2\xdb\x97\x61\x07\x76\xa5\x0f\x8f\xfe\xd8\x3b\xe8\x1d\xf4\x0e\xaf\x50\x49\xa5\xbe\x2d\x9d\x49\xf3\x79\xce\x4a\x95\x09\x63\x80\xa6\x00\x60\x00\x20\x0d\x59\x02\xa8\xdb\xda\xae\x6f\x85\xb6\x19\x66\x3c\xc2\xd2\x39\x45\xce\xb6\xb1\x82\xbb\xe7\x12\xf8\x35\x2e\xac\x12\xc8\x98\x80\x85\x42\x6d\x5b\x8f\x6a\xe9\x8f\xcb\x45\x99\x8c\xb1\x68\xae\xfd\xd9\x19\x8d\xb2\x39\x39\x70\x94\x56\x5d\x4b\x55\x7c\x90\x09\x0c\x43\xee\x00\x39\x08\x6e\xa0\x09\xc0\xa4\x94\x53\xbb\x4d\x9c\x29\x71\xed\xa8\xc0\x53\x12\x12\xa8\x27\xb5\xfe\x0e\xa0\xfe\xf4\x77\xfe\x0c\x24\x62\x29\x99\x7e\x1a\x49\xe2\xea\xd4\xe4\x64\x7f\xbf\xbf\x03\xdd\x9c\x32\x27\x9a\xb8\xeb\x9f\x00\x17\x7c\x25\x16\x67\x20\xe4\xca\x61\xe9\xa0\xab\x84\x4c\x25\x30\xb8\x9f\x3e\xfe\xd8\x63\xff\xaa\x4b\x68\xeb\x48\x14\x3a\x2e\x34\xc4\xa0\xa1\x02\x34\x90\x45\xce\x73\xdf\x0d\xb1\x1b\x7f\x0c\x31\x93\x14\x22\xfd\x3b\x8c\xbb\xd9\x3a\x23\x99\xa4\x89\x9f\x16\x85\x98\x4c\x5d\xd5\x2f\xfb\x32\xaa\x6c\x09\x52\x83\x91\x09\xe3\x65\x31\x46\xc4\xc8\xfe\x8e\xfd\xe5\xc4\x45\xc1\xfd\xf7\xfe\x0e\x62\xa5\x14\x01\x69\xe5\x6d\xce\x47\x68\x22\xdb\xed\xef\x7c\xd3\xeb\xf5\xfa\x3b\x68\xb2\xf9\x7b\x29\xf2\x39\x9b\xf2\x9c\x4f\x04\x04\x20\xee\xf6\x77\xbe\x73\xbf\x93\x8a\x4f\xbd\x74\x48\xfd\xdb\x1a\x05\x65\x3d\xf9\xa1\x51\xa2\xbd\xe7\x73\xec\xff\x67\xc9\xc1\x38\xb3\x44\x36\x70\x4d\x08\x8a\x50\x7e\x11\x69\x17\xb3\xeb\x6b\xe1\xe4\x80\x07\x82\x02\x1b\xb8\x4a\xa7\xb9\x9e\x01\xc2\x29\x96\xa9\x97\x48\x13\xb9\x19\x23\xea\x41\xa9\xc2\x07\x4b\x0d\x90\xc3\x6a\x17\xf0\x5f\x4f\xdf\xfd\x08\xbc\xd5\x59\x1f\x40\xdb\x80\xb5\xd8\xc5\x25\x3e\x35\x67\xaa\x78\xf9\xdc\x7e\x02\x34\x2a\x9d\x9b\x40\xdb\x15\x25\xd8\x67\x0c\x80\x4d\x0e\xb1\x39\xff\x4e\x13\xa2\x2a\x19\xf4\xbf\x93\x93\x7f\x76\xb5\x74\xe5\x48\x89\xf4\x3d\x4c\x04\xdb\xd0\xf7\x50\x29\x83\xbe\x51\x8c\xed\xbe\xf7\x9c\xa6\xd9\xc0\x51\x3f\x78\x14\x3b\x0e\xf4\xdb\x9e\xb5\xfe\x0e\x83\x60\x65\xa9\xe8\x31\x0a\x16\xbd\x38\xa3\x6a\x84\x7b\x6e\xa0\x10\xca\x5a\x1d\x25\x0d\xf4\x80\x7d\x65\x87\xec\x2b\x38\xf2\xbe\xb2\x6f\x59\xd4\xde\xd4\x1f\x08\x13\x8b\xfb\xfb\xda\xfc\xae\xa5\x13\xaa\x98\x18\x2d\xc5\xc2\x7e\x4d\x5b\xc7\xa6\x52\x60\x71\x75\x3b\x3b\xa5\x85\xc3\xb0\xfb\xd2\x58\x0d\x1c\xc6\xce\xff\xd7\xdf\xb1\x3d\xee\x74\xfb\x3b\x0b\x77\xb1\x3a\xe8\xca\xa4\xbe\x36\x5e\xd1\xd2\xa8\x65\x93\x5b\x16\x03\xe3\x68\xdd\x66\x86\x69\xe2\x26\xbf\xf9\x32\xd5\x4a\xa8\xc6\x2e\x54\x49\xa0\xbd\xab\xe8\x55\x3f\x48\xf6\x95\xbd\xb3\xff\x7c\x6f\xff\xb9\xb4\xff\x9c\xdb\x7f\xde\x48\xa0\x4c\x4c\xe9\xe0\xa4\x97\x5d\xa0\x20\x0b\x45\xfe\x64\x61\xfe\xcc\x2e\x84\x40\xa4\xb7\x93\xfd\xfd\xe9\x78\x6e\x64\x62\x7a\x4a\x9a\xa2\x37\xd2\xb3\xfd\xa4\x2c\xf7\x7f\xb2\xed\xf6\xf1\xfd\xbd\x71\x31\xc9\x02\x4d\xd6\x46\x1a\xc6\x34\x81\x0d\x80\x7d\xf8\x6c\x47\x67\x07\x67\xc7\x66\x87\x66\x47\x56\x3b\x32\x87\x07\x47\xcf\xd9\x3f\xb3\xc3\x1f\x24\xd8\x2a\x0f\x0f\x0e\x0e\xec\xc7\xcf\x7f\x66\x67\x2c\x95\xa9\x7a\x56\xb0\x64\xac\x35\xdd\x09\x09\x9f\xca\xc2\x1f\xeb\x5e\x7d\x38\xb5\x65\x45\x9a\x10\xcb\x68\xc1\x8e\xf5\xcd\x92\x06\x96\x5d\xbc\xb7\xb7\x74\x51\xf8\x0b\x9c\xc4\xbf\x62\x9c\x0b\x01\xe0\x46\x8a\x9c\x9d\x13\xe3\x90\xc0\xed\x45\xcc\x1c\x83\x01\x1e\xe0\x99\x64\xa8\x1a\xe4\x40\x92\x01\x0e\xe4\xe8\xdf\x5e\x1e\x77\x0f\x2d\x37\x98\xf0\x91\x92\x45\x99\x0a\xdb\x49\x0e\x0f\x4b\xe7\x01\xd3\xe0\x72\xe5\x8a\x1d\x33\x17\x5b\x0e\x96\x71\xd3\x63\x38\x6a\xc3\x32\x9e\x53\x8c\x03\xb4\x9e\xe6\x22\x91\x46\x04\x95\x9b\x4f\xa7\xe8\xda\xcd\x75\x09\x98\x0b\xe5\xb4\xc7\x76\xdf\xf4\x46\xbd\x13\x76\xd0\x3b\x9c\x10\xc8\x9a\xff\xd1\x72\xdd\xc3\x49\x6f\x0f\x4d\xba\x8e\x9d\x39\xc0\x06\x57\x58\xb5\x04\xff\xb3\x1c\xb2\x6b\xef\x3f\x8e\x46\x62\x26\x1c\xaa\x2e\xd0\x8a\x48\x81\x7c\x1a\x80\x5d\x38\x8b\x6f\x16\x0a\xeb\x06\x3e\xc9\x3d\x24\x81\xab\x01\x95\x8b\x89\x80\xa5\x2b\x5c\x68\x8e\x1e\xba\xca\x45\xb0\x46\x29\x4a\x1f\xd0\xd8\xc9\x11\xe0\x1e\x44\xcf\xd0\x88\x43\xad\x2a\xa1\x6c\x6b\x69\x22\x68\x44\x18\xcf\x5f\xc4\x50\xe7\xe1\xea\x80\x57\xfb\xc1\xb9\x05\x9c\x96\x50\x69\xa1\xbf\x93\x70\xa5\x15\xe0\x97\xda\xad\xef\xef\x90\xd1\x7b\x22\xb8\x22\x71\xd6\x91\xe3\x3e\x0d\xd1\x75\xc1\xd3\xbf\x95\x60\x65\x2f\xa7\x76\x75\x52\x7d\xad\xd8\x2e\xd5\x9b\x0a\xc8\x70\x78\x1f\x26\x39\x48\xb3\x80\xbf\x4f\x7f\x4b\xc5\xde\xd9\x41\x19\xc3\xf7\xb0\x60\x93\x7d\x1b\xf8\x96\x78\x8f\xbd\xd7\xb4\xe7\x04\xc0\x92\x69\x03\x3e\xa2\x01\xfc\x34\xcc\x79\x42\xec\x00\x59\x6b\x70\xb6\x60\xf4\x8a\x6d\x4a\x68\xd8\x9e\xb4\x77\xed\x16\xc2\x14\xf6\xe0\xf6\x27\x22\x83\x30\x7c\x72\x79\xf5\xe8\xd6\x95\x23\xe5\x7b\xd4\x14\x0f\x43\x92\x34\x98\xcf\x90\xf2\xad\x10\x25\x46\xbc\x90\x33\x01\x0b\xff\x06\xa5\x36\x03\x73\x38\xec\xbd\xf0\x5d\x44\xd8\x95\xdc\xb0\xfe\xce\xe1\x8b\x83\x83\x49\x7f\x87\x9a\x7d\x2f\x97\x34\x3c\x7e\xf9\x4e\xda\x96\xf6\xfc\x3a\x66\x63\x87\xf0\xf7\xca\x86\xbe\x7f\xf3\xf3\x9b\x8f\x10\x0d\x85\xac\x32\xcb\xe6\x75\xf8\x33\x8e\x10\x19\x20\xb8\x82\xbc\xe3\x64\x9b\xcb\x31\x26\x21\x82\x10\x3a\xd6\x99\xa0\xdf\x1d\x80\xb5\xf8\x22\x72\x7b\xf6\x7a\x38\x08\xd5\x0d\x14\x43\x01\x20\x58\xd8\xac\xb0\xff\x02\xe1\xc3\xd2\x6a\x35\xa2\x68\x95\x39\x08\x8a\xd7\x22\x43\x12\xb3\x6c\xc5\xf2\xc8\x50\xd6\xb5\x2b\x5c\xc8\x91\x22\xef\x71\x95\x28\x7b\x6c\xf7\x42\xbb\x82\xb4\xf6\x3c\x54\x7f\xee\x20\xf5\x59\x1e\x9b\xca\xe1\x10\xd8\x29\x06\xc3\x84\x0c\x4b\xbb\x2e\x70\xd2\x9d\xae\x22\xb1\xb1\x4c\x08\xbb\x8f\x8e\x99\x71\x9b\x1b\x40\x0a\xaf\x73\x09\xab\x06\x3a\x22\x94\x6f\xb3\xa7\xd5\xea\xb3\x3c\x63\x63\xae\x52\x10\xf9\x20\x5f\x85\xd8\xc8\x58\x4f\x43\x0c\x17\xa7\x99\x26\xdc\xbe\x42\x5a\x02\xb1\x82\xb6\xce\xd1\xe7\x6c\xf5\x3f\x94\xde\x41\x16\xa5\xb5\xf7\xcd\xea\x08\x32\x6d\xc2\xf4\x1a\x22\xb2\xe9\x4d\x44\xc1\x7b\xb3\xc3\xde\xe9\xf9\xd9\xf7\xb5\xd2\xd8\x75\x11\xd9\x35\xa9\xda\xcc\x30\x93\x12\x38\x91\x8b\xc7\xf1\x55\x60\x7c\xbd\x18\x7b\x66\x87\x22\xcf\xab\x78\xfa\x1c\x0b\x6b\xaf\x53\x86\xc4\x87\xe7\xad\x30\x69\x9c\x9e\x9f\xfd\x5c\xab\x13\x1e\xc1\xe5\x8b\xd4\x81\x13\x39\x22\x6e\x11\xee\x95\x8f\x68\xbc\x20\xad\x9f\x6c\x11\x58\x70\xbc\x80\xaa\x01\x23\x05\x87\xd1\xc1\xab\x93\xae\x96\xf1\x42\x40\xa5\x1a\xb2\x22\x50\x3c\x91\xf3\xa3\xe7\x02\xdc\xea\xa5\x8a\x7a\xc0\xa3\xd2\x0a\x4e\x3b\x92\x05\xf9\x1b\xf6\x13\x3d\x99\x58\xa9\x66\xbe\x0f\x45\x7e\xe4\xa0\xb4\x84\xb2\x9f\x8a\x99\xc8\xf6\x8d\x1c\x75\x79\x9e\x8c\x65\x21\x20\x4e\xca\x95\x3e\x99\x59\xc5\x50\x2b\xd3\x9b\xa4\xdf\x2c\xc0\xde\x5e\xc7\x4a\xf7\x59\xaa\x55\x28\xee\x3f\x48\x45\x18\xee\xa4\xbb\xa2\xfb\xcf\x2f\xae\x8b\x57\x03\x98\xf6\x08\x2d\x2e\x84\x1a\x04\x97\x51\x58\x76\x10\x0d\xd4\xd0\x95\x25\xf0\xca\x85\xc7\x3d\x43\xd3\x0f\x68\x5c\xa6\x1c\x4c\x2c\xbb\x8f\x20\xcd\x7a\xec\x15\x5a\x65\x06\x22\xc4\xf8\x9c\x29\xf6\x8a\x4f\x44\xf6\x8a\x1b\x71\xe7\x8b\x0e\xe8\x44\x5d\xbb\x7e\x5b\x2c\xfb\x0d\x3c\x48\xb5\x53\xb5\xf6\x2b\xfd\x21\x5d\x70\xd6\x56\x19\x66\x97\xb0\x17\x60\x1c\xd4\xed\x5b\x9d\xbf\x76\x85\xda\x96\xda\x61\xeb\xe3\xa9\x17\xbf\x08\x4c\x85\x12\x38\x43\x38\x82\x2b\x91\x39\xcd\xf5\x80\x0f\xb2\xb9\x7b\xd4\xc1\xf8\xbb\x02\x8e\x4b\x4a\x17\xe4\x94\x63\xfe\x97\x39\x39\x0c\xce\x5e\x7f\x5c\x59\xf7\x08\x22\x90\xf4\xd0\x91\x25\xe4\x67\x3b\xb8\xd2\xdc\x27\x67\x17\x74\xb5\x52\x5d\x6e\xa4\x6f\xdc\x35\x17\xa6\x62\x9f\x1a\x8b\x6c\xea\x8a\xa2\xb0\x1c\x02\x5d\x9c\x21\x92\x6e\x94\x09\xe4\xb2\x8b\xe2\x5a\xe7\x9f\xbb\xc2\x5e\x5b\xf0\xda\x6b\x3e\x0f\xa2\x0b\x7b\x45\x3d\x24\x5c\x79\xa9\x91\x4f\x2d\xab\xcd\x25\x64\x36\x56\x07\xc7\x21\xd8\x17\x31\x5d\x60\xf8\x24\x5a\xcc\xb1\xfe\x2a\x9c\x21\x50\xed\xf5\x30\xc4\xac\xc1\x4f\xc2\x74\xfc\x70\x23\x43\x35\x1a\x97\xd5\x48\xb8\x12\xae\x76\xca\xb6\x6b\x94\xc3\x7c\xf5\x1a\x84\x8d\x84\xa8\x24\x8c\xbb\x84\x15\xa7\xc5\x82\xb0\x67\xf5\x39\x8a\x86\xa7\x25\xb6\xb3\xa2\x81\xbd\x0d\x16\xb2\x13\x8a\x80\x05\x13\x59\x0d\x57\xd9\xb3\xe7\xb3\x73\x9c\xa1\x7d\x65\xc7\x05\x8c\x53\xb7\xb0\xdc\x0e\x16\x14\x47\x88\x86\xd6\x6a\x07\x8e\x5b\xb1\x4c\xeb\xcf\x86\xf1\x82\xfd\xaf\xee\x5b\x9d\x5f\xf3\x3c\x15\xa9\xfd\xcb\x95\xea\xd1\x39\xfb\x5f\xdd\x8f\x82\x67\xdd\xb3\x69\xf4\x1d\xf1\xab\xde\x47\x31\xd1\x05\xa0\x1a\xb0\x5d\x17\x30\x07\xa5\x5d\xf7\x2c\x21\x8c\x44\x65\xca\x67\xe7\xb7\x53\x8a\x69\xc9\x79\xbd\x58\x74\x02\x6e\x14\xae\xba\x69\x2d\x62\x57\x03\x32\xd4\xae\xf5\x22\x86\xab\x06\xd7\xc6\xeb\x6e\x7f\x39\x16\xb2\xaf\x8d\x57\x63\x03\xef\xea\x4e\xdb\xca\xad\x72\xae\xfa\xef\x2b\x91\x5c\xb0\x4a\xae\x7c\x45\x97\x6e\xf4\xf0\xba\xca\x66\x8c\x48\x0c\xdc\xa9\x2e\x2a\x3d\xe4\xa5\xc0\xea\xaf\xa1\x0c\xf8\xce\xec\xb0\x39\xdd\x5f\xb6\x17\x48\x7f\x94\xa6\x58\x43\x28\xfd\x91\x22\xf3\x02\x20\xa7\xfb\xa5\x83\xf2\x74\xa6\xaf\x3d\x73\x2a\xb4\x2f\x15\xea\xef\x0d\x5e\x30\x28\x76\xf4\x24\x8d\x3e\x6a\x69\x14\xa8\x73\x15\x03\xc1\x46\xed\xe4\x70\xe7\xbc\xc2\x1f\x90\x9b\x70\xca\x27\xa1\xfb\xfe\x84\xee\x35\x59\x32\x51\xde\xa3\x61\xc0\xc0\x18\xef\x9e\x09\x7f\x6c\xe6\x32\xb6\xb0\xb9\x8f\x1e\xf3\x3a\xca\x55\x0b\x5a\x09\x0f\x04\x08\x06\xcc\xb1\x80\x48\x09\x34\x53\xfa\x48\xa2\x74\xad\x50\x9a\x42\x8c\x74\xde\x92\x7c\xdb\x08\xa6\x71\x0d\xab\x7c\xc0\x2b\x48\x22\x65\xb5\x72\x52\x7e\x8c\x03\x61\xe5\x55\x60\xa4\xe0\xf1\x67\xcf\x78\x96\x3d\xdb\xbb\xef\xec\x9e\x51\xcd\x20\xd3\x36\x4d\x68\xe3\xb4\x9b\xa0\x10\xe1\xd7\x34\xdd\x80\x35\xce\xde\x40\xea\x9f\x9c\x4c\x33\xb7\x45\x95\x96\x64\xd9\xc1\xe2\x8c\xb4\x18\x58\xbf\xf7\x2d\x18\x49\x03\x1a\x7e\x07\x97\xcc\xa7\x07\xf0\xa8\xca\x36\x5d\x34\xc3\x58\x1c\x07\xe4\xf7\xfe\xce\x16\x5a\xe9\x1a\xac\xf0\x33\xb1\x42\xc8\x89\xb3\x7f\xbb\xd0\x59\x3f\x09\xda\xc6\xb7\x5a\x3f\x6b\x34\x8c\x88\xf3\xd9\x50\xeb\xfa\x3e\xdf\x81\xb2\x3e\xcd\xca\x9c\x67\x15\x9d\xdd\xef\xd1\x0d\xa2\x3d\x57\x2d\x53\x68\x18\x01\xd7\xcb\xca\xe9\xac\x1c\x47\xab\xa0\x28\x5d\x2f\xb6\xbc\x5e\xb1\xb9\xb1\xce\x8b\xd6\x9a\xf3\xf5\x58\x2b\xdf\xb0\x7a\x4c\x4d\x39\x1a\x61\xac\x3e\xb4\xa0\x82\xed\xcb\x17\xeb\xee\x4f\xa4\xd5\x00\xcb\x8c\xe7\xef\x57\xef\x77\xdc\xd4\x5b\x1f\xe8\xbb\xf6\x9d\x67\x94\xef\x80\x78\x5f\x91\xac\x0a\xc6\x64\x4f\x35\x50\x9d\xc2\x75\xa4\xa7\xfc\xef\xa5\xc8\xe6\xa4\x4a\xd7\xde\x09\x2e\x32\x70\xb9\x24\x98\xae\x98\x0b\xab\x3e\x61\x96\x06\x14\x30\x80\x84\x28\x4a\x60\xb1\xcb\x07\xbd\x0f\x74\x31\x0e\xaf\x00\xc4\x76\x7a\x75\x28\xc2\x13\x24\x03\x7b\xcb\x25\x45\xc6\x5e\xfd\x78\xc6\x3c\x84\xf6\x56\xf5\x8a\xc0\x34\x43\x02\xf3\xbf\x70\xb3\x2a\x6a\x18\x62\xb9\xb8\x19\x93\xe0\xe3\x22\x96\xab\x16\x9e\x4e\xc5\x62\x54\x65\xf3\xd2\x38\x29\x1a\x1d\x00\xe0\x3a\xbb\xce\x65\x51\x08\xe5\x84\x68\x48\x5e\x87\xb2\xec\x3d\xf6\x73\x25\xe5\x2e\xca\x01\xc2\x5d\x60\x83\x79\x28\x61\x0b\xa5\x8d\xa0\x60\xac\x2c\xe6\x18\xa6\x9b\x4b\x80\x56\x54\xd5\x5c\x7e\x08\xdd\x0c\x66\x1f\xae\x18\xcf\xa6\xe3\x80\xb0\xeb\xc4\x75\xac\xb7\x00\x61\x3c\xa1\x72\x7a\xc5\x3f\x59\xab\x12\x3f\xd5\x51\x3a\x54\x35\x9e\x13\x6c\x2c\x64\xef\xb8\x68\x2c\x7b\x05\xb1\x17\x52\xcc\xb1\x38\x05\x0d\x12\x5f\xe0\x1c\x96\x5c\x46\xa1\xd1\x62\x26\x94\xed\x57\x16\x6c\x94\xf3\xb4\xb4\x0c\x66\x0b\x4a\x98\x89\x7c\xb0\x86\x8d\x60\xd0\x60\x19\xce\x38\x60\x49\x92\x61\x8b\x5d\xcc\x7e\x57\x49\x56\xa6\xc2\xb0\x91\x28\x3a\xf0\x40\x87\x5d\xf3\x22\x19\x77\x08\x60\xb8\x43\xd2\x6a\x87\x4d\xf1\xeb\x54\x64\xc2\x7e\xc4\xff\x26\x3a\xcb\x30\xfc\xb7\x43\x15\x0c\xf4\x97\xf9\xbd\xcb\x03\xb3\xb5\x94\xce\x59\xd5\x58\xda\xea\x79\x59\x29\x15\xd4\xab\xd3\x2e\x90\x0b\x6e\x2c\x16\xcc\x0e\xd9\x2e\x56\xfa\xa7\x72\x4b\x9c\x51\xc8\x6e\x73\x08\x79\x18\xf3\x33\x32\xfc\xec\xad\x2f\x51\x6c\x69\x78\xa9\x70\xfc\xf6\x4b\xb7\x2e\xab\x34\x28\x79\x95\xca\x70\x23\xb9\x7c\xb5\x7d\x24\x6e\xd9\xd0\x89\x3f\xfa\x6a\x67\x28\x8c\xbb\x88\x72\xac\x6a\xd5\x70\x2d\x44\x65\x4b\x63\x53\x1c\x77\x72\x7f\x42\xf2\xa4\x3d\x24\x9e\x03\x53\xc4\x64\x45\x20\xdb\x54\xee\x7f\xb2\xb9\x3c\xb0\xcd\x65\xbd\xd5\x8f\x9b\x3a\x0e\xd4\xa0\x08\x5c\xf8\x16\xca\x1c\xea\xb5\x83\x44\x9f\x6c\x25\x0f\xed\xa0\x5c\x58\x4c\xba\xb6\xf6\x81\x65\x34\xe2\x06\x9a\x5c\x25\xb0\x0a\x8c\x0e\x69\xe3\x11\xec\xce\xec\x76\xde\xd6\xb1\xf1\x2d\xbd\x89\x0d\xc9\x9d\xa4\xd6\xb5\x7c\x0c\xe6\xa5\xca\xd5\x72\xf7\x16\xa6\x9f\x9b\x5e\xa1\xc5\x4c\xdd\x78\x00\x8d\xc8\x2d\x84\x38\xc9\x56\x58\x9e\x71\x99\x61\xc2\xc0\x26\x46\x7f\xe7\x2d\x26\x86\x95\x6b\x5d\x60\x7c\x3e\xd1\x27\x26\x7f\x5a\x61\x05\xaa\x4a\x3c\x5d\x56\x8f\xf8\xb2\x7a\xba\x0d\x1e\xe4\x36\x78\x0a\x99\x78\x0a\x99\x78\x0a\x99\x78\x3c\x21\x13\x7c\x2a\x97\xdd\x8f\xf7\x63\x39\x5d\x53\x2a\xf2\x73\x5c\x8f\x9f\x3c\x06\x11\xe9\xe7\xe6\x90\xef\x44\x3c\x7a\xa5\x15\x66\x87\x2d\xab\x4f\xea\xda\x04\x01\x3b\x15\x05\x97\x19\x56\x20\xd5\x4a\x30\x6e\xd5\x73\xef\xfe\x4a\xca\x1c\x0c\x32\xa6\xb0\xbc\xcc\xc9\x16\x56\x1e\xfa\xd8\x30\xac\x2f\x94\x71\x32\x6e\x8a\xcb\x9c\x2b\x03\xaf\xbe\x94\x4d\x83\xf8\x0d\xce\x12\x74\xb7\x2c\x34\xb0\xf9\x76\x27\xbc\xd9\x5f\x10\xde\x9e\x0c\x57\x2e\xbb\xce\xb7\x76\xc6\x6b\xbb\x30\x64\x06\x87\x22\xb6\x80\x2c\x45\xb7\x49\x00\x6a\x40\x60\xac\x31\x95\x3a\xcb\xe6\x18\xd4\xed\x57\x1c\xac\xb2\x69\x8f\x21\xd0\x26\xde\x51\xf6\x16\x07\xc0\x24\x4a\xdc\x0e\xb5\xcb\x60\x5c\xbe\x47\xbb\xe2\x68\x4d\xa5\x6e\x40\x28\x49\x12\x31\x2d\xf0\x8c\xb6\x72\x84\x89\x30\x86\x8f\x56\xb9\x1f\xa8\x15\x8a\x39\xe3\x72\xc2\x95\xe5\xcf\xa9\xed\x97\xf9\xdf\xd0\x09\x64\x07\xe7\x08\x86\x0f\x5c\xfd\xfd\xb0\x5e\xbd\x4a\x6e\x8c\xc7\x0f\x25\x84\xd1\xcd\x45\x05\x3d\x40\xf4\xb6\xef\x85\x12\x79\xbd\xfa\x6a\xdb\x5c\x9a\x0f\xc4\x10\x33\x76\xb0\x3d\x87\xd9\xda\x1b\x85\x36\xe1\xda\xf3\xdb\x75\xcd\x0d\xe0\x56\x0e\xb8\x21\xf4\x38\xbc\x02\x21\x0b\x59\x81\x15\x6c\xd8\xde\x99\x34\xee\xd8\x64\x73\x76\x78\x84\xa9\x0a\xf0\x6a\x24\xa1\x9e\x7f\x89\xf9\xf4\xe5\x97\x5e\xcb\x90\xa5\x61\xdf\x76\x6a\xe3\xb1\x12\x65\x09\xe7\x12\xd0\x1b\x20\x49\x26\x17\x78\x58\x7d\x51\xe6\xc6\x61\x15\x7e\xbc\xcb\x10\x3f\xb6\x02\x92\xcf\x05\x37\x2b\xf7\x03\x1b\x05\x6e\xc3\xd9\x34\xd7\xa3\x9c\x4f\x00\xd2\x37\xca\x48\x8e\x29\x0c\xf5\x7c\x78\xd0\xd7\xc4\x77\xeb\xf0\xcc\xd0\xb1\x8d\x68\xee\x3c\xd7\x69\x99\x58\xc1\xcd\xa5\x55\x0c\x65\x12\x9f\x67\x28\xfd\x6a\x89\x12\x35\x27\x26\xbe\xd8\x65\xf3\x3a\x0a\xc1\x0f\x73\x25\xd5\xc8\x04\xb0\x06\x38\x6f\x9d\x4a\x14\x42\x11\x20\x4b\x39\xf8\xcb\xc0\x12\x9d\x8b\x94\x71\x36\x2a\x79\xce\x55\x21\x44\x0a\xaa\x1f\x48\x5f\xa8\x2d\xc4\x50\x2e\x5e\x46\xf7\xb0\xbb\x91\xa7\xc4\x0e\x91\xe4\x7a\x38\x38\x5b\xb9\xc6\xda\x6a\xa2\xb7\x97\x24\x0f\x16\x7b\x5c\xa8\x8e\x43\x61\xb8\x04\xf8\x5f\xc0\x24\xeb\xb8\xe2\x61\x5b\x8c\x65\x0d\xe0\x42\x97\xba\x16\xd1\x79\xa4\xc7\x30\x38\x6f\x6c\xa8\x75\x8f\x24\xcf\x5e\xa2\x27\xfb\x41\xcf\xb9\x5d\x83\x3e\x3c\xdf\x5c\xcb\xce\xd2\x9b\xac\x79\x22\x5a\x18\xf0\xed\x9b\xf5\x5f\x83\xb3\xe9\x03\x2c\xe4\x32\x73\x48\xa5\x9d\x63\xcc\x94\x88\x4e\x28\x82\xe0\xb7\x22\xe1\xdb\xde\x33\xae\xe8\xfa\x93\xed\xe2\x11\xdb\x2e\xd2\x7c\xfe\xb1\x5c\xb5\xee\x90\x56\x4a\x4b\xd9\x89\x02\x39\x10\x52\x56\xa7\xbe\x1a\xb4\x89\x41\x54\x2c\x81\xd8\x9d\x31\x60\x57\x38\xb5\x47\x12\x01\xa8\x00\xb2\x30\x5a\x25\x1c\x03\x4b\x65\x2e\x92\x42\xce\x84\x53\x05\x0d\xd4\x8e\x05\x6d\x50\xe4\x39\xe8\x61\x66\xaa\x95\x41\x0f\xb5\x0a\x08\xa4\xd3\x5c\x27\xc2\x80\xc8\xe3\xcd\xbb\xa8\xb1\x31\xa8\x9d\x1f\xf1\xda\x13\xd6\x65\xa7\x59\x76\x02\xd8\x22\x69\x3e\x07\x4c\x11\x53\xf0\x91\x08\x89\x9b\xd4\x5d\x1d\x79\xec\x3e\xa2\xaf\x78\x22\xce\x45\x2e\x75\x7a\x21\x2c\x2b\x5b\xc5\x80\xed\xdd\xe0\x4b\x2f\x49\xc5\x0c\x3e\xc5\x06\x98\x77\x5b\x04\x34\xfa\x70\x77\xa0\x7b\x39\xad\xc7\x16\x28\xad\xba\x2e\x85\xd4\x41\x9d\xc7\x97\x0f\xc0\x9a\x87\xad\xc7\x5e\x98\x9c\x4c\x44\x2a\x79\x01\xf1\x20\x0e\xf8\xdd\x07\x1a\x28\x99\xa1\xf8\xe1\x60\x4f\x61\x82\x96\x2a\xa4\x0e\x11\x53\x01\xf2\x12\xb8\x78\x0c\x34\x55\x85\x22\xe3\x60\xf2\xa0\x09\xd1\x4b\x86\x55\x64\x4f\x82\x5f\xc7\x94\xe1\x96\x31\xde\xb6\xf0\xf2\x64\xfa\x7b\x10\xd3\x9f\xce\xa7\x63\xae\x5e\x3b\xc4\xde\x55\xc7\xe4\xb5\x5d\xc0\x04\x2a\x90\xb2\x29\x82\x19\x39\x93\xd7\x79\xae\xa7\x7c\x04\x07\xe8\x5c\x67\x32\x99\x77\x22\xa1\xcd\xd3\x62\xea\x3b\xb0\xa7\xec\xb0\xf7\xc7\x1e\xbb\xc0\x03\x85\xd4\x4d\xe3\xa0\x0d\x33\x90\xab\x0d\x43\x84\x65\x1d\x02\xb8\xe6\xfe\x10\xe5\x20\x04\x2b\xc1\x9f\xfb\x3b\x6c\x28\x15\xa4\x59\xe7\x51\x32\x3b\x66\x07\xef\xbb\x90\x1b\xbf\xb9\xd8\xfd\x33\x13\x1e\x32\x14\x2b\x49\x38\x60\xd1\xd0\x75\xde\x9c\x9b\xbb\xb7\x8d\x28\x50\x9b\x00\x0a\xd0\xc5\x78\x9b\x78\x3b\xbb\x22\x5e\x01\xb9\x45\x45\xfc\xbc\xd2\xef\x32\x8d\xfc\x1d\xb1\xae\x61\x99\x0d\x65\x96\x89\xd4\xf1\x3d\x4e\xb2\x08\x29\x51\x3c\xcf\x2d\x77\xd1\x65\x01\x9b\x61\x27\xed\xec\xae\x1d\xc6\xd9\xf3\x83\x6f\xd9\x2b\xad\x86\x99\x4c\x0a\xa7\x9d\x87\x8c\xf0\xa2\xcc\xed\x2e\x2e\xae\xcb\x53\x59\xe1\xd5\x17\x29\x95\xce\x48\xd9\x58\x5f\xb3\x11\xcf\x07\x56\x2d\x0e\xc1\x3e\xe1\x12\x12\x39\xa6\xa8\x2f\xd8\xdc\x0f\xb5\x23\xb0\x78\x6f\x81\x89\x3b\x0e\x3c\x45\x42\x90\x06\xe0\x2e\xd2\x10\xaa\x25\xbe\x48\x2c\x73\x10\x08\xd2\xaa\xad\xce\x84\xed\xf4\xd3\x88\xf2\x5c\xa2\xb5\xe3\x59\x5d\xaf\x32\x55\x5f\xd6\x63\xa7\xde\xc0\x50\xb9\x89\x9f\xe1\x1c\x9e\xb1\x2e\x9d\x96\xea\x69\x32\x7f\x66\xcf\xfe\xc2\x93\xcf\x23\x80\xce\xb0\xad\xd0\xbb\x06\x0e\xfe\xea\xc2\x69\x00\x6b\x23\x7e\x5f\xed\xc4\xcd\x60\xe0\x7b\xfa\x33\x7b\xf6\x56\xe7\x22\xea\x96\x25\xdc\x24\x3c\x45\x40\x02\x58\x1f\x90\x6c\xb0\x3f\x83\xa2\x42\xa3\xc3\xa1\xef\xe3\xb6\x50\xa6\xee\xdc\x8a\x58\x15\xf6\xd7\xb2\x23\x76\x56\xbc\x88\xa7\x00\x3c\xa6\x55\x1d\xa7\xf6\xb7\xf5\x62\x88\xff\xda\xe6\xed\xb9\x18\x49\x53\xa0\x04\xf6\x60\x4b\x70\xeb\x83\xd8\x78\x39\x2a\x08\x98\xf7\xbd\x0c\xb7\xfe\xf2\x2d\xa6\xff\xa0\x74\x70\x07\xaf\xdf\x7c\x09\xa6\xe6\x1e\x27\x7c\xd3\x97\xdd\xff\xf4\xec\x1b\x8f\x36\x79\x63\x59\x8c\xad\xb8\x9c\x3c\x0c\x49\xdd\xfe\xdb\x37\x5e\xf2\xb2\x18\xeb\xdc\x01\x93\x3d\xc0\xfc\x6f\xf7\xe5\x5b\x4c\x5f\x9b\x04\x40\x1c\xef\x73\xd6\xb7\xf2\xce\xa3\x87\x9a\xec\xd1\xa6\xa7\x6c\xc0\x8b\x64\x7c\x6f\xeb\x7b\x0b\x6f\xdb\x74\x65\x23\x20\xee\x7b\xbf\x98\x6f\xfd\xdd\x1b\x4f\x5e\xeb\x3c\x95\xea\x41\x38\xc8\xad\xbf\x7b\xd3\xc9\xbb\xc8\xc3\x46\x05\x89\xbb\x9e\xf9\xed\xbe\x78\xd3\x69\x8b\x19\x18\xca\xee\x79\xce\xb7\xf8\xd6\x8d\x27\xec\x65\xdf\xfb\x7d\xef\x30\xd3\xd7\x60\xfb\xd3\x59\x2f\x80\xe2\xdf\xc6\x0a\x40\x36\xda\xe3\x18\xca\xa6\x8b\x22\x27\x7c\x24\xc8\xec\xf1\x20\x4b\xe1\xbc\x53\x0f\xbd\x25\x14\xee\x28\xd5\xe8\xbe\x8f\xe2\x2d\xbf\x79\x53\x0a\x50\x3a\x15\xf7\x3e\xe5\xdb\x7a\xe7\xe6\xdb\x7c\x5b\x6f\xde\x74\x99\xf1\x8c\xdd\xdb\x0a\xdf\xc6\xeb\x36\x9d\x62\x3e\xe0\x49\xef\x41\xb5\xa0\x3b\x1a\xc1\xc6\x54\x76\x47\xe3\xd8\x74\x43\x4c\x32\x16\x69\x99\x3d\x00\x4f\xbb\xe5\x37\x6f\xbc\x01\xb7\xfc\xfe\x8d\x17\x1e\x13\xc6\xef\x7d\xd5\x6f\xf1\xb5\x9b\x2f\xf9\x2d\xbe\xbc\xbe\xde\xf4\xd7\x16\xc1\xc1\x6f\xa1\x22\xe6\xcf\x87\x4b\x22\x85\x5c\x13\x84\x30\x00\xbf\xb7\x80\x78\x43\x57\x54\x5f\x31\xee\x30\x0e\x5c\x99\x6d\x2a\x60\x7a\x99\x4b\xd1\xf1\x25\x2b\xd0\x3b\x8f\x70\xd6\x3c\x19\xb3\xcf\x62\x1e\x57\x9f\x67\xcf\x7a\xcf\x9a\x5e\x74\xc2\x22\x28\x8c\xc8\x86\x11\x74\x39\x21\x36\x43\xb1\x5e\x1d\x05\x94\x8a\xa2\x53\x29\x0f\x58\xe9\x8f\x33\x53\x0e\xba\xde\xe3\x26\x0b\x31\xa1\x64\x08\x6c\x0c\x3d\x63\x0d\xfa\xa8\x2a\xbd\x11\x6c\x48\x85\x5d\x27\xbc\x30\x27\xec\xd9\xf0\x84\x8a\x1e\xf0\x09\x96\x3f\x10\xcf\x3a\xec\x1a\xaa\x4b\xd6\x7f\xa8\x63\xab\x72\x5f\x4d\x88\xb9\xf5\x82\x01\xc3\x5a\xd8\xef\xec\x8c\x9e\xcd\xe8\x05\xe0\x5c\x6b\x7d\x43\xf4\x8b\x7b\x85\xf8\xc2\x93\x82\xfd\xcd\xf8\x62\x1e\x3e\x90\x11\x5f\xec\x6b\x8c\xb3\x67\x92\xfa\x87\xaa\xc9\xad\xfd\x47\xbf\x20\x10\x04\x46\xb6\x61\x4f\xd0\x89\xf4\x75\x90\x9f\x7d\xa6\xee\x3e\x8b\xb9\x69\xed\x2d\xfc\x80\x81\x13\x94\xae\x13\x0f\xea\x99\x81\x35\x20\x9a\xc2\x08\x2d\x99\xb3\x52\xc9\xbf\x97\xde\xcb\x78\x66\xdf\xfe\x19\x72\x62\xa6\xa6\xb2\xf1\x48\xa4\xbe\xfa\xba\x27\x1c\xf0\xfb\xd9\x27\xa2\x68\x5f\x04\xd1\x2f\x42\x7d\xc2\xc2\xd7\x44\xc1\x35\x0c\xd8\xde\x54\x87\x15\x42\x71\xe4\xc8\xe9\x83\xfb\x9e\xd0\xd3\x2e\x54\x8e\xee\xa6\x72\x38\x0c\xee\xbe\x1b\x07\xf1\x2d\xc4\x8a\x5c\x7c\x4a\xe3\x47\xaa\x59\xb2\x7d\xe4\x41\xfb\xc4\x41\xfa\x3b\x70\x8a\xfa\x3b\xe1\x33\x91\x3f\xec\xad\x43\xb5\x65\x67\xb0\x00\x13\x0e\x80\x0a\x38\x61\xbb\xe2\x9f\x85\x98\xba\x2a\xd0\xf5\x92\x81\x0b\x03\x02\xb7\xcd\xfe\xae\x22\x81\x9d\x9e\x9f\xb5\x24\x82\x07\xef\xed\xa4\x39\xd5\xcd\x23\x51\x36\x03\xc8\xa8\x0e\xb0\x6d\x48\x7a\x18\x2f\x75\x25\xd1\xcc\xf0\x99\x88\xc2\x7a\x0c\xc5\xcc\xeb\x72\x90\x61\xd9\x86\x69\x26\x0b\xcf\x08\xe3\x0d\xbe\xe5\xf8\xd6\x45\x29\xc5\x6e\x2d\xdc\xf5\x72\x7b\x04\xfe\x23\x1f\x88\xec\x42\xa0\xab\x7f\x59\xd2\x2e\xcb\x6c\x4b\x66\xa8\x29\x61\x4f\xc0\x77\x58\x3e\x0a\x72\x71\xfd\x95\xe4\x03\x27\x91\xaf\x53\xc8\xa1\x1e\x62\xae\x1a\xbc\x95\xa2\xba\xed\xe7\x37\x5f\x2c\x4f\x08\x49\x4f\xa7\xef\x5f\x53\x64\x23\x32\x95\xda\xbb\x29\xdb\x0e\xc2\x07\x28\x30\xa8\xc7\x4e\x99\x2a\xb3\x6c\x51\x53\xa5\x7d\xcb\xd5\xa7\xa4\x3e\xa6\x55\xe9\x19\xf5\x29\x54\x70\x39\x6a\x03\xa2\x8d\x9f\x60\xd0\xd9\xe5\x58\x54\xbe\x89\x66\xbf\x56\x88\xe4\x0d\xa2\x81\x2a\x3b\xff\x31\x8c\xe1\x46\x71\x96\xd1\xee\xd6\x17\xad\xad\x30\xf7\xf6\x31\x9f\x6d\x5b\x40\x54\x15\x5f\x6c\xff\xfe\x59\xcc\x3b\x70\x17\xfd\x8a\x35\xea\x2d\x9d\x10\x44\x56\xfc\x9b\x0b\xc6\x89\xba\xb1\x3d\x58\xa1\xe8\xef\xa5\x9c\xf1\x4c\xa8\xc2\x5d\x73\x58\xb4\xc1\xd3\x72\xb4\xf1\xf6\xae\xd5\x46\x84\xfb\xd3\x76\xd0\xdf\xf9\x2c\xe6\xfd\x1d\xbc\x0b\xed\xc4\x39\x1d\x9f\xfe\xce\x99\xb2\xdf\xbb\x68\x1f\x1f\xc0\x93\xf3\x79\xb8\x38\x20\x1f\xb4\xbf\x83\x62\xc6\xce\x06\x14\xd3\xc6\x1a\xda\x79\xd1\x5a\xc1\x32\x13\x3e\xed\x7a\x02\x80\x02\xf8\x37\xe5\x36\x31\xcd\x6d\xc0\x78\xa2\xc9\x53\xf0\xa7\xfb\x05\x2b\x94\xbb\x85\xc3\xe5\xec\xa0\x9c\x82\xab\x0c\x95\x7f\x69\x03\xa0\x71\x2e\x32\x0a\xb7\xc6\x4d\x83\xeb\x0c\x23\xcb\x57\x73\x89\xcf\x62\x55\x50\x1a\xc9\xd5\x18\xe2\x6e\x27\x61\xbf\xf0\x99\x4c\x7e\xdc\x7c\x4a\x58\x4d\x7a\xf9\x75\x52\xf9\xad\x5a\xdc\xdf\x12\x22\x49\x40\x38\x2c\x18\xdd\xaa\x07\x20\xae\x41\x8c\xa0\x3d\x3c\xbc\x20\x26\x94\xd6\x6c\x55\x66\x97\x5b\xda\x4a\xc9\xf0\xcf\x62\xfe\xcc\xe0\x42\xdb\x23\x32\x96\x53\x57\xfd\x13\x8e\x90\x8b\xe3\xc7\x68\x72\xd7\x05\x52\xf5\x99\xea\xb0\xf7\xba\xb0\xff\x79\xf3\x05\x80\x22\xec\xfe\xbc\xd6\xc2\xbc\xd7\x05\x7c\xb3\x0d\x1e\x19\xbc\x70\x95\x54\x81\x47\x91\x20\xdc\x5c\x35\xfb\x38\xca\xd8\x50\x50\x76\xf5\x48\x9f\x29\xab\x42\xd0\x98\x1b\x67\x3a\x0e\x08\xc7\xec\xa1\xb6\x3e\x68\xaa\x3a\xaf\xcc\x74\x49\x77\xd4\x15\xe2\x0d\xc2\x2f\x98\xa0\x91\x01\xec\x63\x5a\xe6\xa4\x71\xe1\x66\xcb\x84\xc1\x56\x23\x36\xda\xa3\x4a\x1d\xae\x92\x6c\x20\xbb\x3b\x90\x7a\xa4\x29\xde\x89\x82\x2f\xe1\x3b\xae\x09\xc3\xef\x07\xc2\xf8\x50\x4d\x3c\xc2\x66\xae\x8a\xb1\x28\x64\x12\x21\xde\xc0\x96\x8c\xf9\x4c\x50\xd5\x6f\x08\x7c\xcc\x3c\xe9\xce\x78\x2e\x75\x69\x3c\x5e\x63\x10\x5d\x7c\x74\xba\x07\x5b\x03\xbe\x4f\xba\xef\xbf\x7f\x80\x96\x76\x38\x1d\xe6\x06\xf6\xeb\x3a\x00\xbb\xda\xea\xdb\xe5\xca\x5a\xd5\xd4\x2c\x8a\x74\x75\x70\x00\x50\x6e\xd4\x7e\xb6\x02\xcd\x44\x16\x0e\xf2\x90\xaa\x63\xe9\x21\xe8\x8c\xc6\x87\xf3\x12\x40\x58\x35\x91\x25\x02\x11\x18\x73\x42\xb2\x84\x85\x0c\x29\xec\x51\x3e\x84\xf4\x18\x8c\x2e\x01\x28\x2a\x8e\x2d\x8d\x81\x1f\x20\xbf\xd7\xc5\xdd\xbb\x3c\xa2\x28\x44\xdf\x6e\x10\x24\x6d\x62\x70\x2f\x08\x63\x85\xb6\xc3\xcc\xa5\x20\x69\x5f\x89\x2f\x85\xe3\x43\x7e\x24\x61\x57\x5e\xe1\xaa\xe0\xe9\x81\x44\x42\x53\xd8\x4b\x07\xfa\x8a\x12\x01\x5d\xc4\xb3\x5b\x32\x57\xa8\x1b\x6a\x92\xbb\x14\x12\x3b\x6f\x97\x18\xec\xea\xdd\x41\x75\x3c\xce\x86\xe2\x9a\x4d\xa4\x2a\xed\x72\xc1\xd6\x4f\xb9\x31\x22\xf5\x82\x33\x10\x86\x53\xc4\x50\xac\x70\xab\x8d\xe9\x61\x2e\x25\x19\x21\x30\x71\x27\x71\x29\x5d\xc8\x33\x66\x71\x26\x3c\x73\x2b\x45\x2b\x4d\xea\x91\xcc\x4d\xe1\x53\x80\x3a\x71\x39\x61\x18\x4f\x2e\x12\x21\xfd\x52\x16\xfa\xb3\x50\x54\xf5\xce\xa5\x0f\x51\x16\xdd\x16\xec\x18\x51\x27\xa5\x1a\x9d\x15\x62\xf2\x4a\x97\x6a\x55\x15\xff\xe6\x03\xde\xb2\xe3\x49\xd2\x94\x03\x63\x29\x43\x15\x44\x9d\x34\x51\xd8\x39\x44\x07\x72\x65\x6d\x09\x4c\x32\xd4\xa0\x80\x36\x6e\x2d\x3c\x83\xa6\x6f\x91\xda\x48\xc4\x10\x29\xdd\xea\x3a\xa7\x6d\x71\x37\xba\xa1\x5c\xf1\xea\xa8\xfc\xc8\xdd\xa0\x0c\x2b\x31\x73\xd3\x8b\x80\xd5\xdc\x88\x4c\x0c\x0b\x56\x2a\x38\x7d\x2a\xf5\x35\xea\x88\xa3\x57\xaa\xc6\x56\x07\x0a\x84\x30\x99\x42\xcc\xf6\x2e\x59\xf5\x06\x82\x8a\x93\xf9\xac\xf6\x64\x5c\xaa\xcf\x60\x6e\x08\xbf\x16\x4e\x29\x76\xc9\xf7\xd0\x68\x2f\xcc\x27\x17\xb4\x74\x48\xc2\xf5\x39\xe1\x44\x1a\x59\x1e\x1b\xcd\xc4\x25\xe2\xe8\x2c\x75\x15\x27\x67\x87\xbd\xc3\x17\x2c\xd5\x98\x92\x04\x68\x20\xee\x1d\x78\x4c\x7c\xe9\xb7\xd2\x44\x40\x64\x6d\x94\xf2\x07\x61\x0a\x39\x81\x34\xe6\x3f\xe0\x71\x95\xff\x20\xbb\x5c\xc8\x15\x08\xa0\x31\x95\xd2\xe5\xc0\x91\x17\xf5\x8d\x85\xae\x81\x9d\xe4\xf4\x01\x8c\x58\x77\x90\xd6\x5d\x61\x09\x2b\xce\xcb\x05\x15\xa0\x06\x38\x03\x97\xcc\x1d\xe3\xba\x3c\x33\x51\xe2\x65\x0c\xd3\x19\xd2\xa4\x50\xb0\xe6\xca\x33\xe2\x00\x8e\x8b\xd9\x01\x85\xc8\x27\x52\x11\x1a\x82\x4b\xd5\x01\xde\xe1\x31\x15\xd6\xc7\xdb\x45\x50\x56\xe0\x81\xac\x54\x98\x04\x69\xdf\xc9\x93\xcf\x71\xd9\x7e\x91\xf7\xd8\x79\x1d\x16\xd7\x40\xdd\xd8\x1e\xfb\x28\x78\xda\xb5\x57\xe8\x9d\x67\x5b\x25\x5a\x61\x56\x7f\x32\xef\x52\xa4\x44\x97\xab\xb4\xeb\x2f\x8c\xba\x73\x73\x3d\x00\xa6\x6c\xf8\xa3\x54\x9f\x57\x65\x89\x53\x33\xd4\x83\x7e\xfa\xf8\x63\xdd\x6a\xef\xb7\x70\xad\xa5\xea\xab\xbe\x7a\xfd\xe6\xfc\xe3\x9b\x57\xa7\x97\x6f\x5e\xb3\x1f\xbc\xba\xe0\x8a\x3f\xea\x29\xf3\x79\x39\xae\x7f\x6f\x45\x3f\xec\x1d\x1d\xd8\x33\x02\x49\x60\x55\x86\x26\x0d\x9b\x66\x5c\x29\xbc\xc2\xab\x90\xc7\x87\xbd\xa3\x43\xf7\xd8\x7d\x17\x15\x0f\x02\xe1\x3b\xae\xf8\x48\xa4\x68\xbc\x7e\xa3\x8a\xa5\x16\xde\x66\x63\xdc\x80\x6b\x9d\x7f\x1e\x66\xfa\xba\x2b\xad\x18\x84\x96\xf0\x0b\x62\x79\x01\x3b\x73\x01\x72\x6f\x90\x94\xd0\xf2\x6e\x9f\x6b\xd1\x0b\xef\x3a\xd5\x3b\xca\xf0\xae\x8e\xcb\x6f\x75\x6d\x64\x88\x53\xed\xed\xf4\x4d\x1b\xf7\xdf\xec\x91\x07\x37\x14\x58\x55\xf5\xb4\x9b\xd9\xc3\xc5\xa2\x71\x10\x23\x47\x43\xb7\x12\x89\x95\x26\xf2\x39\x1c\xf6\x1c\x4e\x7d\x75\x7c\x3c\x1a\x49\x74\xad\x25\x3e\xef\x92\x97\x85\x06\xf8\x0a\xa8\x91\xea\x61\xc1\xb7\x10\x4f\x70\x2f\x2e\x57\xc3\x24\xbc\xf5\x0d\xdd\xf5\x99\x4a\xdb\x60\x22\x15\x28\x76\x2e\x25\x37\x20\x28\x93\x83\x85\x96\x2e\x32\xa4\xc3\x92\xe6\xa2\x8a\x52\xe2\xd5\x01\x2f\x6d\x82\x08\x77\xc2\xfa\xde\x2d\xb8\x8d\x91\x7d\xd8\xf4\x3a\xb2\x1b\xda\x15\xbd\x23\x73\x99\xbd\xce\xbb\x32\xc7\x1a\xbc\x4c\x5e\x0a\x05\xff\xa4\xdb\x6b\xb7\x36\xc6\x2b\x61\x1e\x25\x3d\x9e\x36\x64\x37\x2f\x02\xd8\x81\xb3\xba\xca\x74\x81\x27\x3a\x27\x85\x3f\xc2\x3c\xa1\x43\xea\x4e\x36\x83\xee\xc8\x11\x60\xdc\x51\xdd\x06\x36\x67\xba\x1e\x5a\xce\x87\x69\x84\x38\x53\x44\x95\xa4\x7d\x07\x24\xcf\x66\x82\xa7\x78\x3b\x4a\xc3\x5a\x18\xd4\x40\x00\xd6\x11\x5e\xbb\x78\x68\x81\xa4\x66\x71\x16\x7f\x15\x58\x05\x04\xbd\x67\xa7\xd3\x69\x36\x7f\x06\xf4\xf9\xec\x27\xc8\x67\x7e\xb6\x0d\xd0\xc8\x3d\x43\x4a\x79\x10\x29\x39\x11\xa6\xe0\x13\x30\x06\x3b\xac\x26\xbf\x71\xec\x5a\xe4\xe8\x76\xb4\xbc\x87\x44\x3d\x72\x68\x3b\xc3\x8a\xd5\xea\x2a\xbb\x40\x2b\x72\xb7\xd7\x91\x4c\x72\x5d\x83\xe1\x6a\xd0\xac\x6b\x03\x85\x07\x02\x77\x84\xaf\x00\x7c\x68\x62\x5b\x20\x70\x01\x43\x9e\xeb\xab\x6d\x47\x17\x4a\x10\x48\xed\xe6\x76\x8b\x78\x69\x6f\x5e\x8a\x38\x58\x2e\x96\x4c\x25\x34\x02\x4f\x67\xc5\xcc\xc2\xb3\x2c\x80\x5d\xb4\x9b\x5a\x08\xef\xd5\x95\x05\x88\xbc\x42\x60\xbe\xa0\xb6\x48\xfb\xeb\xdc\xa4\xf6\x1a\xe1\xad\xc9\xd7\x77\xea\xc3\x38\x0d\xef\x25\x46\x54\xaa\xe0\xdf\x06\xdb\x31\xaa\xed\x13\x3e\xc5\x10\x90\x94\x51\x25\xf6\xea\x65\x1d\x59\x71\x06\x73\x70\x11\x83\x70\x5f\x68\x9d\xa1\xbb\xb3\xd0\x54\x8b\xc2\x9b\x43\x78\x3e\x90\x45\x6e\x2f\x5d\x9f\x8f\x6c\x79\xc4\xdc\xeb\xc9\xe0\xe3\x03\xfb\x08\x94\x2c\xf1\x98\x17\x20\x6e\x82\x9d\x05\x4e\x17\x48\xeb\x00\xab\xe6\xcd\x28\x35\xf9\xfb\x64\x7f\x3f\xd8\xa1\xad\x04\x9e\xea\xc4\xec\xdb\x7d\xea\x8e\x4a\x99\x8a\xfd\x78\xf9\xd7\x73\x68\x44\x7c\x26\xc9\x4a\x53\x88\x75\x4a\xba\x5c\xd6\x60\xab\xe9\x49\x22\xa6\x08\xdf\x23\xd4\x8f\x0a\x3e\x63\x67\x8d\x4a\x31\xb3\xbb\x94\x66\x1c\x91\x26\x6c\x0a\x94\xf2\x87\x17\x00\xa4\x8a\x83\xbe\xb6\xf7\x57\x90\x01\xe8\xa5\xa6\x82\x31\x45\xea\x39\x2a\xcb\x73\x8c\xde\xc8\xe5\x68\x5c\x30\xa5\xaf\xd1\x8f\xe1\x8b\x7f\x48\xc3\x46\x1a\xee\x23\xcd\xe4\x48\xc1\x52\x83\xed\x8e\x32\xcc\x91\xe8\x01\x17\x06\x78\xb7\x87\x6f\xd9\x9c\x85\x43\x57\x84\xa9\x04\x2c\xf5\x3e\xf9\xf9\xab\xfa\xcb\x51\xe2\x0e\xec\xbd\x11\xae\x44\x0b\x14\x83\xf4\x05\x85\xf6\x9a\x9b\x70\x17\x9e\x79\x8b\x48\x04\x10\x16\xb4\x79\xa9\xd8\x98\x4f\xa7\x42\x99\x2e\x81\x20\x00\x30\x29\xe3\x96\xb9\x1a\x66\xc4\x94\xe7\xb0\xc6\xee\x92\x30\xc1\x7a\xe0\xac\x84\xde\x64\x01\x07\xd8\xbd\x32\x2e\xde\x2f\x15\xfb\xf8\xf6\xd5\xf1\xf1\xf1\xb7\x18\xad\xc0\x11\xda\x44\x2a\xf6\xd3\xe5\x2b\xd0\xcc\xd6\xd1\x75\xdf\x97\x58\x7f\x1f\x6d\xce\x77\xae\xfb\x3a\x5e\xb1\x00\x00\x89\x90\x22\xbe\xdf\x14\x7b\xe7\x7d\x30\xe4\x11\xea\x8e\xaf\x53\xe4\x04\x14\x67\x98\xd0\x08\x7c\x33\x2c\xad\xa0\x8f\x56\x08\xbb\x17\xb4\x51\xb2\x88\xe0\x26\x6a\x88\x1f\x6e\xf5\xa0\xb6\x8f\xdd\x9f\x08\x69\xab\x4e\x67\x99\xd1\x28\x25\xbc\xe3\x24\x89\x0f\x04\x96\xb2\x12\x80\x43\x12\x76\xe0\xb6\x6d\x3d\x8d\xf1\xdc\xe7\xa1\x7b\xdd\xb6\x18\x1f\xdf\xbe\x62\x40\xa6\xc0\x4e\x40\xb5\xb5\x47\x8c\x17\x9e\x73\xc6\xca\x63\x80\x79\x21\x68\xa4\x2a\x9f\xa3\x2b\x2a\x3a\xaf\xb0\x0b\xdc\xef\x6a\x05\x6e\x84\x78\x57\x38\x01\xf6\xd6\xe8\xb8\xa3\x62\xcf\x19\x02\x5d\xe1\x86\x22\x2a\xc6\x60\xce\x38\x19\x96\xaa\x06\x75\xf0\xed\x3b\x94\x41\x3c\xed\x34\x48\xb6\xab\x34\x02\x36\xe7\x6c\x26\x51\xd9\x02\xb2\xa9\x54\xcb\x31\x1d\xc2\xca\x22\xac\x64\xf7\x36\xcb\xe9\xf7\x18\x1f\x16\x04\x46\x08\xab\xe3\x8c\xcb\x04\x58\xa8\x55\x22\x48\xe7\xa9\xa0\xcd\xc0\x98\xd0\x9b\x77\x6a\x60\x08\x56\xf7\x69\x6b\xe8\xbd\xdc\x60\x76\xed\x54\x96\x69\x90\xe9\xe4\xb3\x5d\xeb\x0f\xee\x35\xad\x54\x0d\x11\x9a\x11\xaa\x54\xe4\xd1\x40\x4b\x2d\x56\xa7\xb2\x7f\x39\x34\x30\xa9\xc8\xfe\x86\x35\xaa\x3a\x8c\x67\xc5\x58\x97\xa3\xb1\x3d\x69\x4e\xea\x70\xc7\x82\xd5\xcb\xf6\x51\x03\xb7\xca\xd3\x5c\xa2\xa1\x14\xbd\x0a\x72\x22\x2a\x08\xd6\x1d\xc6\xd1\xf9\x84\x08\x70\xe4\xe7\x01\x89\x90\x4d\x75\x8a\x31\x81\xd8\x93\x54\xec\xf8\xc0\xf1\x0a\xdc\xe5\x1f\xca\x81\xfd\xd1\xe1\x9d\xf1\x04\xe8\xcc\x08\x95\xa2\x3b\xc7\xd3\x97\xe3\x19\x10\x43\x26\x47\x2a\xb8\x48\x9c\x95\x3f\xa0\x8d\x4f\x75\xda\x63\xa7\xb4\xb3\xbc\x88\x5e\x8a\xde\xd9\xca\x4b\xed\xbb\x18\x67\x63\x9e\xa7\x6d\x2f\xd9\xbd\x38\xfb\xfe\x87\xb3\x1f\x7f\xdc\x6b\xbc\x0e\x6f\x78\x78\x4b\x92\x09\xae\xca\x69\x87\xb8\x97\x1b\x44\x60\x62\x00\x63\x79\x46\xa3\x83\xbb\x24\x01\x81\x86\x32\x75\x20\xba\x12\x59\x42\xa7\xc2\x37\xed\x9a\x9a\xc2\x0e\x13\xc0\x69\x3c\xb9\xc6\x1a\x53\x87\x95\xaa\x90\x19\x78\xc0\xd3\x89\x54\x88\x82\xa0\x01\xb6\x9b\x0c\x2c\xb0\x8b\x80\xe8\x06\xd6\xe1\x60\x07\x2e\x6a\x07\xad\xc6\x9f\x53\x8f\x16\x04\x44\xd8\x3c\xec\x24\x93\xd1\x68\xc7\xdc\x10\x65\x0a\x15\x98\xc0\xb2\x4b\x71\x3d\x36\x72\x9f\x66\xe2\xe5\x57\x65\x38\xde\xab\x0c\x15\xb1\xcf\xbf\x05\x8c\x2e\x3a\x15\x9e\x48\x08\xc1\x62\xde\x63\x10\xec\x2d\xbc\xc1\xb2\x62\xe9\x88\xaa\x6c\x4e\xb5\x42\xae\x97\xe8\xc9\x54\x2b\xe1\x1c\xaa\xae\x4c\x9c\x23\x45\xec\xc9\xbf\x07\xf1\xb2\xc8\x0f\xd5\x64\x39\xd5\x3d\x05\x86\xad\xba\x80\x63\x67\xfb\x81\xd2\xae\xb1\x0b\xce\x12\x94\xbb\x6a\xe9\xf2\xee\xb1\xb7\x81\x0d\x06\xa0\x4c\x44\x14\x24\x7d\xc6\xdb\x95\xb9\x9a\xa3\xa0\xd6\x63\xec\x03\x08\x6c\xd2\xb0\xf7\x1f\x2e\x99\x50\x43\x9d\x27\x00\x69\x15\x3c\x62\xaa\x40\x84\x5a\x03\xe7\x13\x52\xab\x55\xc1\x72\x69\x3e\x63\xe0\x47\x99\x7c\x8e\x78\x70\x2f\xe6\xc7\x18\x83\x34\xe6\x56\x1d\xf3\x80\xb4\x73\xc6\x21\xb4\x07\x54\x81\xa9\xa5\x7b\x83\xf1\xc0\x00\xdd\x8c\x02\xa4\x0c\xab\x15\x90\xa1\xdc\x35\x10\xe6\x25\x15\xce\xc3\xfb\xe0\x24\x9e\x36\x67\xf1\xe1\xcc\xc8\xa2\xf4\x40\x85\x41\x7f\x09\xbb\x17\xef\xa9\xdb\x67\x34\xb7\x85\x17\xc7\x2e\x52\x69\xd8\x35\x97\x88\x59\x85\x31\xfc\xc4\xb4\xf0\xe2\xa6\xd8\x6e\xaf\x58\xe2\x99\x83\xe8\x79\x70\xcb\xef\xd9\xd1\xdb\xd5\x4c\xe9\xfa\x5d\x38\x10\x1e\xcf\x9c\x17\xd5\x61\x74\x28\x6a\x14\xbc\x8b\x90\xda\x20\x78\x6a\xef\xb6\x1e\xfb\xab\xb4\xf7\x4e\x11\xf6\x12\x56\xa8\x82\xb1\x85\x21\x44\xc3\x5c\x08\xbb\x48\x24\xb2\x4f\xac\x26\x07\x56\xf6\x89\x11\xd9\x8c\x80\x85\x9d\x8e\x3b\x2b\x33\x25\x72\xb8\xc8\xdd\x23\x60\x34\x03\x17\x56\xc5\x89\x7c\x97\x61\x33\xb7\x14\xb4\x45\x70\xd7\x62\x0d\x55\xf8\xfb\xa8\x29\x31\x06\x5f\x05\x72\x9a\x8b\xa1\xfc\xd2\xf1\x6e\xbf\x20\xaa\x75\xb0\x32\x03\x3e\x6a\x2f\x6b\x4c\x10\x00\x95\xf7\xc3\xfb\x1f\xff\xf5\xff\x67\xef\x6d\x9b\xdb\x46\x92\x74\xd1\xef\xfe\x15\x15\xda\x0f\xb6\x77\x29\xc9\xee\x99\xbd\xe7\xdc\xee\x98\x38\xa1\xb6\xdd\xd3\x3e\x6d\xb7\x75\x2c\xf5\x74\x6c\x5c\x4d\x9c\x2e\x01\x45\xb2\x56\x00\x0a\x8b\x02\x24\x73\x36\xe6\xbf\xdf\xa8\xcc\xaa\x02\x08\x82\x24\x48\x01\x24\x48\xe6\x87\xdd\x71\x8b\x40\xa1\x5e\xb3\x9e\xcc\x27\x5f\xd8\xc7\x9f\xe0\x69\x68\x15\x37\xce\x9c\x20\x77\x29\x6e\xcb\xec\x96\x1e\x16\x9a\x8f\x8d\xca\x68\x0d\xef\xed\xe0\xae\x4a\x4c\xbe\xe8\xb1\xa5\x57\xa7\x73\x97\xe9\x0c\x5e\x2b\xdd\x28\x3c\xc6\xb1\x11\x2b\x1a\xe0\x5e\xa0\xe2\x7b\x60\xf1\xad\x11\xc5\x0e\x40\x17\xe3\xb1\xfc\x86\x30\xc2\xa7\xe1\xc5\xd7\xa7\x16\x8d\x81\x6e\x0f\x96\x53\x9b\xc0\xbc\x88\x84\x76\x50\xad\x1c\xef\xa8\xea\xc0\x92\x67\x45\x12\x54\x6f\xaa\x48\x24\x93\xb2\x2a\x11\x7e\xd5\x39\x37\xc2\x50\x63\x6e\x39\x13\xfc\xb8\xed\x9e\x25\xa0\x2d\x03\x6a\xee\xc0\x85\xe9\x2b\xd3\x7e\x7a\xe6\xc9\x2e\x13\x1a\x22\xf0\xd2\xb7\xa0\xc5\xe1\x6e\x33\x33\x46\x3c\xba\x3a\x21\x90\xbc\xef\x1c\x92\x93\x0b\x1e\x8e\xbc\x2e\x65\xdd\x09\xec\x63\xdf\xbd\x79\xcb\xde\x59\x2e\x57\x65\xec\xdf\xdf\xbc\xc1\xd9\xfc\x8a\xc9\xc1\x91\xca\x37\x77\x80\x39\xad\x95\x04\xe2\xf3\xdb\x25\xa8\x66\xb6\x1d\xab\x22\xf1\x66\x7e\xd4\x2d\xa2\x48\xe5\xb9\xf3\x2d\xaa\xa6\xdf\x44\x33\x54\x26\xcc\x3d\xf4\xca\xed\xd9\x68\xb6\x08\xbf\xd1\x1d\xc9\x37\xfb\xd5\xbc\x71\x8e\x50\x0e\x8b\x91\xbc\x86\xa9\xbc\x02\x5e\x2b\xf4\x35\x55\xdd\x89\xa8\x65\x42\xed\x19\x2b\xc8\x50\xc4\xa9\xda\x92\x3a\x9e\xb4\x4d\xc4\x7f\xc5\xd0\x47\x26\xf0\x3e\x2a\xf5\x10\x2d\x5f\x05\xb2\xcc\x7b\xaf\xdc\xed\xae\x61\x97\x42\x1e\xfb\x56\xdc\x72\xd7\x8a\x71\xb4\x7b\x1f\xf3\xcf\xe8\x52\x6e\xbd\x40\x1f\xc4\x4c\x57\xfc\x85\x17\x7d\x24\xe0\x0a\x99\xf0\x44\xfe\x03\xd5\x64\x57\xc3\xfe\x1f\x82\xbd\xd2\x81\x4a\xad\x25\x15\x5c\x86\x5e\x57\xcc\xa5\xdc\x16\x1a\x2a\xbd\x89\xd0\x79\x28\x8d\x6c\xce\x28\x66\xdd\x0c\x22\x97\x2a\x12\xca\x28\x05\x0d\xd9\xb0\xd7\xda\x5a\xed\x2c\x6e\x6c\x66\x8d\xab\x04\x53\x2b\x6e\xcd\x3e\x8b\xf1\x62\x15\xa2\x7c\xbe\x94\xa4\xf3\xee\xa8\x46\x35\xfa\x7a\x37\xf6\xa3\xb8\xc7\x0c\x1c\xb5\xad\x94\x66\xd9\x58\x69\xa3\xfc\x8f\x21\x29\xbd\x05\x27\x53\x55\x68\xf1\x20\x44\x2a\x93\x09\x0a\x10\xe4\x04\xf2\x59\x6a\xf9\x61\x94\x22\xc9\xcb\x9c\x25\xd6\xf2\x67\xb5\x5f\x28\x12\xa2\xf3\x79\x9f\xa6\x0b\x76\x55\xd2\x81\x76\xbd\x9d\x2d\xe2\x25\xd6\x41\x1d\xa1\xbf\xa0\x5d\x23\xff\x47\x0b\xbc\xca\x00\x44\x7f\xc0\x78\x9a\x46\x33\x2c\x52\x07\x44\xf9\xdd\x59\x20\xcf\x83\xd0\xb9\xfb\xd7\xa2\x3c\xb5\xa3\xa8\xac\x30\x2b\x0b\x71\x5a\x07\x02\xdf\x3d\xd8\x87\x35\xbb\x7c\x89\xc1\x7b\x8f\x30\x69\x70\xaa\xd8\xd8\x75\xb8\xb2\xe9\x5a\xd4\xe5\x07\x79\xed\x7c\x8c\xec\x0d\x63\xee\x23\x80\x8f\xde\x06\x7f\xc1\x3e\xea\xf2\xa6\x85\xf9\x41\xe3\x76\xa5\x22\xb2\xae\x18\x37\xb4\x8a\xab\x65\x2d\xcd\x85\x8e\xf9\x52\x9d\x65\x09\x3d\x4b\x9d\x89\x42\xd4\x04\xa6\x51\xa0\x2b\xe5\xc6\x90\x13\xa8\x7a\x28\x5c\xf8\x7b\x26\xcd\x64\xcc\x33\x69\x2e\x1f\xe7\xd0\x66\x36\xb3\x33\xbd\xb3\xf2\x66\xb0\x32\x65\xce\xc7\xb4\x5c\xa0\xc6\x24\xd4\x9b\x0a\x87\x52\x39\xd4\xff\x02\x73\xb7\xf9\x65\xe4\xa7\xbc\xc5\xba\x21\x3d\x52\x75\x49\xc1\xbf\xd8\xf5\x43\xbd\x06\x8a\xc0\x25\x8b\xab\x5c\x89\x15\xab\x50\x2d\xf5\xe8\x1d\x74\x1c\xb0\x39\x74\xef\xce\xca\x47\x31\xaf\x6f\xf5\x27\x4b\xb7\x07\x3c\x51\x09\x38\xce\xce\x57\x3c\xb8\x60\xbf\xaa\x7c\x8e\x69\xe4\x99\x98\x43\x6f\xf7\x82\x81\x94\xb7\x3a\x5a\xd9\xab\xf3\x0a\xa6\x53\x73\xd0\x0d\x55\x33\xa5\xbd\x0f\xb2\x87\xb8\x68\x14\x34\x08\xc5\x19\x00\x38\x7b\xff\xeb\xcd\xff\xfd\x74\xf5\xe3\x87\x4f\x9d\x2c\xb6\xef\xdf\x36\x39\xc3\x9f\x12\x91\x7d\x15\x00\xc2\xd7\x97\x90\xfd\x64\xe3\xe2\xdc\x18\x6d\xfe\x5f\x2b\xd7\x2b\x1e\x6b\x1f\xc7\xec\xea\xd3\x27\xff\x5c\x55\x41\x05\xd7\x42\xd0\x22\xac\xb5\x63\xde\xbc\xe5\xa6\xad\x96\xcb\xb8\xaa\x6b\x94\x66\x88\xca\xb5\x52\x15\xdb\x56\xdd\xe6\x89\x33\x98\x54\x8d\x13\xf0\x01\xeb\x6a\xae\x4a\xcf\x6b\xf7\x26\x40\x60\x67\xd4\xc3\x3f\x56\x5c\x96\xc0\xad\xa9\x10\xce\xcd\xa7\x74\x5b\x2a\x9d\xc2\x55\x22\x4a\x57\x93\xb2\x91\xde\x25\xf6\x97\xb9\x95\xec\x4a\x63\x9d\x8b\x4b\x2a\x64\xd8\x95\x8a\xbb\x99\x23\xec\x55\xe2\x5c\x4d\xf1\xec\xd9\x00\xb0\xb9\xd2\x53\xbb\x70\x84\xfd\x5c\x09\x68\x80\x92\x6e\x69\x2e\x63\xa9\x73\x2c\x88\xe4\x7c\x49\x47\xf6\x05\x68\x13\x7c\x92\x4b\xed\xe7\x09\xe0\x61\xe9\x01\xa4\x92\xaa\x0b\x80\xca\x1a\x62\x70\x3d\x21\x59\x40\x65\x26\x81\x48\x41\x97\x11\x45\x73\x31\x17\xed\x9c\x6f\x6f\xb1\x26\x66\xc9\x88\xa1\x2f\x11\xda\x75\xc0\xf2\x1c\x14\x11\xcf\x56\xf7\xac\x2d\xb3\xb9\xa1\xfb\xf0\x51\xbb\xfd\xde\x9c\xa8\xdb\x6f\x65\xa6\x8c\x14\x59\x3d\x49\xbf\x7d\x7c\xef\x2e\x71\x0b\x04\x8d\x04\x97\xd6\x1f\x03\xaf\x62\x14\x04\x35\x52\xd9\xb1\xf3\xa5\x82\x50\x5a\x4f\xe6\xb9\x4a\x95\x30\x5d\x04\x81\xd0\x7a\x5c\x44\x25\x48\x03\x6c\xef\x37\x7d\x85\x9d\x74\x2c\x76\xae\xdc\xe1\x56\x09\xbb\xfe\xed\xb6\xea\x3a\xd0\xf6\x3c\x3c\x07\xcc\x15\xb2\x75\x65\x90\xee\x5d\xdb\x6a\x57\xcc\x0a\xa7\xb0\xb9\x07\x4b\xc6\x53\x24\xc8\x38\x26\x68\x44\xb0\x7a\x63\x24\x72\x08\x58\xb2\xe3\x9c\x81\x11\xf3\x29\x29\x3d\x91\x00\x21\xce\xfd\xc5\x4b\x13\x8b\x2c\xbc\xc7\x0e\x6e\x0e\x6b\xce\xf3\xe5\x09\x46\x96\x10\xb5\x3e\x3b\xe7\x88\xee\x46\x4c\x2b\x1b\x17\x03\xab\x5c\x69\x00\xd5\xc5\x6e\x3d\xb7\x17\xbd\xc7\xd1\xf4\xb9\xc5\x11\x02\x9a\x18\x26\xd9\xf1\xfc\x6b\x3e\x6f\xab\xad\x8c\xd8\xd5\xaf\xef\x5d\xac\x1b\x40\x3f\x6f\x17\xbd\x3b\x2b\x4b\x37\xb8\x46\xab\x85\x58\x2a\x61\x51\xf8\x62\x89\x7d\x16\x58\xab\x07\x31\x3b\xb7\xc5\xf9\xc0\x5d\x0d\xc9\x48\xeb\x5d\xe0\x36\x05\xfc\x87\xe5\x86\xaa\xf5\x8c\xa0\x20\xcc\x05\xbb\x55\xb5\x60\x21\x4f\x2a\x1b\x4d\x5f\x03\xe0\x37\x9f\xbd\x3b\xab\x72\x34\xaa\x32\xb4\x11\x32\x1a\x4f\x52\x0b\xf6\xe7\xef\xbe\x63\xaf\x7e\x4b\x2c\x33\x03\x34\xc1\x87\x24\x97\xf9\xec\x75\x43\x51\x93\xc6\xe5\x58\x59\xf5\xa5\x84\x79\x6d\xd7\xa1\x36\x19\x80\x47\x7d\x4d\xb5\xf5\xf0\xb1\x55\xaf\xda\x96\x61\xaa\xef\xc7\x41\x17\x39\x6a\x6b\x49\x58\x37\xa8\x5d\xa8\xd0\xed\x6e\xba\x4e\x7b\xfa\x9c\xfb\xa1\x39\xb2\xbb\x22\xe2\xea\x7b\xab\xbe\x2c\xb5\xa1\xdb\xff\xea\x30\xf6\xfb\x1a\x52\x85\x2f\xbf\x77\xe0\x77\x4b\xc1\x22\xf9\x93\x2b\x36\x91\x8f\x02\xd5\xc3\x20\x13\x79\xc5\xb1\x13\xfc\xf1\xed\x91\xab\x20\xa7\xeb\xab\xdb\x77\x3f\x7b\x9b\xd0\xbd\x0a\xab\xc9\x99\x9e\x3f\x84\x25\x05\xa2\x16\x86\x52\x7d\xce\x5f\x77\x8b\x45\x9d\x92\x8a\x32\xf1\x0a\x4d\x08\xd6\xa5\x48\x8c\x98\xc8\x83\x8b\xd7\xf5\x6a\x4f\xeb\x6f\xb5\x0d\xa3\x14\xe7\xd2\x37\xe5\x3c\x9b\x88\xdc\x17\xb0\x5e\xdc\x3a\x9d\x9d\x9d\xc6\xef\xfe\xf6\xf1\xfd\xfe\x22\xd1\x96\x57\x9e\x5f\xbe\xce\x4b\xdf\x61\x53\x11\xa5\xba\x4a\x99\xcd\x69\xa9\x15\x2c\xcb\xf1\x65\x6f\x44\x76\x66\x71\x73\x5d\x8e\x2c\x08\x02\xe8\x94\x54\x5a\x83\x4f\x94\x6f\xc4\xf3\x19\x25\x96\x67\x25\x68\x1a\x53\xd3\xb8\x6e\xa7\x82\xc1\x37\xc0\xa0\x82\x16\x40\xa7\xe5\x19\x2d\x1c\x79\x12\xcc\x4f\xf7\xf1\x1a\x2e\x7e\x39\x29\x32\xc1\x5c\xdd\xeb\x16\x83\xdb\xa6\x82\x6f\x75\xba\xd7\x61\x36\xfb\x69\x67\x48\x70\xdc\xb9\x2e\x24\x3a\x28\xa2\xba\xec\x56\x07\xdd\xf7\x31\x65\x95\x19\x00\xbf\x57\x8f\x38\x07\x96\xe5\xb0\xc6\x07\xce\xa6\x4a\xe7\xc8\x2b\xb8\x7f\x7d\x9f\xaa\x2c\x1f\x99\x89\x50\x66\x3a\xe0\x3f\x3b\xce\x4f\x56\x59\xb9\xa5\xf3\xd1\xbd\xc4\xbe\xa9\x57\x4c\x5e\x8c\x71\x86\x7c\x1a\xa0\x0e\x5b\x62\xba\x54\xed\x8c\x0e\x67\x97\x3e\x54\xc9\xcb\xdc\x3d\x81\x19\x24\xda\x27\x05\xa3\x5a\xba\xfb\xab\xa5\x1b\xa8\x70\x1d\x60\xbb\x29\x26\x13\x74\x0e\xfe\xf9\xf6\xf6\xda\x2d\xb2\x79\xb1\x54\xf0\x31\xef\xca\x88\xbd\xf1\xd5\x4d\xc5\xca\xf0\xfc\x3f\x7d\xb7\x95\xcb\x36\x54\xdf\xef\xd0\x51\x1b\xb7\xf7\x7b\xdb\xee\x2a\x8a\xfa\xc3\x37\xcb\x1a\x61\x76\x15\xad\x55\x20\xc1\x90\xe0\x2d\xd2\x58\x01\xfb\x82\xa1\x2f\xa0\xad\xe1\x5e\x29\xbc\x2e\x73\x6d\x34\x1f\x4c\x2c\x09\x2d\xe1\x67\xeb\x9e\xdb\xde\x41\xc8\x99\x7c\xe0\x8b\xde\x53\xa7\x31\xa0\x22\x50\xa0\xb3\x63\x1e\xb5\x99\x3b\x06\xe2\x5b\x20\xd2\xdc\xd5\x05\xc4\x2c\x9f\xd6\xee\x61\xbb\xb7\x22\xbc\x93\xaa\xc4\xee\x45\x81\x72\x55\xd3\xd7\x79\x98\x4c\x8b\x98\x27\xe7\x99\xe0\x21\xdc\x75\x95\xdf\xbd\xdf\x53\xa5\xd0\x3d\x6c\x2b\x8b\x43\xb7\xb8\x96\xbd\x8b\x6d\x77\x27\xcf\xe7\x89\x5a\x75\xe8\x6e\x72\x9e\x84\x3c\x0b\x6d\x62\x20\x1f\x3f\xb7\xc3\x05\x5c\x42\x8f\x40\xb1\xfb\x75\x6b\x64\x87\xbf\x74\x95\x9e\xa6\xb3\xda\xda\xd8\xc0\x24\x1b\x86\xcd\x65\x54\x64\x02\x92\xd7\x9a\xa5\x6c\x28\x56\x8d\xbc\x6c\xd5\x48\x56\x35\xde\x55\x72\x40\x5d\x39\xbf\xb1\x20\xe2\x19\xc2\x72\x9e\xa0\x3c\xb7\xfb\x04\xe4\xf9\x7d\x61\xae\x72\x81\x22\x46\x3d\x8a\x2c\x93\xa1\x91\x5c\xdb\x40\xb9\x3a\xb4\x58\xb2\xc0\x7e\x8f\x56\xe2\xbc\x2e\xd8\x17\x48\xcf\xf5\x3d\xbb\x3b\xbb\x41\x3b\xf0\xdd\x99\xc1\x5e\x95\x49\xe9\x7d\x17\xe8\x54\x04\x40\x3c\xd8\x91\x74\xa3\xb6\xf8\xbf\xf7\x55\x2f\xf5\xa6\xa1\xb7\xcb\x92\xc9\x3b\x40\xb9\x2d\x70\x7c\xc7\x0b\xbd\xca\xd0\x5c\x79\xca\xe9\xfc\x36\x47\xd9\xdc\x36\xbd\x37\x4a\x05\xf8\x72\x48\xdb\x30\x1b\xe3\x32\x57\x93\xbd\x05\x5c\x0b\x6d\x7d\x6e\x8a\x28\x97\x69\x24\x30\x47\x16\x7a\x08\x88\x24\x50\x85\x81\x66\xa2\x8d\x65\x18\x6e\xdb\x16\x3a\x92\x4d\xa4\xde\x94\x50\x04\xf2\x8e\x71\x74\x48\x33\x87\x12\xfa\x32\x62\x1c\x9d\x92\xe0\xa6\x35\x57\x13\xa4\x5d\xa8\xe5\x61\xfa\x0c\x57\x1c\x04\x55\xb3\x50\x61\x8a\x8a\x54\xe9\x7c\x2c\xbf\x31\x17\xa2\x0b\xd8\x2a\x41\xdc\xc5\x73\xdc\xc0\x06\x4a\x5e\x65\x19\x9f\xe1\x90\xff\x21\x32\x75\x0e\x59\xcc\xcd\x1d\xc7\xbc\x1f\xd8\x8c\xf1\x34\x15\x3c\x9b\xa3\xbd\x31\x40\xb6\x9a\x74\x11\x3a\xaf\x59\x58\x08\xd4\xef\xe0\xed\x29\x7f\x34\x93\x5d\x9b\xe1\x0b\xf6\xc5\xa2\x12\x4c\x6d\x8f\x81\x44\xfa\xfb\xbb\x84\xb1\x3b\xb0\x2e\xdd\x9d\x59\xf7\x0b\x9c\x31\xff\x47\xa7\xd5\x62\xba\x0d\x3f\x85\xf8\x22\xd0\xec\xff\xdf\x9b\xbf\x5f\xb4\x68\x01\xbd\xea\xb1\xf3\xde\x6f\xc0\x36\xb1\x4d\x7e\x8e\xee\x2e\x5a\x8c\x75\xb0\xff\x01\xf3\x75\xc1\xaa\x98\xce\xc7\x53\xb8\x88\x54\xae\xcf\x31\x3b\xb6\x81\x75\x3c\x5c\x6a\x3e\x5e\x9d\xdd\xad\x93\x2b\x68\x59\xff\xb7\xbe\x69\xf6\x67\xdd\x99\x83\xf2\xeb\x64\x92\x7d\xce\xa5\xb9\xc5\x44\x85\xde\xc5\x95\x95\x62\x03\xcf\xfa\xe7\xab\xff\xa8\xc4\xfd\x57\x83\xa0\x95\x13\x6c\xd5\xd7\x1b\xa4\x5b\x25\xf1\xdd\x2d\xb8\x49\xc3\x6d\xec\xc5\x0b\x67\x37\xd5\xcc\x95\x5e\xbd\x7d\x02\x17\x4d\x7f\xfc\x3d\x1d\x02\x31\xb3\x73\xae\x07\x36\x46\xbd\xea\xda\x69\xb3\xba\x79\x5b\x8e\x57\x02\x5c\xaa\x13\xf0\xf9\xf2\xad\x8f\xaa\x09\x08\xb8\xd6\x45\x6c\x25\x1d\x04\xdd\xb8\xa7\xdc\x76\x86\x0d\x61\xe4\x33\xf8\x26\x8c\xbc\x57\xa7\xfb\x48\x1b\x6b\x15\x08\xa0\x36\x96\x2a\x94\x54\x36\x05\xab\xcb\x46\x81\xc9\x2e\xed\x42\x36\x69\x64\x38\xa5\x6e\xaa\xf1\x46\x29\xdd\xcb\xaa\xbf\xa2\xd4\x74\x2b\x89\x6d\x8a\xd0\x4a\xc8\xde\x7d\x83\xaa\x97\x69\xa5\xd1\x8d\xdd\x38\x1d\x32\x58\x37\x9d\xb6\xc0\x80\x5f\xd1\xfa\xf5\xd6\x34\x97\x16\x25\x56\x27\x6d\x0b\xa9\xd5\x42\xa9\x34\x1d\x34\x8f\x75\xd0\x3f\xf6\x25\x41\x0f\xd3\xd2\x0b\x00\x15\x72\x08\x6b\xa9\x86\xf1\xb9\xe8\x67\xff\x09\xa3\xda\x0e\x5b\x51\x6c\xc1\xb4\xf9\x44\x1c\xcf\x9e\x4a\xf6\xea\xa9\xcc\x52\x89\x32\x13\x33\xbd\x43\xf3\xd6\x7c\x8c\xf6\x53\x9f\x4f\xea\xf5\x56\xb7\x5a\x9e\xcd\x20\x78\xa4\x5d\x3e\x83\x8f\xe3\x32\x78\x64\x54\x8d\x4a\xf1\xf9\x0d\xaa\x81\x9c\x5e\xcb\x2a\x93\xac\x60\x9a\x96\xf0\x82\xdd\x98\x7d\x62\xe1\x24\x5a\x20\x30\xb0\xa5\x6a\x6d\x40\x17\x2f\xfe\x00\xbc\x0e\x8f\xc0\x0c\x98\x0b\xc6\xc1\x89\x8c\x9d\x57\xbc\x4c\x6d\x43\xf9\x3c\x08\xf0\x6d\x4e\xd5\x13\xc6\xa0\xe7\x0a\xc2\x01\x7d\x2f\xf9\x83\xb3\x99\xd4\x9b\xef\xdc\x98\xb6\x21\xfb\x89\xfb\xe5\x62\xe9\x46\x28\xf3\x12\x2c\xd9\x0c\x87\xeb\x57\xb3\x26\x5b\x94\x4b\x14\xc5\xd9\x53\x66\x70\x77\xc6\x38\xb8\x69\x60\xe0\x3d\xe6\x8c\x82\x39\xd1\x45\x9a\xaa\x2c\x37\xaa\x76\x96\x61\xac\x78\xa6\xa7\x50\x40\xda\x6c\x84\xff\xb8\xfa\xfc\x09\x6e\x60\xa3\x31\x5c\x30\xf6\x3b\xb6\x86\x50\xdf\x33\xa6\x63\xa8\xbc\x91\xcc\xdc\xca\x8c\x21\x1a\x16\x92\x0b\x4d\x55\x58\xc9\x0a\x0d\x07\x21\xe5\xc1\x03\x9f\x98\x63\x3f\x16\x99\xde\x59\x6a\xaa\xdf\xa1\x7a\xc3\xe3\xea\xf2\x03\xf0\xfb\x7c\x46\x7b\xbb\x97\xa0\x30\x2d\xe2\x63\x70\xc8\xac\x08\xe6\x16\xa8\xc2\xae\xf3\xb3\x4c\x55\x59\x91\xc0\xea\x7d\xe5\x4f\x1f\x5c\xa9\xda\x95\x96\xaa\x2f\xce\xe9\xd9\xa8\x44\xff\x6a\xe0\xb3\x4b\x58\x78\x15\x86\x18\xc1\xf7\xd9\x7a\x7c\x7e\x8f\xb1\x2a\xe2\x09\x63\xbc\xe6\xa3\xb7\x2f\xea\xaf\x63\xb9\x34\xfb\x52\xc3\x0b\x4c\xc6\xb1\x08\x8d\x04\x8f\x7c\xd4\xba\x8b\x10\x5f\x68\xec\x83\x11\x4b\xdf\xb3\x7f\x2d\x59\x9d\x4c\x98\x5b\x0c\xec\xd1\x3f\x58\xde\x06\x6e\x25\x90\x57\x10\x26\xa9\x45\xa2\x41\x5d\x9b\xa7\x2a\xcd\x95\x27\xbe\xe5\x4b\x8c\xc7\x79\x43\x5a\xc7\xe7\x32\x64\xf0\xfe\x68\x61\x9d\xd7\x91\x62\xbd\x1b\x5c\x2a\x9b\xbd\x95\xd1\x65\xb4\xe6\x2b\x3c\xb4\xee\x52\x2b\xcb\xe8\x0d\xf8\xab\x1b\x17\xd2\x77\x9f\xb6\xe9\x14\xd6\x17\xcb\xec\x6d\xf0\xdd\xf6\x60\xe3\x89\x48\x65\x59\x18\x7b\xb7\x13\xd0\xed\x97\xb7\x18\xf8\xfe\xd6\xbe\xeb\x6f\x6f\x3e\xf8\x74\x49\x15\xf4\xee\x87\xfa\xac\x2f\xed\x78\x60\xe6\x73\xdf\x6d\xf2\xb9\x22\x9f\x62\x2d\x86\xdd\xef\xa1\x8e\x3f\xbd\xf1\x4c\xb7\x2e\x33\xdc\xc7\xc8\x3b\xfc\xf2\x16\x03\x57\x3a\x00\x08\xbd\xb3\xf1\x3e\xff\x83\xdf\xed\x65\x98\xdf\x6d\x7a\xa0\xee\xc1\x9d\x73\x27\xd3\xfa\xdc\x4f\x6d\x3a\xa1\x81\x51\x1c\xc6\x58\x48\x67\xa7\xe7\xa5\xdb\x0f\x6f\x3c\x6c\xa5\xb2\xd0\xa6\x4b\xdb\xed\xb0\x3b\xfd\xf0\xa6\xc3\x0e\x5d\x6d\xd9\x9d\x8e\xb9\xc3\xaf\x6e\x3a\x60\x50\xa0\x77\xbb\xb1\xbb\xfa\xe4\xc6\x43\xf5\xb0\x75\x87\x1f\x1d\x47\xea\xc9\x06\x7f\x5c\xf8\x8c\xc1\xcf\x1f\xfb\xc6\xf5\xd6\x7b\xea\xc7\xa6\xd3\x21\x63\x3e\x11\xa9\x8a\x64\xd0\xc1\x5e\xdf\x78\x12\x9c\x3f\xe6\x5e\x57\xc2\xa6\x85\x94\xc9\x64\xa7\xa7\xae\xcb\xcf\x6e\xba\xea\x89\x0a\x57\x57\xfa\xef\x7c\xb0\x9d\x7c\x70\xf3\xa5\xed\xe4\xb3\x9b\xce\x2e\x1e\xa7\xdd\x4c\xec\xb3\xbf\xb5\xe9\xe0\xb2\x7b\x1e\x5c\xec\x4f\x69\xe9\xe3\xf3\x1b\x6f\xab\x3e\x3a\xb1\xe9\x3a\xe8\x60\x2a\xc2\x22\xda\xb5\xd4\xea\xf2\xb3\x1b\xcf\x7b\x97\x1f\xdf\x78\xbe\x73\x95\xf1\xc9\x6e\xa5\x66\x67\xdf\xdc\x7c\xa6\xbb\xfa\x72\x7d\x9a\xed\xbf\xda\xb9\x2d\x36\x52\x39\xcb\x59\xa9\xea\x63\xd5\x7a\x14\x53\x15\x85\xac\x04\x9b\x4c\x26\x65\x96\x56\xdb\x59\x4c\x31\x70\xab\x98\x2b\xf7\x38\x42\x06\xc5\x15\xd5\x42\x16\x70\xca\x35\x9b\xfb\x08\xd7\xe0\x27\x08\x3e\x39\x32\x61\x33\x55\x64\xbe\xe9\x51\x35\xb6\x05\x0a\x96\xa0\x93\x8e\xa3\x9b\xec\xe3\x3e\x24\x05\x9f\xb9\x60\xff\xa1\x0a\x4c\xc6\xe9\xf2\xae\xa1\x89\x53\x64\xf8\xbc\xab\x96\x9b\x46\xc5\x44\x62\x14\x00\x76\xfe\xf2\x92\x7d\x74\x6d\x59\xee\xf0\x7b\xec\xd9\xe7\xd9\xd5\xf5\x47\xfb\x59\xfc\x0a\xfb\xef\xbb\xe4\x2e\x77\xd3\x7b\x3b\x4b\x05\x94\x99\xf9\xe3\x3f\xb5\x4a\xbe\xbf\x3b\x1b\xc9\x24\x92\x89\xb8\x3b\xfb\xc3\x3c\xf6\x79\x76\x8d\xdf\x72\xcf\xdb\xa6\xdc\xd3\xb1\xfd\x1d\x1e\xff\x27\x7e\x12\xff\x72\x35\xf7\xb9\x2b\xf4\x43\x74\x01\x07\xee\x75\x8e\x7f\xc6\xb7\xed\x40\x3e\x7c\xdb\xc9\x40\xe6\xd6\xb2\xc7\xe1\x7c\x41\x37\xc8\x27\x99\x09\xf4\x74\x00\xc7\x52\xf0\x07\x8b\x94\x7a\x00\x47\x97\x7c\x8a\x55\x91\x1f\x70\xff\x7d\x8f\x1f\xb9\x83\xd3\x76\x77\xf6\xfd\xdd\x59\x65\xf0\x77\x67\x23\xfc\xb1\x8c\xbe\x82\x47\x1e\xdf\xfa\x5f\xca\x51\xb8\x96\xaa\x6d\xd9\xf1\xb8\xa7\xf3\x4a\xb7\xbf\xbf\x3b\x1b\x2b\x65\x7f\xf9\xe7\xc8\x0e\xe2\x46\xa1\x3b\x9b\xad\xf9\xf1\xbf\xd8\x7b\x81\x41\x44\xe0\xd9\x09\x1e\x5e\x66\xfc\x4c\x65\x6c\xc6\x63\xc8\x16\x5f\x24\x96\x23\x77\x3e\x77\xe0\x45\xeb\xa2\x70\x20\x69\xfe\xdc\x79\xa9\xae\xee\x05\xbb\xc5\x9c\x42\xd0\x32\x78\x31\xf0\x27\x9c\x35\x9b\x44\x0c\x0a\xfd\x60\x82\xb2\x44\xe5\xac\x48\xcc\x4e\x71\x35\xbc\xb0\x84\x71\x2e\x20\xa3\x3f\x84\xd8\xa4\x33\xf6\x0a\x0b\x02\xa7\x0f\x93\x4b\x8c\x17\x33\xd3\xf6\xba\xcc\xde\xbf\x70\x10\xa1\x2e\x02\xee\x14\xb7\x0f\x5f\x6a\x97\x50\xe1\x26\x98\x8a\x18\x73\xdf\x96\xad\xb1\x71\x91\x04\xb9\x95\x31\x3a\xe7\x10\x4e\x8c\xa2\x03\x16\x1b\x7b\x59\xee\x00\x5b\xae\x48\x26\x73\x52\x65\xc4\xf2\x22\xb3\xd5\x63\xcb\xee\x39\xc7\x03\x97\x73\x69\x96\x3a\xa7\xbf\x5c\x65\xfe\x61\x78\xd4\xcd\xe1\xab\xdb\x2f\xef\xbf\x7c\xef\x32\xe1\x07\x5c\x43\x06\xa6\x85\xd4\xe8\x18\x5a\xe7\x8a\xee\xda\x86\xfd\x19\xf9\xcd\xfe\xbd\x96\x44\x2c\x70\xb9\x86\x6c\x0f\x44\x78\xf1\x7a\xd1\x0b\x61\x13\xbf\x8d\x22\x97\xd1\x85\x4c\x72\x9d\x67\x17\x1f\x93\xfc\x4b\x86\x35\x5a\x57\xc8\xfb\xca\x53\xb6\xf0\x0d\x84\x9d\xbb\x6c\x54\x20\xf6\x79\xc2\xc0\xcb\x86\x61\xc6\x6e\x78\xf8\x82\xb1\xdf\xb1\x42\x34\x4e\x3e\xac\x85\xca\xd0\x8b\xc3\x6e\x5a\xf0\xec\x80\xbc\x98\x49\xe5\x2f\x90\xf0\x37\x75\x49\xd1\x15\x94\xb3\xd6\x45\x2c\x5c\x9e\xac\xc4\x72\xf0\xce\x89\x18\x72\xdb\x60\xcd\x68\x73\x0f\x41\x5d\xae\xf1\x7c\x35\x07\xf8\x38\x5e\x32\xbe\xe7\x3c\x80\xe0\x2f\x6e\xb3\x62\x66\x36\x15\x6d\xa3\x0f\x88\x4c\xf2\x73\x95\x9d\x5b\x66\x7e\x61\x05\x36\xf1\x03\x71\x95\x16\x3f\x26\x63\xb5\x72\xda\xc7\xaa\x4c\x3c\x63\x5f\xc2\x74\xe4\xde\x75\xf6\x02\xfc\xa4\x9e\xc4\xcb\x28\x62\x4f\xdc\x46\x58\x4b\xed\x5c\xd9\xb0\xee\x6e\xe5\xf1\xf5\xae\x21\xf7\x85\x8c\xc2\xf7\x3c\x6f\xef\x9b\x50\x82\x92\xb3\x40\xc5\xa9\x6c\xc8\x21\xd2\x2a\x75\xb0\xcc\xdf\xa9\x38\x96\x0b\x6e\x29\x2d\x5f\xbe\xcd\x84\xb8\xc9\xb7\xec\xf8\x44\xe6\x4b\xc2\x6b\x5b\xbd\xad\x9e\xf1\x72\xcc\xff\x53\x6d\x35\x61\xb1\x4c\xb6\x7b\x31\x8d\x78\x6e\xb6\x44\xd7\xde\x27\x38\x92\x85\x1e\x36\x4f\x73\xe3\xca\x2f\x5b\xd1\x51\xd3\xfe\x6c\x5c\x80\xa6\xcd\xd8\x34\x74\x87\x8f\x37\x11\xa5\x0f\xc5\xbd\x38\xe7\x93\x49\x26\x26\x3c\x57\x59\xe9\xd3\x55\xe7\xc7\x1f\xdf\x5e\x5c\x5d\x7f\xbc\xc1\xc4\xc8\x2b\x4e\x78\xf9\x50\xcd\xc7\x0b\x1d\xe7\x17\x72\xd9\xfd\xd5\xa8\x0d\x7f\x73\x75\x5a\xe7\xd2\xcd\xde\x39\x75\xe0\x02\x74\x8b\xbb\x33\x8a\x29\x1f\x74\x4c\x39\x85\x0e\xef\x29\x74\xb8\xf3\x28\xdd\x4a\x8d\xd1\xc6\x4f\xea\x54\x04\x1b\x7d\x6e\x3b\x31\x73\x63\x3e\x33\x5a\xb1\x9d\xcc\x03\x95\xca\x5d\x95\xf0\x1b\x28\xd9\xa7\x5c\x6d\x04\x48\xec\x0c\x6b\x64\xff\x62\x0b\x54\xa0\x50\xda\x24\x90\xb5\x8f\x51\x36\x44\x6e\x36\xc7\xcb\xfa\x91\x86\x22\x93\x98\xf6\xb1\x21\x9c\xf2\xea\xfa\xe3\xe2\xc0\x16\xae\xbb\xfe\xdc\x25\x37\xf1\xac\xaa\x5c\x29\xad\xac\x5e\xab\x4c\x40\xdb\xcd\xfe\x3b\x97\xce\xa9\xd5\x9d\xe6\x9f\xf6\x2e\xee\x7a\xde\x43\x17\xe7\xdf\xdd\x80\x58\x5b\xad\xbc\xec\x40\x1a\xad\xbf\xc4\x22\xae\xf3\xdb\x8c\x27\x1a\x3e\x75\xbb\xe3\x4a\xcf\x9f\xb8\xce\xd1\x8d\xdc\x26\x5c\xb6\x23\xce\x7d\x8f\x5c\x56\x41\x95\xf8\xa8\x11\xc8\x40\x01\x8e\xc4\xcb\xca\x86\xb7\x8a\xbb\xfc\x79\x3e\xea\xd2\xbe\x54\xad\x73\xe2\x03\xbf\x60\xbb\x47\xd0\x57\xdf\xb1\xbe\x02\x2a\x7f\x83\x7c\xa7\x23\x33\xe0\xf3\x27\x95\x85\xa3\xf2\x6e\x70\x29\x35\x5c\x15\x28\x3f\x5f\x2f\x75\x07\xbd\xdb\x24\x9a\x5e\xea\x85\xfc\x0f\x95\xee\xc0\x25\x67\x6e\xb8\x5b\xc8\x74\xf8\x13\x8f\xb4\x18\x31\xab\xa1\x6f\x53\x7f\x7c\x7d\x05\xff\x6a\xed\x7e\x17\x7a\x38\xdf\xa7\x96\x9f\x6d\x89\xd5\xeb\x9e\xe2\x76\xf2\x76\x07\x8b\x3f\x49\xbd\x2a\xf2\x61\xfe\x41\x84\x41\x91\xcd\xdd\x5e\x11\x1a\x94\x40\xe9\x10\xc0\x6e\x53\x38\xe8\x56\x31\xa2\x5b\x6a\x60\x95\x2f\x6c\x1c\x30\x4a\x40\xfd\x58\x80\xba\x4f\xa7\xb3\xb1\xb0\xc4\xad\xba\x4e\x36\xee\x1d\x16\x82\x48\xdd\x13\x34\xbc\x99\xd7\x72\x96\x8b\xf3\x6e\xd4\x10\x5b\x39\x1b\xb6\x2d\x14\x9d\xc3\xb8\x41\x8c\x70\x85\x0c\xdd\x33\x55\x40\x54\xa0\x2b\xa8\x18\x4a\x4c\x9a\x5c\xf1\x2e\x35\x32\x1d\xff\xd9\xce\x34\x1a\xf0\x1f\x8b\x24\x8c\xd6\x5d\xe5\xef\xae\xf0\x31\x14\x09\xd7\x1f\x3e\x43\xde\x95\x50\x84\xec\xdd\x15\xbb\xc7\x9f\x2a\x64\x45\xa5\x62\x97\x2d\xea\x27\xe6\x35\x93\x97\x98\xb7\x11\xf2\xbb\x94\x9d\x87\xfc\x13\x45\x52\x09\xed\xb5\xc5\x67\xf3\xac\xd0\x39\xcb\x94\xca\xb5\xcb\x0b\x52\x56\xec\x37\x33\x62\xbe\xb6\x34\x54\xf6\x7e\x96\x8b\x95\xa7\x75\xee\xb7\xb9\x9d\x6e\xae\xe7\x73\x2f\x51\x73\x15\xcb\x60\xfb\x18\x7c\x30\x75\x39\x40\x64\xe6\x02\x03\xf2\xc1\x50\x5f\x49\x65\x09\xe9\x27\xb7\x10\x2f\xd0\xda\x75\x26\x55\x26\xf3\xd9\x67\x99\xc8\xb8\x58\x30\x87\x36\xf5\xa8\xfa\x4a\x52\xc4\xae\x83\xa9\xfd\x33\x76\x0d\xbb\x6a\xaf\x7c\x28\xbf\xc1\x73\x16\x09\xae\xf3\x0b\xf6\xb3\x9c\x4c\x45\x56\xbe\x10\x0b\x9e\x54\x22\x52\x27\x6e\xd8\x29\x24\x53\xce\xe6\x8b\x7c\x28\x33\xe2\x48\x3d\x55\x1b\x50\x89\xb9\xfb\x7f\x55\xce\xda\x8f\x01\x8a\x8e\x6e\xf7\x28\x05\x1b\x8e\xe5\x64\xea\x6a\x09\xce\x20\x86\x94\x4d\xb1\x43\x8d\xa3\xb3\xe5\x39\x74\x01\xb9\x31\x5c\x7d\xaf\xa9\x8a\x5c\x47\x27\x02\xec\x95\xd3\xf9\x41\xb9\xea\x95\x32\xe6\xd9\x8c\x69\x95\x01\x7e\xbb\xe7\x1a\x6a\x1b\x2e\x7e\x2a\x2e\xa0\x7c\x6b\x28\xcc\x70\xa1\x2d\x9d\xbb\xaa\x80\xb9\x82\x01\xeb\x9c\xbd\xfa\xee\x8d\x0b\xde\x7c\xfb\xe6\xb5\xab\x4d\x66\xf0\x71\xe3\x57\x30\x40\x3c\x9d\xf2\x7b\x01\x85\xae\xa0\x0e\x2c\xcf\xa4\x2e\x93\xba\x24\x95\x2c\xdb\x0e\xb0\xb1\x57\x8f\x6f\x2f\xee\x79\xe6\x3e\xf5\xf8\xf6\x62\xac\xd4\x6b\xf6\xbb\x78\x19\x96\x91\xa0\x35\x26\xf9\x7b\xf6\xaf\x56\x44\xb3\x57\x36\xa1\x60\xe9\x06\xf1\xda\xac\xfe\xdb\xff\xf9\xe6\xcd\x1b\x10\x6a\xd7\x9c\xdf\x08\xcd\x5e\x7d\x49\x45\x72\x33\x95\xe3\x7c\xc4\xde\x0b\x69\x9e\x82\x12\x4e\x3e\xd4\xd4\x12\xb0\x96\x6a\xfc\xee\xcd\x9b\x37\x7a\xd9\x99\xdd\x36\xbc\x5d\x26\x5a\x04\x45\x26\x6e\x1e\x64\x7a\xfb\xe9\xe6\x6f\x46\x1a\xce\xd6\x65\x13\x68\x7a\xc7\x09\x57\xcd\x6e\x3f\xdd\x2c\x95\xb0\xb6\xd6\xd9\xa2\x50\xaf\x9c\xe7\xb2\x9a\x9e\xce\x33\x95\x4c\x22\x68\x3b\x50\x45\xc6\xa1\x7c\x0d\x78\x6d\x94\xe9\x73\x61\x6e\x4a\x79\x8b\xd5\x42\xb7\x49\x34\xaf\x17\x6c\xf5\xac\x53\x30\x6a\x2f\xbf\xb2\xf2\xc4\x4a\x0b\x96\x55\x6e\x6c\x46\x59\x97\x61\xbf\x52\x00\xc7\xfc\xea\xf3\x8a\x96\x37\xc5\x05\x63\x1f\x6d\x0a\x86\x72\x9a\xa1\xce\x87\xb9\x1c\xd9\x9f\xff\xfc\x27\x5f\xf3\xb9\xf2\x0d\xa8\x82\x8d\xb9\x7f\xad\x30\x12\x6c\xca\x93\x30\x72\x15\x98\xe7\x44\xb0\xa3\xe0\xa5\xc6\x87\x44\x08\x97\x76\x14\xcd\xf0\xd4\xcd\x2d\xa5\x80\xfc\xb7\xb6\x92\x8b\x8c\x53\xb3\x9c\x22\x32\xf3\xe5\x87\x93\x98\x6d\x1c\xd9\xb6\x32\x16\x4c\xb9\x4c\xec\xde\xf7\xa9\xc2\x97\x98\x49\x1e\x5b\xe9\x73\x7f\x2b\x3b\xec\x06\x52\xd6\x2c\xac\x5d\x24\x17\x8c\xfd\x54\xa5\x8d\xd1\xd5\x63\xf3\xeb\xc5\x7e\xc0\x09\xb9\x76\x3d\x74\x4f\xbb\x9a\x09\xd8\x5f\x5f\x08\xda\x49\xf2\xea\x00\x64\xa2\x65\x08\x32\xcc\xa0\x7f\x58\x9f\x0b\xc6\x5c\x95\xb6\x09\xf8\x0e\x64\x98\xdd\xec\x1f\x22\x53\x6b\x04\x73\xad\x1f\x8b\x32\x79\xb9\x30\xbe\x91\x90\x3c\x2d\x7f\xa9\x2b\x7d\xe2\xd8\x23\x5b\x4b\x19\xe5\xb9\x4d\x7a\xa1\x63\x1e\x45\x23\x96\x66\xea\x9e\xdf\x47\x33\x27\xe6\xde\xbe\xd1\xa0\xa4\x80\x0f\x85\x1a\x33\xf1\x5f\x45\xa5\x1c\x96\xbd\x5f\xa4\xb0\xc5\x83\xdd\xdf\xad\xd6\x55\x47\x53\x46\xe0\x17\x36\x3b\x89\xad\x79\x8e\x5d\xe3\x6e\xa6\xec\x59\xa8\xb5\x23\x35\xbb\x3b\x83\xc3\x6d\x64\xfb\xdd\x59\x59\x7d\x18\x66\x0c\x93\x62\x27\x2a\x99\x7f\xaa\xd6\x8a\x1e\x59\x8c\x67\xc4\xba\x9b\xc7\x48\x7c\x93\x81\x9a\x64\x3c\x9d\xba\xda\x8b\x77\x67\xbf\x2c\xb6\x01\xb9\x82\xb3\xdc\x41\xde\xbb\xb3\x47\xd3\x0b\xac\x08\x97\x99\x93\x6f\x4b\xf9\x40\xd1\x38\x3b\xb1\xaf\xb0\xec\xc6\x7f\x2a\x7f\xf9\xbf\xb6\xaf\x54\x2a\x13\xa3\xcd\x0b\x46\x79\x77\x06\xb7\xa3\xcb\x19\x79\x2f\x72\xf3\x6f\x28\x48\x8e\xb6\xc9\xf9\x86\x65\x52\x69\x18\xf6\x91\x16\xd0\x19\x0d\xb0\xdb\x3a\x28\xdd\xcf\xd8\x5f\xaf\xd8\x5d\xf1\xe6\xcd\x9f\x04\x33\x4d\xba\x7f\xc3\xb7\x20\x31\x4a\x26\xcc\x23\x20\xda\xdc\x8c\xc1\x30\x13\xe5\xaa\x50\x03\xdc\xe0\x1a\xdf\x57\x19\xbe\xfb\xda\x17\x20\x4b\x00\x11\xe1\x65\x9e\x4c\xe6\x87\x6c\x47\x3c\xd7\x5b\x2c\xce\x88\x27\xda\xf5\xd6\x59\x92\xdc\x7c\x7f\xcf\x1e\xdf\xbe\x19\xb1\xc7\xef\x46\xec\xf1\xad\xf9\x3f\x8c\xac\x35\xff\x7a\x63\xfe\xf5\xa7\x11\x7b\xfc\x13\xb8\x58\x9a\x3f\x7d\x87\x6e\x9e\xf0\x1c\xfc\xf3\xbb\x11\x1b\x2b\xf5\x16\xff\xff\x9b\x6e\xd2\xd0\xb4\x54\x4d\x1b\x81\xec\x0a\x49\xb4\x3b\x03\xdf\xda\xbc\xe9\xf5\x47\x37\xa7\x6c\xd6\x6b\x6c\x4d\x75\x2a\x9a\xfa\xf2\xce\xe6\x5e\x74\x97\x6b\xc9\x51\xa4\xd2\x76\xb2\x83\x14\x67\xcf\x65\x5d\x5a\xda\xb1\xd6\xa8\x68\x31\x4f\xcf\x1f\xc4\x4c\xcf\x6d\xa4\xb2\x99\xca\x9f\xfe\xde\x52\xd9\x8b\x79\xba\xe2\xa3\x0d\x65\x18\x6b\xd6\xe7\xcd\xeb\x30\x2e\x9c\x8e\x8e\xb7\xf1\x02\x5e\x5b\x5d\xfe\xa2\xfa\x28\xf8\xc3\x2d\x20\x37\xb7\x89\x0c\xf8\x59\x0c\x01\x5b\xba\x81\xdb\xd6\x0a\xb2\xe0\xa6\xaa\xd1\xe8\x26\xae\xb0\x9f\xb2\xb9\x95\xaf\xe3\x1f\x9e\xdb\x05\x03\x57\x37\x4e\x6b\x06\x18\xd7\x6a\x7e\xee\x1c\x63\x16\x5a\xa5\x51\xd9\x10\xf7\x53\xa5\x1e\x7c\xb1\x2e\xb3\x2e\x7f\xfe\xf3\x9f\x00\xe3\xde\xf3\xe0\xe1\x89\x67\x21\xde\x2c\xb9\xbc\x97\x11\x68\xb2\x7f\x98\x56\xff\xa8\x64\x43\xe3\xb6\xd0\x24\x7c\xcd\x5d\x91\x6f\xcf\xff\x9f\x7f\xff\xf7\x3f\xfd\xbb\x4d\xc5\xab\xe5\xa3\xa8\x67\x76\xeb\xea\x16\xe8\x76\x9f\xc3\x95\x46\xbe\x4a\x44\xdf\x90\xaf\xd2\x49\x50\x20\xfb\xf4\x55\xaa\xcb\x9a\x23\x76\x58\x5a\x18\x2a\x79\x2d\xad\xf6\x5a\xda\x24\x7a\xed\x19\xeb\x40\xfe\x4b\xe4\xbf\x44\xfe\x4b\xe4\xbf\xd4\x99\x40\x21\x27\xa6\xd3\x41\xc1\xfb\x70\x62\x5a\xd0\xcf\x5a\x5a\x80\x08\xc6\x1f\x35\x8c\x3f\x75\x4f\xa6\x1d\xc1\x45\xf2\x69\x22\x9f\x26\xf2\x69\x22\x9f\x26\xf2\x69\x22\x9f\x26\xf2\x69\x6a\xbe\x2d\xc9\xb1\x89\x1c\x9b\xd6\xf5\x90\x1c\x9b\xc8\xb1\x89\x1c\x9b\xc8\xb1\x09\xa5\x49\x4b\x4d\x75\x60\x8e\x4d\x4b\x28\x1d\xf2\x6e\xea\xc4\xae\x45\x2e\x4e\x3b\x77\x71\x5a\x02\xdf\xc8\xcf\x89\xfc\x9c\x06\xeb\xe7\xf4\xc2\x3e\x71\x26\xab\x99\xd3\xce\x72\x99\x83\x01\x0b\x10\x07\x9e\x2f\xfb\xdd\x79\xb3\xe1\xc5\x77\x6f\x2f\xa0\xb8\x07\x36\x92\xf2\x7c\x5a\x6e\xc3\xb3\xcb\x8b\x27\x11\x45\xe7\xc0\x91\x5d\xaa\x54\x24\x32\x3c\x0f\x54\x32\x96\x93\x02\x0f\xcd\x65\xf5\x70\x4c\xc4\xfc\xc2\xd5\x97\x6d\x22\x4a\x71\xcb\x03\x28\xbb\xce\xa4\xd6\x85\xc8\x98\xd1\x92\x3f\xbe\x67\x73\x6d\x8f\x30\x15\x29\xa6\x00\xe4\xb8\xcd\x5e\x7e\xf9\xf8\xfe\x1d\xf3\x25\x12\x58\xa8\x82\x97\xd5\x1b\xd0\xd7\xea\xfc\x18\xda\x2f\xda\xc3\x77\x85\xdf\xfb\x08\x9f\xc3\xaf\xbd\xab\x7e\x6c\x2e\x21\x96\x4d\xb2\x57\x93\x94\x67\x3c\x4d\x23\xab\xe3\x5e\xfe\xa7\xae\x0a\xe6\xbf\xcf\x11\xaa\x58\xb0\x79\xe1\x02\xfa\xee\xcd\x9b\xc5\xdb\xa3\x5e\x0f\xf0\x97\xb9\xdd\xc1\x30\xef\x70\x5c\x37\x94\xaf\x3c\x4c\xd5\xcd\xc3\x16\xee\x8c\x3f\xbf\x79\xbb\xb6\x17\xbf\x25\x2e\xc1\xb4\x08\xe7\x6e\x9f\x66\x9d\x1a\xd2\x51\x2e\xcc\x16\xd8\x6c\x9b\xa7\x28\xe7\x93\x85\xc7\x7f\x17\x51\xf4\x8b\x59\xea\xca\x2b\x2f\xaa\x9f\x75\x62\xfd\x92\xa7\x72\xf5\xb6\x73\x89\x11\xd7\xae\xdf\x68\xd9\xaf\x33\x1e\x47\xcb\x7f\x7d\x4c\xc2\x8b\x4a\x0d\xd2\x34\x53\xb9\xba\x2f\xc6\xcd\x63\x6d\x38\x03\xbe\xea\x79\x55\xbd\xd3\xab\xb7\xf1\x3b\x95\x89\x92\xc0\xd4\x5b\x6d\xd7\x5d\x0c\x77\x67\xbb\xff\x19\x54\x51\x75\x1e\x0f\xfc\xd4\x04\x2a\x13\xad\x0e\xcc\xe3\xdb\x63\x39\x33\x4d\x74\xf5\x92\x03\xf3\xb7\xb7\x57\xd7\x1f\xbf\x36\x3d\x4f\x67\x66\xf3\x33\xe3\x26\x12\x88\xc8\x23\x38\x37\xff\xb7\x9a\xfe\x61\xf5\xd1\x31\xc0\x50\x25\x22\xc9\xd1\xa5\x66\x6e\xa5\xda\x9f\xa5\x7f\xbd\xfc\xd7\x56\xfb\x1d\x0d\x16\xe8\x00\x63\xe0\x34\x94\xb5\x7f\xe7\xba\xb0\xe0\x38\x59\xdf\xfc\xe6\x75\xdc\xfd\x2b\xde\xd9\xd7\x01\x58\xfa\x82\xf9\xd8\x0f\x3a\xcf\x04\x8f\xff\xf2\xb4\x58\xd6\xad\x45\xdb\xf3\x6f\x0f\xfb\xa4\x5d\x98\x0d\x68\xce\x55\x6d\x89\x8e\xf3\x6c\x55\x5e\x98\x53\xf8\xb1\x44\xbd\xdb\xb3\x67\xcb\x1e\x6b\x74\xb2\x68\x76\xad\x68\x76\xa2\x58\x7e\x0e\xd6\xe7\x83\x29\xd5\xaf\x94\x67\x3c\x16\xb9\xc8\xf4\x72\x1f\x8f\xda\xf4\x43\x0e\x6e\xa8\x55\xf1\xa3\x52\x0f\x31\xcf\x1e\x2a\x5e\x3c\xb0\x4f\xb1\x68\xb9\xb6\x04\xd9\x2c\x15\xec\xee\xec\xc7\x2f\x5f\x7e\xf9\x7c\xf5\xf5\x97\xbb\xb3\xd2\x5f\x08\x94\xd9\x50\x41\xc2\x79\x19\xa7\x91\x88\x45\x92\xb3\x7b\xdf\x2a\xf8\x13\x4d\x12\x95\x59\xda\x7c\x1c\x71\x74\xae\x28\x1f\x01\x03\xae\x79\xcb\x12\xbc\xde\xeb\xc0\xa8\x53\x99\xb0\x4e\x92\x96\x82\xb6\x4a\xaf\xf9\x1c\xd7\x46\x9a\xd5\x1a\xca\x44\x5e\x64\x89\x08\xc1\xc5\x37\x99\x39\x7d\x3c\x40\x07\xb7\x47\x1e\x8d\x58\x02\x25\xe7\xc1\x0e\x3d\x73\x8d\x94\xdf\xb5\x46\x76\x01\x36\xe8\x19\x73\x63\xb6\x45\xdc\xc3\x02\xec\xbd\x9c\x69\x81\xd5\xa5\xd1\x7c\x8f\x94\x21\x74\x0a\xa7\x6f\x64\x47\x0b\x39\xcc\xcd\xaf\x30\x05\xa1\xb7\xf6\x8f\x05\xcf\x8b\x4c\x30\x20\xa1\x6a\x0b\x61\x5b\x12\x89\x81\x15\x90\x8c\xdd\xfb\x4f\x2c\x6b\xb6\x66\x10\x84\x35\xfe\xaf\x42\x64\x35\xe3\x9b\xb5\xdc\x34\x2d\xff\x6a\xce\x72\xee\xc7\x02\x9c\x6e\x3f\x5a\xab\x63\x9e\x15\xa2\xe9\xd0\xae\x74\x40\x45\x67\xd3\x5c\x26\x85\xb0\xcc\x40\xc5\x9a\xa1\x45\x8e\x54\x6d\x26\xf2\x4c\x0a\x70\x3c\x89\x15\xac\xad\x2e\xa2\xbc\xe2\x94\xe6\x38\x3e\x24\x7e\x60\x6a\xd0\x09\xae\x64\xd4\xd0\xa3\x32\x1c\x79\x1f\x06\xb3\xf2\x2a\x89\x66\x9e\xbe\xf5\x1d\xc1\x57\xa1\x71\xce\xd2\x4c\x3c\x42\x4d\x11\x98\x46\xfb\x69\x3c\x0d\x32\xc4\xda\xb8\x91\xfd\xad\x3c\x7f\x9e\x7d\x77\x84\x25\x36\xa9\xc6\xfe\x23\xaf\x1d\x81\xe0\xfa\x57\xf1\xb1\xe4\xf5\xae\x48\x73\xb2\x04\xee\x06\xef\x7e\xe9\xb7\x90\xb7\x34\x2d\xbc\x66\xde\x60\x91\x4a\x26\x22\xb3\x86\xa1\xa7\xa9\x00\x36\x25\x2c\xc0\xf0\x27\xbe\xa5\x12\x6f\x66\xf6\x6a\x22\x12\x91\x01\x2f\x33\x96\x8f\xf0\xeb\x58\x8e\x73\x81\x04\x46\x91\x0b\xfd\x1a\xcb\x04\xcc\x99\x40\x58\x30\xe5\xc9\x44\x54\x2d\x5b\xb8\x39\xe7\x4f\x11\x5e\x6b\xa1\xa3\x90\xfe\xfc\xf6\x0d\x73\x60\xed\x83\xe9\x82\x08\x99\xc8\x32\x33\x57\x6a\x82\x1d\xb4\x4f\xfa\x11\xe5\xea\x41\x24\x7e\xc8\xd6\xef\x30\x11\x02\x8c\x99\x06\xcf\x48\x9d\x9b\x3f\x19\x39\x0d\x14\x19\xf0\xce\x99\x40\xea\x2a\x9f\x0a\x99\x21\xcf\x62\x1a\x56\x45\x3e\xbf\xe2\x70\x8e\x2e\xd8\x17\xf3\xe9\x27\xa9\x6d\x21\x12\xfb\x15\xb3\x32\x56\x0c\x20\x15\x05\xed\x58\x29\xe9\x1c\x07\x6c\x0f\xcd\xf2\x08\x20\x0a\xfc\xdf\xcd\x60\x61\x70\x6b\xa7\x05\xda\x85\x0e\x03\xd7\xed\x36\x37\x14\xec\x78\x10\x33\x2c\xe8\xe1\xff\x6c\xfd\x75\x75\xc2\x53\x3d\x55\xb9\x63\xf8\x8c\x30\x48\x2a\x13\xe2\x9f\xf7\x1b\xd9\x76\x1f\x8f\xd0\xb9\xc7\x71\x20\xc0\x8d\xe4\xb4\xd5\x2b\x46\x2c\x56\xa1\xb5\x60\xaa\x0c\x98\x72\xa8\x69\x31\x46\x12\xd7\x95\x37\xa9\x4d\x06\x92\x9e\x60\x69\x0c\x51\x66\x41\x81\x12\x0b\x6b\x46\x8c\x6b\xd8\x90\xd6\x5c\x26\x33\x33\x30\x14\xd8\x65\xc3\x77\x67\x6e\xc8\x77\x67\x58\x7a\x68\x4e\xd6\x99\x53\xe0\xdd\xec\x50\x40\xe0\x4d\x25\x35\x08\xa1\xf2\x8e\x80\x95\x83\x0d\x60\xa5\x71\x75\xf6\x70\x12\x60\x0f\x3a\x52\xde\x39\xce\xda\x9b\xe3\x7e\x56\x5d\x31\x73\x5e\xcd\xa7\x63\xa9\x35\xdc\x08\x38\x3d\x08\xf9\xf4\xa6\x92\xd7\x6d\xbd\xf6\x2e\x6e\xcf\x97\xb6\x57\x4c\x8b\x48\x04\x39\x9c\x33\x38\x1b\x99\x0c\xf0\x24\x38\x0a\xd2\x8f\xdd\xed\x0a\x9c\x03\x99\xe1\xf4\x6b\x6f\x9e\x06\xb7\x71\xf1\x28\xb2\x19\x78\x1f\x6d\x3a\x7c\x68\xed\xc6\xf6\xe6\x60\xe6\x20\xe2\xf7\x22\xea\x6c\x0e\xa0\xb5\x7d\xcc\x41\x24\x63\x69\x03\x1b\x62\xfe\x4d\xc6\x45\xec\xb8\x02\x18\xbd\xd5\x40\x70\x7e\xcc\x54\xd8\x38\x61\x98\x9f\x80\x47\x11\x88\x61\xb8\x88\x81\x71\x64\xe2\x1b\x08\xdd\x45\xe8\x84\xf3\xfa\x87\xdb\xeb\x7f\xd8\x33\x6c\x2f\x0b\x68\xcf\x39\x5a\x43\x7c\x92\x3d\x80\xbe\xd4\x8b\x73\x9f\xf0\xb2\x54\x03\x9d\x64\xb4\x15\x7f\xe9\x62\x2f\x0d\x3c\x10\xa5\xb4\x34\x9f\xc6\xb1\x98\x65\x32\x20\x35\x47\x67\x5e\x86\x63\xc7\xcb\x16\xc7\x26\x9e\x9c\x53\x0a\x4a\x2a\x90\x64\x46\xd0\xc5\x60\xff\x07\x6f\x16\x33\xca\x57\x45\x6a\x3e\xf6\x0f\x91\x29\xfc\xcb\x6b\x27\xdd\x10\x11\x72\x10\xe8\xee\x6d\xb7\x77\xc0\x43\x42\x46\x39\x78\x5c\x20\x5d\x1c\x7a\x08\x62\xa1\xce\x1c\x0a\x41\x4f\xfc\xa0\x1a\x8b\x53\xb9\xa3\xc0\x81\xd8\x40\x8c\x58\x26\xc2\xdf\xe6\x73\xa0\x08\x64\xa9\x33\x46\xcd\xfb\xf3\x07\x53\xa5\xb4\x00\x29\x96\x2b\x27\x43\xed\x5a\x98\x69\xe1\xd9\xa4\x00\xd8\xce\xe1\x52\x82\x01\xc1\x24\x99\xb1\xd9\xfe\xcc\xd9\xb9\x70\x76\x3f\x8e\x99\xdf\x52\x25\x18\x71\xf8\xa6\x36\x00\xa9\x99\x88\xd3\x7c\x36\x0f\xc4\x3c\xfa\xe6\xb9\xc1\x2c\xab\x06\xb4\xea\x32\x90\xe3\xda\x55\x80\xb7\x87\xdf\x97\x93\x82\x67\x3c\xc9\x85\xa8\x78\xba\xba\x95\xf2\xc7\xfe\x09\xcb\x1f\x81\x9b\xb3\xeb\xbb\xbf\xd8\x3c\xe4\xcb\x15\x50\x43\x56\x09\x90\xc9\x24\x12\xe5\x09\xf1\x28\xc3\x6d\xb8\x73\x5b\xd5\x47\x1b\xad\xc3\x7f\x72\xb3\x9b\xd6\x5d\xb2\xa0\x63\xe8\x42\x84\x8d\xd7\x2d\xe8\x3a\xc5\xbd\x36\x0f\x27\xb9\x1f\x41\xe8\xd5\xba\x8a\x67\xa3\x8a\x45\x2e\x63\xa1\x99\xf7\xf1\x35\xa7\xb0\x86\xa8\x4a\x80\x61\x56\x54\x24\xba\xc8\xdc\xf4\x71\x07\x91\xec\xe0\xec\xac\xe1\x90\xe1\x60\x02\x18\x42\xff\x2a\x70\xa7\x2b\x92\x07\xac\xa9\xc5\x80\x1d\x8b\x78\x36\x71\x0b\x0d\x27\x1e\x9b\x47\x8d\x4c\x0b\x01\x1b\x2f\x55\x5a\x4b\xb3\xe1\x5c\xc8\x95\xd9\x70\xd5\xf3\x65\xe3\x4b\x4a\x9d\x0c\xbe\xe3\x1c\x6b\xaa\x3e\x55\x73\x3e\xb6\xd8\xeb\x27\xae\xed\x99\xf3\x7a\xa7\x0f\xad\x9c\x43\x38\x88\xfb\xb9\x36\x0b\x1c\x14\x11\x7c\x51\x96\xdb\x66\x63\xe9\x2f\xe7\x6b\xe7\x34\x30\xad\x1d\x8b\xfd\x8f\x63\xf6\xd2\xbc\xf7\xd2\xfa\x25\xc1\x4c\x14\x79\x5a\xe4\xd6\xcf\x3b\xcf\x67\x2c\xcd\xcc\xd7\x37\x1e\x0d\xbe\xbd\xcb\x4b\xac\x8e\xdd\x34\x7a\x80\x9b\x8d\x9b\x67\x5c\x26\xc0\xb6\x43\x59\x3e\x1f\xf2\xe4\xfd\xd9\xb8\x3f\x4b\x46\xf6\xdc\x5b\xf1\x80\x31\xb3\x46\x62\x0a\x1f\x90\x54\xb1\xe2\x49\x75\x19\xaa\x40\x5f\x7a\xcf\x89\x4b\xd8\xed\xe7\x3c\x95\x2e\xfc\xc8\xa8\x7c\xfa\xd2\xc7\xab\x9d\xfb\x0f\x8e\xe1\x58\x43\x5c\x2c\x88\xa4\x2a\x80\x28\x12\x2d\xf2\x0d\xa7\xbb\x36\xf8\x3d\xce\xfb\x67\x10\xb7\xfe\x4a\xd2\x50\xda\xac\xbe\x36\x06\x6a\xa4\x69\x24\x51\xc0\x78\x29\x69\x4e\x32\xec\xbd\xa9\x9c\x4c\xa3\xd9\xbc\xd3\x79\x75\xe5\xe6\xbe\x65\x0d\x03\x10\xa4\xe3\x5b\xb2\xb5\xfb\x1a\x3e\x6c\x9e\x3d\xbc\x15\xfd\xbc\x68\x60\xee\x77\x59\x6f\x65\x2c\xcc\x85\xe5\x0c\x16\x66\x6a\x2f\xf1\x2e\x45\xc8\x07\x97\x06\x08\x2d\x74\x74\x08\x9d\x05\xc0\xe1\x14\x70\xa1\xcd\xc4\x84\x67\x61\x24\xb4\xad\x9c\x38\x63\x3c\xc8\xe5\x23\xc4\x87\x64\x4c\x26\xee\xbf\x36\x95\x2f\x39\x76\xef\x06\xc2\x2c\x96\xd8\xa8\x7a\x12\x9b\xbf\xa3\xe2\xa8\x32\x6b\xeb\xf0\x01\xb3\x2e\xc1\x40\x58\x32\x7e\x70\x45\x5a\xcc\x94\x4f\x45\x8c\x97\x29\x9a\xfd\x61\x42\xc2\x70\x64\xaf\xab\x91\x7d\x36\x46\xff\xdd\xbc\xa2\x4a\xb2\x1b\x1b\x17\x53\xdb\x14\x9b\x4e\x5a\x03\x4b\xb1\xb5\x3d\xcf\xfe\xeb\xef\xed\xd8\xa7\xcb\xff\x36\x7d\xf8\x67\xaf\x24\x54\x26\x78\x58\xb3\x7f\xb5\xa7\xa0\xcc\xcb\x83\xa5\xa0\x0e\x93\x19\x3a\x45\x56\x68\x22\x8e\x91\x14\xaa\x3a\x6a\xae\xec\x04\x4a\xa0\x94\xe7\xd3\x66\x01\x04\xff\x3b\xf7\x4b\xc5\x6d\xdc\xc8\x97\x1d\x5e\x70\x87\x82\x7e\xd7\x08\xda\x64\x2c\x27\x31\x4f\x77\xc1\xef\x67\x56\x97\x5e\x24\xfa\x4d\x27\x3e\xcf\xf9\x56\xaf\xa2\xf8\xed\xd3\x3f\xa9\xec\x2a\x8a\xbc\x5f\xee\x20\x24\x2d\x91\xfd\x75\x91\x6e\x17\x8b\x68\xfe\x86\xc7\x3a\x90\xe8\x8b\x27\x87\x08\x7e\x22\xf8\x89\xe0\x27\x82\x9f\x08\x7e\x22\xf8\x89\xe0\x27\x82\x9f\x08\x7e\x22\xf8\x89\xe0\x27\x82\x9f\x08\x7e\x22\xf8\x89\xe0\x27\x82\x7f\x03\xb1\x7f\x28\x26\x4e\x22\xf8\x89\xe0\x27\x82\x9f\x08\x7e\x22\xf8\x0f\x85\xe0\x77\x49\x9f\xf7\x49\x3b\x7d\xf0\x7d\x68\x43\x3b\xf9\xa7\x89\x76\xaa\xcf\xfa\xf0\x68\x27\xbf\x58\x44\x3b\x35\x3c\xf6\x6c\xda\xa9\xe9\xe4\x10\xed\x44\xb4\x13\xd1\x4e\x44\x3b\x11\xed\x44\xb4\x13\xd1\x4e\x44\x3b\x11\xed\x44\xb4\x13\xd1\x4e\x44\x3b\x11\xed\x44\xb4\x13\xd1\x4e\x44\x3b\x6d\x20\xf6\x89\x76\x22\xda\x89\x68\xa7\xc3\x58\x51\xa2\x9d\xe6\xa7\x87\x68\xa7\x41\xd3\x4e\x60\x22\xde\x27\xe7\x64\x3a\xd0\x8e\x6f\x32\x4f\x12\xd7\x54\x9f\xed\x01\x72\x4d\x66\xa1\x88\x67\x6a\x78\xec\xf9\x3c\x53\xed\xb4\x10\xc7\x44\x1c\x13\x71\x4c\xc4\x31\x11\xc7\x44\x1c\x13\x71\x4c\xc4\x31\x11\xc7\x44\x1c\x13\x71\x4c\xc4\x31\x11\xc7\x44\x1c\x13\x71\x4c\xc4\x31\x6d\x20\xf6\x89\x63\x22\x8e\x89\x38\xa6\xc3\x58\x51\xe2\x98\xe6\xa7\x87\x38\xa6\x21\x73\x4c\xb0\x2d\x32\x98\x9c\x3d\x12\x4d\x9f\x4c\x2f\xbe\x9a\x5e\xb4\x62\x9b\xca\xc7\x89\x72\xaa\xcf\xfb\xf0\x28\xa7\x72\xb5\x88\x77\x6a\x78\xec\xd9\xbc\x53\xe3\xe1\x21\xf2\x89\xc8\x27\x22\x9f\x88\x7c\x22\xf2\x89\xc8\x27\x22\x9f\x88\x7c\x22\xf2\x89\xc8\x27\x22\x9f\x88\x7c\x22\xf2\x89\xc8\x27\x22\x9f\x88\x7c\xda\x40\xec\x13\xf9\x44\xe4\x13\x91\x4f\x87\xb1\xa2\x44\x3e\xcd\x4f\x0f\x91\x4f\x43\x26\x9f\x92\x92\xb7\xd9\x1f\xf7\xe4\xc9\xa3\x56\xd4\x53\xe3\xd3\x4b\x0c\xe8\x6c\x0d\x7d\x41\x46\xf4\x23\x36\xa2\xaf\x38\x68\x1b\x18\xd2\xd7\x1c\xbd\xd5\x87\xaf\x46\xa9\xad\xde\x8c\x64\x52\x27\x93\x3a\x99\xd4\xc9\xa4\x7e\x6c\x26\xf5\x76\x72\xb8\xd1\xac\xbe\x1a\x3c\x77\x28\x7b\x77\x66\x60\x6f\x37\x19\xcb\x8d\xec\x87\x31\x23\x9b\x98\xdb\xdb\xcd\xc8\x72\x93\xfb\xce\x66\x84\x8c\xef\x64\x7c\x27\xe3\x3b\x19\xdf\xc9\xf8\xde\x9b\xf1\xbd\xe5\x5d\xb0\x60\x80\x5f\x63\x4b\xea\xf0\x12\x38\x62\xe3\x75\xbb\xc9\x5f\x65\xc0\xde\xd9\x55\x4c\xa6\xec\x5d\xad\xef\xa2\x39\x7b\x67\x8b\xbc\x57\xc3\x76\xbb\xc9\x5a\x61\xdc\xde\x9d\x48\x1a\xaa\x99\xbb\xdd\x14\x2e\x9a\xba\x9f\x6b\x71\x6b\x34\x48\x53\x28\xc2\x30\x42\x11\xbc\xf5\x9e\x22\x11\x1a\x1e\x7b\x76\x24\x42\x13\x39\xd2\x73\x20\xc2\xa1\x38\x27\xbc\xa8\x2d\xd1\x59\xaa\x74\xc7\x34\x17\x2a\x26\x8c\xb7\x62\xb4\xf0\xe1\x0e\x38\x2d\x9c\xc5\x7b\x15\x2e\x95\xb1\x4d\xbf\x19\x28\x2a\x33\x11\xda\x79\xea\xf1\xa4\xb7\x3c\xe5\x6b\x2e\x39\xb3\xb5\xac\xc2\x31\x62\x32\x09\x8d\x70\x74\x0a\xd5\x9c\xf1\xb1\x4a\x8d\xdd\x0b\x96\x9a\xad\xaf\xcd\xde\x63\x57\x09\x93\x09\x9a\xfe\x55\xc6\x8a\xc4\xb3\x07\x21\x0b\xb3\xd9\xd7\x22\x61\xa1\xcc\x84\x81\x03\xc2\x9b\xa4\x8d\xf6\x02\xea\xa1\xb5\xc9\x3b\x89\x6a\x2d\xa0\x6c\x5c\x64\x60\x4b\x48\x33\x15\x08\x0d\x7a\x9c\x45\x1f\x16\xeb\x5f\xb0\xbf\xc1\x17\xc1\x46\x03\x8a\xd7\xf7\xec\x9c\x5d\x45\xd1\xf7\xa0\xa5\x85\xd9\x8c\x65\x45\xc2\x74\xce\xcd\xcd\xed\x54\x53\xdb\x9c\x08\xb7\xb8\x51\x71\x2c\xfb\xc1\x6c\x60\x60\xf8\xcc\x13\x3e\x11\x19\x9a\xca\x4c\xaf\x18\xd7\x5a\x05\x12\x74\x3f\x6f\x94\xe2\x60\x5b\x54\x19\x13\x49\x6e\xc0\x98\x53\x86\x63\xfe\x60\x66\x31\x9f\x0a\x2d\x1c\xa2\x31\x58\xcf\x11\x39\xc0\x65\xdc\x0b\x06\x88\x0e\x0c\x50\x2a\x63\x6f\xbf\xfb\x9f\xe6\xd9\x8c\x07\xc0\x38\x45\x2a\x99\x20\x7e\x01\x23\x91\xd1\xe6\xb9\x4c\x50\x0a\x81\x11\xa6\x7c\x16\xac\xf0\x96\x0f\x63\xf7\x33\x0f\xd1\x27\x2a\xe2\xc9\xe4\x42\x65\x93\xcb\xf4\x61\x72\x59\x24\x32\x50\xa1\xb8\xfc\x97\x8f\xfa\xda\xb4\xb2\xb5\x55\xd7\x4e\x4e\x97\xcb\x33\x28\xc0\x73\x68\x38\xa4\x2d\x06\xf9\xae\x05\x06\x79\x87\x86\xa9\x61\x74\xf7\xbb\xb5\xdd\xbd\x0a\x8c\x66\x39\x8c\xfe\x1e\x13\xc4\x03\x60\x31\x34\x88\xf7\x82\xad\x74\xff\xb9\xfc\x6f\xff\xef\x7f\x5e\xde\x9b\xfb\x35\x99\xcc\xf9\x04\x6d\x81\x0c\xe9\xce\x6e\x05\x72\x1b\xee\xeb\x9e\x5d\x06\x4f\xf4\x96\x6e\x19\xdc\xd4\x74\x43\xf7\xbc\x20\xd6\xb2\x8e\xab\x90\x84\xcc\xc8\x39\xa6\x03\x95\x8a\x11\xd3\x45\x30\x35\xa3\x07\x33\x98\xe0\x31\xda\x70\xd2\x4c\x81\x25\xbf\x69\x80\x29\xcf\xa7\xcd\xe3\x4b\x9a\x65\xc7\x0a\x5d\xa0\xe7\x81\x93\xf2\xb8\xa8\x3c\xfe\x88\xd2\x77\x53\xd5\x31\x6c\x78\xef\xc0\x55\x48\x37\xa2\xe5\x18\x82\xa0\x6f\x1f\xb3\x3a\x20\xe0\xbb\x71\x67\xf7\x0a\x7b\x37\xec\x2d\x81\x5e\xff\xf8\x1a\xd0\xbb\x28\xdb\x3a\x86\xbc\xe8\xc8\x19\xf3\x74\x0e\xf4\xa2\x4f\x41\xb7\x72\x1e\xdb\x64\x81\x8a\x22\x11\x38\xba\xea\x1d\x7c\xfe\x33\x4f\x57\x48\x7d\x7c\x11\xa5\xfe\x3b\xff\x76\x29\xff\x1b\xdb\xe8\xf7\x06\xd8\xfe\xc8\xc4\x3c\x98\xca\x44\x64\xb3\x8b\xf4\x61\x62\xfe\xa0\x2f\x62\x91\x73\x73\x88\xde\xc3\x38\xbf\xc0\x84\xe9\x4e\x8c\x87\xe4\x59\x4d\x9e\xd5\xe4\x59\x4d\x9e\xd5\xe4\x59\x5d\xfd\x7d\x37\x8c\x00\x19\x81\x5a\x2f\xd4\x3e\x89\x1b\x72\x80\x6f\x02\x0d\xde\xa3\x48\x26\x4c\xa3\x93\x0f\xbb\x17\x63\x8c\xe2\xf3\x0e\x91\x25\x94\xb0\xd2\x0b\xb6\x4e\xc5\x08\x96\xa8\xe4\x3c\x11\x13\x0e\x1b\xd4\x7a\x03\x55\x8d\x65\xe8\x1c\xed\x8f\x86\x45\x88\x32\x8e\x45\x28\x79\x2e\xa2\x59\x19\x5e\x57\x5e\xb9\x32\x1a\x59\x2f\x1f\x98\x74\x36\xc9\x78\x00\xa7\x46\xaa\xd0\x03\x82\xf2\xd2\x86\xd8\x45\xb7\x4b\x0b\x6d\x3a\x59\x5d\x2e\x6e\xde\x74\x03\xb2\x1f\x19\xa3\x0c\x74\x4d\x5c\x60\x3f\x63\xc1\x93\xc6\x3e\x6e\xb1\xcc\xd0\xe7\x6b\xe8\xf2\x7e\x7d\xa8\x28\xda\x81\xa2\x1d\x28\xda\x81\xa2\x1d\x28\xda\x81\xa2\x1d\x28\xda\xc1\x5f\x02\xef\x45\x9a\x09\x03\x4a\xc2\xef\x59\x1a\x09\xae\x85\x17\x41\xd7\x99\x4a\xf9\x04\xd0\xd1\xb5\x8a\x64\x30\x9b\x8b\xc9\x77\x9b\x2e\xf4\x0d\x98\x6d\xf7\xf6\xe2\x7f\x5c\xb0\x1b\x94\x67\x08\x5d\x52\x91\x98\xc3\x52\xde\xa9\x82\xa9\x2c\x9d\xf2\xc4\xe5\x08\xc8\x0a\x71\x39\xe6\x91\xd3\x95\xef\xce\xf0\xe7\xbb\x33\x36\x96\x09\x8f\xe4\x3f\xdc\x45\x72\x2f\x18\x0f\xc1\x69\x5f\x5d\xa2\xd3\x72\x58\xaa\x61\xd8\xfc\x4b\x5d\xbe\x84\xfa\xe9\x05\xfb\x20\x41\x38\x56\xba\xae\xb2\xc5\xb1\x95\x01\x1b\x39\xaa\xc7\xa0\xa3\xa8\x7c\xba\xcd\x82\xe2\x08\xde\xbb\xb1\xef\x2b\xdd\xc0\xef\xf6\x5e\x30\x07\x76\xaa\x9e\xd8\x84\x67\xf7\x7c\x32\x67\x98\xf4\x4a\x8d\xc8\xc6\x2a\x8b\xcd\x9a\x34\xce\xd7\x97\xda\x88\x96\x4f\x17\x80\x5e\x87\x58\x53\x9c\x5b\x69\xd0\x64\x20\xc3\x52\x15\x06\xac\x00\xc6\x09\xbf\xc6\xe6\xb2\xb6\x37\xa9\x43\x03\x17\x95\xc5\x74\xf7\x88\x8f\x91\xf0\xf9\x2e\xe6\x3f\x76\xc1\xd0\xfa\x0f\x77\x53\x55\xb3\x7b\x89\x63\x78\xc9\xce\xed\x06\x9c\xdf\xa0\xfa\x07\xf6\xf2\x47\x1e\x3c\x4c\x32\x55\x24\xa1\x79\x0a\xf2\x46\xc0\x43\xb5\x89\x43\x08\x69\xf1\xf1\x7c\x23\x6e\x04\xf7\xbe\xa5\x1f\xd8\xcb\x9f\x54\x26\x2a\xcd\xb2\x80\xeb\x80\x87\x66\xf4\x76\x7e\x30\xb5\x08\xb4\xa7\x51\xf5\x5c\x68\x70\xec\xdb\xd8\x66\x43\xa6\xf5\xed\x3e\x88\xa0\x1e\x0a\xad\x1a\xc2\x2a\x50\x68\x15\x85\x56\x1d\x5b\x68\x55\x23\x4b\x47\x4e\x03\x1b\xd2\x74\x37\x39\xcf\x8b\xb6\xfc\xdc\x51\x51\xdd\x78\x17\x97\x38\xa9\x3f\xda\xbb\x89\xd2\xdd\x24\x9c\x67\xc7\x89\xdc\xda\xb0\xd8\x0d\x89\xdc\x9e\xc7\x5c\x53\x4a\x37\x4a\xe9\x86\x3f\x51\x4a\x37\x72\x3c\x20\xc7\x03\x72\x3c\x20\xc7\x03\x72\x3c\x20\x46\x9b\x48\xce\xf5\x33\x42\x24\x27\x91\x9c\x44\x72\x12\xc9\x49\x24\xe7\x09\x93\x9c\xc4\x3b\x10\xef\x40\xbc\x03\xf1\x0e\x94\xd2\x8d\x52\xba\x51\x4a\x37\xff\x4b\xeb\xa0\x47\x6f\xbd\xa7\x94\x6e\x0d\x8f\xed\x9d\x03\xda\x22\x71\x07\xa5\x23\xa0\x74\x04\x3e\x1d\x41\x1b\x52\xaf\x39\x21\xc1\x1e\x02\x52\x7b\x4f\x49\x50\x8e\xa9\x9d\xa0\xa3\xe0\xa8\x23\x08\x8e\x3a\xd1\x7c\x39\x94\xd5\xee\x40\xbc\x74\xb6\x96\x4e\x7b\x4e\xee\xb1\x45\x77\xf7\x9a\xde\x63\xe3\xfe\x1e\x13\xca\xed\x37\xc1\xc7\x96\x28\xf7\x05\xdb\x26\xc5\x07\xfe\xf9\x9f\x3b\xca\xf4\xd1\x0e\x42\x55\xb3\x7b\x50\x4e\x8f\x86\xd1\x10\x74\x3a\x44\xe8\x44\x51\xd4\x27\x14\x45\x4d\xe1\x62\x14\x2e\x46\xe1\x62\x14\x2e\x46\x5a\xdf\xb2\x53\x34\xc8\xd8\x8c\xfd\x68\x55\x14\x5a\xb2\x34\xb4\x64\x70\x6a\x96\xb7\x33\x77\x1e\x50\x92\x09\x1e\xd6\x30\x56\x1b\x6d\xc9\xbc\xd6\x4e\x57\x22\xd1\x41\x16\x8d\x25\x87\x6d\x22\x86\x67\xd0\x78\x0e\x6d\x07\x46\x69\xab\x6c\x2e\xf9\x7c\x1b\x46\x6e\x28\x64\x1c\xb1\x90\x07\xc7\x42\x82\xdb\x42\xab\xfb\xa1\x2e\x7f\xcf\xe1\xdd\x7f\x5b\x2d\x8a\x63\x91\x4d\x44\xab\x27\x75\x9e\xf1\x5c\x4c\x64\x70\xde\xfe\x1d\xf3\xef\x99\x7d\x12\x84\x7e\x9b\xfb\x2b\xe5\x59\x2e\x21\xaa\x08\x5d\x6c\xb6\xb8\xcb\xe0\x8b\x03\x30\xfc\xf5\xc5\x9d\xae\x00\x7a\xd7\xf3\x7e\x2e\x8c\xcc\x81\x47\x6e\x0e\x3c\x1d\x26\xb5\xe6\x9d\xef\x0e\x17\x46\x90\x18\x49\x53\x46\x25\xbf\x5a\x22\x85\x5e\x83\x31\x04\xc3\x46\x79\x04\x6f\x26\x2a\x39\xc7\xb7\xe1\x09\xb0\x47\x6a\xf6\xea\x7f\x6b\x95\x5c\x63\x70\xee\x67\x23\xef\xec\xbf\x6f\x9c\x14\x2c\xff\xf8\x7a\x48\x14\x6f\xfb\x7d\xf3\x93\xca\x02\x30\xd8\x4e\x14\x2c\xbe\x62\x77\x67\x63\xf3\xb7\xbb\x33\x76\x35\x37\x9b\xe0\xfb\x8b\xd6\xd5\x42\x97\x81\x88\xe7\x3c\x80\x05\x80\xf0\xce\x48\x06\xd6\x5e\x24\xa2\x50\x33\xf5\x64\xd7\x16\xc3\x1f\x53\xa1\xd2\x48\x5c\x30\xfc\x26\x44\x75\xbb\x3d\x05\x1e\xb8\x8d\x0b\xe1\x3f\xbf\xcd\xf4\x9a\x0f\x1d\xaf\xbf\x24\xa9\x42\xc3\x57\x85\xd2\x9a\xbb\xea\xd0\x94\xa1\xa2\x73\xb3\x43\x1a\xf1\x60\x1b\xb4\x66\xdf\x3c\x62\xbc\x46\xbe\x6e\x84\xd0\x4e\x01\xa1\x0d\x08\x08\xd1\x7d\xed\x7f\x21\x5f\x37\xdb\xf2\x51\xc1\x8b\x62\x78\x96\xd6\x17\xac\xbd\xeb\x98\x48\xc2\x54\xc9\x24\xdf\x4f\x71\xa8\x0f\xfe\xeb\xcb\x61\xc9\xba\xe2\x50\x8d\x6d\x90\x23\x19\xe5\x68\xa2\x1c\x4d\x94\xa3\x89\x72\x34\x51\x8e\xa6\xbd\x28\x1b\xa4\x13\xb6\x5e\x28\x2a\x0e\x35\xa4\x54\x5a\xe4\xd6\x7c\x42\x6e\xcd\x94\x37\x8d\xf2\xa6\x51\xde\x34\xca\x9b\x46\x79\xd3\x28\x6f\x1a\xe5\x4d\xa3\x68\x1f\x8a\xf6\xa1\x68\x1f\x8a\xf6\xa9\xef\x48\x2a\x0e\x45\x49\x1a\x29\x49\x23\x25\x69\x3c\xf0\x24\x8d\x8d\x2c\x1d\x51\xf1\x14\xc1\x57\x7f\x61\xef\xc5\xa1\x9a\x28\xdd\x01\x17\x87\x6a\xc3\x62\x37\x15\x87\x7a\x16\x73\x4d\xc5\xa1\xa8\x38\x14\xfe\x44\xc5\xa1\xc8\xf1\x80\x1c\x0f\xc8\xf1\x80\x1c\x0f\xc8\xf1\x80\x18\x6d\x22\x39\xd7\xcf\x08\x91\x9c\x44\x72\x12\xc9\x49\x24\x27\x91\x9c\x27\x4c\x72\x12\xef\x40\xbc\x03\xf1\x0e\xc4\x3b\x50\x71\x28\x2a\x0e\x45\xc5\xa1\xfc\x2f\xad\xc3\x1e\xbd\xf5\x9e\x8a\x43\x35\x3c\xb6\x77\x0e\x88\x8a\x43\x9d\x42\x5a\xb6\xbe\x8a\x43\xb5\xa1\xf4\x9a\x4b\x43\xed\x21\x1c\xb5\xf7\x74\x19\xe5\x98\xda\x89\x39\x0a\x8d\x3a\x82\xd0\x28\x4a\x97\x41\xe9\x32\x1a\x3a\x33\x60\x20\x76\x18\xe9\x32\xb6\xe8\xee\x5e\x4b\x43\x6d\xdc\xdf\x63\xc2\xb8\xfd\x96\x86\xda\x12\xe3\xbe\x60\x5b\xe4\xf7\xd8\x6d\x65\xa8\x4d\x13\x7b\x50\x3a\x8f\x86\xd1\x10\x6e\x3a\x44\xdc\x44\x01\xd4\x27\x14\x40\x4d\x91\x62\x14\x29\x46\x91\x62\x14\x29\x46\x2a\xdf\xb2\x53\x34\xc8\xb0\x0c\xaa\x0b\x35\x18\x0d\xab\xef\xba\x50\x83\x8b\x25\x69\xa8\x0b\xd5\x46\x5b\x6a\xaa\x0b\xd5\xac\x2b\x91\xe8\x20\x73\xc6\x3e\xea\x42\xed\x81\xb1\xab\xd6\x85\x5a\xf2\x79\xaa\x0b\xd5\x3c\x66\x22\x20\xa9\x2e\x54\x1f\x75\xa1\xda\xdc\x65\x8d\x75\xa1\x8e\x88\x38\xa5\xba\x50\x64\x0e\x3c\x3d\x1a\x95\xea\x42\x75\xb9\x6f\xa8\x2e\x14\x59\x51\x48\x15\x5a\x9c\xc6\x03\xa9\x0b\xf5\x6c\x65\x68\x37\x75\xa1\xda\x59\x1e\x1a\xeb\x42\x1d\x11\x5e\x23\x47\x37\x42\x68\xa7\x80\xd0\x06\x04\x84\xe8\xbe\xf6\xbf\x90\xa3\x9b\x6d\xf9\xa8\xe0\x45\x9f\x75\xa1\x76\xe1\x37\x06\xc9\xa2\xf6\x53\x14\xca\x7c\xba\xa5\xdf\x58\x63\x41\xa8\xfa\xfb\xe4\x3d\x46\x39\x99\x28\x27\x13\xe5\x64\xa2\x9c\x4c\x94\x93\x69\x2f\x1a\x06\x29\x82\xad\x17\x8a\x8a\x41\x0d\x29\x75\x16\xf9\x32\x9f\x90\x2f\x33\xe5\x49\xa3\x3c\x69\x94\x27\x8d\xf2\xa4\x51\x9e\x34\xca\x93\x46\x79\xd2\x28\xc4\x87\x42\x7c\x28\xc4\x87\x42\x7c\xea\x3b\x92\x8a\x41\x51\x52\x46\x4a\xca\x48\x49\x19\x0f\x3c\x29\x63\x23\x3b\x47\xfc\x3b\x85\xed\xd5\x5f\xd8\x7f\x31\xa8\x1a\x9d\x3b\xe4\x42\x50\x6b\x98\xeb\xc6\x22\x50\xdb\xb2\xd5\x54\x00\x8a\x0a\x40\xe1\x4f\x54\x00\x8a\x9c\x0d\xc8\xd9\x80\x9c\x0d\xc8\xd9\x80\x9c\x0d\x88\xc5\x26\x62\x73\xfd\x8c\x10\xb1\x49\xc4\x26\x11\x9b\x44\x6c\x12\xb1\x79\xc2\xc4\x26\x71\x0d\xc4\x35\x10\xd7\x40\x5c\x03\x15\x80\xa2\x02\x50\x54\x00\xca\xff\xd2\x3e\xbe\xd1\x80\x7e\x2a\xfe\xd4\xf0\xd8\x5e\x39\x1f\x2a\xfc\x74\x0a\x79\xd7\xfa\x2a\xfc\xc4\x93\xb5\x2c\xde\x92\xba\x4f\xbb\x8d\x3a\xed\x3f\x15\x06\x8c\xa7\x9d\x64\xa3\xe8\xa7\x23\x88\x7e\xa2\x34\x18\x94\x06\xa3\xa1\x33\x03\xc5\x5d\x07\x92\x02\x63\xb3\xae\xee\xb7\xce\xd3\x26\x7d\x3d\x26\x28\xdb\x73\x8d\xa7\xcd\xa1\xec\x0b\xb6\x69\x9e\x8e\xdd\x16\x77\x6a\x81\x91\x96\xd4\x76\xa2\xcc\x1c\x84\x8f\x0e\x15\x1f\x51\x2c\xf4\x09\xc5\x42\x53\xd0\x17\x05\x7d\x51\xd0\x17\x05\x7d\x91\x6a\xb7\xec\x14\x0d\x32\xc2\x82\xea\x3a\x0d\x46\xab\xea\xbd\xae\xd3\x90\xc2\x42\x9a\x6a\x3a\xad\xd1\x90\x1a\xeb\x39\x2d\xe8\x47\x24\x2e\xc8\x64\xb1\xf3\x3a\x4e\xbb\x25\xdf\xe6\x6a\x38\x2d\x7e\x9a\xea\x37\x35\x8f\x99\x78\x44\xaa\xdf\xd4\x4b\xfd\xa6\x35\xf7\x56\x73\xed\xa6\xe3\x20\x3f\xa9\x6e\x13\x99\xfb\x4e\x8f\x0e\xa5\xba\x4d\x5d\xee\x1b\xaa\xdb\x44\x56\x12\x52\x7b\x0e\xb3\x66\xd3\x73\x14\x9f\x1d\xd5\x6b\x5a\x6b\x55\x68\xae\xd5\x74\x1c\xf8\x8c\x9c\xd3\x08\x8d\x1d\x3b\x1a\x1b\x10\xe8\xa1\xbb\xd9\xff\x72\xf2\xce\x69\x47\x05\x23\x7a\xad\xcd\xd4\xaf\xbf\x17\xc4\x88\x65\x20\xbc\xf6\x52\x9c\xe9\x93\xf9\xfe\x57\xf3\xfd\x96\xde\x5f\x4d\x15\x9a\x9a\x1b\x21\x67\x30\xca\x9c\x44\x99\x93\x28\x73\x12\x65\x4e\xa2\xcc\x49\x7b\x51\x32\x48\x17\x6c\xbd\x50\x54\xa6\x69\x48\x09\xae\xc8\x35\xf9\x84\x5c\x93\x29\x9b\x19\x65\x33\xa3\x6c\x66\x94\xcd\x8c\xb2\x99\x51\x36\x33\xca\x66\x46\x11\x3b\x14\xb1\x43\x11\x3b\x14\xb1\x53\xdf\x91\x54\xa6\x89\x52\x27\x52\xea\x44\x4a\x9d\x78\xe0\xa9\x13\x1b\x79\x3a\xa2\xe0\x29\x0a\xaf\xfe\xc2\xde\xcb\x34\x35\x72\xba\x03\xae\xd5\xd4\x8a\xc8\x6e\x2a\xd8\xf4\x3c\xf2\x9a\xaa\x36\x51\xd5\x26\xfc\x89\xaa\x36\x91\xef\x01\xf9\x1e\x90\xef\x01\xf9\x1e\x90\xef\x01\x91\xda\xc4\x73\xae\x9f\x11\xe2\x39\x89\xe7\x24\x9e\x93\x78\x4e\xe2\x39\x4f\x98\xe7\x24\xea\x81\xa8\x07\xa2\x1e\x88\x7a\xa0\xaa\x4d\x54\xb5\x89\xaa\x36\xf9\x5f\x5a\x47\x3d\x96\xe6\x7b\x2a\xdd\xd4\xf0\xd8\xfe\x79\x20\xaa\xdf\x74\x0a\x79\xd7\x7a\xab\xdf\xd4\x8e\xd8\x6b\xae\xe1\xb4\x8f\xb8\xd4\xde\x73\x65\x54\x06\xd5\x4e\xd8\x51\x90\xd4\x11\x04\x49\x51\xc2\x0c\x4a\x98\xd1\xd0\x99\x21\xe3\xb1\xc3\xc8\x9a\xb1\x4d\x7f\xf7\x5a\xd7\x69\xf3\x0e\x1f\x13\xd8\xed\xb7\xb8\xd3\xb6\x60\xf7\x05\xdb\x2a\xe3\xc7\x8e\xcb\x3c\x6d\x9e\xec\x83\x52\x7c\x34\x8d\x86\x10\xd4\x21\x22\x28\x0a\xaa\x3e\xa1\xa0\x6a\x8a\x1e\xa3\xe8\x31\x8a\x1e\xa3\xe8\x31\x52\xfe\x96\x9d\xa2\x41\x86\x6a\x50\xbd\xa7\xc1\x28\x5a\x7d\xd7\x7b\x1a\x5e\x7c\x49\x43\xd1\xa7\x56\x0a\x53\x53\xe5\xa7\x25\xea\x12\x49\x0f\xb2\x6c\xec\xa5\x06\xd4\x3e\x58\xbc\x6a\x21\xa8\x65\xdf\xa7\x6a\x50\xcd\x63\x26\x56\x92\xaa\x41\xf5\x51\x0d\xaa\xd5\x85\xd6\x58\x12\xea\x98\xb8\x54\xaa\x0b\x45\x66\xc1\xd3\x23\x56\xa9\x2e\x54\x97\xfb\x86\xea\x42\x91\x35\x85\xf4\xa1\x86\x79\x3c\x90\xe2\x50\xcf\xd7\x88\x76\x53\x21\xaa\xa5\x09\xa2\xb1\x4c\xd4\x31\x61\x36\xf2\x7f\x23\x98\x76\x12\x30\x6d\x40\x68\x88\x2e\x6d\xff\x0b\xf9\xbf\xf9\xa6\x8f\x0a\x64\xf4\x59\x3a\x6a\x17\xde\x64\xee\x16\x4a\xf2\x47\x15\x15\xb1\x08\x22\x2e\xe3\xfd\x94\x92\xba\xf6\x5d\xf9\x1b\x74\xe5\x9d\xe9\x4a\x4b\x47\xb3\xa6\xaa\x52\x6b\xdb\x23\xef\x33\x4a\xf2\x44\x49\x9e\x28\xc9\x13\x25\x79\xa2\x24\x4f\x7b\x51\x4a\x48\x77\x6c\xbd\x50\x54\x60\x6a\x48\xb9\xb8\xc8\x17\xfa\x84\x7c\xa1\x29\xf1\x1a\x25\x5e\xa3\xc4\x6b\x94\x78\x8d\x12\xaf\x51\xe2\x35\x4a\xbc\x46\x21\x42\x14\x22\x44\x21\x42\x14\x22\x54\xdf\x91\x54\x60\x8a\xb2\x3c\x52\x96\x47\xca\xf2\x78\xe0\x59\x1e\x1b\xd9\x3b\xa2\xec\x29\xec\xaf\xfe\xc2\xde\x0b\x4c\xad\xa3\x77\x07\x5c\x6b\x6a\x53\xa6\xbb\xa9\xec\x54\x67\xec\x36\x55\xa0\xa2\x0a\x54\xf8\x13\x55\xa0\x22\xe7\x04\x72\x4e\x20\xe7\x04\x72\x4e\x20\xe7\x04\x62\xbd\x89\x08\x5d\x3f\x23\x44\x84\x12\x11\x4a\x44\x28\x11\xa1\x44\x84\x9e\x30\x11\x4a\xdc\x04\x71\x13\xc4\x4d\x10\x37\x41\x15\xa8\xa8\x02\x15\x55\xa0\xf2\xbf\xb4\x8e\xa0\x6c\xb4\xe4\x53\x31\xaa\x86\xc7\x06\xc5\x19\x51\x5d\xaa\x53\xc8\x00\xd7\x5f\x5d\xaa\x4d\x49\xc0\xe6\x12\x55\x7b\x0e\x72\xed\x3d\x5b\x47\xf3\xf8\xda\x09\x46\x0a\xbe\x3a\x82\xe0\x2b\x4a\xdc\x41\x89\x3b\x1a\x3a\x73\x20\x30\xee\x30\x72\x78\x3c\xb3\xeb\x7b\x2d\x67\xf5\xac\xbe\x1f\x13\x72\xee\xb7\xb2\x55\x07\xc8\xf9\x05\x7b\x6e\x5a\x92\x5d\xd7\xbb\x7a\x4e\x46\x92\xc1\x40\xb4\x03\xc9\x43\x42\x70\xac\xba\xc8\x83\x85\x63\x14\xf9\x7d\x42\x91\xdf\x14\xe2\x46\x21\x6e\x14\xe2\x46\x21\x6e\xa4\x49\x2e\x3b\x45\x43\xd4\x24\x49\x1d\x1b\x82\x3a\xd6\x77\xfd\xab\x41\x87\xbf\x34\x94\xc2\xda\x54\x97\x6a\xaa\x8a\xb5\x5e\x93\x22\xc1\x42\x87\x73\xdf\xb5\xb2\xf6\x4c\x32\x56\xcb\x66\xb5\xe8\x0a\x55\xd0\x6a\x1e\x33\xf1\xa7\x54\x41\xab\x8f\x0a\x5a\x9b\xde\x83\x8d\xc5\xb4\x8e\x94\xf5\xa5\xba\x5a\x64\x68\x3c\x3d\xde\x97\xea\x6a\x75\xb9\x6f\xa8\xae\x16\xd9\x67\x48\x8d\x3a\x8a\x12\x5b\x9d\x2a\x52\xbb\xa9\xb6\xb5\xb9\x95\xa3\xb1\xf0\xd6\x91\xe2\x3b\xf2\xea\x23\x74\x77\x6a\xe8\x6e\x40\x20\x8a\xee\x7a\xff\x0b\x79\xf5\xad\xe9\xfa\x51\xc1\x94\x3e\x8b\x74\x0d\xc9\x31\xee\x52\x63\xde\xb9\x8a\x7f\x5c\x3f\xd4\x0e\x7e\xc7\xdd\x60\x3b\x20\x79\x6c\x42\x3d\x92\x5b\x74\xf8\x89\xea\x21\xaa\x87\xa8\x1e\xa2\x7a\x86\x48\xf5\x74\x75\x2f\xb6\x27\x7d\x1a\x2e\xc6\x83\x34\x0d\x10\xf5\x43\xc6\x81\xd3\x33\x0e\x10\xf5\xd3\xe5\xbe\x21\xea\x87\xcc\x41\xa4\x56\x11\xf5\x33\x3f\x4d\xfd\x51\x3f\xdd\x59\x41\xda\x93\x40\xc7\x82\xf7\x88\x0a\x22\xb4\x77\x6a\x68\x6f\x40\xa0\x8a\xee\x7e\xff\x0b\x51\x41\x6b\xba\x7e\x54\xb0\xe5\x98\xa8\x20\x15\xea\x1d\xa5\x42\xa8\x04\x85\xaa\x31\xbb\x56\xe1\x0a\x34\x53\x4d\x82\xf0\xce\xbf\x57\x81\x35\xf3\x6f\x53\xf2\x03\xaa\x73\x42\x75\x4e\xa8\xce\x09\xd5\x39\xa1\x3a\x27\x7b\xd1\x3f\x48\x4d\x6c\xbd\x50\xfb\x54\x13\xa9\x1c\x0d\xa5\xe2\x39\xe1\x54\x3c\x54\x7b\x88\x6a\x0f\x51\xed\x21\xaa\x3d\x44\xb5\x87\xa8\xf6\x10\xd5\x1e\xa2\x0c\x75\x94\xa1\x8e\x32\xd4\x51\x86\xba\xfa\x8e\xdc\x69\x89\x2d\x2a\x74\x36\x84\x55\xa0\x42\x67\x54\xe8\xec\xd8\x0a\x9d\x35\x32\x73\xc4\xce\x6f\x48\xd3\x59\x57\xa9\x13\x64\xb9\xf1\x2e\x2e\x71\x52\x8f\x94\xb7\x0a\xb7\xf4\xca\xeb\x3c\x30\x11\xcd\x60\x99\x55\x9d\x1d\x5e\x57\x63\x66\xfa\xba\x86\xb3\x36\xef\x2e\xb8\xdf\x6d\xc7\x53\xd7\x7a\x05\x28\x0c\xca\x11\xfe\xa8\xd4\x43\xcc\xb3\x07\x5d\xfa\x74\x63\x57\xc1\xf0\xa2\xad\x79\x68\x96\x1a\x1d\xe2\xc7\x2f\x5f\x7e\xf9\x7c\xf5\xf5\x97\xbb\xb3\xd2\xf4\x81\x28\x4b\x01\x54\x95\x71\x1a\x09\xb0\x71\xdc\xfb\x56\x0d\xae\x90\x93\x04\x4d\xbf\x06\xfc\x46\x7c\x02\xb0\xb3\x7c\xc4\xa8\x99\x55\x15\x11\xed\x09\x2f\x35\x0b\xa5\x0e\x32\x61\xfa\x5c\x92\x46\x15\xb2\xc3\xda\x35\xe6\x1b\xf2\x96\x06\xa3\x42\x1b\x75\xdd\x01\x5a\x23\xf2\xb2\x47\x1e\x8d\x58\xa2\x90\xcf\x05\x45\xd8\x1b\x47\xea\xf6\x35\x60\x14\x67\xcc\x8d\xd9\x1a\xa2\xbc\x1a\xac\x85\x86\x42\x8a\xde\xc2\x6c\xed\x25\x96\xca\x9a\xd3\xea\xcc\xaf\x30\x05\xa1\xa7\x48\xc7\x82\xe7\x46\x19\x9f\xf0\x5c\xb0\xda\x42\xd8\x96\x44\x62\xd0\x36\xda\x1d\x52\x59\x72\xb7\x4d\xcd\x6e\x71\x51\x34\x6c\x81\x3d\x69\x54\xe4\x66\x40\x6e\x06\xe4\x66\x40\x6e\x06\xe4\x66\xd0\x24\x7c\x89\xbf\x3e\xa0\x19\x21\x4a\x93\x28\x4d\xa2\x34\x89\xd2\x24\x4a\x93\x28\xcd\xe3\xa2\x34\x89\x65\x20\x96\x81\x58\x06\x62\x19\x7a\x67\x19\x36\x60\xe2\x51\x99\x53\x99\x0b\xae\x34\xcb\x8f\xcc\xb1\x79\xee\x1e\x2e\x31\x5c\x54\x64\xba\x2d\x3a\xc9\xa7\x22\xc6\x6b\x4b\xe7\x99\xe0\x31\x4c\x4f\x18\x8e\xec\xc5\x30\xb2\xcf\xc6\xea\x11\xb0\x4f\x45\xbd\x63\x37\x00\x57\x66\xf5\xad\xbe\xcd\x14\x3e\xad\xda\x60\x87\x9f\x39\x61\xe9\x0b\xe6\x63\x3f\xe0\xc4\xff\x65\x71\x0e\xda\xb4\x3d\xff\xf6\xb0\x89\xa0\x32\xd6\x51\x85\x9f\xa4\xce\x4f\x91\xf7\x31\xf2\x6b\x88\x5c\xcf\x16\xa9\xed\x28\xff\xdb\xc1\xe5\x7f\x53\xba\x63\x46\x0f\xb5\x30\xc6\xd7\x90\x77\xf8\x58\x47\xf4\xdd\x50\xb3\x64\xa8\x90\x72\x62\x9c\x4e\xb0\x13\xe5\xc4\xa0\x9c\x18\x0d\x9d\x19\x24\xd8\x3a\x90\x0c\x18\x9b\x74\x74\xbf\x15\x74\xdb\xf7\xf4\x98\xb0\x2b\xc0\x87\xe1\x60\xd7\x17\x6c\xb3\x44\x1c\x36\x03\xfb\x8e\xf2\x71\xac\x83\x44\xd5\x1c\x1c\x94\x79\x63\xee\xeb\x04\x88\x0e\x11\x10\x51\xac\xf3\x09\xc5\x3a\x53\x50\x17\x05\x75\x51\x50\x17\x05\x75\x91\x2e\xb7\xec\x14\xed\x5f\x97\x23\x15\x69\x5f\x61\x1d\x03\x52\x92\xbc\xed\xb7\x9f\x2a\x53\xf3\x98\x69\xb5\xc6\xd3\x58\x49\xaa\xa6\xef\xd0\xf1\xa7\x43\xb5\xe3\xfa\x50\xbb\xa4\xcc\xe6\xaa\x41\xd5\x3f\x4c\xb5\x9f\x9a\xc7\x4c\xdc\x1f\xd5\x7e\xea\xa6\xf6\xd3\x26\xb7\x55\x73\x7d\xa7\x63\x60\x2c\xa9\x8e\x13\x19\xed\x4e\x8f\xc5\xa4\x3a\x4e\x5d\xee\x1b\xaa\xe3\x44\xb6\x0e\x52\x76\x0e\xb1\x6a\xd3\xf6\xea\x4e\x5f\x35\x9a\x36\xb3\x21\x34\xd7\x61\x3a\x06\x5c\x46\x9e\x64\x84\xc1\x8e\x1b\x83\x0d\x08\xea\xd0\x8d\xec\x7f\x39\x69\x4f\xb2\xa3\x82\x0e\xbd\x56\x4e\xda\x91\x7b\xd6\x25\xcf\x73\x3e\x67\xa9\xea\x9e\xba\x08\x54\x92\x88\x20\x67\x7f\xfd\x70\x5b\x6a\x7d\xb9\x62\xf8\xe9\xf5\xf5\x93\xec\xfb\x88\x42\xfe\x2a\xf2\x39\x20\x72\x85\xfd\x6f\x21\x56\x96\x76\x77\x67\x47\xbf\x26\x41\x4f\xf0\xcc\xd8\xa5\xec\xf5\xdc\xe0\x8e\x70\x2e\x71\x3b\x23\x1b\x5c\x2a\x29\x2e\x13\x03\x2c\x12\x9b\x0e\x07\x92\x1c\x89\xa0\xc8\x5d\x8e\xa7\x38\xe6\x49\xcd\xbb\xa9\x8a\x00\xcc\xbb\x80\xce\x32\x50\xf8\xe1\x27\x95\xd4\x9a\x86\xec\x0b\x6a\x63\x8b\xb7\x6f\xa3\x1b\xa3\x77\x3b\x13\x7e\x8d\x84\x59\xb1\x3a\xc4\xc8\x34\x8f\x79\x50\x8c\xcc\x4d\x1e\x8a\x0c\xf7\x68\x56\x88\xba\x9a\xa3\xed\xaf\xb0\xad\xef\x8d\x86\x81\xfa\x8a\x28\x7d\xfe\xac\xd4\xc7\x70\xe2\xea\x29\x80\x2c\x18\x1b\xee\x68\xfc\x5e\xf3\x76\x6e\x32\x1d\x75\x33\x01\x32\x71\xe3\x1f\xf9\x11\x62\x38\xb4\xce\x79\x12\xf2\x2c\x64\x32\x49\x8b\xbc\x12\xe4\x6b\x4f\xac\x9d\x05\xa9\x1b\xc6\x0f\xee\x75\x5b\x4c\x80\x4c\x76\x3d\x7e\x55\xe4\x2b\x36\x80\x42\x72\x6e\x67\x1b\x40\x15\xf9\x4e\x27\xe0\xf6\xf6\x3f\x96\x8d\x9e\xb3\x3c\x9f\x95\x7e\x90\x51\xa4\xd0\xe7\xb2\x71\xe8\x2e\xb7\x49\xca\x8d\x16\xcd\xf2\x69\xa6\x8a\xc9\xd4\x27\xa2\x41\x61\x9f\x15\x09\xe4\xf8\xd0\x18\x5e\x6e\x9a\x97\xba\xd2\xb2\x4d\x50\xf4\xa4\xb2\x07\x91\xb1\x44\x85\xc2\x39\xef\x2d\xb4\xd1\xc1\x6e\x5b\xca\x97\x6e\x3c\xd5\xf6\x5f\xbd\x06\x4b\x5a\xd8\x79\xfd\xe5\xa6\x03\xdc\x79\xad\x34\x01\x4f\x02\x9e\x3d\x01\xcf\x6d\xb5\xb7\x7b\x23\x80\x92\x49\x55\x7d\xdb\x02\xba\x92\xe5\xb2\x95\xf4\x6b\xb0\x5a\xf6\x0c\xb6\x4e\xd4\x56\xb9\x7e\x29\x96\xda\x29\x77\xa8\xcc\xfc\x68\xcf\x1e\xe9\x30\x87\xa6\xc3\x1c\xae\x57\x59\x5f\x19\x25\xec\x3d\x82\xf9\xee\xb6\x4c\x2e\xb1\x78\x1e\x0e\x9d\x19\x74\x23\x5a\x8e\x97\x1a\xa7\x98\x78\x8d\x67\xce\xea\x80\xb8\x8d\x8d\x3b\xbb\xd7\x30\x90\x0d\x7b\x7b\x4c\x00\xbf\xdf\x68\xf9\xc6\xbb\xbe\x2f\x50\x2f\x1e\xa5\x1b\x16\xa1\x7a\x42\xf5\x84\xea\x77\x89\xea\x3f\xb8\xc3\x47\xb0\x9e\x60\xfd\xa1\xc3\x7a\x77\x93\x3c\x0b\xd7\x37\x9c\x88\x43\x05\xf6\x36\xf8\xfc\xf1\xed\xbd\xc8\xf9\xdb\x0b\x3f\x32\x02\xf8\xfb\x99\xdd\x01\x00\xfd\x67\x77\x7a\x2f\x80\xff\x99\xbd\x26\xe0\xef\x1f\xf7\xc0\x3f\x5d\x4c\xb9\xe0\xe1\x7f\x33\x28\x98\xc3\xff\xb0\x10\x5d\x2a\x01\xdf\x44\xb0\x17\xaf\x2c\xf3\xe1\x67\xfa\x64\x7d\x30\x7d\x27\x62\xec\x20\x8e\xcf\x2e\x88\x31\xb3\x1f\x76\xee\x8f\xf5\x0e\x3d\xad\xc0\x15\x01\x74\xcb\x58\xe5\xde\xff\xaa\xe2\x96\x75\xc1\x78\x36\x79\x64\x3c\xcb\xf8\xec\x82\xfd\xaa\x72\xf7\x03\xaa\x61\x46\x93\x65\x7a\x2a\xa2\x68\x73\x6f\x2b\xf8\xd4\x2e\x15\x99\x77\xe4\x7f\xb6\xce\xff\x6c\xe9\x5e\x24\x15\xaf\x79\xcc\x83\x52\xf1\xbe\x5a\x77\xa2\x79\x67\x2b\xb4\x33\x6d\xe4\x6c\x75\x20\xce\x66\xcd\xe3\x3d\x5e\xe7\xb2\xe6\xf1\x5a\x25\x7e\x17\x0b\x7c\x40\xce\x64\x00\xd4\x3a\x5a\xe9\xe3\x70\xec\xda\x02\xba\x2e\xb8\x75\x11\x76\x25\xec\xda\x09\x76\xdd\x56\xf1\x8b\xd4\xa4\x57\xbd\x0f\x12\x89\x45\xca\x93\x2e\xcf\xcc\x27\xf6\x49\x4d\xda\x1c\x97\x5c\x7c\xcb\x2f\xd3\x88\xd7\xef\x93\xe3\x36\x99\xd1\x11\x3d\x9e\x64\x62\xf3\xf1\x3d\xe6\x12\xf6\x0a\x96\x05\x26\x91\x9a\xe8\x0d\x14\xab\x03\xd6\xa9\x7e\x52\x3e\xeb\xaa\x91\x24\x0b\xc0\xac\x03\x44\x32\x86\x4f\xec\x14\x8b\xc9\x44\x8b\xa0\xc8\xc4\xcd\x83\x4c\x6f\x3f\xdd\xfc\x4d\x64\x72\x3c\xfb\x91\x07\x0f\x22\x09\xeb\xe0\x0c\xc8\xd9\x54\xda\x62\xad\x15\xfe\x1c\xaa\xd3\x67\xb1\x2b\xba\x2f\x43\x28\x7a\x37\xf6\x25\x87\xa1\x56\xab\xc8\x6c\x69\x37\xaf\x99\xde\xbb\xcf\x00\x57\x65\x2f\x36\xcc\xf5\x72\xc1\x30\x54\x00\x90\x60\xcc\x1f\x50\x91\xff\xf9\xf6\xf6\xfa\xc6\x3f\xa8\x12\x76\x2f\xf2\x27\x61\x59\xaf\xb2\x67\x2e\x21\xaf\x6f\xdf\x8e\xd1\x86\x1f\x60\xa6\x98\xf9\x57\x02\x9e\x98\x81\x3c\xc2\xf0\xfd\x1a\x43\xe5\x63\xec\x1d\xd6\x4a\x85\x81\x18\x05\xd4\x67\x77\xce\x04\x8f\x98\x39\xdf\x91\xc8\x2f\x98\x2b\x95\x6f\xff\x60\x87\x05\x95\xfb\xb1\x1c\x64\xe5\x03\xfe\xe3\x2f\x35\xbb\xfd\x74\xc3\x82\x4c\x40\xf5\x5a\x1e\x69\xa8\xa5\x1f\x2a\x81\xf5\x73\x4d\x7f\x5d\x74\x83\x1b\xb8\xad\xbc\x57\xfd\xba\xf9\xd8\x63\x11\x25\x22\x03\x22\x1b\x12\x88\xc7\x3c\xf1\x99\x8b\x65\x18\x46\x36\x1a\xe3\x81\xbd\x12\x17\x93\x0b\xc6\x13\xfb\xdf\x66\x06\xfc\x6a\xca\x24\x17\x59\x20\xd2\xdc\xb1\xf1\x05\x8f\xca\xe9\x08\x54\x3c\x57\x28\xbf\xda\x85\xd7\x9b\x6e\xf8\x55\xbb\x6f\xa7\xc7\xe0\xe3\x18\x13\x46\x43\x89\x6a\x5f\x6c\xfb\x7e\x96\xbb\x42\xdb\xbc\x92\xd1\xdb\xee\x19\x97\x75\x1e\x8a\x81\xf2\xdc\xfa\x26\x20\xcc\x00\xe5\xcd\xed\x37\x3e\x83\x79\x0d\xa5\x4e\x23\x3e\x83\x2a\xae\x71\x0a\x29\x9a\x21\x8b\x34\x8b\x64\x02\x67\x22\x52\x93\x89\x74\xfe\x09\x95\x1a\xd8\x3a\x92\x93\x69\x1e\xcd\xb0\xee\xb2\xd1\xfa\xdd\x1f\x4a\x57\x87\x79\x54\x03\xc5\x2a\x37\x5d\x0c\x78\xe9\x47\x33\xe4\xe6\xa9\x6f\xca\xf7\xde\xbd\xad\x8a\x0c\x54\x07\x67\xa0\x3a\x14\x1f\x84\xb6\xe6\x18\x38\x74\x69\x26\x1e\xa5\x2a\xb4\x3f\xdf\x22\xac\x60\x97\x45\xd8\xb3\xd5\x85\xef\x3e\xb2\x53\x59\x77\xc5\x32\x11\x61\xe1\x0b\x08\xb3\x6b\x2e\xa4\x11\x14\x59\x06\xb5\xc3\xa5\xbb\xee\x4a\xe8\x37\x55\x4f\x76\x06\xe6\x6b\x60\xa4\xe6\x96\x0c\x85\x2e\xcb\x74\x73\x30\x59\x3d\x71\xcd\x74\xce\x33\x28\xa6\x0e\xf8\xd0\xbc\xcd\xb4\x4c\x6c\x6e\x26\xf3\x10\x3c\xe0\x4d\x3f\xbe\x6e\xf7\x62\x99\x0d\x97\x77\xbe\xc8\x8b\x4c\x40\xc1\x76\x68\x6d\xf1\xcd\x2f\xce\x8e\xaf\xc6\xf8\x2d\x5b\xd0\x02\x44\xa8\xf9\xef\x5b\xd3\x45\x57\x2f\xc0\xd7\xd4\xd8\xd4\x80\x56\x69\x79\xa7\x82\xb3\xf9\xce\x8a\xa0\x30\xb5\xbf\xab\x0c\xfe\xb1\xc2\x15\x66\xc9\x2e\x1f\x4c\xeb\x5c\x29\x91\x11\xfe\xce\x33\x01\x0f\x24\x65\x13\xe0\x24\x53\x2d\x77\xec\x4f\x81\x9b\xc7\xa6\x79\xdd\xd4\x18\xc7\x65\xf4\xc9\x74\x7d\xd7\x53\x88\x11\xcd\x3c\x0c\x0d\x1a\xfa\xfa\xd3\xbb\x3f\xfd\xe9\x4f\xff\xaf\x19\x88\xfd\xe7\xaf\x3c\x51\xb0\x95\x75\xce\xe3\xd4\x95\xa0\xbf\x17\x13\x99\x24\xd6\x8b\x53\x60\xad\xfc\xf2\x12\xf7\xd7\xff\xf3\x4d\x94\xee\xc3\x5d\x49\x08\xfb\xaf\xbf\x6f\x6b\xa8\x49\x55\x96\x8f\x55\xf6\xc4\xb3\x70\x2f\x44\x7d\xe5\xfb\xcf\xe4\xeb\xaf\x2b\x23\x21\xd3\xe7\x41\xd8\x55\x76\x61\xfa\x34\xdb\xe2\x27\xdc\x16\x3b\x67\xef\x6b\x48\x78\x5d\x57\x08\x1b\x37\x8f\x79\x50\xd8\xf8\x93\xd4\xb9\x59\x53\x23\xb8\xf0\x1e\xb0\xd2\xeb\xab\xcb\x0e\xfc\x64\x20\x73\x01\x21\x01\xbf\x8b\xfb\x1b\x15\x3c\x88\xe6\x51\xaf\xc2\x91\xa6\xf5\x8e\x6e\x4e\x77\x45\xec\x83\xcc\xda\x5e\xbc\x2f\x70\x5a\x24\xdf\x49\xbe\xbb\x3f\x77\x28\xdf\xb7\x06\x4e\x99\xfa\x36\xeb\xbb\x2e\xa8\x3b\x57\xef\x3f\x7c\xfa\x70\xfb\x61\xfe\x64\x99\xef\x6f\x78\xa6\xb0\xce\xe6\xfc\xa9\x82\x61\xd0\x79\xa2\xf3\xe4\xce\x93\xd9\x10\xcf\x43\x4a\xbb\x53\x1e\xb6\x38\x03\x0b\x6a\x03\x1d\x00\x3a\x00\x1d\x1f\x80\xa9\xe0\x61\x3f\x27\xe0\xe7\x0f\x57\xef\x9f\x7d\x04\x7e\x16\x3c\xa4\x33\x40\x67\xa0\xd7\x33\xa0\xec\xdb\xbd\x1c\x83\x2f\xd7\xb7\x1f\xbf\xfc\x7a\xf3\xec\x93\x60\x87\x48\x87\x81\x0e\x43\xaf\x87\xa1\x03\xdb\xd1\xd2\x4e\x90\xd5\xa8\x79\xcc\x83\xb2\x1a\x5d\xf3\x7c\xea\x82\x78\x7e\xfb\xfa\x89\x99\xae\x1b\xa1\x55\x68\xe1\x5d\xa1\x1d\x41\x87\x82\xcc\x8a\x36\x34\xa2\x6c\xce\xb2\x2e\x4c\xcd\x3e\x8a\x02\x6e\x6c\x3e\xba\xba\x7d\xf7\xf3\xb3\x85\x3a\xd4\xc8\x22\x91\x4e\x22\xbd\x5f\x91\xbe\x43\x23\xea\x36\x87\x60\xc1\x7c\x4a\x67\x80\xce\x40\xd7\x67\xa0\xeb\xf2\x5e\xfe\x08\xfc\xd6\xc1\x09\x28\xe8\x00\xd0\x01\xe8\xe5\x00\xbc\x60\xcf\xe0\x0c\x2e\xff\xdb\x80\xb3\x7f\x1e\x09\x75\xf0\xbb\xcc\xa7\xd7\xf3\x60\x93\x0e\x16\x1d\xac\xd3\xa3\x10\xe8\x20\xd0\x41\x60\xdd\x1f\x84\x83\xa4\x12\xe8\x2c\xd0\x59\x60\xdd\x9f\x85\xc3\xa6\x14\xe8\x50\xd0\xa1\x60\x3d\xe8\xe0\x44\x2d\x9c\x36\xb5\xe0\xa8\x04\x8c\xdd\xd4\xaa\xc8\xea\x7d\x5b\x37\xa4\xc5\x5f\x88\x28\x39\x61\xa2\x84\x2e\x2a\xba\xa8\x58\x0f\x17\xd5\x21\x12\x26\x74\x16\xe8\x2c\xb0\x1e\xce\xc2\xc1\x11\x27\x74\x10\xe8\x20\xb0\xce\x0e\xc2\x0b\xb6\x1d\x81\xa2\x73\x9e\x17\xba\xff\xcc\x62\xf8\x9d\x8e\x92\x8b\xdd\x60\xa7\x5b\x1c\x9c\xe3\xce\x23\xd6\xba\x00\x94\x99\xe5\x13\x3c\xb2\xc7\x93\x65\x8c\x32\xc0\x1c\xba\x51\xe1\x50\x32\xc0\xd8\x7f\x6d\xa5\x74\xd7\xa5\xed\x39\xbc\xfb\x6f\xab\x05\x6f\x2c\xb2\x89\x68\xf5\xa4\xce\x33\x9e\x8b\x89\x0c\xce\xdb\xbf\x63\xfe\x3d\xb3\x4f\x82\x88\x6f\x73\x63\xa5\x3c\xcb\x25\x8f\xa2\x19\x2b\xd2\x90\xe7\x62\xcb\xdb\x0b\xbe\xda\xee\xfa\x3a\xc8\xba\x39\x31\x0f\xa6\x32\x11\xd9\xec\x22\x7d\x98\x98\x3f\xe8\x8b\x58\xe4\x1c\x2e\x1c\xd8\x34\xed\xae\x9c\xd5\x77\x0d\x95\xab\xab\x2e\xfd\xa2\x10\x58\x5d\xb2\x6e\xb5\x20\x58\x2d\x0a\x36\x5a\xa6\xd3\x29\x5e\x87\x19\xeb\x60\xbc\x98\xf5\xd0\x26\x29\x30\xb7\x16\x48\x9b\x52\x5d\x7c\xb5\x44\x12\xbd\x66\xf7\x45\xce\x90\x7c\xe3\x11\xbc\x99\xa8\xe4\x1c\xdf\x86\x27\x98\x59\x35\xcd\x5e\xfd\x6f\xad\x12\x38\x4b\x23\xf6\xd9\xc8\x3c\xfb\xef\x1b\x27\x09\xcb\x3f\xd6\x12\x0b\xb6\xdb\x31\x4b\x2b\xeb\xed\x6c\xdf\xfc\xa4\xb2\x00\x52\x56\x4d\x14\xa6\xb5\x64\x77\x67\x63\xf3\xb7\xbb\x33\x76\x35\x37\x9b\x17\xec\x63\x6e\x13\x53\x16\x5a\x64\xee\xa0\x9e\xf3\x00\x16\x00\xb2\x48\x46\x12\xb3\x63\xc2\xb8\x34\x53\x4f\x76\x6d\x15\x1e\x55\xa1\xd2\x48\x5c\x30\xfc\xe6\x38\xe2\x13\xbf\xa7\x8a\x44\x8b\xbc\x71\x21\xfc\xe7\xb7\x99\x5e\x55\x67\x0e\xd6\x24\x26\x5a\x3b\xb1\x8d\xb7\x17\x29\x3f\xa4\xfc\x34\x14\xc0\x82\x2b\x78\x88\xea\x4f\xd7\xa6\xba\x4c\xa4\x11\x0f\xb6\x45\x69\xf6\xed\x23\xc6\x69\x5b\x9c\x04\xc2\x64\x84\xc9\x0e\x08\x93\x0d\x08\xfa\xd0\x0d\xed\x7f\xe9\xe3\x86\xde\x6f\xd9\xff\x53\x85\x12\xc5\x90\xec\xa8\x2f\xd8\x46\x54\x47\x2e\xe2\x34\x32\xd7\x53\xdf\xf1\x21\xd8\x26\x0b\x54\x14\x09\x5f\x5e\xf9\x5a\x85\xb7\xb6\x03\x2b\x30\x08\xbe\x8a\x10\xe4\x9d\x7f\x7f\x0e\x8c\x34\xb5\xd2\x2f\x1c\xe9\xc5\x30\x84\x51\x2f\x8e\xe2\xea\x02\x8c\xb8\x02\x1c\x32\x29\x84\xd5\xa9\x1d\xea\xb8\x17\xcc\xa8\x75\x90\x3e\x30\x13\x79\x26\x05\x94\x27\x80\x1c\xf1\x08\x27\x74\x3d\x65\xfd\x05\xbb\xb1\x29\x97\xab\xf9\x94\x6d\x3a\x7b\x7b\x33\x8d\x58\x10\x49\x91\xe4\x98\xb7\x1e\x2e\xb5\x42\x0b\x9f\xf8\x17\x3a\x82\xaf\x42\xe3\xbc\x4c\x94\x0d\x37\x92\x43\x32\x70\xf9\x4a\x28\x68\x10\xf0\xc8\xfe\x56\x2e\x29\x7b\x25\xbe\x41\x89\x01\xe7\xa4\x85\x4d\xaa\xb1\xff\xc8\x6b\x5f\xc6\xc1\xf6\x0f\x13\xe2\x83\x81\x9d\xd7\xbb\x52\x2d\x97\xe0\xb1\xd6\x85\xab\xc6\x50\x82\xe5\xfa\x6b\x1a\xb3\x47\x27\x06\x43\x20\x5c\x7b\x9a\x0a\x40\x59\x61\x21\xb0\xba\x56\x2a\x71\x2f\xb3\x57\x13\x91\x88\x0c\x0c\xa7\x63\xc8\x9d\xad\xd8\x58\x8e\x73\x21\x12\x16\xcb\xa4\xc8\x85\x7e\x6d\xf0\x01\xf7\x15\x1f\xf0\x35\xc4\x15\x4c\x25\x95\xb1\x8c\xaa\xe3\x72\xf8\x2f\x55\x89\xc5\x2c\x9c\xfd\xf9\xed\x1b\xf6\xd5\x3a\xe7\x7d\x30\x5d\x10\xae\xe0\x5f\xae\x26\xd8\x41\xfb\xa4\x1f\x51\xae\x1e\x44\xe2\x87\x8c\x6b\xc8\x12\x21\x42\x8d\x4f\x01\x34\x4d\x72\x16\x49\x9d\x43\x7d\x09\x40\x37\x99\xc0\xb4\xdb\xf9\x54\xc8\x0c\x7e\x83\x86\x55\x91\xcf\xaf\x38\x00\x8a\x0b\xf6\xc5\x7c\xfa\x49\x6a\x31\xaa\x7e\xc5\xac\x8c\x16\x49\xc8\x78\x82\xb6\x08\x68\xc7\x39\xda\x79\x18\x06\x3d\xb4\x85\x34\xaa\xf0\xcc\x0c\x16\x06\xb7\x76\x5a\xa0\x5d\xe8\xf0\x5c\x09\x8a\x44\x7c\xcb\xd9\x83\x98\x8d\xc0\xf2\xe4\xff\x0c\x72\x31\x67\x3a\xe1\xa9\x9e\xaa\x7c\x64\x13\x98\x43\x06\xf1\xca\x84\xf8\xe7\xfd\x46\xb6\xdd\xc7\x23\x74\xce\x90\xd5\x71\x05\xea\x32\x9b\x10\xdb\x9c\x14\xd4\x06\x20\xa9\xb9\x39\x3f\xe6\xf0\x87\x8c\x8f\x73\x81\x7b\x7a\x2c\x33\x9d\xd7\x27\x03\x51\xb7\x4c\x82\xa8\x08\x45\xe8\x92\x99\x3b\xd8\x02\x18\xd1\x6c\x48\xf3\xbf\xb8\x28\x0f\x62\x86\x69\xb9\xcb\x86\xef\xce\xdc\x90\xef\xce\x2e\xee\x92\xbb\x64\xde\x6a\x07\x79\xbd\x8b\x34\x55\x59\xee\xf2\x8b\x3e\x81\xb9\x47\x6a\x2c\x11\xc8\xde\x55\x8e\x38\x6e\x00\x6e\x1f\xa9\xcc\x1e\x4e\x02\xec\xc1\xbf\xe1\xad\x65\x8f\x8d\xcb\xb0\x6e\x40\x6c\x65\xc5\x50\x4f\xc9\x59\x2c\xb5\x66\x3c\x99\xcd\x2b\x4b\xdb\xc0\x58\xb7\xfd\xf6\xa3\x61\x90\x22\xd8\x7a\xa1\xf6\xa9\x08\x5e\x31\x2d\x0c\xa6\x00\xe1\x08\x02\x2d\x93\xb6\x98\x66\x64\x93\xef\xfa\x0d\xeb\x8e\x32\x6e\x5c\x99\x59\x5b\xea\x7c\xa6\x76\xc8\xe7\x9e\x4f\x65\x32\xd9\x5a\xf5\xba\xb1\x3d\xda\xcf\x8c\x18\xd0\x10\xba\xfb\xa7\xb9\xba\x83\x65\xaa\x4b\x28\x61\xa5\x17\x6c\x9d\x8a\xea\x9b\xa8\xe4\x3c\x11\x13\xac\x16\x61\x53\x09\x57\x55\xe4\x7f\x88\x4c\x55\x8e\x86\x45\x89\x32\x8e\x45\x68\x94\xf0\x68\xd6\x50\xbf\x21\x91\x11\x4a\xfa\x10\x27\x9d\x4d\x32\x1e\xc0\xa9\x91\xaa\xac\xf4\x59\x5e\xda\x66\xd2\xfc\x2e\x2d\xb4\xa8\x55\xda\xe2\xe6\x4d\x37\x20\xfb\x91\x5a\x6d\x83\x0b\xec\x27\xda\xd7\x1b\xfa\xb8\xc5\x32\x43\x9f\xaf\xa1\xcb\x4d\xb5\x1f\xd6\x24\x60\x1e\xca\xf6\x8f\xf8\xbd\x88\x3a\xdd\xfe\xd0\xe2\x7e\xb7\x3f\xd4\x31\x42\x93\x50\xcc\xbf\xc9\xb8\x88\x2b\xe5\x31\xbc\x7d\x00\x67\x0b\x4a\xbd\x00\xb9\x85\xb3\x85\xa5\x65\x3f\x8e\x11\x46\x4b\xd3\x17\x26\xbe\x01\x64\xaa\x63\x13\x03\xbe\xcd\xdf\xfe\x70\xb7\xd4\x1f\xf6\x06\xb6\x50\x0f\xda\x33\x9a\x01\x94\xcd\x82\x8d\x8a\xbb\x13\xee\x8f\x80\x27\x6e\x3b\x97\x48\x48\x73\x28\xc7\x22\x73\xe9\x21\x33\xf6\xd2\x80\x7b\x51\x62\x1d\xf3\x69\x1c\x8b\x59\xb4\x0b\x76\x23\x72\x40\x44\x1c\x0b\x3f\x55\x6b\x47\x8d\xc5\x13\x80\x06\x9e\x54\x6f\x08\x03\x53\x62\x55\x24\xd0\x0c\x8e\xf2\x55\x91\x9a\x8f\xe1\x81\x36\x7f\x79\xed\xb0\x89\x78\x34\x30\x89\xc3\xe5\xe4\xde\x76\x3b\xc9\xe0\x92\xb1\x8c\x72\x61\x10\xaa\x41\x8d\xe6\x8e\x72\x0a\x84\x95\x2e\x73\x3a\x04\xde\xa7\x81\xa8\x16\x13\x29\x11\xa6\xe9\x41\x28\xb0\xe2\x8e\xf0\x58\x7c\x4e\xa5\x01\x24\xf4\xc8\x65\xc4\xef\x23\x61\x86\x6e\x56\x04\x91\x4c\x30\x55\x4a\x0b\x38\xfa\xb9\x72\x08\xc8\xae\x85\x99\x16\x9e\x4d\x8a\x18\xc6\x02\x90\x12\x06\x04\x93\x64\xc6\x66\xfb\xe3\x9b\x2e\x67\xf7\xe3\x98\xf9\x2d\x55\x4a\x25\xa7\x9d\xd4\x06\x20\x35\x13\x71\x9a\xcf\xe6\xd5\x28\xae\x8d\xf2\x8d\x2b\x9f\xa8\x95\x03\x5a\x05\xe5\xe4\xb8\x06\xe4\x10\xfb\xf9\x7d\x39\x29\x78\xc6\x93\x5c\x54\x0b\xf6\xb9\x95\xf2\x42\xa0\x92\x6f\xde\xf7\xdd\xc3\x52\xaf\xb0\xe5\x8a\x49\xad\x0b\xdc\x55\xe6\xe1\x48\x94\x27\xc4\xeb\x08\x6e\xc3\x9d\x3b\x9b\x2a\x94\xe3\x71\x9f\xdc\x0c\x27\x3b\x88\x6c\xf0\xb9\xd6\x85\x08\x1b\xc1\xb2\xc1\x95\xba\xb8\xd7\xe6\xe1\x24\xf7\x23\x08\x2b\x4c\x2a\xcc\xa0\x59\x2b\x15\x0b\x28\xa0\xc2\x32\x31\x16\x99\xad\xc0\xc7\x6b\xfa\x50\xa9\x1e\x98\x15\x15\x89\x2e\xb2\xb2\x18\xb5\x55\x70\x9c\xc1\x18\x67\x0d\x87\x0c\x07\x13\x54\x19\xa6\x63\x1e\x45\x22\x63\xc1\xb4\x48\x1e\x80\xa2\xe1\x0c\x6b\xc2\xf0\x6c\xe2\x16\x1a\x4e\x3c\x36\x6f\x06\x6d\x34\x26\x28\x70\xcd\x52\xa5\xb5\x34\x1b\xce\x4e\x1b\x6c\xb8\xea\xf9\x42\x37\x9d\xd0\x5c\xe9\xb8\x1c\xf0\x1d\xa8\xf2\xa6\x71\x8d\xad\x51\xc9\xed\x61\x7b\x17\x42\xaf\x9f\xb8\x76\x18\xd6\x15\xaf\x81\xc2\x4c\x0b\xfa\x09\x6a\xed\x1c\xca\x8a\x07\x45\x04\x5f\x94\xe5\xb6\xd9\xea\x2e\x30\x13\xb5\xa7\x6b\xf1\xbd\x48\x33\x01\xb5\xc3\xbf\x67\x69\x24\xb8\x16\x5e\x04\x5d\x67\x2a\xe5\x13\x40\x47\xd7\x2a\x92\xc1\x6c\x84\x00\x05\x0f\x9d\xdb\x74\xa1\x6f\xc0\x6c\xbb\xb7\x17\xff\xe3\x82\xdd\xa0\x3c\x43\xe8\x92\x8a\xc4\x1c\x96\xf2\x4e\x15\x4c\x65\xe9\x94\xfb\x9a\x55\x59\x21\x2e\xa1\xe8\xcf\xc8\xea\x6c\xf8\xf3\xdd\x19\x56\xfd\x93\xff\x70\x17\xc9\xbd\x60\x3c\x0c\x61\x77\x5e\x66\x22\x56\x46\x39\xf6\x6a\x18\x36\xff\x52\x97\x2f\xa1\x7e\x7a\xc1\x3e\x48\x10\x8e\x95\xae\xab\x6c\x71\x6c\xbe\xbc\x95\xc8\x51\x3d\x06\x1d\x45\xe5\xd3\x6d\x16\x14\x47\xf0\xde\x8d\x7d\x29\xe4\xd9\x8a\xfd\xdf\x48\x31\x83\xa1\x9b\x03\x3b\x55\x4f\x6c\xc2\xb3\x7b\x3e\x99\x33\x4e\x7a\xa5\x46\x64\x63\x95\xc5\x66\x4d\x1a\xe7\xeb\x4b\x6d\x44\xcb\xa7\x0b\x40\xaf\x43\xac\x29\xce\xad\x34\x68\x32\x90\x61\xa9\x0a\x03\x56\x40\x27\x0d\xb7\xc6\xe6\xb2\x76\x35\x38\x2d\x1a\xb8\xa8\x2c\xa6\xbb\x47\x9c\xaa\x7d\x6e\xaf\x98\xa0\xf6\xb1\x0b\x76\x15\x04\x22\x45\x52\xa9\xaa\xd9\xbd\xc4\x31\xbc\x64\xe7\x76\x03\xce\x6f\x50\xfd\x03\x7b\xf9\x23\x0f\x1e\x26\x99\x2a\x92\xd0\x3c\xc5\x7d\x1d\xdb\xda\xc4\x21\x84\xb4\xf8\x78\xbe\x11\x37\x82\x7b\xdf\xd2\x0f\xec\xe5\x4f\x2a\x13\x95\x66\x59\xc0\x75\xc0\x43\x33\x7a\x3b\x3f\x20\x81\xb0\x3d\x8d\xaa\xe7\x42\x83\x63\xdf\xc6\x36\x1b\x32\xad\x6f\xf7\xfd\x20\xce\xba\x99\x44\x8b\xdc\xdd\x32\x79\xc6\xa5\x91\x12\x09\x7b\x32\x93\xe1\x9e\x74\x22\xdb\x3c\xe6\x2e\x3e\xbf\xf5\x32\x27\x01\x0c\xbc\x11\x9e\x27\xac\x70\x60\x52\x5d\x86\x2a\xd0\x97\x70\xb1\x19\x38\x75\x09\x57\xd3\x39\x4f\xe5\x25\x4f\xe5\x79\xa0\x12\xb3\x57\xf4\xe5\xbf\xf8\x6d\xe5\x3f\x38\x86\x3b\x38\xe7\x32\xd2\x80\x1f\xaa\xd8\x1f\x3c\x85\xb6\x58\x87\xda\x04\x0c\x62\x15\x3e\x03\x52\xf2\x68\x52\x83\xa8\xa8\xaf\x94\xd1\x12\xd2\x34\x92\x88\x0d\x3c\xc0\x41\x7f\x2c\xa9\xd9\x54\x4e\xa6\xe0\xa6\x15\xa8\x38\x36\x5b\x37\xc4\x4d\xdd\xf8\x2d\x6b\x91\x37\x13\x5c\xb6\x64\xf0\x56\x26\x9a\x3e\x6c\x9e\x3d\xcc\xf5\xfd\x5c\xf3\xbe\xd9\xe1\x22\xdf\xca\x58\x18\xe4\xe9\xcc\x04\x66\xa2\x2f\x11\x14\xa3\xee\x06\xe8\x0f\x90\x07\x46\x85\x7b\x43\x88\x53\x38\x78\x14\x8d\x58\x26\x26\x3c\x0b\x81\xd8\x37\x70\x2d\x99\x31\x1e\xe4\xf2\x11\xea\x56\x67\x4c\x26\xee\xbf\xb6\x11\x4a\x39\x76\xb1\x0f\xb3\x40\x23\x53\x47\xfc\xfb\x86\x34\x9d\x75\x7d\x3a\x41\xae\x1b\xef\xe2\x12\x27\xf5\x4a\x7c\x37\x90\xba\x7b\xcd\xe9\x86\xe6\xb0\xcc\xaa\xd0\x0e\xb7\xab\x31\x33\x7d\x6e\xc9\x65\x9b\x36\x1a\x9c\xe9\x9e\xc3\x5f\xd7\x7a\x09\xe8\xec\x77\xd3\xc5\x1f\x95\x7a\x88\x79\xf6\xa0\x4b\x9f\x6b\xec\x3a\x18\x64\xb4\x35\x1b\xcd\x52\xa3\x5b\xfc\xf8\xe5\xcb\x2f\x9f\xaf\xbe\xfe\x72\x77\x56\x9a\x44\x10\x7d\x29\xac\xe9\x1e\xa7\x91\x00\xdb\xc7\xbd\x6f\xd5\xe0\x0d\x39\x49\xd0\x24\x6c\x40\x71\xc4\x27\x00\x47\xcb\x47\xa0\x1a\x6c\x45\x75\xf4\x05\xeb\x43\xa9\x83\x4c\x98\x3e\x97\x64\x52\x85\x04\xb1\xf6\x8e\xf9\x86\xbc\x05\xc2\xa8\xd6\x46\x8d\x77\x40\x17\x0a\xce\x3f\xf2\x68\xc4\x12\x85\x3c\x2f\x28\xc8\xde\x68\x52\xb7\xbb\x01\xd3\x38\x63\x6e\xcc\xd6\x40\xe5\xd5\x63\x2d\xb4\x86\x8e\x39\xcb\xb3\xb5\xa3\x58\x8a\x6b\x4e\xdb\x33\xbf\xc2\x14\x84\x9e\x3a\x1d\x0b\x9e\x1b\x25\x7d\xc2\x73\xc1\x6a\x0b\x61\x5b\x12\x89\x41\xe1\x68\x8f\x70\x55\xfc\x97\x35\xbb\xc5\x05\xd2\xb0\x05\xf6\xa4\x69\x91\xfb\x01\xb9\x1f\x90\xfb\x01\xb9\x1f\x90\xfb\x41\x93\xf0\x25\x5e\xfb\x80\x66\x84\xa8\x4e\xa2\x3a\x89\xea\x24\xaa\x93\xa8\x4e\xa2\x3a\x8f\x8b\xea\x24\xf6\x81\xd8\x07\x62\x1f\x88\x7d\xe8\x9d\x7d\xd8\x80\xa1\x47\x65\x4e\x65\x2e\xac\xd2\x65\x1c\xc6\xe7\xee\xe1\x12\xc3\x45\x45\x06\xdc\xa2\x93\x7c\x2a\x62\xbc\xb6\x74\x9e\x09\x1e\xc3\xf4\x84\xe1\xc8\x5e\x0c\x23\xfb\x6c\xac\x1e\x01\xfb\x54\xd4\x3b\x76\x03\x70\x65\x56\xdf\xea\xdb\x4c\xe1\xd3\xaa\x0d\x76\xf8\x99\x0d\x96\xbe\x60\x3e\xf6\x03\x4e\xfc\x5f\x16\xe7\xa0\x4d\xdb\xf3\x6f\x0f\x9b\x20\xaa\xc6\x3d\x3a\xfb\xfd\x27\xa9\xf3\x53\xe4\x85\x8c\x1c\x1b\x32\x17\xb4\x45\x52\x39\xca\xc5\x76\x70\xb9\xd8\xba\xcf\xf8\x0c\x5a\x19\xe3\x2d\xc9\x3d\x7c\xbc\x63\x7a\x6f\xb8\xd9\x32\xfc\xa8\xda\x09\x3c\x0a\x96\x3a\x82\x60\x29\xca\x9a\x41\x59\x33\x1a\x3a\x33\x68\x50\x76\x30\xd9\x33\x36\xef\xf0\x77\x6b\x3b\x8c\x4e\xbf\x43\xe9\xf1\x31\x61\x5e\x80\x1b\xc3\xc3\xbc\x2f\xd8\x76\x09\x40\x6c\xce\xf3\x1d\xe5\x01\x69\x0b\xa9\xaa\xb9\x3f\x28\xe3\x47\xe3\x68\x08\x48\x1d\x22\x90\xa2\x18\xeb\x13\x8a\xb1\xa6\x60\x32\x0a\x26\xa3\x60\x32\x0a\x26\x23\x1d\x70\xd9\x29\x1a\x8e\x0e\x48\x2a\xd5\xbe\xc3\x4b\x06\xa8\x54\x79\x1b\x73\x3f\xf5\x9f\xf2\x7a\x46\xe6\x16\x9a\xd1\x92\xea\x4f\x8d\x7a\x11\x89\x09\x3a\x74\x7b\xab\x03\xb5\x7b\xea\xae\x56\x0f\xaa\xb9\x03\x54\x17\xaa\x79\xcc\xc4\x45\x52\x5d\xa8\x6e\xea\x42\x6d\x73\xab\x2d\xab\x0a\x75\x3c\x0c\x2a\xd5\x85\x22\x23\xe0\xe9\xb1\xa9\x54\x17\xaa\xcb\x7d\x43\x75\xa1\xc8\x76\x42\x4a\x51\xd3\x44\x1e\x4e\x7d\xa8\xe7\xaa\x45\x7d\xd5\x89\xda\xce\x16\xb1\xac\x4a\xd4\xf1\xe0\x36\xf2\x7c\x23\xac\x76\x1a\x58\x6d\x40\x90\x88\x6e\x6e\xff\x0b\x79\xbe\x55\xda\x3e\x2a\xa8\xd1\x73\xfd\xa8\xfe\xdd\xc8\xcc\xf5\x6f\x0f\x8f\x91\x47\x99\x8a\x22\xbc\xdc\x77\x5f\x51\xea\x6b\xd9\x95\x77\xbe\x2b\x2d\xfd\xcb\x9a\x6a\x4b\xad\x6d\x8f\x7c\xce\x28\xcd\x13\xa5\x79\xa2\x34\x4f\x94\xe6\x89\xd2\x3c\xed\x45\x2f\x21\xf5\xb1\xf5\x42\x51\x95\xa9\x21\x65\xe3\x22\x0f\xe8\x13\xf2\x80\xa6\xd4\x6b\x94\x7a\x8d\x52\xaf\x51\xea\x35\x4a\xbd\x46\xa9\xd7\x28\xf5\x1a\x05\x06\x51\x60\x10\x05\x06\x51\x60\x50\x7d\x47\x52\x95\x29\xca\xf3\x48\x79\x1e\x29\xcf\xe3\x81\xe7\x79\x6c\x64\xef\x88\xb5\xa7\x2a\x53\xf5\x17\xf6\x5e\x65\x6a\x1d\xbd\x3b\xe0\x7a\x53\x9b\x32\xdd\x4d\x95\xa7\x3a\x63\xb7\xa9\x06\x15\xd5\xa0\xc2\x9f\xa8\x06\x15\x39\x27\x90\x73\x02\x39\x27\x90\x73\x02\x39\x27\x10\xeb\x4d\x44\xe8\xfa\x19\x21\x22\x94\x88\x50\x22\x42\x89\x08\x25\x22\xf4\x84\x89\x50\xe2\x26\x88\x9b\x20\x6e\x82\xb8\x09\xaa\x41\x45\x35\xa8\xa8\x06\x95\xff\xa5\x75\x0c\x65\xa3\x25\x9f\xaa\x51\x35\x3c\x36\x28\xce\x88\xea\x52\x9d\x42\x2e\xb8\xfe\xea\x52\x6d\x4a\x02\x36\x57\xa8\xda\x73\x90\x6b\xef\x19\x3b\x9a\xc7\xd7\x4e\x30\x52\xf0\xd5\x11\x04\x5f\x51\xee\x0e\xca\xdd\xd1\xd0\x99\x03\x81\x71\x87\x91\xc5\xe3\x99\x5d\xdf\x6b\xda\xf5\x67\xf5\xfd\x98\x90\x73\xbf\x35\xad\x3a\x40\xce\x2f\xd8\x73\xd3\x92\xec\xba\xce\xd5\x73\x32\x92\x0c\x06\xa2\x1d\x48\x1e\x12\x82\x63\xd5\x45\x1e\x2c\x1c\xa3\xc8\xef\x13\x8a\xfc\xa6\x10\x37\x0a\x71\xa3\x10\x37\x0a\x71\x23\x4d\x72\xd9\x29\x1a\x64\x3c\xc9\x7e\x34\x32\x0a\x87\xd9\x43\x55\xac\x41\x07\xc1\x34\xd4\xc7\xda\x54\xa3\x6a\xaa\x94\xb5\x5e\x9f\x22\xf1\x42\x16\x93\x7d\x57\xcf\xda\x33\xd5\x58\xad\xa3\xd5\xa2\x2b\x54\x51\xab\x79\xcc\xc4\xa2\x52\x45\xad\x3e\x2a\x6a\x6d\x7a\x0f\x36\xd6\xd6\x3a\x52\xee\x97\xaa\x6c\x91\xb9\xf1\xf4\xd8\x5f\xaa\xb2\xd5\xe5\xbe\xa1\x2a\x5b\x64\xa5\x21\x35\xea\x28\xea\x6d\x75\xaa\x48\xed\xa6\xf2\xd6\xe6\x56\x8e\xc6\x1a\x5c\x47\x8a\xef\xc8\xb7\x8f\xd0\xdd\xa9\xa1\xbb\x01\x81\x28\xba\xeb\xfd\x2f\xe4\xdb\xb7\xa6\xeb\x47\x05\x53\xfa\xac\xd5\x35\x24\xf7\xb8\x4b\x1d\xf0\xa8\xea\x12\xd7\x13\xb3\x03\x9f\x71\xf7\xd7\x0e\x28\x9e\x1b\x18\x16\x09\xad\x75\x27\x9f\x17\xb9\x32\x6b\x23\x93\x09\x90\xaf\x30\x6d\x27\x78\xe0\x3b\xa2\x77\x2a\xd3\xd9\x7c\xf6\xeb\xfb\x72\x87\xcc\x4e\xc3\xa7\x89\xc9\x69\x1e\x33\x31\x39\xc4\xe4\x74\xc3\xe4\x74\x74\xef\xb5\xa7\x74\x16\x2f\xbe\x83\xd4\xfb\x89\xd7\x21\xcd\xff\xf4\x34\x7f\xe2\x75\xba\xdc\x37\xc4\xeb\x90\xad\x87\xd4\xa6\x5e\xd5\xa6\xce\xe8\x9c\x7e\x15\xa7\xbe\x98\x9c\xce\xac\x1a\xed\x29\x9d\x23\xc1\x77\xcf\x39\x41\x04\xea\x08\xd4\x1d\x10\xa8\x1b\x10\x76\xa2\x2b\xde\xff\xd2\xeb\x15\xbf\x1f\x16\x87\x40\x49\xa7\xe4\x4d\x1f\x90\xe4\x05\xeb\x8c\xb7\xc1\x30\xa9\xfe\x89\x1b\xf8\xce\x2e\x99\x1b\x1c\x18\x09\x28\x22\x6d\x29\x44\x87\x42\x74\x88\xd8\x21\x62\x67\x90\xc4\x4e\x47\xf7\xe2\x06\xcc\xce\xe2\xc5\x78\x90\xaa\x3f\x51\x3b\x64\x05\x38\x3d\x2b\x00\x51\x3b\x5d\xee\x1b\xa2\x76\xc8\xee\x43\x6a\xd5\x81\x71\x3c\x07\x1c\xb2\xd3\x9d\x15\x64\x03\xa6\xe7\x48\xf0\x1e\x85\xf0\x10\xda\x3b\x35\xb4\x37\x20\x50\x45\x77\xbf\xff\x85\x42\x78\xd6\x74\xfd\xa8\x60\xcb\x51\x85\xf0\x60\xaa\xca\xff\x2a\x54\xce\xf5\x8e\x52\x5a\x57\x92\x7b\xaa\xb1\x2f\xb1\xfd\x7f\x4c\x17\x56\x20\x9c\x6a\x5a\xeb\x77\xbe\x85\x2a\xd4\x59\xd2\x0e\x25\xb6\xa6\x1a\xf6\x54\xc3\x9e\x6a\xd8\x53\x0d\x7b\xaa\x61\xbf\x17\xed\x84\x94\xc8\xd6\x0b\xb5\x4f\x25\xf2\x59\x85\xf5\xd1\xc2\xdb\x65\x61\x7d\x68\x71\xbf\x85\xf5\xa9\xcc\xc2\x09\x95\x59\x78\xd6\xf6\x8f\xf8\xbd\x88\x3a\xdd\xfe\xd0\xe2\x7e\xb7\x3f\xd6\x7d\x07\x73\x52\xcc\xbf\xc9\xb8\x88\x59\x52\xc4\xf7\x66\x93\x8c\xbd\x30\xd5\x38\x5b\x50\xb8\x17\x28\xb7\xb2\xee\x34\x6c\x59\x80\xd1\xd2\xf4\x05\x2b\x0a\x2c\x62\x13\x03\xbe\xcd\xdf\xfe\x70\xb7\xd4\x1f\xae\xa8\x41\x52\xce\xbe\xab\x37\x80\x1b\x15\x77\x27\xdc\x1f\x01\x4f\xdc\x76\x2e\x91\x90\xe6\xb1\x39\x65\x32\x97\x1e\x32\x63\x2f\x0d\xb8\x17\x25\xd6\x31\x9f\xc6\xb1\x98\x45\xbb\x60\x37\x22\xcf\xb1\xe4\x3c\x8e\x1d\xa1\x32\x8e\x4d\x3c\x01\x68\xe0\x49\xf5\x86\x30\x30\x25\x56\x45\x02\xcd\xe0\x28\x5f\x15\xa9\xf9\x18\x1e\x68\xf3\x97\xd7\x0e\x9b\x88\x47\x28\x4a\x0f\x97\x93\x7b\xbb\x5a\xf7\x7e\x2c\xa3\x5c\x18\x84\x6a\x50\xa3\xb9\xa3\x9c\x02\x61\xa5\xcb\x9c\x0e\x81\xf7\x69\xe0\x7d\x97\xe6\x11\x26\x56\x3f\xb0\x65\xc7\x3d\x16\x9f\x53\x69\x00\x09\x3d\x72\x19\xf1\xfb\x48\x98\xa1\x9b\x15\x41\x24\x13\x4c\x95\xd2\x50\x5b\xd9\xb4\x63\x11\x90\x5d\x0b\x33\x2d\x3c\x9b\x14\x31\x8c\x25\x09\xdd\x6d\x0b\x93\x64\xc6\x66\xfb\xe3\x9b\x2e\x67\xf7\xe3\x98\xf9\x2d\x55\x4a\x25\xa7\x9d\xd4\x06\x20\x35\x13\x71\x9a\xcf\xe6\xd5\x28\xae\x8d\x02\x8e\x2b\x9f\xa8\x95\x03\x5a\x05\xe5\xe4\xb8\x06\xe4\x10\xfb\xf9\x7d\x39\x29\x78\xc6\x93\x5c\x38\x90\x52\x4a\x7a\x5d\x0a\x01\xc0\x83\x50\x13\xbd\xec\xbb\x87\xa5\x5e\x61\xcb\x15\x93\x5a\x17\xb8\xab\xcc\xc3\x91\x28\x4f\x88\xd7\x11\xdc\x86\x3b\x77\xf6\xd8\x91\x19\x9e\xfb\xe4\x66\x38\xd9\x41\x64\x83\xcf\xb5\x2e\x44\xd8\x08\x96\x0d\xae\xd4\xc5\xbd\x36\x0f\x27\xb9\x1f\x41\x58\xe1\x77\x61\x06\xcd\x5a\xa9\x58\xe4\x32\x16\x66\xec\x63\x91\x65\x58\xa8\x9e\xd7\xf4\xa1\x52\x3d\x30\x2b\x2a\x12\x5d\x64\x6e\xfa\xb8\x53\x70\x9c\xb1\x19\x67\x0d\x87\x0c\x07\x13\x54\x19\xa6\x63\x1e\x45\x22\x63\xc1\xb4\x48\x1e\xb0\x2a\x3a\x33\x42\x94\x45\x3c\x9b\xb8\x85\x86\x13\x8f\xcd\x9b\x41\x1b\x8d\x49\xc0\xc6\x4b\x95\xd6\xd2\x6c\x38\x3b\x6d\xb0\xe1\xaa\xe7\x0b\x1d\x8c\x42\x73\xa5\xe3\x72\xc0\x77\x44\x88\xeb\x01\xca\xb3\x85\xe7\x76\x0f\xdb\xbb\x10\x7a\xfd\xc4\xb5\xc3\xb0\xcc\xee\x08\x33\x27\x8b\xfa\x09\x6a\xed\x5c\x9b\x05\x0e\x8a\x08\xcb\xee\x94\xdb\x66\xab\xbb\xc0\x4c\xd4\x9e\xae\x45\xaa\x3e\x44\xd5\x87\xa8\xfa\x10\x55\x1f\xda\x09\xe2\xac\x9b\x49\xb4\xc8\xdd\x2d\x93\x67\x5c\x1a\x29\x91\xb0\x27\x33\x19\xee\x49\x27\xb2\xcd\x63\xee\xe2\xf3\x5b\x2f\x73\x12\xc0\xc0\x1b\xe1\x39\xc6\x0a\x7f\x26\xd5\x65\xa8\x02\x7d\x09\x17\x9b\x81\x53\x97\x70\x35\x9d\xf3\x54\x5e\xf2\x54\x9e\x07\x2a\x31\x7b\x45\x5f\xfe\x8b\xdf\x56\xfe\x83\x63\xb8\x83\x73\x2e\x23\x0d\xf8\xa1\x8a\xfd\xc1\x7f\x69\x8b\x75\xa8\x4d\xc0\x20\x56\xe1\x33\x20\x25\x8f\x26\x35\x88\x8a\xfa\x4a\x19\x2d\x21\x4d\x23\x89\xd8\xc0\x03\x1c\xf4\x12\x93\x9a\x4d\xe5\x64\x0a\xce\x63\x81\x8a\x63\xb3\x75\x43\xdc\xd4\x8d\xdf\xb2\x16\x79\x33\xc1\x65\x4b\x06\x6f\x65\xa2\xe9\xc3\xe6\xd9\xc3\x5c\xdf\xcf\x35\x0f\xa0\x1d\x2e\xf2\xad\x8c\x85\x41\x9e\xce\x4c\x60\x26\xfa\x12\x41\x31\xea\x6e\x80\xfe\x00\x79\x68\x94\x61\xce\x10\xe2\x14\x0e\x1e\x45\x23\x96\x89\x09\xcf\x42\x70\x0a\x30\x70\x2d\x99\x31\x1e\xe4\xf2\x51\xe6\x33\x73\x2b\xc8\xc4\xfd\xd7\x36\x42\x29\xc7\x2e\xf6\x61\x16\x68\x64\xeb\x88\xbb\xa7\x8a\x62\xf5\x17\x56\x56\x14\x2b\x71\x52\x9f\x84\x78\x33\xad\xbb\xd7\x9a\x62\x68\x10\xcb\xac\x12\xed\x90\xbb\x1a\x33\xd3\xeb\xd6\x8c\xb6\x69\x65\xd1\x61\xef\x99\x2c\x76\xad\xa7\x80\xd1\x7e\x37\xdd\xfc\x51\xa9\x87\x98\x67\x0f\xba\xf4\x07\xc7\xee\x83\x59\x46\x5b\xe3\xd1\x2c\x35\x1a\xc6\x8f\x5f\xbe\xfc\xf2\xf9\xea\xeb\x2f\x77\x67\xa5\x61\x04\x31\x98\x02\x20\x2b\xe3\x34\x12\x60\x01\xb9\xf7\xad\x1a\xd4\x21\x27\x09\x1a\x86\x0d\x34\x8e\xf8\x04\x40\x69\xf9\x88\x51\x42\xab\x0a\x24\x5a\x1b\x5e\x6a\x16\x4a\x1d\x64\xc2\xf4\xb9\xa4\x94\x2a\x54\x88\xb5\x7a\xcc\x37\xe4\xed\x10\x46\xc1\x36\xca\xbc\x83\xbb\x46\x20\x66\x8f\x3c\x1a\xb1\x44\x21\xdb\x0b\x6a\xb2\x37\x9d\xd4\xad\x6f\xc0\x37\xce\x98\x1b\xb3\x35\x53\x79\x25\x59\x0b\xad\xa1\x63\xce\xfe\x6c\xad\x29\x96\xe8\x9a\xd3\xf9\xcc\xaf\x30\x05\xa1\x27\x50\xc7\x82\xe7\x46\x55\x9f\xf0\x5c\xb0\xda\x42\xd8\x96\x44\x62\xb0\x38\x5a\x25\x52\x59\x32\xbb\x4d\xcd\x6e\x71\x8d\x34\x6c\x81\x3d\xe9\x5b\xe4\x84\x40\x4e\x08\xe4\x84\x40\x4e\x08\xe4\x84\xd0\x24\x7c\x89\xdd\x3e\xa0\x19\x21\xc2\x93\x08\x4f\x22\x3c\x89\xf0\x24\xc2\x93\x08\xcf\xe3\x22\x3c\x89\x83\x20\x0e\x82\x38\x08\xe2\x20\x7a\xe7\x20\x36\xe0\xe9\x51\x99\x53\x99\x0b\xcc\x34\xcb\x8f\xbc\xb2\x79\xee\x1e\x2e\x31\x5c\x54\xe4\xc1\x2d\x3a\xc9\xa7\x22\xc6\x6b\x4b\xe7\x99\xe0\x31\x4c\x4f\x18\x8e\xec\xc5\x30\xb2\xcf\xc6\xea\x11\xb0\x4f\x45\xbd\x63\x37\x00\x57\x66\xf5\xad\xbe\xcd\x14\x3e\xad\xda\x60\x87\x9f\x75\x61\xe9\x0b\xe6\x63\x3f\xe0\xc4\xff\x65\x71\x0e\xda\xb4\x3d\xff\xf6\xb0\x69\xa2\x4a\x9c\x64\xc5\x82\xff\x49\xea\xfc\x14\xf9\x21\x23\xc9\x86\xcd\x09\x6d\x91\x2a\x8f\xf2\xc9\x1d\x5c\x3e\x39\xa5\x3b\x66\xfe\x50\x33\x63\xbc\x35\xc9\x87\x2f\x74\x4e\xf3\x0d\x36\x13\x47\x75\x5c\xed\x04\x1f\x05\x4f\x1d\x41\xf0\x14\x65\xe0\xa0\x0c\x1c\x0d\x9d\x19\x38\x3c\x3b\x94\xcc\x1b\x5b\x75\xf9\xbb\xb5\x5d\x46\x47\xe0\xe1\xf4\xf9\x98\x10\x30\x40\x8f\x21\x22\xe0\x17\x6c\xdb\xf4\x20\x36\x43\xfc\x8e\xb2\x84\xb4\x87\x58\xd5\xcc\x20\x7b\x87\x58\x07\x92\x0f\x84\x60\x55\x75\x91\x07\x0b\xab\x28\x02\xfb\x84\x22\xb0\x29\xd4\x8c\x42\xcd\x28\xd4\x8c\x42\xcd\x48\x23\x5c\x76\x8a\x86\xa4\x11\x92\x7a\xb5\xff\x00\x94\x41\x2a\x58\xde\xfa\xdc\x4f\xdd\xac\xbc\x96\x27\xba\x9d\x8e\xd4\x5c\x25\x6b\x99\x86\x44\x02\x83\x0e\xdf\x8a\xc3\xd7\x73\x3d\xac\xbd\x90\x7b\xf3\x75\xb0\x96\x76\x81\xea\x5f\x35\x8f\x99\xf8\x4a\xaa\x7f\xd5\x4d\xfd\xab\xed\xee\xb7\x25\xd5\xae\x8e\x8a\x65\xa5\xfa\x56\x64\x18\x3c\x3d\xbe\x95\xea\x5b\x75\xb9\x6f\xa8\xbe\x15\xd9\x53\x48\x3d\x3a\xf0\xba\x56\x1d\x28\x48\x7d\xd5\xb3\xda\xd6\x3a\xb1\xa4\x7a\xd5\x51\xe1\x37\xf2\x92\x23\xd4\x76\x2a\xa8\x6d\x40\xe0\x88\xee\x70\xff\x0b\x79\xc9\x1d\x33\xec\xe8\xb7\x2e\xd5\xfe\x1c\xce\x2e\xb1\x48\x66\xd5\xef\xac\x1f\x6a\x65\x79\x31\xce\x8e\x48\x96\x86\xca\x9b\x24\x87\xe8\x50\xaf\x38\xd4\x44\xb5\x10\xd5\x42\x54\xcb\xf3\x47\x63\xff\x45\x54\x4b\x95\x6a\x79\xee\x7d\xb7\x9e\x74\x39\x96\x52\xd3\x44\xbd\x90\x12\x7f\x7a\x4a\x3c\x51\x2f\x5d\xee\x1b\xa2\x5e\xc8\x6c\x43\xea\x12\x51\x2f\x7d\x51\x2f\xcf\xb7\x5e\xac\x27\x61\x8e\x05\xcf\x11\x15\x43\x28\xee\x54\x50\xdc\x80\xc0\x12\xdd\xe9\xfe\x17\xa2\x62\x8e\x19\x86\x1c\x01\x15\xa3\x45\x90\x89\x5c\xef\x28\xda\xbf\x12\x07\xa9\xc6\xec\x06\xbe\xbd\x02\xab\x54\x43\xfe\xdf\xf9\x57\x4b\xd0\xb2\xd8\x00\x45\xfd\x53\x01\x0e\x2a\xc0\x41\x05\x38\xa8\x00\x07\x15\xe0\xd8\x8b\xc2\x41\x7a\x61\xeb\x85\xda\xa7\x5e\x48\x75\x52\x28\x07\xcd\x09\xe7\xa0\xa1\xa2\x38\x54\x14\x87\x8a\xe2\x50\x51\x1c\x2a\x8a\x43\x45\x71\xa8\x28\x0e\xa5\x66\xa3\xd4\x6c\x94\x9a\x8d\x52\xb3\xd5\x77\xe4\x4e\x6b\x3f\x51\x05\xae\x21\xac\x02\x55\xe0\xa2\x0a\x5c\xc7\x56\x81\xab\x91\x9f\x23\x3a\x7e\x43\x9a\xce\xfa\x44\x9d\x20\xcd\x8d\x77\x71\x89\x93\xfa\xe3\xbc\x17\xf8\xdc\xbd\xe6\x61\x44\x4b\x58\x66\xb5\x67\x07\xd9\xd5\x98\x99\xee\xae\x27\xaf\xcd\xeb\x75\x2f\xbb\xed\x09\xeb\x5a\xdf\x00\x8e\x41\xc1\xbc\x1f\x95\x7a\x88\x79\xf6\xa0\x4b\x2f\x6d\xec\x30\x58\x60\xb4\xb5\x13\xcd\x52\xa3\x4c\xfc\xf8\xe5\xcb\x2f\x9f\xaf\xbe\xfe\x72\x77\x56\xda\x40\x10\x6e\x29\xc0\xac\x32\x4e\x23\x01\xc6\x8e\x7b\xdf\xaa\x01\x18\x72\x92\xa0\x0d\xd8\xa0\xe0\x88\x4f\x00\x7f\x96\x8f\x18\x7d\xb3\xaa\x2b\xa2\x61\xe1\xa5\x66\xa1\xd4\x66\xbc\x52\x25\x25\x7b\x54\x61\x3d\xac\x81\x63\xbe\x21\x6f\x72\x30\xba\xb4\xd1\xdb\x1d\xb2\x35\xb2\x2f\x7b\xe4\xd1\x88\x25\x0a\x89\x5d\xd0\x88\xbd\x95\xa4\x6e\x68\x03\x6a\x71\xc6\xdc\x98\xad\x45\xca\xeb\xc3\x5a\x68\x28\xf5\xe7\x4d\xcd\xd6\x70\x62\x39\xad\x39\xf5\xce\xfc\x0a\x53\x10\x7a\xae\x74\x2c\x78\x6e\xb4\xf2\x09\xcf\x05\xab\x2d\x84\x6d\x49\x24\x06\x76\xa3\x01\x22\x95\x25\x89\xdb\xd4\xec\x16\x37\x46\xc3\x16\xd8\x93\x6a\x45\xfe\x06\xe4\x6f\x40\xfe\x06\xe4\x6f\x40\xfe\x06\x4d\xc2\x97\x88\xec\x03\x9a\x11\xe2\x36\x89\xdb\x24\x6e\x93\xb8\x4d\xe2\x36\x89\xdb\x3c\x2e\x6e\x93\xe8\x06\xa2\x1b\x88\x6e\x20\xba\xa1\x77\xba\x61\x03\x4a\x1e\x95\x39\x95\xb9\xb0\x4a\xb3\xfc\x48\x21\x9b\xe7\xee\xe1\x12\xc3\x45\x45\xca\xdb\xa2\x93\x7c\x2a\x62\xbc\xb6\x74\x9e\x09\x1e\xc3\xf4\x84\xe1\xc8\x5e\x0c\x23\xfb\x6c\xac\x1e\x01\xfb\x54\xd4\x3b\x76\x03\x70\x65\x56\xdf\xea\xdb\x4c\xe1\xd3\xaa\x0d\x76\xf8\xb9\x10\x96\xbe\x60\x3e\xf6\x03\x4e\xfc\x5f\x16\xe7\xa0\x4d\xdb\xf3\x6f\x0f\x9b\x11\xf2\xd1\x8e\x68\xba\xff\x24\x75\x7e\x8a\x1c\x90\x11\x61\x03\xe5\x7d\xb6\x48\x4d\x47\x79\xdc\x0e\x2e\x8f\x9b\xd2\x1d\xb3\x7b\xa8\x8b\x31\xbe\x9e\xc8\xc3\x27\xbb\xa3\xf2\x06\x9a\x23\xc3\x0e\xa8\x9d\x70\xa3\x20\xa8\x23\x08\x82\xa2\xe4\x18\x94\x1c\xa3\xa1\x33\x43\xc5\x5e\x87\x91\x15\x63\xd3\xbe\xee\xb5\xc0\xec\x66\x9d\x3d\x26\x40\x0b\x80\x62\x50\x80\xf6\x05\xdb\x38\x6b\x87\xcd\x9c\xbe\xa3\xe4\x1d\x2d\xa0\x52\x35\x61\x07\xa5\xe9\x20\x94\x74\x0c\x28\x89\x02\xa3\x4f\x28\x30\x9a\x22\xc0\x28\x02\x8c\x22\xc0\x28\x02\x8c\x14\xbc\x65\xa7\x68\x90\xe1\x16\xfb\x51\xa3\x28\x5a\x64\x69\xb4\xc8\xb0\x54\x2b\x6f\x46\xee\xa7\xa0\xd4\x3c\xc0\x5a\xab\x24\x35\xd5\x8f\x6a\x50\x91\x48\x62\x90\xe5\x62\xe7\xb5\xa2\x76\xcd\xc4\x55\x8b\x44\x35\x7d\x9b\xaa\x43\x35\x8f\x99\x58\x45\xaa\x0e\xd5\x4d\x75\xa8\x0d\x2f\xaf\xc6\x62\x50\xc7\xc2\x85\x52\xfd\x27\x32\xfb\x9d\x1e\x39\x4a\xf5\x9f\xba\xdc\x37\x54\xff\x89\xac\x25\xa4\xfb\x1c\x66\xe1\xa7\xe7\x69\x3f\x7d\x55\x7c\xda\xd8\xbc\xd0\x58\xe0\xe9\x58\x30\x1a\xf9\xab\x11\x24\x3b\x7a\x48\x36\x20\xe4\x43\x17\xb4\xff\x85\xfc\xd5\x8e\x0b\x4c\xf4\x59\xbe\xa9\x7f\x0f\xb0\xec\x51\x06\x82\x07\x81\x2a\x92\xbd\xd5\x6f\x82\x3e\x5c\x61\x1f\x5a\xba\x85\x35\xd7\x71\x5a\xd6\x10\x39\x8a\x51\x7e\x25\xca\xaf\x44\xf9\x95\x28\xbf\x12\xe5\x57\xda\x8b\xce\x41\xaa\x61\xeb\x85\xa2\x7a\x4e\x43\x4a\x83\x45\x6e\xcb\x27\xe4\xb6\x4c\x39\xcf\x28\xe7\x19\xe5\x3c\xa3\x9c\x67\x94\xf3\x8c\x72\x9e\x51\xce\x33\x8a\xe6\xa1\x68\x1e\x8a\xe6\xa1\x68\x9e\xfa\x8e\xa4\x7a\x4e\x94\x60\x91\x12\x2c\x52\x82\xc5\x03\x4f\xb0\xd8\xc8\xd7\x11\x23\x4f\x11\x7a\xf5\x17\x06\x50\xcf\x69\x09\xaf\x3b\xe8\xba\x4e\x2d\x49\xed\xe6\xfa\x4e\xcf\x25\xb2\xa9\xce\x13\xd5\x79\xc2\x9f\xa8\xce\x13\xf9\x21\x90\x1f\x02\xf9\x21\x90\x1f\x02\xf9\x21\x10\xc1\x4d\x9c\xe7\xfa\x19\x21\xce\x93\x38\x4f\xe2\x3c\x89\xf3\x24\xce\xf3\x84\x39\x4f\xa2\x21\x88\x86\x20\x1a\x82\x68\x08\xaa\xf3\x44\x75\x9e\xa8\xce\x93\xff\x65\x83\x78\xc8\xaa\x09\x9f\xea\x3d\x35\x3c\x36\x0c\x5e\x88\xea\x3e\x9d\x42\x86\xb6\x3e\xeb\x3e\xb5\x24\xfa\x96\xd5\x7f\xda\x4f\xcc\xea\x0e\xf2\x6a\xcc\x0d\xac\x9d\xf0\xa3\x20\xaa\x23\x08\xa2\xa2\xfc\x1a\x94\x5f\xa3\xa1\x33\x43\xc7\x68\x87\x92\x67\x63\xbb\x3e\xef\xb9\x3e\xd4\x36\x9d\x3e\x26\x20\xdc\x77\x9d\xa8\xed\x81\xf0\x0b\xb6\x75\xb6\x90\xdd\xd7\x8d\xda\x22\x51\xc8\xfe\xa1\xd6\x81\xa4\x07\x21\x74\x55\x5d\xe4\xc1\xa2\x2b\x0a\xc8\x3e\xa1\x80\x6c\x8a\x3c\xa3\xc8\x33\x8a\x3c\xa3\xc8\x33\x52\x0c\x97\x9d\xa2\x41\x29\x86\xa4\x64\x0d\x20\x22\x65\x98\x6a\x96\x37\x45\xef\xa6\x76\x54\x4b\x45\xa9\xb9\x86\xd4\x52\x35\x89\xa4\x06\x1d\x40\xb6\xe2\x00\xf6\x5c\x53\x6a\x3f\x6c\xdf\x7c\x6d\xa9\xe5\x7d\xa0\x1a\x53\xcd\x63\x26\x06\x93\x6a\x4c\xf5\x53\x63\xaa\xe5\x25\xb7\xa4\xd6\xd4\x71\xf1\xae\x54\x73\x8a\x4c\x84\xa7\x47\xc0\x52\xcd\xa9\x2e\xf7\x0d\xd5\x9c\x22\xcb\x0a\xe9\x48\x87\x5e\x7b\xaa\x0b\x2d\x69\x57\x35\xa8\x5a\x9b\x29\x96\xd4\xa2\x3a\x2e\x0c\x47\xbe\x73\x04\xdd\x4e\x06\xba\x0d\x08\x21\xd1\x45\xee\x7f\x21\xdf\xb9\xe3\x06\x1f\xfd\xd6\xaa\xda\xa7\x17\xda\x25\xa4\x62\xa9\xfa\xa2\x6d\x61\xeb\xa5\x5b\xb2\x95\xa5\xb3\xe1\x86\xec\xd9\x6e\x7b\xa2\xf7\xe2\xfa\xa5\x58\x7a\x27\xf6\xbc\x20\x55\x56\xe4\xd6\x9c\xbc\xaf\xb8\x11\x89\x13\x21\x4e\xe4\xe0\xa3\xba\x30\xab\x17\xe4\xa1\xe8\x34\xbc\x0b\x0e\xca\x11\xe8\xa9\xe6\x68\x60\xa2\x13\x48\xd6\xf8\xf8\xf6\x62\x4e\x04\x2c\x07\x56\x84\xb4\x77\x30\xc9\x03\x40\xdc\x5d\xf5\x7d\x2f\x0e\x55\xdd\x74\xfe\xa8\xd4\x86\x8e\xa2\x57\x6a\x33\x6b\x26\x5c\xaa\x66\x65\x62\x39\xa6\xe8\x41\x95\x98\xab\x7b\xbb\x9f\x44\xc1\x2b\x6e\x96\x15\x19\x82\xb7\xb9\x4b\x28\x35\x30\xa5\x06\xc6\x9f\x28\x35\x30\xa5\x06\xa6\xd4\xc0\x94\x1a\x98\x52\x03\x53\x6a\x60\x4a\x0d\x4c\xa9\x81\xd7\xcf\x08\xa5\x06\xa6\xd4\xc0\x94\x1a\x98\x52\x03\x53\x6a\x60\x4a\x0d\x4c\xa9\x81\x29\x35\x30\xa5\x06\xa6\xd4\xc0\x94\x1a\x98\x52\x03\xaf\xe4\xd9\x96\xbe\x70\xda\xa9\x81\x29\x27\x70\xc3\x63\x5d\x39\xa1\x6d\xeb\xf8\x4e\xc9\x80\xc9\x6d\xa4\x6c\x76\xdb\x64\xc0\xdb\xba\x89\x1c\x81\x6b\x48\x4d\xc8\x51\xec\x02\xc5\x2e\x1c\xb9\x8f\x26\xc5\x2e\x1c\x8a\x47\xd5\x76\xb2\x69\x18\x41\x0b\x03\xf7\x99\xda\xb2\xb7\xc7\x84\x6b\x77\x92\xe2\xb7\x7f\x57\xa8\x3d\x25\xf5\x5d\x01\x99\x56\x66\xf3\xdd\x1d\x64\xa2\x34\xbe\x04\x96\x28\x8d\x2f\xa5\xf1\xdd\x62\xb1\x29\x8d\x2f\xa5\xf1\xa5\x34\xbe\x94\xc6\x97\xf4\xbc\x65\xa7\xa8\x4b\x3d\x6f\x05\xdc\xba\xc9\x79\x5e\xb4\xc5\x59\x7b\xd2\xa5\x3a\xeb\xfe\x31\x29\x57\x3b\x4a\xed\xbb\x25\x6d\xb0\xc3\x9c\xbe\x2b\xf4\xa4\x15\xc9\x7c\xcf\x48\x68\x90\x05\x63\xed\x21\xdb\x45\xfa\xde\xdd\x11\x73\x0d\x79\x7b\x37\x67\xdc\x86\x42\xb6\x11\xcb\x78\x70\x2c\x23\x25\xec\xdd\xf8\x06\x5b\x95\xa9\xf7\xf0\xb9\x51\x4a\xd1\x4b\xe6\xbf\xd3\xe3\x4a\x29\x45\x6f\x97\xfb\x86\x52\xf4\x92\xd5\x84\x14\xa0\xfa\x24\x1e\x56\x6e\xde\x6d\x55\xa0\x9d\x26\xe5\x5d\x69\x67\x58\x95\x8d\xf7\xf0\x71\x1a\xf9\xb0\x11\x2e\x3b\x7e\x5c\x36\x20\xf8\x43\xb7\xb4\xff\x85\x7c\xd8\x8e\x0d\x52\xec\x20\xe3\xee\xce\x9c\xc2\x2e\xd3\x4c\x7d\x9b\xf5\xed\x1a\x16\xa8\x24\x11\x41\xce\xde\x7f\xf8\xf4\xe1\xf6\x43\xa9\x1e\xe6\x8a\xc1\xf7\xcd\x05\xd5\xc2\xd1\x1e\x5b\x41\x94\x82\x6e\x56\x0b\x58\xe5\x1a\x86\xd3\x42\xe8\x2c\xed\xfa\xce\x04\x43\x4d\xbe\x9e\xe0\x49\xb2\x0b\xda\xfb\x69\x82\x4d\xe1\x3c\xf2\x06\xc2\x07\xba\x23\xf1\xd7\x0f\xb7\x9d\x9c\x87\xbf\x8a\x9c\x0e\x43\x53\x2f\xe8\x30\x74\x7e\x18\xa6\x82\x87\xfd\x9c\x86\x9f\x3f\x5c\xbd\xef\xe4\x38\xfc\x2c\x78\x48\xe7\xa1\xa9\x17\x74\x1e\x3a\x3f\x0f\xca\xbe\xdd\xcb\x91\xf8\x72\x7d\xfb\xf1\xcb\xaf\x37\x9d\x9c\x0a\x3b\x4c\x3a\x18\x4d\xbd\xa0\x83\xd1\xf9\xc1\xe8\xc6\xc7\x63\x79\x47\xc8\xdf\xa3\x79\xcc\x83\xf2\xf7\xb8\xe6\x39\xe6\xe0\x9a\x0a\x96\xf2\x0c\xb2\xa8\xfd\xf6\xf5\x93\x35\x94\xda\x74\x55\xcc\xea\xa5\x4c\x24\x61\xaa\x64\x92\x6b\x33\x2b\xe3\xb1\xfc\x26\x34\x9a\xcd\x2a\xa9\x57\x73\x05\xce\xf6\x2e\x66\x21\x28\xb2\x4c\x24\xb9\x95\x8a\x2e\x1b\x51\xae\x5c\x9b\xc0\x77\x31\xf1\x8d\xc7\x69\x64\xbd\xe5\x9f\xa6\x2a\xf2\xf6\x50\xd3\x1b\xc8\x95\x93\xe7\xe9\xf7\x97\x97\x91\x0a\x78\x34\x55\x3a\x6f\xd0\xa4\xcd\x31\x3b\xd7\x33\x9d\x8b\xb8\xd4\xa4\x45\xc4\x75\x2e\x03\x2d\x78\x16\x4c\xcf\x23\x35\x99\xc8\x64\x72\xf9\x7f\xf1\xbf\xff\xd7\x7f\xfd\xa5\xd0\x22\xfb\xfe\x41\xc6\xc1\x74\x76\xc1\xdc\x6c\x34\xff\xbc\xa9\xbb\xcb\xc2\x2e\xd8\x87\xb3\xcb\xa6\x37\xda\xf5\xd5\xed\xbb\x9f\x3b\xb9\xcf\x80\xf7\xa5\xdb\xac\xa9\x17\x74\x9b\x75\x7f\x9b\x75\x9f\x65\xc2\x9d\x88\x2f\x37\xdd\x58\x01\xae\x95\x26\x33\x40\x63\x2f\xe8\x3c\x74\x7f\x1e\xba\xa6\xaf\xfd\x71\xf8\xad\xa3\xd3\x50\xd0\x61\x68\xec\x05\x1d\x86\xae\x0e\xc3\x0b\xf6\x4c\xea\xe5\xf2\xbf\x0d\x88\xeb\x3d\x38\x7f\xc7\x0c\xcc\xef\x32\x9f\x5e\xcf\x83\x53\x3a\x68\x74\xd0\x4e\x9b\x89\xa1\x43\x41\x87\x82\xf5\x73\x28\x0e\x9a\x91\xa1\x73\x41\xe7\x82\xf5\x73\x2e\x8e\x83\x99\xa1\x03\x42\x07\x84\xf5\xa4\xc3\x13\x43\x43\x0c\x8d\xe9\xaa\x4b\xaf\xee\xf2\xc4\x6c\x36\xa4\xc5\x5f\x88\x6f\x22\xbe\xe9\x94\xf8\x26\xba\xa3\xe9\x8e\x66\x3d\xdd\xd1\x87\xcc\x3b\xd1\xb9\xa0\x73\xc1\x7a\x3a\x17\x07\xcb\x3f\xd1\xa1\xa0\x43\xc1\x3a\x3d\x14\x2f\xd8\xf6\x3c\x94\xc6\x1c\x74\x15\x06\xaa\x9f\xec\x67\xf8\x1d\xa7\x3a\x76\x94\x07\xcd\x26\xd0\x6b\x71\x90\x28\xcc\xf0\xd4\x23\xf7\x28\x1b\x1a\x23\xdb\xcb\xc0\x6c\x2f\x94\x0d\x6d\xc9\x83\x87\x90\x0d\x6d\xfb\x1b\x6d\x55\x5e\xb4\x86\x2b\xed\x20\xb3\x6e\x50\x76\x34\xca\xc2\x71\x7a\x59\x38\x28\x3b\x5a\x97\xfb\x86\xb2\xa3\x6d\x34\xb1\x8d\xb7\x18\x29\x44\xa4\x10\x51\x76\xb4\x32\x3b\xda\x73\xec\x10\xab\xf2\xa4\x1d\x0b\x6e\xa3\x6c\x69\x84\xd3\x8e\x1f\xa7\x0d\x08\x0e\xd1\xad\xed\x7f\xa1\x6c\x69\xc7\x06\x31\x0e\x33\x5b\xda\xee\xaa\x65\xfe\xda\x60\x91\x6c\x55\x2f\x73\x77\x40\x83\xea\x64\x12\xc4\xa0\x3a\x99\x54\x27\x73\x8b\xc5\xa6\x3a\x99\x54\x27\x93\xea\x64\x52\x9d\x4c\xd2\x8e\x96\x9d\x22\xaa\x93\x49\x75\x32\xd9\x0a\x05\xaa\xef\x3a\x99\x4d\xfa\xc4\xd0\x2a\x65\xb6\xd1\x91\x1a\x7c\xc4\xc8\x2b\xac\xb5\x85\xa2\x9c\xb3\x13\x3c\x62\xbd\xfa\x85\x3d\xf7\x7c\x3d\xd3\x33\x6c\xc9\xe7\x0f\xc9\x37\x8c\x5c\xa4\x96\x3c\x78\x08\x2e\x52\x9b\x0b\xf2\x26\xd7\xa8\xc3\x27\xd5\xc8\x19\x8a\x2c\x60\xa7\x47\xb2\x91\x33\x54\x97\xfb\x86\x9c\xa1\xc8\x70\x40\x7a\xc0\xe2\x34\x1e\x88\x3b\xd4\xb3\x35\x81\xdd\x94\x8b\x6c\xa7\x6c\x37\x39\x42\x1d\x3e\x4a\xdb\xfa\x1c\x10\x2e\x23\x5c\x76\x40\xb8\x6c\x40\xf0\x87\x6e\x69\xff\x4b\x7f\xb7\xf4\x7e\xdd\x9f\x4e\x1b\x54\xf4\xe9\x00\xb5\x25\xa4\x78\xc1\xda\xb8\x40\x5d\x3a\x7a\xb4\xea\x0b\xb5\x85\x39\x92\x6e\xbf\x56\xa6\xc8\x86\x9b\xaf\x67\xc3\xea\x89\xde\x77\xeb\x97\x62\xe9\x5d\xd7\xf3\x82\x90\xe1\xbe\xf5\x12\xf5\x6b\xb8\xef\x4b\xd3\x72\x12\x75\x31\xf8\x64\x7b\xad\xeb\x27\x27\xa5\x4f\x4b\xfb\x22\xdc\xd8\xcf\xbc\x12\x6e\x24\xdc\xf8\x4c\xdc\xb8\xef\x84\x42\x5b\xba\x8b\x50\x2a\x21\xfc\x85\xce\x27\x39\x8d\x10\xf6\x24\xa7\x91\xe1\xe5\xd5\xd9\xd6\x7d\xe4\x58\x22\xb3\xc9\x89\x84\xc8\x8a\xd3\x33\xde\x90\x13\x49\x97\xfb\x86\x9c\x48\x88\x9e\x22\xbd\x60\x71\x1a\xc9\x89\xa4\x9f\xac\x3a\xdb\x1b\x36\x8f\x05\xb5\x91\x53\x09\xe1\xb4\x53\xc0\x69\x03\x82\x43\x74\x6b\xfb\x5f\x88\x1c\xb0\x2d\x1f\x15\xc8\x38\x18\x72\x40\x85\x73\x5b\xbc\xcf\x5c\x3a\x95\xbc\x03\x6a\xcc\x7e\x55\x61\xdb\x94\x3a\xef\xfc\x8b\xf5\x97\x28\xaf\x8e\x4d\xd8\x62\xee\x0b\x99\x14\xc2\xea\xd0\x95\xd4\x2c\x46\x8d\x7b\x32\x50\x24\x13\x79\x26\xc5\xa3\xb9\xa9\x62\x95\x09\x0b\x15\x74\x99\x43\x43\x8b\xec\x51\x64\x17\xec\x46\x26\xe0\x74\x5c\xcd\xba\x82\xbf\xb9\x5b\x67\xc4\x82\x48\xfa\x3c\x10\x70\x61\xb9\xac\x21\xbe\x23\xf8\x2a\x34\xce\x0d\x0c\x7a\x94\xaa\xd0\x0c\x6e\x1b\x87\x52\xe0\x62\x95\xa1\xb9\x4d\x03\x1e\xd9\xdf\x2a\x75\xdd\x5e\x89\x6f\x81\x48\x73\x9f\xd4\x05\x9b\x54\x63\xff\x91\xd7\x3e\x2d\x84\xed\x9f\xe9\x4e\x26\x20\x97\x0b\xaf\x77\x45\xe6\x2c\x54\x42\x03\xca\xf2\x38\xca\x26\x98\xa9\x02\xe2\xfa\x6b\xe6\x0d\xb8\x9e\x45\xc6\x10\x8a\x3d\xd9\xc4\x1a\x61\x21\x8c\x7e\x2e\xbe\xa5\xd2\xa6\xcb\x79\x35\x11\x89\xc8\xc0\x54\x3a\x36\x98\x2c\x57\x6c\x2c\xc7\xb9\x10\x09\x8b\x65\x52\xe4\x42\xbf\x36\x77\x3f\xf4\x6d\x2c\x27\x2e\xcb\x0e\x62\x06\xa6\x92\xca\x58\x46\xd5\x71\x39\x6c\x97\xaa\xc4\xe2\x11\xce\xfe\xfc\xf6\x0d\xfb\x6a\xb3\x61\x7c\x30\x5d\x10\xa1\x45\x7c\xb9\x9a\x60\x07\xed\x93\x7e\x44\xb9\x7a\x10\x89\x1f\x32\xae\x21\x4b\x84\x08\x35\x3e\x05\xb0\x33\xc9\x21\x73\xca\xc8\x4c\x18\x20\x97\x4c\xe8\x9c\x67\xb9\x79\x47\x66\xf0\x1b\x34\xac\x8a\x7c\x7e\xc5\x01\x2c\x5c\xb0\x2f\xe6\xd3\x4f\xd2\x25\x74\xb1\x5f\x31\x2b\xa3\x45\x12\x32\x9e\xa0\xed\x01\xda\x71\x15\xf7\x3c\xc4\x82\x1e\x9a\xe5\x11\xf2\xb1\x0a\xbd\xcc\x60\x61\x70\x6b\xa7\x05\xda\x85\x0e\x83\xdd\xc3\x6d\xee\x44\x7c\xcb\xd9\x83\x98\x61\xba\x12\xff\xe7\xc8\x40\xf2\x9c\xe9\x84\xa7\x7a\xaa\xf2\x11\x7b\x9a\xca\x00\x0a\xf2\xc9\xa4\x32\x21\xfe\x79\xbf\x91\x6d\xf7\xf1\x08\x9d\xfb\xf4\x36\x00\x09\x79\x26\x58\x80\x17\xeb\xc8\x22\x7d\xf3\x2f\x95\xb9\x3c\x49\x8c\x8f\x73\x81\x7b\x7a\x2c\x33\x9d\xd7\x27\x03\x11\xb5\x2d\x85\x18\xba\x1c\x20\x0e\x92\x00\xfe\x33\x1b\xd2\xfc\x2f\x2e\xca\x83\x98\x01\x50\xaf\x34\x7c\x77\xe6\x86\x7c\x77\x76\x71\x97\xdc\x25\xf3\x56\x3a\xc8\x70\x54\xa4\xa9\xca\x00\xe2\x1a\x01\xf1\x04\xe6\x1d\xa9\x01\xad\x5d\xb0\x77\x95\x23\x8e\x1b\x80\xdb\x47\x2a\xb3\x87\x93\x00\x7b\xf0\x6f\x78\xff\xd8\x63\x93\x89\xbc\xc8\x92\x32\xe3\x8b\x5d\x31\xd4\x41\x72\x16\x4b\xad\x19\x4f\x66\xf3\x8a\xd0\x36\x10\xd5\x6d\xbf\xfd\x68\x0f\xa4\xe4\xb5\x5e\xa8\x7d\x2a\x79\x57\x4c\x8b\x32\x75\x8f\x11\x68\x99\x0c\x50\x7c\xc1\xd1\x53\xe3\x72\xc3\xfa\x4c\x55\x33\x7b\xb8\xd0\x76\x3a\x9f\x36\x4c\x3c\x8a\x6c\x96\x4f\x65\x32\xd9\x5a\xad\xba\xb1\x3d\xda\xcf\x8c\x50\x96\xb7\x13\xca\xf2\xf6\xac\xed\x1f\xf1\x7b\x11\x75\xba\xfd\xa1\xc5\xfd\x6e\xff\x48\xc6\x32\x47\x73\x4f\xcc\xbf\xc9\xb8\x88\x59\x52\xc4\xf7\x66\x93\x8c\xbd\x30\xd5\x38\x5b\x66\x62\x90\xcc\xc2\xd9\x0a\x78\x14\xc1\x96\x05\x18\x2d\x4d\x5f\x30\xa1\xd9\x22\x36\x31\xe0\xdb\xfc\xed\x0f\x77\x4b\xfd\xe1\x72\xaa\x25\xe5\xec\xbb\x74\x67\xb8\x51\x71\x77\xc2\xfd\x11\xf0\xc4\x6d\xe7\x12\x09\x69\x1e\x9b\x53\x26\x73\xe9\x21\x33\xf6\xd2\x80\x7b\x51\x62\x1d\xf3\x69\x1c\x8b\x59\xb4\x0b\x76\x23\x72\x40\x44\x66\x10\x66\xec\x08\x95\x71\x6c\xe2\x09\x40\x03\x4f\xaa\x37\x84\x81\x29\xb1\x2a\x12\x68\x06\x47\xf9\xaa\x48\xcd\xc7\xf0\x40\x9b\xbf\xbc\x76\xd8\x44\x3c\x1a\x98\xc4\xe1\x72\x72\x6f\xbb\x9d\x64\x70\xc9\x58\x46\xb9\x30\x08\xd5\xa0\x46\x73\x47\x39\x05\xc2\x4a\x97\x39\x1d\x02\xef\xd3\xc0\xbb\xbb\xcc\x23\x4c\x4c\xbe\x96\x8b\x2c\x96\x89\xf0\x58\x7c\x4e\xa5\x01\x24\xf4\xc8\x65\xc4\xef\x23\x71\x01\x89\xe3\x8d\x3e\x61\x86\x1c\x4c\x95\xd2\x02\x8e\x7e\xae\x1c\x02\xb2\x6b\x61\xa6\x85\x67\x93\x22\x86\xb1\x24\xa1\xbb\x6d\x61\x92\xcc\xd8\x6c\x7f\x7c\xd3\xe5\xec\x7e\x1c\x33\xbf\xa5\x4a\xa9\xe4\xb4\x93\xda\x00\xa4\x66\x22\x4e\xf3\xd9\xbc\x1a\xc5\xb5\x51\xb2\x71\xe5\x13\xb5\x72\x40\xab\xa0\x9c\x1c\xd7\x80\x1c\x62\x3f\xbf\x2f\x27\x05\xcf\x78\x92\x0b\x07\x52\x4a\x49\xaf\x4b\x21\x00\x78\xb0\x00\xd8\xe0\xfb\xee\x61\xa9\x57\xd8\x72\xc5\xa4\xd6\x05\xee\x2a\xf3\x70\x24\xca\x13\xe2\x75\x04\xb7\xe1\xce\x9d\xbd\x74\x64\x86\xe7\x3e\xb9\x19\x4e\x76\x10\xd9\xe0\x73\xad\x0b\x11\x36\x82\x65\x83\x2b\x75\x71\xaf\xcd\xc3\x49\xee\x47\x10\x56\x98\x53\x98\x41\xb3\x56\x2a\x16\xb9\x8c\x85\x19\xfb\x58\x64\x19\xa4\x97\x34\xb8\x7a\x4e\x1f\x2a\xd5\x03\xb3\xa2\x22\xd1\x45\xe6\xa6\x8f\x3b\x05\xc7\x19\x83\x71\xd6\x70\xc8\x70\x30\x41\x95\x61\x3a\xe6\x51\x24\x32\x16\x4c\x8b\xe4\x01\x68\x18\xce\x8c\x10\x65\x11\xcf\x26\x6e\xa1\xe1\xc4\x63\xf3\x66\xd0\x46\x63\x12\xb0\xf1\x52\xa5\xb5\x34\x1b\xce\x4e\x1b\x6c\xb8\xea\xf9\x42\xc7\x9c\xd0\x5c\xe9\xb8\x1c\xf0\x1d\x11\xe2\x7a\x80\xf2\x6c\xe1\xb9\xdd\xc3\xf6\x2e\x84\x5e\x3f\x71\xed\x30\x2c\xb3\x3b\xc2\xcc\xc9\xa2\x7e\x82\x5a\x3b\xd7\x66\x81\x83\x22\xc2\xac\x9f\xe5\xb6\xd9\xea\x2e\x30\x13\xb5\xa7\x6b\x91\x92\x9f\x52\xf2\x53\x4a\x7e\x4a\xc9\x4f\x77\x82\x38\xeb\x66\x12\x2d\x72\x77\xcb\xe4\x19\x97\x46\x4a\x24\xec\xc9\x4c\x86\x7b\xd2\x89\x6c\xf3\x98\xbb\xf8\xfc\xd6\xcb\x9c\x04\x30\xf0\x46\x78\x0e\xb0\xc2\x6f\x49\x75\x19\xaa\x40\x5f\xc2\xc5\x66\xe0\xd4\x25\x5c\x4d\xe7\x3c\x95\x97\x3c\x95\xe7\x81\x4a\xcc\x5e\xd1\x97\xff\xe2\xb7\x95\xff\xe0\x18\xee\xe0\x9c\xcb\x48\x03\x7e\xa8\x62\x7f\xf0\x0c\xda\x62\x1d\x6a\x13\x30\x88\x55\xf8\x0c\x48\xc9\xa3\x49\x0d\xa2\xa2\xbe\x52\x46\x4b\x48\xd3\x48\x22\x36\xf0\x00\x07\xfd\xaf\xa4\x66\x53\x39\x99\x82\x5b\x56\xa0\xe2\xd8\x6c\xdd\x10\x37\x75\xe3\xb7\xac\x45\xde\x4c\x70\xd9\x92\xc1\x5b\x99\x68\xfa\xb0\x79\xf6\x30\xd7\xf7\x73\xcd\xcf\x66\x87\x8b\x7c\x2b\x63\x61\x90\xa7\x33\x13\x98\x89\xbe\x44\x50\x8c\xba\x1b\xa0\x3f\x40\x1e\x1a\x65\x98\x33\x84\x38\x85\x83\x47\xd1\x88\x65\x62\xc2\xb3\x10\x48\x7b\x03\xd7\x92\x19\xe3\x41\x2e\x1f\x65\x3e\x33\xb7\x82\x4c\xdc\x7f\x6d\x23\x94\x72\xec\x62\x1f\x66\x81\x46\x46\x8e\xb8\x75\x4a\x68\x5c\x7f\x61\x65\x42\xe3\x12\x27\xf5\x48\x64\xcf\xb3\xb9\x7b\xcd\x6a\x8c\x76\xb0\xcc\xea\xce\x0e\xb0\xab\x31\x33\x9d\x5d\x47\x56\x9b\x97\xad\x73\xdc\x96\x04\x75\xad\x37\x00\xbf\x7e\x37\x5d\xf9\x51\xa9\x87\x98\x67\x0f\xba\x74\xa2\xc6\x2e\x82\xc5\x45\x5b\xbb\xd0\x2c\x35\xca\xc3\x8f\x5f\xbe\xfc\xf2\xf9\xea\xeb\x2f\x77\x67\xa5\xcd\x03\xe1\x95\x02\x8c\x2a\xe3\x34\x12\x60\xdc\xb8\xf7\xad\x1a\x40\x21\x27\x09\xda\x7c\x0d\xea\x8d\xf8\x04\xf0\x66\xf9\x88\xd1\x2f\xab\xba\x21\x1a\x12\x5e\x6a\x16\x4a\x1d\x64\xc2\xf4\xb9\x64\x8b\x2a\x2c\x87\x35\x68\xcc\x37\xe4\x4d\x0c\x46\x77\x36\x7a\xba\x43\xb2\x46\xd6\x65\x8f\x3c\x1a\xb1\x44\x21\x91\x0b\x1a\xb0\xb7\x8a\xd4\x0d\x6b\x40\x25\xce\x98\x1b\xb3\xb5\x40\x79\xfd\x57\x0b\xad\xa1\x63\xce\xb4\x6c\x0d\x25\x96\xc3\x9a\x53\xe7\xcc\xaf\x30\x05\xa1\xe7\x46\xc7\x82\xe7\x46\x0b\x9f\xf0\x5c\xb0\xda\x42\xd8\x96\x44\x62\x60\x36\x1a\x1c\x52\x59\x92\xb6\x4d\xcd\x6e\x71\x43\x34\x6c\x81\x3d\xa9\x52\xe4\x5f\x40\xfe\x05\xe4\x5f\x40\xfe\x05\xe4\x5f\xd0\x24\x7c\x89\xb8\x3e\xa0\x19\x21\x2e\x93\xb8\x4c\xe2\x32\x89\xcb\x24\x2e\x93\xb8\xcc\xe3\xe2\x32\x89\x5e\x20\x7a\x81\xe8\x05\xa2\x17\x7a\xa7\x17\x36\xa0\xe0\x51\x99\x53\x99\x8b\x89\x34\xcb\x8f\x94\xb1\x79\xee\x1e\x2e\x31\x5c\x54\xa4\xb8\x2d\x3a\xc9\xa7\x22\xc6\x6b\x4b\xe7\x99\xe0\x31\x4c\x4f\x18\x8e\xec\xc5\x30\xb2\xcf\xc6\xea\x11\xb0\x4f\x45\xbd\x63\x37\x00\x57\x66\xf5\xad\xbe\xcd\x14\x3e\xad\xda\x60\x87\x9f\xaa\x60\xe9\x0b\xe6\x63\x3f\xe0\xc4\xff\x65\x71\x0e\xda\xb4\x3d\xff\xf6\xb0\x19\xa0\x32\x5c\x51\x85\xe2\x93\xd4\xf9\x29\x32\x3e\x46\x80\x0d\x92\xe5\xd9\x22\x4d\xda\xe1\xe6\x15\x53\xba\x63\x4a\x0b\xd5\x11\xc6\xd7\xb1\x57\xf8\xdc\xf3\xf8\xab\xa1\x66\x74\x30\xc3\x69\x77\xa2\x29\xce\xe7\x08\xe2\x7c\x28\x99\x03\x25\x73\x68\xe8\xcc\x30\xe1\xc6\x81\xe4\x71\xd8\xa8\xa7\xfb\x28\x4b\xbe\x55\x57\x8f\x09\xbf\x01\x74\x18\x10\x7e\x7b\xc1\x96\x65\x9a\xb0\x19\xa8\x77\x94\x70\x62\x2d\xf2\xa9\x26\x99\xa0\xd4\x12\x04\x7b\x0e\x15\xf6\x50\x30\xef\x09\x05\xf3\x52\xd4\x12\x45\x2d\x51\xd4\x12\x45\x2d\x91\xc6\xb6\xec\x14\x0d\x32\x44\x60\x3f\xba\x11\x45\x38\x2c\x8d\x70\x18\x92\xc6\xe4\xad\xc0\xfd\x14\xe2\x99\x87\x57\x6b\x94\xa2\x4a\xe5\x9d\xba\x4a\x44\x12\x82\xcc\x0f\xbb\xae\xb4\xb3\x53\xf6\x68\xae\xc8\xce\xc2\x97\xa9\xbe\x0e\xd5\xd7\xd9\x49\x7d\x9d\x8d\xe4\x75\xb5\xa0\xce\x51\xb0\x77\x54\x45\x87\x2c\x5b\xa7\x47\xe8\x51\x15\x9d\x2e\xf7\x0d\x55\xd1\x21\x83\x00\xc1\xfd\x83\x2c\xa0\xf3\x0c\xc0\xdf\x57\xed\x9c\x0d\xf5\xe7\x6a\xb1\x9c\xa3\x40\x64\xe4\x4f\x45\xf0\xeb\xc8\xe1\xd7\x80\x50\x0e\x5d\xc6\xfe\x97\x13\xf7\xa7\x3a\x2a\xd8\xd0\x6b\x49\x9c\xee\x7d\x94\x2e\xd3\x4c\x7d\x9b\xf5\xed\xa9\x14\xa8\x24\x11\x41\xce\xde\x7f\xf8\xf4\xe1\xf6\x43\xa9\xe2\xe5\x8a\xc1\xf7\x5b\x54\xca\xb1\x4d\x20\xde\x40\x17\x20\xf3\xc6\x35\x74\xbf\x85\x04\x59\xda\xd5\x9d\x9d\xf2\x9a\xb0\x3c\xc1\xc3\x61\xd7\xb0\xdf\x03\x02\x3b\xc2\x79\x87\x0d\x84\x9e\x72\xfb\xff\xaf\x1f\x6e\x9f\xbf\xf9\xff\x2a\x72\xda\xf9\xb4\xf3\xf1\xcf\x1d\xef\xfc\xa9\xe0\x61\x3f\x5b\xff\xe7\x0f\x57\xef\x9f\xbf\xf7\x7f\x16\x3c\xa4\xcd\x4f\x9b\x1f\xff\xdc\xf1\xe6\x57\xf6\xed\x5e\xf6\xff\x97\xeb\xdb\x8f\x5f\x7e\xbd\x79\xfe\x11\xb0\x63\xa4\x53\x40\xa7\x00\xff\xdc\xf1\x29\xe8\xc0\x9f\x60\x79\x2f\x0e\xc9\xb7\xe0\x9a\xe7\x98\x92\x67\x2a\xd8\x6f\x5f\x3f\x31\xd3\x6b\x48\xed\xa0\x85\xf7\xe6\x0e\x8a\x2c\x13\x49\x6e\x4f\xb2\xcb\x2f\x92\x2b\x66\x74\xac\x8d\x1d\x0e\x16\xa6\x65\x1f\xee\x06\x9b\x0a\xb6\xeb\xab\xdb\x77\x3f\x3f\x5f\xac\x01\x0d\x47\x42\x8d\x84\x1a\xfe\xb9\x6b\xa1\xd6\x7d\xd8\xb9\xdb\xfe\x5f\x6e\x3a\xd0\xe9\xae\x95\x26\xa5\x8e\x36\xbf\xfd\x73\xd7\x9b\xbf\x6b\xc2\xd0\xef\xfd\xdf\xba\xd8\xfa\x05\xed\x7c\xda\xf9\xf6\xcf\xdd\xec\xfc\x17\xac\x95\xd5\xfb\xf2\xbf\x0d\xe2\xea\x3d\x4c\xb7\x67\xe3\xf7\xef\x32\x9f\x5e\xcf\x23\x47\x3a\x3b\x74\x76\x4e\xc8\x08\x4e\x27\x80\x4e\x00\xeb\xe1\x04\x1c\x94\x31\x9c\x0e\x01\x1d\x02\xd6\xc3\x21\x38\x4c\xa3\x38\x9d\x06\x3a\x0d\xac\x0f\x55\x9a\x8c\xe3\xde\x3d\x7a\xea\x12\xdd\xba\xcc\x07\x9b\x8d\x66\xf1\x17\x32\xf5\x9f\xa2\xa9\x9f\x44\x35\x89\x6a\xd6\x87\xa8\x3e\x24\x93\x3f\x1d\x02\x3a\x04\xac\x8f\x43\x70\x30\xa6\x7f\x3a\x01\x74\x02\x58\x77\x27\xe0\x05\x5b\x47\x01\x68\x4c\x0c\x54\x31\xfe\xf7\x93\x95\x06\xbf\xe3\x34\x80\x2d\xf3\xd3\xd8\x2c\x46\x2d\xce\x06\x45\xca\x9c\x74\xfc\x09\x65\xa9\x19\xa0\xb2\x4c\x59\x6a\x96\x3c\x78\x08\x59\x6a\xb6\x94\xdf\xb5\x7c\x35\x0d\x02\xfc\x20\x63\xa4\x29\x6b\x0d\x85\x4d\x9f\x5e\xd8\x34\x65\xad\xe9\x72\xdf\x50\xd6\x9a\x8d\x26\xb6\xf1\xd6\x22\xf8\x4f\xf0\x9f\xb2\xd6\xf0\x60\x6b\x7c\xb6\x90\xbf\xe6\x58\x10\x1a\x65\xb1\x21\x38\x76\xe4\x70\x6c\x40\xa8\x87\x2e\x67\xff\x0b\x65\xb1\x39\x1e\x18\x71\x00\x59\x6c\xdc\xe5\x92\xe4\x8f\x2a\x2a\x62\x11\x44\x5c\xc6\xfd\xda\xf3\xa1\xd6\xb8\xca\x18\x56\xc1\x76\x85\x63\xd4\x98\x99\xa1\xb1\x6b\xdf\xa1\xbf\x41\x87\xde\x99\x0e\xad\x40\x20\xa6\x35\xcb\x83\x35\xbd\xf9\x93\xca\xae\xa2\xe8\x57\x1e\x0b\x9d\x72\x23\x4c\x06\x20\x60\x96\xbe\x70\xa2\xe5\x94\x1b\x17\x8e\xea\x2b\x37\x3c\xf6\x6c\xa9\xb1\xee\x74\xf5\x4c\x46\x40\xcd\x1d\x28\xf5\xfe\xa3\x52\x0f\x31\xcf\x1e\x74\x69\xf3\x41\x79\x20\x1e\xa1\x2e\x0e\x82\xac\x59\x2a\xd8\xdd\xd9\x8f\x5f\xbe\xfc\xf2\xf9\xea\xeb\x2f\x77\x67\x17\xec\x46\x64\xa6\x83\xb6\xa6\x8e\x02\x8c\x2c\xe3\x34\x12\xb1\x48\x72\x76\xef\x5b\x8d\xf9\x8c\xc9\x49\x82\x15\xcd\xa4\x46\x9b\x85\x81\x53\xe5\x23\x3c\x13\xcc\x80\x71\xc6\x73\x54\x7a\xa0\xe9\x97\x9a\x85\x52\x07\x99\x30\x7d\xbe\x60\xef\x22\x09\xfd\xa9\x40\x72\xae\x8d\xf8\xab\x35\x84\xe5\xe8\x45\x68\x1a\xe3\xc9\x8c\xf9\xf2\x45\x32\xc9\x45\xf6\xc8\xa3\x11\x4b\x54\x06\xdd\xca\xa7\x62\xe6\x1a\x29\xbf\x8b\xc0\x59\x8b\x24\x84\xf7\xdd\x98\x71\x3e\x58\x58\x18\x50\xc5\x38\xd3\x06\xa2\x9b\x8e\xb9\xc2\x69\x52\x63\xa7\x70\xfa\xe6\x6a\x78\x99\x5f\x61\x0a\x6c\x29\xae\xa9\x60\x63\xc1\xf3\x22\x13\x6c\xc2\x73\xc1\x6a\x0b\x61\x5b\x12\x89\xc1\x97\x50\xee\x8b\xa7\x12\x3b\xb7\xac\xd9\x0d\x59\x96\x86\xe5\x6f\xa6\x5c\x9a\x2c\x3c\x1d\x30\x48\x06\x82\x1b\x24\x2d\x93\x42\x58\x23\x62\xa5\xc8\x9d\x16\x39\x7b\x32\x4a\x5a\x26\xf2\x4c\x8a\x47\x33\xe1\xb1\x82\xb5\xd5\x50\x4e\xce\x57\x23\xc3\x49\xb9\x60\x37\x32\x09\x44\xad\x7e\x9d\x5d\x4d\x8b\xc7\x47\x2c\xb0\x1b\xc8\xac\x3c\x40\x79\x57\x7f\xcd\x77\x04\x5f\x85\xc6\xb9\x51\x10\x1f\xa5\x2a\x34\x83\x69\x74\xfa\x1b\x9c\x06\x19\x1a\x3d\x23\xe0\x91\xfd\xad\x3c\x7f\xec\x95\xf8\x16\x88\x34\xf7\x5e\x96\xd8\xa4\x1a\xfb\x8f\xbc\xf6\x05\xb6\x6c\xff\x4c\x77\x32\x01\x55\xf1\x78\xbd\x2b\xd2\x9c\x2c\x81\xbb\xc1\x6b\x98\x7e\x0b\x95\xb6\x81\xfa\x6b\xe6\x0d\x50\x5c\x44\xc6\x50\x49\x7d\xb2\x25\xca\xc2\x42\xb0\x5c\x31\xf1\x2d\x95\xb6\xf0\xe0\xab\x89\x48\x44\x06\x0c\xd1\xd8\x68\xab\xb9\x62\x63\x39\xce\x85\x48\x58\x2c\x93\x22\x17\xfa\xb5\xc1\x08\xd0\xb7\xb1\x9c\xb8\x7a\x85\xa8\x4d\x31\x95\x54\xc6\x32\x5a\x38\x45\x78\xc5\x59\x4d\x8d\xb3\x3f\xbf\x7d\xc3\xbe\x5a\xef\xda\x0f\xa6\x0b\x22\xb4\xba\x70\xae\x26\xd8\x41\xfb\xa4\x1f\x51\xae\x1e\x44\xe2\x87\x8c\x6b\xc8\x12\x21\x42\x8d\x4f\x59\x21\x0a\x35\xe8\x46\x66\xc2\x40\xa7\xcb\x84\xce\x79\x06\xd2\x44\x66\xf0\x1b\x34\xac\x8a\x7c\x7e\xc5\xe1\x1c\x5d\xb0\x2f\xe6\xd3\x4f\xd2\x95\xc6\xb3\x5f\x31\x2b\x63\xc5\x00\x1a\x5f\xa1\x1d\xe7\x29\xeb\x95\x4f\xe8\xa1\x59\x1e\x21\x1f\xab\x4a\xa9\x19\x2c\x0c\x6e\xed\xb4\x40\xbb\xd0\x61\x30\xfc\xba\xcd\x9d\x88\x6f\x39\x7b\x10\x33\x2c\xfc\xe6\xff\x1c\xf1\xdc\x7c\x5f\x27\x3c\xd5\x53\x95\x8f\xd8\xd3\x54\x06\xe0\xee\x2b\x93\xca\x84\xf8\xe7\xfd\x46\xb6\xdd\xc7\x23\x74\xee\xf1\x1e\x08\x70\x23\x39\xb1\xa2\x7c\x38\xb2\x36\x10\xf3\x2f\x95\xb9\x8a\x93\x8c\x8f\x73\x81\x7b\x7a\x2c\x33\x9d\xd7\x27\x03\x6d\x0d\x32\x09\xa2\x22\x44\x99\x65\x5d\xa9\x01\xe2\x80\x66\x6c\x36\xa4\xf9\x5f\x5c\x94\x07\x31\x43\x81\x5d\x36\x7c\x77\xe6\x86\x7c\x77\x76\x71\x97\xdc\x25\xf3\x34\x05\xd4\x8a\x2c\xd2\x54\x65\xa0\xfc\x1b\x01\x81\x37\x95\xd4\x20\x84\xca\x3b\x02\x56\x0e\x36\x80\x95\xc6\xd5\xd9\xc3\x49\x80\x3d\xf8\x37\xbc\x61\xed\xb1\xf1\x37\x87\xad\x9d\x67\x57\x0c\xad\x33\x39\x8b\xa5\xd6\x70\x23\xcc\x99\x88\x36\x95\xbc\x6e\xeb\x75\xc3\x70\xb7\x93\xb6\x57\x4c\x8b\xb2\x9e\x9e\x39\x1b\x99\x0c\xf0\x24\xa0\x0a\x30\x2e\xc7\xee\xcb\x47\xce\xec\x3a\x21\x0f\x31\x5f\xcb\x53\x3c\x8a\x6c\x96\x4f\x65\x32\xd9\x74\xf8\xd0\xda\x8d\xed\xcd\xc1\xcc\x41\xc4\xef\x45\xd4\xd9\x1c\x40\x6b\xfb\x98\x83\x48\xc6\x32\x47\x53\x5a\xcc\xbf\xc9\xb8\x88\x59\x52\xc4\xf7\x22\xc3\xd1\x5b\x6d\x04\xe7\xc7\x4c\x05\xf2\x81\x38\x3f\x01\x8f\x22\x10\xc3\x70\x11\x4b\xd3\x0b\x2c\x2e\xb9\x28\xdd\xcc\xf5\x6d\xfe\xf6\x87\xdb\xeb\x7f\xb8\xfa\x96\x49\x39\xdf\xae\xf4\x24\x96\x86\xc5\x03\x08\x92\x28\xe0\x89\x2b\x20\x5b\xca\x52\xcd\x63\x23\x5c\x64\x2e\xfd\xa5\x8b\xbd\x34\xf0\x40\x94\xd2\xd2\x7c\x1a\xc7\x62\x96\xc9\x80\xd4\x3c\x47\xb8\x86\x63\xc7\xcb\x16\xc7\x26\x9e\x40\xec\xf0\xa4\x6a\x62\x35\x82\x2e\x56\x45\x02\xcd\xe0\x28\x5f\x15\xa9\xf9\x18\x96\xd0\x35\x7f\x79\xed\xa4\x1b\x22\x42\x0e\x02\xdd\xbd\xed\xf6\x8e\x91\x6c\x63\x19\xe5\xc2\xdc\x71\xe6\xde\x31\x62\x24\x98\xc7\xb0\x73\x28\x04\x0d\xd2\x81\x77\x11\x9a\xbf\xa3\xb0\x10\x66\x2e\xb2\x58\x26\xc2\xdf\xe6\x73\xa0\x08\x64\xe9\x23\x97\x91\x41\x8d\x25\x3e\x37\x43\x0e\xa6\x4a\x69\x01\x52\x2c\x57\x4e\x86\xda\xb5\x30\xd3\xc2\xb3\x49\x01\xb0\x9d\x27\xa1\xbb\xa1\x60\x92\xcc\xd8\x6c\x7f\x7c\xd3\xe5\xec\x7e\x1c\x33\xbf\xa5\x4a\x30\xe2\xf0\x4d\x6d\x00\x52\x33\x11\xa7\xf9\x6c\x1e\x88\x79\xf4\xcd\x73\x83\x59\x56\x0d\x68\xd5\x65\x20\xc7\xb5\xab\x00\x6f\x0f\xbf\x2f\x27\x05\xcf\x78\x92\x0b\x67\xe5\x2f\x2b\xd9\xea\xf2\xd8\xc3\x8d\x52\x80\xdd\xdd\xf7\xdd\x5f\x6c\x1e\xf2\xe5\x8a\x49\xad\x0b\xab\x04\xc8\x64\x12\x89\xf2\x84\x78\x94\xe1\x36\xdc\xb9\xb3\x45\x1b\xad\xc3\x7f\x72\xb3\x9b\xd6\x5d\xb2\xa0\x63\xe8\x42\x84\x8d\xd7\x2d\xe8\x3a\xc5\xbd\x36\x0f\x27\xb9\x1f\x41\x58\x21\x9f\x6f\xad\x9a\xa2\x55\x2c\x72\x19\x0b\x33\xf6\xb1\xc8\x32\x28\xf5\x6b\x6e\xe6\x39\x44\x55\x02\x0c\xb3\xa2\x22\xd1\x45\xe6\xa6\x8f\x3b\x88\xe4\x0c\xed\x38\x6b\x38\x64\x38\x98\x00\x86\x98\x8e\x79\x14\x89\x8c\x05\xd3\x22\x79\x00\xcb\x12\x67\x46\x6c\xb2\x88\x67\x13\xb7\xd0\x70\xe2\xb1\x79\xd4\xc8\xb4\x10\xb0\xf1\x52\xa5\xb5\x34\x1b\xce\x4e\x1b\x6c\xb8\xea\xf9\x42\x8f\xa6\xb0\xd4\xc9\xe0\x3b\x22\xc4\xf5\x00\xf8\x6d\x2f\x78\xbb\x87\x6d\xf5\x69\xe8\xf5\x13\xd7\x8e\x04\x72\x7a\xa7\x99\x93\x45\x84\x83\xb8\x9f\x6b\xb3\xc0\x41\x11\x61\x05\xe6\x72\xdb\x6c\x2c\xfd\xcd\x24\x35\x4b\xfd\xa6\x12\xd4\x27\xe4\xae\xd7\x6e\x34\x75\xec\xa6\x45\xee\x36\x6e\x9e\x71\x69\x24\x77\xc2\x9e\xcc\x0a\xbb\x27\xdd\x2e\x30\x8f\xb9\xb3\xe4\xcb\x2a\x67\xae\xba\xb5\x91\x98\xc2\x53\x36\x15\x8b\x9e\x54\x97\xa1\x0a\xf4\x25\x9c\x15\x23\xa1\x2f\x61\xb7\x9f\xf3\x54\x5e\xf2\x54\x9e\x07\x2a\x31\x2a\x9f\xbe\xfc\x17\x5f\x32\xd9\x7f\x70\x0c\xc7\x3a\xe7\x32\xd2\x20\x92\xaa\x00\x02\xfc\x35\x36\x9c\xee\xda\xe0\xf7\x38\xef\x9f\x41\xdc\xfa\x2b\x49\x43\xe1\xeb\xfa\xda\x18\xa8\x91\xa6\x91\x44\x01\xe3\xa5\x24\xfa\xc1\x48\xcd\xa6\x72\x32\x05\xf7\x98\x40\xc5\xb1\x48\xa0\xe6\x78\x75\xe5\xe6\xbe\x65\x0d\x03\x66\x4a\xcb\x96\x8c\xd0\xce\x44\xd3\x87\xcd\xb3\x87\xb7\xa2\x9f\x17\x8d\xcd\xfd\x2e\xeb\xad\x8c\x85\xb9\xb0\x9c\xc1\xc2\x4c\xed\x25\xde\xa5\x08\xf9\xe0\xd2\x00\xa1\x85\xf1\xa4\xa1\xb3\x00\x38\x9c\xc2\xa3\x68\xc4\x32\x31\xe1\x59\x08\x3c\xaa\x91\xf2\xc9\x8c\xf1\x20\x97\x8f\x32\x9f\x99\x9b\x4d\x26\xee\xbf\x36\x95\x2f\x39\x76\xaf\xa9\x76\x7f\xdf\x62\xf3\x77\x54\x1c\x55\xe6\x98\x63\x17\x1f\x8c\xcf\xdd\xc3\xd5\x8a\x8b\x87\x55\xd3\x2d\x66\xca\xa7\x22\xc6\xcb\x14\x29\x00\x98\x90\x30\x1c\xd9\xeb\x6a\x64\x9f\x8d\xd5\x23\x20\xb2\x8a\x2a\xc9\x6e\x00\x44\xcd\xea\xdb\x79\xd3\x49\x6b\x60\x2c\xb6\xb6\xe7\xd9\x7f\xfd\xbd\x15\x67\xa5\xfb\xce\x3d\x65\x6b\xc1\x57\x0a\xeb\xab\xf1\x02\x51\xb5\x82\xa3\xc2\xf7\x91\xa5\x7a\xe7\x1b\x59\xd5\x40\xbf\x4e\x33\xbd\x38\x2e\x63\x42\x2d\x17\x66\xd4\x8e\xb9\x59\x4d\xd9\x90\xb9\x96\xcc\xb5\x64\xae\x25\x73\xed\xb1\x99\x6b\xdb\xf9\x5a\x35\x9a\x6c\x77\xe6\x06\x47\xde\x8a\xad\x17\x6a\x9f\xde\x8a\x3b\xb3\xb1\x6f\xe0\x1f\xd8\x68\x63\xde\xd9\x8c\xdc\x56\x95\x05\x69\x14\x75\xc0\xf0\xec\x5e\x8c\xd1\x19\xc0\xdb\x63\x4a\x28\x61\xa5\x17\x6c\x9d\x8a\x7f\x66\xa2\x92\xf3\x44\x4c\x38\x6c\x50\x0b\xf7\xab\x7e\x9c\x68\x9b\xf5\x47\xc3\xa2\x44\x19\xc7\x22\x94\x3c\x17\xd1\xac\x64\xe9\xcb\x2b\x57\x46\x23\x0b\xe7\x61\xd2\xd9\x24\xe3\x01\x9c\x1a\xa9\x42\x0f\x08\xca\x4b\x1b\x5c\x20\xdc\x2e\x2d\xb4\xe9\x64\x75\xb9\xb8\x79\xd3\x0d\xc8\x7e\x64\x8c\x32\xd0\x35\x71\x81\xfd\xc4\xf8\x8f\x86\x3e\x6e\xb1\xcc\xd0\xe7\x6b\xe8\x72\x93\x8a\xb4\x46\x49\x1a\xca\xf6\xdf\x84\x5e\x69\x37\x2f\xcb\x29\x96\x9d\x6d\x7f\x22\x5b\x88\x6c\x21\xb2\x85\xc8\x16\x22\x5b\x7a\x23\x5b\x5a\xde\x05\x0b\x84\xcb\xee\xae\xc5\xf7\x22\xcd\x84\x01\x25\xe1\xf7\x2c\x8d\x04\xd7\xc2\x8b\xa0\xeb\x4c\xa5\x7c\x02\xe8\xe8\x5a\x45\x32\x98\xcd\xb9\xf6\xb9\x4d\x17\xfa\x06\xcc\xb6\x7b\x7b\xf1\x3f\x2e\xd8\x0d\xca\x33\x84\x2e\xa9\x48\xcc\x61\x29\xef\x54\xc1\x54\x96\x4e\x79\xe2\x5c\x0d\xb3\x42\x5c\x8e\x79\xe4\x74\xe5\xbb\x33\xfc\xf9\xee\x8c\x8d\x65\xc2\x23\xf9\x0f\x77\x91\xdc\x0b\xc6\x43\xb0\xc0\xab\x4b\xb4\x4e\x86\xa5\x1a\x86\xcd\xbf\xd4\xe5\x4b\xa8\x9f\x5e\xb0\x0f\x12\x84\x63\xa5\xeb\x2a\x5b\x1c\x5b\xc9\xb7\xe4\xa8\x1e\x83\x8e\xa2\xf2\xe9\x36\x0b\x8a\x23\x78\xef\xc6\xbe\x14\xf2\x6c\x15\x9d\xba\x91\x62\x06\x43\x37\x07\x76\xaa\x9e\xd8\x84\x67\xf7\x7c\x32\x67\x9c\xf4\x4a\x8d\xc8\xc6\x2a\x8b\xcd\x9a\x34\xce\xd7\x97\xda\x88\x96\x4f\x17\x80\x5e\x87\x58\x53\x9c\x5b\x69\xd0\x64\x20\xc3\x52\x15\x06\xac\x80\x41\xc4\x6e\x8d\xcd\x65\x6d\x6f\x52\x87\x06\x2e\x2a\x8b\xe9\xee\x11\x4f\x78\x78\xb7\xd9\xf9\x8f\x5d\xb0\xab\x20\x10\x29\x46\x3e\x55\x35\xbb\x97\x38\x86\x97\xec\xdc\x6e\xc0\xf9\x0d\xaa\x7f\x60\x2f\x7f\xe4\xc1\xc3\x24\x53\x45\x12\x9a\xa7\xc0\x05\x15\x1e\xaa\x4d\x1c\x42\x48\x8b\x8f\xe7\x1b\x71\x23\xb8\xf7\x2d\xfd\xc0\x5e\xfe\xa4\x32\x51\x69\x96\x05\x5c\x07\x3c\x34\xa3\xb7\xf3\x83\x1e\xca\xd0\x9e\x46\xd5\x73\xa1\xc1\xb1\x6f\x63\x9b\x0d\x99\xd6\xb7\xfb\x7e\x10\xe7\x11\x33\xa3\xed\xd6\x61\x15\x3b\xba\xaf\x55\x20\x9e\xb4\xb7\xf5\x5d\xe4\x4a\x77\x67\xdb\xd8\x27\x6b\xda\x6e\xb2\x56\x30\xa7\xcf\xc5\x3f\x8d\x4c\x1d\x05\x89\x6e\x48\xd3\xd9\x00\xfd\x76\xfc\xdc\x51\x45\x56\xe1\x5d\x5c\xe2\xa4\xdd\x45\x59\x6d\x19\x60\xb5\xe7\xc8\xcb\xad\x82\x2e\xb7\x21\xb1\x29\x48\xec\x74\x82\xc4\xda\xdd\x22\xeb\x02\xc5\x76\xa7\x6e\x91\x0f\x02\xf9\x20\x90\x0f\x02\xf9\x20\x90\x0f\x42\x93\xf0\x25\x72\xfb\x80\x66\x84\xf8\x4e\xe2\x3b\x89\xef\x24\xbe\x93\xf8\x4e\xe2\x3b\x8f\x8b\xef\x24\x0a\x82\x28\x08\xa2\x20\x88\x82\xe8\x9d\x82\xd8\x80\xa6\x1f\x68\x18\x57\xbb\x29\x5c\x0c\xe5\x3a\xaa\xf4\xdb\x4b\x5f\xa0\x04\x7c\x60\xc4\xa7\xdc\x7b\x0d\x8f\x0d\x85\x15\xda\x22\xed\xde\xa1\x84\xe2\xbf\xa8\xad\x54\x1f\xd5\x27\x41\x4d\x61\x7c\x13\xb6\x0b\xdf\xe9\x8e\xef\x1a\x68\xa6\xf3\x85\xa1\xb5\x93\x00\x14\x47\x74\x04\x71\x44\x94\xf5\x9c\xb2\x9e\x37\x74\x66\xf8\x50\xe5\x30\x32\xa0\x6f\xdf\xeb\xef\xd6\xf6\x1a\x3d\x63\x07\xd5\xed\x63\xc2\x84\x00\x41\x06\x8a\x09\x5f\xb0\x36\xd9\x31\x6c\xa9\xd6\x1d\x25\xc9\xd8\x08\x59\x55\x13\x63\x50\x3a\x0c\x82\x52\xc7\x00\xa5\x28\x00\xf9\x84\x02\x90\x29\xd2\x8a\x22\xad\x28\xd2\x8a\x22\xad\x48\x0b\x5c\x76\x8a\x06\xa6\x05\x92\x3e\xc5\xf6\xab\x4f\x59\xd5\x63\xa0\x1a\x95\xb7\x3c\x77\x1e\x7b\x91\x09\x1e\xd6\xa0\xd5\x06\x8a\x92\x79\xbb\x85\x9a\x44\x52\x83\x8e\x9f\xfd\x71\xc9\xf1\x9b\x88\xc1\x5a\x33\x9e\xc3\x70\x81\xb5\xda\x6a\x9d\xab\x7b\x21\x5d\x85\xdf\x69\x33\x9f\x05\xff\x3b\xf7\xcb\x0a\xe2\xa5\xe7\x2c\xb9\x87\xcb\xdb\x01\xfb\xdd\x4a\x7e\xd6\x65\x13\xd6\x79\xff\xb7\xd5\x62\x2a\x16\xd9\x44\xb4\x7a\x52\xbb\x7a\xef\xe7\xed\xdf\xa9\xd4\x9b\xff\x37\x10\x88\x6d\xe4\x7b\xca\xb3\x5c\x42\x70\x0a\x7a\x6a\x6c\x2f\xeb\xe1\xc3\xfb\xb6\x89\xf5\xc5\x36\xae\xb0\x98\x5d\xcf\xbb\x4c\x30\xb2\x94\x1d\xb9\xa5\xec\x74\x48\xc7\x9a\xa3\xb7\x3b\x5c\x18\x8c\x60\xa4\x4d\x19\xe0\xfa\x6a\x89\x24\x7a\x0d\x76\x02\x8c\x40\xe4\x11\xbc\x99\xa8\xe4\x1c\xdf\x86\x27\xc0\x54\xa7\xd9\xab\xff\xad\x55\x72\x8d\x71\x9e\x9f\x8d\xcc\xb3\xff\xbe\x71\x92\xb0\xfc\xe3\xeb\x21\xb1\xa1\xed\xf7\xcd\x4f\x2a\x0b\xc0\x96\x39\x51\xb0\xf8\x8a\xdd\x9d\x8d\xcd\xdf\xee\xce\xd8\xd5\xdc\x6c\x82\x1b\x29\x1a\x1e\x0b\x5d\xc6\xb4\x9d\xf3\x00\x16\x00\x22\x05\x23\x19\x58\x53\x8a\x88\x42\xcd\xd4\x93\x5d\x5b\x8c\xa4\x4b\x85\x4a\x23\x71\xc1\xf0\x9b\x10\x20\xec\xf6\x14\x38\x73\x36\x2e\x84\xff\xfc\x36\xd3\x6b\x3e\x74\xbc\xae\x77\xa4\x2a\x1c\x8c\xaa\x90\xd6\x1c\x20\x07\xaa\x2c\x14\x9d\x2b\xea\x69\xc4\x83\x67\xe0\x37\xdb\xc0\xb1\x22\x38\xf2\x17\x23\xe8\x76\x42\xd0\x6d\x40\x08\x89\x2e\x72\xff\x0b\xf9\x8b\x35\xf6\xfa\xa8\xe0\x47\x31\x58\x4b\xe5\x0b\xb6\x81\xdf\xd5\xa5\xc6\x8c\x5b\x15\xf7\xab\x7e\xc8\x05\xfc\x8e\xbb\x96\x3a\xa6\x19\x6c\xda\x30\x12\x3c\x74\x84\x1b\x5e\x20\xb2\x81\xc8\x06\x22\x1b\xf6\x48\x36\x74\x20\xfb\x57\xd0\x0e\x0d\xc2\xff\x20\x55\x57\x22\x1f\x48\x83\x3d\x3d\x0d\x96\xc8\x87\x2e\xf7\x0d\x91\x0f\x64\xb3\x20\xd5\x81\xc8\x07\x78\xb0\x37\xf2\xa1\x13\x5d\x7e\x05\x0d\x71\x2c\x88\x8e\xc8\x08\x82\x72\x27\x04\xe5\x06\x84\x98\xe8\x62\xf7\xbf\x10\x19\xd1\xd8\xeb\xa3\x82\x23\x87\x46\x46\xa8\xb0\x5f\xc6\x61\x4d\x29\x09\x15\xae\x40\x26\x95\xea\x11\x2a\xfc\x49\x65\x57\x51\xf4\x2b\x8f\x85\x4e\xb9\x11\x1d\x03\x10\x27\x4b\x5f\x38\xd5\xfc\x60\x2a\xa4\x94\x60\x0d\x8f\x3d\xff\xe4\xab\x70\x77\xb4\x05\xd5\x55\x39\xe2\xba\x2a\xeb\x39\x98\x75\x35\x55\x56\xda\x79\x3a\xe0\x97\xa8\x92\x0a\x55\x52\xa1\x4a\x2a\x54\x49\xe5\xd8\x2a\xa9\xac\x97\xbc\x8d\x55\x54\x7a\x66\xf3\x77\x56\x3b\x65\xfd\xf0\x97\xd7\x4d\x19\xf2\x1c\x6c\x52\x2d\x65\xfd\x1c\x2c\xaf\x94\xd2\xf3\x1c\x50\x7d\x14\xaa\x8f\x42\xf5\x51\xa8\x3e\x0a\xd5\x47\xe9\xad\x3e\x4a\x0b\xe9\xbf\x50\x1b\x65\x65\x7e\xb2\x13\x72\xe6\x6b\x37\x9a\x23\xae\xef\xb2\x7e\xba\x57\xd5\x76\xd9\xed\xbc\x53\x45\x97\x5e\x56\x74\xb1\x9a\x4b\xcf\xcb\xba\xd7\x1a\x2e\xeb\xa7\x67\x45\xfd\x96\xbe\xc5\xe6\x50\xab\xb6\xac\x9f\xb4\x06\x36\x62\x6b\x7b\x9e\xfd\xd7\xdf\x97\x31\x4b\xb9\x88\x53\xb0\x48\xec\x97\x61\xba\xb5\xdd\x68\xcb\x34\xb9\xe7\x89\x71\xaa\xcf\xfc\x20\x19\x27\xb7\x5c\xc4\x3c\x35\x3c\xd6\x05\xf3\xd4\x70\x7e\x88\x81\x22\x06\x8a\x18\x28\x62\xa0\x88\x81\x22\x06\x8a\x18\x28\x62\xa0\x88\x81\x22\x06\x8a\x18\x28\x62\xa0\x88\x81\x22\x06\x8a\x18\x28\x62\xa0\x36\x10\xfb\xc4\x40\x11\x03\x45\x0c\xd4\x61\xac\x28\x31\x50\xf3\xd3\x43\x0c\xd4\x90\x19\xa8\x4c\x78\xce\xc3\xe0\x8d\x4c\x99\xdb\x7e\x9f\x5c\xd4\xd7\xb2\x43\xef\x7c\x87\x5a\xb1\x52\x8d\x6f\x12\x3f\x55\x5f\x8d\xe1\xf1\x53\x8d\x0b\x47\x4c\x55\xc3\x63\xcf\x66\xaa\xd6\x9d\x2e\xe2\xac\x88\xb3\x22\xce\x8a\x38\x2b\xe2\xac\x88\xb3\x22\xce\x8a\x38\x2b\xe2\xac\x88\xb3\x22\xce\x8a\x38\x2b\xe2\xac\x88\xb3\x22\xce\x8a\x38\xab\x0d\xc4\x3e\x71\x56\xc4\x59\x11\x67\x75\x18\x2b\x4a\x9c\xd5\xfc\xf4\x10\x67\x35\x6c\xce\x0a\xfb\xf9\x5f\x85\xca\xf9\x7e\xb9\x2a\xec\xc8\xff\x31\x1d\x69\xc9\x51\x55\xde\x20\x6e\xaa\x3e\xfb\x43\xe4\xa6\x2a\x0b\x46\x9c\x54\xc3\x63\x1d\x70\x52\xcd\xa7\x88\xb8\x28\xe2\xa2\x88\x8b\x22\x2e\x8a\xb8\x28\xe2\xa2\x88\x8b\x22\x2e\x8a\xb8\x28\xe2\xa2\x88\x8b\x22\x2e\x8a\xb8\x28\xe2\xa2\x88\x8b\x22\x2e\x6a\x03\xb1\x4f\x5c\x14\x71\x51\xc4\x45\x1d\xc6\x8a\x12\x17\x35\x3f\x3d\xc4\x45\x0d\x99\x8b\xd2\x22\xc8\x44\xbe\x4f\x12\xea\x06\x7a\xd0\x8a\x7d\xc2\x47\x89\x76\xaa\xcf\xf7\xf0\x68\x27\x5c\x29\xe2\x9b\x1a\x1e\x7b\x36\xdf\xb4\x70\x60\x88\x68\x22\xa2\x89\x88\x26\x22\x9a\x88\x68\x22\xa2\x89\x88\x26\x22\x9a\x88\x68\x22\xa2\x89\x88\x26\x22\x9a\x88\x68\x22\xa2\x89\x88\x26\x22\x9a\x36\x10\xfb\x44\x34\x11\xd1\x44\x44\xd3\x61\xac\x28\x11\x4d\xf3\xd3\x43\x44\xd3\xb0\x89\xa6\xec\x51\x06\x82\x07\x81\x81\xcc\xfb\x25\x9c\xa0\x27\x57\xd8\x93\x96\xc4\x53\xf5\x15\x22\xa0\xea\xf3\x3f\x44\x02\xaa\xba\x62\x44\x44\x35\x3c\xd6\x01\x11\xb5\xe4\x20\x11\x21\x45\x84\x14\x11\x52\x44\x48\x11\x21\x45\x84\x14\x11\x52\x44\x48\x11\x21\x45\x84\x14\x11\x52\x44\x48\x11\x21\x45\x84\x14\x11\x52\x44\x48\x6d\x20\xf6\x89\x90\x22\x42\x8a\x08\xa9\xc3\x58\x51\x22\xa4\xe6\xa7\x87\x08\xa9\x03\x20\xa4\x06\xc0\x44\x6d\x42\x41\x11\xf7\x54\x9f\xf1\xc1\x72\x4f\x44\x3a\x35\x3c\xd6\x15\xe9\x44\x6c\x13\xb1\x4d\xc4\x36\x11\xdb\x44\x6c\x13\xb1\x4d\xc4\x36\x11\xdb\xd4\x91\xb4\x25\xb6\x89\xd8\x26\x62\x9b\x88\x6d\x22\xb6\x89\xd8\x26\x62\x9b\xfe\x7f\xf6\xde\xaf\xb9\x6d\xe4\xe8\xf7\xbf\xf7\xab\x98\x52\x2e\x64\x57\x24\xea\xd8\x75\xaa\x92\xda\xad\xe7\x42\x6b\xef\xe6\xe7\x64\x7d\xac\x63\xb9\x76\x6f\x9c\x7a\x32\x02\x86\xd0\x94\x41\x0c\x0e\x00\x4a\xab\x3c\x95\xf7\xfe\xab\xe9\x19\x0c\xfe\x10\x24\x41\x12\x20\x01\xf0\x9b\x9b\x68\x4d\x60\x30\xff\xa7\xbb\x3f\xdd\xd3\xa0\x4d\xa0\x4d\xa0\x4d\xa0\x4d\x83\x1c\x51\xd0\xa6\x6a\xf7\x80\x36\x0d\x99\x36\xd1\x87\x6e\x8c\x61\x68\xc1\xe3\x7e\xa9\x93\x15\xf0\x22\x5f\x3e\x49\x7f\xc9\xc3\xf2\xb0\x70\xa7\xc4\xbd\xa7\xca\x7c\xe2\xf1\x8c\xf9\x22\x4e\x84\xa7\xcf\xeb\x1f\x9c\x94\x7d\x49\xa5\x5c\x16\x26\xbb\x8a\x0d\xc6\x71\x2a\x26\xa3\x34\x13\xbc\x72\x1c\xd6\x29\x16\x95\x64\x30\x96\xfb\xe8\xaf\x32\x45\x20\xd5\xca\x40\x0e\x06\x66\x2d\xb8\xf7\x28\x23\x91\xbc\xcc\xe2\xef\x81\xfe\x87\x74\xa6\xf5\xd0\xd9\xd3\xdb\x19\xad\xf6\x9f\xb5\x42\x77\x8e\x74\x8b\x06\xaf\x5f\xc4\xe5\xd6\x08\x20\x17\x20\x17\x20\x17\x20\x17\x20\x17\x20\x17\x20\x17\x20\x57\x47\xbb\x2d\x20\x17\x20\x17\x20\x17\x20\x17\x20\x17\x20\x17\x20\x17\x20\x17\x20\x17\x20\x17\x20\xd7\x20\x47\x14\x90\xab\xda\x3d\x80\x5c\xc3\x87\x5c\x22\xf2\x63\x25\xfb\xbe\xe3\xaf\x1d\xe3\xfa\x39\xaf\xcb\x31\x19\x97\xfb\x28\x18\x57\xd3\x40\x82\x71\x81\x71\x5d\xb8\x35\x02\xc6\x05\xc6\x05\xc6\x05\xc6\x05\xc6\x05\xc6\x05\xc6\x05\xc6\xd5\xd1\x6e\x0b\xc6\x05\xc6\x05\xc6\x05\xc6\x05\xc6\x05\xc6\x05\xc6\x05\xc6\x05\xc6\x05\xc6\x05\xc6\x35\xc8\x11\x05\xe3\xaa\x76\x0f\x18\xd7\x08\x18\x17\x19\x8a\x87\x00\xb8\x74\x45\x8e\x0a\xb7\xf4\x07\x01\xb6\x9a\x06\x10\x60\x0b\x60\xeb\xc2\xf4\x2d\xa0\x16\xa0\x16\xa0\x16\xa0\x16\xa0\x16\xa0\x16\xa0\x16\xa0\xd6\x00\x80\x0e\xa0\x16\xa0\x16\xa0\x16\xa0\x16\xa0\x16\xa0\x16\xa0\x16\xa0\x56\xb5\x35\x80\x5a\x80\x5a\x80\x5a\x80\x5a\x80\x5a\xe7\x0b\xb5\x68\x72\x24\xd4\x45\x03\x20\x5b\xbf\xea\xda\x7c\xd1\x3f\x1c\x13\x6f\x15\x5f\x05\xe3\x6a\x1a\x4a\x30\x2e\x30\xae\x8b\x62\x91\x00\x74\x01\x74\x01\x74\x01\x74\x01\x74\x01\x74\x01\x74\x01\x74\x75\xb4\xdb\x02\x74\x01\x74\x01\x74\x01\x74\x01\x74\x01\x74\x01\x74\x01\x74\x01\x74\x01\x74\x01\x74\x0d\x72\x44\x01\xba\xaa\xdd\x03\xd0\x35\x7c\xd0\x15\x15\x40\xe7\xf4\x9c\xcb\xd1\xa5\x63\x62\x2e\xf7\xd1\x5f\x6b\xa0\x00\x54\x0b\x54\x8b\x9d\x27\xd5\x72\x6b\x02\x50\x0b\x50\x0b\x50\x0b\x50\x0b\x50\x0b\x50\x0b\x50\x0b\x50\xab\xa3\xdd\x16\x50\x0b\x50\x0b\x50\x0b\x50\x0b\x50\x0b\x50\x0b\x50\x0b\x50\x0b\x50\x0b\x50\x0b\x50\x6b\x90\x23\x0a\xa8\x55\xed\x1e\x40\xad\x31\x41\xad\x9b\xff\x71\x7f\xff\xe7\xc6\xd8\x8b\x16\x3c\x1e\x02\xeb\x7a\x4f\x95\xf9\xc4\xe3\x93\xb0\x2e\xdf\x7d\x1e\xd4\x0b\xd4\x0b\xd4\x8b\x16\x8a\x5b\x13\xa0\x5e\xa0\x5e\xa0\x5e\xa0\x5e\xa0\x5e\xa0\x5e\xa0\x5e\xa0\x5e\x1d\xed\xb6\xa0\x5e\xa0\x5e\xa0\x5e\xa0\x5e\xa0\x5e\xa0\x5e\xa0\x5e\x67\x47\xbd\x6c\xab\x75\x05\x68\x28\xf9\x32\x7b\x64\xa9\xa7\x62\x71\xc5\xd2\xa5\xf7\xa8\x47\x9e\xf4\x15\xc1\x17\xc6\x7e\x1b\x27\x8a\x7a\xb9\xa9\x69\x31\xcf\x1e\x9b\x5b\x16\x35\x3b\xef\xea\xf9\xa7\x25\x7d\x5b\xfb\x23\x9e\x77\xc0\x7d\xc0\x7d\xc0\x7d\xe3\x18\x51\xe0\xbe\x6a\xf7\x00\xf7\x4d\x00\xf7\x99\x7f\xfe\xcf\x11\xa8\x5f\x19\xf5\x45\xb9\x9c\xa3\xe6\xec\xbb\x8c\xfc\x8e\x91\xdf\x55\xa1\xd7\x90\xee\x66\x65\x60\xad\x1a\x15\x0a\xdb\x65\x45\xd1\x2f\x95\xbd\x3f\x30\x04\x2c\x04\x2c\x1c\x05\x2c\x04\x28\x04\x28\x04\x28\x04\x28\x04\x28\x04\x28\x04\x28\x04\x28\x04\x28\x04\x28\x04\x28\x04\x28\x04\x28\x04\x28\x04\x28\x04\x28\x6c\xbb\xfb\x1f\x1d\x14\x12\x21\xb4\x3d\xb0\xc6\xd4\xd0\x86\x01\x0e\x05\xff\x81\x7b\x82\x7b\x82\x7b\x82\x7b\x0e\x7a\x44\xc1\x3d\xab\xdd\x03\xee\x39\x5a\xee\x29\x22\x3f\x56\x32\xca\x86\x10\xe5\xf8\x73\x5e\x97\xd3\x44\x39\xba\xcf\x23\xca\x11\xe0\x72\x34\xe0\xb2\xdf\x28\x47\xb7\x26\x00\x2f\x01\x2f\x01\x2f\x01\x2f\x01\x2f\x01\x2f\x01\x2f\x01\x2f\x3b\xda\x6d\x01\x2f\x01\x2f\x01\x2f\x01\x2f\x01\x2f\x01\x2f\x01\x2f\xcf\x0e\x5e\x82\xf6\x81\xf6\x81\xf6\x81\xf6\x0d\x7a\x44\x41\xfb\xaa\xdd\x03\xda\x37\x7e\xda\x37\x90\x20\xc7\x6e\x89\xdf\x91\x83\x1c\x9b\xd8\x08\x58\x21\x58\x61\xad\xd4\x01\xb1\x42\x70\x42\x70\x42\x70\x42\x70\x42\x70\x42\x70\x42\x70\x42\x70\x42\x70\x42\x70\x42\x70\x42\x70\x42\x70\x42\x70\x42\x70\x42\x70\xc2\xb6\xbb\xff\x49\x83\x1c\xd7\x98\x1a\x10\xe4\xd8\xdc\x66\x60\x4f\x60\x4f\x60\x4f\x60\x4f\x60\x4f\x60\xcf\xb3\xc5\x9e\xc4\x01\x86\x10\xe1\xa8\x2b\x72\xa2\xe8\x46\xfd\x69\x44\x36\x82\x56\x8e\x86\x56\xf6\x1c\xd9\x48\x7d\x0b\x5a\x09\x5a\x09\x5a\x09\x5a\x09\x5a\x09\x5a\x09\x5a\x09\x5a\x39\x00\x52\x07\x5a\x09\x5a\x09\x5a\x09\x5a\x09\x5a\x09\x5a\x09\x5a\x39\x46\x5a\x09\xbc\x07\xbc\x07\xbc\x07\xbc\x37\xe8\x11\x05\xde\xab\x76\x0f\xf0\xde\xc8\xf1\xde\x50\x42\x1a\x3b\x43\x7c\xc7\x0e\x67\xac\x01\x11\xc0\x41\xc0\xc1\x5a\xa9\x03\x82\x83\x00\x83\x00\x83\x00\x83\x00\x83\x00\x83\x00\x83\x00\x83\x00\x83\x00\x83\x00\x83\x00\x83\x00\x83\x00\x83\x00\x83\x00\x83\x00\x83\x83\x04\x83\x95\x30\xc6\x55\x33\x03\x42\x18\x9b\xdb\x0c\xc6\x09\xc6\x09\xc6\x09\xc6\x09\xc6\x09\xc6\x79\xae\x8c\x93\xe6\x4c\x42\x3d\x37\x80\x38\xc6\x5f\x75\x6d\xbe\xe8\x1f\x4e\x13\xcc\x58\x7c\x1f\x11\x8d\x80\x96\xa3\x81\x96\xfd\x46\x34\x16\x8b\x02\xf4\x12\xf4\x12\xf4\x12\xf4\x12\xf4\x12\xf4\x12\xf4\x12\xf4\xb2\xa3\xdd\x16\xf4\x12\xf4\x12\xf4\x12\xf4\x12\xf4\x12\xf4\x12\xf4\xf2\xec\xe8\x25\x90\x1f\x90\x1f\x90\x1f\x90\xdf\xa0\x47\x14\xc8\xaf\xda\x3d\x40\x7e\x53\x40\x7e\x03\x89\x6d\xec\x18\xfb\x1d\x39\xc0\xb1\x91\x8f\x00\x18\x02\x18\xd6\x4a\x1d\x10\x30\x04\x2c\x04\x2c\x04\x2c\x64\x80\x85\x80\x85\x80\x85\x80\x85\x80\x85\x80\x85\x80\x85\x80\x85\x80\x85\x80\x85\x80\x85\x80\x85\x80\x85\x6d\x77\xff\x93\x86\x3a\xae\xb3\x35\x20\xde\xb1\xb9\xcd\x80\x9f\x80\x9f\x80\x9f\x80\x9f\x80\x9f\x80\x9f\xe7\x0a\x3f\x63\x5d\x79\x92\x09\x9f\x54\xb8\x5c\x08\x2f\xe4\x72\x31\x84\xd0\xc7\x3b\x57\xb1\xdf\xa8\x62\xef\x75\xc5\x4e\x13\x05\xd9\x58\x15\x04\x44\x82\x6f\x8e\x86\x6f\xf6\x1b\x10\xd9\xb8\x3e\x80\x3b\x81\x3b\x81\x3b\x81\x3b\x81\x3b\x81\x3b\x81\x3b\x81\x3b\x3b\xda\x6d\x81\x3b\x81\x3b\x81\x3b\x81\x3b\x81\x3b\x81\x3b\x81\x3b\xcf\x0e\x77\x02\x0f\x02\x0f\x02\x0f\x02\x0f\x0e\x7a\x44\x81\x07\xab\xdd\x03\x3c\x38\x31\x3c\x38\x90\x30\xc9\xfe\x10\xe1\x91\x23\x26\xb7\x01\x14\xc0\x45\xc0\xc5\x5a\xa9\x03\x82\x8b\x00\x8b\x00\x8b\x00\x8b\x00\x8b\x00\x8b\x00\x8b\x00\x8b\x00\x8b\x00\x8b\x00\x8b\x00\x8b\x00\x8b\x00\x8b\x00\x8b\x00\x8b\x00\x8b\xa3\x00\x8b\xe5\x38\xca\x16\x66\x07\x84\x54\x36\xb7\x19\xcc\x14\xcc\x14\xcc\x14\xcc\x14\xcc\x14\xcc\xf4\x6c\x99\xa9\xf2\x07\x11\x40\xa9\xfc\x13\x85\x4b\x2a\x1f\xc1\x91\xe0\x97\xa3\xe1\x97\x3d\x07\x47\x2a\x1f\xc4\x12\xc4\x12\xc4\x12\xc4\x12\xc4\x12\xc4\x12\xc4\x12\xc4\xb2\xa3\xdd\x16\xc4\x12\xc4\x12\xc4\x12\xc4\x12\xc4\x12\xc4\x12\xc4\xf2\xec\x88\x25\xb0\x1e\xb0\x1e\xb0\x1e\xb0\xde\xa0\x47\x14\x58\xaf\xda\x3d\xc0\x7a\xa3\xc6\x7a\x43\x09\x7c\xec\x08\xed\x1d\x3b\xcc\xb1\x82\x42\x00\x05\x01\x05\x6b\xa5\x0e\x08\x0a\x02\x08\x02\x08\x02\x08\x02\x08\x02\x08\x02\x08\x02\x08\x02\x08\x02\x08\x02\x08\x02\x08\x02\x08\x02\x08\x02\x08\x02\x08\x02\x08\x0e\x10\x08\x56\x42\x18\xeb\x46\x06\x04\x2c\x36\xb7\x19\x64\x13\x64\x13\x64\x13\x64\x13\x64\x13\x64\xf3\x8c\xc9\x66\x26\x16\x31\x19\x9c\x86\x11\xb8\xf8\xd5\x56\xe7\x64\x01\x8c\x79\x05\x10\xc8\x08\x66\x39\x1a\x66\xd9\x7b\x20\x63\xbe\x2a\xc0\x2f\xc1\x2f\xc1\x2f\xc1\x2f\xc1\x2f\xc1\x2f\xc1\x2f\xc1\x2f\x3b\xda\x6d\xc1\x2f\xc1\x2f\xc1\x2f\xc1\x2f\xc1\x2f\xc1\x2f\xc1\x2f\xcf\x8e\x5f\x02\xfb\x01\xfb\x01\xfb\x01\xfb\x0d\x7a\x44\x81\xfd\xaa\xdd\x03\xec\x37\x09\xec\x37\x9c\xc0\xc6\x4e\xd1\xdf\xf1\x03\x1c\x1b\x10\x09\xa0\x21\xa0\x61\xad\xd4\x01\x41\x43\x00\x43\x00\x43\x00\x43\xf3\x23\x80\x21\x80\x21\x80\x21\x80\x21\x80\x21\x80\x21\x80\x21\x80\x21\x80\x21\x80\x21\x80\x21\x80\x21\x80\xe1\x20\x81\x61\x2d\xe0\xb1\xd9\xd8\x80\xc0\xc7\xe6\x36\x83\x80\x82\x80\x82\x80\x82\x80\x82\x80\x82\x80\x9e\x2b\x01\x4d\x84\x03\x5d\x5a\xac\x4c\x94\x16\xea\x86\x10\x02\xf9\xa5\xa8\xd8\x7b\x57\xb1\xd3\x04\x43\x36\x56\x05\x61\x91\x20\x9c\xa3\x21\x9c\xfd\x86\x45\x36\xae\x0f\xf0\x4e\xf0\x4e\xf0\x4e\xf0\x4e\xf0\x4e\xf0\x4e\xf0\x4e\xf0\xce\x8e\x76\x5b\xf0\x4e\xf0\x4e\xf0\x4e\xf0\x4e\xf0\x4e\xf0\x4e\xf0\xce\xb3\xe3\x9d\xc0\x83\xc0\x83\xc0\x83\xc0\x83\x83\x1e\x51\xe0\xc1\x6a\xf7\x00\x0f\x4e\x0c\x0f\x0e\x24\x54\xb2\x3f\x44\x78\xe4\xa0\xc9\x6d\x00\x05\x70\x11\x70\xb1\x56\xea\x80\xe0\x22\xc0\x22\xc0\x22\xc0\x22\xc0\x22\xc0\x22\xc0\x22\xc0\x22\xc0\x22\xc0\x22\xc0\x22\xc0\x22\xc0\x22\xc0\x22\xc0\x22\xc0\x22\xc0\xe2\x28\xc0\x62\x39\x90\xb2\x85\xd9\x01\x21\x95\xcd\x6d\x06\x33\x05\x33\x05\x33\x05\x33\x05\x33\x05\x33\x3d\x5f\x66\x6a\x1a\xf1\xff\x96\x2a\xe3\xc3\x08\xa5\x34\x15\xfa\xbf\xba\x42\xa7\x0a\xa1\x2c\x55\x01\xa1\x93\xa0\x9b\xa3\xa1\x9b\x7d\x87\x4e\x96\xd6\x05\xc8\x26\xc8\x26\xc8\x26\xc8\x26\xc8\x26\xc8\x26\xc8\x26\xc8\x66\x47\xbb\x2d\xc8\x26\xc8\x26\xc8\x26\xc8\x26\xc8\x26\xc8\x26\xc8\xe6\xd9\x91\x4d\xe0\x3f\xe0\x3f\xe0\x3f\xe0\xbf\x41\x8f\x28\xf0\x5f\xb5\x7b\x80\xff\x26\x82\xff\x06\x13\x2a\xd9\x35\x02\x3c\x7a\x88\x64\x33\x28\x01\x3c\x04\x3c\xac\x95\x3a\x20\x78\x08\x70\x08\x70\x08\x70\x98\xff\x08\x70\x08\x70\x08\x70\x08\x70\x08\x70\x08\x70\x08\x70\x08\x70\x08\x70\x08\x70\x08\x70\x08\x70\x08\x70\x38\x48\x70\x58\x0d\x89\x5c\x6b\x6e\x40\x28\x64\x73\x9b\xc1\x42\xc1\x42\xc1\x42\xc1\x42\xc1\x42\xc1\x42\xcf\x95\x85\xa6\xc2\x4b\x44\x36\x84\x18\xc8\x7b\xaa\xc9\x69\x82\x1f\xcd\xb7\x11\xf5\x08\x70\x39\x1a\x70\xd9\x6f\xd4\xa3\x59\x10\xa0\x96\xa0\x96\xa0\x96\xa0\x96\xa0\x96\xa0\x96\xa0\x96\xa0\x96\x1d\xed\xb6\xa0\x96\xa0\x96\xa0\x96\xa0\x96\xa0\x96\xa0\x96\xa0\x96\x67\x47\x2d\x81\xf8\x80\xf8\x80\xf8\x80\xf8\x06\x3d\xa2\x40\x7c\xd5\xee\x01\xe2\x1b\x3b\xe2\x1b\x48\x9c\x63\x87\x98\xef\xc8\x01\x8e\x2b\x4c\x04\x80\x10\x80\xb0\x56\xea\x80\x00\x21\xe0\x20\xe0\x20\xe0\x20\xe0\x20\xe0\x20\xe0\x20\xe0\x20\xe0\x20\xe0\x20\xe0\x20\xe0\x20\xe0\x20\xe0\x20\xe0\x20\xe0\x20\xe0\xe0\x30\xe1\x60\x39\xa4\xb1\xc9\xce\x80\x58\xc6\xe6\x36\x03\x74\x02\x74\x02\x74\x02\x74\x02\x74\x02\x74\x9e\x2f\xe8\x4c\x9e\xa4\x27\xb8\xe7\x69\xa5\x68\x18\x31\x8d\x54\xa3\x5b\x53\xa3\x53\xc5\x36\x96\xeb\x80\x18\x47\x20\xcc\xd1\x20\xcc\xbe\x63\x1c\xcb\x0b\x03\x38\x13\x38\x13\x38\x13\x38\x13\x38\x13\x38\x13\x38\x13\x38\xb3\xa3\xdd\x16\x38\x13\x38\x13\x38\x13\x38\x13\x38\x13\x38\x13\x38\xf3\xec\x70\x26\x10\x20\x10\x20\x10\x20\x10\xe0\xa0\x47\x14\x08\xb0\xda\x3d\x40\x80\x53\x41\x80\x83\x89\x79\xec\x1c\x03\x1e\x3d\xf6\x71\x0d\x2b\x01\x40\x04\x40\xac\x95\x3a\x20\x80\x08\x78\x08\x78\x08\x78\xe8\x7e\x04\x3c\x04\x3c\x04\x3c\x04\x3c\x04\x3c\x04\x3c\x04\x3c\x04\x3c\x04\x3c\x04\x3c\x04\x3c\x04\x3c\x04\x3c\x1c\x24\x3c\xac\xc6\x42\xae\xb7\x37\x20\x26\xb2\xb9\xcd\x00\xa2\x00\xa2\x00\xa2\x00\xa2\x00\xa2\x00\xa2\x67\x0e\x44\x07\x14\x0c\x79\xd2\x28\x48\x84\x3f\x82\x5e\x8e\x86\x5e\x1e\x25\xfc\x11\xe8\x12\xe8\x12\xe8\x12\xe8\x12\xe8\x12\xe8\x12\xe8\x12\xe8\xb2\xa3\xdd\x16\xe8\x12\xe8\x12\xe8\x12\xe8\x12\xe8\x12\xe8\x12\xe8\xf2\xec\xd0\x25\x30\x1f\x30\x1f\x30\x1f\x30\xdf\xa0\x47\x14\x98\xaf\xda\x3d\xc0\x7c\xa3\xc7\x7c\xc3\x0a\x78\x1c\x71\xa4\x23\x20\x21\x20\xe1\x28\x20\x21\x00\x21\x00\x21\x00\x21\x00\x21\x00\x21\x00\x21\x00\x21\x00\x21\x00\x21\x00\x21\x00\x21\x00\x21\x00\x21\x00\x21\x00\x21\x00\xe1\x40\x01\x61\x43\x6c\x23\x82\x1a\x41\x3b\x41\x3b\x07\xc2\xc6\x40\x3b\x41\x3b\x41\x3b\x41\x3b\x6b\x9d\x76\x62\xda\x79\x72\xb0\xe9\x38\xe1\x08\xd1\x26\x90\x26\x90\xe6\x99\x23\xcd\xa6\xb5\x00\xa8\x09\xa8\x09\xa8\x09\xa8\x09\xa8\x09\xa8\x09\xa8\x09\xa8\x09\xa8\x09\xa8\x09\xa8\x09\xa8\x09\xa8\x09\xa8\x09\xa8\x09\xa8\xb9\xc3\xb6\x5f\x86\x9a\x6b\x4c\x0d\x63\xc2\x9a\xa0\x7b\xa0\x7b\xa0\x7b\xe3\x18\x51\xd0\xbd\x6a\xf7\x80\xee\x8d\x80\xee\x29\x7f\x10\x17\x93\xfe\x1f\xe5\x1f\xf7\x56\x52\xe5\xe3\x22\x52\x06\x20\x37\x1a\x20\xd7\xef\x45\xa4\x7a\x39\x80\xc7\x81\xc7\x81\xc7\x81\xc7\x81\xc7\x81\xc7\x81\xc7\x81\xc7\x75\xb4\xdb\x82\xc7\x81\xc7\x81\xc7\x81\xc7\x81\xc7\x81\xc7\x81\xc7\x9d\x1d\x8f\x03\xc0\x02\xc0\x02\xc0\x1a\xc7\x88\x02\x60\x55\xbb\x07\x00\x6b\x24\x00\x6b\x28\x91\x69\x5d\x41\xac\xe3\x04\xa5\x55\x6d\xfe\xc0\x5f\xc0\x5f\xb5\x52\x07\x84\xbf\x80\xbe\x80\xbe\x80\xbe\x80\xbe\x80\xbe\x80\xbe\x80\xbe\x80\xbe\x80\xbe\x80\xbe\x80\xbe\x80\xbe\x80\xbe\x80\xbe\x80\xbe\x80\xbe\x86\x88\xbe\x2a\xa1\x68\x2b\x56\x06\x44\xa1\x01\xe2\x9d\x1e\xf9\x00\xe2\x01\xe2\x01\xe2\x01\xe2\xd5\x3a\xed\xc8\x10\x2f\xd6\xb5\x24\xe9\xe7\x49\x85\xcb\x85\xf0\x42\x2e\x17\x43\x08\x4b\xbb\x73\x15\xfb\x8d\x2a\xf6\x5e\x57\xec\x98\x71\x6a\x8d\x15\xf8\x55\xa6\xd9\x2f\x2a\xb9\x0d\x43\x17\xe1\x9e\x82\xe4\x81\xe4\x8d\x82\xe4\xf5\x1b\xc8\xd6\xb8\x5e\x80\xf7\x80\xf7\x80\xf7\x80\xf7\x80\xf7\x80\xf7\x80\xf7\x80\xf7\x3a\xda\x6d\x81\xf7\x80\xf7\x80\xf7\x80\xf7\x80\xf7\x80\xf7\x80\xf7\xce\x0e\xef\x01\x8a\x01\x8a\x01\x8a\x8d\x63\x44\x01\xc5\xaa\xdd\x03\x28\x36\x3e\x28\x36\x44\x1e\x76\x4a\x14\x86\xeb\x1b\x41\xbd\x40\xbd\x1a\xa9\x17\x80\x17\x80\x17\x80\x17\x80\x17\x80\x17\x80\x17\x80\x17\x80\x57\x47\xbb\x2d\x80\x17\x80\x17\x80\x17\x80\x17\x80\x17\x80\x17\x80\x17\x80\x17\x80\x17\x80\x17\x80\xd7\x20\x47\x14\xc0\xab\xda\x3d\x00\x5e\x23\x04\x5e\x03\xb9\xd6\xb1\x17\xe8\x75\x94\x2b\x1e\x37\x70\x01\xe0\x32\xe0\xb2\x5a\xa9\x03\xc2\x65\x40\x65\x40\x65\x40\x65\xa5\x1f\x81\xca\x80\xca\x80\xca\x80\xca\x80\xca\x80\xca\x80\xca\x80\xca\x80\xca\x80\xca\x80\xca\x80\xca\x80\xca\x06\x89\xca\xca\x57\x3f\x6e\xb6\x38\xe0\x1a\x48\x00\xc0\xd3\xe3\x22\x00\x40\x00\x40\x00\x40\x00\xc0\x5a\xa7\x1d\x1b\x00\x2a\x7f\x10\x41\x6e\xca\x3f\x6a\x5c\x9b\xf2\x71\xa1\x63\xd3\xe0\x81\xd5\x8d\x82\xd5\xf5\x1c\xda\xa6\x7c\x20\x3a\x20\x3a\x20\x3a\x20\x3a\x20\x3a\x20\x3a\x20\x3a\x20\xba\x8e\x76\x5b\x20\x3a\x20\x3a\x20\x3a\x20\x3a\x20\x3a\x20\x3a\x20\xba\xb3\x43\x74\x80\x59\x80\x59\x80\x59\xe3\x18\x51\xc0\xac\x6a\xf7\x00\x66\x8d\x02\x66\x65\x62\x11\x93\x5d\x62\x18\x50\xeb\xab\xad\xce\x91\xe1\x56\xfe\x59\x40\xae\xa6\xc1\x04\xe4\x02\xe4\xba\x28\xad\x12\xc0\x2e\xc0\x2e\xc0\x2e\xc0\x2e\xc0\x2e\xc0\x2e\xc0\x2e\xc0\xae\x8e\x76\x5b\xc0\x2e\xc0\x2e\xc0\x2e\xc0\x2e\xc0\x2e\xc0\x2e\xc0\x2e\xc0\x2e\xc0\x2e\xc0\x2e\xc0\xae\x41\x8e\x28\x60\x57\xb5\x7b\x00\xbb\x86\x0f\xbb\x12\xe1\x58\x88\x96\x3a\x12\xa5\xcf\xfc\x21\x60\xaf\x2f\x45\xc5\xde\xbb\x8a\x1d\x13\x80\x35\x56\x00\x28\xac\x69\x80\x81\xc2\x80\xc2\x2e\x1a\xd7\x0b\xa0\x18\xa0\x18\xa0\x18\xa0\x18\xa0\x18\xa0\x18\xa0\x18\xa0\x58\x47\xbb\x2d\xa0\x18\xa0\x18\xa0\x18\xa0\x18\xa0\x18\xa0\x18\xa0\x18\xa0\x18\xa0\x18\xa0\x18\xa0\xd8\x20\x47\x14\x50\xac\xda\x3d\x80\x62\x63\x80\x62\xa6\xb6\xff\x6f\xa9\x32\x3e\x0c\x18\x66\x2a\xf4\x7f\x75\x85\x8e\x0b\xc1\x4a\x1f\x06\xfc\x6a\x1a\x50\xc0\x2f\xc0\xaf\x8b\xca\x3a\x01\xf4\x02\xf4\x02\xf4\x02\xf4\x02\xf4\x02\xf4\x02\xf4\x02\xf4\xea\x68\xb7\x05\xf4\x02\xf4\x02\xf4\x02\xf4\x02\xf4\x02\xf4\x02\xf4\x02\xf4\x02\xf4\x02\xf4\x02\xf4\x1a\xe4\x88\x02\x7a\x55\xbb\x07\xd0\x6b\xf8\xd0\x2b\x15\x5e\x22\xb2\x21\xd0\xae\x7b\xaa\xc9\x31\x31\x97\xf9\x22\xf8\x56\xd3\x10\x82\x6f\x81\x6f\x5d\x98\x05\x02\xb0\x05\xb0\x05\xb0\x05\xb0\x05\xb0\x05\xb0\x05\xb0\x05\xb0\xd5\xd1\x6e\x0b\xb0\x05\xb0\x05\xb0\x05\xb0\x05\xb0\x05\xb0\x05\xb0\x05\xb0\x05\xb0\x05\xb0\x05\xb0\x35\xc8\x11\x05\xd8\xaa\x76\x0f\xc0\xd6\x18\xc0\x56\xf2\x24\x3d\xc1\x3d\x4f\x0b\xce\xc3\x00\x5c\x54\xa3\x5b\x53\xa3\xe3\x82\xae\xf2\x97\x01\xbc\x9a\x86\x14\xc0\x0b\xc0\xeb\xa2\xba\x50\x00\xbe\x00\xbe\x00\xbe\x00\xbe\x00\xbe\x00\xbe\x00\xbe\x00\xbe\x3a\xda\x6d\x01\xbe\x00\xbe\x00\xbe\x00\xbe\x00\xbe\x00\xbe\x00\xbe\x00\xbe\x00\xbe\x00\xbe\x00\xbe\x06\x39\xa2\x00\x5f\xd5\xee\x01\xf8\x1a\x0d\xf8\x1a\x10\xf1\x3a\x01\xea\x02\xe3\x6a\x1a\x44\x30\x2e\x30\xae\x9c\x71\x01\x6e\x01\x6e\x01\x6e\x01\x6e\x01\x6e\x01\x6e\x01\x6e\x01\x6e\x75\xb4\xdb\x02\x6e\x01\x6e\x01\x6e\x01\x6e\x01\x6e\x01\x6e\x01\x6e\x01\x6e\x01\x6e\x01\x6e\x01\x6e\x0d\x72\x44\x01\xb7\xaa\xdd\x03\xb8\x35\x54\xb8\x95\xde\xec\x05\xb3\xfa\x86\x39\x6d\x40\x59\x20\xb2\x92\x38\x7b\x7b\xf7\xd1\x9d\x10\x1b\x78\x56\x20\xb2\xdb\xbb\x8f\xbf\x35\x3c\x78\x2a\x6e\x35\x5a\x9c\x74\x7b\xf7\xf1\x6f\x89\x5a\xc6\xbf\xca\x74\xf4\x40\x49\x37\xac\xf4\xf4\xab\xf2\x17\xab\xcb\x85\xfb\x0b\x49\xc8\x20\x11\x81\xd4\xb2\x0a\x71\x0d\xdd\x5b\x52\x8d\x7b\x2d\xc9\x68\xae\x92\x85\x3b\x15\x38\x33\xb4\x6b\xf3\x5a\x6a\xea\x8d\x7c\x62\x60\x75\x75\xb0\xba\x46\xbf\xb2\x9a\x66\x48\x07\x4b\xed\xe9\xed\xb8\x57\x5b\xc5\x10\x63\xc4\x8f\x3d\x96\xda\x6f\x6f\x6f\xef\x3e\x7e\x69\x2a\x00\x0b\x6e\xf7\x05\x97\x77\xe4\x24\x4e\xb4\xa6\xe9\x52\xf5\x99\x38\x60\xe9\x2d\x96\x19\xcf\x64\x14\x3c\x8b\x87\x47\xa5\xbe\x57\xa0\x62\xc5\x3d\xca\x58\xc3\xba\xf5\x90\x32\x65\x32\x4f\x85\xa1\xf0\xf2\xe3\xea\x93\xad\xd1\xef\xa6\x46\xef\xcb\x35\xda\xb0\xb0\x4c\x59\x6b\xd6\xd6\x7b\xf7\x85\xb6\xa5\xaf\xf1\xe1\x60\xf5\x09\x62\x84\xff\x07\xe5\xbf\xd4\xe7\x76\x2e\xfd\x37\xfd\xd6\xcb\xbc\xff\x40\x3d\xf0\x39\x36\x43\xd7\x6e\xd6\x6f\x9e\xee\x70\x0b\x80\x5b\x00\xdc\x02\xe0\x16\x30\x35\xb7\x80\x0d\x46\x9b\x6d\xae\x01\x9b\x0d\x80\x9b\x8d\x37\x3b\xed\xbd\xbf\xeb\x8e\xb3\x40\xe4\x8a\xbc\x88\x3d\x3d\xa3\xcc\x3c\xa8\xb4\xad\xec\x82\xf7\x20\x58\xac\x7b\x2b\xcd\x84\x3f\x63\xb7\x11\x93\x91\xd9\x59\x54\xc2\x96\x91\xdb\x9c\x7c\xe6\x27\x2f\x5f\x96\x11\xf3\x65\xa2\xcf\xc5\x27\xe1\x66\xbc\xde\x3e\x09\x5f\xd9\x25\x9f\xcf\x0d\xdb\xc1\x6c\xbe\x4c\x68\x95\xc5\x89\xf2\x44\x4a\x9c\xc9\x5a\x1e\xed\x2c\x9b\xb1\xdf\xe8\x8b\x34\x5a\x34\x77\x7e\x60\xd7\xec\x36\x0c\x7f\x20\x8a\xe4\xeb\x5d\x7a\x19\xe9\x81\x0f\x44\xea\xa6\xa4\x2d\x4e\xf8\x7b\x0c\x94\x69\xcb\x69\x86\xe9\x68\xbe\x1c\xed\xba\x62\xbd\x3f\xc7\xd1\x7a\xe4\x6b\xd9\x28\x2d\x23\x96\x1a\x5b\x31\x7b\x10\x73\xe3\x74\xea\xb8\x5f\x21\x4a\xd8\xdd\x8b\xa6\xce\x52\x98\xc3\xe1\x41\xb0\x48\x45\xd7\x91\x08\x38\x4d\x50\x6b\x56\x9e\xb1\xaf\xee\xc0\x36\x3e\x00\x6e\x69\x58\x71\x52\x2e\x16\xc2\x97\x3c\x13\xe1\x4b\xe1\x0d\x5a\x1c\xb9\x32\xbc\xb2\x66\x63\xea\x74\x16\x24\xdc\xa3\x55\x23\x95\xef\x04\x82\xe2\xd0\x26\x57\xdb\x7c\x96\x2e\x53\x5d\xc9\xf2\x70\x71\xfd\x66\xde\x20\xfb\x91\xb9\xd9\x03\xf3\x22\x66\xa6\x9e\x0b\xc1\xa3\xc6\x3a\xee\x31\xcc\x54\xe7\x3b\xaa\x72\x93\x29\x7e\x8b\x31\x7e\x28\xd3\x7f\x17\x37\x9e\x76\xfd\xb2\xde\x95\xe7\x68\xd3\x1f\x4e\x3d\x70\xea\x81\x53\x0f\x9c\x7a\xe0\xd4\xd3\x9b\x53\x4f\xcb\xb3\x60\xc5\xb1\xe7\x78\xc7\xe2\x87\x52\x2c\x5f\x1c\x0a\x9e\x0a\xb7\x05\xdd\x25\x2a\xe6\x01\x49\x47\x77\x2a\x94\xde\x4b\x25\x84\x24\x9f\x74\x45\x30\xa0\x9e\x76\x6f\x67\x7f\x99\xb1\x7b\xb3\x9f\x19\xd1\x25\x16\x91\x5e\x2c\xc5\x99\x2a\x98\x4a\xe2\x47\x1e\xe5\x21\x2d\xc9\x52\xdc\xcc\x79\x98\xeb\xca\xdf\x2e\xcc\xcf\xdf\x2e\xd8\x5c\x46\x3c\x94\xff\xce\x0f\x92\x07\xc1\xb8\x4f\x9e\x1e\xea\xc6\x50\x70\xbf\x50\xc3\x4c\xf1\x97\x69\xf1\x92\xd1\x4f\x67\xec\x67\x49\x9b\x63\xa9\xea\x2a\x59\x6d\x5b\xe1\xd7\x93\x19\xf5\x98\x74\x14\x95\x3d\xee\x33\xa0\xa6\x05\x1f\xf2\xb6\xaf\x15\x79\x9a\x98\x7a\xb7\x8a\x19\x35\x5d\x2f\xd8\x47\xf5\xcc\x02\x9e\x3c\xf0\xa0\x62\xc5\x74\x4a\x8d\x48\xe6\x2a\x59\xe8\x31\x69\xec\xaf\xcf\xb5\x16\xad\xef\x2e\x12\x7a\x73\x89\x35\x36\x7d\x2b\xb5\x34\xe9\x49\xbf\x50\x85\x49\x56\x20\xe3\x84\x1b\xe3\x94\x78\x20\xfd\x9a\x4b\x03\xb3\xd2\x60\xe6\xe7\x88\x73\xac\x71\xe1\x59\xd5\x8f\xcd\xd8\xad\xe7\x89\x38\xa3\xb3\xa9\xac\xd9\x5d\x9a\x36\x5c\xb2\x6b\x3b\x01\xab\x13\x34\xfd\x91\x5d\xfe\xc4\xbd\xef\x41\xa2\x96\x91\xaf\x9f\xa2\x50\x27\x7a\xa8\xd6\x71\x46\x84\xb4\xf2\x71\xb5\x90\xbc\x05\x0f\xae\xa4\x1f\xd9\xe5\x2f\x2a\x11\xa5\x62\x99\xc7\x53\x8f\xfb\xba\xf5\xb6\x7f\x4c\x24\x1c\x95\x97\x1a\xd5\x73\xa5\xc0\xb9\x2b\x63\x9f\x09\x19\xd7\xa7\xfb\x69\x24\xce\x09\x7b\xe0\xb5\x1b\x87\x4d\x5e\x78\xa7\x1a\x05\xf8\xe3\xf5\x36\xbe\xab\x3e\x79\xc7\xb3\x6d\x9c\xd2\x3b\xaf\x5d\x67\x6d\xf0\xd0\x3b\x54\xfe\x69\x44\x7a\xc0\xd3\x3b\x62\xba\xfb\x8c\x67\xcb\xb6\x7c\x6e\xcc\x54\xba\x54\xc2\x9a\x48\x7e\x73\x38\x17\x82\x53\x17\x01\xfd\x9b\x80\x77\x73\xb0\x7f\x4b\x24\xbc\xcb\x0d\x00\x9d\xdf\x25\x62\x8c\x69\x89\x55\xc0\x73\xa9\x5f\xcd\x99\x6e\xc4\xbe\xc8\x5c\x17\xba\x06\x98\x77\x8d\xc9\x71\xdd\xc1\xf9\x5c\x77\xd0\xee\x9c\xda\x76\xe5\xc1\xf1\x14\x3a\x78\x39\xc0\xcb\x01\x5e\x0e\xf0\x72\x80\x97\x43\xd3\xe6\x0b\x7c\x3e\xa2\x1e\x01\x51\x05\x51\x05\x51\x05\x51\x05\x51\x05\x51\x9d\x16\x51\x05\xe4\x00\xe4\x00\xe4\x00\xe4\xe8\x1d\x72\xec\xe0\x08\x30\xd0\x0b\x09\xda\x75\xe1\xea\xa5\x04\x87\x5a\xdc\x06\x85\x87\xd6\xbe\x70\x5e\x97\x48\xcf\x9a\x71\xc8\xd3\xdb\xd9\x26\x0b\xff\x99\x84\x4d\x6e\x07\x54\x5d\xdd\x32\x3d\x08\x28\xb5\xc7\xb5\xd4\x63\xb9\xaa\xea\x55\x6d\x44\x2f\x62\x95\x76\x4c\xe0\x8c\xf2\xc3\xf8\xbe\xb0\xcd\xbc\x7f\x24\xdc\xb6\x5f\x54\xaa\x96\x92\x65\x22\x7c\xdb\xbd\x27\xde\x84\x3a\x89\x60\x45\x14\x55\x79\x42\x0c\x36\x8a\x8a\xec\x23\x9f\x78\xc4\x03\x91\x18\x4b\x9f\xae\x15\xe3\x69\xaa\x3c\x49\xaa\xab\xb3\xa9\x71\x32\x8d\xaa\x84\x89\x28\xd3\xb2\x64\xae\xcb\x2f\xf8\x77\xdd\x8b\xd9\xa3\x48\x45\x2e\x90\x95\x63\x85\xf2\x98\x22\x12\x48\xc9\x7e\xa6\x12\xf6\xf6\xdd\x5f\xf5\xb3\x09\xf7\x08\x98\x85\x2a\x0a\x8c\xf8\x45\x36\x2e\x4f\x45\x19\x97\x91\xd9\xe0\xc8\x86\x54\x3c\x4b\x10\xc1\xe2\x3c\xf6\xf0\xe2\x34\x8c\x40\x85\x3c\x0a\x66\x2a\x09\x6e\xe2\xef\xc1\xcd\x32\x92\x9e\xf2\xc5\xcd\x9f\x3e\xa6\x77\xba\x94\xbd\x8d\xd2\xb6\x73\xba\x1c\x9e\x41\xc9\x6b\x53\x14\xa3\xda\x8a\x50\xef\x5a\x88\x50\xef\x8d\xed\x6d\x3c\x4d\x7a\xb7\xb5\x49\xc6\xa3\x78\x3c\x6d\x9a\xb4\xa4\x4b\x02\xd3\xc8\x25\xdd\x57\xac\xdb\xeb\x4f\x6e\xfe\x47\x6f\xc1\xff\x39\xd2\x2d\x28\x7b\x4b\x96\x1b\x6f\x3e\x19\x86\x64\x39\x92\xfb\x4e\x20\x2d\x96\x07\x79\xb0\xd2\x22\x22\xcc\xcf\x28\xc2\x1c\xa1\x74\x08\xa5\x43\x28\x1d\x42\xe9\xa0\xe8\xae\x5b\x45\x83\x8c\x5b\x39\x8d\x02\x88\xb0\x9b\xf6\x61\x37\x63\xd7\xf6\x9c\xad\xbf\xf3\x60\x9b\x44\x70\xbf\x26\xa3\xed\xa9\x9a\xe9\x92\x0e\x55\xcc\xb0\x4f\xc1\xd2\x93\x8f\x5b\x17\xab\x3f\x10\xa3\x37\xf4\x1c\x82\x34\x09\x2c\x58\xed\xb9\x7d\x8d\x8c\x08\x13\xf3\xec\xb1\x19\x66\xd2\xff\x57\x7e\xd9\x00\xd3\x7a\x4e\x21\x32\x5e\x68\x4b\x0e\x15\x7b\x5d\xfe\x7d\x4d\xef\xfe\x79\xf3\x46\xb8\x10\x49\x20\x5a\x3d\x49\xf3\x59\x04\xd2\xbb\x6e\xff\x8e\xfe\xfb\xc5\x3e\x49\x5b\x6e\x9b\xa3\x26\xe6\x49\x26\x29\xde\xc9\x38\xff\x74\x73\xec\x50\x25\x06\x6d\x10\xec\x0b\x35\x6f\x10\x00\xef\xaa\xee\x3a\x0c\x66\xc2\x89\x9b\x09\xcf\x07\x2a\xd7\x82\x0c\xf2\xc5\x65\x02\x61\xf4\xb6\x54\x04\x57\xbf\x5e\xb3\x65\xbd\x21\x23\x89\x89\x7e\xe5\x21\xbd\x19\xa9\xe8\xda\xbc\x4d\x4f\x90\x9d\x32\x65\xaf\xff\x9e\xaa\xe8\xce\xc4\x18\x7f\xd2\x9b\xa3\xfd\xfb\x3e\xdf\x32\x8b\x7f\x7c\x33\x24\xda\xdd\x7e\xde\xfc\xa2\x12\x8f\x0c\xb9\x81\xa2\xc1\x57\xec\xdb\xc5\x5c\xff\xdb\xb7\x0b\x76\x5b\xe9\x4d\x72\x61\x36\x56\xd7\x65\x5a\xc4\x53\x5e\x73\x8f\x06\x80\xa2\x54\x43\xe9\x59\x3b\x92\x08\xfd\x94\xa9\x67\x3b\xb6\x26\x8a\x33\x16\x2a\x0e\xc5\x8c\x99\x6f\x52\x70\x7a\x3e\xa7\xc8\x91\xb8\x71\x20\xdc\xe7\xf7\xe9\x5e\xfd\xa1\xe9\xba\x7d\x42\x6b\x99\xa8\xd6\x12\xd7\x5c\x75\x47\xae\xb7\x2c\x3b\x37\x59\xc4\x21\xf7\x3a\x12\x1f\x6d\x61\x67\x29\x40\xc2\x57\x11\x62\x25\xc4\x4a\xf8\x2a\x42\xc8\x70\x7f\xd7\xb8\xce\xe4\x7c\x15\xa7\x2d\x37\x2d\x47\x6f\xed\x7d\xc5\x76\x76\xeb\xa3\x13\x70\x60\x79\xcd\x7e\x73\x75\xea\x27\xb3\x59\xfb\xf2\xe1\xeb\x87\x5b\xbf\x70\xeb\x17\x6e\xfd\xc2\xad\x5f\xb8\xf5\xeb\x24\x2a\x14\x34\xdd\xd6\x03\x85\xdc\x66\x43\xba\x9c\x0d\x9e\xe7\x67\xe4\x79\x8e\x9b\xf8\x70\x13\x1f\x6e\xe2\xc3\x4d\x7c\xb8\x89\x0f\x37\xf1\xe1\x26\x3e\x04\x64\x21\x20\x0b\x01\x59\x08\xc8\xaa\xcf\x48\xe4\x36\xc3\xb5\x9f\xb8\xf6\x13\xd7\x7e\x8e\xfc\xda\xcf\x46\xac\x07\x07\x03\x04\x59\x8e\x3b\xb7\x59\x6b\x28\x3c\xe0\xec\x66\x7b\x83\xf3\x0d\xf9\xcd\xba\x87\xe5\xc8\x70\x86\x0c\x67\xe6\x27\x64\x38\x83\xaf\x03\x7c\x1d\xe0\xeb\x00\x5f\x07\xf8\x3a\x00\xa2\x83\xab\x6e\xef\x11\x70\x55\x70\x55\x70\x55\x70\x55\x70\xd5\x33\xe6\xaa\x40\x1d\x40\x1d\x40\x1d\x40\x1d\xc8\x70\x86\x0c\x67\xc8\x70\xe6\x7e\xd9\x3f\x36\x74\xb3\x8d\x1f\x39\xce\x4e\x9e\xe3\xac\x17\x38\x85\x2c\x67\x9d\x64\x39\xdb\x1b\xba\x6d\xcc\x73\x36\x94\x18\xd5\xe3\xdf\x1e\xb2\xa5\xe5\xed\x36\x22\x44\x55\x4d\x20\xaa\x0a\xf7\x87\xe0\xfe\x90\x86\xca\x8c\x5e\xa0\x1a\xe9\x0d\x22\x5d\x35\x6a\x58\xf9\xce\xba\x69\xd5\xa4\xe5\xde\xd3\x65\x3c\xeb\x52\xee\x7d\xc5\xba\xbe\x1c\xe5\xd8\x59\xcf\xfa\xb9\x17\x65\x28\x92\xe6\x48\x6e\x43\x81\xec\x58\x1e\xe4\xc1\xca\x8e\x88\x3f\x3f\xa3\xf8\x73\x04\xda\x21\xd0\x0e\x81\x76\x08\xb4\x83\xda\xbb\x6e\x15\x0d\x32\xaa\x05\x99\xcf\x86\xab\xf3\x9d\x32\xf3\xd9\x38\x42\x71\x1a\x72\x9f\xed\xad\xa0\x6d\xc8\x7e\xb6\x83\x7a\x86\xdd\x0a\x96\x9f\x62\xe4\x46\x9d\x01\x6d\x28\xc0\xb3\x9c\x03\x6d\x97\x3a\x21\x0b\x1a\xb2\xa0\x9d\x20\x0b\xda\xde\x07\xd0\xa6\x3c\x68\x43\x31\x10\x22\x13\x1a\xcc\x86\x40\xce\xc8\x84\xb6\x3a\x63\x90\x09\x0d\x99\xd0\xa0\xbf\x40\x7f\x19\x52\x2e\xb4\x7e\x34\x98\xe3\x64\x43\x3b\xc0\x8e\xb1\x29\x1f\xda\xd4\x05\x49\xf8\x34\x42\xc0\x84\x80\x09\x9f\x46\x88\x1b\x67\xe6\xd3\x38\x6d\x19\xea\x54\x79\xd1\x4e\xec\xfc\x47\x21\x5d\x37\x0b\x9b\x9c\x6d\x6b\x76\xb4\xce\xf9\x92\xbd\x0d\x20\xf2\xe5\x93\xf4\x97\x3c\x2c\x47\x16\x72\x77\xff\xc7\xa6\xe4\x71\xb3\x92\x5f\xcb\x0f\xce\x23\xe6\x92\x0a\xbe\x2c\x2e\x87\xaa\xdc\xf6\xe3\x04\x3a\x26\xa3\x34\x13\xbc\x62\xf1\xad\x8b\x7b\xcf\x1b\xac\x86\x9b\x2a\xf6\x6b\x2d\x90\x0a\x81\x81\x43\x05\xfa\x14\xd7\xfa\xf3\x93\x88\x10\x01\xe8\x26\xfc\xe9\xc2\x00\xfb\xc8\xaf\xbd\x3b\x13\xc3\x85\x8d\x13\xbe\xb0\x71\x3b\xd2\xdb\x76\x59\xe3\x46\xcb\x60\x07\xb8\x12\x57\x34\xe2\x8a\x46\x5c\xd1\x88\x2b\x1a\xa7\x76\x45\xe3\xf6\x9d\xb7\xf1\x7a\xc6\x9e\x9d\x43\x8e\x76\x29\xe3\xf6\xe6\xaf\xbf\x90\x71\xc8\x7d\xb0\xcb\x35\x8c\xdb\xfb\x60\xfd\x15\x8c\x3d\xf7\x01\x2e\x5e\xc4\xc5\x8b\xb8\x78\x11\x17\x2f\xe2\xe2\xc5\xde\x2e\x5e\x6c\xb1\xfb\xaf\x5c\xba\xb8\x31\xc2\xee\x8c\x7c\x43\xdb\xb5\x66\xc2\x17\x47\x6e\xef\xee\x4d\x97\x46\x1e\xb7\xdf\x71\x55\x64\x2f\x23\xba\x7a\x4d\x64\xcf\xc3\x7a\xd2\xcb\x21\xb7\x77\xcf\x86\x8b\x21\xfb\xde\x36\x87\x7a\x1d\xe4\xf6\x4e\x6b\xa0\x1d\x7b\xdb\xf3\xec\x5f\xff\xec\x07\xbe\x35\xdc\xbe\xd1\x13\x83\x2b\x83\xb7\x28\x17\x04\xf2\x9c\x4b\xbd\x03\xb8\xab\x42\x17\x20\x7d\xc7\xca\x8d\x5a\x9d\x28\x94\x9c\xcb\x8a\x72\x5c\x2a\xbb\x0f\x7c\x07\x74\x07\x74\x37\x4e\x74\x07\x6c\x07\x6c\x07\x6c\x07\x6c\x07\x6c\x07\x6c\x07\x6c\x07\x6c\x07\x6c\x07\x6c\x07\x6c\x07\x6c\x07\x6c\x07\x6c\x07\x6c\x07\x6c\x37\x15\x6c\x57\xbe\xb6\xa6\xbd\xf5\x01\x97\xd6\x00\x4c\x9e\x1e\x63\x01\x4c\x02\x4c\x02\x4c\x02\x4c\xd6\x3a\x6d\x50\x60\x72\x4b\x62\x80\x01\xc4\x05\x6e\x0e\x9e\x3c\x69\x64\x60\x8b\x6c\x73\x00\x8c\x00\x8c\xa3\x04\x8c\x48\x11\x08\xcc\x08\xcc\x08\xcc\x08\xcc\x08\xcc\x08\xcc\x08\xcc\x08\xcc\x08\xcc\x08\xcc\x08\xcc\x08\xcc\x08\xcc\x08\xcc\x08\xcc\x38\x2d\xcc\x08\x08\x07\x08\x07\x08\x37\x8e\x11\x05\x84\xab\x76\x0f\x20\xdc\xc4\x21\xdc\x40\xe2\x03\x8f\x00\xe2\x4e\x13\x21\x38\xfc\xc4\x74\x40\x78\x40\x78\x63\x89\x11\x04\xbe\x03\xbe\x03\xbe\x03\xbe\x03\xbe\x03\xbe\x03\xbe\x03\xbe\xab\x6d\xb7\x03\x44\x57\xc0\x77\xc0\x77\xc0\x77\xc0\x77\xc0\x77\xc0\x77\xc0\x77\x63\xc4\x77\x48\x6e\x0f\x44\x09\x44\xb9\x47\xbf\x03\x51\x02\x51\x02\x51\x02\x51\xae\x47\x94\x0f\x22\xe3\x6f\x6f\xf6\x62\x8f\x27\xc9\x3f\x5a\x1b\xfe\x40\x64\x55\xb9\xde\x8c\xf4\x06\x52\x18\x88\x6c\x0d\x27\xa4\xae\xb8\xbd\xfb\xf8\xa5\xa9\x14\x24\x61\xdd\x91\xd8\x95\x3a\x92\x22\x25\x27\x8a\xed\x68\xd2\x94\x8a\x79\x55\xae\xca\x1e\x2b\xb1\x75\x1a\x4f\xa3\x6b\x75\xeb\x25\x60\xca\x64\x9e\x0a\x43\xe1\xe5\xc7\x47\xdb\x0b\x76\x6b\xeb\xcc\x94\xb5\x69\xa9\xbd\x77\x9f\x69\x7d\x87\x6f\xaf\xd9\xd6\x7b\x59\x06\x1f\xa8\x1b\x3e\xc7\x66\xfc\xda\x2d\x82\xcd\xb3\x1f\xe4\x09\xe4\x09\xe4\x09\xe4\x69\x6a\xe4\xa9\x5d\xe6\xfd\x46\xfa\x74\x60\xd6\xfd\xf6\x7b\xef\xef\xba\xe3\xac\xcd\xed\x8a\xae\xb6\xf0\xf4\x8c\x32\xf3\xa0\xd2\xb6\xb2\x97\xc7\x83\x60\xb1\xee\xad\x34\x13\xfe\x8c\xdd\x46\x4c\x46\x66\x67\x51\x09\x5b\x46\x6e\x73\xf2\x99\x9f\xbc\x7c\x59\x46\xcc\x97\x89\x3e\x17\x9f\x84\x9b\xf1\x7a\xfb\x24\x0b\xa9\x5d\xf2\xf9\xdc\xb0\x1d\xcc\xe6\xcb\x84\x56\x59\x9c\x28\x4f\xa4\x64\xca\xb4\x8a\x9f\x9d\x65\x33\x63\x37\x33\xa3\x45\x73\xe7\x07\x76\xcd\x6e\xc3\xf0\x07\x32\x54\xfa\x7a\x97\x5e\x46\x7a\xe0\xb5\x0a\x95\x4f\x49\x5b\xdc\x6a\x86\xfb\x16\x03\x65\xda\x72\x9a\x61\x3a\x1a\x2e\x6c\xd7\x15\xeb\x91\xe1\xd1\x7a\xe4\x6b\xd9\x26\x20\x23\x96\x1a\x55\x9d\x3d\x88\xb9\xf1\x6b\x72\xa6\xe5\x42\x94\xb0\xbb\x17\x4d\x9d\xa5\x30\x87\xc3\x83\xd6\x86\xa3\xeb\x48\x04\x9c\x26\xa8\xd5\xea\x67\xec\xab\x3b\xb0\x0d\x66\x72\x4b\xc3\xca\x94\x72\xb1\x10\xbe\xe4\x99\x08\x5f\x0a\x87\xa3\xe2\xc8\x95\xe1\x95\xd5\xda\xa9\xd3\x59\x90\x70\x8f\x56\x8d\x54\xbe\x13\x08\x8a\x43\x9b\xbc\xb9\xf2\x59\xba\x4c\x75\x25\xcb\xc3\xc5\xf5\x9b\x79\x83\xec\x47\xe6\x66\x0f\xcc\x8b\x98\x99\x7a\x2e\x04\x8f\x1a\xeb\xb8\xc7\x30\x53\x9d\xef\xa8\xca\x4d\x96\x90\x2d\xb6\x90\xa1\x4c\xff\x5d\x48\x71\xbb\x7e\x59\x4f\x8b\x8f\x36\xfd\xc1\x8d\xc1\x8d\xc1\x8d\xc1\x8d\xc1\x8d\x7b\xe3\xc6\x2d\xcf\x82\x15\x76\x7c\xbc\x63\xf1\x43\x29\x80\x25\x0e\x05\x4f\x85\xdb\x82\xee\x12\x15\xf3\x80\xa4\xa3\x3b\x15\x4a\xef\xa5\xe2\xa5\x9c\x4f\xba\x22\x02\x46\x4f\xbb\xb7\xb3\xbf\xcc\xd8\xbd\xd9\xcf\x8c\xe8\x12\x8b\x48\x2f\x96\xe2\x4c\x15\x4c\x25\xf1\x23\x8f\x72\xaf\xe9\x64\x29\x6e\xe6\x3c\xcc\x75\xe5\x6f\x17\xe6\xe7\x6f\x17\x6c\x2e\x23\x1e\xca\x7f\xe7\x07\xc9\x83\x60\xdc\x27\xd0\xa6\x6e\x0c\x84\xf0\x0b\x35\xcc\x14\x7f\x99\x16\x2f\x19\xfd\x74\xc6\x7e\x96\xb4\x39\x96\xaa\xae\x92\xd5\xb6\x15\x58\x35\x33\xea\x31\xe9\x28\x2a\x7b\xdc\x67\x40\x4d\x0b\x3e\xe4\x6d\x5f\x2b\xf2\x34\x21\x8d\x6e\x15\x33\x6a\xba\x5e\xb0\x8f\xea\x99\x05\x3c\x79\xe0\x41\xc5\x94\xe9\x94\x1a\x91\xcc\x55\xb2\xd0\x63\xd2\xd8\x5f\x9f\x6b\x2d\x5a\xdf\x5d\x24\xf4\xe6\x12\x6b\x6c\xfa\x56\x6a\x69\xd2\x93\x7e\xa1\x0a\x93\xac\x40\xc6\x09\x37\xc6\xfa\xb0\xb6\x27\x69\x2e\x0d\xcc\x4a\x83\x99\x9f\x23\x8e\x6b\xba\x08\x80\xea\xc7\x66\xec\xd6\xf3\x44\x9c\xd1\xd9\x54\xd6\xec\x2e\x4d\x1b\x2e\xd9\xb5\x9d\x80\xd5\x09\x9a\xfe\xc8\x2e\x7f\xe2\xde\xf7\x20\x51\xcb\xc8\xd7\x4f\x91\x37\x3d\x3d\x54\xeb\x38\x23\x42\x5a\xf9\xb8\x5a\x48\xde\x82\x07\x57\xd2\x8f\xec\xf2\x17\x95\x88\x52\xb1\xcc\xe3\xa9\xc7\x7d\xdd\x7a\xdb\x3f\x26\xd8\x82\xca\x4b\x8d\xea\xb9\x52\xe0\xdc\x95\xb1\xcf\x84\x8c\xeb\xd3\xfd\x34\x12\xe7\x84\x1d\x20\xda\x8d\xc3\x26\x27\x88\x53\x8d\x02\xdc\x21\x7a\x1b\xdf\x55\x97\x88\xe3\xd9\x36\x4e\xe9\x1c\xd1\xae\xb3\x36\x38\x48\x1c\x2a\xff\x34\x72\x3d\xd0\xea\x1d\x31\xdd\x7d\xc6\xb3\x65\x5b\x3e\x37\x7a\x48\x5d\x2a\x66\x4d\x80\xa9\x39\xa1\x0b\xe9\xe9\x34\xb1\xa6\x7b\xe6\xa3\xac\x35\x77\x35\xdc\xb4\xf3\xf0\x7a\x63\x56\x4b\xac\x2a\x9e\xcb\xff\x6d\x32\xef\x6e\x20\xe8\xba\xd0\x4d\xfc\xbc\x6b\x6a\x8e\x00\xdb\xf3\x09\xb0\x6d\x77\x6c\x6d\x0b\xb2\x3d\x9e\x7e\x07\xa7\x07\x38\x3d\xc0\xe9\x01\x4e\x0f\x70\x7a\x68\xda\x7c\x41\xd3\x47\xd4\x23\x00\xac\x00\xac\x00\xac\x00\xac\x00\xac\x00\xac\xd3\x02\xac\x60\x1e\x60\x1e\x60\x1e\x60\x1e\xbd\x33\x8f\x1d\xfc\x02\x06\x1a\x1e\xda\xae\x0b\x57\x43\x44\x0f\xb5\xb8\x0d\x8a\x16\xad\x7d\xe1\xbc\xae\x3d\x9d\x35\x83\x11\xcb\x31\x66\x9b\xcc\xfc\xe7\x14\x59\xb9\x1d\x5a\x9d\x2e\xa7\x61\x5f\xa0\x6a\x8f\x7b\x51\xc7\x72\x8f\xc8\xab\xda\xb0\x5e\xc4\x2a\xed\x98\xca\x19\x5d\x88\xf1\x7d\x01\x9c\x79\xff\x98\x08\x6e\xbf\xc0\xd5\x0d\x97\xd6\x9c\x6a\x63\xea\x24\xd2\x15\xd1\x56\xe5\x59\x31\xd8\x68\x2b\x32\x9c\x7c\xe2\x11\x0f\x44\x62\x4c\x80\x74\x5f\x13\x4f\x53\xe5\x49\xd2\x69\x9d\xb1\x8d\x93\xcd\x54\x25\x4c\x44\x99\x16\x32\x73\x25\x7f\xc1\xbf\xeb\x5e\xcc\x1e\x45\x2a\x72\x49\xad\x1c\x53\x94\xc7\x1e\x91\xa4\x4a\x86\x35\x95\xb0\xb7\xef\xfe\xaa\x9f\x4d\xb8\x47\x24\x2d\x54\x51\x60\xe4\x32\x32\x7e\x79\x2a\xca\xb8\x8c\xcc\x56\x47\xc6\xa5\xe2\x59\xa2\x0b\x96\xf3\xb1\x87\x17\xa7\x7a\x04\x2a\xe4\x51\x30\x53\x49\x70\x13\x7f\x0f\x6e\x96\x91\xf4\x94\x2f\x6e\xfe\xf4\x31\xbd\xd3\xa5\xec\x6d\xad\xb6\x9d\xd3\xe5\xf0\x0c\x4a\x90\x9b\xac\x7c\xd5\x56\xb6\x7a\xd7\x42\xb6\x7a\x6f\x2c\x73\x23\x6b\xd7\xbb\xad\xed\x32\x3e\xc8\x23\x6b\xd8\xf4\x85\x61\x12\xa7\xa6\x20\x0c\xbf\x62\x3d\xdc\xa4\xd2\x90\x73\xa5\xc7\x0b\x55\xf6\x96\x40\xb7\x5f\xa2\x32\x0c\x09\x74\x24\x57\xa7\x40\xa0\x2c\x0f\xf2\x60\x05\x4a\x04\xab\x9f\x51\xb0\x3a\xa2\xf2\x10\x95\x87\xa8\x3c\x44\xe5\x41\x17\x5e\xb7\x8a\x06\x19\x02\x73\x1a\xcd\x10\x11\x3c\xab\xc5\x6c\x8c\xe0\x99\x84\x06\xe8\x10\x41\xe7\x71\x3b\x89\xe0\x7e\x4d\x5a\xdb\x53\x53\xd3\x25\x75\xa2\xa7\x61\xdb\x82\x45\xa8\x9f\x1d\x21\x10\xd3\x30\x08\x1d\x42\x47\xcb\x99\x24\xda\x57\x0b\x79\x24\x8e\xc1\x7f\xc9\x55\x63\xaf\x9b\xc7\xaf\xe9\xdd\x3f\x6f\xde\x17\x17\x22\x09\x44\xab\x27\x69\x52\x8b\x40\x7a\xd7\xed\xdf\xd1\x7f\xbf\xd8\x27\x69\x07\x6e\x73\xfc\xc4\x3c\xc9\x24\x45\x52\x19\xb7\xa2\x6e\x8e\xa2\x78\x43\x2e\xe4\x01\xd9\x0c\xfb\xa2\xd6\x1b\x64\xc4\xbb\xaa\x37\x10\x83\x25\x71\xe2\x96\xc4\xf3\x41\xd3\xb5\x18\x86\x7c\x71\x99\x38\x1b\xbd\x37\x15\xb1\xdb\xaf\xd7\xec\x5b\x6f\xc8\x8e\x62\x82\x6b\x79\x48\x6f\x46\x2a\xba\x36\x6f\xd3\x13\x64\xca\x4c\xd9\xeb\xbf\xa7\x2a\xba\x33\x21\xcc\x9f\xf4\x0e\x69\xff\xbe\xcf\xf7\xcd\xe2\x1f\xdf\x0c\x89\x99\xb7\x9f\x37\xbf\xa8\xc4\x23\x5b\x6f\xa0\x68\xf0\x15\xfb\x76\x31\xd7\xff\xf6\xed\x82\xdd\x56\x7a\x93\x3c\xa4\x8d\x61\x76\x99\x16\xe1\x9a\xd7\xdc\xa3\x01\xa0\x20\xd8\x50\x7a\xd6\xd4\x24\x42\x3f\x65\xea\xd9\x8e\xad\x09\x12\x8d\x85\x8a\x43\x31\x63\xe6\x9b\x14\xfb\x9e\xcf\x29\xf2\x53\x6e\x1c\x08\xf7\xf9\x7d\xba\x57\x7f\x68\xba\x5e\xa5\xd0\x64\x26\xaf\xc9\xc4\xa7\x4b\x7f\xdf\x9b\x2e\xb3\xec\xdc\xb4\x11\x87\xdc\xeb\x48\xa4\xb4\x85\x9d\xaf\x50\x09\x57\x48\xc8\x9b\x2d\x86\xe9\x7c\xe4\xcd\x01\x89\x75\x90\x3e\xdc\x2f\xa7\xdf\xc6\x26\xeb\x0a\x79\x06\x52\xd5\x72\x1a\xf6\xe1\x57\x6c\x3f\x87\xc1\x27\x97\x59\x78\x38\xc9\xd7\x5a\x67\x3b\x3e\x24\xfd\x5a\xfb\x8f\xc0\x8b\x10\x77\x91\xe1\x2e\x32\xdc\x45\x86\xbb\xc8\x70\x17\xd9\x49\x14\x2c\xe8\xc1\xad\x07\x0a\x09\xd8\x86\x74\x65\x1c\x7c\xda\xcf\xc8\xa7\x1d\xf7\x03\xe2\x7e\x40\xdc\x0f\x88\xfb\x01\x71\x3f\x20\xee\x07\xc4\xfd\x80\x08\xf5\x42\xa8\x17\x42\xbd\x10\xea\x55\x9f\x91\x48\xc0\x86\xcb\x48\x71\x19\x29\x2e\x23\x1d\xf9\x65\xa4\x8d\x6c\x0f\xee\x07\x08\xdf\x9c\x40\x02\xb6\xd6\x64\xf8\xf4\xa1\x9c\x9b\x53\xb0\xed\xcd\xd1\xb7\x25\x61\xeb\x9e\x9d\x23\x0d\x1b\xd2\xb0\x99\x9f\x90\x86\x0d\xae\x0f\x70\x7d\x80\xeb\x03\x5c\x1f\xe0\xfa\x00\xa6\x0e\xcc\xba\xbd\x47\x80\x59\x81\x59\x81\x59\x81\x59\x81\x59\xcf\x18\xb3\x82\x7c\x80\x7c\x80\x7c\x80\x7c\x20\x0d\x1b\xd2\xb0\x21\x0d\x9b\xfb\xe5\xc0\x18\xd2\xcd\x86\x7e\x24\x62\x1b\x46\x22\xb6\xfe\x80\x15\x52\xb1\x75\x92\x8a\x6d\x6f\x10\xb7\x3d\x19\xdb\x50\xc2\x58\x4f\x74\x07\xc9\x96\xe6\xb7\xdb\x9c\x10\x7d\x35\x81\xe8\x2b\xdc\x42\x82\x5b\x48\x1a\x2a\x33\x0d\x49\x6b\xcc\xf7\x90\x74\xd5\xb2\x01\x26\x65\xeb\xa6\x69\xd3\x17\x8d\x4f\x97\x96\xad\x73\xd1\xf8\x15\xeb\xe5\x9e\x95\x63\xa7\x66\xeb\xf1\x8a\x95\xa1\x48\xa4\x23\xb9\x58\x05\xe2\x65\x79\x90\x07\x2b\x5e\x22\x94\xfd\x8c\x42\xd9\x11\xb3\x87\x98\x3d\xc4\xec\x21\x66\x0f\x9a\xf1\xba\x55\x34\xc8\x00\x19\xa4\x67\x1b\xb8\x1e\x78\xca\xf4\x6c\x23\x8a\xea\x69\x48\xd0\xb6\xb7\xbe\xb6\x2d\x45\xdb\x0e\xda\x1a\x36\x2f\x58\x88\x26\x97\xa6\x6d\x50\xec\xb4\x9c\xa8\x6d\x97\x8a\x21\x55\x1b\x52\xb5\x9d\x20\x55\xdb\xde\x87\xd2\xd6\x64\x6d\x43\xb1\x21\x22\x5d\x1b\x2c\x8b\x00\xd7\x48\xd7\xb6\x3a\x63\x90\xae\x0d\xe9\xda\xa0\xd3\x40\xa7\xd9\xa0\xd3\x9c\x30\x61\x5b\x8f\x5a\xcd\x71\x52\xb6\x1d\x60\xef\xd8\x9a\xb4\x6d\xea\xc2\x25\x5c\x26\x21\x79\xb6\x1a\xa6\xf3\x91\x3c\x07\x24\xe0\x41\x0e\x71\xbf\x0c\x61\x23\x9b\xb0\xcb\xe4\x19\x48\x58\xa7\x4a\xde\x36\x18\xb7\x42\x8a\x31\xbb\x59\xd8\x5c\x72\x5b\x53\xb8\x75\x8e\xaa\xec\xf5\x04\x91\x2f\x9f\xa4\xbf\xe4\x61\x39\xd4\x91\xbb\x0b\x49\x36\xe5\xba\x9b\x95\x9c\x65\x7e\x70\x6e\x36\x97\x54\xf0\x65\x71\x5b\x55\xe5\xfa\x21\x27\xf3\x31\x19\xa5\x99\xe0\x15\x43\x71\x5d\x22\x7c\xde\x66\x6c\xdc\x54\xbb\x5f\x6b\x41\x5d\x08\x57\x1c\xaa\xab\x00\x45\xdb\xfe\xfc\x24\x22\x84\x24\x7a\x95\xd5\x79\xba\xb8\xc4\xde\xd2\x86\xef\x4e\xd6\x70\xa1\xe4\x84\x2f\x94\xdc\x0e\x06\xb7\x5d\x26\xb9\xd1\xb4\xd8\x01\xf4\xc4\x15\x92\xb8\x42\x12\x57\x48\xe2\x0a\xc9\xa9\x5d\x21\xb9\x7d\xe7\x6d\xbc\x3e\xb2\x67\x17\x93\xa3\x5d\x1a\xb9\xbd\xf9\xeb\x2f\x8c\x1c\x72\x1f\xec\x72\x4d\xe4\xf6\x3e\x58\x7f\x45\x64\xcf\x7d\x80\x8b\x21\x71\x31\x24\x2e\x86\xc4\xc5\x90\xb8\x18\xb2\xb7\x8b\x21\x5b\xec\xfe\x2b\x97\x42\x6e\x8c\xe2\x3b\x23\x0f\xd3\x76\xad\x99\xf0\xc5\x96\xdb\xbb\x7b\xd3\xa5\x96\xc7\xed\x77\x5c\x65\xd9\xcb\x88\xae\x5e\x63\xd9\xf3\xb0\x9e\xf4\xf2\xca\xed\xdd\xb3\xe1\xe2\xca\xbe\xb7\xcd\xa1\x5e\x57\xb9\xbd\xd3\x1a\xb8\xc7\xde\xf6\x3c\xfb\xd7\x3f\x7b\x04\x72\x0d\x77\x7d\xf4\xc4\xe5\xca\x30\x2e\xca\xa5\x81\x3c\x3b\x54\xef\x50\xee\xaa\x50\x08\x48\xe9\xb1\xc2\xa3\xd6\x29\x0a\x4d\xe7\xb2\xa2\x21\x97\xca\xee\x0d\xe9\x01\xe7\x01\xe7\x8d\x18\xe7\x01\xe5\x01\xe5\x01\xe5\x01\xe5\x01\xe5\x01\xe5\x01\xe5\x01\xe5\x01\xe5\x01\xe5\x01\xe5\x01\xe5\x01\xe5\x01\xe5\x01\xe5\x01\xe5\x4d\x0a\xe5\x95\x2f\xc4\x69\x6f\x82\xc0\x75\x38\x80\x95\xa7\x47\x5b\x80\x95\x80\x95\x80\x95\x80\x95\xb5\x4e\x1b\x1e\xac\xdc\x92\x9a\x60\x00\xf1\x83\x9b\xc3\x2d\x4f\x1f\x41\xd8\x22\x4d\x1e\xa0\x23\xa0\xe3\x78\xa1\x23\x72\x1b\x02\x3d\x02\x3d\x02\x3d\x02\x3d\x02\x3d\x02\x3d\x02\x3d\x02\x3d\x02\x3d\x02\x3d\x02\x3d\x02\x3d\x02\x3d\x02\x3d\x02\x3d\x4e\x10\x3d\x02\xcc\x01\xcc\x01\xcc\x8d\x63\x44\x01\xe6\xaa\xdd\x03\x30\x77\x0e\x60\x6e\x20\x71\x84\x47\x80\x73\x27\x8c\x24\x1c\x7e\x7e\x3c\x60\x3d\x60\xbd\x51\xc5\x12\x02\xe9\x01\xe9\x01\xe9\x01\xe9\x01\xe9\x01\xe9\x01\xe9\x01\xe9\x8d\x04\x67\x01\xe9\x01\xe9\x01\xe9\x01\xe9\x01\xe9\x01\xe9\x01\xe9\x8d\x11\xe9\x21\xbd\x3e\xb0\x25\xb0\xe5\x1e\xfd\x0e\x6c\x09\x6c\x09\x6c\x79\xde\xd8\x32\x96\xe2\x8f\x4c\x44\xb4\x30\x72\x5c\xb9\x17\x7a\x3c\x49\x4e\xd3\xda\x70\x07\x22\x63\x32\x9a\xab\x64\xe1\xa6\x37\x67\x06\x69\xac\x67\x85\x81\xc8\x6e\xcb\xbd\x70\x7b\xf7\xf1\x6f\xf5\x57\x90\xc8\x75\x47\x36\xe7\x3a\x71\xec\x64\xae\x3c\x33\x4a\xaf\xbd\x2a\x7f\xba\xc5\x92\x7a\x7a\x3b\xee\x55\x55\xd1\x8e\xcd\x7e\xb9\xc3\x92\xfa\xed\xed\xed\xdd\xc7\x2f\x4d\x2f\x62\x61\xed\xbe\xb0\xf2\x8e\xa4\x00\xe4\x29\xad\xaf\xff\x7e\x7a\x7b\xd8\x12\xf3\x96\x69\xa6\x16\xf9\x0c\x2d\xf5\x6d\x79\xed\x19\x33\x44\xb7\xfe\x34\xa6\x4c\xe6\xa9\x30\x14\x5e\x7e\xf4\xbc\xa7\xda\xe4\xa3\xf5\xc1\xd5\x66\xc3\xc2\x31\xe5\xd4\xd6\xce\x7b\x57\x6a\x9b\x12\xd7\xc0\xf2\x95\xa4\xf1\x46\x02\x79\x50\xfe\xda\x54\xe9\x4d\xbf\xf5\x32\xa7\x3f\x50\xab\x3f\xc7\x59\x75\x93\x65\x9b\x66\xf4\xe6\xa9\x0c\xfe\x0a\xfe\x0a\xfe\x0a\xfe\x3a\x35\xfe\xba\x41\x73\xdc\xc6\x60\x37\x5b\x21\x36\x6b\x90\x3b\xed\xbd\xbf\xeb\x8e\xb3\x96\xe7\x2b\xba\x03\xc6\xd3\x33\xca\xcc\x83\x4a\xdb\xca\xbe\x4e\x0f\x82\xc5\xba\xb7\xd2\x4c\xf8\x33\x76\x1b\x31\x19\x99\x9d\x45\x25\x6c\x19\xb9\xcd\xc9\x67\x7e\xf2\xf2\x65\x19\x31\x5f\x26\xfa\x4c\x7c\x12\x6e\xc6\xeb\xed\x93\x38\x81\x5d\xf2\xf9\xdc\xb0\x1d\xcc\xe6\xcb\x84\x56\x59\x9c\x28\x4f\xa4\x64\xd0\xb7\xe6\x0f\x3b\xcb\x66\xc6\x7a\x6c\x46\x8b\xe6\xce\x0f\xec\x9a\xdd\x86\xe1\x0f\x64\xae\xf7\xf5\x2e\xbd\x8c\xf4\xc0\x07\x22\x75\x53\xd2\x16\x27\xfc\x3d\x06\xca\xb4\xe5\x34\xc3\x74\x34\x68\xde\xae\x2b\xd6\x83\xf3\xa3\xf5\xc8\xd7\xb2\x65\x4c\x46\x2c\x35\x06\x2b\xf6\x20\xe6\xc6\xbb\xcf\x01\x96\x42\x94\xb0\xbb\x17\x4d\x9d\xa5\x30\x87\xc3\x83\x60\x91\x8a\xae\x23\x11\x70\x9a\xa0\xd6\xb6\x35\x63\x5f\xdd\x81\x6d\x60\xab\x5b\x1a\x56\x7c\x94\x8b\x85\xf0\x25\xcf\x44\xf8\x52\xb8\xdd\x15\x47\xae\x0c\xaf\xac\xed\x8a\x3a\x9d\x05\x09\xf7\x68\xd5\x48\xe5\x3b\x81\xa0\x38\xb4\xc9\xa7\x31\x9f\xa5\xcb\x54\x57\xb2\x3c\x5c\x5c\xbf\x99\x37\xc8\x7e\x64\x6e\xf6\xc0\xbc\x88\x99\xa9\xe7\x42\xf0\xa8\xb1\x8e\x7b\x0c\x33\xd5\xf9\x8e\xaa\xdc\x64\x0f\xdc\x62\x11\x1c\xca\xf4\xdf\xc5\x5f\xa2\x5d\xbf\xac\xf7\x99\x38\xda\xf4\x87\xf7\x04\xbc\x27\xe0\x3d\x01\xef\x09\x78\x4f\xf4\xe6\x3d\xd1\xf2\x2c\x58\xf1\xa0\x38\xde\xb1\xf8\xa1\x14\xd5\x15\x87\x82\xa7\xc2\x6d\x41\x77\x89\x8a\x79\x40\xd2\xd1\x9d\x0a\xa5\xf7\x52\xf1\xd5\xcf\x27\x5d\x11\x16\xa6\xa7\xdd\xdb\xd9\x5f\x66\xec\xde\xec\x67\x46\x74\x89\x45\xa4\x17\x4b\x71\xa6\x0a\xa6\x92\xf8\x91\x47\x79\xec\x40\xb2\x14\x37\x73\x1e\xe6\xba\xf2\xb7\x0b\xf3\xf3\xb7\x0b\x36\x97\x11\x0f\xe5\xbf\xf3\x83\xe4\x41\x30\xee\x13\x6e\x56\x37\x06\xc5\xf9\x85\x1a\x66\x8a\xbf\x4c\x8b\x97\x8c\x7e\x3a\x63\x3f\x4b\xda\x1c\x4b\x55\x57\xc9\x6a\xdb\x0a\xe7\x82\xcc\xa8\xc7\xa4\xa3\xa8\xec\x71\x9f\x01\x35\x2d\xf8\x90\xb7\x7d\xad\xc8\xd3\x04\xf6\xba\x55\xcc\xa8\xe9\x7a\xc1\x3e\xaa\x67\x16\xf0\xe4\x81\x07\x15\xab\xa5\x53\x6a\x44\x32\x57\xc9\x42\x8f\x49\x63\x7f\x7d\xae\xb5\x68\x7d\x77\x91\xd0\x9b\x4b\xac\xb1\xe9\x5b\xa9\xa5\x49\x4f\xfa\x85\x2a\x4c\xb2\x02\x19\x27\xdc\x18\xa7\xc4\xf2\xe8\xd7\x5c\x1a\x98\x95\x06\x33\x3f\x47\x1c\xdd\x77\x71\x30\xd5\x8f\xcd\xd8\xad\xe7\x89\x38\xa3\xb3\xa9\xac\xd9\x5d\x9a\x36\x5c\xb2\x6b\x3b\x01\xab\x13\x34\xfd\x91\x5d\xfe\xc4\xbd\xef\x41\xa2\x96\x91\xaf\x9f\xa2\x98\x12\x7a\xa8\xd6\x71\x46\x84\xb4\xf2\x71\xb5\x90\xbc\x05\x0f\xae\xa4\x1f\xd9\xe5\x2f\x2a\x11\xa5\x62\x99\xc7\x53\x8f\xfb\xba\xf5\xb6\x7f\x4c\xc8\x11\x95\x97\x1a\xd5\x73\xa5\xc0\xb9\x2b\x63\x9f\x09\x19\xd7\xa7\xfb\x69\x24\xce\x09\xbb\x01\xb5\x1b\x87\x4d\xae\x40\xa7\x1a\x05\x38\x05\xf5\x36\xbe\xab\x8e\x41\xc7\xb3\x6d\x9c\xd2\x45\xa8\x5d\x67\x6d\x70\x13\x3a\x54\xfe\x69\x44\x78\x40\xcf\x3b\x62\xba\xfb\x8c\x67\xcb\xb6\x7c\x6e\x8c\xc4\xb9\xf4\xe6\x9a\xf0\x6a\x73\x28\x17\x02\x53\x27\x91\xd6\x0d\x30\xbb\x39\xc2\xba\x05\xfe\xad\xc7\x56\x6f\x0a\xab\xee\xfc\x56\x09\x63\x38\x4b\xac\xb2\x9d\x4b\xf8\xf9\x85\x12\x7b\xe0\x70\x5d\x60\x1d\x86\x77\x88\xc0\x11\x33\x7e\x3e\x31\xe3\xed\xce\xa0\x6d\x71\xe3\xc7\x53\xd6\xe0\xc1\x00\x0f\x06\x78\x30\xc0\x83\x01\x1e\x0c\x4d\x9b\x2f\xd0\xf8\x88\x7a\x04\xb4\x14\xb4\x14\xb4\x14\xb4\x14\xb4\x14\xb4\x74\x5a\xb4\x14\x00\x03\x00\x03\x00\x03\x00\xa3\x77\x80\xb1\x03\xe4\x1f\x68\xc4\x73\xbb\x2e\x5c\x8d\x7a\x3e\xd4\xe2\x36\x28\xf4\xb3\xf6\x85\xf3\xba\xd3\xb7\xb0\xe7\x5f\x3b\x23\x6e\x81\x9b\xaa\x3c\xe4\xe9\xed\x6c\x9d\xc9\x7f\xe2\xf1\x8f\xdb\x69\x54\x67\xe9\x3b\x4f\x45\xa0\xf6\xb8\xd8\x77\x2c\x17\xe1\xbc\xaa\x8d\xe2\x45\xac\xd2\x8e\x71\x9b\xd1\x7c\x18\xdf\x87\xac\x99\x77\x7b\x64\x6b\xfb\x85\x97\x6e\xb8\x60\x69\x08\x3b\x4e\x27\xb1\xa9\x88\x8f\x2a\xcf\x90\xc1\xc6\x47\x91\x75\xe4\x13\x8f\x78\x20\x12\x63\xe7\xa3\x7b\xc6\x78\x9a\x2a\x4f\x92\xe2\xea\x2c\x6a\x9c\x0c\xa3\x2a\x61\x22\xca\xb4\x24\x99\x6b\xf2\x0b\xfe\x5d\xf7\x62\xf6\x28\x52\x91\x8b\x63\xe5\x28\xa0\x3c\x5a\x88\xc4\x51\xb2\x9e\xa9\x84\xbd\x7d\xf7\x57\xfd\x6c\xc2\x3d\xc2\x65\xa1\x8a\x02\x23\x7c\x91\x85\xcb\x53\x51\xc6\x65\x64\x76\x38\xb2\x20\x15\xcf\x12\x42\xb0\x30\x8f\x3d\xbc\x38\xfd\x22\x50\x21\x8f\x82\x99\x4a\x82\x9b\xf8\x7b\x70\xb3\x8c\xa4\xa7\x7c\x71\xf3\xa7\x8f\xe9\x9d\x2e\x65\x6f\x93\xb4\xed\x9c\x2e\x87\x67\x50\xd2\xda\x59\x08\x51\x6d\x05\xa8\x77\x2d\x04\xa8\xf7\xc6\x14\x37\xe2\x36\xbe\xdb\xda\x46\xe3\x4d\x3c\xe2\x46\x4e\x52\x12\x26\xe1\x6a\x84\x92\xf0\x2b\x76\xf8\xdd\x26\x0d\xf9\x82\x7a\xbc\xe2\x64\x2f\x69\xb3\xf9\x5a\x93\x93\x4b\x9b\x23\xb9\xcc\x04\x02\x63\x79\x90\x07\x2b\x30\x22\x7c\xfc\x8c\xc2\xc7\x11\x27\x87\x38\x39\xc4\xc9\x21\x4e\x0e\xba\xee\xba\x55\x34\xc8\xa0\x94\xd3\x68\x78\x88\xa9\x61\x1b\x74\x37\xab\xac\x8c\x50\x7b\x73\xb6\xfd\xce\x23\x69\x12\xc1\xfd\x9a\x3c\xb6\x87\xda\xa5\x4b\xd9\x47\xe9\xc2\x1e\x04\x33\x4d\x2f\x4b\x3d\x10\xa3\xb4\xd2\x1c\xc2\x2b\xcb\xc9\x49\xda\xd5\x06\x69\x49\x8e\x41\x63\xc9\x4d\x62\xaf\x2b\xb8\xaf\xe9\xdd\x3f\x6f\xde\x01\x17\x22\x09\x44\xab\x27\x29\xb7\xae\x08\xa4\x77\xdd\xfe\x1d\xfd\xf7\x8b\x7d\x92\xf6\xda\x36\x67\x4a\xcc\x93\x4c\x52\x14\x93\x71\xe9\x39\xfc\x7c\xa1\x0a\x0c\xce\xaa\xd7\x17\x43\xde\x20\xc5\xdd\x55\x9d\x6e\x18\x6c\x7d\x13\xb7\xf5\x9d\x0f\x1c\xae\x85\x0a\xe4\x8b\xcb\x84\xb3\xe8\x6d\xa8\x08\x91\x7e\xbd\x66\x8b\x7a\x43\x96\x0e\x13\xc3\xca\x43\x7a\x33\x52\xd1\xb5\x79\x9b\x9e\x20\x63\x63\xca\x5e\xff\x3d\x55\xd1\x9d\x89\x14\xfe\xa4\x37\x43\xfb\xf7\x7d\xbe\x45\x16\xff\xf8\x66\x48\xd4\xba\xfd\xbc\xf9\x45\x25\x1e\x59\x63\x03\x45\x83\xaf\xd8\xb7\x8b\xb9\xfe\xb7\x6f\x17\xec\xb6\xd2\x9b\xe4\x88\x6c\x4c\xa7\xcb\xb4\x88\x8a\xbc\xe6\x1e\x0d\x00\xc5\x9a\x86\xd2\xb3\xc6\x20\x11\xfa\x29\x53\xcf\x76\x6c\x4d\x2c\x66\x2c\x54\x1c\x8a\x19\x33\xdf\xa4\x10\xf3\x7c\x4e\x91\x3b\x70\xe3\x40\xb8\xcf\xef\xd3\xbd\xfa\x43\xd3\x75\xde\x84\x7a\x52\xaa\xce\x24\xd5\x93\xb8\xe6\x79\x3b\x42\x05\x65\xd9\xb9\x21\x22\x0e\xb9\xd7\x81\xac\x68\x0b\x3a\x1b\x69\x11\x1e\x87\x10\x2a\x77\x1c\xa6\xf3\x11\x2a\x07\x24\xbb\x41\xc4\x70\xbf\x0c\x6b\x4b\x3b\x0b\x8f\xc3\x69\x8a\x51\xcb\x51\x5a\x79\x5f\xb1\xce\x7c\xf1\x6e\x52\x83\xf5\xf6\xc9\xf8\xb7\x13\x22\x32\xdf\xc9\x4f\xcd\x63\xc1\x22\x0b\x2d\xb1\x61\x62\x33\xa9\xf7\x3d\x90\x51\xb5\x13\x81\x8c\x80\x8c\x26\x84\x8c\x3a\x3c\x6f\x76\x81\x47\x0d\x07\xce\x28\x8d\x02\x40\x48\xd0\xf6\xcf\x4f\xdb\x07\x42\xea\x72\xde\x00\x21\xc1\xbe\x03\x75\x65\xa8\xea\x0a\x10\xd2\x5a\x84\xd4\xa9\xad\x62\x17\x98\x34\x15\xe9\x11\x48\x09\x42\xe6\x8e\xc3\x74\x3e\x42\xe6\x80\x64\x39\x88\x1c\xee\x97\x61\x6d\x69\x40\x4a\xa3\x15\xab\x26\x8f\x94\xe8\xde\xbe\xf5\x60\xa9\x57\x94\x64\xaf\x7b\x8e\x7c\xf9\x24\xfd\x25\x0f\xcb\x57\x47\x72\x77\xc1\xfb\xba\x2e\x99\x95\x62\x99\x7f\x70\x51\xd0\x97\x54\xe8\x65\x91\xf9\xa3\x92\xca\xc1\xc9\x73\x4c\x46\x69\x26\x78\xc5\xd2\x5b\x97\xf6\x9e\x77\xb0\x14\xfe\x5a\xbb\x12\x0f\x37\x3d\x0e\x35\x70\x93\x2e\x2a\xfd\xf9\x49\x44\xe7\x7d\x87\x23\x8d\xe2\x39\x5e\xe4\x88\x6c\x5b\x13\xce\xb6\xb5\x1d\xd5\x6d\xcb\xb4\xb5\xd1\xea\xd7\x01\x86\x44\x7e\x2d\xe4\xd7\x42\x7e\x2d\xe4\xd7\x9a\x5a\x7e\xad\xed\x3b\x6f\x63\x6e\xad\x9e\x9d\x3e\x8e\x96\x51\x6b\x7b\xf3\xd7\x67\xd3\x1a\x72\x1f\xec\x92\x43\x6b\x7b\x1f\xac\xcf\x9f\xd5\x73\x1f\x20\x6b\x16\xb2\x66\x21\x6b\x16\xb2\x66\x21\x6b\x56\x6f\x59\xb3\x5a\xec\xfe\x2b\x19\xb3\x36\xde\x9a\x78\x46\x3e\x9f\xed\x5a\x33\xe1\xac\x5f\xdb\xbb\x7b\x53\xc6\xaf\xe3\xf6\x3b\xf2\x7c\xf5\x32\xa2\xab\x39\xbe\x7a\x1e\xd6\x93\x66\xf6\xda\xde\x3d\x1b\xb2\x7a\xf5\xbd\x6d\x0e\x35\x97\xd7\xf6\x4e\x6b\x20\x1b\x7b\xdb\xf3\xec\x5f\xff\xec\x0e\xa6\x35\xdc\x98\xde\x13\x53\x2b\x83\xb4\x28\x3f\xfc\xd5\x9c\x7d\x97\xd1\x7a\xc7\xa7\x4e\x80\xda\x55\x21\xfb\x93\x7e\x63\xe5\x44\xad\x3e\x14\x4a\xcd\x65\x45\x19\x2e\x95\xdd\x15\x8e\x03\x8a\x03\x8a\x1b\x17\x8a\x03\x86\x03\x86\x03\x86\x2b\x1e\x04\x86\x03\x86\x03\x86\x03\x86\x03\x86\x03\x86\x03\x86\x03\x86\x03\x86\x03\x86\x03\x86\x03\x86\x03\x86\x1b\x1f\x86\xc3\xc5\x32\x80\x8c\x80\x8c\x80\x8c\xa7\x1f\x51\x40\xc6\x6a\xf7\x00\x32\x8e\x0e\x32\x3e\x88\x8c\xbf\xbd\xd9\x8b\x21\x9e\x24\xe6\xb7\x36\xec\x81\xc8\xaa\x92\xbc\x19\xe1\x0d\xdc\x2f\x10\x59\x8d\xfa\x51\x17\xdc\xde\x7d\xfc\xd2\xf4\x36\x02\x9e\x77\xa4\x70\xa5\x8e\xa4\x28\xc6\x89\xa1\x38\x9a\x2c\xa5\xd7\x5f\x95\xab\xb0\xc3\x8a\x6b\x15\x22\xdb\x63\x02\xf4\x52\x16\xd8\x0d\x41\xb1\x1b\xd6\x51\x63\x32\x74\x6a\xdb\x7b\x57\xf4\xe9\xef\xc5\x1f\x49\x6e\x74\xf0\x23\xf0\x23\xf0\x23\xf0\xa3\xa9\xf1\xa3\x76\x37\xd8\x34\x32\xa4\xa3\x5d\x2e\x84\x3b\xa0\x5a\x0f\xd4\x29\xef\x80\x3a\x1a\xf4\xdb\xe1\xd6\xa5\x46\xe8\x75\xb4\x1e\xf9\x5a\xd6\xef\x65\xc4\x52\xa3\x76\xb3\x07\x31\x37\xde\x49\xce\x40\x5c\x88\x12\x76\xf7\xa2\xa9\x53\xba\xf5\x2a\x52\xd1\x75\x24\x02\x4e\x13\xd4\x6a\xe8\xe5\xdb\xb1\x0c\x2c\x72\x4b\xc3\xca\x90\x72\xb1\x10\xbe\xe4\x99\x08\x5f\x0a\xb7\xa1\xe2\xc8\x95\xe1\x95\xd5\xc0\x4d\x86\xfe\x20\xe1\x1e\xad\x1a\xa9\x7c\x27\x10\x14\x87\x36\xf9\x64\xe5\xb3\x74\x99\xea\x4a\x96\x87\x8b\xeb\x37\xf3\x06\xd9\x8f\xcc\xcd\x1e\x98\x17\x31\x33\xf5\x34\x77\x85\x36\xd4\x71\x8f\x61\xa6\x3a\xdf\x51\x95\x9b\xac\x1a\x5b\xec\x1a\x43\x99\xfe\xbb\xf0\xde\x76\xfd\xb2\x9e\xf9\x1e\x6d\xfa\x83\xfe\x82\xfe\x82\xfe\x82\xfe\x82\xfe\xf6\x46\x7f\x5b\x9e\x05\x2b\x04\xf8\x78\xc7\xe2\x87\x52\x88\x49\x1c\x0a\x9e\x0a\xb7\x05\xdd\x25\x2a\xe6\x01\x49\x47\x77\x2a\x94\xde\x4b\xc5\xd7\x38\x9f\x74\x45\x8c\x8a\x9e\x76\x6f\x67\x7f\x99\xb1\x7b\xb3\x9f\x19\xd1\x25\x16\x91\x5e\x2c\xc5\x99\x2a\x98\x4a\xe2\x47\x1e\xe5\xbe\xcf\xc9\x52\xdc\xcc\x79\x98\xeb\xca\xdf\x2e\xcc\xcf\xdf\x2e\xd8\x5c\x46\x3c\x94\xff\xce\x0f\x92\x07\xc1\xb8\x4f\xd0\x4c\xdd\x18\xa0\xe0\x17\x6a\x98\x29\xfe\x32\x2d\x5e\x32\xfa\xe9\x8c\xfd\x2c\x69\x73\x2c\x55\x5d\x25\xab\x6d\x2b\x10\x69\x66\xd4\x63\xd2\x51\x54\xf6\xb8\xcf\x80\x9a\x16\x7c\xc8\xdb\xbe\x56\xe4\xd9\xeb\x26\xf3\x9d\x14\x33\x6a\xba\x5e\xb0\x8f\xea\x99\x05\x3c\x79\xe0\x41\xc5\x74\xe9\x94\x1a\x91\xcc\x55\xb2\xd0\x63\xd2\xd8\x5f\x9f\x6b\x2d\x5a\xdf\x5d\x24\xf4\xe6\x12\x6b\x6c\xfa\x56\x6a\x69\xd2\x93\x7e\xa1\x0a\x93\xac\x60\x2e\x9c\xcf\xc7\x58\x1f\xd6\xf6\x24\xcd\xa5\x81\x59\x69\x30\xf3\x73\xc4\x31\x4a\xe7\xc7\x5f\xfd\xd8\x8c\xdd\x7a\x9e\x88\xcd\x7d\xb2\x65\xcd\xee\xd2\xb4\xe1\x92\x5d\xdb\x09\x58\x9d\xa0\xe9\x8f\xec\xf2\x27\xee\x7d\x0f\x12\xb5\x8c\x7c\xfd\x14\xf9\xc4\xd3\x43\xb5\x8e\x33\x22\xa4\x95\x8f\xab\x85\xe4\x2d\x78\x70\x25\xfd\xc8\x2e\x7f\x51\x89\x28\x15\xcb\x3c\x9e\x7a\xdc\xd7\xad\xb7\xfd\x63\x42\x26\xa8\xbc\xd4\xa8\x9e\x2b\x05\xce\x5d\x19\xfb\x4c\xc8\xb8\x3e\xdd\x4f\x23\x71\x4e\xd8\x99\xa1\xdd\x38\x6c\x72\x68\x38\xd5\x28\xc0\xb5\xa1\xb7\xf1\x5d\x75\x6f\x38\x9e\x6d\xe3\x94\x8e\x0e\xed\x3a\x6b\x83\xb3\xc3\xa1\xf2\x4f\x23\xc7\x03\x89\xde\x11\xd3\xd9\x84\x09\x13\x07\xd0\xa5\xd7\xd7\x04\x84\x9a\x93\xb9\x90\x9a\x06\x1f\x1b\x5a\x6b\xe2\x6a\x80\x68\xe7\x61\xee\xc6\x84\x96\x58\xb5\x3b\x97\xf5\xb7\x45\xb8\x6f\xa0\xe3\xba\xc0\x46\x36\xde\x21\x11\x47\x08\xec\xf9\x84\xc0\xb6\x3b\x92\xb6\x85\xc1\x1e\x4f\x77\x83\x43\x03\x1c\x1a\xe0\xd0\x00\x87\x06\x38\x34\x34\x6d\xbe\x20\xe5\x23\xea\x11\xc0\x53\xc0\x53\xc0\x53\xc0\x53\xc0\x53\xc0\xd3\x69\xc1\x53\xf0\x0c\xf0\x0c\xf0\x0c\xf0\x8c\xde\x79\xc6\x0e\xcc\x7f\xa0\x61\x9c\xed\xba\x70\x35\x94\x73\x52\x79\xdf\xd7\xbe\x70\x5e\x57\x90\xee\x96\x09\x95\xcc\xfe\x6b\xd3\xa1\x9e\x43\x88\xe4\x76\x42\x35\x8a\xc4\x81\x5b\xa9\xd4\x1e\xd7\x96\x8e\xe5\xb2\x8f\x57\xb5\xa1\xbc\x88\x55\xda\x31\x82\x33\x8a\x10\xe3\xfb\xd0\x36\xf3\x6e\xdf\xbc\x6d\xcc\x69\xf4\x37\xef\x42\xc8\xa5\x7f\x3e\x71\x54\xc8\xa5\x8f\x5c\xfa\x0d\x95\x99\xa4\x74\x35\xa1\x84\xfa\x5d\x35\xf4\xdd\xd6\x86\x1a\xff\xe3\xb1\xb7\x74\xba\xc2\x32\x89\x5e\x63\x15\x96\x5f\xb1\x8e\xae\x49\x69\x48\x7e\xd2\xe3\x6d\x29\x7b\x49\xa5\x1b\x6e\x48\x39\xb9\x54\x3a\x92\x7b\x51\x20\x53\x96\x07\x79\xb0\x32\x25\x22\xd1\xcf\x28\x12\x1d\x21\x77\x08\xb9\x43\xc8\x1d\x42\xee\xa0\x0e\xaf\x5b\x45\x83\x8c\x6f\x39\x8d\xea\x87\xf0\x9c\xad\xfa\x9c\x55\x5b\xc6\xaa\xd1\x39\x24\xd0\x79\x50\x4e\x22\xb8\x5f\x93\xcc\xf6\xd0\xc2\x74\x29\x7b\xeb\x60\xd8\x92\x60\xce\x71\x3f\xf5\xb3\xfc\x03\x31\x5e\x6b\xce\x21\xe8\x13\x59\x1c\x86\x09\x76\xc9\x01\x63\xaf\xfb\xbf\xaf\xe9\xdd\x3f\x6f\xde\x10\x17\x22\x09\x44\xab\x27\xd3\x2c\xe1\x99\x08\xa4\x77\xdd\xfe\x1d\xfd\xf7\x8b\x7d\x92\xb6\xde\x36\xe7\x4c\xcc\x93\x4c\x52\x7c\x94\x71\x16\x3a\xfc\xcc\x89\x1b\x72\x0b\x0f\xc4\xf0\xd7\x17\x8e\xde\x20\xe8\xdd\x55\x7d\x7a\x18\xcc\x81\x13\x37\x07\x9e\x0f\x62\xae\x45\x22\xe4\x8b\xcb\x44\xcb\xe8\xbd\xa8\x88\xc0\x7e\xbd\x66\x9f\x7a\x43\xc6\x10\x13\x22\xcb\x43\x7a\x33\x52\xd1\xb5\x79\x9b\x9e\x20\x7b\x64\xca\x5e\xff\x3d\x55\xd1\x9d\x09\x44\xfe\xa4\x77\x44\xfb\xf7\x7d\xbe\x4f\x16\xff\xf8\x66\x48\xec\xbb\xfd\xbc\xf9\x45\x25\x1e\x19\x6c\x03\x45\x83\xaf\xd8\xb7\x8b\xb9\xfe\xb7\x6f\x17\xec\xb6\xd2\x9b\xe4\xe7\x6c\xac\xab\xcb\xb4\x08\xba\xbc\xe6\x1e\x0d\x00\x85\xb2\x86\xd2\xb3\xf6\x22\x11\xfa\x29\x53\xcf\x76\x6c\x4d\xa8\x67\x2c\x54\x1c\x8a\x19\x33\xdf\xa4\x08\xf6\x7c\x4e\x91\xb7\x71\xe3\x40\xb8\xcf\xef\xd3\xbd\xfa\x43\xd3\xf5\x0d\x85\xca\x72\x3e\x2a\x4b\x3c\x8a\x0c\xf3\xdb\x95\x96\x65\xe7\x06\x8b\x38\xe4\x5e\x07\xf2\xa3\x2d\xe8\xbc\x24\x48\x38\x34\x42\xda\xdc\x67\x98\xce\x47\xda\x1c\x90\x50\x07\xd9\xc3\xfd\x32\xc0\x7d\xed\x7c\x1c\x1a\x27\x2c\x64\x2d\xc7\x6b\x17\x7e\xc5\xba\xf5\xf2\xbb\x49\x0d\x2b\xdc\x27\x4b\xe1\x4e\xb4\xc9\x7c\x27\x3f\x4e\x8f\xca\x9d\x2c\x0e\xc5\x76\x8a\x5d\xe6\x88\xbb\x0c\xe8\x13\xe8\x13\xe8\x53\xc3\x93\xa7\xa3\x4f\x1d\x9e\x41\x3b\x73\xa8\x86\x43\x68\x94\xb6\x04\xd0\x28\xd8\x07\xce\xcf\x3e\x00\x1a\xd5\xe5\xbc\x01\x8d\x82\x45\x08\x2a\x0c\x1b\xbc\x0a\x03\x1a\xd5\x3c\x9a\x39\x8d\xea\xd4\xa6\xb1\x33\x97\x9a\x8a\x44\x09\x3a\x05\xe9\x73\x9f\x61\x3a\x1f\xe9\x73\x40\x42\x1e\x64\x11\xf7\xcb\x00\xf7\x35\xd0\xa9\x09\x08\x5d\x67\x44\xa7\xe8\x4e\xc2\xf5\x8c\xaa\x57\x2a\x65\xaf\xb2\x8e\x7c\xf9\x24\xfd\x25\x0f\xcb\xd7\x62\x72\x77\x79\xfd\xba\xce\x99\x95\x62\xad\x7f\x70\x51\xda\x97\x54\xe8\x65\x91\xd5\xa4\x92\xa6\xc2\x89\x7c\x4c\x46\x69\x26\x78\xc5\x40\x5c\x17\x08\x9f\x77\x35\x30\xfe\x5a\xbb\xe9\x0f\x57\x59\x0e\x35\xba\x94\x6e\x62\xfd\xf9\x49\x44\xb8\x9f\xd2\x4c\xf3\xb3\xbd\xa4\x12\x89\xc5\x26\x9c\x58\x6c\x3b\xf0\xdb\x96\x54\x6c\xa3\xd9\xb0\x03\x98\x89\x54\x62\x48\x25\x86\x54\x62\x48\x25\x36\xb5\x54\x62\xdb\x77\xde\xc6\x34\x62\x3d\xbb\x8e\x1c\x2d\x79\xd8\xf6\xe6\xaf\x4f\x1c\x36\xe4\x3e\xd8\x25\x5d\xd8\xf6\x3e\x58\x9f\x2a\xac\xe7\x3e\x40\x82\x30\x24\x08\x43\x82\x30\x24\x08\x43\x82\xb0\xde\x12\x84\xb5\xd8\xfd\x57\x92\x83\x6d\xbc\xe4\xf1\x8c\x3c\x47\xdb\xb5\x66\xc2\x09\xce\xb6\x77\xf7\xa6\xe4\x66\xc7\xed\x77\xa4\x34\xeb\x65\x44\x57\xd3\x99\xf5\x3c\xac\x27\x4d\x62\xb6\xbd\x7b\x36\x24\x30\xeb\x7b\xdb\x1c\x6a\xda\xb2\xed\x9d\xd6\xc0\x38\xf6\xb6\xe7\xd9\xbf\xfe\xd9\x31\x60\x6b\xb8\xea\xbd\x27\xce\x56\x86\x6b\x51\x2e\x01\xa8\x39\xfb\x2e\xa3\xf5\xfe\x52\x9d\x40\xb6\xab\x42\x01\x20\x25\xc7\x0a\x8b\x5a\x87\x28\x34\x9b\xcb\x8a\x46\x5c\x2a\xbb\x53\x44\x07\x3c\x07\x3c\x37\x42\x3c\x07\x34\x07\x34\x07\x34\x07\x34\x07\x34\x07\x34\x07\x34\x07\x34\x07\x34\x07\x34\x07\x34\x07\x34\x07\x34\x07\x34\x07\x34\x07\x34\x37\x7a\x34\x87\x2b\x6b\x00\x1e\x01\x1e\x01\x1e\x4f\x3f\xa2\x00\x8f\xd5\xee\x01\x78\x1c\x34\x78\x4c\x44\x20\xe9\x3a\x2f\x5d\x4b\x8b\x1e\xf7\x82\x89\x27\x89\x14\xae\x0d\x78\x40\x39\x2f\xe7\x2a\x59\xb8\x09\xce\x99\x01\x18\xeb\x19\x60\x20\xb2\xdb\x6a\x3f\xdc\xde\x7d\xfc\x5b\xfd\x25\x04\x48\xef\xc8\xe0\x5c\x27\x8e\x9f\xc0\x95\xe7\x46\xe9\xc5\x57\xe5\x8f\xb7\x5a\x58\x4f\x6f\xc7\xbd\xb6\x2a\xfa\xb1\xd9\x37\x77\x5a\x58\xbf\xbd\xbd\xbd\xfb\xf8\xa5\xe9\x55\x2c\xaf\xdd\x97\x57\xde\x91\x14\x36\x3c\xad\x55\xf6\xdf\x4f\x6f\x0f\x5d\x68\x16\x27\x4a\xaf\x32\x8c\x79\x42\xd1\x4e\xfd\x63\x6c\xea\xe2\x52\x1e\x68\x35\x67\xb7\x77\x1f\xef\xcd\xf7\x37\x2c\x11\xf3\xe6\xca\x2a\x79\xef\x4a\x6a\x2e\xa5\xdf\x5b\x82\x7a\x99\xaf\x1f\xa8\xa5\x9f\x63\x73\x2b\x40\xbb\xd9\xba\x3d\xaf\x3e\xf8\x2a\xf8\x2a\xf8\x2a\xf8\xea\x94\xf8\x6a\xbb\xdb\xa1\x1a\x19\xeb\xd1\x2e\xee\xc2\xfd\x6a\xad\x07\xea\x94\xf7\xab\x1d\x0d\x8a\xef\x70\xa3\x59\x23\x14\x3e\x5a\x8f\x7c\x2d\xdb\xbf\x64\xc4\x52\x63\x96\x62\x0f\x62\x6e\xbc\xf7\x1c\x40\x29\x44\x09\xbb\x7b\xd1\xd4\x29\xdd\x28\x17\xa9\xe8\x3a\x12\x01\xa7\x09\x6a\x2d\x58\xe5\x9b\xe7\x0c\x4c\x75\x4b\xc3\x0a\x89\x72\xb1\x10\xbe\xe4\x99\x08\x5f\x0a\xb7\xba\xe2\xc8\x95\xe1\x95\xb5\x50\x51\xa7\xb3\x20\xe1\x1e\xad\x1a\xa9\x7c\x27\x10\x14\x87\x36\xf9\x2c\xe6\xb3\x74\x99\xea\x4a\x96\x87\x8b\xeb\x37\xf3\x06\xd9\x8f\xcc\xcd\x1e\x98\x17\x31\x33\xf5\x34\x17\xf4\x36\xd4\x71\x8f\x61\xa6\x3a\xdf\x51\x95\x9b\xac\x7e\x5b\xec\x7e\x43\x99\xfe\xbb\xf8\x43\xb4\xeb\x97\xf5\x3e\x11\x47\x9b\xfe\xf0\x8e\x80\x77\x04\xbc\x23\xe0\x1d\x01\xef\x88\xde\xbc\x23\x5a\x9e\x05\x2b\x1e\x12\xc7\x3b\x16\x3f\x94\x22\xb2\xe2\x50\xf0\x54\xb8\x2d\xe8\x2e\x51\x31\x0f\x48\x3a\xba\x53\xa1\xf4\x5e\x2a\xbe\xf8\xf9\xa4\x2b\x42\xba\xf4\xb4\x7b\x3b\xfb\xcb\x8c\xdd\x9b\xfd\xcc\x88\x2e\xb1\x88\xf4\x62\x29\xce\x54\xc1\x54\x12\x3f\xf2\x28\x8f\x0d\x48\x96\xe2\x66\xce\xc3\x5c\x57\xfe\x76\x61\x7e\xfe\x76\xc1\xe6\x32\xe2\xa1\xfc\x77\x7e\x90\x3c\x08\xc6\x7d\x82\xca\xea\xc6\x00\x37\xbf\x50\xc3\x4c\xf1\x97\x69\xf1\x92\xd1\x4f\x67\xec\x67\x49\x9b\x63\xa9\xea\x2a\x59\x6d\x5b\xe1\x42\x90\x19\xf5\x98\x74\x14\x95\x3d\xee\x33\xa0\xa6\x05\x1f\xf2\xb6\xaf\x15\x79\xf6\x4a\x1f\xb0\x93\x62\x46\x4d\xd7\x0b\xf6\x51\x3d\xb3\x80\x27\x0f\x3c\xa8\xd8\x26\x9d\x52\x23\x92\xb9\x4a\x16\x7a\x4c\x1a\xfb\xeb\x73\xad\x45\xeb\xbb\x8b\x84\xde\x5c\x62\x8d\x4d\xdf\x4a\x2d\x4d\x7a\xd2\x2f\x54\x61\x92\x15\x4c\x96\x87\x7c\x8c\x53\xe2\x75\xf4\x6b\x2e\x0d\xcc\x4a\x83\x99\x9f\x23\x8e\xe1\xbb\x38\x97\xea\xc7\x66\xec\xd6\xf3\x44\x6c\xee\x6a\x2e\x6b\x76\x97\xa6\x0d\x97\xec\xda\x4e\xc0\xea\x04\x4d\x7f\x64\x97\x3f\x71\xef\x7b\x90\xa8\x65\xe4\xeb\xa7\x28\x66\x84\x1e\xaa\x75\x9c\x11\x21\xad\x7c\x5c\x2d\x24\x6f\xc1\x83\x2b\xe9\x47\x76\xf9\x8b\x4a\x44\xa9\x58\xe6\xf1\xd4\xe3\xbe\x6e\xbd\xed\x1f\x13\x52\x44\xe5\xa5\x46\xf5\x5c\x29\x70\xee\xca\xd8\x67\x42\xc6\xf5\xe9\x7e\x1a\x89\x73\xc2\xce\x3e\xed\xc6\x61\x93\xc3\xcf\xa9\x46\x01\xae\x3f\xbd\x8d\xef\xaa\xfb\xcf\xf1\x6c\x1b\xa7\x74\x04\x6a\xd7\x59\x1b\x9c\x81\x0e\x95\x7f\x1a\x41\x1d\xb0\xf2\x8e\x98\xce\x66\x24\x99\x32\x4d\x2e\xbd\xbb\x26\x64\xda\x1c\xcb\x85\xc8\xd4\x51\xf4\x74\x03\xa8\x6e\x8e\x9f\x6e\x84\xbe\xf5\x88\xe9\x4d\xc1\xd2\x9d\xdf\x00\x61\xcc\x65\x89\x55\xb1\x73\xb9\x3e\xbf\xfc\xa1\x15\xea\xd6\x45\x34\xb9\x83\x1c\x80\xb7\x11\xef\x7d\x3e\xf1\xde\xed\xce\x97\x6d\x31\xdf\xc7\x53\xc4\xe0\x9d\x00\xef\x04\x78\x27\xc0\x3b\x01\xde\x09\x4d\x9b\x2f\xb0\xf7\x88\x7a\x04\x24\x14\x24\x14\x24\x14\x24\x14\x24\x14\x24\x74\x5a\x24\x14\x70\x02\x70\x02\x70\x02\x70\xa2\x77\x38\xb1\x03\xc0\x1f\x68\xcc\x72\xbb\x2e\x5c\x8d\x5b\x3e\xd4\xe2\x36\x28\xac\xb3\xf6\x85\x33\xba\x79\x57\xd7\xfd\x9a\x07\x81\x5e\x89\x99\xaa\x66\x09\xae\x10\x0e\x13\xa4\x68\xcd\xfb\x93\x8f\x51\xdc\x4e\x95\x3a\x4c\x91\x79\x3c\x92\xb4\xc7\xb5\xbb\x63\xb9\xac\xe6\x55\x6d\xe4\x2e\x62\x95\x76\x8c\xcd\x8c\x6e\xc3\x78\xd4\x0e\x91\x99\xc7\x3b\x86\x64\xfb\xc5\x80\x6e\xb8\xeb\xe8\xd8\x5b\x47\x27\xc1\xa2\x08\x58\x2a\xcf\x86\xc1\x06\x2c\x91\x49\xe3\x13\x8f\x78\x20\x12\x63\x9c\xa3\x8b\xbd\x78\x9a\x2a\x4f\x92\xb6\xe9\xcc\x60\x9c\xac\x99\x2a\x61\x22\xca\xb4\xf8\x97\xab\xdf\x0b\xfe\x5d\xf7\x62\xf6\x28\x52\x91\xcb\x50\xe5\xb0\x9c\x3c\x7c\x87\x64\x48\x32\x79\xa9\x84\xbd\x7d\xf7\x57\xfd\x6c\xc2\x3d\x62\x5c\xa1\x8a\x02\x23\x31\x91\x59\xca\x53\x51\xc6\x65\x64\x36\x2d\x32\xfb\x14\xcf\x92\xdd\xdf\x12\x38\xf6\xf0\xe2\x94\x82\x40\x85\x3c\x0a\x66\x2a\x09\x6e\xe2\xef\xc1\xcd\x32\x92\x9e\xf2\xc5\xcd\x9f\x3e\xa6\x77\xba\x94\xbd\xed\xc8\xb6\x73\xba\x1c\x9e\x41\x89\x58\x93\x93\x7c\xda\x4a\x3d\xef\x5a\x48\x3d\xef\x8d\xad\x6c\x24\xed\x79\xb7\xb5\x3d\xc6\x6d\x77\x24\x0d\x9a\xa8\x58\x4a\x52\xcf\x48\xc4\xd2\x57\x6c\xbf\x0b\x40\x1a\x92\xe4\xf4\x78\x0f\x48\x5b\x71\x6f\xcd\xe5\x1f\xb8\xf2\x83\xad\xeb\x60\x48\x71\xe5\x41\x1e\xac\x14\x87\x20\xeb\x33\x0a\xb2\x46\x34\x19\xa2\xc9\x10\x4d\x86\x68\x32\x28\xa0\xeb\x56\xd1\x20\x43\x37\x4e\xa0\x9e\x21\xf2\x64\xab\x32\x66\xb5\x92\x91\xa8\x63\xce\x72\xde\x79\xbc\x49\x22\xb8\x5f\x93\xc2\x5a\xa9\x54\xfa\xbd\xb6\x0a\x15\xf6\x17\xd8\x4f\x3a\x58\xb2\x81\x18\x8d\xf9\xe4\x10\xaa\x57\x4e\xb0\xb1\xee\xfb\x48\xa9\x71\x0c\x4a\x49\x0e\x02\x7b\x5d\x1b\x7d\x4d\xef\xfe\x79\xf3\xae\xb6\x10\x49\x20\x5a\x3d\x49\x73\x55\x04\xd2\xbb\x6e\xff\x8e\xfe\xfb\xc5\x3e\x49\xfb\x67\x9b\xd3\x20\xe6\x49\x26\x29\x7e\xc7\x38\xb3\xec\x73\x32\xc4\x36\xd3\xf3\xe9\x6d\x6d\xbd\xa0\xd5\xcd\xb2\xd5\x5d\xd5\xa9\x84\xc1\x02\x37\x71\x0b\xdc\xf9\x70\xd4\x9a\x2b\x7c\xbe\xb8\x4c\xb8\x86\xde\x6c\x8a\x10\xe0\xd7\x6b\x36\xa2\x37\x64\x7f\x30\x31\x9a\x3c\xa4\x37\x23\x15\x5d\x9b\xb7\xe9\x09\x32\x01\xa6\xec\xf5\xdf\x53\x15\xdd\x99\x48\xd8\x4f\x7a\xcb\xb3\x7f\xdf\xe7\x1b\x61\xf1\x8f\x6f\x86\x04\x78\xdb\xcf\x9b\x5f\x54\xe2\x91\x8d\x34\x50\x34\xf8\x8a\x7d\xbb\x98\xeb\x7f\xfb\x76\xc1\x6e\x2b\xbd\x49\x8e\xb6\xc6\xa0\xb9\x4c\x8b\xa8\xbf\x6b\xee\xd1\x00\x50\x2c\x65\x28\x3d\x6b\xa2\x11\xa1\x9f\x32\xf5\x6c\xc7\xd6\xc4\x1a\xc6\x42\xc5\xa1\x98\x31\xf3\x4d\x0a\xa1\xce\xe7\x14\xb9\xbb\x36\x0e\x84\xfb\xfc\x3e\xdd\xab\x3f\x34\x5d\xe7\x44\x28\x16\x1b\x9a\x32\x42\xc5\x22\xee\x30\x71\xff\x11\x55\x8b\x65\xe7\xa6\x80\x38\xe4\xde\x5e\x32\x9f\x7d\x75\xba\x52\x1f\x1c\xea\x20\x08\x42\x10\x84\x43\x1d\xc4\x02\xf3\x77\x8d\x70\x4c\xcb\xa1\x6e\xaa\x62\xce\x72\x34\xf6\xd3\x57\xec\x20\xf7\xb3\x9b\xd4\x20\xae\x7d\x32\xc0\xed\x04\x4e\xcc\x77\xf2\x73\xaf\x5b\x84\x62\x31\x1d\x36\x36\x6c\x04\x00\x29\x00\x29\x00\x29\xa3\x06\x29\x07\x9d\x14\xdb\x90\x4a\xc3\x51\x31\x3e\x15\x1b\x60\x05\xfa\xf4\x59\xea\xd3\x00\x2b\x5d\xce\x1b\x80\x15\x58\x50\xa0\x68\x0c\x43\xd1\x00\x58\xa9\x80\x95\x03\xad\x05\xdb\x10\xcb\x24\xa4\x40\x80\x16\x08\x86\x10\x0c\x01\x5a\x20\x26\x98\xbf\x01\x5a\x46\x28\xf6\x4c\x14\xb4\xd0\x8d\x69\x65\xdc\xd2\x2b\x60\xb1\x57\xeb\x46\xbe\x7c\x92\xfe\x92\x87\xe5\x6b\xfa\xb8\xbb\x4c\xbb\x68\xf8\xac\x14\xdf\xfa\x83\x8b\x8c\xbd\xa4\x62\x2e\x8b\xbc\x0a\x95\x8b\xf2\x9d\x8c\xc5\x64\x94\x66\x82\x57\xec\xa6\x75\x09\xec\x79\x8b\x15\xee\xd7\xda\xb5\x63\xb8\x3b\x6f\xa8\x01\x7c\x74\xf5\xe3\xcf\x4f\x22\x3a\xf7\x9b\xf2\x68\x1c\xcf\xe5\xba\x3c\x64\x2d\x9a\x70\xd6\xa2\xed\x88\x6b\x5b\xc6\xa2\x8d\x76\xb4\x0e\xf0\x1d\xf2\x14\x21\x4f\x11\xf2\x14\x21\x4f\xd1\xd4\xf2\x14\x6d\xdf\x79\x1b\x73\x14\xf5\xec\x2c\x71\xb4\xcc\x44\xdb\x9b\xbf\x3e\x2b\xd1\x90\xfb\x60\x97\x5c\x44\xdb\xfb\x60\x7d\x1e\xa2\x9e\xfb\x00\xd9\x87\x90\x7d\x08\xd9\x87\x90\x7d\x08\xd9\x87\x7a\xcb\x3e\xd4\x62\xf7\x5f\xc9\x3c\xb4\xf1\xce\xbc\x33\xf2\x95\x6c\xd7\x9a\x09\x67\x4f\xda\xde\xdd\x9b\x32\x27\x1d\xb7\xdf\x91\x2f\xa9\x97\x11\x5d\xcd\x95\xd4\xf3\xb0\x9e\x34\x43\xd2\xf6\xee\xd9\x90\x1d\xa9\xef\x6d\x73\xa8\x39\x91\xb6\x77\x5a\x03\xcf\xd8\xdb\x9e\x67\xff\xfa\xe7\x61\x70\xac\xe1\x2a\xec\x9e\x18\x59\x19\x8c\x45\xf9\x81\xaf\xe6\xec\xbb\x8c\xfc\xae\x01\xd9\x55\x21\xe1\x93\x16\x63\xa5\x41\xad\x24\x14\xaa\xcb\x65\x45\xe5\x2d\x95\x7d\x08\x5e\x03\x5a\x03\x5a\x1b\x1b\x5a\x03\x56\x03\x56\x03\x56\x03\x56\x03\x56\x03\x56\x03\x56\x03\x56\x03\x56\x03\x56\x03\x56\x03\x56\x03\x56\x03\x56\x03\x56\x03\x56\x1b\x1b\x56\xc3\x95\x2a\xed\x47\x07\x98\x10\x98\x10\x98\x10\x98\x10\x98\x10\x98\xd0\x61\xc2\x07\x91\xf1\xb7\x37\x7b\x31\xc1\x93\x44\xd5\xd6\x06\x3e\x10\x59\x55\x7a\x37\x63\xbc\x81\xea\x05\x22\x5b\x61\x7a\xd4\x09\xb7\x77\x1f\xbf\x34\xbd\x8f\xa0\xe2\x1d\x89\x5b\xa9\x23\x29\x02\x71\x72\xd8\x8d\xa6\x4b\xa9\x80\x57\xe5\x4a\xec\xb4\xee\xd6\x84\xae\xf6\x98\xa1\xba\x94\xbf\xb3\x12\xac\xba\x61\xc5\xac\x49\x56\x4d\x2d\x78\xef\x8a\x43\xee\x6a\xb6\xae\xeb\x41\x84\x40\x84\x40\x84\x40\x84\xa6\x46\x84\xda\xdd\x00\xd3\x48\x85\x8e\x76\x39\x0f\xee\x50\x6a\x3d\x50\xa7\xbc\x43\xe9\x68\x18\x6f\x87\x5b\x8b\x1a\x31\xd6\xd1\x7a\xe4\x6b\x59\x7f\x97\x11\x4b\x8d\x5a\xcd\x1e\xc4\xdc\xf8\x1b\x39\x93\x6f\x21\x4a\xd8\xdd\x8b\xa6\x4e\xe9\xd6\xa8\x48\x45\xd7\x91\x08\x38\x4d\x50\xab\x81\x97\x6f\x97\x32\xf8\xc7\x2d\x0d\x2b\x29\xca\xc5\x42\xf8\x92\x67\x22\x7c\x29\x1c\x81\x8a\x23\x57\x86\x57\x56\xc3\x36\x19\xd4\x83\x84\x7b\xb4\x6a\xa4\xf2\x9d\x40\x50\x1c\xda\xe4\x65\x95\xcf\xd2\x65\xaa\x2b\x59\x1e\x2e\xae\xdf\xcc\x1b\x64\x3f\x32\x37\x7b\x60\x5e\xc4\xcc\xd4\xd3\xdc\x8f\xd9\x50\xc7\x3d\x86\x99\xea\x7c\x47\x55\x6e\xb2\x5a\x6c\xb1\x5b\x0c\x65\xfa\xef\x42\x70\xdb\xf5\xcb\x7a\x8a\x7b\xb4\xe9\x0f\x9e\x0b\x9e\x0b\x9e\x0b\x9e\x0b\x9e\xdb\x1b\xcf\x6d\x79\x16\xac\x30\xdd\xe3\x1d\x8b\x1f\x4a\xe1\x21\x71\x28\x78\x2a\xdc\x16\x74\x97\xa8\x98\x07\x24\x1d\xdd\xa9\x50\x7a\x2f\x15\xef\xe1\x7c\xd2\x15\xf1\x25\x7a\xda\xbd\x9d\xfd\x65\xc6\xee\xcd\x7e\x66\x44\x97\x58\x44\x7a\xb1\x14\x67\xaa\x60\x2a\x89\x1f\x79\x94\x7b\x33\x27\x4b\x71\x33\xe7\x61\xae\x2b\x7f\xbb\x30\x3f\x7f\xbb\x60\x73\x19\xf1\x50\xfe\x3b\x3f\x48\x1e\x04\xe3\x3e\x41\x31\x75\x63\x80\x81\x5f\xa8\x61\xa6\xf8\xcb\xb4\x78\xc9\xe8\xa7\x33\xf6\xb3\xa4\xcd\xb1\x54\x75\x95\xac\xb6\xad\x40\xa0\x99\x51\x8f\x49\x47\x51\xd9\xe3\x3e\x03\x6a\x5a\xf0\x21\x6f\xfb\x5a\x91\x67\xaf\xdb\xbb\x77\x52\xcc\xa8\xe9\x7a\xc1\x3e\xaa\x67\x16\xf0\xe4\x81\x07\x15\x03\xa5\x53\x6a\x44\x32\x57\xc9\x42\x8f\x49\x63\x7f\x7d\xae\xb5\x68\x7d\x77\x91\xd0\x9b\x4b\xac\xb1\xe9\x5b\xa9\xa5\x49\x4f\xfa\x85\x2a\x4c\xb2\x82\xb9\x64\x3d\x1f\x63\x7d\x58\xdb\x93\x34\x97\x06\x66\xa5\xc1\xcc\xcf\x11\xc7\x20\x9d\x67\x7e\xf5\x63\x33\x76\xeb\x79\x22\x36\xf7\xb1\x96\x35\xbb\x4b\xd3\x86\x4b\x76\x6d\x27\x60\x75\x82\xa6\x3f\xb2\xcb\x9f\xb8\xf7\x3d\x48\xd4\x32\xf2\xf5\x53\xe4\xe5\x4e\x0f\xd5\x3a\xce\x88\x90\x56\x3e\xae\x16\x92\xb7\xe0\xc1\x95\xf4\x23\xbb\xfc\x45\x25\xa2\x54\x2c\xf3\x78\xea\x71\x5f\xb7\xde\xf6\x8f\x09\x82\xa0\xf2\x52\xa3\x7a\xae\x14\x38\x77\x65\xec\x33\x21\xe3\xfa\x74\x3f\x8d\xc4\x39\x61\x67\x85\x76\xe3\xb0\xc9\x61\xe1\x54\xa3\x00\xd7\x85\xde\xc6\x77\xd5\x7d\xe1\x78\xb6\x8d\x53\x3a\x32\xb4\xeb\xac\x0d\xce\x0c\x87\xca\x3f\x8d\xb4\x0e\x94\x79\x47\x4c\x67\x93\x0b\x4c\x1e\x2e\x97\x0a\x58\x13\xd8\x69\xce\xe6\x42\x6e\x1a\x64\x8c\x67\xad\x59\xab\x81\x9e\x9d\x87\xa2\x1b\xc3\x59\x62\x95\xed\x5c\xc2\x5f\x8d\x42\xdf\x40\xbe\x75\x11\x6b\x9d\x45\x0e\xa0\xdd\x08\x58\x3d\x9f\x80\xd5\x76\xc7\xcd\xb6\xa0\xd5\xe3\xe9\x65\x70\x56\x80\xb3\x02\x9c\x15\xe0\xac\x00\x67\x85\xa6\xcd\x17\x14\x7c\x44\x3d\x02\x30\x0a\x30\x0a\x30\x0a\x30\x0a\x30\x0a\x30\x3a\x2d\x30\x0a\x56\x01\x56\x01\x56\x01\x56\xd1\x3b\xab\xd8\x81\xe7\x0f\x34\x04\xb3\x5d\x17\xae\x86\x61\x4e\x2a\x8f\xf9\xda\x17\xce\xe8\x9a\xd0\x1d\x32\x87\x92\x89\x7f\x56\x4b\xa4\x08\xd2\x74\x31\xd8\xc4\x7c\x5b\xe9\xd2\x1e\xd7\x88\x8e\xe5\x2a\x8e\x57\xb5\xe1\xbb\x88\x55\xda\x31\x4a\x33\xaa\x0e\xe3\x51\x3b\x6c\x66\x1e\xef\x03\x9c\x8d\x33\x2f\x7c\x7d\x3b\x41\x72\xf8\xf3\x09\x6c\x42\x72\x78\x24\x87\x6f\xa8\xcc\xe8\x45\xa2\x49\x64\x88\xdf\xbf\x51\xef\xb6\x36\xca\x38\xfa\x8e\xa9\x55\x53\x96\x5c\x49\x26\x1a\x93\xe4\xfa\x8a\x1d\x70\x97\x48\x43\xa6\x8f\x1e\xaf\x14\x69\x2b\x16\x6e\xba\x47\x04\xb7\x87\xb0\x75\xbd\x0c\x41\xaf\x3c\xc8\x83\x15\xf4\x10\xaf\x7d\x46\xf1\xda\x08\x4c\x43\x60\x1a\x02\xd3\x10\x98\x06\x1d\x75\xdd\x2a\x1a\x64\x14\xc8\x09\xf4\x36\x04\xb1\xec\x12\xc4\x32\x2a\x15\xcd\x19\xdc\x3b\x0f\x5d\x49\x04\xf7\x6b\xf2\x58\x2b\x0d\x4b\xbf\xb7\x93\x7e\x85\xed\x06\x76\x96\xd2\xc8\x1d\xbe\x8c\x03\x31\x2e\x33\xcb\x21\x80\x10\xb9\x07\x6a\xcd\x3c\x19\xf0\x24\xd7\x83\xbd\xee\xac\xbe\xa6\x77\xff\xbc\x79\x93\x5b\x88\x24\x10\xad\x9e\xa4\x09\x2b\x02\xe9\x5d\xb7\x7f\x47\xff\xfd\x62\x9f\xa4\xed\xb4\xcd\x09\x11\xf3\x24\x93\x14\x19\x64\xdc\x64\xf6\x39\x2d\xe2\xc6\xfc\xb6\xd3\xa2\xb4\x9b\xc5\xaf\xbb\xaa\xcf\x0a\x83\x91\x6e\xe2\x46\xba\xf3\xa1\xb1\x35\x4f\xfb\x7c\x71\x99\x68\x10\xbd\xe3\x14\x11\xc6\xaf\xd7\xec\x46\x6f\xc8\x44\x61\x42\x40\x79\x48\x6f\x46\x2a\xba\x36\x6f\xd3\x13\x64\x25\x4c\xd9\xeb\xbf\xa7\x2a\xba\x33\x81\xb6\x9f\xf4\xbe\x67\xff\xbe\xcf\x77\xc3\xe2\x1f\xdf\x0c\x09\x13\xb7\x9f\x37\xbf\xa8\xc4\x23\x33\x6a\xa0\x68\xf0\x15\xfb\x76\x31\xd7\xff\xf6\xed\x82\xdd\x56\x7a\x93\xfc\x78\x8d\xcd\x73\x99\x16\x41\x85\xd7\xdc\xa3\x01\xa0\x50\xcd\x50\x7a\xd6\x8a\x23\x42\x3f\x65\xea\xd9\x8e\xad\x09\x65\x8c\x85\x8a\x43\x31\x63\xe6\x9b\x14\xa1\x9d\xcf\x29\xf2\xa6\x6d\x1c\x08\xf7\xf9\x7d\xba\x57\x7f\x68\xba\xbe\x8f\x50\x36\xa6\xaa\x6c\xc4\x83\xcd\x68\xbe\x5d\xdd\x58\x76\x6e\x32\x88\x43\xee\xed\x25\x07\xda\x57\x27\x2e\x09\xc2\x5f\x0f\x12\x62\x8b\x61\x3a\x1f\x09\x71\x40\x82\x18\xe4\x05\xf7\xcb\xa9\xe5\x85\x49\xfa\xeb\x4d\x5a\x08\x5a\x8e\xcb\xe2\xfa\x8a\x1d\xee\xd8\x76\x93\x1a\x6e\xb6\x4f\xd6\xba\x9d\x18\x8c\xf9\x4e\x7e\x20\xf6\x40\x63\x2c\x00\xc4\xb6\x87\x1d\x02\x4c\xa6\xd6\x89\x60\x32\x60\x32\xa3\x66\x32\x07\x9d\x1e\xad\xe8\x4c\xc3\xf1\x31\x3e\xcd\x1c\x8c\x06\x1a\xf8\x59\x6a\xe0\x60\x34\x5d\xce\x1b\x30\x1a\xd8\x5c\xa0\x7c\x94\xda\x3a\x08\xe5\x03\x8c\x66\x95\xd1\x1c\x68\x55\x68\x45\x6b\x26\x21\x19\x82\xd9\x40\x62\x6c\x31\x4c\xe7\x23\x31\x0e\x48\x30\x83\xfc\xe0\x7e\x39\xb5\xfc\x00\x66\x33\x36\xa1\x68\xf2\xcc\x86\x6e\x83\x2b\x93\x9b\x5e\x59\x8d\xbd\x36\x38\xf2\xe5\x93\xf4\x97\x3c\x2c\x5f\x41\xc8\xdd\x45\xe1\x45\x17\xcc\x4a\xf1\xb7\x3f\xb8\xc8\xdd\x4b\x2a\xe6\xb2\xc8\x19\x51\x49\x02\xe0\xc4\x30\x26\xa3\x34\x13\xbc\x62\x6e\xad\x0b\x69\xcf\x6d\x8c\x77\xbf\xd6\x6e\x53\xc3\xe5\x80\x43\x8d\x32\xa4\xbb\x2d\x7f\x7e\x12\x11\x6e\x01\xcc\x27\xf7\x59\x5d\x05\x88\x04\x4d\x13\x4e\xd0\xb4\x1d\x94\x6d\x4b\xce\xb4\xd1\x10\xd7\x01\x04\x44\x4a\x26\xa4\x64\x42\x4a\x26\xa4\x64\x9a\x5a\x4a\xa6\xed\x3b\x6f\x63\x3a\xa6\x9e\x5d\x2e\x8e\x96\x84\x69\x7b\xf3\xd7\x27\x60\x1a\x72\x1f\xec\x92\x76\x69\x7b\x1f\xac\x4f\xb9\xd4\x73\x1f\x20\xd1\x12\x12\x2d\x21\xd1\x12\x12\x2d\x21\xd1\x52\x6f\x89\x96\x5a\xec\xfe\x2b\x49\x96\x36\x5e\xf1\x77\x46\x1e\x97\xed\x5a\x33\xe1\x44\x51\xdb\xbb\x7b\x53\x92\xa8\xe3\xf6\x3b\x52\x43\xf5\x32\xa2\xab\x69\xa1\x7a\x1e\xd6\x93\x26\x83\xda\xde\x3d\x1b\x12\x41\xf5\xbd\x6d\x0e\x35\xfd\xd3\xf6\x4e\x6b\x20\x1b\x7b\xdb\xf3\xec\x5f\xff\xec\x00\x98\x35\xdc\xe1\xdd\x13\x37\x2b\xc3\xb2\x28\x3f\xf5\xd5\x9c\x7d\x97\x91\xdf\x35\x34\xbb\x2a\xc4\x7c\x52\x65\xac\x48\xa8\x35\x85\x42\x7f\xb9\xac\xe8\xbd\xa5\xb2\x0f\x46\x6e\xc0\x6d\xc0\x6d\xa3\xc4\x6d\x40\x6d\x40\x6d\x40\x6d\x40\x6d\x40\x6d\x40\x6d\x40\x6d\x40\x6d\x40\x6d\x40\x6d\x40\x6d\x40\x6d\x40\x6d\x40\x6d\x40\x6d\x40\x6d\xa3\x44\x6d\xb8\xac\xa5\xfd\xe8\x00\x1d\x02\x1d\x02\x1d\x02\x1d\x02\x1d\x9e\x23\x3a\x8c\xd3\x9b\xbd\x40\xe0\x49\xe2\x6e\x6b\xc3\x1b\x50\x86\xc2\xb9\x4a\x16\x6e\x3a\x73\x66\xa0\xc4\x7a\x9a\x17\x88\xec\x36\x8e\xd3\xdb\xbb\x8f\x7f\xab\x3f\x89\x18\xe3\x1d\x71\x9a\xeb\xc4\xd1\xc3\xb4\xca\xd3\xaf\xca\x5f\x6c\x58\x30\x4f\x6f\xc7\xbd\x66\x2a\x7a\xad\xd9\xfd\xb6\x2f\x98\xdf\xde\xde\xde\x7d\xfc\xd2\xf4\x3c\x96\xcd\xee\xcb\x26\xef\x48\x8a\xd4\x9d\xc0\xea\xf9\xef\xa7\xb7\xbb\x2d\x20\xad\xac\x27\x4a\xab\xca\x89\x78\x92\x24\x98\xf5\xea\x90\x62\x2c\x9e\x89\xb5\x99\xe4\x2a\x75\xee\x8b\xf2\xde\xd5\xe6\x8b\xad\xcd\x86\x05\xa1\x8b\x32\x2b\x62\xf5\xb5\x5f\x54\x72\x1b\x86\xff\x87\x2f\x44\x1a\xf3\x81\xac\x13\xb8\x85\xd0\x82\x9c\xe9\xa9\xa7\x97\xdf\xea\xa8\x4d\x73\x15\x6e\x77\x00\xe9\x2e\xd4\x3a\x4e\x9b\xbd\x3d\x36\x2e\xac\xba\xd7\x07\x1c\x3e\xe0\xf0\x01\x87\x0f\x38\x7c\xc0\xe1\x03\x0e\x1f\x70\xf8\x80\xc3\xc7\x2e\xbb\x2d\x1c\x3e\xe0\xf0\x01\x87\x0f\x38\x7c\xc0\xe1\x03\x0e\x1f\x70\xf8\x38\x3b\x87\x0f\x38\x48\xc0\x41\x02\x0e\x12\xe3\x18\x51\x38\x48\x54\xbb\x07\x0e\x12\x03\x77\x90\x78\x7a\x7b\xe3\x73\xb1\xd0\x9a\x43\x76\x4a\x4a\xf5\x81\x2a\x71\x5f\x4d\xba\xb7\x16\x4e\xb9\xa7\xc1\xa4\xea\xbd\x3e\x3c\x26\xe5\x06\x0b\x28\xaa\xe1\xb1\x4e\x50\x54\xd3\xea\x01\x81\x02\x81\x02\x81\x02\x81\x02\x81\x02\x81\x02\x81\x02\x81\x02\x81\x02\x81\x02\x81\x02\x81\x02\x81\x02\x81\x02\x81\x02\x81\xda\x61\xdb\x07\x81\x02\x81\x02\x81\x1a\xc7\x88\x82\x40\x55\xbb\x07\x04\x6a\x04\x04\x4a\xc4\xa1\x7a\xd1\xf2\xe3\x49\x11\x94\xab\x45\x3b\x06\xe5\x1e\x07\x84\xaa\xf7\xfb\x00\x21\x94\x1b\x2d\x50\xa8\x86\xc7\xba\xa1\x50\x4d\x0b\x08\x18\x0a\x18\x0a\x18\x0a\x18\x0a\x18\x0a\x18\x0a\x18\x0a\x18\x0a\x18\x0a\x18\x0a\x18\x0a\x18\x0a\x18\x0a\x18\x0a\x18\x0a\x18\x6a\x87\x6d\x1f\x18\x0a\x18\x0a\x18\x6a\x1c\x23\x0a\x0c\x55\xed\x1e\x60\xa8\xe1\x63\xa8\xc8\x11\x1c\x93\x46\x92\xfe\xfe\xcf\xb6\xeb\xfc\x8c\xb4\xd3\x2d\xa8\x32\x65\x32\x4f\x7f\xd5\xcb\x27\xe9\x4e\x17\xf9\x99\x12\xf2\xab\xfc\xf2\x62\x1c\xa3\xf2\x37\x17\xb6\xc6\x10\xcf\xea\x28\xc4\x8c\xe0\x83\xf2\x5f\xea\xc8\x26\x1f\xc2\xa6\xdf\x7a\xb9\x78\xf2\x03\x35\xf8\x33\x75\x61\xda\x92\xef\x6c\x06\x3b\xb0\xed\xc2\xb6\x0b\xdb\x2e\x6c\xbb\x53\xb3\xed\x6e\x38\x79\xb7\xd9\x77\x37\x4b\x71\x9b\x4f\xe0\x9d\xf6\xde\xdf\x75\xc7\x59\xad\xf6\x8a\xc9\xc8\xd7\x4d\xc9\xb5\xf6\x4a\xdb\xca\x1c\xf5\x41\xb0\x58\xf7\x56\xaa\x15\x40\x76\x1b\x31\x19\x99\x9d\x45\x25\x6c\x19\xb9\xcd\xc9\x67\x7e\xf2\xf2\x65\x19\x31\x5f\x26\xfa\x5c\x7c\x12\x6e\xc6\xeb\xed\x93\x6c\x10\x76\xc9\xe7\x73\xc3\x76\x30\x9b\x2f\x13\x5a\x65\x71\xa2\x3c\x91\x92\xb1\xc0\x8a\x8f\x76\x96\xcd\xd8\x6f\xf4\x45\x1a\x2d\x9a\x3b\x3f\xb0\x6b\x76\x1b\x86\x3f\x90\x29\xc0\xd7\xbb\xf4\x32\xd2\x03\xaf\x05\xb1\x7c\x4a\xda\xe2\x84\xbf\xc7\x40\x99\xb6\x9c\x66\x98\x8e\x66\x90\x6f\xd7\x15\xeb\x8d\xf2\x47\xeb\x91\xaf\x65\xcd\x42\x6a\xad\x9e\x04\x7e\xf6\x20\xe6\xc6\x73\xc0\x19\x6f\x0a\x51\xc2\xee\x5e\x34\x75\x96\xc2\x1c\x0e\x0f\x5a\xa6\x8e\xae\x23\x11\x70\x9a\xa0\x56\x37\xd0\x6a\x4c\x7e\x82\x1a\x43\xae\x5b\x1a\x56\x66\x94\x8b\x85\xf0\x25\xcf\x44\xf8\x52\x20\xfd\xe2\xc8\x95\xe1\x95\x95\xfd\xa9\xd3\x59\x90\x70\x8f\x56\x8d\x54\xbe\x13\x08\x8a\x43\x9b\xfc\x25\xf2\x59\xba\x4c\x75\x25\xcb\xc3\xc5\xf5\x9b\x79\x83\xec\x47\xe6\x66\x0f\xcc\x8b\x98\x99\x7a\x2e\x04\x8f\x1a\xeb\xb8\xc7\x30\x53\x9d\xef\xa8\xca\x4d\xfa\xd4\x16\x8d\x6a\x28\xd3\x7f\x17\x16\xd3\xae\x5f\xd6\xf3\x98\xa3\x4d\x7f\x90\x19\x90\x19\x90\x19\x90\x19\x90\x99\xde\xc8\x4c\xcb\xb3\x60\x85\xce\x1c\xef\x58\xfc\x20\xe2\x44\x68\xa1\xc4\xff\x81\xc5\xa1\xe0\xa9\x70\x5b\xd0\x5d\xa2\x62\x1e\x90\x74\x74\xa7\x42\xe9\xbd\x54\xfc\x00\xf3\x49\xe7\xbb\x02\xf4\xb4\x7b\x3b\xfb\xcb\x8c\xdd\x9b\xfd\xcc\x88\x2e\xb1\x88\xf4\x62\x29\xce\x54\xc1\x54\x12\x3f\xf2\x28\xf7\x4b\x4c\x96\xe2\x66\xce\xc3\x5c\x57\xfe\x76\x61\x7e\xfe\x76\xc1\xe6\x32\xe2\xa1\xfc\x77\x7e\x90\x3c\x08\xc6\x7d\x32\xd7\xab\x1b\x63\xca\xf4\x0b\x35\xcc\x14\x7f\x99\x16\x2f\x19\xfd\x74\xc6\x7e\x96\xb4\x39\x96\xaa\xae\x92\xd5\xb6\x15\x70\x26\x33\xea\x31\xe9\x28\x2a\x7b\xdc\x67\x40\x4d\x0b\x3e\xe4\x6d\x5f\x2b\xf2\x34\x19\x46\xbb\x55\xcc\xa8\xe9\x7a\xc1\x3e\xaa\x67\x16\xf0\xe4\x81\x07\x15\x53\xa5\x53\x6a\x44\x32\x57\xc9\x42\x8f\x49\x63\x7f\x7d\xae\xb5\x68\x7d\x77\x91\xd0\x9b\x4b\xac\xb1\xe9\x5b\xa9\xa5\x49\x4f\xfa\x85\x2a\x4c\xb2\x02\x19\x27\xdc\x18\xa7\x94\x45\x8b\x7e\xcd\xa5\x81\x59\x69\x30\xf3\x73\xc4\xd1\x11\xe7\x63\x5b\xfd\xd8\x8c\xdd\x7a\x9e\x88\x33\x3a\x9b\xca\x9a\xdd\xa5\x69\xc3\x25\xbb\xb6\x13\xb0\x3a\x41\xd3\x1f\xd9\xe5\x4f\xdc\xfb\x1e\x24\x6a\x19\xf9\xfa\x29\xf2\x57\xa5\x87\x6a\x1d\x67\x44\x48\x2b\x1f\x57\x0b\xc9\x5b\xf0\xe0\x4a\xfa\x91\x5d\xfe\xa2\x12\x51\x2a\x96\x79\x3c\xf5\xb8\xaf\x5b\x6f\xfb\xc7\xb8\x33\x53\x79\xa9\x51\x3d\x57\x0a\x9c\xbb\x32\xf6\x99\x90\x71\x7d\xba\x9f\x46\xe2\x9c\x30\x46\x6d\x37\x0e\x9b\x50\xea\xa9\x46\x01\x50\xb5\xb7\xf1\x5d\x05\xab\xc7\xb3\x6d\x9c\x12\xb1\xb6\xeb\xac\x0d\x98\xf5\x50\xf9\xa7\x91\xdb\x21\x3f\xdc\x8e\x98\xee\x3e\xe3\xd9\xb2\x2d\x9f\x9b\x54\xfc\x95\x39\x8b\x0b\x39\xa9\xdf\x58\xac\xce\x92\x53\x8d\x23\x5b\x5d\xd7\x60\x1b\x51\x66\xe7\x13\x65\xd6\xee\x64\xd9\x16\x69\x76\x3c\x15\x0c\x7e\x09\xf0\x4b\x80\x5f\x02\xfc\x12\xe0\x97\xd0\xb4\xf9\x02\x78\x8f\xa8\x47\xc0\x40\xc1\x40\xc1\x40\xc1\x40\xc1\x40\xc1\x40\xa7\xc5\x40\x81\x25\x80\x25\x80\x25\x80\x25\x7a\xc7\x12\x3b\xa0\xfb\x81\xc6\x81\xb5\xeb\xc2\xd5\x58\xb0\x43\x2d\x6e\x83\x02\x3a\x6b\x5f\x38\xd3\xfb\xfa\x56\xcd\xf8\xb8\xb7\xaf\xe1\xb1\x61\xb1\xa2\x3d\xee\xef\xb3\xb2\xa2\x5e\xe5\xb4\x8f\xe8\x31\x61\xa9\xa7\x62\x71\xc5\xd2\xa5\xf7\xa8\x37\x1e\xda\xd8\x05\x5f\x98\x5d\x29\x4e\x14\xc9\xa6\x4d\xb1\xa4\x31\xcf\x1e\x9b\x43\x49\x5d\x3c\x67\xf5\x67\x2d\x68\xc9\x44\xf8\x76\x7b\xa8\xfc\xd6\x6f\xbc\xf2\x58\x2e\x33\xb0\x7f\xfd\xb3\x18\x64\x95\x76\x4c\x04\x8d\x9e\xc6\xf8\x6e\xf0\xcf\xbc\xd5\x0f\xfe\xdb\x2f\xae\x75\xc3\x64\xea\x6b\x53\xec\x24\xd0\x15\xc1\x56\xe5\x51\x1f\x6c\xb0\x15\x19\x65\x3e\xf1\x88\x07\x22\x31\xe6\x45\xb3\x6b\xa6\xa9\xf2\x24\xe9\xcb\xce\x90\xc7\xc9\x1e\xab\x12\x26\xa2\x4c\x0b\xb0\xb9\x01\x61\xc1\xbf\xeb\x5e\xcc\x1e\x45\x2a\x72\x29\xb0\x1c\x52\x94\x87\x1e\x91\x14\x4c\x46\x3b\x95\xb0\xb7\xef\xfe\xaa\x9f\x4d\xb8\x47\x94\x2e\x54\x51\x60\x64\x3e\x32\xac\x79\x2a\xca\xb8\x8c\xcc\x56\x45\x86\xab\xe2\x59\x22\x17\x96\x21\xb2\x87\x17\xa7\xd6\x04\x2a\xe4\x51\x30\x53\x49\x70\x13\x7f\x0f\x6e\x96\x91\xf4\x94\x2f\x6e\xfe\xf4\x31\xbd\xd3\xa5\xec\x6d\x09\xb7\x9d\xd3\xe5\xf0\x0c\x4a\x48\x1c\xad\xec\xd6\x56\x6e\x7b\xd7\x42\x6e\x7b\x6f\xac\x7a\x03\xab\xf7\xbb\xad\xf5\x36\x2e\xc4\x03\xab\xf8\x94\x04\x65\x12\x4c\x06\x2d\x28\xbf\x62\x1d\xdc\x3d\x62\x7e\xff\xcf\x91\xae\x20\xd9\x51\x28\x2b\x5f\x3b\x32\x0c\xa1\x6c\x24\x97\x8d\x40\x06\x2b\x0f\xf2\x60\x65\x30\x84\x77\x9f\x51\x78\x37\xe2\xd8\x10\xc7\x86\x38\x36\xc4\xb1\x41\x7d\x5c\xb7\x8a\x06\x19\x34\x72\x1a\x65\x0c\x31\x2f\x6b\x63\x5e\x86\xad\x94\x39\xc3\x76\xe7\x91\x2e\x89\xe0\x7e\x4d\xe0\xda\x49\x99\xd2\xef\xef\xa8\x4a\x61\x67\x81\x9d\xc4\xfd\xb8\x66\x51\x06\x62\xe0\x66\x92\x43\x78\x22\x99\xc4\xad\x86\xba\xad\x1e\x6d\x98\xe1\x50\x70\x21\x38\xe9\xe8\x38\x29\xb9\x5b\xb4\x3a\x50\xea\xdb\xf3\x35\xbd\xfb\xe7\xcd\x3b\xf5\x42\x24\x81\x68\xf5\x64\x9a\x25\x3c\x13\x81\xf4\xae\xdb\xbf\xa3\xff\x7e\xb1\x4f\xd2\x99\xd0\xe6\xc0\x8b\x79\x92\x49\x8a\x86\x32\xae\x41\x87\x1c\x7e\xf4\xe9\x21\x19\x12\xfb\xa2\xbb\x1b\x04\xc7\xbb\xaa\xc7\x0e\x83\x79\x71\xe2\xe6\xc5\xf3\x41\xbc\xb5\x38\x83\x7c\x71\x99\x58\x18\xbd\xf7\x14\xf1\xd5\xaf\xd7\xec\x4b\x6f\xc8\xb8\x62\x02\x60\x79\x48\x6f\x46\x2a\xba\x36\x6f\xd3\x13\x64\xdf\x4c\xd9\xeb\xbf\xa7\x2a\xba\x33\x61\xc6\x9f\xf4\x0e\x68\xff\xbe\xcf\xf7\xc5\xe2\x1f\xdf\x0c\x89\x3d\xb7\x9f\x37\xbf\xa8\xc4\x23\x03\x70\xa0\x68\xf0\x15\xfb\x76\x31\xd7\xff\xf6\xed\x82\xdd\x56\x7a\x93\xbc\x98\x8d\xb5\x76\x99\x16\x21\x95\xd7\xdc\xa3\x01\xa0\x40\xd5\x50\x7a\xd6\xfe\x24\x42\x3f\x65\xea\xd9\x8e\xad\x09\xe4\x8c\x85\x8a\x43\x31\x63\xe6\x9b\x14\x9f\x9e\xcf\x29\xf2\x25\x6e\x1c\x08\xf7\xf9\x7d\xba\x57\x7f\x68\xba\x9e\x9f\xd0\x9d\x46\xa4\x3b\xc5\x35\x0f\xdc\x41\x6b\x4f\xcb\xce\xed\x19\x71\xc8\xbd\x83\xa4\x3a\x5b\xc4\x39\xc8\x75\xf0\xda\x83\x48\x77\x56\x22\xdd\x80\x24\x27\x1c\xf0\xee\x17\x78\xed\x9d\x87\x60\xb2\x1c\xb8\x51\xf7\x15\xdb\xd5\xf7\xcd\xe7\x62\xa1\x97\x48\x76\x9a\x74\x5b\x1f\xe8\xf3\xf7\x55\x63\xf9\x8e\x59\xb6\x1a\xcb\x80\xbf\x1b\x2e\xb1\xc2\x25\x56\xb8\xc4\x0a\x97\x58\xe1\x12\xab\x93\xa8\x24\xd0\x1c\x5b\x0f\x14\x92\x6b\x0d\xe9\xae\x31\x78\x5f\x9f\x91\xf7\x35\x2e\x96\xc3\xc5\x72\xb8\x58\x0e\x17\xcb\xe1\x62\x39\x5c\x2c\x87\x8b\xe5\x10\x94\x84\xa0\x24\x04\x25\x21\x28\xa9\x3e\x23\x91\x5c\x0b\xb7\x58\xe2\x16\x4b\xdc\x62\x39\xf2\x5b\x2c\x1b\x29\x1d\x80\x3d\x02\x0d\xeb\x2f\x0c\x22\xb9\x56\x13\xd6\x1d\x70\x4e\xad\x36\x24\xbb\x29\x95\xd6\x41\xf4\x1a\x19\xb4\x90\x41\xcb\xfc\x84\x0c\x5a\x70\x3e\x80\xf3\x01\x9c\x0f\xe0\x7c\x00\xe7\x03\x50\x6d\x80\xce\xed\x3d\x02\xd0\x09\xd0\x09\xd0\x09\xd0\x09\xd0\x79\xc6\xa0\x13\xec\x01\xec\x01\xec\x01\xec\x01\x19\xb4\x90\x41\x0b\x19\xb4\xdc\x2f\xad\xe3\x22\x9d\xf5\x1e\x89\xb3\x1a\x1e\x1b\x04\x07\x42\xbe\xac\x73\xb8\x07\xae\xbf\x7c\x59\x6d\xc0\x5e\x73\x9a\xac\x13\x04\xa6\xf6\x7e\xcf\x46\xd1\xa6\x76\x9b\x1d\x82\xa4\x26\x10\x24\x85\xeb\x35\x70\xbd\x46\x43\x65\x06\x2c\x8e\x8d\xe3\x56\x8d\x3d\xaa\x7b\xd2\x14\x58\x3b\xd7\x77\x4a\x92\x6e\xff\x99\xaf\xf6\x94\x74\x5f\xb1\xfd\x2f\xfd\x38\x76\x9e\xab\x5d\xef\xfb\xc0\x2d\x1f\x0d\xad\x81\x10\x35\x46\x21\x0a\x71\xd5\x67\x14\x57\x8d\x00\x32\x04\x90\x21\x80\x0c\x01\x64\xd0\xff\xd6\xad\xa2\x41\x46\x6b\x20\xab\xd5\x60\xd4\xad\x63\x64\xb5\x1a\x5c\x88\x49\x43\x32\xab\x36\x1a\x53\x53\x0e\xab\x66\x7d\x09\xdb\x07\xec\x1b\xa7\xca\x58\x75\x02\x90\x57\x4e\x54\xb5\xe6\xf3\xc8\x4f\xd5\xdc\x66\x70\x49\xe4\xa7\xea\x23\x3f\x55\x9b\xf3\xac\x31\x2d\xd5\x84\x68\x2a\xb2\x51\xc1\x2c\x78\x7e\x6c\x15\xd9\xa8\xba\x9c\x37\xc8\x46\x05\x6b\x0a\xd4\xa1\xd5\x6e\x1c\x51\x12\xaa\x83\x15\xa2\xe3\xe4\x9e\x6a\x67\x81\x68\x4c\x39\x35\x21\x99\x0d\x1e\x70\x90\xd2\xce\x41\x4a\x1b\x90\x30\x84\x33\xdb\xfd\x02\x0f\x38\x5b\xf2\xa4\x44\x8c\xbe\xd3\x49\x9d\xce\xa1\xec\x26\x35\xe0\xaa\xe4\x57\xd6\x0f\x2c\x31\xdf\xc9\xcf\xa6\x0e\xb1\x89\x25\x6f\xd8\x79\xb0\x94\x01\x4f\x00\x4f\x76\x6b\x33\xe0\x09\xe0\x49\x37\xf0\xe4\x90\xf3\x6d\x33\x46\x69\x38\xe0\x46\xa9\x98\x03\xa6\x40\x4d\x3f\x3f\x35\x1d\x30\xa5\xcb\x79\x03\x98\x02\xc3\x0c\xd4\xa3\xd5\x6e\x04\x4c\x39\x1c\xa6\x1c\x66\xa1\xd8\x8c\x55\xa6\x22\xc3\x01\xae\x40\x6a\x3b\x07\xa9\x6d\x40\xc2\x11\xce\x70\xf7\x0b\xe0\x8a\x2d\x79\x52\x22\xc7\x74\xe0\x8a\x88\x43\xf5\xb2\xa0\x88\xc7\xe3\xc4\xe9\x97\x22\x19\xd5\x9c\x7d\x70\xdf\xdf\x20\xa9\x94\x83\xf6\xdf\xbb\xd7\x4b\x22\x4b\x63\x21\x88\xdf\x47\xa2\x0c\x24\xca\x40\xa2\x0c\x24\xca\x40\xa2\x8c\x93\xa8\x1e\xd0\x10\x5b\x0f\xd4\x29\x35\x44\xe4\x33\xc1\x6d\x32\x67\x7c\x9b\x0c\x92\xd7\x20\x79\x0d\x92\xd7\x20\x79\x0d\x92\xd7\x20\x79\x0d\x92\xd7\xe0\x92\x35\x5c\xb2\x86\x4b\xd6\x70\xc9\x5a\x7d\x46\x1e\x35\x47\x13\x32\x65\x0d\x61\x14\x90\x29\x0b\x99\xb2\xa6\x96\x29\xab\x91\xd3\x01\xcc\xe3\xe2\xc4\xfa\x0b\x1b\x2f\x4e\x2c\xe4\xa4\x9e\x29\x78\x13\xd7\x3d\xe9\x1d\x8a\xc6\x22\x96\x58\x2d\x3a\x17\xdd\xd5\x9c\xe9\x2a\xb7\x83\xd9\xba\x88\x15\x9f\xbb\x83\x00\x76\xad\x8e\x24\x9e\x51\xa2\xbb\x9f\x94\xfa\xbe\xe0\xc9\xf7\xb4\xf0\xd7\x36\x15\x27\x8b\x4c\x6a\xed\x46\x2f\xb1\x56\x2e\x7e\xfa\xfc\xf9\x1f\x9f\x6e\xbf\xfc\xe3\xdb\x45\x61\x13\x31\xe2\x97\x22\x19\x56\x2e\xe2\x50\x90\xf1\xe3\xc1\x95\xaa\x05\x0e\x19\x44\xc6\x26\xac\xa5\xe2\x90\x07\x24\x8f\x16\x8f\x68\xfd\xb3\xac\x3b\x1a\x43\xc3\x65\xca\x7c\x99\x7a\x89\xd0\x75\x2e\x68\x52\x89\x82\x58\x83\x47\xb5\x20\x67\x82\xd0\xba\xb5\xd6\xe3\x73\x49\x57\xef\x85\xc9\x13\x0f\xaf\x58\xa4\x0c\xe8\x25\x0d\xd9\x59\x4d\xea\x86\x37\x42\x8d\x2f\x2c\x6f\xb3\xb5\x50\x39\xfd\x38\x15\x29\xa5\xe8\x73\xa6\x67\x6b\x48\xb1\x8c\xab\xa2\xee\xe9\x5f\xa9\x0b\x7c\xc7\x4e\xe7\x82\x67\x5a\x4b\x0f\x78\x26\x58\x6d\x20\x6c\x49\x22\xd2\x62\xb8\x31\x48\xc4\xb2\x80\xba\x4d\xc5\xee\x71\x82\x34\x4c\x81\x13\xa9\x5a\xf0\x3f\x80\xff\x01\xfc\x0f\xe0\x7f\x00\xff\x83\xa6\xcd\x17\x60\x7b\x44\x3d\x02\xd6\x09\xd6\x09\xd6\x09\xd6\x09\xd6\x09\xd6\x39\x2d\xd6\x09\xfc\x00\xfc\x00\xfc\x00\xfc\xd0\x3b\x7e\xd8\x01\xd1\x1b\x65\x4e\x25\x79\xc0\xa5\x1e\x7e\x83\x94\xf5\x73\x0f\x74\x88\x99\x41\x35\x08\xdc\x4a\x27\xd9\xa3\x58\x98\x63\x2b\xcd\x12\xc1\x17\xd4\x3d\xbe\x7f\x65\x0f\x86\x2b\xfb\xec\x42\x3d\x91\xec\x53\x52\xef\xd8\x3d\x89\x2b\x2f\xf5\xa9\xbe\x4f\x17\x3e\x6f\x9a\x60\xe3\xbf\x15\x61\xed\x0b\xfa\x63\x3f\x9a\x8e\xff\xaf\xd5\x3e\x68\x53\x76\xf5\xed\x61\x13\xa2\x22\x16\xd2\x99\xef\x7f\x95\xe9\x59\x06\x44\xea\x6d\x6c\xe0\x2c\x68\x8f\x4b\xea\x70\xab\xdb\xe8\x6e\x75\x53\x69\xc7\xc4\xcf\xe8\x65\x8c\xb7\x83\x7b\xe6\xe9\x6e\xf1\xde\x50\x6f\xd3\x28\x1a\xd5\x6e\xc3\x43\xb0\xd4\x04\x82\xa5\x70\x9d\x06\xae\xd3\x68\xa8\xcc\x90\x65\xb2\x91\xdc\xa7\xb1\x47\x7d\x4f\x91\x4f\xf6\x80\x0a\x4f\x49\xe0\x25\x41\x63\x90\x02\xef\x2b\x76\xc0\x1d\x20\xf6\x86\xf5\x23\x5d\x05\xd2\x52\xa8\x2a\x5f\xff\x81\x4b\x3f\x9a\x5a\x03\x59\x6a\x8c\xb2\x14\xc2\xac\xcf\x28\xcc\x1a\xf1\x64\x88\x27\x43\x3c\x19\xe2\xc9\xa0\x06\xae\x5b\x45\x83\x0c\xde\x38\x8d\x92\x85\xd8\x93\xb5\xb1\x27\xc3\x54\xba\x9c\x01\xba\x9f\x44\x54\x55\x41\xab\x95\xd2\xd4\x98\x7f\xaa\x59\x65\xc2\x0e\x02\x3b\xc7\xe9\x72\x4f\x9d\x80\xeb\x55\x92\x4f\xad\xf9\x3e\xb2\x4f\x35\xb7\x19\x9c\x12\xd9\xa7\xba\xc9\x3e\xb5\xc7\xa1\xd6\x9c\x74\x6a\x42\x74\x15\xf9\xa6\x60\x1e\x3c\x3f\xd4\x8a\x7c\x53\x5d\xce\x1b\xe4\x9b\x82\x55\x05\x3a\x51\x43\x3f\x8e\x29\xe1\xd4\xc1\x5a\x51\x5f\x19\xa7\xf6\x32\x45\x34\x27\x9a\x9a\x90\xdc\x06\xaf\x38\x88\x6a\x67\x21\xaa\x0d\x48\x22\xc2\xc1\xed\x7e\x81\x57\x9c\x2b\x7a\x52\x82\x46\xef\x69\xa6\x4e\xe8\x63\x76\x93\x7a\x3c\x2c\xfb\x95\xf5\xc4\x4e\xe8\x33\x0d\x19\x32\x0f\x87\x28\xf7\xd4\x00\x6c\x3e\x5b\x17\xf3\x32\x53\x7a\x14\x64\x14\x10\xc1\xa4\x6e\x3b\xc3\xe5\xdc\x15\x4b\x29\xba\xb3\x79\x55\xd7\xe7\xe5\x11\x69\x4a\xc3\xa7\x01\x52\x9a\xdb\x0c\x90\x02\x90\xd2\x0d\x48\x39\xe4\x84\xdb\x42\x54\x56\x8f\xb8\x51\xaa\xe7\xc0\x2a\xd0\xd5\xcf\x4f\x57\x07\x56\xe9\x72\xde\x00\xab\xc0\x3a\x03\x05\xa9\x57\x05\xa9\x3b\xb0\xd2\xab\x8a\xd4\x17\x5a\x39\xcc\x52\xb1\x85\xb1\x4c\x44\x92\x3b\x64\xad\x40\x7c\x83\xf8\x36\x22\xf1\x6d\x40\x52\x12\x0e\x73\xf7\x4b\xaf\x87\xf9\x89\x60\x0b\xc4\x8f\x4e\x71\x4b\x0f\xc2\xc7\x2b\xd6\x05\x70\x31\xa1\x43\xfd\x13\x17\xfa\x4e\x3f\xc8\xc5\x34\x01\xbb\x10\x00\x2a\xa2\x57\x10\xbd\x02\xe8\x02\xe8\x72\x2a\xe8\x72\xc8\x21\xb7\x8d\xba\xac\x9e\x72\xa3\x54\xd6\x81\x5d\xa0\xb7\x9f\x9f\xde\x0e\xec\xd2\xe5\xbc\x01\x76\x81\xa5\x06\x3a\x52\x43\x3f\x0e\x0f\xba\x8c\x30\x9a\xe5\x40\x53\xc5\x36\xe6\x32\x11\x39\x0e\xd1\x2d\x10\xdd\xce\x42\x74\x1b\x90\x84\x84\x83\xdc\xfd\x82\xe8\x16\x57\xf4\xa4\x04\x8f\xe9\x44\xb7\x68\x49\x40\x7a\x3c\x15\x59\x7a\xa4\xab\x93\x4b\x57\x4b\xaa\x39\xfb\x62\xbe\x7f\x2f\xda\x5e\xa3\xfc\xde\xbd\x5e\xc8\x2d\xcd\x85\xe0\x42\x65\x64\x31\x47\x16\x73\x64\x31\x47\x16\x73\x64\x31\x3f\x89\xf6\x01\x25\xb1\xf5\x40\x9d\x52\x49\x44\xb2\x79\x5c\xef\x7f\xc6\xd7\xfb\x1f\x34\xfd\x43\xfe\x20\xc2\x4e\xa7\x3f\x95\x78\xda\xe9\xef\xd2\xc0\x73\xb6\xe0\x7f\xc8\xc5\x72\xc1\xa2\xe5\xe2\x41\x4f\x92\xb9\xdb\x4c\x53\x9b\xb3\x9f\xb2\xef\x93\xd8\xe6\x32\x0f\xd3\x94\x25\x31\xda\xe4\xdc\xa7\x9b\xec\x57\x65\x13\x2d\x7c\xeb\x7f\xfb\x57\x7e\x4a\xfd\x2b\xbf\x4c\x3f\x2a\x7a\x3f\xbf\xe7\xde\x4c\x54\x33\x3b\xe9\xfc\xf0\x78\x94\x4f\xe7\x42\x12\x4a\xf9\x42\xaf\x32\x99\x49\x27\x32\x9b\x5a\x6a\xe1\x5e\x14\xb2\x8e\xfe\xb4\x69\x8b\xc9\x7d\x7f\x2f\xb2\xcc\x24\x1d\x37\x6d\x37\xa2\xb2\x69\x9b\x78\x26\xa1\x81\x47\xe5\x13\x42\x8b\x29\x0b\xb5\x8c\xa8\x18\xd3\xca\xd7\xcb\x58\x7f\xcc\x2c\x68\xfd\x2f\x6f\x72\xd9\x44\x3c\x51\x5a\x72\x3a\x9c\xf2\xb7\xcb\x99\xcf\xe7\x32\xcc\x84\x96\x50\x29\xd7\x7c\xe4\x3b\x05\xc2\xee\x2e\x15\x1d\xc2\x9c\xa7\x9e\xf3\x23\xaa\x25\xe6\xa7\x5b\xf7\x6d\xe2\x69\x27\x8b\x6f\x4a\xc4\x7f\x4f\x23\x62\x24\x19\xef\x51\xa9\x94\xb2\xeb\xea\x72\xac\x04\x64\xc7\x42\x77\x0b\x4f\x82\xe5\x82\xda\x12\xf9\xf9\x69\x4b\x9d\xa4\xdb\x66\xeb\xe3\x8a\x2e\x7a\xf7\xe3\x9c\xb9\x29\x55\xec\x4a\xb9\x76\x52\x6b\x80\x4c\x99\x58\xc4\xd9\x4b\x55\x8d\xe2\xa9\x56\xbd\xcd\xc8\x47\x6a\x63\x83\x36\x89\x72\x72\x5e\x13\xe4\x8c\xec\xe7\xe6\x65\xb0\xe4\x09\x8f\x32\x91\x0b\x29\xc5\x4e\x5f\xa4\x88\x37\xf2\xa0\xc9\x91\xef\xea\xee\xc4\x52\xa7\xb0\x65\x8a\xf2\xfb\x9b\x59\xa5\x1f\x0e\x45\xb1\x42\x9c\x8e\x90\x4f\xb8\xeb\xdc\xde\x7a\xa5\x9b\x97\x7f\x72\x37\x39\x39\x17\x91\xb5\x7c\x9e\xa6\x4b\xe1\x37\x0a\xcb\x5a\xae\x4c\x97\x0f\xa9\x7e\x38\xca\x5c\x0b\xfc\x12\x8c\xa5\x1e\xd4\x63\xa5\x16\x22\x93\x0b\xa1\xdb\x3e\x17\x49\x62\x52\x95\xf3\x9a\x3e\x54\xa8\x07\x7a\x44\x4d\xea\xff\x5c\xd6\xcf\x15\x9c\xdc\x98\x6c\x7a\xcd\x34\x99\x16\x26\xa9\x32\x2c\x5d\xf0\x30\x14\x89\xc9\xf8\x6f\xf2\x62\x33\xbd\x89\xb2\x90\x27\x41\x3e\xd0\xb4\xe2\x4d\xf1\xba\xd1\x5a\x63\x12\x34\xf1\x62\x95\xa6\x52\x4f\x38\xdb\x6d\x34\xe1\xca\xeb\xcb\xf8\xfd\xf8\xfa\x48\x37\xc3\x41\xdf\x11\xbe\x19\x0f\x52\x9e\xad\x78\x6e\xe7\xb0\x3d\x0b\xa9\xd6\xcf\x3c\xcd\x65\x58\x66\x67\x84\xee\x93\x55\xfd\xc4\x68\xed\x3c\xd5\x03\xec\x2d\x43\x93\xee\xa5\x98\x36\x7b\x9d\x05\xba\xa3\x4e\x74\x2c\x22\xeb\x0d\xb2\xde\x20\xeb\x0d\xb2\xde\x1c\x45\xe2\xac\x9b\x49\x52\x91\xe5\xa7\x4c\x96\x70\xa9\x77\x89\x88\x3d\xeb\xce\xc8\x9f\xcc\xb7\x6c\xfd\x58\x7e\xf0\xb9\xa9\x97\xe4\x3b\x80\x16\x6f\x84\x63\x88\x25\x3e\x26\xd5\x8d\xaf\xbc\xf4\x86\x0e\x36\x2d\x4e\xdd\xd0\xd1\x74\xcd\x63\x79\xc3\x63\x79\xed\xa9\x48\xcf\x95\xf4\xe6\x4f\x6e\x5a\xb9\x0f\xce\xe9\x0c\xce\xb8\x0c\x53\x92\x1f\xca\xb2\x3f\x39\x1b\xed\x31\x0e\xb5\x0e\x18\xc4\x28\x7c\x22\x49\xc9\x49\x93\x29\x6d\x15\xf5\x91\xd2\x5a\x42\x1c\x87\xd2\xc8\x06\x4e\xc0\x31\x2e\x5d\x32\x65\x8f\x32\x78\x24\x4f\x2f\x4f\x2d\x16\x7a\xea\xfa\x66\x52\x37\x7e\xcb\x5a\xe4\x75\x07\x17\x25\x69\x79\x2b\x11\x4d\x1f\xd6\xcf\x8e\x73\x7c\x3f\xd5\x3c\x77\x8e\x38\xc8\x5f\xe5\x42\x68\xc9\x33\x37\x13\xe8\x8e\xbe\x31\x42\xb1\xd1\xdd\x48\xfa\x23\xc9\x23\x35\x7b\x58\x6e\x08\xc9\x15\x0e\x1e\x86\x57\x2c\x11\x01\x4f\x7c\x82\xfe\x5a\x5c\x8b\x5e\x18\xf7\x32\xf9\x24\xb3\x17\x7d\x2a\xc8\x28\xff\xaf\x7d\x36\xa5\xcc\x54\xb1\x0f\xb3\x40\x23\xa7\x03\x9b\x47\x26\xab\xfa\x0b\x1b\x33\x59\x15\x72\x52\xbf\x18\xbc\x91\xeb\x9e\x34\xa7\x95\xb1\x88\x25\x56\x8b\xce\x45\x77\x35\x67\xba\xca\xed\x60\xb6\x2e\xa2\xee\x78\x77\x18\xc0\xae\xd5\x91\xc4\xb3\xdf\x75\x05\x7f\x52\xea\xfb\x82\x27\xdf\xd3\xc2\x6f\xdb\x54\x9c\x2c\x32\xa9\xb5\x1b\xbd\xc4\x5a\xb9\xf8\xe9\xf3\xe7\x7f\x7c\xba\xfd\xf2\x8f\x6f\x17\x85\x4d\xc4\x88\x5f\x8a\x64\x58\xb9\x88\x43\x41\xc6\x8f\x07\x57\xaa\x16\x38\x64\x10\x19\x9b\xb0\x96\x8a\x43\x1e\x90\x3c\x5a\x3c\xa2\xf5\xcf\xb2\xee\x68\x0c\x0d\x97\x29\xf3\x65\xea\x25\x42\xd7\xb9\xa0\x49\x25\x0a\x62\x0d\x1e\xd5\x82\x9c\x09\x42\xeb\xd6\x5a\x8f\xcf\x25\x5d\xbd\x17\x26\x4f\x3c\xbc\x62\x91\x32\xa0\x97\x34\x64\x67\x35\xa9\x1b\xde\x08\x35\xbe\xb0\xbc\xcd\xd6\x42\xe5\xf4\xe3\x54\xa4\x29\x55\x2c\x37\x3d\x5b\x43\x8a\x65\x5c\x15\x75\x4f\xff\x4a\x5d\xe0\x3b\x76\x3a\x17\x3c\xd3\x5a\x7a\xc0\x33\xc1\x6a\x03\x61\x4b\x12\x91\x16\xc3\x8d\x41\x22\x96\x05\xd4\x6d\x2a\x76\x8f\x13\xa4\x61\x0a\x9c\x48\xd5\x82\xff\x01\xfc\x0f\xe0\x7f\x00\xff\x03\xf8\x1f\x34\x6d\xbe\x00\xdb\x23\xea\x11\xb0\x4e\xb0\x4e\xb0\x4e\xb0\x4e\xb0\x4e\xb0\xce\x69\xb1\x4e\xe0\x07\xe0\x07\xe0\x07\xe0\x87\xde\xf1\xc3\x0e\x88\xde\x28\x73\x2a\xc9\x63\x2e\xf5\xf0\x1b\xa4\xac\x9f\x7b\xa0\x43\xcc\x0c\xaa\x41\xe0\x56\x3a\xc9\x1e\xc5\xc2\x1c\x5b\x69\x96\x08\xbe\xa0\xee\xf1\xfd\x2b\x7b\x30\x5c\xd9\x67\x17\xea\x89\x64\x9f\x92\x7a\xc7\xee\x49\x5c\x79\xa9\x4f\xf5\x7d\xba\xf0\x79\xd3\x04\x1b\xff\xed\x08\x6b\x5f\xd0\x1f\xfb\xd1\x74\xfc\x7f\xad\xf6\x41\x9b\xb2\xab\x6f\x0f\x9b\x10\xb9\x68\xc8\xc2\x7c\xff\xab\x4c\xcf\x32\x22\x52\x6f\x63\x03\x67\x41\x7b\xdc\x57\x87\xfb\xdd\x46\x77\xbf\x9b\x4a\x3b\x26\x7e\x46\x2f\x63\xbc\x1d\xdc\x33\x4f\x77\x8b\xf7\x06\x7a\xa3\x46\xa9\x51\xed\x36\x3c\x04\x4b\x4d\x20\x58\x0a\x37\x6a\xe0\x46\x8d\x86\xca\x0c\x59\x26\x1b\xc7\x8d\x1a\xfb\xd4\xf7\xdd\xd6\xfa\x1a\x97\xdf\x81\x54\x78\x4a\x02\x2f\x09\x1a\x83\x14\x78\x5f\xb1\x03\xee\x00\xb1\x17\xae\x1f\xe9\x2a\x90\x96\x42\x55\xf9\xfa\x0f\x5c\xfa\xd1\xd4\x1a\xc8\x52\x63\x94\xa5\x10\x66\x7d\x46\x61\xd6\x88\x27\x43\x3c\x19\xe2\xc9\x10\x4f\x06\x35\x70\xdd\x2a\x1a\x64\xf0\xc6\x69\x94\x2c\xc4\x9e\xac\x8d\x3d\x19\xa6\xd2\xe5\x0c\xd0\xfd\xe4\xa5\xaa\x0a\x5a\xad\x94\xa6\xa6\x6c\x54\x6b\x54\x26\xec\x20\xb0\x73\x9c\x2c\x0f\xd5\x29\xb8\x5e\x39\x0f\xd5\xba\xef\x23\x0f\x55\x73\x9b\xc1\x29\x91\x87\xaa\x9b\x3c\x54\x7b\x1c\x6a\x8d\xd9\xa7\xa6\x44\x57\x91\x77\x0a\xe6\xc1\xf3\x43\xad\xc8\x3b\xd5\xe5\xbc\x41\xde\x29\x58\x55\xa0\x13\x35\xf4\xe3\x88\xf2\x4e\x1d\xae\x15\xf5\x95\x77\x6a\x2f\x53\x44\x63\xb6\xa9\x29\xc9\x6d\xf0\x8a\x83\xa8\x76\x16\xa2\xda\x80\x24\x22\x1c\xdc\xee\x17\x78\xc5\xb9\xa2\x27\x25\x68\xf4\x9d\x67\xea\x94\x3e\x66\x37\xa9\xc7\xc3\xb2\x5f\x59\x4f\xec\x84\x3e\xb3\x9a\x27\xb3\x03\x88\x72\x4f\x0d\xc0\xe6\xb3\x75\x31\x2f\x33\xa5\x47\x41\x46\x01\x11\x4c\xea\xb6\x33\x5c\xce\x5d\xb1\x94\xa2\x3b\x9b\x57\x75\x7d\x5e\x1e\x91\xa6\x34\x7c\x1a\x20\xa5\xb9\xcd\x00\x29\x00\x29\xdd\x80\x94\x43\x4e\xb8\x2d\x44\x65\xf5\x88\x1b\xa5\x7a\x0e\xac\x02\x5d\xfd\xfc\x74\x75\x60\x95\x2e\xe7\x0d\xb0\x0a\xac\x33\x50\x90\x7a\x55\x90\xba\x03\x2b\xbd\xaa\x48\x7d\xa1\x95\xc3\x2c\x15\x5b\x18\xcb\x44\x24\xb9\x43\xd6\x0a\xc4\x37\x88\x6f\x23\x12\xdf\x06\x24\x25\xe1\x30\x77\xbf\xf4\x7a\x98\x9f\x08\xb6\x40\xfc\xe8\x14\xb7\xf4\x20\x7c\xbc\x62\x5d\x00\x17\x13\x3a\xd4\x3f\x71\xa1\xef\xf4\x83\x5c\x4c\x13\xb0\x0b\x01\xa0\x22\x7a\x05\xd1\x2b\x80\x2e\x80\x2e\xa7\x82\x2e\x87\x1c\x72\xdb\xa8\xcb\xea\x29\x37\x4a\x65\x1d\xd8\x05\x7a\xfb\xf9\xe9\xed\xc0\x2e\x5d\xce\x1b\x60\x17\x58\x6a\xa0\x23\x35\xf4\xe3\xf0\xa0\xcb\x08\xa3\x59\x0e\x34\x55\x6c\x63\x2e\x13\x91\xe3\x10\xdd\x02\xd1\xed\x2c\x44\xb7\x01\x49\x48\x38\xc8\xdd\x2f\x88\x6e\x71\x45\x4f\x4a\xf0\x98\x4e\x74\x8b\x16\x23\xc4\x7c\x19\xa6\x22\x4b\x8f\x74\x77\x72\xe9\x6e\x49\x35\x67\xf7\xb6\x02\xed\x2f\x52\x7e\xef\xde\x2f\x24\x97\x35\xa5\xe0\x4e\x65\x24\x32\x47\x22\x73\x24\x32\x47\x22\x73\x24\x32\x3f\x89\x02\x02\x3d\xb1\xf5\x40\x9d\x52\x4f\x44\xbe\x79\xdc\xf0\x7f\xc6\x37\xfc\x1f\x34\xfd\x43\xfe\x20\xc2\x4e\xa7\x3f\x95\x78\xda\xe9\xef\x32\xc1\x73\xb6\xe0\x7f\xc8\xc5\x72\xc1\xa2\xe5\xe2\x41\x4f\x92\xb9\xdb\x4c\x53\x9b\xb6\x9f\x12\xf0\x93\xd8\xe6\x92\x0f\xd3\x94\x25\x31\xda\xa4\xdd\xa7\xcb\xec\x57\x65\x13\x2d\x7c\xeb\x7f\xfb\x57\x7e\x4a\xfd\x2b\xbf\x4f\x3f\x2a\x7a\x3f\xbf\xea\xde\x4c\x54\x33\x3b\xe9\xfc\xf0\x78\x94\x4f\xe7\x42\x12\x4a\xf9\x42\xaf\x32\x99\x49\x27\x32\x9b\x5a\x6a\xe1\x5e\x14\xb2\x8e\xfe\xb4\x69\x8b\x49\x7f\x7f\x2f\xb2\xcc\xe4\x1d\x37\x6d\x37\xa2\xb2\x69\x9b\x78\x26\xa1\x81\x47\xe5\x13\x42\x8b\x29\x0b\xb5\x8c\xa8\x18\xd3\xca\xd7\xcb\x58\x7f\xcc\x2c\x68\xfd\x2f\x6f\x72\xd9\x44\x3c\x51\x66\x72\x3a\x9c\xf2\xb7\xcb\xc9\xcf\xe7\x32\xcc\x84\x96\x50\x29\xdd\x7c\xe4\x3b\x05\xc2\xee\x2e\x15\x1d\xc2\x9c\xa7\x9e\x73\x25\xaa\xe5\xe6\xa7\x8b\xf7\x6d\xee\x69\x27\x8b\x6f\xca\xc5\x7f\x4f\x23\x62\x24\x19\xef\x51\xa9\x94\x12\xec\xea\x72\xac\x04\x64\xc7\x42\x77\x0b\x4f\x82\xe5\x82\xda\x12\xf9\xf9\x69\x4b\x9d\xa4\xdb\x66\xeb\xe3\x8a\x2e\x7a\xf7\xe3\x9c\xb9\x29\x55\xec\x4a\xb9\x76\x52\x6b\x80\x4c\x99\x58\xc4\xd9\x4b\x55\x8d\xe2\xa9\x56\xbe\xcd\xc8\x47\x6a\x63\x83\x36\x89\x72\x72\x5e\x13\xe4\x8c\xec\xe7\xe6\x65\xb0\xe4\x09\x8f\x32\x91\x0b\x29\xc5\x4e\x5f\x64\x89\x37\xf2\xa0\x49\x93\xef\xea\xee\xc4\x52\xa7\xb0\x65\x8a\x52\xfc\x9b\x59\xa5\x1f\x0e\x45\xb1\x42\x9c\x8e\x90\x4f\xb8\xeb\xdc\xe4\x7a\xa5\x9b\x97\x7f\x72\x37\x39\x39\x17\x91\xb5\x7c\x9e\xa6\x4b\xe1\x37\x0a\xcb\x5a\xae\x4c\x97\x0f\xa9\x7e\x38\xca\x5c\x0b\xfc\x12\x8f\xa5\x1e\xd4\x63\xa5\x16\x22\x93\x0b\xa1\xdb\x3e\x17\x49\x62\xb2\x95\xf3\x9a\x3e\x54\xa8\x07\x7a\x44\x4d\xf6\xff\x5c\xd6\xcf\x15\x9c\xdc\x9e\x6c\x7a\xcd\x34\x99\x16\x26\xa9\x32\x2c\x5d\xf0\x30\x14\x89\x49\xfa\x6f\x52\x63\x33\xbd\x89\xb2\x90\x27\x41\x3e\xd0\xb4\xe2\x4d\xf1\xba\xd1\x5a\x63\x12\x34\xf1\x62\x95\xa6\x52\x4f\x38\xdb\x6d\x34\xe1\xca\xeb\xcb\xb8\xfe\xf8\xfa\x48\x37\xc3\x41\xdf\x11\xbe\x19\x0f\x52\x9e\xad\x78\x6e\xe7\xb0\x3d\x0b\xa9\xd6\xcf\x3c\xcd\x65\x58\x66\x67\x84\xee\x93\x55\xfd\xc4\x68\xed\x3c\xd5\x03\xec\x2d\x43\x93\xf1\xa5\x98\x36\x7b\x9d\x05\xba\xa3\x4e\x74\x2c\x22\xf1\x0d\x12\xdf\x20\xf1\x0d\x12\xdf\x1c\x45\xe2\xac\x9b\x49\x52\x91\xe5\xa7\x4c\x96\x70\xa9\x77\x89\x88\x3d\xeb\xce\xc8\x9f\xcc\xb7\x6c\xfd\x58\x7e\xf0\xb9\xa9\x97\xe4\x3b\x80\x16\x6f\x84\xc3\x88\x25\x44\x26\xd5\x8d\xaf\xbc\xf4\x86\x0e\x36\x2d\x4e\xdd\xd0\xd1\x74\xcd\x63\x79\xc3\x63\x79\xed\xa9\x48\xcf\x95\xf4\xe6\x4f\x6e\x5a\xb9\x0f\xce\xe9\x0c\xce\xb8\x0c\x53\x92\x1f\xca\xb2\x3f\xf9\x1b\xed\x31\x0e\xb5\x0e\x18\xc4\x28\x7c\x22\x49\xc9\x49\x93\x29\x6d\x15\xf5\x91\xd2\x5a\x42\x1c\x87\xd2\xc8\x06\x4e\xc0\x31\x5e\x5d\x32\x65\x8f\x32\x78\x24\x67\x2f\x4f\x2d\x16\x7a\xea\xfa\x66\x52\x37\x7e\xcb\x5a\xe4\x75\x07\x17\x25\x69\x79\x2b\x11\x4d\x1f\xd6\xcf\x8e\x73\x7c\x3f\xd5\x9c\x77\x8e\x38\xc8\x5f\xe5\x42\x68\xc9\x33\x37\x13\xe8\x8e\xbe\x31\x42\xb1\xd1\xdd\x48\xfa\x23\xc9\x23\x35\x7b\x58\x6e\x08\xc9\x15\x0e\x1e\x86\x57\x2c\x11\x01\x4f\x7c\xe2\xfe\x5a\x5c\x8b\x5e\x18\xf7\x32\xf9\x24\xb3\x17\x7d\x2a\xc8\x28\xff\xaf\x7d\x36\xa5\xcc\x54\xb1\x0f\xb3\x40\x23\xa9\x03\x9e\x47\x32\xab\xfa\x0b\x1b\x93\x59\x15\x72\x52\xbf\x24\xbc\x19\xec\x9e\x34\xaf\x95\x31\x89\x25\x56\x8d\xce\x65\x77\x35\x67\xba\xce\x2d\x79\xb6\x2e\xa3\xee\x7d\x77\x20\xc3\xae\xd5\x92\x24\xb4\xdf\x75\x15\x7f\x52\xea\xfb\x82\x27\xdf\xd3\xc2\x7b\xdb\x54\x9d\x8c\x32\xa9\x35\x1d\xbd\xc4\x5a\xbf\xf8\xe9\xf3\xe7\x7f\x7c\xba\xfd\xf2\x8f\x6f\x17\x85\x59\xc4\x48\x60\x8a\xc4\x58\xb9\x88\x43\x41\xf6\x8f\x07\x57\xaa\x96\x39\x64\x10\x19\xb3\xb0\x16\x8c\x43\x1e\x90\x48\x5a\x3c\xa2\x55\xd0\xb2\xfa\x68\x6c\x0d\x97\x29\xf3\x65\xea\x25\x42\xd7\xb9\x00\x4a\x25\x10\x62\x6d\x1e\xd5\x82\x9c\x15\x42\xab\xd7\x5a\x95\xcf\x85\x5d\xbd\x1d\x26\x4f\x3c\xbc\x62\x91\x32\xac\x97\x94\x64\x67\x38\xa9\xdb\xde\x88\x36\xbe\xb0\xbc\xcd\xd6\x48\xe5\x54\xe4\x54\xa4\x29\x55\x2c\xb7\x3e\x5b\x5b\x8a\xc5\x5c\x15\x8d\x4f\xff\x4a\x5d\xe0\x3b\x7c\x3a\x17\x3c\xd3\x8a\x7a\xc0\x33\xc1\x6a\x03\x61\x4b\x12\x91\x96\xc4\x8d\x4d\x22\x96\x05\xd7\x6d\x2a\x76\x8f\x43\xa4\x61\x0a\x9c\x48\xdb\x82\x0b\x02\x5c\x10\xe0\x82\x00\x17\x04\xb8\x20\x34\x6d\xbe\x60\xdb\x23\xea\x11\xe0\x4e\xe0\x4e\xe0\x4e\xe0\x4e\xe0\x4e\xe0\xce\x69\xe1\x4e\x10\x08\x10\x08\x10\x08\x10\x88\xde\x09\xc4\x0e\x94\xde\x28\x73\x2a\xc9\x23\x2f\xf5\xf0\x1b\xaa\xac\x9f\x7b\xa0\x43\xcc\x0c\xaa\xa1\xe0\x56\x3a\xc9\x1e\xc5\xc2\x1c\x5b\x69\x96\x08\xbe\xa0\xee\xf1\xfd\x2b\x7b\x30\x5c\xd9\x67\x17\xea\x89\x64\x9f\x92\x7a\xc7\xee\x49\x5c\x79\xa9\x4f\xf5\x7d\xba\xf0\x79\xd3\x04\x1b\xff\x1d\x09\x6b\x5f\xd0\x1f\xfb\xd1\x74\xfc\x7f\xad\xf6\x41\x9b\xb2\xab\x6f\x0f\x1b\x12\xb9\x98\xc8\x92\xfd\xfe\x57\x99\x9e\x65\x60\xa4\xde\xc7\x86\xce\x83\xf6\xb8\xb7\x0e\xf7\xbc\x8d\xee\x9e\x37\x95\x76\x4c\xfd\x8c\x66\xc6\x78\x4b\xc0\x67\x1e\xef\x18\xf1\x0d\xf4\x6e\x8d\x72\xab\xda\x6d\x7a\x08\x9a\x9a\x40\xd0\x14\x2e\xd7\xc0\xe5\x1a\x0d\x95\x19\xb4\x60\x36\x8e\xdb\x35\xf6\xaa\xf0\xbb\xad\x15\x36\xce\xbf\x43\xa9\xf1\x94\xe4\x5e\x12\x37\x86\x29\xf7\xbe\x62\x87\x5c\x09\x62\x2f\x60\x3f\xd2\xcd\x20\x6d\x85\xab\xf2\x6d\x20\xb8\x03\xa4\xb1\x35\x10\xa9\xc6\x28\x52\x21\xea\xfa\x8c\xa2\xae\x11\x5e\x86\xf0\x32\x84\x97\x21\xbc\x0c\xda\xe0\xba\x55\x34\xc8\x58\x8e\xd3\x68\x5a\x08\x45\x59\x1b\x8a\x32\x50\xc5\xcb\xd9\xa2\xfb\x49\x55\x55\x95\xb4\xda\xe9\x4d\x4d\x19\xaa\xd6\x69\x4d\xd8\x44\x60\xef\x38\x5d\x76\xaa\x93\x60\xbe\x72\x7a\xaa\xb5\x15\x40\x7e\xaa\xe6\x36\x83\x5b\x22\x3f\x55\x37\xf9\xa9\xf6\x39\xd9\x1a\xd3\x52\x4d\x8a\xb6\x22\x23\x15\xcc\x84\xe7\x47\x5e\x91\x91\xaa\xcb\x79\x83\x8c\x54\xb0\xae\x40\x31\x6a\xea\xc8\x11\xa5\xa4\xea\x40\x35\xea\x2b\x27\xd5\x7e\x36\x89\xc6\x54\x54\x93\x92\xdd\xe0\x29\x07\x79\xed\x3c\xe4\xb5\x01\x89\x45\x38\xbd\xdd\x2f\xf0\x94\x2b\x95\x3d\x29\x71\xa3\xef\x44\x54\xa7\x75\x3b\xbb\x49\x3d\x1e\x96\x5d\xcd\x7a\x62\x29\xf4\x99\xd5\x54\x9a\x9d\x40\x95\x7b\x6a\x02\xb6\xa0\xad\x2b\x7a\x99\x29\x3d\x0e\x32\x0a\x68\x61\x53\xb7\x9d\xe1\x92\xee\x0a\xad\x14\xdd\xb9\x66\x65\xd7\xe6\xe5\x31\xd9\xca\xea\xa7\x41\x55\x9a\xdb\x0c\xaa\x02\xaa\xd2\x0d\x55\x39\xe8\x8c\xdb\x86\x57\x56\x0f\xb9\x51\xea\xe9\x60\x2c\xd0\xd9\xcf\x4f\x67\x07\x63\xe9\x72\xde\x80\xb1\xc0\x4a\x03\x15\xa9\x57\x15\xa9\x3b\xc8\xd2\xab\x92\xd4\x17\x65\x39\xd0\x5a\xb1\x0d\xb7\x4c\x44\x96\x3b\x64\xb5\x40\x80\x83\x00\x37\x22\x01\x6e\x40\x72\x12\x8e\x73\xf7\x4b\xaf\xc7\xf9\x89\xa8\x0b\x04\x90\x4e\xb1\x4b\x0f\xe2\xc7\x2b\xd6\x09\x77\x31\x21\x45\xfd\x83\x17\xfa\x4e\x5f\xe4\xc5\x34\x02\x1b\x11\x60\x2a\x82\x5a\x10\xd4\x02\xfc\x02\xfc\x72\x42\xfc\x72\xd0\x49\xb7\x95\xbf\xac\x1e\x75\xa3\x54\xda\x01\x60\xa0\xbf\x9f\x9f\xfe\x0e\x00\xd3\xe5\xbc\x01\x80\x81\xc5\x06\x8a\x52\x53\x47\x0e\x8f\xbf\x8c\x31\xc8\xe5\x50\x9b\xc5\x56\xfe\x32\x11\x59\x0e\x41\x2f\x90\xdf\xce\x43\x7e\x1b\x90\x98\x84\xd3\xdc\xfd\x82\xa0\x97\x52\xd9\x93\x12\x3f\xc6\x18\xf4\xa2\xcf\x7d\xe9\xf1\x54\x64\xfd\x62\x95\xcd\xc9\xe9\xbf\x98\x5a\xb4\xcd\x4d\x5f\x3c\xfe\x8b\x4a\x6e\xc3\xd0\xc9\x2b\x83\xa0\x2a\x6b\x5f\x38\xd3\xfc\x43\xc5\x68\x21\xfd\x50\xc3\x63\x9d\x6c\x0d\x8d\x0b\xa8\x67\x82\xd3\x90\xc6\xbf\x30\x08\x99\x75\x4e\xf9\x66\x53\x2b\x50\xbd\xc4\x82\x7d\xbb\xf8\xe9\xf3\xe7\x7f\x7c\xba\xfd\xf2\x8f\x6f\x17\x45\xc6\x57\x73\xd9\xa9\x22\x79\x58\x2e\xe2\x50\x50\x6a\xd7\x07\x57\xea\x82\xbf\x30\x19\x44\xe6\xaa\x69\x99\x1a\x83\x86\x16\x9d\x8a\x47\x78\x22\x58\x39\x33\xa6\x49\xa3\x7a\x99\x32\x5f\xa6\x5e\x22\x74\x9d\x8b\xbc\xdc\x25\xf1\xdb\xa6\x73\xad\x16\xe4\x12\xac\xf2\xcc\x64\x29\xcd\xef\x95\x95\x51\x26\x92\x27\x1e\x5e\xb1\x48\x99\x94\xf9\x94\xff\xd3\xe5\x84\xad\xa7\x15\xa6\xa4\xed\x2f\x2c\x6f\xb3\xcd\xbf\xeb\xb2\x7f\xa6\x5a\x1c\x57\x51\x71\xa3\xb5\x4d\x13\x6b\xb3\x85\x57\x2e\x57\xd6\xbf\x52\x17\xf8\x2e\x0b\xfd\x5c\xf0\x6c\x99\x08\x16\xf0\x4c\xb0\xda\x40\xd8\x92\x44\xa4\x65\x49\x93\x6e\x35\x96\x45\x7a\xfc\xa6\x62\x77\x44\x33\x0d\xc3\xdf\xcc\x69\x9a\xcc\x3f\x1d\x60\xa7\xaf\xe5\x8c\xbd\xc6\xc2\x58\xba\x7d\x3c\x15\x99\x49\x8f\x6b\x53\x2e\xeb\x0e\xaf\xe4\xea\x75\xd7\x44\x9b\x4e\x99\xb1\x7b\x19\x79\xa2\x76\xb1\xb8\x1d\x4d\x2b\x7b\x57\x13\x01\x57\x72\x21\xbb\x8a\x98\x57\xa9\x70\x5e\xa4\xbc\x37\x09\xa0\xf3\xcc\xac\x7a\x35\x14\xe9\x79\xcd\x6f\xc5\xfa\x63\xaf\xc5\x1f\x9e\x88\x8b\x24\x8c\xa6\x48\x35\x77\x1f\x79\xe3\x6e\x3e\xb6\xf5\x33\x49\xa2\x09\x3f\xf2\x7a\x55\xa4\x5e\x59\xc2\xcc\x06\xa7\x4d\xba\x29\x54\x98\x09\xea\xaf\xe9\x37\x48\x49\x11\x09\x33\x0a\x69\x9e\xc3\xd9\x5f\x0a\x4a\x2e\xfe\x47\x2c\xed\x8d\xf0\xaf\x03\x11\x89\x84\xb0\xd2\x5c\x6b\xa6\x99\x62\x73\x39\xcf\x84\x88\xd8\x42\x46\xcb\x4c\xa4\x6f\x18\x25\xe6\xf6\x54\x34\x97\x41\x7e\x91\xbc\xd1\x9c\xf2\x24\xdb\xc5\xe4\xac\xae\x22\x73\xa0\x59\xad\x8c\xb3\xff\xfd\xf6\x7f\xb1\x2f\xf6\xc2\xe7\x9f\x75\x15\x84\x6f\xf5\xde\x4c\x05\xa6\x82\xf6\x49\xd7\xa2\x4c\x7d\x17\x91\x6b\xb2\x4d\x04\x1c\x09\xe1\xd7\xf2\x07\x87\x94\x1c\x5c\x66\x46\x7f\x4b\x84\x49\xdd\x6f\xd3\xab\x6b\xf9\x25\xcf\x95\xbc\x9a\x2c\x7a\xc6\x3e\xeb\x4f\x3f\xcb\xfc\xce\x72\xfb\x15\x3d\x32\x76\x1b\x30\x96\x59\x9b\xa2\xd7\xe4\xa4\x75\x8a\x26\xd5\x30\x4f\x42\x5c\x52\x40\x75\x63\xa9\x71\x5b\xbb\x85\xca\xa5\x0a\x93\x55\x38\x9f\xdc\x94\x63\xfc\xbb\x78\x31\x37\x72\xbb\x7f\x0e\x79\xa6\xbf\x5f\x24\x4c\x7e\x7e\x94\x26\x17\xb5\x8c\x4a\x1d\xe2\x9e\x77\x13\xb9\x94\x61\x38\x65\xd7\x4e\x8e\x33\x39\x96\x13\xb1\x63\x9e\xe8\x5a\x67\xac\xa6\x88\xb6\xb7\x7b\x93\x40\x43\x5a\xb0\x9e\x90\xfa\xff\xcd\xa0\x7c\x17\x2f\x36\xe9\xb6\x2b\xf8\xdb\x45\xde\xe4\x6f\x17\x36\xa7\xf6\xfa\x24\xdc\xb4\x41\x54\xd3\x70\xbb\x33\x82\x46\x8e\x26\x80\xdd\x8d\xcb\xbd\x97\xae\xe4\xa8\xb5\xcb\xc6\x9d\x1c\xf6\x52\x73\x3b\x62\xc6\x12\x93\xb1\x85\x4c\x53\x3a\x11\x2a\xe6\xa0\x5d\x77\xde\x7c\xea\x75\x83\xc5\xdb\xed\xb6\xb7\x2c\x15\xc5\x45\xe7\x7a\x6d\x24\xd2\xcb\x8a\xec\xf8\x94\xc3\xde\xb6\xdd\xdd\xeb\xff\x62\xc7\xc9\x40\x8a\x6a\x92\x05\xf1\x24\x92\x97\xec\x51\x46\xc1\xae\xcd\xa7\xd2\xee\x6d\x6d\x46\xd3\x07\x21\x7f\x10\x61\x67\x7d\x40\xa5\x9d\xa2\x0f\x5c\xfa\x7c\xce\x16\xfc\x0f\xb9\x58\x2e\x58\xb4\x5c\x3c\x88\xc4\xb4\xde\xea\x1e\xa6\x7f\x28\xe5\x2d\xc1\xc2\x22\x63\x33\x6d\xc3\x74\x10\x4b\x5d\x0b\x73\xeb\xff\xea\xee\xa6\x8f\x6f\xfd\x6f\xff\xca\xe7\xfa\xbf\xf2\xc4\x03\x51\xd1\xdf\x79\x4e\x00\x93\xb3\xc3\x2c\x40\xda\x89\x3c\x1e\xe5\x99\x3d\x8a\xbd\x34\xe5\x0b\xbd\xb9\xc8\x4c\xba\x43\xd7\xd4\x52\x8b\x07\xa2\xd8\x2d\xf5\xa7\x4d\x5b\xf4\x30\x69\x21\x35\xcb\x8c\xb8\x66\xda\x6e\x0e\x5b\xd3\x36\xf1\x4c\xdb\x0e\x8f\xca\xe6\x54\xbd\xd1\x2d\xd4\x32\xa2\x62\x4c\x2b\x5f\x2f\x63\xfd\x31\x93\xdb\x44\xff\xcb\x9b\x7c\x77\x33\x12\x21\xa7\x0d\x3d\x7f\xbb\x9c\x31\x7e\x2e\xc3\x4c\xe8\x33\x8e\x72\xf4\x47\xbe\x13\x41\xac\xa8\x53\x91\x42\x8c\xf1\xd9\x73\x7e\x55\xd5\x33\xca\x64\x28\xb0\x09\xbb\xdd\x69\x5e\x11\x8a\x68\x2f\x7d\xe2\x32\xd4\x52\x63\x21\x9f\xeb\x26\x7b\x8f\x4a\xa5\x94\x95\x58\x97\x63\xf7\x50\x3b\x16\xba\x5b\x78\x12\x2c\x49\x6c\xe7\x91\x9f\x9f\x50\xd4\x49\xba\x6d\xb6\x3e\xae\xe8\xa2\x77\x3f\xce\x99\x9b\x52\x85\x30\x92\xcb\x37\xb5\x06\xc8\x94\x89\x45\x9c\xbd\x54\x05\x31\x27\x7d\xf3\x4c\xcb\x2c\x9b\x1a\xb4\xe9\x30\x90\xf3\xda\x51\x60\x4e\x0f\x37\x2f\x83\x25\x4f\x78\x94\x89\xdc\xa2\x5f\xa4\x18\x29\x52\xeb\x9b\x13\x85\xb2\x89\x17\x75\x77\x07\x9b\x13\xf9\x32\xc5\x64\x9a\x2e\xad\x12\x20\xa3\x20\x14\xc5\x0a\x71\x52\x46\x3e\xe1\xae\x73\xbb\xb3\xd6\x3a\xdc\x27\x77\x3b\x69\xf3\x43\x96\x74\x8c\x74\x29\xfc\xc6\xe3\x96\x74\x9d\xe5\x43\xaa\x1f\x8e\x32\xd7\x02\xbf\x44\xa6\xbf\x5a\x35\x25\x55\x0b\x91\xc9\x85\xd0\x6d\x9f\x8b\x24\x31\x29\xde\x79\x4d\xa2\x2a\x04\x0c\x3d\xa2\x22\x4a\x97\x49\xde\x7d\x3c\x17\x91\x72\xa3\xba\xe9\x35\xd3\x64\x5a\x98\x24\x0c\xb1\x74\xc1\xc3\x50\x24\xcc\x7b\x5c\x46\xdf\x4d\x3e\x71\xa6\xb7\x4d\x16\xf2\x24\xc8\x07\x9a\x56\xbc\x29\xde\x68\x64\xa9\x10\x34\xf1\x62\x95\xa6\x52\x4f\x38\xdb\x6d\x34\xe1\xca\xeb\xcb\xb8\x41\xf9\x85\x4e\x46\xdf\x11\xbe\x19\x0f\x12\xbf\xed\x01\x6f\xe7\xb0\x75\xf3\xa3\x5a\x3f\xf3\x34\x07\x3e\xb9\xde\xa9\xfb\x64\x55\xc2\x31\x72\x3f\x4f\xf5\x00\x7b\xcb\xd0\xa4\xc6\x29\xa6\xcd\xce\xbb\xbf\xee\xa4\xe6\x5d\xbf\x29\x37\xd0\x19\xf9\xf8\xb5\x6b\x4d\x5d\x76\x4b\x45\x96\x4f\xdc\x2c\xe1\x52\xef\xdc\x11\x7b\xd6\x23\x9c\x3f\x99\xcf\x02\xfd\x58\xbe\x96\x5c\xbe\x9b\x24\x4f\x3b\xa4\x77\x4c\xe1\xf0\x4c\xc9\x7e\x27\xd5\x8d\xaf\xbc\xf4\x86\xd6\x8a\xde\xa1\x6f\x68\xb6\x5f\xf3\x58\xde\xf0\x58\x5e\x7b\x2a\xd2\x2a\x5f\x7a\xf3\x27\x97\xcb\xc6\x7d\x70\x4e\xcb\x3a\xe3\x32\x4c\x69\x4b\x2a\x0b\x10\xe4\xcc\xb1\x63\x77\xd7\x1a\x7f\xc2\x7e\xff\x44\xdb\xad\x3b\x92\x52\xca\x48\x54\x1f\x1b\x2d\x6a\xc4\x71\x28\xcd\x06\xe3\x76\x49\xe3\x24\x23\x53\xf6\x28\x83\x47\xf2\x9d\xf1\xd4\x62\x21\x22\x4a\x06\x55\x1e\xb9\xca\xb7\xac\x61\x40\x77\x69\x51\x92\xde\xb4\x13\xd1\xf4\x61\xfd\xec\xf8\x46\xf4\xd3\xaa\x69\xb9\xdf\x61\xfd\x2a\x17\x42\x1f\x58\xb9\xc1\x42\x77\xed\x8d\x39\x4b\x8d\xc8\x47\x87\x06\x6d\x5a\xa9\x49\x8e\x94\x5b\x00\x72\x39\x85\x87\xe1\x15\x4b\x44\xc0\x13\x9f\x98\xa9\xde\xe5\xa3\x17\xc6\xbd\x4c\x3e\xc9\xec\x45\x9f\x6c\x32\xca\xff\x6b\xd7\xfd\x25\x33\xd5\x6b\x4a\xaa\xd6\xf7\xb6\xf9\xbb\x51\x1c\x55\x92\x53\x62\x3d\xc4\x26\x3d\x94\x7e\xee\x81\x8e\x56\x33\x78\xc6\x25\xdc\xca\x4c\xd9\xa3\x58\x98\xc3\xd4\x18\xfc\xa9\x43\x7c\xff\xca\x1e\x57\x57\xf6\xd9\x85\x7a\x22\x89\xac\xa4\x4a\xb2\x7b\x12\xa2\x5e\xea\xd3\x79\xd7\x4e\x6b\xe0\x13\x7b\xdb\xf3\xec\x5f\xff\xdc\x80\xa1\xca\xc1\x3e\x27\xe4\x50\xed\x7c\x65\x0a\x10\x55\x7a\x1e\x24\xaa\xde\xf3\xc3\x23\x51\xa5\xe1\x02\x8a\x6a\x78\x6c\x28\x2e\x72\x60\x51\x60\x51\x60\x51\x60\x51\x60\x51\x60\x51\x60\x51\x60\x51\x60\x51\x60\x51\x60\x51\x60\x51\x60\x51\x60\x51\x60\x51\x60\x51\x60\x51\x60\x51\x60\x51\x63\x18\x51\xb0\xa8\x6a\xf7\x80\x45\x0d\x9f\x45\xd1\xe7\x6e\xb4\xc0\x91\x28\x7d\xdc\x27\xe2\x49\xd2\x62\xe9\x15\x4c\x59\x79\x2f\xf2\xe5\x93\xf4\x97\x3c\x2c\x8f\x12\x77\x3a\xdd\x7b\x57\xab\x2f\xb6\x56\x33\xe6\x8b\x38\x11\x9e\x3e\xc7\x7f\x70\xd2\xf7\x25\x15\x77\x59\x98\xf2\x2a\xb6\x19\xc7\xb3\x98\x8c\xd2\x4c\xf0\xca\x31\x59\xa7\x5d\xcf\xc5\x1d\x3f\xab\x5f\xff\x55\xa6\x20\x5f\x2b\x43\x3b\x18\xf2\xb5\xe1\xde\x22\xda\x0e\x7e\xd6\x1a\xdf\x39\x62\x30\x1a\xbc\xfe\x59\xd8\xea\x82\x01\x12\x03\x12\x03\x12\x03\x12\x03\x12\x03\x12\x03\x12\x03\x12\xeb\x68\xb7\x05\x12\x03\x12\x03\x12\x03\x12\x03\x12\x03\x12\x03\x12\x03\x12\x03\x12\x03\x12\x03\x12\x1b\xe4\x88\x02\x89\x55\xbb\x07\x48\x6c\x2c\x48\xcc\xe7\x62\xa1\xf5\x87\x9e\x43\xb4\xda\x91\xb0\x0f\x54\x99\x7b\x91\x1d\x13\x80\xb9\x8f\x82\x7b\x35\x0d\x24\xb8\x17\xb8\x17\x2d\x19\xb7\x4e\x80\xbb\x80\xbb\x80\xbb\x80\xbb\x80\xbb\x80\xbb\x80\xbb\x80\xbb\x3a\xda\x6d\x81\xbb\x80\xbb\x80\xbb\x80\xbb\x80\xbb\x80\xbb\x80\xbb\x80\xbb\x80\xbb\x80\xbb\x80\xbb\x06\x39\xa2\xc0\x5d\xd5\xee\x01\xee\x1a\x0d\xee\x12\x71\xa8\x5e\xb4\x14\x39\x08\xde\xe5\x6a\x73\x54\xe0\xe5\xbe\x0a\xe2\xd5\x34\x94\x20\x5e\x20\x5e\x86\x78\xb9\x85\x02\xe4\x05\xe4\x05\xe4\x05\xe4\x05\xe4\x05\xe4\x05\xe4\x05\xe4\xd5\xd1\x6e\x0b\xe4\x05\xe4\x05\xe4\x05\xe4\x05\xe4\x05\xe4\x05\xe4\x05\xe4\x05\xe4\x05\xe4\x05\xe4\x35\xc8\x11\x05\xf2\xaa\x76\x0f\x90\xd7\x58\x90\x57\xe4\xd0\xce\xcd\xff\xb8\xbf\xff\x83\xbb\x10\x1b\xc8\x98\xa3\x60\x7e\xf3\xad\x88\x60\x63\x60\x63\x60\x63\xb8\x05\x11\x8c\x0c\x8c\x0c\x8c\x0c\x8c\x0c\x8c\x0c\x8c\x0c\x8c\x6c\xc0\x7c\x08\x8c\x0c\x8c\x0c\x8c\x0c\x8c\x0c\x8c\x0c\x8c\x0c\x8c\x6c\x8c\x8c\xcc\xb6\x5a\x57\x80\x86\x92\x2f\xb3\x47\x96\x7a\x2a\x16\x57\x2c\x5d\x7a\x8f\x7a\xe4\x49\x5f\x11\x7c\x61\xac\xbd\x71\xa2\xa8\x97\x9b\x9a\x16\xf3\xec\xb1\xb9\x65\xce\x32\x5a\xfd\x59\xcf\x3f\x2d\xe9\xdb\xda\x1f\xf1\xbc\x03\x1c\x04\x1c\x04\x1c\x1c\xc7\x88\x02\x0e\x56\xbb\x07\x70\x70\x7a\x70\xd0\xfc\xfe\x9f\x23\x30\xc2\x32\x18\x8c\x72\xb1\x47\xcd\xd9\x77\x19\xf9\x7d\x01\xc2\xab\x42\xdf\x21\x9d\xce\xca\xc6\x5a\x65\x2a\x14\xb9\xcb\x8a\x01\xa0\x54\x76\x07\x78\x11\x68\x11\x68\x71\x14\x68\x11\x58\x11\x58\x11\x58\x11\x58\x11\x58\x11\x58\x11\x58\x11\x58\x11\x58\x11\x58\x11\x58\x11\x58\x11\x58\x11\x58\x11\x58\x11\x58\x71\x1c\x58\x91\x78\xa2\xed\x81\x6d\x36\x87\x36\xe8\x70\x28\xd4\x10\xb8\x14\xb8\x14\xb8\x14\xb8\x74\xd0\x23\x0a\x5c\x5a\xed\x1e\xe0\xd2\x91\xe3\x52\x24\xd1\x2b\xd0\x66\x25\x9d\x1e\xa8\x26\xa8\xe6\x28\xa8\x26\xd2\xe7\x01\x68\x02\x68\x02\x68\x02\x68\x02\x68\x02\x68\x02\x68\x02\x68\x02\x68\x02\x68\x02\x68\x02\x68\x02\x68\x02\x68\x02\x68\x0e\x1e\x68\x02\xfc\x01\xfc\x01\xfc\x01\xfc\x0d\x7a\x44\x01\xfe\xaa\xdd\x03\xf0\x37\x19\xf0\x37\x90\xf0\xc8\x6e\xe1\xdf\x91\xa3\x22\x9b\x10\x09\xb0\x21\xb0\x61\xad\xd4\x01\x61\x43\x20\x43\x20\x43\x20\xc3\xfc\x47\x20\x43\x20\x43\x20\x43\x20\x43\x20\x43\x20\x43\x20\x43\x20\x43\x20\x43\x20\x43\x20\x43\x20\x43\x20\xc3\x41\x22\xc3\x72\x0c\xe4\x1a\x53\x03\x42\x1f\x9b\xdb\x0c\x02\x0a\x02\x0a\x02\x0a\x02\x0a\x02\x0a\x02\x7a\xe6\x04\x54\xc4\xa1\x7a\xd1\x4a\xc2\x20\x62\x1f\x5d\x6d\x4e\x14\xfc\xe8\xbe\x8f\xe8\x47\x60\xcc\xd1\x60\xcc\x23\x44\x3f\xba\x85\x01\x96\x09\x96\x09\x96\x09\x96\x09\x96\x09\x96\x09\x96\x09\x96\xd9\xd1\x6e\x0b\x96\x09\x96\x09\x96\x09\x96\x09\x96\x09\x96\x09\x96\x79\x76\x2c\x13\xf0\x0f\xf0\x0f\xf0\x0f\xf0\x6f\xd0\x23\x0a\xf8\x57\xed\x1e\xc0\xbf\xe9\xc0\xbf\xa1\xc4\x3f\x76\x0b\x00\x8f\x1d\x00\xd9\x44\x49\x80\x0e\x81\x0e\x6b\xa5\x0e\x08\x1d\x02\x1b\x02\x1b\x02\x1b\xba\x1f\x81\x0d\x81\x0d\x81\x0d\x81\x0d\x81\x0d\x81\x0d\x81\x0d\x81\x0d\x81\x0d\x81\x0d\x81\x0d\x81\x0d\x81\x0d\x07\x89\x0d\x2b\x21\x90\x6b\x6c\x0d\x88\x81\x6c\x6e\x33\x30\x28\x30\x28\x30\x28\x30\x28\x30\x28\x30\xe8\x79\x63\xd0\x44\x10\xf0\x1a\x48\xfe\xc7\x2f\xa6\x36\x27\x4b\x00\x59\x7c\x1f\x31\x90\x00\x99\xa3\x01\x99\xfd\xc7\x40\x16\x0b\x03\x30\x13\x30\x13\x30\x13\x30\x13\x30\x13\x30\x13\x30\x13\x30\xb3\xa3\xdd\x16\x30\x13\x30\x13\x30\x13\x30\x13\x30\x13\x30\x13\x30\xf3\xec\x60\x26\xe0\x1f\xe0\x1f\xe0\x1f\xe0\xdf\xa0\x47\x14\xf0\xaf\xda\x3d\x80\x7f\xd3\x81\x7f\x03\x89\x81\xec\x18\x00\x1e\x39\x06\xb2\x91\x92\x00\x1d\x02\x1d\xd6\x4a\x1d\x10\x3a\x04\x36\x04\x36\x04\x36\x74\x3f\x02\x1b\x02\x1b\x02\x1b\x02\x1b\x02\x1b\x02\x1b\x02\x1b\x02\x1b\x02\x1b\x02\x1b\x02\x1b\x02\x1b\x02\x1b\x0e\x12\x1b\x96\x63\x20\xd7\xd9\x1a\x10\x03\xd9\xdc\x66\x60\x50\x60\x50\x60\x50\x60\x50\x60\x50\x60\xd0\xf3\xc6\xa0\x69\xc6\x33\x31\x5f\x86\x03\x09\x82\xbc\xb7\xd5\x39\x59\x14\x64\xa9\x02\x08\x83\x04\xcb\x1c\x0d\xcb\xec\x3f\x0c\xb2\xb4\x32\x00\x34\x01\x34\x01\x34\x01\x34\x01\x34\x01\x34\x01\x34\x01\x34\x3b\xda\x6d\x01\x34\x01\x34\x01\x34\x01\x34\x01\x34\x01\x34\x01\x34\xcf\x0e\x68\x02\x00\x02\x00\x02\x00\x02\x00\x0e\x7a\x44\x01\x00\xab\xdd\x03\x00\x38\x21\x00\x38\x90\x40\xc8\xae\x21\xe0\x91\x23\x21\x9b\x41\x09\xf0\x21\xf0\x61\xad\xd4\x01\xe1\x43\xa0\x43\xa0\x43\xa0\xc3\xe2\x47\xa0\x43\xa0\x43\xa0\x43\xa0\x43\xa0\x43\xa0\x43\xa0\x43\xa0\x43\xa0\x43\xa0\x43\xa0\x43\xa0\x43\xa0\xc3\x41\xa2\xc3\x72\x2c\xe4\x5a\x63\x03\x82\x21\x9b\xdb\x0c\x16\x0a\x16\x0a\x16\x0a\x16\x0a\x16\x0a\x16\x7a\x26\x2c\x14\x99\x1f\x7f\x7b\x5b\xcd\xf7\xf8\x8b\x4a\x6e\xc3\xd0\x41\xcc\x14\xe4\x12\xe4\x72\x14\xe4\x12\xf9\x1f\x01\x2f\x01\x2f\x01\x2f\x01\x2f\x01\x2f\x01\x2f\x01\x2f\x01\x2f\x01\x2f\x01\x2f\x01\x2f\x01\x2f\x01\x2f\x01\x2f\x01\x2f\x87\x0f\x2f\x81\xbc\x80\xbc\x80\xbc\xc6\x31\xa2\x40\x5e\xd5\xee\x01\xf2\x1a\x0b\xf2\xc2\x45\x9f\x71\xfa\xdb\xdb\xda\xf5\x9e\xa0\x5e\xf5\xc1\x04\xf5\x02\xf5\x42\xcc\x1e\xb0\x17\xb0\x17\xb0\x17\xb0\x17\xb0\x17\xb0\x17\xb0\xd7\x10\x91\x0f\xb0\x17\xb0\x17\xb0\x17\xb0\x17\xb0\x17\xb0\x17\xb0\x17\xb0\x57\xb5\x35\xc0\x5e\xc0\x5e\xc0\x5e\xc0\x5e\xc0\x5e\x67\x88\xbd\x96\xfa\x38\xc9\x6c\xf5\x09\x27\x48\x75\xb3\x17\xf2\xea\x1b\xf5\xb4\xc1\x69\x81\xc8\x98\x8c\xe6\x2a\x59\xb8\xf9\xcd\x99\xb1\xdf\xaf\x27\x5e\x81\xc8\x6e\x2b\xdd\x70\x7b\xf7\xf1\x6f\xf5\x77\x4e\x05\xb8\x46\xcb\x9d\x5c\x27\x8e\x9d\x3a\x55\xa6\x46\xe9\xbd\x57\xe5\x6f\xb7\x59\x55\x4f\x6f\xc7\xbd\xb0\x2a\xda\xa3\xd9\x33\x77\x59\x55\xbf\xbd\xbd\xbd\xfb\xf8\xa5\xe9\x4d\xac\xad\xdd\xd7\x56\xde\x91\x94\x77\x73\x52\x4b\xac\x8a\x78\xf7\x59\x65\x64\xcd\x4f\xc4\x93\x14\xcf\x15\xef\x8d\x3d\x18\xeb\xef\x5a\xd9\xb2\x2a\xe6\x15\xf9\x69\x78\x3c\xcb\x55\xe8\x8a\x11\xb9\x0c\x35\x1f\x04\x8b\xf5\xb1\x9f\x6a\x6d\x8c\xdd\x46\x4c\x46\x06\xe1\xa8\x84\x2d\x23\x47\x81\x7c\xe6\x27\x2f\x5f\x96\x11\xf3\x65\x22\xb4\x70\x25\x1c\x5a\xd0\xfa\x2a\x19\x04\x2c\x5b\xc9\x67\xa5\xb5\x64\xb3\xf9\x32\x21\xeb\x51\x9c\x28\x4f\xa4\xa4\xb9\x5b\x59\xce\x6a\x47\x33\xf6\x1b\x7d\x91\xac\x72\xa4\x6a\xff\xc0\xae\xd9\x6d\x18\xfe\x40\x7a\xb9\x9f\xbc\xb0\x64\x19\xb1\x34\xe3\x5a\x2a\xca\x8d\x11\xb6\x38\xe1\xef\x28\xad\x98\x76\x1c\x53\xe6\x25\x23\xd2\x27\x1e\xf1\x40\x24\xc6\x1c\x6a\xae\x7f\x49\x53\xe5\x49\xd2\xef\x9d\xe1\x91\x93\xc5\x58\x25\x4c\x4f\x96\xec\xc5\x19\x3c\x16\xfc\xbb\xee\xb7\xec\x51\xa4\x22\x97\x0f\xb5\xac\x9c\x23\x38\xa2\x50\x0f\x82\x91\x44\x4c\x46\x46\x95\xb0\xb7\xef\xfe\xaa\x9f\x4d\xb8\x47\xac\x30\x54\x51\x60\xa4\x41\x32\x04\x7a\x2a\xca\xb8\x8c\x8c\x26\x4e\x5b\x65\xf1\x2c\xf1\x13\x4b\x32\xd9\xc3\x8b\x53\x6a\x02\x15\xf2\x28\x98\xa9\x24\xb8\x89\xbf\x07\x37\xcb\x48\x7a\xca\x17\x37\x7f\xfa\x98\xde\xe9\x52\xf6\xb2\xce\xdb\x8e\x39\xe6\x80\x8c\xc5\x42\x91\x0b\xc3\x85\xe7\x85\x4a\x3b\x76\xea\x32\xa6\x41\xc6\xd9\x57\xbd\x11\x7d\xa1\x8d\x68\xc3\x49\x69\x1e\xaf\x1f\x96\x6b\xde\x5d\xb3\x87\xb1\xfa\xb6\x6e\xfa\xf4\x41\xf9\x2f\xf5\x13\x29\xef\xd4\xa6\xdf\x36\x5c\x65\x74\xd0\x59\x36\xab\xed\xd5\x4f\x6f\x67\xe5\xf6\xad\x3f\xbf\x1a\xbb\x1b\xf2\x42\xa7\x7d\x7c\x55\xad\xf5\x76\x19\xe1\xbd\x31\x7d\x0f\xaf\xea\xef\xb6\x56\xfd\xd6\xf3\x44\x3c\xc0\xba\x8f\x51\x34\xdb\xee\x7d\x47\x5b\x6b\x17\x8e\x77\x4d\x92\x5e\xb3\x27\x5e\xf3\xb6\xd9\xc2\x13\x6f\x07\x01\xf3\x41\x64\xfc\xdc\x75\x39\xea\x03\x28\x74\xe5\x5f\xa0\xd0\xb9\xb1\xaa\xef\x1a\x34\x5b\x0e\xd3\xea\xcc\xa2\x83\x6a\x07\xd5\x0e\xaa\x1d\x54\xbb\x51\xab\x76\xb4\x95\x4d\x5c\xbf\xa3\x36\x42\xc9\xeb\x5f\xc9\xdb\xa5\xa3\x87\xa8\xe9\x1d\x50\xff\x61\xa8\x7b\x7b\x37\x60\xb4\xd2\xdb\x88\x15\xbf\x5a\x53\xb6\x69\x7f\xba\xe3\x41\xc6\x5d\x2f\x00\x8c\xe7\xbf\x00\x8c\x5f\x54\xd6\x47\x7b\xdd\x6e\x65\x49\x9d\x25\x16\x77\xbd\x00\x2a\x5e\xf9\x1f\x8c\x28\xc5\x58\x95\xa7\xc9\x4e\x50\xbc\x69\x89\xad\x49\x68\x1c\x2a\x8f\x87\xe9\x92\x7c\xaa\xb9\xe7\x89\x34\x85\x71\x05\xc6\x15\x18\x57\x8e\x37\x20\x48\x5e\x03\xab\x92\xb3\x2a\xfd\xaa\xb7\xe3\x7b\xb3\x1d\xdf\xd2\x76\xbc\x83\x89\xa9\x24\x53\x14\xf9\xd5\xdb\x94\x38\x62\x9b\x53\x71\xd4\x3d\xbd\x9d\xad\x6d\xeb\x7a\x49\xa0\x71\x74\x20\x79\xf5\xd6\xdf\x03\xb1\x40\x75\xdc\x8c\x93\x19\xa2\x3a\x6d\xc7\x08\x05\xe1\xe3\x5a\xa2\xea\x72\x75\xb3\x21\xaa\xc5\x8e\xbb\xbf\x3b\x42\x93\x68\x9f\x8a\x70\x0e\x11\x1e\x22\x3c\x44\x78\xf0\xd1\xc1\x48\xb2\xf7\x22\x9c\x77\x20\xc8\xb6\x28\x66\x2a\xd2\xeb\xba\xa6\x42\x78\x1d\x48\x77\x0f\x51\x76\x3d\xb8\x15\xc3\x10\x5d\x0f\x6c\x06\x24\xd7\x4e\x24\xd7\xed\x9b\x6d\x6f\x82\x6b\xb2\x0c\x05\xe4\x56\xc8\xad\x90\x5b\x21\xb7\x0e\x45\x6e\xfd\xa2\xf7\xa4\x83\xc5\xd6\x35\xa5\x4c\x50\x6a\x2d\xb7\x14\x42\xeb\x30\x7a\x7b\xe0\x32\xeb\x5e\x8d\x18\x9c\xc8\xba\x47\x2b\x20\xb1\x76\x2d\xb1\x36\xef\xb3\x1d\x0b\xac\xb0\xb2\x42\x5a\x85\xb4\x0a\x69\x75\x30\xd2\x6a\x07\x16\xd6\x33\xb1\xae\xc2\xb2\x7a\x34\x21\x75\xfc\x56\xd5\x09\x58\x54\x61\x4d\x3d\xb5\x6c\x7a\x3c\x4b\xea\xb9\x5e\x48\x50\x3a\xc6\x70\x1f\x01\x5c\xe9\x59\xdb\x9d\x63\xc7\xeb\x08\xd6\xae\x38\x38\xd5\x43\x57\x84\xae\x38\x40\x5d\x11\x4e\xf5\x50\x92\x3b\x77\xaa\xa7\x3d\xff\x2c\x3d\xeb\x4d\x88\x3b\xdc\xeb\x8f\xaa\x47\xef\xdd\xe9\x03\xd4\xa8\xbb\x6a\xcb\x20\x74\xeb\x6e\x1a\x33\x56\x59\x79\x88\xaa\xf6\x1e\x2e\xf7\x87\x5e\x04\x91\xab\x00\x70\xbe\x87\xa8\x0f\x51\x1f\x58\x68\x6b\x6b\x8e\x29\xf1\x76\xe4\x7c\x4f\x3b\xdc\xf9\x78\xe0\x9b\x73\x1d\x6e\xf8\xc7\x17\x72\x27\xe1\x8b\xdf\x51\x53\x06\x24\xe2\x9e\x89\x57\xfe\x18\x24\xdc\xdd\x5d\xf3\x7b\x10\x70\xe1\xa4\x0f\xf9\x16\xf2\x2d\xe4\xdb\x21\xc9\xb7\x07\x38\xe9\xd7\xc5\xdb\x69\x7b\xea\xaf\x1c\xe9\x70\xd7\x3f\xba\x70\x3b\x5a\x9f\xfd\x6e\x5a\x32\x4c\xd1\x76\xc2\xde\xfb\x23\x93\x6c\xdb\xb9\xf0\x77\x26\xd8\xc2\x6a\x0b\xa9\x16\x52\x2d\xa4\xda\xc1\x48\xb5\x5d\x59\x6c\xcf\xc9\x5a\x0b\x4b\xed\x71\x85\xd9\x89\x58\x69\xa7\x62\xa1\x85\x75\x76\x10\x32\x6c\x8f\x96\x59\x95\x7a\x3c\x94\x51\x30\x6e\xf7\xfe\x3d\x53\x4f\xe4\x8d\x47\xe2\x89\xfc\x17\x24\x9e\xb8\x28\x2d\x8a\xd6\x3e\xfc\x6e\x15\x9d\x63\xb6\x89\xbc\xf1\xc8\x35\x51\xf9\x1f\x02\x64\x8a\xb1\x2a\x26\xc9\x2e\x99\x26\xca\xab\x8a\x6a\xac\x15\xda\x30\x56\x7e\xfe\x9b\x51\x32\x76\x5f\x6d\x6d\x75\xa7\x50\xa6\x99\xd6\xb3\x9f\x79\xe6\x3d\x32\xe3\xf5\x9f\xea\x03\x46\x9f\xcc\xec\xff\x73\x55\xba\x53\xfe\xad\xab\xd2\x86\xf5\xa2\xcb\xab\x2c\x98\x35\x45\xfc\xa2\x92\xdb\x30\x74\xbe\xe0\x83\x58\x4b\x6b\x5f\xd0\x1f\xfb\x31\xcd\x12\xc1\x17\xff\x45\x1d\xb5\x73\xd9\xd5\xb7\x87\xbd\x68\x67\xa5\x79\xa9\x57\xea\x9a\x11\x9c\xf4\xaa\xdd\x2e\x23\xeb\x89\xde\x91\x8c\xec\xce\xe2\x46\xd1\x78\xfb\x1a\x6c\x11\x09\x5b\x58\x5f\x76\xb7\xc9\xf2\x30\x54\xcf\xbf\xeb\x89\xfb\x93\x52\xdf\x17\x3c\xf9\x9e\xe6\x56\xcf\xd4\xee\x1b\xe2\x49\x44\xfa\x3f\xc8\x04\xf8\x12\x0b\xf6\xed\xe2\xa7\xcf\x9f\xff\xf1\xe9\xf6\xcb\x3f\xbe\x5d\xcc\xd8\xbd\x48\x74\x05\x8d\x25\xd0\x57\x64\xb3\x95\x8b\x38\x14\x0b\x11\x65\xec\xc1\x95\xba\xe0\x2f\x4c\x06\x91\x4a\x04\xcb\x1e\x65\xca\xe6\x21\x0f\xc8\xd8\x57\x3c\xc2\x13\xc1\x52\xfd\x16\xcf\xc8\xe4\x95\x52\xd1\x97\x29\xf3\x65\xea\x25\x82\x14\x0d\xf6\x3e\x94\x54\x9f\x92\x89\x98\xa7\x7a\x9b\xac\x15\x94\x88\x6c\x99\x44\xc2\xd7\x85\xf1\xe8\x85\xa5\xb1\xf0\xe4\x5c\x7a\x4c\x46\x99\x48\x9e\x78\x78\xc5\x22\x95\x50\xb5\xb2\x47\xf1\x92\x17\x52\x7c\xd7\x18\x72\x53\x11\xf9\xf4\x7e\xde\x66\xd3\x1f\xcc\x5f\x26\x32\x0a\x18\x67\xa9\x48\x53\xaa\xd8\xc7\xb9\x69\x98\x4c\x4d\xa5\x4c\xf7\x5d\xd9\xd6\x4a\x11\xfa\xfa\x27\xd3\x05\xbe\x7d\x5c\xb0\xb9\xe0\xd9\x32\x11\x2c\xe0\x99\x60\xb5\x81\xb0\x25\x89\x48\x4b\x34\x3e\xd9\xb0\x63\x69\x2a\xb7\xae\xd8\x1d\x8d\x81\x0d\xc3\xdf\x6c\x19\x7c\x50\x2a\x14\x3c\xea\xda\xd0\xf9\xf5\x51\x90\x9d\x57\x46\x4b\xc1\x14\xfd\x73\x3e\xb0\x0f\x7a\x1c\x32\xf6\xfc\x28\x22\x3d\x96\x89\x14\x4f\xba\xc3\x17\x8a\xc6\x36\x5d\x86\x59\xca\xe6\x89\x5a\x94\x46\x6c\xc6\xee\x65\xe4\xd9\xf9\x65\xec\xce\x32\xcd\x47\xd3\x5a\x8b\xaf\x98\x67\x27\x90\x1e\x79\x32\x34\x2f\x53\x33\xec\xae\x22\xe6\x55\x2a\x9c\xb3\x38\x11\x4f\x52\x2d\x53\x46\xdd\x98\xf3\x04\x5a\x0d\xd2\x37\xd9\x17\x43\xfb\x5b\xb1\xfe\xd8\x6b\xf1\x87\x27\xe2\xcc\x84\xd1\x39\x2b\xb8\x9a\xbb\x8f\xbc\xa1\xb9\x5f\x9a\x6d\xba\x3a\x89\xa0\xc0\x3c\x5e\xaf\x8a\xd4\x2b\x4b\x98\xd9\xe0\x88\x87\x9b\x42\x76\x66\x0b\x7f\xe5\x35\xfd\x06\x99\xd5\x45\xc2\x0c\x34\x79\x7e\x14\xc4\x3a\xfc\xa5\x60\x99\x62\xe2\x8f\x58\x9a\x13\x9e\xbd\x0e\x44\x24\x12\x1e\x86\x2f\x6c\x2e\x9f\xe8\xd7\xb9\x9c\x67\x42\x44\x6c\x21\xa3\x65\x26\xd2\x37\x5a\x96\xa0\xba\xcd\x65\xb0\xb4\xaf\x19\x5b\x3f\x53\x51\xa9\x2d\x57\x2b\xab\xc8\x9c\x7f\x96\x23\x70\xf6\xbf\xdf\xfe\x2f\x96\x0b\x88\x3f\xeb\x2a\x08\xdf\xb2\x99\x4c\x05\xa6\x82\xf6\x49\xd7\x22\x4a\x6d\xee\x9a\x6c\xc6\x90\x45\x42\xf8\xa9\x79\x8a\x00\x51\x94\x31\xbd\x75\x5f\xe9\x0e\x23\xe2\x90\x88\x34\xe3\x09\xed\x26\x32\xa1\xdf\xa8\x60\xb5\xcc\xaa\x23\x4e\xeb\x68\xc6\x3e\xeb\x4f\x3f\xcb\x54\x5c\x95\xbf\xa2\x47\xc6\x6e\x03\x8a\xea\x46\xe5\xd8\x5d\xb2\x40\x23\x54\x43\x3d\x3c\x42\x3e\x95\x91\x89\x6e\x2c\x35\x6e\x6b\xb7\x50\xb9\x54\x61\x3d\xd3\xdd\xe4\x8e\xc4\x1f\x19\xfb\x2e\x5e\xae\xd8\xc3\x32\x2b\xfe\x39\xe4\x99\xfe\x7e\x1a\xf1\x38\x7d\x54\xd9\x15\x7b\x7e\x94\xde\x23\x6d\x06\x51\xa9\x43\xdc\xf3\x6e\x22\xdb\xea\x9b\x25\x74\xed\xe4\x42\xda\xc0\xf5\xce\x69\x6c\xe7\xfe\x95\x65\x72\xfa\x2f\xa5\xd7\x4f\x28\x32\xbd\x9d\xce\x33\x61\xe6\xf4\x5c\x26\x69\x56\xef\x0c\xc3\xbe\x64\xe4\x85\x4b\xdf\xec\x59\x06\xa4\x19\xf9\x87\xb8\x8d\x9e\x90\xfa\xff\xcd\xa0\x7c\x17\x2f\x66\xc3\x2e\x0a\xfe\x76\x91\x37\xf9\xdb\xc5\xec\x5b\xf4\x2d\xfa\x5a\xd9\xeb\xf4\x2a\x48\x97\x71\xac\x12\x42\x53\x7a\x83\x30\x27\x95\x4c\x69\x13\x2a\xce\x08\x1a\x39\x9a\x00\x76\x37\x2e\xf7\x9e\xe9\x04\x9a\x83\xbf\x99\x13\xd6\x2e\x1b\x77\x72\x3c\xbc\x94\x47\xcc\xd0\xc2\x8c\x2d\x64\x9a\xd2\x89\x50\x41\x96\xbb\xee\xbc\xf9\xd4\x3b\x26\x56\xba\x65\xa9\x08\x05\x11\xbc\x4c\xd1\xda\x48\xa4\x67\x56\x82\x51\x15\xe6\x45\xdb\xf3\x59\x61\xfa\x40\x26\xa6\xfb\xd3\x19\xfb\x20\xe6\x9c\x66\x8e\xde\x3e\x9e\x44\xf2\x92\x3d\x6a\x59\x72\x1f\xb2\x76\x6f\x6b\x33\x9a\x3e\x08\xf9\x83\x08\x3b\xeb\x03\x2a\xed\x14\x7d\x10\xca\x85\xcc\x0c\xe8\x5d\xf0\x3f\xe4\x62\xb9\x60\xd1\x72\xf1\x20\x12\xd3\x7a\xab\xaa\x98\xfe\xd1\x5d\x41\xa7\x98\xdd\x9e\x3c\x1e\x86\xb4\x0d\xd3\x41\x2c\x75\x2d\x98\xf8\x83\x36\xdd\x55\xd1\xc9\xf4\xeb\xbf\xf2\xb9\xfe\x2f\xbb\x86\xed\x61\x41\xe5\x2d\x44\xc6\x7d\x9e\x71\xfd\x35\x6e\x17\x20\xed\x44\x1e\x8f\xf4\x4e\xb2\x4c\xcb\x7b\x69\xca\x17\x7a\x73\x91\x99\x74\x87\xae\xa9\xa5\x16\x0f\x44\xb1\x5b\xea\x4f\x9b\xb6\xe8\x61\xd2\x42\x6a\x96\x19\x71\xcd\xb4\xdd\x1c\xb6\xa6\x6d\xe2\x99\xb6\x1d\x1e\x95\x91\xbf\xde\xe8\x16\x6a\x19\x51\x31\xa6\x95\xaf\x97\xb1\xfe\xd8\xbf\x45\xa2\xcc\xbf\xbc\xc9\x77\x37\x23\x11\x72\xda\xd0\xf3\xb7\xf3\xb9\xa3\x77\xb6\xb9\x0c\x33\xa1\xcf\x38\x7d\xee\xe8\x6d\xc4\xab\xca\xb0\x15\x29\xc4\x38\x48\x78\x22\xf7\x41\xa8\x9e\x51\xba\x06\xbe\x16\x31\x16\x32\x12\xee\x34\xaf\x08\x45\xb4\x97\xe6\x76\xb0\x42\x3e\xd7\x4d\xf6\x1e\x95\x4a\x05\xed\x62\x99\xca\xf7\x50\x3b\x16\xba\x5b\x78\x12\x2c\x49\x6c\xe7\x74\x28\x51\x83\xa8\x93\x74\xdb\x6c\x7d\x2a\x26\x36\xd3\xbb\x1f\xe7\xcc\x4d\xa9\x42\x18\xc9\xe5\x9b\x5a\x03\x64\xca\xc4\x22\xce\x5e\xaa\x82\x98\x93\xbe\x79\xa6\x65\x96\x4d\x0d\xda\x74\x18\xc8\x79\xed\x28\x30\xa7\x87\x9b\x97\xc1\x92\x27\x3c\xca\x44\xee\x75\x42\x60\xdd\x8e\x94\x5b\xf6\x74\xa2\x2c\xc9\x0f\xc4\xd5\xdd\x1d\x6c\x4e\xe4\xcb\x14\x93\x69\xba\xb4\x4a\x80\x8c\x82\x50\x14\x2b\xc4\x49\x19\xf9\x84\xbb\xce\x3d\x25\xb4\xd6\xe1\x3e\xb9\xdb\x49\x9b\x1f\xb2\xa4\x63\xa4\x4b\xe1\x37\x1e\xb7\xa4\xeb\x2c\x1f\x52\xfd\x70\x94\xb9\x16\xf8\x4e\xad\xb3\x3d\xa8\xc7\x4a\x2d\x44\x26\x17\x42\xb7\x7d\x2e\x12\x3d\x43\xf5\x2a\xac\x49\x54\x85\x80\xa1\x47\x54\x44\xe9\x32\xc9\xbb\x8f\xe7\x22\x52\xee\x06\x62\x7a\xcd\x34\x99\x16\x26\x09\x43\x2c\x5d\xf0\x30\x14\x09\xf3\x1e\x97\xd1\xf7\xd4\x20\x0e\xbd\x6d\xb2\x90\x27\x41\x3e\xd0\xb4\xe2\x4d\xf1\x46\x23\x4b\x85\xa0\x89\x17\xab\x34\x95\x7a\xc2\xd9\x6e\xa3\x09\x57\x5e\x5f\xcb\xd8\x27\x2f\x15\xa7\x93\xd1\x77\x84\x6f\xc6\x83\xc4\x6f\x7b\xc0\xdb\x39\x6c\x2f\xc0\xa0\x5a\x3f\xf3\x34\x77\x4a\xca\xf5\x4e\xdd\x27\xab\x12\x8e\x91\xfb\x79\xaa\x07\xd8\x5b\x86\xf4\x45\x59\x4c\x9b\x9d\x77\x7f\xdd\x49\xcd\xbb\xbe\xd6\x50\x57\x3c\x4e\xce\xc7\xab\xa4\x5d\x6b\xea\xb2\x5b\x2a\xb2\x7c\xe2\x66\x09\x97\x7a\xe7\x8e\xd8\xb3\x1e\xe1\xfc\xc9\x7c\x16\xe8\xc7\xf2\xb5\xa4\xf7\x9e\x07\xbb\x3d\xf8\x24\x1d\xea\x1d\x53\x38\x87\xa2\x92\xb9\x4f\xaa\x1b\x5f\x79\xe9\x0d\xad\x15\xbd\x43\xdf\xd0\x6c\xbf\xe6\xb1\xbc\xe1\xb1\xbc\xf6\x54\xa4\x55\xbe\xf4\xe6\x4f\xf9\x07\xaf\xdd\x07\xe7\xb4\xac\x33\x2e\xc3\x94\xb6\xa4\xb2\x00\xb1\x8c\x52\x91\xed\xd8\xdd\xb5\xc6\x9f\xb0\xdf\x3f\xd1\x76\xeb\x8e\xa4\x94\x3d\xaa\xe7\x15\xb9\x5a\x8b\x1a\x71\x1c\x4a\xb3\xc1\xb8\x5d\x52\xaf\x64\x9a\x7b\x8f\x32\x78\x0c\x5f\x48\xb5\x5d\x2c\x44\xa4\x77\xb2\xac\x3c\x72\x95\x6f\x59\xc3\x80\xee\xd2\xa2\x24\xbd\x69\x27\xa2\xe9\xc3\xfa\xd9\xf1\x8d\xe8\xa7\x55\x4b\x74\xbf\xc3\xfa\x55\x2e\x84\x3e\xb0\x72\x83\x85\xee\xda\x1b\x73\x96\x1a\x91\x8f\x0e\x0d\xda\xb4\x48\x73\xd3\x9b\xad\x03\xd6\x74\xcc\xf3\x30\xbc\x62\x89\x08\x78\xe2\x93\x97\x9f\xde\xe5\xa3\x17\xc6\xbd\x4c\x3e\xc9\xec\x45\x9f\x6c\x32\xca\xff\x6b\xd7\xfd\x25\x33\xd5\xbb\x17\x9e\x8a\xfc\x35\x36\xaa\x9e\xb6\xcd\xdf\x8d\xe2\xa8\x92\xdc\xaf\x51\x0f\x31\xf5\x00\x3d\xf7\x40\x47\xab\xa5\x86\x74\x44\x5a\x99\x29\x7b\x14\x0b\x73\x98\x1a\x3e\x40\x1d\xe2\xfb\x57\xf6\xb8\xba\xb2\xcf\x2e\xd4\x13\x49\x64\x25\x55\x92\xdd\x93\x10\xf5\x52\x9f\xce\xbb\x76\x5a\x03\xce\xd8\xdb\x9e\x67\xff\xfa\xe7\x76\xd4\xb5\xe6\xda\xb7\x36\x04\xcc\x48\x3e\xdd\x42\x30\x53\x26\xf3\x54\xa8\x15\x2d\x3b\x61\x77\x67\x5f\xa6\x98\x0a\xfd\x7a\xef\x8a\x2c\xae\x3d\x6a\x51\x70\xbf\x1e\x86\xbd\xf0\xdc\x0f\xd4\xf8\xcf\xd4\xa7\x69\x4b\x2e\xb4\x19\x08\xc1\xf0\x0b\xc3\x2f\x0c\xbf\x30\xfc\x4e\xcd\xf0\xbb\xe1\x58\xde\x66\xfc\xdd\x2c\xe2\x6d\x3e\x9e\x77\xda\x7b\x11\x87\xd3\x7a\xa0\x1a\x62\x71\x8e\x36\x4c\x47\xb3\xd6\xb7\xeb\x8a\xf5\x16\xfb\xa3\xf5\xc8\xd7\xb2\xda\x21\xb5\xca\x4f\xda\x00\x7b\x10\x73\xe3\x56\xe0\x2c\x3b\x85\x28\x61\x77\x2f\x9a\x3a\xa5\x38\xa4\x48\x45\xd7\x91\x08\x38\x4d\x50\xab\x38\x94\xe3\x95\x8c\x95\xd7\x2d\x0d\x2b\x44\xca\xc5\x42\xf8\x92\x67\x22\x7c\x29\x78\x7f\x71\xe4\xca\xf0\xca\x2a\x06\xd4\xe9\x2c\x48\xb8\x47\xab\x46\x2a\xdf\x09\x04\xc5\xa1\x4d\xce\x14\xf9\x2c\x5d\xa6\xba\x92\xe5\xe1\xe2\xfa\xcd\xbc\x41\xf6\x23\x73\xb3\x07\xe6\x45\xcc\x4c\x3d\x17\x82\x47\x8d\x75\xdc\x63\x98\xa9\xce\x77\x54\xe5\x26\x65\x6b\x8b\xba\x35\x94\xe9\xbf\x0b\xa8\x69\xd7\x2f\xeb\x61\xcd\xd1\xa6\x3f\xb0\x0d\xb0\x0d\xb0\x0d\xb0\x0d\xb0\x4d\x6f\xd8\xa6\xe5\x59\xb0\x82\x6e\x8e\x77\x2c\x7e\x10\x71\x22\xb4\x50\xe2\xff\xc0\xe2\x50\xf0\x54\xb8\x2d\xe8\x2e\x51\x31\x0f\x48\x3a\xba\x53\xa1\xf4\x5e\x2a\x4e\x82\xf9\xa4\xf3\x5d\x01\x7a\xda\xbd\x9d\xfd\x65\xf6\xff\xb3\xf7\x6f\xbd\x6d\x1b\x5d\xdf\x3f\x7e\x9e\x57\x31\x70\x0f\x94\xa0\x96\xfc\x38\x78\x80\x5e\x48\xf0\x3f\x70\xb3\xb9\x91\xde\xcd\x3f\x46\x52\xb4\x27\x2e\xee\x7b\x44\x8e\x68\x3e\xa6\x38\x04\x49\xd9\x97\x0b\x5c\xef\xfd\x87\x59\x33\xc3\x9d\x28\x89\x92\x49\x89\xa4\xbe\x47\x75\x23\xee\x66\xbf\xd6\xfa\xac\x0d\xfb\xa1\xf7\x33\x2d\xba\x44\x22\x54\x8b\x25\x3f\x53\x05\x93\x71\x74\xcf\x43\xeb\xb4\x18\xaf\xc4\xd5\x82\x07\x56\x57\xbe\xbb\xd0\x3f\xdf\x5d\xb0\x85\x1f\xf2\xc0\xff\xc7\x1e\x24\x73\xc1\xb8\x4b\xb6\x7c\x79\xa5\xed\x9c\x6e\xae\x86\xe9\xc7\x4f\x92\xfc\x26\xad\x9f\xce\xd8\x27\x9f\x36\xc7\xc2\xa7\xcb\x78\xbd\x6d\x39\xb9\x49\xb5\x7a\x4c\x3a\x8a\x4c\xef\x0f\x19\x50\xdd\x82\x8f\xb6\xed\x1b\x45\x9e\x3a\xab\x69\xbb\x8a\x19\x35\x5d\x2d\xd8\x7b\xf9\xc4\x3c\x1e\xcf\xb9\x57\xb2\x5d\x66\x4a\x8d\x88\x17\x32\x5e\xaa\x31\xa9\xed\xaf\x6f\x95\x16\x6d\xee\x2e\x12\x7a\xad\xc4\x1a\xe9\xbe\xf5\x95\x34\xe9\xf8\x6e\xae\x0a\x93\xac\x40\xc6\x89\x6c\x8c\x13\x0a\x5c\xa3\x5f\xad\x34\x30\x2b\x0c\xa6\x3d\x47\x32\x74\x92\x39\xe0\x96\x5f\x36\x63\x3a\x1e\x94\xce\xa6\xa2\x66\x37\xd1\x6d\x98\xb0\xa9\x99\x80\xe5\x09\x9a\xbc\x67\x93\x5f\xb9\xf3\xe0\xc5\x72\x15\xba\xea\x2a\x72\x66\xa5\x8b\x2a\x1d\xa7\x45\x48\x23\x1f\x97\x1f\x62\x5b\x30\xcf\x9e\xf4\x9e\x4d\x3e\xcb\x58\x14\x1e\xcb\x1c\x9e\x38\xdc\x55\xad\x37\xfd\xa3\x7d\x9d\xe9\x79\x89\x56\x3d\xd7\x1e\xb8\xc8\x9e\x71\xc8\x84\x8c\xaa\xd3\xfd\x34\x12\xe7\x88\x19\x6b\xb3\x71\xd8\xc6\x59\x4f\x35\x0a\x20\xae\x9d\x8d\xef\x3a\x75\x3d\x9e\x6d\xe3\x94\xfc\xb5\x59\x67\x6d\x61\xb0\x2f\x95\x7f\x6a\x41\x1e\xc2\x2e\xf7\xc4\x74\x3f\x52\x9e\xae\x9a\xf2\xb9\x31\xc6\x6d\xe9\x23\x39\x17\x97\x06\x18\xc3\x35\xbc\x20\xd0\x4e\xe0\x37\xc2\xd4\xce\x27\x4c\xad\xd9\xe9\xb3\x2b\x54\xed\x78\x6a\x1a\x7c\x17\xe0\xbb\x00\xdf\x05\xf8\x2e\xc0\x77\xa1\x6e\xf3\x05\x14\x1f\x50\x8f\x80\x93\x82\x93\x82\x93\x82\x93\x82\x93\x82\x93\x8e\x8b\x93\x02\x5d\x00\x5d\x00\x5d\x00\x5d\x74\x8e\x2e\xf6\xc0\xfb\x3d\x0d\x24\x6b\xd6\x85\xeb\xc1\x64\x2f\xb5\xb8\xf5\x0a\xfa\x6c\xbc\x01\xf9\x01\x91\x1f\xf0\x7c\xf3\x03\x1a\x51\x52\xd7\x03\x09\x5d\xa6\x86\x89\x25\x8e\x8c\xc4\x25\x4b\x56\xce\xbd\xda\x97\x68\xdf\x17\x7c\xa9\x37\xad\x28\x96\x24\xba\xd6\xc5\xaa\x46\x3c\xbd\xaf\x0f\x55\xcd\x02\x45\xcb\x3f\x6f\xa9\x97\x80\x12\x1c\xec\xd8\x25\x38\xf6\x87\x85\x59\x19\x8e\x8e\x71\x61\xff\xaa\x71\x34\xd8\x44\x5b\x09\xa4\x45\x30\x57\x71\x06\xf4\x36\x98\xeb\x4c\x4b\x2c\xed\x61\x45\xaf\x2b\xb3\xf4\xc2\xe1\xe9\x95\x80\x39\x0a\xb9\xaf\xf7\xd5\x6c\x5a\x6d\xc3\xa9\x4a\xd9\xb4\xd8\x88\x11\x0a\xdf\x2d\x16\xb0\x39\x82\xf0\xfd\x8a\xb5\x9c\x2f\x45\x5f\xf4\x9f\x23\xa5\x4d\x39\x44\xe8\xab\x49\x95\xd2\x23\xa1\x6f\x20\x09\x52\x20\xd7\x15\x07\xb9\xb7\x72\x1d\x42\xd2\xcf\x28\x24\x1d\xb1\x77\x88\xbd\x43\xec\x1d\x62\xef\xa0\x92\x6e\x5a\x45\xbd\x0c\x74\x39\x8d\x22\x87\x38\x9d\x5d\x71\x3a\xc3\x51\xe2\x32\xe3\x7a\xeb\xd1\x39\xb1\xe0\x6e\x45\x06\xdb\x5f\xe1\x52\x0f\x79\x81\xba\x85\xdd\x07\x76\x98\x03\x16\xb1\x27\x06\x64\x86\x79\x09\x03\x25\x4b\xbd\x51\x72\x1b\x7d\x4c\x13\xd8\xd9\x17\xce\x09\xc0\x3b\x38\xc0\x4b\x6e\x24\x07\x95\xe5\x9d\xd2\xbd\x3f\x6f\xdf\xcd\x97\x22\xf6\x44\xa3\x2b\x93\x34\xe6\xa9\xf0\x7c\x67\xda\xfc\x1e\xf5\xf7\xb3\xb9\x92\xce\x8d\x26\xa7\x64\xc4\xe3\xd4\xa7\x28\x2f\xed\xf2\xf4\xe2\x13\x93\xde\xdf\x57\x0b\x65\x57\x58\x7a\x8b\x44\x7a\x5b\x76\x4d\x62\xb0\x5b\x8e\xdc\x6e\x79\x3e\x3c\xba\x12\x50\x61\x17\x97\x0e\xfa\x51\x9b\x51\x1e\x48\xfe\x7a\xc3\x46\xf5\x86\xac\x36\x3a\xd2\x97\x07\x74\x67\x28\xc3\xa9\xbe\x9b\xae\x20\xc3\x69\xc2\x5e\xff\x96\xc8\xf0\x56\xc7\x53\x7f\x55\x5b\xa2\xf9\xfb\x87\xdd\x28\xf3\x7f\x7c\xd3\x27\x50\xde\x7c\xde\x7c\x96\xb1\x43\x96\x65\x4f\xd2\xe0\x4b\x76\x77\xb1\x50\xff\x76\x77\xc1\x6e\x4a\xbd\x49\xee\xda\xda\x0c\xbc\x4a\xf2\xd8\xd1\x29\x77\x68\x00\x28\x22\x37\xf0\x1d\x63\xd8\x12\x81\x9b\x30\xf9\x64\xc6\x56\x47\xac\x46\x42\x46\x81\x98\x31\xfd\x4e\x0a\xc4\xb7\x73\x8a\x9c\xa6\x6b\x07\x22\x7b\xfd\x21\xdd\xab\x5e\x34\x5e\x17\x57\x28\x5c\xc3\x56\xb8\xa2\x8a\xf7\xf1\x60\x54\xae\x55\xeb\x46\x93\x28\xe0\xce\xcb\xa5\x40\xf3\x9c\x73\x93\x03\xe1\x9e\x08\x71\xf0\x6c\xc5\xc1\x1e\x49\x5d\x10\x0e\xb2\x5f\xe0\x9e\x08\x01\x47\x0b\x0a\x83\x11\x6f\x5e\xb1\x6e\x1c\xfb\xae\x12\x4d\x07\x0b\xfe\x7d\xdd\x50\x27\xfd\x1e\x7b\xec\x1d\x97\x3f\x19\x02\x8a\x7d\x0f\x7b\xc6\x0b\xf7\x0c\x50\x28\x50\xa8\xfd\xda\x0c\x0a\x05\x0a\xd5\x0e\x85\x6a\xef\x04\x3d\x80\x47\xd5\x1c\xa1\x83\xb4\x46\x80\x4a\xc1\x0c\x71\x7e\x66\x08\x50\xa9\x36\xe7\x0d\xa8\x14\x0c\x4f\x50\xc0\x4e\xa3\x80\x81\x4a\x55\xa8\x54\x9b\x76\x95\x03\xf8\xd4\x58\xe4\x42\x50\x2a\x88\x87\x67\x2b\x1e\xf6\x48\x0a\x83\xb0\x90\xfd\x02\x4a\x05\x81\x67\x74\x94\x8a\xb2\x12\x6e\x84\x52\x9d\x62\x28\x93\xcb\x3a\x74\xfd\x47\xdf\x5d\xf1\xa0\x98\x17\x93\x67\xd9\xeb\x37\xf4\xc3\xac\x10\x4d\xfd\x2e\x8b\xc3\x9e\xd0\x33\x27\x79\x55\x93\x52\x99\x8a\x4c\xbe\x62\x7e\x98\xa4\x82\x97\x4c\xaa\x55\xe9\xeb\x69\xcd\x26\xb7\x25\x19\xe2\x67\x19\xdf\x04\x41\x26\x9c\xf5\x02\x6d\x6d\xbc\xe1\xbc\x52\x5a\x6e\x31\x30\x52\x46\xd6\x4f\x8f\x22\x3c\xe7\x64\x96\x34\x86\xe7\x93\xd1\x12\xa5\xc4\x46\x5c\x4a\x6c\x37\x14\xdb\x55\x46\x6c\xab\x65\xad\x05\xe0\x87\xe2\x61\x28\x1e\x86\xe2\x61\x28\x1e\x36\xb6\xe2\x61\xbb\x77\xde\xda\xc2\x61\x1d\xbb\x57\x1c\xad\x5c\xd8\xee\xe6\x6f\x2e\x15\xd6\xe7\x3e\xd8\xa7\x40\xd8\xee\x3e\xd8\x5c\x1c\xac\xe3\x3e\x40\x49\x30\x94\x04\x43\x49\x30\x94\x04\x43\x49\xb0\xce\x4a\x82\x35\xd8\xfd\xd7\xca\x81\x6d\x4d\xdc\x78\x46\xde\x95\xcd\x5a\x33\xe2\x92\x66\xbb\xbb\x7b\x5b\x39\xb3\xe3\xf6\x3b\x8a\x98\x75\x32\xa2\xeb\x05\xcc\x3a\x1e\xd6\x93\x96\x2d\xdb\xdd\x3d\x5b\x4a\x96\x75\xbd\x6d\xf6\xb5\x50\xd9\xee\x4e\xab\xa1\x19\x07\xdb\xf3\xcc\x5f\x7f\x37\x45\x68\x7b\x86\x7b\x81\xac\xed\xe3\xd5\xf4\x7b\x85\x4f\x80\xa9\x81\xa9\x31\x30\x35\x30\x35\x30\x35\x30\x35\x30\x35\x30\x35\x30\x35\x30\x35\x30\xb5\xf2\x76\xdb\x43\x9e\x04\xa6\x06\xa6\x06\xa6\x06\xa6\x06\xa6\x06\xa6\x06\xa6\x36\x44\xa6\x86\x54\x2d\x80\x89\x80\x89\x80\x89\xbd\x1e\x51\xc0\xc4\x72\xf7\x00\x26\x8e\x1b\x26\xd6\x14\x85\xee\x88\x29\x16\x41\x62\x68\x45\x20\xb9\x60\x0f\x7e\xb8\x31\xc5\x41\x2b\x40\xf1\x32\x57\x80\x48\xc9\x33\xc2\xb2\xd2\xa1\x72\xcd\x6e\x52\xb2\x08\x14\x9e\xdd\x32\x8e\x04\x8a\x04\x8a\x1c\x12\x8a\x04\x86\x04\x86\x04\x86\x04\x86\x04\x86\x04\x86\x04\x86\x04\x86\x04\x86\x04\x86\x04\x86\x04\x86\x04\x86\x04\x86\x04\x86\x04\x86\x1c\x1e\x86\x44\x39\x0c\x30\x56\x30\xd6\xe1\x10\x39\x30\x56\x30\x56\x30\x56\x30\xd6\x4a\xa7\x9d\x82\xb1\xbe\x9d\x8b\x94\x5f\x5f\x1d\x04\x4b\x4f\x92\xe0\xb8\x32\xda\x9e\x48\xcb\x8a\x8b\x1e\xd8\x2d\x84\xd3\x13\x69\x91\x6f\xea\x0e\xb8\xb9\xfd\xf2\xbd\xee\x5e\xe4\x76\xde\x13\x33\x16\x3a\x92\xc2\x54\xc7\xc4\x1a\xf5\x54\x29\xdc\xfc\xaa\xf8\x01\xbb\x17\xd9\x49\xa2\x9f\xb5\xed\x2b\x36\xda\xb3\x55\xae\x76\x38\x29\x6c\x59\x3e\xea\x79\xeb\xeb\x67\xc3\x73\x90\x09\xb8\x3a\x3a\xbd\x59\xc3\xe5\xdc\xe6\x7a\x14\x37\x25\x38\x1f\xff\x4a\xde\xed\x3a\xd0\xdf\x00\xe6\x6a\x63\xe0\x3e\x00\xf7\x01\xb8\x0f\xc0\x7d\x00\xee\x03\x70\x1f\x80\xfb\x00\xdc\x07\x76\xef\xb6\x70\x1f\x80\xfb\x00\xdc\x07\xe0\x3e\x00\xf7\x01\xb8\x0f\xc0\x7d\xe0\xec\xdc\x07\x00\x9a\x01\x9a\x01\x9a\x87\x31\xa2\x00\xcd\xe5\xee\x01\x68\x1e\x16\x68\x7e\x41\x62\x60\x2d\xfe\xb4\x4b\xc7\xf4\x33\x99\x23\x03\xa5\x6d\x99\x59\xbb\x3f\x14\xd3\x8f\x59\xc7\x62\x1f\xb2\xe7\xee\x17\x45\xdb\x69\x91\xf2\x4e\xb8\xef\x47\xea\x81\x6f\xd4\xb1\x49\x2b\x75\xc8\x61\x02\x86\x09\x18\x26\x60\x98\x80\xc7\x66\x02\x6e\x56\xc1\xbe\xd6\x0c\xfc\xc2\xea\xf5\xcd\xf7\xde\xbf\x54\xc7\x19\xe5\xf7\x92\x52\xe7\x3b\x6a\x46\xe9\x79\x50\x6a\x5b\x11\xb7\xce\x05\x8b\x54\x6f\x25\x4a\x4f\x64\x37\x21\xf3\x43\xbd\xb3\xc8\x98\xad\xc2\x6c\x73\x72\x99\x1b\x3f\x7f\x5f\x85\xcc\xf5\x63\x75\x38\x3e\x8a\x6c\xc6\xab\xed\x93\x4c\x15\x66\xc9\xdb\xb9\x61\x3a\x98\x2d\x56\x31\xad\xb2\x28\x96\x8e\x48\xc8\xa6\x60\xa4\x4c\x33\xcb\x66\xec\x4f\x7a\x23\x8d\x16\xcd\x9d\x77\x6c\xca\x6e\x82\xe0\x1d\x59\x0c\x5c\xb5\x4b\xaf\x42\x35\xf0\x4a\x5e\xb3\x53\xd2\x3c\x6e\xbd\x74\x7c\x83\x81\xd2\x6d\x39\xcd\x30\x1d\xcd\x6e\xdf\xac\x2b\x36\xdb\xee\x8f\xd6\x23\x7f\x14\x15\x10\x5f\x29\xff\xa4\x17\xb0\xb9\x58\x68\x07\x83\xcc\xc6\x93\x8b\x12\x66\xf7\xa2\xa9\xb3\x12\xfa\x70\x98\x2b\xd1\x3b\x9c\x86\xc2\xe3\x34\x41\x8d\x0a\xa1\xb4\x1d\x7b\x82\x6a\x7b\x6f\xb6\x34\x8c\x24\xe9\x2f\x97\xc2\xf5\x79\x2a\x82\xe7\x9c\xfc\xe7\x47\xae\x1f\x5c\x1a\x15\x81\x3a\x9d\x79\x31\x77\x68\xd5\xf8\xd2\xcd\x04\x82\xfc\xd0\x26\xb7\x0a\x3b\x4b\x57\x89\xfa\xc8\xe2\x70\x71\x75\xa7\x6d\x90\x79\xc9\x42\xef\x81\xf6\x11\x33\xfd\x9d\x4b\xc1\xc3\xda\x6f\x3c\x60\x98\xe9\x9b\x6f\xe9\x93\xeb\xd4\xae\x1d\x8a\x57\x5f\xa6\xff\x3e\xc8\xa6\x59\xbf\x6c\xc6\x36\x47\x9b\xfe\x00\x38\x00\x38\x00\x38\x00\x38\x00\x38\x9d\x01\x9c\x86\x67\xc1\x1a\xc4\x39\xde\xb1\xf8\xb1\x90\x5f\x2e\x0a\x04\x4f\x44\xb6\x05\xdd\xc6\x32\xe2\x1e\x49\x47\xb7\x32\xf0\x9d\xe7\x92\xbb\xa0\x9d\x74\x79\x82\x3a\x35\xed\xae\x67\xbf\xcc\xd8\x0f\xbd\x9f\x69\xd1\x25\x12\xa1\x5a\x2c\xf9\x99\x2a\x98\x8c\xa3\x7b\x1e\x5a\xf7\xc5\x78\x25\xae\x16\x3c\xb0\xba\xf2\xdd\x85\xfe\xf9\xee\x82\x2d\xfc\x90\x07\xfe\x3f\xf6\x20\x99\x0b\xc6\x5d\xb2\xea\xcb\x2b\x6d\xf1\x74\x73\x35\x4c\x3f\x7e\x92\xe4\x37\x69\xfd\x74\xc6\x3e\xf9\xb4\x39\x16\x3e\x5d\xc6\xeb\x6d\xcb\x19\x4e\xaa\xd5\x63\xd2\x51\x64\x7a\x7f\xc8\x80\xea\x16\x7c\xb4\x6d\xdf\x28\xf2\xd4\xd9\x4f\xdb\x55\xcc\xa8\xe9\x6a\xc1\xde\xcb\x27\xe6\xf1\x78\xce\xbd\x92\x01\x33\x53\x6a\x44\xbc\x90\xf1\x52\x8d\x49\x6d\x7f\x7d\xab\xb4\x68\x73\x77\x91\xd0\x6b\x25\xd6\x48\xf7\xad\xaf\xa4\x49\xc7\x77\x73\x55\x98\x64\x05\x32\x4e\x64\x63\xac\x0e\x6b\x73\x92\x5a\x69\x60\x56\x18\x4c\x7b\x8e\x64\x10\x25\x73\xc5\x2d\xbf\x6c\xc6\x6e\x1c\x47\x44\x29\x9d\x4d\x45\xcd\x6e\xa2\xdb\x30\x61\x53\x33\x01\xcb\x13\x34\x79\xcf\x26\xbf\x72\xe7\xc1\x8b\xe5\x2a\x74\xd5\x55\xe4\xd6\x4a\x17\x55\x3a\x4e\x8b\x90\x46\x3e\x2e\x3f\xc4\xb6\x60\x9e\x3d\xe9\x3d\x9b\x7c\x96\xb1\x28\x3c\x96\x39\x3c\x71\xb8\xab\x5a\x6f\xfa\x47\x7b\x3d\xd3\xf3\x12\xad\x7a\xae\x3d\x70\x91\x3d\xe3\x90\x09\x19\x55\xa7\xfb\x69\x24\xce\x11\xd3\xd6\x66\xe3\xb0\x8d\xb8\x9e\x6a\x14\xc0\x5e\x3b\x1b\xdf\x75\xfe\x7a\x3c\xdb\xc6\x29\x49\x6c\xb3\xce\xda\x42\x63\x5f\x2a\xff\xd4\xd2\x3c\x84\x67\xee\x89\xe9\x7e\xa4\x3c\x5d\x35\xe5\x73\xa3\x8d\xe5\xd2\xe7\x72\x2e\x33\x0d\x35\xae\x6b\xa0\xc1\xa2\x9d\xb0\x70\xc4\xaf\x9d\x4f\xfc\x5a\xb3\xc3\x68\x57\x0c\xdb\xf1\xb4\x36\xb8\x32\xc0\x95\x01\xae\x0c\x70\x65\x80\x2b\x43\xdd\xe6\x0b\x46\x3e\xa0\x1e\x01\x36\x05\x36\x05\x36\x05\x36\x05\x36\x05\x36\x1d\x17\x36\x05\xc9\x00\xc9\x00\xc9\x00\xc9\xe8\x9c\x64\xec\x41\xfb\x7b\x1a\x61\xd6\xac\x0b\xd7\xa3\xcc\x5e\x6a\x71\xeb\x15\x03\xda\x78\x03\xf2\x08\x22\x8f\x20\xf2\x08\x22\x7b\xff\x30\x92\x2a\x98\xbf\xfe\xce\x07\x59\x26\x2d\x53\x45\xad\xd5\x31\x7e\x00\x40\xd4\xb7\x1e\x09\x21\x1e\x16\x4e\xbb\x65\x8a\x1d\x6d\x63\x6d\x25\xe0\x16\x41\x5f\xc5\x69\xd0\xdb\xa0\x2f\xb2\xf4\x7c\xe5\x21\xf7\x44\xac\x6d\x96\x7a\x73\x4d\x12\xe9\xf8\xa4\x84\x67\xd6\x41\x4e\x46\x5e\x19\x33\x11\xa6\x4a\x2a\xb6\x56\x89\x25\x7f\x50\xbd\x98\xde\x8b\x44\x58\xd1\xb2\x18\xda\x64\x43\xa0\x48\xb4\x26\x4b\xa0\x8c\xd9\xf5\xdb\x7f\xa9\x6b\x63\xee\x10\xfa\x0b\x64\xe8\x69\x41\x92\xac\x75\x8e\x9a\x94\x7e\xa8\x77\x34\xb2\x86\xe5\xd7\x12\x0e\x31\x60\x92\xcd\x9f\x33\x5d\xc9\x93\x01\x0f\xbd\x99\x8c\xbd\xab\xe8\xc1\xbb\x5a\x85\xbe\x23\x5d\x71\xf5\xd3\x97\xe4\x56\x3d\xe5\x60\xf3\xba\xe9\x9c\x36\x87\xa7\x57\x92\xe7\x78\x04\xc2\xa6\xc2\xe0\xdb\x06\xc2\xe0\x07\x6d\x3b\xec\x7b\x43\xde\xee\x6c\x88\x76\x76\xee\x7b\x4b\xc6\x2a\x9f\x93\xf8\x33\x2c\xf9\xfc\x15\xeb\x22\xf5\x8a\xbe\xe8\x3f\x47\xca\xc0\x72\x88\x70\xb8\x29\xeb\x4a\x8f\x84\xc3\x81\xe4\x5a\x81\xe8\x57\x1c\xe4\xde\x8a\x7e\x88\x6e\x3f\xa3\xe8\x76\x84\xf1\x21\x8c\x0f\x61\x7c\x08\xe3\x83\xd6\xba\x69\x15\xf5\x32\x66\xe6\x34\x1a\x1e\x42\x7e\xec\x85\x5b\x43\x7e\x06\xa6\xd8\x65\x36\xf9\xd6\x03\x7d\x62\xc1\xdd\x8a\x34\xb6\xbf\xfe\xa5\x1e\xf2\x52\xed\x0b\x9b\x11\xec\x35\x2f\x5a\xd8\x9e\x18\x9a\xb9\xe6\x25\x38\x15\x95\xde\xc1\x8a\xfb\xc4\x8a\xc9\x41\xe5\xa0\x62\xc1\x53\xba\xf7\xe7\xed\x9b\xfb\x52\xc4\x9e\x68\x74\x65\x92\xc6\x3c\x15\x9e\xef\x4c\x9b\xdf\xa3\xfe\x7e\x36\x57\xd2\x31\xd2\xe4\xe4\x8c\x78\x9c\xfa\x14\x3f\xa6\x9d\xa9\x5e\x7c\x8a\xd2\xfb\x7b\x6d\xc4\xec\x8a\x70\x6f\x11\x5a\x6f\xcb\x9e\x4f\x0c\xa6\xcd\x91\x9b\x36\xcf\x87\x6a\x57\xe2\x35\xec\xe2\xd2\x31\x45\x6a\x47\xca\xe3\xd4\x5f\x6f\xd8\xad\xde\x90\x61\x47\x07\x12\xf3\x80\xee\x0c\x65\x38\xd5\x77\xd3\x15\x64\x5b\x4d\xd8\xeb\xdf\x12\x19\xde\xea\x70\xed\xaf\x6a\x5f\x34\x7f\xff\xb0\xbb\x65\xfe\x8f\x6f\xfa\x84\xdb\x9b\xcf\x9b\xcf\x32\x76\xc8\xf8\xec\x49\x1a\x7c\xc9\xee\x2e\x16\xea\xdf\xee\x2e\xd8\x4d\xa9\x37\xc9\x1b\x5c\x5b\x8a\x57\x49\x1e\x9a\x3a\xe5\x0e\x0d\x00\x05\xfc\x06\xbe\x63\x6c\x5f\x22\x70\x13\x26\x9f\xcc\xd8\xea\x80\xd8\x48\xc8\x28\x10\x33\xa6\xdf\x49\x71\xfe\x76\x4e\x91\x4f\x76\xed\x40\x64\xaf\x3f\xa4\x7b\xd5\x8b\xc6\xeb\x41\x0b\x25\xac\xae\x0d\x43\x54\xc2\xa2\x8a\x9b\xf3\xb0\xd4\xb0\x55\xeb\xc6\x95\x28\xe0\xce\xcb\x25\x43\xf3\x9c\xb3\x94\x0d\xe1\xfd\x08\x39\xb1\x6e\x98\xce\x47\x4e\xec\x91\x38\x06\xa9\x21\xfb\x05\xde\x8f\x10\x7f\xd6\xc5\x9f\xd5\xd0\x6c\xd0\xaf\x58\x87\x2e\x83\x57\x89\x46\x8e\x05\xcf\xc1\x6e\x00\x96\x7e\x8f\x3d\x0f\x4f\x80\xb2\x0c\x5b\xc5\xae\x88\xcd\x24\x1f\x2d\x00\x2d\x00\x2d\x00\x2d\x00\xad\xba\x0b\x87\x00\xb4\xda\x3b\x55\x0f\x45\x5b\x35\xc7\xea\x20\x8d\x18\x00\x5c\x30\x5c\x9c\x9f\xe1\x02\x80\xab\xcd\x79\x03\xc0\x05\x53\x15\x94\xb2\x53\x2b\x65\x00\x5c\x75\x80\xab\x4d\xfb\xcb\xa1\xa8\x6b\x2c\xb2\x22\x80\x17\xe4\xc6\xba\x61\x3a\x1f\xb9\xb1\x47\xe2\x19\xa4\x88\xec\x17\x00\x2f\x88\x43\xe7\x03\xbc\x28\xe3\xe2\x46\xbe\xd5\x29\xd1\x32\x79\xba\x43\xd7\x7f\xf4\xdd\x15\x0f\x8a\x39\x3f\x79\x96\x99\x7f\x43\x8f\xcc\x0a\xd1\xde\xef\xb2\x38\xf1\x09\x3d\x73\x92\x57\x6c\x29\x95\xe0\xc8\x44\x30\xe6\x87\x49\x2a\x78\xc9\x12\x5b\x15\xd0\x9e\xea\x4d\x79\x5b\x12\x3d\x7e\x96\xf1\x4d\x10\x64\xf2\x5b\x2f\x28\xd9\xc6\x1b\xce\x2b\x67\xe7\x16\xbb\x24\xa5\x9c\xfd\xf4\x28\xc2\xb3\x4f\xd4\x49\x03\x79\x66\xd9\x3a\x51\x35\x6d\xc4\x55\xd3\x76\xa3\xb5\x5d\x15\xd3\xb6\x9a\xe6\x5a\xc0\x86\xa8\x93\x86\x3a\x69\xa8\x93\x86\x3a\x69\x63\xab\x93\xb6\x7b\xe7\xad\xad\x91\xd6\xb1\x93\xc6\xd1\x2a\xa3\xed\x6e\xfe\xe6\xaa\x68\x7d\xee\x83\x7d\x6a\xa1\xed\xee\x83\xcd\x75\xd0\x3a\xee\x03\x54\x3f\x43\xf5\x33\x54\x3f\x43\xf5\x33\x54\x3f\xeb\xac\xfa\x59\x83\xdd\x7f\xad\xf2\xd9\xd6\x3c\x93\x67\xe4\xa3\xd9\xac\x35\x23\xae\xde\xb6\xbb\xbb\xb7\x55\x6e\x3b\x6e\xbf\xa3\x5e\x5b\x27\x23\xba\x5e\xab\xad\xe3\x61\x3d\x69\x85\xb6\xdd\xdd\xb3\xa5\x3a\x5b\xd7\xdb\x66\x5f\x6b\xb2\xed\xee\xb4\x1a\xae\x71\xb0\x3d\xcf\xfc\xf5\xf7\x5e\x58\x6d\xcf\x68\x32\xd0\xb6\xbd\x9d\xa1\x7e\xaf\xe0\x0a\x70\x36\x70\x36\x06\xce\x06\xce\x06\xce\x06\xce\x06\xce\x06\xce\x06\xce\x06\xce\x06\xce\x06\xce\x06\xce\x06\xce\x06\xce\x06\xce\x06\xce\x06\xce\x06\xce\xd6\xa9\xc1\x18\x49\x60\x00\x18\x01\x18\x01\x18\x7b\x3d\xa2\x00\x8c\xe5\xee\x01\x60\x3c\x03\xc0\x58\x53\xe1\xba\x23\xce\x58\x84\x8b\xa1\x95\x83\xe4\x82\x3d\xf8\xe1\xc6\x6c\x09\xad\x40\xc6\xcb\x5c\x0b\x22\x4d\xcf\x48\xcc\x4a\x91\xca\xd5\xbb\x49\xc9\x2c\x50\x78\x76\x17\x88\x12\x78\x12\x78\x72\x70\x78\x12\x68\x12\x68\x12\x68\x92\x01\x4d\x02\x4d\x02\x4d\x02\x4d\x02\x4d\x02\x4d\x02\x4d\x02\x4d\x02\x4d\x02\x4d\x02\x4d\x02\x4d\x02\x4d\x0e\x13\x4d\xa2\xf8\x06\xb8\x2b\xb8\xeb\x70\x28\x1d\xb8\x2b\xb8\x2b\xb8\x2b\xb8\x6b\xa5\xd3\x4e\xc6\x5d\xdf\x5e\x1d\xc4\x4e\x4f\x92\x30\xb9\x32\xda\x9e\x48\xcb\x8a\x8b\x1e\xd8\x2d\xc0\xd3\x13\xe9\x1a\xee\x7c\x7b\x73\xfb\xe5\x7b\xdd\xbd\xc8\x15\xbd\x27\x70\x2c\x74\x24\x05\xb1\x8e\x8e\x3a\xbe\x2d\xdc\xfc\xaa\xf8\x01\xbb\x17\xd9\x49\x02\xa4\xb5\xed\x2b\x36\xda\xb3\x55\xae\x76\xf8\x2c\x6c\x59\x3e\xea\x79\xeb\xeb\x67\xc3\x73\x90\x3b\xb8\x3a\x3a\xbd\x59\xc3\x35\x69\xd2\xdf\x6e\x4a\x93\x3e\xfe\x95\xbc\xdb\x7f\xa0\xe7\x91\xcd\x6f\xe1\x3e\x00\xf7\x01\xb8\x0f\xc0\x7d\x00\xee\x03\x70\x1f\x80\xfb\x00\xdc\x07\xf6\xd9\x6d\xe1\x3e\x00\xf7\x01\xb8\x0f\xc0\x7d\x00\xee\x03\x70\x1f\x80\xfb\xc0\xd9\xb9\x0f\x00\x34\x03\x34\x03\x34\x0f\x63\x44\x01\x9a\xcb\xdd\x03\xd0\x3c\x2c\xd0\xfc\x82\xdc\xc1\x5a\xfc\x69\x97\x8e\xe9\x67\x32\x47\x06\x4a\xdb\x32\xb3\x76\x7f\x28\xa6\x1f\xb3\x8e\xc5\x3e\x64\xcf\xdd\x2f\x9e\xb6\xd3\xca\xe7\x9d\x70\xdf\x8f\xd4\x03\xdf\xa8\x63\x93\x56\xea\x9a\xc3\x04\x0c\x13\x30\x4c\xc0\x30\x01\x8f\xcd\x04\xdc\xac\x22\x7e\xad\x19\xf8\x85\xd5\xf0\x9b\xef\xbd\x7f\xa9\x8e\x33\xca\xef\x25\x65\xd7\x77\xd4\x8c\xd2\xf3\xa0\xd4\xb6\x22\x6e\x9d\x0b\x16\xa9\xde\x4a\x94\x9e\xc8\x6e\x42\xe6\x87\x7a\x67\x91\x31\x5b\x85\xd9\xe6\xe4\x32\x37\x7e\xfe\xbe\x0a\x99\xeb\xc7\xea\x70\x7c\x14\xd9\x8c\x57\xdb\x27\x99\x2a\xcc\x92\xb7\x73\xc3\x74\x30\x5b\xac\x62\x5a\x65\x51\x2c\x1d\x91\x90\x4d\xc1\x48\x99\x66\x96\xcd\xd8\x9f\xf4\x46\x1a\x2d\x9a\x3b\xef\xd8\x94\xdd\x04\xc1\x3b\xb2\x18\xb8\x6a\x97\x5e\x85\x6a\xe0\x95\xbc\x66\xa7\xa4\x79\xdc\x7a\x15\xfa\x06\x03\xa5\xdb\x72\x9a\x61\x3a\x9a\xdd\xbe\x59\x57\x6c\xb6\xdd\x1f\xad\x47\xfe\x28\x2a\x20\xbe\x52\xfe\x49\x2f\x60\x73\xb1\xd0\x0e\x06\x99\x8d\x27\x17\x25\xcc\xee\x45\x53\x67\x25\xf4\xe1\x30\x57\xa2\x77\x38\x0d\x85\xc7\x69\x82\x1a\x15\x42\x69\x3b\xf6\x04\xd5\xf6\xde\x6c\x69\x18\x49\xd2\x5f\x2e\x85\xeb\xf3\x54\x04\xcf\x39\xf9\xcf\x8f\x5c\x3f\xb8\x34\x2a\x02\x75\x3a\xf3\x62\xee\xd0\xaa\xf1\xa5\x9b\x09\x04\xf9\xa1\x4d\x6e\x15\x76\x96\xae\x12\xf5\x91\xc5\xe1\xe2\xea\x4e\xdb\x20\xf3\x92\x85\xde\x03\xed\x23\x66\xfa\x3b\x97\x82\x87\xb5\xdf\x78\xc0\x30\xd3\x37\xdf\xd2\x27\xd7\xa9\x5d\x3b\x14\xaf\xbe\x4c\xff\x7d\x90\x4d\xb3\x7e\xd9\x8c\x6d\x8e\x36\xfd\x01\x70\x00\x70\x00\x70\x00\x70\x00\x70\x3a\x03\x38\x0d\xcf\x82\x35\x88\x73\xbc\x63\xf1\x63\x21\xdd\x5c\x14\x08\x9e\x88\x6c\x0b\xba\x8d\x65\xc4\x3d\x92\x8e\x6e\x65\xe0\x3b\xcf\x25\x77\x41\x3b\xe9\xf2\x7c\x75\x6a\xda\x5d\xcf\x7e\x99\xb1\x1f\x7a\x3f\xd3\xa2\x4b\x24\x42\xb5\x58\xf2\x33\x55\x30\x19\x47\xf7\x3c\xb4\xee\x8b\xf1\x4a\x5c\x2d\x78\x60\x75\xe5\xbb\x0b\xfd\xf3\xdd\x05\x5b\xf8\x21\x0f\xfc\x7f\xec\x41\x32\x17\x8c\xbb\x64\xd5\x97\x57\xda\xe2\xe9\xe6\x6a\x98\x7e\xfc\x24\xc9\x6f\xd2\xfa\xe9\x8c\x7d\xf2\x69\x73\x2c\x7c\xba\x8c\xd7\xdb\x96\x33\x9c\x54\xab\xc7\xa4\xa3\xc8\xf4\xfe\x90\x01\xd5\x2d\xf8\x68\xdb\xbe\x51\xe4\xa9\xb3\x9f\xb6\xab\x98\x51\xd3\xd5\x82\xbd\x97\x4f\xcc\xe3\xf1\x9c\x7b\x25\x03\x66\xa6\xd4\x88\x78\x21\xe3\xa5\x1a\x93\xda\xfe\xfa\x56\x69\xd1\xe6\xee\x22\xa1\xd7\x4a\xac\x91\xee\x5b\x5f\x49\x93\x8e\xef\xe6\xaa\x30\xc9\x0a\x64\x9c\xc8\xc6\x58\x1d\xd6\xe6\x24\xb5\xd2\xc0\xac\x30\x98\xf6\x1c\xc9\x20\x4a\xe6\x8a\x5b\x7e\xd9\x8c\xdd\x38\x8e\x88\x52\x3a\x9b\x8a\x9a\xdd\x44\xb7\x61\xc2\xa6\x66\x02\x96\x27\x68\xf2\x9e\x4d\x7e\xe5\xce\x83\x17\xcb\x55\xe8\xaa\xab\xc8\xad\x95\x2e\xaa\x74\x9c\x16\x21\x8d\x7c\x5c\x7e\x88\x6d\xc1\x3c\x7b\xd2\x7b\x36\xf9\x2c\x63\x51\x78\x2c\x73\x78\xe2\x70\x57\xb5\xde\xf4\x8f\xf6\x7a\xa6\xe7\x25\x5a\xf5\x5c\x7b\xe0\x22\x7b\xc6\x21\x13\x32\xaa\x4e\xf7\xd3\x48\x9c\x23\xa6\xad\xcd\xc6\x61\x1b\x71\x3d\xd5\x28\x80\xbd\x76\x36\xbe\xeb\xfc\xf5\x78\xb6\x8d\x53\x92\xd8\x66\x9d\xb5\x85\xc6\xbe\x54\xfe\xa9\xa5\x79\x08\xcf\xdc\x13\xd3\xfd\x48\x79\xba\x6a\xca\xe7\x46\x1b\xcb\xa5\xcf\xe5\x5c\x66\x1a\x6a\x5c\xd7\x40\x83\x45\x3b\x61\xe1\x88\x5f\x3b\x9f\xf8\xb5\x66\x87\xd1\xae\x18\xb6\xe3\x69\x6d\x70\x65\x80\x2b\x03\x5c\x19\xe0\xca\x00\x57\x86\xba\xcd\x17\x8c\x7c\x40\x3d\x02\x6c\x0a\x6c\x0a\x6c\x0a\x6c\x0a\x6c\x0a\x6c\x3a\x2e\x6c\x0a\x92\x01\x92\x01\x92\x01\x92\xd1\x39\xc9\xd8\x83\xf6\xf7\x34\xc2\xac\x59\x17\xae\x47\x99\xbd\xd4\xe2\xd6\x2b\x06\xb4\xf1\x06\xe4\x11\x44\x1e\x41\xe4\x11\x44\xf6\xfe\x61\x24\x55\x30\x7f\xfd\x9d\x0f\xb2\x4c\x5a\xa6\x8a\x5a\xab\x63\xfc\x00\x80\xa8\x6f\x3d\x12\x42\x3c\x2c\x9c\x76\xcb\x14\x3b\xda\xc6\xda\x4a\xc0\x2d\x82\xbe\x8a\xd3\xa0\xb7\x41\x5f\x64\xe9\xf9\xca\x43\xee\x89\x58\xdb\x2c\xf5\xe6\x9a\x24\xd2\xf1\x49\x09\xcf\xac\x83\x9c\x8c\xbc\x32\x66\x22\x4c\x95\x54\x6c\xad\x12\x4b\xfe\xa0\x7a\x31\xbd\x17\x89\xb0\xa2\x65\x31\xb4\xc9\x86\x40\x91\x68\x4d\x96\x40\x19\xb3\xeb\xb7\xff\x52\xd7\xc6\xdc\x21\xf4\x17\xc8\xd0\xd3\x82\x24\x59\xeb\x1c\x35\x29\xfd\x50\xef\x68\x64\x0d\xcb\xaf\x25\x1c\x62\xc0\x24\x9b\x3f\x67\xba\x92\x27\x03\x1e\x7a\x33\x19\x7b\x57\xd1\x83\x77\xb5\x0a\x7d\x47\xba\xe2\xea\xa7\x2f\xc9\xad\x7a\xca\xc1\xe6\x75\xd3\x39\x6d\x0e\x4f\xaf\x24\xcf\xf1\x08\x84\x4d\x85\xc1\xb7\x0d\x84\xc1\x0f\xda\x76\xd8\xf7\x86\xbc\xdd\xd9\x10\xed\xec\xdc\xf7\x96\x8c\x55\x3e\x27\xf1\x67\x58\xf2\xf9\x2b\xd6\x45\xea\x15\x7d\xd1\x7f\x8e\x94\x81\xe5\x10\xe1\x70\x53\xd6\x95\x1e\x09\x87\x03\xc9\xb5\x02\xd1\xaf\x38\xc8\xbd\x15\xfd\x10\xdd\x7e\x46\xd1\xed\x08\xe3\x43\x18\x1f\xc2\xf8\x10\xc6\x07\xad\x75\xd3\x2a\xea\x65\xcc\xcc\x69\x34\x3c\x84\xfc\xd8\x0b\xb7\x86\xfc\x0c\x4c\xb1\xcb\x6c\xf2\xad\x07\xfa\xc4\x82\xbb\x15\x69\x6c\x7f\xfd\x4b\x3d\xe4\xa5\xda\x17\x36\x23\xd8\x6b\x5e\xb4\xb0\x3d\x31\x34\x73\xcd\x4b\x70\x2a\x2a\xbd\x83\x15\xf7\x89\x15\x93\x83\xca\x41\xc5\x82\xa7\x74\xef\xcf\xdb\x37\xf7\xa5\x88\x3d\xd1\xe8\xca\x24\x8d\x79\x2a\x3c\xdf\x99\x36\xbf\x47\xfd\xfd\x6c\xae\xa4\x63\xa4\xc9\xc9\x19\xf1\x38\xf5\x29\x7e\x4c\x3b\x53\xbd\xf8\x14\xa5\xf7\xf7\xda\x88\xd9\x15\xe1\xde\x22\xb4\xde\x96\x3d\x9f\x18\x4c\x9b\x23\x37\x6d\x9e\x0f\xd5\xae\xc4\x6b\xd8\xc5\xa5\x63\x8a\xd4\x8e\x94\xc7\xa9\xbf\xde\xb0\x5b\xbd\x21\xc3\x8e\x0e\x24\xe6\x01\xdd\x19\xca\x70\xaa\xef\xa6\x2b\xc8\xb6\x9a\xb0\xd7\xbf\x25\x32\xbc\xd5\xe1\xda\x5f\xd5\xbe\x68\xfe\xfe\x61\x77\xcb\xfc\x1f\xdf\xf4\x09\xb7\x37\x9f\x37\x9f\x65\xec\x90\xf1\xd9\x93\x34\xf8\x92\xdd\x5d\x2c\xd4\xbf\xdd\x5d\xb0\x9b\x52\x6f\x92\x37\xb8\xb6\x14\xaf\x92\x3c\x34\x75\xca\x1d\x1a\x00\x0a\xf8\x0d\x7c\xc7\xd8\xbe\x44\xe0\x26\x4c\x3e\x99\xb1\xd5\x01\xb1\x91\x90\x51\x20\x66\x4c\xbf\x93\xe2\xfc\xed\x9c\x22\x9f\xec\xda\x81\xc8\x5e\x7f\x48\xf7\xaa\x17\x8d\xd7\x83\x16\x4a\x58\x5d\x1b\x86\xa8\x84\x45\x15\x37\xe7\x61\xa9\x61\xab\xd6\x8d\x2b\x51\xc0\x9d\x97\x4b\x86\xe6\x39\x67\x29\x1b\xc2\xfb\x11\x72\x62\xdd\x30\x9d\x8f\x9c\xd8\x23\x71\x0c\x52\x43\xf6\x0b\xbc\x1f\x21\xfe\xac\x8b\x3f\xab\xa1\xd9\xa0\x5f\xb1\x0e\x5d\x06\xaf\x12\x8d\x1c\x0b\x9e\x83\xdd\x00\x2c\xfd\x1e\x7b\x1e\x9e\x00\x65\x19\xb6\x8a\x5d\x11\x9b\x49\x3e\x5a\x00\x5a\x00\x5a\x00\x5a\x00\x5a\x75\x17\x0e\x01\x68\xb5\x77\xaa\x1e\x8a\xb6\x6a\x8e\xd5\x41\x1a\x31\x00\xb8\x60\xb8\x38\x3f\xc3\x05\x00\x57\x9b\xf3\x06\x80\x0b\xa6\x2a\x28\x65\xa7\x56\xca\x00\xb8\xea\x00\x57\x9b\xf6\x97\x43\x51\xd7\x58\x64\x45\x00\x2f\xc8\x8d\x75\xc3\x74\x3e\x72\x63\x8f\xc4\x33\x48\x11\xd9\x2f\x00\x5e\x10\x87\xce\x07\x78\x51\xc6\xc5\x8d\x7c\xab\x53\xa2\x65\xf2\x74\x87\xae\xff\xe8\xbb\x2b\x1e\x14\x73\x7e\xf2\x2c\x33\xff\x86\x1e\x99\x15\xa2\xbd\xdf\x65\x71\xe2\x13\x7a\xe6\x24\xaf\xd8\x52\x2a\xc1\x91\x89\x60\xcc\x0f\x93\x54\xf0\x92\x25\xb6\x2a\xa0\x3d\xd5\x9b\xf2\xb6\x24\x7a\xfc\x2c\xe3\x9b\x20\xc8\xe4\xb7\x5e\x50\xb2\x8d\x37\x9c\x57\xce\xce\x2d\x76\x49\x4a\x39\xfb\xe9\x51\x84\x67\x9f\xa8\x93\x06\xf2\xcc\xb2\x75\xa2\x6a\xda\x88\xab\xa6\xed\x46\x6b\xbb\x2a\xa6\x6d\x35\xcd\xb5\x80\x0d\x51\x27\x0d\x75\xd2\x50\x27\x0d\x75\xd2\xc6\x56\x27\x6d\xf7\xce\x5b\x5b\x23\xad\x63\x27\x8d\xa3\x55\x46\xdb\xdd\xfc\xcd\x55\xd1\xfa\xdc\x07\xfb\xd4\x42\xdb\xdd\x07\x9b\xeb\xa0\x75\xdc\x07\xa8\x7e\x86\xea\x67\xa8\x7e\x86\xea\x67\xa8\x7e\xd6\x59\xf5\xb3\x06\xbb\xff\x5a\xe5\xb3\xad\x79\x26\xcf\xc8\x47\xb3\x59\x6b\x46\x5c\xbd\x6d\x77\x77\x6f\xab\xdc\x76\xdc\x7e\x47\xbd\xb6\x4e\x46\x74\xbd\x56\x5b\xc7\xc3\x7a\xd2\x0a\x6d\xbb\xbb\x67\x4b\x75\xb6\xae\xb7\xcd\xbe\xd6\x64\xdb\xdd\x69\x35\x5c\xe3\x60\x7b\x9e\xf9\xeb\xef\xbd\xb0\xda\x9e\xd1\x64\xa0\x6d\x7b\x3b\x43\xfd\x5e\xc1\x15\xe0\x6c\xe0\x6c\x0c\x9c\x0d\x9c\x0d\x9c\x0d\x9c\x0d\x9c\x0d\x9c\x0d\x9c\x0d\x9c\x0d\x9c\x0d\x9c\x0d\x9c\x0d\x9c\x0d\x9c\x0d\x9c\x0d\x9c\x0d\x9c\x0d\x9c\xad\x53\x83\x31\x92\xc0\x00\x30\x02\x30\x02\x30\xf6\x7a\x44\x01\x18\xcb\xdd\x03\xc0\x78\x06\x80\xb1\xa6\xc2\x75\x47\x9c\xb1\x08\x17\x43\x2b\x07\xc9\x05\x7b\xf0\xc3\x8d\xd9\x12\x5a\x81\x8c\x97\xb9\x16\x44\x9a\x9e\x91\x98\x95\x22\x95\xab\x77\x93\x92\x59\xa0\xf0\xec\x2e\x10\x25\xf0\x24\xf0\xe4\xe0\xf0\x24\xd0\x24\xd0\x24\xd0\x24\x03\x9a\x04\x9a\x04\x9a\x04\x9a\x04\x9a\x04\x9a\x04\x9a\x04\x9a\x04\x9a\x04\x9a\x04\x9a\x04\x9a\x04\x9a\x1c\x26\x9a\x44\xf1\x0d\x70\x57\x70\xd7\xe1\x50\x3a\x70\x57\x70\x57\x70\x57\x70\xd7\x4a\xa7\x1d\x89\xbb\xce\x89\xb1\x1e\x44\x4b\x4f\x92\x22\xb9\x32\xbe\x9e\x48\x99\x1f\x2e\x64\xbc\xcc\xe6\x33\x67\x9a\xce\x6c\xa6\x9c\x9e\x48\x7f\x25\xd0\x79\xfb\xe5\xbf\xaa\x97\x22\x1f\xf4\x9e\x50\x31\xeb\xc4\x81\x23\xc5\x79\x85\xed\xbe\x2a\xbe\xb2\x6e\xcd\x3c\x5e\x0f\x7b\xd9\x94\x34\x7c\xbd\x03\x36\x58\x33\x7f\x5e\xdf\xdc\x7e\xf9\x5e\x77\x03\x56\xce\xfe\x2b\xc7\x76\x24\x85\x78\x8f\x61\x01\xfd\xcf\xe3\xf5\x9e\x6b\xc8\x89\x65\xf8\xff\xe4\xbc\xdb\xc4\x00\xda\xe6\x1b\x1b\xab\x91\x35\x2a\x58\x5f\x9d\x0f\xb1\x0c\x7f\x93\xf3\x2d\xb3\x5f\xdd\x6f\xa6\xbf\xb9\x18\x89\xb0\xab\x5d\xde\x9b\x25\x37\xa3\xb9\xa5\x56\x98\x19\xab\x91\xae\xae\xdd\x6e\x2e\x6d\x05\xe0\xcf\xd7\xe7\x8c\xf5\x6f\x59\x5f\x3b\x15\x7f\x96\x6b\xb8\xb2\xc0\x95\x05\xae\x2c\x70\x65\x81\x2b\x0b\x5c\x59\xe0\xca\x02\x57\x96\x7d\x76\x5b\xb8\xb2\xc0\x95\x05\xae\x2c\x70\x65\x81\x2b\x0b\x5c\x59\xe0\xca\x72\x76\xae\x2c\x70\x7a\x80\xd3\x03\x9c\x1e\x86\x31\xa2\x70\x7a\x28\x77\x0f\x9c\x1e\xfa\xee\xf4\xf0\x78\x7d\x75\x62\xf0\xd4\x18\x3a\x01\x38\xd5\x74\x75\x0f\x81\x13\x60\x53\xa7\xb0\x09\xa0\x09\xa0\x09\xa0\x09\xa0\x09\xa0\x09\xa0\x09\xa0\x09\xa0\xa9\xbd\xdd\x16\xa0\x09\xa0\x09\xa0\x09\xa0\x09\xa0\x09\xa0\x09\xa0\x09\xa0\x09\xa0\x09\xa0\x09\xa0\xa9\x97\x23\x0a\xd0\x54\xee\x1e\x80\xa6\x01\x80\xa6\x0d\x49\x8c\xeb\x82\x9f\xb4\x8c\xd3\x2e\x86\xd2\xcf\x64\x8e\x0c\x94\x4a\x65\xa6\xe6\xee\xb0\x27\x7d\x9b\x0d\x7c\xca\x6e\xce\xd3\x01\xd7\x3c\x62\x83\xa5\x9d\x55\x31\x87\x1e\xa2\xb9\x74\x9f\xab\x20\xc6\x8e\x51\xdd\x6f\x9d\x04\xe2\x7d\xa4\x66\x7e\xa3\xde\x4a\x1a\xb2\x9b\xed\xd0\x06\xc6\x5b\x18\x6f\x61\xbc\x85\xf1\x76\x6c\xc6\xdb\x2d\x47\xeb\x2e\x03\xee\x76\x31\x6d\xfb\x11\xbb\xd7\xde\xfb\x97\xea\x38\xa3\xb6\x5e\x52\x31\x70\x47\xcd\x28\x3d\x0f\x4a\x6d\x2b\x82\xd2\xb9\x60\x91\xea\xad\x44\x69\x78\xec\x26\x64\x7e\xa8\x77\x16\x19\xb3\x55\x98\x6d\x4e\x2e\x73\xe3\xe7\xef\xab\x90\xb9\x7e\xac\x0e\xc3\x47\x91\xcd\x78\xb5\x7d\x92\x91\xc1\x2c\x79\x3b\x37\x4c\x07\xb3\xc5\x2a\xa6\x55\x16\xc5\xd2\x11\x09\x59\x03\x8c\x7c\x68\x66\xd9\x8c\xfd\x49\x6f\xa4\xd1\xa2\xb9\xf3\x8e\x4d\xd9\x4d\x10\xbc\x23\x5d\xdf\x55\xbb\xf4\x2a\x54\x03\xaf\x24\x2d\x3b\x25\xcd\xe3\x84\x7b\xc0\x40\xe9\xb6\x9c\x66\x98\x8e\x66\x71\x6f\xd6\x15\x9b\xad\xee\x47\xeb\x91\x3f\x8a\xaa\x83\xaf\xd4\x76\x92\xe8\xd9\x5c\x2c\xb4\x6b\x40\x66\x9d\xc9\x45\x09\xb3\x7b\xd1\xd4\x59\x09\x7d\x38\xcc\x95\xd0\x1c\x4e\x43\xe1\x71\x9a\xa0\x46\xf8\x57\x7a\x8a\x3d\x41\xb5\xa5\x36\x5b\x1a\x46\x3c\xf4\x97\x4b\xe1\xfa\x3c\x15\xc1\x73\xce\xec\xf3\x23\xd7\x0f\x2e\x8d\x70\x4f\x9d\xce\xbc\x98\x3b\xb4\x6a\x7c\xe9\x66\x02\x41\x7e\x68\x93\x43\x84\x9d\xa5\xab\x44\x7d\x64\x71\xb8\xb8\xba\xd3\x36\xc8\xbc\x64\xa1\xf7\x40\xfb\x88\x99\xfe\xce\xa5\xe0\x61\xed\x37\x1e\x30\xcc\xf4\xcd\xb7\xf4\xc9\x75\x0a\xd3\x0e\x95\xa9\x2f\xd3\x7f\x1f\xd8\xd2\xac\x5f\x36\x03\x97\xa3\x4d\x7f\xa0\x17\xa0\x17\xa0\x17\xa0\x17\xa0\x97\xce\xd0\x4b\xc3\xb3\x60\x0d\xbf\x1c\xef\x58\xfc\x58\xa8\x8e\x15\x05\x82\x27\x22\xdb\x82\x6e\x63\x19\x71\x8f\xa4\xa3\x5b\x19\xf8\xce\x73\xc9\xd1\xcf\x4e\xba\xbc\xbc\x96\x9a\x76\xd7\xb3\x5f\x66\xec\x87\xde\xcf\xb4\xe8\x12\x89\x50\x2d\x96\xfc\x4c\x15\x4c\xc6\xd1\x3d\x0f\xad\xe3\x61\xbc\x12\x57\x0b\x1e\x58\x5d\xf9\xee\x42\xff\x7c\x77\xc1\x16\x7e\xc8\x03\xff\x1f\x7b\x90\xcc\x05\xe3\x2e\xd9\xe3\xe5\x95\xb6\x55\xba\xb9\x1a\xa6\x1f\x3f\x49\xf2\x9b\xb4\x7e\x3a\x63\x9f\x7c\xda\x1c\x0b\x9f\x2e\xe3\xf5\xb6\xe5\xf4\x25\xd5\xea\x31\xe9\x28\x32\xbd\x3f\x64\x40\x75\x0b\x3e\xda\xb6\x6f\x14\x79\xea\x2c\x9f\xed\x2a\x66\xd4\x74\xb5\x60\xef\xe5\x13\xf3\x78\x3c\xe7\x5e\xc9\x2a\x99\x29\x35\x22\x5e\xc8\x78\xa9\xc6\xa4\xb6\xbf\xbe\x55\x5a\xb4\xb9\xbb\x48\xe8\xb5\x12\x6b\xa4\xfb\xd6\x57\xd2\xa4\xe3\xbb\xb9\x2a\x4c\xb2\x02\x19\x27\xb2\x31\x4e\x28\xb3\x20\xfd\x6a\xa5\x81\x59\x61\x30\xed\x39\x92\xe1\x8f\xcc\x89\xb6\xfc\xb2\x19\xbb\x71\x1c\x11\xa5\x74\x36\x15\x35\xbb\x89\x6e\xc3\x84\x4d\xcd\x04\x2c\x4f\xd0\xe4\x3d\x9b\xfc\xca\x9d\x07\x2f\x96\xab\xd0\x55\x57\x91\x43\x2a\x5d\x54\xe9\x38\x2d\x42\x1a\xf9\xb8\xfc\x10\xdb\x82\x79\xf6\xa4\xf7\x6c\xf2\x59\xc6\xa2\xf0\x58\xe6\xf0\xc4\xe1\xae\x6a\xbd\xe9\x1f\xed\xaf\x4c\xcf\x4b\xb4\xea\xb9\xf6\xc0\x45\xf6\x8c\x43\x26\x64\x54\x9d\xee\xa7\x91\x38\x47\xcc\x49\x9b\x8d\xc3\x36\x56\x7a\xaa\x51\x00\x35\xed\x6c\x7c\xd7\xc9\xe9\xf1\x6c\x1b\xa7\x64\xa8\xcd\x3a\x6b\x0b\x47\x7d\xa9\xfc\x53\x8b\xe8\x90\x2f\x73\x4f\x4c\xf7\x23\xe5\xe9\xaa\x29\x9f\x1b\x57\x6c\x95\x3e\x8c\x73\x41\xa9\xe3\x38\xab\x97\x25\xf5\xeb\x73\xf6\xce\x56\xd0\x35\x02\xc5\xce\x27\x50\xac\xd9\xd9\xb1\x2b\x58\xec\x78\x4a\x16\x3c\x0f\xe0\x79\x00\xcf\x03\x78\x1e\xc0\xf3\xa0\x6e\xf3\x05\xd2\x1e\x50\x8f\x80\x72\x82\x72\x82\x72\x82\x72\x82\x72\x82\x72\x8e\x8b\x72\x02\x3c\x00\x3c\x00\x3c\x00\x3c\x74\x0e\x1e\xf6\x80\xf3\x3d\x0d\xe5\x6a\xd6\x85\xeb\xe1\x5c\x2f\xb5\xb8\xf5\x0a\xd9\x6c\xbc\xe1\x5c\xf3\xec\xa1\xb0\xd3\xf8\x0a\x3b\xa1\xb4\x77\xcf\x93\x0f\x98\xbf\xfe\xce\x07\x59\x26\x2d\x93\x3e\xad\x94\x31\xde\x00\xea\xe9\x4b\xdb\xc4\x7a\x87\x45\xa4\x6e\x99\x37\xed\x6e\x76\xad\x04\xa6\x22\x38\xaa\x38\xd6\xbd\x0d\x8e\x22\x13\xcb\x57\x1e\x72\x4f\xc4\xda\x58\xa8\xb7\xc5\x24\x91\x8e\x4f\xda\x6f\x66\x96\xe3\x64\x5d\x95\x31\x13\x61\xaa\xc4\x51\x6b\x0e\x58\xf2\x07\xd5\x8b\xe9\xbd\x48\x84\x95\xe9\x8a\x21\x40\x36\x54\x88\x64\x5a\x32\xc1\xc9\x98\x5d\xbf\xfd\x97\xba\x36\xe6\x0e\x31\xb7\x40\x86\x9e\x96\xe0\xc8\x4c\xe6\xc8\x30\xe5\x7e\xa8\xf7\x22\x32\x43\xe5\xd7\x12\x87\x30\x44\x90\xcd\x9f\x33\x25\xc5\x93\x01\x0f\xbd\x99\x8c\xbd\xab\xe8\xc1\xbb\x5a\x85\xbe\x23\x5d\x71\xf5\xd3\x97\xe4\x56\x3d\xe5\x60\xbb\xb6\xe9\x9c\x36\x87\xa7\x57\x22\xdf\xc0\x24\xb1\xa6\x52\xd8\xdb\x06\x52\xd8\x07\x6d\x99\xeb\xc5\xd7\xbe\xdd\xf9\xb5\xda\xbd\xb7\x17\x9f\x3b\x2a\x11\x97\x84\x8b\x1e\x8a\xb8\xaf\xd8\xc1\x59\x3e\xf4\x3f\xfe\xe7\x48\xc9\x3e\x9a\x08\x51\xa5\x04\x1f\x48\xeb\x01\xe9\x69\x14\xd2\x13\x02\xa9\xcf\x28\x90\x1a\x11\x63\x88\x18\x43\xc4\x18\x22\xc6\xa0\xf8\x6d\x5a\x45\xbd\x0c\xcf\x38\x8d\x6a\x85\xe8\x92\xcd\xd1\x25\x7d\x54\xb6\x32\x53\x73\xeb\x31\x25\xb1\xe0\x6e\x45\xce\xda\xad\x2e\xa9\x9b\x1a\x29\x4b\xd8\x3b\x60\xd7\xd8\xb0\xd8\x3c\xd1\x4b\xb3\xc6\x4b\xc8\x1d\xd9\xa6\x8d\xc2\x59\xfb\xf2\x26\x48\xae\x2f\x34\x0e\x18\x72\x70\x18\x92\x96\x42\xa3\xd3\xa1\xba\x01\x4f\xe9\xde\x9f\xb7\xef\xc5\x4b\x11\x7b\xa2\xd1\x95\x49\x1a\xf3\x54\x78\xbe\x33\x6d\x7e\x8f\xfa\xfb\xd9\x5c\x49\xbb\x7e\x93\xd3\x2b\xe2\x71\xea\x53\x64\x91\x76\xb3\xd9\xfb\x24\xa3\xf7\x9d\xde\xee\xd7\x15\x3c\xdd\x22\xe7\xdd\x96\x1d\x5d\x18\xac\x81\x23\xb7\x06\x9e\x0f\x4b\xad\xb8\xe7\xdb\xc5\xa5\x43\x48\xd4\x36\x93\x87\x25\xbf\xde\xb0\x05\xbd\x21\x5b\x88\x8e\x1b\xe5\x01\xdd\x19\xca\x70\xaa\xef\xa6\x2b\xc8\x1c\x99\xb0\xd7\xbf\x25\x32\xbc\xd5\xd1\xb9\x5f\xd5\x66\x67\xfe\xfe\x61\xb7\xc0\xfc\x1f\xdf\xf4\x09\xf2\x36\x9f\x37\x9f\x65\xec\x90\xbd\xd6\x93\x34\xf8\x92\xdd\x5d\x2c\xd4\xbf\xdd\x5d\xb0\x9b\x52\x6f\x92\xf3\xaf\x36\xae\xae\x92\x3c\x12\x71\xca\x1d\x1a\x00\x8a\xef\x0c\x7c\xc7\x98\x8b\x44\xe0\x26\x4c\x3e\x99\xb1\xd5\xf1\x8f\x91\x90\x51\x20\x66\x4c\xbf\x93\xc2\xba\xed\x9c\x22\x17\xdc\xda\x81\xc8\x5e\x7f\x48\xf7\xaa\x17\x8d\xd7\x61\x12\x8a\x50\xff\x15\xa1\xa8\xa2\xc1\xf4\x50\x15\x5a\xb5\x6e\x74\x88\x02\xee\xec\x2f\xad\x99\xfb\xc6\x2b\xaf\xc1\xd9\x0d\x02\xda\x19\x08\x68\x3d\x92\x83\x70\x5c\x67\xbf\xc0\xd9\x8d\x8d\x4f\xb8\x58\xf5\xd2\xca\xfa\x8a\xbd\xd4\x79\xec\x2a\xd1\x9c\xaa\xe0\x43\xd6\x0d\x1b\xd1\xef\xb1\x07\x53\x5b\x94\xc4\x50\x36\xec\x39\x58\xc5\x60\x25\x60\x25\x7b\xb4\x19\xac\x04\xac\xa4\x1d\x56\x72\xf8\xc9\xb6\x95\x9a\xd4\x1c\x6d\x83\xd4\xc5\xc1\x4e\xa0\x9a\x9f\x9f\x6a\x0e\x76\xd2\xe6\xbc\x01\x3b\x81\x31\x06\x8a\xd1\x5a\x2f\x82\x9d\xbc\x9c\x9d\xbc\xc4\x2e\xb1\x95\xa2\x8c\x45\x7e\x03\x4b\x81\xc0\x76\x06\x02\x5b\x8f\xe4\x22\x1c\xdf\xd9\x2f\x60\x29\x6c\x7c\xc2\xc6\x68\x58\xca\xff\x93\xf3\xe4\x48\xd1\xf7\x85\x10\x45\xb9\x60\x7b\x44\xe1\x7f\xc8\x6e\xcc\x25\x14\xc4\xe2\xa3\xd0\x05\x0a\x5d\xa0\xd0\x05\x0a\x5d\xa0\xd0\x45\x1f\x0a\x5d\x40\x19\x6c\x3c\x50\xa7\x54\x06\x51\x8f\x04\x99\x61\xce\x38\x33\x0c\x8a\xcf\xa0\xf8\x0c\x8a\xcf\xa0\xf8\x0c\x8a\xcf\xa0\xf8\x0c\x8a\xcf\x20\x61\x1a\x12\xa6\x21\x61\x1a\x12\xa6\x55\x67\xe4\x51\x6b\x2c\xa1\xd2\x55\x1f\x46\x01\x95\xae\x50\xe9\x6a\x6c\x95\xae\x6a\xd1\x1c\x18\x3c\x92\x20\xae\xdd\xb1\x35\x09\x62\x2e\x28\x75\x8c\xbc\x7b\x94\x0a\x51\x1b\xc3\x62\xa3\x40\x5b\xa9\x5d\x2e\x98\xfa\xd6\x1d\xe8\x5a\xdd\xbb\xe6\x50\x77\x20\xae\xae\x7c\x16\x09\x63\x54\x96\xee\x57\x29\x1f\x96\x3c\x7e\x48\x72\x1f\x6c\xfd\xad\x64\x7f\x49\x8c\x95\xe8\x39\x52\xaa\xc4\xaf\xdf\xbe\xfd\xf7\xd7\x9b\xef\xff\x7d\x77\x91\x5b\x40\xb4\xb0\x25\x49\x62\xf5\x97\x51\x20\xc8\xd4\x31\xcf\x9e\xaa\xc4\x0b\xdf\x0b\xb5\x05\x58\xc9\xc0\x01\xf7\x48\xfa\xcc\x2f\x51\xda\x66\x51\x53\xd4\x66\x85\x49\xc2\x5c\x3f\x71\x62\xa1\xbe\x39\x67\x47\x05\xe6\x61\xcc\x1b\xe5\x07\x65\x06\x07\xa5\x49\x2b\xad\xdd\xca\xb5\x6a\xe7\x8b\x1f\x79\x70\xc9\x42\xa9\xb1\x2e\xe9\xc3\x99\x8d\xa4\x6a\x66\x23\xb0\xf8\xcc\x6c\x9b\x8d\x3d\x2a\xd3\x86\x13\x91\x50\x41\xbd\xcc\xd0\x6c\xcc\x26\x86\x68\x95\x94\x3b\xf5\x2b\x75\x81\x9b\x91\xd2\x85\xe0\xa9\xd2\xc9\x3d\x9e\x0a\x56\x19\x08\xf3\x24\x11\x2a\xa1\x5b\x9b\x1f\x22\x3f\x47\xb8\x75\x8f\x3d\xe0\xbc\xa8\x99\x02\x27\x52\xac\xe0\x6d\x00\x6f\x03\x78\x1b\xc0\xdb\x00\xde\x06\x75\x9b\x2f\x30\xf6\x80\x7a\x04\x64\x13\x64\x13\x64\x13\x64\x13\x64\x13\x64\x73\x5c\x64\x13\xb0\x01\xb0\x01\xb0\x01\xb0\xa1\x73\xd8\xb0\x07\x90\xd7\xca\x9c\x8c\x6d\x24\xa5\x1a\x7e\x0d\x90\xd5\x75\x73\x3a\xc4\xf4\xa0\x6a\xe0\x6d\xa4\x93\xf4\x5e\x2c\xf5\xb1\x95\xa4\xb1\xe0\x4b\xea\x1e\xd7\xbd\x34\x07\xc3\xa5\xb9\x76\x29\x1f\x49\xf6\x29\xa8\x77\xec\x07\x89\x2b\xcf\xd5\xa9\x7e\x48\x17\x3e\x6d\x9b\x60\xc3\xcf\x74\xb0\xf1\x06\xf5\xb2\xf7\xba\xe3\xff\x7f\xeb\x7d\xd0\xe4\xd9\xe5\xbb\xfb\xcd\x83\xf2\x28\xc7\xdf\xe4\xfc\x77\x3f\x49\xcf\x92\xff\xa8\x1d\xac\xb7\xcc\xe7\x80\x44\x73\xc8\xcd\x36\xb8\xdc\x6c\x32\x69\x99\xec\x69\x65\x8c\xf1\x1d\x10\x4f\x5f\xd6\x16\xc6\xeb\x6b\x36\x0c\x64\xc2\x38\xab\xe0\x27\x64\xc2\x40\x26\x8c\x9a\x8f\xe9\xa7\xd4\x35\x90\x2c\x18\x7b\x7d\xe9\x29\xea\xbb\x1e\xf4\xa9\xa3\x12\x63\x49\x88\xe8\x99\x18\xfb\x8a\x1d\x94\xa9\xc3\x64\x3c\x3f\x52\xc2\x8e\x5d\x42\x52\x29\x49\x07\x52\x73\x94\xde\x0e\x09\x69\x88\x12\x12\x82\xa1\xcf\x28\x18\x1a\x51\x5f\x88\xfa\x42\xd4\x17\xa2\xbe\xa0\xdc\x6d\x5a\x45\xbd\x0c\xb1\x38\x8d\x1a\x85\x08\x91\xcd\x11\x22\x7d\x53\xae\x32\xf3\x71\x37\x65\xa0\xca\x32\xd6\x01\x85\x9f\xaa\x0a\x12\xf6\x0b\xd8\x2d\x4e\x52\xea\xe9\x64\x65\x9e\x50\xe2\x09\x18\xb1\xdc\x58\x94\x78\xda\x78\x4f\x3b\x25\x9e\xf6\x39\xb5\xea\x8b\x3a\x8d\x02\x7e\xa2\x94\x13\xac\x7d\xe7\xc7\x43\x51\xca\xa9\xcd\x79\x83\x52\x4e\x30\x92\x40\xe9\x19\x6e\x19\xa7\x1e\x96\x70\xda\xcf\xa6\x50\x5f\xb4\x69\x14\xf2\x19\x9c\xd3\x20\x8c\x8d\x5c\x18\xeb\x91\xcc\x83\xa3\x39\xfb\xe5\xcc\x9d\xd3\xc6\x25\x44\x74\x5e\x9e\xe9\xc8\x0e\x5f\x57\xba\xc4\x63\xd1\xef\xab\x1b\xb6\xb1\xa9\x94\xe4\x61\x94\xa3\xa6\x7e\x24\xf6\x16\xac\x58\xb0\x0e\xb0\x8e\x9a\x36\x83\x75\x80\x75\xb4\xc3\x3a\x0e\x3b\xc5\x36\x52\x8f\xb1\x94\x41\x06\xfb\x80\xba\x7d\x7e\xea\x36\xd8\x47\x9b\xf3\x06\xec\x03\x06\x16\x28\x41\x60\x1f\x2d\xb2\x8f\x43\x6d\x0e\x1b\x29\xc8\x58\xe4\x35\xb0\x10\x08\x67\x23\x17\xce\x7a\x24\x03\xe1\xa8\xce\x7e\x01\x0b\x19\x91\x50\x31\x2c\x16\x42\xd9\xc1\xae\x9c\x58\x86\xff\x4f\xce\xbb\x05\x1e\x26\x87\x6c\xe8\xfa\x8f\xbe\xbb\xe2\x41\x31\x1f\x1d\xcf\xb2\x46\x7f\x88\x65\xf8\x9b\x9c\xcf\x0a\xd1\x9e\xef\xb2\x38\xd1\x09\x3d\x63\x92\x57\x0f\x28\xa5\x83\xcf\x24\x16\xe6\x87\x49\x2a\x78\xc9\x50\x58\x95\x67\x9e\x0a\xd6\x27\xf3\xce\xdf\xfd\x24\xfd\x2c\xe3\x9b\x20\xc8\xc4\x9b\x5e\xc0\x94\x8d\x37\x9c\x57\x92\xb8\x2d\xe6\x34\xca\x71\xf8\xe9\x51\x84\xe7\x99\x38\x8e\x46\xef\x08\xd9\xe3\xcc\x3a\x39\x1e\xd7\x41\x01\x9e\x11\x17\xe0\xd9\x0d\x6e\x76\x15\xdf\xd9\x6a\x2b\x6a\x01\x4a\xa1\xe4\x0e\x4a\xee\xa0\xe4\x0e\x4a\xee\x8c\xad\xe4\xce\xee\x9d\xb7\xb6\xdc\x4e\xc7\x2e\x00\x47\x2b\xb2\xb3\xbb\xf9\x9b\x0b\xec\xf4\xb9\x0f\xf6\x29\xab\xb3\xbb\x0f\x36\x97\xd4\xe9\xb8\x0f\x50\x48\x07\x85\x74\x50\x48\x07\x85\x74\x50\x48\xa7\xb3\x42\x3a\x0d\x76\xff\xb5\x22\x3a\x5b\xd3\xc4\x9d\x91\x07\x60\xb3\xd6\x8c\xb8\x10\xd0\xee\xee\xde\x56\x04\xe8\xb8\xfd\x8e\xd2\x3f\x9d\x8c\xe8\x7a\xd9\x9f\x8e\x87\xf5\xa4\xc5\x7e\x76\x77\xcf\x96\x42\x3f\x5d\x6f\x9b\x7d\x2d\xef\xb3\xbb\xd3\x6a\x88\xc5\xc1\xf6\x3c\xf3\xd7\xdf\xbb\x51\x57\x4f\x30\xd7\xb1\x11\x17\xf0\x16\xf0\x16\xf0\x56\x8f\x42\x96\x80\xb6\x80\xb6\x80\xb6\x80\xb6\x80\xb6\x80\xb6\x80\xb6\x80\xb6\x80\xb6\x80\xb6\x80\xb6\x80\xb6\x80\xb6\x80\xb6\x80\xb6\x80\xb6\x9a\xb6\x06\x68\x0b\x68\x0b\x68\x0b\x68\x0b\x68\xeb\xec\xd1\xd6\x86\xbc\x76\x67\x1e\xdc\x95\x87\xaa\x17\xc2\xbc\xc0\xbd\xc0\xbd\xc0\xbd\x10\xd6\x05\xf6\x05\xf6\x05\xf6\x05\xf6\x05\xf6\x05\xf6\x05\xf6\xd5\x3f\xee\x03\xf6\x05\xf6\x05\xf6\x05\xf6\x05\xf6\x05\xf6\x05\xf6\x35\x44\xf6\x85\x8c\xf6\x80\x7e\x80\x7e\x80\x7e\xbd\x1e\x51\x40\xbf\x72\xf7\x00\xfa\x8d\x05\xfa\x99\x82\x56\x47\x60\x7f\x45\xe0\x17\x5a\x61\x47\x2e\xd8\x83\x1f\xba\xad\x82\xbf\xcb\x5c\xb5\x21\xf5\xcd\x88\xc1\x4a\x3b\xca\x75\xb6\x49\x49\xd7\x2f\x3c\xfb\x60\x6c\x08\x64\x08\x64\x38\x0c\x64\x08\x5c\x08\x5c\x08\x5c\x68\x7e\x04\x2e\x04\x2e\x04\x2e\x04\x2e\x04\x2e\x04\x2e\x04\x2e\x04\x2e\x04\x2e\x04\x2e\x04\x2e\x04\x2e\x04\x2e\xec\x25\x2e\x2c\x56\xf2\xae\x35\x34\xa0\x9a\x77\x7d\x9b\xc1\x3e\xc1\x3e\xc1\x3e\xc1\x3e\xc1\x3e\xc1\x3e\xcf\x9c\x7d\xf6\x24\xd8\xf1\x74\x81\x8e\x08\x72\x34\x4f\x01\xb1\x1c\x06\xb1\x44\x72\x4f\x10\x4b\x10\x4b\xf3\x23\x88\x25\x88\x25\x88\x25\x88\x25\x88\x25\x88\x25\x88\x25\x88\x25\x88\x25\x88\x25\x88\x25\x88\x25\x88\x65\x2f\x89\x25\x20\x1f\x20\x1f\x20\x1f\x20\x5f\xaf\x47\x14\x90\xaf\xdc\x3d\x80\x7c\x63\x80\x7c\x3d\x09\x6e\x1c\x6a\x60\x23\x82\x1a\x81\x08\x07\x83\x08\x81\x07\x81\x07\x81\x07\x81\x07\x81\x07\x81\x07\x81\x07\x81\x07\x81\x07\x81\x07\x81\x07\x81\x07\x81\x07\x81\x07\x81\x07\x81\x07\x1b\xee\xfe\x27\x0d\x68\x44\x30\x23\x38\x67\xb9\xb1\xe0\x9c\xe0\x9c\xe0\x9c\xe0\x9c\xe0\x9c\xe7\xcb\x39\xe7\x22\xe5\xd7\x57\x07\x41\xcc\xae\xd1\x5c\x2d\xa5\xa9\x8c\xb3\x27\xd2\xb2\x7a\xa2\x87\x74\x0b\x8d\xf4\x44\x6a\x58\x24\x35\xfd\xe6\xf6\xcb\xf7\xba\xbb\x4e\xc5\x23\x07\x8b\x09\x0b\x1d\x49\xe1\x9f\x23\x61\x85\x34\x49\x0a\xb7\xbd\x2a\xbe\x7a\xdb\x92\x3a\x4a\xe1\x53\x6d\xbf\x8a\x8d\x06\x6c\x15\xa4\x4a\xde\xe3\x2d\x8b\x41\xdd\x5f\x5c\x0d\xe6\x8e\xcf\x32\xbe\x09\x82\x8c\xd5\xf7\x62\x61\x00\xd4\xd3\x0a\x9c\xd1\x2c\x9b\x99\x59\x36\x2b\x56\x95\x1d\xe9\x8a\xdb\x8d\xe8\x7b\x51\xa5\xb4\xf2\xd9\x40\xf5\x40\xf5\x40\xf5\x40\xf5\x40\xf5\x40\xf5\x40\xf5\x40\xf5\xbb\x77\x5b\xa0\x7a\xa0\x7a\xa0\x7a\xa0\x7a\xa0\x7a\xa0\x7a\xa0\xfa\xb3\x43\xf5\x00\xbd\x00\xbd\x00\xbd\xc3\x18\x51\x80\xde\x72\xf7\x00\xf4\x0e\x05\xf4\xee\x28\xd8\x59\x84\x55\x5a\xd0\x69\x97\x57\xe9\x67\x32\x47\x06\x4a\xaf\x32\xf3\x73\x37\xa6\xd2\xb7\x95\x40\x55\xf6\x84\xed\xa5\x32\xeb\x6d\xee\xac\x8a\x3f\xf4\x60\xcd\xa5\xfb\x5c\x25\x35\x76\xb4\xea\x7e\xeb\x84\xa3\x7e\xa4\xb6\x7e\xa3\x2e\x4b\x1a\x32\x9d\xed\x30\x07\x66\x5c\x98\x71\x61\xc6\x85\x19\x77\x6c\x66\xdc\x2d\x87\xec\x2e\x53\xee\x76\x81\x6d\xfb\x61\xbb\xd7\xde\xfb\x97\xea\x38\xa3\xc0\x5e\x52\xd2\x76\x47\xcd\x28\x3d\x0f\x4a\x6d\x2b\x22\xd3\xb9\x60\x91\xea\xad\x44\xe9\x7a\xec\x26\x64\x7e\xa8\x77\x16\x19\xb3\x55\x98\x6d\x4e\x2e\x73\xe3\xe7\xef\xab\x90\xb9\x7e\xac\x0e\xc3\x47\x91\xcd\x78\xb5\x7d\x92\xb9\xc1\x2c\x79\x3b\x37\x4c\x07\xb3\xc5\x2a\xa6\x55\x16\xc5\xd2\x11\x09\xd9\x05\x8c\xa4\x68\x66\xd9\x8c\xfd\x49\x6f\xa4\xd1\xa2\xb9\xf3\x8e\x4d\xd9\x4d\x10\xbc\x23\xad\xdf\x55\xbb\xf4\x2a\x54\x03\xaf\x64\x2e\x3b\x25\xcd\xe3\x84\x7b\xc0\x40\xe9\xb6\x9c\x66\x98\x8e\x66\x7b\x6f\xd6\x15\x9b\xed\xef\x47\xeb\x91\x3f\x8a\x4a\x84\xaf\x14\x78\x92\xed\xd9\x5c\x2c\xb4\x93\x40\x66\xa7\xc9\x45\x09\xb3\x7b\xd1\xd4\x59\x09\x7d\x38\xcc\x95\xf8\x1c\x4e\x43\xe1\x71\x9a\xa0\x46\x0d\x50\x1a\x8b\x3d\x41\xb5\xcd\x36\x5b\x1a\x46\x46\xf4\x97\x4b\xe1\xfa\x3c\x15\xc1\x73\x4e\xef\xf3\x23\xd7\x0f\x2e\x8d\x98\x4f\x9d\xce\xbc\x98\x3b\xb4\x6a\x7c\xe9\x66\x02\x41\x7e\x68\x93\x6b\x84\x9d\xa5\xab\x44\x7d\x64\x71\xb8\xb8\xba\xd3\x36\xc8\xbc\x64\xa1\xf7\x40\xfb\x88\x99\xfe\xce\xa5\xe0\x61\xed\x37\x1e\x30\xcc\xf4\xcd\xb7\xf4\xc9\x75\xaa\xd3\x0e\xe5\xa9\x2f\xd3\x7f\x1f\xec\xd2\xac\x5f\x36\xa3\x97\xa3\x4d\x7f\x40\x18\x40\x18\x40\x18\x40\x18\x40\x98\xce\x20\x4c\xc3\xb3\x60\x0d\xc4\x1c\xef\x58\xfc\x58\xc8\xaa\x16\x05\x82\x27\x22\xdb\x82\x6e\x63\x19\x71\x8f\xa4\xa3\x5b\x19\xf8\xce\x73\xc9\xe5\xcf\x4e\xba\x3c\x2d\x9b\x9a\x76\xd7\xb3\x5f\x66\xec\x87\xde\xcf\xb4\xe8\x12\x89\x50\x2d\x96\xfc\x4c\x15\x4c\xc6\xd1\x3d\x0f\xad\x0b\x62\xbc\x12\x57\x0b\x1e\x58\x5d\xf9\xee\x42\xff\x7c\x77\xc1\x16\x7e\xc8\x03\xff\x1f\x7b\x90\xcc\x05\xe3\x2e\x59\xe6\xe5\x95\xb6\x5a\xba\xb9\x1a\xa6\x1f\x3f\x49\xf2\x9b\xb4\x7e\x3a\x63\x9f\x7c\xda\x1c\x0b\x9f\x2e\xe3\xf5\xb6\xe5\x1c\x26\xd5\xea\x31\xe9\x28\x32\xbd\x3f\x64\x40\x75\x0b\x3e\xda\xb6\x6f\x14\x79\xea\x6c\xa0\xed\x2a\x66\xd4\x74\xb5\x60\xef\xe5\x13\xf3\x78\x3c\xe7\x5e\xc9\x34\x99\x29\x35\x22\x5e\xc8\x78\xa9\xc6\xa4\xb6\xbf\xbe\x55\x5a\xb4\xb9\xbb\x48\xe8\xb5\x12\x6b\xa4\xfb\xd6\x57\xd2\xa4\xe3\xbb\xb9\x2a\x4c\xb2\x02\x19\x27\xb2\x31\x56\x87\xb5\x39\x49\xad\x34\x30\x2b\x0c\xa6\x3d\x47\x32\x10\x92\xb9\xd3\x96\x5f\x36\x63\x37\x8e\x23\xa2\x94\xce\xa6\xa2\x66\x37\xd1\x6d\x98\xb0\xa9\x99\x80\xe5\x09\x9a\xbc\x67\x93\x5f\xb9\xf3\xe0\xc5\x72\x15\xba\xea\x2a\x72\x4d\xa5\x8b\x2a\x1d\xa7\x45\x48\x23\x1f\x97\x1f\x62\x5b\x30\xcf\x9e\xf4\x9e\x4d\x3e\xcb\x58\x14\x1e\xcb\x1c\x9e\x38\xdc\x55\xad\x37\xfd\xa3\x3d\x97\xe9\x79\x89\x56\x3d\xd7\x1e\xb8\xc8\x9e\x71\xc8\x84\x8c\xaa\xd3\xfd\x34\x12\xe7\x88\x89\x69\xb3\x71\xd8\x46\x4d\x4f\x35\x0a\xe0\xa7\x9d\x8d\xef\x3a\x43\x3d\x9e\x6d\xe3\x94\x34\xb5\x59\x67\x6d\x21\xaa\x2f\x95\x7f\x6a\x39\x1d\xc2\x1d\xf7\xc4\x74\x3f\x52\x9e\xae\x9a\xf2\xb9\x11\xc6\x5c\xe9\x13\x39\x97\x96\xfa\x1f\x7f\xd5\xfb\xe0\xcb\x56\x48\x36\x22\xc8\xce\x27\x82\xac\xd9\x51\xb2\x2b\x8a\xec\x78\x3a\x17\x1c\x11\xe0\x88\x00\x47\x04\x38\x22\xc0\x11\xa1\x6e\xf3\x05\xe1\x1e\x50\x8f\x00\x7a\x02\x7a\x02\x7a\x02\x7a\x02\x7a\x02\x7a\x8e\x0b\x7a\x82\x43\x80\x43\x80\x43\x80\x43\x74\xce\x21\xf6\x60\xf5\x3d\x8d\xf1\x6a\xd6\x85\xeb\x71\x5e\x2f\xb5\xb8\xf5\x8a\xe0\x6c\xbc\x01\x79\xf9\x90\x97\x6f\xa4\x79\xf9\x90\x8d\xbe\xe7\x49\x0a\xcc\x5f\x7f\xe7\x83\x2c\x93\x96\xe9\x9f\xd6\xd1\x18\x6f\x00\xfa\xf4\xa5\xad\xa3\xbe\xc3\x82\x56\xb7\x4c\x9e\x0e\x36\xc0\x56\x02\x58\x11\x44\x55\x1c\xf0\xde\x06\x51\x91\xed\xe5\x2b\x0f\xb9\x27\x62\x6d\x45\xd4\x1b\x64\x92\x48\xc7\x27\xb5\x38\xb3\xd7\x71\x32\xbb\xca\x98\x89\x30\x55\x72\xaa\xb5\x13\x2c\xf9\x83\xea\xc5\xf4\x5e\x24\xc2\x0a\x7b\xc5\x50\x21\x1b\x52\x44\xc2\x2e\xd9\xe6\x64\xcc\xae\xdf\xfe\x4b\x5d\x1b\x73\x87\x60\x5c\x20\x43\x4f\x8b\x76\x64\x3f\x73\x64\x98\x72\x3f\xd4\xbb\x12\xd9\xa7\xf2\x6b\x09\x50\x18\x54\xc8\xe6\xcf\x99\xf6\xe2\xc9\x80\x87\xde\x4c\xc6\xde\x55\xf4\xe0\x5d\xad\x42\xdf\x91\xae\xb8\xfa\xe9\x4b\x72\xab\x9e\x72\xb0\xc1\xdb\x74\x4e\x9b\xc3\xd3\x2b\x59\x70\x88\x22\x5a\x53\xf1\xec\x6d\x03\xf1\xec\x83\xb6\xdb\xf5\xe7\x93\xdf\xee\xfc\x64\xed\x10\xdc\x9f\x6f\x1e\x9f\x14\x4c\xa2\x47\x5f\xa5\xe0\x57\xec\x65\x09\x43\x6a\x8a\xe0\x77\x98\x37\xa4\x89\xb0\xb5\x9e\x2b\x04\x19\x42\x20\x60\x8d\x42\xc0\x42\x4c\xf6\x19\xc5\x64\x23\xf8\x0c\xc1\x67\x08\x3e\x43\xf0\x19\x74\xc3\x4d\xab\xa8\x97\x91\x1e\xa7\xd1\xb9\x10\xa8\xb2\x23\x50\xa5\xb7\x0a\x58\x66\xa1\x6e\x3d\x3c\x25\x16\xdc\xad\x48\x5c\xbb\xb5\x27\x75\x53\x73\xdd\x09\x5b\x09\xec\x1f\x3b\x17\xa0\x27\xfa\x6b\xfe\x78\x09\x04\x2c\xd6\xd6\xae\xfd\x02\xd4\xd7\xae\x6f\x33\x88\x66\x2b\x44\x93\xd6\xc3\x41\x85\x5a\xa7\x74\xef\xcf\xdb\xb7\xe6\xa5\x88\x3d\xd1\xe8\xca\x24\x8d\x79\x2a\x3c\xdf\x99\x36\xbf\x47\xfd\xfd\x6c\xae\xa4\x43\xa0\xc9\x89\x16\xf1\x38\xf5\x29\x66\x49\x3b\xf0\xec\x7d\xba\xd1\xfb\x7a\x62\x1a\xec\x8a\xc3\x6e\x11\x05\x6f\xcb\x7e\x34\x0c\x06\xc3\x91\x1b\x0c\xcf\x87\xc8\x56\xbc\xff\xed\xe2\xd2\x11\x2a\x6a\xaf\xc9\xa3\x9e\x5f\x6f\xd8\x87\xde\x90\xb9\x44\x87\xa5\xf2\x80\xee\x0c\x65\x38\xd5\x77\xd3\x15\x64\xb1\x4c\xd8\xeb\xdf\x12\x19\xde\xea\xe0\xdf\xaf\x6a\xc7\x33\x7f\xff\xb0\xfb\x60\xfe\x8f\x6f\xfa\x84\x8a\x9b\xcf\x9b\xcf\x32\x76\xc8\xa4\xeb\x49\x1a\x7c\xc9\xee\x2e\x16\xea\xdf\xee\x2e\xd8\x4d\xa9\x37\xc9\xb7\x58\xdb\x5f\x57\x49\x1e\xe8\x38\xe5\x0e\x0d\x00\x85\x8f\x06\xbe\x63\x2c\x4a\x22\x70\x13\x26\x9f\xcc\xd8\xea\xf0\xca\x48\xc8\x28\x10\x33\xa6\xdf\x49\x51\xe3\x76\x4e\x91\x87\x6f\xed\x40\x64\xaf\x3f\xa4\x7b\xd5\x8b\xc6\xeb\x8f\x09\xe5\x68\x48\xca\x51\x54\xd1\x6a\xfa\xaa\x1e\xad\x5a\x37\x4e\x44\x01\x77\xf6\x97\xe0\xcc\x7d\x23\x97\xe1\xe0\x4b\x07\xc9\xed\x5c\x24\xb7\x1e\x09\x48\x38\xc7\xb3\x5f\xe0\x4b\x37\x7e\xd1\x63\xd5\x5f\xbb\xec\x2b\xd6\x8a\x5b\xda\x55\xa2\xe1\x57\xc1\x3b\xad\x1b\xcc\xa2\xdf\x63\x4f\xac\x56\x81\x8b\xe1\x77\xd8\x91\xb0\xbc\x81\x5d\x80\x5d\x80\x5d\x80\x5d\x4e\x8d\x5d\x0e\x3f\xed\x76\x03\x98\x9a\xe3\x6e\x90\x2a\x3c\x30\x0c\x94\xf9\xf3\x53\xe6\x81\x61\xda\x9c\x37\xc0\x30\x30\xdf\x40\x59\x02\x86\xe9\x1e\xc3\xbc\xc4\x7e\xb1\x1b\xc8\x8c\x45\xa6\x03\x96\x81\x24\x77\x2e\x92\x5c\x8f\x04\x26\x9c\xeb\xd9\x2f\xc0\x32\xe3\x17\x45\x86\x8c\x65\x28\x53\x5b\x46\x61\x3a\xe5\x2e\x26\x9f\x6f\xe8\xfa\x8f\xbe\xbb\xe2\x41\x31\x37\x20\xcf\x32\x78\x9b\xb6\xce\x0a\xd1\xb0\xef\xb2\x38\xda\x09\x3d\x63\x92\x57\x72\x28\xa5\xe6\xcf\x04\x1d\xe6\x87\x49\x2a\x78\xc9\x0e\x59\x15\x83\x9e\xaa\x86\xad\x42\x02\xb8\xcf\x32\xbe\x09\x82\x4c\x2a\xea\x05\xcb\xd9\x78\xc3\x79\x65\xed\xdb\x62\xa5\xa3\xa4\x93\x9f\x1e\x45\x78\xc6\x09\xfc\x68\x08\x47\x9b\xc5\x0f\xb5\x91\x46\x5c\x1b\x69\x37\x26\xda\x55\x17\x69\xab\x31\xaa\x05\x04\x86\x6a\x48\xa8\x86\x84\x6a\x48\xa8\x86\x34\xb6\x6a\x48\xbb\x77\xde\xda\x4a\x48\x1d\x3b\x1c\x1c\xad\xfe\xd1\xee\xe6\x6f\xae\x7d\xd4\xe7\x3e\xd8\xa7\xe2\xd1\xee\x3e\xd8\x5c\xed\xa8\xe3\x3e\x40\x8d\x23\xd4\x38\x42\x8d\x23\xd4\x38\x42\x8d\xa3\xce\x6a\x1c\x35\xd8\xfd\xd7\xea\x1b\x6d\xcd\xaa\x77\x46\xfe\x86\xcd\x5a\x33\xe2\x1a\x4d\xbb\xbb\x7b\x5b\x7d\xa6\xe3\xf6\x3b\xaa\x32\x75\x32\xa2\xeb\x15\x99\x3a\x1e\xd6\x93\xd6\x61\xda\xdd\x3d\x5b\x6a\x30\x75\xbd\x6d\xf6\xb5\xf2\xd2\xee\x4e\xab\x61\x17\x07\xdb\xf3\xcc\x5f\x7f\x37\xc4\x5f\x3b\x62\x93\xce\x99\x8a\xad\xb9\x06\xfd\x5e\x81\x0b\xe0\x61\xe0\x61\x0c\x3c\x0c\x3c\x0c\x3c\x0c\x3c\x0c\x3c\x0c\x3c\x0c\x3c\x0c\x3c\x0c\x3c\xac\x67\x2c\x08\x3c\x0c\x3c\x0c\x3c\x0c\x3c\x0c\x3c\x0c\x3c\x0c\x3c\x6c\x88\x3c\x0c\x89\x47\x00\x02\x01\x02\x01\x02\x7b\x3d\xa2\x00\x81\xe5\xee\x01\x08\x1c\x15\x08\xac\xa9\x9d\xdb\x11\x0f\x2c\x42\xc0\xd0\x4a\x3c\x72\xc1\x1e\xfc\xd0\x6d\x15\x06\x5e\xe6\xfa\x0d\xe9\x70\x46\x16\x56\x2a\x52\xae\xb8\x4d\x4a\x0a\x7f\xe1\xd9\x2f\x43\x89\xc0\x88\xc0\x88\x03\xc2\x88\x40\x88\x40\x88\x40\x88\x40\x88\x40\x88\x40\x88\x40\x88\x40\x88\x40\x88\x40\x88\x40\x88\x40\x88\x40\x88\x40\x88\x40\x88\x40\x88\xbd\x47\x88\x28\xc4\x00\x1e\x0a\x1e\xda\x5f\x7a\x06\x1e\x0a\x1e\x0a\x1e\x0a\x1e\x5a\xe9\xb4\x23\xf1\x50\x47\xc4\xe6\xeb\x45\x42\x58\xc8\x97\x57\x07\x91\xce\x93\x24\xf4\xad\x8c\xb6\x27\x52\xe6\x87\x0b\x19\x2f\xb3\xd9\xcd\x99\xa6\x30\x9b\x89\xa5\x27\xd2\x0f\x85\x4e\xb8\xb9\xfd\xf2\x5f\xd5\x3b\x90\xc4\x78\x4f\x7a\x98\x75\xe2\xc0\xd9\x61\x71\x75\x14\xee\x7a\x55\x7c\xf3\xee\xf5\xf4\x78\x3d\xec\x25\x55\xd2\xfd\xf5\x5e\xd9\x7c\x3d\xfd\x79\x7d\x73\xfb\xe5\x7b\xdd\x7d\x58\x55\xfb\xaf\x2a\xdb\x91\x14\x8f\x3d\xa2\xc5\xf5\x3f\x8f\xd7\x2f\x5a\x5f\xc5\x7f\xf6\xbd\xd0\x0f\x3d\x6b\xf7\x28\xae\x3c\x6d\x62\x69\xd7\x73\x47\x3f\x93\x39\x32\x08\x84\x63\x4f\x9d\xc2\x02\xf8\xa1\x3f\xe7\xbb\xfe\x9c\x2d\xeb\x46\x3f\xa8\xbc\x74\x3e\x64\x4f\x6d\xf4\xc4\x6e\xcb\x75\x74\x32\xa7\x3f\x52\xab\xbf\x51\x77\x26\xad\x94\xe8\x00\x5c\x06\x5c\x06\x5c\x06\x5c\x1e\x1b\x5c\x6e\x56\xdc\xa5\x16\x30\x1f\xad\xee\x0e\xca\x23\x35\x1e\xa8\x53\x96\x47\x3a\x9a\x47\xc0\x1e\x05\x89\x6a\x89\xf8\xd1\x7a\xe4\x8f\xa2\x51\xcc\x0f\x59\xa2\x6d\x55\x6c\x2e\x16\xda\x75\x31\xa3\x47\xb9\x28\x61\x76\x2f\x9a\x3a\x85\x82\x50\xa1\x0c\xa7\xa1\xf0\x38\x4d\x50\x63\xd6\x2a\x16\x8e\xd2\x24\x39\x5b\x1a\x46\x7e\xf4\x97\x4b\xe1\xfa\x3c\x15\xc1\x73\xee\x53\x98\x1f\xb9\x7e\x70\x69\xcc\x56\xd4\xe9\xcc\x8b\xb9\x43\xab\xc6\x97\x6e\x26\x10\xe4\x87\x36\x39\x6c\xda\x59\xba\x4a\xd4\x47\x16\x87\x8b\xab\x3b\x6d\x83\xcc\x4b\x16\x7a\x0f\xb4\x8f\x98\xe9\xef\xd4\xb5\x2a\x6b\xbe\xf1\x80\x61\xa6\x6f\xbe\xa5\x4f\xae\x33\x05\xee\x30\x06\xf6\x65\xfa\xef\xe3\x0c\xd2\xac\x5f\x36\x3b\x84\x1c\x6d\xfa\xc3\x35\x04\xae\x21\x70\x0d\x81\x6b\x08\x5c\x43\x3a\x73\x0d\x69\x78\x16\xac\xb9\x87\x1c\xef\x58\xfc\x58\x88\x2b\x8b\x02\xc1\x13\x91\x6d\x41\xb7\xb1\x8c\xb8\x47\xd2\xd1\xad\x0c\x7c\xe7\xb9\x14\x88\x60\x27\x5d\x1e\x98\xa6\xa6\xdd\xf5\xec\x97\x19\xfb\xa1\xf7\x33\x2d\xba\x44\x22\x54\x8b\x25\x3f\x53\x05\x93\x71\x74\xcf\x43\x1b\x18\x11\xaf\xc4\xd5\x82\x07\x56\x57\xbe\xbb\xd0\x3f\xdf\x5d\xb0\x85\x1f\xf2\xc0\xff\xc7\x1e\x24\x73\xc1\xb8\x4b\xa4\x59\x5e\x69\x0a\xe7\xe6\x6a\x98\x7e\xfc\x24\xc9\x6f\xd2\xfa\xe9\x8c\x7d\xf2\x69\x73\x2c\x7c\xba\x8c\xd7\xdb\x96\xfb\x15\xa4\x5a\x3d\x26\x1d\x45\xa6\xf7\x87\x0c\xa8\x6e\xc1\x47\xdb\xf6\x8d\x22\xcf\x41\x95\xb4\xf7\x52\xcc\xa8\xe9\x6a\xc1\xde\xcb\x27\xe6\xf1\x78\xce\xbd\x92\xd9\x32\x53\x6a\x44\xbc\x90\xf1\x52\x8d\x49\x6d\x7f\x7d\xab\xb4\x68\x73\x77\x91\xd0\x6b\x25\xd6\x48\xf7\xad\xaf\xa4\x49\xc7\x77\x73\x55\x98\x64\x05\x5d\xf0\xdc\x8e\x71\x42\x1c\x8f\x7e\xb5\xd2\xc0\xac\x30\x98\xf6\x1c\xc9\xc0\x7e\x16\xe4\x53\x7e\xd9\x8c\xdd\x38\x8e\x88\x74\xa9\xd5\xa2\x66\x37\xd1\x6d\x98\xb0\xa9\x99\x80\xe5\x09\x9a\xbc\x67\x93\x5f\xb9\xf3\xe0\xc5\x72\x15\xba\xea\x2a\x0a\x98\xa1\x8b\x2a\x1d\xa7\x45\x48\x23\x1f\x97\x1f\x62\x5b\x30\xcf\x9e\xf4\x9e\x4d\x3e\xcb\x58\x14\x1e\xcb\x1c\x9e\x38\xdc\x55\xad\x37\xfd\xa3\xe3\xa9\xe8\x79\x89\x56\x3d\xd7\x1e\xb8\xc8\x9e\x71\xc8\x84\x8c\xaa\xd3\xfd\x34\x12\xe7\x88\x3d\x80\x9a\x8d\xc3\x36\x2f\xa0\x53\x8d\x02\xfc\x81\x3a\x1b\xdf\x75\x9f\xa0\xe3\xd9\x36\x4e\xe9\x1d\xd4\xac\xb3\xb6\x78\x08\xbd\x54\xfe\xa9\x65\x78\x40\xcf\x7b\x62\xba\x1f\x29\x4f\x57\x4d\xf9\xdc\x00\x89\x73\xe1\xc6\x0d\xc1\xe0\xfa\x4c\xce\xe5\xa5\x36\xe2\xc2\x6b\x60\xf6\x86\x28\xf1\x06\xf4\xb7\x1a\x37\xbe\x2d\x64\xbc\xf5\xfc\x15\xda\x6e\x16\x1b\x5d\xdb\x0a\xf8\x59\xea\x8a\x03\x70\xb8\x7a\x62\x05\x86\xb7\x89\xc0\x11\x10\x7f\x3e\x01\xf1\xcd\xce\xa0\x5d\x41\xf1\xc7\x53\xd6\xe0\xc1\x00\x0f\x06\x78\x30\xc0\x83\x01\x1e\x0c\x75\x9b\x2f\xd0\xf8\x80\x7a\x04\xb4\x14\xb4\x14\xb4\x14\xb4\x14\xb4\x14\xb4\x74\x5c\xb4\x14\x00\x03\x00\x03\x00\x03\x00\xa3\x73\x80\xb1\x07\xe4\xef\x69\xb0\x73\xb3\x2e\x5c\x0f\x78\x7e\xa9\xc5\xad\x57\xe8\x67\xe3\x0d\xe7\x95\x72\x78\x56\x62\x1e\x8f\xd7\xb3\x8d\x56\xfd\x71\x87\x38\xee\x06\x4e\x6d\xd5\x2f\x3d\x19\x64\x3a\x20\x2f\xf1\x50\xb2\xdc\xbc\xaa\x8c\xe2\x45\x24\x93\x96\x89\x9a\xd6\x6d\x18\x3f\x08\x9e\xe9\x9b\x3b\xc4\x67\x87\x45\x90\x6e\x49\x9f\x74\xa4\x4d\xa5\x95\x08\x53\x44\x39\x15\x27\x41\x6f\xa3\x9c\xc8\xc6\xf1\x95\x87\xdc\x13\xb1\xb6\xd6\xe9\xb4\x61\x49\x22\x1d\x9f\xd4\xcf\xcc\x2e\xc6\xc9\xbc\x29\x63\x26\xc2\x54\xc9\x83\x56\x1f\x5f\xf2\x07\xd5\x8b\xe9\xbd\x48\x84\x15\xaa\x8a\xb1\x3c\x36\xe6\x87\x84\x4a\xb2\x81\xc9\x98\x5d\xbf\xfd\x97\xba\x36\xe6\x0e\x41\xaf\x40\x86\x9e\x16\xa1\xc8\x4e\xe5\xc8\x30\xe5\x7e\xa8\x77\x31\xb2\x03\xe5\xd7\x12\x08\x30\x48\x8e\xcd\x9f\x33\x2d\xc1\x93\x01\x0f\xbd\x99\x8c\xbd\xab\xe8\xc1\xbb\x5a\x85\xbe\x23\x5d\x71\xf5\xd3\x97\xe4\x56\x3d\xe5\x60\xc3\xb2\xe9\x9c\x36\x87\xa7\x57\x32\xd7\x58\x44\xa1\xa6\x62\xd0\xdb\x06\x62\xd0\x07\x6d\x33\xeb\x77\x33\xde\xee\x6c\x86\xf6\xec\xed\x77\x3b\xc6\x28\x95\x92\xa0\x33\x40\xa9\xf4\x15\x7b\x79\x2a\x91\x9a\x42\x40\x1d\x66\x14\x39\x4c\xf2\xab\xcd\x22\x72\x7a\xc9\x6f\x20\xb9\x43\x20\xd9\x15\x07\xb9\xb7\x92\x1d\xa2\xb5\xcf\x28\x5a\x1b\x61\x69\x08\x4b\x43\x58\x1a\xc2\xd2\xa0\x94\x6e\x5a\x45\xbd\x8c\x01\x39\x8d\x12\x87\x10\x96\x2d\xba\x9b\x51\x56\x06\xa8\xbd\x65\x76\xf6\xd6\x03\x57\x62\xc1\xdd\x8a\x38\x76\x88\xda\xa5\x1e\x73\x88\xd2\x85\x3d\x08\x96\x98\x03\x57\xb3\x27\x06\x69\x88\x79\x09\x1e\x2c\x95\x32\x69\xf6\x39\x43\x2a\x6e\x32\x5c\xfa\x49\x8e\x07\x07\xe5\xb4\x9e\xd2\xbd\x3f\x6f\xdf\xe4\x96\x22\xf6\x44\xa3\x2b\x93\x34\xe6\xa9\xf0\x7c\x67\xda\xfc\x1e\xf5\xf7\xb3\xb9\x92\xb6\xd3\x26\xe7\x46\xc4\xe3\xd4\xa7\xb8\x20\xed\x24\xd3\xc2\x19\x42\x5f\xd0\x3b\xcb\x5d\x57\xcc\x76\x8b\xa4\x76\x5b\xf6\x63\x61\xb0\xe7\x8d\xdc\x9e\x77\x3e\xa4\xb6\xe2\x7d\x6f\x17\x97\x8e\x10\x51\xfb\x50\x1e\x75\xfc\x7a\xc3\x1e\xf5\x86\xac\x19\x3a\x2c\x94\x07\x74\x67\x28\xc3\xa9\xbe\x9b\xae\x20\x83\x62\xc2\x5e\xff\x96\xc8\xf0\x56\x07\xdf\x7e\x55\xbb\xa1\xf9\xfb\x87\xdd\x23\xf3\x7f\x7c\xd3\x27\x84\xdc\x7c\xde\x7c\x96\xb1\x43\x16\x57\x4f\xd2\xe0\x4b\x76\x77\xb1\x50\xff\x76\x77\xc1\x6e\x4a\xbd\x49\xbe\xbd\xda\x3c\xba\x4a\xf2\x40\xc3\x29\x77\x68\x00\x28\x7c\x33\xf0\x1d\x63\xf0\x11\x81\x9b\x30\xf9\x64\xc6\x56\x87\x37\x46\x42\x46\x81\x98\x31\xfd\x4e\x8a\xda\xb6\x73\x8a\x3c\x6c\x6b\x07\x22\x7b\xfd\x21\xdd\xab\x5e\x34\x5e\x7f\x48\xa8\x20\xc3\x57\x41\xa2\x8a\xbb\xea\x00\x95\x90\x55\xeb\xf6\x84\x28\xe0\x4e\x1b\xe2\xa0\x79\xd2\xd9\x08\x84\x70\xe2\x83\x68\x78\xce\xa2\x61\x8f\x24\x30\x08\x0a\xd9\x2f\x70\xe2\x83\xbc\x93\xcb\x3b\xab\x41\x9a\x5c\x5f\xb1\xd6\x7c\xdf\x94\x22\x1a\xcb\x47\x1e\x1c\x54\xd0\x6e\x2f\x28\x63\xdf\x64\x8f\xbf\xa3\x01\x9a\x1b\xdb\x44\x6c\x7e\xd8\x35\xcc\xbf\x01\xd4\x00\xd4\x00\xd4\x8c\x02\xd4\xb4\x7b\xae\xec\x03\x6d\x6a\x0f\x96\x41\xea\xea\x80\x37\xd0\xd0\xcf\x4f\x43\x07\xbc\x69\x73\xde\x00\xde\xc0\x26\x03\xb5\x04\xf0\xa6\x87\xf0\xa6\x6d\xd3\xc3\x3e\x20\x67\x3c\x42\x22\x80\x0e\xc4\xc5\x73\x16\x17\x7b\x24\x95\x41\x78\xc8\x7e\x01\xd0\x81\x0c\x04\xa0\x93\x03\x9d\x44\x87\x45\x75\x8e\x73\xf4\x7b\x8e\x0e\x73\x4c\xd4\x17\xb6\x3d\xec\x17\xe6\xdf\x80\x72\x80\x72\x80\x72\x46\x81\x72\xda\x3c\x53\xf6\x01\x39\x35\x87\xca\x20\x35\x74\x60\x1c\xe8\xe5\xe7\xa7\x97\x03\xe3\xb4\x39\x6f\x80\x71\x60\x89\x81\x4a\x02\x8c\xd3\x43\x8c\xd3\xae\xc9\x61\x1f\x88\x33\x16\x01\x11\x08\x07\xa2\xe2\x39\x8b\x8a\x3d\x92\xc8\x20\x38\x64\xbf\x00\xe1\x40\xfe\x39\x1f\x84\x43\x55\x7d\xb6\x80\x9c\x4e\xd1\x8d\xa9\x06\x19\xba\xfe\xa3\xef\xae\x78\x50\xac\x2c\xc5\xb3\xfa\xaf\x1b\xfb\x64\x56\x48\xbe\xfa\x2e\x4b\xdb\x3a\xa1\xa7\x4e\xf2\xca\xe0\xa5\x52\xcf\x99\xe0\xc5\xfc\x30\x49\x05\x2f\x99\x5d\xab\x62\xd9\xd3\x1e\x56\xbb\xdf\xfd\x7e\x24\x5f\xdb\x78\xc3\x79\x55\x82\xda\x62\x7c\xa4\x42\x66\x9f\x1e\x45\x78\xd6\x3b\x1b\x0d\xe2\x39\x56\x81\xa2\xb4\xb6\x34\x07\x7e\x95\xf2\x61\xc9\xe3\x87\x24\x37\xc9\xe9\x1d\x89\x4a\x06\x27\x46\xce\x7c\x8e\x04\xbb\xbb\xf8\xf5\xdb\xb7\xff\xfe\x7a\xf3\xfd\xbf\xef\x2e\xf2\xa2\xbd\x3a\x6d\xad\x24\x35\xc1\x5f\x46\x81\xa0\xea\xbc\xf3\xec\xa9\x4b\xfe\xcc\x7c\x2f\xd4\x49\xc3\xfd\x44\x9b\x94\x94\x44\x99\x5f\xc2\x63\xc1\x8a\xc5\x4d\x75\x25\xdc\x49\xc2\x5c\x3f\x71\x62\xa1\xbe\x39\x2f\xad\x5e\xd0\x4a\x4c\x45\xde\xf2\x83\xb2\x1a\xb9\x3c\xd5\x85\x66\x6d\x86\x60\x3f\x4c\x45\xfc\xc8\x83\x4b\x16\xca\x98\x3e\x8b\x4a\xb8\x66\x65\x7d\xab\x95\xa1\xa9\xee\xfe\x33\xb3\x6d\x36\x25\x94\xb3\x02\xae\x89\xd2\x52\xd4\x87\xd9\xdc\xe4\xa6\xd2\xaf\x29\xf8\x5e\x4a\x93\xad\x7e\xa5\x2e\x30\xd9\xae\xef\x05\x5b\x08\x9e\xae\x62\xc1\x3c\x9e\x0a\x56\x19\x08\xf3\x24\x11\x2a\x11\x5b\x57\xcc\x8d\x7c\xfd\x71\x9b\x1e\xbb\x27\x36\xab\x19\xfe\x7a\x86\x56\x67\x80\x6b\x01\x09\xfe\x51\x2c\xba\xac\x6d\xbc\x85\x3c\xf2\x89\x48\x75\x85\x63\x53\x35\x5b\x75\x78\xa9\xdc\x72\x96\xf0\x5b\x77\xca\x8c\xfd\xf0\x43\x47\x54\x52\xc4\x9b\xd1\x34\x2a\x49\xb9\x96\x73\xa9\x9c\x75\xf6\x21\xfa\x56\x7a\x38\x57\x3a\xf2\xa3\x2f\x57\x89\xa9\xe1\x6d\x8b\xeb\xaa\xd5\x90\x57\x58\xd6\xbf\xe5\xeb\x8f\xbd\x16\xff\x76\x44\x94\xd7\xd1\xd4\x8f\x94\x8b\xec\x25\x6f\xb2\x1c\xd6\xe6\xfb\x74\x9d\x6f\x4a\x3c\xcf\xab\x9f\xe2\xab\x95\x25\xf4\x6c\xc8\x94\xec\x6c\x0a\xe5\xd6\x96\xea\x6d\xea\x0e\xd2\xdd\x44\xcc\xb4\x9e\x6e\xcb\x70\xbb\x2b\x41\xf5\xe1\xff\x1d\xf9\x46\x02\x78\xed\x89\x50\xc4\x84\xfc\x16\x4a\x61\x4f\x25\x5b\xf8\x8b\x54\x88\x90\x2d\xfd\x70\x95\x8a\xe4\x0d\xa3\xda\xea\x8e\x0c\x17\xbe\x67\x4b\x02\x68\x21\xc5\xd6\x49\xcf\x27\x67\x79\x15\xe9\x93\xd0\xb5\xc2\xc7\xff\xbd\xfe\x3f\xec\xbb\x49\xdd\xfd\x49\x7d\x82\x70\x8d\x39\x20\x95\x9e\xfe\x40\x73\x65\xd6\xa2\x54\x3e\x88\x30\x6b\xb2\xa9\xe5\x1c\x0a\xe1\x56\x4a\x40\x07\x54\xdf\xdd\x4f\xb5\x5a\x1b\x8b\x24\xe5\xba\x6e\xb8\x6f\xaa\xc6\xda\x72\xd7\xeb\xf5\xbe\x67\xec\x9b\x7a\xf5\x93\x6f\xb3\xcf\x9b\xb7\xa8\x91\x31\xdb\x80\xb6\x8d\x9b\x2a\xcb\xba\xac\x70\xa6\x7f\xd3\x17\xda\x3a\xd2\x05\xbd\x5c\x35\x96\x1a\xb7\xb3\x5b\xe8\xb9\xf4\xc1\x64\x97\xb7\x93\x9b\xca\xc4\x3f\x88\x67\x9d\x5b\x3d\xfb\xe7\x40\x9d\x2f\xc5\x9a\xd7\x4f\xf7\xbe\x2e\x27\xee\x87\x85\x0e\xc9\xae\xcf\x26\x72\xa1\x48\x74\xc2\xa6\x59\x2e\x7e\x5d\x26\x3b\x16\x7b\x96\xfa\xae\x74\xc6\x7a\x95\x6f\x93\xa7\x9d\x24\x21\x32\x0e\xa8\x09\xa9\xfe\xab\x07\xe5\x41\x3c\x9b\xba\xe9\xd9\x83\xef\x2e\x6c\x93\xef\x2e\x4c\x59\xf4\xcd\x75\xd4\x69\x83\x28\x57\x52\xcf\xce\x08\x1a\x39\x9a\x00\x66\x37\x2e\xf6\x5e\xb2\x56\x66\xd8\x2c\x9b\xec\xe4\x30\xe9\xe9\xcd\x88\x69\x03\x55\xca\x96\x7e\x92\xd0\x89\x50\xb2\x92\xed\xbb\xf3\xda\xa9\xd7\x8e\xcb\x42\xb3\xdd\xf6\x86\x25\x22\x4f\x59\xaf\xd6\x46\xec\x3b\x69\x56\xe7\x57\x6d\x4f\x59\xdb\xb3\x0a\x0d\xcf\x66\x9c\x34\x26\x2a\x97\xcb\x10\x8f\x22\x7e\x4e\xef\xfd\xd0\xdb\xb7\xf9\xf4\xb4\x1f\xe6\x6b\x06\xd3\x07\x01\x9f\x8b\xa0\xb5\x3e\xa0\xa7\x9d\xa2\x0f\x74\xd1\x7b\xb2\x26\x2e\xf9\xbf\xfd\xe5\x6a\xc9\xc2\xd5\x72\x2e\x62\xdd\x7a\xa3\xb4\xe8\xfe\xa1\xaa\xc5\x84\x6b\xf3\xa2\xdb\xb4\x0d\xd3\x41\xec\xab\xaf\xd0\xf5\x1b\xd6\x77\x37\x75\x7c\xab\x7f\xfb\x5f\x3b\xd7\xff\xd7\x96\x90\x08\xf3\xfe\xb6\xd5\x1d\xb4\x96\xab\x17\x20\xed\x44\x0e\x0f\x6d\x8d\x96\x7c\x2f\x4d\xf8\x52\x6d\x2e\x7e\xea\x67\x87\xae\xfe\x4a\x25\x1e\x88\x7c\xb7\x54\xaf\xd6\x6d\x51\xc3\xa4\x84\xd4\x34\xd5\xe2\x9a\x6e\xbb\x3e\x6c\x75\xdb\xc4\x13\x6d\x3b\x3c\x2c\x5a\x99\xd5\x46\xb7\x94\xab\x90\x1e\xa3\x5b\xf9\x7a\x15\xa9\x97\xe9\x2a\x35\xea\x5f\xde\xd8\xdd\x4d\x4b\x84\x9c\x36\x74\x7b\x77\xb1\xe8\xff\xc2\x0f\x52\xa1\xce\x38\x75\xee\xa8\x6d\xc4\x29\xcb\xb0\x25\x29\x44\xdb\xe4\x9d\xcc\x11\xac\x7c\x46\xe9\x5a\x13\xa6\xe6\x7a\x76\x9a\x97\x84\x22\xda\x4b\x1f\xb9\x1f\x28\xa9\x31\x97\xcf\x55\x93\x9d\x7b\x29\x13\x2a\x2c\xad\x9e\x63\xf6\x50\x33\x16\xaa\x5b\x78\xec\xad\x48\x6c\xe7\xa1\x6b\x4f\x28\xea\x24\xd5\x36\xf3\x3d\xd9\xa3\xf3\xde\xfd\xb2\x60\xd9\x94\xca\x85\x11\x2b\xdf\x54\x1a\xe0\x27\x4c\x2c\xa3\xf4\xb9\x2c\x88\x65\xd2\x37\x4f\x95\xcc\xb2\xad\x41\xdb\x0e\x03\x7f\x51\x39\x0a\xf4\xe9\x91\xcd\x4b\x6f\xc5\x63\x1e\xa6\xc2\x82\x8e\xbc\x58\x4c\x92\x2f\x7b\x3a\x51\xa8\x20\x7c\xfe\xed\xd9\xc1\x96\x89\x7c\xa9\x64\x7e\x92\xac\x8c\x12\xe0\x87\x5e\x20\xf2\x15\x92\x49\x19\x76\xc2\x4d\xad\x39\x5e\x69\x1d\xd9\x2b\xf7\x3b\x69\xed\x21\x4b\x3a\x46\xb2\x12\x6e\xed\x71\x4b\xba\xce\x6a\x9e\xa8\x8b\xc3\x34\x6b\x81\x5b\xf0\x0d\xf8\xc3\xa8\x29\x89\x5c\x8a\xd4\x5f\x0a\xd5\xf6\x85\x88\x63\x5d\xa5\x9f\x57\x24\xaa\x5c\xc0\x50\x23\x2a\xc2\x64\x15\xdb\xee\xe3\x56\x44\xb2\xac\x41\xf7\x9a\x6e\x32\x2d\x4c\x12\x86\x58\xb2\xe4\x41\x20\x62\xe6\xdc\xaf\xc2\x07\x5d\x12\x9e\xa9\x6d\x93\x05\x3c\xf6\xec\x40\xd3\x8a\xd7\x8f\xd7\x1a\x59\x22\x04\x4d\xbc\x48\x26\x89\xaf\x26\x9c\xe9\x36\x9a\x70\xc5\xf5\xa5\x5d\xd4\xdc\x5c\x27\xa3\xf7\x08\x57\x8f\x07\x89\xdf\xe6\x80\x37\x73\xd8\x14\x78\xa2\xaf\x7e\xe2\x89\xe5\x60\x56\xef\x54\x7d\xb2\x2e\xe1\x68\xb9\x9f\x27\x6a\x80\x9d\x55\xa0\x8b\x1c\xe5\xd3\x66\xef\xdd\x5f\x75\x52\xfd\xae\x5f\x57\xe5\xe9\x8c\xfc\x2f\x9b\xb5\xa6\x2a\xbb\x25\x22\xb5\x13\x37\x8d\xb9\xaf\x76\xee\x90\x3d\xa9\x11\xb6\x57\xda\x59\xa0\x2e\xb3\x6b\x29\xab\x5c\x14\xdb\x02\x52\x6a\xc7\x14\x19\xb5\x2a\x18\xfe\x7c\x79\xe5\x4a\x27\xb9\xa2\xb5\xa2\x76\xe8\x2b\x9a\xed\x53\x1e\xf9\x57\x3c\xf2\xa7\x8e\x0c\x95\xca\x97\x5c\xfd\x94\x55\x25\xca\x5e\xb8\xa0\x65\x9d\x72\x3f\x48\x68\x4b\x2a\x0a\x10\xe4\x4e\xb3\x67\x77\x57\x1a\x7f\xc2\x7e\xff\x4a\xdb\x6d\x76\x24\x25\x54\x5b\xaa\x3a\x36\x4a\xd4\x88\xa2\xc0\xd7\x1b\x4c\xb6\x4b\x6a\x37\x25\x3f\x61\xf7\xbe\x77\x4f\xde\x4b\x8e\x5c\x2e\x45\x48\x65\xbd\x8a\x23\x57\x7a\x97\x31\x0c\xa8\x2e\xcd\x9f\xa4\x36\xed\x58\xd4\xbd\x58\x5d\x3b\xbc\x11\xfd\xba\x6e\x93\xee\x76\x58\xff\xf0\x97\x42\x1d\x58\xd6\x60\xa1\xba\x56\xf3\x10\x23\xf2\xd1\xa1\x41\x9b\x56\xa2\xcb\x5c\x59\x0b\x80\x95\x53\x78\x10\x5c\xb2\x58\x78\x3c\x76\x09\x25\xab\x5d\x3e\x7c\x66\xdc\x49\xfd\x47\x3f\x7d\x56\x27\x9b\x1f\xda\xff\xdb\x77\x7f\x49\xf5\xe7\xd5\x95\xc7\xeb\x7a\xdb\xfc\x4b\x2b\x8e\x32\x2e\x02\x19\x5d\xe8\x4b\x5d\x37\xa7\xa3\x55\x0f\x9e\x2e\x4c\x66\x64\xa6\xf4\x5e\x2c\xf5\x61\xaa\x49\x01\x75\x88\xeb\x5e\x9a\xe3\xea\xd2\x5c\xbb\x94\x8f\x24\x91\x15\x54\x49\xf6\x83\x84\xa8\xe7\xea\x74\xde\xb7\xd3\x6a\xc0\xc6\xc1\xf6\x3c\xf3\xd7\xdf\xed\xc1\xb4\x9a\x12\xaf\x1d\x31\xb5\x22\x48\x0b\xed\xe1\x2f\x17\xec\xc1\x0f\xb7\x78\x28\xb5\x02\xd4\x2e\x73\xe1\x9f\x14\x1c\x23\x28\x2a\xfd\x21\xd7\x6a\x26\x25\x6d\xb8\xf0\xec\xb6\x70\x1c\x50\x1c\x50\xdc\xa0\x50\x1c\x30\x1c\x30\x1c\x30\x5c\x7e\x21\x30\x1c\x30\x1c\x30\x1c\x30\x1c\x30\x1c\x30\x1c\x30\x1c\x30\x1c\x30\x1c\x30\x1c\x30\x1c\x30\x1c\x30\xdc\xf0\x30\x1c\xb2\xbc\x80\x32\x82\x32\x82\x32\xf6\x60\x44\x41\x19\xcb\xdd\x03\xca\x38\x34\xca\x38\x17\x29\xbf\xbe\x3a\x88\x21\x9e\x24\x70\xb7\x32\xea\x9e\x48\xcb\x92\xbc\x1e\xe0\x2d\xd8\xcf\x13\x69\x19\xfa\x51\x0f\xdc\xdc\x7e\xf9\x5e\x77\x33\x82\x96\xf7\x64\x70\x85\x8e\xa4\x18\xc6\x71\x81\x38\x9a\x2b\x85\xbb\x5f\x15\xbf\xa0\xf9\x72\x6b\x16\x20\xab\xf5\xa7\x76\x79\xbe\x7e\x26\x73\x64\x10\x08\xc7\x9e\x0b\x87\xe4\x18\xd1\x0f\xaa\x59\x49\x1f\xb2\x47\xf7\xa0\xfe\x6f\x27\x53\xfc\x23\x35\xfd\x1b\xf5\x69\xd2\x4a\x2e\x11\xe0\x23\xe0\x23\xe0\x23\xe0\xa3\xb1\xe1\xa3\x66\x59\x68\x6a\x11\xd2\xd1\x12\x04\x21\x8f\x53\xe3\x81\x3a\x65\x1e\xa7\xa3\x31\xbf\x3d\x32\x27\xd5\x32\xaf\xa3\xf5\xc8\x1f\x45\xed\xde\x0f\x59\xa2\x95\x6e\x36\x17\x0b\xed\x9c\x94\xd9\x87\x73\x51\xc2\xec\x5e\x34\x75\x0a\x99\xab\x42\x19\x4e\x43\xe1\x71\x9a\xa0\x46\x3f\x2f\x66\xb8\xd2\xac\x28\x5b\x1a\x46\x88\xf4\x97\x4b\xe1\xfa\x3c\x15\xc1\x73\xee\x35\x94\x1f\xb9\x7e\x70\x69\xf4\x6f\xea\x74\xe6\xc5\xdc\xa1\x55\xe3\x4b\x37\x13\x08\xf2\x43\x9b\x5c\xb2\xec\x2c\x5d\x25\xea\x23\x8b\xc3\xc5\xd5\x9d\xb6\x41\xe6\x25\x0b\xbd\x07\xda\x47\xcc\xf4\x77\xea\xac\x9d\x35\xdf\x78\xc0\x30\xd3\x37\xdf\xd2\x27\xd7\xd9\x34\x76\x58\x35\xfa\x32\xfd\xf7\xc1\xbd\xcd\xfa\x65\x33\xf2\x3d\xda\xf4\x07\xfc\x05\xfc\x05\xfc\x05\xfc\x05\xfc\xed\x0c\xfe\x36\x3c\x0b\xd6\x00\xf0\xf1\x8e\xc5\x8f\x85\x00\x93\x28\x10\x3c\x11\xd9\x16\x74\x1b\xcb\x88\x7b\x24\x1d\xdd\xca\xc0\x77\x9e\x4b\xae\xc6\x76\xd2\xe5\x11\x2a\x6a\xda\x5d\xcf\x7e\x99\xb1\x1f\x7a\x3f\xd3\xa2\x4b\x24\x42\xb5\x58\xf2\x33\x55\x30\x19\x47\xf7\x3c\xb4\xae\xcf\xf1\x4a\x5c\x2d\x78\x60\x75\xe5\xbb\x0b\xfd\xf3\xdd\x05\x5b\xf8\x21\x0f\xfc\x7f\xec\x41\x32\x17\x8c\xbb\x84\xcc\xe4\x95\xc6\x09\x6e\xae\x86\xe9\xc7\x4f\x92\xfc\x26\xad\x9f\xce\xd8\x27\x9f\x36\xc7\xc2\xa7\xcb\x78\xbd\x6d\x39\x20\x4d\xb5\x7a\x4c\x3a\x8a\x4c\xef\x0f\x19\x50\xdd\x82\x8f\xb6\xed\x1b\x45\x9e\x83\x72\x8a\xef\xa5\x98\x51\xd3\xd5\x82\xbd\x97\x4f\xcc\xe3\xf1\x9c\x7b\x25\xdb\x65\xa6\xd4\x88\x78\x21\xe3\xa5\x1a\x93\xda\xfe\xfa\x56\x69\xd1\xe6\xee\x22\xa1\xd7\x4a\xac\x91\xee\x5b\x5f\x49\x93\x8e\xef\xe6\xaa\x30\xc9\x0a\x3a\xf5\xbb\x1d\x63\x75\x58\x9b\x93\xd4\x4a\x03\xb3\xc2\x60\xda\x73\x24\x23\x94\x99\x1b\x7f\xf9\x65\x33\x76\xe3\x38\x22\xd2\x39\x61\x8b\x9a\xdd\x44\xb7\x61\xc2\xa6\x66\x02\x96\x27\x68\xf2\x9e\x4d\x7e\xe5\xce\x83\x17\xcb\x55\xe8\xaa\xab\xc8\x25\x9e\x2e\xaa\x74\x9c\x16\x21\x8d\x7c\x5c\x7e\x88\x6d\xc1\x3c\x7b\xd2\x7b\x36\xf9\x2c\x63\x51\x78\x2c\x73\x78\xe2\x70\x57\xb5\xde\xf4\x8f\x8e\x98\xa0\xe7\x25\x5a\xf5\x5c\x7b\xe0\x22\x7b\xc6\x21\x13\x32\xaa\x4e\xf7\xd3\x48\x9c\x23\x76\x65\x68\x36\x0e\xdb\xdc\x19\x4e\x35\x0a\x70\x6c\xe8\x6c\x7c\xd7\x9d\x1b\x8e\x67\xdb\x38\xa5\x9b\x43\xb3\xce\xda\xe2\xea\xf0\x52\xf9\xa7\x16\xe4\x81\x44\xef\x89\xe9\x4c\x5d\x83\x71\x03\xe8\xc2\xdd\x1b\xc2\x41\xf5\xc1\x9c\x0b\x4d\xbd\x8f\x0c\xad\x34\x71\x3d\x3c\xb4\xf5\x20\x77\x6d\x41\x8b\x8d\xd6\x6d\x45\xfd\x9d\xf1\xed\x5b\xe8\xb8\x7a\x62\x1d\x1b\x6f\x93\x88\x23\x02\xf6\x7c\x22\x60\x9b\x1d\x49\xbb\xa2\x60\x8f\xa7\xbb\xc1\xa1\x01\x0e\x0d\x70\x68\x80\x43\x03\x1c\x1a\xea\x36\x5f\x90\xf2\x01\xf5\x08\xe0\x29\xe0\x29\xe0\x29\xe0\x29\xe0\x29\xe0\xe9\xb8\xe0\x29\x78\x06\x78\x06\x78\x06\x78\x46\xe7\x3c\x63\x0f\xe6\xdf\xd3\x20\xce\x66\x5d\xb8\x1e\xc8\x39\xaa\x0a\xec\x1b\x6f\x38\xaf\x04\xa4\xd5\x52\xa7\x64\xd9\xdf\x5c\xef\xf4\x0c\xa2\x20\x77\x43\xa8\x41\x54\x06\xdc\x09\x9e\x0e\xc8\x4b\x3a\x94\x64\x1e\xaf\x2a\x43\x79\x11\xc9\xa4\x65\xca\xa6\x55\x1d\xc6\x0f\x02\x6a\xfa\xe6\xae\x91\x5a\xbf\x0b\xda\xef\xd8\x68\x50\xd5\xfe\x7c\xa2\xa1\x50\xd5\x1e\x55\xed\x6b\x3e\x66\xa8\x32\xd2\xa0\x4a\xdb\xb7\xd6\x96\xb7\x3b\xdb\xa2\x7d\x81\x07\xd0\x98\xd1\x0a\xae\x24\x06\x0d\x55\x70\x7d\xc5\x5a\xca\x4a\x52\x53\x69\xa4\xc3\xe4\x24\x87\x49\x88\x9b\x13\x92\x9c\x5e\x42\x1c\x48\x1a\x12\x08\x7f\xc5\x41\xee\xad\xf0\x87\xc0\xef\x33\x0a\xfc\x46\x84\x1b\x22\xdc\x10\xe1\x86\x08\x37\xe8\xad\x9b\x56\x51\x2f\xc3\x49\x4e\xa3\xdd\x21\x1a\x26\xbb\x72\x6b\x34\xcc\x60\x35\xba\xcc\x3c\xdf\x7a\x0c\x4c\x2c\xb8\x5b\x11\xcc\x0e\xd1\xc2\xd4\x63\x0e\xd6\xc1\xb0\x25\xc1\x62\xf3\xe2\x15\xee\x89\xe1\x1a\x6c\x5e\x42\x1a\x51\x15\xa1\xa7\x20\x95\x5c\x1a\x0e\x4a\xa8\x3d\xa5\x7b\x7f\xde\xbe\xe7\x2d\x45\xec\x89\x46\x57\x26\x69\xcc\x53\xe1\xf9\xce\xb4\xf9\x3d\xea\xef\x67\x73\x25\xed\xae\x4d\xce\x92\x88\xc7\xa9\x4f\x11\x47\xda\xfd\xa6\x85\x73\x25\x5a\x2f\xd6\xdb\x17\xe3\x5e\x57\xf8\x77\x8b\x30\x77\x5b\x76\x93\x61\x30\xf9\x8d\xdc\xe4\x77\x3e\xbc\xb7\xe2\xdc\x6f\x17\x97\x0e\x40\x51\x9b\x51\x1e\xd4\xfc\x7a\xc3\x46\xf5\x86\x0c\x1e\x3a\xea\x94\x07\x74\x67\x28\xc3\xa9\xbe\x9b\xae\x20\x9b\x63\xc2\x5e\xff\x96\xc8\xf0\x56\xc7\xf6\x7e\x55\x5b\xa2\xf9\xfb\x87\xdd\x28\xf3\x7f\x7c\xd3\x27\x10\xdd\x7c\xde\x7c\x96\xb1\x43\x46\x59\x4f\xd2\xe0\x4b\x76\x77\xb1\x50\xff\x76\x77\xc1\x6e\x4a\xbd\x49\xae\xc3\xda\x82\xba\x4a\xf2\x38\xc6\x29\x77\x68\x00\x28\x3a\x34\xf0\x1d\x63\x13\x12\x81\x9b\x30\xf9\x64\xc6\x56\x47\x4f\x46\x42\x46\x81\x98\x31\xfd\x4e\x0a\x0a\xb7\x73\x8a\x1c\x78\x6b\x07\x22\x7b\xfd\x21\xdd\xab\x5e\x34\x5e\x77\x4b\xa8\x25\x1b\x9a\x31\x48\xb5\x24\x1a\x44\x55\xf6\xdd\x8a\xc9\xaa\x75\xbb\x43\x14\x70\xa7\x0d\x11\xd1\x3c\xe9\xbc\x84\x44\xf8\x08\x42\x66\xdc\x30\x4c\xe7\x23\x33\xf6\x48\x34\x83\x04\x91\xfd\x02\x1f\x41\x48\x43\x1b\xa5\xa1\xd5\x70\x8d\xb4\xaf\x58\xbb\x5e\x75\x4a\x75\x8d\xe5\x23\x0f\x0e\x2a\xc2\xb7\x17\xdf\xb1\x6f\xb2\xe7\xe2\x71\x59\xcf\x8d\x6d\x27\xb6\x46\x6c\x27\xad\x6e\x27\x60\x3e\x60\x3e\x60\x3e\x75\x57\x9e\x8e\xf9\xb4\x7b\xd6\xec\xcd\x7f\x6a\x0f\x9b\x41\xaa\xf8\xe0\x40\xd0\xe9\xcf\x4f\xa7\x07\x07\x6a\x73\xde\x80\x03\xc1\x8a\x03\x55\xa5\x0f\xaa\x0a\x38\x50\xfd\x60\x5a\x0e\xd4\xb6\x89\x62\x6f\x26\x34\x1e\xc1\x11\x6c\x08\x72\xe4\x86\x61\x3a\x1f\x39\xb2\x47\xe2\x1a\xa4\x8a\xec\x17\xb0\x21\x48\x48\x60\x43\x0d\xd8\x50\xa2\xc3\xb6\x3a\x27\x43\xfa\x3d\xa7\xe1\x42\x26\x34\x0d\x9b\x22\x36\x92\x56\x37\x12\x50\x21\x50\x21\x50\xa1\xba\x2b\x4f\x47\x85\xda\x3c\x67\xf6\x66\x42\x35\x07\xcd\x20\x15\x7b\x10\x21\x68\xf2\xe7\xa7\xc9\x83\x08\xb5\x39\x6f\x40\x84\x60\xbb\x81\x9a\xd2\x07\x35\x05\x44\xa8\x7e\x30\x2d\x11\x6a\xd7\x34\xb1\x37\x0f\x1a\x8b\xd0\x08\x1a\x04\x19\x72\xc3\x30\x9d\x8f\x0c\xd9\x23\x51\x0d\x12\x45\xf6\x0b\x68\x10\xa4\x23\xd0\x20\x5d\x0f\x6c\x0b\x13\xea\x94\x02\x99\xa2\x99\xa1\xeb\x3f\xfa\xee\x8a\x07\xc5\x02\x5c\x3c\x2b\x93\xbb\xb1\x77\x66\x85\x3c\xb3\xef\xb2\x0c\xb5\x13\x7a\xea\x24\x2f\xa0\x5e\xaa\x88\x9d\xc9\x66\xcc\x0f\x93\x54\xf0\x92\xb5\xb6\x2a\xb9\x3d\xed\x6b\xec\xfb\xdd\xef\x47\x76\xb9\x8d\x37\x9c\x57\xd5\xac\x2d\x36\x4b\x2a\xfa\xf6\xe9\x51\x84\xd8\xed\x68\x24\xcf\xb6\x58\x16\x25\xf4\xa5\xd9\xf0\xab\x94\x0f\x4b\x1e\x3f\x24\xb9\x4d\x4f\x6f\x50\x54\x68\x39\x31\xf2\xe8\x73\x24\xd8\xdd\xc5\xaf\xdf\xbe\xfd\xf7\xd7\x9b\xef\xff\x7d\x77\x91\x97\x3a\xd6\x09\x7b\x25\xa9\x13\xfe\x32\x0a\x04\xd5\x34\x9e\x67\x4f\x5d\xf2\x67\xe6\x7b\xa1\x4e\x97\xee\x27\xda\x26\xa5\x24\xcf\xfc\x12\x1e\x0b\x56\x2c\x09\xab\xeb\x07\x4f\x12\xe6\xfa\x89\x13\x0b\xf5\xcd\x79\x41\xfa\x82\xf6\x62\xea\x18\x97\x1f\x94\x55\x16\xe6\xa9\x2e\xcf\x6b\x73\x23\xfb\x61\x2a\xe2\x47\x1e\x5c\xb2\x50\xc6\xf4\x59\x54\xf8\x36\x2b\x86\x5c\xad\xa7\x1d\xba\x74\xbf\x6d\xb3\x29\x3c\x9d\x95\xbd\x4d\x94\x36\xa3\x3e\xcc\x66\x65\x37\xf5\x91\x4d\x99\xfc\x52\x82\x70\xf5\x2b\x75\x81\xc9\xf3\x7d\x2f\xd8\x42\xf0\x74\x15\x0b\xe6\xf1\x54\xb0\xca\x40\x98\x27\x89\x50\x89\xe2\xba\xce\x70\xe4\xeb\x8f\xdb\xf4\xd8\x3d\xe1\x5b\xcd\xf0\xd7\x93\xb8\x3a\x0b\x5e\x0b\x60\xf1\x8f\x62\xa9\x6a\x6d\x24\x2e\x64\xd0\x4f\x44\xaa\xeb\x42\x9b\x5a\xe3\xaa\xc3\x4b\x45\xaa\xb3\x54\xe7\xba\x53\x66\xec\x87\x1f\x3a\xa2\x92\x1c\xdf\x8c\xa6\x51\x5d\xca\x15\xb0\x4b\x45\xc0\xb3\x0f\xd1\xb7\xd2\xc3\xb9\xd2\xa5\x1f\x7d\xb9\x4a\x4c\xe5\x73\x5b\x92\x58\xad\x86\xbc\x2e\xb5\xfe\x2d\x5f\x7f\xec\xb5\xf8\xb7\x23\xa2\xbc\xfa\xa8\x7e\xa4\x5c\x64\x2f\x79\x93\x65\xef\x36\xdf\xa7\xab\xa3\x53\xca\x7d\x5e\xfd\x14\x5f\xad\x2c\xa1\x67\x43\xa6\x8c\x67\x53\x28\xb7\xcf\x54\x6f\x53\x77\x90\x8e\x27\x62\xa6\xf5\x79\x5b\xbc\xdc\x5d\x09\xaa\xaa\xff\xef\xc8\x37\x02\xc1\x6b\x4f\x84\x22\x26\x70\xb8\x50\x8a\x7d\x2a\xd9\xc2\x5f\xa4\x42\x84\x6c\xe9\x87\xab\x54\x24\x6f\x18\x55\xa4\x77\x64\xb8\xf0\x3d\x5b\x0c\x41\xcb\x2c\xb6\xba\x7c\x3e\x39\xcb\xab\x48\x9f\x89\xae\x95\x45\xfe\xef\xf5\xff\x61\xdf\x4d\xd2\xf2\x4f\xea\x13\x84\x6b\xcc\x06\xa9\xf4\xf4\x07\x9a\x2b\xb3\x16\xa5\xf2\x41\x84\x59\x93\x4d\x05\xec\x50\x08\xb7\x52\x38\x3b\xa0\xaa\xf8\x7e\xaa\xd5\xdf\x58\x24\x29\xd7\xd5\xd6\x7d\x53\x6b\xd7\x16\x09\x5f\xaf\x92\x3e\x63\xdf\xd4\xab\x9f\x7c\x9b\x77\xdf\xbc\x45\x8d\x8c\xd9\x06\xb4\x71\xdd\xd4\xa6\xd6\xc5\x98\x33\x3d\x9d\xbe\xd0\x56\xdf\x2e\xe8\xef\xaa\xb1\xd4\xb8\x9d\xdd\x42\xcf\xa5\x0f\x26\xc3\xbe\x9d\xdc\x54\x5c\xff\x41\x3c\xeb\xac\xf2\xd9\x3f\x07\xea\x90\x29\x56\x0a\x7f\xba\xf7\x75\x11\x76\x3f\x2c\x74\x48\x76\x7d\x36\x91\x0b\xa5\xb5\x13\x36\xcd\xaa\x10\xe8\xe2\xe2\xb1\xd8\xb3\x40\x7a\xa5\x33\xd6\x6b\xa3\x9b\x0c\xf5\x24\x13\x91\x11\x41\x4d\x48\xf5\x5f\x3d\x28\x0f\xe2\xd9\x54\x9b\xcf\x1e\x7c\x77\x61\x9b\x7c\x77\x61\x8a\xc9\x6f\xae\x3e\x4f\x1b\x44\xb9\xfe\x7c\x76\x46\xd0\xc8\xd1\x04\x30\xbb\x71\xb1\xf7\x92\xb5\xe2\xcc\x66\xd9\x64\x27\x87\x49\xcc\x6f\x46\x4c\x1b\xb2\x52\xb6\xf4\x93\x84\x4e\x84\x92\x35\x6d\xdf\x9d\xd7\x4e\xbd\x76\x1c\x1f\x9a\xed\xb6\x37\x2c\x11\x79\xb2\x7e\xb5\x36\x62\xdf\x49\xb3\xea\xc8\x6a\x7b\xca\xda\x9e\xd5\xa6\x78\x36\xe3\xa4\x39\x53\xb9\x50\x88\x78\x14\xf1\x73\x7a\xef\x87\xde\xbe\xcd\xa7\xa7\xfd\x30\x5f\x33\x98\x3e\x08\xf8\x5c\x04\xad\xf5\x01\x3d\xed\x14\x7d\x40\x45\xaf\xb5\xd5\x71\xc9\xff\xed\x2f\x57\x4b\x16\xae\x96\x73\x11\xeb\xd6\x1b\xf5\x45\xf7\x0f\xd5\x7a\x26\xde\x9b\x97\x2a\xa7\x6d\x98\x0e\x62\x5f\x7d\x85\xae\x5c\xb1\xbe\xbb\xa9\xe3\x5b\xfd\xdb\xff\xda\xb9\xfe\xbf\xb6\x78\x46\x98\xf7\xb7\xad\x6b\xa1\x95\x5e\xbd\x00\x69\x27\x72\x78\x68\xab\xd3\xe4\x7b\x69\xc2\x97\x6a\x73\xf1\x53\x3f\x3b\x74\xf5\x57\x2a\xf1\x40\xe4\xbb\xa5\x7a\xb5\x6e\x8b\x1a\x26\x25\xa4\xa6\xa9\x16\xd7\x74\xdb\xf5\x61\xab\xdb\x26\x9e\x68\xdb\xe1\x61\xd1\x1a\xad\x36\xba\xa5\x5c\x85\xf4\x18\xdd\xca\xd7\xab\x48\xbd\x4c\xd7\xe7\x51\xff\xf2\xc6\xee\x6e\x5a\x22\xe4\xb4\xa1\xdb\xbb\xed\xdc\x51\x3b\xdb\xc2\x0f\x52\xa1\xce\x38\x75\xee\xa8\x6d\xc4\x29\xcb\xb0\x25\x29\x44\xdb\xee\x9d\xcc\x9d\xac\x7c\x46\xe9\x2a\x1b\xa6\x52\x7d\x76\x9a\x97\x84\x22\xda\x4b\x1f\xb9\x1f\x28\xa9\x31\x97\xcf\x55\x93\x9d\x7b\x29\x13\x2a\xc7\xad\x9e\x63\xf6\x50\x33\x16\xaa\x5b\x78\xec\xad\x48\x6c\xe7\xa1\x6b\x4f\x28\xea\x24\xd5\x36\xf3\x3d\xd9\xa3\xf3\xde\xfd\xb2\x60\xd9\x94\xca\x85\x11\x2b\xdf\x54\x1a\xe0\x27\x4c\x2c\xa3\xf4\xb9\x2c\x88\x65\xd2\x37\x4f\x95\xcc\xb2\xad\x41\xdb\x0e\x03\x7f\x51\x39\x0a\xf4\xe9\x91\xcd\x4b\x6f\xc5\x63\x1e\xa6\xc2\x02\x91\xbc\x4c\x4e\x92\x2f\x7b\x3a\x51\xa8\x8c\x7e\xfe\xed\xd9\xc1\x96\x89\x7c\xa9\x64\x7e\x92\xac\x8c\x12\xe0\x87\x5e\x20\xf2\x15\x92\x49\x19\x76\xc2\x4d\xad\xd9\x5e\x69\x1d\xd9\x2b\xf7\x3b\x69\xed\x21\x4b\x3a\x46\xb2\x12\x6e\xed\x71\x4b\xba\xce\x6a\x9e\xa8\x8b\xc3\x34\x6b\x81\x5b\x70\x2e\xf8\xc3\xa8\x29\x89\x5c\x8a\xd4\x5f\x0a\xd5\xf6\x85\x88\x63\xaa\x23\xa4\x6b\xba\x17\x04\x88\x5c\xc0\x50\x23\x2a\xc2\x64\x15\xdb\xee\xe3\x56\x44\xb2\x4c\x42\xf7\x9a\x6e\x32\x2d\x4c\x12\x86\x58\xb2\xe4\x41\x20\x62\xe6\xdc\xaf\xc2\x07\x5d\x48\x9f\xa9\x6d\x93\x05\x3c\xf6\xec\x40\xd3\x8a\xd7\x8f\xd7\x1a\x59\x22\x04\x4d\xbc\x48\x26\x89\xaf\x26\x9c\xe9\x36\x9a\x70\xc5\xf5\xa5\x1d\xdd\xdc\x5c\x27\xa3\xf7\x08\x57\x8f\x07\x89\xdf\xe6\x80\x37\x73\xd8\x94\xb6\xa2\xaf\x7e\xe2\x89\xe5\x65\x56\xef\x54\x7d\xb2\x2e\xe1\x68\xb9\x9f\x27\x6a\x80\x9d\x55\xa0\xcb\x3b\xe5\xd3\x66\xef\xdd\x5f\x75\x52\xfd\xae\x5f\x57\xdf\xea\x8c\xbc\x38\x9b\xb5\xa6\x2a\xbb\x25\x22\xb5\x13\x37\x8d\xb9\xaf\x76\xee\x90\x3d\xa9\x11\xb6\x57\xda\x59\xa0\x2e\xb3\x6b\x29\xab\xd9\x14\xdb\xd2\x59\x6a\xc7\x14\x19\xdd\x2a\x98\x00\x7d\x79\xe5\x4a\x27\xb9\xa2\xb5\xa2\x76\xe8\x2b\x9a\xed\x53\x1e\xf9\x57\x3c\xf2\xa7\x8e\x0c\x95\xca\x97\x5c\xfd\x94\xd5\x63\xca\x5e\xb8\xa0\x65\x9d\x72\x3f\x48\x68\x4b\x2a\x0a\x10\xe4\x8f\xb3\x67\x77\x57\x1a\x7f\xc2\x7e\xff\x4a\xdb\x6d\x76\x24\x25\x54\x55\xab\x3a\x36\x4a\xd4\x88\xa2\xc0\xd7\x1b\x4c\xb6\x4b\x6a\x3f\x27\x3f\x61\xf7\xbe\x77\x4f\xee\x4f\x8e\x5c\x2e\x45\x48\x05\xcd\x8a\x23\x57\x7a\x97\x31\x0c\xa8\x2e\xcd\x9f\xa4\x36\xed\x58\xd4\xbd\x58\x5d\x3b\xbc\x11\xfd\xba\x6e\x9d\xee\x76\x58\xff\xf0\x97\x42\x1d\x58\xd6\x60\xa1\xba\x56\xe3\x11\x23\xf2\xd1\xa1\x41\x9b\x56\xa2\x0b\x7c\x59\x0b\x80\x95\x53\x78\x10\x5c\xb2\x58\x78\x3c\x76\x09\x39\xab\x5d\x3e\x7c\x66\xdc\x49\xfd\x47\x3f\x7d\x56\x27\x9b\x1f\xda\xff\xdb\x77\x7f\x49\xf5\xe7\xd5\x15\x06\xec\x7a\xdb\xfc\x4b\x2b\x8e\x32\x2e\xf2\x19\x5d\xe2\x4c\x5d\x37\xa7\xa3\x55\x0f\x9e\x2e\xc9\x66\x64\xa6\xf4\x5e\x2c\xf5\x61\xaa\x99\x01\x75\x88\xeb\x5e\x9a\xe3\xea\xd2\x5c\xbb\x94\x8f\x24\x91\x15\x54\x49\xf6\x83\x84\xa8\xe7\xea\x74\xde\xb7\xd3\x6a\x10\xc7\xc1\xf6\x3c\xf3\xd7\xdf\x2d\x03\xb6\x9a\x32\xb7\x1d\x71\xb6\x22\x5c\x0b\xad\x04\x20\x17\xec\xc1\x0f\xb7\x38\x36\xb5\x02\xd9\x2e\x73\x0d\x80\xb4\x1c\x23\x2d\x2a\x25\x22\x57\x6d\x26\x25\x95\xb8\xf0\xec\x56\x11\x1d\xf0\x1c\xf0\xdc\xf0\xf0\x1c\xd0\x1c\xd0\x1c\xd0\x1c\xd0\x1c\xd0\x1c\xd0\x1c\xd0\x1c\xd0\x1c\xd0\x1c\xd0\x1c\xd0\x1c\xd0\x1c\xd0\x1c\xd0\x1c\xd0\x1c\xd0\xdc\xe0\xd1\x1c\xf2\xc7\x80\x3c\x82\x3c\x82\x3c\xf6\x60\x44\x41\x1e\xcb\xdd\x03\xf2\xd8\x63\xf2\x28\x65\xec\xfa\x21\x7d\xbc\x25\x8f\x07\xa1\xc4\x93\x04\xfb\x56\x46\xdb\x13\x29\xf3\xc3\x85\x8c\x97\xd9\xec\xe6\x4c\xe3\x8b\xcd\x00\xd0\x13\xe9\x87\x42\x27\xdc\xdc\x7e\xf9\xaf\xea\x1d\x08\x70\xde\x93\xbe\x65\x9d\x38\x74\xf6\x56\x98\x18\x85\xbb\x5e\x15\xdf\xbc\x7b\x3d\x3d\x5e\x0f\x7b\x49\x95\x94\x62\xbd\x57\x36\x5f\x4f\x7f\x5e\xdf\xdc\x7e\xf9\x5e\x77\x1f\x56\xd5\xfe\xab\xca\x76\x24\xc5\x09\x8f\x68\x71\xfd\xcf\xe3\xf5\x8b\xd6\x57\x20\x78\x79\xec\xda\xf7\x81\xd1\x06\xd4\xd8\x98\x60\xac\x86\x6e\xdd\x5f\x7e\x57\x1f\xb0\x65\x55\xa8\xbb\xcb\xcb\x82\xee\xf8\x2c\xe3\x9b\x20\xf8\xff\xf3\xa5\x48\x22\xde\x93\xf5\x01\xe7\x12\x93\xf3\xa2\x38\xd5\x1e\xaf\x67\x34\x60\xe3\x5e\x78\xbb\x9d\x49\x5a\x0b\xf3\x5e\x5f\xc7\xf5\xbe\x24\xd5\x85\x55\xf5\x1b\x81\xcb\x08\x5c\x46\xe0\x32\x02\x97\x11\xb8\x8c\xc0\x65\x04\x2e\x23\x70\x19\xd9\x67\xb7\x85\xcb\x08\x5c\x46\xe0\x32\x02\x97\x11\xb8\x8c\xc0\x65\x04\x2e\x23\x67\xe7\x32\x02\x9f\x0a\xf8\x54\xc0\xa7\x62\x18\x23\x0a\x9f\x8a\x72\xf7\xc0\xa7\x62\x58\x3e\x15\x8f\xd7\x57\x61\x46\x79\x74\xc8\x36\xfd\xfd\x9f\x1a\x74\xa5\xe5\x9d\x76\xe9\x95\x7e\x26\x73\x64\xa0\xd4\x2b\x33\x4d\x77\x41\x2b\x7d\x53\x19\x5b\x7d\xc8\x9e\x90\x51\x2b\x77\xed\x39\xdd\x16\x9b\xe8\x04\xae\x7e\xa4\xb6\x7e\xa3\x0e\x4b\x5a\xa9\x23\x01\x5b\x2e\x6c\xb9\xb0\xe5\xc2\x96\x3b\x36\x5b\x6e\xb3\x0a\x24\xb5\xf6\xdc\xa3\x15\x87\x41\x0d\x9f\xc6\x03\x75\xca\x1a\x3e\x47\x33\xc0\xef\x51\x35\xa7\xd6\x00\x7d\xb4\x1e\xf9\xa3\xa8\x49\xf8\x4a\x8b\x27\x01\x9f\xcd\xc5\x42\x7b\x0a\x64\xc6\x9a\x5c\x94\x30\xbb\x17\x4d\x9d\x42\xd5\xa2\x50\x86\xd3\x50\x78\x9c\x26\xa8\xd1\x05\x8a\xd5\x8d\xb4\xe1\x36\x5b\x1a\x46\x42\xf4\x97\x4b\xe1\xfa\x3c\x15\xc1\x73\x8e\xf0\xf3\x23\xd7\x0f\x2e\x8d\xac\x4f\x9d\xce\xbc\x98\x3b\xb4\x6a\x7c\xe9\x66\x02\x41\x7e\x68\x93\x7f\x84\x9d\xa5\xab\x44\x7d\x64\x71\xb8\xb8\xba\xd3\x36\xc8\xbc\x64\xa1\xf7\x40\xfb\x88\x99\xfe\x4e\x5d\xca\xb1\xe6\x1b\x0f\x18\x66\xfa\xe6\x5b\xfa\xe4\x3a\xfd\x69\x87\x06\xd5\x97\xe9\xbf\x0f\x7b\x69\xd6\x2f\x9b\xf9\xcb\xd1\xa6\x3f\x48\x0c\x48\x0c\x48\x0c\x48\x0c\x48\x4c\x67\x24\xa6\xe1\x59\xb0\x46\x63\x8e\x77\x2c\x7e\x2c\xe4\x0b\x8c\xc8\x3c\x96\x6d\x41\xb7\xb1\x8c\xb8\x47\xd2\xd1\xad\x0c\x7c\xe7\xb9\xe4\xf7\x67\x27\x5d\x9e\x70\x50\x4d\xbb\xeb\xd9\x2f\x33\xf6\x43\xef\x67\x5a\x74\x89\x44\xa8\x16\x4b\x7e\xa6\x0a\x26\xe3\xe8\x9e\x87\xd6\x0f\x31\x5e\x89\xab\x05\x0f\xac\xae\x7c\x77\xa1\x7f\xbe\xbb\x60\x0b\x3f\xe4\x81\xff\x8f\x3d\x48\xe6\x82\x71\x97\xcc\xf3\xf2\x4a\x9b\x2e\xdd\x5c\x0d\xd3\x8f\x9f\x24\xf9\x4d\x5a\x3f\x9d\xb1\x4f\x3e\x6d\x8e\x85\x4f\x97\xf1\x7a\xdb\x72\x18\x93\x6a\xf5\x98\x74\x14\x99\xde\x1f\x32\xa0\xba\x05\x1f\x6d\xdb\x37\x8a\x3c\x07\x15\x9a\xde\x4b\x31\xa3\xa6\xab\x05\x7b\x2f\x9f\x98\xc7\xe3\x39\xf7\x4a\x86\xc9\x4c\xa9\x11\xf1\x42\xc6\x4b\x35\x26\xb5\xfd\xf5\xad\xd2\xa2\xcd\xdd\x45\x42\xaf\x95\x58\x23\xdd\xb7\xbe\x92\x26\x1d\xdf\xcd\x55\x61\x92\x15\x74\x3d\x70\x3b\xc6\x09\x05\x94\xd1\xaf\x56\x1a\x98\x15\x06\xd3\x9e\x23\x19\x0d\xc9\x7c\x6a\xcb\x2f\x9b\xb1\x1b\xc7\x11\x91\xae\x07\x5a\xd4\xec\x26\xba\x0d\x13\x36\x35\x13\xb0\x3c\x41\x93\xf7\x6c\xf2\x2b\x77\x1e\xbc\x58\xae\x42\x57\x5d\x45\xfe\xa9\x74\x51\xa5\xe3\xb4\x08\x69\xe4\xe3\xf2\x43\x6c\x0b\xe6\xd9\x93\xde\xb3\xc9\x67\x19\x8b\xc2\x63\x99\xc3\x13\x87\xbb\xaa\xf5\xa6\x7f\xb4\xfb\x32\x3d\x2f\xd1\xaa\xe7\xda\x03\x17\xd9\x33\x0e\x99\x90\x51\x75\xba\x9f\x46\xe2\x1c\x31\x36\x6d\x36\x0e\xdb\xd0\xe9\xa9\x46\x01\x10\xb5\xb3\xf1\x5d\x07\xa9\xc7\xb3\x6d\x9c\x12\xa9\x36\xeb\xac\x2d\x58\xf5\xa5\xf2\x4f\x2d\xa5\x43\x0c\xe4\x9e\x98\xce\x14\xb6\x6f\xc6\xe7\x46\x19\x81\xa5\xcf\xe4\x5c\x5e\x1a\x4c\x34\x56\xef\x23\x32\x5b\x00\xda\x88\x26\x3b\x9f\x68\xb2\x66\x27\xca\xae\x88\xb2\xe3\xa9\x5e\xf0\x47\x80\x3f\x02\xfc\x11\xe0\x8f\x00\x7f\x84\xba\xcd\x17\xa0\x7b\x40\x3d\x02\xf6\x09\xf6\x09\xf6\x09\xf6\x09\xf6\x09\xf6\x39\x2e\xf6\x09\x1c\x01\x1c\x01\x1c\x01\x1c\xd1\x39\x8e\xd8\x03\xd9\xf7\x34\xde\xab\x59\x17\xae\xc7\x7c\xbd\xd4\xe2\xd6\x2b\x90\xb3\xf1\x06\x24\xeb\x43\xb2\xbe\xb1\x27\xeb\x33\x02\x23\x95\x7e\x50\x9b\x89\x1a\x1d\x96\x38\x32\x12\x97\x2c\x59\x39\xf7\x6a\xf7\xa1\xdd\x5d\xf0\xa5\xde\x9a\xa2\x58\x92\x80\x5a\x17\x38\xba\xbd\x10\x04\x81\xa1\xf2\xcf\xa8\x06\xb1\xab\x35\xe6\xaf\xbf\xf3\x41\x96\x49\xcb\x10\x50\x2b\x6b\x8c\xef\xe4\x7d\xfa\xc2\xd6\x89\xdf\x61\x21\xac\x5b\xa6\x4e\x07\xfb\x60\x2b\xe1\xac\x08\xa9\x2a\x0e\x78\x6f\x43\xaa\xc8\x04\xf3\x95\x87\xdc\x13\xb1\x36\x26\xea\xed\x31\x49\xa4\xe3\x93\x76\x9c\x99\xed\x38\x59\x5f\x65\xcc\x44\x98\x2a\x71\xd5\x9a\x0b\x96\xfc\x41\xf5\x62\x7a\x2f\x12\x61\x65\xbe\x62\xe0\x90\x0d\x30\x22\x99\x97\x4c\x74\x32\x66\xd7\x6f\xff\xa5\xae\x8d\xb9\x43\x4c\x2e\x90\xa1\xa7\x25\x3c\x32\xa3\x39\x32\x4c\xb9\x1f\xea\x3d\x89\xcc\x54\xf9\xb5\xc4\x29\x0c\x31\x64\xf3\xe7\x4c\x89\xf1\x64\xc0\x43\x6f\x26\x63\xef\x2a\x7a\xf0\xae\x56\xa1\xef\x48\x57\x5c\xfd\xf4\x25\xb9\x55\x4f\x39\xd8\xee\x6d\x3a\xa7\xcd\xe1\xe9\x95\x48\x38\x44\x49\xad\xa9\x94\xf6\xb6\x81\x94\xf6\x41\x9b\xef\xfa\xf3\xc9\x6f\x77\x7e\xb2\x76\x0f\xee\xcf\x37\x8f\x51\x18\x26\xd1\xa3\xe7\xc2\xf0\x2b\xd6\x4a\x32\x11\xfd\x4f\xff\x39\x52\x4e\x91\xdd\xa2\x57\x5d\x1e\x11\x64\x0f\x81\xb8\x35\x02\x71\x0b\xf1\xda\x67\x14\xaf\x8d\xc0\x34\x04\xa6\x21\x30\x0d\x81\x69\xd0\x14\x37\xad\xa2\x5e\x46\x81\x9c\x46\x03\x43\x10\xcb\x16\x65\xcc\xa8\x23\x3d\x57\xc7\x32\xb3\x75\xeb\xa1\x2b\xb1\xe0\x6e\x45\xf4\xda\xa5\x44\xa9\x5b\x9a\xab\x50\xd8\x51\x60\x14\x69\xb0\x0e\x3d\xd1\x7b\x9b\xc8\x4b\x00\x61\xb1\x28\x7c\xcd\xab\x87\x54\x00\x1e\xac\x73\x70\xac\x93\xfc\x26\x0e\xaa\xf4\x3a\xa5\x7b\x7f\xde\xbe\x43\x2f\x45\xec\x89\x46\x57\x26\x69\xcc\x53\xe1\xf9\xce\xb4\xf9\x3d\xea\xef\x67\x73\x25\x9d\x05\x4d\x8e\xb5\x88\xc7\xa9\x4f\x61\x4d\xda\xc7\x67\xcf\x23\x8e\xde\xd6\x13\x33\x61\x57\x84\x76\x8b\x58\x78\x5b\x76\xb4\x61\x30\x1e\x8e\xdc\x78\x78\x3e\xac\xb6\x12\x1e\x60\x17\x97\x0e\x61\x51\x3b\x4d\x1e\x16\xfd\x7a\xc3\x2e\xf4\x86\x4c\x27\x3a\x6e\x95\x07\x74\x67\x28\xc3\xa9\xbe\x9b\xae\x20\xeb\x65\xc2\x5e\xff\x96\xc8\xf0\x56\x47\x07\x7f\x55\xfb\x9d\xf9\xfb\x87\xdd\x05\xf3\x7f\x7c\xd3\x27\x88\xdc\x7c\xde\x7c\x96\xb1\x43\xe6\x5d\x4f\xd2\xe0\x4b\x76\x77\xb1\x50\xff\x76\x77\xc1\x6e\x4a\xbd\x49\xce\xc7\xda\x16\xbb\x4a\xf2\x48\xc8\x29\x77\x68\x00\x28\xbe\x34\xf0\x1d\x63\x5d\x12\x81\x9b\x30\xf9\x64\xc6\x56\xc7\x5f\x46\x42\x46\x81\x98\x31\xfd\x4e\x0a\x2b\xb7\x73\x8a\x5c\x80\x6b\x07\x22\x7b\xfd\x21\xdd\xab\x5e\x34\x5e\x87\x4d\x68\x48\xc3\xd2\x90\xa2\x8a\xef\x6c\xcf\x75\xa4\x55\xeb\x86\x8a\x28\xe0\xce\xbe\x82\x9c\xb9\x6b\xe4\xa2\x1c\x9c\xed\x20\xc0\x9d\x8b\x00\xd7\x23\x39\x09\xc7\x79\xf6\x0b\x9c\xed\xce\x41\x02\x59\xf5\xde\x46\xfb\x8a\x35\xf5\x5b\xa3\x60\xa2\x9a\x9a\x57\xad\x13\x16\x13\x70\x1e\xba\xfe\xa3\xef\xae\x78\x50\x0c\x5e\xe3\x59\x8a\x09\x6a\xeb\xac\xe0\x97\xf1\x2e\xf3\xe8\x98\xd0\x13\x26\x79\xa2\xa1\x52\xe6\x98\x4c\xe0\x61\x7e\x98\xa4\x82\x97\x4c\x8f\x55\x71\xe8\x69\xdd\xae\x95\xc5\x27\x7d\x96\xf1\x4d\x10\x64\xb2\x51\xd2\x07\x8a\xb3\xf1\x86\xf3\x0a\x2a\xdb\x62\xaa\xa3\x98\xc8\x4f\x8f\x22\x3c\xeb\xf8\x32\x1a\xc4\xb1\x07\x99\x21\x87\xdf\x88\x73\xf8\xed\x46\x44\xbb\xf2\xf7\x1d\x5e\x41\xb2\x19\xfe\x42\xd6\x3e\x64\xed\x43\xd6\x3e\x64\xed\x1b\x5b\xd6\xbe\xdd\x3b\x6f\x6d\xc6\xbe\x8e\x9d\x0d\x8e\x96\xa7\x6f\x77\xf3\x37\xe7\xe8\xeb\x73\x1f\xec\x93\x99\x6f\x77\x1f\x6c\xce\xca\xd7\x71\x1f\x20\x17\x1f\x72\xf1\x21\x17\x1f\x72\xf1\x21\x17\x5f\x67\xb9\xf8\x1a\xec\xfe\x6b\x79\xf8\xb6\x06\x7a\x9d\x91\xaf\x61\xb3\xd6\x8c\x38\x97\xe0\xee\xee\xde\x96\x47\xf0\xb8\xfd\x8e\xec\x81\x9d\x8c\xe8\x7a\xe6\xc0\x8e\x87\xf5\xa4\xf9\x02\x77\x77\xcf\x96\x5c\x81\x5d\x6f\x9b\x7d\xcd\x10\xb8\xbb\xd3\x6a\x20\xc6\xc1\xf6\x3c\xf3\xd7\xdf\xfb\xc2\xb0\xad\xa9\x1c\xce\x99\x91\x55\x1c\x86\x7e\xaf\x80\x06\xd0\x31\xd0\x31\x06\x3a\x66\xae\x04\x1d\x03\x1d\x03\x1d\x03\x1d\x03\x1d\x03\x1d\x03\x1d\x03\x1d\xeb\x1d\x19\x02\x1d\x03\x1d\x03\x1d\x03\x1d\x03\x1d\x03\x1d\x03\x1d\x1b\x22\x1d\x43\x0a\x12\x60\x41\x60\x41\x60\xc1\x5e\x8f\x28\xb0\x60\xb9\x7b\x80\x05\xc7\x88\x05\x6b\x32\xbc\x77\x44\x07\x8b\x48\x30\xb4\x82\x8f\x5c\xb0\x07\x3f\x74\x5b\x44\x83\x97\xb9\x92\x43\x8a\x9c\x11\x88\x95\x9e\x94\x6b\x6f\x93\x92\xd6\x5f\x78\xf6\xcb\xc0\x22\xa0\x22\xa0\xe2\xa0\xa0\x22\x80\x22\x80\x22\x80\x22\x80\x22\x80\x22\x80\x22\x80\x22\x80\x22\x80\x22\x80\x22\x80\x22\x80\x22\x80\x22\x80\x22\x80\x22\x80\xe2\x50\x80\x22\xca\x33\x80\x8d\x82\x8d\xf6\x95\xa4\x81\x8d\x82\x8d\x82\x8d\x82\x8d\x56\x3a\xed\xa4\x6c\x74\x2e\x52\x7e\x7d\x75\x10\xf6\x3c\x49\x26\xe0\xca\xa8\x7b\x22\x2d\xab\x2b\x7a\x80\xb7\xd0\x4b\x4f\xa4\x65\x76\x49\x3d\x70\x73\xfb\xe5\x7b\xdd\xcd\xc8\x82\xbc\x27\x54\x2c\x74\x24\x85\x97\x8e\x8b\x2c\xd2\x5c\x29\xdc\xfd\xaa\xf8\x05\xcd\x97\xdb\x11\x22\x91\xb5\xa5\x2b\x36\xba\xb2\x55\xa5\x4a\x6e\x06\x5b\x16\x89\xba\xbb\x66\x95\xd0\x6d\xc8\xaf\x5b\xed\xfa\xde\xac\xcb\x6a\xaa\x6f\x1a\xb4\x59\x1e\xeb\x3d\xee\xc5\xb8\x9b\xf5\xf7\x2e\x76\xb8\xd2\x04\xf0\x7e\xf0\x7e\xf0\x7e\xf0\x7e\xf0\x7e\xf0\x7e\xf0\x7e\xf0\xfe\xdd\xbb\x2d\x78\x3f\x78\x3f\x78\x3f\x78\x3f\x78\x3f\x78\x3f\x78\xff\xd9\xf1\x7e\xb0\x62\xb0\x62\xb0\xe2\x61\x8c\x28\x58\x71\xb9\x7b\xc0\x8a\x87\xc9\x8a\x1b\x67\xd7\xd5\x42\x4f\xbb\x58\x4b\x3f\x93\x39\x32\x50\x3a\x96\x99\xab\xbb\x68\x96\xbe\xa9\x86\x67\x7d\xc8\x1e\x73\xb2\x52\xda\x9d\x40\xd8\x8f\xd4\xe0\x6f\xd4\x6b\x49\x2b\xe5\xb3\x61\xd5\x85\x55\x17\x56\x5d\x58\x75\xc7\x66\xd5\x6d\x56\x78\xbd\xd6\xb2\x7b\xb4\x9a\xf8\x7f\xa9\x8e\x33\xfa\xec\x25\x25\x97\x77\xd4\x8c\xd2\xf3\xa0\xd4\xb6\x22\x41\x9d\x0b\x16\xa9\xde\x4a\x94\xea\xc7\x6e\x42\xe6\x87\x7a\x67\x91\x31\x5b\x85\xd9\xe6\xe4\x32\x5d\xee\x9f\xb9\x7e\xac\x8e\xc2\x47\x91\xcd\x78\xb5\x7d\x92\xf5\xc1\x2c\x79\x3b\x37\x4c\x07\xb3\xc5\x2a\xa6\x55\x16\xc5\xd2\x11\x09\x99\x09\x8c\xe0\x68\x66\xd9\x8c\xfd\x49\x6f\xa4\xd1\xa2\xb9\xf3\x8e\x4d\xd9\x4d\x10\xbc\x23\x23\x80\xab\x76\xe9\x55\xa8\x06\x5e\x89\x60\x76\x4a\x9a\xc7\xad\x97\x40\x6f\x30\x50\xba\x2d\xa7\x19\xa6\xa3\x99\xe2\x9b\x75\xc5\x66\x73\xfc\xd1\x7a\xe4\x8f\xa2\x4e\xe1\x2b\x7d\x9e\x44\x7d\x36\x17\x0b\xed\x33\x90\x99\x6d\x72\x51\xc2\xec\x5e\x34\x75\x56\x42\x1f\x0e\x73\x25\x4d\x87\xd3\x50\x78\x9c\x26\xa8\xd1\x0a\x94\x02\x63\x4f\x50\x6d\xc2\xcd\x96\x86\x11\x13\xfd\xe5\x52\xb8\x3e\x4f\x45\xf0\x9c\xc3\xfc\xfc\xc8\xf5\x83\x4b\x23\xf5\x53\xa7\x33\x2f\xe6\x0e\xad\x1a\x5f\xba\x99\x40\x90\x1f\xda\xe4\x29\x61\x67\xe9\x2a\x51\x1f\x59\x1c\x2e\xae\xee\xb4\x0d\x32\x2f\x59\xe8\x3d\xd0\x3e\x62\xa6\xbf\x73\x29\x78\x58\xfb\x8d\x07\x0c\x33\x7d\xf3\x2d\x7d\x72\x9d\x26\xb5\x43\x97\xea\xcb\xf4\xdf\x87\xc2\x34\xeb\x97\xcd\x24\xe6\x68\xd3\x1f\x4c\x06\x4c\x06\x4c\x06\x4c\x06\x4c\xa6\x33\x26\xd3\xf0\x2c\x58\xe3\x32\xc7\x3b\x16\x3f\x16\x32\xb9\x45\x64\x23\xcb\xb6\xa0\xdb\x58\x46\xdc\x23\xe9\xe8\x56\x06\xbe\xf3\x5c\xf2\x00\xb4\x93\x2e\x4f\x05\xa7\xa6\xdd\xf5\xec\x97\x19\xfb\xa1\xf7\x33\x2d\xba\x44\x22\x54\x8b\x25\x3f\x53\x05\x93\x71\x74\xcf\x43\xeb\x91\x18\xaf\xc4\xd5\x82\x07\x56\x57\xbe\xbb\xd0\x3f\xdf\x5d\xb0\x85\x1f\xf2\xc0\xff\xc7\x1e\x24\x73\xc1\xb8\x4b\x86\x7a\x79\xa5\x8d\x98\x6e\xae\x86\xe9\xc7\x4f\x92\xfc\x26\xad\x9f\xce\xd8\x27\x9f\x36\xc7\xc2\xa7\xcb\x78\xbd\x6d\x39\x96\x49\xb5\x7a\x4c\x3a\x8a\x4c\xef\x0f\x19\x50\xdd\x82\x8f\xb6\xed\x1b\x45\x9e\x3a\x93\x68\xbb\x8a\x19\x35\x5d\x2d\xd8\x7b\xf9\xc4\x3c\x1e\xcf\xb9\x57\xb2\x4e\x66\x4a\x8d\x88\x17\x32\x5e\xaa\x31\xa9\xed\xaf\x6f\x95\x16\x6d\xee\x2e\x12\x7a\xad\xc4\x1a\xe9\xbe\xf5\x95\x34\xe9\xf8\x6e\xae\x0a\x93\xac\x40\xc6\x89\x6c\x8c\xd5\x61\x6d\x4e\x52\x2b\x0d\xcc\x0a\x83\x69\xcf\x91\x8c\x8b\x64\xde\xb5\xe5\x97\xcd\xd8\x8d\xe3\x88\x28\xa5\xb3\xa9\xa8\xd9\x4d\x74\x1b\x26\x6c\x6a\x26\x60\x79\x82\x26\xef\xd9\xe4\x57\xee\x3c\x78\xb1\x5c\x85\xae\xba\x8a\x3c\x55\xe9\xa2\x4a\xc7\x69\x11\xd2\xc8\xc7\xe5\x87\xd8\x16\xcc\xb3\x27\xbd\x67\x93\xcf\x32\x16\x85\xc7\x32\x87\x27\x0e\x77\x55\xeb\x4d\xff\x68\x47\x66\x7a\x5e\xa2\x55\xcf\xb5\x07\x2e\xb2\x67\x1c\x32\x21\xa3\xea\x74\x3f\x8d\xc4\x39\x62\x80\xda\x6c\x1c\xb6\x41\xd4\x53\x8d\x02\x70\x6a\x67\xe3\xbb\x8e\x54\x8f\x67\xdb\x38\x25\x5c\x6d\xd6\x59\x5b\x00\xeb\x4b\xe5\x9f\x5a\x54\x87\x58\xc9\x3d\x31\xdd\x8f\x94\xa7\xab\xa6\x7c\x6e\xbc\x51\x59\xfa\x60\xce\x85\xa6\x61\x45\x68\x0d\x23\x72\xb3\x05\xbe\x8d\x30\xb3\xf3\x09\x33\x6b\x76\xc0\xec\x0a\x35\x3b\x9e\x26\x06\xf7\x04\xb8\x27\xc0\x3d\x01\xee\x09\x70\x4f\xa8\xdb\x7c\xc1\xbd\x07\xd4\x23\x40\xa1\x40\xa1\x40\xa1\x40\xa1\x40\xa1\x40\xa1\xe3\x42\xa1\xa0\x13\xa0\x13\xa0\x13\xa0\x13\x9d\xd3\x89\x3d\x08\x7e\x4f\x03\xc1\x9a\x75\xe1\x7a\x30\xd8\x4b\x2d\x6e\xbd\xe2\x3a\x1b\x6f\x40\x52\x3f\x24\xf5\x3b\xb3\xa4\x7e\xc8\x86\xdf\xf3\x0c\x07\xe6\xaf\xbf\xf3\x41\x96\x49\xcb\x60\x50\xeb\x6e\x8c\xef\x64\x80\xfa\xc2\x6e\x28\xe0\x61\x51\xae\x5b\xe6\x4f\x57\x7b\x63\x2b\x61\xaf\x08\xbd\x2a\x8e\x7a\x6f\x43\xaf\xc8\x36\xf3\x95\x87\xdc\x13\xb1\xb6\x32\xea\x8d\x32\x49\xa4\xe3\x93\xda\x9c\xd9\xf3\x38\x99\x65\x65\xcc\x44\x98\x2a\x39\xd6\xda\x11\x96\xfc\x41\xf5\x62\x7a\x2f\x12\x61\x85\xc1\x62\x80\x91\x0d\x44\x22\x61\x98\x6c\x77\x32\x66\xd7\x6f\xff\xa5\xae\x8d\xb9\x43\xb0\x2e\x90\xa1\xa7\x45\x3f\xb2\xaf\x39\x32\x4c\xb9\x1f\xea\xdd\x89\xec\x57\xf9\xb5\x04\x30\x0c\x4a\x64\xf3\xe7\x4c\xbb\xf1\x64\xc0\x43\x6f\x26\x63\xef\x2a\x7a\xf0\xae\x56\xa1\xef\x48\x57\x5c\xfd\xf4\x25\xb9\x55\x4f\x39\xd8\x20\x6e\x3a\xa7\xcd\xe1\xe9\x95\xac\x38\x58\x11\xae\xa9\xf8\xf6\xb6\x81\xf8\xf6\x41\x1b\xf7\x7a\xf6\xdd\x6f\x77\x7e\xb7\x76\x28\xee\xd9\x87\x8f\x56\x5e\x26\xc1\x64\x08\xf2\xf2\x2b\xd6\x5e\x5e\x92\x9a\xf2\xfe\x1d\xa6\x27\xd9\x2d\xa2\x6d\x4c\x49\x82\x44\x24\x90\xc8\x46\x20\x91\x21\xf4\xfb\x8c\x42\xbf\x11\xe3\x86\x18\x37\xc4\xb8\x21\xc6\x0d\xca\xe4\xa6\x55\xd4\xcb\x80\x92\xd3\xa8\x66\x88\x87\xc9\xae\xdc\x1a\x0f\x33\x08\x15\x2d\xb3\x76\xb7\x1e\x05\x13\x0b\xee\x56\x84\xb0\x5d\x3a\x95\xba\x65\x4f\x8d\x0a\x1b\x0c\x8c\x27\x7b\xad\x4d\x4f\x0c\xc3\x76\xf2\x12\xd6\x88\x22\xe2\xc0\xa6\xa7\xc3\xa6\xe4\x91\x71\x50\xfd\xd9\x29\xdd\xfb\xf3\xf6\x0d\x7b\x29\x62\x4f\x34\xba\x32\x49\x63\x9e\x0a\xcf\x77\xa6\xcd\xef\x51\x7f\x3f\x9b\x2b\xe9\x68\x68\x72\xd4\x45\x3c\x4e\x7d\x0a\x98\xd2\xde\x43\x7b\x1e\x7b\xf4\xb6\x3e\x59\x12\xbb\x82\xbd\x5b\x24\xc7\xdb\xb2\x1f\x0f\x83\x7d\x71\xe4\xf6\xc5\xf3\x21\xbe\x95\xe8\x03\xbb\xb8\x74\x84\x8c\xda\x6e\xf2\xa8\xeb\xd7\x1b\xb6\xa2\x37\x64\x5d\xd1\x61\xb1\x3c\xa0\x3b\x43\x19\x4e\xf5\xdd\x74\x05\x19\x38\x13\xf6\xfa\xb7\x44\x86\xb7\x3a\xf8\xf8\xab\xda\xf4\xcc\xdf\x3f\xec\x56\x98\xff\xe3\x9b\x3e\xa1\xe8\xe6\xf3\xe6\xb3\x8c\x1d\xb2\x00\x7b\x92\x06\x5f\xb2\xbb\x8b\x85\xfa\xb7\xbb\x0b\x76\x53\xea\x4d\xf2\x6d\xd6\xe6\xda\x55\x92\x07\x5a\x4e\xb9\x43\x03\x40\xe1\xab\x81\xef\x18\x03\x94\x08\xdc\x84\xc9\x27\x33\xb6\x3a\xbc\x33\x12\x32\x0a\xc4\x8c\xe9\x77\x52\xd4\xba\x9d\x53\xe4\x61\x5c\x3b\x10\xd9\xeb\x0f\xe9\x5e\xf5\xa2\xf1\xfa\x83\x42\x6b\x1a\xaa\xd6\x14\x55\x9c\x74\x87\xa0\x37\xad\x5a\x37\x68\x44\x01\x77\xf6\x15\xee\xcc\x5d\xe7\x20\xde\xc1\x97\x0f\x92\xdd\x59\x49\x76\x3d\x12\xa0\x70\xce\x67\xbf\xc0\x97\xef\x0c\xe5\x93\xd5\x30\xac\xba\xaf\xd8\x5e\x1e\x71\x14\xdd\x54\x53\x98\xab\x75\x58\x63\x22\xe0\x43\xd7\x7f\xf4\xdd\x15\x0f\x8a\xd1\x74\x3c\xcb\x79\x41\xad\x9e\x15\x9c\x3d\xde\x65\x6e\x22\x13\x7a\xc2\x24\xcf\x7c\x54\x4a\x65\x93\xc9\x44\xcc\x0f\x93\x54\xf0\x92\xc5\xb2\x2a\x31\x3d\x6d\x30\x87\x65\x01\x53\x9f\x65\x7c\x13\x04\x99\xf8\x94\xf4\x01\x08\x6d\xbc\xe1\xbc\x42\xdd\xb6\x58\xf8\x28\x52\xf3\xd3\xa3\x08\x11\xf0\x46\x23\x79\x16\x51\x6f\xc8\x31\x38\xe2\x1c\x83\xbb\x41\xd3\xae\xfc\x82\x87\x97\xbe\x6c\x06\xd1\x90\x55\x10\x59\x05\x91\x55\x10\x59\x05\xc7\x96\x55\x70\xf7\xce\x5b\x9b\x51\xb0\x63\x97\x85\xa3\xe5\x11\xdc\xdd\xfc\xcd\x39\x04\xfb\xdc\x07\xfb\x64\x0e\xdc\xdd\x07\x9b\xb3\x06\x76\xdc\x07\xc8\x15\x88\x5c\x81\xc8\x15\x88\x5c\x81\xc8\x15\xd8\x59\xae\xc0\x06\xbb\xff\x5a\x9e\xc0\xad\xc1\x64\x67\xe4\xb1\xd8\xac\x35\x23\xce\x75\xb8\xbb\xbb\xb7\xe5\x39\x3c\x6e\xbf\x23\xbb\x61\x27\x23\xba\x9e\xd9\xb0\xe3\x61\x3d\x69\x3e\xc3\xdd\xdd\xb3\x25\x97\x61\xd7\xdb\x66\x5f\x33\x18\xee\xee\xb4\x1a\x9c\x71\xb0\x3d\xcf\xfc\xf5\xf7\x41\x80\x6c\x6b\xe2\x88\xb3\xe7\x66\x15\x3f\xa3\xdf\x2b\xdc\x01\xc4\x0c\xc4\x8c\x81\x98\x81\x98\x81\x98\x81\x98\x81\x98\x81\x98\x81\x98\x81\x98\x81\x98\x55\xb6\xdb\x1e\xd2\x22\x10\x33\x10\x33\x10\x33\x10\x33\x10\x33\x10\x33\x10\xb3\x21\x12\x33\x24\x37\x01\x2a\x04\x2a\x04\x2a\xec\xf5\x88\x02\x15\x96\xbb\x07\xa8\x70\xb4\xa8\xb0\x26\xc7\x7c\x47\xc4\xb0\x88\x09\x43\x2b\xfd\xc8\x05\x7b\xf0\x43\xb7\x45\x5c\x78\x99\x6b\x3a\xa4\xcd\x19\xa9\x58\x29\x4b\xb9\x0a\x37\x29\xa9\xfe\x85\x67\xb7\x00\x1b\x01\x1a\x01\x1a\x87\x07\x1a\x01\x19\x01\x19\x01\x19\x01\x19\x01\x19\x01\x19\x01\x19\x01\x19\x01\x19\x01\x19\x01\x19\x01\x19\x01\x19\x01\x19\x01\x19\x01\x19\x07\x05\x19\x51\x0c\x02\xbc\x14\xbc\xb4\xaf\x74\x0d\xbc\x14\xbc\x14\xbc\x14\xbc\xb4\xd2\x69\x47\xe2\xa5\xae\x9f\x38\x52\x89\x64\x16\x96\x1e\x84\x3e\x4f\x92\x4e\xb8\x32\xd4\x1e\xd5\x0d\x5d\xc8\x78\x99\x4d\x6d\xce\x34\x8c\xd9\x0c\x31\x3d\x91\x7e\xb4\x3d\x70\x73\xfb\xe5\xbf\xaa\x97\x23\x7f\xf2\x9e\x20\x31\xeb\xc4\x81\x63\xc4\x6c\x5d\x14\x6e\x79\x55\x7c\xed\x8e\x65\xf4\x78\x3d\xec\x95\x54\xd2\xf6\xf5\xfe\xd8\x70\x19\xfd\x79\x7d\x73\xfb\xe5\x7b\xdd\x4d\x58\x4c\xfb\x2f\x26\xdb\x91\x14\xb3\x3d\x96\x35\xf5\x3f\x8f\xd7\x87\x2f\x2b\x11\xba\x91\xf4\xc3\x34\x09\x7c\xa7\xe3\xd8\x7e\x6d\x18\x8e\x8d\x69\xc9\x5a\x1e\xac\x93\xce\x27\xf3\x21\x3f\xd4\x87\x6c\x59\x1c\xea\x29\x85\xd5\x51\xba\x0d\x89\xac\xab\x43\xd0\x9b\x75\x39\xcb\x27\xdf\xe3\xf5\xac\x34\x6a\x23\x5e\x8c\xbb\xfd\x63\xda\x8a\xc1\xaf\xae\xed\x7a\xdf\x98\x4d\x8b\xac\xea\x23\x03\xf7\x18\xb8\xc7\xc0\x3d\x06\xee\x31\x70\x8f\x81\x7b\x0c\xdc\x63\xe0\x1e\xb3\xcf\x6e\x0b\xf7\x18\xb8\xc7\xc0\x3d\x06\xee\x31\x70\x8f\x81\x7b\x0c\xdc\x63\xce\xce\x3d\x06\xae\x15\x70\xad\x80\x6b\xc5\x30\x46\x14\xae\x15\xe5\xee\x81\x6b\xc5\x80\x5c\x2b\x1e\xaf\x37\x05\x9f\x6f\x66\x5a\x5a\xe8\x69\x17\x6b\xe9\x67\x32\x47\x06\x4a\xc7\x32\x73\xb5\x29\xcd\xd2\x37\x17\x78\xd6\x87\xec\x31\x79\xe4\xf7\xc6\x87\x75\x5b\xd6\xbe\x13\x08\xfb\x91\x1a\xfc\x8d\x7a\x2f\x69\xa5\x8a\x3d\xac\xbb\xb0\xee\xc2\xba\x0b\xeb\xee\xd8\xac\xbb\x5b\xce\xde\x5d\x16\xde\xed\x72\xdc\xf6\x33\x78\xaf\xbd\xf7\x2f\xd5\x71\x46\xaf\xbd\xa4\xb2\x0d\x8e\x9a\x51\x7a\x1e\x94\xda\x56\x24\xa9\x73\xc1\x22\xd5\x5b\x89\x52\x01\xd9\x4d\xc8\xfc\x50\xef\x2c\x32\x66\xab\x30\xdb\x9c\x5c\xe6\xc6\xcf\xdf\x57\x21\x73\xfd\x58\x1d\x89\x8f\x22\x9b\xf1\x6a\xfb\x24\x2b\x84\x59\xf2\x76\x6e\x98\x0e\x66\x8b\x55\x4c\xab\x2c\x8a\xa5\x23\x12\x32\x17\x18\x01\xd2\xcc\xb2\x19\xfb\x93\xde\x48\xa3\x45\x73\xe7\x1d\x9b\xb2\x9b\x20\x78\x47\xc6\x00\x57\xed\xd2\xab\x50\x0d\xbc\x12\xc5\xec\x94\x34\x8f\x13\xee\x01\x03\xa5\xdb\x72\x9a\x61\x3a\x9a\x49\xbe\x59\x57\x6c\x36\xcb\x1f\xad\x47\xfe\x28\xea\x16\xbe\xd2\xeb\x49\xe4\x67\x73\xb1\xd0\xbe\x03\x99\xf9\x26\x17\x25\xcc\xee\x45\x53\x67\x25\xf4\xe1\x30\x57\x52\x75\x38\x0d\x85\xc7\x69\x82\x1a\xed\x40\x29\x32\xf6\x04\xd5\xa6\xdc\x6c\x69\x18\x71\xd1\x5f\x2e\x85\xeb\xf3\x54\x04\xcf\x39\xd4\xcf\x8f\x5c\x3f\xb8\x34\xd2\x3f\x75\x3a\xf3\x62\xee\xd0\xaa\xf1\xa5\x9b\x09\x04\xf9\xa1\x4d\x1e\x13\x76\x96\xae\x12\xf5\x91\xc5\xe1\xe2\xea\x4e\xdb\x20\xf3\x92\x85\xde\x03\xed\x23\x66\xfa\x3b\x97\x82\x87\xb5\xdf\x78\xc0\x30\xd3\x37\xdf\xd2\x27\xd7\x69\x54\x3b\x74\xaa\xbe\x4c\xff\x7d\x68\x4c\xb3\x7e\xd9\x4c\x64\x8e\x36\xfd\xc1\x66\xc0\x66\xc0\x66\xc0\x66\xc0\x66\x3a\x63\x33\x0d\xcf\x82\x35\x3e\x73\xbc\x63\xf1\x63\x21\x1f\x62\x44\x09\x1b\xb3\x2d\xe8\x36\x96\x11\xf7\x48\x3a\xba\x95\x81\xef\x3c\x97\x3c\x01\xed\xa4\xcb\x13\x2a\xaa\x69\x77\x3d\xfb\x65\xc6\x7e\xe8\xfd\x4c\x8b\x2e\x91\x08\xd5\x62\xc9\xcf\x54\xc1\x64\x1c\xdd\xf3\xd0\x7a\x26\xc6\x2b\x71\xb5\xe0\x81\xd5\x95\xef\x2e\xf4\xcf\x77\x17\x6c\xe1\x87\x3c\xf0\xff\xb1\x07\xc9\x5c\x30\xee\x92\xc1\x5e\x5e\x69\x63\xa6\x9b\xab\x61\xfa\xf1\x93\x24\xbf\x49\xeb\xa7\x33\xf6\xc9\xa7\xcd\xb1\xf0\xe9\x32\x5e\x6f\x5b\x8e\x67\x52\xad\x1e\x93\x8e\x22\xd3\xfb\x43\x06\x54\xb7\xe0\xa3\x6d\xfb\x46\x91\xa7\xce\x34\xda\xae\x62\x46\x4d\x57\x0b\xf6\x5e\x3e\x31\x8f\xc7\x73\xee\x95\xac\x94\x99\x52\x23\xe2\x85\x8c\x97\x6a\x4c\x6a\xfb\xeb\x5b\xa5\x45\x9b\xbb\x8b\x84\x5e\x2b\xb1\x46\xba\x6f\x7d\x25\x4d\x3a\xbe\x9b\xab\xc2\x24\x2b\x90\x71\x22\x1b\xe3\x84\x82\xcd\xe8\x57\x2b\x0d\xcc\x0a\x83\x69\xcf\x91\x8c\x8f\x64\x5e\xb6\xe5\x97\xcd\xd8\x8d\xe3\x88\x28\xa5\xb3\xa9\xa8\xd9\x4d\x74\x1b\x26\x6c\x6a\x26\x60\x79\x82\x26\xef\xd9\xe4\x57\xee\x3c\x78\xb1\x5c\x85\xae\xba\x8a\x3c\x56\xe9\xa2\x4a\xc7\x69\x11\xd2\xc8\xc7\xe5\x87\xd8\x16\xcc\xb3\x27\xbd\x67\x93\xcf\x32\x16\x85\xc7\x32\x87\x27\x0e\x77\x55\xeb\x4d\xff\x68\x87\x66\x7a\x5e\xa2\x55\xcf\xb5\x07\x2e\xb2\x67\x1c\x32\x21\xa3\xea\x74\x3f\x8d\xc4\x39\x62\x90\xda\x6c\x1c\xb6\xc1\xd4\x53\x8d\x02\xb0\x6a\x67\xe3\xbb\x8e\x56\x8f\x67\xdb\x38\x25\x64\x6d\xd6\x59\x5b\x40\xeb\x4b\xe5\x9f\x5a\x64\x87\x58\xc9\x3d\x31\xdd\x8f\x94\xa7\xab\xa6\x7c\x6e\x7c\x51\x59\xfa\x40\xce\x85\xa5\x61\x45\x68\x0d\x23\x72\xb3\x45\xbe\x8d\x70\xb3\xf3\x09\x37\x6b\x76\xc0\xec\x0a\x39\x3b\x9e\x26\x06\xf7\x04\xb8\x27\xc0\x3d\x01\xee\x09\x70\x4f\xa8\xdb\x7c\xc1\xbd\x07\xd4\x23\x40\xa1\x40\xa1\x40\xa1\x40\xa1\x40\xa1\x40\xa1\xe3\x42\xa1\xa0\x13\xa0\x13\xa0\x13\xa0\x13\x9d\xd3\x89\x3d\x08\x7e\x4f\x03\xc2\x9a\x75\xe1\x7a\x50\xd8\x4b\x2d\x6e\xbd\xe2\x3a\x1b\x6f\x40\x52\x3f\x24\xf5\x3b\x93\xa4\x7e\x28\x1e\xd1\xf3\x0c\x07\xe6\xaf\xbf\xf3\x41\x96\x49\xcb\x60\x50\xeb\x6c\x8c\x87\x8d\x21\xa0\xbe\xa3\x1b\x0c\x78\x58\x98\xeb\x96\x89\xd4\xd5\xe6\xd8\x4a\xdc\x2b\x62\xaf\x8a\xa3\xde\xdb\xd8\x2b\x32\xce\x7c\xe5\x21\xf7\x44\xac\xcd\x8c\x7a\xc7\x4c\x12\xe9\xf8\xa4\x37\x67\x06\x3d\x4e\x76\x59\x19\x33\x11\xa6\x4a\x90\xb5\x86\x84\x25\x7f\x50\xbd\x98\xde\x8b\x44\x58\x69\xb0\x18\x61\x64\x23\x91\x48\x1a\x26\xe3\x9d\x8c\xd9\xf5\xdb\x7f\xa9\x6b\x63\xee\x10\xad\x0b\x64\xe8\x69\xd9\x8f\x0c\x6c\x8e\x0c\x53\xee\x87\x7a\x9b\x22\x03\x56\x7e\x2d\x11\x0c\xc3\x12\xd9\xfc\x39\x53\x6f\x3c\x19\xf0\xd0\x9b\xc9\xd8\xbb\x8a\x1e\xbc\xab\x55\xe8\x3b\xd2\x15\x57\x3f\x7d\x49\x6e\xd5\x53\x0e\xb6\x88\x9b\xce\x69\x73\x78\x7a\x25\x2c\x0e\x56\x86\x6b\x2a\xbf\xbd\x6d\x20\xbf\x7d\xd0\xd6\xbd\x9e\x7d\xf7\xdb\x9d\xdf\xad\x3d\x8a\x7b\xf6\xe1\xa3\x13\x98\x49\x32\x19\x82\xc0\xfc\x8a\xb5\x97\x98\x44\xff\xf4\x9f\x23\xe5\x27\xd9\x43\x46\x5b\x4b\x4a\x72\x72\x19\x6d\x20\xa9\x48\x20\x92\x15\x07\xb9\xb7\x22\x19\x82\xbf\xcf\x28\xf8\x1b\x51\x6e\x88\x72\x43\x94\x1b\xa2\xdc\xa0\x4d\x6e\x5a\x45\xbd\x0c\x29\x39\x8d\x6e\x86\x88\x98\xed\x11\x31\x83\xd0\xd1\x32\x7b\x77\xeb\x71\x30\xb1\xe0\x6e\x45\xf8\x6a\xaa\x53\xa9\x5b\xf7\xd4\xa8\xb0\xc1\xc0\x7a\xd2\x68\x6d\x7a\x62\x18\xc6\x93\x97\xd0\xc6\x62\xd5\xfd\x2d\x9f\x80\xea\xfb\xf5\x6d\x06\x40\x6d\x05\xa0\x92\x4f\xc6\x41\x95\x67\xa7\x74\xef\xcf\xdb\x37\xec\xa5\x88\x3d\xd1\xe8\xca\x24\x8d\x79\x2a\x3c\xdf\x99\x36\xbf\x47\xfd\xfd\x6c\xae\xa4\xa3\xa1\xc9\x91\x17\xf1\x38\xf5\x29\x64\x4a\xfb\x0f\x1d\x78\xfc\xd1\x5b\xfb\x64\x51\xec\x8a\xfa\x6e\x91\x20\x6f\xcb\x1e\x3d\x0c\x76\xc6\x91\xdb\x19\xcf\x07\xfd\x56\xe2\x10\xec\xe2\xd2\xb1\x32\x6a\xdb\xc9\xe3\xaf\x5f\x6f\xd8\x92\xde\x90\x95\x45\x07\xc8\xf2\x80\xee\x0c\x65\x38\xd5\x77\xd3\x15\x64\xe8\x4c\xd8\xeb\xdf\x12\x19\xde\xea\x30\xe4\xaf\x6a\xf3\x33\x7f\xff\xb0\x5b\x62\xfe\x8f\x6f\xfa\xc4\xa4\x9b\xcf\x9b\xcf\x32\x76\xc8\x12\xec\x49\x1a\x7c\xc9\xee\x2e\x16\xea\xdf\xee\x2e\xd8\x4d\xa9\x37\xc9\xcb\x59\x9b\x6d\x57\x49\x1e\x72\x39\xe5\x0e\x0d\x00\x05\xb2\x06\xbe\x63\x0c\x51\x22\x70\x13\x26\x9f\xcc\xd8\xea\x40\xcf\x48\xc8\x28\x10\x33\xa6\xdf\x49\xf1\xeb\x76\x4e\x91\xaf\x71\xed\x40\x64\xaf\x3f\xa4\x7b\xd5\x8b\xc6\xeb\x19\x0a\xed\x69\x68\xda\x53\x54\x71\xd3\x1d\x82\xfe\xb4\x6a\xdd\xb0\x11\x05\xdc\x39\x54\xb8\x33\x77\x9f\x83\x78\x07\xa7\x3e\x48\x76\x67\x25\xd9\xf5\x48\x80\xc2\x39\x9f\xfd\x02\xa7\xbe\x33\x92\x4f\x56\xc3\xb0\xee\xbe\x62\x8d\x5c\xe3\x28\xae\x69\x4b\x89\xae\xd6\xa1\x8d\x89\x81\x0f\x5d\xff\xd1\x77\x57\x3c\x28\xc6\xd3\xf1\x2c\xeb\x45\xa9\xe1\xb3\x82\xd3\xc7\xbb\xcc\x5d\x64\x42\x4f\x9a\xe4\x39\x90\x4a\x49\x6d\x32\x99\x88\xf9\x61\x92\x0a\x5e\xb2\x5c\x56\x25\xa6\xa7\x8a\x39\x6c\x2d\x74\xea\xb3\x8c\x6f\x82\x20\x13\xa3\x92\x3e\x80\xa1\x8d\x37\x9c\x57\xd0\xdb\x16\x0b\x1f\xc5\x6c\x7e\x7a\x14\xe1\xf9\x86\xbe\xd1\x08\x9e\x45\xfc\x1b\xb2\x0c\x8e\x38\xcb\xe0\x6e\xd0\xb4\x2b\xc3\xe0\xe1\x45\x30\x9b\x41\x34\xe4\x15\x44\x5e\x41\xe4\x15\x44\x5e\xc1\xb1\xe5\x15\xdc\xbd\xf3\xd6\xe6\x14\xec\xd8\x65\xe1\x68\x99\x04\x77\x37\x7f\x73\x16\xc1\x3e\xf7\xc1\x3e\xb9\x03\x77\xf7\xc1\xe6\xbc\x81\x1d\xf7\x01\xb2\x05\x22\x5b\x20\xb2\x05\x22\x5b\x20\xb2\x05\x76\x96\x2d\xb0\xc1\xee\xbf\x96\x29\x70\x6b\x30\xd9\x19\x79\x2c\x36\x6b\xcd\x88\xb3\x1d\xee\xee\xee\x6d\x99\x0e\x8f\xdb\xef\xc8\x6f\xd8\xc9\x88\xae\xe7\x36\xec\x78\x58\x4f\x9a\xd1\x70\x77\xf7\x6c\xc9\x66\xd8\xf5\xb6\xd9\xd7\x1c\x86\xbb\x3b\xad\x06\x63\x1c\x6c\xcf\x33\x7f\xfd\xbd\x17\x20\x6b\x94\x41\xe2\xec\xb9\xd9\x06\x3f\xa3\xdf\x2b\xfc\x01\xc4\x0c\xc4\x8c\x81\x98\x81\x98\x81\x98\x81\x98\x81\x98\x81\x98\x81\x98\x81\x98\x81\x98\xf5\x97\x16\x81\x98\x81\x98\x81\x98\x81\x98\x81\x98\x81\x98\x81\x98\x0d\x91\x98\x21\xb9\x09\x50\x21\x50\x21\x50\x61\xaf\x47\x14\xa8\xb0\xdc\x3d\x40\x85\xa3\x45\x85\x35\xc9\xe6\x3b\x22\x86\x45\x4c\x18\x5a\xe9\x47\x2e\xd8\x83\x1f\xba\x1d\xe0\xc2\xcb\x5c\xe3\x21\xad\xce\x48\xc7\x4a\x69\xca\x55\xb9\x49\xc9\x04\x50\x78\x76\x0b\xb0\x11\xa0\x11\xa0\x71\x38\xa0\x11\x90\x11\x90\x11\x90\x11\x90\x11\x90\x11\x90\x11\x90\x11\x90\x11\x90\x11\x90\x11\x90\x11\x90\x11\x90\x11\x90\x11\x90\x11\x90\x71\x50\x90\x11\x45\x21\xc0\x4d\xc1\x4d\xfb\x4e\xd9\xc0\x4d\xc1\x4d\xc1\x4d\xc1\x4d\x2b\x9d\x76\x3a\x6e\x3a\x17\x29\xbf\xbe\x3a\x08\x85\x9e\x24\xad\x70\x65\xc8\x3d\x91\x96\x75\x16\x3d\xba\x5b\x48\xa6\x27\xd2\x02\xc7\xa4\xe6\xdf\xdc\x7e\xf9\x5e\x77\x27\xf2\x29\xef\x09\x16\x0b\x1d\x49\x61\xa7\x23\xa2\x8b\x34\x51\x0a\xb7\xbe\x2a\xbe\xbe\xe1\x2a\x3b\x62\xc0\xb2\xb6\x76\xc5\x46\x5f\xb6\xea\x54\xad\xe7\xc1\x96\xb5\xa2\x9e\x52\x5d\x2c\xa5\x7b\x91\x9a\xb7\x3a\x0e\xbd\x59\xa6\xa5\xf4\xe1\x34\x72\xb3\xf5\xb8\xf0\x11\x2f\xd0\xdd\x3e\x00\xfd\x8c\x33\xae\xb4\x03\x7e\x00\xf0\x03\x80\x1f\x00\xfc\x00\xe0\x07\x00\x3f\x00\xf8\x01\xc0\x0f\x60\xf7\x6e\x0b\x3f\x00\xf8\x01\xc0\x0f\x00\x7e\x00\xf0\x03\x80\x1f\x00\xfc\x00\xce\xce\x0f\x00\xec\x18\xec\x18\xec\x78\x18\x23\x0a\x76\x5c\xee\x1e\xb0\xe3\x01\xb2\xe3\xbd\xb3\xf3\x6a\xc9\xa7\x5d\xde\xa5\x9f\xc9\x1c\x19\x28\x45\xcb\x4c\xd8\xa6\x98\x4b\xdf\x5c\x05\x5d\x1f\xb2\x67\x9d\xbc\x82\x77\x27\xb0\xf6\x23\xb5\xfa\x1b\x75\x61\xd2\x4a\xc1\x6e\xd8\x79\x61\xe7\x85\x9d\x17\x76\xde\xb1\xd9\x79\x9b\x95\x7a\xaf\xb5\xf5\x1e\xad\x0a\xff\x5f\xaa\xe3\x8c\x86\x7b\x49\x99\xea\x1d\x35\xa3\xf4\x3c\x28\xb5\xad\xc8\x54\xe7\x82\x45\xaa\xb7\x12\xa5\x0c\xb2\x9b\x90\xf9\xa1\xde\x59\x64\xcc\x56\x61\xb6\x39\xb9\xcc\x8d\x9f\xbf\xaf\x42\xe6\xfa\xb1\x3a\x12\x1f\x45\x36\xe3\xd5\xf6\x49\xf6\x08\xb3\xe4\xed\xdc\x30\x1d\xcc\x16\xab\x98\x56\x59\x14\x4b\x47\x24\x64\x38\x30\xa2\xa4\x99\x65\x33\xf6\x27\xbd\x91\x46\x8b\xe6\xce\x3b\x36\x65\x37\x41\xf0\x8e\xcc\x02\xae\xda\xa5\x57\xa1\x1a\x78\x25\x94\xd9\x29\x69\x1e\xb7\x5e\x6f\xbd\xc1\x40\xe9\xb6\x9c\x66\x98\x8e\x66\x9c\x6f\xd6\x15\x9b\x0d\xf4\x47\xeb\x91\x3f\x8a\x5a\x86\xaf\x34\x7c\x12\xfe\xd9\x5c\x2c\xb4\x17\x41\x66\xc8\xc9\x45\x09\xb3\x7b\xd1\xd4\x59\x09\x7d\x38\xcc\x95\x7c\x1d\x4e\x43\xe1\x71\x9a\xa0\x46\x4f\x50\x2a\x8d\x3d\x41\xb5\x51\x37\x5b\x1a\x46\x66\xf4\x97\x4b\xe1\xfa\x3c\x15\xc1\x73\x8e\xf7\xf3\x23\xd7\x0f\x2e\x8d\x1e\x40\x9d\xce\xbc\x98\x3b\xb4\x6a\x7c\xe9\x66\x02\x41\x7e\x68\x93\xef\x84\x9d\xa5\xab\x44\x7d\x64\x71\xb8\xb8\xba\xd3\x36\xc8\xbc\x64\xa1\xf7\x40\xfb\x88\x99\xfe\xce\xa5\xe0\x61\xed\x37\x1e\x30\xcc\xf4\xcd\xb7\xf4\xc9\x75\xba\xd5\x0e\xed\xaa\x2f\xd3\x7f\x1f\x2e\xd3\xac\x5f\x36\xb3\x99\xa3\x4d\x7f\x50\x1a\x50\x1a\x50\x1a\x50\x1a\x50\x9a\xce\x28\x4d\xc3\xb3\x60\x8d\xd4\x1c\xef\x58\xfc\x58\x48\xfd\x16\x05\x82\x27\x22\xdb\x82\x6e\x63\x19\x71\x8f\xa4\xa3\x5b\x19\xf8\xce\x73\xc9\x27\xd0\x4e\xba\x3c\x77\x9c\x9a\x76\xd7\xb3\x5f\x66\xec\x87\xde\xcf\xb4\xe8\x12\x89\x50\x2d\x96\xfc\x4c\x15\x4c\xc6\xd1\x3d\x0f\xad\x8f\x62\xbc\x12\x57\x0b\x1e\x58\x5d\xf9\xee\x42\xff\x7c\x77\xc1\x16\x7e\xc8\x03\xff\x1f\x7b\x90\xcc\x05\xe3\x2e\x99\xee\xe5\x95\x36\x6b\xba\xb9\x1a\xa6\x1f\x3f\x49\xf2\x9b\xb4\x7e\x3a\x63\x9f\x7c\xda\x1c\x0b\x9f\x2e\xe3\xf5\xb6\xe5\xa0\x26\xd5\xea\x31\xe9\x28\x32\xbd\x3f\x64\x40\x75\x0b\x3e\xda\xb6\x6f\x14\x79\xea\x8c\xa4\xed\x2a\x66\xd4\x74\xb5\x60\xef\xe5\x13\xf3\x78\x3c\xe7\x5e\xc9\x54\x99\x29\x35\x22\x5e\xc8\x78\xa9\xc6\xa4\xb6\xbf\xbe\x55\x5a\xb4\xb9\xbb\x48\xe8\xb5\x12\x6b\xa4\xfb\xd6\x57\xd2\xa4\xe3\xbb\xb9\x2a\x4c\xb2\x02\x19\x27\xb2\x31\x56\x87\xb5\x39\x49\xad\x34\x30\x2b\x0c\xa6\x3d\x47\x32\x52\x92\xf9\xdb\x96\x5f\x36\x63\x37\x8e\x23\xa2\x94\xce\xa6\xa2\x66\x37\xd1\x6d\x98\xb0\xa9\x99\x80\xe5\x09\x9a\xbc\x67\x93\x5f\xb9\xf3\xe0\xc5\x72\x15\xba\xea\x2a\xf2\x5d\xa5\x8b\x2a\x1d\xa7\x45\x48\x23\x1f\x97\x1f\x62\x5b\x30\xcf\x9e\xf4\x9e\x4d\x3e\xcb\x58\x14\x1e\xcb\x1c\x9e\x38\xdc\x55\xad\x37\xfd\xa3\x5d\x9b\xe9\x79\x89\x56\x3d\xd7\x1e\xb8\xc8\x9e\x71\xc8\x84\x8c\xaa\xd3\xfd\x34\x12\xe7\x88\x91\x6a\xb3\x71\xd8\x86\x55\x4f\x35\x0a\x00\xac\x9d\x8d\xef\x3a\x64\x3d\x9e\x6d\xe3\x94\xb8\xb5\x59\x67\x6d\x41\xae\x2f\x95\x7f\x6a\xb9\x1d\x62\x2a\xf7\xc4\x74\x3f\x52\x9e\xae\x9a\xf2\xb9\x91\x46\x6a\xe9\x53\x39\x97\x98\x06\x18\xb5\x35\xa0\x08\xcf\x16\x71\x37\xe2\xd0\xce\x27\x0e\xad\xd9\x79\xb3\x2b\x16\xed\x78\x8a\x19\xbc\x15\xe0\xad\x00\x6f\x05\x78\x2b\xc0\x5b\xa1\x6e\xf3\x05\x06\x1f\x50\x8f\x80\x8c\x82\x8c\x82\x8c\x82\x8c\x82\x8c\x82\x8c\x8e\x8b\x8c\x02\x56\x00\x56\x00\x56\x00\x56\x74\x0e\x2b\xf6\x00\xfa\x3d\x8d\x14\x6b\xd6\x85\xeb\xd1\x62\x2f\xb5\xb8\xf5\x0a\xf3\x6c\xbc\x01\xc9\xff\x90\xfc\xef\x3c\x93\xff\x21\x8b\x7e\xcf\x33\x21\x98\xbf\xfe\xce\x07\x59\x26\x2d\xc3\x42\xad\xc2\x31\x1e\x36\x06\x83\xfa\x8e\x0e\xd1\xe0\x61\x91\xb0\x5b\x66\x53\xa7\x1b\x66\x2b\xf1\xb1\x88\xd1\x2a\x0e\x7d\x6f\x63\xb4\xc8\x6a\xf3\x95\x87\xdc\x13\xb1\xb6\x3f\xea\xbd\x33\x49\xa4\xe3\x93\x42\x9d\x59\xfa\x38\x19\x6c\x65\xcc\x44\x98\x2a\x09\xd7\x5a\x18\x96\xfc\x41\xf5\x62\x7a\x2f\x12\x61\xc5\xc4\x62\x24\x92\x8d\x58\x22\x31\x99\xac\x7a\x32\x66\xd7\x6f\xff\xa5\xae\x8d\xb9\x43\x18\x2f\x90\xa1\xa7\x85\x42\xb2\xbc\x39\x32\x4c\xb9\x1f\xea\x0d\x8b\x2c\x5b\xf9\xb5\x84\x36\x0c\x64\x64\xf3\xe7\x4c\xef\xf1\x64\xc0\x43\x6f\x26\x63\xef\x2a\x7a\xf0\xae\x56\xa1\xef\x48\x57\x5c\xfd\xf4\x25\xb9\x55\x4f\x39\xd8\x54\x6e\x3a\xa7\xcd\xe1\xe9\x95\x14\x39\x6c\xe1\xae\xa9\x60\xf7\xb6\x81\x60\xf7\x41\xdb\xfe\xfa\xf8\xf1\x6f\x77\x7e\xbc\xf6\x41\xee\xe3\xd7\x8f\x53\xa6\x26\xb9\x65\x30\x32\xf5\x2b\xd6\x72\x8e\x13\xfd\xd3\x7f\x8e\x94\xea\x64\x0f\x59\xae\x3e\xbf\xc9\xc9\x65\xb9\x81\x64\x35\x81\xd4\x56\x1c\xe4\xde\x4a\x6d\x88\x23\x3f\xa3\x38\x72\x04\xcc\x21\x60\x0e\x01\x73\x08\x98\x83\xc2\xb9\x69\x15\xf5\x32\x3a\xe5\x34\x4a\x1b\x82\x6b\xf4\x65\x5b\x83\x6b\x86\xa3\xb7\x65\x66\xf2\xd6\x43\x6a\x62\xc1\xdd\x8a\x18\xd6\x54\xc5\x52\xb7\x1e\xa2\x60\x61\xbf\x81\x95\x65\xcf\xf5\xea\x89\x01\x19\x59\x5e\x02\x2e\x51\xd1\x1c\x2c\xf6\xf4\x2c\x96\xbc\x3d\x0e\xaa\x87\x3b\xa5\x7b\x7f\xde\xbe\x7f\x2f\x45\xec\x89\x46\x57\x26\x69\xcc\x53\xe1\xf9\xce\xb4\xf9\x3d\xea\xef\x67\x73\x25\x9d\x14\x4d\x8e\xc1\x88\xc7\xa9\x4f\xc1\x58\xda\x33\xe9\xc0\x23\x91\xde\xda\x3b\xa3\x63\x57\x00\x79\x8b\x90\x79\x5b\x76\x18\x62\x30\x45\x8e\xdc\x14\x79\x3e\x00\xb9\x12\xe6\x60\x17\x97\x0e\xc5\x51\x7b\x4f\x1e\xde\xfd\x7a\xc3\xbe\xf4\x86\x0c\x31\x3a\xfe\x96\x07\x74\x67\x28\xc3\xa9\xbe\x9b\xae\x20\x5b\x68\xc2\x5e\xff\x96\xc8\xf0\x56\x47\x39\x7f\x55\x3b\xa0\xf9\xfb\x87\xdd\x17\xf3\x7f\x7c\xd3\x27\xb2\xdd\x7c\xde\x7c\x96\xb1\x43\xc6\x62\x4f\xd2\xe0\x4b\x76\x77\xb1\x50\xff\x76\x77\xc1\x6e\x4a\xbd\x49\x4e\xd4\xda\xb2\xbb\x4a\xf2\x88\xce\x29\x77\x68\x00\x28\x4e\x36\xf0\x1d\x63\xab\x12\x81\x9b\x30\xf9\x64\xc6\x56\xc7\x91\x46\x42\x46\x81\x98\x31\xfd\x4e\x0a\x8f\xb7\x73\x8a\x5c\x99\x6b\x07\x22\x7b\xfd\x21\xdd\xab\x5e\x34\x5e\xc7\x53\x68\x54\xc3\xd5\xa8\xa2\x8a\x3f\xf0\x60\x74\xaa\x55\xeb\x06\x90\x28\xe0\xce\xa1\x02\x9f\xb9\xfb\x6c\x44\x3e\xf8\x0c\x42\xe4\x3b\x3f\x91\xaf\x47\x92\x15\x04\x80\xec\x17\xf8\x0c\x36\xf8\xf8\x91\x4a\x2f\xab\x01\xd9\x83\x5f\xb1\xe6\x4e\x77\x14\x68\xb5\xa5\x8e\x58\xeb\xfc\xc7\x04\xe5\x87\xae\xff\xe8\xbb\x2b\x1e\x14\x03\xfc\x78\x96\x86\xa3\xd4\x05\xb3\x82\x27\xc9\xbb\xcc\x07\x65\x42\x4f\x9a\xe4\x49\x99\x4a\x59\x76\x32\xb1\x89\xf9\x61\x92\x0a\x5e\x32\x78\x56\x85\xaa\xa7\x3a\x2b\xda\x5a\x2c\xd7\x67\x19\xdf\x04\x41\x26\x69\x25\x7d\x60\x4c\x1b\x6f\x38\xaf\x50\xbc\x2d\x86\x41\x8a\x24\xfd\xf4\x28\xc2\x33\x8f\xc5\xa3\x61\x3c\x9f\x80\x3c\x64\x41\x1c\x71\x16\xc4\xdd\xb8\x6a\x57\x06\xc4\xc3\xab\x77\x36\x43\x71\xc8\x7b\x88\xbc\x87\xc8\x7b\x88\xbc\x87\x63\xcb\x7b\xb8\x7b\xe7\xad\xcd\x79\xd8\xb1\xe3\xc3\xd1\x32\x1d\xee\x6e\xfe\xe6\x2c\x87\x7d\xee\x83\x7d\x72\x1b\xee\xee\x83\xcd\x79\x0d\x3b\xee\x03\x64\x33\x44\x36\x43\x64\x33\x44\x36\x43\x64\x33\xec\x2c\x9b\x61\x83\xdd\x7f\x2d\x93\xe1\xd6\x80\xb5\x33\xf2\x7b\x6c\xd6\x9a\x11\x67\x63\xdc\xdd\xdd\xdb\x32\x31\x1e\xb7\xdf\x91\x7f\xb1\x93\x11\x5d\xcf\xbd\xd8\xf1\xb0\x9e\x34\xe3\xe2\xee\xee\xd9\x92\x6d\xb1\xeb\x6d\xb3\xaf\x39\x16\x77\x77\x5a\x0d\xd0\x38\xd8\x9e\x67\xfe\xfa\x7b\x7f\x68\xd6\x28\x5f\x05\x58\xda\x16\xf7\xa4\xdf\x2b\x38\x02\x14\x0d\x14\x8d\x81\xa2\xe9\xcb\x40\xd1\x40\xd1\x40\xd1\x40\xd1\x40\xd1\x40\xd1\x40\xd1\x40\xd1\xfa\x4d\x90\x40\xd1\x40\xd1\x40\xd1\x40\xd1\x40\xd1\x40\xd1\x40\xd1\x86\x48\xd1\x90\x36\x05\xf8\x10\xf8\x10\xf8\xb0\xd7\x23\x0a\x7c\x58\xee\x1e\xe0\xc3\x71\xe3\xc3\x9a\x74\xf7\x1d\x51\xc4\x22\x3a\x0c\xad\x08\x24\x17\xec\xc1\x0f\xdd\x0e\x10\xe2\x65\xae\xf6\x90\x6a\x67\x44\x64\xa5\x39\xe5\xfa\xdc\xa4\x64\x07\x28\x3c\xbb\x2d\x00\x09\xf8\x08\xf8\x38\x30\xf8\x08\xf0\x08\xf0\x08\xf0\x08\xf0\x08\xf0\x08\xf0\x08\xf0\x08\xf0\x08\xf0\x08\xf0\x08\xf0\x08\xf0\x08\xf0\x08\xf0\x08\xf0\x08\xf0\x38\x3c\xf0\x88\x12\x14\x60\xa9\x60\xa9\x7d\x27\x6f\x60\xa9\x60\xa9\x60\xa9\x60\xa9\x95\x4e\x3b\x12\x4b\xd5\xc6\x7e\x0b\x52\x0f\xc2\xa1\x27\xc9\x4d\x5c\x19\x67\x8f\x0a\x99\x2e\x64\xbc\xcc\xe6\x35\x67\x1a\xcb\x6c\x06\x9a\x9e\x48\x09\x7e\x25\x37\xb7\x5f\xfe\xab\x7a\x2d\x32\x31\xef\x09\x13\xb3\x4e\x1c\x38\x4a\xd4\x2b\xa2\x70\xfd\xab\xe2\x3b\xb7\xad\x9e\xc7\xeb\x61\x2f\xa0\x92\xa6\xaf\xf7\xc4\x26\xab\xe7\xcf\xeb\x9b\xdb\x2f\xdf\xeb\xee\xc0\x1a\xda\x7f\x0d\xd9\x8e\xa4\x10\xee\x51\x2c\xa5\xff\x79\xbc\x3e\x70\x35\x99\xa5\xd8\xa5\x8f\x8e\xb6\x01\xc7\xc6\x8a\x64\x8d\x0c\x99\x7b\x0e\xf9\x46\x6c\x5e\x03\xea\x6e\xbb\x08\xe8\xbf\x48\x65\x5d\xed\xef\xde\x2c\xbb\x99\x99\x5e\x8f\xd7\x33\x1a\xaa\xb1\x2e\xb0\xdd\xee\x2e\x6d\x85\xd9\x97\xd6\xeb\x06\x57\x97\xca\x02\xaa\xba\xb8\xc0\xbb\x05\xde\x2d\xf0\x6e\x81\x77\x0b\xbc\x5b\xe0\xdd\x02\xef\x16\x78\xb7\xec\xb3\xdb\xc2\xbb\x05\xde\x2d\xf0\x6e\x81\x77\x0b\xbc\x5b\xe0\xdd\x02\xef\x96\xb3\xf3\x6e\x81\x47\x04\x3c\x22\xe0\x11\x31\x8c\x11\x85\x47\x44\xb9\x7b\xe0\x11\x31\x14\x8f\x88\xc7\xeb\x8d\xf1\xe4\x6b\x70\x4a\x4b\x3a\xed\xf2\x29\xfd\x4c\xe6\xc8\x40\x29\x56\x66\x82\xee\xc2\x52\xfa\x26\x0b\xa6\x3e\x64\xf7\x16\x82\xb5\xab\x4f\xe8\xb6\x88\x7d\x27\xb0\xf4\x23\xb5\xf2\x1b\x75\x55\xd2\x4a\xb9\x7a\xd8\x6f\x61\xbf\x85\xfd\x16\xf6\xdb\xb1\xd9\x6f\xb7\x9c\xae\xbb\x6c\xb8\xdb\x25\xb5\xed\xa7\xec\x5e\x7b\xef\x5f\xaa\xe3\x8c\xe6\x7a\x49\xa5\x17\x1c\x35\xa3\xf4\x3c\x28\xb5\xad\xc8\x4a\xe7\x82\x45\xaa\xb7\x12\xa5\xe4\xb1\x9b\x90\xf9\xa1\xde\x59\x64\xcc\x56\x61\xb6\x39\xb9\xcc\x8d\x9f\xbf\xaf\x42\xe6\xfa\xb1\x3a\x0a\x1f\x45\x36\xe3\xd5\xf6\x49\x76\x06\xb3\xe4\xed\xdc\x30\x1d\xcc\x16\xab\x98\x56\x59\x14\x4b\x47\x24\x64\x10\x30\x22\xa2\x99\x65\x33\xf6\x27\xbd\x91\x46\x8b\xe6\xce\x3b\x36\x65\x37\x41\xf0\x8e\xd4\x7d\x57\xed\xd2\xab\x50\x0d\xbc\x12\xb6\xec\x94\x34\x8f\x13\xee\x01\x03\xa5\xdb\x72\x9a\x61\x3a\x9a\xd1\xbd\x59\x57\x6c\x36\xbc\x1f\xad\x47\xfe\x28\x6a\x0f\xbe\xd2\xdc\x49\xa8\x67\x73\xb1\xd0\xde\x01\x99\x81\x26\x17\x25\xcc\xee\x45\x53\x67\x25\xf4\xe1\x30\x57\x72\x73\x38\x0d\x85\xc7\x69\x82\x1a\xf9\x5f\xa9\x2a\xf6\x04\xd5\xc6\xda\x6c\x69\x18\xd9\xd0\x5f\x2e\x85\xeb\xf3\x54\x04\xcf\x39\xb6\xcf\x8f\x5c\x3f\xb8\x34\xf2\x3d\x75\x3a\xf3\x62\xee\xd0\xaa\xf1\xa5\x9b\x09\x04\xf9\xa1\x4d\x3e\x11\x76\x96\xae\x12\xf5\x91\xc5\xe1\xe2\xea\x4e\xdb\x20\xf3\x92\x85\xde\x03\xed\x23\x66\xfa\x3b\x97\x82\x87\xb5\xdf\x78\xc0\x30\xd3\x37\xdf\xd2\x27\xd7\xe9\x4c\x3b\xb4\xa6\xbe\x4c\xff\x7d\x78\x4b\xb3\x7e\xd9\xcc\x5c\x8e\x36\xfd\x41\x5f\x40\x5f\x40\x5f\x40\x5f\x40\x5f\x3a\xa3\x2f\x0d\xcf\x82\x35\x02\x73\xbc\x63\xf1\x63\x21\x6f\x61\x14\x08\x9e\x88\x6c\x0b\xba\x8d\x65\xc4\x3d\x92\x8e\x6e\x65\xe0\x3b\xcf\x25\x5f\x3f\x3b\xe9\xf2\xc4\x87\x6a\xda\x5d\xcf\x7e\x99\xb1\x1f\x7a\x3f\xd3\xa2\x4b\x24\x42\xb5\x58\xf2\x33\x55\x30\x19\x47\xf7\x3c\xb4\xbe\x87\xf1\x4a\x5c\x2d\x78\x60\x75\xe5\xbb\x0b\xfd\xf3\xdd\x05\x5b\xf8\x21\x0f\xfc\x7f\xec\x41\x32\x17\x8c\xbb\x64\x92\x97\x57\xda\x5c\xe9\xe6\x6a\x98\x7e\xfc\x24\xc9\x6f\xd2\xfa\xe9\x8c\x7d\xf2\x69\x73\x2c\x7c\xba\x8c\xd7\xdb\x96\x03\x98\x54\xab\xc7\xa4\xa3\xc8\xf4\xfe\x90\x01\xd5\x2d\xf8\x68\xdb\xbe\x51\xe4\xa9\x33\x7e\xb6\xab\x98\x51\xd3\xd5\x82\xbd\x97\x4f\xcc\xe3\xf1\x9c\x7b\x25\x93\x64\xa6\xd4\x88\x78\x21\xe3\xa5\x1a\x93\xda\xfe\xfa\x56\x69\xd1\xe6\xee\x22\xa1\xd7\x4a\xac\x91\xee\x5b\x5f\x49\x93\x8e\xef\xe6\xaa\x30\xc9\x0a\x64\x9c\xc8\xc6\x38\xa1\x40\x30\xfa\xd5\x4a\x03\xb3\xc2\x60\xda\x73\x24\x23\x20\x99\x1f\x6d\xf9\x65\x33\x76\xe3\x38\x22\x4a\xe9\x6c\x2a\x6a\x76\x13\xdd\x86\x09\x9b\x9a\x09\x58\x9e\xa0\xc9\x7b\x36\xf9\x95\x3b\x0f\x5e\x2c\x57\xa1\xab\xae\x22\x9f\x54\xba\xa8\xd2\x71\x5a\x84\x34\xf2\x71\xf9\x21\xb6\x05\xf3\xec\x49\xef\xd9\xe4\xb3\x8c\x45\xe1\xb1\xcc\xe1\x89\xc3\x5d\xd5\x7a\xd3\x3f\xda\x65\x99\x9e\x97\x68\xd5\x73\xed\x81\x8b\xec\x19\x87\x4c\xc8\xa8\x3a\xdd\x4f\x23\x71\x8e\x18\x95\x36\x1b\x87\x6d\xb8\xf4\x54\xa3\x00\x70\xda\xd9\xf8\xae\xc3\xd3\xe3\xd9\x36\x4e\x89\x51\x9b\x75\xd6\x16\x94\xfa\x52\xf9\xa7\x96\xcf\x21\xa6\x71\x4f\x4c\xf7\x23\xe5\xe9\xaa\x29\x9f\x1b\x59\xa4\x95\x3e\x8d\x73\x49\x69\x00\x51\x57\x3d\x8e\xb0\x6c\x01\x5f\x23\x5e\xec\x7c\xe2\xc5\x9a\x9d\x1f\xbb\x62\xc6\x8e\xa7\x68\xc1\xfb\x00\xde\x07\xf0\x3e\x80\xf7\x01\xbc\x0f\xea\x36\x5f\x60\xed\x01\xf5\x08\x48\x27\x48\x27\x48\x27\x48\x27\x48\x27\x48\xe7\xb8\x48\x27\xe0\x03\xe0\x03\xe0\x03\xe0\x43\xe7\xf0\x61\x0f\x40\xdf\xd3\x88\xae\x66\x5d\xb8\x1e\xd5\xf5\x52\x8b\x5b\xaf\xb0\xcd\xc6\x1b\x90\x7c\xef\x3c\x91\xd0\x78\x93\xef\xa1\x36\x43\xcf\x33\x11\x98\xbf\xfe\xce\x07\x59\x26\x2d\xc3\x3e\xad\x9a\x31\x1e\xee\x04\x7b\xfa\xca\x16\xd1\xde\x61\x91\xa9\x5b\x66\x4d\xab\x1b\x5e\x2b\xf1\xa9\x88\x91\x2a\x0e\x75\x6f\x63\xa4\xc8\xca\xf2\x95\x87\xdc\x13\xb1\xb6\x17\xea\x3d\x31\x49\xa4\xe3\x93\x02\x9c\x59\xe6\x38\x19\x58\x65\xcc\x44\x98\x2a\x89\xd4\x5a\x04\x96\xfc\x41\xf5\x62\x7a\x2f\x12\x61\xc5\xba\x62\x24\x90\x8d\x18\x22\xb1\x96\xac\x70\x32\x66\xd7\x6f\xff\xa5\xae\x8d\xb9\x43\xd8\x2d\x90\xa1\xa7\x85\x38\xb2\x94\x39\x32\x4c\xb9\x1f\xea\x8d\x88\x2c\x51\xf9\xb5\x84\x22\x0c\x14\x64\xf3\xe7\x4c\x4f\xf1\x64\xc0\x43\x6f\x26\x63\xef\x2a\x7a\xf0\xae\x56\xa1\xef\x48\x57\x5c\xfd\xf4\x25\xb9\x55\x4f\x39\xd8\xb4\x6d\x3a\xa7\xcd\xe1\xe9\x95\xd4\x37\x2c\x61\xac\xa9\x20\xf6\xb6\x81\x20\xf6\x41\xdb\xe6\xfa\xf0\xb1\x6f\x77\x7e\xac\xf6\xf1\xed\xc3\xd7\x8e\x4b\xc6\x25\xb9\xa2\xb7\x32\xee\x2b\xf6\xc2\x9c\x1f\xfa\x9f\xfe\x73\xa4\xd4\x1f\x0d\x64\xa9\x72\xbe\x0f\x64\xf9\x80\x14\x35\x02\x29\x0a\x71\xd5\x67\x14\x57\x8d\x00\x32\x04\x90\x21\x80\x0c\x01\x64\x50\x00\x37\xad\xa2\x5e\x46\x6b\x9c\x46\xc9\x42\xb0\xc9\x96\x60\x93\xfe\xea\x5d\x99\xd9\xb9\xf5\x10\x93\x58\x70\xb7\x22\x6e\xed\x52\x99\xd4\x2d\x4d\x14\x26\xec\x1f\xb0\x72\x6c\x58\x6f\x9e\xe8\xb1\x91\xe3\x25\x20\xaf\x54\x37\x7e\xfd\xd5\xa8\x17\x5f\xdf\x66\x30\xc9\x56\x98\x24\x79\x33\x1c\x54\x37\x75\x4a\xf7\xfe\xbc\x7d\x3f\x5e\x8a\xd8\x13\x8d\xae\x4c\xd2\x98\xa7\xc2\xf3\x9d\x69\xf3\x7b\xd4\xdf\xcf\xe6\x4a\xda\xf9\x9b\x1c\x5f\x11\x8f\x53\x9f\x82\x8d\xb4\xe7\xcd\x9e\x47\x19\xbd\xed\xe4\xc6\xbf\xae\x40\xea\x16\x61\xef\xb6\xec\xf8\xc2\x60\x12\x1c\xb9\x49\xf0\x7c\xc0\x6a\xc5\x5d\xdf\x2e\x2e\x1d\x52\xa2\xf6\x98\x3c\x4c\xf9\xf5\x86\xfd\xe7\x0d\x19\x44\x74\x1c\x29\x0f\xe8\xce\x50\x86\x53\x7d\x37\x5d\x41\x36\xc9\x84\xbd\xfe\x2d\x91\xe1\xad\x8e\xd6\xfd\xaa\x76\x3a\xf3\xf7\x0f\xbb\xff\xe5\xff\xf8\xa6\x4f\xc4\xb7\xf9\xbc\xf9\x2c\x63\x87\x8c\xb6\x9e\xa4\xc1\x97\xec\xee\x62\xa1\xfe\xed\xee\x82\xdd\x94\x7a\x93\x9c\x81\xb5\x85\x75\x95\xe4\x91\x89\x53\xee\xd0\x00\x50\xbc\x67\xe0\x3b\xc6\x66\x24\x02\x37\x61\xf2\xc9\x8c\xad\x8e\x87\x8c\x84\x8c\x02\x31\x63\xfa\x9d\x14\xe6\x6d\xe7\x14\xb9\xe4\xd6\x0e\x44\xf6\xfa\x43\xba\x57\xbd\x68\xbc\x0e\x94\xd0\x84\xfa\xaf\x09\x45\x15\xff\xd5\xde\xea\x42\xab\xd6\x0d\x0f\x51\xc0\x9d\x7d\x05\x36\x73\xd7\x68\x45\x36\xf8\xbe\x41\x44\x1b\xbf\x88\xd6\x23\x49\x08\x07\x76\xf6\x0b\x7c\xdf\xc6\x27\x5d\xac\x7a\x6c\x67\x7d\xc5\x76\x3b\x93\x51\x80\x4e\x4d\xbd\xa8\xd6\x39\x88\x09\xe2\x0e\x5d\xff\xd1\x77\x57\x3c\x28\x06\x84\xf1\x2c\x6d\x03\xb5\x72\x56\xf0\x98\x78\x97\xf9\x5a\x4c\xe8\x09\x93\x3c\x79\x4f\x29\x1b\x4b\x26\xc6\x30\x3f\x4c\x52\xc1\x4b\x86\xc3\xaa\x90\xf3\x54\xb4\x4a\x65\x31\x3f\x9f\x65\x7c\x13\x04\x99\xc4\x93\xf4\x81\xb5\x6c\xbc\xe1\xbc\x42\xb4\xb6\x18\xda\xfe\xca\xc6\xf2\x3c\x77\x20\x1a\xbe\xf1\x06\x6e\x21\x0b\xde\x88\xb3\xe0\xed\xc6\x39\xbb\x32\xe0\x1d\x5e\x65\xb1\x19\xaa\x42\xde\x3b\xe4\xbd\x43\xde\x3b\xe4\xbd\x1b\x5b\xde\xbb\xdd\x3b\x6f\x6d\xce\xbb\x8e\x1d\x03\x8e\x96\xe9\x6e\x77\xf3\x37\x67\xb9\xeb\x73\x1f\xec\x93\xdb\xae\x41\xdd\xfc\x8d\x79\xed\x3a\xee\x03\x64\xb3\x43\x36\x3b\x64\xb3\x43\x36\x3b\x64\xb3\xeb\x2c\x9b\x5d\x83\xdd\x7f\x2d\x93\x5d\xd7\xe5\xff\x87\xe2\x17\xd8\xac\x35\x23\xce\xc6\xb7\xbb\xbb\xb7\x65\xe2\x3b\x6e\xbf\x23\xff\x5e\x27\x23\xba\x9e\x7b\xaf\xe3\x61\x3d\x69\xc6\xbd\xdd\xdd\xb3\x25\xdb\x5e\xd7\xdb\x66\x5f\x73\xec\xed\xee\xb4\x1a\x70\x71\xb0\x3d\xcf\xfc\xf5\x77\x73\xe8\xb5\x35\x8f\xc2\x79\xb2\xb0\x8a\xbb\xcf\xef\x15\xac\x00\x0a\x06\x0a\xc6\x40\xc1\x40\xc1\x40\xc1\x40\xc1\x40\xc1\x40\xc1\x40\xc1\x40\xc1\x40\xc1\xfa\x44\x80\x40\xc1\x40\xc1\x40\xc1\x40\xc1\x40\xc1\x40\xc1\x40\xc1\x86\x48\xc1\x90\x16\x04\xf8\x0f\xf8\x0f\xf8\xaf\xd7\x23\x0a\xfc\x57\xee\x1e\xe0\xbf\x71\xe1\xbf\x9a\x34\xea\x1d\x51\xc0\x22\xfa\x0b\xad\xc8\x23\x17\xec\xc1\x0f\xdd\x16\x11\xe0\x65\xae\xde\x90\x0a\x67\x44\x61\xa5\x21\xe5\x7a\xdb\xa4\xa4\xef\x17\x9e\x7d\x28\x40\x04\x3c\x04\x3c\x1c\x08\x3c\x04\x38\x04\x38\x04\x38\x04\x38\x04\x38\x04\x38\x04\x38\x04\x38\x04\x38\x04\x38\x04\x38\x04\x38\x04\x38\x04\x38\x04\x38\x04\x38\xec\x3f\x38\x44\x69\x04\x30\x50\x30\xd0\xbe\x12\x33\x30\x50\x30\x50\x30\x50\x30\xd0\x4a\xa7\x9d\x88\x81\xce\x45\xca\xaf\xaf\x0e\xc2\x9b\x27\xc9\xd1\x5b\x19\x6f\x4f\xa4\x65\x45\x45\x0f\xed\x16\x4a\xe9\x89\xd4\x32\x4a\x6a\xfb\xcd\xed\x97\xef\x75\xb7\x21\x33\xf1\x9e\xf0\xb0\xd0\x91\x14\x2e\x3a\x16\x82\x48\xb3\xa4\x70\xdf\xab\xe2\xbb\x9b\x2c\xae\x23\xc4\x11\x6b\x8b\x56\x6c\x74\x62\xab\x32\x95\x9c\x07\xb6\x2c\x09\x75\x77\x69\x4d\xd0\xff\x20\x0b\x6e\xb5\xd3\x7b\xb3\x0a\xf3\x94\xdb\x34\x5c\xb3\x3c\x46\x7b\xac\x8b\x6e\x37\xbb\xef\x51\xcc\x6f\xe5\xe3\xc1\xef\xc1\xef\xc1\xef\xc1\xef\xc1\xef\xc1\xef\xc1\xef\xc1\xef\x77\xef\xb6\xe0\xf7\xe0\xf7\xe0\xf7\xe0\xf7\xe0\xf7\xe0\xf7\xe0\xf7\x67\xc7\xef\xc1\x7e\xc1\x7e\xc1\x7e\x87\x31\xa2\x60\xbf\xe5\xee\x01\xfb\x1d\x1a\xfb\x6d\x9c\xfd\x56\x8b\x3b\xed\x82\x2b\xfd\x4c\xe6\xc8\x40\x69\x57\x66\x96\xee\xe2\x55\xfa\xa6\x12\xb1\xfa\x90\x3d\xe0\x64\x85\xaa\x3b\x81\xaa\x1f\xa9\xa9\xdf\xa8\xbf\x92\x56\x4a\x54\xc3\x92\x0b\x4b\x2e\x2c\xb9\xb0\xe4\x8e\xcd\x92\xdb\xac\xb8\x79\xad\x35\xf7\x68\x75\xe7\xff\x52\x1d\x67\x74\xd8\x4b\x4a\xfb\xee\xa8\x19\xa5\xe7\x41\xa9\x6d\x45\x6a\x3a\x17\x2c\x52\xbd\x95\x28\x75\x8f\xdd\x84\xcc\x0f\xf5\xce\x22\x63\xb6\x0a\xb3\xcd\xc9\x65\xba\xa4\x3e\x73\xfd\x58\x1d\x85\x8f\x22\x9b\xf1\x6a\xfb\x24\x8b\x83\x59\xf2\x76\x6e\x98\x0e\x66\x8b\x55\x4c\xab\xcc\xd4\xf3\x57\x4b\xc1\x08\x8b\x66\x96\xcd\xd8\x9f\xf4\x46\x1a\x2d\x9a\x3b\xef\xd8\x94\xdd\x04\xc1\x3b\x52\xfc\x5d\xb5\x4b\xaf\x42\x35\xf0\x4a\xec\xb2\x53\xd2\x3c\x6e\xbd\xd8\x78\x83\x81\xd2\x6d\x39\xcd\x30\x1d\xcd\xfc\xbe\x47\x41\xfe\x5a\xf3\xf3\xd1\x7a\xe4\x8f\xa2\x1e\xe1\x2b\x1d\x9e\xc4\x7b\x36\x17\x0b\xed\x27\x90\x99\x6a\x72\x51\xc2\xec\x5e\x34\x75\x56\x42\x1f\x0e\x73\x25\x41\x87\xd3\x50\x78\x9c\x26\xa8\xd1\x04\x94\xd2\x62\x4f\x50\x6d\xb6\xcd\x96\x86\x11\x10\xfd\xe5\x52\xb8\x3e\x4f\x45\xf0\x9c\x03\xfc\xfc\xc8\xf5\x83\x4b\x23\xe9\x53\xa7\x33\x2f\xe6\x0e\xad\x1a\x5f\xba\x99\x40\x90\x1f\xda\xe4\x1d\x61\x67\xe9\x2a\x51\x1f\x59\x1c\x2e\xae\xee\xb4\x0d\x32\x2f\x59\xe8\x3d\xd0\x3e\x62\xa6\xbf\x73\x29\x78\x58\xfb\x8d\x07\x0c\x33\x7d\xf3\x2d\x7d\x72\x9d\xf6\xb4\x43\x7f\xea\xcb\xf4\xdf\x87\xbc\x34\xeb\x97\xcd\xf4\xe5\x68\xd3\x1f\x1c\x06\x1c\x06\x1c\x06\x1c\x06\x1c\xa6\x33\x0e\xd3\xf0\x2c\x58\x63\x31\xc7\x3b\x16\x3f\x16\x72\xaf\x45\x81\xe0\x89\xc8\xb6\xa0\xdb\x58\x46\xdc\x23\xe9\xe8\x56\x06\xbe\xf3\x5c\xf2\xfa\xb3\x93\x2e\x4f\xde\xa6\xa6\xdd\xf5\xec\x97\x19\xfb\xa1\xf7\x33\x2d\xba\x44\x22\x54\x8b\x25\x3f\x53\x05\x93\x71\x74\xcf\x43\xeb\x85\x18\xaf\xc4\xd5\x82\x07\x56\x57\xfe\xff\xd8\xfb\x97\xde\xb8\x8d\x6d\xff\x1f\x9e\xeb\x55\x14\xb4\x07\xb2\x11\xab\x05\x7b\xb2\x37\x1c\xfc\x06\x8a\x1d\x1f\x38\x27\xde\x11\xe2\x20\x7b\xe2\xe0\xa0\x44\x56\x53\x84\x29\x16\x41\xb2\xed\x47\xfb\x41\xde\xfb\x1f\xb5\x8a\xf7\xe6\xad\x29\xb2\x59\x24\xbf\x23\x0b\x6e\x5e\x57\x15\xab\xd6\x5a\x9f\x75\xf9\x72\xa9\x7f\xfe\x72\xc9\xf6\xae\xcf\x3d\xf7\xbf\xe9\x46\x72\x2f\x18\xb7\xc9\x39\x2f\x6f\xb4\xe3\xd2\xce\xcd\x30\x7d\xf9\xab\x28\x3f\x49\xdb\xa7\x3b\xf6\xb3\x4b\x8b\x63\xe1\xd1\x65\x78\xfc\x6e\x39\x8a\x89\xb5\x79\x4c\x36\x8a\x8c\x1f\x86\x0c\xa8\x7e\x83\xf7\xe9\xbb\x37\xaa\x3c\x75\x6e\xd0\x71\x0d\x33\x7a\x75\xf5\xc1\x3e\xc8\xef\xcc\xe1\xe1\x3d\x77\x4a\x7e\xc9\xcc\xa8\x11\xe1\x5e\x86\x8f\x6a\x4c\x6a\xe5\xf5\x5b\xe5\x8d\x9a\xc5\x45\x4a\x6f\xaa\xb1\x06\x5a\xb6\xae\xd2\x26\x2d\xd7\xce\x4d\x61\xd2\x15\xc8\x39\x91\x8d\xb1\xda\xac\x93\x9d\x34\xd5\x06\x76\x85\xc1\x4c\xf7\x91\x8c\x85\x64\x11\xb5\xe5\x9b\xed\xd8\xad\x65\x89\x20\xa6\xbd\xa9\x68\xd9\x5d\xe9\x77\xb8\x62\xd7\xc9\x04\x2c\x4f\xd0\xe8\x47\x76\xf5\x13\xb7\xbe\x3a\xa1\x3c\xf8\xb6\x3a\x8a\xa2\x53\xe9\xa0\x8a\xe0\xb4\x0a\x99\xe8\xc7\xe5\x8b\xa4\x6f\x70\x9f\x5d\xe9\x47\x76\xf5\x41\x86\xa2\x70\x59\x66\xf1\xc8\xe2\xb6\x7a\xfb\x44\x3e\x3a\x78\x99\xae\x17\x69\xd3\xf3\xe8\x82\xfb\xec\x1a\x43\x26\x64\x50\x9d\xee\xf3\x68\x9c\x2b\x86\xa6\xfd\xc6\xa1\x0d\x9c\xce\x35\x0a\x40\xa8\x93\x8d\xef\x31\x46\x3d\x9f\x6f\x63\x4e\xa0\xda\x4f\x58\x2d\x50\xf5\xb9\xfa\x4f\x2d\xa4\x43\xee\xe3\x89\x98\xee\x73\xcc\xe3\x43\x5f\x3e\xb7\xc6\xec\x2b\xbd\x25\xe7\xea\xd2\x52\x32\xb1\x4c\xcf\xc4\x1c\x81\x66\x23\x91\x6c\x3b\x89\x64\xfd\xb6\x93\xae\x64\xb2\xf3\xd9\x5d\x08\x46\x40\x30\x02\x82\x11\x10\x8c\x80\x60\x84\xba\xc5\x17\x94\x7b\x41\x12\x01\xf8\x04\xf8\x04\xf8\x04\xf8\x04\xf8\x04\xf8\x5c\x17\xf8\x04\x8b\x00\x8b\x00\x8b\x00\x8b\x98\x9c\x45\x9c\xc0\xeb\x0d\x4d\xf5\xea\x27\xc2\xe3\x74\xaf\xe7\x7a\xdc\x8c\xa2\x38\x8d\x27\xa0\x48\x1f\x8a\xf4\xad\xba\x48\x1f\xaa\xd5\x1b\x5e\xb1\x20\xf9\xeb\xaf\x7c\x90\x65\x34\x32\x00\xd4\x96\x1a\xe3\x7e\x27\xec\xd3\x47\x8e\x8d\xfb\x86\x25\xaf\xb6\x4c\x9d\xf1\x17\xc1\x51\xf2\x58\x91\x4b\x55\x1c\x6f\x63\x73\xa9\xc8\xfd\xf2\x89\xfb\xdc\x11\xa1\x76\x24\xea\xd5\x31\x8a\xa4\xe5\x92\x65\x9c\xb9\xec\x38\x79\x5e\x65\xc8\x84\x1f\x2b\x55\x35\x75\x15\x3c\xf2\xaf\x4a\x8a\xf1\x83\x88\x44\xaa\xef\x15\x33\x86\xd2\xcc\x22\xd2\x77\xc9\x3d\x27\x43\xf6\xfa\xcd\xbf\xd4\xb1\x21\xb7\x88\xc7\x79\xd2\x77\xb4\x76\x47\x2e\x34\x4b\xfa\x31\x77\x7d\xbd\x24\x91\x8b\x2a\x3f\x96\x18\x45\x42\x0b\xd9\xfd\x53\x66\xc0\x38\xd2\xe3\xbe\xb3\x93\xa1\x73\x13\x7c\x75\x6e\x0e\xbe\x6b\x49\x5b\xdc\xfc\xe3\x63\x74\xa7\xae\x32\xd8\xe7\x9d\x08\x67\xcc\xe1\x31\x4a\x1d\x5c\xa0\x96\xd6\x57\x43\x7b\xd3\x43\x43\x7b\xa7\x3d\x77\xc6\x3c\xf1\x9b\xce\x27\xd6\x51\xc1\xc6\x3c\xf2\x0a\xd5\x60\xd2\x3a\xcc\x56\x83\x2f\xd8\x18\xe5\x43\x6a\xba\xe7\x4f\x58\x45\xa4\x87\xce\x55\x53\x3a\x04\x05\x43\xa0\x68\xad\x40\xd1\x42\x8a\xf6\x86\x52\xb4\x91\x8b\x86\x5c\x34\xe4\xa2\x21\x17\x0d\x36\x62\xd3\x57\x64\x64\xe2\xc7\x3c\xd6\x17\xf2\x56\xba\xf2\x56\x0c\xb7\xc5\x32\x6f\xf5\xe8\xd9\x2a\xa1\xe0\x76\x45\xf1\xea\xb2\xa0\xd4\x29\xbd\xed\x27\x2c\x27\xf0\x86\x74\x7e\x83\x8e\x30\xdd\x19\xf2\x1c\x26\x88\x66\xdc\xc0\x9b\xf3\xe1\x4d\x8a\x93\x18\xd4\xcd\xf5\x9a\xce\xfd\xa1\x7d\x79\x7e\x14\xa1\x23\x7a\x1d\x19\xc5\x21\x8f\x85\xe3\x5a\xd7\xfd\xcf\x51\x7f\x3f\x25\x47\xd2\x46\xd0\x67\x4b\x0b\x78\x18\xbb\x94\xc6\xa4\x63\x7a\x4e\xdc\xde\xe8\x6e\x66\xf8\x07\xa7\x62\xb2\x2d\xfa\xe0\x5d\x39\xae\x86\xc1\x6b\xb8\x72\xaf\xe1\x76\xf0\x6c\x25\x1b\x20\xfd\xb8\x74\xc6\x8a\x5a\x68\xf2\x2c\xe8\x17\x0d\x8b\xd0\x4b\xf2\x99\xe8\x34\x55\xee\xd1\x99\xbe\xf4\xaf\xf5\xd9\x74\x04\xb9\x2d\x23\xf6\xe2\x97\x48\xfa\x77\x3a\x19\xf8\x93\x5a\xee\x92\xbf\x3f\xa7\x8b\x60\xfe\x9f\x2f\x4d\xe2\xc6\xfd\xe7\xcd\x07\x19\x5a\xe4\xd7\x75\x24\x0d\xbe\x64\x5f\x2e\xf7\xea\xff\xbe\x5c\xb2\xdb\x92\x34\x29\xd6\x58\x3b\x61\x0f\x51\x9e\xf8\x78\xcd\x2d\x1a\x00\x4a\x27\xf5\x5c\x2b\x71\x2b\x09\xcf\x8e\x98\xfc\x9e\x8c\xad\x4e\xb7\x0c\x84\x0c\x3c\xb1\x63\xfa\x9e\x94\x45\x9e\xce\x29\x8a\xf8\xad\x1d\x88\xec\xf6\x43\xc4\xab\x6e\xb4\xde\xf8\x4c\x58\x47\x4b\xb2\x8e\x82\x4a\xa0\xac\xd9\xf6\xd1\x61\x74\x07\x45\xe0\x71\xeb\x54\x25\x2e\x39\x6b\xdd\x6a\x1c\x42\xeb\xa0\xbb\x6d\x44\x77\x33\x48\x45\xc2\x4e\x9e\xfd\x82\xd0\xba\xd5\xeb\x1e\x07\xd3\x3d\xb3\x17\xac\x67\x98\x1a\x65\x0c\xd5\x34\xb5\x1a\x1d\xa9\x24\x59\xe5\xbe\xed\x7e\x73\xed\x03\xf7\x8a\x19\x6a\x3c\xab\x23\x41\xef\xbb\x2b\x84\x61\xbc\xcd\x02\x38\xae\xe8\x0a\x57\x79\x35\xa1\x52\x79\x98\x4c\xd3\x61\xae\x1f\xc5\x82\x97\xfc\x8d\x55\x3d\xe8\xfb\x91\x33\x2b\x4b\x42\xfa\x20\xc3\x5b\xcf\xcb\x94\xa2\xc8\x04\x6c\xd3\x78\xc2\xb6\x12\xc7\x5a\xfc\x73\xff\xc9\x06\x74\xc3\xab\x12\x8d\xe1\xca\x33\xc9\x50\xa5\x6f\xc5\x55\xfa\xba\xa1\x50\x57\x85\xbe\xe1\xed\x21\xfb\x01\x2f\xd4\xe5\x43\x5d\x3e\xd4\xe5\x43\x5d\xbe\xb5\xd5\xe5\xeb\x5e\x79\x6b\x6b\xf2\x4d\x1c\x5e\x70\xb6\x4a\x7c\xdd\xaf\xdf\x5c\x85\xcf\x64\x19\x9c\x52\x7b\xaf\x47\xc3\xff\xc6\xba\x7b\x13\xcb\x00\xd5\xf6\x50\x6d\x0f\xd5\xf6\x50\x6d\x0f\xd5\xf6\x26\xab\xb6\xd7\x63\xf5\x3f\xaa\xb4\xd7\x9a\xd4\xb5\xa1\xe8\xc2\x7e\x6f\xb3\xe2\x6a\x81\xdd\xe2\x6e\xab\x14\x78\x5e\xb9\xa3\x3e\xe0\x24\x23\x7a\x5c\x1b\x70\xe2\x61\x9d\xb5\x22\x60\xb7\x78\x5a\xaa\x01\x4e\xbd\x6c\x9a\x5a\x03\xb0\x5b\x68\x35\x08\x63\xb0\x3f\x2f\xf9\xeb\xaf\x13\x41\x58\x6b\xd5\x86\x0d\xf3\xb1\x4a\x94\xd0\xaf\x15\xca\x00\x32\x06\x32\xc6\x40\xc6\x40\xc6\x40\xc6\x40\xc6\x40\xc6\x40\xc6\x40\xc6\x40\xc6\x40\xc6\xcc\xa4\x42\x20\x63\x20\x63\x20\x63\x20\x63\x20\x63\x20\x63\x20\x63\x4b\x24\x63\x28\x38\x02\x24\x08\x24\x08\x24\x68\xf4\x88\x02\x09\x96\xc5\x03\x24\xb8\x42\x24\x58\x53\xc8\x7d\x22\x32\x58\xc4\x81\x7e\xaa\xf7\xc8\x3d\xfb\xea\xfa\xf6\x88\x58\xf0\x55\x6e\xe3\x90\x1d\x97\xe8\xc3\xca\x4c\xca\x8d\xb7\xab\x92\xd1\x5f\xb8\xf6\xb3\xa0\x22\x80\x22\x80\xe2\x92\x80\x22\x60\x22\x60\x22\x60\x22\x60\x22\x60\x22\x60\x22\x60\x22\x60\x22\x60\x22\x60\x22\x60\x22\x60\x22\x60\x22\x60\x22\x60\x22\x60\xe2\x42\x60\x22\x1a\x31\x80\x8b\x82\x8b\x9a\x4a\xd1\xc0\x45\xc1\x45\xc1\x45\xc1\x45\x2b\x42\x3b\x17\x17\xfd\xff\xc5\xc2\xa7\xaf\xe2\x66\x10\xe2\x9c\xa5\xd0\x6f\x65\x90\x1d\xea\xc4\xb9\x97\xe1\x63\x36\xa9\x39\xd3\x00\xa6\x19\x56\x3a\x22\xfe\x39\x7b\xf7\xdb\xbb\x8f\xff\x53\x3d\x1e\xa5\x8d\x4f\xe4\x86\x99\x10\x97\x4e\x0d\xb3\x69\x51\x38\xe7\xa2\x78\xdf\xc6\x4f\x28\x8d\x2b\x58\xf4\xa7\x54\x32\xf4\xf5\xd2\xd8\xf7\x3b\x4a\xb0\xff\xed\xdd\xc7\xdf\xeb\x4e\xc5\x27\x75\xfa\x27\x95\x0a\x92\x12\xb2\x57\xf3\x65\xd5\x30\xf9\xd3\xbe\x30\xd7\x77\x42\x11\x95\x47\x6f\xfc\xc0\x1c\xed\x19\x0e\x13\xdf\x52\xea\x7a\x48\x63\x72\x3e\xea\x67\x68\xf9\x38\xd4\xf9\x47\x5f\x47\x72\x1a\xea\x50\x57\x85\x6f\xcc\x17\xb9\xcb\x27\x5c\x56\x11\x3f\x19\xb5\xd5\x7f\x86\xdd\xa1\x31\xa3\xa5\xd9\xe7\xfb\x6c\x6d\x58\xcc\xf1\xe7\x85\xc0\x18\x04\xc6\x20\x30\x06\x81\x31\x08\x8c\x41\x60\x0c\x02\x63\x10\x18\x83\xc0\x98\xb9\x65\x80\xc0\x18\x04\xc6\x20\x30\x06\x81\x31\x08\x8c\x41\x60\xcc\xf2\x02\x63\x10\x54\x81\xa0\x0a\x04\x55\x2c\x63\x44\x11\x54\x51\x16\x0f\x82\x2a\x16\x11\x54\x91\xf2\xaa\x86\x1c\xf3\x5a\x8c\xa5\xd5\x9d\x71\x49\x96\xbe\x26\xb3\xa4\xa7\xac\xab\x64\x96\x76\x03\x2c\x7d\xda\x11\xc2\x7a\x97\x5d\x26\xcf\xf0\xae\xb9\xd8\xb4\xed\xe5\x27\x21\xae\xef\xe9\x85\x7f\x23\xb9\x45\xa3\xf4\x94\x87\x47\x17\x1e\x5d\x78\x74\xe1\xd1\x5d\x9b\x47\xb7\x65\xbf\xed\xf2\xea\xb6\xeb\x6e\xed\xfb\xee\x49\x6b\xef\x7f\x94\xe0\x12\x5b\xf6\x15\xb5\x5e\xb0\xd4\x8c\xd2\xf3\xa0\xf4\x6e\x45\x7a\x7a\x2f\x58\xa0\xa4\x15\x29\xb3\x8f\xdd\xfa\xcc\xf5\xf5\xca\x22\x43\x76\xf0\xb3\xc5\xc9\x66\x76\xf8\xf4\xfb\xc1\x67\xb6\x1b\xaa\xcd\xf0\x9b\xc8\x66\xbc\x5a\x3e\xc9\xf3\x90\x7c\xf2\xe9\xdc\x48\x04\xcc\xf6\x87\x90\xbe\xb2\x20\x94\x96\x88\xc8\x45\x90\x28\x8d\xc9\x2c\xdb\xb1\x3f\xe9\x8e\x34\x5a\x34\x77\xde\xb2\x6b\x76\xeb\x79\x6f\xc9\x01\x60\xab\x55\xfa\xe0\xab\x81\x57\xea\x57\x3a\x25\x93\xcb\x09\x7b\xc0\x40\xe9\x77\x99\x67\x98\xce\xe6\x86\xef\x27\x8a\x66\x57\xfc\xd9\x24\xf2\x47\xd1\x9e\x70\x95\x2d\x4f\x6a\x3e\xbb\x17\x7b\x1d\x2f\x90\xb9\x6c\x72\x55\x22\x59\xbd\x68\xea\x1c\x84\xde\x1c\xee\x95\x26\xed\x5f\xfb\xc2\xe1\x34\x41\x13\x8b\x40\x19\x2f\xe9\x0e\xaa\xdd\xb7\xd9\xa7\x91\x28\x8a\xee\xe3\xa3\xb0\x5d\x1e\x0b\xef\x29\x07\xf9\xf9\x96\xeb\x7a\xaf\x12\x8d\x9f\x84\xce\x9c\x90\x5b\xf4\xd5\xb8\xd2\xce\x14\x82\x7c\xd3\xa6\x28\x89\x74\x96\x1e\x22\xf5\x90\xc5\xe1\xe2\xea\xcc\xf4\x85\x92\x9b\xec\xf5\x1a\x98\x5e\x62\xa7\x9f\xf3\x51\x70\xbf\xf6\x19\x07\x0c\x33\x3d\xf3\x1d\x3d\x72\x9d\x15\xd5\x61\x47\x99\x32\xfd\x4f\x21\x30\xfd\xe4\xd2\x4c\x61\xce\x36\xfd\xc1\x63\xc0\x63\xc0\x63\xc0\x63\xc0\x63\x26\xe3\x31\x3d\xf7\x82\x23\x26\x73\xbe\x6d\xf1\x7d\xa1\xd6\x61\xe0\x09\x1e\x89\x6c\x09\xba\x0b\x65\xc0\x1d\xd2\x8e\xee\xa4\xe7\x5a\x4f\xa5\xe8\xbf\x74\xd2\xe5\xc5\x12\xd5\xb4\x7b\xbd\xfb\xe7\x8e\x7d\xd6\xeb\x99\x56\x5d\x02\xe1\xab\x8f\x25\xdf\x53\x05\x93\x61\xf0\xc0\xfd\x34\x1a\x31\x3c\x88\x9b\x3d\xf7\x52\x5b\xf9\xcb\xa5\xfe\xf9\xcb\x25\xdb\xbb\x3e\xf7\xdc\xff\xa6\x1b\xc9\xbd\x60\xdc\x26\x27\xbd\xbc\xd1\x0e\x4c\x3b\x37\xc3\xf4\xe5\xaf\xa2\xfc\x24\x6d\x9f\xee\xd8\xcf\x2e\x2d\x8e\x85\x47\x97\xe1\xf1\xbb\xe5\x48\x26\xd6\xe6\x31\xd9\x28\x32\x7e\x18\x32\xa0\xfa\x0d\xde\xa7\xef\xde\xa8\xf2\xd4\xb9\x43\xc7\x35\xcc\xe8\xd5\xd5\x07\xfb\x20\xbf\x33\x87\x87\xf7\xdc\x29\xf9\x27\x33\xa3\x46\x84\x7b\x19\x3e\xaa\x31\xa9\x95\xd7\x6f\x95\x37\x6a\x16\x17\x29\xbd\xa9\xc6\x1a\x68\xd9\xba\x4a\x9b\xb4\x5c\x3b\x37\x85\x49\x57\x20\xe7\x44\x36\xc6\x11\x25\x98\xd1\xaf\xa9\x36\xb0\x2b\x0c\x66\xba\x8f\x64\x4c\x24\x8b\xac\x2d\xdf\x6c\xc7\x6e\x2d\x4b\x04\x31\xed\x4d\x45\xcb\xee\x4a\xbf\xc3\x15\xbb\x4e\x26\x60\x79\x82\x46\x3f\xb2\xab\x9f\xb8\xf5\xd5\x09\xe5\xc1\xb7\xd5\x51\x14\xa5\x4a\x07\x55\x04\xa7\x55\xc8\x44\x3f\x2e\x5f\x24\x7d\x83\xfb\xec\x4a\x3f\xb2\xab\x0f\x32\x14\x85\xcb\x32\x8b\x47\x16\xb7\xd5\xdb\x27\xf2\xd1\x41\xcc\x74\xbd\x48\x9b\x9e\x47\x17\xdc\x67\xd7\x18\x32\x21\x83\xea\x74\x9f\x47\xe3\x5c\x31\x3c\xed\x37\x0e\x6d\x00\x75\xae\x51\x00\x4a\x9d\x6c\x7c\x8f\x71\xea\xf9\x7c\x1b\x73\x82\xd5\x7e\xc2\x6a\x81\xab\xcf\xd5\x7f\x6a\x61\x1d\x12\x23\x4f\xc4\x74\x9f\x63\x1e\x1f\xfa\xf2\xb9\xb5\x26\x62\xe9\x6d\x39\x57\x99\x16\x92\x94\xb5\x8c\x2c\xcd\x51\xc0\x36\x72\xcb\xb6\x93\x5b\xd6\x6f\x67\xe9\xca\x2f\x3b\x9f\x09\x86\xb8\x04\xc4\x25\x20\x2e\x01\x71\x09\x88\x4b\xa8\x5b\x7c\x01\xbc\x17\x24\x11\x30\x50\x30\x50\x30\x50\x30\x50\x30\x50\x30\xd0\x75\x31\x50\x60\x09\x60\x09\x60\x09\x60\x89\xc9\xb1\xc4\x09\xe8\xde\xd0\xec\xaf\x7e\x22\x3c\xce\x00\x7b\xae\xc7\xcd\x28\xa0\xd3\x78\x02\x0a\xf8\xa1\x80\xdf\x36\x0a\xf8\xa1\x45\x84\xe1\xd5\x0c\x92\xbf\xfe\xca\x07\x59\x46\x23\x13\x41\x6d\xb2\x31\xee\xf7\xa0\x7f\xfa\xd8\x69\xf8\xdf\xb0\xc4\xd6\x96\x29\x34\xd5\xaa\x38\x4a\xa6\x2b\xb2\xad\x8a\xa3\x6e\x6c\xb6\x15\x79\x65\x3e\x71\x9f\x3b\x22\xd4\xfe\x45\xbd\x56\x46\x91\xb4\x5c\x32\x98\x33\x4f\x1e\x27\x87\xac\x0c\x99\xf0\x63\xa5\xc1\xa6\x1e\x84\x47\xfe\x55\x49\x31\x7e\x10\x91\x48\xd5\xc0\x62\x4e\x51\x9a\x7b\x44\x6a\x30\x79\xed\x64\xc8\x5e\xbf\xf9\x97\x3a\x36\xe4\x16\x61\x3a\x4f\xfa\x8e\x56\xfa\xc8\xb3\x66\x49\x3f\xe6\xae\xaf\x17\x28\xf2\x5c\xe5\xc7\x12\xba\x48\x20\x22\xbb\x7f\xca\xec\x1a\x47\x7a\xdc\x77\x76\x32\x74\x6e\x82\xaf\xce\xcd\xc1\x77\x2d\x69\x8b\x9b\x7f\x7c\x8c\xee\xd4\x55\x06\xbb\xc2\x13\xe1\x8c\x39\x3c\x46\x69\x89\x8b\x55\xde\xfa\x2a\x6e\x6f\x7a\x28\x6e\xef\xb4\x5b\xcf\xb0\xe7\x7e\xd3\xf9\xdc\x3a\x86\xd8\xb0\x07\x5f\xa9\xa6\x4c\x9a\x89\xd1\x9a\xf2\x05\x1b\xa3\xfa\x88\xfe\xdf\xbf\xcf\x54\x84\xa4\x97\x5a\xd6\x50\x79\x04\xf5\x46\xa0\x85\xad\x42\x0b\x43\x86\xf7\x86\x32\xbc\x91\xca\x86\x54\x36\xa4\xb2\x21\x95\x0d\x06\x64\xd3\x57\x64\x64\xde\xc8\x3c\xe6\x18\xd2\x5e\x92\xe3\x5a\xd3\x5e\xcc\x36\xcb\x32\xdf\xf6\xe8\xc9\x2e\xa1\xe0\x76\x45\xf7\xea\x36\xa6\xd4\x49\x27\x9a\x52\x58\x59\xe0\x29\xa9\x3b\xb7\xe1\xa3\x74\x84\xe1\x8e\x92\xe7\x20\xc5\x62\x03\xfd\xda\x27\x40\x0b\xfd\xfa\x77\x06\x1f\x1d\x85\x8f\x52\xc4\xc5\xa0\x1e\xb2\xd7\x74\xee\x0f\xed\x2b\xf5\xa3\x08\x1d\xd1\xeb\xc8\x28\x0e\x79\x2c\x1c\xd7\xba\xee\x7f\x8e\xfa\xfb\x29\x39\x92\xf6\x84\x3e\xbb\x5c\xc0\xc3\xd8\xa5\x84\x28\x1d\x1d\x74\xf2\x8e\x47\xf7\x33\xc9\x7b\x38\x15\xd4\x6d\xd1\x16\xef\xca\x91\x3a\x0c\x3e\xc5\x95\xfb\x14\xb7\x43\x76\x2b\xf9\x05\xe9\xc7\xa5\x73\x60\xd4\x82\x93\xe7\x55\xbf\x68\x58\x8c\x5e\x92\x47\x45\x27\xbe\x72\x8f\xce\xf4\xa5\x7f\xad\xcf\xa6\x23\xc8\xa9\x19\xb1\x17\xbf\x44\xd2\xbf\xd3\xe9\xc5\x9f\xd4\xb2\x97\xfc\xfd\x39\x5d\x0c\xf3\xff\x7c\x69\x12\x72\xee\x3f\x6f\x3e\xc8\xd0\x22\xaf\xaf\x23\x69\xf0\x25\xfb\x72\xb9\x57\xff\xf7\xe5\x92\xdd\x96\xa4\x49\xd1\xcb\xda\x45\x7b\x88\xf2\x54\xca\x6b\x6e\xd1\x00\x50\x82\xaa\xe7\x5a\x89\xd3\x49\x78\x76\xc4\xe4\xf7\x64\x6c\x75\x02\x67\x20\x64\xe0\x89\x1d\xd3\xf7\xa4\xbc\xf4\x74\x4e\x51\x0c\x71\xed\x40\x64\xb7\x1f\x22\x5e\x75\xa3\xf5\x46\x7c\xc2\x60\x5a\xa6\xc1\x14\x54\x82\x70\x8d\x36\x99\x0e\xa3\x3b\x31\x02\x8f\x5b\xa7\x6b\x75\xc9\x79\x5b\xd0\xeb\x10\xac\x07\x95\x6e\x53\x2a\x9d\x41\x9a\x13\x36\xf8\xec\x17\x04\xeb\x6d\x4e\x31\x39\x18\xee\xc9\xbd\x60\x23\x86\xbc\xdd\x44\x1a\xa9\x15\x22\xdf\xa6\x41\x36\xfa\x3e\xe9\x5e\x36\x3e\xbc\x49\xd0\x20\x16\x2c\x7c\xf8\x40\x38\x40\x38\x40\x38\x40\x38\xb5\x47\xce\x87\x70\x86\xef\x80\x3d\x61\x4e\xcd\x16\xb8\x48\xd3\x1f\x48\x07\xf6\xff\xf6\xec\x7f\x20\x9d\x31\xe7\x0d\x90\x0e\x3c\x3e\x30\xa0\x80\x74\xca\x42\x3b\x03\xd2\x79\x8e\x9f\xa3\x27\xdc\x59\x8b\x9e\x07\xc4\x03\x15\x6f\x53\x2a\x9e\x41\x9a\x14\x36\xfc\xec\x17\x20\x9e\xcd\x29\x2a\xeb\x40\x3c\x54\x89\x2e\x27\x3a\x93\x32\x9c\xa4\x60\xb1\x6f\xbb\xdf\x5c\xfb\xc0\xbd\x62\xf1\x43\x9e\x95\x28\x4f\xde\x78\x57\xc8\xd7\x7d\x9b\x65\xfa\x5e\xd1\x35\xae\xf2\x56\x15\xa5\xde\x03\x99\x32\xc4\x5c\x3f\x8a\x05\x2f\xf9\x2f\xab\xaa\xd2\xf7\x5a\x87\x58\xa1\xc2\xdd\x07\x19\xde\x7a\x5e\xa6\x39\x19\xc1\x85\x1a\x4f\xd8\x56\x6d\xc2\x16\xef\x1e\x95\xd6\xfc\xf9\x9b\xf0\xb7\x5e\xa1\x90\xc6\x71\xdd\x65\x0a\xd1\x0b\x6a\xc5\xbd\xa0\xba\x69\x53\x57\x1f\xa8\x56\x77\xd6\x08\x24\x0d\xdd\x9f\xd0\xfd\x09\xdd\x9f\xd0\xfd\x69\x6d\xdd\x9f\xba\x57\xde\xda\xce\x4f\x13\xc7\x2d\x9c\xad\xdf\x53\xf7\xeb\x37\xf7\x7a\x32\x59\x06\xa7\x74\x78\xea\x96\x41\x73\x77\xa7\x89\x65\x80\x9e\x4e\xe8\xe9\x84\x9e\x4e\xe8\xe9\x84\x9e\x4e\x93\xf5\x74\xea\xb1\xfa\x1f\xf5\x73\x6a\x2d\x03\xb8\xa1\xb0\xc5\x7e\x6f\xb3\xe2\x9e\x54\xdd\xe2\x6e\xeb\x47\x75\x5e\xb9\xa3\x0b\xd5\x24\x23\x7a\xdc\x81\x6a\xe2\x61\x9d\xb5\xef\x54\xb7\x78\x5a\x7a\x4e\x4d\xbd\x6c\x9a\xda\x69\xaa\x5b\x68\x35\x14\x63\xb0\x3f\x2f\xf9\xeb\xaf\x53\x98\x58\x57\xf2\xd3\xe6\x51\xd9\x51\x4c\xd1\xaf\x15\xd8\x00\x48\x06\x48\xc6\x00\xc9\x00\xc9\x00\xc9\x00\xc9\x00\xc9\x00\xc9\x00\xc9\x00\xc9\x00\xc9\x8c\x05\x44\x80\x64\x80\x64\x80\x64\x80\x64\x80\x64\x80\x64\x80\x64\x4b\x84\x64\x28\x6a\x02\x3a\x08\x3a\x08\x3a\x68\xf4\x88\x82\x0e\x96\xc5\x03\x3a\xb8\x42\x3a\x58\xd3\x0d\x78\x22\x48\x58\x24\x83\x7e\xaa\xf7\xc8\x3d\xfb\xea\xfa\xf6\xa8\x84\xf0\x55\x6e\xe5\x90\x25\x97\x68\xc4\xca\x50\xca\xcd\xb7\xab\x92\xd9\x5f\xb8\xf6\x08\x7c\x11\x6c\x11\x6c\x71\x69\x6c\x11\x5c\x11\x5c\x11\x5c\x11\x5c\x11\x5c\x11\x5c\x11\x5c\x11\x5c\x11\x5c\x11\x5c\x11\x5c\x11\x5c\x11\x5c\x11\x5c\x11\x5c\x11\x5c\x71\x19\x5c\x11\x9d\x1f\x00\x49\x01\x49\xcd\x45\x6a\x80\xa4\x80\xa4\x80\xa4\x80\xa4\x15\xa1\x9d\x09\x92\xee\x3d\xf9\x5d\x29\x8b\xa1\xf4\x76\x99\x9b\x99\x48\x91\x2b\x6f\x06\x11\xd0\x59\x8a\x05\x57\x86\xdd\x11\x31\x73\xfd\xbd\x0c\x1f\xb3\x69\xce\x99\x66\x32\xcd\x24\xd3\x11\xf1\x87\x5c\x1a\xb7\xa9\x30\x6e\xef\x3e\xfe\x4f\xf5\x4c\x14\x4a\x3e\x11\x2c\x66\x42\x5c\x38\x56\xdc\xd7\x4c\x90\xc2\xd9\x17\xc5\x27\x38\xe1\x43\x4b\xe3\x13\x16\xfd\xc1\x95\x5c\x04\x7a\x49\x3d\xfd\x6b\x4b\xe2\x07\x6e\xef\x3e\xfe\x5e\x77\x11\x7c\x78\xa7\x7f\x78\xa9\x20\x29\xc5\x7b\x85\xdf\x5f\x0d\xe0\x7f\xee\x77\xa8\x0e\xd2\xc3\x51\x2a\x15\xa0\x5d\x34\xe3\x06\x02\xe9\x6b\x32\x4b\x7a\x9e\xb0\xd2\xcd\x4a\x7d\x19\x9f\xf5\x74\x68\xfe\x82\xf4\x99\x2d\x1f\xd1\xbb\xec\x9a\xf5\xd7\x9b\xb6\x6b\xc8\x24\xd3\xf9\x3d\xbd\xf3\x6f\x24\xbd\x71\x9a\x84\x80\x45\x83\x45\x83\x45\x83\x45\xaf\x8d\x45\xf7\x6b\x2f\x53\xcb\xa3\xcf\xd6\xf9\x07\x0d\x9a\x7a\x0f\xd4\x9c\x0d\x9a\xce\x16\x40\x70\x42\x4b\xa4\x5a\x80\x7e\x36\x89\xfc\x51\xf4\xa1\xb9\x3e\x8b\xb4\x6b\x8b\xdd\x8b\xbd\x8e\x74\xcc\x60\x53\xae\x4a\x24\xab\x17\x4d\x9d\x42\x4b\x2a\x5f\xfa\xd7\xbe\x70\x38\x4d\xd0\xc4\x0b\x56\x6c\x5d\xa5\xc1\x73\xf6\x69\x24\xea\xa2\xfb\xf8\x28\x6c\x97\xc7\xc2\x7b\xca\x43\x10\xf3\x2d\xd7\xf5\x5e\x25\x5e\x2e\x12\x3a\x73\x42\x6e\xd1\x57\xe3\x4a\x3b\x53\x08\xf2\x4d\x9b\xe2\x3b\xd3\x59\x7a\x88\xd4\x43\x16\x87\x8b\xab\x33\xd3\x17\x4a\x6e\xb2\xd7\x6b\x60\x7a\x89\x9d\x7e\x4e\xdd\x46\xb3\xe6\x19\x07\x0c\x33\x3d\xf3\x1d\x3d\x72\x9d\xe7\xb0\xc3\x77\x68\xca\xf4\x3f\x25\x76\xa4\x9f\x5c\x9a\xe3\x47\xce\x36\xfd\x11\x49\x82\x48\x12\x44\x92\x20\x92\x04\x91\x24\x93\x45\x92\xf4\xdc\x0b\x8e\xa2\x49\xce\xb7\x2d\xbe\x2f\x64\xa5\x05\x9e\xe0\x91\xc8\x96\xa0\xbb\x50\x06\xdc\x21\xed\xe8\x4e\x7a\xae\xf5\x54\xca\x5b\x48\x27\x5d\x9e\xd6\xa6\xa6\xdd\xeb\xdd\x3f\x77\xec\xb3\x5e\xcf\xb4\xea\x12\x08\x5f\x7d\x2c\xf9\x9e\x2a\x98\x0c\x83\x07\xee\xa7\x79\x14\xe1\x41\xdc\xec\xb9\x97\xda\xca\x5f\x2e\xf5\xcf\x5f\x2e\xd9\xde\xf5\xb9\xe7\xfe\x37\xdd\x48\xee\x05\xe3\x36\x81\x69\x79\xa3\xa1\x9d\x9d\x9b\x61\xfa\xf2\x57\x51\x7e\x92\xb6\x4f\x77\xec\x67\x97\x16\xc7\xc2\xa3\xcb\xf0\xf8\xdd\xf2\x30\x84\x58\x9b\xc7\x64\xa3\xc8\xf8\x61\xc8\x80\xea\x37\x78\x9f\xbe\x7b\xa3\xca\x33\xa8\xc9\xf7\x49\x86\x19\xbd\xba\xfa\x60\x1f\xe4\x77\xe6\xf0\xf0\x9e\x3b\x25\x2f\x65\x66\xd4\x88\x70\x2f\xc3\x47\x35\x26\xb5\xf2\xfa\xad\xf2\x46\xcd\xe2\x22\xa5\x37\xd5\x58\x03\x2d\x5b\x57\x69\x93\x96\x6b\xe7\xa6\x30\xe9\x0a\xba\x17\x7b\x3a\xc6\x11\xd1\x3e\xfa\x35\xd5\x06\x76\x85\xc1\x4c\xf7\x91\x2c\x0e\x20\xcb\x09\x2a\xdf\x6c\xc7\x6e\x2d\x4b\x04\xba\xd9\x6b\xd1\xb2\xbb\xd2\xef\x70\xc5\xae\x93\x09\x58\x9e\xa0\xd1\x8f\xec\xea\x27\x6e\x7d\x75\x42\x79\xf0\x6d\x75\x14\xe5\xd7\xd0\x41\x15\xc1\x69\x15\x32\xd1\x8f\xcb\x17\x49\xdf\xe0\x3e\xbb\xd2\x8f\xec\xea\x83\x0c\x45\xe1\xb2\xcc\xe2\x91\xc5\x6d\xf5\xf6\x89\x7c\x74\xfa\x15\x5d\x2f\xd2\xa6\xe7\xd1\x05\xf7\xd9\x35\x86\x4c\xc8\xa0\x3a\xdd\xe7\xd1\x38\x57\x1c\x30\xd4\x6f\x1c\xda\x82\x86\xe6\x1a\x05\x84\x0f\x4d\x36\xbe\xc7\x21\x44\xe7\xf3\x6d\xcc\x19\x4c\xd4\x4f\x58\x2d\x01\x45\xcf\xd5\x7f\x6a\x91\x1d\xa8\xf3\x89\x98\xee\x73\xcc\xe3\xc3\xe2\xbb\x4c\xf7\x84\xcd\x85\xab\x34\x64\x93\xeb\x0d\x3a\x57\x9e\xc6\x48\x2c\x6f\xe3\xd8\xf5\xa9\xe6\xb5\x10\xf8\xe4\x6c\xf3\xd1\x2b\x61\x68\x1f\x5a\x98\xd8\xdd\xa9\xb2\x9f\x16\xc1\xe8\x45\xc2\xd5\x25\x5a\x38\xf8\xf3\xe8\x37\x52\xe7\xb7\x93\x3a\xdf\x6f\xfb\xe9\x4a\x9f\x3f\x9f\x9d\x86\xe0\x05\x04\x2f\x20\x78\x01\xc1\x0b\x08\x5e\xa8\x5b\x7c\x41\xc5\x17\x24\x11\x80\x52\x80\x52\x80\x52\x80\x52\x80\x52\x80\xd2\x75\x81\x52\xb0\x0b\xb0\x0b\xb0\x0b\xb0\x8b\xc9\xd9\xc5\x09\x7c\xdf\xd0\xb4\xe8\x7e\x22\x3c\x4e\x8d\x7e\xae\xc7\xcd\x28\xea\xd3\x78\xc2\xb6\xca\x14\xef\x8a\x84\x23\x01\x13\xbb\xdc\x95\xbf\xa1\x6c\xc6\x6e\xc0\x34\x56\x17\xd4\xb9\xa0\xd2\x80\x12\xc6\x4b\x29\x88\x73\x51\x19\xc4\xcb\x40\x46\x23\x13\x34\x6d\xdc\x30\xde\x0f\x96\xe9\xa3\x27\xc3\x65\xc3\x92\x45\x5b\x0a\x2b\x4d\xb9\x88\x8c\x92\x41\x8a\x2c\xa6\xe2\xc8\x1b\x9b\xc5\x44\x8e\x8c\x4f\xdc\xe7\x8e\x08\xb5\x4b\x4e\x57\x11\x8b\x22\x69\xb9\x64\x63\x66\xce\x2f\x4e\x3e\x4c\x19\x32\xe1\xc7\x4a\xe9\x4b\x8d\xee\x47\xfe\x55\x49\x31\x7e\x10\x91\x48\x35\xa7\x62\xae\x4e\x9a\xd3\x43\x9a\x23\x39\xba\x64\xc8\x5e\xbf\xf9\x97\x3a\x36\xe4\x16\x91\x2d\x4f\xfa\x8e\xd6\x93\xc8\x19\xa5\xe6\x26\x77\x7d\xbd\x52\x91\xb3\x27\x3f\x96\xbc\xfd\x09\x77\x63\xf7\x4f\x99\x29\xe0\x48\x8f\xfb\xce\x4e\x86\xce\x4d\xf0\xd5\xb9\x39\xf8\xae\x25\x6d\x71\xf3\x8f\x8f\xd1\x9d\xba\xca\x60\xef\x71\x22\x9c\x31\x87\xc7\x28\xc5\x6a\xd1\xfa\x4e\x5f\x5d\xe7\x4d\x0f\x5d\xe7\x9d\xf6\x86\x19\xf8\xec\x6f\x3a\x9f\x5d\xc7\xe8\x1a\xf8\xf0\xab\x57\x32\x49\x71\x59\x9e\x92\x79\xc1\x9e\x5d\x03\xa4\xa6\x21\xd0\x84\xa5\x40\x7a\xea\x71\x9d\xe5\x3f\x50\xf4\x83\x35\x49\x1a\x2a\x5b\x71\x90\x8d\x55\xd9\x90\x66\xbd\xa1\x34\x6b\xe4\x93\x21\x9f\x0c\xf9\x64\xc8\x27\x83\xb5\xd9\xf4\x15\x19\x99\xbc\x31\x8f\xcd\x86\xdc\x93\xa3\xab\xb4\xe6\x9e\x2c\xd0\x6e\xcb\x1c\xe6\xa3\x67\x9c\x84\x82\xdb\x15\xd5\xac\x97\xc5\xa5\xce\x3b\xdd\xde\xc2\xf2\x03\x9f\xcb\xe0\xaf\xd7\x11\x4b\x74\xb9\x3c\x87\xeb\x15\xdb\x95\x34\x3d\xc4\x92\x3a\x96\x2c\x97\x53\x52\x8c\xc0\xa0\x0a\xd4\xd7\x74\xee\x0f\xed\xcb\xda\xa3\x08\x1d\xd1\xeb\xc8\x28\x0e\x79\x2c\x1c\xd7\xba\xee\x7f\x8e\xfa\xfb\x29\x39\x92\x16\xd0\x3e\x1b\x43\xc0\xc3\xd8\xa5\x14\x1e\x1d\xcf\x32\x64\x93\xa0\x5b\x1a\xe6\x95\x9b\x8a\xae\xb6\x68\x61\x77\xe5\x08\x13\x06\x5f\xdd\xca\x7d\x75\xdb\xc1\xab\x95\xb8\xf8\xf4\xe3\xd2\xb9\x1b\x6a\xd9\xc9\xf3\x81\x5f\x34\x2c\x49\x2f\xc9\x53\xa1\x13\x36\xb9\x47\x67\xfa\xd2\xbf\xd6\x67\xd3\x11\xe4\x2c\x8c\xd8\x8b\x5f\x22\xe9\xdf\xe9\xb4\xd8\x4f\x6a\xf1\x4b\xfe\xfe\x9c\x2e\x89\xf9\x7f\xbe\x34\x89\xfb\xf6\x9f\x37\x1f\x64\x68\x91\x37\xd5\x91\x34\xf8\x92\x7d\xb9\xdc\xab\xff\xfb\x72\xc9\x6e\x4b\xd2\xa4\xa8\x5b\xed\xfa\x3c\x44\x79\x0a\xe0\x35\xb7\x68\x00\x28\xb1\xd2\x73\xad\xc4\x99\x23\x3c\x3b\x62\xf2\x7b\x32\xb6\x3a\xf1\x30\x10\x32\xf0\xc4\x8e\xe9\x7b\x52\x3e\x75\x3a\xa7\x28\xf6\xb5\x76\x20\xb2\xdb\x0f\x11\xaf\xba\xd1\x7a\x23\x15\x61\x63\xac\xc1\xc6\x08\x2a\xa1\xa4\xcb\xb3\x32\x0e\xa3\x3b\x08\x02\x8f\x5b\x83\xd4\xbf\xe4\xd4\x8d\x28\x80\x08\xaf\x83\xfe\xb7\x39\xfd\xcf\x20\x35\x0b\xda\x40\xf6\x0b\xc2\xeb\x3a\x9f\x7d\xfd\x9a\xcc\x61\x89\xde\xd2\x0b\x36\x56\x80\xda\x4d\xa4\xd9\xd7\x90\x2e\x72\x27\xc1\x13\x7d\x9f\x74\xbf\x9b\x0a\xa3\x24\x24\x0f\x4b\x1b\x96\x07\xc0\x14\xc0\x14\xc0\x94\x65\xc3\x94\x67\x6d\x1a\xfd\xb1\x4a\xcd\xae\xb1\x48\xdb\x1a\x70\x05\xc6\xf5\xf6\x8c\x6b\xc0\x95\x31\xe7\x0d\xe0\x0a\xdc\x29\xb0\x39\x66\x75\x49\x00\xae\x34\xc0\x95\x67\xfa\x10\xfa\x63\x96\xb5\x28\x84\x80\x2d\xd0\x07\x37\xa7\x0f\x1a\xa4\x76\x41\x3b\xc8\x7e\x01\x6c\xe9\x7c\xf6\xf5\x6b\x36\x9b\x82\x2d\x41\xe8\xca\xd0\x8d\x9f\x3c\xf1\x4d\x78\xa5\x12\xfe\xd1\x99\xca\x02\x14\x72\x25\xe5\x9e\xdd\x25\xcf\xf3\xab\x7a\x9e\x77\xc5\xe7\x69\xd1\x9a\x3a\x4b\x06\xbc\xcb\xee\xd1\xef\xfa\x28\x26\x80\x26\x1c\x68\xc2\x81\x26\x1c\x68\xc2\x81\x26\x1c\xb3\x18\x42\xb0\x57\x7b\x0f\xd4\x9c\xf6\x2a\x7a\xa5\xa0\xb4\xcd\x86\x4b\xdb\xa0\x31\x0e\x1a\xe3\xa0\x31\x0e\x1a\xe3\xa0\x31\x0e\x1a\xe3\xa0\x31\x0e\x2a\xbe\xa1\xe2\x1b\x2a\xbe\xa1\xe2\x5b\x75\x46\x9e\xb5\xff\x13\xba\x70\x99\x30\x0a\xe8\xc2\x85\x2e\x5c\x6b\xeb\xc2\x55\x8b\xf4\x10\x26\x80\x2a\x8e\xcf\xaf\xe2\x98\x2b\x4f\xf3\x90\xf7\x5e\x50\x78\xfe\xfa\x8e\xda\xa7\x16\x26\x76\x78\xaa\xfc\xcb\x3d\x53\xef\x31\x8c\x9c\xab\x4b\xb6\x70\xf3\x71\x69\x79\xe5\x75\x48\x17\xa4\x8e\x7d\x3f\x49\xf9\xf5\x91\x87\x5f\xa3\x3c\x08\x5e\xbf\x23\xb9\x7f\xa2\xc4\x49\xf5\x14\x28\x4b\xe6\xa7\xdf\x7e\xfb\xdf\x4f\xb7\xbf\xff\xef\x97\xcb\xdc\x01\xa3\x75\x3d\x49\x0a\xb3\xfb\x18\x78\x82\x3c\x2d\xf7\xd9\x55\x95\x76\xe3\x3a\xbe\x76\x40\x2b\x15\xdc\xe3\x0e\x29\xbf\xf9\x21\xca\xd8\x2d\x1a\xaa\x5a\x0c\x57\x11\xb3\xdd\xc8\x0a\x85\x7a\xe6\x1c\x5d\x15\x90\x4b\xe2\x5d\x29\x5f\x28\xf3\x77\x28\x43\xde\x7f\x62\x99\x5a\xad\x16\xde\xf0\x1b\xf7\x5e\x31\x5f\x6a\xaa\x4c\xe6\x78\xe6\xa2\xa9\x7a\xf9\x88\x6b\x3e\xb1\xf4\x9d\x13\x77\x58\x66\x8c\x47\x22\xa2\x5e\x83\x99\x9f\x3b\xf1\xda\x24\x40\xad\x64\x5b\xaa\x5f\x49\x04\x76\x06\x6a\xf7\x82\xc7\x87\x50\xa9\xe2\xb1\x60\x95\x81\x48\xae\x24\x7c\xa5\xf3\x6b\xef\x47\x3a\x37\x9a\x2e\x3b\x60\xbb\xaa\x99\x02\x33\xd9\x75\x08\x76\x40\xb0\x03\x82\x1d\x10\xec\x80\x60\x87\xba\xc5\x17\x14\x7d\x41\x12\x01\x58\x05\x58\x05\x58\x05\x58\x05\x58\x05\x58\x5d\x17\x58\x05\xeb\x00\xeb\x00\xeb\x00\xeb\x98\x9c\x75\x9c\x10\x0f\xa0\x8d\x39\x19\xa6\xb9\xa6\x6a\xf8\x35\xbf\x56\xc7\xdd\xd3\x26\xa6\x07\x55\xf3\xf6\x44\x3b\x89\x1f\xc4\xa3\xde\xb6\xa2\x38\x14\xfc\x91\xc4\x63\xdb\xaf\x92\x8d\xe1\x55\x72\xec\xa3\xfc\x46\xba\x4f\xc1\xbc\x63\x9f\x49\x5d\x79\xaa\x4e\xf5\x21\x22\xfc\xde\x36\xc1\x96\x5f\x6a\xa2\xf1\x04\x75\xb3\x1f\xb5\xe0\xff\xdf\xb1\x0c\xfa\x5c\xbb\x7c\xb6\xd9\x38\xaa\x36\xf3\xb3\xd9\xb5\xff\xab\x1b\xc5\x00\x54\x05\xe6\xb2\x26\x28\x35\xa0\xd8\xde\x72\x8b\xd3\xc9\x68\x64\x02\xa7\x8d\x1f\xc6\x87\xc1\x36\x7d\xf6\xd9\x70\xdb\x02\xaa\x7c\xb4\xbc\x70\xbf\x05\x08\x59\x54\x2b\xc8\xa2\x42\xd5\x0f\x54\xfd\xa8\x79\x98\xa5\xea\x4f\xcb\xab\x02\x32\xc6\xbb\xcc\xd1\x2d\x77\xa2\x97\x59\xbd\x52\x4b\x8a\xd1\xf2\x95\xda\x0b\x36\x7a\xcd\x93\xa4\xe0\xfc\x99\x4a\x9f\x0c\xd4\x23\x3b\xcb\x9d\x98\xa0\x47\x2e\xa4\xc8\x09\x54\xc4\xe2\x20\x1b\xab\x22\x22\xad\x7c\x43\x69\xe5\xc8\x9f\x43\xfe\x1c\xf2\xe7\x90\x3f\x07\xeb\xb6\xe9\x2b\x32\x32\x59\x65\x1e\x1b\x10\xb9\x36\x47\x57\x69\xcd\xb5\x59\x81\xdd\x97\x39\xf8\xa7\x69\x02\x56\x56\xd5\x06\x59\x68\x1d\xad\xc0\x7a\xda\x67\x58\xae\xe0\xf3\x59\x7e\x93\x30\x63\x38\x66\xb1\x69\x58\xdf\x87\x42\x13\x31\x34\x11\x3b\x4b\x13\xb1\x11\x36\x9d\xae\x56\x62\x26\x78\x05\xd1\x54\x0c\xbe\x42\xe0\x64\x34\x15\x3b\x9e\x31\x68\x2a\x86\xa6\x62\xb0\x59\x60\xb3\x18\xd2\x64\x6c\x22\xab\x65\xaa\xa6\x63\xa3\xf8\x2c\xba\x5a\x8f\xad\x59\x81\x44\x78\x22\xf4\xc9\x86\x61\xda\x8e\x3e\x69\x90\xda\x06\xed\x22\xfb\x05\xe1\x89\xd0\x94\xb2\x33\x4c\x6b\x5a\xb6\x90\x80\xbe\x1b\xdd\x95\xb5\x18\xd7\x37\x0d\x3c\x6a\xea\xfe\x7a\x5e\x8c\x54\xd3\x1a\x16\x4b\x27\x96\x1b\xc0\x24\x06\x98\x04\x98\x94\xfe\xff\x6a\x61\xd2\xa8\x9b\xd0\x70\xac\xb4\x96\x06\xe5\x80\x4b\x70\x06\x6c\xcf\x19\x00\xb8\x34\xe6\xbc\x01\x5c\x82\xfb\x07\x36\x8c\x49\x36\x0c\xe0\xd2\x91\xa4\x1a\xe0\xd2\xc8\x3e\x8d\xe1\x98\x69\x2d\x0a\x25\x60\x13\xf4\xcb\x86\x61\xda\x8e\x7e\x69\x90\x1a\x07\x6d\x23\xfb\x05\xb0\x09\x9a\x53\x76\x06\x60\x53\x0d\x6c\xa2\x8a\x7f\x74\xa8\x9e\x79\xd3\x42\xa5\xa4\x34\xb4\x6f\xbb\xdf\x5c\xfb\xc0\xbd\x62\x99\x49\x9e\x15\x83\x57\xda\xd4\x67\x7a\x9a\x5d\x21\xf9\xf9\x6d\x96\x36\x7d\x45\x97\xb9\xca\xfb\x82\x94\x1a\x3d\x64\x1a\x1a\x73\xfd\x28\x16\xbc\xe4\xd0\xad\xea\x6f\xdf\x3b\xdc\x81\xf9\xa3\xfc\x5a\x29\x9d\x87\x2a\x90\xa6\xe6\x79\x52\x11\xd3\x9f\xbf\x09\x1f\x75\x1f\x4b\xdf\xdd\x7c\xc5\x1f\xf3\xaf\xe8\xcc\x5c\x0b\x4d\xb9\x56\xdc\x94\xab\x1b\xcd\x75\x35\xe4\x6a\xf5\xea\x8d\x80\x1d\xd1\x86\x0b\x6d\xb8\xd0\x86\x0b\x6d\xb8\xd6\xd6\x86\xab\x7b\xe5\xad\x6d\xc1\x35\x71\x90\xc7\xd9\x1a\x6f\x75\xbf\x7e\x73\xd3\x2d\x93\x65\x70\x4a\xab\xad\x6e\x19\x34\xb7\xd9\x9a\x58\x06\x68\xae\x85\xe6\x5a\x68\xae\x85\xe6\x5a\x68\xae\x35\x59\x73\xad\x1e\xab\xff\x51\x63\xad\xd6\x7a\x8b\x1b\x8a\xf1\xec\xf7\x36\x2b\x6e\x0e\xd6\x2d\xee\xb6\xc6\x60\xe7\x95\x3b\xda\x81\x4d\x32\xa2\xc7\xad\xc0\x26\x1e\xd6\x59\x1b\x80\x75\x8b\xa7\xa5\xf9\xd7\xd4\xcb\xa6\xa9\x2d\xbf\xba\x85\x56\x03\x39\x06\xfb\xf3\x92\xbf\xfe\x1a\x0d\xa3\xd5\x94\x5e\x9f\x88\xa6\x15\x11\x9a\x9f\xee\xfd\x72\xcf\xbe\xba\xbe\x3d\x36\x4a\x7b\x95\x2b\xfb\x64\xd0\x24\x8a\xa1\xb2\x17\x72\x2b\xe6\xaa\x64\xfd\x16\xae\x3d\x0e\x88\x03\x84\x03\x84\x5b\x2e\x84\x03\x80\x03\x80\x03\x80\xcb\x3f\x38\x00\x38\x00\x38\x00\x38\x00\x38\x00\x38\x00\x38\x00\x38\x00\x38\x00\x38\x00\x38\x00\x38\x00\x38\x00\xb8\xc5\x01\xb8\x62\x11\x99\x26\x87\x03\x8a\xc6\x00\x28\xce\x8f\x9f\x00\x14\x01\x14\x01\x14\x01\x14\x2b\x42\x33\x0f\x28\xb6\x94\x82\x34\x20\x4f\xaf\x39\x81\x71\xf6\xbc\xbd\xe6\x47\x43\x1e\x1f\x10\xe2\xb2\x11\xe2\x7c\x79\x7c\xc6\xd4\xab\x04\x56\x04\x56\x04\x56\x04\x56\x04\x56\x04\x56\x04\x56\x04\x56\x04\x56\x04\x56\x04\x56\x04\x56\x04\x56\x04\x56\x04\x56\x5c\x17\x56\x04\x86\x03\x86\x03\x86\x5b\xc6\x88\x02\xc3\x95\xc5\x03\x0c\xb7\x76\x0c\x67\x48\x9e\xdf\xc4\x28\x6e\xbe\xbc\xbf\x9e\x5d\x7a\x01\xf1\x00\xf1\x16\x05\xf1\x00\xf0\x00\xf0\x00\xf0\x00\xf0\x00\xf0\x00\xf0\x00\xf0\x00\xf0\x00\xf0\x00\xf0\x00\xf0\x00\xf0\x00\xf0\x00\xf0\x00\xf0\x00\xf0\x56\x04\xf0\xd0\x5c\x1e\x80\x12\x80\xf2\x44\xb9\x03\x50\x02\x50\x02\x50\x6e\x1a\x50\xfa\x22\xfe\x2e\xc3\xaf\xca\xc2\x4b\xa8\xe4\x20\xca\x38\x4b\x87\xcf\xca\x58\x3b\x22\x66\xae\xbf\x97\xe1\x63\x36\xb7\x39\xd3\x1c\xa3\x19\x0d\x3a\x22\xfe\x77\x26\x82\xdb\xbb\x8f\xff\x53\x3d\x1e\x3d\x4d\x4f\x84\x71\x99\x10\x17\x8e\xe2\xf2\x2f\xa3\x70\xce\x45\xf1\xbe\x5d\x5f\xd2\xb7\xd7\xcb\xfe\x98\x4a\xd6\xb0\x5e\x23\xfb\x7e\x49\x7f\xbe\xbe\xbd\xfb\xf8\x7b\xdd\x59\xf8\x9e\x4e\xff\x9e\x52\x41\x52\x5a\xf1\x6a\x3e\xab\xff\xfb\xf6\xfa\x19\x5f\x96\xeb\x3b\xa1\x88\x22\xcb\xe3\x51\x79\xfc\x2e\xb5\x8b\x61\xdc\xe8\x18\x7d\x4d\x66\x49\xcf\x13\x56\xba\xbb\x7c\xd4\x8f\xf0\x4e\x3d\x42\xcb\x87\xa1\xcf\x2d\x7e\x1b\xef\xb2\xcb\x34\x5d\x62\xda\x26\xfd\x93\xcc\xd3\xf7\xf4\x9a\xbf\x05\xba\x70\x40\xbf\x59\xda\x3e\x3d\x01\x50\x01\x50\x01\x50\x01\x50\xd7\x06\x50\x5b\xcc\xbf\x2e\x88\xda\xee\x4a\x68\x37\x03\x4f\x5a\x7b\xff\xa3\x04\x97\xb8\x8e\x5f\x51\x91\x16\x4b\xcd\x28\x3d\x0f\x4a\xef\x56\x0c\x56\xba\x17\x2c\x50\xd2\x8a\x62\x61\xef\xd8\xad\xcf\x5c\x5f\xaf\x2c\x32\x64\x07\x3f\x5b\x9c\x6c\x66\x87\x4f\xbf\x1f\x7c\x66\xbb\xa1\xda\x07\xbf\x89\x6c\xc6\xab\xe5\x93\x1c\xfd\xc9\x27\x9f\xce\x8d\x44\xc0\x6c\x7f\x08\xe9\x2b\x0b\x42\x69\x89\x88\x3c\xf2\x89\x0f\x23\x99\x65\x3b\xf6\x27\xdd\x91\x46\x8b\xe6\xce\x5b\x76\xcd\x6e\x3d\xef\x2d\xf9\xdb\x6d\xb5\x4a\x1f\x7c\x35\xf0\x8e\x88\xb2\x29\x99\x5c\x4e\xd8\x03\x06\x4a\xbf\xcb\x3c\xc3\x74\x36\xea\xdd\x4f\x14\xcd\xe4\xfb\x6c\x12\xf9\xa3\xe8\xde\x72\x7d\x16\x69\xaf\x13\xbb\x17\x7b\x1d\x9e\x97\x11\x92\x5c\x95\x48\x56\x2f\x9a\x3a\x07\xa1\x37\x87\x7b\xc1\x7c\xe9\x5f\xfb\xc2\xe1\x34\x41\x13\x07\xd5\x8e\xfd\x91\x6d\xd8\x9a\x96\x66\x9f\x46\xa2\x23\xba\x8f\x8f\xc2\x76\x79\x2c\xbc\xa7\x3c\x6e\x2e\xdf\x72\x5d\xef\x55\xe2\x80\x22\xa1\x33\x27\xe4\x16\x7d\x35\xae\xb4\x33\x85\x20\xdf\xb4\x29\x28\x31\x9d\xa5\x87\x48\x3d\x64\x71\xb8\xb8\x3a\x33\x7d\xa1\xe4\x26\x7b\xbd\x06\xa6\x97\xd8\xe9\xe7\x7c\x14\xdc\xaf\x7d\xc6\x01\xc3\x4c\xcf\x7c\x47\x8f\x5c\xe7\xd4\xeb\x70\xeb\x99\x32\xfd\x4f\x09\x78\xe8\x27\x97\xe6\xa0\x87\xb3\x4d\x7f\x84\x3f\x20\xfc\x01\xe1\x0f\x08\x7f\x40\xf8\xc3\x64\xe1\x0f\x3d\xf7\x82\xa3\x10\x88\xf3\x6d\x8b\xef\x0b\xc9\x58\x81\x27\x78\x24\xb2\x25\xe8\x2e\x94\x01\x77\x48\x3b\xba\x93\x9e\x6b\x3d\x95\x82\xed\xd3\x49\x97\x67\x73\xa9\x69\xf7\x7a\xf7\xcf\x1d\xfb\xac\xd7\x33\xad\xba\x04\xc2\x57\x1f\x4b\xbe\xa7\x0a\x26\xc3\xe0\x81\xfb\x69\xf0\x7f\x78\x10\x37\x7b\xee\xa5\xb6\xf2\x97\x4b\xfd\xf3\x97\x4b\xb6\x77\x7d\xee\xb9\xff\x4d\x37\x92\x7b\xc1\xb8\x4d\xcc\x58\xde\x68\x9e\x66\xe7\x66\x98\xbe\xfc\x55\x94\x9f\xa4\xed\xd3\x1d\xfb\xd9\xa5\xc5\xb1\xf0\xe8\x32\x3c\x7e\xb7\x3c\x42\x20\xd6\xe6\x31\xd9\x28\x32\x7e\x18\x32\xa0\xfa\x0d\xde\xa7\xef\xde\xa8\xf2\xd4\xd1\xb9\x71\x0d\x33\x7a\x75\xf5\xc1\x3e\xc8\xef\xcc\xe1\xe1\x3d\x77\x4a\xae\xc9\xcc\xa8\x11\xe1\x5e\x86\x8f\x6a\x4c\x6a\xe5\xf5\x5b\xe5\x8d\x9a\xc5\x45\x4a\x6f\xaa\xb1\x06\x5a\xb6\xae\xd2\x26\x2d\xd7\xce\x4d\x61\xd2\x15\xc8\x39\x91\x8d\x71\x44\x4c\x8e\x7e\x4d\xb5\x81\x5d\x61\x30\xd3\x7d\x24\x43\xf4\x59\x22\x4b\xf9\x66\x3b\x76\x6b\x59\x22\x88\x69\x6f\x2a\x5a\x76\x57\xfa\x1d\xae\xd8\x75\x32\x01\xcb\x13\x34\xfa\x91\x5d\xfd\xc4\xad\xaf\x4e\x28\x0f\xbe\xad\x8e\xa2\xa4\x10\x3a\xa8\x22\x38\xad\x42\x26\xfa\x71\xf9\x22\xe9\x1b\xdc\x67\x57\xfa\x91\x5d\x7d\x90\xa1\x28\x5c\x96\x59\x3c\xb2\xb8\xad\xde\x3e\x91\x8f\xce\x19\xa2\xeb\x45\xda\xf4\x3c\xba\xe0\x3e\xbb\xc6\x90\x09\x19\x54\xa7\xfb\x3c\x1a\xe7\x8a\x63\x79\xfa\x8d\x43\x5b\x3c\xcf\x5c\xa3\x80\xc8\x9e\xc9\xc6\xf7\x38\xba\xe7\x7c\xbe\x8d\x39\xe3\x7c\xfa\x09\xab\x25\xd6\xe7\xb9\xfa\x4f\x2d\xa7\x03\x4e\x3e\x11\xd3\x7d\x8e\x79\x7c\xe8\xcb\xe7\x16\x47\x91\x0b\xa7\x35\x24\x46\xeb\x1d\x39\xd7\x96\xc6\xc8\x91\x3e\x02\xd4\xf5\x89\xd1\x0d\xb0\xb7\x9a\x0a\xdd\x96\x05\x3d\x7a\xd9\x07\xed\x26\x0b\x13\xd3\x3a\xd5\xe7\xd3\x8a\x0f\x3d\x09\xb7\xba\x48\x91\x6f\x3f\x97\x6a\x23\x8f\x7b\x3b\x79\xdc\xfd\xb6\x95\xae\x5c\xee\xf3\xd9\x5f\x08\x4a\x40\x50\x02\x82\x12\x10\x94\x80\xa0\x84\xba\xc5\x17\xb4\x7b\x41\x12\x01\x00\x05\x00\x05\x00\x05\x00\x05\x00\x05\x00\x5d\x17\x00\x05\x93\x00\x93\x00\x93\x00\x93\x98\x9c\x49\x9c\xc0\xed\x0d\xcd\x44\xee\x27\xc2\xe3\x6c\xe4\xe7\x7a\xdc\x8c\xa2\x39\x8d\x27\x6c\xab\xc4\xee\xae\x00\x32\xbe\xbd\xde\x15\xdd\xf8\x6b\x4e\x3d\xec\x86\x46\x63\x75\xc3\x3c\x1f\x28\x1a\x50\x2e\x77\x29\x25\x66\x2e\x2a\xc3\x76\x19\xc8\x68\x64\x2a\xa6\x6d\x17\xc6\xfd\xbe\x04\x4c\x9f\x30\x26\x03\x1b\x96\xd9\xd9\x52\xa0\x68\xaa\x95\x61\x94\x54\x4f\xa4\x1b\x15\x47\xdd\xd8\x74\x23\xf2\x4c\x7c\xe2\x3e\x77\x44\xa8\x7d\x6c\x54\x77\x8b\x47\x91\xb4\x5c\x32\x1a\x33\x6f\x16\x27\xa7\xa4\x0c\x99\xf0\x63\xa5\xc5\xa5\x56\xf4\x23\x57\x93\x48\x1d\x12\x89\x54\x15\x2a\x26\xd5\xa4\xc9\x37\xa4\x0a\x92\xe7\x4a\x86\xec\xf5\x9b\x7f\xa9\x63\x43\x6e\x11\xaa\xf2\xa4\xef\x68\xc5\x87\xbc\x4b\x96\xf4\x63\xee\xfa\x7a\x6d\x22\xef\x4d\x7e\x2c\xb9\xef\x13\x90\xc6\xee\x9f\x32\xdd\xde\x91\x1e\xf7\x9d\x9d\x0c\x9d\x9b\xe0\xab\x73\x73\xf0\x5d\x4b\xda\xe2\xe6\x1f\x1f\xa3\x3b\x75\x95\xc1\xee\xe0\x44\x38\x63\x0e\x8f\x51\x9a\xd2\x62\x15\x98\xbe\xca\xcb\x9b\x1e\xca\xcb\x3b\xed\xda\x32\xec\xb9\xdf\x74\x3e\xb7\x0e\xa2\x35\xec\xc1\xd7\xa7\x2d\x92\x3e\xb2\x04\x6d\xf1\x82\x0d\xa9\xb5\x51\xd3\x8d\x66\xc2\x92\x1b\xfd\x75\xb0\xe3\x3a\x1b\xa8\xae\x51\xbc\x3b\x54\xae\x25\xaa\x5c\xc8\x67\xde\x50\x3e\x33\x12\xb7\x90\xb8\x85\xc4\x2d\x24\x6e\xc1\x5a\x6c\xfa\x8a\x8c\xcc\x92\x98\xc7\xf6\x42\x92\x47\x47\x92\xc7\x22\x6c\xb0\xcc\x8b\x3d\x7a\x6a\x47\x28\xb8\x5d\xd1\xbe\x7a\x5a\x52\xea\xcc\x5e\x76\x14\x96\x15\xf8\x44\xfa\x7d\x91\x8e\x58\x86\x4b\xe4\x39\x00\xad\xd8\x83\xa2\xf9\x09\xd0\x75\xe2\x1c\x48\x90\x68\xfb\xa0\x6a\xcb\xd7\x74\xee\x0f\xed\xeb\xd6\xa3\x08\x1d\xd1\xeb\xc8\x28\x0e\x79\x2c\x1c\xd7\xba\xee\x7f\x8e\xfa\xfb\x29\x39\x92\x56\xc8\x3e\xcb\x7d\xc0\xc3\xd8\xa5\x64\x18\x1d\x19\x32\x6c\xe9\xa7\x9b\xce\xef\x43\x9b\x8a\x63\xb6\xe8\x4c\x77\xe5\x00\x0d\x06\xcf\xda\xca\x3d\x6b\xdb\x81\x99\x95\xb0\xf2\xf4\xe3\xd2\xa9\x0f\x6a\xad\xc9\xd3\x69\x5f\x34\xac\x43\x2f\xc9\xaf\xa0\xf3\x1d\xb9\x47\x67\xfa\xd2\xbf\xd6\x67\xd3\x11\xe4\xda\x8b\xd8\x8b\x5f\x22\xe9\xdf\xe9\xac\xd2\x4f\x6a\xc5\x4b\xfe\xfe\x9c\xae\x83\xf9\x7f\xbe\x34\x89\xb2\xf6\x9f\x37\x1f\x64\x68\x91\xef\xd3\x91\x34\xf8\x92\x7d\xb9\xdc\xab\xff\xfb\x72\xc9\x6e\x4b\xd2\xa4\xa0\x55\xed\xa8\x3c\x44\x79\x06\xdd\x35\xb7\x68\x00\x28\x2f\xd1\x73\xad\xc4\xf5\x22\x3c\x3b\x62\xf2\x7b\x32\xb6\x3a\x6f\x2f\x10\x32\xf0\xc4\x8e\xe9\x7b\x52\x3a\x72\x3a\xa7\x28\x74\xb4\x76\x20\xb2\xdb\x0f\x11\xaf\xba\xd1\x7a\x03\xfd\x60\x39\x2c\xce\x72\x08\xc6\xea\x64\x7f\x46\xdb\xe1\x30\xba\x29\x1f\x78\xdc\x1a\xa8\xd2\x25\x27\xaf\x57\xa9\x43\x70\x1a\xf4\xb9\x4d\xe9\x73\x06\xa9\x4d\xd8\xdd\xb3\x5f\x10\x9c\xb6\x25\xad\xe4\xb0\x0c\x7f\xe6\x05\x3b\x29\xc4\xab\xdc\x49\x69\x9e\x6a\x53\x2d\xaa\x4c\x43\xa1\xa9\x0f\x32\xbc\xf5\xbc\x7f\xf3\x47\x11\x05\xdc\x90\x7e\x63\x8d\x27\x20\xa5\x08\xd9\x44\x73\xc4\x87\x9e\x8f\x83\xa0\x5e\xdb\x8a\xeb\xb5\x75\x83\x9d\xae\x5a\x6d\xc3\xfb\xd8\xf6\x83\x56\xa8\xd0\x86\x0a\x6d\xa8\xd0\x86\x0a\x6d\x6b\xab\xd0\xd6\xbd\xf2\xd6\x56\x67\x9b\x38\x44\xe0\x6c\x35\xd9\xba\x5f\xbf\xb9\x1e\x9b\xc9\x32\x38\xa5\x0a\x5b\xb7\x0c\x9a\x2b\xb0\x4d\x2c\x03\xd4\x5d\x43\xdd\x35\xd4\x5d\x43\xdd\x35\xd4\x5d\x9b\xac\xee\x5a\x8f\xd5\xff\xa8\xe6\x5a\x6b\xe6\xd2\x86\x22\x04\xfb\xbd\xcd\x8a\xeb\xc6\x75\x8b\xbb\xad\x66\xdc\x79\xe5\x8e\x4a\x71\x93\x8c\xe8\x71\x95\xb8\x89\x87\x75\xd6\xda\x70\xdd\xe2\x69\xa9\x0b\x37\xf5\xb2\x69\x6a\x35\xb8\x6e\xa1\xd5\x20\x8b\xc1\xfe\xbc\xe4\xaf\xbf\xfa\x42\x2a\x3f\x23\x3c\xba\x06\x01\xfd\xfd\x77\x3d\xbb\x9a\xb0\x24\x41\x21\x63\x53\xee\x7b\x50\xab\xe3\xc2\x04\xef\xb2\x2b\x64\xd0\xca\xae\xb9\x0e\xea\x14\xc0\x9d\x0b\x77\x2e\xdc\xb9\x70\xe7\xae\xd0\x9d\xbb\x84\x86\x1b\x88\x7c\xec\x3d\x50\x73\x46\x3e\xa2\x2f\x0a\xaa\xe6\x6c\xb8\x6a\x0e\x9a\xe0\x00\xc6\x00\xc6\x00\xc6\x00\xc6\x00\xc6\xa0\x09\x0e\x8a\xc9\xa1\x98\x1c\x8a\xc9\xa1\x98\x5c\x75\x46\x9e\xb5\xd7\xd3\x9a\xc8\x29\x3a\x6e\xad\x9b\xa3\xa2\xe3\xd6\x92\x3a\x6e\xd5\x72\x3a\x24\x9c\xa2\x40\xe4\x80\x02\x91\xb9\xb6\xb4\x98\x74\x2c\xe3\x53\x32\x47\x01\xda\x48\x28\xdb\x4e\x42\x59\xbf\x1d\xa5\x2b\xa9\xec\x7c\xa6\x17\xe2\x11\x10\x8f\x80\x78\x04\xc4\x23\x20\x1e\xa1\x6e\xf1\x05\xe8\x5e\x90\x44\xc0\x3e\xc1\x3e\xc1\x3e\xc1\x3e\xc1\x3e\xc1\x3e\xd7\xc5\x3e\x81\x23\x80\x23\x80\x23\x80\x23\x26\xc7\x11\x27\x20\x7b\x43\x53\xbe\xfa\x89\xf0\x38\xed\x6b\x55\x75\xc1\x1b\x4f\x40\xb5\x3e\x54\xeb\x5b\x77\xb5\xbe\x44\x5d\xd4\xb5\x92\x7d\x9b\xa9\xb1\x61\x91\x25\x03\xf1\x8a\x45\x07\xeb\x41\xad\x3d\xb4\xb6\x0b\xfe\xa8\x17\xa6\x20\x94\xa4\x9e\xd6\x65\x8e\xb6\xf7\x35\x22\x30\x54\xfe\x19\xcd\x8d\xba\xde\x26\xf9\xab\xd0\xdc\x48\x46\x23\x43\x40\x6d\xaa\x15\x7a\x6d\xb7\x00\x3f\x7d\xec\xe8\xc8\x6f\x09\x25\xe5\x51\x4d\x7e\x3b\x39\x55\xa8\x26\x8f\x6a\xf2\x35\x0f\x63\xb8\xaa\xb6\xc0\x42\xf2\x66\x37\xd9\x7d\xde\x33\xaf\x4f\x1b\x26\xdd\xc3\x70\x6d\xf8\x82\x8d\x53\x4e\x44\xff\xef\xdf\x67\xaa\x2a\xd2\x4b\xf9\x3a\x2e\x25\x82\x02\x22\x50\xb8\x56\xa1\x70\x21\x65\x7b\x43\x29\xdb\xc8\x4d\x43\x6e\x1a\x72\xd3\x90\x9b\x06\x5b\xb1\xe9\x2b\x32\x32\x11\x64\x1e\x1b\x0c\x79\x2c\x1d\x79\x2c\xa6\x1b\x64\x99\xe7\x7a\xf4\xec\x95\x50\x70\xbb\xa2\x78\x75\x1b\x51\xea\xa4\xfe\x26\x14\x56\x14\xb8\x45\x3a\xbf\x43\x47\x18\xef\x15\x79\x0e\x23\x24\xd7\x77\x62\x9c\xd6\xde\xbc\x0f\xfc\x33\x85\xfb\x01\x78\x2e\x0e\x78\x52\xe8\x44\xaf\x8d\xa3\xba\x2c\x5f\xd3\xb9\x3f\xb4\xaf\xd0\x8f\x22\x74\x44\xaf\x23\xa3\x38\xe4\xb1\x70\x5c\xeb\xba\xff\x39\xd4\x9a\x3f\x39\x92\xf6\x82\x3e\x1b\x5b\xc0\xc3\xd8\xa5\xcc\x26\x1d\xe6\x73\xf2\x26\x47\xf7\x33\xc4\x51\x38\x15\xa5\x6d\x51\x0c\xef\xca\xd1\x36\x0c\xee\xc3\x95\xbb\x0f\xb7\xc3\x6b\x2b\x39\x02\xe9\xc7\xa5\xf3\x58\xd4\x5a\x93\xe7\x46\xbf\x68\x58\x87\x5e\x92\xf3\x44\x27\xaf\x72\x8f\xce\xf4\xa5\x7f\xad\xcf\xa6\x23\xc8\x7f\x19\xb1\x17\xbf\x44\xd2\xbf\xd3\x29\xc2\x9f\xd4\x8a\x97\xfc\xfd\x39\x5d\x07\xf3\xff\x7c\x69\x12\x48\xee\x3f\x6f\x3e\xc8\xd0\x22\x07\xaf\x23\x69\xf0\x25\xfb\x72\xb9\x57\xff\xf7\xe5\x92\xdd\x96\xa4\x49\x11\xc8\xda\x1b\x7b\x88\xf2\x74\xc8\x6b\x6e\xd1\x00\x50\x92\xa9\xe7\x5a\x89\x7f\x49\x78\x76\xc4\xe4\xf7\x64\x6c\x75\x12\x66\x20\x64\xe0\x89\x1d\xd3\xf7\xa4\xdc\xf2\x74\x4e\x51\x1c\x70\xed\x40\x64\xb7\x1f\x22\x5e\x75\xa3\xf5\x46\x6d\xc2\x46\x5a\x92\x8d\x14\x54\xc2\x67\x0d\xb7\x92\x0e\xa3\xbb\x2a\x02\x8f\x5b\xa7\x2b\x72\xc9\x79\x2b\x57\xe5\x10\x70\x07\x05\x6e\x2b\x0a\x9c\x41\x7a\x12\xb6\xf3\xec\x17\x04\xdc\xad\x5f\x03\x39\x18\xef\xa5\xbd\x60\xa3\xc6\xae\xdd\x44\x1a\x90\x15\x42\xd8\xa6\x61\x30\xfa\x3e\xe9\x06\x36\x2a\x8d\x49\x18\x1f\x16\x28\x7c\xed\x60\x32\x60\x32\x60\x32\xa5\x77\x05\x93\x99\x8f\xc9\x0c\xdf\xf4\xba\xe9\x4c\xcd\xae\xb7\x48\xc3\x1e\x8c\x06\x26\xfe\xf6\x4c\x7c\x30\x9a\x31\xe7\x0d\x18\x0d\x9c\x3a\xb0\x99\xc0\x68\x2a\xf2\x9a\x8e\xd1\x3c\xc7\x9b\xd1\x4d\x6b\xd6\xa2\xda\x81\xd9\x40\xa1\xdb\x8a\x42\x67\x90\xde\x84\xed\x3d\xfb\x05\xcc\x66\xfd\x1a\xc9\xea\x99\x4d\x72\x2c\x25\xe5\xb9\xa5\x6f\x66\xca\x72\x03\x85\x6c\x4c\xb9\x67\x89\xbe\x72\x94\xa5\xd7\x5d\x7f\xe0\x5d\x76\x9d\x5c\xcf\x69\xbc\x1a\xea\x11\xa0\x81\x08\x1a\x88\xa0\x81\x08\x1a\x88\xa0\x81\xc8\x2c\x06\x0b\xec\xca\xde\x03\x35\xa7\x5d\x89\x3e\x2f\xa8\x8e\xb3\xe1\xea\x38\x68\xea\x83\xa6\x3e\x68\xea\x83\xa6\x3e\x68\xea\x83\xa6\x3e\x68\xea\x83\xa2\x71\x28\x1a\x87\xa2\x71\x28\x1a\x57\x9d\x91\x67\xed\x5d\x85\x0e\x62\x26\x8c\x02\x3a\x88\xa1\x83\xd8\xda\x3a\x88\xd5\x32\x3b\xe0\x7c\x14\x82\x1c\x50\x08\x32\xd7\x96\xce\xc8\xcc\x9b\x68\xef\xac\x85\x21\xb5\x9f\x2c\x4c\x6c\xeb\x54\xa1\x97\x7b\xa6\x9e\xba\x37\xee\x56\x57\xa9\x0f\xe5\x7b\x36\xe2\xae\x3c\x2f\x29\x70\xd4\x22\xf0\x27\x29\xbf\x3e\xf2\xf0\x6b\x94\x87\x88\xeb\x97\x20\x9f\x4d\x94\x78\x96\x9e\x02\x65\x7e\xfc\xf4\xdb\x6f\xff\xfb\xe9\xf6\xf7\xff\xfd\x72\x99\x7b\x4d\xb4\x82\x26\x49\xcb\x75\x1f\x03\x4f\x90\x7b\xe4\x3e\xbb\xaa\x52\x49\x5c\xc7\xd7\x5e\x63\xa5\x37\x7b\xdc\x21\x8d\x35\x3f\x44\x59\xa8\x45\xeb\x52\xbb\x22\xae\x22\x66\xbb\x91\x15\x0a\xf5\xcc\x39\x6f\x2a\x70\x92\xc4\x25\x52\xbe\x50\xe6\xa4\x50\xd6\xb7\xb2\xf4\x53\x5d\x58\xad\x96\xe1\x37\xee\xbd\x62\xbe\xd4\x28\x98\x6c\xe8\xcc\xaf\x52\x75\xcd\x11\x8c\x7c\x62\xe9\x3b\x27\x3e\xac\xcc\x82\x8e\x44\x44\xcd\x0d\x33\xe7\x74\xe2\x6a\x49\x28\x58\xc9\x20\x54\xbf\x92\x08\xec\x8c\xae\xee\x05\x8f\x95\x1d\xef\xf0\x58\xb0\xca\x40\x24\x57\x12\xbe\x52\xd4\xb5\xcb\x22\x70\x73\xec\x5b\x77\xd9\x01\x7b\x4c\xcd\x14\x98\xc9\x18\x43\x84\x02\x22\x14\x10\xa1\x80\x08\x05\x44\x28\xd4\x2d\xbe\x40\xdf\x0b\x92\x08\x68\x28\x68\x28\x68\x28\x68\x28\x68\x28\x68\xe8\xba\x68\x28\x00\x05\x00\x05\x00\x05\x00\xc5\xe4\x80\xe2\x04\x88\xaf\x8d\x39\x19\xa6\x89\x9c\x6a\xf8\x35\x74\x56\xc7\xdd\xd3\x26\xa6\x07\x55\x43\xf2\x44\x3b\x89\x1f\xc4\xa3\xde\xb6\xa2\x38\x14\xfc\x91\xc4\x63\xdb\xaf\x92\x8d\xe1\x55\x72\xec\xa3\xfc\x46\xba\x4f\xc1\xbc\x63\x9f\x49\x5d\x79\xaa\x4e\xf5\x21\x22\xfc\xde\x36\xc1\x96\x5f\x88\xa1\xf1\x04\x75\xb3\x1f\xb5\xe0\xff\xdf\xb1\x0c\xfa\x5c\xbb\x7c\xb6\xd9\x0c\xa9\x92\x5f\x59\xf2\xe3\xff\xea\x46\xf1\x76\x11\x92\x5a\xd5\x16\x86\x8d\x06\x94\xcd\x43\xa5\xb9\xc5\x55\x9a\x93\xd1\xc8\x70\x50\x9b\x6d\x8c\xf7\xe6\x80\xfa\x84\x89\x48\xa0\xd1\x45\x3d\xca\x6f\xd7\x6f\x6d\x44\x0a\xd6\x0a\x52\xb0\x50\xda\x03\xa5\x3d\x6a\x1e\x66\x11\x7a\xdc\x92\x0a\x7c\x0c\x7c\xf0\x39\xfa\xf0\x8e\xf1\xe4\xeb\x53\x9b\x49\x3d\x59\x84\xda\x7c\xc1\xc6\xac\x53\x92\x54\x98\x3f\x53\xb9\x92\xfe\xba\xda\x71\x89\x92\xd9\x75\xb5\x85\x14\x26\x81\x66\x56\x1c\x64\x63\x35\x33\xa4\x82\x6f\x28\x15\x1c\x39\x6f\xc8\x79\x43\xce\x1b\x72\xde\x60\x54\x36\x7d\x45\x46\x26\x98\xcc\x63\xa0\x21\x3f\xa6\x23\x3f\x66\x19\x76\x5a\xe6\xf9\x9e\xa6\x55\x57\x59\xfd\xea\x6b\x56\x35\xb7\xe9\x6a\x36\xaa\xb0\xc6\xc0\x8b\x52\x3d\xcd\x88\x66\x5d\x33\xb1\xc7\x62\xcb\xae\x96\x47\x40\xe3\xae\xfa\x77\x06\x4e\x45\xe3\xae\x71\x1a\x77\x0d\xdb\x02\x5b\x9a\x76\xad\x0c\x02\xa3\x69\x17\xdc\x8d\xdb\x03\xc1\x68\xda\x35\xe6\xbc\x41\xd3\x2e\x78\x69\x60\x41\xad\xb7\x75\xd7\x28\x36\xd4\x54\x0d\xbc\x86\xfa\x38\x5a\x9a\x77\xad\x4c\xc5\x43\x9c\x1f\xd4\xbb\x6d\xa9\x77\x06\x69\x51\xd8\xec\xb3\x5f\x10\xe7\xb7\x2d\x2d\xe5\xac\xed\xbc\xce\x11\x2c\xd7\xdc\xbd\x6b\x29\x45\xcd\x8a\xe7\x7d\x90\xe1\xad\xe7\x65\x5a\x4f\x64\x02\xcf\x69\x3c\x01\x99\x6b\xc8\x5c\xbb\xdc\x4c\xe6\x1a\x4a\x04\xae\xb8\x44\x60\x37\x14\xea\x2a\x0f\xd8\xea\x7e\x1a\x01\x78\xa1\x28\x20\x8a\x02\xa2\x28\x20\x8a\x02\xae\xad\x28\x60\xf7\xca\x5b\x5b\x10\x70\xe2\xf0\x82\xb3\x95\x01\xec\x7e\xfd\xe6\x12\x80\x26\xcb\xe0\x94\xc2\x7f\xdd\x32\x68\x2e\xfa\x37\xb1\x0c\x50\xea\x0f\xa5\xfe\x50\xea\x0f\xa5\xfe\x50\xea\x6f\xb2\x52\x7f\x3d\x56\xff\xa3\x32\x7f\xad\xe9\x5f\x1b\x8a\x2e\xec\xf7\x36\x2b\x2e\x55\xd8\x2d\xee\xb6\x32\x85\xe7\x95\x3b\x8a\x13\x4e\x32\xa2\xc7\x85\x09\x27\x1e\xd6\x59\xcb\x11\x76\x8b\xa7\xa5\x14\xe1\xd4\xcb\xa6\xa9\x05\x08\xbb\x85\x56\x83\x2f\x06\xfb\xf3\x92\xbf\xfe\xea\x8b\xb0\xe8\xde\x37\xae\xef\x84\x22\x8a\x2c\x8f\x47\xd1\xc4\x1c\x2b\xd1\xfb\x7c\xdb\xfd\xe6\xda\x07\xee\x15\x47\x8b\x67\xb6\xdd\x47\xfd\x40\xef\xd4\x03\xed\x0a\x79\xcc\x6f\x33\xfd\xfb\x8a\x2e\x74\x95\x3b\xf3\x4a\xde\x99\x0c\x7b\x31\xd7\x8f\x62\xc1\x4b\x1b\x65\x15\x8a\x7d\xaf\xc6\x76\x17\xef\xfe\x6b\x85\x2f\x00\x84\x99\x9a\xa5\x49\x0b\xc0\xcf\xca\xc6\xdb\x2e\x0d\xa3\x21\x3c\x33\x12\x2b\x7e\x2d\x20\x62\x20\x62\x20\x62\x20\x62\x20\x62\x20\x62\x20\x62\x20\x62\x23\xad\xb6\x20\x62\x20\x62\x20\x62\x20\x62\x20\x62\x20\x62\x20\x62\x20\x62\x20\x62\x20\x62\x20\x62\x46\x8e\x28\x88\x58\x59\x3c\x20\x62\x2b\x20\x62\x35\xf5\xce\x27\x02\x63\x45\x1a\xe6\xa7\xdb\x7d\x9a\xe5\x35\x3a\x15\x7b\x95\x6b\xf8\x64\xc5\x24\xda\xa0\x32\x12\x72\xd3\xe5\xaa\x64\xf2\x16\xae\x3d\x98\xa9\x81\xa7\x81\xa7\x2d\x88\xa7\x81\xa5\x81\xa5\x81\xa5\x81\xa5\x81\xa5\x81\xa5\x81\xa5\x81\xa5\x81\xa5\x81\xa5\x81\xa5\x81\xa5\x81\xa5\x81\xa5\x81\xa5\x81\xa5\x2d\x8a\xa5\x15\xfb\x10\x34\x7b\x1b\x96\xd4\x86\x00\x74\x10\x74\x10\x74\x70\x19\x23\x0a\x3a\x58\x16\x0f\xe8\xe0\x92\xe9\xa0\x49\xa9\x72\xb3\x65\xc9\xfd\xea\x46\x31\x2a\x47\x56\x87\x12\x80\x6f\x41\x80\x6f\x9e\x84\x39\xf0\x3d\xf0\x3d\xf0\x3d\xf0\x3d\xf0\x3d\xf0\x3d\xf0\x3d\xf0\xbd\x91\x56\x5b\xf0\x3d\xf0\x3d\xf0\x3d\xf0\x3d\xf0\x3d\xf0\x3d\xf0\xbd\xcd\xf1\x3d\xd0\x30\xd0\x30\xd0\xb0\x65\x8c\x28\x68\x58\x59\x3c\xa0\x61\x8b\xa4\x61\x7e\xc6\x7d\x74\x9e\x1c\xfd\xfd\x37\x20\x59\xb9\x87\x6c\x01\x97\x01\x8f\x01\x8f\x01\x8f\x01\x8f\x01\x8f\x01\x8f\x01\x8f\x01\x8f\x01\x8f\x01\x8f\x01\x8f\x55\x97\x5b\x03\xd1\x10\xf0\x18\xf0\x18\xf0\x18\xf0\x18\xf0\x18\xf0\x18\xf0\xd8\x12\xf1\x58\xf2\xd6\x94\x05\xa7\x86\x92\x1f\xe2\x07\x16\x59\x32\x10\xaf\x58\x74\xb0\x1e\xd4\xc8\x93\xbd\x22\xf8\xa3\x76\xf4\x06\xa1\x24\x29\x9f\x9e\x20\x47\x7e\x3f\x64\xc9\x81\x0b\x82\x0b\x82\x0b\x82\x0b\x82\x0b\x82\x0b\x96\xb8\xa0\x59\x55\x35\x97\x56\x50\xf3\x88\x2c\x82\x2a\x82\x2a\x2e\x88\x2a\x82\x28\x82\x28\x82\x28\x82\x28\x82\x28\x82\x28\x82\x28\x82\x28\x82\x28\x82\x28\x82\x28\x82\x28\x82\x28\x82\x28\x82\x28\x82\x28\x2e\x85\x28\xd6\x14\xd4\x3c\x1d\x15\x9a\x42\x09\x81\x47\x81\x47\x81\x47\x81\x47\x8d\x1e\x51\xe0\xd1\xb2\x78\x80\x47\xd7\x84\x47\x93\x33\x02\xe9\xb9\x96\x6b\x44\xf2\x64\x42\x1d\xef\xd4\x13\x3d\xcd\x99\x42\x59\x7a\x10\x24\x52\x02\x79\x2e\x0c\x79\x9e\x39\x91\xb2\xf4\xb9\x00\x7e\x02\x7e\x02\x7e\x02\x7e\x02\x7e\x02\x7e\x02\x7e\x02\x7e\x8e\xb4\xda\x02\x7e\x02\x7e\x02\x7e\x02\x7e\x02\x7e\x02\x7e\x02\x7e\x6e\x0e\x7e\x82\x17\x82\x17\x82\x17\x82\x17\x1a\x3d\xa2\xe0\x85\x65\xf1\x80\x17\xae\x98\x17\x1a\x92\x54\x39\x3e\x33\x9c\x25\xb5\xb2\x09\xa1\x80\x36\x82\x36\x56\xae\x6a\x1c\x6d\x04\x69\x04\x69\x04\x69\x04\x69\x04\x69\x04\x69\x04\x69\x04\x69\x04\x69\x04\x69\x04\x69\x04\x69\x04\x69\x04\x69\x04\x69\x04\x69\x5c\x16\x69\x2c\xa6\x59\xb6\xb8\x1b\x90\x6c\x59\xff\xce\x80\xa7\x80\xa7\x80\xa7\x80\xa7\x80\xa7\x80\xa7\x9b\x84\xa7\xc8\xaa\xac\x30\xce\x6a\x2e\xe5\x07\x19\xde\x7a\x5e\x86\x3e\x51\x4e\x16\xb4\x73\x49\xb4\x13\xb9\x95\x20\x9e\x20\x9e\x20\x9e\x20\x9e\x20\x9e\x20\x9e\x20\x9e\x20\x9e\x20\x9e\x20\x9e\x20\x9e\x20\x9e\x20\x9e\x20\x9e\x20\x9e\xcb\x23\x9e\xa0\x64\xa0\x64\xa0\x64\xcb\x18\x51\x50\xb2\xb2\x78\x40\xc9\x96\x45\xc9\xee\x45\xcc\x5f\xdf\x0c\xa2\x62\x53\x33\xa0\x3e\xc4\xcd\x11\x71\x59\xd1\xd5\xc3\xdb\xc2\xc3\x1c\x11\x17\x69\x18\xbd\xff\xed\xdd\xc7\xdf\xeb\x4e\x9d\x8b\x7e\x2d\x16\x4a\x15\x04\x49\x55\x5a\xd7\x44\xa6\x68\xa6\x14\xce\xbd\x28\xde\xbf\xef\x87\x96\xb4\x40\xb5\x3c\x1e\x95\x47\xf2\x52\x1b\x13\xe3\xf2\x68\x7d\x4d\x66\x49\xcf\x13\x56\xba\x07\x24\xad\x0a\xde\xa9\x47\x68\xf9\x4e\xf4\xb9\x47\x9f\xca\xbb\xec\x5a\x4d\xd7\x69\x80\x5b\xac\x3a\xbe\x7a\x55\xbc\x97\xf6\x53\x75\x6a\xa6\xcb\x62\xdd\x6f\x93\x4c\xdb\xf7\xf4\xae\xbf\x91\xdc\xa2\x9e\x93\xb6\x7d\xb6\x82\x97\x80\x97\x80\x97\x80\x97\xac\x8d\x97\xb4\x68\xb3\x5d\xcc\xa4\xdd\x32\x6a\xd7\x6a\x4f\x5a\x7b\xff\xa3\x04\x97\x78\x8a\x5e\x51\x34\x96\xa5\x66\x94\x9e\x07\xa5\x77\x2b\xc6\x26\xdc\x0b\x16\x28\x69\x45\xb1\xb0\x77\xec\xd6\x67\xae\xaf\x57\x16\x19\xb2\x83\x9f\x2d\x4e\x36\xb3\xc3\xa7\xdf\x0f\x3e\xb3\xdd\x50\xed\x83\xdf\x44\x36\xe3\xd5\xf2\x49\x7e\xbd\xe4\x93\x4f\xe7\x46\x22\x60\xb6\x3f\x84\xf4\x95\x05\xa1\xb4\x44\x44\x0e\xb8\xc4\x24\x4b\x66\xd9\x8e\xfd\x49\x77\xa4\xd1\xa2\xb9\xf3\x96\x5d\xb3\x5b\xcf\x7b\x4b\xee\x35\x5b\xad\xd2\x07\x5f\x0d\xbc\x32\x6e\xd2\x29\x99\x5c\x4e\xd8\x03\x06\x4a\xbf\xcb\x3c\xc3\x74\x36\xc8\xd5\x4f\x14\xcd\xa0\xeb\x6c\x12\xf9\xa3\x68\xad\xbb\x3e\x8b\xb4\x11\xcd\xee\xc5\x5e\x47\xe3\x64\x0e\xd1\x5c\x95\x48\x56\x2f\x9a\x3a\x07\xa1\x37\x87\x7b\x65\xa7\xfa\xd7\xbe\x70\x38\x4d\xd0\xc4\xde\xde\xb1\x3f\xb2\x0d\x5b\xc3\x91\xec\xd3\x48\x14\x45\xf7\xf1\x51\xd8\x2e\x8f\x85\xf7\x94\x87\xc9\xe4\x5b\xae\xeb\xbd\x4a\xec\x69\x12\x3a\x73\x42\x6e\xd1\x57\xe3\x4a\x3b\x53\x08\xf2\x4d\x9b\x62\x90\xd2\x59\x7a\x88\xd4\x43\x16\x87\x8b\xab\x33\xd3\x17\x4a\x6e\xb2\xd7\x6b\x60\x7a\x89\x9d\x7e\xce\x47\xc1\xfd\xda\x67\x1c\x30\xcc\xf4\xcc\x77\xf4\xc8\x75\x3e\x8a\x0e\x2f\x85\x29\xd3\xff\x14\xbe\xd9\x4f\x2e\xcd\x8c\xf3\x6c\xd3\x1f\xb4\x13\xb4\x13\xb4\x13\xb4\x13\xb4\x73\x32\xda\xd9\x73\x2f\x38\x22\x9e\xe7\xdb\x16\xdf\x17\xb2\x21\x02\x4f\xf0\x48\x64\x4b\xd0\x5d\x28\x03\xee\x90\x76\xa4\xa3\xaf\x4b\xb1\xb5\xe9\xa4\xcb\xd3\x29\xd4\xb4\x7b\xbd\xfb\xe7\x8e\x7d\xd6\xeb\x99\x56\x5d\x02\xe1\xab\x8f\x25\xdf\x53\x05\x93\x61\xf0\xc0\xfd\x34\xd6\x37\x3c\x88\x9b\x3d\xf7\x52\x5b\xf9\xcb\xa5\xfe\xf9\xcb\x25\xdb\xbb\x3e\xf7\xdc\xff\xa6\x1b\xc9\xbd\x60\xdc\x26\x04\x26\x6f\x34\x1e\xb0\x73\x33\x4c\x5f\xfe\x2a\xca\x4f\xd2\xf6\xe9\x8e\xfd\xec\xd2\xe2\x58\x78\x74\x19\x1e\xbf\x5b\x0e\x3c\x63\x6d\x1e\x93\x8d\x22\xe3\x87\x21\x03\xaa\xdf\xe0\x7d\xfa\xee\x8d\x2a\x4f\x1d\x6c\x18\xd7\x30\xa3\x57\x57\x1f\xec\x83\xfc\xce\x1c\x1e\xde\x73\xa7\xe4\x9f\xcc\x8c\x1a\x11\xee\x65\xf8\xa8\xc6\xa4\x56\x5e\xbf\x55\xde\xa8\x59\x5c\xa4\xf4\xa6\x1a\x6b\xa0\x65\xeb\x2a\x6d\xd2\x72\xed\xdc\x14\x26\x5d\x81\x9c\x13\xd9\x18\xab\xcd\x3a\xd9\x49\x53\x6d\x60\x57\x18\xcc\x74\x1f\xc9\x88\x63\x16\xb7\x5e\xbe\xd9\x8e\xdd\x5a\x96\x08\x62\xda\x9b\x8a\x96\xdd\x95\x7e\x87\x2b\x76\x9d\x4c\xc0\xf2\x04\x8d\x7e\x64\x57\x3f\x71\xeb\xab\x13\xca\x83\x6f\xab\xa3\x28\x06\x9c\x0e\xaa\x08\x4e\xab\x90\x89\x7e\x5c\xbe\x48\xfa\x06\xf7\xd9\x95\x7e\x64\x57\x1f\x64\x28\x0a\x97\x65\x16\x8f\x2c\x6e\xab\xb7\x4f\xe4\xa3\x53\x04\xe8\x7a\x91\x36\x3d\x8f\x2e\xb8\xcf\xae\x31\x64\x42\x06\xd5\xe9\x3e\x8f\xc6\xb9\xe2\xd0\x84\x7e\xe3\xd0\x16\x9e\x30\xd7\x28\x20\x50\x61\xb2\xf1\x3d\x0e\x56\x38\x9f\x6f\x63\xce\xb0\x85\x7e\xc2\x6a\x09\x5d\x78\xae\xfe\x53\x0b\xeb\x40\x97\x4f\xc4\x74\x9f\x63\x1e\x1f\xfa\xf2\xb9\x65\x42\xe5\xc2\xb9\x0d\x39\x8f\x7a\x5b\xce\x55\xa6\x33\xa6\x3e\x36\x10\xdf\x6a\xe6\x63\xe5\x9d\x8e\xd3\x1f\x47\xcf\xbb\xd6\x0e\xb3\x30\x31\xb2\x53\xcd\x3e\xad\x48\xdd\x13\x78\xab\x8b\x1c\xe1\xee\xe7\x42\x6e\x64\x71\x6e\x27\x8b\xb3\xdf\x2e\xd3\x95\xc9\x79\x3e\x73\x0c\x31\x0a\x88\x51\x40\x8c\x02\x62\x14\x10\xa3\x50\xb7\xf8\x02\x7e\x2f\x48\x22\xe0\xa1\xe0\xa1\xe0\xa1\xe0\xa1\xe0\xa1\xe0\xa1\xeb\xe2\xa1\x40\x14\x40\x14\x40\x14\x40\x14\x93\x23\x8a\x13\x30\xbe\xa1\x79\x96\xfd\x44\x78\x9c\x6b\xf9\x5c\x8f\x9b\x51\x70\xa7\xf1\x84\x6d\x15\xce\xdc\x15\x90\x46\x42\x24\x76\x45\x5f\xfe\xea\xb3\x13\xbb\x41\xd2\x99\xeb\x66\x8e\x05\x8f\x06\xd4\xce\x5c\x4a\x3d\x8d\x8b\xca\xd8\x5d\x06\x32\x1a\x99\x94\x69\x53\x86\x71\xbf\x2f\x15\xd3\x27\x8c\xce\xc5\x86\x25\x7f\xb6\x34\x2e\x98\x74\xb5\x18\x25\x25\x14\x69\x49\xc5\xa1\x37\x36\x2d\x89\x5c\x16\x9f\xb8\xcf\x1d\x11\x6a\xe7\x9b\x6e\xd3\x11\x45\xd2\x72\xc9\x9a\xcc\xdc\x5c\x9c\xbc\x95\x32\x64\xc2\x8f\x95\x7a\x97\x9a\xd7\x8f\x5c\xcd\x24\x75\x48\x24\x52\x1d\xa9\x98\x7c\x93\x26\xe9\x90\x8e\x48\x2e\x2d\x19\xb2\xd7\x6f\xfe\xa5\x8e\x0d\xb9\x45\x0c\xcb\x93\xbe\xa3\x35\x22\x72\x3b\x59\xd2\x8f\xb9\xeb\xeb\x55\x8a\xdc\x3a\xf9\xb1\xe4\xd7\x4f\x08\x1b\xbb\x7f\xca\x94\x7e\x47\x7a\xdc\x77\x76\x32\x74\x6e\x82\xaf\xce\xcd\xc1\x77\x2d\x69\x8b\x9b\x7f\x7c\x8c\xee\xd4\x55\x06\xfb\x89\x13\xe1\x8c\x39\x3c\x46\xa9\x50\xcb\xd6\x6c\xfa\x6a\x35\x6f\x7a\x68\x35\xef\xb4\xe3\xcb\xc4\x87\x7f\xd3\xf9\xf0\x3a\xec\xd6\xc4\xa7\x5f\xa9\x42\x49\xda\xca\x62\x14\xca\x0b\x36\xb8\x6c\x47\x4d\xa7\xfd\x09\xab\x77\xf4\xd7\xd5\x1a\x4a\x76\xa0\x50\x47\xf1\xee\xd0\xca\x96\xa8\x95\x21\x35\x7a\x43\xa9\xd1\xc8\x01\x43\x0e\x18\x72\xc0\x90\x03\x06\x83\xb2\xe9\x2b\x32\x32\xe1\x62\x1e\xa3\x0c\xf9\x22\xc9\x71\xad\xf9\x22\xcb\xb1\xcb\x32\xe7\xf7\xe8\x59\x22\xa1\xe0\x76\x45\x0f\xeb\x69\x58\xa9\x33\xfb\x9b\x55\x58\x65\xe0\x3b\x39\xf5\x2b\x75\xc4\x82\x5c\x27\xcf\x61\x71\xc5\x6e\xde\xcd\x8f\xb1\xa4\x66\xde\xcb\xa5\x8b\xc4\xf1\x07\x95\x7a\xbe\xa6\x73\x7f\x68\x5f\xc6\x1e\x45\xe8\x88\x5e\x47\x46\x71\xc8\x63\xe1\xb8\xd6\x75\xff\x73\xd4\xdf\x4f\xc9\x91\xb4\x60\xf6\xd9\x02\x02\x1e\xc6\x2e\xa5\xd9\xe8\x98\x93\x61\xdb\x41\x50\x6d\xa9\xba\x42\x24\xda\xa2\x56\xdd\x95\xe3\x3f\x18\x9c\x6f\x2b\x77\xbe\x6d\x07\x89\x56\xa2\xd6\xd3\x8f\x4b\x67\x56\xa8\x05\x27\xcf\xd6\x7d\xd1\xb0\x18\xbd\x24\xd7\x83\x4e\xa7\xe4\x1e\x9d\xe9\x4b\xff\x5a\x9f\x4d\x47\x90\xf7\x2f\x62\x2f\x7e\x89\xa4\x7f\xa7\x93\x56\x3f\xa9\x65\x2f\xf9\xfb\x73\xba\x18\xe6\xff\xf9\xd2\x24\x56\xdb\x7f\xde\x7c\x90\xa1\x45\xee\x51\x47\xd2\xe0\x4b\xf6\xe5\x72\xaf\xfe\xef\xcb\x25\xbb\x2d\x49\x93\x62\x62\xb5\x2f\xf3\x10\xe5\x09\x7a\xd7\xdc\xa2\x01\xa0\xb4\x47\xcf\xb5\x12\xef\x8c\xf0\xec\x88\xc9\xef\xc9\xd8\xea\xb4\xc0\x40\xc8\xc0\x13\x3b\xa6\xef\x49\xd9\xce\xe9\x9c\xa2\xc8\xd4\xda\x81\xc8\x6e\x3f\x44\xbc\xea\x46\xeb\x8d\x23\x84\x35\xb1\x60\x6b\x22\xa8\xc4\x77\x2e\xc6\x9e\x38\x8c\x6e\xf2\x07\x1e\xb7\x06\xaa\x79\xc9\xc9\x2b\x57\xf4\x10\xfb\x06\x45\x6f\x7b\x8a\x9e\x41\xfa\x14\xb6\xfd\xec\x17\xc4\xbe\xf5\x78\xf8\xb5\xea\x2c\x87\x05\x79\x40\x2f\xd8\xe9\xc1\x63\xe5\x76\x4f\xf3\xd4\xc0\x6a\xd1\x76\xda\xca\x5f\x7d\x90\xe1\xad\xe7\xfd\x9b\x3f\x8a\x28\xe0\x86\xf4\x48\x6b\x3c\x01\x89\x4e\xc9\xa8\x21\xc7\x69\xa6\x1c\xa7\x33\x23\x15\x14\x95\x5b\x71\x51\xb9\x6e\x46\xd4\x55\x50\x6e\x78\x2b\xd1\x7e\xfc\x0b\x65\xe4\x50\x46\x0e\x65\xe4\x50\x46\x6e\x6d\x65\xe4\xba\x57\xde\xda\x12\x72\x13\x47\x1b\x9c\xad\x70\x5c\xf7\xeb\x37\x17\x8d\x33\x59\x06\xa7\x94\x8a\xeb\x96\x41\x73\x99\xb8\x89\x65\x80\xe2\x70\x28\x0e\x87\xe2\x70\x28\x0e\x87\xe2\x70\x93\x15\x87\xeb\xb1\xfa\x1f\x15\x86\x6b\x4d\x91\xda\x50\xb0\x61\xbf\xb7\x59\x71\x71\xbb\x6e\x71\xb7\x15\xb6\x3b\xaf\xdc\x51\xce\x6e\x92\x11\x3d\x2e\x65\x37\xf1\xb0\xce\x5a\xc0\xae\x5b\x3c\x2d\xc5\xeb\xa6\x5e\x36\x4d\x2d\x59\xd7\x2d\xb4\x1a\x82\x31\xd8\x9f\x97\xfc\xf5\xd7\x49\xf4\xca\xcf\xa8\x8f\x2e\x7b\x40\x7f\xff\x5d\x0f\xb5\x26\xac\x82\x50\xc8\x0f\x95\xfb\x1e\x38\xab\xa1\x16\xc2\xbb\xec\x32\x19\xcd\xb2\x6b\x2e\x86\xd2\x08\x70\xec\xc2\xb1\x0b\xc7\x2e\x1c\xbb\x2b\x74\xec\x2e\xa1\x3f\x08\x02\x26\x7b\x0f\xd4\x9c\x01\x93\x68\xe3\x82\x42\x3d\x1b\x2e\xd4\x83\x9e\x3d\xc0\x32\xc0\x32\xc0\x32\xc0\x32\xc0\x32\xe8\xd9\x83\xfa\x75\xa8\x5f\x87\xfa\x75\xa8\x5f\x57\x9d\x91\x67\x6d\x4d\xb5\x26\x86\x8a\x06\x61\xeb\x26\xaa\x68\x10\xb6\xa4\x06\x61\xb5\xb0\x0e\x79\xaa\xa8\x49\x39\xb4\x26\x65\xae\x32\x2d\x2b\x45\x6b\x19\xa9\x9b\xa3\xf0\x6d\x64\x9a\x6d\x27\xd3\xac\xdf\x06\xd3\x95\x6d\x76\x3e\x4b\x0c\xe1\x09\x08\x4f\x40\x78\x02\xc2\x13\x10\x9e\x50\xb7\xf8\x82\x7b\x2f\x48\x22\x40\xa1\x40\xa1\x40\xa1\x40\xa1\x40\xa1\x40\xa1\xeb\x42\xa1\xa0\x13\xa0\x13\xa0\x13\xa0\x13\x93\xd3\x89\x13\x08\xbe\xa1\xb9\x60\xfd\x44\x78\x9c\x0f\xb6\xaa\xb2\xe3\x8d\x27\xa0\xaa\x1f\xaa\xfa\x6d\xaa\xaa\x5f\xa2\x3d\xea\x02\xcc\xbe\xcd\xd4\x28\xb1\xc8\x92\x81\x78\xc5\xa2\x83\xf5\xa0\x96\x22\x5a\xea\x05\x7f\xd4\xeb\x54\x10\x4a\xd2\x56\xeb\x32\x4c\xdb\x5b\x29\x11\x27\x2a\xff\x8c\x7e\x4a\x5d\x6f\x93\xfc\x55\xe8\xa7\x24\xa3\x91\xc1\xa0\xb6\xdc\x0a\x1d\xc0\x5b\x20\xa0\x3e\x76\x1a\x0c\xb8\x98\x8a\xf5\x28\x56\xbf\x9d\xdc\x2b\x14\xab\x47\xb1\xfa\x9a\x87\x59\x82\x0e\xb7\xd4\x3a\xf5\x66\x77\x02\x1e\xe1\xc1\x57\xaa\x30\x93\x66\xb2\x04\x85\xf9\x82\x8d\x58\x99\x44\xff\xef\xdf\x67\x2a\x50\xd2\x4b\x49\x6b\xa8\x4a\x82\x5a\x24\xd0\xc9\x56\xa1\x93\x21\xfb\x7b\x43\xd9\xdf\x48\x73\x43\x9a\x1b\xd2\xdc\x90\xe6\x06\x73\xb2\xe9\x2b\x32\x32\xa7\x64\x1e\xe3\x0c\x29\x31\xc9\x71\xad\x29\x31\x8b\x30\xd2\x32\x87\xf7\xe8\x89\x30\xa1\xe0\x76\x45\x05\xeb\xb6\xa9\xd4\x49\x27\x5a\x54\x58\x60\xe0\x3e\xa9\x3b\xb7\xe1\xdb\x74\xc4\x32\xbc\x27\xcf\xc1\x8d\xe4\x3b\x4f\x4c\xd7\xda\x27\xe8\xc3\x11\x4d\x41\x88\x60\xa7\x8b\x63\xa7\x14\x94\xd1\x6b\x33\xa9\xae\xd2\xd7\x74\xee\x0f\xed\x0b\xf6\xa3\x08\x1d\xd1\xeb\xc8\x28\x0e\x79\x2c\x1c\xd7\xba\xee\x7f\x8e\xfa\xfb\x29\x39\x92\xb6\x86\x3e\x9b\x5d\xc0\xc3\xd8\xa5\x9c\x29\x1d\x40\x74\xf2\xc6\x47\xf7\x33\xc9\x97\x38\x15\xf0\x6d\xd1\x1d\xef\xca\xc1\x3c\x0c\x1e\xc6\x95\x7b\x18\xb7\x43\x7d\x2b\x29\x08\xe9\xc7\xa5\xd3\x64\xd4\x82\x93\xa7\x5e\xbf\x68\x58\x8c\x5e\x92\x7f\x45\xe7\xc6\x72\x8f\xce\xf4\xa5\x7f\xad\xcf\xa6\x23\xc8\xc5\x19\xb1\x17\xbf\x44\xd2\xbf\xd3\x19\xc8\x9f\xd4\xb2\x97\xfc\xfd\x39\x5d\x0c\xf3\xff\x7c\x69\x12\x8e\xee\x3f\x6f\x3e\xc8\xd0\x22\x1f\xb0\x23\x69\xf0\x25\xfb\x72\xb9\x57\xff\xf7\xe5\x92\xdd\x96\xa4\x49\x01\xce\xda\x61\x7b\x88\xf2\x6c\xcb\x6b\x6e\xd1\x00\x50\x0e\xab\xe7\x5a\x89\x0b\x4a\x78\x76\xc4\xe4\xf7\x64\x6c\x75\x8e\x67\x20\x64\xe0\x89\x1d\xd3\xf7\xa4\xd4\xf5\x74\x4e\x51\x98\x71\xed\x40\x64\xb7\x1f\x22\x5e\x75\xa3\xf5\x06\x85\xc2\x6e\x5a\xa6\xdd\x14\x54\xe2\x74\x97\x60\x39\x1d\x46\x77\x69\x04\x1e\xb7\x4e\x57\xee\x92\xf3\xb6\xa0\xde\x21\x9e\x0f\x9a\xdd\xa6\x34\x3b\x83\x14\x28\xec\xf3\xd9\x2f\x88\xe7\xdb\x9c\x7e\x72\x58\x86\x5f\xf7\x82\x8d\x1f\x15\x77\x13\x69\xea\x56\x08\x8e\x9b\x06\xe7\xe8\xfb\xa4\x3b\xdb\xf8\x60\x27\xa1\x87\x58\xbe\xb0\x0c\x00\xef\x34\x0e\x0b\xf0\x0e\xf0\x0e\xf0\xce\xac\x78\x67\xf8\x46\xd8\x13\xf4\xd4\xec\x84\x8b\xf4\x07\x00\xf7\xc0\x29\xb0\x3d\xa7\x00\x70\xcf\x98\xf3\x06\xb8\x07\x6e\x20\xd8\x51\xc0\x3d\x73\xe1\x9e\xe7\x78\x3d\x7a\x82\x9f\xb5\xa8\x7b\xc0\x3f\xd0\xf4\x36\xa5\xe9\x19\xa4\x50\x61\xdf\xcf\x7e\x01\xfe\xd9\x9c\xbe\xb2\x46\xfc\x43\xd5\xed\x52\xda\x63\x79\x3c\x2a\x7f\x3a\xe3\x43\x9e\xa4\x12\xb2\x6f\xbb\xdf\x5c\xfb\xc0\xbd\x62\x55\x45\x9e\xd5\x3e\x4f\xde\xfe\x9d\x7a\xa0\x5d\x21\xf1\xf7\x6d\x96\x32\x7c\x45\x17\xba\xca\x1b\x61\x94\x3a\x1b\x64\x4a\x12\x73\xfd\x28\x16\xbc\xe4\xde\xac\xaa\x50\xdf\x6b\xfd\x65\xc5\x47\xf8\xb5\x52\x41\x0e\xe5\x0e\x4d\xcd\x6d\xa4\x6a\x9d\x3f\x7f\x13\xfe\xd6\x8b\x1e\xd2\x38\xce\x53\xf9\x90\x3e\x99\x33\x03\x2b\xb4\x9a\x5a\x71\xab\xa9\x6e\x1a\xd5\xd5\x66\xaa\xd5\xdd\x35\x02\x69\x43\x73\x29\x34\x97\x42\x73\x29\x34\x97\x5a\x5b\x73\xa9\xee\x95\xb7\xb6\xb1\xd4\xc4\x71\x0d\x67\x6b\x27\xd5\xfd\xfa\xcd\xad\xa4\x4c\x96\xc1\x29\x0d\xa4\xba\x65\xd0\xdc\x3c\x6a\x62\x19\xa0\x65\x14\x5a\x46\xa1\x65\x14\x5a\x46\xa1\x65\xd4\x64\x2d\xa3\x7a\xac\xfe\x47\xed\xa2\x5a\x0b\x0a\x6e\x28\xac\xb1\xdf\xdb\xac\xb8\xe5\x55\xb7\xb8\xdb\xda\x5d\x9d\x57\xee\x68\x72\x35\xc9\x88\x1e\x37\xb8\x9a\x78\x58\x67\x6d\x6b\xd5\x2d\x9e\x96\x96\x56\x53\x2f\x9b\xa6\x36\xb2\xea\x16\x5a\x0d\xd1\x18\xec\xcf\x4b\xfe\xfa\xeb\xd9\x94\xac\xa6\x5c\xf8\x44\xb0\xac\x48\xc8\xfc\x74\xcf\x97\x7b\xf6\xd5\xf5\xed\xf1\x49\xd9\xab\x5c\xcd\x27\x53\x26\x51\x09\x95\xa5\x90\xdb\x2f\x57\x25\xbb\xb7\x70\xed\xe7\x71\x36\x30\x36\x30\xb6\xa5\x31\x36\xf0\x35\xf0\x35\xf0\x35\xf0\x35\xf0\x35\xf0\x35\xf0\x35\xf0\x35\xf0\x35\xf0\x35\xf0\x35\xf0\x35\xf0\x35\xf0\x35\xf0\x35\xf0\xb5\xe5\xf1\xb5\x9a\xe2\x2f\x35\x2e\x87\x25\x55\x80\x01\x31\x04\x31\x04\x31\x5c\xc6\x88\x82\x18\x96\xc5\x03\x62\xb8\x78\x62\x68\x52\x4a\xdd\xbc\xd9\x74\xbf\xba\x51\xfc\x41\x86\xb7\x9e\x97\xd5\x27\x00\xf4\x03\xf4\x5b\x1c\xf4\x9b\x27\xb1\x0e\xcc\x0f\xcc\x0f\xcc\x0f\xcc\x0f\xcc\x0f\xcc\x0f\xcc\x0f\xcc\x6f\xcc\xd5\x16\xcc\x0f\xcc\x0f\xcc\x0f\xcc\x0f\xcc\x0f\xcc\x0f\xcc\x6f\x73\xcc\x0f\x84\x0c\x84\x0c\x84\x6c\x19\x23\x0a\x42\x56\x16\x0f\x08\xd9\x72\x09\x59\x57\xfb\xb1\xcd\x83\xb3\xa3\x3a\xde\xa8\x45\x09\x64\x06\x64\x06\x64\x06\x64\x06\x64\x06\x64\x06\x64\x06\x64\x06\x64\x06\x64\x06\x64\x06\x64\x06\x64\x06\x64\x06\x64\x06\x64\x06\x64\x06\x64\x76\x06\xdf\x2f\xda\x8a\x83\x15\x82\x15\x82\x15\x1a\x3d\xa2\x60\x85\x65\xf1\x80\x15\xae\x97\x15\x9a\x55\x91\x73\x91\xc5\x38\x8f\x68\x23\x48\x23\x48\xe3\xd2\x48\x23\x28\x23\x28\x23\x28\x23\x28\x23\x28\x23\x28\x23\x28\x23\x28\x23\x28\x23\x28\x23\x28\x23\x28\x23\x28\x23\x28\x23\x28\x23\x28\xe3\xa2\x28\x63\x4d\x31\xce\xd3\xf1\xa1\x29\xe4\x10\xc8\x14\xc8\x14\xc8\x14\xc8\xd4\xe8\x11\x05\x32\x2d\x8b\x07\xc8\xd4\x60\x64\x2a\x6d\x91\xc2\xd2\x41\xdc\x73\x6a\x76\x57\x0b\x6f\x2a\xa3\xec\x88\x98\xb9\xfe\x5e\x86\x8f\xd9\xac\xe6\x4c\x93\x98\x66\x7e\xe9\x88\xf8\xdf\xd2\x16\xb7\x77\x1f\xff\xa7\x7a\xe4\x5c\x9c\x72\xb1\xf8\x30\x13\xe2\xd2\xe1\xa1\xb4\x45\xe1\xe8\x8b\xe2\x1d\x9b\xbf\x9b\x6f\xaf\x97\xfd\xe9\x94\x6c\x7b\xbd\x16\x76\x7f\x37\x7f\xbe\xbe\xbd\xfb\xf8\x7b\xdd\xf1\xf8\x7a\x4e\xff\x7a\x52\x41\x52\x6e\xf6\x0a\x3e\xa2\xff\xfb\xf6\x7a\xd0\x77\x14\x1e\x7c\xa5\x2d\x24\x1d\x72\x8b\x5f\x95\x76\x8f\x8c\x1b\x8b\xa3\xaf\xc9\x2c\xe9\x79\xc2\x4a\x77\x8e\xdf\xf5\x23\x1c\xb5\x93\xad\x7c\x06\xfa\x5c\xfd\x25\xbc\xcb\x2e\xd0\x74\x72\x03\xa3\x67\xd5\xe1\xd3\x6a\xc1\xbd\xb4\x9f\xaa\x33\x2f\xd5\x0b\xea\x7e\x9b\x64\x56\xbe\xa7\x17\xfc\x8d\x84\x15\xf5\x9c\x93\xed\x93\x11\xd8\x17\xd8\x17\xd8\x17\xd8\x77\x6d\xd8\xb7\xc5\x9c\xeb\x42\xbf\xed\xae\x81\x76\xb3\xee\xa4\xb5\xf7\x3f\x4a\x70\x89\xc3\xfb\x15\x55\xac\xb1\xd4\x8c\xd2\xf3\xa0\xf4\x6e\xc5\x10\xab\x7b\xc1\x02\x25\xad\x28\x16\xf6\x8e\xdd\xfa\xcc\xf5\xf5\xca\x22\x43\x76\xf0\xb3\xc5\xc9\x66\x76\xf8\xf4\xfb\xc1\x67\xb6\x1b\xaa\x7d\xf0\x9b\xc8\x66\xbc\x5a\x3e\x09\x4f\x24\x9f\x7c\x3a\x37\x12\x01\xb3\xfd\x21\xa4\xaf\x2c\x08\xa5\x25\x22\xe2\x08\x89\x4f\x22\x99\x65\x3b\xf6\x27\xdd\x91\x46\x8b\xe6\xce\x5b\x76\xcd\x6e\x3d\xef\x2d\x51\x02\x5b\xad\xd2\x07\x5f\x0d\xbc\xb2\xee\xd3\x29\x99\x5c\x4e\xd8\x03\x06\x4a\xbf\xcb\x3c\xc3\x74\x36\x56\xdf\x4f\x14\xcd\xbc\xfe\x6c\x12\xf9\xa3\xe8\xae\x72\x7d\x16\x69\x2f\x12\xbb\x17\x7b\x1d\x54\x98\x71\x9d\x5c\x95\x48\x56\x2f\x9a\x3a\x07\xa1\x37\x87\x7b\xc1\x7c\xe9\x5f\xfb\xc2\xe1\x34\x41\x13\x87\xd3\x8e\xfd\x91\x6d\xd8\x9a\xf1\x66\x9f\x46\xa2\x1d\xba\x8f\x8f\xc2\x76\x79\x2c\xbc\xa7\x3c\xda\x2f\xdf\x72\x5d\xef\x55\xe2\x50\x22\xa1\x33\x27\xe4\x16\x7d\x35\xae\xb4\x33\x85\x20\xdf\xb4\x29\x94\x32\x9d\xa5\x87\x48\x3d\x64\x71\xb8\xb8\x3a\x33\x7d\xa1\xe4\x26\x7b\xbd\x06\xa6\x97\xd8\xe9\xe7\x7c\x14\xdc\xaf\x7d\xc6\x01\xc3\x4c\xcf\x7c\x47\x8f\x5c\xe7\xa4\xeb\x70\xd3\x99\x32\xfd\x4f\x09\xd3\xe8\x27\x97\xe6\x50\x8d\xb3\x4d\x7f\x04\x6d\x20\x68\x03\x41\x1b\x08\xda\x40\xd0\xc6\x64\x41\x1b\x3d\xf7\x82\xa3\xc0\x8d\xf3\x6d\x8b\xef\x0b\x79\x60\x81\x27\x78\x24\xb2\x25\xe8\x2e\x94\x01\x77\x48\x3b\xba\x93\x9e\x6b\x3d\x95\x52\x04\xd2\x49\x97\x27\x92\xa9\x69\xf7\x7a\xf7\xcf\x1d\xfb\xac\xd7\x33\xad\xba\x04\xc2\x57\x1f\x4b\xbe\xa7\x0a\x26\xc3\xe0\x81\xfb\x69\xca\x42\x78\x10\x37\x7b\xee\xa5\xb6\xf2\x97\x4b\xfd\xf3\x97\x4b\xb6\x77\x7d\xee\xb9\xff\x4d\x37\x92\x7b\xc1\xb8\x4d\x0c\x58\xde\x68\x3e\x66\xe7\x66\x98\xbe\xfc\x55\x94\x9f\xa4\xed\xd3\x1d\xfb\xd9\xa5\xc5\xb1\xf0\xe8\x32\x3c\x7e\xb7\x9c\xf8\xc7\xda\x3c\x26\x1b\x45\xc6\x0f\x43\x06\x54\xbf\xc1\xfb\xf4\xdd\x1b\x55\x9e\x3a\xda\x36\xae\x61\x46\xaf\xae\x3e\xd8\x07\xf9\x9d\x39\x3c\xbc\xe7\x4e\xc9\x29\x99\x19\x35\x22\xdc\xcb\xf0\x51\x8d\x49\xad\xbc\x7e\xab\xbc\x51\xb3\xb8\x48\xe9\x4d\x35\xd6\x40\xcb\xd6\x55\xda\xa4\xe5\xda\xb9\x29\x4c\xba\x02\x39\x27\xb2\x31\x8e\x88\xb4\xd1\xaf\xa9\x36\xb0\x2b\x0c\x66\xba\x8f\x64\xc8\x3d\x4b\xbf\x29\xdf\x6c\xc7\x6e\x2d\x4b\x04\x31\xed\x4d\x45\xcb\xee\x4a\xbf\xc3\x15\xbb\x4e\x26\x60\x79\x82\x46\x3f\xb2\xab\x9f\xb8\xf5\xd5\x09\xe5\xc1\xb7\xd5\x51\x94\xca\x42\x07\x55\x04\xa7\x55\xc8\x44\x3f\x2e\x5f\x24\x7d\x83\xfb\xec\x4a\x3f\xb2\xab\x0f\x32\x14\x85\xcb\x32\x8b\x47\x16\xb7\xd5\xdb\x27\xf2\xd1\x99\x4e\x74\xbd\x48\x9b\x9e\x47\x17\xdc\x67\xd7\x18\x32\x21\x83\xea\x74\x9f\x47\xe3\x5c\x71\x6c\x4e\xbf\x71\x68\x8b\xcf\x99\x6b\x14\x10\xa9\x33\xd9\xf8\x1e\x47\xeb\x9c\xcf\xb7\x31\x67\xdc\x4e\x3f\x61\xb5\xc4\xee\x3c\x57\xff\xa9\x25\x74\x80\xc7\x27\x62\xba\xcf\x31\x8f\x0f\x7d\xf9\xdc\x82\x98\x71\xe1\x84\x86\x54\x6d\xbd\x17\xe7\x7a\xd2\x28\x59\xdb\x39\x8e\xae\xcf\xd7\x6e\x00\xbc\xd5\xa4\xed\xb6\x7c\xed\xd1\x4b\x4a\x68\xd7\x58\x98\x98\xd3\xa9\x0e\x9f\x56\x93\xe8\xc9\xb3\xd5\x45\x34\xcd\x7e\x2e\xc3\x46\xae\xf9\x76\x72\xcd\xfb\x6d\x22\x5d\xf9\xe6\xe7\xb3\xb6\x10\x82\x80\x10\x04\x84\x20\x20\x04\x01\x21\x08\x75\x8b\x2f\xd8\xf6\x82\x24\x02\xdc\x09\xdc\x09\xdc\x09\xdc\x09\xdc\x09\xdc\xb9\x2e\xdc\x09\x02\x01\x02\x01\x02\x01\x02\x31\x39\x81\x38\x81\xd2\x1b\x9a\x47\xdc\x4f\x84\xc7\xb9\xc4\xcf\xf5\xb8\x19\xc5\x6e\x1a\x4f\xd8\x56\x79\xdf\x1d\xc1\x8b\x6f\xaf\x77\x45\x07\xfe\x3a\x13\x0a\xbb\xe1\xd0\x68\xcd\x42\xcf\x00\x84\x06\x14\xf0\x5d\x4a\x39\x98\x8b\xca\x80\x5d\x06\x32\x1a\x99\x7e\x69\x4b\x85\xf1\xbe\xa0\x4b\x1f\x3f\x0e\xea\x1a\x96\xae\xd9\x52\x45\x68\xfc\x05\x60\x94\xcc\x4d\x64\x0f\x15\xc7\xdb\xd8\xec\x21\x72\x3d\x7c\xe2\x3e\x77\x44\xa8\x9d\x68\xba\x50\x56\x14\x49\xcb\x25\xab\x30\x73\x57\x71\xf2\x3a\xca\x90\x09\x3f\x56\x6a\x5a\x6a\x26\x3f\xf2\xaf\x4a\x8a\xf1\x83\x88\x44\xaa\xeb\x14\x73\x64\xd2\x5c\x1a\xd2\xf5\xc8\x35\x25\x43\xf6\xfa\xcd\xbf\xd4\xb1\x21\xb7\x88\x45\x79\xd2\x77\xb4\x66\x43\xee\x23\x65\xe7\x73\xd7\xd7\xcb\x11\xb9\x67\xf2\x63\xc9\x3f\x9f\x90\x32\x76\xff\x94\x29\xef\x8e\xf4\xb8\xef\xec\x64\xe8\xdc\x04\x5f\x9d\x9b\x83\xef\x5a\xd2\x16\x37\xff\xf8\x18\xdd\xa9\xab\x0c\xf6\xf7\x26\xc2\x19\x73\x78\x8c\x52\x85\x16\xa8\xa1\xf4\xd5\x4e\xde\xf4\xd0\x4e\xde\x69\xaf\x95\x31\x4f\xfc\xa6\xf3\x89\x75\x1c\xac\x31\x8f\xbc\x26\x15\x90\x54\x0d\xb3\x55\xc0\x0b\x76\x5a\x41\x8c\x9a\x06\x35\x13\xd6\xc5\xe8\xad\x52\x15\x6b\x61\xa0\x02\x46\xf1\xee\xd0\xa3\x96\xa8\x47\x21\xe7\x78\x43\x39\xc7\x48\xae\x42\x72\x15\x92\xab\x90\x5c\x05\x13\xb0\xe9\x2b\x32\x32\x93\x61\x1e\xe3\x0a\x89\x18\x8d\x89\x18\x86\x9b\x5a\x99\x07\x7a\xf4\xf4\x8b\x50\x70\xbb\xa2\x71\xf5\xb4\x9b\xd4\x99\x1d\x56\x13\x16\x11\xb8\x38\x9a\xbf\x3c\x47\x98\xee\xe1\x78\x0e\xe4\x2a\x76\xae\x68\x7e\x82\x25\xb5\xaf\x58\x2e\xb6\x23\xfe\x3d\xa8\xaa\xf1\x35\x9d\xfb\x43\xfb\x2a\xf5\x28\x42\x47\xf4\x3a\x32\x8a\x43\x1e\x0b\xc7\xb5\xae\xfb\x9f\xa3\xfe\x7e\x4a\x8e\xa4\xf5\xb0\xcf\xb2\x1e\xf0\x30\x76\x29\x3d\x45\xc7\x6a\x0c\x5b\xe2\xe9\xa6\x6b\x84\x8d\x2d\x9a\xd0\x5d\x39\x58\x82\xc1\x5f\xb6\x72\x7f\xd9\x76\xb8\x63\x25\xc4\x3b\xfd\xb8\x74\x1a\x82\x5a\x65\xf2\xd4\xd6\x17\x0d\x2b\xd0\x4b\xf2\x16\xe8\xdc\x43\xee\xd1\x99\xbe\xf4\xaf\xf5\xd9\x74\x04\x39\xec\x22\xf6\xe2\x97\x48\xfa\x77\x3a\xc3\xf3\x93\x5a\xeb\x92\xbf\x3f\xa7\x2b\x60\xfe\x9f\x2f\x4d\x02\xa2\xfd\xe7\xcd\x07\x19\x5a\xe4\xd1\x74\x24\x0d\xbe\x64\x5f\x2e\xf7\xea\xff\xbe\x5c\xb2\xdb\x92\x34\x29\x80\x54\xbb\x1f\x0f\x51\x9e\xcd\x76\xcd\x2d\x1a\x00\xca\x11\xf4\x5c\x2b\x71\xa8\x08\xcf\x8e\x98\xfc\x9e\x8c\xad\xce\xa1\x0b\x84\x0c\x3c\xb1\x63\xfa\x9e\x94\x1a\x9c\xce\x29\x0a\xe3\xac\x1d\x88\xec\xf6\x43\xc4\xab\x6e\xb4\xde\xa0\x3b\x58\x08\x8b\xb0\x10\x82\xd1\xfa\xd9\x9f\xc3\x46\x38\x8c\x6e\x9a\x07\x1e\xb7\x06\xaa\x6e\xc9\xc9\x6b\x54\xde\x10\x29\x06\x8d\x6d\x23\x1a\x9b\x41\x8a\x11\xf6\xef\xec\x17\x44\x8a\xad\x57\xe3\x38\x98\xee\x93\xbc\x60\x5d\x51\x57\x94\xee\xd1\xd2\x8c\x68\x74\x86\x90\xa4\x06\xfb\xb6\xfb\xcd\xb5\x0f\xdc\x2b\xa6\x19\xf1\xac\x18\x40\xf1\x95\x77\x85\xb8\x83\xb7\x59\xc4\xc2\x15\x5d\xe8\x2a\xaf\x0c\x53\x2a\xf5\x91\x29\x38\xcc\xf5\xa3\x58\xf0\x92\x8f\xb1\xaa\xfe\x7c\xaf\xf7\x5c\xfd\x5a\x49\xac\x40\xd2\x8f\xa9\x3c\x95\x72\xd6\x7e\xfe\x26\xfc\x4d\x26\x00\xd1\xe0\xad\x3c\x0b\x08\xa5\xd5\x56\x5c\x5a\xad\x9b\xf8\x74\x95\x55\x1b\xde\x30\xb6\x1f\xcd\x42\x31\x35\x14\x53\x43\x31\x35\x14\x53\x5b\x5b\x31\xb5\xee\x95\xb7\xb6\x90\xda\xc4\xb1\x03\x67\x2b\x9f\xd6\xfd\xfa\xcd\xa5\xd3\x4c\x96\xc1\x29\x05\xd3\xba\x65\xd0\x5c\x2c\x6d\x62\x19\xa0\x44\x1a\x4a\xa4\xa1\x44\x1a\x4a\xa4\xa1\x44\xda\x64\x25\xd2\x7a\xac\xfe\x47\xe5\xd1\x5a\xd3\x95\x36\x14\x3a\xd8\xef\x6d\x56\x5c\xe2\xad\x5b\xdc\x6d\xe5\xdd\xce\x2b\x77\x14\x75\x9b\x64\x44\x8f\x0b\xba\x4d\x3c\xac\xb3\x96\x71\xeb\x16\x4f\x4b\x09\xb7\xa9\x97\x4d\x53\x0b\xb7\x75\x0b\xad\x86\x5d\x0c\xf6\xe7\x25\x7f\xfd\x35\x8c\x7c\xd5\x54\x1d\x98\x08\x80\x15\xa9\x97\x9f\x6e\xf4\x75\x8d\x4c\x46\xa1\x5f\xaf\x72\xdd\x9e\xec\x97\x44\x0f\x54\xe6\x41\x6e\xb4\x5c\x95\x8c\xdd\xc2\xb5\x07\xb0\x33\x70\x33\x70\xb3\x45\x70\x33\x30\x33\x30\x33\x30\x33\x30\x33\x30\x33\x30\x33\x30\x33\x30\x33\x30\x33\x30\x33\x30\x33\x30\x33\x30\x33\x30\x33\x30\x33\x30\xb3\x85\x30\x33\x14\x10\x39\x65\x7c\x40\x01\x41\x01\x41\x01\x41\x01\x41\x01\xb7\x4e\x01\xef\x45\xcc\x5f\xdf\x0c\xe2\x7d\xb3\xa4\xad\x56\x46\xdb\x11\x71\x59\x69\xd7\x03\xdb\xc2\xeb\x1c\x11\x6b\x5a\x47\x6f\x7e\x7b\xf7\xf1\xf7\xba\x93\x90\xaa\x7b\x22\x49\x2b\x08\x72\x45\x7d\xa8\x68\x8e\x14\xce\xba\x28\xde\xb9\xfb\xb3\x6a\xce\x2a\x9d\xb0\x94\x7f\xa1\xe0\x71\x25\x8f\xb4\xe5\xab\x28\x96\xf5\xa7\x67\x7f\x97\x5d\x05\x55\xfe\x8b\x77\x07\xe3\x01\xe3\x01\xe3\x01\xe3\x59\x39\xe3\xe9\x57\x3d\xa5\x96\xf3\x9c\xad\xb0\x0d\xea\x0f\xf5\x1e\xa8\x39\xeb\x0f\x9d\x0d\xcc\x9d\x50\xf1\xa7\x16\x4c\xa1\xe7\x0c\x7a\xce\x18\x36\xfd\x4f\x61\xb2\x3d\x9b\xfd\x37\x72\xd9\xb3\x4d\x7f\x10\x5a\x10\x5a\x10\x5a\x10\x5a\x10\xda\xc9\x08\x6d\xcf\xbd\xe0\x88\xd2\xa2\x15\x1b\x5a\xb1\xa1\x15\x1b\x5a\xb1\x2d\xa2\x15\x5b\xff\x09\xb9\xe2\xe0\x83\x7e\xe3\xd0\x16\x80\x30\xd7\x28\x20\x14\x61\xb2\xf1\x3d\x0e\x47\x38\x9f\x6f\x63\xce\xc0\x84\x7e\xc2\x6a\x09\x4e\x78\xae\xfe\x53\x8b\xe9\xc0\x92\xb7\xdc\x5e\xb1\x8a\x90\x0b\x67\xb5\xf6\x58\xcc\x95\x25\x93\x32\x34\x2b\x6f\x73\x86\x96\x8b\xda\x49\x16\x26\x86\x75\xaa\xcd\xd7\x25\x8a\xb7\xe0\x6d\x75\x91\x02\xdc\x7e\x2e\xd2\x46\x9e\xe9\x76\xf2\x4c\xfb\xed\x29\x5d\xb9\xa6\xe7\x33\xbe\x10\x91\x80\x88\x04\x44\x24\x20\x22\x01\x11\x09\x75\x8b\x2f\x50\xf7\x82\x24\x02\xfa\x09\xfa\x09\xfa\x09\xfa\x09\xfa\x09\xfa\xb9\x2e\xfa\x09\x20\x01\x20\x01\x20\x01\x20\x31\x39\x90\x38\x01\xda\x1b\x9a\x37\xd9\x4f\x84\xc7\xb9\x93\xab\xea\xc0\xdd\x78\xc2\xb6\x2a\x79\xa6\x8d\x37\xc9\x89\xbf\x3b\x6a\x55\xb8\x55\x60\x64\x5a\xeb\xbb\x4e\x48\x34\xa0\x96\xe7\x52\xaa\x61\x5c\x54\x46\xed\x32\x90\xd1\xc8\x44\x4c\x1b\x2e\x8c\xf7\x85\x5f\xfa\xf8\x11\xf1\x97\x99\x0d\xce\x8f\x17\x05\x74\x39\xdf\x4e\x96\x11\xba\x9c\xa3\xcb\x79\xcd\xc3\x2c\x40\x75\x59\x44\xab\xf3\xe7\x3c\xf6\x9b\xce\xc7\xd6\x91\xb3\x66\x3d\xf7\xea\xb4\x44\x52\x44\x16\xa0\x25\x5e\xb0\x01\xb5\x35\x6a\xfa\x56\x4c\x58\x62\xa3\xb7\xea\x75\x54\x56\x03\xc5\x34\x8a\x77\x87\xaa\xb5\x44\x55\x0b\xe9\xcb\x1b\x4a\x5f\x46\x9e\x16\xf2\xb4\x90\xa7\x85\x3c\x2d\x58\x89\x4d\x5f\x91\x91\x49\x11\xf3\x58\x5d\xc8\xe9\x68\xcf\xe9\x58\x82\xf9\x95\x39\xae\x47\xcf\xe4\x08\x05\xb7\x2b\xba\x57\x4f\x33\x4a\x9d\xd9\xc7\x88\xc2\x9a\x02\x57\x48\x9f\xaf\xd1\x11\x8b\xf0\x84\x3c\x87\x97\xa1\x1e\xfe\xd1\x6b\xce\x46\x00\x89\xac\x0f\x2a\xa9\x7c\x4d\xe7\xfe\xd0\xbe\x68\x3d\x8a\xd0\x11\xbd\x8e\x8c\xe2\x90\xc7\xc2\x71\xad\xeb\xfe\xe7\xa8\xbf\x9f\x92\x23\x69\x79\xec\xb3\xd4\x07\x3c\x8c\x5d\x4a\x7c\xd1\x51\x20\xc3\x96\xfd\x20\x6f\xad\xba\x42\x6e\xd9\xa2\x2c\xdd\x95\x63\x31\x18\x5c\x6a\x2b\x77\xa9\x6d\x87\x5e\x56\x22\xc8\xd3\x8f\x4b\x67\x39\xa8\xa5\x26\xcf\x9c\x7d\xd1\xb0\x0c\xbd\x24\x87\x82\x4e\x6d\xe4\x1e\x9d\xe9\x4b\xff\x5a\x9f\x4d\x47\x90\x4f\x2f\x62\x2f\x7e\x89\xa4\x7f\xa7\x13\x48\x3f\xa9\x05\x2f\xf9\xfb\x73\xba\x0c\xe6\xff\xf9\xd2\x24\xac\xda\x7f\xde\x7c\x90\xa1\x45\x4e\x4f\x47\xd2\xe0\x4b\xf6\xe5\x72\xaf\xfe\xef\xcb\x25\xbb\x2d\x49\x93\xe2\x53\xb5\x87\xf2\x10\xe5\xc9\x72\xd7\xdc\xa2\x01\xa0\x14\x44\xcf\xb5\x12\x9f\x8b\xf0\xec\x88\xc9\xef\xc9\xd8\xea\x14\xbd\x40\xc8\xc0\x13\x3b\xa6\xef\x49\x99\xc7\xe9\x9c\xa2\x28\xd1\xda\x81\xc8\x6e\x3f\x44\xbc\xea\x46\xeb\x8d\xe9\x83\xd5\xb0\x30\xab\x21\x30\xad\x5d\x76\xb7\xdd\x70\x18\xdd\x84\x0f\x3c\x6e\x0d\x54\xe7\x92\x93\x57\xab\xd0\x21\x10\x0d\xaa\xdc\x96\x54\x39\x83\x34\x26\x6c\xec\xd9\x2f\x08\x44\x6b\x78\xec\xf5\xe9\x23\x87\x45\x78\x31\x2f\x58\xaf\x78\x2e\xca\x3f\x69\xe9\x98\x34\x3a\x8e\x48\x72\x95\x7d\xdb\xfd\xe6\xda\x07\xee\x15\xf3\x9e\x78\x56\x9d\xa0\xf8\xf2\xbb\x42\x30\xc3\xdb\x2c\x0c\xe2\x8a\x2e\x74\x95\x97\xaa\x29\xd5\x1e\xc9\x74\x20\xe6\xfa\x51\x2c\x78\xc9\x35\x59\xd5\x90\xbe\xb7\x38\xbc\x7e\xad\x24\x79\x20\x15\xc9\x54\x52\x4b\x99\x74\x3f\x7f\x13\xfe\x76\x33\x92\x68\x04\xb7\x90\x96\x84\xd2\x6f\x2b\x2e\xfd\xd6\xcd\x8d\xba\xca\xbe\x0d\x6f\xe0\xd9\x8f\x89\xa1\xd8\x1b\x8a\xbd\xa1\xd8\x1b\x8a\xbd\xad\xad\xd8\x5b\xf7\xca\x5b\x5b\xe8\x6d\xe2\x08\x84\xb3\x95\x77\xeb\x7e\xfd\xe6\xd2\x6e\x26\xcb\xe0\x94\x82\x6e\xdd\x32\x68\x2e\xe6\x36\xb1\x0c\x50\xc2\x0d\x25\xdc\x50\xc2\x0d\x25\xdc\x50\xc2\x6d\xb2\x12\x6e\x3d\x56\xff\xa3\xf2\x6d\xad\x29\x51\x1b\x0a\x40\xec\xf7\x36\x2b\x2e\x41\xd7\x2d\xee\xb6\xf2\x73\xe7\x95\x3b\x8a\xce\x4d\x32\xa2\xc7\x05\xe7\x26\x1e\xd6\x59\xcb\xcc\x75\x8b\xa7\xa5\xc4\xdc\xd4\xcb\xa6\xa9\x85\xe5\xba\x85\x56\x43\x31\x06\xfb\xf3\x92\xbf\xfe\x7a\x06\x0d\xab\xa9\x71\x30\x11\x14\x2b\x92\x30\x3f\xdd\xed\xeb\x5a\xae\x8c\x42\xc4\x5e\xe5\x0a\x3e\x19\x31\x89\x32\xa8\x6c\x84\xdc\x72\xb9\x2a\x59\xbc\x85\x6b\x0f\xe5\x69\x60\x69\x60\x69\xcb\x61\x69\xe0\x68\xe0\x68\xe0\x68\xe0\x68\xe0\x68\xe0\x68\xe0\x68\xe0\x68\xe0\x68\xe0\x68\xe0\x68\xe0\x68\xe0\x68\xe0\x68\xe0\x68\xe0\x68\x4b\xe2\x68\x28\x4d\x72\xca\xf8\x80\x0c\x82\x0c\x82\x0c\x82\x0c\x82\x0c\x6e\x8f\x0c\xea\xf2\x9f\x37\x83\x88\xdf\x2c\x59\xae\x95\x01\x76\xa8\x64\xeb\x5e\x86\x8f\xd9\x84\xe6\x4c\xf3\x88\x66\x68\xe7\x88\x58\xd7\x20\xbd\xbd\xfb\xf8\x3f\xd5\x63\x91\xd3\x7b\x22\x40\xcb\x84\xb8\x70\x7c\xa6\x3f\x85\xc2\xf1\x17\xc5\x7b\xd6\x7e\x36\xdf\x5e\x2f\xfb\xcb\x29\x59\xb8\x7a\x15\xec\xf3\xd9\xfc\xf9\xfa\xf6\xee\xe3\xef\x75\x67\xe0\xe3\x39\xfd\xe3\x49\x05\xb9\x86\x06\x73\xfa\xbb\xf8\xbf\x6f\xaf\x4f\xfd\x8c\xd4\xb6\x17\x05\xdc\x4a\x63\x50\xe8\xef\xbf\x6f\x02\x69\xdb\x6e\x14\x1e\xe8\xa5\xee\x0f\xb6\x23\xe2\xe8\x4c\x1d\x38\x0a\x25\xca\xe5\x9e\xdd\x49\xfb\x7d\xf6\x20\x3f\xd1\x83\xb4\x7c\x29\xfa\x12\xe9\xc7\xf2\x2e\xbb\xd2\xbf\xd3\x37\xb3\x3b\xae\x87\x66\x1d\x40\xa6\x40\xa6\x40\xa6\x40\xa6\x2b\x44\xa6\xfd\x0a\x19\xd5\x62\xd3\xb3\xd5\x98\x42\x29\xb0\xde\x03\x35\x67\x29\xb0\xb3\x71\xee\x13\x8a\x6f\xd5\x72\x5e\xb4\x8e\x42\xeb\x28\xc3\xa6\xff\x29\x21\x0e\xfd\xe4\xd2\x1c\xe6\x70\xb6\xe9\x8f\x80\x07\x04\x3c\x20\xe0\x01\x01\x0f\x08\x78\x98\x2c\xe0\xa1\xe7\x5e\x70\x14\xf4\x80\x8e\x8a\xe8\xa8\x88\x8e\x8a\xe8\xa8\xb8\x88\x8e\x8a\xfd\x27\xe4\x8a\x63\x79\xfa\x8d\x43\x5b\x3c\xcf\x5c\xa3\x80\xc8\x9e\xc9\xc6\xf7\x38\xba\xe7\x7c\xbe\x8d\x39\xe3\x7c\xfa\x09\xab\x25\xd6\xe7\xb9\xfa\x4f\x2d\xbb\x03\x70\xde\x64\x97\xd4\x3a\xce\x5c\x38\xa5\xb5\x45\x6a\xae\x29\x8d\x91\xf2\x1c\x1c\x6f\xbd\x59\xb6\x73\x3b\xe4\xad\x26\x3d\x9f\xb5\x53\xaa\x76\x8f\x85\x89\x49\x9d\xea\xf1\x69\x01\x86\xd3\x68\xb7\xba\x56\xca\xba\x47\x27\xdc\xc8\xe2\xde\x4e\x16\x77\xbf\x2d\xa6\x2b\x93\xfb\x7c\xb6\x18\x02\x14\x10\xa0\x80\x00\x05\x04\x28\x20\x40\xa1\x6e\xf1\x05\xf9\x5e\x90\x44\x00\x43\x01\x43\x01\x43\x01\x43\x01\x43\x01\x43\xd7\x05\x43\xc1\x27\xc0\x27\xc0\x27\xc0\x27\x26\xe7\x13\x27\x30\x7c\x43\xb3\x92\xfb\x89\xf0\x38\x33\x79\x55\x4d\xf3\x1b\x4f\xd8\x56\xc5\xdc\x5d\x12\x79\xf1\xed\xf5\xae\xc6\x93\xbf\xd6\x5c\xc5\x6e\x86\x34\x56\xcb\xc9\xf3\x70\xa3\x01\x75\x72\x13\x9d\x51\xb7\x14\xf7\x6d\xa6\x06\x86\x45\x96\x0c\xc4\x2b\x16\x1d\xac\x07\xb5\x00\xd1\x02\x2f\xf8\xa3\x5e\x9d\x82\x50\x92\x8e\x5a\x57\xe1\xa0\xbd\xba\x0e\x91\xa2\xf2\xcf\x28\xb1\xd3\xf5\x36\xc9\x5f\x7f\xe5\x83\x2c\xa3\x91\xe9\xa0\xb6\xd7\x18\x3f\x11\x04\xea\xd3\x26\x43\x81\xc3\x92\x5d\x5b\x26\xd4\x84\x0b\xe4\x28\x09\xb0\x48\xc2\x2a\x0e\xbc\xb1\x49\x58\xe4\xa3\xf9\xc4\x7d\xee\x88\x50\x7b\x1b\xf5\xe2\x19\x45\xd2\x72\xc9\x7c\xce\xfc\x7a\x9c\xdc\xb3\x32\x64\xc2\x8f\x95\x3e\x9b\xfa\x13\x1e\xf9\x57\x25\xc5\xf8\x41\x44\x22\x55\x0a\x8b\xa9\x46\x69\x4a\x12\x29\xc5\xe4\xc3\x93\x21\x7b\xfd\xe6\x5f\xea\xd8\x90\x5b\x04\xed\x3c\xe9\x3b\x5a\x05\x24\x3f\x9b\x25\xfd\x98\xbb\xbe\x5e\xb1\xc8\x8f\x95\x1f\x4b\x20\x23\x41\x8a\xec\xfe\x29\xb3\x72\x1c\xe9\x71\xdf\xd9\xc9\xd0\xb9\x09\xbe\x3a\x37\x07\xdf\xb5\xa4\x2d\x6e\xfe\xf1\x31\xba\x53\x57\x19\xec\x18\x4f\x84\x33\xe6\xf0\x18\xa5\x33\x2e\x59\x95\xeb\xab\xc6\xbd\xe9\xa1\xc6\xbd\xd3\x7e\x3e\xf3\x1e\xfd\x4d\xe7\xa3\xeb\x00\x63\xf3\x9e\x7d\x5d\xda\x33\xa9\x2a\xa6\x6b\xcf\x17\x6c\x9c\x42\x25\x35\xdd\x74\x26\xac\x57\x72\xaa\xb2\x56\xae\x51\x62\x88\xb2\xb6\x90\xca\x24\x50\xcc\x8a\x83\x6c\xac\x62\x86\x5c\xf0\x0d\xe5\x82\x23\xe9\x0d\x49\x6f\x48\x7a\x43\xd2\x1b\x6c\xca\xa6\xaf\xc8\xc8\x0c\x93\x79\x6c\x33\x24\xc8\xb4\x24\xc8\x18\x6f\xa0\x65\x9e\xef\xd1\xd3\x62\x42\xc1\xed\x8a\xd6\x75\x9a\x55\xa5\x2e\x70\xba\x4d\x85\x25\x06\xfe\x93\x5e\x1f\x68\x65\xe2\x98\xfd\x75\x0e\x80\x8f\xc5\xc6\x1d\x9d\x0f\xb2\xa4\xfe\x1d\xa0\xaa\x8b\xa3\xaa\x14\xa4\x31\xa8\x9c\xf7\x35\x9d\xfb\x43\xfb\x92\xfd\x28\x42\x47\xf4\x3a\x32\x8a\x43\x1e\x0b\xc7\xb5\xae\xfb\x9f\xa3\xfe\x7e\x4a\x8e\xa4\xcd\xa1\xcf\xee\x17\xf0\x30\x76\x29\x87\x4a\x07\x14\x3d\x6b\x27\xa4\x7b\x1b\xe6\x5e\x9c\x8a\x05\xb7\xa8\x93\x77\xe5\x58\x1f\x06\xa7\xe3\xca\x9d\x8e\xdb\xa1\xc1\x95\x0c\x85\xf4\xe3\xd2\x59\x34\x6a\xfd\xc9\x33\xb3\x5f\x34\xac\x4d\x2f\xc9\xe5\xa2\x53\x67\xb9\x47\x67\xfa\xd2\xbf\xd6\x67\xd3\x11\xe4\xf5\x8c\xd8\x8b\x5f\x22\xe9\xdf\xe9\x04\xe5\x4f\x6a\x15\x4c\xfe\xfe\x9c\xae\x8d\xf9\x7f\xbe\x34\x09\x53\xf7\x9f\x37\x1f\x64\x68\x91\x5b\xd8\x91\x34\xf8\x92\x7d\xb9\xdc\xab\xff\xfb\x72\xc9\x6e\x4b\xd2\xa4\xf8\x67\xed\xc3\x3d\x44\x79\x32\xe6\x35\xb7\x68\x00\x28\xc5\xd5\x73\xad\xc4\x2b\x25\x3c\x3b\x62\xf2\x7b\x32\xb6\x3a\x05\x34\x10\x32\xf0\xc4\x8e\xe9\x7b\x52\x66\x7b\x3a\xa7\x28\x0a\xb9\x76\x20\xb2\xdb\x0f\x11\xaf\xba\xd1\x7a\x63\x46\x61\x48\x2d\xcd\x90\x0a\x2a\x01\xbc\xa6\x9b\x52\x87\xd1\x1d\x1d\x81\xc7\xad\xe7\x69\x78\xc9\x35\x36\xa2\xe3\x21\xde\x0f\x1a\xde\xd6\x34\x3c\x83\x14\x29\xec\xf7\xd9\x2f\x88\xf7\xeb\x78\xf4\x95\xa9\x2a\x07\xf3\x7d\xbe\x17\x6c\xd4\x90\xb9\x9b\x48\x43\xb8\x21\xbd\xf5\x4e\x42\x3d\xfa\x3e\xe9\x6e\x36\x39\xf4\x49\xd8\x22\x56\x30\x2c\x03\x40\x3f\x40\x3f\x40\x3f\x40\x3f\xa6\xa2\x9f\x71\x76\xc6\xfe\x10\xa8\x66\x6b\x5c\xa4\x9b\x00\x28\x08\x8e\x82\xed\x39\x0a\x80\x82\xc6\x9c\x37\x40\x41\x70\x0d\xc1\xb0\x02\x0a\x3a\x2f\x0a\x1a\xcb\x17\xd2\x1f\x0a\xad\x45\xe7\x03\x1a\x82\xc6\xb7\x35\x8d\xcf\x20\xc5\x0a\xfb\x7f\xf6\x0b\xd0\x50\xc7\xa3\xaf\x4c\x75\x59\x3a\x1a\xaa\x63\x40\x93\x52\x9f\xa9\xfa\xde\xd4\x9c\xf9\x41\x86\xb7\x9e\x97\x29\x40\x46\x60\x9f\xc6\x13\x50\xdc\x30\x46\x71\xc3\xf5\x17\x37\x44\xfb\xa8\x15\xb7\x8f\xea\xa6\x46\x5d\xad\xa3\x5a\xfd\x50\x23\x10\x31\x34\x8c\x42\xc3\x28\x34\x8c\x42\xc3\xa8\xb5\x35\x8c\xea\x5e\x79\x6b\x9b\x45\x4d\x1c\x7f\x70\xb6\x16\x51\xdd\xaf\xdf\xdc\x1e\xca\x64\x19\x9c\xd2\x14\xaa\x5b\x06\xcd\x0d\xa1\x26\x96\x01\xda\x40\xa1\x0d\x14\xda\x40\xa1\x0d\x14\xda\x40\x4d\xd6\x06\xaa\xc7\xea\x7f\xd4\x02\xaa\xb5\x30\xe0\x86\xc2\x0f\xfb\xbd\xcd\x8a\xdb\x58\x75\x8b\xbb\xad\x85\xd5\x79\xe5\x8e\xc6\x55\x93\x8c\xe8\x71\xd3\xaa\x89\x87\x75\xd6\x56\x55\xdd\xe2\x69\x69\x53\x35\xf5\xb2\x69\x6a\x73\xaa\x6e\xa1\xd5\x70\x8b\xc1\xfe\xbc\xe4\xaf\xbf\x5a\xe9\x15\xdd\xf0\x94\xf4\xa6\x49\xd1\x56\xa2\x09\xfa\xb6\xfb\xcd\xb5\x0f\xdc\x2b\x8e\x1f\xcf\xac\xbd\x1a\xf7\xfb\xae\x50\xfa\xf6\x6d\xa6\x98\x5f\xd1\xf5\xae\x72\x2f\x5f\xc9\x6d\x93\xa1\x30\xe6\xfa\x51\x2c\x78\x69\x07\xad\x82\xb2\xef\xbd\xa3\xc0\x7f\xad\x00\x08\x70\x32\x53\xab\x7c\xd2\x32\xf1\xb3\xb2\x04\xb7\x89\xca\x68\xf8\xc0\xcb\xc0\xcb\xc0\xcb\xc0\xcb\xc0\xcb\xc0\xcb\xc0\xcb\xc0\xcb\xc0\xcb\xc0\xcb\xc0\xcb\xc0\xcb\xc0\xcb\xc0\xcb\xc0\xcb\xc0\xcb\x16\xc5\xcb\x50\xa7\x04\xa0\x10\xa0\x10\xa0\xd0\xe8\x11\x05\x28\x2c\x8b\x07\xa0\x70\x95\xa0\xb0\xa6\x75\xf0\x44\xbc\xb0\x08\x09\xfd\x54\xf3\x69\xc9\x87\x1b\x05\x16\xbe\xca\x6d\x1e\xb2\xeb\x12\xfd\x58\x99\x4d\xb9\x31\x77\x55\x72\x02\x14\xae\x3d\x0e\x6a\x04\x66\x04\x66\x5c\x08\x66\x04\x62\x04\x62\x04\x62\x04\x62\x04\x62\x04\x62\x04\x62\x04\x62\x04\x62\x04\x62\x04\x62\x04\x62\x04\x62\x04\x62\x04\x62\x04\x62\x5c\x0c\x62\x44\x8f\x07\xb0\xd3\xca\xbb\x82\x9d\x1a\x4a\xda\xc0\x4e\xc1\x4e\xc1\x4e\xc1\x4e\x2b\x42\x9b\x89\x9d\x22\x9b\xb2\x1e\x71\x36\xe4\x50\xa2\xf6\x68\x75\x78\x01\x3b\x17\x02\x3b\x91\x53\x09\xe0\x09\xe0\x09\xe0\x09\xe0\x09\xe0\x09\xe0\x09\xe0\x09\xe0\x09\xe0\x09\xe0\x09\xe0\x09\xe0\x09\xe0\x09\xe0\x09\xe0\xb9\x28\xe0\x09\x3c\x06\x3c\x06\x3c\xb6\x8c\x11\x05\x1e\x2b\x8b\x07\x78\x6c\x01\x78\xec\x5e\xc4\xfc\xf5\xcd\x20\x12\x36\x4b\x27\xcc\xca\x40\x3b\x22\x2e\x6b\xb7\x7a\x4c\x5b\xe8\x97\x23\xb2\x9e\x7b\xf4\xee\xb7\x77\x1f\x7f\xaf\x3b\x0d\xfd\x3f\x4f\x84\x4f\x05\x41\xae\xaa\x01\x1e\xcd\x92\xc2\x79\x17\xc5\x7b\xb7\x7e\x55\x03\x0b\xfb\x6a\x5b\x62\x5c\x1a\xad\xaf\xc9\x2c\xe9\x79\xc2\x4a\xb7\x80\xd3\xba\x55\xea\x4b\x94\xbe\x9d\x77\xd9\xe5\xfa\x67\xca\x4e\xda\xa0\x7b\x92\x89\xfd\x9e\x5e\xfc\x37\x7a\xa1\x68\x94\x66\xdc\x40\x28\x40\x28\x40\x28\x40\x28\x6b\x43\x28\xfd\xda\xb8\xd7\x62\x94\xb3\x75\xd8\xff\x8f\x12\x5c\xe2\x3c\x7a\x45\xf1\x59\x96\x9a\x51\x7a\x1e\x94\xde\xad\x18\xae\x70\x2f\x58\xa0\xa4\x15\xc5\xc2\xde\xb1\x5b\x9f\xb9\xbe\x5e\x59\x64\xc8\x0e\x7e\xb6\x38\xd9\xcc\x0e\x9f\x7e\x3f\xf8\xcc\x76\x43\xb5\x31\x7e\x13\xd9\x8c\x57\xcb\x27\xb9\xfa\x92\x4f\x3e\x9d\x1b\x89\x80\xd9\xfe\x10\xd2\x57\x16\x84\xd2\x12\x11\xf9\xe4\x12\x2b\x2d\x99\x65\x3b\xf6\x27\xdd\x91\x46\x8b\xe6\xce\x5b\x76\xcd\x6e\x3d\xef\x2d\x79\xdc\x6c\xb5\x4a\x1f\x7c\x35\xf0\xca\xde\x49\xa7\x64\x72\xb9\xe3\x46\xea\x3d\x06\x4a\xbf\xcb\x3c\xc3\x74\x36\xee\xd5\x4f\x14\xcd\xec\xeb\x6c\x12\xf9\xa3\x68\xc0\xbb\x3e\x8b\xb4\x5d\xcd\xee\xc5\x5e\x07\xe8\x64\x3e\xd2\x5c\x95\x48\x56\x2f\x9a\x3a\x07\xa1\x37\x87\x7b\x65\xba\xfa\xd7\xbe\x70\x38\x4d\xd0\xc4\x04\xdf\xb1\x3f\xb2\x0d\x5b\xf3\x92\xec\xd3\x48\x94\x47\xf7\xf1\x51\xd8\x2e\x8f\x85\xf7\x94\x47\xce\xe4\x5b\xae\xeb\xbd\x4a\x4c\x6c\x12\x3a\x73\x42\x6e\xd1\x57\xe3\x4a\x3b\x53\x08\xf2\x4d\x9b\xc2\x92\xd2\x59\x7a\x88\xd4\x43\x16\x87\x8b\xab\x33\xd3\x17\x4a\x6e\xb2\xd7\x6b\x60\x7a\x89\x9d\x7e\xce\x47\xc1\xfd\xda\x67\x1c\x30\xcc\xf4\xcc\x77\xf4\xc8\x75\x6e\x8b\x0e\xc7\x85\x29\xd3\xff\x14\xe4\xd9\x4f\x2e\xcd\xd8\xf3\x6c\xd3\x1f\x00\x14\x00\x14\x00\x14\x00\x14\x00\x74\x32\x00\xda\x73\x2f\x38\x82\xa0\xe7\xdb\x16\xdf\x17\x32\x23\x02\x4f\xf0\x48\x64\x4b\xd0\x5d\x28\x03\xee\x90\x76\xa4\x7d\x54\xa5\x70\xdb\x74\xd2\xe5\xa9\x15\x6a\xda\xbd\xde\xfd\x73\xc7\x3e\xeb\xf5\x4c\xab\x2e\x81\xf0\xd5\xc7\x92\xef\xa9\x82\xc9\x30\x78\xe0\x7e\x1a\xfe\x1b\x1e\xc4\xcd\x9e\x7b\xa9\xad\xfc\xe5\x52\xff\xfc\xe5\x92\xed\x5d\x9f\x7b\xee\x7f\xd3\x8d\xe4\x5e\x30\x6e\x13\x15\x93\x37\x9a\x18\xd8\xb9\x19\xa6\x2f\x7f\x15\xe5\x27\x69\xfb\x74\xc7\x7e\x76\x69\x71\x2c\x3c\xba\x0c\x8f\xdf\x2d\x67\xa0\xb1\x36\x8f\xc9\x46\x91\xf1\xc3\x90\x01\xd5\x6f\xf0\x3e\x7d\xf7\x46\x95\xa7\x8e\x3f\x8c\x6b\x98\xd1\xab\xab\x0f\xf6\x41\x7e\x67\x0e\x0f\xef\xb9\x53\xf2\x59\x66\x46\x8d\x08\xf7\x32\x7c\x54\x63\x52\x2b\xaf\xdf\x2a\x6f\xd4\x2c\x2e\x52\x7a\x53\x8d\x55\xbb\x6f\xd5\xf7\x61\x0b\xcb\xb5\x73\x53\x98\x74\x05\x72\x4e\x64\x63\xac\x36\xeb\x64\x27\x4d\xb5\x81\x5d\x61\x30\xd3\x7d\x24\x83\x90\x59\x28\x7b\xf9\x66\x3b\x76\x6b\x59\x22\x88\x69\x6f\x2a\x5a\x76\x57\xfa\x1d\xae\xd8\x75\x32\x01\xcb\x13\x34\xfa\x91\x5d\xfd\xc4\xad\xaf\x4e\x28\x0f\xbe\xad\x8e\xa2\xb0\x70\x3a\xa8\x22\x38\xad\x42\x26\xfa\x71\xf9\x22\xe9\x1b\xdc\x67\x57\xfa\x91\x5d\x7d\x90\xa1\x28\x5c\x96\x59\x3c\xb2\xb8\xad\xde\x3e\x91\x8f\xce\x1a\xa0\xeb\x45\xda\xf4\x3c\xba\xe0\x3e\xbb\xc6\x90\x09\x19\x54\xa7\xfb\x3c\x1a\xe7\x8a\xa3\x15\xfa\x8d\x43\x5b\xc4\xc2\x5c\xa3\x80\xd8\x85\xc9\xc6\xf7\x38\x7e\xe1\x7c\xbe\x8d\x39\x23\x19\xfa\x09\xab\x25\x9a\xe1\xb9\xfa\x4f\x2d\xc0\x03\x7f\x3e\x11\xd3\x7d\x8e\x79\x7c\xe8\xcb\xe7\x96\x87\x9d\x0b\xe7\x35\x64\x3f\xea\x2d\x39\x57\x97\xcc\x4a\x82\xac\xbc\xcf\x71\x26\xe4\xe8\x19\xd8\xda\x51\x16\x26\xc6\x75\xaa\xd1\xb7\x94\xa6\x6e\x81\xdf\xea\x5a\x25\xf4\x3d\x3a\xf0\x46\x92\xe7\x76\x92\x3c\xfb\xed\x38\x5d\x89\x9e\xe7\x33\xcd\x10\xaf\x80\x78\x05\xc4\x2b\x20\x5e\x01\xf1\x0a\x75\x8b\x2f\x40\xf8\x82\x24\x02\x36\x0a\x36\x0a\x36\x0a\x36\x0a\x36\x0a\x36\xba\x2e\x36\x0a\x5c\x01\x5c\x01\x5c\x01\x5c\x31\x39\xae\x38\x01\xe9\x1b\x9a\x86\xd9\x4f\x84\xc7\xa9\x98\xcf\xf5\xb8\x19\x05\x7a\x1a\x4f\xd8\x56\x39\xcd\x5d\x12\x88\x91\x10\x8a\x5d\x43\x41\xd4\x0d\x73\x25\xf3\x0a\x6a\x76\xb2\xa4\x01\x55\x35\x51\x81\xdf\xf0\x12\x23\xc9\x5f\x7f\xe5\x83\x2c\xa3\x91\x89\xa1\x36\xdf\x18\x3f\x11\x0e\xea\xd3\xa6\xc5\x83\xc3\xf2\x61\x5b\x66\xd5\xd4\x8b\xe6\x28\x89\xb2\x48\xd6\x2a\x8e\xbe\xb1\xc9\x5a\xe4\xbc\xf9\xc4\x7d\xee\x88\x50\xbb\x21\xf5\x32\x1a\x45\xd2\x72\xc9\xae\xce\x1c\x7e\x9c\xfc\xb6\x32\x64\xc2\x8f\x95\xa2\x9b\x3a\x1a\x1e\xf9\x57\x25\xc5\xf8\x41\x44\x22\xd5\x16\x8b\x29\x49\x69\xea\x12\x69\xcb\xe4\xdc\x93\x21\x7b\xfd\xe6\x5f\xea\xd8\x90\x5b\x44\xf3\x3c\xe9\x3b\x5a\x37\x24\x07\x9c\x25\xfd\x98\xbb\xbe\x5e\xbb\xc8\xc1\x95\x1f\x4b\x84\x23\x61\x8d\xec\xfe\x29\x33\x7f\x1c\xe9\x71\xdf\xd9\xc9\xd0\xb9\x09\xbe\x3a\x37\x07\xdf\xb5\xa4\x2d\x6e\xfe\xf1\x31\xba\x53\x57\x19\xec\x31\x4f\x84\x33\xe6\xf0\x18\xa5\x4c\x2e\x5e\xc7\xeb\xab\xdf\xbd\xe9\xa1\xdf\xbd\xd3\x5e\x40\x43\x9f\xff\x4d\xe7\xf3\xeb\x90\x64\x43\x5f\x60\x85\x0a\x36\x29\x32\x8b\x50\xb0\x2f\xd8\x88\x35\x4f\xf4\x01\x7f\x9f\xa9\xf4\xc9\xa9\x4a\x5d\x4d\xb9\x13\x43\x94\xba\x85\x14\x39\x81\xee\x56\x1c\x64\x63\x75\x37\xa4\x95\x6f\x28\xad\x1c\xf9\x73\xc8\x9f\x43\xfe\x1c\xf2\xe7\x60\x76\x36\x7d\x45\x46\x26\xab\xcc\x63\xb4\x21\xd7\xa6\x2b\xd7\x66\x19\x46\x5b\xe6\x30\x1f\x3d\xc3\x26\x14\xdc\xae\xe8\x5f\xa7\x19\x59\xea\x02\x03\x4d\x2c\xac\x38\xf0\xb3\x9c\xf8\xd1\x56\xa6\xd0\x02\xbe\xd8\x01\x1c\x13\x2d\xd2\x01\x68\x2b\xef\x3a\x1b\xa0\xa5\xf0\x8f\x41\xb5\xc4\xaf\xe9\xdc\x1f\xda\x57\xf0\x47\x11\x3a\xa2\xd7\x91\x51\x1c\xf2\x58\x38\xae\x75\xdd\xff\x1c\xf5\xf7\x53\x72\x24\xed\x15\x7d\x76\xc4\x80\x87\xb1\x4b\xd9\x59\x3a\x54\xe9\x59\xbb\x63\x50\x6c\xd4\x6b\x92\x07\x72\x2a\xac\xdc\xa2\x71\xde\x95\x43\x89\x18\xfc\x92\x2b\xf7\x4b\x6e\x87\x29\x57\x12\x20\xd2\x8f\x4b\x27\xe9\xa8\x45\x28\x4f\xfc\x7e\xd1\xb0\x40\xbd\x24\xaf\x8c\xce\xcc\xe5\x1e\x9d\xe9\x4b\xff\x5a\x9f\x4d\x47\x90\x63\x34\x62\x2f\x7e\x89\xa4\x7f\xa7\xf3\x9f\x3f\xa9\xa5\x30\xf9\xfb\x73\xba\x40\xe6\xff\xf9\xd2\x24\xd8\xdd\x7f\xde\x7c\x90\xa1\x45\x9e\x63\x47\xd2\xe0\x4b\xf6\xe5\x72\xaf\xfe\xef\xcb\x25\xbb\x2d\x49\x93\xc2\xab\xb5\x9b\xf7\x10\xe5\xb9\x9e\xd7\xdc\xa2\x01\xa0\x0c\x5a\xcf\xb5\x12\xc7\x95\xf0\xec\x88\xc9\xef\xc9\xd8\xea\x0c\xd3\x40\xc8\xc0\x13\x3b\xa6\xef\x49\x89\xf3\xe9\x9c\xa2\x20\xe7\xda\x81\xc8\x6e\x3f\x44\xbc\xea\x46\xeb\x0d\x49\x85\x71\xb5\x5c\xe3\x2a\xa8\x44\x0a\x2f\xc2\xbc\x3a\x8c\xee\x10\x09\x3c\x6e\x3d\x4f\xeb\x4b\xae\xb1\x25\xbd\x0f\xe1\x84\x50\xfd\x36\xa9\xfa\x19\xa4\x61\x41\x11\xc8\x7e\x41\x38\xe1\xa6\x15\x99\xc3\x42\xbc\xc4\x17\x6c\xfc\x60\xbc\x9b\x48\x93\xbd\x21\xfd\x00\x4f\xa2\x46\xfa\x3e\xe9\x36\x77\x1e\x7e\x94\x50\x4b\xac\x6f\x58\x1f\x40\x91\x40\x91\x40\x91\x40\x91\x16\x42\x91\xc6\xd9\x2d\x4f\xe4\x49\x35\xdb\xe5\x22\xbd\x0b\xa0\x4a\x70\x2d\x6c\xcf\xb5\x00\xaa\x34\xe6\xbc\x01\x55\x82\x33\x09\xc6\x56\xfa\xdf\xa0\x4a\xb3\x50\xa5\xb1\x7c\x26\x27\xf2\xa5\xb5\xe8\x81\xa0\x4c\x50\x05\x37\xa9\x0a\x1a\xa4\x71\x41\x31\xc8\x7e\x01\x65\xda\xb4\x62\xb3\x1e\xca\x54\x87\x93\x26\x05\x48\x93\x36\xf6\xa9\x39\xfd\x83\x0c\x6f\x3d\x2f\xd3\x91\x8c\x20\x48\x8d\x27\xa0\x7a\x23\xaa\x37\x6e\xaf\x7a\x23\xda\x65\xad\xb8\x5d\x56\x37\x80\xea\x6a\x95\xd5\xea\xcd\x1a\x01\xae\xa1\x41\x16\x1a\x64\xa1\x41\x16\x1a\x64\xad\xad\x41\x56\xf7\xca\x5b\xdb\x1c\x6b\xe2\x50\x86\xb3\xb5\xc4\xea\x7e\xfd\xe6\x76\x58\x26\xcb\xe0\x94\x26\x58\xdd\x32\x68\x6e\x80\x35\xb1\x0c\xd0\xf6\x0a\x6d\xaf\xd0\xf6\x0a\x6d\xaf\xd0\xf6\x6a\xb2\xb6\x57\x3d\x56\xff\xa3\x96\x57\xad\xc5\x0c\x37\x14\xc9\xd8\xef\x6d\x56\xdc\xb6\xab\x5b\xdc\x6d\x2d\xbb\xce\x2b\x77\x34\xea\x9a\x64\x44\x8f\x9b\x74\x4d\x3c\xac\xb3\xb6\xe6\xea\x16\x4f\x4b\x5b\xae\xa9\x97\x4d\x53\x9b\x71\x75\x0b\xad\x06\x63\x0c\xf6\xe7\x25\x7f\xfd\xd5\x0b\x6b\x45\xc2\x3a\x84\x6e\xfc\x44\xbf\xb8\x25\xda\x31\x65\xa9\xf2\x42\xc5\x56\xb9\x67\x77\x54\x34\x98\x9e\xe3\xa8\x9a\x67\x8f\xa2\xe5\xef\xb2\x8b\xb5\x5e\x08\x25\xcb\xe1\xc6\x85\x1b\x17\x6e\x5c\xb8\x71\x57\xe8\xc6\xed\x17\xf3\x55\xeb\xca\x3d\x5b\x38\x1e\xa2\x26\x7b\x0f\xd4\x9c\x51\x93\x67\xf3\xbd\x9f\x10\xa7\x58\xeb\x7b\x46\x03\x0d\x34\xd0\x30\x6c\xfa\x9f\x82\x5d\x7a\xf6\x9b\x6f\x44\x2f\x67\x9b\xfe\x80\x30\x80\x30\x80\x30\x80\x30\x80\x30\x93\x41\x98\x9e\x7b\xc1\x11\x88\x41\x5f\x29\xf4\x95\x42\x5f\x29\xf4\x95\x5a\x44\x5f\xa9\xfe\x13\x72\xc5\xc4\xb4\xdf\x38\xb4\x51\xd3\xb9\x46\x01\xfc\x74\xb2\xf1\x3d\x66\xa8\xe7\xf3\x6d\xcc\x49\x53\xfb\x09\xab\x85\xa8\x3e\x57\xff\xa9\x45\x76\x48\x56\x45\xaf\xb8\x21\xbd\xe2\x72\x75\xe9\x0c\xd9\x58\x8d\x9c\x77\xfe\x9e\x71\x9d\xc9\x9b\xbd\x61\x77\x5d\xea\xe6\xf3\x01\x37\x12\xcb\xb6\x93\x58\xd6\x6f\x87\xe9\x4a\x2e\x3b\x9f\x29\x86\xf8\x04\xc4\x27\x20\x3e\x01\xf1\x09\x88\x4f\xa8\x5b\x7c\x01\xbe\x17\x24\x11\xb0\x50\xb0\x50\xb0\x50\xb0\x50\xb0\x50\xb0\xd0\x75\xb1\x50\xe0\x09\xe0\x09\xe0\x09\xe0\x89\xc9\xf1\xc4\x09\x08\xdf\xd0\xd4\xaf\x7e\x22\x3c\x4e\xff\x5a\x55\x79\xf2\xc6\x13\x36\x5f\xc9\xaf\xec\xcc\x47\x1d\xbf\x73\xd4\xf1\x1b\x8f\x1c\x0d\xa8\xe2\xb7\x94\xcc\xfe\x8b\xca\xa8\x5d\x06\x32\x1a\x19\x93\x69\x0b\x86\xf1\x93\x88\x98\x3e\x69\x7c\x26\x66\x7c\x1d\xf7\xca\x2b\xf6\x5b\x25\x90\x8f\xb4\x82\x7c\x24\x54\x71\x47\x15\xf7\x9a\x87\x59\x8e\x5a\xb3\xb4\x1a\xee\x43\x9f\xfe\x4d\xe7\xd3\xeb\x88\x5b\x23\x1f\x7f\x85\xfa\x24\xa9\x2c\x0b\xd0\x27\x2f\xd8\x80\x42\x1d\x49\x37\xe3\x33\xd5\xeb\x38\x4d\x49\xab\xa9\xd1\x81\xca\x1c\xd0\xc6\x56\xa1\x8d\x21\x17\x7a\x43\xb9\xd0\x48\xfa\x42\xd2\x17\x92\xbe\x90\xf4\x05\x43\xb2\xe9\x2b\x32\xd4\x90\x84\x29\x66\x96\x29\x96\x98\x26\x0b\x30\xc6\x32\x87\xf7\xe8\x69\x21\xa1\xe0\x76\x45\xfb\x3a\xc5\xa8\x52\xa7\x9f\x60\x52\x61\x85\xc1\x27\x7a\xd2\x27\x5a\x69\x22\x67\xfc\xf7\x39\x00\xbe\x91\xdf\x3c\x31\x5e\x3b\x9e\xc5\x4d\x7b\x33\x3f\xd4\xb3\x36\xfa\xb7\xf4\x4b\x0b\x0b\x9a\xb8\x20\xf0\x72\x99\x22\x41\xfb\x5e\x8b\x6c\x75\xdd\xd2\xed\xfb\x7f\x68\x5f\xc2\x1e\x45\xe8\x88\x5e\x47\x46\x69\x1b\xff\xeb\xfe\xe7\x50\x6f\xfa\xe4\x48\x5a\x2c\xfb\x6c\x02\x01\x0f\x63\x97\x72\x6a\x74\x80\xc9\x33\x36\x04\xba\xb3\x29\x4e\xb6\xa9\x48\x68\x8b\x0b\xee\xae\x1c\xf2\xc1\xe0\x7a\x5b\xb9\xeb\x6d\x3b\x20\xb4\x12\xa8\x9e\x7e\x5c\x3a\x99\x42\x2d\x3b\x79\x82\xee\x8b\x86\x25\xe9\x25\x39\x1e\x74\x06\x25\xf7\xe8\x4c\x5f\xfa\xd7\xfa\x6c\x3a\x82\x7c\x7f\x11\x7b\xf1\x4b\x24\xfd\x3b\x9d\xa7\xfa\x49\x2d\x7e\xc9\xdf\x9f\xd3\x25\x31\xff\xcf\x97\x26\x11\xda\xfe\xf3\xe6\x83\x0c\x2d\x72\x8e\x3a\x92\x06\x5f\xb2\x2f\x97\x7b\xf5\x7f\x5f\x2e\xd9\x6d\x49\x9a\x14\x06\xab\x3d\x99\x87\x28\xcf\xc9\xbb\xe6\x16\x0d\x00\x65\x3a\x7a\xae\x95\xf8\x66\x84\x67\x47\x4c\x7e\x4f\xc6\x56\x67\x02\x06\x42\x06\x9e\xd8\x31\x7d\x4f\x4a\x70\x4e\xe7\x14\x05\xa3\xd6\x0e\x44\x76\xfb\x21\xe2\x55\x37\x5a\x6f\xe8\x20\xec\x89\xa5\xda\x13\x41\x25\x9e\x73\x01\x16\xc5\x61\x74\x8b\x3f\xf0\xb8\xf5\x1c\x1d\x2f\xb9\xc2\xda\xb5\x3c\xc4\xbb\x41\xcd\xdb\xa0\x9a\x67\x90\x36\x85\x4d\x3f\xfb\x05\xf1\x6e\xbd\x9e\x7e\x8d\x2a\xcb\x61\x11\x2e\xd0\x0b\xd6\x15\x2f\x46\xd9\x30\x37\x6a\xcd\x88\x02\x6e\xa5\xc1\x62\xf4\xf7\xdf\x37\x81\xb4\x6d\x37\x0a\x0f\x34\x4a\xf7\x07\xdb\x11\x71\xa9\xed\xd3\xe8\xe0\x23\x49\xab\xf6\x6d\xf7\x9b\x6b\x1f\xb8\x57\x4c\xd1\xe2\x59\x21\x85\x3b\x69\xbf\xcf\x1e\xeb\x27\x7a\xac\x5d\x21\x7e\xe2\x6d\x16\x79\x71\x45\xd7\xbb\xca\x8b\xeb\x94\xaa\xa5\x64\x0a\x14\x73\xfd\x28\x16\xbc\xe4\xf1\xac\xaa\x57\xdf\x8f\x5c\x68\xff\x4e\xe5\x64\xd7\x3c\xcf\xaf\x95\x04\x15\xe4\x53\x99\x5a\x91\x8f\xd2\x01\x7f\xfe\x26\xfc\x2d\xe7\x53\xd1\x18\x9e\x29\xa9\xaa\xfa\xa9\x9c\x99\xec\xa0\x86\xdd\x8a\x6b\xd8\x75\x53\xaa\xae\xfa\x75\xc3\x9b\x29\xf6\x23\x70\xa8\x5a\x87\xaa\x75\xa8\x5a\x87\xaa\x75\x6b\xab\x5a\xd7\xbd\xf2\xd6\x56\xac\x9b\x38\xde\xe1\x6c\x75\xea\xba\x5f\xbf\xb9\x46\x9d\xc9\x32\x38\xa5\x32\x5d\x8f\xf6\xf8\x8d\x55\xe9\x26\x96\x01\x6a\xd1\xa1\x16\x1d\x6a\xd1\xa1\x16\x1d\x6a\xd1\x4d\x56\x8b\xae\xc7\xea\x7f\x54\x87\x6e\xea\x2e\xff\xc9\x5b\x6b\x28\xa4\xd4\xd9\x43\xfc\xc0\x22\x4b\x06\xe2\x15\x8b\x0e\xd6\x83\x1a\x79\xb2\x57\x04\x7f\xd4\x99\x31\x41\x28\x49\xca\xa7\x87\x78\x92\x2b\x10\x71\x9e\x53\xbc\xcd\x8a\x8b\x08\x76\x8b\xbb\xad\x80\xe0\x79\xe5\x8e\xb2\x81\x93\x8c\xe8\x71\xc9\xc0\x89\x87\x75\xd6\x42\x81\xdd\xe2\x69\x29\x12\x38\xf5\x7e\x61\x6a\x69\xc0\x6e\xa1\xd5\x20\x9c\xc1\x8e\xcc\xe4\xaf\xbf\x26\x80\x87\x35\xa5\x28\x26\x62\x88\x45\x70\xe8\xa7\xea\x4f\xa1\xb1\xce\x24\x00\xf1\x55\x6e\xf8\x90\x71\x97\x28\xc9\xca\x76\xca\x2d\xba\xab\x92\x27\xa0\x70\xed\x11\xf1\x23\xd0\x23\xd0\xe3\x92\xd0\x23\xb0\x23\xb0\x23\xb0\x23\xb0\x23\xb0\x23\xb0\x23\xb0\x23\xb0\x23\xb0\x23\xb0\x23\xb0\x23\xb0\x23\xb0\x23\xb0\x23\xb0\x23\xb0\xe3\xb2\xb0\x63\xa5\x78\x4c\xbb\xe7\x61\x49\xe5\x63\xc0\x53\xc1\x53\xc1\x53\xc1\x53\x8d\x1e\x51\xf0\xd4\xb2\x78\xc0\x53\x17\xc6\x53\x91\x75\xd9\x82\x3d\x1b\x72\x2d\x3f\xc8\xf0\xd6\xf3\x32\x26\x1a\x01\x80\x02\x80\x2e\x09\x80\x22\xf7\x12\x10\x14\x10\x14\x10\x14\x10\x14\x10\x14\x10\x14\x10\x14\x10\x14\x10\x14\x10\x14\x10\x14\x10\x14\x10\x14\x10\x14\x10\x74\x79\x10\x14\xc8\x0c\xc8\x0c\xc8\x6c\x19\x23\x0a\x64\x56\x16\x0f\x90\xd9\xf2\x90\x59\xb5\xeb\xb5\x19\xc4\xac\x5c\xc1\x75\x1e\x5e\x56\x7e\x06\x54\x26\x05\x1d\x03\x1d\xcb\x7f\x34\xa5\xe3\x1c\xd8\x18\xd8\x18\xd8\x18\xd8\x18\xd8\x18\xd8\x18\xd8\x18\xd8\x18\xd8\x18\xd8\x18\xd8\x18\xd8\x18\xd8\x18\xd8\x18\xd8\x18\xd8\x58\xdf\xb7\x01\x1b\x03\x1b\x03\x1b\x03\x1b\x03\x1b\x03\x1b\x6b\x62\x63\xe6\x94\xe1\x9c\x80\x8f\x9d\xb3\x08\x67\x7b\x83\x65\x90\x35\x90\x35\xc3\xc9\x1a\xa8\x1a\xa8\x1a\xa8\x1a\xa8\x1a\xa8\x1a\xa8\x1a\xa8\x1a\xa8\x1a\xa8\x1a\xa8\x1a\xa8\x1a\xa8\x1a\xa8\x1a\xa8\x1a\xa8\x1a\xa8\xda\x92\xa8\x5a\xa5\xec\x66\x9b\xdf\x61\x49\x45\x37\x01\x0b\x01\x0b\x01\x0b\x97\x31\xa2\x80\x85\x65\xf1\x00\x16\x9a\x0b\x0b\xc3\x7b\x6e\xed\x52\x62\x41\xaf\x40\xe4\xc4\x95\x37\x83\xb8\xe0\xd4\x54\xab\x0f\x73\x74\x44\xcc\x5c\x7f\x2f\xc3\xc7\x6c\x8e\x73\xa6\x39\x45\x33\xd5\x73\x44\xfc\xfb\x3d\xb7\x6e\x8b\x92\xb8\xbd\xfb\xf8\x3f\xd5\xd3\xe6\xc2\x79\x8b\xa5\x6c\x99\x10\x17\xce\xd8\xc2\xea\xec\x28\x9c\x7a\x51\xbc\x7d\xdf\xef\xeb\xdb\xeb\x65\x7f\x62\x25\x13\x59\xaf\xa0\x27\x7e\x5f\x7f\xbe\xbe\xbd\xfb\xf8\x7b\xdd\xc9\xf8\xca\x4e\xff\xca\x52\x41\x52\x6a\xef\xda\x3e\xb6\xff\xfb\xf6\x7a\x84\xef\xcd\xf2\x0e\x51\x2c\xc2\x50\x7a\xe2\xde\xf5\x6d\xd7\x77\x4a\x09\xe2\xda\x25\x31\x6e\x00\x8c\xbe\x26\xb3\xa4\xe7\x09\x2b\xdd\x8e\xde\xe9\xe7\xf8\x5d\x7a\xe2\x27\xfd\x1c\x2d\x5f\x8e\xbe\x42\xcd\xc7\xf3\x2e\xbb\x66\xfb\xf5\x1a\x80\x39\xab\x8e\xbb\x56\x49\xee\xa5\xfd\x54\x9d\xb2\xa9\x4e\x52\xf7\xdb\x24\xd3\xf9\x3d\xbd\xf3\x6f\x24\xc5\xa8\xe7\x64\x6e\x9f\xc5\x60\xb0\x60\xb0\x60\xb0\x60\xb0\x6b\x63\xb0\x2d\xa6\x64\x17\x87\x6d\x77\x4b\xb4\x9b\x94\x27\xad\xbd\xff\x51\x82\x4b\xbc\xcf\xaf\xa8\x5e\x8a\xa5\x66\x94\x9e\x07\xa5\x77\x2b\xc6\x3b\xdd\x0b\x16\x28\x69\x45\xb1\xb0\x77\xec\xd6\x67\xae\xaf\x57\x16\x19\xb2\x83\x9f\x2d\x4e\x36\xb3\xc3\xa7\xdf\x0f\x3e\xb3\xdd\x50\xed\x86\xdf\x44\x36\xe3\xd5\xf2\x49\xac\x20\xf9\xe4\xd3\xb9\x91\x08\x98\xed\x0f\x21\x7d\x65\x41\x28\x2d\x11\x91\x53\x3f\xf1\x87\x24\xb3\x6c\xc7\xfe\xa4\x3b\xd2\x68\xd1\xdc\x79\xcb\xae\xd9\xad\xe7\xbd\x25\x97\xbd\xad\x56\xe9\x83\xaf\x06\xde\x11\x51\x36\x25\x93\xcb\x09\x7b\xc0\x40\xe9\x77\x99\x67\x98\xce\x06\xce\xfb\x89\xa2\x19\x9e\x9f\x4d\x22\x7f\x14\x5d\x65\xae\xcf\x22\xed\xc1\x62\xf7\x62\xaf\x23\xfc\x32\xc8\x92\xab\x12\xc9\xea\x45\x53\xe7\x20\xf4\xe6\x70\x2f\x98\x2f\xfd\x6b\x5f\x38\x9c\x26\x68\xe2\xec\xda\xb1\x3f\xb2\x0d\x5b\x03\xd7\xec\xd3\x48\xd4\x46\xf7\xf1\x51\xd8\x2e\x8f\x85\xf7\x94\x87\xde\xe5\x5b\xae\xeb\xbd\x4a\x9c\x59\x24\x74\xe6\x84\xdc\xa2\xaf\xc6\x95\x76\xa6\x10\xe4\x9b\x36\xc5\x35\xa6\xb3\xf4\x10\xa9\x87\x2c\x0e\x17\x57\x67\xa6\x2f\x94\xdc\x64\xaf\xd7\xc0\xf4\x12\x3b\xfd\x9c\x8f\x82\xfb\xb5\xcf\x38\x60\x98\xe9\x99\xef\xe8\x91\xeb\x1c\x84\x1d\x2e\x42\x53\xa6\xff\x29\x31\x13\xfd\xe4\xd2\x1c\x37\x71\xb6\xe9\x8f\x08\x0a\x44\x50\x20\x82\x02\x11\x14\x88\xa0\x98\x2c\x82\xa2\xe7\x5e\x70\x14\x45\x71\xbe\x6d\xf1\x7d\x21\x17\x2b\xf0\x04\x8f\x44\xb6\x04\xdd\x85\x32\xe0\x0e\x69\x47\x3a\xbc\xa2\x14\xaf\x9f\x4e\xba\x3c\x99\x4b\x4d\xbb\xd7\xbb\x7f\xee\xd8\x67\xbd\x9e\x69\xd5\x25\x10\xbe\xfa\x58\xf2\x3d\x55\x30\x19\x06\x0f\xdc\x4f\xf3\x07\xc2\x83\xb8\xd9\x73\x2f\xb5\x95\xbf\x5c\xea\x9f\xbf\x5c\xb2\xbd\xeb\x73\xcf\xfd\x6f\xba\x91\xdc\x0b\xc6\x6d\xe2\xcf\xf2\x46\xb3\x39\x3b\x37\xc3\xf4\xe5\xaf\xa2\xfc\x24\x6d\x9f\xee\xd8\xcf\x2e\x2d\x8e\x85\x47\x97\xe1\xf1\xbb\xe5\xd1\x06\xb1\x36\x8f\xc9\x46\x91\xf1\xc3\x90\x01\xd5\x6f\xf0\x3e\x7d\xf7\x46\x95\xa7\x8e\xf4\x8d\x6b\x98\xd1\xab\xab\x0f\xf6\x41\x7e\x67\x0e\x0f\xef\xb9\x53\xf2\x56\x66\x46\x8d\x08\xf7\x32\x7c\x54\x63\x52\x2b\xaf\xdf\x2a\x6f\xd4\x2c\x2e\x52\x7a\x53\x8d\x55\x67\x0d\xa9\xef\xc3\x16\x96\x6b\xe7\xa6\x30\xe9\x0a\xe4\x9c\xc8\xc6\x38\x22\xae\x47\xbf\xa6\xda\xc0\xae\x30\x98\xe9\x3e\x92\xe1\xfe\x2c\x17\xa6\x7c\xb3\x1d\xbb\xb5\x2c\x11\xc4\xb4\x37\x15\x2d\xbb\x2b\xfd\x0e\x57\xec\x3a\x99\x80\xe5\x09\x1a\xfd\xc8\xae\x7e\xe2\xd6\x57\x27\x94\x07\xdf\x56\x47\x51\x5e\x09\x1d\x54\x11\x9c\x56\x21\x13\xfd\xb8\x7c\x91\xf4\x0d\xee\xb3\x2b\xfd\xc8\xae\x3e\xc8\x50\x14\x2e\xcb\x2c\x1e\x59\xdc\x56\x6f\x9f\xc8\x47\xa7\x1d\xd1\xf5\x22\x6d\x7a\x1e\x5d\x70\x9f\x5d\x63\xc8\x84\x0c\xaa\xd3\x7d\x1e\x8d\x73\xc5\x71\x41\xfd\xc6\xa1\x2d\x36\x68\xae\x51\x40\x94\xd0\x64\xe3\x7b\x1c\x29\x74\x3e\xdf\xc6\x9c\x31\x43\xfd\x84\xd5\x12\x37\xf4\x5c\xfd\xa7\x16\xdd\x81\x3a\x9f\x88\xe9\x3e\xc7\x3c\x3e\xf4\xe5\x73\x4b\x85\xcd\x85\xb3\x1b\x72\xa8\xf5\xc6\x9c\x2b\x4d\x63\xa4\x53\x37\x72\xec\xfa\x0c\xeb\x56\x02\x5c\x4d\xb1\x6e\xcb\xae\x1e\xbd\x02\x84\xf6\x9d\x85\x89\xbd\x9d\x2a\xf9\x69\xf1\x87\x93\x48\xb8\xba\x54\x1d\x07\x1f\x85\x7e\x23\x65\x7c\x3b\x29\xe3\xfd\xb6\x9f\xae\xb4\xf1\xf3\xd9\x69\x08\x5e\x40\xf0\x02\x82\x17\x10\xbc\x80\xe0\x85\xba\xc5\x17\x54\x7c\x41\x12\x01\x28\x05\x28\x05\x28\x05\x28\x05\x28\x05\x28\x5d\x17\x28\x05\xbb\x00\xbb\x00\xbb\x00\xbb\x98\x9c\x5d\x9c\xc0\xf7\x0d\xcd\x7e\xee\x27\xc2\xe3\x0c\xe8\xe7\x7a\xdc\x8c\xa2\x3e\x8d\x27\x6c\xab\x40\xef\x8e\x48\xc7\xb7\xd7\xbb\x63\x37\xfe\x06\x32\x19\xbb\xe1\xd2\x58\x5d\x2f\xe7\x02\x4a\x03\xca\xf5\x2e\xa5\xd6\xcd\x45\x65\x10\x2f\x03\x19\x8d\x4c\xcf\xb4\x41\xc3\xf8\x69\xa0\x4c\x9f\x35\x19\x2a\x1b\x96\x28\xda\x52\x3b\x69\xaa\x05\x64\x94\xcc\x51\x64\x2f\x15\x47\xdd\xd8\xec\x25\x72\x60\x7c\xe2\x3e\x77\x44\xa8\x5d\x71\x54\x09\x8c\x47\x91\xb4\x5c\xb2\x2d\x33\xa7\x17\x27\xdf\xa5\x0c\x99\xf0\x63\xa5\xec\xa5\xc6\xf6\x23\xff\xaa\xa4\x18\x3f\x88\x48\xa4\x1a\x53\x31\x47\x27\xcd\xe5\x21\x8d\x91\x1c\x5c\x32\x64\xaf\xdf\xfc\x4b\x1d\x1b\x72\x8b\x88\x96\x27\x7d\x47\xeb\x47\xe4\x84\xb2\xa4\x1f\x73\xd7\xd7\xab\x15\x39\x79\xf2\x63\xc9\xcb\x9f\xf0\x36\x76\xff\x94\x99\x00\x8e\xf4\xb8\xef\xec\x64\xe8\xdc\x04\x5f\x9d\x9b\x83\xef\x5a\xd2\x16\x37\xff\xf8\x18\xdd\xa9\xab\x0c\xf6\x1a\x27\xc2\x19\x73\x78\x8c\x52\xa8\x16\xab\xe7\xf4\xd5\x71\xde\xf4\xd0\x71\xde\x69\x0f\x98\x61\xcf\xfd\xa6\xf3\xb9\x75\x4c\xae\x61\x0f\xbe\x5a\xa5\x92\x14\x95\xe5\x29\x95\x17\xec\xd9\xf5\x3e\x6a\x9a\xde\x4c\x58\xf6\xe3\x44\xbd\xad\xb9\xd4\x07\x0a\x7c\x40\x4d\x5b\x85\x9a\x86\x94\xea\x0d\xa5\x54\x23\x77\x0c\xb9\x63\xc8\x1d\x43\xee\x18\x2c\xcc\xa6\xaf\xc8\xc8\x44\x8d\x79\xec\x35\xe4\x99\x64\x47\xb6\xe6\x99\x2c\xd0\x6e\xcb\x1c\xe4\xa3\x67\x97\x84\x82\xdb\x15\x95\xec\x24\x8b\x4b\x9d\x7f\xba\xbd\x85\xe5\x07\xfe\x96\x93\xbe\x5c\x47\x2c\xd1\xdd\xf2\x1c\x86\x57\x6c\xc3\xd1\xf5\x1c\xe8\xc3\x71\x0e\x36\x49\xb1\x00\x83\x2a\x4c\x5f\xd3\xb9\x3f\xb4\x2f\x69\x8f\x22\x74\x44\xaf\x23\xa3\x38\xe4\xb1\x70\x5c\xeb\xba\xff\x39\xea\xef\xa7\xe4\x48\x5a\x3c\xfb\x6c\x0e\x01\x0f\x63\x97\x52\x75\x74\xdc\xca\x73\x36\x0a\xba\xb5\x61\x9e\xb9\xa9\x88\x6a\x8b\x26\x76\x57\x8e\x28\x61\xf0\xd7\xad\xdc\x5f\xb7\x1d\xac\x5a\x89\x83\x4f\x3f\x2e\x9d\xab\xa1\x96\x9f\x3c\xff\xf7\x45\xc3\xd2\xf4\x92\xbc\x15\x3a\x41\x93\x7b\x74\xa6\x2f\xfd\x6b\x7d\x36\x1d\x41\x0e\xc3\x88\xbd\xf8\x25\x92\xfe\x9d\x4e\x83\xfd\xa4\x16\xc1\xe4\xef\xcf\xe9\xd2\x98\xff\xe7\x4b\x93\x78\x6f\xff\x79\xf3\x41\x86\x16\x79\x54\x1d\x49\x83\x2f\xd9\x97\xcb\xbd\xfa\xbf\x2f\x97\xec\xb6\x24\x4d\x8a\xb2\xd5\xee\xcf\x43\x94\xa7\xfc\x5d\x73\x8b\x06\x80\x12\x29\x3d\xd7\x4a\x1c\x3a\xc2\xb3\x23\x26\xbf\x27\x63\xab\x13\x0d\x03\x21\x03\x4f\xec\x98\xbe\x27\xe5\x4f\xa7\x73\x8a\x62\x5d\x6b\x07\x22\xbb\xfd\x10\xf1\xaa\x1b\xad\x37\x32\x11\x76\xc6\x52\xed\x8c\x60\xac\x6e\xfe\xb3\x59\x1a\x87\xd1\x1d\x04\x81\xc7\xad\x67\xa9\x7e\xc9\x25\x36\xa2\xfc\x21\x9c\x0e\x7a\xdf\xa6\xf4\x3e\x83\xd4\x2b\x68\x01\xd9\x2f\x08\xa7\xdb\xa0\xf6\x72\x58\xa2\x97\xf4\x82\x0d\x0e\x4a\x9b\xbd\xfb\xd4\xa0\x58\xb4\xba\xb6\x53\x08\x47\x43\xc9\x26\x94\x6c\x42\xc9\x26\x94\x6c\x42\xc9\xa6\xd9\x4b\x36\xc1\xc4\xec\x3d\x50\xe8\x37\x65\x52\x65\x2d\x04\x47\x6f\x28\x38\x1a\x65\xd4\x50\x46\x0d\x65\xd4\x50\x46\x0d\x65\xd4\x50\x46\x0d\x65\xd4\x90\x33\x84\x9c\x21\xe4\x0c\x21\x67\xa8\x3a\x23\xd1\x6f\x0a\x35\x1b\x51\xb3\x11\x35\x1b\x17\x5e\xb3\xb1\x16\xd6\x81\xec\x23\x0f\x70\x78\x1e\xa0\x29\xfd\xa6\x4c\x49\x05\xec\xdd\x68\xaa\x05\x7a\x77\x77\x98\x1a\x02\xba\xd1\x5a\x0a\xad\xa5\xf4\x4f\x68\x2d\x85\x38\x05\xc4\x29\x20\x4e\x01\x71\x0a\x88\x53\x00\x00\x07\x13\xed\x96\x08\x98\x28\x98\x28\x98\x28\x98\x28\x98\xe8\x86\x99\x28\x30\x05\x30\x05\x30\x05\x30\x05\x5a\x4b\xa1\xb5\x14\x5a\x4b\x65\xbf\x0c\xc9\xb5\x44\x4f\x29\x23\x7a\x4a\x0d\x2d\x0f\x81\x66\x52\x23\x37\x93\x6a\x81\x61\x7d\xba\x48\xad\xb3\xde\x05\x0a\x5d\x6c\x27\x0b\x09\x85\x2e\x50\xe8\xa2\xe6\x61\x8c\x56\x62\x16\x57\xe1\xc2\xec\xca\xe3\xcf\x79\xe2\xd5\xea\x88\xf3\xb7\x88\x3a\x5f\x19\x8e\x19\x9b\x42\x0d\xaa\xc0\x81\xba\x1b\xac\x49\xc6\xd0\xba\x8a\x83\x6c\xac\xd6\x85\x4c\xe7\x0d\x65\x3a\x23\xa5\x0b\x29\x5d\x48\xe9\x42\x4a\x17\x0c\xc6\xa6\xaf\xc8\xc8\xfc\x09\xb4\x81\x32\xd3\x32\x33\xa1\x0d\x94\x29\x49\x1f\xed\xfd\x9f\x5a\x8c\xab\xee\xc6\x4f\x97\x58\x69\xe0\x37\x59\x60\xab\xa7\xf3\xa1\xb5\x86\x1e\x4f\x75\x10\x0d\xcd\x9d\xd0\xdc\xa9\xf1\x9c\x89\x9b\x3b\xb5\xec\x02\x3d\xba\x3a\x2d\x9f\x70\xa2\x9d\x13\xfc\x6e\xdb\xa3\x9d\x68\xe7\x34\xe6\xbc\x41\x3b\x27\xb8\x2b\x60\x44\xd4\x09\x72\xad\x7d\x9c\x86\x9a\x11\x67\x6f\xe0\xd4\x6a\xe4\xf7\xe8\xdc\xb4\x7c\x05\x0f\x21\x6c\x50\xea\xb6\xa1\xd4\x19\xa4\x3b\x61\x8b\xcf\x7e\x41\x08\x5b\xe1\xda\xeb\xd5\x49\xe6\xee\xce\x34\x6d\x3c\x98\x5a\x2f\xa2\x80\x5b\x69\x34\x18\xfd\xfd\xf7\x4d\x28\x3d\x71\xaf\xdb\x42\xcd\xd3\xad\xa9\x5f\x8f\xca\x1e\xdd\x9a\xfe\x9d\xbe\x94\x3d\x4b\xbf\xca\x85\xc4\x8f\xa1\x1e\x12\xea\x21\xa1\x1e\x12\xea\x21\xa1\x1e\x52\xf1\x77\xf4\x6d\x82\xb9\x89\xb2\x55\x8d\x12\x41\x34\xf3\x86\xa2\x99\x51\xa3\x0c\x35\xca\x50\xa3\x0c\x35\xca\x50\xa3\x0c\x35\xca\x50\xa3\x0c\x49\x3e\x48\xf2\x41\x92\x0f\x92\x7c\xaa\x33\x12\x7d\x9b\x50\x10\x11\x05\x11\x51\x10\x71\xe1\x05\x11\x6b\xb1\x1d\x28\x3f\x12\xf7\x86\x27\xee\xcd\xda\xb7\xa9\x1e\xfd\x1a\xdc\xb7\xa9\x1f\xfe\x6e\xe8\xdb\x34\x1a\xf2\x46\x07\x27\x74\x70\xd2\x3f\xa1\x83\x13\x22\x16\x10\xb1\x80\x88\x05\x44\x2c\x20\x62\x01\x28\x1c\x74\xb4\x5b\x22\xa0\xa3\xa0\xa3\xa0\xa3\xa0\xa3\xa0\xa3\x1b\xa6\xa3\x00\x16\x00\x16\x00\x16\x00\x16\xe8\xe0\x84\x0e\x4e\xe8\xe0\x94\xfd\xd2\x3b\x11\xb3\xe0\xbf\x47\x07\xa7\xf9\x3a\x38\x3d\x1f\x1f\x0d\x28\x33\x97\xe8\x8f\x3a\xa7\xdd\xb7\x99\x7a\x5c\x16\x59\x32\x10\xaf\x58\x74\xb0\x1e\xd4\x62\x44\x8b\xbd\xe0\x8f\x7a\xa5\x0a\x42\x49\xfa\x6a\xf9\x19\xfb\x54\xa2\x23\x5a\x54\xfe\x19\xe5\xe8\xba\xde\x26\xf9\xeb\x2c\xad\xab\xfa\xf1\xc0\xc6\xd6\x55\x33\x27\xc1\x4e\x5e\x01\xa4\xf8\x56\xfd\xd6\x48\xa4\x64\xad\x20\x25\x0b\x15\x40\x50\x01\xa4\xe6\x61\x8c\xd6\xe3\x96\x51\x01\x64\xd0\x03\xcf\xda\xc4\x6a\xc0\x13\xaf\x56\x4d\x9e\xa9\x89\xd5\x60\x35\xf9\x82\x8d\x5e\xb4\xe4\xdc\xbd\xad\x9e\x59\xaf\x04\x55\x4a\x6a\xdf\x06\x6a\xd9\x12\xd5\x32\xe4\x85\x6f\x28\x2f\x1c\x09\x70\x48\x80\x43\x02\x1c\x12\xe0\x60\x51\x36\x7d\x45\x46\x66\x9b\xa0\xcb\x95\x99\xa6\xdb\x6c\x5d\xae\x0c\x4c\x91\xa9\xe9\x72\xd5\xcf\xcc\x6a\xe8\x72\xd5\x6d\x64\x61\xcd\x81\x8b\xc5\xe4\x7e\x57\xb3\x80\xc8\x62\xbf\xab\xc6\x07\x58\x52\xbf\x2b\x90\xd5\xc5\x91\x55\x34\xfa\x1a\xb4\x11\x36\x35\xfa\x5a\x29\x0f\x46\xcb\x2f\x38\x21\xb7\xc7\x86\xd1\xf2\x6b\xcc\x79\x83\x96\x5f\xf0\xdd\xc0\x8e\xaa\x13\xe4\xaa\x5a\x7e\x8d\x60\x49\x9d\xa7\xe5\x57\x5f\x8f\x47\x53\xcb\xaf\x95\xaa\x7a\x08\xfd\x83\x7a\xb7\x0d\xf5\xce\x20\x2d\x0a\x9b\x7d\xf6\x0b\x42\xff\x0a\xd7\x5e\xaf\x76\x32\x4b\xf3\x2f\x13\xe2\xe8\xe6\xeb\xfa\x35\x24\x7c\xae\xa9\xdd\x17\x22\xe8\x50\x35\x0b\x55\xb3\x50\x35\x0b\x55\xb3\x50\x35\x6b\xf6\xaa\x59\xb0\x2c\x7b\x0f\x14\xfa\x7c\x99\x54\xdc\x0c\xf1\xdc\x1b\x8a\xe7\x46\x25\x3b\x54\xb2\x43\x25\x3b\x54\xb2\x43\x25\x3b\x54\xb2\x43\x25\x3b\xa4\x39\x21\xcd\x09\x69\x4e\x48\x73\xaa\xce\x48\xf4\xf9\x42\xd9\x4c\x94\xcd\x44\xd9\xcc\x85\x97\xcd\xac\x05\x75\x00\xfa\x48\x5d\x1c\x9e\xba\x38\x7b\x9f\x2f\x53\xb2\x17\xbb\x1b\x7c\xb5\x90\xee\x5e\x9d\xbd\x86\xd0\x6d\xb4\xf4\x42\x4b\x2f\xfd\x13\x5a\x7a\x21\x38\x01\xc1\x09\x08\x4e\x40\x70\x02\x82\x13\x40\xbd\x01\x42\xbb\x25\x02\x10\x0a\x10\x0a\x10\x0a\x10\x0a\x10\xba\x61\x10\x0a\x36\x01\x36\x01\x36\x01\x36\x81\x96\x5e\x68\xe9\x85\x96\x5e\xd9\x2f\x27\xa5\x57\xa2\x97\xd7\xbc\xbd\xbc\x86\x56\x7c\x40\x13\xaf\x0d\x94\x9a\x9b\xb6\x89\x57\x0b\xf3\xeb\xd9\xbd\x6b\x65\xb5\x3b\x50\xb4\x63\x3b\xa9\x55\x28\xda\x81\xa2\x1d\x35\x0f\x63\xa6\x92\xb6\x9c\x6a\x1d\x66\xd7\x7c\x1f\xf4\xa8\xab\xd5\x7a\x67\x6c\xcd\x35\x5f\x2d\x91\x39\x9a\x71\x0d\x29\x23\x82\xe2\x21\xd0\xb2\x96\xaf\x65\x21\x5d\x7b\x43\xe9\xda\xc8\x4b\x43\x5e\x1a\xf2\xd2\x90\x97\x06\x03\xb1\xe9\x2b\x32\x32\x09\x04\xed\xb7\xcc\x34\xcf\x66\x6d\xbf\x65\x4a\xe6\x4a\x43\xdf\xad\x16\x8b\xaa\x57\xc3\xad\x4b\x2c\x2f\x70\x95\xd4\x9d\x6d\x5c\x8b\xad\xf3\xf1\xc1\x6a\x6f\xad\xd3\xa9\x9f\x29\xc0\x0f\xa4\x73\x71\xa4\x13\x4d\xb5\x4e\xdb\xe5\xfa\x75\xd3\x5a\x3e\x9f\x45\x1b\x2d\x38\x13\xb7\x87\x6c\xd1\x46\x6b\xcc\x79\x83\x36\x5a\xf0\xc1\xc0\x48\x5a\x77\xff\xac\xa1\x66\xd2\xf9\x1a\x67\xb5\xba\x2c\xfa\x75\xcc\x5a\xbe\x3a\x87\x70\x3b\xe8\x6e\x2b\xd7\xdd\x0c\x52\x91\xb0\x93\x67\xbf\x6c\x3c\xdc\x6e\xbd\x3a\xc7\x6c\x5d\xb1\xa6\x0d\x61\x0b\xa5\x27\xee\x75\xdf\xad\x52\xfb\xab\x19\x4a\x83\x75\x77\xfc\x6c\xa8\x10\x56\x38\xf9\x83\x0c\x6f\x3d\x2f\xd3\x66\x22\x13\xf8\x4b\xe3\x09\x1b\xce\x06\x4b\x86\x0b\x49\x61\xf3\x26\x85\x3d\xb3\x1b\xf0\xe9\xec\x07\xb5\xf7\x56\x5c\x7b\xaf\x9b\xed\x74\xd5\xdd\x6b\x75\x28\x8d\xc0\xad\x50\x6d\x0f\xd5\xf6\x50\x6d\x0f\xd5\xf6\xd6\x56\x6d\xaf\x7b\xe5\xad\xad\xb4\x37\x71\x94\xc0\xd9\xea\xeb\x75\xbf\x7e\x73\x6d\x3d\x93\x65\x70\x4a\x45\xbd\x6e\x19\x34\x57\xd3\x9b\x58\x06\xa8\xa1\x87\x1a\x7a\xa8\xa1\x87\x1a\x7a\xa8\xa1\x37\x59\x0d\xbd\x1e\xab\xff\x51\xfd\xbc\xd6\x74\xad\x0d\x05\x09\xf6\x7b\x9b\x15\xd7\x00\xec\x16\x77\x5b\xfd\xbf\xf3\xca\x1d\x55\xff\x26\x19\xd1\xe3\x8a\x7f\x13\x0f\xeb\xac\x75\xfe\xba\xc5\xd3\x52\xe3\x6f\xea\x65\xd3\xd4\xca\x7e\xdd\x42\xab\x61\x18\x83\xfd\x79\xc9\x5f\x7f\x0d\xe1\x59\x73\x83\xac\x61\x04\x0b\xe8\xaa\x2a\x78\x33\xd1\x15\x98\xd5\x56\x0a\x19\x02\x56\x01\x56\x01\x56\x01\x56\x01\x56\x01\x56\x01\x56\x01\x56\x01\x56\x01\x56\x01\x56\x01\x56\x01\x56\x01\x56\x01\x56\x01\x56\xf5\x7d\x1b\xc0\x2a\xc0\x2a\xc0\x2a\xc0\x2a\xc0\x2a\xc0\xaa\x12\xac\xa2\x67\xb8\xb1\xbc\x43\x14\x8b\xf0\x6c\x99\x58\x89\x12\xe8\xdb\xee\x37\xd7\x3e\x70\xaf\x38\x74\x3c\x33\xf4\xde\xe9\xa7\x2a\x64\x89\xec\x0a\x75\x73\xdf\x66\x2a\xf9\x15\x5d\xee\x2a\xf7\xef\x95\x1c\x36\x19\xfe\x62\xae\x1f\xc5\x82\x97\xf6\xce\x2a\x1c\xfb\xde\x50\x6b\xe8\xf8\x51\x7e\xad\xe0\x07\xf0\x31\x53\x4b\x84\xd2\x02\xf1\xb3\xb2\x01\x37\xcf\xcc\x68\x24\x67\x02\x67\xc7\x9f\x10\x30\x1a\x30\x1a\x30\x1a\x30\x1a\x30\x1a\x30\x1a\x30\x1a\x30\xda\x48\xab\x2d\x30\x1a\x30\x1a\x30\x1a\x30\x1a\x30\x1a\x30\x1a\x30\x1a\x30\x1a\x30\x1a\x30\x1a\x30\x9a\x91\x23\x0a\x8c\x56\x16\x0f\x30\xda\xda\x30\x5a\x4d\x0f\xde\x89\x68\x5a\x11\xa1\xf9\xe9\xde\x9f\xe6\x84\x4d\x84\xd2\x5e\xe5\x4a\x3f\x19\x36\x89\x82\xa8\xec\x86\xdc\x9a\xb9\x2a\x59\xc1\x85\x6b\x8f\x03\xe2\x00\xe1\x00\xe1\x96\x07\xe1\x00\xe0\x00\xe0\x00\xe0\xf2\x0f\x0d\x00\x0e\x00\x0e\x00\x0e\x00\x0e\x00\x0e\x00\x0e\x00\x0e\x00\x0e\x00\x0e\x00\x0e\x00\x0e\x00\x0e\x00\x6e\x71\x00\xae\xd8\x5c\xbb\xcb\xe7\xb0\xa4\x56\xdb\x00\x8b\x00\x8b\x00\x8b\xcb\x18\x51\x80\xc5\xb2\x78\x00\x16\xd7\x02\x16\x0d\x4b\xcc\x33\x21\x23\x0f\xa9\x78\xa0\x80\xcb\xa4\x80\xf3\xa7\xe2\x01\x01\x02\x01\x02\x01\x02\x01\x02\x01\x02\x01\x02\x01\x02\x01\x8e\xb4\xda\x02\x01\x02\x01\x02\x01\x02\x01\x02\x01\x02\x01\x02\x01\x6e\x0e\x01\x02\x95\x01\x95\x01\x95\x2d\x63\x44\x81\xca\xca\xe2\x01\x2a\x5b\x0d\x2a\x33\x2f\xf9\x6e\xf9\x59\x77\x00\x6d\x00\x6d\xcb\x03\x6d\x80\x6c\x80\x6c\x80\x6c\x80\x6c\x80\x6c\x80\x6c\x80\x6c\x80\x6c\x80\x6c\x80\x6c\x80\x6c\x80\x6c\x80\x6c\x80\x6c\x80\x6c\x80\x6c\x4b\x84\x6c\x0d\x79\x76\x48\xb0\x03\x35\x34\x8d\x31\x81\x1a\x82\x1a\x82\x1a\x82\x1a\x56\x84\x66\x0e\x35\x54\x4f\x14\x05\xdc\x4a\x99\x21\xfd\xfd\xf7\x8d\x61\x0d\xf1\x4c\xe8\x84\xf7\xef\x54\x3a\x36\x9a\xe1\x01\x0c\x2e\x1e\x0c\xce\x94\x81\x87\x22\x9c\x80\x83\x80\x83\x80\x83\x80\x83\x80\x83\x80\x83\x80\x83\x86\x81\x31\xc0\x41\xc0\x41\xc0\x41\xc0\x41\xc0\x41\xc0\x41\xc0\xc1\x25\xc2\xc1\xe4\xad\x89\x11\xaa\xa1\xe4\x87\xf8\x81\x45\x96\x0c\xc4\x2b\x16\x1d\xac\x07\x35\xf2\x64\xaf\x08\xfe\xa8\xbd\xc2\x41\x28\x49\xca\xa7\xf3\x43\x72\x07\x02\x22\x02\x22\x02\x22\x02\x22\x02\x22\x02\x22\x02\x22\x36\x41\x44\x43\x32\x12\x97\xdf\x07\xb0\x16\x43\x02\x41\x02\x41\x2e\x0f\x41\x02\x3f\x02\x3f\x02\x3f\x02\x3f\x02\x3f\x02\x3f\x02\x3f\x02\x3f\x02\x3f\x02\x3f\x02\x3f\x02\x3f\x02\x3f\x02\x3f\x02\x3f\x02\x3f\x2e\x11\x3f\x16\x73\x13\x57\xd1\xfc\x0f\x3c\x15\x3c\x15\x3c\x15\x3c\xd5\xe8\x11\x05\x4f\x2d\x8b\x07\x3c\x75\xad\x3c\xd5\x94\x6c\x4c\x43\xd2\x30\x91\x7f\x09\xf8\xb9\x4c\xf8\x39\x63\xfe\x25\xc8\x27\xc8\x27\xc8\x27\xc8\x27\xc8\x27\xc8\x27\xc8\x27\xc8\xe7\x48\xab\x2d\xc8\x27\xc8\x27\xc8\x27\xc8\x27\xc8\x27\xc8\x27\xc8\xe7\xe6\xc8\x27\x40\x21\x40\x21\x40\x21\x40\xa1\xd1\x23\x0a\x50\x58\x16\x0f\x40\xe1\x6a\x41\xa1\x41\x19\x97\xab\x48\xb5\x04\x66\x04\x66\x5c\x1e\x66\x04\x62\x04\x62\x04\x62\x04\x62\x04\x62\x04\x62\x04\x62\x04\x62\x04\x62\x04\x62\x04\x62\x04\x62\x04\x62\x04\x62\x04\x62\x04\x62\x5c\x14\x62\xac\x26\x57\x22\xab\x12\xb0\x14\xb0\xd4\x10\xb4\x06\x58\x0a\x58\x0a\x58\x0a\x58\x5a\x11\x9a\x39\xb0\x14\x3d\x2d\x8f\x08\x67\xa5\x93\xe5\x07\x19\xde\x7a\x5e\x86\x3d\x23\x20\x4f\x20\xcf\xe5\x21\x4f\x74\xb6\x04\xfd\x04\xfd\x4c\xbe\x32\xd0\x4f\xd0\x4f\xd0\x4f\xd0\x4f\xd0\x4f\xd0\x4f\xd0\x4f\xd0\x4f\xd0\x4f\xd0\x4f\xd0\x4f\xd0\x4f\xd0\xcf\xc5\xd1\x4f\xa0\x33\xa0\x33\xa0\xb3\x65\x8c\x28\xd0\x59\x59\x3c\x40\x67\x8b\x47\x67\xa6\x30\xb3\x59\x61\x19\x28\x59\xdd\x58\x82\x92\x81\x92\x21\x39\x10\x78\x0c\x78\x0c\x78\x0c\x78\x0c\x78\x0c\x78\x0c\x78\x0c\x78\x0c\x78\x0c\x78\x0c\x78\x0c\x78\x0c\x78\x0c\x78\x0c\x78\x0c\x78\xec\xa4\xb7\x01\x1e\x03\x1e\x03\x1e\x1b\x6d\x58\x81\xc7\x9a\x24\x03\x3c\xf6\x0c\x3c\x76\x2f\x62\xfe\xfa\x66\x10\x18\x9b\x9a\x08\xf5\x81\x6e\x8e\x88\xcb\x0a\xaf\x1e\xe6\x16\x36\xe6\x88\xb8\x86\x8c\x91\x18\x6e\xef\x3e\xfe\x5e\x77\x85\xb9\x90\xd8\x62\x49\x55\x41\x90\xd4\xde\x70\x85\xb8\x8a\x26\x4c\xe1\x12\x17\xc5\xc7\x38\xf5\xf3\xb3\xbc\x43\x14\x8b\xb0\x29\xbd\x53\xdb\x1b\xe3\xd2\x6a\x7d\x4d\x66\x49\xcf\x13\x56\xba\x4d\xbc\xd3\xcf\x51\x9f\x07\x56\xfd\x90\xf4\x15\x9a\xbe\xa5\x77\xd9\x85\xdb\x2f\xda\x80\xc4\x58\x75\x1a\xe8\xb5\xf4\x5e\xda\x4f\xd5\x19\x9c\x2e\xa6\x75\xbf\x4d\x32\xbb\xdf\xd3\x8b\xff\x46\xa2\x8c\x7a\xce\xed\xf6\x49\x0d\xca\x02\xca\x02\xca\x02\xca\xb2\x36\xca\xd2\xa2\x03\x77\x91\x96\x76\x7b\xaa\x5d\x17\x3e\x69\xed\xfd\x8f\x12\x5c\xe2\x5f\x7a\x45\xe1\x5b\x96\x9a\x51\x7a\x1e\x94\xde\xad\x18\xd1\x70\x2f\x58\xa0\xa4\x15\xc5\xc2\xde\xb1\x5b\x9f\xb9\xbe\x5e\x59\x64\xc8\x0e\x7e\xb6\x38\xd9\xcc\x0e\x9f\x7e\x3f\xf8\xcc\x76\x43\xb5\x1b\x7e\x13\xd9\x8c\x57\xcb\x27\x79\x03\x93\x4f\x3e\x9d\x1b\x89\x80\xd9\xfe\x10\xd2\x57\x16\x84\xd2\x12\x11\xb9\xed\x12\x43\x2e\x99\x65\x3b\xf6\x27\xdd\x91\x46\x8b\xe6\xce\x5b\x76\xcd\x6e\x3d\xef\x2d\x39\xe5\x6c\xb5\x4a\x1f\x7c\x35\xf0\xca\x24\x4a\xa7\x64\x72\x39\x61\x0f\x18\x28\xfd\x2e\xf3\x0c\xd3\xd9\xd0\x58\x3f\x51\x34\xe3\xb1\xb3\x49\xe4\x8f\xa2\x8d\xef\xfa\x2c\xd2\xa6\x37\xbb\x17\x7b\x1d\xc3\x93\xb9\x51\x73\x55\x22\x59\xbd\x68\xea\x1c\x84\xde\x1c\xee\x95\x75\xeb\x5f\xfb\xc2\xe1\x34\x41\x13\x2b\x7d\xc7\xfe\xc8\x36\x6c\x8d\x54\xb2\x4f\x23\xd1\x1d\xdd\xc7\x47\x61\xbb\x3c\x16\xde\x53\x1e\x5c\x93\x6f\xb9\xae\xf7\x2a\xb1\xc2\x49\xe8\xcc\x09\xb9\x45\x5f\x8d\x2b\xed\x4c\x21\xc8\x37\x6d\x8a\x5c\x4a\x67\xe9\x21\x52\x0f\x59\x1c\x2e\xae\xce\x4c\x5f\x28\xb9\xc9\x5e\xaf\x81\xe9\x25\x76\xfa\x39\x1f\x05\xf7\x6b\x9f\x71\xc0\x30\xd3\x33\xdf\xd1\x23\xd7\x79\x36\x3a\x7c\x1b\xa6\x4c\xff\x53\xa8\x68\x3f\xb9\x34\x93\xd1\xb3\x4d\x7f\x30\x52\x30\x52\x30\x52\x30\x52\x30\xd2\xc9\x18\x69\xcf\xbd\xe0\x88\x93\x9e\x6f\x5b\x7c\x5f\xc8\xa3\x08\x3c\xc1\x23\x91\x2d\x41\x77\xa1\x0c\xb8\x43\xda\xd1\x9d\xf4\x5c\xeb\xa9\x14\x91\x9b\x4e\xba\x3c\x11\x43\x4d\xbb\xd7\xbb\x7f\xee\xd8\x67\xbd\x9e\x69\xd5\x25\x10\xbe\xfa\x58\xf2\x3d\x55\x30\x19\x06\x0f\xdc\x4f\x23\x84\xc3\x83\xb8\xd9\x73\x2f\xb5\x95\xbf\x5c\xea\x9f\xbf\x5c\xb2\xbd\xeb\x73\xcf\xfd\x6f\xba\x91\xdc\x0b\xc6\x6d\x02\x67\xf2\x46\x43\x05\x3b\x37\xc3\xf4\xe5\xaf\xa2\xfc\x24\x6d\x9f\xee\xd8\xcf\x2e\x2d\x8e\x85\x47\x97\xe1\xf1\xbb\xe5\x98\x34\xd6\xe6\x31\xd9\x28\x32\x7e\x18\x32\xa0\xfa\x0d\xde\xa7\xef\xde\xa8\xf2\xd4\x21\x8a\x71\x0d\x33\x7a\x75\xf5\xc1\x3e\xc8\xef\xcc\xe1\xe1\x3d\x77\x4a\x2e\xcb\xcc\xa8\x11\xe1\x5e\x86\x8f\x6a\x4c\x6a\xe5\xf5\x5b\xe5\x8d\x9a\xc5\x45\x4a\x6f\xaa\xb1\x06\x5a\xb6\xae\xd2\x26\x2d\xd7\xce\x4d\x61\xd2\x15\xc8\x39\x91\x8d\xb1\xda\xac\x93\x9d\x34\xd5\x06\x76\x85\xc1\x4c\xf7\x91\x8c\x53\x66\xd1\xee\xe5\x9b\xed\xd8\xad\x65\x89\x20\xa6\xbd\xa9\x68\xd9\x5d\xe9\x77\xb8\x62\xd7\xc9\x04\x2c\x4f\xd0\xe8\x47\x76\xf5\x13\xb7\xbe\x3a\xa1\x3c\xf8\xb6\x3a\x8a\x22\xc7\xe9\xa0\x8a\xe0\xb4\x0a\x99\xe8\xc7\xe5\x8b\xa4\x6f\x70\x9f\x5d\xe9\x47\x76\xf5\x41\x86\xa2\x70\x59\x66\xf1\xc8\xe2\xb6\x7a\xfb\x44\x3e\x3a\xb1\x80\xae\x17\x69\xd3\xf3\xe8\x82\xfb\xec\x1a\x43\x26\x64\x50\x9d\xee\xf3\x68\x9c\x2b\x0e\x68\xe8\x37\x0e\x6d\x41\x0d\x73\x8d\x02\xc2\x1b\x26\x1b\xdf\xe3\x10\x87\xf3\xf9\x36\xe6\x0c\x76\xe8\x27\xac\x96\x80\x87\xe7\xea\x3f\xb5\xfc\x0e\x10\xfa\x44\x4c\xf7\x39\xe6\xf1\xa1\x2f\x9f\x5b\x34\x7b\x2e\x5c\xa2\x21\x5f\x52\xef\xce\xb9\xe6\x34\x43\xda\x64\x2b\x06\xae\x26\x51\x56\xde\xf0\x38\x93\x72\xf4\xec\x6d\xed\x45\x0b\x13\xcb\x3b\x55\xf7\xd3\x16\xb0\x27\x81\x71\x75\xa9\x46\x2c\x3e\x0a\x0c\x47\x8e\xe8\x76\x72\x44\xfb\xed\x46\x5d\x79\xa2\xe7\x33\xdb\x10\xcb\x80\x58\x06\xc4\x32\x20\x96\x01\xb1\x0c\x75\x8b\x2f\x20\xf9\x82\x24\x02\x6e\x0a\x6e\x0a\x6e\x0a\x6e\x0a\x6e\x0a\x6e\xba\x2e\x6e\x0a\x94\x01\x94\x01\x94\x01\x94\x31\x39\xca\x38\x01\xf7\x1b\x9a\xc5\xd9\x4f\x84\xc7\x99\x9c\xcf\xf5\xb8\x19\x05\x81\x1a\x4f\xd8\x56\x71\xce\x1d\x31\x8f\x04\x4f\xec\x8e\x7d\xf9\x5b\x49\x76\xec\x06\x4e\x33\xd5\xe6\x1c\x17\x32\x0d\x28\xd7\xb9\x94\x12\x1e\x17\x95\x91\xbc\x0c\x64\x34\x32\x51\xd3\xf6\x0d\xe3\xa7\xc1\x33\x7d\xd6\xb4\xf8\x6c\x58\x2e\x69\x4b\xc7\xf1\x49\x17\x95\x51\x32\x4c\x91\xe5\x54\x1c\x7a\x63\xb3\x9c\xc8\xb3\xf1\x89\xfb\xdc\x11\xa1\xf6\xd1\xe9\xfe\xfa\x51\x24\x2d\x97\x8c\xce\xcc\x1b\xc6\xc9\xa9\x29\x43\x26\xfc\x58\x69\x81\xa9\x15\xfe\xc8\xbf\x2a\x29\xc6\x0f\x22\x12\xa9\x2a\x55\xcc\xe5\x49\x73\x7e\x48\x95\x24\xcf\x97\x0c\xd9\xeb\x37\xff\x52\xc7\x86\xdc\x22\xd4\xe5\x49\xdf\xd1\x8a\x13\x79\xa7\x2c\xe9\xc7\xdc\xf5\xf5\xba\x45\xde\x9f\xfc\x58\x72\xff\x27\x20\x8e\xdd\x3f\x65\xb6\x81\x23\x3d\xee\x3b\x3b\x19\x3a\x37\xc1\x57\xe7\xe6\xe0\xbb\x96\xb4\xc5\xcd\x3f\x3e\x46\x77\xea\x2a\x83\xdd\xc9\x89\x70\xc6\x1c\x1e\xa3\x34\xad\x65\x2b\x40\x7d\x95\x9f\x37\x3d\x94\x9f\x77\xda\x3f\x66\xe2\xc3\xbf\xe9\x7c\x78\x1d\xc5\x6b\xe2\xd3\xaf\x5b\xef\x24\x35\x66\xa1\x7a\xe7\x05\x1b\xa7\x74\xc8\xcd\xff\x5f\xad\x98\x7f\x9f\xa9\x82\xc8\x89\xfa\x5d\x47\xd5\x10\xd4\x0a\x81\x26\xb7\x0a\x4d\x0e\xd9\xd9\x1b\xca\xce\x46\x1a\x1a\xd2\xd0\x90\x86\x86\x34\x34\x18\xa1\x4d\x5f\x91\x91\x39\x1f\xf3\x18\x72\x48\x59\x39\x21\x65\x65\xa9\xb6\x5c\xe6\x57\x1f\x3d\x51\x25\x14\xdc\xae\x28\x67\x27\x19\x60\xea\xfc\x81\xe6\x17\x56\x23\xf8\x65\x06\x7e\xcd\x8e\x58\xac\x5b\xe6\x39\x38\x90\xbc\xf7\x89\x19\xdc\xf5\x30\x5a\x03\x09\x78\xfc\x50\x8f\xff\xe8\xdf\xd2\x2f\x2d\x44\x6a\xe2\x62\xe4\xcb\xc5\x9c\x14\x65\x30\xa8\xbc\xf5\x35\x9d\xfb\x43\xfb\x0a\xf7\x28\x42\x47\xf4\x3a\x32\x8a\x43\x1e\x0b\xc7\xb5\xae\xfb\x9f\xa3\xfe\x7e\x4a\x8e\xa4\xb5\xb4\xcf\x86\x11\xf0\x30\x76\x29\x09\x48\x47\xc4\x3c\x67\xf3\x08\x1a\x1a\xcb\xce\xee\xbc\x9b\x0a\xce\xb6\x28\x6b\x77\xe5\x80\x15\x06\x97\xde\xca\x5d\x7a\xdb\x81\xb3\x95\x30\xfb\xf4\xe3\xd2\xa9\x20\x6a\x0d\xca\xd3\x8b\x5f\x34\xac\x4f\x2f\xc9\xa1\xa1\xf3\x3f\xb9\x47\x67\xfa\xd2\xbf\xd6\x67\xd3\x11\xe4\x53\x8c\xd8\x8b\x5f\x22\xe9\xdf\xe9\x2c\xdb\x4f\x6a\x25\x4c\xfe\xfe\x9c\xae\x8f\xf9\x7f\xbe\x34\x89\x1a\xf7\x9f\x37\x1f\x64\x68\x91\xd3\xd5\x91\x34\xf8\x92\x7d\xb9\xdc\xab\xff\xfb\x72\xc9\x6e\x4b\xd2\xa4\x20\x5e\xed\x21\x3d\x44\x79\x46\xe1\x35\xb7\x68\x00\x28\x4f\xd3\x73\xad\xc4\xe7\x23\x3c\x3b\x62\xf2\x7b\x32\xb6\x3a\x8f\x31\x10\x32\xf0\xc4\x8e\xe9\x7b\x52\x7a\x76\x3a\xa7\x28\x94\xb6\x76\x20\xb2\xdb\x0f\x11\xaf\xba\xd1\x7a\x03\x1f\x61\x7b\x2c\xdf\xf6\x08\x2a\x71\xa9\x0b\xb5\x3e\x0e\xa3\x3b\x12\x02\x8f\x5b\xcf\x52\x07\x93\x4b\x6c\x49\x21\x44\xb4\x1e\x14\xc2\xed\x29\x84\x06\xe9\x5d\x50\x0f\xb2\x5f\x10\xad\xd7\xe3\xe1\x57\xae\xdb\x1c\x16\xeb\x57\xbd\x60\xcf\x0b\x77\x9b\xbd\x45\xd6\xf0\x28\xb7\xba\xde\x58\x08\x74\x43\x21\x29\x14\x92\x42\x21\x29\x14\x92\x42\x21\xa9\xd9\x0b\x49\xc1\x00\xed\x3d\x50\x68\x8a\x65\x52\xbd\x2f\x84\x5d\x6f\x28\xec\x1a\xc5\xdd\x50\xdc\x0d\xc5\xdd\x50\xdc\x0d\xc5\xdd\x50\xdc\x0d\xc5\xdd\x90\x8d\x84\x6c\x24\x64\x23\x21\x1b\xa9\x3a\x23\xd1\x14\x0b\x95\x24\x51\x49\x12\x95\x24\x17\x5e\x49\xb2\x96\xd8\x81\xfb\x23\xc3\xf0\x99\x19\x86\xa6\x34\xc5\x32\x2a\xc9\xb0\x77\x37\xac\x16\x06\xde\xb3\x0d\xd6\x10\xee\x8d\xfe\x57\xe8\x7f\xa5\x7f\x42\xff\x2b\x84\x2d\x20\x6c\x01\x61\x0b\x08\x5b\x40\xd8\x02\x78\x38\x10\x69\xb7\x44\x80\x48\x81\x48\x81\x48\x81\x48\x81\x48\x37\x8c\x48\x41\x2d\x40\x2d\x40\x2d\x40\x2d\xd0\xff\x0a\xfd\xaf\xd0\xff\x2a\xfb\x65\x70\x4e\x26\x1a\x5f\xc5\xc6\x34\xbe\x7a\x56\x91\x09\x74\xbc\x1a\xb9\xe3\x55\x0b\x20\xeb\xdd\xea\x6a\xc5\x55\x33\x50\x2e\x63\x3b\xd9\x4a\x28\x97\x81\x72\x19\x35\x0f\x63\xbe\x76\xb3\xcc\x3a\x19\x66\x57\x41\x7f\xf6\x63\xaf\x5b\x8d\x9c\xbf\x8f\xd5\x1c\x15\x3d\x66\xec\x5c\x35\xbc\x98\x07\x4a\x78\xb0\x26\x41\x43\x31\x2b\x0e\xb2\xb1\x8a\x19\x92\xa6\x37\x94\x34\x8d\xec\x30\x64\x87\x21\x3b\x0c\xd9\x61\xb0\x29\x9b\xbe\x22\x23\x53\x31\xd0\xab\xca\x60\x6b\xcd\x84\x5e\x55\x46\xe5\x8f\xb4\x37\xa9\x6a\xb1\xb5\x7a\x76\xa7\xba\xc4\xc2\x03\xff\xca\xa2\xfb\x51\x9d\x99\xd2\x35\x34\xa2\xaa\xe3\x71\xe8\x40\x85\x0e\x54\x8d\xe7\x4c\xdc\x81\xaa\x65\x67\xe8\xdb\x7a\x6a\xf9\xb0\x14\x3d\xa7\xe0\x9a\xdb\x1e\x33\x45\xcf\xa9\x31\xe7\x0d\x7a\x4e\xc1\xa3\x01\xc3\x62\x9b\xcd\xa6\x9e\x65\x5a\x9c\xbd\xcb\x54\xab\x33\xa0\x6f\x7b\xa9\xe5\x2b\x7d\x88\x90\x83\xb6\xb7\x21\x6d\xcf\x20\xa5\x0a\x7b\x7f\xf6\x0b\x22\xe4\x6a\x9f\x7a\xe5\x1a\xcb\xdc\x2d\xa4\xce\x15\x69\xa6\x16\x92\x28\xe0\x56\x1a\x67\x46\x7f\xff\x7d\x13\x4a\x4f\xdc\xeb\x2e\x56\xf3\xb4\x94\xea\xd7\x6b\xb3\x6f\x4b\xa9\x7f\xa7\x6f\x66\xcf\xd2\x77\x73\x21\x91\x69\xa8\xd2\x84\x2a\x4d\xa8\xd2\x84\x2a\x4d\xa8\xd2\x54\xfc\x1d\xcd\xa5\x60\x8c\xa2\x98\x56\xa3\x44\x10\x27\xbd\xa1\x38\x69\x54\x4e\x43\xe5\x34\x54\x4e\x43\xe5\x34\x54\x4e\x43\xe5\x34\x54\x4e\x43\xfa\x10\xd2\x87\x90\x3e\x84\xf4\xa1\xea\x8c\x44\x73\x29\x94\x69\x44\x99\x46\x94\x69\x5c\x78\x99\xc6\x5a\x76\x87\x18\x00\xa4\x04\x3e\x33\x25\x70\xd6\xe6\x52\xf5\xfc\x77\xfe\xe4\xc0\xf6\xe6\x52\xfd\x68\x78\x5b\x73\xa9\xd1\x08\x38\xda\x4c\xa1\xcd\x94\xfe\x09\x6d\xa6\x10\xc0\x80\x00\x06\x04\x30\x20\x80\x01\x01\x0c\x20\xe3\x80\xa5\xdd\x12\x01\x2c\x05\x2c\x05\x2c\x05\x2c\x05\x2c\xdd\x30\x2c\x05\xbf\x00\xbf\x00\xbf\x00\xbf\x40\x9b\x29\xb4\x99\x42\x9b\xa9\xec\x97\xd3\x12\x36\x0b\x4e\x7c\xb4\x99\x8a\xe7\x6d\x33\x35\x12\x52\x1a\x50\xc0\x2e\x51\x27\x75\x3e\xbc\x6f\x33\xf5\xcc\x2c\xb2\x64\x20\x5e\xb1\xe8\x60\x3d\xa8\xb5\x89\xd6\x7e\xc1\x1f\xf5\xc2\x15\x84\x92\xd4\xd7\xf2\x83\xf6\xa9\x71\x47\xf0\xa8\xfc\x33\x0a\xdd\x75\xbd\x4d\xf2\xd7\x59\xfa\x6b\xf5\x63\x84\xed\xfd\xb5\x66\xce\x93\x3d\x4f\x1d\x91\xe2\xab\xf5\x5b\x37\x91\xba\xb5\x82\xd4\x2d\xd4\x11\x41\x1d\x91\x9a\x87\x31\x5f\xc1\x5b\x50\x1d\x91\x41\x4f\x3d\x7f\xa7\xad\x01\x8f\xbd\x6e\x4d\x7a\xa6\x4e\x5b\xcf\xd3\xa4\x2f\xd8\x34\xf5\x4f\xce\xdd\x80\x6b\x8c\xd2\x27\x28\x78\x52\xfb\x36\xd0\xdc\x96\xa8\xb9\x21\xc5\x7c\x43\x29\xe6\xc8\xa5\x43\x2e\x1d\x72\xe9\x90\x4b\x07\xa3\xb3\xe9\x2b\x32\x32\x71\x05\xad\xb8\x0c\x36\xe7\x66\x6b\xc5\x65\x6a\xb6\x4d\x4d\x2b\xae\x7e\x56\x57\x5b\x2b\xae\x6e\x9b\x0b\x4b\x10\x5c\x31\xcb\x68\xca\x35\x1f\xd3\x2c\x36\xe5\x6a\x7c\x8a\x25\x35\xe5\x02\xa4\x5d\x1c\xa4\x45\x37\xb2\x41\x9b\x63\x6b\x37\xb2\x95\xa2\x65\xf4\x25\x83\x9f\x72\x7b\x84\x19\x7d\xc9\xc6\x9c\x37\xe8\x4b\x06\xf7\x0e\x6c\xab\x0d\xf5\x25\x1b\xcb\xba\x3a\x4f\x5f\xb2\xbe\x9e\x91\xd6\xbe\x64\x2b\x55\xff\x10\x59\x08\xbd\x6f\x43\x7a\x9f\x41\xea\x15\xb4\x80\xec\x17\x44\x16\xd6\x3e\xf5\xca\x75\x97\x59\x3a\x94\x99\x15\xa1\x37\x5f\x6b\xb2\xc1\x81\x79\x4d\x3d\xc9\x10\x9b\x87\x5a\x5e\xa8\xe5\x85\x5a\x5e\xa8\xe5\x85\x5a\x5e\xb3\xd7\xf2\x82\xdd\xd9\x7b\xa0\xd0\x8c\xcc\xa4\x92\x6b\x88\x14\xdf\x50\xa4\x38\xea\xeb\xa1\xbe\x1e\xea\xeb\xa1\xbe\x1e\xea\xeb\xa1\xbe\x1e\xea\xeb\x21\x81\x0a\x09\x54\x48\xa0\x42\x02\x55\x75\x46\xa2\x19\x19\x8a\x79\xa2\x98\x27\x8a\x79\x2e\xbc\x98\x67\x2d\xad\x03\xee\x47\x52\xe4\x33\x93\x22\x67\x6f\x46\x66\x54\x5e\x64\x77\x17\xb2\x16\xf0\xdd\xbf\xfd\xd8\x10\xd8\x8d\xbe\x63\xe8\x3b\xa6\x7f\x42\xdf\x31\xc4\x2a\x20\x56\x01\xb1\x0a\x88\x55\x40\xac\x02\x20\x38\xb8\x68\xb7\x44\xc0\x45\xc1\x45\xc1\x45\xc1\x45\xc1\x45\x37\xcc\x45\x81\x2a\x80\x2a\x80\x2a\x80\x2a\xd0\x77\x0c\x7d\xc7\xd0\x77\x2c\xfb\xe5\xf4\x34\x4c\x34\x1c\x8b\xe7\x6f\x38\xf6\xac\xba\x11\xe8\x34\xb6\x81\x22\x76\xd3\x76\x1a\x6b\xe1\x80\xa7\xb4\x18\x5b\x63\x05\x10\x94\xfe\xd8\x4e\x0a\x16\x4a\x7f\xa0\xf4\x47\xcd\xc3\x18\xac\xbd\x2d\xac\xe6\x87\xd9\xf5\xe7\x87\x3f\xef\xba\x15\xe3\x19\xfb\x87\x99\x50\x96\x64\x8e\x8e\x61\x83\x2b\x92\xa0\x0e\x09\x14\xb1\xe5\x2b\x62\xc8\xfc\xde\x50\xe6\x37\x52\xdc\x90\xe2\x86\x14\x37\xa4\xb8\xc1\x86\x6c\xfa\x8a\x8c\xcc\x27\x41\x8f\x30\x83\x4d\xb6\x59\x7b\x84\x19\x95\x04\xd3\xd0\x1c\xac\xc5\xc0\xea\xdf\x15\xec\x12\xab\x0d\x5c\x2a\x0b\xeb\x03\x76\x66\xd4\x58\x6d\x00\x76\x3a\x40\x34\x85\x1d\x02\x9a\x2e\x0e\x9a\xa2\xf3\xd7\x69\x3b\xdf\x09\x2d\xbf\x96\x8f\x7a\xd1\xeb\x0b\xfe\xc6\xed\x81\x5f\xf4\xfa\x1a\x73\xde\xa0\xd7\x17\xdc\x34\x30\x9c\x8e\xc5\xb8\xce\x26\x5f\xcf\x32\x9d\xce\xd7\xdd\xab\xd5\xb5\x71\x42\x5b\xaf\xe5\xab\x78\x88\xe6\x83\x52\xb7\x05\xa5\xce\x20\xdd\x09\x5b\x7c\xf6\x0b\xa2\xf9\x92\x2b\xaf\x5c\x23\x99\xad\x75\xd7\xb9\x82\xe3\x42\xe9\x89\x7b\xdd\x26\xac\xd4\xa3\x6b\x86\x82\x65\xdd\x9d\x4b\xdb\xea\x96\x15\xae\xf0\x41\x86\xb7\x9e\x97\x29\x3c\x91\x09\x28\xa7\xf1\x84\xad\xe7\xa8\x25\x63\x86\x54\x35\x03\x52\xd5\xc6\xe8\x74\x7c\x3a\x46\x42\x81\xc0\x15\x17\x08\xec\xc6\x44\x5d\xc5\x01\x5b\xdd\x52\x23\x20\x30\x94\x04\x44\x49\x40\x94\x04\x44\x49\xc0\xb5\x95\x04\xec\x5e\x79\x6b\xcb\x01\x4e\x1c\x70\x70\xb6\x22\x80\xdd\xaf\xdf\x5c\x00\xd0\x64\x19\x9c\x52\xf6\xaf\x5b\x06\xcd\x25\xff\x26\x96\x01\x0a\xfd\xa1\xd0\x1f\x0a\xfd\xa1\xd0\x1f\x0a\xfd\x4d\x56\xe8\xaf\xc7\xea\x7f\x54\xe4\xaf\x35\x2f\x6c\x43\xf1\x86\xfd\xde\x66\xc5\x85\x0a\xbb\xc5\xdd\x56\xa4\xf0\xbc\x72\x47\x69\xc2\x49\x46\xf4\xb8\x2c\xe1\xc4\xc3\x3a\x6b\x31\xc2\x6e\xf1\xb4\x14\x22\x9c\x7a\xd9\x34\xb5\xfc\x60\xb7\xd0\x6a\x90\xc6\x60\x7f\x5e\xf2\xd7\x5f\x83\x41\xd7\xdc\x84\xeb\x19\x68\x0b\x4c\xab\x2a\x7d\x83\x99\x16\x60\x96\x01\x30\x0b\x14\x0b\x14\x0b\x14\x0b\x14\x0b\x14\x0b\x14\x0b\x14\x0b\x14\x6b\xcc\xd5\x16\x14\x0b\x14\x0b\x14\x0b\x14\x0b\x14\x0b\x14\x0b\x14\x0b\x14\x0b\x14\x0b\x14\x0b\x14\xcb\xc8\x11\x05\xc5\x2a\x8b\x07\x14\x6b\xc9\x14\x8b\x1e\xe4\xc6\xf2\x0e\x51\x2c\xc2\xb3\xe5\x6e\x25\x9a\xa0\x6f\xbb\xdf\x5c\xfb\xc0\xbd\xe2\xf8\xf1\xcc\xda\x7b\xa7\x9f\xaa\x90\x48\xb2\x2b\x94\xef\x7d\x9b\xe9\xe5\x57\x74\xb9\xab\xdc\xc9\x57\xf2\xda\x64\x5c\x8c\xb9\x7e\x14\x0b\x5e\xda\x40\xab\xd4\xec\x7b\x5b\x51\xa3\xe3\xe7\xf9\xb5\x42\x23\x00\xce\x4c\x2d\x57\x4a\x4b\xc5\xcf\xca\x1a\x04\x47\xcb\x26\xfa\x4c\x30\xed\xf8\x3b\x02\x5a\x03\x5a\x03\x5a\x03\x5a\x03\x5a\x03\x5a\x03\x5a\x03\x5a\x1b\x73\xb5\x05\x5a\x03\x5a\x03\x5a\x03\x5a\x03\x5a\x03\x5a\x03\x5a\x03\x5a\x03\x5a\x03\x5a\x03\x5a\x33\x72\x44\x81\xd6\xca\xe2\x01\x5a\x5b\x25\x5a\xab\xe9\x11\x3c\x11\x61\x2b\x62\x35\x3f\x55\x00\xd2\x04\xb2\x89\xf0\xda\xab\x5c\xf3\x27\xeb\x26\xd1\x12\x95\xf1\x90\x9b\x34\x57\x25\x53\xb8\x70\xed\x11\xe1\x1c\xc0\x1c\xc0\xdc\x42\xc1\x1c\xa0\x1c\xa0\x1c\xa0\x1c\xa0\x1c\xa0\x1c\xa0\x1c\xa0\x1c\xa0\x1c\xa0\x1c\xa0\x1c\xa0\x1c\xa0\x1c\xa0\x1c\xa0\x1c\xa0\x1c\xa0\xdc\xd2\xa1\x5c\xb1\xd1\x77\x97\xe3\x61\x49\x6d\xbf\x01\x1b\x01\x1b\x01\x1b\x97\x31\xa2\x80\x8d\x65\xf1\x00\x36\xae\x0a\x36\x1a\x96\xc0\x67\x4c\xe6\x1e\x52\xf6\x40\x06\x17\x4c\x06\xe7\x4f\xd9\x03\x16\x04\x16\x04\x16\x04\x16\x04\x16\x04\x16\x04\x16\x04\x16\x1c\x73\xb5\x05\x16\x04\x16\x04\x16\x04\x16\x04\x16\x04\x16\x04\x16\xdc\x1c\x16\x04\x3e\x03\x3e\x03\x3e\x5b\xc6\x88\x02\x9f\x95\xc5\x03\x7c\xb6\x2e\x7c\x66\x5e\x92\xde\x4a\xb2\xf3\x00\xdf\x00\xdf\x16\x0a\xdf\x00\xde\x00\xde\x00\xde\xd2\x6f\x0d\xe0\x0d\xe0\x0d\xe0\x0d\xe0\x0d\xe0\x0d\xe0\x0d\xe0\x0d\xe0\x0d\xe0\x0d\xe0\x0d\xe0\x0d\xe0\x0d\xe0\x6d\x71\xe0\xad\x21\x1f\x0f\x89\x78\x20\x89\xa6\x71\x27\x90\x44\x90\x44\x90\x44\x90\xc4\x8a\xd0\x0c\x23\x89\xea\xb1\xa2\x80\x5b\x29\x47\xa4\xbf\xff\xbe\x31\xac\xc1\x9e\x31\x9d\xf5\xfe\x9d\x8a\xc8\x46\x73\x3d\xc0\xc2\x75\xc0\xc2\x99\x32\xf5\x50\xc0\x13\xc0\x10\xc0\x10\xc0\x10\xc0\x10\xc0\x10\xc0\x10\xc0\xd0\x44\x58\x06\x60\x08\x60\x08\x60\x08\x60\x08\x60\x08\x60\x08\x60\xb8\x44\x60\x98\xbc\x35\x71\x43\x35\x94\xfc\x10\x3f\xb0\xc8\x92\x81\x78\xc5\xa2\x83\xf5\xa0\x46\x9e\xec\x15\xc1\x1f\xb5\xa7\x38\x08\x25\x49\xf9\x74\xa6\x48\x8e\x41\x80\x45\x80\x45\x80\x45\x80\x45\x80\x45\x80\x45\x80\xc5\x56\xb0\x68\x48\xe6\xe2\x4a\xfa\x0a\xd6\xa2\x49\x60\x49\x60\xc9\x85\x62\x49\x20\x49\x20\x49\x20\xc9\xf4\x5b\x03\x92\x04\x92\x04\x92\x04\x92\x04\x92\x04\x92\x04\x92\x04\x92\x04\x92\x04\x92\x04\x92\x04\x92\x04\x92\x5c\x1c\x92\x2c\xe6\x30\xae\xa2\x99\x20\x18\x2b\x18\x2b\x18\x2b\x18\xab\xd1\x23\x0a\xc6\x5a\x16\x0f\x18\xeb\xaa\x19\xab\x29\x59\x9b\x26\xa5\x6b\x22\x4f\x13\x40\x74\xc1\x40\x74\xc6\x3c\x4d\xd0\x50\xd0\x50\xd0\x50\xd0\x50\xd0\x50\xd0\x50\xd0\x50\xd0\xd0\x31\x57\x5b\xd0\x50\xd0\x50\xd0\x50\xd0\x50\xd0\x50\xd0\x50\xd0\xd0\xcd\xd1\x50\xc0\x43\xc0\x43\xc0\x43\xc0\x43\xa3\x47\x14\xf0\xb0\x2c\x1e\xc0\xc3\x75\xc3\x43\x83\x32\x33\xd7\x93\x92\x09\xf4\x08\xf4\xb8\x50\xf4\x08\xec\x08\xec\x08\xec\x08\xec\x08\xec\x08\xec\x08\xec\x08\xec\x08\xec\x08\xec\x08\xec\x08\xec\x08\xec\x08\xec\x08\xec\x08\xec\xb8\x3c\xec\x58\x4d\xc2\x44\xf6\x25\x00\x2a\x00\xaa\x21\xb8\x0d\x00\x15\x00\x15\x00\x15\x00\xb5\x22\x34\xc3\x00\x2a\x7a\x64\xd6\x53\xcf\x4a\x67\xcc\x0f\x32\xbc\xf5\xbc\x0c\x85\x46\xc0\xa0\xc0\xa0\x0b\xc5\xa0\xe8\x94\x09\x22\x0a\x22\x5a\x38\x10\x44\x14\x44\x14\x44\x14\x44\x14\x44\x14\x44\x14\x44\x14\x44\x14\x44\x14\x44\x14\x44\x14\x44\x14\x44\x74\x79\x44\x14\x38\x0d\x38\x0d\x38\x6d\x19\x23\x0a\x9c\x56\x16\x0f\x70\xda\x3a\x70\x9a\x29\x1c\x6d\x7e\x80\x06\x72\x56\x37\xa0\x20\x67\x20\x67\x48\x22\x04\x32\x03\x32\x6b\x9a\x7e\x40\x66\x40\x66\x40\x66\x40\x66\x40\x66\xe5\xe5\xd6\x40\x5c\x04\x64\x06\x64\x06\x64\x06\x64\x06\x64\x06\x64\x06\x64\x06\x64\x56\x7e\x1b\x20\x33\x20\x33\x20\x33\x20\x33\x20\xb3\xed\x21\xb3\xc8\x7a\x10\xf6\xc1\x53\x16\x50\x82\xca\x06\x71\xb1\xa9\x59\x50\x1f\xe6\xe6\x88\x98\xb9\xfe\x5e\x86\x8f\xd9\xdc\xe6\x4c\xbb\xf3\x9b\xe9\x98\x23\xe2\xcf\x99\x08\x6e\xef\x3e\xfe\x4f\xf5\xf8\xb9\xe8\xd7\x62\xa1\x54\x26\xc4\x85\x23\xa9\xfc\xcb\x28\x9c\x73\x51\xbc\x6f\xd7\x97\xf4\xed\xf5\xb2\x3f\xa6\x92\xb5\xa8\xd7\xc8\xbe\x5f\xd2\x9f\xaf\x6f\xef\x3e\xfe\x5e\x77\x16\xbe\xa7\xd3\xbf\xa7\x54\x90\xd4\x55\x74\x35\x9f\xd5\xff\x7d\x7b\xfd\x8c\x2f\x2b\x08\x5d\x19\xba\xf1\x93\xe5\xf1\xa8\x3c\x80\x97\xda\x06\x1f\x37\xa0\x43\x5f\x93\x59\xd2\xf3\x84\x95\x6e\x2f\x77\xc9\x33\xbc\x53\xcf\xd0\xf2\x69\xe8\x93\x8b\x5f\xc7\xbb\xec\x3a\x8d\xd7\x68\x00\xc2\xac\x3a\xa6\x5a\x93\xb8\x97\xf6\x53\x75\x3a\xa6\xaa\x44\xdd\x6f\x93\x4c\xd5\xf7\xf4\x9e\xbf\x91\xd0\xa2\x9e\x13\xb5\x7d\x86\x82\x31\x82\x31\x82\x31\x82\x31\xae\x8d\x31\xb6\x58\x80\x5d\x9c\xb1\xdd\x9b\xd0\x6e\x09\x9e\xb4\xf6\xfe\x47\x09\x2e\xf1\xae\xbe\xa2\x58\x46\x4b\xcd\x28\x3d\x0f\x4a\xef\x56\x8c\xe7\xb9\x17\x2c\x50\xd2\x8a\x62\x61\xef\xd8\xad\xcf\x5c\x5f\xaf\x2c\x32\x64\x07\x3f\x5b\x9c\x6c\x66\x87\x4f\xbf\x1f\x7c\x66\xbb\xa1\xda\x08\xbf\x89\x6c\xc6\xab\xe5\x93\x7c\xe1\xc9\x27\x9f\xce\x8d\x44\xc0\x6c\x7f\x08\xe9\x2b\x0b\x42\x69\x89\x88\x9c\xd6\x89\x1b\x23\x99\x65\x3b\xf6\x27\xdd\x91\x46\x8b\xe6\xce\x5b\x76\xcd\x6e\x3d\xef\x2d\xb9\xa4\x6d\xb5\x4a\x1f\x7c\x35\xf0\x8e\x88\xb2\x29\x99\x5c\x4e\xd8\x03\x06\x4a\xbf\xcb\x3c\xc3\x74\x36\x30\xdc\x4f\x14\xcd\x70\xf8\x6c\x12\xf9\xa3\xe8\xe1\x72\x7d\x16\x69\xc7\x13\xbb\x17\x7b\x1d\xc1\x96\x41\x84\x5c\x95\x48\x56\x2f\x9a\x3a\x07\xa1\x37\x87\x7b\xc1\x7c\xe9\x5f\xfb\xc2\xe1\x34\x41\x13\x1f\xd5\x8e\xfd\x91\x6d\xd8\x1a\x28\x66\x9f\x46\xa2\x25\xba\x8f\x8f\xc2\x76\x79\x2c\xbc\xa7\x3c\xb4\x2c\xdf\x72\x5d\xef\x55\xe2\x83\x22\xa1\x33\x27\xe4\x16\x7d\x35\xae\xfc\xff\xd8\x3b\x97\xe6\x38\x91\x6d\xdf\xcf\xf5\x29\x08\x9d\x81\xec\xe8\x56\xe9\xda\x93\xb3\xa3\xf7\x48\xdb\x6e\xdf\xeb\xde\xdd\x6e\xc5\xf6\x8e\x3e\x13\x77\xdc\xc0\x54\xaa\xc4\x35\x82\x0a\xa0\xe4\xd0\x39\xd1\xdf\xfd\x06\x99\x40\x01\xc5\xab\x10\x8f\x04\x7e\x23\x2b\x5c\x3c\x33\x21\x59\x6b\xfd\xd6\xfa\xaf\x6d\x6a\x10\x1c\x3f\xda\x32\x6f\x2f\x79\x4a\x0f\x41\x74\x91\xd9\xe9\x32\xa3\x3d\x93\x1b\x8a\x4f\x72\xaf\xd6\xc0\xe4\x10\x1b\x75\x9d\x8f\xc2\x74\x4b\xaf\xb1\xc3\x34\xcb\x6b\xbe\x93\x97\x5c\x16\xd7\x6b\x88\xec\xe9\xf2\xf8\x9f\x93\x13\xd0\x6e\x5c\xaa\xf3\x02\x46\x7b\xfc\xc9\x10\x20\x43\x80\x0c\x01\x32\x04\xc8\x10\x18\x2c\x43\xa0\xe5\xb7\xe0\x24\x4b\x60\xbc\xcf\xe2\xfb\x4c\x51\xd1\xde\x11\x66\x20\xd2\x25\xe8\xce\xf7\xf6\xe6\x4e\x5a\x47\x77\x9e\x63\x5b\xcf\xb9\x7c\xf4\xe4\xa1\x3b\x56\x25\x45\x8f\xdd\x9b\xcd\x7f\x6e\x8c\xcf\x6a\x3d\x53\xa6\xcb\x5e\xb8\xd1\xcb\x72\xfc\xa6\x0a\xc3\xf3\xf7\x0f\xa6\x9b\xe4\xc7\xfb\x07\x71\x73\x6f\x3a\x89\xaf\xfc\xe5\x52\xfd\xfc\xe5\xd2\xb8\xb7\x5d\xd3\xb1\xff\x3b\xf9\x90\x7c\x15\x86\xb9\x95\xd8\xd8\xbb\x51\x48\x6d\x7b\x74\xc3\xd4\xe1\xaf\x82\xe3\x4e\xca\x3f\xdd\x18\x3f\xdb\x72\x71\xcc\x5c\xba\xe7\x9f\xde\xdb\x31\x49\x20\x54\xee\xb1\xf4\x51\xbc\xf0\xa1\xcb\x84\xaa\x3b\x78\x9f\xdc\x7b\xa5\xc9\x53\x06\xe8\xfa\x75\xcc\xe4\xad\x47\x2f\xec\x83\xf7\xdd\xd8\x99\xfe\x57\x73\x97\x0b\x4e\xa6\x4e\x8d\xf0\xef\x3d\xff\x31\x9a\x93\xd2\xf1\xfa\xbd\x70\x47\xd5\xc3\x25\x8d\xde\xc4\x62\xdd\xab\xb1\xb5\x23\x6b\xd2\xb2\xb7\x47\x57\x58\xda\x0a\x32\x38\x91\xce\x71\x20\xb1\x9c\xfc\x35\xb1\x06\x36\x99\xc9\x4c\xbe\x23\x29\xa5\x4f\x6b\x3d\xf2\x27\xdb\x18\xb7\x96\x25\xf6\xa1\xfc\x36\x65\x3d\xbb\x2b\x75\x0f\x57\xc6\x75\xfc\x00\xe6\x1f\xd0\xe0\xef\xc6\xd5\x3f\x4c\xeb\xdb\xce\xf7\x0e\xee\x36\xda\x4a\xd6\x4d\xc8\x8d\x0a\x03\xa7\x4c\xc8\xd8\x3e\xce\x1f\x24\xb9\x83\xaf\xe9\x91\xfe\x6e\x5c\x7d\xf0\x7c\x91\x39\xac\x61\x99\x81\x65\x6e\xa3\xbb\x8f\xc7\x47\x95\xd5\xc8\xe3\x05\xca\xf5\x3c\x39\xe0\x7d\x7a\x8c\x2e\x0f\xe4\xbe\xf8\xb8\x4f\x63\x71\x2e\x38\x9d\xa7\xdd\x3c\xd4\xa5\xf4\x4c\x35\x0b\x24\xf7\x0c\x36\xbf\xa7\x09\x3e\xe3\xc5\x36\xa6\x4c\xf5\x69\x37\x58\x35\xe9\x3e\x2f\xb5\x7f\x4a\x49\x1d\x44\xf9\x4c\x4c\xf7\x39\x34\xc3\x43\x5b\x3e\x37\x3b\x90\x9c\xd9\xad\xa2\x4c\x58\x7d\x91\x8f\xd6\x52\x1f\xd5\xc2\x27\x8c\xba\xbc\x4a\xb8\x8a\xf6\x16\xcb\x85\xeb\x2a\x85\x7b\x17\x2b\x50\x71\x32\x3f\xf6\xad\x13\x83\x3e\xe9\x8c\xdc\x16\x72\x47\x47\xc9\x22\xee\x17\x83\x6d\xaa\x9d\xd7\x53\xed\xdc\xee\xcb\xd2\x54\xf1\x3c\x9e\x0b\x46\x5e\x02\x79\x09\xe4\x25\x90\x97\x40\x5e\x42\xd9\xe2\x0b\xf0\x9e\xd1\x88\xc0\x40\x61\xa0\x30\x50\x18\x28\x0c\x14\x06\xba\x2c\x06\x0a\x96\x00\x4b\x80\x25\xc0\x12\x83\x63\x89\x33\xd0\xbd\xa6\xf5\xc8\xed\x86\xf0\xb4\x26\xf9\xa5\x11\x37\xad\x80\x4e\xe5\x0e\xeb\x12\x9c\xdd\x64\x58\xc6\xd3\x9b\x4d\x2e\x8e\xbf\xe4\x0a\xc4\x66\x70\xd4\x97\xb4\xec\x88\xb0\xa8\x83\xac\xec\x5c\xa4\x66\x2e\x0a\xf3\x76\xb9\xf7\x82\x9e\xc9\x98\xf2\x5e\x0c\xb3\x35\x04\x53\x3b\xf4\x8a\xc1\xba\xd5\x77\xd6\xf4\xca\x1f\x6c\x71\xe8\xa5\xe2\x93\xaa\xa3\xec\xb4\x6b\x5b\x75\x24\xa3\x13\xbf\x99\xae\xb9\x13\xbe\x8a\xb3\x45\x57\x65\x98\x41\xe0\x59\xb6\x74\x1c\xd3\x88\x96\x29\x03\x93\x9e\x6f\x08\x37\x8c\x2c\xb9\xc4\x93\x7e\x34\xbf\x45\xa3\x18\x3e\x88\x40\x24\xe6\x50\xb6\xb6\x26\xa9\xc1\x91\xe6\xa0\x8c\x5e\x79\xbe\xf1\xe6\xed\xdf\xa2\x6d\x7d\xd3\x92\xb8\xca\xf1\xdc\x9d\x32\x7e\x64\x84\xc9\xf2\xdc\xd0\xb4\x5d\xb5\x3a\xc9\x08\xce\x71\x5b\x19\xc2\x8f\x61\x9a\xf1\xf5\x39\xb5\xef\x77\x9e\x63\xba\xbb\x8d\xe7\xef\x6e\xf6\xdf\x76\x37\x07\xd7\xb6\xbc\xad\xb8\xf9\x8f\x8f\xc1\x5d\x74\x94\xce\x21\xe1\x78\x70\xfa\x9c\x1e\xad\xac\xa5\xf9\x1a\x31\x6d\x0d\x98\xb7\x2d\x0c\x98\x77\x2a\xbe\xa5\xdb\x85\xbf\x6d\xbc\x70\x95\x4d\xab\xdb\x95\x2f\xcf\x66\x94\x46\xc9\x2c\x6c\xc6\x0b\xa3\x93\xf2\xc6\xcd\xff\x44\xcb\xde\x5f\x23\x09\x70\xb4\x37\xc5\x4e\x45\x37\x90\xda\xc8\x9d\x1d\xc3\x6b\x8e\x86\x17\xc5\xcd\x2b\x2a\x6e\xa6\x8a\x8b\x2a\x2e\xaa\xb8\xa8\xe2\xc2\x67\xac\x7a\x8b\xb4\x2c\x99\x98\xc6\xff\xa2\xe2\xa3\xa1\xe2\x63\x1e\x6e\x58\x1a\xce\xee\xbd\xce\xc3\x17\xe6\xb6\x60\x7e\xb5\x75\xa6\xa2\x5d\xdb\xb9\x52\xac\x2c\x84\x46\x8a\xbb\x55\xbc\x95\x3b\x31\x93\xc8\xc8\x4b\x68\x9a\x0c\x8b\xc7\x0e\x6b\xcd\x25\x28\x33\x61\x6f\x86\x0f\xe5\xe0\x4c\xfe\x9b\xfb\xa5\x86\xf0\x0c\x2c\x37\x3f\x5f\x40\x28\xe9\x7b\x27\x0d\xe6\x6b\xb9\xef\x0f\xf5\x4b\xd7\xa3\xf0\x77\xa2\xd5\x96\x41\xe8\x9b\xa1\xd8\xd9\xd6\x75\xfb\x7d\xa2\xbf\x9f\xe3\x2d\xe5\x22\xd9\x66\xcd\xdf\x9b\x7e\x68\xcb\xe2\x18\x95\x29\xd2\x71\xfd\x97\x67\xd5\x20\x96\x36\x14\xd6\xac\xb1\x9d\xee\xf2\x29\x1b\x06\x11\xb6\x85\x47\xd8\xd6\x83\x36\x0b\x89\xe6\xc9\xcb\xa5\x8a\x21\xa2\xd5\xe6\x58\x60\xfb\xaa\x62\x25\x7a\x2d\xe3\x0b\xaa\x02\xd2\x74\xe4\x9e\xae\xe7\x5e\xab\xbd\xe5\x16\x32\xc4\x17\x18\xaf\x7e\x09\x3c\xf7\x4e\xd5\x99\xfe\x16\xad\x79\xf1\xdf\x9f\x93\x95\xf0\xf8\x9f\xaf\x75\x62\xae\xed\x9f\x9b\x0f\x9e\x6f\xc9\x18\xe8\xce\x93\x93\xef\x19\x5f\x2e\xef\xa3\xff\xfb\x72\x69\xdc\xe6\x46\x53\xa6\xb1\xaa\x80\xe5\x21\x38\xd6\xd4\x5d\x9b\x96\x9c\x00\x59\xa9\xe8\xd8\x56\x1c\x82\x11\xce\x36\x30\xbc\xef\xf1\xdc\xaa\x4a\xbe\xbd\xf0\xf6\x8e\xd8\x18\xea\x9c\xb2\x40\x39\x79\xa6\x64\x32\x69\xe9\x44\xa4\xa7\xef\x32\xbc\xd1\x89\x96\x9b\xfa\x87\xfb\x30\x3f\xf7\x61\x5f\xc8\xc4\x9c\x85\x03\x71\xe8\xdd\xa7\xdf\x3b\xa6\xd5\xd5\xac\x8b\xf7\x5e\xb0\x61\x47\xbe\x1a\x46\xdd\xba\x8c\x3a\x8d\x6c\x27\x3e\xf1\xe9\x2f\xe4\xab\xad\xcb\x36\x39\xcc\x24\xb4\x79\x61\xb4\x4b\xfa\x92\x85\x2b\x75\x4d\x97\x7a\xa7\x15\x71\x95\xb3\xbb\xb5\x9f\xec\xed\xc1\x74\xb2\x15\x53\x66\xaa\x6b\x90\xbb\xf5\x4d\x26\xdf\xe1\xa7\x34\x53\xe2\x4a\x1e\xe9\xea\xa8\x72\x93\x93\x2d\x49\x2d\x22\xc3\x76\x83\x50\x98\xb9\x88\x65\xd1\x5e\xfa\x5e\x1b\x06\xfb\xb5\x50\x1e\x42\x1d\x93\xae\x38\x57\x96\xe1\xfd\xfc\x24\xdc\x15\x17\x33\xc9\x29\x5c\x47\x45\x13\xd2\x71\x0b\x96\x8e\x6b\x66\x4a\x4d\xb2\x71\xdd\x1b\xeb\xb6\xe3\x65\x88\xc5\x21\x16\x87\x58\x1c\x62\x71\x4b\x13\x8b\x6b\x5e\x79\x4b\x85\xe2\x06\xce\x4e\x18\x4d\x1e\xae\xf9\xf6\xab\xa5\xe1\x74\x1e\x83\x73\x04\xe1\x9a\xc7\xa0\x5a\x0c\x6e\xe0\x31\x40\x02\x0e\x09\x38\x24\xe0\x90\x80\x43\x02\x6e\x30\x09\xb8\x16\xab\xff\x89\xfc\x5b\x6d\xe9\xd4\x8a\x92\x13\xdb\xdd\xcd\x82\x25\xec\x9a\x87\xbb\x4e\xbe\x6e\xdc\x71\x47\xb4\x6e\x90\x19\x3d\x15\xac\x1b\x78\x5a\x27\x95\xa9\x6b\x1e\x9e\x1a\x89\xba\xa1\x97\x4d\x5d\x85\xe9\x9a\x07\xad\x04\x64\x74\x8e\xe7\xc5\x7f\xfd\xf9\x22\x2a\x56\x22\x88\x30\x10\x1c\xcb\x12\x31\x37\xf9\xde\x97\xf6\x6d\xe9\x85\x8c\xfd\x78\xb4\xf1\xa5\x1f\x13\xdb\x83\x91\x9b\x70\x74\x5e\xae\x72\x4e\x6f\xe6\xd8\xdd\xb9\x1a\x4c\x0d\xa6\x36\x23\xa6\x06\x4f\x83\xa7\xc1\xd3\xe0\x69\xf0\x34\x78\x1a\x3c\x0d\x9e\x06\x4f\x83\xa7\xc1\xd3\xe0\x69\xf0\x34\x78\x1a\x3c\x0d\x9e\x36\x2f\x9e\x86\x7e\x09\x88\x70\x36\x40\x09\x44\x08\x22\x04\x11\x82\x08\x0b\x83\x36\x21\x22\xfc\x2a\x42\xf3\xcd\x4d\x27\x16\x38\x49\x41\x6c\x61\xce\x77\x22\xcc\xdb\xee\x6a\x7a\x6b\x50\xde\x4e\x84\x59\x90\x27\xef\xff\xf6\xee\xe3\xbf\xca\x76\xa5\x14\xf8\x4c\xc6\x96\x19\xc8\xc5\x75\xe2\x92\x4f\x4a\x66\xdf\x8b\xec\xf9\xdb\xbe\x68\x35\x05\xaa\x03\x36\x25\xc8\x48\x36\x17\x4b\x52\x6b\xde\x94\xd3\x06\x05\xf2\x1e\xde\xa5\x07\xa3\x5f\x41\xee\xec\x50\x20\x28\x10\x14\x08\x0a\xb4\x70\x0a\xd4\x4e\xb2\xa5\x94\x04\x8d\xa6\xa6\x83\xe8\x51\xeb\x89\x9a\x52\xf4\x68\x34\x74\x77\x86\xcc\x50\x29\xba\xa2\x7b\x0e\xdd\x73\x34\x7b\xfc\xcf\xa1\xb6\xed\xc6\xa5\x9a\xdc\x8e\xf6\xf8\xc3\x70\x61\xb8\x30\x5c\x18\x2e\x0c\x77\x30\x86\xdb\xf2\x5b\x70\xc2\x71\x69\x2a\x47\x53\x39\x9a\xca\xd1\x54\x6e\x16\x4d\xe5\xda\x3f\x90\x0b\xce\x4e\x68\x37\x0f\x75\x19\x0a\x53\xcd\x02\xb9\x0a\x83\xcd\xef\x69\xbe\xc2\x78\xb1\x8d\x29\x33\x17\xda\x0d\x56\x4d\xf6\xc2\x4b\xed\x9f\x52\x5c\x07\x60\xa6\x51\x64\x91\x2b\x67\xf6\xad\xed\x16\x79\x34\x99\x34\x2c\xe8\x2c\xdc\xd4\x08\xcd\x23\x55\xc4\xcc\x8f\xbd\xec\xc4\xb4\x2f\x2d\x36\xaf\x61\xde\xd1\x51\x4e\x88\xf7\x8b\x39\x37\xe5\xa9\xeb\x29\x4f\x6d\xf7\xa1\x69\x2a\x51\x1d\xcf\x23\x23\x4d\x81\x34\x05\xd2\x14\x48\x53\x20\x4d\xa1\x6c\xf1\x85\x7f\xcf\x68\x44\x40\xa2\x20\x51\x90\x28\x48\x14\x24\x0a\x12\x5d\x16\x12\x85\x52\x40\x29\xa0\x14\x50\x8a\xc1\x29\xc5\x19\x24\x5f\xd3\x6a\xcb\x76\x43\x78\x5a\x71\xb9\xa8\x76\xe1\x95\x3b\xac\x4b\x0d\x34\xdf\xfb\x53\xc6\xf2\x37\xa7\x1d\x11\xd7\x0d\x93\x34\xed\xb0\xd7\x08\x90\x3a\xc8\x82\xce\x45\x57\xe3\xa2\x30\x79\x97\x7b\x2f\xe8\x99\x96\x29\x67\xc6\x30\x5b\x83\x31\xb5\x43\xff\x68\x4c\xe7\x6e\xec\x25\x0b\x06\x2d\xd9\xd7\x53\x9d\x44\x4b\x76\x5a\xb2\x97\x5c\xcc\x7c\xac\x9b\x19\xf5\x65\x7f\xd1\xd5\xbf\x6d\xbc\x7a\x95\x7f\xab\xe5\xe5\x2f\xd4\xac\x94\x26\xcb\x7c\xcc\xca\x0b\xa3\xbb\x88\x47\x49\x3f\x8d\x01\xb5\x3c\xda\x9b\x6c\x15\xfa\x1d\xa8\x76\xe4\xce\x8e\x6d\x36\x47\xdb\x8c\x3a\xe9\x15\xd5\x49\x53\x10\x46\x41\x18\x05\x61\x14\x84\xe1\x56\x56\xbd\x45\x5a\x56\x5f\x4c\xe3\x98\x51\x3c\x12\x6f\x57\x5b\x3c\x32\x23\xd7\x2c\x8d\x82\xf7\x5e\x32\xe2\x0b\x73\x5b\x30\xc4\xda\xfa\x56\xd1\xae\x67\x78\x56\x2c\x34\x84\x50\xce\x7e\x53\x77\x62\x4e\x11\x94\x97\x80\x39\x34\xfc\x4f\x6f\x73\x32\xd6\x28\xb9\x7e\x27\x01\xe8\x6b\xb9\xef\x0f\xf5\x2b\xd9\xa3\xf0\x77\xa2\xd5\x96\x41\xe8\x9b\xa1\xd8\xd9\xd6\x75\xfb\x7d\xa2\xbf\x9f\xe3\x2d\xe5\x9a\xd9\xe6\x3b\xb0\x37\xfd\xd0\x96\x65\x37\x2a\x07\xa5\xe3\x37\x61\x5f\x6c\x12\xbb\x44\x42\x5a\x63\x5e\xdd\xe5\x33\x42\x0c\x82\x70\x0b\x0f\xc2\xad\x07\x90\x16\xf2\xd8\x93\x97\x4b\xd5\x5a\x44\x4b\xce\xb1\x7e\xf7\x55\xc5\x72\xf4\x5a\x86\x20\x54\x81\xa5\xe9\xc8\x3d\x5d\xcf\xbd\x56\x7b\xcb\x2d\x64\x14\x30\x30\x5e\xfd\x12\x78\xee\x9d\x2a\x63\xfd\x2d\x5a\xf8\xe2\xbf\x3f\x27\xcb\xe1\xf1\x3f\x5f\xeb\x44\x6e\xdb\x3f\x37\x1f\x3c\xdf\x92\x61\xd2\x9d\x27\x27\xdf\x33\xbe\x5c\xde\x47\xff\xf7\xe5\xd2\xb8\xcd\x8d\xa6\xcc\x92\x55\x31\xcd\x43\x70\x2c\xd9\xbb\x36\x2d\x39\x01\xb2\x10\xd2\xb1\xad\x38\x4a\x23\x9c\x6d\x60\x78\xdf\xe3\xb9\x55\x85\x82\x7b\xe1\xed\x1d\xb1\x31\xd4\x39\x65\xfd\x73\xf2\x4c\xc9\x5c\xd5\xd2\x89\x48\x4f\xdf\x65\x78\xa3\x13\x2d\x37\xb3\x10\x97\x62\xce\x2e\xc5\x5e\xd3\xfe\xdf\xcd\x4e\xc5\xa1\x77\xdf\x7f\xef\x98\x56\x57\x53\x2f\xde\x7b\xe9\xc6\x1e\xe9\x70\x58\x7b\x2b\xb4\xf6\x34\x32\xaa\xf8\xf6\xa7\xbf\x90\x0e\xd7\xea\xea\x97\x6a\xb9\x1c\xe6\x14\x0c\xbd\x30\xce\x48\x27\x93\x95\x34\x75\x9d\xa1\x7a\x07\x1f\x71\xd9\xb5\xbb\xb5\x9f\xec\xed\xc1\x74\xb2\x25\x5c\x66\x2a\xb4\x90\x1b\x84\x4d\x26\x89\xe2\xa7\x34\xfd\xe2\x4a\x1e\xe9\xea\x28\xbb\x93\xd3\x51\x49\x8d\x26\xc3\x76\x83\x50\x98\xb9\x40\x67\xd1\xa4\xfa\xde\x1c\x3d\xfb\xb5\x50\xaa\x42\x75\x95\xae\xa0\x58\x16\x07\xfe\xfc\x24\xdc\xb5\x57\x57\xc9\x79\x5c\x51\x89\x15\xd2\x76\x0b\x96\xb6\x6b\x26\x53\x4d\xb2\x76\xdd\xdb\x9a\xb6\xa3\x6e\x88\xd9\x21\x66\x87\x98\x1d\x62\x76\x4b\x13\xb3\x6b\x5e\x79\x4b\x85\xec\x06\xce\x71\x18\x4d\xbe\xae\xf9\xf6\xab\xa5\xeb\x74\x1e\x83\x73\x04\xeb\x9a\xc7\xa0\x5a\xac\x6e\xe0\x31\x40\xa2\x0e\x89\x3a\x24\xea\x90\xa8\x43\xa2\x6e\x30\x89\xba\x16\xab\xff\x89\x3c\x5d\x6d\x79\xd6\x8a\x52\x1c\xdb\xdd\xcd\x82\x25\xf6\x9a\x87\xbb\x4e\x5e\x6f\xdc\x71\x47\x54\x6f\x90\x19\x3d\x15\xd4\x1b\x78\x5a\x27\x95\xd1\x6b\x1e\x9e\x1a\x09\xbd\xa1\x97\x4d\x5d\x85\xf3\x9a\x07\xad\x04\x69\x74\x8e\xe7\xc5\x7f\xfd\xf9\x72\x52\x56\x22\xbf\x30\x10\x30\xcb\x52\x32\x37\xf9\xe8\x97\x76\x98\xe9\x85\x96\xfd\x78\x34\xf4\xa5\x33\x13\x1b\x85\x91\xaf\x70\xf4\x60\xae\x72\x9e\x6f\xe6\xd8\x2f\x64\x6d\x70\x36\x38\xdb\xdc\x38\x1b\x8c\x0d\xc6\x06\x63\x83\xb1\xc1\xd8\x60\x6c\x30\x36\x18\x1b\x8c\x0d\xc6\x06\x63\x83\xb1\xc1\xd8\x60\x6c\x30\x36\x18\xdb\x0c\x19\x1b\xca\x28\x60\xc3\xd9\x40\x26\xb0\x21\xd8\x10\x6c\x08\x36\x2c\x0c\xda\x58\xd8\x30\xf4\x7c\x73\x27\x12\x66\xd8\x89\x07\x4e\x52\x41\x5b\x98\xe8\x9d\xd4\x98\xbd\xf7\xfc\xc7\xf4\xc1\x36\x0d\xc5\x27\xaa\x89\xde\x4e\x84\x9f\xd5\xfd\xdf\xde\x7d\xfc\xdf\xc5\x8d\x29\x18\x3e\x93\xab\xa5\x83\x38\x77\xaa\xa6\x9e\x89\xcc\x0e\x17\xd9\x93\xd6\xbe\x40\x4f\x6f\xe6\xfd\x0e\xe5\x9c\x5e\xb5\x2e\xb6\x7a\x81\xfe\x78\x73\x7b\xf7\xf1\x5f\x65\xbb\xf0\x1a\x9d\xff\x1a\x25\x03\xb9\x88\x4e\x7b\xea\x01\xf9\xbf\x4f\x6f\xba\xbe\x50\x56\x60\x6f\x7d\xfb\x49\xd1\xde\x31\xba\x85\x64\x64\xd4\xbd\x7b\xe3\xdd\xe7\x8f\xef\xe5\xe9\x6b\x5e\x84\xb8\x6b\x48\xf2\x2e\xbc\x4b\x0f\x50\xba\x33\x3d\x43\x20\xa2\x10\x51\x88\x28\x44\x74\x81\x44\xb4\x9d\xf4\x51\x29\x15\x1d\x4d\x95\x0a\xf1\xb0\xd6\x13\x35\xa5\x78\xd8\x68\x18\xfb\x0c\xb9\xae\x52\x8c\x4b\x07\x2b\x3a\x58\x69\xf6\xf8\x9f\x93\xc1\xd0\x6e\x5c\xaa\xb3\x18\x46\x7b\xfc\xc9\x67\x20\x9f\x81\x7c\x06\xf2\x19\xc8\x67\x18\x2c\x9f\xa1\xe5\xb7\xe0\x24\xa7\x81\xc6\x8e\x34\x76\xa4\xb1\x23\x8d\x1d\x67\xd1\xd8\xb1\xfd\x03\xb9\xe0\x4c\x9d\x76\xf3\x50\x97\xad\x33\xd5\x2c\x90\xb7\x33\xd8\xfc\x9e\xe6\xee\x8c\x17\xdb\x98\x32\x8b\xa7\xdd\x60\xd5\x64\xf2\xbc\xd4\xfe\x29\xc5\x73\xb0\xe3\x75\x36\x6b\x2d\x43\xc6\x99\x7d\x6a\x9b\xb4\x1e\x4d\xa5\x5e\x2a\x9b\x73\x34\xba\xbc\xac\xb9\x8c\xf1\x16\x4b\x9a\x47\x6d\xd1\xaa\xa2\x63\x7e\xec\x51\x27\x66\x7c\xa2\xb9\xd0\x86\x67\x47\x47\x38\xd2\xec\x97\x30\x6c\xca\xb0\xd7\x53\x86\xdd\xee\x23\xd2\x54\x8a\x3d\x9e\xb7\x45\x0a\x02\x29\x08\xa4\x20\x90\x82\x40\x0a\x42\xd9\xe2\x0b\xdb\x9e\xd1\x88\x80\x3b\xc1\x9d\xe0\x4e\x70\x27\xb8\x13\xdc\xb9\x2c\xdc\x09\x81\x80\x40\x40\x20\x20\x10\x83\x13\x88\x33\x28\xbd\xa6\x55\xc5\xed\x86\xf0\xb4\xb2\x78\x51\xbd\xf6\x2b\x77\x58\x97\xfe\xed\x26\x21\x17\x4f\x6f\x36\x69\x00\x7f\xb1\xf5\x84\xcd\x70\xa8\xb7\x76\x92\x23\x00\xa1\x0e\xf2\xb6\x73\xd1\x87\xb9\x28\x4c\xd8\xe5\xde\x0b\x7a\xa6\x5f\xca\x59\x31\xcc\x56\xa0\x4b\x6d\xdc\x0f\xea\xea\x56\xae\x59\xa3\x29\xd4\xff\x02\xd0\x4b\xe5\x26\xd5\x43\xd9\xf9\xd6\xb6\x7a\x28\xdb\x5d\x5f\x05\xd1\xa4\x2e\x96\x19\x04\x9e\x65\x4b\xaf\x30\x0d\x57\x99\x32\xea\xe8\xf9\x86\x70\xc3\xc8\x4c\x4b\xdc\xe4\x47\xf3\x5b\x34\x8a\xe1\x83\x08\x44\x62\xeb\x64\x6b\x64\x92\x5a\x1a\x69\xeb\xc9\xd0\x94\xe7\x1b\x6f\xde\xfe\x2d\xda\xd6\x37\x2d\xc9\xa2\x1c\xcf\xdd\x29\xcb\x46\x86\x8f\x22\x3f\xdf\xb4\x5d\xb5\x16\xc9\xf0\xcc\x71\x5b\x19\x9f\x8f\x49\x99\xf1\xf5\x39\x35\xde\x77\x9e\x63\xba\xbb\x8d\xe7\xef\x6e\xf6\xdf\x76\x37\x07\xd7\xb6\xbc\xad\xb8\xf9\x8f\x8f\xc1\x5d\x74\x94\xce\xf1\xde\x78\x70\xfa\x9c\x1e\xad\x4c\xa1\x19\x5a\x28\x6d\xad\x93\xb7\x2d\xac\x93\x77\x2a\x6a\xa5\xcd\x15\xbf\x6d\xbc\x62\x95\x07\xab\xcd\x25\x2f\xcc\x04\x94\xa6\x86\xde\x26\xe0\x85\x71\x96\x1e\x46\x49\x17\x97\x01\x65\x31\xda\x59\x54\x45\x29\x0c\x04\x30\x2a\x46\x15\x33\x2a\x3b\xc9\xda\x9a\x51\x94\x1c\xaf\xa8\xe4\x98\xda\x2a\x6a\xab\xa8\xad\xa2\xb6\x0a\x0f\xb0\xea\x2d\xd2\xc8\x03\xc4\x9f\xd2\xa1\xde\x42\x73\x8f\x2a\x0d\x34\xf7\x5e\x65\xe1\x0b\x73\x5b\x30\xae\xda\xf8\x47\xd1\x6e\x0d\xde\x11\x8b\x05\x6f\x9e\xfa\xbd\xe2\xcd\xdb\x09\xdd\x03\x19\x2f\x61\x59\xd9\xf6\x0d\x15\xa7\xa7\x75\xc3\x18\x68\x4e\x62\xee\x4e\xf2\xc5\xd7\x72\xdf\x1f\xea\x57\xa9\x47\xe1\xef\x44\xab\x2d\x83\xd0\x37\x43\xb1\xb3\xad\xeb\xf6\xfb\x44\x7f\x3f\xc7\x5b\xca\xf5\xb0\xcd\x9a\xbe\x37\xfd\xd0\x96\x55\x28\x2a\x25\xa3\xc3\xfa\x2e\xcf\xb8\x44\xa0\x58\x13\x1c\xbb\xcb\x27\x44\x18\x04\xc5\x16\x1e\x14\x5b\x0f\x5b\x2c\xa4\x71\x27\x2f\x97\x2a\x35\x88\x96\x98\x63\xf9\xea\xab\x8a\xe5\xe7\xb5\x0c\x09\xa8\xfa\x42\xd3\x91\x7b\xba\x9e\x7b\xad\xf6\x96\x5b\xc8\xa8\x5c\x60\xbc\xfa\x25\xf0\xdc\x3b\x55\xc5\xf9\x5b\xb4\xd0\xc5\x7f\x7f\x4e\x96\xbf\xe3\x7f\xbe\xd6\x09\x7a\xb6\x7f\x6e\x3e\x78\xbe\x25\xc3\x96\x3b\x4f\x4e\xbe\x67\x7c\xb9\xbc\x8f\xfe\xef\xcb\xa5\x71\x9b\x1b\x4d\x99\x24\xaa\x62\x8c\x87\xe0\x58\xb1\x76\x6d\x5a\x72\x02\x64\x1d\xa0\x63\x5b\x71\xd4\x44\x38\xdb\xc0\xf0\xbe\xc7\x73\xab\xea\xe4\xf6\xc2\xdb\x3b\x62\x63\xa8\x73\xca\xf2\xdf\xe4\x99\x92\xa9\x9a\xa5\x13\x91\x9e\xbe\xcb\xf0\x46\x27\x5a\x6e\x62\x1d\xee\xc1\x5c\xdc\x83\x7d\x6f\x7d\xdd\xc7\x70\x10\x0e\xbd\xfb\xe5\x7b\xc7\xb4\xba\x98\x6e\xf1\x9e\x4b\x34\xde\xc8\x06\xc3\x62\x5b\x89\xc5\xa6\x91\x61\xc4\xf7\x3b\xfd\x85\x6c\xb0\x45\x5b\x1c\x07\xdd\x03\x92\x17\x46\xbb\xcc\x2a\xd7\xdb\x8a\xc9\xfa\x0c\x7d\xf2\xb6\xe2\x8c\xd4\xaa\x6c\x97\xa1\xe2\xae\xa4\x58\x21\xf0\x83\xc0\x0f\x02\x3f\x08\xfc\x20\xf0\x33\x89\xc3\x81\x5f\xd8\x7a\xa2\xe8\x31\xa4\x93\x0e\x13\x09\xbf\x2b\x4a\xf8\x45\x74\x0b\xd1\x2d\x44\xb7\x10\xdd\x42\x74\x0b\xd1\x2d\x44\xb7\xa8\x83\xa1\x0e\x86\x3a\x18\xea\x60\x8a\x4f\x24\x3d\x86\x50\xf8\x43\xe1\x0f\x85\xbf\x99\x2b\xfc\x95\xa2\x39\x70\x3c\x3d\x86\x4a\xf6\xd1\xaf\xc7\x50\x81\xf0\xea\xdd\x61\xa8\x81\x64\x17\xfb\x0b\x75\xa5\xd7\x74\x17\xa2\xbb\x90\xfa\x89\xee\x42\x24\x1f\x90\x7c\x40\xf2\x01\xc9\x07\x24\x1f\x40\xb5\x01\x9d\xcd\x23\x02\xe8\x04\x74\x02\x3a\x01\x9d\x80\xce\x15\x83\x4e\xd8\x03\xec\x01\xf6\x00\x7b\xa0\xbb\x10\xdd\x85\xe8\x2e\x94\xfe\x72\x66\xed\xe3\x27\x6f\x2b\xe8\x2d\x54\xbe\x99\x56\x20\x88\xce\x42\x7d\x75\x16\x6a\x00\x5c\xa7\x7d\x85\xc6\x2d\xd0\x1c\x49\x47\x42\xde\x54\xbb\x97\x9e\x6a\xa1\x05\x54\x0b\xa1\x22\x81\x8a\x44\xc9\xc5\xe8\x6c\x97\xcc\x49\x43\xe2\xbc\xeb\xd5\x40\xff\xfa\x9c\x0b\x5e\x98\xd1\x37\x72\x37\xa1\xf3\x8d\xbe\x0b\xe3\x0c\xc5\x8b\x09\x3a\x09\x9d\x29\x76\x81\xc4\x45\xe9\x88\x62\x38\x65\x27\x59\x5b\xc3\x89\xa2\xe2\x15\x15\x15\x53\x3d\x45\xf5\x14\xd5\x53\x54\x4f\xe1\xf3\x55\xbd\x45\xda\xf8\x7c\xf8\x50\xd3\x57\x53\x68\xed\x45\xa5\xe1\xe4\x91\xfa\x07\x35\x78\x45\xc5\xee\x41\x27\x3e\x11\x4b\x04\x6f\x5c\xcd\x1b\x37\x6e\xe7\xa0\x71\x49\x55\xa1\x6f\xd0\xe9\xc9\xe9\x1a\x44\xd7\xa0\x69\xba\x06\x35\xac\xea\x27\x3d\x83\x96\x01\x0b\xe9\x18\x44\x00\x6c\x7d\xe4\x90\x8e\x41\x7d\x3e\x37\x74\x0c\x22\x6e\x80\x53\x50\x32\x8e\x33\xee\x17\xf4\x12\xb7\x60\xb4\x6e\x41\x8d\x8e\xf8\x49\xaf\xa0\x65\x18\x6d\x64\x78\x61\xa7\xad\xc2\x4e\xd3\xc8\x1c\xe2\xab\x9d\xfe\x42\x86\x57\x7a\xe8\xa5\x59\x19\xa3\xf6\x08\x1a\x28\x5f\x2a\xfe\x1f\xcb\x31\x83\x60\xa2\x3e\x41\xb1\xc9\xf1\x2e\xba\x84\x33\xf2\xa7\xd2\x63\x54\xed\x4f\x3a\x15\xa2\x3d\x88\xf6\x20\xda\x83\x68\x0f\xa2\x3d\x93\xb8\x1e\x78\x88\xad\x27\x8a\x8e\x41\x3a\x69\x2b\x91\xdc\xbb\xa2\xe4\x5e\x84\xb4\x10\xd2\x42\x48\x0b\x21\x2d\x84\xb4\x10\xd2\x42\x48\x8b\x9a\x17\x6a\x5e\xa8\x79\xa1\xe6\xa5\xf8\x44\xd2\x31\x08\xd5\x3e\x54\xfb\x50\xed\x9b\xb9\x6a\x5f\x29\xa4\x03\xcc\xd3\x31\xa8\x64\x1f\xcd\x3a\x06\x55\x60\x5e\x8d\xdb\x06\xb5\x04\xdb\xb9\xde\x41\x2f\x85\xd9\x34\x10\xa2\x81\x90\xfa\x89\x06\x42\xe4\x22\x90\x8b\x40\x2e\x02\xb9\x08\xe4\x22\x00\xb9\xe1\x9e\xcd\x23\x02\xf7\x84\x7b\xc2\x3d\xe1\x9e\x70\xcf\x15\x73\x4f\x50\x04\x28\x02\x14\x01\x8a\xa0\x81\x10\x0d\x84\x68\x20\x94\xfe\x72\x4e\x59\x64\x36\x86\x4f\x17\xa1\xf2\xcd\xf4\x83\x43\xb4\x12\xea\xa5\x95\x50\x4b\xe8\x55\xe8\x27\x34\x4d\x0d\xe7\x18\x92\x13\xb9\x3b\x6b\xb7\x10\x50\x55\xb4\x80\xaa\x22\x74\x27\xd0\x9d\x28\xb9\x18\xed\x0d\x96\xd9\x88\x4f\x74\xbb\xe8\xa9\xf5\xb1\xbb\x5c\xf5\xc2\xec\xc2\x31\x1b\x0d\x75\xb7\x0b\x2f\x8c\xb3\xd5\x33\xc6\xee\x39\xd4\x4d\x38\x03\xb9\x8c\xec\xd9\x31\xae\xe6\x68\x5c\x51\xa0\xbc\xa2\x02\x65\x2a\xb1\xa8\xc4\xa2\x12\x8b\x4a\x2c\xfc\xc2\xaa\xb7\x48\x2f\xbf\x10\x17\x6b\x72\x17\x6b\xdc\x3e\x44\x3a\x56\x66\x94\x34\x23\x6a\xe9\x2e\xe5\x3a\x12\x55\x3a\x4b\xac\x1d\xbc\x85\xe9\xef\xd3\xf7\x26\x9a\x86\x7f\x65\x1b\x14\x55\x5f\x01\x5d\x8a\xe8\x52\x34\x41\x97\xa2\x96\xcb\x7d\xbe\x55\xd1\xb2\x38\x24\xfd\x8a\x08\x99\xad\x8f\x47\xd2\xaf\xa8\xcf\xe7\x86\x7e\x45\x44\x1a\xf0\x16\x96\xd6\xb4\xa8\x0f\x7f\x61\x9c\xce\x45\xad\xbd\xf6\x7c\xfb\xa2\x65\x19\x72\x24\x94\x61\xc0\xad\xc7\x80\xd3\xc8\x4e\xe2\x73\x9e\xfe\x42\x42\x59\xc9\x45\x2f\xcd\x06\x19\xaf\xa5\xd1\xc0\x99\x59\x4f\x9e\x73\x78\x14\x66\x18\x9a\xd6\xc3\xa3\x04\xdc\x53\xb4\x36\xfa\x43\x5e\xc5\x6d\x7a\x15\xed\xb3\xb4\x8e\xed\x8d\xea\x8e\x41\xce\x16\xb2\x42\xc8\x0a\x21\x2b\x84\xac\x10\xb2\x42\x93\x38\x25\xf8\x8e\xad\x27\x8a\x16\x47\x3a\xa9\x3f\x91\x41\xbc\xa2\x0c\x62\xa4\xbe\x90\xfa\x42\xea\x0b\xa9\x2f\xa4\xbe\x90\xfa\x42\xea\x8b\xc2\x1a\x0a\x6b\x28\xac\xa1\xb0\xa6\xf8\x44\xd2\xe2\x08\x5d\x41\x74\x05\xd1\x15\x9c\xb9\xae\x60\x29\xac\x03\xd9\xd3\xe2\xa8\x64\x1f\xcd\x5a\x1c\xd5\xa0\x5e\x8d\xdb\x1c\x9d\x01\xb9\x73\xad\x8e\xfa\x00\xdb\xb4\x3b\xa2\xdd\x91\xfa\x89\x76\x47\xe4\x25\x90\x97\x40\x5e\x02\x79\x09\xe4\x25\x00\xbc\x61\xa0\xcd\x23\x02\x03\x85\x81\xc2\x40\x61\xa0\x30\xd0\x15\x33\x50\xb0\x04\x58\x02\x2c\x01\x96\xa0\xdd\x11\xed\x8e\x68\x77\x94\xfe\x72\x4e\xdd\x64\x31\x8e\x4f\xcb\xa3\xf2\xcd\xf4\x84\x45\xb4\x3d\xea\xa5\xed\xd1\x19\x10\xac\xd0\xfa\x68\xba\xfa\xce\x31\xd4\x2a\x4e\xee\xae\xdd\xc2\x40\xd5\xd1\x02\xaa\x8e\x50\xac\x40\xb1\xa2\xe4\x62\x66\x61\xc4\xcc\x46\xb5\xa2\xfb\x85\x4f\xad\xd3\xdd\xf5\xca\x17\x66\x33\x8e\xd9\x0e\xe9\x65\x36\xe3\x85\xd1\x45\x78\x63\xec\xae\x48\xdd\x35\x37\x50\xda\xc0\xee\x5a\x82\xdd\x45\x6d\xf3\x8a\x6a\x9b\x29\xe2\xa2\x88\x8b\x22\x2e\x8a\xb8\x70\x19\xab\xde\x22\xfd\x5c\x46\x3c\xaf\xdc\xfd\xac\xa3\x4b\x92\xae\xc5\x1d\x25\x9d\x92\xce\x70\xa1\x72\xdd\x92\x6a\x1d\x28\xd6\x13\xde\x4a\xcd\xba\x26\x4d\x87\xd0\xb2\x9d\x93\xea\xaf\x82\xee\x49\x74\x4f\x9a\xa0\x7b\xd2\x19\x9f\x80\x7c\x07\xa5\xe5\xe1\x4c\xba\x28\x11\x5a\x5b\x1f\xd2\xa4\x8b\x52\x9f\xcf\x0d\x5d\x94\x88\x48\xe0\x41\x2c\xb1\x93\x52\x5f\x3e\xc4\x38\xdd\x94\xce\xf2\xec\xf3\x1d\x95\x96\x67\xd8\x91\xa7\x86\x51\xb7\x2e\xa3\x4e\x23\xdb\x89\x4f\x7c\xfa\x0b\x79\x6a\x2b\xb2\x4d\xc6\xeb\xb0\x34\x61\xb2\xd7\x4d\xa0\xe4\xc3\x32\x39\x5f\xc3\x70\x0b\x75\x9e\xe4\xeb\xd5\x3f\xc1\x88\x65\xd0\x58\xa2\x78\xd3\xe1\x18\x25\xf3\x01\xc7\x80\x63\x94\x6e\x39\x1d\xc7\xe8\xe1\x93\x50\x4f\x34\x4a\xbe\x09\xb3\x74\x7f\xe1\x1a\xb8\xc0\xeb\x73\x81\xe1\x1a\x7d\x3e\x37\x70\x0d\x82\x1e\x78\x14\x70\x8d\xc2\xa0\x8d\xc0\x35\x7a\xf1\xfc\xeb\x09\xc7\x52\x0c\x3d\x38\x07\x46\xde\xba\x8c\x3c\x8d\x6c\x29\x3e\xf9\xe9\x2f\x70\x8e\x15\xd9\x2a\x8b\xe2\x1c\x52\x92\xeb\xc6\x0a\xec\xad\x6f\x3f\xa9\xaf\xff\x70\x60\x23\x96\x6e\x75\xb7\xf6\x93\xbd\x3d\x98\x4e\x56\x06\xce\x4c\xc5\x9a\xdf\x7d\xfe\xf8\x5e\x5e\xcc\x26\x53\xc1\xf9\x53\x5a\xfb\x79\x25\x8f\x72\x75\x94\xed\xcf\xe9\xb0\xa7\x86\x90\x61\xbb\x41\x28\xcc\x5c\x14\xb3\x68\x26\x7d\xcf\x45\xc3\xd2\xf3\xfe\x5a\xd0\xba\x42\x91\x4d\xd7\x5e\x3e\x52\x50\xf0\xe7\xa7\xf5\x2e\x46\x72\xfe\xc6\xd4\x66\x4b\x5f\x92\xf1\x48\x0c\xad\x6f\x16\xdc\xfa\xa6\x19\x2b\x35\xb5\xbd\xa9\x8d\x5b\xf5\x80\xcc\x68\x76\x43\xb3\x1b\x9a\xdd\xd0\xec\x66\x69\xcd\x6e\x9a\x57\xde\xd2\x46\x37\x03\x27\x28\x8c\xd6\xde\xa6\xf9\xf6\xab\x5b\xdb\xe8\x3c\x06\xe7\x34\xb4\x69\x1e\x83\xea\x66\x36\x03\x8f\x01\x2d\x6c\x68\x61\x43\x0b\x1b\x5a\xd8\xd0\xc2\x66\xb0\x16\x36\x2d\x56\xff\x93\xf6\x35\xb5\xda\x6f\x2b\xca\x4f\x6c\x77\x37\x0b\x6e\xc1\xd3\x3c\xdc\x75\xed\x77\xc6\x1d\x77\x9a\xee\x0c\x32\xa3\xa7\x0d\x77\x06\x9e\xd6\x49\xdb\xec\x34\x0f\x4f\x4d\x8b\x9d\xa1\x97\x4d\x5d\x1b\xeb\x34\x0f\x5a\x09\xbe\xe8\x1c\xcf\x8b\xff\xfa\xb3\x13\xf8\x2a\x11\x73\x1e\x88\x7f\x65\xa1\x97\x9b\x7c\xe7\x93\x96\xf3\xfd\xc2\xaf\x1f\x8f\x76\xbd\xf4\x5d\x62\x1b\x30\x72\x0d\x8e\x0e\xcb\x55\xce\xd1\xcd\x1c\xbb\x03\x3a\x03\x9b\x81\xcd\xe6\x82\xcd\x40\x66\x20\x33\x90\x19\xc8\x0c\x64\x06\x32\x03\x99\x81\xcc\x40\x66\x20\x33\x90\x19\xc8\x0c\x64\x06\x32\x03\x99\x81\xcc\x66\x82\xcc\xb2\x42\x25\x15\xa1\x06\x14\x4a\x20\x80\xd3\xf3\x22\x08\x20\x04\x10\x02\x08\x01\x2c\x0c\xda\xf4\x04\xd0\xf5\xb6\x42\x93\xc2\xb7\x4f\xde\x56\x8c\x5f\xf6\x16\x9d\x95\xa2\x37\xe8\xdd\x9c\xe8\xdd\xc8\x45\x6f\xd1\x2b\x02\xbf\x83\xdf\xc1\xef\xe0\x77\xf0\x3b\xf8\x1d\xfc\x0e\x7e\xd7\xd3\x6a\x0b\xbf\x83\xdf\xc1\xef\xe0\x77\xf0\x3b\xf8\x1d\xfc\x6e\x75\xfc\x0e\xe0\x05\xf0\x02\x78\xcd\x63\x46\x01\x5e\xf9\xe1\x01\x78\xcd\x17\x78\xe9\x53\xf0\xd6\x1b\xf4\x1a\xb1\xdc\xad\xc0\x03\xc0\x65\xe0\xb2\xc2\x51\xf5\xc2\x65\xa0\x32\x50\x19\xa8\x0c\x54\x06\x2a\x03\x95\x81\xca\x40\x65\xa0\x32\x50\x19\xa8\x0c\x54\x06\x2a\x03\x95\x81\xca\x40\x65\xb3\x40\x65\x85\x52\xb7\xd3\x40\x03\x85\x6e\x70\xbf\xe9\x29\x11\xdc\x0f\xee\x07\xf7\x83\xfb\x15\x06\x6d\x62\xee\x17\xff\xbf\xe5\x98\x41\xa0\x45\xb9\x5b\x8c\xd3\xde\x45\x17\x34\x72\xcd\x5b\xf6\xd4\x14\xbe\x41\xf2\xe6\x44\xf2\xc6\x2c\x7c\xcb\xbe\x27\x20\x3d\x90\x1e\x48\x0f\xa4\x07\xd2\x03\xe9\x81\xf4\x40\x7a\x3d\xad\xb6\x20\x3d\x90\x1e\x48\x0f\xa4\x07\xd2\x03\xe9\x81\xf4\x56\x87\xf4\xa0\x60\x50\x30\x28\xd8\x3c\x66\x14\x0a\x96\x1f\x1e\x28\xd8\xdc\x29\x98\x26\x35\x70\xbd\x93\xb0\xb1\x0a\xe1\x2a\xf8\x00\x0c\x0d\x86\x56\x38\xaa\x5e\x0c\x0d\x7e\x06\x3f\x83\x9f\xc1\xcf\xe0\x67\xf0\x33\xf8\x19\xfc\x0c\x7e\x06\x3f\x83\x9f\xc1\xcf\xe0\x67\xf0\x33\xf8\x19\xfc\x6c\x3e\xfc\x2c\x5b\x12\x57\x1d\x6d\xa0\x2e\x0e\x22\x38\x3d\x3f\x82\x08\x42\x04\x21\x82\x10\xc1\xc2\xa0\x4d\x4c\x04\x9f\x3c\xe7\xf0\x28\xcc\x30\x34\xad\x87\xc8\x4e\xd6\xa1\x34\xee\x0f\x79\x4d\xb7\xe9\x35\x8d\x5c\x1e\x57\x3c\x3d\x25\x72\xe0\xbd\x39\xe1\xbd\x31\x4b\xe4\x8a\xef\x0a\x98\x0f\xcc\x07\xe6\x03\xf3\x81\xf9\xc0\x7c\x60\x3e\x30\x5f\x4f\xab\x2d\x98\x0f\xcc\x07\xe6\x03\xf3\x81\xf9\xc0\x7c\x60\xbe\xd5\x61\x3e\xa0\x18\x50\x0c\x28\x36\x8f\x19\x05\x8a\xe5\x87\x07\x28\xb6\x00\x28\xa6\x49\xa5\xdc\x20\x60\x6c\xac\x6a\xb9\x1a\x54\x00\x52\x03\xa9\x15\x8e\xaa\x17\x52\x03\xa7\x81\xd3\xc0\x69\xe0\x34\x70\x1a\x38\x0d\x9c\x06\x4e\x03\xa7\x81\xd3\xc0\x69\xe0\x34\x70\x1a\x38\x0d\x9c\x06\x4e\x9b\x17\x4e\xcb\x56\xcd\xd5\x47\x1c\xa8\x9c\x03\x12\x4e\x8f\x94\x80\x84\x40\x42\x20\x21\x90\xb0\x30\x68\x53\x41\xc2\xaf\x22\x34\xdf\xdc\x74\x62\x81\x43\xf3\xac\x36\x9c\x71\x27\xc2\xbc\xed\xae\xe6\xb6\x86\xe3\xed\x44\x98\x52\x3c\x79\xf3\xb7\x77\x1f\xff\x55\xb6\xdf\x54\x18\x6f\xb6\x74\x2d\x33\x90\xb2\xca\x70\x31\x88\x4d\x3e\x26\x99\x1d\x2f\xb2\x27\x6f\xf5\x7e\x59\x81\xbd\xf5\xed\x27\xc5\xb0\xd2\x37\x4d\xb9\x44\xfd\x82\x77\x75\x4c\xc3\xf2\x1c\x47\x58\xc9\x9a\xff\xee\xf3\xc7\xf7\xf2\xf4\x35\xef\x85\xda\x31\xff\x6a\xbc\x4b\x8f\x52\x7a\x84\x0a\x32\x67\x14\x27\x53\x2d\x7e\x5f\xbd\xed\x73\xf1\x39\x4c\x56\xbf\xb2\xdf\x06\x79\x46\xdf\xcb\xbb\xfc\x5d\x0e\x57\xd0\xf2\x09\xad\x7f\x34\x81\x3d\xc0\x1e\x60\x0f\xb0\x67\x69\xb0\xa7\xc6\x68\x6d\x02\x3e\xf5\x0e\x50\xbd\xf1\x7a\xd6\xda\xfb\x5f\xd1\xc0\xc5\x61\xae\x1f\xa5\x12\x83\x15\x3d\x51\xea\x39\xc8\xdd\x5b\x36\xb1\xe2\xab\x30\xf6\xd1\x68\x05\xa1\xd8\x6e\x8c\x5b\xd7\xb0\x5d\xb5\xb2\x78\xbe\x71\x70\xd3\xc5\x69\x6b\x6c\xfd\xe7\x7f\x1d\x5c\x63\x6b\xfb\xd1\x47\xf0\x49\xa4\x4f\x7c\xb4\x7c\xca\xa0\x64\xfc\xca\x27\xcf\x46\x3c\xc0\xc6\xfd\xc1\x97\x6f\xd9\xde\xf7\x2c\x11\xc8\xe8\x61\xec\x79\xc5\x4f\xd9\xc6\xf8\x43\x9e\x51\xce\x96\x7c\x76\x7e\x32\xae\x8d\x5b\xc7\xf9\x49\xc6\x06\xb7\xd1\x2a\x7d\x70\xa3\x89\x8f\x7c\x98\xe4\x91\x8c\x0f\x27\xb6\x1d\x26\x4a\xdd\xcb\x34\xd3\x34\x1a\xa1\x6b\x37\x14\xd5\x94\x6e\xb4\x11\xf9\x77\xd6\x29\xb7\x5d\x23\x50\xbe\xb2\xf1\x55\xdc\xab\x54\xa2\x34\x9a\x7b\x34\x25\xe2\xd5\x4b\x3e\x3a\x07\xa1\x3e\x0e\x5f\x23\x77\xd4\xbd\x76\xc5\xce\x94\x0f\x68\xec\x56\x6f\x8c\x7f\xa7\x1f\x6c\x45\x76\xd2\x57\x23\xb6\x0f\xed\xc7\x47\xb1\xb5\xcd\x50\x38\xcf\xc7\x1c\x9f\xe3\x27\xd7\x76\x7e\x8c\xdd\x66\x39\xe8\xc6\xce\x37\x2d\xf9\xd6\xd8\xde\x36\x35\x08\x8e\x1f\x6d\x99\x40\x95\x3c\xa5\x87\x20\xba\xc8\xec\x74\x99\xd1\x9e\xc9\x0d\xc5\x27\xb9\x57\x6b\x60\x72\x88\x8d\xba\xce\x47\x61\xba\xa5\xd7\xd8\x61\x9a\xe5\x35\xdf\xc9\x4b\x2e\x0b\x45\x34\x04\x23\x74\x79\xfc\xcf\x81\xb3\xed\xc6\xa5\x1a\xd0\x8e\xf6\xf8\x83\x6a\x41\xb5\xa0\x5a\x50\x2d\xa8\x76\x30\x54\xdb\xf2\x5b\x70\x82\x6b\xc7\xfb\x2c\xbe\xcf\x54\x7b\xec\x1d\x61\x06\x22\x5d\x82\xee\x7c\x6f\x6f\xee\xa4\x75\x74\xe7\x39\xb6\xf5\x9c\x4b\x0c\x4e\x1e\xba\x63\xb9\x48\xf4\xd8\xbd\xd9\xfc\xe7\xc6\xf8\xac\xd6\x33\x65\xba\xec\x85\x1b\xbd\x2c\xc7\x6f\xaa\x30\x3c\x7f\xff\x60\xba\x49\xa2\xb2\x7f\x10\x37\xf7\xa6\x93\xf8\xca\x5f\x2e\xd5\xcf\x5f\x2e\x8d\x7b\xdb\x35\x1d\xfb\xbf\x93\x0f\xc9\x57\x61\x98\x5b\x49\xba\xbc\x1b\x45\x01\xb6\x47\x37\x4c\x1d\xfe\x2a\x38\xee\xa4\xfc\xd3\x8d\xf1\xb3\x2d\x17\xc7\xcc\xa5\x7b\xfe\xe9\xbd\x1d\xb9\x66\xa8\xdc\x63\xe9\xa3\x78\xe1\x43\x97\x09\x55\x77\xf0\x3e\xb9\xf7\x4a\x93\xa7\x8c\x29\xf4\xeb\x98\xc9\x5b\x8f\x5e\xd8\x07\xef\xbb\xb1\x33\xfd\xaf\xe6\x2e\x17\x96\x4c\x9d\x1a\xe1\xdf\x7b\xfe\x63\x34\x27\xa5\xe3\xf5\x7b\xe1\x8e\xaa\x87\x4b\x1a\xbd\x89\xc5\xba\x57\x63\x6b\x47\xd6\xa4\x65\x6f\x8f\xae\xb0\xb4\x15\x64\x70\x22\x9d\xe3\xe8\x63\x1d\x7f\x49\x13\x6b\x60\x93\x99\xcc\xe4\x3b\x92\x82\xc5\x34\xe9\x3e\x7f\xb2\x8d\x71\x6b\x59\x62\x1f\xca\x6f\x53\xd6\xb3\xbb\x52\xf7\x70\x65\x5c\xc7\x0f\x60\xfe\x01\x0d\xfe\x6e\x5c\xfd\xc3\xb4\xbe\xed\x7c\xef\xe0\x6e\xa3\xad\x64\x02\xbb\xdc\xa8\x30\x70\xca\x84\x8c\xed\xe3\xfc\x41\x92\x3b\xf8\x9a\x1e\xe9\xef\xc6\xd5\x07\xcf\x17\x99\xc3\x1a\x96\x19\x58\xe6\x36\xba\xfb\x78\x7c\x54\x7d\x83\x3c\x5e\xa0\x5c\xcf\x93\x03\xde\xa7\xc7\xe8\xf2\x40\xee\x8b\x8f\xfb\x34\x16\xe7\x82\x33\x10\xda\xcd\x43\x5d\x16\xc2\x54\xb3\x40\x3e\xc2\x60\xf3\x7b\x9a\x93\x30\x5e\x6c\x63\xca\xec\x84\x76\x83\x55\x93\xa1\xf0\x52\xfb\xa7\x94\xd1\x81\x92\xcf\xc4\x74\x9f\x43\x33\x3c\xb4\xe5\x73\x33\x24\xc8\x99\x1d\x2b\x2a\x35\xd5\x37\xf9\x68\x2f\x8d\x55\xb4\x59\x06\x7a\x8b\xd5\x9a\x85\xbb\x39\x2d\xd9\xec\xbd\x9c\x5c\xc5\xc9\xfc\xd8\xb7\x4e\x0c\xfa\xa4\x92\xbc\x0d\xde\x8e\x8e\x50\x80\xdb\x2f\x41\xda\x14\x9c\xae\xa7\xe0\xb4\xdd\x37\xa5\xa9\xe8\x74\x3c\xe7\x8b\x8c\x04\x32\x12\xc8\x48\x20\x23\x81\x8c\x84\xb2\xc5\x17\xd4\x3d\xa3\x11\x81\x7e\x42\x3f\xa1\x9f\xd0\x4f\xe8\x27\xf4\x73\x59\xf4\x13\x20\x01\x90\x00\x48\x00\x24\x06\x07\x12\x67\x40\x7b\x4d\x8b\x27\xdb\x0d\xe1\x69\x01\xe5\x4b\x23\x6e\x5a\xa1\x9c\xca\x1d\xd6\x25\xee\xb9\x49\x18\x46\x4c\x21\x36\x69\x14\x7f\xd9\x25\x87\xcd\xc0\x68\xcc\x46\x79\xbd\x40\xa2\x0e\xba\x9e\x73\x51\xc5\xb8\x28\xcc\xda\xe5\xde\x0b\x7a\x26\x62\xca\x77\x31\xcc\x56\xf0\x4b\x6d\xdc\x23\xfe\xea\x56\xd1\x59\x23\xa7\x32\xd0\xa2\xd0\x4b\x85\x27\x55\x46\xd9\x49\xd7\xb6\xca\x48\xc6\x24\x7e\x33\x5d\x73\x27\x7c\x15\x5d\x93\xd2\x40\x66\x10\x78\x96\x2d\xdd\xc5\x34\x8e\x65\xca\x70\xa4\xe7\x1b\xc2\x0d\x23\xfb\x2d\xf1\x9f\x1f\xcd\x6f\xd1\x28\x86\x0f\x22\x10\x89\x11\x94\xad\xa5\x49\x6a\x6e\xa4\x11\x28\x63\x56\x9e\x6f\xbc\x79\xfb\xb7\x68\x5b\xdf\xb4\x24\xa4\x72\x3c\x77\xa7\x4c\x1e\x19\x57\xb2\x3c\x37\x34\x6d\x57\xad\x4a\x32\x6e\x73\xdc\x56\x06\xee\x63\x84\x66\x7c\x7d\x4e\xad\xfa\x9d\xe7\x98\xee\x6e\xe3\xf9\xbb\x9b\xfd\xb7\xdd\xcd\xc1\xb5\x2d\x6f\x2b\x6e\xfe\xe3\x63\x70\x17\x1d\xa5\x73\x20\x38\x1e\x9c\x3e\xa7\x47\x2b\x1b\x69\xae\xa6\x4b\x5b\xb3\xe5\x6d\x0b\xb3\xe5\x9d\x8a\x69\xe9\x75\xd9\x6f\x1b\x2f\x5b\x65\xce\xea\x75\xdd\x4b\xb4\x12\xa5\x21\x32\x03\x2b\xf1\xc2\x38\x5f\x5a\xa3\xa4\xaf\xc5\x80\x0a\x1b\xed\x2c\xaf\x52\x55\x0d\xb4\x34\x2a\x86\x16\x4b\x2b\x3b\xc9\xda\x5a\x5a\x54\x2f\xaf\xa8\x7a\x99\x32\x2d\xca\xb4\x28\xd3\xa2\x4c\x0b\x27\xb1\xea\x2d\xd2\xcd\x49\xc4\xdb\xca\xdc\x8d\x06\x45\x1c\x73\xf0\xb7\xd2\x48\x75\xef\xa5\x1b\xbe\x30\xb7\x05\x83\xab\x8d\xe3\x14\xed\xd6\xc6\x6d\x62\x15\xe1\x6d\x2c\xee\x58\xf1\x36\xee\xc4\x2c\x42\x1f\x2f\x01\x64\x59\x31\xfc\x8a\x6b\x40\x05\x7f\x0c\xde\x27\x51\x7a\x27\x15\xe5\x6b\xb9\xef\x0f\xf5\x8b\xd6\xa3\xf0\x77\xa2\xd5\x96\x41\xe8\x9b\xa1\xd8\xd9\xd6\x75\xfb\x7d\xa2\xbf\x9f\xe3\x2d\xe5\xf2\xd8\x66\x9d\xdf\x9b\x7e\x68\xcb\x4a\x17\x95\xf6\xd1\x61\xcd\xdf\xe7\x5a\xac\x2e\x8d\x52\xd6\x44\xd2\xee\xf2\x99\x17\x06\x11\xb4\x85\x47\xd0\xd6\xc3\x2a\x0b\xf9\xe2\xc9\xcb\xa5\x6a\x1a\xa2\x75\xe6\x58\x27\xfb\xaa\x62\x0d\x7a\x2d\xe3\x07\xaa\x90\xd1\x74\xe4\x9e\xae\xe7\x5e\xab\xbd\xe5\x16\x32\x84\x17\x18\xaf\x7e\x09\x3c\xf7\x4e\x95\x8b\xfe\x16\xad\x76\xf1\xdf\x9f\x93\x35\xf0\xf8\x9f\xaf\x75\x82\xa8\xed\x9f\x9b\x0f\x9e\x6f\xc9\x18\xe7\xce\x93\x93\xef\x19\x5f\x2e\xef\xa3\xff\xfb\x72\x69\xdc\xe6\x46\x53\x66\xa3\xaa\x80\xe4\x21\x38\x96\xc6\x5d\x9b\x96\x9c\x00\x59\x70\xe8\xd8\x56\x1c\x62\x11\xce\x36\x30\xbc\xef\xf1\xdc\xaa\x82\xbc\xbd\xf0\xf6\x8e\xd8\x18\xea\x9c\xb2\xce\x38\x79\xa6\x64\x4e\x68\xe9\x44\xa4\xa7\xef\x32\xbc\xd1\x89\x96\x9b\xc1\x87\xcb\x30\x3f\x97\x61\x3f\x66\xbf\xec\x7e\x9c\x86\x43\xef\xfe\xfb\xde\x31\xad\x2e\xe6\x5c\xbc\xe7\x62\x0d\x3a\xd2\xce\x30\xe5\xd6\x64\xca\x69\x64\x31\xf1\x61\x4f\x7f\x21\xed\xac\xe2\xb2\x17\x69\x8f\x1c\x66\x11\xc2\xbc\x30\xce\xc8\xde\x72\xbd\xad\x98\xac\x2d\xd2\x27\x6f\x2b\xce\x4d\xdf\xca\x36\x45\x2a\xee\x4f\x1a\x17\x02\x44\x08\x10\x21\x40\x84\x00\x11\x02\x44\x93\xb8\x23\x78\x8d\xad\x27\x8a\x96\x48\x3a\xe9\x44\x91\x54\xbc\xa2\xa4\x62\x44\xc1\x10\x05\x43\x14\x0c\x51\x30\x44\xc1\x10\x05\x43\x14\x8c\x5a\x1b\x6a\x6d\xa8\xb5\xa1\xd6\xa6\xf8\x44\xd2\x12\x09\x05\x42\x14\x08\x51\x20\x9c\xb9\x02\x61\x29\x9f\x03\xd6\xd3\x12\x69\x3e\x2d\x91\x0a\x98\x77\xfa\xaa\xba\xc6\x86\x48\x0d\x60\xbb\xb4\x1d\x52\x57\x98\x4d\x33\x24\x9a\x21\xa9\x9f\x68\x86\x44\x2e\x02\xb9\x08\xe4\x22\x90\x8b\x40\x2e\x02\x90\x1b\xee\xd9\x3c\x22\x70\x4f\xb8\x27\xdc\x13\xee\x09\xf7\x5c\x31\xf7\x04\x45\x80\x22\x40\x11\xa0\x08\x9a\x21\xd1\x0c\x89\x66\x48\xe9\x2f\x5d\x6a\x24\x3f\x79\x5b\x41\x2b\xa4\x51\x45\xee\x5f\x0a\x87\x68\x84\xd4\x57\x23\xa4\x06\xe8\x55\xd1\x06\x69\xdc\x1a\xce\x31\xd5\x28\xe4\x9d\xb5\x5b\x08\xa8\x2a\x5a\x40\x55\x11\x5a\x14\x68\x51\x94\x5c\x8c\xf6\x06\xcb\xec\x94\x28\xce\xbb\x68\x5d\x04\xb9\xcf\xb9\xea\x25\xda\x85\x23\x37\x3f\xea\x68\x17\x5e\x18\xe7\x8a\x67\x4c\xd0\xf8\xa8\x8b\x6e\x06\x6a\x19\xa5\xc3\x8a\x6d\x95\x9d\x64\x6d\x6d\x2b\xea\x93\x57\x54\x9f\x4c\x21\x16\x85\x58\x14\x62\x51\x88\x85\x5b\x58\xf5\x16\xe9\xe5\x16\xe2\x61\xe9\xe1\x61\x8d\xde\xf0\x48\xbb\xc2\x8c\xf2\x76\x47\x0d\xee\x52\x69\xb3\xa3\x13\x67\x89\xb5\x83\xb7\x50\xc3\x46\x47\x13\xe0\xaf\x42\x9b\xa3\xd3\x2b\xa0\xc9\x11\x4d\x8e\xa6\x69\x72\xd4\xb0\xd2\x97\xb7\x38\x5a\x06\x81\xa4\xc1\x11\xd1\xb2\xf5\x91\x48\x1a\x1c\xf5\xf9\xdc\xd0\xe0\x88\x20\x03\x8e\xc2\x52\xdb\x1b\xbd\xd8\x55\x18\xad\xb9\x51\xa3\xc3\x5e\xde\xda\x68\x19\x86\x1c\xa9\x64\x18\x70\xeb\x31\xe0\x34\xb2\x93\xf8\x9c\xa7\xbf\x90\x4a\x56\x72\xd1\x8b\xb4\x41\x46\x6d\x69\x34\x46\x4e\x56\xfc\x8b\x65\xee\x4d\xcb\x0e\xed\x7c\x73\xa3\xf1\x95\xa0\x62\x23\xe5\x9d\xba\x9c\xe7\x1a\xab\xa6\x54\x14\xaa\xb0\xfb\x07\xcf\xbf\x75\x9c\x4f\xe6\xa3\x08\xf6\x66\xb4\x2a\x69\xb0\x52\x55\xee\x40\x39\x50\x61\xf6\xa8\x0c\x1a\x35\x03\xb4\xfa\xd5\x1b\x83\x92\xa0\xc3\xb6\x60\x1d\xb6\x66\xf6\xd3\xa4\xc1\x56\x1b\x79\xea\x81\x6b\xa1\xbc\x86\xf2\x1a\xca\x6b\x28\xaf\x2d\x4d\x79\xad\x79\xe5\x2d\x55\x5d\x1b\x38\x8b\x60\x34\xad\xb5\xe6\xdb\xaf\xd6\x59\xd3\x79\x0c\xce\x51\x57\x6b\x1e\x83\x6a\x65\xb5\x81\xc7\x00\x3d\x35\xf4\xd4\xd0\x53\x43\x4f\x0d\x3d\xb5\xc1\xf4\xd4\x5a\xac\xfe\x27\x5a\x6a\xb5\x85\x4b\x2b\x4a\x22\x6c\x77\x37\x0b\xd6\x83\x6b\x1e\xee\x3a\x2d\xb8\x71\xc7\x1d\x05\xb8\x41\x66\xf4\x54\xfd\x6d\xe0\x69\x9d\x54\xf3\xad\x79\x78\x6a\xf4\xde\x86\x5e\x36\x75\x55\x79\x6b\x1e\xb4\x12\x9c\xd1\x39\x9e\x17\xff\xf5\x67\x7b\xca\xe5\xa6\xfc\x47\x69\x0f\xc8\xbf\xff\x6a\x84\x5f\x03\xaa\x12\x64\xaa\x37\xbd\xfb\xf3\xb0\x57\xa9\x58\x41\x7a\xb8\x14\x75\x6d\xeb\x0f\x8a\x96\x01\x31\x5f\x62\xbe\xc4\x7c\x89\xf9\x2e\x30\xe6\x3b\x87\x6e\x1b\x24\x56\xb6\x9e\xa8\x29\x13\x2b\x69\x8a\x82\xb2\xce\x8a\x95\x75\xe8\x80\x03\xb1\x81\xd8\x40\x6c\x20\x36\x10\x1b\x3a\xe0\x20\x38\x87\xe0\x1c\x82\x73\x08\xce\x15\x9f\xc8\x51\x1b\x3d\x2d\x09\xaf\xd2\x6e\x6b\xd9\xb0\x95\x76\x5b\x73\x6a\xb7\x55\xca\xef\xa8\x67\x3d\x13\xd3\x7d\x0e\xcd\xf0\xd0\x96\xcf\x2d\xb2\x6c\x4b\x7d\x93\x8f\xf6\xd2\x3c\x4b\xb8\xe6\x55\xfa\xd9\x37\xf7\xa6\x38\x6d\x3d\xc5\x69\xed\x3e\x3c\x4d\x05\x6a\xe3\x79\x68\xa4\x2d\x90\xb6\x40\xda\x02\x69\x0b\xa4\x2d\x94\x2d\xbe\xf0\xf0\x19\x8d\x08\x88\x14\x44\x0a\x22\x05\x91\x82\x48\x41\xa4\xcb\x42\xa4\x50\x0b\xa8\x05\xd4\x02\x6a\x31\x38\xb5\x38\x83\xec\x6b\x5a\x3e\xd6\x6e\x08\x4f\x4b\xc8\x16\x25\x47\x5e\xb9\x03\xaa\x80\xa8\x02\xae\x57\x15\x30\x36\x25\x95\x9a\xb3\xbb\x35\xa2\xa9\x32\x02\xcb\xdb\x8b\x1f\x8d\xe0\x60\x3d\x44\xeb\x92\x5c\xf7\x85\xf9\xa8\x16\xad\xbd\xef\x49\xd3\xb5\xac\x42\xb5\xbe\xc5\x92\xe4\x47\xf9\x9f\xe9\xb3\xd4\x74\x37\xf1\x5f\x99\x3e\x4b\x5e\xd0\x33\x38\x54\x6e\x9c\xea\xe4\xdd\x9e\x11\xaa\xbd\x86\xa5\x84\xfa\x0b\xe1\x17\x6f\xb2\xdd\xba\x49\xe9\xd6\x02\x4a\xb7\xd0\xc4\x47\x13\xbf\xe4\x62\xe6\x64\xea\xcd\x4e\x1e\xbf\xf3\xf5\xeb\xd2\x12\xb8\xe3\x0d\x2c\xd1\xce\x96\x86\xcc\x9c\xec\xec\x0b\x63\x00\x41\x14\xb5\xc1\x5f\x23\xe9\xa2\x9c\x69\xe3\x95\x69\xa1\xe8\x61\xe3\xcd\x44\x01\x05\x53\x2e\x3b\xc9\xda\x9a\x72\xd4\x9c\xaf\xa8\xe6\x9c\xe2\x3a\x8a\xeb\x28\xae\xa3\xb8\x0e\x2f\xb4\xea\x2d\xd2\xb2\x92\x65\x1a\x1f\x8e\x42\x9c\x1a\x0f\x2e\x76\x54\xe6\xe4\xc3\xa5\x61\xf4\xde\xcb\x6f\x7c\x61\x6e\x0b\x76\xd8\x59\xbe\x56\xb4\x7f\x47\x4f\x8b\x85\x87\xe8\xcb\xb9\xef\xee\x4e\xcc\x2b\xf8\xf2\x12\xc8\x29\xe3\xf2\xb1\x7f\xdb\x74\x31\x6d\x40\xa6\x2e\x0c\x13\x78\x3b\x3b\x78\x2b\x53\x44\x5a\x7d\x77\x8a\xab\xf7\xb5\xdc\xf7\x87\xfa\x85\xfc\x51\xf8\x3b\xd1\x6a\xcb\x20\xf4\xcd\x50\xec\x6c\xeb\xba\xfd\x3e\xd1\xdf\xcf\xf1\x96\xf2\x93\xd1\xe6\xbb\xb8\x37\xfd\xd0\x96\x15\x5c\x2a\x9d\xe9\x25\xdf\x48\x79\x6a\x1d\xc3\x91\x43\x21\xe7\x1a\xf3\xf3\x2e\x9f\x6d\x64\x10\xa4\x5c\x78\x90\x72\x3d\xbc\xb9\x50\x23\x91\xbc\x5c\xaa\x8e\x27\x5a\x83\x8e\xb5\xe1\xaf\x2a\xd6\xa7\xd7\x32\x44\xa3\x8a\x77\x4d\x47\xee\xe9\x7a\xee\xb5\xda\x5b\x6e\x21\xa3\xa4\x81\xf1\xea\x97\xc0\x73\xef\x54\x89\xf4\x6f\xd1\x4a\x18\xff\xfd\x39\x59\x1f\x8f\xff\xf9\x5a\x27\x10\xde\xfe\xb9\xf9\xe0\xf9\x96\x0c\x23\xef\x3c\x39\xf9\x9e\xf1\xe5\xf2\x3e\xfa\xbf\x2f\x97\xc6\x6d\x6e\x34\x65\x06\xb6\x8a\xf9\x1e\x82\x63\x39\xe8\xb5\x69\xc9\x09\x90\x45\xb6\x8e\x6d\xc5\x51\x2c\xe1\x6c\x03\xc3\xfb\x1e\xcf\xad\x2a\x42\xdd\x0b\x6f\xef\x88\x8d\xa1\xce\x29\x6b\xeb\x93\x67\x4a\xe6\x41\x97\x4e\x44\x7a\xfa\x2e\xc3\x1b\x9d\x68\xb9\x59\xab\xb8\x58\x33\x76\xb1\xf6\x85\x6c\xe2\x39\x39\x59\x87\xde\xa3\x23\x7b\xc7\xb4\x5e\x64\xfc\xc5\x87\x58\x93\xf9\x47\xc6\x21\x16\xe0\x2a\x2d\x40\x8d\x0c\x2d\xec\x81\xf4\x17\x32\x0e\xd7\x6d\xcf\x1c\xe6\x15\x32\xbe\x30\xda\xe6\xeb\x25\x59\x79\x8e\x19\x04\x13\xf5\x28\x4b\x6e\x37\xba\x84\x33\x33\xf2\x8e\xdd\xc9\xaa\x0e\x42\x2e\x1e\xb2\x5e\xc8\x7a\x21\xeb\x85\xac\x17\xb2\x5e\x93\x78\x2e\x38\x98\xad\x27\x8a\x6e\x64\x3a\xa9\xaf\x91\x19\xbe\xa2\xcc\x70\xa4\xf6\x90\xda\x43\x6a\x0f\xa9\x3d\xa4\xf6\x90\xda\x43\x6a\x8f\x82\x29\x0a\xa6\x28\x98\xa2\x60\xaa\xf8\x44\xd2\x8d\x0c\x5d\x4f\x74\x3d\xd1\xf5\x9c\xb9\xae\x67\x29\xa9\x83\xeb\x53\x04\x39\x93\x6e\x64\x15\xac\x77\xfa\x42\xc8\xfa\x3e\x64\x2d\x39\xf7\x69\x07\xb2\x97\xb2\x6d\x3a\x8e\xd1\x71\x4c\xfd\x44\xc7\x31\x52\x13\x48\x4d\x20\x35\x81\xd4\x04\x52\x13\x60\xde\x60\xd0\xe6\x11\x01\x83\x82\x41\xc1\xa0\x60\x50\x30\xe8\x8a\x31\x28\x64\x02\x32\x01\x99\x80\x4c\xd0\x71\x8c\x8e\x63\x74\x1c\x4b\x7f\x39\xbb\xa8\x32\x1b\xc8\xa7\xd7\xd8\x78\x3d\x10\xfa\x02\x46\x1d\x04\xf8\xe6\xab\xd7\x36\x5c\xb3\xad\x96\x20\xac\xac\xcd\xd6\x34\x65\x9e\xa3\x89\x5c\xe4\x6e\xaf\xdd\xe2\x40\xf5\xd1\x02\xaa\x8f\x90\xb7\x40\xde\xa2\xe4\x62\xe6\x61\xc9\xcc\x4b\xd8\xa2\xdb\x95\x6b\xd1\x44\xab\xcb\xa5\x2f\xd1\x74\x1c\xb3\x7d\xd6\x0b\x4d\xc7\x0b\xa3\x9b\x10\xc7\xd8\xbd\xb1\x5e\xa0\xc1\x81\xf2\x46\xf6\xec\xd8\x5f\x73\xb4\xbf\xa8\x75\x5e\x51\xad\x33\x45\x5d\x14\x75\x51\xd4\x45\x51\x17\xae\x63\xd5\x5b\xa4\xa1\xeb\x88\x03\x96\xbf\x21\x0d\x0a\x3f\x66\xe2\x82\xa5\x11\xed\x31\xfa\x5e\xb5\xf4\xa3\x4e\x3b\x5e\x55\x7a\x51\x2c\x2a\xbc\x99\x25\x3b\x4e\xdf\xdb\x6a\x42\xa8\x96\xed\x6a\x55\x7d\x19\x73\xea\x67\x35\x5f\x4c\x48\x5b\xa7\x6e\x9f\x80\x92\x86\x4e\xcb\x82\x9b\x34\x70\x22\xbe\xb6\x3e\xbe\x49\x03\xa7\x3e\x9f\x1b\x1a\x38\x11\x96\xc0\x83\x58\x6e\xeb\xa6\xde\x7c\x88\x71\x9a\x36\xb5\xf6\xee\x4b\xda\x35\x2d\xcb\xb8\x23\x73\x0d\xcb\x6e\x65\x96\x9d\x46\x06\x14\xdf\xf9\xf4\x17\x32\xd7\xd6\x67\xa1\x8c\xd7\x8c\x69\xb4\xec\xaf\x27\xcf\x39\x3c\x0a\x33\x0c\x4d\xeb\xe1\x51\xf2\xf3\x29\x3a\x31\xfd\x21\xaf\xe2\x36\xbd\x8a\x33\x33\xc1\x8e\xdd\x98\xea\x0e\x44\x5e\x18\xb2\x47\xc8\x1e\x21\x7b\x84\xec\x11\xb2\x47\x93\xb8\x2c\x78\x96\xad\x27\x8a\x8e\x4c\x3a\xa9\x53\x91\xa5\xbc\xa2\x2c\x65\xa4\xc8\x90\x22\x43\x8a\x0c\x29\x32\xa4\xc8\x90\x22\x43\x8a\x8c\xe2\x1d\x8a\x77\x28\xde\xa1\x78\xa7\xf8\x44\xd2\x91\x09\xdd\x43\x74\x0f\xd1\x3d\x9c\xb9\xee\x61\x29\xb1\x03\xe8\xd3\x91\x69\x26\x1d\x99\x6a\x78\xef\xf4\x65\x7a\xf5\x5d\x99\xce\x60\xde\xa7\x9d\x99\xfa\xe0\xdc\x74\x67\xa2\x3b\x93\xfa\x89\xee\x4c\xa4\x29\x90\xa6\x40\x9a\x02\x69\x0a\xa4\x29\xc0\xbf\x41\xa2\xcd\x23\x02\x12\x05\x89\x82\x44\x41\xa2\x20\xd1\x15\x23\x51\x28\x05\x94\x02\x4a\x01\xa5\xa0\x3b\x13\xdd\x99\xe8\xce\x94\xfe\x72\x76\x7d\x65\x31\x98\x4f\x87\xa6\xf1\x64\xf6\xfb\x04\x48\x74\x69\xea\xa5\x4b\xd3\x19\x60\xac\xac\x53\xd3\x74\x25\xa0\xa3\x69\x5e\x9c\xdc\x62\xbb\xc5\x82\xea\xa4\x05\x54\x27\xa1\x7b\x81\xee\x45\xc9\xc5\xcc\xc7\xba\x99\x97\xf6\x45\xf7\xab\xd7\x42\x38\xbc\xeb\xe5\x2f\xd1\xac\x1c\xb3\x7b\x53\x0f\x66\xe5\x85\xd1\x59\xc3\x63\xec\x26\x4e\x2f\x94\xef\x40\xb4\x03\xd3\x6c\x09\xa6\x19\x65\xd2\x2b\x2a\x93\xa6\x1e\x8c\x7a\x30\xea\xc1\xa8\x07\xc3\xab\xac\x7a\x8b\x34\xf5\x2a\xf1\xcb\x34\xf3\xcb\xc6\x6d\xea\xa4\x75\xc5\x48\x49\x63\xa7\x33\x7c\xab\xd3\xe6\x4e\xb5\x9e\x15\x0b\x0d\x6f\xaa\xb6\x4d\x9e\x26\xe6\x72\xd9\x46\x4f\xf5\x97\x42\xb3\x27\x9a\x3d\x4d\xd0\xec\xe9\x8c\xcf\x42\x49\xc3\xa7\xe5\x31\x52\x9a\x3e\x11\x87\x5b\x1f\x22\xa5\xe9\x53\x9f\xcf\x0d\x4d\x9f\x08\x5f\xe0\x55\xa8\xff\x5e\x6a\xe3\xa7\x5e\xfd\x8a\x71\x9a\x3f\x9d\x15\x01\x28\x69\x00\xb5\x3c\x63\x8f\x84\x38\xac\xbd\x15\x5a\x7b\x1a\x19\x55\x7c\xfb\xd3\x5f\x48\x88\x6b\x75\xf5\x8b\xb4\x5c\xc6\x6b\x08\x35\x6a\x42\x99\xac\xa2\xb9\xb1\x02\x7b\xeb\xdb\x4f\xca\x36\x48\x13\xc9\x7a\x67\x1e\x71\xb5\xb5\xbb\xb5\x9f\xec\xed\xc1\x74\xb2\x95\x5b\x66\xaa\xaf\xf0\xee\xf3\xc7\xf7\xf2\x62\x36\x99\xc4\x89\x9f\xd2\x94\x8b\x2b\x79\x94\xab\xa3\xd2\x4e\x4e\x3a\x25\xb5\x92\x0c\xdb\x0d\x42\x61\xe6\x82\x9b\x45\x1b\xea\xfb\x69\xb8\x2c\x3d\xf9\xaf\x85\xca\x14\x2a\xa9\x74\x95\xe4\x93\x85\x80\x3f\x3f\xad\x7c\x81\x92\x93\x38\x66\x39\x55\xfa\xa6\x8c\xcc\x6b\x10\xaf\x5b\xb0\x78\x5d\x33\x7c\x6a\x12\xae\xab\x0d\x74\xf5\x00\xd6\x90\xab\x43\xae\x0e\xb9\x3a\xe4\xea\x96\x26\x57\xd7\xbc\xf2\x96\x4a\xd5\x0d\x9c\xc6\x30\x9a\x40\x5d\xf3\xed\x57\x8b\xd3\xe9\x3c\x06\xe7\x48\xd2\x35\x8f\x41\xb5\x1c\xdd\xc0\x63\x80\x08\x1d\x22\x74\x88\xd0\x21\x42\x87\x08\xdd\x60\x22\x74\x2d\x56\xff\x13\x01\xba\xda\x0a\xac\x15\x65\x31\xb6\xbb\x9b\x05\x8b\xe8\x35\x0f\x77\x9d\x80\xde\xb8\xe3\x8e\x6c\xde\x20\x33\x7a\x2a\x99\x37\xf0\xb4\x4e\x2a\x94\xd7\x3c\x3c\x35\x22\x79\x43\x2f\x9b\xba\x4a\xe3\x35\x0f\x5a\x09\xc8\xe8\x1c\xcf\x8b\xff\xfa\xb3\x3b\x0c\x2b\x11\x57\x18\x88\x89\x65\x41\x98\x9b\x7c\xec\x93\xf6\x31\xfd\x02\xb1\x1f\x8f\xc6\xbd\x74\x60\x62\x43\x30\xf2\x0f\x8e\x5e\xcb\x55\xce\xdb\xcd\x1c\xbb\x2b\x4e\x03\xa5\x81\xd2\x66\x85\xd2\xc0\x68\x60\x34\x30\x1a\x18\x0d\x8c\x06\x46\x03\xa3\x81\xd1\xc0\x68\x60\x34\x30\x1a\x18\x0d\x8c\x06\x46\x03\xa3\x81\xd1\xe6\x84\xd1\xb2\x12\x27\x15\xf1\x06\xb4\x4d\xa0\x82\xd3\x33\x24\xa8\x20\x54\x10\x2a\x08\x15\x2c\x0c\x9a\x26\x54\xd0\xf5\xb6\x42\x93\x02\xb9\x4f\xde\x56\x4c\x54\x1e\x17\x9d\x9a\xe2\x38\x88\xde\xec\x88\xde\xc8\xc5\x71\xd1\x7b\x02\xd3\x83\xe9\xc1\xf4\x60\x7a\x30\x3d\x98\x1e\x4c\x0f\xa6\xd7\xe7\x6a\x0b\xd3\x83\xe9\xc1\xf4\x60\x7a\x30\x3d\x98\x1e\x4c\x6f\x75\x4c\x0f\x08\x06\x04\x03\x82\xcd\x63\x46\x81\x60\xf9\xe1\x01\x82\xcd\x1c\x82\xe9\x53\x18\xd7\x1b\x08\x1b\xbb\x2c\xae\x80\x07\x40\x68\x20\xb4\xc2\x51\x35\x44\x68\xe0\x33\xf0\x19\xf8\x0c\x7c\x06\x3e\x03\x9f\x81\xcf\xc0\x67\xe0\x33\xf0\x19\xf8\x0c\x7c\x06\x3e\x03\x9f\x81\xcf\xc0\x67\xf3\xc1\x67\x85\x92\xb8\xd3\x68\x03\x05\x71\xb0\xc0\xe9\xc9\x11\x2c\x10\x16\x08\x0b\x84\x05\x16\x06\x4d\x13\x16\x18\xff\x6e\x99\x7b\xd3\xb2\x43\x5b\x97\xe2\xb8\x98\xb5\xbd\x53\x97\xf5\x3c\x51\x9d\x5c\xe1\x2a\x7e\xb5\x83\xf0\x83\xe7\xdf\x3a\xce\x27\xf3\x51\x04\x7b\xd3\x12\x01\xfc\x0f\xfe\x37\x2b\xfe\x37\x72\x09\x5d\xe1\x15\x02\x07\x82\x03\xc1\x81\xe0\x40\x70\x20\x38\x10\x1c\x08\x0e\xec\x73\xb5\x05\x07\x82\x03\xc1\x81\xe0\x40\x70\x20\x38\x10\x1c\xb8\x3a\x1c\x08\x41\x83\xa0\x41\xd0\xe6\x31\xa3\x10\xb4\xfc\xf0\x40\xd0\x66\x4a\xd0\xdc\x14\x04\xa9\x7a\x3a\xf9\xf7\x5f\x80\xb5\x3a\xb0\x96\xc2\xb3\x6d\x39\x62\x03\xa9\x81\xd4\x40\x6a\x20\x35\x90\x1a\x48\x0d\xa4\x06\x52\x03\xa9\x81\xd4\x40\x6a\x20\x35\x90\x1a\x48\x0d\xa4\x06\x52\x03\xa9\x81\xd4\x40\x6a\xc6\x08\xb1\xe1\xf8\xae\x65\xa1\x5d\x34\x95\xe6\x21\x7c\x30\x02\xcb\xdb\x8b\x1f\x8d\xe0\x60\x3d\x44\x33\x2f\xfd\x15\x61\x3e\xaa\xe0\xf0\xde\xf7\xe4\x28\x9f\x5f\x88\x27\x23\x82\x54\xe3\xc1\x12\x61\x89\xb0\x44\x58\x22\x2c\x11\x96\x58\xcd\x12\xf5\x11\xef\x1c\x82\x27\x8e\xaa\xe3\x59\x47\x23\x21\x91\x90\xc8\x59\x91\x48\x28\x24\x14\x12\x0a\x09\x85\x84\x42\x42\x21\xa1\x90\x50\x48\x28\x24\x14\x12\x0a\x09\x85\x84\x42\x42\x21\xa1\x90\x50\xc8\x59\x52\xc8\x82\xce\x67\x6d\xe0\x61\x4e\x92\x9f\xd0\x55\xe8\x2a\x74\x15\xba\xaa\xf5\x8c\x42\x57\xf3\xc3\x03\x5d\x9d\x29\x5d\x4d\x18\xaa\x63\x06\x81\x16\xc5\x98\x89\x1d\x13\x5d\xd0\x14\x65\x98\xd9\xf3\x53\x76\x09\xec\x9c\x1d\xec\x1c\xb3\xec\x32\xfb\xb2\x80\x3a\x41\x9d\xa0\x4e\x50\x27\xa8\x13\xd4\x09\xea\x04\x75\xf6\xb9\xda\x82\x3a\x41\x9d\xa0\x4e\x50\x27\xa8\x13\xd4\x09\xea\x5c\x1d\xea\x84\x8c\x41\xc6\x20\x63\xf3\x98\x51\xc8\x58\x7e\x78\x20\x63\x8b\x20\x63\x9a\x94\x16\xf6\x4e\xc7\x46\x2d\x2a\xac\xc0\x05\x70\x35\xb8\x5a\xe1\xa8\x1a\x72\x35\x98\x1a\x4c\x0d\xa6\x06\x53\x83\xa9\xc1\xd4\x60\x6a\x30\x35\x98\x1a\x4c\x0d\xa6\x06\x53\x83\xa9\xc1\xd4\x60\x6a\x30\xb5\x99\x31\xb5\x6c\xf9\x60\x75\xc8\x61\x4e\x85\x83\x50\x42\x28\x21\x94\x70\x1e\x33\x0a\x25\xcc\x0f\x0f\x94\x70\xa6\x94\xf0\xc9\x73\x0e\x8f\xc2\x0c\x43\xd3\x7a\x88\x8c\x65\x1d\x4a\xe8\xfe\x90\xd7\x74\x9b\x5e\xd3\x14\x65\x74\xc5\x6b\xa0\x94\x0e\xe4\x37\x3b\xe4\x37\x66\x29\x5d\xf1\x85\x01\xfd\x81\xfe\x40\x7f\xa0\x3f\xd0\x1f\xe8\x0f\xf4\x07\xfa\xeb\x73\xb5\x05\xfd\x81\xfe\x40\x7f\xa0\x3f\xd0\x1f\xe8\x0f\xf4\xb7\x3a\xf4\x07\x28\x03\x94\x01\xca\xe6\x31\xa3\x80\xb2\xfc\xf0\x00\xca\x96\x02\xca\x34\xa9\xa8\x1b\x04\x96\x8d\x5a\x55\x57\x43\x0e\xc0\x6c\x60\xb6\xc2\x51\x35\xc4\x6c\x20\x36\x10\x1b\x88\x0d\xc4\x06\x62\x03\xb1\x81\xd8\x40\x6c\x20\x36\x10\x1b\x88\x0d\xc4\x06\x62\x03\xb1\x81\xd8\x40\x6c\x33\x44\x6c\xd9\xea\xba\xfa\xb0\x03\x15\x76\x80\xc3\xe9\x31\x13\xe0\x10\x70\x08\x38\x04\x1c\x16\x06\x6d\x78\x70\xe8\x78\xbb\xe0\xa6\x96\x01\x16\x00\x98\xe3\xed\x3e\xd8\x8e\xf8\xd5\x0e\xc2\xff\x63\xba\x5b\x27\x37\x5d\xd5\xe4\x47\x57\x78\x12\xdd\x7f\x66\xeb\x8b\xec\x19\xf3\x83\xf4\x3f\x8e\xb7\x8b\xcc\x84\x7a\x62\x5a\x3e\x5a\x0b\x1e\xa9\x97\x10\x99\x68\x38\x93\x77\xd1\xf1\x76\xe7\x19\x66\xf1\x74\x0c\x6f\x9b\x95\xbf\x38\xde\x5e\xb8\xf6\xf6\xe6\xe9\xcd\xcd\xff\xfb\xfe\xad\xe1\x15\x2a\xdc\xf6\x4e\x84\xd2\x5e\xb1\x2d\x61\x98\x96\x25\x5d\x6f\xe9\xe5\xf8\xc6\xef\x7b\xe1\x7e\x7c\x6f\xfc\xf2\xf9\xf7\x4f\xc6\x7f\x89\xaf\xc6\x3f\xc5\x73\xe4\xd0\x1b\xaf\x22\xdf\xc6\xb4\xdd\xc0\xd8\x1f\xbe\x3a\xb6\x15\x47\x60\x9f\x84\x9f\xae\x3a\x32\xba\xf8\xba\x06\x5d\xef\x44\xf8\x59\x9d\xf5\x56\x9d\xf4\xa3\x3c\xa7\x3a\xe5\x3f\xc5\x73\xfe\x93\xd7\x0e\x5d\x7f\xff\x76\x1d\x88\xf0\x07\x89\xb0\x4b\x9f\xa4\xd1\x50\x70\x61\x76\x73\x3f\xcf\x8f\xe9\xaa\xa7\xab\x71\x61\x8a\x8d\x99\xfa\xa7\xaf\x2a\x89\xe3\x24\x07\xa1\xf4\xea\x4a\x9e\x5d\x15\xe9\xd8\xa6\xe6\x78\xfd\x33\xf7\xce\xdb\x96\x58\xb9\xed\x33\x23\xa6\x7d\xac\xce\xcb\x30\x88\x07\x64\xf3\xd1\xbd\xf7\xe6\xfe\x08\x26\x93\x5b\xf5\x0c\x5e\xc4\x27\xbd\x0c\x84\x75\xf0\xed\xf0\x39\x3d\x40\xfa\x28\xfe\x43\x98\xbe\xf0\xff\x1d\x2d\x55\xd1\x8f\x7f\xa6\x3b\xfe\x99\xdb\xf1\xfd\x71\x64\xd3\x91\x28\xec\x9b\x1e\xb2\x30\x30\x6a\x2b\x43\x6e\x26\x3b\xd5\xab\x90\x55\x98\x7d\xd8\xe2\x2f\xc9\x83\x30\xb7\x99\x4f\xf0\x91\x0b\xc7\x23\x5b\xd8\x29\x59\x4f\xcc\xbd\xfd\x4f\xf1\x7c\x59\xbc\xe7\xef\xe6\x2e\xb2\x54\x7f\x32\x2e\xdf\x6e\xfe\xd7\xe5\xc5\x5f\x17\xff\x3f\x00\x00\xff\xff\x9f\x1f\xdc\xd6\x49\xd4\x4d\x00") + +func kubernetesapiV1212SwaggerJsonBytes() ([]byte, error) { + return bindataRead( + _kubernetesapiV1212SwaggerJson, + "kubernetesapi/v1212/swagger.json", + ) +} + +func kubernetesapiV1212SwaggerJson() (*asset, error) { + bytes, err := kubernetesapiV1212SwaggerJsonBytes() + if err != nil { + return nil, err + } + + info := bindataFileInfo{name: "kubernetesapi/v1212/swagger.json", size: 5100617, mode: os.FileMode(420), modTime: time.Unix(1628615474, 0)} + a := &asset{bytes: bytes, info: info} + return a, nil +} + +// Asset loads and returns the asset for the given name. +// It returns an error if the asset could not be found or +// could not be loaded. +func Asset(name string) ([]byte, error) { + cannonicalName := strings.Replace(name, "\\", "/", -1) + if f, ok := _bindata[cannonicalName]; ok { + a, err := f() + if err != nil { + return nil, fmt.Errorf("Asset %s can't read by error: %v", name, err) + } + return a.bytes, nil + } + return nil, fmt.Errorf("Asset %s not found", name) +} + +// MustAsset is like Asset but panics when Asset would return an error. +// It simplifies safe initialization of global variables. +func MustAsset(name string) []byte { + a, err := Asset(name) + if err != nil { + panic("asset: Asset(" + name + "): " + err.Error()) + } + + return a +} + +// AssetInfo loads and returns the asset info for the given name. +// It returns an error if the asset could not be found or +// could not be loaded. +func AssetInfo(name string) (os.FileInfo, error) { + cannonicalName := strings.Replace(name, "\\", "/", -1) + if f, ok := _bindata[cannonicalName]; ok { + a, err := f() + if err != nil { + return nil, fmt.Errorf("AssetInfo %s can't read by error: %v", name, err) + } + return a.info, nil + } + return nil, fmt.Errorf("AssetInfo %s not found", name) +} + +// AssetNames returns the names of the assets. +func AssetNames() []string { + names := make([]string, 0, len(_bindata)) + for name := range _bindata { + names = append(names, name) + } + return names +} + +// _bindata is a table, holding each asset generator, mapped to its name. +var _bindata = map[string]func() (*asset, error){ + "kubernetesapi/v1212/swagger.json": kubernetesapiV1212SwaggerJson, +} + +// AssetDir returns the file names below a certain +// directory embedded in the file by go-bindata. +// For example if you run go-bindata on data/... and data contains the +// following hierarchy: +// data/ +// foo.txt +// img/ +// a.png +// b.png +// then AssetDir("data") would return []string{"foo.txt", "img"} +// AssetDir("data/img") would return []string{"a.png", "b.png"} +// AssetDir("foo.txt") and AssetDir("notexist") would return an error +// AssetDir("") will return []string{"data"}. +func AssetDir(name string) ([]string, error) { + node := _bintree + if len(name) != 0 { + cannonicalName := strings.Replace(name, "\\", "/", -1) + pathList := strings.Split(cannonicalName, "/") + for _, p := range pathList { + node = node.Children[p] + if node == nil { + return nil, fmt.Errorf("Asset %s not found", name) + } + } + } + if node.Func != nil { + return nil, fmt.Errorf("Asset %s not found", name) + } + rv := make([]string, 0, len(node.Children)) + for childName := range node.Children { + rv = append(rv, childName) + } + return rv, nil +} + +type bintree struct { + Func func() (*asset, error) + Children map[string]*bintree +} + +var _bintree = &bintree{nil, map[string]*bintree{ + "kubernetesapi": &bintree{nil, map[string]*bintree{ + "v1212": &bintree{nil, map[string]*bintree{ + "swagger.json": &bintree{kubernetesapiV1212SwaggerJson, map[string]*bintree{}}, + }}, + }}, +}} + +// RestoreAsset restores an asset under the given directory +func RestoreAsset(dir, name string) error { + data, err := Asset(name) + if err != nil { + return err + } + info, err := AssetInfo(name) + if err != nil { + return err + } + err = os.MkdirAll(_filePath(dir, filepath.Dir(name)), os.FileMode(0755)) + if err != nil { + return err + } + err = ioutil.WriteFile(_filePath(dir, name), data, info.Mode()) + if err != nil { + return err + } + err = os.Chtimes(_filePath(dir, name), info.ModTime(), info.ModTime()) + if err != nil { + return err + } + return nil +} + +// RestoreAssets restores an asset under the given directory recursively +func RestoreAssets(dir, name string) error { + children, err := AssetDir(name) + // File + if err != nil { + return RestoreAsset(dir, name) + } + // Dir + for _, child := range children { + err = RestoreAssets(dir, filepath.Join(name, child)) + if err != nil { + return err + } + } + return nil +} + +func _filePath(dir, name string) string { + cannonicalName := strings.Replace(name, "\\", "/", -1) + return filepath.Join(append([]string{dir}, strings.Split(cannonicalName, "/")...)...) +} diff --git a/go/internal/forked/kyaml/openapi/kubernetesapi/v1212/swagger.json b/go/internal/forked/kyaml/openapi/kubernetesapi/v1212/swagger.json new file mode 100644 index 000000000..081722aea --- /dev/null +++ b/go/internal/forked/kyaml/openapi/kubernetesapi/v1212/swagger.json @@ -0,0 +1,101036 @@ +{ + "definitions": { + "io.k8s.api.admissionregistration.v1.MutatingWebhook": { + "description": "MutatingWebhook describes an admission webhook and the resources and operations it applies to.", + "properties": { + "admissionReviewVersions": { + "description": "AdmissionReviewVersions is an ordered list of preferred `AdmissionReview` versions the Webhook expects. API server will try to use first version in the list which it supports. If none of the versions specified in this list supported by API server, validation will fail for this object. If a persisted webhook configuration specifies allowed versions and does not include any versions known to the API Server, calls to the webhook will fail and be subject to the failure policy.", + "items": { + "type": "string" + }, + "type": "array" + }, + "clientConfig": { + "$ref": "#/definitions/io.k8s.api.admissionregistration.v1.WebhookClientConfig", + "description": "ClientConfig defines how to communicate with the hook. Required" + }, + "failurePolicy": { + "description": "FailurePolicy defines how unrecognized errors from the admission endpoint are handled - allowed values are Ignore or Fail. Defaults to Fail.", + "type": "string" + }, + "matchPolicy": { + "description": "matchPolicy defines how the \"rules\" list is used to match incoming requests. Allowed values are \"Exact\" or \"Equivalent\".\n\n- Exact: match a request only if it exactly matches a specified rule. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, but \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, a request to apps/v1beta1 or extensions/v1beta1 would not be sent to the webhook.\n\n- Equivalent: match a request if modifies a resource listed in rules, even via another API group or version. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, and \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, a request to apps/v1beta1 or extensions/v1beta1 would be converted to apps/v1 and sent to the webhook.\n\nDefaults to \"Equivalent\"", + "type": "string" + }, + "name": { + "description": "The name of the admission webhook. Name should be fully qualified, e.g., imagepolicy.kubernetes.io, where \"imagepolicy\" is the name of the webhook, and kubernetes.io is the name of the organization. Required.", + "type": "string" + }, + "namespaceSelector": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector", + "description": "NamespaceSelector decides whether to run the webhook on an object based on whether the namespace for that object matches the selector. If the object itself is a namespace, the matching is performed on object.metadata.labels. If the object is another cluster scoped resource, it never skips the webhook.\n\nFor example, to run the webhook on any objects whose namespace is not associated with \"runlevel\" of \"0\" or \"1\"; you will set the selector as follows: \"namespaceSelector\": {\n \"matchExpressions\": [\n {\n \"key\": \"runlevel\",\n \"operator\": \"NotIn\",\n \"values\": [\n \"0\",\n \"1\"\n ]\n }\n ]\n}\n\nIf instead you want to only run the webhook on any objects whose namespace is associated with the \"environment\" of \"prod\" or \"staging\"; you will set the selector as follows: \"namespaceSelector\": {\n \"matchExpressions\": [\n {\n \"key\": \"environment\",\n \"operator\": \"In\",\n \"values\": [\n \"prod\",\n \"staging\"\n ]\n }\n ]\n}\n\nSee https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/ for more examples of label selectors.\n\nDefault to the empty LabelSelector, which matches everything." + }, + "objectSelector": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector", + "description": "ObjectSelector decides whether to run the webhook based on if the object has matching labels. objectSelector is evaluated against both the oldObject and newObject that would be sent to the webhook, and is considered to match if either object matches the selector. A null object (oldObject in the case of create, or newObject in the case of delete) or an object that cannot have labels (like a DeploymentRollback or a PodProxyOptions object) is not considered to match. Use the object selector only if the webhook is opt-in, because end users may skip the admission webhook by setting the labels. Default to the empty LabelSelector, which matches everything." + }, + "reinvocationPolicy": { + "description": "reinvocationPolicy indicates whether this webhook should be called multiple times as part of a single admission evaluation. Allowed values are \"Never\" and \"IfNeeded\".\n\nNever: the webhook will not be called more than once in a single admission evaluation.\n\nIfNeeded: the webhook will be called at least one additional time as part of the admission evaluation if the object being admitted is modified by other admission plugins after the initial webhook call. Webhooks that specify this option *must* be idempotent, able to process objects they previously admitted. Note: * the number of additional invocations is not guaranteed to be exactly one. * if additional invocations result in further modifications to the object, webhooks are not guaranteed to be invoked again. * webhooks that use this option may be reordered to minimize the number of additional invocations. * to validate an object after all mutations are guaranteed complete, use a validating admission webhook instead.\n\nDefaults to \"Never\".", + "type": "string" + }, + "rules": { + "description": "Rules describes what operations on what resources/subresources the webhook cares about. The webhook cares about an operation if it matches _any_ Rule. However, in order to prevent ValidatingAdmissionWebhooks and MutatingAdmissionWebhooks from putting the cluster in a state which cannot be recovered from without completely disabling the plugin, ValidatingAdmissionWebhooks and MutatingAdmissionWebhooks are never called on admission requests for ValidatingWebhookConfiguration and MutatingWebhookConfiguration objects.", + "items": { + "$ref": "#/definitions/io.k8s.api.admissionregistration.v1.RuleWithOperations" + }, + "type": "array" + }, + "sideEffects": { + "description": "SideEffects states whether this webhook has side effects. Acceptable values are: None, NoneOnDryRun (webhooks created via v1beta1 may also specify Some or Unknown). Webhooks with side effects MUST implement a reconciliation system, since a request may be rejected by a future step in the admission chain and the side effects therefore need to be undone. Requests with the dryRun attribute will be auto-rejected if they match a webhook with sideEffects == Unknown or Some.", + "type": "string" + }, + "timeoutSeconds": { + "description": "TimeoutSeconds specifies the timeout for this webhook. After the timeout passes, the webhook call will be ignored or the API call will fail based on the failure policy. The timeout value must be between 1 and 30 seconds. Default to 10 seconds.", + "format": "int32", + "type": "integer" + } + }, + "required": [ + "name", + "clientConfig", + "sideEffects", + "admissionReviewVersions" + ], + "type": "object" + }, + "io.k8s.api.admissionregistration.v1.MutatingWebhookConfiguration": { + "description": "MutatingWebhookConfiguration describes the configuration of and admission webhook that accept or reject and may change the object.", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta", + "description": "Standard object metadata; More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata." + }, + "webhooks": { + "description": "Webhooks is a list of webhooks and the affected resources and operations.", + "items": { + "$ref": "#/definitions/io.k8s.api.admissionregistration.v1.MutatingWebhook" + }, + "type": "array", + "x-kubernetes-patch-merge-key": "name", + "x-kubernetes-patch-strategy": "merge" + } + }, + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "admissionregistration.k8s.io", + "kind": "MutatingWebhookConfiguration", + "version": "v1" + } + ] + }, + "io.k8s.api.admissionregistration.v1.MutatingWebhookConfigurationList": { + "description": "MutatingWebhookConfigurationList is a list of MutatingWebhookConfiguration.", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "items": { + "description": "List of MutatingWebhookConfiguration.", + "items": { + "$ref": "#/definitions/io.k8s.api.admissionregistration.v1.MutatingWebhookConfiguration" + }, + "type": "array" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta", + "description": "Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds" + } + }, + "required": [ + "items" + ], + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "admissionregistration.k8s.io", + "kind": "MutatingWebhookConfigurationList", + "version": "v1" + } + ] + }, + "io.k8s.api.admissionregistration.v1.RuleWithOperations": { + "description": "RuleWithOperations is a tuple of Operations and Resources. It is recommended to make sure that all the tuple expansions are valid.", + "properties": { + "apiGroups": { + "description": "APIGroups is the API groups the resources belong to. '*' is all groups. If '*' is present, the length of the slice must be one. Required.", + "items": { + "type": "string" + }, + "type": "array" + }, + "apiVersions": { + "description": "APIVersions is the API versions the resources belong to. '*' is all versions. If '*' is present, the length of the slice must be one. Required.", + "items": { + "type": "string" + }, + "type": "array" + }, + "operations": { + "description": "Operations is the operations the admission hook cares about - CREATE, UPDATE, DELETE, CONNECT or * for all of those operations and any future admission operations that are added. If '*' is present, the length of the slice must be one. Required.", + "items": { + "type": "string" + }, + "type": "array" + }, + "resources": { + "description": "Resources is a list of resources this rule applies to.\n\nFor example: 'pods' means pods. 'pods/log' means the log subresource of pods. '*' means all resources, but not subresources. 'pods/*' means all subresources of pods. '*/scale' means all scale subresources. '*/*' means all resources and their subresources.\n\nIf wildcard is present, the validation rule will ensure resources do not overlap with each other.\n\nDepending on the enclosing object, subresources might not be allowed. Required.", + "items": { + "type": "string" + }, + "type": "array" + }, + "scope": { + "description": "scope specifies the scope of this rule. Valid values are \"Cluster\", \"Namespaced\", and \"*\" \"Cluster\" means that only cluster-scoped resources will match this rule. Namespace API objects are cluster-scoped. \"Namespaced\" means that only namespaced resources will match this rule. \"*\" means that there are no scope restrictions. Subresources match the scope of their parent resource. Default is \"*\".", + "type": "string" + } + }, + "type": "object" + }, + "io.k8s.api.admissionregistration.v1.ServiceReference": { + "description": "ServiceReference holds a reference to Service.legacy.k8s.io", + "properties": { + "name": { + "description": "`name` is the name of the service. Required", + "type": "string" + }, + "namespace": { + "description": "`namespace` is the namespace of the service. Required", + "type": "string" + }, + "path": { + "description": "`path` is an optional URL path which will be sent in any request to this service.", + "type": "string" + }, + "port": { + "description": "If specified, the port on the service that hosting webhook. Default to 443 for backward compatibility. `port` should be a valid port number (1-65535, inclusive).", + "format": "int32", + "type": "integer" + } + }, + "required": [ + "namespace", + "name" + ], + "type": "object" + }, + "io.k8s.api.admissionregistration.v1.ValidatingWebhook": { + "description": "ValidatingWebhook describes an admission webhook and the resources and operations it applies to.", + "properties": { + "admissionReviewVersions": { + "description": "AdmissionReviewVersions is an ordered list of preferred `AdmissionReview` versions the Webhook expects. API server will try to use first version in the list which it supports. If none of the versions specified in this list supported by API server, validation will fail for this object. If a persisted webhook configuration specifies allowed versions and does not include any versions known to the API Server, calls to the webhook will fail and be subject to the failure policy.", + "items": { + "type": "string" + }, + "type": "array" + }, + "clientConfig": { + "$ref": "#/definitions/io.k8s.api.admissionregistration.v1.WebhookClientConfig", + "description": "ClientConfig defines how to communicate with the hook. Required" + }, + "failurePolicy": { + "description": "FailurePolicy defines how unrecognized errors from the admission endpoint are handled - allowed values are Ignore or Fail. Defaults to Fail.", + "type": "string" + }, + "matchPolicy": { + "description": "matchPolicy defines how the \"rules\" list is used to match incoming requests. Allowed values are \"Exact\" or \"Equivalent\".\n\n- Exact: match a request only if it exactly matches a specified rule. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, but \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, a request to apps/v1beta1 or extensions/v1beta1 would not be sent to the webhook.\n\n- Equivalent: match a request if modifies a resource listed in rules, even via another API group or version. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, and \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, a request to apps/v1beta1 or extensions/v1beta1 would be converted to apps/v1 and sent to the webhook.\n\nDefaults to \"Equivalent\"", + "type": "string" + }, + "name": { + "description": "The name of the admission webhook. Name should be fully qualified, e.g., imagepolicy.kubernetes.io, where \"imagepolicy\" is the name of the webhook, and kubernetes.io is the name of the organization. Required.", + "type": "string" + }, + "namespaceSelector": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector", + "description": "NamespaceSelector decides whether to run the webhook on an object based on whether the namespace for that object matches the selector. If the object itself is a namespace, the matching is performed on object.metadata.labels. If the object is another cluster scoped resource, it never skips the webhook.\n\nFor example, to run the webhook on any objects whose namespace is not associated with \"runlevel\" of \"0\" or \"1\"; you will set the selector as follows: \"namespaceSelector\": {\n \"matchExpressions\": [\n {\n \"key\": \"runlevel\",\n \"operator\": \"NotIn\",\n \"values\": [\n \"0\",\n \"1\"\n ]\n }\n ]\n}\n\nIf instead you want to only run the webhook on any objects whose namespace is associated with the \"environment\" of \"prod\" or \"staging\"; you will set the selector as follows: \"namespaceSelector\": {\n \"matchExpressions\": [\n {\n \"key\": \"environment\",\n \"operator\": \"In\",\n \"values\": [\n \"prod\",\n \"staging\"\n ]\n }\n ]\n}\n\nSee https://kubernetes.io/docs/concepts/overview/working-with-objects/labels for more examples of label selectors.\n\nDefault to the empty LabelSelector, which matches everything." + }, + "objectSelector": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector", + "description": "ObjectSelector decides whether to run the webhook based on if the object has matching labels. objectSelector is evaluated against both the oldObject and newObject that would be sent to the webhook, and is considered to match if either object matches the selector. A null object (oldObject in the case of create, or newObject in the case of delete) or an object that cannot have labels (like a DeploymentRollback or a PodProxyOptions object) is not considered to match. Use the object selector only if the webhook is opt-in, because end users may skip the admission webhook by setting the labels. Default to the empty LabelSelector, which matches everything." + }, + "rules": { + "description": "Rules describes what operations on what resources/subresources the webhook cares about. The webhook cares about an operation if it matches _any_ Rule. However, in order to prevent ValidatingAdmissionWebhooks and MutatingAdmissionWebhooks from putting the cluster in a state which cannot be recovered from without completely disabling the plugin, ValidatingAdmissionWebhooks and MutatingAdmissionWebhooks are never called on admission requests for ValidatingWebhookConfiguration and MutatingWebhookConfiguration objects.", + "items": { + "$ref": "#/definitions/io.k8s.api.admissionregistration.v1.RuleWithOperations" + }, + "type": "array" + }, + "sideEffects": { + "description": "SideEffects states whether this webhook has side effects. Acceptable values are: None, NoneOnDryRun (webhooks created via v1beta1 may also specify Some or Unknown). Webhooks with side effects MUST implement a reconciliation system, since a request may be rejected by a future step in the admission chain and the side effects therefore need to be undone. Requests with the dryRun attribute will be auto-rejected if they match a webhook with sideEffects == Unknown or Some.", + "type": "string" + }, + "timeoutSeconds": { + "description": "TimeoutSeconds specifies the timeout for this webhook. After the timeout passes, the webhook call will be ignored or the API call will fail based on the failure policy. The timeout value must be between 1 and 30 seconds. Default to 10 seconds.", + "format": "int32", + "type": "integer" + } + }, + "required": [ + "name", + "clientConfig", + "sideEffects", + "admissionReviewVersions" + ], + "type": "object" + }, + "io.k8s.api.admissionregistration.v1.ValidatingWebhookConfiguration": { + "description": "ValidatingWebhookConfiguration describes the configuration of and admission webhook that accept or reject and object without changing it.", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta", + "description": "Standard object metadata; More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata." + }, + "webhooks": { + "description": "Webhooks is a list of webhooks and the affected resources and operations.", + "items": { + "$ref": "#/definitions/io.k8s.api.admissionregistration.v1.ValidatingWebhook" + }, + "type": "array", + "x-kubernetes-patch-merge-key": "name", + "x-kubernetes-patch-strategy": "merge" + } + }, + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "admissionregistration.k8s.io", + "kind": "ValidatingWebhookConfiguration", + "version": "v1" + } + ] + }, + "io.k8s.api.admissionregistration.v1.ValidatingWebhookConfigurationList": { + "description": "ValidatingWebhookConfigurationList is a list of ValidatingWebhookConfiguration.", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "items": { + "description": "List of ValidatingWebhookConfiguration.", + "items": { + "$ref": "#/definitions/io.k8s.api.admissionregistration.v1.ValidatingWebhookConfiguration" + }, + "type": "array" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta", + "description": "Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds" + } + }, + "required": [ + "items" + ], + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "admissionregistration.k8s.io", + "kind": "ValidatingWebhookConfigurationList", + "version": "v1" + } + ] + }, + "io.k8s.api.admissionregistration.v1.WebhookClientConfig": { + "description": "WebhookClientConfig contains the information to make a TLS connection with the webhook", + "properties": { + "caBundle": { + "description": "`caBundle` is a PEM encoded CA bundle which will be used to validate the webhook's server certificate. If unspecified, system trust roots on the apiserver are used.", + "format": "byte", + "type": "string" + }, + "service": { + "$ref": "#/definitions/io.k8s.api.admissionregistration.v1.ServiceReference", + "description": "`service` is a reference to the service for this webhook. Either `service` or `url` must be specified.\n\nIf the webhook is running within the cluster, then you should use `service`." + }, + "url": { + "description": "`url` gives the location of the webhook, in standard URL form (`scheme://host:port/path`). Exactly one of `url` or `service` must be specified.\n\nThe `host` should not refer to a service running in the cluster; use the `service` field instead. The host might be resolved via external DNS in some apiservers (e.g., `kube-apiserver` cannot resolve in-cluster DNS as that would be a layering violation). `host` may also be an IP address.\n\nPlease note that using `localhost` or `127.0.0.1` as a `host` is risky unless you take great care to run this webhook on all hosts which run an apiserver which might need to make calls to this webhook. Such installs are likely to be non-portable, i.e., not easy to turn up in a new cluster.\n\nThe scheme must be \"https\"; the URL must begin with \"https://\".\n\nA path is optional, and if present may be any string permissible in a URL. You may use the path to pass an arbitrary string to the webhook, for example, a cluster identifier.\n\nAttempting to use a user or basic auth e.g. \"user:password@\" is not allowed. Fragments (\"#...\") and query parameters (\"?...\") are not allowed, either.", + "type": "string" + } + }, + "type": "object" + }, + "io.k8s.api.admissionregistration.v1beta1.MutatingWebhook": { + "description": "MutatingWebhook describes an admission webhook and the resources and operations it applies to.", + "properties": { + "admissionReviewVersions": { + "description": "AdmissionReviewVersions is an ordered list of preferred `AdmissionReview` versions the Webhook expects. API server will try to use first version in the list which it supports. If none of the versions specified in this list supported by API server, validation will fail for this object. If a persisted webhook configuration specifies allowed versions and does not include any versions known to the API Server, calls to the webhook will fail and be subject to the failure policy. Default to `['v1beta1']`.", + "items": { + "type": "string" + }, + "type": "array" + }, + "clientConfig": { + "$ref": "#/definitions/io.k8s.api.admissionregistration.v1beta1.WebhookClientConfig", + "description": "ClientConfig defines how to communicate with the hook. Required" + }, + "failurePolicy": { + "description": "FailurePolicy defines how unrecognized errors from the admission endpoint are handled - allowed values are Ignore or Fail. Defaults to Ignore.", + "type": "string" + }, + "matchPolicy": { + "description": "matchPolicy defines how the \"rules\" list is used to match incoming requests. Allowed values are \"Exact\" or \"Equivalent\".\n\n- Exact: match a request only if it exactly matches a specified rule. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, but \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, a request to apps/v1beta1 or extensions/v1beta1 would not be sent to the webhook.\n\n- Equivalent: match a request if modifies a resource listed in rules, even via another API group or version. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, and \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, a request to apps/v1beta1 or extensions/v1beta1 would be converted to apps/v1 and sent to the webhook.\n\nDefaults to \"Exact\"", + "type": "string" + }, + "name": { + "description": "The name of the admission webhook. Name should be fully qualified, e.g., imagepolicy.kubernetes.io, where \"imagepolicy\" is the name of the webhook, and kubernetes.io is the name of the organization. Required.", + "type": "string" + }, + "namespaceSelector": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector", + "description": "NamespaceSelector decides whether to run the webhook on an object based on whether the namespace for that object matches the selector. If the object itself is a namespace, the matching is performed on object.metadata.labels. If the object is another cluster scoped resource, it never skips the webhook.\n\nFor example, to run the webhook on any objects whose namespace is not associated with \"runlevel\" of \"0\" or \"1\"; you will set the selector as follows: \"namespaceSelector\": {\n \"matchExpressions\": [\n {\n \"key\": \"runlevel\",\n \"operator\": \"NotIn\",\n \"values\": [\n \"0\",\n \"1\"\n ]\n }\n ]\n}\n\nIf instead you want to only run the webhook on any objects whose namespace is associated with the \"environment\" of \"prod\" or \"staging\"; you will set the selector as follows: \"namespaceSelector\": {\n \"matchExpressions\": [\n {\n \"key\": \"environment\",\n \"operator\": \"In\",\n \"values\": [\n \"prod\",\n \"staging\"\n ]\n }\n ]\n}\n\nSee https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/ for more examples of label selectors.\n\nDefault to the empty LabelSelector, which matches everything." + }, + "objectSelector": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector", + "description": "ObjectSelector decides whether to run the webhook based on if the object has matching labels. objectSelector is evaluated against both the oldObject and newObject that would be sent to the webhook, and is considered to match if either object matches the selector. A null object (oldObject in the case of create, or newObject in the case of delete) or an object that cannot have labels (like a DeploymentRollback or a PodProxyOptions object) is not considered to match. Use the object selector only if the webhook is opt-in, because end users may skip the admission webhook by setting the labels. Default to the empty LabelSelector, which matches everything." + }, + "reinvocationPolicy": { + "description": "reinvocationPolicy indicates whether this webhook should be called multiple times as part of a single admission evaluation. Allowed values are \"Never\" and \"IfNeeded\".\n\nNever: the webhook will not be called more than once in a single admission evaluation.\n\nIfNeeded: the webhook will be called at least one additional time as part of the admission evaluation if the object being admitted is modified by other admission plugins after the initial webhook call. Webhooks that specify this option *must* be idempotent, able to process objects they previously admitted. Note: * the number of additional invocations is not guaranteed to be exactly one. * if additional invocations result in further modifications to the object, webhooks are not guaranteed to be invoked again. * webhooks that use this option may be reordered to minimize the number of additional invocations. * to validate an object after all mutations are guaranteed complete, use a validating admission webhook instead.\n\nDefaults to \"Never\".", + "type": "string" + }, + "rules": { + "description": "Rules describes what operations on what resources/subresources the webhook cares about. The webhook cares about an operation if it matches _any_ Rule. However, in order to prevent ValidatingAdmissionWebhooks and MutatingAdmissionWebhooks from putting the cluster in a state which cannot be recovered from without completely disabling the plugin, ValidatingAdmissionWebhooks and MutatingAdmissionWebhooks are never called on admission requests for ValidatingWebhookConfiguration and MutatingWebhookConfiguration objects.", + "items": { + "$ref": "#/definitions/io.k8s.api.admissionregistration.v1beta1.RuleWithOperations" + }, + "type": "array" + }, + "sideEffects": { + "description": "SideEffects states whether this webhook has side effects. Acceptable values are: Unknown, None, Some, NoneOnDryRun Webhooks with side effects MUST implement a reconciliation system, since a request may be rejected by a future step in the admission chain and the side effects therefore need to be undone. Requests with the dryRun attribute will be auto-rejected if they match a webhook with sideEffects == Unknown or Some. Defaults to Unknown.", + "type": "string" + }, + "timeoutSeconds": { + "description": "TimeoutSeconds specifies the timeout for this webhook. After the timeout passes, the webhook call will be ignored or the API call will fail based on the failure policy. The timeout value must be between 1 and 30 seconds. Default to 30 seconds.", + "format": "int32", + "type": "integer" + } + }, + "required": [ + "name", + "clientConfig" + ], + "type": "object" + }, + "io.k8s.api.admissionregistration.v1beta1.MutatingWebhookConfiguration": { + "description": "MutatingWebhookConfiguration describes the configuration of and admission webhook that accept or reject and may change the object. Deprecated in v1.16, planned for removal in v1.19. Use admissionregistration.k8s.io/v1 MutatingWebhookConfiguration instead.", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta", + "description": "Standard object metadata; More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata." + }, + "webhooks": { + "description": "Webhooks is a list of webhooks and the affected resources and operations.", + "items": { + "$ref": "#/definitions/io.k8s.api.admissionregistration.v1beta1.MutatingWebhook" + }, + "type": "array", + "x-kubernetes-patch-merge-key": "name", + "x-kubernetes-patch-strategy": "merge" + } + }, + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "admissionregistration.k8s.io", + "kind": "MutatingWebhookConfiguration", + "version": "v1beta1" + } + ] + }, + "io.k8s.api.admissionregistration.v1beta1.MutatingWebhookConfigurationList": { + "description": "MutatingWebhookConfigurationList is a list of MutatingWebhookConfiguration.", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "items": { + "description": "List of MutatingWebhookConfiguration.", + "items": { + "$ref": "#/definitions/io.k8s.api.admissionregistration.v1beta1.MutatingWebhookConfiguration" + }, + "type": "array" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta", + "description": "Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds" + } + }, + "required": [ + "items" + ], + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "admissionregistration.k8s.io", + "kind": "MutatingWebhookConfigurationList", + "version": "v1beta1" + } + ] + }, + "io.k8s.api.admissionregistration.v1beta1.RuleWithOperations": { + "description": "RuleWithOperations is a tuple of Operations and Resources. It is recommended to make sure that all the tuple expansions are valid.", + "properties": { + "apiGroups": { + "description": "APIGroups is the API groups the resources belong to. '*' is all groups. If '*' is present, the length of the slice must be one. Required.", + "items": { + "type": "string" + }, + "type": "array" + }, + "apiVersions": { + "description": "APIVersions is the API versions the resources belong to. '*' is all versions. If '*' is present, the length of the slice must be one. Required.", + "items": { + "type": "string" + }, + "type": "array" + }, + "operations": { + "description": "Operations is the operations the admission hook cares about - CREATE, UPDATE, DELETE, CONNECT or * for all of those operations and any future admission operations that are added. If '*' is present, the length of the slice must be one. Required.", + "items": { + "type": "string" + }, + "type": "array" + }, + "resources": { + "description": "Resources is a list of resources this rule applies to.\n\nFor example: 'pods' means pods. 'pods/log' means the log subresource of pods. '*' means all resources, but not subresources. 'pods/*' means all subresources of pods. '*/scale' means all scale subresources. '*/*' means all resources and their subresources.\n\nIf wildcard is present, the validation rule will ensure resources do not overlap with each other.\n\nDepending on the enclosing object, subresources might not be allowed. Required.", + "items": { + "type": "string" + }, + "type": "array" + }, + "scope": { + "description": "scope specifies the scope of this rule. Valid values are \"Cluster\", \"Namespaced\", and \"*\" \"Cluster\" means that only cluster-scoped resources will match this rule. Namespace API objects are cluster-scoped. \"Namespaced\" means that only namespaced resources will match this rule. \"*\" means that there are no scope restrictions. Subresources match the scope of their parent resource. Default is \"*\".", + "type": "string" + } + }, + "type": "object" + }, + "io.k8s.api.admissionregistration.v1beta1.ServiceReference": { + "description": "ServiceReference holds a reference to Service.legacy.k8s.io", + "properties": { + "name": { + "description": "`name` is the name of the service. Required", + "type": "string" + }, + "namespace": { + "description": "`namespace` is the namespace of the service. Required", + "type": "string" + }, + "path": { + "description": "`path` is an optional URL path which will be sent in any request to this service.", + "type": "string" + }, + "port": { + "description": "If specified, the port on the service that hosting webhook. Default to 443 for backward compatibility. `port` should be a valid port number (1-65535, inclusive).", + "format": "int32", + "type": "integer" + } + }, + "required": [ + "namespace", + "name" + ], + "type": "object" + }, + "io.k8s.api.admissionregistration.v1beta1.ValidatingWebhook": { + "description": "ValidatingWebhook describes an admission webhook and the resources and operations it applies to.", + "properties": { + "admissionReviewVersions": { + "description": "AdmissionReviewVersions is an ordered list of preferred `AdmissionReview` versions the Webhook expects. API server will try to use first version in the list which it supports. If none of the versions specified in this list supported by API server, validation will fail for this object. If a persisted webhook configuration specifies allowed versions and does not include any versions known to the API Server, calls to the webhook will fail and be subject to the failure policy. Default to `['v1beta1']`.", + "items": { + "type": "string" + }, + "type": "array" + }, + "clientConfig": { + "$ref": "#/definitions/io.k8s.api.admissionregistration.v1beta1.WebhookClientConfig", + "description": "ClientConfig defines how to communicate with the hook. Required" + }, + "failurePolicy": { + "description": "FailurePolicy defines how unrecognized errors from the admission endpoint are handled - allowed values are Ignore or Fail. Defaults to Ignore.", + "type": "string" + }, + "matchPolicy": { + "description": "matchPolicy defines how the \"rules\" list is used to match incoming requests. Allowed values are \"Exact\" or \"Equivalent\".\n\n- Exact: match a request only if it exactly matches a specified rule. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, but \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, a request to apps/v1beta1 or extensions/v1beta1 would not be sent to the webhook.\n\n- Equivalent: match a request if modifies a resource listed in rules, even via another API group or version. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, and \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, a request to apps/v1beta1 or extensions/v1beta1 would be converted to apps/v1 and sent to the webhook.\n\nDefaults to \"Exact\"", + "type": "string" + }, + "name": { + "description": "The name of the admission webhook. Name should be fully qualified, e.g., imagepolicy.kubernetes.io, where \"imagepolicy\" is the name of the webhook, and kubernetes.io is the name of the organization. Required.", + "type": "string" + }, + "namespaceSelector": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector", + "description": "NamespaceSelector decides whether to run the webhook on an object based on whether the namespace for that object matches the selector. If the object itself is a namespace, the matching is performed on object.metadata.labels. If the object is another cluster scoped resource, it never skips the webhook.\n\nFor example, to run the webhook on any objects whose namespace is not associated with \"runlevel\" of \"0\" or \"1\"; you will set the selector as follows: \"namespaceSelector\": {\n \"matchExpressions\": [\n {\n \"key\": \"runlevel\",\n \"operator\": \"NotIn\",\n \"values\": [\n \"0\",\n \"1\"\n ]\n }\n ]\n}\n\nIf instead you want to only run the webhook on any objects whose namespace is associated with the \"environment\" of \"prod\" or \"staging\"; you will set the selector as follows: \"namespaceSelector\": {\n \"matchExpressions\": [\n {\n \"key\": \"environment\",\n \"operator\": \"In\",\n \"values\": [\n \"prod\",\n \"staging\"\n ]\n }\n ]\n}\n\nSee https://kubernetes.io/docs/concepts/overview/working-with-objects/labels for more examples of label selectors.\n\nDefault to the empty LabelSelector, which matches everything." + }, + "objectSelector": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector", + "description": "ObjectSelector decides whether to run the webhook based on if the object has matching labels. objectSelector is evaluated against both the oldObject and newObject that would be sent to the webhook, and is considered to match if either object matches the selector. A null object (oldObject in the case of create, or newObject in the case of delete) or an object that cannot have labels (like a DeploymentRollback or a PodProxyOptions object) is not considered to match. Use the object selector only if the webhook is opt-in, because end users may skip the admission webhook by setting the labels. Default to the empty LabelSelector, which matches everything." + }, + "rules": { + "description": "Rules describes what operations on what resources/subresources the webhook cares about. The webhook cares about an operation if it matches _any_ Rule. However, in order to prevent ValidatingAdmissionWebhooks and MutatingAdmissionWebhooks from putting the cluster in a state which cannot be recovered from without completely disabling the plugin, ValidatingAdmissionWebhooks and MutatingAdmissionWebhooks are never called on admission requests for ValidatingWebhookConfiguration and MutatingWebhookConfiguration objects.", + "items": { + "$ref": "#/definitions/io.k8s.api.admissionregistration.v1beta1.RuleWithOperations" + }, + "type": "array" + }, + "sideEffects": { + "description": "SideEffects states whether this webhook has side effects. Acceptable values are: Unknown, None, Some, NoneOnDryRun Webhooks with side effects MUST implement a reconciliation system, since a request may be rejected by a future step in the admission chain and the side effects therefore need to be undone. Requests with the dryRun attribute will be auto-rejected if they match a webhook with sideEffects == Unknown or Some. Defaults to Unknown.", + "type": "string" + }, + "timeoutSeconds": { + "description": "TimeoutSeconds specifies the timeout for this webhook. After the timeout passes, the webhook call will be ignored or the API call will fail based on the failure policy. The timeout value must be between 1 and 30 seconds. Default to 30 seconds.", + "format": "int32", + "type": "integer" + } + }, + "required": [ + "name", + "clientConfig" + ], + "type": "object" + }, + "io.k8s.api.admissionregistration.v1beta1.ValidatingWebhookConfiguration": { + "description": "ValidatingWebhookConfiguration describes the configuration of and admission webhook that accept or reject and object without changing it. Deprecated in v1.16, planned for removal in v1.19. Use admissionregistration.k8s.io/v1 ValidatingWebhookConfiguration instead.", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta", + "description": "Standard object metadata; More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata." + }, + "webhooks": { + "description": "Webhooks is a list of webhooks and the affected resources and operations.", + "items": { + "$ref": "#/definitions/io.k8s.api.admissionregistration.v1beta1.ValidatingWebhook" + }, + "type": "array", + "x-kubernetes-patch-merge-key": "name", + "x-kubernetes-patch-strategy": "merge" + } + }, + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "admissionregistration.k8s.io", + "kind": "ValidatingWebhookConfiguration", + "version": "v1beta1" + } + ] + }, + "io.k8s.api.admissionregistration.v1beta1.ValidatingWebhookConfigurationList": { + "description": "ValidatingWebhookConfigurationList is a list of ValidatingWebhookConfiguration.", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "items": { + "description": "List of ValidatingWebhookConfiguration.", + "items": { + "$ref": "#/definitions/io.k8s.api.admissionregistration.v1beta1.ValidatingWebhookConfiguration" + }, + "type": "array" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta", + "description": "Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds" + } + }, + "required": [ + "items" + ], + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "admissionregistration.k8s.io", + "kind": "ValidatingWebhookConfigurationList", + "version": "v1beta1" + } + ] + }, + "io.k8s.api.admissionregistration.v1beta1.WebhookClientConfig": { + "description": "WebhookClientConfig contains the information to make a TLS connection with the webhook", + "properties": { + "caBundle": { + "description": "`caBundle` is a PEM encoded CA bundle which will be used to validate the webhook's server certificate. If unspecified, system trust roots on the apiserver are used.", + "format": "byte", + "type": "string" + }, + "service": { + "$ref": "#/definitions/io.k8s.api.admissionregistration.v1beta1.ServiceReference", + "description": "`service` is a reference to the service for this webhook. Either `service` or `url` must be specified.\n\nIf the webhook is running within the cluster, then you should use `service`." + }, + "url": { + "description": "`url` gives the location of the webhook, in standard URL form (`scheme://host:port/path`). Exactly one of `url` or `service` must be specified.\n\nThe `host` should not refer to a service running in the cluster; use the `service` field instead. The host might be resolved via external DNS in some apiservers (e.g., `kube-apiserver` cannot resolve in-cluster DNS as that would be a layering violation). `host` may also be an IP address.\n\nPlease note that using `localhost` or `127.0.0.1` as a `host` is risky unless you take great care to run this webhook on all hosts which run an apiserver which might need to make calls to this webhook. Such installs are likely to be non-portable, i.e., not easy to turn up in a new cluster.\n\nThe scheme must be \"https\"; the URL must begin with \"https://\".\n\nA path is optional, and if present may be any string permissible in a URL. You may use the path to pass an arbitrary string to the webhook, for example, a cluster identifier.\n\nAttempting to use a user or basic auth e.g. \"user:password@\" is not allowed. Fragments (\"#...\") and query parameters (\"?...\") are not allowed, either.", + "type": "string" + } + }, + "type": "object" + }, + "io.k8s.api.apps.v1.ControllerRevision": { + "description": "ControllerRevision implements an immutable snapshot of state data. Clients are responsible for serializing and deserializing the objects that contain their internal state. Once a ControllerRevision has been successfully created, it can not be updated. The API Server will fail validation of all requests that attempt to mutate the Data field. ControllerRevisions may, however, be deleted. Note that, due to its use by both the DaemonSet and StatefulSet controllers for update and rollback, this object is beta. However, it may be subject to name and representation changes in future releases, and clients should not depend on its stability. It is primarily for internal use by controllers.", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "data": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension", + "description": "Data is the serialized representation of the state." + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta", + "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata" + }, + "revision": { + "description": "Revision indicates the revision of the state represented by Data.", + "format": "int64", + "type": "integer" + } + }, + "required": [ + "revision" + ], + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "apps", + "kind": "ControllerRevision", + "version": "v1" + } + ] + }, + "io.k8s.api.apps.v1.ControllerRevisionList": { + "description": "ControllerRevisionList is a resource containing a list of ControllerRevision objects.", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "items": { + "description": "Items is the list of ControllerRevisions", + "items": { + "$ref": "#/definitions/io.k8s.api.apps.v1.ControllerRevision" + }, + "type": "array" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta", + "description": "More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata" + } + }, + "required": [ + "items" + ], + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "apps", + "kind": "ControllerRevisionList", + "version": "v1" + } + ] + }, + "io.k8s.api.apps.v1.DaemonSet": { + "description": "DaemonSet represents the configuration of a daemon set.", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta", + "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata" + }, + "spec": { + "$ref": "#/definitions/io.k8s.api.apps.v1.DaemonSetSpec", + "description": "The desired behavior of this daemon set. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status" + }, + "status": { + "$ref": "#/definitions/io.k8s.api.apps.v1.DaemonSetStatus", + "description": "The current status of this daemon set. This data may be out of date by some window of time. Populated by the system. Read-only. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status" + } + }, + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "apps", + "kind": "DaemonSet", + "version": "v1" + } + ] + }, + "io.k8s.api.apps.v1.DaemonSetCondition": { + "description": "DaemonSetCondition describes the state of a DaemonSet at a certain point.", + "properties": { + "lastTransitionTime": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time", + "description": "Last time the condition transitioned from one status to another." + }, + "message": { + "description": "A human readable message indicating details about the transition.", + "type": "string" + }, + "reason": { + "description": "The reason for the condition's last transition.", + "type": "string" + }, + "status": { + "description": "Status of the condition, one of True, False, Unknown.", + "type": "string" + }, + "type": { + "description": "Type of DaemonSet condition.", + "type": "string" + } + }, + "required": [ + "type", + "status" + ], + "type": "object" + }, + "io.k8s.api.apps.v1.DaemonSetList": { + "description": "DaemonSetList is a collection of daemon sets.", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "items": { + "description": "A list of daemon sets.", + "items": { + "$ref": "#/definitions/io.k8s.api.apps.v1.DaemonSet" + }, + "type": "array" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta", + "description": "Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata" + } + }, + "required": [ + "items" + ], + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "apps", + "kind": "DaemonSetList", + "version": "v1" + } + ] + }, + "io.k8s.api.apps.v1.DaemonSetSpec": { + "description": "DaemonSetSpec is the specification of a daemon set.", + "properties": { + "minReadySeconds": { + "description": "The minimum number of seconds for which a newly created DaemonSet pod should be ready without any of its container crashing, for it to be considered available. Defaults to 0 (pod will be considered available as soon as it is ready).", + "format": "int32", + "type": "integer" + }, + "revisionHistoryLimit": { + "description": "The number of old history to retain to allow rollback. This is a pointer to distinguish between explicit zero and not specified. Defaults to 10.", + "format": "int32", + "type": "integer" + }, + "selector": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector", + "description": "A label query over pods that are managed by the daemon set. Must match in order to be controlled. It must match the pod template's labels. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#label-selectors" + }, + "template": { + "$ref": "#/definitions/io.k8s.api.core.v1.PodTemplateSpec", + "description": "An object that describes the pod that will be created. The DaemonSet will create exactly one copy of this pod on every node that matches the template's node selector (or on every node if no node selector is specified). More info: https://kubernetes.io/docs/concepts/workloads/controllers/replicationcontroller#pod-template" + }, + "updateStrategy": { + "$ref": "#/definitions/io.k8s.api.apps.v1.DaemonSetUpdateStrategy", + "description": "An update strategy to replace existing DaemonSet pods with new pods." + } + }, + "required": [ + "selector", + "template" + ], + "type": "object" + }, + "io.k8s.api.apps.v1.DaemonSetStatus": { + "description": "DaemonSetStatus represents the current status of a daemon set.", + "properties": { + "collisionCount": { + "description": "Count of hash collisions for the DaemonSet. The DaemonSet controller uses this field as a collision avoidance mechanism when it needs to create the name for the newest ControllerRevision.", + "format": "int32", + "type": "integer" + }, + "conditions": { + "description": "Represents the latest available observations of a DaemonSet's current state.", + "items": { + "$ref": "#/definitions/io.k8s.api.apps.v1.DaemonSetCondition" + }, + "type": "array", + "x-kubernetes-patch-merge-key": "type", + "x-kubernetes-patch-strategy": "merge" + }, + "currentNumberScheduled": { + "description": "The number of nodes that are running at least 1 daemon pod and are supposed to run the daemon pod. More info: https://kubernetes.io/docs/concepts/workloads/controllers/daemonset/", + "format": "int32", + "type": "integer" + }, + "desiredNumberScheduled": { + "description": "The total number of nodes that should be running the daemon pod (including nodes correctly running the daemon pod). More info: https://kubernetes.io/docs/concepts/workloads/controllers/daemonset/", + "format": "int32", + "type": "integer" + }, + "numberAvailable": { + "description": "The number of nodes that should be running the daemon pod and have one or more of the daemon pod running and available (ready for at least spec.minReadySeconds)", + "format": "int32", + "type": "integer" + }, + "numberMisscheduled": { + "description": "The number of nodes that are running the daemon pod, but are not supposed to run the daemon pod. More info: https://kubernetes.io/docs/concepts/workloads/controllers/daemonset/", + "format": "int32", + "type": "integer" + }, + "numberReady": { + "description": "The number of nodes that should be running the daemon pod and have one or more of the daemon pod running and ready.", + "format": "int32", + "type": "integer" + }, + "numberUnavailable": { + "description": "The number of nodes that should be running the daemon pod and have none of the daemon pod running and available (ready for at least spec.minReadySeconds)", + "format": "int32", + "type": "integer" + }, + "observedGeneration": { + "description": "The most recent generation observed by the daemon set controller.", + "format": "int64", + "type": "integer" + }, + "updatedNumberScheduled": { + "description": "The total number of nodes that are running updated daemon pod", + "format": "int32", + "type": "integer" + } + }, + "required": [ + "currentNumberScheduled", + "numberMisscheduled", + "desiredNumberScheduled", + "numberReady" + ], + "type": "object" + }, + "io.k8s.api.apps.v1.DaemonSetUpdateStrategy": { + "description": "DaemonSetUpdateStrategy is a struct used to control the update strategy for a DaemonSet.", + "properties": { + "rollingUpdate": { + "$ref": "#/definitions/io.k8s.api.apps.v1.RollingUpdateDaemonSet", + "description": "Rolling update config params. Present only if type = \"RollingUpdate\"." + }, + "type": { + "description": "Type of daemon set update. Can be \"RollingUpdate\" or \"OnDelete\". Default is RollingUpdate.", + "type": "string" + } + }, + "type": "object" + }, + "io.k8s.api.apps.v1.Deployment": { + "description": "Deployment enables declarative updates for Pods and ReplicaSets.", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta", + "description": "Standard object metadata." + }, + "spec": { + "$ref": "#/definitions/io.k8s.api.apps.v1.DeploymentSpec", + "description": "Specification of the desired behavior of the Deployment." + }, + "status": { + "$ref": "#/definitions/io.k8s.api.apps.v1.DeploymentStatus", + "description": "Most recently observed status of the Deployment." + } + }, + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "apps", + "kind": "Deployment", + "version": "v1" + } + ] + }, + "io.k8s.api.apps.v1.DeploymentCondition": { + "description": "DeploymentCondition describes the state of a deployment at a certain point.", + "properties": { + "lastTransitionTime": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time", + "description": "Last time the condition transitioned from one status to another." + }, + "lastUpdateTime": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time", + "description": "The last time this condition was updated." + }, + "message": { + "description": "A human readable message indicating details about the transition.", + "type": "string" + }, + "reason": { + "description": "The reason for the condition's last transition.", + "type": "string" + }, + "status": { + "description": "Status of the condition, one of True, False, Unknown.", + "type": "string" + }, + "type": { + "description": "Type of deployment condition.", + "type": "string" + } + }, + "required": [ + "type", + "status" + ], + "type": "object" + }, + "io.k8s.api.apps.v1.DeploymentList": { + "description": "DeploymentList is a list of Deployments.", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "items": { + "description": "Items is the list of Deployments.", + "items": { + "$ref": "#/definitions/io.k8s.api.apps.v1.Deployment" + }, + "type": "array" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta", + "description": "Standard list metadata." + } + }, + "required": [ + "items" + ], + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "apps", + "kind": "DeploymentList", + "version": "v1" + } + ] + }, + "io.k8s.api.apps.v1.DeploymentSpec": { + "description": "DeploymentSpec is the specification of the desired behavior of the Deployment.", + "properties": { + "minReadySeconds": { + "description": "Minimum number of seconds for which a newly created pod should be ready without any of its container crashing, for it to be considered available. Defaults to 0 (pod will be considered available as soon as it is ready)", + "format": "int32", + "type": "integer" + }, + "paused": { + "description": "Indicates that the deployment is paused.", + "type": "boolean" + }, + "progressDeadlineSeconds": { + "description": "The maximum time in seconds for a deployment to make progress before it is considered to be failed. The deployment controller will continue to process failed deployments and a condition with a ProgressDeadlineExceeded reason will be surfaced in the deployment status. Note that progress will not be estimated during the time a deployment is paused. Defaults to 600s.", + "format": "int32", + "type": "integer" + }, + "replicas": { + "description": "Number of desired pods. This is a pointer to distinguish between explicit zero and not specified. Defaults to 1.", + "format": "int32", + "type": "integer" + }, + "revisionHistoryLimit": { + "description": "The number of old ReplicaSets to retain to allow rollback. This is a pointer to distinguish between explicit zero and not specified. Defaults to 10.", + "format": "int32", + "type": "integer" + }, + "selector": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector", + "description": "Label selector for pods. Existing ReplicaSets whose pods are selected by this will be the ones affected by this deployment. It must match the pod template's labels." + }, + "strategy": { + "$ref": "#/definitions/io.k8s.api.apps.v1.DeploymentStrategy", + "description": "The deployment strategy to use to replace existing pods with new ones.", + "x-kubernetes-patch-strategy": "retainKeys" + }, + "template": { + "$ref": "#/definitions/io.k8s.api.core.v1.PodTemplateSpec", + "description": "Template describes the pods that will be created." + } + }, + "required": [ + "selector", + "template" + ], + "type": "object" + }, + "io.k8s.api.apps.v1.DeploymentStatus": { + "description": "DeploymentStatus is the most recently observed status of the Deployment.", + "properties": { + "availableReplicas": { + "description": "Total number of available pods (ready for at least minReadySeconds) targeted by this deployment.", + "format": "int32", + "type": "integer" + }, + "collisionCount": { + "description": "Count of hash collisions for the Deployment. The Deployment controller uses this field as a collision avoidance mechanism when it needs to create the name for the newest ReplicaSet.", + "format": "int32", + "type": "integer" + }, + "conditions": { + "description": "Represents the latest available observations of a deployment's current state.", + "items": { + "$ref": "#/definitions/io.k8s.api.apps.v1.DeploymentCondition" + }, + "type": "array", + "x-kubernetes-patch-merge-key": "type", + "x-kubernetes-patch-strategy": "merge" + }, + "observedGeneration": { + "description": "The generation observed by the deployment controller.", + "format": "int64", + "type": "integer" + }, + "readyReplicas": { + "description": "Total number of ready pods targeted by this deployment.", + "format": "int32", + "type": "integer" + }, + "replicas": { + "description": "Total number of non-terminated pods targeted by this deployment (their labels match the selector).", + "format": "int32", + "type": "integer" + }, + "unavailableReplicas": { + "description": "Total number of unavailable pods targeted by this deployment. This is the total number of pods that are still required for the deployment to have 100% available capacity. They may either be pods that are running but not yet available or pods that still have not been created.", + "format": "int32", + "type": "integer" + }, + "updatedReplicas": { + "description": "Total number of non-terminated pods targeted by this deployment that have the desired template spec.", + "format": "int32", + "type": "integer" + } + }, + "type": "object" + }, + "io.k8s.api.apps.v1.DeploymentStrategy": { + "description": "DeploymentStrategy describes how to replace existing pods with new ones.", + "properties": { + "rollingUpdate": { + "$ref": "#/definitions/io.k8s.api.apps.v1.RollingUpdateDeployment", + "description": "Rolling update config params. Present only if DeploymentStrategyType = RollingUpdate." + }, + "type": { + "description": "Type of deployment. Can be \"Recreate\" or \"RollingUpdate\". Default is RollingUpdate.", + "type": "string" + } + }, + "type": "object" + }, + "io.k8s.api.apps.v1.ReplicaSet": { + "description": "ReplicaSet ensures that a specified number of pod replicas are running at any given time.", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta", + "description": "If the Labels of a ReplicaSet are empty, they are defaulted to be the same as the Pod(s) that the ReplicaSet manages. Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata" + }, + "spec": { + "$ref": "#/definitions/io.k8s.api.apps.v1.ReplicaSetSpec", + "description": "Spec defines the specification of the desired behavior of the ReplicaSet. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status" + }, + "status": { + "$ref": "#/definitions/io.k8s.api.apps.v1.ReplicaSetStatus", + "description": "Status is the most recently observed status of the ReplicaSet. This data may be out of date by some window of time. Populated by the system. Read-only. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status" + } + }, + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "apps", + "kind": "ReplicaSet", + "version": "v1" + } + ] + }, + "io.k8s.api.apps.v1.ReplicaSetCondition": { + "description": "ReplicaSetCondition describes the state of a replica set at a certain point.", + "properties": { + "lastTransitionTime": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time", + "description": "The last time the condition transitioned from one status to another." + }, + "message": { + "description": "A human readable message indicating details about the transition.", + "type": "string" + }, + "reason": { + "description": "The reason for the condition's last transition.", + "type": "string" + }, + "status": { + "description": "Status of the condition, one of True, False, Unknown.", + "type": "string" + }, + "type": { + "description": "Type of replica set condition.", + "type": "string" + } + }, + "required": [ + "type", + "status" + ], + "type": "object" + }, + "io.k8s.api.apps.v1.ReplicaSetList": { + "description": "ReplicaSetList is a collection of ReplicaSets.", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "items": { + "description": "List of ReplicaSets. More info: https://kubernetes.io/docs/concepts/workloads/controllers/replicationcontroller", + "items": { + "$ref": "#/definitions/io.k8s.api.apps.v1.ReplicaSet" + }, + "type": "array" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta", + "description": "Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds" + } + }, + "required": [ + "items" + ], + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "apps", + "kind": "ReplicaSetList", + "version": "v1" + } + ] + }, + "io.k8s.api.apps.v1.ReplicaSetSpec": { + "description": "ReplicaSetSpec is the specification of a ReplicaSet.", + "properties": { + "minReadySeconds": { + "description": "Minimum number of seconds for which a newly created pod should be ready without any of its container crashing, for it to be considered available. Defaults to 0 (pod will be considered available as soon as it is ready)", + "format": "int32", + "type": "integer" + }, + "replicas": { + "description": "Replicas is the number of desired replicas. This is a pointer to distinguish between explicit zero and unspecified. Defaults to 1. More info: https://kubernetes.io/docs/concepts/workloads/controllers/replicationcontroller/#what-is-a-replicationcontroller", + "format": "int32", + "type": "integer" + }, + "selector": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector", + "description": "Selector is a label query over pods that should match the replica count. Label keys and values that must match in order to be controlled by this replica set. It must match the pod template's labels. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#label-selectors" + }, + "template": { + "$ref": "#/definitions/io.k8s.api.core.v1.PodTemplateSpec", + "description": "Template is the object that describes the pod that will be created if insufficient replicas are detected. More info: https://kubernetes.io/docs/concepts/workloads/controllers/replicationcontroller#pod-template" + } + }, + "required": [ + "selector" + ], + "type": "object" + }, + "io.k8s.api.apps.v1.ReplicaSetStatus": { + "description": "ReplicaSetStatus represents the current status of a ReplicaSet.", + "properties": { + "availableReplicas": { + "description": "The number of available replicas (ready for at least minReadySeconds) for this replica set.", + "format": "int32", + "type": "integer" + }, + "conditions": { + "description": "Represents the latest available observations of a replica set's current state.", + "items": { + "$ref": "#/definitions/io.k8s.api.apps.v1.ReplicaSetCondition" + }, + "type": "array", + "x-kubernetes-patch-merge-key": "type", + "x-kubernetes-patch-strategy": "merge" + }, + "fullyLabeledReplicas": { + "description": "The number of pods that have labels matching the labels of the pod template of the replicaset.", + "format": "int32", + "type": "integer" + }, + "observedGeneration": { + "description": "ObservedGeneration reflects the generation of the most recently observed ReplicaSet.", + "format": "int64", + "type": "integer" + }, + "readyReplicas": { + "description": "The number of ready replicas for this replica set.", + "format": "int32", + "type": "integer" + }, + "replicas": { + "description": "Replicas is the most recently oberved number of replicas. More info: https://kubernetes.io/docs/concepts/workloads/controllers/replicationcontroller/#what-is-a-replicationcontroller", + "format": "int32", + "type": "integer" + } + }, + "required": [ + "replicas" + ], + "type": "object" + }, + "io.k8s.api.apps.v1.RollingUpdateDaemonSet": { + "description": "Spec to control the desired behavior of daemon set rolling update.", + "properties": { + "maxSurge": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.util.intstr.IntOrString", + "description": "The maximum number of nodes with an existing available DaemonSet pod that can have an updated DaemonSet pod during during an update. Value can be an absolute number (ex: 5) or a percentage of desired pods (ex: 10%). This can not be 0 if MaxUnavailable is 0. Absolute number is calculated from percentage by rounding up to a minimum of 1. Default value is 0. Example: when this is set to 30%, at most 30% of the total number of nodes that should be running the daemon pod (i.e. status.desiredNumberScheduled) can have their a new pod created before the old pod is marked as deleted. The update starts by launching new pods on 30% of nodes. Once an updated pod is available (Ready for at least minReadySeconds) the old DaemonSet pod on that node is marked deleted. If the old pod becomes unavailable for any reason (Ready transitions to false, is evicted, or is drained) an updated pod is immediatedly created on that node without considering surge limits. Allowing surge implies the possibility that the resources consumed by the daemonset on any given node can double if the readiness check fails, and so resource intensive daemonsets should take into account that they may cause evictions during disruption. This is an alpha field and requires enabling DaemonSetUpdateSurge feature gate." + }, + "maxUnavailable": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.util.intstr.IntOrString", + "description": "The maximum number of DaemonSet pods that can be unavailable during the update. Value can be an absolute number (ex: 5) or a percentage of total number of DaemonSet pods at the start of the update (ex: 10%). Absolute number is calculated from percentage by rounding down to a minimum of one. This cannot be 0 if MaxSurge is 0 Default value is 1. Example: when this is set to 30%, at most 30% of the total number of nodes that should be running the daemon pod (i.e. status.desiredNumberScheduled) can have their pods stopped for an update at any given time. The update starts by stopping at most 30% of those DaemonSet pods and then brings up new DaemonSet pods in their place. Once the new pods are available, it then proceeds onto other DaemonSet pods, thus ensuring that at least 70% of original number of DaemonSet pods are available at all times during the update." + } + }, + "type": "object" + }, + "io.k8s.api.apps.v1.RollingUpdateDeployment": { + "description": "Spec to control the desired behavior of rolling update.", + "properties": { + "maxSurge": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.util.intstr.IntOrString", + "description": "The maximum number of pods that can be scheduled above the desired number of pods. Value can be an absolute number (ex: 5) or a percentage of desired pods (ex: 10%). This can not be 0 if MaxUnavailable is 0. Absolute number is calculated from percentage by rounding up. Defaults to 25%. Example: when this is set to 30%, the new ReplicaSet can be scaled up immediately when the rolling update starts, such that the total number of old and new pods do not exceed 130% of desired pods. Once old pods have been killed, new ReplicaSet can be scaled up further, ensuring that total number of pods running at any time during the update is at most 130% of desired pods." + }, + "maxUnavailable": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.util.intstr.IntOrString", + "description": "The maximum number of pods that can be unavailable during the update. Value can be an absolute number (ex: 5) or a percentage of desired pods (ex: 10%). Absolute number is calculated from percentage by rounding down. This can not be 0 if MaxSurge is 0. Defaults to 25%. Example: when this is set to 30%, the old ReplicaSet can be scaled down to 70% of desired pods immediately when the rolling update starts. Once new pods are ready, old ReplicaSet can be scaled down further, followed by scaling up the new ReplicaSet, ensuring that the total number of pods available at all times during the update is at least 70% of desired pods." + } + }, + "type": "object" + }, + "io.k8s.api.apps.v1.RollingUpdateStatefulSetStrategy": { + "description": "RollingUpdateStatefulSetStrategy is used to communicate parameter for RollingUpdateStatefulSetStrategyType.", + "properties": { + "partition": { + "description": "Partition indicates the ordinal at which the StatefulSet should be partitioned. Default value is 0.", + "format": "int32", + "type": "integer" + } + }, + "type": "object" + }, + "io.k8s.api.apps.v1.StatefulSet": { + "description": "StatefulSet represents a set of pods with consistent identities. Identities are defined as:\n - Network: A single stable DNS and hostname.\n - Storage: As many VolumeClaims as requested.\nThe StatefulSet guarantees that a given network identity will always map to the same storage identity.", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + }, + "spec": { + "$ref": "#/definitions/io.k8s.api.apps.v1.StatefulSetSpec", + "description": "Spec defines the desired identities of pods in this set." + }, + "status": { + "$ref": "#/definitions/io.k8s.api.apps.v1.StatefulSetStatus", + "description": "Status is the current status of Pods in this StatefulSet. This data may be out of date by some window of time." + } + }, + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "apps", + "kind": "StatefulSet", + "version": "v1" + } + ] + }, + "io.k8s.api.apps.v1.StatefulSetCondition": { + "description": "StatefulSetCondition describes the state of a statefulset at a certain point.", + "properties": { + "lastTransitionTime": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time", + "description": "Last time the condition transitioned from one status to another." + }, + "message": { + "description": "A human readable message indicating details about the transition.", + "type": "string" + }, + "reason": { + "description": "The reason for the condition's last transition.", + "type": "string" + }, + "status": { + "description": "Status of the condition, one of True, False, Unknown.", + "type": "string" + }, + "type": { + "description": "Type of statefulset condition.", + "type": "string" + } + }, + "required": [ + "type", + "status" + ], + "type": "object" + }, + "io.k8s.api.apps.v1.StatefulSetList": { + "description": "StatefulSetList is a collection of StatefulSets.", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "items": { + "items": { + "$ref": "#/definitions/io.k8s.api.apps.v1.StatefulSet" + }, + "type": "array" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" + } + }, + "required": [ + "items" + ], + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "apps", + "kind": "StatefulSetList", + "version": "v1" + } + ] + }, + "io.k8s.api.apps.v1.StatefulSetSpec": { + "description": "A StatefulSetSpec is the specification of a StatefulSet.", + "properties": { + "podManagementPolicy": { + "description": "podManagementPolicy controls how pods are created during initial scale up, when replacing pods on nodes, or when scaling down. The default policy is `OrderedReady`, where pods are created in increasing order (pod-0, then pod-1, etc) and the controller will wait until each pod is ready before continuing. When scaling down, the pods are removed in the opposite order. The alternative policy is `Parallel` which will create pods in parallel to match the desired scale without waiting, and on scale down will delete all pods at once.", + "type": "string" + }, + "replicas": { + "description": "replicas is the desired number of replicas of the given Template. These are replicas in the sense that they are instantiations of the same Template, but individual replicas also have a consistent identity. If unspecified, defaults to 1.", + "format": "int32", + "type": "integer" + }, + "revisionHistoryLimit": { + "description": "revisionHistoryLimit is the maximum number of revisions that will be maintained in the StatefulSet's revision history. The revision history consists of all revisions not represented by a currently applied StatefulSetSpec version. The default value is 10.", + "format": "int32", + "type": "integer" + }, + "selector": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector", + "description": "selector is a label query over pods that should match the replica count. It must match the pod template's labels. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#label-selectors" + }, + "serviceName": { + "description": "serviceName is the name of the service that governs this StatefulSet. This service must exist before the StatefulSet, and is responsible for the network identity of the set. Pods get DNS/hostnames that follow the pattern: pod-specific-string.serviceName.default.svc.cluster.local where \"pod-specific-string\" is managed by the StatefulSet controller.", + "type": "string" + }, + "template": { + "$ref": "#/definitions/io.k8s.api.core.v1.PodTemplateSpec", + "description": "template is the object that describes the pod that will be created if insufficient replicas are detected. Each pod stamped out by the StatefulSet will fulfill this Template, but have a unique identity from the rest of the StatefulSet." + }, + "updateStrategy": { + "$ref": "#/definitions/io.k8s.api.apps.v1.StatefulSetUpdateStrategy", + "description": "updateStrategy indicates the StatefulSetUpdateStrategy that will be employed to update Pods in the StatefulSet when a revision is made to Template." + }, + "volumeClaimTemplates": { + "description": "volumeClaimTemplates is a list of claims that pods are allowed to reference. The StatefulSet controller is responsible for mapping network identities to claims in a way that maintains the identity of a pod. Every claim in this list must have at least one matching (by name) volumeMount in one container in the template. A claim in this list takes precedence over any volumes in the template, with the same name.", + "items": { + "$ref": "#/definitions/io.k8s.api.core.v1.PersistentVolumeClaim" + }, + "type": "array" + } + }, + "required": [ + "selector", + "template", + "serviceName" + ], + "type": "object" + }, + "io.k8s.api.apps.v1.StatefulSetStatus": { + "description": "StatefulSetStatus represents the current state of a StatefulSet.", + "properties": { + "collisionCount": { + "description": "collisionCount is the count of hash collisions for the StatefulSet. The StatefulSet controller uses this field as a collision avoidance mechanism when it needs to create the name for the newest ControllerRevision.", + "format": "int32", + "type": "integer" + }, + "conditions": { + "description": "Represents the latest available observations of a statefulset's current state.", + "items": { + "$ref": "#/definitions/io.k8s.api.apps.v1.StatefulSetCondition" + }, + "type": "array", + "x-kubernetes-patch-merge-key": "type", + "x-kubernetes-patch-strategy": "merge" + }, + "currentReplicas": { + "description": "currentReplicas is the number of Pods created by the StatefulSet controller from the StatefulSet version indicated by currentRevision.", + "format": "int32", + "type": "integer" + }, + "currentRevision": { + "description": "currentRevision, if not empty, indicates the version of the StatefulSet used to generate Pods in the sequence [0,currentReplicas).", + "type": "string" + }, + "observedGeneration": { + "description": "observedGeneration is the most recent generation observed for this StatefulSet. It corresponds to the StatefulSet's generation, which is updated on mutation by the API Server.", + "format": "int64", + "type": "integer" + }, + "readyReplicas": { + "description": "readyReplicas is the number of Pods created by the StatefulSet controller that have a Ready Condition.", + "format": "int32", + "type": "integer" + }, + "replicas": { + "description": "replicas is the number of Pods created by the StatefulSet controller.", + "format": "int32", + "type": "integer" + }, + "updateRevision": { + "description": "updateRevision, if not empty, indicates the version of the StatefulSet used to generate Pods in the sequence [replicas-updatedReplicas,replicas)", + "type": "string" + }, + "updatedReplicas": { + "description": "updatedReplicas is the number of Pods created by the StatefulSet controller from the StatefulSet version indicated by updateRevision.", + "format": "int32", + "type": "integer" + } + }, + "required": [ + "replicas" + ], + "type": "object" + }, + "io.k8s.api.apps.v1.StatefulSetUpdateStrategy": { + "description": "StatefulSetUpdateStrategy indicates the strategy that the StatefulSet controller will use to perform updates. It includes any additional parameters necessary to perform the update for the indicated strategy.", + "properties": { + "rollingUpdate": { + "$ref": "#/definitions/io.k8s.api.apps.v1.RollingUpdateStatefulSetStrategy", + "description": "RollingUpdate is used to communicate parameters when Type is RollingUpdateStatefulSetStrategyType." + }, + "type": { + "description": "Type indicates the type of the StatefulSetUpdateStrategy. Default is RollingUpdate.", + "type": "string" + } + }, + "type": "object" + }, + "io.k8s.api.authentication.v1.BoundObjectReference": { + "description": "BoundObjectReference is a reference to an object that a token is bound to.", + "properties": { + "apiVersion": { + "description": "API version of the referent.", + "type": "string" + }, + "kind": { + "description": "Kind of the referent. Valid kinds are 'Pod' and 'Secret'.", + "type": "string" + }, + "name": { + "description": "Name of the referent.", + "type": "string" + }, + "uid": { + "description": "UID of the referent.", + "type": "string" + } + }, + "type": "object" + }, + "io.k8s.api.authentication.v1.TokenRequest": { + "description": "TokenRequest requests a token for a given service account.", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + }, + "spec": { + "$ref": "#/definitions/io.k8s.api.authentication.v1.TokenRequestSpec" + }, + "status": { + "$ref": "#/definitions/io.k8s.api.authentication.v1.TokenRequestStatus" + } + }, + "required": [ + "spec" + ], + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "authentication.k8s.io", + "kind": "TokenRequest", + "version": "v1" + } + ] + }, + "io.k8s.api.authentication.v1.TokenRequestSpec": { + "description": "TokenRequestSpec contains client provided parameters of a token request.", + "properties": { + "audiences": { + "description": "Audiences are the intendend audiences of the token. A recipient of a token must identitfy themself with an identifier in the list of audiences of the token, and otherwise should reject the token. A token issued for multiple audiences may be used to authenticate against any of the audiences listed but implies a high degree of trust between the target audiences.", + "items": { + "type": "string" + }, + "type": "array" + }, + "boundObjectRef": { + "$ref": "#/definitions/io.k8s.api.authentication.v1.BoundObjectReference", + "description": "BoundObjectRef is a reference to an object that the token will be bound to. The token will only be valid for as long as the bound object exists. NOTE: The API server's TokenReview endpoint will validate the BoundObjectRef, but other audiences may not. Keep ExpirationSeconds small if you want prompt revocation." + }, + "expirationSeconds": { + "description": "ExpirationSeconds is the requested duration of validity of the request. The token issuer may return a token with a different validity duration so a client needs to check the 'expiration' field in a response.", + "format": "int64", + "type": "integer" + } + }, + "required": [ + "audiences" + ], + "type": "object" + }, + "io.k8s.api.authentication.v1.TokenRequestStatus": { + "description": "TokenRequestStatus is the result of a token request.", + "properties": { + "expirationTimestamp": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time", + "description": "ExpirationTimestamp is the time of expiration of the returned token." + }, + "token": { + "description": "Token is the opaque bearer token.", + "type": "string" + } + }, + "required": [ + "token", + "expirationTimestamp" + ], + "type": "object" + }, + "io.k8s.api.authentication.v1.TokenReview": { + "description": "TokenReview attempts to authenticate a token to a known user. Note: TokenReview requests may be cached by the webhook token authenticator plugin in the kube-apiserver.", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + }, + "spec": { + "$ref": "#/definitions/io.k8s.api.authentication.v1.TokenReviewSpec", + "description": "Spec holds information about the request being evaluated" + }, + "status": { + "$ref": "#/definitions/io.k8s.api.authentication.v1.TokenReviewStatus", + "description": "Status is filled in by the server and indicates whether the request can be authenticated." + } + }, + "required": [ + "spec" + ], + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "authentication.k8s.io", + "kind": "TokenReview", + "version": "v1" + } + ] + }, + "io.k8s.api.authentication.v1.TokenReviewSpec": { + "description": "TokenReviewSpec is a description of the token authentication request.", + "properties": { + "audiences": { + "description": "Audiences is a list of the identifiers that the resource server presented with the token identifies as. Audience-aware token authenticators will verify that the token was intended for at least one of the audiences in this list. If no audiences are provided, the audience will default to the audience of the Kubernetes apiserver.", + "items": { + "type": "string" + }, + "type": "array" + }, + "token": { + "description": "Token is the opaque bearer token.", + "type": "string" + } + }, + "type": "object" + }, + "io.k8s.api.authentication.v1.TokenReviewStatus": { + "description": "TokenReviewStatus is the result of the token authentication request.", + "properties": { + "audiences": { + "description": "Audiences are audience identifiers chosen by the authenticator that are compatible with both the TokenReview and token. An identifier is any identifier in the intersection of the TokenReviewSpec audiences and the token's audiences. A client of the TokenReview API that sets the spec.audiences field should validate that a compatible audience identifier is returned in the status.audiences field to ensure that the TokenReview server is audience aware. If a TokenReview returns an empty status.audience field where status.authenticated is \"true\", the token is valid against the audience of the Kubernetes API server.", + "items": { + "type": "string" + }, + "type": "array" + }, + "authenticated": { + "description": "Authenticated indicates that the token was associated with a known user.", + "type": "boolean" + }, + "error": { + "description": "Error indicates that the token couldn't be checked", + "type": "string" + }, + "user": { + "$ref": "#/definitions/io.k8s.api.authentication.v1.UserInfo", + "description": "User is the UserInfo associated with the provided token." + } + }, + "type": "object" + }, + "io.k8s.api.authentication.v1.UserInfo": { + "description": "UserInfo holds the information about the user needed to implement the user.Info interface.", + "properties": { + "extra": { + "additionalProperties": { + "items": { + "type": "string" + }, + "type": "array" + }, + "description": "Any additional information provided by the authenticator.", + "type": "object" + }, + "groups": { + "description": "The names of groups this user is a part of.", + "items": { + "type": "string" + }, + "type": "array" + }, + "uid": { + "description": "A unique value that identifies this user across time. If this user is deleted and another user by the same name is added, they will have different UIDs.", + "type": "string" + }, + "username": { + "description": "The name that uniquely identifies this user among all active users.", + "type": "string" + } + }, + "type": "object" + }, + "io.k8s.api.authentication.v1beta1.TokenReview": { + "description": "TokenReview attempts to authenticate a token to a known user. Note: TokenReview requests may be cached by the webhook token authenticator plugin in the kube-apiserver.", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + }, + "spec": { + "$ref": "#/definitions/io.k8s.api.authentication.v1beta1.TokenReviewSpec", + "description": "Spec holds information about the request being evaluated" + }, + "status": { + "$ref": "#/definitions/io.k8s.api.authentication.v1beta1.TokenReviewStatus", + "description": "Status is filled in by the server and indicates whether the request can be authenticated." + } + }, + "required": [ + "spec" + ], + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "authentication.k8s.io", + "kind": "TokenReview", + "version": "v1beta1" + } + ] + }, + "io.k8s.api.authentication.v1beta1.TokenReviewSpec": { + "description": "TokenReviewSpec is a description of the token authentication request.", + "properties": { + "audiences": { + "description": "Audiences is a list of the identifiers that the resource server presented with the token identifies as. Audience-aware token authenticators will verify that the token was intended for at least one of the audiences in this list. If no audiences are provided, the audience will default to the audience of the Kubernetes apiserver.", + "items": { + "type": "string" + }, + "type": "array" + }, + "token": { + "description": "Token is the opaque bearer token.", + "type": "string" + } + }, + "type": "object" + }, + "io.k8s.api.authentication.v1beta1.TokenReviewStatus": { + "description": "TokenReviewStatus is the result of the token authentication request.", + "properties": { + "audiences": { + "description": "Audiences are audience identifiers chosen by the authenticator that are compatible with both the TokenReview and token. An identifier is any identifier in the intersection of the TokenReviewSpec audiences and the token's audiences. A client of the TokenReview API that sets the spec.audiences field should validate that a compatible audience identifier is returned in the status.audiences field to ensure that the TokenReview server is audience aware. If a TokenReview returns an empty status.audience field where status.authenticated is \"true\", the token is valid against the audience of the Kubernetes API server.", + "items": { + "type": "string" + }, + "type": "array" + }, + "authenticated": { + "description": "Authenticated indicates that the token was associated with a known user.", + "type": "boolean" + }, + "error": { + "description": "Error indicates that the token couldn't be checked", + "type": "string" + }, + "user": { + "$ref": "#/definitions/io.k8s.api.authentication.v1beta1.UserInfo", + "description": "User is the UserInfo associated with the provided token." + } + }, + "type": "object" + }, + "io.k8s.api.authentication.v1beta1.UserInfo": { + "description": "UserInfo holds the information about the user needed to implement the user.Info interface.", + "properties": { + "extra": { + "additionalProperties": { + "items": { + "type": "string" + }, + "type": "array" + }, + "description": "Any additional information provided by the authenticator.", + "type": "object" + }, + "groups": { + "description": "The names of groups this user is a part of.", + "items": { + "type": "string" + }, + "type": "array" + }, + "uid": { + "description": "A unique value that identifies this user across time. If this user is deleted and another user by the same name is added, they will have different UIDs.", + "type": "string" + }, + "username": { + "description": "The name that uniquely identifies this user among all active users.", + "type": "string" + } + }, + "type": "object" + }, + "io.k8s.api.authorization.v1.LocalSubjectAccessReview": { + "description": "LocalSubjectAccessReview checks whether or not a user or group can perform an action in a given namespace. Having a namespace scoped resource makes it much easier to grant namespace scoped policy that includes permissions checking.", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + }, + "spec": { + "$ref": "#/definitions/io.k8s.api.authorization.v1.SubjectAccessReviewSpec", + "description": "Spec holds information about the request being evaluated. spec.namespace must be equal to the namespace you made the request against. If empty, it is defaulted." + }, + "status": { + "$ref": "#/definitions/io.k8s.api.authorization.v1.SubjectAccessReviewStatus", + "description": "Status is filled in by the server and indicates whether the request is allowed or not" + } + }, + "required": [ + "spec" + ], + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "authorization.k8s.io", + "kind": "LocalSubjectAccessReview", + "version": "v1" + } + ] + }, + "io.k8s.api.authorization.v1.NonResourceAttributes": { + "description": "NonResourceAttributes includes the authorization attributes available for non-resource requests to the Authorizer interface", + "properties": { + "path": { + "description": "Path is the URL path of the request", + "type": "string" + }, + "verb": { + "description": "Verb is the standard HTTP verb", + "type": "string" + } + }, + "type": "object" + }, + "io.k8s.api.authorization.v1.NonResourceRule": { + "description": "NonResourceRule holds information that describes a rule for the non-resource", + "properties": { + "nonResourceURLs": { + "description": "NonResourceURLs is a set of partial urls that a user should have access to. *s are allowed, but only as the full, final step in the path. \"*\" means all.", + "items": { + "type": "string" + }, + "type": "array" + }, + "verbs": { + "description": "Verb is a list of kubernetes non-resource API verbs, like: get, post, put, delete, patch, head, options. \"*\" means all.", + "items": { + "type": "string" + }, + "type": "array" + } + }, + "required": [ + "verbs" + ], + "type": "object" + }, + "io.k8s.api.authorization.v1.ResourceAttributes": { + "description": "ResourceAttributes includes the authorization attributes available for resource requests to the Authorizer interface", + "properties": { + "group": { + "description": "Group is the API Group of the Resource. \"*\" means all.", + "type": "string" + }, + "name": { + "description": "Name is the name of the resource being requested for a \"get\" or deleted for a \"delete\". \"\" (empty) means all.", + "type": "string" + }, + "namespace": { + "description": "Namespace is the namespace of the action being requested. Currently, there is no distinction between no namespace and all namespaces \"\" (empty) is defaulted for LocalSubjectAccessReviews \"\" (empty) is empty for cluster-scoped resources \"\" (empty) means \"all\" for namespace scoped resources from a SubjectAccessReview or SelfSubjectAccessReview", + "type": "string" + }, + "resource": { + "description": "Resource is one of the existing resource types. \"*\" means all.", + "type": "string" + }, + "subresource": { + "description": "Subresource is one of the existing resource types. \"\" means none.", + "type": "string" + }, + "verb": { + "description": "Verb is a kubernetes resource API verb, like: get, list, watch, create, update, delete, proxy. \"*\" means all.", + "type": "string" + }, + "version": { + "description": "Version is the API Version of the Resource. \"*\" means all.", + "type": "string" + } + }, + "type": "object" + }, + "io.k8s.api.authorization.v1.ResourceRule": { + "description": "ResourceRule is the list of actions the subject is allowed to perform on resources. The list ordering isn't significant, may contain duplicates, and possibly be incomplete.", + "properties": { + "apiGroups": { + "description": "APIGroups is the name of the APIGroup that contains the resources. If multiple API groups are specified, any action requested against one of the enumerated resources in any API group will be allowed. \"*\" means all.", + "items": { + "type": "string" + }, + "type": "array" + }, + "resourceNames": { + "description": "ResourceNames is an optional white list of names that the rule applies to. An empty set means that everything is allowed. \"*\" means all.", + "items": { + "type": "string" + }, + "type": "array" + }, + "resources": { + "description": "Resources is a list of resources this rule applies to. \"*\" means all in the specified apiGroups.\n \"*/foo\" represents the subresource 'foo' for all resources in the specified apiGroups.", + "items": { + "type": "string" + }, + "type": "array" + }, + "verbs": { + "description": "Verb is a list of kubernetes resource API verbs, like: get, list, watch, create, update, delete, proxy. \"*\" means all.", + "items": { + "type": "string" + }, + "type": "array" + } + }, + "required": [ + "verbs" + ], + "type": "object" + }, + "io.k8s.api.authorization.v1.SelfSubjectAccessReview": { + "description": "SelfSubjectAccessReview checks whether or the current user can perform an action. Not filling in a spec.namespace means \"in all namespaces\". Self is a special case, because users should always be able to check whether they can perform an action", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + }, + "spec": { + "$ref": "#/definitions/io.k8s.api.authorization.v1.SelfSubjectAccessReviewSpec", + "description": "Spec holds information about the request being evaluated. user and groups must be empty" + }, + "status": { + "$ref": "#/definitions/io.k8s.api.authorization.v1.SubjectAccessReviewStatus", + "description": "Status is filled in by the server and indicates whether the request is allowed or not" + } + }, + "required": [ + "spec" + ], + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "authorization.k8s.io", + "kind": "SelfSubjectAccessReview", + "version": "v1" + } + ] + }, + "io.k8s.api.authorization.v1.SelfSubjectAccessReviewSpec": { + "description": "SelfSubjectAccessReviewSpec is a description of the access request. Exactly one of ResourceAuthorizationAttributes and NonResourceAuthorizationAttributes must be set", + "properties": { + "nonResourceAttributes": { + "$ref": "#/definitions/io.k8s.api.authorization.v1.NonResourceAttributes", + "description": "NonResourceAttributes describes information for a non-resource access request" + }, + "resourceAttributes": { + "$ref": "#/definitions/io.k8s.api.authorization.v1.ResourceAttributes", + "description": "ResourceAuthorizationAttributes describes information for a resource access request" + } + }, + "type": "object" + }, + "io.k8s.api.authorization.v1.SelfSubjectRulesReview": { + "description": "SelfSubjectRulesReview enumerates the set of actions the current user can perform within a namespace. The returned list of actions may be incomplete depending on the server's authorization mode, and any errors experienced during the evaluation. SelfSubjectRulesReview should be used by UIs to show/hide actions, or to quickly let an end user reason about their permissions. It should NOT Be used by external systems to drive authorization decisions as this raises confused deputy, cache lifetime/revocation, and correctness concerns. SubjectAccessReview, and LocalAccessReview are the correct way to defer authorization decisions to the API server.", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + }, + "spec": { + "$ref": "#/definitions/io.k8s.api.authorization.v1.SelfSubjectRulesReviewSpec", + "description": "Spec holds information about the request being evaluated." + }, + "status": { + "$ref": "#/definitions/io.k8s.api.authorization.v1.SubjectRulesReviewStatus", + "description": "Status is filled in by the server and indicates the set of actions a user can perform." + } + }, + "required": [ + "spec" + ], + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "authorization.k8s.io", + "kind": "SelfSubjectRulesReview", + "version": "v1" + } + ] + }, + "io.k8s.api.authorization.v1.SelfSubjectRulesReviewSpec": { + "properties": { + "namespace": { + "description": "Namespace to evaluate rules for. Required.", + "type": "string" + } + }, + "type": "object" + }, + "io.k8s.api.authorization.v1.SubjectAccessReview": { + "description": "SubjectAccessReview checks whether or not a user or group can perform an action.", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + }, + "spec": { + "$ref": "#/definitions/io.k8s.api.authorization.v1.SubjectAccessReviewSpec", + "description": "Spec holds information about the request being evaluated" + }, + "status": { + "$ref": "#/definitions/io.k8s.api.authorization.v1.SubjectAccessReviewStatus", + "description": "Status is filled in by the server and indicates whether the request is allowed or not" + } + }, + "required": [ + "spec" + ], + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "authorization.k8s.io", + "kind": "SubjectAccessReview", + "version": "v1" + } + ] + }, + "io.k8s.api.authorization.v1.SubjectAccessReviewSpec": { + "description": "SubjectAccessReviewSpec is a description of the access request. Exactly one of ResourceAuthorizationAttributes and NonResourceAuthorizationAttributes must be set", + "properties": { + "extra": { + "additionalProperties": { + "items": { + "type": "string" + }, + "type": "array" + }, + "description": "Extra corresponds to the user.Info.GetExtra() method from the authenticator. Since that is input to the authorizer it needs a reflection here.", + "type": "object" + }, + "groups": { + "description": "Groups is the groups you're testing for.", + "items": { + "type": "string" + }, + "type": "array" + }, + "nonResourceAttributes": { + "$ref": "#/definitions/io.k8s.api.authorization.v1.NonResourceAttributes", + "description": "NonResourceAttributes describes information for a non-resource access request" + }, + "resourceAttributes": { + "$ref": "#/definitions/io.k8s.api.authorization.v1.ResourceAttributes", + "description": "ResourceAuthorizationAttributes describes information for a resource access request" + }, + "uid": { + "description": "UID information about the requesting user.", + "type": "string" + }, + "user": { + "description": "User is the user you're testing for. If you specify \"User\" but not \"Groups\", then is it interpreted as \"What if User were not a member of any groups", + "type": "string" + } + }, + "type": "object" + }, + "io.k8s.api.authorization.v1.SubjectAccessReviewStatus": { + "description": "SubjectAccessReviewStatus", + "properties": { + "allowed": { + "description": "Allowed is required. True if the action would be allowed, false otherwise.", + "type": "boolean" + }, + "denied": { + "description": "Denied is optional. True if the action would be denied, otherwise false. If both allowed is false and denied is false, then the authorizer has no opinion on whether to authorize the action. Denied may not be true if Allowed is true.", + "type": "boolean" + }, + "evaluationError": { + "description": "EvaluationError is an indication that some error occurred during the authorization check. It is entirely possible to get an error and be able to continue determine authorization status in spite of it. For instance, RBAC can be missing a role, but enough roles are still present and bound to reason about the request.", + "type": "string" + }, + "reason": { + "description": "Reason is optional. It indicates why a request was allowed or denied.", + "type": "string" + } + }, + "required": [ + "allowed" + ], + "type": "object" + }, + "io.k8s.api.authorization.v1.SubjectRulesReviewStatus": { + "description": "SubjectRulesReviewStatus contains the result of a rules check. This check can be incomplete depending on the set of authorizers the server is configured with and any errors experienced during evaluation. Because authorization rules are additive, if a rule appears in a list it's safe to assume the subject has that permission, even if that list is incomplete.", + "properties": { + "evaluationError": { + "description": "EvaluationError can appear in combination with Rules. It indicates an error occurred during rule evaluation, such as an authorizer that doesn't support rule evaluation, and that ResourceRules and/or NonResourceRules may be incomplete.", + "type": "string" + }, + "incomplete": { + "description": "Incomplete is true when the rules returned by this call are incomplete. This is most commonly encountered when an authorizer, such as an external authorizer, doesn't support rules evaluation.", + "type": "boolean" + }, + "nonResourceRules": { + "description": "NonResourceRules is the list of actions the subject is allowed to perform on non-resources. The list ordering isn't significant, may contain duplicates, and possibly be incomplete.", + "items": { + "$ref": "#/definitions/io.k8s.api.authorization.v1.NonResourceRule" + }, + "type": "array" + }, + "resourceRules": { + "description": "ResourceRules is the list of actions the subject is allowed to perform on resources. The list ordering isn't significant, may contain duplicates, and possibly be incomplete.", + "items": { + "$ref": "#/definitions/io.k8s.api.authorization.v1.ResourceRule" + }, + "type": "array" + } + }, + "required": [ + "resourceRules", + "nonResourceRules", + "incomplete" + ], + "type": "object" + }, + "io.k8s.api.authorization.v1beta1.LocalSubjectAccessReview": { + "description": "LocalSubjectAccessReview checks whether or not a user or group can perform an action in a given namespace. Having a namespace scoped resource makes it much easier to grant namespace scoped policy that includes permissions checking.", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + }, + "spec": { + "$ref": "#/definitions/io.k8s.api.authorization.v1beta1.SubjectAccessReviewSpec", + "description": "Spec holds information about the request being evaluated. spec.namespace must be equal to the namespace you made the request against. If empty, it is defaulted." + }, + "status": { + "$ref": "#/definitions/io.k8s.api.authorization.v1beta1.SubjectAccessReviewStatus", + "description": "Status is filled in by the server and indicates whether the request is allowed or not" + } + }, + "required": [ + "spec" + ], + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "authorization.k8s.io", + "kind": "LocalSubjectAccessReview", + "version": "v1beta1" + } + ] + }, + "io.k8s.api.authorization.v1beta1.NonResourceAttributes": { + "description": "NonResourceAttributes includes the authorization attributes available for non-resource requests to the Authorizer interface", + "properties": { + "path": { + "description": "Path is the URL path of the request", + "type": "string" + }, + "verb": { + "description": "Verb is the standard HTTP verb", + "type": "string" + } + }, + "type": "object" + }, + "io.k8s.api.authorization.v1beta1.NonResourceRule": { + "description": "NonResourceRule holds information that describes a rule for the non-resource", + "properties": { + "nonResourceURLs": { + "description": "NonResourceURLs is a set of partial urls that a user should have access to. *s are allowed, but only as the full, final step in the path. \"*\" means all.", + "items": { + "type": "string" + }, + "type": "array" + }, + "verbs": { + "description": "Verb is a list of kubernetes non-resource API verbs, like: get, post, put, delete, patch, head, options. \"*\" means all.", + "items": { + "type": "string" + }, + "type": "array" + } + }, + "required": [ + "verbs" + ], + "type": "object" + }, + "io.k8s.api.authorization.v1beta1.ResourceAttributes": { + "description": "ResourceAttributes includes the authorization attributes available for resource requests to the Authorizer interface", + "properties": { + "group": { + "description": "Group is the API Group of the Resource. \"*\" means all.", + "type": "string" + }, + "name": { + "description": "Name is the name of the resource being requested for a \"get\" or deleted for a \"delete\". \"\" (empty) means all.", + "type": "string" + }, + "namespace": { + "description": "Namespace is the namespace of the action being requested. Currently, there is no distinction between no namespace and all namespaces \"\" (empty) is defaulted for LocalSubjectAccessReviews \"\" (empty) is empty for cluster-scoped resources \"\" (empty) means \"all\" for namespace scoped resources from a SubjectAccessReview or SelfSubjectAccessReview", + "type": "string" + }, + "resource": { + "description": "Resource is one of the existing resource types. \"*\" means all.", + "type": "string" + }, + "subresource": { + "description": "Subresource is one of the existing resource types. \"\" means none.", + "type": "string" + }, + "verb": { + "description": "Verb is a kubernetes resource API verb, like: get, list, watch, create, update, delete, proxy. \"*\" means all.", + "type": "string" + }, + "version": { + "description": "Version is the API Version of the Resource. \"*\" means all.", + "type": "string" + } + }, + "type": "object" + }, + "io.k8s.api.authorization.v1beta1.ResourceRule": { + "description": "ResourceRule is the list of actions the subject is allowed to perform on resources. The list ordering isn't significant, may contain duplicates, and possibly be incomplete.", + "properties": { + "apiGroups": { + "description": "APIGroups is the name of the APIGroup that contains the resources. If multiple API groups are specified, any action requested against one of the enumerated resources in any API group will be allowed. \"*\" means all.", + "items": { + "type": "string" + }, + "type": "array" + }, + "resourceNames": { + "description": "ResourceNames is an optional white list of names that the rule applies to. An empty set means that everything is allowed. \"*\" means all.", + "items": { + "type": "string" + }, + "type": "array" + }, + "resources": { + "description": "Resources is a list of resources this rule applies to. \"*\" means all in the specified apiGroups.\n \"*/foo\" represents the subresource 'foo' for all resources in the specified apiGroups.", + "items": { + "type": "string" + }, + "type": "array" + }, + "verbs": { + "description": "Verb is a list of kubernetes resource API verbs, like: get, list, watch, create, update, delete, proxy. \"*\" means all.", + "items": { + "type": "string" + }, + "type": "array" + } + }, + "required": [ + "verbs" + ], + "type": "object" + }, + "io.k8s.api.authorization.v1beta1.SelfSubjectAccessReview": { + "description": "SelfSubjectAccessReview checks whether or the current user can perform an action. Not filling in a spec.namespace means \"in all namespaces\". Self is a special case, because users should always be able to check whether they can perform an action", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + }, + "spec": { + "$ref": "#/definitions/io.k8s.api.authorization.v1beta1.SelfSubjectAccessReviewSpec", + "description": "Spec holds information about the request being evaluated. user and groups must be empty" + }, + "status": { + "$ref": "#/definitions/io.k8s.api.authorization.v1beta1.SubjectAccessReviewStatus", + "description": "Status is filled in by the server and indicates whether the request is allowed or not" + } + }, + "required": [ + "spec" + ], + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "authorization.k8s.io", + "kind": "SelfSubjectAccessReview", + "version": "v1beta1" + } + ] + }, + "io.k8s.api.authorization.v1beta1.SelfSubjectAccessReviewSpec": { + "description": "SelfSubjectAccessReviewSpec is a description of the access request. Exactly one of ResourceAuthorizationAttributes and NonResourceAuthorizationAttributes must be set", + "properties": { + "nonResourceAttributes": { + "$ref": "#/definitions/io.k8s.api.authorization.v1beta1.NonResourceAttributes", + "description": "NonResourceAttributes describes information for a non-resource access request" + }, + "resourceAttributes": { + "$ref": "#/definitions/io.k8s.api.authorization.v1beta1.ResourceAttributes", + "description": "ResourceAuthorizationAttributes describes information for a resource access request" + } + }, + "type": "object" + }, + "io.k8s.api.authorization.v1beta1.SelfSubjectRulesReview": { + "description": "SelfSubjectRulesReview enumerates the set of actions the current user can perform within a namespace. The returned list of actions may be incomplete depending on the server's authorization mode, and any errors experienced during the evaluation. SelfSubjectRulesReview should be used by UIs to show/hide actions, or to quickly let an end user reason about their permissions. It should NOT Be used by external systems to drive authorization decisions as this raises confused deputy, cache lifetime/revocation, and correctness concerns. SubjectAccessReview, and LocalAccessReview are the correct way to defer authorization decisions to the API server.", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + }, + "spec": { + "$ref": "#/definitions/io.k8s.api.authorization.v1beta1.SelfSubjectRulesReviewSpec", + "description": "Spec holds information about the request being evaluated." + }, + "status": { + "$ref": "#/definitions/io.k8s.api.authorization.v1beta1.SubjectRulesReviewStatus", + "description": "Status is filled in by the server and indicates the set of actions a user can perform." + } + }, + "required": [ + "spec" + ], + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "authorization.k8s.io", + "kind": "SelfSubjectRulesReview", + "version": "v1beta1" + } + ] + }, + "io.k8s.api.authorization.v1beta1.SelfSubjectRulesReviewSpec": { + "properties": { + "namespace": { + "description": "Namespace to evaluate rules for. Required.", + "type": "string" + } + }, + "type": "object" + }, + "io.k8s.api.authorization.v1beta1.SubjectAccessReview": { + "description": "SubjectAccessReview checks whether or not a user or group can perform an action.", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + }, + "spec": { + "$ref": "#/definitions/io.k8s.api.authorization.v1beta1.SubjectAccessReviewSpec", + "description": "Spec holds information about the request being evaluated" + }, + "status": { + "$ref": "#/definitions/io.k8s.api.authorization.v1beta1.SubjectAccessReviewStatus", + "description": "Status is filled in by the server and indicates whether the request is allowed or not" + } + }, + "required": [ + "spec" + ], + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "authorization.k8s.io", + "kind": "SubjectAccessReview", + "version": "v1beta1" + } + ] + }, + "io.k8s.api.authorization.v1beta1.SubjectAccessReviewSpec": { + "description": "SubjectAccessReviewSpec is a description of the access request. Exactly one of ResourceAuthorizationAttributes and NonResourceAuthorizationAttributes must be set", + "properties": { + "extra": { + "additionalProperties": { + "items": { + "type": "string" + }, + "type": "array" + }, + "description": "Extra corresponds to the user.Info.GetExtra() method from the authenticator. Since that is input to the authorizer it needs a reflection here.", + "type": "object" + }, + "group": { + "description": "Groups is the groups you're testing for.", + "items": { + "type": "string" + }, + "type": "array" + }, + "nonResourceAttributes": { + "$ref": "#/definitions/io.k8s.api.authorization.v1beta1.NonResourceAttributes", + "description": "NonResourceAttributes describes information for a non-resource access request" + }, + "resourceAttributes": { + "$ref": "#/definitions/io.k8s.api.authorization.v1beta1.ResourceAttributes", + "description": "ResourceAuthorizationAttributes describes information for a resource access request" + }, + "uid": { + "description": "UID information about the requesting user.", + "type": "string" + }, + "user": { + "description": "User is the user you're testing for. If you specify \"User\" but not \"Group\", then is it interpreted as \"What if User were not a member of any groups", + "type": "string" + } + }, + "type": "object" + }, + "io.k8s.api.authorization.v1beta1.SubjectAccessReviewStatus": { + "description": "SubjectAccessReviewStatus", + "properties": { + "allowed": { + "description": "Allowed is required. True if the action would be allowed, false otherwise.", + "type": "boolean" + }, + "denied": { + "description": "Denied is optional. True if the action would be denied, otherwise false. If both allowed is false and denied is false, then the authorizer has no opinion on whether to authorize the action. Denied may not be true if Allowed is true.", + "type": "boolean" + }, + "evaluationError": { + "description": "EvaluationError is an indication that some error occurred during the authorization check. It is entirely possible to get an error and be able to continue determine authorization status in spite of it. For instance, RBAC can be missing a role, but enough roles are still present and bound to reason about the request.", + "type": "string" + }, + "reason": { + "description": "Reason is optional. It indicates why a request was allowed or denied.", + "type": "string" + } + }, + "required": [ + "allowed" + ], + "type": "object" + }, + "io.k8s.api.authorization.v1beta1.SubjectRulesReviewStatus": { + "description": "SubjectRulesReviewStatus contains the result of a rules check. This check can be incomplete depending on the set of authorizers the server is configured with and any errors experienced during evaluation. Because authorization rules are additive, if a rule appears in a list it's safe to assume the subject has that permission, even if that list is incomplete.", + "properties": { + "evaluationError": { + "description": "EvaluationError can appear in combination with Rules. It indicates an error occurred during rule evaluation, such as an authorizer that doesn't support rule evaluation, and that ResourceRules and/or NonResourceRules may be incomplete.", + "type": "string" + }, + "incomplete": { + "description": "Incomplete is true when the rules returned by this call are incomplete. This is most commonly encountered when an authorizer, such as an external authorizer, doesn't support rules evaluation.", + "type": "boolean" + }, + "nonResourceRules": { + "description": "NonResourceRules is the list of actions the subject is allowed to perform on non-resources. The list ordering isn't significant, may contain duplicates, and possibly be incomplete.", + "items": { + "$ref": "#/definitions/io.k8s.api.authorization.v1beta1.NonResourceRule" + }, + "type": "array" + }, + "resourceRules": { + "description": "ResourceRules is the list of actions the subject is allowed to perform on resources. The list ordering isn't significant, may contain duplicates, and possibly be incomplete.", + "items": { + "$ref": "#/definitions/io.k8s.api.authorization.v1beta1.ResourceRule" + }, + "type": "array" + } + }, + "required": [ + "resourceRules", + "nonResourceRules", + "incomplete" + ], + "type": "object" + }, + "io.k8s.api.autoscaling.v1.CrossVersionObjectReference": { + "description": "CrossVersionObjectReference contains enough information to let you identify the referred resource.", + "properties": { + "apiVersion": { + "description": "API version of the referent", + "type": "string" + }, + "kind": { + "description": "Kind of the referent; More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds\"", + "type": "string" + }, + "name": { + "description": "Name of the referent; More info: http://kubernetes.io/docs/user-guide/identifiers#names", + "type": "string" + } + }, + "required": [ + "kind", + "name" + ], + "type": "object" + }, + "io.k8s.api.autoscaling.v1.HorizontalPodAutoscaler": { + "description": "configuration of a horizontal pod autoscaler.", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta", + "description": "Standard object metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata" + }, + "spec": { + "$ref": "#/definitions/io.k8s.api.autoscaling.v1.HorizontalPodAutoscalerSpec", + "description": "behaviour of autoscaler. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status." + }, + "status": { + "$ref": "#/definitions/io.k8s.api.autoscaling.v1.HorizontalPodAutoscalerStatus", + "description": "current information about the autoscaler." + } + }, + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "autoscaling", + "kind": "HorizontalPodAutoscaler", + "version": "v1" + } + ] + }, + "io.k8s.api.autoscaling.v1.HorizontalPodAutoscalerList": { + "description": "list of horizontal pod autoscaler objects.", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "items": { + "description": "list of horizontal pod autoscaler objects.", + "items": { + "$ref": "#/definitions/io.k8s.api.autoscaling.v1.HorizontalPodAutoscaler" + }, + "type": "array" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta", + "description": "Standard list metadata." + } + }, + "required": [ + "items" + ], + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "autoscaling", + "kind": "HorizontalPodAutoscalerList", + "version": "v1" + } + ] + }, + "io.k8s.api.autoscaling.v1.HorizontalPodAutoscalerSpec": { + "description": "specification of a horizontal pod autoscaler.", + "properties": { + "maxReplicas": { + "description": "upper limit for the number of pods that can be set by the autoscaler; cannot be smaller than MinReplicas.", + "format": "int32", + "type": "integer" + }, + "minReplicas": { + "description": "minReplicas is the lower limit for the number of replicas to which the autoscaler can scale down. It defaults to 1 pod. minReplicas is allowed to be 0 if the alpha feature gate HPAScaleToZero is enabled and at least one Object or External metric is configured. Scaling is active as long as at least one metric value is available.", + "format": "int32", + "type": "integer" + }, + "scaleTargetRef": { + "$ref": "#/definitions/io.k8s.api.autoscaling.v1.CrossVersionObjectReference", + "description": "reference to scaled resource; horizontal pod autoscaler will learn the current resource consumption and will set the desired number of pods by using its Scale subresource." + }, + "targetCPUUtilizationPercentage": { + "description": "target average CPU utilization (represented as a percentage of requested CPU) over all the pods; if not specified the default autoscaling policy will be used.", + "format": "int32", + "type": "integer" + } + }, + "required": [ + "scaleTargetRef", + "maxReplicas" + ], + "type": "object" + }, + "io.k8s.api.autoscaling.v1.HorizontalPodAutoscalerStatus": { + "description": "current status of a horizontal pod autoscaler", + "properties": { + "currentCPUUtilizationPercentage": { + "description": "current average CPU utilization over all pods, represented as a percentage of requested CPU, e.g. 70 means that an average pod is using now 70% of its requested CPU.", + "format": "int32", + "type": "integer" + }, + "currentReplicas": { + "description": "current number of replicas of pods managed by this autoscaler.", + "format": "int32", + "type": "integer" + }, + "desiredReplicas": { + "description": "desired number of replicas of pods managed by this autoscaler.", + "format": "int32", + "type": "integer" + }, + "lastScaleTime": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time", + "description": "last time the HorizontalPodAutoscaler scaled the number of pods; used by the autoscaler to control how often the number of pods is changed." + }, + "observedGeneration": { + "description": "most recent generation observed by this autoscaler.", + "format": "int64", + "type": "integer" + } + }, + "required": [ + "currentReplicas", + "desiredReplicas" + ], + "type": "object" + }, + "io.k8s.api.autoscaling.v1.Scale": { + "description": "Scale represents a scaling request for a resource.", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta", + "description": "Standard object metadata; More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata." + }, + "spec": { + "$ref": "#/definitions/io.k8s.api.autoscaling.v1.ScaleSpec", + "description": "defines the behavior of the scale. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status." + }, + "status": { + "$ref": "#/definitions/io.k8s.api.autoscaling.v1.ScaleStatus", + "description": "current status of the scale. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status. Read-only." + } + }, + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "autoscaling", + "kind": "Scale", + "version": "v1" + } + ] + }, + "io.k8s.api.autoscaling.v1.ScaleSpec": { + "description": "ScaleSpec describes the attributes of a scale subresource.", + "properties": { + "replicas": { + "description": "desired number of instances for the scaled object.", + "format": "int32", + "type": "integer" + } + }, + "type": "object" + }, + "io.k8s.api.autoscaling.v1.ScaleStatus": { + "description": "ScaleStatus represents the current status of a scale subresource.", + "properties": { + "replicas": { + "description": "actual number of observed instances of the scaled object.", + "format": "int32", + "type": "integer" + }, + "selector": { + "description": "label query over pods that should match the replicas count. This is same as the label selector but in the string format to avoid introspection by clients. The string will be in the same format as the query-param syntax. More info about label selectors: http://kubernetes.io/docs/user-guide/labels#label-selectors", + "type": "string" + } + }, + "required": [ + "replicas" + ], + "type": "object" + }, + "io.k8s.api.autoscaling.v2beta1.ContainerResourceMetricSource": { + "description": "ContainerResourceMetricSource indicates how to scale on a resource metric known to Kubernetes, as specified in requests and limits, describing each pod in the current scale target (e.g. CPU or memory). The values will be averaged together before being compared to the target. Such metrics are built in to Kubernetes, and have special scaling options on top of those available to normal per-pod metrics using the \"pods\" source. Only one \"target\" type should be set.", + "properties": { + "container": { + "description": "container is the name of the container in the pods of the scaling target", + "type": "string" + }, + "name": { + "description": "name is the name of the resource in question.", + "type": "string" + }, + "targetAverageUtilization": { + "description": "targetAverageUtilization is the target value of the average of the resource metric across all relevant pods, represented as a percentage of the requested value of the resource for the pods.", + "format": "int32", + "type": "integer" + }, + "targetAverageValue": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity", + "description": "targetAverageValue is the target value of the average of the resource metric across all relevant pods, as a raw value (instead of as a percentage of the request), similar to the \"pods\" metric source type." + } + }, + "required": [ + "name", + "container" + ], + "type": "object" + }, + "io.k8s.api.autoscaling.v2beta1.ContainerResourceMetricStatus": { + "description": "ContainerResourceMetricStatus indicates the current value of a resource metric known to Kubernetes, as specified in requests and limits, describing a single container in each pod in the current scale target (e.g. CPU or memory). Such metrics are built in to Kubernetes, and have special scaling options on top of those available to normal per-pod metrics using the \"pods\" source.", + "properties": { + "container": { + "description": "container is the name of the container in the pods of the scaling target", + "type": "string" + }, + "currentAverageUtilization": { + "description": "currentAverageUtilization is the current value of the average of the resource metric across all relevant pods, represented as a percentage of the requested value of the resource for the pods. It will only be present if `targetAverageValue` was set in the corresponding metric specification.", + "format": "int32", + "type": "integer" + }, + "currentAverageValue": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity", + "description": "currentAverageValue is the current value of the average of the resource metric across all relevant pods, as a raw value (instead of as a percentage of the request), similar to the \"pods\" metric source type. It will always be set, regardless of the corresponding metric specification." + }, + "name": { + "description": "name is the name of the resource in question.", + "type": "string" + } + }, + "required": [ + "name", + "currentAverageValue", + "container" + ], + "type": "object" + }, + "io.k8s.api.autoscaling.v2beta1.CrossVersionObjectReference": { + "description": "CrossVersionObjectReference contains enough information to let you identify the referred resource.", + "properties": { + "apiVersion": { + "description": "API version of the referent", + "type": "string" + }, + "kind": { + "description": "Kind of the referent; More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds\"", + "type": "string" + }, + "name": { + "description": "Name of the referent; More info: http://kubernetes.io/docs/user-guide/identifiers#names", + "type": "string" + } + }, + "required": [ + "kind", + "name" + ], + "type": "object" + }, + "io.k8s.api.autoscaling.v2beta1.ExternalMetricSource": { + "description": "ExternalMetricSource indicates how to scale on a metric not associated with any Kubernetes object (for example length of queue in cloud messaging service, or QPS from loadbalancer running outside of cluster). Exactly one \"target\" type should be set.", + "properties": { + "metricName": { + "description": "metricName is the name of the metric in question.", + "type": "string" + }, + "metricSelector": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector", + "description": "metricSelector is used to identify a specific time series within a given metric." + }, + "targetAverageValue": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity", + "description": "targetAverageValue is the target per-pod value of global metric (as a quantity). Mutually exclusive with TargetValue." + }, + "targetValue": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity", + "description": "targetValue is the target value of the metric (as a quantity). Mutually exclusive with TargetAverageValue." + } + }, + "required": [ + "metricName" + ], + "type": "object" + }, + "io.k8s.api.autoscaling.v2beta1.ExternalMetricStatus": { + "description": "ExternalMetricStatus indicates the current value of a global metric not associated with any Kubernetes object.", + "properties": { + "currentAverageValue": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity", + "description": "currentAverageValue is the current value of metric averaged over autoscaled pods." + }, + "currentValue": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity", + "description": "currentValue is the current value of the metric (as a quantity)" + }, + "metricName": { + "description": "metricName is the name of a metric used for autoscaling in metric system.", + "type": "string" + }, + "metricSelector": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector", + "description": "metricSelector is used to identify a specific time series within a given metric." + } + }, + "required": [ + "metricName", + "currentValue" + ], + "type": "object" + }, + "io.k8s.api.autoscaling.v2beta1.HorizontalPodAutoscaler": { + "description": "HorizontalPodAutoscaler is the configuration for a horizontal pod autoscaler, which automatically manages the replica count of any resource implementing the scale subresource based on the metrics specified.", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta", + "description": "metadata is the standard object metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata" + }, + "spec": { + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta1.HorizontalPodAutoscalerSpec", + "description": "spec is the specification for the behaviour of the autoscaler. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status." + }, + "status": { + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta1.HorizontalPodAutoscalerStatus", + "description": "status is the current information about the autoscaler." + } + }, + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "autoscaling", + "kind": "HorizontalPodAutoscaler", + "version": "v2beta1" + } + ] + }, + "io.k8s.api.autoscaling.v2beta1.HorizontalPodAutoscalerCondition": { + "description": "HorizontalPodAutoscalerCondition describes the state of a HorizontalPodAutoscaler at a certain point.", + "properties": { + "lastTransitionTime": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time", + "description": "lastTransitionTime is the last time the condition transitioned from one status to another" + }, + "message": { + "description": "message is a human-readable explanation containing details about the transition", + "type": "string" + }, + "reason": { + "description": "reason is the reason for the condition's last transition.", + "type": "string" + }, + "status": { + "description": "status is the status of the condition (True, False, Unknown)", + "type": "string" + }, + "type": { + "description": "type describes the current condition", + "type": "string" + } + }, + "required": [ + "type", + "status" + ], + "type": "object" + }, + "io.k8s.api.autoscaling.v2beta1.HorizontalPodAutoscalerList": { + "description": "HorizontalPodAutoscaler is a list of horizontal pod autoscaler objects.", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "items": { + "description": "items is the list of horizontal pod autoscaler objects.", + "items": { + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta1.HorizontalPodAutoscaler" + }, + "type": "array" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta", + "description": "metadata is the standard list metadata." + } + }, + "required": [ + "items" + ], + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "autoscaling", + "kind": "HorizontalPodAutoscalerList", + "version": "v2beta1" + } + ] + }, + "io.k8s.api.autoscaling.v2beta1.HorizontalPodAutoscalerSpec": { + "description": "HorizontalPodAutoscalerSpec describes the desired functionality of the HorizontalPodAutoscaler.", + "properties": { + "maxReplicas": { + "description": "maxReplicas is the upper limit for the number of replicas to which the autoscaler can scale up. It cannot be less that minReplicas.", + "format": "int32", + "type": "integer" + }, + "metrics": { + "description": "metrics contains the specifications for which to use to calculate the desired replica count (the maximum replica count across all metrics will be used). The desired replica count is calculated multiplying the ratio between the target value and the current value by the current number of pods. Ergo, metrics used must decrease as the pod count is increased, and vice-versa. See the individual metric source types for more information about how each type of metric must respond.", + "items": { + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta1.MetricSpec" + }, + "type": "array" + }, + "minReplicas": { + "description": "minReplicas is the lower limit for the number of replicas to which the autoscaler can scale down. It defaults to 1 pod. minReplicas is allowed to be 0 if the alpha feature gate HPAScaleToZero is enabled and at least one Object or External metric is configured. Scaling is active as long as at least one metric value is available.", + "format": "int32", + "type": "integer" + }, + "scaleTargetRef": { + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta1.CrossVersionObjectReference", + "description": "scaleTargetRef points to the target resource to scale, and is used to the pods for which metrics should be collected, as well as to actually change the replica count." + } + }, + "required": [ + "scaleTargetRef", + "maxReplicas" + ], + "type": "object" + }, + "io.k8s.api.autoscaling.v2beta1.HorizontalPodAutoscalerStatus": { + "description": "HorizontalPodAutoscalerStatus describes the current status of a horizontal pod autoscaler.", + "properties": { + "conditions": { + "description": "conditions is the set of conditions required for this autoscaler to scale its target, and indicates whether or not those conditions are met.", + "items": { + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta1.HorizontalPodAutoscalerCondition" + }, + "type": "array" + }, + "currentMetrics": { + "description": "currentMetrics is the last read state of the metrics used by this autoscaler.", + "items": { + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta1.MetricStatus" + }, + "type": "array" + }, + "currentReplicas": { + "description": "currentReplicas is current number of replicas of pods managed by this autoscaler, as last seen by the autoscaler.", + "format": "int32", + "type": "integer" + }, + "desiredReplicas": { + "description": "desiredReplicas is the desired number of replicas of pods managed by this autoscaler, as last calculated by the autoscaler.", + "format": "int32", + "type": "integer" + }, + "lastScaleTime": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time", + "description": "lastScaleTime is the last time the HorizontalPodAutoscaler scaled the number of pods, used by the autoscaler to control how often the number of pods is changed." + }, + "observedGeneration": { + "description": "observedGeneration is the most recent generation observed by this autoscaler.", + "format": "int64", + "type": "integer" + } + }, + "required": [ + "currentReplicas", + "desiredReplicas", + "conditions" + ], + "type": "object" + }, + "io.k8s.api.autoscaling.v2beta1.MetricSpec": { + "description": "MetricSpec specifies how to scale based on a single metric (only `type` and one other matching field should be set at once).", + "properties": { + "containerResource": { + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta1.ContainerResourceMetricSource", + "description": "container resource refers to a resource metric (such as those specified in requests and limits) known to Kubernetes describing a single container in each pod of the current scale target (e.g. CPU or memory). Such metrics are built in to Kubernetes, and have special scaling options on top of those available to normal per-pod metrics using the \"pods\" source. This is an alpha feature and can be enabled by the HPAContainerMetrics feature flag." + }, + "external": { + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta1.ExternalMetricSource", + "description": "external refers to a global metric that is not associated with any Kubernetes object. It allows autoscaling based on information coming from components running outside of cluster (for example length of queue in cloud messaging service, or QPS from loadbalancer running outside of cluster)." + }, + "object": { + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta1.ObjectMetricSource", + "description": "object refers to a metric describing a single kubernetes object (for example, hits-per-second on an Ingress object)." + }, + "pods": { + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta1.PodsMetricSource", + "description": "pods refers to a metric describing each pod in the current scale target (for example, transactions-processed-per-second). The values will be averaged together before being compared to the target value." + }, + "resource": { + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta1.ResourceMetricSource", + "description": "resource refers to a resource metric (such as those specified in requests and limits) known to Kubernetes describing each pod in the current scale target (e.g. CPU or memory). Such metrics are built in to Kubernetes, and have special scaling options on top of those available to normal per-pod metrics using the \"pods\" source." + }, + "type": { + "description": "type is the type of metric source. It should be one of \"ContainerResource\", \"External\", \"Object\", \"Pods\" or \"Resource\", each mapping to a matching field in the object. Note: \"ContainerResource\" type is available on when the feature-gate HPAContainerMetrics is enabled", + "type": "string" + } + }, + "required": [ + "type" + ], + "type": "object" + }, + "io.k8s.api.autoscaling.v2beta1.MetricStatus": { + "description": "MetricStatus describes the last-read state of a single metric.", + "properties": { + "containerResource": { + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta1.ContainerResourceMetricStatus", + "description": "container resource refers to a resource metric (such as those specified in requests and limits) known to Kubernetes describing a single container in each pod in the current scale target (e.g. CPU or memory). Such metrics are built in to Kubernetes, and have special scaling options on top of those available to normal per-pod metrics using the \"pods\" source." + }, + "external": { + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta1.ExternalMetricStatus", + "description": "external refers to a global metric that is not associated with any Kubernetes object. It allows autoscaling based on information coming from components running outside of cluster (for example length of queue in cloud messaging service, or QPS from loadbalancer running outside of cluster)." + }, + "object": { + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta1.ObjectMetricStatus", + "description": "object refers to a metric describing a single kubernetes object (for example, hits-per-second on an Ingress object)." + }, + "pods": { + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta1.PodsMetricStatus", + "description": "pods refers to a metric describing each pod in the current scale target (for example, transactions-processed-per-second). The values will be averaged together before being compared to the target value." + }, + "resource": { + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta1.ResourceMetricStatus", + "description": "resource refers to a resource metric (such as those specified in requests and limits) known to Kubernetes describing each pod in the current scale target (e.g. CPU or memory). Such metrics are built in to Kubernetes, and have special scaling options on top of those available to normal per-pod metrics using the \"pods\" source." + }, + "type": { + "description": "type is the type of metric source. It will be one of \"ContainerResource\", \"External\", \"Object\", \"Pods\" or \"Resource\", each corresponds to a matching field in the object. Note: \"ContainerResource\" type is available on when the feature-gate HPAContainerMetrics is enabled", + "type": "string" + } + }, + "required": [ + "type" + ], + "type": "object" + }, + "io.k8s.api.autoscaling.v2beta1.ObjectMetricSource": { + "description": "ObjectMetricSource indicates how to scale on a metric describing a kubernetes object (for example, hits-per-second on an Ingress object).", + "properties": { + "averageValue": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity", + "description": "averageValue is the target value of the average of the metric across all relevant pods (as a quantity)" + }, + "metricName": { + "description": "metricName is the name of the metric in question.", + "type": "string" + }, + "selector": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector", + "description": "selector is the string-encoded form of a standard kubernetes label selector for the given metric When set, it is passed as an additional parameter to the metrics server for more specific metrics scoping When unset, just the metricName will be used to gather metrics." + }, + "target": { + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta1.CrossVersionObjectReference", + "description": "target is the described Kubernetes object." + }, + "targetValue": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity", + "description": "targetValue is the target value of the metric (as a quantity)." + } + }, + "required": [ + "target", + "metricName", + "targetValue" + ], + "type": "object" + }, + "io.k8s.api.autoscaling.v2beta1.ObjectMetricStatus": { + "description": "ObjectMetricStatus indicates the current value of a metric describing a kubernetes object (for example, hits-per-second on an Ingress object).", + "properties": { + "averageValue": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity", + "description": "averageValue is the current value of the average of the metric across all relevant pods (as a quantity)" + }, + "currentValue": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity", + "description": "currentValue is the current value of the metric (as a quantity)." + }, + "metricName": { + "description": "metricName is the name of the metric in question.", + "type": "string" + }, + "selector": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector", + "description": "selector is the string-encoded form of a standard kubernetes label selector for the given metric When set in the ObjectMetricSource, it is passed as an additional parameter to the metrics server for more specific metrics scoping. When unset, just the metricName will be used to gather metrics." + }, + "target": { + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta1.CrossVersionObjectReference", + "description": "target is the described Kubernetes object." + } + }, + "required": [ + "target", + "metricName", + "currentValue" + ], + "type": "object" + }, + "io.k8s.api.autoscaling.v2beta1.PodsMetricSource": { + "description": "PodsMetricSource indicates how to scale on a metric describing each pod in the current scale target (for example, transactions-processed-per-second). The values will be averaged together before being compared to the target value.", + "properties": { + "metricName": { + "description": "metricName is the name of the metric in question", + "type": "string" + }, + "selector": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector", + "description": "selector is the string-encoded form of a standard kubernetes label selector for the given metric When set, it is passed as an additional parameter to the metrics server for more specific metrics scoping When unset, just the metricName will be used to gather metrics." + }, + "targetAverageValue": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity", + "description": "targetAverageValue is the target value of the average of the metric across all relevant pods (as a quantity)" + } + }, + "required": [ + "metricName", + "targetAverageValue" + ], + "type": "object" + }, + "io.k8s.api.autoscaling.v2beta1.PodsMetricStatus": { + "description": "PodsMetricStatus indicates the current value of a metric describing each pod in the current scale target (for example, transactions-processed-per-second).", + "properties": { + "currentAverageValue": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity", + "description": "currentAverageValue is the current value of the average of the metric across all relevant pods (as a quantity)" + }, + "metricName": { + "description": "metricName is the name of the metric in question", + "type": "string" + }, + "selector": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector", + "description": "selector is the string-encoded form of a standard kubernetes label selector for the given metric When set in the PodsMetricSource, it is passed as an additional parameter to the metrics server for more specific metrics scoping. When unset, just the metricName will be used to gather metrics." + } + }, + "required": [ + "metricName", + "currentAverageValue" + ], + "type": "object" + }, + "io.k8s.api.autoscaling.v2beta1.ResourceMetricSource": { + "description": "ResourceMetricSource indicates how to scale on a resource metric known to Kubernetes, as specified in requests and limits, describing each pod in the current scale target (e.g. CPU or memory). The values will be averaged together before being compared to the target. Such metrics are built in to Kubernetes, and have special scaling options on top of those available to normal per-pod metrics using the \"pods\" source. Only one \"target\" type should be set.", + "properties": { + "name": { + "description": "name is the name of the resource in question.", + "type": "string" + }, + "targetAverageUtilization": { + "description": "targetAverageUtilization is the target value of the average of the resource metric across all relevant pods, represented as a percentage of the requested value of the resource for the pods.", + "format": "int32", + "type": "integer" + }, + "targetAverageValue": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity", + "description": "targetAverageValue is the target value of the average of the resource metric across all relevant pods, as a raw value (instead of as a percentage of the request), similar to the \"pods\" metric source type." + } + }, + "required": [ + "name" + ], + "type": "object" + }, + "io.k8s.api.autoscaling.v2beta1.ResourceMetricStatus": { + "description": "ResourceMetricStatus indicates the current value of a resource metric known to Kubernetes, as specified in requests and limits, describing each pod in the current scale target (e.g. CPU or memory). Such metrics are built in to Kubernetes, and have special scaling options on top of those available to normal per-pod metrics using the \"pods\" source.", + "properties": { + "currentAverageUtilization": { + "description": "currentAverageUtilization is the current value of the average of the resource metric across all relevant pods, represented as a percentage of the requested value of the resource for the pods. It will only be present if `targetAverageValue` was set in the corresponding metric specification.", + "format": "int32", + "type": "integer" + }, + "currentAverageValue": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity", + "description": "currentAverageValue is the current value of the average of the resource metric across all relevant pods, as a raw value (instead of as a percentage of the request), similar to the \"pods\" metric source type. It will always be set, regardless of the corresponding metric specification." + }, + "name": { + "description": "name is the name of the resource in question.", + "type": "string" + } + }, + "required": [ + "name", + "currentAverageValue" + ], + "type": "object" + }, + "io.k8s.api.autoscaling.v2beta2.ContainerResourceMetricSource": { + "description": "ContainerResourceMetricSource indicates how to scale on a resource metric known to Kubernetes, as specified in requests and limits, describing each pod in the current scale target (e.g. CPU or memory). The values will be averaged together before being compared to the target. Such metrics are built in to Kubernetes, and have special scaling options on top of those available to normal per-pod metrics using the \"pods\" source. Only one \"target\" type should be set.", + "properties": { + "container": { + "description": "container is the name of the container in the pods of the scaling target", + "type": "string" + }, + "name": { + "description": "name is the name of the resource in question.", + "type": "string" + }, + "target": { + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta2.MetricTarget", + "description": "target specifies the target value for the given metric" + } + }, + "required": [ + "name", + "target", + "container" + ], + "type": "object" + }, + "io.k8s.api.autoscaling.v2beta2.ContainerResourceMetricStatus": { + "description": "ContainerResourceMetricStatus indicates the current value of a resource metric known to Kubernetes, as specified in requests and limits, describing a single container in each pod in the current scale target (e.g. CPU or memory). Such metrics are built in to Kubernetes, and have special scaling options on top of those available to normal per-pod metrics using the \"pods\" source.", + "properties": { + "container": { + "description": "Container is the name of the container in the pods of the scaling target", + "type": "string" + }, + "current": { + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta2.MetricValueStatus", + "description": "current contains the current value for the given metric" + }, + "name": { + "description": "Name is the name of the resource in question.", + "type": "string" + } + }, + "required": [ + "name", + "current", + "container" + ], + "type": "object" + }, + "io.k8s.api.autoscaling.v2beta2.CrossVersionObjectReference": { + "description": "CrossVersionObjectReference contains enough information to let you identify the referred resource.", + "properties": { + "apiVersion": { + "description": "API version of the referent", + "type": "string" + }, + "kind": { + "description": "Kind of the referent; More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds\"", + "type": "string" + }, + "name": { + "description": "Name of the referent; More info: http://kubernetes.io/docs/user-guide/identifiers#names", + "type": "string" + } + }, + "required": [ + "kind", + "name" + ], + "type": "object" + }, + "io.k8s.api.autoscaling.v2beta2.ExternalMetricSource": { + "description": "ExternalMetricSource indicates how to scale on a metric not associated with any Kubernetes object (for example length of queue in cloud messaging service, or QPS from loadbalancer running outside of cluster).", + "properties": { + "metric": { + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta2.MetricIdentifier", + "description": "metric identifies the target metric by name and selector" + }, + "target": { + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta2.MetricTarget", + "description": "target specifies the target value for the given metric" + } + }, + "required": [ + "metric", + "target" + ], + "type": "object" + }, + "io.k8s.api.autoscaling.v2beta2.ExternalMetricStatus": { + "description": "ExternalMetricStatus indicates the current value of a global metric not associated with any Kubernetes object.", + "properties": { + "current": { + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta2.MetricValueStatus", + "description": "current contains the current value for the given metric" + }, + "metric": { + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta2.MetricIdentifier", + "description": "metric identifies the target metric by name and selector" + } + }, + "required": [ + "metric", + "current" + ], + "type": "object" + }, + "io.k8s.api.autoscaling.v2beta2.HPAScalingPolicy": { + "description": "HPAScalingPolicy is a single policy which must hold true for a specified past interval.", + "properties": { + "periodSeconds": { + "description": "PeriodSeconds specifies the window of time for which the policy should hold true. PeriodSeconds must be greater than zero and less than or equal to 1800 (30 min).", + "format": "int32", + "type": "integer" + }, + "type": { + "description": "Type is used to specify the scaling policy.", + "type": "string" + }, + "value": { + "description": "Value contains the amount of change which is permitted by the policy. It must be greater than zero", + "format": "int32", + "type": "integer" + } + }, + "required": [ + "type", + "value", + "periodSeconds" + ], + "type": "object" + }, + "io.k8s.api.autoscaling.v2beta2.HPAScalingRules": { + "description": "HPAScalingRules configures the scaling behavior for one direction. These Rules are applied after calculating DesiredReplicas from metrics for the HPA. They can limit the scaling velocity by specifying scaling policies. They can prevent flapping by specifying the stabilization window, so that the number of replicas is not set instantly, instead, the safest value from the stabilization window is chosen.", + "properties": { + "policies": { + "description": "policies is a list of potential scaling polices which can be used during scaling. At least one policy must be specified, otherwise the HPAScalingRules will be discarded as invalid", + "items": { + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta2.HPAScalingPolicy" + }, + "type": "array" + }, + "selectPolicy": { + "description": "selectPolicy is used to specify which policy should be used. If not set, the default value MaxPolicySelect is used.", + "type": "string" + }, + "stabilizationWindowSeconds": { + "description": "StabilizationWindowSeconds is the number of seconds for which past recommendations should be considered while scaling up or scaling down. StabilizationWindowSeconds must be greater than or equal to zero and less than or equal to 3600 (one hour). If not set, use the default values: - For scale up: 0 (i.e. no stabilization is done). - For scale down: 300 (i.e. the stabilization window is 300 seconds long).", + "format": "int32", + "type": "integer" + } + }, + "type": "object" + }, + "io.k8s.api.autoscaling.v2beta2.HorizontalPodAutoscaler": { + "description": "HorizontalPodAutoscaler is the configuration for a horizontal pod autoscaler, which automatically manages the replica count of any resource implementing the scale subresource based on the metrics specified.", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta", + "description": "metadata is the standard object metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata" + }, + "spec": { + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta2.HorizontalPodAutoscalerSpec", + "description": "spec is the specification for the behaviour of the autoscaler. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status." + }, + "status": { + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta2.HorizontalPodAutoscalerStatus", + "description": "status is the current information about the autoscaler." + } + }, + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "autoscaling", + "kind": "HorizontalPodAutoscaler", + "version": "v2beta2" + } + ] + }, + "io.k8s.api.autoscaling.v2beta2.HorizontalPodAutoscalerBehavior": { + "description": "HorizontalPodAutoscalerBehavior configures the scaling behavior of the target in both Up and Down directions (scaleUp and scaleDown fields respectively).", + "properties": { + "scaleDown": { + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta2.HPAScalingRules", + "description": "scaleDown is scaling policy for scaling Down. If not set, the default value is to allow to scale down to minReplicas pods, with a 300 second stabilization window (i.e., the highest recommendation for the last 300sec is used)." + }, + "scaleUp": { + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta2.HPAScalingRules", + "description": "scaleUp is scaling policy for scaling Up. If not set, the default value is the higher of:\n * increase no more than 4 pods per 60 seconds\n * double the number of pods per 60 seconds\nNo stabilization is used." + } + }, + "type": "object" + }, + "io.k8s.api.autoscaling.v2beta2.HorizontalPodAutoscalerCondition": { + "description": "HorizontalPodAutoscalerCondition describes the state of a HorizontalPodAutoscaler at a certain point.", + "properties": { + "lastTransitionTime": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time", + "description": "lastTransitionTime is the last time the condition transitioned from one status to another" + }, + "message": { + "description": "message is a human-readable explanation containing details about the transition", + "type": "string" + }, + "reason": { + "description": "reason is the reason for the condition's last transition.", + "type": "string" + }, + "status": { + "description": "status is the status of the condition (True, False, Unknown)", + "type": "string" + }, + "type": { + "description": "type describes the current condition", + "type": "string" + } + }, + "required": [ + "type", + "status" + ], + "type": "object" + }, + "io.k8s.api.autoscaling.v2beta2.HorizontalPodAutoscalerList": { + "description": "HorizontalPodAutoscalerList is a list of horizontal pod autoscaler objects.", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "items": { + "description": "items is the list of horizontal pod autoscaler objects.", + "items": { + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta2.HorizontalPodAutoscaler" + }, + "type": "array" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta", + "description": "metadata is the standard list metadata." + } + }, + "required": [ + "items" + ], + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "autoscaling", + "kind": "HorizontalPodAutoscalerList", + "version": "v2beta2" + } + ] + }, + "io.k8s.api.autoscaling.v2beta2.HorizontalPodAutoscalerSpec": { + "description": "HorizontalPodAutoscalerSpec describes the desired functionality of the HorizontalPodAutoscaler.", + "properties": { + "behavior": { + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta2.HorizontalPodAutoscalerBehavior", + "description": "behavior configures the scaling behavior of the target in both Up and Down directions (scaleUp and scaleDown fields respectively). If not set, the default HPAScalingRules for scale up and scale down are used." + }, + "maxReplicas": { + "description": "maxReplicas is the upper limit for the number of replicas to which the autoscaler can scale up. It cannot be less that minReplicas.", + "format": "int32", + "type": "integer" + }, + "metrics": { + "description": "metrics contains the specifications for which to use to calculate the desired replica count (the maximum replica count across all metrics will be used). The desired replica count is calculated multiplying the ratio between the target value and the current value by the current number of pods. Ergo, metrics used must decrease as the pod count is increased, and vice-versa. See the individual metric source types for more information about how each type of metric must respond. If not set, the default metric will be set to 80% average CPU utilization.", + "items": { + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta2.MetricSpec" + }, + "type": "array" + }, + "minReplicas": { + "description": "minReplicas is the lower limit for the number of replicas to which the autoscaler can scale down. It defaults to 1 pod. minReplicas is allowed to be 0 if the alpha feature gate HPAScaleToZero is enabled and at least one Object or External metric is configured. Scaling is active as long as at least one metric value is available.", + "format": "int32", + "type": "integer" + }, + "scaleTargetRef": { + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta2.CrossVersionObjectReference", + "description": "scaleTargetRef points to the target resource to scale, and is used to the pods for which metrics should be collected, as well as to actually change the replica count." + } + }, + "required": [ + "scaleTargetRef", + "maxReplicas" + ], + "type": "object" + }, + "io.k8s.api.autoscaling.v2beta2.HorizontalPodAutoscalerStatus": { + "description": "HorizontalPodAutoscalerStatus describes the current status of a horizontal pod autoscaler.", + "properties": { + "conditions": { + "description": "conditions is the set of conditions required for this autoscaler to scale its target, and indicates whether or not those conditions are met.", + "items": { + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta2.HorizontalPodAutoscalerCondition" + }, + "type": "array" + }, + "currentMetrics": { + "description": "currentMetrics is the last read state of the metrics used by this autoscaler.", + "items": { + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta2.MetricStatus" + }, + "type": "array" + }, + "currentReplicas": { + "description": "currentReplicas is current number of replicas of pods managed by this autoscaler, as last seen by the autoscaler.", + "format": "int32", + "type": "integer" + }, + "desiredReplicas": { + "description": "desiredReplicas is the desired number of replicas of pods managed by this autoscaler, as last calculated by the autoscaler.", + "format": "int32", + "type": "integer" + }, + "lastScaleTime": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time", + "description": "lastScaleTime is the last time the HorizontalPodAutoscaler scaled the number of pods, used by the autoscaler to control how often the number of pods is changed." + }, + "observedGeneration": { + "description": "observedGeneration is the most recent generation observed by this autoscaler.", + "format": "int64", + "type": "integer" + } + }, + "required": [ + "currentReplicas", + "desiredReplicas", + "conditions" + ], + "type": "object" + }, + "io.k8s.api.autoscaling.v2beta2.MetricIdentifier": { + "description": "MetricIdentifier defines the name and optionally selector for a metric", + "properties": { + "name": { + "description": "name is the name of the given metric", + "type": "string" + }, + "selector": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector", + "description": "selector is the string-encoded form of a standard kubernetes label selector for the given metric When set, it is passed as an additional parameter to the metrics server for more specific metrics scoping. When unset, just the metricName will be used to gather metrics." + } + }, + "required": [ + "name" + ], + "type": "object" + }, + "io.k8s.api.autoscaling.v2beta2.MetricSpec": { + "description": "MetricSpec specifies how to scale based on a single metric (only `type` and one other matching field should be set at once).", + "properties": { + "containerResource": { + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta2.ContainerResourceMetricSource", + "description": "container resource refers to a resource metric (such as those specified in requests and limits) known to Kubernetes describing a single container in each pod of the current scale target (e.g. CPU or memory). Such metrics are built in to Kubernetes, and have special scaling options on top of those available to normal per-pod metrics using the \"pods\" source. This is an alpha feature and can be enabled by the HPAContainerMetrics feature flag." + }, + "external": { + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta2.ExternalMetricSource", + "description": "external refers to a global metric that is not associated with any Kubernetes object. It allows autoscaling based on information coming from components running outside of cluster (for example length of queue in cloud messaging service, or QPS from loadbalancer running outside of cluster)." + }, + "object": { + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta2.ObjectMetricSource", + "description": "object refers to a metric describing a single kubernetes object (for example, hits-per-second on an Ingress object)." + }, + "pods": { + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta2.PodsMetricSource", + "description": "pods refers to a metric describing each pod in the current scale target (for example, transactions-processed-per-second). The values will be averaged together before being compared to the target value." + }, + "resource": { + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta2.ResourceMetricSource", + "description": "resource refers to a resource metric (such as those specified in requests and limits) known to Kubernetes describing each pod in the current scale target (e.g. CPU or memory). Such metrics are built in to Kubernetes, and have special scaling options on top of those available to normal per-pod metrics using the \"pods\" source." + }, + "type": { + "description": "type is the type of metric source. It should be one of \"ContainerResource\", \"External\", \"Object\", \"Pods\" or \"Resource\", each mapping to a matching field in the object. Note: \"ContainerResource\" type is available on when the feature-gate HPAContainerMetrics is enabled", + "type": "string" + } + }, + "required": [ + "type" + ], + "type": "object" + }, + "io.k8s.api.autoscaling.v2beta2.MetricStatus": { + "description": "MetricStatus describes the last-read state of a single metric.", + "properties": { + "containerResource": { + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta2.ContainerResourceMetricStatus", + "description": "container resource refers to a resource metric (such as those specified in requests and limits) known to Kubernetes describing a single container in each pod in the current scale target (e.g. CPU or memory). Such metrics are built in to Kubernetes, and have special scaling options on top of those available to normal per-pod metrics using the \"pods\" source." + }, + "external": { + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta2.ExternalMetricStatus", + "description": "external refers to a global metric that is not associated with any Kubernetes object. It allows autoscaling based on information coming from components running outside of cluster (for example length of queue in cloud messaging service, or QPS from loadbalancer running outside of cluster)." + }, + "object": { + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta2.ObjectMetricStatus", + "description": "object refers to a metric describing a single kubernetes object (for example, hits-per-second on an Ingress object)." + }, + "pods": { + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta2.PodsMetricStatus", + "description": "pods refers to a metric describing each pod in the current scale target (for example, transactions-processed-per-second). The values will be averaged together before being compared to the target value." + }, + "resource": { + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta2.ResourceMetricStatus", + "description": "resource refers to a resource metric (such as those specified in requests and limits) known to Kubernetes describing each pod in the current scale target (e.g. CPU or memory). Such metrics are built in to Kubernetes, and have special scaling options on top of those available to normal per-pod metrics using the \"pods\" source." + }, + "type": { + "description": "type is the type of metric source. It will be one of \"ContainerResource\", \"External\", \"Object\", \"Pods\" or \"Resource\", each corresponds to a matching field in the object. Note: \"ContainerResource\" type is available on when the feature-gate HPAContainerMetrics is enabled", + "type": "string" + } + }, + "required": [ + "type" + ], + "type": "object" + }, + "io.k8s.api.autoscaling.v2beta2.MetricTarget": { + "description": "MetricTarget defines the target value, average value, or average utilization of a specific metric", + "properties": { + "averageUtilization": { + "description": "averageUtilization is the target value of the average of the resource metric across all relevant pods, represented as a percentage of the requested value of the resource for the pods. Currently only valid for Resource metric source type", + "format": "int32", + "type": "integer" + }, + "averageValue": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity", + "description": "averageValue is the target value of the average of the metric across all relevant pods (as a quantity)" + }, + "type": { + "description": "type represents whether the metric type is Utilization, Value, or AverageValue", + "type": "string" + }, + "value": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity", + "description": "value is the target value of the metric (as a quantity)." + } + }, + "required": [ + "type" + ], + "type": "object" + }, + "io.k8s.api.autoscaling.v2beta2.MetricValueStatus": { + "description": "MetricValueStatus holds the current value for a metric", + "properties": { + "averageUtilization": { + "description": "currentAverageUtilization is the current value of the average of the resource metric across all relevant pods, represented as a percentage of the requested value of the resource for the pods.", + "format": "int32", + "type": "integer" + }, + "averageValue": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity", + "description": "averageValue is the current value of the average of the metric across all relevant pods (as a quantity)" + }, + "value": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity", + "description": "value is the current value of the metric (as a quantity)." + } + }, + "type": "object" + }, + "io.k8s.api.autoscaling.v2beta2.ObjectMetricSource": { + "description": "ObjectMetricSource indicates how to scale on a metric describing a kubernetes object (for example, hits-per-second on an Ingress object).", + "properties": { + "describedObject": { + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta2.CrossVersionObjectReference" + }, + "metric": { + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta2.MetricIdentifier", + "description": "metric identifies the target metric by name and selector" + }, + "target": { + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta2.MetricTarget", + "description": "target specifies the target value for the given metric" + } + }, + "required": [ + "describedObject", + "target", + "metric" + ], + "type": "object" + }, + "io.k8s.api.autoscaling.v2beta2.ObjectMetricStatus": { + "description": "ObjectMetricStatus indicates the current value of a metric describing a kubernetes object (for example, hits-per-second on an Ingress object).", + "properties": { + "current": { + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta2.MetricValueStatus", + "description": "current contains the current value for the given metric" + }, + "describedObject": { + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta2.CrossVersionObjectReference" + }, + "metric": { + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta2.MetricIdentifier", + "description": "metric identifies the target metric by name and selector" + } + }, + "required": [ + "metric", + "current", + "describedObject" + ], + "type": "object" + }, + "io.k8s.api.autoscaling.v2beta2.PodsMetricSource": { + "description": "PodsMetricSource indicates how to scale on a metric describing each pod in the current scale target (for example, transactions-processed-per-second). The values will be averaged together before being compared to the target value.", + "properties": { + "metric": { + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta2.MetricIdentifier", + "description": "metric identifies the target metric by name and selector" + }, + "target": { + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta2.MetricTarget", + "description": "target specifies the target value for the given metric" + } + }, + "required": [ + "metric", + "target" + ], + "type": "object" + }, + "io.k8s.api.autoscaling.v2beta2.PodsMetricStatus": { + "description": "PodsMetricStatus indicates the current value of a metric describing each pod in the current scale target (for example, transactions-processed-per-second).", + "properties": { + "current": { + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta2.MetricValueStatus", + "description": "current contains the current value for the given metric" + }, + "metric": { + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta2.MetricIdentifier", + "description": "metric identifies the target metric by name and selector" + } + }, + "required": [ + "metric", + "current" + ], + "type": "object" + }, + "io.k8s.api.autoscaling.v2beta2.ResourceMetricSource": { + "description": "ResourceMetricSource indicates how to scale on a resource metric known to Kubernetes, as specified in requests and limits, describing each pod in the current scale target (e.g. CPU or memory). The values will be averaged together before being compared to the target. Such metrics are built in to Kubernetes, and have special scaling options on top of those available to normal per-pod metrics using the \"pods\" source. Only one \"target\" type should be set.", + "properties": { + "name": { + "description": "name is the name of the resource in question.", + "type": "string" + }, + "target": { + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta2.MetricTarget", + "description": "target specifies the target value for the given metric" + } + }, + "required": [ + "name", + "target" + ], + "type": "object" + }, + "io.k8s.api.autoscaling.v2beta2.ResourceMetricStatus": { + "description": "ResourceMetricStatus indicates the current value of a resource metric known to Kubernetes, as specified in requests and limits, describing each pod in the current scale target (e.g. CPU or memory). Such metrics are built in to Kubernetes, and have special scaling options on top of those available to normal per-pod metrics using the \"pods\" source.", + "properties": { + "current": { + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta2.MetricValueStatus", + "description": "current contains the current value for the given metric" + }, + "name": { + "description": "Name is the name of the resource in question.", + "type": "string" + } + }, + "required": [ + "name", + "current" + ], + "type": "object" + }, + "io.k8s.api.batch.v1.CronJob": { + "description": "CronJob represents the configuration of a single cron job.", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta", + "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata" + }, + "spec": { + "$ref": "#/definitions/io.k8s.api.batch.v1.CronJobSpec", + "description": "Specification of the desired behavior of a cron job, including the schedule. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status" + }, + "status": { + "$ref": "#/definitions/io.k8s.api.batch.v1.CronJobStatus", + "description": "Current status of a cron job. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status" + } + }, + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "batch", + "kind": "CronJob", + "version": "v1" + } + ] + }, + "io.k8s.api.batch.v1.CronJobList": { + "description": "CronJobList is a collection of cron jobs.", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "items": { + "description": "items is the list of CronJobs.", + "items": { + "$ref": "#/definitions/io.k8s.api.batch.v1.CronJob" + }, + "type": "array" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta", + "description": "Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata" + } + }, + "required": [ + "items" + ], + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "batch", + "kind": "CronJobList", + "version": "v1" + } + ] + }, + "io.k8s.api.batch.v1.CronJobSpec": { + "description": "CronJobSpec describes how the job execution will look like and when it will actually run.", + "properties": { + "concurrencyPolicy": { + "description": "Specifies how to treat concurrent executions of a Job. Valid values are: - \"Allow\" (default): allows CronJobs to run concurrently; - \"Forbid\": forbids concurrent runs, skipping next run if previous run hasn't finished yet; - \"Replace\": cancels currently running job and replaces it with a new one", + "type": "string" + }, + "failedJobsHistoryLimit": { + "description": "The number of failed finished jobs to retain. Value must be non-negative integer. Defaults to 1.", + "format": "int32", + "type": "integer" + }, + "jobTemplate": { + "$ref": "#/definitions/io.k8s.api.batch.v1.JobTemplateSpec", + "description": "Specifies the job that will be created when executing a CronJob." + }, + "schedule": { + "description": "The schedule in Cron format, see https://en.wikipedia.org/wiki/Cron.", + "type": "string" + }, + "startingDeadlineSeconds": { + "description": "Optional deadline in seconds for starting the job if it misses scheduled time for any reason. Missed jobs executions will be counted as failed ones.", + "format": "int64", + "type": "integer" + }, + "successfulJobsHistoryLimit": { + "description": "The number of successful finished jobs to retain. Value must be non-negative integer. Defaults to 3.", + "format": "int32", + "type": "integer" + }, + "suspend": { + "description": "This flag tells the controller to suspend subsequent executions, it does not apply to already started executions. Defaults to false.", + "type": "boolean" + } + }, + "required": [ + "schedule", + "jobTemplate" + ], + "type": "object" + }, + "io.k8s.api.batch.v1.CronJobStatus": { + "description": "CronJobStatus represents the current state of a cron job.", + "properties": { + "active": { + "description": "A list of pointers to currently running jobs.", + "items": { + "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference" + }, + "type": "array", + "x-kubernetes-list-type": "atomic" + }, + "lastScheduleTime": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time", + "description": "Information when was the last time the job was successfully scheduled." + }, + "lastSuccessfulTime": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time", + "description": "Information when was the last time the job successfully completed." + } + }, + "type": "object" + }, + "io.k8s.api.batch.v1.Job": { + "description": "Job represents the configuration of a single job.", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta", + "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata" + }, + "spec": { + "$ref": "#/definitions/io.k8s.api.batch.v1.JobSpec", + "description": "Specification of the desired behavior of a job. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status" + }, + "status": { + "$ref": "#/definitions/io.k8s.api.batch.v1.JobStatus", + "description": "Current status of a job. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status" + } + }, + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "batch", + "kind": "Job", + "version": "v1" + } + ] + }, + "io.k8s.api.batch.v1.JobCondition": { + "description": "JobCondition describes current state of a job.", + "properties": { + "lastProbeTime": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time", + "description": "Last time the condition was checked." + }, + "lastTransitionTime": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time", + "description": "Last time the condition transit from one status to another." + }, + "message": { + "description": "Human readable message indicating details about last transition.", + "type": "string" + }, + "reason": { + "description": "(brief) reason for the condition's last transition.", + "type": "string" + }, + "status": { + "description": "Status of the condition, one of True, False, Unknown.", + "type": "string" + }, + "type": { + "description": "Type of job condition, Complete or Failed.", + "type": "string" + } + }, + "required": [ + "type", + "status" + ], + "type": "object" + }, + "io.k8s.api.batch.v1.JobList": { + "description": "JobList is a collection of jobs.", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "items": { + "description": "items is the list of Jobs.", + "items": { + "$ref": "#/definitions/io.k8s.api.batch.v1.Job" + }, + "type": "array" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta", + "description": "Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata" + } + }, + "required": [ + "items" + ], + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "batch", + "kind": "JobList", + "version": "v1" + } + ] + }, + "io.k8s.api.batch.v1.JobSpec": { + "description": "JobSpec describes how the job execution will look like.", + "properties": { + "activeDeadlineSeconds": { + "description": "Specifies the duration in seconds relative to the startTime that the job may be continuously active before the system tries to terminate it; value must be positive integer. If a Job is suspended (at creation or through an update), this timer will effectively be stopped and reset when the Job is resumed again.", + "format": "int64", + "type": "integer" + }, + "backoffLimit": { + "description": "Specifies the number of retries before marking this job failed. Defaults to 6", + "format": "int32", + "type": "integer" + }, + "completionMode": { + "description": "CompletionMode specifies how Pod completions are tracked. It can be `NonIndexed` (default) or `Indexed`.\n\n`NonIndexed` means that the Job is considered complete when there have been .spec.completions successfully completed Pods. Each Pod completion is homologous to each other.\n\n`Indexed` means that the Pods of a Job get an associated completion index from 0 to (.spec.completions - 1), available in the annotation batch.kubernetes.io/job-completion-index. The Job is considered complete when there is one successfully completed Pod for each index. When value is `Indexed`, .spec.completions must be specified and `.spec.parallelism` must be less than or equal to 10^5.\n\nThis field is alpha-level and is only honored by servers that enable the IndexedJob feature gate. More completion modes can be added in the future. If the Job controller observes a mode that it doesn't recognize, the controller skips updates for the Job.", + "type": "string" + }, + "completions": { + "description": "Specifies the desired number of successfully finished pods the job should be run with. Setting to nil means that the success of any pod signals the success of all pods, and allows parallelism to have any positive value. Setting to 1 means that parallelism is limited to 1 and the success of that pod signals the success of the job. More info: https://kubernetes.io/docs/concepts/workloads/controllers/jobs-run-to-completion/", + "format": "int32", + "type": "integer" + }, + "manualSelector": { + "description": "manualSelector controls generation of pod labels and pod selectors. Leave `manualSelector` unset unless you are certain what you are doing. When false or unset, the system pick labels unique to this job and appends those labels to the pod template. When true, the user is responsible for picking unique labels and specifying the selector. Failure to pick a unique label may cause this and other jobs to not function correctly. However, You may see `manualSelector=true` in jobs that were created with the old `extensions/v1beta1` API. More info: https://kubernetes.io/docs/concepts/workloads/controllers/jobs-run-to-completion/#specifying-your-own-pod-selector", + "type": "boolean" + }, + "parallelism": { + "description": "Specifies the maximum desired number of pods the job should run at any given time. The actual number of pods running in steady state will be less than this number when ((.spec.completions - .status.successful) \u003c .spec.parallelism), i.e. when the work left to do is less than max parallelism. More info: https://kubernetes.io/docs/concepts/workloads/controllers/jobs-run-to-completion/", + "format": "int32", + "type": "integer" + }, + "selector": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector", + "description": "A label query over pods that should match the pod count. Normally, the system sets this field for you. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#label-selectors" + }, + "suspend": { + "description": "Suspend specifies whether the Job controller should create Pods or not. If a Job is created with suspend set to true, no Pods are created by the Job controller. If a Job is suspended after creation (i.e. the flag goes from false to true), the Job controller will delete all active Pods associated with this Job. Users must design their workload to gracefully handle this. Suspending a Job will reset the StartTime field of the Job, effectively resetting the ActiveDeadlineSeconds timer too. This is an alpha field and requires the SuspendJob feature gate to be enabled; otherwise this field may not be set to true. Defaults to false.", + "type": "boolean" + }, + "template": { + "$ref": "#/definitions/io.k8s.api.core.v1.PodTemplateSpec", + "description": "Describes the pod that will be created when executing a job. More info: https://kubernetes.io/docs/concepts/workloads/controllers/jobs-run-to-completion/" + }, + "ttlSecondsAfterFinished": { + "description": "ttlSecondsAfterFinished limits the lifetime of a Job that has finished execution (either Complete or Failed). If this field is set, ttlSecondsAfterFinished after the Job finishes, it is eligible to be automatically deleted. When the Job is being deleted, its lifecycle guarantees (e.g. finalizers) will be honored. If this field is unset, the Job won't be automatically deleted. If this field is set to zero, the Job becomes eligible to be deleted immediately after it finishes. This field is alpha-level and is only honored by servers that enable the TTLAfterFinished feature.", + "format": "int32", + "type": "integer" + } + }, + "required": [ + "template" + ], + "type": "object" + }, + "io.k8s.api.batch.v1.JobStatus": { + "description": "JobStatus represents the current state of a Job.", + "properties": { + "active": { + "description": "The number of actively running pods.", + "format": "int32", + "type": "integer" + }, + "completedIndexes": { + "description": "CompletedIndexes holds the completed indexes when .spec.completionMode = \"Indexed\" in a text format. The indexes are represented as decimal integers separated by commas. The numbers are listed in increasing order. Three or more consecutive numbers are compressed and represented by the first and last element of the series, separated by a hyphen. For example, if the completed indexes are 1, 3, 4, 5 and 7, they are represented as \"1,3-5,7\".", + "type": "string" + }, + "completionTime": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time", + "description": "Represents time when the job was completed. It is not guaranteed to be set in happens-before order across separate operations. It is represented in RFC3339 form and is in UTC. The completion time is only set when the job finishes successfully." + }, + "conditions": { + "description": "The latest available observations of an object's current state. When a Job fails, one of the conditions will have type \"Failed\" and status true. When a Job is suspended, one of the conditions will have type \"Suspended\" and status true; when the Job is resumed, the status of this condition will become false. When a Job is completed, one of the conditions will have type \"Complete\" and status true. More info: https://kubernetes.io/docs/concepts/workloads/controllers/jobs-run-to-completion/", + "items": { + "$ref": "#/definitions/io.k8s.api.batch.v1.JobCondition" + }, + "type": "array", + "x-kubernetes-list-type": "atomic", + "x-kubernetes-patch-merge-key": "type", + "x-kubernetes-patch-strategy": "merge" + }, + "failed": { + "description": "The number of pods which reached phase Failed.", + "format": "int32", + "type": "integer" + }, + "startTime": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time", + "description": "Represents time when the job controller started processing a job. When a Job is created in the suspended state, this field is not set until the first time it is resumed. This field is reset every time a Job is resumed from suspension. It is represented in RFC3339 form and is in UTC." + }, + "succeeded": { + "description": "The number of pods which reached phase Succeeded.", + "format": "int32", + "type": "integer" + } + }, + "type": "object" + }, + "io.k8s.api.batch.v1.JobTemplateSpec": { + "description": "JobTemplateSpec describes the data a Job should have when created from a template", + "properties": { + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta", + "description": "Standard object's metadata of the jobs created from this template. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata" + }, + "spec": { + "$ref": "#/definitions/io.k8s.api.batch.v1.JobSpec", + "description": "Specification of the desired behavior of the job. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status" + } + }, + "type": "object" + }, + "io.k8s.api.batch.v1beta1.CronJob": { + "description": "CronJob represents the configuration of a single cron job.", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta", + "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata" + }, + "spec": { + "$ref": "#/definitions/io.k8s.api.batch.v1beta1.CronJobSpec", + "description": "Specification of the desired behavior of a cron job, including the schedule. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status" + }, + "status": { + "$ref": "#/definitions/io.k8s.api.batch.v1beta1.CronJobStatus", + "description": "Current status of a cron job. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status" + } + }, + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "batch", + "kind": "CronJob", + "version": "v1beta1" + } + ] + }, + "io.k8s.api.batch.v1beta1.CronJobList": { + "description": "CronJobList is a collection of cron jobs.", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "items": { + "description": "items is the list of CronJobs.", + "items": { + "$ref": "#/definitions/io.k8s.api.batch.v1beta1.CronJob" + }, + "type": "array" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta", + "description": "Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata" + } + }, + "required": [ + "items" + ], + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "batch", + "kind": "CronJobList", + "version": "v1beta1" + } + ] + }, + "io.k8s.api.batch.v1beta1.CronJobSpec": { + "description": "CronJobSpec describes how the job execution will look like and when it will actually run.", + "properties": { + "concurrencyPolicy": { + "description": "Specifies how to treat concurrent executions of a Job. Valid values are: - \"Allow\" (default): allows CronJobs to run concurrently; - \"Forbid\": forbids concurrent runs, skipping next run if previous run hasn't finished yet; - \"Replace\": cancels currently running job and replaces it with a new one", + "type": "string" + }, + "failedJobsHistoryLimit": { + "description": "The number of failed finished jobs to retain. This is a pointer to distinguish between explicit zero and not specified. Defaults to 1.", + "format": "int32", + "type": "integer" + }, + "jobTemplate": { + "$ref": "#/definitions/io.k8s.api.batch.v1beta1.JobTemplateSpec", + "description": "Specifies the job that will be created when executing a CronJob." + }, + "schedule": { + "description": "The schedule in Cron format, see https://en.wikipedia.org/wiki/Cron.", + "type": "string" + }, + "startingDeadlineSeconds": { + "description": "Optional deadline in seconds for starting the job if it misses scheduled time for any reason. Missed jobs executions will be counted as failed ones.", + "format": "int64", + "type": "integer" + }, + "successfulJobsHistoryLimit": { + "description": "The number of successful finished jobs to retain. This is a pointer to distinguish between explicit zero and not specified. Defaults to 3.", + "format": "int32", + "type": "integer" + }, + "suspend": { + "description": "This flag tells the controller to suspend subsequent executions, it does not apply to already started executions. Defaults to false.", + "type": "boolean" + } + }, + "required": [ + "schedule", + "jobTemplate" + ], + "type": "object" + }, + "io.k8s.api.batch.v1beta1.CronJobStatus": { + "description": "CronJobStatus represents the current state of a cron job.", + "properties": { + "active": { + "description": "A list of pointers to currently running jobs.", + "items": { + "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference" + }, + "type": "array", + "x-kubernetes-list-type": "atomic" + }, + "lastScheduleTime": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time", + "description": "Information when was the last time the job was successfully scheduled." + }, + "lastSuccessfulTime": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time", + "description": "Information when was the last time the job successfully completed." + } + }, + "type": "object" + }, + "io.k8s.api.batch.v1beta1.JobTemplateSpec": { + "description": "JobTemplateSpec describes the data a Job should have when created from a template", + "properties": { + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta", + "description": "Standard object's metadata of the jobs created from this template. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata" + }, + "spec": { + "$ref": "#/definitions/io.k8s.api.batch.v1.JobSpec", + "description": "Specification of the desired behavior of the job. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status" + } + }, + "type": "object" + }, + "io.k8s.api.certificates.v1.CertificateSigningRequest": { + "description": "CertificateSigningRequest objects provide a mechanism to obtain x509 certificates by submitting a certificate signing request, and having it asynchronously approved and issued.\n\nKubelets use this API to obtain:\n 1. client certificates to authenticate to kube-apiserver (with the \"kubernetes.io/kube-apiserver-client-kubelet\" signerName).\n 2. serving certificates for TLS endpoints kube-apiserver can connect to securely (with the \"kubernetes.io/kubelet-serving\" signerName).\n\nThis API can be used to request client certificates to authenticate to kube-apiserver (with the \"kubernetes.io/kube-apiserver-client\" signerName), or to obtain certificates from custom non-Kubernetes signers.", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + }, + "spec": { + "$ref": "#/definitions/io.k8s.api.certificates.v1.CertificateSigningRequestSpec", + "description": "spec contains the certificate request, and is immutable after creation. Only the request, signerName, and usages fields can be set on creation. Other fields are derived by Kubernetes and cannot be modified by users." + }, + "status": { + "$ref": "#/definitions/io.k8s.api.certificates.v1.CertificateSigningRequestStatus", + "description": "status contains information about whether the request is approved or denied, and the certificate issued by the signer, or the failure condition indicating signer failure." + } + }, + "required": [ + "spec" + ], + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "certificates.k8s.io", + "kind": "CertificateSigningRequest", + "version": "v1" + } + ] + }, + "io.k8s.api.certificates.v1.CertificateSigningRequestCondition": { + "description": "CertificateSigningRequestCondition describes a condition of a CertificateSigningRequest object", + "properties": { + "lastTransitionTime": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time", + "description": "lastTransitionTime is the time the condition last transitioned from one status to another. If unset, when a new condition type is added or an existing condition's status is changed, the server defaults this to the current time." + }, + "lastUpdateTime": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time", + "description": "lastUpdateTime is the time of the last update to this condition" + }, + "message": { + "description": "message contains a human readable message with details about the request state", + "type": "string" + }, + "reason": { + "description": "reason indicates a brief reason for the request state", + "type": "string" + }, + "status": { + "description": "status of the condition, one of True, False, Unknown. Approved, Denied, and Failed conditions may not be \"False\" or \"Unknown\".", + "type": "string" + }, + "type": { + "description": "type of the condition. Known conditions are \"Approved\", \"Denied\", and \"Failed\".\n\nAn \"Approved\" condition is added via the /approval subresource, indicating the request was approved and should be issued by the signer.\n\nA \"Denied\" condition is added via the /approval subresource, indicating the request was denied and should not be issued by the signer.\n\nA \"Failed\" condition is added via the /status subresource, indicating the signer failed to issue the certificate.\n\nApproved and Denied conditions are mutually exclusive. Approved, Denied, and Failed conditions cannot be removed once added.\n\nOnly one condition of a given type is allowed.", + "type": "string" + } + }, + "required": [ + "type", + "status" + ], + "type": "object" + }, + "io.k8s.api.certificates.v1.CertificateSigningRequestList": { + "description": "CertificateSigningRequestList is a collection of CertificateSigningRequest objects", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "items": { + "description": "items is a collection of CertificateSigningRequest objects", + "items": { + "$ref": "#/definitions/io.k8s.api.certificates.v1.CertificateSigningRequest" + }, + "type": "array" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" + } + }, + "required": [ + "items" + ], + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "certificates.k8s.io", + "kind": "CertificateSigningRequestList", + "version": "v1" + } + ] + }, + "io.k8s.api.certificates.v1.CertificateSigningRequestSpec": { + "description": "CertificateSigningRequestSpec contains the certificate request.", + "properties": { + "extra": { + "additionalProperties": { + "items": { + "type": "string" + }, + "type": "array" + }, + "description": "extra contains extra attributes of the user that created the CertificateSigningRequest. Populated by the API server on creation and immutable.", + "type": "object" + }, + "groups": { + "description": "groups contains group membership of the user that created the CertificateSigningRequest. Populated by the API server on creation and immutable.", + "items": { + "type": "string" + }, + "type": "array", + "x-kubernetes-list-type": "atomic" + }, + "request": { + "description": "request contains an x509 certificate signing request encoded in a \"CERTIFICATE REQUEST\" PEM block. When serialized as JSON or YAML, the data is additionally base64-encoded.", + "format": "byte", + "type": "string", + "x-kubernetes-list-type": "atomic" + }, + "signerName": { + "description": "signerName indicates the requested signer, and is a qualified name.\n\nList/watch requests for CertificateSigningRequests can filter on this field using a \"spec.signerName=NAME\" fieldSelector.\n\nWell-known Kubernetes signers are:\n 1. \"kubernetes.io/kube-apiserver-client\": issues client certificates that can be used to authenticate to kube-apiserver.\n Requests for this signer are never auto-approved by kube-controller-manager, can be issued by the \"csrsigning\" controller in kube-controller-manager.\n 2. \"kubernetes.io/kube-apiserver-client-kubelet\": issues client certificates that kubelets use to authenticate to kube-apiserver.\n Requests for this signer can be auto-approved by the \"csrapproving\" controller in kube-controller-manager, and can be issued by the \"csrsigning\" controller in kube-controller-manager.\n 3. \"kubernetes.io/kubelet-serving\" issues serving certificates that kubelets use to serve TLS endpoints, which kube-apiserver can connect to securely.\n Requests for this signer are never auto-approved by kube-controller-manager, and can be issued by the \"csrsigning\" controller in kube-controller-manager.\n\nMore details are available at https://k8s.io/docs/reference/access-authn-authz/certificate-signing-requests/#kubernetes-signers\n\nCustom signerNames can also be specified. The signer defines:\n 1. Trust distribution: how trust (CA bundles) are distributed.\n 2. Permitted subjects: and behavior when a disallowed subject is requested.\n 3. Required, permitted, or forbidden x509 extensions in the request (including whether subjectAltNames are allowed, which types, restrictions on allowed values) and behavior when a disallowed extension is requested.\n 4. Required, permitted, or forbidden key usages / extended key usages.\n 5. Expiration/certificate lifetime: whether it is fixed by the signer, configurable by the admin.\n 6. Whether or not requests for CA certificates are allowed.", + "type": "string" + }, + "uid": { + "description": "uid contains the uid of the user that created the CertificateSigningRequest. Populated by the API server on creation and immutable.", + "type": "string" + }, + "usages": { + "description": "usages specifies a set of key usages requested in the issued certificate.\n\nRequests for TLS client certificates typically request: \"digital signature\", \"key encipherment\", \"client auth\".\n\nRequests for TLS serving certificates typically request: \"key encipherment\", \"digital signature\", \"server auth\".\n\nValid values are:\n \"signing\", \"digital signature\", \"content commitment\",\n \"key encipherment\", \"key agreement\", \"data encipherment\",\n \"cert sign\", \"crl sign\", \"encipher only\", \"decipher only\", \"any\",\n \"server auth\", \"client auth\",\n \"code signing\", \"email protection\", \"s/mime\",\n \"ipsec end system\", \"ipsec tunnel\", \"ipsec user\",\n \"timestamping\", \"ocsp signing\", \"microsoft sgc\", \"netscape sgc\"", + "items": { + "type": "string" + }, + "type": "array", + "x-kubernetes-list-type": "atomic" + }, + "username": { + "description": "username contains the name of the user that created the CertificateSigningRequest. Populated by the API server on creation and immutable.", + "type": "string" + } + }, + "required": [ + "request", + "signerName" + ], + "type": "object" + }, + "io.k8s.api.certificates.v1.CertificateSigningRequestStatus": { + "description": "CertificateSigningRequestStatus contains conditions used to indicate approved/denied/failed status of the request, and the issued certificate.", + "properties": { + "certificate": { + "description": "certificate is populated with an issued certificate by the signer after an Approved condition is present. This field is set via the /status subresource. Once populated, this field is immutable.\n\nIf the certificate signing request is denied, a condition of type \"Denied\" is added and this field remains empty. If the signer cannot issue the certificate, a condition of type \"Failed\" is added and this field remains empty.\n\nValidation requirements:\n 1. certificate must contain one or more PEM blocks.\n 2. All PEM blocks must have the \"CERTIFICATE\" label, contain no headers, and the encoded data\n must be a BER-encoded ASN.1 Certificate structure as described in section 4 of RFC5280.\n 3. Non-PEM content may appear before or after the \"CERTIFICATE\" PEM blocks and is unvalidated,\n to allow for explanatory text as described in section 5.2 of RFC7468.\n\nIf more than one PEM block is present, and the definition of the requested spec.signerName does not indicate otherwise, the first block is the issued certificate, and subsequent blocks should be treated as intermediate certificates and presented in TLS handshakes.\n\nThe certificate is encoded in PEM format.\n\nWhen serialized as JSON or YAML, the data is additionally base64-encoded, so it consists of:\n\n base64(\n -----BEGIN CERTIFICATE-----\n ...\n -----END CERTIFICATE-----\n )", + "format": "byte", + "type": "string", + "x-kubernetes-list-type": "atomic" + }, + "conditions": { + "description": "conditions applied to the request. Known conditions are \"Approved\", \"Denied\", and \"Failed\".", + "items": { + "$ref": "#/definitions/io.k8s.api.certificates.v1.CertificateSigningRequestCondition" + }, + "type": "array", + "x-kubernetes-list-map-keys": [ + "type" + ], + "x-kubernetes-list-type": "map" + } + }, + "type": "object" + }, + "io.k8s.api.certificates.v1beta1.CertificateSigningRequest": { + "description": "Describes a certificate signing request", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + }, + "spec": { + "$ref": "#/definitions/io.k8s.api.certificates.v1beta1.CertificateSigningRequestSpec", + "description": "The certificate request itself and any additional information." + }, + "status": { + "$ref": "#/definitions/io.k8s.api.certificates.v1beta1.CertificateSigningRequestStatus", + "description": "Derived information about the request." + } + }, + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "certificates.k8s.io", + "kind": "CertificateSigningRequest", + "version": "v1beta1" + } + ] + }, + "io.k8s.api.certificates.v1beta1.CertificateSigningRequestCondition": { + "properties": { + "lastTransitionTime": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time", + "description": "lastTransitionTime is the time the condition last transitioned from one status to another. If unset, when a new condition type is added or an existing condition's status is changed, the server defaults this to the current time." + }, + "lastUpdateTime": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time", + "description": "timestamp for the last update to this condition" + }, + "message": { + "description": "human readable message with details about the request state", + "type": "string" + }, + "reason": { + "description": "brief reason for the request state", + "type": "string" + }, + "status": { + "description": "Status of the condition, one of True, False, Unknown. Approved, Denied, and Failed conditions may not be \"False\" or \"Unknown\". Defaults to \"True\". If unset, should be treated as \"True\".", + "type": "string" + }, + "type": { + "description": "type of the condition. Known conditions include \"Approved\", \"Denied\", and \"Failed\".", + "type": "string" + } + }, + "required": [ + "type" + ], + "type": "object" + }, + "io.k8s.api.certificates.v1beta1.CertificateSigningRequestList": { + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "items": { + "items": { + "$ref": "#/definitions/io.k8s.api.certificates.v1beta1.CertificateSigningRequest" + }, + "type": "array" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" + } + }, + "required": [ + "items" + ], + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "certificates.k8s.io", + "kind": "CertificateSigningRequestList", + "version": "v1beta1" + } + ] + }, + "io.k8s.api.certificates.v1beta1.CertificateSigningRequestSpec": { + "description": "This information is immutable after the request is created. Only the Request and Usages fields can be set on creation, other fields are derived by Kubernetes and cannot be modified by users.", + "properties": { + "extra": { + "additionalProperties": { + "items": { + "type": "string" + }, + "type": "array" + }, + "description": "Extra information about the requesting user. See user.Info interface for details.", + "type": "object" + }, + "groups": { + "description": "Group information about the requesting user. See user.Info interface for details.", + "items": { + "type": "string" + }, + "type": "array", + "x-kubernetes-list-type": "atomic" + }, + "request": { + "description": "Base64-encoded PKCS#10 CSR data", + "format": "byte", + "type": "string", + "x-kubernetes-list-type": "atomic" + }, + "signerName": { + "description": "Requested signer for the request. It is a qualified name in the form: `scope-hostname.io/name`. If empty, it will be defaulted:\n 1. If it's a kubelet client certificate, it is assigned\n \"kubernetes.io/kube-apiserver-client-kubelet\".\n 2. If it's a kubelet serving certificate, it is assigned\n \"kubernetes.io/kubelet-serving\".\n 3. Otherwise, it is assigned \"kubernetes.io/legacy-unknown\".\nDistribution of trust for signers happens out of band. You can select on this field using `spec.signerName`.", + "type": "string" + }, + "uid": { + "description": "UID information about the requesting user. See user.Info interface for details.", + "type": "string" + }, + "usages": { + "description": "allowedUsages specifies a set of usage contexts the key will be valid for. See: https://tools.ietf.org/html/rfc5280#section-4.2.1.3\n https://tools.ietf.org/html/rfc5280#section-4.2.1.12\nValid values are:\n \"signing\",\n \"digital signature\",\n \"content commitment\",\n \"key encipherment\",\n \"key agreement\",\n \"data encipherment\",\n \"cert sign\",\n \"crl sign\",\n \"encipher only\",\n \"decipher only\",\n \"any\",\n \"server auth\",\n \"client auth\",\n \"code signing\",\n \"email protection\",\n \"s/mime\",\n \"ipsec end system\",\n \"ipsec tunnel\",\n \"ipsec user\",\n \"timestamping\",\n \"ocsp signing\",\n \"microsoft sgc\",\n \"netscape sgc\"", + "items": { + "type": "string" + }, + "type": "array", + "x-kubernetes-list-type": "atomic" + }, + "username": { + "description": "Information about the requesting user. See user.Info interface for details.", + "type": "string" + } + }, + "required": [ + "request" + ], + "type": "object" + }, + "io.k8s.api.certificates.v1beta1.CertificateSigningRequestStatus": { + "properties": { + "certificate": { + "description": "If request was approved, the controller will place the issued certificate here.", + "format": "byte", + "type": "string", + "x-kubernetes-list-type": "atomic" + }, + "conditions": { + "description": "Conditions applied to the request, such as approval or denial.", + "items": { + "$ref": "#/definitions/io.k8s.api.certificates.v1beta1.CertificateSigningRequestCondition" + }, + "type": "array", + "x-kubernetes-list-map-keys": [ + "type" + ], + "x-kubernetes-list-type": "map" + } + }, + "type": "object" + }, + "io.k8s.api.coordination.v1.Lease": { + "description": "Lease defines a lease concept.", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta", + "description": "More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata" + }, + "spec": { + "$ref": "#/definitions/io.k8s.api.coordination.v1.LeaseSpec", + "description": "Specification of the Lease. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status" + } + }, + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "coordination.k8s.io", + "kind": "Lease", + "version": "v1" + } + ] + }, + "io.k8s.api.coordination.v1.LeaseList": { + "description": "LeaseList is a list of Lease objects.", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "items": { + "description": "Items is a list of schema objects.", + "items": { + "$ref": "#/definitions/io.k8s.api.coordination.v1.Lease" + }, + "type": "array" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta", + "description": "Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata" + } + }, + "required": [ + "items" + ], + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "coordination.k8s.io", + "kind": "LeaseList", + "version": "v1" + } + ] + }, + "io.k8s.api.coordination.v1.LeaseSpec": { + "description": "LeaseSpec is a specification of a Lease.", + "properties": { + "acquireTime": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.MicroTime", + "description": "acquireTime is a time when the current lease was acquired." + }, + "holderIdentity": { + "description": "holderIdentity contains the identity of the holder of a current lease.", + "type": "string" + }, + "leaseDurationSeconds": { + "description": "leaseDurationSeconds is a duration that candidates for a lease need to wait to force acquire it. This is measure against time of last observed RenewTime.", + "format": "int32", + "type": "integer" + }, + "leaseTransitions": { + "description": "leaseTransitions is the number of transitions of a lease between holders.", + "format": "int32", + "type": "integer" + }, + "renewTime": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.MicroTime", + "description": "renewTime is a time when the current holder of a lease has last updated the lease." + } + }, + "type": "object" + }, + "io.k8s.api.coordination.v1beta1.Lease": { + "description": "Lease defines a lease concept.", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta", + "description": "More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata" + }, + "spec": { + "$ref": "#/definitions/io.k8s.api.coordination.v1beta1.LeaseSpec", + "description": "Specification of the Lease. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status" + } + }, + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "coordination.k8s.io", + "kind": "Lease", + "version": "v1beta1" + } + ] + }, + "io.k8s.api.coordination.v1beta1.LeaseList": { + "description": "LeaseList is a list of Lease objects.", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "items": { + "description": "Items is a list of schema objects.", + "items": { + "$ref": "#/definitions/io.k8s.api.coordination.v1beta1.Lease" + }, + "type": "array" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta", + "description": "Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata" + } + }, + "required": [ + "items" + ], + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "coordination.k8s.io", + "kind": "LeaseList", + "version": "v1beta1" + } + ] + }, + "io.k8s.api.coordination.v1beta1.LeaseSpec": { + "description": "LeaseSpec is a specification of a Lease.", + "properties": { + "acquireTime": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.MicroTime", + "description": "acquireTime is a time when the current lease was acquired." + }, + "holderIdentity": { + "description": "holderIdentity contains the identity of the holder of a current lease.", + "type": "string" + }, + "leaseDurationSeconds": { + "description": "leaseDurationSeconds is a duration that candidates for a lease need to wait to force acquire it. This is measure against time of last observed RenewTime.", + "format": "int32", + "type": "integer" + }, + "leaseTransitions": { + "description": "leaseTransitions is the number of transitions of a lease between holders.", + "format": "int32", + "type": "integer" + }, + "renewTime": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.MicroTime", + "description": "renewTime is a time when the current holder of a lease has last updated the lease." + } + }, + "type": "object" + }, + "io.k8s.api.core.v1.AWSElasticBlockStoreVolumeSource": { + "description": "Represents a Persistent Disk resource in AWS.\n\nAn AWS EBS disk must exist before mounting to a container. The disk must also be in the same AWS zone as the kubelet. An AWS EBS disk can only be mounted as read/write once. AWS EBS volumes support ownership management and SELinux relabeling.", + "properties": { + "fsType": { + "description": "Filesystem type of the volume that you want to mount. Tip: Ensure that the filesystem type is supported by the host operating system. Examples: \"ext4\", \"xfs\", \"ntfs\". Implicitly inferred to be \"ext4\" if unspecified. More info: https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore", + "type": "string" + }, + "partition": { + "description": "The partition in the volume that you want to mount. If omitted, the default is to mount by volume name. Examples: For volume /dev/sda1, you specify the partition as \"1\". Similarly, the volume partition for /dev/sda is \"0\" (or you can leave the property empty).", + "format": "int32", + "type": "integer" + }, + "readOnly": { + "description": "Specify \"true\" to force and set the ReadOnly property in VolumeMounts to \"true\". If omitted, the default is \"false\". More info: https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore", + "type": "boolean" + }, + "volumeID": { + "description": "Unique ID of the persistent disk resource in AWS (Amazon EBS volume). More info: https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore", + "type": "string" + } + }, + "required": [ + "volumeID" + ], + "type": "object" + }, + "io.k8s.api.core.v1.Affinity": { + "description": "Affinity is a group of affinity scheduling rules.", + "properties": { + "nodeAffinity": { + "$ref": "#/definitions/io.k8s.api.core.v1.NodeAffinity", + "description": "Describes node affinity scheduling rules for the pod." + }, + "podAffinity": { + "$ref": "#/definitions/io.k8s.api.core.v1.PodAffinity", + "description": "Describes pod affinity scheduling rules (e.g. co-locate this pod in the same node, zone, etc. as some other pod(s))." + }, + "podAntiAffinity": { + "$ref": "#/definitions/io.k8s.api.core.v1.PodAntiAffinity", + "description": "Describes pod anti-affinity scheduling rules (e.g. avoid putting this pod in the same node, zone, etc. as some other pod(s))." + } + }, + "type": "object" + }, + "io.k8s.api.core.v1.AttachedVolume": { + "description": "AttachedVolume describes a volume attached to a node", + "properties": { + "devicePath": { + "description": "DevicePath represents the device path where the volume should be available", + "type": "string" + }, + "name": { + "description": "Name of the attached volume", + "type": "string" + } + }, + "required": [ + "name", + "devicePath" + ], + "type": "object" + }, + "io.k8s.api.core.v1.AzureDiskVolumeSource": { + "description": "AzureDisk represents an Azure Data Disk mount on the host and bind mount to the pod.", + "properties": { + "cachingMode": { + "description": "Host Caching mode: None, Read Only, Read Write.", + "type": "string" + }, + "diskName": { + "description": "The Name of the data disk in the blob storage", + "type": "string" + }, + "diskURI": { + "description": "The URI the data disk in the blob storage", + "type": "string" + }, + "fsType": { + "description": "Filesystem type to mount. Must be a filesystem type supported by the host operating system. Ex. \"ext4\", \"xfs\", \"ntfs\". Implicitly inferred to be \"ext4\" if unspecified.", + "type": "string" + }, + "kind": { + "description": "Expected values Shared: multiple blob disks per storage account Dedicated: single blob disk per storage account Managed: azure managed data disk (only in managed availability set). defaults to shared", + "type": "string" + }, + "readOnly": { + "description": "Defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts.", + "type": "boolean" + } + }, + "required": [ + "diskName", + "diskURI" + ], + "type": "object" + }, + "io.k8s.api.core.v1.AzureFilePersistentVolumeSource": { + "description": "AzureFile represents an Azure File Service mount on the host and bind mount to the pod.", + "properties": { + "readOnly": { + "description": "Defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts.", + "type": "boolean" + }, + "secretName": { + "description": "the name of secret that contains Azure Storage Account Name and Key", + "type": "string" + }, + "secretNamespace": { + "description": "the namespace of the secret that contains Azure Storage Account Name and Key default is the same as the Pod", + "type": "string" + }, + "shareName": { + "description": "Share Name", + "type": "string" + } + }, + "required": [ + "secretName", + "shareName" + ], + "type": "object" + }, + "io.k8s.api.core.v1.AzureFileVolumeSource": { + "description": "AzureFile represents an Azure File Service mount on the host and bind mount to the pod.", + "properties": { + "readOnly": { + "description": "Defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts.", + "type": "boolean" + }, + "secretName": { + "description": "the name of secret that contains Azure Storage Account Name and Key", + "type": "string" + }, + "shareName": { + "description": "Share Name", + "type": "string" + } + }, + "required": [ + "secretName", + "shareName" + ], + "type": "object" + }, + "io.k8s.api.core.v1.Binding": { + "description": "Binding ties one object to another; for example, a pod is bound to a node by a scheduler. Deprecated in 1.7, please use the bindings subresource of pods instead.", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta", + "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata" + }, + "target": { + "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference", + "description": "The target object that you want to bind to the standard object." + } + }, + "required": [ + "target" + ], + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "", + "kind": "Binding", + "version": "v1" + } + ] + }, + "io.k8s.api.core.v1.CSIPersistentVolumeSource": { + "description": "Represents storage that is managed by an external CSI volume driver (Beta feature)", + "properties": { + "controllerExpandSecretRef": { + "$ref": "#/definitions/io.k8s.api.core.v1.SecretReference", + "description": "ControllerExpandSecretRef is a reference to the secret object containing sensitive information to pass to the CSI driver to complete the CSI ControllerExpandVolume call. This is an alpha field and requires enabling ExpandCSIVolumes feature gate. This field is optional, and may be empty if no secret is required. If the secret object contains more than one secret, all secrets are passed." + }, + "controllerPublishSecretRef": { + "$ref": "#/definitions/io.k8s.api.core.v1.SecretReference", + "description": "ControllerPublishSecretRef is a reference to the secret object containing sensitive information to pass to the CSI driver to complete the CSI ControllerPublishVolume and ControllerUnpublishVolume calls. This field is optional, and may be empty if no secret is required. If the secret object contains more than one secret, all secrets are passed." + }, + "driver": { + "description": "Driver is the name of the driver to use for this volume. Required.", + "type": "string" + }, + "fsType": { + "description": "Filesystem type to mount. Must be a filesystem type supported by the host operating system. Ex. \"ext4\", \"xfs\", \"ntfs\".", + "type": "string" + }, + "nodePublishSecretRef": { + "$ref": "#/definitions/io.k8s.api.core.v1.SecretReference", + "description": "NodePublishSecretRef is a reference to the secret object containing sensitive information to pass to the CSI driver to complete the CSI NodePublishVolume and NodeUnpublishVolume calls. This field is optional, and may be empty if no secret is required. If the secret object contains more than one secret, all secrets are passed." + }, + "nodeStageSecretRef": { + "$ref": "#/definitions/io.k8s.api.core.v1.SecretReference", + "description": "NodeStageSecretRef is a reference to the secret object containing sensitive information to pass to the CSI driver to complete the CSI NodeStageVolume and NodeStageVolume and NodeUnstageVolume calls. This field is optional, and may be empty if no secret is required. If the secret object contains more than one secret, all secrets are passed." + }, + "readOnly": { + "description": "Optional: The value to pass to ControllerPublishVolumeRequest. Defaults to false (read/write).", + "type": "boolean" + }, + "volumeAttributes": { + "additionalProperties": { + "type": "string" + }, + "description": "Attributes of the volume to publish.", + "type": "object" + }, + "volumeHandle": { + "description": "VolumeHandle is the unique volume name returned by the CSI volume plugin’s CreateVolume to refer to the volume on all subsequent calls. Required.", + "type": "string" + } + }, + "required": [ + "driver", + "volumeHandle" + ], + "type": "object" + }, + "io.k8s.api.core.v1.CSIVolumeSource": { + "description": "Represents a source location of a volume to mount, managed by an external CSI driver", + "properties": { + "driver": { + "description": "Driver is the name of the CSI driver that handles this volume. Consult with your admin for the correct name as registered in the cluster.", + "type": "string" + }, + "fsType": { + "description": "Filesystem type to mount. Ex. \"ext4\", \"xfs\", \"ntfs\". If not provided, the empty value is passed to the associated CSI driver which will determine the default filesystem to apply.", + "type": "string" + }, + "nodePublishSecretRef": { + "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference", + "description": "NodePublishSecretRef is a reference to the secret object containing sensitive information to pass to the CSI driver to complete the CSI NodePublishVolume and NodeUnpublishVolume calls. This field is optional, and may be empty if no secret is required. If the secret object contains more than one secret, all secret references are passed." + }, + "readOnly": { + "description": "Specifies a read-only configuration for the volume. Defaults to false (read/write).", + "type": "boolean" + }, + "volumeAttributes": { + "additionalProperties": { + "type": "string" + }, + "description": "VolumeAttributes stores driver-specific properties that are passed to the CSI driver. Consult your driver's documentation for supported values.", + "type": "object" + } + }, + "required": [ + "driver" + ], + "type": "object" + }, + "io.k8s.api.core.v1.Capabilities": { + "description": "Adds and removes POSIX capabilities from running containers.", + "properties": { + "add": { + "description": "Added capabilities", + "items": { + "type": "string" + }, + "type": "array" + }, + "drop": { + "description": "Removed capabilities", + "items": { + "type": "string" + }, + "type": "array" + } + }, + "type": "object" + }, + "io.k8s.api.core.v1.CephFSPersistentVolumeSource": { + "description": "Represents a Ceph Filesystem mount that lasts the lifetime of a pod Cephfs volumes do not support ownership management or SELinux relabeling.", + "properties": { + "monitors": { + "description": "Required: Monitors is a collection of Ceph monitors More info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it", + "items": { + "type": "string" + }, + "type": "array" + }, + "path": { + "description": "Optional: Used as the mounted root, rather than the full Ceph tree, default is /", + "type": "string" + }, + "readOnly": { + "description": "Optional: Defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts. More info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it", + "type": "boolean" + }, + "secretFile": { + "description": "Optional: SecretFile is the path to key ring for User, default is /etc/ceph/user.secret More info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it", + "type": "string" + }, + "secretRef": { + "$ref": "#/definitions/io.k8s.api.core.v1.SecretReference", + "description": "Optional: SecretRef is reference to the authentication secret for User, default is empty. More info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it" + }, + "user": { + "description": "Optional: User is the rados user name, default is admin More info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it", + "type": "string" + } + }, + "required": [ + "monitors" + ], + "type": "object" + }, + "io.k8s.api.core.v1.CephFSVolumeSource": { + "description": "Represents a Ceph Filesystem mount that lasts the lifetime of a pod Cephfs volumes do not support ownership management or SELinux relabeling.", + "properties": { + "monitors": { + "description": "Required: Monitors is a collection of Ceph monitors More info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it", + "items": { + "type": "string" + }, + "type": "array" + }, + "path": { + "description": "Optional: Used as the mounted root, rather than the full Ceph tree, default is /", + "type": "string" + }, + "readOnly": { + "description": "Optional: Defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts. More info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it", + "type": "boolean" + }, + "secretFile": { + "description": "Optional: SecretFile is the path to key ring for User, default is /etc/ceph/user.secret More info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it", + "type": "string" + }, + "secretRef": { + "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference", + "description": "Optional: SecretRef is reference to the authentication secret for User, default is empty. More info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it" + }, + "user": { + "description": "Optional: User is the rados user name, default is admin More info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it", + "type": "string" + } + }, + "required": [ + "monitors" + ], + "type": "object" + }, + "io.k8s.api.core.v1.CinderPersistentVolumeSource": { + "description": "Represents a cinder volume resource in Openstack. A Cinder volume must exist before mounting to a container. The volume must also be in the same region as the kubelet. Cinder volumes support ownership management and SELinux relabeling.", + "properties": { + "fsType": { + "description": "Filesystem type to mount. Must be a filesystem type supported by the host operating system. Examples: \"ext4\", \"xfs\", \"ntfs\". Implicitly inferred to be \"ext4\" if unspecified. More info: https://examples.k8s.io/mysql-cinder-pd/README.md", + "type": "string" + }, + "readOnly": { + "description": "Optional: Defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts. More info: https://examples.k8s.io/mysql-cinder-pd/README.md", + "type": "boolean" + }, + "secretRef": { + "$ref": "#/definitions/io.k8s.api.core.v1.SecretReference", + "description": "Optional: points to a secret object containing parameters used to connect to OpenStack." + }, + "volumeID": { + "description": "volume id used to identify the volume in cinder. More info: https://examples.k8s.io/mysql-cinder-pd/README.md", + "type": "string" + } + }, + "required": [ + "volumeID" + ], + "type": "object" + }, + "io.k8s.api.core.v1.CinderVolumeSource": { + "description": "Represents a cinder volume resource in Openstack. A Cinder volume must exist before mounting to a container. The volume must also be in the same region as the kubelet. Cinder volumes support ownership management and SELinux relabeling.", + "properties": { + "fsType": { + "description": "Filesystem type to mount. Must be a filesystem type supported by the host operating system. Examples: \"ext4\", \"xfs\", \"ntfs\". Implicitly inferred to be \"ext4\" if unspecified. More info: https://examples.k8s.io/mysql-cinder-pd/README.md", + "type": "string" + }, + "readOnly": { + "description": "Optional: Defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts. More info: https://examples.k8s.io/mysql-cinder-pd/README.md", + "type": "boolean" + }, + "secretRef": { + "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference", + "description": "Optional: points to a secret object containing parameters used to connect to OpenStack." + }, + "volumeID": { + "description": "volume id used to identify the volume in cinder. More info: https://examples.k8s.io/mysql-cinder-pd/README.md", + "type": "string" + } + }, + "required": [ + "volumeID" + ], + "type": "object" + }, + "io.k8s.api.core.v1.ClientIPConfig": { + "description": "ClientIPConfig represents the configurations of Client IP based session affinity.", + "properties": { + "timeoutSeconds": { + "description": "timeoutSeconds specifies the seconds of ClientIP type session sticky time. The value must be \u003e0 \u0026\u0026 \u003c=86400(for 1 day) if ServiceAffinity == \"ClientIP\". Default value is 10800(for 3 hours).", + "format": "int32", + "type": "integer" + } + }, + "type": "object" + }, + "io.k8s.api.core.v1.ComponentCondition": { + "description": "Information about the condition of a component.", + "properties": { + "error": { + "description": "Condition error code for a component. For example, a health check error code.", + "type": "string" + }, + "message": { + "description": "Message about the condition for a component. For example, information about a health check.", + "type": "string" + }, + "status": { + "description": "Status of the condition for a component. Valid values for \"Healthy\": \"True\", \"False\", or \"Unknown\".", + "type": "string" + }, + "type": { + "description": "Type of condition for a component. Valid value: \"Healthy\"", + "type": "string" + } + }, + "required": [ + "type", + "status" + ], + "type": "object" + }, + "io.k8s.api.core.v1.ComponentStatus": { + "description": "ComponentStatus (and ComponentStatusList) holds the cluster validation info. Deprecated: This API is deprecated in v1.19+", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "conditions": { + "description": "List of component conditions observed", + "items": { + "$ref": "#/definitions/io.k8s.api.core.v1.ComponentCondition" + }, + "type": "array", + "x-kubernetes-patch-merge-key": "type", + "x-kubernetes-patch-strategy": "merge" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta", + "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata" + } + }, + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "", + "kind": "ComponentStatus", + "version": "v1" + } + ] + }, + "io.k8s.api.core.v1.ComponentStatusList": { + "description": "Status of all the conditions for the component as a list of ComponentStatus objects. Deprecated: This API is deprecated in v1.19+", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "items": { + "description": "List of ComponentStatus objects.", + "items": { + "$ref": "#/definitions/io.k8s.api.core.v1.ComponentStatus" + }, + "type": "array" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta", + "description": "Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds" + } + }, + "required": [ + "items" + ], + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "", + "kind": "ComponentStatusList", + "version": "v1" + } + ] + }, + "io.k8s.api.core.v1.ConfigMap": { + "description": "ConfigMap holds configuration data for pods to consume.", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "binaryData": { + "additionalProperties": { + "format": "byte", + "type": "string" + }, + "description": "BinaryData contains the binary data. Each key must consist of alphanumeric characters, '-', '_' or '.'. BinaryData can contain byte sequences that are not in the UTF-8 range. The keys stored in BinaryData must not overlap with the ones in the Data field, this is enforced during validation process. Using this field will require 1.10+ apiserver and kubelet.", + "type": "object" + }, + "data": { + "additionalProperties": { + "type": "string" + }, + "description": "Data contains the configuration data. Each key must consist of alphanumeric characters, '-', '_' or '.'. Values with non-UTF-8 byte sequences must use the BinaryData field. The keys stored in Data must not overlap with the keys in the BinaryData field, this is enforced during validation process.", + "type": "object" + }, + "immutable": { + "description": "Immutable, if set to true, ensures that data stored in the ConfigMap cannot be updated (only object metadata can be modified). If not set to true, the field can be modified at any time. Defaulted to nil.", + "type": "boolean" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta", + "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata" + } + }, + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "", + "kind": "ConfigMap", + "version": "v1" + } + ] + }, + "io.k8s.api.core.v1.ConfigMapEnvSource": { + "description": "ConfigMapEnvSource selects a ConfigMap to populate the environment variables with.\n\nThe contents of the target ConfigMap's Data field will represent the key-value pairs as environment variables.", + "properties": { + "name": { + "description": "Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + "type": "string" + }, + "optional": { + "description": "Specify whether the ConfigMap must be defined", + "type": "boolean" + } + }, + "type": "object" + }, + "io.k8s.api.core.v1.ConfigMapKeySelector": { + "description": "Selects a key from a ConfigMap.", + "properties": { + "key": { + "description": "The key to select.", + "type": "string" + }, + "name": { + "description": "Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + "type": "string" + }, + "optional": { + "description": "Specify whether the ConfigMap or its key must be defined", + "type": "boolean" + } + }, + "required": [ + "key" + ], + "type": "object" + }, + "io.k8s.api.core.v1.ConfigMapList": { + "description": "ConfigMapList is a resource containing a list of ConfigMap objects.", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "items": { + "description": "Items is the list of ConfigMaps.", + "items": { + "$ref": "#/definitions/io.k8s.api.core.v1.ConfigMap" + }, + "type": "array" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta", + "description": "More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata" + } + }, + "required": [ + "items" + ], + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "", + "kind": "ConfigMapList", + "version": "v1" + } + ] + }, + "io.k8s.api.core.v1.ConfigMapNodeConfigSource": { + "description": "ConfigMapNodeConfigSource contains the information to reference a ConfigMap as a config source for the Node.", + "properties": { + "kubeletConfigKey": { + "description": "KubeletConfigKey declares which key of the referenced ConfigMap corresponds to the KubeletConfiguration structure This field is required in all cases.", + "type": "string" + }, + "name": { + "description": "Name is the metadata.name of the referenced ConfigMap. This field is required in all cases.", + "type": "string" + }, + "namespace": { + "description": "Namespace is the metadata.namespace of the referenced ConfigMap. This field is required in all cases.", + "type": "string" + }, + "resourceVersion": { + "description": "ResourceVersion is the metadata.ResourceVersion of the referenced ConfigMap. This field is forbidden in Node.Spec, and required in Node.Status.", + "type": "string" + }, + "uid": { + "description": "UID is the metadata.UID of the referenced ConfigMap. This field is forbidden in Node.Spec, and required in Node.Status.", + "type": "string" + } + }, + "required": [ + "namespace", + "name", + "kubeletConfigKey" + ], + "type": "object" + }, + "io.k8s.api.core.v1.ConfigMapProjection": { + "description": "Adapts a ConfigMap into a projected volume.\n\nThe contents of the target ConfigMap's Data field will be presented in a projected volume as files using the keys in the Data field as the file names, unless the items element is populated with specific mappings of keys to paths. Note that this is identical to a configmap volume source without the default mode.", + "properties": { + "items": { + "description": "If unspecified, each key-value pair in the Data field of the referenced ConfigMap will be projected into the volume as a file whose name is the key and content is the value. If specified, the listed keys will be projected into the specified paths, and unlisted keys will not be present. If a key is specified which is not present in the ConfigMap, the volume setup will error unless it is marked optional. Paths must be relative and may not contain the '..' path or start with '..'.", + "items": { + "$ref": "#/definitions/io.k8s.api.core.v1.KeyToPath" + }, + "type": "array" + }, + "name": { + "description": "Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + "type": "string" + }, + "optional": { + "description": "Specify whether the ConfigMap or its keys must be defined", + "type": "boolean" + } + }, + "type": "object" + }, + "io.k8s.api.core.v1.ConfigMapVolumeSource": { + "description": "Adapts a ConfigMap into a volume.\n\nThe contents of the target ConfigMap's Data field will be presented in a volume as files using the keys in the Data field as the file names, unless the items element is populated with specific mappings of keys to paths. ConfigMap volumes support ownership management and SELinux relabeling.", + "properties": { + "defaultMode": { + "description": "Optional: mode bits used to set permissions on created files by default. Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts both octal and decimal values, JSON requires decimal values for mode bits. Defaults to 0644. Directories within the path are not affected by this setting. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.", + "format": "int32", + "type": "integer" + }, + "items": { + "description": "If unspecified, each key-value pair in the Data field of the referenced ConfigMap will be projected into the volume as a file whose name is the key and content is the value. If specified, the listed keys will be projected into the specified paths, and unlisted keys will not be present. If a key is specified which is not present in the ConfigMap, the volume setup will error unless it is marked optional. Paths must be relative and may not contain the '..' path or start with '..'.", + "items": { + "$ref": "#/definitions/io.k8s.api.core.v1.KeyToPath" + }, + "type": "array" + }, + "name": { + "description": "Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + "type": "string" + }, + "optional": { + "description": "Specify whether the ConfigMap or its keys must be defined", + "type": "boolean" + } + }, + "type": "object" + }, + "io.k8s.api.core.v1.Container": { + "description": "A single application container that you want to run within a pod.", + "properties": { + "args": { + "description": "Arguments to the entrypoint. The docker image's CMD is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container's environment. If a variable cannot be resolved, the reference in the input string will be unchanged. The $(VAR_NAME) syntax can be escaped with a double $$, ie: $$(VAR_NAME). Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell", + "items": { + "type": "string" + }, + "type": "array" + }, + "command": { + "description": "Entrypoint array. Not executed within a shell. The docker image's ENTRYPOINT is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container's environment. If a variable cannot be resolved, the reference in the input string will be unchanged. The $(VAR_NAME) syntax can be escaped with a double $$, ie: $$(VAR_NAME). Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell", + "items": { + "type": "string" + }, + "type": "array" + }, + "env": { + "description": "List of environment variables to set in the container. Cannot be updated.", + "items": { + "$ref": "#/definitions/io.k8s.api.core.v1.EnvVar" + }, + "type": "array", + "x-kubernetes-patch-merge-key": "name", + "x-kubernetes-patch-strategy": "merge" + }, + "envFrom": { + "description": "List of sources to populate environment variables in the container. The keys defined within a source must be a C_IDENTIFIER. All invalid keys will be reported as an event when the container is starting. When a key exists in multiple sources, the value associated with the last source will take precedence. Values defined by an Env with a duplicate key will take precedence. Cannot be updated.", + "items": { + "$ref": "#/definitions/io.k8s.api.core.v1.EnvFromSource" + }, + "type": "array" + }, + "image": { + "description": "Docker image name. More info: https://kubernetes.io/docs/concepts/containers/images This field is optional to allow higher level config management to default or override container images in workload controllers like Deployments and StatefulSets.", + "type": "string" + }, + "imagePullPolicy": { + "description": "Image pull policy. One of Always, Never, IfNotPresent. Defaults to Always if :latest tag is specified, or IfNotPresent otherwise. Cannot be updated. More info: https://kubernetes.io/docs/concepts/containers/images#updating-images", + "type": "string" + }, + "lifecycle": { + "$ref": "#/definitions/io.k8s.api.core.v1.Lifecycle", + "description": "Actions that the management system should take in response to container lifecycle events. Cannot be updated." + }, + "livenessProbe": { + "$ref": "#/definitions/io.k8s.api.core.v1.Probe", + "description": "Periodic probe of container liveness. Container will be restarted if the probe fails. Cannot be updated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes" + }, + "name": { + "description": "Name of the container specified as a DNS_LABEL. Each container in a pod must have a unique name (DNS_LABEL). Cannot be updated.", + "type": "string" + }, + "ports": { + "description": "List of ports to expose from the container. Exposing a port here gives the system additional information about the network connections a container uses, but is primarily informational. Not specifying a port here DOES NOT prevent that port from being exposed. Any port which is listening on the default \"0.0.0.0\" address inside a container will be accessible from the network. Cannot be updated.", + "items": { + "$ref": "#/definitions/io.k8s.api.core.v1.ContainerPort" + }, + "type": "array", + "x-kubernetes-list-map-keys": [ + "containerPort", + "protocol" + ], + "x-kubernetes-list-type": "map", + "x-kubernetes-patch-merge-key": "containerPort", + "x-kubernetes-patch-strategy": "merge" + }, + "readinessProbe": { + "$ref": "#/definitions/io.k8s.api.core.v1.Probe", + "description": "Periodic probe of container service readiness. Container will be removed from service endpoints if the probe fails. Cannot be updated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes" + }, + "resources": { + "$ref": "#/definitions/io.k8s.api.core.v1.ResourceRequirements", + "description": "Compute Resources required by this container. Cannot be updated. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/" + }, + "securityContext": { + "$ref": "#/definitions/io.k8s.api.core.v1.SecurityContext", + "description": "Security options the pod should run with. More info: https://kubernetes.io/docs/concepts/policy/security-context/ More info: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/" + }, + "startupProbe": { + "$ref": "#/definitions/io.k8s.api.core.v1.Probe", + "description": "StartupProbe indicates that the Pod has successfully initialized. If specified, no other probes are executed until this completes successfully. If this probe fails, the Pod will be restarted, just as if the livenessProbe failed. This can be used to provide different probe parameters at the beginning of a Pod's lifecycle, when it might take a long time to load data or warm a cache, than during steady-state operation. This cannot be updated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes" + }, + "stdin": { + "description": "Whether this container should allocate a buffer for stdin in the container runtime. If this is not set, reads from stdin in the container will always result in EOF. Default is false.", + "type": "boolean" + }, + "stdinOnce": { + "description": "Whether the container runtime should close the stdin channel after it has been opened by a single attach. When stdin is true the stdin stream will remain open across multiple attach sessions. If stdinOnce is set to true, stdin is opened on container start, is empty until the first client attaches to stdin, and then remains open and accepts data until the client disconnects, at which time stdin is closed and remains closed until the container is restarted. If this flag is false, a container processes that reads from stdin will never receive an EOF. Default is false", + "type": "boolean" + }, + "terminationMessagePath": { + "description": "Optional: Path at which the file to which the container's termination message will be written is mounted into the container's filesystem. Message written is intended to be brief final status, such as an assertion failure message. Will be truncated by the node if greater than 4096 bytes. The total message length across all containers will be limited to 12kb. Defaults to /dev/termination-log. Cannot be updated.", + "type": "string" + }, + "terminationMessagePolicy": { + "description": "Indicate how the termination message should be populated. File will use the contents of terminationMessagePath to populate the container status message on both success and failure. FallbackToLogsOnError will use the last chunk of container log output if the termination message file is empty and the container exited with an error. The log output is limited to 2048 bytes or 80 lines, whichever is smaller. Defaults to File. Cannot be updated.", + "type": "string" + }, + "tty": { + "description": "Whether this container should allocate a TTY for itself, also requires 'stdin' to be true. Default is false.", + "type": "boolean" + }, + "volumeDevices": { + "description": "volumeDevices is the list of block devices to be used by the container.", + "items": { + "$ref": "#/definitions/io.k8s.api.core.v1.VolumeDevice" + }, + "type": "array", + "x-kubernetes-patch-merge-key": "devicePath", + "x-kubernetes-patch-strategy": "merge" + }, + "volumeMounts": { + "description": "Pod volumes to mount into the container's filesystem. Cannot be updated.", + "items": { + "$ref": "#/definitions/io.k8s.api.core.v1.VolumeMount" + }, + "type": "array", + "x-kubernetes-patch-merge-key": "mountPath", + "x-kubernetes-patch-strategy": "merge" + }, + "workingDir": { + "description": "Container's working directory. If not specified, the container runtime's default will be used, which might be configured in the container image. Cannot be updated.", + "type": "string" + } + }, + "required": [ + "name" + ], + "type": "object" + }, + "io.k8s.api.core.v1.ContainerImage": { + "description": "Describe a container image", + "properties": { + "names": { + "description": "Names by which this image is known. e.g. [\"k8s.gcr.io/hyperkube:v1.0.7\", \"dockerhub.io/google_containers/hyperkube:v1.0.7\"]", + "items": { + "type": "string" + }, + "type": "array" + }, + "sizeBytes": { + "description": "The size of the image in bytes.", + "format": "int64", + "type": "integer" + } + }, + "required": [ + "names" + ], + "type": "object" + }, + "io.k8s.api.core.v1.ContainerPort": { + "description": "ContainerPort represents a network port in a single container.", + "properties": { + "containerPort": { + "description": "Number of port to expose on the pod's IP address. This must be a valid port number, 0 \u003c x \u003c 65536.", + "format": "int32", + "type": "integer" + }, + "hostIP": { + "description": "What host IP to bind the external port to.", + "type": "string" + }, + "hostPort": { + "description": "Number of port to expose on the host. If specified, this must be a valid port number, 0 \u003c x \u003c 65536. If HostNetwork is specified, this must match ContainerPort. Most containers do not need this.", + "format": "int32", + "type": "integer" + }, + "name": { + "description": "If specified, this must be an IANA_SVC_NAME and unique within the pod. Each named port in a pod must have a unique name. Name for the port that can be referred to by services.", + "type": "string" + }, + "protocol": { + "description": "Protocol for port. Must be UDP, TCP, or SCTP. Defaults to \"TCP\".", + "type": "string" + } + }, + "required": [ + "containerPort" + ], + "type": "object" + }, + "io.k8s.api.core.v1.ContainerState": { + "description": "ContainerState holds a possible state of container. Only one of its members may be specified. If none of them is specified, the default one is ContainerStateWaiting.", + "properties": { + "running": { + "$ref": "#/definitions/io.k8s.api.core.v1.ContainerStateRunning", + "description": "Details about a running container" + }, + "terminated": { + "$ref": "#/definitions/io.k8s.api.core.v1.ContainerStateTerminated", + "description": "Details about a terminated container" + }, + "waiting": { + "$ref": "#/definitions/io.k8s.api.core.v1.ContainerStateWaiting", + "description": "Details about a waiting container" + } + }, + "type": "object" + }, + "io.k8s.api.core.v1.ContainerStateRunning": { + "description": "ContainerStateRunning is a running state of a container.", + "properties": { + "startedAt": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time", + "description": "Time at which the container was last (re-)started" + } + }, + "type": "object" + }, + "io.k8s.api.core.v1.ContainerStateTerminated": { + "description": "ContainerStateTerminated is a terminated state of a container.", + "properties": { + "containerID": { + "description": "Container's ID in the format 'docker://\u003ccontainer_id\u003e'", + "type": "string" + }, + "exitCode": { + "description": "Exit status from the last termination of the container", + "format": "int32", + "type": "integer" + }, + "finishedAt": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time", + "description": "Time at which the container last terminated" + }, + "message": { + "description": "Message regarding the last termination of the container", + "type": "string" + }, + "reason": { + "description": "(brief) reason from the last termination of the container", + "type": "string" + }, + "signal": { + "description": "Signal from the last termination of the container", + "format": "int32", + "type": "integer" + }, + "startedAt": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time", + "description": "Time at which previous execution of the container started" + } + }, + "required": [ + "exitCode" + ], + "type": "object" + }, + "io.k8s.api.core.v1.ContainerStateWaiting": { + "description": "ContainerStateWaiting is a waiting state of a container.", + "properties": { + "message": { + "description": "Message regarding why the container is not yet running.", + "type": "string" + }, + "reason": { + "description": "(brief) reason the container is not yet running.", + "type": "string" + } + }, + "type": "object" + }, + "io.k8s.api.core.v1.ContainerStatus": { + "description": "ContainerStatus contains details for the current status of this container.", + "properties": { + "containerID": { + "description": "Container's ID in the format 'docker://\u003ccontainer_id\u003e'.", + "type": "string" + }, + "image": { + "description": "The image the container is running. More info: https://kubernetes.io/docs/concepts/containers/images", + "type": "string" + }, + "imageID": { + "description": "ImageID of the container's image.", + "type": "string" + }, + "lastState": { + "$ref": "#/definitions/io.k8s.api.core.v1.ContainerState", + "description": "Details about the container's last termination condition." + }, + "name": { + "description": "This must be a DNS_LABEL. Each container in a pod must have a unique name. Cannot be updated.", + "type": "string" + }, + "ready": { + "description": "Specifies whether the container has passed its readiness probe.", + "type": "boolean" + }, + "restartCount": { + "description": "The number of times the container has been restarted, currently based on the number of dead containers that have not yet been removed. Note that this is calculated from dead containers. But those containers are subject to garbage collection. This value will get capped at 5 by GC.", + "format": "int32", + "type": "integer" + }, + "started": { + "description": "Specifies whether the container has passed its startup probe. Initialized as false, becomes true after startupProbe is considered successful. Resets to false when the container is restarted, or if kubelet loses state temporarily. Is always true when no startupProbe is defined.", + "type": "boolean" + }, + "state": { + "$ref": "#/definitions/io.k8s.api.core.v1.ContainerState", + "description": "Details about the container's current condition." + } + }, + "required": [ + "name", + "ready", + "restartCount", + "image", + "imageID" + ], + "type": "object" + }, + "io.k8s.api.core.v1.DaemonEndpoint": { + "description": "DaemonEndpoint contains information about a single Daemon endpoint.", + "properties": { + "Port": { + "description": "Port number of the given endpoint.", + "format": "int32", + "type": "integer" + } + }, + "required": [ + "Port" + ], + "type": "object" + }, + "io.k8s.api.core.v1.DownwardAPIProjection": { + "description": "Represents downward API info for projecting into a projected volume. Note that this is identical to a downwardAPI volume source without the default mode.", + "properties": { + "items": { + "description": "Items is a list of DownwardAPIVolume file", + "items": { + "$ref": "#/definitions/io.k8s.api.core.v1.DownwardAPIVolumeFile" + }, + "type": "array" + } + }, + "type": "object" + }, + "io.k8s.api.core.v1.DownwardAPIVolumeFile": { + "description": "DownwardAPIVolumeFile represents information to create the file containing the pod field", + "properties": { + "fieldRef": { + "$ref": "#/definitions/io.k8s.api.core.v1.ObjectFieldSelector", + "description": "Required: Selects a field of the pod: only annotations, labels, name and namespace are supported." + }, + "mode": { + "description": "Optional: mode bits used to set permissions on this file, must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts both octal and decimal values, JSON requires decimal values for mode bits. If not specified, the volume defaultMode will be used. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.", + "format": "int32", + "type": "integer" + }, + "path": { + "description": "Required: Path is the relative path name of the file to be created. Must not be absolute or contain the '..' path. Must be utf-8 encoded. The first item of the relative path must not start with '..'", + "type": "string" + }, + "resourceFieldRef": { + "$ref": "#/definitions/io.k8s.api.core.v1.ResourceFieldSelector", + "description": "Selects a resource of the container: only resources limits and requests (limits.cpu, limits.memory, requests.cpu and requests.memory) are currently supported." + } + }, + "required": [ + "path" + ], + "type": "object" + }, + "io.k8s.api.core.v1.DownwardAPIVolumeSource": { + "description": "DownwardAPIVolumeSource represents a volume containing downward API info. Downward API volumes support ownership management and SELinux relabeling.", + "properties": { + "defaultMode": { + "description": "Optional: mode bits to use on created files by default. Must be a Optional: mode bits used to set permissions on created files by default. Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts both octal and decimal values, JSON requires decimal values for mode bits. Defaults to 0644. Directories within the path are not affected by this setting. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.", + "format": "int32", + "type": "integer" + }, + "items": { + "description": "Items is a list of downward API volume file", + "items": { + "$ref": "#/definitions/io.k8s.api.core.v1.DownwardAPIVolumeFile" + }, + "type": "array" + } + }, + "type": "object" + }, + "io.k8s.api.core.v1.EmptyDirVolumeSource": { + "description": "Represents an empty directory for a pod. Empty directory volumes support ownership management and SELinux relabeling.", + "properties": { + "medium": { + "description": "What type of storage medium should back this directory. The default is \"\" which means to use the node's default medium. Must be an empty string (default) or Memory. More info: https://kubernetes.io/docs/concepts/storage/volumes#emptydir", + "type": "string" + }, + "sizeLimit": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity", + "description": "Total amount of local storage required for this EmptyDir volume. The size limit is also applicable for memory medium. The maximum usage on memory medium EmptyDir would be the minimum value between the SizeLimit specified here and the sum of memory limits of all containers in a pod. The default is nil which means that the limit is undefined. More info: http://kubernetes.io/docs/user-guide/volumes#emptydir" + } + }, + "type": "object" + }, + "io.k8s.api.core.v1.EndpointAddress": { + "description": "EndpointAddress is a tuple that describes single IP address.", + "properties": { + "hostname": { + "description": "The Hostname of this endpoint", + "type": "string" + }, + "ip": { + "description": "The IP of this endpoint. May not be loopback (127.0.0.0/8), link-local (169.254.0.0/16), or link-local multicast ((224.0.0.0/24). IPv6 is also accepted but not fully supported on all platforms. Also, certain kubernetes components, like kube-proxy, are not IPv6 ready.", + "type": "string" + }, + "nodeName": { + "description": "Optional: Node hosting this endpoint. This can be used to determine endpoints local to a node.", + "type": "string" + }, + "targetRef": { + "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference", + "description": "Reference to object providing the endpoint." + } + }, + "required": [ + "ip" + ], + "type": "object" + }, + "io.k8s.api.core.v1.EndpointPort": { + "description": "EndpointPort is a tuple that describes a single port.", + "properties": { + "appProtocol": { + "description": "The application protocol for this port. This field follows standard Kubernetes label syntax. Un-prefixed names are reserved for IANA standard service names (as per RFC-6335 and http://www.iana.org/assignments/service-names). Non-standard protocols should use prefixed names such as mycompany.com/my-custom-protocol. This is a beta field that is guarded by the ServiceAppProtocol feature gate and enabled by default.", + "type": "string" + }, + "name": { + "description": "The name of this port. This must match the 'name' field in the corresponding ServicePort. Must be a DNS_LABEL. Optional only if one port is defined.", + "type": "string" + }, + "port": { + "description": "The port number of the endpoint.", + "format": "int32", + "type": "integer" + }, + "protocol": { + "description": "The IP protocol for this port. Must be UDP, TCP, or SCTP. Default is TCP.", + "type": "string" + } + }, + "required": [ + "port" + ], + "type": "object" + }, + "io.k8s.api.core.v1.EndpointSubset": { + "description": "EndpointSubset is a group of addresses with a common set of ports. The expanded set of endpoints is the Cartesian product of Addresses x Ports. For example, given:\n {\n Addresses: [{\"ip\": \"10.10.1.1\"}, {\"ip\": \"10.10.2.2\"}],\n Ports: [{\"name\": \"a\", \"port\": 8675}, {\"name\": \"b\", \"port\": 309}]\n }\nThe resulting set of endpoints can be viewed as:\n a: [ 10.10.1.1:8675, 10.10.2.2:8675 ],\n b: [ 10.10.1.1:309, 10.10.2.2:309 ]", + "properties": { + "addresses": { + "description": "IP addresses which offer the related ports that are marked as ready. These endpoints should be considered safe for load balancers and clients to utilize.", + "items": { + "$ref": "#/definitions/io.k8s.api.core.v1.EndpointAddress" + }, + "type": "array" + }, + "notReadyAddresses": { + "description": "IP addresses which offer the related ports but are not currently marked as ready because they have not yet finished starting, have recently failed a readiness check, or have recently failed a liveness check.", + "items": { + "$ref": "#/definitions/io.k8s.api.core.v1.EndpointAddress" + }, + "type": "array" + }, + "ports": { + "description": "Port numbers available on the related IP addresses.", + "items": { + "$ref": "#/definitions/io.k8s.api.core.v1.EndpointPort" + }, + "type": "array" + } + }, + "type": "object" + }, + "io.k8s.api.core.v1.Endpoints": { + "description": "Endpoints is a collection of endpoints that implement the actual service. Example:\n Name: \"mysvc\",\n Subsets: [\n {\n Addresses: [{\"ip\": \"10.10.1.1\"}, {\"ip\": \"10.10.2.2\"}],\n Ports: [{\"name\": \"a\", \"port\": 8675}, {\"name\": \"b\", \"port\": 309}]\n },\n {\n Addresses: [{\"ip\": \"10.10.3.3\"}],\n Ports: [{\"name\": \"a\", \"port\": 93}, {\"name\": \"b\", \"port\": 76}]\n },\n ]", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta", + "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata" + }, + "subsets": { + "description": "The set of all endpoints is the union of all subsets. Addresses are placed into subsets according to the IPs they share. A single address with multiple ports, some of which are ready and some of which are not (because they come from different containers) will result in the address being displayed in different subsets for the different ports. No address will appear in both Addresses and NotReadyAddresses in the same subset. Sets of addresses and ports that comprise a service.", + "items": { + "$ref": "#/definitions/io.k8s.api.core.v1.EndpointSubset" + }, + "type": "array" + } + }, + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "", + "kind": "Endpoints", + "version": "v1" + } + ] + }, + "io.k8s.api.core.v1.EndpointsList": { + "description": "EndpointsList is a list of endpoints.", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "items": { + "description": "List of endpoints.", + "items": { + "$ref": "#/definitions/io.k8s.api.core.v1.Endpoints" + }, + "type": "array" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta", + "description": "Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds" + } + }, + "required": [ + "items" + ], + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "", + "kind": "EndpointsList", + "version": "v1" + } + ] + }, + "io.k8s.api.core.v1.EnvFromSource": { + "description": "EnvFromSource represents the source of a set of ConfigMaps", + "properties": { + "configMapRef": { + "$ref": "#/definitions/io.k8s.api.core.v1.ConfigMapEnvSource", + "description": "The ConfigMap to select from" + }, + "prefix": { + "description": "An optional identifier to prepend to each key in the ConfigMap. Must be a C_IDENTIFIER.", + "type": "string" + }, + "secretRef": { + "$ref": "#/definitions/io.k8s.api.core.v1.SecretEnvSource", + "description": "The Secret to select from" + } + }, + "type": "object" + }, + "io.k8s.api.core.v1.EnvVar": { + "description": "EnvVar represents an environment variable present in a Container.", + "properties": { + "name": { + "description": "Name of the environment variable. Must be a C_IDENTIFIER.", + "type": "string" + }, + "value": { + "description": "Variable references $(VAR_NAME) are expanded using the previous defined environment variables in the container and any service environment variables. If a variable cannot be resolved, the reference in the input string will be unchanged. The $(VAR_NAME) syntax can be escaped with a double $$, ie: $$(VAR_NAME). Escaped references will never be expanded, regardless of whether the variable exists or not. Defaults to \"\".", + "type": "string" + }, + "valueFrom": { + "$ref": "#/definitions/io.k8s.api.core.v1.EnvVarSource", + "description": "Source for the environment variable's value. Cannot be used if value is not empty." + } + }, + "required": [ + "name" + ], + "type": "object" + }, + "io.k8s.api.core.v1.EnvVarSource": { + "description": "EnvVarSource represents a source for the value of an EnvVar.", + "properties": { + "configMapKeyRef": { + "$ref": "#/definitions/io.k8s.api.core.v1.ConfigMapKeySelector", + "description": "Selects a key of a ConfigMap." + }, + "fieldRef": { + "$ref": "#/definitions/io.k8s.api.core.v1.ObjectFieldSelector", + "description": "Selects a field of the pod: supports metadata.name, metadata.namespace, `metadata.labels['\u003cKEY\u003e']`, `metadata.annotations['\u003cKEY\u003e']`, spec.nodeName, spec.serviceAccountName, status.hostIP, status.podIP, status.podIPs." + }, + "resourceFieldRef": { + "$ref": "#/definitions/io.k8s.api.core.v1.ResourceFieldSelector", + "description": "Selects a resource of the container: only resources limits and requests (limits.cpu, limits.memory, limits.ephemeral-storage, requests.cpu, requests.memory and requests.ephemeral-storage) are currently supported." + }, + "secretKeyRef": { + "$ref": "#/definitions/io.k8s.api.core.v1.SecretKeySelector", + "description": "Selects a key of a secret in the pod's namespace" + } + }, + "type": "object" + }, + "io.k8s.api.core.v1.EphemeralContainer": { + "description": "An EphemeralContainer is a container that may be added temporarily to an existing pod for user-initiated activities such as debugging. Ephemeral containers have no resource or scheduling guarantees, and they will not be restarted when they exit or when a pod is removed or restarted. If an ephemeral container causes a pod to exceed its resource allocation, the pod may be evicted. Ephemeral containers may not be added by directly updating the pod spec. They must be added via the pod's ephemeralcontainers subresource, and they will appear in the pod spec once added. This is an alpha feature enabled by the EphemeralContainers feature flag.", + "properties": { + "args": { + "description": "Arguments to the entrypoint. The docker image's CMD is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container's environment. If a variable cannot be resolved, the reference in the input string will be unchanged. The $(VAR_NAME) syntax can be escaped with a double $$, ie: $$(VAR_NAME). Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell", + "items": { + "type": "string" + }, + "type": "array" + }, + "command": { + "description": "Entrypoint array. Not executed within a shell. The docker image's ENTRYPOINT is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container's environment. If a variable cannot be resolved, the reference in the input string will be unchanged. The $(VAR_NAME) syntax can be escaped with a double $$, ie: $$(VAR_NAME). Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell", + "items": { + "type": "string" + }, + "type": "array" + }, + "env": { + "description": "List of environment variables to set in the container. Cannot be updated.", + "items": { + "$ref": "#/definitions/io.k8s.api.core.v1.EnvVar" + }, + "type": "array", + "x-kubernetes-patch-merge-key": "name", + "x-kubernetes-patch-strategy": "merge" + }, + "envFrom": { + "description": "List of sources to populate environment variables in the container. The keys defined within a source must be a C_IDENTIFIER. All invalid keys will be reported as an event when the container is starting. When a key exists in multiple sources, the value associated with the last source will take precedence. Values defined by an Env with a duplicate key will take precedence. Cannot be updated.", + "items": { + "$ref": "#/definitions/io.k8s.api.core.v1.EnvFromSource" + }, + "type": "array" + }, + "image": { + "description": "Docker image name. More info: https://kubernetes.io/docs/concepts/containers/images", + "type": "string" + }, + "imagePullPolicy": { + "description": "Image pull policy. One of Always, Never, IfNotPresent. Defaults to Always if :latest tag is specified, or IfNotPresent otherwise. Cannot be updated. More info: https://kubernetes.io/docs/concepts/containers/images#updating-images", + "type": "string" + }, + "lifecycle": { + "$ref": "#/definitions/io.k8s.api.core.v1.Lifecycle", + "description": "Lifecycle is not allowed for ephemeral containers." + }, + "livenessProbe": { + "$ref": "#/definitions/io.k8s.api.core.v1.Probe", + "description": "Probes are not allowed for ephemeral containers." + }, + "name": { + "description": "Name of the ephemeral container specified as a DNS_LABEL. This name must be unique among all containers, init containers and ephemeral containers.", + "type": "string" + }, + "ports": { + "description": "Ports are not allowed for ephemeral containers.", + "items": { + "$ref": "#/definitions/io.k8s.api.core.v1.ContainerPort" + }, + "type": "array" + }, + "readinessProbe": { + "$ref": "#/definitions/io.k8s.api.core.v1.Probe", + "description": "Probes are not allowed for ephemeral containers." + }, + "resources": { + "$ref": "#/definitions/io.k8s.api.core.v1.ResourceRequirements", + "description": "Resources are not allowed for ephemeral containers. Ephemeral containers use spare resources already allocated to the pod." + }, + "securityContext": { + "$ref": "#/definitions/io.k8s.api.core.v1.SecurityContext", + "description": "SecurityContext is not allowed for ephemeral containers." + }, + "startupProbe": { + "$ref": "#/definitions/io.k8s.api.core.v1.Probe", + "description": "Probes are not allowed for ephemeral containers." + }, + "stdin": { + "description": "Whether this container should allocate a buffer for stdin in the container runtime. If this is not set, reads from stdin in the container will always result in EOF. Default is false.", + "type": "boolean" + }, + "stdinOnce": { + "description": "Whether the container runtime should close the stdin channel after it has been opened by a single attach. When stdin is true the stdin stream will remain open across multiple attach sessions. If stdinOnce is set to true, stdin is opened on container start, is empty until the first client attaches to stdin, and then remains open and accepts data until the client disconnects, at which time stdin is closed and remains closed until the container is restarted. If this flag is false, a container processes that reads from stdin will never receive an EOF. Default is false", + "type": "boolean" + }, + "targetContainerName": { + "description": "If set, the name of the container from PodSpec that this ephemeral container targets. The ephemeral container will be run in the namespaces (IPC, PID, etc) of this container. If not set then the ephemeral container is run in whatever namespaces are shared for the pod. Note that the container runtime must support this feature.", + "type": "string" + }, + "terminationMessagePath": { + "description": "Optional: Path at which the file to which the container's termination message will be written is mounted into the container's filesystem. Message written is intended to be brief final status, such as an assertion failure message. Will be truncated by the node if greater than 4096 bytes. The total message length across all containers will be limited to 12kb. Defaults to /dev/termination-log. Cannot be updated.", + "type": "string" + }, + "terminationMessagePolicy": { + "description": "Indicate how the termination message should be populated. File will use the contents of terminationMessagePath to populate the container status message on both success and failure. FallbackToLogsOnError will use the last chunk of container log output if the termination message file is empty and the container exited with an error. The log output is limited to 2048 bytes or 80 lines, whichever is smaller. Defaults to File. Cannot be updated.", + "type": "string" + }, + "tty": { + "description": "Whether this container should allocate a TTY for itself, also requires 'stdin' to be true. Default is false.", + "type": "boolean" + }, + "volumeDevices": { + "description": "volumeDevices is the list of block devices to be used by the container.", + "items": { + "$ref": "#/definitions/io.k8s.api.core.v1.VolumeDevice" + }, + "type": "array", + "x-kubernetes-patch-merge-key": "devicePath", + "x-kubernetes-patch-strategy": "merge" + }, + "volumeMounts": { + "description": "Pod volumes to mount into the container's filesystem. Cannot be updated.", + "items": { + "$ref": "#/definitions/io.k8s.api.core.v1.VolumeMount" + }, + "type": "array", + "x-kubernetes-patch-merge-key": "mountPath", + "x-kubernetes-patch-strategy": "merge" + }, + "workingDir": { + "description": "Container's working directory. If not specified, the container runtime's default will be used, which might be configured in the container image. Cannot be updated.", + "type": "string" + } + }, + "required": [ + "name" + ], + "type": "object" + }, + "io.k8s.api.core.v1.EphemeralVolumeSource": { + "description": "Represents an ephemeral volume that is handled by a normal storage driver.", + "properties": { + "volumeClaimTemplate": { + "$ref": "#/definitions/io.k8s.api.core.v1.PersistentVolumeClaimTemplate", + "description": "Will be used to create a stand-alone PVC to provision the volume. The pod in which this EphemeralVolumeSource is embedded will be the owner of the PVC, i.e. the PVC will be deleted together with the pod. The name of the PVC will be `\u003cpod name\u003e-\u003cvolume name\u003e` where `\u003cvolume name\u003e` is the name from the `PodSpec.Volumes` array entry. Pod validation will reject the pod if the concatenated name is not valid for a PVC (for example, too long).\n\nAn existing PVC with that name that is not owned by the pod will *not* be used for the pod to avoid using an unrelated volume by mistake. Starting the pod is then blocked until the unrelated PVC is removed. If such a pre-created PVC is meant to be used by the pod, the PVC has to updated with an owner reference to the pod once the pod exists. Normally this should not be necessary, but it may be useful when manually reconstructing a broken cluster.\n\nThis field is read-only and no changes will be made by Kubernetes to the PVC after it has been created.\n\nRequired, must not be nil." + } + }, + "type": "object" + }, + "io.k8s.api.core.v1.Event": { + "description": "Event is a report of an event somewhere in the cluster. Events have a limited retention time and triggers and messages may evolve with time. Event consumers should not rely on the timing of an event with a given Reason reflecting a consistent underlying trigger, or the continued existence of events with that Reason. Events should be treated as informative, best-effort, supplemental data.", + "properties": { + "action": { + "description": "What action was taken/failed regarding to the Regarding object.", + "type": "string" + }, + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "count": { + "description": "The number of times this event has occurred.", + "format": "int32", + "type": "integer" + }, + "eventTime": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.MicroTime", + "description": "Time when this Event was first observed." + }, + "firstTimestamp": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time", + "description": "The time at which the event was first recorded. (Time of server receipt is in TypeMeta.)" + }, + "involvedObject": { + "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference", + "description": "The object that this event is about." + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "lastTimestamp": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time", + "description": "The time at which the most recent occurrence of this event was recorded." + }, + "message": { + "description": "A human-readable description of the status of this operation.", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta", + "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata" + }, + "reason": { + "description": "This should be a short, machine understandable string that gives the reason for the transition into the object's current status.", + "type": "string" + }, + "related": { + "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference", + "description": "Optional secondary object for more complex actions." + }, + "reportingComponent": { + "description": "Name of the controller that emitted this Event, e.g. `kubernetes.io/kubelet`.", + "type": "string" + }, + "reportingInstance": { + "description": "ID of the controller instance, e.g. `kubelet-xyzf`.", + "type": "string" + }, + "series": { + "$ref": "#/definitions/io.k8s.api.core.v1.EventSeries", + "description": "Data about the Event series this event represents or nil if it's a singleton Event." + }, + "source": { + "$ref": "#/definitions/io.k8s.api.core.v1.EventSource", + "description": "The component reporting this event. Should be a short machine understandable string." + }, + "type": { + "description": "Type of this event (Normal, Warning), new types could be added in the future", + "type": "string" + } + }, + "required": [ + "metadata", + "involvedObject" + ], + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "", + "kind": "Event", + "version": "v1" + } + ] + }, + "io.k8s.api.core.v1.EventList": { + "description": "EventList is a list of events.", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "items": { + "description": "List of events", + "items": { + "$ref": "#/definitions/io.k8s.api.core.v1.Event" + }, + "type": "array" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta", + "description": "Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds" + } + }, + "required": [ + "items" + ], + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "", + "kind": "EventList", + "version": "v1" + } + ] + }, + "io.k8s.api.core.v1.EventSeries": { + "description": "EventSeries contain information on series of events, i.e. thing that was/is happening continuously for some time.", + "properties": { + "count": { + "description": "Number of occurrences in this series up to the last heartbeat time", + "format": "int32", + "type": "integer" + }, + "lastObservedTime": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.MicroTime", + "description": "Time of the last occurrence observed" + } + }, + "type": "object" + }, + "io.k8s.api.core.v1.EventSource": { + "description": "EventSource contains information for an event.", + "properties": { + "component": { + "description": "Component from which the event is generated.", + "type": "string" + }, + "host": { + "description": "Node name on which the event is generated.", + "type": "string" + } + }, + "type": "object" + }, + "io.k8s.api.core.v1.ExecAction": { + "description": "ExecAction describes a \"run in container\" action.", + "properties": { + "command": { + "description": "Command is the command line to execute inside the container, the working directory for the command is root ('/') in the container's filesystem. The command is simply exec'd, it is not run inside a shell, so traditional shell instructions ('|', etc) won't work. To use a shell, you need to explicitly call out to that shell. Exit status of 0 is treated as live/healthy and non-zero is unhealthy.", + "items": { + "type": "string" + }, + "type": "array" + } + }, + "type": "object" + }, + "io.k8s.api.core.v1.FCVolumeSource": { + "description": "Represents a Fibre Channel volume. Fibre Channel volumes can only be mounted as read/write once. Fibre Channel volumes support ownership management and SELinux relabeling.", + "properties": { + "fsType": { + "description": "Filesystem type to mount. Must be a filesystem type supported by the host operating system. Ex. \"ext4\", \"xfs\", \"ntfs\". Implicitly inferred to be \"ext4\" if unspecified.", + "type": "string" + }, + "lun": { + "description": "Optional: FC target lun number", + "format": "int32", + "type": "integer" + }, + "readOnly": { + "description": "Optional: Defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts.", + "type": "boolean" + }, + "targetWWNs": { + "description": "Optional: FC target worldwide names (WWNs)", + "items": { + "type": "string" + }, + "type": "array" + }, + "wwids": { + "description": "Optional: FC volume world wide identifiers (wwids) Either wwids or combination of targetWWNs and lun must be set, but not both simultaneously.", + "items": { + "type": "string" + }, + "type": "array" + } + }, + "type": "object" + }, + "io.k8s.api.core.v1.FlexPersistentVolumeSource": { + "description": "FlexPersistentVolumeSource represents a generic persistent volume resource that is provisioned/attached using an exec based plugin.", + "properties": { + "driver": { + "description": "Driver is the name of the driver to use for this volume.", + "type": "string" + }, + "fsType": { + "description": "Filesystem type to mount. Must be a filesystem type supported by the host operating system. Ex. \"ext4\", \"xfs\", \"ntfs\". The default filesystem depends on FlexVolume script.", + "type": "string" + }, + "options": { + "additionalProperties": { + "type": "string" + }, + "description": "Optional: Extra command options if any.", + "type": "object" + }, + "readOnly": { + "description": "Optional: Defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts.", + "type": "boolean" + }, + "secretRef": { + "$ref": "#/definitions/io.k8s.api.core.v1.SecretReference", + "description": "Optional: SecretRef is reference to the secret object containing sensitive information to pass to the plugin scripts. This may be empty if no secret object is specified. If the secret object contains more than one secret, all secrets are passed to the plugin scripts." + } + }, + "required": [ + "driver" + ], + "type": "object" + }, + "io.k8s.api.core.v1.FlexVolumeSource": { + "description": "FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin.", + "properties": { + "driver": { + "description": "Driver is the name of the driver to use for this volume.", + "type": "string" + }, + "fsType": { + "description": "Filesystem type to mount. Must be a filesystem type supported by the host operating system. Ex. \"ext4\", \"xfs\", \"ntfs\". The default filesystem depends on FlexVolume script.", + "type": "string" + }, + "options": { + "additionalProperties": { + "type": "string" + }, + "description": "Optional: Extra command options if any.", + "type": "object" + }, + "readOnly": { + "description": "Optional: Defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts.", + "type": "boolean" + }, + "secretRef": { + "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference", + "description": "Optional: SecretRef is reference to the secret object containing sensitive information to pass to the plugin scripts. This may be empty if no secret object is specified. If the secret object contains more than one secret, all secrets are passed to the plugin scripts." + } + }, + "required": [ + "driver" + ], + "type": "object" + }, + "io.k8s.api.core.v1.FlockerVolumeSource": { + "description": "Represents a Flocker volume mounted by the Flocker agent. One and only one of datasetName and datasetUUID should be set. Flocker volumes do not support ownership management or SELinux relabeling.", + "properties": { + "datasetName": { + "description": "Name of the dataset stored as metadata -\u003e name on the dataset for Flocker should be considered as deprecated", + "type": "string" + }, + "datasetUUID": { + "description": "UUID of the dataset. This is unique identifier of a Flocker dataset", + "type": "string" + } + }, + "type": "object" + }, + "io.k8s.api.core.v1.GCEPersistentDiskVolumeSource": { + "description": "Represents a Persistent Disk resource in Google Compute Engine.\n\nA GCE PD must exist before mounting to a container. The disk must also be in the same GCE project and zone as the kubelet. A GCE PD can only be mounted as read/write once or read-only many times. GCE PDs support ownership management and SELinux relabeling.", + "properties": { + "fsType": { + "description": "Filesystem type of the volume that you want to mount. Tip: Ensure that the filesystem type is supported by the host operating system. Examples: \"ext4\", \"xfs\", \"ntfs\". Implicitly inferred to be \"ext4\" if unspecified. More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk", + "type": "string" + }, + "partition": { + "description": "The partition in the volume that you want to mount. If omitted, the default is to mount by volume name. Examples: For volume /dev/sda1, you specify the partition as \"1\". Similarly, the volume partition for /dev/sda is \"0\" (or you can leave the property empty). More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk", + "format": "int32", + "type": "integer" + }, + "pdName": { + "description": "Unique name of the PD resource in GCE. Used to identify the disk in GCE. More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk", + "type": "string" + }, + "readOnly": { + "description": "ReadOnly here will force the ReadOnly setting in VolumeMounts. Defaults to false. More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk", + "type": "boolean" + } + }, + "required": [ + "pdName" + ], + "type": "object" + }, + "io.k8s.api.core.v1.GitRepoVolumeSource": { + "description": "Represents a volume that is populated with the contents of a git repository. Git repo volumes do not support ownership management. Git repo volumes support SELinux relabeling.\n\nDEPRECATED: GitRepo is deprecated. To provision a container with a git repo, mount an EmptyDir into an InitContainer that clones the repo using git, then mount the EmptyDir into the Pod's container.", + "properties": { + "directory": { + "description": "Target directory name. Must not contain or start with '..'. If '.' is supplied, the volume directory will be the git repository. Otherwise, if specified, the volume will contain the git repository in the subdirectory with the given name.", + "type": "string" + }, + "repository": { + "description": "Repository URL", + "type": "string" + }, + "revision": { + "description": "Commit hash for the specified revision.", + "type": "string" + } + }, + "required": [ + "repository" + ], + "type": "object" + }, + "io.k8s.api.core.v1.GlusterfsPersistentVolumeSource": { + "description": "Represents a Glusterfs mount that lasts the lifetime of a pod. Glusterfs volumes do not support ownership management or SELinux relabeling.", + "properties": { + "endpoints": { + "description": "EndpointsName is the endpoint name that details Glusterfs topology. More info: https://examples.k8s.io/volumes/glusterfs/README.md#create-a-pod", + "type": "string" + }, + "endpointsNamespace": { + "description": "EndpointsNamespace is the namespace that contains Glusterfs endpoint. If this field is empty, the EndpointNamespace defaults to the same namespace as the bound PVC. More info: https://examples.k8s.io/volumes/glusterfs/README.md#create-a-pod", + "type": "string" + }, + "path": { + "description": "Path is the Glusterfs volume path. More info: https://examples.k8s.io/volumes/glusterfs/README.md#create-a-pod", + "type": "string" + }, + "readOnly": { + "description": "ReadOnly here will force the Glusterfs volume to be mounted with read-only permissions. Defaults to false. More info: https://examples.k8s.io/volumes/glusterfs/README.md#create-a-pod", + "type": "boolean" + } + }, + "required": [ + "endpoints", + "path" + ], + "type": "object" + }, + "io.k8s.api.core.v1.GlusterfsVolumeSource": { + "description": "Represents a Glusterfs mount that lasts the lifetime of a pod. Glusterfs volumes do not support ownership management or SELinux relabeling.", + "properties": { + "endpoints": { + "description": "EndpointsName is the endpoint name that details Glusterfs topology. More info: https://examples.k8s.io/volumes/glusterfs/README.md#create-a-pod", + "type": "string" + }, + "path": { + "description": "Path is the Glusterfs volume path. More info: https://examples.k8s.io/volumes/glusterfs/README.md#create-a-pod", + "type": "string" + }, + "readOnly": { + "description": "ReadOnly here will force the Glusterfs volume to be mounted with read-only permissions. Defaults to false. More info: https://examples.k8s.io/volumes/glusterfs/README.md#create-a-pod", + "type": "boolean" + } + }, + "required": [ + "endpoints", + "path" + ], + "type": "object" + }, + "io.k8s.api.core.v1.HTTPGetAction": { + "description": "HTTPGetAction describes an action based on HTTP Get requests.", + "properties": { + "host": { + "description": "Host name to connect to, defaults to the pod IP. You probably want to set \"Host\" in httpHeaders instead.", + "type": "string" + }, + "httpHeaders": { + "description": "Custom headers to set in the request. HTTP allows repeated headers.", + "items": { + "$ref": "#/definitions/io.k8s.api.core.v1.HTTPHeader" + }, + "type": "array" + }, + "path": { + "description": "Path to access on the HTTP server.", + "type": "string" + }, + "port": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.util.intstr.IntOrString", + "description": "Name or number of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME." + }, + "scheme": { + "description": "Scheme to use for connecting to the host. Defaults to HTTP.", + "type": "string" + } + }, + "required": [ + "port" + ], + "type": "object" + }, + "io.k8s.api.core.v1.HTTPHeader": { + "description": "HTTPHeader describes a custom header to be used in HTTP probes", + "properties": { + "name": { + "description": "The header field name", + "type": "string" + }, + "value": { + "description": "The header field value", + "type": "string" + } + }, + "required": [ + "name", + "value" + ], + "type": "object" + }, + "io.k8s.api.core.v1.Handler": { + "description": "Handler defines a specific action that should be taken", + "properties": { + "exec": { + "$ref": "#/definitions/io.k8s.api.core.v1.ExecAction", + "description": "One and only one of the following should be specified. Exec specifies the action to take." + }, + "httpGet": { + "$ref": "#/definitions/io.k8s.api.core.v1.HTTPGetAction", + "description": "HTTPGet specifies the http request to perform." + }, + "tcpSocket": { + "$ref": "#/definitions/io.k8s.api.core.v1.TCPSocketAction", + "description": "TCPSocket specifies an action involving a TCP port. TCP hooks not yet supported" + } + }, + "type": "object" + }, + "io.k8s.api.core.v1.HostAlias": { + "description": "HostAlias holds the mapping between IP and hostnames that will be injected as an entry in the pod's hosts file.", + "properties": { + "hostnames": { + "description": "Hostnames for the above IP address.", + "items": { + "type": "string" + }, + "type": "array" + }, + "ip": { + "description": "IP address of the host file entry.", + "type": "string" + } + }, + "type": "object" + }, + "io.k8s.api.core.v1.HostPathVolumeSource": { + "description": "Represents a host path mapped into a pod. Host path volumes do not support ownership management or SELinux relabeling.", + "properties": { + "path": { + "description": "Path of the directory on the host. If the path is a symlink, it will follow the link to the real path. More info: https://kubernetes.io/docs/concepts/storage/volumes#hostpath", + "type": "string" + }, + "type": { + "description": "Type for HostPath Volume Defaults to \"\" More info: https://kubernetes.io/docs/concepts/storage/volumes#hostpath", + "type": "string" + } + }, + "required": [ + "path" + ], + "type": "object" + }, + "io.k8s.api.core.v1.ISCSIPersistentVolumeSource": { + "description": "ISCSIPersistentVolumeSource represents an ISCSI disk. ISCSI volumes can only be mounted as read/write once. ISCSI volumes support ownership management and SELinux relabeling.", + "properties": { + "chapAuthDiscovery": { + "description": "whether support iSCSI Discovery CHAP authentication", + "type": "boolean" + }, + "chapAuthSession": { + "description": "whether support iSCSI Session CHAP authentication", + "type": "boolean" + }, + "fsType": { + "description": "Filesystem type of the volume that you want to mount. Tip: Ensure that the filesystem type is supported by the host operating system. Examples: \"ext4\", \"xfs\", \"ntfs\". Implicitly inferred to be \"ext4\" if unspecified. More info: https://kubernetes.io/docs/concepts/storage/volumes#iscsi", + "type": "string" + }, + "initiatorName": { + "description": "Custom iSCSI Initiator Name. If initiatorName is specified with iscsiInterface simultaneously, new iSCSI interface \u003ctarget portal\u003e:\u003cvolume name\u003e will be created for the connection.", + "type": "string" + }, + "iqn": { + "description": "Target iSCSI Qualified Name.", + "type": "string" + }, + "iscsiInterface": { + "description": "iSCSI Interface Name that uses an iSCSI transport. Defaults to 'default' (tcp).", + "type": "string" + }, + "lun": { + "description": "iSCSI Target Lun number.", + "format": "int32", + "type": "integer" + }, + "portals": { + "description": "iSCSI Target Portal List. The Portal is either an IP or ip_addr:port if the port is other than default (typically TCP ports 860 and 3260).", + "items": { + "type": "string" + }, + "type": "array" + }, + "readOnly": { + "description": "ReadOnly here will force the ReadOnly setting in VolumeMounts. Defaults to false.", + "type": "boolean" + }, + "secretRef": { + "$ref": "#/definitions/io.k8s.api.core.v1.SecretReference", + "description": "CHAP Secret for iSCSI target and initiator authentication" + }, + "targetPortal": { + "description": "iSCSI Target Portal. The Portal is either an IP or ip_addr:port if the port is other than default (typically TCP ports 860 and 3260).", + "type": "string" + } + }, + "required": [ + "targetPortal", + "iqn", + "lun" + ], + "type": "object" + }, + "io.k8s.api.core.v1.ISCSIVolumeSource": { + "description": "Represents an ISCSI disk. ISCSI volumes can only be mounted as read/write once. ISCSI volumes support ownership management and SELinux relabeling.", + "properties": { + "chapAuthDiscovery": { + "description": "whether support iSCSI Discovery CHAP authentication", + "type": "boolean" + }, + "chapAuthSession": { + "description": "whether support iSCSI Session CHAP authentication", + "type": "boolean" + }, + "fsType": { + "description": "Filesystem type of the volume that you want to mount. Tip: Ensure that the filesystem type is supported by the host operating system. Examples: \"ext4\", \"xfs\", \"ntfs\". Implicitly inferred to be \"ext4\" if unspecified. More info: https://kubernetes.io/docs/concepts/storage/volumes#iscsi", + "type": "string" + }, + "initiatorName": { + "description": "Custom iSCSI Initiator Name. If initiatorName is specified with iscsiInterface simultaneously, new iSCSI interface \u003ctarget portal\u003e:\u003cvolume name\u003e will be created for the connection.", + "type": "string" + }, + "iqn": { + "description": "Target iSCSI Qualified Name.", + "type": "string" + }, + "iscsiInterface": { + "description": "iSCSI Interface Name that uses an iSCSI transport. Defaults to 'default' (tcp).", + "type": "string" + }, + "lun": { + "description": "iSCSI Target Lun number.", + "format": "int32", + "type": "integer" + }, + "portals": { + "description": "iSCSI Target Portal List. The portal is either an IP or ip_addr:port if the port is other than default (typically TCP ports 860 and 3260).", + "items": { + "type": "string" + }, + "type": "array" + }, + "readOnly": { + "description": "ReadOnly here will force the ReadOnly setting in VolumeMounts. Defaults to false.", + "type": "boolean" + }, + "secretRef": { + "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference", + "description": "CHAP Secret for iSCSI target and initiator authentication" + }, + "targetPortal": { + "description": "iSCSI Target Portal. The Portal is either an IP or ip_addr:port if the port is other than default (typically TCP ports 860 and 3260).", + "type": "string" + } + }, + "required": [ + "targetPortal", + "iqn", + "lun" + ], + "type": "object" + }, + "io.k8s.api.core.v1.KeyToPath": { + "description": "Maps a string key to a path within a volume.", + "properties": { + "key": { + "description": "The key to project.", + "type": "string" + }, + "mode": { + "description": "Optional: mode bits used to set permissions on this file. Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts both octal and decimal values, JSON requires decimal values for mode bits. If not specified, the volume defaultMode will be used. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.", + "format": "int32", + "type": "integer" + }, + "path": { + "description": "The relative path of the file to map the key to. May not be an absolute path. May not contain the path element '..'. May not start with the string '..'.", + "type": "string" + } + }, + "required": [ + "key", + "path" + ], + "type": "object" + }, + "io.k8s.api.core.v1.Lifecycle": { + "description": "Lifecycle describes actions that the management system should take in response to container lifecycle events. For the PostStart and PreStop lifecycle handlers, management of the container blocks until the action is complete, unless the container process fails, in which case the handler is aborted.", + "properties": { + "postStart": { + "$ref": "#/definitions/io.k8s.api.core.v1.Handler", + "description": "PostStart is called immediately after a container is created. If the handler fails, the container is terminated and restarted according to its restart policy. Other management of the container blocks until the hook completes. More info: https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks" + }, + "preStop": { + "$ref": "#/definitions/io.k8s.api.core.v1.Handler", + "description": "PreStop is called immediately before a container is terminated due to an API request or management event such as liveness/startup probe failure, preemption, resource contention, etc. The handler is not called if the container crashes or exits. The reason for termination is passed to the handler. The Pod's termination grace period countdown begins before the PreStop hooked is executed. Regardless of the outcome of the handler, the container will eventually terminate within the Pod's termination grace period. Other management of the container blocks until the hook completes or until the termination grace period is reached. More info: https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks" + } + }, + "type": "object" + }, + "io.k8s.api.core.v1.LimitRange": { + "description": "LimitRange sets resource usage limits for each kind of resource in a Namespace.", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta", + "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata" + }, + "spec": { + "$ref": "#/definitions/io.k8s.api.core.v1.LimitRangeSpec", + "description": "Spec defines the limits enforced. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status" + } + }, + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "", + "kind": "LimitRange", + "version": "v1" + } + ] + }, + "io.k8s.api.core.v1.LimitRangeItem": { + "description": "LimitRangeItem defines a min/max usage limit for any resource that matches on kind.", + "properties": { + "default": { + "additionalProperties": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity" + }, + "description": "Default resource requirement limit value by resource name if resource limit is omitted.", + "type": "object" + }, + "defaultRequest": { + "additionalProperties": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity" + }, + "description": "DefaultRequest is the default resource requirement request value by resource name if resource request is omitted.", + "type": "object" + }, + "max": { + "additionalProperties": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity" + }, + "description": "Max usage constraints on this kind by resource name.", + "type": "object" + }, + "maxLimitRequestRatio": { + "additionalProperties": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity" + }, + "description": "MaxLimitRequestRatio if specified, the named resource must have a request and limit that are both non-zero where limit divided by request is less than or equal to the enumerated value; this represents the max burst for the named resource.", + "type": "object" + }, + "min": { + "additionalProperties": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity" + }, + "description": "Min usage constraints on this kind by resource name.", + "type": "object" + }, + "type": { + "description": "Type of resource that this limit applies to.", + "type": "string" + } + }, + "required": [ + "type" + ], + "type": "object" + }, + "io.k8s.api.core.v1.LimitRangeList": { + "description": "LimitRangeList is a list of LimitRange items.", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "items": { + "description": "Items is a list of LimitRange objects. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/", + "items": { + "$ref": "#/definitions/io.k8s.api.core.v1.LimitRange" + }, + "type": "array" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta", + "description": "Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds" + } + }, + "required": [ + "items" + ], + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "", + "kind": "LimitRangeList", + "version": "v1" + } + ] + }, + "io.k8s.api.core.v1.LimitRangeSpec": { + "description": "LimitRangeSpec defines a min/max usage limit for resources that match on kind.", + "properties": { + "limits": { + "description": "Limits is the list of LimitRangeItem objects that are enforced.", + "items": { + "$ref": "#/definitions/io.k8s.api.core.v1.LimitRangeItem" + }, + "type": "array" + } + }, + "required": [ + "limits" + ], + "type": "object" + }, + "io.k8s.api.core.v1.LoadBalancerIngress": { + "description": "LoadBalancerIngress represents the status of a load-balancer ingress point: traffic intended for the service should be sent to an ingress point.", + "properties": { + "hostname": { + "description": "Hostname is set for load-balancer ingress points that are DNS based (typically AWS load-balancers)", + "type": "string" + }, + "ip": { + "description": "IP is set for load-balancer ingress points that are IP based (typically GCE or OpenStack load-balancers)", + "type": "string" + }, + "ports": { + "description": "Ports is a list of records of service ports If used, every port defined in the service should have an entry in it", + "items": { + "$ref": "#/definitions/io.k8s.api.core.v1.PortStatus" + }, + "type": "array", + "x-kubernetes-list-type": "atomic" + } + }, + "type": "object" + }, + "io.k8s.api.core.v1.LoadBalancerStatus": { + "description": "LoadBalancerStatus represents the status of a load-balancer.", + "properties": { + "ingress": { + "description": "Ingress is a list containing ingress points for the load-balancer. Traffic intended for the service should be sent to these ingress points.", + "items": { + "$ref": "#/definitions/io.k8s.api.core.v1.LoadBalancerIngress" + }, + "type": "array" + } + }, + "type": "object" + }, + "io.k8s.api.core.v1.LocalObjectReference": { + "description": "LocalObjectReference contains enough information to let you locate the referenced object inside the same namespace.", + "properties": { + "name": { + "description": "Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + "type": "string" + } + }, + "type": "object" + }, + "io.k8s.api.core.v1.LocalVolumeSource": { + "description": "Local represents directly-attached storage with node affinity (Beta feature)", + "properties": { + "fsType": { + "description": "Filesystem type to mount. It applies only when the Path is a block device. Must be a filesystem type supported by the host operating system. Ex. \"ext4\", \"xfs\", \"ntfs\". The default value is to auto-select a fileystem if unspecified.", + "type": "string" + }, + "path": { + "description": "The full path to the volume on the node. It can be either a directory or block device (disk, partition, ...).", + "type": "string" + } + }, + "required": [ + "path" + ], + "type": "object" + }, + "io.k8s.api.core.v1.NFSVolumeSource": { + "description": "Represents an NFS mount that lasts the lifetime of a pod. NFS volumes do not support ownership management or SELinux relabeling.", + "properties": { + "path": { + "description": "Path that is exported by the NFS server. More info: https://kubernetes.io/docs/concepts/storage/volumes#nfs", + "type": "string" + }, + "readOnly": { + "description": "ReadOnly here will force the NFS export to be mounted with read-only permissions. Defaults to false. More info: https://kubernetes.io/docs/concepts/storage/volumes#nfs", + "type": "boolean" + }, + "server": { + "description": "Server is the hostname or IP address of the NFS server. More info: https://kubernetes.io/docs/concepts/storage/volumes#nfs", + "type": "string" + } + }, + "required": [ + "server", + "path" + ], + "type": "object" + }, + "io.k8s.api.core.v1.Namespace": { + "description": "Namespace provides a scope for Names. Use of multiple namespaces is optional.", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta", + "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata" + }, + "spec": { + "$ref": "#/definitions/io.k8s.api.core.v1.NamespaceSpec", + "description": "Spec defines the behavior of the Namespace. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status" + }, + "status": { + "$ref": "#/definitions/io.k8s.api.core.v1.NamespaceStatus", + "description": "Status describes the current status of a Namespace. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status" + } + }, + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "", + "kind": "Namespace", + "version": "v1" + } + ] + }, + "io.k8s.api.core.v1.NamespaceCondition": { + "description": "NamespaceCondition contains details about state of namespace.", + "properties": { + "lastTransitionTime": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" + }, + "message": { + "type": "string" + }, + "reason": { + "type": "string" + }, + "status": { + "description": "Status of the condition, one of True, False, Unknown.", + "type": "string" + }, + "type": { + "description": "Type of namespace controller condition.", + "type": "string" + } + }, + "required": [ + "type", + "status" + ], + "type": "object" + }, + "io.k8s.api.core.v1.NamespaceList": { + "description": "NamespaceList is a list of Namespaces.", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "items": { + "description": "Items is the list of Namespace objects in the list. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/", + "items": { + "$ref": "#/definitions/io.k8s.api.core.v1.Namespace" + }, + "type": "array" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta", + "description": "Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds" + } + }, + "required": [ + "items" + ], + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "", + "kind": "NamespaceList", + "version": "v1" + } + ] + }, + "io.k8s.api.core.v1.NamespaceSpec": { + "description": "NamespaceSpec describes the attributes on a Namespace.", + "properties": { + "finalizers": { + "description": "Finalizers is an opaque list of values that must be empty to permanently remove object from storage. More info: https://kubernetes.io/docs/tasks/administer-cluster/namespaces/", + "items": { + "type": "string" + }, + "type": "array" + } + }, + "type": "object" + }, + "io.k8s.api.core.v1.NamespaceStatus": { + "description": "NamespaceStatus is information about the current status of a Namespace.", + "properties": { + "conditions": { + "description": "Represents the latest available observations of a namespace's current state.", + "items": { + "$ref": "#/definitions/io.k8s.api.core.v1.NamespaceCondition" + }, + "type": "array", + "x-kubernetes-patch-merge-key": "type", + "x-kubernetes-patch-strategy": "merge" + }, + "phase": { + "description": "Phase is the current lifecycle phase of the namespace. More info: https://kubernetes.io/docs/tasks/administer-cluster/namespaces/", + "type": "string" + } + }, + "type": "object" + }, + "io.k8s.api.core.v1.Node": { + "description": "Node is a worker node in Kubernetes. Each node will have a unique identifier in the cache (i.e. in etcd).", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta", + "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata" + }, + "spec": { + "$ref": "#/definitions/io.k8s.api.core.v1.NodeSpec", + "description": "Spec defines the behavior of a node. https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status" + }, + "status": { + "$ref": "#/definitions/io.k8s.api.core.v1.NodeStatus", + "description": "Most recently observed status of the node. Populated by the system. Read-only. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status" + } + }, + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "", + "kind": "Node", + "version": "v1" + } + ] + }, + "io.k8s.api.core.v1.NodeAddress": { + "description": "NodeAddress contains information for the node's address.", + "properties": { + "address": { + "description": "The node address.", + "type": "string" + }, + "type": { + "description": "Node address type, one of Hostname, ExternalIP or InternalIP.", + "type": "string" + } + }, + "required": [ + "type", + "address" + ], + "type": "object" + }, + "io.k8s.api.core.v1.NodeAffinity": { + "description": "Node affinity is a group of node affinity scheduling rules.", + "properties": { + "preferredDuringSchedulingIgnoredDuringExecution": { + "description": "The scheduler will prefer to schedule pods to nodes that satisfy the affinity expressions specified by this field, but it may choose a node that violates one or more of the expressions. The node that is most preferred is the one with the greatest sum of weights, i.e. for each node that meets all of the scheduling requirements (resource request, requiredDuringScheduling affinity expressions, etc.), compute a sum by iterating through the elements of this field and adding \"weight\" to the sum if the node matches the corresponding matchExpressions; the node(s) with the highest sum are the most preferred.", + "items": { + "$ref": "#/definitions/io.k8s.api.core.v1.PreferredSchedulingTerm" + }, + "type": "array" + }, + "requiredDuringSchedulingIgnoredDuringExecution": { + "$ref": "#/definitions/io.k8s.api.core.v1.NodeSelector", + "description": "If the affinity requirements specified by this field are not met at scheduling time, the pod will not be scheduled onto the node. If the affinity requirements specified by this field cease to be met at some point during pod execution (e.g. due to an update), the system may or may not try to eventually evict the pod from its node." + } + }, + "type": "object" + }, + "io.k8s.api.core.v1.NodeCondition": { + "description": "NodeCondition contains condition information for a node.", + "properties": { + "lastHeartbeatTime": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time", + "description": "Last time we got an update on a given condition." + }, + "lastTransitionTime": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time", + "description": "Last time the condition transit from one status to another." + }, + "message": { + "description": "Human readable message indicating details about last transition.", + "type": "string" + }, + "reason": { + "description": "(brief) reason for the condition's last transition.", + "type": "string" + }, + "status": { + "description": "Status of the condition, one of True, False, Unknown.", + "type": "string" + }, + "type": { + "description": "Type of node condition.", + "type": "string" + } + }, + "required": [ + "type", + "status" + ], + "type": "object" + }, + "io.k8s.api.core.v1.NodeConfigSource": { + "description": "NodeConfigSource specifies a source of node configuration. Exactly one subfield (excluding metadata) must be non-nil.", + "properties": { + "configMap": { + "$ref": "#/definitions/io.k8s.api.core.v1.ConfigMapNodeConfigSource", + "description": "ConfigMap is a reference to a Node's ConfigMap" + } + }, + "type": "object" + }, + "io.k8s.api.core.v1.NodeConfigStatus": { + "description": "NodeConfigStatus describes the status of the config assigned by Node.Spec.ConfigSource.", + "properties": { + "active": { + "$ref": "#/definitions/io.k8s.api.core.v1.NodeConfigSource", + "description": "Active reports the checkpointed config the node is actively using. Active will represent either the current version of the Assigned config, or the current LastKnownGood config, depending on whether attempting to use the Assigned config results in an error." + }, + "assigned": { + "$ref": "#/definitions/io.k8s.api.core.v1.NodeConfigSource", + "description": "Assigned reports the checkpointed config the node will try to use. When Node.Spec.ConfigSource is updated, the node checkpoints the associated config payload to local disk, along with a record indicating intended config. The node refers to this record to choose its config checkpoint, and reports this record in Assigned. Assigned only updates in the status after the record has been checkpointed to disk. When the Kubelet is restarted, it tries to make the Assigned config the Active config by loading and validating the checkpointed payload identified by Assigned." + }, + "error": { + "description": "Error describes any problems reconciling the Spec.ConfigSource to the Active config. Errors may occur, for example, attempting to checkpoint Spec.ConfigSource to the local Assigned record, attempting to checkpoint the payload associated with Spec.ConfigSource, attempting to load or validate the Assigned config, etc. Errors may occur at different points while syncing config. Earlier errors (e.g. download or checkpointing errors) will not result in a rollback to LastKnownGood, and may resolve across Kubelet retries. Later errors (e.g. loading or validating a checkpointed config) will result in a rollback to LastKnownGood. In the latter case, it is usually possible to resolve the error by fixing the config assigned in Spec.ConfigSource. You can find additional information for debugging by searching the error message in the Kubelet log. Error is a human-readable description of the error state; machines can check whether or not Error is empty, but should not rely on the stability of the Error text across Kubelet versions.", + "type": "string" + }, + "lastKnownGood": { + "$ref": "#/definitions/io.k8s.api.core.v1.NodeConfigSource", + "description": "LastKnownGood reports the checkpointed config the node will fall back to when it encounters an error attempting to use the Assigned config. The Assigned config becomes the LastKnownGood config when the node determines that the Assigned config is stable and correct. This is currently implemented as a 10-minute soak period starting when the local record of Assigned config is updated. If the Assigned config is Active at the end of this period, it becomes the LastKnownGood. Note that if Spec.ConfigSource is reset to nil (use local defaults), the LastKnownGood is also immediately reset to nil, because the local default config is always assumed good. You should not make assumptions about the node's method of determining config stability and correctness, as this may change or become configurable in the future." + } + }, + "type": "object" + }, + "io.k8s.api.core.v1.NodeDaemonEndpoints": { + "description": "NodeDaemonEndpoints lists ports opened by daemons running on the Node.", + "properties": { + "kubeletEndpoint": { + "$ref": "#/definitions/io.k8s.api.core.v1.DaemonEndpoint", + "description": "Endpoint on which Kubelet is listening." + } + }, + "type": "object" + }, + "io.k8s.api.core.v1.NodeList": { + "description": "NodeList is the whole list of all Nodes which have been registered with master.", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "items": { + "description": "List of nodes", + "items": { + "$ref": "#/definitions/io.k8s.api.core.v1.Node" + }, + "type": "array" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta", + "description": "Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds" + } + }, + "required": [ + "items" + ], + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "", + "kind": "NodeList", + "version": "v1" + } + ] + }, + "io.k8s.api.core.v1.NodeSelector": { + "description": "A node selector represents the union of the results of one or more label queries over a set of nodes; that is, it represents the OR of the selectors represented by the node selector terms.", + "properties": { + "nodeSelectorTerms": { + "description": "Required. A list of node selector terms. The terms are ORed.", + "items": { + "$ref": "#/definitions/io.k8s.api.core.v1.NodeSelectorTerm" + }, + "type": "array" + } + }, + "required": [ + "nodeSelectorTerms" + ], + "type": "object" + }, + "io.k8s.api.core.v1.NodeSelectorRequirement": { + "description": "A node selector requirement is a selector that contains values, a key, and an operator that relates the key and values.", + "properties": { + "key": { + "description": "The label key that the selector applies to.", + "type": "string" + }, + "operator": { + "description": "Represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists, DoesNotExist. Gt, and Lt.", + "type": "string" + }, + "values": { + "description": "An array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. If the operator is Gt or Lt, the values array must have a single element, which will be interpreted as an integer. This array is replaced during a strategic merge patch.", + "items": { + "type": "string" + }, + "type": "array" + } + }, + "required": [ + "key", + "operator" + ], + "type": "object" + }, + "io.k8s.api.core.v1.NodeSelectorTerm": { + "description": "A null or empty node selector term matches no objects. The requirements of them are ANDed. The TopologySelectorTerm type implements a subset of the NodeSelectorTerm.", + "properties": { + "matchExpressions": { + "description": "A list of node selector requirements by node's labels.", + "items": { + "$ref": "#/definitions/io.k8s.api.core.v1.NodeSelectorRequirement" + }, + "type": "array" + }, + "matchFields": { + "description": "A list of node selector requirements by node's fields.", + "items": { + "$ref": "#/definitions/io.k8s.api.core.v1.NodeSelectorRequirement" + }, + "type": "array" + } + }, + "type": "object" + }, + "io.k8s.api.core.v1.NodeSpec": { + "description": "NodeSpec describes the attributes that a node is created with.", + "properties": { + "configSource": { + "$ref": "#/definitions/io.k8s.api.core.v1.NodeConfigSource", + "description": "If specified, the source to get node configuration from The DynamicKubeletConfig feature gate must be enabled for the Kubelet to use this field" + }, + "externalID": { + "description": "Deprecated. Not all kubelets will set this field. Remove field after 1.13. see: https://issues.k8s.io/61966", + "type": "string" + }, + "podCIDR": { + "description": "PodCIDR represents the pod IP range assigned to the node.", + "type": "string" + }, + "podCIDRs": { + "description": "podCIDRs represents the IP ranges assigned to the node for usage by Pods on that node. If this field is specified, the 0th entry must match the podCIDR field. It may contain at most 1 value for each of IPv4 and IPv6.", + "items": { + "type": "string" + }, + "type": "array", + "x-kubernetes-patch-strategy": "merge" + }, + "providerID": { + "description": "ID of the node assigned by the cloud provider in the format: \u003cProviderName\u003e://\u003cProviderSpecificNodeID\u003e", + "type": "string" + }, + "taints": { + "description": "If specified, the node's taints.", + "items": { + "$ref": "#/definitions/io.k8s.api.core.v1.Taint" + }, + "type": "array" + }, + "unschedulable": { + "description": "Unschedulable controls node schedulability of new pods. By default, node is schedulable. More info: https://kubernetes.io/docs/concepts/nodes/node/#manual-node-administration", + "type": "boolean" + } + }, + "type": "object" + }, + "io.k8s.api.core.v1.NodeStatus": { + "description": "NodeStatus is information about the current status of a node.", + "properties": { + "addresses": { + "description": "List of addresses reachable to the node. Queried from cloud provider, if available. More info: https://kubernetes.io/docs/concepts/nodes/node/#addresses Note: This field is declared as mergeable, but the merge key is not sufficiently unique, which can cause data corruption when it is merged. Callers should instead use a full-replacement patch. See http://pr.k8s.io/79391 for an example.", + "items": { + "$ref": "#/definitions/io.k8s.api.core.v1.NodeAddress" + }, + "type": "array", + "x-kubernetes-patch-merge-key": "type", + "x-kubernetes-patch-strategy": "merge" + }, + "allocatable": { + "additionalProperties": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity" + }, + "description": "Allocatable represents the resources of a node that are available for scheduling. Defaults to Capacity.", + "type": "object" + }, + "capacity": { + "additionalProperties": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity" + }, + "description": "Capacity represents the total resources of a node. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#capacity", + "type": "object" + }, + "conditions": { + "description": "Conditions is an array of current observed node conditions. More info: https://kubernetes.io/docs/concepts/nodes/node/#condition", + "items": { + "$ref": "#/definitions/io.k8s.api.core.v1.NodeCondition" + }, + "type": "array", + "x-kubernetes-patch-merge-key": "type", + "x-kubernetes-patch-strategy": "merge" + }, + "config": { + "$ref": "#/definitions/io.k8s.api.core.v1.NodeConfigStatus", + "description": "Status of the config assigned to the node via the dynamic Kubelet config feature." + }, + "daemonEndpoints": { + "$ref": "#/definitions/io.k8s.api.core.v1.NodeDaemonEndpoints", + "description": "Endpoints of daemons running on the Node." + }, + "images": { + "description": "List of container images on this node", + "items": { + "$ref": "#/definitions/io.k8s.api.core.v1.ContainerImage" + }, + "type": "array" + }, + "nodeInfo": { + "$ref": "#/definitions/io.k8s.api.core.v1.NodeSystemInfo", + "description": "Set of ids/uuids to uniquely identify the node. More info: https://kubernetes.io/docs/concepts/nodes/node/#info" + }, + "phase": { + "description": "NodePhase is the recently observed lifecycle phase of the node. More info: https://kubernetes.io/docs/concepts/nodes/node/#phase The field is never populated, and now is deprecated.", + "type": "string" + }, + "volumesAttached": { + "description": "List of volumes that are attached to the node.", + "items": { + "$ref": "#/definitions/io.k8s.api.core.v1.AttachedVolume" + }, + "type": "array" + }, + "volumesInUse": { + "description": "List of attachable volumes in use (mounted) by the node.", + "items": { + "type": "string" + }, + "type": "array" + } + }, + "type": "object" + }, + "io.k8s.api.core.v1.NodeSystemInfo": { + "description": "NodeSystemInfo is a set of ids/uuids to uniquely identify the node.", + "properties": { + "architecture": { + "description": "The Architecture reported by the node", + "type": "string" + }, + "bootID": { + "description": "Boot ID reported by the node.", + "type": "string" + }, + "containerRuntimeVersion": { + "description": "ContainerRuntime Version reported by the node through runtime remote API (e.g. docker://1.5.0).", + "type": "string" + }, + "kernelVersion": { + "description": "Kernel Version reported by the node from 'uname -r' (e.g. 3.16.0-0.bpo.4-amd64).", + "type": "string" + }, + "kubeProxyVersion": { + "description": "KubeProxy Version reported by the node.", + "type": "string" + }, + "kubeletVersion": { + "description": "Kubelet Version reported by the node.", + "type": "string" + }, + "machineID": { + "description": "MachineID reported by the node. For unique machine identification in the cluster this field is preferred. Learn more from man(5) machine-id: http://man7.org/linux/man-pages/man5/machine-id.5.html", + "type": "string" + }, + "operatingSystem": { + "description": "The Operating System reported by the node", + "type": "string" + }, + "osImage": { + "description": "OS Image reported by the node from /etc/os-release (e.g. Debian GNU/Linux 7 (wheezy)).", + "type": "string" + }, + "systemUUID": { + "description": "SystemUUID reported by the node. For unique machine identification MachineID is preferred. This field is specific to Red Hat hosts https://access.redhat.com/documentation/en-us/red_hat_subscription_management/1/html/rhsm/uuid", + "type": "string" + } + }, + "required": [ + "machineID", + "systemUUID", + "bootID", + "kernelVersion", + "osImage", + "containerRuntimeVersion", + "kubeletVersion", + "kubeProxyVersion", + "operatingSystem", + "architecture" + ], + "type": "object" + }, + "io.k8s.api.core.v1.ObjectFieldSelector": { + "description": "ObjectFieldSelector selects an APIVersioned field of an object.", + "properties": { + "apiVersion": { + "description": "Version of the schema the FieldPath is written in terms of, defaults to \"v1\".", + "type": "string" + }, + "fieldPath": { + "description": "Path of the field to select in the specified API version.", + "type": "string" + } + }, + "required": [ + "fieldPath" + ], + "type": "object" + }, + "io.k8s.api.core.v1.ObjectReference": { + "description": "ObjectReference contains enough information to let you inspect or modify the referred object.", + "properties": { + "apiVersion": { + "description": "API version of the referent.", + "type": "string" + }, + "fieldPath": { + "description": "If referring to a piece of an object instead of an entire object, this string should contain a valid JSON/Go field access statement, such as desiredState.manifest.containers[2]. For example, if the object reference is to a container within a pod, this would take on a value like: \"spec.containers{name}\" (where \"name\" refers to the name of the container that triggered the event) or if no container name is specified \"spec.containers[2]\" (container with index 2 in this pod). This syntax is chosen only to have some well-defined way of referencing a part of an object.", + "type": "string" + }, + "kind": { + "description": "Kind of the referent. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "name": { + "description": "Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + "type": "string" + }, + "namespace": { + "description": "Namespace of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/", + "type": "string" + }, + "resourceVersion": { + "description": "Specific resourceVersion to which this reference is made, if any. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency", + "type": "string" + }, + "uid": { + "description": "UID of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#uids", + "type": "string" + } + }, + "type": "object" + }, + "io.k8s.api.core.v1.PersistentVolume": { + "description": "PersistentVolume (PV) is a storage resource provisioned by an administrator. It is analogous to a node. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta", + "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata" + }, + "spec": { + "$ref": "#/definitions/io.k8s.api.core.v1.PersistentVolumeSpec", + "description": "Spec defines a specification of a persistent volume owned by the cluster. Provisioned by an administrator. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#persistent-volumes" + }, + "status": { + "$ref": "#/definitions/io.k8s.api.core.v1.PersistentVolumeStatus", + "description": "Status represents the current information/status for the persistent volume. Populated by the system. Read-only. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#persistent-volumes" + } + }, + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "", + "kind": "PersistentVolume", + "version": "v1" + } + ] + }, + "io.k8s.api.core.v1.PersistentVolumeClaim": { + "description": "PersistentVolumeClaim is a user's request for and claim to a persistent volume", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta", + "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata" + }, + "spec": { + "$ref": "#/definitions/io.k8s.api.core.v1.PersistentVolumeClaimSpec", + "description": "Spec defines the desired characteristics of a volume requested by a pod author. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#persistentvolumeclaims" + }, + "status": { + "$ref": "#/definitions/io.k8s.api.core.v1.PersistentVolumeClaimStatus", + "description": "Status represents the current information/status of a persistent volume claim. Read-only. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#persistentvolumeclaims" + } + }, + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "", + "kind": "PersistentVolumeClaim", + "version": "v1" + } + ] + }, + "io.k8s.api.core.v1.PersistentVolumeClaimCondition": { + "description": "PersistentVolumeClaimCondition contails details about state of pvc", + "properties": { + "lastProbeTime": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time", + "description": "Last time we probed the condition." + }, + "lastTransitionTime": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time", + "description": "Last time the condition transitioned from one status to another." + }, + "message": { + "description": "Human-readable message indicating details about last transition.", + "type": "string" + }, + "reason": { + "description": "Unique, this should be a short, machine understandable string that gives the reason for condition's last transition. If it reports \"ResizeStarted\" that means the underlying persistent volume is being resized.", + "type": "string" + }, + "status": { + "type": "string" + }, + "type": { + "type": "string" + } + }, + "required": [ + "type", + "status" + ], + "type": "object" + }, + "io.k8s.api.core.v1.PersistentVolumeClaimList": { + "description": "PersistentVolumeClaimList is a list of PersistentVolumeClaim items.", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "items": { + "description": "A list of persistent volume claims. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#persistentvolumeclaims", + "items": { + "$ref": "#/definitions/io.k8s.api.core.v1.PersistentVolumeClaim" + }, + "type": "array" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta", + "description": "Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds" + } + }, + "required": [ + "items" + ], + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "", + "kind": "PersistentVolumeClaimList", + "version": "v1" + } + ] + }, + "io.k8s.api.core.v1.PersistentVolumeClaimSpec": { + "description": "PersistentVolumeClaimSpec describes the common attributes of storage devices and allows a Source for provider-specific attributes", + "properties": { + "accessModes": { + "description": "AccessModes contains the desired access modes the volume should have. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#access-modes-1", + "items": { + "type": "string" + }, + "type": "array" + }, + "dataSource": { + "$ref": "#/definitions/io.k8s.api.core.v1.TypedLocalObjectReference", + "description": "This field can be used to specify either: * An existing VolumeSnapshot object (snapshot.storage.k8s.io/VolumeSnapshot) * An existing PVC (PersistentVolumeClaim) * An existing custom resource that implements data population (Alpha) In order to use custom resource types that implement data population, the AnyVolumeDataSource feature gate must be enabled. If the provisioner or an external controller can support the specified data source, it will create a new volume based on the contents of the specified data source." + }, + "resources": { + "$ref": "#/definitions/io.k8s.api.core.v1.ResourceRequirements", + "description": "Resources represents the minimum resources the volume should have. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources" + }, + "selector": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector", + "description": "A label query over volumes to consider for binding." + }, + "storageClassName": { + "description": "Name of the StorageClass required by the claim. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#class-1", + "type": "string" + }, + "volumeMode": { + "description": "volumeMode defines what type of volume is required by the claim. Value of Filesystem is implied when not included in claim spec.", + "type": "string" + }, + "volumeName": { + "description": "VolumeName is the binding reference to the PersistentVolume backing this claim.", + "type": "string" + } + }, + "type": "object" + }, + "io.k8s.api.core.v1.PersistentVolumeClaimStatus": { + "description": "PersistentVolumeClaimStatus is the current status of a persistent volume claim.", + "properties": { + "accessModes": { + "description": "AccessModes contains the actual access modes the volume backing the PVC has. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#access-modes-1", + "items": { + "type": "string" + }, + "type": "array" + }, + "capacity": { + "additionalProperties": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity" + }, + "description": "Represents the actual resources of the underlying volume.", + "type": "object" + }, + "conditions": { + "description": "Current Condition of persistent volume claim. If underlying persistent volume is being resized then the Condition will be set to 'ResizeStarted'.", + "items": { + "$ref": "#/definitions/io.k8s.api.core.v1.PersistentVolumeClaimCondition" + }, + "type": "array", + "x-kubernetes-patch-merge-key": "type", + "x-kubernetes-patch-strategy": "merge" + }, + "phase": { + "description": "Phase represents the current phase of PersistentVolumeClaim.", + "type": "string" + } + }, + "type": "object" + }, + "io.k8s.api.core.v1.PersistentVolumeClaimTemplate": { + "description": "PersistentVolumeClaimTemplate is used to produce PersistentVolumeClaim objects as part of an EphemeralVolumeSource.", + "properties": { + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta", + "description": "May contain labels and annotations that will be copied into the PVC when creating it. No other fields are allowed and will be rejected during validation." + }, + "spec": { + "$ref": "#/definitions/io.k8s.api.core.v1.PersistentVolumeClaimSpec", + "description": "The specification for the PersistentVolumeClaim. The entire content is copied unchanged into the PVC that gets created from this template. The same fields as in a PersistentVolumeClaim are also valid here." + } + }, + "required": [ + "spec" + ], + "type": "object" + }, + "io.k8s.api.core.v1.PersistentVolumeClaimVolumeSource": { + "description": "PersistentVolumeClaimVolumeSource references the user's PVC in the same namespace. This volume finds the bound PV and mounts that volume for the pod. A PersistentVolumeClaimVolumeSource is, essentially, a wrapper around another type of volume that is owned by someone else (the system).", + "properties": { + "claimName": { + "description": "ClaimName is the name of a PersistentVolumeClaim in the same namespace as the pod using this volume. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#persistentvolumeclaims", + "type": "string" + }, + "readOnly": { + "description": "Will force the ReadOnly setting in VolumeMounts. Default false.", + "type": "boolean" + } + }, + "required": [ + "claimName" + ], + "type": "object" + }, + "io.k8s.api.core.v1.PersistentVolumeList": { + "description": "PersistentVolumeList is a list of PersistentVolume items.", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "items": { + "description": "List of persistent volumes. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes", + "items": { + "$ref": "#/definitions/io.k8s.api.core.v1.PersistentVolume" + }, + "type": "array" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta", + "description": "Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds" + } + }, + "required": [ + "items" + ], + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "", + "kind": "PersistentVolumeList", + "version": "v1" + } + ] + }, + "io.k8s.api.core.v1.PersistentVolumeSpec": { + "description": "PersistentVolumeSpec is the specification of a persistent volume.", + "properties": { + "accessModes": { + "description": "AccessModes contains all ways the volume can be mounted. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#access-modes", + "items": { + "type": "string" + }, + "type": "array" + }, + "awsElasticBlockStore": { + "$ref": "#/definitions/io.k8s.api.core.v1.AWSElasticBlockStoreVolumeSource", + "description": "AWSElasticBlockStore represents an AWS Disk resource that is attached to a kubelet's host machine and then exposed to the pod. More info: https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore" + }, + "azureDisk": { + "$ref": "#/definitions/io.k8s.api.core.v1.AzureDiskVolumeSource", + "description": "AzureDisk represents an Azure Data Disk mount on the host and bind mount to the pod." + }, + "azureFile": { + "$ref": "#/definitions/io.k8s.api.core.v1.AzureFilePersistentVolumeSource", + "description": "AzureFile represents an Azure File Service mount on the host and bind mount to the pod." + }, + "capacity": { + "additionalProperties": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity" + }, + "description": "A description of the persistent volume's resources and capacity. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#capacity", + "type": "object" + }, + "cephfs": { + "$ref": "#/definitions/io.k8s.api.core.v1.CephFSPersistentVolumeSource", + "description": "CephFS represents a Ceph FS mount on the host that shares a pod's lifetime" + }, + "cinder": { + "$ref": "#/definitions/io.k8s.api.core.v1.CinderPersistentVolumeSource", + "description": "Cinder represents a cinder volume attached and mounted on kubelets host machine. More info: https://examples.k8s.io/mysql-cinder-pd/README.md" + }, + "claimRef": { + "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference", + "description": "ClaimRef is part of a bi-directional binding between PersistentVolume and PersistentVolumeClaim. Expected to be non-nil when bound. claim.VolumeName is the authoritative bind between PV and PVC. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#binding" + }, + "csi": { + "$ref": "#/definitions/io.k8s.api.core.v1.CSIPersistentVolumeSource", + "description": "CSI represents storage that is handled by an external CSI driver (Beta feature)." + }, + "fc": { + "$ref": "#/definitions/io.k8s.api.core.v1.FCVolumeSource", + "description": "FC represents a Fibre Channel resource that is attached to a kubelet's host machine and then exposed to the pod." + }, + "flexVolume": { + "$ref": "#/definitions/io.k8s.api.core.v1.FlexPersistentVolumeSource", + "description": "FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin." + }, + "flocker": { + "$ref": "#/definitions/io.k8s.api.core.v1.FlockerVolumeSource", + "description": "Flocker represents a Flocker volume attached to a kubelet's host machine and exposed to the pod for its usage. This depends on the Flocker control service being running" + }, + "gcePersistentDisk": { + "$ref": "#/definitions/io.k8s.api.core.v1.GCEPersistentDiskVolumeSource", + "description": "GCEPersistentDisk represents a GCE Disk resource that is attached to a kubelet's host machine and then exposed to the pod. Provisioned by an admin. More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk" + }, + "glusterfs": { + "$ref": "#/definitions/io.k8s.api.core.v1.GlusterfsPersistentVolumeSource", + "description": "Glusterfs represents a Glusterfs volume that is attached to a host and exposed to the pod. Provisioned by an admin. More info: https://examples.k8s.io/volumes/glusterfs/README.md" + }, + "hostPath": { + "$ref": "#/definitions/io.k8s.api.core.v1.HostPathVolumeSource", + "description": "HostPath represents a directory on the host. Provisioned by a developer or tester. This is useful for single-node development and testing only! On-host storage is not supported in any way and WILL NOT WORK in a multi-node cluster. More info: https://kubernetes.io/docs/concepts/storage/volumes#hostpath" + }, + "iscsi": { + "$ref": "#/definitions/io.k8s.api.core.v1.ISCSIPersistentVolumeSource", + "description": "ISCSI represents an ISCSI Disk resource that is attached to a kubelet's host machine and then exposed to the pod. Provisioned by an admin." + }, + "local": { + "$ref": "#/definitions/io.k8s.api.core.v1.LocalVolumeSource", + "description": "Local represents directly-attached storage with node affinity" + }, + "mountOptions": { + "description": "A list of mount options, e.g. [\"ro\", \"soft\"]. Not validated - mount will simply fail if one is invalid. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes/#mount-options", + "items": { + "type": "string" + }, + "type": "array" + }, + "nfs": { + "$ref": "#/definitions/io.k8s.api.core.v1.NFSVolumeSource", + "description": "NFS represents an NFS mount on the host. Provisioned by an admin. More info: https://kubernetes.io/docs/concepts/storage/volumes#nfs" + }, + "nodeAffinity": { + "$ref": "#/definitions/io.k8s.api.core.v1.VolumeNodeAffinity", + "description": "NodeAffinity defines constraints that limit what nodes this volume can be accessed from. This field influences the scheduling of pods that use this volume." + }, + "persistentVolumeReclaimPolicy": { + "description": "What happens to a persistent volume when released from its claim. Valid options are Retain (default for manually created PersistentVolumes), Delete (default for dynamically provisioned PersistentVolumes), and Recycle (deprecated). Recycle must be supported by the volume plugin underlying this PersistentVolume. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#reclaiming", + "type": "string" + }, + "photonPersistentDisk": { + "$ref": "#/definitions/io.k8s.api.core.v1.PhotonPersistentDiskVolumeSource", + "description": "PhotonPersistentDisk represents a PhotonController persistent disk attached and mounted on kubelets host machine" + }, + "portworxVolume": { + "$ref": "#/definitions/io.k8s.api.core.v1.PortworxVolumeSource", + "description": "PortworxVolume represents a portworx volume attached and mounted on kubelets host machine" + }, + "quobyte": { + "$ref": "#/definitions/io.k8s.api.core.v1.QuobyteVolumeSource", + "description": "Quobyte represents a Quobyte mount on the host that shares a pod's lifetime" + }, + "rbd": { + "$ref": "#/definitions/io.k8s.api.core.v1.RBDPersistentVolumeSource", + "description": "RBD represents a Rados Block Device mount on the host that shares a pod's lifetime. More info: https://examples.k8s.io/volumes/rbd/README.md" + }, + "scaleIO": { + "$ref": "#/definitions/io.k8s.api.core.v1.ScaleIOPersistentVolumeSource", + "description": "ScaleIO represents a ScaleIO persistent volume attached and mounted on Kubernetes nodes." + }, + "storageClassName": { + "description": "Name of StorageClass to which this persistent volume belongs. Empty value means that this volume does not belong to any StorageClass.", + "type": "string" + }, + "storageos": { + "$ref": "#/definitions/io.k8s.api.core.v1.StorageOSPersistentVolumeSource", + "description": "StorageOS represents a StorageOS volume that is attached to the kubelet's host machine and mounted into the pod More info: https://examples.k8s.io/volumes/storageos/README.md" + }, + "volumeMode": { + "description": "volumeMode defines if a volume is intended to be used with a formatted filesystem or to remain in raw block state. Value of Filesystem is implied when not included in spec.", + "type": "string" + }, + "vsphereVolume": { + "$ref": "#/definitions/io.k8s.api.core.v1.VsphereVirtualDiskVolumeSource", + "description": "VsphereVolume represents a vSphere volume attached and mounted on kubelets host machine" + } + }, + "type": "object" + }, + "io.k8s.api.core.v1.PersistentVolumeStatus": { + "description": "PersistentVolumeStatus is the current status of a persistent volume.", + "properties": { + "message": { + "description": "A human-readable message indicating details about why the volume is in this state.", + "type": "string" + }, + "phase": { + "description": "Phase indicates if a volume is available, bound to a claim, or released by a claim. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#phase", + "type": "string" + }, + "reason": { + "description": "Reason is a brief CamelCase string that describes any failure and is meant for machine parsing and tidy display in the CLI.", + "type": "string" + } + }, + "type": "object" + }, + "io.k8s.api.core.v1.PhotonPersistentDiskVolumeSource": { + "description": "Represents a Photon Controller persistent disk resource.", + "properties": { + "fsType": { + "description": "Filesystem type to mount. Must be a filesystem type supported by the host operating system. Ex. \"ext4\", \"xfs\", \"ntfs\". Implicitly inferred to be \"ext4\" if unspecified.", + "type": "string" + }, + "pdID": { + "description": "ID that identifies Photon Controller persistent disk", + "type": "string" + } + }, + "required": [ + "pdID" + ], + "type": "object" + }, + "io.k8s.api.core.v1.Pod": { + "description": "Pod is a collection of containers that can run on a host. This resource is created by clients and scheduled onto hosts.", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta", + "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata" + }, + "spec": { + "$ref": "#/definitions/io.k8s.api.core.v1.PodSpec", + "description": "Specification of the desired behavior of the pod. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status" + }, + "status": { + "$ref": "#/definitions/io.k8s.api.core.v1.PodStatus", + "description": "Most recently observed status of the pod. This data may not be up to date. Populated by the system. Read-only. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status" + } + }, + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "", + "kind": "Pod", + "version": "v1" + } + ] + }, + "io.k8s.api.core.v1.PodAffinity": { + "description": "Pod affinity is a group of inter pod affinity scheduling rules.", + "properties": { + "preferredDuringSchedulingIgnoredDuringExecution": { + "description": "The scheduler will prefer to schedule pods to nodes that satisfy the affinity expressions specified by this field, but it may choose a node that violates one or more of the expressions. The node that is most preferred is the one with the greatest sum of weights, i.e. for each node that meets all of the scheduling requirements (resource request, requiredDuringScheduling affinity expressions, etc.), compute a sum by iterating through the elements of this field and adding \"weight\" to the sum if the node has pods which matches the corresponding podAffinityTerm; the node(s) with the highest sum are the most preferred.", + "items": { + "$ref": "#/definitions/io.k8s.api.core.v1.WeightedPodAffinityTerm" + }, + "type": "array" + }, + "requiredDuringSchedulingIgnoredDuringExecution": { + "description": "If the affinity requirements specified by this field are not met at scheduling time, the pod will not be scheduled onto the node. If the affinity requirements specified by this field cease to be met at some point during pod execution (e.g. due to a pod label update), the system may or may not try to eventually evict the pod from its node. When there are multiple elements, the lists of nodes corresponding to each podAffinityTerm are intersected, i.e. all terms must be satisfied.", + "items": { + "$ref": "#/definitions/io.k8s.api.core.v1.PodAffinityTerm" + }, + "type": "array" + } + }, + "type": "object" + }, + "io.k8s.api.core.v1.PodAffinityTerm": { + "description": "Defines a set of pods (namely those matching the labelSelector relative to the given namespace(s)) that this pod should be co-located (affinity) or not co-located (anti-affinity) with, where co-located is defined as running on a node whose value of the label with key \u003ctopologyKey\u003e matches that of any node on which a pod of the set of pods is running", + "properties": { + "labelSelector": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector", + "description": "A label query over a set of resources, in this case pods." + }, + "namespaceSelector": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector", + "description": "A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means \"this pod's namespace\". An empty selector ({}) matches all namespaces. This field is alpha-level and is only honored when PodAffinityNamespaceSelector feature is enabled." + }, + "namespaces": { + "description": "namespaces specifies a static list of namespace names that the term applies to. The term is applied to the union of the namespaces listed in this field and the ones selected by namespaceSelector. null or empty namespaces list and null namespaceSelector means \"this pod's namespace\"", + "items": { + "type": "string" + }, + "type": "array" + }, + "topologyKey": { + "description": "This pod should be co-located (affinity) or not co-located (anti-affinity) with the pods matching the labelSelector in the specified namespaces, where co-located is defined as running on a node whose value of the label with key topologyKey matches that of any node on which any of the selected pods is running. Empty topologyKey is not allowed.", + "type": "string" + } + }, + "required": [ + "topologyKey" + ], + "type": "object" + }, + "io.k8s.api.core.v1.PodAntiAffinity": { + "description": "Pod anti affinity is a group of inter pod anti affinity scheduling rules.", + "properties": { + "preferredDuringSchedulingIgnoredDuringExecution": { + "description": "The scheduler will prefer to schedule pods to nodes that satisfy the anti-affinity expressions specified by this field, but it may choose a node that violates one or more of the expressions. The node that is most preferred is the one with the greatest sum of weights, i.e. for each node that meets all of the scheduling requirements (resource request, requiredDuringScheduling anti-affinity expressions, etc.), compute a sum by iterating through the elements of this field and adding \"weight\" to the sum if the node has pods which matches the corresponding podAffinityTerm; the node(s) with the highest sum are the most preferred.", + "items": { + "$ref": "#/definitions/io.k8s.api.core.v1.WeightedPodAffinityTerm" + }, + "type": "array" + }, + "requiredDuringSchedulingIgnoredDuringExecution": { + "description": "If the anti-affinity requirements specified by this field are not met at scheduling time, the pod will not be scheduled onto the node. If the anti-affinity requirements specified by this field cease to be met at some point during pod execution (e.g. due to a pod label update), the system may or may not try to eventually evict the pod from its node. When there are multiple elements, the lists of nodes corresponding to each podAffinityTerm are intersected, i.e. all terms must be satisfied.", + "items": { + "$ref": "#/definitions/io.k8s.api.core.v1.PodAffinityTerm" + }, + "type": "array" + } + }, + "type": "object" + }, + "io.k8s.api.core.v1.PodCondition": { + "description": "PodCondition contains details for the current condition of this pod.", + "properties": { + "lastProbeTime": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time", + "description": "Last time we probed the condition." + }, + "lastTransitionTime": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time", + "description": "Last time the condition transitioned from one status to another." + }, + "message": { + "description": "Human-readable message indicating details about last transition.", + "type": "string" + }, + "reason": { + "description": "Unique, one-word, CamelCase reason for the condition's last transition.", + "type": "string" + }, + "status": { + "description": "Status is the status of the condition. Can be True, False, Unknown. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#pod-conditions", + "type": "string" + }, + "type": { + "description": "Type is the type of the condition. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#pod-conditions", + "type": "string" + } + }, + "required": [ + "type", + "status" + ], + "type": "object" + }, + "io.k8s.api.core.v1.PodDNSConfig": { + "description": "PodDNSConfig defines the DNS parameters of a pod in addition to those generated from DNSPolicy.", + "properties": { + "nameservers": { + "description": "A list of DNS name server IP addresses. This will be appended to the base nameservers generated from DNSPolicy. Duplicated nameservers will be removed.", + "items": { + "type": "string" + }, + "type": "array" + }, + "options": { + "description": "A list of DNS resolver options. This will be merged with the base options generated from DNSPolicy. Duplicated entries will be removed. Resolution options given in Options will override those that appear in the base DNSPolicy.", + "items": { + "$ref": "#/definitions/io.k8s.api.core.v1.PodDNSConfigOption" + }, + "type": "array" + }, + "searches": { + "description": "A list of DNS search domains for host-name lookup. This will be appended to the base search paths generated from DNSPolicy. Duplicated search paths will be removed.", + "items": { + "type": "string" + }, + "type": "array" + } + }, + "type": "object" + }, + "io.k8s.api.core.v1.PodDNSConfigOption": { + "description": "PodDNSConfigOption defines DNS resolver options of a pod.", + "properties": { + "name": { + "description": "Required.", + "type": "string" + }, + "value": { + "type": "string" + } + }, + "type": "object" + }, + "io.k8s.api.core.v1.PodIP": { + "description": "IP address information for entries in the (plural) PodIPs field. Each entry includes:\n IP: An IP address allocated to the pod. Routable at least within the cluster.", + "properties": { + "ip": { + "description": "ip is an IP address (IPv4 or IPv6) assigned to the pod", + "type": "string" + } + }, + "type": "object" + }, + "io.k8s.api.core.v1.PodList": { + "description": "PodList is a list of Pods.", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "items": { + "description": "List of pods. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md", + "items": { + "$ref": "#/definitions/io.k8s.api.core.v1.Pod" + }, + "type": "array" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta", + "description": "Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds" + } + }, + "required": [ + "items" + ], + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "", + "kind": "PodList", + "version": "v1" + } + ] + }, + "io.k8s.api.core.v1.PodReadinessGate": { + "description": "PodReadinessGate contains the reference to a pod condition", + "properties": { + "conditionType": { + "description": "ConditionType refers to a condition in the pod's condition list with matching type.", + "type": "string" + } + }, + "required": [ + "conditionType" + ], + "type": "object" + }, + "io.k8s.api.core.v1.PodSecurityContext": { + "description": "PodSecurityContext holds pod-level security attributes and common container settings. Some fields are also present in container.securityContext. Field values of container.securityContext take precedence over field values of PodSecurityContext.", + "properties": { + "fsGroup": { + "description": "A special supplemental group that applies to all containers in a pod. Some volume types allow the Kubelet to change the ownership of that volume to be owned by the pod:\n\n1. The owning GID will be the FSGroup 2. The setgid bit is set (new files created in the volume will be owned by FSGroup) 3. The permission bits are OR'd with rw-rw----\n\nIf unset, the Kubelet will not modify the ownership and permissions of any volume.", + "format": "int64", + "type": "integer" + }, + "fsGroupChangePolicy": { + "description": "fsGroupChangePolicy defines behavior of changing ownership and permission of the volume before being exposed inside Pod. This field will only apply to volume types which support fsGroup based ownership(and permissions). It will have no effect on ephemeral volume types such as: secret, configmaps and emptydir. Valid values are \"OnRootMismatch\" and \"Always\". If not specified, \"Always\" is used.", + "type": "string" + }, + "runAsGroup": { + "description": "The GID to run the entrypoint of the container process. Uses runtime default if unset. May also be set in SecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence for that container.", + "format": "int64", + "type": "integer" + }, + "runAsNonRoot": { + "description": "Indicates that the container must run as a non-root user. If true, the Kubelet will validate the image at runtime to ensure that it does not run as UID 0 (root) and fail to start the container if it does. If unset or false, no such validation will be performed. May also be set in SecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.", + "type": "boolean" + }, + "runAsUser": { + "description": "The UID to run the entrypoint of the container process. Defaults to user specified in image metadata if unspecified. May also be set in SecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence for that container.", + "format": "int64", + "type": "integer" + }, + "seLinuxOptions": { + "$ref": "#/definitions/io.k8s.api.core.v1.SELinuxOptions", + "description": "The SELinux context to be applied to all containers. If unspecified, the container runtime will allocate a random SELinux context for each container. May also be set in SecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence for that container." + }, + "seccompProfile": { + "$ref": "#/definitions/io.k8s.api.core.v1.SeccompProfile", + "description": "The seccomp options to use by the containers in this pod." + }, + "supplementalGroups": { + "description": "A list of groups applied to the first process run in each container, in addition to the container's primary GID. If unspecified, no groups will be added to any container.", + "items": { + "format": "int64", + "type": "integer" + }, + "type": "array" + }, + "sysctls": { + "description": "Sysctls hold a list of namespaced sysctls used for the pod. Pods with unsupported sysctls (by the container runtime) might fail to launch.", + "items": { + "$ref": "#/definitions/io.k8s.api.core.v1.Sysctl" + }, + "type": "array" + }, + "windowsOptions": { + "$ref": "#/definitions/io.k8s.api.core.v1.WindowsSecurityContextOptions", + "description": "The Windows specific settings applied to all containers. If unspecified, the options within a container's SecurityContext will be used. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence." + } + }, + "type": "object" + }, + "io.k8s.api.core.v1.PodSpec": { + "description": "PodSpec is a description of a pod.", + "properties": { + "activeDeadlineSeconds": { + "description": "Optional duration in seconds the pod may be active on the node relative to StartTime before the system will actively try to mark it failed and kill associated containers. Value must be a positive integer.", + "format": "int64", + "type": "integer" + }, + "affinity": { + "$ref": "#/definitions/io.k8s.api.core.v1.Affinity", + "description": "If specified, the pod's scheduling constraints" + }, + "automountServiceAccountToken": { + "description": "AutomountServiceAccountToken indicates whether a service account token should be automatically mounted.", + "type": "boolean" + }, + "containers": { + "description": "List of containers belonging to the pod. Containers cannot currently be added or removed. There must be at least one container in a Pod. Cannot be updated.", + "items": { + "$ref": "#/definitions/io.k8s.api.core.v1.Container" + }, + "type": "array", + "x-kubernetes-patch-merge-key": "name", + "x-kubernetes-patch-strategy": "merge" + }, + "dnsConfig": { + "$ref": "#/definitions/io.k8s.api.core.v1.PodDNSConfig", + "description": "Specifies the DNS parameters of a pod. Parameters specified here will be merged to the generated DNS configuration based on DNSPolicy." + }, + "dnsPolicy": { + "description": "Set DNS policy for the pod. Defaults to \"ClusterFirst\". Valid values are 'ClusterFirstWithHostNet', 'ClusterFirst', 'Default' or 'None'. DNS parameters given in DNSConfig will be merged with the policy selected with DNSPolicy. To have DNS options set along with hostNetwork, you have to specify DNS policy explicitly to 'ClusterFirstWithHostNet'.", + "type": "string" + }, + "enableServiceLinks": { + "description": "EnableServiceLinks indicates whether information about services should be injected into pod's environment variables, matching the syntax of Docker links. Optional: Defaults to true.", + "type": "boolean" + }, + "ephemeralContainers": { + "description": "List of ephemeral containers run in this pod. Ephemeral containers may be run in an existing pod to perform user-initiated actions such as debugging. This list cannot be specified when creating a pod, and it cannot be modified by updating the pod spec. In order to add an ephemeral container to an existing pod, use the pod's ephemeralcontainers subresource. This field is alpha-level and is only honored by servers that enable the EphemeralContainers feature.", + "items": { + "$ref": "#/definitions/io.k8s.api.core.v1.EphemeralContainer" + }, + "type": "array", + "x-kubernetes-patch-merge-key": "name", + "x-kubernetes-patch-strategy": "merge" + }, + "hostAliases": { + "description": "HostAliases is an optional list of hosts and IPs that will be injected into the pod's hosts file if specified. This is only valid for non-hostNetwork pods.", + "items": { + "$ref": "#/definitions/io.k8s.api.core.v1.HostAlias" + }, + "type": "array", + "x-kubernetes-patch-merge-key": "ip", + "x-kubernetes-patch-strategy": "merge" + }, + "hostIPC": { + "description": "Use the host's ipc namespace. Optional: Default to false.", + "type": "boolean" + }, + "hostNetwork": { + "description": "Host networking requested for this pod. Use the host's network namespace. If this option is set, the ports that will be used must be specified. Default to false.", + "type": "boolean" + }, + "hostPID": { + "description": "Use the host's pid namespace. Optional: Default to false.", + "type": "boolean" + }, + "hostname": { + "description": "Specifies the hostname of the Pod If not specified, the pod's hostname will be set to a system-defined value.", + "type": "string" + }, + "imagePullSecrets": { + "description": "ImagePullSecrets is an optional list of references to secrets in the same namespace to use for pulling any of the images used by this PodSpec. If specified, these secrets will be passed to individual puller implementations for them to use. For example, in the case of docker, only DockerConfig type secrets are honored. More info: https://kubernetes.io/docs/concepts/containers/images#specifying-imagepullsecrets-on-a-pod", + "items": { + "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference" + }, + "type": "array", + "x-kubernetes-patch-merge-key": "name", + "x-kubernetes-patch-strategy": "merge" + }, + "initContainers": { + "description": "List of initialization containers belonging to the pod. Init containers are executed in order prior to containers being started. If any init container fails, the pod is considered to have failed and is handled according to its restartPolicy. The name for an init container or normal container must be unique among all containers. Init containers may not have Lifecycle actions, Readiness probes, Liveness probes, or Startup probes. The resourceRequirements of an init container are taken into account during scheduling by finding the highest request/limit for each resource type, and then using the max of of that value or the sum of the normal containers. Limits are applied to init containers in a similar fashion. Init containers cannot currently be added or removed. Cannot be updated. More info: https://kubernetes.io/docs/concepts/workloads/pods/init-containers/", + "items": { + "$ref": "#/definitions/io.k8s.api.core.v1.Container" + }, + "type": "array", + "x-kubernetes-patch-merge-key": "name", + "x-kubernetes-patch-strategy": "merge" + }, + "nodeName": { + "description": "NodeName is a request to schedule this pod onto a specific node. If it is non-empty, the scheduler simply schedules this pod onto that node, assuming that it fits resource requirements.", + "type": "string" + }, + "nodeSelector": { + "additionalProperties": { + "type": "string" + }, + "description": "NodeSelector is a selector which must be true for the pod to fit on a node. Selector which must match a node's labels for the pod to be scheduled on that node. More info: https://kubernetes.io/docs/concepts/configuration/assign-pod-node/", + "type": "object" + }, + "overhead": { + "additionalProperties": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity" + }, + "description": "Overhead represents the resource overhead associated with running a pod for a given RuntimeClass. This field will be autopopulated at admission time by the RuntimeClass admission controller. If the RuntimeClass admission controller is enabled, overhead must not be set in Pod create requests. The RuntimeClass admission controller will reject Pod create requests which have the overhead already set. If RuntimeClass is configured and selected in the PodSpec, Overhead will be set to the value defined in the corresponding RuntimeClass, otherwise it will remain unset and treated as zero. More info: https://git.k8s.io/enhancements/keps/sig-node/20190226-pod-overhead.md This field is alpha-level as of Kubernetes v1.16, and is only honored by servers that enable the PodOverhead feature.", + "type": "object" + }, + "preemptionPolicy": { + "description": "PreemptionPolicy is the Policy for preempting pods with lower priority. One of Never, PreemptLowerPriority. Defaults to PreemptLowerPriority if unset. This field is beta-level, gated by the NonPreemptingPriority feature-gate.", + "type": "string" + }, + "priority": { + "description": "The priority value. Various system components use this field to find the priority of the pod. When Priority Admission Controller is enabled, it prevents users from setting this field. The admission controller populates this field from PriorityClassName. The higher the value, the higher the priority.", + "format": "int32", + "type": "integer" + }, + "priorityClassName": { + "description": "If specified, indicates the pod's priority. \"system-node-critical\" and \"system-cluster-critical\" are two special keywords which indicate the highest priorities with the former being the highest priority. Any other name must be defined by creating a PriorityClass object with that name. If not specified, the pod priority will be default or zero if there is no default.", + "type": "string" + }, + "readinessGates": { + "description": "If specified, all readiness gates will be evaluated for pod readiness. A pod is ready when all its containers are ready AND all conditions specified in the readiness gates have status equal to \"True\" More info: https://git.k8s.io/enhancements/keps/sig-network/0007-pod-ready%2B%2B.md", + "items": { + "$ref": "#/definitions/io.k8s.api.core.v1.PodReadinessGate" + }, + "type": "array" + }, + "restartPolicy": { + "description": "Restart policy for all containers within the pod. One of Always, OnFailure, Never. Default to Always. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle/#restart-policy", + "type": "string" + }, + "runtimeClassName": { + "description": "RuntimeClassName refers to a RuntimeClass object in the node.k8s.io group, which should be used to run this pod. If no RuntimeClass resource matches the named class, the pod will not be run. If unset or empty, the \"legacy\" RuntimeClass will be used, which is an implicit class with an empty definition that uses the default runtime handler. More info: https://git.k8s.io/enhancements/keps/sig-node/runtime-class.md This is a beta feature as of Kubernetes v1.14.", + "type": "string" + }, + "schedulerName": { + "description": "If specified, the pod will be dispatched by specified scheduler. If not specified, the pod will be dispatched by default scheduler.", + "type": "string" + }, + "securityContext": { + "$ref": "#/definitions/io.k8s.api.core.v1.PodSecurityContext", + "description": "SecurityContext holds pod-level security attributes and common container settings. Optional: Defaults to empty. See type description for default values of each field." + }, + "serviceAccount": { + "description": "DeprecatedServiceAccount is a depreciated alias for ServiceAccountName. Deprecated: Use serviceAccountName instead.", + "type": "string" + }, + "serviceAccountName": { + "description": "ServiceAccountName is the name of the ServiceAccount to use to run this pod. More info: https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/", + "type": "string" + }, + "setHostnameAsFQDN": { + "description": "If true the pod's hostname will be configured as the pod's FQDN, rather than the leaf name (the default). In Linux containers, this means setting the FQDN in the hostname field of the kernel (the nodename field of struct utsname). In Windows containers, this means setting the registry value of hostname for the registry key HKEY_LOCAL_MACHINE\\SYSTEM\\CurrentControlSet\\Services\\Tcpip\\Parameters to FQDN. If a pod does not have FQDN, this has no effect. Default to false.", + "type": "boolean" + }, + "shareProcessNamespace": { + "description": "Share a single process namespace between all of the containers in a pod. When this is set containers will be able to view and signal processes from other containers in the same pod, and the first process in each container will not be assigned PID 1. HostPID and ShareProcessNamespace cannot both be set. Optional: Default to false.", + "type": "boolean" + }, + "subdomain": { + "description": "If specified, the fully qualified Pod hostname will be \"\u003chostname\u003e.\u003csubdomain\u003e.\u003cpod namespace\u003e.svc.\u003ccluster domain\u003e\". If not specified, the pod will not have a domainname at all.", + "type": "string" + }, + "terminationGracePeriodSeconds": { + "description": "Optional duration in seconds the pod needs to terminate gracefully. May be decreased in delete request. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). If this value is nil, the default grace period will be used instead. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. Defaults to 30 seconds.", + "format": "int64", + "type": "integer" + }, + "tolerations": { + "description": "If specified, the pod's tolerations.", + "items": { + "$ref": "#/definitions/io.k8s.api.core.v1.Toleration" + }, + "type": "array" + }, + "topologySpreadConstraints": { + "description": "TopologySpreadConstraints describes how a group of pods ought to spread across topology domains. Scheduler will schedule pods in a way which abides by the constraints. All topologySpreadConstraints are ANDed.", + "items": { + "$ref": "#/definitions/io.k8s.api.core.v1.TopologySpreadConstraint" + }, + "type": "array", + "x-kubernetes-list-map-keys": [ + "topologyKey", + "whenUnsatisfiable" + ], + "x-kubernetes-list-type": "map", + "x-kubernetes-patch-merge-key": "topologyKey", + "x-kubernetes-patch-strategy": "merge" + }, + "volumes": { + "description": "List of volumes that can be mounted by containers belonging to the pod. More info: https://kubernetes.io/docs/concepts/storage/volumes", + "items": { + "$ref": "#/definitions/io.k8s.api.core.v1.Volume" + }, + "type": "array", + "x-kubernetes-patch-merge-key": "name", + "x-kubernetes-patch-strategy": "merge,retainKeys" + } + }, + "required": [ + "containers" + ], + "type": "object" + }, + "io.k8s.api.core.v1.PodStatus": { + "description": "PodStatus represents information about the status of a pod. Status may trail the actual state of a system, especially if the node that hosts the pod cannot contact the control plane.", + "properties": { + "conditions": { + "description": "Current service state of pod. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#pod-conditions", + "items": { + "$ref": "#/definitions/io.k8s.api.core.v1.PodCondition" + }, + "type": "array", + "x-kubernetes-patch-merge-key": "type", + "x-kubernetes-patch-strategy": "merge" + }, + "containerStatuses": { + "description": "The list has one entry per container in the manifest. Each entry is currently the output of `docker inspect`. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#pod-and-container-status", + "items": { + "$ref": "#/definitions/io.k8s.api.core.v1.ContainerStatus" + }, + "type": "array" + }, + "ephemeralContainerStatuses": { + "description": "Status for any ephemeral containers that have run in this pod. This field is alpha-level and is only populated by servers that enable the EphemeralContainers feature.", + "items": { + "$ref": "#/definitions/io.k8s.api.core.v1.ContainerStatus" + }, + "type": "array" + }, + "hostIP": { + "description": "IP address of the host to which the pod is assigned. Empty if not yet scheduled.", + "type": "string" + }, + "initContainerStatuses": { + "description": "The list has one entry per init container in the manifest. The most recent successful init container will have ready = true, the most recently started container will have startTime set. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#pod-and-container-status", + "items": { + "$ref": "#/definitions/io.k8s.api.core.v1.ContainerStatus" + }, + "type": "array" + }, + "message": { + "description": "A human readable message indicating details about why the pod is in this condition.", + "type": "string" + }, + "nominatedNodeName": { + "description": "nominatedNodeName is set only when this pod preempts other pods on the node, but it cannot be scheduled right away as preemption victims receive their graceful termination periods. This field does not guarantee that the pod will be scheduled on this node. Scheduler may decide to place the pod elsewhere if other nodes become available sooner. Scheduler may also decide to give the resources on this node to a higher priority pod that is created after preemption. As a result, this field may be different than PodSpec.nodeName when the pod is scheduled.", + "type": "string" + }, + "phase": { + "description": "The phase of a Pod is a simple, high-level summary of where the Pod is in its lifecycle. The conditions array, the reason and message fields, and the individual container status arrays contain more detail about the pod's status. There are five possible phase values:\n\nPending: The pod has been accepted by the Kubernetes system, but one or more of the container images has not been created. This includes time before being scheduled as well as time spent downloading images over the network, which could take a while. Running: The pod has been bound to a node, and all of the containers have been created. At least one container is still running, or is in the process of starting or restarting. Succeeded: All containers in the pod have terminated in success, and will not be restarted. Failed: All containers in the pod have terminated, and at least one container has terminated in failure. The container either exited with non-zero status or was terminated by the system. Unknown: For some reason the state of the pod could not be obtained, typically due to an error in communicating with the host of the pod.\n\nMore info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#pod-phase", + "type": "string" + }, + "podIP": { + "description": "IP address allocated to the pod. Routable at least within the cluster. Empty if not yet allocated.", + "type": "string" + }, + "podIPs": { + "description": "podIPs holds the IP addresses allocated to the pod. If this field is specified, the 0th entry must match the podIP field. Pods may be allocated at most 1 value for each of IPv4 and IPv6. This list is empty if no IPs have been allocated yet.", + "items": { + "$ref": "#/definitions/io.k8s.api.core.v1.PodIP" + }, + "type": "array", + "x-kubernetes-patch-merge-key": "ip", + "x-kubernetes-patch-strategy": "merge" + }, + "qosClass": { + "description": "The Quality of Service (QOS) classification assigned to the pod based on resource requirements See PodQOSClass type for available QOS classes More info: https://git.k8s.io/community/contributors/design-proposals/node/resource-qos.md", + "type": "string" + }, + "reason": { + "description": "A brief CamelCase message indicating details about why the pod is in this state. e.g. 'Evicted'", + "type": "string" + }, + "startTime": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time", + "description": "RFC 3339 date and time at which the object was acknowledged by the Kubelet. This is before the Kubelet pulled the container image(s) for the pod." + } + }, + "type": "object" + }, + "io.k8s.api.core.v1.PodTemplate": { + "description": "PodTemplate describes a template for creating copies of a predefined pod.", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta", + "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata" + }, + "template": { + "$ref": "#/definitions/io.k8s.api.core.v1.PodTemplateSpec", + "description": "Template defines the pods that will be created from this pod template. https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status" + } + }, + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "", + "kind": "PodTemplate", + "version": "v1" + } + ] + }, + "io.k8s.api.core.v1.PodTemplateList": { + "description": "PodTemplateList is a list of PodTemplates.", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "items": { + "description": "List of pod templates", + "items": { + "$ref": "#/definitions/io.k8s.api.core.v1.PodTemplate" + }, + "type": "array" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta", + "description": "Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds" + } + }, + "required": [ + "items" + ], + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "", + "kind": "PodTemplateList", + "version": "v1" + } + ] + }, + "io.k8s.api.core.v1.PodTemplateSpec": { + "description": "PodTemplateSpec describes the data a pod should have when created from a template", + "properties": { + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta", + "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata" + }, + "spec": { + "$ref": "#/definitions/io.k8s.api.core.v1.PodSpec", + "description": "Specification of the desired behavior of the pod. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status" + } + }, + "type": "object" + }, + "io.k8s.api.core.v1.PortStatus": { + "properties": { + "error": { + "description": "Error is to record the problem with the service port The format of the error shall comply with the following rules: - built-in error values shall be specified in this file and those shall use\n CamelCase names\n- cloud provider specific error values must have names that comply with the\n format foo.example.com/CamelCase.", + "type": "string" + }, + "port": { + "description": "Port is the port number of the service port of which status is recorded here", + "format": "int32", + "type": "integer" + }, + "protocol": { + "description": "Protocol is the protocol of the service port of which status is recorded here The supported values are: \"TCP\", \"UDP\", \"SCTP\"", + "type": "string" + } + }, + "required": [ + "port", + "protocol" + ], + "type": "object" + }, + "io.k8s.api.core.v1.PortworxVolumeSource": { + "description": "PortworxVolumeSource represents a Portworx volume resource.", + "properties": { + "fsType": { + "description": "FSType represents the filesystem type to mount Must be a filesystem type supported by the host operating system. Ex. \"ext4\", \"xfs\". Implicitly inferred to be \"ext4\" if unspecified.", + "type": "string" + }, + "readOnly": { + "description": "Defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts.", + "type": "boolean" + }, + "volumeID": { + "description": "VolumeID uniquely identifies a Portworx volume", + "type": "string" + } + }, + "required": [ + "volumeID" + ], + "type": "object" + }, + "io.k8s.api.core.v1.PreferredSchedulingTerm": { + "description": "An empty preferred scheduling term matches all objects with implicit weight 0 (i.e. it's a no-op). A null preferred scheduling term matches no objects (i.e. is also a no-op).", + "properties": { + "preference": { + "$ref": "#/definitions/io.k8s.api.core.v1.NodeSelectorTerm", + "description": "A node selector term, associated with the corresponding weight." + }, + "weight": { + "description": "Weight associated with matching the corresponding nodeSelectorTerm, in the range 1-100.", + "format": "int32", + "type": "integer" + } + }, + "required": [ + "weight", + "preference" + ], + "type": "object" + }, + "io.k8s.api.core.v1.Probe": { + "description": "Probe describes a health check to be performed against a container to determine whether it is alive or ready to receive traffic.", + "properties": { + "exec": { + "$ref": "#/definitions/io.k8s.api.core.v1.ExecAction", + "description": "One and only one of the following should be specified. Exec specifies the action to take." + }, + "failureThreshold": { + "description": "Minimum consecutive failures for the probe to be considered failed after having succeeded. Defaults to 3. Minimum value is 1.", + "format": "int32", + "type": "integer" + }, + "httpGet": { + "$ref": "#/definitions/io.k8s.api.core.v1.HTTPGetAction", + "description": "HTTPGet specifies the http request to perform." + }, + "initialDelaySeconds": { + "description": "Number of seconds after the container has started before liveness probes are initiated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes", + "format": "int32", + "type": "integer" + }, + "periodSeconds": { + "description": "How often (in seconds) to perform the probe. Default to 10 seconds. Minimum value is 1.", + "format": "int32", + "type": "integer" + }, + "successThreshold": { + "description": "Minimum consecutive successes for the probe to be considered successful after having failed. Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.", + "format": "int32", + "type": "integer" + }, + "tcpSocket": { + "$ref": "#/definitions/io.k8s.api.core.v1.TCPSocketAction", + "description": "TCPSocket specifies an action involving a TCP port. TCP hooks not yet supported" + }, + "terminationGracePeriodSeconds": { + "description": "Optional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is an alpha field and requires enabling ProbeTerminationGracePeriod feature gate.", + "format": "int64", + "type": "integer" + }, + "timeoutSeconds": { + "description": "Number of seconds after which the probe times out. Defaults to 1 second. Minimum value is 1. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes", + "format": "int32", + "type": "integer" + } + }, + "type": "object" + }, + "io.k8s.api.core.v1.ProjectedVolumeSource": { + "description": "Represents a projected volume source", + "properties": { + "defaultMode": { + "description": "Mode bits used to set permissions on created files by default. Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts both octal and decimal values, JSON requires decimal values for mode bits. Directories within the path are not affected by this setting. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.", + "format": "int32", + "type": "integer" + }, + "sources": { + "description": "list of volume projections", + "items": { + "$ref": "#/definitions/io.k8s.api.core.v1.VolumeProjection" + }, + "type": "array" + } + }, + "type": "object" + }, + "io.k8s.api.core.v1.QuobyteVolumeSource": { + "description": "Represents a Quobyte mount that lasts the lifetime of a pod. Quobyte volumes do not support ownership management or SELinux relabeling.", + "properties": { + "group": { + "description": "Group to map volume access to Default is no group", + "type": "string" + }, + "readOnly": { + "description": "ReadOnly here will force the Quobyte volume to be mounted with read-only permissions. Defaults to false.", + "type": "boolean" + }, + "registry": { + "description": "Registry represents a single or multiple Quobyte Registry services specified as a string as host:port pair (multiple entries are separated with commas) which acts as the central registry for volumes", + "type": "string" + }, + "tenant": { + "description": "Tenant owning the given Quobyte volume in the Backend Used with dynamically provisioned Quobyte volumes, value is set by the plugin", + "type": "string" + }, + "user": { + "description": "User to map volume access to Defaults to serivceaccount user", + "type": "string" + }, + "volume": { + "description": "Volume is a string that references an already created Quobyte volume by name.", + "type": "string" + } + }, + "required": [ + "registry", + "volume" + ], + "type": "object" + }, + "io.k8s.api.core.v1.RBDPersistentVolumeSource": { + "description": "Represents a Rados Block Device mount that lasts the lifetime of a pod. RBD volumes support ownership management and SELinux relabeling.", + "properties": { + "fsType": { + "description": "Filesystem type of the volume that you want to mount. Tip: Ensure that the filesystem type is supported by the host operating system. Examples: \"ext4\", \"xfs\", \"ntfs\". Implicitly inferred to be \"ext4\" if unspecified. More info: https://kubernetes.io/docs/concepts/storage/volumes#rbd", + "type": "string" + }, + "image": { + "description": "The rados image name. More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it", + "type": "string" + }, + "keyring": { + "description": "Keyring is the path to key ring for RBDUser. Default is /etc/ceph/keyring. More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it", + "type": "string" + }, + "monitors": { + "description": "A collection of Ceph monitors. More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it", + "items": { + "type": "string" + }, + "type": "array" + }, + "pool": { + "description": "The rados pool name. Default is rbd. More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it", + "type": "string" + }, + "readOnly": { + "description": "ReadOnly here will force the ReadOnly setting in VolumeMounts. Defaults to false. More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it", + "type": "boolean" + }, + "secretRef": { + "$ref": "#/definitions/io.k8s.api.core.v1.SecretReference", + "description": "SecretRef is name of the authentication secret for RBDUser. If provided overrides keyring. Default is nil. More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it" + }, + "user": { + "description": "The rados user name. Default is admin. More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it", + "type": "string" + } + }, + "required": [ + "monitors", + "image" + ], + "type": "object" + }, + "io.k8s.api.core.v1.RBDVolumeSource": { + "description": "Represents a Rados Block Device mount that lasts the lifetime of a pod. RBD volumes support ownership management and SELinux relabeling.", + "properties": { + "fsType": { + "description": "Filesystem type of the volume that you want to mount. Tip: Ensure that the filesystem type is supported by the host operating system. Examples: \"ext4\", \"xfs\", \"ntfs\". Implicitly inferred to be \"ext4\" if unspecified. More info: https://kubernetes.io/docs/concepts/storage/volumes#rbd", + "type": "string" + }, + "image": { + "description": "The rados image name. More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it", + "type": "string" + }, + "keyring": { + "description": "Keyring is the path to key ring for RBDUser. Default is /etc/ceph/keyring. More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it", + "type": "string" + }, + "monitors": { + "description": "A collection of Ceph monitors. More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it", + "items": { + "type": "string" + }, + "type": "array" + }, + "pool": { + "description": "The rados pool name. Default is rbd. More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it", + "type": "string" + }, + "readOnly": { + "description": "ReadOnly here will force the ReadOnly setting in VolumeMounts. Defaults to false. More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it", + "type": "boolean" + }, + "secretRef": { + "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference", + "description": "SecretRef is name of the authentication secret for RBDUser. If provided overrides keyring. Default is nil. More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it" + }, + "user": { + "description": "The rados user name. Default is admin. More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it", + "type": "string" + } + }, + "required": [ + "monitors", + "image" + ], + "type": "object" + }, + "io.k8s.api.core.v1.ReplicationController": { + "description": "ReplicationController represents the configuration of a replication controller.", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta", + "description": "If the Labels of a ReplicationController are empty, they are defaulted to be the same as the Pod(s) that the replication controller manages. Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata" + }, + "spec": { + "$ref": "#/definitions/io.k8s.api.core.v1.ReplicationControllerSpec", + "description": "Spec defines the specification of the desired behavior of the replication controller. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status" + }, + "status": { + "$ref": "#/definitions/io.k8s.api.core.v1.ReplicationControllerStatus", + "description": "Status is the most recently observed status of the replication controller. This data may be out of date by some window of time. Populated by the system. Read-only. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status" + } + }, + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "", + "kind": "ReplicationController", + "version": "v1" + } + ] + }, + "io.k8s.api.core.v1.ReplicationControllerCondition": { + "description": "ReplicationControllerCondition describes the state of a replication controller at a certain point.", + "properties": { + "lastTransitionTime": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time", + "description": "The last time the condition transitioned from one status to another." + }, + "message": { + "description": "A human readable message indicating details about the transition.", + "type": "string" + }, + "reason": { + "description": "The reason for the condition's last transition.", + "type": "string" + }, + "status": { + "description": "Status of the condition, one of True, False, Unknown.", + "type": "string" + }, + "type": { + "description": "Type of replication controller condition.", + "type": "string" + } + }, + "required": [ + "type", + "status" + ], + "type": "object" + }, + "io.k8s.api.core.v1.ReplicationControllerList": { + "description": "ReplicationControllerList is a collection of replication controllers.", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "items": { + "description": "List of replication controllers. More info: https://kubernetes.io/docs/concepts/workloads/controllers/replicationcontroller", + "items": { + "$ref": "#/definitions/io.k8s.api.core.v1.ReplicationController" + }, + "type": "array" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta", + "description": "Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds" + } + }, + "required": [ + "items" + ], + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "", + "kind": "ReplicationControllerList", + "version": "v1" + } + ] + }, + "io.k8s.api.core.v1.ReplicationControllerSpec": { + "description": "ReplicationControllerSpec is the specification of a replication controller.", + "properties": { + "minReadySeconds": { + "description": "Minimum number of seconds for which a newly created pod should be ready without any of its container crashing, for it to be considered available. Defaults to 0 (pod will be considered available as soon as it is ready)", + "format": "int32", + "type": "integer" + }, + "replicas": { + "description": "Replicas is the number of desired replicas. This is a pointer to distinguish between explicit zero and unspecified. Defaults to 1. More info: https://kubernetes.io/docs/concepts/workloads/controllers/replicationcontroller#what-is-a-replicationcontroller", + "format": "int32", + "type": "integer" + }, + "selector": { + "additionalProperties": { + "type": "string" + }, + "description": "Selector is a label query over pods that should match the Replicas count. If Selector is empty, it is defaulted to the labels present on the Pod template. Label keys and values that must match in order to be controlled by this replication controller, if empty defaulted to labels on Pod template. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#label-selectors", + "type": "object" + }, + "template": { + "$ref": "#/definitions/io.k8s.api.core.v1.PodTemplateSpec", + "description": "Template is the object that describes the pod that will be created if insufficient replicas are detected. This takes precedence over a TemplateRef. More info: https://kubernetes.io/docs/concepts/workloads/controllers/replicationcontroller#pod-template" + } + }, + "type": "object" + }, + "io.k8s.api.core.v1.ReplicationControllerStatus": { + "description": "ReplicationControllerStatus represents the current status of a replication controller.", + "properties": { + "availableReplicas": { + "description": "The number of available replicas (ready for at least minReadySeconds) for this replication controller.", + "format": "int32", + "type": "integer" + }, + "conditions": { + "description": "Represents the latest available observations of a replication controller's current state.", + "items": { + "$ref": "#/definitions/io.k8s.api.core.v1.ReplicationControllerCondition" + }, + "type": "array", + "x-kubernetes-patch-merge-key": "type", + "x-kubernetes-patch-strategy": "merge" + }, + "fullyLabeledReplicas": { + "description": "The number of pods that have labels matching the labels of the pod template of the replication controller.", + "format": "int32", + "type": "integer" + }, + "observedGeneration": { + "description": "ObservedGeneration reflects the generation of the most recently observed replication controller.", + "format": "int64", + "type": "integer" + }, + "readyReplicas": { + "description": "The number of ready replicas for this replication controller.", + "format": "int32", + "type": "integer" + }, + "replicas": { + "description": "Replicas is the most recently oberved number of replicas. More info: https://kubernetes.io/docs/concepts/workloads/controllers/replicationcontroller#what-is-a-replicationcontroller", + "format": "int32", + "type": "integer" + } + }, + "required": [ + "replicas" + ], + "type": "object" + }, + "io.k8s.api.core.v1.ResourceFieldSelector": { + "description": "ResourceFieldSelector represents container resources (cpu, memory) and their output format", + "properties": { + "containerName": { + "description": "Container name: required for volumes, optional for env vars", + "type": "string" + }, + "divisor": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity", + "description": "Specifies the output format of the exposed resources, defaults to \"1\"" + }, + "resource": { + "description": "Required: resource to select", + "type": "string" + } + }, + "required": [ + "resource" + ], + "type": "object" + }, + "io.k8s.api.core.v1.ResourceQuota": { + "description": "ResourceQuota sets aggregate quota restrictions enforced per namespace", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta", + "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata" + }, + "spec": { + "$ref": "#/definitions/io.k8s.api.core.v1.ResourceQuotaSpec", + "description": "Spec defines the desired quota. https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status" + }, + "status": { + "$ref": "#/definitions/io.k8s.api.core.v1.ResourceQuotaStatus", + "description": "Status defines the actual enforced quota and its current usage. https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status" + } + }, + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "", + "kind": "ResourceQuota", + "version": "v1" + } + ] + }, + "io.k8s.api.core.v1.ResourceQuotaList": { + "description": "ResourceQuotaList is a list of ResourceQuota items.", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "items": { + "description": "Items is a list of ResourceQuota objects. More info: https://kubernetes.io/docs/concepts/policy/resource-quotas/", + "items": { + "$ref": "#/definitions/io.k8s.api.core.v1.ResourceQuota" + }, + "type": "array" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta", + "description": "Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds" + } + }, + "required": [ + "items" + ], + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "", + "kind": "ResourceQuotaList", + "version": "v1" + } + ] + }, + "io.k8s.api.core.v1.ResourceQuotaSpec": { + "description": "ResourceQuotaSpec defines the desired hard limits to enforce for Quota.", + "properties": { + "hard": { + "additionalProperties": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity" + }, + "description": "hard is the set of desired hard limits for each named resource. More info: https://kubernetes.io/docs/concepts/policy/resource-quotas/", + "type": "object" + }, + "scopeSelector": { + "$ref": "#/definitions/io.k8s.api.core.v1.ScopeSelector", + "description": "scopeSelector is also a collection of filters like scopes that must match each object tracked by a quota but expressed using ScopeSelectorOperator in combination with possible values. For a resource to match, both scopes AND scopeSelector (if specified in spec), must be matched." + }, + "scopes": { + "description": "A collection of filters that must match each object tracked by a quota. If not specified, the quota matches all objects.", + "items": { + "type": "string" + }, + "type": "array" + } + }, + "type": "object" + }, + "io.k8s.api.core.v1.ResourceQuotaStatus": { + "description": "ResourceQuotaStatus defines the enforced hard limits and observed use.", + "properties": { + "hard": { + "additionalProperties": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity" + }, + "description": "Hard is the set of enforced hard limits for each named resource. More info: https://kubernetes.io/docs/concepts/policy/resource-quotas/", + "type": "object" + }, + "used": { + "additionalProperties": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity" + }, + "description": "Used is the current observed total usage of the resource in the namespace.", + "type": "object" + } + }, + "type": "object" + }, + "io.k8s.api.core.v1.ResourceRequirements": { + "description": "ResourceRequirements describes the compute resource requirements.", + "properties": { + "limits": { + "additionalProperties": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity" + }, + "description": "Limits describes the maximum amount of compute resources allowed. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/", + "type": "object" + }, + "requests": { + "additionalProperties": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity" + }, + "description": "Requests describes the minimum amount of compute resources required. If Requests is omitted for a container, it defaults to Limits if that is explicitly specified, otherwise to an implementation-defined value. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/", + "type": "object" + } + }, + "type": "object" + }, + "io.k8s.api.core.v1.SELinuxOptions": { + "description": "SELinuxOptions are the labels to be applied to the container", + "properties": { + "level": { + "description": "Level is SELinux level label that applies to the container.", + "type": "string" + }, + "role": { + "description": "Role is a SELinux role label that applies to the container.", + "type": "string" + }, + "type": { + "description": "Type is a SELinux type label that applies to the container.", + "type": "string" + }, + "user": { + "description": "User is a SELinux user label that applies to the container.", + "type": "string" + } + }, + "type": "object" + }, + "io.k8s.api.core.v1.ScaleIOPersistentVolumeSource": { + "description": "ScaleIOPersistentVolumeSource represents a persistent ScaleIO volume", + "properties": { + "fsType": { + "description": "Filesystem type to mount. Must be a filesystem type supported by the host operating system. Ex. \"ext4\", \"xfs\", \"ntfs\". Default is \"xfs\"", + "type": "string" + }, + "gateway": { + "description": "The host address of the ScaleIO API Gateway.", + "type": "string" + }, + "protectionDomain": { + "description": "The name of the ScaleIO Protection Domain for the configured storage.", + "type": "string" + }, + "readOnly": { + "description": "Defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts.", + "type": "boolean" + }, + "secretRef": { + "$ref": "#/definitions/io.k8s.api.core.v1.SecretReference", + "description": "SecretRef references to the secret for ScaleIO user and other sensitive information. If this is not provided, Login operation will fail." + }, + "sslEnabled": { + "description": "Flag to enable/disable SSL communication with Gateway, default false", + "type": "boolean" + }, + "storageMode": { + "description": "Indicates whether the storage for a volume should be ThickProvisioned or ThinProvisioned. Default is ThinProvisioned.", + "type": "string" + }, + "storagePool": { + "description": "The ScaleIO Storage Pool associated with the protection domain.", + "type": "string" + }, + "system": { + "description": "The name of the storage system as configured in ScaleIO.", + "type": "string" + }, + "volumeName": { + "description": "The name of a volume already created in the ScaleIO system that is associated with this volume source.", + "type": "string" + } + }, + "required": [ + "gateway", + "system", + "secretRef" + ], + "type": "object" + }, + "io.k8s.api.core.v1.ScaleIOVolumeSource": { + "description": "ScaleIOVolumeSource represents a persistent ScaleIO volume", + "properties": { + "fsType": { + "description": "Filesystem type to mount. Must be a filesystem type supported by the host operating system. Ex. \"ext4\", \"xfs\", \"ntfs\". Default is \"xfs\".", + "type": "string" + }, + "gateway": { + "description": "The host address of the ScaleIO API Gateway.", + "type": "string" + }, + "protectionDomain": { + "description": "The name of the ScaleIO Protection Domain for the configured storage.", + "type": "string" + }, + "readOnly": { + "description": "Defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts.", + "type": "boolean" + }, + "secretRef": { + "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference", + "description": "SecretRef references to the secret for ScaleIO user and other sensitive information. If this is not provided, Login operation will fail." + }, + "sslEnabled": { + "description": "Flag to enable/disable SSL communication with Gateway, default false", + "type": "boolean" + }, + "storageMode": { + "description": "Indicates whether the storage for a volume should be ThickProvisioned or ThinProvisioned. Default is ThinProvisioned.", + "type": "string" + }, + "storagePool": { + "description": "The ScaleIO Storage Pool associated with the protection domain.", + "type": "string" + }, + "system": { + "description": "The name of the storage system as configured in ScaleIO.", + "type": "string" + }, + "volumeName": { + "description": "The name of a volume already created in the ScaleIO system that is associated with this volume source.", + "type": "string" + } + }, + "required": [ + "gateway", + "system", + "secretRef" + ], + "type": "object" + }, + "io.k8s.api.core.v1.ScopeSelector": { + "description": "A scope selector represents the AND of the selectors represented by the scoped-resource selector requirements.", + "properties": { + "matchExpressions": { + "description": "A list of scope selector requirements by scope of the resources.", + "items": { + "$ref": "#/definitions/io.k8s.api.core.v1.ScopedResourceSelectorRequirement" + }, + "type": "array" + } + }, + "type": "object" + }, + "io.k8s.api.core.v1.ScopedResourceSelectorRequirement": { + "description": "A scoped-resource selector requirement is a selector that contains values, a scope name, and an operator that relates the scope name and values.", + "properties": { + "operator": { + "description": "Represents a scope's relationship to a set of values. Valid operators are In, NotIn, Exists, DoesNotExist.", + "type": "string" + }, + "scopeName": { + "description": "The name of the scope that the selector applies to.", + "type": "string" + }, + "values": { + "description": "An array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch.", + "items": { + "type": "string" + }, + "type": "array" + } + }, + "required": [ + "scopeName", + "operator" + ], + "type": "object" + }, + "io.k8s.api.core.v1.SeccompProfile": { + "description": "SeccompProfile defines a pod/container's seccomp profile settings. Only one profile source may be set.", + "properties": { + "localhostProfile": { + "description": "localhostProfile indicates a profile defined in a file on the node should be used. The profile must be preconfigured on the node to work. Must be a descending path, relative to the kubelet's configured seccomp profile location. Must only be set if type is \"Localhost\".", + "type": "string" + }, + "type": { + "description": "type indicates which kind of seccomp profile will be applied. Valid options are:\n\nLocalhost - a profile defined in a file on the node should be used. RuntimeDefault - the container runtime default profile should be used. Unconfined - no profile should be applied.", + "type": "string" + } + }, + "required": [ + "type" + ], + "type": "object", + "x-kubernetes-unions": [ + { + "discriminator": "type", + "fields-to-discriminateBy": { + "localhostProfile": "LocalhostProfile" + } + } + ] + }, + "io.k8s.api.core.v1.Secret": { + "description": "Secret holds secret data of a certain type. The total bytes of the values in the Data field must be less than MaxSecretSize bytes.", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "data": { + "additionalProperties": { + "format": "byte", + "type": "string" + }, + "description": "Data contains the secret data. Each key must consist of alphanumeric characters, '-', '_' or '.'. The serialized form of the secret data is a base64 encoded string, representing the arbitrary (possibly non-string) data value here. Described in https://tools.ietf.org/html/rfc4648#section-4", + "type": "object" + }, + "immutable": { + "description": "Immutable, if set to true, ensures that data stored in the Secret cannot be updated (only object metadata can be modified). If not set to true, the field can be modified at any time. Defaulted to nil.", + "type": "boolean" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta", + "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata" + }, + "stringData": { + "additionalProperties": { + "type": "string" + }, + "description": "stringData allows specifying non-binary secret data in string form. It is provided as a write-only input field for convenience. All keys and values are merged into the data field on write, overwriting any existing values. The stringData field is never output when reading from the API.", + "type": "object" + }, + "type": { + "description": "Used to facilitate programmatic handling of secret data.", + "type": "string" + } + }, + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "", + "kind": "Secret", + "version": "v1" + } + ] + }, + "io.k8s.api.core.v1.SecretEnvSource": { + "description": "SecretEnvSource selects a Secret to populate the environment variables with.\n\nThe contents of the target Secret's Data field will represent the key-value pairs as environment variables.", + "properties": { + "name": { + "description": "Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + "type": "string" + }, + "optional": { + "description": "Specify whether the Secret must be defined", + "type": "boolean" + } + }, + "type": "object" + }, + "io.k8s.api.core.v1.SecretKeySelector": { + "description": "SecretKeySelector selects a key of a Secret.", + "properties": { + "key": { + "description": "The key of the secret to select from. Must be a valid secret key.", + "type": "string" + }, + "name": { + "description": "Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + "type": "string" + }, + "optional": { + "description": "Specify whether the Secret or its key must be defined", + "type": "boolean" + } + }, + "required": [ + "key" + ], + "type": "object" + }, + "io.k8s.api.core.v1.SecretList": { + "description": "SecretList is a list of Secret.", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "items": { + "description": "Items is a list of secret objects. More info: https://kubernetes.io/docs/concepts/configuration/secret", + "items": { + "$ref": "#/definitions/io.k8s.api.core.v1.Secret" + }, + "type": "array" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta", + "description": "Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds" + } + }, + "required": [ + "items" + ], + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "", + "kind": "SecretList", + "version": "v1" + } + ] + }, + "io.k8s.api.core.v1.SecretProjection": { + "description": "Adapts a secret into a projected volume.\n\nThe contents of the target Secret's Data field will be presented in a projected volume as files using the keys in the Data field as the file names. Note that this is identical to a secret volume source without the default mode.", + "properties": { + "items": { + "description": "If unspecified, each key-value pair in the Data field of the referenced Secret will be projected into the volume as a file whose name is the key and content is the value. If specified, the listed keys will be projected into the specified paths, and unlisted keys will not be present. If a key is specified which is not present in the Secret, the volume setup will error unless it is marked optional. Paths must be relative and may not contain the '..' path or start with '..'.", + "items": { + "$ref": "#/definitions/io.k8s.api.core.v1.KeyToPath" + }, + "type": "array" + }, + "name": { + "description": "Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + "type": "string" + }, + "optional": { + "description": "Specify whether the Secret or its key must be defined", + "type": "boolean" + } + }, + "type": "object" + }, + "io.k8s.api.core.v1.SecretReference": { + "description": "SecretReference represents a Secret Reference. It has enough information to retrieve secret in any namespace", + "properties": { + "name": { + "description": "Name is unique within a namespace to reference a secret resource.", + "type": "string" + }, + "namespace": { + "description": "Namespace defines the space within which the secret name must be unique.", + "type": "string" + } + }, + "type": "object" + }, + "io.k8s.api.core.v1.SecretVolumeSource": { + "description": "Adapts a Secret into a volume.\n\nThe contents of the target Secret's Data field will be presented in a volume as files using the keys in the Data field as the file names. Secret volumes support ownership management and SELinux relabeling.", + "properties": { + "defaultMode": { + "description": "Optional: mode bits used to set permissions on created files by default. Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts both octal and decimal values, JSON requires decimal values for mode bits. Defaults to 0644. Directories within the path are not affected by this setting. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.", + "format": "int32", + "type": "integer" + }, + "items": { + "description": "If unspecified, each key-value pair in the Data field of the referenced Secret will be projected into the volume as a file whose name is the key and content is the value. If specified, the listed keys will be projected into the specified paths, and unlisted keys will not be present. If a key is specified which is not present in the Secret, the volume setup will error unless it is marked optional. Paths must be relative and may not contain the '..' path or start with '..'.", + "items": { + "$ref": "#/definitions/io.k8s.api.core.v1.KeyToPath" + }, + "type": "array" + }, + "optional": { + "description": "Specify whether the Secret or its keys must be defined", + "type": "boolean" + }, + "secretName": { + "description": "Name of the secret in the pod's namespace to use. More info: https://kubernetes.io/docs/concepts/storage/volumes#secret", + "type": "string" + } + }, + "type": "object" + }, + "io.k8s.api.core.v1.SecurityContext": { + "description": "SecurityContext holds security configuration that will be applied to a container. Some fields are present in both SecurityContext and PodSecurityContext. When both are set, the values in SecurityContext take precedence.", + "properties": { + "allowPrivilegeEscalation": { + "description": "AllowPrivilegeEscalation controls whether a process can gain more privileges than its parent process. This bool directly controls if the no_new_privs flag will be set on the container process. AllowPrivilegeEscalation is true always when the container is: 1) run as Privileged 2) has CAP_SYS_ADMIN", + "type": "boolean" + }, + "capabilities": { + "$ref": "#/definitions/io.k8s.api.core.v1.Capabilities", + "description": "The capabilities to add/drop when running containers. Defaults to the default set of capabilities granted by the container runtime." + }, + "privileged": { + "description": "Run container in privileged mode. Processes in privileged containers are essentially equivalent to root on the host. Defaults to false.", + "type": "boolean" + }, + "procMount": { + "description": "procMount denotes the type of proc mount to use for the containers. The default is DefaultProcMount which uses the container runtime defaults for readonly paths and masked paths. This requires the ProcMountType feature flag to be enabled.", + "type": "string" + }, + "readOnlyRootFilesystem": { + "description": "Whether this container has a read-only root filesystem. Default is false.", + "type": "boolean" + }, + "runAsGroup": { + "description": "The GID to run the entrypoint of the container process. Uses runtime default if unset. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.", + "format": "int64", + "type": "integer" + }, + "runAsNonRoot": { + "description": "Indicates that the container must run as a non-root user. If true, the Kubelet will validate the image at runtime to ensure that it does not run as UID 0 (root) and fail to start the container if it does. If unset or false, no such validation will be performed. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.", + "type": "boolean" + }, + "runAsUser": { + "description": "The UID to run the entrypoint of the container process. Defaults to user specified in image metadata if unspecified. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.", + "format": "int64", + "type": "integer" + }, + "seLinuxOptions": { + "$ref": "#/definitions/io.k8s.api.core.v1.SELinuxOptions", + "description": "The SELinux context to be applied to the container. If unspecified, the container runtime will allocate a random SELinux context for each container. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence." + }, + "seccompProfile": { + "$ref": "#/definitions/io.k8s.api.core.v1.SeccompProfile", + "description": "The seccomp options to use by this container. If seccomp options are provided at both the pod \u0026 container level, the container options override the pod options." + }, + "windowsOptions": { + "$ref": "#/definitions/io.k8s.api.core.v1.WindowsSecurityContextOptions", + "description": "The Windows specific settings applied to all containers. If unspecified, the options from the PodSecurityContext will be used. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence." + } + }, + "type": "object" + }, + "io.k8s.api.core.v1.Service": { + "description": "Service is a named abstraction of software service (for example, mysql) consisting of local port (for example 3306) that the proxy listens on, and the selector that determines which pods will answer requests sent through the proxy.", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta", + "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata" + }, + "spec": { + "$ref": "#/definitions/io.k8s.api.core.v1.ServiceSpec", + "description": "Spec defines the behavior of a service. https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status" + }, + "status": { + "$ref": "#/definitions/io.k8s.api.core.v1.ServiceStatus", + "description": "Most recently observed status of the service. Populated by the system. Read-only. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status" + } + }, + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "", + "kind": "Service", + "version": "v1" + } + ] + }, + "io.k8s.api.core.v1.ServiceAccount": { + "description": "ServiceAccount binds together: * a name, understood by users, and perhaps by peripheral systems, for an identity * a principal that can be authenticated and authorized * a set of secrets", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "automountServiceAccountToken": { + "description": "AutomountServiceAccountToken indicates whether pods running as this service account should have an API token automatically mounted. Can be overridden at the pod level.", + "type": "boolean" + }, + "imagePullSecrets": { + "description": "ImagePullSecrets is a list of references to secrets in the same namespace to use for pulling any images in pods that reference this ServiceAccount. ImagePullSecrets are distinct from Secrets because Secrets can be mounted in the pod, but ImagePullSecrets are only accessed by the kubelet. More info: https://kubernetes.io/docs/concepts/containers/images/#specifying-imagepullsecrets-on-a-pod", + "items": { + "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference" + }, + "type": "array" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta", + "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata" + }, + "secrets": { + "description": "Secrets is the list of secrets allowed to be used by pods running using this ServiceAccount. More info: https://kubernetes.io/docs/concepts/configuration/secret", + "items": { + "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference" + }, + "type": "array", + "x-kubernetes-patch-merge-key": "name", + "x-kubernetes-patch-strategy": "merge" + } + }, + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "", + "kind": "ServiceAccount", + "version": "v1" + } + ] + }, + "io.k8s.api.core.v1.ServiceAccountList": { + "description": "ServiceAccountList is a list of ServiceAccount objects", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "items": { + "description": "List of ServiceAccounts. More info: https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/", + "items": { + "$ref": "#/definitions/io.k8s.api.core.v1.ServiceAccount" + }, + "type": "array" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta", + "description": "Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds" + } + }, + "required": [ + "items" + ], + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "", + "kind": "ServiceAccountList", + "version": "v1" + } + ] + }, + "io.k8s.api.core.v1.ServiceAccountTokenProjection": { + "description": "ServiceAccountTokenProjection represents a projected service account token volume. This projection can be used to insert a service account token into the pods runtime filesystem for use against APIs (Kubernetes API Server or otherwise).", + "properties": { + "audience": { + "description": "Audience is the intended audience of the token. A recipient of a token must identify itself with an identifier specified in the audience of the token, and otherwise should reject the token. The audience defaults to the identifier of the apiserver.", + "type": "string" + }, + "expirationSeconds": { + "description": "ExpirationSeconds is the requested duration of validity of the service account token. As the token approaches expiration, the kubelet volume plugin will proactively rotate the service account token. The kubelet will start trying to rotate the token if the token is older than 80 percent of its time to live or if the token is older than 24 hours.Defaults to 1 hour and must be at least 10 minutes.", + "format": "int64", + "type": "integer" + }, + "path": { + "description": "Path is the path relative to the mount point of the file to project the token into.", + "type": "string" + } + }, + "required": [ + "path" + ], + "type": "object" + }, + "io.k8s.api.core.v1.ServiceList": { + "description": "ServiceList holds a list of services.", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "items": { + "description": "List of services", + "items": { + "$ref": "#/definitions/io.k8s.api.core.v1.Service" + }, + "type": "array" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta", + "description": "Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds" + } + }, + "required": [ + "items" + ], + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "", + "kind": "ServiceList", + "version": "v1" + } + ] + }, + "io.k8s.api.core.v1.ServicePort": { + "description": "ServicePort contains information on service's port.", + "properties": { + "appProtocol": { + "description": "The application protocol for this port. This field follows standard Kubernetes label syntax. Un-prefixed names are reserved for IANA standard service names (as per RFC-6335 and http://www.iana.org/assignments/service-names). Non-standard protocols should use prefixed names such as mycompany.com/my-custom-protocol. This is a beta field that is guarded by the ServiceAppProtocol feature gate and enabled by default.", + "type": "string" + }, + "name": { + "description": "The name of this port within the service. This must be a DNS_LABEL. All ports within a ServiceSpec must have unique names. When considering the endpoints for a Service, this must match the 'name' field in the EndpointPort. Optional if only one ServicePort is defined on this service.", + "type": "string" + }, + "nodePort": { + "description": "The port on each node on which this service is exposed when type is NodePort or LoadBalancer. Usually assigned by the system. If a value is specified, in-range, and not in use it will be used, otherwise the operation will fail. If not specified, a port will be allocated if this Service requires one. If this field is specified when creating a Service which does not need it, creation will fail. This field will be wiped when updating a Service to no longer need it (e.g. changing type from NodePort to ClusterIP). More info: https://kubernetes.io/docs/concepts/services-networking/service/#type-nodeport", + "format": "int32", + "type": "integer" + }, + "port": { + "description": "The port that will be exposed by this service.", + "format": "int32", + "type": "integer" + }, + "protocol": { + "description": "The IP protocol for this port. Supports \"TCP\", \"UDP\", and \"SCTP\". Default is TCP.", + "type": "string" + }, + "targetPort": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.util.intstr.IntOrString", + "description": "Number or name of the port to access on the pods targeted by the service. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME. If this is a string, it will be looked up as a named port in the target Pod's container ports. If this is not specified, the value of the 'port' field is used (an identity map). This field is ignored for services with clusterIP=None, and should be omitted or set equal to the 'port' field. More info: https://kubernetes.io/docs/concepts/services-networking/service/#defining-a-service" + } + }, + "required": [ + "port" + ], + "type": "object" + }, + "io.k8s.api.core.v1.ServiceSpec": { + "description": "ServiceSpec describes the attributes that a user creates on a service.", + "properties": { + "allocateLoadBalancerNodePorts": { + "description": "allocateLoadBalancerNodePorts defines if NodePorts will be automatically allocated for services with type LoadBalancer. Default is \"true\". It may be set to \"false\" if the cluster load-balancer does not rely on NodePorts. allocateLoadBalancerNodePorts may only be set for services with type LoadBalancer and will be cleared if the type is changed to any other type. This field is alpha-level and is only honored by servers that enable the ServiceLBNodePortControl feature.", + "type": "boolean" + }, + "clusterIP": { + "description": "clusterIP is the IP address of the service and is usually assigned randomly. If an address is specified manually, is in-range (as per system configuration), and is not in use, it will be allocated to the service; otherwise creation of the service will fail. This field may not be changed through updates unless the type field is also being changed to ExternalName (which requires this field to be blank) or the type field is being changed from ExternalName (in which case this field may optionally be specified, as describe above). Valid values are \"None\", empty string (\"\"), or a valid IP address. Setting this to \"None\" makes a \"headless service\" (no virtual IP), which is useful when direct endpoint connections are preferred and proxying is not required. Only applies to types ClusterIP, NodePort, and LoadBalancer. If this field is specified when creating a Service of type ExternalName, creation will fail. This field will be wiped when updating a Service to type ExternalName. More info: https://kubernetes.io/docs/concepts/services-networking/service/#virtual-ips-and-service-proxies", + "type": "string" + }, + "clusterIPs": { + "description": "ClusterIPs is a list of IP addresses assigned to this service, and are usually assigned randomly. If an address is specified manually, is in-range (as per system configuration), and is not in use, it will be allocated to the service; otherwise creation of the service will fail. This field may not be changed through updates unless the type field is also being changed to ExternalName (which requires this field to be empty) or the type field is being changed from ExternalName (in which case this field may optionally be specified, as describe above). Valid values are \"None\", empty string (\"\"), or a valid IP address. Setting this to \"None\" makes a \"headless service\" (no virtual IP), which is useful when direct endpoint connections are preferred and proxying is not required. Only applies to types ClusterIP, NodePort, and LoadBalancer. If this field is specified when creating a Service of type ExternalName, creation will fail. This field will be wiped when updating a Service to type ExternalName. If this field is not specified, it will be initialized from the clusterIP field. If this field is specified, clients must ensure that clusterIPs[0] and clusterIP have the same value.\n\nUnless the \"IPv6DualStack\" feature gate is enabled, this field is limited to one value, which must be the same as the clusterIP field. If the feature gate is enabled, this field may hold a maximum of two entries (dual-stack IPs, in either order). These IPs must correspond to the values of the ipFamilies field. Both clusterIPs and ipFamilies are governed by the ipFamilyPolicy field. More info: https://kubernetes.io/docs/concepts/services-networking/service/#virtual-ips-and-service-proxies", + "items": { + "type": "string" + }, + "type": "array", + "x-kubernetes-list-type": "atomic" + }, + "externalIPs": { + "description": "externalIPs is a list of IP addresses for which nodes in the cluster will also accept traffic for this service. These IPs are not managed by Kubernetes. The user is responsible for ensuring that traffic arrives at a node with this IP. A common example is external load-balancers that are not part of the Kubernetes system.", + "items": { + "type": "string" + }, + "type": "array" + }, + "externalName": { + "description": "externalName is the external reference that discovery mechanisms will return as an alias for this service (e.g. a DNS CNAME record). No proxying will be involved. Must be a lowercase RFC-1123 hostname (https://tools.ietf.org/html/rfc1123) and requires `type` to be \"ExternalName\".", + "type": "string" + }, + "externalTrafficPolicy": { + "description": "externalTrafficPolicy denotes if this Service desires to route external traffic to node-local or cluster-wide endpoints. \"Local\" preserves the client source IP and avoids a second hop for LoadBalancer and Nodeport type services, but risks potentially imbalanced traffic spreading. \"Cluster\" obscures the client source IP and may cause a second hop to another node, but should have good overall load-spreading.", + "type": "string" + }, + "healthCheckNodePort": { + "description": "healthCheckNodePort specifies the healthcheck nodePort for the service. This only applies when type is set to LoadBalancer and externalTrafficPolicy is set to Local. If a value is specified, is in-range, and is not in use, it will be used. If not specified, a value will be automatically allocated. External systems (e.g. load-balancers) can use this port to determine if a given node holds endpoints for this service or not. If this field is specified when creating a Service which does not need it, creation will fail. This field will be wiped when updating a Service to no longer need it (e.g. changing type).", + "format": "int32", + "type": "integer" + }, + "internalTrafficPolicy": { + "description": "InternalTrafficPolicy specifies if the cluster internal traffic should be routed to all endpoints or node-local endpoints only. \"Cluster\" routes internal traffic to a Service to all endpoints. \"Local\" routes traffic to node-local endpoints only, traffic is dropped if no node-local endpoints are ready. The default value is \"Cluster\".", + "type": "string" + }, + "ipFamilies": { + "description": "IPFamilies is a list of IP families (e.g. IPv4, IPv6) assigned to this service, and is gated by the \"IPv6DualStack\" feature gate. This field is usually assigned automatically based on cluster configuration and the ipFamilyPolicy field. If this field is specified manually, the requested family is available in the cluster, and ipFamilyPolicy allows it, it will be used; otherwise creation of the service will fail. This field is conditionally mutable: it allows for adding or removing a secondary IP family, but it does not allow changing the primary IP family of the Service. Valid values are \"IPv4\" and \"IPv6\". This field only applies to Services of types ClusterIP, NodePort, and LoadBalancer, and does apply to \"headless\" services. This field will be wiped when updating a Service to type ExternalName.\n\nThis field may hold a maximum of two entries (dual-stack families, in either order). These families must correspond to the values of the clusterIPs field, if specified. Both clusterIPs and ipFamilies are governed by the ipFamilyPolicy field.", + "items": { + "type": "string" + }, + "type": "array", + "x-kubernetes-list-type": "atomic" + }, + "ipFamilyPolicy": { + "description": "IPFamilyPolicy represents the dual-stack-ness requested or required by this Service, and is gated by the \"IPv6DualStack\" feature gate. If there is no value provided, then this field will be set to SingleStack. Services can be \"SingleStack\" (a single IP family), \"PreferDualStack\" (two IP families on dual-stack configured clusters or a single IP family on single-stack clusters), or \"RequireDualStack\" (two IP families on dual-stack configured clusters, otherwise fail). The ipFamilies and clusterIPs fields depend on the value of this field. This field will be wiped when updating a service to type ExternalName.", + "type": "string" + }, + "loadBalancerClass": { + "description": "loadBalancerClass is the class of the load balancer implementation this Service belongs to. If specified, the value of this field must be a label-style identifier, with an optional prefix, e.g. \"internal-vip\" or \"example.com/internal-vip\". Unprefixed names are reserved for end-users. This field can only be set when the Service type is 'LoadBalancer'. If not set, the default load balancer implementation is used, today this is typically done through the cloud provider integration, but should apply for any default implementation. If set, it is assumed that a load balancer implementation is watching for Services with a matching class. Any default load balancer implementation (e.g. cloud providers) should ignore Services that set this field. This field can only be set when creating or updating a Service to type 'LoadBalancer'. Once set, it can not be changed. This field will be wiped when a service is updated to a non 'LoadBalancer' type.", + "type": "string" + }, + "loadBalancerIP": { + "description": "Only applies to Service Type: LoadBalancer LoadBalancer will get created with the IP specified in this field. This feature depends on whether the underlying cloud-provider supports specifying the loadBalancerIP when a load balancer is created. This field will be ignored if the cloud-provider does not support the feature.", + "type": "string" + }, + "loadBalancerSourceRanges": { + "description": "If specified and supported by the platform, this will restrict traffic through the cloud-provider load-balancer will be restricted to the specified client IPs. This field will be ignored if the cloud-provider does not support the feature.\" More info: https://kubernetes.io/docs/tasks/access-application-cluster/configure-cloud-provider-firewall/", + "items": { + "type": "string" + }, + "type": "array" + }, + "ports": { + "description": "The list of ports that are exposed by this service. More info: https://kubernetes.io/docs/concepts/services-networking/service/#virtual-ips-and-service-proxies", + "items": { + "$ref": "#/definitions/io.k8s.api.core.v1.ServicePort" + }, + "type": "array", + "x-kubernetes-list-map-keys": [ + "port", + "protocol" + ], + "x-kubernetes-list-type": "map", + "x-kubernetes-patch-merge-key": "port", + "x-kubernetes-patch-strategy": "merge" + }, + "publishNotReadyAddresses": { + "description": "publishNotReadyAddresses indicates that any agent which deals with endpoints for this Service should disregard any indications of ready/not-ready. The primary use case for setting this field is for a StatefulSet's Headless Service to propagate SRV DNS records for its Pods for the purpose of peer discovery. The Kubernetes controllers that generate Endpoints and EndpointSlice resources for Services interpret this to mean that all endpoints are considered \"ready\" even if the Pods themselves are not. Agents which consume only Kubernetes generated endpoints through the Endpoints or EndpointSlice resources can safely assume this behavior.", + "type": "boolean" + }, + "selector": { + "additionalProperties": { + "type": "string" + }, + "description": "Route service traffic to pods with label keys and values matching this selector. If empty or not present, the service is assumed to have an external process managing its endpoints, which Kubernetes will not modify. Only applies to types ClusterIP, NodePort, and LoadBalancer. Ignored if type is ExternalName. More info: https://kubernetes.io/docs/concepts/services-networking/service/", + "type": "object" + }, + "sessionAffinity": { + "description": "Supports \"ClientIP\" and \"None\". Used to maintain session affinity. Enable client IP based session affinity. Must be ClientIP or None. Defaults to None. More info: https://kubernetes.io/docs/concepts/services-networking/service/#virtual-ips-and-service-proxies", + "type": "string" + }, + "sessionAffinityConfig": { + "$ref": "#/definitions/io.k8s.api.core.v1.SessionAffinityConfig", + "description": "sessionAffinityConfig contains the configurations of session affinity." + }, + "topologyKeys": { + "description": "topologyKeys is a preference-order list of topology keys which implementations of services should use to preferentially sort endpoints when accessing this Service, it can not be used at the same time as externalTrafficPolicy=Local. Topology keys must be valid label keys and at most 16 keys may be specified. Endpoints are chosen based on the first topology key with available backends. If this field is specified and all entries have no backends that match the topology of the client, the service has no backends for that client and connections should fail. The special value \"*\" may be used to mean \"any topology\". This catch-all value, if used, only makes sense as the last value in the list. If this is not specified or empty, no topology constraints will be applied. This field is alpha-level and is only honored by servers that enable the ServiceTopology feature. This field is deprecated and will be removed in a future version.", + "items": { + "type": "string" + }, + "type": "array" + }, + "type": { + "description": "type determines how the Service is exposed. Defaults to ClusterIP. Valid options are ExternalName, ClusterIP, NodePort, and LoadBalancer. \"ClusterIP\" allocates a cluster-internal IP address for load-balancing to endpoints. Endpoints are determined by the selector or if that is not specified, by manual construction of an Endpoints object or EndpointSlice objects. If clusterIP is \"None\", no virtual IP is allocated and the endpoints are published as a set of endpoints rather than a virtual IP. \"NodePort\" builds on ClusterIP and allocates a port on every node which routes to the same endpoints as the clusterIP. \"LoadBalancer\" builds on NodePort and creates an external load-balancer (if supported in the current cloud) which routes to the same endpoints as the clusterIP. \"ExternalName\" aliases this service to the specified externalName. Several other fields do not apply to ExternalName services. More info: https://kubernetes.io/docs/concepts/services-networking/service/#publishing-services-service-types", + "type": "string" + } + }, + "type": "object" + }, + "io.k8s.api.core.v1.ServiceStatus": { + "description": "ServiceStatus represents the current status of a service.", + "properties": { + "conditions": { + "description": "Current service state", + "items": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition" + }, + "type": "array", + "x-kubernetes-list-map-keys": [ + "type" + ], + "x-kubernetes-list-type": "map", + "x-kubernetes-patch-merge-key": "type", + "x-kubernetes-patch-strategy": "merge" + }, + "loadBalancer": { + "$ref": "#/definitions/io.k8s.api.core.v1.LoadBalancerStatus", + "description": "LoadBalancer contains the current status of the load-balancer, if one is present." + } + }, + "type": "object" + }, + "io.k8s.api.core.v1.SessionAffinityConfig": { + "description": "SessionAffinityConfig represents the configurations of session affinity.", + "properties": { + "clientIP": { + "$ref": "#/definitions/io.k8s.api.core.v1.ClientIPConfig", + "description": "clientIP contains the configurations of Client IP based session affinity." + } + }, + "type": "object" + }, + "io.k8s.api.core.v1.StorageOSPersistentVolumeSource": { + "description": "Represents a StorageOS persistent volume resource.", + "properties": { + "fsType": { + "description": "Filesystem type to mount. Must be a filesystem type supported by the host operating system. Ex. \"ext4\", \"xfs\", \"ntfs\". Implicitly inferred to be \"ext4\" if unspecified.", + "type": "string" + }, + "readOnly": { + "description": "Defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts.", + "type": "boolean" + }, + "secretRef": { + "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference", + "description": "SecretRef specifies the secret to use for obtaining the StorageOS API credentials. If not specified, default values will be attempted." + }, + "volumeName": { + "description": "VolumeName is the human-readable name of the StorageOS volume. Volume names are only unique within a namespace.", + "type": "string" + }, + "volumeNamespace": { + "description": "VolumeNamespace specifies the scope of the volume within StorageOS. If no namespace is specified then the Pod's namespace will be used. This allows the Kubernetes name scoping to be mirrored within StorageOS for tighter integration. Set VolumeName to any name to override the default behaviour. Set to \"default\" if you are not using namespaces within StorageOS. Namespaces that do not pre-exist within StorageOS will be created.", + "type": "string" + } + }, + "type": "object" + }, + "io.k8s.api.core.v1.StorageOSVolumeSource": { + "description": "Represents a StorageOS persistent volume resource.", + "properties": { + "fsType": { + "description": "Filesystem type to mount. Must be a filesystem type supported by the host operating system. Ex. \"ext4\", \"xfs\", \"ntfs\". Implicitly inferred to be \"ext4\" if unspecified.", + "type": "string" + }, + "readOnly": { + "description": "Defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts.", + "type": "boolean" + }, + "secretRef": { + "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference", + "description": "SecretRef specifies the secret to use for obtaining the StorageOS API credentials. If not specified, default values will be attempted." + }, + "volumeName": { + "description": "VolumeName is the human-readable name of the StorageOS volume. Volume names are only unique within a namespace.", + "type": "string" + }, + "volumeNamespace": { + "description": "VolumeNamespace specifies the scope of the volume within StorageOS. If no namespace is specified then the Pod's namespace will be used. This allows the Kubernetes name scoping to be mirrored within StorageOS for tighter integration. Set VolumeName to any name to override the default behaviour. Set to \"default\" if you are not using namespaces within StorageOS. Namespaces that do not pre-exist within StorageOS will be created.", + "type": "string" + } + }, + "type": "object" + }, + "io.k8s.api.core.v1.Sysctl": { + "description": "Sysctl defines a kernel parameter to be set", + "properties": { + "name": { + "description": "Name of a property to set", + "type": "string" + }, + "value": { + "description": "Value of a property to set", + "type": "string" + } + }, + "required": [ + "name", + "value" + ], + "type": "object" + }, + "io.k8s.api.core.v1.TCPSocketAction": { + "description": "TCPSocketAction describes an action based on opening a socket", + "properties": { + "host": { + "description": "Optional: Host name to connect to, defaults to the pod IP.", + "type": "string" + }, + "port": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.util.intstr.IntOrString", + "description": "Number or name of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME." + } + }, + "required": [ + "port" + ], + "type": "object" + }, + "io.k8s.api.core.v1.Taint": { + "description": "The node this Taint is attached to has the \"effect\" on any pod that does not tolerate the Taint.", + "properties": { + "effect": { + "description": "Required. The effect of the taint on pods that do not tolerate the taint. Valid effects are NoSchedule, PreferNoSchedule and NoExecute.", + "type": "string" + }, + "key": { + "description": "Required. The taint key to be applied to a node.", + "type": "string" + }, + "timeAdded": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time", + "description": "TimeAdded represents the time at which the taint was added. It is only written for NoExecute taints." + }, + "value": { + "description": "The taint value corresponding to the taint key.", + "type": "string" + } + }, + "required": [ + "key", + "effect" + ], + "type": "object" + }, + "io.k8s.api.core.v1.Toleration": { + "description": "The pod this Toleration is attached to tolerates any taint that matches the triple \u003ckey,value,effect\u003e using the matching operator \u003coperator\u003e.", + "properties": { + "effect": { + "description": "Effect indicates the taint effect to match. Empty means match all taint effects. When specified, allowed values are NoSchedule, PreferNoSchedule and NoExecute.", + "type": "string" + }, + "key": { + "description": "Key is the taint key that the toleration applies to. Empty means match all taint keys. If the key is empty, operator must be Exists; this combination means to match all values and all keys.", + "type": "string" + }, + "operator": { + "description": "Operator represents a key's relationship to the value. Valid operators are Exists and Equal. Defaults to Equal. Exists is equivalent to wildcard for value, so that a pod can tolerate all taints of a particular category.", + "type": "string" + }, + "tolerationSeconds": { + "description": "TolerationSeconds represents the period of time the toleration (which must be of effect NoExecute, otherwise this field is ignored) tolerates the taint. By default, it is not set, which means tolerate the taint forever (do not evict). Zero and negative values will be treated as 0 (evict immediately) by the system.", + "format": "int64", + "type": "integer" + }, + "value": { + "description": "Value is the taint value the toleration matches to. If the operator is Exists, the value should be empty, otherwise just a regular string.", + "type": "string" + } + }, + "type": "object" + }, + "io.k8s.api.core.v1.TopologySelectorLabelRequirement": { + "description": "A topology selector requirement is a selector that matches given label. This is an alpha feature and may change in the future.", + "properties": { + "key": { + "description": "The label key that the selector applies to.", + "type": "string" + }, + "values": { + "description": "An array of string values. One value must match the label to be selected. Each entry in Values is ORed.", + "items": { + "type": "string" + }, + "type": "array" + } + }, + "required": [ + "key", + "values" + ], + "type": "object" + }, + "io.k8s.api.core.v1.TopologySelectorTerm": { + "description": "A topology selector term represents the result of label queries. A null or empty topology selector term matches no objects. The requirements of them are ANDed. It provides a subset of functionality as NodeSelectorTerm. This is an alpha feature and may change in the future.", + "properties": { + "matchLabelExpressions": { + "description": "A list of topology selector requirements by labels.", + "items": { + "$ref": "#/definitions/io.k8s.api.core.v1.TopologySelectorLabelRequirement" + }, + "type": "array" + } + }, + "type": "object" + }, + "io.k8s.api.core.v1.TopologySpreadConstraint": { + "description": "TopologySpreadConstraint specifies how to spread matching pods among the given topology.", + "properties": { + "labelSelector": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector", + "description": "LabelSelector is used to find matching pods. Pods that match this label selector are counted to determine the number of pods in their corresponding topology domain." + }, + "maxSkew": { + "description": "MaxSkew describes the degree to which pods may be unevenly distributed. When `whenUnsatisfiable=DoNotSchedule`, it is the maximum permitted difference between the number of matching pods in the target topology and the global minimum. For example, in a 3-zone cluster, MaxSkew is set to 1, and pods with the same labelSelector spread as 1/1/0: | zone1 | zone2 | zone3 | | P | P | | - if MaxSkew is 1, incoming pod can only be scheduled to zone3 to become 1/1/1; scheduling it onto zone1(zone2) would make the ActualSkew(2-0) on zone1(zone2) violate MaxSkew(1). - if MaxSkew is 2, incoming pod can be scheduled onto any zone. When `whenUnsatisfiable=ScheduleAnyway`, it is used to give higher precedence to topologies that satisfy it. It's a required field. Default value is 1 and 0 is not allowed.", + "format": "int32", + "type": "integer" + }, + "topologyKey": { + "description": "TopologyKey is the key of node labels. Nodes that have a label with this key and identical values are considered to be in the same topology. We consider each \u003ckey, value\u003e as a \"bucket\", and try to put balanced number of pods into each bucket. It's a required field.", + "type": "string" + }, + "whenUnsatisfiable": { + "description": "WhenUnsatisfiable indicates how to deal with a pod if it doesn't satisfy the spread constraint. - DoNotSchedule (default) tells the scheduler not to schedule it. - ScheduleAnyway tells the scheduler to schedule the pod in any location,\n but giving higher precedence to topologies that would help reduce the\n skew.\nA constraint is considered \"Unsatisfiable\" for an incoming pod if and only if every possible node assigment for that pod would violate \"MaxSkew\" on some topology. For example, in a 3-zone cluster, MaxSkew is set to 1, and pods with the same labelSelector spread as 3/1/1: | zone1 | zone2 | zone3 | | P P P | P | P | If WhenUnsatisfiable is set to DoNotSchedule, incoming pod can only be scheduled to zone2(zone3) to become 3/2/1(3/1/2) as ActualSkew(2-1) on zone2(zone3) satisfies MaxSkew(1). In other words, the cluster can still be imbalanced, but scheduler won't make it *more* imbalanced. It's a required field.", + "type": "string" + } + }, + "required": [ + "maxSkew", + "topologyKey", + "whenUnsatisfiable" + ], + "type": "object" + }, + "io.k8s.api.core.v1.TypedLocalObjectReference": { + "description": "TypedLocalObjectReference contains enough information to let you locate the typed referenced object inside the same namespace.", + "properties": { + "apiGroup": { + "description": "APIGroup is the group for the resource being referenced. If APIGroup is not specified, the specified Kind must be in the core API group. For any other third-party types, APIGroup is required.", + "type": "string" + }, + "kind": { + "description": "Kind is the type of resource being referenced", + "type": "string" + }, + "name": { + "description": "Name is the name of resource being referenced", + "type": "string" + } + }, + "required": [ + "kind", + "name" + ], + "type": "object" + }, + "io.k8s.api.core.v1.Volume": { + "description": "Volume represents a named volume in a pod that may be accessed by any container in the pod.", + "properties": { + "awsElasticBlockStore": { + "$ref": "#/definitions/io.k8s.api.core.v1.AWSElasticBlockStoreVolumeSource", + "description": "AWSElasticBlockStore represents an AWS Disk resource that is attached to a kubelet's host machine and then exposed to the pod. More info: https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore" + }, + "azureDisk": { + "$ref": "#/definitions/io.k8s.api.core.v1.AzureDiskVolumeSource", + "description": "AzureDisk represents an Azure Data Disk mount on the host and bind mount to the pod." + }, + "azureFile": { + "$ref": "#/definitions/io.k8s.api.core.v1.AzureFileVolumeSource", + "description": "AzureFile represents an Azure File Service mount on the host and bind mount to the pod." + }, + "cephfs": { + "$ref": "#/definitions/io.k8s.api.core.v1.CephFSVolumeSource", + "description": "CephFS represents a Ceph FS mount on the host that shares a pod's lifetime" + }, + "cinder": { + "$ref": "#/definitions/io.k8s.api.core.v1.CinderVolumeSource", + "description": "Cinder represents a cinder volume attached and mounted on kubelets host machine. More info: https://examples.k8s.io/mysql-cinder-pd/README.md" + }, + "configMap": { + "$ref": "#/definitions/io.k8s.api.core.v1.ConfigMapVolumeSource", + "description": "ConfigMap represents a configMap that should populate this volume" + }, + "csi": { + "$ref": "#/definitions/io.k8s.api.core.v1.CSIVolumeSource", + "description": "CSI (Container Storage Interface) represents ephemeral storage that is handled by certain external CSI drivers (Beta feature)." + }, + "downwardAPI": { + "$ref": "#/definitions/io.k8s.api.core.v1.DownwardAPIVolumeSource", + "description": "DownwardAPI represents downward API about the pod that should populate this volume" + }, + "emptyDir": { + "$ref": "#/definitions/io.k8s.api.core.v1.EmptyDirVolumeSource", + "description": "EmptyDir represents a temporary directory that shares a pod's lifetime. More info: https://kubernetes.io/docs/concepts/storage/volumes#emptydir" + }, + "ephemeral": { + "$ref": "#/definitions/io.k8s.api.core.v1.EphemeralVolumeSource", + "description": "Ephemeral represents a volume that is handled by a cluster storage driver. The volume's lifecycle is tied to the pod that defines it - it will be created before the pod starts, and deleted when the pod is removed.\n\nUse this if: a) the volume is only needed while the pod runs, b) features of normal volumes like restoring from snapshot or capacity\n tracking are needed,\nc) the storage driver is specified through a storage class, and d) the storage driver supports dynamic volume provisioning through\n a PersistentVolumeClaim (see EphemeralVolumeSource for more\n information on the connection between this volume type\n and PersistentVolumeClaim).\n\nUse PersistentVolumeClaim or one of the vendor-specific APIs for volumes that persist for longer than the lifecycle of an individual pod.\n\nUse CSI for light-weight local ephemeral volumes if the CSI driver is meant to be used that way - see the documentation of the driver for more information.\n\nA pod can use both types of ephemeral volumes and persistent volumes at the same time.\n\nThis is a beta feature and only available when the GenericEphemeralVolume feature gate is enabled." + }, + "fc": { + "$ref": "#/definitions/io.k8s.api.core.v1.FCVolumeSource", + "description": "FC represents a Fibre Channel resource that is attached to a kubelet's host machine and then exposed to the pod." + }, + "flexVolume": { + "$ref": "#/definitions/io.k8s.api.core.v1.FlexVolumeSource", + "description": "FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin." + }, + "flocker": { + "$ref": "#/definitions/io.k8s.api.core.v1.FlockerVolumeSource", + "description": "Flocker represents a Flocker volume attached to a kubelet's host machine. This depends on the Flocker control service being running" + }, + "gcePersistentDisk": { + "$ref": "#/definitions/io.k8s.api.core.v1.GCEPersistentDiskVolumeSource", + "description": "GCEPersistentDisk represents a GCE Disk resource that is attached to a kubelet's host machine and then exposed to the pod. More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk" + }, + "gitRepo": { + "$ref": "#/definitions/io.k8s.api.core.v1.GitRepoVolumeSource", + "description": "GitRepo represents a git repository at a particular revision. DEPRECATED: GitRepo is deprecated. To provision a container with a git repo, mount an EmptyDir into an InitContainer that clones the repo using git, then mount the EmptyDir into the Pod's container." + }, + "glusterfs": { + "$ref": "#/definitions/io.k8s.api.core.v1.GlusterfsVolumeSource", + "description": "Glusterfs represents a Glusterfs mount on the host that shares a pod's lifetime. More info: https://examples.k8s.io/volumes/glusterfs/README.md" + }, + "hostPath": { + "$ref": "#/definitions/io.k8s.api.core.v1.HostPathVolumeSource", + "description": "HostPath represents a pre-existing file or directory on the host machine that is directly exposed to the container. This is generally used for system agents or other privileged things that are allowed to see the host machine. Most containers will NOT need this. More info: https://kubernetes.io/docs/concepts/storage/volumes#hostpath" + }, + "iscsi": { + "$ref": "#/definitions/io.k8s.api.core.v1.ISCSIVolumeSource", + "description": "ISCSI represents an ISCSI Disk resource that is attached to a kubelet's host machine and then exposed to the pod. More info: https://examples.k8s.io/volumes/iscsi/README.md" + }, + "name": { + "description": "Volume's name. Must be a DNS_LABEL and unique within the pod. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + "type": "string" + }, + "nfs": { + "$ref": "#/definitions/io.k8s.api.core.v1.NFSVolumeSource", + "description": "NFS represents an NFS mount on the host that shares a pod's lifetime More info: https://kubernetes.io/docs/concepts/storage/volumes#nfs" + }, + "persistentVolumeClaim": { + "$ref": "#/definitions/io.k8s.api.core.v1.PersistentVolumeClaimVolumeSource", + "description": "PersistentVolumeClaimVolumeSource represents a reference to a PersistentVolumeClaim in the same namespace. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#persistentvolumeclaims" + }, + "photonPersistentDisk": { + "$ref": "#/definitions/io.k8s.api.core.v1.PhotonPersistentDiskVolumeSource", + "description": "PhotonPersistentDisk represents a PhotonController persistent disk attached and mounted on kubelets host machine" + }, + "portworxVolume": { + "$ref": "#/definitions/io.k8s.api.core.v1.PortworxVolumeSource", + "description": "PortworxVolume represents a portworx volume attached and mounted on kubelets host machine" + }, + "projected": { + "$ref": "#/definitions/io.k8s.api.core.v1.ProjectedVolumeSource", + "description": "Items for all in one resources secrets, configmaps, and downward API" + }, + "quobyte": { + "$ref": "#/definitions/io.k8s.api.core.v1.QuobyteVolumeSource", + "description": "Quobyte represents a Quobyte mount on the host that shares a pod's lifetime" + }, + "rbd": { + "$ref": "#/definitions/io.k8s.api.core.v1.RBDVolumeSource", + "description": "RBD represents a Rados Block Device mount on the host that shares a pod's lifetime. More info: https://examples.k8s.io/volumes/rbd/README.md" + }, + "scaleIO": { + "$ref": "#/definitions/io.k8s.api.core.v1.ScaleIOVolumeSource", + "description": "ScaleIO represents a ScaleIO persistent volume attached and mounted on Kubernetes nodes." + }, + "secret": { + "$ref": "#/definitions/io.k8s.api.core.v1.SecretVolumeSource", + "description": "Secret represents a secret that should populate this volume. More info: https://kubernetes.io/docs/concepts/storage/volumes#secret" + }, + "storageos": { + "$ref": "#/definitions/io.k8s.api.core.v1.StorageOSVolumeSource", + "description": "StorageOS represents a StorageOS volume attached and mounted on Kubernetes nodes." + }, + "vsphereVolume": { + "$ref": "#/definitions/io.k8s.api.core.v1.VsphereVirtualDiskVolumeSource", + "description": "VsphereVolume represents a vSphere volume attached and mounted on kubelets host machine" + } + }, + "required": [ + "name" + ], + "type": "object" + }, + "io.k8s.api.core.v1.VolumeDevice": { + "description": "volumeDevice describes a mapping of a raw block device within a container.", + "properties": { + "devicePath": { + "description": "devicePath is the path inside of the container that the device will be mapped to.", + "type": "string" + }, + "name": { + "description": "name must match the name of a persistentVolumeClaim in the pod", + "type": "string" + } + }, + "required": [ + "name", + "devicePath" + ], + "type": "object" + }, + "io.k8s.api.core.v1.VolumeMount": { + "description": "VolumeMount describes a mounting of a Volume within a container.", + "properties": { + "mountPath": { + "description": "Path within the container at which the volume should be mounted. Must not contain ':'.", + "type": "string" + }, + "mountPropagation": { + "description": "mountPropagation determines how mounts are propagated from the host to container and the other way around. When not set, MountPropagationNone is used. This field is beta in 1.10.", + "type": "string" + }, + "name": { + "description": "This must match the Name of a Volume.", + "type": "string" + }, + "readOnly": { + "description": "Mounted read-only if true, read-write otherwise (false or unspecified). Defaults to false.", + "type": "boolean" + }, + "subPath": { + "description": "Path within the volume from which the container's volume should be mounted. Defaults to \"\" (volume's root).", + "type": "string" + }, + "subPathExpr": { + "description": "Expanded path within the volume from which the container's volume should be mounted. Behaves similarly to SubPath but environment variable references $(VAR_NAME) are expanded using the container's environment. Defaults to \"\" (volume's root). SubPathExpr and SubPath are mutually exclusive.", + "type": "string" + } + }, + "required": [ + "name", + "mountPath" + ], + "type": "object" + }, + "io.k8s.api.core.v1.VolumeNodeAffinity": { + "description": "VolumeNodeAffinity defines constraints that limit what nodes this volume can be accessed from.", + "properties": { + "required": { + "$ref": "#/definitions/io.k8s.api.core.v1.NodeSelector", + "description": "Required specifies hard node constraints that must be met." + } + }, + "type": "object" + }, + "io.k8s.api.core.v1.VolumeProjection": { + "description": "Projection that may be projected along with other supported volume types", + "properties": { + "configMap": { + "$ref": "#/definitions/io.k8s.api.core.v1.ConfigMapProjection", + "description": "information about the configMap data to project" + }, + "downwardAPI": { + "$ref": "#/definitions/io.k8s.api.core.v1.DownwardAPIProjection", + "description": "information about the downwardAPI data to project" + }, + "secret": { + "$ref": "#/definitions/io.k8s.api.core.v1.SecretProjection", + "description": "information about the secret data to project" + }, + "serviceAccountToken": { + "$ref": "#/definitions/io.k8s.api.core.v1.ServiceAccountTokenProjection", + "description": "information about the serviceAccountToken data to project" + } + }, + "type": "object" + }, + "io.k8s.api.core.v1.VsphereVirtualDiskVolumeSource": { + "description": "Represents a vSphere volume resource.", + "properties": { + "fsType": { + "description": "Filesystem type to mount. Must be a filesystem type supported by the host operating system. Ex. \"ext4\", \"xfs\", \"ntfs\". Implicitly inferred to be \"ext4\" if unspecified.", + "type": "string" + }, + "storagePolicyID": { + "description": "Storage Policy Based Management (SPBM) profile ID associated with the StoragePolicyName.", + "type": "string" + }, + "storagePolicyName": { + "description": "Storage Policy Based Management (SPBM) profile name.", + "type": "string" + }, + "volumePath": { + "description": "Path that identifies vSphere volume vmdk", + "type": "string" + } + }, + "required": [ + "volumePath" + ], + "type": "object" + }, + "io.k8s.api.core.v1.WeightedPodAffinityTerm": { + "description": "The weights of all of the matched WeightedPodAffinityTerm fields are added per-node to find the most preferred node(s)", + "properties": { + "podAffinityTerm": { + "$ref": "#/definitions/io.k8s.api.core.v1.PodAffinityTerm", + "description": "Required. A pod affinity term, associated with the corresponding weight." + }, + "weight": { + "description": "weight associated with matching the corresponding podAffinityTerm, in the range 1-100.", + "format": "int32", + "type": "integer" + } + }, + "required": [ + "weight", + "podAffinityTerm" + ], + "type": "object" + }, + "io.k8s.api.core.v1.WindowsSecurityContextOptions": { + "description": "WindowsSecurityContextOptions contain Windows-specific options and credentials.", + "properties": { + "gmsaCredentialSpec": { + "description": "GMSACredentialSpec is where the GMSA admission webhook (https://github.com/kubernetes-sigs/windows-gmsa) inlines the contents of the GMSA credential spec named by the GMSACredentialSpecName field.", + "type": "string" + }, + "gmsaCredentialSpecName": { + "description": "GMSACredentialSpecName is the name of the GMSA credential spec to use.", + "type": "string" + }, + "runAsUserName": { + "description": "The UserName in Windows to run the entrypoint of the container process. Defaults to the user specified in image metadata if unspecified. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.", + "type": "string" + } + }, + "type": "object" + }, + "io.k8s.api.discovery.v1.Endpoint": { + "description": "Endpoint represents a single logical \"backend\" implementing a service.", + "properties": { + "addresses": { + "description": "addresses of this endpoint. The contents of this field are interpreted according to the corresponding EndpointSlice addressType field. Consumers must handle different types of addresses in the context of their own capabilities. This must contain at least one address but no more than 100.", + "items": { + "type": "string" + }, + "type": "array", + "x-kubernetes-list-type": "set" + }, + "conditions": { + "$ref": "#/definitions/io.k8s.api.discovery.v1.EndpointConditions", + "description": "conditions contains information about the current status of the endpoint." + }, + "deprecatedTopology": { + "additionalProperties": { + "type": "string" + }, + "description": "deprecatedTopology contains topology information part of the v1beta1 API. This field is deprecated, and will be removed when the v1beta1 API is removed (no sooner than kubernetes v1.24). While this field can hold values, it is not writable through the v1 API, and any attempts to write to it will be silently ignored. Topology information can be found in the zone and nodeName fields instead.", + "type": "object" + }, + "hints": { + "$ref": "#/definitions/io.k8s.api.discovery.v1.EndpointHints", + "description": "hints contains information associated with how an endpoint should be consumed." + }, + "hostname": { + "description": "hostname of this endpoint. This field may be used by consumers of endpoints to distinguish endpoints from each other (e.g. in DNS names). Multiple endpoints which use the same hostname should be considered fungible (e.g. multiple A values in DNS). Must be lowercase and pass DNS Label (RFC 1123) validation.", + "type": "string" + }, + "nodeName": { + "description": "nodeName represents the name of the Node hosting this endpoint. This can be used to determine endpoints local to a Node. This field can be enabled with the EndpointSliceNodeName feature gate.", + "type": "string" + }, + "targetRef": { + "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference", + "description": "targetRef is a reference to a Kubernetes object that represents this endpoint." + }, + "zone": { + "description": "zone is the name of the Zone this endpoint exists in.", + "type": "string" + } + }, + "required": [ + "addresses" + ], + "type": "object" + }, + "io.k8s.api.discovery.v1.EndpointConditions": { + "description": "EndpointConditions represents the current condition of an endpoint.", + "properties": { + "ready": { + "description": "ready indicates that this endpoint is prepared to receive traffic, according to whatever system is managing the endpoint. A nil value indicates an unknown state. In most cases consumers should interpret this unknown state as ready. For compatibility reasons, ready should never be \"true\" for terminating endpoints.", + "type": "boolean" + }, + "serving": { + "description": "serving is identical to ready except that it is set regardless of the terminating state of endpoints. This condition should be set to true for a ready endpoint that is terminating. If nil, consumers should defer to the ready condition. This field can be enabled with the EndpointSliceTerminatingCondition feature gate.", + "type": "boolean" + }, + "terminating": { + "description": "terminating indicates that this endpoint is terminating. A nil value indicates an unknown state. Consumers should interpret this unknown state to mean that the endpoint is not terminating. This field can be enabled with the EndpointSliceTerminatingCondition feature gate.", + "type": "boolean" + } + }, + "type": "object" + }, + "io.k8s.api.discovery.v1.EndpointHints": { + "description": "EndpointHints provides hints describing how an endpoint should be consumed.", + "properties": { + "forZones": { + "description": "forZones indicates the zone(s) this endpoint should be consumed by to enable topology aware routing.", + "items": { + "$ref": "#/definitions/io.k8s.api.discovery.v1.ForZone" + }, + "type": "array", + "x-kubernetes-list-type": "atomic" + } + }, + "type": "object" + }, + "io.k8s.api.discovery.v1.EndpointPort": { + "description": "EndpointPort represents a Port used by an EndpointSlice", + "properties": { + "appProtocol": { + "description": "The application protocol for this port. This field follows standard Kubernetes label syntax. Un-prefixed names are reserved for IANA standard service names (as per RFC-6335 and http://www.iana.org/assignments/service-names). Non-standard protocols should use prefixed names such as mycompany.com/my-custom-protocol.", + "type": "string" + }, + "name": { + "description": "The name of this port. All ports in an EndpointSlice must have a unique name. If the EndpointSlice is dervied from a Kubernetes service, this corresponds to the Service.ports[].name. Name must either be an empty string or pass DNS_LABEL validation: * must be no more than 63 characters long. * must consist of lower case alphanumeric characters or '-'. * must start and end with an alphanumeric character. Default is empty string.", + "type": "string" + }, + "port": { + "description": "The port number of the endpoint. If this is not specified, ports are not restricted and must be interpreted in the context of the specific consumer.", + "format": "int32", + "type": "integer" + }, + "protocol": { + "description": "The IP protocol for this port. Must be UDP, TCP, or SCTP. Default is TCP.", + "type": "string" + } + }, + "type": "object" + }, + "io.k8s.api.discovery.v1.EndpointSlice": { + "description": "EndpointSlice represents a subset of the endpoints that implement a service. For a given service there may be multiple EndpointSlice objects, selected by labels, which must be joined to produce the full set of endpoints.", + "properties": { + "addressType": { + "description": "addressType specifies the type of address carried by this EndpointSlice. All addresses in this slice must be the same type. This field is immutable after creation. The following address types are currently supported: * IPv4: Represents an IPv4 Address. * IPv6: Represents an IPv6 Address. * FQDN: Represents a Fully Qualified Domain Name.", + "type": "string" + }, + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "endpoints": { + "description": "endpoints is a list of unique endpoints in this slice. Each slice may include a maximum of 1000 endpoints.", + "items": { + "$ref": "#/definitions/io.k8s.api.discovery.v1.Endpoint" + }, + "type": "array", + "x-kubernetes-list-type": "atomic" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta", + "description": "Standard object's metadata." + }, + "ports": { + "description": "ports specifies the list of network ports exposed by each endpoint in this slice. Each port must have a unique name. When ports is empty, it indicates that there are no defined ports. When a port is defined with a nil port value, it indicates \"all ports\". Each slice may include a maximum of 100 ports.", + "items": { + "$ref": "#/definitions/io.k8s.api.discovery.v1.EndpointPort" + }, + "type": "array", + "x-kubernetes-list-type": "atomic" + } + }, + "required": [ + "addressType", + "endpoints" + ], + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "discovery.k8s.io", + "kind": "EndpointSlice", + "version": "v1" + } + ] + }, + "io.k8s.api.discovery.v1.EndpointSliceList": { + "description": "EndpointSliceList represents a list of endpoint slices", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "items": { + "description": "List of endpoint slices", + "items": { + "$ref": "#/definitions/io.k8s.api.discovery.v1.EndpointSlice" + }, + "type": "array" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta", + "description": "Standard list metadata." + } + }, + "required": [ + "items" + ], + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "discovery.k8s.io", + "kind": "EndpointSliceList", + "version": "v1" + } + ] + }, + "io.k8s.api.discovery.v1.ForZone": { + "description": "ForZone provides information about which zones should consume this endpoint.", + "properties": { + "name": { + "description": "name represents the name of the zone.", + "type": "string" + } + }, + "required": [ + "name" + ], + "type": "object" + }, + "io.k8s.api.discovery.v1beta1.Endpoint": { + "description": "Endpoint represents a single logical \"backend\" implementing a service.", + "properties": { + "addresses": { + "description": "addresses of this endpoint. The contents of this field are interpreted according to the corresponding EndpointSlice addressType field. Consumers must handle different types of addresses in the context of their own capabilities. This must contain at least one address but no more than 100.", + "items": { + "type": "string" + }, + "type": "array", + "x-kubernetes-list-type": "set" + }, + "conditions": { + "$ref": "#/definitions/io.k8s.api.discovery.v1beta1.EndpointConditions", + "description": "conditions contains information about the current status of the endpoint." + }, + "hints": { + "$ref": "#/definitions/io.k8s.api.discovery.v1beta1.EndpointHints", + "description": "hints contains information associated with how an endpoint should be consumed." + }, + "hostname": { + "description": "hostname of this endpoint. This field may be used by consumers of endpoints to distinguish endpoints from each other (e.g. in DNS names). Multiple endpoints which use the same hostname should be considered fungible (e.g. multiple A values in DNS). Must be lowercase and pass DNS Label (RFC 1123) validation.", + "type": "string" + }, + "nodeName": { + "description": "nodeName represents the name of the Node hosting this endpoint. This can be used to determine endpoints local to a Node. This field can be enabled with the EndpointSliceNodeName feature gate.", + "type": "string" + }, + "targetRef": { + "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference", + "description": "targetRef is a reference to a Kubernetes object that represents this endpoint." + }, + "topology": { + "additionalProperties": { + "type": "string" + }, + "description": "topology contains arbitrary topology information associated with the endpoint. These key/value pairs must conform with the label format. https://kubernetes.io/docs/concepts/overview/working-with-objects/labels Topology may include a maximum of 16 key/value pairs. This includes, but is not limited to the following well known keys: * kubernetes.io/hostname: the value indicates the hostname of the node\n where the endpoint is located. This should match the corresponding\n node label.\n* topology.kubernetes.io/zone: the value indicates the zone where the\n endpoint is located. This should match the corresponding node label.\n* topology.kubernetes.io/region: the value indicates the region where the\n endpoint is located. This should match the corresponding node label.\nThis field is deprecated and will be removed in future api versions.", + "type": "object" + } + }, + "required": [ + "addresses" + ], + "type": "object" + }, + "io.k8s.api.discovery.v1beta1.EndpointConditions": { + "description": "EndpointConditions represents the current condition of an endpoint.", + "properties": { + "ready": { + "description": "ready indicates that this endpoint is prepared to receive traffic, according to whatever system is managing the endpoint. A nil value indicates an unknown state. In most cases consumers should interpret this unknown state as ready. For compatibility reasons, ready should never be \"true\" for terminating endpoints.", + "type": "boolean" + }, + "serving": { + "description": "serving is identical to ready except that it is set regardless of the terminating state of endpoints. This condition should be set to true for a ready endpoint that is terminating. If nil, consumers should defer to the ready condition. This field can be enabled with the EndpointSliceTerminatingCondition feature gate.", + "type": "boolean" + }, + "terminating": { + "description": "terminating indicates that this endpoint is terminating. A nil value indicates an unknown state. Consumers should interpret this unknown state to mean that the endpoint is not terminating. This field can be enabled with the EndpointSliceTerminatingCondition feature gate.", + "type": "boolean" + } + }, + "type": "object" + }, + "io.k8s.api.discovery.v1beta1.EndpointHints": { + "description": "EndpointHints provides hints describing how an endpoint should be consumed.", + "properties": { + "forZones": { + "description": "forZones indicates the zone(s) this endpoint should be consumed by to enable topology aware routing. May contain a maximum of 8 entries.", + "items": { + "$ref": "#/definitions/io.k8s.api.discovery.v1beta1.ForZone" + }, + "type": "array", + "x-kubernetes-list-type": "atomic" + } + }, + "type": "object" + }, + "io.k8s.api.discovery.v1beta1.EndpointPort": { + "description": "EndpointPort represents a Port used by an EndpointSlice", + "properties": { + "appProtocol": { + "description": "The application protocol for this port. This field follows standard Kubernetes label syntax. Un-prefixed names are reserved for IANA standard service names (as per RFC-6335 and http://www.iana.org/assignments/service-names). Non-standard protocols should use prefixed names such as mycompany.com/my-custom-protocol.", + "type": "string" + }, + "name": { + "description": "The name of this port. All ports in an EndpointSlice must have a unique name. If the EndpointSlice is dervied from a Kubernetes service, this corresponds to the Service.ports[].name. Name must either be an empty string or pass DNS_LABEL validation: * must be no more than 63 characters long. * must consist of lower case alphanumeric characters or '-'. * must start and end with an alphanumeric character. Default is empty string.", + "type": "string" + }, + "port": { + "description": "The port number of the endpoint. If this is not specified, ports are not restricted and must be interpreted in the context of the specific consumer.", + "format": "int32", + "type": "integer" + }, + "protocol": { + "description": "The IP protocol for this port. Must be UDP, TCP, or SCTP. Default is TCP.", + "type": "string" + } + }, + "type": "object" + }, + "io.k8s.api.discovery.v1beta1.EndpointSlice": { + "description": "EndpointSlice represents a subset of the endpoints that implement a service. For a given service there may be multiple EndpointSlice objects, selected by labels, which must be joined to produce the full set of endpoints.", + "properties": { + "addressType": { + "description": "addressType specifies the type of address carried by this EndpointSlice. All addresses in this slice must be the same type. This field is immutable after creation. The following address types are currently supported: * IPv4: Represents an IPv4 Address. * IPv6: Represents an IPv6 Address. * FQDN: Represents a Fully Qualified Domain Name.", + "type": "string" + }, + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "endpoints": { + "description": "endpoints is a list of unique endpoints in this slice. Each slice may include a maximum of 1000 endpoints.", + "items": { + "$ref": "#/definitions/io.k8s.api.discovery.v1beta1.Endpoint" + }, + "type": "array", + "x-kubernetes-list-type": "atomic" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta", + "description": "Standard object's metadata." + }, + "ports": { + "description": "ports specifies the list of network ports exposed by each endpoint in this slice. Each port must have a unique name. When ports is empty, it indicates that there are no defined ports. When a port is defined with a nil port value, it indicates \"all ports\". Each slice may include a maximum of 100 ports.", + "items": { + "$ref": "#/definitions/io.k8s.api.discovery.v1beta1.EndpointPort" + }, + "type": "array", + "x-kubernetes-list-type": "atomic" + } + }, + "required": [ + "addressType", + "endpoints" + ], + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "discovery.k8s.io", + "kind": "EndpointSlice", + "version": "v1beta1" + } + ] + }, + "io.k8s.api.discovery.v1beta1.EndpointSliceList": { + "description": "EndpointSliceList represents a list of endpoint slices", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "items": { + "description": "List of endpoint slices", + "items": { + "$ref": "#/definitions/io.k8s.api.discovery.v1beta1.EndpointSlice" + }, + "type": "array" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta", + "description": "Standard list metadata." + } + }, + "required": [ + "items" + ], + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "discovery.k8s.io", + "kind": "EndpointSliceList", + "version": "v1beta1" + } + ] + }, + "io.k8s.api.discovery.v1beta1.ForZone": { + "description": "ForZone provides information about which zones should consume this endpoint.", + "properties": { + "name": { + "description": "name represents the name of the zone.", + "type": "string" + } + }, + "required": [ + "name" + ], + "type": "object" + }, + "io.k8s.api.events.v1.Event": { + "description": "Event is a report of an event somewhere in the cluster. It generally denotes some state change in the system. Events have a limited retention time and triggers and messages may evolve with time. Event consumers should not rely on the timing of an event with a given Reason reflecting a consistent underlying trigger, or the continued existence of events with that Reason. Events should be treated as informative, best-effort, supplemental data.", + "properties": { + "action": { + "description": "action is what action was taken/failed regarding to the regarding object. It is machine-readable. This field cannot be empty for new Events and it can have at most 128 characters.", + "type": "string" + }, + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "deprecatedCount": { + "description": "deprecatedCount is the deprecated field assuring backward compatibility with core.v1 Event type.", + "format": "int32", + "type": "integer" + }, + "deprecatedFirstTimestamp": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time", + "description": "deprecatedFirstTimestamp is the deprecated field assuring backward compatibility with core.v1 Event type." + }, + "deprecatedLastTimestamp": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time", + "description": "deprecatedLastTimestamp is the deprecated field assuring backward compatibility with core.v1 Event type." + }, + "deprecatedSource": { + "$ref": "#/definitions/io.k8s.api.core.v1.EventSource", + "description": "deprecatedSource is the deprecated field assuring backward compatibility with core.v1 Event type." + }, + "eventTime": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.MicroTime", + "description": "eventTime is the time when this Event was first observed. It is required." + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta", + "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata" + }, + "note": { + "description": "note is a human-readable description of the status of this operation. Maximal length of the note is 1kB, but libraries should be prepared to handle values up to 64kB.", + "type": "string" + }, + "reason": { + "description": "reason is why the action was taken. It is human-readable. This field cannot be empty for new Events and it can have at most 128 characters.", + "type": "string" + }, + "regarding": { + "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference", + "description": "regarding contains the object this Event is about. In most cases it's an Object reporting controller implements, e.g. ReplicaSetController implements ReplicaSets and this event is emitted because it acts on some changes in a ReplicaSet object." + }, + "related": { + "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference", + "description": "related is the optional secondary object for more complex actions. E.g. when regarding object triggers a creation or deletion of related object." + }, + "reportingController": { + "description": "reportingController is the name of the controller that emitted this Event, e.g. `kubernetes.io/kubelet`. This field cannot be empty for new Events.", + "type": "string" + }, + "reportingInstance": { + "description": "reportingInstance is the ID of the controller instance, e.g. `kubelet-xyzf`. This field cannot be empty for new Events and it can have at most 128 characters.", + "type": "string" + }, + "series": { + "$ref": "#/definitions/io.k8s.api.events.v1.EventSeries", + "description": "series is data about the Event series this event represents or nil if it's a singleton Event." + }, + "type": { + "description": "type is the type of this event (Normal, Warning), new types could be added in the future. It is machine-readable. This field cannot be empty for new Events.", + "type": "string" + } + }, + "required": [ + "eventTime" + ], + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "events.k8s.io", + "kind": "Event", + "version": "v1" + } + ] + }, + "io.k8s.api.events.v1.EventList": { + "description": "EventList is a list of Event objects.", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "items": { + "description": "items is a list of schema objects.", + "items": { + "$ref": "#/definitions/io.k8s.api.events.v1.Event" + }, + "type": "array" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta", + "description": "Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata" + } + }, + "required": [ + "items" + ], + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "events.k8s.io", + "kind": "EventList", + "version": "v1" + } + ] + }, + "io.k8s.api.events.v1.EventSeries": { + "description": "EventSeries contain information on series of events, i.e. thing that was/is happening continuously for some time. How often to update the EventSeries is up to the event reporters. The default event reporter in \"k8s.io/client-go/tools/events/event_broadcaster.go\" shows how this struct is updated on heartbeats and can guide customized reporter implementations.", + "properties": { + "count": { + "description": "count is the number of occurrences in this series up to the last heartbeat time.", + "format": "int32", + "type": "integer" + }, + "lastObservedTime": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.MicroTime", + "description": "lastObservedTime is the time when last Event from the series was seen before last heartbeat." + } + }, + "required": [ + "count", + "lastObservedTime" + ], + "type": "object" + }, + "io.k8s.api.events.v1beta1.Event": { + "description": "Event is a report of an event somewhere in the cluster. It generally denotes some state change in the system. Events have a limited retention time and triggers and messages may evolve with time. Event consumers should not rely on the timing of an event with a given Reason reflecting a consistent underlying trigger, or the continued existence of events with that Reason. Events should be treated as informative, best-effort, supplemental data.", + "properties": { + "action": { + "description": "action is what action was taken/failed regarding to the regarding object. It is machine-readable. This field can have at most 128 characters.", + "type": "string" + }, + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "deprecatedCount": { + "description": "deprecatedCount is the deprecated field assuring backward compatibility with core.v1 Event type.", + "format": "int32", + "type": "integer" + }, + "deprecatedFirstTimestamp": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time", + "description": "deprecatedFirstTimestamp is the deprecated field assuring backward compatibility with core.v1 Event type." + }, + "deprecatedLastTimestamp": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time", + "description": "deprecatedLastTimestamp is the deprecated field assuring backward compatibility with core.v1 Event type." + }, + "deprecatedSource": { + "$ref": "#/definitions/io.k8s.api.core.v1.EventSource", + "description": "deprecatedSource is the deprecated field assuring backward compatibility with core.v1 Event type." + }, + "eventTime": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.MicroTime", + "description": "eventTime is the time when this Event was first observed. It is required." + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta", + "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata" + }, + "note": { + "description": "note is a human-readable description of the status of this operation. Maximal length of the note is 1kB, but libraries should be prepared to handle values up to 64kB.", + "type": "string" + }, + "reason": { + "description": "reason is why the action was taken. It is human-readable. This field can have at most 128 characters.", + "type": "string" + }, + "regarding": { + "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference", + "description": "regarding contains the object this Event is about. In most cases it's an Object reporting controller implements, e.g. ReplicaSetController implements ReplicaSets and this event is emitted because it acts on some changes in a ReplicaSet object." + }, + "related": { + "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference", + "description": "related is the optional secondary object for more complex actions. E.g. when regarding object triggers a creation or deletion of related object." + }, + "reportingController": { + "description": "reportingController is the name of the controller that emitted this Event, e.g. `kubernetes.io/kubelet`. This field cannot be empty for new Events.", + "type": "string" + }, + "reportingInstance": { + "description": "reportingInstance is the ID of the controller instance, e.g. `kubelet-xyzf`. This field cannot be empty for new Events and it can have at most 128 characters.", + "type": "string" + }, + "series": { + "$ref": "#/definitions/io.k8s.api.events.v1beta1.EventSeries", + "description": "series is data about the Event series this event represents or nil if it's a singleton Event." + }, + "type": { + "description": "type is the type of this event (Normal, Warning), new types could be added in the future. It is machine-readable.", + "type": "string" + } + }, + "required": [ + "eventTime" + ], + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "events.k8s.io", + "kind": "Event", + "version": "v1beta1" + } + ] + }, + "io.k8s.api.events.v1beta1.EventList": { + "description": "EventList is a list of Event objects.", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "items": { + "description": "items is a list of schema objects.", + "items": { + "$ref": "#/definitions/io.k8s.api.events.v1beta1.Event" + }, + "type": "array" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta", + "description": "Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata" + } + }, + "required": [ + "items" + ], + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "events.k8s.io", + "kind": "EventList", + "version": "v1beta1" + } + ] + }, + "io.k8s.api.events.v1beta1.EventSeries": { + "description": "EventSeries contain information on series of events, i.e. thing that was/is happening continuously for some time.", + "properties": { + "count": { + "description": "count is the number of occurrences in this series up to the last heartbeat time.", + "format": "int32", + "type": "integer" + }, + "lastObservedTime": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.MicroTime", + "description": "lastObservedTime is the time when last Event from the series was seen before last heartbeat." + } + }, + "required": [ + "count", + "lastObservedTime" + ], + "type": "object" + }, + "io.k8s.api.extensions.v1beta1.HTTPIngressPath": { + "description": "HTTPIngressPath associates a path with a backend. Incoming urls matching the path are forwarded to the backend.", + "properties": { + "backend": { + "$ref": "#/definitions/io.k8s.api.extensions.v1beta1.IngressBackend", + "description": "Backend defines the referenced service endpoint to which the traffic will be forwarded to." + }, + "path": { + "description": "Path is matched against the path of an incoming request. Currently it can contain characters disallowed from the conventional \"path\" part of a URL as defined by RFC 3986. Paths must begin with a '/'. When unspecified, all paths from incoming requests are matched.", + "type": "string" + }, + "pathType": { + "description": "PathType determines the interpretation of the Path matching. PathType can be one of the following values: * Exact: Matches the URL path exactly. * Prefix: Matches based on a URL path prefix split by '/'. Matching is\n done on a path element by element basis. A path element refers is the\n list of labels in the path split by the '/' separator. A request is a\n match for path p if every p is an element-wise prefix of p of the\n request path. Note that if the last element of the path is a substring\n of the last element in request path, it is not a match (e.g. /foo/bar\n matches /foo/bar/baz, but does not match /foo/barbaz).\n* ImplementationSpecific: Interpretation of the Path matching is up to\n the IngressClass. Implementations can treat this as a separate PathType\n or treat it identically to Prefix or Exact path types.\nImplementations are required to support all path types. Defaults to ImplementationSpecific.", + "type": "string" + } + }, + "required": [ + "backend" + ], + "type": "object" + }, + "io.k8s.api.extensions.v1beta1.HTTPIngressRuleValue": { + "description": "HTTPIngressRuleValue is a list of http selectors pointing to backends. In the example: http://\u003chost\u003e/\u003cpath\u003e?\u003csearchpart\u003e -\u003e backend where where parts of the url correspond to RFC 3986, this resource will be used to match against everything after the last '/' and before the first '?' or '#'.", + "properties": { + "paths": { + "description": "A collection of paths that map requests to backends.", + "items": { + "$ref": "#/definitions/io.k8s.api.extensions.v1beta1.HTTPIngressPath" + }, + "type": "array" + } + }, + "required": [ + "paths" + ], + "type": "object" + }, + "io.k8s.api.extensions.v1beta1.Ingress": { + "description": "Ingress is a collection of rules that allow inbound connections to reach the endpoints defined by a backend. An Ingress can be configured to give services externally-reachable urls, load balance traffic, terminate SSL, offer name based virtual hosting etc. DEPRECATED - This group version of Ingress is deprecated by networking.k8s.io/v1beta1 Ingress. See the release notes for more information.", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta", + "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata" + }, + "spec": { + "$ref": "#/definitions/io.k8s.api.extensions.v1beta1.IngressSpec", + "description": "Spec is the desired state of the Ingress. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status" + }, + "status": { + "$ref": "#/definitions/io.k8s.api.extensions.v1beta1.IngressStatus", + "description": "Status is the current state of the Ingress. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status" + } + }, + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "extensions", + "kind": "Ingress", + "version": "v1beta1" + } + ] + }, + "io.k8s.api.extensions.v1beta1.IngressBackend": { + "description": "IngressBackend describes all endpoints for a given service and port.", + "properties": { + "resource": { + "$ref": "#/definitions/io.k8s.api.core.v1.TypedLocalObjectReference", + "description": "Resource is an ObjectRef to another Kubernetes resource in the namespace of the Ingress object. If resource is specified, serviceName and servicePort must not be specified." + }, + "serviceName": { + "description": "Specifies the name of the referenced service.", + "type": "string" + }, + "servicePort": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.util.intstr.IntOrString", + "description": "Specifies the port of the referenced service." + } + }, + "type": "object" + }, + "io.k8s.api.extensions.v1beta1.IngressList": { + "description": "IngressList is a collection of Ingress.", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "items": { + "description": "Items is the list of Ingress.", + "items": { + "$ref": "#/definitions/io.k8s.api.extensions.v1beta1.Ingress" + }, + "type": "array" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta", + "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata" + } + }, + "required": [ + "items" + ], + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "extensions", + "kind": "IngressList", + "version": "v1beta1" + } + ] + }, + "io.k8s.api.extensions.v1beta1.IngressRule": { + "description": "IngressRule represents the rules mapping the paths under a specified host to the related backend services. Incoming requests are first evaluated for a host match, then routed to the backend associated with the matching IngressRuleValue.", + "properties": { + "host": { + "description": "Host is the fully qualified domain name of a network host, as defined by RFC 3986. Note the following deviations from the \"host\" part of the URI as defined in RFC 3986: 1. IPs are not allowed. Currently an IngressRuleValue can only apply to\n the IP in the Spec of the parent Ingress.\n2. The `:` delimiter is not respected because ports are not allowed.\n\t Currently the port of an Ingress is implicitly :80 for http and\n\t :443 for https.\nBoth these may change in the future. Incoming requests are matched against the host before the IngressRuleValue. If the host is unspecified, the Ingress routes all traffic based on the specified IngressRuleValue.\n\nHost can be \"precise\" which is a domain name without the terminating dot of a network host (e.g. \"foo.bar.com\") or \"wildcard\", which is a domain name prefixed with a single wildcard label (e.g. \"*.foo.com\"). The wildcard character '*' must appear by itself as the first DNS label and matches only a single label. You cannot have a wildcard label by itself (e.g. Host == \"*\"). Requests will be matched against the Host field in the following way: 1. If Host is precise, the request matches this rule if the http host header is equal to Host. 2. If Host is a wildcard, then the request matches this rule if the http host header is to equal to the suffix (removing the first label) of the wildcard rule.", + "type": "string" + }, + "http": { + "$ref": "#/definitions/io.k8s.api.extensions.v1beta1.HTTPIngressRuleValue" + } + }, + "type": "object" + }, + "io.k8s.api.extensions.v1beta1.IngressSpec": { + "description": "IngressSpec describes the Ingress the user wishes to exist.", + "properties": { + "backend": { + "$ref": "#/definitions/io.k8s.api.extensions.v1beta1.IngressBackend", + "description": "A default backend capable of servicing requests that don't match any rule. At least one of 'backend' or 'rules' must be specified. This field is optional to allow the loadbalancer controller or defaulting logic to specify a global default." + }, + "ingressClassName": { + "description": "IngressClassName is the name of the IngressClass cluster resource. The associated IngressClass defines which controller will implement the resource. This replaces the deprecated `kubernetes.io/ingress.class` annotation. For backwards compatibility, when that annotation is set, it must be given precedence over this field. The controller may emit a warning if the field and annotation have different values. Implementations of this API should ignore Ingresses without a class specified. An IngressClass resource may be marked as default, which can be used to set a default value for this field. For more information, refer to the IngressClass documentation.", + "type": "string" + }, + "rules": { + "description": "A list of host rules used to configure the Ingress. If unspecified, or no rule matches, all traffic is sent to the default backend.", + "items": { + "$ref": "#/definitions/io.k8s.api.extensions.v1beta1.IngressRule" + }, + "type": "array" + }, + "tls": { + "description": "TLS configuration. Currently the Ingress only supports a single TLS port, 443. If multiple members of this list specify different hosts, they will be multiplexed on the same port according to the hostname specified through the SNI TLS extension, if the ingress controller fulfilling the ingress supports SNI.", + "items": { + "$ref": "#/definitions/io.k8s.api.extensions.v1beta1.IngressTLS" + }, + "type": "array" + } + }, + "type": "object" + }, + "io.k8s.api.extensions.v1beta1.IngressStatus": { + "description": "IngressStatus describe the current state of the Ingress.", + "properties": { + "loadBalancer": { + "$ref": "#/definitions/io.k8s.api.core.v1.LoadBalancerStatus", + "description": "LoadBalancer contains the current status of the load-balancer." + } + }, + "type": "object" + }, + "io.k8s.api.extensions.v1beta1.IngressTLS": { + "description": "IngressTLS describes the transport layer security associated with an Ingress.", + "properties": { + "hosts": { + "description": "Hosts are a list of hosts included in the TLS certificate. The values in this list must match the name/s used in the tlsSecret. Defaults to the wildcard host setting for the loadbalancer controller fulfilling this Ingress, if left unspecified.", + "items": { + "type": "string" + }, + "type": "array" + }, + "secretName": { + "description": "SecretName is the name of the secret used to terminate SSL traffic on 443. Field is left optional to allow SSL routing based on SNI hostname alone. If the SNI host in a listener conflicts with the \"Host\" header field used by an IngressRule, the SNI host is used for termination and value of the Host header is used for routing.", + "type": "string" + } + }, + "type": "object" + }, + "io.k8s.api.flowcontrol.v1beta1.FlowDistinguisherMethod": { + "description": "FlowDistinguisherMethod specifies the method of a flow distinguisher.", + "properties": { + "type": { + "description": "`type` is the type of flow distinguisher method The supported types are \"ByUser\" and \"ByNamespace\". Required.", + "type": "string" + } + }, + "required": [ + "type" + ], + "type": "object" + }, + "io.k8s.api.flowcontrol.v1beta1.FlowSchema": { + "description": "FlowSchema defines the schema of a group of flows. Note that a flow is made up of a set of inbound API requests with similar attributes and is identified by a pair of strings: the name of the FlowSchema and a \"flow distinguisher\".", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta", + "description": "`metadata` is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata" + }, + "spec": { + "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta1.FlowSchemaSpec", + "description": "`spec` is the specification of the desired behavior of a FlowSchema. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status" + }, + "status": { + "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta1.FlowSchemaStatus", + "description": "`status` is the current status of a FlowSchema. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status" + } + }, + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "flowcontrol.apiserver.k8s.io", + "kind": "FlowSchema", + "version": "v1beta1" + } + ] + }, + "io.k8s.api.flowcontrol.v1beta1.FlowSchemaCondition": { + "description": "FlowSchemaCondition describes conditions for a FlowSchema.", + "properties": { + "lastTransitionTime": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time", + "description": "`lastTransitionTime` is the last time the condition transitioned from one status to another." + }, + "message": { + "description": "`message` is a human-readable message indicating details about last transition.", + "type": "string" + }, + "reason": { + "description": "`reason` is a unique, one-word, CamelCase reason for the condition's last transition.", + "type": "string" + }, + "status": { + "description": "`status` is the status of the condition. Can be True, False, Unknown. Required.", + "type": "string" + }, + "type": { + "description": "`type` is the type of the condition. Required.", + "type": "string" + } + }, + "type": "object" + }, + "io.k8s.api.flowcontrol.v1beta1.FlowSchemaList": { + "description": "FlowSchemaList is a list of FlowSchema objects.", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "items": { + "description": "`items` is a list of FlowSchemas.", + "items": { + "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta1.FlowSchema" + }, + "type": "array" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta", + "description": "`metadata` is the standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata" + } + }, + "required": [ + "items" + ], + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "flowcontrol.apiserver.k8s.io", + "kind": "FlowSchemaList", + "version": "v1beta1" + } + ] + }, + "io.k8s.api.flowcontrol.v1beta1.FlowSchemaSpec": { + "description": "FlowSchemaSpec describes how the FlowSchema's specification looks like.", + "properties": { + "distinguisherMethod": { + "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta1.FlowDistinguisherMethod", + "description": "`distinguisherMethod` defines how to compute the flow distinguisher for requests that match this schema. `nil` specifies that the distinguisher is disabled and thus will always be the empty string." + }, + "matchingPrecedence": { + "description": "`matchingPrecedence` is used to choose among the FlowSchemas that match a given request. The chosen FlowSchema is among those with the numerically lowest (which we take to be logically highest) MatchingPrecedence. Each MatchingPrecedence value must be ranged in [1,10000]. Note that if the precedence is not specified, it will be set to 1000 as default.", + "format": "int32", + "type": "integer" + }, + "priorityLevelConfiguration": { + "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta1.PriorityLevelConfigurationReference", + "description": "`priorityLevelConfiguration` should reference a PriorityLevelConfiguration in the cluster. If the reference cannot be resolved, the FlowSchema will be ignored and marked as invalid in its status. Required." + }, + "rules": { + "description": "`rules` describes which requests will match this flow schema. This FlowSchema matches a request if and only if at least one member of rules matches the request. if it is an empty slice, there will be no requests matching the FlowSchema.", + "items": { + "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta1.PolicyRulesWithSubjects" + }, + "type": "array", + "x-kubernetes-list-type": "atomic" + } + }, + "required": [ + "priorityLevelConfiguration" + ], + "type": "object" + }, + "io.k8s.api.flowcontrol.v1beta1.FlowSchemaStatus": { + "description": "FlowSchemaStatus represents the current state of a FlowSchema.", + "properties": { + "conditions": { + "description": "`conditions` is a list of the current states of FlowSchema.", + "items": { + "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta1.FlowSchemaCondition" + }, + "type": "array", + "x-kubernetes-list-map-keys": [ + "type" + ], + "x-kubernetes-list-type": "map" + } + }, + "type": "object" + }, + "io.k8s.api.flowcontrol.v1beta1.GroupSubject": { + "description": "GroupSubject holds detailed information for group-kind subject.", + "properties": { + "name": { + "description": "name is the user group that matches, or \"*\" to match all user groups. See https://github.com/kubernetes/apiserver/blob/master/pkg/authentication/user/user.go for some well-known group names. Required.", + "type": "string" + } + }, + "required": [ + "name" + ], + "type": "object" + }, + "io.k8s.api.flowcontrol.v1beta1.LimitResponse": { + "description": "LimitResponse defines how to handle requests that can not be executed right now.", + "properties": { + "queuing": { + "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta1.QueuingConfiguration", + "description": "`queuing` holds the configuration parameters for queuing. This field may be non-empty only if `type` is `\"Queue\"`." + }, + "type": { + "description": "`type` is \"Queue\" or \"Reject\". \"Queue\" means that requests that can not be executed upon arrival are held in a queue until they can be executed or a queuing limit is reached. \"Reject\" means that requests that can not be executed upon arrival are rejected. Required.", + "type": "string" + } + }, + "required": [ + "type" + ], + "type": "object", + "x-kubernetes-unions": [ + { + "discriminator": "type", + "fields-to-discriminateBy": { + "queuing": "Queuing" + } + } + ] + }, + "io.k8s.api.flowcontrol.v1beta1.LimitedPriorityLevelConfiguration": { + "description": "LimitedPriorityLevelConfiguration specifies how to handle requests that are subject to limits. It addresses two issues:\n * How are requests for this priority level limited?\n * What should be done with requests that exceed the limit?", + "properties": { + "assuredConcurrencyShares": { + "description": "`assuredConcurrencyShares` (ACS) configures the execution limit, which is a limit on the number of requests of this priority level that may be exeucting at a given time. ACS must be a positive number. The server's concurrency limit (SCL) is divided among the concurrency-controlled priority levels in proportion to their assured concurrency shares. This produces the assured concurrency value (ACV) --- the number of requests that may be executing at a time --- for each such priority level:\n\n ACV(l) = ceil( SCL * ACS(l) / ( sum[priority levels k] ACS(k) ) )\n\nbigger numbers of ACS mean more reserved concurrent requests (at the expense of every other PL). This field has a default value of 30.", + "format": "int32", + "type": "integer" + }, + "limitResponse": { + "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta1.LimitResponse", + "description": "`limitResponse` indicates what to do with requests that can not be executed right now" + } + }, + "type": "object" + }, + "io.k8s.api.flowcontrol.v1beta1.NonResourcePolicyRule": { + "description": "NonResourcePolicyRule is a predicate that matches non-resource requests according to their verb and the target non-resource URL. A NonResourcePolicyRule matches a request if and only if both (a) at least one member of verbs matches the request and (b) at least one member of nonResourceURLs matches the request.", + "properties": { + "nonResourceURLs": { + "description": "`nonResourceURLs` is a set of url prefixes that a user should have access to and may not be empty. For example:\n - \"/healthz\" is legal\n - \"/hea*\" is illegal\n - \"/hea\" is legal but matches nothing\n - \"/hea/*\" also matches nothing\n - \"/healthz/*\" matches all per-component health checks.\n\"*\" matches all non-resource urls. if it is present, it must be the only entry. Required.", + "items": { + "type": "string" + }, + "type": "array", + "x-kubernetes-list-type": "set" + }, + "verbs": { + "description": "`verbs` is a list of matching verbs and may not be empty. \"*\" matches all verbs. If it is present, it must be the only entry. Required.", + "items": { + "type": "string" + }, + "type": "array", + "x-kubernetes-list-type": "set" + } + }, + "required": [ + "verbs", + "nonResourceURLs" + ], + "type": "object" + }, + "io.k8s.api.flowcontrol.v1beta1.PolicyRulesWithSubjects": { + "description": "PolicyRulesWithSubjects prescribes a test that applies to a request to an apiserver. The test considers the subject making the request, the verb being requested, and the resource to be acted upon. This PolicyRulesWithSubjects matches a request if and only if both (a) at least one member of subjects matches the request and (b) at least one member of resourceRules or nonResourceRules matches the request.", + "properties": { + "nonResourceRules": { + "description": "`nonResourceRules` is a list of NonResourcePolicyRules that identify matching requests according to their verb and the target non-resource URL.", + "items": { + "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta1.NonResourcePolicyRule" + }, + "type": "array", + "x-kubernetes-list-type": "atomic" + }, + "resourceRules": { + "description": "`resourceRules` is a slice of ResourcePolicyRules that identify matching requests according to their verb and the target resource. At least one of `resourceRules` and `nonResourceRules` has to be non-empty.", + "items": { + "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta1.ResourcePolicyRule" + }, + "type": "array", + "x-kubernetes-list-type": "atomic" + }, + "subjects": { + "description": "subjects is the list of normal user, serviceaccount, or group that this rule cares about. There must be at least one member in this slice. A slice that includes both the system:authenticated and system:unauthenticated user groups matches every request. Required.", + "items": { + "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta1.Subject" + }, + "type": "array", + "x-kubernetes-list-type": "atomic" + } + }, + "required": [ + "subjects" + ], + "type": "object" + }, + "io.k8s.api.flowcontrol.v1beta1.PriorityLevelConfiguration": { + "description": "PriorityLevelConfiguration represents the configuration of a priority level.", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta", + "description": "`metadata` is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata" + }, + "spec": { + "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta1.PriorityLevelConfigurationSpec", + "description": "`spec` is the specification of the desired behavior of a \"request-priority\". More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status" + }, + "status": { + "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta1.PriorityLevelConfigurationStatus", + "description": "`status` is the current status of a \"request-priority\". More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status" + } + }, + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "flowcontrol.apiserver.k8s.io", + "kind": "PriorityLevelConfiguration", + "version": "v1beta1" + } + ] + }, + "io.k8s.api.flowcontrol.v1beta1.PriorityLevelConfigurationCondition": { + "description": "PriorityLevelConfigurationCondition defines the condition of priority level.", + "properties": { + "lastTransitionTime": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time", + "description": "`lastTransitionTime` is the last time the condition transitioned from one status to another." + }, + "message": { + "description": "`message` is a human-readable message indicating details about last transition.", + "type": "string" + }, + "reason": { + "description": "`reason` is a unique, one-word, CamelCase reason for the condition's last transition.", + "type": "string" + }, + "status": { + "description": "`status` is the status of the condition. Can be True, False, Unknown. Required.", + "type": "string" + }, + "type": { + "description": "`type` is the type of the condition. Required.", + "type": "string" + } + }, + "type": "object" + }, + "io.k8s.api.flowcontrol.v1beta1.PriorityLevelConfigurationList": { + "description": "PriorityLevelConfigurationList is a list of PriorityLevelConfiguration objects.", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "items": { + "description": "`items` is a list of request-priorities.", + "items": { + "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta1.PriorityLevelConfiguration" + }, + "type": "array" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta", + "description": "`metadata` is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata" + } + }, + "required": [ + "items" + ], + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "flowcontrol.apiserver.k8s.io", + "kind": "PriorityLevelConfigurationList", + "version": "v1beta1" + } + ] + }, + "io.k8s.api.flowcontrol.v1beta1.PriorityLevelConfigurationReference": { + "description": "PriorityLevelConfigurationReference contains information that points to the \"request-priority\" being used.", + "properties": { + "name": { + "description": "`name` is the name of the priority level configuration being referenced Required.", + "type": "string" + } + }, + "required": [ + "name" + ], + "type": "object" + }, + "io.k8s.api.flowcontrol.v1beta1.PriorityLevelConfigurationSpec": { + "description": "PriorityLevelConfigurationSpec specifies the configuration of a priority level.", + "properties": { + "limited": { + "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta1.LimitedPriorityLevelConfiguration", + "description": "`limited` specifies how requests are handled for a Limited priority level. This field must be non-empty if and only if `type` is `\"Limited\"`." + }, + "type": { + "description": "`type` indicates whether this priority level is subject to limitation on request execution. A value of `\"Exempt\"` means that requests of this priority level are not subject to a limit (and thus are never queued) and do not detract from the capacity made available to other priority levels. A value of `\"Limited\"` means that (a) requests of this priority level _are_ subject to limits and (b) some of the server's limited capacity is made available exclusively to this priority level. Required.", + "type": "string" + } + }, + "required": [ + "type" + ], + "type": "object", + "x-kubernetes-unions": [ + { + "discriminator": "type", + "fields-to-discriminateBy": { + "limited": "Limited" + } + } + ] + }, + "io.k8s.api.flowcontrol.v1beta1.PriorityLevelConfigurationStatus": { + "description": "PriorityLevelConfigurationStatus represents the current state of a \"request-priority\".", + "properties": { + "conditions": { + "description": "`conditions` is the current state of \"request-priority\".", + "items": { + "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta1.PriorityLevelConfigurationCondition" + }, + "type": "array", + "x-kubernetes-list-map-keys": [ + "type" + ], + "x-kubernetes-list-type": "map" + } + }, + "type": "object" + }, + "io.k8s.api.flowcontrol.v1beta1.QueuingConfiguration": { + "description": "QueuingConfiguration holds the configuration parameters for queuing", + "properties": { + "handSize": { + "description": "`handSize` is a small positive number that configures the shuffle sharding of requests into queues. When enqueuing a request at this priority level the request's flow identifier (a string pair) is hashed and the hash value is used to shuffle the list of queues and deal a hand of the size specified here. The request is put into one of the shortest queues in that hand. `handSize` must be no larger than `queues`, and should be significantly smaller (so that a few heavy flows do not saturate most of the queues). See the user-facing documentation for more extensive guidance on setting this field. This field has a default value of 8.", + "format": "int32", + "type": "integer" + }, + "queueLengthLimit": { + "description": "`queueLengthLimit` is the maximum number of requests allowed to be waiting in a given queue of this priority level at a time; excess requests are rejected. This value must be positive. If not specified, it will be defaulted to 50.", + "format": "int32", + "type": "integer" + }, + "queues": { + "description": "`queues` is the number of queues for this priority level. The queues exist independently at each apiserver. The value must be positive. Setting it to 1 effectively precludes shufflesharding and thus makes the distinguisher method of associated flow schemas irrelevant. This field has a default value of 64.", + "format": "int32", + "type": "integer" + } + }, + "type": "object" + }, + "io.k8s.api.flowcontrol.v1beta1.ResourcePolicyRule": { + "description": "ResourcePolicyRule is a predicate that matches some resource requests, testing the request's verb and the target resource. A ResourcePolicyRule matches a resource request if and only if: (a) at least one member of verbs matches the request, (b) at least one member of apiGroups matches the request, (c) at least one member of resources matches the request, and (d) least one member of namespaces matches the request.", + "properties": { + "apiGroups": { + "description": "`apiGroups` is a list of matching API groups and may not be empty. \"*\" matches all API groups and, if present, must be the only entry. Required.", + "items": { + "type": "string" + }, + "type": "array", + "x-kubernetes-list-type": "set" + }, + "clusterScope": { + "description": "`clusterScope` indicates whether to match requests that do not specify a namespace (which happens either because the resource is not namespaced or the request targets all namespaces). If this field is omitted or false then the `namespaces` field must contain a non-empty list.", + "type": "boolean" + }, + "namespaces": { + "description": "`namespaces` is a list of target namespaces that restricts matches. A request that specifies a target namespace matches only if either (a) this list contains that target namespace or (b) this list contains \"*\". Note that \"*\" matches any specified namespace but does not match a request that _does not specify_ a namespace (see the `clusterScope` field for that). This list may be empty, but only if `clusterScope` is true.", + "items": { + "type": "string" + }, + "type": "array", + "x-kubernetes-list-type": "set" + }, + "resources": { + "description": "`resources` is a list of matching resources (i.e., lowercase and plural) with, if desired, subresource. For example, [ \"services\", \"nodes/status\" ]. This list may not be empty. \"*\" matches all resources and, if present, must be the only entry. Required.", + "items": { + "type": "string" + }, + "type": "array", + "x-kubernetes-list-type": "set" + }, + "verbs": { + "description": "`verbs` is a list of matching verbs and may not be empty. \"*\" matches all verbs and, if present, must be the only entry. Required.", + "items": { + "type": "string" + }, + "type": "array", + "x-kubernetes-list-type": "set" + } + }, + "required": [ + "verbs", + "apiGroups", + "resources" + ], + "type": "object" + }, + "io.k8s.api.flowcontrol.v1beta1.ServiceAccountSubject": { + "description": "ServiceAccountSubject holds detailed information for service-account-kind subject.", + "properties": { + "name": { + "description": "`name` is the name of matching ServiceAccount objects, or \"*\" to match regardless of name. Required.", + "type": "string" + }, + "namespace": { + "description": "`namespace` is the namespace of matching ServiceAccount objects. Required.", + "type": "string" + } + }, + "required": [ + "namespace", + "name" + ], + "type": "object" + }, + "io.k8s.api.flowcontrol.v1beta1.Subject": { + "description": "Subject matches the originator of a request, as identified by the request authentication system. There are three ways of matching an originator; by user, group, or service account.", + "properties": { + "group": { + "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta1.GroupSubject" + }, + "kind": { + "description": "Required", + "type": "string" + }, + "serviceAccount": { + "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta1.ServiceAccountSubject" + }, + "user": { + "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta1.UserSubject" + } + }, + "required": [ + "kind" + ], + "type": "object", + "x-kubernetes-unions": [ + { + "discriminator": "kind", + "fields-to-discriminateBy": { + "group": "Group", + "serviceAccount": "ServiceAccount", + "user": "User" + } + } + ] + }, + "io.k8s.api.flowcontrol.v1beta1.UserSubject": { + "description": "UserSubject holds detailed information for user-kind subject.", + "properties": { + "name": { + "description": "`name` is the username that matches, or \"*\" to match all usernames. Required.", + "type": "string" + } + }, + "required": [ + "name" + ], + "type": "object" + }, + "io.k8s.api.networking.v1.HTTPIngressPath": { + "description": "HTTPIngressPath associates a path with a backend. Incoming urls matching the path are forwarded to the backend.", + "properties": { + "backend": { + "$ref": "#/definitions/io.k8s.api.networking.v1.IngressBackend", + "description": "Backend defines the referenced service endpoint to which the traffic will be forwarded to." + }, + "path": { + "description": "Path is matched against the path of an incoming request. Currently it can contain characters disallowed from the conventional \"path\" part of a URL as defined by RFC 3986. Paths must begin with a '/'. When unspecified, all paths from incoming requests are matched.", + "type": "string" + }, + "pathType": { + "description": "PathType determines the interpretation of the Path matching. PathType can be one of the following values: * Exact: Matches the URL path exactly. * Prefix: Matches based on a URL path prefix split by '/'. Matching is\n done on a path element by element basis. A path element refers is the\n list of labels in the path split by the '/' separator. A request is a\n match for path p if every p is an element-wise prefix of p of the\n request path. Note that if the last element of the path is a substring\n of the last element in request path, it is not a match (e.g. /foo/bar\n matches /foo/bar/baz, but does not match /foo/barbaz).\n* ImplementationSpecific: Interpretation of the Path matching is up to\n the IngressClass. Implementations can treat this as a separate PathType\n or treat it identically to Prefix or Exact path types.\nImplementations are required to support all path types.", + "type": "string" + } + }, + "required": [ + "backend" + ], + "type": "object" + }, + "io.k8s.api.networking.v1.HTTPIngressRuleValue": { + "description": "HTTPIngressRuleValue is a list of http selectors pointing to backends. In the example: http://\u003chost\u003e/\u003cpath\u003e?\u003csearchpart\u003e -\u003e backend where where parts of the url correspond to RFC 3986, this resource will be used to match against everything after the last '/' and before the first '?' or '#'.", + "properties": { + "paths": { + "description": "A collection of paths that map requests to backends.", + "items": { + "$ref": "#/definitions/io.k8s.api.networking.v1.HTTPIngressPath" + }, + "type": "array", + "x-kubernetes-list-type": "atomic" + } + }, + "required": [ + "paths" + ], + "type": "object" + }, + "io.k8s.api.networking.v1.IPBlock": { + "description": "IPBlock describes a particular CIDR (Ex. \"192.168.1.1/24\",\"2001:db9::/64\") that is allowed to the pods matched by a NetworkPolicySpec's podSelector. The except entry describes CIDRs that should not be included within this rule.", + "properties": { + "cidr": { + "description": "CIDR is a string representing the IP Block Valid examples are \"192.168.1.1/24\" or \"2001:db9::/64\"", + "type": "string" + }, + "except": { + "description": "Except is a slice of CIDRs that should not be included within an IP Block Valid examples are \"192.168.1.1/24\" or \"2001:db9::/64\" Except values will be rejected if they are outside the CIDR range", + "items": { + "type": "string" + }, + "type": "array" + } + }, + "required": [ + "cidr" + ], + "type": "object" + }, + "io.k8s.api.networking.v1.Ingress": { + "description": "Ingress is a collection of rules that allow inbound connections to reach the endpoints defined by a backend. An Ingress can be configured to give services externally-reachable urls, load balance traffic, terminate SSL, offer name based virtual hosting etc.", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta", + "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata" + }, + "spec": { + "$ref": "#/definitions/io.k8s.api.networking.v1.IngressSpec", + "description": "Spec is the desired state of the Ingress. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status" + }, + "status": { + "$ref": "#/definitions/io.k8s.api.networking.v1.IngressStatus", + "description": "Status is the current state of the Ingress. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status" + } + }, + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "networking.k8s.io", + "kind": "Ingress", + "version": "v1" + } + ] + }, + "io.k8s.api.networking.v1.IngressBackend": { + "description": "IngressBackend describes all endpoints for a given service and port.", + "properties": { + "resource": { + "$ref": "#/definitions/io.k8s.api.core.v1.TypedLocalObjectReference", + "description": "Resource is an ObjectRef to another Kubernetes resource in the namespace of the Ingress object. If resource is specified, a service.Name and service.Port must not be specified. This is a mutually exclusive setting with \"Service\"." + }, + "service": { + "$ref": "#/definitions/io.k8s.api.networking.v1.IngressServiceBackend", + "description": "Service references a Service as a Backend. This is a mutually exclusive setting with \"Resource\"." + } + }, + "type": "object" + }, + "io.k8s.api.networking.v1.IngressClass": { + "description": "IngressClass represents the class of the Ingress, referenced by the Ingress Spec. The `ingressclass.kubernetes.io/is-default-class` annotation can be used to indicate that an IngressClass should be considered default. When a single IngressClass resource has this annotation set to true, new Ingress resources without a class specified will be assigned this default class.", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta", + "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata" + }, + "spec": { + "$ref": "#/definitions/io.k8s.api.networking.v1.IngressClassSpec", + "description": "Spec is the desired state of the IngressClass. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status" + } + }, + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "networking.k8s.io", + "kind": "IngressClass", + "version": "v1" + } + ] + }, + "io.k8s.api.networking.v1.IngressClassList": { + "description": "IngressClassList is a collection of IngressClasses.", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "items": { + "description": "Items is the list of IngressClasses.", + "items": { + "$ref": "#/definitions/io.k8s.api.networking.v1.IngressClass" + }, + "type": "array" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta", + "description": "Standard list metadata." + } + }, + "required": [ + "items" + ], + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "networking.k8s.io", + "kind": "IngressClassList", + "version": "v1" + } + ] + }, + "io.k8s.api.networking.v1.IngressClassParametersReference": { + "description": "IngressClassParametersReference identifies an API object. This can be used to specify a cluster or namespace-scoped resource.", + "properties": { + "apiGroup": { + "description": "APIGroup is the group for the resource being referenced. If APIGroup is not specified, the specified Kind must be in the core API group. For any other third-party types, APIGroup is required.", + "type": "string" + }, + "kind": { + "description": "Kind is the type of resource being referenced.", + "type": "string" + }, + "name": { + "description": "Name is the name of resource being referenced.", + "type": "string" + }, + "namespace": { + "description": "Namespace is the namespace of the resource being referenced. This field is required when scope is set to \"Namespace\" and must be unset when scope is set to \"Cluster\".", + "type": "string" + }, + "scope": { + "description": "Scope represents if this refers to a cluster or namespace scoped resource. This may be set to \"Cluster\" (default) or \"Namespace\". Field can be enabled with IngressClassNamespacedParams feature gate.", + "type": "string" + } + }, + "required": [ + "kind", + "name" + ], + "type": "object" + }, + "io.k8s.api.networking.v1.IngressClassSpec": { + "description": "IngressClassSpec provides information about the class of an Ingress.", + "properties": { + "controller": { + "description": "Controller refers to the name of the controller that should handle this class. This allows for different \"flavors\" that are controlled by the same controller. For example, you may have different Parameters for the same implementing controller. This should be specified as a domain-prefixed path no more than 250 characters in length, e.g. \"acme.io/ingress-controller\". This field is immutable.", + "type": "string" + }, + "parameters": { + "$ref": "#/definitions/io.k8s.api.networking.v1.IngressClassParametersReference", + "description": "Parameters is a link to a custom resource containing additional configuration for the controller. This is optional if the controller does not require extra parameters." + } + }, + "type": "object" + }, + "io.k8s.api.networking.v1.IngressList": { + "description": "IngressList is a collection of Ingress.", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "items": { + "description": "Items is the list of Ingress.", + "items": { + "$ref": "#/definitions/io.k8s.api.networking.v1.Ingress" + }, + "type": "array" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta", + "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata" + } + }, + "required": [ + "items" + ], + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "networking.k8s.io", + "kind": "IngressList", + "version": "v1" + } + ] + }, + "io.k8s.api.networking.v1.IngressRule": { + "description": "IngressRule represents the rules mapping the paths under a specified host to the related backend services. Incoming requests are first evaluated for a host match, then routed to the backend associated with the matching IngressRuleValue.", + "properties": { + "host": { + "description": "Host is the fully qualified domain name of a network host, as defined by RFC 3986. Note the following deviations from the \"host\" part of the URI as defined in RFC 3986: 1. IPs are not allowed. Currently an IngressRuleValue can only apply to\n the IP in the Spec of the parent Ingress.\n2. The `:` delimiter is not respected because ports are not allowed.\n\t Currently the port of an Ingress is implicitly :80 for http and\n\t :443 for https.\nBoth these may change in the future. Incoming requests are matched against the host before the IngressRuleValue. If the host is unspecified, the Ingress routes all traffic based on the specified IngressRuleValue.\n\nHost can be \"precise\" which is a domain name without the terminating dot of a network host (e.g. \"foo.bar.com\") or \"wildcard\", which is a domain name prefixed with a single wildcard label (e.g. \"*.foo.com\"). The wildcard character '*' must appear by itself as the first DNS label and matches only a single label. You cannot have a wildcard label by itself (e.g. Host == \"*\"). Requests will be matched against the Host field in the following way: 1. If Host is precise, the request matches this rule if the http host header is equal to Host. 2. If Host is a wildcard, then the request matches this rule if the http host header is to equal to the suffix (removing the first label) of the wildcard rule.", + "type": "string" + }, + "http": { + "$ref": "#/definitions/io.k8s.api.networking.v1.HTTPIngressRuleValue" + } + }, + "type": "object" + }, + "io.k8s.api.networking.v1.IngressServiceBackend": { + "description": "IngressServiceBackend references a Kubernetes Service as a Backend.", + "properties": { + "name": { + "description": "Name is the referenced service. The service must exist in the same namespace as the Ingress object.", + "type": "string" + }, + "port": { + "$ref": "#/definitions/io.k8s.api.networking.v1.ServiceBackendPort", + "description": "Port of the referenced service. A port name or port number is required for a IngressServiceBackend." + } + }, + "required": [ + "name" + ], + "type": "object" + }, + "io.k8s.api.networking.v1.IngressSpec": { + "description": "IngressSpec describes the Ingress the user wishes to exist.", + "properties": { + "defaultBackend": { + "$ref": "#/definitions/io.k8s.api.networking.v1.IngressBackend", + "description": "DefaultBackend is the backend that should handle requests that don't match any rule. If Rules are not specified, DefaultBackend must be specified. If DefaultBackend is not set, the handling of requests that do not match any of the rules will be up to the Ingress controller." + }, + "ingressClassName": { + "description": "IngressClassName is the name of the IngressClass cluster resource. The associated IngressClass defines which controller will implement the resource. This replaces the deprecated `kubernetes.io/ingress.class` annotation. For backwards compatibility, when that annotation is set, it must be given precedence over this field. The controller may emit a warning if the field and annotation have different values. Implementations of this API should ignore Ingresses without a class specified. An IngressClass resource may be marked as default, which can be used to set a default value for this field. For more information, refer to the IngressClass documentation.", + "type": "string" + }, + "rules": { + "description": "A list of host rules used to configure the Ingress. If unspecified, or no rule matches, all traffic is sent to the default backend.", + "items": { + "$ref": "#/definitions/io.k8s.api.networking.v1.IngressRule" + }, + "type": "array", + "x-kubernetes-list-type": "atomic" + }, + "tls": { + "description": "TLS configuration. Currently the Ingress only supports a single TLS port, 443. If multiple members of this list specify different hosts, they will be multiplexed on the same port according to the hostname specified through the SNI TLS extension, if the ingress controller fulfilling the ingress supports SNI.", + "items": { + "$ref": "#/definitions/io.k8s.api.networking.v1.IngressTLS" + }, + "type": "array", + "x-kubernetes-list-type": "atomic" + } + }, + "type": "object" + }, + "io.k8s.api.networking.v1.IngressStatus": { + "description": "IngressStatus describe the current state of the Ingress.", + "properties": { + "loadBalancer": { + "$ref": "#/definitions/io.k8s.api.core.v1.LoadBalancerStatus", + "description": "LoadBalancer contains the current status of the load-balancer." + } + }, + "type": "object" + }, + "io.k8s.api.networking.v1.IngressTLS": { + "description": "IngressTLS describes the transport layer security associated with an Ingress.", + "properties": { + "hosts": { + "description": "Hosts are a list of hosts included in the TLS certificate. The values in this list must match the name/s used in the tlsSecret. Defaults to the wildcard host setting for the loadbalancer controller fulfilling this Ingress, if left unspecified.", + "items": { + "type": "string" + }, + "type": "array", + "x-kubernetes-list-type": "atomic" + }, + "secretName": { + "description": "SecretName is the name of the secret used to terminate TLS traffic on port 443. Field is left optional to allow TLS routing based on SNI hostname alone. If the SNI host in a listener conflicts with the \"Host\" header field used by an IngressRule, the SNI host is used for termination and value of the Host header is used for routing.", + "type": "string" + } + }, + "type": "object" + }, + "io.k8s.api.networking.v1.NetworkPolicy": { + "description": "NetworkPolicy describes what network traffic is allowed for a set of Pods", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta", + "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata" + }, + "spec": { + "$ref": "#/definitions/io.k8s.api.networking.v1.NetworkPolicySpec", + "description": "Specification of the desired behavior for this NetworkPolicy." + } + }, + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "networking.k8s.io", + "kind": "NetworkPolicy", + "version": "v1" + } + ] + }, + "io.k8s.api.networking.v1.NetworkPolicyEgressRule": { + "description": "NetworkPolicyEgressRule describes a particular set of traffic that is allowed out of pods matched by a NetworkPolicySpec's podSelector. The traffic must match both ports and to. This type is beta-level in 1.8", + "properties": { + "ports": { + "description": "List of destination ports for outgoing traffic. Each item in this list is combined using a logical OR. If this field is empty or missing, this rule matches all ports (traffic not restricted by port). If this field is present and contains at least one item, then this rule allows traffic only if the traffic matches at least one port in the list.", + "items": { + "$ref": "#/definitions/io.k8s.api.networking.v1.NetworkPolicyPort" + }, + "type": "array" + }, + "to": { + "description": "List of destinations for outgoing traffic of pods selected for this rule. Items in this list are combined using a logical OR operation. If this field is empty or missing, this rule matches all destinations (traffic not restricted by destination). If this field is present and contains at least one item, this rule allows traffic only if the traffic matches at least one item in the to list.", + "items": { + "$ref": "#/definitions/io.k8s.api.networking.v1.NetworkPolicyPeer" + }, + "type": "array" + } + }, + "type": "object" + }, + "io.k8s.api.networking.v1.NetworkPolicyIngressRule": { + "description": "NetworkPolicyIngressRule describes a particular set of traffic that is allowed to the pods matched by a NetworkPolicySpec's podSelector. The traffic must match both ports and from.", + "properties": { + "from": { + "description": "List of sources which should be able to access the pods selected for this rule. Items in this list are combined using a logical OR operation. If this field is empty or missing, this rule matches all sources (traffic not restricted by source). If this field is present and contains at least one item, this rule allows traffic only if the traffic matches at least one item in the from list.", + "items": { + "$ref": "#/definitions/io.k8s.api.networking.v1.NetworkPolicyPeer" + }, + "type": "array" + }, + "ports": { + "description": "List of ports which should be made accessible on the pods selected for this rule. Each item in this list is combined using a logical OR. If this field is empty or missing, this rule matches all ports (traffic not restricted by port). If this field is present and contains at least one item, then this rule allows traffic only if the traffic matches at least one port in the list.", + "items": { + "$ref": "#/definitions/io.k8s.api.networking.v1.NetworkPolicyPort" + }, + "type": "array" + } + }, + "type": "object" + }, + "io.k8s.api.networking.v1.NetworkPolicyList": { + "description": "NetworkPolicyList is a list of NetworkPolicy objects.", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "items": { + "description": "Items is a list of schema objects.", + "items": { + "$ref": "#/definitions/io.k8s.api.networking.v1.NetworkPolicy" + }, + "type": "array" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta", + "description": "Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata" + } + }, + "required": [ + "items" + ], + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "networking.k8s.io", + "kind": "NetworkPolicyList", + "version": "v1" + } + ] + }, + "io.k8s.api.networking.v1.NetworkPolicyPeer": { + "description": "NetworkPolicyPeer describes a peer to allow traffic to/from. Only certain combinations of fields are allowed", + "properties": { + "ipBlock": { + "$ref": "#/definitions/io.k8s.api.networking.v1.IPBlock", + "description": "IPBlock defines policy on a particular IPBlock. If this field is set then neither of the other fields can be." + }, + "namespaceSelector": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector", + "description": "Selects Namespaces using cluster-scoped labels. This field follows standard label selector semantics; if present but empty, it selects all namespaces.\n\nIf PodSelector is also set, then the NetworkPolicyPeer as a whole selects the Pods matching PodSelector in the Namespaces selected by NamespaceSelector. Otherwise it selects all Pods in the Namespaces selected by NamespaceSelector." + }, + "podSelector": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector", + "description": "This is a label selector which selects Pods. This field follows standard label selector semantics; if present but empty, it selects all pods.\n\nIf NamespaceSelector is also set, then the NetworkPolicyPeer as a whole selects the Pods matching PodSelector in the Namespaces selected by NamespaceSelector. Otherwise it selects the Pods matching PodSelector in the policy's own Namespace." + } + }, + "type": "object" + }, + "io.k8s.api.networking.v1.NetworkPolicyPort": { + "description": "NetworkPolicyPort describes a port to allow traffic on", + "properties": { + "endPort": { + "description": "If set, indicates that the range of ports from port to endPort, inclusive, should be allowed by the policy. This field cannot be defined if the port field is not defined or if the port field is defined as a named (string) port. The endPort must be equal or greater than port. This feature is in Alpha state and should be enabled using the Feature Gate \"NetworkPolicyEndPort\".", + "format": "int32", + "type": "integer" + }, + "port": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.util.intstr.IntOrString", + "description": "The port on the given protocol. This can either be a numerical or named port on a pod. If this field is not provided, this matches all port names and numbers. If present, only traffic on the specified protocol AND port will be matched." + }, + "protocol": { + "description": "The protocol (TCP, UDP, or SCTP) which traffic must match. If not specified, this field defaults to TCP.", + "type": "string" + } + }, + "type": "object" + }, + "io.k8s.api.networking.v1.NetworkPolicySpec": { + "description": "NetworkPolicySpec provides the specification of a NetworkPolicy", + "properties": { + "egress": { + "description": "List of egress rules to be applied to the selected pods. Outgoing traffic is allowed if there are no NetworkPolicies selecting the pod (and cluster policy otherwise allows the traffic), OR if the traffic matches at least one egress rule across all of the NetworkPolicy objects whose podSelector matches the pod. If this field is empty then this NetworkPolicy limits all outgoing traffic (and serves solely to ensure that the pods it selects are isolated by default). This field is beta-level in 1.8", + "items": { + "$ref": "#/definitions/io.k8s.api.networking.v1.NetworkPolicyEgressRule" + }, + "type": "array" + }, + "ingress": { + "description": "List of ingress rules to be applied to the selected pods. Traffic is allowed to a pod if there are no NetworkPolicies selecting the pod (and cluster policy otherwise allows the traffic), OR if the traffic source is the pod's local node, OR if the traffic matches at least one ingress rule across all of the NetworkPolicy objects whose podSelector matches the pod. If this field is empty then this NetworkPolicy does not allow any traffic (and serves solely to ensure that the pods it selects are isolated by default)", + "items": { + "$ref": "#/definitions/io.k8s.api.networking.v1.NetworkPolicyIngressRule" + }, + "type": "array" + }, + "podSelector": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector", + "description": "Selects the pods to which this NetworkPolicy object applies. The array of ingress rules is applied to any pods selected by this field. Multiple network policies can select the same set of pods. In this case, the ingress rules for each are combined additively. This field is NOT optional and follows standard label selector semantics. An empty podSelector matches all pods in this namespace." + }, + "policyTypes": { + "description": "List of rule types that the NetworkPolicy relates to. Valid options are [\"Ingress\"], [\"Egress\"], or [\"Ingress\", \"Egress\"]. If this field is not specified, it will default based on the existence of Ingress or Egress rules; policies that contain an Egress section are assumed to affect Egress, and all policies (whether or not they contain an Ingress section) are assumed to affect Ingress. If you want to write an egress-only policy, you must explicitly specify policyTypes [ \"Egress\" ]. Likewise, if you want to write a policy that specifies that no egress is allowed, you must specify a policyTypes value that include \"Egress\" (since such a policy would not include an Egress section and would otherwise default to just [ \"Ingress\" ]). This field is beta-level in 1.8", + "items": { + "type": "string" + }, + "type": "array" + } + }, + "required": [ + "podSelector" + ], + "type": "object" + }, + "io.k8s.api.networking.v1.ServiceBackendPort": { + "description": "ServiceBackendPort is the service port being referenced.", + "properties": { + "name": { + "description": "Name is the name of the port on the Service. This is a mutually exclusive setting with \"Number\".", + "type": "string" + }, + "number": { + "description": "Number is the numerical port number (e.g. 80) on the Service. This is a mutually exclusive setting with \"Name\".", + "format": "int32", + "type": "integer" + } + }, + "type": "object" + }, + "io.k8s.api.networking.v1beta1.HTTPIngressPath": { + "description": "HTTPIngressPath associates a path with a backend. Incoming urls matching the path are forwarded to the backend.", + "properties": { + "backend": { + "$ref": "#/definitions/io.k8s.api.networking.v1beta1.IngressBackend", + "description": "Backend defines the referenced service endpoint to which the traffic will be forwarded to." + }, + "path": { + "description": "Path is matched against the path of an incoming request. Currently it can contain characters disallowed from the conventional \"path\" part of a URL as defined by RFC 3986. Paths must begin with a '/'. When unspecified, all paths from incoming requests are matched.", + "type": "string" + }, + "pathType": { + "description": "PathType determines the interpretation of the Path matching. PathType can be one of the following values: * Exact: Matches the URL path exactly. * Prefix: Matches based on a URL path prefix split by '/'. Matching is\n done on a path element by element basis. A path element refers is the\n list of labels in the path split by the '/' separator. A request is a\n match for path p if every p is an element-wise prefix of p of the\n request path. Note that if the last element of the path is a substring\n of the last element in request path, it is not a match (e.g. /foo/bar\n matches /foo/bar/baz, but does not match /foo/barbaz).\n* ImplementationSpecific: Interpretation of the Path matching is up to\n the IngressClass. Implementations can treat this as a separate PathType\n or treat it identically to Prefix or Exact path types.\nImplementations are required to support all path types. Defaults to ImplementationSpecific.", + "type": "string" + } + }, + "required": [ + "backend" + ], + "type": "object" + }, + "io.k8s.api.networking.v1beta1.HTTPIngressRuleValue": { + "description": "HTTPIngressRuleValue is a list of http selectors pointing to backends. In the example: http://\u003chost\u003e/\u003cpath\u003e?\u003csearchpart\u003e -\u003e backend where where parts of the url correspond to RFC 3986, this resource will be used to match against everything after the last '/' and before the first '?' or '#'.", + "properties": { + "paths": { + "description": "A collection of paths that map requests to backends.", + "items": { + "$ref": "#/definitions/io.k8s.api.networking.v1beta1.HTTPIngressPath" + }, + "type": "array" + } + }, + "required": [ + "paths" + ], + "type": "object" + }, + "io.k8s.api.networking.v1beta1.Ingress": { + "description": "Ingress is a collection of rules that allow inbound connections to reach the endpoints defined by a backend. An Ingress can be configured to give services externally-reachable urls, load balance traffic, terminate SSL, offer name based virtual hosting etc.", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta", + "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata" + }, + "spec": { + "$ref": "#/definitions/io.k8s.api.networking.v1beta1.IngressSpec", + "description": "Spec is the desired state of the Ingress. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status" + }, + "status": { + "$ref": "#/definitions/io.k8s.api.networking.v1beta1.IngressStatus", + "description": "Status is the current state of the Ingress. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status" + } + }, + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "networking.k8s.io", + "kind": "Ingress", + "version": "v1beta1" + } + ] + }, + "io.k8s.api.networking.v1beta1.IngressBackend": { + "description": "IngressBackend describes all endpoints for a given service and port.", + "properties": { + "resource": { + "$ref": "#/definitions/io.k8s.api.core.v1.TypedLocalObjectReference", + "description": "Resource is an ObjectRef to another Kubernetes resource in the namespace of the Ingress object. If resource is specified, serviceName and servicePort must not be specified." + }, + "serviceName": { + "description": "Specifies the name of the referenced service.", + "type": "string" + }, + "servicePort": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.util.intstr.IntOrString", + "description": "Specifies the port of the referenced service." + } + }, + "type": "object" + }, + "io.k8s.api.networking.v1beta1.IngressClass": { + "description": "IngressClass represents the class of the Ingress, referenced by the Ingress Spec. The `ingressclass.kubernetes.io/is-default-class` annotation can be used to indicate that an IngressClass should be considered default. When a single IngressClass resource has this annotation set to true, new Ingress resources without a class specified will be assigned this default class.", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta", + "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata" + }, + "spec": { + "$ref": "#/definitions/io.k8s.api.networking.v1beta1.IngressClassSpec", + "description": "Spec is the desired state of the IngressClass. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status" + } + }, + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "networking.k8s.io", + "kind": "IngressClass", + "version": "v1beta1" + } + ] + }, + "io.k8s.api.networking.v1beta1.IngressClassList": { + "description": "IngressClassList is a collection of IngressClasses.", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "items": { + "description": "Items is the list of IngressClasses.", + "items": { + "$ref": "#/definitions/io.k8s.api.networking.v1beta1.IngressClass" + }, + "type": "array" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta", + "description": "Standard list metadata." + } + }, + "required": [ + "items" + ], + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "networking.k8s.io", + "kind": "IngressClassList", + "version": "v1beta1" + } + ] + }, + "io.k8s.api.networking.v1beta1.IngressClassParametersReference": { + "description": "IngressClassParametersReference identifies an API object. This can be used to specify a cluster or namespace-scoped resource.", + "properties": { + "apiGroup": { + "description": "APIGroup is the group for the resource being referenced. If APIGroup is not specified, the specified Kind must be in the core API group. For any other third-party types, APIGroup is required.", + "type": "string" + }, + "kind": { + "description": "Kind is the type of resource being referenced.", + "type": "string" + }, + "name": { + "description": "Name is the name of resource being referenced.", + "type": "string" + }, + "namespace": { + "description": "Namespace is the namespace of the resource being referenced. This field is required when scope is set to \"Namespace\" and must be unset when scope is set to \"Cluster\".", + "type": "string" + }, + "scope": { + "description": "Scope represents if this refers to a cluster or namespace scoped resource. This may be set to \"Cluster\" (default) or \"Namespace\". Field can be enabled with IngressClassNamespacedParams feature gate.", + "type": "string" + } + }, + "required": [ + "kind", + "name" + ], + "type": "object" + }, + "io.k8s.api.networking.v1beta1.IngressClassSpec": { + "description": "IngressClassSpec provides information about the class of an Ingress.", + "properties": { + "controller": { + "description": "Controller refers to the name of the controller that should handle this class. This allows for different \"flavors\" that are controlled by the same controller. For example, you may have different Parameters for the same implementing controller. This should be specified as a domain-prefixed path no more than 250 characters in length, e.g. \"acme.io/ingress-controller\". This field is immutable.", + "type": "string" + }, + "parameters": { + "$ref": "#/definitions/io.k8s.api.networking.v1beta1.IngressClassParametersReference", + "description": "Parameters is a link to a custom resource containing additional configuration for the controller. This is optional if the controller does not require extra parameters." + } + }, + "type": "object" + }, + "io.k8s.api.networking.v1beta1.IngressList": { + "description": "IngressList is a collection of Ingress.", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "items": { + "description": "Items is the list of Ingress.", + "items": { + "$ref": "#/definitions/io.k8s.api.networking.v1beta1.Ingress" + }, + "type": "array" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta", + "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata" + } + }, + "required": [ + "items" + ], + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "networking.k8s.io", + "kind": "IngressList", + "version": "v1beta1" + } + ] + }, + "io.k8s.api.networking.v1beta1.IngressRule": { + "description": "IngressRule represents the rules mapping the paths under a specified host to the related backend services. Incoming requests are first evaluated for a host match, then routed to the backend associated with the matching IngressRuleValue.", + "properties": { + "host": { + "description": "Host is the fully qualified domain name of a network host, as defined by RFC 3986. Note the following deviations from the \"host\" part of the URI as defined in RFC 3986: 1. IPs are not allowed. Currently an IngressRuleValue can only apply to\n the IP in the Spec of the parent Ingress.\n2. The `:` delimiter is not respected because ports are not allowed.\n\t Currently the port of an Ingress is implicitly :80 for http and\n\t :443 for https.\nBoth these may change in the future. Incoming requests are matched against the host before the IngressRuleValue. If the host is unspecified, the Ingress routes all traffic based on the specified IngressRuleValue.\n\nHost can be \"precise\" which is a domain name without the terminating dot of a network host (e.g. \"foo.bar.com\") or \"wildcard\", which is a domain name prefixed with a single wildcard label (e.g. \"*.foo.com\"). The wildcard character '*' must appear by itself as the first DNS label and matches only a single label. You cannot have a wildcard label by itself (e.g. Host == \"*\"). Requests will be matched against the Host field in the following way: 1. If Host is precise, the request matches this rule if the http host header is equal to Host. 2. If Host is a wildcard, then the request matches this rule if the http host header is to equal to the suffix (removing the first label) of the wildcard rule.", + "type": "string" + }, + "http": { + "$ref": "#/definitions/io.k8s.api.networking.v1beta1.HTTPIngressRuleValue" + } + }, + "type": "object" + }, + "io.k8s.api.networking.v1beta1.IngressSpec": { + "description": "IngressSpec describes the Ingress the user wishes to exist.", + "properties": { + "backend": { + "$ref": "#/definitions/io.k8s.api.networking.v1beta1.IngressBackend", + "description": "A default backend capable of servicing requests that don't match any rule. At least one of 'backend' or 'rules' must be specified. This field is optional to allow the loadbalancer controller or defaulting logic to specify a global default." + }, + "ingressClassName": { + "description": "IngressClassName is the name of the IngressClass cluster resource. The associated IngressClass defines which controller will implement the resource. This replaces the deprecated `kubernetes.io/ingress.class` annotation. For backwards compatibility, when that annotation is set, it must be given precedence over this field. The controller may emit a warning if the field and annotation have different values. Implementations of this API should ignore Ingresses without a class specified. An IngressClass resource may be marked as default, which can be used to set a default value for this field. For more information, refer to the IngressClass documentation.", + "type": "string" + }, + "rules": { + "description": "A list of host rules used to configure the Ingress. If unspecified, or no rule matches, all traffic is sent to the default backend.", + "items": { + "$ref": "#/definitions/io.k8s.api.networking.v1beta1.IngressRule" + }, + "type": "array" + }, + "tls": { + "description": "TLS configuration. Currently the Ingress only supports a single TLS port, 443. If multiple members of this list specify different hosts, they will be multiplexed on the same port according to the hostname specified through the SNI TLS extension, if the ingress controller fulfilling the ingress supports SNI.", + "items": { + "$ref": "#/definitions/io.k8s.api.networking.v1beta1.IngressTLS" + }, + "type": "array" + } + }, + "type": "object" + }, + "io.k8s.api.networking.v1beta1.IngressStatus": { + "description": "IngressStatus describe the current state of the Ingress.", + "properties": { + "loadBalancer": { + "$ref": "#/definitions/io.k8s.api.core.v1.LoadBalancerStatus", + "description": "LoadBalancer contains the current status of the load-balancer." + } + }, + "type": "object" + }, + "io.k8s.api.networking.v1beta1.IngressTLS": { + "description": "IngressTLS describes the transport layer security associated with an Ingress.", + "properties": { + "hosts": { + "description": "Hosts are a list of hosts included in the TLS certificate. The values in this list must match the name/s used in the tlsSecret. Defaults to the wildcard host setting for the loadbalancer controller fulfilling this Ingress, if left unspecified.", + "items": { + "type": "string" + }, + "type": "array" + }, + "secretName": { + "description": "SecretName is the name of the secret used to terminate TLS traffic on port 443. Field is left optional to allow TLS routing based on SNI hostname alone. If the SNI host in a listener conflicts with the \"Host\" header field used by an IngressRule, the SNI host is used for termination and value of the Host header is used for routing.", + "type": "string" + } + }, + "type": "object" + }, + "io.k8s.api.node.v1.Overhead": { + "description": "Overhead structure represents the resource overhead associated with running a pod.", + "properties": { + "podFixed": { + "additionalProperties": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity" + }, + "description": "PodFixed represents the fixed resource overhead associated with running a pod.", + "type": "object" + } + }, + "type": "object" + }, + "io.k8s.api.node.v1.RuntimeClass": { + "description": "RuntimeClass defines a class of container runtime supported in the cluster. The RuntimeClass is used to determine which container runtime is used to run all containers in a pod. RuntimeClasses are manually defined by a user or cluster provisioner, and referenced in the PodSpec. The Kubelet is responsible for resolving the RuntimeClassName reference before running the pod. For more details, see https://kubernetes.io/docs/concepts/containers/runtime-class/", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "handler": { + "description": "Handler specifies the underlying runtime and configuration that the CRI implementation will use to handle pods of this class. The possible values are specific to the node \u0026 CRI configuration. It is assumed that all handlers are available on every node, and handlers of the same name are equivalent on every node. For example, a handler called \"runc\" might specify that the runc OCI runtime (using native Linux containers) will be used to run the containers in a pod. The Handler must be lowercase, conform to the DNS Label (RFC 1123) requirements, and is immutable.", + "type": "string" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta", + "description": "More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata" + }, + "overhead": { + "$ref": "#/definitions/io.k8s.api.node.v1.Overhead", + "description": "Overhead represents the resource overhead associated with running a pod for a given RuntimeClass. For more details, see\n https://kubernetes.io/docs/concepts/scheduling-eviction/pod-overhead/\nThis field is in beta starting v1.18 and is only honored by servers that enable the PodOverhead feature." + }, + "scheduling": { + "$ref": "#/definitions/io.k8s.api.node.v1.Scheduling", + "description": "Scheduling holds the scheduling constraints to ensure that pods running with this RuntimeClass are scheduled to nodes that support it. If scheduling is nil, this RuntimeClass is assumed to be supported by all nodes." + } + }, + "required": [ + "handler" + ], + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "node.k8s.io", + "kind": "RuntimeClass", + "version": "v1" + } + ] + }, + "io.k8s.api.node.v1.RuntimeClassList": { + "description": "RuntimeClassList is a list of RuntimeClass objects.", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "items": { + "description": "Items is a list of schema objects.", + "items": { + "$ref": "#/definitions/io.k8s.api.node.v1.RuntimeClass" + }, + "type": "array" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta", + "description": "Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata" + } + }, + "required": [ + "items" + ], + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "node.k8s.io", + "kind": "RuntimeClassList", + "version": "v1" + } + ] + }, + "io.k8s.api.node.v1.Scheduling": { + "description": "Scheduling specifies the scheduling constraints for nodes supporting a RuntimeClass.", + "properties": { + "nodeSelector": { + "additionalProperties": { + "type": "string" + }, + "description": "nodeSelector lists labels that must be present on nodes that support this RuntimeClass. Pods using this RuntimeClass can only be scheduled to a node matched by this selector. The RuntimeClass nodeSelector is merged with a pod's existing nodeSelector. Any conflicts will cause the pod to be rejected in admission.", + "type": "object" + }, + "tolerations": { + "description": "tolerations are appended (excluding duplicates) to pods running with this RuntimeClass during admission, effectively unioning the set of nodes tolerated by the pod and the RuntimeClass.", + "items": { + "$ref": "#/definitions/io.k8s.api.core.v1.Toleration" + }, + "type": "array", + "x-kubernetes-list-type": "atomic" + } + }, + "type": "object" + }, + "io.k8s.api.node.v1beta1.Overhead": { + "description": "Overhead structure represents the resource overhead associated with running a pod.", + "properties": { + "podFixed": { + "additionalProperties": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity" + }, + "description": "PodFixed represents the fixed resource overhead associated with running a pod.", + "type": "object" + } + }, + "type": "object" + }, + "io.k8s.api.node.v1beta1.RuntimeClass": { + "description": "RuntimeClass defines a class of container runtime supported in the cluster. The RuntimeClass is used to determine which container runtime is used to run all containers in a pod. RuntimeClasses are (currently) manually defined by a user or cluster provisioner, and referenced in the PodSpec. The Kubelet is responsible for resolving the RuntimeClassName reference before running the pod. For more details, see https://git.k8s.io/enhancements/keps/sig-node/runtime-class.md", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "handler": { + "description": "Handler specifies the underlying runtime and configuration that the CRI implementation will use to handle pods of this class. The possible values are specific to the node \u0026 CRI configuration. It is assumed that all handlers are available on every node, and handlers of the same name are equivalent on every node. For example, a handler called \"runc\" might specify that the runc OCI runtime (using native Linux containers) will be used to run the containers in a pod. The Handler must be lowercase, conform to the DNS Label (RFC 1123) requirements, and is immutable.", + "type": "string" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta", + "description": "More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata" + }, + "overhead": { + "$ref": "#/definitions/io.k8s.api.node.v1beta1.Overhead", + "description": "Overhead represents the resource overhead associated with running a pod for a given RuntimeClass. For more details, see https://git.k8s.io/enhancements/keps/sig-node/20190226-pod-overhead.md This field is alpha-level as of Kubernetes v1.15, and is only honored by servers that enable the PodOverhead feature." + }, + "scheduling": { + "$ref": "#/definitions/io.k8s.api.node.v1beta1.Scheduling", + "description": "Scheduling holds the scheduling constraints to ensure that pods running with this RuntimeClass are scheduled to nodes that support it. If scheduling is nil, this RuntimeClass is assumed to be supported by all nodes." + } + }, + "required": [ + "handler" + ], + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "node.k8s.io", + "kind": "RuntimeClass", + "version": "v1beta1" + } + ] + }, + "io.k8s.api.node.v1beta1.RuntimeClassList": { + "description": "RuntimeClassList is a list of RuntimeClass objects.", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "items": { + "description": "Items is a list of schema objects.", + "items": { + "$ref": "#/definitions/io.k8s.api.node.v1beta1.RuntimeClass" + }, + "type": "array" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta", + "description": "Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata" + } + }, + "required": [ + "items" + ], + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "node.k8s.io", + "kind": "RuntimeClassList", + "version": "v1beta1" + } + ] + }, + "io.k8s.api.node.v1beta1.Scheduling": { + "description": "Scheduling specifies the scheduling constraints for nodes supporting a RuntimeClass.", + "properties": { + "nodeSelector": { + "additionalProperties": { + "type": "string" + }, + "description": "nodeSelector lists labels that must be present on nodes that support this RuntimeClass. Pods using this RuntimeClass can only be scheduled to a node matched by this selector. The RuntimeClass nodeSelector is merged with a pod's existing nodeSelector. Any conflicts will cause the pod to be rejected in admission.", + "type": "object" + }, + "tolerations": { + "description": "tolerations are appended (excluding duplicates) to pods running with this RuntimeClass during admission, effectively unioning the set of nodes tolerated by the pod and the RuntimeClass.", + "items": { + "$ref": "#/definitions/io.k8s.api.core.v1.Toleration" + }, + "type": "array", + "x-kubernetes-list-type": "atomic" + } + }, + "type": "object" + }, + "io.k8s.api.policy.v1.PodDisruptionBudget": { + "description": "PodDisruptionBudget is an object to define the max disruption that can be caused to a collection of pods", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta", + "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata" + }, + "spec": { + "$ref": "#/definitions/io.k8s.api.policy.v1.PodDisruptionBudgetSpec", + "description": "Specification of the desired behavior of the PodDisruptionBudget." + }, + "status": { + "$ref": "#/definitions/io.k8s.api.policy.v1.PodDisruptionBudgetStatus", + "description": "Most recently observed status of the PodDisruptionBudget." + } + }, + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "policy", + "kind": "PodDisruptionBudget", + "version": "v1" + } + ] + }, + "io.k8s.api.policy.v1.PodDisruptionBudgetList": { + "description": "PodDisruptionBudgetList is a collection of PodDisruptionBudgets.", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "items": { + "description": "Items is a list of PodDisruptionBudgets", + "items": { + "$ref": "#/definitions/io.k8s.api.policy.v1.PodDisruptionBudget" + }, + "type": "array" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta", + "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata" + } + }, + "required": [ + "items" + ], + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "policy", + "kind": "PodDisruptionBudgetList", + "version": "v1" + } + ] + }, + "io.k8s.api.policy.v1.PodDisruptionBudgetSpec": { + "description": "PodDisruptionBudgetSpec is a description of a PodDisruptionBudget.", + "properties": { + "maxUnavailable": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.util.intstr.IntOrString", + "description": "An eviction is allowed if at most \"maxUnavailable\" pods selected by \"selector\" are unavailable after the eviction, i.e. even in absence of the evicted pod. For example, one can prevent all voluntary evictions by specifying 0. This is a mutually exclusive setting with \"minAvailable\"." + }, + "minAvailable": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.util.intstr.IntOrString", + "description": "An eviction is allowed if at least \"minAvailable\" pods selected by \"selector\" will still be available after the eviction, i.e. even in the absence of the evicted pod. So for example you can prevent all voluntary evictions by specifying \"100%\"." + }, + "selector": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector", + "description": "Label query over pods whose evictions are managed by the disruption budget. A null selector will match no pods, while an empty ({}) selector will select all pods within the namespace.", + "x-kubernetes-patch-strategy": "replace" + } + }, + "type": "object" + }, + "io.k8s.api.policy.v1.PodDisruptionBudgetStatus": { + "description": "PodDisruptionBudgetStatus represents information about the status of a PodDisruptionBudget. Status may trail the actual state of a system.", + "properties": { + "conditions": { + "description": "Conditions contain conditions for PDB. The disruption controller sets the DisruptionAllowed condition. The following are known values for the reason field (additional reasons could be added in the future): - SyncFailed: The controller encountered an error and wasn't able to compute\n the number of allowed disruptions. Therefore no disruptions are\n allowed and the status of the condition will be False.\n- InsufficientPods: The number of pods are either at or below the number\n required by the PodDisruptionBudget. No disruptions are\n allowed and the status of the condition will be False.\n- SufficientPods: There are more pods than required by the PodDisruptionBudget.\n The condition will be True, and the number of allowed\n disruptions are provided by the disruptionsAllowed property.", + "items": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition" + }, + "type": "array", + "x-kubernetes-list-map-keys": [ + "type" + ], + "x-kubernetes-list-type": "map", + "x-kubernetes-patch-merge-key": "type", + "x-kubernetes-patch-strategy": "merge" + }, + "currentHealthy": { + "description": "current number of healthy pods", + "format": "int32", + "type": "integer" + }, + "desiredHealthy": { + "description": "minimum desired number of healthy pods", + "format": "int32", + "type": "integer" + }, + "disruptedPods": { + "additionalProperties": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" + }, + "description": "DisruptedPods contains information about pods whose eviction was processed by the API server eviction subresource handler but has not yet been observed by the PodDisruptionBudget controller. A pod will be in this map from the time when the API server processed the eviction request to the time when the pod is seen by PDB controller as having been marked for deletion (or after a timeout). The key in the map is the name of the pod and the value is the time when the API server processed the eviction request. If the deletion didn't occur and a pod is still there it will be removed from the list automatically by PodDisruptionBudget controller after some time. If everything goes smooth this map should be empty for the most of the time. Large number of entries in the map may indicate problems with pod deletions.", + "type": "object" + }, + "disruptionsAllowed": { + "description": "Number of pod disruptions that are currently allowed.", + "format": "int32", + "type": "integer" + }, + "expectedPods": { + "description": "total number of pods counted by this disruption budget", + "format": "int32", + "type": "integer" + }, + "observedGeneration": { + "description": "Most recent generation observed when updating this PDB status. DisruptionsAllowed and other status information is valid only if observedGeneration equals to PDB's object generation.", + "format": "int64", + "type": "integer" + } + }, + "required": [ + "disruptionsAllowed", + "currentHealthy", + "desiredHealthy", + "expectedPods" + ], + "type": "object" + }, + "io.k8s.api.policy.v1beta1.AllowedCSIDriver": { + "description": "AllowedCSIDriver represents a single inline CSI Driver that is allowed to be used.", + "properties": { + "name": { + "description": "Name is the registered name of the CSI driver", + "type": "string" + } + }, + "required": [ + "name" + ], + "type": "object" + }, + "io.k8s.api.policy.v1beta1.AllowedFlexVolume": { + "description": "AllowedFlexVolume represents a single Flexvolume that is allowed to be used.", + "properties": { + "driver": { + "description": "driver is the name of the Flexvolume driver.", + "type": "string" + } + }, + "required": [ + "driver" + ], + "type": "object" + }, + "io.k8s.api.policy.v1beta1.AllowedHostPath": { + "description": "AllowedHostPath defines the host volume conditions that will be enabled by a policy for pods to use. It requires the path prefix to be defined.", + "properties": { + "pathPrefix": { + "description": "pathPrefix is the path prefix that the host volume must match. It does not support `*`. Trailing slashes are trimmed when validating the path prefix with a host path.\n\nExamples: `/foo` would allow `/foo`, `/foo/` and `/foo/bar` `/foo` would not allow `/food` or `/etc/foo`", + "type": "string" + }, + "readOnly": { + "description": "when set to true, will allow host volumes matching the pathPrefix only if all volume mounts are readOnly.", + "type": "boolean" + } + }, + "type": "object" + }, + "io.k8s.api.policy.v1beta1.Eviction": { + "description": "Eviction evicts a pod from its node subject to certain policies and safety constraints. This is a subresource of Pod. A request to cause such an eviction is created by POSTing to .../pods/\u003cpod name\u003e/evictions.", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "deleteOptions": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions", + "description": "DeleteOptions may be provided" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta", + "description": "ObjectMeta describes the pod that is being evicted." + } + }, + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "policy", + "kind": "Eviction", + "version": "v1beta1" + } + ] + }, + "io.k8s.api.policy.v1beta1.FSGroupStrategyOptions": { + "description": "FSGroupStrategyOptions defines the strategy type and options used to create the strategy.", + "properties": { + "ranges": { + "description": "ranges are the allowed ranges of fs groups. If you would like to force a single fs group then supply a single range with the same start and end. Required for MustRunAs.", + "items": { + "$ref": "#/definitions/io.k8s.api.policy.v1beta1.IDRange" + }, + "type": "array" + }, + "rule": { + "description": "rule is the strategy that will dictate what FSGroup is used in the SecurityContext.", + "type": "string" + } + }, + "type": "object" + }, + "io.k8s.api.policy.v1beta1.HostPortRange": { + "description": "HostPortRange defines a range of host ports that will be enabled by a policy for pods to use. It requires both the start and end to be defined.", + "properties": { + "max": { + "description": "max is the end of the range, inclusive.", + "format": "int32", + "type": "integer" + }, + "min": { + "description": "min is the start of the range, inclusive.", + "format": "int32", + "type": "integer" + } + }, + "required": [ + "min", + "max" + ], + "type": "object" + }, + "io.k8s.api.policy.v1beta1.IDRange": { + "description": "IDRange provides a min/max of an allowed range of IDs.", + "properties": { + "max": { + "description": "max is the end of the range, inclusive.", + "format": "int64", + "type": "integer" + }, + "min": { + "description": "min is the start of the range, inclusive.", + "format": "int64", + "type": "integer" + } + }, + "required": [ + "min", + "max" + ], + "type": "object" + }, + "io.k8s.api.policy.v1beta1.PodDisruptionBudget": { + "description": "PodDisruptionBudget is an object to define the max disruption that can be caused to a collection of pods", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + }, + "spec": { + "$ref": "#/definitions/io.k8s.api.policy.v1beta1.PodDisruptionBudgetSpec", + "description": "Specification of the desired behavior of the PodDisruptionBudget." + }, + "status": { + "$ref": "#/definitions/io.k8s.api.policy.v1beta1.PodDisruptionBudgetStatus", + "description": "Most recently observed status of the PodDisruptionBudget." + } + }, + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "policy", + "kind": "PodDisruptionBudget", + "version": "v1beta1" + } + ] + }, + "io.k8s.api.policy.v1beta1.PodDisruptionBudgetList": { + "description": "PodDisruptionBudgetList is a collection of PodDisruptionBudgets.", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "items": { + "items": { + "$ref": "#/definitions/io.k8s.api.policy.v1beta1.PodDisruptionBudget" + }, + "type": "array" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" + } + }, + "required": [ + "items" + ], + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "policy", + "kind": "PodDisruptionBudgetList", + "version": "v1beta1" + } + ] + }, + "io.k8s.api.policy.v1beta1.PodDisruptionBudgetSpec": { + "description": "PodDisruptionBudgetSpec is a description of a PodDisruptionBudget.", + "properties": { + "maxUnavailable": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.util.intstr.IntOrString", + "description": "An eviction is allowed if at most \"maxUnavailable\" pods selected by \"selector\" are unavailable after the eviction, i.e. even in absence of the evicted pod. For example, one can prevent all voluntary evictions by specifying 0. This is a mutually exclusive setting with \"minAvailable\"." + }, + "minAvailable": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.util.intstr.IntOrString", + "description": "An eviction is allowed if at least \"minAvailable\" pods selected by \"selector\" will still be available after the eviction, i.e. even in the absence of the evicted pod. So for example you can prevent all voluntary evictions by specifying \"100%\"." + }, + "selector": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector", + "description": "Label query over pods whose evictions are managed by the disruption budget. A null selector selects no pods. An empty selector ({}) also selects no pods, which differs from standard behavior of selecting all pods. In policy/v1, an empty selector will select all pods in the namespace.", + "x-kubernetes-patch-strategy": "replace" + } + }, + "type": "object" + }, + "io.k8s.api.policy.v1beta1.PodDisruptionBudgetStatus": { + "description": "PodDisruptionBudgetStatus represents information about the status of a PodDisruptionBudget. Status may trail the actual state of a system.", + "properties": { + "conditions": { + "description": "Conditions contain conditions for PDB. The disruption controller sets the DisruptionAllowed condition. The following are known values for the reason field (additional reasons could be added in the future): - SyncFailed: The controller encountered an error and wasn't able to compute\n the number of allowed disruptions. Therefore no disruptions are\n allowed and the status of the condition will be False.\n- InsufficientPods: The number of pods are either at or below the number\n required by the PodDisruptionBudget. No disruptions are\n allowed and the status of the condition will be False.\n- SufficientPods: There are more pods than required by the PodDisruptionBudget.\n The condition will be True, and the number of allowed\n disruptions are provided by the disruptionsAllowed property.", + "items": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition" + }, + "type": "array", + "x-kubernetes-list-map-keys": [ + "type" + ], + "x-kubernetes-list-type": "map", + "x-kubernetes-patch-merge-key": "type", + "x-kubernetes-patch-strategy": "merge" + }, + "currentHealthy": { + "description": "current number of healthy pods", + "format": "int32", + "type": "integer" + }, + "desiredHealthy": { + "description": "minimum desired number of healthy pods", + "format": "int32", + "type": "integer" + }, + "disruptedPods": { + "additionalProperties": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" + }, + "description": "DisruptedPods contains information about pods whose eviction was processed by the API server eviction subresource handler but has not yet been observed by the PodDisruptionBudget controller. A pod will be in this map from the time when the API server processed the eviction request to the time when the pod is seen by PDB controller as having been marked for deletion (or after a timeout). The key in the map is the name of the pod and the value is the time when the API server processed the eviction request. If the deletion didn't occur and a pod is still there it will be removed from the list automatically by PodDisruptionBudget controller after some time. If everything goes smooth this map should be empty for the most of the time. Large number of entries in the map may indicate problems with pod deletions.", + "type": "object" + }, + "disruptionsAllowed": { + "description": "Number of pod disruptions that are currently allowed.", + "format": "int32", + "type": "integer" + }, + "expectedPods": { + "description": "total number of pods counted by this disruption budget", + "format": "int32", + "type": "integer" + }, + "observedGeneration": { + "description": "Most recent generation observed when updating this PDB status. DisruptionsAllowed and other status information is valid only if observedGeneration equals to PDB's object generation.", + "format": "int64", + "type": "integer" + } + }, + "required": [ + "disruptionsAllowed", + "currentHealthy", + "desiredHealthy", + "expectedPods" + ], + "type": "object" + }, + "io.k8s.api.policy.v1beta1.PodSecurityPolicy": { + "description": "PodSecurityPolicy governs the ability to make requests that affect the Security Context that will be applied to a pod and container. Deprecated in 1.21.", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta", + "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata" + }, + "spec": { + "$ref": "#/definitions/io.k8s.api.policy.v1beta1.PodSecurityPolicySpec", + "description": "spec defines the policy enforced." + } + }, + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "policy", + "kind": "PodSecurityPolicy", + "version": "v1beta1" + } + ] + }, + "io.k8s.api.policy.v1beta1.PodSecurityPolicyList": { + "description": "PodSecurityPolicyList is a list of PodSecurityPolicy objects.", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "items": { + "description": "items is a list of schema objects.", + "items": { + "$ref": "#/definitions/io.k8s.api.policy.v1beta1.PodSecurityPolicy" + }, + "type": "array" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta", + "description": "Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata" + } + }, + "required": [ + "items" + ], + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "policy", + "kind": "PodSecurityPolicyList", + "version": "v1beta1" + } + ] + }, + "io.k8s.api.policy.v1beta1.PodSecurityPolicySpec": { + "description": "PodSecurityPolicySpec defines the policy enforced.", + "properties": { + "allowPrivilegeEscalation": { + "description": "allowPrivilegeEscalation determines if a pod can request to allow privilege escalation. If unspecified, defaults to true.", + "type": "boolean" + }, + "allowedCSIDrivers": { + "description": "AllowedCSIDrivers is an allowlist of inline CSI drivers that must be explicitly set to be embedded within a pod spec. An empty value indicates that any CSI driver can be used for inline ephemeral volumes. This is a beta field, and is only honored if the API server enables the CSIInlineVolume feature gate.", + "items": { + "$ref": "#/definitions/io.k8s.api.policy.v1beta1.AllowedCSIDriver" + }, + "type": "array" + }, + "allowedCapabilities": { + "description": "allowedCapabilities is a list of capabilities that can be requested to add to the container. Capabilities in this field may be added at the pod author's discretion. You must not list a capability in both allowedCapabilities and requiredDropCapabilities.", + "items": { + "type": "string" + }, + "type": "array" + }, + "allowedFlexVolumes": { + "description": "allowedFlexVolumes is an allowlist of Flexvolumes. Empty or nil indicates that all Flexvolumes may be used. This parameter is effective only when the usage of the Flexvolumes is allowed in the \"volumes\" field.", + "items": { + "$ref": "#/definitions/io.k8s.api.policy.v1beta1.AllowedFlexVolume" + }, + "type": "array" + }, + "allowedHostPaths": { + "description": "allowedHostPaths is an allowlist of host paths. Empty indicates that all host paths may be used.", + "items": { + "$ref": "#/definitions/io.k8s.api.policy.v1beta1.AllowedHostPath" + }, + "type": "array" + }, + "allowedProcMountTypes": { + "description": "AllowedProcMountTypes is an allowlist of allowed ProcMountTypes. Empty or nil indicates that only the DefaultProcMountType may be used. This requires the ProcMountType feature flag to be enabled.", + "items": { + "type": "string" + }, + "type": "array" + }, + "allowedUnsafeSysctls": { + "description": "allowedUnsafeSysctls is a list of explicitly allowed unsafe sysctls, defaults to none. Each entry is either a plain sysctl name or ends in \"*\" in which case it is considered as a prefix of allowed sysctls. Single * means all unsafe sysctls are allowed. Kubelet has to allowlist all allowed unsafe sysctls explicitly to avoid rejection.\n\nExamples: e.g. \"foo/*\" allows \"foo/bar\", \"foo/baz\", etc. e.g. \"foo.*\" allows \"foo.bar\", \"foo.baz\", etc.", + "items": { + "type": "string" + }, + "type": "array" + }, + "defaultAddCapabilities": { + "description": "defaultAddCapabilities is the default set of capabilities that will be added to the container unless the pod spec specifically drops the capability. You may not list a capability in both defaultAddCapabilities and requiredDropCapabilities. Capabilities added here are implicitly allowed, and need not be included in the allowedCapabilities list.", + "items": { + "type": "string" + }, + "type": "array" + }, + "defaultAllowPrivilegeEscalation": { + "description": "defaultAllowPrivilegeEscalation controls the default setting for whether a process can gain more privileges than its parent process.", + "type": "boolean" + }, + "forbiddenSysctls": { + "description": "forbiddenSysctls is a list of explicitly forbidden sysctls, defaults to none. Each entry is either a plain sysctl name or ends in \"*\" in which case it is considered as a prefix of forbidden sysctls. Single * means all sysctls are forbidden.\n\nExamples: e.g. \"foo/*\" forbids \"foo/bar\", \"foo/baz\", etc. e.g. \"foo.*\" forbids \"foo.bar\", \"foo.baz\", etc.", + "items": { + "type": "string" + }, + "type": "array" + }, + "fsGroup": { + "$ref": "#/definitions/io.k8s.api.policy.v1beta1.FSGroupStrategyOptions", + "description": "fsGroup is the strategy that will dictate what fs group is used by the SecurityContext." + }, + "hostIPC": { + "description": "hostIPC determines if the policy allows the use of HostIPC in the pod spec.", + "type": "boolean" + }, + "hostNetwork": { + "description": "hostNetwork determines if the policy allows the use of HostNetwork in the pod spec.", + "type": "boolean" + }, + "hostPID": { + "description": "hostPID determines if the policy allows the use of HostPID in the pod spec.", + "type": "boolean" + }, + "hostPorts": { + "description": "hostPorts determines which host port ranges are allowed to be exposed.", + "items": { + "$ref": "#/definitions/io.k8s.api.policy.v1beta1.HostPortRange" + }, + "type": "array" + }, + "privileged": { + "description": "privileged determines if a pod can request to be run as privileged.", + "type": "boolean" + }, + "readOnlyRootFilesystem": { + "description": "readOnlyRootFilesystem when set to true will force containers to run with a read only root file system. If the container specifically requests to run with a non-read only root file system the PSP should deny the pod. If set to false the container may run with a read only root file system if it wishes but it will not be forced to.", + "type": "boolean" + }, + "requiredDropCapabilities": { + "description": "requiredDropCapabilities are the capabilities that will be dropped from the container. These are required to be dropped and cannot be added.", + "items": { + "type": "string" + }, + "type": "array" + }, + "runAsGroup": { + "$ref": "#/definitions/io.k8s.api.policy.v1beta1.RunAsGroupStrategyOptions", + "description": "RunAsGroup is the strategy that will dictate the allowable RunAsGroup values that may be set. If this field is omitted, the pod's RunAsGroup can take any value. This field requires the RunAsGroup feature gate to be enabled." + }, + "runAsUser": { + "$ref": "#/definitions/io.k8s.api.policy.v1beta1.RunAsUserStrategyOptions", + "description": "runAsUser is the strategy that will dictate the allowable RunAsUser values that may be set." + }, + "runtimeClass": { + "$ref": "#/definitions/io.k8s.api.policy.v1beta1.RuntimeClassStrategyOptions", + "description": "runtimeClass is the strategy that will dictate the allowable RuntimeClasses for a pod. If this field is omitted, the pod's runtimeClassName field is unrestricted. Enforcement of this field depends on the RuntimeClass feature gate being enabled." + }, + "seLinux": { + "$ref": "#/definitions/io.k8s.api.policy.v1beta1.SELinuxStrategyOptions", + "description": "seLinux is the strategy that will dictate the allowable labels that may be set." + }, + "supplementalGroups": { + "$ref": "#/definitions/io.k8s.api.policy.v1beta1.SupplementalGroupsStrategyOptions", + "description": "supplementalGroups is the strategy that will dictate what supplemental groups are used by the SecurityContext." + }, + "volumes": { + "description": "volumes is an allowlist of volume plugins. Empty indicates that no volumes may be used. To allow all volumes you may use '*'.", + "items": { + "type": "string" + }, + "type": "array" + } + }, + "required": [ + "seLinux", + "runAsUser", + "supplementalGroups", + "fsGroup" + ], + "type": "object" + }, + "io.k8s.api.policy.v1beta1.RunAsGroupStrategyOptions": { + "description": "RunAsGroupStrategyOptions defines the strategy type and any options used to create the strategy.", + "properties": { + "ranges": { + "description": "ranges are the allowed ranges of gids that may be used. If you would like to force a single gid then supply a single range with the same start and end. Required for MustRunAs.", + "items": { + "$ref": "#/definitions/io.k8s.api.policy.v1beta1.IDRange" + }, + "type": "array" + }, + "rule": { + "description": "rule is the strategy that will dictate the allowable RunAsGroup values that may be set.", + "type": "string" + } + }, + "required": [ + "rule" + ], + "type": "object" + }, + "io.k8s.api.policy.v1beta1.RunAsUserStrategyOptions": { + "description": "RunAsUserStrategyOptions defines the strategy type and any options used to create the strategy.", + "properties": { + "ranges": { + "description": "ranges are the allowed ranges of uids that may be used. If you would like to force a single uid then supply a single range with the same start and end. Required for MustRunAs.", + "items": { + "$ref": "#/definitions/io.k8s.api.policy.v1beta1.IDRange" + }, + "type": "array" + }, + "rule": { + "description": "rule is the strategy that will dictate the allowable RunAsUser values that may be set.", + "type": "string" + } + }, + "required": [ + "rule" + ], + "type": "object" + }, + "io.k8s.api.policy.v1beta1.RuntimeClassStrategyOptions": { + "description": "RuntimeClassStrategyOptions define the strategy that will dictate the allowable RuntimeClasses for a pod.", + "properties": { + "allowedRuntimeClassNames": { + "description": "allowedRuntimeClassNames is an allowlist of RuntimeClass names that may be specified on a pod. A value of \"*\" means that any RuntimeClass name is allowed, and must be the only item in the list. An empty list requires the RuntimeClassName field to be unset.", + "items": { + "type": "string" + }, + "type": "array" + }, + "defaultRuntimeClassName": { + "description": "defaultRuntimeClassName is the default RuntimeClassName to set on the pod. The default MUST be allowed by the allowedRuntimeClassNames list. A value of nil does not mutate the Pod.", + "type": "string" + } + }, + "required": [ + "allowedRuntimeClassNames" + ], + "type": "object" + }, + "io.k8s.api.policy.v1beta1.SELinuxStrategyOptions": { + "description": "SELinuxStrategyOptions defines the strategy type and any options used to create the strategy.", + "properties": { + "rule": { + "description": "rule is the strategy that will dictate the allowable labels that may be set.", + "type": "string" + }, + "seLinuxOptions": { + "$ref": "#/definitions/io.k8s.api.core.v1.SELinuxOptions", + "description": "seLinuxOptions required to run as; required for MustRunAs More info: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/" + } + }, + "required": [ + "rule" + ], + "type": "object" + }, + "io.k8s.api.policy.v1beta1.SupplementalGroupsStrategyOptions": { + "description": "SupplementalGroupsStrategyOptions defines the strategy type and options used to create the strategy.", + "properties": { + "ranges": { + "description": "ranges are the allowed ranges of supplemental groups. If you would like to force a single supplemental group then supply a single range with the same start and end. Required for MustRunAs.", + "items": { + "$ref": "#/definitions/io.k8s.api.policy.v1beta1.IDRange" + }, + "type": "array" + }, + "rule": { + "description": "rule is the strategy that will dictate what supplemental groups is used in the SecurityContext.", + "type": "string" + } + }, + "type": "object" + }, + "io.k8s.api.rbac.v1.AggregationRule": { + "description": "AggregationRule describes how to locate ClusterRoles to aggregate into the ClusterRole", + "properties": { + "clusterRoleSelectors": { + "description": "ClusterRoleSelectors holds a list of selectors which will be used to find ClusterRoles and create the rules. If any of the selectors match, then the ClusterRole's permissions will be added", + "items": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector" + }, + "type": "array" + } + }, + "type": "object" + }, + "io.k8s.api.rbac.v1.ClusterRole": { + "description": "ClusterRole is a cluster level, logical grouping of PolicyRules that can be referenced as a unit by a RoleBinding or ClusterRoleBinding.", + "properties": { + "aggregationRule": { + "$ref": "#/definitions/io.k8s.api.rbac.v1.AggregationRule", + "description": "AggregationRule is an optional field that describes how to build the Rules for this ClusterRole. If AggregationRule is set, then the Rules are controller managed and direct changes to Rules will be stomped by the controller." + }, + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta", + "description": "Standard object's metadata." + }, + "rules": { + "description": "Rules holds all the PolicyRules for this ClusterRole", + "items": { + "$ref": "#/definitions/io.k8s.api.rbac.v1.PolicyRule" + }, + "type": "array" + } + }, + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "rbac.authorization.k8s.io", + "kind": "ClusterRole", + "version": "v1" + } + ] + }, + "io.k8s.api.rbac.v1.ClusterRoleBinding": { + "description": "ClusterRoleBinding references a ClusterRole, but not contain it. It can reference a ClusterRole in the global namespace, and adds who information via Subject.", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta", + "description": "Standard object's metadata." + }, + "roleRef": { + "$ref": "#/definitions/io.k8s.api.rbac.v1.RoleRef", + "description": "RoleRef can only reference a ClusterRole in the global namespace. If the RoleRef cannot be resolved, the Authorizer must return an error." + }, + "subjects": { + "description": "Subjects holds references to the objects the role applies to.", + "items": { + "$ref": "#/definitions/io.k8s.api.rbac.v1.Subject" + }, + "type": "array" + } + }, + "required": [ + "roleRef" + ], + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "rbac.authorization.k8s.io", + "kind": "ClusterRoleBinding", + "version": "v1" + } + ] + }, + "io.k8s.api.rbac.v1.ClusterRoleBindingList": { + "description": "ClusterRoleBindingList is a collection of ClusterRoleBindings", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "items": { + "description": "Items is a list of ClusterRoleBindings", + "items": { + "$ref": "#/definitions/io.k8s.api.rbac.v1.ClusterRoleBinding" + }, + "type": "array" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta", + "description": "Standard object's metadata." + } + }, + "required": [ + "items" + ], + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "rbac.authorization.k8s.io", + "kind": "ClusterRoleBindingList", + "version": "v1" + } + ] + }, + "io.k8s.api.rbac.v1.ClusterRoleList": { + "description": "ClusterRoleList is a collection of ClusterRoles", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "items": { + "description": "Items is a list of ClusterRoles", + "items": { + "$ref": "#/definitions/io.k8s.api.rbac.v1.ClusterRole" + }, + "type": "array" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta", + "description": "Standard object's metadata." + } + }, + "required": [ + "items" + ], + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "rbac.authorization.k8s.io", + "kind": "ClusterRoleList", + "version": "v1" + } + ] + }, + "io.k8s.api.rbac.v1.PolicyRule": { + "description": "PolicyRule holds information that describes a policy rule, but does not contain information about who the rule applies to or which namespace the rule applies to.", + "properties": { + "apiGroups": { + "description": "APIGroups is the name of the APIGroup that contains the resources. If multiple API groups are specified, any action requested against one of the enumerated resources in any API group will be allowed.", + "items": { + "type": "string" + }, + "type": "array" + }, + "nonResourceURLs": { + "description": "NonResourceURLs is a set of partial urls that a user should have access to. *s are allowed, but only as the full, final step in the path Since non-resource URLs are not namespaced, this field is only applicable for ClusterRoles referenced from a ClusterRoleBinding. Rules can either apply to API resources (such as \"pods\" or \"secrets\") or non-resource URL paths (such as \"/api\"), but not both.", + "items": { + "type": "string" + }, + "type": "array" + }, + "resourceNames": { + "description": "ResourceNames is an optional white list of names that the rule applies to. An empty set means that everything is allowed.", + "items": { + "type": "string" + }, + "type": "array" + }, + "resources": { + "description": "Resources is a list of resources this rule applies to. ResourceAll represents all resources.", + "items": { + "type": "string" + }, + "type": "array" + }, + "verbs": { + "description": "Verbs is a list of Verbs that apply to ALL the ResourceKinds and AttributeRestrictions contained in this rule. VerbAll represents all kinds.", + "items": { + "type": "string" + }, + "type": "array" + } + }, + "required": [ + "verbs" + ], + "type": "object" + }, + "io.k8s.api.rbac.v1.Role": { + "description": "Role is a namespaced, logical grouping of PolicyRules that can be referenced as a unit by a RoleBinding.", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta", + "description": "Standard object's metadata." + }, + "rules": { + "description": "Rules holds all the PolicyRules for this Role", + "items": { + "$ref": "#/definitions/io.k8s.api.rbac.v1.PolicyRule" + }, + "type": "array" + } + }, + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "rbac.authorization.k8s.io", + "kind": "Role", + "version": "v1" + } + ] + }, + "io.k8s.api.rbac.v1.RoleBinding": { + "description": "RoleBinding references a role, but does not contain it. It can reference a Role in the same namespace or a ClusterRole in the global namespace. It adds who information via Subjects and namespace information by which namespace it exists in. RoleBindings in a given namespace only have effect in that namespace.", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta", + "description": "Standard object's metadata." + }, + "roleRef": { + "$ref": "#/definitions/io.k8s.api.rbac.v1.RoleRef", + "description": "RoleRef can reference a Role in the current namespace or a ClusterRole in the global namespace. If the RoleRef cannot be resolved, the Authorizer must return an error." + }, + "subjects": { + "description": "Subjects holds references to the objects the role applies to.", + "items": { + "$ref": "#/definitions/io.k8s.api.rbac.v1.Subject" + }, + "type": "array" + } + }, + "required": [ + "roleRef" + ], + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "rbac.authorization.k8s.io", + "kind": "RoleBinding", + "version": "v1" + } + ] + }, + "io.k8s.api.rbac.v1.RoleBindingList": { + "description": "RoleBindingList is a collection of RoleBindings", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "items": { + "description": "Items is a list of RoleBindings", + "items": { + "$ref": "#/definitions/io.k8s.api.rbac.v1.RoleBinding" + }, + "type": "array" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta", + "description": "Standard object's metadata." + } + }, + "required": [ + "items" + ], + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "rbac.authorization.k8s.io", + "kind": "RoleBindingList", + "version": "v1" + } + ] + }, + "io.k8s.api.rbac.v1.RoleList": { + "description": "RoleList is a collection of Roles", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "items": { + "description": "Items is a list of Roles", + "items": { + "$ref": "#/definitions/io.k8s.api.rbac.v1.Role" + }, + "type": "array" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta", + "description": "Standard object's metadata." + } + }, + "required": [ + "items" + ], + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "rbac.authorization.k8s.io", + "kind": "RoleList", + "version": "v1" + } + ] + }, + "io.k8s.api.rbac.v1.RoleRef": { + "description": "RoleRef contains information that points to the role being used", + "properties": { + "apiGroup": { + "description": "APIGroup is the group for the resource being referenced", + "type": "string" + }, + "kind": { + "description": "Kind is the type of resource being referenced", + "type": "string" + }, + "name": { + "description": "Name is the name of resource being referenced", + "type": "string" + } + }, + "required": [ + "apiGroup", + "kind", + "name" + ], + "type": "object" + }, + "io.k8s.api.rbac.v1.Subject": { + "description": "Subject contains a reference to the object or user identities a role binding applies to. This can either hold a direct API object reference, or a value for non-objects such as user and group names.", + "properties": { + "apiGroup": { + "description": "APIGroup holds the API group of the referenced subject. Defaults to \"\" for ServiceAccount subjects. Defaults to \"rbac.authorization.k8s.io\" for User and Group subjects.", + "type": "string" + }, + "kind": { + "description": "Kind of object being referenced. Values defined by this API group are \"User\", \"Group\", and \"ServiceAccount\". If the Authorizer does not recognized the kind value, the Authorizer should report an error.", + "type": "string" + }, + "name": { + "description": "Name of the object being referenced.", + "type": "string" + }, + "namespace": { + "description": "Namespace of the referenced object. If the object kind is non-namespace, such as \"User\" or \"Group\", and this value is not empty the Authorizer should report an error.", + "type": "string" + } + }, + "required": [ + "kind", + "name" + ], + "type": "object" + }, + "io.k8s.api.rbac.v1beta1.AggregationRule": { + "description": "AggregationRule describes how to locate ClusterRoles to aggregate into the ClusterRole", + "properties": { + "clusterRoleSelectors": { + "description": "ClusterRoleSelectors holds a list of selectors which will be used to find ClusterRoles and create the rules. If any of the selectors match, then the ClusterRole's permissions will be added", + "items": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector" + }, + "type": "array" + } + }, + "type": "object" + }, + "io.k8s.api.rbac.v1beta1.ClusterRole": { + "description": "ClusterRole is a cluster level, logical grouping of PolicyRules that can be referenced as a unit by a RoleBinding or ClusterRoleBinding. Deprecated in v1.17 in favor of rbac.authorization.k8s.io/v1 ClusterRole, and will no longer be served in v1.22.", + "properties": { + "aggregationRule": { + "$ref": "#/definitions/io.k8s.api.rbac.v1beta1.AggregationRule", + "description": "AggregationRule is an optional field that describes how to build the Rules for this ClusterRole. If AggregationRule is set, then the Rules are controller managed and direct changes to Rules will be stomped by the controller." + }, + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta", + "description": "Standard object's metadata." + }, + "rules": { + "description": "Rules holds all the PolicyRules for this ClusterRole", + "items": { + "$ref": "#/definitions/io.k8s.api.rbac.v1beta1.PolicyRule" + }, + "type": "array" + } + }, + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "rbac.authorization.k8s.io", + "kind": "ClusterRole", + "version": "v1beta1" + } + ] + }, + "io.k8s.api.rbac.v1beta1.ClusterRoleBinding": { + "description": "ClusterRoleBinding references a ClusterRole, but not contain it. It can reference a ClusterRole in the global namespace, and adds who information via Subject. Deprecated in v1.17 in favor of rbac.authorization.k8s.io/v1 ClusterRoleBinding, and will no longer be served in v1.22.", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta", + "description": "Standard object's metadata." + }, + "roleRef": { + "$ref": "#/definitions/io.k8s.api.rbac.v1beta1.RoleRef", + "description": "RoleRef can only reference a ClusterRole in the global namespace. If the RoleRef cannot be resolved, the Authorizer must return an error." + }, + "subjects": { + "description": "Subjects holds references to the objects the role applies to.", + "items": { + "$ref": "#/definitions/io.k8s.api.rbac.v1beta1.Subject" + }, + "type": "array" + } + }, + "required": [ + "roleRef" + ], + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "rbac.authorization.k8s.io", + "kind": "ClusterRoleBinding", + "version": "v1beta1" + } + ] + }, + "io.k8s.api.rbac.v1beta1.ClusterRoleBindingList": { + "description": "ClusterRoleBindingList is a collection of ClusterRoleBindings. Deprecated in v1.17 in favor of rbac.authorization.k8s.io/v1 ClusterRoleBindingList, and will no longer be served in v1.22.", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "items": { + "description": "Items is a list of ClusterRoleBindings", + "items": { + "$ref": "#/definitions/io.k8s.api.rbac.v1beta1.ClusterRoleBinding" + }, + "type": "array" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta", + "description": "Standard object's metadata." + } + }, + "required": [ + "items" + ], + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "rbac.authorization.k8s.io", + "kind": "ClusterRoleBindingList", + "version": "v1beta1" + } + ] + }, + "io.k8s.api.rbac.v1beta1.ClusterRoleList": { + "description": "ClusterRoleList is a collection of ClusterRoles. Deprecated in v1.17 in favor of rbac.authorization.k8s.io/v1 ClusterRoles, and will no longer be served in v1.22.", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "items": { + "description": "Items is a list of ClusterRoles", + "items": { + "$ref": "#/definitions/io.k8s.api.rbac.v1beta1.ClusterRole" + }, + "type": "array" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta", + "description": "Standard object's metadata." + } + }, + "required": [ + "items" + ], + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "rbac.authorization.k8s.io", + "kind": "ClusterRoleList", + "version": "v1beta1" + } + ] + }, + "io.k8s.api.rbac.v1beta1.PolicyRule": { + "description": "PolicyRule holds information that describes a policy rule, but does not contain information about who the rule applies to or which namespace the rule applies to.", + "properties": { + "apiGroups": { + "description": "APIGroups is the name of the APIGroup that contains the resources. If multiple API groups are specified, any action requested against one of the enumerated resources in any API group will be allowed.", + "items": { + "type": "string" + }, + "type": "array" + }, + "nonResourceURLs": { + "description": "NonResourceURLs is a set of partial urls that a user should have access to. *s are allowed, but only as the full, final step in the path Since non-resource URLs are not namespaced, this field is only applicable for ClusterRoles referenced from a ClusterRoleBinding. Rules can either apply to API resources (such as \"pods\" or \"secrets\") or non-resource URL paths (such as \"/api\"), but not both.", + "items": { + "type": "string" + }, + "type": "array" + }, + "resourceNames": { + "description": "ResourceNames is an optional white list of names that the rule applies to. An empty set means that everything is allowed.", + "items": { + "type": "string" + }, + "type": "array" + }, + "resources": { + "description": "Resources is a list of resources this rule applies to. '*' represents all resources in the specified apiGroups. '*/foo' represents the subresource 'foo' for all resources in the specified apiGroups.", + "items": { + "type": "string" + }, + "type": "array" + }, + "verbs": { + "description": "Verbs is a list of Verbs that apply to ALL the ResourceKinds and AttributeRestrictions contained in this rule. VerbAll represents all kinds.", + "items": { + "type": "string" + }, + "type": "array" + } + }, + "required": [ + "verbs" + ], + "type": "object" + }, + "io.k8s.api.rbac.v1beta1.Role": { + "description": "Role is a namespaced, logical grouping of PolicyRules that can be referenced as a unit by a RoleBinding. Deprecated in v1.17 in favor of rbac.authorization.k8s.io/v1 Role, and will no longer be served in v1.22.", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta", + "description": "Standard object's metadata." + }, + "rules": { + "description": "Rules holds all the PolicyRules for this Role", + "items": { + "$ref": "#/definitions/io.k8s.api.rbac.v1beta1.PolicyRule" + }, + "type": "array" + } + }, + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "rbac.authorization.k8s.io", + "kind": "Role", + "version": "v1beta1" + } + ] + }, + "io.k8s.api.rbac.v1beta1.RoleBinding": { + "description": "RoleBinding references a role, but does not contain it. It can reference a Role in the same namespace or a ClusterRole in the global namespace. It adds who information via Subjects and namespace information by which namespace it exists in. RoleBindings in a given namespace only have effect in that namespace. Deprecated in v1.17 in favor of rbac.authorization.k8s.io/v1 RoleBinding, and will no longer be served in v1.22.", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta", + "description": "Standard object's metadata." + }, + "roleRef": { + "$ref": "#/definitions/io.k8s.api.rbac.v1beta1.RoleRef", + "description": "RoleRef can reference a Role in the current namespace or a ClusterRole in the global namespace. If the RoleRef cannot be resolved, the Authorizer must return an error." + }, + "subjects": { + "description": "Subjects holds references to the objects the role applies to.", + "items": { + "$ref": "#/definitions/io.k8s.api.rbac.v1beta1.Subject" + }, + "type": "array" + } + }, + "required": [ + "roleRef" + ], + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "rbac.authorization.k8s.io", + "kind": "RoleBinding", + "version": "v1beta1" + } + ] + }, + "io.k8s.api.rbac.v1beta1.RoleBindingList": { + "description": "RoleBindingList is a collection of RoleBindings Deprecated in v1.17 in favor of rbac.authorization.k8s.io/v1 RoleBindingList, and will no longer be served in v1.22.", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "items": { + "description": "Items is a list of RoleBindings", + "items": { + "$ref": "#/definitions/io.k8s.api.rbac.v1beta1.RoleBinding" + }, + "type": "array" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta", + "description": "Standard object's metadata." + } + }, + "required": [ + "items" + ], + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "rbac.authorization.k8s.io", + "kind": "RoleBindingList", + "version": "v1beta1" + } + ] + }, + "io.k8s.api.rbac.v1beta1.RoleList": { + "description": "RoleList is a collection of Roles Deprecated in v1.17 in favor of rbac.authorization.k8s.io/v1 RoleList, and will no longer be served in v1.22.", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "items": { + "description": "Items is a list of Roles", + "items": { + "$ref": "#/definitions/io.k8s.api.rbac.v1beta1.Role" + }, + "type": "array" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta", + "description": "Standard object's metadata." + } + }, + "required": [ + "items" + ], + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "rbac.authorization.k8s.io", + "kind": "RoleList", + "version": "v1beta1" + } + ] + }, + "io.k8s.api.rbac.v1beta1.RoleRef": { + "description": "RoleRef contains information that points to the role being used", + "properties": { + "apiGroup": { + "description": "APIGroup is the group for the resource being referenced", + "type": "string" + }, + "kind": { + "description": "Kind is the type of resource being referenced", + "type": "string" + }, + "name": { + "description": "Name is the name of resource being referenced", + "type": "string" + } + }, + "required": [ + "apiGroup", + "kind", + "name" + ], + "type": "object" + }, + "io.k8s.api.rbac.v1beta1.Subject": { + "description": "Subject contains a reference to the object or user identities a role binding applies to. This can either hold a direct API object reference, or a value for non-objects such as user and group names.", + "properties": { + "apiGroup": { + "description": "APIGroup holds the API group of the referenced subject. Defaults to \"\" for ServiceAccount subjects. Defaults to \"rbac.authorization.k8s.io\" for User and Group subjects.", + "type": "string" + }, + "kind": { + "description": "Kind of object being referenced. Values defined by this API group are \"User\", \"Group\", and \"ServiceAccount\". If the Authorizer does not recognized the kind value, the Authorizer should report an error.", + "type": "string" + }, + "name": { + "description": "Name of the object being referenced.", + "type": "string" + }, + "namespace": { + "description": "Namespace of the referenced object. If the object kind is non-namespace, such as \"User\" or \"Group\", and this value is not empty the Authorizer should report an error.", + "type": "string" + } + }, + "required": [ + "kind", + "name" + ], + "type": "object" + }, + "io.k8s.api.scheduling.v1.PriorityClass": { + "description": "PriorityClass defines mapping from a priority class name to the priority integer value. The value can be any valid integer.", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "description": { + "description": "description is an arbitrary string that usually provides guidelines on when this priority class should be used.", + "type": "string" + }, + "globalDefault": { + "description": "globalDefault specifies whether this PriorityClass should be considered as the default priority for pods that do not have any priority class. Only one PriorityClass can be marked as `globalDefault`. However, if more than one PriorityClasses exists with their `globalDefault` field set to true, the smallest value of such global default PriorityClasses will be used as the default priority.", + "type": "boolean" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta", + "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata" + }, + "preemptionPolicy": { + "description": "PreemptionPolicy is the Policy for preempting pods with lower priority. One of Never, PreemptLowerPriority. Defaults to PreemptLowerPriority if unset. This field is beta-level, gated by the NonPreemptingPriority feature-gate.", + "type": "string" + }, + "value": { + "description": "The value of this priority class. This is the actual priority that pods receive when they have the name of this class in their pod spec.", + "format": "int32", + "type": "integer" + } + }, + "required": [ + "value" + ], + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "scheduling.k8s.io", + "kind": "PriorityClass", + "version": "v1" + } + ] + }, + "io.k8s.api.scheduling.v1.PriorityClassList": { + "description": "PriorityClassList is a collection of priority classes.", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "items": { + "description": "items is the list of PriorityClasses", + "items": { + "$ref": "#/definitions/io.k8s.api.scheduling.v1.PriorityClass" + }, + "type": "array" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta", + "description": "Standard list metadata More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata" + } + }, + "required": [ + "items" + ], + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "scheduling.k8s.io", + "kind": "PriorityClassList", + "version": "v1" + } + ] + }, + "io.k8s.api.scheduling.v1beta1.PriorityClass": { + "description": "DEPRECATED - This group version of PriorityClass is deprecated by scheduling.k8s.io/v1/PriorityClass. PriorityClass defines mapping from a priority class name to the priority integer value. The value can be any valid integer.", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "description": { + "description": "description is an arbitrary string that usually provides guidelines on when this priority class should be used.", + "type": "string" + }, + "globalDefault": { + "description": "globalDefault specifies whether this PriorityClass should be considered as the default priority for pods that do not have any priority class. Only one PriorityClass can be marked as `globalDefault`. However, if more than one PriorityClasses exists with their `globalDefault` field set to true, the smallest value of such global default PriorityClasses will be used as the default priority.", + "type": "boolean" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta", + "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata" + }, + "preemptionPolicy": { + "description": "PreemptionPolicy is the Policy for preempting pods with lower priority. One of Never, PreemptLowerPriority. Defaults to PreemptLowerPriority if unset. This field is beta-level, gated by the NonPreemptingPriority feature-gate.", + "type": "string" + }, + "value": { + "description": "The value of this priority class. This is the actual priority that pods receive when they have the name of this class in their pod spec.", + "format": "int32", + "type": "integer" + } + }, + "required": [ + "value" + ], + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "scheduling.k8s.io", + "kind": "PriorityClass", + "version": "v1beta1" + } + ] + }, + "io.k8s.api.scheduling.v1beta1.PriorityClassList": { + "description": "PriorityClassList is a collection of priority classes.", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "items": { + "description": "items is the list of PriorityClasses", + "items": { + "$ref": "#/definitions/io.k8s.api.scheduling.v1beta1.PriorityClass" + }, + "type": "array" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta", + "description": "Standard list metadata More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata" + } + }, + "required": [ + "items" + ], + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "scheduling.k8s.io", + "kind": "PriorityClassList", + "version": "v1beta1" + } + ] + }, + "io.k8s.api.storage.v1.CSIDriver": { + "description": "CSIDriver captures information about a Container Storage Interface (CSI) volume driver deployed on the cluster. Kubernetes attach detach controller uses this object to determine whether attach is required. Kubelet uses this object to determine whether pod information needs to be passed on mount. CSIDriver objects are non-namespaced.", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta", + "description": "Standard object metadata. metadata.Name indicates the name of the CSI driver that this object refers to; it MUST be the same name returned by the CSI GetPluginName() call for that driver. The driver name must be 63 characters or less, beginning and ending with an alphanumeric character ([a-z0-9A-Z]) with dashes (-), dots (.), and alphanumerics between. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata" + }, + "spec": { + "$ref": "#/definitions/io.k8s.api.storage.v1.CSIDriverSpec", + "description": "Specification of the CSI Driver." + } + }, + "required": [ + "spec" + ], + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "storage.k8s.io", + "kind": "CSIDriver", + "version": "v1" + } + ] + }, + "io.k8s.api.storage.v1.CSIDriverList": { + "description": "CSIDriverList is a collection of CSIDriver objects.", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "items": { + "description": "items is the list of CSIDriver", + "items": { + "$ref": "#/definitions/io.k8s.api.storage.v1.CSIDriver" + }, + "type": "array" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta", + "description": "Standard list metadata More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata" + } + }, + "required": [ + "items" + ], + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "storage.k8s.io", + "kind": "CSIDriverList", + "version": "v1" + } + ] + }, + "io.k8s.api.storage.v1.CSIDriverSpec": { + "description": "CSIDriverSpec is the specification of a CSIDriver.", + "properties": { + "attachRequired": { + "description": "attachRequired indicates this CSI volume driver requires an attach operation (because it implements the CSI ControllerPublishVolume() method), and that the Kubernetes attach detach controller should call the attach volume interface which checks the volumeattachment status and waits until the volume is attached before proceeding to mounting. The CSI external-attacher coordinates with CSI volume driver and updates the volumeattachment status when the attach operation is complete. If the CSIDriverRegistry feature gate is enabled and the value is specified to false, the attach operation will be skipped. Otherwise the attach operation will be called.\n\nThis field is immutable.", + "type": "boolean" + }, + "fsGroupPolicy": { + "description": "Defines if the underlying volume supports changing ownership and permission of the volume before being mounted. Refer to the specific FSGroupPolicy values for additional details. This field is alpha-level, and is only honored by servers that enable the CSIVolumeFSGroupPolicy feature gate.\n\nThis field is immutable.", + "type": "string" + }, + "podInfoOnMount": { + "description": "If set to true, podInfoOnMount indicates this CSI volume driver requires additional pod information (like podName, podUID, etc.) during mount operations. If set to false, pod information will not be passed on mount. Default is false. The CSI driver specifies podInfoOnMount as part of driver deployment. If true, Kubelet will pass pod information as VolumeContext in the CSI NodePublishVolume() calls. The CSI driver is responsible for parsing and validating the information passed in as VolumeContext. The following VolumeConext will be passed if podInfoOnMount is set to true. This list might grow, but the prefix will be used. \"csi.storage.k8s.io/pod.name\": pod.Name \"csi.storage.k8s.io/pod.namespace\": pod.Namespace \"csi.storage.k8s.io/pod.uid\": string(pod.UID) \"csi.storage.k8s.io/ephemeral\": \"true\" if the volume is an ephemeral inline volume\n defined by a CSIVolumeSource, otherwise \"false\"\n\n\"csi.storage.k8s.io/ephemeral\" is a new feature in Kubernetes 1.16. It is only required for drivers which support both the \"Persistent\" and \"Ephemeral\" VolumeLifecycleMode. Other drivers can leave pod info disabled and/or ignore this field. As Kubernetes 1.15 doesn't support this field, drivers can only support one mode when deployed on such a cluster and the deployment determines which mode that is, for example via a command line parameter of the driver.\n\nThis field is immutable.", + "type": "boolean" + }, + "requiresRepublish": { + "description": "RequiresRepublish indicates the CSI driver wants `NodePublishVolume` being periodically called to reflect any possible change in the mounted volume. This field defaults to false.\n\nNote: After a successful initial NodePublishVolume call, subsequent calls to NodePublishVolume should only update the contents of the volume. New mount points will not be seen by a running container.\n\nThis is a beta feature and only available when the CSIServiceAccountToken feature is enabled.", + "type": "boolean" + }, + "storageCapacity": { + "description": "If set to true, storageCapacity indicates that the CSI volume driver wants pod scheduling to consider the storage capacity that the driver deployment will report by creating CSIStorageCapacity objects with capacity information.\n\nThe check can be enabled immediately when deploying a driver. In that case, provisioning new volumes with late binding will pause until the driver deployment has published some suitable CSIStorageCapacity object.\n\nAlternatively, the driver can be deployed with the field unset or false and it can be flipped later when storage capacity information has been published.\n\nThis field is immutable.\n\nThis is a beta field and only available when the CSIStorageCapacity feature is enabled. The default is false.", + "type": "boolean" + }, + "tokenRequests": { + "description": "TokenRequests indicates the CSI driver needs pods' service account tokens it is mounting volume for to do necessary authentication. Kubelet will pass the tokens in VolumeContext in the CSI NodePublishVolume calls. The CSI driver should parse and validate the following VolumeContext: \"csi.storage.k8s.io/serviceAccount.tokens\": {\n \"\u003caudience\u003e\": {\n \"token\": \u003ctoken\u003e,\n \"expirationTimestamp\": \u003cexpiration timestamp in RFC3339\u003e,\n },\n ...\n}\n\nNote: Audience in each TokenRequest should be different and at most one token is empty string. To receive a new token after expiry, RequiresRepublish can be used to trigger NodePublishVolume periodically.\n\nThis is a beta feature and only available when the CSIServiceAccountToken feature is enabled.", + "items": { + "$ref": "#/definitions/io.k8s.api.storage.v1.TokenRequest" + }, + "type": "array", + "x-kubernetes-list-type": "atomic" + }, + "volumeLifecycleModes": { + "description": "volumeLifecycleModes defines what kind of volumes this CSI volume driver supports. The default if the list is empty is \"Persistent\", which is the usage defined by the CSI specification and implemented in Kubernetes via the usual PV/PVC mechanism. The other mode is \"Ephemeral\". In this mode, volumes are defined inline inside the pod spec with CSIVolumeSource and their lifecycle is tied to the lifecycle of that pod. A driver has to be aware of this because it is only going to get a NodePublishVolume call for such a volume. For more information about implementing this mode, see https://kubernetes-csi.github.io/docs/ephemeral-local-volumes.html A driver can support one or more of these modes and more modes may be added in the future. This field is beta.\n\nThis field is immutable.", + "items": { + "type": "string" + }, + "type": "array", + "x-kubernetes-list-type": "set" + } + }, + "type": "object" + }, + "io.k8s.api.storage.v1.CSINode": { + "description": "CSINode holds information about all CSI drivers installed on a node. CSI drivers do not need to create the CSINode object directly. As long as they use the node-driver-registrar sidecar container, the kubelet will automatically populate the CSINode object for the CSI driver as part of kubelet plugin registration. CSINode has the same name as a node. If the object is missing, it means either there are no CSI Drivers available on the node, or the Kubelet version is low enough that it doesn't create this object. CSINode has an OwnerReference that points to the corresponding node object.", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta", + "description": "metadata.name must be the Kubernetes node name." + }, + "spec": { + "$ref": "#/definitions/io.k8s.api.storage.v1.CSINodeSpec", + "description": "spec is the specification of CSINode" + } + }, + "required": [ + "spec" + ], + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "storage.k8s.io", + "kind": "CSINode", + "version": "v1" + } + ] + }, + "io.k8s.api.storage.v1.CSINodeDriver": { + "description": "CSINodeDriver holds information about the specification of one CSI driver installed on a node", + "properties": { + "allocatable": { + "$ref": "#/definitions/io.k8s.api.storage.v1.VolumeNodeResources", + "description": "allocatable represents the volume resources of a node that are available for scheduling. This field is beta." + }, + "name": { + "description": "This is the name of the CSI driver that this object refers to. This MUST be the same name returned by the CSI GetPluginName() call for that driver.", + "type": "string" + }, + "nodeID": { + "description": "nodeID of the node from the driver point of view. This field enables Kubernetes to communicate with storage systems that do not share the same nomenclature for nodes. For example, Kubernetes may refer to a given node as \"node1\", but the storage system may refer to the same node as \"nodeA\". When Kubernetes issues a command to the storage system to attach a volume to a specific node, it can use this field to refer to the node name using the ID that the storage system will understand, e.g. \"nodeA\" instead of \"node1\". This field is required.", + "type": "string" + }, + "topologyKeys": { + "description": "topologyKeys is the list of keys supported by the driver. When a driver is initialized on a cluster, it provides a set of topology keys that it understands (e.g. \"company.com/zone\", \"company.com/region\"). When a driver is initialized on a node, it provides the same topology keys along with values. Kubelet will expose these topology keys as labels on its own node object. When Kubernetes does topology aware provisioning, it can use this list to determine which labels it should retrieve from the node object and pass back to the driver. It is possible for different nodes to use different topology keys. This can be empty if driver does not support topology.", + "items": { + "type": "string" + }, + "type": "array" + } + }, + "required": [ + "name", + "nodeID" + ], + "type": "object" + }, + "io.k8s.api.storage.v1.CSINodeList": { + "description": "CSINodeList is a collection of CSINode objects.", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "items": { + "description": "items is the list of CSINode", + "items": { + "$ref": "#/definitions/io.k8s.api.storage.v1.CSINode" + }, + "type": "array" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta", + "description": "Standard list metadata More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata" + } + }, + "required": [ + "items" + ], + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "storage.k8s.io", + "kind": "CSINodeList", + "version": "v1" + } + ] + }, + "io.k8s.api.storage.v1.CSINodeSpec": { + "description": "CSINodeSpec holds information about the specification of all CSI drivers installed on a node", + "properties": { + "drivers": { + "description": "drivers is a list of information of all CSI Drivers existing on a node. If all drivers in the list are uninstalled, this can become empty.", + "items": { + "$ref": "#/definitions/io.k8s.api.storage.v1.CSINodeDriver" + }, + "type": "array", + "x-kubernetes-patch-merge-key": "name", + "x-kubernetes-patch-strategy": "merge" + } + }, + "required": [ + "drivers" + ], + "type": "object" + }, + "io.k8s.api.storage.v1.StorageClass": { + "description": "StorageClass describes the parameters for a class of storage for which PersistentVolumes can be dynamically provisioned.\n\nStorageClasses are non-namespaced; the name of the storage class according to etcd is in ObjectMeta.Name.", + "properties": { + "allowVolumeExpansion": { + "description": "AllowVolumeExpansion shows whether the storage class allow volume expand", + "type": "boolean" + }, + "allowedTopologies": { + "description": "Restrict the node topologies where volumes can be dynamically provisioned. Each volume plugin defines its own supported topology specifications. An empty TopologySelectorTerm list means there is no topology restriction. This field is only honored by servers that enable the VolumeScheduling feature.", + "items": { + "$ref": "#/definitions/io.k8s.api.core.v1.TopologySelectorTerm" + }, + "type": "array" + }, + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta", + "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata" + }, + "mountOptions": { + "description": "Dynamically provisioned PersistentVolumes of this storage class are created with these mountOptions, e.g. [\"ro\", \"soft\"]. Not validated - mount of the PVs will simply fail if one is invalid.", + "items": { + "type": "string" + }, + "type": "array" + }, + "parameters": { + "additionalProperties": { + "type": "string" + }, + "description": "Parameters holds the parameters for the provisioner that should create volumes of this storage class.", + "type": "object" + }, + "provisioner": { + "description": "Provisioner indicates the type of the provisioner.", + "type": "string" + }, + "reclaimPolicy": { + "description": "Dynamically provisioned PersistentVolumes of this storage class are created with this reclaimPolicy. Defaults to Delete.", + "type": "string" + }, + "volumeBindingMode": { + "description": "VolumeBindingMode indicates how PersistentVolumeClaims should be provisioned and bound. When unset, VolumeBindingImmediate is used. This field is only honored by servers that enable the VolumeScheduling feature.", + "type": "string" + } + }, + "required": [ + "provisioner" + ], + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "storage.k8s.io", + "kind": "StorageClass", + "version": "v1" + } + ] + }, + "io.k8s.api.storage.v1.StorageClassList": { + "description": "StorageClassList is a collection of storage classes.", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "items": { + "description": "Items is the list of StorageClasses", + "items": { + "$ref": "#/definitions/io.k8s.api.storage.v1.StorageClass" + }, + "type": "array" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta", + "description": "Standard list metadata More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata" + } + }, + "required": [ + "items" + ], + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "storage.k8s.io", + "kind": "StorageClassList", + "version": "v1" + } + ] + }, + "io.k8s.api.storage.v1.TokenRequest": { + "description": "TokenRequest contains parameters of a service account token.", + "properties": { + "audience": { + "description": "Audience is the intended audience of the token in \"TokenRequestSpec\". It will default to the audiences of kube apiserver.", + "type": "string" + }, + "expirationSeconds": { + "description": "ExpirationSeconds is the duration of validity of the token in \"TokenRequestSpec\". It has the same default value of \"ExpirationSeconds\" in \"TokenRequestSpec\".", + "format": "int64", + "type": "integer" + } + }, + "required": [ + "audience" + ], + "type": "object" + }, + "io.k8s.api.storage.v1.VolumeAttachment": { + "description": "VolumeAttachment captures the intent to attach or detach the specified volume to/from the specified node.\n\nVolumeAttachment objects are non-namespaced.", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta", + "description": "Standard object metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata" + }, + "spec": { + "$ref": "#/definitions/io.k8s.api.storage.v1.VolumeAttachmentSpec", + "description": "Specification of the desired attach/detach volume behavior. Populated by the Kubernetes system." + }, + "status": { + "$ref": "#/definitions/io.k8s.api.storage.v1.VolumeAttachmentStatus", + "description": "Status of the VolumeAttachment request. Populated by the entity completing the attach or detach operation, i.e. the external-attacher." + } + }, + "required": [ + "spec" + ], + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "storage.k8s.io", + "kind": "VolumeAttachment", + "version": "v1" + } + ] + }, + "io.k8s.api.storage.v1.VolumeAttachmentList": { + "description": "VolumeAttachmentList is a collection of VolumeAttachment objects.", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "items": { + "description": "Items is the list of VolumeAttachments", + "items": { + "$ref": "#/definitions/io.k8s.api.storage.v1.VolumeAttachment" + }, + "type": "array" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta", + "description": "Standard list metadata More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata" + } + }, + "required": [ + "items" + ], + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "storage.k8s.io", + "kind": "VolumeAttachmentList", + "version": "v1" + } + ] + }, + "io.k8s.api.storage.v1.VolumeAttachmentSource": { + "description": "VolumeAttachmentSource represents a volume that should be attached. Right now only PersistenVolumes can be attached via external attacher, in future we may allow also inline volumes in pods. Exactly one member can be set.", + "properties": { + "inlineVolumeSpec": { + "$ref": "#/definitions/io.k8s.api.core.v1.PersistentVolumeSpec", + "description": "inlineVolumeSpec contains all the information necessary to attach a persistent volume defined by a pod's inline VolumeSource. This field is populated only for the CSIMigration feature. It contains translated fields from a pod's inline VolumeSource to a PersistentVolumeSpec. This field is beta-level and is only honored by servers that enabled the CSIMigration feature." + }, + "persistentVolumeName": { + "description": "Name of the persistent volume to attach.", + "type": "string" + } + }, + "type": "object" + }, + "io.k8s.api.storage.v1.VolumeAttachmentSpec": { + "description": "VolumeAttachmentSpec is the specification of a VolumeAttachment request.", + "properties": { + "attacher": { + "description": "Attacher indicates the name of the volume driver that MUST handle this request. This is the name returned by GetPluginName().", + "type": "string" + }, + "nodeName": { + "description": "The node that the volume should be attached to.", + "type": "string" + }, + "source": { + "$ref": "#/definitions/io.k8s.api.storage.v1.VolumeAttachmentSource", + "description": "Source represents the volume that should be attached." + } + }, + "required": [ + "attacher", + "source", + "nodeName" + ], + "type": "object" + }, + "io.k8s.api.storage.v1.VolumeAttachmentStatus": { + "description": "VolumeAttachmentStatus is the status of a VolumeAttachment request.", + "properties": { + "attachError": { + "$ref": "#/definitions/io.k8s.api.storage.v1.VolumeError", + "description": "The last error encountered during attach operation, if any. This field must only be set by the entity completing the attach operation, i.e. the external-attacher." + }, + "attached": { + "description": "Indicates the volume is successfully attached. This field must only be set by the entity completing the attach operation, i.e. the external-attacher.", + "type": "boolean" + }, + "attachmentMetadata": { + "additionalProperties": { + "type": "string" + }, + "description": "Upon successful attach, this field is populated with any information returned by the attach operation that must be passed into subsequent WaitForAttach or Mount calls. This field must only be set by the entity completing the attach operation, i.e. the external-attacher.", + "type": "object" + }, + "detachError": { + "$ref": "#/definitions/io.k8s.api.storage.v1.VolumeError", + "description": "The last error encountered during detach operation, if any. This field must only be set by the entity completing the detach operation, i.e. the external-attacher." + } + }, + "required": [ + "attached" + ], + "type": "object" + }, + "io.k8s.api.storage.v1.VolumeError": { + "description": "VolumeError captures an error encountered during a volume operation.", + "properties": { + "message": { + "description": "String detailing the error encountered during Attach or Detach operation. This string may be logged, so it should not contain sensitive information.", + "type": "string" + }, + "time": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time", + "description": "Time the error was encountered." + } + }, + "type": "object" + }, + "io.k8s.api.storage.v1.VolumeNodeResources": { + "description": "VolumeNodeResources is a set of resource limits for scheduling of volumes.", + "properties": { + "count": { + "description": "Maximum number of unique volumes managed by the CSI driver that can be used on a node. A volume that is both attached and mounted on a node is considered to be used once, not twice. The same rule applies for a unique volume that is shared among multiple pods on the same node. If this field is not specified, then the supported number of volumes on this node is unbounded.", + "format": "int32", + "type": "integer" + } + }, + "type": "object" + }, + "io.k8s.api.storage.v1beta1.CSIDriver": { + "description": "CSIDriver captures information about a Container Storage Interface (CSI) volume driver deployed on the cluster. CSI drivers do not need to create the CSIDriver object directly. Instead they may use the cluster-driver-registrar sidecar container. When deployed with a CSI driver it automatically creates a CSIDriver object representing the driver. Kubernetes attach detach controller uses this object to determine whether attach is required. Kubelet uses this object to determine whether pod information needs to be passed on mount. CSIDriver objects are non-namespaced.", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta", + "description": "Standard object metadata. metadata.Name indicates the name of the CSI driver that this object refers to; it MUST be the same name returned by the CSI GetPluginName() call for that driver. The driver name must be 63 characters or less, beginning and ending with an alphanumeric character ([a-z0-9A-Z]) with dashes (-), dots (.), and alphanumerics between. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata" + }, + "spec": { + "$ref": "#/definitions/io.k8s.api.storage.v1beta1.CSIDriverSpec", + "description": "Specification of the CSI Driver." + } + }, + "required": [ + "spec" + ], + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "storage.k8s.io", + "kind": "CSIDriver", + "version": "v1beta1" + } + ] + }, + "io.k8s.api.storage.v1beta1.CSIDriverList": { + "description": "CSIDriverList is a collection of CSIDriver objects.", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "items": { + "description": "items is the list of CSIDriver", + "items": { + "$ref": "#/definitions/io.k8s.api.storage.v1beta1.CSIDriver" + }, + "type": "array" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta", + "description": "Standard list metadata More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata" + } + }, + "required": [ + "items" + ], + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "storage.k8s.io", + "kind": "CSIDriverList", + "version": "v1beta1" + } + ] + }, + "io.k8s.api.storage.v1beta1.CSIDriverSpec": { + "description": "CSIDriverSpec is the specification of a CSIDriver.", + "properties": { + "attachRequired": { + "description": "attachRequired indicates this CSI volume driver requires an attach operation (because it implements the CSI ControllerPublishVolume() method), and that the Kubernetes attach detach controller should call the attach volume interface which checks the volumeattachment status and waits until the volume is attached before proceeding to mounting. The CSI external-attacher coordinates with CSI volume driver and updates the volumeattachment status when the attach operation is complete. If the CSIDriverRegistry feature gate is enabled and the value is specified to false, the attach operation will be skipped. Otherwise the attach operation will be called.\n\nThis field is immutable.", + "type": "boolean" + }, + "fsGroupPolicy": { + "description": "Defines if the underlying volume supports changing ownership and permission of the volume before being mounted. Refer to the specific FSGroupPolicy values for additional details. This field is alpha-level, and is only honored by servers that enable the CSIVolumeFSGroupPolicy feature gate.\n\nThis field is immutable.", + "type": "string" + }, + "podInfoOnMount": { + "description": "If set to true, podInfoOnMount indicates this CSI volume driver requires additional pod information (like podName, podUID, etc.) during mount operations. If set to false, pod information will not be passed on mount. Default is false. The CSI driver specifies podInfoOnMount as part of driver deployment. If true, Kubelet will pass pod information as VolumeContext in the CSI NodePublishVolume() calls. The CSI driver is responsible for parsing and validating the information passed in as VolumeContext. The following VolumeConext will be passed if podInfoOnMount is set to true. This list might grow, but the prefix will be used. \"csi.storage.k8s.io/pod.name\": pod.Name \"csi.storage.k8s.io/pod.namespace\": pod.Namespace \"csi.storage.k8s.io/pod.uid\": string(pod.UID) \"csi.storage.k8s.io/ephemeral\": \"true\" if the volume is an ephemeral inline volume\n defined by a CSIVolumeSource, otherwise \"false\"\n\n\"csi.storage.k8s.io/ephemeral\" is a new feature in Kubernetes 1.16. It is only required for drivers which support both the \"Persistent\" and \"Ephemeral\" VolumeLifecycleMode. Other drivers can leave pod info disabled and/or ignore this field. As Kubernetes 1.15 doesn't support this field, drivers can only support one mode when deployed on such a cluster and the deployment determines which mode that is, for example via a command line parameter of the driver.\n\nThis field is immutable.", + "type": "boolean" + }, + "requiresRepublish": { + "description": "RequiresRepublish indicates the CSI driver wants `NodePublishVolume` being periodically called to reflect any possible change in the mounted volume. This field defaults to false.\n\nNote: After a successful initial NodePublishVolume call, subsequent calls to NodePublishVolume should only update the contents of the volume. New mount points will not be seen by a running container.\n\nThis is a beta feature and only available when the CSIServiceAccountToken feature is enabled.", + "type": "boolean" + }, + "storageCapacity": { + "description": "If set to true, storageCapacity indicates that the CSI volume driver wants pod scheduling to consider the storage capacity that the driver deployment will report by creating CSIStorageCapacity objects with capacity information.\n\nThe check can be enabled immediately when deploying a driver. In that case, provisioning new volumes with late binding will pause until the driver deployment has published some suitable CSIStorageCapacity object.\n\nAlternatively, the driver can be deployed with the field unset or false and it can be flipped later when storage capacity information has been published.\n\nThis field is immutable.\n\nThis is a beta field and only available when the CSIStorageCapacity feature is enabled. The default is false.", + "type": "boolean" + }, + "tokenRequests": { + "description": "TokenRequests indicates the CSI driver needs pods' service account tokens it is mounting volume for to do necessary authentication. Kubelet will pass the tokens in VolumeContext in the CSI NodePublishVolume calls. The CSI driver should parse and validate the following VolumeContext: \"csi.storage.k8s.io/serviceAccount.tokens\": {\n \"\u003caudience\u003e\": {\n \"token\": \u003ctoken\u003e,\n \"expirationTimestamp\": \u003cexpiration timestamp in RFC3339\u003e,\n },\n ...\n}\n\nNote: Audience in each TokenRequest should be different and at most one token is empty string. To receive a new token after expiry, RequiresRepublish can be used to trigger NodePublishVolume periodically.\n\nThis is a beta feature and only available when the CSIServiceAccountToken feature is enabled.", + "items": { + "$ref": "#/definitions/io.k8s.api.storage.v1beta1.TokenRequest" + }, + "type": "array", + "x-kubernetes-list-type": "atomic" + }, + "volumeLifecycleModes": { + "description": "VolumeLifecycleModes defines what kind of volumes this CSI volume driver supports. The default if the list is empty is \"Persistent\", which is the usage defined by the CSI specification and implemented in Kubernetes via the usual PV/PVC mechanism. The other mode is \"Ephemeral\". In this mode, volumes are defined inline inside the pod spec with CSIVolumeSource and their lifecycle is tied to the lifecycle of that pod. A driver has to be aware of this because it is only going to get a NodePublishVolume call for such a volume. For more information about implementing this mode, see https://kubernetes-csi.github.io/docs/ephemeral-local-volumes.html A driver can support one or more of these modes and more modes may be added in the future.\n\nThis field is immutable.", + "items": { + "type": "string" + }, + "type": "array" + } + }, + "type": "object" + }, + "io.k8s.api.storage.v1beta1.CSINode": { + "description": "DEPRECATED - This group version of CSINode is deprecated by storage/v1/CSINode. See the release notes for more information. CSINode holds information about all CSI drivers installed on a node. CSI drivers do not need to create the CSINode object directly. As long as they use the node-driver-registrar sidecar container, the kubelet will automatically populate the CSINode object for the CSI driver as part of kubelet plugin registration. CSINode has the same name as a node. If the object is missing, it means either there are no CSI Drivers available on the node, or the Kubelet version is low enough that it doesn't create this object. CSINode has an OwnerReference that points to the corresponding node object.", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta", + "description": "metadata.name must be the Kubernetes node name." + }, + "spec": { + "$ref": "#/definitions/io.k8s.api.storage.v1beta1.CSINodeSpec", + "description": "spec is the specification of CSINode" + } + }, + "required": [ + "spec" + ], + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "storage.k8s.io", + "kind": "CSINode", + "version": "v1beta1" + } + ] + }, + "io.k8s.api.storage.v1beta1.CSINodeDriver": { + "description": "CSINodeDriver holds information about the specification of one CSI driver installed on a node", + "properties": { + "allocatable": { + "$ref": "#/definitions/io.k8s.api.storage.v1beta1.VolumeNodeResources", + "description": "allocatable represents the volume resources of a node that are available for scheduling." + }, + "name": { + "description": "This is the name of the CSI driver that this object refers to. This MUST be the same name returned by the CSI GetPluginName() call for that driver.", + "type": "string" + }, + "nodeID": { + "description": "nodeID of the node from the driver point of view. This field enables Kubernetes to communicate with storage systems that do not share the same nomenclature for nodes. For example, Kubernetes may refer to a given node as \"node1\", but the storage system may refer to the same node as \"nodeA\". When Kubernetes issues a command to the storage system to attach a volume to a specific node, it can use this field to refer to the node name using the ID that the storage system will understand, e.g. \"nodeA\" instead of \"node1\". This field is required.", + "type": "string" + }, + "topologyKeys": { + "description": "topologyKeys is the list of keys supported by the driver. When a driver is initialized on a cluster, it provides a set of topology keys that it understands (e.g. \"company.com/zone\", \"company.com/region\"). When a driver is initialized on a node, it provides the same topology keys along with values. Kubelet will expose these topology keys as labels on its own node object. When Kubernetes does topology aware provisioning, it can use this list to determine which labels it should retrieve from the node object and pass back to the driver. It is possible for different nodes to use different topology keys. This can be empty if driver does not support topology.", + "items": { + "type": "string" + }, + "type": "array" + } + }, + "required": [ + "name", + "nodeID" + ], + "type": "object" + }, + "io.k8s.api.storage.v1beta1.CSINodeList": { + "description": "CSINodeList is a collection of CSINode objects.", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "items": { + "description": "items is the list of CSINode", + "items": { + "$ref": "#/definitions/io.k8s.api.storage.v1beta1.CSINode" + }, + "type": "array" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta", + "description": "Standard list metadata More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata" + } + }, + "required": [ + "items" + ], + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "storage.k8s.io", + "kind": "CSINodeList", + "version": "v1beta1" + } + ] + }, + "io.k8s.api.storage.v1beta1.CSINodeSpec": { + "description": "CSINodeSpec holds information about the specification of all CSI drivers installed on a node", + "properties": { + "drivers": { + "description": "drivers is a list of information of all CSI Drivers existing on a node. If all drivers in the list are uninstalled, this can become empty.", + "items": { + "$ref": "#/definitions/io.k8s.api.storage.v1beta1.CSINodeDriver" + }, + "type": "array", + "x-kubernetes-patch-merge-key": "name", + "x-kubernetes-patch-strategy": "merge" + } + }, + "required": [ + "drivers" + ], + "type": "object" + }, + "io.k8s.api.storage.v1beta1.CSIStorageCapacity": { + "description": "CSIStorageCapacity stores the result of one CSI GetCapacity call. For a given StorageClass, this describes the available capacity in a particular topology segment. This can be used when considering where to instantiate new PersistentVolumes.\n\nFor example this can express things like: - StorageClass \"standard\" has \"1234 GiB\" available in \"topology.kubernetes.io/zone=us-east1\" - StorageClass \"localssd\" has \"10 GiB\" available in \"kubernetes.io/hostname=knode-abc123\"\n\nThe following three cases all imply that no capacity is available for a certain combination: - no object exists with suitable topology and storage class name - such an object exists, but the capacity is unset - such an object exists, but the capacity is zero\n\nThe producer of these objects can decide which approach is more suitable.\n\nThey are consumed by the kube-scheduler if the CSIStorageCapacity beta feature gate is enabled there and a CSI driver opts into capacity-aware scheduling with CSIDriver.StorageCapacity.", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "capacity": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity", + "description": "Capacity is the value reported by the CSI driver in its GetCapacityResponse for a GetCapacityRequest with topology and parameters that match the previous fields.\n\nThe semantic is currently (CSI spec 1.2) defined as: The available capacity, in bytes, of the storage that can be used to provision volumes. If not set, that information is currently unavailable and treated like zero capacity." + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "maximumVolumeSize": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity", + "description": "MaximumVolumeSize is the value reported by the CSI driver in its GetCapacityResponse for a GetCapacityRequest with topology and parameters that match the previous fields.\n\nThis is defined since CSI spec 1.4.0 as the largest size that may be used in a CreateVolumeRequest.capacity_range.required_bytes field to create a volume with the same parameters as those in GetCapacityRequest. The corresponding value in the Kubernetes API is ResourceRequirements.Requests in a volume claim." + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta", + "description": "Standard object's metadata. The name has no particular meaning. It must be be a DNS subdomain (dots allowed, 253 characters). To ensure that there are no conflicts with other CSI drivers on the cluster, the recommendation is to use csisc-\u003cuuid\u003e, a generated name, or a reverse-domain name which ends with the unique CSI driver name.\n\nObjects are namespaced.\n\nMore info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata" + }, + "nodeTopology": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector", + "description": "NodeTopology defines which nodes have access to the storage for which capacity was reported. If not set, the storage is not accessible from any node in the cluster. If empty, the storage is accessible from all nodes. This field is immutable." + }, + "storageClassName": { + "description": "The name of the StorageClass that the reported capacity applies to. It must meet the same requirements as the name of a StorageClass object (non-empty, DNS subdomain). If that object no longer exists, the CSIStorageCapacity object is obsolete and should be removed by its creator. This field is immutable.", + "type": "string" + } + }, + "required": [ + "storageClassName" + ], + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "storage.k8s.io", + "kind": "CSIStorageCapacity", + "version": "v1beta1" + } + ] + }, + "io.k8s.api.storage.v1beta1.CSIStorageCapacityList": { + "description": "CSIStorageCapacityList is a collection of CSIStorageCapacity objects.", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "items": { + "description": "Items is the list of CSIStorageCapacity objects.", + "items": { + "$ref": "#/definitions/io.k8s.api.storage.v1beta1.CSIStorageCapacity" + }, + "type": "array", + "x-kubernetes-list-map-keys": [ + "name" + ], + "x-kubernetes-list-type": "map" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta", + "description": "Standard list metadata More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata" + } + }, + "required": [ + "items" + ], + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "storage.k8s.io", + "kind": "CSIStorageCapacityList", + "version": "v1beta1" + } + ] + }, + "io.k8s.api.storage.v1beta1.StorageClass": { + "description": "StorageClass describes the parameters for a class of storage for which PersistentVolumes can be dynamically provisioned.\n\nStorageClasses are non-namespaced; the name of the storage class according to etcd is in ObjectMeta.Name.", + "properties": { + "allowVolumeExpansion": { + "description": "AllowVolumeExpansion shows whether the storage class allow volume expand", + "type": "boolean" + }, + "allowedTopologies": { + "description": "Restrict the node topologies where volumes can be dynamically provisioned. Each volume plugin defines its own supported topology specifications. An empty TopologySelectorTerm list means there is no topology restriction. This field is only honored by servers that enable the VolumeScheduling feature.", + "items": { + "$ref": "#/definitions/io.k8s.api.core.v1.TopologySelectorTerm" + }, + "type": "array" + }, + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta", + "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata" + }, + "mountOptions": { + "description": "Dynamically provisioned PersistentVolumes of this storage class are created with these mountOptions, e.g. [\"ro\", \"soft\"]. Not validated - mount of the PVs will simply fail if one is invalid.", + "items": { + "type": "string" + }, + "type": "array" + }, + "parameters": { + "additionalProperties": { + "type": "string" + }, + "description": "Parameters holds the parameters for the provisioner that should create volumes of this storage class.", + "type": "object" + }, + "provisioner": { + "description": "Provisioner indicates the type of the provisioner.", + "type": "string" + }, + "reclaimPolicy": { + "description": "Dynamically provisioned PersistentVolumes of this storage class are created with this reclaimPolicy. Defaults to Delete.", + "type": "string" + }, + "volumeBindingMode": { + "description": "VolumeBindingMode indicates how PersistentVolumeClaims should be provisioned and bound. When unset, VolumeBindingImmediate is used. This field is only honored by servers that enable the VolumeScheduling feature.", + "type": "string" + } + }, + "required": [ + "provisioner" + ], + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "storage.k8s.io", + "kind": "StorageClass", + "version": "v1beta1" + } + ] + }, + "io.k8s.api.storage.v1beta1.StorageClassList": { + "description": "StorageClassList is a collection of storage classes.", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "items": { + "description": "Items is the list of StorageClasses", + "items": { + "$ref": "#/definitions/io.k8s.api.storage.v1beta1.StorageClass" + }, + "type": "array" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta", + "description": "Standard list metadata More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata" + } + }, + "required": [ + "items" + ], + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "storage.k8s.io", + "kind": "StorageClassList", + "version": "v1beta1" + } + ] + }, + "io.k8s.api.storage.v1beta1.TokenRequest": { + "description": "TokenRequest contains parameters of a service account token.", + "properties": { + "audience": { + "description": "Audience is the intended audience of the token in \"TokenRequestSpec\". It will default to the audiences of kube apiserver.", + "type": "string" + }, + "expirationSeconds": { + "description": "ExpirationSeconds is the duration of validity of the token in \"TokenRequestSpec\". It has the same default value of \"ExpirationSeconds\" in \"TokenRequestSpec\"", + "format": "int64", + "type": "integer" + } + }, + "required": [ + "audience" + ], + "type": "object" + }, + "io.k8s.api.storage.v1beta1.VolumeAttachment": { + "description": "VolumeAttachment captures the intent to attach or detach the specified volume to/from the specified node.\n\nVolumeAttachment objects are non-namespaced.", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta", + "description": "Standard object metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata" + }, + "spec": { + "$ref": "#/definitions/io.k8s.api.storage.v1beta1.VolumeAttachmentSpec", + "description": "Specification of the desired attach/detach volume behavior. Populated by the Kubernetes system." + }, + "status": { + "$ref": "#/definitions/io.k8s.api.storage.v1beta1.VolumeAttachmentStatus", + "description": "Status of the VolumeAttachment request. Populated by the entity completing the attach or detach operation, i.e. the external-attacher." + } + }, + "required": [ + "spec" + ], + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "storage.k8s.io", + "kind": "VolumeAttachment", + "version": "v1beta1" + } + ] + }, + "io.k8s.api.storage.v1beta1.VolumeAttachmentList": { + "description": "VolumeAttachmentList is a collection of VolumeAttachment objects.", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "items": { + "description": "Items is the list of VolumeAttachments", + "items": { + "$ref": "#/definitions/io.k8s.api.storage.v1beta1.VolumeAttachment" + }, + "type": "array" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta", + "description": "Standard list metadata More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata" + } + }, + "required": [ + "items" + ], + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "storage.k8s.io", + "kind": "VolumeAttachmentList", + "version": "v1beta1" + } + ] + }, + "io.k8s.api.storage.v1beta1.VolumeAttachmentSource": { + "description": "VolumeAttachmentSource represents a volume that should be attached. Right now only PersistenVolumes can be attached via external attacher, in future we may allow also inline volumes in pods. Exactly one member can be set.", + "properties": { + "inlineVolumeSpec": { + "$ref": "#/definitions/io.k8s.api.core.v1.PersistentVolumeSpec", + "description": "inlineVolumeSpec contains all the information necessary to attach a persistent volume defined by a pod's inline VolumeSource. This field is populated only for the CSIMigration feature. It contains translated fields from a pod's inline VolumeSource to a PersistentVolumeSpec. This field is beta-level and is only honored by servers that enabled the CSIMigration feature." + }, + "persistentVolumeName": { + "description": "Name of the persistent volume to attach.", + "type": "string" + } + }, + "type": "object" + }, + "io.k8s.api.storage.v1beta1.VolumeAttachmentSpec": { + "description": "VolumeAttachmentSpec is the specification of a VolumeAttachment request.", + "properties": { + "attacher": { + "description": "Attacher indicates the name of the volume driver that MUST handle this request. This is the name returned by GetPluginName().", + "type": "string" + }, + "nodeName": { + "description": "The node that the volume should be attached to.", + "type": "string" + }, + "source": { + "$ref": "#/definitions/io.k8s.api.storage.v1beta1.VolumeAttachmentSource", + "description": "Source represents the volume that should be attached." + } + }, + "required": [ + "attacher", + "source", + "nodeName" + ], + "type": "object" + }, + "io.k8s.api.storage.v1beta1.VolumeAttachmentStatus": { + "description": "VolumeAttachmentStatus is the status of a VolumeAttachment request.", + "properties": { + "attachError": { + "$ref": "#/definitions/io.k8s.api.storage.v1beta1.VolumeError", + "description": "The last error encountered during attach operation, if any. This field must only be set by the entity completing the attach operation, i.e. the external-attacher." + }, + "attached": { + "description": "Indicates the volume is successfully attached. This field must only be set by the entity completing the attach operation, i.e. the external-attacher.", + "type": "boolean" + }, + "attachmentMetadata": { + "additionalProperties": { + "type": "string" + }, + "description": "Upon successful attach, this field is populated with any information returned by the attach operation that must be passed into subsequent WaitForAttach or Mount calls. This field must only be set by the entity completing the attach operation, i.e. the external-attacher.", + "type": "object" + }, + "detachError": { + "$ref": "#/definitions/io.k8s.api.storage.v1beta1.VolumeError", + "description": "The last error encountered during detach operation, if any. This field must only be set by the entity completing the detach operation, i.e. the external-attacher." + } + }, + "required": [ + "attached" + ], + "type": "object" + }, + "io.k8s.api.storage.v1beta1.VolumeError": { + "description": "VolumeError captures an error encountered during a volume operation.", + "properties": { + "message": { + "description": "String detailing the error encountered during Attach or Detach operation. This string may be logged, so it should not contain sensitive information.", + "type": "string" + }, + "time": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time", + "description": "Time the error was encountered." + } + }, + "type": "object" + }, + "io.k8s.api.storage.v1beta1.VolumeNodeResources": { + "description": "VolumeNodeResources is a set of resource limits for scheduling of volumes.", + "properties": { + "count": { + "description": "Maximum number of unique volumes managed by the CSI driver that can be used on a node. A volume that is both attached and mounted on a node is considered to be used once, not twice. The same rule applies for a unique volume that is shared among multiple pods on the same node. If this field is nil, then the supported number of volumes on this node is unbounded.", + "format": "int32", + "type": "integer" + } + }, + "type": "object" + }, + "io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1.CustomResourceColumnDefinition": { + "description": "CustomResourceColumnDefinition specifies a column for server side printing.", + "properties": { + "description": { + "description": "description is a human readable description of this column.", + "type": "string" + }, + "format": { + "description": "format is an optional OpenAPI type definition for this column. The 'name' format is applied to the primary identifier column to assist in clients identifying column is the resource name. See https://github.com/OAI/OpenAPI-Specification/blob/master/versions/2.0.md#data-types for details.", + "type": "string" + }, + "jsonPath": { + "description": "jsonPath is a simple JSON path (i.e. with array notation) which is evaluated against each custom resource to produce the value for this column.", + "type": "string" + }, + "name": { + "description": "name is a human readable name for the column.", + "type": "string" + }, + "priority": { + "description": "priority is an integer defining the relative importance of this column compared to others. Lower numbers are considered higher priority. Columns that may be omitted in limited space scenarios should be given a priority greater than 0.", + "format": "int32", + "type": "integer" + }, + "type": { + "description": "type is an OpenAPI type definition for this column. See https://github.com/OAI/OpenAPI-Specification/blob/master/versions/2.0.md#data-types for details.", + "type": "string" + } + }, + "required": [ + "name", + "type", + "jsonPath" + ], + "type": "object" + }, + "io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1.CustomResourceConversion": { + "description": "CustomResourceConversion describes how to convert different versions of a CR.", + "properties": { + "strategy": { + "description": "strategy specifies how custom resources are converted between versions. Allowed values are: - `None`: The converter only change the apiVersion and would not touch any other field in the custom resource. - `Webhook`: API Server will call to an external webhook to do the conversion. Additional information\n is needed for this option. This requires spec.preserveUnknownFields to be false, and spec.conversion.webhook to be set.", + "type": "string" + }, + "webhook": { + "$ref": "#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1.WebhookConversion", + "description": "webhook describes how to call the conversion webhook. Required when `strategy` is set to `Webhook`." + } + }, + "required": [ + "strategy" + ], + "type": "object" + }, + "io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1.CustomResourceDefinition": { + "description": "CustomResourceDefinition represents a resource that should be exposed on the API server. Its name MUST be in the format \u003c.spec.name\u003e.\u003c.spec.group\u003e.", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + }, + "spec": { + "$ref": "#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1.CustomResourceDefinitionSpec", + "description": "spec describes how the user wants the resources to appear" + }, + "status": { + "$ref": "#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1.CustomResourceDefinitionStatus", + "description": "status indicates the actual state of the CustomResourceDefinition" + } + }, + "required": [ + "spec" + ], + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "apiextensions.k8s.io", + "kind": "CustomResourceDefinition", + "version": "v1" + } + ] + }, + "io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1.CustomResourceDefinitionCondition": { + "description": "CustomResourceDefinitionCondition contains details for the current condition of this pod.", + "properties": { + "lastTransitionTime": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time", + "description": "lastTransitionTime last time the condition transitioned from one status to another." + }, + "message": { + "description": "message is a human-readable message indicating details about last transition.", + "type": "string" + }, + "reason": { + "description": "reason is a unique, one-word, CamelCase reason for the condition's last transition.", + "type": "string" + }, + "status": { + "description": "status is the status of the condition. Can be True, False, Unknown.", + "type": "string" + }, + "type": { + "description": "type is the type of the condition. Types include Established, NamesAccepted and Terminating.", + "type": "string" + } + }, + "required": [ + "type", + "status" + ], + "type": "object" + }, + "io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1.CustomResourceDefinitionList": { + "description": "CustomResourceDefinitionList is a list of CustomResourceDefinition objects.", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "items": { + "description": "items list individual CustomResourceDefinition objects", + "items": { + "$ref": "#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1.CustomResourceDefinition" + }, + "type": "array" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" + } + }, + "required": [ + "items" + ], + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "apiextensions.k8s.io", + "kind": "CustomResourceDefinitionList", + "version": "v1" + } + ] + }, + "io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1.CustomResourceDefinitionNames": { + "description": "CustomResourceDefinitionNames indicates the names to serve this CustomResourceDefinition", + "properties": { + "categories": { + "description": "categories is a list of grouped resources this custom resource belongs to (e.g. 'all'). This is published in API discovery documents, and used by clients to support invocations like `kubectl get all`.", + "items": { + "type": "string" + }, + "type": "array" + }, + "kind": { + "description": "kind is the serialized kind of the resource. It is normally CamelCase and singular. Custom resource instances will use this value as the `kind` attribute in API calls.", + "type": "string" + }, + "listKind": { + "description": "listKind is the serialized kind of the list for this resource. Defaults to \"`kind`List\".", + "type": "string" + }, + "plural": { + "description": "plural is the plural name of the resource to serve. The custom resources are served under `/apis/\u003cgroup\u003e/\u003cversion\u003e/.../\u003cplural\u003e`. Must match the name of the CustomResourceDefinition (in the form `\u003cnames.plural\u003e.\u003cgroup\u003e`). Must be all lowercase.", + "type": "string" + }, + "shortNames": { + "description": "shortNames are short names for the resource, exposed in API discovery documents, and used by clients to support invocations like `kubectl get \u003cshortname\u003e`. It must be all lowercase.", + "items": { + "type": "string" + }, + "type": "array" + }, + "singular": { + "description": "singular is the singular name of the resource. It must be all lowercase. Defaults to lowercased `kind`.", + "type": "string" + } + }, + "required": [ + "plural", + "kind" + ], + "type": "object" + }, + "io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1.CustomResourceDefinitionSpec": { + "description": "CustomResourceDefinitionSpec describes how a user wants their resource to appear", + "properties": { + "conversion": { + "$ref": "#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1.CustomResourceConversion", + "description": "conversion defines conversion settings for the CRD." + }, + "group": { + "description": "group is the API group of the defined custom resource. The custom resources are served under `/apis/\u003cgroup\u003e/...`. Must match the name of the CustomResourceDefinition (in the form `\u003cnames.plural\u003e.\u003cgroup\u003e`).", + "type": "string" + }, + "names": { + "$ref": "#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1.CustomResourceDefinitionNames", + "description": "names specify the resource and kind names for the custom resource." + }, + "preserveUnknownFields": { + "description": "preserveUnknownFields indicates that object fields which are not specified in the OpenAPI schema should be preserved when persisting to storage. apiVersion, kind, metadata and known fields inside metadata are always preserved. This field is deprecated in favor of setting `x-preserve-unknown-fields` to true in `spec.versions[*].schema.openAPIV3Schema`. See https://kubernetes.io/docs/tasks/access-kubernetes-api/custom-resources/custom-resource-definitions/#pruning-versus-preserving-unknown-fields for details.", + "type": "boolean" + }, + "scope": { + "description": "scope indicates whether the defined custom resource is cluster- or namespace-scoped. Allowed values are `Cluster` and `Namespaced`.", + "type": "string" + }, + "versions": { + "description": "versions is the list of all API versions of the defined custom resource. Version names are used to compute the order in which served versions are listed in API discovery. If the version string is \"kube-like\", it will sort above non \"kube-like\" version strings, which are ordered lexicographically. \"Kube-like\" versions start with a \"v\", then are followed by a number (the major version), then optionally the string \"alpha\" or \"beta\" and another number (the minor version). These are sorted first by GA \u003e beta \u003e alpha (where GA is a version with no suffix such as beta or alpha), and then by comparing major version, then minor version. An example sorted list of versions: v10, v2, v1, v11beta2, v10beta3, v3beta1, v12alpha1, v11alpha2, foo1, foo10.", + "items": { + "$ref": "#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1.CustomResourceDefinitionVersion" + }, + "type": "array" + } + }, + "required": [ + "group", + "names", + "scope", + "versions" + ], + "type": "object" + }, + "io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1.CustomResourceDefinitionStatus": { + "description": "CustomResourceDefinitionStatus indicates the state of the CustomResourceDefinition", + "properties": { + "acceptedNames": { + "$ref": "#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1.CustomResourceDefinitionNames", + "description": "acceptedNames are the names that are actually being used to serve discovery. They may be different than the names in spec." + }, + "conditions": { + "description": "conditions indicate state for particular aspects of a CustomResourceDefinition", + "items": { + "$ref": "#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1.CustomResourceDefinitionCondition" + }, + "type": "array", + "x-kubernetes-list-map-keys": [ + "type" + ], + "x-kubernetes-list-type": "map" + }, + "storedVersions": { + "description": "storedVersions lists all versions of CustomResources that were ever persisted. Tracking these versions allows a migration path for stored versions in etcd. The field is mutable so a migration controller can finish a migration to another version (ensuring no old objects are left in storage), and then remove the rest of the versions from this list. Versions may not be removed from `spec.versions` while they exist in this list.", + "items": { + "type": "string" + }, + "type": "array" + } + }, + "type": "object" + }, + "io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1.CustomResourceDefinitionVersion": { + "description": "CustomResourceDefinitionVersion describes a version for CRD.", + "properties": { + "additionalPrinterColumns": { + "description": "additionalPrinterColumns specifies additional columns returned in Table output. See https://kubernetes.io/docs/reference/using-api/api-concepts/#receiving-resources-as-tables for details. If no columns are specified, a single column displaying the age of the custom resource is used.", + "items": { + "$ref": "#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1.CustomResourceColumnDefinition" + }, + "type": "array" + }, + "deprecated": { + "description": "deprecated indicates this version of the custom resource API is deprecated. When set to true, API requests to this version receive a warning header in the server response. Defaults to false.", + "type": "boolean" + }, + "deprecationWarning": { + "description": "deprecationWarning overrides the default warning returned to API clients. May only be set when `deprecated` is true. The default warning indicates this version is deprecated and recommends use of the newest served version of equal or greater stability, if one exists.", + "type": "string" + }, + "name": { + "description": "name is the version name, e.g. “v1â€, “v2beta1â€, etc. The custom resources are served under this version at `/apis/\u003cgroup\u003e/\u003cversion\u003e/...` if `served` is true.", + "type": "string" + }, + "schema": { + "$ref": "#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1.CustomResourceValidation", + "description": "schema describes the schema used for validation, pruning, and defaulting of this version of the custom resource." + }, + "served": { + "description": "served is a flag enabling/disabling this version from being served via REST APIs", + "type": "boolean" + }, + "storage": { + "description": "storage indicates this version should be used when persisting custom resources to storage. There must be exactly one version with storage=true.", + "type": "boolean" + }, + "subresources": { + "$ref": "#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1.CustomResourceSubresources", + "description": "subresources specify what subresources this version of the defined custom resource have." + } + }, + "required": [ + "name", + "served", + "storage" + ], + "type": "object" + }, + "io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1.CustomResourceSubresourceScale": { + "description": "CustomResourceSubresourceScale defines how to serve the scale subresource for CustomResources.", + "properties": { + "labelSelectorPath": { + "description": "labelSelectorPath defines the JSON path inside of a custom resource that corresponds to Scale `status.selector`. Only JSON paths without the array notation are allowed. Must be a JSON Path under `.status` or `.spec`. Must be set to work with HorizontalPodAutoscaler. The field pointed by this JSON path must be a string field (not a complex selector struct) which contains a serialized label selector in string form. More info: https://kubernetes.io/docs/tasks/access-kubernetes-api/custom-resources/custom-resource-definitions#scale-subresource If there is no value under the given path in the custom resource, the `status.selector` value in the `/scale` subresource will default to the empty string.", + "type": "string" + }, + "specReplicasPath": { + "description": "specReplicasPath defines the JSON path inside of a custom resource that corresponds to Scale `spec.replicas`. Only JSON paths without the array notation are allowed. Must be a JSON Path under `.spec`. If there is no value under the given path in the custom resource, the `/scale` subresource will return an error on GET.", + "type": "string" + }, + "statusReplicasPath": { + "description": "statusReplicasPath defines the JSON path inside of a custom resource that corresponds to Scale `status.replicas`. Only JSON paths without the array notation are allowed. Must be a JSON Path under `.status`. If there is no value under the given path in the custom resource, the `status.replicas` value in the `/scale` subresource will default to 0.", + "type": "string" + } + }, + "required": [ + "specReplicasPath", + "statusReplicasPath" + ], + "type": "object" + }, + "io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1.CustomResourceSubresourceStatus": { + "description": "CustomResourceSubresourceStatus defines how to serve the status subresource for CustomResources. Status is represented by the `.status` JSON path inside of a CustomResource. When set, * exposes a /status subresource for the custom resource * PUT requests to the /status subresource take a custom resource object, and ignore changes to anything except the status stanza * PUT/POST/PATCH requests to the custom resource ignore changes to the status stanza", + "type": "object" + }, + "io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1.CustomResourceSubresources": { + "description": "CustomResourceSubresources defines the status and scale subresources for CustomResources.", + "properties": { + "scale": { + "$ref": "#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1.CustomResourceSubresourceScale", + "description": "scale indicates the custom resource should serve a `/scale` subresource that returns an `autoscaling/v1` Scale object." + }, + "status": { + "$ref": "#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1.CustomResourceSubresourceStatus", + "description": "status indicates the custom resource should serve a `/status` subresource. When enabled: 1. requests to the custom resource primary endpoint ignore changes to the `status` stanza of the object. 2. requests to the custom resource `/status` subresource ignore changes to anything other than the `status` stanza of the object." + } + }, + "type": "object" + }, + "io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1.CustomResourceValidation": { + "description": "CustomResourceValidation is a list of validation methods for CustomResources.", + "properties": { + "openAPIV3Schema": { + "$ref": "#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1.JSONSchemaProps", + "description": "openAPIV3Schema is the OpenAPI v3 schema to use for validation and pruning." + } + }, + "type": "object" + }, + "io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1.ExternalDocumentation": { + "description": "ExternalDocumentation allows referencing an external resource for extended documentation.", + "properties": { + "description": { + "type": "string" + }, + "url": { + "type": "string" + } + }, + "type": "object" + }, + "io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1.JSON": { + "description": "JSON represents any valid JSON value. These types are supported: bool, int64, float64, string, []interface{}, map[string]interface{} and nil." + }, + "io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1.JSONSchemaProps": { + "description": "JSONSchemaProps is a JSON-Schema following Specification Draft 4 (http://json-schema.org/).", + "properties": { + "$ref": { + "type": "string" + }, + "$schema": { + "type": "string" + }, + "additionalItems": { + "$ref": "#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1.JSONSchemaPropsOrBool" + }, + "additionalProperties": { + "$ref": "#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1.JSONSchemaPropsOrBool" + }, + "allOf": { + "items": { + "$ref": "#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1.JSONSchemaProps" + }, + "type": "array" + }, + "anyOf": { + "items": { + "$ref": "#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1.JSONSchemaProps" + }, + "type": "array" + }, + "default": { + "$ref": "#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1.JSON", + "description": "default is a default value for undefined object fields. Defaulting is a beta feature under the CustomResourceDefaulting feature gate. Defaulting requires spec.preserveUnknownFields to be false." + }, + "definitions": { + "additionalProperties": { + "$ref": "#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1.JSONSchemaProps" + }, + "type": "object" + }, + "dependencies": { + "additionalProperties": { + "$ref": "#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1.JSONSchemaPropsOrStringArray" + }, + "type": "object" + }, + "description": { + "type": "string" + }, + "enum": { + "items": { + "$ref": "#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1.JSON" + }, + "type": "array" + }, + "example": { + "$ref": "#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1.JSON" + }, + "exclusiveMaximum": { + "type": "boolean" + }, + "exclusiveMinimum": { + "type": "boolean" + }, + "externalDocs": { + "$ref": "#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1.ExternalDocumentation" + }, + "format": { + "description": "format is an OpenAPI v3 format string. Unknown formats are ignored. The following formats are validated:\n\n- bsonobjectid: a bson object ID, i.e. a 24 characters hex string - uri: an URI as parsed by Golang net/url.ParseRequestURI - email: an email address as parsed by Golang net/mail.ParseAddress - hostname: a valid representation for an Internet host name, as defined by RFC 1034, section 3.1 [RFC1034]. - ipv4: an IPv4 IP as parsed by Golang net.ParseIP - ipv6: an IPv6 IP as parsed by Golang net.ParseIP - cidr: a CIDR as parsed by Golang net.ParseCIDR - mac: a MAC address as parsed by Golang net.ParseMAC - uuid: an UUID that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?[0-9a-f]{4}-?[0-9a-f]{4}-?[0-9a-f]{12}$ - uuid3: an UUID3 that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?3[0-9a-f]{3}-?[0-9a-f]{4}-?[0-9a-f]{12}$ - uuid4: an UUID4 that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?4[0-9a-f]{3}-?[89ab][0-9a-f]{3}-?[0-9a-f]{12}$ - uuid5: an UUID5 that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?5[0-9a-f]{3}-?[89ab][0-9a-f]{3}-?[0-9a-f]{12}$ - isbn: an ISBN10 or ISBN13 number string like \"0321751043\" or \"978-0321751041\" - isbn10: an ISBN10 number string like \"0321751043\" - isbn13: an ISBN13 number string like \"978-0321751041\" - creditcard: a credit card number defined by the regex ^(?:4[0-9]{12}(?:[0-9]{3})?|5[1-5][0-9]{14}|6(?:011|5[0-9][0-9])[0-9]{12}|3[47][0-9]{13}|3(?:0[0-5]|[68][0-9])[0-9]{11}|(?:2131|1800|35\\d{3})\\d{11})$ with any non digit characters mixed in - ssn: a U.S. social security number following the regex ^\\d{3}[- ]?\\d{2}[- ]?\\d{4}$ - hexcolor: an hexadecimal color code like \"#FFFFFF: following the regex ^#?([0-9a-fA-F]{3}|[0-9a-fA-F]{6})$ - rgbcolor: an RGB color code like rgb like \"rgb(255,255,2559\" - byte: base64 encoded binary data - password: any kind of string - date: a date string like \"2006-01-02\" as defined by full-date in RFC3339 - duration: a duration string like \"22 ns\" as parsed by Golang time.ParseDuration or compatible with Scala duration format - datetime: a date time string like \"2014-12-15T19:30:20.000Z\" as defined by date-time in RFC3339.", + "type": "string" + }, + "id": { + "type": "string" + }, + "items": { + "$ref": "#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1.JSONSchemaPropsOrArray" + }, + "maxItems": { + "format": "int64", + "type": "integer" + }, + "maxLength": { + "format": "int64", + "type": "integer" + }, + "maxProperties": { + "format": "int64", + "type": "integer" + }, + "maximum": { + "format": "double", + "type": "number" + }, + "minItems": { + "format": "int64", + "type": "integer" + }, + "minLength": { + "format": "int64", + "type": "integer" + }, + "minProperties": { + "format": "int64", + "type": "integer" + }, + "minimum": { + "format": "double", + "type": "number" + }, + "multipleOf": { + "format": "double", + "type": "number" + }, + "not": { + "$ref": "#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1.JSONSchemaProps" + }, + "nullable": { + "type": "boolean" + }, + "oneOf": { + "items": { + "$ref": "#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1.JSONSchemaProps" + }, + "type": "array" + }, + "pattern": { + "type": "string" + }, + "patternProperties": { + "additionalProperties": { + "$ref": "#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1.JSONSchemaProps" + }, + "type": "object" + }, + "properties": { + "additionalProperties": { + "$ref": "#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1.JSONSchemaProps" + }, + "type": "object" + }, + "required": { + "items": { + "type": "string" + }, + "type": "array" + }, + "title": { + "type": "string" + }, + "type": { + "type": "string" + }, + "uniqueItems": { + "type": "boolean" + }, + "x-kubernetes-embedded-resource": { + "description": "x-kubernetes-embedded-resource defines that the value is an embedded Kubernetes runtime.Object, with TypeMeta and ObjectMeta. The type must be object. It is allowed to further restrict the embedded object. kind, apiVersion and metadata are validated automatically. x-kubernetes-preserve-unknown-fields is allowed to be true, but does not have to be if the object is fully specified (up to kind, apiVersion, metadata).", + "type": "boolean" + }, + "x-kubernetes-int-or-string": { + "description": "x-kubernetes-int-or-string specifies that this value is either an integer or a string. If this is true, an empty type is allowed and type as child of anyOf is permitted if following one of the following patterns:\n\n1) anyOf:\n - type: integer\n - type: string\n2) allOf:\n - anyOf:\n - type: integer\n - type: string\n - ... zero or more", + "type": "boolean" + }, + "x-kubernetes-list-map-keys": { + "description": "x-kubernetes-list-map-keys annotates an array with the x-kubernetes-list-type `map` by specifying the keys used as the index of the map.\n\nThis tag MUST only be used on lists that have the \"x-kubernetes-list-type\" extension set to \"map\". Also, the values specified for this attribute must be a scalar typed field of the child structure (no nesting is supported).\n\nThe properties specified must either be required or have a default value, to ensure those properties are present for all list items.", + "items": { + "type": "string" + }, + "type": "array" + }, + "x-kubernetes-list-type": { + "description": "x-kubernetes-list-type annotates an array to further describe its topology. This extension must only be used on lists and may have 3 possible values:\n\n1) `atomic`: the list is treated as a single entity, like a scalar.\n Atomic lists will be entirely replaced when updated. This extension\n may be used on any type of list (struct, scalar, ...).\n2) `set`:\n Sets are lists that must not have multiple items with the same value. Each\n value must be a scalar, an object with x-kubernetes-map-type `atomic` or an\n array with x-kubernetes-list-type `atomic`.\n3) `map`:\n These lists are like maps in that their elements have a non-index key\n used to identify them. Order is preserved upon merge. The map tag\n must only be used on a list with elements of type object.\nDefaults to atomic for arrays.", + "type": "string" + }, + "x-kubernetes-map-type": { + "description": "x-kubernetes-map-type annotates an object to further describe its topology. This extension must only be used when type is object and may have 2 possible values:\n\n1) `granular`:\n These maps are actual maps (key-value pairs) and each fields are independent\n from each other (they can each be manipulated by separate actors). This is\n the default behaviour for all maps.\n2) `atomic`: the list is treated as a single entity, like a scalar.\n Atomic maps will be entirely replaced when updated.", + "type": "string" + }, + "x-kubernetes-preserve-unknown-fields": { + "description": "x-kubernetes-preserve-unknown-fields stops the API server decoding step from pruning fields which are not specified in the validation schema. This affects fields recursively, but switches back to normal pruning behaviour if nested properties or additionalProperties are specified in the schema. This can either be true or undefined. False is forbidden.", + "type": "boolean" + } + }, + "type": "object" + }, + "io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1.JSONSchemaPropsOrArray": { + "description": "JSONSchemaPropsOrArray represents a value that can either be a JSONSchemaProps or an array of JSONSchemaProps. Mainly here for serialization purposes." + }, + "io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1.JSONSchemaPropsOrBool": { + "description": "JSONSchemaPropsOrBool represents JSONSchemaProps or a boolean value. Defaults to true for the boolean property." + }, + "io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1.JSONSchemaPropsOrStringArray": { + "description": "JSONSchemaPropsOrStringArray represents a JSONSchemaProps or a string array." + }, + "io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1.ServiceReference": { + "description": "ServiceReference holds a reference to Service.legacy.k8s.io", + "properties": { + "name": { + "description": "name is the name of the service. Required", + "type": "string" + }, + "namespace": { + "description": "namespace is the namespace of the service. Required", + "type": "string" + }, + "path": { + "description": "path is an optional URL path at which the webhook will be contacted.", + "type": "string" + }, + "port": { + "description": "port is an optional service port at which the webhook will be contacted. `port` should be a valid port number (1-65535, inclusive). Defaults to 443 for backward compatibility.", + "format": "int32", + "type": "integer" + } + }, + "required": [ + "namespace", + "name" + ], + "type": "object" + }, + "io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1.WebhookClientConfig": { + "description": "WebhookClientConfig contains the information to make a TLS connection with the webhook.", + "properties": { + "caBundle": { + "description": "caBundle is a PEM encoded CA bundle which will be used to validate the webhook's server certificate. If unspecified, system trust roots on the apiserver are used.", + "format": "byte", + "type": "string" + }, + "service": { + "$ref": "#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1.ServiceReference", + "description": "service is a reference to the service for this webhook. Either service or url must be specified.\n\nIf the webhook is running within the cluster, then you should use `service`." + }, + "url": { + "description": "url gives the location of the webhook, in standard URL form (`scheme://host:port/path`). Exactly one of `url` or `service` must be specified.\n\nThe `host` should not refer to a service running in the cluster; use the `service` field instead. The host might be resolved via external DNS in some apiservers (e.g., `kube-apiserver` cannot resolve in-cluster DNS as that would be a layering violation). `host` may also be an IP address.\n\nPlease note that using `localhost` or `127.0.0.1` as a `host` is risky unless you take great care to run this webhook on all hosts which run an apiserver which might need to make calls to this webhook. Such installs are likely to be non-portable, i.e., not easy to turn up in a new cluster.\n\nThe scheme must be \"https\"; the URL must begin with \"https://\".\n\nA path is optional, and if present may be any string permissible in a URL. You may use the path to pass an arbitrary string to the webhook, for example, a cluster identifier.\n\nAttempting to use a user or basic auth e.g. \"user:password@\" is not allowed. Fragments (\"#...\") and query parameters (\"?...\") are not allowed, either.", + "type": "string" + } + }, + "type": "object" + }, + "io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1.WebhookConversion": { + "description": "WebhookConversion describes how to call a conversion webhook", + "properties": { + "clientConfig": { + "$ref": "#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1.WebhookClientConfig", + "description": "clientConfig is the instructions for how to call the webhook if strategy is `Webhook`." + }, + "conversionReviewVersions": { + "description": "conversionReviewVersions is an ordered list of preferred `ConversionReview` versions the Webhook expects. The API server will use the first version in the list which it supports. If none of the versions specified in this list are supported by API server, conversion will fail for the custom resource. If a persisted Webhook configuration specifies allowed versions and does not include any versions known to the API Server, calls to the webhook will fail.", + "items": { + "type": "string" + }, + "type": "array" + } + }, + "required": [ + "conversionReviewVersions" + ], + "type": "object" + }, + "io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1beta1.CustomResourceColumnDefinition": { + "description": "CustomResourceColumnDefinition specifies a column for server side printing.", + "properties": { + "JSONPath": { + "description": "JSONPath is a simple JSON path (i.e. with array notation) which is evaluated against each custom resource to produce the value for this column.", + "type": "string" + }, + "description": { + "description": "description is a human readable description of this column.", + "type": "string" + }, + "format": { + "description": "format is an optional OpenAPI type definition for this column. The 'name' format is applied to the primary identifier column to assist in clients identifying column is the resource name. See https://github.com/OAI/OpenAPI-Specification/blob/master/versions/2.0.md#data-types for details.", + "type": "string" + }, + "name": { + "description": "name is a human readable name for the column.", + "type": "string" + }, + "priority": { + "description": "priority is an integer defining the relative importance of this column compared to others. Lower numbers are considered higher priority. Columns that may be omitted in limited space scenarios should be given a priority greater than 0.", + "format": "int32", + "type": "integer" + }, + "type": { + "description": "type is an OpenAPI type definition for this column. See https://github.com/OAI/OpenAPI-Specification/blob/master/versions/2.0.md#data-types for details.", + "type": "string" + } + }, + "required": [ + "name", + "type", + "JSONPath" + ], + "type": "object" + }, + "io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1beta1.CustomResourceConversion": { + "description": "CustomResourceConversion describes how to convert different versions of a CR.", + "properties": { + "conversionReviewVersions": { + "description": "conversionReviewVersions is an ordered list of preferred `ConversionReview` versions the Webhook expects. The API server will use the first version in the list which it supports. If none of the versions specified in this list are supported by API server, conversion will fail for the custom resource. If a persisted Webhook configuration specifies allowed versions and does not include any versions known to the API Server, calls to the webhook will fail. Defaults to `[\"v1beta1\"]`.", + "items": { + "type": "string" + }, + "type": "array" + }, + "strategy": { + "description": "strategy specifies how custom resources are converted between versions. Allowed values are: - `None`: The converter only change the apiVersion and would not touch any other field in the custom resource. - `Webhook`: API Server will call to an external webhook to do the conversion. Additional information\n is needed for this option. This requires spec.preserveUnknownFields to be false, and spec.conversion.webhookClientConfig to be set.", + "type": "string" + }, + "webhookClientConfig": { + "$ref": "#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1beta1.WebhookClientConfig", + "description": "webhookClientConfig is the instructions for how to call the webhook if strategy is `Webhook`. Required when `strategy` is set to `Webhook`." + } + }, + "required": [ + "strategy" + ], + "type": "object" + }, + "io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1beta1.CustomResourceDefinition": { + "description": "CustomResourceDefinition represents a resource that should be exposed on the API server. Its name MUST be in the format \u003c.spec.name\u003e.\u003c.spec.group\u003e. Deprecated in v1.16, planned for removal in v1.22. Use apiextensions.k8s.io/v1 CustomResourceDefinition instead.", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + }, + "spec": { + "$ref": "#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1beta1.CustomResourceDefinitionSpec", + "description": "spec describes how the user wants the resources to appear" + }, + "status": { + "$ref": "#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1beta1.CustomResourceDefinitionStatus", + "description": "status indicates the actual state of the CustomResourceDefinition" + } + }, + "required": [ + "spec" + ], + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "apiextensions.k8s.io", + "kind": "CustomResourceDefinition", + "version": "v1beta1" + } + ] + }, + "io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1beta1.CustomResourceDefinitionCondition": { + "description": "CustomResourceDefinitionCondition contains details for the current condition of this pod.", + "properties": { + "lastTransitionTime": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time", + "description": "lastTransitionTime last time the condition transitioned from one status to another." + }, + "message": { + "description": "message is a human-readable message indicating details about last transition.", + "type": "string" + }, + "reason": { + "description": "reason is a unique, one-word, CamelCase reason for the condition's last transition.", + "type": "string" + }, + "status": { + "description": "status is the status of the condition. Can be True, False, Unknown.", + "type": "string" + }, + "type": { + "description": "type is the type of the condition. Types include Established, NamesAccepted and Terminating.", + "type": "string" + } + }, + "required": [ + "type", + "status" + ], + "type": "object" + }, + "io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1beta1.CustomResourceDefinitionList": { + "description": "CustomResourceDefinitionList is a list of CustomResourceDefinition objects.", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "items": { + "description": "items list individual CustomResourceDefinition objects", + "items": { + "$ref": "#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1beta1.CustomResourceDefinition" + }, + "type": "array" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" + } + }, + "required": [ + "items" + ], + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "apiextensions.k8s.io", + "kind": "CustomResourceDefinitionList", + "version": "v1beta1" + } + ] + }, + "io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1beta1.CustomResourceDefinitionNames": { + "description": "CustomResourceDefinitionNames indicates the names to serve this CustomResourceDefinition", + "properties": { + "categories": { + "description": "categories is a list of grouped resources this custom resource belongs to (e.g. 'all'). This is published in API discovery documents, and used by clients to support invocations like `kubectl get all`.", + "items": { + "type": "string" + }, + "type": "array" + }, + "kind": { + "description": "kind is the serialized kind of the resource. It is normally CamelCase and singular. Custom resource instances will use this value as the `kind` attribute in API calls.", + "type": "string" + }, + "listKind": { + "description": "listKind is the serialized kind of the list for this resource. Defaults to \"`kind`List\".", + "type": "string" + }, + "plural": { + "description": "plural is the plural name of the resource to serve. The custom resources are served under `/apis/\u003cgroup\u003e/\u003cversion\u003e/.../\u003cplural\u003e`. Must match the name of the CustomResourceDefinition (in the form `\u003cnames.plural\u003e.\u003cgroup\u003e`). Must be all lowercase.", + "type": "string" + }, + "shortNames": { + "description": "shortNames are short names for the resource, exposed in API discovery documents, and used by clients to support invocations like `kubectl get \u003cshortname\u003e`. It must be all lowercase.", + "items": { + "type": "string" + }, + "type": "array" + }, + "singular": { + "description": "singular is the singular name of the resource. It must be all lowercase. Defaults to lowercased `kind`.", + "type": "string" + } + }, + "required": [ + "plural", + "kind" + ], + "type": "object" + }, + "io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1beta1.CustomResourceDefinitionSpec": { + "description": "CustomResourceDefinitionSpec describes how a user wants their resource to appear", + "properties": { + "additionalPrinterColumns": { + "description": "additionalPrinterColumns specifies additional columns returned in Table output. See https://kubernetes.io/docs/reference/using-api/api-concepts/#receiving-resources-as-tables for details. If present, this field configures columns for all versions. Top-level and per-version columns are mutually exclusive. If no top-level or per-version columns are specified, a single column displaying the age of the custom resource is used.", + "items": { + "$ref": "#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1beta1.CustomResourceColumnDefinition" + }, + "type": "array" + }, + "conversion": { + "$ref": "#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1beta1.CustomResourceConversion", + "description": "conversion defines conversion settings for the CRD." + }, + "group": { + "description": "group is the API group of the defined custom resource. The custom resources are served under `/apis/\u003cgroup\u003e/...`. Must match the name of the CustomResourceDefinition (in the form `\u003cnames.plural\u003e.\u003cgroup\u003e`).", + "type": "string" + }, + "names": { + "$ref": "#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1beta1.CustomResourceDefinitionNames", + "description": "names specify the resource and kind names for the custom resource." + }, + "preserveUnknownFields": { + "description": "preserveUnknownFields indicates that object fields which are not specified in the OpenAPI schema should be preserved when persisting to storage. apiVersion, kind, metadata and known fields inside metadata are always preserved. If false, schemas must be defined for all versions. Defaults to true in v1beta for backwards compatibility. Deprecated: will be required to be false in v1. Preservation of unknown fields can be specified in the validation schema using the `x-kubernetes-preserve-unknown-fields: true` extension. See https://kubernetes.io/docs/tasks/access-kubernetes-api/custom-resources/custom-resource-definitions/#pruning-versus-preserving-unknown-fields for details.", + "type": "boolean" + }, + "scope": { + "description": "scope indicates whether the defined custom resource is cluster- or namespace-scoped. Allowed values are `Cluster` and `Namespaced`. Default is `Namespaced`.", + "type": "string" + }, + "subresources": { + "$ref": "#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1beta1.CustomResourceSubresources", + "description": "subresources specify what subresources the defined custom resource has. If present, this field configures subresources for all versions. Top-level and per-version subresources are mutually exclusive." + }, + "validation": { + "$ref": "#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1beta1.CustomResourceValidation", + "description": "validation describes the schema used for validation and pruning of the custom resource. If present, this validation schema is used to validate all versions. Top-level and per-version schemas are mutually exclusive." + }, + "version": { + "description": "version is the API version of the defined custom resource. The custom resources are served under `/apis/\u003cgroup\u003e/\u003cversion\u003e/...`. Must match the name of the first item in the `versions` list if `version` and `versions` are both specified. Optional if `versions` is specified. Deprecated: use `versions` instead.", + "type": "string" + }, + "versions": { + "description": "versions is the list of all API versions of the defined custom resource. Optional if `version` is specified. The name of the first item in the `versions` list must match the `version` field if `version` and `versions` are both specified. Version names are used to compute the order in which served versions are listed in API discovery. If the version string is \"kube-like\", it will sort above non \"kube-like\" version strings, which are ordered lexicographically. \"Kube-like\" versions start with a \"v\", then are followed by a number (the major version), then optionally the string \"alpha\" or \"beta\" and another number (the minor version). These are sorted first by GA \u003e beta \u003e alpha (where GA is a version with no suffix such as beta or alpha), and then by comparing major version, then minor version. An example sorted list of versions: v10, v2, v1, v11beta2, v10beta3, v3beta1, v12alpha1, v11alpha2, foo1, foo10.", + "items": { + "$ref": "#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1beta1.CustomResourceDefinitionVersion" + }, + "type": "array" + } + }, + "required": [ + "group", + "names", + "scope" + ], + "type": "object" + }, + "io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1beta1.CustomResourceDefinitionStatus": { + "description": "CustomResourceDefinitionStatus indicates the state of the CustomResourceDefinition", + "properties": { + "acceptedNames": { + "$ref": "#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1beta1.CustomResourceDefinitionNames", + "description": "acceptedNames are the names that are actually being used to serve discovery. They may be different than the names in spec." + }, + "conditions": { + "description": "conditions indicate state for particular aspects of a CustomResourceDefinition", + "items": { + "$ref": "#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1beta1.CustomResourceDefinitionCondition" + }, + "type": "array", + "x-kubernetes-list-map-keys": [ + "type" + ], + "x-kubernetes-list-type": "map" + }, + "storedVersions": { + "description": "storedVersions lists all versions of CustomResources that were ever persisted. Tracking these versions allows a migration path for stored versions in etcd. The field is mutable so a migration controller can finish a migration to another version (ensuring no old objects are left in storage), and then remove the rest of the versions from this list. Versions may not be removed from `spec.versions` while they exist in this list.", + "items": { + "type": "string" + }, + "type": "array" + } + }, + "type": "object" + }, + "io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1beta1.CustomResourceDefinitionVersion": { + "description": "CustomResourceDefinitionVersion describes a version for CRD.", + "properties": { + "additionalPrinterColumns": { + "description": "additionalPrinterColumns specifies additional columns returned in Table output. See https://kubernetes.io/docs/reference/using-api/api-concepts/#receiving-resources-as-tables for details. Top-level and per-version columns are mutually exclusive. Per-version columns must not all be set to identical values (top-level columns should be used instead). If no top-level or per-version columns are specified, a single column displaying the age of the custom resource is used.", + "items": { + "$ref": "#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1beta1.CustomResourceColumnDefinition" + }, + "type": "array" + }, + "deprecated": { + "description": "deprecated indicates this version of the custom resource API is deprecated. When set to true, API requests to this version receive a warning header in the server response. Defaults to false.", + "type": "boolean" + }, + "deprecationWarning": { + "description": "deprecationWarning overrides the default warning returned to API clients. May only be set when `deprecated` is true. The default warning indicates this version is deprecated and recommends use of the newest served version of equal or greater stability, if one exists.", + "type": "string" + }, + "name": { + "description": "name is the version name, e.g. “v1â€, “v2beta1â€, etc. The custom resources are served under this version at `/apis/\u003cgroup\u003e/\u003cversion\u003e/...` if `served` is true.", + "type": "string" + }, + "schema": { + "$ref": "#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1beta1.CustomResourceValidation", + "description": "schema describes the schema used for validation and pruning of this version of the custom resource. Top-level and per-version schemas are mutually exclusive. Per-version schemas must not all be set to identical values (top-level validation schema should be used instead)." + }, + "served": { + "description": "served is a flag enabling/disabling this version from being served via REST APIs", + "type": "boolean" + }, + "storage": { + "description": "storage indicates this version should be used when persisting custom resources to storage. There must be exactly one version with storage=true.", + "type": "boolean" + }, + "subresources": { + "$ref": "#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1beta1.CustomResourceSubresources", + "description": "subresources specify what subresources this version of the defined custom resource have. Top-level and per-version subresources are mutually exclusive. Per-version subresources must not all be set to identical values (top-level subresources should be used instead)." + } + }, + "required": [ + "name", + "served", + "storage" + ], + "type": "object" + }, + "io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1beta1.CustomResourceSubresourceScale": { + "description": "CustomResourceSubresourceScale defines how to serve the scale subresource for CustomResources.", + "properties": { + "labelSelectorPath": { + "description": "labelSelectorPath defines the JSON path inside of a custom resource that corresponds to Scale `status.selector`. Only JSON paths without the array notation are allowed. Must be a JSON Path under `.status` or `.spec`. Must be set to work with HorizontalPodAutoscaler. The field pointed by this JSON path must be a string field (not a complex selector struct) which contains a serialized label selector in string form. More info: https://kubernetes.io/docs/tasks/access-kubernetes-api/custom-resources/custom-resource-definitions#scale-subresource If there is no value under the given path in the custom resource, the `status.selector` value in the `/scale` subresource will default to the empty string.", + "type": "string" + }, + "specReplicasPath": { + "description": "specReplicasPath defines the JSON path inside of a custom resource that corresponds to Scale `spec.replicas`. Only JSON paths without the array notation are allowed. Must be a JSON Path under `.spec`. If there is no value under the given path in the custom resource, the `/scale` subresource will return an error on GET.", + "type": "string" + }, + "statusReplicasPath": { + "description": "statusReplicasPath defines the JSON path inside of a custom resource that corresponds to Scale `status.replicas`. Only JSON paths without the array notation are allowed. Must be a JSON Path under `.status`. If there is no value under the given path in the custom resource, the `status.replicas` value in the `/scale` subresource will default to 0.", + "type": "string" + } + }, + "required": [ + "specReplicasPath", + "statusReplicasPath" + ], + "type": "object" + }, + "io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1beta1.CustomResourceSubresourceStatus": { + "description": "CustomResourceSubresourceStatus defines how to serve the status subresource for CustomResources. Status is represented by the `.status` JSON path inside of a CustomResource. When set, * exposes a /status subresource for the custom resource * PUT requests to the /status subresource take a custom resource object, and ignore changes to anything except the status stanza * PUT/POST/PATCH requests to the custom resource ignore changes to the status stanza", + "type": "object" + }, + "io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1beta1.CustomResourceSubresources": { + "description": "CustomResourceSubresources defines the status and scale subresources for CustomResources.", + "properties": { + "scale": { + "$ref": "#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1beta1.CustomResourceSubresourceScale", + "description": "scale indicates the custom resource should serve a `/scale` subresource that returns an `autoscaling/v1` Scale object." + }, + "status": { + "$ref": "#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1beta1.CustomResourceSubresourceStatus", + "description": "status indicates the custom resource should serve a `/status` subresource. When enabled: 1. requests to the custom resource primary endpoint ignore changes to the `status` stanza of the object. 2. requests to the custom resource `/status` subresource ignore changes to anything other than the `status` stanza of the object." + } + }, + "type": "object" + }, + "io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1beta1.CustomResourceValidation": { + "description": "CustomResourceValidation is a list of validation methods for CustomResources.", + "properties": { + "openAPIV3Schema": { + "$ref": "#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1beta1.JSONSchemaProps", + "description": "openAPIV3Schema is the OpenAPI v3 schema to use for validation and pruning." + } + }, + "type": "object" + }, + "io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1beta1.ExternalDocumentation": { + "description": "ExternalDocumentation allows referencing an external resource for extended documentation.", + "properties": { + "description": { + "type": "string" + }, + "url": { + "type": "string" + } + }, + "type": "object" + }, + "io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1beta1.JSON": { + "description": "JSON represents any valid JSON value. These types are supported: bool, int64, float64, string, []interface{}, map[string]interface{} and nil." + }, + "io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1beta1.JSONSchemaProps": { + "description": "JSONSchemaProps is a JSON-Schema following Specification Draft 4 (http://json-schema.org/).", + "properties": { + "$ref": { + "type": "string" + }, + "$schema": { + "type": "string" + }, + "additionalItems": { + "$ref": "#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1beta1.JSONSchemaPropsOrBool" + }, + "additionalProperties": { + "$ref": "#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1beta1.JSONSchemaPropsOrBool" + }, + "allOf": { + "items": { + "$ref": "#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1beta1.JSONSchemaProps" + }, + "type": "array" + }, + "anyOf": { + "items": { + "$ref": "#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1beta1.JSONSchemaProps" + }, + "type": "array" + }, + "default": { + "$ref": "#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1beta1.JSON", + "description": "default is a default value for undefined object fields. Defaulting is a beta feature under the CustomResourceDefaulting feature gate. CustomResourceDefinitions with defaults must be created using the v1 (or newer) CustomResourceDefinition API." + }, + "definitions": { + "additionalProperties": { + "$ref": "#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1beta1.JSONSchemaProps" + }, + "type": "object" + }, + "dependencies": { + "additionalProperties": { + "$ref": "#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1beta1.JSONSchemaPropsOrStringArray" + }, + "type": "object" + }, + "description": { + "type": "string" + }, + "enum": { + "items": { + "$ref": "#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1beta1.JSON" + }, + "type": "array" + }, + "example": { + "$ref": "#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1beta1.JSON" + }, + "exclusiveMaximum": { + "type": "boolean" + }, + "exclusiveMinimum": { + "type": "boolean" + }, + "externalDocs": { + "$ref": "#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1beta1.ExternalDocumentation" + }, + "format": { + "description": "format is an OpenAPI v3 format string. Unknown formats are ignored. The following formats are validated:\n\n- bsonobjectid: a bson object ID, i.e. a 24 characters hex string - uri: an URI as parsed by Golang net/url.ParseRequestURI - email: an email address as parsed by Golang net/mail.ParseAddress - hostname: a valid representation for an Internet host name, as defined by RFC 1034, section 3.1 [RFC1034]. - ipv4: an IPv4 IP as parsed by Golang net.ParseIP - ipv6: an IPv6 IP as parsed by Golang net.ParseIP - cidr: a CIDR as parsed by Golang net.ParseCIDR - mac: a MAC address as parsed by Golang net.ParseMAC - uuid: an UUID that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?[0-9a-f]{4}-?[0-9a-f]{4}-?[0-9a-f]{12}$ - uuid3: an UUID3 that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?3[0-9a-f]{3}-?[0-9a-f]{4}-?[0-9a-f]{12}$ - uuid4: an UUID4 that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?4[0-9a-f]{3}-?[89ab][0-9a-f]{3}-?[0-9a-f]{12}$ - uuid5: an UUID5 that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?5[0-9a-f]{3}-?[89ab][0-9a-f]{3}-?[0-9a-f]{12}$ - isbn: an ISBN10 or ISBN13 number string like \"0321751043\" or \"978-0321751041\" - isbn10: an ISBN10 number string like \"0321751043\" - isbn13: an ISBN13 number string like \"978-0321751041\" - creditcard: a credit card number defined by the regex ^(?:4[0-9]{12}(?:[0-9]{3})?|5[1-5][0-9]{14}|6(?:011|5[0-9][0-9])[0-9]{12}|3[47][0-9]{13}|3(?:0[0-5]|[68][0-9])[0-9]{11}|(?:2131|1800|35\\d{3})\\d{11})$ with any non digit characters mixed in - ssn: a U.S. social security number following the regex ^\\d{3}[- ]?\\d{2}[- ]?\\d{4}$ - hexcolor: an hexadecimal color code like \"#FFFFFF: following the regex ^#?([0-9a-fA-F]{3}|[0-9a-fA-F]{6})$ - rgbcolor: an RGB color code like rgb like \"rgb(255,255,2559\" - byte: base64 encoded binary data - password: any kind of string - date: a date string like \"2006-01-02\" as defined by full-date in RFC3339 - duration: a duration string like \"22 ns\" as parsed by Golang time.ParseDuration or compatible with Scala duration format - datetime: a date time string like \"2014-12-15T19:30:20.000Z\" as defined by date-time in RFC3339.", + "type": "string" + }, + "id": { + "type": "string" + }, + "items": { + "$ref": "#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1beta1.JSONSchemaPropsOrArray" + }, + "maxItems": { + "format": "int64", + "type": "integer" + }, + "maxLength": { + "format": "int64", + "type": "integer" + }, + "maxProperties": { + "format": "int64", + "type": "integer" + }, + "maximum": { + "format": "double", + "type": "number" + }, + "minItems": { + "format": "int64", + "type": "integer" + }, + "minLength": { + "format": "int64", + "type": "integer" + }, + "minProperties": { + "format": "int64", + "type": "integer" + }, + "minimum": { + "format": "double", + "type": "number" + }, + "multipleOf": { + "format": "double", + "type": "number" + }, + "not": { + "$ref": "#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1beta1.JSONSchemaProps" + }, + "nullable": { + "type": "boolean" + }, + "oneOf": { + "items": { + "$ref": "#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1beta1.JSONSchemaProps" + }, + "type": "array" + }, + "pattern": { + "type": "string" + }, + "patternProperties": { + "additionalProperties": { + "$ref": "#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1beta1.JSONSchemaProps" + }, + "type": "object" + }, + "properties": { + "additionalProperties": { + "$ref": "#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1beta1.JSONSchemaProps" + }, + "type": "object" + }, + "required": { + "items": { + "type": "string" + }, + "type": "array" + }, + "title": { + "type": "string" + }, + "type": { + "type": "string" + }, + "uniqueItems": { + "type": "boolean" + }, + "x-kubernetes-embedded-resource": { + "description": "x-kubernetes-embedded-resource defines that the value is an embedded Kubernetes runtime.Object, with TypeMeta and ObjectMeta. The type must be object. It is allowed to further restrict the embedded object. kind, apiVersion and metadata are validated automatically. x-kubernetes-preserve-unknown-fields is allowed to be true, but does not have to be if the object is fully specified (up to kind, apiVersion, metadata).", + "type": "boolean" + }, + "x-kubernetes-int-or-string": { + "description": "x-kubernetes-int-or-string specifies that this value is either an integer or a string. If this is true, an empty type is allowed and type as child of anyOf is permitted if following one of the following patterns:\n\n1) anyOf:\n - type: integer\n - type: string\n2) allOf:\n - anyOf:\n - type: integer\n - type: string\n - ... zero or more", + "type": "boolean" + }, + "x-kubernetes-list-map-keys": { + "description": "x-kubernetes-list-map-keys annotates an array with the x-kubernetes-list-type `map` by specifying the keys used as the index of the map.\n\nThis tag MUST only be used on lists that have the \"x-kubernetes-list-type\" extension set to \"map\". Also, the values specified for this attribute must be a scalar typed field of the child structure (no nesting is supported).\n\nThe properties specified must either be required or have a default value, to ensure those properties are present for all list items.", + "items": { + "type": "string" + }, + "type": "array" + }, + "x-kubernetes-list-type": { + "description": "x-kubernetes-list-type annotates an array to further describe its topology. This extension must only be used on lists and may have 3 possible values:\n\n1) `atomic`: the list is treated as a single entity, like a scalar.\n Atomic lists will be entirely replaced when updated. This extension\n may be used on any type of list (struct, scalar, ...).\n2) `set`:\n Sets are lists that must not have multiple items with the same value. Each\n value must be a scalar, an object with x-kubernetes-map-type `atomic` or an\n array with x-kubernetes-list-type `atomic`.\n3) `map`:\n These lists are like maps in that their elements have a non-index key\n used to identify them. Order is preserved upon merge. The map tag\n must only be used on a list with elements of type object.\nDefaults to atomic for arrays.", + "type": "string" + }, + "x-kubernetes-map-type": { + "description": "x-kubernetes-map-type annotates an object to further describe its topology. This extension must only be used when type is object and may have 2 possible values:\n\n1) `granular`:\n These maps are actual maps (key-value pairs) and each fields are independent\n from each other (they can each be manipulated by separate actors). This is\n the default behaviour for all maps.\n2) `atomic`: the list is treated as a single entity, like a scalar.\n Atomic maps will be entirely replaced when updated.", + "type": "string" + }, + "x-kubernetes-preserve-unknown-fields": { + "description": "x-kubernetes-preserve-unknown-fields stops the API server decoding step from pruning fields which are not specified in the validation schema. This affects fields recursively, but switches back to normal pruning behaviour if nested properties or additionalProperties are specified in the schema. This can either be true or undefined. False is forbidden.", + "type": "boolean" + } + }, + "type": "object" + }, + "io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1beta1.JSONSchemaPropsOrArray": { + "description": "JSONSchemaPropsOrArray represents a value that can either be a JSONSchemaProps or an array of JSONSchemaProps. Mainly here for serialization purposes." + }, + "io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1beta1.JSONSchemaPropsOrBool": { + "description": "JSONSchemaPropsOrBool represents JSONSchemaProps or a boolean value. Defaults to true for the boolean property." + }, + "io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1beta1.JSONSchemaPropsOrStringArray": { + "description": "JSONSchemaPropsOrStringArray represents a JSONSchemaProps or a string array." + }, + "io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1beta1.ServiceReference": { + "description": "ServiceReference holds a reference to Service.legacy.k8s.io", + "properties": { + "name": { + "description": "name is the name of the service. Required", + "type": "string" + }, + "namespace": { + "description": "namespace is the namespace of the service. Required", + "type": "string" + }, + "path": { + "description": "path is an optional URL path at which the webhook will be contacted.", + "type": "string" + }, + "port": { + "description": "port is an optional service port at which the webhook will be contacted. `port` should be a valid port number (1-65535, inclusive). Defaults to 443 for backward compatibility.", + "format": "int32", + "type": "integer" + } + }, + "required": [ + "namespace", + "name" + ], + "type": "object" + }, + "io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1beta1.WebhookClientConfig": { + "description": "WebhookClientConfig contains the information to make a TLS connection with the webhook.", + "properties": { + "caBundle": { + "description": "caBundle is a PEM encoded CA bundle which will be used to validate the webhook's server certificate. If unspecified, system trust roots on the apiserver are used.", + "format": "byte", + "type": "string" + }, + "service": { + "$ref": "#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1beta1.ServiceReference", + "description": "service is a reference to the service for this webhook. Either service or url must be specified.\n\nIf the webhook is running within the cluster, then you should use `service`." + }, + "url": { + "description": "url gives the location of the webhook, in standard URL form (`scheme://host:port/path`). Exactly one of `url` or `service` must be specified.\n\nThe `host` should not refer to a service running in the cluster; use the `service` field instead. The host might be resolved via external DNS in some apiservers (e.g., `kube-apiserver` cannot resolve in-cluster DNS as that would be a layering violation). `host` may also be an IP address.\n\nPlease note that using `localhost` or `127.0.0.1` as a `host` is risky unless you take great care to run this webhook on all hosts which run an apiserver which might need to make calls to this webhook. Such installs are likely to be non-portable, i.e., not easy to turn up in a new cluster.\n\nThe scheme must be \"https\"; the URL must begin with \"https://\".\n\nA path is optional, and if present may be any string permissible in a URL. You may use the path to pass an arbitrary string to the webhook, for example, a cluster identifier.\n\nAttempting to use a user or basic auth e.g. \"user:password@\" is not allowed. Fragments (\"#...\") and query parameters (\"?...\") are not allowed, either.", + "type": "string" + } + }, + "type": "object" + }, + "io.k8s.apimachinery.pkg.api.resource.Quantity": { + "description": "Quantity is a fixed-point representation of a number. It provides convenient marshaling/unmarshaling in JSON and YAML, in addition to String() and AsInt64() accessors.\n\nThe serialization format is:\n\n\u003cquantity\u003e ::= \u003csignedNumber\u003e\u003csuffix\u003e\n (Note that \u003csuffix\u003e may be empty, from the \"\" case in \u003cdecimalSI\u003e.)\n\u003cdigit\u003e ::= 0 | 1 | ... | 9 \u003cdigits\u003e ::= \u003cdigit\u003e | \u003cdigit\u003e\u003cdigits\u003e \u003cnumber\u003e ::= \u003cdigits\u003e | \u003cdigits\u003e.\u003cdigits\u003e | \u003cdigits\u003e. | .\u003cdigits\u003e \u003csign\u003e ::= \"+\" | \"-\" \u003csignedNumber\u003e ::= \u003cnumber\u003e | \u003csign\u003e\u003cnumber\u003e \u003csuffix\u003e ::= \u003cbinarySI\u003e | \u003cdecimalExponent\u003e | \u003cdecimalSI\u003e \u003cbinarySI\u003e ::= Ki | Mi | Gi | Ti | Pi | Ei\n (International System of units; See: http://physics.nist.gov/cuu/Units/binary.html)\n\u003cdecimalSI\u003e ::= m | \"\" | k | M | G | T | P | E\n (Note that 1024 = 1Ki but 1000 = 1k; I didn't choose the capitalization.)\n\u003cdecimalExponent\u003e ::= \"e\" \u003csignedNumber\u003e | \"E\" \u003csignedNumber\u003e\n\nNo matter which of the three exponent forms is used, no quantity may represent a number greater than 2^63-1 in magnitude, nor may it have more than 3 decimal places. Numbers larger or more precise will be capped or rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the future if we require larger or smaller quantities.\n\nWhen a Quantity is parsed from a string, it will remember the type of suffix it had, and will use the same type again when it is serialized.\n\nBefore serializing, Quantity will be put in \"canonical form\". This means that Exponent/suffix will be adjusted up or down (with a corresponding increase or decrease in Mantissa) such that:\n a. No precision is lost\n b. No fractional digits will be emitted\n c. The exponent (or suffix) is as large as possible.\nThe sign will be omitted unless the number is negative.\n\nExamples:\n 1.5 will be serialized as \"1500m\"\n 1.5Gi will be serialized as \"1536Mi\"\n\nNote that the quantity will NEVER be internally represented by a floating point number. That is the whole point of this exercise.\n\nNon-canonical values will still parse as long as they are well formed, but will be re-emitted in their canonical form. (So always use canonical form, or don't diff.)\n\nThis format is intended to make it difficult to use these numbers without writing some sort of special handling code in the hopes that that will cause implementors to also use a fixed point implementation.", + "type": "string" + }, + "io.k8s.apimachinery.pkg.apis.meta.v1.APIGroup": { + "description": "APIGroup contains the name, the supported versions, and the preferred version of a group.", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "name": { + "description": "name is the name of the group.", + "type": "string" + }, + "preferredVersion": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.GroupVersionForDiscovery", + "description": "preferredVersion is the version preferred by the API server, which probably is the storage version." + }, + "serverAddressByClientCIDRs": { + "description": "a map of client CIDR to server address that is serving this group. This is to help clients reach servers in the most network-efficient way possible. Clients can use the appropriate server address as per the CIDR that they match. In case of multiple matches, clients should use the longest matching CIDR. The server returns only those CIDRs that it thinks that the client can match. For example: the master will return an internal IP CIDR only, if the client reaches the server using an internal IP. Server looks at X-Forwarded-For header or X-Real-Ip header or request.RemoteAddr (in that order) to get the client IP.", + "items": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ServerAddressByClientCIDR" + }, + "type": "array" + }, + "versions": { + "description": "versions are the versions supported in this group.", + "items": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.GroupVersionForDiscovery" + }, + "type": "array" + } + }, + "required": [ + "name", + "versions" + ], + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "", + "kind": "APIGroup", + "version": "v1" + } + ] + }, + "io.k8s.apimachinery.pkg.apis.meta.v1.APIGroupList": { + "description": "APIGroupList is a list of APIGroup, to allow clients to discover the API at /apis.", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "groups": { + "description": "groups is a list of APIGroup.", + "items": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.APIGroup" + }, + "type": "array" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + } + }, + "required": [ + "groups" + ], + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "", + "kind": "APIGroupList", + "version": "v1" + } + ] + }, + "io.k8s.apimachinery.pkg.apis.meta.v1.APIResource": { + "description": "APIResource specifies the name of a resource and whether it is namespaced.", + "properties": { + "categories": { + "description": "categories is a list of the grouped resources this resource belongs to (e.g. 'all')", + "items": { + "type": "string" + }, + "type": "array" + }, + "group": { + "description": "group is the preferred group of the resource. Empty implies the group of the containing resource list. For subresources, this may have a different value, for example: Scale\".", + "type": "string" + }, + "kind": { + "description": "kind is the kind for the resource (e.g. 'Foo' is the kind for a resource 'foo')", + "type": "string" + }, + "name": { + "description": "name is the plural name of the resource.", + "type": "string" + }, + "namespaced": { + "description": "namespaced indicates if a resource is namespaced or not.", + "type": "boolean" + }, + "shortNames": { + "description": "shortNames is a list of suggested short names of the resource.", + "items": { + "type": "string" + }, + "type": "array" + }, + "singularName": { + "description": "singularName is the singular name of the resource. This allows clients to handle plural and singular opaquely. The singularName is more correct for reporting status on a single item and both singular and plural are allowed from the kubectl CLI interface.", + "type": "string" + }, + "storageVersionHash": { + "description": "The hash value of the storage version, the version this resource is converted to when written to the data store. Value must be treated as opaque by clients. Only equality comparison on the value is valid. This is an alpha feature and may change or be removed in the future. The field is populated by the apiserver only if the StorageVersionHash feature gate is enabled. This field will remain optional even if it graduates.", + "type": "string" + }, + "verbs": { + "description": "verbs is a list of supported kube verbs (this includes get, list, watch, create, update, patch, delete, deletecollection, and proxy)", + "items": { + "type": "string" + }, + "type": "array" + }, + "version": { + "description": "version is the preferred version of the resource. Empty implies the version of the containing resource list For subresources, this may have a different value, for example: v1 (while inside a v1beta1 version of the core resource's group)\".", + "type": "string" + } + }, + "required": [ + "name", + "singularName", + "namespaced", + "kind", + "verbs" + ], + "type": "object" + }, + "io.k8s.apimachinery.pkg.apis.meta.v1.APIResourceList": { + "description": "APIResourceList is a list of APIResource, it is used to expose the name of the resources supported in a specific group and version, and if the resource is namespaced.", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "groupVersion": { + "description": "groupVersion is the group and version this APIResourceList is for.", + "type": "string" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "resources": { + "description": "resources contains the name of the resources and if they are namespaced.", + "items": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.APIResource" + }, + "type": "array" + } + }, + "required": [ + "groupVersion", + "resources" + ], + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "", + "kind": "APIResourceList", + "version": "v1" + } + ] + }, + "io.k8s.apimachinery.pkg.apis.meta.v1.APIVersions": { + "description": "APIVersions lists the versions that are available, to allow clients to discover the API at /api, which is the root path of the legacy v1 API.", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "serverAddressByClientCIDRs": { + "description": "a map of client CIDR to server address that is serving this group. This is to help clients reach servers in the most network-efficient way possible. Clients can use the appropriate server address as per the CIDR that they match. In case of multiple matches, clients should use the longest matching CIDR. The server returns only those CIDRs that it thinks that the client can match. For example: the master will return an internal IP CIDR only, if the client reaches the server using an internal IP. Server looks at X-Forwarded-For header or X-Real-Ip header or request.RemoteAddr (in that order) to get the client IP.", + "items": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ServerAddressByClientCIDR" + }, + "type": "array" + }, + "versions": { + "description": "versions are the api versions that are available.", + "items": { + "type": "string" + }, + "type": "array" + } + }, + "required": [ + "versions", + "serverAddressByClientCIDRs" + ], + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "", + "kind": "APIVersions", + "version": "v1" + } + ] + }, + "io.k8s.apimachinery.pkg.apis.meta.v1.Condition": { + "description": "Condition contains details for one aspect of the current state of this API Resource.", + "properties": { + "lastTransitionTime": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time", + "description": "lastTransitionTime is the last time the condition transitioned from one status to another. This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable." + }, + "message": { + "description": "message is a human readable message indicating details about the transition. This may be an empty string.", + "type": "string" + }, + "observedGeneration": { + "description": "observedGeneration represents the .metadata.generation that the condition was set based upon. For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date with respect to the current state of the instance.", + "format": "int64", + "type": "integer" + }, + "reason": { + "description": "reason contains a programmatic identifier indicating the reason for the condition's last transition. Producers of specific condition types may define expected values and meanings for this field, and whether the values are considered a guaranteed API. The value should be a CamelCase string. This field may not be empty.", + "type": "string" + }, + "status": { + "description": "status of the condition, one of True, False, Unknown.", + "type": "string" + }, + "type": { + "description": "type of condition in CamelCase or in foo.example.com/CamelCase.", + "type": "string" + } + }, + "required": [ + "type", + "status", + "lastTransitionTime", + "reason", + "message" + ], + "type": "object" + }, + "io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions": { + "description": "DeleteOptions may be provided when deleting an API object.", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "dryRun": { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "items": { + "type": "string" + }, + "type": "array" + }, + "gracePeriodSeconds": { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "format": "int64", + "type": "integer" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "orphanDependents": { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "type": "boolean" + }, + "preconditions": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Preconditions", + "description": "Must be fulfilled before a deletion is carried out. If not possible, a 409 Conflict status will be returned." + }, + "propagationPolicy": { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "type": "string" + } + }, + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "", + "kind": "DeleteOptions", + "version": "v1" + }, + { + "group": "admission.k8s.io", + "kind": "DeleteOptions", + "version": "v1" + }, + { + "group": "admission.k8s.io", + "kind": "DeleteOptions", + "version": "v1beta1" + }, + { + "group": "admissionregistration.k8s.io", + "kind": "DeleteOptions", + "version": "v1" + }, + { + "group": "admissionregistration.k8s.io", + "kind": "DeleteOptions", + "version": "v1beta1" + }, + { + "group": "apiextensions.k8s.io", + "kind": "DeleteOptions", + "version": "v1" + }, + { + "group": "apiextensions.k8s.io", + "kind": "DeleteOptions", + "version": "v1beta1" + }, + { + "group": "apiregistration.k8s.io", + "kind": "DeleteOptions", + "version": "v1" + }, + { + "group": "apiregistration.k8s.io", + "kind": "DeleteOptions", + "version": "v1beta1" + }, + { + "group": "apps", + "kind": "DeleteOptions", + "version": "v1" + }, + { + "group": "apps", + "kind": "DeleteOptions", + "version": "v1beta1" + }, + { + "group": "apps", + "kind": "DeleteOptions", + "version": "v1beta2" + }, + { + "group": "authentication.k8s.io", + "kind": "DeleteOptions", + "version": "v1" + }, + { + "group": "authentication.k8s.io", + "kind": "DeleteOptions", + "version": "v1beta1" + }, + { + "group": "authorization.k8s.io", + "kind": "DeleteOptions", + "version": "v1" + }, + { + "group": "authorization.k8s.io", + "kind": "DeleteOptions", + "version": "v1beta1" + }, + { + "group": "autoscaling", + "kind": "DeleteOptions", + "version": "v1" + }, + { + "group": "autoscaling", + "kind": "DeleteOptions", + "version": "v2beta1" + }, + { + "group": "autoscaling", + "kind": "DeleteOptions", + "version": "v2beta2" + }, + { + "group": "batch", + "kind": "DeleteOptions", + "version": "v1" + }, + { + "group": "batch", + "kind": "DeleteOptions", + "version": "v1beta1" + }, + { + "group": "certificates.k8s.io", + "kind": "DeleteOptions", + "version": "v1" + }, + { + "group": "certificates.k8s.io", + "kind": "DeleteOptions", + "version": "v1beta1" + }, + { + "group": "coordination.k8s.io", + "kind": "DeleteOptions", + "version": "v1" + }, + { + "group": "coordination.k8s.io", + "kind": "DeleteOptions", + "version": "v1beta1" + }, + { + "group": "discovery.k8s.io", + "kind": "DeleteOptions", + "version": "v1" + }, + { + "group": "discovery.k8s.io", + "kind": "DeleteOptions", + "version": "v1beta1" + }, + { + "group": "events.k8s.io", + "kind": "DeleteOptions", + "version": "v1" + }, + { + "group": "events.k8s.io", + "kind": "DeleteOptions", + "version": "v1beta1" + }, + { + "group": "extensions", + "kind": "DeleteOptions", + "version": "v1beta1" + }, + { + "group": "flowcontrol.apiserver.k8s.io", + "kind": "DeleteOptions", + "version": "v1alpha1" + }, + { + "group": "flowcontrol.apiserver.k8s.io", + "kind": "DeleteOptions", + "version": "v1beta1" + }, + { + "group": "imagepolicy.k8s.io", + "kind": "DeleteOptions", + "version": "v1alpha1" + }, + { + "group": "internal.apiserver.k8s.io", + "kind": "DeleteOptions", + "version": "v1alpha1" + }, + { + "group": "networking.k8s.io", + "kind": "DeleteOptions", + "version": "v1" + }, + { + "group": "networking.k8s.io", + "kind": "DeleteOptions", + "version": "v1beta1" + }, + { + "group": "node.k8s.io", + "kind": "DeleteOptions", + "version": "v1" + }, + { + "group": "node.k8s.io", + "kind": "DeleteOptions", + "version": "v1alpha1" + }, + { + "group": "node.k8s.io", + "kind": "DeleteOptions", + "version": "v1beta1" + }, + { + "group": "policy", + "kind": "DeleteOptions", + "version": "v1" + }, + { + "group": "policy", + "kind": "DeleteOptions", + "version": "v1beta1" + }, + { + "group": "rbac.authorization.k8s.io", + "kind": "DeleteOptions", + "version": "v1" + }, + { + "group": "rbac.authorization.k8s.io", + "kind": "DeleteOptions", + "version": "v1alpha1" + }, + { + "group": "rbac.authorization.k8s.io", + "kind": "DeleteOptions", + "version": "v1beta1" + }, + { + "group": "scheduling.k8s.io", + "kind": "DeleteOptions", + "version": "v1" + }, + { + "group": "scheduling.k8s.io", + "kind": "DeleteOptions", + "version": "v1alpha1" + }, + { + "group": "scheduling.k8s.io", + "kind": "DeleteOptions", + "version": "v1beta1" + }, + { + "group": "storage.k8s.io", + "kind": "DeleteOptions", + "version": "v1" + }, + { + "group": "storage.k8s.io", + "kind": "DeleteOptions", + "version": "v1alpha1" + }, + { + "group": "storage.k8s.io", + "kind": "DeleteOptions", + "version": "v1beta1" + } + ] + }, + "io.k8s.apimachinery.pkg.apis.meta.v1.FieldsV1": { + "description": "FieldsV1 stores a set of fields in a data structure like a Trie, in JSON format.\n\nEach key is either a '.' representing the field itself, and will always map to an empty set, or a string representing a sub-field or item. The string will follow one of these four formats: 'f:\u003cname\u003e', where \u003cname\u003e is the name of a field in a struct, or key in a map 'v:\u003cvalue\u003e', where \u003cvalue\u003e is the exact json formatted value of a list item 'i:\u003cindex\u003e', where \u003cindex\u003e is position of a item in a list 'k:\u003ckeys\u003e', where \u003ckeys\u003e is a map of a list item's key fields to their unique values If a key maps to an empty Fields value, the field that key represents is part of the set.\n\nThe exact format is defined in sigs.k8s.io/structured-merge-diff", + "type": "object" + }, + "io.k8s.apimachinery.pkg.apis.meta.v1.GroupVersionForDiscovery": { + "description": "GroupVersion contains the \"group/version\" and \"version\" string of a version. It is made a struct to keep extensibility.", + "properties": { + "groupVersion": { + "description": "groupVersion specifies the API group and version in the form \"group/version\"", + "type": "string" + }, + "version": { + "description": "version specifies the version in the form of \"version\". This is to save the clients the trouble of splitting the GroupVersion.", + "type": "string" + } + }, + "required": [ + "groupVersion", + "version" + ], + "type": "object" + }, + "io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector": { + "description": "A label selector is a label query over a set of resources. The result of matchLabels and matchExpressions are ANDed. An empty label selector matches all objects. A null label selector matches no objects.", + "properties": { + "matchExpressions": { + "description": "matchExpressions is a list of label selector requirements. The requirements are ANDed.", + "items": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelectorRequirement" + }, + "type": "array" + }, + "matchLabels": { + "additionalProperties": { + "type": "string" + }, + "description": "matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is \"key\", the operator is \"In\", and the values array contains only \"value\". The requirements are ANDed.", + "type": "object" + } + }, + "type": "object", + "x-kubernetes-map-type": "atomic" + }, + "io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelectorRequirement": { + "description": "A label selector requirement is a selector that contains values, a key, and an operator that relates the key and values.", + "properties": { + "key": { + "description": "key is the label key that the selector applies to.", + "type": "string", + "x-kubernetes-patch-merge-key": "key", + "x-kubernetes-patch-strategy": "merge" + }, + "operator": { + "description": "operator represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist.", + "type": "string" + }, + "values": { + "description": "values is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch.", + "items": { + "type": "string" + }, + "type": "array" + } + }, + "required": [ + "key", + "operator" + ], + "type": "object" + }, + "io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta": { + "description": "ListMeta describes metadata that synthetic resources must have, including lists and various status objects. A resource may have only one of {ObjectMeta, ListMeta}.", + "properties": { + "continue": { + "description": "continue may be set if the user set a limit on the number of items returned, and indicates that the server has more data available. The value is opaque and may be used to issue another request to the endpoint that served this list to retrieve the next set of available objects. Continuing a consistent list may not be possible if the server configuration has changed or more than a few minutes have passed. The resourceVersion field returned when using this continue value will be identical to the value in the first response, unless you have received this token from an error message.", + "type": "string" + }, + "remainingItemCount": { + "description": "remainingItemCount is the number of subsequent items in the list which are not included in this list response. If the list request contained label or field selectors, then the number of remaining items is unknown and the field will be left unset and omitted during serialization. If the list is complete (either because it is not chunking or because this is the last chunk), then there are no more remaining items and this field will be left unset and omitted during serialization. Servers older than v1.15 do not set this field. The intended use of the remainingItemCount is *estimating* the size of a collection. Clients should not rely on the remainingItemCount to be set or to be exact.", + "format": "int64", + "type": "integer" + }, + "resourceVersion": { + "description": "String that identifies the server's internal version of this object that can be used by clients to determine when objects have changed. Value must be treated as opaque by clients and passed unmodified back to the server. Populated by the system. Read-only. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency", + "type": "string" + }, + "selfLink": { + "description": "selfLink is a URL representing this object. Populated by the system. Read-only.\n\nDEPRECATED Kubernetes will stop propagating this field in 1.20 release and the field is planned to be removed in 1.21 release.", + "type": "string" + } + }, + "type": "object" + }, + "io.k8s.apimachinery.pkg.apis.meta.v1.ManagedFieldsEntry": { + "description": "ManagedFieldsEntry is a workflow-id, a FieldSet and the group version of the resource that the fieldset applies to.", + "properties": { + "apiVersion": { + "description": "APIVersion defines the version of this resource that this field set applies to. The format is \"group/version\" just like the top-level APIVersion field. It is necessary to track the version of a field set because it cannot be automatically converted.", + "type": "string" + }, + "fieldsType": { + "description": "FieldsType is the discriminator for the different fields format and version. There is currently only one possible value: \"FieldsV1\"", + "type": "string" + }, + "fieldsV1": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.FieldsV1", + "description": "FieldsV1 holds the first JSON version format as described in the \"FieldsV1\" type." + }, + "manager": { + "description": "Manager is an identifier of the workflow managing these fields.", + "type": "string" + }, + "operation": { + "description": "Operation is the type of operation which lead to this ManagedFieldsEntry being created. The only valid values for this field are 'Apply' and 'Update'.", + "type": "string" + }, + "time": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time", + "description": "Time is timestamp of when these fields were set. It should always be empty if Operation is 'Apply'" + } + }, + "type": "object" + }, + "io.k8s.apimachinery.pkg.apis.meta.v1.MicroTime": { + "description": "MicroTime is version of Time with microsecond level precision.", + "format": "date-time", + "type": "string" + }, + "io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta": { + "description": "ObjectMeta is metadata that all persisted resources must have, which includes all objects users must create.", + "properties": { + "annotations": { + "additionalProperties": { + "type": "string" + }, + "description": "Annotations is an unstructured key value map stored with a resource that may be set by external tools to store and retrieve arbitrary metadata. They are not queryable and should be preserved when modifying objects. More info: http://kubernetes.io/docs/user-guide/annotations", + "type": "object" + }, + "clusterName": { + "description": "The name of the cluster which the object belongs to. This is used to distinguish resources with same name and namespace in different clusters. This field is not set anywhere right now and apiserver is going to ignore it if set in create or update request.", + "type": "string" + }, + "creationTimestamp": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time", + "description": "CreationTimestamp is a timestamp representing the server time when this object was created. It is not guaranteed to be set in happens-before order across separate operations. Clients may not set this value. It is represented in RFC3339 form and is in UTC.\n\nPopulated by the system. Read-only. Null for lists. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata" + }, + "deletionGracePeriodSeconds": { + "description": "Number of seconds allowed for this object to gracefully terminate before it will be removed from the system. Only set when deletionTimestamp is also set. May only be shortened. Read-only.", + "format": "int64", + "type": "integer" + }, + "deletionTimestamp": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time", + "description": "DeletionTimestamp is RFC 3339 date and time at which this resource will be deleted. This field is set by the server when a graceful deletion is requested by the user, and is not directly settable by a client. The resource is expected to be deleted (no longer visible from resource lists, and not reachable by name) after the time in this field, once the finalizers list is empty. As long as the finalizers list contains items, deletion is blocked. Once the deletionTimestamp is set, this value may not be unset or be set further into the future, although it may be shortened or the resource may be deleted prior to this time. For example, a user may request that a pod is deleted in 30 seconds. The Kubelet will react by sending a graceful termination signal to the containers in the pod. After that 30 seconds, the Kubelet will send a hard termination signal (SIGKILL) to the container and after cleanup, remove the pod from the API. In the presence of network partitions, this object may still exist after this timestamp, until an administrator or automated process can determine the resource is fully terminated. If not set, graceful deletion of the object has not been requested.\n\nPopulated by the system when a graceful deletion is requested. Read-only. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata" + }, + "finalizers": { + "description": "Must be empty before the object is deleted from the registry. Each entry is an identifier for the responsible component that will remove the entry from the list. If the deletionTimestamp of the object is non-nil, entries in this list can only be removed. Finalizers may be processed and removed in any order. Order is NOT enforced because it introduces significant risk of stuck finalizers. finalizers is a shared field, any actor with permission can reorder it. If the finalizer list is processed in order, then this can lead to a situation in which the component responsible for the first finalizer in the list is waiting for a signal (field value, external system, or other) produced by a component responsible for a finalizer later in the list, resulting in a deadlock. Without enforced ordering finalizers are free to order amongst themselves and are not vulnerable to ordering changes in the list.", + "items": { + "type": "string" + }, + "type": "array", + "x-kubernetes-patch-strategy": "merge" + }, + "generateName": { + "description": "GenerateName is an optional prefix, used by the server, to generate a unique name ONLY IF the Name field has not been provided. If this field is used, the name returned to the client will be different than the name passed. This value will also be combined with a unique suffix. The provided value has the same validation rules as the Name field, and may be truncated by the length of the suffix required to make the value unique on the server.\n\nIf this field is specified and the generated name exists, the server will NOT return a 409 - instead, it will either return 201 Created or 500 with Reason ServerTimeout indicating a unique name could not be found in the time allotted, and the client should retry (optionally after the time indicated in the Retry-After header).\n\nApplied only if Name is not specified. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#idempotency", + "type": "string" + }, + "generation": { + "description": "A sequence number representing a specific generation of the desired state. Populated by the system. Read-only.", + "format": "int64", + "type": "integer" + }, + "labels": { + "additionalProperties": { + "type": "string" + }, + "description": "Map of string keys and values that can be used to organize and categorize (scope and select) objects. May match selectors of replication controllers and services. More info: http://kubernetes.io/docs/user-guide/labels", + "type": "object" + }, + "managedFields": { + "description": "ManagedFields maps workflow-id and version to the set of fields that are managed by that workflow. This is mostly for internal housekeeping, and users typically shouldn't need to set or understand this field. A workflow can be the user's name, a controller's name, or the name of a specific apply path like \"ci-cd\". The set of fields is always in the version that the workflow used when modifying the object.", + "items": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ManagedFieldsEntry" + }, + "type": "array" + }, + "name": { + "description": "Name must be unique within a namespace. Is required when creating resources, although some resources may allow a client to request the generation of an appropriate name automatically. Name is primarily intended for creation idempotence and configuration definition. Cannot be updated. More info: http://kubernetes.io/docs/user-guide/identifiers#names", + "type": "string" + }, + "namespace": { + "description": "Namespace defines the space within which each name must be unique. An empty namespace is equivalent to the \"default\" namespace, but \"default\" is the canonical representation. Not all objects are required to be scoped to a namespace - the value of this field for those objects will be empty.\n\nMust be a DNS_LABEL. Cannot be updated. More info: http://kubernetes.io/docs/user-guide/namespaces", + "type": "string" + }, + "ownerReferences": { + "description": "List of objects depended by this object. If ALL objects in the list have been deleted, this object will be garbage collected. If this object is managed by a controller, then an entry in this list will point to this controller, with the controller field set to true. There cannot be more than one managing controller.", + "items": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.OwnerReference" + }, + "type": "array", + "x-kubernetes-patch-merge-key": "uid", + "x-kubernetes-patch-strategy": "merge" + }, + "resourceVersion": { + "description": "An opaque value that represents the internal version of this object that can be used by clients to determine when objects have changed. May be used for optimistic concurrency, change detection, and the watch operation on a resource or set of resources. Clients must treat these values as opaque and passed unmodified back to the server. They may only be valid for a particular resource or set of resources.\n\nPopulated by the system. Read-only. Value must be treated as opaque by clients and . More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency", + "type": "string" + }, + "selfLink": { + "description": "SelfLink is a URL representing this object. Populated by the system. Read-only.\n\nDEPRECATED Kubernetes will stop propagating this field in 1.20 release and the field is planned to be removed in 1.21 release.", + "type": "string" + }, + "uid": { + "description": "UID is the unique in time and space value for this object. It is typically generated by the server on successful creation of a resource and is not allowed to change on PUT operations.\n\nPopulated by the system. Read-only. More info: http://kubernetes.io/docs/user-guide/identifiers#uids", + "type": "string" + } + }, + "type": "object" + }, + "io.k8s.apimachinery.pkg.apis.meta.v1.OwnerReference": { + "description": "OwnerReference contains enough information to let you identify an owning object. An owning object must be in the same namespace as the dependent, or be cluster-scoped, so there is no namespace field.", + "properties": { + "apiVersion": { + "description": "API version of the referent.", + "type": "string" + }, + "blockOwnerDeletion": { + "description": "If true, AND if the owner has the \"foregroundDeletion\" finalizer, then the owner cannot be deleted from the key-value store until this reference is removed. Defaults to false. To set this field, a user needs \"delete\" permission of the owner, otherwise 422 (Unprocessable Entity) will be returned.", + "type": "boolean" + }, + "controller": { + "description": "If true, this reference points to the managing controller.", + "type": "boolean" + }, + "kind": { + "description": "Kind of the referent. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "name": { + "description": "Name of the referent. More info: http://kubernetes.io/docs/user-guide/identifiers#names", + "type": "string" + }, + "uid": { + "description": "UID of the referent. More info: http://kubernetes.io/docs/user-guide/identifiers#uids", + "type": "string" + } + }, + "required": [ + "apiVersion", + "kind", + "name", + "uid" + ], + "type": "object" + }, + "io.k8s.apimachinery.pkg.apis.meta.v1.Patch": { + "description": "Patch is provided to give a concrete name and type to the Kubernetes PATCH request body.", + "type": "object" + }, + "io.k8s.apimachinery.pkg.apis.meta.v1.Preconditions": { + "description": "Preconditions must be fulfilled before an operation (update, delete, etc.) is carried out.", + "properties": { + "resourceVersion": { + "description": "Specifies the target ResourceVersion", + "type": "string" + }, + "uid": { + "description": "Specifies the target UID.", + "type": "string" + } + }, + "type": "object" + }, + "io.k8s.apimachinery.pkg.apis.meta.v1.ServerAddressByClientCIDR": { + "description": "ServerAddressByClientCIDR helps the client to determine the server address that they should use, depending on the clientCIDR that they match.", + "properties": { + "clientCIDR": { + "description": "The CIDR with which clients can match their IP to figure out the server address that they should use.", + "type": "string" + }, + "serverAddress": { + "description": "Address of this server, suitable for a client that matches the above CIDR. This can be a hostname, hostname:port, IP or IP:port.", + "type": "string" + } + }, + "required": [ + "clientCIDR", + "serverAddress" + ], + "type": "object" + }, + "io.k8s.apimachinery.pkg.apis.meta.v1.Status": { + "description": "Status is a return value for calls that don't return other objects.", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "code": { + "description": "Suggested HTTP return code for this status, 0 if not set.", + "format": "int32", + "type": "integer" + }, + "details": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.StatusDetails", + "description": "Extended data associated with the reason. Each reason may define its own extended details. This field is optional and the data returned is not guaranteed to conform to any schema except that defined by the reason type." + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "message": { + "description": "A human-readable description of the status of this operation.", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta", + "description": "Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds" + }, + "reason": { + "description": "A machine-readable description of why this operation is in the \"Failure\" status. If this value is empty there is no information available. A Reason clarifies an HTTP status code but does not override it.", + "type": "string" + }, + "status": { + "description": "Status of the operation. One of: \"Success\" or \"Failure\". More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status", + "type": "string" + } + }, + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "", + "kind": "Status", + "version": "v1" + } + ] + }, + "io.k8s.apimachinery.pkg.apis.meta.v1.StatusCause": { + "description": "StatusCause provides more information about an api.Status failure, including cases when multiple errors are encountered.", + "properties": { + "field": { + "description": "The field of the resource that has caused this error, as named by its JSON serialization. May include dot and postfix notation for nested attributes. Arrays are zero-indexed. Fields may appear more than once in an array of causes due to fields having multiple errors. Optional.\n\nExamples:\n \"name\" - the field \"name\" on the current resource\n \"items[0].name\" - the field \"name\" on the first array entry in \"items\"", + "type": "string" + }, + "message": { + "description": "A human-readable description of the cause of the error. This field may be presented as-is to a reader.", + "type": "string" + }, + "reason": { + "description": "A machine-readable description of the cause of the error. If this value is empty there is no information available.", + "type": "string" + } + }, + "type": "object" + }, + "io.k8s.apimachinery.pkg.apis.meta.v1.StatusDetails": { + "description": "StatusDetails is a set of additional properties that MAY be set by the server to provide additional information about a response. The Reason field of a Status object defines what attributes will be set. Clients must ignore fields that do not match the defined type of each attribute, and should assume that any attribute may be empty, invalid, or under defined.", + "properties": { + "causes": { + "description": "The Causes array includes more details associated with the StatusReason failure. Not all StatusReasons may provide detailed causes.", + "items": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.StatusCause" + }, + "type": "array" + }, + "group": { + "description": "The group attribute of the resource associated with the status StatusReason.", + "type": "string" + }, + "kind": { + "description": "The kind attribute of the resource associated with the status StatusReason. On some operations may differ from the requested resource Kind. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "name": { + "description": "The name attribute of the resource associated with the status StatusReason (when there is a single name which can be described).", + "type": "string" + }, + "retryAfterSeconds": { + "description": "If specified, the time in seconds before the operation should be retried. Some errors may indicate the client must take an alternate action - for those errors this field may indicate how long to wait before taking the alternate action.", + "format": "int32", + "type": "integer" + }, + "uid": { + "description": "UID of the resource. (when there is a single resource which can be described). More info: http://kubernetes.io/docs/user-guide/identifiers#uids", + "type": "string" + } + }, + "type": "object" + }, + "io.k8s.apimachinery.pkg.apis.meta.v1.Time": { + "description": "Time is a wrapper around time.Time which supports correct marshaling to YAML and JSON. Wrappers are provided for many of the factory methods that the time package offers.", + "format": "date-time", + "type": "string" + }, + "io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent": { + "description": "Event represents a single event to a watched resource.", + "properties": { + "object": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension", + "description": "Object is:\n * If Type is Added or Modified: the new state of the object.\n * If Type is Deleted: the state of the object immediately before deletion.\n * If Type is Error: *Status is recommended; other types may make sense\n depending on context." + }, + "type": { + "type": "string" + } + }, + "required": [ + "type", + "object" + ], + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "", + "kind": "WatchEvent", + "version": "v1" + }, + { + "group": "admission.k8s.io", + "kind": "WatchEvent", + "version": "v1" + }, + { + "group": "admission.k8s.io", + "kind": "WatchEvent", + "version": "v1beta1" + }, + { + "group": "admissionregistration.k8s.io", + "kind": "WatchEvent", + "version": "v1" + }, + { + "group": "admissionregistration.k8s.io", + "kind": "WatchEvent", + "version": "v1beta1" + }, + { + "group": "apiextensions.k8s.io", + "kind": "WatchEvent", + "version": "v1" + }, + { + "group": "apiextensions.k8s.io", + "kind": "WatchEvent", + "version": "v1beta1" + }, + { + "group": "apiregistration.k8s.io", + "kind": "WatchEvent", + "version": "v1" + }, + { + "group": "apiregistration.k8s.io", + "kind": "WatchEvent", + "version": "v1beta1" + }, + { + "group": "apps", + "kind": "WatchEvent", + "version": "v1" + }, + { + "group": "apps", + "kind": "WatchEvent", + "version": "v1beta1" + }, + { + "group": "apps", + "kind": "WatchEvent", + "version": "v1beta2" + }, + { + "group": "authentication.k8s.io", + "kind": "WatchEvent", + "version": "v1" + }, + { + "group": "authentication.k8s.io", + "kind": "WatchEvent", + "version": "v1beta1" + }, + { + "group": "authorization.k8s.io", + "kind": "WatchEvent", + "version": "v1" + }, + { + "group": "authorization.k8s.io", + "kind": "WatchEvent", + "version": "v1beta1" + }, + { + "group": "autoscaling", + "kind": "WatchEvent", + "version": "v1" + }, + { + "group": "autoscaling", + "kind": "WatchEvent", + "version": "v2beta1" + }, + { + "group": "autoscaling", + "kind": "WatchEvent", + "version": "v2beta2" + }, + { + "group": "batch", + "kind": "WatchEvent", + "version": "v1" + }, + { + "group": "batch", + "kind": "WatchEvent", + "version": "v1beta1" + }, + { + "group": "certificates.k8s.io", + "kind": "WatchEvent", + "version": "v1" + }, + { + "group": "certificates.k8s.io", + "kind": "WatchEvent", + "version": "v1beta1" + }, + { + "group": "coordination.k8s.io", + "kind": "WatchEvent", + "version": "v1" + }, + { + "group": "coordination.k8s.io", + "kind": "WatchEvent", + "version": "v1beta1" + }, + { + "group": "discovery.k8s.io", + "kind": "WatchEvent", + "version": "v1" + }, + { + "group": "discovery.k8s.io", + "kind": "WatchEvent", + "version": "v1beta1" + }, + { + "group": "events.k8s.io", + "kind": "WatchEvent", + "version": "v1" + }, + { + "group": "events.k8s.io", + "kind": "WatchEvent", + "version": "v1beta1" + }, + { + "group": "extensions", + "kind": "WatchEvent", + "version": "v1beta1" + }, + { + "group": "flowcontrol.apiserver.k8s.io", + "kind": "WatchEvent", + "version": "v1alpha1" + }, + { + "group": "flowcontrol.apiserver.k8s.io", + "kind": "WatchEvent", + "version": "v1beta1" + }, + { + "group": "imagepolicy.k8s.io", + "kind": "WatchEvent", + "version": "v1alpha1" + }, + { + "group": "internal.apiserver.k8s.io", + "kind": "WatchEvent", + "version": "v1alpha1" + }, + { + "group": "networking.k8s.io", + "kind": "WatchEvent", + "version": "v1" + }, + { + "group": "networking.k8s.io", + "kind": "WatchEvent", + "version": "v1beta1" + }, + { + "group": "node.k8s.io", + "kind": "WatchEvent", + "version": "v1" + }, + { + "group": "node.k8s.io", + "kind": "WatchEvent", + "version": "v1alpha1" + }, + { + "group": "node.k8s.io", + "kind": "WatchEvent", + "version": "v1beta1" + }, + { + "group": "policy", + "kind": "WatchEvent", + "version": "v1" + }, + { + "group": "policy", + "kind": "WatchEvent", + "version": "v1beta1" + }, + { + "group": "rbac.authorization.k8s.io", + "kind": "WatchEvent", + "version": "v1" + }, + { + "group": "rbac.authorization.k8s.io", + "kind": "WatchEvent", + "version": "v1alpha1" + }, + { + "group": "rbac.authorization.k8s.io", + "kind": "WatchEvent", + "version": "v1beta1" + }, + { + "group": "scheduling.k8s.io", + "kind": "WatchEvent", + "version": "v1" + }, + { + "group": "scheduling.k8s.io", + "kind": "WatchEvent", + "version": "v1alpha1" + }, + { + "group": "scheduling.k8s.io", + "kind": "WatchEvent", + "version": "v1beta1" + }, + { + "group": "storage.k8s.io", + "kind": "WatchEvent", + "version": "v1" + }, + { + "group": "storage.k8s.io", + "kind": "WatchEvent", + "version": "v1alpha1" + }, + { + "group": "storage.k8s.io", + "kind": "WatchEvent", + "version": "v1beta1" + } + ] + }, + "io.k8s.apimachinery.pkg.runtime.RawExtension": { + "description": "RawExtension is used to hold extensions in external versions.\n\nTo use this, make a field which has RawExtension as its type in your external, versioned struct, and Object in your internal struct. You also need to register your various plugin types.\n\n// Internal package: type MyAPIObject struct {\n\truntime.TypeMeta `json:\",inline\"`\n\tMyPlugin runtime.Object `json:\"myPlugin\"`\n} type PluginA struct {\n\tAOption string `json:\"aOption\"`\n}\n\n// External package: type MyAPIObject struct {\n\truntime.TypeMeta `json:\",inline\"`\n\tMyPlugin runtime.RawExtension `json:\"myPlugin\"`\n} type PluginA struct {\n\tAOption string `json:\"aOption\"`\n}\n\n// On the wire, the JSON will look something like this: {\n\t\"kind\":\"MyAPIObject\",\n\t\"apiVersion\":\"v1\",\n\t\"myPlugin\": {\n\t\t\"kind\":\"PluginA\",\n\t\t\"aOption\":\"foo\",\n\t},\n}\n\nSo what happens? Decode first uses json or yaml to unmarshal the serialized data into your external MyAPIObject. That causes the raw JSON to be stored, but not unpacked. The next step is to copy (using pkg/conversion) into the internal struct. The runtime package's DefaultScheme has conversion functions installed which will unpack the JSON stored in RawExtension, turning it into the correct object type, and storing it in the Object. (TODO: In the case where the object is of an unknown type, a runtime.Unknown object will be created and stored.)", + "type": "object" + }, + "io.k8s.apimachinery.pkg.util.intstr.IntOrString": { + "description": "IntOrString is a type that can hold an int32 or a string. When used in JSON or YAML marshalling and unmarshalling, it produces or consumes the inner type. This allows you to have, for example, a JSON field that can accept a name or number.", + "format": "int-or-string", + "type": "string" + }, + "io.k8s.apimachinery.pkg.version.Info": { + "description": "Info contains versioning information. how we'll want to distribute that information.", + "properties": { + "buildDate": { + "type": "string" + }, + "compiler": { + "type": "string" + }, + "gitCommit": { + "type": "string" + }, + "gitTreeState": { + "type": "string" + }, + "gitVersion": { + "type": "string" + }, + "goVersion": { + "type": "string" + }, + "major": { + "type": "string" + }, + "minor": { + "type": "string" + }, + "platform": { + "type": "string" + } + }, + "required": [ + "major", + "minor", + "gitVersion", + "gitCommit", + "gitTreeState", + "buildDate", + "goVersion", + "compiler", + "platform" + ], + "type": "object" + }, + "io.k8s.kube-aggregator.pkg.apis.apiregistration.v1.APIService": { + "description": "APIService represents a server for a particular GroupVersion. Name must be \"version.group\".", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + }, + "spec": { + "$ref": "#/definitions/io.k8s.kube-aggregator.pkg.apis.apiregistration.v1.APIServiceSpec", + "description": "Spec contains information for locating and communicating with a server" + }, + "status": { + "$ref": "#/definitions/io.k8s.kube-aggregator.pkg.apis.apiregistration.v1.APIServiceStatus", + "description": "Status contains derived information about an API server" + } + }, + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "apiregistration.k8s.io", + "kind": "APIService", + "version": "v1" + } + ] + }, + "io.k8s.kube-aggregator.pkg.apis.apiregistration.v1.APIServiceCondition": { + "description": "APIServiceCondition describes the state of an APIService at a particular point", + "properties": { + "lastTransitionTime": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time", + "description": "Last time the condition transitioned from one status to another." + }, + "message": { + "description": "Human-readable message indicating details about last transition.", + "type": "string" + }, + "reason": { + "description": "Unique, one-word, CamelCase reason for the condition's last transition.", + "type": "string" + }, + "status": { + "description": "Status is the status of the condition. Can be True, False, Unknown.", + "type": "string" + }, + "type": { + "description": "Type is the type of the condition.", + "type": "string" + } + }, + "required": [ + "type", + "status" + ], + "type": "object" + }, + "io.k8s.kube-aggregator.pkg.apis.apiregistration.v1.APIServiceList": { + "description": "APIServiceList is a list of APIService objects.", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "items": { + "items": { + "$ref": "#/definitions/io.k8s.kube-aggregator.pkg.apis.apiregistration.v1.APIService" + }, + "type": "array" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" + } + }, + "required": [ + "items" + ], + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "apiregistration.k8s.io", + "kind": "APIServiceList", + "version": "v1" + } + ] + }, + "io.k8s.kube-aggregator.pkg.apis.apiregistration.v1.APIServiceSpec": { + "description": "APIServiceSpec contains information for locating and communicating with a server. Only https is supported, though you are able to disable certificate verification.", + "properties": { + "caBundle": { + "description": "CABundle is a PEM encoded CA bundle which will be used to validate an API server's serving certificate. If unspecified, system trust roots on the apiserver are used.", + "format": "byte", + "type": "string", + "x-kubernetes-list-type": "atomic" + }, + "group": { + "description": "Group is the API group name this server hosts", + "type": "string" + }, + "groupPriorityMinimum": { + "description": "GroupPriorityMininum is the priority this group should have at least. Higher priority means that the group is preferred by clients over lower priority ones. Note that other versions of this group might specify even higher GroupPriorityMininum values such that the whole group gets a higher priority. The primary sort is based on GroupPriorityMinimum, ordered highest number to lowest (20 before 10). The secondary sort is based on the alphabetical comparison of the name of the object. (v1.bar before v1.foo) We'd recommend something like: *.k8s.io (except extensions) at 18000 and PaaSes (OpenShift, Deis) are recommended to be in the 2000s", + "format": "int32", + "type": "integer" + }, + "insecureSkipTLSVerify": { + "description": "InsecureSkipTLSVerify disables TLS certificate verification when communicating with this server. This is strongly discouraged. You should use the CABundle instead.", + "type": "boolean" + }, + "service": { + "$ref": "#/definitions/io.k8s.kube-aggregator.pkg.apis.apiregistration.v1.ServiceReference", + "description": "Service is a reference to the service for this API server. It must communicate on port 443. If the Service is nil, that means the handling for the API groupversion is handled locally on this server. The call will simply delegate to the normal handler chain to be fulfilled." + }, + "version": { + "description": "Version is the API version this server hosts. For example, \"v1\"", + "type": "string" + }, + "versionPriority": { + "description": "VersionPriority controls the ordering of this API version inside of its group. Must be greater than zero. The primary sort is based on VersionPriority, ordered highest to lowest (20 before 10). Since it's inside of a group, the number can be small, probably in the 10s. In case of equal version priorities, the version string will be used to compute the order inside a group. If the version string is \"kube-like\", it will sort above non \"kube-like\" version strings, which are ordered lexicographically. \"Kube-like\" versions start with a \"v\", then are followed by a number (the major version), then optionally the string \"alpha\" or \"beta\" and another number (the minor version). These are sorted first by GA \u003e beta \u003e alpha (where GA is a version with no suffix such as beta or alpha), and then by comparing major version, then minor version. An example sorted list of versions: v10, v2, v1, v11beta2, v10beta3, v3beta1, v12alpha1, v11alpha2, foo1, foo10.", + "format": "int32", + "type": "integer" + } + }, + "required": [ + "groupPriorityMinimum", + "versionPriority" + ], + "type": "object" + }, + "io.k8s.kube-aggregator.pkg.apis.apiregistration.v1.APIServiceStatus": { + "description": "APIServiceStatus contains derived information about an API server", + "properties": { + "conditions": { + "description": "Current service state of apiService.", + "items": { + "$ref": "#/definitions/io.k8s.kube-aggregator.pkg.apis.apiregistration.v1.APIServiceCondition" + }, + "type": "array", + "x-kubernetes-list-map-keys": [ + "type" + ], + "x-kubernetes-list-type": "map", + "x-kubernetes-patch-merge-key": "type", + "x-kubernetes-patch-strategy": "merge" + } + }, + "type": "object" + }, + "io.k8s.kube-aggregator.pkg.apis.apiregistration.v1.ServiceReference": { + "description": "ServiceReference holds a reference to Service.legacy.k8s.io", + "properties": { + "name": { + "description": "Name is the name of the service", + "type": "string" + }, + "namespace": { + "description": "Namespace is the namespace of the service", + "type": "string" + }, + "port": { + "description": "If specified, the port on the service that hosting webhook. Default to 443 for backward compatibility. `port` should be a valid port number (1-65535, inclusive).", + "format": "int32", + "type": "integer" + } + }, + "type": "object" + }, + "io.k8s.kube-aggregator.pkg.apis.apiregistration.v1beta1.APIService": { + "description": "APIService represents a server for a particular GroupVersion. Name must be \"version.group\".", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + }, + "spec": { + "$ref": "#/definitions/io.k8s.kube-aggregator.pkg.apis.apiregistration.v1beta1.APIServiceSpec", + "description": "Spec contains information for locating and communicating with a server" + }, + "status": { + "$ref": "#/definitions/io.k8s.kube-aggregator.pkg.apis.apiregistration.v1beta1.APIServiceStatus", + "description": "Status contains derived information about an API server" + } + }, + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "apiregistration.k8s.io", + "kind": "APIService", + "version": "v1beta1" + } + ] + }, + "io.k8s.kube-aggregator.pkg.apis.apiregistration.v1beta1.APIServiceCondition": { + "description": "APIServiceCondition describes the state of an APIService at a particular point", + "properties": { + "lastTransitionTime": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time", + "description": "Last time the condition transitioned from one status to another." + }, + "message": { + "description": "Human-readable message indicating details about last transition.", + "type": "string" + }, + "reason": { + "description": "Unique, one-word, CamelCase reason for the condition's last transition.", + "type": "string" + }, + "status": { + "description": "Status is the status of the condition. Can be True, False, Unknown.", + "type": "string" + }, + "type": { + "description": "Type is the type of the condition.", + "type": "string" + } + }, + "required": [ + "type", + "status" + ], + "type": "object" + }, + "io.k8s.kube-aggregator.pkg.apis.apiregistration.v1beta1.APIServiceList": { + "description": "APIServiceList is a list of APIService objects.", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "items": { + "items": { + "$ref": "#/definitions/io.k8s.kube-aggregator.pkg.apis.apiregistration.v1beta1.APIService" + }, + "type": "array" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" + } + }, + "required": [ + "items" + ], + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "apiregistration.k8s.io", + "kind": "APIServiceList", + "version": "v1beta1" + } + ] + }, + "io.k8s.kube-aggregator.pkg.apis.apiregistration.v1beta1.APIServiceSpec": { + "description": "APIServiceSpec contains information for locating and communicating with a server. Only https is supported, though you are able to disable certificate verification.", + "properties": { + "caBundle": { + "description": "CABundle is a PEM encoded CA bundle which will be used to validate an API server's serving certificate. If unspecified, system trust roots on the apiserver are used.", + "format": "byte", + "type": "string", + "x-kubernetes-list-type": "atomic" + }, + "group": { + "description": "Group is the API group name this server hosts", + "type": "string" + }, + "groupPriorityMinimum": { + "description": "GroupPriorityMininum is the priority this group should have at least. Higher priority means that the group is preferred by clients over lower priority ones. Note that other versions of this group might specify even higher GroupPriorityMininum values such that the whole group gets a higher priority. The primary sort is based on GroupPriorityMinimum, ordered highest number to lowest (20 before 10). The secondary sort is based on the alphabetical comparison of the name of the object. (v1.bar before v1.foo) We'd recommend something like: *.k8s.io (except extensions) at 18000 and PaaSes (OpenShift, Deis) are recommended to be in the 2000s", + "format": "int32", + "type": "integer" + }, + "insecureSkipTLSVerify": { + "description": "InsecureSkipTLSVerify disables TLS certificate verification when communicating with this server. This is strongly discouraged. You should use the CABundle instead.", + "type": "boolean" + }, + "service": { + "$ref": "#/definitions/io.k8s.kube-aggregator.pkg.apis.apiregistration.v1beta1.ServiceReference", + "description": "Service is a reference to the service for this API server. It must communicate on port 443. If the Service is nil, that means the handling for the API groupversion is handled locally on this server. The call will simply delegate to the normal handler chain to be fulfilled." + }, + "version": { + "description": "Version is the API version this server hosts. For example, \"v1\"", + "type": "string" + }, + "versionPriority": { + "description": "VersionPriority controls the ordering of this API version inside of its group. Must be greater than zero. The primary sort is based on VersionPriority, ordered highest to lowest (20 before 10). Since it's inside of a group, the number can be small, probably in the 10s. In case of equal version priorities, the version string will be used to compute the order inside a group. If the version string is \"kube-like\", it will sort above non \"kube-like\" version strings, which are ordered lexicographically. \"Kube-like\" versions start with a \"v\", then are followed by a number (the major version), then optionally the string \"alpha\" or \"beta\" and another number (the minor version). These are sorted first by GA \u003e beta \u003e alpha (where GA is a version with no suffix such as beta or alpha), and then by comparing major version, then minor version. An example sorted list of versions: v10, v2, v1, v11beta2, v10beta3, v3beta1, v12alpha1, v11alpha2, foo1, foo10.", + "format": "int32", + "type": "integer" + } + }, + "required": [ + "groupPriorityMinimum", + "versionPriority" + ], + "type": "object" + }, + "io.k8s.kube-aggregator.pkg.apis.apiregistration.v1beta1.APIServiceStatus": { + "description": "APIServiceStatus contains derived information about an API server", + "properties": { + "conditions": { + "description": "Current service state of apiService.", + "items": { + "$ref": "#/definitions/io.k8s.kube-aggregator.pkg.apis.apiregistration.v1beta1.APIServiceCondition" + }, + "type": "array", + "x-kubernetes-list-map-keys": [ + "type" + ], + "x-kubernetes-list-type": "map", + "x-kubernetes-patch-merge-key": "type", + "x-kubernetes-patch-strategy": "merge" + } + }, + "type": "object" + }, + "io.k8s.kube-aggregator.pkg.apis.apiregistration.v1beta1.ServiceReference": { + "description": "ServiceReference holds a reference to Service.legacy.k8s.io", + "properties": { + "name": { + "description": "Name is the name of the service", + "type": "string" + }, + "namespace": { + "description": "Namespace is the namespace of the service", + "type": "string" + }, + "port": { + "description": "If specified, the port on the service that hosting webhook. Default to 443 for backward compatibility. `port` should be a valid port number (1-65535, inclusive).", + "format": "int32", + "type": "integer" + } + }, + "type": "object" + } + }, + "info": { + "title": "Kubernetes", + "version": "v1.21.2" + }, + "paths": { + "/.well-known/openid-configuration/": { + "get": { + "description": "get service account issuer OpenID configuration, also known as the 'OIDC discovery doc'", + "operationId": "getServiceAccountIssuerOpenIDConfiguration", + "produces": [ + "application/json" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "type": "string" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "WellKnown" + ] + } + }, + "/api/": { + "get": { + "consumes": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "description": "get available API versions", + "operationId": "getCoreAPIVersions", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.APIVersions" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core" + ] + } + }, + "/api/v1/": { + "get": { + "consumes": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "description": "get available resources", + "operationId": "getCoreV1APIResources", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.APIResourceList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ] + } + }, + "/api/v1/componentstatuses": { + "get": { + "consumes": [ + "*/*" + ], + "description": "list objects of kind ComponentStatus", + "operationId": "listCoreV1ComponentStatus", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.ComponentStatusList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "list", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "ComponentStatus", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/api/v1/componentstatuses/{name}": { + "get": { + "consumes": [ + "*/*" + ], + "description": "read the specified ComponentStatus", + "operationId": "readCoreV1ComponentStatus", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.ComponentStatus" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "get", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "ComponentStatus", + "version": "v1" + } + }, + "parameters": [ + { + "description": "name of the ComponentStatus", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ] + }, + "/api/v1/configmaps": { + "get": { + "consumes": [ + "*/*" + ], + "description": "list or watch objects of kind ConfigMap", + "operationId": "listCoreV1ConfigMapForAllNamespaces", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.ConfigMapList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "list", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "ConfigMap", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/api/v1/endpoints": { + "get": { + "consumes": [ + "*/*" + ], + "description": "list or watch objects of kind Endpoints", + "operationId": "listCoreV1EndpointsForAllNamespaces", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.EndpointsList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "list", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "Endpoints", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/api/v1/events": { + "get": { + "consumes": [ + "*/*" + ], + "description": "list or watch objects of kind Event", + "operationId": "listCoreV1EventForAllNamespaces", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.EventList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "list", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "Event", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/api/v1/limitranges": { + "get": { + "consumes": [ + "*/*" + ], + "description": "list or watch objects of kind LimitRange", + "operationId": "listCoreV1LimitRangeForAllNamespaces", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.LimitRangeList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "list", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "LimitRange", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/api/v1/namespaces": { + "get": { + "consumes": [ + "*/*" + ], + "description": "list or watch objects of kind Namespace", + "operationId": "listCoreV1Namespace", + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.NamespaceList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "list", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "Namespace", + "version": "v1" + } + }, + "parameters": [ + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "post": { + "consumes": [ + "*/*" + ], + "description": "create a Namespace", + "operationId": "createCoreV1Namespace", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.Namespace" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.Namespace" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.Namespace" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.Namespace" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "post", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "Namespace", + "version": "v1" + } + } + }, + "/api/v1/namespaces/{namespace}/bindings": { + "parameters": [ + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "post": { + "consumes": [ + "*/*" + ], + "description": "create a Binding", + "operationId": "createCoreV1NamespacedBinding", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.Binding" + } + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.Binding" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.Binding" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.Binding" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "post", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "Binding", + "version": "v1" + } + } + }, + "/api/v1/namespaces/{namespace}/configmaps": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete collection of ConfigMap", + "operationId": "deleteCoreV1CollectionNamespacedConfigMap", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "deletecollection", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "ConfigMap", + "version": "v1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "list or watch objects of kind ConfigMap", + "operationId": "listCoreV1NamespacedConfigMap", + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.ConfigMapList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "list", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "ConfigMap", + "version": "v1" + } + }, + "parameters": [ + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "post": { + "consumes": [ + "*/*" + ], + "description": "create a ConfigMap", + "operationId": "createCoreV1NamespacedConfigMap", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.ConfigMap" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.ConfigMap" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.ConfigMap" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.ConfigMap" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "post", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "ConfigMap", + "version": "v1" + } + } + }, + "/api/v1/namespaces/{namespace}/configmaps/{name}": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete a ConfigMap", + "operationId": "deleteCoreV1NamespacedConfigMap", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "delete", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "ConfigMap", + "version": "v1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "read the specified ConfigMap", + "operationId": "readCoreV1NamespacedConfigMap", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.ConfigMap" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "get", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "ConfigMap", + "version": "v1" + } + }, + "parameters": [ + { + "description": "name of the ConfigMap", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "patch": { + "consumes": [ + "application/json-patch+json", + "application/merge-patch+json", + "application/strategic-merge-patch+json", + "application/apply-patch+yaml" + ], + "description": "partially update the specified ConfigMap", + "operationId": "patchCoreV1NamespacedConfigMap", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Patch" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + }, + { + "description": "Force is going to \"force\" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.", + "in": "query", + "name": "force", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.ConfigMap" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "patch", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "ConfigMap", + "version": "v1" + } + }, + "put": { + "consumes": [ + "*/*" + ], + "description": "replace the specified ConfigMap", + "operationId": "replaceCoreV1NamespacedConfigMap", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.ConfigMap" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.ConfigMap" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.ConfigMap" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "put", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "ConfigMap", + "version": "v1" + } + } + }, + "/api/v1/namespaces/{namespace}/endpoints": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete collection of Endpoints", + "operationId": "deleteCoreV1CollectionNamespacedEndpoints", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "deletecollection", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "Endpoints", + "version": "v1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "list or watch objects of kind Endpoints", + "operationId": "listCoreV1NamespacedEndpoints", + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.EndpointsList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "list", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "Endpoints", + "version": "v1" + } + }, + "parameters": [ + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "post": { + "consumes": [ + "*/*" + ], + "description": "create Endpoints", + "operationId": "createCoreV1NamespacedEndpoints", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.Endpoints" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.Endpoints" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.Endpoints" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.Endpoints" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "post", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "Endpoints", + "version": "v1" + } + } + }, + "/api/v1/namespaces/{namespace}/endpoints/{name}": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete Endpoints", + "operationId": "deleteCoreV1NamespacedEndpoints", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "delete", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "Endpoints", + "version": "v1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "read the specified Endpoints", + "operationId": "readCoreV1NamespacedEndpoints", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.Endpoints" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "get", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "Endpoints", + "version": "v1" + } + }, + "parameters": [ + { + "description": "name of the Endpoints", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "patch": { + "consumes": [ + "application/json-patch+json", + "application/merge-patch+json", + "application/strategic-merge-patch+json", + "application/apply-patch+yaml" + ], + "description": "partially update the specified Endpoints", + "operationId": "patchCoreV1NamespacedEndpoints", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Patch" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + }, + { + "description": "Force is going to \"force\" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.", + "in": "query", + "name": "force", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.Endpoints" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "patch", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "Endpoints", + "version": "v1" + } + }, + "put": { + "consumes": [ + "*/*" + ], + "description": "replace the specified Endpoints", + "operationId": "replaceCoreV1NamespacedEndpoints", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.Endpoints" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.Endpoints" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.Endpoints" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "put", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "Endpoints", + "version": "v1" + } + } + }, + "/api/v1/namespaces/{namespace}/events": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete collection of Event", + "operationId": "deleteCoreV1CollectionNamespacedEvent", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "deletecollection", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "Event", + "version": "v1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "list or watch objects of kind Event", + "operationId": "listCoreV1NamespacedEvent", + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.EventList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "list", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "Event", + "version": "v1" + } + }, + "parameters": [ + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "post": { + "consumes": [ + "*/*" + ], + "description": "create an Event", + "operationId": "createCoreV1NamespacedEvent", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.Event" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.Event" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.Event" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.Event" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "post", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "Event", + "version": "v1" + } + } + }, + "/api/v1/namespaces/{namespace}/events/{name}": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete an Event", + "operationId": "deleteCoreV1NamespacedEvent", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "delete", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "Event", + "version": "v1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "read the specified Event", + "operationId": "readCoreV1NamespacedEvent", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.Event" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "get", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "Event", + "version": "v1" + } + }, + "parameters": [ + { + "description": "name of the Event", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "patch": { + "consumes": [ + "application/json-patch+json", + "application/merge-patch+json", + "application/strategic-merge-patch+json", + "application/apply-patch+yaml" + ], + "description": "partially update the specified Event", + "operationId": "patchCoreV1NamespacedEvent", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Patch" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + }, + { + "description": "Force is going to \"force\" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.", + "in": "query", + "name": "force", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.Event" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "patch", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "Event", + "version": "v1" + } + }, + "put": { + "consumes": [ + "*/*" + ], + "description": "replace the specified Event", + "operationId": "replaceCoreV1NamespacedEvent", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.Event" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.Event" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.Event" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "put", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "Event", + "version": "v1" + } + } + }, + "/api/v1/namespaces/{namespace}/limitranges": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete collection of LimitRange", + "operationId": "deleteCoreV1CollectionNamespacedLimitRange", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "deletecollection", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "LimitRange", + "version": "v1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "list or watch objects of kind LimitRange", + "operationId": "listCoreV1NamespacedLimitRange", + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.LimitRangeList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "list", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "LimitRange", + "version": "v1" + } + }, + "parameters": [ + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "post": { + "consumes": [ + "*/*" + ], + "description": "create a LimitRange", + "operationId": "createCoreV1NamespacedLimitRange", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.LimitRange" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.LimitRange" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.LimitRange" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.LimitRange" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "post", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "LimitRange", + "version": "v1" + } + } + }, + "/api/v1/namespaces/{namespace}/limitranges/{name}": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete a LimitRange", + "operationId": "deleteCoreV1NamespacedLimitRange", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "delete", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "LimitRange", + "version": "v1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "read the specified LimitRange", + "operationId": "readCoreV1NamespacedLimitRange", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.LimitRange" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "get", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "LimitRange", + "version": "v1" + } + }, + "parameters": [ + { + "description": "name of the LimitRange", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "patch": { + "consumes": [ + "application/json-patch+json", + "application/merge-patch+json", + "application/strategic-merge-patch+json", + "application/apply-patch+yaml" + ], + "description": "partially update the specified LimitRange", + "operationId": "patchCoreV1NamespacedLimitRange", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Patch" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + }, + { + "description": "Force is going to \"force\" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.", + "in": "query", + "name": "force", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.LimitRange" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "patch", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "LimitRange", + "version": "v1" + } + }, + "put": { + "consumes": [ + "*/*" + ], + "description": "replace the specified LimitRange", + "operationId": "replaceCoreV1NamespacedLimitRange", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.LimitRange" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.LimitRange" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.LimitRange" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "put", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "LimitRange", + "version": "v1" + } + } + }, + "/api/v1/namespaces/{namespace}/persistentvolumeclaims": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete collection of PersistentVolumeClaim", + "operationId": "deleteCoreV1CollectionNamespacedPersistentVolumeClaim", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "deletecollection", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "PersistentVolumeClaim", + "version": "v1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "list or watch objects of kind PersistentVolumeClaim", + "operationId": "listCoreV1NamespacedPersistentVolumeClaim", + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.PersistentVolumeClaimList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "list", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "PersistentVolumeClaim", + "version": "v1" + } + }, + "parameters": [ + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "post": { + "consumes": [ + "*/*" + ], + "description": "create a PersistentVolumeClaim", + "operationId": "createCoreV1NamespacedPersistentVolumeClaim", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.PersistentVolumeClaim" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.PersistentVolumeClaim" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.PersistentVolumeClaim" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.PersistentVolumeClaim" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "post", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "PersistentVolumeClaim", + "version": "v1" + } + } + }, + "/api/v1/namespaces/{namespace}/persistentvolumeclaims/{name}": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete a PersistentVolumeClaim", + "operationId": "deleteCoreV1NamespacedPersistentVolumeClaim", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.PersistentVolumeClaim" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.PersistentVolumeClaim" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "delete", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "PersistentVolumeClaim", + "version": "v1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "read the specified PersistentVolumeClaim", + "operationId": "readCoreV1NamespacedPersistentVolumeClaim", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.PersistentVolumeClaim" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "get", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "PersistentVolumeClaim", + "version": "v1" + } + }, + "parameters": [ + { + "description": "name of the PersistentVolumeClaim", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "patch": { + "consumes": [ + "application/json-patch+json", + "application/merge-patch+json", + "application/strategic-merge-patch+json", + "application/apply-patch+yaml" + ], + "description": "partially update the specified PersistentVolumeClaim", + "operationId": "patchCoreV1NamespacedPersistentVolumeClaim", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Patch" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + }, + { + "description": "Force is going to \"force\" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.", + "in": "query", + "name": "force", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.PersistentVolumeClaim" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "patch", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "PersistentVolumeClaim", + "version": "v1" + } + }, + "put": { + "consumes": [ + "*/*" + ], + "description": "replace the specified PersistentVolumeClaim", + "operationId": "replaceCoreV1NamespacedPersistentVolumeClaim", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.PersistentVolumeClaim" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.PersistentVolumeClaim" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.PersistentVolumeClaim" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "put", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "PersistentVolumeClaim", + "version": "v1" + } + } + }, + "/api/v1/namespaces/{namespace}/persistentvolumeclaims/{name}/status": { + "get": { + "consumes": [ + "*/*" + ], + "description": "read status of the specified PersistentVolumeClaim", + "operationId": "readCoreV1NamespacedPersistentVolumeClaimStatus", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.PersistentVolumeClaim" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "get", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "PersistentVolumeClaim", + "version": "v1" + } + }, + "parameters": [ + { + "description": "name of the PersistentVolumeClaim", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "patch": { + "consumes": [ + "application/json-patch+json", + "application/merge-patch+json", + "application/strategic-merge-patch+json", + "application/apply-patch+yaml" + ], + "description": "partially update status of the specified PersistentVolumeClaim", + "operationId": "patchCoreV1NamespacedPersistentVolumeClaimStatus", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Patch" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + }, + { + "description": "Force is going to \"force\" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.", + "in": "query", + "name": "force", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.PersistentVolumeClaim" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "patch", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "PersistentVolumeClaim", + "version": "v1" + } + }, + "put": { + "consumes": [ + "*/*" + ], + "description": "replace status of the specified PersistentVolumeClaim", + "operationId": "replaceCoreV1NamespacedPersistentVolumeClaimStatus", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.PersistentVolumeClaim" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.PersistentVolumeClaim" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.PersistentVolumeClaim" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "put", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "PersistentVolumeClaim", + "version": "v1" + } + } + }, + "/api/v1/namespaces/{namespace}/pods": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete collection of Pod", + "operationId": "deleteCoreV1CollectionNamespacedPod", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "deletecollection", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "Pod", + "version": "v1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "list or watch objects of kind Pod", + "operationId": "listCoreV1NamespacedPod", + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.PodList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "list", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "Pod", + "version": "v1" + } + }, + "parameters": [ + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "post": { + "consumes": [ + "*/*" + ], + "description": "create a Pod", + "operationId": "createCoreV1NamespacedPod", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.Pod" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.Pod" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.Pod" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.Pod" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "post", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "Pod", + "version": "v1" + } + } + }, + "/api/v1/namespaces/{namespace}/pods/{name}": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete a Pod", + "operationId": "deleteCoreV1NamespacedPod", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.Pod" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.Pod" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "delete", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "Pod", + "version": "v1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "read the specified Pod", + "operationId": "readCoreV1NamespacedPod", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.Pod" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "get", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "Pod", + "version": "v1" + } + }, + "parameters": [ + { + "description": "name of the Pod", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "patch": { + "consumes": [ + "application/json-patch+json", + "application/merge-patch+json", + "application/strategic-merge-patch+json", + "application/apply-patch+yaml" + ], + "description": "partially update the specified Pod", + "operationId": "patchCoreV1NamespacedPod", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Patch" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + }, + { + "description": "Force is going to \"force\" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.", + "in": "query", + "name": "force", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.Pod" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "patch", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "Pod", + "version": "v1" + } + }, + "put": { + "consumes": [ + "*/*" + ], + "description": "replace the specified Pod", + "operationId": "replaceCoreV1NamespacedPod", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.Pod" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.Pod" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.Pod" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "put", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "Pod", + "version": "v1" + } + } + }, + "/api/v1/namespaces/{namespace}/pods/{name}/attach": { + "get": { + "consumes": [ + "*/*" + ], + "description": "connect GET requests to attach of Pod", + "operationId": "connectCoreV1GetNamespacedPodAttach", + "produces": [ + "*/*" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "type": "string" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "connect", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "PodAttachOptions", + "version": "v1" + } + }, + "parameters": [ + { + "description": "The container in which to execute the command. Defaults to only container if there is only one container in the pod.", + "in": "query", + "name": "container", + "type": "string", + "uniqueItems": true + }, + { + "description": "name of the PodAttachOptions", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "Stderr if true indicates that stderr is to be redirected for the attach call. Defaults to true.", + "in": "query", + "name": "stderr", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Stdin if true, redirects the standard input stream of the pod for this call. Defaults to false.", + "in": "query", + "name": "stdin", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Stdout if true indicates that stdout is to be redirected for the attach call. Defaults to true.", + "in": "query", + "name": "stdout", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "TTY if true indicates that a tty will be allocated for the attach call. This is passed through the container runtime so the tty is allocated on the worker node by the container runtime. Defaults to false.", + "in": "query", + "name": "tty", + "type": "boolean", + "uniqueItems": true + } + ], + "post": { + "consumes": [ + "*/*" + ], + "description": "connect POST requests to attach of Pod", + "operationId": "connectCoreV1PostNamespacedPodAttach", + "produces": [ + "*/*" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "type": "string" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "connect", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "PodAttachOptions", + "version": "v1" + } + } + }, + "/api/v1/namespaces/{namespace}/pods/{name}/binding": { + "parameters": [ + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + }, + { + "description": "name of the Binding", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "post": { + "consumes": [ + "*/*" + ], + "description": "create binding of a Pod", + "operationId": "createCoreV1NamespacedPodBinding", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.Binding" + } + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.Binding" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.Binding" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.Binding" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "post", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "Binding", + "version": "v1" + } + } + }, + "/api/v1/namespaces/{namespace}/pods/{name}/eviction": { + "parameters": [ + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + }, + { + "description": "name of the Eviction", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "post": { + "consumes": [ + "*/*" + ], + "description": "create eviction of a Pod", + "operationId": "createCoreV1NamespacedPodEviction", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.policy.v1beta1.Eviction" + } + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.policy.v1beta1.Eviction" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.policy.v1beta1.Eviction" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.api.policy.v1beta1.Eviction" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "post", + "x-kubernetes-group-version-kind": { + "group": "policy", + "kind": "Eviction", + "version": "v1beta1" + } + } + }, + "/api/v1/namespaces/{namespace}/pods/{name}/exec": { + "get": { + "consumes": [ + "*/*" + ], + "description": "connect GET requests to exec of Pod", + "operationId": "connectCoreV1GetNamespacedPodExec", + "produces": [ + "*/*" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "type": "string" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "connect", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "PodExecOptions", + "version": "v1" + } + }, + "parameters": [ + { + "description": "Command is the remote command to execute. argv array. Not executed within a shell.", + "in": "query", + "name": "command", + "type": "string", + "uniqueItems": true + }, + { + "description": "Container in which to execute the command. Defaults to only container if there is only one container in the pod.", + "in": "query", + "name": "container", + "type": "string", + "uniqueItems": true + }, + { + "description": "name of the PodExecOptions", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "Redirect the standard error stream of the pod for this call. Defaults to true.", + "in": "query", + "name": "stderr", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Redirect the standard input stream of the pod for this call. Defaults to false.", + "in": "query", + "name": "stdin", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Redirect the standard output stream of the pod for this call. Defaults to true.", + "in": "query", + "name": "stdout", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "TTY if true indicates that a tty will be allocated for the exec call. Defaults to false.", + "in": "query", + "name": "tty", + "type": "boolean", + "uniqueItems": true + } + ], + "post": { + "consumes": [ + "*/*" + ], + "description": "connect POST requests to exec of Pod", + "operationId": "connectCoreV1PostNamespacedPodExec", + "produces": [ + "*/*" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "type": "string" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "connect", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "PodExecOptions", + "version": "v1" + } + } + }, + "/api/v1/namespaces/{namespace}/pods/{name}/log": { + "get": { + "consumes": [ + "*/*" + ], + "description": "read log of the specified Pod", + "operationId": "readCoreV1NamespacedPodLog", + "produces": [ + "text/plain", + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "type": "string" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "get", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "Pod", + "version": "v1" + } + }, + "parameters": [ + { + "description": "The container for which to stream logs. Defaults to only container if there is one container in the pod.", + "in": "query", + "name": "container", + "type": "string", + "uniqueItems": true + }, + { + "description": "Follow the log stream of the pod. Defaults to false.", + "in": "query", + "name": "follow", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "insecureSkipTLSVerifyBackend indicates that the apiserver should not confirm the validity of the serving certificate of the backend it is connecting to. This will make the HTTPS connection between the apiserver and the backend insecure. This means the apiserver cannot verify the log data it is receiving came from the real kubelet. If the kubelet is configured to verify the apiserver's TLS credentials, it does not mean the connection to the real kubelet is vulnerable to a man in the middle attack (e.g. an attacker could not intercept the actual log data coming from the real kubelet).", + "in": "query", + "name": "insecureSkipTLSVerifyBackend", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "If set, the number of bytes to read from the server before terminating the log output. This may not display a complete final line of logging, and may return slightly more or slightly less than the specified limit.", + "in": "query", + "name": "limitBytes", + "type": "integer", + "uniqueItems": true + }, + { + "description": "name of the Pod", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "Return previous terminated container logs. Defaults to false.", + "in": "query", + "name": "previous", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "A relative time in seconds before the current time from which to show logs. If this value precedes the time a pod was started, only logs since the pod start will be returned. If this value is in the future, no logs will be returned. Only one of sinceSeconds or sinceTime may be specified.", + "in": "query", + "name": "sinceSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "If set, the number of lines from the end of the logs to show. If not specified, logs are shown from the creation of the container or sinceSeconds or sinceTime", + "in": "query", + "name": "tailLines", + "type": "integer", + "uniqueItems": true + }, + { + "description": "If true, add an RFC3339 or RFC3339Nano timestamp at the beginning of every line of log output. Defaults to false.", + "in": "query", + "name": "timestamps", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/api/v1/namespaces/{namespace}/pods/{name}/portforward": { + "get": { + "consumes": [ + "*/*" + ], + "description": "connect GET requests to portforward of Pod", + "operationId": "connectCoreV1GetNamespacedPodPortforward", + "produces": [ + "*/*" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "type": "string" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "connect", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "PodPortForwardOptions", + "version": "v1" + } + }, + "parameters": [ + { + "description": "name of the PodPortForwardOptions", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "List of ports to forward Required when using WebSockets", + "in": "query", + "name": "ports", + "type": "integer", + "uniqueItems": true + } + ], + "post": { + "consumes": [ + "*/*" + ], + "description": "connect POST requests to portforward of Pod", + "operationId": "connectCoreV1PostNamespacedPodPortforward", + "produces": [ + "*/*" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "type": "string" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "connect", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "PodPortForwardOptions", + "version": "v1" + } + } + }, + "/api/v1/namespaces/{namespace}/pods/{name}/proxy": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "connect DELETE requests to proxy of Pod", + "operationId": "connectCoreV1DeleteNamespacedPodProxy", + "produces": [ + "*/*" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "type": "string" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "connect", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "PodProxyOptions", + "version": "v1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "connect GET requests to proxy of Pod", + "operationId": "connectCoreV1GetNamespacedPodProxy", + "produces": [ + "*/*" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "type": "string" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "connect", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "PodProxyOptions", + "version": "v1" + } + }, + "head": { + "consumes": [ + "*/*" + ], + "description": "connect HEAD requests to proxy of Pod", + "operationId": "connectCoreV1HeadNamespacedPodProxy", + "produces": [ + "*/*" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "type": "string" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "connect", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "PodProxyOptions", + "version": "v1" + } + }, + "options": { + "consumes": [ + "*/*" + ], + "description": "connect OPTIONS requests to proxy of Pod", + "operationId": "connectCoreV1OptionsNamespacedPodProxy", + "produces": [ + "*/*" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "type": "string" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "connect", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "PodProxyOptions", + "version": "v1" + } + }, + "parameters": [ + { + "description": "name of the PodProxyOptions", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "Path is the URL path to use for the current proxy request to pod.", + "in": "query", + "name": "path", + "type": "string", + "uniqueItems": true + } + ], + "patch": { + "consumes": [ + "*/*" + ], + "description": "connect PATCH requests to proxy of Pod", + "operationId": "connectCoreV1PatchNamespacedPodProxy", + "produces": [ + "*/*" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "type": "string" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "connect", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "PodProxyOptions", + "version": "v1" + } + }, + "post": { + "consumes": [ + "*/*" + ], + "description": "connect POST requests to proxy of Pod", + "operationId": "connectCoreV1PostNamespacedPodProxy", + "produces": [ + "*/*" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "type": "string" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "connect", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "PodProxyOptions", + "version": "v1" + } + }, + "put": { + "consumes": [ + "*/*" + ], + "description": "connect PUT requests to proxy of Pod", + "operationId": "connectCoreV1PutNamespacedPodProxy", + "produces": [ + "*/*" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "type": "string" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "connect", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "PodProxyOptions", + "version": "v1" + } + } + }, + "/api/v1/namespaces/{namespace}/pods/{name}/proxy/{path}": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "connect DELETE requests to proxy of Pod", + "operationId": "connectCoreV1DeleteNamespacedPodProxyWithPath", + "produces": [ + "*/*" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "type": "string" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "connect", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "PodProxyOptions", + "version": "v1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "connect GET requests to proxy of Pod", + "operationId": "connectCoreV1GetNamespacedPodProxyWithPath", + "produces": [ + "*/*" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "type": "string" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "connect", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "PodProxyOptions", + "version": "v1" + } + }, + "head": { + "consumes": [ + "*/*" + ], + "description": "connect HEAD requests to proxy of Pod", + "operationId": "connectCoreV1HeadNamespacedPodProxyWithPath", + "produces": [ + "*/*" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "type": "string" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "connect", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "PodProxyOptions", + "version": "v1" + } + }, + "options": { + "consumes": [ + "*/*" + ], + "description": "connect OPTIONS requests to proxy of Pod", + "operationId": "connectCoreV1OptionsNamespacedPodProxyWithPath", + "produces": [ + "*/*" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "type": "string" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "connect", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "PodProxyOptions", + "version": "v1" + } + }, + "parameters": [ + { + "description": "name of the PodProxyOptions", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "path to the resource", + "in": "path", + "name": "path", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "Path is the URL path to use for the current proxy request to pod.", + "in": "query", + "name": "path", + "type": "string", + "uniqueItems": true + } + ], + "patch": { + "consumes": [ + "*/*" + ], + "description": "connect PATCH requests to proxy of Pod", + "operationId": "connectCoreV1PatchNamespacedPodProxyWithPath", + "produces": [ + "*/*" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "type": "string" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "connect", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "PodProxyOptions", + "version": "v1" + } + }, + "post": { + "consumes": [ + "*/*" + ], + "description": "connect POST requests to proxy of Pod", + "operationId": "connectCoreV1PostNamespacedPodProxyWithPath", + "produces": [ + "*/*" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "type": "string" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "connect", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "PodProxyOptions", + "version": "v1" + } + }, + "put": { + "consumes": [ + "*/*" + ], + "description": "connect PUT requests to proxy of Pod", + "operationId": "connectCoreV1PutNamespacedPodProxyWithPath", + "produces": [ + "*/*" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "type": "string" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "connect", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "PodProxyOptions", + "version": "v1" + } + } + }, + "/api/v1/namespaces/{namespace}/pods/{name}/status": { + "get": { + "consumes": [ + "*/*" + ], + "description": "read status of the specified Pod", + "operationId": "readCoreV1NamespacedPodStatus", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.Pod" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "get", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "Pod", + "version": "v1" + } + }, + "parameters": [ + { + "description": "name of the Pod", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "patch": { + "consumes": [ + "application/json-patch+json", + "application/merge-patch+json", + "application/strategic-merge-patch+json", + "application/apply-patch+yaml" + ], + "description": "partially update status of the specified Pod", + "operationId": "patchCoreV1NamespacedPodStatus", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Patch" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + }, + { + "description": "Force is going to \"force\" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.", + "in": "query", + "name": "force", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.Pod" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "patch", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "Pod", + "version": "v1" + } + }, + "put": { + "consumes": [ + "*/*" + ], + "description": "replace status of the specified Pod", + "operationId": "replaceCoreV1NamespacedPodStatus", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.Pod" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.Pod" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.Pod" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "put", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "Pod", + "version": "v1" + } + } + }, + "/api/v1/namespaces/{namespace}/podtemplates": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete collection of PodTemplate", + "operationId": "deleteCoreV1CollectionNamespacedPodTemplate", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "deletecollection", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "PodTemplate", + "version": "v1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "list or watch objects of kind PodTemplate", + "operationId": "listCoreV1NamespacedPodTemplate", + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.PodTemplateList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "list", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "PodTemplate", + "version": "v1" + } + }, + "parameters": [ + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "post": { + "consumes": [ + "*/*" + ], + "description": "create a PodTemplate", + "operationId": "createCoreV1NamespacedPodTemplate", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.PodTemplate" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.PodTemplate" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.PodTemplate" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.PodTemplate" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "post", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "PodTemplate", + "version": "v1" + } + } + }, + "/api/v1/namespaces/{namespace}/podtemplates/{name}": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete a PodTemplate", + "operationId": "deleteCoreV1NamespacedPodTemplate", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.PodTemplate" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.PodTemplate" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "delete", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "PodTemplate", + "version": "v1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "read the specified PodTemplate", + "operationId": "readCoreV1NamespacedPodTemplate", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.PodTemplate" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "get", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "PodTemplate", + "version": "v1" + } + }, + "parameters": [ + { + "description": "name of the PodTemplate", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "patch": { + "consumes": [ + "application/json-patch+json", + "application/merge-patch+json", + "application/strategic-merge-patch+json", + "application/apply-patch+yaml" + ], + "description": "partially update the specified PodTemplate", + "operationId": "patchCoreV1NamespacedPodTemplate", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Patch" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + }, + { + "description": "Force is going to \"force\" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.", + "in": "query", + "name": "force", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.PodTemplate" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "patch", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "PodTemplate", + "version": "v1" + } + }, + "put": { + "consumes": [ + "*/*" + ], + "description": "replace the specified PodTemplate", + "operationId": "replaceCoreV1NamespacedPodTemplate", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.PodTemplate" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.PodTemplate" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.PodTemplate" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "put", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "PodTemplate", + "version": "v1" + } + } + }, + "/api/v1/namespaces/{namespace}/replicationcontrollers": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete collection of ReplicationController", + "operationId": "deleteCoreV1CollectionNamespacedReplicationController", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "deletecollection", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "ReplicationController", + "version": "v1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "list or watch objects of kind ReplicationController", + "operationId": "listCoreV1NamespacedReplicationController", + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.ReplicationControllerList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "list", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "ReplicationController", + "version": "v1" + } + }, + "parameters": [ + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "post": { + "consumes": [ + "*/*" + ], + "description": "create a ReplicationController", + "operationId": "createCoreV1NamespacedReplicationController", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.ReplicationController" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.ReplicationController" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.ReplicationController" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.ReplicationController" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "post", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "ReplicationController", + "version": "v1" + } + } + }, + "/api/v1/namespaces/{namespace}/replicationcontrollers/{name}": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete a ReplicationController", + "operationId": "deleteCoreV1NamespacedReplicationController", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "delete", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "ReplicationController", + "version": "v1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "read the specified ReplicationController", + "operationId": "readCoreV1NamespacedReplicationController", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.ReplicationController" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "get", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "ReplicationController", + "version": "v1" + } + }, + "parameters": [ + { + "description": "name of the ReplicationController", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "patch": { + "consumes": [ + "application/json-patch+json", + "application/merge-patch+json", + "application/strategic-merge-patch+json", + "application/apply-patch+yaml" + ], + "description": "partially update the specified ReplicationController", + "operationId": "patchCoreV1NamespacedReplicationController", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Patch" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + }, + { + "description": "Force is going to \"force\" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.", + "in": "query", + "name": "force", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.ReplicationController" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "patch", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "ReplicationController", + "version": "v1" + } + }, + "put": { + "consumes": [ + "*/*" + ], + "description": "replace the specified ReplicationController", + "operationId": "replaceCoreV1NamespacedReplicationController", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.ReplicationController" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.ReplicationController" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.ReplicationController" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "put", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "ReplicationController", + "version": "v1" + } + } + }, + "/api/v1/namespaces/{namespace}/replicationcontrollers/{name}/scale": { + "get": { + "consumes": [ + "*/*" + ], + "description": "read scale of the specified ReplicationController", + "operationId": "readCoreV1NamespacedReplicationControllerScale", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.autoscaling.v1.Scale" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "get", + "x-kubernetes-group-version-kind": { + "group": "autoscaling", + "kind": "Scale", + "version": "v1" + } + }, + "parameters": [ + { + "description": "name of the Scale", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "patch": { + "consumes": [ + "application/json-patch+json", + "application/merge-patch+json", + "application/strategic-merge-patch+json", + "application/apply-patch+yaml" + ], + "description": "partially update scale of the specified ReplicationController", + "operationId": "patchCoreV1NamespacedReplicationControllerScale", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Patch" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + }, + { + "description": "Force is going to \"force\" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.", + "in": "query", + "name": "force", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.autoscaling.v1.Scale" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "patch", + "x-kubernetes-group-version-kind": { + "group": "autoscaling", + "kind": "Scale", + "version": "v1" + } + }, + "put": { + "consumes": [ + "*/*" + ], + "description": "replace scale of the specified ReplicationController", + "operationId": "replaceCoreV1NamespacedReplicationControllerScale", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.autoscaling.v1.Scale" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.autoscaling.v1.Scale" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.autoscaling.v1.Scale" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "put", + "x-kubernetes-group-version-kind": { + "group": "autoscaling", + "kind": "Scale", + "version": "v1" + } + } + }, + "/api/v1/namespaces/{namespace}/replicationcontrollers/{name}/status": { + "get": { + "consumes": [ + "*/*" + ], + "description": "read status of the specified ReplicationController", + "operationId": "readCoreV1NamespacedReplicationControllerStatus", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.ReplicationController" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "get", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "ReplicationController", + "version": "v1" + } + }, + "parameters": [ + { + "description": "name of the ReplicationController", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "patch": { + "consumes": [ + "application/json-patch+json", + "application/merge-patch+json", + "application/strategic-merge-patch+json", + "application/apply-patch+yaml" + ], + "description": "partially update status of the specified ReplicationController", + "operationId": "patchCoreV1NamespacedReplicationControllerStatus", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Patch" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + }, + { + "description": "Force is going to \"force\" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.", + "in": "query", + "name": "force", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.ReplicationController" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "patch", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "ReplicationController", + "version": "v1" + } + }, + "put": { + "consumes": [ + "*/*" + ], + "description": "replace status of the specified ReplicationController", + "operationId": "replaceCoreV1NamespacedReplicationControllerStatus", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.ReplicationController" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.ReplicationController" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.ReplicationController" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "put", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "ReplicationController", + "version": "v1" + } + } + }, + "/api/v1/namespaces/{namespace}/resourcequotas": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete collection of ResourceQuota", + "operationId": "deleteCoreV1CollectionNamespacedResourceQuota", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "deletecollection", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "ResourceQuota", + "version": "v1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "list or watch objects of kind ResourceQuota", + "operationId": "listCoreV1NamespacedResourceQuota", + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.ResourceQuotaList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "list", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "ResourceQuota", + "version": "v1" + } + }, + "parameters": [ + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "post": { + "consumes": [ + "*/*" + ], + "description": "create a ResourceQuota", + "operationId": "createCoreV1NamespacedResourceQuota", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.ResourceQuota" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.ResourceQuota" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.ResourceQuota" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.ResourceQuota" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "post", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "ResourceQuota", + "version": "v1" + } + } + }, + "/api/v1/namespaces/{namespace}/resourcequotas/{name}": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete a ResourceQuota", + "operationId": "deleteCoreV1NamespacedResourceQuota", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.ResourceQuota" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.ResourceQuota" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "delete", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "ResourceQuota", + "version": "v1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "read the specified ResourceQuota", + "operationId": "readCoreV1NamespacedResourceQuota", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.ResourceQuota" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "get", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "ResourceQuota", + "version": "v1" + } + }, + "parameters": [ + { + "description": "name of the ResourceQuota", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "patch": { + "consumes": [ + "application/json-patch+json", + "application/merge-patch+json", + "application/strategic-merge-patch+json", + "application/apply-patch+yaml" + ], + "description": "partially update the specified ResourceQuota", + "operationId": "patchCoreV1NamespacedResourceQuota", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Patch" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + }, + { + "description": "Force is going to \"force\" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.", + "in": "query", + "name": "force", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.ResourceQuota" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "patch", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "ResourceQuota", + "version": "v1" + } + }, + "put": { + "consumes": [ + "*/*" + ], + "description": "replace the specified ResourceQuota", + "operationId": "replaceCoreV1NamespacedResourceQuota", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.ResourceQuota" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.ResourceQuota" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.ResourceQuota" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "put", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "ResourceQuota", + "version": "v1" + } + } + }, + "/api/v1/namespaces/{namespace}/resourcequotas/{name}/status": { + "get": { + "consumes": [ + "*/*" + ], + "description": "read status of the specified ResourceQuota", + "operationId": "readCoreV1NamespacedResourceQuotaStatus", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.ResourceQuota" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "get", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "ResourceQuota", + "version": "v1" + } + }, + "parameters": [ + { + "description": "name of the ResourceQuota", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "patch": { + "consumes": [ + "application/json-patch+json", + "application/merge-patch+json", + "application/strategic-merge-patch+json", + "application/apply-patch+yaml" + ], + "description": "partially update status of the specified ResourceQuota", + "operationId": "patchCoreV1NamespacedResourceQuotaStatus", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Patch" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + }, + { + "description": "Force is going to \"force\" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.", + "in": "query", + "name": "force", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.ResourceQuota" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "patch", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "ResourceQuota", + "version": "v1" + } + }, + "put": { + "consumes": [ + "*/*" + ], + "description": "replace status of the specified ResourceQuota", + "operationId": "replaceCoreV1NamespacedResourceQuotaStatus", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.ResourceQuota" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.ResourceQuota" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.ResourceQuota" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "put", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "ResourceQuota", + "version": "v1" + } + } + }, + "/api/v1/namespaces/{namespace}/secrets": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete collection of Secret", + "operationId": "deleteCoreV1CollectionNamespacedSecret", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "deletecollection", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "Secret", + "version": "v1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "list or watch objects of kind Secret", + "operationId": "listCoreV1NamespacedSecret", + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.SecretList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "list", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "Secret", + "version": "v1" + } + }, + "parameters": [ + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "post": { + "consumes": [ + "*/*" + ], + "description": "create a Secret", + "operationId": "createCoreV1NamespacedSecret", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.Secret" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.Secret" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.Secret" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.Secret" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "post", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "Secret", + "version": "v1" + } + } + }, + "/api/v1/namespaces/{namespace}/secrets/{name}": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete a Secret", + "operationId": "deleteCoreV1NamespacedSecret", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "delete", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "Secret", + "version": "v1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "read the specified Secret", + "operationId": "readCoreV1NamespacedSecret", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.Secret" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "get", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "Secret", + "version": "v1" + } + }, + "parameters": [ + { + "description": "name of the Secret", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "patch": { + "consumes": [ + "application/json-patch+json", + "application/merge-patch+json", + "application/strategic-merge-patch+json", + "application/apply-patch+yaml" + ], + "description": "partially update the specified Secret", + "operationId": "patchCoreV1NamespacedSecret", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Patch" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + }, + { + "description": "Force is going to \"force\" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.", + "in": "query", + "name": "force", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.Secret" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "patch", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "Secret", + "version": "v1" + } + }, + "put": { + "consumes": [ + "*/*" + ], + "description": "replace the specified Secret", + "operationId": "replaceCoreV1NamespacedSecret", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.Secret" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.Secret" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.Secret" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "put", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "Secret", + "version": "v1" + } + } + }, + "/api/v1/namespaces/{namespace}/serviceaccounts": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete collection of ServiceAccount", + "operationId": "deleteCoreV1CollectionNamespacedServiceAccount", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "deletecollection", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "ServiceAccount", + "version": "v1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "list or watch objects of kind ServiceAccount", + "operationId": "listCoreV1NamespacedServiceAccount", + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.ServiceAccountList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "list", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "ServiceAccount", + "version": "v1" + } + }, + "parameters": [ + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "post": { + "consumes": [ + "*/*" + ], + "description": "create a ServiceAccount", + "operationId": "createCoreV1NamespacedServiceAccount", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.ServiceAccount" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.ServiceAccount" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.ServiceAccount" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.ServiceAccount" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "post", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "ServiceAccount", + "version": "v1" + } + } + }, + "/api/v1/namespaces/{namespace}/serviceaccounts/{name}": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete a ServiceAccount", + "operationId": "deleteCoreV1NamespacedServiceAccount", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.ServiceAccount" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.ServiceAccount" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "delete", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "ServiceAccount", + "version": "v1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "read the specified ServiceAccount", + "operationId": "readCoreV1NamespacedServiceAccount", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.ServiceAccount" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "get", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "ServiceAccount", + "version": "v1" + } + }, + "parameters": [ + { + "description": "name of the ServiceAccount", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "patch": { + "consumes": [ + "application/json-patch+json", + "application/merge-patch+json", + "application/strategic-merge-patch+json", + "application/apply-patch+yaml" + ], + "description": "partially update the specified ServiceAccount", + "operationId": "patchCoreV1NamespacedServiceAccount", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Patch" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + }, + { + "description": "Force is going to \"force\" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.", + "in": "query", + "name": "force", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.ServiceAccount" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "patch", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "ServiceAccount", + "version": "v1" + } + }, + "put": { + "consumes": [ + "*/*" + ], + "description": "replace the specified ServiceAccount", + "operationId": "replaceCoreV1NamespacedServiceAccount", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.ServiceAccount" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.ServiceAccount" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.ServiceAccount" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "put", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "ServiceAccount", + "version": "v1" + } + } + }, + "/api/v1/namespaces/{namespace}/serviceaccounts/{name}/token": { + "parameters": [ + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + }, + { + "description": "name of the TokenRequest", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "post": { + "consumes": [ + "*/*" + ], + "description": "create token of a ServiceAccount", + "operationId": "createCoreV1NamespacedServiceAccountToken", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.authentication.v1.TokenRequest" + } + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.authentication.v1.TokenRequest" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.authentication.v1.TokenRequest" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.api.authentication.v1.TokenRequest" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "post", + "x-kubernetes-group-version-kind": { + "group": "authentication.k8s.io", + "kind": "TokenRequest", + "version": "v1" + } + } + }, + "/api/v1/namespaces/{namespace}/services": { + "get": { + "consumes": [ + "*/*" + ], + "description": "list or watch objects of kind Service", + "operationId": "listCoreV1NamespacedService", + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.ServiceList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "list", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "Service", + "version": "v1" + } + }, + "parameters": [ + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "post": { + "consumes": [ + "*/*" + ], + "description": "create a Service", + "operationId": "createCoreV1NamespacedService", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.Service" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.Service" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.Service" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.Service" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "post", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "Service", + "version": "v1" + } + } + }, + "/api/v1/namespaces/{namespace}/services/{name}": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete a Service", + "operationId": "deleteCoreV1NamespacedService", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "delete", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "Service", + "version": "v1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "read the specified Service", + "operationId": "readCoreV1NamespacedService", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.Service" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "get", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "Service", + "version": "v1" + } + }, + "parameters": [ + { + "description": "name of the Service", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "patch": { + "consumes": [ + "application/json-patch+json", + "application/merge-patch+json", + "application/strategic-merge-patch+json", + "application/apply-patch+yaml" + ], + "description": "partially update the specified Service", + "operationId": "patchCoreV1NamespacedService", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Patch" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + }, + { + "description": "Force is going to \"force\" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.", + "in": "query", + "name": "force", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.Service" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "patch", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "Service", + "version": "v1" + } + }, + "put": { + "consumes": [ + "*/*" + ], + "description": "replace the specified Service", + "operationId": "replaceCoreV1NamespacedService", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.Service" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.Service" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.Service" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "put", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "Service", + "version": "v1" + } + } + }, + "/api/v1/namespaces/{namespace}/services/{name}/proxy": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "connect DELETE requests to proxy of Service", + "operationId": "connectCoreV1DeleteNamespacedServiceProxy", + "produces": [ + "*/*" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "type": "string" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "connect", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "ServiceProxyOptions", + "version": "v1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "connect GET requests to proxy of Service", + "operationId": "connectCoreV1GetNamespacedServiceProxy", + "produces": [ + "*/*" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "type": "string" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "connect", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "ServiceProxyOptions", + "version": "v1" + } + }, + "head": { + "consumes": [ + "*/*" + ], + "description": "connect HEAD requests to proxy of Service", + "operationId": "connectCoreV1HeadNamespacedServiceProxy", + "produces": [ + "*/*" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "type": "string" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "connect", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "ServiceProxyOptions", + "version": "v1" + } + }, + "options": { + "consumes": [ + "*/*" + ], + "description": "connect OPTIONS requests to proxy of Service", + "operationId": "connectCoreV1OptionsNamespacedServiceProxy", + "produces": [ + "*/*" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "type": "string" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "connect", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "ServiceProxyOptions", + "version": "v1" + } + }, + "parameters": [ + { + "description": "name of the ServiceProxyOptions", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "Path is the part of URLs that include service endpoints, suffixes, and parameters to use for the current proxy request to service. For example, the whole request URL is http://localhost/api/v1/namespaces/kube-system/services/elasticsearch-logging/_search?q=user:kimchy. Path is _search?q=user:kimchy.", + "in": "query", + "name": "path", + "type": "string", + "uniqueItems": true + } + ], + "patch": { + "consumes": [ + "*/*" + ], + "description": "connect PATCH requests to proxy of Service", + "operationId": "connectCoreV1PatchNamespacedServiceProxy", + "produces": [ + "*/*" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "type": "string" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "connect", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "ServiceProxyOptions", + "version": "v1" + } + }, + "post": { + "consumes": [ + "*/*" + ], + "description": "connect POST requests to proxy of Service", + "operationId": "connectCoreV1PostNamespacedServiceProxy", + "produces": [ + "*/*" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "type": "string" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "connect", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "ServiceProxyOptions", + "version": "v1" + } + }, + "put": { + "consumes": [ + "*/*" + ], + "description": "connect PUT requests to proxy of Service", + "operationId": "connectCoreV1PutNamespacedServiceProxy", + "produces": [ + "*/*" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "type": "string" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "connect", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "ServiceProxyOptions", + "version": "v1" + } + } + }, + "/api/v1/namespaces/{namespace}/services/{name}/proxy/{path}": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "connect DELETE requests to proxy of Service", + "operationId": "connectCoreV1DeleteNamespacedServiceProxyWithPath", + "produces": [ + "*/*" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "type": "string" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "connect", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "ServiceProxyOptions", + "version": "v1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "connect GET requests to proxy of Service", + "operationId": "connectCoreV1GetNamespacedServiceProxyWithPath", + "produces": [ + "*/*" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "type": "string" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "connect", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "ServiceProxyOptions", + "version": "v1" + } + }, + "head": { + "consumes": [ + "*/*" + ], + "description": "connect HEAD requests to proxy of Service", + "operationId": "connectCoreV1HeadNamespacedServiceProxyWithPath", + "produces": [ + "*/*" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "type": "string" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "connect", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "ServiceProxyOptions", + "version": "v1" + } + }, + "options": { + "consumes": [ + "*/*" + ], + "description": "connect OPTIONS requests to proxy of Service", + "operationId": "connectCoreV1OptionsNamespacedServiceProxyWithPath", + "produces": [ + "*/*" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "type": "string" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "connect", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "ServiceProxyOptions", + "version": "v1" + } + }, + "parameters": [ + { + "description": "name of the ServiceProxyOptions", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "path to the resource", + "in": "path", + "name": "path", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "Path is the part of URLs that include service endpoints, suffixes, and parameters to use for the current proxy request to service. For example, the whole request URL is http://localhost/api/v1/namespaces/kube-system/services/elasticsearch-logging/_search?q=user:kimchy. Path is _search?q=user:kimchy.", + "in": "query", + "name": "path", + "type": "string", + "uniqueItems": true + } + ], + "patch": { + "consumes": [ + "*/*" + ], + "description": "connect PATCH requests to proxy of Service", + "operationId": "connectCoreV1PatchNamespacedServiceProxyWithPath", + "produces": [ + "*/*" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "type": "string" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "connect", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "ServiceProxyOptions", + "version": "v1" + } + }, + "post": { + "consumes": [ + "*/*" + ], + "description": "connect POST requests to proxy of Service", + "operationId": "connectCoreV1PostNamespacedServiceProxyWithPath", + "produces": [ + "*/*" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "type": "string" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "connect", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "ServiceProxyOptions", + "version": "v1" + } + }, + "put": { + "consumes": [ + "*/*" + ], + "description": "connect PUT requests to proxy of Service", + "operationId": "connectCoreV1PutNamespacedServiceProxyWithPath", + "produces": [ + "*/*" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "type": "string" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "connect", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "ServiceProxyOptions", + "version": "v1" + } + } + }, + "/api/v1/namespaces/{namespace}/services/{name}/status": { + "get": { + "consumes": [ + "*/*" + ], + "description": "read status of the specified Service", + "operationId": "readCoreV1NamespacedServiceStatus", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.Service" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "get", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "Service", + "version": "v1" + } + }, + "parameters": [ + { + "description": "name of the Service", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "patch": { + "consumes": [ + "application/json-patch+json", + "application/merge-patch+json", + "application/strategic-merge-patch+json", + "application/apply-patch+yaml" + ], + "description": "partially update status of the specified Service", + "operationId": "patchCoreV1NamespacedServiceStatus", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Patch" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + }, + { + "description": "Force is going to \"force\" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.", + "in": "query", + "name": "force", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.Service" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "patch", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "Service", + "version": "v1" + } + }, + "put": { + "consumes": [ + "*/*" + ], + "description": "replace status of the specified Service", + "operationId": "replaceCoreV1NamespacedServiceStatus", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.Service" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.Service" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.Service" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "put", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "Service", + "version": "v1" + } + } + }, + "/api/v1/namespaces/{name}": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete a Namespace", + "operationId": "deleteCoreV1Namespace", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "delete", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "Namespace", + "version": "v1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "read the specified Namespace", + "operationId": "readCoreV1Namespace", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.Namespace" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "get", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "Namespace", + "version": "v1" + } + }, + "parameters": [ + { + "description": "name of the Namespace", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "patch": { + "consumes": [ + "application/json-patch+json", + "application/merge-patch+json", + "application/strategic-merge-patch+json", + "application/apply-patch+yaml" + ], + "description": "partially update the specified Namespace", + "operationId": "patchCoreV1Namespace", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Patch" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + }, + { + "description": "Force is going to \"force\" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.", + "in": "query", + "name": "force", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.Namespace" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "patch", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "Namespace", + "version": "v1" + } + }, + "put": { + "consumes": [ + "*/*" + ], + "description": "replace the specified Namespace", + "operationId": "replaceCoreV1Namespace", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.Namespace" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.Namespace" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.Namespace" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "put", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "Namespace", + "version": "v1" + } + } + }, + "/api/v1/namespaces/{name}/finalize": { + "parameters": [ + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + }, + { + "description": "name of the Namespace", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "put": { + "consumes": [ + "*/*" + ], + "description": "replace finalize of the specified Namespace", + "operationId": "replaceCoreV1NamespaceFinalize", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.Namespace" + } + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.Namespace" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.Namespace" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "put", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "Namespace", + "version": "v1" + } + } + }, + "/api/v1/namespaces/{name}/status": { + "get": { + "consumes": [ + "*/*" + ], + "description": "read status of the specified Namespace", + "operationId": "readCoreV1NamespaceStatus", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.Namespace" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "get", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "Namespace", + "version": "v1" + } + }, + "parameters": [ + { + "description": "name of the Namespace", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "patch": { + "consumes": [ + "application/json-patch+json", + "application/merge-patch+json", + "application/strategic-merge-patch+json", + "application/apply-patch+yaml" + ], + "description": "partially update status of the specified Namespace", + "operationId": "patchCoreV1NamespaceStatus", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Patch" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + }, + { + "description": "Force is going to \"force\" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.", + "in": "query", + "name": "force", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.Namespace" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "patch", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "Namespace", + "version": "v1" + } + }, + "put": { + "consumes": [ + "*/*" + ], + "description": "replace status of the specified Namespace", + "operationId": "replaceCoreV1NamespaceStatus", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.Namespace" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.Namespace" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.Namespace" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "put", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "Namespace", + "version": "v1" + } + } + }, + "/api/v1/nodes": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete collection of Node", + "operationId": "deleteCoreV1CollectionNode", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "deletecollection", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "Node", + "version": "v1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "list or watch objects of kind Node", + "operationId": "listCoreV1Node", + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.NodeList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "list", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "Node", + "version": "v1" + } + }, + "parameters": [ + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "post": { + "consumes": [ + "*/*" + ], + "description": "create a Node", + "operationId": "createCoreV1Node", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.Node" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.Node" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.Node" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.Node" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "post", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "Node", + "version": "v1" + } + } + }, + "/api/v1/nodes/{name}": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete a Node", + "operationId": "deleteCoreV1Node", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "delete", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "Node", + "version": "v1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "read the specified Node", + "operationId": "readCoreV1Node", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.Node" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "get", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "Node", + "version": "v1" + } + }, + "parameters": [ + { + "description": "name of the Node", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "patch": { + "consumes": [ + "application/json-patch+json", + "application/merge-patch+json", + "application/strategic-merge-patch+json", + "application/apply-patch+yaml" + ], + "description": "partially update the specified Node", + "operationId": "patchCoreV1Node", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Patch" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + }, + { + "description": "Force is going to \"force\" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.", + "in": "query", + "name": "force", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.Node" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "patch", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "Node", + "version": "v1" + } + }, + "put": { + "consumes": [ + "*/*" + ], + "description": "replace the specified Node", + "operationId": "replaceCoreV1Node", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.Node" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.Node" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.Node" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "put", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "Node", + "version": "v1" + } + } + }, + "/api/v1/nodes/{name}/proxy": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "connect DELETE requests to proxy of Node", + "operationId": "connectCoreV1DeleteNodeProxy", + "produces": [ + "*/*" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "type": "string" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "connect", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "NodeProxyOptions", + "version": "v1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "connect GET requests to proxy of Node", + "operationId": "connectCoreV1GetNodeProxy", + "produces": [ + "*/*" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "type": "string" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "connect", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "NodeProxyOptions", + "version": "v1" + } + }, + "head": { + "consumes": [ + "*/*" + ], + "description": "connect HEAD requests to proxy of Node", + "operationId": "connectCoreV1HeadNodeProxy", + "produces": [ + "*/*" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "type": "string" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "connect", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "NodeProxyOptions", + "version": "v1" + } + }, + "options": { + "consumes": [ + "*/*" + ], + "description": "connect OPTIONS requests to proxy of Node", + "operationId": "connectCoreV1OptionsNodeProxy", + "produces": [ + "*/*" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "type": "string" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "connect", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "NodeProxyOptions", + "version": "v1" + } + }, + "parameters": [ + { + "description": "name of the NodeProxyOptions", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "Path is the URL path to use for the current proxy request to node.", + "in": "query", + "name": "path", + "type": "string", + "uniqueItems": true + } + ], + "patch": { + "consumes": [ + "*/*" + ], + "description": "connect PATCH requests to proxy of Node", + "operationId": "connectCoreV1PatchNodeProxy", + "produces": [ + "*/*" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "type": "string" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "connect", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "NodeProxyOptions", + "version": "v1" + } + }, + "post": { + "consumes": [ + "*/*" + ], + "description": "connect POST requests to proxy of Node", + "operationId": "connectCoreV1PostNodeProxy", + "produces": [ + "*/*" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "type": "string" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "connect", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "NodeProxyOptions", + "version": "v1" + } + }, + "put": { + "consumes": [ + "*/*" + ], + "description": "connect PUT requests to proxy of Node", + "operationId": "connectCoreV1PutNodeProxy", + "produces": [ + "*/*" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "type": "string" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "connect", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "NodeProxyOptions", + "version": "v1" + } + } + }, + "/api/v1/nodes/{name}/proxy/{path}": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "connect DELETE requests to proxy of Node", + "operationId": "connectCoreV1DeleteNodeProxyWithPath", + "produces": [ + "*/*" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "type": "string" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "connect", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "NodeProxyOptions", + "version": "v1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "connect GET requests to proxy of Node", + "operationId": "connectCoreV1GetNodeProxyWithPath", + "produces": [ + "*/*" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "type": "string" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "connect", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "NodeProxyOptions", + "version": "v1" + } + }, + "head": { + "consumes": [ + "*/*" + ], + "description": "connect HEAD requests to proxy of Node", + "operationId": "connectCoreV1HeadNodeProxyWithPath", + "produces": [ + "*/*" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "type": "string" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "connect", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "NodeProxyOptions", + "version": "v1" + } + }, + "options": { + "consumes": [ + "*/*" + ], + "description": "connect OPTIONS requests to proxy of Node", + "operationId": "connectCoreV1OptionsNodeProxyWithPath", + "produces": [ + "*/*" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "type": "string" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "connect", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "NodeProxyOptions", + "version": "v1" + } + }, + "parameters": [ + { + "description": "name of the NodeProxyOptions", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "path to the resource", + "in": "path", + "name": "path", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "Path is the URL path to use for the current proxy request to node.", + "in": "query", + "name": "path", + "type": "string", + "uniqueItems": true + } + ], + "patch": { + "consumes": [ + "*/*" + ], + "description": "connect PATCH requests to proxy of Node", + "operationId": "connectCoreV1PatchNodeProxyWithPath", + "produces": [ + "*/*" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "type": "string" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "connect", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "NodeProxyOptions", + "version": "v1" + } + }, + "post": { + "consumes": [ + "*/*" + ], + "description": "connect POST requests to proxy of Node", + "operationId": "connectCoreV1PostNodeProxyWithPath", + "produces": [ + "*/*" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "type": "string" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "connect", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "NodeProxyOptions", + "version": "v1" + } + }, + "put": { + "consumes": [ + "*/*" + ], + "description": "connect PUT requests to proxy of Node", + "operationId": "connectCoreV1PutNodeProxyWithPath", + "produces": [ + "*/*" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "type": "string" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "connect", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "NodeProxyOptions", + "version": "v1" + } + } + }, + "/api/v1/nodes/{name}/status": { + "get": { + "consumes": [ + "*/*" + ], + "description": "read status of the specified Node", + "operationId": "readCoreV1NodeStatus", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.Node" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "get", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "Node", + "version": "v1" + } + }, + "parameters": [ + { + "description": "name of the Node", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "patch": { + "consumes": [ + "application/json-patch+json", + "application/merge-patch+json", + "application/strategic-merge-patch+json", + "application/apply-patch+yaml" + ], + "description": "partially update status of the specified Node", + "operationId": "patchCoreV1NodeStatus", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Patch" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + }, + { + "description": "Force is going to \"force\" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.", + "in": "query", + "name": "force", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.Node" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "patch", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "Node", + "version": "v1" + } + }, + "put": { + "consumes": [ + "*/*" + ], + "description": "replace status of the specified Node", + "operationId": "replaceCoreV1NodeStatus", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.Node" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.Node" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.Node" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "put", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "Node", + "version": "v1" + } + } + }, + "/api/v1/persistentvolumeclaims": { + "get": { + "consumes": [ + "*/*" + ], + "description": "list or watch objects of kind PersistentVolumeClaim", + "operationId": "listCoreV1PersistentVolumeClaimForAllNamespaces", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.PersistentVolumeClaimList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "list", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "PersistentVolumeClaim", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/api/v1/persistentvolumes": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete collection of PersistentVolume", + "operationId": "deleteCoreV1CollectionPersistentVolume", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "deletecollection", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "PersistentVolume", + "version": "v1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "list or watch objects of kind PersistentVolume", + "operationId": "listCoreV1PersistentVolume", + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.PersistentVolumeList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "list", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "PersistentVolume", + "version": "v1" + } + }, + "parameters": [ + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "post": { + "consumes": [ + "*/*" + ], + "description": "create a PersistentVolume", + "operationId": "createCoreV1PersistentVolume", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.PersistentVolume" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.PersistentVolume" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.PersistentVolume" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.PersistentVolume" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "post", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "PersistentVolume", + "version": "v1" + } + } + }, + "/api/v1/persistentvolumes/{name}": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete a PersistentVolume", + "operationId": "deleteCoreV1PersistentVolume", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.PersistentVolume" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.PersistentVolume" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "delete", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "PersistentVolume", + "version": "v1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "read the specified PersistentVolume", + "operationId": "readCoreV1PersistentVolume", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.PersistentVolume" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "get", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "PersistentVolume", + "version": "v1" + } + }, + "parameters": [ + { + "description": "name of the PersistentVolume", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "patch": { + "consumes": [ + "application/json-patch+json", + "application/merge-patch+json", + "application/strategic-merge-patch+json", + "application/apply-patch+yaml" + ], + "description": "partially update the specified PersistentVolume", + "operationId": "patchCoreV1PersistentVolume", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Patch" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + }, + { + "description": "Force is going to \"force\" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.", + "in": "query", + "name": "force", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.PersistentVolume" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "patch", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "PersistentVolume", + "version": "v1" + } + }, + "put": { + "consumes": [ + "*/*" + ], + "description": "replace the specified PersistentVolume", + "operationId": "replaceCoreV1PersistentVolume", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.PersistentVolume" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.PersistentVolume" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.PersistentVolume" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "put", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "PersistentVolume", + "version": "v1" + } + } + }, + "/api/v1/persistentvolumes/{name}/status": { + "get": { + "consumes": [ + "*/*" + ], + "description": "read status of the specified PersistentVolume", + "operationId": "readCoreV1PersistentVolumeStatus", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.PersistentVolume" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "get", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "PersistentVolume", + "version": "v1" + } + }, + "parameters": [ + { + "description": "name of the PersistentVolume", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "patch": { + "consumes": [ + "application/json-patch+json", + "application/merge-patch+json", + "application/strategic-merge-patch+json", + "application/apply-patch+yaml" + ], + "description": "partially update status of the specified PersistentVolume", + "operationId": "patchCoreV1PersistentVolumeStatus", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Patch" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + }, + { + "description": "Force is going to \"force\" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.", + "in": "query", + "name": "force", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.PersistentVolume" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "patch", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "PersistentVolume", + "version": "v1" + } + }, + "put": { + "consumes": [ + "*/*" + ], + "description": "replace status of the specified PersistentVolume", + "operationId": "replaceCoreV1PersistentVolumeStatus", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.PersistentVolume" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.PersistentVolume" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.PersistentVolume" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "put", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "PersistentVolume", + "version": "v1" + } + } + }, + "/api/v1/pods": { + "get": { + "consumes": [ + "*/*" + ], + "description": "list or watch objects of kind Pod", + "operationId": "listCoreV1PodForAllNamespaces", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.PodList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "list", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "Pod", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/api/v1/podtemplates": { + "get": { + "consumes": [ + "*/*" + ], + "description": "list or watch objects of kind PodTemplate", + "operationId": "listCoreV1PodTemplateForAllNamespaces", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.PodTemplateList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "list", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "PodTemplate", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/api/v1/replicationcontrollers": { + "get": { + "consumes": [ + "*/*" + ], + "description": "list or watch objects of kind ReplicationController", + "operationId": "listCoreV1ReplicationControllerForAllNamespaces", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.ReplicationControllerList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "list", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "ReplicationController", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/api/v1/resourcequotas": { + "get": { + "consumes": [ + "*/*" + ], + "description": "list or watch objects of kind ResourceQuota", + "operationId": "listCoreV1ResourceQuotaForAllNamespaces", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.ResourceQuotaList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "list", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "ResourceQuota", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/api/v1/secrets": { + "get": { + "consumes": [ + "*/*" + ], + "description": "list or watch objects of kind Secret", + "operationId": "listCoreV1SecretForAllNamespaces", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.SecretList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "list", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "Secret", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/api/v1/serviceaccounts": { + "get": { + "consumes": [ + "*/*" + ], + "description": "list or watch objects of kind ServiceAccount", + "operationId": "listCoreV1ServiceAccountForAllNamespaces", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.ServiceAccountList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "list", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "ServiceAccount", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/api/v1/services": { + "get": { + "consumes": [ + "*/*" + ], + "description": "list or watch objects of kind Service", + "operationId": "listCoreV1ServiceForAllNamespaces", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.core.v1.ServiceList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "list", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "Service", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/api/v1/watch/configmaps": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch individual changes to a list of ConfigMap. deprecated: use the 'watch' parameter with a list operation instead.", + "operationId": "watchCoreV1ConfigMapListForAllNamespaces", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "watchlist", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "ConfigMap", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/api/v1/watch/endpoints": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch individual changes to a list of Endpoints. deprecated: use the 'watch' parameter with a list operation instead.", + "operationId": "watchCoreV1EndpointsListForAllNamespaces", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "watchlist", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "Endpoints", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/api/v1/watch/events": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch individual changes to a list of Event. deprecated: use the 'watch' parameter with a list operation instead.", + "operationId": "watchCoreV1EventListForAllNamespaces", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "watchlist", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "Event", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/api/v1/watch/limitranges": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch individual changes to a list of LimitRange. deprecated: use the 'watch' parameter with a list operation instead.", + "operationId": "watchCoreV1LimitRangeListForAllNamespaces", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "watchlist", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "LimitRange", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/api/v1/watch/namespaces": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch individual changes to a list of Namespace. deprecated: use the 'watch' parameter with a list operation instead.", + "operationId": "watchCoreV1NamespaceList", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "watchlist", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "Namespace", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/api/v1/watch/namespaces/{namespace}/configmaps": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch individual changes to a list of ConfigMap. deprecated: use the 'watch' parameter with a list operation instead.", + "operationId": "watchCoreV1NamespacedConfigMapList", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "watchlist", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "ConfigMap", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/api/v1/watch/namespaces/{namespace}/configmaps/{name}": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch changes to an object of kind ConfigMap. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.", + "operationId": "watchCoreV1NamespacedConfigMap", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "watch", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "ConfigMap", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "name of the ConfigMap", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/api/v1/watch/namespaces/{namespace}/endpoints": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch individual changes to a list of Endpoints. deprecated: use the 'watch' parameter with a list operation instead.", + "operationId": "watchCoreV1NamespacedEndpointsList", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "watchlist", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "Endpoints", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/api/v1/watch/namespaces/{namespace}/endpoints/{name}": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch changes to an object of kind Endpoints. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.", + "operationId": "watchCoreV1NamespacedEndpoints", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "watch", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "Endpoints", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "name of the Endpoints", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/api/v1/watch/namespaces/{namespace}/events": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch individual changes to a list of Event. deprecated: use the 'watch' parameter with a list operation instead.", + "operationId": "watchCoreV1NamespacedEventList", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "watchlist", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "Event", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/api/v1/watch/namespaces/{namespace}/events/{name}": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch changes to an object of kind Event. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.", + "operationId": "watchCoreV1NamespacedEvent", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "watch", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "Event", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "name of the Event", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/api/v1/watch/namespaces/{namespace}/limitranges": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch individual changes to a list of LimitRange. deprecated: use the 'watch' parameter with a list operation instead.", + "operationId": "watchCoreV1NamespacedLimitRangeList", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "watchlist", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "LimitRange", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/api/v1/watch/namespaces/{namespace}/limitranges/{name}": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch changes to an object of kind LimitRange. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.", + "operationId": "watchCoreV1NamespacedLimitRange", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "watch", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "LimitRange", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "name of the LimitRange", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/api/v1/watch/namespaces/{namespace}/persistentvolumeclaims": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch individual changes to a list of PersistentVolumeClaim. deprecated: use the 'watch' parameter with a list operation instead.", + "operationId": "watchCoreV1NamespacedPersistentVolumeClaimList", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "watchlist", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "PersistentVolumeClaim", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/api/v1/watch/namespaces/{namespace}/persistentvolumeclaims/{name}": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch changes to an object of kind PersistentVolumeClaim. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.", + "operationId": "watchCoreV1NamespacedPersistentVolumeClaim", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "watch", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "PersistentVolumeClaim", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "name of the PersistentVolumeClaim", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/api/v1/watch/namespaces/{namespace}/pods": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch individual changes to a list of Pod. deprecated: use the 'watch' parameter with a list operation instead.", + "operationId": "watchCoreV1NamespacedPodList", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "watchlist", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "Pod", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/api/v1/watch/namespaces/{namespace}/pods/{name}": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch changes to an object of kind Pod. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.", + "operationId": "watchCoreV1NamespacedPod", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "watch", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "Pod", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "name of the Pod", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/api/v1/watch/namespaces/{namespace}/podtemplates": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch individual changes to a list of PodTemplate. deprecated: use the 'watch' parameter with a list operation instead.", + "operationId": "watchCoreV1NamespacedPodTemplateList", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "watchlist", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "PodTemplate", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/api/v1/watch/namespaces/{namespace}/podtemplates/{name}": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch changes to an object of kind PodTemplate. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.", + "operationId": "watchCoreV1NamespacedPodTemplate", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "watch", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "PodTemplate", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "name of the PodTemplate", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/api/v1/watch/namespaces/{namespace}/replicationcontrollers": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch individual changes to a list of ReplicationController. deprecated: use the 'watch' parameter with a list operation instead.", + "operationId": "watchCoreV1NamespacedReplicationControllerList", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "watchlist", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "ReplicationController", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/api/v1/watch/namespaces/{namespace}/replicationcontrollers/{name}": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch changes to an object of kind ReplicationController. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.", + "operationId": "watchCoreV1NamespacedReplicationController", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "watch", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "ReplicationController", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "name of the ReplicationController", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/api/v1/watch/namespaces/{namespace}/resourcequotas": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch individual changes to a list of ResourceQuota. deprecated: use the 'watch' parameter with a list operation instead.", + "operationId": "watchCoreV1NamespacedResourceQuotaList", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "watchlist", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "ResourceQuota", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/api/v1/watch/namespaces/{namespace}/resourcequotas/{name}": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch changes to an object of kind ResourceQuota. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.", + "operationId": "watchCoreV1NamespacedResourceQuota", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "watch", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "ResourceQuota", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "name of the ResourceQuota", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/api/v1/watch/namespaces/{namespace}/secrets": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch individual changes to a list of Secret. deprecated: use the 'watch' parameter with a list operation instead.", + "operationId": "watchCoreV1NamespacedSecretList", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "watchlist", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "Secret", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/api/v1/watch/namespaces/{namespace}/secrets/{name}": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch changes to an object of kind Secret. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.", + "operationId": "watchCoreV1NamespacedSecret", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "watch", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "Secret", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "name of the Secret", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/api/v1/watch/namespaces/{namespace}/serviceaccounts": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch individual changes to a list of ServiceAccount. deprecated: use the 'watch' parameter with a list operation instead.", + "operationId": "watchCoreV1NamespacedServiceAccountList", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "watchlist", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "ServiceAccount", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/api/v1/watch/namespaces/{namespace}/serviceaccounts/{name}": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch changes to an object of kind ServiceAccount. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.", + "operationId": "watchCoreV1NamespacedServiceAccount", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "watch", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "ServiceAccount", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "name of the ServiceAccount", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/api/v1/watch/namespaces/{namespace}/services": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch individual changes to a list of Service. deprecated: use the 'watch' parameter with a list operation instead.", + "operationId": "watchCoreV1NamespacedServiceList", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "watchlist", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "Service", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/api/v1/watch/namespaces/{namespace}/services/{name}": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch changes to an object of kind Service. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.", + "operationId": "watchCoreV1NamespacedService", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "watch", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "Service", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "name of the Service", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/api/v1/watch/namespaces/{name}": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch changes to an object of kind Namespace. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.", + "operationId": "watchCoreV1Namespace", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "watch", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "Namespace", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "name of the Namespace", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/api/v1/watch/nodes": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch individual changes to a list of Node. deprecated: use the 'watch' parameter with a list operation instead.", + "operationId": "watchCoreV1NodeList", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "watchlist", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "Node", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/api/v1/watch/nodes/{name}": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch changes to an object of kind Node. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.", + "operationId": "watchCoreV1Node", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "watch", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "Node", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "name of the Node", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/api/v1/watch/persistentvolumeclaims": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch individual changes to a list of PersistentVolumeClaim. deprecated: use the 'watch' parameter with a list operation instead.", + "operationId": "watchCoreV1PersistentVolumeClaimListForAllNamespaces", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "watchlist", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "PersistentVolumeClaim", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/api/v1/watch/persistentvolumes": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch individual changes to a list of PersistentVolume. deprecated: use the 'watch' parameter with a list operation instead.", + "operationId": "watchCoreV1PersistentVolumeList", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "watchlist", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "PersistentVolume", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/api/v1/watch/persistentvolumes/{name}": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch changes to an object of kind PersistentVolume. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.", + "operationId": "watchCoreV1PersistentVolume", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "watch", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "PersistentVolume", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "name of the PersistentVolume", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/api/v1/watch/pods": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch individual changes to a list of Pod. deprecated: use the 'watch' parameter with a list operation instead.", + "operationId": "watchCoreV1PodListForAllNamespaces", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "watchlist", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "Pod", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/api/v1/watch/podtemplates": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch individual changes to a list of PodTemplate. deprecated: use the 'watch' parameter with a list operation instead.", + "operationId": "watchCoreV1PodTemplateListForAllNamespaces", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "watchlist", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "PodTemplate", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/api/v1/watch/replicationcontrollers": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch individual changes to a list of ReplicationController. deprecated: use the 'watch' parameter with a list operation instead.", + "operationId": "watchCoreV1ReplicationControllerListForAllNamespaces", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "watchlist", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "ReplicationController", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/api/v1/watch/resourcequotas": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch individual changes to a list of ResourceQuota. deprecated: use the 'watch' parameter with a list operation instead.", + "operationId": "watchCoreV1ResourceQuotaListForAllNamespaces", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "watchlist", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "ResourceQuota", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/api/v1/watch/secrets": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch individual changes to a list of Secret. deprecated: use the 'watch' parameter with a list operation instead.", + "operationId": "watchCoreV1SecretListForAllNamespaces", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "watchlist", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "Secret", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/api/v1/watch/serviceaccounts": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch individual changes to a list of ServiceAccount. deprecated: use the 'watch' parameter with a list operation instead.", + "operationId": "watchCoreV1ServiceAccountListForAllNamespaces", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "watchlist", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "ServiceAccount", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/api/v1/watch/services": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch individual changes to a list of Service. deprecated: use the 'watch' parameter with a list operation instead.", + "operationId": "watchCoreV1ServiceListForAllNamespaces", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "core_v1" + ], + "x-kubernetes-action": "watchlist", + "x-kubernetes-group-version-kind": { + "group": "", + "kind": "Service", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/": { + "get": { + "consumes": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "description": "get available API versions", + "operationId": "getAPIVersions", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.APIGroupList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "apis" + ] + } + }, + "/apis/admissionregistration.k8s.io/": { + "get": { + "consumes": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "description": "get information of a group", + "operationId": "getAdmissionregistrationAPIGroup", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.APIGroup" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "admissionregistration" + ] + } + }, + "/apis/admissionregistration.k8s.io/v1/": { + "get": { + "consumes": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "description": "get available resources", + "operationId": "getAdmissionregistrationV1APIResources", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.APIResourceList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "admissionregistration_v1" + ] + } + }, + "/apis/admissionregistration.k8s.io/v1/mutatingwebhookconfigurations": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete collection of MutatingWebhookConfiguration", + "operationId": "deleteAdmissionregistrationV1CollectionMutatingWebhookConfiguration", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "admissionregistration_v1" + ], + "x-kubernetes-action": "deletecollection", + "x-kubernetes-group-version-kind": { + "group": "admissionregistration.k8s.io", + "kind": "MutatingWebhookConfiguration", + "version": "v1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "list or watch objects of kind MutatingWebhookConfiguration", + "operationId": "listAdmissionregistrationV1MutatingWebhookConfiguration", + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.admissionregistration.v1.MutatingWebhookConfigurationList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "admissionregistration_v1" + ], + "x-kubernetes-action": "list", + "x-kubernetes-group-version-kind": { + "group": "admissionregistration.k8s.io", + "kind": "MutatingWebhookConfiguration", + "version": "v1" + } + }, + "parameters": [ + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "post": { + "consumes": [ + "*/*" + ], + "description": "create a MutatingWebhookConfiguration", + "operationId": "createAdmissionregistrationV1MutatingWebhookConfiguration", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.admissionregistration.v1.MutatingWebhookConfiguration" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.admissionregistration.v1.MutatingWebhookConfiguration" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.admissionregistration.v1.MutatingWebhookConfiguration" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.api.admissionregistration.v1.MutatingWebhookConfiguration" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "admissionregistration_v1" + ], + "x-kubernetes-action": "post", + "x-kubernetes-group-version-kind": { + "group": "admissionregistration.k8s.io", + "kind": "MutatingWebhookConfiguration", + "version": "v1" + } + } + }, + "/apis/admissionregistration.k8s.io/v1/mutatingwebhookconfigurations/{name}": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete a MutatingWebhookConfiguration", + "operationId": "deleteAdmissionregistrationV1MutatingWebhookConfiguration", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "admissionregistration_v1" + ], + "x-kubernetes-action": "delete", + "x-kubernetes-group-version-kind": { + "group": "admissionregistration.k8s.io", + "kind": "MutatingWebhookConfiguration", + "version": "v1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "read the specified MutatingWebhookConfiguration", + "operationId": "readAdmissionregistrationV1MutatingWebhookConfiguration", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.admissionregistration.v1.MutatingWebhookConfiguration" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "admissionregistration_v1" + ], + "x-kubernetes-action": "get", + "x-kubernetes-group-version-kind": { + "group": "admissionregistration.k8s.io", + "kind": "MutatingWebhookConfiguration", + "version": "v1" + } + }, + "parameters": [ + { + "description": "name of the MutatingWebhookConfiguration", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "patch": { + "consumes": [ + "application/json-patch+json", + "application/merge-patch+json", + "application/strategic-merge-patch+json", + "application/apply-patch+yaml" + ], + "description": "partially update the specified MutatingWebhookConfiguration", + "operationId": "patchAdmissionregistrationV1MutatingWebhookConfiguration", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Patch" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + }, + { + "description": "Force is going to \"force\" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.", + "in": "query", + "name": "force", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.admissionregistration.v1.MutatingWebhookConfiguration" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "admissionregistration_v1" + ], + "x-kubernetes-action": "patch", + "x-kubernetes-group-version-kind": { + "group": "admissionregistration.k8s.io", + "kind": "MutatingWebhookConfiguration", + "version": "v1" + } + }, + "put": { + "consumes": [ + "*/*" + ], + "description": "replace the specified MutatingWebhookConfiguration", + "operationId": "replaceAdmissionregistrationV1MutatingWebhookConfiguration", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.admissionregistration.v1.MutatingWebhookConfiguration" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.admissionregistration.v1.MutatingWebhookConfiguration" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.admissionregistration.v1.MutatingWebhookConfiguration" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "admissionregistration_v1" + ], + "x-kubernetes-action": "put", + "x-kubernetes-group-version-kind": { + "group": "admissionregistration.k8s.io", + "kind": "MutatingWebhookConfiguration", + "version": "v1" + } + } + }, + "/apis/admissionregistration.k8s.io/v1/validatingwebhookconfigurations": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete collection of ValidatingWebhookConfiguration", + "operationId": "deleteAdmissionregistrationV1CollectionValidatingWebhookConfiguration", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "admissionregistration_v1" + ], + "x-kubernetes-action": "deletecollection", + "x-kubernetes-group-version-kind": { + "group": "admissionregistration.k8s.io", + "kind": "ValidatingWebhookConfiguration", + "version": "v1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "list or watch objects of kind ValidatingWebhookConfiguration", + "operationId": "listAdmissionregistrationV1ValidatingWebhookConfiguration", + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.admissionregistration.v1.ValidatingWebhookConfigurationList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "admissionregistration_v1" + ], + "x-kubernetes-action": "list", + "x-kubernetes-group-version-kind": { + "group": "admissionregistration.k8s.io", + "kind": "ValidatingWebhookConfiguration", + "version": "v1" + } + }, + "parameters": [ + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "post": { + "consumes": [ + "*/*" + ], + "description": "create a ValidatingWebhookConfiguration", + "operationId": "createAdmissionregistrationV1ValidatingWebhookConfiguration", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.admissionregistration.v1.ValidatingWebhookConfiguration" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.admissionregistration.v1.ValidatingWebhookConfiguration" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.admissionregistration.v1.ValidatingWebhookConfiguration" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.api.admissionregistration.v1.ValidatingWebhookConfiguration" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "admissionregistration_v1" + ], + "x-kubernetes-action": "post", + "x-kubernetes-group-version-kind": { + "group": "admissionregistration.k8s.io", + "kind": "ValidatingWebhookConfiguration", + "version": "v1" + } + } + }, + "/apis/admissionregistration.k8s.io/v1/validatingwebhookconfigurations/{name}": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete a ValidatingWebhookConfiguration", + "operationId": "deleteAdmissionregistrationV1ValidatingWebhookConfiguration", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "admissionregistration_v1" + ], + "x-kubernetes-action": "delete", + "x-kubernetes-group-version-kind": { + "group": "admissionregistration.k8s.io", + "kind": "ValidatingWebhookConfiguration", + "version": "v1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "read the specified ValidatingWebhookConfiguration", + "operationId": "readAdmissionregistrationV1ValidatingWebhookConfiguration", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.admissionregistration.v1.ValidatingWebhookConfiguration" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "admissionregistration_v1" + ], + "x-kubernetes-action": "get", + "x-kubernetes-group-version-kind": { + "group": "admissionregistration.k8s.io", + "kind": "ValidatingWebhookConfiguration", + "version": "v1" + } + }, + "parameters": [ + { + "description": "name of the ValidatingWebhookConfiguration", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "patch": { + "consumes": [ + "application/json-patch+json", + "application/merge-patch+json", + "application/strategic-merge-patch+json", + "application/apply-patch+yaml" + ], + "description": "partially update the specified ValidatingWebhookConfiguration", + "operationId": "patchAdmissionregistrationV1ValidatingWebhookConfiguration", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Patch" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + }, + { + "description": "Force is going to \"force\" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.", + "in": "query", + "name": "force", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.admissionregistration.v1.ValidatingWebhookConfiguration" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "admissionregistration_v1" + ], + "x-kubernetes-action": "patch", + "x-kubernetes-group-version-kind": { + "group": "admissionregistration.k8s.io", + "kind": "ValidatingWebhookConfiguration", + "version": "v1" + } + }, + "put": { + "consumes": [ + "*/*" + ], + "description": "replace the specified ValidatingWebhookConfiguration", + "operationId": "replaceAdmissionregistrationV1ValidatingWebhookConfiguration", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.admissionregistration.v1.ValidatingWebhookConfiguration" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.admissionregistration.v1.ValidatingWebhookConfiguration" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.admissionregistration.v1.ValidatingWebhookConfiguration" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "admissionregistration_v1" + ], + "x-kubernetes-action": "put", + "x-kubernetes-group-version-kind": { + "group": "admissionregistration.k8s.io", + "kind": "ValidatingWebhookConfiguration", + "version": "v1" + } + } + }, + "/apis/admissionregistration.k8s.io/v1/watch/mutatingwebhookconfigurations": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch individual changes to a list of MutatingWebhookConfiguration. deprecated: use the 'watch' parameter with a list operation instead.", + "operationId": "watchAdmissionregistrationV1MutatingWebhookConfigurationList", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "admissionregistration_v1" + ], + "x-kubernetes-action": "watchlist", + "x-kubernetes-group-version-kind": { + "group": "admissionregistration.k8s.io", + "kind": "MutatingWebhookConfiguration", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/admissionregistration.k8s.io/v1/watch/mutatingwebhookconfigurations/{name}": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch changes to an object of kind MutatingWebhookConfiguration. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.", + "operationId": "watchAdmissionregistrationV1MutatingWebhookConfiguration", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "admissionregistration_v1" + ], + "x-kubernetes-action": "watch", + "x-kubernetes-group-version-kind": { + "group": "admissionregistration.k8s.io", + "kind": "MutatingWebhookConfiguration", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "name of the MutatingWebhookConfiguration", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/admissionregistration.k8s.io/v1/watch/validatingwebhookconfigurations": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch individual changes to a list of ValidatingWebhookConfiguration. deprecated: use the 'watch' parameter with a list operation instead.", + "operationId": "watchAdmissionregistrationV1ValidatingWebhookConfigurationList", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "admissionregistration_v1" + ], + "x-kubernetes-action": "watchlist", + "x-kubernetes-group-version-kind": { + "group": "admissionregistration.k8s.io", + "kind": "ValidatingWebhookConfiguration", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/admissionregistration.k8s.io/v1/watch/validatingwebhookconfigurations/{name}": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch changes to an object of kind ValidatingWebhookConfiguration. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.", + "operationId": "watchAdmissionregistrationV1ValidatingWebhookConfiguration", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "admissionregistration_v1" + ], + "x-kubernetes-action": "watch", + "x-kubernetes-group-version-kind": { + "group": "admissionregistration.k8s.io", + "kind": "ValidatingWebhookConfiguration", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "name of the ValidatingWebhookConfiguration", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/admissionregistration.k8s.io/v1beta1/": { + "get": { + "consumes": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "description": "get available resources", + "operationId": "getAdmissionregistrationV1beta1APIResources", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.APIResourceList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "admissionregistration_v1beta1" + ] + } + }, + "/apis/admissionregistration.k8s.io/v1beta1/mutatingwebhookconfigurations": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete collection of MutatingWebhookConfiguration", + "operationId": "deleteAdmissionregistrationV1beta1CollectionMutatingWebhookConfiguration", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "admissionregistration_v1beta1" + ], + "x-kubernetes-action": "deletecollection", + "x-kubernetes-group-version-kind": { + "group": "admissionregistration.k8s.io", + "kind": "MutatingWebhookConfiguration", + "version": "v1beta1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "list or watch objects of kind MutatingWebhookConfiguration", + "operationId": "listAdmissionregistrationV1beta1MutatingWebhookConfiguration", + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.admissionregistration.v1beta1.MutatingWebhookConfigurationList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "admissionregistration_v1beta1" + ], + "x-kubernetes-action": "list", + "x-kubernetes-group-version-kind": { + "group": "admissionregistration.k8s.io", + "kind": "MutatingWebhookConfiguration", + "version": "v1beta1" + } + }, + "parameters": [ + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "post": { + "consumes": [ + "*/*" + ], + "description": "create a MutatingWebhookConfiguration", + "operationId": "createAdmissionregistrationV1beta1MutatingWebhookConfiguration", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.admissionregistration.v1beta1.MutatingWebhookConfiguration" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.admissionregistration.v1beta1.MutatingWebhookConfiguration" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.admissionregistration.v1beta1.MutatingWebhookConfiguration" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.api.admissionregistration.v1beta1.MutatingWebhookConfiguration" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "admissionregistration_v1beta1" + ], + "x-kubernetes-action": "post", + "x-kubernetes-group-version-kind": { + "group": "admissionregistration.k8s.io", + "kind": "MutatingWebhookConfiguration", + "version": "v1beta1" + } + } + }, + "/apis/admissionregistration.k8s.io/v1beta1/mutatingwebhookconfigurations/{name}": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete a MutatingWebhookConfiguration", + "operationId": "deleteAdmissionregistrationV1beta1MutatingWebhookConfiguration", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "admissionregistration_v1beta1" + ], + "x-kubernetes-action": "delete", + "x-kubernetes-group-version-kind": { + "group": "admissionregistration.k8s.io", + "kind": "MutatingWebhookConfiguration", + "version": "v1beta1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "read the specified MutatingWebhookConfiguration", + "operationId": "readAdmissionregistrationV1beta1MutatingWebhookConfiguration", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.admissionregistration.v1beta1.MutatingWebhookConfiguration" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "admissionregistration_v1beta1" + ], + "x-kubernetes-action": "get", + "x-kubernetes-group-version-kind": { + "group": "admissionregistration.k8s.io", + "kind": "MutatingWebhookConfiguration", + "version": "v1beta1" + } + }, + "parameters": [ + { + "description": "name of the MutatingWebhookConfiguration", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "patch": { + "consumes": [ + "application/json-patch+json", + "application/merge-patch+json", + "application/strategic-merge-patch+json", + "application/apply-patch+yaml" + ], + "description": "partially update the specified MutatingWebhookConfiguration", + "operationId": "patchAdmissionregistrationV1beta1MutatingWebhookConfiguration", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Patch" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + }, + { + "description": "Force is going to \"force\" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.", + "in": "query", + "name": "force", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.admissionregistration.v1beta1.MutatingWebhookConfiguration" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "admissionregistration_v1beta1" + ], + "x-kubernetes-action": "patch", + "x-kubernetes-group-version-kind": { + "group": "admissionregistration.k8s.io", + "kind": "MutatingWebhookConfiguration", + "version": "v1beta1" + } + }, + "put": { + "consumes": [ + "*/*" + ], + "description": "replace the specified MutatingWebhookConfiguration", + "operationId": "replaceAdmissionregistrationV1beta1MutatingWebhookConfiguration", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.admissionregistration.v1beta1.MutatingWebhookConfiguration" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.admissionregistration.v1beta1.MutatingWebhookConfiguration" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.admissionregistration.v1beta1.MutatingWebhookConfiguration" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "admissionregistration_v1beta1" + ], + "x-kubernetes-action": "put", + "x-kubernetes-group-version-kind": { + "group": "admissionregistration.k8s.io", + "kind": "MutatingWebhookConfiguration", + "version": "v1beta1" + } + } + }, + "/apis/admissionregistration.k8s.io/v1beta1/validatingwebhookconfigurations": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete collection of ValidatingWebhookConfiguration", + "operationId": "deleteAdmissionregistrationV1beta1CollectionValidatingWebhookConfiguration", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "admissionregistration_v1beta1" + ], + "x-kubernetes-action": "deletecollection", + "x-kubernetes-group-version-kind": { + "group": "admissionregistration.k8s.io", + "kind": "ValidatingWebhookConfiguration", + "version": "v1beta1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "list or watch objects of kind ValidatingWebhookConfiguration", + "operationId": "listAdmissionregistrationV1beta1ValidatingWebhookConfiguration", + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.admissionregistration.v1beta1.ValidatingWebhookConfigurationList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "admissionregistration_v1beta1" + ], + "x-kubernetes-action": "list", + "x-kubernetes-group-version-kind": { + "group": "admissionregistration.k8s.io", + "kind": "ValidatingWebhookConfiguration", + "version": "v1beta1" + } + }, + "parameters": [ + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "post": { + "consumes": [ + "*/*" + ], + "description": "create a ValidatingWebhookConfiguration", + "operationId": "createAdmissionregistrationV1beta1ValidatingWebhookConfiguration", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.admissionregistration.v1beta1.ValidatingWebhookConfiguration" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.admissionregistration.v1beta1.ValidatingWebhookConfiguration" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.admissionregistration.v1beta1.ValidatingWebhookConfiguration" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.api.admissionregistration.v1beta1.ValidatingWebhookConfiguration" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "admissionregistration_v1beta1" + ], + "x-kubernetes-action": "post", + "x-kubernetes-group-version-kind": { + "group": "admissionregistration.k8s.io", + "kind": "ValidatingWebhookConfiguration", + "version": "v1beta1" + } + } + }, + "/apis/admissionregistration.k8s.io/v1beta1/validatingwebhookconfigurations/{name}": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete a ValidatingWebhookConfiguration", + "operationId": "deleteAdmissionregistrationV1beta1ValidatingWebhookConfiguration", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "admissionregistration_v1beta1" + ], + "x-kubernetes-action": "delete", + "x-kubernetes-group-version-kind": { + "group": "admissionregistration.k8s.io", + "kind": "ValidatingWebhookConfiguration", + "version": "v1beta1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "read the specified ValidatingWebhookConfiguration", + "operationId": "readAdmissionregistrationV1beta1ValidatingWebhookConfiguration", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.admissionregistration.v1beta1.ValidatingWebhookConfiguration" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "admissionregistration_v1beta1" + ], + "x-kubernetes-action": "get", + "x-kubernetes-group-version-kind": { + "group": "admissionregistration.k8s.io", + "kind": "ValidatingWebhookConfiguration", + "version": "v1beta1" + } + }, + "parameters": [ + { + "description": "name of the ValidatingWebhookConfiguration", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "patch": { + "consumes": [ + "application/json-patch+json", + "application/merge-patch+json", + "application/strategic-merge-patch+json", + "application/apply-patch+yaml" + ], + "description": "partially update the specified ValidatingWebhookConfiguration", + "operationId": "patchAdmissionregistrationV1beta1ValidatingWebhookConfiguration", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Patch" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + }, + { + "description": "Force is going to \"force\" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.", + "in": "query", + "name": "force", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.admissionregistration.v1beta1.ValidatingWebhookConfiguration" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "admissionregistration_v1beta1" + ], + "x-kubernetes-action": "patch", + "x-kubernetes-group-version-kind": { + "group": "admissionregistration.k8s.io", + "kind": "ValidatingWebhookConfiguration", + "version": "v1beta1" + } + }, + "put": { + "consumes": [ + "*/*" + ], + "description": "replace the specified ValidatingWebhookConfiguration", + "operationId": "replaceAdmissionregistrationV1beta1ValidatingWebhookConfiguration", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.admissionregistration.v1beta1.ValidatingWebhookConfiguration" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.admissionregistration.v1beta1.ValidatingWebhookConfiguration" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.admissionregistration.v1beta1.ValidatingWebhookConfiguration" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "admissionregistration_v1beta1" + ], + "x-kubernetes-action": "put", + "x-kubernetes-group-version-kind": { + "group": "admissionregistration.k8s.io", + "kind": "ValidatingWebhookConfiguration", + "version": "v1beta1" + } + } + }, + "/apis/admissionregistration.k8s.io/v1beta1/watch/mutatingwebhookconfigurations": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch individual changes to a list of MutatingWebhookConfiguration. deprecated: use the 'watch' parameter with a list operation instead.", + "operationId": "watchAdmissionregistrationV1beta1MutatingWebhookConfigurationList", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "admissionregistration_v1beta1" + ], + "x-kubernetes-action": "watchlist", + "x-kubernetes-group-version-kind": { + "group": "admissionregistration.k8s.io", + "kind": "MutatingWebhookConfiguration", + "version": "v1beta1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/admissionregistration.k8s.io/v1beta1/watch/mutatingwebhookconfigurations/{name}": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch changes to an object of kind MutatingWebhookConfiguration. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.", + "operationId": "watchAdmissionregistrationV1beta1MutatingWebhookConfiguration", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "admissionregistration_v1beta1" + ], + "x-kubernetes-action": "watch", + "x-kubernetes-group-version-kind": { + "group": "admissionregistration.k8s.io", + "kind": "MutatingWebhookConfiguration", + "version": "v1beta1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "name of the MutatingWebhookConfiguration", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/admissionregistration.k8s.io/v1beta1/watch/validatingwebhookconfigurations": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch individual changes to a list of ValidatingWebhookConfiguration. deprecated: use the 'watch' parameter with a list operation instead.", + "operationId": "watchAdmissionregistrationV1beta1ValidatingWebhookConfigurationList", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "admissionregistration_v1beta1" + ], + "x-kubernetes-action": "watchlist", + "x-kubernetes-group-version-kind": { + "group": "admissionregistration.k8s.io", + "kind": "ValidatingWebhookConfiguration", + "version": "v1beta1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/admissionregistration.k8s.io/v1beta1/watch/validatingwebhookconfigurations/{name}": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch changes to an object of kind ValidatingWebhookConfiguration. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.", + "operationId": "watchAdmissionregistrationV1beta1ValidatingWebhookConfiguration", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "admissionregistration_v1beta1" + ], + "x-kubernetes-action": "watch", + "x-kubernetes-group-version-kind": { + "group": "admissionregistration.k8s.io", + "kind": "ValidatingWebhookConfiguration", + "version": "v1beta1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "name of the ValidatingWebhookConfiguration", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/apiextensions.k8s.io/": { + "get": { + "consumes": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "description": "get information of a group", + "operationId": "getApiextensionsAPIGroup", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.APIGroup" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "apiextensions" + ] + } + }, + "/apis/apiextensions.k8s.io/v1/": { + "get": { + "consumes": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "description": "get available resources", + "operationId": "getApiextensionsV1APIResources", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.APIResourceList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "apiextensions_v1" + ] + } + }, + "/apis/apiextensions.k8s.io/v1/customresourcedefinitions": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete collection of CustomResourceDefinition", + "operationId": "deleteApiextensionsV1CollectionCustomResourceDefinition", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "apiextensions_v1" + ], + "x-kubernetes-action": "deletecollection", + "x-kubernetes-group-version-kind": { + "group": "apiextensions.k8s.io", + "kind": "CustomResourceDefinition", + "version": "v1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "list or watch objects of kind CustomResourceDefinition", + "operationId": "listApiextensionsV1CustomResourceDefinition", + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1.CustomResourceDefinitionList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "apiextensions_v1" + ], + "x-kubernetes-action": "list", + "x-kubernetes-group-version-kind": { + "group": "apiextensions.k8s.io", + "kind": "CustomResourceDefinition", + "version": "v1" + } + }, + "parameters": [ + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "post": { + "consumes": [ + "*/*" + ], + "description": "create a CustomResourceDefinition", + "operationId": "createApiextensionsV1CustomResourceDefinition", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1.CustomResourceDefinition" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1.CustomResourceDefinition" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1.CustomResourceDefinition" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1.CustomResourceDefinition" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "apiextensions_v1" + ], + "x-kubernetes-action": "post", + "x-kubernetes-group-version-kind": { + "group": "apiextensions.k8s.io", + "kind": "CustomResourceDefinition", + "version": "v1" + } + } + }, + "/apis/apiextensions.k8s.io/v1/customresourcedefinitions/{name}": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete a CustomResourceDefinition", + "operationId": "deleteApiextensionsV1CustomResourceDefinition", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "apiextensions_v1" + ], + "x-kubernetes-action": "delete", + "x-kubernetes-group-version-kind": { + "group": "apiextensions.k8s.io", + "kind": "CustomResourceDefinition", + "version": "v1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "read the specified CustomResourceDefinition", + "operationId": "readApiextensionsV1CustomResourceDefinition", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1.CustomResourceDefinition" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "apiextensions_v1" + ], + "x-kubernetes-action": "get", + "x-kubernetes-group-version-kind": { + "group": "apiextensions.k8s.io", + "kind": "CustomResourceDefinition", + "version": "v1" + } + }, + "parameters": [ + { + "description": "name of the CustomResourceDefinition", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "patch": { + "consumes": [ + "application/json-patch+json", + "application/merge-patch+json", + "application/strategic-merge-patch+json", + "application/apply-patch+yaml" + ], + "description": "partially update the specified CustomResourceDefinition", + "operationId": "patchApiextensionsV1CustomResourceDefinition", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Patch" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + }, + { + "description": "Force is going to \"force\" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.", + "in": "query", + "name": "force", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1.CustomResourceDefinition" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "apiextensions_v1" + ], + "x-kubernetes-action": "patch", + "x-kubernetes-group-version-kind": { + "group": "apiextensions.k8s.io", + "kind": "CustomResourceDefinition", + "version": "v1" + } + }, + "put": { + "consumes": [ + "*/*" + ], + "description": "replace the specified CustomResourceDefinition", + "operationId": "replaceApiextensionsV1CustomResourceDefinition", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1.CustomResourceDefinition" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1.CustomResourceDefinition" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1.CustomResourceDefinition" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "apiextensions_v1" + ], + "x-kubernetes-action": "put", + "x-kubernetes-group-version-kind": { + "group": "apiextensions.k8s.io", + "kind": "CustomResourceDefinition", + "version": "v1" + } + } + }, + "/apis/apiextensions.k8s.io/v1/customresourcedefinitions/{name}/status": { + "get": { + "consumes": [ + "*/*" + ], + "description": "read status of the specified CustomResourceDefinition", + "operationId": "readApiextensionsV1CustomResourceDefinitionStatus", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1.CustomResourceDefinition" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "apiextensions_v1" + ], + "x-kubernetes-action": "get", + "x-kubernetes-group-version-kind": { + "group": "apiextensions.k8s.io", + "kind": "CustomResourceDefinition", + "version": "v1" + } + }, + "parameters": [ + { + "description": "name of the CustomResourceDefinition", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "patch": { + "consumes": [ + "application/json-patch+json", + "application/merge-patch+json", + "application/strategic-merge-patch+json", + "application/apply-patch+yaml" + ], + "description": "partially update status of the specified CustomResourceDefinition", + "operationId": "patchApiextensionsV1CustomResourceDefinitionStatus", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Patch" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + }, + { + "description": "Force is going to \"force\" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.", + "in": "query", + "name": "force", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1.CustomResourceDefinition" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "apiextensions_v1" + ], + "x-kubernetes-action": "patch", + "x-kubernetes-group-version-kind": { + "group": "apiextensions.k8s.io", + "kind": "CustomResourceDefinition", + "version": "v1" + } + }, + "put": { + "consumes": [ + "*/*" + ], + "description": "replace status of the specified CustomResourceDefinition", + "operationId": "replaceApiextensionsV1CustomResourceDefinitionStatus", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1.CustomResourceDefinition" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1.CustomResourceDefinition" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1.CustomResourceDefinition" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "apiextensions_v1" + ], + "x-kubernetes-action": "put", + "x-kubernetes-group-version-kind": { + "group": "apiextensions.k8s.io", + "kind": "CustomResourceDefinition", + "version": "v1" + } + } + }, + "/apis/apiextensions.k8s.io/v1/watch/customresourcedefinitions": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch individual changes to a list of CustomResourceDefinition. deprecated: use the 'watch' parameter with a list operation instead.", + "operationId": "watchApiextensionsV1CustomResourceDefinitionList", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "apiextensions_v1" + ], + "x-kubernetes-action": "watchlist", + "x-kubernetes-group-version-kind": { + "group": "apiextensions.k8s.io", + "kind": "CustomResourceDefinition", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/apiextensions.k8s.io/v1/watch/customresourcedefinitions/{name}": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch changes to an object of kind CustomResourceDefinition. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.", + "operationId": "watchApiextensionsV1CustomResourceDefinition", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "apiextensions_v1" + ], + "x-kubernetes-action": "watch", + "x-kubernetes-group-version-kind": { + "group": "apiextensions.k8s.io", + "kind": "CustomResourceDefinition", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "name of the CustomResourceDefinition", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/apiextensions.k8s.io/v1beta1/": { + "get": { + "consumes": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "description": "get available resources", + "operationId": "getApiextensionsV1beta1APIResources", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.APIResourceList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "apiextensions_v1beta1" + ] + } + }, + "/apis/apiextensions.k8s.io/v1beta1/customresourcedefinitions": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete collection of CustomResourceDefinition", + "operationId": "deleteApiextensionsV1beta1CollectionCustomResourceDefinition", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "apiextensions_v1beta1" + ], + "x-kubernetes-action": "deletecollection", + "x-kubernetes-group-version-kind": { + "group": "apiextensions.k8s.io", + "kind": "CustomResourceDefinition", + "version": "v1beta1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "list or watch objects of kind CustomResourceDefinition", + "operationId": "listApiextensionsV1beta1CustomResourceDefinition", + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1beta1.CustomResourceDefinitionList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "apiextensions_v1beta1" + ], + "x-kubernetes-action": "list", + "x-kubernetes-group-version-kind": { + "group": "apiextensions.k8s.io", + "kind": "CustomResourceDefinition", + "version": "v1beta1" + } + }, + "parameters": [ + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "post": { + "consumes": [ + "*/*" + ], + "description": "create a CustomResourceDefinition", + "operationId": "createApiextensionsV1beta1CustomResourceDefinition", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1beta1.CustomResourceDefinition" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1beta1.CustomResourceDefinition" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1beta1.CustomResourceDefinition" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1beta1.CustomResourceDefinition" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "apiextensions_v1beta1" + ], + "x-kubernetes-action": "post", + "x-kubernetes-group-version-kind": { + "group": "apiextensions.k8s.io", + "kind": "CustomResourceDefinition", + "version": "v1beta1" + } + } + }, + "/apis/apiextensions.k8s.io/v1beta1/customresourcedefinitions/{name}": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete a CustomResourceDefinition", + "operationId": "deleteApiextensionsV1beta1CustomResourceDefinition", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "apiextensions_v1beta1" + ], + "x-kubernetes-action": "delete", + "x-kubernetes-group-version-kind": { + "group": "apiextensions.k8s.io", + "kind": "CustomResourceDefinition", + "version": "v1beta1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "read the specified CustomResourceDefinition", + "operationId": "readApiextensionsV1beta1CustomResourceDefinition", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1beta1.CustomResourceDefinition" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "apiextensions_v1beta1" + ], + "x-kubernetes-action": "get", + "x-kubernetes-group-version-kind": { + "group": "apiextensions.k8s.io", + "kind": "CustomResourceDefinition", + "version": "v1beta1" + } + }, + "parameters": [ + { + "description": "name of the CustomResourceDefinition", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "patch": { + "consumes": [ + "application/json-patch+json", + "application/merge-patch+json", + "application/strategic-merge-patch+json", + "application/apply-patch+yaml" + ], + "description": "partially update the specified CustomResourceDefinition", + "operationId": "patchApiextensionsV1beta1CustomResourceDefinition", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Patch" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + }, + { + "description": "Force is going to \"force\" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.", + "in": "query", + "name": "force", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1beta1.CustomResourceDefinition" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "apiextensions_v1beta1" + ], + "x-kubernetes-action": "patch", + "x-kubernetes-group-version-kind": { + "group": "apiextensions.k8s.io", + "kind": "CustomResourceDefinition", + "version": "v1beta1" + } + }, + "put": { + "consumes": [ + "*/*" + ], + "description": "replace the specified CustomResourceDefinition", + "operationId": "replaceApiextensionsV1beta1CustomResourceDefinition", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1beta1.CustomResourceDefinition" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1beta1.CustomResourceDefinition" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1beta1.CustomResourceDefinition" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "apiextensions_v1beta1" + ], + "x-kubernetes-action": "put", + "x-kubernetes-group-version-kind": { + "group": "apiextensions.k8s.io", + "kind": "CustomResourceDefinition", + "version": "v1beta1" + } + } + }, + "/apis/apiextensions.k8s.io/v1beta1/customresourcedefinitions/{name}/status": { + "get": { + "consumes": [ + "*/*" + ], + "description": "read status of the specified CustomResourceDefinition", + "operationId": "readApiextensionsV1beta1CustomResourceDefinitionStatus", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1beta1.CustomResourceDefinition" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "apiextensions_v1beta1" + ], + "x-kubernetes-action": "get", + "x-kubernetes-group-version-kind": { + "group": "apiextensions.k8s.io", + "kind": "CustomResourceDefinition", + "version": "v1beta1" + } + }, + "parameters": [ + { + "description": "name of the CustomResourceDefinition", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "patch": { + "consumes": [ + "application/json-patch+json", + "application/merge-patch+json", + "application/strategic-merge-patch+json", + "application/apply-patch+yaml" + ], + "description": "partially update status of the specified CustomResourceDefinition", + "operationId": "patchApiextensionsV1beta1CustomResourceDefinitionStatus", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Patch" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + }, + { + "description": "Force is going to \"force\" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.", + "in": "query", + "name": "force", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1beta1.CustomResourceDefinition" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "apiextensions_v1beta1" + ], + "x-kubernetes-action": "patch", + "x-kubernetes-group-version-kind": { + "group": "apiextensions.k8s.io", + "kind": "CustomResourceDefinition", + "version": "v1beta1" + } + }, + "put": { + "consumes": [ + "*/*" + ], + "description": "replace status of the specified CustomResourceDefinition", + "operationId": "replaceApiextensionsV1beta1CustomResourceDefinitionStatus", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1beta1.CustomResourceDefinition" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1beta1.CustomResourceDefinition" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1beta1.CustomResourceDefinition" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "apiextensions_v1beta1" + ], + "x-kubernetes-action": "put", + "x-kubernetes-group-version-kind": { + "group": "apiextensions.k8s.io", + "kind": "CustomResourceDefinition", + "version": "v1beta1" + } + } + }, + "/apis/apiextensions.k8s.io/v1beta1/watch/customresourcedefinitions": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch individual changes to a list of CustomResourceDefinition. deprecated: use the 'watch' parameter with a list operation instead.", + "operationId": "watchApiextensionsV1beta1CustomResourceDefinitionList", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "apiextensions_v1beta1" + ], + "x-kubernetes-action": "watchlist", + "x-kubernetes-group-version-kind": { + "group": "apiextensions.k8s.io", + "kind": "CustomResourceDefinition", + "version": "v1beta1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/apiextensions.k8s.io/v1beta1/watch/customresourcedefinitions/{name}": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch changes to an object of kind CustomResourceDefinition. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.", + "operationId": "watchApiextensionsV1beta1CustomResourceDefinition", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "apiextensions_v1beta1" + ], + "x-kubernetes-action": "watch", + "x-kubernetes-group-version-kind": { + "group": "apiextensions.k8s.io", + "kind": "CustomResourceDefinition", + "version": "v1beta1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "name of the CustomResourceDefinition", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/apiregistration.k8s.io/": { + "get": { + "consumes": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "description": "get information of a group", + "operationId": "getApiregistrationAPIGroup", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.APIGroup" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "apiregistration" + ] + } + }, + "/apis/apiregistration.k8s.io/v1/": { + "get": { + "consumes": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "description": "get available resources", + "operationId": "getApiregistrationV1APIResources", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.APIResourceList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "apiregistration_v1" + ] + } + }, + "/apis/apiregistration.k8s.io/v1/apiservices": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete collection of APIService", + "operationId": "deleteApiregistrationV1CollectionAPIService", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "apiregistration_v1" + ], + "x-kubernetes-action": "deletecollection", + "x-kubernetes-group-version-kind": { + "group": "apiregistration.k8s.io", + "kind": "APIService", + "version": "v1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "list or watch objects of kind APIService", + "operationId": "listApiregistrationV1APIService", + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.kube-aggregator.pkg.apis.apiregistration.v1.APIServiceList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "apiregistration_v1" + ], + "x-kubernetes-action": "list", + "x-kubernetes-group-version-kind": { + "group": "apiregistration.k8s.io", + "kind": "APIService", + "version": "v1" + } + }, + "parameters": [ + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "post": { + "consumes": [ + "*/*" + ], + "description": "create an APIService", + "operationId": "createApiregistrationV1APIService", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.kube-aggregator.pkg.apis.apiregistration.v1.APIService" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.kube-aggregator.pkg.apis.apiregistration.v1.APIService" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.kube-aggregator.pkg.apis.apiregistration.v1.APIService" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.kube-aggregator.pkg.apis.apiregistration.v1.APIService" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "apiregistration_v1" + ], + "x-kubernetes-action": "post", + "x-kubernetes-group-version-kind": { + "group": "apiregistration.k8s.io", + "kind": "APIService", + "version": "v1" + } + } + }, + "/apis/apiregistration.k8s.io/v1/apiservices/{name}": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete an APIService", + "operationId": "deleteApiregistrationV1APIService", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "apiregistration_v1" + ], + "x-kubernetes-action": "delete", + "x-kubernetes-group-version-kind": { + "group": "apiregistration.k8s.io", + "kind": "APIService", + "version": "v1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "read the specified APIService", + "operationId": "readApiregistrationV1APIService", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.kube-aggregator.pkg.apis.apiregistration.v1.APIService" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "apiregistration_v1" + ], + "x-kubernetes-action": "get", + "x-kubernetes-group-version-kind": { + "group": "apiregistration.k8s.io", + "kind": "APIService", + "version": "v1" + } + }, + "parameters": [ + { + "description": "name of the APIService", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "patch": { + "consumes": [ + "application/json-patch+json", + "application/merge-patch+json", + "application/strategic-merge-patch+json", + "application/apply-patch+yaml" + ], + "description": "partially update the specified APIService", + "operationId": "patchApiregistrationV1APIService", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Patch" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + }, + { + "description": "Force is going to \"force\" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.", + "in": "query", + "name": "force", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.kube-aggregator.pkg.apis.apiregistration.v1.APIService" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "apiregistration_v1" + ], + "x-kubernetes-action": "patch", + "x-kubernetes-group-version-kind": { + "group": "apiregistration.k8s.io", + "kind": "APIService", + "version": "v1" + } + }, + "put": { + "consumes": [ + "*/*" + ], + "description": "replace the specified APIService", + "operationId": "replaceApiregistrationV1APIService", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.kube-aggregator.pkg.apis.apiregistration.v1.APIService" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.kube-aggregator.pkg.apis.apiregistration.v1.APIService" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.kube-aggregator.pkg.apis.apiregistration.v1.APIService" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "apiregistration_v1" + ], + "x-kubernetes-action": "put", + "x-kubernetes-group-version-kind": { + "group": "apiregistration.k8s.io", + "kind": "APIService", + "version": "v1" + } + } + }, + "/apis/apiregistration.k8s.io/v1/apiservices/{name}/status": { + "get": { + "consumes": [ + "*/*" + ], + "description": "read status of the specified APIService", + "operationId": "readApiregistrationV1APIServiceStatus", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.kube-aggregator.pkg.apis.apiregistration.v1.APIService" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "apiregistration_v1" + ], + "x-kubernetes-action": "get", + "x-kubernetes-group-version-kind": { + "group": "apiregistration.k8s.io", + "kind": "APIService", + "version": "v1" + } + }, + "parameters": [ + { + "description": "name of the APIService", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "patch": { + "consumes": [ + "application/json-patch+json", + "application/merge-patch+json", + "application/strategic-merge-patch+json", + "application/apply-patch+yaml" + ], + "description": "partially update status of the specified APIService", + "operationId": "patchApiregistrationV1APIServiceStatus", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Patch" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + }, + { + "description": "Force is going to \"force\" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.", + "in": "query", + "name": "force", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.kube-aggregator.pkg.apis.apiregistration.v1.APIService" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "apiregistration_v1" + ], + "x-kubernetes-action": "patch", + "x-kubernetes-group-version-kind": { + "group": "apiregistration.k8s.io", + "kind": "APIService", + "version": "v1" + } + }, + "put": { + "consumes": [ + "*/*" + ], + "description": "replace status of the specified APIService", + "operationId": "replaceApiregistrationV1APIServiceStatus", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.kube-aggregator.pkg.apis.apiregistration.v1.APIService" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.kube-aggregator.pkg.apis.apiregistration.v1.APIService" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.kube-aggregator.pkg.apis.apiregistration.v1.APIService" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "apiregistration_v1" + ], + "x-kubernetes-action": "put", + "x-kubernetes-group-version-kind": { + "group": "apiregistration.k8s.io", + "kind": "APIService", + "version": "v1" + } + } + }, + "/apis/apiregistration.k8s.io/v1/watch/apiservices": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch individual changes to a list of APIService. deprecated: use the 'watch' parameter with a list operation instead.", + "operationId": "watchApiregistrationV1APIServiceList", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "apiregistration_v1" + ], + "x-kubernetes-action": "watchlist", + "x-kubernetes-group-version-kind": { + "group": "apiregistration.k8s.io", + "kind": "APIService", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/apiregistration.k8s.io/v1/watch/apiservices/{name}": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch changes to an object of kind APIService. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.", + "operationId": "watchApiregistrationV1APIService", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "apiregistration_v1" + ], + "x-kubernetes-action": "watch", + "x-kubernetes-group-version-kind": { + "group": "apiregistration.k8s.io", + "kind": "APIService", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "name of the APIService", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/apiregistration.k8s.io/v1beta1/": { + "get": { + "consumes": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "description": "get available resources", + "operationId": "getApiregistrationV1beta1APIResources", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.APIResourceList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "apiregistration_v1beta1" + ] + } + }, + "/apis/apiregistration.k8s.io/v1beta1/apiservices": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete collection of APIService", + "operationId": "deleteApiregistrationV1beta1CollectionAPIService", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "apiregistration_v1beta1" + ], + "x-kubernetes-action": "deletecollection", + "x-kubernetes-group-version-kind": { + "group": "apiregistration.k8s.io", + "kind": "APIService", + "version": "v1beta1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "list or watch objects of kind APIService", + "operationId": "listApiregistrationV1beta1APIService", + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.kube-aggregator.pkg.apis.apiregistration.v1beta1.APIServiceList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "apiregistration_v1beta1" + ], + "x-kubernetes-action": "list", + "x-kubernetes-group-version-kind": { + "group": "apiregistration.k8s.io", + "kind": "APIService", + "version": "v1beta1" + } + }, + "parameters": [ + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "post": { + "consumes": [ + "*/*" + ], + "description": "create an APIService", + "operationId": "createApiregistrationV1beta1APIService", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.kube-aggregator.pkg.apis.apiregistration.v1beta1.APIService" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.kube-aggregator.pkg.apis.apiregistration.v1beta1.APIService" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.kube-aggregator.pkg.apis.apiregistration.v1beta1.APIService" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.kube-aggregator.pkg.apis.apiregistration.v1beta1.APIService" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "apiregistration_v1beta1" + ], + "x-kubernetes-action": "post", + "x-kubernetes-group-version-kind": { + "group": "apiregistration.k8s.io", + "kind": "APIService", + "version": "v1beta1" + } + } + }, + "/apis/apiregistration.k8s.io/v1beta1/apiservices/{name}": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete an APIService", + "operationId": "deleteApiregistrationV1beta1APIService", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "apiregistration_v1beta1" + ], + "x-kubernetes-action": "delete", + "x-kubernetes-group-version-kind": { + "group": "apiregistration.k8s.io", + "kind": "APIService", + "version": "v1beta1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "read the specified APIService", + "operationId": "readApiregistrationV1beta1APIService", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.kube-aggregator.pkg.apis.apiregistration.v1beta1.APIService" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "apiregistration_v1beta1" + ], + "x-kubernetes-action": "get", + "x-kubernetes-group-version-kind": { + "group": "apiregistration.k8s.io", + "kind": "APIService", + "version": "v1beta1" + } + }, + "parameters": [ + { + "description": "name of the APIService", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "patch": { + "consumes": [ + "application/json-patch+json", + "application/merge-patch+json", + "application/strategic-merge-patch+json", + "application/apply-patch+yaml" + ], + "description": "partially update the specified APIService", + "operationId": "patchApiregistrationV1beta1APIService", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Patch" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + }, + { + "description": "Force is going to \"force\" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.", + "in": "query", + "name": "force", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.kube-aggregator.pkg.apis.apiregistration.v1beta1.APIService" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "apiregistration_v1beta1" + ], + "x-kubernetes-action": "patch", + "x-kubernetes-group-version-kind": { + "group": "apiregistration.k8s.io", + "kind": "APIService", + "version": "v1beta1" + } + }, + "put": { + "consumes": [ + "*/*" + ], + "description": "replace the specified APIService", + "operationId": "replaceApiregistrationV1beta1APIService", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.kube-aggregator.pkg.apis.apiregistration.v1beta1.APIService" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.kube-aggregator.pkg.apis.apiregistration.v1beta1.APIService" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.kube-aggregator.pkg.apis.apiregistration.v1beta1.APIService" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "apiregistration_v1beta1" + ], + "x-kubernetes-action": "put", + "x-kubernetes-group-version-kind": { + "group": "apiregistration.k8s.io", + "kind": "APIService", + "version": "v1beta1" + } + } + }, + "/apis/apiregistration.k8s.io/v1beta1/apiservices/{name}/status": { + "get": { + "consumes": [ + "*/*" + ], + "description": "read status of the specified APIService", + "operationId": "readApiregistrationV1beta1APIServiceStatus", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.kube-aggregator.pkg.apis.apiregistration.v1beta1.APIService" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "apiregistration_v1beta1" + ], + "x-kubernetes-action": "get", + "x-kubernetes-group-version-kind": { + "group": "apiregistration.k8s.io", + "kind": "APIService", + "version": "v1beta1" + } + }, + "parameters": [ + { + "description": "name of the APIService", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "patch": { + "consumes": [ + "application/json-patch+json", + "application/merge-patch+json", + "application/strategic-merge-patch+json", + "application/apply-patch+yaml" + ], + "description": "partially update status of the specified APIService", + "operationId": "patchApiregistrationV1beta1APIServiceStatus", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Patch" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + }, + { + "description": "Force is going to \"force\" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.", + "in": "query", + "name": "force", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.kube-aggregator.pkg.apis.apiregistration.v1beta1.APIService" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "apiregistration_v1beta1" + ], + "x-kubernetes-action": "patch", + "x-kubernetes-group-version-kind": { + "group": "apiregistration.k8s.io", + "kind": "APIService", + "version": "v1beta1" + } + }, + "put": { + "consumes": [ + "*/*" + ], + "description": "replace status of the specified APIService", + "operationId": "replaceApiregistrationV1beta1APIServiceStatus", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.kube-aggregator.pkg.apis.apiregistration.v1beta1.APIService" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.kube-aggregator.pkg.apis.apiregistration.v1beta1.APIService" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.kube-aggregator.pkg.apis.apiregistration.v1beta1.APIService" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "apiregistration_v1beta1" + ], + "x-kubernetes-action": "put", + "x-kubernetes-group-version-kind": { + "group": "apiregistration.k8s.io", + "kind": "APIService", + "version": "v1beta1" + } + } + }, + "/apis/apiregistration.k8s.io/v1beta1/watch/apiservices": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch individual changes to a list of APIService. deprecated: use the 'watch' parameter with a list operation instead.", + "operationId": "watchApiregistrationV1beta1APIServiceList", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "apiregistration_v1beta1" + ], + "x-kubernetes-action": "watchlist", + "x-kubernetes-group-version-kind": { + "group": "apiregistration.k8s.io", + "kind": "APIService", + "version": "v1beta1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/apiregistration.k8s.io/v1beta1/watch/apiservices/{name}": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch changes to an object of kind APIService. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.", + "operationId": "watchApiregistrationV1beta1APIService", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "apiregistration_v1beta1" + ], + "x-kubernetes-action": "watch", + "x-kubernetes-group-version-kind": { + "group": "apiregistration.k8s.io", + "kind": "APIService", + "version": "v1beta1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "name of the APIService", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/apps/": { + "get": { + "consumes": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "description": "get information of a group", + "operationId": "getAppsAPIGroup", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.APIGroup" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "apps" + ] + } + }, + "/apis/apps/v1/": { + "get": { + "consumes": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "description": "get available resources", + "operationId": "getAppsV1APIResources", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.APIResourceList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "apps_v1" + ] + } + }, + "/apis/apps/v1/controllerrevisions": { + "get": { + "consumes": [ + "*/*" + ], + "description": "list or watch objects of kind ControllerRevision", + "operationId": "listAppsV1ControllerRevisionForAllNamespaces", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.apps.v1.ControllerRevisionList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "apps_v1" + ], + "x-kubernetes-action": "list", + "x-kubernetes-group-version-kind": { + "group": "apps", + "kind": "ControllerRevision", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/apps/v1/daemonsets": { + "get": { + "consumes": [ + "*/*" + ], + "description": "list or watch objects of kind DaemonSet", + "operationId": "listAppsV1DaemonSetForAllNamespaces", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.apps.v1.DaemonSetList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "apps_v1" + ], + "x-kubernetes-action": "list", + "x-kubernetes-group-version-kind": { + "group": "apps", + "kind": "DaemonSet", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/apps/v1/deployments": { + "get": { + "consumes": [ + "*/*" + ], + "description": "list or watch objects of kind Deployment", + "operationId": "listAppsV1DeploymentForAllNamespaces", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.apps.v1.DeploymentList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "apps_v1" + ], + "x-kubernetes-action": "list", + "x-kubernetes-group-version-kind": { + "group": "apps", + "kind": "Deployment", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/apps/v1/namespaces/{namespace}/controllerrevisions": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete collection of ControllerRevision", + "operationId": "deleteAppsV1CollectionNamespacedControllerRevision", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "apps_v1" + ], + "x-kubernetes-action": "deletecollection", + "x-kubernetes-group-version-kind": { + "group": "apps", + "kind": "ControllerRevision", + "version": "v1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "list or watch objects of kind ControllerRevision", + "operationId": "listAppsV1NamespacedControllerRevision", + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.apps.v1.ControllerRevisionList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "apps_v1" + ], + "x-kubernetes-action": "list", + "x-kubernetes-group-version-kind": { + "group": "apps", + "kind": "ControllerRevision", + "version": "v1" + } + }, + "parameters": [ + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "post": { + "consumes": [ + "*/*" + ], + "description": "create a ControllerRevision", + "operationId": "createAppsV1NamespacedControllerRevision", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.apps.v1.ControllerRevision" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.apps.v1.ControllerRevision" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.apps.v1.ControllerRevision" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.api.apps.v1.ControllerRevision" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "apps_v1" + ], + "x-kubernetes-action": "post", + "x-kubernetes-group-version-kind": { + "group": "apps", + "kind": "ControllerRevision", + "version": "v1" + } + } + }, + "/apis/apps/v1/namespaces/{namespace}/controllerrevisions/{name}": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete a ControllerRevision", + "operationId": "deleteAppsV1NamespacedControllerRevision", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "apps_v1" + ], + "x-kubernetes-action": "delete", + "x-kubernetes-group-version-kind": { + "group": "apps", + "kind": "ControllerRevision", + "version": "v1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "read the specified ControllerRevision", + "operationId": "readAppsV1NamespacedControllerRevision", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.apps.v1.ControllerRevision" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "apps_v1" + ], + "x-kubernetes-action": "get", + "x-kubernetes-group-version-kind": { + "group": "apps", + "kind": "ControllerRevision", + "version": "v1" + } + }, + "parameters": [ + { + "description": "name of the ControllerRevision", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "patch": { + "consumes": [ + "application/json-patch+json", + "application/merge-patch+json", + "application/strategic-merge-patch+json", + "application/apply-patch+yaml" + ], + "description": "partially update the specified ControllerRevision", + "operationId": "patchAppsV1NamespacedControllerRevision", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Patch" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + }, + { + "description": "Force is going to \"force\" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.", + "in": "query", + "name": "force", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.apps.v1.ControllerRevision" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "apps_v1" + ], + "x-kubernetes-action": "patch", + "x-kubernetes-group-version-kind": { + "group": "apps", + "kind": "ControllerRevision", + "version": "v1" + } + }, + "put": { + "consumes": [ + "*/*" + ], + "description": "replace the specified ControllerRevision", + "operationId": "replaceAppsV1NamespacedControllerRevision", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.apps.v1.ControllerRevision" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.apps.v1.ControllerRevision" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.apps.v1.ControllerRevision" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "apps_v1" + ], + "x-kubernetes-action": "put", + "x-kubernetes-group-version-kind": { + "group": "apps", + "kind": "ControllerRevision", + "version": "v1" + } + } + }, + "/apis/apps/v1/namespaces/{namespace}/daemonsets": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete collection of DaemonSet", + "operationId": "deleteAppsV1CollectionNamespacedDaemonSet", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "apps_v1" + ], + "x-kubernetes-action": "deletecollection", + "x-kubernetes-group-version-kind": { + "group": "apps", + "kind": "DaemonSet", + "version": "v1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "list or watch objects of kind DaemonSet", + "operationId": "listAppsV1NamespacedDaemonSet", + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.apps.v1.DaemonSetList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "apps_v1" + ], + "x-kubernetes-action": "list", + "x-kubernetes-group-version-kind": { + "group": "apps", + "kind": "DaemonSet", + "version": "v1" + } + }, + "parameters": [ + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "post": { + "consumes": [ + "*/*" + ], + "description": "create a DaemonSet", + "operationId": "createAppsV1NamespacedDaemonSet", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.apps.v1.DaemonSet" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.apps.v1.DaemonSet" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.apps.v1.DaemonSet" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.api.apps.v1.DaemonSet" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "apps_v1" + ], + "x-kubernetes-action": "post", + "x-kubernetes-group-version-kind": { + "group": "apps", + "kind": "DaemonSet", + "version": "v1" + } + } + }, + "/apis/apps/v1/namespaces/{namespace}/daemonsets/{name}": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete a DaemonSet", + "operationId": "deleteAppsV1NamespacedDaemonSet", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "apps_v1" + ], + "x-kubernetes-action": "delete", + "x-kubernetes-group-version-kind": { + "group": "apps", + "kind": "DaemonSet", + "version": "v1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "read the specified DaemonSet", + "operationId": "readAppsV1NamespacedDaemonSet", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.apps.v1.DaemonSet" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "apps_v1" + ], + "x-kubernetes-action": "get", + "x-kubernetes-group-version-kind": { + "group": "apps", + "kind": "DaemonSet", + "version": "v1" + } + }, + "parameters": [ + { + "description": "name of the DaemonSet", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "patch": { + "consumes": [ + "application/json-patch+json", + "application/merge-patch+json", + "application/strategic-merge-patch+json", + "application/apply-patch+yaml" + ], + "description": "partially update the specified DaemonSet", + "operationId": "patchAppsV1NamespacedDaemonSet", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Patch" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + }, + { + "description": "Force is going to \"force\" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.", + "in": "query", + "name": "force", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.apps.v1.DaemonSet" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "apps_v1" + ], + "x-kubernetes-action": "patch", + "x-kubernetes-group-version-kind": { + "group": "apps", + "kind": "DaemonSet", + "version": "v1" + } + }, + "put": { + "consumes": [ + "*/*" + ], + "description": "replace the specified DaemonSet", + "operationId": "replaceAppsV1NamespacedDaemonSet", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.apps.v1.DaemonSet" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.apps.v1.DaemonSet" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.apps.v1.DaemonSet" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "apps_v1" + ], + "x-kubernetes-action": "put", + "x-kubernetes-group-version-kind": { + "group": "apps", + "kind": "DaemonSet", + "version": "v1" + } + } + }, + "/apis/apps/v1/namespaces/{namespace}/daemonsets/{name}/status": { + "get": { + "consumes": [ + "*/*" + ], + "description": "read status of the specified DaemonSet", + "operationId": "readAppsV1NamespacedDaemonSetStatus", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.apps.v1.DaemonSet" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "apps_v1" + ], + "x-kubernetes-action": "get", + "x-kubernetes-group-version-kind": { + "group": "apps", + "kind": "DaemonSet", + "version": "v1" + } + }, + "parameters": [ + { + "description": "name of the DaemonSet", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "patch": { + "consumes": [ + "application/json-patch+json", + "application/merge-patch+json", + "application/strategic-merge-patch+json", + "application/apply-patch+yaml" + ], + "description": "partially update status of the specified DaemonSet", + "operationId": "patchAppsV1NamespacedDaemonSetStatus", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Patch" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + }, + { + "description": "Force is going to \"force\" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.", + "in": "query", + "name": "force", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.apps.v1.DaemonSet" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "apps_v1" + ], + "x-kubernetes-action": "patch", + "x-kubernetes-group-version-kind": { + "group": "apps", + "kind": "DaemonSet", + "version": "v1" + } + }, + "put": { + "consumes": [ + "*/*" + ], + "description": "replace status of the specified DaemonSet", + "operationId": "replaceAppsV1NamespacedDaemonSetStatus", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.apps.v1.DaemonSet" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.apps.v1.DaemonSet" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.apps.v1.DaemonSet" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "apps_v1" + ], + "x-kubernetes-action": "put", + "x-kubernetes-group-version-kind": { + "group": "apps", + "kind": "DaemonSet", + "version": "v1" + } + } + }, + "/apis/apps/v1/namespaces/{namespace}/deployments": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete collection of Deployment", + "operationId": "deleteAppsV1CollectionNamespacedDeployment", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "apps_v1" + ], + "x-kubernetes-action": "deletecollection", + "x-kubernetes-group-version-kind": { + "group": "apps", + "kind": "Deployment", + "version": "v1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "list or watch objects of kind Deployment", + "operationId": "listAppsV1NamespacedDeployment", + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.apps.v1.DeploymentList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "apps_v1" + ], + "x-kubernetes-action": "list", + "x-kubernetes-group-version-kind": { + "group": "apps", + "kind": "Deployment", + "version": "v1" + } + }, + "parameters": [ + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "post": { + "consumes": [ + "*/*" + ], + "description": "create a Deployment", + "operationId": "createAppsV1NamespacedDeployment", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.apps.v1.Deployment" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.apps.v1.Deployment" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.apps.v1.Deployment" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.api.apps.v1.Deployment" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "apps_v1" + ], + "x-kubernetes-action": "post", + "x-kubernetes-group-version-kind": { + "group": "apps", + "kind": "Deployment", + "version": "v1" + } + } + }, + "/apis/apps/v1/namespaces/{namespace}/deployments/{name}": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete a Deployment", + "operationId": "deleteAppsV1NamespacedDeployment", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "apps_v1" + ], + "x-kubernetes-action": "delete", + "x-kubernetes-group-version-kind": { + "group": "apps", + "kind": "Deployment", + "version": "v1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "read the specified Deployment", + "operationId": "readAppsV1NamespacedDeployment", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.apps.v1.Deployment" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "apps_v1" + ], + "x-kubernetes-action": "get", + "x-kubernetes-group-version-kind": { + "group": "apps", + "kind": "Deployment", + "version": "v1" + } + }, + "parameters": [ + { + "description": "name of the Deployment", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "patch": { + "consumes": [ + "application/json-patch+json", + "application/merge-patch+json", + "application/strategic-merge-patch+json", + "application/apply-patch+yaml" + ], + "description": "partially update the specified Deployment", + "operationId": "patchAppsV1NamespacedDeployment", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Patch" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + }, + { + "description": "Force is going to \"force\" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.", + "in": "query", + "name": "force", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.apps.v1.Deployment" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "apps_v1" + ], + "x-kubernetes-action": "patch", + "x-kubernetes-group-version-kind": { + "group": "apps", + "kind": "Deployment", + "version": "v1" + } + }, + "put": { + "consumes": [ + "*/*" + ], + "description": "replace the specified Deployment", + "operationId": "replaceAppsV1NamespacedDeployment", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.apps.v1.Deployment" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.apps.v1.Deployment" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.apps.v1.Deployment" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "apps_v1" + ], + "x-kubernetes-action": "put", + "x-kubernetes-group-version-kind": { + "group": "apps", + "kind": "Deployment", + "version": "v1" + } + } + }, + "/apis/apps/v1/namespaces/{namespace}/deployments/{name}/scale": { + "get": { + "consumes": [ + "*/*" + ], + "description": "read scale of the specified Deployment", + "operationId": "readAppsV1NamespacedDeploymentScale", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.autoscaling.v1.Scale" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "apps_v1" + ], + "x-kubernetes-action": "get", + "x-kubernetes-group-version-kind": { + "group": "autoscaling", + "kind": "Scale", + "version": "v1" + } + }, + "parameters": [ + { + "description": "name of the Scale", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "patch": { + "consumes": [ + "application/json-patch+json", + "application/merge-patch+json", + "application/strategic-merge-patch+json", + "application/apply-patch+yaml" + ], + "description": "partially update scale of the specified Deployment", + "operationId": "patchAppsV1NamespacedDeploymentScale", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Patch" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + }, + { + "description": "Force is going to \"force\" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.", + "in": "query", + "name": "force", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.autoscaling.v1.Scale" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "apps_v1" + ], + "x-kubernetes-action": "patch", + "x-kubernetes-group-version-kind": { + "group": "autoscaling", + "kind": "Scale", + "version": "v1" + } + }, + "put": { + "consumes": [ + "*/*" + ], + "description": "replace scale of the specified Deployment", + "operationId": "replaceAppsV1NamespacedDeploymentScale", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.autoscaling.v1.Scale" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.autoscaling.v1.Scale" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.autoscaling.v1.Scale" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "apps_v1" + ], + "x-kubernetes-action": "put", + "x-kubernetes-group-version-kind": { + "group": "autoscaling", + "kind": "Scale", + "version": "v1" + } + } + }, + "/apis/apps/v1/namespaces/{namespace}/deployments/{name}/status": { + "get": { + "consumes": [ + "*/*" + ], + "description": "read status of the specified Deployment", + "operationId": "readAppsV1NamespacedDeploymentStatus", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.apps.v1.Deployment" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "apps_v1" + ], + "x-kubernetes-action": "get", + "x-kubernetes-group-version-kind": { + "group": "apps", + "kind": "Deployment", + "version": "v1" + } + }, + "parameters": [ + { + "description": "name of the Deployment", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "patch": { + "consumes": [ + "application/json-patch+json", + "application/merge-patch+json", + "application/strategic-merge-patch+json", + "application/apply-patch+yaml" + ], + "description": "partially update status of the specified Deployment", + "operationId": "patchAppsV1NamespacedDeploymentStatus", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Patch" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + }, + { + "description": "Force is going to \"force\" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.", + "in": "query", + "name": "force", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.apps.v1.Deployment" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "apps_v1" + ], + "x-kubernetes-action": "patch", + "x-kubernetes-group-version-kind": { + "group": "apps", + "kind": "Deployment", + "version": "v1" + } + }, + "put": { + "consumes": [ + "*/*" + ], + "description": "replace status of the specified Deployment", + "operationId": "replaceAppsV1NamespacedDeploymentStatus", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.apps.v1.Deployment" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.apps.v1.Deployment" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.apps.v1.Deployment" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "apps_v1" + ], + "x-kubernetes-action": "put", + "x-kubernetes-group-version-kind": { + "group": "apps", + "kind": "Deployment", + "version": "v1" + } + } + }, + "/apis/apps/v1/namespaces/{namespace}/replicasets": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete collection of ReplicaSet", + "operationId": "deleteAppsV1CollectionNamespacedReplicaSet", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "apps_v1" + ], + "x-kubernetes-action": "deletecollection", + "x-kubernetes-group-version-kind": { + "group": "apps", + "kind": "ReplicaSet", + "version": "v1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "list or watch objects of kind ReplicaSet", + "operationId": "listAppsV1NamespacedReplicaSet", + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.apps.v1.ReplicaSetList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "apps_v1" + ], + "x-kubernetes-action": "list", + "x-kubernetes-group-version-kind": { + "group": "apps", + "kind": "ReplicaSet", + "version": "v1" + } + }, + "parameters": [ + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "post": { + "consumes": [ + "*/*" + ], + "description": "create a ReplicaSet", + "operationId": "createAppsV1NamespacedReplicaSet", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.apps.v1.ReplicaSet" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.apps.v1.ReplicaSet" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.apps.v1.ReplicaSet" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.api.apps.v1.ReplicaSet" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "apps_v1" + ], + "x-kubernetes-action": "post", + "x-kubernetes-group-version-kind": { + "group": "apps", + "kind": "ReplicaSet", + "version": "v1" + } + } + }, + "/apis/apps/v1/namespaces/{namespace}/replicasets/{name}": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete a ReplicaSet", + "operationId": "deleteAppsV1NamespacedReplicaSet", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "apps_v1" + ], + "x-kubernetes-action": "delete", + "x-kubernetes-group-version-kind": { + "group": "apps", + "kind": "ReplicaSet", + "version": "v1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "read the specified ReplicaSet", + "operationId": "readAppsV1NamespacedReplicaSet", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.apps.v1.ReplicaSet" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "apps_v1" + ], + "x-kubernetes-action": "get", + "x-kubernetes-group-version-kind": { + "group": "apps", + "kind": "ReplicaSet", + "version": "v1" + } + }, + "parameters": [ + { + "description": "name of the ReplicaSet", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "patch": { + "consumes": [ + "application/json-patch+json", + "application/merge-patch+json", + "application/strategic-merge-patch+json", + "application/apply-patch+yaml" + ], + "description": "partially update the specified ReplicaSet", + "operationId": "patchAppsV1NamespacedReplicaSet", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Patch" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + }, + { + "description": "Force is going to \"force\" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.", + "in": "query", + "name": "force", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.apps.v1.ReplicaSet" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "apps_v1" + ], + "x-kubernetes-action": "patch", + "x-kubernetes-group-version-kind": { + "group": "apps", + "kind": "ReplicaSet", + "version": "v1" + } + }, + "put": { + "consumes": [ + "*/*" + ], + "description": "replace the specified ReplicaSet", + "operationId": "replaceAppsV1NamespacedReplicaSet", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.apps.v1.ReplicaSet" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.apps.v1.ReplicaSet" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.apps.v1.ReplicaSet" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "apps_v1" + ], + "x-kubernetes-action": "put", + "x-kubernetes-group-version-kind": { + "group": "apps", + "kind": "ReplicaSet", + "version": "v1" + } + } + }, + "/apis/apps/v1/namespaces/{namespace}/replicasets/{name}/scale": { + "get": { + "consumes": [ + "*/*" + ], + "description": "read scale of the specified ReplicaSet", + "operationId": "readAppsV1NamespacedReplicaSetScale", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.autoscaling.v1.Scale" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "apps_v1" + ], + "x-kubernetes-action": "get", + "x-kubernetes-group-version-kind": { + "group": "autoscaling", + "kind": "Scale", + "version": "v1" + } + }, + "parameters": [ + { + "description": "name of the Scale", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "patch": { + "consumes": [ + "application/json-patch+json", + "application/merge-patch+json", + "application/strategic-merge-patch+json", + "application/apply-patch+yaml" + ], + "description": "partially update scale of the specified ReplicaSet", + "operationId": "patchAppsV1NamespacedReplicaSetScale", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Patch" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + }, + { + "description": "Force is going to \"force\" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.", + "in": "query", + "name": "force", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.autoscaling.v1.Scale" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "apps_v1" + ], + "x-kubernetes-action": "patch", + "x-kubernetes-group-version-kind": { + "group": "autoscaling", + "kind": "Scale", + "version": "v1" + } + }, + "put": { + "consumes": [ + "*/*" + ], + "description": "replace scale of the specified ReplicaSet", + "operationId": "replaceAppsV1NamespacedReplicaSetScale", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.autoscaling.v1.Scale" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.autoscaling.v1.Scale" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.autoscaling.v1.Scale" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "apps_v1" + ], + "x-kubernetes-action": "put", + "x-kubernetes-group-version-kind": { + "group": "autoscaling", + "kind": "Scale", + "version": "v1" + } + } + }, + "/apis/apps/v1/namespaces/{namespace}/replicasets/{name}/status": { + "get": { + "consumes": [ + "*/*" + ], + "description": "read status of the specified ReplicaSet", + "operationId": "readAppsV1NamespacedReplicaSetStatus", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.apps.v1.ReplicaSet" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "apps_v1" + ], + "x-kubernetes-action": "get", + "x-kubernetes-group-version-kind": { + "group": "apps", + "kind": "ReplicaSet", + "version": "v1" + } + }, + "parameters": [ + { + "description": "name of the ReplicaSet", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "patch": { + "consumes": [ + "application/json-patch+json", + "application/merge-patch+json", + "application/strategic-merge-patch+json", + "application/apply-patch+yaml" + ], + "description": "partially update status of the specified ReplicaSet", + "operationId": "patchAppsV1NamespacedReplicaSetStatus", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Patch" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + }, + { + "description": "Force is going to \"force\" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.", + "in": "query", + "name": "force", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.apps.v1.ReplicaSet" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "apps_v1" + ], + "x-kubernetes-action": "patch", + "x-kubernetes-group-version-kind": { + "group": "apps", + "kind": "ReplicaSet", + "version": "v1" + } + }, + "put": { + "consumes": [ + "*/*" + ], + "description": "replace status of the specified ReplicaSet", + "operationId": "replaceAppsV1NamespacedReplicaSetStatus", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.apps.v1.ReplicaSet" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.apps.v1.ReplicaSet" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.apps.v1.ReplicaSet" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "apps_v1" + ], + "x-kubernetes-action": "put", + "x-kubernetes-group-version-kind": { + "group": "apps", + "kind": "ReplicaSet", + "version": "v1" + } + } + }, + "/apis/apps/v1/namespaces/{namespace}/statefulsets": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete collection of StatefulSet", + "operationId": "deleteAppsV1CollectionNamespacedStatefulSet", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "apps_v1" + ], + "x-kubernetes-action": "deletecollection", + "x-kubernetes-group-version-kind": { + "group": "apps", + "kind": "StatefulSet", + "version": "v1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "list or watch objects of kind StatefulSet", + "operationId": "listAppsV1NamespacedStatefulSet", + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.apps.v1.StatefulSetList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "apps_v1" + ], + "x-kubernetes-action": "list", + "x-kubernetes-group-version-kind": { + "group": "apps", + "kind": "StatefulSet", + "version": "v1" + } + }, + "parameters": [ + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "post": { + "consumes": [ + "*/*" + ], + "description": "create a StatefulSet", + "operationId": "createAppsV1NamespacedStatefulSet", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.apps.v1.StatefulSet" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.apps.v1.StatefulSet" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.apps.v1.StatefulSet" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.api.apps.v1.StatefulSet" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "apps_v1" + ], + "x-kubernetes-action": "post", + "x-kubernetes-group-version-kind": { + "group": "apps", + "kind": "StatefulSet", + "version": "v1" + } + } + }, + "/apis/apps/v1/namespaces/{namespace}/statefulsets/{name}": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete a StatefulSet", + "operationId": "deleteAppsV1NamespacedStatefulSet", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "apps_v1" + ], + "x-kubernetes-action": "delete", + "x-kubernetes-group-version-kind": { + "group": "apps", + "kind": "StatefulSet", + "version": "v1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "read the specified StatefulSet", + "operationId": "readAppsV1NamespacedStatefulSet", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.apps.v1.StatefulSet" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "apps_v1" + ], + "x-kubernetes-action": "get", + "x-kubernetes-group-version-kind": { + "group": "apps", + "kind": "StatefulSet", + "version": "v1" + } + }, + "parameters": [ + { + "description": "name of the StatefulSet", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "patch": { + "consumes": [ + "application/json-patch+json", + "application/merge-patch+json", + "application/strategic-merge-patch+json", + "application/apply-patch+yaml" + ], + "description": "partially update the specified StatefulSet", + "operationId": "patchAppsV1NamespacedStatefulSet", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Patch" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + }, + { + "description": "Force is going to \"force\" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.", + "in": "query", + "name": "force", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.apps.v1.StatefulSet" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "apps_v1" + ], + "x-kubernetes-action": "patch", + "x-kubernetes-group-version-kind": { + "group": "apps", + "kind": "StatefulSet", + "version": "v1" + } + }, + "put": { + "consumes": [ + "*/*" + ], + "description": "replace the specified StatefulSet", + "operationId": "replaceAppsV1NamespacedStatefulSet", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.apps.v1.StatefulSet" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.apps.v1.StatefulSet" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.apps.v1.StatefulSet" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "apps_v1" + ], + "x-kubernetes-action": "put", + "x-kubernetes-group-version-kind": { + "group": "apps", + "kind": "StatefulSet", + "version": "v1" + } + } + }, + "/apis/apps/v1/namespaces/{namespace}/statefulsets/{name}/scale": { + "get": { + "consumes": [ + "*/*" + ], + "description": "read scale of the specified StatefulSet", + "operationId": "readAppsV1NamespacedStatefulSetScale", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.autoscaling.v1.Scale" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "apps_v1" + ], + "x-kubernetes-action": "get", + "x-kubernetes-group-version-kind": { + "group": "autoscaling", + "kind": "Scale", + "version": "v1" + } + }, + "parameters": [ + { + "description": "name of the Scale", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "patch": { + "consumes": [ + "application/json-patch+json", + "application/merge-patch+json", + "application/strategic-merge-patch+json", + "application/apply-patch+yaml" + ], + "description": "partially update scale of the specified StatefulSet", + "operationId": "patchAppsV1NamespacedStatefulSetScale", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Patch" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + }, + { + "description": "Force is going to \"force\" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.", + "in": "query", + "name": "force", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.autoscaling.v1.Scale" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "apps_v1" + ], + "x-kubernetes-action": "patch", + "x-kubernetes-group-version-kind": { + "group": "autoscaling", + "kind": "Scale", + "version": "v1" + } + }, + "put": { + "consumes": [ + "*/*" + ], + "description": "replace scale of the specified StatefulSet", + "operationId": "replaceAppsV1NamespacedStatefulSetScale", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.autoscaling.v1.Scale" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.autoscaling.v1.Scale" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.autoscaling.v1.Scale" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "apps_v1" + ], + "x-kubernetes-action": "put", + "x-kubernetes-group-version-kind": { + "group": "autoscaling", + "kind": "Scale", + "version": "v1" + } + } + }, + "/apis/apps/v1/namespaces/{namespace}/statefulsets/{name}/status": { + "get": { + "consumes": [ + "*/*" + ], + "description": "read status of the specified StatefulSet", + "operationId": "readAppsV1NamespacedStatefulSetStatus", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.apps.v1.StatefulSet" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "apps_v1" + ], + "x-kubernetes-action": "get", + "x-kubernetes-group-version-kind": { + "group": "apps", + "kind": "StatefulSet", + "version": "v1" + } + }, + "parameters": [ + { + "description": "name of the StatefulSet", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "patch": { + "consumes": [ + "application/json-patch+json", + "application/merge-patch+json", + "application/strategic-merge-patch+json", + "application/apply-patch+yaml" + ], + "description": "partially update status of the specified StatefulSet", + "operationId": "patchAppsV1NamespacedStatefulSetStatus", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Patch" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + }, + { + "description": "Force is going to \"force\" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.", + "in": "query", + "name": "force", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.apps.v1.StatefulSet" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "apps_v1" + ], + "x-kubernetes-action": "patch", + "x-kubernetes-group-version-kind": { + "group": "apps", + "kind": "StatefulSet", + "version": "v1" + } + }, + "put": { + "consumes": [ + "*/*" + ], + "description": "replace status of the specified StatefulSet", + "operationId": "replaceAppsV1NamespacedStatefulSetStatus", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.apps.v1.StatefulSet" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.apps.v1.StatefulSet" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.apps.v1.StatefulSet" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "apps_v1" + ], + "x-kubernetes-action": "put", + "x-kubernetes-group-version-kind": { + "group": "apps", + "kind": "StatefulSet", + "version": "v1" + } + } + }, + "/apis/apps/v1/replicasets": { + "get": { + "consumes": [ + "*/*" + ], + "description": "list or watch objects of kind ReplicaSet", + "operationId": "listAppsV1ReplicaSetForAllNamespaces", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.apps.v1.ReplicaSetList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "apps_v1" + ], + "x-kubernetes-action": "list", + "x-kubernetes-group-version-kind": { + "group": "apps", + "kind": "ReplicaSet", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/apps/v1/statefulsets": { + "get": { + "consumes": [ + "*/*" + ], + "description": "list or watch objects of kind StatefulSet", + "operationId": "listAppsV1StatefulSetForAllNamespaces", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.apps.v1.StatefulSetList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "apps_v1" + ], + "x-kubernetes-action": "list", + "x-kubernetes-group-version-kind": { + "group": "apps", + "kind": "StatefulSet", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/apps/v1/watch/controllerrevisions": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch individual changes to a list of ControllerRevision. deprecated: use the 'watch' parameter with a list operation instead.", + "operationId": "watchAppsV1ControllerRevisionListForAllNamespaces", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "apps_v1" + ], + "x-kubernetes-action": "watchlist", + "x-kubernetes-group-version-kind": { + "group": "apps", + "kind": "ControllerRevision", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/apps/v1/watch/daemonsets": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch individual changes to a list of DaemonSet. deprecated: use the 'watch' parameter with a list operation instead.", + "operationId": "watchAppsV1DaemonSetListForAllNamespaces", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "apps_v1" + ], + "x-kubernetes-action": "watchlist", + "x-kubernetes-group-version-kind": { + "group": "apps", + "kind": "DaemonSet", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/apps/v1/watch/deployments": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch individual changes to a list of Deployment. deprecated: use the 'watch' parameter with a list operation instead.", + "operationId": "watchAppsV1DeploymentListForAllNamespaces", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "apps_v1" + ], + "x-kubernetes-action": "watchlist", + "x-kubernetes-group-version-kind": { + "group": "apps", + "kind": "Deployment", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/apps/v1/watch/namespaces/{namespace}/controllerrevisions": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch individual changes to a list of ControllerRevision. deprecated: use the 'watch' parameter with a list operation instead.", + "operationId": "watchAppsV1NamespacedControllerRevisionList", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "apps_v1" + ], + "x-kubernetes-action": "watchlist", + "x-kubernetes-group-version-kind": { + "group": "apps", + "kind": "ControllerRevision", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/apps/v1/watch/namespaces/{namespace}/controllerrevisions/{name}": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch changes to an object of kind ControllerRevision. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.", + "operationId": "watchAppsV1NamespacedControllerRevision", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "apps_v1" + ], + "x-kubernetes-action": "watch", + "x-kubernetes-group-version-kind": { + "group": "apps", + "kind": "ControllerRevision", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "name of the ControllerRevision", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/apps/v1/watch/namespaces/{namespace}/daemonsets": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch individual changes to a list of DaemonSet. deprecated: use the 'watch' parameter with a list operation instead.", + "operationId": "watchAppsV1NamespacedDaemonSetList", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "apps_v1" + ], + "x-kubernetes-action": "watchlist", + "x-kubernetes-group-version-kind": { + "group": "apps", + "kind": "DaemonSet", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/apps/v1/watch/namespaces/{namespace}/daemonsets/{name}": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch changes to an object of kind DaemonSet. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.", + "operationId": "watchAppsV1NamespacedDaemonSet", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "apps_v1" + ], + "x-kubernetes-action": "watch", + "x-kubernetes-group-version-kind": { + "group": "apps", + "kind": "DaemonSet", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "name of the DaemonSet", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/apps/v1/watch/namespaces/{namespace}/deployments": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch individual changes to a list of Deployment. deprecated: use the 'watch' parameter with a list operation instead.", + "operationId": "watchAppsV1NamespacedDeploymentList", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "apps_v1" + ], + "x-kubernetes-action": "watchlist", + "x-kubernetes-group-version-kind": { + "group": "apps", + "kind": "Deployment", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/apps/v1/watch/namespaces/{namespace}/deployments/{name}": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch changes to an object of kind Deployment. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.", + "operationId": "watchAppsV1NamespacedDeployment", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "apps_v1" + ], + "x-kubernetes-action": "watch", + "x-kubernetes-group-version-kind": { + "group": "apps", + "kind": "Deployment", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "name of the Deployment", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/apps/v1/watch/namespaces/{namespace}/replicasets": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch individual changes to a list of ReplicaSet. deprecated: use the 'watch' parameter with a list operation instead.", + "operationId": "watchAppsV1NamespacedReplicaSetList", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "apps_v1" + ], + "x-kubernetes-action": "watchlist", + "x-kubernetes-group-version-kind": { + "group": "apps", + "kind": "ReplicaSet", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/apps/v1/watch/namespaces/{namespace}/replicasets/{name}": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch changes to an object of kind ReplicaSet. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.", + "operationId": "watchAppsV1NamespacedReplicaSet", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "apps_v1" + ], + "x-kubernetes-action": "watch", + "x-kubernetes-group-version-kind": { + "group": "apps", + "kind": "ReplicaSet", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "name of the ReplicaSet", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/apps/v1/watch/namespaces/{namespace}/statefulsets": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch individual changes to a list of StatefulSet. deprecated: use the 'watch' parameter with a list operation instead.", + "operationId": "watchAppsV1NamespacedStatefulSetList", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "apps_v1" + ], + "x-kubernetes-action": "watchlist", + "x-kubernetes-group-version-kind": { + "group": "apps", + "kind": "StatefulSet", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/apps/v1/watch/namespaces/{namespace}/statefulsets/{name}": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch changes to an object of kind StatefulSet. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.", + "operationId": "watchAppsV1NamespacedStatefulSet", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "apps_v1" + ], + "x-kubernetes-action": "watch", + "x-kubernetes-group-version-kind": { + "group": "apps", + "kind": "StatefulSet", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "name of the StatefulSet", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/apps/v1/watch/replicasets": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch individual changes to a list of ReplicaSet. deprecated: use the 'watch' parameter with a list operation instead.", + "operationId": "watchAppsV1ReplicaSetListForAllNamespaces", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "apps_v1" + ], + "x-kubernetes-action": "watchlist", + "x-kubernetes-group-version-kind": { + "group": "apps", + "kind": "ReplicaSet", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/apps/v1/watch/statefulsets": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch individual changes to a list of StatefulSet. deprecated: use the 'watch' parameter with a list operation instead.", + "operationId": "watchAppsV1StatefulSetListForAllNamespaces", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "apps_v1" + ], + "x-kubernetes-action": "watchlist", + "x-kubernetes-group-version-kind": { + "group": "apps", + "kind": "StatefulSet", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/authentication.k8s.io/": { + "get": { + "consumes": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "description": "get information of a group", + "operationId": "getAuthenticationAPIGroup", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.APIGroup" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "authentication" + ] + } + }, + "/apis/authentication.k8s.io/v1/": { + "get": { + "consumes": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "description": "get available resources", + "operationId": "getAuthenticationV1APIResources", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.APIResourceList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "authentication_v1" + ] + } + }, + "/apis/authentication.k8s.io/v1/tokenreviews": { + "parameters": [ + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "post": { + "consumes": [ + "*/*" + ], + "description": "create a TokenReview", + "operationId": "createAuthenticationV1TokenReview", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.authentication.v1.TokenReview" + } + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.authentication.v1.TokenReview" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.authentication.v1.TokenReview" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.api.authentication.v1.TokenReview" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "authentication_v1" + ], + "x-kubernetes-action": "post", + "x-kubernetes-group-version-kind": { + "group": "authentication.k8s.io", + "kind": "TokenReview", + "version": "v1" + } + } + }, + "/apis/authentication.k8s.io/v1beta1/": { + "get": { + "consumes": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "description": "get available resources", + "operationId": "getAuthenticationV1beta1APIResources", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.APIResourceList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "authentication_v1beta1" + ] + } + }, + "/apis/authentication.k8s.io/v1beta1/tokenreviews": { + "parameters": [ + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "post": { + "consumes": [ + "*/*" + ], + "description": "create a TokenReview", + "operationId": "createAuthenticationV1beta1TokenReview", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.authentication.v1beta1.TokenReview" + } + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.authentication.v1beta1.TokenReview" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.authentication.v1beta1.TokenReview" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.api.authentication.v1beta1.TokenReview" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "authentication_v1beta1" + ], + "x-kubernetes-action": "post", + "x-kubernetes-group-version-kind": { + "group": "authentication.k8s.io", + "kind": "TokenReview", + "version": "v1beta1" + } + } + }, + "/apis/authorization.k8s.io/": { + "get": { + "consumes": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "description": "get information of a group", + "operationId": "getAuthorizationAPIGroup", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.APIGroup" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "authorization" + ] + } + }, + "/apis/authorization.k8s.io/v1/": { + "get": { + "consumes": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "description": "get available resources", + "operationId": "getAuthorizationV1APIResources", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.APIResourceList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "authorization_v1" + ] + } + }, + "/apis/authorization.k8s.io/v1/namespaces/{namespace}/localsubjectaccessreviews": { + "parameters": [ + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "post": { + "consumes": [ + "*/*" + ], + "description": "create a LocalSubjectAccessReview", + "operationId": "createAuthorizationV1NamespacedLocalSubjectAccessReview", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.authorization.v1.LocalSubjectAccessReview" + } + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.authorization.v1.LocalSubjectAccessReview" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.authorization.v1.LocalSubjectAccessReview" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.api.authorization.v1.LocalSubjectAccessReview" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "authorization_v1" + ], + "x-kubernetes-action": "post", + "x-kubernetes-group-version-kind": { + "group": "authorization.k8s.io", + "kind": "LocalSubjectAccessReview", + "version": "v1" + } + } + }, + "/apis/authorization.k8s.io/v1/selfsubjectaccessreviews": { + "parameters": [ + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "post": { + "consumes": [ + "*/*" + ], + "description": "create a SelfSubjectAccessReview", + "operationId": "createAuthorizationV1SelfSubjectAccessReview", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.authorization.v1.SelfSubjectAccessReview" + } + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.authorization.v1.SelfSubjectAccessReview" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.authorization.v1.SelfSubjectAccessReview" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.api.authorization.v1.SelfSubjectAccessReview" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "authorization_v1" + ], + "x-kubernetes-action": "post", + "x-kubernetes-group-version-kind": { + "group": "authorization.k8s.io", + "kind": "SelfSubjectAccessReview", + "version": "v1" + } + } + }, + "/apis/authorization.k8s.io/v1/selfsubjectrulesreviews": { + "parameters": [ + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "post": { + "consumes": [ + "*/*" + ], + "description": "create a SelfSubjectRulesReview", + "operationId": "createAuthorizationV1SelfSubjectRulesReview", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.authorization.v1.SelfSubjectRulesReview" + } + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.authorization.v1.SelfSubjectRulesReview" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.authorization.v1.SelfSubjectRulesReview" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.api.authorization.v1.SelfSubjectRulesReview" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "authorization_v1" + ], + "x-kubernetes-action": "post", + "x-kubernetes-group-version-kind": { + "group": "authorization.k8s.io", + "kind": "SelfSubjectRulesReview", + "version": "v1" + } + } + }, + "/apis/authorization.k8s.io/v1/subjectaccessreviews": { + "parameters": [ + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "post": { + "consumes": [ + "*/*" + ], + "description": "create a SubjectAccessReview", + "operationId": "createAuthorizationV1SubjectAccessReview", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.authorization.v1.SubjectAccessReview" + } + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.authorization.v1.SubjectAccessReview" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.authorization.v1.SubjectAccessReview" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.api.authorization.v1.SubjectAccessReview" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "authorization_v1" + ], + "x-kubernetes-action": "post", + "x-kubernetes-group-version-kind": { + "group": "authorization.k8s.io", + "kind": "SubjectAccessReview", + "version": "v1" + } + } + }, + "/apis/authorization.k8s.io/v1beta1/": { + "get": { + "consumes": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "description": "get available resources", + "operationId": "getAuthorizationV1beta1APIResources", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.APIResourceList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "authorization_v1beta1" + ] + } + }, + "/apis/authorization.k8s.io/v1beta1/namespaces/{namespace}/localsubjectaccessreviews": { + "parameters": [ + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "post": { + "consumes": [ + "*/*" + ], + "description": "create a LocalSubjectAccessReview", + "operationId": "createAuthorizationV1beta1NamespacedLocalSubjectAccessReview", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.authorization.v1beta1.LocalSubjectAccessReview" + } + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.authorization.v1beta1.LocalSubjectAccessReview" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.authorization.v1beta1.LocalSubjectAccessReview" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.api.authorization.v1beta1.LocalSubjectAccessReview" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "authorization_v1beta1" + ], + "x-kubernetes-action": "post", + "x-kubernetes-group-version-kind": { + "group": "authorization.k8s.io", + "kind": "LocalSubjectAccessReview", + "version": "v1beta1" + } + } + }, + "/apis/authorization.k8s.io/v1beta1/selfsubjectaccessreviews": { + "parameters": [ + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "post": { + "consumes": [ + "*/*" + ], + "description": "create a SelfSubjectAccessReview", + "operationId": "createAuthorizationV1beta1SelfSubjectAccessReview", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.authorization.v1beta1.SelfSubjectAccessReview" + } + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.authorization.v1beta1.SelfSubjectAccessReview" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.authorization.v1beta1.SelfSubjectAccessReview" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.api.authorization.v1beta1.SelfSubjectAccessReview" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "authorization_v1beta1" + ], + "x-kubernetes-action": "post", + "x-kubernetes-group-version-kind": { + "group": "authorization.k8s.io", + "kind": "SelfSubjectAccessReview", + "version": "v1beta1" + } + } + }, + "/apis/authorization.k8s.io/v1beta1/selfsubjectrulesreviews": { + "parameters": [ + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "post": { + "consumes": [ + "*/*" + ], + "description": "create a SelfSubjectRulesReview", + "operationId": "createAuthorizationV1beta1SelfSubjectRulesReview", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.authorization.v1beta1.SelfSubjectRulesReview" + } + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.authorization.v1beta1.SelfSubjectRulesReview" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.authorization.v1beta1.SelfSubjectRulesReview" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.api.authorization.v1beta1.SelfSubjectRulesReview" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "authorization_v1beta1" + ], + "x-kubernetes-action": "post", + "x-kubernetes-group-version-kind": { + "group": "authorization.k8s.io", + "kind": "SelfSubjectRulesReview", + "version": "v1beta1" + } + } + }, + "/apis/authorization.k8s.io/v1beta1/subjectaccessreviews": { + "parameters": [ + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "post": { + "consumes": [ + "*/*" + ], + "description": "create a SubjectAccessReview", + "operationId": "createAuthorizationV1beta1SubjectAccessReview", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.authorization.v1beta1.SubjectAccessReview" + } + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.authorization.v1beta1.SubjectAccessReview" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.authorization.v1beta1.SubjectAccessReview" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.api.authorization.v1beta1.SubjectAccessReview" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "authorization_v1beta1" + ], + "x-kubernetes-action": "post", + "x-kubernetes-group-version-kind": { + "group": "authorization.k8s.io", + "kind": "SubjectAccessReview", + "version": "v1beta1" + } + } + }, + "/apis/autoscaling/": { + "get": { + "consumes": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "description": "get information of a group", + "operationId": "getAutoscalingAPIGroup", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.APIGroup" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "autoscaling" + ] + } + }, + "/apis/autoscaling/v1/": { + "get": { + "consumes": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "description": "get available resources", + "operationId": "getAutoscalingV1APIResources", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.APIResourceList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "autoscaling_v1" + ] + } + }, + "/apis/autoscaling/v1/horizontalpodautoscalers": { + "get": { + "consumes": [ + "*/*" + ], + "description": "list or watch objects of kind HorizontalPodAutoscaler", + "operationId": "listAutoscalingV1HorizontalPodAutoscalerForAllNamespaces", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.autoscaling.v1.HorizontalPodAutoscalerList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "autoscaling_v1" + ], + "x-kubernetes-action": "list", + "x-kubernetes-group-version-kind": { + "group": "autoscaling", + "kind": "HorizontalPodAutoscaler", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/autoscaling/v1/namespaces/{namespace}/horizontalpodautoscalers": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete collection of HorizontalPodAutoscaler", + "operationId": "deleteAutoscalingV1CollectionNamespacedHorizontalPodAutoscaler", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "autoscaling_v1" + ], + "x-kubernetes-action": "deletecollection", + "x-kubernetes-group-version-kind": { + "group": "autoscaling", + "kind": "HorizontalPodAutoscaler", + "version": "v1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "list or watch objects of kind HorizontalPodAutoscaler", + "operationId": "listAutoscalingV1NamespacedHorizontalPodAutoscaler", + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.autoscaling.v1.HorizontalPodAutoscalerList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "autoscaling_v1" + ], + "x-kubernetes-action": "list", + "x-kubernetes-group-version-kind": { + "group": "autoscaling", + "kind": "HorizontalPodAutoscaler", + "version": "v1" + } + }, + "parameters": [ + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "post": { + "consumes": [ + "*/*" + ], + "description": "create a HorizontalPodAutoscaler", + "operationId": "createAutoscalingV1NamespacedHorizontalPodAutoscaler", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.autoscaling.v1.HorizontalPodAutoscaler" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.autoscaling.v1.HorizontalPodAutoscaler" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.autoscaling.v1.HorizontalPodAutoscaler" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.api.autoscaling.v1.HorizontalPodAutoscaler" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "autoscaling_v1" + ], + "x-kubernetes-action": "post", + "x-kubernetes-group-version-kind": { + "group": "autoscaling", + "kind": "HorizontalPodAutoscaler", + "version": "v1" + } + } + }, + "/apis/autoscaling/v1/namespaces/{namespace}/horizontalpodautoscalers/{name}": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete a HorizontalPodAutoscaler", + "operationId": "deleteAutoscalingV1NamespacedHorizontalPodAutoscaler", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "autoscaling_v1" + ], + "x-kubernetes-action": "delete", + "x-kubernetes-group-version-kind": { + "group": "autoscaling", + "kind": "HorizontalPodAutoscaler", + "version": "v1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "read the specified HorizontalPodAutoscaler", + "operationId": "readAutoscalingV1NamespacedHorizontalPodAutoscaler", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.autoscaling.v1.HorizontalPodAutoscaler" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "autoscaling_v1" + ], + "x-kubernetes-action": "get", + "x-kubernetes-group-version-kind": { + "group": "autoscaling", + "kind": "HorizontalPodAutoscaler", + "version": "v1" + } + }, + "parameters": [ + { + "description": "name of the HorizontalPodAutoscaler", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "patch": { + "consumes": [ + "application/json-patch+json", + "application/merge-patch+json", + "application/strategic-merge-patch+json", + "application/apply-patch+yaml" + ], + "description": "partially update the specified HorizontalPodAutoscaler", + "operationId": "patchAutoscalingV1NamespacedHorizontalPodAutoscaler", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Patch" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + }, + { + "description": "Force is going to \"force\" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.", + "in": "query", + "name": "force", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.autoscaling.v1.HorizontalPodAutoscaler" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "autoscaling_v1" + ], + "x-kubernetes-action": "patch", + "x-kubernetes-group-version-kind": { + "group": "autoscaling", + "kind": "HorizontalPodAutoscaler", + "version": "v1" + } + }, + "put": { + "consumes": [ + "*/*" + ], + "description": "replace the specified HorizontalPodAutoscaler", + "operationId": "replaceAutoscalingV1NamespacedHorizontalPodAutoscaler", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.autoscaling.v1.HorizontalPodAutoscaler" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.autoscaling.v1.HorizontalPodAutoscaler" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.autoscaling.v1.HorizontalPodAutoscaler" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "autoscaling_v1" + ], + "x-kubernetes-action": "put", + "x-kubernetes-group-version-kind": { + "group": "autoscaling", + "kind": "HorizontalPodAutoscaler", + "version": "v1" + } + } + }, + "/apis/autoscaling/v1/namespaces/{namespace}/horizontalpodautoscalers/{name}/status": { + "get": { + "consumes": [ + "*/*" + ], + "description": "read status of the specified HorizontalPodAutoscaler", + "operationId": "readAutoscalingV1NamespacedHorizontalPodAutoscalerStatus", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.autoscaling.v1.HorizontalPodAutoscaler" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "autoscaling_v1" + ], + "x-kubernetes-action": "get", + "x-kubernetes-group-version-kind": { + "group": "autoscaling", + "kind": "HorizontalPodAutoscaler", + "version": "v1" + } + }, + "parameters": [ + { + "description": "name of the HorizontalPodAutoscaler", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "patch": { + "consumes": [ + "application/json-patch+json", + "application/merge-patch+json", + "application/strategic-merge-patch+json", + "application/apply-patch+yaml" + ], + "description": "partially update status of the specified HorizontalPodAutoscaler", + "operationId": "patchAutoscalingV1NamespacedHorizontalPodAutoscalerStatus", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Patch" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + }, + { + "description": "Force is going to \"force\" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.", + "in": "query", + "name": "force", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.autoscaling.v1.HorizontalPodAutoscaler" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "autoscaling_v1" + ], + "x-kubernetes-action": "patch", + "x-kubernetes-group-version-kind": { + "group": "autoscaling", + "kind": "HorizontalPodAutoscaler", + "version": "v1" + } + }, + "put": { + "consumes": [ + "*/*" + ], + "description": "replace status of the specified HorizontalPodAutoscaler", + "operationId": "replaceAutoscalingV1NamespacedHorizontalPodAutoscalerStatus", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.autoscaling.v1.HorizontalPodAutoscaler" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.autoscaling.v1.HorizontalPodAutoscaler" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.autoscaling.v1.HorizontalPodAutoscaler" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "autoscaling_v1" + ], + "x-kubernetes-action": "put", + "x-kubernetes-group-version-kind": { + "group": "autoscaling", + "kind": "HorizontalPodAutoscaler", + "version": "v1" + } + } + }, + "/apis/autoscaling/v1/watch/horizontalpodautoscalers": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch individual changes to a list of HorizontalPodAutoscaler. deprecated: use the 'watch' parameter with a list operation instead.", + "operationId": "watchAutoscalingV1HorizontalPodAutoscalerListForAllNamespaces", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "autoscaling_v1" + ], + "x-kubernetes-action": "watchlist", + "x-kubernetes-group-version-kind": { + "group": "autoscaling", + "kind": "HorizontalPodAutoscaler", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/autoscaling/v1/watch/namespaces/{namespace}/horizontalpodautoscalers": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch individual changes to a list of HorizontalPodAutoscaler. deprecated: use the 'watch' parameter with a list operation instead.", + "operationId": "watchAutoscalingV1NamespacedHorizontalPodAutoscalerList", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "autoscaling_v1" + ], + "x-kubernetes-action": "watchlist", + "x-kubernetes-group-version-kind": { + "group": "autoscaling", + "kind": "HorizontalPodAutoscaler", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/autoscaling/v1/watch/namespaces/{namespace}/horizontalpodautoscalers/{name}": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch changes to an object of kind HorizontalPodAutoscaler. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.", + "operationId": "watchAutoscalingV1NamespacedHorizontalPodAutoscaler", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "autoscaling_v1" + ], + "x-kubernetes-action": "watch", + "x-kubernetes-group-version-kind": { + "group": "autoscaling", + "kind": "HorizontalPodAutoscaler", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "name of the HorizontalPodAutoscaler", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/autoscaling/v2beta1/": { + "get": { + "consumes": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "description": "get available resources", + "operationId": "getAutoscalingV2beta1APIResources", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.APIResourceList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "autoscaling_v2beta1" + ] + } + }, + "/apis/autoscaling/v2beta1/horizontalpodautoscalers": { + "get": { + "consumes": [ + "*/*" + ], + "description": "list or watch objects of kind HorizontalPodAutoscaler", + "operationId": "listAutoscalingV2beta1HorizontalPodAutoscalerForAllNamespaces", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta1.HorizontalPodAutoscalerList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "autoscaling_v2beta1" + ], + "x-kubernetes-action": "list", + "x-kubernetes-group-version-kind": { + "group": "autoscaling", + "kind": "HorizontalPodAutoscaler", + "version": "v2beta1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/autoscaling/v2beta1/namespaces/{namespace}/horizontalpodautoscalers": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete collection of HorizontalPodAutoscaler", + "operationId": "deleteAutoscalingV2beta1CollectionNamespacedHorizontalPodAutoscaler", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "autoscaling_v2beta1" + ], + "x-kubernetes-action": "deletecollection", + "x-kubernetes-group-version-kind": { + "group": "autoscaling", + "kind": "HorizontalPodAutoscaler", + "version": "v2beta1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "list or watch objects of kind HorizontalPodAutoscaler", + "operationId": "listAutoscalingV2beta1NamespacedHorizontalPodAutoscaler", + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta1.HorizontalPodAutoscalerList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "autoscaling_v2beta1" + ], + "x-kubernetes-action": "list", + "x-kubernetes-group-version-kind": { + "group": "autoscaling", + "kind": "HorizontalPodAutoscaler", + "version": "v2beta1" + } + }, + "parameters": [ + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "post": { + "consumes": [ + "*/*" + ], + "description": "create a HorizontalPodAutoscaler", + "operationId": "createAutoscalingV2beta1NamespacedHorizontalPodAutoscaler", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta1.HorizontalPodAutoscaler" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta1.HorizontalPodAutoscaler" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta1.HorizontalPodAutoscaler" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta1.HorizontalPodAutoscaler" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "autoscaling_v2beta1" + ], + "x-kubernetes-action": "post", + "x-kubernetes-group-version-kind": { + "group": "autoscaling", + "kind": "HorizontalPodAutoscaler", + "version": "v2beta1" + } + } + }, + "/apis/autoscaling/v2beta1/namespaces/{namespace}/horizontalpodautoscalers/{name}": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete a HorizontalPodAutoscaler", + "operationId": "deleteAutoscalingV2beta1NamespacedHorizontalPodAutoscaler", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "autoscaling_v2beta1" + ], + "x-kubernetes-action": "delete", + "x-kubernetes-group-version-kind": { + "group": "autoscaling", + "kind": "HorizontalPodAutoscaler", + "version": "v2beta1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "read the specified HorizontalPodAutoscaler", + "operationId": "readAutoscalingV2beta1NamespacedHorizontalPodAutoscaler", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta1.HorizontalPodAutoscaler" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "autoscaling_v2beta1" + ], + "x-kubernetes-action": "get", + "x-kubernetes-group-version-kind": { + "group": "autoscaling", + "kind": "HorizontalPodAutoscaler", + "version": "v2beta1" + } + }, + "parameters": [ + { + "description": "name of the HorizontalPodAutoscaler", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "patch": { + "consumes": [ + "application/json-patch+json", + "application/merge-patch+json", + "application/strategic-merge-patch+json", + "application/apply-patch+yaml" + ], + "description": "partially update the specified HorizontalPodAutoscaler", + "operationId": "patchAutoscalingV2beta1NamespacedHorizontalPodAutoscaler", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Patch" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + }, + { + "description": "Force is going to \"force\" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.", + "in": "query", + "name": "force", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta1.HorizontalPodAutoscaler" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "autoscaling_v2beta1" + ], + "x-kubernetes-action": "patch", + "x-kubernetes-group-version-kind": { + "group": "autoscaling", + "kind": "HorizontalPodAutoscaler", + "version": "v2beta1" + } + }, + "put": { + "consumes": [ + "*/*" + ], + "description": "replace the specified HorizontalPodAutoscaler", + "operationId": "replaceAutoscalingV2beta1NamespacedHorizontalPodAutoscaler", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta1.HorizontalPodAutoscaler" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta1.HorizontalPodAutoscaler" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta1.HorizontalPodAutoscaler" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "autoscaling_v2beta1" + ], + "x-kubernetes-action": "put", + "x-kubernetes-group-version-kind": { + "group": "autoscaling", + "kind": "HorizontalPodAutoscaler", + "version": "v2beta1" + } + } + }, + "/apis/autoscaling/v2beta1/namespaces/{namespace}/horizontalpodautoscalers/{name}/status": { + "get": { + "consumes": [ + "*/*" + ], + "description": "read status of the specified HorizontalPodAutoscaler", + "operationId": "readAutoscalingV2beta1NamespacedHorizontalPodAutoscalerStatus", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta1.HorizontalPodAutoscaler" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "autoscaling_v2beta1" + ], + "x-kubernetes-action": "get", + "x-kubernetes-group-version-kind": { + "group": "autoscaling", + "kind": "HorizontalPodAutoscaler", + "version": "v2beta1" + } + }, + "parameters": [ + { + "description": "name of the HorizontalPodAutoscaler", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "patch": { + "consumes": [ + "application/json-patch+json", + "application/merge-patch+json", + "application/strategic-merge-patch+json", + "application/apply-patch+yaml" + ], + "description": "partially update status of the specified HorizontalPodAutoscaler", + "operationId": "patchAutoscalingV2beta1NamespacedHorizontalPodAutoscalerStatus", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Patch" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + }, + { + "description": "Force is going to \"force\" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.", + "in": "query", + "name": "force", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta1.HorizontalPodAutoscaler" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "autoscaling_v2beta1" + ], + "x-kubernetes-action": "patch", + "x-kubernetes-group-version-kind": { + "group": "autoscaling", + "kind": "HorizontalPodAutoscaler", + "version": "v2beta1" + } + }, + "put": { + "consumes": [ + "*/*" + ], + "description": "replace status of the specified HorizontalPodAutoscaler", + "operationId": "replaceAutoscalingV2beta1NamespacedHorizontalPodAutoscalerStatus", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta1.HorizontalPodAutoscaler" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta1.HorizontalPodAutoscaler" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta1.HorizontalPodAutoscaler" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "autoscaling_v2beta1" + ], + "x-kubernetes-action": "put", + "x-kubernetes-group-version-kind": { + "group": "autoscaling", + "kind": "HorizontalPodAutoscaler", + "version": "v2beta1" + } + } + }, + "/apis/autoscaling/v2beta1/watch/horizontalpodautoscalers": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch individual changes to a list of HorizontalPodAutoscaler. deprecated: use the 'watch' parameter with a list operation instead.", + "operationId": "watchAutoscalingV2beta1HorizontalPodAutoscalerListForAllNamespaces", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "autoscaling_v2beta1" + ], + "x-kubernetes-action": "watchlist", + "x-kubernetes-group-version-kind": { + "group": "autoscaling", + "kind": "HorizontalPodAutoscaler", + "version": "v2beta1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/autoscaling/v2beta1/watch/namespaces/{namespace}/horizontalpodautoscalers": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch individual changes to a list of HorizontalPodAutoscaler. deprecated: use the 'watch' parameter with a list operation instead.", + "operationId": "watchAutoscalingV2beta1NamespacedHorizontalPodAutoscalerList", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "autoscaling_v2beta1" + ], + "x-kubernetes-action": "watchlist", + "x-kubernetes-group-version-kind": { + "group": "autoscaling", + "kind": "HorizontalPodAutoscaler", + "version": "v2beta1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/autoscaling/v2beta1/watch/namespaces/{namespace}/horizontalpodautoscalers/{name}": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch changes to an object of kind HorizontalPodAutoscaler. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.", + "operationId": "watchAutoscalingV2beta1NamespacedHorizontalPodAutoscaler", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "autoscaling_v2beta1" + ], + "x-kubernetes-action": "watch", + "x-kubernetes-group-version-kind": { + "group": "autoscaling", + "kind": "HorizontalPodAutoscaler", + "version": "v2beta1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "name of the HorizontalPodAutoscaler", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/autoscaling/v2beta2/": { + "get": { + "consumes": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "description": "get available resources", + "operationId": "getAutoscalingV2beta2APIResources", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.APIResourceList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "autoscaling_v2beta2" + ] + } + }, + "/apis/autoscaling/v2beta2/horizontalpodautoscalers": { + "get": { + "consumes": [ + "*/*" + ], + "description": "list or watch objects of kind HorizontalPodAutoscaler", + "operationId": "listAutoscalingV2beta2HorizontalPodAutoscalerForAllNamespaces", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta2.HorizontalPodAutoscalerList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "autoscaling_v2beta2" + ], + "x-kubernetes-action": "list", + "x-kubernetes-group-version-kind": { + "group": "autoscaling", + "kind": "HorizontalPodAutoscaler", + "version": "v2beta2" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/autoscaling/v2beta2/namespaces/{namespace}/horizontalpodautoscalers": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete collection of HorizontalPodAutoscaler", + "operationId": "deleteAutoscalingV2beta2CollectionNamespacedHorizontalPodAutoscaler", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "autoscaling_v2beta2" + ], + "x-kubernetes-action": "deletecollection", + "x-kubernetes-group-version-kind": { + "group": "autoscaling", + "kind": "HorizontalPodAutoscaler", + "version": "v2beta2" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "list or watch objects of kind HorizontalPodAutoscaler", + "operationId": "listAutoscalingV2beta2NamespacedHorizontalPodAutoscaler", + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta2.HorizontalPodAutoscalerList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "autoscaling_v2beta2" + ], + "x-kubernetes-action": "list", + "x-kubernetes-group-version-kind": { + "group": "autoscaling", + "kind": "HorizontalPodAutoscaler", + "version": "v2beta2" + } + }, + "parameters": [ + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "post": { + "consumes": [ + "*/*" + ], + "description": "create a HorizontalPodAutoscaler", + "operationId": "createAutoscalingV2beta2NamespacedHorizontalPodAutoscaler", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta2.HorizontalPodAutoscaler" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta2.HorizontalPodAutoscaler" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta2.HorizontalPodAutoscaler" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta2.HorizontalPodAutoscaler" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "autoscaling_v2beta2" + ], + "x-kubernetes-action": "post", + "x-kubernetes-group-version-kind": { + "group": "autoscaling", + "kind": "HorizontalPodAutoscaler", + "version": "v2beta2" + } + } + }, + "/apis/autoscaling/v2beta2/namespaces/{namespace}/horizontalpodautoscalers/{name}": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete a HorizontalPodAutoscaler", + "operationId": "deleteAutoscalingV2beta2NamespacedHorizontalPodAutoscaler", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "autoscaling_v2beta2" + ], + "x-kubernetes-action": "delete", + "x-kubernetes-group-version-kind": { + "group": "autoscaling", + "kind": "HorizontalPodAutoscaler", + "version": "v2beta2" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "read the specified HorizontalPodAutoscaler", + "operationId": "readAutoscalingV2beta2NamespacedHorizontalPodAutoscaler", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta2.HorizontalPodAutoscaler" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "autoscaling_v2beta2" + ], + "x-kubernetes-action": "get", + "x-kubernetes-group-version-kind": { + "group": "autoscaling", + "kind": "HorizontalPodAutoscaler", + "version": "v2beta2" + } + }, + "parameters": [ + { + "description": "name of the HorizontalPodAutoscaler", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "patch": { + "consumes": [ + "application/json-patch+json", + "application/merge-patch+json", + "application/strategic-merge-patch+json", + "application/apply-patch+yaml" + ], + "description": "partially update the specified HorizontalPodAutoscaler", + "operationId": "patchAutoscalingV2beta2NamespacedHorizontalPodAutoscaler", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Patch" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + }, + { + "description": "Force is going to \"force\" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.", + "in": "query", + "name": "force", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta2.HorizontalPodAutoscaler" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "autoscaling_v2beta2" + ], + "x-kubernetes-action": "patch", + "x-kubernetes-group-version-kind": { + "group": "autoscaling", + "kind": "HorizontalPodAutoscaler", + "version": "v2beta2" + } + }, + "put": { + "consumes": [ + "*/*" + ], + "description": "replace the specified HorizontalPodAutoscaler", + "operationId": "replaceAutoscalingV2beta2NamespacedHorizontalPodAutoscaler", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta2.HorizontalPodAutoscaler" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta2.HorizontalPodAutoscaler" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta2.HorizontalPodAutoscaler" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "autoscaling_v2beta2" + ], + "x-kubernetes-action": "put", + "x-kubernetes-group-version-kind": { + "group": "autoscaling", + "kind": "HorizontalPodAutoscaler", + "version": "v2beta2" + } + } + }, + "/apis/autoscaling/v2beta2/namespaces/{namespace}/horizontalpodautoscalers/{name}/status": { + "get": { + "consumes": [ + "*/*" + ], + "description": "read status of the specified HorizontalPodAutoscaler", + "operationId": "readAutoscalingV2beta2NamespacedHorizontalPodAutoscalerStatus", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta2.HorizontalPodAutoscaler" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "autoscaling_v2beta2" + ], + "x-kubernetes-action": "get", + "x-kubernetes-group-version-kind": { + "group": "autoscaling", + "kind": "HorizontalPodAutoscaler", + "version": "v2beta2" + } + }, + "parameters": [ + { + "description": "name of the HorizontalPodAutoscaler", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "patch": { + "consumes": [ + "application/json-patch+json", + "application/merge-patch+json", + "application/strategic-merge-patch+json", + "application/apply-patch+yaml" + ], + "description": "partially update status of the specified HorizontalPodAutoscaler", + "operationId": "patchAutoscalingV2beta2NamespacedHorizontalPodAutoscalerStatus", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Patch" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + }, + { + "description": "Force is going to \"force\" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.", + "in": "query", + "name": "force", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta2.HorizontalPodAutoscaler" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "autoscaling_v2beta2" + ], + "x-kubernetes-action": "patch", + "x-kubernetes-group-version-kind": { + "group": "autoscaling", + "kind": "HorizontalPodAutoscaler", + "version": "v2beta2" + } + }, + "put": { + "consumes": [ + "*/*" + ], + "description": "replace status of the specified HorizontalPodAutoscaler", + "operationId": "replaceAutoscalingV2beta2NamespacedHorizontalPodAutoscalerStatus", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta2.HorizontalPodAutoscaler" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta2.HorizontalPodAutoscaler" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta2.HorizontalPodAutoscaler" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "autoscaling_v2beta2" + ], + "x-kubernetes-action": "put", + "x-kubernetes-group-version-kind": { + "group": "autoscaling", + "kind": "HorizontalPodAutoscaler", + "version": "v2beta2" + } + } + }, + "/apis/autoscaling/v2beta2/watch/horizontalpodautoscalers": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch individual changes to a list of HorizontalPodAutoscaler. deprecated: use the 'watch' parameter with a list operation instead.", + "operationId": "watchAutoscalingV2beta2HorizontalPodAutoscalerListForAllNamespaces", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "autoscaling_v2beta2" + ], + "x-kubernetes-action": "watchlist", + "x-kubernetes-group-version-kind": { + "group": "autoscaling", + "kind": "HorizontalPodAutoscaler", + "version": "v2beta2" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/autoscaling/v2beta2/watch/namespaces/{namespace}/horizontalpodautoscalers": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch individual changes to a list of HorizontalPodAutoscaler. deprecated: use the 'watch' parameter with a list operation instead.", + "operationId": "watchAutoscalingV2beta2NamespacedHorizontalPodAutoscalerList", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "autoscaling_v2beta2" + ], + "x-kubernetes-action": "watchlist", + "x-kubernetes-group-version-kind": { + "group": "autoscaling", + "kind": "HorizontalPodAutoscaler", + "version": "v2beta2" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/autoscaling/v2beta2/watch/namespaces/{namespace}/horizontalpodautoscalers/{name}": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch changes to an object of kind HorizontalPodAutoscaler. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.", + "operationId": "watchAutoscalingV2beta2NamespacedHorizontalPodAutoscaler", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "autoscaling_v2beta2" + ], + "x-kubernetes-action": "watch", + "x-kubernetes-group-version-kind": { + "group": "autoscaling", + "kind": "HorizontalPodAutoscaler", + "version": "v2beta2" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "name of the HorizontalPodAutoscaler", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/batch/": { + "get": { + "consumes": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "description": "get information of a group", + "operationId": "getBatchAPIGroup", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.APIGroup" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "batch" + ] + } + }, + "/apis/batch/v1/": { + "get": { + "consumes": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "description": "get available resources", + "operationId": "getBatchV1APIResources", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.APIResourceList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "batch_v1" + ] + } + }, + "/apis/batch/v1/cronjobs": { + "get": { + "consumes": [ + "*/*" + ], + "description": "list or watch objects of kind CronJob", + "operationId": "listBatchV1CronJobForAllNamespaces", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.batch.v1.CronJobList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "batch_v1" + ], + "x-kubernetes-action": "list", + "x-kubernetes-group-version-kind": { + "group": "batch", + "kind": "CronJob", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/batch/v1/jobs": { + "get": { + "consumes": [ + "*/*" + ], + "description": "list or watch objects of kind Job", + "operationId": "listBatchV1JobForAllNamespaces", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.batch.v1.JobList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "batch_v1" + ], + "x-kubernetes-action": "list", + "x-kubernetes-group-version-kind": { + "group": "batch", + "kind": "Job", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/batch/v1/namespaces/{namespace}/cronjobs": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete collection of CronJob", + "operationId": "deleteBatchV1CollectionNamespacedCronJob", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "batch_v1" + ], + "x-kubernetes-action": "deletecollection", + "x-kubernetes-group-version-kind": { + "group": "batch", + "kind": "CronJob", + "version": "v1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "list or watch objects of kind CronJob", + "operationId": "listBatchV1NamespacedCronJob", + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.batch.v1.CronJobList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "batch_v1" + ], + "x-kubernetes-action": "list", + "x-kubernetes-group-version-kind": { + "group": "batch", + "kind": "CronJob", + "version": "v1" + } + }, + "parameters": [ + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "post": { + "consumes": [ + "*/*" + ], + "description": "create a CronJob", + "operationId": "createBatchV1NamespacedCronJob", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.batch.v1.CronJob" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.batch.v1.CronJob" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.batch.v1.CronJob" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.api.batch.v1.CronJob" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "batch_v1" + ], + "x-kubernetes-action": "post", + "x-kubernetes-group-version-kind": { + "group": "batch", + "kind": "CronJob", + "version": "v1" + } + } + }, + "/apis/batch/v1/namespaces/{namespace}/cronjobs/{name}": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete a CronJob", + "operationId": "deleteBatchV1NamespacedCronJob", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "batch_v1" + ], + "x-kubernetes-action": "delete", + "x-kubernetes-group-version-kind": { + "group": "batch", + "kind": "CronJob", + "version": "v1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "read the specified CronJob", + "operationId": "readBatchV1NamespacedCronJob", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.batch.v1.CronJob" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "batch_v1" + ], + "x-kubernetes-action": "get", + "x-kubernetes-group-version-kind": { + "group": "batch", + "kind": "CronJob", + "version": "v1" + } + }, + "parameters": [ + { + "description": "name of the CronJob", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "patch": { + "consumes": [ + "application/json-patch+json", + "application/merge-patch+json", + "application/strategic-merge-patch+json", + "application/apply-patch+yaml" + ], + "description": "partially update the specified CronJob", + "operationId": "patchBatchV1NamespacedCronJob", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Patch" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + }, + { + "description": "Force is going to \"force\" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.", + "in": "query", + "name": "force", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.batch.v1.CronJob" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "batch_v1" + ], + "x-kubernetes-action": "patch", + "x-kubernetes-group-version-kind": { + "group": "batch", + "kind": "CronJob", + "version": "v1" + } + }, + "put": { + "consumes": [ + "*/*" + ], + "description": "replace the specified CronJob", + "operationId": "replaceBatchV1NamespacedCronJob", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.batch.v1.CronJob" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.batch.v1.CronJob" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.batch.v1.CronJob" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "batch_v1" + ], + "x-kubernetes-action": "put", + "x-kubernetes-group-version-kind": { + "group": "batch", + "kind": "CronJob", + "version": "v1" + } + } + }, + "/apis/batch/v1/namespaces/{namespace}/cronjobs/{name}/status": { + "get": { + "consumes": [ + "*/*" + ], + "description": "read status of the specified CronJob", + "operationId": "readBatchV1NamespacedCronJobStatus", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.batch.v1.CronJob" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "batch_v1" + ], + "x-kubernetes-action": "get", + "x-kubernetes-group-version-kind": { + "group": "batch", + "kind": "CronJob", + "version": "v1" + } + }, + "parameters": [ + { + "description": "name of the CronJob", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "patch": { + "consumes": [ + "application/json-patch+json", + "application/merge-patch+json", + "application/strategic-merge-patch+json", + "application/apply-patch+yaml" + ], + "description": "partially update status of the specified CronJob", + "operationId": "patchBatchV1NamespacedCronJobStatus", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Patch" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + }, + { + "description": "Force is going to \"force\" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.", + "in": "query", + "name": "force", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.batch.v1.CronJob" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "batch_v1" + ], + "x-kubernetes-action": "patch", + "x-kubernetes-group-version-kind": { + "group": "batch", + "kind": "CronJob", + "version": "v1" + } + }, + "put": { + "consumes": [ + "*/*" + ], + "description": "replace status of the specified CronJob", + "operationId": "replaceBatchV1NamespacedCronJobStatus", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.batch.v1.CronJob" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.batch.v1.CronJob" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.batch.v1.CronJob" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "batch_v1" + ], + "x-kubernetes-action": "put", + "x-kubernetes-group-version-kind": { + "group": "batch", + "kind": "CronJob", + "version": "v1" + } + } + }, + "/apis/batch/v1/namespaces/{namespace}/jobs": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete collection of Job", + "operationId": "deleteBatchV1CollectionNamespacedJob", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "batch_v1" + ], + "x-kubernetes-action": "deletecollection", + "x-kubernetes-group-version-kind": { + "group": "batch", + "kind": "Job", + "version": "v1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "list or watch objects of kind Job", + "operationId": "listBatchV1NamespacedJob", + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.batch.v1.JobList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "batch_v1" + ], + "x-kubernetes-action": "list", + "x-kubernetes-group-version-kind": { + "group": "batch", + "kind": "Job", + "version": "v1" + } + }, + "parameters": [ + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "post": { + "consumes": [ + "*/*" + ], + "description": "create a Job", + "operationId": "createBatchV1NamespacedJob", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.batch.v1.Job" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.batch.v1.Job" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.batch.v1.Job" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.api.batch.v1.Job" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "batch_v1" + ], + "x-kubernetes-action": "post", + "x-kubernetes-group-version-kind": { + "group": "batch", + "kind": "Job", + "version": "v1" + } + } + }, + "/apis/batch/v1/namespaces/{namespace}/jobs/{name}": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete a Job", + "operationId": "deleteBatchV1NamespacedJob", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "batch_v1" + ], + "x-kubernetes-action": "delete", + "x-kubernetes-group-version-kind": { + "group": "batch", + "kind": "Job", + "version": "v1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "read the specified Job", + "operationId": "readBatchV1NamespacedJob", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.batch.v1.Job" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "batch_v1" + ], + "x-kubernetes-action": "get", + "x-kubernetes-group-version-kind": { + "group": "batch", + "kind": "Job", + "version": "v1" + } + }, + "parameters": [ + { + "description": "name of the Job", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "patch": { + "consumes": [ + "application/json-patch+json", + "application/merge-patch+json", + "application/strategic-merge-patch+json", + "application/apply-patch+yaml" + ], + "description": "partially update the specified Job", + "operationId": "patchBatchV1NamespacedJob", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Patch" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + }, + { + "description": "Force is going to \"force\" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.", + "in": "query", + "name": "force", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.batch.v1.Job" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "batch_v1" + ], + "x-kubernetes-action": "patch", + "x-kubernetes-group-version-kind": { + "group": "batch", + "kind": "Job", + "version": "v1" + } + }, + "put": { + "consumes": [ + "*/*" + ], + "description": "replace the specified Job", + "operationId": "replaceBatchV1NamespacedJob", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.batch.v1.Job" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.batch.v1.Job" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.batch.v1.Job" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "batch_v1" + ], + "x-kubernetes-action": "put", + "x-kubernetes-group-version-kind": { + "group": "batch", + "kind": "Job", + "version": "v1" + } + } + }, + "/apis/batch/v1/namespaces/{namespace}/jobs/{name}/status": { + "get": { + "consumes": [ + "*/*" + ], + "description": "read status of the specified Job", + "operationId": "readBatchV1NamespacedJobStatus", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.batch.v1.Job" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "batch_v1" + ], + "x-kubernetes-action": "get", + "x-kubernetes-group-version-kind": { + "group": "batch", + "kind": "Job", + "version": "v1" + } + }, + "parameters": [ + { + "description": "name of the Job", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "patch": { + "consumes": [ + "application/json-patch+json", + "application/merge-patch+json", + "application/strategic-merge-patch+json", + "application/apply-patch+yaml" + ], + "description": "partially update status of the specified Job", + "operationId": "patchBatchV1NamespacedJobStatus", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Patch" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + }, + { + "description": "Force is going to \"force\" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.", + "in": "query", + "name": "force", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.batch.v1.Job" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "batch_v1" + ], + "x-kubernetes-action": "patch", + "x-kubernetes-group-version-kind": { + "group": "batch", + "kind": "Job", + "version": "v1" + } + }, + "put": { + "consumes": [ + "*/*" + ], + "description": "replace status of the specified Job", + "operationId": "replaceBatchV1NamespacedJobStatus", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.batch.v1.Job" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.batch.v1.Job" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.batch.v1.Job" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "batch_v1" + ], + "x-kubernetes-action": "put", + "x-kubernetes-group-version-kind": { + "group": "batch", + "kind": "Job", + "version": "v1" + } + } + }, + "/apis/batch/v1/watch/cronjobs": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch individual changes to a list of CronJob. deprecated: use the 'watch' parameter with a list operation instead.", + "operationId": "watchBatchV1CronJobListForAllNamespaces", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "batch_v1" + ], + "x-kubernetes-action": "watchlist", + "x-kubernetes-group-version-kind": { + "group": "batch", + "kind": "CronJob", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/batch/v1/watch/jobs": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch individual changes to a list of Job. deprecated: use the 'watch' parameter with a list operation instead.", + "operationId": "watchBatchV1JobListForAllNamespaces", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "batch_v1" + ], + "x-kubernetes-action": "watchlist", + "x-kubernetes-group-version-kind": { + "group": "batch", + "kind": "Job", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/batch/v1/watch/namespaces/{namespace}/cronjobs": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch individual changes to a list of CronJob. deprecated: use the 'watch' parameter with a list operation instead.", + "operationId": "watchBatchV1NamespacedCronJobList", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "batch_v1" + ], + "x-kubernetes-action": "watchlist", + "x-kubernetes-group-version-kind": { + "group": "batch", + "kind": "CronJob", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/batch/v1/watch/namespaces/{namespace}/cronjobs/{name}": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch changes to an object of kind CronJob. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.", + "operationId": "watchBatchV1NamespacedCronJob", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "batch_v1" + ], + "x-kubernetes-action": "watch", + "x-kubernetes-group-version-kind": { + "group": "batch", + "kind": "CronJob", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "name of the CronJob", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/batch/v1/watch/namespaces/{namespace}/jobs": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch individual changes to a list of Job. deprecated: use the 'watch' parameter with a list operation instead.", + "operationId": "watchBatchV1NamespacedJobList", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "batch_v1" + ], + "x-kubernetes-action": "watchlist", + "x-kubernetes-group-version-kind": { + "group": "batch", + "kind": "Job", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/batch/v1/watch/namespaces/{namespace}/jobs/{name}": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch changes to an object of kind Job. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.", + "operationId": "watchBatchV1NamespacedJob", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "batch_v1" + ], + "x-kubernetes-action": "watch", + "x-kubernetes-group-version-kind": { + "group": "batch", + "kind": "Job", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "name of the Job", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/batch/v1beta1/": { + "get": { + "consumes": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "description": "get available resources", + "operationId": "getBatchV1beta1APIResources", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.APIResourceList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "batch_v1beta1" + ] + } + }, + "/apis/batch/v1beta1/cronjobs": { + "get": { + "consumes": [ + "*/*" + ], + "description": "list or watch objects of kind CronJob", + "operationId": "listBatchV1beta1CronJobForAllNamespaces", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.batch.v1beta1.CronJobList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "batch_v1beta1" + ], + "x-kubernetes-action": "list", + "x-kubernetes-group-version-kind": { + "group": "batch", + "kind": "CronJob", + "version": "v1beta1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/batch/v1beta1/namespaces/{namespace}/cronjobs": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete collection of CronJob", + "operationId": "deleteBatchV1beta1CollectionNamespacedCronJob", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "batch_v1beta1" + ], + "x-kubernetes-action": "deletecollection", + "x-kubernetes-group-version-kind": { + "group": "batch", + "kind": "CronJob", + "version": "v1beta1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "list or watch objects of kind CronJob", + "operationId": "listBatchV1beta1NamespacedCronJob", + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.batch.v1beta1.CronJobList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "batch_v1beta1" + ], + "x-kubernetes-action": "list", + "x-kubernetes-group-version-kind": { + "group": "batch", + "kind": "CronJob", + "version": "v1beta1" + } + }, + "parameters": [ + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "post": { + "consumes": [ + "*/*" + ], + "description": "create a CronJob", + "operationId": "createBatchV1beta1NamespacedCronJob", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.batch.v1beta1.CronJob" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.batch.v1beta1.CronJob" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.batch.v1beta1.CronJob" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.api.batch.v1beta1.CronJob" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "batch_v1beta1" + ], + "x-kubernetes-action": "post", + "x-kubernetes-group-version-kind": { + "group": "batch", + "kind": "CronJob", + "version": "v1beta1" + } + } + }, + "/apis/batch/v1beta1/namespaces/{namespace}/cronjobs/{name}": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete a CronJob", + "operationId": "deleteBatchV1beta1NamespacedCronJob", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "batch_v1beta1" + ], + "x-kubernetes-action": "delete", + "x-kubernetes-group-version-kind": { + "group": "batch", + "kind": "CronJob", + "version": "v1beta1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "read the specified CronJob", + "operationId": "readBatchV1beta1NamespacedCronJob", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.batch.v1beta1.CronJob" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "batch_v1beta1" + ], + "x-kubernetes-action": "get", + "x-kubernetes-group-version-kind": { + "group": "batch", + "kind": "CronJob", + "version": "v1beta1" + } + }, + "parameters": [ + { + "description": "name of the CronJob", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "patch": { + "consumes": [ + "application/json-patch+json", + "application/merge-patch+json", + "application/strategic-merge-patch+json", + "application/apply-patch+yaml" + ], + "description": "partially update the specified CronJob", + "operationId": "patchBatchV1beta1NamespacedCronJob", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Patch" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + }, + { + "description": "Force is going to \"force\" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.", + "in": "query", + "name": "force", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.batch.v1beta1.CronJob" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "batch_v1beta1" + ], + "x-kubernetes-action": "patch", + "x-kubernetes-group-version-kind": { + "group": "batch", + "kind": "CronJob", + "version": "v1beta1" + } + }, + "put": { + "consumes": [ + "*/*" + ], + "description": "replace the specified CronJob", + "operationId": "replaceBatchV1beta1NamespacedCronJob", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.batch.v1beta1.CronJob" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.batch.v1beta1.CronJob" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.batch.v1beta1.CronJob" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "batch_v1beta1" + ], + "x-kubernetes-action": "put", + "x-kubernetes-group-version-kind": { + "group": "batch", + "kind": "CronJob", + "version": "v1beta1" + } + } + }, + "/apis/batch/v1beta1/namespaces/{namespace}/cronjobs/{name}/status": { + "get": { + "consumes": [ + "*/*" + ], + "description": "read status of the specified CronJob", + "operationId": "readBatchV1beta1NamespacedCronJobStatus", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.batch.v1beta1.CronJob" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "batch_v1beta1" + ], + "x-kubernetes-action": "get", + "x-kubernetes-group-version-kind": { + "group": "batch", + "kind": "CronJob", + "version": "v1beta1" + } + }, + "parameters": [ + { + "description": "name of the CronJob", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "patch": { + "consumes": [ + "application/json-patch+json", + "application/merge-patch+json", + "application/strategic-merge-patch+json", + "application/apply-patch+yaml" + ], + "description": "partially update status of the specified CronJob", + "operationId": "patchBatchV1beta1NamespacedCronJobStatus", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Patch" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + }, + { + "description": "Force is going to \"force\" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.", + "in": "query", + "name": "force", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.batch.v1beta1.CronJob" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "batch_v1beta1" + ], + "x-kubernetes-action": "patch", + "x-kubernetes-group-version-kind": { + "group": "batch", + "kind": "CronJob", + "version": "v1beta1" + } + }, + "put": { + "consumes": [ + "*/*" + ], + "description": "replace status of the specified CronJob", + "operationId": "replaceBatchV1beta1NamespacedCronJobStatus", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.batch.v1beta1.CronJob" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.batch.v1beta1.CronJob" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.batch.v1beta1.CronJob" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "batch_v1beta1" + ], + "x-kubernetes-action": "put", + "x-kubernetes-group-version-kind": { + "group": "batch", + "kind": "CronJob", + "version": "v1beta1" + } + } + }, + "/apis/batch/v1beta1/watch/cronjobs": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch individual changes to a list of CronJob. deprecated: use the 'watch' parameter with a list operation instead.", + "operationId": "watchBatchV1beta1CronJobListForAllNamespaces", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "batch_v1beta1" + ], + "x-kubernetes-action": "watchlist", + "x-kubernetes-group-version-kind": { + "group": "batch", + "kind": "CronJob", + "version": "v1beta1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/batch/v1beta1/watch/namespaces/{namespace}/cronjobs": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch individual changes to a list of CronJob. deprecated: use the 'watch' parameter with a list operation instead.", + "operationId": "watchBatchV1beta1NamespacedCronJobList", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "batch_v1beta1" + ], + "x-kubernetes-action": "watchlist", + "x-kubernetes-group-version-kind": { + "group": "batch", + "kind": "CronJob", + "version": "v1beta1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/batch/v1beta1/watch/namespaces/{namespace}/cronjobs/{name}": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch changes to an object of kind CronJob. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.", + "operationId": "watchBatchV1beta1NamespacedCronJob", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "batch_v1beta1" + ], + "x-kubernetes-action": "watch", + "x-kubernetes-group-version-kind": { + "group": "batch", + "kind": "CronJob", + "version": "v1beta1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "name of the CronJob", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/certificates.k8s.io/": { + "get": { + "consumes": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "description": "get information of a group", + "operationId": "getCertificatesAPIGroup", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.APIGroup" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "certificates" + ] + } + }, + "/apis/certificates.k8s.io/v1/": { + "get": { + "consumes": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "description": "get available resources", + "operationId": "getCertificatesV1APIResources", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.APIResourceList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "certificates_v1" + ] + } + }, + "/apis/certificates.k8s.io/v1/certificatesigningrequests": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete collection of CertificateSigningRequest", + "operationId": "deleteCertificatesV1CollectionCertificateSigningRequest", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "certificates_v1" + ], + "x-kubernetes-action": "deletecollection", + "x-kubernetes-group-version-kind": { + "group": "certificates.k8s.io", + "kind": "CertificateSigningRequest", + "version": "v1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "list or watch objects of kind CertificateSigningRequest", + "operationId": "listCertificatesV1CertificateSigningRequest", + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.certificates.v1.CertificateSigningRequestList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "certificates_v1" + ], + "x-kubernetes-action": "list", + "x-kubernetes-group-version-kind": { + "group": "certificates.k8s.io", + "kind": "CertificateSigningRequest", + "version": "v1" + } + }, + "parameters": [ + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "post": { + "consumes": [ + "*/*" + ], + "description": "create a CertificateSigningRequest", + "operationId": "createCertificatesV1CertificateSigningRequest", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.certificates.v1.CertificateSigningRequest" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.certificates.v1.CertificateSigningRequest" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.certificates.v1.CertificateSigningRequest" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.api.certificates.v1.CertificateSigningRequest" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "certificates_v1" + ], + "x-kubernetes-action": "post", + "x-kubernetes-group-version-kind": { + "group": "certificates.k8s.io", + "kind": "CertificateSigningRequest", + "version": "v1" + } + } + }, + "/apis/certificates.k8s.io/v1/certificatesigningrequests/{name}": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete a CertificateSigningRequest", + "operationId": "deleteCertificatesV1CertificateSigningRequest", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "certificates_v1" + ], + "x-kubernetes-action": "delete", + "x-kubernetes-group-version-kind": { + "group": "certificates.k8s.io", + "kind": "CertificateSigningRequest", + "version": "v1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "read the specified CertificateSigningRequest", + "operationId": "readCertificatesV1CertificateSigningRequest", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.certificates.v1.CertificateSigningRequest" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "certificates_v1" + ], + "x-kubernetes-action": "get", + "x-kubernetes-group-version-kind": { + "group": "certificates.k8s.io", + "kind": "CertificateSigningRequest", + "version": "v1" + } + }, + "parameters": [ + { + "description": "name of the CertificateSigningRequest", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "patch": { + "consumes": [ + "application/json-patch+json", + "application/merge-patch+json", + "application/strategic-merge-patch+json", + "application/apply-patch+yaml" + ], + "description": "partially update the specified CertificateSigningRequest", + "operationId": "patchCertificatesV1CertificateSigningRequest", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Patch" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + }, + { + "description": "Force is going to \"force\" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.", + "in": "query", + "name": "force", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.certificates.v1.CertificateSigningRequest" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "certificates_v1" + ], + "x-kubernetes-action": "patch", + "x-kubernetes-group-version-kind": { + "group": "certificates.k8s.io", + "kind": "CertificateSigningRequest", + "version": "v1" + } + }, + "put": { + "consumes": [ + "*/*" + ], + "description": "replace the specified CertificateSigningRequest", + "operationId": "replaceCertificatesV1CertificateSigningRequest", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.certificates.v1.CertificateSigningRequest" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.certificates.v1.CertificateSigningRequest" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.certificates.v1.CertificateSigningRequest" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "certificates_v1" + ], + "x-kubernetes-action": "put", + "x-kubernetes-group-version-kind": { + "group": "certificates.k8s.io", + "kind": "CertificateSigningRequest", + "version": "v1" + } + } + }, + "/apis/certificates.k8s.io/v1/certificatesigningrequests/{name}/approval": { + "get": { + "consumes": [ + "*/*" + ], + "description": "read approval of the specified CertificateSigningRequest", + "operationId": "readCertificatesV1CertificateSigningRequestApproval", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.certificates.v1.CertificateSigningRequest" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "certificates_v1" + ], + "x-kubernetes-action": "get", + "x-kubernetes-group-version-kind": { + "group": "certificates.k8s.io", + "kind": "CertificateSigningRequest", + "version": "v1" + } + }, + "parameters": [ + { + "description": "name of the CertificateSigningRequest", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "patch": { + "consumes": [ + "application/json-patch+json", + "application/merge-patch+json", + "application/strategic-merge-patch+json", + "application/apply-patch+yaml" + ], + "description": "partially update approval of the specified CertificateSigningRequest", + "operationId": "patchCertificatesV1CertificateSigningRequestApproval", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Patch" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + }, + { + "description": "Force is going to \"force\" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.", + "in": "query", + "name": "force", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.certificates.v1.CertificateSigningRequest" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "certificates_v1" + ], + "x-kubernetes-action": "patch", + "x-kubernetes-group-version-kind": { + "group": "certificates.k8s.io", + "kind": "CertificateSigningRequest", + "version": "v1" + } + }, + "put": { + "consumes": [ + "*/*" + ], + "description": "replace approval of the specified CertificateSigningRequest", + "operationId": "replaceCertificatesV1CertificateSigningRequestApproval", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.certificates.v1.CertificateSigningRequest" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.certificates.v1.CertificateSigningRequest" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.certificates.v1.CertificateSigningRequest" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "certificates_v1" + ], + "x-kubernetes-action": "put", + "x-kubernetes-group-version-kind": { + "group": "certificates.k8s.io", + "kind": "CertificateSigningRequest", + "version": "v1" + } + } + }, + "/apis/certificates.k8s.io/v1/certificatesigningrequests/{name}/status": { + "get": { + "consumes": [ + "*/*" + ], + "description": "read status of the specified CertificateSigningRequest", + "operationId": "readCertificatesV1CertificateSigningRequestStatus", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.certificates.v1.CertificateSigningRequest" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "certificates_v1" + ], + "x-kubernetes-action": "get", + "x-kubernetes-group-version-kind": { + "group": "certificates.k8s.io", + "kind": "CertificateSigningRequest", + "version": "v1" + } + }, + "parameters": [ + { + "description": "name of the CertificateSigningRequest", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "patch": { + "consumes": [ + "application/json-patch+json", + "application/merge-patch+json", + "application/strategic-merge-patch+json", + "application/apply-patch+yaml" + ], + "description": "partially update status of the specified CertificateSigningRequest", + "operationId": "patchCertificatesV1CertificateSigningRequestStatus", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Patch" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + }, + { + "description": "Force is going to \"force\" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.", + "in": "query", + "name": "force", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.certificates.v1.CertificateSigningRequest" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "certificates_v1" + ], + "x-kubernetes-action": "patch", + "x-kubernetes-group-version-kind": { + "group": "certificates.k8s.io", + "kind": "CertificateSigningRequest", + "version": "v1" + } + }, + "put": { + "consumes": [ + "*/*" + ], + "description": "replace status of the specified CertificateSigningRequest", + "operationId": "replaceCertificatesV1CertificateSigningRequestStatus", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.certificates.v1.CertificateSigningRequest" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.certificates.v1.CertificateSigningRequest" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.certificates.v1.CertificateSigningRequest" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "certificates_v1" + ], + "x-kubernetes-action": "put", + "x-kubernetes-group-version-kind": { + "group": "certificates.k8s.io", + "kind": "CertificateSigningRequest", + "version": "v1" + } + } + }, + "/apis/certificates.k8s.io/v1/watch/certificatesigningrequests": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch individual changes to a list of CertificateSigningRequest. deprecated: use the 'watch' parameter with a list operation instead.", + "operationId": "watchCertificatesV1CertificateSigningRequestList", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "certificates_v1" + ], + "x-kubernetes-action": "watchlist", + "x-kubernetes-group-version-kind": { + "group": "certificates.k8s.io", + "kind": "CertificateSigningRequest", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/certificates.k8s.io/v1/watch/certificatesigningrequests/{name}": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch changes to an object of kind CertificateSigningRequest. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.", + "operationId": "watchCertificatesV1CertificateSigningRequest", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "certificates_v1" + ], + "x-kubernetes-action": "watch", + "x-kubernetes-group-version-kind": { + "group": "certificates.k8s.io", + "kind": "CertificateSigningRequest", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "name of the CertificateSigningRequest", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/certificates.k8s.io/v1beta1/": { + "get": { + "consumes": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "description": "get available resources", + "operationId": "getCertificatesV1beta1APIResources", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.APIResourceList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "certificates_v1beta1" + ] + } + }, + "/apis/certificates.k8s.io/v1beta1/certificatesigningrequests": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete collection of CertificateSigningRequest", + "operationId": "deleteCertificatesV1beta1CollectionCertificateSigningRequest", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "certificates_v1beta1" + ], + "x-kubernetes-action": "deletecollection", + "x-kubernetes-group-version-kind": { + "group": "certificates.k8s.io", + "kind": "CertificateSigningRequest", + "version": "v1beta1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "list or watch objects of kind CertificateSigningRequest", + "operationId": "listCertificatesV1beta1CertificateSigningRequest", + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.certificates.v1beta1.CertificateSigningRequestList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "certificates_v1beta1" + ], + "x-kubernetes-action": "list", + "x-kubernetes-group-version-kind": { + "group": "certificates.k8s.io", + "kind": "CertificateSigningRequest", + "version": "v1beta1" + } + }, + "parameters": [ + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "post": { + "consumes": [ + "*/*" + ], + "description": "create a CertificateSigningRequest", + "operationId": "createCertificatesV1beta1CertificateSigningRequest", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.certificates.v1beta1.CertificateSigningRequest" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.certificates.v1beta1.CertificateSigningRequest" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.certificates.v1beta1.CertificateSigningRequest" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.api.certificates.v1beta1.CertificateSigningRequest" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "certificates_v1beta1" + ], + "x-kubernetes-action": "post", + "x-kubernetes-group-version-kind": { + "group": "certificates.k8s.io", + "kind": "CertificateSigningRequest", + "version": "v1beta1" + } + } + }, + "/apis/certificates.k8s.io/v1beta1/certificatesigningrequests/{name}": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete a CertificateSigningRequest", + "operationId": "deleteCertificatesV1beta1CertificateSigningRequest", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "certificates_v1beta1" + ], + "x-kubernetes-action": "delete", + "x-kubernetes-group-version-kind": { + "group": "certificates.k8s.io", + "kind": "CertificateSigningRequest", + "version": "v1beta1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "read the specified CertificateSigningRequest", + "operationId": "readCertificatesV1beta1CertificateSigningRequest", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.certificates.v1beta1.CertificateSigningRequest" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "certificates_v1beta1" + ], + "x-kubernetes-action": "get", + "x-kubernetes-group-version-kind": { + "group": "certificates.k8s.io", + "kind": "CertificateSigningRequest", + "version": "v1beta1" + } + }, + "parameters": [ + { + "description": "name of the CertificateSigningRequest", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "patch": { + "consumes": [ + "application/json-patch+json", + "application/merge-patch+json", + "application/strategic-merge-patch+json", + "application/apply-patch+yaml" + ], + "description": "partially update the specified CertificateSigningRequest", + "operationId": "patchCertificatesV1beta1CertificateSigningRequest", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Patch" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + }, + { + "description": "Force is going to \"force\" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.", + "in": "query", + "name": "force", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.certificates.v1beta1.CertificateSigningRequest" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "certificates_v1beta1" + ], + "x-kubernetes-action": "patch", + "x-kubernetes-group-version-kind": { + "group": "certificates.k8s.io", + "kind": "CertificateSigningRequest", + "version": "v1beta1" + } + }, + "put": { + "consumes": [ + "*/*" + ], + "description": "replace the specified CertificateSigningRequest", + "operationId": "replaceCertificatesV1beta1CertificateSigningRequest", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.certificates.v1beta1.CertificateSigningRequest" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.certificates.v1beta1.CertificateSigningRequest" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.certificates.v1beta1.CertificateSigningRequest" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "certificates_v1beta1" + ], + "x-kubernetes-action": "put", + "x-kubernetes-group-version-kind": { + "group": "certificates.k8s.io", + "kind": "CertificateSigningRequest", + "version": "v1beta1" + } + } + }, + "/apis/certificates.k8s.io/v1beta1/certificatesigningrequests/{name}/approval": { + "get": { + "consumes": [ + "*/*" + ], + "description": "read approval of the specified CertificateSigningRequest", + "operationId": "readCertificatesV1beta1CertificateSigningRequestApproval", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.certificates.v1beta1.CertificateSigningRequest" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "certificates_v1beta1" + ], + "x-kubernetes-action": "get", + "x-kubernetes-group-version-kind": { + "group": "certificates.k8s.io", + "kind": "CertificateSigningRequest", + "version": "v1beta1" + } + }, + "parameters": [ + { + "description": "name of the CertificateSigningRequest", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "patch": { + "consumes": [ + "application/json-patch+json", + "application/merge-patch+json", + "application/strategic-merge-patch+json", + "application/apply-patch+yaml" + ], + "description": "partially update approval of the specified CertificateSigningRequest", + "operationId": "patchCertificatesV1beta1CertificateSigningRequestApproval", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Patch" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + }, + { + "description": "Force is going to \"force\" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.", + "in": "query", + "name": "force", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.certificates.v1beta1.CertificateSigningRequest" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "certificates_v1beta1" + ], + "x-kubernetes-action": "patch", + "x-kubernetes-group-version-kind": { + "group": "certificates.k8s.io", + "kind": "CertificateSigningRequest", + "version": "v1beta1" + } + }, + "put": { + "consumes": [ + "*/*" + ], + "description": "replace approval of the specified CertificateSigningRequest", + "operationId": "replaceCertificatesV1beta1CertificateSigningRequestApproval", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.certificates.v1beta1.CertificateSigningRequest" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.certificates.v1beta1.CertificateSigningRequest" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.certificates.v1beta1.CertificateSigningRequest" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "certificates_v1beta1" + ], + "x-kubernetes-action": "put", + "x-kubernetes-group-version-kind": { + "group": "certificates.k8s.io", + "kind": "CertificateSigningRequest", + "version": "v1beta1" + } + } + }, + "/apis/certificates.k8s.io/v1beta1/certificatesigningrequests/{name}/status": { + "get": { + "consumes": [ + "*/*" + ], + "description": "read status of the specified CertificateSigningRequest", + "operationId": "readCertificatesV1beta1CertificateSigningRequestStatus", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.certificates.v1beta1.CertificateSigningRequest" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "certificates_v1beta1" + ], + "x-kubernetes-action": "get", + "x-kubernetes-group-version-kind": { + "group": "certificates.k8s.io", + "kind": "CertificateSigningRequest", + "version": "v1beta1" + } + }, + "parameters": [ + { + "description": "name of the CertificateSigningRequest", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "patch": { + "consumes": [ + "application/json-patch+json", + "application/merge-patch+json", + "application/strategic-merge-patch+json", + "application/apply-patch+yaml" + ], + "description": "partially update status of the specified CertificateSigningRequest", + "operationId": "patchCertificatesV1beta1CertificateSigningRequestStatus", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Patch" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + }, + { + "description": "Force is going to \"force\" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.", + "in": "query", + "name": "force", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.certificates.v1beta1.CertificateSigningRequest" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "certificates_v1beta1" + ], + "x-kubernetes-action": "patch", + "x-kubernetes-group-version-kind": { + "group": "certificates.k8s.io", + "kind": "CertificateSigningRequest", + "version": "v1beta1" + } + }, + "put": { + "consumes": [ + "*/*" + ], + "description": "replace status of the specified CertificateSigningRequest", + "operationId": "replaceCertificatesV1beta1CertificateSigningRequestStatus", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.certificates.v1beta1.CertificateSigningRequest" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.certificates.v1beta1.CertificateSigningRequest" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.certificates.v1beta1.CertificateSigningRequest" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "certificates_v1beta1" + ], + "x-kubernetes-action": "put", + "x-kubernetes-group-version-kind": { + "group": "certificates.k8s.io", + "kind": "CertificateSigningRequest", + "version": "v1beta1" + } + } + }, + "/apis/certificates.k8s.io/v1beta1/watch/certificatesigningrequests": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch individual changes to a list of CertificateSigningRequest. deprecated: use the 'watch' parameter with a list operation instead.", + "operationId": "watchCertificatesV1beta1CertificateSigningRequestList", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "certificates_v1beta1" + ], + "x-kubernetes-action": "watchlist", + "x-kubernetes-group-version-kind": { + "group": "certificates.k8s.io", + "kind": "CertificateSigningRequest", + "version": "v1beta1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/certificates.k8s.io/v1beta1/watch/certificatesigningrequests/{name}": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch changes to an object of kind CertificateSigningRequest. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.", + "operationId": "watchCertificatesV1beta1CertificateSigningRequest", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "certificates_v1beta1" + ], + "x-kubernetes-action": "watch", + "x-kubernetes-group-version-kind": { + "group": "certificates.k8s.io", + "kind": "CertificateSigningRequest", + "version": "v1beta1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "name of the CertificateSigningRequest", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/coordination.k8s.io/": { + "get": { + "consumes": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "description": "get information of a group", + "operationId": "getCoordinationAPIGroup", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.APIGroup" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "coordination" + ] + } + }, + "/apis/coordination.k8s.io/v1/": { + "get": { + "consumes": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "description": "get available resources", + "operationId": "getCoordinationV1APIResources", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.APIResourceList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "coordination_v1" + ] + } + }, + "/apis/coordination.k8s.io/v1/leases": { + "get": { + "consumes": [ + "*/*" + ], + "description": "list or watch objects of kind Lease", + "operationId": "listCoordinationV1LeaseForAllNamespaces", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.coordination.v1.LeaseList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "coordination_v1" + ], + "x-kubernetes-action": "list", + "x-kubernetes-group-version-kind": { + "group": "coordination.k8s.io", + "kind": "Lease", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/coordination.k8s.io/v1/namespaces/{namespace}/leases": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete collection of Lease", + "operationId": "deleteCoordinationV1CollectionNamespacedLease", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "coordination_v1" + ], + "x-kubernetes-action": "deletecollection", + "x-kubernetes-group-version-kind": { + "group": "coordination.k8s.io", + "kind": "Lease", + "version": "v1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "list or watch objects of kind Lease", + "operationId": "listCoordinationV1NamespacedLease", + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.coordination.v1.LeaseList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "coordination_v1" + ], + "x-kubernetes-action": "list", + "x-kubernetes-group-version-kind": { + "group": "coordination.k8s.io", + "kind": "Lease", + "version": "v1" + } + }, + "parameters": [ + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "post": { + "consumes": [ + "*/*" + ], + "description": "create a Lease", + "operationId": "createCoordinationV1NamespacedLease", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.coordination.v1.Lease" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.coordination.v1.Lease" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.coordination.v1.Lease" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.api.coordination.v1.Lease" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "coordination_v1" + ], + "x-kubernetes-action": "post", + "x-kubernetes-group-version-kind": { + "group": "coordination.k8s.io", + "kind": "Lease", + "version": "v1" + } + } + }, + "/apis/coordination.k8s.io/v1/namespaces/{namespace}/leases/{name}": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete a Lease", + "operationId": "deleteCoordinationV1NamespacedLease", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "coordination_v1" + ], + "x-kubernetes-action": "delete", + "x-kubernetes-group-version-kind": { + "group": "coordination.k8s.io", + "kind": "Lease", + "version": "v1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "read the specified Lease", + "operationId": "readCoordinationV1NamespacedLease", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.coordination.v1.Lease" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "coordination_v1" + ], + "x-kubernetes-action": "get", + "x-kubernetes-group-version-kind": { + "group": "coordination.k8s.io", + "kind": "Lease", + "version": "v1" + } + }, + "parameters": [ + { + "description": "name of the Lease", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "patch": { + "consumes": [ + "application/json-patch+json", + "application/merge-patch+json", + "application/strategic-merge-patch+json", + "application/apply-patch+yaml" + ], + "description": "partially update the specified Lease", + "operationId": "patchCoordinationV1NamespacedLease", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Patch" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + }, + { + "description": "Force is going to \"force\" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.", + "in": "query", + "name": "force", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.coordination.v1.Lease" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "coordination_v1" + ], + "x-kubernetes-action": "patch", + "x-kubernetes-group-version-kind": { + "group": "coordination.k8s.io", + "kind": "Lease", + "version": "v1" + } + }, + "put": { + "consumes": [ + "*/*" + ], + "description": "replace the specified Lease", + "operationId": "replaceCoordinationV1NamespacedLease", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.coordination.v1.Lease" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.coordination.v1.Lease" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.coordination.v1.Lease" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "coordination_v1" + ], + "x-kubernetes-action": "put", + "x-kubernetes-group-version-kind": { + "group": "coordination.k8s.io", + "kind": "Lease", + "version": "v1" + } + } + }, + "/apis/coordination.k8s.io/v1/watch/leases": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch individual changes to a list of Lease. deprecated: use the 'watch' parameter with a list operation instead.", + "operationId": "watchCoordinationV1LeaseListForAllNamespaces", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "coordination_v1" + ], + "x-kubernetes-action": "watchlist", + "x-kubernetes-group-version-kind": { + "group": "coordination.k8s.io", + "kind": "Lease", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/coordination.k8s.io/v1/watch/namespaces/{namespace}/leases": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch individual changes to a list of Lease. deprecated: use the 'watch' parameter with a list operation instead.", + "operationId": "watchCoordinationV1NamespacedLeaseList", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "coordination_v1" + ], + "x-kubernetes-action": "watchlist", + "x-kubernetes-group-version-kind": { + "group": "coordination.k8s.io", + "kind": "Lease", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/coordination.k8s.io/v1/watch/namespaces/{namespace}/leases/{name}": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch changes to an object of kind Lease. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.", + "operationId": "watchCoordinationV1NamespacedLease", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "coordination_v1" + ], + "x-kubernetes-action": "watch", + "x-kubernetes-group-version-kind": { + "group": "coordination.k8s.io", + "kind": "Lease", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "name of the Lease", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/coordination.k8s.io/v1beta1/": { + "get": { + "consumes": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "description": "get available resources", + "operationId": "getCoordinationV1beta1APIResources", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.APIResourceList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "coordination_v1beta1" + ] + } + }, + "/apis/coordination.k8s.io/v1beta1/leases": { + "get": { + "consumes": [ + "*/*" + ], + "description": "list or watch objects of kind Lease", + "operationId": "listCoordinationV1beta1LeaseForAllNamespaces", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.coordination.v1beta1.LeaseList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "coordination_v1beta1" + ], + "x-kubernetes-action": "list", + "x-kubernetes-group-version-kind": { + "group": "coordination.k8s.io", + "kind": "Lease", + "version": "v1beta1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/coordination.k8s.io/v1beta1/namespaces/{namespace}/leases": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete collection of Lease", + "operationId": "deleteCoordinationV1beta1CollectionNamespacedLease", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "coordination_v1beta1" + ], + "x-kubernetes-action": "deletecollection", + "x-kubernetes-group-version-kind": { + "group": "coordination.k8s.io", + "kind": "Lease", + "version": "v1beta1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "list or watch objects of kind Lease", + "operationId": "listCoordinationV1beta1NamespacedLease", + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.coordination.v1beta1.LeaseList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "coordination_v1beta1" + ], + "x-kubernetes-action": "list", + "x-kubernetes-group-version-kind": { + "group": "coordination.k8s.io", + "kind": "Lease", + "version": "v1beta1" + } + }, + "parameters": [ + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "post": { + "consumes": [ + "*/*" + ], + "description": "create a Lease", + "operationId": "createCoordinationV1beta1NamespacedLease", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.coordination.v1beta1.Lease" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.coordination.v1beta1.Lease" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.coordination.v1beta1.Lease" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.api.coordination.v1beta1.Lease" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "coordination_v1beta1" + ], + "x-kubernetes-action": "post", + "x-kubernetes-group-version-kind": { + "group": "coordination.k8s.io", + "kind": "Lease", + "version": "v1beta1" + } + } + }, + "/apis/coordination.k8s.io/v1beta1/namespaces/{namespace}/leases/{name}": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete a Lease", + "operationId": "deleteCoordinationV1beta1NamespacedLease", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "coordination_v1beta1" + ], + "x-kubernetes-action": "delete", + "x-kubernetes-group-version-kind": { + "group": "coordination.k8s.io", + "kind": "Lease", + "version": "v1beta1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "read the specified Lease", + "operationId": "readCoordinationV1beta1NamespacedLease", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.coordination.v1beta1.Lease" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "coordination_v1beta1" + ], + "x-kubernetes-action": "get", + "x-kubernetes-group-version-kind": { + "group": "coordination.k8s.io", + "kind": "Lease", + "version": "v1beta1" + } + }, + "parameters": [ + { + "description": "name of the Lease", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "patch": { + "consumes": [ + "application/json-patch+json", + "application/merge-patch+json", + "application/strategic-merge-patch+json", + "application/apply-patch+yaml" + ], + "description": "partially update the specified Lease", + "operationId": "patchCoordinationV1beta1NamespacedLease", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Patch" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + }, + { + "description": "Force is going to \"force\" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.", + "in": "query", + "name": "force", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.coordination.v1beta1.Lease" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "coordination_v1beta1" + ], + "x-kubernetes-action": "patch", + "x-kubernetes-group-version-kind": { + "group": "coordination.k8s.io", + "kind": "Lease", + "version": "v1beta1" + } + }, + "put": { + "consumes": [ + "*/*" + ], + "description": "replace the specified Lease", + "operationId": "replaceCoordinationV1beta1NamespacedLease", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.coordination.v1beta1.Lease" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.coordination.v1beta1.Lease" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.coordination.v1beta1.Lease" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "coordination_v1beta1" + ], + "x-kubernetes-action": "put", + "x-kubernetes-group-version-kind": { + "group": "coordination.k8s.io", + "kind": "Lease", + "version": "v1beta1" + } + } + }, + "/apis/coordination.k8s.io/v1beta1/watch/leases": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch individual changes to a list of Lease. deprecated: use the 'watch' parameter with a list operation instead.", + "operationId": "watchCoordinationV1beta1LeaseListForAllNamespaces", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "coordination_v1beta1" + ], + "x-kubernetes-action": "watchlist", + "x-kubernetes-group-version-kind": { + "group": "coordination.k8s.io", + "kind": "Lease", + "version": "v1beta1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/coordination.k8s.io/v1beta1/watch/namespaces/{namespace}/leases": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch individual changes to a list of Lease. deprecated: use the 'watch' parameter with a list operation instead.", + "operationId": "watchCoordinationV1beta1NamespacedLeaseList", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "coordination_v1beta1" + ], + "x-kubernetes-action": "watchlist", + "x-kubernetes-group-version-kind": { + "group": "coordination.k8s.io", + "kind": "Lease", + "version": "v1beta1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/coordination.k8s.io/v1beta1/watch/namespaces/{namespace}/leases/{name}": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch changes to an object of kind Lease. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.", + "operationId": "watchCoordinationV1beta1NamespacedLease", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "coordination_v1beta1" + ], + "x-kubernetes-action": "watch", + "x-kubernetes-group-version-kind": { + "group": "coordination.k8s.io", + "kind": "Lease", + "version": "v1beta1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "name of the Lease", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/discovery.k8s.io/": { + "get": { + "consumes": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "description": "get information of a group", + "operationId": "getDiscoveryAPIGroup", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.APIGroup" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "discovery" + ] + } + }, + "/apis/discovery.k8s.io/v1/": { + "get": { + "consumes": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "description": "get available resources", + "operationId": "getDiscoveryV1APIResources", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.APIResourceList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "discovery_v1" + ] + } + }, + "/apis/discovery.k8s.io/v1/endpointslices": { + "get": { + "consumes": [ + "*/*" + ], + "description": "list or watch objects of kind EndpointSlice", + "operationId": "listDiscoveryV1EndpointSliceForAllNamespaces", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.discovery.v1.EndpointSliceList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "discovery_v1" + ], + "x-kubernetes-action": "list", + "x-kubernetes-group-version-kind": { + "group": "discovery.k8s.io", + "kind": "EndpointSlice", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/discovery.k8s.io/v1/namespaces/{namespace}/endpointslices": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete collection of EndpointSlice", + "operationId": "deleteDiscoveryV1CollectionNamespacedEndpointSlice", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "discovery_v1" + ], + "x-kubernetes-action": "deletecollection", + "x-kubernetes-group-version-kind": { + "group": "discovery.k8s.io", + "kind": "EndpointSlice", + "version": "v1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "list or watch objects of kind EndpointSlice", + "operationId": "listDiscoveryV1NamespacedEndpointSlice", + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.discovery.v1.EndpointSliceList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "discovery_v1" + ], + "x-kubernetes-action": "list", + "x-kubernetes-group-version-kind": { + "group": "discovery.k8s.io", + "kind": "EndpointSlice", + "version": "v1" + } + }, + "parameters": [ + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "post": { + "consumes": [ + "*/*" + ], + "description": "create an EndpointSlice", + "operationId": "createDiscoveryV1NamespacedEndpointSlice", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.discovery.v1.EndpointSlice" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.discovery.v1.EndpointSlice" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.discovery.v1.EndpointSlice" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.api.discovery.v1.EndpointSlice" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "discovery_v1" + ], + "x-kubernetes-action": "post", + "x-kubernetes-group-version-kind": { + "group": "discovery.k8s.io", + "kind": "EndpointSlice", + "version": "v1" + } + } + }, + "/apis/discovery.k8s.io/v1/namespaces/{namespace}/endpointslices/{name}": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete an EndpointSlice", + "operationId": "deleteDiscoveryV1NamespacedEndpointSlice", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "discovery_v1" + ], + "x-kubernetes-action": "delete", + "x-kubernetes-group-version-kind": { + "group": "discovery.k8s.io", + "kind": "EndpointSlice", + "version": "v1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "read the specified EndpointSlice", + "operationId": "readDiscoveryV1NamespacedEndpointSlice", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.discovery.v1.EndpointSlice" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "discovery_v1" + ], + "x-kubernetes-action": "get", + "x-kubernetes-group-version-kind": { + "group": "discovery.k8s.io", + "kind": "EndpointSlice", + "version": "v1" + } + }, + "parameters": [ + { + "description": "name of the EndpointSlice", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "patch": { + "consumes": [ + "application/json-patch+json", + "application/merge-patch+json", + "application/strategic-merge-patch+json", + "application/apply-patch+yaml" + ], + "description": "partially update the specified EndpointSlice", + "operationId": "patchDiscoveryV1NamespacedEndpointSlice", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Patch" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + }, + { + "description": "Force is going to \"force\" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.", + "in": "query", + "name": "force", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.discovery.v1.EndpointSlice" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "discovery_v1" + ], + "x-kubernetes-action": "patch", + "x-kubernetes-group-version-kind": { + "group": "discovery.k8s.io", + "kind": "EndpointSlice", + "version": "v1" + } + }, + "put": { + "consumes": [ + "*/*" + ], + "description": "replace the specified EndpointSlice", + "operationId": "replaceDiscoveryV1NamespacedEndpointSlice", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.discovery.v1.EndpointSlice" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.discovery.v1.EndpointSlice" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.discovery.v1.EndpointSlice" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "discovery_v1" + ], + "x-kubernetes-action": "put", + "x-kubernetes-group-version-kind": { + "group": "discovery.k8s.io", + "kind": "EndpointSlice", + "version": "v1" + } + } + }, + "/apis/discovery.k8s.io/v1/watch/endpointslices": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch individual changes to a list of EndpointSlice. deprecated: use the 'watch' parameter with a list operation instead.", + "operationId": "watchDiscoveryV1EndpointSliceListForAllNamespaces", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "discovery_v1" + ], + "x-kubernetes-action": "watchlist", + "x-kubernetes-group-version-kind": { + "group": "discovery.k8s.io", + "kind": "EndpointSlice", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/discovery.k8s.io/v1/watch/namespaces/{namespace}/endpointslices": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch individual changes to a list of EndpointSlice. deprecated: use the 'watch' parameter with a list operation instead.", + "operationId": "watchDiscoveryV1NamespacedEndpointSliceList", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "discovery_v1" + ], + "x-kubernetes-action": "watchlist", + "x-kubernetes-group-version-kind": { + "group": "discovery.k8s.io", + "kind": "EndpointSlice", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/discovery.k8s.io/v1/watch/namespaces/{namespace}/endpointslices/{name}": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch changes to an object of kind EndpointSlice. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.", + "operationId": "watchDiscoveryV1NamespacedEndpointSlice", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "discovery_v1" + ], + "x-kubernetes-action": "watch", + "x-kubernetes-group-version-kind": { + "group": "discovery.k8s.io", + "kind": "EndpointSlice", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "name of the EndpointSlice", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/discovery.k8s.io/v1beta1/": { + "get": { + "consumes": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "description": "get available resources", + "operationId": "getDiscoveryV1beta1APIResources", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.APIResourceList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "discovery_v1beta1" + ] + } + }, + "/apis/discovery.k8s.io/v1beta1/endpointslices": { + "get": { + "consumes": [ + "*/*" + ], + "description": "list or watch objects of kind EndpointSlice", + "operationId": "listDiscoveryV1beta1EndpointSliceForAllNamespaces", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.discovery.v1beta1.EndpointSliceList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "discovery_v1beta1" + ], + "x-kubernetes-action": "list", + "x-kubernetes-group-version-kind": { + "group": "discovery.k8s.io", + "kind": "EndpointSlice", + "version": "v1beta1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/discovery.k8s.io/v1beta1/namespaces/{namespace}/endpointslices": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete collection of EndpointSlice", + "operationId": "deleteDiscoveryV1beta1CollectionNamespacedEndpointSlice", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "discovery_v1beta1" + ], + "x-kubernetes-action": "deletecollection", + "x-kubernetes-group-version-kind": { + "group": "discovery.k8s.io", + "kind": "EndpointSlice", + "version": "v1beta1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "list or watch objects of kind EndpointSlice", + "operationId": "listDiscoveryV1beta1NamespacedEndpointSlice", + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.discovery.v1beta1.EndpointSliceList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "discovery_v1beta1" + ], + "x-kubernetes-action": "list", + "x-kubernetes-group-version-kind": { + "group": "discovery.k8s.io", + "kind": "EndpointSlice", + "version": "v1beta1" + } + }, + "parameters": [ + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "post": { + "consumes": [ + "*/*" + ], + "description": "create an EndpointSlice", + "operationId": "createDiscoveryV1beta1NamespacedEndpointSlice", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.discovery.v1beta1.EndpointSlice" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.discovery.v1beta1.EndpointSlice" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.discovery.v1beta1.EndpointSlice" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.api.discovery.v1beta1.EndpointSlice" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "discovery_v1beta1" + ], + "x-kubernetes-action": "post", + "x-kubernetes-group-version-kind": { + "group": "discovery.k8s.io", + "kind": "EndpointSlice", + "version": "v1beta1" + } + } + }, + "/apis/discovery.k8s.io/v1beta1/namespaces/{namespace}/endpointslices/{name}": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete an EndpointSlice", + "operationId": "deleteDiscoveryV1beta1NamespacedEndpointSlice", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "discovery_v1beta1" + ], + "x-kubernetes-action": "delete", + "x-kubernetes-group-version-kind": { + "group": "discovery.k8s.io", + "kind": "EndpointSlice", + "version": "v1beta1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "read the specified EndpointSlice", + "operationId": "readDiscoveryV1beta1NamespacedEndpointSlice", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.discovery.v1beta1.EndpointSlice" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "discovery_v1beta1" + ], + "x-kubernetes-action": "get", + "x-kubernetes-group-version-kind": { + "group": "discovery.k8s.io", + "kind": "EndpointSlice", + "version": "v1beta1" + } + }, + "parameters": [ + { + "description": "name of the EndpointSlice", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "patch": { + "consumes": [ + "application/json-patch+json", + "application/merge-patch+json", + "application/strategic-merge-patch+json", + "application/apply-patch+yaml" + ], + "description": "partially update the specified EndpointSlice", + "operationId": "patchDiscoveryV1beta1NamespacedEndpointSlice", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Patch" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + }, + { + "description": "Force is going to \"force\" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.", + "in": "query", + "name": "force", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.discovery.v1beta1.EndpointSlice" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "discovery_v1beta1" + ], + "x-kubernetes-action": "patch", + "x-kubernetes-group-version-kind": { + "group": "discovery.k8s.io", + "kind": "EndpointSlice", + "version": "v1beta1" + } + }, + "put": { + "consumes": [ + "*/*" + ], + "description": "replace the specified EndpointSlice", + "operationId": "replaceDiscoveryV1beta1NamespacedEndpointSlice", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.discovery.v1beta1.EndpointSlice" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.discovery.v1beta1.EndpointSlice" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.discovery.v1beta1.EndpointSlice" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "discovery_v1beta1" + ], + "x-kubernetes-action": "put", + "x-kubernetes-group-version-kind": { + "group": "discovery.k8s.io", + "kind": "EndpointSlice", + "version": "v1beta1" + } + } + }, + "/apis/discovery.k8s.io/v1beta1/watch/endpointslices": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch individual changes to a list of EndpointSlice. deprecated: use the 'watch' parameter with a list operation instead.", + "operationId": "watchDiscoveryV1beta1EndpointSliceListForAllNamespaces", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "discovery_v1beta1" + ], + "x-kubernetes-action": "watchlist", + "x-kubernetes-group-version-kind": { + "group": "discovery.k8s.io", + "kind": "EndpointSlice", + "version": "v1beta1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/discovery.k8s.io/v1beta1/watch/namespaces/{namespace}/endpointslices": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch individual changes to a list of EndpointSlice. deprecated: use the 'watch' parameter with a list operation instead.", + "operationId": "watchDiscoveryV1beta1NamespacedEndpointSliceList", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "discovery_v1beta1" + ], + "x-kubernetes-action": "watchlist", + "x-kubernetes-group-version-kind": { + "group": "discovery.k8s.io", + "kind": "EndpointSlice", + "version": "v1beta1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/discovery.k8s.io/v1beta1/watch/namespaces/{namespace}/endpointslices/{name}": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch changes to an object of kind EndpointSlice. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.", + "operationId": "watchDiscoveryV1beta1NamespacedEndpointSlice", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "discovery_v1beta1" + ], + "x-kubernetes-action": "watch", + "x-kubernetes-group-version-kind": { + "group": "discovery.k8s.io", + "kind": "EndpointSlice", + "version": "v1beta1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "name of the EndpointSlice", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/events.k8s.io/": { + "get": { + "consumes": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "description": "get information of a group", + "operationId": "getEventsAPIGroup", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.APIGroup" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "events" + ] + } + }, + "/apis/events.k8s.io/v1/": { + "get": { + "consumes": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "description": "get available resources", + "operationId": "getEventsV1APIResources", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.APIResourceList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "events_v1" + ] + } + }, + "/apis/events.k8s.io/v1/events": { + "get": { + "consumes": [ + "*/*" + ], + "description": "list or watch objects of kind Event", + "operationId": "listEventsV1EventForAllNamespaces", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.events.v1.EventList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "events_v1" + ], + "x-kubernetes-action": "list", + "x-kubernetes-group-version-kind": { + "group": "events.k8s.io", + "kind": "Event", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/events.k8s.io/v1/namespaces/{namespace}/events": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete collection of Event", + "operationId": "deleteEventsV1CollectionNamespacedEvent", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "events_v1" + ], + "x-kubernetes-action": "deletecollection", + "x-kubernetes-group-version-kind": { + "group": "events.k8s.io", + "kind": "Event", + "version": "v1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "list or watch objects of kind Event", + "operationId": "listEventsV1NamespacedEvent", + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.events.v1.EventList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "events_v1" + ], + "x-kubernetes-action": "list", + "x-kubernetes-group-version-kind": { + "group": "events.k8s.io", + "kind": "Event", + "version": "v1" + } + }, + "parameters": [ + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "post": { + "consumes": [ + "*/*" + ], + "description": "create an Event", + "operationId": "createEventsV1NamespacedEvent", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.events.v1.Event" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.events.v1.Event" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.events.v1.Event" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.api.events.v1.Event" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "events_v1" + ], + "x-kubernetes-action": "post", + "x-kubernetes-group-version-kind": { + "group": "events.k8s.io", + "kind": "Event", + "version": "v1" + } + } + }, + "/apis/events.k8s.io/v1/namespaces/{namespace}/events/{name}": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete an Event", + "operationId": "deleteEventsV1NamespacedEvent", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "events_v1" + ], + "x-kubernetes-action": "delete", + "x-kubernetes-group-version-kind": { + "group": "events.k8s.io", + "kind": "Event", + "version": "v1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "read the specified Event", + "operationId": "readEventsV1NamespacedEvent", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.events.v1.Event" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "events_v1" + ], + "x-kubernetes-action": "get", + "x-kubernetes-group-version-kind": { + "group": "events.k8s.io", + "kind": "Event", + "version": "v1" + } + }, + "parameters": [ + { + "description": "name of the Event", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "patch": { + "consumes": [ + "application/json-patch+json", + "application/merge-patch+json", + "application/strategic-merge-patch+json", + "application/apply-patch+yaml" + ], + "description": "partially update the specified Event", + "operationId": "patchEventsV1NamespacedEvent", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Patch" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + }, + { + "description": "Force is going to \"force\" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.", + "in": "query", + "name": "force", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.events.v1.Event" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "events_v1" + ], + "x-kubernetes-action": "patch", + "x-kubernetes-group-version-kind": { + "group": "events.k8s.io", + "kind": "Event", + "version": "v1" + } + }, + "put": { + "consumes": [ + "*/*" + ], + "description": "replace the specified Event", + "operationId": "replaceEventsV1NamespacedEvent", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.events.v1.Event" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.events.v1.Event" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.events.v1.Event" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "events_v1" + ], + "x-kubernetes-action": "put", + "x-kubernetes-group-version-kind": { + "group": "events.k8s.io", + "kind": "Event", + "version": "v1" + } + } + }, + "/apis/events.k8s.io/v1/watch/events": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch individual changes to a list of Event. deprecated: use the 'watch' parameter with a list operation instead.", + "operationId": "watchEventsV1EventListForAllNamespaces", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "events_v1" + ], + "x-kubernetes-action": "watchlist", + "x-kubernetes-group-version-kind": { + "group": "events.k8s.io", + "kind": "Event", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/events.k8s.io/v1/watch/namespaces/{namespace}/events": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch individual changes to a list of Event. deprecated: use the 'watch' parameter with a list operation instead.", + "operationId": "watchEventsV1NamespacedEventList", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "events_v1" + ], + "x-kubernetes-action": "watchlist", + "x-kubernetes-group-version-kind": { + "group": "events.k8s.io", + "kind": "Event", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/events.k8s.io/v1/watch/namespaces/{namespace}/events/{name}": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch changes to an object of kind Event. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.", + "operationId": "watchEventsV1NamespacedEvent", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "events_v1" + ], + "x-kubernetes-action": "watch", + "x-kubernetes-group-version-kind": { + "group": "events.k8s.io", + "kind": "Event", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "name of the Event", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/events.k8s.io/v1beta1/": { + "get": { + "consumes": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "description": "get available resources", + "operationId": "getEventsV1beta1APIResources", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.APIResourceList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "events_v1beta1" + ] + } + }, + "/apis/events.k8s.io/v1beta1/events": { + "get": { + "consumes": [ + "*/*" + ], + "description": "list or watch objects of kind Event", + "operationId": "listEventsV1beta1EventForAllNamespaces", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.events.v1beta1.EventList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "events_v1beta1" + ], + "x-kubernetes-action": "list", + "x-kubernetes-group-version-kind": { + "group": "events.k8s.io", + "kind": "Event", + "version": "v1beta1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/events.k8s.io/v1beta1/namespaces/{namespace}/events": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete collection of Event", + "operationId": "deleteEventsV1beta1CollectionNamespacedEvent", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "events_v1beta1" + ], + "x-kubernetes-action": "deletecollection", + "x-kubernetes-group-version-kind": { + "group": "events.k8s.io", + "kind": "Event", + "version": "v1beta1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "list or watch objects of kind Event", + "operationId": "listEventsV1beta1NamespacedEvent", + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.events.v1beta1.EventList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "events_v1beta1" + ], + "x-kubernetes-action": "list", + "x-kubernetes-group-version-kind": { + "group": "events.k8s.io", + "kind": "Event", + "version": "v1beta1" + } + }, + "parameters": [ + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "post": { + "consumes": [ + "*/*" + ], + "description": "create an Event", + "operationId": "createEventsV1beta1NamespacedEvent", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.events.v1beta1.Event" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.events.v1beta1.Event" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.events.v1beta1.Event" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.api.events.v1beta1.Event" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "events_v1beta1" + ], + "x-kubernetes-action": "post", + "x-kubernetes-group-version-kind": { + "group": "events.k8s.io", + "kind": "Event", + "version": "v1beta1" + } + } + }, + "/apis/events.k8s.io/v1beta1/namespaces/{namespace}/events/{name}": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete an Event", + "operationId": "deleteEventsV1beta1NamespacedEvent", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "events_v1beta1" + ], + "x-kubernetes-action": "delete", + "x-kubernetes-group-version-kind": { + "group": "events.k8s.io", + "kind": "Event", + "version": "v1beta1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "read the specified Event", + "operationId": "readEventsV1beta1NamespacedEvent", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.events.v1beta1.Event" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "events_v1beta1" + ], + "x-kubernetes-action": "get", + "x-kubernetes-group-version-kind": { + "group": "events.k8s.io", + "kind": "Event", + "version": "v1beta1" + } + }, + "parameters": [ + { + "description": "name of the Event", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "patch": { + "consumes": [ + "application/json-patch+json", + "application/merge-patch+json", + "application/strategic-merge-patch+json", + "application/apply-patch+yaml" + ], + "description": "partially update the specified Event", + "operationId": "patchEventsV1beta1NamespacedEvent", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Patch" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + }, + { + "description": "Force is going to \"force\" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.", + "in": "query", + "name": "force", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.events.v1beta1.Event" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "events_v1beta1" + ], + "x-kubernetes-action": "patch", + "x-kubernetes-group-version-kind": { + "group": "events.k8s.io", + "kind": "Event", + "version": "v1beta1" + } + }, + "put": { + "consumes": [ + "*/*" + ], + "description": "replace the specified Event", + "operationId": "replaceEventsV1beta1NamespacedEvent", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.events.v1beta1.Event" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.events.v1beta1.Event" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.events.v1beta1.Event" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "events_v1beta1" + ], + "x-kubernetes-action": "put", + "x-kubernetes-group-version-kind": { + "group": "events.k8s.io", + "kind": "Event", + "version": "v1beta1" + } + } + }, + "/apis/events.k8s.io/v1beta1/watch/events": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch individual changes to a list of Event. deprecated: use the 'watch' parameter with a list operation instead.", + "operationId": "watchEventsV1beta1EventListForAllNamespaces", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "events_v1beta1" + ], + "x-kubernetes-action": "watchlist", + "x-kubernetes-group-version-kind": { + "group": "events.k8s.io", + "kind": "Event", + "version": "v1beta1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/events.k8s.io/v1beta1/watch/namespaces/{namespace}/events": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch individual changes to a list of Event. deprecated: use the 'watch' parameter with a list operation instead.", + "operationId": "watchEventsV1beta1NamespacedEventList", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "events_v1beta1" + ], + "x-kubernetes-action": "watchlist", + "x-kubernetes-group-version-kind": { + "group": "events.k8s.io", + "kind": "Event", + "version": "v1beta1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/events.k8s.io/v1beta1/watch/namespaces/{namespace}/events/{name}": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch changes to an object of kind Event. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.", + "operationId": "watchEventsV1beta1NamespacedEvent", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "events_v1beta1" + ], + "x-kubernetes-action": "watch", + "x-kubernetes-group-version-kind": { + "group": "events.k8s.io", + "kind": "Event", + "version": "v1beta1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "name of the Event", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/extensions/": { + "get": { + "consumes": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "description": "get information of a group", + "operationId": "getExtensionsAPIGroup", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.APIGroup" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "extensions" + ] + } + }, + "/apis/extensions/v1beta1/": { + "get": { + "consumes": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "description": "get available resources", + "operationId": "getExtensionsV1beta1APIResources", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.APIResourceList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "extensions_v1beta1" + ] + } + }, + "/apis/extensions/v1beta1/ingresses": { + "get": { + "consumes": [ + "*/*" + ], + "description": "list or watch objects of kind Ingress", + "operationId": "listExtensionsV1beta1IngressForAllNamespaces", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.extensions.v1beta1.IngressList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "extensions_v1beta1" + ], + "x-kubernetes-action": "list", + "x-kubernetes-group-version-kind": { + "group": "extensions", + "kind": "Ingress", + "version": "v1beta1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/extensions/v1beta1/namespaces/{namespace}/ingresses": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete collection of Ingress", + "operationId": "deleteExtensionsV1beta1CollectionNamespacedIngress", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "extensions_v1beta1" + ], + "x-kubernetes-action": "deletecollection", + "x-kubernetes-group-version-kind": { + "group": "extensions", + "kind": "Ingress", + "version": "v1beta1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "list or watch objects of kind Ingress", + "operationId": "listExtensionsV1beta1NamespacedIngress", + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.extensions.v1beta1.IngressList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "extensions_v1beta1" + ], + "x-kubernetes-action": "list", + "x-kubernetes-group-version-kind": { + "group": "extensions", + "kind": "Ingress", + "version": "v1beta1" + } + }, + "parameters": [ + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "post": { + "consumes": [ + "*/*" + ], + "description": "create an Ingress", + "operationId": "createExtensionsV1beta1NamespacedIngress", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.extensions.v1beta1.Ingress" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.extensions.v1beta1.Ingress" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.extensions.v1beta1.Ingress" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.api.extensions.v1beta1.Ingress" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "extensions_v1beta1" + ], + "x-kubernetes-action": "post", + "x-kubernetes-group-version-kind": { + "group": "extensions", + "kind": "Ingress", + "version": "v1beta1" + } + } + }, + "/apis/extensions/v1beta1/namespaces/{namespace}/ingresses/{name}": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete an Ingress", + "operationId": "deleteExtensionsV1beta1NamespacedIngress", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "extensions_v1beta1" + ], + "x-kubernetes-action": "delete", + "x-kubernetes-group-version-kind": { + "group": "extensions", + "kind": "Ingress", + "version": "v1beta1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "read the specified Ingress", + "operationId": "readExtensionsV1beta1NamespacedIngress", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.extensions.v1beta1.Ingress" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "extensions_v1beta1" + ], + "x-kubernetes-action": "get", + "x-kubernetes-group-version-kind": { + "group": "extensions", + "kind": "Ingress", + "version": "v1beta1" + } + }, + "parameters": [ + { + "description": "name of the Ingress", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "patch": { + "consumes": [ + "application/json-patch+json", + "application/merge-patch+json", + "application/strategic-merge-patch+json", + "application/apply-patch+yaml" + ], + "description": "partially update the specified Ingress", + "operationId": "patchExtensionsV1beta1NamespacedIngress", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Patch" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + }, + { + "description": "Force is going to \"force\" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.", + "in": "query", + "name": "force", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.extensions.v1beta1.Ingress" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "extensions_v1beta1" + ], + "x-kubernetes-action": "patch", + "x-kubernetes-group-version-kind": { + "group": "extensions", + "kind": "Ingress", + "version": "v1beta1" + } + }, + "put": { + "consumes": [ + "*/*" + ], + "description": "replace the specified Ingress", + "operationId": "replaceExtensionsV1beta1NamespacedIngress", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.extensions.v1beta1.Ingress" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.extensions.v1beta1.Ingress" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.extensions.v1beta1.Ingress" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "extensions_v1beta1" + ], + "x-kubernetes-action": "put", + "x-kubernetes-group-version-kind": { + "group": "extensions", + "kind": "Ingress", + "version": "v1beta1" + } + } + }, + "/apis/extensions/v1beta1/namespaces/{namespace}/ingresses/{name}/status": { + "get": { + "consumes": [ + "*/*" + ], + "description": "read status of the specified Ingress", + "operationId": "readExtensionsV1beta1NamespacedIngressStatus", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.extensions.v1beta1.Ingress" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "extensions_v1beta1" + ], + "x-kubernetes-action": "get", + "x-kubernetes-group-version-kind": { + "group": "extensions", + "kind": "Ingress", + "version": "v1beta1" + } + }, + "parameters": [ + { + "description": "name of the Ingress", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "patch": { + "consumes": [ + "application/json-patch+json", + "application/merge-patch+json", + "application/strategic-merge-patch+json", + "application/apply-patch+yaml" + ], + "description": "partially update status of the specified Ingress", + "operationId": "patchExtensionsV1beta1NamespacedIngressStatus", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Patch" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + }, + { + "description": "Force is going to \"force\" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.", + "in": "query", + "name": "force", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.extensions.v1beta1.Ingress" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "extensions_v1beta1" + ], + "x-kubernetes-action": "patch", + "x-kubernetes-group-version-kind": { + "group": "extensions", + "kind": "Ingress", + "version": "v1beta1" + } + }, + "put": { + "consumes": [ + "*/*" + ], + "description": "replace status of the specified Ingress", + "operationId": "replaceExtensionsV1beta1NamespacedIngressStatus", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.extensions.v1beta1.Ingress" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.extensions.v1beta1.Ingress" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.extensions.v1beta1.Ingress" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "extensions_v1beta1" + ], + "x-kubernetes-action": "put", + "x-kubernetes-group-version-kind": { + "group": "extensions", + "kind": "Ingress", + "version": "v1beta1" + } + } + }, + "/apis/extensions/v1beta1/watch/ingresses": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch individual changes to a list of Ingress. deprecated: use the 'watch' parameter with a list operation instead.", + "operationId": "watchExtensionsV1beta1IngressListForAllNamespaces", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "extensions_v1beta1" + ], + "x-kubernetes-action": "watchlist", + "x-kubernetes-group-version-kind": { + "group": "extensions", + "kind": "Ingress", + "version": "v1beta1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/extensions/v1beta1/watch/namespaces/{namespace}/ingresses": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch individual changes to a list of Ingress. deprecated: use the 'watch' parameter with a list operation instead.", + "operationId": "watchExtensionsV1beta1NamespacedIngressList", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "extensions_v1beta1" + ], + "x-kubernetes-action": "watchlist", + "x-kubernetes-group-version-kind": { + "group": "extensions", + "kind": "Ingress", + "version": "v1beta1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/extensions/v1beta1/watch/namespaces/{namespace}/ingresses/{name}": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch changes to an object of kind Ingress. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.", + "operationId": "watchExtensionsV1beta1NamespacedIngress", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "extensions_v1beta1" + ], + "x-kubernetes-action": "watch", + "x-kubernetes-group-version-kind": { + "group": "extensions", + "kind": "Ingress", + "version": "v1beta1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "name of the Ingress", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/flowcontrol.apiserver.k8s.io/": { + "get": { + "consumes": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "description": "get information of a group", + "operationId": "getFlowcontrolApiserverAPIGroup", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.APIGroup" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "flowcontrolApiserver" + ] + } + }, + "/apis/flowcontrol.apiserver.k8s.io/v1beta1/": { + "get": { + "consumes": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "description": "get available resources", + "operationId": "getFlowcontrolApiserverV1beta1APIResources", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.APIResourceList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "flowcontrolApiserver_v1beta1" + ] + } + }, + "/apis/flowcontrol.apiserver.k8s.io/v1beta1/flowschemas": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete collection of FlowSchema", + "operationId": "deleteFlowcontrolApiserverV1beta1CollectionFlowSchema", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "flowcontrolApiserver_v1beta1" + ], + "x-kubernetes-action": "deletecollection", + "x-kubernetes-group-version-kind": { + "group": "flowcontrol.apiserver.k8s.io", + "kind": "FlowSchema", + "version": "v1beta1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "list or watch objects of kind FlowSchema", + "operationId": "listFlowcontrolApiserverV1beta1FlowSchema", + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta1.FlowSchemaList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "flowcontrolApiserver_v1beta1" + ], + "x-kubernetes-action": "list", + "x-kubernetes-group-version-kind": { + "group": "flowcontrol.apiserver.k8s.io", + "kind": "FlowSchema", + "version": "v1beta1" + } + }, + "parameters": [ + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "post": { + "consumes": [ + "*/*" + ], + "description": "create a FlowSchema", + "operationId": "createFlowcontrolApiserverV1beta1FlowSchema", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta1.FlowSchema" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta1.FlowSchema" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta1.FlowSchema" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta1.FlowSchema" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "flowcontrolApiserver_v1beta1" + ], + "x-kubernetes-action": "post", + "x-kubernetes-group-version-kind": { + "group": "flowcontrol.apiserver.k8s.io", + "kind": "FlowSchema", + "version": "v1beta1" + } + } + }, + "/apis/flowcontrol.apiserver.k8s.io/v1beta1/flowschemas/{name}": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete a FlowSchema", + "operationId": "deleteFlowcontrolApiserverV1beta1FlowSchema", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "flowcontrolApiserver_v1beta1" + ], + "x-kubernetes-action": "delete", + "x-kubernetes-group-version-kind": { + "group": "flowcontrol.apiserver.k8s.io", + "kind": "FlowSchema", + "version": "v1beta1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "read the specified FlowSchema", + "operationId": "readFlowcontrolApiserverV1beta1FlowSchema", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta1.FlowSchema" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "flowcontrolApiserver_v1beta1" + ], + "x-kubernetes-action": "get", + "x-kubernetes-group-version-kind": { + "group": "flowcontrol.apiserver.k8s.io", + "kind": "FlowSchema", + "version": "v1beta1" + } + }, + "parameters": [ + { + "description": "name of the FlowSchema", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "patch": { + "consumes": [ + "application/json-patch+json", + "application/merge-patch+json", + "application/strategic-merge-patch+json", + "application/apply-patch+yaml" + ], + "description": "partially update the specified FlowSchema", + "operationId": "patchFlowcontrolApiserverV1beta1FlowSchema", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Patch" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + }, + { + "description": "Force is going to \"force\" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.", + "in": "query", + "name": "force", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta1.FlowSchema" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "flowcontrolApiserver_v1beta1" + ], + "x-kubernetes-action": "patch", + "x-kubernetes-group-version-kind": { + "group": "flowcontrol.apiserver.k8s.io", + "kind": "FlowSchema", + "version": "v1beta1" + } + }, + "put": { + "consumes": [ + "*/*" + ], + "description": "replace the specified FlowSchema", + "operationId": "replaceFlowcontrolApiserverV1beta1FlowSchema", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta1.FlowSchema" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta1.FlowSchema" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta1.FlowSchema" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "flowcontrolApiserver_v1beta1" + ], + "x-kubernetes-action": "put", + "x-kubernetes-group-version-kind": { + "group": "flowcontrol.apiserver.k8s.io", + "kind": "FlowSchema", + "version": "v1beta1" + } + } + }, + "/apis/flowcontrol.apiserver.k8s.io/v1beta1/flowschemas/{name}/status": { + "get": { + "consumes": [ + "*/*" + ], + "description": "read status of the specified FlowSchema", + "operationId": "readFlowcontrolApiserverV1beta1FlowSchemaStatus", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta1.FlowSchema" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "flowcontrolApiserver_v1beta1" + ], + "x-kubernetes-action": "get", + "x-kubernetes-group-version-kind": { + "group": "flowcontrol.apiserver.k8s.io", + "kind": "FlowSchema", + "version": "v1beta1" + } + }, + "parameters": [ + { + "description": "name of the FlowSchema", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "patch": { + "consumes": [ + "application/json-patch+json", + "application/merge-patch+json", + "application/strategic-merge-patch+json", + "application/apply-patch+yaml" + ], + "description": "partially update status of the specified FlowSchema", + "operationId": "patchFlowcontrolApiserverV1beta1FlowSchemaStatus", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Patch" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + }, + { + "description": "Force is going to \"force\" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.", + "in": "query", + "name": "force", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta1.FlowSchema" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "flowcontrolApiserver_v1beta1" + ], + "x-kubernetes-action": "patch", + "x-kubernetes-group-version-kind": { + "group": "flowcontrol.apiserver.k8s.io", + "kind": "FlowSchema", + "version": "v1beta1" + } + }, + "put": { + "consumes": [ + "*/*" + ], + "description": "replace status of the specified FlowSchema", + "operationId": "replaceFlowcontrolApiserverV1beta1FlowSchemaStatus", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta1.FlowSchema" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta1.FlowSchema" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta1.FlowSchema" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "flowcontrolApiserver_v1beta1" + ], + "x-kubernetes-action": "put", + "x-kubernetes-group-version-kind": { + "group": "flowcontrol.apiserver.k8s.io", + "kind": "FlowSchema", + "version": "v1beta1" + } + } + }, + "/apis/flowcontrol.apiserver.k8s.io/v1beta1/prioritylevelconfigurations": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete collection of PriorityLevelConfiguration", + "operationId": "deleteFlowcontrolApiserverV1beta1CollectionPriorityLevelConfiguration", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "flowcontrolApiserver_v1beta1" + ], + "x-kubernetes-action": "deletecollection", + "x-kubernetes-group-version-kind": { + "group": "flowcontrol.apiserver.k8s.io", + "kind": "PriorityLevelConfiguration", + "version": "v1beta1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "list or watch objects of kind PriorityLevelConfiguration", + "operationId": "listFlowcontrolApiserverV1beta1PriorityLevelConfiguration", + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta1.PriorityLevelConfigurationList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "flowcontrolApiserver_v1beta1" + ], + "x-kubernetes-action": "list", + "x-kubernetes-group-version-kind": { + "group": "flowcontrol.apiserver.k8s.io", + "kind": "PriorityLevelConfiguration", + "version": "v1beta1" + } + }, + "parameters": [ + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "post": { + "consumes": [ + "*/*" + ], + "description": "create a PriorityLevelConfiguration", + "operationId": "createFlowcontrolApiserverV1beta1PriorityLevelConfiguration", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta1.PriorityLevelConfiguration" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta1.PriorityLevelConfiguration" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta1.PriorityLevelConfiguration" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta1.PriorityLevelConfiguration" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "flowcontrolApiserver_v1beta1" + ], + "x-kubernetes-action": "post", + "x-kubernetes-group-version-kind": { + "group": "flowcontrol.apiserver.k8s.io", + "kind": "PriorityLevelConfiguration", + "version": "v1beta1" + } + } + }, + "/apis/flowcontrol.apiserver.k8s.io/v1beta1/prioritylevelconfigurations/{name}": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete a PriorityLevelConfiguration", + "operationId": "deleteFlowcontrolApiserverV1beta1PriorityLevelConfiguration", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "flowcontrolApiserver_v1beta1" + ], + "x-kubernetes-action": "delete", + "x-kubernetes-group-version-kind": { + "group": "flowcontrol.apiserver.k8s.io", + "kind": "PriorityLevelConfiguration", + "version": "v1beta1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "read the specified PriorityLevelConfiguration", + "operationId": "readFlowcontrolApiserverV1beta1PriorityLevelConfiguration", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta1.PriorityLevelConfiguration" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "flowcontrolApiserver_v1beta1" + ], + "x-kubernetes-action": "get", + "x-kubernetes-group-version-kind": { + "group": "flowcontrol.apiserver.k8s.io", + "kind": "PriorityLevelConfiguration", + "version": "v1beta1" + } + }, + "parameters": [ + { + "description": "name of the PriorityLevelConfiguration", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "patch": { + "consumes": [ + "application/json-patch+json", + "application/merge-patch+json", + "application/strategic-merge-patch+json", + "application/apply-patch+yaml" + ], + "description": "partially update the specified PriorityLevelConfiguration", + "operationId": "patchFlowcontrolApiserverV1beta1PriorityLevelConfiguration", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Patch" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + }, + { + "description": "Force is going to \"force\" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.", + "in": "query", + "name": "force", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta1.PriorityLevelConfiguration" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "flowcontrolApiserver_v1beta1" + ], + "x-kubernetes-action": "patch", + "x-kubernetes-group-version-kind": { + "group": "flowcontrol.apiserver.k8s.io", + "kind": "PriorityLevelConfiguration", + "version": "v1beta1" + } + }, + "put": { + "consumes": [ + "*/*" + ], + "description": "replace the specified PriorityLevelConfiguration", + "operationId": "replaceFlowcontrolApiserverV1beta1PriorityLevelConfiguration", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta1.PriorityLevelConfiguration" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta1.PriorityLevelConfiguration" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta1.PriorityLevelConfiguration" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "flowcontrolApiserver_v1beta1" + ], + "x-kubernetes-action": "put", + "x-kubernetes-group-version-kind": { + "group": "flowcontrol.apiserver.k8s.io", + "kind": "PriorityLevelConfiguration", + "version": "v1beta1" + } + } + }, + "/apis/flowcontrol.apiserver.k8s.io/v1beta1/prioritylevelconfigurations/{name}/status": { + "get": { + "consumes": [ + "*/*" + ], + "description": "read status of the specified PriorityLevelConfiguration", + "operationId": "readFlowcontrolApiserverV1beta1PriorityLevelConfigurationStatus", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta1.PriorityLevelConfiguration" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "flowcontrolApiserver_v1beta1" + ], + "x-kubernetes-action": "get", + "x-kubernetes-group-version-kind": { + "group": "flowcontrol.apiserver.k8s.io", + "kind": "PriorityLevelConfiguration", + "version": "v1beta1" + } + }, + "parameters": [ + { + "description": "name of the PriorityLevelConfiguration", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "patch": { + "consumes": [ + "application/json-patch+json", + "application/merge-patch+json", + "application/strategic-merge-patch+json", + "application/apply-patch+yaml" + ], + "description": "partially update status of the specified PriorityLevelConfiguration", + "operationId": "patchFlowcontrolApiserverV1beta1PriorityLevelConfigurationStatus", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Patch" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + }, + { + "description": "Force is going to \"force\" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.", + "in": "query", + "name": "force", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta1.PriorityLevelConfiguration" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "flowcontrolApiserver_v1beta1" + ], + "x-kubernetes-action": "patch", + "x-kubernetes-group-version-kind": { + "group": "flowcontrol.apiserver.k8s.io", + "kind": "PriorityLevelConfiguration", + "version": "v1beta1" + } + }, + "put": { + "consumes": [ + "*/*" + ], + "description": "replace status of the specified PriorityLevelConfiguration", + "operationId": "replaceFlowcontrolApiserverV1beta1PriorityLevelConfigurationStatus", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta1.PriorityLevelConfiguration" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta1.PriorityLevelConfiguration" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta1.PriorityLevelConfiguration" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "flowcontrolApiserver_v1beta1" + ], + "x-kubernetes-action": "put", + "x-kubernetes-group-version-kind": { + "group": "flowcontrol.apiserver.k8s.io", + "kind": "PriorityLevelConfiguration", + "version": "v1beta1" + } + } + }, + "/apis/flowcontrol.apiserver.k8s.io/v1beta1/watch/flowschemas": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch individual changes to a list of FlowSchema. deprecated: use the 'watch' parameter with a list operation instead.", + "operationId": "watchFlowcontrolApiserverV1beta1FlowSchemaList", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "flowcontrolApiserver_v1beta1" + ], + "x-kubernetes-action": "watchlist", + "x-kubernetes-group-version-kind": { + "group": "flowcontrol.apiserver.k8s.io", + "kind": "FlowSchema", + "version": "v1beta1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/flowcontrol.apiserver.k8s.io/v1beta1/watch/flowschemas/{name}": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch changes to an object of kind FlowSchema. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.", + "operationId": "watchFlowcontrolApiserverV1beta1FlowSchema", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "flowcontrolApiserver_v1beta1" + ], + "x-kubernetes-action": "watch", + "x-kubernetes-group-version-kind": { + "group": "flowcontrol.apiserver.k8s.io", + "kind": "FlowSchema", + "version": "v1beta1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "name of the FlowSchema", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/flowcontrol.apiserver.k8s.io/v1beta1/watch/prioritylevelconfigurations": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch individual changes to a list of PriorityLevelConfiguration. deprecated: use the 'watch' parameter with a list operation instead.", + "operationId": "watchFlowcontrolApiserverV1beta1PriorityLevelConfigurationList", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "flowcontrolApiserver_v1beta1" + ], + "x-kubernetes-action": "watchlist", + "x-kubernetes-group-version-kind": { + "group": "flowcontrol.apiserver.k8s.io", + "kind": "PriorityLevelConfiguration", + "version": "v1beta1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/flowcontrol.apiserver.k8s.io/v1beta1/watch/prioritylevelconfigurations/{name}": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch changes to an object of kind PriorityLevelConfiguration. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.", + "operationId": "watchFlowcontrolApiserverV1beta1PriorityLevelConfiguration", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "flowcontrolApiserver_v1beta1" + ], + "x-kubernetes-action": "watch", + "x-kubernetes-group-version-kind": { + "group": "flowcontrol.apiserver.k8s.io", + "kind": "PriorityLevelConfiguration", + "version": "v1beta1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "name of the PriorityLevelConfiguration", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/networking.k8s.io/": { + "get": { + "consumes": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "description": "get information of a group", + "operationId": "getNetworkingAPIGroup", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.APIGroup" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "networking" + ] + } + }, + "/apis/networking.k8s.io/v1/": { + "get": { + "consumes": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "description": "get available resources", + "operationId": "getNetworkingV1APIResources", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.APIResourceList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "networking_v1" + ] + } + }, + "/apis/networking.k8s.io/v1/ingressclasses": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete collection of IngressClass", + "operationId": "deleteNetworkingV1CollectionIngressClass", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "networking_v1" + ], + "x-kubernetes-action": "deletecollection", + "x-kubernetes-group-version-kind": { + "group": "networking.k8s.io", + "kind": "IngressClass", + "version": "v1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "list or watch objects of kind IngressClass", + "operationId": "listNetworkingV1IngressClass", + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.networking.v1.IngressClassList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "networking_v1" + ], + "x-kubernetes-action": "list", + "x-kubernetes-group-version-kind": { + "group": "networking.k8s.io", + "kind": "IngressClass", + "version": "v1" + } + }, + "parameters": [ + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "post": { + "consumes": [ + "*/*" + ], + "description": "create an IngressClass", + "operationId": "createNetworkingV1IngressClass", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.networking.v1.IngressClass" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.networking.v1.IngressClass" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.networking.v1.IngressClass" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.api.networking.v1.IngressClass" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "networking_v1" + ], + "x-kubernetes-action": "post", + "x-kubernetes-group-version-kind": { + "group": "networking.k8s.io", + "kind": "IngressClass", + "version": "v1" + } + } + }, + "/apis/networking.k8s.io/v1/ingressclasses/{name}": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete an IngressClass", + "operationId": "deleteNetworkingV1IngressClass", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "networking_v1" + ], + "x-kubernetes-action": "delete", + "x-kubernetes-group-version-kind": { + "group": "networking.k8s.io", + "kind": "IngressClass", + "version": "v1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "read the specified IngressClass", + "operationId": "readNetworkingV1IngressClass", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.networking.v1.IngressClass" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "networking_v1" + ], + "x-kubernetes-action": "get", + "x-kubernetes-group-version-kind": { + "group": "networking.k8s.io", + "kind": "IngressClass", + "version": "v1" + } + }, + "parameters": [ + { + "description": "name of the IngressClass", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "patch": { + "consumes": [ + "application/json-patch+json", + "application/merge-patch+json", + "application/strategic-merge-patch+json", + "application/apply-patch+yaml" + ], + "description": "partially update the specified IngressClass", + "operationId": "patchNetworkingV1IngressClass", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Patch" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + }, + { + "description": "Force is going to \"force\" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.", + "in": "query", + "name": "force", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.networking.v1.IngressClass" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "networking_v1" + ], + "x-kubernetes-action": "patch", + "x-kubernetes-group-version-kind": { + "group": "networking.k8s.io", + "kind": "IngressClass", + "version": "v1" + } + }, + "put": { + "consumes": [ + "*/*" + ], + "description": "replace the specified IngressClass", + "operationId": "replaceNetworkingV1IngressClass", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.networking.v1.IngressClass" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.networking.v1.IngressClass" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.networking.v1.IngressClass" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "networking_v1" + ], + "x-kubernetes-action": "put", + "x-kubernetes-group-version-kind": { + "group": "networking.k8s.io", + "kind": "IngressClass", + "version": "v1" + } + } + }, + "/apis/networking.k8s.io/v1/ingresses": { + "get": { + "consumes": [ + "*/*" + ], + "description": "list or watch objects of kind Ingress", + "operationId": "listNetworkingV1IngressForAllNamespaces", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.networking.v1.IngressList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "networking_v1" + ], + "x-kubernetes-action": "list", + "x-kubernetes-group-version-kind": { + "group": "networking.k8s.io", + "kind": "Ingress", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/networking.k8s.io/v1/namespaces/{namespace}/ingresses": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete collection of Ingress", + "operationId": "deleteNetworkingV1CollectionNamespacedIngress", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "networking_v1" + ], + "x-kubernetes-action": "deletecollection", + "x-kubernetes-group-version-kind": { + "group": "networking.k8s.io", + "kind": "Ingress", + "version": "v1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "list or watch objects of kind Ingress", + "operationId": "listNetworkingV1NamespacedIngress", + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.networking.v1.IngressList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "networking_v1" + ], + "x-kubernetes-action": "list", + "x-kubernetes-group-version-kind": { + "group": "networking.k8s.io", + "kind": "Ingress", + "version": "v1" + } + }, + "parameters": [ + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "post": { + "consumes": [ + "*/*" + ], + "description": "create an Ingress", + "operationId": "createNetworkingV1NamespacedIngress", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.networking.v1.Ingress" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.networking.v1.Ingress" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.networking.v1.Ingress" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.api.networking.v1.Ingress" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "networking_v1" + ], + "x-kubernetes-action": "post", + "x-kubernetes-group-version-kind": { + "group": "networking.k8s.io", + "kind": "Ingress", + "version": "v1" + } + } + }, + "/apis/networking.k8s.io/v1/namespaces/{namespace}/ingresses/{name}": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete an Ingress", + "operationId": "deleteNetworkingV1NamespacedIngress", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "networking_v1" + ], + "x-kubernetes-action": "delete", + "x-kubernetes-group-version-kind": { + "group": "networking.k8s.io", + "kind": "Ingress", + "version": "v1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "read the specified Ingress", + "operationId": "readNetworkingV1NamespacedIngress", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.networking.v1.Ingress" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "networking_v1" + ], + "x-kubernetes-action": "get", + "x-kubernetes-group-version-kind": { + "group": "networking.k8s.io", + "kind": "Ingress", + "version": "v1" + } + }, + "parameters": [ + { + "description": "name of the Ingress", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "patch": { + "consumes": [ + "application/json-patch+json", + "application/merge-patch+json", + "application/strategic-merge-patch+json", + "application/apply-patch+yaml" + ], + "description": "partially update the specified Ingress", + "operationId": "patchNetworkingV1NamespacedIngress", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Patch" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + }, + { + "description": "Force is going to \"force\" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.", + "in": "query", + "name": "force", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.networking.v1.Ingress" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "networking_v1" + ], + "x-kubernetes-action": "patch", + "x-kubernetes-group-version-kind": { + "group": "networking.k8s.io", + "kind": "Ingress", + "version": "v1" + } + }, + "put": { + "consumes": [ + "*/*" + ], + "description": "replace the specified Ingress", + "operationId": "replaceNetworkingV1NamespacedIngress", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.networking.v1.Ingress" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.networking.v1.Ingress" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.networking.v1.Ingress" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "networking_v1" + ], + "x-kubernetes-action": "put", + "x-kubernetes-group-version-kind": { + "group": "networking.k8s.io", + "kind": "Ingress", + "version": "v1" + } + } + }, + "/apis/networking.k8s.io/v1/namespaces/{namespace}/ingresses/{name}/status": { + "get": { + "consumes": [ + "*/*" + ], + "description": "read status of the specified Ingress", + "operationId": "readNetworkingV1NamespacedIngressStatus", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.networking.v1.Ingress" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "networking_v1" + ], + "x-kubernetes-action": "get", + "x-kubernetes-group-version-kind": { + "group": "networking.k8s.io", + "kind": "Ingress", + "version": "v1" + } + }, + "parameters": [ + { + "description": "name of the Ingress", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "patch": { + "consumes": [ + "application/json-patch+json", + "application/merge-patch+json", + "application/strategic-merge-patch+json", + "application/apply-patch+yaml" + ], + "description": "partially update status of the specified Ingress", + "operationId": "patchNetworkingV1NamespacedIngressStatus", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Patch" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + }, + { + "description": "Force is going to \"force\" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.", + "in": "query", + "name": "force", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.networking.v1.Ingress" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "networking_v1" + ], + "x-kubernetes-action": "patch", + "x-kubernetes-group-version-kind": { + "group": "networking.k8s.io", + "kind": "Ingress", + "version": "v1" + } + }, + "put": { + "consumes": [ + "*/*" + ], + "description": "replace status of the specified Ingress", + "operationId": "replaceNetworkingV1NamespacedIngressStatus", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.networking.v1.Ingress" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.networking.v1.Ingress" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.networking.v1.Ingress" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "networking_v1" + ], + "x-kubernetes-action": "put", + "x-kubernetes-group-version-kind": { + "group": "networking.k8s.io", + "kind": "Ingress", + "version": "v1" + } + } + }, + "/apis/networking.k8s.io/v1/namespaces/{namespace}/networkpolicies": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete collection of NetworkPolicy", + "operationId": "deleteNetworkingV1CollectionNamespacedNetworkPolicy", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "networking_v1" + ], + "x-kubernetes-action": "deletecollection", + "x-kubernetes-group-version-kind": { + "group": "networking.k8s.io", + "kind": "NetworkPolicy", + "version": "v1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "list or watch objects of kind NetworkPolicy", + "operationId": "listNetworkingV1NamespacedNetworkPolicy", + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.networking.v1.NetworkPolicyList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "networking_v1" + ], + "x-kubernetes-action": "list", + "x-kubernetes-group-version-kind": { + "group": "networking.k8s.io", + "kind": "NetworkPolicy", + "version": "v1" + } + }, + "parameters": [ + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "post": { + "consumes": [ + "*/*" + ], + "description": "create a NetworkPolicy", + "operationId": "createNetworkingV1NamespacedNetworkPolicy", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.networking.v1.NetworkPolicy" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.networking.v1.NetworkPolicy" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.networking.v1.NetworkPolicy" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.api.networking.v1.NetworkPolicy" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "networking_v1" + ], + "x-kubernetes-action": "post", + "x-kubernetes-group-version-kind": { + "group": "networking.k8s.io", + "kind": "NetworkPolicy", + "version": "v1" + } + } + }, + "/apis/networking.k8s.io/v1/namespaces/{namespace}/networkpolicies/{name}": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete a NetworkPolicy", + "operationId": "deleteNetworkingV1NamespacedNetworkPolicy", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "networking_v1" + ], + "x-kubernetes-action": "delete", + "x-kubernetes-group-version-kind": { + "group": "networking.k8s.io", + "kind": "NetworkPolicy", + "version": "v1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "read the specified NetworkPolicy", + "operationId": "readNetworkingV1NamespacedNetworkPolicy", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.networking.v1.NetworkPolicy" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "networking_v1" + ], + "x-kubernetes-action": "get", + "x-kubernetes-group-version-kind": { + "group": "networking.k8s.io", + "kind": "NetworkPolicy", + "version": "v1" + } + }, + "parameters": [ + { + "description": "name of the NetworkPolicy", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "patch": { + "consumes": [ + "application/json-patch+json", + "application/merge-patch+json", + "application/strategic-merge-patch+json", + "application/apply-patch+yaml" + ], + "description": "partially update the specified NetworkPolicy", + "operationId": "patchNetworkingV1NamespacedNetworkPolicy", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Patch" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + }, + { + "description": "Force is going to \"force\" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.", + "in": "query", + "name": "force", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.networking.v1.NetworkPolicy" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "networking_v1" + ], + "x-kubernetes-action": "patch", + "x-kubernetes-group-version-kind": { + "group": "networking.k8s.io", + "kind": "NetworkPolicy", + "version": "v1" + } + }, + "put": { + "consumes": [ + "*/*" + ], + "description": "replace the specified NetworkPolicy", + "operationId": "replaceNetworkingV1NamespacedNetworkPolicy", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.networking.v1.NetworkPolicy" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.networking.v1.NetworkPolicy" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.networking.v1.NetworkPolicy" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "networking_v1" + ], + "x-kubernetes-action": "put", + "x-kubernetes-group-version-kind": { + "group": "networking.k8s.io", + "kind": "NetworkPolicy", + "version": "v1" + } + } + }, + "/apis/networking.k8s.io/v1/networkpolicies": { + "get": { + "consumes": [ + "*/*" + ], + "description": "list or watch objects of kind NetworkPolicy", + "operationId": "listNetworkingV1NetworkPolicyForAllNamespaces", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.networking.v1.NetworkPolicyList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "networking_v1" + ], + "x-kubernetes-action": "list", + "x-kubernetes-group-version-kind": { + "group": "networking.k8s.io", + "kind": "NetworkPolicy", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/networking.k8s.io/v1/watch/ingressclasses": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch individual changes to a list of IngressClass. deprecated: use the 'watch' parameter with a list operation instead.", + "operationId": "watchNetworkingV1IngressClassList", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "networking_v1" + ], + "x-kubernetes-action": "watchlist", + "x-kubernetes-group-version-kind": { + "group": "networking.k8s.io", + "kind": "IngressClass", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/networking.k8s.io/v1/watch/ingressclasses/{name}": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch changes to an object of kind IngressClass. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.", + "operationId": "watchNetworkingV1IngressClass", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "networking_v1" + ], + "x-kubernetes-action": "watch", + "x-kubernetes-group-version-kind": { + "group": "networking.k8s.io", + "kind": "IngressClass", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "name of the IngressClass", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/networking.k8s.io/v1/watch/ingresses": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch individual changes to a list of Ingress. deprecated: use the 'watch' parameter with a list operation instead.", + "operationId": "watchNetworkingV1IngressListForAllNamespaces", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "networking_v1" + ], + "x-kubernetes-action": "watchlist", + "x-kubernetes-group-version-kind": { + "group": "networking.k8s.io", + "kind": "Ingress", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/networking.k8s.io/v1/watch/namespaces/{namespace}/ingresses": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch individual changes to a list of Ingress. deprecated: use the 'watch' parameter with a list operation instead.", + "operationId": "watchNetworkingV1NamespacedIngressList", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "networking_v1" + ], + "x-kubernetes-action": "watchlist", + "x-kubernetes-group-version-kind": { + "group": "networking.k8s.io", + "kind": "Ingress", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/networking.k8s.io/v1/watch/namespaces/{namespace}/ingresses/{name}": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch changes to an object of kind Ingress. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.", + "operationId": "watchNetworkingV1NamespacedIngress", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "networking_v1" + ], + "x-kubernetes-action": "watch", + "x-kubernetes-group-version-kind": { + "group": "networking.k8s.io", + "kind": "Ingress", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "name of the Ingress", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/networking.k8s.io/v1/watch/namespaces/{namespace}/networkpolicies": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch individual changes to a list of NetworkPolicy. deprecated: use the 'watch' parameter with a list operation instead.", + "operationId": "watchNetworkingV1NamespacedNetworkPolicyList", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "networking_v1" + ], + "x-kubernetes-action": "watchlist", + "x-kubernetes-group-version-kind": { + "group": "networking.k8s.io", + "kind": "NetworkPolicy", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/networking.k8s.io/v1/watch/namespaces/{namespace}/networkpolicies/{name}": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch changes to an object of kind NetworkPolicy. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.", + "operationId": "watchNetworkingV1NamespacedNetworkPolicy", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "networking_v1" + ], + "x-kubernetes-action": "watch", + "x-kubernetes-group-version-kind": { + "group": "networking.k8s.io", + "kind": "NetworkPolicy", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "name of the NetworkPolicy", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/networking.k8s.io/v1/watch/networkpolicies": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch individual changes to a list of NetworkPolicy. deprecated: use the 'watch' parameter with a list operation instead.", + "operationId": "watchNetworkingV1NetworkPolicyListForAllNamespaces", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "networking_v1" + ], + "x-kubernetes-action": "watchlist", + "x-kubernetes-group-version-kind": { + "group": "networking.k8s.io", + "kind": "NetworkPolicy", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/networking.k8s.io/v1beta1/": { + "get": { + "consumes": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "description": "get available resources", + "operationId": "getNetworkingV1beta1APIResources", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.APIResourceList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "networking_v1beta1" + ] + } + }, + "/apis/networking.k8s.io/v1beta1/ingressclasses": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete collection of IngressClass", + "operationId": "deleteNetworkingV1beta1CollectionIngressClass", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "networking_v1beta1" + ], + "x-kubernetes-action": "deletecollection", + "x-kubernetes-group-version-kind": { + "group": "networking.k8s.io", + "kind": "IngressClass", + "version": "v1beta1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "list or watch objects of kind IngressClass", + "operationId": "listNetworkingV1beta1IngressClass", + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.networking.v1beta1.IngressClassList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "networking_v1beta1" + ], + "x-kubernetes-action": "list", + "x-kubernetes-group-version-kind": { + "group": "networking.k8s.io", + "kind": "IngressClass", + "version": "v1beta1" + } + }, + "parameters": [ + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "post": { + "consumes": [ + "*/*" + ], + "description": "create an IngressClass", + "operationId": "createNetworkingV1beta1IngressClass", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.networking.v1beta1.IngressClass" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.networking.v1beta1.IngressClass" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.networking.v1beta1.IngressClass" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.api.networking.v1beta1.IngressClass" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "networking_v1beta1" + ], + "x-kubernetes-action": "post", + "x-kubernetes-group-version-kind": { + "group": "networking.k8s.io", + "kind": "IngressClass", + "version": "v1beta1" + } + } + }, + "/apis/networking.k8s.io/v1beta1/ingressclasses/{name}": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete an IngressClass", + "operationId": "deleteNetworkingV1beta1IngressClass", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "networking_v1beta1" + ], + "x-kubernetes-action": "delete", + "x-kubernetes-group-version-kind": { + "group": "networking.k8s.io", + "kind": "IngressClass", + "version": "v1beta1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "read the specified IngressClass", + "operationId": "readNetworkingV1beta1IngressClass", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.networking.v1beta1.IngressClass" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "networking_v1beta1" + ], + "x-kubernetes-action": "get", + "x-kubernetes-group-version-kind": { + "group": "networking.k8s.io", + "kind": "IngressClass", + "version": "v1beta1" + } + }, + "parameters": [ + { + "description": "name of the IngressClass", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "patch": { + "consumes": [ + "application/json-patch+json", + "application/merge-patch+json", + "application/strategic-merge-patch+json", + "application/apply-patch+yaml" + ], + "description": "partially update the specified IngressClass", + "operationId": "patchNetworkingV1beta1IngressClass", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Patch" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + }, + { + "description": "Force is going to \"force\" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.", + "in": "query", + "name": "force", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.networking.v1beta1.IngressClass" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "networking_v1beta1" + ], + "x-kubernetes-action": "patch", + "x-kubernetes-group-version-kind": { + "group": "networking.k8s.io", + "kind": "IngressClass", + "version": "v1beta1" + } + }, + "put": { + "consumes": [ + "*/*" + ], + "description": "replace the specified IngressClass", + "operationId": "replaceNetworkingV1beta1IngressClass", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.networking.v1beta1.IngressClass" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.networking.v1beta1.IngressClass" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.networking.v1beta1.IngressClass" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "networking_v1beta1" + ], + "x-kubernetes-action": "put", + "x-kubernetes-group-version-kind": { + "group": "networking.k8s.io", + "kind": "IngressClass", + "version": "v1beta1" + } + } + }, + "/apis/networking.k8s.io/v1beta1/ingresses": { + "get": { + "consumes": [ + "*/*" + ], + "description": "list or watch objects of kind Ingress", + "operationId": "listNetworkingV1beta1IngressForAllNamespaces", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.networking.v1beta1.IngressList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "networking_v1beta1" + ], + "x-kubernetes-action": "list", + "x-kubernetes-group-version-kind": { + "group": "networking.k8s.io", + "kind": "Ingress", + "version": "v1beta1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/networking.k8s.io/v1beta1/namespaces/{namespace}/ingresses": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete collection of Ingress", + "operationId": "deleteNetworkingV1beta1CollectionNamespacedIngress", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "networking_v1beta1" + ], + "x-kubernetes-action": "deletecollection", + "x-kubernetes-group-version-kind": { + "group": "networking.k8s.io", + "kind": "Ingress", + "version": "v1beta1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "list or watch objects of kind Ingress", + "operationId": "listNetworkingV1beta1NamespacedIngress", + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.networking.v1beta1.IngressList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "networking_v1beta1" + ], + "x-kubernetes-action": "list", + "x-kubernetes-group-version-kind": { + "group": "networking.k8s.io", + "kind": "Ingress", + "version": "v1beta1" + } + }, + "parameters": [ + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "post": { + "consumes": [ + "*/*" + ], + "description": "create an Ingress", + "operationId": "createNetworkingV1beta1NamespacedIngress", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.networking.v1beta1.Ingress" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.networking.v1beta1.Ingress" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.networking.v1beta1.Ingress" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.api.networking.v1beta1.Ingress" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "networking_v1beta1" + ], + "x-kubernetes-action": "post", + "x-kubernetes-group-version-kind": { + "group": "networking.k8s.io", + "kind": "Ingress", + "version": "v1beta1" + } + } + }, + "/apis/networking.k8s.io/v1beta1/namespaces/{namespace}/ingresses/{name}": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete an Ingress", + "operationId": "deleteNetworkingV1beta1NamespacedIngress", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "networking_v1beta1" + ], + "x-kubernetes-action": "delete", + "x-kubernetes-group-version-kind": { + "group": "networking.k8s.io", + "kind": "Ingress", + "version": "v1beta1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "read the specified Ingress", + "operationId": "readNetworkingV1beta1NamespacedIngress", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.networking.v1beta1.Ingress" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "networking_v1beta1" + ], + "x-kubernetes-action": "get", + "x-kubernetes-group-version-kind": { + "group": "networking.k8s.io", + "kind": "Ingress", + "version": "v1beta1" + } + }, + "parameters": [ + { + "description": "name of the Ingress", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "patch": { + "consumes": [ + "application/json-patch+json", + "application/merge-patch+json", + "application/strategic-merge-patch+json", + "application/apply-patch+yaml" + ], + "description": "partially update the specified Ingress", + "operationId": "patchNetworkingV1beta1NamespacedIngress", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Patch" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + }, + { + "description": "Force is going to \"force\" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.", + "in": "query", + "name": "force", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.networking.v1beta1.Ingress" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "networking_v1beta1" + ], + "x-kubernetes-action": "patch", + "x-kubernetes-group-version-kind": { + "group": "networking.k8s.io", + "kind": "Ingress", + "version": "v1beta1" + } + }, + "put": { + "consumes": [ + "*/*" + ], + "description": "replace the specified Ingress", + "operationId": "replaceNetworkingV1beta1NamespacedIngress", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.networking.v1beta1.Ingress" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.networking.v1beta1.Ingress" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.networking.v1beta1.Ingress" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "networking_v1beta1" + ], + "x-kubernetes-action": "put", + "x-kubernetes-group-version-kind": { + "group": "networking.k8s.io", + "kind": "Ingress", + "version": "v1beta1" + } + } + }, + "/apis/networking.k8s.io/v1beta1/namespaces/{namespace}/ingresses/{name}/status": { + "get": { + "consumes": [ + "*/*" + ], + "description": "read status of the specified Ingress", + "operationId": "readNetworkingV1beta1NamespacedIngressStatus", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.networking.v1beta1.Ingress" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "networking_v1beta1" + ], + "x-kubernetes-action": "get", + "x-kubernetes-group-version-kind": { + "group": "networking.k8s.io", + "kind": "Ingress", + "version": "v1beta1" + } + }, + "parameters": [ + { + "description": "name of the Ingress", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "patch": { + "consumes": [ + "application/json-patch+json", + "application/merge-patch+json", + "application/strategic-merge-patch+json", + "application/apply-patch+yaml" + ], + "description": "partially update status of the specified Ingress", + "operationId": "patchNetworkingV1beta1NamespacedIngressStatus", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Patch" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + }, + { + "description": "Force is going to \"force\" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.", + "in": "query", + "name": "force", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.networking.v1beta1.Ingress" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "networking_v1beta1" + ], + "x-kubernetes-action": "patch", + "x-kubernetes-group-version-kind": { + "group": "networking.k8s.io", + "kind": "Ingress", + "version": "v1beta1" + } + }, + "put": { + "consumes": [ + "*/*" + ], + "description": "replace status of the specified Ingress", + "operationId": "replaceNetworkingV1beta1NamespacedIngressStatus", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.networking.v1beta1.Ingress" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.networking.v1beta1.Ingress" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.networking.v1beta1.Ingress" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "networking_v1beta1" + ], + "x-kubernetes-action": "put", + "x-kubernetes-group-version-kind": { + "group": "networking.k8s.io", + "kind": "Ingress", + "version": "v1beta1" + } + } + }, + "/apis/networking.k8s.io/v1beta1/watch/ingressclasses": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch individual changes to a list of IngressClass. deprecated: use the 'watch' parameter with a list operation instead.", + "operationId": "watchNetworkingV1beta1IngressClassList", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "networking_v1beta1" + ], + "x-kubernetes-action": "watchlist", + "x-kubernetes-group-version-kind": { + "group": "networking.k8s.io", + "kind": "IngressClass", + "version": "v1beta1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/networking.k8s.io/v1beta1/watch/ingressclasses/{name}": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch changes to an object of kind IngressClass. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.", + "operationId": "watchNetworkingV1beta1IngressClass", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "networking_v1beta1" + ], + "x-kubernetes-action": "watch", + "x-kubernetes-group-version-kind": { + "group": "networking.k8s.io", + "kind": "IngressClass", + "version": "v1beta1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "name of the IngressClass", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/networking.k8s.io/v1beta1/watch/ingresses": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch individual changes to a list of Ingress. deprecated: use the 'watch' parameter with a list operation instead.", + "operationId": "watchNetworkingV1beta1IngressListForAllNamespaces", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "networking_v1beta1" + ], + "x-kubernetes-action": "watchlist", + "x-kubernetes-group-version-kind": { + "group": "networking.k8s.io", + "kind": "Ingress", + "version": "v1beta1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/networking.k8s.io/v1beta1/watch/namespaces/{namespace}/ingresses": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch individual changes to a list of Ingress. deprecated: use the 'watch' parameter with a list operation instead.", + "operationId": "watchNetworkingV1beta1NamespacedIngressList", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "networking_v1beta1" + ], + "x-kubernetes-action": "watchlist", + "x-kubernetes-group-version-kind": { + "group": "networking.k8s.io", + "kind": "Ingress", + "version": "v1beta1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/networking.k8s.io/v1beta1/watch/namespaces/{namespace}/ingresses/{name}": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch changes to an object of kind Ingress. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.", + "operationId": "watchNetworkingV1beta1NamespacedIngress", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "networking_v1beta1" + ], + "x-kubernetes-action": "watch", + "x-kubernetes-group-version-kind": { + "group": "networking.k8s.io", + "kind": "Ingress", + "version": "v1beta1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "name of the Ingress", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/node.k8s.io/": { + "get": { + "consumes": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "description": "get information of a group", + "operationId": "getNodeAPIGroup", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.APIGroup" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "node" + ] + } + }, + "/apis/node.k8s.io/v1/": { + "get": { + "consumes": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "description": "get available resources", + "operationId": "getNodeV1APIResources", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.APIResourceList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "node_v1" + ] + } + }, + "/apis/node.k8s.io/v1/runtimeclasses": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete collection of RuntimeClass", + "operationId": "deleteNodeV1CollectionRuntimeClass", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "node_v1" + ], + "x-kubernetes-action": "deletecollection", + "x-kubernetes-group-version-kind": { + "group": "node.k8s.io", + "kind": "RuntimeClass", + "version": "v1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "list or watch objects of kind RuntimeClass", + "operationId": "listNodeV1RuntimeClass", + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.node.v1.RuntimeClassList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "node_v1" + ], + "x-kubernetes-action": "list", + "x-kubernetes-group-version-kind": { + "group": "node.k8s.io", + "kind": "RuntimeClass", + "version": "v1" + } + }, + "parameters": [ + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "post": { + "consumes": [ + "*/*" + ], + "description": "create a RuntimeClass", + "operationId": "createNodeV1RuntimeClass", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.node.v1.RuntimeClass" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.node.v1.RuntimeClass" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.node.v1.RuntimeClass" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.api.node.v1.RuntimeClass" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "node_v1" + ], + "x-kubernetes-action": "post", + "x-kubernetes-group-version-kind": { + "group": "node.k8s.io", + "kind": "RuntimeClass", + "version": "v1" + } + } + }, + "/apis/node.k8s.io/v1/runtimeclasses/{name}": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete a RuntimeClass", + "operationId": "deleteNodeV1RuntimeClass", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "node_v1" + ], + "x-kubernetes-action": "delete", + "x-kubernetes-group-version-kind": { + "group": "node.k8s.io", + "kind": "RuntimeClass", + "version": "v1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "read the specified RuntimeClass", + "operationId": "readNodeV1RuntimeClass", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.node.v1.RuntimeClass" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "node_v1" + ], + "x-kubernetes-action": "get", + "x-kubernetes-group-version-kind": { + "group": "node.k8s.io", + "kind": "RuntimeClass", + "version": "v1" + } + }, + "parameters": [ + { + "description": "name of the RuntimeClass", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "patch": { + "consumes": [ + "application/json-patch+json", + "application/merge-patch+json", + "application/strategic-merge-patch+json", + "application/apply-patch+yaml" + ], + "description": "partially update the specified RuntimeClass", + "operationId": "patchNodeV1RuntimeClass", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Patch" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + }, + { + "description": "Force is going to \"force\" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.", + "in": "query", + "name": "force", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.node.v1.RuntimeClass" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "node_v1" + ], + "x-kubernetes-action": "patch", + "x-kubernetes-group-version-kind": { + "group": "node.k8s.io", + "kind": "RuntimeClass", + "version": "v1" + } + }, + "put": { + "consumes": [ + "*/*" + ], + "description": "replace the specified RuntimeClass", + "operationId": "replaceNodeV1RuntimeClass", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.node.v1.RuntimeClass" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.node.v1.RuntimeClass" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.node.v1.RuntimeClass" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "node_v1" + ], + "x-kubernetes-action": "put", + "x-kubernetes-group-version-kind": { + "group": "node.k8s.io", + "kind": "RuntimeClass", + "version": "v1" + } + } + }, + "/apis/node.k8s.io/v1/watch/runtimeclasses": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch individual changes to a list of RuntimeClass. deprecated: use the 'watch' parameter with a list operation instead.", + "operationId": "watchNodeV1RuntimeClassList", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "node_v1" + ], + "x-kubernetes-action": "watchlist", + "x-kubernetes-group-version-kind": { + "group": "node.k8s.io", + "kind": "RuntimeClass", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/node.k8s.io/v1/watch/runtimeclasses/{name}": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch changes to an object of kind RuntimeClass. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.", + "operationId": "watchNodeV1RuntimeClass", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "node_v1" + ], + "x-kubernetes-action": "watch", + "x-kubernetes-group-version-kind": { + "group": "node.k8s.io", + "kind": "RuntimeClass", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "name of the RuntimeClass", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/node.k8s.io/v1beta1/": { + "get": { + "consumes": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "description": "get available resources", + "operationId": "getNodeV1beta1APIResources", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.APIResourceList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "node_v1beta1" + ] + } + }, + "/apis/node.k8s.io/v1beta1/runtimeclasses": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete collection of RuntimeClass", + "operationId": "deleteNodeV1beta1CollectionRuntimeClass", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "node_v1beta1" + ], + "x-kubernetes-action": "deletecollection", + "x-kubernetes-group-version-kind": { + "group": "node.k8s.io", + "kind": "RuntimeClass", + "version": "v1beta1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "list or watch objects of kind RuntimeClass", + "operationId": "listNodeV1beta1RuntimeClass", + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.node.v1beta1.RuntimeClassList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "node_v1beta1" + ], + "x-kubernetes-action": "list", + "x-kubernetes-group-version-kind": { + "group": "node.k8s.io", + "kind": "RuntimeClass", + "version": "v1beta1" + } + }, + "parameters": [ + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "post": { + "consumes": [ + "*/*" + ], + "description": "create a RuntimeClass", + "operationId": "createNodeV1beta1RuntimeClass", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.node.v1beta1.RuntimeClass" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.node.v1beta1.RuntimeClass" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.node.v1beta1.RuntimeClass" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.api.node.v1beta1.RuntimeClass" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "node_v1beta1" + ], + "x-kubernetes-action": "post", + "x-kubernetes-group-version-kind": { + "group": "node.k8s.io", + "kind": "RuntimeClass", + "version": "v1beta1" + } + } + }, + "/apis/node.k8s.io/v1beta1/runtimeclasses/{name}": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete a RuntimeClass", + "operationId": "deleteNodeV1beta1RuntimeClass", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "node_v1beta1" + ], + "x-kubernetes-action": "delete", + "x-kubernetes-group-version-kind": { + "group": "node.k8s.io", + "kind": "RuntimeClass", + "version": "v1beta1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "read the specified RuntimeClass", + "operationId": "readNodeV1beta1RuntimeClass", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.node.v1beta1.RuntimeClass" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "node_v1beta1" + ], + "x-kubernetes-action": "get", + "x-kubernetes-group-version-kind": { + "group": "node.k8s.io", + "kind": "RuntimeClass", + "version": "v1beta1" + } + }, + "parameters": [ + { + "description": "name of the RuntimeClass", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "patch": { + "consumes": [ + "application/json-patch+json", + "application/merge-patch+json", + "application/strategic-merge-patch+json", + "application/apply-patch+yaml" + ], + "description": "partially update the specified RuntimeClass", + "operationId": "patchNodeV1beta1RuntimeClass", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Patch" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + }, + { + "description": "Force is going to \"force\" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.", + "in": "query", + "name": "force", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.node.v1beta1.RuntimeClass" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "node_v1beta1" + ], + "x-kubernetes-action": "patch", + "x-kubernetes-group-version-kind": { + "group": "node.k8s.io", + "kind": "RuntimeClass", + "version": "v1beta1" + } + }, + "put": { + "consumes": [ + "*/*" + ], + "description": "replace the specified RuntimeClass", + "operationId": "replaceNodeV1beta1RuntimeClass", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.node.v1beta1.RuntimeClass" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.node.v1beta1.RuntimeClass" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.node.v1beta1.RuntimeClass" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "node_v1beta1" + ], + "x-kubernetes-action": "put", + "x-kubernetes-group-version-kind": { + "group": "node.k8s.io", + "kind": "RuntimeClass", + "version": "v1beta1" + } + } + }, + "/apis/node.k8s.io/v1beta1/watch/runtimeclasses": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch individual changes to a list of RuntimeClass. deprecated: use the 'watch' parameter with a list operation instead.", + "operationId": "watchNodeV1beta1RuntimeClassList", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "node_v1beta1" + ], + "x-kubernetes-action": "watchlist", + "x-kubernetes-group-version-kind": { + "group": "node.k8s.io", + "kind": "RuntimeClass", + "version": "v1beta1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/node.k8s.io/v1beta1/watch/runtimeclasses/{name}": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch changes to an object of kind RuntimeClass. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.", + "operationId": "watchNodeV1beta1RuntimeClass", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "node_v1beta1" + ], + "x-kubernetes-action": "watch", + "x-kubernetes-group-version-kind": { + "group": "node.k8s.io", + "kind": "RuntimeClass", + "version": "v1beta1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "name of the RuntimeClass", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/policy/": { + "get": { + "consumes": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "description": "get information of a group", + "operationId": "getPolicyAPIGroup", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.APIGroup" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "policy" + ] + } + }, + "/apis/policy/v1/": { + "get": { + "consumes": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "description": "get available resources", + "operationId": "getPolicyV1APIResources", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.APIResourceList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "policy_v1" + ] + } + }, + "/apis/policy/v1/namespaces/{namespace}/poddisruptionbudgets": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete collection of PodDisruptionBudget", + "operationId": "deletePolicyV1CollectionNamespacedPodDisruptionBudget", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "policy_v1" + ], + "x-kubernetes-action": "deletecollection", + "x-kubernetes-group-version-kind": { + "group": "policy", + "kind": "PodDisruptionBudget", + "version": "v1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "list or watch objects of kind PodDisruptionBudget", + "operationId": "listPolicyV1NamespacedPodDisruptionBudget", + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.policy.v1.PodDisruptionBudgetList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "policy_v1" + ], + "x-kubernetes-action": "list", + "x-kubernetes-group-version-kind": { + "group": "policy", + "kind": "PodDisruptionBudget", + "version": "v1" + } + }, + "parameters": [ + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "post": { + "consumes": [ + "*/*" + ], + "description": "create a PodDisruptionBudget", + "operationId": "createPolicyV1NamespacedPodDisruptionBudget", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.policy.v1.PodDisruptionBudget" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.policy.v1.PodDisruptionBudget" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.policy.v1.PodDisruptionBudget" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.api.policy.v1.PodDisruptionBudget" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "policy_v1" + ], + "x-kubernetes-action": "post", + "x-kubernetes-group-version-kind": { + "group": "policy", + "kind": "PodDisruptionBudget", + "version": "v1" + } + } + }, + "/apis/policy/v1/namespaces/{namespace}/poddisruptionbudgets/{name}": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete a PodDisruptionBudget", + "operationId": "deletePolicyV1NamespacedPodDisruptionBudget", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "policy_v1" + ], + "x-kubernetes-action": "delete", + "x-kubernetes-group-version-kind": { + "group": "policy", + "kind": "PodDisruptionBudget", + "version": "v1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "read the specified PodDisruptionBudget", + "operationId": "readPolicyV1NamespacedPodDisruptionBudget", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.policy.v1.PodDisruptionBudget" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "policy_v1" + ], + "x-kubernetes-action": "get", + "x-kubernetes-group-version-kind": { + "group": "policy", + "kind": "PodDisruptionBudget", + "version": "v1" + } + }, + "parameters": [ + { + "description": "name of the PodDisruptionBudget", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "patch": { + "consumes": [ + "application/json-patch+json", + "application/merge-patch+json", + "application/strategic-merge-patch+json", + "application/apply-patch+yaml" + ], + "description": "partially update the specified PodDisruptionBudget", + "operationId": "patchPolicyV1NamespacedPodDisruptionBudget", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Patch" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + }, + { + "description": "Force is going to \"force\" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.", + "in": "query", + "name": "force", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.policy.v1.PodDisruptionBudget" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "policy_v1" + ], + "x-kubernetes-action": "patch", + "x-kubernetes-group-version-kind": { + "group": "policy", + "kind": "PodDisruptionBudget", + "version": "v1" + } + }, + "put": { + "consumes": [ + "*/*" + ], + "description": "replace the specified PodDisruptionBudget", + "operationId": "replacePolicyV1NamespacedPodDisruptionBudget", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.policy.v1.PodDisruptionBudget" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.policy.v1.PodDisruptionBudget" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.policy.v1.PodDisruptionBudget" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "policy_v1" + ], + "x-kubernetes-action": "put", + "x-kubernetes-group-version-kind": { + "group": "policy", + "kind": "PodDisruptionBudget", + "version": "v1" + } + } + }, + "/apis/policy/v1/namespaces/{namespace}/poddisruptionbudgets/{name}/status": { + "get": { + "consumes": [ + "*/*" + ], + "description": "read status of the specified PodDisruptionBudget", + "operationId": "readPolicyV1NamespacedPodDisruptionBudgetStatus", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.policy.v1.PodDisruptionBudget" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "policy_v1" + ], + "x-kubernetes-action": "get", + "x-kubernetes-group-version-kind": { + "group": "policy", + "kind": "PodDisruptionBudget", + "version": "v1" + } + }, + "parameters": [ + { + "description": "name of the PodDisruptionBudget", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "patch": { + "consumes": [ + "application/json-patch+json", + "application/merge-patch+json", + "application/strategic-merge-patch+json", + "application/apply-patch+yaml" + ], + "description": "partially update status of the specified PodDisruptionBudget", + "operationId": "patchPolicyV1NamespacedPodDisruptionBudgetStatus", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Patch" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + }, + { + "description": "Force is going to \"force\" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.", + "in": "query", + "name": "force", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.policy.v1.PodDisruptionBudget" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "policy_v1" + ], + "x-kubernetes-action": "patch", + "x-kubernetes-group-version-kind": { + "group": "policy", + "kind": "PodDisruptionBudget", + "version": "v1" + } + }, + "put": { + "consumes": [ + "*/*" + ], + "description": "replace status of the specified PodDisruptionBudget", + "operationId": "replacePolicyV1NamespacedPodDisruptionBudgetStatus", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.policy.v1.PodDisruptionBudget" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.policy.v1.PodDisruptionBudget" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.policy.v1.PodDisruptionBudget" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "policy_v1" + ], + "x-kubernetes-action": "put", + "x-kubernetes-group-version-kind": { + "group": "policy", + "kind": "PodDisruptionBudget", + "version": "v1" + } + } + }, + "/apis/policy/v1/poddisruptionbudgets": { + "get": { + "consumes": [ + "*/*" + ], + "description": "list or watch objects of kind PodDisruptionBudget", + "operationId": "listPolicyV1PodDisruptionBudgetForAllNamespaces", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.policy.v1.PodDisruptionBudgetList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "policy_v1" + ], + "x-kubernetes-action": "list", + "x-kubernetes-group-version-kind": { + "group": "policy", + "kind": "PodDisruptionBudget", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/policy/v1/watch/namespaces/{namespace}/poddisruptionbudgets": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch individual changes to a list of PodDisruptionBudget. deprecated: use the 'watch' parameter with a list operation instead.", + "operationId": "watchPolicyV1NamespacedPodDisruptionBudgetList", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "policy_v1" + ], + "x-kubernetes-action": "watchlist", + "x-kubernetes-group-version-kind": { + "group": "policy", + "kind": "PodDisruptionBudget", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/policy/v1/watch/namespaces/{namespace}/poddisruptionbudgets/{name}": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch changes to an object of kind PodDisruptionBudget. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.", + "operationId": "watchPolicyV1NamespacedPodDisruptionBudget", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "policy_v1" + ], + "x-kubernetes-action": "watch", + "x-kubernetes-group-version-kind": { + "group": "policy", + "kind": "PodDisruptionBudget", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "name of the PodDisruptionBudget", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/policy/v1/watch/poddisruptionbudgets": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch individual changes to a list of PodDisruptionBudget. deprecated: use the 'watch' parameter with a list operation instead.", + "operationId": "watchPolicyV1PodDisruptionBudgetListForAllNamespaces", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "policy_v1" + ], + "x-kubernetes-action": "watchlist", + "x-kubernetes-group-version-kind": { + "group": "policy", + "kind": "PodDisruptionBudget", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/policy/v1beta1/": { + "get": { + "consumes": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "description": "get available resources", + "operationId": "getPolicyV1beta1APIResources", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.APIResourceList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "policy_v1beta1" + ] + } + }, + "/apis/policy/v1beta1/namespaces/{namespace}/poddisruptionbudgets": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete collection of PodDisruptionBudget", + "operationId": "deletePolicyV1beta1CollectionNamespacedPodDisruptionBudget", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "policy_v1beta1" + ], + "x-kubernetes-action": "deletecollection", + "x-kubernetes-group-version-kind": { + "group": "policy", + "kind": "PodDisruptionBudget", + "version": "v1beta1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "list or watch objects of kind PodDisruptionBudget", + "operationId": "listPolicyV1beta1NamespacedPodDisruptionBudget", + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.policy.v1beta1.PodDisruptionBudgetList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "policy_v1beta1" + ], + "x-kubernetes-action": "list", + "x-kubernetes-group-version-kind": { + "group": "policy", + "kind": "PodDisruptionBudget", + "version": "v1beta1" + } + }, + "parameters": [ + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "post": { + "consumes": [ + "*/*" + ], + "description": "create a PodDisruptionBudget", + "operationId": "createPolicyV1beta1NamespacedPodDisruptionBudget", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.policy.v1beta1.PodDisruptionBudget" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.policy.v1beta1.PodDisruptionBudget" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.policy.v1beta1.PodDisruptionBudget" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.api.policy.v1beta1.PodDisruptionBudget" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "policy_v1beta1" + ], + "x-kubernetes-action": "post", + "x-kubernetes-group-version-kind": { + "group": "policy", + "kind": "PodDisruptionBudget", + "version": "v1beta1" + } + } + }, + "/apis/policy/v1beta1/namespaces/{namespace}/poddisruptionbudgets/{name}": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete a PodDisruptionBudget", + "operationId": "deletePolicyV1beta1NamespacedPodDisruptionBudget", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "policy_v1beta1" + ], + "x-kubernetes-action": "delete", + "x-kubernetes-group-version-kind": { + "group": "policy", + "kind": "PodDisruptionBudget", + "version": "v1beta1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "read the specified PodDisruptionBudget", + "operationId": "readPolicyV1beta1NamespacedPodDisruptionBudget", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.policy.v1beta1.PodDisruptionBudget" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "policy_v1beta1" + ], + "x-kubernetes-action": "get", + "x-kubernetes-group-version-kind": { + "group": "policy", + "kind": "PodDisruptionBudget", + "version": "v1beta1" + } + }, + "parameters": [ + { + "description": "name of the PodDisruptionBudget", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "patch": { + "consumes": [ + "application/json-patch+json", + "application/merge-patch+json", + "application/strategic-merge-patch+json", + "application/apply-patch+yaml" + ], + "description": "partially update the specified PodDisruptionBudget", + "operationId": "patchPolicyV1beta1NamespacedPodDisruptionBudget", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Patch" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + }, + { + "description": "Force is going to \"force\" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.", + "in": "query", + "name": "force", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.policy.v1beta1.PodDisruptionBudget" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "policy_v1beta1" + ], + "x-kubernetes-action": "patch", + "x-kubernetes-group-version-kind": { + "group": "policy", + "kind": "PodDisruptionBudget", + "version": "v1beta1" + } + }, + "put": { + "consumes": [ + "*/*" + ], + "description": "replace the specified PodDisruptionBudget", + "operationId": "replacePolicyV1beta1NamespacedPodDisruptionBudget", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.policy.v1beta1.PodDisruptionBudget" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.policy.v1beta1.PodDisruptionBudget" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.policy.v1beta1.PodDisruptionBudget" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "policy_v1beta1" + ], + "x-kubernetes-action": "put", + "x-kubernetes-group-version-kind": { + "group": "policy", + "kind": "PodDisruptionBudget", + "version": "v1beta1" + } + } + }, + "/apis/policy/v1beta1/namespaces/{namespace}/poddisruptionbudgets/{name}/status": { + "get": { + "consumes": [ + "*/*" + ], + "description": "read status of the specified PodDisruptionBudget", + "operationId": "readPolicyV1beta1NamespacedPodDisruptionBudgetStatus", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.policy.v1beta1.PodDisruptionBudget" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "policy_v1beta1" + ], + "x-kubernetes-action": "get", + "x-kubernetes-group-version-kind": { + "group": "policy", + "kind": "PodDisruptionBudget", + "version": "v1beta1" + } + }, + "parameters": [ + { + "description": "name of the PodDisruptionBudget", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "patch": { + "consumes": [ + "application/json-patch+json", + "application/merge-patch+json", + "application/strategic-merge-patch+json", + "application/apply-patch+yaml" + ], + "description": "partially update status of the specified PodDisruptionBudget", + "operationId": "patchPolicyV1beta1NamespacedPodDisruptionBudgetStatus", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Patch" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + }, + { + "description": "Force is going to \"force\" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.", + "in": "query", + "name": "force", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.policy.v1beta1.PodDisruptionBudget" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "policy_v1beta1" + ], + "x-kubernetes-action": "patch", + "x-kubernetes-group-version-kind": { + "group": "policy", + "kind": "PodDisruptionBudget", + "version": "v1beta1" + } + }, + "put": { + "consumes": [ + "*/*" + ], + "description": "replace status of the specified PodDisruptionBudget", + "operationId": "replacePolicyV1beta1NamespacedPodDisruptionBudgetStatus", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.policy.v1beta1.PodDisruptionBudget" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.policy.v1beta1.PodDisruptionBudget" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.policy.v1beta1.PodDisruptionBudget" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "policy_v1beta1" + ], + "x-kubernetes-action": "put", + "x-kubernetes-group-version-kind": { + "group": "policy", + "kind": "PodDisruptionBudget", + "version": "v1beta1" + } + } + }, + "/apis/policy/v1beta1/poddisruptionbudgets": { + "get": { + "consumes": [ + "*/*" + ], + "description": "list or watch objects of kind PodDisruptionBudget", + "operationId": "listPolicyV1beta1PodDisruptionBudgetForAllNamespaces", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.policy.v1beta1.PodDisruptionBudgetList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "policy_v1beta1" + ], + "x-kubernetes-action": "list", + "x-kubernetes-group-version-kind": { + "group": "policy", + "kind": "PodDisruptionBudget", + "version": "v1beta1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/policy/v1beta1/podsecuritypolicies": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete collection of PodSecurityPolicy", + "operationId": "deletePolicyV1beta1CollectionPodSecurityPolicy", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "policy_v1beta1" + ], + "x-kubernetes-action": "deletecollection", + "x-kubernetes-group-version-kind": { + "group": "policy", + "kind": "PodSecurityPolicy", + "version": "v1beta1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "list or watch objects of kind PodSecurityPolicy", + "operationId": "listPolicyV1beta1PodSecurityPolicy", + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.policy.v1beta1.PodSecurityPolicyList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "policy_v1beta1" + ], + "x-kubernetes-action": "list", + "x-kubernetes-group-version-kind": { + "group": "policy", + "kind": "PodSecurityPolicy", + "version": "v1beta1" + } + }, + "parameters": [ + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "post": { + "consumes": [ + "*/*" + ], + "description": "create a PodSecurityPolicy", + "operationId": "createPolicyV1beta1PodSecurityPolicy", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.policy.v1beta1.PodSecurityPolicy" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.policy.v1beta1.PodSecurityPolicy" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.policy.v1beta1.PodSecurityPolicy" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.api.policy.v1beta1.PodSecurityPolicy" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "policy_v1beta1" + ], + "x-kubernetes-action": "post", + "x-kubernetes-group-version-kind": { + "group": "policy", + "kind": "PodSecurityPolicy", + "version": "v1beta1" + } + } + }, + "/apis/policy/v1beta1/podsecuritypolicies/{name}": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete a PodSecurityPolicy", + "operationId": "deletePolicyV1beta1PodSecurityPolicy", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.policy.v1beta1.PodSecurityPolicy" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.api.policy.v1beta1.PodSecurityPolicy" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "policy_v1beta1" + ], + "x-kubernetes-action": "delete", + "x-kubernetes-group-version-kind": { + "group": "policy", + "kind": "PodSecurityPolicy", + "version": "v1beta1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "read the specified PodSecurityPolicy", + "operationId": "readPolicyV1beta1PodSecurityPolicy", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.policy.v1beta1.PodSecurityPolicy" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "policy_v1beta1" + ], + "x-kubernetes-action": "get", + "x-kubernetes-group-version-kind": { + "group": "policy", + "kind": "PodSecurityPolicy", + "version": "v1beta1" + } + }, + "parameters": [ + { + "description": "name of the PodSecurityPolicy", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "patch": { + "consumes": [ + "application/json-patch+json", + "application/merge-patch+json", + "application/strategic-merge-patch+json", + "application/apply-patch+yaml" + ], + "description": "partially update the specified PodSecurityPolicy", + "operationId": "patchPolicyV1beta1PodSecurityPolicy", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Patch" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + }, + { + "description": "Force is going to \"force\" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.", + "in": "query", + "name": "force", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.policy.v1beta1.PodSecurityPolicy" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "policy_v1beta1" + ], + "x-kubernetes-action": "patch", + "x-kubernetes-group-version-kind": { + "group": "policy", + "kind": "PodSecurityPolicy", + "version": "v1beta1" + } + }, + "put": { + "consumes": [ + "*/*" + ], + "description": "replace the specified PodSecurityPolicy", + "operationId": "replacePolicyV1beta1PodSecurityPolicy", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.policy.v1beta1.PodSecurityPolicy" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.policy.v1beta1.PodSecurityPolicy" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.policy.v1beta1.PodSecurityPolicy" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "policy_v1beta1" + ], + "x-kubernetes-action": "put", + "x-kubernetes-group-version-kind": { + "group": "policy", + "kind": "PodSecurityPolicy", + "version": "v1beta1" + } + } + }, + "/apis/policy/v1beta1/watch/namespaces/{namespace}/poddisruptionbudgets": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch individual changes to a list of PodDisruptionBudget. deprecated: use the 'watch' parameter with a list operation instead.", + "operationId": "watchPolicyV1beta1NamespacedPodDisruptionBudgetList", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "policy_v1beta1" + ], + "x-kubernetes-action": "watchlist", + "x-kubernetes-group-version-kind": { + "group": "policy", + "kind": "PodDisruptionBudget", + "version": "v1beta1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/policy/v1beta1/watch/namespaces/{namespace}/poddisruptionbudgets/{name}": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch changes to an object of kind PodDisruptionBudget. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.", + "operationId": "watchPolicyV1beta1NamespacedPodDisruptionBudget", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "policy_v1beta1" + ], + "x-kubernetes-action": "watch", + "x-kubernetes-group-version-kind": { + "group": "policy", + "kind": "PodDisruptionBudget", + "version": "v1beta1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "name of the PodDisruptionBudget", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/policy/v1beta1/watch/poddisruptionbudgets": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch individual changes to a list of PodDisruptionBudget. deprecated: use the 'watch' parameter with a list operation instead.", + "operationId": "watchPolicyV1beta1PodDisruptionBudgetListForAllNamespaces", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "policy_v1beta1" + ], + "x-kubernetes-action": "watchlist", + "x-kubernetes-group-version-kind": { + "group": "policy", + "kind": "PodDisruptionBudget", + "version": "v1beta1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/policy/v1beta1/watch/podsecuritypolicies": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch individual changes to a list of PodSecurityPolicy. deprecated: use the 'watch' parameter with a list operation instead.", + "operationId": "watchPolicyV1beta1PodSecurityPolicyList", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "policy_v1beta1" + ], + "x-kubernetes-action": "watchlist", + "x-kubernetes-group-version-kind": { + "group": "policy", + "kind": "PodSecurityPolicy", + "version": "v1beta1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/policy/v1beta1/watch/podsecuritypolicies/{name}": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch changes to an object of kind PodSecurityPolicy. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.", + "operationId": "watchPolicyV1beta1PodSecurityPolicy", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "policy_v1beta1" + ], + "x-kubernetes-action": "watch", + "x-kubernetes-group-version-kind": { + "group": "policy", + "kind": "PodSecurityPolicy", + "version": "v1beta1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "name of the PodSecurityPolicy", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/rbac.authorization.k8s.io/": { + "get": { + "consumes": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "description": "get information of a group", + "operationId": "getRbacAuthorizationAPIGroup", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.APIGroup" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "rbacAuthorization" + ] + } + }, + "/apis/rbac.authorization.k8s.io/v1/": { + "get": { + "consumes": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "description": "get available resources", + "operationId": "getRbacAuthorizationV1APIResources", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.APIResourceList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "rbacAuthorization_v1" + ] + } + }, + "/apis/rbac.authorization.k8s.io/v1/clusterrolebindings": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete collection of ClusterRoleBinding", + "operationId": "deleteRbacAuthorizationV1CollectionClusterRoleBinding", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "rbacAuthorization_v1" + ], + "x-kubernetes-action": "deletecollection", + "x-kubernetes-group-version-kind": { + "group": "rbac.authorization.k8s.io", + "kind": "ClusterRoleBinding", + "version": "v1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "list or watch objects of kind ClusterRoleBinding", + "operationId": "listRbacAuthorizationV1ClusterRoleBinding", + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.rbac.v1.ClusterRoleBindingList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "rbacAuthorization_v1" + ], + "x-kubernetes-action": "list", + "x-kubernetes-group-version-kind": { + "group": "rbac.authorization.k8s.io", + "kind": "ClusterRoleBinding", + "version": "v1" + } + }, + "parameters": [ + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "post": { + "consumes": [ + "*/*" + ], + "description": "create a ClusterRoleBinding", + "operationId": "createRbacAuthorizationV1ClusterRoleBinding", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.rbac.v1.ClusterRoleBinding" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.rbac.v1.ClusterRoleBinding" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.rbac.v1.ClusterRoleBinding" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.api.rbac.v1.ClusterRoleBinding" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "rbacAuthorization_v1" + ], + "x-kubernetes-action": "post", + "x-kubernetes-group-version-kind": { + "group": "rbac.authorization.k8s.io", + "kind": "ClusterRoleBinding", + "version": "v1" + } + } + }, + "/apis/rbac.authorization.k8s.io/v1/clusterrolebindings/{name}": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete a ClusterRoleBinding", + "operationId": "deleteRbacAuthorizationV1ClusterRoleBinding", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "rbacAuthorization_v1" + ], + "x-kubernetes-action": "delete", + "x-kubernetes-group-version-kind": { + "group": "rbac.authorization.k8s.io", + "kind": "ClusterRoleBinding", + "version": "v1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "read the specified ClusterRoleBinding", + "operationId": "readRbacAuthorizationV1ClusterRoleBinding", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.rbac.v1.ClusterRoleBinding" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "rbacAuthorization_v1" + ], + "x-kubernetes-action": "get", + "x-kubernetes-group-version-kind": { + "group": "rbac.authorization.k8s.io", + "kind": "ClusterRoleBinding", + "version": "v1" + } + }, + "parameters": [ + { + "description": "name of the ClusterRoleBinding", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "patch": { + "consumes": [ + "application/json-patch+json", + "application/merge-patch+json", + "application/strategic-merge-patch+json", + "application/apply-patch+yaml" + ], + "description": "partially update the specified ClusterRoleBinding", + "operationId": "patchRbacAuthorizationV1ClusterRoleBinding", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Patch" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + }, + { + "description": "Force is going to \"force\" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.", + "in": "query", + "name": "force", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.rbac.v1.ClusterRoleBinding" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "rbacAuthorization_v1" + ], + "x-kubernetes-action": "patch", + "x-kubernetes-group-version-kind": { + "group": "rbac.authorization.k8s.io", + "kind": "ClusterRoleBinding", + "version": "v1" + } + }, + "put": { + "consumes": [ + "*/*" + ], + "description": "replace the specified ClusterRoleBinding", + "operationId": "replaceRbacAuthorizationV1ClusterRoleBinding", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.rbac.v1.ClusterRoleBinding" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.rbac.v1.ClusterRoleBinding" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.rbac.v1.ClusterRoleBinding" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "rbacAuthorization_v1" + ], + "x-kubernetes-action": "put", + "x-kubernetes-group-version-kind": { + "group": "rbac.authorization.k8s.io", + "kind": "ClusterRoleBinding", + "version": "v1" + } + } + }, + "/apis/rbac.authorization.k8s.io/v1/clusterroles": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete collection of ClusterRole", + "operationId": "deleteRbacAuthorizationV1CollectionClusterRole", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "rbacAuthorization_v1" + ], + "x-kubernetes-action": "deletecollection", + "x-kubernetes-group-version-kind": { + "group": "rbac.authorization.k8s.io", + "kind": "ClusterRole", + "version": "v1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "list or watch objects of kind ClusterRole", + "operationId": "listRbacAuthorizationV1ClusterRole", + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.rbac.v1.ClusterRoleList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "rbacAuthorization_v1" + ], + "x-kubernetes-action": "list", + "x-kubernetes-group-version-kind": { + "group": "rbac.authorization.k8s.io", + "kind": "ClusterRole", + "version": "v1" + } + }, + "parameters": [ + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "post": { + "consumes": [ + "*/*" + ], + "description": "create a ClusterRole", + "operationId": "createRbacAuthorizationV1ClusterRole", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.rbac.v1.ClusterRole" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.rbac.v1.ClusterRole" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.rbac.v1.ClusterRole" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.api.rbac.v1.ClusterRole" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "rbacAuthorization_v1" + ], + "x-kubernetes-action": "post", + "x-kubernetes-group-version-kind": { + "group": "rbac.authorization.k8s.io", + "kind": "ClusterRole", + "version": "v1" + } + } + }, + "/apis/rbac.authorization.k8s.io/v1/clusterroles/{name}": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete a ClusterRole", + "operationId": "deleteRbacAuthorizationV1ClusterRole", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "rbacAuthorization_v1" + ], + "x-kubernetes-action": "delete", + "x-kubernetes-group-version-kind": { + "group": "rbac.authorization.k8s.io", + "kind": "ClusterRole", + "version": "v1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "read the specified ClusterRole", + "operationId": "readRbacAuthorizationV1ClusterRole", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.rbac.v1.ClusterRole" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "rbacAuthorization_v1" + ], + "x-kubernetes-action": "get", + "x-kubernetes-group-version-kind": { + "group": "rbac.authorization.k8s.io", + "kind": "ClusterRole", + "version": "v1" + } + }, + "parameters": [ + { + "description": "name of the ClusterRole", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "patch": { + "consumes": [ + "application/json-patch+json", + "application/merge-patch+json", + "application/strategic-merge-patch+json", + "application/apply-patch+yaml" + ], + "description": "partially update the specified ClusterRole", + "operationId": "patchRbacAuthorizationV1ClusterRole", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Patch" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + }, + { + "description": "Force is going to \"force\" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.", + "in": "query", + "name": "force", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.rbac.v1.ClusterRole" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "rbacAuthorization_v1" + ], + "x-kubernetes-action": "patch", + "x-kubernetes-group-version-kind": { + "group": "rbac.authorization.k8s.io", + "kind": "ClusterRole", + "version": "v1" + } + }, + "put": { + "consumes": [ + "*/*" + ], + "description": "replace the specified ClusterRole", + "operationId": "replaceRbacAuthorizationV1ClusterRole", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.rbac.v1.ClusterRole" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.rbac.v1.ClusterRole" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.rbac.v1.ClusterRole" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "rbacAuthorization_v1" + ], + "x-kubernetes-action": "put", + "x-kubernetes-group-version-kind": { + "group": "rbac.authorization.k8s.io", + "kind": "ClusterRole", + "version": "v1" + } + } + }, + "/apis/rbac.authorization.k8s.io/v1/namespaces/{namespace}/rolebindings": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete collection of RoleBinding", + "operationId": "deleteRbacAuthorizationV1CollectionNamespacedRoleBinding", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "rbacAuthorization_v1" + ], + "x-kubernetes-action": "deletecollection", + "x-kubernetes-group-version-kind": { + "group": "rbac.authorization.k8s.io", + "kind": "RoleBinding", + "version": "v1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "list or watch objects of kind RoleBinding", + "operationId": "listRbacAuthorizationV1NamespacedRoleBinding", + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.rbac.v1.RoleBindingList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "rbacAuthorization_v1" + ], + "x-kubernetes-action": "list", + "x-kubernetes-group-version-kind": { + "group": "rbac.authorization.k8s.io", + "kind": "RoleBinding", + "version": "v1" + } + }, + "parameters": [ + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "post": { + "consumes": [ + "*/*" + ], + "description": "create a RoleBinding", + "operationId": "createRbacAuthorizationV1NamespacedRoleBinding", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.rbac.v1.RoleBinding" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.rbac.v1.RoleBinding" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.rbac.v1.RoleBinding" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.api.rbac.v1.RoleBinding" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "rbacAuthorization_v1" + ], + "x-kubernetes-action": "post", + "x-kubernetes-group-version-kind": { + "group": "rbac.authorization.k8s.io", + "kind": "RoleBinding", + "version": "v1" + } + } + }, + "/apis/rbac.authorization.k8s.io/v1/namespaces/{namespace}/rolebindings/{name}": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete a RoleBinding", + "operationId": "deleteRbacAuthorizationV1NamespacedRoleBinding", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "rbacAuthorization_v1" + ], + "x-kubernetes-action": "delete", + "x-kubernetes-group-version-kind": { + "group": "rbac.authorization.k8s.io", + "kind": "RoleBinding", + "version": "v1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "read the specified RoleBinding", + "operationId": "readRbacAuthorizationV1NamespacedRoleBinding", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.rbac.v1.RoleBinding" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "rbacAuthorization_v1" + ], + "x-kubernetes-action": "get", + "x-kubernetes-group-version-kind": { + "group": "rbac.authorization.k8s.io", + "kind": "RoleBinding", + "version": "v1" + } + }, + "parameters": [ + { + "description": "name of the RoleBinding", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "patch": { + "consumes": [ + "application/json-patch+json", + "application/merge-patch+json", + "application/strategic-merge-patch+json", + "application/apply-patch+yaml" + ], + "description": "partially update the specified RoleBinding", + "operationId": "patchRbacAuthorizationV1NamespacedRoleBinding", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Patch" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + }, + { + "description": "Force is going to \"force\" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.", + "in": "query", + "name": "force", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.rbac.v1.RoleBinding" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "rbacAuthorization_v1" + ], + "x-kubernetes-action": "patch", + "x-kubernetes-group-version-kind": { + "group": "rbac.authorization.k8s.io", + "kind": "RoleBinding", + "version": "v1" + } + }, + "put": { + "consumes": [ + "*/*" + ], + "description": "replace the specified RoleBinding", + "operationId": "replaceRbacAuthorizationV1NamespacedRoleBinding", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.rbac.v1.RoleBinding" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.rbac.v1.RoleBinding" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.rbac.v1.RoleBinding" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "rbacAuthorization_v1" + ], + "x-kubernetes-action": "put", + "x-kubernetes-group-version-kind": { + "group": "rbac.authorization.k8s.io", + "kind": "RoleBinding", + "version": "v1" + } + } + }, + "/apis/rbac.authorization.k8s.io/v1/namespaces/{namespace}/roles": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete collection of Role", + "operationId": "deleteRbacAuthorizationV1CollectionNamespacedRole", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "rbacAuthorization_v1" + ], + "x-kubernetes-action": "deletecollection", + "x-kubernetes-group-version-kind": { + "group": "rbac.authorization.k8s.io", + "kind": "Role", + "version": "v1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "list or watch objects of kind Role", + "operationId": "listRbacAuthorizationV1NamespacedRole", + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.rbac.v1.RoleList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "rbacAuthorization_v1" + ], + "x-kubernetes-action": "list", + "x-kubernetes-group-version-kind": { + "group": "rbac.authorization.k8s.io", + "kind": "Role", + "version": "v1" + } + }, + "parameters": [ + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "post": { + "consumes": [ + "*/*" + ], + "description": "create a Role", + "operationId": "createRbacAuthorizationV1NamespacedRole", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.rbac.v1.Role" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.rbac.v1.Role" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.rbac.v1.Role" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.api.rbac.v1.Role" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "rbacAuthorization_v1" + ], + "x-kubernetes-action": "post", + "x-kubernetes-group-version-kind": { + "group": "rbac.authorization.k8s.io", + "kind": "Role", + "version": "v1" + } + } + }, + "/apis/rbac.authorization.k8s.io/v1/namespaces/{namespace}/roles/{name}": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete a Role", + "operationId": "deleteRbacAuthorizationV1NamespacedRole", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "rbacAuthorization_v1" + ], + "x-kubernetes-action": "delete", + "x-kubernetes-group-version-kind": { + "group": "rbac.authorization.k8s.io", + "kind": "Role", + "version": "v1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "read the specified Role", + "operationId": "readRbacAuthorizationV1NamespacedRole", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.rbac.v1.Role" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "rbacAuthorization_v1" + ], + "x-kubernetes-action": "get", + "x-kubernetes-group-version-kind": { + "group": "rbac.authorization.k8s.io", + "kind": "Role", + "version": "v1" + } + }, + "parameters": [ + { + "description": "name of the Role", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "patch": { + "consumes": [ + "application/json-patch+json", + "application/merge-patch+json", + "application/strategic-merge-patch+json", + "application/apply-patch+yaml" + ], + "description": "partially update the specified Role", + "operationId": "patchRbacAuthorizationV1NamespacedRole", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Patch" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + }, + { + "description": "Force is going to \"force\" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.", + "in": "query", + "name": "force", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.rbac.v1.Role" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "rbacAuthorization_v1" + ], + "x-kubernetes-action": "patch", + "x-kubernetes-group-version-kind": { + "group": "rbac.authorization.k8s.io", + "kind": "Role", + "version": "v1" + } + }, + "put": { + "consumes": [ + "*/*" + ], + "description": "replace the specified Role", + "operationId": "replaceRbacAuthorizationV1NamespacedRole", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.rbac.v1.Role" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.rbac.v1.Role" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.rbac.v1.Role" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "rbacAuthorization_v1" + ], + "x-kubernetes-action": "put", + "x-kubernetes-group-version-kind": { + "group": "rbac.authorization.k8s.io", + "kind": "Role", + "version": "v1" + } + } + }, + "/apis/rbac.authorization.k8s.io/v1/rolebindings": { + "get": { + "consumes": [ + "*/*" + ], + "description": "list or watch objects of kind RoleBinding", + "operationId": "listRbacAuthorizationV1RoleBindingForAllNamespaces", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.rbac.v1.RoleBindingList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "rbacAuthorization_v1" + ], + "x-kubernetes-action": "list", + "x-kubernetes-group-version-kind": { + "group": "rbac.authorization.k8s.io", + "kind": "RoleBinding", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/rbac.authorization.k8s.io/v1/roles": { + "get": { + "consumes": [ + "*/*" + ], + "description": "list or watch objects of kind Role", + "operationId": "listRbacAuthorizationV1RoleForAllNamespaces", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.rbac.v1.RoleList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "rbacAuthorization_v1" + ], + "x-kubernetes-action": "list", + "x-kubernetes-group-version-kind": { + "group": "rbac.authorization.k8s.io", + "kind": "Role", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/rbac.authorization.k8s.io/v1/watch/clusterrolebindings": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch individual changes to a list of ClusterRoleBinding. deprecated: use the 'watch' parameter with a list operation instead.", + "operationId": "watchRbacAuthorizationV1ClusterRoleBindingList", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "rbacAuthorization_v1" + ], + "x-kubernetes-action": "watchlist", + "x-kubernetes-group-version-kind": { + "group": "rbac.authorization.k8s.io", + "kind": "ClusterRoleBinding", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/rbac.authorization.k8s.io/v1/watch/clusterrolebindings/{name}": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch changes to an object of kind ClusterRoleBinding. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.", + "operationId": "watchRbacAuthorizationV1ClusterRoleBinding", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "rbacAuthorization_v1" + ], + "x-kubernetes-action": "watch", + "x-kubernetes-group-version-kind": { + "group": "rbac.authorization.k8s.io", + "kind": "ClusterRoleBinding", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "name of the ClusterRoleBinding", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/rbac.authorization.k8s.io/v1/watch/clusterroles": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch individual changes to a list of ClusterRole. deprecated: use the 'watch' parameter with a list operation instead.", + "operationId": "watchRbacAuthorizationV1ClusterRoleList", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "rbacAuthorization_v1" + ], + "x-kubernetes-action": "watchlist", + "x-kubernetes-group-version-kind": { + "group": "rbac.authorization.k8s.io", + "kind": "ClusterRole", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/rbac.authorization.k8s.io/v1/watch/clusterroles/{name}": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch changes to an object of kind ClusterRole. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.", + "operationId": "watchRbacAuthorizationV1ClusterRole", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "rbacAuthorization_v1" + ], + "x-kubernetes-action": "watch", + "x-kubernetes-group-version-kind": { + "group": "rbac.authorization.k8s.io", + "kind": "ClusterRole", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "name of the ClusterRole", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/rbac.authorization.k8s.io/v1/watch/namespaces/{namespace}/rolebindings": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch individual changes to a list of RoleBinding. deprecated: use the 'watch' parameter with a list operation instead.", + "operationId": "watchRbacAuthorizationV1NamespacedRoleBindingList", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "rbacAuthorization_v1" + ], + "x-kubernetes-action": "watchlist", + "x-kubernetes-group-version-kind": { + "group": "rbac.authorization.k8s.io", + "kind": "RoleBinding", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/rbac.authorization.k8s.io/v1/watch/namespaces/{namespace}/rolebindings/{name}": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch changes to an object of kind RoleBinding. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.", + "operationId": "watchRbacAuthorizationV1NamespacedRoleBinding", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "rbacAuthorization_v1" + ], + "x-kubernetes-action": "watch", + "x-kubernetes-group-version-kind": { + "group": "rbac.authorization.k8s.io", + "kind": "RoleBinding", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "name of the RoleBinding", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/rbac.authorization.k8s.io/v1/watch/namespaces/{namespace}/roles": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch individual changes to a list of Role. deprecated: use the 'watch' parameter with a list operation instead.", + "operationId": "watchRbacAuthorizationV1NamespacedRoleList", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "rbacAuthorization_v1" + ], + "x-kubernetes-action": "watchlist", + "x-kubernetes-group-version-kind": { + "group": "rbac.authorization.k8s.io", + "kind": "Role", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/rbac.authorization.k8s.io/v1/watch/namespaces/{namespace}/roles/{name}": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch changes to an object of kind Role. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.", + "operationId": "watchRbacAuthorizationV1NamespacedRole", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "rbacAuthorization_v1" + ], + "x-kubernetes-action": "watch", + "x-kubernetes-group-version-kind": { + "group": "rbac.authorization.k8s.io", + "kind": "Role", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "name of the Role", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/rbac.authorization.k8s.io/v1/watch/rolebindings": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch individual changes to a list of RoleBinding. deprecated: use the 'watch' parameter with a list operation instead.", + "operationId": "watchRbacAuthorizationV1RoleBindingListForAllNamespaces", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "rbacAuthorization_v1" + ], + "x-kubernetes-action": "watchlist", + "x-kubernetes-group-version-kind": { + "group": "rbac.authorization.k8s.io", + "kind": "RoleBinding", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/rbac.authorization.k8s.io/v1/watch/roles": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch individual changes to a list of Role. deprecated: use the 'watch' parameter with a list operation instead.", + "operationId": "watchRbacAuthorizationV1RoleListForAllNamespaces", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "rbacAuthorization_v1" + ], + "x-kubernetes-action": "watchlist", + "x-kubernetes-group-version-kind": { + "group": "rbac.authorization.k8s.io", + "kind": "Role", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/rbac.authorization.k8s.io/v1beta1/": { + "get": { + "consumes": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "description": "get available resources", + "operationId": "getRbacAuthorizationV1beta1APIResources", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.APIResourceList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "rbacAuthorization_v1beta1" + ] + } + }, + "/apis/rbac.authorization.k8s.io/v1beta1/clusterrolebindings": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete collection of ClusterRoleBinding", + "operationId": "deleteRbacAuthorizationV1beta1CollectionClusterRoleBinding", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "rbacAuthorization_v1beta1" + ], + "x-kubernetes-action": "deletecollection", + "x-kubernetes-group-version-kind": { + "group": "rbac.authorization.k8s.io", + "kind": "ClusterRoleBinding", + "version": "v1beta1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "list or watch objects of kind ClusterRoleBinding", + "operationId": "listRbacAuthorizationV1beta1ClusterRoleBinding", + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.rbac.v1beta1.ClusterRoleBindingList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "rbacAuthorization_v1beta1" + ], + "x-kubernetes-action": "list", + "x-kubernetes-group-version-kind": { + "group": "rbac.authorization.k8s.io", + "kind": "ClusterRoleBinding", + "version": "v1beta1" + } + }, + "parameters": [ + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "post": { + "consumes": [ + "*/*" + ], + "description": "create a ClusterRoleBinding", + "operationId": "createRbacAuthorizationV1beta1ClusterRoleBinding", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.rbac.v1beta1.ClusterRoleBinding" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.rbac.v1beta1.ClusterRoleBinding" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.rbac.v1beta1.ClusterRoleBinding" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.api.rbac.v1beta1.ClusterRoleBinding" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "rbacAuthorization_v1beta1" + ], + "x-kubernetes-action": "post", + "x-kubernetes-group-version-kind": { + "group": "rbac.authorization.k8s.io", + "kind": "ClusterRoleBinding", + "version": "v1beta1" + } + } + }, + "/apis/rbac.authorization.k8s.io/v1beta1/clusterrolebindings/{name}": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete a ClusterRoleBinding", + "operationId": "deleteRbacAuthorizationV1beta1ClusterRoleBinding", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "rbacAuthorization_v1beta1" + ], + "x-kubernetes-action": "delete", + "x-kubernetes-group-version-kind": { + "group": "rbac.authorization.k8s.io", + "kind": "ClusterRoleBinding", + "version": "v1beta1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "read the specified ClusterRoleBinding", + "operationId": "readRbacAuthorizationV1beta1ClusterRoleBinding", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.rbac.v1beta1.ClusterRoleBinding" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "rbacAuthorization_v1beta1" + ], + "x-kubernetes-action": "get", + "x-kubernetes-group-version-kind": { + "group": "rbac.authorization.k8s.io", + "kind": "ClusterRoleBinding", + "version": "v1beta1" + } + }, + "parameters": [ + { + "description": "name of the ClusterRoleBinding", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "patch": { + "consumes": [ + "application/json-patch+json", + "application/merge-patch+json", + "application/strategic-merge-patch+json", + "application/apply-patch+yaml" + ], + "description": "partially update the specified ClusterRoleBinding", + "operationId": "patchRbacAuthorizationV1beta1ClusterRoleBinding", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Patch" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + }, + { + "description": "Force is going to \"force\" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.", + "in": "query", + "name": "force", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.rbac.v1beta1.ClusterRoleBinding" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "rbacAuthorization_v1beta1" + ], + "x-kubernetes-action": "patch", + "x-kubernetes-group-version-kind": { + "group": "rbac.authorization.k8s.io", + "kind": "ClusterRoleBinding", + "version": "v1beta1" + } + }, + "put": { + "consumes": [ + "*/*" + ], + "description": "replace the specified ClusterRoleBinding", + "operationId": "replaceRbacAuthorizationV1beta1ClusterRoleBinding", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.rbac.v1beta1.ClusterRoleBinding" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.rbac.v1beta1.ClusterRoleBinding" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.rbac.v1beta1.ClusterRoleBinding" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "rbacAuthorization_v1beta1" + ], + "x-kubernetes-action": "put", + "x-kubernetes-group-version-kind": { + "group": "rbac.authorization.k8s.io", + "kind": "ClusterRoleBinding", + "version": "v1beta1" + } + } + }, + "/apis/rbac.authorization.k8s.io/v1beta1/clusterroles": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete collection of ClusterRole", + "operationId": "deleteRbacAuthorizationV1beta1CollectionClusterRole", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "rbacAuthorization_v1beta1" + ], + "x-kubernetes-action": "deletecollection", + "x-kubernetes-group-version-kind": { + "group": "rbac.authorization.k8s.io", + "kind": "ClusterRole", + "version": "v1beta1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "list or watch objects of kind ClusterRole", + "operationId": "listRbacAuthorizationV1beta1ClusterRole", + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.rbac.v1beta1.ClusterRoleList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "rbacAuthorization_v1beta1" + ], + "x-kubernetes-action": "list", + "x-kubernetes-group-version-kind": { + "group": "rbac.authorization.k8s.io", + "kind": "ClusterRole", + "version": "v1beta1" + } + }, + "parameters": [ + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "post": { + "consumes": [ + "*/*" + ], + "description": "create a ClusterRole", + "operationId": "createRbacAuthorizationV1beta1ClusterRole", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.rbac.v1beta1.ClusterRole" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.rbac.v1beta1.ClusterRole" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.rbac.v1beta1.ClusterRole" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.api.rbac.v1beta1.ClusterRole" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "rbacAuthorization_v1beta1" + ], + "x-kubernetes-action": "post", + "x-kubernetes-group-version-kind": { + "group": "rbac.authorization.k8s.io", + "kind": "ClusterRole", + "version": "v1beta1" + } + } + }, + "/apis/rbac.authorization.k8s.io/v1beta1/clusterroles/{name}": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete a ClusterRole", + "operationId": "deleteRbacAuthorizationV1beta1ClusterRole", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "rbacAuthorization_v1beta1" + ], + "x-kubernetes-action": "delete", + "x-kubernetes-group-version-kind": { + "group": "rbac.authorization.k8s.io", + "kind": "ClusterRole", + "version": "v1beta1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "read the specified ClusterRole", + "operationId": "readRbacAuthorizationV1beta1ClusterRole", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.rbac.v1beta1.ClusterRole" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "rbacAuthorization_v1beta1" + ], + "x-kubernetes-action": "get", + "x-kubernetes-group-version-kind": { + "group": "rbac.authorization.k8s.io", + "kind": "ClusterRole", + "version": "v1beta1" + } + }, + "parameters": [ + { + "description": "name of the ClusterRole", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "patch": { + "consumes": [ + "application/json-patch+json", + "application/merge-patch+json", + "application/strategic-merge-patch+json", + "application/apply-patch+yaml" + ], + "description": "partially update the specified ClusterRole", + "operationId": "patchRbacAuthorizationV1beta1ClusterRole", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Patch" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + }, + { + "description": "Force is going to \"force\" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.", + "in": "query", + "name": "force", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.rbac.v1beta1.ClusterRole" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "rbacAuthorization_v1beta1" + ], + "x-kubernetes-action": "patch", + "x-kubernetes-group-version-kind": { + "group": "rbac.authorization.k8s.io", + "kind": "ClusterRole", + "version": "v1beta1" + } + }, + "put": { + "consumes": [ + "*/*" + ], + "description": "replace the specified ClusterRole", + "operationId": "replaceRbacAuthorizationV1beta1ClusterRole", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.rbac.v1beta1.ClusterRole" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.rbac.v1beta1.ClusterRole" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.rbac.v1beta1.ClusterRole" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "rbacAuthorization_v1beta1" + ], + "x-kubernetes-action": "put", + "x-kubernetes-group-version-kind": { + "group": "rbac.authorization.k8s.io", + "kind": "ClusterRole", + "version": "v1beta1" + } + } + }, + "/apis/rbac.authorization.k8s.io/v1beta1/namespaces/{namespace}/rolebindings": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete collection of RoleBinding", + "operationId": "deleteRbacAuthorizationV1beta1CollectionNamespacedRoleBinding", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "rbacAuthorization_v1beta1" + ], + "x-kubernetes-action": "deletecollection", + "x-kubernetes-group-version-kind": { + "group": "rbac.authorization.k8s.io", + "kind": "RoleBinding", + "version": "v1beta1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "list or watch objects of kind RoleBinding", + "operationId": "listRbacAuthorizationV1beta1NamespacedRoleBinding", + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.rbac.v1beta1.RoleBindingList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "rbacAuthorization_v1beta1" + ], + "x-kubernetes-action": "list", + "x-kubernetes-group-version-kind": { + "group": "rbac.authorization.k8s.io", + "kind": "RoleBinding", + "version": "v1beta1" + } + }, + "parameters": [ + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "post": { + "consumes": [ + "*/*" + ], + "description": "create a RoleBinding", + "operationId": "createRbacAuthorizationV1beta1NamespacedRoleBinding", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.rbac.v1beta1.RoleBinding" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.rbac.v1beta1.RoleBinding" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.rbac.v1beta1.RoleBinding" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.api.rbac.v1beta1.RoleBinding" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "rbacAuthorization_v1beta1" + ], + "x-kubernetes-action": "post", + "x-kubernetes-group-version-kind": { + "group": "rbac.authorization.k8s.io", + "kind": "RoleBinding", + "version": "v1beta1" + } + } + }, + "/apis/rbac.authorization.k8s.io/v1beta1/namespaces/{namespace}/rolebindings/{name}": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete a RoleBinding", + "operationId": "deleteRbacAuthorizationV1beta1NamespacedRoleBinding", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "rbacAuthorization_v1beta1" + ], + "x-kubernetes-action": "delete", + "x-kubernetes-group-version-kind": { + "group": "rbac.authorization.k8s.io", + "kind": "RoleBinding", + "version": "v1beta1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "read the specified RoleBinding", + "operationId": "readRbacAuthorizationV1beta1NamespacedRoleBinding", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.rbac.v1beta1.RoleBinding" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "rbacAuthorization_v1beta1" + ], + "x-kubernetes-action": "get", + "x-kubernetes-group-version-kind": { + "group": "rbac.authorization.k8s.io", + "kind": "RoleBinding", + "version": "v1beta1" + } + }, + "parameters": [ + { + "description": "name of the RoleBinding", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "patch": { + "consumes": [ + "application/json-patch+json", + "application/merge-patch+json", + "application/strategic-merge-patch+json", + "application/apply-patch+yaml" + ], + "description": "partially update the specified RoleBinding", + "operationId": "patchRbacAuthorizationV1beta1NamespacedRoleBinding", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Patch" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + }, + { + "description": "Force is going to \"force\" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.", + "in": "query", + "name": "force", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.rbac.v1beta1.RoleBinding" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "rbacAuthorization_v1beta1" + ], + "x-kubernetes-action": "patch", + "x-kubernetes-group-version-kind": { + "group": "rbac.authorization.k8s.io", + "kind": "RoleBinding", + "version": "v1beta1" + } + }, + "put": { + "consumes": [ + "*/*" + ], + "description": "replace the specified RoleBinding", + "operationId": "replaceRbacAuthorizationV1beta1NamespacedRoleBinding", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.rbac.v1beta1.RoleBinding" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.rbac.v1beta1.RoleBinding" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.rbac.v1beta1.RoleBinding" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "rbacAuthorization_v1beta1" + ], + "x-kubernetes-action": "put", + "x-kubernetes-group-version-kind": { + "group": "rbac.authorization.k8s.io", + "kind": "RoleBinding", + "version": "v1beta1" + } + } + }, + "/apis/rbac.authorization.k8s.io/v1beta1/namespaces/{namespace}/roles": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete collection of Role", + "operationId": "deleteRbacAuthorizationV1beta1CollectionNamespacedRole", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "rbacAuthorization_v1beta1" + ], + "x-kubernetes-action": "deletecollection", + "x-kubernetes-group-version-kind": { + "group": "rbac.authorization.k8s.io", + "kind": "Role", + "version": "v1beta1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "list or watch objects of kind Role", + "operationId": "listRbacAuthorizationV1beta1NamespacedRole", + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.rbac.v1beta1.RoleList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "rbacAuthorization_v1beta1" + ], + "x-kubernetes-action": "list", + "x-kubernetes-group-version-kind": { + "group": "rbac.authorization.k8s.io", + "kind": "Role", + "version": "v1beta1" + } + }, + "parameters": [ + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "post": { + "consumes": [ + "*/*" + ], + "description": "create a Role", + "operationId": "createRbacAuthorizationV1beta1NamespacedRole", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.rbac.v1beta1.Role" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.rbac.v1beta1.Role" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.rbac.v1beta1.Role" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.api.rbac.v1beta1.Role" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "rbacAuthorization_v1beta1" + ], + "x-kubernetes-action": "post", + "x-kubernetes-group-version-kind": { + "group": "rbac.authorization.k8s.io", + "kind": "Role", + "version": "v1beta1" + } + } + }, + "/apis/rbac.authorization.k8s.io/v1beta1/namespaces/{namespace}/roles/{name}": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete a Role", + "operationId": "deleteRbacAuthorizationV1beta1NamespacedRole", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "rbacAuthorization_v1beta1" + ], + "x-kubernetes-action": "delete", + "x-kubernetes-group-version-kind": { + "group": "rbac.authorization.k8s.io", + "kind": "Role", + "version": "v1beta1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "read the specified Role", + "operationId": "readRbacAuthorizationV1beta1NamespacedRole", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.rbac.v1beta1.Role" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "rbacAuthorization_v1beta1" + ], + "x-kubernetes-action": "get", + "x-kubernetes-group-version-kind": { + "group": "rbac.authorization.k8s.io", + "kind": "Role", + "version": "v1beta1" + } + }, + "parameters": [ + { + "description": "name of the Role", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "patch": { + "consumes": [ + "application/json-patch+json", + "application/merge-patch+json", + "application/strategic-merge-patch+json", + "application/apply-patch+yaml" + ], + "description": "partially update the specified Role", + "operationId": "patchRbacAuthorizationV1beta1NamespacedRole", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Patch" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + }, + { + "description": "Force is going to \"force\" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.", + "in": "query", + "name": "force", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.rbac.v1beta1.Role" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "rbacAuthorization_v1beta1" + ], + "x-kubernetes-action": "patch", + "x-kubernetes-group-version-kind": { + "group": "rbac.authorization.k8s.io", + "kind": "Role", + "version": "v1beta1" + } + }, + "put": { + "consumes": [ + "*/*" + ], + "description": "replace the specified Role", + "operationId": "replaceRbacAuthorizationV1beta1NamespacedRole", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.rbac.v1beta1.Role" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.rbac.v1beta1.Role" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.rbac.v1beta1.Role" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "rbacAuthorization_v1beta1" + ], + "x-kubernetes-action": "put", + "x-kubernetes-group-version-kind": { + "group": "rbac.authorization.k8s.io", + "kind": "Role", + "version": "v1beta1" + } + } + }, + "/apis/rbac.authorization.k8s.io/v1beta1/rolebindings": { + "get": { + "consumes": [ + "*/*" + ], + "description": "list or watch objects of kind RoleBinding", + "operationId": "listRbacAuthorizationV1beta1RoleBindingForAllNamespaces", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.rbac.v1beta1.RoleBindingList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "rbacAuthorization_v1beta1" + ], + "x-kubernetes-action": "list", + "x-kubernetes-group-version-kind": { + "group": "rbac.authorization.k8s.io", + "kind": "RoleBinding", + "version": "v1beta1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/rbac.authorization.k8s.io/v1beta1/roles": { + "get": { + "consumes": [ + "*/*" + ], + "description": "list or watch objects of kind Role", + "operationId": "listRbacAuthorizationV1beta1RoleForAllNamespaces", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.rbac.v1beta1.RoleList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "rbacAuthorization_v1beta1" + ], + "x-kubernetes-action": "list", + "x-kubernetes-group-version-kind": { + "group": "rbac.authorization.k8s.io", + "kind": "Role", + "version": "v1beta1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/rbac.authorization.k8s.io/v1beta1/watch/clusterrolebindings": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch individual changes to a list of ClusterRoleBinding. deprecated: use the 'watch' parameter with a list operation instead.", + "operationId": "watchRbacAuthorizationV1beta1ClusterRoleBindingList", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "rbacAuthorization_v1beta1" + ], + "x-kubernetes-action": "watchlist", + "x-kubernetes-group-version-kind": { + "group": "rbac.authorization.k8s.io", + "kind": "ClusterRoleBinding", + "version": "v1beta1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/rbac.authorization.k8s.io/v1beta1/watch/clusterrolebindings/{name}": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch changes to an object of kind ClusterRoleBinding. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.", + "operationId": "watchRbacAuthorizationV1beta1ClusterRoleBinding", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "rbacAuthorization_v1beta1" + ], + "x-kubernetes-action": "watch", + "x-kubernetes-group-version-kind": { + "group": "rbac.authorization.k8s.io", + "kind": "ClusterRoleBinding", + "version": "v1beta1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "name of the ClusterRoleBinding", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/rbac.authorization.k8s.io/v1beta1/watch/clusterroles": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch individual changes to a list of ClusterRole. deprecated: use the 'watch' parameter with a list operation instead.", + "operationId": "watchRbacAuthorizationV1beta1ClusterRoleList", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "rbacAuthorization_v1beta1" + ], + "x-kubernetes-action": "watchlist", + "x-kubernetes-group-version-kind": { + "group": "rbac.authorization.k8s.io", + "kind": "ClusterRole", + "version": "v1beta1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/rbac.authorization.k8s.io/v1beta1/watch/clusterroles/{name}": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch changes to an object of kind ClusterRole. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.", + "operationId": "watchRbacAuthorizationV1beta1ClusterRole", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "rbacAuthorization_v1beta1" + ], + "x-kubernetes-action": "watch", + "x-kubernetes-group-version-kind": { + "group": "rbac.authorization.k8s.io", + "kind": "ClusterRole", + "version": "v1beta1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "name of the ClusterRole", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/rbac.authorization.k8s.io/v1beta1/watch/namespaces/{namespace}/rolebindings": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch individual changes to a list of RoleBinding. deprecated: use the 'watch' parameter with a list operation instead.", + "operationId": "watchRbacAuthorizationV1beta1NamespacedRoleBindingList", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "rbacAuthorization_v1beta1" + ], + "x-kubernetes-action": "watchlist", + "x-kubernetes-group-version-kind": { + "group": "rbac.authorization.k8s.io", + "kind": "RoleBinding", + "version": "v1beta1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/rbac.authorization.k8s.io/v1beta1/watch/namespaces/{namespace}/rolebindings/{name}": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch changes to an object of kind RoleBinding. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.", + "operationId": "watchRbacAuthorizationV1beta1NamespacedRoleBinding", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "rbacAuthorization_v1beta1" + ], + "x-kubernetes-action": "watch", + "x-kubernetes-group-version-kind": { + "group": "rbac.authorization.k8s.io", + "kind": "RoleBinding", + "version": "v1beta1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "name of the RoleBinding", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/rbac.authorization.k8s.io/v1beta1/watch/namespaces/{namespace}/roles": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch individual changes to a list of Role. deprecated: use the 'watch' parameter with a list operation instead.", + "operationId": "watchRbacAuthorizationV1beta1NamespacedRoleList", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "rbacAuthorization_v1beta1" + ], + "x-kubernetes-action": "watchlist", + "x-kubernetes-group-version-kind": { + "group": "rbac.authorization.k8s.io", + "kind": "Role", + "version": "v1beta1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/rbac.authorization.k8s.io/v1beta1/watch/namespaces/{namespace}/roles/{name}": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch changes to an object of kind Role. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.", + "operationId": "watchRbacAuthorizationV1beta1NamespacedRole", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "rbacAuthorization_v1beta1" + ], + "x-kubernetes-action": "watch", + "x-kubernetes-group-version-kind": { + "group": "rbac.authorization.k8s.io", + "kind": "Role", + "version": "v1beta1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "name of the Role", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/rbac.authorization.k8s.io/v1beta1/watch/rolebindings": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch individual changes to a list of RoleBinding. deprecated: use the 'watch' parameter with a list operation instead.", + "operationId": "watchRbacAuthorizationV1beta1RoleBindingListForAllNamespaces", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "rbacAuthorization_v1beta1" + ], + "x-kubernetes-action": "watchlist", + "x-kubernetes-group-version-kind": { + "group": "rbac.authorization.k8s.io", + "kind": "RoleBinding", + "version": "v1beta1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/rbac.authorization.k8s.io/v1beta1/watch/roles": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch individual changes to a list of Role. deprecated: use the 'watch' parameter with a list operation instead.", + "operationId": "watchRbacAuthorizationV1beta1RoleListForAllNamespaces", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "rbacAuthorization_v1beta1" + ], + "x-kubernetes-action": "watchlist", + "x-kubernetes-group-version-kind": { + "group": "rbac.authorization.k8s.io", + "kind": "Role", + "version": "v1beta1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/scheduling.k8s.io/": { + "get": { + "consumes": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "description": "get information of a group", + "operationId": "getSchedulingAPIGroup", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.APIGroup" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "scheduling" + ] + } + }, + "/apis/scheduling.k8s.io/v1/": { + "get": { + "consumes": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "description": "get available resources", + "operationId": "getSchedulingV1APIResources", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.APIResourceList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "scheduling_v1" + ] + } + }, + "/apis/scheduling.k8s.io/v1/priorityclasses": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete collection of PriorityClass", + "operationId": "deleteSchedulingV1CollectionPriorityClass", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "scheduling_v1" + ], + "x-kubernetes-action": "deletecollection", + "x-kubernetes-group-version-kind": { + "group": "scheduling.k8s.io", + "kind": "PriorityClass", + "version": "v1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "list or watch objects of kind PriorityClass", + "operationId": "listSchedulingV1PriorityClass", + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.scheduling.v1.PriorityClassList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "scheduling_v1" + ], + "x-kubernetes-action": "list", + "x-kubernetes-group-version-kind": { + "group": "scheduling.k8s.io", + "kind": "PriorityClass", + "version": "v1" + } + }, + "parameters": [ + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "post": { + "consumes": [ + "*/*" + ], + "description": "create a PriorityClass", + "operationId": "createSchedulingV1PriorityClass", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.scheduling.v1.PriorityClass" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.scheduling.v1.PriorityClass" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.scheduling.v1.PriorityClass" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.api.scheduling.v1.PriorityClass" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "scheduling_v1" + ], + "x-kubernetes-action": "post", + "x-kubernetes-group-version-kind": { + "group": "scheduling.k8s.io", + "kind": "PriorityClass", + "version": "v1" + } + } + }, + "/apis/scheduling.k8s.io/v1/priorityclasses/{name}": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete a PriorityClass", + "operationId": "deleteSchedulingV1PriorityClass", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "scheduling_v1" + ], + "x-kubernetes-action": "delete", + "x-kubernetes-group-version-kind": { + "group": "scheduling.k8s.io", + "kind": "PriorityClass", + "version": "v1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "read the specified PriorityClass", + "operationId": "readSchedulingV1PriorityClass", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.scheduling.v1.PriorityClass" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "scheduling_v1" + ], + "x-kubernetes-action": "get", + "x-kubernetes-group-version-kind": { + "group": "scheduling.k8s.io", + "kind": "PriorityClass", + "version": "v1" + } + }, + "parameters": [ + { + "description": "name of the PriorityClass", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "patch": { + "consumes": [ + "application/json-patch+json", + "application/merge-patch+json", + "application/strategic-merge-patch+json", + "application/apply-patch+yaml" + ], + "description": "partially update the specified PriorityClass", + "operationId": "patchSchedulingV1PriorityClass", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Patch" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + }, + { + "description": "Force is going to \"force\" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.", + "in": "query", + "name": "force", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.scheduling.v1.PriorityClass" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "scheduling_v1" + ], + "x-kubernetes-action": "patch", + "x-kubernetes-group-version-kind": { + "group": "scheduling.k8s.io", + "kind": "PriorityClass", + "version": "v1" + } + }, + "put": { + "consumes": [ + "*/*" + ], + "description": "replace the specified PriorityClass", + "operationId": "replaceSchedulingV1PriorityClass", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.scheduling.v1.PriorityClass" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.scheduling.v1.PriorityClass" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.scheduling.v1.PriorityClass" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "scheduling_v1" + ], + "x-kubernetes-action": "put", + "x-kubernetes-group-version-kind": { + "group": "scheduling.k8s.io", + "kind": "PriorityClass", + "version": "v1" + } + } + }, + "/apis/scheduling.k8s.io/v1/watch/priorityclasses": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch individual changes to a list of PriorityClass. deprecated: use the 'watch' parameter with a list operation instead.", + "operationId": "watchSchedulingV1PriorityClassList", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "scheduling_v1" + ], + "x-kubernetes-action": "watchlist", + "x-kubernetes-group-version-kind": { + "group": "scheduling.k8s.io", + "kind": "PriorityClass", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/scheduling.k8s.io/v1/watch/priorityclasses/{name}": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch changes to an object of kind PriorityClass. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.", + "operationId": "watchSchedulingV1PriorityClass", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "scheduling_v1" + ], + "x-kubernetes-action": "watch", + "x-kubernetes-group-version-kind": { + "group": "scheduling.k8s.io", + "kind": "PriorityClass", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "name of the PriorityClass", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/scheduling.k8s.io/v1beta1/": { + "get": { + "consumes": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "description": "get available resources", + "operationId": "getSchedulingV1beta1APIResources", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.APIResourceList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "scheduling_v1beta1" + ] + } + }, + "/apis/scheduling.k8s.io/v1beta1/priorityclasses": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete collection of PriorityClass", + "operationId": "deleteSchedulingV1beta1CollectionPriorityClass", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "scheduling_v1beta1" + ], + "x-kubernetes-action": "deletecollection", + "x-kubernetes-group-version-kind": { + "group": "scheduling.k8s.io", + "kind": "PriorityClass", + "version": "v1beta1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "list or watch objects of kind PriorityClass", + "operationId": "listSchedulingV1beta1PriorityClass", + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.scheduling.v1beta1.PriorityClassList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "scheduling_v1beta1" + ], + "x-kubernetes-action": "list", + "x-kubernetes-group-version-kind": { + "group": "scheduling.k8s.io", + "kind": "PriorityClass", + "version": "v1beta1" + } + }, + "parameters": [ + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "post": { + "consumes": [ + "*/*" + ], + "description": "create a PriorityClass", + "operationId": "createSchedulingV1beta1PriorityClass", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.scheduling.v1beta1.PriorityClass" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.scheduling.v1beta1.PriorityClass" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.scheduling.v1beta1.PriorityClass" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.api.scheduling.v1beta1.PriorityClass" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "scheduling_v1beta1" + ], + "x-kubernetes-action": "post", + "x-kubernetes-group-version-kind": { + "group": "scheduling.k8s.io", + "kind": "PriorityClass", + "version": "v1beta1" + } + } + }, + "/apis/scheduling.k8s.io/v1beta1/priorityclasses/{name}": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete a PriorityClass", + "operationId": "deleteSchedulingV1beta1PriorityClass", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "scheduling_v1beta1" + ], + "x-kubernetes-action": "delete", + "x-kubernetes-group-version-kind": { + "group": "scheduling.k8s.io", + "kind": "PriorityClass", + "version": "v1beta1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "read the specified PriorityClass", + "operationId": "readSchedulingV1beta1PriorityClass", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.scheduling.v1beta1.PriorityClass" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "scheduling_v1beta1" + ], + "x-kubernetes-action": "get", + "x-kubernetes-group-version-kind": { + "group": "scheduling.k8s.io", + "kind": "PriorityClass", + "version": "v1beta1" + } + }, + "parameters": [ + { + "description": "name of the PriorityClass", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "patch": { + "consumes": [ + "application/json-patch+json", + "application/merge-patch+json", + "application/strategic-merge-patch+json", + "application/apply-patch+yaml" + ], + "description": "partially update the specified PriorityClass", + "operationId": "patchSchedulingV1beta1PriorityClass", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Patch" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + }, + { + "description": "Force is going to \"force\" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.", + "in": "query", + "name": "force", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.scheduling.v1beta1.PriorityClass" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "scheduling_v1beta1" + ], + "x-kubernetes-action": "patch", + "x-kubernetes-group-version-kind": { + "group": "scheduling.k8s.io", + "kind": "PriorityClass", + "version": "v1beta1" + } + }, + "put": { + "consumes": [ + "*/*" + ], + "description": "replace the specified PriorityClass", + "operationId": "replaceSchedulingV1beta1PriorityClass", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.scheduling.v1beta1.PriorityClass" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.scheduling.v1beta1.PriorityClass" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.scheduling.v1beta1.PriorityClass" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "scheduling_v1beta1" + ], + "x-kubernetes-action": "put", + "x-kubernetes-group-version-kind": { + "group": "scheduling.k8s.io", + "kind": "PriorityClass", + "version": "v1beta1" + } + } + }, + "/apis/scheduling.k8s.io/v1beta1/watch/priorityclasses": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch individual changes to a list of PriorityClass. deprecated: use the 'watch' parameter with a list operation instead.", + "operationId": "watchSchedulingV1beta1PriorityClassList", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "scheduling_v1beta1" + ], + "x-kubernetes-action": "watchlist", + "x-kubernetes-group-version-kind": { + "group": "scheduling.k8s.io", + "kind": "PriorityClass", + "version": "v1beta1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/scheduling.k8s.io/v1beta1/watch/priorityclasses/{name}": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch changes to an object of kind PriorityClass. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.", + "operationId": "watchSchedulingV1beta1PriorityClass", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "scheduling_v1beta1" + ], + "x-kubernetes-action": "watch", + "x-kubernetes-group-version-kind": { + "group": "scheduling.k8s.io", + "kind": "PriorityClass", + "version": "v1beta1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "name of the PriorityClass", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/storage.k8s.io/": { + "get": { + "consumes": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "description": "get information of a group", + "operationId": "getStorageAPIGroup", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.APIGroup" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "storage" + ] + } + }, + "/apis/storage.k8s.io/v1/": { + "get": { + "consumes": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "description": "get available resources", + "operationId": "getStorageV1APIResources", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.APIResourceList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "storage_v1" + ] + } + }, + "/apis/storage.k8s.io/v1/csidrivers": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete collection of CSIDriver", + "operationId": "deleteStorageV1CollectionCSIDriver", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "storage_v1" + ], + "x-kubernetes-action": "deletecollection", + "x-kubernetes-group-version-kind": { + "group": "storage.k8s.io", + "kind": "CSIDriver", + "version": "v1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "list or watch objects of kind CSIDriver", + "operationId": "listStorageV1CSIDriver", + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.storage.v1.CSIDriverList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "storage_v1" + ], + "x-kubernetes-action": "list", + "x-kubernetes-group-version-kind": { + "group": "storage.k8s.io", + "kind": "CSIDriver", + "version": "v1" + } + }, + "parameters": [ + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "post": { + "consumes": [ + "*/*" + ], + "description": "create a CSIDriver", + "operationId": "createStorageV1CSIDriver", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.storage.v1.CSIDriver" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.storage.v1.CSIDriver" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.storage.v1.CSIDriver" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.api.storage.v1.CSIDriver" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "storage_v1" + ], + "x-kubernetes-action": "post", + "x-kubernetes-group-version-kind": { + "group": "storage.k8s.io", + "kind": "CSIDriver", + "version": "v1" + } + } + }, + "/apis/storage.k8s.io/v1/csidrivers/{name}": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete a CSIDriver", + "operationId": "deleteStorageV1CSIDriver", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.storage.v1.CSIDriver" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.api.storage.v1.CSIDriver" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "storage_v1" + ], + "x-kubernetes-action": "delete", + "x-kubernetes-group-version-kind": { + "group": "storage.k8s.io", + "kind": "CSIDriver", + "version": "v1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "read the specified CSIDriver", + "operationId": "readStorageV1CSIDriver", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.storage.v1.CSIDriver" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "storage_v1" + ], + "x-kubernetes-action": "get", + "x-kubernetes-group-version-kind": { + "group": "storage.k8s.io", + "kind": "CSIDriver", + "version": "v1" + } + }, + "parameters": [ + { + "description": "name of the CSIDriver", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "patch": { + "consumes": [ + "application/json-patch+json", + "application/merge-patch+json", + "application/strategic-merge-patch+json", + "application/apply-patch+yaml" + ], + "description": "partially update the specified CSIDriver", + "operationId": "patchStorageV1CSIDriver", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Patch" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + }, + { + "description": "Force is going to \"force\" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.", + "in": "query", + "name": "force", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.storage.v1.CSIDriver" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "storage_v1" + ], + "x-kubernetes-action": "patch", + "x-kubernetes-group-version-kind": { + "group": "storage.k8s.io", + "kind": "CSIDriver", + "version": "v1" + } + }, + "put": { + "consumes": [ + "*/*" + ], + "description": "replace the specified CSIDriver", + "operationId": "replaceStorageV1CSIDriver", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.storage.v1.CSIDriver" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.storage.v1.CSIDriver" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.storage.v1.CSIDriver" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "storage_v1" + ], + "x-kubernetes-action": "put", + "x-kubernetes-group-version-kind": { + "group": "storage.k8s.io", + "kind": "CSIDriver", + "version": "v1" + } + } + }, + "/apis/storage.k8s.io/v1/csinodes": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete collection of CSINode", + "operationId": "deleteStorageV1CollectionCSINode", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "storage_v1" + ], + "x-kubernetes-action": "deletecollection", + "x-kubernetes-group-version-kind": { + "group": "storage.k8s.io", + "kind": "CSINode", + "version": "v1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "list or watch objects of kind CSINode", + "operationId": "listStorageV1CSINode", + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.storage.v1.CSINodeList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "storage_v1" + ], + "x-kubernetes-action": "list", + "x-kubernetes-group-version-kind": { + "group": "storage.k8s.io", + "kind": "CSINode", + "version": "v1" + } + }, + "parameters": [ + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "post": { + "consumes": [ + "*/*" + ], + "description": "create a CSINode", + "operationId": "createStorageV1CSINode", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.storage.v1.CSINode" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.storage.v1.CSINode" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.storage.v1.CSINode" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.api.storage.v1.CSINode" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "storage_v1" + ], + "x-kubernetes-action": "post", + "x-kubernetes-group-version-kind": { + "group": "storage.k8s.io", + "kind": "CSINode", + "version": "v1" + } + } + }, + "/apis/storage.k8s.io/v1/csinodes/{name}": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete a CSINode", + "operationId": "deleteStorageV1CSINode", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.storage.v1.CSINode" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.api.storage.v1.CSINode" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "storage_v1" + ], + "x-kubernetes-action": "delete", + "x-kubernetes-group-version-kind": { + "group": "storage.k8s.io", + "kind": "CSINode", + "version": "v1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "read the specified CSINode", + "operationId": "readStorageV1CSINode", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.storage.v1.CSINode" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "storage_v1" + ], + "x-kubernetes-action": "get", + "x-kubernetes-group-version-kind": { + "group": "storage.k8s.io", + "kind": "CSINode", + "version": "v1" + } + }, + "parameters": [ + { + "description": "name of the CSINode", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "patch": { + "consumes": [ + "application/json-patch+json", + "application/merge-patch+json", + "application/strategic-merge-patch+json", + "application/apply-patch+yaml" + ], + "description": "partially update the specified CSINode", + "operationId": "patchStorageV1CSINode", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Patch" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + }, + { + "description": "Force is going to \"force\" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.", + "in": "query", + "name": "force", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.storage.v1.CSINode" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "storage_v1" + ], + "x-kubernetes-action": "patch", + "x-kubernetes-group-version-kind": { + "group": "storage.k8s.io", + "kind": "CSINode", + "version": "v1" + } + }, + "put": { + "consumes": [ + "*/*" + ], + "description": "replace the specified CSINode", + "operationId": "replaceStorageV1CSINode", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.storage.v1.CSINode" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.storage.v1.CSINode" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.storage.v1.CSINode" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "storage_v1" + ], + "x-kubernetes-action": "put", + "x-kubernetes-group-version-kind": { + "group": "storage.k8s.io", + "kind": "CSINode", + "version": "v1" + } + } + }, + "/apis/storage.k8s.io/v1/storageclasses": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete collection of StorageClass", + "operationId": "deleteStorageV1CollectionStorageClass", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "storage_v1" + ], + "x-kubernetes-action": "deletecollection", + "x-kubernetes-group-version-kind": { + "group": "storage.k8s.io", + "kind": "StorageClass", + "version": "v1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "list or watch objects of kind StorageClass", + "operationId": "listStorageV1StorageClass", + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.storage.v1.StorageClassList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "storage_v1" + ], + "x-kubernetes-action": "list", + "x-kubernetes-group-version-kind": { + "group": "storage.k8s.io", + "kind": "StorageClass", + "version": "v1" + } + }, + "parameters": [ + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "post": { + "consumes": [ + "*/*" + ], + "description": "create a StorageClass", + "operationId": "createStorageV1StorageClass", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.storage.v1.StorageClass" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.storage.v1.StorageClass" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.storage.v1.StorageClass" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.api.storage.v1.StorageClass" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "storage_v1" + ], + "x-kubernetes-action": "post", + "x-kubernetes-group-version-kind": { + "group": "storage.k8s.io", + "kind": "StorageClass", + "version": "v1" + } + } + }, + "/apis/storage.k8s.io/v1/storageclasses/{name}": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete a StorageClass", + "operationId": "deleteStorageV1StorageClass", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.storage.v1.StorageClass" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.api.storage.v1.StorageClass" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "storage_v1" + ], + "x-kubernetes-action": "delete", + "x-kubernetes-group-version-kind": { + "group": "storage.k8s.io", + "kind": "StorageClass", + "version": "v1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "read the specified StorageClass", + "operationId": "readStorageV1StorageClass", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.storage.v1.StorageClass" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "storage_v1" + ], + "x-kubernetes-action": "get", + "x-kubernetes-group-version-kind": { + "group": "storage.k8s.io", + "kind": "StorageClass", + "version": "v1" + } + }, + "parameters": [ + { + "description": "name of the StorageClass", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "patch": { + "consumes": [ + "application/json-patch+json", + "application/merge-patch+json", + "application/strategic-merge-patch+json", + "application/apply-patch+yaml" + ], + "description": "partially update the specified StorageClass", + "operationId": "patchStorageV1StorageClass", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Patch" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + }, + { + "description": "Force is going to \"force\" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.", + "in": "query", + "name": "force", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.storage.v1.StorageClass" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "storage_v1" + ], + "x-kubernetes-action": "patch", + "x-kubernetes-group-version-kind": { + "group": "storage.k8s.io", + "kind": "StorageClass", + "version": "v1" + } + }, + "put": { + "consumes": [ + "*/*" + ], + "description": "replace the specified StorageClass", + "operationId": "replaceStorageV1StorageClass", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.storage.v1.StorageClass" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.storage.v1.StorageClass" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.storage.v1.StorageClass" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "storage_v1" + ], + "x-kubernetes-action": "put", + "x-kubernetes-group-version-kind": { + "group": "storage.k8s.io", + "kind": "StorageClass", + "version": "v1" + } + } + }, + "/apis/storage.k8s.io/v1/volumeattachments": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete collection of VolumeAttachment", + "operationId": "deleteStorageV1CollectionVolumeAttachment", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "storage_v1" + ], + "x-kubernetes-action": "deletecollection", + "x-kubernetes-group-version-kind": { + "group": "storage.k8s.io", + "kind": "VolumeAttachment", + "version": "v1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "list or watch objects of kind VolumeAttachment", + "operationId": "listStorageV1VolumeAttachment", + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.storage.v1.VolumeAttachmentList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "storage_v1" + ], + "x-kubernetes-action": "list", + "x-kubernetes-group-version-kind": { + "group": "storage.k8s.io", + "kind": "VolumeAttachment", + "version": "v1" + } + }, + "parameters": [ + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "post": { + "consumes": [ + "*/*" + ], + "description": "create a VolumeAttachment", + "operationId": "createStorageV1VolumeAttachment", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.storage.v1.VolumeAttachment" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.storage.v1.VolumeAttachment" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.storage.v1.VolumeAttachment" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.api.storage.v1.VolumeAttachment" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "storage_v1" + ], + "x-kubernetes-action": "post", + "x-kubernetes-group-version-kind": { + "group": "storage.k8s.io", + "kind": "VolumeAttachment", + "version": "v1" + } + } + }, + "/apis/storage.k8s.io/v1/volumeattachments/{name}": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete a VolumeAttachment", + "operationId": "deleteStorageV1VolumeAttachment", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.storage.v1.VolumeAttachment" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.api.storage.v1.VolumeAttachment" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "storage_v1" + ], + "x-kubernetes-action": "delete", + "x-kubernetes-group-version-kind": { + "group": "storage.k8s.io", + "kind": "VolumeAttachment", + "version": "v1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "read the specified VolumeAttachment", + "operationId": "readStorageV1VolumeAttachment", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.storage.v1.VolumeAttachment" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "storage_v1" + ], + "x-kubernetes-action": "get", + "x-kubernetes-group-version-kind": { + "group": "storage.k8s.io", + "kind": "VolumeAttachment", + "version": "v1" + } + }, + "parameters": [ + { + "description": "name of the VolumeAttachment", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "patch": { + "consumes": [ + "application/json-patch+json", + "application/merge-patch+json", + "application/strategic-merge-patch+json", + "application/apply-patch+yaml" + ], + "description": "partially update the specified VolumeAttachment", + "operationId": "patchStorageV1VolumeAttachment", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Patch" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + }, + { + "description": "Force is going to \"force\" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.", + "in": "query", + "name": "force", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.storage.v1.VolumeAttachment" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "storage_v1" + ], + "x-kubernetes-action": "patch", + "x-kubernetes-group-version-kind": { + "group": "storage.k8s.io", + "kind": "VolumeAttachment", + "version": "v1" + } + }, + "put": { + "consumes": [ + "*/*" + ], + "description": "replace the specified VolumeAttachment", + "operationId": "replaceStorageV1VolumeAttachment", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.storage.v1.VolumeAttachment" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.storage.v1.VolumeAttachment" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.storage.v1.VolumeAttachment" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "storage_v1" + ], + "x-kubernetes-action": "put", + "x-kubernetes-group-version-kind": { + "group": "storage.k8s.io", + "kind": "VolumeAttachment", + "version": "v1" + } + } + }, + "/apis/storage.k8s.io/v1/volumeattachments/{name}/status": { + "get": { + "consumes": [ + "*/*" + ], + "description": "read status of the specified VolumeAttachment", + "operationId": "readStorageV1VolumeAttachmentStatus", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.storage.v1.VolumeAttachment" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "storage_v1" + ], + "x-kubernetes-action": "get", + "x-kubernetes-group-version-kind": { + "group": "storage.k8s.io", + "kind": "VolumeAttachment", + "version": "v1" + } + }, + "parameters": [ + { + "description": "name of the VolumeAttachment", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "patch": { + "consumes": [ + "application/json-patch+json", + "application/merge-patch+json", + "application/strategic-merge-patch+json", + "application/apply-patch+yaml" + ], + "description": "partially update status of the specified VolumeAttachment", + "operationId": "patchStorageV1VolumeAttachmentStatus", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Patch" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + }, + { + "description": "Force is going to \"force\" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.", + "in": "query", + "name": "force", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.storage.v1.VolumeAttachment" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "storage_v1" + ], + "x-kubernetes-action": "patch", + "x-kubernetes-group-version-kind": { + "group": "storage.k8s.io", + "kind": "VolumeAttachment", + "version": "v1" + } + }, + "put": { + "consumes": [ + "*/*" + ], + "description": "replace status of the specified VolumeAttachment", + "operationId": "replaceStorageV1VolumeAttachmentStatus", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.storage.v1.VolumeAttachment" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.storage.v1.VolumeAttachment" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.storage.v1.VolumeAttachment" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "storage_v1" + ], + "x-kubernetes-action": "put", + "x-kubernetes-group-version-kind": { + "group": "storage.k8s.io", + "kind": "VolumeAttachment", + "version": "v1" + } + } + }, + "/apis/storage.k8s.io/v1/watch/csidrivers": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch individual changes to a list of CSIDriver. deprecated: use the 'watch' parameter with a list operation instead.", + "operationId": "watchStorageV1CSIDriverList", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "storage_v1" + ], + "x-kubernetes-action": "watchlist", + "x-kubernetes-group-version-kind": { + "group": "storage.k8s.io", + "kind": "CSIDriver", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/storage.k8s.io/v1/watch/csidrivers/{name}": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch changes to an object of kind CSIDriver. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.", + "operationId": "watchStorageV1CSIDriver", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "storage_v1" + ], + "x-kubernetes-action": "watch", + "x-kubernetes-group-version-kind": { + "group": "storage.k8s.io", + "kind": "CSIDriver", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "name of the CSIDriver", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/storage.k8s.io/v1/watch/csinodes": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch individual changes to a list of CSINode. deprecated: use the 'watch' parameter with a list operation instead.", + "operationId": "watchStorageV1CSINodeList", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "storage_v1" + ], + "x-kubernetes-action": "watchlist", + "x-kubernetes-group-version-kind": { + "group": "storage.k8s.io", + "kind": "CSINode", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/storage.k8s.io/v1/watch/csinodes/{name}": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch changes to an object of kind CSINode. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.", + "operationId": "watchStorageV1CSINode", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "storage_v1" + ], + "x-kubernetes-action": "watch", + "x-kubernetes-group-version-kind": { + "group": "storage.k8s.io", + "kind": "CSINode", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "name of the CSINode", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/storage.k8s.io/v1/watch/storageclasses": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch individual changes to a list of StorageClass. deprecated: use the 'watch' parameter with a list operation instead.", + "operationId": "watchStorageV1StorageClassList", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "storage_v1" + ], + "x-kubernetes-action": "watchlist", + "x-kubernetes-group-version-kind": { + "group": "storage.k8s.io", + "kind": "StorageClass", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/storage.k8s.io/v1/watch/storageclasses/{name}": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch changes to an object of kind StorageClass. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.", + "operationId": "watchStorageV1StorageClass", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "storage_v1" + ], + "x-kubernetes-action": "watch", + "x-kubernetes-group-version-kind": { + "group": "storage.k8s.io", + "kind": "StorageClass", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "name of the StorageClass", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/storage.k8s.io/v1/watch/volumeattachments": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch individual changes to a list of VolumeAttachment. deprecated: use the 'watch' parameter with a list operation instead.", + "operationId": "watchStorageV1VolumeAttachmentList", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "storage_v1" + ], + "x-kubernetes-action": "watchlist", + "x-kubernetes-group-version-kind": { + "group": "storage.k8s.io", + "kind": "VolumeAttachment", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/storage.k8s.io/v1/watch/volumeattachments/{name}": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch changes to an object of kind VolumeAttachment. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.", + "operationId": "watchStorageV1VolumeAttachment", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "storage_v1" + ], + "x-kubernetes-action": "watch", + "x-kubernetes-group-version-kind": { + "group": "storage.k8s.io", + "kind": "VolumeAttachment", + "version": "v1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "name of the VolumeAttachment", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/storage.k8s.io/v1beta1/": { + "get": { + "consumes": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "description": "get available resources", + "operationId": "getStorageV1beta1APIResources", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.APIResourceList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "storage_v1beta1" + ] + } + }, + "/apis/storage.k8s.io/v1beta1/csidrivers": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete collection of CSIDriver", + "operationId": "deleteStorageV1beta1CollectionCSIDriver", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "storage_v1beta1" + ], + "x-kubernetes-action": "deletecollection", + "x-kubernetes-group-version-kind": { + "group": "storage.k8s.io", + "kind": "CSIDriver", + "version": "v1beta1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "list or watch objects of kind CSIDriver", + "operationId": "listStorageV1beta1CSIDriver", + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.storage.v1beta1.CSIDriverList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "storage_v1beta1" + ], + "x-kubernetes-action": "list", + "x-kubernetes-group-version-kind": { + "group": "storage.k8s.io", + "kind": "CSIDriver", + "version": "v1beta1" + } + }, + "parameters": [ + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "post": { + "consumes": [ + "*/*" + ], + "description": "create a CSIDriver", + "operationId": "createStorageV1beta1CSIDriver", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.storage.v1beta1.CSIDriver" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.storage.v1beta1.CSIDriver" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.storage.v1beta1.CSIDriver" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.api.storage.v1beta1.CSIDriver" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "storage_v1beta1" + ], + "x-kubernetes-action": "post", + "x-kubernetes-group-version-kind": { + "group": "storage.k8s.io", + "kind": "CSIDriver", + "version": "v1beta1" + } + } + }, + "/apis/storage.k8s.io/v1beta1/csidrivers/{name}": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete a CSIDriver", + "operationId": "deleteStorageV1beta1CSIDriver", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.storage.v1beta1.CSIDriver" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.api.storage.v1beta1.CSIDriver" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "storage_v1beta1" + ], + "x-kubernetes-action": "delete", + "x-kubernetes-group-version-kind": { + "group": "storage.k8s.io", + "kind": "CSIDriver", + "version": "v1beta1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "read the specified CSIDriver", + "operationId": "readStorageV1beta1CSIDriver", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.storage.v1beta1.CSIDriver" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "storage_v1beta1" + ], + "x-kubernetes-action": "get", + "x-kubernetes-group-version-kind": { + "group": "storage.k8s.io", + "kind": "CSIDriver", + "version": "v1beta1" + } + }, + "parameters": [ + { + "description": "name of the CSIDriver", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "patch": { + "consumes": [ + "application/json-patch+json", + "application/merge-patch+json", + "application/strategic-merge-patch+json", + "application/apply-patch+yaml" + ], + "description": "partially update the specified CSIDriver", + "operationId": "patchStorageV1beta1CSIDriver", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Patch" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + }, + { + "description": "Force is going to \"force\" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.", + "in": "query", + "name": "force", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.storage.v1beta1.CSIDriver" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "storage_v1beta1" + ], + "x-kubernetes-action": "patch", + "x-kubernetes-group-version-kind": { + "group": "storage.k8s.io", + "kind": "CSIDriver", + "version": "v1beta1" + } + }, + "put": { + "consumes": [ + "*/*" + ], + "description": "replace the specified CSIDriver", + "operationId": "replaceStorageV1beta1CSIDriver", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.storage.v1beta1.CSIDriver" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.storage.v1beta1.CSIDriver" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.storage.v1beta1.CSIDriver" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "storage_v1beta1" + ], + "x-kubernetes-action": "put", + "x-kubernetes-group-version-kind": { + "group": "storage.k8s.io", + "kind": "CSIDriver", + "version": "v1beta1" + } + } + }, + "/apis/storage.k8s.io/v1beta1/csinodes": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete collection of CSINode", + "operationId": "deleteStorageV1beta1CollectionCSINode", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "storage_v1beta1" + ], + "x-kubernetes-action": "deletecollection", + "x-kubernetes-group-version-kind": { + "group": "storage.k8s.io", + "kind": "CSINode", + "version": "v1beta1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "list or watch objects of kind CSINode", + "operationId": "listStorageV1beta1CSINode", + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.storage.v1beta1.CSINodeList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "storage_v1beta1" + ], + "x-kubernetes-action": "list", + "x-kubernetes-group-version-kind": { + "group": "storage.k8s.io", + "kind": "CSINode", + "version": "v1beta1" + } + }, + "parameters": [ + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "post": { + "consumes": [ + "*/*" + ], + "description": "create a CSINode", + "operationId": "createStorageV1beta1CSINode", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.storage.v1beta1.CSINode" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.storage.v1beta1.CSINode" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.storage.v1beta1.CSINode" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.api.storage.v1beta1.CSINode" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "storage_v1beta1" + ], + "x-kubernetes-action": "post", + "x-kubernetes-group-version-kind": { + "group": "storage.k8s.io", + "kind": "CSINode", + "version": "v1beta1" + } + } + }, + "/apis/storage.k8s.io/v1beta1/csinodes/{name}": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete a CSINode", + "operationId": "deleteStorageV1beta1CSINode", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.storage.v1beta1.CSINode" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.api.storage.v1beta1.CSINode" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "storage_v1beta1" + ], + "x-kubernetes-action": "delete", + "x-kubernetes-group-version-kind": { + "group": "storage.k8s.io", + "kind": "CSINode", + "version": "v1beta1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "read the specified CSINode", + "operationId": "readStorageV1beta1CSINode", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.storage.v1beta1.CSINode" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "storage_v1beta1" + ], + "x-kubernetes-action": "get", + "x-kubernetes-group-version-kind": { + "group": "storage.k8s.io", + "kind": "CSINode", + "version": "v1beta1" + } + }, + "parameters": [ + { + "description": "name of the CSINode", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "patch": { + "consumes": [ + "application/json-patch+json", + "application/merge-patch+json", + "application/strategic-merge-patch+json", + "application/apply-patch+yaml" + ], + "description": "partially update the specified CSINode", + "operationId": "patchStorageV1beta1CSINode", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Patch" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + }, + { + "description": "Force is going to \"force\" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.", + "in": "query", + "name": "force", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.storage.v1beta1.CSINode" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "storage_v1beta1" + ], + "x-kubernetes-action": "patch", + "x-kubernetes-group-version-kind": { + "group": "storage.k8s.io", + "kind": "CSINode", + "version": "v1beta1" + } + }, + "put": { + "consumes": [ + "*/*" + ], + "description": "replace the specified CSINode", + "operationId": "replaceStorageV1beta1CSINode", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.storage.v1beta1.CSINode" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.storage.v1beta1.CSINode" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.storage.v1beta1.CSINode" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "storage_v1beta1" + ], + "x-kubernetes-action": "put", + "x-kubernetes-group-version-kind": { + "group": "storage.k8s.io", + "kind": "CSINode", + "version": "v1beta1" + } + } + }, + "/apis/storage.k8s.io/v1beta1/csistoragecapacities": { + "get": { + "consumes": [ + "*/*" + ], + "description": "list or watch objects of kind CSIStorageCapacity", + "operationId": "listStorageV1beta1CSIStorageCapacityForAllNamespaces", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.storage.v1beta1.CSIStorageCapacityList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "storage_v1beta1" + ], + "x-kubernetes-action": "list", + "x-kubernetes-group-version-kind": { + "group": "storage.k8s.io", + "kind": "CSIStorageCapacity", + "version": "v1beta1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/storage.k8s.io/v1beta1/namespaces/{namespace}/csistoragecapacities": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete collection of CSIStorageCapacity", + "operationId": "deleteStorageV1beta1CollectionNamespacedCSIStorageCapacity", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "storage_v1beta1" + ], + "x-kubernetes-action": "deletecollection", + "x-kubernetes-group-version-kind": { + "group": "storage.k8s.io", + "kind": "CSIStorageCapacity", + "version": "v1beta1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "list or watch objects of kind CSIStorageCapacity", + "operationId": "listStorageV1beta1NamespacedCSIStorageCapacity", + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.storage.v1beta1.CSIStorageCapacityList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "storage_v1beta1" + ], + "x-kubernetes-action": "list", + "x-kubernetes-group-version-kind": { + "group": "storage.k8s.io", + "kind": "CSIStorageCapacity", + "version": "v1beta1" + } + }, + "parameters": [ + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "post": { + "consumes": [ + "*/*" + ], + "description": "create a CSIStorageCapacity", + "operationId": "createStorageV1beta1NamespacedCSIStorageCapacity", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.storage.v1beta1.CSIStorageCapacity" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.storage.v1beta1.CSIStorageCapacity" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.storage.v1beta1.CSIStorageCapacity" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.api.storage.v1beta1.CSIStorageCapacity" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "storage_v1beta1" + ], + "x-kubernetes-action": "post", + "x-kubernetes-group-version-kind": { + "group": "storage.k8s.io", + "kind": "CSIStorageCapacity", + "version": "v1beta1" + } + } + }, + "/apis/storage.k8s.io/v1beta1/namespaces/{namespace}/csistoragecapacities/{name}": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete a CSIStorageCapacity", + "operationId": "deleteStorageV1beta1NamespacedCSIStorageCapacity", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "storage_v1beta1" + ], + "x-kubernetes-action": "delete", + "x-kubernetes-group-version-kind": { + "group": "storage.k8s.io", + "kind": "CSIStorageCapacity", + "version": "v1beta1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "read the specified CSIStorageCapacity", + "operationId": "readStorageV1beta1NamespacedCSIStorageCapacity", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.storage.v1beta1.CSIStorageCapacity" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "storage_v1beta1" + ], + "x-kubernetes-action": "get", + "x-kubernetes-group-version-kind": { + "group": "storage.k8s.io", + "kind": "CSIStorageCapacity", + "version": "v1beta1" + } + }, + "parameters": [ + { + "description": "name of the CSIStorageCapacity", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "patch": { + "consumes": [ + "application/json-patch+json", + "application/merge-patch+json", + "application/strategic-merge-patch+json", + "application/apply-patch+yaml" + ], + "description": "partially update the specified CSIStorageCapacity", + "operationId": "patchStorageV1beta1NamespacedCSIStorageCapacity", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Patch" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + }, + { + "description": "Force is going to \"force\" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.", + "in": "query", + "name": "force", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.storage.v1beta1.CSIStorageCapacity" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "storage_v1beta1" + ], + "x-kubernetes-action": "patch", + "x-kubernetes-group-version-kind": { + "group": "storage.k8s.io", + "kind": "CSIStorageCapacity", + "version": "v1beta1" + } + }, + "put": { + "consumes": [ + "*/*" + ], + "description": "replace the specified CSIStorageCapacity", + "operationId": "replaceStorageV1beta1NamespacedCSIStorageCapacity", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.storage.v1beta1.CSIStorageCapacity" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.storage.v1beta1.CSIStorageCapacity" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.storage.v1beta1.CSIStorageCapacity" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "storage_v1beta1" + ], + "x-kubernetes-action": "put", + "x-kubernetes-group-version-kind": { + "group": "storage.k8s.io", + "kind": "CSIStorageCapacity", + "version": "v1beta1" + } + } + }, + "/apis/storage.k8s.io/v1beta1/storageclasses": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete collection of StorageClass", + "operationId": "deleteStorageV1beta1CollectionStorageClass", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "storage_v1beta1" + ], + "x-kubernetes-action": "deletecollection", + "x-kubernetes-group-version-kind": { + "group": "storage.k8s.io", + "kind": "StorageClass", + "version": "v1beta1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "list or watch objects of kind StorageClass", + "operationId": "listStorageV1beta1StorageClass", + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.storage.v1beta1.StorageClassList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "storage_v1beta1" + ], + "x-kubernetes-action": "list", + "x-kubernetes-group-version-kind": { + "group": "storage.k8s.io", + "kind": "StorageClass", + "version": "v1beta1" + } + }, + "parameters": [ + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "post": { + "consumes": [ + "*/*" + ], + "description": "create a StorageClass", + "operationId": "createStorageV1beta1StorageClass", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.storage.v1beta1.StorageClass" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.storage.v1beta1.StorageClass" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.storage.v1beta1.StorageClass" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.api.storage.v1beta1.StorageClass" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "storage_v1beta1" + ], + "x-kubernetes-action": "post", + "x-kubernetes-group-version-kind": { + "group": "storage.k8s.io", + "kind": "StorageClass", + "version": "v1beta1" + } + } + }, + "/apis/storage.k8s.io/v1beta1/storageclasses/{name}": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete a StorageClass", + "operationId": "deleteStorageV1beta1StorageClass", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.storage.v1beta1.StorageClass" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.api.storage.v1beta1.StorageClass" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "storage_v1beta1" + ], + "x-kubernetes-action": "delete", + "x-kubernetes-group-version-kind": { + "group": "storage.k8s.io", + "kind": "StorageClass", + "version": "v1beta1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "read the specified StorageClass", + "operationId": "readStorageV1beta1StorageClass", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.storage.v1beta1.StorageClass" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "storage_v1beta1" + ], + "x-kubernetes-action": "get", + "x-kubernetes-group-version-kind": { + "group": "storage.k8s.io", + "kind": "StorageClass", + "version": "v1beta1" + } + }, + "parameters": [ + { + "description": "name of the StorageClass", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "patch": { + "consumes": [ + "application/json-patch+json", + "application/merge-patch+json", + "application/strategic-merge-patch+json", + "application/apply-patch+yaml" + ], + "description": "partially update the specified StorageClass", + "operationId": "patchStorageV1beta1StorageClass", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Patch" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + }, + { + "description": "Force is going to \"force\" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.", + "in": "query", + "name": "force", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.storage.v1beta1.StorageClass" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "storage_v1beta1" + ], + "x-kubernetes-action": "patch", + "x-kubernetes-group-version-kind": { + "group": "storage.k8s.io", + "kind": "StorageClass", + "version": "v1beta1" + } + }, + "put": { + "consumes": [ + "*/*" + ], + "description": "replace the specified StorageClass", + "operationId": "replaceStorageV1beta1StorageClass", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.storage.v1beta1.StorageClass" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.storage.v1beta1.StorageClass" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.storage.v1beta1.StorageClass" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "storage_v1beta1" + ], + "x-kubernetes-action": "put", + "x-kubernetes-group-version-kind": { + "group": "storage.k8s.io", + "kind": "StorageClass", + "version": "v1beta1" + } + } + }, + "/apis/storage.k8s.io/v1beta1/volumeattachments": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete collection of VolumeAttachment", + "operationId": "deleteStorageV1beta1CollectionVolumeAttachment", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "storage_v1beta1" + ], + "x-kubernetes-action": "deletecollection", + "x-kubernetes-group-version-kind": { + "group": "storage.k8s.io", + "kind": "VolumeAttachment", + "version": "v1beta1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "list or watch objects of kind VolumeAttachment", + "operationId": "listStorageV1beta1VolumeAttachment", + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.storage.v1beta1.VolumeAttachmentList" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "storage_v1beta1" + ], + "x-kubernetes-action": "list", + "x-kubernetes-group-version-kind": { + "group": "storage.k8s.io", + "kind": "VolumeAttachment", + "version": "v1beta1" + } + }, + "parameters": [ + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "post": { + "consumes": [ + "*/*" + ], + "description": "create a VolumeAttachment", + "operationId": "createStorageV1beta1VolumeAttachment", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.storage.v1beta1.VolumeAttachment" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.storage.v1beta1.VolumeAttachment" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.storage.v1beta1.VolumeAttachment" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.api.storage.v1beta1.VolumeAttachment" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "storage_v1beta1" + ], + "x-kubernetes-action": "post", + "x-kubernetes-group-version-kind": { + "group": "storage.k8s.io", + "kind": "VolumeAttachment", + "version": "v1beta1" + } + } + }, + "/apis/storage.k8s.io/v1beta1/volumeattachments/{name}": { + "delete": { + "consumes": [ + "*/*" + ], + "description": "delete a VolumeAttachment", + "operationId": "deleteStorageV1beta1VolumeAttachment", + "parameters": [ + { + "in": "body", + "name": "body", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "in": "query", + "name": "gracePeriodSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "in": "query", + "name": "orphanDependents", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "in": "query", + "name": "propagationPolicy", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.storage.v1beta1.VolumeAttachment" + } + }, + "202": { + "description": "Accepted", + "schema": { + "$ref": "#/definitions/io.k8s.api.storage.v1beta1.VolumeAttachment" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "storage_v1beta1" + ], + "x-kubernetes-action": "delete", + "x-kubernetes-group-version-kind": { + "group": "storage.k8s.io", + "kind": "VolumeAttachment", + "version": "v1beta1" + } + }, + "get": { + "consumes": [ + "*/*" + ], + "description": "read the specified VolumeAttachment", + "operationId": "readStorageV1beta1VolumeAttachment", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.storage.v1beta1.VolumeAttachment" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "storage_v1beta1" + ], + "x-kubernetes-action": "get", + "x-kubernetes-group-version-kind": { + "group": "storage.k8s.io", + "kind": "VolumeAttachment", + "version": "v1beta1" + } + }, + "parameters": [ + { + "description": "name of the VolumeAttachment", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + } + ], + "patch": { + "consumes": [ + "application/json-patch+json", + "application/merge-patch+json", + "application/strategic-merge-patch+json", + "application/apply-patch+yaml" + ], + "description": "partially update the specified VolumeAttachment", + "operationId": "patchStorageV1beta1VolumeAttachment", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Patch" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + }, + { + "description": "Force is going to \"force\" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.", + "in": "query", + "name": "force", + "type": "boolean", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.storage.v1beta1.VolumeAttachment" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "storage_v1beta1" + ], + "x-kubernetes-action": "patch", + "x-kubernetes-group-version-kind": { + "group": "storage.k8s.io", + "kind": "VolumeAttachment", + "version": "v1beta1" + } + }, + "put": { + "consumes": [ + "*/*" + ], + "description": "replace the specified VolumeAttachment", + "operationId": "replaceStorageV1beta1VolumeAttachment", + "parameters": [ + { + "in": "body", + "name": "body", + "required": true, + "schema": { + "$ref": "#/definitions/io.k8s.api.storage.v1beta1.VolumeAttachment" + } + }, + { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "in": "query", + "name": "dryRun", + "type": "string", + "uniqueItems": true + }, + { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "in": "query", + "name": "fieldManager", + "type": "string", + "uniqueItems": true + } + ], + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.api.storage.v1beta1.VolumeAttachment" + } + }, + "201": { + "description": "Created", + "schema": { + "$ref": "#/definitions/io.k8s.api.storage.v1beta1.VolumeAttachment" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "storage_v1beta1" + ], + "x-kubernetes-action": "put", + "x-kubernetes-group-version-kind": { + "group": "storage.k8s.io", + "kind": "VolumeAttachment", + "version": "v1beta1" + } + } + }, + "/apis/storage.k8s.io/v1beta1/watch/csidrivers": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch individual changes to a list of CSIDriver. deprecated: use the 'watch' parameter with a list operation instead.", + "operationId": "watchStorageV1beta1CSIDriverList", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "storage_v1beta1" + ], + "x-kubernetes-action": "watchlist", + "x-kubernetes-group-version-kind": { + "group": "storage.k8s.io", + "kind": "CSIDriver", + "version": "v1beta1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/storage.k8s.io/v1beta1/watch/csidrivers/{name}": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch changes to an object of kind CSIDriver. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.", + "operationId": "watchStorageV1beta1CSIDriver", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "storage_v1beta1" + ], + "x-kubernetes-action": "watch", + "x-kubernetes-group-version-kind": { + "group": "storage.k8s.io", + "kind": "CSIDriver", + "version": "v1beta1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "name of the CSIDriver", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/storage.k8s.io/v1beta1/watch/csinodes": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch individual changes to a list of CSINode. deprecated: use the 'watch' parameter with a list operation instead.", + "operationId": "watchStorageV1beta1CSINodeList", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "storage_v1beta1" + ], + "x-kubernetes-action": "watchlist", + "x-kubernetes-group-version-kind": { + "group": "storage.k8s.io", + "kind": "CSINode", + "version": "v1beta1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/storage.k8s.io/v1beta1/watch/csinodes/{name}": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch changes to an object of kind CSINode. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.", + "operationId": "watchStorageV1beta1CSINode", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "storage_v1beta1" + ], + "x-kubernetes-action": "watch", + "x-kubernetes-group-version-kind": { + "group": "storage.k8s.io", + "kind": "CSINode", + "version": "v1beta1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "name of the CSINode", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/storage.k8s.io/v1beta1/watch/csistoragecapacities": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch individual changes to a list of CSIStorageCapacity. deprecated: use the 'watch' parameter with a list operation instead.", + "operationId": "watchStorageV1beta1CSIStorageCapacityListForAllNamespaces", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "storage_v1beta1" + ], + "x-kubernetes-action": "watchlist", + "x-kubernetes-group-version-kind": { + "group": "storage.k8s.io", + "kind": "CSIStorageCapacity", + "version": "v1beta1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/storage.k8s.io/v1beta1/watch/namespaces/{namespace}/csistoragecapacities": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch individual changes to a list of CSIStorageCapacity. deprecated: use the 'watch' parameter with a list operation instead.", + "operationId": "watchStorageV1beta1NamespacedCSIStorageCapacityList", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "storage_v1beta1" + ], + "x-kubernetes-action": "watchlist", + "x-kubernetes-group-version-kind": { + "group": "storage.k8s.io", + "kind": "CSIStorageCapacity", + "version": "v1beta1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/storage.k8s.io/v1beta1/watch/namespaces/{namespace}/csistoragecapacities/{name}": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch changes to an object of kind CSIStorageCapacity. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.", + "operationId": "watchStorageV1beta1NamespacedCSIStorageCapacity", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "storage_v1beta1" + ], + "x-kubernetes-action": "watch", + "x-kubernetes-group-version-kind": { + "group": "storage.k8s.io", + "kind": "CSIStorageCapacity", + "version": "v1beta1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "name of the CSIStorageCapacity", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "object name and auth scope, such as for teams and projects", + "in": "path", + "name": "namespace", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/storage.k8s.io/v1beta1/watch/storageclasses": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch individual changes to a list of StorageClass. deprecated: use the 'watch' parameter with a list operation instead.", + "operationId": "watchStorageV1beta1StorageClassList", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "storage_v1beta1" + ], + "x-kubernetes-action": "watchlist", + "x-kubernetes-group-version-kind": { + "group": "storage.k8s.io", + "kind": "StorageClass", + "version": "v1beta1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/storage.k8s.io/v1beta1/watch/storageclasses/{name}": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch changes to an object of kind StorageClass. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.", + "operationId": "watchStorageV1beta1StorageClass", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "storage_v1beta1" + ], + "x-kubernetes-action": "watch", + "x-kubernetes-group-version-kind": { + "group": "storage.k8s.io", + "kind": "StorageClass", + "version": "v1beta1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "name of the StorageClass", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/storage.k8s.io/v1beta1/watch/volumeattachments": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch individual changes to a list of VolumeAttachment. deprecated: use the 'watch' parameter with a list operation instead.", + "operationId": "watchStorageV1beta1VolumeAttachmentList", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "storage_v1beta1" + ], + "x-kubernetes-action": "watchlist", + "x-kubernetes-group-version-kind": { + "group": "storage.k8s.io", + "kind": "VolumeAttachment", + "version": "v1beta1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/apis/storage.k8s.io/v1beta1/watch/volumeattachments/{name}": { + "get": { + "consumes": [ + "*/*" + ], + "description": "watch changes to an object of kind VolumeAttachment. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.", + "operationId": "watchStorageV1beta1VolumeAttachment", + "produces": [ + "application/json", + "application/yaml", + "application/vnd.kubernetes.protobuf", + "application/json;stream=watch", + "application/vnd.kubernetes.protobuf;stream=watch" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "storage_v1beta1" + ], + "x-kubernetes-action": "watch", + "x-kubernetes-group-version-kind": { + "group": "storage.k8s.io", + "kind": "VolumeAttachment", + "version": "v1beta1" + } + }, + "parameters": [ + { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored.", + "in": "query", + "name": "allowWatchBookmarks", + "type": "boolean", + "uniqueItems": true + }, + { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "in": "query", + "name": "continue", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "in": "query", + "name": "fieldSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "in": "query", + "name": "labelSelector", + "type": "string", + "uniqueItems": true + }, + { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "in": "query", + "name": "limit", + "type": "integer", + "uniqueItems": true + }, + { + "description": "name of the VolumeAttachment", + "in": "path", + "name": "name", + "required": true, + "type": "string", + "uniqueItems": true + }, + { + "description": "If 'true', then the output is pretty printed.", + "in": "query", + "name": "pretty", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersion", + "type": "string", + "uniqueItems": true + }, + { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "in": "query", + "name": "resourceVersionMatch", + "type": "string", + "uniqueItems": true + }, + { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "in": "query", + "name": "timeoutSeconds", + "type": "integer", + "uniqueItems": true + }, + { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "in": "query", + "name": "watch", + "type": "boolean", + "uniqueItems": true + } + ] + }, + "/logs/": { + "get": { + "operationId": "logFileListHandler", + "responses": { + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "logs" + ] + } + }, + "/logs/{logpath}": { + "get": { + "operationId": "logFileHandler", + "responses": { + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "logs" + ] + }, + "parameters": [ + { + "description": "path to the log", + "in": "path", + "name": "logpath", + "required": true, + "type": "string", + "uniqueItems": true + } + ] + }, + "/openid/v1/jwks/": { + "get": { + "description": "get service account issuer OpenID JSON Web Key Set (contains public token verification keys)", + "operationId": "getServiceAccountIssuerOpenIDKeyset", + "produces": [ + "application/jwk-set+json" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "type": "string" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "openid" + ] + } + }, + "/version/": { + "get": { + "consumes": [ + "application/json" + ], + "description": "get the code version", + "operationId": "getCodeVersion", + "produces": [ + "application/json" + ], + "responses": { + "200": { + "description": "OK", + "schema": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.version.Info" + } + }, + "401": { + "description": "Unauthorized" + } + }, + "schemes": [ + "https" + ], + "tags": [ + "version" + ] + } + } + }, + "security": [ + { + "BearerToken": [] + } + ], + "securityDefinitions": { + "BearerToken": { + "description": "Bearer Token authentication", + "in": "header", + "name": "authorization", + "type": "apiKey" + } + }, + "swagger": "2.0" +} diff --git a/go/internal/forked/kyaml/openapi/kubernetesapi/v1218pb/doc.go b/go/internal/forked/kyaml/openapi/kubernetesapi/v1218pb/doc.go new file mode 100644 index 000000000..e20533a92 --- /dev/null +++ b/go/internal/forked/kyaml/openapi/kubernetesapi/v1218pb/doc.go @@ -0,0 +1,3 @@ +package v1218pb + +const OpenAPIProtobuf = "v1218pb" diff --git a/go/internal/forked/kyaml/openapi/kubernetesapi/v1218pb/swagger.go b/go/internal/forked/kyaml/openapi/kubernetesapi/v1218pb/swagger.go new file mode 100644 index 000000000..997b9bec4 --- /dev/null +++ b/go/internal/forked/kyaml/openapi/kubernetesapi/v1218pb/swagger.go @@ -0,0 +1,278 @@ +// Code generated by go-bindata. DO NOT EDIT. +// sources: +// kubernetesapi/v1218pb/swagger.pb (3.803MB) + +package v1218pb + +import ( + "bytes" + "compress/gzip" + "crypto/sha256" + "fmt" + "io" + "io/ioutil" + "os" + "path/filepath" + "strings" + "time" +) + +func bindataRead(data []byte, name string) ([]byte, error) { + gz, err := gzip.NewReader(bytes.NewBuffer(data)) + if err != nil { + return nil, fmt.Errorf("read %q: %w", name, err) + } + + var buf bytes.Buffer + _, err = io.Copy(&buf, gz) + clErr := gz.Close() + + if err != nil { + return nil, fmt.Errorf("read %q: %w", name, err) + } + if clErr != nil { + return nil, err + } + + return buf.Bytes(), nil +} + +type asset struct { + bytes []byte + info os.FileInfo + digest [sha256.Size]byte +} + +type bindataFileInfo struct { + name string + size int64 + mode os.FileMode + modTime time.Time +} + +func (fi bindataFileInfo) Name() string { + return fi.name +} +func (fi bindataFileInfo) Size() int64 { + return fi.size +} +func (fi bindataFileInfo) Mode() os.FileMode { + return fi.mode +} +func (fi bindataFileInfo) ModTime() time.Time { + return fi.modTime +} +func (fi bindataFileInfo) IsDir() bool { + return false +} +func (fi bindataFileInfo) Sys() interface{} { + return nil +} + +var _kubernetesapiV1218pbSwaggerPb = []byte("\x1f\x8b\x08\x00\x00\x00\x00\x00\x00\xff\xec\xbd\x79\x78\x24\xd7\x75\xd8\xfb\x35\x80\xe1\xcc\x1c\x51\x12\x79\x49\x91\x62\x93\x14\x8b\x3d\xe4\x00\xe8\x01\x1a\xd3\x98\x1d\xb3\xa2\x31\x0b\xd1\x1c\x0e\xa1\x01\x05\x32\x34\x49\xb0\x50\x75\xd1\xa8\x99\x42\x55\xa9\xaa\x1a\x43\xc8\xa1\x62\x8b\x96\xe3\x25\x79\xa1\x9d\xc8\xe1\x17\x3b\xfe\xec\x2c\x8c\x68\xcb\x56\xa4\x28\xb1\xfd\xe4\x45\x7e\x7e\x8a\x69\x53\xa1\x2d\x2b\x8e\x1c\x4b\xb6\x3f\xd9\xfa\xf2\xbc\x45\xb6\x12\xc7\x76\xbc\x44\xef\xbb\x4b\x6d\x8d\x6e\x54\xa3\xa7\xbb\xd1\x60\x9f\x7f\x48\x4c\x57\xd5\xad\x5b\x77\x39\xf7\xdc\xdf\x39\xf7\x1c\x18\x9c\x2c\x1c\x24\xef\x02\x78\xb4\xba\x44\x5d\x8b\xfa\xd4\x23\xbb\xd7\x8a\x85\xc9\x62\xe1\x78\xe9\x63\xbf\xfd\xa9\x0c\xf9\xf2\x01\xb8\x34\xa1\x3a\x86\x37\xe1\xd8\xa6\xa1\xad\x4f\xac\x15\x97\xa8\xaf\x16\x27\x2c\x75\x95\x7a\x8e\xaa\x51\x6f\xe2\x9b\xc3\xbf\x5f\x9c\x70\x6c\x5d\x37\x3c\xb7\xea\xf8\x86\x6d\x2d\x55\xf5\x0a\xf5\xe5\x0d\x2f\x92\x97\x0f\x90\x7f\x33\x08\xef\x10\x05\x2d\xca\x82\xb2\xfb\x5d\xaa\xea\x8a\xbf\x42\x15\xcf\xa1\x9a\xb1\x6c\x50\x5d\x99\xb3\xf5\xf3\x61\x29\x25\x5e\x4a\xbe\xc0\xee\x9b\xe3\xcf\x2e\x88\x47\xaf\x04\xaf\xd5\xeb\xdc\x3f\x79\x9b\xea\x38\xa6\xa1\xa9\xec\xa7\x89\x6b\x9e\x6d\x25\x7f\x59\x57\x57\xcd\xc9\x7d\xf1\x5f\xd6\x2c\xbd\x70\x3d\x6c\x87\x82\xe3\xda\xbe\xbd\x54\x5d\x9e\x1a\xcc\x4f\xe4\xcb\x06\x5c\x81\xc1\xc9\x83\x07\xc9\x25\xb8\x00\x03\x8f\x3f\x4a\xce\xc2\x69\x38\xb9\x6f\x42\xa7\xcb\x86\x65\xb0\xe7\xbd\x09\xc3\x2e\x5c\x3f\xee\x15\x54\xc7\x28\x88\x6f\x2c\xc8\x6f\x2c\xd4\xa9\x1f\xdc\x0d\x83\x87\x0f\x16\xc9\x6d\xf0\x0e\xb8\xf5\x7d\x96\x5a\xf5\x57\x6c\xd7\xf8\x00\xd5\xaf\xee\x5a\xf1\x7d\xc7\xbb\x76\x3f\xdc\xf1\xc2\x78\x54\x9f\x71\x55\x63\x0f\x93\x5b\xc8\x10\x7b\xfa\xda\x73\xf0\x40\xe2\x72\xc5\xb5\xab\xce\xf8\x1a\x75\x3d\xc3\xb6\xc6\xaf\x1b\x96\x4e\x4e\x92\x13\xfc\xd7\x29\x45\x54\x07\xd8\xaf\x53\xf5\x1a\x17\xe4\x73\x53\x8a\xac\x31\x64\x5f\xde\xbb\xa1\xa7\x46\x5d\xea\x98\xaa\x46\x9b\xe8\xac\xa2\xbc\x75\xbb\xfa\xab\xf4\x5e\x78\x1c\x1e\x23\x43\x4b\xb6\xbe\x9e\xe5\xff\x55\x32\xf9\x9b\xeb\xb0\xd2\x0f\x0e\xc0\xf7\x0f\x90\x57\x06\xb2\x1f\x19\x20\xbb\xde\x5f\xa5\xee\x7a\xf6\x2f\x33\x4f\xae\x50\x4b\x71\x5c\xea\x51\xcb\x1f\x53\x0c\x4b\x67\xb5\xa3\x9e\xe2\xaf\xa8\xbe\xb2\x6a\xeb\xc6\xb2\xac\xae\xa7\x78\x2b\x76\xd5\xd4\x15\xcb\xf6\x95\x25\xaa\x38\xac\xc5\x3d\x9f\xea\x05\x65\xda\x52\x0c\x6b\x4d\x35\x0d\x5d\xb1\x5d\xa5\x6a\xb9\x54\xb3\x2b\x16\x1b\x0b\x8a\xee\xae\x5f\xad\x5a\x8a\x6e\xb8\x54\xf3\x8d\x35\xaa\xdc\x30\x4c\x53\x71\xa9\x57\x35\x7d\xc5\xb0\x14\xd5\x52\xa8\xeb\xda\x2e\xfb\xc9\xb1\x2d\x8f\x2a\xaa\xc5\x5e\xa1\x2c\x57\x5d\x7f\x85\xba\x8a\xe3\xda\x1a\xf5\x3c\xc3\xaa\x28\xf6\x32\xef\x38\x97\xbe\xbf\x4a\x3d\xbf\xa0\x2c\xf0\x37\xae\xa9\x66\x95\x7a\x8a\xea\xd2\x29\x65\x5c\x99\x36\xcd\x29\x45\x35\x4d\xf6\x62\xc5\xad\x5a\x8a\xe7\xab\x15\xea\x89\xd7\xb2\x5a\x8b\xe2\xa8\x9e\xbb\x45\x54\x6d\xf2\x16\xcf\x77\x0d\xab\xf2\x43\x99\x4c\xe9\xfb\x06\xe0\x1f\x0f\x90\x97\x07\xb2\xff\x30\x6c\xa0\x3f\xcc\x2c\x1b\xd4\xd4\x1f\x53\x2d\xb5\x42\x5d\xc5\xf0\x14\x55\x61\xc2\x40\x51\x3d\xcf\xd6\x0c\xd5\xa7\xba\x72\xc3\xf0\x57\x78\xcd\x54\xcd\xb7\x5d\xd6\x04\xd4\xf2\x0d\x7f\x5d\xb4\xa1\xe1\x29\xab\xea\x75\x56\x7f\x7f\x85\x7a\x54\xd1\x56\x54\xab\x42\xbd\x82\xf2\xc4\x0a\x15\x95\x57\x56\xab\x1e\x6f\x52\x93\x7a\xbc\xe1\x2d\x56\x46\x71\xf2\x38\xbb\xd7\x55\x35\x9f\xba\x9e\x62\xda\x56\x65\x8c\x37\x8e\x6d\x99\xeb\x8a\x66\x5b\xbe\x6a\xb0\x9e\x33\x2c\x5f\x5d\x32\x69\xec\xde\x31\x45\xf5\x14\x3e\x4c\xa8\xae\x2c\xad\x2b\x7c\x3a\x4e\x4d\x4c\x54\x6c\x53\xb5\x2a\x05\xdb\xad\x4c\x38\xd7\x2b\x13\x55\xcb\xd0\x6c\x9d\x4e\xec\x9b\xf5\xe6\x58\x29\x85\xdc\xad\xf1\x6f\x8d\x35\x4c\xf9\x67\x33\x6d\x97\x1e\xf3\xac\xbc\x22\xb9\x0c\x65\xd8\x3d\xe3\x52\xd6\x90\x9d\x17\x49\xcd\xc9\x9c\x0d\xb2\xa4\x59\x21\xb4\x89\xc8\x73\xaa\x3e\xe4\x3f\x79\xdb\x06\x91\x74\x9f\x4e\x4d\xea\x53\x45\xad\x2b\x85\x0e\x8a\xab\xdb\x26\x84\x9e\x80\xab\x30\x17\x17\x42\xf9\x12\x9c\x6b\xd4\x41\xab\xaa\xb6\x62\x58\xd4\x5d\x2f\x38\xd7\x2b\xec\x07\xaf\xb0\x4a\x7d\xb5\xb0\x56\x2c\x9c\xe7\x9f\xf1\x38\xaf\xa8\x87\x72\x28\x4d\x0e\x7d\x75\x00\xbe\x32\x40\x7e\x7b\x20\xfb\xa5\xb0\x81\x3e\x31\xc0\xc4\x85\x5e\x75\x79\x1b\xb0\x1a\x7b\x54\xb3\x2d\xdd\x53\x96\xe8\xb2\xed\x8a\x25\xcd\x5e\xba\x46\x35\x3f\x68\x9f\x25\xaa\x88\xe1\xa3\xf3\x2a\xc6\xe4\x8c\x65\x5b\xe3\x16\xad\xa8\xbc\x21\x0c\xcb\xa7\x15\xea\xc6\xe5\xd1\x07\xa8\x6b\xc7\xba\x40\x0e\x51\x63\x75\x95\xea\x4c\xe2\x99\xeb\x05\x65\x96\xb5\x81\xe1\xc9\x07\x0c\x4f\xb1\x0c\x73\x8c\x57\x42\xa7\xcb\x2a\x6b\xd4\x8a\xcb\x56\x5a\x87\xba\x86\xad\x2b\xcb\xb6\x5b\xb3\xe8\xfa\xeb\x0e\x0d\x5b\xa3\xea\xb1\x4a\x9e\x17\x4f\x7a\x8a\x6f\x2b\x2a\x7b\x32\xf8\x20\xf9\x92\x65\xde\xe5\x61\x11\x05\x51\xcf\x55\xaa\x5a\x75\xeb\x98\x23\xbc\x0a\x73\xbc\x06\xf3\xa2\xb5\x26\x77\xcb\xcf\x65\xcd\xfc\xf9\x01\x78\x73\x80\xbc\x31\x90\x7d\x3d\x6c\xe6\x1f\x1a\x38\x4f\x1d\x97\xb2\xef\xd6\xa7\x14\xc7\xa4\xaa\xc7\x6b\xc7\x2b\x3f\xe7\xda\x8e\x5a\xe1\x1d\x20\x66\xe4\x98\x68\x03\x2e\x35\xc3\x6f\xd1\xc3\x02\x58\x2f\x15\x0b\xc7\x0a\xca\xbc\xe8\x10\xd1\x3a\x0e\xb5\x74\x6a\xf9\xf2\xdb\x58\xff\x29\xb6\xeb\xac\xa8\x16\xfb\x22\xd6\xac\x6e\x95\x4e\x2c\xab\xa6\x47\x45\x7b\xe6\xc4\xd5\x9c\xb2\x6c\x58\xaa\x69\x7c\x80\xba\xe1\xab\x54\x5d\x67\x2d\x69\x4f\xb8\x74\xd5\x5e\xa3\xba\xb2\xec\xda\xab\xb1\x91\x30\xec\x45\x0f\x79\x8a\x69\xb0\xc1\x7a\xc1\xe0\xc3\x39\x56\x71\xdb\xdd\xf8\x65\xca\xaa\xba\xce\xde\xe0\x51\x7f\x4c\x59\xaa\xfa\x62\xb2\xd9\xfe\x4a\x21\x77\x9b\xa8\xcf\xf9\xe0\x43\xbc\xc9\xdd\x4b\xb6\x6d\x52\xd5\x62\x6d\xfa\x1d\x43\xf0\xe1\x21\xf2\xa1\xa1\xec\x37\x06\x83\x36\xfd\xe2\xe0\x93\x2b\x94\xbf\x94\x4d\xa9\x15\xfb\x86\x52\x51\xdd\x25\xb5\x42\x15\xcd\x36\x4d\xca\x45\x64\x34\x2f\xa8\xbb\x6c\xbb\xab\xac\x2d\xea\xd6\xf4\xf1\x9a\x97\x37\xae\x28\x1f\xcf\xc1\x60\x14\x52\x97\x8d\x53\x9d\x6a\x86\x2e\xd6\x45\xd6\x50\xf4\x05\xc3\xf3\xd9\xa4\x8e\x5a\xd7\xa3\x5c\x22\xb0\xab\x4c\x7e\xe9\xaa\xaf\x16\x62\xcd\xc8\x3e\x42\x4c\x7f\xcf\xae\xba\x1a\x1d\x97\x03\x52\xab\x79\x59\x41\x99\xd6\x34\xea\x88\xc5\x39\x2e\x1c\x86\xc5\x37\x0c\x2b\xe3\xb2\xe3\x93\x03\xc3\x3b\xa9\x0c\x97\x54\xed\x3a\x5b\x74\x2c\x9d\xdd\xa5\x9a\xa6\x7d\x83\xdf\x54\xd3\x70\x6c\x52\xd9\xc1\xd0\x4f\x16\x12\x7c\xc1\x52\x58\xd2\x49\x65\xf8\xa2\xed\xd2\x58\xb1\x8a\xa6\x7a\x9a\xaa\xb3\xaf\x97\xed\xc3\x85\xad\x28\xcf\x13\xd2\x6b\x43\x81\xcb\x61\x19\x85\xdc\xed\x4e\xed\xb8\x89\x2b\x0d\x9f\xce\x34\x5c\x8f\xe1\xb2\xd0\x26\x2e\xc0\x0c\xd7\x26\x4e\xc3\x49\x38\xd1\xc2\xba\x32\xef\xab\x7e\xd5\x83\xab\xac\xb4\x49\xf2\x28\xcc\xc2\x1e\xd1\xe8\x54\xbf\xc9\x32\x03\x8d\x41\xa9\xbf\xa2\xef\x25\xbb\x45\x33\x75\x7c\x1f\x53\x7a\xf5\xd6\x0d\x4a\xc3\xa4\xa3\xba\xbe\xa1\x9a\xe6\xba\x52\x75\x74\xd5\x6f\x66\x43\x33\xe1\xa8\xbe\xb6\xb2\x1d\x9a\xc4\xbd\xb5\x05\x8d\xf3\xaa\x1c\x60\x7f\x4e\xdd\x17\xbf\xb8\x4a\xdd\x0a\x8d\x5f\xdd\x1f\xbf\xea\xf9\xae\xea\xd3\x8a\xa1\x8d\x6f\xb8\x2f\x51\x0a\xfb\x7b\x5d\x5e\x65\xb5\x2c\x5d\x81\xcb\x50\xae\xd9\x4a\x4d\xc1\xf1\x16\xc6\xc6\x1c\x2b\x14\xf5\x97\x34\xfd\xe5\xe3\x83\xf0\xb1\x41\xf2\xda\x60\xf6\xd5\x70\x11\x78\x69\xb0\x7f\xf6\x51\xca\x13\xd1\x92\x65\x78\xbc\x9d\x0d\x97\x0a\x25\x88\x0f\xce\xa0\xe9\x3d\x65\xa4\xc1\xc0\x1d\xe5\x6b\x99\xcd\xe7\xa3\x6a\xf2\x27\x99\xd2\x26\x9e\xe6\x77\x70\x05\xca\x53\x46\xca\x9e\x6d\xf1\x61\x39\xa6\x3c\xc6\xa6\x85\xfc\x7b\x3e\x98\x2c\xd1\x8f\xa3\x8d\x37\x78\xa5\x37\x33\xf0\x46\x86\xbc\x9e\xc9\x7e\x36\x13\xf4\xd8\x47\x33\x17\x6d\x57\xe3\xba\x5d\xc5\xe6\xcd\x6e\x2b\xb9\x65\xf6\x53\x4e\x99\x4e\x7c\x45\x41\x99\xf5\xa5\x1a\x56\xf5\x02\xf5\xc4\xa5\xe3\xaa\xc6\x3f\x9c\xb5\xf1\xb2\x69\x68\x72\x99\xa5\xa6\xee\x29\xf6\x0d\xd9\xa6\xb6\x18\x9c\xd4\x76\x4c\x5a\x50\xc4\x1b\x97\x4d\xb5\x12\xf6\x65\xd5\x62\xeb\x71\xbd\x06\x08\x5f\x9f\xdb\xc5\xab\x15\xd7\x43\xb6\x01\x77\x3d\x50\x7f\xa5\xd8\x43\x6e\xe1\xd5\xed\xf8\x42\x51\x3e\x07\x67\xc8\xa9\xdc\xd4\x9e\x0c\x19\x72\x54\x7f\x25\xfb\x00\x9f\x5f\x72\xb2\xd7\x29\x22\x37\xc4\x6e\xc8\xcb\x51\xf0\x4a\x26\x53\x7e\x1e\x9e\x23\xcf\xe4\x9e\x0e\x4b\x98\x92\xfa\xb7\x98\xa8\x96\xae\xb0\xaf\x56\x3c\xcd\x76\xe8\x98\xe2\x55\xb5\x15\x36\x41\xb8\x6a\x4f\xd5\x55\xa1\x19\x39\xae\xcd\xd5\xda\xdc\xde\x90\xa9\xc6\xdf\xf0\x38\x3c\x46\x1e\xcd\xce\x06\x63\x6c\x7c\x76\x59\x19\x66\x0a\xef\x30\xd7\x75\x85\x86\x61\x57\x7d\xa7\xca\xe7\xbb\xe3\x52\xdf\x5f\x17\x73\x93\xea\x85\xdc\x2d\xe2\x87\xd8\xc0\x25\x1f\x1d\x81\xc3\x02\xef\xba\x4b\xaa\x56\x08\xba\x85\x4f\x28\xde\xbb\x86\x3d\xb1\x56\x54\x4d\x67\x45\x2d\x4e\xdc\x60\x1d\x31\xe1\xda\x26\xf5\xc8\x9f\x0c\x93\xdf\x1b\x82\x2c\x7b\x6a\x3a\xfe\xd0\x62\x70\x77\xd6\xe1\xb7\x73\x51\xbe\x66\xe8\x55\xd5\x0c\x44\x8e\xd8\x9f\x30\x75\x9a\xb5\xee\x55\x9b\x8d\x5c\x3d\xb6\x6d\x08\xf6\x0b\xc3\xbc\x80\x61\xc5\x51\x5d\x75\x95\xfa\x7c\x66\xf8\x2b\xe1\xa3\x0e\x0d\x37\x73\x9e\x4f\x55\xbd\x90\x3f\xca\x1f\xb8\x5a\x5b\xa5\x05\x59\x23\xf6\xa6\xcb\x86\xe7\x5f\xb4\xdd\x69\xd3\x0c\x57\x6f\xaf\x6d\x4b\xf5\xe4\xfd\xb5\x05\x9d\xf4\x7c\x97\xaa\xab\xa7\x79\xc5\x26\x0f\x36\x51\x46\xe2\x09\x81\x9e\xaf\xc3\x9c\x98\x8b\xb3\x70\x89\xcf\xc5\x69\x38\x0b\xa7\x5b\x58\x7e\x9f\x64\x65\x5e\x58\xa3\x56\xfa\x6c\xdc\x57\x7f\x36\xde\x4a\x80\x57\x8c\xf5\x00\x5c\xd3\xd2\x67\xe4\x39\x72\x46\xce\xc8\x86\xe3\x4b\x4e\x52\xd6\x3b\xf1\x59\x29\xfa\x0c\xca\x1f\x1a\x82\x6f\x0c\x92\xbf\x19\xcc\xfe\xef\x70\x31\x7c\x73\x90\xab\xf4\xfc\x73\x4a\xb6\x7d\x7d\x55\x75\xaf\x7b\xd1\xa2\x20\xc6\x1d\x5d\xe3\x6a\xb7\x58\x14\xd9\x66\x39\x57\x7a\xfc\xf1\x47\x1f\x9b\xbe\xfa\x68\xae\xa0\xcc\x53\x97\xbd\x4a\x2a\xec\x36\xd7\x25\x8c\x55\xc7\xa4\xab\x6c\x6b\xb9\x14\x96\xc9\x76\x47\x46\xc5\x12\x80\x80\x2d\x4a\x4c\xb4\xb2\x79\x1a\xdd\xa2\xba\x6c\xf7\x64\xf9\x8a\xea\x0b\x35\x92\x17\x3d\xec\x29\xba\xe1\x69\x2e\xe5\x1f\xaa\xcc\x98\x06\xaf\x4d\x4c\x75\x51\x3d\xaf\xba\x4a\x6b\x0a\x72\xa9\x5f\x75\x99\x68\x57\x7d\x45\xb5\xd6\x95\x70\x6f\xc4\x66\xb0\xbb\xa6\x9a\x63\x8a\x65\xbb\xbc\x5a\xfe\x0a\x5d\x0f\x0a\x89\xde\x2b\x16\x0f\x8f\x32\x61\x63\xad\x2b\xc1\x27\x8b\xd6\x50\xf4\x2a\x9b\xf7\x8a\xaa\x78\x4c\x95\x61\x15\x0b\x38\x84\xe1\x89\x4a\x89\xc6\x4b\x6c\xcc\xd9\x55\xde\x04\x72\x7f\xcd\x36\x31\x54\xf5\xab\x2e\xdb\x4f\xf9\x54\xa9\xe9\x06\x59\x12\xb5\x98\x36\xc0\xf7\xf0\x6c\x0c\xf2\xca\x35\x2a\x36\x77\x47\x9d\xfe\x4c\x2c\x47\x7f\xb2\x17\xfe\x78\x2f\xf9\x83\xbd\xd9\xff\xb6\x37\x18\x04\xbf\xb8\x97\x29\x2e\x4c\xff\x30\xac\x2a\x95\x6b\x7d\x8c\xdd\xb0\x65\xef\x06\x93\x89\x2e\xf5\x5d\x83\xae\xb1\x0f\x5f\xb5\x79\x1b\x7b\x9c\x92\x84\x9b\x7d\x51\xb9\x82\x32\x6f\x58\x1a\xad\xc1\x32\xb2\x55\xa5\x16\x33\xa6\x68\xb2\x23\x59\x0f\x70\x05\x28\x10\x56\x61\x45\xc4\xa3\xbc\x70\x95\x49\xe0\x35\xc3\xae\x7a\x0a\xaf\x73\xa0\x6f\xf2\x31\x69\xb0\x6d\xa1\xa1\xa9\xa6\xbc\x16\x4a\x39\x4f\x19\xa1\x2f\xb0\x4d\x58\x48\x7d\x44\x91\xf6\x72\xf8\x92\xd1\x70\x17\x2d\xeb\xc7\xaa\xe3\x52\xbe\xd8\xa8\xb5\x55\x31\xd8\x08\xa7\xa2\x57\x42\x8d\x38\xec\xca\x68\xd7\x53\xfb\x18\x7b\x82\xab\x7b\xd4\x55\x84\x52\x7d\x43\x72\x08\xbd\x4a\x99\x0c\xa7\x2f\x38\x86\x14\xc1\x23\x15\x6a\x51\x97\xef\xa8\x96\x99\x76\xed\xdb\xca\xb2\xb1\xec\x53\x6a\x29\xab\x86\x55\xf5\xa9\x37\xca\x74\x49\x5e\xb7\x65\xa3\x12\x60\x38\xb1\x20\x28\xb6\x15\xfb\x96\xb1\x0d\xa3\x59\xa8\xe4\x7a\x20\xfd\x0f\x17\x0f\x2a\x57\x25\x3c\xb8\xc0\xaa\x40\x75\xa9\xbb\xfb\x76\x45\x54\x50\xde\x19\x7e\x91\x6f\x5f\xa7\x56\xf8\xc9\xa2\x0f\x15\x8b\x52\xdd\x13\x77\xf1\x0d\x84\xe5\xf3\x85\x65\x8c\x35\x18\xd7\x9e\x5c\xea\xf9\xaa\xcb\x67\xb5\xe1\x8a\x45\x87\x15\x6c\x57\xfd\x64\x8f\xf3\xf1\x5c\x50\x1e\x67\xaf\xbe\x61\x04\xdc\x49\xbe\x85\xf5\x8c\x9c\x8e\x42\x57\xe3\xe5\x48\x59\x15\xa9\xec\xbc\x86\xac\x7b\xa8\xb1\x16\x57\xe5\xd9\xc7\xf2\x8f\x4b\x6d\x16\x5e\x2e\xaf\x30\xd7\x13\x83\xc1\x6d\xd1\x17\x7c\xe5\x3a\x5d\x17\x74\x27\xfc\xd9\x64\x9b\x2b\x5f\xf1\x2c\xd5\xf1\x56\x6c\x7f\x4c\xb9\xb1\x62\xb0\xc5\xda\x53\x0c\x2b\xd6\x20\xe1\xfd\xe1\x40\x96\xd5\x17\x53\x68\x3c\xa4\x70\x5c\x90\x32\x09\xa6\x09\x5b\xc4\x98\xdc\xb3\xb1\xbf\x6c\x37\x00\xa9\x8a\xba\xec\x53\x31\xa6\x97\x0d\xd7\xf3\x6b\x1b\x43\xec\x8d\x0c\x4b\x33\xab\xba\x90\x1d\x92\x14\xf1\x2d\x19\xdf\x4f\xb0\x01\xc9\xfe\x2f\x3a\xe5\x3a\x5d\x17\x82\x33\x2a\x38\x17\x7c\x71\xae\x00\x90\xdc\x49\x70\xfc\x59\x75\x1c\xdb\xe5\xdb\x25\x26\x1c\xa4\x8e\xe2\x71\x6c\x18\xc9\x69\xde\x6b\xbc\xf3\xa5\x44\x8c\xb7\x9c\x68\x00\x3e\xfe\x16\xc4\x7a\x25\xa7\x4c\x28\xbd\x25\x1c\x93\xbd\x25\x76\x92\xbe\xb2\x6a\x78\x1e\x97\xca\x89\xed\x6c\x21\xb7\x27\x18\x49\x71\xfa\xf3\xf7\x33\xf0\x6d\x19\xf2\xad\x99\xec\xdf\x0b\x04\xde\x33\xd3\x8a\x47\x23\x6c\xc5\x46\xa7\x6b\x68\x62\x2c\x06\xca\x54\x58\x83\x90\x8e\xae\xcb\x96\x12\x1b\x87\x24\x24\xa6\x6b\xd4\x5d\xf7\x57\x0c\xab\x52\xc8\xbd\x9d\xdf\x30\x2f\x5f\xd0\xc9\x9a\x98\xea\x12\x35\x37\xab\x09\xbf\xa1\x5e\x4d\xfe\x0a\xe0\x2f\x80\xfc\x19\x64\xbf\x0e\x41\x55\xfe\x33\x98\xc6\xaa\xe1\x8b\x0d\xf1\xaa\xfa\x82\xb1\x5a\x5d\x55\xac\xea\xea\x12\x75\x45\x2d\xc4\xd0\xf1\x44\x3d\x59\x95\xc4\x36\x52\xd4\x53\x53\x4d\x93\x8b\x05\xbe\x30\x18\x3e\x5d\xf5\x04\xd1\xdc\x38\xdb\xd8\x72\xc2\x7e\x7b\x3e\xe8\xac\xe7\x03\xa8\x6a\x45\xdf\x1d\xf0\x4e\xa1\xe1\x8a\x41\xc1\x67\x86\xa6\x5a\x01\xa7\x8f\xe6\xb6\xc7\xb6\x05\x5c\x83\x0b\x17\x01\x51\x4b\xb6\x5c\xd1\x68\xf6\xb2\x57\x8b\x6f\x61\xcd\xc5\x94\x17\xdf\x17\xcb\xb8\xf8\x76\x21\xfc\xc5\xb7\xd1\x1b\x7c\x1a\xa8\x56\x1c\x51\xb0\x89\xb7\x6a\x57\x2d\x5e\x8c\xf8\xca\x91\xaa\xc3\x5e\x26\x2c\x15\xec\x97\xd1\x60\xb6\x09\x4d\x41\xe5\x02\x26\x78\x3a\xe8\x43\x36\xd3\x96\x0d\xd3\xa7\x4c\xe6\x32\x39\xc8\x86\xb6\x96\xd4\x6d\x12\xab\xa2\x00\x3a\x5a\xb8\x8d\x4a\xca\x4c\x41\x5f\x7d\xea\xae\x1a\x16\x0d\x57\x97\xc4\x22\xcd\xe7\xf6\x9a\x6a\x98\x4c\x9b\x88\xf4\x36\xf6\xc9\xda\x8a\x6d\x7b\x94\xcf\x2c\xdf\x0e\xe6\xb5\xec\x0b\xd6\x2c\xaa\x5b\xa9\x72\x75\x4e\xb5\xf4\x40\x62\xf2\x46\x62\xdf\x26\xeb\x13\x16\x1d\xb5\xee\xec\xb2\x12\x0e\xa9\x68\x71\x0c\xd6\xdb\x9a\x0f\x30\x3c\x85\xae\x3a\xfe\x7a\x52\x31\x08\xb5\x32\xd5\x67\x6b\xe8\x66\x1f\xb4\x99\x80\x32\x96\x6b\xc4\x13\x93\x67\xe1\xa8\xac\x54\x55\x57\xb5\x7c\x1a\x30\xb2\xc8\x6c\xe1\x45\x93\x8f\xcb\xb8\x2a\xa7\x56\x61\xcd\x43\x31\x1b\x2a\x20\xbe\xad\x18\x9e\x57\x95\xaa\xa1\x61\x55\x4c\x1a\xcd\x8f\x70\xcd\x0b\x86\xdb\x78\xc0\x93\x98\x2e\x1a\xbe\x72\x6b\x72\x3f\x10\xf9\x5c\xf3\xf4\xaa\x54\xaf\x2b\xfc\xb9\x06\x5c\x5d\xf2\xd8\xcd\x96\x1f\x7e\x81\x1e\x23\x27\x4f\x48\xe5\xd5\xb3\x57\xa9\x6f\xac\x52\xf6\xed\xcb\xd4\x75\xb9\x5d\x87\xad\x13\x89\xf5\x3d\x5a\xee\x58\x7f\x52\xcb\xab\xba\x41\xf3\xa9\xc1\x82\x1d\xc0\x32\xd1\x6a\xe2\x93\xf9\xb4\xe4\x4b\xb3\xe2\xad\xaa\xa6\x49\x5d\x45\x5b\xa9\x5a\xd7\x3d\x36\x8e\x54\x85\x09\x2f\xc5\x54\xdd\x4a\xd0\xcd\x7c\xbe\x8b\xe2\x85\x9e\xee\x51\xca\x87\x9d\x63\x7b\x9e\xc1\x86\x9b\x6c\x36\x3e\xdc\xe2\xb3\x4b\xf0\x68\x3d\xd2\xd4\xf9\x7b\xa8\x2e\xfa\x83\x2b\x83\x72\xc9\x91\x23\x58\x22\x06\x5e\xeb\x1b\xaa\x17\x20\xd4\x60\x37\xc2\xda\x64\xe3\x7a\x2b\xb4\x50\xd5\x63\x1d\xac\x55\x4d\x61\x6c\x8b\x86\x4d\x21\xb7\x8b\x7f\x77\xdc\xda\xd7\x76\xf4\x50\xfe\xeb\x0c\xfc\x65\x86\xfc\xaf\x4c\xf6\x7f\x84\xcc\xec\x73\x99\xda\x85\xd5\xa3\x7e\xd0\x87\xbe\xab\x1a\x4c\x84\x59\xca\x0d\xf6\xb1\xc1\x9d\x41\x83\xb0\xdb\x82\x61\x15\x1a\xb5\xdc\xc0\xaa\xc7\x44\x07\x0d\x09\x64\x6c\xdf\x6d\xd8\x13\xba\xad\x79\x13\x7c\xd8\x30\x51\x35\xc1\x3b\x7e\x5c\x75\x8c\x09\xd5\x31\xc6\x35\xdb\x62\xba\xb8\x37\xb1\x2f\x34\x58\x85\x2f\x5c\xe6\x23\xdc\x57\x0d\xd3\x2b\x00\xc4\xd7\x33\x4e\xdd\x72\xef\xac\xf9\x9a\xf8\xd7\xff\xe6\x00\x7c\x71\x80\xfc\xe7\x81\xec\xe7\x43\x08\xfe\xea\x40\xcd\xfd\x8f\xf1\xd9\x1f\x4a\x48\x8f\x1b\xff\x6a\x5b\x88\xad\x7c\x8e\x63\x1a\x62\xc4\x87\xd3\x56\x50\x45\xc3\x53\x56\x8c\xca\x0a\x87\x8d\x9a\xbd\xba\x4a\x2d\x6e\xf1\x8c\xb7\x5f\xe2\x5d\x72\xdf\xc4\x3e\x2c\x2a\x89\x49\x11\x97\xd6\x7b\x31\xbb\x77\x1b\xda\xf5\xce\x7a\x75\x8f\x37\xee\x0f\x66\xe0\xfb\x33\xe4\x95\x4c\xf6\x23\xe1\xd0\x72\x9e\x30\x56\x29\x13\x63\xc1\xa6\x8a\x7d\x9f\x20\x5a\x52\x0d\xe0\xa2\x84\x8f\x7b\x4f\x18\x03\x83\x5d\x4a\xb0\x76\xa9\xa6\x39\xa6\xb8\xb4\xa2\xba\x3a\x27\xe4\x6c\xee\x5b\xeb\x8a\xaa\xf9\xc6\x9a\xe1\xaf\x33\x79\x67\x58\xc1\xbf\x0a\xb9\x77\xf8\xe2\x8d\x75\x4c\xe7\xe5\x4f\x64\xe0\xc7\x33\xe4\x47\x33\xd9\x8f\x86\x15\xfc\xee\xcc\x93\x42\xd1\xb4\xdd\x38\x28\x13\x66\x49\x4f\x73\x8d\x25\x2e\xf8\xc4\x87\x0b\x58\x28\xd7\x33\x7f\x85\xae\x0a\x51\x27\xd8\x11\xaf\x98\xae\x8f\x49\x61\x32\x26\xef\x5d\xb5\xd7\xf8\x6a\x19\x53\x3d\x95\x79\xbe\xc0\xad\xd7\xf6\x6d\x21\xb7\x4b\x10\xab\xd8\x1e\x9c\xfc\xc5\x33\xb0\x5f\xa0\x42\xcf\xb7\x5d\xb5\x42\x23\x3e\x18\xfc\xa2\x99\xaa\xe7\x51\x8f\x7c\xee\x19\xf2\x3d\xfb\x01\xe4\xaf\x8b\x6b\xc5\x6c\x5e\xe8\x85\xae\x5c\xd1\x02\x91\x67\x2f\x2b\xd7\x0d\x4b\x57\xe6\xc5\x9d\x33\xec\xf9\xfc\x3d\xec\x5e\xf9\xcb\x42\x31\x7e\xa9\xc7\x49\x5d\x09\x59\x15\xb2\xaa\x12\xb2\x2a\x64\x55\xc8\xaa\x90\x55\xf5\x0d\xab\x2a\xf5\x0c\xab\x6a\x7b\x4d\x5a\x66\x55\x25\x64\x55\xc8\xaa\x90\x55\x21\xab\x42\x56\xd5\x7d\x56\x55\xea\x6b\xb4\x54\x42\xb4\xd4\x39\xb4\x54\xea\x75\xb4\x54\xda\x81\x68\xa9\xbc\x04\x97\x84\x87\xd3\x39\x38\xc3\x3d\x9c\x8e\xc3\x51\x38\xdc\xd0\xdb\x30\xe0\x4f\xdc\xdb\x3c\xa2\x43\x97\x0d\x2f\xdd\xb1\xe9\xe9\x74\x9f\xa5\x63\xe4\x88\xf4\x59\x4a\x82\x2e\xe9\xa8\x14\x7f\x65\xdc\x61\x09\xae\xbd\xa7\xbe\xd3\xd4\x6e\xb2\x8b\xfb\x4b\xe5\xbe\x73\x6f\x82\x89\xbd\x4b\xac\x43\x8a\x9a\xc4\x5f\xf7\x8a\x9f\x3b\x0b\xc0\x04\xaf\xba\x08\xe7\xa1\x54\xe3\xd9\x3d\x09\x07\xb7\xda\xf0\xe8\xd1\x8d\x27\x63\x5b\x3c\x19\xfb\x3f\x33\x30\x23\xa6\xfe\x29\x98\xe2\x53\xff\x30\xb4\x30\x02\xe1\x11\x71\x1c\x76\x1a\xce\x46\xc7\x61\x5b\x2b\x69\x56\x1c\x86\x29\xc1\xb9\xd8\x61\x98\xd6\x8a\x4a\x93\x45\x8d\xe5\x85\x63\x7b\x3e\x74\x52\x56\xe5\x7f\x63\x2c\x21\x8b\x1e\x94\xa7\xa0\x62\x47\xca\xec\xe5\xa4\x5c\x7a\x58\xdc\x12\xca\xa5\x99\xf0\xd6\x0e\x4a\xa8\xce\x9c\xa0\x45\x44\x8b\x88\x16\x11\x2d\x22\xda\xfe\x41\xb4\xa8\xa1\xa5\x68\x68\xbd\xc3\xb0\x31\x7a\x41\x57\xa2\x17\xa0\xa9\x00\x4d\x05\x68\x2a\x40\x53\x01\x9a\x0a\xfa\xda\x54\x80\x41\x6c\x30\x88\x0d\x06\xb1\xe9\x54\x10\x1b\xb4\xc4\xa1\x25\xae\x5f\x2d\x71\xe5\x4a\x9b\xc3\x34\xa5\xe1\xe4\x7c\x7d\x9c\x7c\x07\xb9\x5d\xcc\xe6\x48\xd2\x76\x14\x2d\xb7\x3f\x48\xc5\x4f\x8c\xc0\xf1\x06\x9e\xe7\x89\xc8\x14\x1a\x53\x88\x84\x23\xba\xea\xa8\x9a\xe1\x1b\xd4\x23\x7f\x35\x4c\xbe\x36\x04\xb7\x45\xac\x5b\x86\xa7\xf8\x60\x73\xe1\x29\x66\xe6\x67\x83\x2f\x15\x65\xae\xb7\x29\x58\xc5\x14\x7f\x20\xa4\xe9\xa2\x56\x1b\xdf\x86\x01\x2b\xda\x18\xb0\x62\x39\x7d\xd4\xcf\x90\xe9\xcd\x46\xfd\xc6\x0e\xc2\x98\x15\x78\x0e\x00\x63\x56\xa0\x91\x09\x8d\x4c\x68\x64\xea\x6f\x23\x13\xc6\xac\xc0\x98\x15\x08\xf7\x11\xee\x23\xdc\x47\xb8\xdf\x13\x70\x1f\x63\x56\x60\xcc\x8a\x9d\x82\x33\x31\x66\x45\x27\x62\x56\xfc\xdc\x73\x70\x84\x75\xdd\xc4\x5a\xe3\x84\x65\xd2\x97\xc9\xf2\xd7\x6c\xb3\xba\x4a\x35\x53\x35\x56\x3d\xf2\xe1\xe7\xc8\x8f\xec\x87\xdd\x9a\xed\x72\xff\xd8\x43\x9b\xc7\xaf\x98\x0b\x0b\x59\xe0\x85\xcc\xb0\x42\xf2\xa3\xec\xa1\x19\xdb\xa5\x0b\xf1\x58\xf1\xf5\x6e\xed\x71\xa2\x87\x81\x2d\x10\x68\x61\x60\x0b\x04\x5a\x08\xb4\x10\x68\xf5\x11\xd0\xea\x21\xa7\xe0\x9e\x01\x5a\xe8\xad\x8a\x40\x0b\x81\x16\x02\x2d\x04\x5a\x18\xd8\x02\xdd\xe9\xde\x3a\xfc\xa9\xe7\xdd\xe9\x76\x64\x60\x8b\x15\x78\x4c\x78\x42\x5d\x84\xf3\xdc\x13\xea\x0c\x9c\x82\xa9\x86\x07\xc9\x35\xdb\xe5\xa7\xc8\xeb\x32\xa2\xa6\xc2\x5b\x3c\x99\xee\xe1\x74\x98\x4c\xc6\xdd\xf5\xa4\xb7\x53\x2e\x17\x24\xcb\xaa\xf7\xee\xf4\xd8\x16\x9f\xda\x1b\xc1\xb2\xf7\x84\x81\x2d\xea\x73\xb1\x03\xe2\x7a\x77\xc9\x98\x00\x59\x97\xa1\x0c\x8f\xd4\x44\xbc\x38\x0e\x47\x5b\xeb\x11\x3c\x55\x89\x71\x2f\x5a\x8c\x7b\xf1\xe1\x01\x11\x68\xe2\x20\x0f\x34\xc1\x24\xc3\x14\xb4\x3c\x0e\x45\xae\xbe\x22\xcf\xd5\x17\x46\xbf\xb8\x99\xf2\x1e\x17\x31\x30\x1e\x81\x8b\xb1\x18\x18\x37\x53\xe0\xcd\x46\xc2\x68\x4e\xac\x35\x27\xca\x12\x61\x30\xfe\x68\x2c\x12\x5b\xf9\xba\x31\x30\xea\x8b\xb0\x23\xe2\x5e\x21\xc2\xa2\x48\x18\xdd\x15\x66\x18\x1c\x03\x31\x2f\x62\x5e\xc4\xbc\x88\x79\x31\x38\x06\x06\xc7\xc0\xe0\x18\x18\x1c\x03\xcd\x0d\x68\x6e\x40\x73\x03\x9a\x1b\xd0\xdc\xd0\x16\x73\x03\x06\xc7\xc0\xe0\x18\x18\x1c\x03\x83\x63\xa0\x35\x0f\xad\x79\x7d\x14\x1c\xa3\x53\xb4\xb9\xfc\x3c\x3c\x47\x9e\xc9\x3d\xbd\x27\x43\x86\x1c\xd5\x5f\xc9\x4e\xc9\x95\x5c\xd8\x3f\x2c\x5d\x61\xf5\x56\x3c\xcd\x76\xe8\x98\xe2\x55\xb5\x15\xa6\xcd\xf0\xee\xa2\xea\xaa\x10\xac\x8e\x6b\xf3\x55\x31\xb7\x37\xf4\x61\xcf\xcb\x7e\x7f\xa5\x03\x27\x5e\xc8\xcf\x1d\x80\x63\x22\xf6\x86\xea\x18\x2e\xad\x18\x4c\x0a\x71\x7f\xea\x30\x06\xc7\x12\xf5\xd5\xe2\x84\x74\x30\x36\x42\xff\xfa\x17\xc9\x4b\x07\xc8\x4f\x0d\xc2\xdd\x35\x0f\x2e\xca\x27\xb2\xf7\xbb\x54\xd5\x6b\xf6\xbe\xd3\x73\xb3\xf3\xa2\x94\xfc\x43\xec\xf2\x74\xf2\xd9\x05\xf1\x68\x74\x57\x7b\x89\x7a\xf9\x83\x0d\xc7\x11\x68\x62\xb8\x3e\x03\x4f\xf3\xe1\xca\xd9\x7b\xdd\xe1\xca\x0a\x1f\x57\x2b\x15\x36\x4f\x7c\xdb\x8d\x46\x6c\x6d\x03\xca\x76\x28\x44\x5f\x13\x0c\xd6\xfb\xeb\x0f\xd6\x5b\xc8\x50\x85\xfa\x70\x8d\xa6\x8f\xcf\x12\x39\x27\xc7\x67\xfd\x6e\x8b\x8f\x4b\x5e\x0b\x39\x88\xa3\xba\x40\xf6\x73\x7b\x1b\xf7\x9d\xe2\x52\xc7\x54\x35\xda\xb8\xfb\x86\xe5\x1d\xdd\xed\xc1\xd2\x32\xe8\xb0\x54\x63\xe0\xed\x40\x4f\x21\x33\x44\xd3\x6f\x8b\xa6\xdf\xdf\xcf\xc0\x8a\xb0\xd7\xaa\xb0\x18\xd9\x6b\x3b\x22\x50\x7a\x5d\x9c\x39\xd5\xa6\xc5\x59\xba\xc0\xda\x5c\xe0\xe5\xff\xed\x6d\x8d\xc5\xd9\x9d\x72\x8b\xa0\x5a\x71\x11\xb6\x5f\xfc\xda\x65\x09\xd6\x19\xab\x2e\xca\xab\x14\x79\x85\x96\x85\xae\x58\x16\x10\x29\x21\x52\x42\xa4\xd4\x29\xa4\x54\xfe\x74\xa6\xcd\xfb\xea\xab\xc2\x15\xec\x51\x98\x8d\xb9\x82\x75\x78\xaf\xae\xd4\xd7\x17\xf6\x92\xdd\xa2\x99\x9a\x55\x19\xb6\xa8\x21\x6c\xd0\x30\x4a\x3f\x79\x6b\x63\x95\x61\xd4\x51\x5d\xdf\xe0\x6e\x38\x02\xe0\x37\xde\x0a\x3d\xec\xa8\xbe\xb6\xd2\x3d\x35\xe2\xde\xda\x82\xc6\x79\x05\x0e\xb0\x3f\xa7\xee\x8b\x5f\x5c\xa5\x6e\x85\xc6\xaf\xee\x8f\x5f\xe5\x55\xa5\x15\x43\x1b\xdf\x70\x5f\xa2\x14\xf6\xf7\xba\xbc\xca\x6a\x59\xba\x02\x97\xa1\x5c\xb3\x09\x9b\x82\xe3\x2d\x8c\x98\x39\x7e\x1c\x19\x95\x97\x14\xe5\xe5\xe3\x83\xf0\xb1\x41\xf2\xda\x60\xf6\xd5\x70\x05\x78\x69\xb0\x7f\x36\x5b\x35\x26\x55\xd6\xce\xdc\x55\x8d\x9b\xfd\xd9\xe0\x8c\xe2\x12\x8c\x34\x18\xb8\xa3\x7c\x21\x13\x9e\x8d\xaa\xc9\x9f\x64\x1a\x9b\x78\x9a\xdf\xc1\xb5\x27\x4f\x19\x29\x7b\xb6\x35\x27\x0e\xe8\x3f\xc6\xa6\x85\xfc\x7b\x3e\x98\x2c\xd1\x8f\xa3\x8d\x77\x81\xa5\x37\x33\xf0\x46\x86\xbc\x9e\xc9\x7e\x36\x04\xb4\x1f\xcd\x5c\xb4\x5d\x8d\x2b\x76\x15\x9b\x37\xbb\xad\xe4\x96\xd9\x4f\x39\x65\x3a\xf1\x15\x9c\x6c\x0b\x1d\xac\xea\x45\x3e\x6a\xe3\xaa\xc6\x3f\x9c\x7b\xfe\x99\x86\x26\xd7\x58\x6a\xea\x9e\x62\xdf\x90\x6d\x2a\x3c\xe3\x1c\x6a\x3b\x26\x2d\x28\xe2\x8d\x3c\xa2\x42\xd0\x97\x9c\x30\xd7\x6d\x80\xf0\xf5\xb9\x5d\xbc\x5a\x89\xa3\x0e\x1f\xec\xca\x96\x32\x75\xed\xe8\xce\xca\x70\xed\x81\xfa\x4b\xd4\x1e\x72\x0b\x6f\x2a\x28\x1f\x83\x23\xe4\x50\xae\x18\xa2\xde\xbb\xf8\xdc\x93\x82\x20\x7a\x71\x6e\x88\xfd\xde\x51\x82\xfb\x37\xa3\x30\x2f\x08\xee\xb2\x69\xdf\x60\xd3\xcf\xb5\xcd\x42\x18\x0f\xa2\x96\xe3\x8a\x50\xca\x8e\x6b\xd8\xae\xe1\xaf\x9b\x74\x8d\x9a\x09\x47\xd2\x90\xee\xfe\xab\x51\xf2\x2b\xbb\xe0\xbe\x58\xa1\xd3\x41\x99\xe1\x22\xf9\xf3\x19\x69\x5f\x88\x85\x56\xb6\x82\x1d\x46\x18\x3c\x45\xbe\xeb\x32\x7b\xd7\x4c\xfc\x5d\x6d\x09\xb5\x3c\x16\xb9\xaf\xf0\x3d\x8e\x74\x76\x30\x7c\xba\x1a\x09\xc0\xe1\x84\xc7\x59\xac\xec\x20\x50\xf3\xc5\x3a\x9f\x29\x97\xf0\xc6\xf5\xef\xf1\xb0\x2e\xe5\xeb\x8d\xf9\x50\xdb\x23\x38\x07\x13\xb4\xf1\xcc\xe1\x15\x83\x6b\xdf\x9c\x3e\x83\x9f\x22\x0b\x72\xc2\x6e\x36\xa4\x03\xbb\x4c\xc3\xee\xd9\x38\xaf\x31\x72\x33\x06\xba\xc1\xc8\xcd\x78\x02\x02\x4f\x40\xe0\x09\x88\x3e\x3a\x01\x81\x91\x9b\x31\x72\x33\x7a\x9e\xa3\xe7\x39\x7a\x9e\xa3\xe7\x79\x4f\x78\x9e\x97\x2f\xc1\x05\x32\x93\x9b\x0e\xf1\xc9\xfe\x38\x3e\x69\xbc\xa3\xeb\x3c\x4e\xc1\x10\xd0\xe8\xb4\x8b\x21\xa0\x77\x4e\x08\x1e\xf2\xf2\x08\xe4\x05\xfe\x14\xf6\xd6\x89\xb5\x90\x71\xda\xba\x6e\x78\x6e\x95\xef\xe5\x97\xaa\x7a\x85\xfa\x1e\xf9\xca\x30\xf9\xf5\x21\xd8\x2b\xee\x5d\x5c\x2b\x66\xff\x5e\x73\x79\xe2\xe6\x6c\xfd\x7c\x58\x58\x89\x17\xd6\xa6\x44\x71\x87\xf9\x03\xc2\xd4\xbb\x50\xac\xf3\x1e\x4c\x11\xd7\x5c\x8a\xb8\xbf\x93\x0e\x16\x8f\x92\xc3\x75\x62\x23\x89\xc1\x10\xe0\xc4\x8d\x1d\x00\x4d\x65\x9f\x43\xb6\x88\x6c\x11\xd9\x22\xb2\x45\x64\x8b\xc8\x16\x91\x2d\x22\x5b\x44\xb6\x88\x6c\x11\xd9\x22\xb2\x45\x64\x8b\x98\x15\x0e\x91\x20\x22\x41\x44\x82\xdd\x42\x82\x5f\x18\x85\x83\x02\x09\x26\x73\xfc\x4f\xac\x15\x27\x44\x12\x38\xd5\xf7\x55\x6d\x85\xad\xb9\xa1\xbb\xe3\x0f\x8e\x92\xef\x18\x04\x90\x4f\x2c\xae\x15\xb3\xfb\xea\x9c\x5f\x17\x47\xff\xa7\xc3\xc7\xf3\xfc\x90\xfb\xbc\x78\x68\xa1\x58\x7b\xb9\xcd\xc7\xd7\x97\xe0\x92\xa0\x6a\xe7\xe0\x0c\xa7\x6a\xc7\xe1\x28\x1c\x6e\x18\xb3\x37\xf8\xfa\xb5\x62\xa1\xb6\x62\xa9\x30\xed\xb9\x74\x98\x76\x92\x9c\x10\xc8\x6c\x43\xe1\x75\x18\x5b\xb2\x27\x20\xe5\x08\x7c\xf6\xf7\xf6\x24\xba\x62\x7f\xfd\xe3\xe8\x1b\x7a\x23\x38\xb6\xde\xa5\x0e\x29\x95\xe1\x11\xb8\x58\x73\x10\xa2\xc5\x1e\xc1\x43\x10\x78\xe2\xbc\xc5\x13\xe7\xff\x36\xd3\x3e\xb9\x70\x59\x1c\x5d\xbf\x00\x33\xd1\xd1\xf5\xce\x49\x99\x94\x93\xe3\xcd\x09\xa1\xfa\x12\xa6\x09\xd1\x94\x7f\xf9\xb6\x84\x94\xb9\x27\x38\x25\xbe\x51\xb0\x3c\x20\x2e\x75\x4b\xae\xe0\x19\x71\x3c\x23\x8e\x67\xc4\xf1\x8c\x38\x9e\x11\xc7\x33\xe2\x5b\x3e\x23\xfe\x89\x8c\xc8\x4a\x34\xc9\xb3\x12\x45\xa7\xba\xdb\xbf\x8c\xb7\x4d\xed\x68\xfe\x64\x78\x87\x55\x82\xd2\xdf\xbf\x35\xa1\x12\x4c\xa4\x9c\x02\xdf\xa0\x28\xbc\x87\x9f\x0f\xec\x82\x9e\x80\x87\xc0\xfb\x4d\x3b\xc1\x43\xe0\x78\x08\x7c\x9b\x0f\x81\x77\x11\x40\xa5\x9d\xc0\xee\xf4\x4a\x50\x3e\x0d\x27\xc9\x89\xdc\xb1\xd0\x45\xf9\xbe\xb8\x8b\x72\xed\xa3\x5d\x38\xe7\xfd\x53\xcf\xc3\x8c\x8c\xd4\xa9\xaf\x1a\xdc\x2b\xaa\x7e\xbc\xce\x89\xd5\xaa\xaf\xb2\x61\x71\x83\x2e\xad\xd8\xf6\xf5\xe4\xf1\x6e\xf2\xf5\x45\xf2\x5d\xc3\xf0\xee\xba\x85\xb0\x25\x6f\x4a\x18\xc6\x5d\x69\xd2\x0b\xd4\xe5\xe0\x34\xf7\x63\xb2\xf0\x27\x45\xe1\x09\xf7\xec\xfc\x31\xf6\xec\x74\xbd\x92\x17\x8a\x9b\x3d\xd8\xe3\xee\x8c\x25\x74\xed\x43\xd7\x3e\x4c\x9c\x86\xae\x7d\xe8\xda\x87\xae\x7d\xfd\xe3\xda\xd7\x43\x79\xc1\x7a\xc6\xb5\x0f\x13\x56\xa1\x6b\x1f\xba\xf6\xa1\x6b\x1f\xba\xf6\x6d\x47\xc2\xaa\xbe\xf6\xc4\xc3\x8c\x3a\xfd\x9c\x51\xa7\xb4\x03\x3d\xf1\xca\xdf\x92\x01\x2a\x80\xe1\x73\xf0\x0c\x07\x86\x0b\xf0\x04\x5c\x6d\x08\x0c\xeb\x93\xad\xb5\x62\x61\x33\x78\x74\xd9\xf0\xd2\x71\x62\xe3\x0c\xf4\xfc\xf0\xe6\xb5\x17\xd2\x69\xe2\xfb\xc8\x7c\x10\x46\x72\x13\x00\x27\xd9\xe2\x66\x15\x4e\x70\xc6\xdc\x97\x60\x13\x18\xf7\xb0\x58\xd2\x14\x75\x73\xee\x76\x42\xdc\xb6\x9d\xe4\x4d\x80\x32\x1d\x96\xe0\xf9\x1a\xa3\xd0\x1c\x5c\x69\x6f\x87\xa3\xa9\x08\x5d\xe5\x5a\x74\x95\xfb\x4f\x03\xa0\x0a\x81\xf4\x34\x3c\xc5\x05\xd2\x55\x68\xfb\xf8\x84\x65\xe1\x44\xb7\x08\xcf\x46\x4e\x74\x9d\x78\x4f\x45\x98\xf9\x9f\x87\xe7\x62\x66\xfe\x4e\xbc\xa8\x75\xe9\xea\xd8\xdb\x2a\x5d\xf3\x9f\x1c\xdf\x44\xba\x16\xa5\x0b\x47\xcc\x1f\xc6\x5e\xde\x5c\xd2\xce\xc8\x9c\x31\xf5\x25\xed\x4c\x58\x50\x17\x65\x6e\x67\x9c\x05\x91\x76\x23\xed\x46\xda\x8d\xb4\xbb\x7f\x68\x37\x6a\x95\x29\x5a\x65\xef\x98\x03\xd0\x51\xbb\x2b\x8e\xda\x68\x75\x41\xab\x0b\x5a\x5d\xd0\xea\x82\x56\x97\xbe\xb6\xba\xe0\x79\x1d\x3c\xaf\x83\xe7\x75\x3a\x75\x5e\x07\x8d\x9a\x68\xd4\xec\x57\xa3\x66\xb9\xd2\xe6\x74\xa6\x69\xa0\x3a\x5f\x1f\x54\xdf\x41\x6e\x17\xb3\x39\x92\xb4\xdb\x08\xad\xdb\x7f\x76\xe0\x4f\xef\x81\x33\xf2\xec\x80\xe3\x78\x13\x6b\xc5\x09\x2b\x0c\x25\x2c\x02\xa0\xf0\xbf\x5f\x9c\xf0\x7c\xd5\xa7\xcb\x55\x93\x89\x1b\x19\x19\x65\xc2\xd3\x54\x93\x92\x1f\xbb\x87\xfc\xf5\x00\xec\x66\xcf\x2f\xae\x15\xb3\xc3\x3c\x38\x0a\xbf\x14\x8c\x8b\x48\x65\x9e\x97\xa5\xcc\x53\x3f\xff\x10\xbb\x71\xda\x71\xbc\x85\x62\x18\xbe\x58\x8f\xdd\x30\xcf\x8a\x68\x73\x9c\x94\x6f\x82\x73\x62\x54\x9d\x80\x63\x7c\x54\x15\x61\x02\xc6\x1b\xdb\x44\xaa\xbe\xcd\xbe\x84\xed\x41\xd9\x50\x62\x35\xba\x89\xd0\x05\x3c\x62\xf0\x5c\xfa\xe0\x19\x27\x07\x82\xc1\x13\x55\x40\x8e\x15\x51\x87\xf8\xa0\xc8\xbe\xbe\x27\x6a\xfd\x7c\x10\x0f\xa5\x89\x0e\x18\x96\xf7\x76\xb7\x0f\x4a\x33\x30\x0d\x67\x6b\x2c\xc1\x5b\xed\x04\x44\x72\x68\xe8\x6d\xd1\xd0\xfb\x2f\x32\x6d\x90\x01\x17\x84\x1d\xf7\x0c\x9c\x8a\xec\xb8\x5d\x15\x25\x3c\x0a\x4a\xdb\x45\x49\xe9\xaf\xde\x16\x89\x92\x43\x1b\x4e\x38\x37\x21\x53\x82\x8c\xd7\xdd\x92\x28\x78\xd8\xb9\xdf\x04\x1b\x1e\x76\xc6\xc3\xce\xdb\x7c\xd8\xf9\x9b\x1a\xc7\xbd\xb8\xe9\xa5\xa5\xe9\x53\xce\x6d\x17\xfe\xe5\x49\x38\x48\x0a\xb9\xb1\xf0\x5c\xf3\xed\xf1\x73\xcd\xfc\xfe\x8d\x87\x99\x9f\x87\xe7\xc8\x33\xb9\xa7\xc3\x67\xa6\x24\x7b\x14\xd3\xcf\xd2\xd9\x9b\x57\x14\x4f\xb3\x1d\x3a\xa6\x78\x55\x6d\x85\x0d\x7b\xbe\xc1\xa4\xea\xaa\x40\x41\x8e\x6b\x73\x8e\x97\xdb\x1b\x6e\x37\x3a\x7a\x5c\xfa\x5b\xf3\x70\x45\x6c\x79\x2c\xea\xdf\xb0\x5d\x36\xed\x63\x67\xa4\x45\x8a\x98\x06\xbb\x20\xf9\x04\x87\x3d\x06\x0d\x43\x44\xfe\xf8\x28\xf9\xb6\x5d\xf0\xf6\xa8\x3c\xb6\x7e\x7e\xaa\x99\x14\xd8\x57\xc4\x23\x73\x12\x78\xf5\x40\xd6\xeb\x11\xfe\xba\x2b\xe1\xa7\xc4\xd7\xf1\x44\x6d\x7b\xfc\x68\xf6\xb6\x64\x9a\xd9\x52\xe8\x81\x0d\xc3\x4f\x4e\xcd\x44\x2b\x27\xa6\x68\x6a\x0e\x6d\x4c\x35\x83\xe7\xd1\x31\xd5\x0c\x7a\xe8\xa1\x87\x1e\x7a\xe8\xf5\x91\x87\x1e\xa6\x9a\xc1\x54\x33\xe8\x19\x85\x9e\x51\xe8\x19\x85\x9e\x51\x3d\xe1\x19\x55\x9e\x82\xe3\xe4\x68\xee\x70\xc8\x45\xee\x89\xb3\x94\xc4\x06\xef\xad\xc0\x54\x30\x11\x0e\x7a\xaa\x60\x22\x9c\x9d\x73\xfc\x9e\x7c\x39\xcc\x8d\x6d\xd9\x7a\x3c\x0b\x8e\x5b\xb5\xd8\xa7\x6a\xa6\xea\x79\x11\xdf\xfc\xb1\x11\xf2\xc7\x03\xb0\x9b\xdd\xbb\xb8\x56\xcc\x3e\x50\x27\xff\xcd\x55\xf1\xe0\x0c\x7b\x30\x7f\x17\xbb\xe1\x8a\xad\xd3\x85\x62\xfc\xf7\xed\x75\xe6\xe0\x5f\xba\x56\x2c\xc4\x6b\x74\xb3\xce\x1c\x4f\xa6\xf3\xbe\xc3\x64\x32\xe0\x7d\x51\x53\x4b\xd2\x97\xa8\x4a\xc2\xa7\xe3\xa7\xf6\x44\xcd\x9d\xab\x9f\xe3\x26\xd1\xe2\xf7\xc8\x7b\x3a\xdd\xe8\x5b\xf6\xde\xa8\xd7\xea\x68\xe4\x44\xef\x8d\x2e\x79\x6f\xd4\x9d\xf4\x5b\xf7\xde\x68\xb3\xec\xe0\xde\x1b\x9d\x92\x1d\xf9\x0f\xdf\x16\xc9\x8e\x77\x85\x99\x6b\x12\xe2\xe2\xdd\xe2\xe7\x8e\x4b\x0b\x4c\x57\x83\xe9\x6a\xde\xba\xa7\x20\xf1\xf8\x0b\x1e\x7f\xc1\xe3\x2f\x1d\x4b\x57\xf3\xe9\x4c\x9b\xcf\x00\x5c\x15\x51\x71\x1e\x85\xd9\x58\x54\x9c\x0e\x9f\x2b\x48\x4f\x5c\xd3\x9c\x1e\x50\x27\x73\x66\x8a\x4e\x50\xfa\xa3\xb7\x45\x7a\xc0\x81\x94\x74\x35\x09\xed\xe0\x6e\xee\x62\xd4\x49\xe5\x00\xdd\x36\xfb\x4d\x25\x41\xb7\x4d\x74\xdb\xdc\x76\xb7\xcd\xce\xf3\xa2\x4e\x6d\xea\x52\xfd\x41\xcb\x27\xe0\x18\x39\x92\x3b\x14\x5a\x0d\xde\x1d\xb7\x38\xc4\xcb\xed\x42\x46\x9a\x3f\xcf\xc3\xa9\x09\xd5\x31\x36\x39\x4f\xe6\xd2\x70\x90\xb3\xf9\xe6\x32\x85\xc4\x0d\x81\xe3\xbf\xcf\x93\xef\x19\x84\xdd\x9a\xed\xf2\xd5\x6b\xa4\x1e\x70\x8c\x0a\x98\x09\x0b\xc8\x8f\xb2\x3b\x67\x6c\x97\xc6\xdd\x16\xeb\xde\xda\x66\x18\xa9\xc3\xac\x18\x5c\x25\x38\xc7\x07\xd7\x14\x1c\x87\xa3\x0d\x07\x17\xfb\x32\x3e\xb8\xea\x55\xad\x3b\x54\x52\x8e\xb8\xba\x15\xa8\xa3\x6d\xe4\x72\x90\xfd\xd3\x3d\x51\x9f\x1c\x68\x40\x25\xeb\x76\xcb\x98\xbc\x79\x1b\x7a\xa6\x74\x19\xca\xf0\x48\xcd\x52\xdf\x72\xd7\xe0\x42\x8f\xe8\xb2\x45\x74\xf9\xa9\x4c\x3b\x45\xc4\x15\xc1\x30\x2f\xc1\x85\x88\x61\x6e\x8f\xc8\xd9\x02\xcc\xdc\xba\xc8\xc9\xff\xf0\x6d\x91\xc8\x79\x4f\x04\x33\xeb\x4a\x99\x03\xe2\xfa\x76\x08\x19\x04\x9d\x08\x3a\x11\x74\x22\xe8\x44\xd0\x89\xa0\x13\x41\xe7\xcd\x80\xce\xad\xeb\x08\xa5\x97\x6f\x8d\x74\x84\xc3\x69\xa0\xb3\xae\xe6\x90\xe7\x9b\xe8\x2e\x2b\x0e\x08\x41\xfb\x4d\x5d\x41\x08\x8a\x10\x74\x9b\x21\x68\x57\x39\x55\xea\x21\xf6\x4e\x2d\x09\xe5\x12\x9c\x23\x67\x72\xa7\x42\x1a\xfa\x60\x82\x86\xd6\x2b\xe9\xad\xe0\x87\x4d\xbe\xb1\x1f\xee\x0a\xc0\x6b\xa0\x76\xbd\xbf\x6a\xfb\xaa\x47\xbe\xba\x9f\xfc\x46\x0c\xa9\x1e\xd8\x3c\x99\x77\x70\x64\xf0\xbd\xec\xe1\xfc\x30\xbb\x59\xac\x8e\x89\x0b\x17\x6d\x77\xda\x34\xc3\x05\xb3\x7d\x06\xc2\x0e\x1d\x09\x7f\x5e\xb8\x7e\x1d\xe4\xae\x5f\x6c\xf0\x1f\x85\xc3\x30\xd9\xc4\xe0\x8f\x7d\x73\x5b\x92\x4a\x3d\x9e\x3e\xee\xc7\x48\x3e\x18\xf7\xb1\xb7\x37\x1a\xef\x78\xee\x1b\xcf\x7d\xe3\xb9\x6f\x3c\xf7\x8d\xe7\xbe\xf1\xdc\x37\x9e\xfb\xc6\x73\xdf\x78\xee\x1b\xcf\x7d\xe3\xb9\x6f\x3c\xf7\x8d\xe7\xbe\xbb\x7b\xee\x1b\x4f\x56\xe3\xc9\x6a\x3c\x59\xdd\xc7\x27\xab\xbf\x7d\x11\x0e\x06\x01\xf5\x8d\x3a\x21\xff\x27\xd6\x8a\x4b\xd4\x57\x8b\x13\x72\xbf\x6f\x68\xd4\x23\x9f\x7f\x8e\x7c\x61\x3f\xdc\x5d\xf3\xc4\xa2\xbc\x35\x3b\xb2\x39\xab\x9b\x9e\x9b\x9d\x17\x25\xe5\x1f\x62\x77\x4e\x27\x8b\x59\x10\xa5\x44\x77\xf5\x38\xa5\x2b\x21\xcb\x42\x96\x85\x59\x86\x91\x65\x21\xcb\x42\x96\xd5\x3f\x2c\xab\x87\x92\xe8\xf6\x0c\xcb\xc2\xec\xae\xc8\xb2\x90\x65\x21\xcb\x42\x96\xb5\x1d\xd9\x5d\xfb\x1a\x3d\x61\xfa\xc9\x7e\x4e\x3f\x59\xda\x81\xe8\xa9\xfc\xa1\x0c\x54\x84\x7b\xd3\xf3\xf0\x1c\x77\x6f\x7a\x0a\x16\xe0\x89\xba\xee\x4d\x6c\x20\x8c\xab\x95\x0a\x6b\x2d\xdf\x76\x23\x8f\xde\x5a\x6a\x25\x19\x54\x21\xc2\x47\x6d\x71\x80\xa2\xe9\x0e\x50\x25\x72\x4e\x38\x40\x45\xaf\x0e\x3c\x9e\xea\xa3\xb5\xb8\x6f\x14\xaf\x34\xe4\x7e\x14\x1a\x53\xb5\x3b\xc5\x02\xa6\xa8\x56\x9c\xa0\xed\x17\xbf\x76\x8d\xa1\x09\xe4\xb5\x0c\x3a\x2c\xd5\x78\x62\x5f\x85\xb9\x76\x77\x1d\x7a\x68\xe3\xe9\xd5\x16\x4f\xaf\x7e\x61\x00\x34\x21\x5c\x9e\x81\xa7\xb9\x70\xe1\x47\x1e\xdb\x3d\x42\x61\x45\x9c\x6b\x55\x61\x31\x3a\xd7\xda\x99\x37\x19\xe2\x90\xcc\x12\x3c\x1f\x3b\x24\xd3\x99\x57\xb5\x2e\x2d\x1d\xbb\x79\x69\xb9\x45\xe1\xb8\x41\xb8\xe6\xff\xf7\x58\x63\x69\xf9\x80\x3c\x3c\x15\x3b\x89\x66\x2f\xc7\x05\xe7\x41\x71\x43\x7d\xc1\x39\x13\x3e\xd5\x31\x11\xda\x99\x13\xb8\x88\xa1\x11\x43\x23\x86\x46\x0c\xdd\x3f\x18\x1a\x55\xc4\x14\x15\xb1\x77\x38\x3d\x46\x3f\xe8\x4a\xf4\x03\x34\x87\xa0\x39\x04\xcd\x21\x68\x0e\x41\x73\x48\x5f\x9b\x43\x30\x08\x0e\x06\xc1\xc1\x20\x38\x9d\x0a\x82\x83\xd6\x46\xb4\x36\xf6\xab\xb5\xb1\x5c\x69\x73\xfc\xa7\x34\xde\xdc\x1d\x9e\x7c\x2d\x5f\x1f\x6b\xdf\x41\x6e\x17\x42\x23\x12\xe8\xd0\xfe\x50\x18\x7f\x39\x02\x67\x85\x23\x3e\x7d\xc1\xa7\x16\x1f\x4a\xa1\xf3\x3d\xef\xe8\x46\xa1\x89\x0d\xab\xe2\xb2\xdd\xbf\x47\x3e\x35\x42\xfe\xe3\x10\x90\xa8\x80\x10\x87\x7b\x52\x31\xb5\x74\x63\xcd\xd0\xab\xaa\x19\x37\x09\xab\xe1\x26\x70\x56\x14\x55\x88\x2d\xf3\x53\xa1\x82\x30\xcc\xcb\x18\x8e\x00\x6c\x82\xa8\xd9\x0e\x0d\x37\xf1\x9e\x4f\x55\xbd\x90\x3f\xc0\x1f\xb8\x10\xd6\x46\xc2\xf5\x28\x60\x95\x7c\xdd\x65\xc3\xf3\x7b\xdc\xc9\xbf\x7c\xbd\xe1\x20\x85\x39\x31\x17\x66\xe1\x12\x9f\x0b\xd3\x70\x16\x4e\xb7\x30\x17\xb8\xb5\xfe\x02\xdb\xcc\x05\xc3\x7e\x21\x7d\xd8\x1f\x22\x45\x39\xec\xa3\x4e\x97\x23\x5b\x36\xee\xc6\x81\x7f\x6d\x5f\xfd\x71\x7e\x2b\x01\xfe\xc1\xdc\xe2\x8d\x11\x3a\xf0\x54\x03\x46\xe8\x40\x73\x12\x9a\x93\xd0\x9c\xd4\x47\xe6\x24\x8c\xd0\x81\x11\x3a\x10\xe3\x23\xc6\x47\x8c\x8f\x18\xbf\x27\x30\xfe\x0e\x8c\xea\x89\x31\x40\x10\x8d\x62\x0c\x90\x9d\x73\x10\x83\x7c\x75\x18\x1e\x08\xa2\xf0\x0a\xd2\x18\xb8\x41\x59\xfe\x9a\x6d\x56\x57\xa9\x47\x3e\x33\x4c\x3e\x35\x14\x85\xe3\xfd\xbb\xcd\xf1\xc4\xb9\xb0\x9c\x05\x5e\x4e\x9b\xc0\xe2\x03\x37\xa2\xf0\xf7\xb5\xaf\xd8\x19\x30\xb1\xed\xcc\x30\x95\xa1\x37\x03\xfd\xae\x5d\x4d\x27\x8e\x13\x64\x3c\x8a\xe3\x2b\x48\x63\x6d\x17\x24\x82\xfe\x22\x48\x44\x90\x88\x20\x11\x41\x22\x82\x44\x04\x89\x08\x12\x11\x24\x22\x48\x44\x90\x88\x20\x11\x41\x22\x82\x44\x0c\xf5\x8b\x98\x0f\x31\x1f\x62\xbe\x6e\x61\xbe\xaf\x3c\x0f\xa7\xc2\x50\xbf\x91\xbb\x58\x6d\xa0\x5f\xad\xea\xf9\xf6\x6a\x50\x60\x0c\x49\x91\x1f\x7a\x9e\x7c\xf7\x30\xbc\x2b\xf1\x74\xe8\x61\x78\x74\xf3\xa0\xbf\x33\xbc\xd4\x60\xdb\x77\x3e\x2c\x35\x7f\x50\x86\x00\xa6\xb5\x6e\x82\x8d\x9e\xe8\x71\xb8\x87\xe1\x80\x91\x77\x61\x38\x60\xe4\x5d\xc8\xbb\x90\x77\xf5\x11\xef\xea\xa1\x30\x03\x3d\xc3\xbb\xf0\xfc\x3b\xf2\x2e\xe4\x5d\xc8\xbb\x90\x77\x61\x38\x60\x3c\xa0\xfb\xd6\xc1\x53\x3d\x7f\x40\x77\x47\x86\x03\xfe\xbe\x0c\x7c\xb3\xf0\x8a\xf2\xc1\xe5\x5e\x51\x26\x5c\x83\x95\x46\x5e\x51\x11\x2f\x1a\x0f\xf7\xeb\x89\x20\x97\x31\xc2\x15\x84\xb8\x6c\x84\x94\x9a\x0a\x11\xfc\xfe\x74\xdf\xa8\x2b\xe4\x72\x74\x08\x79\x03\x61\x93\xde\x52\x8d\x2a\x51\xe7\xa0\x66\x4a\x54\xe2\xdc\x0f\xbe\xad\x11\x8d\x7b\x30\x08\x16\xdc\x18\xbc\x4d\x86\x91\x83\xbb\x8f\xde\x04\x29\xfb\x00\xbc\x00\x6b\x35\x51\x84\x97\x41\xef\x46\x8f\x63\xd8\x38\x8c\x2c\xdc\x62\x64\xe1\x7f\x34\x08\x2f\x8a\x50\xbc\x6b\xe0\xc7\x42\xf1\xae\x40\x97\xc6\x6e\xe3\x93\xe8\x37\x84\xfc\x74\xc0\xe2\xf2\xb3\x7b\x35\xfa\xbb\x22\x0a\x72\x15\xbc\x28\x0a\x72\xd7\xde\xde\x6c\x54\xe2\xee\x0b\xf0\xfc\x3f\x1f\x6f\x24\xa0\xc7\xeb\xc6\x27\x6e\x28\xac\x4f\x85\xd1\x8a\x37\x0a\xeb\xb0\x84\x2e\x89\x6d\x8c\x5c\x8c\xc4\x1c\x89\x39\x12\x73\x24\xe6\x18\xb9\x18\x23\x17\x63\xe4\x62\x8c\x5c\x8c\x96\x1b\xb4\xdc\xa0\xe5\x06\x2d\x37\x68\xb9\x69\x8b\xe5\x06\x23\x17\x63\xe4\x62\x8c\x5c\x8c\x91\x8b\xd1\x30\x8a\x86\xd1\x1d\x1e\xb9\x78\x0b\x21\x85\x9b\xe4\xd3\x1b\x20\xf3\x4d\x00\xeb\xf6\x47\x31\xfe\x3f\x03\x90\x95\x67\x0c\xaa\xbe\xed\x69\xaa\x69\x58\x95\x89\xb5\x49\x56\xd5\xc9\x09\xf2\x3b\x03\xe4\xcb\x03\x70\x47\xec\xda\xa2\xbc\x96\xbd\xbb\x42\xfd\xa4\x92\x2c\x2c\xd1\xf9\x07\x2b\xd4\x9f\x8e\x1e\x58\x10\xf7\x4f\xcf\xcd\x06\x1f\xe4\xb5\x8f\x6f\x6f\x28\x68\x6a\x43\x41\x53\xcd\x14\x54\x76\xe0\x7d\x62\x9c\x5d\x81\xcb\x7c\x9c\x5d\x84\xf3\x50\x6a\x61\x9c\xc5\xbe\xb3\x19\x2b\x35\x79\x69\x04\x26\x44\x07\x58\xb6\x4e\xa3\xb3\x1d\xaa\xe9\xac\x84\x81\xa4\xdd\xaa\xc5\xe6\x88\x66\xaa\x3c\x6c\xf4\xaf\x0c\x93\x5f\x18\x82\xb7\xb3\x07\x16\x83\x3b\xb3\x2f\x34\x17\xe1\xe5\xaa\x28\x6a\x86\x15\xd5\xa6\xe8\x2e\x0f\xf2\x07\xae\xd8\x3a\x5d\x90\x95\x89\xbf\x04\xe3\xbb\xdc\x44\x7c\x97\x67\xd3\x45\xcc\x14\x39\x2e\x25\x4a\x6c\x00\x49\x41\x12\xef\x87\xb8\xb5\x4b\xf4\x12\x86\x7a\xc1\xa3\x2f\x18\xea\x05\x0d\x79\x68\xc8\x43\x43\x5e\x3f\x19\xf2\x30\xd4\x0b\x86\x7a\x41\x03\x0a\x1a\x50\xd0\x80\x82\x06\x94\x9e\x30\xa0\x60\xa8\x17\x0c\xf5\xb2\x53\x90\x31\x86\x7a\xe9\x44\xa8\x97\x9f\x1c\x09\x42\xbd\xb8\x4b\xaa\x56\x08\x68\x51\x3c\x21\x5e\x14\xec\x59\x33\xab\x9e\xcf\x36\x2e\x26\x5d\x32\x2c\xdd\xb0\x2a\x1e\xf9\x8b\x61\xf2\x47\x43\x70\x27\x7b\x7a\x3a\xfe\xf0\xe2\x5a\x31\xfb\xc1\xe6\xc8\xe0\x8c\x28\xf6\xaa\x6d\xd2\x92\x28\xb6\x4d\x7c\xb0\xc0\x1f\xb8\x5a\x5b\xb5\x85\xe2\xc6\x37\xee\x0c\x58\xd8\xfd\xcc\x72\xd7\xd3\x39\xe0\x23\xe4\xa2\xb4\x1e\x6c\x68\xd5\x44\x7c\x67\x09\x0b\x1b\x8e\x33\x4c\x37\x87\xe8\x10\xd1\x21\xa2\x43\x44\x87\x88\x0e\x11\x1d\x22\x3a\x44\x74\x88\xe8\x10\xd1\x21\xa2\x43\x44\x87\x88\x0e\x11\x1d\x22\x3a\x44\x74\xd8\x5b\xe8\xf0\xeb\x07\xe0\x6a\x3a\x3a\x14\xa1\xa2\xc3\x74\x92\xde\xc4\x37\x87\x7f\xbf\x38\x11\x27\x89\xe2\xc2\x8b\xe4\x9f\x1d\x20\x3f\x3e\x08\xf7\xd4\x03\x8a\x22\x20\xc2\x7b\x5c\xaa\xea\x35\x7b\xd5\x18\x73\xca\x17\xd9\xf5\x3a\xd0\x8f\x3f\x7d\x25\x78\xb9\x1e\x7b\xa4\xbd\x61\x0f\xca\x8b\x70\x5e\xe0\xb8\xd3\x70\x92\xe3\xb8\x23\x70\x08\x8a\x8d\x70\x5c\x81\xb7\x5e\x10\xba\x22\x0e\xcf\xd2\x1c\xf9\xee\xaf\x8f\xcb\x6e\x21\x43\x15\xea\xc3\x35\x23\x1d\xdd\x5d\x24\xe7\x53\xa9\x9c\x74\xe8\xab\x0f\xf5\x84\x63\x71\xf6\xa5\xbd\x9b\x75\xd8\x83\x2e\x75\x4c\x55\xa3\x9b\xf4\xd9\x61\x79\xcb\x36\x76\x5b\xe9\x12\x5c\x80\x99\x9a\x20\x43\xad\xf4\x1b\x1e\xd7\xc6\x88\x41\x2d\x46\x0c\xfa\x91\x4c\x63\xc4\xdf\x1e\x99\x32\x2b\xe2\xef\x94\xe0\x5c\x14\x7f\xa7\xb5\xa2\xd2\xa5\x90\x53\xed\xaa\x14\xca\xff\xc2\x6d\x9b\x49\xa1\x3b\xe5\x29\x2b\x35\x21\x78\x0e\x89\x5f\xb7\x53\xee\x74\x26\x4a\x0e\x0a\xa1\x14\x21\x84\x91\x1a\xba\x12\xa9\x01\x8f\xe8\xe2\x11\x5d\x3c\xa2\xdb\xa9\x23\xba\xe5\x4f\x67\xda\x7c\x4e\xf1\xaa\x88\x58\xf8\x28\xcc\xc6\x22\x16\x76\xf8\xec\x63\x73\x3a\x42\x13\x2a\x40\xba\x8b\x81\x52\x5f\x5b\xd9\x4b\x76\x8b\x1e\x81\xd2\x8f\xdd\xba\x99\x16\x91\x77\x54\xd7\x37\xb8\x61\x53\xec\xa6\x37\xd9\xd4\x4c\x3a\x0d\xdc\x4f\xba\xa1\x5a\xdc\x5b\x5b\xd0\x38\xaf\xcd\x01\x7e\x56\xf1\xbe\xf8\xc5\x55\xea\x56\x68\xfc\xea\xfe\xf8\x55\xcf\x77\x55\x9f\x56\x0c\x6d\x7c\xc3\x7d\x89\x52\xd8\xdf\xeb\xf2\x2a\xab\x65\xe9\x0a\x5c\x86\x72\xcd\x76\x6a\x0a\x8e\xb7\x30\x8a\xe6\xb8\x1f\x00\x2a\x34\x29\x0a\xcd\xc7\x07\xe1\x63\x83\xe4\xb5\xc1\xec\xab\xe1\xaa\xf0\xd2\x60\xff\xec\xaa\x6a\x4c\x27\xac\x9d\xb9\x2b\x00\x37\xef\xb1\xc1\x19\x39\x04\x8d\x34\x18\xb8\xa3\x7c\x71\x13\x9e\x23\xaa\xc9\x9f\x64\x5a\x9c\x78\x9a\xdf\xc1\x35\x2a\x4f\x19\x29\x7b\xb6\x35\x27\x3c\x63\x1e\x63\xd3\x42\xfe\x3d\x1f\x4c\x96\xe8\xc7\xd1\xc6\xdb\xbd\xd2\x9b\x19\x78\x23\x43\x5e\xcf\x64\x3f\x1b\x52\xbf\x8f\x66\x2e\xda\xae\xc6\x95\xbd\x8a\xcd\x9b\xdd\x56\x72\xcb\xec\xa7\x9c\x32\x9d\xf8\x0a\xce\x73\x85\x5e\x56\xf5\x22\x1f\x80\x71\x55\xe3\x1f\xce\x3d\x2b\x4c\x43\x93\xeb\x2e\x35\x75\x4f\xb1\x6f\xc8\x36\x15\x9e\x07\x0e\xb5\x1d\x93\x16\x14\xf1\x46\xee\xca\x14\xf4\x25\xe7\xaa\x75\x1b\x20\x7c\x7d\x6e\x17\xaf\x56\xc2\x2d\xa7\x5b\xe4\xab\x7b\x9b\xca\x6b\x0f\xd4\x5f\x30\xf6\x90\x5b\x78\x7b\x40\xf9\x38\x1c\x25\x87\x73\x93\x7b\x32\x64\xc8\x51\xfd\x95\xec\xdd\x7c\x82\xc9\xd9\x1e\x2b\x3b\x37\xc4\x2e\xe4\x65\xf7\xbf\x92\xc9\x94\x9f\x87\xe7\xc8\x33\xb9\xa7\xc3\x27\xa7\xa4\x26\x2e\x66\xa8\xa5\x2b\xac\xd2\x8a\xa7\xd9\x0e\x1d\x53\xbc\xaa\xb6\xc2\x66\x06\x57\xf2\xa9\xba\x2a\x74\x24\xc7\xb5\xb9\x82\x9b\xdb\x1b\x52\xd5\xf8\x1b\xda\x7e\x6a\xff\xdb\x06\x61\x9f\x3c\xb5\xaf\xaf\x1a\xdc\x67\xcc\xa5\x15\x83\x2f\x12\x31\xec\x4b\xbe\x3c\x40\xfe\xeb\x00\xbc\xab\xee\x4d\xd9\x6c\x85\x2b\x7f\x4c\x05\x0d\x81\xba\xaa\xf0\xde\xca\x2b\x15\xea\x4f\xd7\x7b\x6a\x7a\x6e\xf6\x12\xbb\xa3\x07\x8f\xf0\x1b\x8d\xa1\xcd\x15\x31\x1d\x2e\xc1\x05\x3e\x1d\xce\xc2\x69\x38\xd9\xda\xd9\x7e\xfe\xf1\xc1\xd9\xfd\xbf\xc9\xc2\x79\xd1\x0d\xcb\xa6\x7d\x83\x49\x53\xd7\x36\x0b\x51\x7c\xe4\x1a\xfa\xce\x6e\xf2\xb4\x15\xba\xaa\x06\x94\x7d\xc2\xe3\x9a\x19\xf9\x77\x59\xf2\x99\x41\xb8\x2f\x56\xca\x74\x50\x48\xa8\xf2\x0c\x73\xde\x2e\x1e\x08\xc6\x75\xa4\xf0\x5c\x34\xed\x1b\xf3\xbc\xec\xfc\x04\xbb\xf1\x62\x9d\xa2\xa4\xc6\x13\xdd\x2a\xf4\xc2\x36\x63\x77\x0a\x65\xd1\xda\x33\x30\xcd\x5b\xfb\x24\x9c\x80\x63\x0d\x85\x4f\xbc\xe5\x02\x19\x14\xd5\x30\x55\x04\x35\xe7\x18\x2b\x45\xd0\x66\xbd\x24\xa5\x50\xec\xd5\x1b\x85\xd0\xe6\xa4\x3f\xfb\xc3\x7b\x53\xba\x30\x1f\x10\xf8\x26\x7a\x71\x52\xde\xbb\x6d\x1d\x59\x7a\x0c\x1e\x85\xd9\x1a\xcd\xb1\xf5\x9e\x44\xc5\x11\x71\x7c\x8b\x38\xfe\x3f\x64\xda\x2a\x52\x1e\x17\xec\xfd\x11\xb8\x18\xb1\xf7\x8e\xca\xa8\x14\x34\xdf\x4d\x11\x56\xfa\xb9\x5b\x53\x64\xd4\xa1\x0d\x3b\xeb\x26\x84\xd5\x41\xae\x84\x6d\x8b\xa8\xc2\x0d\x76\xbf\xc9\x49\xdc\x60\xe3\x06\x7b\x9b\x37\xd8\xdd\xd5\x71\xd3\xf6\xbe\x5d\x5d\x41\xca\xc7\xe0\x08\x39\x94\x2b\x86\xdb\xe5\xbb\xe2\x1b\xed\xe8\xc9\x8d\xfb\xec\xb6\xef\x82\x3f\x96\x85\x59\x19\x3a\x8d\xfa\x37\x6c\x97\x4d\xdf\xd8\x61\xc9\x06\xce\x4e\x86\x55\x71\x99\x6c\xa9\xdd\x83\xfd\xf6\x3d\xe4\xbb\x06\xe1\xed\x51\x51\x8b\x6b\xc5\xec\x43\x9b\x6e\xba\x66\x45\x51\x79\xbe\x35\xbb\x12\x3e\xb8\x10\x83\xca\xf2\x96\x8e\xec\xb4\x9e\x81\x69\x31\x0a\xa7\xe0\x38\x1f\x85\x93\x70\x10\x0a\x0d\x47\x61\xac\x91\xd6\x8a\x05\x59\xb1\x9b\xf5\x6e\x7a\x2a\x7d\xe8\x1d\x21\x87\x82\x00\x65\xb5\xdd\x24\xc7\x5b\x50\x97\xf8\x31\xc5\xec\x7f\xdd\x53\xdb\x19\xc3\x69\xdb\xa7\xa0\x3f\x82\x7d\x56\xd7\xbb\xa4\x74\x1e\x4a\x70\xae\x46\x19\xd8\x72\x9f\xa0\x0a\x80\x5b\xa5\x16\xb7\x4a\xff\x2a\xd3\x0e\x99\x70\x51\xec\x90\xce\xc2\xe9\x68\x87\xd4\x5d\xd9\xc2\x37\x46\x1d\x93\x2d\xa5\xef\xbc\xb5\x56\xb6\x1c\x6c\x7a\xdb\x13\x08\x99\x11\xbe\xf8\x76\x55\xc4\xe0\x5e\xa7\xdf\x04\x1d\xee\x75\x70\xaf\xb3\xcd\x7b\x9d\x67\x1a\x9b\x55\x6e\x7e\xa9\x69\x7a\x8b\xd3\xb1\xb5\xa0\x7c\x18\x26\xc9\xc1\x5c\x21\xdc\xcf\xdc\x11\xdf\xcf\xc8\x27\xde\x12\x46\xc3\x8f\xe6\xe1\xa9\x66\x0f\x8a\x88\x40\x33\x5b\x38\x2e\xf2\xc6\x28\xf9\x97\xbb\x36\xf3\xd8\xf9\x64\x46\x1e\xea\x89\x85\x9e\xb1\x02\xa7\x47\x7b\x59\x61\x3d\xa4\xb4\x3b\xf6\xcc\x58\x74\x2c\x96\xfb\x59\xca\x43\x94\x86\x4f\x57\x23\x19\x39\x9c\x38\x62\x1d\x2b\xbb\x90\x9f\x6c\x14\xb9\xa6\x0b\xae\x43\x6f\xa1\x50\xd7\x3d\xe1\x27\x70\x43\xf8\x09\x60\xdc\x1a\x8c\x5b\x83\x71\x6b\x30\x6e\x0d\xc6\xad\xc1\xb8\x35\x18\xb7\x06\xe3\xd6\x60\xdc\x1a\x8c\x5b\x83\x71\x6b\x30\x6e\x0d\xc6\xad\xe9\x6e\xdc\x9a\x7e\xf2\xd7\xc6\x98\x3a\x18\x53\x07\x63\xea\xec\xa0\x98\x3a\x7f\x3e\x0c\x79\xd6\x75\x9b\xb8\x91\x38\xb6\x1e\xc2\xcf\x5f\x1c\x26\xbf\x34\x00\xbb\x35\xdb\xa5\x8b\x6b\xc5\xec\x5d\x75\x22\xe3\xcc\xd9\x7a\xfe\x6e\xf6\xfb\x8c\xed\xd2\xb8\xa9\x70\xce\xd6\xdb\xec\x16\x72\xb5\x31\xb0\x3f\x26\xd0\xdf\x41\x28\x70\xf4\x37\x02\xfb\xe1\xa1\x86\xc0\x9e\x7d\x0e\x37\xd5\xd9\xcd\x3a\x83\x5c\x48\xe7\x7c\x39\xa2\x48\xce\x97\xcb\x49\xa0\x37\x67\xeb\x49\xcf\x8f\x6f\xdb\x13\xb5\xe5\x3d\xf5\x83\xd6\xb0\xe6\xcc\xca\x4b\x1d\x6f\xd1\xd2\x14\xb0\xd5\x2a\x69\xf6\x6c\xb2\xe5\xd0\xc4\x89\xbe\x1c\x2d\xfa\x72\xbc\x9c\x69\x79\xbe\xc2\x29\xe1\xc1\x71\x04\x0e\x45\x1e\x1c\xcd\x3f\x9d\xc6\xf3\x9b\x9b\xe7\x75\x82\xce\x27\xe6\x7c\x8a\xfb\x47\xfe\xe7\xdf\x19\x89\x81\x5b\xc3\xa8\x31\x6c\xe6\xdf\x23\xfe\xd5\xf9\x89\x8f\x31\x61\x30\x26\x0c\xc6\x84\xc1\x98\x30\x18\x13\x06\x63\xc2\x6c\x39\x26\xcc\xf7\xdc\xc4\xfa\x7d\x5a\x84\x7f\x39\x0a\x87\x63\xe1\x5f\xda\xb7\x80\xa7\x86\x5f\x69\x93\x2a\x5f\x7a\xfd\x6d\xd1\x1a\x9e\x4b\x89\xd9\xc2\x56\xf6\x77\x73\x77\x9f\x8e\x2e\xec\xe8\x44\xd9\x6f\xea\x04\x3a\x51\xa2\x13\xe5\x36\x3b\x51\x5e\x6d\x7d\x29\xb8\xe9\xd3\x61\xed\x11\xe5\xe5\x83\x50\x20\x63\xb9\x7c\x88\xdd\xdf\x19\x07\xf6\x73\xb6\xfe\x56\x00\xf5\xe4\xf7\x06\xe0\xdd\x8d\x8e\x94\x91\xff\x38\x40\x7e\x61\x00\x20\xba\xb2\x69\x08\x95\x77\x55\xa8\x1f\x9d\x0e\xc0\xb8\x29\xb1\xb8\x29\xbf\x39\x0c\x87\x9b\xf5\x44\x4d\x64\x39\xfc\xe1\x61\xf2\x91\xa1\xcd\xbc\x4c\x47\x85\xbf\x80\x2b\x2d\x9d\xc1\x1e\xa3\x8e\x7f\x69\xfe\x18\xbb\xb5\x91\x6b\x67\xec\xc6\x8b\xb6\x3b\x6d\x9a\xa1\x32\xd2\xbe\xe3\x1c\x1d\x72\xf0\xd4\xe0\x11\xd1\x6b\xd3\x70\x96\xf7\xda\x09\x38\x06\x47\xb6\x1c\xfc\xe9\xb2\xe1\xa5\x3b\x76\xbe\xa7\xbe\xec\xd9\x4d\x76\xf1\x24\x81\x5d\x74\xfc\x44\xbf\x4e\xf4\xeb\x44\xbf\x4e\xf4\xeb\x44\xbf\x4e\xf4\xeb\x44\xbf\x4e\xf4\xeb\x44\xbf\x4e\xf4\xeb\x44\xbf\x4e\xf4\xeb\x44\xbf\x4e\xcc\x47\x88\xbe\x93\xe8\x3b\x89\xbe\x93\xdd\xf2\x9d\x7c\xf5\x59\x38\x28\x63\x53\x3b\x8e\xb7\x89\x07\xa5\x4b\x39\xde\x62\x53\x97\x7c\xfd\x19\xf2\x2d\xfb\x61\x37\x7b\x62\x71\xad\x98\x1d\x49\xc1\x78\xe2\xc9\x79\xea\xe7\xdf\xc3\xee\x9c\x76\x1c\x2f\x6e\x2f\x8c\xae\xf7\x38\xac\x2b\x21\xb5\x42\x6a\x55\x42\x6a\x85\xd4\x0a\xa9\x15\x52\xab\xbe\xa1\x56\xa5\x9e\xa1\x56\x6d\xaf\x49\xcb\xd4\xaa\x84\xd4\x0a\xa9\x15\x52\x2b\xa4\x56\x48\xad\xba\x4f\xad\x4a\x7d\x0d\x99\x4a\x08\x99\x3a\x07\x99\x4a\xbd\x0e\x99\x4a\x3b\x10\x32\x95\x9f\x85\x92\x70\x72\x3a\x09\x27\xb8\x93\xd3\x21\x28\xc2\x44\x43\x27\x27\xd5\x71\xbc\xc2\x5a\xb1\x10\x81\xa1\xa6\xdc\x9b\xae\xa4\xbb\x2f\x1d\x20\xa3\xd2\x7d\x89\xbd\x23\xf0\x54\x0a\x5f\x93\x70\xa1\x4c\x73\x97\xca\xfd\xc1\x9e\x08\x81\xdd\x21\xd6\x1c\x45\x8d\xd3\x2e\xb9\x10\x75\x81\x77\x09\x3c\xc5\x63\x03\xd6\xb8\xaa\x8f\xc3\x81\x2d\xb4\x33\x7a\xa7\xe3\xf9\xd7\x16\xcf\xbf\x7e\x35\x03\x67\xc4\x24\x3f\x06\x47\xf8\x24\x9f\x80\xad\x0d\x3e\x98\x11\xc7\x60\x4f\xc1\x54\x74\x0c\x76\xcb\x85\x9c\x17\x67\x71\x4e\xc3\xc9\xd8\x59\x9c\x2d\x97\xd2\xba\x2b\xa5\x63\x7b\x3e\xb4\x5b\x16\xe5\x3f\x37\x16\xc9\x9a\x07\xe4\x11\xaa\xd8\x79\x34\x7b\x39\x2e\x77\xf2\xe2\x06\x21\x77\x66\xc2\xbb\xba\x20\x81\x3a\x73\x02\x17\x89\x2b\x12\x57\x24\xae\x48\x5c\xfb\x87\xb8\xa2\x1a\x96\xa2\x86\xf5\x0e\x92\xc6\xe8\x07\x5d\x89\x7e\x80\xe4\x1f\xc9\x3f\x92\x7f\x24\xff\x48\xfe\xfb\x9a\xfc\x63\x10\x1c\x0c\x82\x83\x41\x70\x3a\x15\x04\x07\x0d\x6b\x68\x58\xeb\x57\xc3\x5a\xb9\x02\x97\x05\xbf\xbe\x00\x33\x9c\x5f\x9f\x86\x93\x70\xa2\x05\x78\x29\xf2\x48\x76\xdd\x5c\x95\xaf\x8f\xa4\xef\x20\xb7\x0b\xe9\x10\x49\x6e\xd8\x89\xb1\x3e\xbe\x3c\x00\xb7\x0b\x47\x75\xfa\x82\x4f\x2d\x3e\x2a\xc3\x20\x1f\xd1\x4f\xa9\x41\x3e\x2e\x84\xb7\xf6\x74\x90\x8f\x36\xc7\xf2\x48\x1b\x8d\xe4\x4f\x06\xe0\x5d\xa2\x79\xc5\xba\x12\x46\xf4\x20\xbf\x3e\x40\x7e\x6d\x00\xde\x21\x7e\x0e\x43\x77\xdc\xcd\x9a\x39\xb1\x71\x11\xd6\xe5\xfc\x7d\x15\xea\x8b\x85\x45\x06\xe7\x98\x9e\x9b\x0d\x80\x6d\x1b\x93\xab\xb6\xad\xa9\x1d\x78\x9f\x68\xea\x2b\x70\x99\x37\xf5\x45\x38\x0f\xa5\xd6\x9a\x3a\xf8\xce\x66\xcc\xd5\xe4\x57\x9f\x81\x87\x53\xa2\x56\x8b\x73\x03\xe4\xd5\x67\xc8\x1f\x3e\x1c\x45\x66\xdb\xb7\xf9\x71\x0b\x9e\xe4\x2d\x7f\x0f\xbb\xa9\x36\x32\x1b\xbf\x84\x87\x2c\xf0\x90\x05\x1e\xb2\x40\x93\x1f\x9a\xfc\xd0\xe4\x87\x26\xbf\x9e\x31\xf9\xf5\x8e\x45\x0b\x4d\x2d\x68\x6a\x41\x53\x0b\x9a\x5a\xd0\xd4\xd2\xd7\xa6\x16\x64\xc1\xc8\x82\xfb\x94\x05\xef\xc8\x43\x16\x4f\x89\x34\x04\x07\x79\x1a\x82\x81\xc7\x1f\x25\x05\x18\x83\x7c\x6a\xd0\x6a\xce\x84\xda\x12\x3e\xf6\x52\x3a\xd0\x7e\x88\xe4\x6a\x23\x57\xf3\xf7\x27\x48\x76\xee\xb3\xb1\x8c\x62\xef\x0c\x0e\x56\x58\x12\x6c\xdd\x2b\x7e\xe8\x2c\xda\x12\x24\xea\x14\x4c\xc1\xf1\x9a\xf3\x14\x23\xb0\xbf\xb9\x26\x45\x1f\x3e\x3c\x4a\xd1\xe2\x51\x8a\x5f\xcf\xc0\x59\x71\x8a\xe1\x38\x1c\x8d\x9d\x62\xc8\x43\xd3\xa3\xaf\x71\x90\xf0\x13\x42\x48\x4c\xc2\x41\x2e\x24\xb6\x52\xe6\x19\x71\x3e\xe3\x18\x1c\x89\xce\x67\x6c\xe1\xf9\x66\xcf\x4e\xb4\x4b\x8e\xe4\x3f\x3d\x16\xc9\x91\x6c\xdd\x43\x13\x42\xa4\x3c\x1c\x4f\x50\x56\xef\xbc\x44\x27\x84\x0b\x1e\x95\x40\x6e\x8a\xdc\x14\xb9\x29\x72\x53\x3c\x2a\x81\x47\x25\xf0\xa8\x04\x1e\x95\x40\x7e\x8f\xfc\x1e\xf9\x3d\xf2\x7b\xe4\xf7\x78\x54\x02\x8f\x4a\xe0\x51\x09\x3c\x2a\x81\xe6\x31\x34\x8f\xf5\xa0\x79\xac\x5c\x69\x8c\x97\xdb\x7a\x86\x22\x20\xc6\x5b\x38\xda\xd0\x36\x7a\xbc\x13\xcf\x48\xbc\x3e\x0a\xc7\x03\x97\x72\x3e\x36\x1a\x39\x96\x3b\xb6\xee\xd3\x55\x87\xc3\x2d\x71\xe1\x45\xf2\xdd\xa3\xe4\xf7\x86\x22\x60\xfe\xc9\x8c\x1c\x5d\x91\xad\x53\xb5\x02\xed\x25\xf0\x35\x9f\xb3\xf5\x27\x64\x39\x85\x98\x6a\x30\x15\x2a\x15\xc3\xbc\x90\xe1\x08\xda\x26\x28\x9c\xed\xd0\x70\xe3\xef\xf9\x54\xd5\xc7\xa2\xdd\x0a\xdf\x91\x49\xdd\x96\x6d\x78\xa2\x6d\xd8\x70\x02\x30\xc4\xca\x2e\xe4\x85\xfe\x5d\x27\x21\x79\x50\xcb\x1e\x77\x7e\x2f\x5f\x87\x39\x31\x81\x66\xe1\x12\x9f\x40\x3c\xa6\x5b\x0b\x13\x88\x1b\xab\x37\x37\x05\xa5\xa7\x24\xbe\x21\x52\x12\x3f\x96\x3e\xa5\xf2\x64\xa4\x4e\x4a\xe2\xa0\xd5\x93\x13\x0b\x1d\xfc\xd1\xc1\x1f\x73\x7f\xa2\xa1\x0a\x0d\x55\x68\xa8\xea\x1f\x43\x15\xe6\xfe\xc4\xdc\x9f\x68\x20\x40\x03\x01\x1a\x08\xd0\x40\xd0\x13\x06\x82\xf2\x71\x38\x4a\x0e\xe7\x26\x43\xc0\x71\x37\x27\x1b\xb2\x16\xb1\xdd\x5b\x6e\x88\x5d\x88\x83\x8b\x9d\x87\x46\x30\x2f\x29\xe2\x5a\xcc\x4b\xba\x73\x4e\x33\x90\x0f\x49\x94\xe9\xb1\xff\xb8\xb4\x62\xb0\x19\xc9\xd1\xcb\xf5\xe3\xbc\xbf\x43\xc4\x29\x61\x84\xa1\x45\x28\xf3\xb3\x23\xe4\x5b\x76\x01\xa9\x79\x72\x71\xad\x98\xfd\x44\x33\x54\x73\x7a\x6e\x76\x5e\x94\xd8\x43\x50\x73\x3a\xf9\x31\x0b\xc5\xa8\x96\x08\x35\x5b\x80\x9a\xcf\xa7\x43\xcd\xd3\xe4\x64\x18\x7e\xa9\xde\x18\x4c\x60\x4d\x01\x3d\xa3\x4e\x41\xce\x89\x9c\x13\x39\x27\x72\x4e\xe4\x9c\xc8\x39\x91\x73\x22\xe7\x44\xce\x89\x9c\x13\x39\x27\x72\x4e\xe4\x9c\xdd\xe6\x9c\xc7\xe0\x08\x39\x94\x2b\x86\xb4\xf2\xae\x38\xe7\x8c\x36\x6c\x1b\x31\x27\x42\x48\x84\x90\x08\x21\xfb\x18\x42\xfe\xa7\x0c\xec\x9d\x90\x7d\x34\x41\x7e\x2e\x43\x7e\x3a\x03\xbb\xe5\xbf\xb3\x77\x56\x68\xb0\x9d\xd2\xc3\x29\x99\x7f\x47\x85\xfa\x33\xb6\x1e\x8e\xff\x94\x38\xc5\xec\x97\xf2\xf3\x70\x41\xf0\xb1\x33\x70\x8a\xf3\xb1\xa3\x70\x18\x26\x9b\xe3\x63\xf2\xbd\x85\x59\x6b\xd9\x4e\x0d\x39\xfc\xe9\x11\x78\x60\x73\xff\xd0\x17\xc9\x3f\x1d\x21\x5f\x88\xb9\x81\xfe\xdb\x66\x80\x69\xe8\x6a\xd9\x13\xbc\xf4\xce\x7a\x4e\xa0\xc8\x48\x5b\x60\xa4\x8f\xa6\x33\xd2\x11\xb2\xbf\xd6\xf1\x33\x6c\x73\x74\xfb\x44\x1c\x8a\x38\x14\x71\x28\xe2\x50\xc4\xa1\x88\x43\x11\x87\x22\x0e\x45\x1c\x8a\x38\x14\x71\x28\xe2\xd0\xed\xc4\xa1\x47\xe1\x30\x99\xcc\x1d\x0c\x71\xe8\xbb\xe2\x38\x34\xdc\xbb\x21\x0d\x45\x1a\x8a\x34\x14\x69\x68\x8c\x86\xfe\xfb\x3c\x1c\x15\x2e\x99\x9e\xb6\x42\xf5\xaa\xc9\xb4\xbc\xd0\x1b\x53\x64\x8b\x73\x5c\xc3\x76\x0d\x7f\x5d\x33\x55\xcf\x8b\xa0\xe2\x5f\x8d\x92\x1f\x18\x04\x12\x3d\x17\xe6\x91\x53\x5c\xaa\xea\x35\x1b\xd8\x39\x59\xc8\x0c\x2b\x24\x9f\x63\x77\xcc\x87\x4f\xca\xac\x72\x89\x7b\xda\x1b\x9a\x75\x8b\x99\x20\x0b\xb1\xd6\x90\x5f\x55\x48\xd4\x2e\x95\xc3\xdd\x5f\x9f\xc3\xdd\x42\x86\x2a\xd4\x87\x6b\x5a\x3a\x85\x3b\x47\xce\xc8\x43\xd7\x89\x17\xc7\xf8\x1b\xaf\x17\x48\x54\xb7\xa1\xff\x20\xfb\xad\x7b\xeb\x76\xcf\x3e\x97\x3a\xa6\xaa\xd1\x4d\x7b\xe8\x61\x79\x53\x37\x3b\xa9\xf4\x38\x3c\x06\x8f\xd6\x04\xe7\xbe\x99\x5e\xc2\x40\x92\x18\xaf\xbb\xc5\x78\xdd\xff\x77\x06\xde\x2b\x42\x63\x97\xe1\x91\x28\x34\x76\x87\xa4\x46\x7b\x85\x53\xba\x0c\x72\xaa\x4d\xcb\xa0\xe6\xe5\x4d\x3d\x69\x95\x7f\xed\xb6\xba\x32\xe8\x2e\x19\x02\x4a\xad\x11\x3b\x0f\x89\xdf\xbb\x2a\x75\x3a\x13\xb5\x1b\x45\x4f\x8a\xe8\xc1\xc8\xb1\x5d\x89\x1c\x8b\x21\x03\x31\x64\x20\x86\x0c\xec\x54\xc8\xc0\xf2\xa7\x33\x6d\x4e\x31\x7f\x55\x64\x09\x79\x14\x66\x63\x59\x42\x3a\x9c\xb6\xbe\x1b\x9a\xc0\x35\xa5\xbe\x36\xb2\x97\xec\x16\x7d\x01\xa5\xef\xbf\xb5\xae\xae\x30\xe6\xa8\xae\x6f\x70\xfb\xa5\xd8\xfc\x6e\xba\x71\xd9\xe7\xb0\x4d\x6e\xb7\x14\x88\x7b\x6b\x0b\x1a\xe7\xaf\x3f\xc0\xbd\x82\xee\x8b\x5f\x5c\xa5\x6e\x85\xc6\xaf\xee\x8f\x5f\xe5\xa7\xd0\x68\xc5\xd0\xc6\x37\xdc\x97\x28\x85\xfd\xbd\x2e\xaf\xb2\x5a\x96\xae\xc0\x65\x28\xd7\x6c\x99\xa6\xe0\x78\x0b\x63\x65\x8e\x5b\xf8\x51\x6d\x49\x51\x5b\x3e\x3e\x08\x1f\x1b\x24\xaf\x0d\x66\x5f\x0d\x65\xff\x4b\x83\xfd\xb3\x63\xaa\x31\x8a\xb0\x76\xe6\x46\x7e\x6e\xb8\x63\x83\x33\x72\xf5\x19\x69\x30\x70\x47\xf9\x12\x26\x7c\x42\x54\x93\x3f\xc9\x74\x35\xf1\x34\xbf\x83\xeb\x4d\x9e\x32\x52\xf6\x6c\x6b\x4e\xf8\xbc\x3c\xc6\xa6\x85\xfc\x7b\x3e\x98\x2c\xd1\x8f\xa3\x8d\xb7\x72\xa5\x37\x33\xf0\x46\x86\xbc\x9e\xc9\x7e\x36\xe4\x72\x1f\xcd\x5c\xb4\x5d\x8d\xab\x74\x15\x9b\x37\xbb\xad\xe4\x96\xd9\x4f\x39\x65\x3a\xf1\x15\x9c\xb8\x0a\xed\xab\xea\x45\xd6\xfd\x71\x55\xe3\x1f\xce\x7d\x26\x4c\x43\x93\xab\x2b\x35\x75\x4f\xb1\x6f\xc8\x36\x15\x3e\x05\x0e\xb5\x1d\x93\x16\x14\xf1\x46\xee\xa4\x14\xf4\x25\x27\x9f\x75\x1b\x20\x7c\x7d\x6e\x17\xaf\x56\xc2\xe1\xa6\x4d\xa1\x3a\x9b\xde\x47\x36\xb7\x3c\x6c\x69\x35\xd8\xb0\x96\x6c\xe2\xb8\xc6\x5b\x04\xca\x53\x70\x9c\x1c\xcd\x1d\x0e\x6d\x1c\xf7\x24\x42\x5b\xc4\x4b\xef\xbc\x9d\x83\xfc\xe8\x33\xa0\x48\x6e\xea\xdb\xae\x5a\xa1\xb1\x23\xec\x9a\x67\x58\xb6\x4e\x3d\xf2\xed\xcf\x90\xbf\x7d\x18\x40\xde\xb1\xb8\x56\xcc\x3e\x2c\x2c\xf0\xae\xb4\x1d\x06\xda\x71\xe0\x73\x39\x33\x3f\x7b\xc5\xd6\x69\xfe\x4e\x76\xdb\xbc\x78\x6c\xa1\x28\x7f\xed\x71\x6f\xc7\x12\xfa\x02\xa2\x2f\x20\xe6\x2a\x43\x5f\x40\xf4\x05\x44\x5f\xc0\xfe\xf1\x05\xec\xa1\x54\x5c\x3d\xe3\x0b\x88\x39\xa2\xd0\x17\x10\x7d\x01\xd1\x17\x10\x7d\x01\xb7\x23\x47\x54\x5f\xbb\xe0\x61\x12\x9b\x7e\x4e\x62\x53\xda\x81\x2e\x78\xe5\x67\xa1\x24\xa0\xdd\x49\x38\xc1\xa1\xdd\x21\x28\xc2\x44\x63\x68\x27\x79\xd3\x5a\xb1\x20\xc1\xd0\x65\xc3\x4b\x3f\x17\xda\x38\x41\x3b\xeb\x30\xb8\xf6\xbe\x74\xc6\x37\x49\x0e\x0a\x94\x27\xdf\x9b\x38\x0a\x1a\xd0\xbf\x04\x0d\x83\xdc\x7f\xdb\x93\xe0\x5f\xb7\x89\xd5\x47\x51\x43\xd4\x75\x97\xf8\xa5\x63\xb0\x4b\xb0\x29\x7e\xf0\xb6\xc6\x4a\x32\x0e\x07\xb6\xd0\xc8\x68\x18\x41\x57\xb2\x16\x5d\xc9\xbe\x9a\x81\x33\x62\x86\x1f\x83\x23\x7c\x86\x4f\xc0\xd6\x06\x1f\xcc\x08\x57\xb4\x53\x30\x15\xb9\xa2\x6d\xb9\x90\xf3\xc2\xb2\x7c\x1a\x4e\xc6\x2c\xcb\x5b\x2e\xa5\x75\x41\xe3\xd8\xcd\x0b\x9a\xfa\xe2\xa4\xb1\xf8\xc9\xff\xd2\x58\x42\xd0\xdc\x27\xfd\x05\x62\xce\x17\xf6\x72\x28\x74\xa4\xba\x1b\x09\x9d\xf0\xae\xce\x88\x9f\xce\x78\x98\x21\x6b\x45\xd6\x8a\xac\x15\x59\x6b\xff\xb0\x56\xd4\xc1\x52\x74\xb0\xde\x81\xd1\xe8\xdd\xdb\x15\xef\x5e\x64\xfe\xc8\xfc\x91\xf9\x23\xf3\x47\xe6\xdf\xd7\xcc\x1f\x0f\x79\xe0\x21\x0f\x3c\xe4\xd1\xa9\x43\x1e\x68\x52\x43\x93\x5a\xbf\x9a\xd4\xb6\x18\x38\xe1\xe6\xcf\x22\xe5\xeb\xf3\xe3\x3b\xc8\xed\x62\x36\x47\x92\xb6\x53\x2c\xb9\xfd\xde\xe2\xaf\x1d\x84\xe1\x20\x46\x6f\x6d\x74\x5e\xfe\xf7\x8b\x13\x41\xba\x33\xf2\xb7\x13\xe4\x7f\x3c\x1c\xc5\xea\x4d\xf1\x18\x97\x71\xce\xf3\xf7\xb2\xdb\x6a\xc2\xe3\xea\x3b\x23\x95\x18\x3a\x8e\xa3\xe3\x38\x3a\x8e\xa3\x31\x03\x8d\x19\x68\xcc\xe8\x27\x63\x46\xef\xb0\x7a\x84\xc8\x08\x91\x11\x22\x23\x44\x46\x88\xdc\xd7\x10\x19\x29\x17\x52\xae\x3e\xa5\x5c\x3b\xd2\x71\xfc\x69\x38\x2b\xc8\xdc\x71\x38\xca\xc9\xdc\x41\x28\xc0\x58\x43\x5f\x4e\xcd\x76\xb9\x23\xa7\xa4\x42\x4d\x79\x8d\xcf\xa6\x03\xb6\xfd\xe4\xa1\x3a\x7e\xe0\x61\xe2\xa0\x20\x73\x7a\x9a\x03\x7a\xee\xd7\xf6\x44\xd0\x2b\x72\x13\x0f\xf8\xd6\xfd\xe2\x97\x4e\x13\x2e\x01\xa4\xce\xc0\x29\x98\xaa\xf1\x16\xcf\xc3\x48\xb3\x2d\x8b\x6e\x4a\xe8\x2a\xde\xa2\xab\xf8\x97\x32\x70\x52\xcc\xe9\xc3\x30\xc9\xe7\xf4\x18\x6c\x61\xe4\xc1\x39\xe1\x27\x7e\x02\x8e\x45\x7e\xe2\x5b\x2b\x61\x5a\x38\x89\x4f\xc1\xf1\x98\x93\xf8\xd6\x8a\xb8\x59\x0f\xf1\xe6\x84\x4e\x52\xbc\xd4\x17\x41\xe5\xe7\xe1\x39\xf2\x4c\xee\xe9\x30\x66\xcc\x94\x54\xa6\xc4\xc8\xb2\x74\x85\xd5\x4e\xf1\x34\xdb\xa1\x63\x8a\x57\xd5\x56\x58\x8f\xf2\x05\x89\xaa\xab\x42\xa6\x3b\xae\xcd\x95\xb7\xdc\xde\x90\xd6\x77\x34\xb2\xcc\xff\x1a\x86\x49\x11\x59\x46\xad\xfa\xb6\xa7\xa9\xa6\x61\x55\x26\xd6\x26\x97\xa8\xaf\x4e\x4e\xf0\xa6\x64\x43\xd2\x74\x6c\x3d\xb8\x81\xba\x1e\xf9\xd9\x61\xf2\xc9\x21\xb8\x23\xf6\xcc\xa2\x7c\x26\x7b\x64\x73\x13\xc2\x23\x61\x91\x73\xb6\x3e\x1d\x16\x99\x3f\xcd\x1e\x9b\x8e\xca\x5b\x10\xc5\x35\xb8\xfd\xa2\xed\x4e\x9b\x66\x28\x99\xdb\x17\x62\xad\x43\xb9\xf9\xd6\xe0\x9b\xc4\x44\x7b\x02\xae\xf2\x89\x76\x19\xca\xf0\x48\xc3\x31\x1e\x6b\xd7\x82\x6c\xd7\x42\x83\x96\x68\x6a\x61\xad\xa4\x8f\xf1\xf3\xa4\x14\x8d\x6a\xf1\xca\x60\x68\xc7\x6a\x23\x97\xd9\x06\x75\x49\x5d\x76\x31\x83\x1f\x1a\x5f\x30\x83\x1f\x1a\x5f\xd0\xf8\x82\xc6\x97\x3e\x32\xbe\x60\x06\x3f\xcc\xe0\x87\xc6\x17\x34\xbe\xa0\xf1\x05\x8d\x2f\x3d\x61\x7c\xc1\x4c\x7c\x98\x89\x6f\xa7\x58\x73\x30\x13\x5f\x27\x32\xf1\xfd\xde\x08\x9c\x10\xdc\x6f\x89\x5d\x0b\xb3\xef\xf1\x3b\x1b\x79\x0d\x6b\xae\x6d\x5d\xb3\x97\x3c\xf2\xaf\x47\xc8\x4f\x0c\xc1\xdb\xf9\xa3\x61\xe2\x04\x4f\xae\x6f\x96\x6e\xac\x19\x7a\x55\x35\xe3\x5f\xae\x86\xba\xe4\x8c\x6b\x5b\x65\x7b\xa9\x10\x3b\xef\x33\x15\xaa\x18\xc3\xbc\x8c\xe1\x68\xff\x9c\xd8\x10\xd9\x0e\x0d\x4f\xf3\x7a\x3e\x55\xf5\x42\x7e\x3f\x7f\xa0\xc4\xfe\x23\x53\x2f\x44\xe6\x1a\xf9\xa6\xcb\x86\xe7\xf7\x3a\x1f\xbc\x0e\x73\x82\x0f\xce\xc2\x25\xce\x07\x79\x08\xa1\x16\xdc\xde\xf9\xb0\xbb\xc0\xb4\xbe\x54\x28\xb8\xaf\x3e\xab\xbb\x95\x00\xaf\x98\x08\xd4\xf4\xde\x74\x72\x58\x20\x63\x12\x14\xf2\xf1\x10\xb8\xba\x8b\xc6\xdf\x18\x7a\x1d\x19\x20\x32\x40\x64\x80\xc8\x00\x91\x01\x22\x03\x44\x06\x88\x0c\x10\x19\x20\x32\x40\x64\x80\xc8\x00\x91\x01\x76\x99\x01\xee\x3c\x6f\x25\xa4\x8c\x48\x19\x91\x32\xee\x20\xca\xf8\x8d\x01\x78\x40\x50\x46\xdd\xf0\x34\x9b\x89\xd5\x28\x73\x9d\x00\x8e\xe4\x4b\x03\xe4\x37\x06\xe0\xf6\xf0\x86\x90\x27\xde\x5d\xa1\x7e\x72\x3d\x17\xdf\x91\x7f\xa0\x42\xfd\xf3\xc1\xed\x92\xfa\x4d\xcf\xcd\x06\x5b\xc8\x36\xe6\x5b\xdd\x50\xd0\xd4\x86\x82\xa6\x9a\x29\xa8\xec\xc0\xfb\x04\xdf\xbb\x02\x97\x39\xdf\xbb\x08\xe7\xa1\xd4\x02\xdf\x8b\x7d\x67\x33\x9e\x7f\xe4\xcb\x07\xe0\xac\xe8\x01\x0e\x9c\x2c\xd5\x2c\x84\xf4\x26\xea\x0a\xd5\x74\x56\xd4\x62\x90\x5c\x30\x98\x54\x82\xfd\xbe\x48\x5e\x39\x40\x7e\x7e\x10\xb2\x41\x01\xd3\xc1\xf3\x8b\xc1\x83\xd9\x07\x5d\xaa\xea\x35\xf4\x21\x08\x77\x2c\x0a\xcb\x1f\x60\xb7\xcc\xd6\x16\xb1\x20\x4b\x48\xde\xdc\x5e\x07\xfb\x2d\x36\x7e\xd4\x3e\x61\x8b\x05\xdf\x59\x48\x56\x33\x95\xb0\xae\xa6\xc3\xd3\x32\x79\x44\xba\x16\x27\x8b\x8e\x61\x53\xf1\xee\xc0\x19\xb3\x61\x37\xc2\xb5\xfb\xeb\x03\xdd\x5b\xc8\x50\x85\xfa\x90\xfd\xc9\xbd\x9b\xf6\xe1\x43\x2e\x75\x4c\x55\xab\x4d\x77\x5c\xd3\x8d\x05\x79\xd7\xb6\xf4\x64\xe9\x29\x58\x80\x27\x6a\x8e\x4a\xb4\xa5\x2b\xf1\x10\x05\x1e\xa2\x68\xf1\x10\xc5\xe7\x32\x8d\xf3\xe3\x76\x48\xee\x3c\x2d\xce\x5d\xcc\xc3\x7b\xa3\x73\x17\x6d\x2a\x3b\x10\x5d\x8d\x65\x89\x53\xf5\xa1\x49\xc9\x96\x2a\xb2\x9a\x14\x7d\xf9\xcf\xde\xb6\xa9\xe8\xba\x5b\x46\x72\x53\x6b\xa5\xd5\xb8\xb8\xb0\x3d\xc2\xaa\x33\x61\xf8\x51\x50\xa5\x08\x2a\x0c\x05\xdd\x95\x50\xd0\x18\x03\x14\x63\x80\x62\x0c\xd0\x4e\xc5\x00\x2d\x7f\x3a\xd3\xe6\x40\x88\x57\xc5\x49\xcb\x47\x61\x36\x76\xd2\xb2\xc3\xc1\x15\xbb\xab\x25\x5c\x53\xea\xeb\x2c\x7b\xc9\x6e\xd1\x2b\x50\xfa\xcc\xad\x9b\xea\x11\xe3\x8e\xea\xfa\x06\x37\x7a\x0b\x0e\xb2\xf9\x5e\x68\xcc\x51\x7d\x6d\xa5\xeb\xca\xc5\xbd\xb5\x05\x8d\xf3\x7a\x1c\xe0\x7c\xe2\xbe\xf8\xc5\x55\xea\x56\x68\xfc\xea\xfe\xf8\x55\xcf\x77\x55\x9f\x56\x0c\x6d\x7c\xc3\x7d\x89\x52\xd8\xdf\xeb\xf2\x2a\xab\x65\x89\xa9\xb3\xe5\x9a\x5d\xd8\x14\x1c\x6f\x61\x1c\xcd\x71\x07\x11\x54\x69\x52\x54\x9a\x8f\x0f\xc2\xc7\x06\xc9\x6b\x83\xd9\x57\xc3\x75\xe1\xa5\xc1\xfe\xd9\x7b\xd5\xd8\xd4\x58\x3b\x73\x1f\x11\x6e\xf7\x65\x83\x33\xf2\x14\x1b\x69\x30\x70\x47\xf9\xf2\x26\x5c\x8a\x54\x93\x3f\xc9\xf4\x38\xf1\x34\xbf\x83\xeb\x54\x9e\x32\x52\xf6\x6c\x6b\x4e\xb8\x4c\x3d\xc6\xa6\x85\xfc\x7b\x3e\x98\x2c\xd1\x8f\xa3\x8d\x37\x85\xa5\x37\x33\xf0\x46\x86\xbc\x9e\xc9\x7e\x36\x84\xb5\x1f\xcd\x5c\xb4\x5d\x8d\xab\x7b\x15\x9b\x37\xbb\xad\xe4\x96\xd9\x4f\x39\x65\x3a\xf1\x15\x1c\xc3\x0b\xcd\xac\xea\x45\xce\x21\xe3\xaa\xc6\x3f\x9c\xbb\xdc\x98\x86\x26\x57\x5e\x6a\xea\x9e\x62\xdf\x90\x6d\x2a\x5c\x52\x1c\x6a\x3b\x26\x2d\x28\xe2\x8d\xdc\xc7\x2d\xe8\x4b\x8e\xc3\xeb\x36\x40\xf8\xfa\xdc\x2e\x5e\xad\x84\xbf\x56\xbf\x30\xb4\x07\xea\xaf\x21\x7b\xc8\x2d\xbc\x91\xa0\x7c\x12\x4e\x90\x63\xb9\x23\xa1\xd5\x2c\xcb\x67\x9d\x14\x01\xc9\x0a\xe4\x86\xd8\xb5\x8e\x1e\xdf\xff\x99\x71\x28\xcb\xe3\xfb\xfa\xaa\xc1\x5d\x00\x5d\x5a\x31\xb8\x68\x37\x6c\x2b\x22\xbc\x13\xab\x55\x5f\x65\x23\xe6\x06\x5d\x5a\xb1\xed\xeb\x09\xb7\xad\x90\xf4\x7e\x6d\x8c\xfc\xe9\x20\xbc\xbb\x6e\x59\x8b\x6b\xc5\xec\x44\x1d\xce\xfb\x98\x2c\xf8\x49\x51\xf0\x4c\xbc\xe0\xfc\x31\xf6\xc0\x74\xbd\xe2\x16\x8a\x9b\x3d\xd8\x66\x02\xfc\x77\x41\x15\xa3\xf7\x69\x78\x8a\x8f\xde\xab\x30\x07\x57\x1a\x8f\xde\xba\x6d\xb9\x56\x2c\x6c\x56\xe5\xd4\x91\xbc\x39\x9e\xbd\xf6\x42\xfa\x40\x7f\x1f\x99\xaf\x13\x79\x62\xb3\x9e\x97\xba\xd3\xa6\xf5\xce\x7e\x63\xef\x26\x5d\x3e\x59\x1f\x0b\x6f\xda\xeb\x53\xf2\x99\x6d\xef\xf8\x92\x0e\x4b\xf0\x7c\x8d\xaa\xd2\xf6\x9e\x47\x05\x06\xe1\x71\xeb\xc9\x5a\xbb\x20\x99\x96\x05\x2f\x5e\x84\x67\x23\x5e\xdc\x5b\x12\x90\x43\xe5\xe6\x24\x60\x9b\xa4\x5e\x22\x9d\xeb\xef\xdf\xb6\x89\x04\x7c\x38\xa4\xcb\x9b\x0a\xbd\x13\xe2\xb6\xed\x97\x79\xc8\x9d\x91\x3b\x23\x77\x46\xee\x8c\xdc\x19\xb9\x73\x7f\x72\xe7\x6d\x53\x24\x9a\x40\xd0\x7f\x72\xeb\x26\xaa\xc6\xc9\x14\x00\xbd\xa9\x02\x72\x9c\x13\x8a\x6d\xd5\x3f\x10\x4d\xf7\x9b\xd6\x83\x68\x1a\xd1\xf4\x36\xa3\xe9\x9e\x80\x7b\xdb\xb7\xe4\xa4\x12\xeb\x59\xb8\x44\x2e\xe4\x66\x42\x62\x3d\x12\x27\xd6\x9b\xbd\xa7\x0b\xfc\xfa\xa7\x9f\x83\x73\x82\x5f\x5b\xd4\xbf\x61\xbb\x6c\xd2\xd7\x7a\x88\x37\x08\x46\x61\x58\x15\x97\x89\x25\x8f\xfc\xc5\xb3\xe4\xdf\xec\x07\x12\x95\x10\xba\x90\xa7\xa4\xb3\x9b\x15\x45\xe4\xf7\xb3\xdb\xae\x84\x8f\x6f\x08\x24\x21\xef\xeb\xf1\x20\x12\x98\xd9\x0e\x03\x2b\x60\x66\x3b\x0c\xac\x80\x81\x15\x30\xb0\x42\x1f\x05\x56\xc0\xcc\x76\x98\xd9\x0e\x03\x2b\x60\x60\x05\x0c\xac\x80\x81\x15\x7a\x22\xb0\x02\x66\xb6\xc3\x28\x05\x98\xd9\x6e\xe7\x44\x29\x28\x53\x28\x0b\x80\x38\x03\xd3\x1c\x20\x9e\x84\x13\x70\xac\x21\x40\x8c\x91\x2a\xc9\x99\x0a\x12\x10\x35\x95\x8b\x27\x25\x45\xce\xb5\x67\xd3\x49\xe2\x14\x39\x2e\x49\xe2\x06\x6a\x26\xf1\xa1\xac\xd0\xc6\xe8\x9b\xb9\xd7\xf6\xd6\x25\x65\xb7\x07\x39\xf0\xac\x90\x8a\x8d\x88\x9f\xba\xc8\xc5\x04\xc6\x9a\x85\x4b\x70\xa1\xc6\x86\x73\x04\x0e\xb5\xd0\x1f\x68\xbe\x41\xc7\xbc\x16\x1d\xf3\xfe\x26\x03\x17\x85\x50\x38\x0b\xa7\xb9\x50\x38\x06\xad\x0d\x42\x78\x54\x78\xdf\x9d\x87\x52\xe4\x7d\xd7\x72\x61\x97\x85\x39\xfd\x02\xcc\xc4\xcc\xe9\x2d\x97\x76\xb3\xb9\xf3\x3a\x2b\xab\xf2\x7f\x34\x56\x57\x56\xdd\x27\x9d\x27\x62\x9e\x28\xf6\x72\x28\xb6\x26\xc5\xd5\x0d\x62\x6b\x26\xbc\xbb\xd3\x02\xac\x33\x0e\x78\x08\x76\x11\xec\x22\xd8\x45\xb0\xdb\x3f\x60\x17\xb5\xb7\x14\xed\xad\x77\xc8\x37\x3a\x3f\x77\xc5\xf9\x19\x0d\x0c\x68\x60\x40\x03\x03\x1a\x18\xd0\xc0\xd0\xd7\x06\x06\x3c\x03\x83\x67\x60\xf0\x0c\x4c\xa7\xce\xc0\xa0\xfd\x0e\xed\x77\xfd\x6a\xbf\x2b\x57\xda\x7c\xfc\x2b\x8d\x30\xe7\xeb\x13\xe6\x3b\xc8\xed\x62\x36\x47\x92\xb6\x59\xda\x9c\x02\x95\x1b\xc2\xe8\x1d\x98\x0f\x81\xfc\xfc\x30\x4c\x08\xf7\x79\x77\x49\xd5\x0a\x41\xf3\xd6\xc6\x7e\x71\x6d\x93\x2e\xb1\xdd\xb1\x55\xf1\xc8\x3f\x1c\x26\xdf\x3a\x04\x77\xb2\x07\xa6\xe3\xf7\x2f\xae\x15\xb3\xa3\x9b\xfb\xcb\x5f\xb5\x4d\x5a\x12\xe5\xe4\x27\xd9\xad\x57\x6b\x0b\x59\x28\xc6\xee\xb9\x68\xbb\xd3\xa6\x19\xd2\xf6\x5e\xf7\x9f\x2f\x3f\x07\x33\x62\xec\x9f\x82\x29\x3e\xf6\x0f\xc3\x24\x1c\x6c\x68\x57\xe1\x4d\xbe\x56\x2c\xc4\xbe\xb8\x2d\x06\x60\x3d\x7d\x98\x4f\x93\xb3\x72\x1c\x37\xec\x77\x69\x5c\x89\x55\x2e\x71\x6c\x04\xb3\x30\xe2\x61\x01\xcc\xc2\x88\x36\x25\xb4\x29\xa1\x4d\xa9\x8f\x6c\x4a\x98\x85\x11\xb3\x30\x22\xcb\x47\x96\x8f\x2c\x1f\x59\x7e\x4f\xb0\x7c\xcc\x91\x88\x39\x12\x77\x0a\xbd\xc4\x1c\x89\x9d\xc8\x91\xf8\x07\x03\x90\x15\x0c\x4f\xb3\x6d\x57\x37\xac\x04\xbd\x23\xbf\x3c\x40\x7e\x71\x00\x6e\x8d\x5f\xcb\x66\x2b\xdc\xd2\xb3\x6c\xbb\xab\x61\x53\xaa\x0a\x27\x42\xf9\xbb\x2b\xd4\x9f\x89\xdd\x3c\x3d\x37\x7b\x89\x5d\xe8\xc1\xa4\x88\x06\x5c\x11\xbc\xed\x12\x5c\xe0\xbc\xed\x2c\x9c\x86\x93\xad\x25\x45\xe4\xdf\x98\x9a\x0d\xf1\xcf\x46\xe1\x72\xe3\xb6\x0e\x02\x8e\xf0\x3e\x6a\x14\x76\x84\x5b\x56\xc3\x80\xd9\xff\x72\x94\x7c\xeb\x2e\xb8\x33\x5e\x5a\xe8\xa6\xfc\xb1\x8c\x9c\x06\xd1\xa8\x53\xad\x60\x61\x09\x90\xea\x65\x56\x5c\x21\x66\x7b\x9d\x0a\x95\xbc\x61\xfe\xf8\x70\x44\x30\x12\x5b\x52\xdb\xa1\xa1\x67\x95\xe7\x53\x55\x1f\x8b\x54\x48\xae\x26\x4b\x85\x83\x69\xa1\x91\x6e\x3c\x9c\xd8\x8e\xc4\xca\x2e\xe4\xc5\xeb\xe2\x43\x67\xc3\x79\x0f\x5e\xd9\x5e\xa7\xb8\xd7\x61\x4e\x8c\xaa\x59\xb8\xc4\x47\xd5\x34\x9c\x85\xd3\x2d\x8c\x2a\x2e\x37\x2e\x30\xb5\x3d\x15\xe9\x36\x8e\xc1\xc3\x2b\xb6\x45\x47\xf9\x3a\x63\x53\xd2\x5c\xde\x01\x1b\x6d\x1a\x08\x73\x11\xe6\x22\xcc\x45\x98\x8b\x30\x17\x61\x2e\xc2\x5c\x84\xb9\x08\x73\x11\xe6\x22\xcc\x45\x98\x8b\x30\xb7\xcb\x30\x77\x12\x0e\x92\x42\x6e\x2c\x74\x21\xbb\x3d\x1e\x6a\x95\x6f\xde\x36\xc6\x54\xdd\x79\x6e\x67\x88\x98\x11\x31\x23\x62\xde\x41\x88\xf9\x43\x83\xa0\xa4\x45\x59\x26\xbf\x35\x40\x7e\x73\xa0\x6e\xbc\x85\xbb\x2b\xd4\x4f\x6a\x01\xe2\x4b\xf2\x4a\x85\x6e\x0c\x9b\x3c\x3d\x37\x1b\xec\x3c\xdb\x18\x58\xa1\x6d\xd0\x79\x6b\x89\x2c\x37\x87\xce\xc1\x77\x36\xe3\xf6\x49\x5e\xcd\xc3\x82\xe8\x04\x4f\x64\x89\x8c\x7a\x40\x64\xa7\xdc\x9c\x3b\x6b\x6c\x7d\xe6\xcf\x69\xaa\xa3\x6a\x86\x6f\x44\x14\xfa\x8d\x51\xf2\x03\xbb\xe0\x36\x79\x3d\xca\x67\xfc\x53\xcd\x10\xe8\x99\xf9\x59\x99\xb6\x72\x46\x14\xbc\xde\x13\x38\xfa\x20\x7f\x5d\x90\x50\x53\x7e\x51\x84\xa2\x37\xd6\x1a\xb9\x74\x0b\x5c\x7a\x39\x9d\x4b\xcf\x90\x69\xc9\xa5\x93\xe3\x56\x22\xe9\x8d\x1d\x51\x27\xef\x2a\x02\x6a\x04\xd4\x08\xa8\x11\x50\x23\xa0\x46\x40\x8d\x80\x1a\x01\x35\x02\x6a\x04\xd4\x08\xa8\x11\x50\x23\xa0\xee\x32\xa0\x3e\x0b\xa7\xc9\xc9\xdc\x89\x10\x36\xbf\x27\x0e\xa8\x37\x6e\xe5\x90\x56\x23\xad\x46\x5a\x8d\xb4\xba\xab\xb4\xfa\x8f\x87\xe1\x7e\xd6\x75\x13\x6b\x01\x12\x65\xf3\xcb\xd0\xa8\xaa\x69\x4c\xff\xf1\xc8\x2f\x0f\x93\x9f\x1d\x82\xdd\x9a\xed\xd2\xc5\xb5\x62\xf6\x03\x72\x81\xb5\x74\x63\xcd\xd0\xab\xaa\x99\x00\x9e\xa1\x32\x3b\x2f\x4a\x99\x16\xa5\xb4\x05\x72\x16\xf2\xe3\xd2\x6b\xd6\xa5\x0b\xc5\xe4\x0b\x2e\x1b\x9e\xbf\xd3\x22\x20\x6c\x07\xa3\xdc\x57\x9f\x51\xde\x4a\x80\x57\x4c\xc4\x44\x98\x4b\xe7\x94\xe3\xe4\x80\xe4\x94\xb9\x9c\x64\x93\xc9\x0e\xc1\xf8\x07\x48\x24\x91\x48\x22\x91\x44\x22\x89\x44\x12\x89\x24\x12\x49\x24\x92\x48\x24\x91\x48\x22\x91\x44\x22\xb9\x9d\x44\x12\x71\x1f\xe2\x3e\xc4\x7d\x7d\x8c\xfb\xbe\x7b\x14\xe6\x84\x5f\xa4\xaa\x33\x55\xd6\xb0\x2d\x97\x56\x0c\x36\x2f\x1b\x1f\xce\xe7\x1b\x47\x95\xa9\x2b\x37\xe8\xd2\x8a\x6d\x5f\x4f\x6c\x00\x3d\xf2\x1f\x46\xc8\x8f\xec\x82\xfb\xeb\x96\x18\xfa\xb5\x7e\x57\xa6\x39\x70\xb8\x10\xbe\xec\x49\xf1\xb2\x99\xf8\xcb\xda\x04\x12\x67\xf8\x03\xd3\xf5\x2a\x2c\x1d\x6b\x37\xaf\xc6\x65\xc3\xf3\x11\x2f\xb6\x88\x17\xff\x5e\x3a\x5e\x7c\x86\x3c\x2d\xf1\xe2\x66\xc3\x54\x82\xc7\xcd\xbb\x0a\x0f\xf0\x23\x8d\x44\x1a\x89\x34\x12\x69\x24\xd2\x48\xa4\x91\x48\x23\x91\x46\x22\x8d\x44\x1a\x89\x34\x12\x69\x24\xd2\x48\xa4\x91\x48\x23\x91\x46\x6e\x1f\x8d\xfc\xf9\x51\x38\x2f\x23\x84\x52\x57\x96\x42\xbd\x58\x2e\x25\xc1\x1f\xe3\x17\x8d\x8a\x65\x58\x95\x40\x5a\x07\x67\xb2\xff\x72\x84\xfc\xab\x5d\xf0\xce\xf8\x8d\x8b\x6b\xc5\xec\x67\x9a\x3a\x92\x1d\x3d\x34\x2f\x4a\xbf\x1a\xe4\x90\xee\x81\x93\xd9\x63\xc2\xe5\x31\xf6\x61\x0b\xc5\x86\x35\x46\x24\xd9\xc2\xa9\x6c\x33\x1d\x47\xce\x92\x4b\x41\xb4\xd0\x8d\xe3\x34\x38\x9a\xdd\xa8\x53\xd0\x13\x12\xd9\x23\xb2\x47\x64\x8f\xc8\x1e\x91\x3d\x22\x7b\x44\xf6\x88\xec\x11\xd9\x23\xb2\x47\x64\x8f\xc8\x1e\xb7\x93\x3d\x5e\x84\xf3\xa4\x94\x3b\x17\x1e\xad\x7e\x38\x71\x36\xbb\xd1\x5e\x6e\xe3\x11\x6d\x64\x98\xc8\x30\x91\x61\xf6\x31\xc3\xfc\x9f\x03\x70\xaf\x8c\x34\xa9\xad\x50\xbd\x6a\x26\xc2\x7d\x4e\x90\x2f\x0c\x90\x5f\x1d\x80\xb7\x47\x17\x17\xd7\x36\x09\xf2\x79\x6f\x85\xfa\xf3\xe1\xad\x0b\x18\xdf\xb3\x41\x7c\xcf\x37\x46\xe1\xb4\xf4\x63\x75\x1c\x2f\x42\xc5\x0d\xe2\x79\xea\xd4\x31\xed\x75\xa6\x3e\x85\xc8\xf8\x3b\x47\xc9\xef\x0e\xc1\x6e\xf6\x38\xeb\x91\x4f\x34\x83\x8a\xcf\x87\xc5\xf4\x04\x1b\x7e\x40\x78\xb1\x3a\x8e\xb7\x10\x0b\xd6\x19\x55\x12\x71\xf0\x46\x1c\x7c\x25\x9d\xf6\x1e\x20\xa3\x81\xf3\xa9\xe3\x78\x12\xef\x46\xad\x9a\xe0\xb9\xa9\x78\x19\x81\x2f\x02\x5f\x04\xbe\x08\x7c\x11\xf8\x22\xf0\x45\xe0\x8b\xc0\x17\x81\x2f\x02\x5f\x04\xbe\x08\x7c\x11\xf8\x76\x19\xf8\x1e\x83\x23\xe4\x50\xae\x18\x02\xdf\xbb\xe2\xc0\x37\xda\xdd\x61\x10\x4e\x64\xc8\xc8\x90\x91\x21\x77\x95\x21\x7f\xd7\x28\x5c\x6a\x9c\x32\x6a\x73\xb4\x29\x9f\x70\x6c\xd3\xd0\x0c\xea\x91\x9f\x1d\x21\xbf\x3a\x04\x6f\x4f\x64\x96\xca\xae\x37\x77\xf6\x5e\xa6\x97\x9a\x63\x65\xb5\x27\x31\x51\xe0\xc0\x1a\x4f\x5c\x15\xa1\xca\xc4\xfb\xf0\x4c\xfd\x4d\x9c\xa9\x7f\x2e\x1d\x6b\x9e\x24\x27\xe2\xe4\x52\x22\xce\x0d\x03\x4e\xf2\xce\x44\xd7\x20\xc5\x44\x8a\x89\x14\x13\x29\x26\x52\x4c\xa4\x98\x48\x31\x91\x62\x22\xc5\x44\x8a\x89\x14\x13\x29\x26\x52\xcc\x6e\x53\x4c\x84\x91\x08\x23\x11\x46\x22\x8c\xec\x20\x8c\x7c\xfd\x39\xb8\x20\x60\xa4\xbb\xa4\x6a\x85\x00\x48\xd5\xc4\x07\x95\x59\xd4\x1b\x40\x49\xd7\x36\xa9\x47\xfe\xcf\xb3\xe4\xe3\xfb\x21\xcb\x8a\x99\x8e\x97\x12\xe5\x4c\xcf\x09\x45\xd5\x95\x4b\x6c\x20\x83\x03\x7f\xcb\xab\xb6\x49\xf3\x07\xd8\x3d\x57\x6b\xcb\xd8\x98\xa4\x9c\xdd\xdc\xe3\xfc\xb0\x84\x18\x0d\x31\x5a\x09\x31\x1a\x62\x34\xc4\x68\x88\xd1\xfa\x06\xa3\x95\x7a\x06\xa3\xb5\xbd\x26\x2d\x63\xb4\x12\x62\x34\xc4\x68\x88\xd1\x10\xa3\x21\x46\xeb\x3e\x46\x2b\xf5\x35\x93\x2a\x21\x93\xea\x1c\x93\x2a\xf5\x3a\x93\x2a\xed\x40\x26\x55\x7e\x16\x4a\xc2\xef\xea\x24\x9c\xe0\x7e\x57\x87\xa0\x08\x13\x8d\xfc\xae\x0a\x1c\x5c\x05\x90\xa9\x70\xd5\x36\x9b\x3a\x54\x7c\x4d\x4b\x77\xa2\x3a\x47\xce\x48\xc7\xa9\x86\x70\x4c\x3a\x50\xb1\xb7\xc6\x8f\x8a\x8a\xca\xc0\xb5\xf7\xd4\x77\xe7\xda\x4d\x76\x71\x4f\xae\xdc\x2b\x7b\x37\x25\x66\x6f\x17\x6b\x93\xa2\x0a\x38\x36\x2e\xfe\xd9\x6d\x3c\x26\x68\x16\x77\x7e\x23\x43\x4b\xb6\xbe\x9e\xe5\xff\x55\x32\xf9\x71\x38\xb0\x85\x6e\x29\xfd\xe0\x00\x7c\xff\x00\x79\x65\x20\xfb\x91\x50\x14\xfd\x65\xe6\x49\xb6\xd0\x4b\xd9\x3f\xc6\x9d\x16\x79\xbc\x45\x21\x3b\x12\xfb\x8d\x38\x83\x5a\xa2\x8a\xc3\x9a\x9b\x29\x79\x05\x65\xda\x52\x0c\x4b\xec\xf4\x6d\x57\xa9\x5a\x21\x2c\xd0\x15\xdd\x5d\xbf\x5a\xb5\x14\xdd\x70\x29\x9b\x30\x34\xdc\x81\xb2\x85\x84\xaf\xd4\x72\x0b\x1e\x28\xdc\x72\xd3\xa3\x2c\x57\x5d\xae\xd4\x39\xae\xad\x51\x8f\x2f\xa9\x72\x7e\xba\x41\xc4\x50\x9e\x8b\x46\x28\xcb\x7c\x0d\x9c\x52\xc6\x95\x69\xd3\x9c\xe2\x0b\xa6\xee\xae\x2b\x6e\xd5\x62\x9b\x31\x36\xc3\x02\x2d\x41\x16\x47\xf5\xdc\x2d\xa2\x6a\x71\x71\xf2\x7d\x03\xf0\x8f\x07\xc8\xcb\x03\xd9\x7f\x18\x36\xd0\x1f\x66\xb8\x8e\xf5\x98\x6a\xa9\x15\xea\x8a\xdd\x82\xb0\xff\x78\x9e\xad\x19\x7c\x01\x0c\xf5\x72\x95\x6f\x6c\x6c\x57\x61\xfa\x91\xbf\x1e\x6a\x04\xab\xea\x75\x56\x7f\x7f\x85\x7a\x34\x98\xf3\x4c\x0e\x05\xc4\x84\x43\x83\x25\xaa\x70\x69\xc3\x75\x70\xdb\x55\x8a\x93\xc7\xd9\xbd\xae\xaa\x71\xb4\xc3\xb6\xaf\x62\x86\x73\x3d\x99\xa9\x34\xaa\x61\x09\x63\x10\xd7\x43\xa3\x7b\xf9\x76\x57\x82\x27\xb6\x7b\x0a\xa4\x76\xc5\x36\x55\xab\x52\xb0\xdd\xca\x84\x73\xbd\x32\x51\xb5\x0c\xcd\xd6\xe9\xc4\xbe\x59\x6f\x8e\x95\x52\xc8\xdd\x1a\xff\xd6\x38\xfb\xff\x6a\x06\xce\x08\x99\x70\x0c\x8e\x70\x99\x30\x01\x5b\x1b\x7c\x30\xc3\x9e\x2f\x92\x53\x30\x05\xbb\x67\x84\xca\xb7\xf5\x42\xce\xb3\x42\x26\xc9\x69\x38\x09\x7b\xa6\x35\xb6\xae\xb4\x52\x4a\x9a\x68\x6a\x2c\x35\x1c\xdb\xf3\xa1\x2b\xa2\x2b\xff\xd7\x63\x9b\x8a\xa6\x7b\x84\x82\xac\x68\xb6\xc9\xb6\xbb\x72\xf9\xe2\x62\xea\x98\xb8\xd4\x50\x4c\xcd\x84\x8f\x74\x54\x60\x3d\x01\x57\x61\x2e\x2e\xb0\xf2\x25\x38\xd7\x82\xf7\xee\x79\xfe\x35\x8f\x73\x4a\xeb\x21\xcf\x45\x9e\x8b\x3c\x17\x79\x6e\x1f\xf1\x5c\xd4\xda\x52\xb4\xb6\xde\x01\xde\x5f\x1d\x80\xaf\x0c\x90\xdf\x1e\xc8\x7e\x29\xec\xaa\x4f\x0c\x3c\x11\xdf\x62\x1a\x96\xe2\x89\x6d\xa2\xb2\x44\x97\x85\x75\x38\x44\x31\xd1\x92\x25\x67\x09\x6f\xac\x98\x7e\x68\xd9\xd6\xb8\x45\x2b\x2a\xef\x12\xb9\xcb\x8c\xeb\x91\x02\xca\x86\x83\x41\xaa\x08\xc6\xea\x2a\xd5\x99\xa6\x6a\xae\x47\x66\xdb\x48\xb4\x1b\xe6\x98\xdc\x7c\xf2\xcf\x55\x2a\xae\xaa\xf1\x71\x62\xd8\x7a\xb8\xf0\x44\x8b\x03\xb7\x88\x07\xfd\x52\xf5\x58\x25\xe3\x0d\xa5\xb2\x27\x83\x0f\x92\x2f\x59\x16\xf3\x2d\x28\xa2\x20\xea\xb9\x4a\x55\xab\x6e\x1d\x73\x84\x57\x61\x8e\xd7\xa0\xde\xa6\x1a\xed\x0a\x68\x57\x40\xbb\x02\xda\x15\xd0\xae\xd0\xd7\x76\x85\xcf\x0f\xc0\x9b\x03\xe4\x8d\x81\xec\xeb\xe1\x6a\xfb\x43\x03\xe7\x63\xc7\x68\x1d\x93\xaa\x1e\x0d\xa7\xfe\x9c\x6b\x3b\x6a\x85\xaf\xc3\xe2\xa4\x65\xc2\xab\x28\xe8\xee\xe8\x1c\x2e\xeb\xf0\x62\xe1\x58\x41\x99\x17\x72\x44\x2c\x92\x0e\xb5\xd8\x30\x8d\x56\x11\xaa\xd8\xae\xb3\xa2\x5a\x81\x97\x93\x5b\xa5\x13\xcb\xaa\x19\x68\xff\x39\x71\x35\xa7\x2c\x1b\x96\x6a\x1a\x1f\x08\xc4\xf7\x12\x55\x54\x9d\x43\x7a\x7b\x42\x30\x5b\x3d\x52\x2d\x45\xe1\xc3\x5e\xf4\x90\xd0\xb7\x0b\xca\x05\x83\x8b\xa4\x58\xc5\x6d\x77\xe3\x97\x45\x86\x11\x5f\xa8\xfb\x5c\xfb\xb3\xfd\x95\x42\xee\x36\x51\x9f\xf3\xc1\x87\x24\xdd\xa5\xbe\x63\x08\x3e\x3c\x44\x3e\x34\x94\xfd\x46\xe8\x33\xf7\xc5\xc1\x27\xa5\x1c\x64\x43\x74\xc5\xbe\xa1\x54\x54\x77\x49\xad\x24\xd8\x43\xa8\xa8\x51\x77\xd9\x76\x57\x59\x5b\xd4\xad\xe9\xe3\x35\x2f\x6f\x5c\x51\xae\xd6\x04\x3a\x89\x23\xbe\xca\x60\xfa\x82\x66\xe8\x91\x62\xcd\xd7\x46\xbe\xcd\x09\x5b\x97\x2d\x4e\x72\xe5\x08\x56\xbf\x42\xac\x19\x03\xb9\x19\x5a\x23\x42\x4f\xb9\xe4\xcb\x0a\x8a\x00\x4c\x5c\x16\xc7\xb5\xd5\x61\xf1\x0d\xc3\x6c\xcf\xc3\xff\x4a\x0e\x0c\xef\xa4\x32\x5c\x52\xb5\xeb\x15\xd7\xae\x5a\x3a\xbb\x8b\xbb\xa8\xf1\x9b\x6a\x1a\x4e\x28\x2b\x52\x03\x4a\x16\x12\x7c\xc1\x52\x58\xd2\x49\x65\xf8\xa2\xed\xd2\x58\xb1\x8a\xa6\x7a\x9a\xaa\xb3\xaf\x97\xed\x23\x9c\x12\x79\x79\x9e\x50\xa7\x37\x14\xb8\x1c\x96\x51\xc8\xdd\xee\xd4\x8e\x9b\xb8\x6e\x83\x66\x3b\x34\xdb\xf5\xa9\xd9\xae\x5c\x81\xcb\x02\x77\x5f\x80\x19\x8e\xbb\x4f\xc3\x49\x38\xd1\x02\xbc\x9c\xf7\x55\xbf\xea\xf5\x86\x31\x2c\x5f\x1f\x6b\xdf\x41\x6e\x17\x22\x23\x12\xe7\xb0\x03\x8f\xbe\x90\x4f\x0d\xc3\x1d\x6c\xe8\xc6\x82\x78\xd8\x3a\xf5\xc8\x0f\x0c\x93\x97\x87\x60\xb7\x66\xbb\x74\x71\xad\x98\x75\x9a\x8c\xce\x61\xeb\xb4\x4d\x41\x39\xee\x10\x59\xe5\x6c\x97\x2e\x14\x59\xb1\x18\x7b\xa3\xfe\x24\xb8\x98\x3e\x09\xf6\x91\x07\x65\xc4\x0c\x5b\x4f\x8c\xf1\x20\xc2\x46\x2e\x07\x4d\xc5\xf0\xc0\x18\x1b\x78\x38\x00\x63\x6c\xa0\x31\x09\x8d\x49\x68\x4c\xea\x23\x63\x12\xc6\xd8\xc0\x18\x1b\x08\xf1\x11\xe2\x23\xc4\x47\x88\xdf\x13\x10\x1f\x23\x60\x60\x04\x8c\x9d\x82\x2d\x31\x02\x46\x27\x22\x60\x7c\x6e\x18\xee\x11\x11\x30\x96\x38\xb4\x0b\xe9\xdd\x35\x7b\xc9\x23\x3f\x3e\x4c\xfe\xc5\x10\xec\xe1\x97\x16\xd7\x8a\x59\xbb\x39\x7a\x57\xb6\x97\xda\x04\xef\xf6\xf1\x07\x4a\xec\x3f\x0b\xc5\xb2\xbd\x74\xd9\xf0\xfc\x8b\xb6\x3b\x6d\x9a\xa1\xf3\x6c\xfb\x72\xc5\xbd\x85\x60\x5e\x53\x81\x74\x1f\x49\x27\x7e\x0f\x93\x7d\x75\x30\x1f\x1f\x0f\x12\x77\x97\xed\x25\xc4\x79\x88\xf3\x10\xe7\x21\xce\x43\x9c\x87\x38\x0f\x71\x1e\xe2\x3c\xc4\x79\x88\xf3\x10\xe7\x21\xce\x43\x9c\x87\x38\x0f\x71\x1e\xe2\x3c\xc4\x79\x5d\xc3\x79\x3f\x37\x02\xa7\x05\xce\xd3\xa8\x2b\x4b\xa1\xde\x86\xfc\x5a\xf1\x8b\x46\xc5\x32\xac\x4a\x20\xad\xc9\xdf\x0e\x93\xaf\x0f\xc1\x3b\xe3\x77\x2c\xae\x15\xb3\x1f\xce\x34\x87\xfe\x66\xa2\xe7\xe6\x45\xc9\x57\x83\x93\x87\x6d\x01\x82\x07\x85\x37\x5f\xac\x76\x0b\xc5\x86\xef\xdc\x19\xae\x7e\x8d\x58\x5e\xfb\xb1\xe1\x96\xe8\xa0\x99\x4e\x07\x67\xc9\x25\x49\x04\xeb\x8c\x36\xc9\x07\x1b\x76\x4e\xc2\x7f\x10\x09\x22\x12\x44\x24\x88\x48\x10\x91\x20\x22\x41\x44\x82\x88\x04\x11\x09\x22\x12\x44\x24\x88\x48\x10\x91\x20\x22\x41\x44\x82\x88\x04\x11\x09\x62\xb7\x08\xe2\xb7\x2f\xc2\x79\x41\x10\x75\xc3\xd3\x6c\x26\xf4\x22\x7c\xb8\x44\xfd\xc6\x89\xb0\xa8\xa5\x3b\xb6\x61\xf9\x9e\x69\x68\xd4\x23\x3f\xf3\x1c\xf9\xf4\x7e\xb8\x3d\x2c\x65\x51\x3e\x9e\x3d\xb0\x79\x22\xac\x0b\xb2\x98\x79\x56\x8c\xc8\x88\x75\x3e\x28\x63\x41\x14\x11\x05\xce\x4c\xdc\xdc\xe3\xa8\x0f\x33\x62\x21\xe3\xc2\x8c\x58\xc8\xb8\x90\x71\x21\xe3\xea\x23\xc6\xd5\x43\x01\x42\x7b\x86\x71\x61\xe4\x4a\x64\x5c\xc8\xb8\x90\x71\x21\xe3\xc2\x8c\x58\x18\x5a\xef\xad\x83\xa4\x7a\x3e\xb4\xde\x8e\xcc\x88\x75\x0d\x1e\x17\x9e\x50\x8f\xc0\x45\xee\x09\x75\x0e\xce\xc0\xa9\x86\x29\x67\x22\x6e\x25\x89\x53\x21\x41\x89\x9a\x4a\x8f\xb5\x94\xee\xfc\x74\x96\x9c\x96\xce\x4f\xb5\xa0\x4c\x7a\x3e\x25\xde\x1a\xf7\x76\xe2\x95\x4a\xcf\x8e\xf5\xb9\xbd\xf5\xe8\xd9\xdd\x41\x52\x2c\xab\x86\x94\xc9\xf4\x58\xdd\x66\x65\x02\x6d\x5d\x81\xcb\x50\xae\x49\x8f\x35\x05\xc7\x5b\xed\x23\xcc\xba\x80\xb9\xb2\x5a\xcc\x95\xf5\xdd\x03\x8d\x1d\x2a\x1f\x15\x62\xe4\x3c\x94\xb8\x18\x39\x05\x37\x31\x44\x85\x77\x66\x91\x7b\x67\x86\x19\xb5\x6e\xae\xc4\xf7\x8a\xf4\x5a\x65\x78\x24\x96\x5e\xeb\xa6\x8a\x6c\x36\xa5\x56\x73\xe2\xae\x29\xb1\xd6\x48\x26\xe6\xff\x6a\xac\x9e\x38\xcb\xd5\x4d\xa4\x95\x94\x6c\x32\xa3\x56\xad\x64\xab\x97\x48\xab\x93\x32\x0e\x33\x6a\x21\x0f\x46\x1e\x8c\x3c\x18\x79\x30\x66\xd4\xc2\x8c\x5a\x98\x51\x0b\x33\x6a\xa1\x5d\x02\xed\x12\x68\x97\x40\xbb\x04\xda\x25\xda\x62\x97\xc0\x8c\x5a\x98\x51\x0b\x33\x6a\x61\x46\x2d\x34\xfb\xa1\xd9\x6f\x87\x67\xd4\xea\x86\xfd\xec\x2d\x9e\x50\xeb\xbf\x3c\x0b\x85\x20\xa1\x56\x03\x8f\x7b\x26\x6f\x0c\x8d\xaa\x9a\xc6\xb6\x1e\x1e\xf9\x97\xcf\x92\xff\x6b\x7f\x94\x6b\x6b\x6c\x73\x47\xfb\x79\xf1\xf4\xb4\x78\x3a\x9f\x63\x77\xcb\x34\x59\x21\x4f\x4f\xde\x83\x0e\xf6\xe8\x60\x8f\x0e\xf6\x68\x50\x41\x83\x0a\x1a\x54\xd0\xa0\xd2\x33\x06\x95\xde\xb1\x17\x20\xc8\x46\x90\x8d\x20\x1b\x41\x36\x82\xec\xbe\x06\xd9\x48\xda\x90\xb4\xf5\x29\x69\xdb\x91\x0e\xf6\x6a\x63\x97\xd9\x8b\x02\x1b\x9e\x85\xd3\x1c\x1b\x1e\x83\x23\x70\xa8\xa1\x37\xaa\x66\xbb\x94\x43\xc2\x04\x35\xba\x6c\x78\x61\xe4\xd1\xb9\x74\x2e\x38\x4e\x0e\x44\xd9\xc4\x05\x09\x4c\x96\x97\x08\x1c\x9a\xea\x45\xff\xd2\xde\x08\x88\x85\xbe\xf3\xb5\xec\xeb\x21\x71\xa1\x4b\xf4\x4b\xc0\xaa\x0b\x30\x03\xd3\x35\x2e\xf3\x45\x98\xd8\x62\xe3\xa2\x37\x15\x7a\xca\xb7\xe8\x29\xff\xa7\x19\x28\x89\xd9\x7d\x12\x4e\xf0\xd9\x7d\x08\xb6\x3e\x00\xe1\x92\xf0\x83\x3f\x07\x67\x22\x3f\xf8\x96\x0a\x7a\x44\xb8\xbf\x4f\xc3\xd9\x98\xfb\x7b\x4b\x25\xa5\x59\x27\x9a\x93\x42\xa9\xb2\x27\x12\x53\x69\x0e\xf6\xf9\xff\x32\x16\x49\xa1\x7d\x75\x5d\xde\x6b\x24\x52\x41\xdc\x24\x24\x52\x3d\x4f\xf7\x8e\xca\x26\x74\x75\x47\x32\x8b\x64\x16\xc9\x2c\x92\x59\x74\x75\x47\x57\x77\x74\x75\x47\x57\x77\xb4\x10\xa0\x85\x00\x2d\x04\x68\x21\x40\x0b\x01\xba\xba\xa3\xab\x3b\xba\xba\xa3\xab\x3b\x1a\xe0\xd0\x00\xd7\x83\x06\xb8\xae\xbb\xba\x6f\xc1\x0d\xbd\xfd\xe0\x79\x27\x3a\xb6\xff\xee\xdd\x70\x6f\xe8\xd8\x6e\xeb\x81\x4f\xfb\x8b\x13\x1e\x6f\x70\xf2\xff\xdc\x4d\xbe\x30\x10\xe1\xf2\x07\x5d\xaa\xea\x8a\xb8\x16\x8c\x97\x48\x95\xbe\x62\xeb\x34\x7f\x27\xbb\x45\x1a\xef\x6c\x9d\x8a\x8e\x6b\x2f\x12\x2f\xcf\xc3\x71\x31\xac\x8a\x30\xc1\x87\xd5\x28\x0c\xc3\xc3\xa9\x96\x09\x56\x9f\xd4\x21\x74\x31\x7d\x58\xec\x23\x0f\xd6\x1f\x01\x62\xb0\xf0\xd7\x5c\xbb\xbf\xfe\x50\xbc\x85\x0c\x55\xa8\x0f\xd9\x97\xf7\x44\xad\xfa\x90\x4b\x1d\x53\xd5\xe8\xe6\x0d\x7b\xb7\xbc\xab\xb3\x6d\x5b\x3a\x09\x27\xe0\x58\x8d\x29\xb4\xd9\xc6\x45\xc6\x86\x06\xd0\x16\x0d\xa0\xdf\x9b\x69\xec\xf7\xd0\xfa\x64\x3f\x2d\xec\xa1\x47\xe1\x70\x64\x0f\x6d\xfe\xf1\xad\x89\x84\xba\x62\x20\xe1\x1e\xd1\x58\x24\x38\x55\x1f\x4a\xbf\xf6\xb6\x48\x24\x8c\x3b\xaa\xeb\x1b\xdc\xfc\x23\x36\x8e\x9b\xcb\x86\x77\x39\x3c\x13\x6f\xc7\x24\xc3\xbd\xb5\x05\x8d\xf3\x17\x1e\x60\x7f\x4e\xdd\x17\xbf\xb8\x4a\xdd\x0a\x8d\x5f\xdd\x1f\xbf\xca\x94\x5b\x9f\x56\x0c\x6d\x7c\xc3\x7d\x89\x52\xd8\xdf\xeb\xf2\x2a\xab\xe5\x56\x63\x1a\x6e\xa2\x49\xcc\xf1\xd3\x2a\x28\xa8\x52\x04\xd5\xc7\x07\xe1\x63\x83\xe4\xb5\xc1\xec\xab\xe1\x06\xf6\xa5\xc1\xfe\x11\x54\x35\xf8\x8e\xb5\x33\x37\x8b\x72\xc4\xcc\x06\x67\x74\x6c\x6d\xa4\xc1\xc0\x1d\xe5\xfb\x70\x61\x45\x57\x4d\xfe\xa4\x65\x5b\xe3\xe2\x69\x7e\x07\xb7\x01\x78\xca\x48\xd9\xb3\xad\x39\x71\x7e\xeb\x31\x36\x2d\xe4\xdf\xf3\xc1\x64\x89\x7e\x1c\x6d\x2c\x41\x4b\x6f\x66\xe0\x8d\x0c\x79\x3d\x93\xfd\x6c\xb8\x19\xf8\x68\xe6\xa2\xcd\xb6\x8e\x86\xa7\x54\x6c\xde\xec\xb6\x92\x5b\x66\x3f\xe5\x94\xe9\xc4\x57\xf0\x5d\x94\xb0\x24\x54\xbd\xc8\x1e\x3a\xae\x6a\xfc\xc3\xb9\x95\xd9\x34\x34\x89\x08\xa8\xa9\x7b\x8a\x7d\x43\xb6\xa9\xb0\xc2\x3a\xd4\x76\x4c\x5a\x50\xc4\x1b\xf9\x81\xbb\xa0\x2f\xf9\x6e\xa6\x6e\x03\x84\xaf\xcf\xed\xe2\xd5\x4a\x78\xc2\x6d\xbf\x96\x97\x2e\xd2\x1f\xa8\x2f\xd2\xf7\x90\x5b\xf8\x07\x42\xb9\x08\x13\x64\x3c\x77\x20\xdc\x13\xdc\xc6\x67\x8c\x9c\xbe\xac\xbc\xdc\x10\xfb\xa5\xa3\x4a\xfe\x17\x87\xe1\xee\x40\xc9\x17\x39\xe7\xc3\xf4\x50\xe4\xd3\xc3\xe4\xe3\x43\xd1\xba\x53\x6d\x2e\xb3\x7c\x70\x1c\xd8\x6b\x53\x26\xf9\x91\x1b\xd1\xfa\x15\x96\x7d\xd9\xf0\xfc\x8b\xb6\x3b\x6d\x9a\xa1\xa7\x4d\xfb\x96\xb4\x8e\x65\x90\x6f\x7b\xa2\xf8\xd4\xb1\xfc\x68\xfa\x58\x1e\x21\xfb\x6b\xc7\x72\xd8\xcc\xc9\x01\xdd\x4c\x3a\x7a\x4c\x10\x8f\x67\x7b\x31\x41\x3c\x7a\x90\xa1\x07\x19\x7a\x90\xf5\x91\x07\x19\x26\x88\xc7\x04\xf1\xe8\xb9\x83\x9e\x3b\xe8\xb9\x83\x9e\x3b\x3d\xe1\xb9\x83\x09\xe2\x31\x41\xfc\x4e\xf1\x55\xc0\x04\xf1\x9d\x48\x10\xff\xbd\x23\x22\x2e\x5d\xdd\x04\xf1\xb5\xac\x4f\xa4\x82\xff\x9d\x61\xf2\x85\x21\xb8\x35\x9e\xfd\x25\xbb\xbe\x35\xea\xc7\x83\x00\xb6\x89\xfc\x15\xf9\x03\xb1\x74\x32\x1b\xf2\x83\x21\x02\x4c\x47\x80\xcd\x50\xbb\x6b\xcf\xa6\x73\xc2\x29\x72\xbc\x8e\x67\x43\x53\x31\x21\x11\x0a\x22\x14\x44\x28\x88\x50\x10\xa1\x20\x42\x41\x84\x82\x08\x05\x11\x0a\x22\x14\x44\x28\x88\x50\x10\xa1\x20\x42\x41\x84\x82\x08\x05\x11\x0a\x76\x0b\x0a\xbe\x32\x0a\xa7\x04\x14\xf4\x7c\xdb\x55\x2b\x34\x42\x82\xaa\xe9\xac\xa8\x01\x18\x5c\xb3\xcd\xea\x2a\x55\x7d\x5f\xd5\x56\xd8\xfa\x1b\x9c\xfd\x21\x5f\x1c\x21\xff\x60\x17\xdc\x26\x9f\x5e\x0c\x1e\xcb\xfe\x44\x46\x76\x43\x0c\x0e\x5a\x81\x60\x0b\x32\x59\x2c\xf0\x52\xa7\xc3\x52\xdb\xc2\x09\xc7\x22\x6d\x86\x6b\x6c\x72\xed\x63\x0a\x51\xa4\xa6\x0d\x27\x34\xe3\x58\xd9\x85\xfc\x43\xfc\x75\xf3\xe2\x83\x16\xe4\xf7\xd4\xd6\xb4\xf7\xc1\x62\xc3\x13\x12\x6d\x27\x8e\x01\x58\x6c\xec\xdf\xca\x2b\x06\xd7\xf4\x74\xa8\x38\x4d\xce\x4a\x90\x98\x1c\x8f\x12\x23\xd6\x76\x43\xdc\x1f\x51\x74\x14\xb2\x45\x64\x8b\xc8\x16\x91\x2d\x22\x5b\x44\xb6\x88\x6c\x11\xd9\x22\xb2\x45\x64\x8b\xc8\x16\x91\x2d\x22\x5b\xec\x36\x5b\x3c\x0d\x27\xc9\x89\xdc\xb1\xf0\x34\xe3\x7d\xf1\xd3\x8c\xb5\x1b\xb9\xce\x9f\x6c\x44\x34\x89\x68\x12\xd1\xe4\x0e\x42\x93\xff\xfc\x79\x98\x15\x68\x52\xad\xfa\xb6\xa7\xa9\xa6\x61\x55\x26\xd6\x26\x79\x16\xe1\x46\x99\x75\x39\xe4\xb2\x2d\x5f\x35\x1d\x5b\x0f\x9e\xa3\xae\x47\x7e\x65\x91\x7c\x75\x3f\xdc\x11\x2b\x6a\x51\x16\x95\x3d\xb2\x79\xba\xdd\x47\xc2\x22\xe7\x6c\x7d\x3a\x2c\x32\x7f\x8c\x3d\x36\x1d\x95\xb7\x20\x8a\x8b\x22\xfd\x37\x78\xb0\xc7\xd1\x21\x26\xe3\x45\x7e\x86\xc9\x78\x91\x9f\x21\x3f\x43\x7e\xd6\x47\xfc\xac\x87\x32\x1a\xf4\x0c\x3f\xc3\x50\xfb\xc8\xcf\x90\x9f\x21\x3f\x43\x7e\x86\xc9\x78\x31\x16\xf8\x5b\x87\x57\xf5\x7c\x2c\xf0\x1d\x99\x8c\x77\x0d\xbe\x49\x78\x56\x3d\x01\x57\xb9\x67\xd5\x65\x28\xc3\x23\x0d\x43\x10\xc6\x48\x54\x41\x92\xa8\x42\x03\x62\x74\xd9\xf0\xd2\x8f\x75\xa6\xe4\xd3\xbd\x56\x49\x77\xbe\x3a\x4f\x4a\xd2\xf9\x2a\x56\x39\xe9\x79\xd5\xa0\x6a\x31\x07\x2c\xf1\x0d\x90\x7b\x05\xea\x63\x36\x25\x4c\xe2\xdb\x88\xa8\x9d\x10\x77\x6c\x27\x53\x13\x08\xec\x69\x78\x0a\x16\x6a\x22\xc8\x5e\x84\xf3\xed\xe8\x4b\x8c\x26\x8b\x61\xaf\x5b\x0c\x7b\xfd\xf1\x01\x78\x56\xa4\xda\x5d\x80\x27\x62\xa9\x76\x1f\x81\x36\x8d\xcd\xc6\x3e\xa3\x4f\x0a\xc9\x36\x07\x57\xb8\x64\x6b\xdf\x1b\x9f\x11\x41\xb7\xdf\x07\xf3\x51\xd0\xed\xb6\x95\x9e\x2e\x1a\x79\x92\xdf\xae\x89\xc6\xfc\x3f\x1d\xaf\x2f\x1a\xc7\xea\x66\x16\x6e\x24\x26\x67\xc4\xdd\x1b\xc5\x64\xbd\x74\xc3\xdd\x11\x98\x98\x77\x18\x21\x34\x42\x68\x84\xd0\x08\xa1\x31\xef\x30\xe6\x1d\xc6\xbc\xc3\x98\x77\x18\x8d\x21\x68\x0c\x41\x63\x08\x1a\x43\xd0\x18\xd2\x16\x63\x08\xe6\x1d\xc6\xbc\xc3\x98\x77\x18\xf3\x0e\xa3\xad\x11\x6d\x8d\x3b\x3c\xef\x70\xb7\x68\xf3\x56\x12\x1c\xef\xc4\x74\xc4\xdf\xf7\x2c\x1c\x16\xe7\x03\x84\xe7\x79\x2c\x98\x71\x83\xc3\x01\xe2\x3e\xf2\x5b\xcf\x90\xbf\x7e\x18\xf6\x8a\x7f\x2d\xae\x15\xb3\xfb\x36\x3f\x00\xc0\x83\x5c\xe4\xef\x65\x37\xf1\x3f\xbd\x85\x98\x41\x92\xff\x82\x2e\xfd\xe8\xd2\x8f\x2e\xfd\x68\x4d\x41\x6b\x0a\x5a\x53\xd0\x9a\xd2\x33\xd6\x94\xde\x31\x16\x20\xc5\x46\x8a\x8d\x14\x1b\x29\x36\x52\xec\xbe\xa6\xd8\x88\xd9\x10\xb3\xf5\x29\x66\xdb\x91\x2e\xfd\x4f\xc3\x59\x81\x06\x8f\xc3\x51\x8e\x06\x0f\x42\x01\xc6\x1a\xba\xa6\x4a\x0e\xb5\x56\x2c\x70\x2a\xd4\x94\xdb\xfe\xd5\x74\x1a\x38\x41\xc6\x65\x12\xa5\xb5\x9a\x90\xa7\x41\xd2\xa5\x04\x00\x83\xb4\xa3\x00\xb9\x2f\xef\x89\xd3\xaf\x77\x06\x7e\xf9\x96\x24\x5d\xf7\x8b\x1f\x3a\xcd\xba\x04\x9a\x3a\x03\xa7\x60\xaa\xc6\xd5\x3e\x0f\x23\xcd\xb6\x31\x7a\x4c\xa1\x3b\x7d\x8b\xee\xf4\x5f\xca\xc0\x49\x31\xbb\x0f\xc3\x24\x9f\xdd\x63\xb0\x85\x91\x07\xe7\x84\xeb\xfa\x09\x38\x16\xb9\xae\x6f\xad\x84\x69\xe1\xcd\x3f\x05\xc7\x63\xde\xfc\x5b\x2b\xa2\xf5\x53\x41\xc2\xf5\xbd\x39\xf1\x53\x57\xcc\x34\x92\x49\xf9\x5f\x1e\x8b\x8b\x97\x6c\x5d\xdf\x76\x21\x69\x86\xc5\xb5\x40\xd2\xd4\xf3\x5f\xef\x84\xcc\x41\x6f\x75\xe4\xab\xc8\x57\x91\xaf\x22\x5f\x45\x6f\x75\xf4\x56\x47\x6f\x75\xf4\x56\x47\xce\x8f\x9c\x1f\x39\x3f\x72\x7e\xe4\xfc\xe8\xad\x8e\xde\xea\xe8\xad\x8e\xde\xea\x68\x46\x43\x33\x5a\x0f\x9a\xd1\xba\xee\xad\xde\x01\x40\xfc\x56\x77\x4c\xff\xce\x3c\x5c\x15\x8e\xe9\xee\x92\xaa\x15\x82\x36\xe5\x43\xa2\x41\x7a\xcd\x06\x0e\xeb\xae\x6d\xd2\x30\xd3\xe6\x27\x47\xc9\xf7\xec\x82\x2c\x2b\x73\x3a\x5e\x64\x94\x73\xf3\x47\x9b\xc9\xb9\x79\xd5\x66\xba\x74\x0f\xe4\xd9\x1c\xe3\xaf\xbb\x5a\xfb\x39\x41\xc6\xcd\xc8\x04\xc0\x6a\xdc\xe3\x1e\xf6\xe5\xeb\xed\x4f\xab\x99\x3a\x35\x53\xf3\x6d\x6a\xe9\x73\xf7\x1c\x39\x23\xe7\x6e\xc3\xb1\x2a\xe7\x31\xeb\x05\x4c\xb7\x89\x67\x0b\x30\xdd\x26\xda\xbe\xd0\xf6\x85\xb6\xaf\xfe\xb6\x7d\x61\xba\x4d\x4c\xb7\x89\x36\x07\xb4\x39\xa0\xcd\x01\x6d\x0e\x3d\x61\x73\x28\x17\x61\x82\x8c\xe7\x0e\x84\xa0\xe4\xb6\x78\xba\x4d\xb6\x79\xdb\x98\x62\x73\xe7\xb1\x15\x4c\xe2\x89\xe8\x17\x93\x78\xee\x9c\x13\x14\xe4\x87\x07\xe1\x80\x60\xa1\xcb\xa6\x7d\x83\xad\x10\xae\x6d\x16\x42\xe2\x10\xe1\x50\x91\xd5\x93\x7c\x7d\x80\x7c\x6d\x00\xee\x8b\xdd\x3c\x1d\xdc\xbb\x28\x6f\xca\xde\x5d\xa1\x7e\x52\x33\x10\x9f\x97\xcf\x57\xa8\x7f\xb1\xce\x93\x0b\xe2\xc1\xe9\xb9\xd9\x60\x5f\xea\xb5\xcf\xa3\x78\x43\x41\x53\x1b\x0a\x9a\x6a\xa6\xa0\xb2\x03\xef\x13\x08\xf1\x0a\x5c\xe6\x08\xf1\x22\x9c\x87\x52\x0b\x08\x31\xf6\x9d\xcd\x1c\x41\x21\xff\x24\x0f\xf3\xe9\xbc\x3a\x9d\x54\x2f\x19\x96\x6e\x58\x95\x10\x58\xff\xf4\x28\xf9\x27\xbb\xe0\xce\x7a\xc0\x3a\xfb\xc9\x66\x51\x75\x49\x14\xda\x13\xc4\x7a\xbc\x11\xb1\x4e\xb2\x6a\x59\x65\x44\xd6\x2d\x20\x6b\x3d\x1d\x59\x4f\x93\xb3\x5b\x40\xd6\xb2\x33\x12\x06\x28\x64\xd6\xc8\xac\x91\x59\x23\xb3\x46\x66\x8d\xcc\x1a\x99\x35\x32\x6b\x64\xd6\xc8\xac\x91\x59\x23\xb3\x46\x66\xdd\x65\x66\x7d\x1c\x8e\x92\xc3\xb9\xc9\x10\x40\xdf\x5d\xcb\xac\xe5\xee\x0d\xd1\x35\xa2\x6b\x44\xd7\x88\xae\xbb\x8a\xae\x7f\xe1\x5e\x38\x23\xb0\xa8\xca\x36\x84\x15\x83\xcd\xc8\x24\x13\x15\xd0\x5a\xb2\x08\x23\x64\xa2\x2f\x4e\x78\xdc\xb9\x9a\x7c\xcb\xbd\xe4\x97\x06\xe1\xee\x9a\xe7\x43\x90\x3d\xec\x52\x55\x57\xc4\xbd\x41\xab\x47\xea\xc1\xf4\xdc\xec\xbc\x28\x36\x9f\x67\x37\x4e\x27\x4b\x89\xa0\xb6\xbc\x4b\x38\x74\xb7\x37\x54\x46\xf9\x83\xa0\x09\x48\xf8\x0c\x3c\xcd\x21\x21\x8f\x9d\x51\x17\x12\xb2\x32\xc6\xd5\x4a\x85\x8d\x18\xdf\x76\x23\x4e\x58\xdb\x7c\xf2\xf3\x0b\x51\xd5\x53\xb9\xe1\xfd\xf5\xb9\xe1\x2d\x64\xa8\x42\x7d\xb8\x46\xd3\xa9\x61\x89\x9c\x0b\x42\xaa\xd7\xed\xcd\x38\x20\x14\xf1\xd3\x05\x43\x8c\x55\x32\xfb\xe5\xbd\x8d\xfb\x32\xef\x52\xc7\x54\x35\xda\x4c\x77\x8e\xcb\x7b\xb7\xa3\x47\x4b\xcb\xa0\xc3\x52\x4d\xc0\xa5\x0e\x74\x29\x06\x07\xc0\xc0\x4c\x2d\x06\x66\xfa\xfd\x4c\x77\x84\xce\x8a\x08\xe0\xa4\xc2\x62\x14\xc0\xa9\xd7\xc4\x9b\x53\xed\x9a\x78\x2b\xbd\x7e\x6b\x63\xf1\x76\xc8\x51\x5d\xdf\xe0\x30\x56\xac\xb2\xcd\xc8\xb9\x03\x0e\x5b\x54\xbb\x2d\xe5\xee\xad\x2d\x68\x9c\x57\xe3\x00\xb7\xcd\xde\x17\xbf\xb8\x4a\xdd\x0a\x8d\x5f\xdd\x1f\xbf\xca\x2b\x4c\x2b\x86\x36\xbe\xe1\xbe\x44\x29\xec\xef\x75\x79\x95\xd5\xb2\x74\x05\x2e\x43\xb9\x46\xc2\x4e\xc1\xf1\x16\x2c\x6b\x73\xdc\x7a\x81\x92\x34\x45\x92\x7e\x7c\x10\x3e\x36\x48\x5e\x1b\xcc\xbe\x1a\x9a\xf3\x5e\x1a\xec\x1f\x49\x5a\x03\x7c\x58\x3b\x73\x03\x06\x87\x92\x6c\x70\x46\x66\xcc\x91\x06\x03\x77\x94\x93\x7c\x61\xef\x52\x4d\xfe\xa4\x65\x5b\xe3\xe2\x69\x7e\x07\xb7\x77\x7a\xca\x48\xd9\xb3\xad\x39\x61\xcf\x7b\x8c\x4d\x0b\xf9\xf7\x7c\x30\x59\xa2\x1f\x47\x1b\x8b\xf8\xd2\x9b\x19\x78\x23\x43\x5e\xcf\x64\x3f\x1b\xee\x07\x3e\x9a\xb9\x68\xb3\xed\xad\xe1\x29\x15\x9b\x37\xbb\xad\xe4\x96\xd9\x4f\x39\x65\x3a\xf1\x15\x7c\xa7\x27\x62\xb4\x54\xbd\xc8\x72\x31\xae\x6a\xfc\xc3\xb9\x3d\xc8\x34\x34\x79\xf8\x9a\x9a\xba\xa7\xd8\x37\x64\x9b\x0a\x7b\x89\x43\x6d\xc7\xa4\x05\x45\xbc\x91\x1b\x60\x83\xbe\xe4\x3b\xae\xba\x0d\x10\xbe\x3e\xb7\x8b\x57\x2b\x61\x4c\xec\x11\x3d\xb9\x3b\x2b\xc5\x26\x66\x7c\xde\x54\x50\x3e\x06\x47\xc8\xa1\x5c\x31\xc4\x33\x77\xc5\xc1\x4e\x54\xd2\x46\xae\xd3\xf6\xc3\x98\x1f\x19\x86\x7d\x62\x17\xa7\xd9\xb6\xab\x1b\x56\xad\x5b\x0b\x8f\xc4\xe0\x91\xff\xbe\x9f\x7c\x65\x10\xde\x19\xbf\xa9\x89\xd4\x40\x97\xd9\xc3\xf9\x61\x76\xd3\x4c\xec\xc9\x85\x22\xbf\x70\xd1\x76\xa7\x4d\x33\x74\x0e\x69\xdf\x1a\xd7\x21\x8f\x90\xe7\xe1\x82\x18\xc4\x67\xe0\x14\x1f\xc4\x47\xe1\x30\x4c\x36\x8c\x45\x99\x68\xd0\xb5\x62\x81\x7f\x73\x53\x41\x6f\x53\x02\xd4\x5e\x7b\x2a\x7d\x18\x1f\x21\x87\xe4\x30\xae\xd3\xaf\x72\xc8\xf2\x0a\xa1\xe7\x07\x7a\x7e\xa0\xe7\x07\x7a\x7e\xa0\xe7\x07\x7a\x7e\xa0\xe7\x07\x7a\x7e\xa0\xe7\x07\x7a\x7e\xa0\xe7\x07\x7a\x7e\xa0\xe7\xc7\x76\x7a\x7e\xa0\x77\x05\x7a\x57\xa0\x77\x45\x1f\x7b\x57\xbc\x3a\x02\x87\x04\x97\xd3\x0d\x4f\xb3\x99\xd0\xab\xf5\xab\x10\x07\xce\xa8\xa5\x3b\xb6\x61\xf9\x9e\x69\x68\xd4\x23\x5f\x1b\x26\xbf\x3b\x04\xb7\x87\x0f\x85\x16\xaa\x75\xb9\xba\x59\xba\xb1\x66\xe8\x55\xd5\x4c\x9c\x2d\x0b\x35\xc9\x0b\xb2\xb8\x79\x56\x5c\x5b\x4e\x95\x15\xf2\x47\xf9\x03\xe7\x83\x2a\x49\x0b\x57\xe2\x4d\x97\x0d\xcf\xdf\x69\x38\x70\x3b\x0e\x88\xed\xab\x4f\x06\x6f\x25\xc0\x2b\x26\xf0\xe0\x52\x3a\x1e\x3c\x4b\x4e\x4b\x3c\x58\x3b\xbc\x82\xb0\x84\xf1\xde\xd9\xc8\xbc\x11\x14\x22\x28\x44\x50\x88\xa0\x10\x41\x21\x82\x42\x04\x85\x08\x0a\x11\x14\x22\x28\x44\x50\x88\xa0\x10\x41\x21\x82\x42\x04\x85\x08\x0a\x11\x14\x76\x0b\x14\x7e\xe6\x59\x98\x68\x22\x3a\x95\x66\x56\x3d\x9f\x6d\x59\x4c\xea\x91\x7f\xf0\x2c\x79\x6d\x7f\x83\xc8\x53\xa3\x9b\x7b\xf4\xcd\x88\x72\xae\xda\x26\xcd\xe7\xd8\xad\x75\xc2\x3d\xc5\xee\xe9\x71\x86\x57\x42\x8c\x85\x18\x0b\x33\x53\x23\xc6\x42\x8c\x85\x18\xab\x7f\x30\x56\x0f\x25\x5e\xee\x19\x8c\x85\x19\x81\x11\x63\x21\xc6\x42\x8c\x85\x18\x6b\x3b\x32\x02\xf7\x35\x75\xc2\x94\xa5\xfd\x9c\xb2\xb4\xb4\x03\xa9\x53\xf9\x39\x98\x11\xbe\x4f\xa7\x60\x8a\xfb\x3e\x1d\x86\x49\x38\xd8\xf0\x28\x24\x47\x53\x6b\xc5\x42\x8c\x0c\xb5\xe5\x20\x64\x5b\xc3\x61\xc7\x2a\x97\x38\x14\x99\xfb\xc8\xde\x06\xac\xec\x4e\xb1\x2e\x29\x6a\x02\x8b\x3d\x24\x7e\xed\x12\x18\x13\x1c\xab\x04\xe7\xe0\x4c\x4d\x4c\x85\x02\x8c\x6d\xa5\x43\x30\x8e\x02\x46\xa4\x69\x31\x22\xcd\xff\x97\x69\x38\x93\xe1\xac\x90\x13\xc7\xe1\x28\x97\x13\x07\x61\x8b\xc3\x12\xce\x8b\x30\x34\xa7\xe1\x64\x14\x86\x66\xeb\xa5\xf0\x93\xdb\x93\xfc\xe4\xf6\x1e\x91\x1e\xbe\x95\x62\xd2\xe5\x92\x63\x77\x4d\x2e\xe5\xff\x6c\xac\x81\x5c\x0a\x32\xd3\xc7\xd2\xfc\xdb\xcb\x09\x19\x55\x10\x77\xd4\x93\x51\xe1\x33\x9d\x93\x56\x3c\xf8\x43\x5c\x5a\xe5\x4b\x70\xae\x05\xc7\xd9\xf3\xfc\x23\x1e\xe7\x70\xd6\x43\x8c\x8b\x18\x17\x31\x2e\x62\xdc\x3e\xc2\xb8\xa8\xb1\xa5\x68\x6c\xbd\xc3\xb9\xbf\x3a\x00\x5f\x19\x20\xbf\x3d\x90\xfd\x52\xd8\x55\x9f\x18\x78\x22\xbe\xb3\x34\x2c\xc5\x13\xbb\x43\x65\x89\x2e\x0b\xa3\x70\x48\x60\xa2\x25\x4b\xce\x12\xde\x58\x31\xdd\xd0\xb2\xad\x71\x8b\x56\x54\xde\x25\x72\x73\x19\xd7\x21\x05\x8b\x0d\x07\x83\x54\x10\x8c\xd5\x55\xaa\x33\x2d\xd5\x5c\x8f\xac\xb5\x91\x68\x37\xcc\x31\xb9\xe7\xe4\x9f\xab\x54\x5c\x55\xe3\xe3\xc4\xb0\xf5\x70\xe1\x89\x16\x07\x6e\x08\x0f\xfa\xa5\xea\xb1\x4a\xc6\x1b\x4a\x65\x4f\x06\x1f\x24\x5f\xb2\x2c\xe6\x5b\x50\x44\x41\xd4\x53\x04\xaf\xaa\x53\xc7\x1c\xe1\x55\x98\xe3\x35\xa8\xb7\x97\x46\x73\x02\x9a\x13\xd0\x9c\x80\xe6\x04\x34\x27\xf4\xb5\x39\xe1\xf3\x03\xf0\xe6\x00\x79\x63\x20\xfb\x7a\xb8\xda\xfe\xd0\xc0\xf9\xd8\x59\x56\x87\x87\xb5\x0b\xa7\xfe\x9c\x6b\x3b\x6a\x85\xaf\xc3\x73\xb6\x69\x68\xeb\x09\x67\xa2\xa0\xbb\xa3\xc3\xb0\xac\xc3\x8b\x85\x63\x05\x65\x5e\xc8\x11\xb1\x48\x3a\xd4\x62\xc3\x34\x5a\x45\xa8\x62\xbb\xce\x8a\x6a\x05\xce\x4d\x6e\x95\x4e\x2c\xab\x66\xa0\xfd\xe7\xc4\xd5\x9c\xb2\x6c\x58\xaa\x69\x7c\x20\x10\xdf\x4b\x54\x51\x75\xce\xe6\xed\x09\x81\x6a\xf5\x48\xb5\x14\x85\x0f\x7b\xd1\x43\x42\xdf\x2e\x28\x17\x0c\x2e\x92\x62\x15\xb7\xdd\x8d\x5f\x16\xd9\x43\x7c\xa1\xee\x73\xed\xcf\xf6\x57\x0a\xb9\xdb\x44\x7d\xce\x07\x1f\x92\xf4\x92\xfa\x8e\x21\xf8\xf0\x10\xf9\xd0\x50\xf6\x1b\xa1\xab\xdc\x17\x07\x9f\x94\x72\x90\x0d\xd1\x15\xfb\x86\x52\x51\xdd\x25\xb5\x92\x20\x0f\xa1\xa2\x46\xdd\x65\xdb\x5d\x65\x6d\x51\xb7\xa6\x8f\xd7\xbc\xbc\x71\x45\xb9\x5a\x13\xe8\x24\x8e\xf8\x2a\x83\xe9\x0b\x9a\xa1\x47\x8a\x35\x5f\x1b\x45\x8c\xcb\xa0\x75\xd9\xe2\x24\x57\x8e\x60\xf5\x2b\xc4\x9a\x31\x90\x9b\xa1\x11\x22\x74\x90\x4b\xbe\xac\xa0\x08\x82\xc4\x65\x71\x5c\x5b\x1d\x16\xdf\x30\xcc\xf6\x3c\xfc\xaf\xe4\xc0\xf0\x4e\x2a\xc3\x25\x55\xbb\x5e\x71\xed\xaa\xa5\xb3\xbb\xb8\x67\x1a\xbf\xa9\xa6\xe1\x84\xb2\x22\x35\xa0\x64\x21\xc1\x17\x2c\x85\x25\x9d\x54\x86\x2f\xda\x2e\x8d\x15\xab\x68\xaa\xa7\xa9\x3a\xfb\x7a\xd9\x3e\xc2\x17\x91\x97\xe7\x09\x75\x7a\x43\x81\xcb\x61\x19\x85\xdc\xed\x4e\xed\xb8\x89\xeb\x36\x68\xad\x43\x6b\x5d\x9f\x5a\xeb\xca\x15\xb8\x2c\x88\xf6\x05\x98\xe1\x44\xfb\x34\x9c\x84\x13\x2d\xc0\x4b\x11\xd7\x3b\xd5\x04\x96\xaf\x8f\x9a\xef\x20\xb7\x8b\xd9\x1c\x49\xda\x2e\x61\xe7\xf6\xc7\xa0\xfd\x77\xcf\x42\x5e\xb8\xb0\x7b\xda\x0a\xd5\xab\x26\xdb\x5a\x45\xae\xeb\x8e\x6b\xd8\xae\xe1\xaf\x6b\xa6\xea\x79\xd4\x23\xdf\xf6\x2c\xf9\xe1\xfd\xf0\xf6\xe8\xde\xc5\xb5\x62\xf6\xc0\xe6\x6e\xeb\x73\xb2\x8c\x19\x56\x46\xfe\x7e\x76\xf3\x7c\xf8\xfc\x42\x31\x71\x19\x7d\xd6\xd1\x67\x1d\x7d\xd6\xd1\xd8\x81\xc6\x0e\x34\x76\xa0\xb1\xa3\x67\x8c\x1d\xbd\xc3\xf2\x11\x32\x23\x64\x46\xc8\x8c\x90\x19\x21\x73\x5f\x43\x66\xa4\x60\x48\xc1\xfa\x94\x82\xed\x48\x9f\xf5\x65\x78\x54\x90\xbb\xf3\x50\xe2\xe4\xee\x14\x6c\x92\x76\xae\x10\x63\x51\x6b\xc5\x42\x82\x10\xb5\xc5\x77\xfd\xb9\x74\x58\x77\x92\x9c\x90\xb0\x6e\x03\x18\x93\x90\x2e\x51\xad\xa4\xd7\xfa\xbf\xde\x5b\xcb\xc8\xee\x0a\xdd\xd5\x93\x38\xec\x01\xf1\x7b\xe7\x81\x98\xe0\x57\x65\x78\x04\x2e\xd6\xf8\xaa\x1f\x85\xc3\xad\x74\x04\x7a\x40\xa1\xcf\x7a\x8b\x3e\xeb\xdf\xc8\xc0\x25\x21\x0e\xce\xc1\x19\x2e\x0e\x8e\x43\x8b\xa3\x50\x58\x04\x8a\xdc\x22\x10\xba\xa8\xb7\x5e\xda\x63\xc2\x55\xfd\x22\x9c\x8f\xb9\xaa\xb7\x5e\x5c\x9a\x9c\xea\xb0\x1c\x4a\xf3\x95\xcf\x7f\x75\xac\x56\x4e\xe5\xea\xba\xaf\x27\x65\xd6\xa8\xb8\x27\x2e\xb3\x22\xcf\xf5\x4e\x4a\x2f\xf4\x5d\x47\x9c\x8b\x38\x17\x71\x2e\xe2\x5c\xf4\x5d\x47\xdf\x75\xf4\x5d\x47\xdf\x75\x34\x2b\xa0\x59\x01\xcd\x0a\x68\x56\x40\xb3\x02\xfa\xae\xa3\xef\x3a\xfa\xae\xa3\xef\x3a\x5a\xed\xd0\x6a\xd7\x83\x56\xbb\x9e\xf6\x5d\xef\x30\x86\x6e\xbf\xd7\xfa\x6f\x0e\xc0\xbb\xa4\xd7\xba\x6f\xbb\x6a\x85\x06\x2e\xeb\xe4\x33\x03\xe4\x67\x06\x60\xb7\xfc\x39\x9b\xad\x70\xd1\xcd\x16\x90\xb0\x67\x55\x85\x7f\x49\x9e\x54\xa8\x3f\x2f\xee\x9b\x9e\x9b\xbd\xc4\x7e\x6b\x1f\xaf\xde\x50\xd0\xd4\x86\x82\xa6\x9a\x29\xa8\x6c\xc0\x15\x31\x6e\x2e\xc1\x05\x3e\x6e\xce\xc2\x69\x38\xd9\xc2\xb8\x09\xbe\x31\x6d\xe4\x90\x7f\x37\x02\xc7\xea\x36\x6e\x32\xf9\xa5\xc6\x14\x4e\x7e\x5d\x53\x1d\x55\x33\x7c\x83\x7a\xe4\x2f\x86\xc9\x1f\x0d\xc1\x3b\xe5\x85\x30\x01\xe6\x07\x9b\x4b\x80\x39\x33\x3f\x2b\x3b\x64\x46\x14\xb9\xde\xa6\x2c\x98\x27\xf8\x03\xb2\x6c\x99\x03\x73\xe3\xcb\x30\x11\x66\x73\x89\x30\x69\xba\xb8\x28\x91\x73\xf2\x24\xcb\x86\x56\xde\x98\xd0\x32\x10\x2c\x89\xd1\x06\x4d\xe5\xdb\xc4\x5c\x98\x78\x20\x03\x73\x61\xa2\x05\x0f\x2d\x78\x68\xc1\xeb\x23\x0b\x1e\xe6\xc2\xc4\x5c\x98\x68\x39\x41\xcb\x09\x5a\x4e\xd0\x72\xd2\x13\x96\x13\xcc\x85\x89\xb9\x30\x77\x0a\x2b\xc6\x5c\x98\x9d\xc8\x85\xf9\xc5\x11\x38\x2a\xa8\xa1\xea\x38\xde\xc4\x5a\x80\x09\xad\x10\xa5\x4d\x7c\x73\xf8\xf7\x8b\x13\x2e\xe5\xb4\x8b\x4d\x60\xf2\x03\x23\xe4\xc7\x87\x60\x37\x7b\x6e\x71\xad\x98\x5d\x6b\x0e\x16\x5e\x15\x25\xcc\x53\xbf\x4d\x90\x70\x1f\x7f\x60\xda\x71\xbc\x85\x62\x08\x00\xf5\xe8\x35\x97\x0d\xcf\x47\x1c\xb8\x11\x07\x36\xc3\xe9\xae\x5d\x49\x67\x86\x07\xc8\xa8\x24\x81\x6c\x24\x48\xab\x42\xd4\xfc\x49\x93\x02\x72\x3f\xe4\x7e\xc8\xfd\x90\xfb\x21\xf7\x43\xee\x87\xdc\x0f\xb9\x1f\x72\x3f\xe4\x7e\xc8\xfd\x90\xfb\x21\xf7\xeb\x2e\xf7\x7b\x1e\x9e\x23\xcf\xe4\x9e\xde\x93\x21\x43\x8e\xea\xaf\x64\xa7\xe4\x9b\xc5\xa1\x76\xa6\xe0\x54\xfd\x15\xc5\xd3\x6c\x87\x8e\x29\x5e\x55\x5b\x61\xad\xcf\x35\x58\xaa\xae\x0a\x4e\xe1\xb8\x36\xff\xd2\xdc\xde\x90\x0f\xe4\xa5\x78\x7f\x05\xc9\x22\x92\x45\x24\x8b\xfd\x4d\x16\x7f\x07\xe0\xa0\x24\x8b\x55\x36\xe3\x7d\x59\x4c\xad\x5b\x22\xdf\x2c\xb1\x0d\x09\xbd\xe1\x91\x1f\x81\xdc\x0f\xec\x82\xbb\x92\x4f\x84\xfe\x88\x51\xf2\xd0\x27\xd8\x43\x57\xf9\x43\xf9\xfd\xe2\xd7\xe9\xc4\x33\xd2\x5b\x30\x76\x5f\x9b\x83\x1a\xbc\x17\x98\x84\x4b\x86\x64\xd9\xc4\xc3\xb3\x50\xd3\x08\xf2\x93\x0a\xb1\x0a\x96\xff\xc9\xc0\x96\x9c\x46\x9b\x28\x12\xe6\x45\x98\x8d\xcb\x50\x8e\xc2\x6c\xdc\x74\xa1\x4f\x88\x68\x1b\x8f\xc1\xa3\xb1\x68\x1b\x37\x5d\x6a\xeb\xc1\x81\x44\x02\xc9\xe6\xdc\x1b\x03\x54\x59\x6f\x48\x4a\x76\x19\xaf\xd4\x06\xa7\xc7\x32\x1e\xc2\xde\xfc\x10\x76\x19\xc3\xe7\x34\x08\x9f\xd3\x76\x77\xfa\xaf\x3f\x0b\x27\x85\x84\xb5\xa8\x7f\xc3\x76\xaf\x27\x83\xc0\x37\x30\xe1\x18\x56\xc5\xa5\x3c\x2a\xfc\x27\x9e\x25\xff\x78\x3f\xbc\x3d\x7a\x78\x71\xad\x98\x7d\x78\xf3\xa8\xf0\xb3\xe2\xe9\xfc\x83\xec\xb6\x2b\xe1\x93\x71\xd3\x8b\xbc\xa5\xc7\x6d\x2e\x18\x13\x1e\x4d\x11\x18\x13\x1e\x4d\x11\x68\x8a\x40\x53\x44\x1f\x99\x22\x7a\x28\x46\x4e\xcf\x98\x22\x30\x78\x0b\x9a\x22\xd0\x14\x81\xa6\x08\x34\x45\x60\x4c\x78\x8c\x2e\xf1\xd6\xe1\xfa\x3d\x1f\x5d\x62\x47\xc6\x84\x7f\xbe\x21\xa9\x85\x0b\x82\x5e\x9f\x81\x53\x9c\x5e\x1f\x85\xc3\x30\xd9\x10\x09\xc7\x98\xd5\x5a\xb1\x20\xa1\xd1\x65\xc3\xf3\x9b\x8d\x06\xff\x54\x3a\xf0\x3d\x42\x0e\x49\xe0\xbb\x81\x90\x49\xd8\x2b\xdf\x9b\x8c\x03\xff\xed\x7b\x6b\xa9\xd8\xed\x81\xe5\xc1\x0a\x09\xd8\x3e\xf1\x53\x77\x18\x98\x40\x56\xe7\xa1\x04\xe7\x6a\x6c\x0e\x07\xa1\xb0\xb5\x26\xc6\x30\xa2\x18\x00\xbe\x45\x82\xfd\xdf\x33\x30\x2d\xa6\xf8\x14\x1c\xe7\x53\x7c\x12\xb6\x3c\xfe\xe0\xa2\xb0\x49\x9d\x85\xd3\x91\x4d\xaa\x95\x72\x2e\x09\x33\xd4\x39\x38\x13\x33\x43\xb5\x52\xd0\xcd\x5a\x9e\x3a\x26\x88\xf2\x5f\x1e\xab\x15\x44\xf7\xd5\x0d\xf4\x1e\xc8\xa4\x71\x71\x35\x2e\x93\xa2\x10\xef\x9d\x96\x4e\x18\xe6\x1d\x09\x2d\x12\x5a\x24\xb4\x48\x68\x31\xcc\x3b\x86\x79\xc7\x30\xef\x18\xe6\x1d\x2d\x05\x68\x29\x40\x4b\x01\x5a\x0a\xd0\x52\xd0\x16\x4b\x01\x86\x79\xc7\x30\xef\x18\xe6\x1d\xc3\xbc\xa3\x21\x0e\x0d\x71\x7d\x14\xe6\xbd\x63\x78\x79\x07\x9e\x02\x24\x3f\x39\x0a\x17\x84\xcf\x3b\xf7\x5c\xb6\x54\xb3\x10\xba\x01\x47\xbe\xef\xaa\xe9\xac\x84\x11\xcf\x65\x80\xea\x60\x34\x0b\x67\xf8\x17\xc9\xd7\x46\xc8\xbf\xde\x05\xd9\xa0\x98\xe9\xa0\x94\xc5\xe0\xf1\xec\xbf\xcf\xc8\xe1\x18\x8b\x63\x64\x05\xea\x4e\xe0\x10\x1f\x44\x27\x97\x16\xd3\x76\xc4\x34\x1a\x8b\x76\x38\x7c\x17\x27\xf5\x61\xb6\x49\x8a\xb6\x6e\xc3\x09\x28\x11\x2b\xbb\x90\x1f\xe3\xaf\x9b\xad\xfd\xb0\x05\xf9\x5d\xc9\x1a\xf7\xb8\x9b\xfe\xb6\x84\x46\x7a\xa0\xfe\xec\xdc\x43\x6e\xe1\x15\x83\x6b\xab\xe9\x53\xb2\x4c\x1e\x91\x53\xb2\xe1\x40\x95\x53\x33\xd9\x1f\xf1\x19\x2a\xfa\x0b\xa3\x26\xe1\x51\x05\x8c\x9a\x84\x86\x30\x34\x84\xa1\x21\xac\x9f\x0c\x61\x18\x35\x09\xa3\x26\xa1\x01\x02\x0d\x10\x68\x80\x40\x03\x44\x4f\x18\x20\xca\x27\xe1\x04\x39\x96\x3b\x12\xf2\x92\x2c\x07\x25\xb2\x16\xc9\x6d\x5c\x6e\x88\x5d\xc3\x80\x48\x18\x10\x69\x07\xf2\x5a\x0c\x88\xd4\x89\x80\x48\x2f\x8f\x40\x41\xa0\x4b\x77\x49\xd5\x0a\x01\x76\xaa\x09\x8a\x24\xa1\xa5\x6b\x9b\xd4\x23\xbf\x35\x4c\x3e\x3f\x04\x77\xb2\xfb\xa7\xe3\xb7\x2f\xae\x15\xb3\x4e\x93\xf1\xd6\x6d\xb6\xc6\xb6\x25\xd2\xfa\x41\xfe\xc0\xd5\xda\xca\x2c\x14\xd9\x3b\x30\x0b\x63\x1b\xc3\xae\x3f\x9b\xce\x17\xa7\xc8\x71\xc9\x17\x1b\x8e\xa6\x20\x16\xbb\x6d\x52\x8c\xc2\x8e\x3c\x11\x79\x22\xf2\x44\xe4\x89\xc8\x13\x91\x27\x22\x4f\x44\x9e\x88\x3c\x11\x79\x22\xf2\x44\xe4\x89\xdb\xc9\x13\x11\x09\x22\x12\x44\x24\xd8\xc7\x48\xf0\x2b\x6f\x83\x09\xd6\x75\x9b\x84\xeb\x75\x6c\x3d\x70\x59\x9c\xa0\x2f\x50\x8d\xfc\xd8\xdb\xc8\xcb\x03\xb0\x5b\xb3\x5d\xba\xb8\x56\xcc\xee\xd3\x6c\xcb\x62\xe2\xea\xd2\x85\x27\x22\x5e\xc3\xb7\x92\x54\x63\xd5\x9e\xb3\xf5\xfc\x83\xf2\xa6\x19\xdb\xa5\x0b\xc5\x4b\xd4\x8f\x62\x01\xcc\xd9\xfa\x85\x17\xa8\x36\x39\x98\x9f\xc8\x0b\x2a\x76\xac\x71\x80\x97\xfb\x04\x2e\x7b\x17\xdc\xc1\x71\xd9\xdb\xe1\x6d\x9f\xcc\xec\x01\x39\x4a\x02\xc2\x35\x97\x0e\xaf\xc6\xc9\x81\x38\x90\x92\x20\x2b\x97\x93\xc4\x4a\xd6\x49\x86\x00\x80\x6b\x0f\xd6\x67\x66\x40\xf6\xc8\xef\x82\xdc\xf7\xc6\x9a\xe4\xa1\xa0\x49\xe6\x1e\x9f\x6f\xdc\x26\xb9\x44\x9b\xcc\xd9\x5e\x4a\xa3\x6c\xfa\xed\xa9\xd8\xaf\xb9\x46\x49\x69\x88\x78\x9b\x35\xd1\x28\xe5\x2a\x78\xe4\xfd\x59\x3b\x98\x0e\x57\x67\xec\xd5\x55\x36\x70\x0d\x4f\xaa\xb2\xab\x36\x0f\x25\x21\x7e\x95\xed\x53\xf5\x69\x81\x29\x7a\x6b\x8a\xea\xba\xea\x7a\x41\xb9\x62\xfb\xc1\x05\xa1\x69\x33\x35\x42\xf1\x56\xa8\x69\x16\x72\xbb\xe5\xd3\x71\x51\xf1\x4a\x06\x3e\x92\x21\xdf\x9b\xc9\xfe\xa3\x48\x54\xcc\x88\x40\x25\x94\xcd\x67\xb9\x31\x8e\xde\x27\xd5\x40\x5e\x50\x72\x13\x13\x0f\x72\xc2\x9e\xe5\x62\xc3\xe5\x24\x85\x5f\xb2\x2d\x1a\xbf\x2c\x96\x4c\xc7\xd6\x0b\xb9\xbd\xe1\xcf\xf1\xaa\x6d\x6a\xc1\x4b\xb6\xf6\x46\x0b\x5e\xe7\xdd\xa5\xdf\x0f\x36\x59\xcd\x5e\x0f\x5a\xed\xca\x55\x2a\x4e\x64\x8b\xbd\x8d\xaf\x5a\xba\xea\x06\x64\x26\x12\x4c\xf2\x9b\xa5\x18\x36\x3c\x29\x7c\xe3\xed\xc8\x75\xdd\xdc\x2d\x9e\xaf\x53\xd7\x4d\x60\xc0\x9a\x57\x3e\x5e\xff\x95\x86\xc5\x94\x90\x2d\xbd\x92\x1f\x89\x2a\xe4\x76\x79\xbe\x6e\x58\x89\x57\xba\xe0\x10\x2b\x6b\xa6\xbc\x52\x2a\x3e\x2d\x7e\xa6\x5d\xf5\x13\xef\x7c\x01\xd6\x88\x9f\x75\x83\x77\x3e\xf5\xc4\x13\x7f\x87\x8f\x26\xb7\x4a\x6b\x4f\xd3\xab\x0a\x53\xb3\xc2\x33\x5b\xa6\x69\x8b\xd3\x61\xc1\x2a\xc7\x85\x48\xc3\xef\x1d\x64\x2a\x59\x42\xc6\xef\x87\xdb\x02\x19\xcf\xb4\x27\x43\xa3\x1e\xf9\xdc\x7e\xf2\x99\xc1\x48\x62\xa5\x04\x5d\x9f\x17\x8f\x89\xa0\xeb\x42\x5e\xc9\x9f\x76\x9a\xc5\xe5\x69\x38\x2b\xc4\xe8\x71\x38\xca\xc5\xe8\x41\x28\xc0\x58\xc3\x78\x3d\xac\x7d\xf8\xa9\x0a\xf1\xb5\x97\x0d\x2f\xdd\xc0\x32\x9b\x2e\x69\xf7\x93\x87\x6a\x25\xad\x7c\x43\x52\xc4\xa6\x44\x20\x43\x3b\x0a\xda\x51\xd0\x8e\x82\x76\x14\xb4\xa3\xa0\x1d\x05\xed\x28\x68\x47\x41\x3b\x0a\xda\x51\xd0\x8e\x82\x76\x14\xb4\xa3\xa0\x1d\x05\xed\x28\x68\x47\x41\x3b\x4a\xb7\xec\x28\xff\xef\x3d\x70\x4a\xb8\x56\x2f\x71\xef\xe9\xc6\xe6\x14\xcd\xb5\xad\x6b\xf6\x52\x68\x52\xf1\x78\xbc\x0e\xf2\xd2\x3d\xe4\x4f\x06\x60\x0f\x7f\x9a\x9b\x10\x5c\xaa\xea\x8a\xb8\x18\x34\x72\xb4\xe2\xce\xb8\xb6\x55\xb6\x97\xf2\x39\x76\x57\x89\x3d\x13\x8f\xfd\x2e\xaf\x8a\x48\x20\xed\x8d\xb1\x5c\x7e\x12\x4e\x09\x7e\x76\x04\x0e\x71\x7e\x36\x0e\x07\x60\xb4\x21\x3f\xe3\xdf\x53\x58\x2b\x16\x64\x9d\x52\xe1\xd9\xfd\xf5\x89\xd7\x2d\x64\xa8\x42\x7d\xb8\x76\x39\x9d\xad\x8d\x92\x61\xc9\xd6\xf8\xcb\x25\x5e\x0b\xde\x1f\xc7\x6b\xd9\x4f\xed\x89\xb5\xf8\xb0\x4b\x1d\x53\xd5\x68\x6a\xa3\x3f\x2c\x6f\xec\x66\xbb\x97\x78\x76\xdb\x9a\xc8\xfb\x5b\x69\x78\x0c\xea\x8a\x41\xf7\x5b\x0c\xba\xff\xcf\x64\xd0\xfd\x22\x0f\xba\x1f\x46\xcc\x6f\xd3\xc4\xbf\x39\x79\x92\x2e\x36\x9c\x6a\xbb\xc5\x46\xe9\x6b\x6f\x8b\x89\x8d\x83\x8e\xea\xb2\x4d\x2a\xdb\xd8\xf1\x25\x25\x55\x7e\xec\x73\x38\xcb\xed\x92\xf4\xb8\xb7\xb6\xa0\x71\xfe\xfa\x03\xec\xcf\xa9\xfb\xe2\x17\x57\xa9\x5b\xa1\xf1\xab\xfb\xe3\x57\x99\x8a\xe9\xd3\x8a\xa1\x8d\x6f\xb8\x2f\x51\x0a\xfb\x7b\x5d\x5e\x65\xb5\x2c\x5d\x81\xcb\x50\xae\x91\x5c\x53\x70\xbc\x85\x43\x2e\x73\xbc\xdd\x50\x90\xa5\x08\xb2\x8f\x0f\xc2\xc7\x06\xc9\x6b\x83\xd9\x57\x43\xa3\xd0\x4b\x83\xfd\x23\xc8\x6a\xb0\x01\x6b\x67\x8e\xc1\x39\xda\x62\x83\x33\x32\x86\x8d\x34\x18\xb8\xa3\x9c\x07\x0b\xab\x89\x6a\xf2\x27\x2d\xdb\x1a\x17\x4f\xf3\x3b\xb8\xd5\xcc\x53\x46\xca\x9e\x6d\xcd\x09\xab\xd0\x63\x6c\x5a\xc8\xbf\xe7\x83\xc9\x12\xfd\x38\xda\x58\xc2\x96\xde\xcc\xc0\x1b\x19\xf2\x7a\x26\xfb\xd9\x50\xe3\xfd\x68\xe6\xa2\xcd\x36\x70\x86\xa7\x54\x6c\xde\xec\xb6\x92\x5b\x66\x3f\xe5\x94\xe9\xc4\x57\xf0\xbd\x8c\x08\x6d\x5d\xf5\x22\xfe\x3d\xae\x6a\xfc\xc3\xb9\x55\xc1\x34\x34\x19\xb3\x92\x9a\xba\xa7\xd8\x37\x64\x9b\x0a\xea\xee\x50\xdb\x31\x69\x41\x11\x6f\xe4\x66\xbc\xa0\x2f\xf9\x9e\xa2\x6e\x03\x84\xaf\xcf\xed\xe2\xd5\x4a\x98\xa4\x3a\xad\x25\xb6\x55\x9e\x6f\x12\x6d\x8b\x7f\x2a\x94\x0f\xc3\x24\x39\x98\x2b\x84\x7e\x17\x77\xc4\x9d\x36\x64\x91\xdb\xe1\xad\xd1\xf6\xe0\x76\xbf\x3c\x00\xbb\xb8\xab\x00\xf9\xcc\x00\xf9\x99\x01\x18\xd2\x6c\x97\x66\xb3\x15\xea\xc7\x68\xe0\xf4\xdc\x6c\xc8\x15\xf2\xa4\x42\xb9\x43\xc0\xf4\xdc\xac\xdc\x1f\xb5\x71\xed\xda\x50\xd0\xd4\x86\x82\xa6\x9a\x29\xa8\x6c\xc2\x7b\xc5\x78\x2c\xc3\x23\x7c\x3c\x96\xe0\x1c\x9c\x69\x61\x09\x8a\x7d\x66\xda\x20\x25\x7f\x3e\x0a\xe7\xc4\x9e\x50\x98\xdb\xa3\x23\xb6\x4b\xd4\x57\x1b\x6e\x10\xc5\xcd\x41\x90\xc0\x4f\x8c\x92\x3f\x1f\x80\x77\x88\x1f\x17\xe5\xa3\xd9\x77\xf3\xdd\x61\x52\xbd\xe0\xa7\x3f\xf3\x0a\xbb\xc2\xff\xf4\x16\xc4\xcd\x91\x86\xc1\x7f\x6e\xf3\x7e\xf0\x9b\xe0\x9c\x68\xd9\x13\x70\x8c\xb7\x6c\x11\x26\x60\xbc\xe1\x4c\x97\x2d\x21\xbf\xa3\xd0\xdc\x89\xd5\x27\xd3\x67\xfb\x61\x32\x29\x67\x7b\xa2\xad\xe5\xac\x17\xaf\x89\xcd\x79\xfe\x76\x48\xd9\x6c\x66\x7f\x61\xcf\x86\x86\xbf\x37\xd8\x24\xd6\x6b\xfb\x7d\xf2\x62\xf7\x9a\xbf\x34\x03\xd3\x70\xb6\x46\xb9\xda\x6a\xfb\xa3\x46\x85\x5b\xc3\x16\xb7\x86\xff\x22\xd3\x86\xe9\x7f\x41\x6c\x2e\xcf\xc0\xa9\x68\x73\xf9\xd6\x90\x22\xff\x3f\x7b\xef\x1e\xde\xc6\x79\xdf\xf9\x3e\x04\x29\x4b\xfa\x59\x8e\xe5\xd7\x76\x6c\xc3\x92\x0d\x43\x36\x2f\x10\x09\x0a\xd4\x85\x12\xa9\x1b\x41\x8a\x12\x21\x4a\xa2\x49\x9b\xbe\xc4\x32\x33\x04\x86\x10\x64\x10\x83\xcc\x80\x54\xd4\x3e\x79\x36\x8d\x9b\x6d\xf6\xe9\x36\xa7\xdb\xdd\x6d\xd2\xed\x6e\x93\xa6\x9b\x6c\xbc\x49\x9d\x4d\xd3\x6c\x93\xa6\xd7\x34\x69\x9d\xba\x71\x37\xdb\x73\x9a\x73\x9a\x4b\x93\x36\x3d\x4d\xba\xdd\x4d\xba\xdb\xd3\x34\xed\xc9\xc9\x79\xe6\x7d\xe7\x06\x60\x06\x03\x82\x03\x10\x14\xbe\xff\x24\x32\x67\xe6\xc5\x5c\xde\xf9\xcd\xfb\x7e\x7e\xdf\xf7\xfb\xd3\xe7\x9e\xb1\x9f\xdc\x5b\x15\x45\xee\x34\x1c\xb8\xa5\x82\x11\x39\xa2\xe2\x0f\x2d\x0c\x1c\xcd\xa9\x95\x86\x48\xe2\x13\x49\x50\xaf\xa7\x25\xf5\x7a\x50\xa8\x01\x85\x1a\x50\xa8\xa1\x59\x85\x1a\x52\x9f\xea\x0a\xd8\xad\x7e\x5e\x54\x52\xbd\x48\x33\x8e\x4a\xaa\x4d\x76\xc0\x6f\xda\x78\x20\xe2\x3e\x1e\xd8\xcd\x76\x8a\xfb\x4f\xc9\xff\xe7\xf6\xaa\x21\xc1\xa3\x55\x18\xd9\x6d\x86\xf1\x48\xd1\xf2\xf9\x69\xfa\x30\x01\xe0\xb8\xd3\x06\x27\x00\xc7\x00\xc7\x5b\x0c\x8e\x5b\x81\x93\xfc\x70\x6f\xd3\xbe\x0c\xa9\x11\x3a\xc4\xe2\xd1\x41\x8b\x08\xdf\xe5\xe4\xc8\xfc\xa0\x5b\x82\x22\xff\xbf\xfb\xe8\x09\x01\x3e\x57\xf2\xca\x0d\xfd\x55\x55\x15\xd7\x2a\x29\x82\x83\x16\xd5\x9c\xa2\xe6\x4a\x37\xf3\xf2\xba\x9c\x2f\x5b\x03\x51\x29\x92\xf9\x85\x7d\xec\xad\x3d\xb4\xcf\xd1\xaa\xb3\x68\x8a\xf8\x90\x8e\xd6\x14\xce\xcc\x19\xbf\x35\xab\xff\xd6\xa4\xf3\xb7\x62\x67\xf4\x03\xa7\x5d\x9a\x36\x3e\xb4\xde\x87\x36\x45\x68\xb3\x46\xcf\x8a\x37\x61\x81\x1e\xe7\x6f\x82\x3e\x38\x3a\xef\xf9\x26\x38\xef\xb4\xf9\x3a\x78\x9f\xf1\x66\x65\x38\x3f\xec\xff\x86\x3c\xcd\x16\x8d\x25\xc4\xde\x67\x51\xf5\x86\x18\xef\x54\xad\x6e\x43\xe1\x1f\x21\x9f\x2e\x30\xe6\xa7\xe4\xa9\xd1\x0b\x92\xc6\xb1\x6d\xd3\x11\x92\x57\xe9\x0d\xf4\x4c\xc5\x30\x28\xb8\x9e\x80\x51\x11\xe0\x6f\x83\xf0\xf7\x8f\xbb\xbc\x45\x3d\xcd\x8c\x5d\x4b\x82\x17\x3f\x4d\x8b\x36\x2f\x0e\xf2\x07\xcc\x18\xb8\x95\x41\xce\x07\x2a\x27\x7f\xb0\xc7\x27\x06\x4e\xd6\x2d\x4b\xaa\x11\x0c\xcf\xf2\x01\x51\x5b\x84\x42\xcc\x46\x3b\x2d\xee\x62\x36\x8a\xd9\xe8\x16\xcf\x46\xd7\xb6\xe4\x03\xb7\xb1\xef\x4f\x43\x9f\x17\xdf\x8f\x96\xbf\x26\xea\x3c\x9d\x63\x93\xd1\x09\x6b\x5e\xda\x5b\x66\x64\xe3\xd9\x72\xf3\xcb\x52\xb0\x77\x74\x53\x54\x4c\x3f\xd3\x8a\xa2\x66\x72\x85\x0a\x83\x7b\x31\xeb\x64\x3c\x0f\x47\xf7\x38\xf7\xb1\xbe\x9e\xf7\x95\x2b\x9e\xac\x95\x25\xb1\x28\x97\x3b\xd9\x47\x18\xdf\xc1\x89\xb9\x19\x73\xd5\x7d\x3b\xca\x9f\x8a\xf4\xa4\xe8\xae\xfa\x47\x4c\xef\xae\xd3\x34\x45\xc9\xc6\xe4\x4f\xe6\x75\xd6\x63\x85\xc2\x3e\x37\x40\x87\xc4\xa3\xa8\x2a\x0b\x3b\xbc\x9e\x18\xce\x89\x9a\xb0\xe9\xbc\xa4\x69\xb2\x25\x79\xfa\x57\x03\xec\x47\xbb\xe9\x0e\xfb\x88\xa5\xf5\x44\xf8\x61\x17\xc5\x93\x51\x52\x76\x52\x3f\x3c\xb6\x4f\xdf\xe1\xb2\x75\xcc\x62\xc2\xb9\x35\xe0\xb9\xb9\x44\xd3\xe2\x7e\x9e\xa1\x53\xfc\x7e\x8e\xd2\x51\x3a\xec\xf9\xfa\x3b\xae\x7d\x3d\x11\x77\x9e\xd7\x66\xe7\xe1\x1b\xb2\xe9\xf7\xa9\xcc\x2b\x4e\xa8\x6c\x7d\xcc\x57\x76\x55\x3e\x86\xa8\xbb\xfe\xa9\xec\x49\x3c\x6c\xec\xd3\x9a\x87\x91\x9c\x21\x3d\x14\x95\x0f\xcc\x1a\x7b\x1a\x18\x93\x61\x2e\xdc\xe0\x5c\xf8\xe5\xae\xc0\x42\xc2\x45\x31\xbd\x9d\xa2\xa4\x3d\xbd\xdd\x82\xf8\xc2\xd7\xcd\x34\x37\xbe\xc4\xde\xbd\xb7\x32\xbe\xbc\xde\x56\x46\x95\xc5\x94\x87\xc4\xdf\x5b\x14\x52\x20\x8e\x82\x38\x0a\xe2\x28\x88\xa3\x20\x8e\x82\x38\xaa\x11\x71\x94\x27\x35\x68\x7b\xd5\x94\x39\x2e\xf0\xd5\x30\x35\x79\x68\x90\x7c\x71\x4f\xe5\xd0\xe0\xa0\x8f\x42\xaa\x6c\xbc\xb0\x9f\x53\x8a\xe6\x0f\x17\x80\xa5\x3b\x6d\x90\x02\x2c\x0d\x2c\xbd\xc5\x58\xba\x75\xf8\xa9\xb9\x41\xde\x1f\x32\x9f\xa0\x51\x76\x34\x7a\xd8\x82\xcc\xf7\x3b\x21\xb3\xb3\xdd\x16\x60\xe5\x5f\x88\xd1\x51\x6f\x96\x29\xa0\xb2\x3b\xd0\xfc\xd6\x00\x7b\x77\x37\xb1\xb2\xcf\x99\xe0\xcc\xbe\x54\xf3\x91\x4a\xaa\xc9\x8f\x6b\x22\xda\x5c\x11\xfc\xe1\x10\xe7\x0f\x7a\xdf\x3a\x49\x35\x3e\x27\xe5\x7d\x4b\x24\x36\x82\xe4\x9b\xcb\xfe\xfd\xef\x0c\x3b\x55\xbb\x9b\x95\x65\x45\xaa\xfb\x68\xf8\x1f\x77\xb9\x3e\x9a\x7a\x48\xe7\xa3\x2e\xa4\xb3\xc9\x0f\x68\xa3\x1f\x7c\xbf\x27\x84\x0f\x3e\x98\x67\x83\xcc\xf3\x13\x5d\xc1\xc6\x8a\x39\x01\x3e\x67\xe8\xbc\x0d\x3e\xb7\x2a\xfa\x70\xfa\x59\x5f\xf4\x69\xf0\xeb\x27\xc2\x52\xec\x3f\xec\x75\x8d\x3e\x5e\x1c\xf4\x40\x35\x07\x6d\x76\xc0\x01\x0c\x05\x0c\x05\x0c\x05\x0c\x05\x0c\x05\x0c\x05\x0c\x75\x87\xa1\x2d\x18\x29\x24\xdf\xb5\xc7\x75\xa4\xb0\x21\x2c\x1a\xad\xc2\xa2\x4d\x1c\x3d\x80\x8d\x76\xda\x98\x05\x6c\x14\x6c\x74\x8b\xd9\x68\x8b\xf9\x95\xef\x5a\xd2\x16\x7c\x19\xda\x8a\x92\xfe\xab\xab\xd4\x27\x28\xa9\x56\x52\x54\x29\x2b\x57\x22\xd2\xb4\x96\xcb\xa8\x39\xfd\x22\xd8\x37\x9f\x63\x3f\xd3\x4b\x77\x1a\x3b\x5a\x5f\xb4\xbe\xda\xb5\x08\x27\x17\x66\xa6\x78\x03\xb1\x07\xf5\x1d\x17\xc4\xd1\xc6\x97\xcc\xda\xd8\xe6\x75\x08\x93\xa8\xdc\x87\xca\x7d\x49\x54\xee\x43\xe5\x3e\x54\xee\x43\xe5\xbe\x8e\xa9\xdc\x97\x6c\x9b\xca\x7d\x81\x9f\x49\xc3\x95\xfb\x92\xa8\xdc\x87\xca\x7d\xa8\xdc\x87\xca\x7d\xa8\xdc\xd7\xfa\xca\x7d\xc9\x8e\x2e\xb4\x97\x44\xa1\xbd\xe6\x15\xda\x4b\xb6\x7b\xa1\xbd\xe4\x36\x2c\xb4\x97\xca\xd0\x8c\xe0\x7b\x49\x3a\xcb\xf9\xde\x18\x1d\xa7\x63\x9e\x7c\xcf\x84\x50\x26\xdc\xb3\xf8\x50\x3d\xcb\x97\xaf\x3f\xe7\x0f\xef\x4e\xb0\x51\x03\xde\x95\xf3\x2e\xb3\xde\x88\xf9\x7b\x2e\x3e\xa1\x0f\xb9\xb3\xc3\x9d\x6c\x87\xde\x2b\x28\xfa\xae\xdd\xd5\x6c\x8c\x89\x0f\x52\x44\x72\x60\xb0\xfd\xe2\x6f\xcd\x06\x61\x82\x5b\x5d\xa0\x69\x9a\xaa\xc8\xa9\x1c\xa1\x91\x8d\x3f\x00\x64\x53\x20\x3c\x6b\x50\x78\xf6\xbd\x1a\x49\xe5\x73\x22\x3a\x9c\xa6\x93\x3c\x3a\x1c\xa3\x86\x3a\x27\xa5\x84\x16\x6d\x92\x26\x6c\x2d\x5a\xa3\x6d\x5d\x14\x99\xe9\x29\x4a\x3a\x32\xd3\x0d\x36\x66\x46\x26\xef\xd8\x51\x54\xb4\x12\x35\x37\x72\xc5\xbe\x3a\x58\x1d\x99\x8c\x15\xba\x4e\x3d\x87\xb2\xe2\x88\x52\x7d\x62\x7b\x45\x94\xb2\x76\x6e\x56\xbc\x6a\x8e\x7a\x0d\xe0\x16\xe0\x16\xe0\x16\xe0\xb6\x73\xc0\x2d\x46\x6b\x3e\xa3\xb5\xf6\x21\xdb\x50\x0e\xb7\x44\x39\x8c\x04\x02\x12\x08\x48\x20\x20\x81\x80\x04\x42\x47\x27\x10\xb0\x80\x04\x0b\x48\xb0\x80\xa4\x59\x0b\x48\x90\x9f\x43\x7e\xae\x53\xf3\x73\xa9\x6c\xc0\x4b\xa4\xfc\xd2\x5d\x31\x77\xa8\x7c\x37\xbb\x4b\xbc\xcd\x76\xa4\x6d\x32\x60\x0e\x5e\x96\xfe\x91\x01\x3a\xcc\x0b\xdb\xaf\x27\xc4\xe3\xf4\xaa\xbe\xae\xc9\x69\x55\xb6\xcb\xaf\x7f\xb7\x9f\xfd\xef\x3d\xb4\x33\xad\xa8\xf2\xd2\x7a\x22\xfc\x8b\x5d\x46\x5f\xb0\x53\xa3\x52\xc1\x1c\x6b\x98\x02\xf5\x05\xde\x44\xdc\xf1\x0d\x1f\xb3\xbe\xfe\x7d\xfc\xf8\x3e\x9b\xae\x96\xe1\x32\xa5\x28\x5b\x33\x74\xad\x24\x4b\x99\x41\x7b\x5a\xc1\xa7\x4e\xc6\x20\x54\x9f\x99\xd8\xf3\xa5\xbe\x32\x12\xe0\x68\x3b\x1e\x7b\x90\xff\xdc\xa4\xa2\xca\x8b\x8e\x42\x81\xe2\x04\xdb\x5c\x21\x9f\x7a\x41\x18\x02\x1c\xe2\x86\x00\x7a\xef\x9f\xa0\x33\x74\xaa\x81\xde\xff\x94\x55\x33\x71\x13\xcb\x39\x6e\x88\xe5\x1c\x17\xfc\xbb\xfd\x63\xec\x80\xd1\xed\xa3\x51\xa3\xab\x8b\x1b\x5e\xe6\x7d\x93\xc2\x02\x00\x2c\x00\x48\x21\x8f\x84\x3c\x12\xf2\x48\xc8\x23\x75\x4c\x1e\x29\xd5\x36\x69\x92\xc0\xcf\xa4\x61\x7e\x9f\x02\xbf\x07\xbf\x07\xbf\x07\xbf\x07\xbf\x6f\x3d\xbf\x4f\x1d\xa6\x04\x1b\x8e\x0e\x59\x8b\xe7\x99\x73\xf1\xbc\x98\xb8\xdd\x0a\x45\x99\x53\x1d\x0d\x52\x53\x00\xa9\xcd\x03\xa9\xa9\xb6\x07\xa9\xdb\x70\xa1\x03\xfb\xcd\x38\x3d\x2e\x8c\x34\xa4\x8c\x3e\xc2\xce\x29\x05\x55\xce\xe6\xb8\x19\x92\x4b\x39\x3b\x3e\x93\x95\xf4\xf1\xd3\x0d\x79\xf9\x9a\xa2\xbc\xe0\x5a\x48\x9d\x7d\x6b\x88\xfd\x44\x0f\xed\x77\x6d\xd2\x92\xf2\x26\x5c\x5c\x89\x17\xad\xf6\x9f\x12\xed\x97\x57\x8a\x3d\xad\x1f\x32\xe1\xd6\xaa\xa1\xf4\xad\x7d\x7c\xc0\x26\xc6\x2f\x76\xd1\x35\xc1\x0e\x25\x5a\xe2\xec\xf0\x19\x7a\x8a\x9e\xf4\x94\x5b\xbb\xdf\x61\x53\x7c\x5d\xfb\xd4\x37\x6b\x71\xfc\x4f\xfc\x89\xe2\x73\xec\x59\x83\x28\xd6\xea\x0a\x06\x6b\xf4\x39\xdb\x2a\xd6\x1e\x7e\x89\xfc\xfa\xc3\x11\x77\x2b\x64\x9f\x2e\x31\x61\x1c\xd5\x2e\xbd\x22\xf9\x02\xe5\x28\x5b\xb1\x74\xa5\x59\xbd\x02\x7a\x49\xac\x6e\x69\x70\x75\xcb\xff\x6c\x65\xf0\x5a\x15\xeb\x5c\x56\x28\x63\xaf\x73\xd9\xc2\x58\xb9\xd5\xc1\xd0\xc7\x11\x3a\xf6\xfd\xbd\x7e\xb1\xb2\xcf\x34\x6e\xf6\x0b\x8f\x67\xc5\x8e\x6d\x13\x1d\x61\xf3\x0c\x9b\xe7\x5b\x57\xac\x0d\x95\x1e\x54\x7a\x50\xe9\x35\xd3\xe6\xb9\xed\xdd\x9c\xdb\x7f\xf0\xe1\xeb\x33\x9d\xfc\xe7\x77\xf8\x8d\x3f\x4e\xf9\xd8\x41\xfb\x8c\x4a\xce\x70\xdb\xd2\x76\x18\x94\xc0\x3d\xba\xd3\x86\x42\x70\x8f\x86\x7b\xf4\x16\xbb\x47\xbf\x58\xc3\x59\xa2\x65\x93\xf2\xba\xbd\xa5\xb7\xfa\x83\x95\xba\x48\x33\xec\x7c\xf4\x9c\x95\x06\x8b\x39\x73\x67\xb5\x5b\x6b\x81\x15\xf5\xdf\xf7\xd2\x03\x06\x41\x2f\x16\xb5\xe1\xf5\xc4\xb0\x2a\xf3\xd7\x46\x93\x4b\x1a\xfb\x93\x5e\xf6\x5a\x37\xed\xd4\x37\x2d\xad\x27\xc2\xfd\xb5\x4d\xa7\xe7\xc5\x91\x0b\x72\x29\xf6\xa8\xbe\xe7\x44\xb1\xa8\x2d\x26\xec\xbf\x4e\x2b\xea\x44\x3e\x6f\x49\x6c\x83\xab\xa2\xd0\x24\x71\xed\x55\x4a\x8a\xee\x3c\x4e\x27\x78\x77\x3e\x4c\x09\x1a\xf6\xee\xce\xc5\xa2\xa6\x7f\xc9\xec\x0b\xae\xcb\x3f\xc9\xc7\xe1\xe8\xfa\x65\xff\x0e\x7c\x90\x0d\x98\x1d\xb8\x58\xd4\x8c\x8e\x6a\x9f\x06\x34\xb5\xd0\xd4\x42\x53\x0b\x4d\x2d\x34\xb5\xd0\xd4\x42\x53\x0b\x4d\x2d\x34\xb5\xd0\xd4\x42\x53\x0b\x4d\x2d\x34\xb5\x5b\xa9\xa9\x85\x78\x15\xe2\x55\x88\x57\x3b\x58\xbc\xfa\x2b\x43\x74\x49\xa0\xb7\x95\xbc\x72\x43\x0f\xc6\xaa\x92\x8f\x5b\x93\xfb\x4a\xf1\x6a\x51\xcd\x29\x6a\xae\x74\x33\x2f\xaf\xcb\x79\x77\xe1\xea\x5f\x0c\xb2\xef\x74\xd3\x3e\x47\x73\x13\x66\x6b\x56\xee\x6b\xc8\x45\xb7\x3a\x67\x34\x3d\xab\x37\x5d\x9e\xeb\x3a\xa1\xef\x3e\xed\xd2\xa0\x91\xe9\xf2\x3e\x34\x60\xb9\xea\x1a\x3d\x2b\x60\xdc\x02\x3d\xce\x61\xdc\x45\x9a\xa1\xf3\x9e\x30\xce\x79\x4b\x4d\xa2\xec\x7d\xae\x9b\xd5\xa7\xfe\xb0\x3f\xa3\x7b\x9a\x2d\x1a\x8c\xae\xd6\xd3\x36\xd8\x5d\x8d\x33\xad\xd6\xa6\xfe\xcd\x6e\x9f\x47\x7e\xc8\x5d\x9a\x5a\xe3\xa9\x9f\x34\x8e\x68\x83\x07\x9f\xbc\x4a\x6f\xa0\x67\x2a\x52\x8c\xc1\x3d\x79\x64\x1c\xa1\x41\x6d\x50\x83\xfa\xc7\x5d\x4d\x0d\x49\x4b\x42\x75\xfa\x34\x2d\xda\xaa\xd3\x96\xc6\xbc\xad\x0c\x6a\x7e\x1a\xd3\x6f\xef\xf5\x89\x79\x07\x2c\x89\x69\x8d\x30\x37\x2e\x76\x6a\x87\x28\x07\x65\x29\x94\xa5\x50\x96\x42\x59\x0a\x65\x29\x94\xa5\x9d\xa9\x2c\xf5\x15\x76\x6e\xe9\x80\x24\xf9\xed\x3d\x3e\x23\x8e\x13\x3e\xa2\xd2\x1a\xe3\x90\x31\xae\x55\xda\xe2\x61\x08\xb4\xa4\x9d\x36\xf8\x81\x96\x14\x5a\xd2\x2d\xd6\x92\x6e\x2d\xd5\xf3\x15\x8f\xd6\xf7\xc5\xd9\xf8\xd7\xa4\x9e\x6f\x54\xea\x3c\x9d\x63\x93\xd1\x09\x4b\x38\xda\xeb\x14\x8e\x7a\xff\x5a\x0b\x44\xa3\x9f\xbe\x4a\x07\x05\xb9\x2e\x37\xad\xb5\x58\xb5\xf1\xe7\x74\x5e\xd2\x34\x59\x63\x3f\x75\x95\xbd\xbf\xb7\xba\x1a\x5a\xac\xb6\x9c\xd4\xa8\x82\x36\xa9\x37\x12\x7b\x48\xdf\xb7\xbc\x2e\x9a\x73\x7b\x9b\x4b\x49\x93\x10\x5d\x42\x74\x89\x82\x78\x10\x5d\x42\x74\x09\xd1\x65\xe7\x88\x2e\xdb\xa8\xde\x5b\xdb\x88\x2e\x51\x88\x0c\xa2\x4b\x88\x2e\x21\xba\x84\xe8\x72\x2b\x0a\x91\x75\xb4\x46\x12\x95\x92\x3a\xb9\x52\x52\x72\x1b\x6a\x24\x37\x58\xdd\x29\x6e\xe2\x28\x93\x0d\x3a\x11\x51\x20\x8b\x71\x97\xfc\x81\xe0\x49\x36\x56\xab\xa2\x93\xf3\x94\xaa\xc1\x60\xf4\xc3\xbb\xab\x39\xd9\xbd\xe2\xb3\x14\x91\xca\x91\x98\xf1\xb5\x6a\x01\x14\x13\x0c\x8b\xa3\xd9\x8a\xfc\xcc\x28\x1d\x6d\xe8\x61\x20\x39\x03\xd9\x5d\x83\xb2\xbb\xb7\x85\xbc\xed\x27\x2e\x88\x60\x31\x41\x67\x78\xb0\x38\x41\x8d\xf6\x4f\xba\x24\xd4\x77\xd3\x34\x65\xab\xef\x36\xd1\xdc\x65\x91\x50\x3f\x4f\xe7\x1c\x09\xf5\xc6\xdb\xf3\x0f\x57\x45\xa5\xfe\x70\xe5\x95\x9e\xf0\x8f\x5f\xb1\xbf\x1c\xac\x0e\x57\x8f\x18\x32\x09\x87\xe6\x44\x59\x29\x0f\x5d\x31\xb1\x4b\x79\xe8\x9a\xb4\xf6\x6f\x62\x10\x6b\x8e\xce\x0e\x64\x17\x64\x17\x64\x17\x64\xb7\x73\xc8\x2e\xc6\x6f\x3e\xe3\xb7\xf6\x41\xdf\xd0\x38\xb7\x44\xe3\x8c\x0c\x03\x32\x0c\xc8\x30\x20\xc3\x80\x0c\x43\x47\x67\x18\xb0\xd4\x05\x4b\x5d\xb0\xd4\xa5\x59\x4b\x5d\x90\xc0\x43\x02\xaf\x53\x13\x78\x1b\x4c\x86\x6d\x7e\x45\x56\xcc\x9d\x2e\xdf\xcd\xee\x12\x6f\xb3\x1d\x69\x9b\x9f\x18\x0b\x5e\xc4\xfe\xfb\x21\xba\xdd\xe1\x7c\xcc\x7e\x35\xc4\x7e\x25\x44\x3d\xfa\x7f\x84\xc3\x59\x1e\xae\xf5\x8f\x86\xf5\x34\xa5\x08\x3f\xfb\xd8\x9d\x59\x99\x3b\x1b\x4f\xcc\xcd\x9c\xd7\xff\x10\x1c\xa0\xae\x6a\x68\xac\xaa\xa1\xb1\x7a\x1a\x4a\xe5\x44\xbe\xe1\x10\xcf\x37\xe8\x1d\xe5\x0c\x9d\xa2\xf1\x06\x3a\x8a\x79\x8d\x7e\x5d\x85\xbd\x77\x80\x8e\x95\xdb\x48\x5b\x05\x5b\x0d\x77\x1a\xfe\xef\xb7\x0c\x67\x24\x79\x55\x9f\x69\x96\x6c\xd3\x9a\x7e\xf6\xe7\x21\xdb\x63\x7a\x9f\x8b\x3f\xcd\x14\x3f\x68\x41\x2e\xc5\xf6\xf3\x12\x8a\xdc\x57\xda\xf2\x91\xce\x58\x9b\x03\xb6\x9c\x79\x9a\x4e\x89\xdb\x78\x8c\x8e\xf0\xdb\x18\xa7\x41\x8a\xf9\xfa\x3f\x5b\xa7\xb3\x59\x57\x99\x4b\xfe\xef\x54\x8c\xf5\x57\x3b\x3f\xdb\x27\xe0\x34\x7e\x0e\xff\xc7\x5d\xf6\x5d\x7e\xd8\xdd\x12\xc6\xbe\xd1\x11\xb3\x30\x61\x6b\xee\x75\xf2\x2c\x9d\xa6\x93\x15\xc9\xe5\x0d\xdd\x6c\x10\x49\x64\x94\x1b\xcc\x28\xff\xdb\xae\xcd\xbe\xe8\x49\x91\x2d\x1e\xa7\x13\x76\xb6\xb8\x75\xc1\xa2\xb8\x56\x77\xb0\xa8\x15\x20\x9c\x81\x24\xf6\x83\x3b\xed\x60\xc1\x2c\x2f\x15\x3b\x3e\x3c\x6c\x54\xe6\x6b\x51\x78\x80\x3d\x0a\xec\x51\x6e\xdd\xd4\x01\x98\x11\x98\x11\x98\x11\xec\x51\x36\x67\x8f\x12\xec\x74\x21\xf9\x67\xb7\x3b\x0a\xff\xf8\x78\x9b\xd8\xe3\x82\x87\x44\x6d\xbc\xe6\x0f\x0b\x60\x57\xd2\x69\x83\x11\xd8\x95\xc0\xae\x64\x8b\xed\x4a\x9a\x4e\x84\x7c\x1d\x49\xea\x0b\xf2\x5e\xd3\xba\xca\x80\x9f\x3a\x46\x47\xd8\x48\xf4\x90\xe5\x31\x72\xaf\xd3\x63\xc4\xda\xaf\xda\x52\xe4\x8d\xf4\x3c\x7b\x2e\xfa\xac\x75\xdc\x98\x31\x40\x16\x2f\x5f\x21\x13\xd1\x2f\x2d\xa2\xa5\x95\xa2\x3c\x18\xd1\xd6\xd2\xd7\xf4\x4e\xcf\xc7\xde\xb2\xb4\x2a\x86\x2e\x45\x55\xe1\xe3\xce\xe8\x6e\x0b\x0f\x36\xd5\xb4\xe4\x8b\x21\xba\x47\x20\x4a\x61\xaa\x61\x7a\x96\xb0\xdf\x08\xb1\x4f\x85\xe8\x36\xf1\xd7\x9a\xe8\xf7\xae\xac\x5c\x3a\xc7\x77\x03\xfc\x75\xc0\xdf\xff\xde\x4f\x87\x3d\xec\x60\x44\xae\xa4\xc2\x0f\xc6\x24\xbf\x1f\xef\x67\xff\xa3\x87\xc8\xd6\x8f\x87\x3f\xd6\x65\xe4\x56\xec\xb5\x48\x7a\xb8\x15\x7d\xcb\xcd\x17\x26\xee\x98\xe5\x8c\x59\xf3\xa3\x3e\xde\x4a\x9f\xad\x59\x2e\x13\xa1\x2a\x45\xd9\x9a\xbc\x6a\x25\x59\xca\x0c\xda\x62\x1d\x3e\xe1\x33\xa4\x1d\xb9\x92\xbc\x6a\x7f\x3d\xfa\xca\xf4\x75\x8e\xb6\xe3\xb1\x30\xff\x39\x4b\xcc\xbe\x8d\x7c\x69\x52\x2f\xd0\x9c\xe8\x2c\x33\x74\x9e\x77\x96\x09\x3a\x43\xa7\x1a\xe8\x2c\x7c\x1d\x19\x7f\x37\x36\x11\xe3\x6e\x88\x18\xf7\xac\x7f\x8c\x1b\x65\x47\x1b\xc9\x25\xa1\xfa\x21\x8c\x78\x50\xfd\x10\xcb\x35\xb0\x5c\x03\xcb\x35\x3a\x69\xb9\x06\xaa\x1f\xa2\xfa\x21\x64\xf2\x90\xc9\x43\x26\x0f\x99\x7c\x5b\xc8\xe4\x53\x27\x68\x94\x1d\x8d\x1e\xb6\x00\xd2\xfd\x4e\xf0\xe4\x9c\xbe\x35\xdf\xce\x16\x85\x13\xa1\x29\x46\xe1\xc4\xed\x63\x0a\xc4\xbe\x17\xa2\xfd\x35\xed\xa7\x19\xef\xd0\xd5\xce\x14\xf7\x65\xe5\x52\xf9\x47\x5a\x5c\x43\x6c\x7f\x56\xae\x30\x97\x9e\x98\x9b\x31\x67\x85\x01\x5a\x50\x04\x06\x79\x8b\xf4\xa4\xe0\x76\x97\x69\x96\x73\xbb\x69\x9a\xa2\x64\x63\x90\xd7\xbc\xce\x7a\x0c\x92\xd8\x3b\x06\xe8\xa8\xb8\xf7\x22\x53\x6f\xdd\x73\x01\x7a\x8b\x4a\x46\x93\xd3\x6b\x6a\xae\x74\x93\x6f\xcf\xd9\xb4\xf7\xb5\x7e\xf6\xb6\x1d\xf4\x3a\x71\x98\xf5\x48\x3e\x51\x0f\xf1\x9d\xe3\xb2\x19\xde\xea\x9c\x21\x69\x68\x03\xec\x7b\x80\xff\x9c\x38\x21\xb3\x4e\x47\xe5\x89\xb6\x3f\xff\xf5\xf4\xd2\x09\x1c\x0c\xd7\xcd\x7f\x9f\xf3\xe7\xbf\x27\xd8\xa8\xe1\xba\x5f\x79\xc7\x3d\xcd\xf6\x45\xc7\x03\x01\x06\x01\x06\x01\x06\x01\x06\x01\x06\x01\x06\x01\x06\x01\x06\x01\x06\x01\x06\x01\x06\x01\x06\x01\x6e\x35\x01\x3e\x4d\x27\xd9\x58\xf4\xb8\x45\x80\xf7\x97\x95\x37\xab\x9c\xd6\x01\x03\x03\x03\x03\x03\x03\x03\x3b\x30\xf0\x4f\xf7\x53\x9f\x97\xec\x34\xad\xe5\x0a\x4a\xc6\x86\x8f\x7f\xd5\xc7\xbe\x11\x2a\x93\x9a\x86\x5d\x7c\x06\x26\x17\x66\x2e\x2b\x19\x39\x76\x8f\xbe\xcd\xe2\xc1\xc6\x5f\x03\x36\x17\x78\x86\x4e\x0b\xc0\x36\x4a\x47\x39\x60\x1b\xa6\x21\x3a\x58\x87\x1b\x74\xdc\x38\x9f\xcd\xba\x0b\x3c\xe9\x4f\xd9\x46\xd8\xa1\x5a\x2a\x4b\xf3\x44\xca\x5c\x06\x7e\x71\x57\xd9\x6d\xde\xef\x6e\x34\x60\xde\xe9\xfb\x8c\xcd\xcd\xbd\xd9\x49\x0e\x2f\x2b\xd6\xea\x6c\xec\x6e\x63\x79\x0e\xec\x05\x1a\xb4\x17\xf8\xb9\x2e\x9a\x14\xfe\x00\x27\x69\xcc\xf6\x07\x08\xec\x7d\xdf\x6c\x20\x31\xe3\x45\x73\x02\x82\x8f\x6f\x41\xec\xcf\xef\x2c\x8b\x17\x7b\x2d\xaf\x01\x33\x44\xbc\xbe\xc2\x2b\xbe\x39\x11\x02\x06\x03\x30\x18\x80\xc1\x00\x0c\x06\x60\x30\x00\x83\x81\x0d\x1b\x0c\xbc\xa7\x6b\xd3\x83\xf9\x29\x61\x29\x70\x8a\xc6\x1d\x96\x02\x81\x4f\x09\xfc\x4d\x04\xea\x1b\x04\x78\x7f\xee\xdd\x87\x07\xc9\x3f\xbf\xbd\xec\x2b\xdf\xeb\xe3\x27\x60\x7e\xfb\xef\x2d\x96\xad\xac\x0b\xfc\xd3\x0f\x13\x81\x4e\x1b\x70\xc0\x44\x00\x26\x02\x5b\x6c\x22\xf0\xcc\x76\x9d\xc9\xf9\x99\x13\xa4\x8e\xd0\x08\x3b\x14\x8d\x5b\x48\xff\x6e\x27\xd2\x37\x9a\x6c\x3e\xc8\x67\x7f\xd4\x4f\x43\xb5\xd7\xa3\x57\xe2\xc1\x9f\xef\x67\x7f\x5a\xbe\x12\xfd\xe5\x7a\x74\x89\xc6\x25\xb5\x85\x1a\xf1\xde\x1b\x4d\xfd\x54\x76\xd2\xfa\xf3\xe6\xbc\x3e\x10\x1e\x42\x78\x08\xe1\x21\x84\x87\x10\x1e\x42\x78\x08\xe1\x21\x84\x87\x10\x1e\x42\x78\x08\xe1\x21\x84\x87\x10\x1e\xb6\x58\x78\xd8\x1e\x94\x02\x72\x43\xc8\x0d\x21\x37\xdc\x46\x72\xc3\xff\xd6\x47\x03\x82\x2a\x16\x94\x4c\x35\x52\x54\xd7\x0a\xfa\x05\x1b\x16\x97\xec\xd7\xfb\xd8\x47\x7b\x68\xa7\xbe\xeb\xd2\x7a\x22\xfc\x66\xe3\xfb\x57\xc8\xe4\xd6\x73\x99\x35\x29\x5f\x06\x16\xad\xb1\xe6\xbc\x68\x24\x38\x6b\xcb\x78\xec\x41\x7e\x80\x1e\xd3\x16\x13\xce\xe6\x67\x73\x5a\x70\x6e\xdc\xb7\x10\x1d\x3c\xe0\x4e\x07\xf7\x30\xe2\x27\xa6\xdf\x66\xba\xfe\x94\x3f\x21\x3c\xc2\x46\x0c\x42\xe8\xe8\x2e\x06\x1e\x74\x3e\x07\x30\x42\x30\x42\x30\x42\x30\x42\x30\x42\x30\x42\x30\x42\x30\x42\x30\x42\x30\x42\x30\x42\x30\x42\x30\xc2\xad\x64\x84\xa0\x7d\xa0\x7d\xa0\x7d\x1d\x4c\xfb\x5e\x7d\x9e\xc6\x2b\x7c\x0e\xbd\x4a\x9a\x17\x95\x4c\x26\xa7\xa9\x6b\x7c\x4e\xbe\xbc\x96\xc9\xca\x25\x8d\xfd\xf8\xf3\xec\xc3\xbd\xb4\xdb\x72\x3b\x0c\x27\xc4\x58\x51\x35\xbe\x72\x66\x18\x74\x58\x1c\x4e\x59\x8d\x24\x79\x23\xb1\x01\xfd\x10\xd3\x5f\xd0\x2e\xa6\xe7\xb2\x6b\x9b\x83\xbc\x24\xb0\x16\xb0\x56\x12\x58\x0b\x58\x0b\x58\x0b\x58\xab\x63\xb0\x56\xb2\x6d\xb0\x56\xe0\x67\xd2\x30\xd6\x4a\x02\x6b\x01\x6b\x01\x6b\x01\x6b\x01\x6b\xb5\x1e\x6b\x25\x3b\x9a\x42\x25\x41\xa1\x9a\x47\xa1\x92\xed\x4e\xa1\x92\xdb\x90\x42\xa5\xae\xd1\x25\x21\x80\x9a\xa6\x29\x2e\x80\x3a\x4d\x27\x69\xcc\x73\x45\xb0\x61\xc7\xb1\x9e\x88\xbb\x30\xa2\x7a\xca\x7b\x5c\x7f\xc8\x5d\xfd\xb4\x93\xed\x10\xc2\xa7\x67\xfc\x85\x4f\xc7\xd8\x91\xf2\x8a\x0b\x56\xa1\x86\xca\x33\x2a\x93\x3e\x45\xff\xf3\x6e\x27\x2e\xdb\x27\xbe\x45\x11\xc9\x95\x8c\x1d\x14\x5b\x5b\xcb\xc6\x04\xca\x9a\xa5\x14\x5d\xa8\x70\x6c\x38\x4e\xc7\x1a\x7b\x26\xf0\x6b\x80\xab\x5c\x83\xae\x72\x6f\x0f\xd1\x8c\x88\x0d\x49\x3a\xcb\x63\xc3\x18\x35\xdc\x0f\x45\xc9\xf8\x04\x2f\x19\x6f\x19\xd4\x6d\xa6\xbd\x2b\xc2\xce\xe6\x02\x4d\x3b\xec\x6c\x36\xd3\x60\xe3\x81\xab\xa8\x34\x37\x70\xc5\xfe\xfb\xa0\x33\x70\xf5\x1b\x26\x45\x0e\xc7\x27\x65\xc5\x35\x88\x1d\x15\x7b\x9a\x41\x6c\xd2\x3a\xa0\x95\xe1\xac\x39\xbe\x77\x40\xbd\x40\xbd\x40\xbd\x40\xbd\x9d\x83\x7a\x31\x90\xf3\x19\xc8\xb5\x0f\x0b\x87\xe7\x68\x4b\x3c\x47\x91\x72\x40\xca\x01\x29\x07\xa4\x1c\x90\x72\xe8\xe8\x94\x03\xac\xa7\x61\x3d\x0d\xeb\xe9\x66\x59\x4f\x23\xa3\x87\x8c\x5e\xa7\x66\xf4\x52\x59\x9a\x15\x04\xfc\x1c\x4d\x72\x02\x7e\x8a\xc6\xe9\x44\x03\xf0\x72\xa1\x24\x95\xd6\x34\x5f\xc6\xdc\x3c\x86\x7c\x3d\xe6\x8e\xaf\xef\x66\x77\x89\x40\x61\x07\x71\x4a\xbd\x91\x9e\x67\xcf\x45\x9f\xb5\xfc\x6b\xc6\x8c\x6f\xb9\xc8\x81\x14\x32\x11\xfd\xcc\x23\x5a\x5a\x29\xca\x83\x11\x6d\x2d\x7d\x4d\x1f\xcf\xf0\x07\x26\x4b\xab\x22\xb4\x16\x55\x85\x7f\x17\xa3\xbb\x2d\x1d\x7b\x53\x1d\x79\x5f\x7a\x03\xdd\xa1\x77\x58\xae\xa2\x57\x32\xb2\xc6\xde\xf5\x06\xf6\xe5\xc7\x68\x67\x5a\x51\xb9\x3f\x46\xb4\xb6\x3a\x9e\x9b\xc1\xbf\x4e\xdf\x67\x52\x51\xe5\xc5\xc4\x36\xb0\xb6\x85\xe6\x1d\x9a\x77\x68\xde\x91\x08\x41\x22\x04\x89\x90\x4e\x4a\x84\xb4\x0f\xe7\x07\x80\x06\x80\x06\x80\x06\x80\x06\x80\xee\x68\x00\x0d\x42\x06\x42\xd6\xa1\x84\x6c\x5b\x6a\xde\x9f\xa2\x93\x82\xea\x1d\xa5\xc3\x9c\xea\x0d\xd1\x41\x1a\xf0\x94\x8d\xa6\x15\x95\x97\xc0\xba\xac\x64\xe4\x40\x24\xee\xd3\xfe\x94\xef\x00\x7b\xc4\xa5\xe6\x61\x34\x6a\xd0\x3e\x5e\xfa\x27\xfa\xb1\x5d\x36\xde\xba\xc3\x52\xb3\x73\x92\xb5\x57\xfc\x67\x13\x58\x96\x40\x4f\xe3\x74\x82\x46\x2b\x34\xea\x7d\xf4\x58\x5d\xf7\x10\x4a\x26\x48\xd2\x1b\x94\xa4\xff\xd7\x2e\x3a\x25\x74\xe4\xc7\xe8\x88\xad\x23\x1f\xa0\x7a\xfb\x9e\xa8\x7f\x37\xc2\xeb\xdf\xd9\xb2\xf1\x0d\x1c\xef\x59\x58\xef\xb8\x08\x29\x09\x1a\xe6\x21\xa5\xfe\x26\xeb\xd5\x97\x07\x14\x35\x62\x2f\x0f\xda\x51\xe3\x01\x57\x29\x39\x8f\x20\x61\xb1\x49\x44\x10\x87\x72\x7c\xbb\x14\x46\x07\x17\x05\x17\x05\x17\x05\x17\xed\x1c\x2e\x8a\x61\x15\x04\xe2\x10\x88\x43\x20\x0e\x3e\x0f\x3e\x0f\x3e\x0f\x3e\x0f\x3e\x0f\x81\x38\x04\xe2\x10\x88\x43\x20\x8e\xf4\x17\xd2\x5f\xb7\x86\x40\x7c\x03\x2a\xee\x3a\x81\xb1\x2b\x24\x2e\xab\x18\x17\xb8\x56\xfb\x8b\x03\xc2\xf9\xdc\x2e\x6d\xe8\xe1\x7b\xae\xbf\xf7\xb9\xb4\x2c\xa5\xd3\xfa\x14\xc0\xd8\xf6\x16\xf6\xae\x01\xf6\xd7\x3d\x36\xc4\xfe\x78\x97\xf1\xf4\x1d\xf5\x0e\x0b\xe6\xe8\xc2\xd4\x77\x2f\x88\xa6\x26\x44\x53\x81\x54\x3e\x1c\xb4\x27\x14\x7c\xd2\x64\x0c\x3f\xf5\x39\x89\x3d\x53\xea\x2b\x63\x00\x8e\xb6\xe3\xb1\x03\xfc\xe7\x8c\x14\x9d\x65\xc8\x52\x7e\xa2\x6d\x2e\x41\xdf\x92\xfa\x89\x73\xfe\xfd\x7a\x88\x1d\xac\x95\x08\x29\xbf\xc7\x74\xfd\x61\xf7\xb7\x6a\x17\xbb\x8d\x5f\x2a\x8a\x26\x42\x69\x8f\xa2\x89\xc8\x28\x21\xa3\x84\x8c\x52\x27\x65\x94\x50\x34\x11\x45\x13\x41\xf2\x41\xf2\x41\xf2\x41\xf2\xdb\x82\xe4\xa7\xc6\xe9\x04\x1b\x8d\x1e\xb5\x16\xa6\x87\xb9\x04\xd2\x38\x8b\xf2\x59\x5d\xb4\x47\xdf\xe6\x5c\x73\xbe\xfd\x56\xb5\xa3\xa6\x23\xd0\x2a\x6a\x3a\x6e\x9f\x95\x05\xec\x7f\xf5\xd2\xfd\xa2\xa6\xa3\x54\x2c\x6a\xc3\xeb\x89\xe1\x8c\x24\xaf\xea\x83\xbf\x92\xc6\xfe\xb8\x97\xfd\x7e\x37\xed\xd4\xb7\x2c\xad\x27\xc2\x7d\xb5\x0d\x29\xa6\xf8\x81\x0b\x72\x29\x76\x40\xdf\x71\xa2\x58\xd4\x16\x13\xd6\x1f\xa7\x15\x75\x22\x9f\xb7\xa8\xa1\xd6\xee\x9c\xf0\x39\x6f\xe1\xf4\x84\x00\x88\x63\x74\x9c\x03\xc4\x11\x3a\x44\x71\x4f\xe1\xb4\x7e\xf3\xb8\xd6\xd7\xbc\x11\xb3\x39\xad\x64\x82\xc1\x4b\xfe\x60\x30\xc6\xfa\x0d\x18\xa8\xb7\x64\xe0\x40\xab\xb1\x72\xc7\x14\x9f\x65\x1c\x80\x82\x80\x82\x80\x82\x80\x82\x80\x82\x80\x82\x80\x82\x80\x82\x80\x82\x80\x82\x80\x82\x80\x82\x80\x82\x2d\x86\x82\xa0\x6e\xa0\x6e\xa0\x6e\x1d\x4c\xdd\x3e\xd1\x4f\x27\x05\x75\x5b\xc9\x2b\x37\xf4\x60\xac\x2a\xf9\xb8\x35\xb9\xe7\xf0\x28\xa7\x0c\xaf\x27\x96\xe5\x92\x64\x4a\x0e\xf5\x5d\xb5\xf4\x35\x79\x55\xd2\xd8\x77\xfb\xd8\x7f\xeb\xa1\x7d\x8e\xa3\x27\xcc\x83\x97\x8c\xa3\xc2\xeb\xc6\x17\xaf\x90\xc9\xad\xe7\x32\x6b\x52\xbe\x4c\x6f\x68\x8d\x2e\xa7\xf3\xca\x8d\x05\xde\x6c\x20\x1a\xc3\x78\x2c\xce\x0f\x98\x76\x39\xb5\x45\x71\x66\xf6\x2f\xce\xe6\x34\x08\x06\x5d\x04\x83\x07\xdc\x41\xde\x1e\x46\xfc\xc4\x84\x29\xcb\x0b\xfe\xf0\xf0\x02\x9b\x36\xe0\x61\xad\x7e\x66\x40\x45\xfb\xb1\x38\xa9\x22\x7f\x62\x40\x87\x40\x87\x40\x87\x40\x87\x40\x87\x40\x87\x40\x87\x40\x87\x40\x87\x40\x87\x40\x87\x40\x87\x40\x87\x40\x87\x40\x87\x40\x87\x40\x87\x2d\x43\x87\xdf\x1d\xa0\x4b\x02\x1d\x16\xe4\xd2\x0d\x45\x7d\x41\x1f\xad\xb9\xf2\x42\x8f\x25\xca\xb9\x42\x56\x95\x35\x4d\xb6\x16\x27\xbf\x7f\x80\xfd\xc8\x0e\x62\x76\x73\x16\x41\x7c\xb9\x9e\x75\xca\x33\xa2\xbd\xb6\x58\xa0\x2c\x7e\xee\xb2\x75\x25\x06\x70\xb4\xd7\x2a\x1b\x27\x0b\xe6\x58\xcd\x1c\xaf\xfa\xe3\xc4\x31\x76\xdc\xc0\x89\x55\x7d\xcf\x60\x88\xc6\xfd\xad\x06\x88\x58\xb1\x0c\xc2\x08\xc2\x08\xc2\x08\xc2\x08\xc2\x08\xc2\x08\xc2\x08\xc2\x08\xc2\x08\xc2\x08\xc2\x08\xc2\xd8\x6e\x84\xf1\x08\x8d\xb0\x43\xd1\xb8\xb5\xe8\xf8\x6e\xe7\x8a\x65\x63\x7e\x87\xa5\xca\x20\x9f\x20\x9f\x20\x9f\x2d\x25\x9f\xff\x71\x80\x46\xea\x32\x61\x14\x44\xc8\xc4\x9b\xff\xab\x9f\x7d\xc1\xe1\xbd\xf8\xe1\x7a\x98\x26\x27\x66\x6d\x41\x34\xc3\xae\x96\x8b\xfc\xfc\x00\x31\xab\x21\xe6\x79\x7f\x88\xf9\x28\x8b\x56\xba\x2b\x8a\xb6\xcb\x96\x52\x03\x57\x02\x57\x02\x57\x02\x57\x02\x57\x02\x57\x02\x57\x02\x57\x02\x57\x02\x57\x02\x57\x02\x57\x02\x57\xb6\x19\xae\x1c\xa1\x43\x2c\x1e\x1d\xb4\xc0\xe3\x5d\x4e\x5c\xc9\x27\x76\x80\x95\x80\x95\x80\x95\x80\x95\x2d\x85\x95\x3f\xde\x4d\x07\x0c\x5f\x45\x03\x52\xf1\x56\x2a\x95\x9a\xec\xcf\x43\xec\x6b\x21\xba\xb7\x6c\x27\x4b\x7f\x79\x5f\x56\x2e\x95\x8f\x05\xc4\xf5\xc4\x0e\x64\xe5\xd2\x84\xf3\x10\x43\xe8\x38\x31\x37\x63\x4e\x41\x83\xd3\x38\x8e\x55\x35\x34\x56\xd5\xd0\x58\x3d\x0d\xa5\x8a\xf4\xa4\x20\x82\x97\x69\x96\x13\xc1\x69\x9a\xa2\x64\x03\x44\xd0\x71\x9d\xb3\x39\xcd\x17\x0b\xb2\xaf\x3e\x48\x97\xc5\xd3\x10\xe5\xc4\xac\xfb\xef\x41\x90\x8b\x4a\x26\x93\xd3\xd4\x35\x0e\x6f\x96\xd7\x32\x59\xd9\xe2\xc9\xc3\x1a\xaf\x7b\xc4\x7e\xfc\x41\xf6\x2b\xdd\xf4\x3a\xd1\x9e\xf5\xc4\x0e\xa9\xb2\x94\x89\x88\x5d\xcc\x57\xc1\x1e\xad\xcd\x29\x99\x29\xab\xd9\x24\x6f\x36\x76\x44\x3f\x42\x94\x28\xab\x52\xab\xba\xec\x2f\xaa\x2e\x05\x5b\xcf\x3e\x95\xa3\xcb\xe2\xb9\x9c\xa7\x73\xfc\xb9\x9c\xa1\x53\x34\xee\x69\x69\x69\x54\x91\x33\xae\x39\xee\x72\x96\xbe\x9c\xf6\x79\x7f\x4e\x3b\xce\x4e\x18\x9c\x56\xfc\x9e\xc1\x6a\xdd\x7e\xad\x5a\x6d\xba\xdf\x1d\xdf\xde\xc6\x7a\xf4\xfd\xc3\xef\xdd\x5d\xf5\xe4\x0e\xab\x72\x31\x2f\xa5\xe5\x0d\x3d\xbc\x51\xe3\xa0\xad\x7d\x7e\xc9\xc7\x49\x1f\x6f\xf4\x2c\x2b\x99\x9b\x61\xfe\xbf\x91\xae\xd8\xe6\x1e\x20\x4a\x73\xfb\x95\xe6\xfe\xe9\x10\xfd\xcb\x10\xfb\xc9\x50\xf8\x27\xac\x1b\xf4\x57\x5d\x7c\xc6\x74\x49\x2a\x48\x59\x59\x15\x73\x7f\x31\xa4\xd4\x34\x25\x9d\xe3\xc3\x59\x6b\x96\x2d\x71\x4c\xa1\xa8\x11\x7d\xb6\x53\xba\x69\x8d\xef\x57\xa5\x17\xf4\xf3\x2f\x5d\x93\x35\xd9\xfc\xb4\x39\x0b\x61\x9b\x05\xb3\xf9\x47\x95\xcf\xa8\x15\x35\x92\x18\x39\xae\xef\xab\x4a\x69\x0e\x6a\xf3\x4a\x21\x2b\x3e\x64\x7c\xd6\xab\x4f\x50\xa4\x5c\x41\x8c\x2f\xf9\x97\xc4\xde\x97\xc3\x2b\x03\x23\x47\x96\x6f\x5a\x83\x93\xac\x92\x97\x0a\xd9\xb8\xa2\x66\x87\x8b\x2f\x64\x87\xd7\x0a\xb9\xb4\x92\x91\x87\x0f\xcc\x68\x73\x7a\x2b\xf1\xe8\x1e\xe7\xb5\x3a\x87\x13\xbf\xd1\x15\x78\x34\x59\xd0\xdb\x4b\xb0\x59\x4a\xd1\xce\x49\x31\xa1\x6b\x7e\x88\xf2\x0e\x21\xc5\xb5\x12\x35\x3b\x82\x25\xff\xf3\x9e\xaa\x10\x75\xb2\x28\xa9\xa5\x1c\xa7\xd9\x62\xb0\xb2\xa1\x58\x75\xb4\xa8\x0f\x52\xb6\x2e\x52\x3d\x58\xd9\xd0\x10\x3f\xa1\x83\x7c\x40\xb1\xcf\xb9\x71\x55\x56\xb3\xb2\x73\x6b\xaf\x73\xab\x3e\xb5\x29\xc9\xd9\x5c\x7a\xa8\x6a\xbf\xb2\x56\xf4\x7f\xdf\x34\xb6\xea\x67\x99\xd4\x07\x1d\xa9\x8a\x28\x39\x46\xc7\x1b\x18\x7e\xcc\xf1\x8c\x10\x42\xa4\x4f\x88\xfc\x48\x37\x7d\xb8\x9b\xbd\xd4\x1d\xfe\x80\x95\x22\x7d\xb1\xbb\x73\x42\x64\x05\x44\xd3\xef\x33\x4f\x0a\x71\xd0\xab\x77\x4e\x3b\x35\xdc\xef\xd1\x71\x07\x78\x76\x44\xe4\x10\xa5\x3c\x3f\xb2\xa0\x14\x86\xc4\xd1\x7c\x0f\x9e\x43\xd6\x22\xfd\x29\x4d\x29\xcc\x89\x1c\xe9\x25\xfd\xb5\x30\xfe\xbd\x60\xbe\x2c\xf6\x1f\x07\xbc\x63\x77\xf2\xb5\x2e\x7a\xb5\x8b\xbd\xd2\x15\xfe\xac\x35\xd3\xfa\x60\xd7\xb4\xa2\xa6\x79\xde\x2d\xab\xf0\xdb\xae\x44\xa2\x2b\xfa\x9f\xa2\x91\x89\xb2\xab\xe0\x73\xe8\x55\x59\x2a\x68\x91\x35\xcd\xce\x06\x0d\x49\x69\x7e\xe1\x3c\xc7\x96\xcf\xa5\x8d\x9a\xc6\x72\x3e\xa3\x45\x94\x1b\xc6\x3d\x15\x39\xa8\xa2\xac\x14\xf3\x72\x3c\x22\x7e\x91\x27\xb5\xcd\x67\xc9\xe7\xb2\xae\x37\xc0\xfa\xf9\xe8\x0e\x7e\x5a\x65\x09\xda\x5b\x6f\x64\xeb\x2d\x4c\x28\x0a\x61\xc2\x59\x3a\xcd\x4e\x46\xc7\x2c\xb8\xf5\xb0\x13\x88\xb9\xfc\xc6\xad\x80\xc7\xd8\x5f\x87\xe8\xc1\x1a\xd3\x6d\xf6\x07\x21\xf6\xb9\x10\xdd\x51\xb6\x31\x1c\xce\xf2\x7a\xda\x2b\x8a\xba\x6a\xb1\x0b\x29\xc2\x1f\x4d\xec\xfe\xca\x19\xf6\xc4\xdc\xcc\x79\x7d\x4b\x1b\x4e\xab\x37\xd6\xc9\x6b\x4f\xab\xf9\x35\xfa\xce\xa7\x3f\x1f\xa2\x3d\xe2\x76\x2f\x73\x21\x16\xfb\xb5\x10\xfb\x64\x88\x76\xf0\xff\xaa\x79\x5f\xf7\xea\x93\x0b\x7d\x2f\xdc\x4f\xc7\xfd\xfc\xad\x7e\x3a\x2d\xee\x27\x17\xd4\x14\x24\x57\x33\x40\x29\x5f\xbc\x66\xad\xee\xd5\x4a\x8a\x2a\x65\x65\x13\x03\xb2\xef\xf7\xb1\xbf\xe9\xa1\xb0\x79\xbc\xd3\x0e\x50\x1c\x17\xfe\xa1\xfa\xfc\x00\x17\x44\xc3\x26\xdc\x0a\xc6\x13\xf0\x10\x3f\x60\xa6\xf2\xe4\x16\x8d\x73\x2b\xff\x4d\xb8\x02\x6e\xc2\x15\x70\xd5\xff\xfb\x93\x62\x17\x8c\xef\x8f\x67\x6f\x33\xcb\x0e\x97\x3d\x17\xe7\xd7\x48\x3c\x37\xc8\xe0\x20\x83\x83\x0c\x0e\x32\x38\xc8\xe0\x20\x83\x83\x0c\x0e\x32\x38\xc8\xe0\x20\x83\x83\x0c\x0e\x32\x38\xc8\xe0\xe0\x0b\x08\xc1\x19\x04\x67\x10\x9c\xb5\x4c\x70\xf6\x99\x7e\x1a\x17\x08\x51\x5d\x96\xd2\x71\x0f\xd5\x59\x19\x42\x54\x95\xbc\xbc\x9c\x2b\x64\x72\x85\xac\xc6\x7e\xb4\x9f\xfd\x7d\x0f\x85\xf5\x83\x27\x2a\xc4\x68\x06\x3f\xbc\x51\x1f\x3f\x9c\x57\xf2\x72\x52\xb4\x1a\x10\x3c\x14\xdc\x6d\xbe\xf2\xcc\x4c\x78\xe8\xf8\xc1\xd9\x9c\xb6\xed\x0a\x0d\x6f\x05\x49\xbc\xee\x0f\x09\xcf\xb3\x73\x06\x24\xf4\xec\x4f\x06\x24\x74\xdc\x7f\x17\x42\x58\x17\xb5\x04\x46\x04\x46\x04\x46\x04\x46\x04\x46\x04\x46\x04\x46\x04\x46\x04\x46\x04\x46\x04\x46\x04\x46\x04\x46\x04\x46\x04\x46\x04\x46\x04\x46\x6c\x15\x46\x7c\xdf\x12\x5d\xf4\xc7\x88\x35\x17\x4f\x96\x61\xc5\xff\xfa\x3c\xfb\xbd\x5e\x7a\xc0\x0d\x2b\x8a\x45\x2d\x03\x62\x2c\xa9\x1a\x5f\x41\x33\x4c\x9a\x4e\x7c\x0e\xb8\x14\x4b\xe8\xbb\xba\x60\xc0\x8a\xb5\x2c\x8e\x43\xda\x9c\xfd\x25\x81\xbd\x80\xbd\x92\xc0\x5e\xc0\x5e\xc0\x5e\xc0\x5e\x1d\x83\xbd\x92\x6d\x83\xbd\x02\x3f\x93\x86\xb1\x57\x12\xd8\x0b\xd8\x0b\xd8\x0b\xd8\x0b\xd8\xab\xf5\xd8\x2b\xd9\xd1\x94\x2a\x09\x4a\xd5\x3c\x4a\x95\x6c\x77\x4a\x95\xdc\x86\x94\x2a\x95\xa6\x0b\x42\x33\x35\x41\x67\xb8\x66\xea\x04\x8d\xd2\x51\xcf\x65\xfd\x1c\x65\x99\x8b\xfa\x2b\xe4\x62\xbe\x5a\xa9\x9c\xbf\x56\x6a\x9a\x4d\x6d\x4e\x2b\x65\xac\xed\x7f\xc8\x5d\x2a\xb5\x93\xed\xe0\x2a\xa9\xe8\xa7\x77\xd7\x22\x69\xf7\x88\xcf\x54\x44\x2a\x83\x66\x87\xc5\x5f\xb7\x06\x9b\x09\xca\x75\x9e\xce\xd1\x64\x85\xf1\xca\x61\x4a\x6c\xf8\x71\xc1\x71\x05\xa6\x54\x0d\x9a\x52\xfd\x5d\x17\x4d\x89\x88\x71\x8a\xc6\x79\xc4\x38\x4a\x8d\x74\x41\x9a\x11\x56\x54\x49\x3a\x6b\x5b\x51\x35\xd8\x54\x4a\x6f\x6a\x84\x4d\xd2\x04\xed\x9a\x48\xeb\x5f\xa0\xc6\xdb\xf2\x0b\x62\xde\x91\xa5\xa8\x68\x25\x6a\x61\x90\x8b\xfd\xc4\x50\xad\x20\x66\x8c\xaa\x23\x69\x25\xaf\xcf\x91\x8d\x6f\x9e\x33\xa0\x9d\x12\x7b\x78\x05\xb4\x49\xeb\xc0\x56\x84\xb6\x27\x68\x9e\xe6\x9c\xa1\x2d\x96\xa4\xb3\x0d\x68\x77\xa7\xf8\x35\x5d\xe1\x9c\x57\x03\x11\x06\x11\x06\x11\x06\x11\xee\x20\x22\x8c\x91\x9d\xcf\xc8\xae\x7d\x90\xf9\x37\x42\xf4\xf5\x10\xfb\x6a\x28\xfc\x25\xeb\x51\x7d\x34\xf4\x84\x73\x92\x9a\x2b\x44\x34\x31\xd1\x8c\x2c\xcb\x2b\x22\xbf\x6c\xc1\x1c\xfb\x93\x65\xbc\x25\xfc\x66\x39\xc6\x90\x05\xa5\x30\x54\x90\xb3\x12\x7f\x24\xc6\x3c\xd5\x39\xd6\x14\x58\xd7\xea\x0c\xc6\x78\x21\xb7\xba\x2a\x67\xf4\xd1\x6c\xfe\xa6\x9d\xf8\xb5\x43\x7b\x2e\x3f\x68\x4c\x5f\xf9\xe5\x46\xb2\xaa\x94\xe6\xfd\x24\xa7\x64\xac\x0f\x8f\xfd\x71\xe0\x39\x75\xf3\xb9\xac\x69\xfa\x49\x3a\x6f\x94\xa4\x1f\x69\x5e\x90\xf1\x23\x2b\xe2\x7d\x33\x9b\x88\x8b\xf3\x14\x76\x78\x2e\xe7\x18\x65\xfc\x14\xe6\xf8\x19\xb8\x4d\xcb\x91\x99\x40\x66\x02\x99\x09\x64\x26\x90\x99\xe8\xe8\xcc\xc4\x17\x42\xf4\x5a\x88\xbd\x1a\x0a\xbf\x62\x7d\x6d\xdf\x1b\x9a\x72\xac\xaa\x2d\xe6\x65\x49\x93\xad\x57\x7f\x4e\x55\x8a\x52\x96\x7f\x87\x85\xd5\x73\x99\x2e\xc9\x7c\xdc\xf6\xb2\x5c\xfd\x81\x27\xe2\xa3\xf1\xc8\x82\x88\x23\xe2\x23\x59\x94\x0b\x7a\x37\xb5\xbf\x22\x72\x44\x51\x8b\xd7\xa4\x82\xa9\x93\x52\xd7\xe4\xe1\x15\x29\x6f\x8e\xfe\xa3\x62\x6b\x34\xb2\x92\x2b\x48\xf9\xdc\x0f\x99\xe1\x7b\x59\x8e\x48\x19\x8e\xf9\x95\x61\x41\x7d\x33\xf6\xd0\x52\x34\xde\xa7\xd9\x07\x89\xf1\x76\x3c\x72\x2e\xc7\x43\x92\xe3\xc4\x15\xb5\xfa\xca\xec\xd4\x4a\x49\x0c\xf7\xf9\xe8\x4f\x29\x5d\x8b\x47\xf7\x8a\xf3\x99\x32\x2f\xa4\x5c\x70\xf5\x8e\x1e\x7a\x7b\x0f\x7b\x5b\x4f\xf8\x07\x96\xea\xee\x8b\xdd\x4f\x19\x71\x50\xef\xa2\xd7\x94\x1b\x91\xac\xa4\x2e\x4b\xd9\x32\x10\x61\x0d\xd4\x64\x75\x45\x51\x57\xf5\x7b\xe1\x7a\xa6\x57\x2a\x7e\xdc\xfb\x44\xf9\xb0\xc6\x1c\x93\x08\x33\x58\xbd\x47\x64\xe4\x74\x2e\x63\x0f\xac\xf9\xb7\x51\xb8\xe6\x9a\x77\x57\xe3\x0e\x9b\x7c\xab\xf9\xf5\x8b\x3b\x6e\xa3\x19\x37\xad\x7c\x86\xa5\xb5\x2b\xff\xb1\x78\x44\x80\x27\x1e\x8b\x9d\xa3\xd5\x3e\x71\x0d\x7d\xfa\x9c\x87\xff\xab\xbc\x63\x68\xe3\x91\xbe\xa4\x94\x7e\x21\xab\x2a\x6b\x85\x8c\xbe\x17\x17\xb9\xf1\x9d\x2a\x6e\x9c\x18\xac\x18\x23\xa0\xf2\x46\xcc\x2b\x58\xb6\x5a\x1a\x8f\xf4\x4d\x2b\xaa\xec\x68\x36\x92\x96\xb4\xb4\x94\xd1\xaf\xde\xb8\x3f\x42\xd6\xc8\xdb\xd3\xc4\x70\xba\xaa\xc1\x15\xab\x8d\x78\xf4\xae\x62\x65\xbf\x71\x8e\x6d\x90\xf8\x43\xe2\xaf\x43\x13\x7f\xa9\x2c\xcd\x0a\x24\x7e\x8e\x26\x39\x12\x3f\x45\xe3\x74\xa2\x01\x78\x29\x2a\x05\xf8\x32\xe8\x98\x3b\x83\xbe\x9b\xdd\x25\xde\x66\x3b\xd2\xb6\x92\x47\x6f\x47\xb7\xeb\x77\xee\xa4\x63\x66\x25\x7c\xef\x0a\x46\x56\xc5\x22\x7d\x60\xbb\xa2\xa8\x37\x24\x35\xc3\xfe\xe8\x36\xf6\xfe\x90\x5d\x0d\x3f\x96\x56\x0a\x05\xfd\x6a\xcf\x9f\x7b\xc2\x16\x99\x97\x94\x88\xe3\x18\xbd\x8f\xcd\x29\x99\x58\xbf\xb1\xaf\x28\x46\x7f\x5e\x2e\x95\x95\x8f\x98\xb3\x0f\x18\xe9\x8e\x0d\xc7\x84\xb9\xc5\x28\xed\x13\x7d\xec\x5e\xba\x9b\xf7\xb1\x3b\xe8\xf6\x5f\xea\xda\x45\xc6\xc5\xf8\xf6\x99\xa7\xfc\xfb\xc1\x11\x36\x52\x59\xcf\xdd\x38\x9d\x69\x71\x3a\x06\x55\x2f\xaf\xef\xfe\x88\x7b\x67\x24\xb6\xcb\xb8\x4a\x8a\xfe\x07\xc7\x7d\x3a\x68\xde\xa7\xb9\x2b\x0b\xbe\x37\x6a\xa0\xec\x46\xcd\x29\x5a\xfb\xdc\x29\xe7\x3d\xa8\xef\xae\xd5\x71\xa7\x52\x49\x3a\xcb\x4e\x47\x4f\x5a\xaf\xd0\x23\x15\x96\xf3\xd5\xcd\x6e\x85\xe9\xfc\x33\xf4\x14\x7b\x32\xbc\x60\xbe\x86\xa3\xb3\x06\x33\xd1\x9f\x20\x7f\x94\xe6\x63\x9c\x37\x2b\x35\x38\xe6\x71\x4f\xc9\xcb\x0b\x4a\xfa\x05\xb9\xa4\x45\x77\xf0\x03\x9c\xa1\x94\xbd\xaf\x5f\xbc\x90\x9a\xfe\x3f\xaa\x9c\xcd\xf1\x22\x25\x2e\x4b\x66\x84\xf1\x8e\xb1\x68\x20\x97\x96\x35\xf6\x97\x7d\xec\x4b\x3d\x74\x5f\xc5\x71\x56\x3e\x6c\xbd\x3e\xd3\x9d\x89\xb9\x99\x05\xd1\x62\x40\x9e\x3b\x03\xfc\x80\x89\xf2\xb3\xb2\xab\xcc\x19\x3f\x06\xa7\xee\x4d\x38\x75\xcb\xfe\x6f\x6c\x92\x9d\x35\xde\x52\xf7\x7e\x55\xfd\x39\x13\xaf\xb2\xfd\x84\x60\xad\x83\x35\x46\xb0\xd6\x41\x46\x19\x19\x65\x64\x94\x3b\x29\xa3\x0c\x6b\x1d\x58\xeb\x20\x93\x87\x4c\x1e\x32\x79\xc8\xe4\xb5\x45\x26\x0f\xd6\x3a\xb0\xd6\xd9\x2e\xb9\x0b\x58\xeb\x34\xc3\x5a\xe7\x2f\x1e\x30\x8b\xfc\x49\xc5\xa2\x56\x83\xdd\x67\xe4\x62\x5e\xb9\xa9\x7f\x7a\x2d\x84\x2f\x0a\x3d\xb3\xf7\x3d\xc0\xbe\x1b\xa2\x9d\xfa\xf1\x4b\xeb\x89\x70\x9f\x2a\x4b\x19\xcf\x22\xd0\x53\x56\x33\xb1\x47\xf5\x1d\x27\x8a\x45\x6d\xd1\xb1\xe0\xc7\xde\xde\x8c\xa2\xf4\xa9\x67\xe8\xb4\xe0\x6e\xa3\x74\x94\x73\xb7\x61\x1a\xa2\x83\x9e\x4b\x1b\xf4\x6b\x12\x4a\x78\xf3\xac\x36\x51\xa1\x3b\x2b\x97\xe8\xfa\x65\x7f\xbe\x76\x90\x0d\x58\x7c\xad\xa8\x19\xf0\xcc\x71\x06\x4e\x5c\x1e\xfe\xad\x5d\xf6\x9d\x8f\x19\x85\xff\xeb\xb9\xf9\x7d\xc6\xbe\xad\xbd\xff\x49\x8e\x39\x2b\x56\x5d\x6d\xec\x01\x40\x95\x8b\xf5\x56\x0d\xae\xb7\xfa\xb9\xae\x4d\xbf\xfd\x93\x62\xa5\xd5\x49\x1a\xb3\x57\x5a\xb5\x30\x84\xf0\x22\xff\x01\x87\x90\xe4\xdf\xdd\x6e\x87\x90\xc3\x75\x57\xf3\x77\xc4\x92\xc7\x8a\x22\x2d\xd3\xaa\x48\x82\xa2\xfd\x9d\x16\xd2\x50\xb4\x1f\x45\xfb\xb7\xb8\x68\x7f\xf3\x47\x8e\x01\xc7\x75\xff\xa2\xfc\xa3\x74\x94\x1d\x8e\x26\x2c\x75\xc3\xeb\x9d\x0a\x09\xbb\xd5\x5b\xa2\x16\xff\x5f\x85\xe8\x7e\x31\xcf\x31\x6a\x94\xdb\x22\x88\x61\xf6\xf9\x10\xfb\xfd\x10\x91\xb1\x45\xff\x0e\xde\x97\x95\x4b\xe5\x1c\x51\xcc\xd0\x78\x09\x7e\xb3\x00\x75\x62\x62\x6e\xc6\xcc\x59\x05\xf8\x79\x0b\xac\x64\x7c\x91\x9e\x14\x5d\x56\xff\x5e\xe9\x5d\x76\x9a\xa6\x28\xd9\x58\xc9\x78\xf3\x3a\xeb\x71\xa7\x60\xaf\x0c\xd0\x85\x7a\xfd\x5a\x85\xf8\x24\x9d\x5f\xd3\x4a\xfa\xf7\xc6\x76\x69\x35\x66\x99\xec\x1f\xfb\xd9\xcb\x3b\x6a\xad\xce\xfe\x64\x97\x31\xe1\x77\x68\x50\x0a\x26\x42\x33\x2d\x5b\x27\xc5\x0f\x04\x5d\x07\x6a\xd0\x26\xe7\x3c\x3b\x60\x70\xd6\x5c\x49\x5e\xb5\xbf\x3e\x7d\x65\x59\x18\x47\xdb\xf1\xd8\xb0\x57\x15\x29\xb1\x6c\xbc\xea\xa4\xa1\x6b\xa9\x8e\x9b\x45\xff\xb8\x79\x89\x5d\xac\x53\x96\x59\x7d\xcb\x5d\x2c\x51\xbc\x23\xeb\x0d\x11\x59\x21\x6f\x81\xbc\x05\xf2\x16\xc8\x5b\x20\x6f\x81\xbc\x05\xf2\x16\xc8\x5b\x20\x6f\x81\xbc\x05\xf2\x16\xc8\x5b\x20\x6f\x69\xad\xbc\xe5\x0c\x9d\x62\xe3\xd1\x13\x16\xa8\x7a\xc8\x49\xb8\xaa\xa7\x7a\xd5\xa4\x0b\xfa\x18\xe8\x63\xa0\x8f\xe9\x60\x7d\xcc\x4b\x0f\xd0\x51\x9f\x55\xad\xe6\xaa\xb9\x0a\x59\xcc\xb7\xef\x67\xdf\x72\x2c\xd6\x7c\xb4\xa6\x2c\xc6\x58\x18\x15\x7b\x44\xdf\x4b\x2c\xd1\xb4\x33\xa9\xc6\xc6\xa6\x08\x62\x16\x69\x5c\x00\xbb\x23\x34\xc2\x81\xdd\x20\xc5\xa8\xdf\x33\xad\xa1\x5f\x0d\x5f\x5d\x6d\x2c\xe4\xda\xa4\x1a\x66\xc6\x1f\xdd\xf5\xb2\x47\x2b\xd7\x84\x9a\x3f\x5e\x26\x84\xf9\xf0\x2e\xfb\x5e\xf7\xf9\x09\x61\xcc\xdb\xfd\xa8\xb1\x63\x0b\xef\x78\xf2\x34\x9d\xa4\xb1\x8a\xe4\xf1\x06\x6e\x39\x92\xc5\xd0\xbf\x34\xa8\x7f\x79\x77\xd7\xe6\x5e\xf6\xb3\x42\xfc\x72\x82\x46\x6d\xf1\x4b\xb0\xe1\x22\xb8\x78\xe0\x23\xa2\x49\x7e\xf3\x76\x3b\x5c\x1c\xaa\x5b\xf4\x62\xc6\x8d\x28\xcf\xa0\xb6\x28\x6a\x40\xee\xd2\x69\x11\x0c\x72\x17\xc8\x5d\xb6\x58\xee\xd2\xe4\x71\xa1\x9f\x36\xa5\xce\x2f\x41\x2d\xe7\x10\xcb\x6b\xe0\x08\x8d\xb0\x43\xd1\xb8\x05\x01\xee\x76\x42\x00\x63\xaf\x5b\x42\xe3\xf2\x6b\x03\x74\xc5\xd0\xf2\xaf\x95\x14\x2d\x2d\xe5\x73\x85\xec\xf0\xfa\x88\x53\x68\xe1\x31\x87\xe1\x8f\x47\x7f\x95\xf3\x45\x25\x63\x1e\x2d\xab\x1a\xfb\x66\x3f\xfb\x87\x1e\xba\xdb\xd1\xe0\x92\xd1\x60\xf8\xc5\xae\xfa\x6c\x40\x2e\x58\x6d\xcf\x29\x99\x09\xab\xed\x80\x3c\x41\x4e\x0a\x4f\x10\xfb\xfc\x16\x47\x2a\x6a\x88\x78\xfc\xfe\xf6\xb0\x09\xf1\x7a\x91\x82\xd7\x59\x6c\xc8\x26\x24\xeb\xff\x7a\x4e\xb1\xa4\x78\x11\x3d\xee\xbf\x63\xb8\x26\x9e\x98\xf9\x06\x3b\xfa\x1a\x94\x14\x50\x52\x40\x49\x01\x25\x05\x94\x14\x50\x52\x40\x49\x01\x25\x05\x94\x14\x50\x52\x40\x49\x01\x25\x05\x94\x14\xad\x56\x52\x6c\x3f\x1c\x02\xa9\x05\xa4\x16\x90\x5a\x6c\x23\xa9\xc5\xe7\xfa\xe9\xb8\x17\xbe\x1c\x31\xf0\xa5\x27\xa7\xfc\xe7\xfd\xec\xad\x3b\xdc\x38\xe5\x48\x9b\x70\xca\xa4\x3b\xa7\x1c\xa9\x41\x27\xa7\x15\x75\x22\x9f\xb7\x40\x66\x70\x29\xc5\x5b\x68\xf1\x57\x7d\x20\xd2\x85\x2c\x6e\x88\x4d\x8e\x50\x5d\x58\x14\xb4\x12\xb4\x12\xb4\x12\xb4\x12\xb4\x12\xb4\x12\xb4\x12\xb4\x12\xb4\x12\xb4\x12\xb4\x12\xb4\x12\xb4\x12\xb6\xc6\x60\x89\x60\x89\x60\x89\xad\x62\x89\xaf\x0c\xd0\x21\xc1\x12\x0b\x4a\xc6\xe1\xf5\x25\xe5\x8b\xd7\xa4\xc4\xb0\xba\x56\xd0\x2f\x38\x9d\x97\x34\xcd\x5a\xb8\xc5\xfe\xe5\x00\xfb\xd1\x6e\xba\x43\x3f\x62\xc9\xdc\x35\xfc\x30\x5f\xb7\x55\x3e\xfb\x9c\x17\x87\x4f\xea\x87\xc7\xf6\xe9\x3b\x5c\x56\x32\xf2\xa2\x71\x88\x73\x6b\xc0\xab\xb5\x24\x9a\x16\x84\xed\x0c\x9d\xe2\x84\x6d\x94\x8e\xd2\x61\x4f\x55\x2e\xbf\x76\xf3\x4a\xe2\xce\xf3\xda\xec\xc2\xad\xab\xfe\xd8\x6d\x8c\x1d\x37\xb0\x9b\xe3\x11\x98\xc5\x2f\x9d\xa7\xe2\x10\xf1\x8a\x33\xa5\xf0\x57\x76\x55\x3e\x86\xa8\xb9\xa4\xab\xc6\x93\x78\xd8\xd8\xa7\x35\x0f\x23\x39\x43\xe7\xe9\x5c\xc5\xb2\x88\xc6\x9e\x06\x56\x44\x60\x4d\x57\x83\x6b\xba\x5e\xee\x0a\x2c\x24\x5c\x14\xcb\xbb\xa6\x28\x69\x2f\xef\x6a\x5a\x7c\xa9\x2f\x80\xd4\x15\x2d\x5c\xa2\x8c\xcf\xea\xaf\xd8\xbb\xf6\x56\xc6\x97\x7b\x8d\x62\xe0\x52\x79\x48\x79\x48\xfc\xb9\x45\x11\xe5\x09\x9a\xa7\x39\x67\x44\x89\x25\xe9\x6c\x03\xf9\x93\x29\x7e\xd2\x46\x55\x53\x04\x17\xbf\xe0\xf2\x8d\x10\x7d\x3d\xc4\xbe\x1a\x0a\x7f\xc9\xba\x41\x1f\x0d\x3d\xe1\x1c\x55\xe5\xf4\xc1\x3d\x1f\x19\x45\x96\xe5\x15\x91\x61\xb1\xa6\x33\x36\xc6\x37\x66\x90\xfc\x14\x1d\xc1\xa3\xa0\x14\x86\x0a\x72\x56\xe2\x37\xc2\x18\x58\x39\x83\x8c\x00\x1b\xd6\x23\x30\x7a\x62\x6e\x75\x55\xce\xe8\x61\x2c\x7f\xd3\x4e\x7d\xd8\xb8\x3b\x97\x1f\x34\xc6\x5b\xa2\x76\x7e\x56\xd5\xbf\x8e\x45\x59\xcd\x29\x19\x6b\xdc\x68\x7f\x28\x79\x56\xc9\xbc\x1b\x6b\x9a\x7e\x92\xce\xb1\xaa\xa4\x1f\x69\x5e\x90\xf1\x23\x2b\x62\x8a\x6f\x36\x11\x17\xe7\x29\xd6\x29\xb9\x9c\x63\x94\xf1\x53\x98\xe3\x67\xe0\x32\x8e\x4c\x7e\x21\x44\xaf\x85\xd8\xab\xa1\xf0\x2b\xd6\x6d\x7e\x6f\x68\xca\x91\x5b\x2d\xe6\x65\x49\x93\x2d\x1e\x33\x57\x59\x23\xbf\x2c\x25\x63\x5e\x8b\x9d\x9c\xd5\x9f\x52\x22\x3e\x1a\x8f\x2c\x88\x07\x52\x72\xd6\xf5\xb7\xd1\x9e\x1c\x51\xd4\xe2\x35\xa9\x60\xa6\x88\xd4\x35\x79\x78\x45\xca\x9b\x28\x3c\x2a\xb6\x46\x23\x2b\xb9\x82\x94\xcf\xfd\x90\xc9\xd4\x96\x65\x7d\x9c\xca\x27\x2e\xc3\x62\x7c\x9a\xb1\x39\xab\x68\xbc\x4f\xb3\x0f\x12\xf0\x39\x1e\x39\x97\xe3\xdd\xd9\x71\xe2\x8a\x5a\x7d\x65\xf6\x24\xb0\x24\xd8\x37\x7f\xd9\x94\xd2\xb5\x78\x74\xaf\x38\x9f\x29\xf3\x42\xca\x72\x4d\xc9\x77\xf4\xd0\xdb\x7b\xd8\xdb\x7a\xc2\x3f\xb0\x12\x8e\x5f\xec\x7e\xca\x80\x53\xfa\x2b\xa5\xcf\xc2\xb2\x92\xba\x2c\x65\xe5\x88\x5d\xcb\xdc\x7e\x2f\x64\x75\x45\x51\x57\xf5\x7b\xe1\x7a\xa6\x57\x2a\x7e\xdc\xfb\x44\x79\x7f\x36\x3b\x63\x51\x5c\x55\x4e\xef\x28\xe9\x5c\xc6\xa6\xcc\x1c\x58\x8a\x75\x6c\xe6\xdd\xd5\xe7\x65\x06\xce\x33\x91\x64\xdc\x71\x1b\x4d\x98\x65\xcd\xbc\xac\x34\x63\xf9\x8f\xc5\x23\x13\x69\x7d\x92\xc6\xbf\xb8\xce\xe0\xd0\x27\xae\xa1\x2f\x32\x64\x3c\xf8\xf2\x8e\xa1\x8d\x47\xfa\x92\x52\xfa\x05\xfd\x2b\x52\xc8\xe8\x7b\xf1\xfc\x1e\xdf\xa9\xe2\xc6\x09\x82\x6c\x74\xfd\xf2\x46\xcc\x2b\x58\xb6\x5a\x1a\x8f\xf4\x4d\x2b\xaa\xec\x68\x36\x92\x96\xb4\xb4\x94\xd1\xaf\xde\xb8\x3f\x22\xa3\xcb\xdb\xd3\x44\xf4\xaa\x6a\x70\xc5\x6a\x23\x1e\xbd\xab\x58\xd9\x6f\x9c\x23\x81\x4f\x75\x05\x5c\x3a\x7f\x5e\x6f\x6d\x84\x5d\xa4\x19\xda\x25\xee\xad\x9c\x69\x76\x39\xfe\xfa\x86\x05\x75\x8d\x01\x5c\xc6\x0e\xd7\x23\xee\xc3\x82\xdd\x6c\xa7\x78\x0a\x94\x7c\x71\x4f\xe5\xc8\xe0\x60\xd5\xea\xf0\x1a\x53\x90\xfd\x7c\xf9\x62\xf3\x87\x0b\x58\x13\xde\x69\x83\x14\xac\x09\xc7\x9a\xf0\x2d\x5e\x13\xde\x3a\xfa\xd4\xe4\xcf\x80\x6f\x65\x84\x13\x34\xca\x8e\x46\x0f\x5b\x6a\xe7\xfb\x9d\x4b\xc6\x9d\x6d\x35\xdf\x31\x8e\xbd\xaf\x9f\xc2\xa6\x03\x95\xb1\x86\x5b\xc9\xd8\xd0\xf2\xc5\x7e\xf6\x99\x1e\xdb\xcb\xe4\x43\xf5\x98\xe1\xeb\xdf\xa7\xb6\xb0\xbf\xbf\xf3\x86\xc3\x47\x45\xc9\xc8\x50\x38\x6e\xc4\x2a\x41\x98\xcd\x5f\x9f\xf6\x7f\x59\x0e\xb0\x47\x6a\x59\x25\xe8\xb7\x1e\xe2\x45\x88\x17\x21\x5e\x84\x78\x11\xe2\x45\x88\x17\x21\x5e\x84\x78\x11\xe2\x45\x88\x17\x21\x5e\x84\x78\x11\xe2\xc5\x56\x8b\x17\x13\x34\xcc\x86\xa2\x07\x2d\xf8\xb0\xd7\x09\x1f\xf4\xa9\x1a\x6c\xea\xa1\x77\x84\xde\x11\x7a\x47\xa7\xde\x31\x44\xb7\x09\xbd\x23\xfb\xf5\x10\xfb\xd5\x10\xf5\xe8\xff\x11\x0e\x97\x97\x31\x9d\x98\x9b\xb1\xde\xc8\xd8\xeb\xb2\x72\x69\x62\x6e\xc6\x68\xb5\x1d\xeb\x97\xae\x8a\x14\xe4\x21\x9e\x82\x0c\x5d\xb9\xc8\x26\x69\x82\xce\x34\x56\xbf\xf4\xbc\xaa\xac\x15\xeb\x2a\x5e\xfa\x3f\x43\xb4\xdf\x58\x86\xae\x4f\x79\xb3\x39\x9e\x23\x73\x54\x2e\x65\xff\x25\xc4\x3e\x1f\xa2\x3b\x2b\x36\x8b\x9b\x9d\x2b\xac\x28\xea\xaa\xd5\x37\xa5\x08\x67\x6d\x31\x7d\xdb\x44\xf9\xfe\xe6\x49\xb5\xe1\x8d\xcf\xd1\x65\x71\xe3\xcf\xd3\x39\x7e\xe3\xcf\xd0\x29\x1a\xdf\xc4\x8d\xf7\xbd\xe9\x7f\xd4\x4f\x49\x71\xd3\xd3\xb2\x6a\xbc\x05\xb2\xe6\x51\x2b\xd6\xb1\x47\x2e\x5b\xc8\x15\xb2\xe6\x28\xc5\x70\x01\xb8\xc7\xb9\x87\x55\x26\xf6\xed\x75\xda\x00\x4c\xda\x07\x2f\x88\xe6\xe7\xcd\xa4\x5e\x20\x46\x00\x47\x05\xf3\x76\x9c\xa2\x59\xed\xd5\xeb\x87\xb7\x87\x53\x69\xeb\xc9\x78\x5d\x4e\xa5\x6f\xf2\xa7\xe3\x97\xd9\x6c\x55\x8d\x57\x03\x91\xbb\xf4\x46\xb3\x50\xac\xd7\xd3\x02\x48\x07\x48\x07\x48\x07\x48\x07\x48\x07\x48\x07\x48\x07\x48\x07\x48\x07\x48\x07\x48\x07\x48\x07\x48\x87\x0b\x00\xa8\x38\xa8\x38\xa8\x78\xcb\xa8\xf8\x77\x7b\x4d\x94\x2b\xd0\x8a\xcd\x13\x8d\x3f\xb0\xff\xa3\x97\x7d\xae\x9b\x76\x8b\xff\x5a\x5a\x4f\x84\x0f\x88\xd1\xa0\x6a\x7c\xc7\xcc\x40\x67\x2a\x67\x39\x98\x8a\x3d\xa2\xef\xc4\xff\xa9\x2d\x26\xf8\xff\x6f\x37\xab\xce\x67\xe9\x8c\xc0\x75\xc7\xe9\x18\xc7\x75\x87\x28\x4e\x83\x9e\x52\x6e\xe3\xf6\xad\x27\xe2\xfc\x6a\xeb\xe1\xe8\xd7\x1f\x72\xa7\x73\x3b\xd9\x0e\x01\xe6\xe6\xfd\xc1\xdc\x30\x1b\x32\x38\x5c\xd9\xf3\x33\x08\x9c\x80\x84\x4e\x5d\x2b\xc8\x1b\xc8\x1b\xc8\x1b\xc8\x1b\xc8\x1b\xc8\x1b\xc8\x1b\xc8\x1b\xc8\x1b\xc8\x1b\xc8\x1b\xc8\x1b\xc8\x1b\xc8\x1b\xc8\x1b\xc8\x1b\xc8\x5b\xab\xc8\xdb\x8b\x4b\x74\x52\x90\x37\x75\x59\x4a\xc7\x4d\x3a\x54\xa6\xa3\xb4\xdc\x38\xd3\xf9\x35\xad\xa4\x4f\x5c\xf2\xf2\x72\xae\x90\xc9\x15\xb2\x1a\xfb\xf4\xf3\xec\x2b\xbd\x14\xd6\x8f\x9e\x70\x1e\x6c\xfb\xb2\x1c\xaa\x4d\xea\x26\x45\xa3\xf3\x4a\x5e\x4e\x8a\x46\x63\xc3\xfa\x11\xf3\x95\x2d\x9a\x46\x2d\xd5\x07\xb4\x39\xc4\x4b\x82\x76\x81\x76\x25\x41\xbb\x40\xbb\x40\xbb\x40\xbb\x3a\x86\x76\x25\xdb\x86\x76\x05\x7e\x26\x0d\xd3\xae\x24\x68\x17\x68\x17\x68\x17\x68\x17\x68\x57\xeb\x69\x57\xb2\xa3\xe1\x54\x12\x70\xaa\x79\x70\x2a\xd9\xee\x70\x2a\xb9\x0d\xe1\xd4\x06\xd7\x2a\xc6\x39\xc1\xb2\x7c\x2c\xab\x31\x51\x20\x6a\xa8\x0d\x2f\x53\x2c\x77\xbc\xf4\xa4\x6c\xe6\x6a\xc5\xaa\xb3\xa6\xe8\x77\x76\xd7\xe4\x6b\x0f\x8a\xef\x56\x44\x72\x43\x69\x09\xb1\x71\x2b\x60\x9a\x60\x5f\x57\xe8\x12\x5d\xac\xf0\x1f\xae\xe1\x4c\xed\xfb\x10\x61\x40\x8c\x12\x2c\x0d\x96\x60\x79\x67\x68\x43\xc6\xeb\xbe\x5d\x91\x1e\x17\x85\x58\x52\x74\xc1\x2e\xc4\xb2\xc9\x26\x37\xee\xe5\xee\xdf\xa6\x5f\xc8\xab\x2f\xa4\x35\x1e\xc0\xaa\x83\x61\x8d\x28\x5b\x54\xb4\x12\xc5\x7e\x76\xa8\x66\xc8\xeb\x33\xbc\xfd\x1d\x85\x12\x94\x15\xb7\xf0\x37\x2e\x76\xf4\x0e\x7f\x56\x03\x4d\x0f\x84\xcd\xa9\x19\x03\xaa\x0c\xaa\x0c\xaa\x0c\xaa\xdc\x39\x54\x19\xe3\x3f\x9f\xf1\x5f\xfb\x60\x77\xd4\xeb\x6a\x49\xbd\x2e\x64\x37\x90\xdd\x40\x76\x03\xd9\x0d\x64\x37\x3a\x3a\xbb\x81\xb2\x8d\x28\xdb\x88\xb2\x8d\xcd\x2a\xdb\x88\xe4\x21\x92\x87\x9d\x9a\x3c\x4c\x65\x03\xae\x58\xea\x47\xa4\x63\xee\x78\xf8\x6e\x76\x97\x78\x9b\xed\x48\x5b\x6f\x42\x2e\x48\x7a\x1d\x7c\xe9\xb8\x8f\x0d\xd0\xe3\xfe\x2a\x7c\xa7\xb7\x6e\xc1\x72\xb0\x10\xf5\xe5\xf8\xbf\xdf\x32\x5c\x26\xcd\xff\x4a\x3f\xfb\x76\x0f\x3d\xe0\xc6\xd1\x85\xd3\xee\x8d\xfa\x8c\x76\x1d\x77\x23\x20\x6b\xdd\x63\xfc\x00\x17\x2a\xcf\xcf\xcb\x72\xe7\xc8\x54\x24\x6f\xdb\x5c\xe7\xdf\xbe\xde\xba\x39\xff\x77\x64\x9a\x4d\xd5\xf9\x8e\x78\xbc\x1c\xc2\x8e\x17\xce\x1e\x58\xeb\x00\x67\x0f\x64\xa5\x90\x95\x42\x56\xaa\x83\xb2\x52\x70\xf6\x80\xb3\x07\xb2\x01\xc8\x06\x20\x1b\x80\x6c\x40\x5b\x64\x03\x52\x6f\xa4\xe7\xd9\x73\xd1\x67\xad\xe2\x74\x63\xc6\x2f\x0b\xd9\xa7\x3e\xc0\x59\x2b\x5d\x8b\x68\x69\xa5\x28\x0f\x46\xb4\xb5\xf4\x35\xfd\xee\xf3\x11\xac\x2c\xad\x0a\x2c\x5c\x54\x15\x7e\xa5\xd1\xdd\x16\x61\x40\x2d\x3b\x78\x87\x6c\x43\xc2\x0a\xef\x90\x66\x78\x87\x7c\xf5\x39\xea\xd5\x1f\xdd\xf0\x7a\xc2\x8b\x47\x6a\x72\x5a\x95\x4b\x1a\xfb\xd8\x73\xec\x7f\x3c\x46\x3b\xd3\x8a\x2a\x2f\xad\x27\xc2\x8f\xd6\xb6\x04\x59\xe0\x47\xc5\xc2\xfa\x5e\x93\x8a\x2a\x2f\x3a\x90\xa0\xd8\xd6\xe6\x24\x10\x8e\x1f\xa0\x60\x70\xfc\x00\x05\x03\x05\x03\x05\xeb\x20\x0a\xd6\x46\xd2\xe3\xb6\xa1\x60\xd0\xc4\x82\x82\x81\x82\x81\x82\x81\x82\xc1\xf1\x03\xa2\xbd\x5b\x07\x29\xb5\xbd\x68\x6f\x5b\x3a\x7e\x3c\x43\xa7\x85\x82\x6a\x94\x8e\x72\x05\xd5\x30\x0d\xd1\x41\xcf\xa5\xef\x69\x45\x95\xb9\xac\x90\x43\xa1\x40\xfc\x3d\x2e\xf8\x4b\xa5\x1e\x63\x07\x9c\xc5\x8c\x0c\xd9\x54\x34\x6a\xe8\xa3\xc4\xc9\x50\xf4\xd5\x5d\x36\xf0\xba\xd3\xf2\xe8\x30\xd8\xd6\x3e\xf1\x87\x26\xd3\x2d\x01\xa3\xb8\x58\xb3\xc2\x82\x63\x80\xfa\xea\xbc\xab\x58\x70\x09\xc3\x8d\x06\x0d\x37\xfe\xcf\x2e\x1a\x13\xaf\xf3\x61\x4a\xf0\xd7\xf9\x20\xd5\xdf\xf1\x44\xe5\xb3\x04\xaf\x7c\x66\xd9\x6b\x6c\xa8\x81\xb3\xc2\x4c\xe3\x04\x8d\x3a\xcc\x34\x36\xd4\x42\xe3\xd1\x84\xfb\x58\xd4\x19\x4d\x3c\x22\x88\x33\xc8\xc4\x7e\x63\xd0\x8e\x26\x0f\xba\xda\x5f\x18\x91\xa5\x57\x6c\x14\x91\xc5\xf6\xb7\x68\x72\x8c\x81\xbb\x05\x08\x2a\x08\x2a\x08\x2a\x08\x2a\xdc\x2d\xe0\x6e\x01\x77\x0b\xb8\x5b\x80\xe4\x83\xe4\x83\xe4\x83\xe4\x83\xe4\x07\x42\xf2\xe1\x6e\x01\x77\x0b\xb8\x5b\xc0\xdd\x02\x89\x32\x24\xca\x02\x77\xb7\xf0\xc2\xbc\xc1\xda\x5e\x34\xe2\x6e\x11\x18\x40\xde\x86\x0b\x42\xd8\x1f\xf4\xd1\xbd\xa6\xc0\x5c\xd8\x5e\x98\x7a\xf2\x5f\xea\x63\x1f\xe8\xb1\x81\xb8\x5a\x9f\x91\x85\xb8\x2d\x01\x79\x58\x3c\xc6\x0f\x10\x98\xdd\xce\x3f\x4e\x2b\xea\x44\x3e\x6f\xc1\x76\xad\xcd\x85\xea\xa9\x17\xbc\xfb\x7e\xe0\x5e\x16\x66\xff\x0f\xac\x4f\xd7\x65\x7e\x01\x47\x0a\x68\xf1\xe1\x48\x81\x4c\x12\x32\x49\xc8\x24\x75\x50\x26\x09\x8e\x14\x70\xa4\x00\xc1\x07\xc1\x07\xc1\x07\xc1\x6f\x0b\x82\x0f\xbf\x08\xf8\x45\x6c\x17\x66\x09\xbf\x88\x66\xf8\x45\x7c\x79\x80\xa6\x85\xcb\xad\x40\x2b\x1b\x72\xb6\x15\x87\x88\x3f\xbd\x85\xfd\x8b\x01\xf6\xed\x1e\x7a\x9d\xf8\xa3\xe5\x67\xfb\xe1\x2e\xe3\x71\x38\xe0\x5f\xc1\x0c\x70\xa6\xb9\x04\x47\x51\x81\x30\xc0\x41\x7b\x28\xc3\x87\x6b\xc6\x87\x4f\x1f\x0d\xd9\x63\xb4\xbe\xb2\x61\xb1\xa3\xed\x78\xec\x91\x1b\x16\x1a\xd3\xaa\xac\x6f\xf9\x9f\xdb\x9f\x1e\xb6\xde\xf0\xf6\x29\x7f\x7a\x78\x84\x8d\x18\xf4\xb0\xac\xa3\x19\x20\x51\xfc\x4c\x95\x73\xed\xf5\x87\xdd\x61\xe2\x2e\x76\x1b\xbf\x62\x80\x44\x80\x44\x80\x44\x80\x44\x80\x44\x80\x44\x80\x44\x80\x44\x80\x44\x80\x44\x80\x44\x80\x44\x80\xc4\x56\x83\xc4\x11\x3a\xc4\xe2\xd1\x41\x4b\xc9\x74\x17\x97\x30\x19\x67\xc1\x67\x77\xd1\x1e\xfd\x4f\x4e\x6d\xd2\xf6\x53\x3f\x01\x6f\x02\x6f\x02\x6f\x6e\x23\xbc\xf9\xb9\xe7\x28\x2a\xf0\xa6\x56\x52\x54\x29\x2b\xdb\x7c\x73\x38\xad\xe5\x32\x6a\x4e\x7f\x80\xec\x7d\xcf\xb1\xb7\xf7\x12\x19\xfb\x2c\xad\x27\xc2\x7d\xb5\xdd\x70\x27\x17\x66\xa6\xf8\xb1\xb1\xd7\xeb\x3b\x2e\x88\x03\x17\x13\xd6\xdf\xdb\x9c\x12\xc2\x0c\x17\xdc\x0c\x66\xb8\xe0\x66\xe0\x66\xe0\x66\x1d\xc4\xcd\xda\xc8\xa9\xa0\x6d\xb8\x19\x96\xd0\x83\x9b\x81\x9b\x81\x9b\x81\x9b\xc1\x0c\x17\x6b\x7c\x6f\x1d\xa0\xd4\xf6\x6b\x7c\xb7\xa5\x19\xee\x12\x4d\x09\x75\xd5\x29\x1a\xe7\xea\xaa\xa3\x74\x98\x12\x9e\xd6\x95\x26\x75\x5a\x4f\xc4\x2d\x34\x14\x88\x25\xee\x86\x14\x57\xe5\xec\xcb\x2c\xab\x6f\x9e\x4f\xd9\xf2\xcd\xe8\xdf\xee\x2a\xe3\x60\xcc\x32\xc9\xb5\x91\xd7\xfd\xe2\x6f\x4d\x84\x5e\x82\x51\x4d\xd2\x04\x9d\xa9\xf0\xc8\x1d\xa6\xa1\x0d\xdd\x6c\x98\xb7\xc1\x29\xb7\x41\xa7\xdc\xbf\xea\x12\x66\xb5\x87\xb8\x59\xad\xfe\xae\x27\x68\xa3\xdd\x8f\xce\x09\xbf\xdc\xd3\x74\xd2\xf6\xcb\x6d\xa0\x99\x69\xe1\x9a\x7b\x86\x4e\x39\x5c\x73\x1b\x68\x27\x50\x21\xe7\x06\xc2\x8a\x9f\x29\x6f\xec\x0f\x07\xcb\xc2\xce\x43\xae\x6e\xba\x76\x08\x8a\x8a\xed\x76\x08\xb2\xf6\x6b\x56\x30\x82\x99\x2e\x08\x2c\x08\x2c\x08\x2c\x08\x2c\xcc\x74\x61\xa6\x0b\x33\x5d\x98\xe9\x22\x13\x80\x4c\x00\x32\x01\xc8\x04\x20\x13\x10\x48\x26\x00\x66\xba\x30\xd3\x85\x99\x2e\xcc\x74\x91\x68\x43\xa2\x2d\x70\x33\xdd\x40\x3d\x73\x7d\x29\xf2\x46\xcc\x74\x9b\x45\x9c\x83\x77\xbe\xfd\x9b\x7e\x3a\xe2\xa1\x25\x77\x7a\x65\xd8\xb2\x72\xd3\x18\xe3\x13\xfd\xec\x6f\x7b\xe8\x4e\x1b\x6f\x0b\x67\x8c\xff\x54\x8f\x33\x86\x75\x71\x6d\xe1\x8e\xb1\x8f\xff\x9c\x45\xdd\xf9\x75\x6c\x17\xc9\xfb\x96\x18\x63\xf8\xf9\x57\x5c\x7f\xce\xbf\xfb\x9f\x60\xa3\x1b\xee\xfe\xc2\x3e\x03\xee\x18\x50\xf9\xc3\x1d\x03\x39\x26\xe4\x98\x90\x63\xea\xa0\x1c\x13\xdc\x31\xe0\x8e\x01\xb6\x0f\xb6\x0f\xb6\x0f\xb6\xdf\x16\x6c\x3f\x75\x8c\x8e\xb0\x91\xe8\x21\xcb\xe9\xe2\x5e\xa7\x3b\x86\x35\x81\xab\x76\xc8\x80\x7f\x05\xfc\x2b\xb6\x09\x05\x85\x7f\x45\x33\xfc\x2b\xbe\xda\x4f\xbd\xe5\xd5\xb6\x4c\xc5\x53\xa1\xb4\xae\xe4\xd7\x56\x65\x8b\x32\x7e\xac\x9f\x7d\xd3\x51\x7e\xeb\x57\xea\xa1\x8b\x73\x56\x63\x8b\xbc\xb1\xb6\x80\x8c\x0f\x3a\x8a\x78\x55\x9e\x20\x18\x63\x03\x8c\x71\xde\x9f\x31\x0e\xb3\xa1\xca\xda\x5e\x95\xb7\xbe\x9c\xae\x83\x2c\x82\x2c\x82\x2c\x82\x2c\x82\x2c\x82\x2c\x82\x2c\x82\x2c\x82\x2c\x82\x2c\x82\x2c\x82\x2c\x82\x2c\xb6\x96\x2c\x9e\xa2\x71\x76\x22\x3a\x6a\x91\xc5\x7d\x4e\xb2\x58\x39\x85\x03\x60\x04\x60\x04\x60\x04\x60\x74\x00\xc6\xef\x85\x68\xbf\x10\x35\xa6\x15\x45\xcd\xe4\x0a\xbc\x11\x87\x4b\x2e\xe3\x1d\x9a\xee\x74\x6e\x5e\x5a\x4f\x84\xef\xcb\xca\xa5\xf2\x0f\xb5\xb8\x86\xd8\xfe\xac\x5c\x9a\x74\xec\xbc\x98\x98\x98\x9b\x31\x67\x86\xc1\xd5\xde\x1f\xab\x6a\x68\xac\xaa\xa1\xb1\x7a\x1a\x4a\x15\xe9\x49\xc1\xec\x2e\xd3\x2c\x67\x76\xd3\x34\x45\xc9\x06\x98\x9d\xe3\x3a\xeb\xf1\x78\x61\x9f\x8e\xd1\x59\xa3\xf6\xda\x9b\x4b\x72\x81\xbf\x26\x96\x98\xd4\xa3\xe4\x5a\xae\x90\x55\x65\x4d\xb3\xb1\xef\xf7\x07\xd8\x8f\x75\x13\xb3\x5b\xb0\xf4\xa5\x61\x55\x96\x32\x15\x34\x61\x46\x1c\x1e\xeb\xd5\xb7\x9d\xb3\x8e\xa9\xaa\x74\x66\xec\x17\xac\x87\x42\x4a\x12\x3e\x16\x87\xb8\x8f\x85\x7e\xa7\x47\xe9\x28\x1d\xf6\x74\xb0\xb0\xaf\x29\x6e\x5c\x53\xdc\x38\x2f\x5f\x26\xba\xdf\x9d\x89\xde\xc6\x7a\xb2\x72\x89\xae\x2f\xfa\x13\xd1\xc3\x2c\x61\xd6\x2b\xb3\x4e\xc3\x20\xa3\xe6\x49\x54\xe9\x2d\xc3\x5f\xdb\xe5\xfa\x24\xf6\xab\x72\x31\x2f\xa5\x65\x8f\x87\x31\x60\x6c\x6e\xf5\xf3\x48\xce\xd0\x79\x3a\x57\x61\xb0\xd3\xd8\x03\xc1\xb2\x6e\xd8\xec\x34\x68\xb3\xf3\x72\x57\x60\x51\xe1\xa2\x30\xdb\x99\xa2\xa4\x6d\xb6\xd3\xb4\x10\xd3\xa4\x18\x52\x23\x74\x15\xd7\x4a\x14\xfb\xd9\xbd\xae\x21\xc6\x58\x59\xa1\xf7\x79\x33\xac\xf4\x8b\x3f\xb5\x3c\xaa\x34\xc7\x29\x07\x01\xc6\x27\xc0\xc0\xad\xa1\x25\x6e\x0d\x58\xa6\x8b\x65\xba\x58\xa6\xdb\xac\x65\xba\xa9\x4f\x75\x05\xbc\x56\x71\x5e\x38\xe7\x5d\xa4\x19\x87\x73\x5e\x93\xd7\x3f\x46\xdc\x3f\xe1\xbb\xd9\x4e\x71\x9b\x9a\x36\x01\x49\xfe\xd3\x3d\xae\xa3\x83\xde\xa2\xa4\x96\x72\x3c\x11\x2c\xf0\x81\xc7\x4c\xa4\xaf\xc8\x65\x27\x2d\x1c\x31\x3c\x58\xd9\xd0\x10\x3f\x85\x83\x7c\x42\xbf\xcf\xb9\x71\x55\x56\xb3\xb2\x73\x6b\xaf\x73\xab\x56\x52\xa5\x92\x9c\xcd\xa5\x87\xaa\xf6\x2b\x6b\x45\xff\xf7\x4d\x63\xab\x7e\x96\x49\x7d\xd2\x9f\xaa\x98\x03\x8d\xd1\xf1\x06\x3a\xc7\x1c\x17\x4a\x60\x9c\xe2\x33\x4e\xf9\x48\x37\x7d\xb8\x9b\xbd\xd4\x1d\xfe\x80\x15\xec\x5f\xec\xee\x9c\x89\x50\x45\x6e\x49\xbf\xcf\x5c\x2b\xc1\xf3\x9f\x7a\xe7\xb4\x15\x53\xfd\x1e\x1d\x77\x80\x7f\xb3\x84\xb4\x46\xca\xf3\x23\xf5\xc1\x99\x38\x9a\xef\xc1\x07\x4a\x5a\xa4\x3f\xa5\x29\x85\x39\x21\x1d\xba\xa4\xbf\x16\xc6\xbf\x17\xcc\x97\xc5\xfe\xe3\x80\xf7\x0c\x2d\xf9\x5a\x17\xbd\xda\xc5\x5e\xe9\x0a\x7f\xd6\xe2\x9a\x1f\xec\x9a\x56\xd4\x34\x1f\xc3\x65\x15\x7e\xdb\x95\x48\x74\x45\xff\x53\x34\x32\x51\x76\x15\x9c\x58\x8b\xe1\xd6\x9a\x66\x8b\x24\x86\xa4\x34\xbf\x70\x2e\x3d\xc9\xe7\xd2\xc6\xe7\x54\xce\x67\xb4\x88\x72\xc3\xb8\xa7\x42\x9a\x51\x94\x95\x62\x5e\x8e\x47\xc4\x2f\x72\xad\x97\xf9\x2c\x39\x39\x76\xbd\x01\xd6\xcf\x47\x77\xf0\xd3\x2a\xd3\x2d\xb5\x8e\x43\x35\x6b\x92\xe8\xad\xf9\x2b\x8a\xba\xf8\x47\x68\x84\x1d\x8a\xc6\xad\xbc\xd0\xdd\xce\xbc\x90\xd1\xee\xad\x50\x91\x91\xfd\xd9\x55\xea\x17\x10\x55\x0c\x47\x2c\x80\x5a\x54\x32\x9a\x9c\x5e\x53\x73\xa5\x9b\x7c\x4b\x4e\xd6\xd8\xc7\xaf\xb2\x97\x7b\xe9\x75\x62\x4f\xeb\xeb\x38\x5c\xbb\xd6\xdb\x1c\x9f\x08\xf0\x86\xc4\x78\x25\x16\xd5\x0f\x10\xff\x36\xbe\x90\x55\xfb\xb4\xb9\x50\x15\xf5\xdf\xa0\xdf\x44\xfd\x37\xe8\x37\xa1\xdf\x84\x7e\xb3\x83\xf4\x9b\x6d\x64\xae\xdb\x36\xfa\x4d\xb8\xbe\x42\xbf\x09\xfd\x26\xf4\x9b\xd0\x6f\xa2\xfe\x1b\x6c\x29\x6f\x1d\xbd\x64\xdb\xdb\x52\x6e\xcb\xfa\x6f\x1b\x5b\xe0\x1b\x37\xb2\x7a\x26\x36\xac\xc2\x44\x81\xd4\x82\xdb\x90\x87\xa0\x38\x23\x73\x8d\x6f\xe5\xf9\x54\xa3\xc6\xe8\x6f\xef\xae\x02\x66\x61\xab\x28\x5c\x35\x1b\x7b\x54\x6c\x6b\x11\x1d\x13\x30\xeb\x0a\x5d\xa2\x8b\x15\x39\x9c\x1a\x09\x3e\xdf\xa7\x82\x24\x0e\xd4\x6c\x0d\xaa\xd9\xde\x19\xf2\x7c\x9d\x37\x94\xd8\xf6\xed\xa3\xf4\xb8\x10\xbb\xa5\xe8\x82\x2d\x76\xdb\x64\x93\x1b\xcf\x95\xfb\xb6\xe9\x1f\xc3\x78\xfd\xb7\x3a\x63\x58\xdd\x51\xab\x3c\xd8\xc5\xfe\x7a\xb0\x2a\x86\xf5\xba\x56\x98\xab\x8e\x67\x71\xb1\x5f\x59\x3c\xb3\xab\xcd\x35\x3b\xb2\xa1\xea\x1c\xb8\x2f\xb8\x2f\xb8\x2f\xb8\x2f\xaa\xce\xa1\xea\x1c\x74\xcc\xa8\x3a\x87\xfc\x03\xf2\x0f\xc8\x3f\x20\xff\x80\xfc\x43\x20\xf9\x07\x2c\x67\xc1\x72\x16\x2c\x67\x41\xd5\x39\xa4\xf7\x90\xde\xeb\xa0\xaa\x73\x4d\xc5\xcd\xc1\x8b\xdc\xff\xcd\xf3\x74\x54\x88\xdc\xd5\x65\x29\x1d\x37\xaf\xbd\xc2\xab\x45\xca\x17\xaf\x49\x89\xe1\x74\x7e\x4d\x2b\xc9\xaa\xaa\xe4\x65\x8d\x7d\xed\x2a\xfb\xed\x5e\x0a\xeb\x87\x4d\x38\x8f\x5a\x32\x77\x0f\x0f\xd4\x56\xbf\x4f\x8a\xd6\xe6\x95\xbc\x1c\xeb\xd7\x77\x9d\xaf\x6c\x6a\xd1\x68\xc9\xb1\x27\xd4\xef\x50\xbf\x43\xfd\x8e\x2c\x08\xb2\x20\xc8\x82\x20\x0b\xd2\x36\x59\x90\xf6\x81\xfc\xa0\xcf\xa0\xcf\xa0\xcf\xa0\xcf\xa0\xcf\x1d\x4d\x9f\x81\xc7\x80\xc7\x3a\x14\x8f\x6d\x4b\xf5\x7b\x86\x66\x04\xd2\x4b\xd2\x59\x8e\xf4\xc6\xe8\x38\x1d\xf3\x14\x87\x72\x58\x65\x82\xa6\xb8\x83\x0f\x05\x22\x7b\xbf\xee\xcf\xf0\xce\xb3\x73\x06\x9a\xf3\xe4\x66\x66\x15\x7d\xfb\xe4\x9c\x78\x4f\x9c\x3a\x45\x7f\x73\x77\x4d\x86\x76\x8f\x25\x88\x77\xe2\xb2\x98\xf8\x6b\x4b\x81\x99\xe0\x5b\x17\x68\x9a\xa6\x2a\x04\xf1\x47\x68\x64\xe3\x0f\x0a\xc2\x29\x28\xe1\x1b\x54\xc2\x7f\xaf\x8b\xce\x89\x60\x71\x9a\x4e\xf2\x60\x71\x8c\x1a\xea\x83\x94\x12\x4a\xf7\x49\x9a\xb0\x95\xee\x8d\xb6\x75\x51\x48\xdc\xa7\x28\xe9\x90\xb8\x37\xda\x58\xe3\x11\x4c\x88\xde\x5b\x18\xc1\x62\xff\x74\xa8\x66\x04\x8b\xb8\xca\xe1\x9d\xd1\xec\x88\xd8\xc3\x3b\x9a\x59\x47\x36\x2f\xae\x41\x0e\x0f\x10\x0c\x10\x0c\x10\x0c\x10\x0c\x39\x3c\xe4\xf0\x90\xc3\x43\x0e\x8f\x84\x04\x12\x12\x48\x48\x20\x21\x81\x84\x04\xe4\xf0\x90\xc3\x43\x0e\x0f\x39\x3c\xf2\x7d\xc8\xf7\xb5\x61\xbe\xaf\xad\xe5\xf0\x2d\x04\xd1\xc1\x8b\xe3\xff\x53\x98\x92\x7a\xff\x1a\x5e\xf7\xac\x9a\xa9\xca\x16\x60\xd6\xc7\x57\xaa\x7e\xe9\xaa\x59\x42\x73\x58\x4b\x4b\x79\x99\x7d\xeb\x01\xf6\xbf\x75\xd3\xce\xb4\xa2\xca\x4b\xeb\x89\x70\x82\x57\xcf\xe4\x9b\xcc\xde\x60\x0f\x94\xe7\xed\xf6\x26\xad\xf6\x62\x71\xfd\x90\x49\x45\x95\x17\x1d\x15\x53\x5c\x77\x5d\xd0\x9b\x0d\xb8\xb8\xe6\x1b\xe8\xac\xe8\x5f\x27\x68\x94\xf7\xaf\x04\x0d\xd3\x90\x67\x56\x43\x5a\x2b\x29\xfa\xd5\xe9\xb3\x51\xbd\x53\xe9\x67\xb4\xd9\xb2\x9a\x73\xfe\xdd\x68\x88\x1d\x74\xf4\x09\x73\xe1\x84\xe3\x64\x8c\x4e\x24\xce\x27\xfc\xe5\x5d\xf6\x13\x39\x62\x56\xd1\xdc\xd0\x43\x49\x18\x47\x6d\xd5\x73\x49\x4e\xd2\x04\x9d\xa9\xc8\xc5\x6e\xf4\xc1\x00\xd8\x21\x0d\xdb\x60\x1a\xf6\x7d\x5d\xde\x86\x64\x9b\x0f\x18\xe7\x44\x6a\xf6\x34\x9d\xb4\x53\xb3\x1b\x6f\xc6\x0c\x2f\xf5\xc5\x0f\x9f\x98\xe1\x0c\x2f\x3e\xc5\x34\x93\xef\xdc\x63\x87\x97\x53\x55\x35\xb2\x36\x14\x67\x86\x79\xe1\x95\xad\x88\x32\x28\xa1\xd5\x69\xc1\x0e\x25\xb4\x50\x42\x6b\x8b\x4b\x68\xb5\x62\xb4\xe9\x57\xe4\x2a\xf8\xef\x45\x6a\x84\x0e\xb1\x78\x74\xd0\x2a\x80\x75\x97\xb3\x6c\x16\xdf\xff\x96\x28\x9a\xf5\xad\x07\xe8\x94\x58\x4f\x2c\x15\x8b\x5a\x8d\x89\x53\x46\x2e\xe6\x95\x9b\xab\x72\xa1\x54\x31\x5b\xfa\x0f\x0f\xb0\xef\x85\x68\xa7\x7e\xb8\xfe\xf1\xec\xad\x35\x5b\x9a\xb2\x1a\x89\x1d\xd0\xf7\x9b\x28\x16\x35\xe7\x47\xd2\xde\x8e\x79\x51\x9d\xf3\xa2\xdf\xdd\x65\xdf\xfb\x01\x9f\x79\x91\xe3\xf6\xf7\x1a\xbb\xb6\xf4\x09\x60\x06\x84\x19\xd0\x16\xcf\x80\xda\x65\xa2\xb3\x89\x40\xa2\xcf\x57\x82\xff\xe0\x25\xff\xfe\x76\x3b\x90\x8c\xd4\x3b\x03\x72\x44\x94\x47\xf9\xa7\xb8\x65\xf1\x04\x73\x9d\x4e\x0b\x6b\x98\xeb\x60\xae\xd3\x01\x73\x9d\xe0\xd1\x97\x6f\x89\xe0\x0e\x99\xeb\x7c\xe6\x20\x5d\x14\x73\x9d\x4c\x4e\x4b\x2b\xeb\x7a\x30\xb6\x2c\x93\x44\xa9\x60\x8f\xc9\x8f\x5c\xc8\x14\x95\x5c\xa1\xa4\xe5\x73\xd6\xa6\xb7\xb0\xbf\x8d\xb1\xf7\x75\xd3\x5d\x56\x63\x56\x45\x81\x08\x9f\x03\x95\x7f\x29\xcf\x19\x4d\x2c\xe8\x4d\xc4\x0e\xea\x7b\x4c\x99\x07\x56\x15\xd7\x2f\xdb\x39\xe0\x59\xd0\x8a\x58\xf9\x72\x88\xaf\x7c\xd1\xfb\xf0\x49\xaa\xf1\xd9\x8a\xdb\xb7\xca\xac\xec\x50\x76\x72\x9b\x9d\x10\x2d\xfb\xf7\xf6\x33\xec\x94\xd1\xdb\x2b\x1f\x9b\xd1\xe5\xcb\x4f\xa8\xca\x92\x2b\xfc\xf6\xdd\x6e\x0f\xe9\x80\x39\x59\xaa\xf5\x9c\xe2\xc6\x4e\x5b\xf2\xa8\x36\x3a\xc4\xf0\x7b\x56\x18\x62\x60\xe6\xd4\xe0\xcc\xe9\x13\x5d\xc1\x46\x8d\x39\x31\x89\x9a\xa1\xf3\xf6\x24\x6a\xab\xe2\x10\x9f\x4f\xd5\x17\x87\xbc\xec\xfe\xea\x0a\x4c\xb1\x8f\xee\x75\x8b\x43\xf7\x19\x12\x2d\xa9\x50\x11\x7b\x86\xc4\x86\xad\x09\x3d\xcd\x59\x5f\x87\x00\xe4\x13\x80\xb0\xc6\xa3\x25\x6b\x3c\x20\xee\x85\xb8\x17\xe2\xde\x66\x89\x7b\x53\x9f\xea\x0a\x58\xe1\xb8\xf1\x72\x74\x9b\x57\x4d\x46\xdc\x07\x0c\xbb\xd9\x4e\x71\x9b\x5a\x32\x77\x49\xfe\xfc\x1e\xb7\x31\xc3\x60\x15\x9f\xad\x35\x89\x19\xe4\xd3\xfc\x96\x8f\x23\x40\x68\x3b\x6d\xf4\x02\x42\x0b\x42\xbb\xc5\x84\xb6\xc5\x74\xab\xbe\x4f\x40\x5d\xa1\xde\xeb\x3b\xe1\x8f\x6f\xc7\xe8\x38\x3b\x16\x3d\x62\xa1\xd8\x07\x9c\xf8\xb6\xec\x57\x6f\x09\x8c\xfb\x47\xfd\xa6\x05\xbe\x29\x59\xe1\x0b\x39\x3c\x85\x2b\x92\xbc\xaa\x07\xc6\x92\xc6\x7e\xa6\x9f\x7d\xa8\xc7\xce\x72\xae\x19\xcb\x4d\x0b\x99\xdc\x7a\x2e\xb3\x26\xe5\x9d\x56\x6b\x92\xb5\xb4\x7b\x8a\x37\xb0\x20\x97\xe2\x8e\x11\xfe\x98\x35\x37\xe8\xe3\xad\xf4\xd9\xc6\x2a\x65\x4e\x19\x4a\x51\xb6\x26\x6e\x5a\x49\x96\x32\xf1\x58\xf4\x86\x6b\xa2\xd4\xfc\x95\xd9\x9c\x56\x6a\x73\xd7\xfc\x0d\xd6\x3e\xaf\xf1\x61\xe5\x2e\x77\xe7\xd6\xe5\x82\xbf\x09\xdc\x01\xf7\xd7\x60\x0f\x23\x7e\x62\xc2\x09\xee\x92\xff\xfb\x18\x63\xfd\x66\xf2\xa4\x58\xd4\x8c\x61\x98\x75\xf7\xcb\x45\x60\xa8\x0e\x80\xea\x00\x29\x98\x42\xc1\x14\x0a\xa6\x50\x30\x85\xea\x18\x53\xa8\x54\xdb\x78\x1e\x05\x7e\x26\x0d\x9b\xf1\xa4\x60\xc6\x03\x33\x1e\x98\xf1\xc0\x8c\x07\x66\x3c\xad\x37\xe3\xd9\x86\x94\x22\xd5\xd1\x06\x27\x29\x18\x9c\x34\xcf\xe0\x24\xd5\xf6\x06\x27\xdb\xb0\xa0\x01\xfb\xb7\x03\x34\x2e\xa8\xa2\x80\x37\xb6\x32\xd4\x53\x14\xba\xee\x58\x0c\xc7\xbe\xdc\xcf\xfe\x2c\x44\xbb\xc5\x1f\x97\xd6\x13\xe1\xfb\xdd\x44\xa0\xfa\xd6\xd8\x83\xfa\x16\xfe\xcf\x32\x02\xc8\xff\x12\xb0\xd8\x73\x91\xc6\x05\xa8\x3b\x42\x23\x1c\xd4\x0d\x52\x8c\xfa\x3d\x71\xb8\x71\xe9\xeb\x89\x78\x7d\x4c\xce\x47\xdc\x39\xef\x4f\xe3\x86\xd9\x90\x41\xe3\xca\x6e\xbb\x99\x1d\xe5\x67\xe1\x44\x72\xe1\xf7\xef\x72\xde\xe4\x07\x3d\x44\x9c\xfc\x3e\x3f\x64\x6c\x6c\xc9\xad\x4e\x9e\xa6\x93\x34\x56\x91\x6d\xdc\xc0\xbd\x46\x76\x11\xe2\xcc\x06\xc5\x99\xef\xee\xda\xdc\x5b\x7e\x56\x88\x31\x4f\xd0\xa8\x2d\xc6\x6c\x55\x9c\xe0\xe2\xcb\x26\xc4\x89\xd8\x8f\xec\x75\xc6\x89\x3b\x1d\x22\x4b\x1e\x1b\xf6\x8b\x3f\xb4\x26\x34\x40\x4c\x09\x31\x25\xc4\x94\x10\x53\x42\x4c\x09\x31\x25\xc4\x94\xee\x62\xca\x26\x8c\x01\x92\x5f\xbf\xdd\x39\x06\x78\xd4\x4f\x34\xc9\x07\x06\xfb\x8a\x96\x24\xa1\x99\xe3\x02\x88\x23\x3b\x6d\x34\x02\x71\x24\xc4\x91\x5b\x2c\x8e\x6c\x32\x0d\xf2\x75\xe9\x6a\x42\x8c\xaf\xbd\x76\x9d\xef\x7f\x4b\x88\x1e\x7f\x2a\x46\xd3\x02\x4f\x7a\x9a\x2e\xd7\x72\x3d\x56\xf2\xf6\xb2\xf5\xdf\x1b\x60\xff\x5f\x88\xee\x71\x2b\x01\x18\xbe\xcf\x05\x5a\xf2\x9a\x7f\x8f\xe9\x1b\x5c\x2a\xfe\x39\x0c\x2e\x03\x2f\xf2\x97\x5a\xa0\xe3\xa2\xbf\x26\x68\x98\xf7\xd7\x01\xea\xa3\xc7\xfc\xca\x33\xc6\xeb\xaa\xc8\x78\xd5\xbf\x2f\x8e\xb1\xe3\x2e\x4e\x5c\x7e\xa6\xd7\xfc\xd7\x7d\xc8\x68\xf8\x53\xbb\x3c\x1e\x40\xd8\x1d\x68\xf2\x67\xd0\x6f\x6c\x6b\xf1\x63\x48\x8e\xd3\x09\x1a\xad\x18\x2a\xd4\xfb\x1c\x30\x2e\x00\xd6\x6c\x10\x6b\xfe\x54\xd7\x26\x5e\xff\x53\x82\x69\x1e\xa3\x23\x36\xd3\x0c\x30\x7a\xf8\x00\xcd\xfa\x82\xcb\x46\x02\x4a\x19\xdb\x7c\xcf\x5e\x8f\xe8\x71\x87\x89\x39\x45\xc0\xe8\xf3\x2c\xd4\xda\xd4\x78\x01\xdc\x09\xdc\x09\xdc\x09\xdc\x09\xdc\x09\xdc\xd9\x08\xee\xf4\xac\x52\xd0\xf6\x1c\xb4\x7e\xdc\xd9\xdc\xe9\x47\xf2\xfb\xb7\x7b\x8c\x10\x0e\xf8\x40\x50\x3e\x6e\xe8\xe5\xf3\xf5\x16\x0e\x1b\x40\x43\x3b\x6d\xb0\x02\x1a\x0a\x1a\xba\xc5\x34\xb4\x99\x74\xc9\x17\x85\x36\x77\x86\x98\x4a\xd0\x30\x1b\x8a\x1e\xb4\x08\xe7\x5e\x27\x15\xd5\x77\xbf\x25\xa0\xe8\x2f\x13\xf5\xf9\xd4\x7b\x5b\xd6\xc3\x6c\x21\xab\xb1\x77\x50\xf4\xdd\x3d\x76\x8d\x9f\xbd\x62\xcd\x40\x44\x8a\x24\xc5\x1e\xb1\xfd\xe2\x2f\x95\x75\x7b\x8c\xcd\x5b\x2c\x16\xd4\x4f\x5b\xef\x7c\xc6\xd9\xa4\xbe\xd4\xd5\x80\x6a\xab\xa2\x11\x9a\x10\x03\xa0\x31\x3a\xee\x18\x00\x6d\xac\x09\xcf\xa1\xda\x86\x12\x0d\x15\xad\x9a\x2f\xd1\x43\xee\x2f\xd1\x4e\xb6\xa3\xa8\x68\x25\xba\x3e\xe3\xff\x0e\xf5\xb2\x47\x5d\xc6\x50\xd1\xa8\xf1\xe2\x98\x97\x91\xc2\xf7\xba\xf6\xf7\x3a\x05\x4a\xe9\x41\x29\xb7\x61\xd8\xfc\x9d\x01\x1a\x35\xc3\x66\x4d\xeb\x0c\xbe\x5c\x40\xe5\xcf\xc4\x4c\x1e\xfd\xd8\x00\xfb\x9a\x23\x8c\x7e\xb4\xcb\x58\x63\xe0\x30\xce\x28\x98\x00\x46\x59\x89\xe8\xaf\x59\x64\x56\x6f\x66\x5e\xdf\x21\x10\x07\x8d\x41\x7b\x19\x20\x47\x3e\xc6\xa2\xb1\x5c\x49\x5e\xb5\xfb\x5b\x5f\xd9\x92\x52\x47\xdb\xf1\xd8\xc3\x37\xdc\xea\xb3\xd9\x27\x09\xf3\x8d\x8d\x8c\x67\x6e\x88\xf1\xcc\xac\x7f\x2c\x1e\x60\x7d\x22\xea\xda\xb7\x9a\xdc\x83\x33\x7c\x37\xe0\xbb\x01\xdf\x0d\xf8\x6e\xc0\x77\x03\xbe\x1b\xf0\xdd\x80\xef\x06\x7c\x37\xe0\xbb\x01\xdf\x0d\xf8\x6e\xc0\x77\xa3\xc5\xbe\x1b\xa3\x74\x94\x1d\x8e\x26\x2c\xb8\xf1\x7a\x27\x46\xb6\xa7\x71\xb7\x02\x4c\x86\x61\x07\x0c\x3b\x60\xd8\xb1\x8d\x0c\x3b\x7e\x6b\x80\xa6\x4c\x1b\xe0\x9c\xfc\xe6\x92\x5c\xe0\x4f\xcb\x21\x86\x17\x6c\x33\xbd\xa6\x95\x94\x55\xb3\x45\x27\x24\x33\x90\xe6\x77\xfb\xd9\xbf\xdf\x41\x7b\xcb\x5a\x59\x5a\x4f\x84\x7f\xb3\x1e\xb6\x39\xc9\x5b\x37\xa7\xa6\x53\x56\xeb\x6d\x41\x3a\x07\x0d\xa7\x61\xc7\x85\x2d\x26\xbc\xce\x18\xd8\xb3\x01\xec\x99\xf7\xc7\x9e\x33\xec\xbc\xe5\x37\x5c\xdd\x4f\x8d\x44\x94\xd7\x43\x81\x1d\x31\xb0\x28\xb0\x28\xb0\x28\xb0\x28\xb0\x28\xb0\x28\xb0\x28\xb0\x28\xb0\x28\xb0\x28\xb0\x28\xb0\xe8\x56\x62\xd1\x73\x34\xc9\x26\xa2\x67\x2c\xba\xf9\xa8\x13\x8b\x7a\x4d\xe5\xaa\x21\x29\x10\x26\x10\x26\x10\x66\x07\x23\xcc\x5f\x7c\xa3\x69\xea\xb1\x92\x57\x6e\xe8\x31\x5d\x55\xf2\x71\x8b\x11\xd8\x28\x93\x57\x88\x1b\x2e\xaa\x39\x45\xcd\x95\x6e\xe6\xe5\x75\x39\x5f\x36\x7b\xd4\xd8\x9f\x2d\xb1\x7f\xd6\x47\xfb\x1c\xed\x4c\x98\xcd\x58\x55\x43\x8f\x8b\x01\xa9\x6a\x7c\x4a\xcd\x58\x6b\xa2\xcc\x39\xa3\xf9\x59\xbd\xf9\x49\x67\xf3\xb1\x13\xfa\x91\xd3\x2e\x6d\x1b\xb5\x44\xbd\x0f\x6d\x73\xaa\x98\x04\x52\x03\x52\x4b\x02\xa9\x01\xa9\x01\xa9\x01\xa9\x75\x0c\x52\x4b\xb6\x0d\x52\x0b\xfc\x4c\x1a\x46\x6a\x49\x20\x35\x20\x35\x20\x35\x20\x35\x20\xb5\xd6\x23\xb5\x64\x47\xa3\xab\x24\xd0\x55\xf3\xd0\x55\xb2\xdd\xd1\x55\x72\x1b\xa2\xab\xd4\x4d\x7a\x5e\xa8\xb1\x9e\xa2\x27\xb9\x1a\xeb\x0a\x5d\xa2\x8b\x9e\x2b\xfc\x9d\x7c\xcb\xc0\x51\x71\x6f\x68\x34\x9b\xd3\xfc\xb5\x59\x3f\xec\x2f\xbd\x7a\x9a\x2d\x1a\xd2\xab\x5a\x7c\xcd\x90\x60\x79\x9f\x8e\x53\x84\xc5\x4f\x9d\x6a\x58\x13\xf0\x3a\xf4\xd1\xdf\x25\x1f\x16\x77\xc0\xf2\x9f\xa8\x81\xdd\xc6\xc5\x4e\x5b\x0b\xde\x04\x27\xbb\x4a\x6f\xa0\x67\x2a\x0c\x2b\x66\xe8\x7c\x40\x0f\x1c\x7e\x49\x70\x89\x6d\xd0\x7f\xe1\x13\x21\x7a\x56\x44\xa2\x05\x7a\x9c\x47\xa2\x8b\x14\x5c\xc7\xa4\x25\xe1\xb2\xf2\x34\x2d\xda\x2e\x2b\x81\xfe\xc0\x1b\x85\x09\xcb\x33\xf4\x94\xc3\x84\x25\xd0\x5f\xf0\x0b\xa4\x7e\x36\x2b\x5b\x19\x68\x63\x9f\x1c\xf2\x09\xa4\xc3\x86\x91\xa1\xc3\x15\x52\x59\xa9\x15\x54\xcf\x89\x03\x6a\x04\xd5\x49\xab\xa9\x96\x85\xd7\xe6\x58\xe6\x82\x6b\x83\x6b\x83\x6b\x83\x6b\x77\x0e\xd7\xc6\x38\xd2\x67\x1c\xd9\x3e\xe0\x1f\x76\xe5\x2d\xb1\x2b\x47\x7e\x05\xf9\x15\xe4\x57\x90\x5f\x41\x7e\xa5\xa3\xf3\x2b\xa8\x5a\x81\xaa\x15\xa8\x5a\xd1\xac\xaa\x15\x48\x5f\x22\x7d\xd9\xa9\xe9\xcb\x54\x0d\x17\xf0\x40\x0b\xb6\x98\xbc\x3a\xe6\xce\xab\xef\x66\x77\x89\xb7\xd9\x8e\xb4\x5b\xcb\xae\x83\x37\x6e\xfe\xd9\x01\xba\xe8\x5f\x04\x54\xca\x17\xaf\x49\x3e\xce\xce\xbc\x20\x28\x7b\xb5\x9f\x7d\xa5\x87\xc2\x6e\x85\x62\x44\x23\xe1\xa2\x31\x84\x2d\x64\x72\xeb\xb9\xcc\x9a\x94\x2f\x73\x43\xb1\xa6\x8b\xf3\x4a\x3e\x18\x6f\xe7\x78\xec\xd0\x0d\x8f\xda\x33\xe2\x8c\xca\x2b\xd0\xcc\xe6\xb4\xe0\x6a\x72\xdf\x42\xbe\x25\x69\xff\x6e\x7f\x96\x9d\x6e\xb0\xba\x84\x78\x10\x74\xfd\x80\xfb\x7b\xb8\x87\x11\xbf\x7a\x9e\x08\x87\x65\x09\xd6\x57\xc0\xb2\x04\x79\x28\xe4\xa1\x90\x87\xea\xa0\x3c\x14\x2c\x4b\x60\x59\x02\xfe\x0f\xfe\x0f\xfe\x0f\xfe\xdf\x16\xfc\x1f\x86\xcc\xdb\x8c\xa9\xc2\xcd\x04\x6e\x26\xdb\x6b\x49\x08\xfb\xa5\xab\x34\x20\xe8\xa4\x56\x52\x54\x29\x2b\x3b\xac\x98\xd7\x95\xfc\xda\xaa\x2c\x95\x4a\x52\xfa\x9a\xfe\x55\xd7\xd8\x8f\x5e\x65\x3f\xdf\x4b\x64\xec\xba\xb4\x9e\x08\xc7\x6b\xdb\x93\x2c\xf2\x26\x26\xac\x26\x62\xfb\xf5\xfd\x17\xc4\xf1\x8b\x89\xca\xcd\x6d\x8e\x05\x61\x3c\x02\x30\x06\xe3\x11\x80\x31\x80\x31\x80\xb1\x0e\x02\x63\x6d\xa4\x3f\x6e\x1b\x30\x06\x61\x2c\xc0\x18\xc0\x18\xc0\x18\xc0\x18\x8c\x47\xa0\xdc\xbb\x75\x28\x53\xdb\x2b\xf7\xb6\xa5\xf1\xc8\x0a\x5d\x14\x72\xaa\x29\x4a\x72\x39\xd5\x49\x1a\xa3\xe3\x9e\x6b\xe5\x4d\x14\xb5\x9e\x88\x57\x12\xa2\xba\x5c\x46\x9e\xf7\x57\x52\x8d\xb3\x13\x86\x92\xaa\x9c\x7b\x19\xf2\xa9\xca\x9f\x2d\x2b\xe9\xe4\x6b\x24\xf2\xfe\xdd\x65\x8c\xec\x01\xcb\x36\xa4\x0a\x87\x3d\x2c\x36\x35\x1f\x88\x09\x7e\x95\xa2\x0b\x34\x5d\x61\x08\x72\x8c\x8e\x34\xf2\x20\xb0\x6a\x13\xee\x1f\x0d\xba\x7f\xfc\xa0\x8b\xce\x8b\x70\x70\x96\x4e\xf3\x70\x70\x9c\x1a\xec\x85\x42\xac\x9c\xe0\x62\x65\xcb\xea\xa3\xf1\xd6\x2e\x09\x5f\x8f\x69\x9a\x72\xf8\x7a\x34\xde\xdc\x66\x4d\x3c\xea\x8b\x63\x75\x44\x2c\xf7\x50\x17\xfb\xc6\x60\x59\x9c\x7a\xcc\xd5\x95\xa3\x2a\x66\x0d\x88\xdd\xac\x98\x65\x3b\x6f\x34\x39\x7a\xc1\x6f\x03\x38\x17\x38\x17\x38\x17\x38\x17\x7e\x1b\xf0\xdb\x80\xdf\x06\xfc\x36\x90\x56\x40\x5a\x01\x69\x05\xa4\x15\x90\x56\x08\x24\xad\x00\xbf\x0d\xf8\x6d\xc0\x6f\x03\x7e\x1b\xc8\xda\x21\x6b\x17\xb8\xdf\x46\xa0\xb6\x1a\xbe\x68\x79\x23\x7e\x1b\x4d\x4e\x97\x05\x6f\xa9\xf1\xcf\x1e\xa4\x49\xbd\x4f\x0d\xaf\x27\xbc\xbc\x32\x4c\x2a\x51\x28\x09\x15\x7b\x3a\x2f\xe5\x56\x8d\x5d\xde\x32\xac\xf1\x9b\xc8\x7e\x3b\xcc\x7e\xbe\x9b\x76\xa6\x15\x95\xf3\xef\x11\x55\x96\x32\x11\xb1\xcd\xec\x03\xf6\xf0\x78\xce\x6a\x51\x5c\xed\xa4\xde\x62\x6c\x58\x3f\x66\x52\x51\xe5\x45\x87\xcb\x85\xeb\xae\xe2\xc1\x05\x8b\xc4\x53\x19\x9a\x11\xdd\x2a\x49\x67\x79\xb7\x1a\xa3\xe3\x74\xcc\x33\x59\xa1\x5f\xa9\xde\x89\x5c\x4f\xd0\xb7\x4f\xed\x77\xef\x53\xb7\xb1\x9e\xac\x5c\xa2\xeb\x4f\xf9\x77\xa3\x23\x6c\xc4\xe8\x46\xd1\xa8\x69\xce\xe2\x7a\x2a\xce\xfe\x13\x7e\xeb\x6e\xfb\x19\x1d\x55\xe5\x62\x5e\x4a\xcb\x1b\x7c\x4c\x23\xc6\x61\x5b\xf6\xa4\x92\xb3\x94\xa2\x0b\x15\xa9\xd7\x86\x1f\x15\x10\x1e\x92\xaf\x0d\x26\x5f\x7f\xb9\x2b\xc8\x90\x71\x59\xa4\x5f\xcf\xd3\x39\x3b\xfd\xda\xcc\x10\x54\x5f\x8c\x71\x49\x7d\xfa\xc4\x9b\x1a\xb1\xad\xb8\x56\xa2\xe4\x7b\xf7\xd8\x21\xe8\x74\x51\x52\x4b\x39\x9e\x90\x12\x53\xd9\x0d\xc6\xa2\x43\x45\x7d\x0c\xb2\x25\x91\xe8\xc1\xca\x86\x86\xf8\xb9\x1c\xd4\xff\x39\xb6\xcf\xb9\x71\x55\x56\xb3\xb2\x73\x6b\xaf\x73\xab\x3e\x34\x2f\xc9\xd9\x5c\x7a\xa8\x6a\xbf\xb2\x56\xf4\x7f\xdf\x34\xb6\xea\x67\x99\xbc\x4c\xb3\x94\xaa\x88\x82\x35\x94\x40\x35\xc6\x41\x73\x7c\x81\x0e\xe2\xa0\x4f\x1c\xfc\x48\x37\x7d\xb8\x9b\xbd\xd4\x1d\xfe\x80\x35\xfd\x7e\xb1\xbb\x73\xe2\x60\x05\x7c\xd4\xef\x33\x4f\xea\x72\x40\xae\x77\x4e\x7b\xa5\x5e\xbf\x47\xc7\x1d\xe0\x14\x41\x68\x00\xa4\x3c\x3f\xb2\xa0\x14\x86\xc4\xd1\x7c\x0f\x9e\xc1\xd0\x22\xfd\x29\x4d\x29\xcc\x89\x25\x6b\x97\xf4\xd7\xc2\xf8\xf7\x82\xf9\xb2\xd8\x7f\x1c\xf0\x0e\xd0\xc9\xd7\xba\xe8\xd5\x2e\xf6\x4a\x57\xf8\xb3\xd6\x54\xe6\x83\x5d\xd3\x8a\x3e\xf1\xcd\x69\x91\xac\xc2\x6f\xbb\x12\x89\xae\xe8\x7f\x8a\x46\x26\xca\xae\x82\xcf\x01\x45\x1e\x64\x4d\xb3\xb3\xb9\x43\x52\x9a\x5f\x38\xcf\x91\xe7\x73\x69\x03\x70\xc8\xf9\x8c\x16\x51\x6e\x18\xf7\x54\xe4\x90\x8b\xb2\x52\xcc\xcb\xf1\x88\xf8\x45\xbe\xc6\xd0\x7c\x96\x7c\x2e\xe6\x7a\x03\xac\x9f\x8f\xee\xe0\xa7\x55\x26\xfe\xcb\x78\x5b\x0d\x06\xf7\x25\xda\xd8\x07\x62\xe3\x83\xd0\xeb\x0f\xbb\x7f\x20\x76\xb1\xdb\xf8\x2d\xa0\x54\x92\xce\xb2\xd3\xd1\x93\xd6\x62\xfd\x47\xf8\x3b\x65\xbc\xe0\xae\x3f\x10\xed\xd1\x77\x71\x2e\xc7\xdf\x7e\x0b\xfe\xeb\x99\x8b\xe9\x63\x6f\xe3\xc5\x32\x9c\x1a\xf3\xb2\xba\xa9\xb9\xd8\xbc\xdd\xe2\xa4\xd5\xa2\xfb\x5c\xcc\x75\xd7\x26\xcd\xc5\x82\xed\xe7\xae\x67\xde\xd4\xb9\x98\xeb\x2f\x6e\x62\x2e\xe6\xfe\x98\xbc\xe6\x62\x2d\x7b\x52\x0d\xcf\xc5\x5c\xcf\x10\x63\x10\xcc\xc5\x1a\x9f\x8b\x35\x3e\x81\x72\x7f\x59\xdb\x22\x04\xe9\x53\xa6\xa6\x85\xa0\x06\xe7\x62\xee\xb1\xc8\x7d\x2e\xd6\x92\x48\x84\xb9\x58\xa7\xc5\x41\xcc\xc5\x30\x17\xdb\xf2\xb9\x58\x70\xdf\x01\x5f\x58\xe7\x37\x65\x6a\xda\x27\xa2\xf6\x5c\xcc\xf5\xf8\x5b\x62\x2e\xf6\x9d\x3e\x8a\x0a\x33\xa7\x65\xee\x23\x6f\x98\xda\x1b\xae\xf2\x69\x55\x29\x5c\x57\x96\x35\xf6\xb9\x3e\xf6\xeb\x3d\x74\x07\xdf\xc7\x2a\xc9\xaa\xd5\x67\x1a\x3f\xa9\x2a\x85\x94\xb2\x1c\x90\x6f\xfc\x20\x3f\x20\xa9\xff\x8f\x59\xc6\x55\xb4\x3f\x9b\xd3\x4a\xd3\x8a\x3a\x91\xcf\x5b\x5f\xe5\xe0\x3e\xbd\xb7\x90\x67\x7c\x3d\x76\xee\xd7\x1f\xf7\x7f\xcd\xe2\x6c\xd0\x78\xcd\x78\xaf\x30\xde\x34\xe3\x61\xb8\x54\x49\x80\x11\x16\x8c\xb0\xe0\x10\x8f\x95\x53\x58\x39\x85\x95\x53\x9d\xb3\x72\x0a\x0e\xf1\x70\x88\xc7\x8a\x15\xac\x58\xc1\x8a\x15\xac\x58\x69\x8b\x15\x2b\xf0\x6f\x87\x7f\xfb\x76\xd1\xe8\xc3\xbf\xbd\x19\xfe\xed\x7f\xd7\x47\x07\x3d\xfc\xdb\xcb\xd8\x9f\x96\x2b\x28\x19\x59\x63\xbf\xdb\xc7\x7e\xb5\x87\xee\xb4\x5d\x5f\x36\x46\xff\x16\x66\x2e\x2b\x99\xa0\xaa\x46\x3e\xc4\x0f\xb0\x7c\x64\x04\xff\x13\xbf\x80\x1a\x91\x9b\xe0\x7d\xcf\xfa\xf3\xbe\x51\x76\xb4\xd6\x7a\x0e\xe3\x29\x00\xfc\x01\xfc\x01\xfc\x01\xfc\x01\xfc\x01\xfc\x01\xfc\x01\xfc\x01\xfc\x01\xfc\x01\xfc\x01\xfc\x01\xfc\x01\xfc\x01\xfc\x01\xfc\x01\xfc\x6d\x1d\xf8\x7b\x5f\x8c\x9e\xac\x03\xfc\x79\x2c\xc9\x4a\xeb\x31\x98\x1f\x96\x96\x8a\x52\x3a\x57\xca\x99\x3b\xbc\x85\xbd\x32\xc0\x7e\x66\x47\x35\x22\xfc\x64\x97\xf1\x78\x1c\x60\xb0\x60\x06\x3c\xb3\xde\xe3\xe4\xc2\x8c\xc1\xf3\x26\x45\xbb\x37\x03\x61\x85\x83\xf6\x38\x87\x8f\xe5\x8c\xaf\xa2\x3e\x54\xb2\x07\x70\x7d\x65\x63\x66\x47\xdb\xf1\xd8\xb0\x0b\x69\xb4\xe5\xfe\xd5\x27\x0d\xf4\x58\x8d\x1e\x65\x7f\xaa\x98\x64\x67\xab\x88\xa1\x0f\x66\xac\xb8\xf1\xb5\xd6\x59\xde\x10\xeb\x2c\x41\x20\x41\x20\x41\x20\x41\x20\x41\x20\x41\x20\x41\x20\x41\x20\x41\x20\x41\x20\x41\x20\x41\x20\x41\x20\x5b\x4b\x20\xcf\xd0\x29\x36\x1e\x3d\x61\xad\x8f\x7c\xc8\xb9\xc6\xb2\x7a\x66\x77\x2b\x2c\xb0\x04\x24\x05\x24\x05\x24\xdd\x46\x90\xf4\x47\x97\x68\x54\x40\xd2\xb4\xac\x1a\xad\xc8\x9a\x4d\x4a\xcb\xfe\x9c\xcb\x16\x72\x85\xac\xf9\x29\x61\xaf\x3c\xcf\xfe\xaf\x5e\xba\xd3\xb9\xc7\xd2\x7a\x22\x3c\x2a\x06\xb4\xaa\xf1\x29\x36\x63\xb5\x05\x40\xed\xdd\x17\x44\x83\xf3\xa2\xc1\xd8\x41\xfd\x40\xc7\x66\x6d\x31\xe1\xb9\x73\x9b\xf3\xc7\x24\x18\x1c\x18\x1c\x0a\x27\x82\xc1\x81\xc1\x81\xc1\x75\x0e\x83\x6b\xa3\xba\x80\x6d\xc3\xe0\x50\xb0\x0e\x0c\x0e\x0c\x0e\x0c\x0e\x0c\x6e\x2b\x0a\xd6\x75\x34\x8f\x42\x45\xad\x4e\xae\xa8\x95\xdc\x86\x3c\x2a\x55\xa2\x67\x84\x6e\x6b\x9e\xe6\xb8\x6e\x2b\x45\x17\x68\xda\xdb\x7e\xd1\x09\xad\xd6\x13\x71\x4f\x5e\x34\x9b\xd3\xfc\x05\x5c\x79\x7f\x01\xd7\x0c\x3b\x6f\xe8\xb5\x5c\x78\x99\x29\xda\xf2\x3a\x89\x72\xbf\xfc\x87\xdc\x75\x5c\x3b\xd9\x0e\xbe\x48\x35\xfa\x63\x54\xcd\xd6\xa2\xe2\x83\x15\x91\x6a\x60\xb4\x21\xb1\x4f\xab\x41\x9a\xe0\x5e\x4f\xd3\x22\x3d\x51\x61\x99\x3b\x45\xc9\xcd\x3f\x40\x98\xe7\xc2\x44\xbc\x41\x13\xf1\x97\x42\xf4\x06\x3d\xa8\x8c\xb0\x27\x68\x9e\x76\x89\x1a\xa3\x72\x86\x4d\x53\x20\x3d\xd3\xdb\x51\xfc\x49\x11\xca\x2e\xd3\x2c\x0f\x65\x41\xfd\xde\xb3\xc2\x11\x7d\x81\x1e\xb7\x1d\xd1\x03\x6a\xdb\x8c\x84\xde\xb1\xa9\xa8\x68\x25\xaa\x33\x52\x6e\x24\x1c\xd6\x88\xaa\xb1\x77\x0e\x55\x47\xc2\xb8\x51\xc3\xd5\x51\x10\x57\x59\xa9\x11\x15\x47\xc5\xfe\x15\x51\xd1\x3a\xb8\x55\xf1\x51\xef\x81\x73\xce\xf8\x18\x4b\xd2\xd9\x06\x64\xc9\x53\xfc\x6a\xae\x70\x7c\xac\x01\x34\x03\x34\x03\x34\x03\x34\x77\x10\x68\xc6\x68\xd0\x67\x34\xd8\x3e\x24\xfe\x1b\x21\xfa\x7a\x88\x7d\x35\x14\xfe\x92\xf5\xa8\x3e\x1a\x7a\xc2\x39\xf7\xcd\x15\x22\x9a\x98\xbf\x46\x96\xe5\x15\x91\xb6\xb6\x18\x91\xfd\xc9\x32\xde\x12\x7e\xb3\x1c\xe3\xce\x82\x52\x18\x2a\xc8\x59\x89\x3f\x12\x63\xfa\xeb\x1c\x9f\x0a\x5a\x6c\x75\x06\x63\xdc\x90\x5b\x5d\x95\x33\xfa\x08\x38\x7f\xd3\xce\x27\xdb\xa1\x3d\x97\x1f\x34\x66\xc5\xa2\x40\x7d\x56\x95\xd2\xbc\x9f\xe4\x94\x8c\xf5\xe1\xb1\x3f\x0e\x3c\x55\x6f\x3e\x97\x35\x4d\x3f\x49\xe7\x8d\x92\xf4\x23\xcd\x0b\x32\x7e\x64\x45\xbc\x6f\x66\x13\x71\x71\x9e\xa2\x1a\x82\xcb\x39\x46\x19\x3f\x85\x39\x7e\x06\x6e\xb3\x7d\x24\x3c\x90\xf0\x40\xc2\x03\x09\x0f\x24\x3c\x3a\x3a\xe1\xf1\x85\x10\xbd\x16\x62\xaf\x86\xc2\xaf\x58\x5f\xdb\xf7\x86\xa6\x1c\x0b\x8c\x8b\x79\x59\xd2\x64\xeb\xd5\x9f\x53\x95\xa2\x94\xe5\xdf\xe1\x39\x25\x9f\x4b\xdf\x2c\x93\x3b\x99\x8f\xdb\x5e\xa1\xac\x3f\xf0\x44\x7c\x34\x1e\x59\x10\x71\x44\x7c\x24\x8b\x72\x41\xef\xa6\xf6\x57\x44\x8e\x28\x6a\xf1\x9a\x54\x30\xe5\x57\xea\x9a\x3c\xbc\x22\xe5\xcd\xd1\x7f\x54\x6c\x8d\x46\x56\x72\x05\x29\x9f\xfb\x21\x33\x7c\x2f\xcb\x11\x29\xc3\xb3\x07\xca\xb0\x80\xc9\x19\x7b\x68\x29\x1a\xef\xd3\xec\x83\xc4\x78\x3b\x1e\x39\x97\xe3\x21\xc9\x71\xe2\x8a\x5a\x7d\x65\x76\xc6\xa6\x24\x86\xfb\x7c\xf4\xa7\x94\xae\xc5\xa3\x7b\xc5\xf9\x4c\x99\x17\x52\xae\xe3\x7a\x47\x0f\xbd\xbd\x87\xbd\xad\x27\xfc\x03\x4b\xcc\xf7\xc5\xee\xa7\x8c\x38\xa8\x77\xd1\x6b\xca\x8d\x48\x56\x52\x97\xa5\x6c\x19\x90\xb0\x06\x6a\xb2\xba\xa2\xa8\xab\xfa\xbd\x70\x3d\xd3\x2b\x15\x3f\xee\x7d\xa2\x7c\x58\x63\x8e\x49\x8a\xe2\xaa\x72\xfa\x78\x21\x9d\xcb\xd8\x03\x6b\xfe\x6d\x14\x45\x93\xcc\xbb\xab\x7f\x9c\x8c\x2f\x87\xf9\xf5\x8b\x3b\x6e\xa3\x19\x37\xad\x34\x89\x25\xe1\x2b\xff\xb1\x78\x44\xd0\x33\x1e\x8b\x9d\xa3\xd5\x3e\x71\x0d\x7d\xfa\x9c\x87\xff\xab\xbc\x63\x68\xe3\x91\xbe\xa4\x94\x7e\x21\xab\x2a\x6b\x85\x8c\xbe\x17\xd7\xce\xf1\x9d\x2a\x6e\x9c\x18\xac\x18\x23\xa0\xf2\x46\xcc\x2b\x58\xb6\x5a\x1a\x8f\xf4\x4d\x2b\xaa\xec\x68\x36\x92\x96\xb4\xb4\x94\xd1\xaf\xde\xb8\x3f\x42\x2d\xc9\xdb\xd3\xc4\x70\xba\xaa\xc1\x15\xab\x8d\x78\xf4\xae\x62\x65\xbf\x71\x8e\x6d\x90\x4f\x44\x3e\xb1\x43\xf3\x89\xa9\xac\x37\xe9\x9e\x15\xa4\xfb\x1c\x4d\x72\xd2\x7d\x8a\xc6\xe9\x44\x03\x54\x53\x54\x90\x34\x21\x74\xcc\x1d\x42\xdf\xcd\xee\x12\x6f\xb3\x1d\x69\xeb\x05\xd2\x01\xa5\xee\x82\xaf\x4b\xf6\xaf\xaf\x52\xbf\x90\xe1\x17\x94\x4c\x95\x51\x89\xba\x56\xd0\x1f\x4b\x3a\x2f\x69\x9a\xac\xb1\x6f\x3e\xc7\x7e\xa6\x97\xf6\xe8\x7b\x5a\xde\x23\xb1\xda\xa2\xfb\x79\xd1\xc2\xa4\xde\x42\xec\x41\x7d\xdf\xcb\x4a\xc6\xf4\xf9\x70\x6e\x84\xae\x1e\xba\x7a\xe8\xea\x91\xee\x40\xba\x03\xe9\x0e\xa4\x3b\xda\x26\xdd\xd1\x3e\x34\x1f\x98\x19\x98\x19\x98\x19\x98\x19\x98\xb9\xa3\x31\x33\x38\x18\x38\x58\x87\x72\xb0\x6d\xa9\xab\xcf\xd0\x8c\x40\x74\x49\x3a\xcb\x11\xdd\x18\x1d\xa7\x63\x9e\x82\x51\x4e\xa1\x0c\xb6\x14\x77\xf2\xa1\xba\x74\xf4\x3e\xca\xf6\xeb\xcf\xf9\xc3\xba\x13\x6c\xd4\x80\x75\x0e\x20\x66\x40\x3a\xe7\xf9\x54\x17\x60\x8a\xbe\x6b\x77\x05\x1b\xbb\xd7\x12\xcd\x97\x61\xb0\xfd\xe2\xcf\xcd\x06\x61\x82\x5b\x5d\xa0\x69\x9a\xaa\xd0\xc5\x1f\xa1\x91\x8d\x3f\x00\x28\x9f\xa0\x83\x6f\x50\x07\xff\xbd\x2e\xba\x28\x74\xf0\x53\x94\x74\xe8\xe0\x8f\x51\x43\x3d\xd1\x3b\x1b\x70\x4e\x84\x9a\xd3\x74\x92\x87\x9a\x46\xdb\x4f\x09\x9d\xfb\x24\x4d\xd8\x3a\xf7\x06\xdb\x32\x23\x53\x53\x23\x8f\x9f\x6a\x3e\xf6\xd5\xc1\x8a\xc8\xf4\x88\xab\x88\xbd\x2c\x4a\xf5\x89\x5d\x1c\x51\xca\x16\xad\x37\x31\x5e\x41\xa7\x0e\x70\x0b\x70\x0b\x70\x0b\x70\x0b\x9d\x3a\x74\xea\xd0\xa9\x43\xa7\x8e\x04\x02\x12\x08\x48\x20\x20\x81\x80\x04\x02\x74\xea\xd0\xa9\x43\xa7\x0e\x9d\x3a\xf2\x73\xc8\xcf\xb5\x61\x7e\x2e\x95\x0d\x56\x8e\xee\x9b\xee\xda\x88\x4e\xbd\xa9\x00\x3a\x78\x5d\xfa\xbf\xef\xa7\xc3\x42\x97\xae\x2e\x4b\xe9\xb8\x79\xed\xfc\xd1\xb9\x97\xd3\x54\x95\xbc\xac\xb1\xbf\xee\x63\x5f\xeb\xa1\x07\xf4\x83\x26\x9c\xc7\x58\xe4\xbb\x68\x0c\x45\x0b\x99\xdc\x7a\x2e\xb3\x26\xe5\xcb\xaa\x66\x5a\xd3\xbe\x79\x45\x1f\xd5\x06\x50\x1f\x33\x1e\x3b\xca\x0f\x98\xaf\x3c\x23\x33\xf5\xa7\xe4\xe5\xd9\x9c\x56\x9a\x56\xd4\x89\x7c\xde\xaa\x7c\xd9\xee\x7a\xf8\x2d\xa9\x73\xb9\xec\xdf\x87\xcf\xb0\x53\x46\x1f\xf6\xec\x37\x66\x8f\x56\xf2\xb2\x4b\x2a\xe5\x80\xfb\x3b\xb5\x87\x11\xbf\x78\x9e\x47\x46\xa1\x4b\x2c\x06\x40\xa1\x4b\xe4\x94\x90\x53\x42\x4e\xa9\x83\x72\x4a\x28\x74\x89\x42\x97\x60\xf9\x60\xf9\x60\xf9\x60\xf9\x6d\xc1\xf2\x51\x45\x12\x55\x24\xb7\x0b\xbd\x44\x15\xc9\x66\x54\x91\xfc\x67\xdd\x74\xc0\x1f\x13\x0e\x33\xae\xaf\xa1\x7b\xdc\xb0\x60\xf8\xbe\xac\x5c\x2a\xff\xe8\x8a\xcb\x89\x45\xb3\x72\xc9\x05\xdb\x4d\xcc\xcd\x98\x53\xbd\x00\xc5\xaf\x55\x0d\x8d\x55\x35\x34\x56\x4f\x43\xa9\xe2\x86\xdc\xbf\x6b\x80\x39\xc7\x75\xd6\xb3\xf8\x82\xbd\x1a\xa3\x63\xe2\x59\x68\xa2\xbe\xb0\xfd\x00\xa4\x7c\xf1\x9a\x94\x18\x5e\x57\xf2\x6b\xab\xb2\x54\x2a\x49\xe9\x6b\xfa\x28\x48\x1b\xfe\xe1\x82\xb4\x2a\xbf\x85\xfd\x64\x8c\xbd\xb7\x9b\xf6\x1a\xc7\x2d\x99\x07\x84\x0f\xa8\xb2\x94\xa9\x40\x02\x8b\xbc\x91\x09\xab\x91\x18\xdf\xc9\x28\x69\xbc\x68\x1c\x59\xb9\x53\xb0\x22\xe5\xd4\x35\xba\x24\xee\xb1\x7e\x6f\xf5\x7b\x7c\x9a\x4e\xd2\x98\xa7\x3a\xdc\xbc\x1f\xe6\x75\xc5\x2b\x4f\xcf\x97\x7c\xee\x77\xa7\x92\xb7\xb1\x9e\xac\x5c\xa2\xeb\x19\x7f\x30\x3a\xc1\xce\x18\x60\xb4\xfc\xe9\x18\x34\xb4\xea\x8c\x1c\x64\x54\x9c\x34\x85\x7f\x6c\xb7\xcb\x23\xea\x55\xe5\x62\x5e\x4a\xcb\x7e\x4f\xc9\xdc\xaf\xa5\x0f\x2a\x39\x47\x97\x69\xb6\x62\xf5\xcb\xa6\x9e\x14\x74\x95\x58\x05\xd3\xe0\x2a\x98\x5f\xeb\xa2\x79\xb1\xb0\xe4\x22\xcd\xd8\x0b\x4b\x9a\x15\x3a\x02\x0e\x51\x66\x24\x6a\x49\xa8\xa9\x11\xef\x8a\x6b\x25\x8a\xbd\xbc\xd7\x25\x12\x3d\x60\x48\x22\xa4\xea\xe0\xf3\x98\xd8\xd4\xda\xd8\xd3\x9c\x95\x2c\x88\x3f\x3e\xf1\x07\x6a\xea\x96\xa8\xa9\x21\xa3\x83\x8c\x0e\x32\xba\x66\xc9\xe8\x52\xbf\xde\x45\x0b\x62\xc9\xec\x2c\xa5\x1c\x4b\x66\xb7\xd9\x68\x21\xe2\xfe\x1d\xdf\xcd\x76\x8a\x1b\xd5\xa2\xa9\x4b\xf2\x3d\x7b\x5c\x06\x0c\xc3\x45\x49\x2d\xe5\x78\x82\x58\x50\x09\xbf\x39\xcc\xa3\x45\xa9\x94\xbe\xd6\xb2\x51\xc4\x83\x95\x0d\x0d\xf1\xdf\x3f\xc8\xe9\xc0\x3e\xe7\xc6\x55\x59\xcd\xca\xce\xad\xbd\xce\xad\x5a\x49\x95\x4a\x72\x36\x97\x1e\xaa\xda\xaf\xac\x15\xfd\xdf\x37\x8d\xad\xfa\x59\x26\x2f\xd3\x2c\xa5\x2a\x66\x4f\x63\x74\xbc\x81\x31\xcc\x1c\x97\x51\x60\xec\xe2\x33\x76\xf9\x48\x37\x7d\xb8\x9b\xbd\xd4\x1d\xfe\x80\xf5\x01\x78\xb1\xbb\x73\xe6\x4e\x15\x99\x27\xfd\x3e\x73\x25\x05\xcf\x8e\xea\x9d\xd3\xd6\x53\xf5\x7b\x74\xdc\x01\xfe\x1d\x13\xc2\x1b\x29\xcf\x8f\xd4\x07\x6c\xe2\x68\xbe\x07\x1f\x3c\x69\x91\xfe\x94\xa6\x14\xe6\x84\xb0\xe8\x92\xfe\x5a\x18\xff\x5e\x30\x5f\x16\xfb\x8f\x03\xde\x93\xba\xe4\x6b\x5d\xf4\x6a\x17\x7b\xa5\x2b\xfc\x59\x0b\x9a\x7e\xb0\x6b\x5a\x51\xd3\x7c\x5c\x97\x55\xf8\x6d\x57\x22\xd1\x15\xfd\x4f\xd1\xc8\x44\xd9\x55\x70\x1c\x2e\x86\x60\x6b\x9a\x2d\xa1\x18\x92\xd2\xfc\xc2\xb9\x30\x25\x9f\x4b\x1b\x9f\x58\x39\x9f\xd1\x22\xca\x0d\xe3\x9e\x0a\xe1\x46\x51\x56\x8a\x79\x39\x1e\x11\xbf\xc8\x95\x60\xe6\xb3\xe4\x58\xda\xf5\x06\x58\x3f\x1f\xdd\xc1\x4f\xab\x4c\xd5\x74\xad\xd5\x9f\x88\x87\xdd\x3f\x11\xbb\xd8\x6d\xfc\x6c\xeb\xfd\x42\x54\x07\xfd\x0d\x7d\x33\x52\xa7\x68\x9c\x9d\x88\x8e\xee\xea\x62\x3d\x45\xa9\x74\x2d\xbc\x8f\xbf\x64\xc6\x1b\x5f\xb9\x7b\xb4\x47\xdf\x1a\x33\xfa\xc1\xbb\x9b\x90\x89\x62\x1f\x5b\xa2\x0b\x1e\x34\x55\xa8\x5e\x0b\x96\x54\x54\x50\x54\xfe\xef\xb7\x0c\xa7\xf5\x98\xc8\x0f\x48\x4b\x45\x29\x9d\x2b\xe5\x64\x8d\xfd\xdf\xcf\xb3\xdf\xeb\xa5\x3b\xed\x2f\xa0\xd0\xc2\x1e\xaa\xed\xdd\x3c\xb9\x30\x63\x7c\xeb\x26\x45\x53\x37\x63\x71\xfd\x08\xeb\x03\xc8\x5b\xb1\x24\xab\x99\xea\xfd\xdb\x5c\xc4\x0a\x53\x67\xe8\x38\x61\xea\x0c\x1d\x27\x74\x9c\xd0\x71\x76\x90\x8e\xb3\x8d\xac\x2f\xda\x46\xc7\x09\x4f\x06\xe8\x38\xa1\xe3\x84\x8e\x13\x3a\x4e\x98\x3a\x63\xd1\xf8\xad\x23\xbb\x6c\xfb\x45\xe3\xdb\xd2\xd4\x79\x55\x28\x59\x0e\x71\x25\x4b\xe8\xca\x45\x6e\x95\x7a\xa6\x0e\x16\x28\x0c\x52\xab\x41\x51\x5d\xee\xce\xb2\x3f\x08\x4c\xb2\xb3\xb5\xb0\x5f\xf5\x0f\x6f\xc8\x4c\x95\x2f\xfe\x8d\x7e\x6d\x77\x35\x49\x7b\xd0\x72\x7a\x76\x81\x66\x87\xc4\xc6\x2d\xc0\x66\x82\x72\x3d\x4e\x57\xe8\x52\x45\x1a\xe7\x14\x8d\x6f\xe2\x71\x21\x93\x03\x15\x5c\x83\x2a\xb8\x7f\x15\xa2\x27\x44\x62\xfb\x12\x5d\x74\x24\xb6\xcf\xd0\xe6\xba\xa4\x77\xda\xe2\xb2\x08\x55\xe7\xe9\x1c\x0f\x55\x9b\xfe\xa1\x05\x21\xe2\x9b\xa5\x94\x2d\xe2\xdb\x6c\xa3\xfe\x06\xf6\xdc\xc8\xb9\x45\x21\x30\xf6\xe2\x50\x75\x88\xeb\x73\xb5\x8c\x76\x09\x77\x63\x15\x62\xbb\x0a\xef\xe8\x16\x06\x3e\x78\x49\x83\x17\x83\x17\x83\x17\x83\x17\xc3\x4b\x1a\x5e\xd2\x50\x3f\xc3\x4b\x1a\x79\x0b\xe4\x2d\x90\xb7\x40\xde\x02\x79\x8b\x40\xf2\x16\x58\x04\x83\x45\x30\x58\x04\x03\x2f\x69\xa4\x05\x91\x16\xec\x20\x2f\xe9\xd6\x50\xe8\xd4\x1b\xe9\x79\xf6\x5c\xf4\x59\x4b\x92\x3f\x66\x7c\xd7\x45\xd2\xa4\x90\x89\xe8\x57\x11\xd1\xd2\x4a\x51\x1e\x8c\x68\x6b\xe9\x6b\xfa\xd8\x86\x3f\x3c\x59\x5a\x15\x61\xb6\xa8\x2a\xfc\x1b\x19\xdd\x6d\x49\xe4\x9b\xaa\xda\xff\x72\x1f\x3d\xa0\x77\xde\xe1\x75\xd3\x96\x9a\x77\x17\x95\xe7\x69\xd8\x6f\xf4\xb1\x5f\xea\xa1\x9d\x69\x45\x95\x97\xd6\x13\xe1\xf5\xfa\xac\xa8\x67\xf5\x16\xe6\xf5\x0d\x01\x19\x52\x0f\xf0\x03\x26\x15\x55\x5e\x4c\xd8\x8d\xc3\x84\xba\x3e\x13\xea\x59\xff\xce\x3f\xc0\xfa\x8c\xce\x1f\x8d\x1a\x1d\xde\xbe\xcf\xce\x8e\x0e\xbb\x69\x2c\x53\x80\xdd\x34\xd2\x4e\x48\x3b\x21\xed\x84\xb4\x13\xec\xa6\x61\x37\x0d\xdc\x0f\xdc\x0f\xdc\x0f\xdc\xdf\x8e\xb8\x1f\x76\xd3\xb0\x9b\xde\x2e\x80\x13\x76\xd3\xcd\xb0\x9b\x7e\xfb\x00\x9d\x13\xa6\x1c\x99\x9c\x96\x56\xf4\xa0\xe7\x70\x99\x16\xc0\xcf\xc3\x97\x43\x2e\x64\x8a\x4a\xae\x50\xd2\xf2\xb9\xb4\xac\xb1\x4f\xf5\xb3\xcf\xf7\xd0\x1e\xab\x99\xa5\xf5\x44\xf8\x66\x7d\x3c\xf0\x9c\xd1\xd2\x82\xde\x52\x40\x48\xf0\x20\x3f\x60\xca\x3c\x9b\x45\xc7\xf2\x84\xb2\x9f\x9b\xcd\x69\xc1\x19\x5c\xdd\x42\x50\xf0\xaa\x3f\x14\x1c\x63\xc7\x0d\x28\x58\xd9\x77\x0c\x44\x58\x76\xa3\x41\x09\x41\x09\x41\x09\x41\x09\x41\x09\x41\x09\x41\x09\x41\x09\x41\x09\x41\x09\x41\x09\x41\x09\x41\x09\xdb\x9e\x12\x6e\x3f\xd9\x12\x38\x24\x38\x24\x38\xe4\x36\xe2\x90\xdf\xb9\x4a\x71\xc1\x21\x0b\x72\xe9\x86\xa2\xbe\xa0\x8f\x07\x2b\xfc\x81\x73\x85\xac\x2a\x6b\x5a\x3a\x2f\x69\x9a\xac\xb1\x5f\xbf\xca\x3e\xda\x4b\xcc\xde\xdf\x5a\xd8\x1f\xab\xed\x02\x3c\x23\xda\x99\xd4\xdb\x89\x3d\xa2\xef\x7b\xd9\x6a\xc3\x58\xdc\xef\xdc\xa5\xcd\xe9\x20\x2c\x7f\x41\xc9\x60\xf9\x0b\x4a\x06\x4a\x06\x4a\xd6\x41\x94\xac\x8d\x1c\x0a\xda\x86\x92\x61\xe9\x3c\x28\x19\x28\x19\x28\x19\x28\x19\x2c\x7f\xb1\xb6\xf7\xd6\x41\x4e\x6d\xbf\xb6\x77\x5b\x5a\xfe\x5e\xa7\x2b\x42\x55\x75\x81\xa6\xb9\xaa\xea\x2c\x9d\xa6\x93\x9e\x96\x97\x0e\x2e\x65\xba\x5e\x3a\x29\x51\x5d\x7e\xbf\x3e\x46\xbc\xd7\x97\xfd\x45\x57\x67\xd8\x29\x43\x74\x55\x05\xca\x0c\xd5\x95\xf3\xac\xaa\xd7\x20\x47\x3f\xbd\xdb\x95\x99\xbd\xde\xf4\xfb\x2d\x94\xf3\xb1\x03\xe2\xef\xad\x21\x64\x02\x68\x6d\xb0\x48\xa3\xdf\x93\x81\xd9\x1b\xac\x7d\x1b\xb4\xf6\xfd\xf1\x10\x3d\x2e\xac\x7d\x53\x74\xc1\x61\xed\x7b\x92\x36\xd1\x1f\xbd\x7d\x7d\x2f\x8a\x78\x34\x45\x49\x1e\x8f\x36\xf7\x2b\x73\xc2\xd4\x77\x86\xce\xdb\xa6\xbe\x9b\x6a\xb1\x5e\x47\xdf\x16\x04\xb1\xd8\x77\x06\x5d\x83\xd8\x23\xae\x8e\xbe\x65\xf1\x6c\x48\xec\x52\x15\xcf\x6c\x3b\xdf\x26\x46\x36\xd8\xf7\x82\xfd\x82\xfd\x82\xfd\x82\xfd\xc2\xbe\x17\xf6\xbd\xb0\xef\x85\x7d\x2f\x72\x10\xc8\x41\x20\x07\x81\x1c\x04\x72\x10\x81\xe4\x20\x60\xdf\x0b\xfb\x5e\xd8\xf7\xc2\xbe\x17\x29\x3e\xa4\xf8\x02\xb7\xef\xf5\xe4\xd6\x81\xfa\xfa\x36\x62\xdf\xdb\x02\xe4\x1c\xbc\xb3\xee\xbb\x6e\xa7\x51\x21\x79\x37\x6f\x25\x7f\x76\x95\xaa\x77\x6d\x8d\x7f\xf8\xa4\xb4\x3e\xdb\x57\xe5\xf5\x9c\x7c\x43\x63\x5f\xa2\xe8\xe7\x77\xd0\xbd\x65\x07\x5a\x14\x7c\x9f\x55\xba\x73\x41\x1c\x3b\xc1\x8f\x9d\xe7\xc7\xc6\x86\xc4\xd6\x09\xe7\xa1\x06\x03\x77\xd9\x3d\x60\x00\xfe\x34\x2d\xd2\x13\x15\xa9\xbd\x29\x4a\x7a\xa6\x24\xca\xef\x8c\x99\x95\x70\x39\xcf\xd4\x4b\x21\x7a\x52\x74\xc3\xcb\x34\xcb\xbb\xe1\x34\x05\xd2\x32\x3d\x2b\x12\x29\x0b\xf4\xb8\x9d\x48\x09\xaa\xed\x37\x88\xec\xd2\x13\x34\xef\xc8\x2e\x05\xd5\x78\xe3\xd9\x68\x91\xc8\xc9\xfb\xbf\x55\x33\xec\xbc\xf1\x56\xb9\xf5\x61\xe3\xc5\x72\x3b\xb7\xea\xf7\x0b\x4c\xaf\x36\xd3\x4b\x21\x4b\xeb\x91\xa5\x0d\x3e\x32\x0f\xd0\xb4\x88\xcc\x62\x10\x69\xc5\xe2\x9a\x7e\x48\x45\x25\x93\xc9\x69\xea\x1a\xcf\xb5\x2d\xaf\x65\xb2\x72\x49\x63\x7f\xd0\xcf\xbe\xda\x43\xaf\x13\xed\x58\x11\xfa\x9f\xd4\xe7\x8b\x34\xa7\x64\xa6\xac\x16\x93\xbc\xc5\x80\xdc\x91\x0e\xf3\x03\xc4\x00\xb7\xaa\x7c\xb3\xcb\xcf\xc2\x25\xc9\x3d\x84\xd6\x63\x63\x74\xfd\x79\xff\x38\x3a\xce\x4e\x18\x71\x54\xf4\x14\x23\x72\xba\x3c\x09\x97\xc8\x89\x05\x60\x58\x00\x06\x9b\x24\x88\x00\x20\x02\x80\x08\xa0\x73\x44\x00\xb0\x49\x82\x4d\x12\x92\xaf\x48\xbe\x22\xf9\x8a\xe4\x6b\x5b\x24\x5f\x61\x93\xb4\xcd\x12\x5a\xb0\x49\x82\x4d\xd2\xf6\x5a\xb3\xc6\xfe\xb4\x8f\x8e\x0a\x32\xa9\x2e\x4b\xe9\xb8\x47\xe2\x48\xca\x17\xaf\x49\x89\x61\x55\xc9\xcb\xcb\xb9\x42\x26\x57\xc8\x6a\xec\xfd\x7d\xec\x67\x7a\x28\xac\x1f\x36\x51\x91\x35\x12\xbb\x87\x07\x6a\xbb\x26\xcd\x2b\x79\x39\x29\x5a\x8b\x1d\xd7\x77\x9d\xaf\x6c\x6a\xd1\x68\xc9\xb1\xe7\x76\x2b\xbf\x98\xa1\x19\xc1\x10\x93\x74\x96\x33\xc4\x31\x3a\x4e\xc7\x3c\x73\x31\xfc\x21\x98\x37\x30\xee\xb8\xee\x40\x56\x03\x5e\xf7\xe7\x86\xe7\xd9\x39\x83\x1b\x7a\xf6\x07\x03\x25\x3a\x4e\xce\x89\x10\xc5\xa9\x83\x21\x82\x21\x82\x21\x82\x21\x82\x21\x82\x21\x82\x21\x82\x21\x82\x21\x82\x21\x82\x21\x82\x21\x82\x21\xa2\x20\x23\x08\x1f\x08\x1f\x08\x5f\xcb\x08\xdf\x8f\x5f\xa5\x01\xfd\xd1\x0d\xaf\x27\xbc\x84\x86\x62\x76\xb7\x2a\x15\x35\xf6\x95\xe7\xd8\x3f\x3c\x46\x3b\xd3\x8a\x2a\x2f\xad\x27\xc2\x7d\xb5\x11\xde\x24\x3f\xf0\x92\x54\x8c\xed\xd7\x77\x9c\x54\x54\xd9\x59\x17\xd1\xda\xdc\xe6\x94\x0e\x8e\xe7\x80\x55\x70\x3c\x07\xac\x02\xac\x02\xac\xea\x20\x58\xd5\x46\xa6\x2e\x6d\x03\xab\xe0\x36\x02\x58\x05\x58\x05\x58\x05\x58\x05\xc7\x73\xd8\x21\xdc\x3a\x6c\xa9\xed\xed\x10\xb6\xa5\xe3\xf9\x73\x34\x21\xd4\x4d\x63\x74\x9c\xab\x9b\x46\xe8\x10\xc5\x3d\xd5\x4d\x69\x45\x95\xe3\xeb\x89\xb8\xc5\x85\x02\x51\x35\x5d\xf4\x57\x35\xf5\xb3\x5e\x43\xd5\x14\x8d\x1a\xf2\x25\xeb\x1c\x9c\xe2\x25\x8a\x7e\x6d\x97\x0d\xbf\x98\x65\x7b\x60\x73\xae\x87\xc5\xdf\x9a\x4f\xba\x04\x98\xe2\x0e\xf2\x15\xf6\x06\x83\x14\xab\xff\x0e\xc3\xd9\x12\x5e\xe5\x0d\xae\x82\xff\x7a\x17\x9d\x12\x6f\xf7\x31\x3a\xc2\xdf\xee\x38\x6d\xa8\xef\x51\x52\x18\x5d\x8c\xd3\x09\xdb\xe8\x62\xa3\x6d\x4c\x0a\x43\x8b\x93\x34\xe6\x30\xb4\xd8\x68\x23\x7e\x21\x26\xc8\x10\xe2\xe7\x82\x11\xfb\xbd\x41\x3b\xc4\x3c\xe4\xea\x2f\x6e\x87\x9b\x01\xb1\x5d\x84\x1b\xdb\x51\xbc\xf9\x81\x07\xc6\xe2\x40\xac\x40\xac\x40\xac\x40\xac\x30\x16\x87\xb1\x38\x8c\xc5\x61\x2c\x0e\xd4\x0f\xd4\x0f\xd4\x0f\xd4\x0f\xd4\x1f\x08\xea\x87\xb1\x38\x8c\xc5\x61\x2c\x0e\x63\x71\x64\xd2\x90\x49\x0b\xdc\x58\x3c\x50\xff\x70\x5f\x7a\xbc\x11\x63\xf1\x20\x49\xf3\x36\xf4\x87\x61\xaf\xf4\xd1\xfd\xa6\x1a\xbd\xd2\xfc\x96\x7d\xa8\x8f\xbd\xa7\xc7\x86\xe3\x6b\xf5\x99\xda\x5a\x30\x3c\x20\x2b\xdb\xfb\xf9\x01\x15\x19\x3e\xf8\xd5\x6e\xc2\xaf\xb6\xb1\x4e\x6f\xdd\xfb\xf2\x4e\x0f\xad\x3e\xb4\xfa\x30\x96\x40\x22\x09\x89\x24\x24\x92\x3a\x27\x91\x04\x63\x09\x18\x4b\x00\xe0\x03\xe0\x03\xe0\x03\xe0\xb7\x05\xc0\x87\xb1\x04\x8c\x25\xb6\x0b\xb2\x84\xb1\x44\x33\x8c\x25\xbe\x4d\x34\x52\xb3\xdc\xa0\x7b\xa5\xc1\x4f\x50\xf4\x3f\xee\xa0\xbd\x95\x95\x06\x7d\x8a\x0c\xf6\xbb\x16\x19\x6c\x7e\x7d\xc1\x05\x7a\x9c\xae\x54\x08\xf0\x6b\x40\xb5\xaa\x62\x7a\xae\xa5\x05\xff\x4d\x68\x43\xa4\xae\xae\x46\x45\xb1\xc2\x04\x2f\x56\x68\x89\xad\x03\x68\x76\x51\xe8\xaf\xaf\xd0\x25\x87\xfe\x3a\x80\x76\x37\x5b\x4b\x30\xeb\xcf\x14\xa7\x58\x72\xd3\xb5\x04\x51\x46\x10\x65\x04\xdb\xa6\x8c\xe0\x8f\x0c\xd0\x71\x11\x71\xb5\x92\xa2\x4a\x59\xb9\xb2\xb4\xab\xc8\xa8\x18\x1b\xd3\x79\x49\xd3\x4c\xa7\x9f\xb7\xb0\xcf\xf4\xb3\xef\xf7\xd0\x9d\xc6\x46\xab\x72\xe0\xc7\xba\x8c\x6f\x9e\x23\xb5\x52\x30\x47\x91\xa6\xcf\xcf\x82\x38\x88\x57\xb2\x0d\x24\xcb\x32\x68\x4f\x1b\xf9\xd4\xd8\x98\x64\xe8\x33\x4f\xbb\x63\xf4\x95\x21\x08\x47\xdb\xf1\xd8\xc3\xfc\xe7\x8c\xd3\x32\x8b\xcd\x3a\x4e\x12\xa9\x9a\xea\x88\xfa\xb0\x7b\x44\xdd\xc5\x6e\xe3\x27\x46\xd7\x97\xfc\x43\xea\x49\x36\x66\x84\xd4\xf2\x1e\x68\x06\x53\xc7\x23\x40\x5d\x41\xa4\x6e\x90\xba\x41\xea\x06\xa9\x1b\xa4\x6e\x90\xba\x41\xea\x06\xa9\x1b\xa4\x6e\x90\xba\x41\xea\x06\xa9\x9b\x2d\x4f\xdd\x9c\xa0\x51\x76\x34\x7a\xd8\xd2\x8d\xde\xcf\xd9\x8c\x71\x16\xce\x39\x5c\xb4\x47\xdf\x82\x82\x81\xc8\xfa\x20\xeb\x83\xac\x0f\xcf\xfa\x7c\xa9\x9f\x0e\x7b\x09\xb8\xcb\x4c\xc5\xcd\xc6\xde\xb4\xa6\x94\x24\x8d\xfd\x42\x3f\xfb\xb8\x43\xdb\x7d\xb3\x3e\x6d\xb7\x39\x39\x7c\x5c\x6f\x24\x20\x7d\x77\xaf\x9b\xbe\x3b\x53\xf6\x4b\x50\x7b\x6f\x42\xed\x7d\xc5\x1f\x23\x0e\xb2\x58\xa5\xda\xbb\xec\xfe\x43\xf1\x0d\x6c\x08\x6c\x08\x6c\x08\x6c\x08\x6c\x08\x6c\x08\x6c\x08\x6c\x08\x6c\x08\x6c\x08\x6c\x08\x6c\xb8\x95\xd8\x70\xfb\x2d\x37\x07\x5d\x04\x5d\x04\x5d\xdc\x46\x74\xf1\xa7\xdf\x48\xa3\x86\xa6\xbc\x98\x93\xdf\x5c\x92\x0b\xfc\x69\x39\x34\xe5\xe9\x35\xad\xa4\xac\x9a\x6d\x39\x60\x17\xfb\x93\x25\xf6\xdd\x5e\xda\x5b\x76\xe0\xd2\x7a\x22\x7c\xcc\xa7\x86\x21\x6f\xd0\x9c\x4e\x4e\x59\x0d\xc6\x0e\xea\xc7\x4d\x38\x5b\x5b\x4c\x78\xed\xdc\xe6\xb0\x10\x05\x0e\x81\xd0\x50\xe0\x10\x08\x0d\x08\x0d\x08\xad\x83\x10\x5a\x1b\x99\x4b\xb7\x0d\x42\x83\xeb\x31\x10\x1a\x10\x1a\x10\x1a\x10\x1a\x0a\x1c\xc2\x96\xf5\xd6\xe1\x51\x6d\x6f\xcb\xba\x2d\x0b\x1c\xfe\x8b\x2e\x5a\x17\x2a\x2b\x85\x56\xb9\xca\x2a\x4b\x32\xa5\xbd\x54\x56\x36\x2a\x1a\xb2\xe6\xeb\xb6\xe0\xaa\x1c\x69\xad\x27\xe2\x5e\x34\x29\x90\xb2\x88\x79\x7f\x19\xd6\x0c\x3b\x6f\x2e\x90\x77\xa1\x6d\xa6\xf7\xac\xc7\x49\x96\xd7\x4d\xfc\x47\x72\x21\x6f\x8f\xd8\x05\x14\xbd\x20\xdb\x90\xe1\xeb\xd0\x62\xcc\x26\xa8\xd8\x1a\x69\xf4\xa6\x0a\x73\x07\x89\x96\x9a\xfc\x74\x51\x13\x08\x25\x19\x1b\x74\x14\x78\x6b\x37\xa9\x22\x1c\xbd\x40\x39\x1e\x8e\xd2\xd4\xfc\x0e\x4b\x37\x84\xb5\x48\x91\x0a\xb6\xb5\x48\x4b\x7e\xf8\xcd\xc2\x7c\xe4\x4d\xa4\x38\xcc\x47\x5a\xf2\xcb\x9b\xb5\x27\x69\x69\xf4\x8d\xbd\x73\xc8\x25\xfa\x0e\xb9\xd7\x96\xf4\x8a\xc4\xa3\x62\xf7\xca\x48\x6c\x1d\xdc\xa2\x98\x8c\xc2\x93\x40\xdf\x40\xdf\x40\xdf\x40\xdf\x28\x3c\x89\xc2\x93\x28\x3c\x89\xc2\x93\x48\xc1\x20\x05\x83\x14\x0c\x52\x30\x48\xc1\x04\x92\x82\x41\xe1\x49\x14\x9e\x44\xe1\x49\x14\x9e\x44\x86\x13\x19\xce\x0e\x2a\x3c\xd9\x52\x20\x1d\xbc\xf5\xf1\xef\x0e\xd0\x49\x73\x61\x40\x51\xf3\x35\x1f\xc9\x48\xf2\xaa\x3e\x5f\x2a\x59\xf6\xc7\x6f\x1f\x60\x7f\xda\x43\x3b\xf5\xa3\x97\xd6\x13\xe1\xff\x54\x8f\xed\xf1\x14\x6f\x65\x41\x2e\xb5\x85\xe7\xf1\x43\xfc\xe7\x26\x8a\x45\xcd\xe9\x5b\x62\x9d\x63\x9b\x2f\x41\x68\x4f\xcb\xe3\x4b\xfe\x6f\x45\x8c\xf5\x3b\xbb\xb6\xf5\x86\x14\x35\xe3\x8d\xb0\x9e\x00\x9c\x4a\xb0\xcc\x02\x4e\x25\xc8\x35\x21\xd7\x84\x5c\x53\x27\xe5\x9a\xe0\x54\x02\xa7\x12\x30\x7e\x30\x7e\x30\x7e\x30\xfe\xb6\x60\xfc\xa9\x63\x74\x84\x8d\x44\x0f\x59\x4e\x25\xf7\x3a\x0d\x8e\xad\xf9\x5a\xb5\xbb\x31\x1c\x4e\xb6\x17\x6f\x85\xc3\x09\x1c\x4e\xb6\xd7\x8a\x12\xf6\x97\x07\x69\x52\x80\x4c\x75\x59\x4a\xc7\x3d\x4a\x67\x4a\xf9\xe2\x35\x29\x31\x9c\xce\xaf\x69\x25\x7d\x4a\x95\x97\x97\x73\x85\x4c\xae\x90\xb5\x78\xe6\x7b\x0e\xb2\xcf\x74\x53\x58\x6f\x64\xa2\xa2\x94\xa6\x38\x38\xfc\x98\x2a\x4b\x99\x8a\x79\xf3\xa4\x68\x70\x5e\xc9\xcb\x49\xd1\x60\x6c\x58\xdf\x6d\xbe\xb2\x99\x45\xa3\x95\xea\x03\x82\xd5\xfb\x6e\x90\x99\xc7\xf9\x4d\x33\x2f\x31\x5e\x7d\x76\xbe\x48\x70\xbf\x3b\x12\xbc\x8d\xf5\x64\xe5\x12\x5d\x7f\x93\x3f\x10\xbc\xcc\x66\x0d\x08\xe8\xf9\x04\x4d\x56\x5e\x7d\x7a\x0e\x94\x28\xae\x81\xc2\x2f\xed\xae\xf9\x18\xfb\x55\xb9\x98\x97\xd2\xb2\xff\x93\x1c\x31\xf6\xdc\xb2\x87\x99\xbc\x42\x97\xe8\x62\xc5\x82\x9a\xcd\x3c\x4d\xa8\x18\xb1\x54\xa6\xc1\xa5\x32\xbf\xda\x15\x70\x60\x79\x5c\x2c\x82\x49\xd1\x05\x7b\x11\xcc\x96\xc5\xaa\xe2\x5a\xdd\xb1\xaa\x3a\xe2\x34\x1e\xbd\x62\x5f\xd8\x5b\x33\x56\x3d\x68\xa8\x12\x24\xb7\xf0\x94\x10\x1b\xb7\x2e\x3a\x35\x67\x69\x09\x42\x94\x4f\x88\x82\xbc\xb9\x25\xf2\x66\xe8\xda\xa0\x6b\x83\xae\xad\x59\xba\xb6\xd4\xa7\x36\x36\x9e\xf0\x17\xf7\xcc\x8b\xb5\xad\x17\x69\xc6\xb1\xb6\xb5\xc9\x82\xa1\x88\xfb\x80\x62\x37\xdb\x29\x6e\xd3\x56\xcc\x7f\x92\xbf\xb3\xa7\xe6\x98\x22\x51\x94\xd4\x52\x8e\xa7\x6b\xc5\x4c\xdc\x7f\x22\x74\xa8\xa8\x4f\xbb\xb7\x64\xa0\xf1\x60\x65\x43\x43\xfc\x5c\x0e\xea\xff\x1c\xdb\xe7\xdc\xb8\x2a\xab\x59\xd9\xb9\xb5\xd7\xb9\x55\x2b\xa9\x52\x49\xce\xe6\xd2\x43\x55\xfb\x95\xb5\xa2\xff\xfb\xa6\xb1\x55\x3f\xcb\xe4\x65\x9a\xa5\x54\xc5\x14\x6c\x8c\x8e\x37\xd0\xa7\xe6\xb8\xc4\x01\xc3\x1b\x9f\xe1\xcd\x47\xba\xe9\xc3\xdd\xec\xa5\xee\xf0\x07\xac\x6f\xc4\x8b\xdd\x9d\x33\x03\xab\xc8\x0a\xe9\xf7\x99\xab\x1c\x78\xe6\x52\xef\x9c\xb6\xd6\xa9\xdf\xa3\xe3\x0e\xf0\x4f\x9d\x10\xc5\x48\x79\x7e\xa4\x3e\xa6\x13\x47\xf3\x3d\xf8\xf8\x4a\x8b\xf4\xa7\x34\xa5\x30\x27\x44\x3f\x97\xf4\xd7\xc2\xf8\xf7\x82\xf9\xb2\xd8\x7f\x1c\xf0\x9e\x1a\x26\x5f\xeb\xa2\x57\xbb\xd8\x2b\x5d\xe1\xcf\x5a\xd8\xf0\x83\x5d\xd3\x8a\x9a\xe6\x43\xbf\xac\xc2\x6f\xbb\x12\x89\xae\xe8\x7f\x8a\x46\x26\xca\xae\x82\x03\x61\x31\x4a\x5b\xd3\x6c\x79\xc3\x90\x94\xe6\x17\xce\x45\x23\xf9\x5c\xda\xf8\x0a\xcb\xf9\x8c\x16\x51\x6e\x18\xf7\x54\x88\x2a\x8a\xb2\x52\xcc\xcb\xf1\x88\xf8\x45\xae\xd2\x32\x9f\x25\x07\xb3\xae\x37\xc0\xfa\xf9\xe8\x0e\x7e\x5a\x65\x8a\xa3\x56\x33\x34\x6f\x59\x5d\x51\xc8\xea\x5a\xff\x15\x49\x9d\xa1\x53\x6c\x3c\x7a\xc2\x4a\xdd\x3c\xe4\x4c\xf9\x54\x37\xd1\xfc\xca\x96\xec\x93\xcf\xd3\x94\x3f\xe9\x5d\x96\x4b\x52\xc2\xb3\x86\x9e\x92\x97\x35\xf6\x9d\xab\xec\x43\xbd\xf4\x80\xdb\x37\x92\x1f\x1d\x8e\xd6\x76\xb8\xd6\x2f\x3b\x16\xd3\xf7\x71\xf9\x24\xf2\x16\x1c\x65\xf0\x94\xbc\xdc\xe6\x4a\x52\x98\x59\x43\x65\x09\x33\x6b\xa8\x2c\xa1\xb2\x84\xca\xb2\x83\x54\x96\x6d\x64\x58\xd1\x36\x2a\x4b\x38\x29\x40\x65\x09\x95\x25\x54\x96\x50\x59\xc2\xcc\x1a\x4b\xbd\x6f\x1d\xe9\x61\xdb\x2f\xf5\xde\x96\x66\xd6\xcf\xd1\x84\xc0\x84\x63\x74\x9c\x63\xc2\x11\x3a\x44\x71\x3f\x4c\xc8\x01\x51\x7c\x5e\xc9\xcb\x81\xd8\x52\x2f\xfb\xa3\xc1\x33\xec\x54\x9d\x68\x50\x3f\x2b\x27\x0c\xe4\xe7\x4a\xd1\x7f\xb1\xbb\x16\x2d\xbb\xc3\x72\xa5\xe6\x60\x6c\x50\xfc\x67\x8b\xd1\x98\x20\x59\x67\xe9\x34\x9d\xac\x48\xd6\x0c\x52\xac\xfe\x47\x82\xf4\x0c\x04\x72\x0d\x0a\xe4\xbe\xde\x45\xa7\x44\x38\x38\x46\x47\x78\x38\x88\xd3\x86\xfa\x1e\x25\x85\x22\x6e\x9c\x4e\xd8\x8a\xb8\x8d\xb6\x31\x29\xb2\xe0\x27\x69\xcc\x91\x05\xdf\x68\x23\x9b\x35\x6b\xae\x2f\x26\xd5\x0a\x39\xbe\xf1\x2a\xf6\xf7\x83\xb5\x62\xd2\x03\xae\x5e\xcd\x3c\x3e\x1d\xf3\x94\xcd\xf1\x43\x6d\x83\xe6\xa6\x46\x2a\xd8\x32\x03\xe2\x02\xe2\x02\xe2\x02\xe2\xc2\x96\x19\xb6\xcc\xd0\x2d\xc3\x96\x19\xc9\x04\x24\x13\x90\x4c\x40\x32\x01\xc9\x84\x40\x92\x09\x58\xbe\x82\xe5\x2b\x58\xbe\x02\x5b\x66\xe4\xea\x90\xab\xdb\xe6\xb6\xcc\x2d\x48\x71\x6d\xc4\xfa\x79\x1b\xba\x1a\xb1\xef\x77\xd1\xde\x61\xa5\x28\x17\x72\x99\xe1\xf5\xc4\xf0\xf5\x1b\x2f\x68\xc3\xec\x9b\x5d\xec\x2f\xba\xe8\x36\xf1\xe7\xf0\x73\x59\xb9\xc4\x83\x4e\x2e\x2d\x47\xa4\x74\x9a\x4f\x40\xf8\x68\x4f\x8d\x5c\x29\xca\x85\x99\xa9\x48\x6a\xe1\xca\xe5\xc8\x53\xf2\x72\xe4\xa2\x7c\x53\x9f\xd6\x44\xfa\x8d\x14\x8b\x16\x29\xae\x2d\xe7\x73\x69\x83\xcf\xad\xcb\xaa\x85\x58\x38\x7b\x1a\x88\x1d\xc8\xca\xa5\x05\xd1\xf8\x84\x68\x7b\x86\x37\x2d\x5a\xbe\x28\xdf\xd4\xe4\xd2\xc8\xfd\x65\x88\xfd\xc6\x0b\x43\x9a\x5c\xe2\x6b\xb4\x52\xa3\xb4\x4f\x74\xb9\x7b\xe9\x6e\xde\xe5\xee\xa0\xdb\x7f\xa9\x6b\x17\x19\x97\xe8\xd7\x85\xd8\x3b\xbb\xe9\x51\xc3\xee\x7a\x4d\xbf\x83\x25\xe3\x57\x2a\xd7\x0d\xb0\xbf\x08\xb1\x3f\x0b\xd1\xeb\xcb\xf7\xb2\xd2\x0a\xf7\xe9\xf7\xa8\x6c\x12\x22\x92\xcf\xb1\x47\xb3\x72\x69\xa2\xec\x18\x23\x9d\x30\x31\x37\x63\x42\x58\x2d\xb8\x14\x42\x55\x43\x63\x55\x0d\x8d\xd5\xd3\x50\xaa\x48\x4f\x8a\xfb\x7a\x99\x66\xf9\x7d\x9d\xa6\x29\x4a\x36\xf0\x2a\x3b\xae\xb3\x9e\xb4\x36\x7b\xfb\x00\x9d\x13\x0f\x24\xad\x28\x6a\x26\x57\x70\x7d\x1c\x35\x3d\xc9\xf9\xf8\x55\x63\x9f\xea\x67\x9f\xef\xa1\x7b\x9c\xcd\x58\xcf\xeb\x4d\xc6\x84\xac\x90\xc9\xad\xe7\x32\x6b\x52\xbe\xcc\x9f\xdc\x82\x1f\xb3\x7a\x4b\x81\x78\x92\xc7\x63\x07\xf9\x01\x93\x8e\xb3\xa9\x4a\x7c\xf3\x9f\xd3\xef\x52\x9b\x2f\x0c\xd9\x12\x8b\xf1\x03\xee\x81\x78\x0f\x23\x7e\x62\x42\xf4\x70\xd5\xff\x8b\x30\xc6\x8e\x7b\x65\x15\x5d\x7a\x9c\xf1\x71\xe0\x4f\x06\xb6\xe3\x58\x10\x03\xdb\x71\xe4\x52\x91\x4b\x45\x2e\xb5\x93\x72\xa9\xb0\x1d\x87\xed\x38\x72\x58\xc8\x61\x21\x87\x85\x1c\x56\x5b\xe4\xb0\xb6\x21\x68\x83\x7d\x38\xf2\x02\xb0\x0f\xdf\x3e\x6b\x78\xd8\x2f\x0f\xd4\x63\x1f\x6e\x80\xc8\x1a\xf6\xe1\x7f\xdd\xcf\xde\xb3\x83\xee\x71\x53\xa4\x87\x3f\x59\x4f\x6d\xc4\x6a\x4b\x9d\xb6\x28\x92\x18\xbb\xe1\x61\xfd\xd6\x44\xd3\xb7\x5b\x88\x66\xfa\x16\x4c\x7c\xc1\x9f\x64\x5e\x60\xd3\x81\x38\x3b\x81\x6b\x82\x6b\x82\x6b\x82\x6b\x82\x6b\x82\x6b\x82\x6b\x82\x6b\x82\x6b\x82\x6b\x82\x6b\x82\x6b\x82\x6b\xb6\x9a\x6b\xb6\x9d\xb7\x2e\xb0\x25\xb0\x25\xb0\xe5\x36\xc2\x96\x5f\xec\xa5\xd7\xe9\x8f\x6e\x78\x3d\x31\x2c\xe8\x0c\xfb\x4c\x2f\xfb\x44\x37\xed\x4c\x2b\xaa\xbc\xb4\x9e\x08\x1f\xa8\xed\x61\xcd\xf1\x55\xec\x61\x7d\xa7\x49\x45\x95\x17\x13\xfc\x0f\xd3\x8a\x3a\x91\xcf\x5b\x4a\xc5\xe0\x14\xab\x4d\x42\x7a\x4f\x6f\xcc\x72\x45\xbf\x37\xf1\xf5\x44\x9c\x5f\x6b\x20\xee\x4b\xe7\xfd\xf1\xdd\xa3\x2c\x2a\xe8\x9c\x20\x86\x4e\x20\x67\x60\xbd\x68\x14\x68\x0e\x68\x0e\x68\x0e\x68\x0e\x68\x0e\x68\x0e\x68\x0e\x68\x0e\x68\x0e\x68\x0e\x68\x0e\x68\x0e\x68\xae\xd5\x68\x0e\x64\x0d\x64\x0d\x64\xad\x83\xc9\xda\x6f\xf5\x11\x33\xc9\x9a\x50\xfd\x15\x95\x8c\xc6\x5e\xea\x63\xff\xae\xc7\xa6\x6b\x4a\x7d\x0b\x8b\xe7\x94\x4c\x40\xcb\x8a\xa3\xc6\xb2\x62\x55\x5e\x4c\xcc\x29\x99\xd9\x9c\xb6\xed\x60\xdd\x0b\x9e\xb4\x2d\x78\x61\xde\x86\x56\x13\x9f\xf3\x87\x78\x51\x16\xb1\x61\x9d\xc0\x79\x73\x4a\x06\xea\x3a\x20\x3c\x20\x3c\x20\x3c\x20\x3c\x20\x3c\x20\x3c\x20\x3c\x20\x3c\x20\x3c\x20\x3c\x20\x3c\x20\x3c\x20\x3c\x20\x3c\x20\x3c\x20\xbc\x2d\x41\x78\x5f\xeb\xa3\x70\x15\xc2\x2b\xc9\xab\x45\x3e\x97\x60\xbf\xdd\xc7\x3e\xee\x40\x79\x37\xea\x46\x79\x4f\x18\x4d\x04\x84\xf4\x62\xe5\x48\xcf\x6c\x7d\x7b\xa2\xbd\xd6\x2f\xad\xbd\xe4\x4f\xed\x62\xac\xdf\x85\xda\x99\x37\xba\x8c\xde\xd5\x45\x0a\x81\xf8\x80\xf8\x80\xf8\x80\xf8\x80\xf8\x80\xf8\x80\xf8\x80\xf8\x80\xf8\x80\xf8\x80\xf8\x80\xf8\x80\xf8\x80\xf8\x80\xf8\x80\xf8\x80\xf8\x5a\x85\xf8\xbe\x35\x40\xd3\xc2\xb6\x4f\x7e\x73\x49\x2e\xf0\x47\x55\x5f\xd5\x90\x5c\x21\xab\xca\x9a\x26\x5b\xce\x7d\x3f\x37\xc0\xfe\xa1\x87\x98\xdd\x8e\x55\x3d\xe4\xe5\x7a\x7c\xfb\x66\x44\x7b\x6d\x61\xd6\x27\x7e\xee\x9c\x75\x25\x55\x95\x47\x8c\x93\x05\x4e\x6c\xc0\xa9\x6f\xd1\x9f\x37\x1e\x66\x09\x83\x37\xda\xbd\xc9\xe0\x8e\xc6\x9d\xaf\xae\x3c\x05\xa6\x08\xa6\x08\xa6\x08\xa6\x08\xa6\x08\xa6\x08\xa6\x08\xa6\x08\xa6\x08\xa6\x08\xa6\x08\xa6\x08\xa6\xd8\x62\xa6\x78\x84\x46\xd8\xa1\x68\xdc\x32\xe5\xbb\xdb\x69\xca\x67\x4c\xdf\xaa\x9d\xf8\x50\xa2\x04\xac\x13\xac\x13\xac\xb3\x89\xac\xf3\x0b\x21\xb1\x22\x59\x1b\x2e\x28\x19\xd9\x2c\x4a\xc2\x7e\x35\xc4\x7e\x25\x44\x3d\xfa\xdf\xc2\xe1\xac\x5c\x8a\xe4\x0a\x2b\x8a\xba\x6a\xdd\x3a\x49\xac\x58\x8d\xdd\x99\x95\x4b\x97\x95\x8c\x3c\x31\x37\x73\x5e\xff\x43\x1b\x56\xa1\xce\xd1\x65\xc1\xfb\xce\xd3\x39\xce\xfb\xce\xd0\x29\x1a\x6f\xac\x0a\x35\xbf\x46\xdf\xf2\xd3\x6f\xeb\xa6\x88\xb8\xa7\x5a\xfa\x9a\x9c\x59\xcb\xeb\x23\xf3\xca\x5a\xe0\x5f\x09\xb1\x3f\x09\x11\xb3\xf7\xf0\xaf\x03\x1e\xc9\xca\xa5\x05\x6b\x7f\xd4\x00\xaf\xf9\x10\xfe\x4b\x1f\xbd\xbe\x5c\xa7\x6b\x94\x9f\xd7\xd8\xc7\xfb\xd8\x4b\x0e\x8d\xae\x56\x9f\x46\xd7\x28\x30\x1f\x90\x3e\xb7\xd7\xa1\xcf\x35\x5a\x86\x36\xb7\x3e\x98\x3e\xe3\xcf\xca\x7b\xd9\xa3\x95\xda\x5c\xe3\x26\x43\x97\x0b\x86\x0e\x86\x0e\x86\x0e\x86\x0e\x86\x0e\x86\x0e\x86\x0e\x86\x0e\x86\x0e\x86\x0e\x86\x0e\x86\xde\xf6\x0c\x1d\xac\x1a\xac\x1a\xac\xba\x83\x59\xf5\x97\xfa\x69\x54\x70\x55\xa9\x58\xd4\x6c\xb0\xe7\x21\xc6\xd5\x4a\x52\x49\x5e\x59\xcb\xeb\x6f\x30\x7b\x4f\x3f\xfb\x68\x0f\xed\xd4\x0f\xdc\xc0\xba\xfc\x05\xa3\x89\x05\xb9\x14\x10\xf7\x7b\x94\x1f\x30\x51\x2c\x6a\x8b\x0e\xe9\xac\xe3\x77\x66\x73\x5a\x09\xd4\xaf\x9a\xfa\x5d\xf1\xa7\x7e\x83\x2c\x66\x50\x3f\xfd\x31\x9b\xdc\xcf\xbe\xb5\x60\x7f\x60\x7f\x60\x7f\x60\x7f\x60\x7f\x60\x7f\x60\x7f\x60\x7f\x60\x7f\x60\x7f\x60\x7f\x60\x7f\x60\x7f\x6d\xcf\xfe\xa0\x84\x05\x5d\x04\x5d\x04\x5d\x6c\x22\x5d\xfc\xd0\x3e\x9a\x15\x74\x31\x2d\xab\x46\x2b\xb2\x56\xa9\xdb\x74\x6e\xcb\x65\x0b\x7c\xc1\xbf\xf8\x1c\x18\x4b\xfe\x87\xa5\x62\x51\x55\xd6\xa5\x3c\xfb\x93\x07\xd9\x37\xbb\xe9\x1e\xe7\x11\x96\xc6\xf3\xb8\x2a\x4b\x99\x88\xb9\xab\xf9\x08\xec\x2f\xfe\xa4\x7d\xd0\x82\xf8\x99\x79\xf1\x33\x31\x7e\xa4\x63\xb3\xb9\x0e\xdf\xf3\x88\x09\xe3\x47\x82\x13\x87\x72\x06\xb8\x46\xcf\x0a\x06\xb8\x40\x8f\x73\x06\x78\x91\x66\xe8\xbc\x77\x75\x6c\xe7\x3d\x35\xee\x42\xdc\xf3\x9c\x7d\x69\xe0\x7e\x77\x78\x77\x1b\xeb\xc9\xca\x25\xba\xfe\x26\x7f\x58\x78\x99\xcd\x1a\xb0\xd0\xe5\x71\x1b\xec\xd0\xfb\xfc\xaa\x56\xda\x87\xbf\xb5\xdb\xe3\x51\x8f\xab\x72\x31\x2f\xa5\xe5\x86\x9e\xb6\x79\xf0\xd6\x3f\xf0\xe4\x55\x7a\x03\x3d\xc3\x7a\x96\x95\xcc\xcd\x30\xff\xdf\x48\x57\x2c\xb8\x27\x9e\xfc\xb9\x10\xfd\x6c\x88\xbd\x3b\x14\xfe\xd7\xd6\x07\xe3\xef\xbb\x9e\xd2\xbf\xbc\xc6\xa0\x62\x90\xd3\x7a\xde\x9c\x88\xf0\x65\x13\x59\x27\xdc\x5c\x96\x23\x45\xfd\xf9\xe8\xb3\x87\x78\x64\xa2\x10\xc9\x15\x04\x42\x52\xd4\xc8\x5a\xc1\xa2\x50\x99\x48\x46\xbd\x39\xbf\x56\x88\x64\x72\xaa\xac\x87\x35\xd9\x42\x1b\xfa\x08\x85\x0f\x01\x0d\xb6\x63\xce\xe4\x8c\xd9\x74\x64\x65\x4d\xe5\xb3\x85\xa2\xaa\xa4\x65\x8d\x8f\xd5\x8c\x87\x6a\x44\x83\x78\x64\x91\xff\x22\x9f\x85\xf1\xc1\xd5\x58\x64\x28\x32\x91\xcf\x8f\xf1\x91\x58\x46\xbd\x19\x51\xd7\x0a\xfa\x2c\x5f\x8f\x83\xe6\xf0\xd3\x68\x4e\xce\x44\x6f\x13\xa7\xe6\x08\xfa\xc9\x9f\x0e\xd1\xbf\x0c\xb1\x9f\x0c\x85\x7f\xc2\xba\x41\x7f\xd5\xc5\x07\xef\x97\xa4\x82\x94\x95\x55\x31\x0d\x15\x23\x22\x4d\x53\xd2\x39\x3e\xb2\xb2\x26\x7c\x12\x9f\x31\x2b\x6a\x44\x1f\x78\x97\x6e\x5a\x43\xcd\x55\xe9\x05\xfd\xfc\x4b\xd7\x64\x4d\x36\x23\xb3\xfe\xb5\x30\x51\x1c\xa7\x51\xcb\x72\x84\x7f\x13\xf8\xe4\x4e\x51\x23\x89\x91\xe3\xfa\xbe\xaa\x94\xe6\xcc\x30\xaf\x14\xb2\x22\x0e\xf3\x09\x98\x3e\x56\x96\x72\x05\x31\x3c\xe2\x13\x1c\x7b\x5f\xce\x51\x0c\xa2\xa9\x4f\xcb\xcd\x6f\x6b\x56\xc9\x4b\x85\x6c\x5c\x51\xb3\xc3\xc5\x17\xb2\xc3\x6b\x85\x5c\x5a\xc9\xc8\xc3\x07\x66\xb4\x39\xbd\x95\x78\x74\x8f\xf3\x5a\x9d\x5f\xc3\x3f\xee\xf2\xae\xfd\xd5\xcc\x18\xb5\xa4\xb7\x9d\x60\x4f\xd3\x22\xed\x9c\x14\x13\x90\x40\x7f\xc0\x3f\xd6\x15\xd7\xb6\x24\xd6\x25\xff\x72\x8f\x47\xac\x9b\x2a\x4a\x6a\x29\xc7\x49\xac\xf8\x38\x37\x14\xf4\x4e\x14\xb9\x36\x7e\x4b\x43\xde\x83\x95\x0d\x0d\xf1\x93\x3a\xc8\xd7\x42\xec\x73\x6e\x5c\x95\xd5\xac\xec\xdc\xda\xeb\xdc\xaa\x0f\xeb\x4b\x72\x36\x97\x1e\xaa\xda\xaf\xac\x15\xfd\xdf\x37\x8d\xad\xfa\x59\x26\x2f\xd3\x2c\xa5\x2a\xc2\xed\x18\x1d\x6f\x20\xc9\x36\xc7\x33\x1b\x88\xaf\x3e\xf1\xf5\x23\xdd\xf4\xe1\x6e\xf6\x52\x77\xf8\x03\x56\xaa\xef\xc5\xee\xce\x89\xaf\x15\x30\x48\xbf\xcf\x3c\xb9\xc1\x81\xa5\xde\x39\xed\x14\x67\xbf\x47\xc7\x1d\xe0\x94\x5f\xe4\xc2\xa4\x3c\x3f\xb2\xa0\x14\x86\xc4\xd1\x7c\x0f\x9e\x0b\xd5\x22\xfd\x29\x4d\x29\xcc\x89\x5c\xdf\x25\xfd\xb5\x30\xfe\xbd\x60\xbe\x2c\xf6\x1f\x07\xbc\x03\x7f\xf2\xb5\x2e\x7a\xb5\x8b\xbd\xd2\x15\xfe\xac\x35\xcb\xf8\x60\xd7\xb4\xa2\x4f\x9a\x73\x5a\x24\xab\xf0\xdb\xae\x44\xa2\x2b\xfa\x9f\xa2\x91\x89\xb2\xab\xe0\xf3\xc7\x55\x59\x2a\x68\x91\x35\xcd\xce\x6a\x0c\x49\x69\x7e\xe1\x3c\x57\x94\xcf\xa5\x45\x3e\x83\xe3\xeb\x88\x72\xc3\xb8\xa7\x22\x97\x52\x94\x95\x62\x5e\x8e\x47\xc4\x2f\xf2\xe4\xac\xf9\x2c\xf9\x3c\xce\xf5\x06\x58\x3f\x1f\xdd\xc1\x4f\xab\x2c\xd1\xb8\xb5\x63\xea\xd6\x7f\x48\x6a\xf8\x62\xf1\xbb\x45\xa9\x69\x9a\x62\xc9\xe8\x59\x8b\xfb\x3c\xe6\x5c\x37\xed\xf9\x4b\xd5\x2b\xa9\x83\xa6\x3b\xec\xc5\x7e\x1a\x36\xd6\x4d\xca\xa5\x1b\x8a\xfa\x42\xd9\x1a\x3f\x43\x98\x62\xd8\xc1\xa5\xf3\x92\xa6\xc9\x1a\xfb\xc3\x3e\xf6\x3b\x3d\x74\x87\x7d\xc0\xd2\x7a\x22\xfc\xe6\xfa\x94\x28\xc6\x1a\xf1\x49\xbd\xa9\x80\xa4\x28\x8f\xf0\x03\x2e\x5b\x67\xb3\x98\x70\xfe\x08\x74\x28\xee\x6f\xc9\x55\xff\xb7\x64\x8c\x1d\x37\xde\x92\xaa\xbe\x51\x6e\xd8\xc6\x6f\x34\x54\x29\x50\xa5\x40\x95\x02\x55\x0a\x54\x29\x50\xa5\x40\x95\x02\x55\x0a\x54\x29\x50\xa5\x40\x95\x02\x55\x0a\x54\x29\x6d\xaf\x4a\x81\x66\x04\x9a\x11\x68\x46\x3a\x58\x33\xf2\x83\x83\x74\xc5\x70\xfa\x2a\x29\xaa\x94\x95\x2b\xe5\x22\x1e\x4b\xd3\xd2\x7a\xf4\xe5\x07\xa4\xa5\xa2\x94\xce\x95\x72\x76\xc9\x88\x0f\x1d\x64\x2f\x77\xd3\x9d\xc6\x76\x2b\xb5\xf6\x18\x57\x8c\x54\xa4\xd0\x16\x66\x16\xc4\x6e\x93\xa2\x99\x9b\xb1\xb8\xbe\x9b\xf1\xc7\xaa\x0a\x0d\xd5\xfb\x07\x2c\x0a\xd9\x98\xd7\x5a\xdc\xbc\x69\x16\xbb\xae\x3a\xbf\xcd\x0a\x41\x64\x7f\x5a\x97\x64\x67\x0d\x5a\x57\xfe\x0c\x4d\x9c\x5d\x7d\x4e\xd5\xe2\x8f\x77\xed\xae\x7e\x60\xfd\xa6\xee\xc3\xf7\x99\x25\x8c\x3d\xb7\xea\xb1\x25\x1f\x27\xfd\x4b\x56\x9e\x6b\xdc\xdc\x73\x43\xba\x11\x72\x8e\x06\xe5\x1c\xbf\xd1\x15\x78\x10\x59\x10\x4a\x8d\x59\x4a\xd9\x4a\x8d\x2d\x8c\x4c\x5c\xb6\xd1\x9a\xc8\x14\xfb\xe4\xde\xea\xc8\xf4\xa0\x98\x82\x44\x24\xb7\x60\x74\x48\x6c\xdc\xb2\x58\xf4\x04\xcd\xd3\x9c\x33\x16\xc5\x92\x74\xb6\x81\x94\xce\x14\xbf\x8c\x2b\x1c\x81\x6b\x08\x47\x7e\xe1\xe8\x1b\x21\xfa\x7a\x88\x7d\x35\x14\xfe\x92\x75\x83\x3e\x1a\x7a\xc2\x39\xe4\xcb\xe9\x33\x0f\x3e\x6c\x8b\x2c\xcb\x2b\x22\xfd\x63\xcd\xb5\xec\x1c\x83\x31\xbd\xe5\xa7\xe8\x08\x37\x05\xa5\x30\x54\x90\xb3\x12\xbf\x11\xc6\xa8\xcf\x19\x96\x04\x75\xb1\x1e\x81\xd1\x43\x73\xab\xab\x72\x46\x0f\x7c\xf9\x9b\x76\x5e\xc6\x66\xf1\xb9\xfc\xa0\x31\x18\xe4\xc3\xe1\x48\x56\xd5\xbf\xb7\x45\x59\xcd\x29\x19\x6b\x50\x6b\x7f\x7a\x79\xca\xcb\xbc\x1b\x6b\x9a\x7e\x92\xce\x81\xb4\xa4\x1f\x69\x5e\x90\xf1\x23\x2b\x82\x3f\x98\x4d\xc4\xc5\x79\x0a\xd9\x80\xcb\x39\x46\x19\x3f\x85\x39\x7e\x06\x2e\x83\xdc\xe4\x17\x42\xf4\x5a\x88\xbd\x1a\x0a\xbf\x62\xdd\xe6\xf7\x86\xa6\x1c\xd9\xdc\x62\x5e\x96\x34\xd9\x82\x45\x73\xaa\x52\x94\xb2\xfc\x01\xcc\x29\xf9\x5c\xfa\x66\x59\xbe\xc8\xbc\x16\x3b\x1d\xac\x3f\xa5\x44\x7c\x34\x1e\x59\x10\x0f\x44\xdc\x9d\xa2\x3e\xc7\xd1\xe7\x89\x26\x77\x94\x23\x8a\x5a\xbc\x26\x15\xcc\xfc\x95\xba\x26\x0f\xaf\x48\x79\x93\xd3\x47\xc5\xd6\x68\x64\x25\x57\x90\xf2\xb9\x1f\x32\x81\xdf\xb2\xac\x0f\xa2\xf9\xac\x6a\x58\x0c\x9e\x33\x36\x04\x16\x8d\xf7\x69\xf6\x41\x82\x8c\xc7\x23\xe7\x72\xbc\x3b\x3b\x4e\x5c\x51\xab\xaf\xcc\x9e\xa1\x96\x04\x98\xe7\x2f\x9b\x52\xba\x16\x8f\xee\x15\xe7\x33\x65\x5e\x48\x59\x22\x2c\xf9\x8e\x1e\x7a\x7b\x0f\x7b\x5b\x4f\xf8\x07\x56\x36\xf4\x8b\xdd\x4f\x19\xe4\x4c\x7f\xa5\xf4\x29\x62\x56\x52\x97\xa5\xac\x1c\x49\x2b\xf9\xbc\xcc\x23\xb1\xfd\x5e\xc8\xea\x8a\xa2\xae\xea\xf7\xc2\xf5\x4c\xaf\x54\xfc\xb8\xf7\x89\xf2\xfe\x6c\x76\xc6\xa2\xb8\xaa\x9c\xde\x51\xd2\xb9\x8c\x8d\xc0\x39\x4d\x15\xb2\x12\xf3\xee\x6a\xdc\x61\x99\x6f\x35\x79\x69\xdc\x71\x1b\x4d\xd2\x66\x4d\x0b\xad\x1c\x68\xf9\x8f\xc5\x23\x13\x69\x7d\x06\xc9\xbf\xd1\xce\xe0\xd0\x27\xae\xa1\x2f\x32\x64\x3c\xf8\xf2\x8e\xa1\x8d\x47\xfa\x92\x52\xfa\x05\xfd\x6b\x53\xc8\xe8\x7b\xf1\xe4\x23\xdf\xa9\xe2\xc6\x09\xbc\x6d\x74\xfd\xf2\x46\xcc\x2b\x58\xb6\x5a\x1a\x8f\xf4\x4d\x2b\xaa\xec\x68\x36\x92\x96\xb4\xb4\x94\xd1\xaf\xde\xb8\x3f\x22\xdd\xcc\xdb\xd3\x44\xf4\xaa\x6a\x70\xc5\x6a\x23\x1e\xbd\xab\x58\xd9\x6f\x9c\x63\x87\x4f\x75\xd1\xac\x18\x3b\x9c\xa3\x49\x3e\x76\x38\x45\xe3\x74\xa2\x81\xcf\xc7\x42\x49\x2a\xad\x69\x34\xaf\xb7\x36\xc2\x75\x38\xbb\xc4\xbd\x95\x33\x9b\x6d\xd3\x6f\xe0\x50\xdf\xc8\xa0\xfe\x31\x80\xfb\x18\xe2\x7a\xc4\x7d\x7c\xb2\x9b\xed\x14\x4f\x83\x92\xbf\xb8\xa7\x7a\xec\x90\xa8\x52\x78\xfa\x4e\x6f\x86\xb9\x96\x67\x2b\x06\x14\x10\x71\x76\xda\x30\x06\x22\x4e\x88\x38\xb7\x58\xc4\xd9\x7a\x06\xe6\xa7\xa2\x6c\xd1\x5c\x33\x75\x86\x4e\xb1\xf1\xe8\x09\x4b\xac\xf9\x50\x99\x58\xb3\xaa\x85\x5b\xa1\xde\x0d\xfb\xa9\x3e\xba\xc7\x2c\x33\x50\x50\x32\x36\xc6\xfd\x5e\x2f\xfb\x9d\x90\x5d\x64\xe0\x3e\x17\x7c\x7b\x59\xc9\xc8\xb1\xd7\xf1\xf5\x7c\xbc\x0e\x80\xfe\xdf\x01\x03\xd9\x05\x3a\x2e\x3a\x63\x82\x86\x79\x67\x1c\xa0\x3e\x7a\xcc\x5b\x51\xac\xa8\x7a\x4f\x8c\xeb\x67\xb2\x59\xf4\x3a\xed\xdf\xe9\x0e\xb0\x47\x2a\x6d\xfa\xf9\x2f\x3b\x15\x91\xe1\xb7\xee\xb2\xef\x62\xd8\x9d\xa9\xf2\x1b\x79\x97\xb9\x54\xae\x49\xf7\x32\x39\x4e\x27\x68\xb4\xe2\x63\x5e\xef\xcd\xc4\x97\x1b\x3c\xb4\x41\x1e\xfa\x53\x5d\x9b\x78\x87\x4f\x09\xf2\x79\x8c\x8e\xd8\xe4\xb3\x25\x21\x80\x33\xce\x80\x42\x40\xec\x1b\x77\xda\x21\xe0\x0e\x0b\x5e\xf2\xb7\x7e\xaf\xf8\xcf\xa6\xbd\xf4\xc0\x91\xc0\x91\xc0\x91\xc0\x91\xc0\x91\xc0\x91\x9d\x89\x23\x7d\x39\x61\x50\x9f\xf9\xe4\xa7\x6f\xb7\x3f\xf3\x07\x7c\x38\x23\xff\xf8\xdf\x59\xb4\x8b\xa8\x05\xfb\xed\x07\x39\xec\xb4\x11\x07\xc8\x21\xc8\xe1\x16\x93\xc3\x66\xc2\x1a\x5f\x46\x18\x50\x10\x4f\x25\x68\x98\x0d\x45\x0f\x5a\x0c\x6f\xaf\x13\x02\xea\xbb\xb7\x60\x71\xf6\x37\xfb\x68\x5f\x79\xed\x4f\x73\xa8\xf2\xa6\x35\xa5\x24\x69\xec\xf7\xfa\xd8\xa7\x1c\x15\x40\x6f\xd6\xb7\x06\xdb\x5c\x61\xf7\xb8\xde\x48\x40\x8b\xb0\x07\x1d\x75\x40\xcb\xda\x47\x35\xd0\xfa\xd6\x63\xd7\xb3\x60\x7a\x63\xc5\x03\xac\xce\x5d\xf6\x3c\xca\x7b\x39\x56\x60\x63\x05\x36\x56\x60\x63\x05\x36\x56\x60\x63\x05\x36\x56\x60\x63\x05\x36\x56\x60\x63\x05\x36\x56\x60\x63\x05\x36\x56\x60\x63\x05\x36\x56\x60\x63\x05\x36\x56\x60\xb7\x68\x05\xf6\x8f\xdd\x4e\x47\x8d\x9a\xa0\x06\x1a\xe2\xad\x38\xac\x18\x35\x39\xbf\xa2\xad\xf1\x80\xa4\xae\xe5\x65\x4d\x9f\x33\xc8\x37\x34\xf6\x79\x8a\xfe\xe6\x0e\xda\x5b\x76\xd8\xd2\x7a\x22\xfc\xb0\xf8\x68\x44\xa4\xc8\x82\x9c\x5f\x59\x10\x47\xce\xeb\x47\xce\xf3\x23\x63\x07\xc5\x0e\x13\xce\x03\x17\x13\xee\x3b\x07\xac\x46\x59\xa4\x27\x68\xbe\x22\x2b\x54\x43\x8f\x12\x2f\xbf\x27\xeb\x89\xb8\xfb\x59\xa6\x7e\x21\xe4\x6d\xa1\xbd\x20\x90\xde\x2c\xa5\x38\xd2\x9b\xa2\x00\x7e\x90\x9e\x16\xba\xa4\xc7\xe9\x8a\xad\x4b\x0a\xa6\xe5\x67\x44\x8a\x74\x9e\xe6\x1c\x29\xd2\x40\x9a\x36\x89\xe3\x43\xee\xc4\x71\x27\xdb\x51\x54\xb4\x12\x5d\xbf\xee\x0f\x1b\xcf\xb3\x73\x66\xa5\x52\x97\x5e\x6b\x56\x2e\x75\xbf\xc0\x32\x0e\x89\xb4\x5e\xed\xb4\x5e\x0a\xb2\x42\x0f\x59\x61\xe0\x49\x97\x7f\xf7\x46\x9a\xb1\x22\xb1\xa2\xa5\xa5\x7c\xae\x90\x1d\x5e\x1f\x59\x96\x4b\xd2\x88\x97\x11\x06\xef\xfb\xfa\x75\xe7\x8b\x4a\xc6\x3c\x4e\x56\x35\xf6\x87\x4b\xec\x1b\xbd\x74\xb7\xa3\xa9\x25\xa3\xa9\xf0\x51\x31\x9b\x57\x8d\x79\x88\x39\x50\x55\x56\x22\xfa\x7b\x13\xb9\x60\x35\x39\xa7\x64\x26\xac\x26\x63\xa3\xfa\x61\x13\x76\x7b\x8b\xa2\x39\x7b\x25\x92\xc7\x81\x6d\x9e\x74\x49\x22\x15\x81\x54\x44\x12\xa9\x08\xa4\x22\x90\x8a\x40\x2a\xa2\x63\x52\x11\xc9\xb6\x49\x45\x04\x7e\x26\x0d\xa7\x22\x92\x48\x45\x20\x15\x81\x54\x04\x52\x11\x48\x45\xb4\x3e\x15\x91\xec\xe8\xcc\x41\x12\x99\x83\xe6\x65\x0e\x92\xed\x9e\x39\x48\x6e\xc3\xcc\x41\x6a\x9d\xde\x20\xc8\xf6\x13\x34\xcf\xc9\xf6\x2c\xa5\xe8\x42\x2d\x48\x6c\x92\xa3\xb8\x41\xa2\xe2\x1e\xc4\x68\x36\x57\x47\xb5\x2d\x6f\x8a\x2c\x24\xab\x59\x7f\x8a\x3c\xc5\x92\x36\x45\x36\x4f\xce\x80\xc7\x1e\xa7\xe6\xa0\xc7\xe2\x1a\x28\xfa\x6e\x72\xc7\x6c\x11\x2b\x0f\xe2\x45\xd4\x4e\x58\x89\x90\x2d\x63\x6a\x02\x81\x3d\x4b\x4f\xd3\x62\x45\x5a\x64\x9a\xa6\x82\x78\x96\x58\x38\x83\x85\xfb\x0d\x12\xf6\x8f\xd4\x48\xaa\x3d\x25\x42\xcf\x1c\x5d\xe6\xa1\xe7\x02\x05\xd4\x5d\xe9\x39\x91\x58\x7b\x92\x16\xec\xc4\x5a\x70\xad\x5f\x15\xc9\xb5\x45\x7a\xc2\x91\x5c\x0b\xac\x79\x33\x34\xd6\x17\xfa\xaa\x22\xd9\x86\x63\xa1\x5f\x26\x2f\xf6\xae\x21\xf7\xd0\x38\x68\x2c\x38\x75\xac\xde\x55\x56\x3c\xc3\xe4\xa4\xd8\xbb\x3a\x4c\x4e\x5a\x87\xb7\x3a\x60\x36\xc7\xd5\x00\x10\x1a\x10\x1a\x10\x1a\x10\xba\x73\x20\x34\x06\x87\x3e\x83\xc3\xf6\xa1\xf4\x70\x94\x69\x89\xa3\x0c\x92\x21\x48\x86\x20\x19\x82\x64\x08\x92\x21\x1d\x9d\x0c\x81\xb1\x18\x8c\xc5\x60\x2c\xd6\x2c\x63\x31\xe4\x1a\x91\x6b\xec\xd4\x5c\x63\x2a\x1b\xb0\xa7\x9e\x5f\xa2\xae\x3e\x1a\xbd\xc1\xac\x9b\x0b\xab\xbe\x1e\x73\xa7\xd1\x77\xb3\xbb\x44\xd8\xb0\x43\x3a\x6d\x47\xa7\xf4\xdf\x1a\xa0\x71\xb1\x3e\x60\x99\x5b\x32\x59\xde\x4c\x5e\x35\x32\x55\xa5\x70\x5d\x59\xb6\x0c\xd5\xdf\x3a\xc0\xbe\xdc\x43\xbb\xf8\xc1\x4b\xeb\x89\xf0\xcb\x5d\x46\x0f\x74\x58\x35\x15\xcc\x11\x8e\xb9\x18\x60\x52\x55\x0a\x29\x65\x39\x10\xb3\xa6\x41\x7b\x36\xc3\x67\x6c\xc6\xd8\x57\x9f\x10\xd9\xd3\xb4\xbe\x32\x00\xe1\x68\xfb\xff\x67\xef\xed\xc3\x1c\xb9\xea\x3b\xdf\xa7\xd5\x6d\xcf\xf8\x30\xc6\xe3\x33\x36\xc6\xf2\xd8\x2e\x6b\x3c\xd3\xdd\x9a\x6e\xf5\xa8\x3d\xaf\x3d\xaf\x52\xbf\xcc\x8c\xdc\x9e\x69\x77\x8f\x7b\xc0\xb1\x3d\x54\x4b\xd5\xea\x9a\x51\xab\xe4\x2a\xa9\xc7\xc3\x8d\xef\x4d\x20\x24\xce\xdd\xc0\xf2\x84\x0b\x9b\x0d\xe1\x25\x37\x40\x20\x61\x43\x20\xd9\xe5\xee\x92\x9b\x64\xef\x2e\x60\x02\x71\x08\x09\x90\x84\x04\x42\x96\xbc\x2c\x79\xf2\x9e\x6c\x80\xcd\xc2\x7d\xce\x4b\xbd\x49\x2a\x95\x5a\x23\xa9\xd5\xee\xef\x3f\x30\x6e\x55\x9d\x3a\x75\xce\xa9\xdf\xf9\x9d\xcf\xef\x2d\x11\xbf\x9f\x3f\x2e\xcd\xfe\x67\xd1\x5b\x00\x45\x74\xb1\xc7\xc3\x0c\x36\x24\xb7\x53\x70\xd2\xb2\xeb\x22\x69\xd9\x6c\xf8\xb7\x39\x4c\x07\xe5\xc7\xc6\x57\x8e\x5d\xcf\x40\x0c\x3a\x92\x3a\x21\x92\x02\x49\x9d\x60\xc4\x82\x11\x0b\x46\xac\xad\x6a\xc4\x42\x52\x27\x24\x75\x82\xf1\x00\xc6\x03\x18\x0f\x60\x3c\xe8\x09\xe3\x41\xe6\x20\x19\xa7\x07\x62\x09\x07\x6e\xec\xf2\xd5\x91\x13\x27\xb7\x97\x43\xf1\x38\x24\x9b\x02\xc6\x45\xb2\xa9\xcd\x13\x32\x42\x3f\x3e\x4c\xe6\x05\xc2\x34\x97\xd4\x6c\x22\x20\xe3\x94\x5a\x28\xad\xa8\x21\x70\xd3\x34\x0a\xda\x92\x5e\xcc\xe9\xc5\xbc\x45\xff\x78\x88\xfe\xfd\x00\x89\xb2\x36\x53\x55\xd9\xa8\x44\x5b\xd1\xeb\x4d\x26\xa8\x37\x0a\x5a\x5a\xb4\xda\xa6\xf4\xf4\x47\xf8\x0d\xf3\xd5\x3d\x5b\x94\x1d\x73\x29\xa6\xe7\xd1\xb3\xba\x55\x06\xcd\xac\xa5\x99\xeb\xca\x0b\x15\xb8\xc0\xec\xdc\xf4\xee\x78\x7b\x21\xa6\x98\x16\xd2\x54\x56\x7c\xf0\x4e\xf0\x4e\xf0\x4e\xf0\x4e\xf0\x4e\xf0\x4e\xf0\x4e\xf0\x4e\xf0\x4e\xf0\x4e\xf0\x4e\xf0\x4e\xf0\xce\x2e\xf3\x4e\x90\x4b\x90\x4b\x90\x4b\x90\xcb\x0e\x92\xcb\x37\xc5\xc9\xe3\xe1\xe4\x72\x49\x2b\x37\x03\x2e\x1d\x97\xcc\x8f\x0c\xd3\xb7\xdc\x42\xee\xad\x07\x2e\x79\x53\xd1\x9f\x6f\xc6\x47\x73\xde\x60\xdb\x75\x0f\x38\x68\xee\x0f\x82\x9d\xfc\x65\xfc\xac\x13\x80\xb3\x16\x70\x2e\x85\x03\xce\xd3\xf4\xe4\x3a\x00\xa7\x97\x6c\xf2\x39\x20\xa1\x2e\xa1\x80\x9a\x80\x9a\x80\x9a\x80\x9a\x80\x9a\x80\x9a\x80\x9a\x80\x9a\x80\x9a\x80\x9a\x80\x9a\x80\x9a\x80\x9a\x5d\x86\x9a\x49\x32\x46\x47\x63\xfb\x1d\xa8\xb9\xd3\xeb\xc4\xc9\x0e\x77\xf0\xe0\x04\x07\x05\x07\x05\x07\xed\x2a\x07\xfd\xd5\x61\x72\x98\x4d\x5d\x78\xf4\x39\x3f\x78\xae\xaa\x25\x07\x76\xbe\x71\x98\xfe\xd1\x00\xd9\x96\x35\x4c\xed\xca\x5a\x32\xfa\x8b\x4d\x85\x9f\xf3\x56\x1e\x53\x4b\x3d\xc1\x37\x1f\xe0\x8f\x9b\x34\x4c\xcd\x17\x7f\x6e\xf7\x11\x48\xb3\x16\x69\x3e\x1a\x8e\x34\x87\xe8\x3e\x89\x34\x63\x31\x3b\xba\xdc\x1e\x52\x5f\x7c\x39\xd8\x25\xd8\x25\xd8\x25\xd8\x25\xd8\x25\xd8\x25\xd8\x25\xd8\x25\xd8\x25\xd8\x25\xd8\x25\xd8\x25\xd8\x65\xaf\xb1\xcb\xc3\xe4\x20\x1d\x8f\x1d\x70\x40\xe4\xdd\xbe\x00\x74\xfb\x70\x07\x80\x09\x80\x09\x80\x09\x80\xd9\x55\x80\xf9\x8f\xc3\x64\x4e\x38\x72\xaa\x39\xa6\x64\xeb\x46\xd1\xd4\xf2\x3a\xfb\x2e\xfd\xbe\x9c\x12\x6f\xae\x56\xca\x2a\xd3\xa0\xae\x6b\x4b\x2b\x86\x71\xcd\x77\x26\x75\xd0\xe6\x7b\x86\xe9\x8b\xb7\x90\x57\xd7\x6d\xf1\xca\x5a\x32\xfa\x5f\x9a\x61\x9d\x8f\xc9\x27\x5d\x16\x4f\x9a\xf4\x3e\xa9\x27\xf0\xe7\x51\xfe\xb8\x54\xbd\x97\x5c\x4c\x36\xea\x3d\xc0\x68\x2d\x18\x7d\x2e\x1c\x8c\x3e\x41\x17\xec\x34\xb7\x0d\x96\xaa\x44\xa6\x8d\xc6\x1f\x14\x15\x14\x15\x14\x15\x14\x15\x14\x15\x14\x15\x14\x15\x14\x15\x14\x15\x14\x15\x14\x15\x14\x15\x14\xb5\xa7\x29\xea\x79\x72\x96\x4e\xc7\x26\x1d\x1a\x3a\xe4\xa5\xa8\x8d\xce\x7b\xb5\x60\x15\xd8\x13\xd8\x13\xd8\x73\x0b\x63\xcf\x0f\x0e\x93\x8c\xc4\x9e\x6e\xc9\xa4\x50\x27\xce\x15\xa7\x1c\x53\xc9\xc8\xa9\x4e\x39\x26\x8b\xfe\xfe\x10\xfd\xcb\x01\xf2\x4a\x5f\x6d\xff\x64\xf4\x8d\x7d\xcd\xa5\xd9\x0c\xa8\xf2\xd4\xd6\x94\x9b\x29\xb7\x6b\x5e\x67\xcd\x80\x47\x6f\x8e\x94\x9b\x41\x4c\xb1\xfd\xf8\xd2\xa6\x94\xcd\xa4\xc1\x5c\x5f\xd8\xba\xb7\x62\x57\xb3\x35\xbf\x50\x5a\x08\x4c\x12\x4c\x12\x4c\x12\x4c\x12\x4c\x12\x4c\x12\x4c\x12\x4c\x12\x4c\x12\x4c\x12\x4c\x12\x4c\x12\xa9\x36\x81\x2a\x81\x2a\x81\x2a\x5f\x4e\xa8\xf2\x97\x07\x49\x5c\xa0\xca\xa2\x56\xbe\x6e\x98\xd7\x98\x3e\xe8\xba\x65\xca\x3f\x96\x8c\x82\x9e\xd5\x35\x8b\xbe\x69\x90\x7e\xbb\x9f\xdc\xee\x5e\x7b\x65\x2d\x19\xdd\x2f\x14\x50\x53\x6e\x9d\xb6\x6c\xb5\x5d\x2d\x2f\x88\x8b\xe7\x58\x1b\x37\xe2\xa3\xec\xe2\x0b\xce\xfd\x8b\x49\xdf\xcf\x33\x86\x99\x2a\x14\x1c\x82\x68\xf5\x3a\x26\x5c\x26\x8f\x0a\x1a\x38\x45\xd2\x9c\x06\x9e\x20\x13\xe4\x68\x10\x0d\x4c\x78\xc6\x78\x2d\x99\xf0\xbd\xf9\xac\x6e\x85\xfb\x31\x3e\x50\x9f\x10\x6e\xa3\xb7\x08\x38\xf8\x4c\x38\x1c\x3c\x4e\x8f\x49\x38\x58\x33\xe1\x12\x11\xfa\xba\x05\x30\x08\x30\x08\x30\x08\x30\x08\x30\x08\x30\x08\x30\x08\x30\x08\x30\x08\x30\x08\x30\x08\x30\x08\x30\xb8\x91\x60\x10\xd8\x0e\xd8\x0e\xd8\x6e\x0b\x63\xbb\x1f\x8d\x92\xe3\x76\x66\xc8\xa0\xda\x37\xb2\x99\x67\x2b\x46\x59\xb5\x83\xa7\xc7\xac\xb2\x5a\xae\x58\xf4\x33\xf7\xd2\x1f\xec\x77\xd3\x43\xc6\x4d\x4d\xcd\x29\xe2\x37\x7b\x88\xdd\xfd\xd6\x3e\xe0\x3d\xce\x5a\x8a\x0f\xb2\x6b\xab\xd3\x32\xfa\x2e\x59\xe0\xed\xb4\x0d\xdd\x09\xd2\xf6\x14\x49\x09\xd2\x36\x41\x8e\x72\xd2\x36\x4e\x0e\x90\x44\x20\x69\x63\x6f\x96\x58\x4b\x26\x7c\x1d\x0b\xe5\x6b\x17\xc3\xf9\xd9\x08\x8d\x57\x27\x50\xf4\x3f\xc3\x17\xfe\x7b\x7f\x7d\x60\x77\x2b\x1d\xc8\x6b\x65\x12\xfd\xfc\x76\x77\x0e\x46\x4d\xad\x54\x50\xb3\x5a\x93\xd3\x10\x97\x97\x77\x7d\x26\xd2\x53\x24\x4d\xce\xd0\x81\x25\x23\x77\x23\xca\xff\x57\xe9\x8b\xaf\x7b\x2a\xd2\xef\x8e\x90\x77\x46\xe8\x4f\x44\xa2\x6f\x77\x64\xee\xb7\xfa\x2e\xb3\xcd\x4b\xee\x9a\x23\xdc\xb3\x35\xcb\xce\xc6\x42\x48\xfa\x4e\x6a\x5e\x7a\xb7\xa4\x29\x25\x36\xe8\x4c\x3d\x4e\x28\xa9\xa2\xa2\x17\x05\x23\x31\x4c\xa5\x52\x74\x30\x4b\x4e\xc9\x99\x37\xe6\x2b\x45\x25\xa7\x9b\x1a\x93\x0c\x9a\x73\x76\x67\x5b\x30\xd7\x71\x24\xbc\xb0\x8f\x2a\xf2\xb8\xa8\x2c\x57\x4c\xae\x0e\x97\x4c\x23\xab\x59\x5c\x19\x91\xd3\x23\x77\xb9\x84\xb2\xc8\x9f\xc8\x8f\x19\x5c\x7b\x98\x50\x46\x95\x54\xa1\x30\xc1\x55\x8d\x9c\x79\x43\x31\x2b\x45\x36\xb5\x4c\x94\xd8\xfa\x95\x6c\x4e\xcb\xc5\x6e\x15\x5d\xf3\xc8\xcd\xf4\x3b\x22\xe4\x6d\x11\xfa\xd6\x48\xf4\xcd\xce\x00\x7d\xb3\x8f\x6b\xa7\x8f\xa9\x45\x35\xaf\x99\xe2\x9c\x25\x6c\x81\x96\x65\x64\x75\xae\x3a\x38\x27\x1a\x95\x1f\x09\x0d\x53\x61\x9a\x65\xf9\x86\xa3\x4b\xad\xaa\xd7\x58\xff\xcb\x2b\x9a\xa5\xd9\xc2\x8d\x09\x5c\x9b\x35\x71\xdc\xb2\xa4\x29\x5c\xac\xf2\xd3\x8b\x61\x2a\xc9\xf1\xa3\xec\x5a\x53\xcd\x72\x28\xc6\x0e\xfe\x42\x94\xf1\x13\x06\x53\x06\x55\xbd\x28\x34\x0c\xae\xc1\xbb\xd7\x72\x50\x20\x91\x1d\x3b\x77\xda\xdb\x53\xde\x28\xa8\xc5\x7c\xc2\x30\xf3\x63\xa5\x6b\xf9\xb1\x4a\x51\xcf\x1a\x39\x6d\x6c\xcf\x79\x6b\x8e\xb5\x92\x88\xed\xf0\xbe\xab\x77\x43\x79\x5f\x5f\x3b\x44\xc1\x0c\x6b\x22\x49\x4f\x93\x93\x64\xdb\xa4\xd0\x97\x3b\x22\x52\x82\x25\x40\xa9\x52\x26\x6d\x97\x38\xe9\x1f\xd8\xe1\x8a\x94\xc3\x25\xd5\x64\x07\x5a\x76\x08\xe4\xdb\x4f\x93\xb2\x65\xa8\x54\x2f\xf5\x6e\x47\x25\xcb\x7d\xd5\x0d\x8d\xf2\x3e\xec\x67\xff\x9c\xd8\xed\xfd\x71\x55\x33\xf3\x9a\xf7\xd7\x7d\xde\x5f\x79\xbe\x06\x2d\xaf\x67\x47\x6b\xae\xf3\xb5\xc2\xfe\x7d\x43\xfe\xca\x7a\x99\xbe\x40\x66\x49\xa6\x4a\xaa\x35\x30\xe5\x34\x70\xec\x9e\xe3\xe8\x1c\xf2\x2d\x44\xbe\x7d\xa4\x9f\x7c\xb8\x9f\x7e\xa8\x3f\xfa\x01\xc7\x96\xf4\xc6\xfe\xad\x23\xdf\xaa\x68\x03\x1b\x67\x4e\xcf\x39\x11\x63\x8b\xd3\xb5\xa1\x0d\x05\x2c\xdc\x61\x8e\x91\x85\xb1\x45\x2d\xf0\x3b\x8b\x46\x71\x54\xdc\xcd\xaf\xe0\xc6\x36\x4b\x19\xca\x58\x46\x71\x4e\x18\x93\x1e\x63\x9f\x85\xfc\xf7\x82\xfd\xb1\xb8\x7f\x1c\x0e\x16\xbc\xe9\x97\xfa\xc8\x67\xfb\xe8\x8b\x7d\xd1\x4f\x3a\x8a\xf2\x07\xfb\x66\x0c\x76\xee\xd3\x2d\x25\x6f\xf0\x61\x37\x94\xd8\x32\xfb\x53\x4c\x49\xf9\xde\x82\x1f\x81\x56\x35\xb5\xc8\x4e\xf3\x2e\x36\x1f\x55\xb3\xfc\xc5\xb9\x31\xa2\xa0\x67\x05\x30\xe7\x7c\x54\x31\xae\xcb\x31\x15\xb0\xbe\xa4\x19\xa5\x82\x96\x50\xc4\x13\xb9\xf5\xcf\x9e\x4b\x7e\x14\xa9\x3b\x00\xce\xe3\x63\xb7\xf0\x6e\xf9\x2c\x59\x5d\xd1\x29\x83\x33\xc0\xf0\x1e\xb6\x7f\x0b\xc8\x4c\x90\xa3\xf4\x70\xec\xa0\xe3\x36\x74\xaf\xaf\x98\x85\xf7\xbe\x97\x43\x52\x38\xfa\x67\x43\x44\xb1\xcf\x42\xb6\x9c\x2c\x96\xd7\x8c\x42\x65\xd5\x2d\xfe\xf9\x9f\x87\xe8\x3f\x44\xdc\x9d\x71\x0f\x3f\xf0\xf8\xf7\xc0\x39\xe7\xde\x45\x7e\x6f\x3c\xea\x9e\x74\xaa\x7f\x6b\xf3\xe1\xe6\x0a\x99\x12\x0b\xf1\x24\x39\xce\x17\xe2\x21\xf2\x08\x49\x86\x2e\xc4\xea\x5e\xdd\x84\x32\xc2\x8e\x23\x57\xe7\xc3\x57\xe2\x18\x1d\xad\x5e\x89\x35\xbd\xf0\x2e\xc6\xe8\x8b\x9e\x23\xce\x3e\xfb\x88\x13\x32\xf0\xf7\xfb\xce\x36\x9d\x1d\xfb\xf4\x59\x32\x4d\x26\xab\x36\xfe\x56\x06\x1f\x3b\x3e\x4e\x34\x2d\x9e\x68\x7e\xae\xaf\x4d\xdf\xff\x79\x71\xa8\x49\x93\x33\xee\xa1\xa6\xeb\xa2\x84\x9f\x6b\x3a\x20\x4a\xe2\xdf\xba\xc3\x15\x25\xf7\x0a\x6b\x86\xa2\xd6\x4a\x8f\xdd\xe2\xa7\xae\x08\x8f\x4b\x64\x9e\xcc\x79\x85\x47\x3c\x4d\xce\xb4\x70\x66\x98\xe2\x5d\xbe\xc8\x55\x39\x0b\x92\x24\x4c\x92\x7c\x23\x42\xbe\x1e\xa1\x5f\x8d\x44\xbf\xe2\x0c\xd0\x47\x23\x97\xbc\x9c\x58\x2f\x2a\x96\x60\xbd\xca\x92\xb6\x2c\x7c\xc6\x1c\x03\x8d\xeb\x98\x24\x6d\x62\xbc\x8b\x1e\x49\xc1\xb4\xc8\xa2\x96\x57\xf9\x40\x48\x54\xec\x95\x28\xc2\x54\xeb\x4c\x81\x5c\x8b\xfa\xea\xaa\x96\x63\x32\xab\x70\xc3\x75\xe6\x72\x1d\x78\xf4\xc2\x88\x24\xc8\x9c\xa1\x2b\x79\x93\x6d\x85\x25\xcd\xd4\x8d\x9c\x43\xc2\xdd\x5d\x91\xfb\xc9\xd9\xa3\x51\xb1\x58\x27\xbd\xf4\x5d\x65\x77\xda\x2f\x24\x1f\xb2\x2c\x8c\x96\x76\x13\x09\xd1\x4f\xa1\x74\xd7\xe9\x63\x8c\xf2\x2e\xcc\xf1\x1e\xd4\x21\xe3\xe9\xdf\x8e\x90\x97\x22\xf4\xb3\x91\xe8\x8b\xce\x30\xbf\x37\x32\xe5\x09\x1b\x2f\x15\x34\xd5\xd2\x1c\x0b\xf3\x9c\x69\x94\xd4\x3c\x9f\x00\xe1\x3d\xe8\x73\x32\xb3\xdf\xc5\x8d\x3b\x67\xb3\x94\x4c\x1c\x49\x28\x0b\x62\x42\xc4\xe8\x94\xb4\x62\x4e\x2b\x96\x5d\x67\x05\x4d\x31\xcc\xd2\x8a\x5a\xb4\x9d\xde\xcc\x8a\x36\xb6\xac\x16\x6c\xe7\x9e\x98\xf8\x35\xa6\x2c\xeb\x45\xb5\xa0\xbf\xde\x3e\x5c\x2c\x69\x8a\x9a\xe3\x26\x16\x63\x4c\x10\xf7\x9c\xeb\x39\x22\x1a\x1f\xb4\xdc\x9b\x84\x3b\x4d\x42\x99\xd6\xf9\x72\xf6\x74\xdc\x30\x6b\xdf\xcc\x35\x6b\x95\x85\x37\x0f\xff\xd8\x8c\xf2\x4a\x22\xb6\x53\xf4\x67\xca\x7e\x11\x9f\xf7\x5c\xfa\x85\x01\xf2\xa6\x01\xfa\x86\x81\xe8\xf7\x9c\x63\xef\x97\xfb\x2f\x4b\x73\x3b\xfb\xa4\x56\x8c\xeb\x4a\x5e\x35\x97\xd4\x3c\x3b\x14\x15\x0a\x1a\x17\xac\xee\x77\xa1\x99\xcb\x86\xb9\xca\xc6\xa2\x6e\x4f\x2f\x56\x3d\x3c\xb8\xa3\x7c\x3d\xdb\x8b\xb1\x24\xde\x4a\x67\x0b\x25\xab\xe7\x5c\xbf\x19\xee\x82\x21\x0e\x65\xf6\xe8\xb2\xb3\x96\x74\x50\xb0\x9d\x2c\x12\x9e\x61\xb4\xcd\xf3\x8e\x2d\xc9\x71\x9c\xf4\x3f\x2c\xa1\xa4\xb2\x59\xad\x24\xb6\x57\xaf\x70\x18\x14\xef\x30\xa8\x8c\xca\x89\xf7\x2f\x0c\xeb\xb8\x32\x98\x56\xb3\xd7\xd8\xe6\x51\xcc\xb1\xab\xb8\xc7\x22\xbf\xa8\x6a\xe0\x84\x4f\x8c\x5c\xfa\xfe\x46\xec\x37\x58\x72\x5a\x3a\xae\x0c\xce\x18\xa6\xe6\x69\x56\xc9\xaa\x56\x56\xcd\xb1\xb7\x97\xe3\x23\x7c\x54\x79\x7b\x96\x90\x5e\x35\x0d\x2e\x3b\x6d\x24\x62\x77\x96\xaa\xd7\x8d\x77\xdb\xff\xf9\x76\x6d\xfb\x19\xd6\xca\x38\x9d\x24\x29\xb2\x5d\x8c\x69\xe7\xf6\x7d\xa5\xfe\xbe\x7f\x1b\xdd\x26\x86\xa5\x23\x5b\x7f\xfa\xef\x5f\xe1\x6e\xfd\x63\x35\x54\x33\xe4\x38\x71\x9f\x07\x67\x76\x4e\x1f\x00\xc1\xdc\x6a\x5a\x08\x08\x26\x08\xe6\x06\x13\xcc\x6e\x81\xa3\x50\x88\xd9\x01\xa1\x9f\x39\x49\x8e\xd3\x63\xb1\x23\x0e\x8b\xdc\xed\xe5\x98\xd5\xb7\x76\x3e\x0d\x1b\xfd\xc8\xfd\x4e\x5a\xa7\x92\xae\x3d\x57\xd6\x8a\xdc\x45\xc6\x0d\x97\x5a\xd2\xca\x6a\x72\x2c\x5b\xb1\xca\xc6\xaa\xad\xfd\x78\x67\xc2\xef\x83\xf1\xc7\xbb\xe9\x1b\x06\xc8\xdd\xbe\xb6\xae\xc8\x46\xa2\x87\x1a\x7a\x64\x4c\xf2\x47\xd8\x28\x77\xca\x79\x44\xfc\x30\xbb\x2d\xe5\x6d\x71\x51\x34\x18\x74\x47\x47\x7c\x35\x7e\xbc\x8f\x5c\x17\xcb\xb2\x44\x8a\x7c\x59\xae\x90\x65\x92\x0b\x5a\x96\x6e\x67\x47\x9d\xf0\x14\x77\x53\xf2\x8f\xb5\x1c\x9f\x44\xd0\xfb\xdc\x2c\x02\x7d\x36\x7c\x1d\x5f\xa0\xb3\x9e\x65\xca\xbb\x43\xec\x7c\x4b\x75\xd6\x85\x5d\x65\x33\xa8\xc3\xd1\x5f\x21\x41\x8b\xe0\x68\x98\x4b\x48\xe0\x3a\x38\x26\xef\xdc\xe8\xa5\x90\x7e\x3d\x79\x8e\xac\x55\x29\x25\x5d\x5a\x0a\x50\x60\x00\x64\x5b\x04\xb2\x6f\x8d\x04\xa7\x7f\xdb\x30\xc9\xf6\xfd\x02\xee\x56\x88\xe5\xc2\xdd\xae\x3d\xbd\x49\xec\xdb\x9c\xf8\xbc\x09\x69\x59\x23\x79\xd3\x3f\x78\x7b\x90\xf8\x4c\x35\xed\xfe\x12\x28\x47\x8f\x70\xf5\x66\x23\xa5\x28\x8e\x95\x5b\x4d\x2a\xe3\x58\x89\x63\xe5\x06\x1f\x2b\x7b\x59\x81\xef\xfe\x16\x13\x7a\xfa\xcd\x4c\x93\x49\x9a\x8a\x9d\x76\x4e\xaa\x0f\xfb\x4a\x30\x06\x3c\xa8\x0b\x27\xd6\x4f\xc7\xc9\x11\x71\x62\xb5\xb2\x2b\x5a\xae\x52\xf0\x65\xf7\x50\x0b\xa5\x15\x35\x39\x56\x32\x75\xc3\xd4\xcb\x37\xb2\x05\xd5\xb2\x5c\x8f\x99\x7f\x15\xa7\xef\xed\x27\xbb\xdc\x1b\xaf\xd8\x77\x44\x95\x7a\xde\x33\xb2\x95\x49\xd6\x4a\x9c\xfb\xd7\x2c\x38\xb7\x2e\xca\x3b\x7d\x17\xb5\xf9\xd0\xb9\x42\x1e\x13\x4b\x76\x86\x4c\xf1\x25\x7b\x8a\x9c\x20\x13\x81\x28\xc4\x33\x20\xf6\x7b\x25\x7c\xdd\x0b\x5d\x88\xb9\xf0\x85\x98\xa2\xa7\x25\xe8\xf0\xb5\xec\x59\x61\xe2\xc9\xf6\xf9\xb1\x66\x96\x42\x23\x08\x7e\xe4\xb6\xfa\x53\xb4\x27\xc0\xd5\xc6\x37\x4b\xb6\x3f\x4e\x57\x27\x2a\x3d\x47\x2e\x90\xd9\x2a\x85\xe2\xa6\x66\x0a\x2a\x05\x0e\x7a\x2d\x1e\xf4\x7e\xa5\xaf\xdd\x52\x63\x5e\x9c\xd2\x1e\x25\xe7\xdd\x53\x5a\xa7\x25\x51\xc8\xa1\xac\x39\x41\x15\x28\x82\x9a\x93\x60\xf1\x0f\xef\xac\x2f\x89\x5e\xe5\x7a\xea\xf8\x84\xcf\x5e\xf1\xf7\xee\xca\x1e\xf8\xeb\xc0\x5f\x07\xfe\x3a\xf0\xd7\x81\xbf\x0e\xfc\x75\xd6\xed\xaf\xf3\x89\x3e\xb1\xbb\x8f\xf3\xdd\xdd\xf5\xb4\x39\x49\x8e\x93\x63\x2d\x6c\x22\x02\x15\x06\x93\xe6\x59\xa1\x99\x4c\x93\x49\xae\x99\xdc\xdc\x63\xd6\x77\x6a\xb9\x49\x65\x20\xdc\x4b\x28\xfd\x9e\x1d\xf5\xd5\x85\x91\x30\xef\x1e\x9f\x12\xf1\x30\x3f\x80\x77\x4d\x87\x00\x8c\xdd\x6a\x9a\x0b\x60\x2c\x60\xec\x06\xc3\xd8\x1e\x05\x5b\x37\xbb\x45\x84\x42\xd5\x86\x61\x8c\xbe\xe6\xbb\x40\x52\xdf\xb5\xdb\xf6\xfd\xc9\x6a\xa6\x4c\xdb\xa2\xd5\xba\xfe\x78\x7e\xd3\xf3\x45\xbd\x98\xb7\x67\xb6\xca\xf7\xe7\xa5\xfb\xe8\x37\xfa\xc9\x5d\xde\xeb\x1d\xb3\xe5\xe1\xc6\xae\x3f\xee\x2d\x0b\xe2\x11\xf3\xe2\x11\xc2\xf7\xc7\xf3\xb3\x63\xa9\x0c\xba\xa3\x23\xbe\x3f\x15\xf2\xa4\x58\xad\x0b\xe4\x71\xbe\x5a\x99\xae\x74\x36\xd8\x23\xcd\x3b\x9a\x8e\x6d\x20\xa8\xc7\xdd\xf1\xee\x91\x2b\xbb\xce\x44\xdb\xa6\x83\xc0\xfe\xd5\xd8\x0e\xa2\x7f\x7a\x5b\xc0\x34\x1f\x0b\x75\xee\x09\x9c\x69\xfb\xd6\x8d\x9e\xec\xf4\xd3\xe4\xfb\xc8\x6b\xab\xd4\x91\xf6\xcd\x36\xb4\x13\x70\xdd\x16\xb9\xee\x97\xfa\x3a\x2a\x86\xae\x08\xc8\xfb\x1a\xb2\xe8\x42\xde\x1e\x91\x73\xeb\x77\xc3\x69\x8b\x9c\x4b\xff\xb7\x1d\x01\x72\x2e\xdd\xbc\x17\x4e\xa0\xc0\x13\x6e\x38\x1b\x29\xee\x70\xf2\xdb\x6a\xb2\x15\x27\x3f\x9c\xfc\x36\xf8\xe4\xb7\xb1\xba\x74\x68\xcc\x47\x73\xbb\xcc\xba\xb7\x92\x06\xdb\x52\x66\x86\x4c\xd1\x74\xec\x8c\x73\x26\xdc\xeb\x73\xb4\x09\x7a\x46\x17\xce\x87\x6f\x8d\x93\xc7\xc5\xf9\x30\xa7\x5b\x59\x63\x8d\x49\xde\xaa\xc3\x61\xc3\xe2\xdf\x5a\x31\x57\x32\xf4\x62\xd9\x2a\xe8\x59\xd7\x07\xe7\x3f\x0d\xd3\xb7\xde\x42\xee\x74\x9a\x74\x36\xd5\x5f\x96\xc5\xbf\xbd\x15\xbf\x8b\xb6\x75\xc9\x2e\xbc\x33\x2d\xdb\x5c\x60\x6d\xb6\xa5\xde\xf7\x88\x9b\x71\x9c\x9b\xb4\x64\x7e\x6a\xbd\xac\xad\xba\x82\x6f\xd0\x97\xbd\xde\xd3\x76\x22\x3e\xc2\x1f\x37\x65\xbf\x8e\xdc\xc4\xdd\x14\x73\xbe\x1e\xf7\x7a\xed\x9f\x8d\x28\x11\x1e\xfc\x4d\x5e\x17\xdf\xe4\xba\xca\x83\x57\x2f\x55\xa9\xf6\xf9\x66\xa1\xf6\xfb\x44\x15\x20\x54\x01\x42\x15\x20\x54\x01\x42\x15\x20\x54\x01\x42\x15\x20\x54\x01\x42\x15\x20\x54\x01\x42\x15\x20\x54\x01\x42\x15\xa0\x2e\x57\x01\x6a\x68\x20\xf7\x1d\xe2\x5e\x0e\x79\x7e\x51\xa3\x08\x35\x8a\x50\xa3\x68\x13\xd5\x28\xfa\x7c\x5c\xd4\x28\xb2\xc6\xcc\x25\x35\x9b\xb0\xf1\x18\x6f\xaa\xc6\x71\xa6\x50\xb1\xca\xec\x54\x55\x70\xe1\xe7\x5b\xe3\xf4\x7d\xfd\xe4\x5e\x76\x73\xca\x7b\xaf\x03\x41\x1f\xa8\x13\x86\x38\x29\x1a\x9a\x37\x0a\x9a\xa8\x54\x34\x5f\x7d\xbb\x6d\x39\x74\x2f\xdc\xd8\x64\xde\x7c\x70\x1c\x5a\xef\xf6\x2a\x94\xcf\xeb\xe1\xa8\x6f\x86\x4e\x49\xd4\x17\x38\x05\xb6\xa9\xd7\xf3\xe0\xda\x00\xd8\x90\x20\xc4\x6f\x6f\x6f\x34\x4d\x0f\xd5\x0f\x45\xf4\xce\x94\x5d\xcc\xa8\xeb\x93\xb5\xee\xec\xdf\x41\xb3\x05\x7b\x2a\x7c\x55\xba\x94\xfd\x3b\x50\x60\xac\x3f\xfb\x77\x87\x65\x4f\x13\xa2\x25\x54\x3c\x85\xb8\xba\xc4\xff\xe3\xce\x46\xb2\xe7\x2e\x27\xf8\xd0\x2b\x6e\x86\xc5\x5f\xbb\x2f\x6d\x10\x7e\x88\xf0\x43\x84\x1f\x22\xfc\x10\xe1\x87\x08\x3f\x6c\x25\xfc\xb0\xad\x11\x81\x5d\x0d\x66\x6c\x3e\x7d\x78\xf7\x8e\x35\xe9\x9f\xd9\xd1\x48\x77\x88\x87\x44\x22\x7a\x35\x0a\x51\x31\xb1\xab\x0a\x05\x3c\x52\xb7\x9a\x1a\x03\x8f\x54\x78\xa4\x6e\xae\x7c\xe3\x9b\x81\x6d\x85\xc6\x21\x1e\x25\x87\xe9\xc1\xd8\xb8\x63\x2a\xb9\xc7\xe7\x73\xea\xb6\xdd\x8d\x0c\xe4\x83\x64\x58\x20\xd5\xa2\x56\xbe\x6e\x98\xd7\x7c\xf9\xdc\x04\x4a\xe5\x41\x87\x96\xa5\x59\xf4\x07\x07\xe9\x3f\xf5\x13\xea\x5e\xea\x6c\x6d\x7b\x85\x4f\x80\x29\xad\x99\xb6\xea\x6c\x3b\x8e\x9e\x17\x4d\xc4\x47\xd8\x65\x17\x9c\xdb\xe5\x6e\x26\x7f\x9d\x31\xcc\x54\xa1\xe0\xf8\x6e\xb6\x2f\xd6\xa2\x43\xee\x9a\xb2\x4c\xca\x01\x5e\x26\x85\x2d\xdd\xe3\xe4\x18\x39\x12\xb8\x74\x3d\x03\x6c\x2f\x60\xf9\xe2\xb3\x7a\x13\xce\xd3\x0f\xd4\x5f\x55\xdb\xe8\x2d\x6c\x4c\xc9\xd5\xa7\xc3\x17\xf8\x04\x3d\x1a\x84\x4b\x6a\x66\x5f\xae\x74\xd9\x43\xb8\x68\xc2\x45\x13\x2e\x9a\x70\xd1\x84\x8b\x26\x5c\x34\xe1\xa2\x09\x17\x4d\xb8\x68\xc2\x45\x13\x2e\x9a\x70\xd1\x84\x8b\x66\xb7\x5d\x34\xe1\x04\x09\x27\x48\x38\x41\x6e\x61\x27\xc8\x1f\x1e\x26\x33\x61\xc4\xae\x61\x60\xb8\x8b\xf3\x3e\x31\x44\x7f\x73\xa0\x2e\xce\xb3\xe4\x8e\x57\xcc\xe9\x6b\x7a\xae\xa2\x16\x7c\x71\xe1\x8e\x76\x29\xe9\x50\x5b\x22\xc1\x13\xf1\xfd\xfc\x86\x1a\x3a\xe8\x06\x73\x7b\x70\x59\xaf\xb3\xc1\x8d\x08\xe5\xde\x53\x9f\x10\xee\xa0\x84\x77\x6c\x3d\x98\xb0\x49\x2a\x88\x48\x6e\x60\x42\x60\x42\x60\x42\x60\x42\x60\x42\x60\x42\x60\x42\x60\x42\x60\x42\x60\x42\x60\x42\x60\xc2\x8d\xc6\x84\x88\xc6\x06\x88\x04\x88\x04\x88\xec\x20\x88\xfc\xc2\x15\x32\x25\x40\xa4\x5a\x29\x1b\x56\x56\x2d\xe8\xc5\xfc\xd8\x5a\x32\x88\x3b\x72\xfe\x65\x14\xcb\x6a\xa1\x64\xe4\xec\x5b\x34\xd3\xa2\x3f\x7a\x85\x7e\x7e\x1f\x79\xa5\xa7\x95\x2b\x6b\xc9\xe8\xa1\xc6\x1e\x85\xe7\x9c\xd6\xe6\x8c\x5c\xca\x69\x2d\x3e\xce\x6e\x4b\xb9\x4d\x2d\x7a\xf8\x61\xc0\x3d\x3d\xce\x12\xd3\x60\x6a\x60\x6a\x69\x30\x35\x30\x35\x30\x35\x30\xb5\x2d\xc3\xd4\xd2\x3d\xc3\xd4\xda\xde\x93\x96\x99\x5a\x1a\x4c\x0d\x4c\x0d\x4c\x0d\x4c\x0d\x4c\xad\xfb\x4c\x2d\xbd\xa5\x01\x55\x1a\x80\xaa\x73\x80\x2a\xdd\xeb\x80\x2a\xbd\x09\x01\x55\xe6\x59\xb2\x28\x5c\xad\x2e\x92\xc7\xb8\xab\x15\x4f\xcd\x16\x18\x9f\xe9\xe1\x4f\x89\xb5\x64\x22\x00\x16\x35\x15\xab\xb9\xae\x9a\x19\x9e\xe7\x4a\xf7\xaa\x80\x47\x7b\xdd\xad\x48\x58\x3c\x68\xec\x9f\x6e\xab\x41\x6a\x72\x8b\x52\xd4\x40\x7a\x76\x50\x5c\xb1\x41\xfc\x4c\xe0\xae\x27\xc8\x02\x79\xbc\x2a\x0b\x44\x8a\x9c\xbe\xc9\x79\x43\x32\x08\xa4\xd3\x6b\x31\x9d\xde\x7b\x23\x22\xb1\xcd\x01\x9e\xd8\x86\x09\x92\x49\x72\xf3\x0b\x92\x5c\x16\xc9\xf5\xe6\xc8\x05\x37\xb9\x5e\x5b\x1a\x7e\x8d\xc8\xc2\xf3\x38\xb9\xe8\xc9\xc2\xd3\x96\x96\x5b\x8f\x51\x2f\x19\x56\xb9\xd9\x5a\x42\xcd\x0b\xc1\x3a\x12\x34\xfe\xc2\x68\x8d\xdc\x1b\x91\x09\x98\x3c\xd9\xac\x8c\xe5\x40\x19\x78\x4a\x5c\xed\x93\x81\x93\xce\x9d\xdd\x96\x86\x9d\x49\xf0\x07\x9a\x0c\x9a\x0c\x9a\x0c\x9a\xbc\x75\x68\x32\xd4\xbf\x10\xf5\xaf\x77\x70\x3b\x92\xab\x76\x25\xb9\x2a\xac\x1a\xb0\x6a\xc0\xaa\x01\xab\x06\xac\x1a\x5b\xda\xaa\x81\x1c\xdb\xc8\xb1\x8d\x1c\xdb\x9d\xca\xb1\x0d\xa3\x21\x8c\x86\x5b\xd5\x68\x98\xc9\xb7\x39\xbd\x7c\x18\x7e\x8e\xd7\xc7\xcf\xbb\xe8\x9d\xe2\x6b\x76\x25\xed\x3a\xcb\xda\xb7\x66\xa2\xdb\x84\x41\x38\xf4\x6f\x9e\x26\x13\xc2\xa9\x3f\x6b\x18\x66\x4e\x2f\x56\x15\x57\x0b\x72\xee\xe7\x3a\x82\x45\x7f\xf1\x69\xfa\xb6\x7d\xe4\x0e\xef\xbd\x57\xd6\x92\xd1\x3d\x8d\x7d\xf9\x67\xd9\xcd\xf1\x87\xd8\x45\x93\x9e\x3b\xbd\xa6\x47\x7e\x09\x1c\xf5\xe1\xa8\x0f\x47\x7d\x98\x56\x60\x5a\x81\x69\x05\xa6\x95\x9e\x31\xad\xf4\x8e\xe5\x00\x48\x1b\x48\x1b\x48\x1b\x48\x1b\x48\x7b\x4b\x23\x6d\x30\x37\x30\xb7\x2d\xca\xdc\x36\xa5\xa3\xfe\xeb\xc8\xb4\xe0\x84\xa7\xc8\x09\xce\x09\x0f\x93\x83\x64\x3c\xd0\x59\xd5\x47\xa6\xd6\x92\x09\xce\x86\xda\x52\x43\xe9\x35\xe1\x50\xf0\x10\x7d\x44\x42\xc1\x3a\x80\x4c\xc2\x41\xde\x21\x1f\x0a\x8c\xbd\xe9\xb6\x5a\x2a\xf6\x4a\xc7\x1d\x5f\x00\xb0\x3d\xe2\xbf\xbb\x83\xc0\x04\xb1\x9a\x22\x69\x72\xa6\xca\xd7\xfe\x00\x49\xac\x6f\xe8\xe1\x5b\x05\xd7\xfa\x16\x5d\xeb\xff\xaa\x8f\xa4\xc4\xa7\x3f\x41\x8e\xf2\x4f\x7f\x9c\xac\x7b\xfd\x91\x19\xe1\x49\x7f\x9a\x9c\x74\x3d\xe9\x5b\x69\xe7\xac\x70\x9c\x3f\x43\x4e\x79\x1c\xe7\x5b\x69\xe8\x66\xfd\xe4\x9b\x93\x43\x75\x3c\xe1\xc3\x64\x52\xfc\x0f\x47\x6a\xe5\x50\xb4\xae\x7b\xbc\x90\x49\xa3\xe2\x37\xbf\x4c\xaa\xe7\x0d\xdf\x09\xe9\x04\xdf\x77\x00\x5a\x00\x5a\x00\x5a\x00\x5a\xf8\xbe\xc3\xf7\x1d\xbe\xef\xf0\x7d\x87\xa1\x00\x86\x02\x18\x0a\x60\x28\x80\xa1\x00\xbe\xef\xf0\x7d\x87\xef\x3b\x7c\xdf\x61\x87\x83\x1d\xae\x07\xed\x70\x3d\xed\xfb\xde\x31\xbc\xbc\x19\x3d\xde\xbf\x33\x48\x86\x84\xc7\xbb\x70\xc3\xae\x5f\x4b\x53\xfc\x46\x7f\x73\x90\xfe\xe7\x01\xf2\x4a\xf1\x5f\x4e\xb5\xcc\x67\x9b\xab\x96\xc9\x8b\x35\xb6\xb5\x56\x26\x6f\xd1\x92\x75\x32\xf9\x7f\xcc\xea\x56\x79\xc6\x30\x53\x85\x82\x83\xe6\xad\x1e\x77\x9b\xcf\x5c\x6b\x7f\x49\xcc\xd0\xcf\xa5\xa9\x5a\x99\x97\xc3\xbf\x93\x83\x74\x5c\x7e\x1b\xbe\xd5\x23\xbf\x0a\xd1\x17\x54\xc9\x44\xa0\x00\xaa\x64\xc2\x0e\x05\x3b\x14\xec\x50\x5b\xd9\x0e\x85\x2a\x99\xa8\x92\x09\xfe\x0f\xfe\x0f\xfe\x0f\xfe\xdf\x13\xfc\x1f\x35\x2c\x51\xc3\x72\xb3\x10\x4f\xd4\xb0\xec\x44\x0d\xcb\x1f\x18\x26\x87\x05\xfc\xb3\xca\x86\xa9\xe6\x35\x4f\xa6\x0b\x01\xfe\xd6\x8c\x42\x65\x55\x53\xcb\x65\x35\xbb\xc2\x76\x5e\x99\xf6\xe2\x79\xfa\xc9\x21\xfa\x9d\x01\x42\xe4\x7d\x57\xd6\x92\xd1\x8f\xf7\xc9\xa1\xf7\xc0\xbf\xa2\x2d\xcc\xec\x5c\x17\x8b\xbc\xbd\x94\xd3\x5e\x5b\x78\xe0\x88\xab\xc1\x70\x2d\x4d\xee\x77\x4c\x09\x72\x55\xb3\x41\x9f\x36\xec\x69\x3b\x11\x7f\x80\x3f\x6e\x41\xbc\xca\x62\xb2\xba\x8f\x00\x88\xb5\x00\xf1\x99\x70\x36\x78\x9c\x1e\x93\x6c\xd0\xbf\xb8\x24\x1c\xac\x1e\x65\x7f\x79\x87\x07\xeb\x03\xca\xed\xf4\x56\xfe\xe2\x60\x88\x60\x88\x60\x88\x60\x88\x60\x88\x60\x88\x60\x88\x60\x88\x60\x88\x60\x88\x60\x88\x60\x88\x60\x88\xdd\x66\x88\x27\xc9\x71\x7a\x2c\x76\xc4\x71\x79\xda\xcd\x7d\x9d\x64\x2f\xaa\xcf\x78\xb1\x01\xf6\x6b\x27\xfd\x99\x80\x20\x81\x20\x81\x20\x37\x11\x82\xfc\xee\x20\x19\x0d\x40\x90\x5e\x07\xc4\xac\xa5\xe7\x4c\x9d\xcd\x25\xfd\xdc\x20\xfd\xf5\x01\x72\x87\x4b\x1e\x85\x17\x62\xa5\x39\x2f\xc4\xc9\x85\xf3\x53\xbc\xa1\x36\x79\x22\x2a\x7e\x76\xc8\xfb\xe2\x3c\x63\x56\xb7\x40\x0f\x5b\x75\x3f\x7c\x2a\x1c\x31\x1e\xa3\x47\x6a\xbc\x0b\x1b\x31\x47\x67\x62\xc0\x0f\xc1\x0f\xc1\x0f\xc1\x0f\xc1\x0f\xc1\x0f\xc1\x0f\xc1\x0f\xc1\x0f\xc1\x0f\xc1\x0f\xc1\x0f\xc1\x0f\xe1\x83\x08\x00\x08\x00\x08\x00\xd8\x35\x00\xf8\x17\x83\x44\x11\x00\x50\x2d\x95\x2c\xd7\xf3\xd0\x2a\xab\x65\x6d\xb9\x52\x60\x9f\x2a\xfd\x2f\x83\xf4\xe3\x03\x64\x1b\xbb\xe2\xca\x5a\x32\x7a\xbd\x39\xd6\xb7\x20\x9b\x58\xd0\xda\x15\x77\x1c\xe7\x37\xa4\x4a\x25\x6b\x31\xe9\x69\x1d\x61\xc7\x6d\xe4\x7e\x17\xc3\xb9\xdf\x08\x8d\x0b\xa0\xe7\x99\x03\x52\x27\x60\x9f\xad\x17\xa0\x3e\xa0\x3e\xa0\x3e\xa0\x3e\xa0\x3e\xa0\x3e\xa0\x3e\xa0\x3e\xa0\x3e\xa0\x3e\xa0\x3e\xa0\x3e\xa0\x3e\xa0\x3e\xa0\x3e\xa0\x3e\xa0\xbe\xae\xa1\xbe\x9f\xe8\xb7\x73\x0d\x9a\x4b\x6a\x36\x61\xf3\xa1\xaa\x1a\xfb\xc2\xed\x8f\xfe\x65\x84\xfe\x45\x84\xdc\xcb\xae\x4c\x79\x2f\x74\x1c\xfe\xee\xc9\x6b\x65\xff\xf6\x2b\x5e\x2c\x3e\x98\xd7\xca\xf3\xd5\xb7\x49\xd7\xbc\xd4\xdc\x79\xfb\xe4\xd7\x3e\x42\x37\x51\xd3\xd0\x44\x4d\x43\x13\xcd\x34\x94\x29\x91\x27\x04\x94\xbb\x40\x66\x39\x94\x9b\x21\x53\x24\xdd\x02\x94\xf3\xbc\x67\x33\xa5\xe1\xe8\xfb\x87\x49\xaa\xd9\xa9\x91\x1e\x99\x85\x8a\x55\x66\x07\xcb\x82\xe6\x04\x85\x7f\x6d\x88\xfe\xdb\x5b\x1a\xcd\xd9\xc7\x9a\x89\x11\x9f\x14\x2d\xcf\x1b\x4c\xbd\xe9\x81\xf0\xf0\x21\xfe\xb8\xa0\x15\xe5\xe9\x2d\x90\x6f\x2d\xf2\xd5\xc3\x69\xee\x0c\x9d\x92\xbc\x36\x70\xed\xd9\xfe\x9b\xee\x58\xd7\xa6\x95\x44\xcc\x38\x40\x30\x40\x30\x40\x30\x40\x30\x40\x30\x40\x30\x40\x30\x40\x30\x40\x30\x40\x30\x40\x30\x40\x70\xaf\x81\xe0\xa3\xe4\x30\x3d\x18\x1b\x77\x62\xc6\xef\xf1\xc6\x8c\x7b\xce\x78\x08\x17\x07\x42\x06\x42\x06\x42\xf6\x20\xe4\x5f\xbe\x8b\x1c\x64\x53\x37\xb6\x96\x1c\x73\x0a\xe4\x48\xfe\xc8\xff\xfd\xfc\x18\xfb\xe0\x74\xe7\x8f\xcf\x8f\x95\x4c\xe3\xb9\x1b\xf4\x7f\xee\xa2\xef\x89\x90\x6d\x59\xc3\xe4\xc9\x2a\x87\xb2\x46\xb1\xc8\xa4\xdd\xd9\xe9\x4b\x2e\xee\x29\x1b\x0a\xbf\x9a\x3b\x8f\x8a\x66\xe2\xfb\xe4\x95\x93\x86\xa9\x2d\x26\xcf\x6a\x65\xb7\xe8\xbb\xbc\x64\x8e\xdd\x32\xde\x1f\x1f\x8b\x0b\xcc\x76\x84\xec\x16\x98\xed\x6e\xb2\x8b\x63\xb6\xdb\xc9\x2b\x3e\xd6\xb7\x9d\xc8\xb5\x11\x8a\xcc\x1e\xaa\xcf\xb1\x08\xdd\x2e\xbb\x42\xae\x3e\x11\x4e\xd5\xc6\xe9\x01\x49\xd5\x62\x31\x89\xcf\xbc\xfd\x95\xe5\xe0\x7d\x5e\x93\xd1\xba\x23\x34\xf7\xc4\xba\x46\x68\xae\xd2\xf9\x11\xea\xcc\xeb\x37\x31\xf0\xb1\x9f\xf6\x8c\xd0\xb0\x33\x42\x17\x17\x42\x86\x68\xd0\x3f\x44\x86\xb5\x89\x56\x51\x73\x83\xe7\x0e\x76\xfc\xfd\x9e\x31\xda\x6f\x8f\xd1\xd4\xf4\xec\xf4\xa5\xe9\xc6\xa3\x34\xec\x1b\xa5\x29\xae\xf0\x6d\x9e\x71\x5a\xef\x72\x1b\xff\x59\xcf\x38\x8d\xd8\xe3\x74\x71\xee\xd2\xf9\x8b\x17\x16\x1a\x0f\x54\xdc\x37\x50\xb2\xf1\x97\xef\x48\x4d\xd4\xfd\xea\xce\x4d\xa7\xa6\xd6\xf3\xd5\x9d\xd3\xd4\xdc\xcb\x77\x8c\xd2\x3f\xe3\x19\xa3\xb8\x23\x99\x52\x97\x26\xcf\x35\x1e\xa4\x21\xbf\x68\x62\x3b\xee\xcb\x57\x7e\x67\xce\x90\x53\xf4\x44\x6c\xc2\x39\x7a\x3c\xe8\x3d\x7a\xd4\x79\x40\xed\x11\xa4\xf3\x35\xfe\x3e\x1f\x21\xbf\x19\xa1\xbf\x11\x89\x7e\xda\xd1\xca\x3f\x1c\x99\x53\xcb\xe2\xf4\xbe\xa2\x29\x25\xd5\xe4\xfc\xe5\x89\xf9\x59\x79\xe4\x94\x47\x5d\x45\xea\x3e\x8a\x56\xcc\x95\x0c\xbd\x58\xb6\x58\x17\x96\x97\xf5\xe7\x34\x4b\x68\x60\x1e\xd3\x00\xd3\x64\x2d\xcd\x51\x45\xb3\x15\xd3\x64\xa7\x3d\xb1\x40\xec\x43\x4c\xd9\xb0\xdb\x4c\x28\x33\x86\xa9\x68\xcf\xa9\xab\xa5\x82\xe4\xd2\xd7\x57\x8c\x82\x43\x86\x58\x6f\xb8\xaa\x5f\x2e\x97\x26\xc6\xc6\x0a\x46\x56\x2d\xac\x18\x56\xb9\x8e\xb6\xc6\xa6\x68\xd4\xba\x61\x95\xb5\x55\x57\x5b\xd3\x0a\xaa\x55\xd6\xb3\x96\xa6\x9a\xd9\x95\xd1\x82\x91\xcf\xeb\xc5\xfc\xd8\x15\xf1\xdf\xa7\x9f\x3d\x59\xb1\x34\x73\xe2\x9a\xbe\x9a\x5d\xb9\x91\x50\xec\xd1\xa8\xff\x73\x8c\xcf\x8c\xb7\xca\xe1\xe7\x9e\x22\x71\x61\xde\x5e\x12\x69\xcd\x03\xb5\xc7\xab\xc6\x92\x45\xdf\xf5\x14\xfd\x8b\xbd\x64\x3b\xbf\x96\x7d\x4f\x0f\x09\x14\x69\x4a\x88\x62\x9f\xb2\x6d\x83\x75\xc6\x58\x8a\xbf\x9a\x5d\x92\x66\x3f\x2f\x26\xdd\xef\x27\x63\x2c\xf5\xb8\x51\x38\x0d\xa3\x28\x8c\xa2\x69\x18\x45\x61\x14\x85\x51\x14\x46\xd1\x2d\x63\x14\x4d\xf7\x8c\x51\xb4\xed\x3d\x69\xd9\x28\x9a\x86\x51\x14\x46\x51\x18\x45\x61\x14\x85\x51\xb4\xfb\x46\xd1\xf4\x96\xb6\x44\xa6\x61\x89\xec\x9c\x25\x32\xdd\xeb\x96\xc8\xf4\x26\xb4\x44\x66\x2e\x93\x13\x82\x81\x1e\x22\x8f\x70\x06\x3a\x4a\xf6\x93\xe1\x20\x67\xfa\x04\x67\x49\x89\xb5\x64\x22\x63\x2c\x35\x13\x91\x71\xf5\x81\xfa\x30\x73\x1b\xbd\x45\xa4\x49\x39\x17\xce\x50\xf7\xd2\x3d\x92\xa1\xf2\xa7\x4b\x8c\x9a\x31\x96\x7c\xd8\x34\xf6\x6b\xdb\x3d\xa8\x6b\x87\xd8\x68\x14\x95\x53\xad\xa8\xf8\xaf\x8e\x72\x2d\x81\xa1\x8e\x93\x63\xe4\x08\x1d\x58\x32\x72\x37\xa2\xfc\x7f\x95\xbe\xf8\x20\xd9\xdb\xd4\x78\xa6\xdf\x1d\x21\xef\x8c\xd0\x9f\x88\x44\xdf\xee\x48\x8f\x6f\xf5\x5d\x66\x7b\xb3\x14\xd7\x23\x3c\x57\x50\x96\x1d\xca\xc4\xe7\xee\x3b\x22\x78\xb1\xd1\x92\xa6\x94\xd8\xe0\x30\xbd\x2c\xa1\xa4\x8a\x8a\x5e\x14\x87\x73\xc3\x54\x2a\x45\xe7\x7c\x9f\x53\x72\xe6\x8d\xf9\x4a\x51\xc9\xe9\xa6\xc6\xd6\xb8\xe6\x1c\x1a\x99\xec\xe7\x9b\xab\x3c\x35\xdb\x3a\xb2\x3c\xa7\x28\xcb\x15\x93\xeb\x61\x25\xd3\xc8\x6a\x16\xdf\x05\xe5\x27\x25\xe5\x75\x42\x59\xe4\x4f\xe4\xfa\x2d\xdf\xb6\x26\x94\x51\x25\x55\x28\x4c\xf0\x3d\x2e\x67\xde\x50\xcc\x4a\x91\x9d\x9f\xd8\x47\x61\x6f\xec\xb2\x39\x2d\x17\xbb\x55\x74\xcd\x2b\x01\xde\x11\x21\x6f\x8b\xd0\xb7\x46\xa2\x6f\x76\x06\xe8\x9b\x7d\x5c\x2d\x7a\x4c\x2d\xaa\x79\xcd\x14\x0a\xbe\x60\xd8\x96\x65\x64\x75\xbe\x67\x39\xaa\xb4\xca\xcf\x22\x86\xa9\x30\x95\xa6\x7c\xc3\xd9\xc4\x57\xd5\x6b\xac\xff\xe5\x15\xcd\xd2\xec\xcf\x94\x89\x0e\x1b\x72\xf0\x73\xfe\x92\xa6\x70\x01\xc1\xd5\x66\xc3\x54\x92\xe3\x47\xd9\xb5\xa6\x9a\xe5\x34\x86\x9d\x38\xc5\x47\xc9\x55\x5b\xa6\x85\xa8\x7a\x51\x78\xed\x70\xd5\xd1\xbd\x96\x9f\x50\x25\x2b\x62\x07\x1e\x5b\xd0\xe6\x8d\x82\x5a\xcc\x27\x0c\x33\x3f\x56\xba\x96\x1f\xab\x14\xf5\xac\x91\xd3\xc6\xf6\x9c\xb7\xe6\x58\x2b\x89\xd8\x0e\xef\xbb\x7a\x9d\x34\xbe\xd0\x47\x8e\x8a\xcf\x38\x49\xc6\xf8\x67\x3c\x4c\x9a\x5d\x76\xe4\x24\xbb\x33\x49\x0f\x93\x83\x64\xdb\xa4\xd0\xcf\xd6\x73\xfb\x29\x76\xfb\x38\x3d\x42\x0e\x91\xed\xa9\x2c\x13\xff\xeb\xbb\xbf\x75\x09\x52\x32\xda\x2a\x41\xe2\xff\x69\xc4\x23\x41\x5e\x2d\x94\x52\x25\x6b\x14\xd8\x11\x53\x6e\x19\x4c\x9a\x3c\x2c\x7e\x91\xd2\x64\xd2\xf9\xbd\x93\x72\xe5\x12\x99\x27\x73\x5e\xb9\x12\x4f\x93\x33\x2d\x84\x3c\x09\x6b\xb4\xb4\x0a\x81\x97\x82\x97\x82\x97\x82\x97\x6e\x21\x5e\x0a\x15\x2b\x44\xc5\xea\x1d\xa0\xfc\x8d\x08\xf9\x7a\x84\x7e\x35\x12\xfd\x8a\x33\x55\x1f\x8d\x5c\xf2\x1e\xe1\xf4\xa2\x62\x89\x63\x98\xb2\xa4\x2d\x0b\xeb\xab\x83\x3a\xdc\x2d\x4b\x7e\x25\x7c\xb0\x3c\xca\x5c\xd1\x28\x8e\x16\xb5\xbc\xca\xa7\x44\x9e\xe2\xbc\x4a\x9f\x80\x9e\xce\x62\x90\xea\x80\xbe\xba\xaa\xe5\x98\x5a\x59\xb8\xe1\x9a\x45\x5d\xd1\xae\x17\x46\xe4\xe1\x8e\xbf\xae\x92\x37\xd5\x2c\x5f\x27\xba\x91\x73\x36\x1e\x77\x73\xe0\x16\x67\x7b\x5e\x2a\x16\xeb\xa4\x77\xa0\x54\x76\xa7\xfd\x42\xf2\x21\xcb\xe2\x7b\xb3\x9b\x48\x88\x7e\xae\x6a\x6a\xb1\x6e\x1f\x63\x94\x77\x61\x8e\xf7\xa0\xde\xa1\x15\xdc\x1e\xdc\x1e\xdc\x1e\xdc\x1e\xdc\x7e\x4b\x73\xfb\xdf\x8e\x90\x97\x22\xf4\xb3\x91\xe8\x8b\xce\x6e\xfb\xde\xc8\x94\x27\x6b\x49\xa9\xa0\xa9\x96\xe6\x7c\xfa\x73\xa6\x51\x52\xf3\x7c\x1f\x9e\x33\x0a\x7a\xf6\x86\xcf\x6b\xc7\x9e\x6e\x37\xed\x09\x9b\xf0\x64\xe2\x48\x42\x59\x10\x72\x44\x6c\x92\x25\xad\xc8\x96\xa9\xbb\x8b\x68\x8a\x61\x96\x56\xd4\xa2\xed\x45\x64\x56\xb4\xb1\x65\xb5\x60\x6b\xff\x31\xf1\x6b\x4c\x59\xd6\x8b\x6a\x41\x7f\xbd\x2d\xbe\x97\x34\x45\xcd\x71\x08\x6e\x8c\x09\x26\x9a\x73\x55\x4b\xd1\xf8\xa0\xe5\xde\x24\xf4\xed\x84\x32\xad\x73\x91\xe4\xe9\xb8\x61\xd6\xbe\x99\x6b\x78\x28\x0b\x75\x9f\x6b\x7f\x46\x79\x25\x11\xdb\x29\xfa\x33\x65\xbf\x88\xdf\x1d\xe9\x85\x01\xf2\xa6\x01\xfa\x86\x81\xe8\xf7\x1c\x9f\xb4\x2f\xf7\x5f\x96\x72\x90\x2d\xd1\x15\xe3\xba\x92\x57\xcd\x25\x35\xef\xe3\x0c\x8e\xa2\xa6\x99\xcb\x86\xb9\xca\xc6\xa2\x6e\x4f\x2f\x56\x3d\x3c\xb8\xa3\x5c\xad\xb1\x75\x92\x92\x78\x2b\x9d\xe9\x0b\x59\x3d\xe7\x2a\xd6\x7c\x6f\xe4\xc7\x1c\x67\x74\xd9\xe6\x24\x77\x0e\x7b\xf7\x4b\x78\x86\xd1\x96\x9b\x0e\xed\x77\x3c\xd1\xfc\x0f\x4b\x28\x82\x0c\x71\x59\xec\xd5\x56\x07\xc5\x3b\x0c\xb2\x33\x0f\xff\x97\x7f\x61\x58\xc7\x95\xc1\xb4\x9a\xbd\x96\x37\x8d\x4a\x31\xc7\xae\xe2\x2e\x60\xfc\xa2\xaa\x81\x13\xca\x8a\xd4\x80\xfc\x8d\xd8\x6f\xb0\xe4\xb4\x74\x5c\x19\x9c\x31\x4c\xcd\xd3\xac\x92\x55\xad\xac\x9a\x63\x6f\x2f\xc7\x47\x38\xfd\xf1\xf6\x2c\xa1\x4e\xd7\x34\xb8\xec\xb4\x91\x88\xdd\x59\xaa\x5e\x37\x5e\xdd\x06\x66\x31\x98\xc5\xb6\xa8\x59\x2c\x93\x27\xb3\x82\x4d\x4f\x93\x49\xce\xa6\x4f\x92\xe3\xe4\x58\x0b\xf0\x72\xa1\xac\x96\x2b\x56\x28\x30\x6e\x1b\x10\xbe\x1a\xaf\x8f\x9e\x77\xd1\x3b\x85\x5c\x70\x65\x36\xe9\x82\x43\x7d\xbb\xa3\x86\xe9\x9f\x0d\x92\x3d\xc2\x9d\x5c\x78\x41\xbb\x19\xd2\x64\x72\x34\xf1\x67\xfa\xab\x83\xf4\x63\x03\xe4\x36\xf1\x5f\x57\xd6\x92\xd1\x67\x9b\x2b\x5c\xc1\x53\x6b\xb5\xa9\x64\xc5\xbe\xeb\x4e\xb2\x2e\x6b\x31\xc9\xff\x1f\xe5\x2a\x9a\xcb\x5d\x36\x1f\xfe\x3d\x8c\xd1\x51\xf9\x3d\xf8\x56\x82\xfc\x2e\xc4\x63\x7c\x5f\x46\x33\x25\x30\x90\xa8\x0c\x3e\xf9\x48\x54\x06\x1b\x13\x6c\x4c\xb0\x31\x6d\x21\x1b\x13\x12\x95\x21\x51\x19\xd8\x3e\xd8\x3e\xd8\x3e\xd8\x7e\x4f\xb0\x7d\xa4\x1b\x43\xba\xb1\xcd\x42\x33\x91\x6e\xac\x13\xe9\xc6\xfe\x25\x42\x1e\x90\xc5\x69\xeb\x57\x44\x18\xa3\xbf\x1f\xa1\x5f\x8a\x90\x9d\x6a\x55\xbd\x83\xe0\xf2\x14\x0f\xe4\xb5\x72\x55\x21\x01\x54\xa5\xa8\x5f\x95\xe2\x6b\x11\x42\x9d\xe1\x37\xac\xac\x5a\xd0\x8b\xf9\x31\xfa\x62\x84\x7e\x32\x42\x5e\xe1\xf9\x5b\x34\x9a\xe7\xf6\xb6\x65\xc3\x5c\x75\x16\xb0\xaa\x70\x34\x17\x7f\x95\x18\x70\xfb\xda\xd4\xdc\xf9\xb3\xec\xef\x3d\x38\xd0\x3a\xb9\x20\x06\xfa\x2c\x99\xe6\x03\x7d\x9a\x9c\x24\xc7\x5b\x1b\x68\xfe\x8e\xa1\x23\xfc\x4f\x43\xe4\x90\x18\xe1\xa2\x91\xd3\xea\x57\xfa\x30\x2b\x45\xf6\x59\x67\x0b\xaa\x65\xb9\xb5\x3e\x3e\x31\x44\xff\x71\x80\xec\x60\xb7\x39\xe5\x3d\x7e\xa9\x99\xf2\x1e\xf3\xa2\xb9\x49\xd6\x5c\x4f\xd4\xf7\xd8\xcd\x1f\x77\xc1\xc8\x69\xb2\xa4\x87\xb7\x87\xe0\xe2\xb5\x5c\x3c\xac\xd0\xc6\xd5\xa7\xc2\xc1\xf9\x31\x7a\x44\x82\x73\xcf\xc2\x93\xd8\xdc\x3b\xfe\xb5\x75\x3e\x40\xc7\x41\xc7\x41\xc7\x41\xc7\x41\xc7\x41\xc7\x41\xc7\x41\xc7\x41\xc7\x41\xc7\x41\xc7\x41\xc7\x41\xc7\xbb\x4c\xc7\x8f\x91\x23\xf4\x50\xec\x11\xc7\x71\xef\xd5\xde\x5c\xba\xde\x33\x1c\xea\x78\x00\xac\x03\xac\x03\xac\x7b\xc0\xfa\xf7\x22\xe4\x41\x17\xac\x8b\x6d\xa7\x9a\xac\x7f\x25\x42\x7f\x2f\x42\xee\xf4\x5f\xd0\x10\xad\x3f\x28\xd1\xba\x7b\x39\xd8\x7a\x10\xf9\xfd\x29\x87\xfc\x36\xaa\xf8\x5c\xa7\xd8\x33\xfd\x93\x41\xfa\xa5\x01\x72\x57\xbd\x2a\xcf\xd1\xeb\xcd\x39\x38\xb7\xbb\xc4\x73\x22\x3e\x18\x54\xa4\xd9\xf3\x28\x36\x2e\xe0\xb9\xb5\x3c\xb7\x19\x9f\xe4\xab\xb9\x70\xa6\x9b\xa2\xa7\x6f\xae\x90\x33\xd8\x2e\xd8\x2e\xd8\x2e\xd8\x2e\xd8\x2e\xd8\x2e\xd8\x2e\xd8\x2e\xd8\x2e\xd8\x2e\xd8\x2e\xd8\x2e\xd8\x2e\x3c\x9f\x01\x68\x01\x68\x01\x68\xbb\x06\x68\xdf\xd9\x4f\x86\xc3\xf1\xa0\x5a\x28\xad\xa8\xc9\x31\xfa\x57\x11\xfa\xcd\x08\x89\xd6\x43\x82\xe2\x92\x60\x66\x3b\x94\xd7\xca\x75\xb0\x9d\xb8\x0d\xf0\xb6\x3e\xbc\xfd\xbb\x41\x72\x6f\x50\x19\xec\xe7\xe9\xef\x0c\xd2\x2f\x7b\xaa\x81\xee\x36\x35\x35\x57\x75\xfc\x77\x12\x3f\xc4\x77\xb1\x5f\x45\xf1\x4f\xe7\x8f\xed\xcd\xc1\x9c\x79\x8d\xc8\x94\x7d\x80\x67\xca\x66\xc3\x94\x20\x23\x24\x1e\x98\xe4\x9a\xf5\x9b\x0d\x8a\xd3\x9d\x50\x80\x79\x7f\x7d\x80\x79\x2b\x1d\xc8\x6b\x65\x72\xf5\xd1\x70\x74\x39\x44\xf7\x55\x97\x1b\x75\x1f\xef\xab\x91\xfd\xee\xed\xee\xc8\x3e\x68\x6a\xa5\x82\x9a\xd5\x02\x07\xf7\x55\xf2\x82\x8e\x8e\x6f\xfa\x0c\x39\x45\x4e\x54\xe5\xce\x5f\xd7\x00\x23\xbb\x2b\x12\xe8\xb7\x98\x40\xff\xa7\xfa\x48\x5a\xa4\xc1\x3f\x4e\x8e\xb9\x69\xf0\xdb\xf5\x85\xdf\xa4\xe4\x08\x17\x10\xa5\x4a\xd3\x02\xa2\x7e\xb9\xf3\x6a\x61\x11\xff\x87\x3b\x5c\x01\x41\x65\x5a\x35\xd5\x23\x13\xee\x16\x7f\xeb\xac\x48\xe8\x4c\xda\x7b\x88\x89\x10\x31\x81\xd4\xcb\x5d\x49\xbd\x8c\x9c\x9b\xc8\xb9\x89\x9c\x9b\x9d\xca\xb9\x99\xf9\x44\x5f\xf0\x7e\xdc\xde\x8c\x84\xf3\xa2\x04\xce\xa3\xe4\xbc\xa7\x04\xce\xcd\xb5\x69\x6f\xf9\x4a\xfd\x2d\xff\x36\xba\x4d\x0c\x53\x7b\x77\xfd\xf4\x97\x5e\xe1\xee\xfa\x43\x25\xd5\x2c\xeb\xdc\x3e\x2a\x0e\xe5\x81\xe7\x83\xbb\x4a\xec\xe0\xdd\x31\x55\xe0\xbe\xea\x86\x46\xf9\xf3\xf6\xf3\x33\xef\x6e\xef\x8f\xab\x9a\x99\xd7\xbc\xbf\xee\xf3\xfe\x6a\x95\x4d\xb5\xac\xe5\xf5\xec\x68\xcd\x75\xbe\x56\xd8\xbf\x6f\xc8\x5f\x59\x2f\xd3\xec\x5c\x9c\xa9\x3a\x99\x4c\x90\xa3\x2d\x4c\xee\x1c\x77\x17\x80\x02\x12\xa2\x80\x7c\xa4\x9f\x7c\xb8\x9f\x7e\xa8\x3f\xfa\x01\x47\x8a\xbf\xb1\x7f\xeb\x9c\x53\xaa\x2c\x2c\x6c\x9c\xb9\xc7\x00\xb7\x02\xb2\xc5\xe9\xfa\x0d\x0d\x05\x2c\xdc\x61\xbe\x19\x09\x07\x13\xb5\xc0\xef\x64\x5a\x97\xb8\x9b\x5f\xc1\x35\x20\x4b\x19\xca\x58\x46\x71\x4e\x38\xd0\x3c\xc6\x3e\x0b\xf9\xef\x05\xfb\x63\x71\xff\x38\x1c\x7c\x80\x4a\xbf\xd4\x47\x3e\xdb\x47\x5f\xec\x8b\x7e\xd2\x81\x83\x1f\xec\x9b\x31\xcc\x2c\x57\xce\xf2\x06\x1f\x76\x43\x89\x2d\xb3\x3f\xc5\x94\x94\xef\x2d\x38\xf6\x15\x7a\x54\xc5\x72\x5d\x05\x46\xd5\x2c\x7f\x71\xee\x80\x51\xd0\xb3\x72\x9f\xd4\x0a\x39\x4b\x31\xae\xcb\x31\x15\x0e\x0a\x25\xcd\x28\x15\xb4\x84\x22\x9e\xc8\x3d\x9e\xec\xb9\xe4\xf8\xb5\xee\x00\x38\x8f\x8f\xdd\xc2\xbb\xe5\xf3\xde\xe9\x38\xed\x09\x0e\x3f\x2e\x89\xf0\xe3\x76\x0a\xf6\xcc\x61\x72\x90\x8e\xc7\x0e\x38\x5e\xee\x77\x7b\xbd\xdc\x9d\xeb\x3a\xef\xe2\x4e\x7f\x3c\x4e\x2e\x4b\x97\xd9\xdc\xaa\xce\x3d\xba\x4c\x2d\xaf\x73\xd9\xec\x83\xb2\xde\xd8\x7d\x2e\xd2\x54\x36\xff\xd7\xb5\xa5\x15\xc3\xb8\xe6\x73\xc9\x71\x88\xe1\x7f\x18\xa6\x7f\x74\x0b\xb9\xbf\x6e\xc3\x4e\x74\xff\x27\x9b\x89\xee\x5f\x74\x1e\x78\x59\x3c\x70\xd2\xfb\xc0\x9e\x88\xf7\x3f\xcd\x1f\x97\xaa\xf7\xae\x32\x01\x40\xe3\x97\x80\x0b\x69\x0b\x29\x01\xfe\x8f\xf0\x6f\xf2\x29\xfa\xa4\xf8\xfa\x1a\x0f\x7f\x6d\x46\x00\xf9\xf5\x36\xfa\x2c\xe0\x59\x0a\xcf\x52\x78\x96\xc2\xb3\x14\x9e\xa5\xf0\x2c\x85\x67\x29\x3c\x4b\xe1\x59\x0a\xcf\x52\x78\x96\xc2\xb3\x14\x9e\xa5\xdd\xf6\x2c\x7d\x94\x9c\xa7\x67\x63\xd3\x0e\x4f\x89\x7b\x79\x4a\xe3\x93\x1f\xf2\x08\xc0\x4d\x15\x6e\xaa\x70\x53\xf5\xb8\xa9\xbe\x65\x88\x24\x25\x14\x65\x27\xb8\x7a\x38\x54\x92\x50\x49\x0f\xf4\xac\x66\xd1\xdf\x1b\xa4\x9f\x1b\x20\xb4\xea\x96\x2b\x6b\xc9\xe8\x5a\x73\xf1\xeb\xa9\xb9\xf3\x0b\xa2\xb1\x36\x85\xaf\x3f\x2c\x98\xa4\xbf\x43\x3c\x79\x81\x7c\x0e\x62\xd7\x6f\x22\x76\xfd\x75\xe1\xf0\xf1\x24\x3d\x6e\x63\xc4\xba\x0b\xc9\xe7\x04\x2a\x30\xa5\x3b\x39\xa0\x8b\xa0\x8b\xa0\x8b\xa0\x8b\xa0\x8b\xa0\x8b\xa0\x8b\xa0\x8b\xa0\x8b\xa0\x8b\xa0\x8b\xa0\x8b\xa0\x8b\x88\x5b\x07\x10\x04\x10\x04\x10\xec\x1a\x10\xfc\xb7\x09\x72\x71\x1d\x5e\x92\xab\x95\x72\xb8\x77\xe4\x27\x47\xe9\x9b\x06\xc2\xbc\x23\xc7\xea\x44\x59\x3f\x26\x5b\xaf\x67\xcc\x88\x9f\x60\x37\x34\xf2\x42\x6c\x74\x77\x9b\x23\xb4\x7f\xb0\x8f\x2c\x0b\x74\x77\x85\x3c\xcd\xd1\xdd\x65\xf2\x04\x59\x08\x74\xda\xad\x3f\xb6\x72\x28\x12\x8d\x3a\x1e\x0a\xf4\x9e\x0f\x67\x75\x4f\xd2\xd7\xb4\xe4\x03\x28\xb0\x5d\xc3\xde\x85\x84\x92\x47\xdf\x45\xc2\xd6\xc1\x78\xfd\x98\xf0\x86\x4b\xe1\xb4\xbc\xa7\x37\x56\x43\x5a\x27\x79\xa2\x55\x45\x6d\x74\x66\x35\x20\xa0\x03\x81\xe7\x2d\x06\x9e\xff\x75\xf7\x44\xd6\x35\x11\xe0\x9e\x23\x4b\x6e\x80\x7b\x8f\xcb\xc7\x36\x89\xc3\x1a\x31\x1b\x12\x49\x1f\xff\xe7\x9d\x61\xf2\x71\xaf\x13\x12\xdf\x50\x24\x9e\x12\x97\xf5\x88\x44\x44\x38\x3d\xc2\xe9\x11\x4e\x8f\x70\x7a\x84\xd3\x23\x9c\xbe\x95\x70\xfa\x0e\xc4\xb9\x77\x29\x44\xbf\xf9\x70\xfa\xe6\x14\x93\x56\x94\x8e\x66\x94\x99\xf4\x0f\xdd\x1e\xa6\x79\x1c\x0f\x09\xcb\x6f\xa8\x8f\x9c\x2c\x85\x05\x0d\x76\x47\x1d\x41\x48\xff\x56\x53\x82\x10\xd2\x8f\x90\xfe\x0d\x0e\xe9\xdf\x74\x78\xb0\x63\xc7\xdf\xb0\xdc\x03\x99\xf3\xe4\x2c\x9d\x8e\x4d\x3a\xee\xed\x43\x5e\xf7\xf6\x46\x0f\xeb\x42\x06\x81\x37\xf4\x93\x3d\x82\x8d\x2f\x17\x8c\xeb\xec\x63\x35\x8d\x42\xc2\x71\x7c\xb3\xd9\x38\xfd\x83\x08\xfd\x72\x84\xdc\xe5\xb9\x28\x65\x5f\x13\x8d\xe6\xb9\x56\xc8\x74\x53\xc7\xee\xa0\x2a\x7c\xbc\x79\xf9\xad\x99\x3a\x37\xa5\xe6\xce\x9f\x65\x17\xf4\x60\x06\x57\x9d\x5c\x10\x0b\xfb\x2c\x99\xe6\x0b\xfb\x34\x39\x49\x8e\xb7\x96\xc1\x95\xbf\x63\x68\xea\xd6\x8f\x13\xb2\x3f\xa4\xf2\x19\x77\xb3\x32\xb5\x35\x5d\xbb\x6e\xd1\x1f\x21\xb1\x6f\x0f\xd4\xab\x82\x76\x97\x30\x66\x2b\xaa\x72\x89\x5d\x3f\xcf\xaf\x8f\x3f\x24\xfe\x5a\x5d\x05\xcd\x73\x49\x9b\xd1\xc8\x2c\xc9\x90\x73\x55\xfa\xc0\x51\x72\x38\x58\x36\xf8\xdf\x7a\x2d\x99\xf0\xf4\x2d\xf3\xa6\x08\x39\x2f\x26\x24\x4d\xce\xf0\x09\x99\x20\x2d\xb7\x26\xe6\x36\xc9\xe7\xd6\x01\x77\x37\xd3\xde\x45\xa1\xc6\x9f\x23\x33\x1e\x35\xfe\x66\x1a\x0c\x93\x76\xeb\x73\x5c\xae\xb7\x9e\xa4\x98\xf3\x3e\xd4\xeb\xc9\x7c\xf5\x81\xfa\x02\x6d\x1b\xbd\xa5\x64\x58\x65\x92\x81\x7a\xd6\x58\x3d\xcb\x00\xd0\x07\x00\xfa\xb6\x6f\x5f\xdf\x8c\x93\x19\x21\x39\x73\xba\x95\x35\xd6\x98\x1c\x76\x85\x66\x75\x1a\x6c\xfe\xef\xe7\xc7\xb4\x62\xae\x64\xe8\xc5\xb2\x55\xd0\x3d\x19\xb2\xdf\x13\xa7\x6f\xe9\x27\x3b\x9c\x76\x98\x3c\x55\xea\x18\x70\xa7\xe5\xdd\x0b\xec\xee\xf8\x3e\x76\xc5\x94\x7d\x8f\x27\x63\x5b\xce\x77\x5d\x9b\x6d\xb3\x6a\xf0\x49\x7f\x46\x88\x4a\xb6\x67\x31\x51\x79\x84\x1c\x22\x8f\x04\x4a\x22\x77\xd0\xd6\x92\x09\x5f\x87\x9b\x4c\xa3\xfd\x74\xb8\x30\x9a\xa0\x47\xa5\x30\xaa\x9e\x22\x29\x87\x7c\xcf\xf5\x27\xd6\xfe\xf3\xed\x55\x13\xb2\xa7\xbe\x25\xd5\x3f\x27\xc3\xf2\xa2\x6e\x4f\x4b\xfa\x3c\x39\x4b\xa6\xab\xf6\xbd\xd6\x86\x1f\x47\x60\x18\x41\x5b\x94\xb1\xbf\xd0\x20\x53\x67\x9b\x84\x03\x79\x54\x28\x51\x53\x24\xed\x2a\x51\x9d\x93\x34\x3c\x1f\x77\x67\x25\x4d\xfc\xff\xde\x59\x25\x69\xee\xb1\x6d\x92\xc5\x2a\xe9\x32\x24\x7e\xe8\xba\x70\x81\xbd\x11\xf6\x46\xd8\x1b\x61\x6f\x84\xbd\x11\xf6\xc6\x56\xec\x8d\x3d\x9f\xa5\x3b\x94\x7c\x34\xa7\x02\x84\x6d\xf5\x41\x2a\x42\xb8\x39\x33\xfd\xe6\x1d\x55\x4a\xc2\x48\x88\xf9\xd0\xaf\x39\x0c\x72\x1e\xdc\x4d\xc5\x01\x96\xc1\xad\xa6\xae\xc0\x32\x08\xcb\xe0\x06\x5b\x06\xd5\xb6\x1d\x33\x6f\x3a\xeb\x77\x67\x0f\x8d\x99\x09\x72\x94\x1e\x8e\x1d\x74\x0c\x7b\xf7\x7a\x0d\x7b\xbe\xfb\x6a\x2d\x79\xaf\x23\xcf\xd0\xa7\x62\x4f\x3a\xf7\x4e\x48\xfd\x5a\x7c\x99\xc5\x1c\x47\xf7\x8a\x95\x35\x4a\xda\x88\x62\x55\xb2\x2b\xec\x8b\xe0\xaa\xbb\xa6\xae\x0a\xcd\xa7\x64\x1a\x5c\x6d\x8d\xdd\xe6\xc0\xcd\x8e\xda\x0a\xdf\x38\x42\x16\x9a\xae\xff\x18\xc0\x5e\x4d\xa3\xa0\x2d\x31\x11\x5d\xcc\x3b\xe4\xf5\xe7\xf7\xd3\x8f\xf5\x37\xac\x14\xf9\x40\x1d\x0e\x3b\x6f\x14\xb4\xb4\x68\x29\x3e\xce\x7e\x0f\xac\x18\xe9\x6e\xb3\x9e\x7b\xda\x4c\x64\x5f\x47\xa6\xc5\xa2\x3f\x45\x4e\xf0\x45\x7f\x98\x1c\x24\xe3\x81\x8b\x9e\x0f\xa0\xfd\x7a\x09\x4f\xb7\x42\xd7\xfc\xd5\xf0\x25\x7d\x96\x4e\x7b\x96\xa9\x78\x86\xad\xf6\x04\xce\x9c\x5c\xed\xde\xae\x84\x05\xbe\xfc\xe8\x6d\x0d\x27\xed\xa1\xfa\xac\xd6\x3b\x6f\x87\xe4\x25\x1b\x39\x75\xe9\x73\x64\x86\x4c\x55\xe9\x28\x2d\xcd\x1d\xb4\x13\x40\xdb\x16\xa1\xed\x87\x1b\x40\xdb\x36\x09\x96\x8c\x60\xb6\x93\x24\xe5\x32\xdb\x16\xdb\x5a\x9f\x2c\x6a\x41\xf2\xd4\x8a\xaf\xb0\x20\x93\x4f\xed\x6c\x28\x8b\xee\x72\x22\x4c\xbc\xe2\xe7\xa0\xf8\xeb\x86\x4a\x1f\x60\x5d\x60\x5d\x60\x5d\x60\x5d\x60\x5d\x60\xdd\xad\x89\x75\x9b\xd3\x22\x9a\x51\x12\x42\x35\x8d\x26\x18\xef\x47\x77\x34\x54\x24\xe2\x21\xc4\xd7\xab\x5e\x3c\xc2\x29\xc4\x46\x69\x17\x60\xbf\x5b\x4d\xa7\x01\xfb\x05\xfb\xdd\x60\xf6\xdb\x35\x0c\x16\x8a\x7e\xbb\xb8\xab\x64\x8e\x92\xc3\xf4\x60\x6c\xdc\x61\xb9\xf7\x78\x39\xb0\xa7\xf1\x97\x05\x05\xfe\xee\x10\x39\x22\x28\xb0\x95\x5d\xd1\x72\x95\x82\x5e\xcc\xd7\x64\x56\x2f\x99\xba\x61\xea\xe5\x1b\xd9\x82\x6a\x59\xae\x8f\xed\xff\x37\x44\xbf\x33\x40\x6e\x77\x6f\xbc\xb2\x96\x8c\xfe\x72\x33\x35\x24\xe7\x64\x83\x93\xac\xc1\x9e\x28\x19\xf9\x00\x7f\xdc\x82\xf3\x2a\x8b\x49\x5f\x1f\x7b\x3f\x31\x7b\x20\x70\x6a\x7b\xc6\x76\xfb\xa3\x7d\x26\xfc\x9b\x3c\x4e\x8f\xc9\xef\xad\x66\x75\x49\x4e\xe4\x1b\x65\x7f\xe0\x42\x58\xc5\x49\xa4\x64\x47\x4a\x76\xa4\x64\x47\x4a\x76\xa4\x64\x0f\x19\x16\xa4\x64\x47\x4a\x76\xa4\x64\x47\x4a\x76\xa4\x64\x47\x4a\x76\xa4\x64\x47\x4a\xf6\x76\xa7\x64\x6f\xe8\x38\xe7\x3b\xe0\xa1\xbe\x23\xd2\xb9\x23\x9d\xbb\x93\x56\xa5\x8c\x74\xee\xf4\x9f\x07\xc9\x88\x04\x90\x65\xc3\x54\xf3\x5a\x0d\x7d\x94\x7f\x97\xf0\x91\x7e\x6a\x90\xfe\xa7\x01\x42\xe4\x5f\xaf\xac\x25\xa3\xcf\x35\x57\xd2\x71\x41\xdc\xd1\x3e\xe6\xe8\x50\x43\xd1\xf0\x62\xd2\xfb\x04\x94\x73\xbc\x89\x72\x8e\x4f\x86\xa3\xc5\x23\xf4\x90\x8d\x16\x7d\xeb\x46\x72\x45\xef\x54\xf8\xdd\xbc\x41\x0d\x41\x0d\x41\x0d\x41\x0d\x41\x0d\x41\x0d\x41\x0d\x41\x0d\x41\x0d\x41\x0d\x41\x0d\x41\x0d\x41\x0d\xbb\x4b\x0d\x41\xfe\x40\xfe\x40\xfe\xb6\x30\xf9\xfb\xc9\x21\x72\x30\x80\xfc\x89\xd2\x8d\x02\xff\xad\x19\x85\xca\xaa\xa6\x96\xcb\x6a\x76\x85\x6d\xbf\x16\xfd\xfa\x20\xfd\xe2\x00\xb9\xc3\x25\x80\xa2\xfa\xc3\xf7\x37\x87\x01\x17\x79\x7b\x29\xa7\xbd\x36\xa1\xc0\x41\x3f\x0a\xe4\x5d\xaa\x7e\xd4\xe6\x60\x82\xdd\xf7\x24\xcc\x86\xe3\xbe\x33\xf4\x54\x23\xdc\x57\x3d\xd2\x75\x12\xbb\x37\x03\x1e\x01\x07\x01\x07\x01\x07\x01\x07\x01\x07\x01\x07\x01\x07\x01\x07\x01\x07\x01\x07\x01\x07\x01\x07\x01\x07\x01\x07\x01\x07\x01\x07\x01\x07\xbb\x05\x07\x7f\xa6\xdf\x29\xa2\xd6\xa0\xc4\x9f\x83\x0a\xe9\x3f\x44\xe8\xdf\x46\xc2\xea\xc3\xde\x93\xd7\xca\xfe\x5d\x58\xbc\x5f\x7c\x7f\x5e\x2b\x37\xaa\xfc\x9a\x9a\x3b\x6f\x1f\x02\xdb\x17\x0a\xdc\xbe\x1a\x77\x25\xf2\x84\x40\x73\x17\xc8\x2c\x47\x73\x33\x64\x8a\xa4\x5b\xab\x71\x67\xbf\xe7\xac\x6e\x85\x3a\xf3\xd1\x5f\x1b\x22\x27\xe5\x2c\x95\x74\xed\xb9\xb2\x56\xe4\xdf\x54\x8d\x0b\x67\xb6\x62\x95\x8d\x55\x7b\xbc\x3d\xdd\xa2\xff\x6b\x90\xfe\xdd\x00\xd9\xe9\xbb\xfd\xca\x5a\x32\xfa\x43\x7d\xcd\xd1\xdc\x49\xde\xb2\xdd\xe9\x29\xa7\xe5\x36\x51\xdd\x03\xfc\x86\x94\xb7\x77\x8b\xc9\xa0\x67\x6e\x0e\xbc\xdb\x7d\x97\xcf\x42\x38\xde\x3d\x4f\xcf\xda\x35\xee\xea\x2c\x24\x09\x79\x83\xc6\xdd\x1f\x36\x0e\xce\x0b\xce\x0b\xce\x0b\xce\x0b\xce\x0b\xce\x0b\xce\x0b\xce\x0b\xce\x0b\xce\x0b\xce\x0b\xce\x0b\xce\x0b\xce\x0b\xce\x0b\xce\x0b\xce\xdb\x4b\x9c\xf7\xbb\x11\x12\x95\x04\xb1\x52\x36\xac\xac\x5a\xd0\x8b\xf9\xb1\xb5\x71\x89\x75\xbf\x16\xa1\x7f\x18\x21\xbb\x3c\xbf\x5d\x91\xbf\x05\xc3\xdc\x87\xf2\x5a\x39\xe5\xde\xb0\x38\x0e\x84\xdb\x00\xe1\x7e\x37\x4e\x66\xdb\x51\x06\xca\xc9\x0a\xfa\xef\xe2\xf4\x1d\x8d\xeb\x3f\xdd\x13\x50\xff\x29\xbe\x7f\x1d\x85\x9f\xda\x5c\xf1\xe9\xb5\xe4\x94\x18\xff\x23\xe4\x10\x1f\xff\x31\x32\x4a\xf6\xaf\x23\xd5\x6d\x28\x05\x0d\xa9\xbd\xbf\x2e\x1f\xd8\x66\xaa\xaf\xd4\xc9\x7d\x1b\xfd\xda\xf6\x86\x13\x13\x0d\xae\xf1\x14\x4f\xac\xaf\xb8\x53\x9b\xeb\xaa\x70\x4a\x5d\x95\x7d\x7c\x7d\xf3\x83\x84\xe3\x28\xe7\xd4\x62\x39\xa7\x77\xf7\xdd\xb4\x70\x98\x14\xe5\x9a\x4e\x90\x09\xb7\x5c\x53\x17\x25\x0c\xaf\xb9\xdf\x0d\x09\x13\xff\x68\xe3\xca\x4d\xb7\xfb\x2a\x37\xc5\x47\xd7\x55\xb2\x09\xb5\x9a\x5e\x0e\x62\x06\xb5\x9a\x50\xab\x09\xb5\x9a\x50\xab\x09\xb5\x9a\x36\xbc\x56\x53\x68\xfd\xa4\x26\x75\x86\x86\x2a\x41\xa8\x42\x91\x7e\x7b\xe3\x22\x4d\x7b\x9a\x28\xd2\x14\x1f\x59\x4f\x75\x26\x94\x65\x42\x59\x26\x94\x65\x42\x59\xa6\x4d\x5a\x96\xe9\xb5\xc1\x21\xda\x37\x79\x4e\x6d\xba\x1e\x53\x37\xce\x92\x99\x24\x19\xa3\xa3\xb1\xfd\x4e\x5e\xe1\x9d\xd5\x85\x98\x5e\x16\x15\x98\xde\x31\x6c\xfb\xd0\xd6\xab\xc0\x24\xc1\x6b\xc3\x3a\x4c\xbf\x3b\x44\x7f\xec\x16\xb2\xcb\x57\x87\x49\xee\x9d\x9b\xb4\x1a\xd3\xc3\x35\xd5\x98\xc4\xfb\x6c\xb2\x9a\x4c\xdd\x77\xb5\x0d\xab\x99\x74\x35\x17\xfe\xe1\xa6\xe8\xe9\x56\x8b\x36\xd9\x5f\x2e\xdc\x6b\xe1\x5e\x0b\xf7\x5a\xb8\xd7\xc2\xbd\x16\xee\xb5\x70\xaf\x85\x7b\x2d\xdc\x6b\xe1\x5e\x0b\xf7\x5a\xb8\xd7\xc2\xbd\xb6\xbb\xee\xb5\xa8\xcc\x04\xd7\x5c\xb8\xe6\xc2\x35\xb7\x25\xd7\xdc\x9f\xbb\x9b\x1c\x67\x53\x37\xb6\x16\xe8\xf8\xc9\x3e\x38\xdd\xf9\xe3\xf3\x63\x25\xd3\x78\xee\xc6\xd8\xff\xc6\x64\xcd\xf3\xf4\x9b\x77\xd1\x9f\x8d\x90\x6d\x59\xc3\xe4\x55\x9a\x86\xb2\x46\xb1\xc8\xc4\xde\xd9\xe9\x4b\x2e\xf7\x29\x1b\x0a\xbf\x89\x17\x68\x12\xad\xc5\x13\xf2\xca\x49\xc3\xd4\x16\x93\x67\xb5\xb2\x6b\xbd\x93\x97\xcc\xb1\x5b\x2e\xeb\xe5\x95\x39\xb5\xbc\x32\xde\x1f\x1f\x8b\x0b\xe4\x76\x24\x98\x8c\xef\x16\x2c\xee\x6e\xb2\x8b\xb3\xb8\xdb\xc9\x2b\x3e\xd6\xb7\x9d\xc8\x35\x64\xe3\xb3\x87\xea\xe3\x33\x42\xb7\xcb\x2e\x91\xab\x4f\x84\x03\xb4\x71\x7a\x40\x02\xb4\x58\xcc\x2e\x47\xe4\xe9\xb7\xf4\x14\xf2\x45\xad\x47\xeb\x8e\xd4\xdc\x13\xeb\x1a\xa9\xb9\xca\x7a\x46\xaa\xe1\x80\x84\x82\xc6\xb6\x8d\x54\x73\xe3\xe3\x8e\x67\xec\x43\x9e\x91\x1a\x76\x46\xea\xe2\x42\xc8\x50\x8d\xf9\x87\xca\xb0\xba\x37\x56\x9d\x59\x32\x4d\x4c\x41\xfc\xdf\x79\xc6\x6a\xbf\x3d\x56\x53\xd3\xb3\xd3\x97\xa6\x1b\x8f\x56\xd2\x37\x5a\xc2\xc3\x6d\xf3\xad\xad\xf5\x0e\xe9\xf8\x47\x3c\xe3\x35\x62\x8f\xd7\xc5\xb9\x4b\xe7\x2f\x5e\x58\x68\x3c\x60\xe3\xbe\x01\x93\x8d\xbf\xfc\x57\xd8\x44\xdd\xaf\xf1\xdc\x74\x6a\x6a\x3d\x5f\xe3\x39\x4d\xcd\x6d\xbe\xd5\x55\x5f\x3e\x05\x0f\x6d\xfa\xe7\x3d\x63\x15\x77\x24\x57\xea\xd2\xe4\xb9\xc6\x83\x75\xc0\x2f\xba\xd8\x46\xfd\xf2\x5f\x59\x99\x33\xe4\x14\x3d\x11\x9b\x70\xce\x2e\x0f\x7a\xcf\x2e\x75\x1e\xb0\x11\xc6\xe0\x43\xe4\x11\x9a\x8c\x8d\x39\x4f\xb8\x8b\xfd\xaf\xad\xc5\xd9\x3a\x56\x8c\xff\xe6\xbd\xed\xf3\x11\xf2\x9b\x11\xfa\x1b\x91\xe8\xa7\x9d\xb3\xc0\x87\x23\x6c\xe2\x38\x35\x58\xd1\x94\x92\x6a\x72\xee\xf3\xc4\xfc\xac\x3c\xea\xca\x23\xb6\x22\x35\x2e\x45\x2b\xe6\x4a\x86\x5e\x2c\x5b\xac\xe7\xcb\xcb\xfa\x73\x9a\x25\xf4\x3e\x8f\x49\x82\xe9\xcf\x96\xe6\x28\xc0\xd9\x8a\x69\xb2\x53\xa6\x58\x5f\xf6\xd1\xa9\x6c\xd8\x6d\x72\x17\x05\x45\x7b\x4e\x5d\x2d\x15\x24\x0f\xbf\xbe\x62\x14\x1c\x22\xc5\x7a\xc3\x0f\x18\xe5\x72\x69\x62\x6c\xac\x60\x64\xd5\xc2\x8a\x61\x95\xeb\xe8\x88\x6c\x66\x47\xad\x1b\x56\x59\x5b\x75\x75\x44\xad\xa0\x5a\x65\x3d\x6b\x69\xaa\x99\x5d\x19\x2d\x18\xf9\xbc\x5e\xcc\x8f\x5d\x11\xff\x7d\xfa\xd9\x93\x15\x4b\x33\x27\xae\xe9\xab\xd9\x95\x1b\x09\xc5\x1e\x8d\xfa\x3f\x8b\x21\xf5\x5a\xd1\xbf\x30\x4c\x26\xec\x8e\x08\x63\x79\x50\xac\x92\x9c\x95\x67\x2b\x46\x59\x75\x4c\xe8\x6f\x1b\xa6\xff\x7d\xc0\xfd\x3a\x9b\x32\x9b\xdb\xf6\x8c\xc7\x59\x4b\x3d\x61\x36\x8f\xf1\xc7\x09\x31\xe1\xf1\x78\xf3\xf6\xb3\xf7\x8d\xe6\xdd\x2f\x3f\x10\x6a\x34\xbf\x18\x2e\x04\x47\x68\x5c\x3a\xb3\x78\x47\x3b\x40\x87\x85\x7d\x1c\xf6\x71\xd8\xc7\x61\x1f\x87\x7d\x1c\xf6\x71\xd8\xc7\x61\x1f\x87\x7d\x1c\xf6\x71\xd8\xc7\x61\x1f\x87\x7d\xbc\x97\xec\xe3\xbe\x93\xdc\xcb\x21\xd4\x00\x16\x78\x58\xe0\x61\x81\xdf\x44\x16\xf8\xcf\x0c\x91\xa3\xc1\xc9\xb1\x04\xe6\xe4\x74\xcc\x28\x96\xd5\x42\xc9\xc8\xd9\x97\x69\xa6\x45\x7f\x6c\x88\xfe\xc0\x2d\xf5\x53\x67\xbd\xb1\xc9\xe4\xfa\xe7\x9c\xb6\xe7\x8c\x5c\xca\x69\xbb\x4d\xb9\xf5\xd3\x22\xb7\x7e\x4d\xa6\xae\x80\xa7\xce\xea\x56\x79\xc6\x30\x53\x85\x82\x83\x36\x11\x02\x54\xc7\x62\xd3\x4c\xfe\xfb\xab\xf9\x70\xa2\x39\x45\xd3\x76\x4a\x7e\x77\x8a\xa4\x7d\x27\x60\x8a\x3c\xb8\x53\x4c\x25\x48\x27\x48\x27\x48\x27\x48\x27\x48\x27\x48\x27\x48\x27\x48\x27\x48\x27\x48\x27\x48\x27\x48\x27\x48\x27\x12\xed\x83\x25\x82\x25\x82\x25\x76\x8d\x25\x7e\x3b\x42\xee\x17\x2c\x31\xab\x99\xb2\x15\xcd\x5b\xa9\x93\xf2\x05\x4d\xee\xf0\xfe\x7c\x65\xad\x41\x9e\xfd\xfb\xf3\x5a\x79\xd2\x73\xf1\x22\x72\xec\x07\xe4\xd8\xff\xad\x2b\xe4\x44\xa3\xb1\x17\x3c\xd7\xfb\x9b\x9e\x2f\xea\xc5\xbc\xbd\x51\xd2\xb7\x5c\xa1\x7f\xb5\x8f\xdc\x55\x35\x35\x02\xe6\x1e\x11\x3a\xbb\x29\xb5\x0d\x7b\x3b\xb2\xbd\x54\x3d\x33\xb4\x20\x5a\x9d\x17\xad\xc6\x0f\xb0\x1b\xfd\x13\xc8\x5b\x0c\xbc\xa3\xc7\x69\x6b\x1a\xac\x11\xac\x31\x0d\xd6\x08\xd6\x08\xd6\x08\xd6\xb8\x65\x58\x63\xba\x67\x58\x63\xdb\x7b\xd2\x32\x6b\x4c\x83\x35\x82\x35\x82\x35\x82\x35\x82\x35\x76\x9f\x35\xa6\xb7\x34\x1a\x4c\x03\x0d\x76\x0e\x0d\xa6\x7b\x1d\x0d\xa6\x37\x21\x1a\xcc\xdc\x20\xcf\x08\x2e\x76\x99\x3c\xc1\xb9\xd8\x45\xf2\x18\x79\x34\x30\x6d\xbc\x8f\x61\x49\x0a\x95\x08\x84\x46\xcd\x00\xb2\xab\xcf\x86\xbb\xa3\x5d\xa0\xb3\xd2\x1d\xad\x0e\x43\x93\x6e\x69\x81\x9d\xf0\xc6\xe1\x0a\xc7\xb4\xab\x0f\xd4\x77\x93\xdb\x46\x6f\xe1\x1e\x72\xb1\x9f\x23\x01\xbc\x2d\x26\xf6\x2f\x45\x6d\x80\xd6\xc6\xc5\x35\x1b\x02\xd7\x04\x0b\x7b\x9a\x7c\x1f\x79\x6d\x55\x5d\x90\xf3\xe4\x6c\x9b\x26\x15\x65\x42\x50\x4c\xb1\xc5\x62\x8a\xff\x4f\x84\x3c\x29\xa4\xcd\x02\x79\x9c\x4b\x9b\x47\x49\xfb\x16\x26\xb9\x22\x0a\x2d\xbe\x86\x2c\xba\x85\x16\xdb\xfa\x80\xd7\x89\x3a\x4d\xaf\x25\x97\x3d\x75\x9a\xda\xfa\x84\x30\x61\x19\x2c\xb9\x4a\x86\x55\x26\x1b\x20\x4c\xe3\xef\x1a\x0d\x10\x96\x09\x59\xbf\xcb\x53\x0c\xcd\x58\x6e\x20\x38\x4f\x88\xeb\xeb\x09\x4e\xa7\x85\x6e\x89\xd0\xce\xd4\x87\x04\x9f\x06\x9f\x06\x9f\x06\x9f\xde\x3a\x7c\x1a\xba\x62\x88\xae\xd8\x3b\x00\x1f\xb5\x79\xbb\x52\x9b\x17\x76\x12\xd8\x49\x60\x27\x81\x9d\x04\x76\x92\x2d\x6d\x27\x41\x89\x76\x94\x68\x47\x89\xf6\x4e\x95\x68\x87\x19\x12\x66\xc8\xad\x6a\x86\xcc\xe4\xc9\xac\x80\xec\xd3\x64\x92\x43\xf6\x93\xe4\x38\x39\xd6\x02\xbc\x5c\x28\xab\xe5\x8a\xd5\x8b\x06\xbc\x78\x7d\x0c\xbe\x8b\xde\x29\x04\x88\x2b\xdc\x49\xfb\x8b\x36\xbf\x67\x88\x1c\x6e\xad\x68\x33\xfd\xc6\x20\xfd\xbd\x81\xfa\xd5\x9a\x6f\x34\x97\x96\xa5\xfd\xf5\x9a\x13\xf1\xa1\x66\x2a\x2e\xcf\xea\x3d\x1f\x04\xd0\xbb\x29\x57\x9a\xab\xbc\x5c\x5b\x4c\x79\x5d\xb5\x98\x91\x6f\x05\x31\x10\xc8\xb7\x02\x1b\x13\x6c\x4c\xb0\x31\x6d\x21\x1b\x13\xf2\xad\x20\xdf\x0a\xd8\x3e\xd8\x3e\xd8\x3e\xd8\x7e\x4f\xb0\x7d\xe4\x5b\x41\xbe\x95\xcd\x42\x33\x91\x6f\xa5\x13\xf9\x56\xfe\x7c\x88\x8c\x4b\x42\x58\x36\x4c\x35\xaf\x55\xa7\xfb\x10\x74\x30\x6b\xe9\x45\x23\xe7\x54\x50\xa6\xbf\x38\x44\xff\x7a\x80\xdc\x21\xef\x71\xfc\x68\x7f\xa1\x99\x82\x74\x93\x0b\xe7\x2f\x18\x39\xad\x27\x4a\xd1\x45\x05\x4f\x14\xaf\x61\xbb\xf0\x8a\xfe\x81\x20\xd6\x12\xc4\xd0\x12\x74\x4f\x86\xd3\xc3\x23\xf4\x50\x0d\x25\xb7\xe1\xa1\x6f\x09\xda\xb0\x5d\x4c\x07\x98\x21\x98\x21\x98\x21\x98\x21\x98\x21\x98\x21\x98\x21\x98\x21\x98\x21\x98\x21\x98\x21\x98\x21\x98\x61\xb7\x99\xe1\x41\x32\x4e\x0f\xc4\x12\x4e\x45\xb9\x5d\xde\x6a\x74\xf2\xb4\x56\x5b\x87\x0e\xa4\x11\xa4\x11\xa4\x71\x0b\x93\xc6\xbf\x19\x22\xe7\x65\x95\xb8\x1c\x53\x80\x75\xa3\x68\x6a\x79\x9d\x7d\x97\x1c\x8d\xb8\x29\x9e\x05\x72\x5c\xad\x94\x55\xa6\xdd\x5c\xd7\x96\x56\x0c\xe3\x9a\xef\xbc\x68\xd1\x9f\x1e\xa2\x6f\xbf\x85\xbc\xba\x6e\x53\x57\xd6\x92\xd1\x17\x9a\xac\x1d\xf7\x98\x7c\xca\x65\xf1\x94\x49\xef\x53\xda\xe4\xb3\x78\x42\x14\x90\xab\xd7\xd3\xc5\x64\xa3\xe7\xc3\x8f\xf1\x26\xfc\x18\x9f\x0b\x27\x91\x4f\xd0\x05\x81\x18\x1b\x4d\x82\xd7\xa5\xd7\xe6\x94\x8d\x16\x30\x38\x25\x38\x25\x38\x25\x38\x25\x38\x25\x38\x25\x38\x25\x38\x25\x38\x25\x38\x25\x38\x25\x38\x25\x38\x25\x7c\x1b\x41\x1c\x41\x1c\x41\x1c\xbb\x47\x1c\x23\xe4\x6e\x49\x1c\x65\xed\x7f\xbd\x98\xe7\x35\xe4\xbe\x18\xa1\x5f\x88\x90\x57\x7a\xfe\xdc\xb0\x84\xdc\xee\xbc\x56\x4e\xb9\xd7\xa2\x82\x5c\x50\x05\xb9\x5f\x19\x26\x17\xeb\x8c\xf8\xf8\x92\x56\x56\xc7\x25\xd7\x2d\xaa\xab\x9a\x55\x52\xb3\xb6\x33\x29\xff\xf7\xf3\x63\xbc\x25\xa3\x58\x56\x0b\x25\x23\x67\xdf\xad\x99\x16\xfd\x8b\x21\xfa\x9d\x01\xb2\xcb\x37\x57\xa2\xc1\xe8\x1b\x9b\x84\xbc\xe7\x9c\xb6\xe7\x8c\x5c\xca\x69\xbb\xbd\x7c\xd7\xb3\x3e\x44\xf7\x2e\xd8\x2f\x97\x0b\x78\x3e\xf8\x6e\x7d\xbe\x9b\x0f\x47\xb7\x53\x34\x6d\xb3\x58\x77\xdc\xa5\xc3\x68\xc0\x68\x7b\x40\xae\x98\x1f\xd2\x14\x48\x06\xce\x05\xce\x05\xce\x05\xce\x05\xce\x05\xce\x05\xce\x05\xce\x05\xce\x05\xce\x05\xce\x05\xce\x05\xce\xed\x32\xce\x7d\x1d\x79\x86\x3e\x15\x7b\xd2\x71\x3b\x9d\x90\x4f\x16\xb5\x89\x98\x82\x53\x29\xaf\x28\x56\xd6\x28\x69\x23\x8a\x55\xc9\xae\xb0\xd1\xe7\x1a\xac\xa6\xae\x0a\xfc\x54\x32\x0d\xfe\xa6\xb1\xdb\x1c\xf0\x00\x17\x55\x00\x63\x00\x63\x00\x63\x0e\x8c\xff\x7a\x1f\xb9\x47\xe0\xcb\x25\x8e\x2a\xd7\x92\x63\x59\xd3\x28\x5e\x35\x96\x2c\xfa\x85\x7d\xf4\x53\xfd\x64\x3b\xff\xe1\xca\x5a\x32\xba\x57\x28\x9a\xa6\xdc\x22\x6d\x19\xea\x04\xb9\x9b\x46\x31\x63\x2c\xc5\x63\xec\xb2\x34\xbb\x64\x31\x29\xff\x36\x63\x98\xa9\x42\xc1\xa1\x83\xed\x03\xc8\x1d\x42\x80\xdf\x47\xce\x08\x04\x78\x8c\x1c\xe1\x08\x30\x49\xc6\xc8\x68\x60\x19\x31\x3e\x42\x89\xb5\x64\x42\xbe\x6e\x53\x95\x15\x43\xca\x1c\x5e\x9d\x0d\x47\x82\xc3\x74\x50\x22\x41\xde\x03\x3b\x7a\x5c\x74\xc2\xe7\xc5\x09\xa4\x07\xa4\x07\xa4\x07\xa4\x07\xa4\x07\xa4\x07\xa4\x07\xa4\x07\xa4\x07\xa4\x07\xa4\x07\xa4\x07\xa4\x07\x0f\x4d\x00\x37\x00\x37\x00\xb7\x6e\x01\xb7\x0f\x0d\x93\xb4\x00\x6e\xe6\x92\x9a\x4d\xd8\x5c\xa8\x2a\x20\xdc\x57\xa7\x26\x5b\xa8\x58\x65\x76\x7c\x29\xb8\xd9\x28\xff\x64\x88\xfe\xd4\x2d\x24\xca\xda\x48\x79\x9b\x70\x4b\xd6\x7c\xac\xa9\xc4\x94\xa2\xe9\x79\xa3\xd0\x1b\xc9\x29\x87\xf9\xe3\xe6\xab\xdf\xca\xae\x79\xe3\xe9\x6e\xaf\x23\xc4\x9e\xcc\x55\x79\x35\x9c\x29\x9e\xa5\xd3\x92\x29\x06\xae\x4f\x9b\x33\xba\x93\x41\x6a\x8b\xe3\x80\x38\x82\x38\x82\x38\x82\x38\x82\x38\x82\x38\x82\x38\x82\x38\x82\x38\x82\x38\x82\x38\x82\x38\x82\x38\x76\x99\x38\x1e\x25\x87\xe9\xc1\xd8\xb8\xe3\x44\x78\x8f\x2f\x77\xa5\x7b\x86\x43\xfe\x4a\xb0\x4a\xb0\x4a\xb0\x4a\x0f\xab\xfc\x8b\x3b\xc9\x01\x36\x75\x63\x6b\xc9\xa0\x18\xe6\x92\x91\xb3\x99\xe4\x58\xc9\x34\x9e\xbb\x41\x7f\xe9\x4e\xfa\xb6\x08\xd9\x96\x35\x4c\xed\xca\x5a\x32\xfa\x70\xd6\x28\x16\x99\xa4\x3b\x3b\x7d\xc9\x45\x3d\x65\x43\xe1\x57\xf3\xa2\xd9\x46\x2e\x1e\x93\x57\x4d\x1a\xa6\xb6\x98\x3c\xab\x95\xdd\x48\xe2\x39\x23\x37\xc7\x2e\x1d\xef\x8f\x8f\xc5\x05\x5b\x3b\x42\x76\x0b\xb6\x76\x37\xd9\xc5\xd9\xda\xed\xe4\x15\x1f\xeb\xdb\x4e\xe4\x7a\x08\xe5\x64\x8f\x87\x63\xb0\x04\x1d\x91\x18\x2c\x16\xb3\xeb\x39\xcb\x8e\x5c\xe4\xc4\xc2\xf2\xf9\xd7\x5d\x7d\xa8\x3e\x7a\x23\x74\xbb\x7c\x33\x12\xad\x3b\x2a\x73\x4f\x34\x3d\x2a\x73\x95\x97\xe1\xa8\xc4\xde\xee\x19\x95\xbd\xce\xa8\x5c\x5c\x68\x30\x2c\x7b\xfc\xc3\x62\x58\xbd\x30\x2e\x75\x72\x66\x06\x8e\x51\x13\xe3\x12\xff\xb7\x9e\x71\x19\xb4\xc7\x65\x6a\x7a\x76\xfa\xd2\x74\xf0\xc8\xec\xf5\x8d\xcc\x14\x57\xe2\x3a\x3a\x36\xe1\x2f\xd2\x81\x65\x35\xfe\x4e\xcf\xd8\x0c\xd9\x63\x73\x71\xee\xd2\xf9\x8b\x17\x16\x82\x07\x67\x9f\x6f\x70\x64\xc3\x9b\x63\x74\xd6\xb3\xb8\x26\xea\x7e\x51\xe7\xa6\x53\x53\xcd\x7e\x51\xe7\x34\x35\xb7\x39\xc6\x65\x3d\xab\x26\xfd\x6f\x3c\xe3\xb2\xcf\x91\x34\xa9\x4b\x93\xe7\x82\x07\xe6\x61\xbf\xa8\x61\x3b\xe4\xe6\x18\x99\xf0\xf1\x70\xc7\x2e\x73\x82\x4c\xd0\xa3\xb1\xc3\xce\x11\xe1\x3e\xef\x11\xa1\xaa\x8d\xda\x63\x42\xe7\xa3\x94\x54\x72\x85\x3e\x1d\xfd\x3e\x5b\x6f\x4a\xcd\xa9\x65\x71\xb8\x5e\xd1\x94\x27\xe6\x67\x15\xf6\x58\xae\x2b\x5a\x9a\xa3\xec\x65\x2b\xa6\xc9\xce\x53\x62\x3a\xed\x63\x02\x9b\x5f\x23\x97\x88\xf1\x9e\x7a\xf4\x47\xfa\xcb\xc3\xe4\xa0\xad\xea\x34\x4c\xda\xc2\x4e\x18\x7a\xd6\x35\xc4\xfe\xcf\x21\xfa\xe5\x01\x77\x61\x35\x55\x0e\x70\x41\xb4\xd1\x13\x16\xd7\xdd\xfc\x71\x62\x7d\xbb\x4b\x5b\xf6\x10\x46\xd6\x16\x8c\xac\xe7\xc3\x3f\xd0\x7d\xf4\xe1\x6a\xd1\x25\x47\x1c\x51\x1b\xb0\xa1\xc2\x86\x0a\x1b\x2a\x6c\xa8\xb0\xa1\xc2\x86\x0a\x1b\x2a\x6c\xa8\xb0\xa1\xc2\x86\x0a\x1b\x2a\x6c\xa8\x1b\x69\x43\x6d\x58\xff\x4f\x9e\xdc\x36\x02\x8c\xc0\x42\x0b\x0b\x2d\x2c\xb4\x5b\xd8\x42\xfb\xaf\xa3\x24\xe5\x4f\xdf\xb2\xa4\x95\xd5\x40\x6b\xad\x9d\xda\xc5\xb6\xd8\x5a\x65\xb5\x5c\xb1\xe8\x67\xee\xa5\x6f\xec\x27\xb7\xdb\x89\x5e\x78\x13\xd1\x87\x4d\x4d\xcd\x29\xe2\x0a\x7b\xb8\x5d\x9d\xc0\x4e\xf6\x32\xc8\xae\x92\xc9\x5e\xf8\x7d\x2e\x43\x94\x97\x2c\xf0\x16\xda\x97\x32\x9c\x83\xbf\xa7\x48\x4a\x80\xbf\x09\x72\x94\x83\xbf\x71\x72\x80\x24\x42\x13\xb4\xf0\x1e\xda\x59\x5a\xda\x6b\x10\x0d\xc9\xc0\xc2\x9f\x4c\xae\xde\x5f\x1f\x1e\xde\x4a\x07\xf2\x5a\x99\x44\xbf\xb0\xbd\x7a\x16\x06\x4d\xad\x54\x50\xb3\x5a\xe8\x44\xc4\xe5\x85\x5d\x9f\x8b\xf4\x14\x49\x93\x33\x74\x60\xc9\xc8\xdd\x88\xf2\xff\x55\xfa\xe2\xeb\x9e\x8c\xf4\xbb\x23\xe4\x9d\x11\xfa\x13\x91\xe8\xdb\x1d\xd9\xfb\xad\xbe\xcb\x6c\x13\x93\xbb\xfa\x08\xcf\x79\x9e\x65\x67\x77\x21\x2c\x7d\x27\x49\x2f\x5d\x5c\xd2\x94\x12\x1b\x79\xa6\xbe\x27\x94\x54\x51\xd1\x8b\x82\xe1\x18\xa6\x52\x29\x3a\x18\x28\xa7\xe4\xcc\x1b\xf3\x95\xa2\x92\xd3\x4d\x8d\x49\x08\xcd\x61\x0b\x4c\x45\xe0\x3a\x98\x84\x2b\xf6\x51\x4a\x1e\x67\x95\xe5\x8a\xc9\xd5\xf5\x92\x69\x64\x35\x8b\x2b\x4b\x72\x62\xe4\x6e\x97\x50\x16\xf9\x13\xf9\x31\x88\x6b\x37\x13\xca\xa8\x92\x2a\x14\x26\xb8\x2a\x94\x33\x6f\x28\x66\xa5\xc8\x26\x95\x89\x14\x5b\xff\x93\xcd\x69\xb9\xd8\xad\xa2\x6b\x1e\xf9\x99\x7e\x47\x84\xbc\x2d\x42\xdf\x1a\x89\xbe\xd9\x19\xa0\x6f\xf6\x71\xed\xf9\x31\xb5\xa8\xe6\x35\x53\x9c\x03\x85\x72\x61\x59\x46\x56\xe7\xaa\x8d\x73\xe2\x52\xf9\x91\xd5\x30\x15\xa6\xf9\x96\x6f\x38\xba\xde\xaa\x7a\x8d\xf5\xbf\xbc\xa2\x59\x9a\x2d\xe4\x98\xe0\xb5\x59\x18\xc7\x41\x4b\x9a\xc2\xc5\x2b\x3f\x5d\x19\xa6\x92\x1c\x3f\xca\xae\x35\xd5\x2c\x87\x76\x05\xa3\x98\x17\x22\x8d\x9f\x80\x98\xb2\xaa\xea\x45\xa1\x69\xf0\x13\x86\x7b\x2d\x07\x19\x12\x29\xb2\x73\xb1\xbd\x4d\xe5\x8d\x82\x5a\xcc\x27\x0c\x33\x3f\x56\xba\x96\x1f\xab\x14\xf5\xac\x91\xd3\xc6\xf6\x9c\xb7\xe6\x58\x2b\x89\xd8\x0e\xef\xbb\x7a\x37\x96\xf7\xf5\xb5\x43\x18\xcc\xb0\x26\x92\xf4\x34\x39\x49\xb6\x4d\x0a\x7d\xbe\x23\x42\x25\x58\x02\x94\x2a\xeb\xb4\xee\x05\x8a\x19\x9f\x48\x4a\xbf\x61\x47\xb5\x50\x39\x50\x52\x4d\x76\xf0\x66\x87\x55\xbe\x1d\x85\x4a\x97\xa1\x12\xe7\xd3\xdd\x94\x2d\xf7\x55\x37\x34\xca\xfb\xb0\x9f\x57\x89\xd8\xed\xfd\x71\x55\x33\xf3\x9a\xf7\xd7\x7d\xde\x5f\x79\xb1\x52\x2d\xaf\x67\x47\x6b\xae\xf3\xb5\xc2\xfe\x7d\x43\xfe\xca\x7a\x99\xbe\x40\x66\x49\xa6\x4a\xae\x4d\x90\xa3\x2d\x58\x97\xb8\xdd\x18\x12\x2e\x4c\xc2\x7d\xa4\x9f\x7c\xb8\x9f\x7e\xa8\x3f\xfa\x01\xc7\xda\xf5\xc6\xfe\xad\x23\xe1\xaa\x78\x08\x1b\x67\xce\xf7\x39\xb3\x63\x8b\xd3\xb5\xf2\x0d\x05\x2c\xdc\x61\x0e\xba\x85\x39\x48\x2d\xf0\x3b\x8b\x46\x71\x54\xdc\xcd\xaf\xe0\xe6\x40\x4b\x19\xca\x58\x46\x71\x4e\x98\xbb\x1e\x63\x9f\x85\xfc\xf7\x82\xfd\xb1\xb8\x7f\x1c\x0e\x16\xbd\xe9\x97\xfa\xc8\x67\xfb\xe8\x8b\x7d\xd1\x4f\x3a\x2a\xf3\x07\xfb\x66\x0c\x76\x02\xd4\x2d\x25\x6f\xf0\x61\x37\x94\xd8\x32\xfb\x53\x4c\x49\xf9\xde\x82\x1f\x86\x56\x35\xb5\x68\x29\x15\xcb\x05\xfb\xa3\x6a\x96\xbf\x38\x37\x97\x14\xf4\xac\x40\xfa\x9c\xe0\x2a\xc6\x75\x39\xa6\xc2\x9c\x50\xd2\x8c\x52\x41\x4b\x28\xe2\x89\xdc\x3e\x69\xcf\x25\x3f\x94\xd4\x1d\x00\xe7\xf1\xb1\x5b\x78\xb7\x7c\xb6\xb6\xae\xe8\x95\xc1\x16\xe4\x92\xb0\x20\xb7\x5f\xf1\x6c\x4c\x30\xe4\x6d\x2f\x07\x82\x41\x5f\x1c\x24\xc3\xe2\x44\x54\x32\x0a\x7a\xf6\x86\x73\x24\x2a\x19\xb9\x9c\x6e\x99\x15\xfe\x71\x2c\x55\x72\x79\xad\x6c\xd1\x9f\x1c\xa4\x6f\x19\x20\xaf\x14\x97\x3a\xfb\x63\xb2\x71\xa2\xcb\x39\x23\x37\xe5\xb4\x94\xe6\x2d\xc5\x0f\xb2\x5b\xe6\x78\x33\x72\x83\xac\x73\xd5\x66\x4b\x83\xb9\x4a\xe6\xc5\xd7\xf0\x28\x39\xcf\xbf\x86\x49\x92\x22\xa7\x03\xbf\x06\x31\x8a\xce\xe7\x50\x67\x00\x9a\x4a\x8c\xf9\x4c\xf8\xea\x3f\x4e\x8f\xc9\xd5\x2f\x9e\xe9\xba\x7f\x55\x3f\xb1\xce\x19\x2c\x24\xf1\x26\x9c\x2e\xe0\x74\x01\xa7\x0b\x38\x5d\xc0\xe9\x02\x4e\x17\x70\xba\x80\xd3\x05\x9c\x2e\xe0\x74\x01\xa7\x0b\x38\x5d\xc0\xe9\x02\xa9\x32\xe1\xdc\x00\xe7\x06\x38\x37\x74\xcb\xb9\xe1\x03\x03\x44\xb1\x63\xb2\xb2\xc6\x6a\xc9\x28\xb2\x0d\x8f\x9b\x99\xdc\xf8\xab\x1f\x1c\xa0\x7f\xe3\x09\xec\x8b\x71\xaf\x85\x2a\x23\x96\x7d\xaf\x30\x51\xc5\xef\x65\xd7\x88\x88\xa7\xaa\x9f\xda\xec\xa5\xf0\x0c\x99\x14\xfc\xec\x04\x99\xe0\xfc\xec\x20\x19\x27\x07\x02\xf9\x19\x7b\x07\x5e\x45\xc6\xdf\xa9\x9b\x30\x29\xe6\xb5\x96\x43\x29\xab\x3b\xe1\x8b\x4b\x6a\x18\x30\x58\x75\x67\xe7\xf3\x8a\xd0\x7f\xfd\x0a\x72\xd8\xa9\xc1\x5e\x2f\x9d\xea\x98\xa5\x15\x96\xad\x0a\xdf\xb9\xd4\x6c\x56\xb3\x2c\x76\xba\xd4\xae\x5b\xf4\x77\x49\xec\x53\xb7\x90\x9d\x6a\x55\x0e\xd5\xa8\x54\x2f\x14\x55\x59\xd0\x0a\xcb\x0b\xe2\xd6\x14\xbf\x75\x9e\xdf\x1a\x1f\x11\x57\x54\xe5\x29\x0d\xb8\xba\xcd\x2e\x17\x97\xc9\x13\x64\xa1\xca\x34\x39\x49\x52\x81\x2b\xcb\x3f\x2c\x6b\xc9\x44\x40\x37\x33\x1f\x88\x90\xd7\x0a\x43\xf8\x3c\x99\x73\x0d\xe1\xd3\xa4\x1d\xad\x93\x27\x59\xd3\xe3\x74\x81\x3c\x4e\xb6\xb3\x1f\x4a\x6d\x6c\x3b\xe8\x23\x21\x97\xc4\x27\xf8\x18\x79\x94\x7f\x82\xed\x79\x5c\x78\x11\xa7\x92\x61\x95\xc9\xd5\x6b\xe1\xdf\xde\x39\x3a\xe3\xd6\x75\x0f\xca\xb5\x1a\xf4\xd6\xbe\xaf\x12\x06\xe6\xc6\x06\xe6\x0c\x5c\x68\x02\x5c\x68\xda\x2e\x91\x7f\x6d\x48\x64\x8e\xf1\x94\x95\x6b\x18\x55\xcd\xeb\xcd\xfd\x9f\x43\xf4\xa7\x06\x3c\xf5\xe6\x0c\x79\x18\x2d\xe6\xf4\x35\x3d\x57\x51\x0b\xbe\xa8\x6a\x07\xfc\x64\x8c\xa5\xb6\x44\x52\x27\xe2\xf7\x5f\xf7\x78\xb9\xb8\x0e\x2e\xb2\xa2\x5b\xaf\x5b\xeb\x36\x22\x18\x7a\x4f\x7d\xf9\xb7\x83\x12\xde\x31\x51\xc9\xee\x5c\xb8\x10\xdc\x4b\xf7\xd4\x31\x67\xa3\x8a\x1d\x4c\x73\x30\xcd\xc1\x34\x07\xd3\x1c\x4c\x73\x30\xcd\xc1\x34\x07\xd3\x1c\x4c\x73\x30\xcd\xc1\x34\x07\xd3\xdc\x06\x9b\xe6\x36\x9f\x5f\x30\x8c\x7f\x30\xfe\xc1\xf8\xb7\x89\x8c\x7f\xef\x7f\xda\xf6\xe3\x2f\x6a\xe5\xeb\x86\x79\x8d\xe9\x83\xae\x41\x47\x2f\xe6\x4d\xcd\xb2\xb2\x05\xd5\xb2\x34\x8b\xfe\xf3\x53\xf4\x5d\xfb\xc8\xed\xee\xa5\x57\xd6\x92\xd1\x78\x63\x37\xfe\xf3\xa2\x89\x49\xd6\x44\x7c\x37\xbb\xf6\x82\x73\xfb\x62\xd2\xfb\x6b\x8f\x93\xbf\x34\xb0\x18\xb0\x58\x1a\x58\x0c\x58\x0c\x58\x0c\x58\x6c\xcb\x60\xb1\x74\xcf\x60\xb1\xb6\xf7\xa4\x65\x2c\x96\x06\x16\x03\x16\x03\x16\x03\x16\x03\x16\xeb\x3e\x16\x4b\x6f\x69\xc6\x94\x06\x63\xea\x1c\x63\x4a\xf7\x3a\x63\x4a\x6f\x42\xc6\x94\xd1\x48\x46\x78\x4c\x4d\x92\x14\xf7\x98\x3a\x4e\x8e\x91\x23\x81\xce\xa1\x1e\x10\xb5\x96\x4c\x78\x01\x51\x53\x79\x0d\x9e\x0e\x77\x83\x9a\xa0\x47\x85\xe7\x93\xb7\xf1\x7a\x55\x5b\x6a\x98\x58\x68\x5a\x83\xd8\x7b\x6e\xab\xe6\x63\xaf\xb2\x7d\x9c\x8b\x7e\x16\xf6\x80\xf8\x7b\xc7\x69\x98\x80\x57\xe7\xc9\x59\x32\x5d\xe5\xcb\x7c\x88\x3c\xd2\xc2\x2c\x20\xc3\x12\x72\xc8\xb5\xe8\x00\xfb\x2f\x7d\x22\x01\xdc\x01\x9e\x00\x8e\x89\x82\x23\xa4\xb5\x45\x48\x1e\x15\xfe\xf3\x53\x24\xed\xfa\xcf\xb7\xdc\xd8\xac\xf0\x98\x9f\x26\x93\x1e\x8f\xf9\x96\x5b\x6b\x8f\x84\x0a\x14\x41\x21\xa2\x2b\xcc\x59\x3e\xfe\xf5\x91\x6a\x09\xf5\x90\x50\x8e\x95\xac\x51\x60\x47\x5d\xb9\x75\xf9\x84\xd5\x90\xb8\xc4\x2b\xac\x26\x9d\xab\x3b\x28\xb6\x2e\x91\x79\x32\xe7\x15\x5b\xf1\x34\x39\xd3\x82\xb3\xad\x28\xd2\x27\x8b\x6b\x01\xe2\x02\xe2\x02\xe2\x02\xe2\x6e\x21\x88\x0b\x9d\x2d\x44\x67\xeb\x1d\xca\xfd\x8d\x08\xf9\x7a\x84\x7e\x35\x12\xfd\x8a\x33\x55\x1f\x8d\x5c\xf2\x9e\x2b\xf5\xa2\x62\x89\xb3\xa1\xb2\xa4\x2d\x0b\x93\xb0\xc3\x5f\xdc\x2d\x4b\x7e\x25\x7c\xb0\x3c\xda\x61\xd1\x28\x8e\x16\xb5\xbc\xca\xa7\x44\x1e\x2d\xbd\x5a\xa4\x20\xb1\xce\x62\x90\xba\x81\xbe\xba\xaa\xe5\x98\x9e\x5a\xb8\xe1\xda\x6a\x5d\xd1\xae\x17\x46\xe4\x89\x93\xbf\xae\x92\x37\xd5\x2c\x5f\x27\xba\x91\x73\x36\x1e\x77\x73\xe0\x66\x70\x7b\x5e\x2a\x16\xeb\xa4\x77\xa0\x54\x76\xa7\xfd\x42\xf2\x21\xcb\xe2\x7b\xb3\x9b\x48\x88\x7e\x8a\xc4\x96\x75\xfa\x18\xa3\xbc\x0b\x73\xbc\x07\xf5\x4e\xd2\x30\x26\xc0\x98\x00\x63\x02\x8c\x09\x30\x26\x6c\x69\x63\xc2\x6f\x47\xc8\x4b\x11\xfa\xd9\x48\xf4\x45\x67\xb7\x7d\x6f\x64\xca\x13\xe6\x5a\x2a\x68\xaa\xa5\x39\x9f\xfe\x9c\x69\x94\xd4\x3c\xdf\x87\x45\x1e\x5a\x9f\x2b\x91\x3d\xdd\x6e\x9c\x2c\x9b\xf0\x64\xe2\x48\x42\x59\x10\x72\x44\x6c\x92\x25\xad\xc8\x96\xa9\xbb\x8b\x68\x8a\x61\x96\x56\xd4\xa2\xed\xda\x64\x56\xb4\xb1\x65\xb5\x60\x6b\xff\x31\xf1\x6b\x4c\x59\xd6\x8b\x6a\x41\x7f\xbd\x2d\xbe\x97\x34\x45\xcd\x71\x32\x6f\x8c\x09\x50\x9b\x73\x55\x4b\xd1\xf8\xa0\xe5\xde\x24\xf4\xed\x84\x32\xad\x73\x91\xe4\xe9\xb8\x61\xd6\xbe\x99\x6b\x0d\x29\x0b\x75\x9f\x6b\x7f\x46\x79\x25\x11\xdb\x29\xfa\x33\x65\xbf\x88\xdf\x47\xea\x85\x01\xf2\xa6\x01\xfa\x86\x81\xe8\xf7\x1c\x47\xb9\x2f\xf7\x5f\x96\x72\x90\x2d\xd1\x15\xe3\xba\x92\x57\xcd\x25\x35\xef\x83\x0e\x8e\xa2\xa6\x99\xcb\x86\xb9\xca\xc6\xa2\x6e\x4f\x2f\x56\x3d\x3c\xb8\xa3\x5c\xad\xb1\x75\x12\x91\xc4\x96\xad\x88\x9c\x96\xd5\x73\xae\x62\xcd\xf7\x46\x91\xff\xda\x1e\x5d\xb6\x39\xc9\x9d\xc3\xde\xfd\x12\x9e\x61\xb4\xe5\xa6\x63\x82\x70\xdc\xe3\xfc\x0f\x4b\x28\x02\x27\x71\x59\xec\xd5\x56\x07\xc5\x3b\x0c\xb2\x33\x0f\xff\x97\x7f\x61\x58\xc7\x95\xc1\xb4\x9a\xbd\x96\x37\x8d\x4a\x31\xc7\xae\xe2\x7e\x69\xfc\xa2\xaa\x81\x13\xca\x8a\xd4\x80\xfc\x8d\xd8\x6f\xb0\xe4\xb4\x74\x5c\x19\x9c\x31\x4c\xcd\xd3\xac\x92\x55\xad\xac\x9a\x63\x6f\x2f\xc7\x47\x78\x22\xf2\xf6\x2c\xa1\x4e\xd7\x34\xb8\xec\xb4\x91\x88\xdd\x59\xaa\x5e\x37\x5e\xdd\x06\xb6\x3a\xd8\xea\xb6\xa8\xad\x2e\x93\x17\x5c\xf9\x00\xe7\xca\x91\x8b\x8f\xd2\x93\xe4\x38\x39\xd6\x02\xbc\x6c\x32\x41\x51\xbc\x3e\xf8\xdd\x45\xef\x14\x5f\xb3\x2b\x69\x49\x87\x19\x74\xfb\x33\x5d\x7c\xf4\x0a\x99\x15\x7e\xea\xe6\x92\x9a\x4d\x04\x24\x20\x52\x0b\xa5\x95\xe0\xb2\x5c\xa6\x51\xd0\x96\xd8\xc1\xb6\x98\xb7\xe8\x1f\x3f\x43\x3f\xbb\x8f\x44\x59\x6b\xa9\xaa\xac\x44\xa2\x95\xe8\x70\x63\xbf\xf6\x79\xa3\xa0\xa5\x45\x6b\xf1\x71\x76\xe9\x7c\x75\x53\x8b\xb2\x25\x37\xc5\x85\xe7\x1e\x38\xbb\xc3\xd9\x1d\xce\xee\xb0\x93\xc0\x4e\x02\x3b\x09\xec\x24\x3d\x63\x27\xe9\x1d\x33\x00\xf8\x34\xf8\x34\xf8\x34\xf8\x34\xf8\xf4\x96\xe6\xd3\x00\x68\x00\x68\x5b\x14\xa0\x6d\x4a\x67\xf7\x1c\x39\x2f\xa0\x5f\x9a\x9c\xe1\xd0\x6f\x82\x1c\x25\x87\x03\xdd\x48\x39\xcd\xb2\x91\x53\xc2\xc3\x87\x9a\xf2\x75\x0f\x71\x46\xbf\x7a\x35\x9c\xf2\x9d\xa5\xd3\x92\xf2\x05\x82\x35\x49\xfb\x3c\x9d\xf3\xc2\x3e\xd1\x75\x12\xfb\xcc\x6d\x0d\x69\xda\x5d\x4e\xa6\x6f\x2f\x38\x3b\x28\xfe\xba\x41\xe8\x4c\x90\xae\x73\x64\x86\x4c\x55\x79\xc6\x1f\x24\xe3\xeb\x9f\x32\x38\x59\xc1\x31\xbe\x45\xc7\xf8\x6f\xf7\x91\x69\x21\x36\x4e\x91\x13\x5c\x6c\x1c\x26\x2d\xad\x41\x11\x6a\x93\xe4\xa1\x36\x8e\x5f\x7c\xab\x6d\x3d\x2a\xdc\xe2\xa7\x48\xda\xe3\x16\xdf\x6a\x63\xad\xcb\x32\x91\xe3\xbd\x8b\xb2\x2c\xfe\xd6\xd1\x86\xb2\x4c\xa9\xeb\x2f\xef\x95\x6b\xa7\xc4\x15\x81\x72\xcd\xf5\x9d\xef\x86\x84\x83\x13\x3d\xe0\x30\xe0\x30\xe0\x30\xe0\x30\x9c\xe8\xe1\x44\x0f\x27\x7a\x38\xd1\xc3\x48\x01\x23\x05\x8c\x14\x30\x52\xc0\x48\x01\x27\x7a\x38\xd1\xc3\x89\x1e\x4e\xf4\xb0\x01\xc2\x06\xd8\x83\x36\xc0\x4c\x30\x38\x6e\xaf\x77\xbd\x8d\xa1\xbb\x88\x99\xd7\xe3\xb0\xbf\x09\x6b\x41\xd0\x37\xf5\x93\x87\x84\xcf\xbe\x95\x5d\xd1\x72\x95\x82\x2f\xb7\xbc\xf4\xd5\xa7\x5f\x8b\xd0\x3f\x8c\x90\x5d\xee\x25\x2e\x67\xbf\x27\xaf\x95\xfd\x6a\xb8\x30\xeb\xc6\x1f\xca\x6b\xe5\x05\xe7\x06\x1b\xaa\xa7\xe6\xce\xdb\x0c\xb2\x8d\x69\x68\x6a\x1a\x9a\xa8\x69\x68\xa2\x99\x86\x32\x25\xf2\x84\x58\xb0\x17\xc8\x2c\x5f\xb0\x33\x64\x8a\xa4\x5b\x58\xb0\x9e\xf7\x6c\xc6\x4a\x4c\x7f\xf2\x69\x12\xb7\x0b\x7c\x07\x84\x46\xf0\x8f\xd9\xe4\x76\x33\xfa\x97\x4f\xd1\xef\xee\x75\x4b\x7d\x0f\x35\x0e\x83\x98\x65\x77\xce\xb3\x3b\xe3\x0f\xb0\x2b\x45\xc1\x6f\xd7\xaa\xe1\xfe\x8e\x88\x07\x44\x3c\x20\xe2\x01\x46\x2d\x18\xb5\x60\xd4\x82\x51\xab\x67\x8c\x5a\xbd\x63\xb3\x81\x31\x01\xc6\x04\x18\x13\x60\x4c\x80\x31\x61\x4b\x1b\x13\x40\x3b\x41\x3b\xb7\x28\xed\xdc\x94\x11\x0f\x4f\x93\xb4\xe0\x5a\xc7\xc9\x31\xce\xb5\x1e\x21\x49\x32\x16\xe8\x21\x9c\x35\x4c\x2d\xb1\x96\x4c\xb8\x60\xa8\xa9\x50\x87\xd9\x70\x2e\x3b\x4c\x07\x25\x97\x8d\xc5\x24\x80\x75\x1f\xd2\x6c\x8e\x6c\x91\xc5\xff\xcf\xb7\xbb\x00\x6c\x97\x13\xb9\xe0\x61\x5d\x72\x1b\xea\x02\xed\x12\x70\x2a\x45\x4e\x93\x93\x55\x41\x0a\xa3\x64\xff\x3a\x46\x19\xde\x6b\x88\x4e\x68\x31\x3a\xe1\x1b\x7d\xe4\x94\xf8\xc4\x8f\x90\x43\xfc\x13\x1f\x23\xeb\x5b\x7c\x64\x52\x84\x25\x9c\x20\x13\x6e\x58\xc2\xba\x1b\x99\x12\xf1\x08\x27\xc9\x71\x4f\x3c\xc2\xba\x5b\xe9\x15\x49\x23\xb2\xf1\xff\xc6\x88\x2b\x69\x1e\xac\x1b\x57\xe0\x91\x3a\x71\x71\x81\x90\x3a\xf5\x62\x08\x3a\x26\x7f\x10\x42\x00\xda\x0a\xda\x0a\xda\x0a\xda\x8a\x10\x02\x84\x10\x20\x84\x00\x21\x04\xa0\xfe\xa0\xfe\xa0\xfe\xa0\xfe\xa0\xfe\x08\x21\x40\x08\x01\x42\x08\x10\x42\x00\xa3\x1a\x8c\x6a\x3d\x68\x54\xeb\xe9\x3c\xfc\xcd\xc1\xe6\x86\x88\xd9\x25\xd1\x9b\x31\x48\xe0\x8b\xc3\xe4\xbc\x08\x12\xc8\x6a\xa6\xb4\x41\x6a\x96\x1b\x26\xb0\xa4\x95\xd5\xa4\x58\x3a\xbe\x2b\xf4\x7c\x51\x2f\xe6\x6d\x4d\x4d\x38\xb3\x3f\x4f\x7f\x64\x98\xfe\xd2\x2d\xe4\x2e\xef\x85\x57\x64\x1b\xd1\x5f\xef\x93\x0b\xd0\x35\xa2\xaa\x45\x5b\xc1\xb1\xdd\xd9\x27\xdd\x3b\x17\xc4\x23\xe6\x6d\xd4\x91\xf3\x28\x23\xb6\x16\x32\xc8\x9b\x1c\x74\x29\xaf\x0f\xdb\x19\x25\xcd\x21\x05\x56\x59\x53\x73\x23\xee\xf1\x86\x1f\xe1\xa4\x32\xcc\x4e\x48\xee\xb9\x6d\xd0\x47\x24\x3c\x6d\x27\xe2\x49\xfe\x38\x4f\x1f\xad\x45\xf1\x72\x81\xdd\xee\x71\xa7\xfb\xcc\x35\x32\x27\xbe\xcd\xf3\xe4\x2c\xff\x36\xb9\xa1\xb3\x85\x6f\x93\x1b\xc9\xa7\xd9\xe1\x32\xf4\xfb\x7c\xb0\xfe\xf7\xb9\x9d\xde\xca\x3b\x46\xae\x3e\x1b\xfe\x51\x5e\xa0\xb3\xf2\xbb\xab\xb3\x6c\xa5\x49\x28\x70\x52\xbc\x9f\x2f\x9f\x3e\x92\x41\xf0\x01\x82\x0f\x32\x30\x87\xc1\x1c\x06\x73\x18\xcc\x61\x5b\xc6\x1c\x96\xe9\x19\x6b\x4f\xdb\x7b\xd2\xb2\x19\x22\x03\x33\x04\xcc\x10\x30\x43\xc0\x0c\x01\x33\x44\xf7\xcd\x10\x99\x19\x32\x45\xd3\xb1\x33\x0e\x41\xd9\xcb\xd1\x89\xec\x45\xe0\x81\x2e\x36\xc0\x2e\xeb\x24\x27\xc9\x6c\x69\x80\x9b\x01\xc0\xed\x1c\xc0\xcd\xf4\x3c\xc0\xdd\x84\x51\x11\xf4\x7d\x4f\x93\x61\xc1\x35\x8b\x46\x4e\xab\x49\x7b\x62\x56\x8a\xec\x85\xb3\x05\xd5\xb2\x34\x8b\xfe\x8f\xa7\xe8\xbb\xf6\x91\xdb\xd9\xa5\x6e\xfa\x93\x78\x48\x01\x52\xd1\x04\xaf\xbe\x1a\xdf\xcd\xae\xbd\x60\xe4\x34\x3b\x19\x8a\xf7\xd7\x1e\x87\x80\xc8\xbc\x01\xf8\x85\xcc\x1b\x80\x5f\x80\x5f\x80\x5f\x5b\x08\x7e\xf5\x90\xab\x73\xcf\xc0\x2f\xf8\xe0\x02\x7e\x01\x7e\x01\x7e\x01\x7e\x21\xf3\x06\x9c\x04\x5f\x3e\x8c\xa9\xe7\x9d\x04\x37\x65\xe6\x0d\x4d\x54\xfb\x3b\xc0\xab\xfd\x45\x2e\x3e\xca\x33\x70\x1c\x09\x8c\x85\xe7\x20\xca\xad\xcd\xe7\x01\x44\x6d\x29\x36\xfa\x74\xb8\xd7\xd4\x04\x3d\x2a\xbd\xa6\x3c\x50\xcc\xce\x95\xec\xe9\x4f\xbd\xfa\xa2\xef\xbe\xad\x9a\x8f\xdd\xed\x96\x14\xf5\xa2\xb0\x07\xc4\x9f\x3b\x0e\xc3\x04\xbb\x3a\x4f\xce\x92\xe9\xaa\xc4\x1c\x87\xc8\x23\x2d\x4c\x02\x62\x43\x91\xa0\xa3\xc5\x04\x1d\xff\xd2\x47\x66\x84\x24\x38\x4d\x4e\x72\x49\x70\x84\xb4\xb6\x08\x45\xcd\xcf\x24\xaf\xf9\xe9\x24\xea\x68\xb9\xb1\x59\x91\xb0\x63\x9a\x4c\x7a\x12\x76\xb4\xdc\xda\xcd\x56\x10\xed\xac\x80\x8a\x7f\x7d\xa4\x5a\x40\x3d\x54\xbf\x4e\xa8\x57\x58\x0d\x89\x4b\xbc\xc2\xca\xcd\xeb\xd1\x41\xb1\x85\x7c\x1e\x60\xb8\x60\xb8\x60\xb8\x60\xb8\xc8\xe7\x81\x7c\x1e\xc8\xe7\x81\x7c\x1e\xb0\x25\xc0\x96\x00\x5b\x02\x6c\x09\xb0\x25\xb4\xc5\x96\x80\x7c\x1e\xc8\xe7\x81\x7c\x1e\xc8\xe7\x01\x53\x1d\x4c\x75\x9b\x3c\x9f\x47\x73\xdc\xb8\x96\x08\x37\x47\x92\xd7\x55\x05\xb4\xed\xe9\x37\xfe\xfb\x6e\x72\x59\xb8\xa9\xab\x95\xb2\x61\x65\xd5\x82\x5e\xcc\x8f\xad\x8d\x8b\xb4\x1b\x01\xd5\x22\xf9\xf8\x18\xc5\xb2\x5a\x28\x19\x39\xfb\x3e\xcd\xb4\xb3\x70\x8c\x59\x7c\x5c\xe9\x9b\x77\xd3\xaf\xf4\x93\x5d\x9e\x86\xaf\xc8\x86\xa3\x07\x4d\x4d\xcd\x29\xe2\x3a\x7b\x89\xb8\xda\xf3\x39\xa7\xfd\x39\x23\x97\x72\xda\x8f\x9f\x64\x77\xa5\xdc\xe6\x16\x45\x6b\x6e\xfa\xeb\x80\x1b\xc5\x3c\xb7\x97\xa0\x67\x4c\x72\x59\xac\xc2\x39\x72\x81\xaf\xc2\x73\x64\x86\x4c\x05\xda\x35\x3c\xa3\x90\x90\xa3\x90\x08\xe8\x6e\xe8\x82\xbc\xbf\xfe\x8a\xb9\x95\x0e\xe4\xb5\x32\xb9\x9a\x0f\x5f\xaf\x53\x34\x2d\x57\xa7\xa7\x5f\x72\x75\x06\xf5\xca\x5d\xe0\xa2\xfb\x24\xfa\xa5\xdb\xea\xcf\xee\x11\x53\x2b\x15\xd4\xac\xb6\xee\x09\x3e\x23\x6f\xec\x91\x39\x4e\x3f\x49\x5e\x43\x16\xab\x8c\xbb\x6d\x9a\x64\x90\x43\x58\x7b\x5b\xb4\xf6\x7e\xbe\xaf\x73\xa2\xe7\x29\x61\xfe\x7d\x82\x2c\xb8\xe6\xdf\xee\x09\xb6\x6e\x49\xae\x06\x12\xb4\x54\x29\x93\xf4\x1f\xec\xa8\x2f\xd8\xce\x94\x54\xb3\xac\x73\xfb\x99\x38\x79\xaf\x5b\xc2\x9d\x2a\x31\xa5\xa9\x07\xe4\xdb\x7d\xd5\x0d\x8d\xf2\x9e\xed\xe7\x15\xae\x77\x7b\x7f\x5c\xd5\xcc\xbc\xe6\xfd\x75\x9f\xf7\x57\x76\xb2\x28\x6b\x79\x3d\x3b\x5a\x73\x9d\xaf\x15\xf6\xef\x1b\xf2\x57\xd6\xcb\xf4\x05\x32\x4b\x32\x55\xb2\x75\x82\x1c\x6d\x41\x8d\x9b\xe3\x41\x45\x90\xa7\x21\xf2\xf4\x23\xfd\xe4\xc3\xfd\xf4\x43\xfd\xd1\x0f\x38\xf4\xe0\x8d\xfd\x5b\x47\x9e\x56\xb1\x53\x36\xce\xdc\x26\xcd\xf9\x3e\x5b\x9c\x6e\x74\xe1\x50\xc0\xc2\x1d\xe6\x10\x44\xb8\x30\xa8\x05\x7e\x67\xd1\x28\x8e\x8a\xbb\xf9\x15\xdc\x00\x63\x29\x43\x19\xcb\x28\xce\x89\x30\xbb\xc7\xd8\x67\x21\xff\xbd\x60\x7f\x2c\xee\x1f\x87\x83\x05\x7d\xfa\xa5\x3e\xf2\xd9\x3e\xfa\x62\x5f\xf4\x93\xce\x49\xec\x83\x7d\x33\x06\x3b\xb7\xeb\x96\x92\x37\xf8\xb0\x1b\x4a\x6c\x99\xfd\x29\xa6\xa4\x7c\x6f\xc1\x8f\xb0\xc2\x8c\x53\xb1\x5c\x63\xf4\xa8\x9a\xe5\x2f\xce\x4d\xfc\x05\x3d\x2b\xf9\x8c\x56\xc8\x59\x8a\x71\x5d\x8e\xa9\x30\x81\x97\x34\xa3\x54\xd0\x12\x8a\x78\x22\x8f\x8b\xb4\xe7\x92\x1f\x25\xeb\x0e\x80\xf3\xf8\xd8\x2d\xbc\x5b\x3e\x87\xc5\x0d\xd4\x99\x9b\xdb\x5a\xd6\xb9\x8f\xd4\xd9\x89\x1a\x64\x97\xe3\x03\x44\x32\x53\x24\x4d\xcf\xc4\x4e\x39\x29\x06\xf6\x78\x53\x0c\x04\x3c\xba\x36\xc1\xc0\x26\x4c\xf5\xf8\x27\xfb\xc9\xa9\x46\xa9\x1e\x9b\xc8\xef\xf8\x9e\xfd\xf4\xd7\xfb\xc9\x1d\x55\xf9\x1d\xa3\x23\xfc\x38\xe9\xdf\x81\x03\x93\x35\xc4\xf7\xb3\xab\xfd\x49\x14\x3b\x9f\x3f\x51\x1c\x1a\x4b\xe4\x09\xf1\x01\xb0\xdd\x8f\x7d\x00\x33\x64\x8a\xa4\x83\xab\x57\x79\xc7\x69\x2d\x99\x08\xce\x28\x18\xb6\xfc\x0b\xe1\xcb\xff\x3c\x3d\xdb\x9e\x94\x86\x8d\xd4\x2b\x76\x40\x8d\x7e\xfc\xb6\xda\x29\x1c\xb3\xcf\x8c\xcd\xce\x62\x42\xde\xb0\x21\x13\x99\x7e\x0d\x59\x24\x97\xaa\xb4\x97\xb6\xcc\x24\xf4\x18\x9c\x0b\x5b\x3c\x17\x7e\xae\x8f\x3c\x29\x8e\x6f\x0b\xe4\x71\xf7\xf8\xd6\x69\x11\xd3\x21\x91\x16\x0e\xbb\xd8\x51\xad\x49\xc1\xb6\x1e\xe9\xd5\x40\x08\xc6\xff\xeb\xce\x5a\xc9\x15\x93\x36\x22\xb5\x81\xb0\x1a\x95\x85\xfb\x36\x44\x56\x75\xc6\xd7\x17\x72\x2a\x44\x4e\xc1\xdf\xac\x2b\xfe\x66\x70\x34\x80\xa3\x01\x1c\x0d\x3a\xe5\x68\x90\xf9\x44\x5f\xf0\xc6\xdf\x5e\x33\xec\xbc\x08\x16\x7a\x94\x9c\xf7\x04\x0b\xdd\x5c\x9b\xb6\x0e\xa1\xd4\xd7\x21\x6e\xa3\xdb\xc4\x30\x35\xab\x46\xb4\xe9\x7c\x94\xfe\xb5\x1d\xb5\x6a\xc4\xd1\x1a\xb6\xdc\xec\x49\x68\xa4\x54\x5b\x15\xa0\x0b\xba\x05\x08\xf2\x56\xd3\x68\x40\x90\x41\x90\x37\x98\x20\x97\x36\xea\x18\x1a\x86\x75\xbb\xbb\x83\xf4\x6c\x9e\x5a\xfa\xff\x3e\x43\x0e\x0b\xc8\xbb\x5c\x30\xae\xb3\xcf\xd0\x34\x0a\x09\x27\x3f\x60\x75\x61\x1f\x76\x91\x95\x5d\xd1\x56\x55\x8b\xbe\xe1\x19\xfa\x99\x7d\x64\xb7\xe7\xbe\x94\x7d\x9b\x53\xc4\x67\xa8\x71\x4e\xcc\x99\x82\x71\x7d\x81\x37\x17\x1f\x66\x57\xce\xd4\x69\x4b\x96\xcc\x71\x2f\x45\x7a\x4c\xa4\xc7\x44\x7a\x4c\x84\x56\x23\xb4\x1a\xa1\xd5\x08\xad\xee\x99\xd0\xea\xde\x89\x1c\x46\x48\x2b\x42\x5a\x11\xd2\x8a\x90\x56\x84\xb4\x6e\xe9\x90\x56\xc4\xdc\x21\xe6\x6e\x8b\xc6\xdc\x6d\xca\xf4\x98\x3a\xb9\x20\x90\xe0\x59\x32\xcd\x91\xe0\x69\x72\x92\x1c\x0f\x44\x82\x5e\x5e\x25\x71\x53\xc2\x85\x44\x6d\x49\x91\x79\x2d\x9c\x11\x9e\xa3\x33\x35\xd5\x81\x25\x34\x6c\x04\xd4\x24\x3d\x74\xfb\x4b\x62\x5f\xba\x2d\x84\xa5\xed\x72\xf2\x67\x7a\xb0\xd9\x7e\xf1\xc7\xee\x82\x33\xc1\xb9\x1e\x23\x8f\x92\xf3\x55\xf6\x9c\x46\xf9\x4c\x1b\x4f\x18\xcc\x39\x70\xa4\x6b\xd1\x91\xee\x85\x88\xa8\x4a\x3e\xce\xab\x92\xbb\xc6\xe8\xc6\xe9\x75\x1b\x2f\xc7\x60\xbb\xc5\xba\x72\xf8\x86\x3c\xe4\xa2\xf0\xff\x3b\x47\x66\x5c\xff\xbf\x9b\x69\xd0\x16\x6c\xcd\x09\xae\x96\xe4\x54\x8d\xb4\x0b\xcb\xe3\x19\xff\xd1\xd1\x10\xc1\xf6\x60\xdd\xbc\x9b\x1e\x21\x77\x48\x5c\xd0\x40\xc8\xb9\x49\x38\x3b\x26\xee\x90\x82\x13\x9c\x18\x9c\x18\x9c\x18\x9c\x18\x29\x38\x91\x82\x13\x2e\xd1\x48\xc1\x09\x7b\x05\xec\x15\xb0\x57\xc0\x5e\x01\x7b\x45\x5b\xec\x15\x88\x8c\x41\x64\x0c\x22\x63\x90\x82\x13\xe6\x40\x98\x03\x37\x79\x0a\xce\x75\xe4\xc8\xec\x2a\xab\x6e\xbf\xff\xfc\x8f\x0c\x92\xdd\xc2\x7f\x7e\x89\xcd\xad\xe3\x28\x9f\x35\x8d\xe2\x55\x63\xc9\xa2\x7f\xb6\x8f\xfe\x41\x3f\xb9\x9d\xff\xea\x10\xef\xbd\x8d\xdd\xe2\x27\x4d\xa3\x98\x31\x96\xe2\x83\xec\xb2\x34\xbb\xc4\xc6\xdc\xe2\x87\x19\xc3\x4c\x15\x0a\x4e\x0e\xb2\xf6\xa5\x19\xeb\x8c\x47\x7c\xe6\x75\x64\x5a\x2c\xbf\x53\xe4\x04\x5f\x7e\x87\xc9\x41\x32\x1e\x68\xe3\xe0\x63\xe5\x58\x37\xe4\x3b\xb7\xc5\xa0\xfb\x78\xf8\x5a\x4b\xd0\x11\x19\xd9\x21\x9e\x5b\xbb\x88\xe4\x52\x5c\x12\xe9\x81\xe0\xed\x0f\x6f\xff\x0c\xac\x38\xb0\xe2\xc0\x8a\x03\x2b\xce\x96\xb1\xe2\x64\x7a\xc6\x48\xd1\xf6\x9e\xb4\x4c\xcf\x33\xa0\xe7\xa0\xe7\xa0\xe7\xa0\xe7\xa0\xe7\xdd\xa7\xe7\x6d\x3f\xd9\x67\xb6\x34\x2f\xcc\x80\x17\x76\x8e\x17\x66\x7a\x9e\x17\x6e\xc2\xf0\x01\xfa\x77\x43\xe4\x8c\x4c\x57\x6c\x18\x66\x4e\x2f\xf2\x46\x3c\xe9\x8a\xf9\x2d\x41\x35\x72\xb8\x69\xcd\xa2\x1f\x1e\xa2\xbf\x3a\x40\xee\xf0\xb6\x70\x65\x2d\x19\x7d\x56\x6e\x74\xc5\x9c\xbe\xa6\xe7\x2a\x6a\xc1\x3b\x04\xaa\xa3\x54\xce\xb2\x46\x12\x1e\x93\xdb\x84\xa3\x69\x0c\xf2\x16\x06\xdd\x63\xb4\xef\x5c\x64\x94\x34\xc7\xa1\xc6\x2a\x6b\x6a\x2e\x11\xdf\xc7\x6f\x98\xf4\x74\x64\xd1\x53\x75\x80\x3f\x69\x56\x6f\x63\x7e\xa8\x0e\xa1\xbf\x6b\xc2\x35\xfb\x00\x77\xcd\x8e\x5c\x7c\x94\xa6\xc8\x69\x72\xb2\x05\xf2\xcc\x57\xdf\x34\x53\xfe\x42\x29\xe0\x9e\xfa\x14\x70\x07\x25\xbc\x63\x02\x05\xbe\x26\x1c\x05\x1e\xa2\x8f\xd8\xf9\x5f\x6a\x57\x94\xa4\xcd\x7c\x22\xfc\xb9\x5e\x40\x04\x41\x04\x41\x04\x41\x04\x41\x04\x41\x04\x41\x04\x41\x04\x41\x04\x41\x04\x41\x04\x41\x04\x41\x04\xbb\x4b\x04\x37\x5f\xc9\x25\x30\x47\x30\x47\x30\xc7\x4d\xc4\x1c\xff\x36\x42\xa2\x82\x39\x7a\xaa\x86\x3b\x3e\x80\xf4\xb7\x23\xf4\xa5\x08\xd9\xc1\x7e\x73\x5c\xff\xee\xc9\x6b\x65\xff\x2e\x2e\x7a\x1f\x8f\xe6\xb5\xf2\x05\x23\xa7\x49\x57\xbf\xd4\xdc\x79\xfb\xcc\xd8\xc6\x32\xa2\x35\x0d\x4d\xd4\x34\x34\xd1\x4c\x43\xed\x4a\xec\xdc\x00\xf8\x79\x06\x60\x56\x77\x12\x3b\xd3\x3f\x89\x93\x13\x62\xc8\xcd\x25\x35\x9b\xb0\x9f\x5b\x05\x7b\x45\x49\xf7\xb1\x6c\xa1\x62\x95\xd9\x69\xb4\xa0\x39\x35\xe9\x7e\x3a\x4e\x3f\xd8\x4f\xa2\xec\xee\x94\xf7\xe6\x2b\xf6\x5d\xd1\x07\xea\x95\xa7\x13\x2d\xcd\x1b\x05\x2d\x3e\xc4\x7e\x9f\xaf\xbe\x7f\x51\xde\xee\xb9\xb2\xcd\xd5\xe8\xd6\xe9\x46\xc9\xc7\xc7\x7e\xa9\x84\xa7\x5b\x37\x5b\xb0\xfc\x6a\x38\x3a\x3d\x4b\xa7\x25\x3a\x0d\x9c\x25\x3b\x81\xb6\xa7\x5f\xb5\x35\xf9\xa3\xdf\xdb\xde\x70\xaa\x1e\x0a\x28\x43\xe7\x99\xad\xfd\xf2\x92\xee\x4f\x58\x9a\x97\xcb\xac\xca\x90\xd3\xd2\x8c\x21\x68\x1a\xc9\x71\x5a\x4c\x8e\xf3\xe1\xbe\x76\x49\x8d\x8c\x48\x56\x33\x49\x52\x6e\xb2\x9a\xee\x4b\x20\x5e\x45\xae\x39\x09\x54\x2b\x4e\x5a\x90\x49\xf1\x5f\xd9\xd9\x50\x02\xdd\xe5\x96\x93\xf3\x08\x9d\xb8\xf8\xeb\x06\xc8\x1c\x54\x8f\x43\xf5\xb8\x97\x6f\xaa\x04\xc4\xc8\x22\x46\x16\x31\xb2\x9d\xac\x1e\xd7\xf3\x45\xe2\x42\x75\x87\xf0\xea\x71\x5d\x3c\xc0\xa4\x7f\x76\x47\x43\xf5\x21\x1e\x56\x46\xce\xa3\x54\x0c\xf3\xd2\x45\xdd\xd5\x29\x50\x35\x6e\xab\x69\x32\xa8\x1a\x87\xaa\x71\x1b\x5c\x35\xae\x6b\xa0\x2b\xb4\x4a\x5c\x17\x77\x8a\xcc\x51\x72\x98\x1e\x8c\x8d\x3b\xf6\xaa\x7b\x7c\x35\xe2\xdc\x7b\xbb\x50\x15\xee\x2b\xc3\x24\x29\x20\xab\x95\x5d\xd1\x72\x95\x82\x5e\xcc\x7b\x3c\x69\x4b\xa6\x6e\x98\x7a\xf9\x46\xb6\xa0\x5a\x96\x4b\x56\xdf\x3f\x4c\x5f\xe8\x27\xb7\xbb\xb7\x5c\x59\x4b\x46\x95\x3a\x30\x75\x4e\xde\x3f\xc9\xee\x8f\xdf\xcf\xae\x58\x70\x6e\x5a\x4c\xfa\x7e\x6e\x33\x43\x5d\x22\x67\xc5\xd2\x3a\x43\x4e\xf1\xa5\x75\x94\x1c\x26\x07\x03\x97\x96\xe7\xf5\xd9\x0e\xe2\xed\xd8\xcd\x52\xd4\x67\xc2\x97\xd6\x71\x7a\x4c\x2e\xad\x9a\x69\x90\x4b\xca\xdf\x23\xaf\x1b\x6a\xf4\xbf\x6d\xaf\x9e\x8a\x3d\xf5\x61\xa9\x7f\x36\x14\x79\x51\x97\x26\x24\x9d\x21\xe7\xc8\x4c\xd5\xfe\xde\xe2\x8c\x60\x6f\x07\x25\x6d\x91\x92\xfe\x62\x5f\xfb\xe4\xc2\xac\xe0\xa4\xec\x04\xe5\x70\xd2\x8d\x90\x32\x9c\x94\x36\x27\x65\xc2\x84\x49\xa0\x14\x8a\xff\xe4\xce\x6a\x29\xf3\x2a\x07\x88\xfa\x05\x8b\xcc\xf2\xdd\x2d\xb9\x02\x0e\x0a\x0e\x0a\x0e\x0a\x0e\x0a\x0e\x0a\x0e\xda\x0a\x07\x0d\x74\x6f\xe9\x79\x40\x6a\x6b\x06\x1d\xde\xfa\xc3\x39\x6b\xfa\x47\x76\x54\x2b\x07\x23\x21\xb8\xd3\xaf\x32\x3c\xc0\x4f\xe1\x5d\xd0\x18\x40\x39\xb7\x9a\x9e\x02\xca\x09\xca\xb9\xc1\x94\xb3\x8b\x28\x2a\x94\x73\x76\x18\x46\x65\x26\xc8\x51\x7a\x38\x76\xd0\x61\x9b\xf7\x7a\xd9\xa6\xef\xbe\x2e\xd0\xcd\xf7\x4b\xba\x39\xb6\x96\x0c\x4c\x07\xa0\xaf\xea\x65\x93\x7f\xbd\x36\xdd\xfc\x9b\x21\xfa\xa7\x11\xb2\x2d\x6b\x98\x1a\xdb\xc9\xee\xaf\xc3\x35\x67\xd9\x5d\xf3\xec\xae\x38\xf7\x21\x9d\x34\x4c\xcd\x17\xb5\xef\xfc\xde\x66\xaa\xf9\x5a\x72\x4a\x2c\xa5\x23\xe4\x10\x5f\x4a\x63\x64\x94\xec\x0f\x5c\x4a\xec\x1d\xd8\x22\x72\xfb\x73\xb3\x30\x73\x36\x7c\xfd\x0c\xd3\x41\xb9\x7e\x62\x31\x3b\x78\xde\x7d\xbe\x0f\x5d\xfe\xc2\x76\x77\x9c\x95\xfa\xd0\xd2\x33\xd4\xb6\x0f\x68\xb7\x46\x3b\xcd\x53\x18\x54\x6d\xd6\xeb\x1b\x6e\xec\xcf\x20\x95\x2d\x92\xca\x77\xf7\x91\x49\x01\x18\x4f\x90\x09\x17\x30\xb6\xed\x83\xbf\x59\x49\x62\x0b\x8c\xb6\x4a\x84\x10\xca\x19\xff\x81\x9d\xae\xc0\xd8\xe5\xf0\x47\x8f\x8c\x90\x27\xc3\xae\x89\x08\xd0\x47\xd0\x47\xd0\x47\xd0\x47\xd0\x47\xd0\x47\x78\x61\xd6\xf7\xc2\x6c\xab\x86\x90\xfe\xc6\x2b\x5c\x15\x60\x38\x84\x32\x7a\x14\x83\x07\x4b\x22\xcd\x5a\xe7\xf5\x02\x30\xc6\xad\xa6\x8d\x80\x31\x82\x31\x6e\x30\x63\xec\x3c\x18\x0a\x45\x8b\xcd\x89\xf9\x86\xc2\xdd\xdd\x03\x32\x47\xc8\x21\xfa\x48\x2c\xe9\x80\xc4\x57\x79\x41\xa2\x7b\x7b\x2d\x45\xdc\x7c\xd9\x40\xe8\x2f\x0d\x93\x23\xc2\x0b\x53\x2d\x95\xac\x06\xb4\x32\xa7\x95\x0a\xc6\x8d\x55\xa6\x6d\xd8\xb4\xf2\x9f\x87\xe8\x9f\x47\xc8\x36\x76\x63\x10\xad\x9c\x72\xee\x12\xb4\x32\x55\x2a\x59\xde\x4d\xd0\xfd\x7d\x63\x69\x25\x7b\x07\x71\x16\xb6\xfb\x73\xb3\xb4\xf2\x42\xf8\x92\xdc\x4f\x87\xe5\xaa\x63\x8f\x97\xba\x87\xa7\x07\x3e\x5e\xf9\x8b\xdb\xdd\x91\x0e\xe0\x95\x9e\xc1\xb6\x79\x65\xb7\xc6\x7b\xdd\xbc\xb2\x76\xc0\xb1\xd7\x83\x57\xb6\xce\x2b\x6f\xf6\x6b\x5f\x3f\xef\x6c\x41\x64\xb4\x59\x26\x84\x11\xcb\x37\xec\x74\x45\x86\x4b\x2c\x3d\x52\x42\x9e\x26\xbb\x26\x24\x40\x2c\x41\x2c\x41\x2c\x41\x2c\x41\x2c\x41\x2c\x5b\x21\x96\xdd\x64\x8c\xed\xc5\xa3\xcd\x13\xcb\xe6\x74\x84\x3a\x27\xd7\xfa\xfa\x42\xfa\xcf\x5e\xe1\x2a\x01\x61\xcc\xd2\xa3\x1a\x08\x66\xd9\x0d\xcd\x00\xcc\x72\xab\xe9\x23\x60\x96\x60\x96\x9b\x8b\x59\xb6\x70\xd6\x0b\x65\x96\x6d\x3e\x0c\x36\xa6\x96\xee\x4d\x2f\x0b\x6a\xf9\x42\x3f\x89\xc9\x3a\x4c\x9a\x29\x33\xab\x6a\x56\x4d\x6e\x54\x7e\xea\x21\x77\x79\xaf\x09\xcf\x91\x1a\xcb\x6b\xe5\x49\xcf\x1d\x9b\x25\x57\x6a\x67\x52\xa2\x86\xad\x73\xfa\xdd\x61\x32\x2f\x01\x72\x6e\x55\xe7\x05\x74\x4c\x2d\xaf\xf3\xdd\xb8\x5e\x6d\x2c\xbe\x7f\xa9\xec\x63\xbf\xae\x2d\xad\x18\xc6\x35\x5f\xf1\x13\x87\x2d\xff\xec\x30\x7d\xe9\x16\xf2\xea\xba\x6d\x32\x55\xe6\x93\x7d\x32\x87\xb0\xa7\x46\x56\xd1\x3e\xe0\xd9\x35\xee\x17\x9d\x67\x5d\x16\xcf\x9a\xf4\x3e\xab\x2d\x45\xb4\x46\xdc\xd4\xff\xfc\x98\x29\x13\xc5\xeb\x65\x6d\xd5\xdd\xb0\x06\x7d\x65\x24\x3c\x6d\x27\xe2\x13\xfc\x71\xa9\x7a\xaf\xb9\x98\x6c\xdc\x7f\x94\xe5\x5a\x8f\xd4\xbd\x2e\xa4\xee\xeb\xc3\xa5\xee\x65\xfa\x84\x90\xb4\x8d\x87\xbf\x9e\xf5\xa8\xd1\x27\x80\xa2\x5d\x28\xda\x85\xa2\x5d\x28\xda\x85\xa2\x5d\x61\xc3\x82\xa2\x5d\x28\xda\x85\xa2\x5d\x28\xda\x85\xa2\x5d\x28\xda\x85\xa2\x5d\x28\xda\xd5\xee\xa2\x5d\x8f\x92\xf3\xf4\x6c\x6c\xda\x01\x5e\x71\x2f\x29\x6b\x7c\xe8\xeb\x7c\xe4\x30\xea\x73\xa1\x3e\x17\xea\x73\x6d\xa2\xfa\x5c\x7f\x1a\x27\xe3\xb6\x07\xad\x1e\x80\x3e\x25\x37\xd0\xb3\x6e\xa8\xff\x2f\xc4\xe9\xfb\xfb\x09\xad\xba\x27\xc8\x8f\x36\x35\x77\x7e\x41\x34\x10\x7f\x50\xf8\xd1\xea\x7e\x54\xe8\x5e\xd0\x66\x47\xda\x1b\xe4\x19\x41\xf1\x2e\x93\x27\x38\xc5\xbb\x48\x1e\x23\x8f\xd6\xa5\x78\xac\x8d\x51\x35\x9f\x67\x6b\xa1\x6c\x98\x2e\xc8\xab\x1e\x18\x81\x99\x65\x7f\x6f\xd6\xd1\xf6\x75\xe1\x44\xef\x24\x3d\xee\x85\x75\x82\xee\x79\x7a\xe0\x18\x59\xea\xcd\x1f\x89\xfe\xc2\x6d\x75\xe7\x29\xc0\x0b\xd7\x33\x55\x31\xc7\x0b\xb7\x4b\xb3\x95\x56\xc9\x15\xf2\x74\x95\x2d\xbb\xbd\xd3\x05\xf3\x36\xdc\x74\x5b\x74\xd3\xfd\x6a\x5f\xc7\x65\x49\x56\xb8\xf1\x3e\x45\x9e\x74\xdd\x78\x7b\x48\x60\xf1\x74\xa9\xcd\x09\xac\x75\x0a\x29\xaf\x7c\x8b\xff\xf4\xce\xba\x02\xcb\x29\x23\x55\xf4\x0a\xa9\x87\x6c\x27\xe0\x6e\xc9\x28\x78\x01\xc3\x0b\x18\x5e\xc0\xf0\x02\x86\x17\x30\xbc\x80\x91\xb7\xa0\xbe\x17\x70\x73\x3a\x42\xf3\x2a\x41\x8d\x36\x91\x7e\xdf\x8e\xba\x3a\x42\x98\x8b\xb0\x47\x71\x50\xa4\x8b\x70\x17\xf4\x06\xf8\x08\x6f\x35\x6d\x05\x3e\xc2\xf0\x11\xde\x60\x1f\xe1\x8d\x27\x5f\xa1\x3e\xc4\x1d\xdf\x26\x1a\x7b\x15\xbb\x17\x76\x21\xa3\xea\x1f\xdf\x47\xce\x36\xf2\xf9\xf5\xfd\x59\xcf\x17\xf5\x62\xde\x9e\x5e\xc9\x5c\xd9\xd7\x61\x1a\x6b\x6a\x81\xfe\x5f\xf7\xd1\xdf\xed\x27\x77\x54\x39\x06\x47\x8f\x72\xf2\x6a\x5f\x65\xbf\xa5\xa7\x50\xa2\x7b\xfd\x82\x78\xc2\xbc\x78\x42\xfc\x11\x9e\x8a\xd5\xe7\x35\x1c\x78\x71\x4a\xb6\xdf\x66\x50\xbb\x3e\x0f\xe0\x84\x6f\x10\xd7\x92\x89\xc0\xee\xde\x2c\x9f\x2d\x84\xaf\xd1\xf3\xf4\xac\x5c\xa3\x75\xa6\xd6\x2e\x6c\x16\xd8\x3f\x5f\x9a\x84\xcf\xde\x56\x3b\xad\xc7\x6d\x50\xdb\xca\xcc\x1e\xb6\x33\xbf\x6e\xe4\xe4\xa6\x5f\x43\x16\xc9\xa5\x2a\xfd\xa3\x2d\xb3\x0b\x4d\x04\x38\xb7\x45\x9c\xfb\xb9\xbe\x4e\x49\x9c\x27\x05\xc5\x5d\x20\x8f\xbb\x14\x77\xe3\xa5\x19\x87\xb7\x5d\x95\x66\xe9\xdf\xd9\x51\x2b\xcd\xa6\x6a\x4e\x68\xad\x88\xb5\x83\x22\x27\xdd\x46\x09\x35\x1c\xe8\xb6\x9a\x18\xc5\x81\x0e\x07\xba\x0d\x3e\xd0\x6d\x98\x86\x1c\x7a\x8e\xeb\xea\xae\x92\x99\x21\x53\x34\x1d\x3b\xe3\x9c\xe9\xf6\xfa\x8a\x00\x07\xb5\xd1\x85\x23\xde\x9b\x87\x48\x42\x1c\xf1\x04\x3a\x76\x22\x39\x45\xe8\x60\xc9\xc8\x59\x5a\xb6\x62\xea\xe5\x1b\xfc\x77\x5d\xb3\xe8\x1f\x0c\xd2\x97\x06\xc8\x2b\xc5\xf5\x4e\x70\xe7\xf3\xd2\xdb\xb4\x98\xd3\xd7\xf4\x5c\x45\x2d\xf8\xe2\x04\x1d\xcf\xee\x39\x6e\xc2\xe1\x0d\xce\x49\xbc\xde\x86\x90\xc0\x44\x5c\xdc\x20\x9a\x94\xe1\xa3\x35\x8f\x9a\xd5\xad\xf6\x25\x51\x78\x19\x45\xf0\xed\xa9\xff\xad\xec\xa0\x84\x77\x8c\x0d\x39\xb9\xfa\x54\xf8\xf7\x72\x8c\x1e\x91\x15\x63\xaa\x47\xde\xfb\x31\xf0\xb9\xb1\x4d\xeb\x62\x11\x21\x4e\x0f\x71\x7a\x88\xd3\x43\x9c\x1e\xe2\xf4\x10\xa7\x87\x38\x3d\xc4\xe9\x21\x4e\x0f\x71\x7a\x88\xd3\x43\x9c\x1e\xe2\xf4\xba\x1d\xa7\x87\xd0\x3a\x84\xd6\x21\xb4\x6e\x0b\x87\xd6\xbd\x34\x4a\x26\x9d\xd0\x3a\xed\xb9\xb2\x56\xe4\xb3\x55\x9d\xe7\x2d\x5b\xb1\xca\xc6\xaa\xdd\xa0\x17\x4e\xc9\x58\xbb\x1f\x1e\xa5\x7f\xdf\x4f\xee\xf6\x35\xe2\xb0\xc2\xfd\x75\xc2\xed\x26\x79\x8b\xf6\x91\x6f\xca\x69\x31\x7e\x40\x06\xdf\xb9\xed\x48\xbe\x17\x74\x47\x9b\x9d\x3c\x7e\xbc\x8f\x5c\x17\x48\xae\x44\x8a\x1c\xc9\xad\x90\x65\x92\x0b\x42\x72\x6e\x37\x47\x1d\x24\xe2\x73\x4e\xf2\x0c\xaa\x1c\x8f\x44\xd0\x9b\xdc\xac\x1f\xc8\xb3\xe1\xcc\xee\x02\x9d\x75\x7d\x95\x6a\xe6\xdb\x86\xdc\x41\xfd\xab\xc1\x7a\xd1\x0f\x93\xa0\x49\x4f\xd4\x8f\xdd\x0b\x9c\xf7\x47\xdc\x48\xbe\x0d\x9a\xfa\xf4\xeb\xc9\x73\x64\xad\xca\x62\xd9\xa5\xa9\x87\x75\x13\x4e\x22\x2d\x3a\x89\xbc\x35\xb2\x71\x02\xeb\xfb\x85\x1b\x49\x85\x58\xae\x1b\xc9\x66\x10\x97\xdc\xd1\xa4\x39\x71\x19\x64\xca\x68\x45\x7e\xc6\x7f\x67\x67\x90\xb8\x7c\xc8\xa9\x1e\x12\x28\x21\xc7\x9d\x30\xc2\x8d\x12\x90\x88\x2b\x44\x5c\x21\xe2\x0a\x11\x57\x88\xb8\x42\xc4\x15\x22\xae\xb0\x7e\x5c\x61\xf7\xb5\x8a\xf4\xdf\xed\x08\xd2\x2a\x8e\x84\xc4\x1a\x06\xea\x1a\x49\x3b\xf2\x70\x03\x54\x0d\x78\xae\x6e\x35\x05\x07\x9e\xab\xf0\x5c\xdd\x60\xcf\xd5\x1f\xef\x0b\xae\x53\xb5\x51\xc7\xeb\xa6\x9d\x5b\xbb\x0f\xfe\x32\xd3\x64\x92\xa6\x62\xa7\x1d\x0f\xd7\x87\x7d\x1e\xae\x01\xed\x74\xc1\xc1\xf5\xc7\x86\xc9\x21\x01\xb4\x97\x44\x31\x8c\xc0\x72\xcb\x59\xd3\x28\x5e\x35\x96\x1c\x84\xfd\x85\x21\xfa\xb5\x08\xd9\xce\x6f\xbb\xb2\x96\x8c\x46\xeb\x51\x6b\xd3\x28\x66\x8c\xa5\xf8\x6e\xf6\x5b\x9a\x5d\xe9\xad\xdd\x25\x7f\x6d\x33\x90\xbe\x4c\x4e\x88\xf5\x77\x88\x3c\xc2\xd7\xdf\x28\xd9\x4f\x86\x03\x7d\xaa\x79\xff\xb9\x33\xb5\xe8\xcd\xcd\x42\xe5\xe6\x0a\x7f\xcb\xb5\xc5\x1f\x6e\x2f\x26\xf9\x7c\x5f\xf0\xe0\xfb\xb6\x7b\x46\xf8\xfe\x00\x44\x2c\x07\xf9\x41\xf9\x73\x77\xc6\x39\x7d\x9a\x9c\x24\xc7\xab\x76\xfd\xf5\x0c\x34\xb6\x79\x20\xdc\x16\x11\xee\x4f\xf6\xdd\xe4\x37\x9e\x12\x1c\x76\x82\x1c\x75\x39\x6c\xd7\xc4\x04\x87\xa9\x6d\x15\x13\xf1\x7f\xb9\xc3\x23\x26\x76\xba\x68\x54\x4a\x86\x07\xc4\x5f\xba\x24\x18\x40\x3d\x41\x3d\x41\x3d\x41\x3d\x41\x3d\x41\x3d\x41\x3d\xeb\x53\xcf\xb6\x6e\xff\xe9\xaf\xbe\xc2\xb3\xfd\xef\x0b\x63\x98\x52\x29\xb8\x9f\x1f\x86\x3b\xaf\x13\x00\x4f\x6e\x35\x4d\x04\x78\x12\x78\x72\x83\xf1\x64\xa7\x21\x50\x73\xf2\x3b\x58\x64\xfb\x24\x7b\x28\xb0\xcc\x1c\x24\xe3\xf4\x40\x2c\xe1\xd0\xc3\x5d\x3e\x7a\x28\xda\x7f\x59\x94\x51\x7e\xe7\x90\x8d\x23\xad\xec\x8a\x96\xab\x14\xf4\x62\xbe\xda\xb9\x56\x86\xde\x9b\xba\x61\xea\xe5\x1b\xd9\x82\x6a\x59\x9a\x45\xbf\x3e\x48\xbf\x38\x40\xa8\x7b\x9b\x63\xd4\xbb\xd1\x64\xe8\xbd\x6c\x70\x92\x35\xd8\xd6\xb0\xfb\x05\xa7\x4f\x76\xe8\xbd\xf7\x51\x08\xbb\xaf\xff\x89\x65\xc3\x3f\xb1\x33\xf4\x94\x8c\xa8\xf7\x0e\x68\x60\x34\x7d\xcd\x92\x22\x4d\xc5\xf6\x23\xfa\x1e\xd1\xf7\x88\xbe\x47\xf4\x3d\xa2\xef\x11\x7d\x8f\xe8\x7b\x44\xdf\x23\xfa\x1e\xd1\xf7\x88\xbe\x47\xf4\x3d\xa2\xef\x11\x7d\x8f\xe8\x7b\x44\xdf\x23\xfa\xbe\x5b\xd1\xf7\xff\xeb\x69\x3b\x1b\xa7\x55\x36\x4c\x35\xaf\x55\xa3\xc1\x35\xa3\x50\x59\xd5\xd4\x72\x59\xcd\xae\xb0\x8d\xd7\xa2\xbf\xf1\x34\xfd\xf7\xfb\xc8\x1d\xf2\x7a\x37\xda\x5a\x28\x89\xa6\xdc\xde\x6c\xf9\x67\x2c\x2b\xd7\xf4\x62\x4e\x59\xe4\xed\xa4\x9c\x76\xe2\x31\x76\xfd\x82\x68\x44\x42\xbc\xea\x6b\x7a\x9c\xe1\xa5\x41\xb1\x40\xb1\xd2\xa0\x58\xa0\x58\xa0\x58\xa0\x58\x5b\x86\x62\xa5\x7b\x86\x62\xb5\xbd\x27\x2d\x53\xac\x34\x28\x16\x28\x16\x28\x16\x28\x16\x28\x56\xf7\x29\x56\x7a\x4b\x43\xa7\x34\xa0\x53\xe7\xa0\x53\xba\xd7\xa1\x53\x7a\x13\x42\xa7\x75\xfa\x3e\x25\x6c\x32\x65\x07\x2b\x57\x63\xa2\x59\xbd\x89\xf2\x3c\x0f\xd4\x77\x4b\xda\x46\x6f\x11\xd5\x46\x9a\xf3\x8d\xb2\xdd\x9e\x7c\xac\x4c\xfa\x91\x57\x77\xab\xd6\x69\x2a\xf6\xe2\x6d\xb5\xdc\xec\x5e\xb1\x3d\x29\x6a\x2d\x22\x7b\x58\xfc\xd4\x25\x48\x26\x98\x16\xaf\x7f\x5b\xe5\xda\xdd\xc0\xb3\x3f\x74\x72\xe0\xdb\x8d\x98\xd4\x16\x63\x52\xdf\x12\x21\x8f\x8b\xa8\xd2\x0c\x39\xe7\x46\x95\x36\x8c\x34\x09\x5d\x8f\x2d\x44\xaf\x84\xb7\x19\x98\xb7\x61\x3d\x81\x37\xa1\x8f\x09\x17\x65\x25\xa3\x79\x51\xd6\xac\xd0\xaa\x2f\xf2\xe2\xff\x30\x52\x2b\xca\xf6\xca\x10\x28\x4f\x3c\x99\xb1\x5c\x2b\xd6\x12\xe2\x32\xbf\x58\x9b\x74\xee\xe9\xb0\x80\xeb\x4c\x2c\x2d\x28\x30\x28\x30\x28\x30\x28\xf0\xd6\xa1\xc0\xd0\xeb\x42\xf4\xba\xde\xc1\xe4\xc8\x63\xd0\x95\x3c\x06\xb0\x46\xc0\x1a\x01\x6b\x04\xac\x11\xb0\x46\x6c\x69\x6b\x04\xd2\xd9\x20\x9d\x0d\xd2\xd9\x74\x2a\x9d\x0d\x8c\x7d\x30\xf6\x6d\x55\x63\x5f\x26\xdf\x1e\xd2\x1c\x9a\x8e\xc9\x26\xcd\xf1\xfa\xa4\x79\x17\xbd\x53\x7c\xcd\xae\xa4\x6d\x96\x3a\x37\x89\x97\x03\xe0\x74\xfb\xb3\x63\x9c\x23\xb7\x8e\x15\x8c\xbc\x35\x46\x4f\xd1\x13\x64\x80\xfd\x33\x4e\x0b\x46\x7e\x46\x2f\x68\xb3\xba\x55\x3e\xa7\x16\x73\x05\xcd\xcc\xdc\x1b\x66\x60\xa4\x2f\x3c\x4d\x86\xd8\x12\x6d\x90\xef\x57\x2b\xe6\x4a\x86\x5e\x2c\x5b\xf4\x2b\x4f\xd1\xef\xec\x25\xdb\xb2\x86\xa9\x5d\x59\x4b\x46\x07\x1b\xfb\xce\x4f\xdb\xf7\xc5\xef\x67\x17\x4e\x1a\xa6\xe6\xcd\x2f\xe5\xfc\x0c\x7f\x79\xf8\xcb\xc3\x5f\x1e\x96\x12\x58\x4a\x60\x29\x81\xa5\xa4\x67\x2c\x25\xbd\x63\x08\x00\xa1\x06\xa1\x06\xa1\x06\xa1\x06\xa1\xde\xd2\x84\x1a\x08\x0d\x08\x6d\x8b\x22\xb4\x4d\xe9\x2f\xff\x94\xa8\xae\x72\x80\x57\x57\x89\x5c\x7c\x94\x8e\x93\x03\x24\x11\xe8\x47\x9a\x35\x4c\x2d\xb1\x96\x4c\x38\x5c\xa8\x2d\x0e\xf2\x8f\x86\xf3\xbd\x21\xba\x4f\xe2\xbc\x58\x4c\x22\x3c\xa7\x0f\xbe\x5c\xbd\xb1\xaf\x6e\x77\xe1\xd7\x4e\xe9\x00\xef\x52\xae\x07\xc5\x5f\x3a\xcf\xb9\x04\x96\x3a\x43\x4e\x91\x13\x55\x2e\xef\x23\x24\xde\xfc\xf8\xc2\x17\x0a\x3e\xee\x2d\xfa\xb8\x7f\xbd\x41\xd1\xbf\x93\xe2\xa3\x3f\x4c\x0e\xf2\x8f\x3e\x41\xd6\xb5\x28\x49\x5a\xf8\xce\x1f\x27\xc7\x5c\xdf\xf9\xf5\xb6\x31\x29\x9c\xe5\x4f\x90\x09\x8f\xb3\xfc\x3a\x1b\x69\xd6\x6d\xbd\x39\x01\xd3\x48\xac\xb8\xc2\x27\xfe\xe9\x11\x57\xc0\x3c\x50\xd7\x2d\xdd\x15\x37\xc3\xe2\x77\x21\x6e\x5c\x3f\xf4\xce\x0b\x1e\xb8\xa2\x03\xb0\x02\xb0\x02\xb0\x02\xb0\xc2\x15\x1d\xae\xe8\x70\x45\x87\x2b\x3a\x40\x3f\x40\x3f\x40\x3f\x40\x3f\x40\x3f\x5c\xd1\xe1\x8a\x0e\x57\x74\xb8\xa2\xc3\x8e\x06\x3b\x5a\x0f\xda\xd1\x32\xf9\x36\x17\x15\x0e\x33\x4f\xad\xc7\x15\xbd\x9d\xa6\xaa\xcd\x58\xf2\xf1\x0b\xf7\x91\x69\x91\xd4\x3d\xab\x99\xd2\xea\xa8\x59\x6e\x66\x77\xdf\x9f\xf5\x7c\x51\x2f\xe6\x6d\xed\x4c\xf8\xab\x3f\x3f\x66\xf1\x59\xa1\x2f\xdc\x47\x3f\xdf\x4f\xee\xf0\x5e\x7f\x65\x2d\x19\x3d\x6c\x6a\x6a\x4e\x11\xd7\xd8\x8b\xcb\x53\x0e\xd9\xbd\x7a\x41\xb4\x3e\x2f\x5a\x8f\x27\xd9\x7d\x9e\x9f\xad\xc5\x64\xe0\xc5\x62\x5d\xb4\x97\xb8\x67\x4a\xe4\x09\xb1\x6a\x2f\x90\x59\xbe\x6a\x67\xc8\x14\x49\x07\xdb\x32\xbc\xc3\xb7\x96\x4c\x04\x76\x36\x74\xf9\xde\x5f\x7f\xf9\xde\x4a\x07\xf2\x5a\x99\x5c\x2d\x84\xaf\xd8\xf3\xf4\xac\x5c\xb1\x75\x26\xd5\x2e\x65\x1d\xd8\x3f\xef\x92\x8e\x7e\xfa\xb6\xda\x29\x3d\x66\x6a\xa5\x82\x9a\xd5\x5a\x98\xd5\x83\xf2\xd6\x0d\x9c\xd8\xf4\x6b\xc8\x22\xb9\x54\x65\xc3\x6d\xcb\xcc\x02\x2e\xc2\xb6\xdb\xa2\x6d\xf7\x73\x7d\x9d\x92\x36\x4f\x0a\xd3\xee\x02\x79\xdc\x35\xed\x76\x4b\x92\x75\x55\x54\x35\x90\x9b\xa5\x4a\x99\xa4\x7f\x6b\x47\xad\x24\x4b\xd7\x54\xeb\x5f\xbf\x48\x1b\xe7\x55\xa2\x37\x48\xa0\xa1\xbc\xff\x56\x13\xa1\x28\xef\x8f\xf2\xfe\x1b\x5c\xde\x7f\xc3\x34\xe3\xb0\x4a\xfd\xdd\xdd\x70\x32\x33\x64\x8a\xa6\x63\x67\x9c\xe3\xde\x5e\xfe\xd1\x49\x09\x10\xd8\x46\x6c\x80\x5d\xd6\xd1\x43\xdd\xff\x18\x26\x87\xc5\xa1\xce\x5c\x52\xb3\x09\x7b\x20\xf9\x97\xe0\x3d\xda\x15\x2a\x56\x99\x49\xb6\x82\x1d\x7c\xfc\x3c\xfd\xc4\x30\x7d\x6b\x3f\xb9\x8b\xdd\x97\xf2\xde\xc6\x9d\xa3\xf8\x51\xae\x6a\x5f\x14\x6d\xcc\x1b\x05\x2d\x1e\x63\xbf\xcf\x57\xdf\xb9\x98\xf4\x5c\xd3\xe6\x33\xda\x93\xe4\xb4\x58\x89\x47\xc9\x61\xbe\x12\x0f\x90\x04\x19\x09\x5c\x89\x7c\x34\xd8\x0a\x74\x3b\x14\xba\xe6\x72\xe1\x4b\x2a\x45\x4f\xcb\x25\x15\x38\xdc\xf6\xc2\xf2\x3c\xb8\x49\xdd\x85\x9d\xf9\xa2\x5f\xd9\x1e\x30\x25\x0f\xd9\x47\xb1\xe0\x59\xd9\x2b\x2f\xe9\xe6\xc4\xa4\xd3\xe4\x0c\x39\x55\xa5\x16\xac\x73\x66\xa0\x0a\xe0\x34\xd5\xe2\x69\xea\xbd\x7d\x37\x2f\x17\xa6\xc4\xb9\xe9\x24\x39\xee\x9e\x9b\xda\x2f\x5d\x1a\x9f\x59\xba\x23\x7c\xe2\x3f\xb7\x33\x40\xba\xdc\x25\xad\x29\xaa\x4f\xa0\x3c\x2c\xfe\xda\x55\x79\xd2\x19\xf7\x57\x48\x98\x10\x09\x03\x17\xac\xae\xb8\x60\xc1\xf6\x0e\xdb\x3b\x6c\xef\x9d\xb2\xbd\x67\x3e\xd1\xd7\x42\x25\x87\xd6\xcd\x90\x9d\xc9\xaf\xa5\xd4\xd7\x14\x6e\xa3\xdb\xc4\x30\x35\xab\x2c\xd4\x09\x82\x59\x8f\xe2\x90\xfe\xd7\x3b\x02\x94\x85\x78\x0d\x4b\x0d\x3e\x93\xec\xe1\xe7\xf5\x6e\x69\x10\x80\xa4\x5b\x4d\x6f\x01\x24\x05\x24\xdd\x60\x48\xfa\xb2\x41\x53\x61\xd0\x35\x73\x94\x1c\xa6\x07\x63\xe3\x0e\x06\xbd\xc7\x87\x41\xdd\x66\xbb\x00\x3e\xff\x6e\x1f\xb9\xd7\x4e\xac\x98\x35\x56\x4b\x46\x91\x69\x0c\x7c\x1f\xd5\x2c\xfa\x3b\xfb\xe8\xa7\xfb\xdd\x58\xcf\x87\x45\x2c\x43\x55\x02\xc5\x49\xfb\x36\xb1\xfd\xc6\xef\x75\xd3\x28\x56\xfd\xd4\xe3\x29\x14\x33\x4b\xe4\xac\x58\x81\x67\xc8\x29\xbe\x02\xd9\x4a\x3c\x18\x1a\x8c\x5b\xf5\x96\x4d\x25\x04\x78\x3c\x7c\x25\x26\xe8\x48\xb5\x17\x55\xd5\x93\xfc\xcb\x2e\x24\xc7\x40\x06\x09\x22\x91\x20\x32\x83\xf8\x65\xc4\x2f\x23\x7e\x19\xf1\xcb\x5b\x26\x7e\x39\xd3\x33\xe1\xb9\x6d\xef\x49\xcb\x71\xa3\x19\xc4\x8d\x22\x6e\x14\x71\xa3\x88\x1b\x45\xdc\x68\xf7\xe3\x46\xdb\x7e\x86\xcf\x6c\xe9\x48\xb9\x0c\x22\xe5\x3a\x17\x29\x97\xe9\xf9\x48\xb9\x4d\x98\x71\x92\xfe\x51\x84\xdc\x21\x9c\x0d\x97\xd8\x6f\x63\x6b\xc9\x31\xfa\x99\x08\xfd\x54\x84\x6c\xe7\x7f\xb8\xb2\x96\x8c\xde\x93\xd7\xca\xfe\x4d\x55\x74\x37\xfe\xaa\xbc\x56\x4e\xb3\xab\x16\x93\xa9\xb9\xf3\xf6\xf1\xad\x8d\x0e\xf2\x35\x0d\x4d\xd4\x34\x34\xd1\x4c\x43\xeb\x74\x7a\x6d\x60\xc2\xf1\xbc\x67\x33\x6c\x8d\x7e\x7c\x90\x8c\x86\x3b\x73\xf2\x0a\x39\x63\xdc\x95\x93\xbe\x69\x90\x7e\xbb\x9f\xdc\x5b\xcf\x4a\x27\x8a\xaf\xc7\x1a\xd7\x90\xe1\x26\xba\x03\xec\x9a\x3a\x16\x3a\xde\x02\xbb\x62\xc6\x30\x53\x85\x82\x93\xf9\xae\xe7\x71\xe8\x53\xc1\x06\xdb\x75\xa5\x4c\x95\xa4\x5e\xd4\xdd\x67\x03\xc1\x66\xb1\xd9\xcc\xa8\x4b\xe1\xa0\xf4\x34\x3d\xd9\x24\xb2\xaf\x66\xf5\xa2\x4a\x12\xc8\x28\xc8\x28\xc8\x28\xc8\x28\xc8\x28\xc8\x28\xc8\x28\xc8\x28\xc8\x28\xc8\x28\xc8\x28\xc8\x28\xc8\x28\xc8\x28\xc8\x28\xc8\x28\xc8\x68\xb7\xc8\xe8\xef\x0f\x09\x72\xd7\xa0\xcc\xb3\xa5\x65\x4d\xcd\x49\xa5\x45\x7f\x76\x88\x7e\x31\xe2\x7a\x28\xde\x5b\x27\xe0\x7a\x81\xdf\x11\x8f\xf2\xf4\x58\x55\x55\x6f\xc4\x6f\x6d\x8e\xb1\x7e\x82\x4c\x08\x3c\xf6\x08\x49\x72\x3c\xb6\x9f\x0c\x93\xc1\x50\x37\x42\xd1\x97\x50\xcf\xc1\x73\xe1\x40\x6c\x2f\xdd\x53\xbf\x72\x87\xa0\x60\xf2\x41\x61\x21\xd4\xef\xf0\x94\x11\xda\x5d\x3f\x6a\x5a\x0e\xed\xfd\x76\x8e\xaa\x2e\x8c\x6e\x9a\x07\x87\x54\x85\x06\x34\x3f\xbc\x88\x04\x40\x8c\x74\x8b\x31\xd2\xef\xe8\xbb\xa9\xef\xfa\xb4\x08\x8f\x3e\x4a\x0e\xbb\xe1\xd1\x6d\x15\x0c\x21\x91\xd1\xcd\xc9\x8d\x00\x59\xe1\x8b\x7e\xfe\xc7\x3b\x5c\xc1\x70\x87\x13\xf0\x2c\x65\xc1\x6e\x6f\xbd\x9f\x0e\x8b\x02\xc4\x38\x23\xc6\x19\x31\xce\x88\x71\x46\x8c\x33\x62\x9c\x5b\x89\x71\x6e\x6f\x92\xe5\x6e\x46\x4c\x37\x1f\xe3\xdc\xb6\x6d\x3f\xfd\xbb\xaf\x70\xb7\xfd\xbd\x21\xa1\xcb\x52\x19\xb8\x4f\x64\x7a\xec\xb0\x2e\x80\x68\xe5\xad\xa6\x81\x20\x5a\x19\xd1\xca\x1b\x1c\xad\xdc\x0b\x90\xa7\x09\xa9\x1d\x1e\x8c\xfc\x08\x49\xd2\xb1\xd8\xa8\x13\x8c\x4c\xbd\xc1\xc8\xa2\xc5\xda\x38\xe4\x4d\x98\xb7\xff\xf7\x06\xc9\xab\x6d\xb6\xc8\xc9\xe3\x98\x70\x14\x59\x55\x4b\x16\xfd\xc4\x20\xfd\xc8\x80\xbb\xbd\x55\xa4\x51\xac\x98\xd3\xd7\xf4\x5c\x45\x2d\x78\x71\xa9\xea\x18\xa0\x27\x79\x03\x8f\xa9\xa5\x84\x47\xad\x9e\x70\x14\xf2\x41\xde\xca\xa0\xeb\x76\xe3\xf3\xa3\x30\x4a\x9a\x73\x5a\xb2\xca\x9a\x9a\x4b\xc4\x87\xae\xbb\xdb\xa5\xd3\xf6\xac\x6e\x95\x37\x9b\xe7\xe0\x35\x32\x27\x3e\x8e\xf3\xe4\x2c\xff\x38\x52\xe4\x34\x39\xd9\xc2\x7e\xc8\x79\xf5\xf4\x9a\x56\x0c\xff\x64\xf6\xd4\x5f\xe8\x3b\x28\xe1\x1d\xbb\x99\x3a\xeb\xce\x5c\xf8\xb3\x99\xc2\x6d\x10\x6e\x83\x70\x1b\x84\xdb\x20\xdc\x06\xe1\x36\x08\xb7\x41\xb8\x0d\xc2\x6d\x10\x6e\x83\x70\x1b\x84\xdb\x20\xdc\x06\xe1\x36\x08\xb7\x41\xb8\x0d\xc2\x6d\xb0\x4b\x6e\x83\xbf\x33\x44\xd2\x22\xe0\x57\x2d\xe9\xda\x73\x65\xad\xc8\x67\xab\x3a\xd6\x57\x52\xbf\x8a\x55\x36\x56\xed\x66\x3d\x44\x8a\xfe\xd8\x10\xfd\x81\x5b\xc8\xdd\xbe\x36\x9c\x08\xe0\x1f\xea\x6b\x92\x09\xf2\xe6\xed\x53\xe0\x94\xd3\x7c\x9b\x10\xe1\x21\x7e\x43\xca\xdb\x45\x19\x61\x1c\xf4\xe0\x59\xdd\x6a\x9f\xad\x6d\xab\xf1\xc2\x67\xc3\x79\xe1\x05\x3a\x2b\x79\x61\xbd\xc5\x67\x13\xc4\x80\xc9\x41\x30\x32\xa8\x22\xa8\x22\xa8\x22\xa8\x22\xa8\x22\xa8\x22\xa8\x22\xa8\x22\xa8\x22\xa8\x22\xa8\x22\xa8\x22\xa8\x22\xa8\x22\xa8\x22\xa8\xe2\xc6\x51\xc5\x4f\x0c\x91\xfd\x7e\x87\xc1\x80\x90\x64\x41\x5e\xe8\xbf\x1a\xa2\xef\xf2\xf8\x10\x3e\xdb\x1c\x2f\xe4\xb0\xaa\x4d\x70\xf0\x81\xeb\xf5\xdc\xed\xf9\x13\x40\x01\x6f\x82\x02\x9e\x0d\xa7\x80\x0f\xd3\x58\xa3\x90\x6b\xd1\x19\xb0\x3d\xb0\x3d\xb0\x3d\xb0\x3d\xb0\x3d\xb0\x3d\xb0\x3d\xb0\x3d\xb0\x3d\xb0\x3d\xb0\x3d\xb0\x3d\xb0\xbd\x2e\xb3\xbd\xcd\x17\xbe\x08\x7a\x08\x7a\x08\x7a\xb8\x89\xe8\xe1\xd7\x23\xe4\x6e\xe1\x93\x58\x34\x72\x9a\xeb\x8a\x38\x46\x3f\x1d\xa1\xff\x35\x42\xb6\xb1\x3f\x37\xac\xf4\x72\x77\x5e\x2b\x5f\x30\x72\xda\x26\x28\xf4\x12\x58\x27\xa4\x33\x15\x60\xec\x42\x2f\x7f\xb8\x4f\x14\xd2\x61\xc3\x2a\xf3\x42\xd2\x17\xf7\xd1\x5f\xa9\x2d\x59\x1d\x54\xb8\x45\xe6\x29\x51\xdc\x92\xd5\xe2\x2f\x9b\x2d\xe0\xfa\xb5\xe4\x94\x18\xe9\x23\xe4\x10\x1f\xe9\x31\x32\x4a\xf6\x37\x99\x8d\xa0\xa9\x82\xd5\x61\x75\x5a\xda\x96\xb1\x00\x90\x14\x90\x14\x90\x14\x90\x14\x90\x14\x90\x14\x90\x14\x90\x14\x90\x14\x90\x14\x90\x14\x90\x14\x90\x14\x0e\x90\x40\x98\x40\x98\x40\x98\xdd\x42\x98\x2f\x0e\x92\xbb\xfc\x0e\x90\xd2\xd3\xf1\x23\x83\xf4\x67\x36\xd6\xd3\xf1\x61\x8f\xa7\xa3\xe3\xdf\xb8\xd9\xa0\xdd\x26\xf7\x77\xac\xef\xe3\x08\x94\x07\x94\x07\x94\x07\x94\x07\x94\x07\x94\x07\x94\x07\x94\x07\x94\x07\x94\x07\x94\x07\x94\x07\x94\x07\x94\x07\x94\x07\x94\x07\x94\xb7\x11\x28\xef\xb3\x43\x64\xac\xa9\x58\x66\x4f\x4d\x94\x7f\x33\x44\x3f\xb4\xf1\x35\x51\x62\x75\x63\x9a\x7d\xd5\x51\xc0\xf9\x6a\x39\x5f\x3b\x0b\x9d\x34\x05\x0d\xc1\xfa\xc0\xfa\xc0\xfa\xc0\xfa\xc0\xfa\xc0\xfa\xc0\xfa\xc0\xfa\xc0\xfa\xc0\xfa\xc0\xfa\xc0\xfa\xc0\xfa\x10\xdb\x0c\x9a\x08\x9a\x08\x9a\xf8\xf2\xa1\x89\x7f\x38\x48\x46\x65\xbd\x95\x4a\xd9\xb0\xb2\x6a\x41\x2f\xe6\xc7\xd6\x92\x63\x1c\x42\x19\xc5\xb2\x5a\x28\x19\x39\xfb\x37\xcd\xb4\xe8\xcf\x0d\xd2\x77\x0f\x90\x57\x7a\x2e\xbf\xb2\x96\x8c\x1e\x6a\x1c\x9c\x7b\xce\x69\x6d\xce\xc8\xa5\x9c\xd6\xe2\x47\xd9\x6d\x29\xb7\xa9\xc5\x64\xc0\x95\x9b\xcd\x21\xf0\x59\xb2\x28\x40\xe1\x45\xf2\x18\x07\x85\x67\xc9\x34\x99\x0c\x8c\xe2\xf5\x8c\x66\x62\x2d\x99\x08\x18\x84\xa6\xa2\x7b\x97\xc2\x71\xe1\x69\x7a\x52\x40\xc2\x80\xe7\x90\x3a\xf9\x0f\x3d\x3d\x24\x61\x11\xc4\x00\x88\x00\x88\x00\x88\x00\x88\x00\x88\x00\x88\x00\x88\x00\x88\x00\x88\x00\x88\x00\x88\x00\x88\x00\x88\x70\x16\x04\xde\x03\xde\x03\xde\xeb\x16\xde\xfb\xdc\x10\x49\x09\xbc\x67\x2e\xa9\xd9\x84\x4d\x8b\x78\x53\x01\x35\x95\x0b\x15\xab\xcc\x4e\x2f\x05\x6d\x49\x2f\xe6\xf4\x62\xde\xa2\x3f\x3c\x44\xbf\x33\x40\xee\x65\x4d\xa4\xbc\x2d\x38\x15\x95\xff\xf7\x26\x1d\x0a\x45\xdb\xf3\x46\x41\x4b\x8b\xb6\xdb\xe4\x59\xf8\x08\xbf\x61\xbe\xba\x7f\x76\x39\xe5\x9a\xc7\xc2\xd5\xb0\x3e\x3b\x2c\x85\xb3\xc3\xc7\xe8\xa3\xd2\xc1\xb0\x66\x54\x6b\x2b\x20\x4b\x76\x18\xb8\xf6\xe0\x8f\x08\x9c\x08\x9c\x08\x9c\x08\x9c\x08\x9c\x08\x9c\x08\x9c\x08\x9c\x08\x9c\x08\x9c\x08\x9c\x08\x9c\x08\x9c\x08\x9c\x08\x9c\x08\x9c\xd8\x5b\x38\xf1\x6f\xf7\x91\x5d\x76\xec\x31\x1f\x26\x93\x77\x92\xfe\xde\x3e\xfa\x39\x4f\xa5\x8e\xa1\xc6\xce\x80\xb3\xec\xce\x79\x76\x67\xfc\x61\xb7\x5a\x87\xfb\xd7\xcd\xe6\xeb\xf7\x34\x49\x0b\x52\x77\x9c\x1c\xe3\xa4\xee\x11\x92\x24\x63\xa1\x15\x3b\xdc\x17\x6e\x4b\xd5\x8e\xd9\x70\x76\x37\x4c\x07\xab\xc3\x84\xdd\x4e\x20\xdd\x1f\x90\x1b\x90\x1b\x90\x1b\x90\x1b\x90\x1b\x90\x1b\x90\x1b\x90\x1b\x90\x1b\x90\x1b\x90\x1b\x90\x1b\x90\x1b\x90\x1b\x90\x1b\x90\xdb\x86\x20\xb7\x8f\x3e\x45\xf6\xd8\xc8\x2d\x20\xd1\x5f\xc9\xc8\x59\xf4\x47\x9f\xa2\x7f\xb2\xd7\x45\x70\x0f\x35\x46\x70\x73\x46\x2e\x7e\x8f\xcb\xde\xdc\x6c\x7c\x73\x46\xae\xc7\x71\x5b\x1a\x68\x0a\x68\x2a\x0d\x34\x05\x34\x05\x34\x05\x34\xb5\x65\xd0\x54\xba\x67\xd0\x54\xdb\x7b\xd2\x32\x9a\x4a\x03\x4d\x01\x4d\x01\x4d\x01\x4d\x01\x4d\x75\x1f\x4d\xa5\xb7\x34\x49\x4a\x83\x24\x75\x8e\x24\xa5\x7b\x9d\x24\xa5\x37\x21\x49\xca\x2c\x06\xba\x18\x91\xe3\xc2\x7f\xe9\x20\x19\xe7\xfe\x4b\x23\x24\x4e\x86\x42\xfd\x97\xe6\x8c\xdc\xac\x6e\x95\x9b\xf5\x4f\x9a\x0e\xf7\x4f\x8a\x51\xa5\xda\x3f\x69\xce\xc8\xf9\x1c\x93\x62\xff\x61\xbb\x0b\xb9\x76\x88\x3d\x46\x51\x39\xcf\xba\x57\xfc\x57\x27\x89\x96\x00\x50\x13\xe4\x28\x39\x4c\x07\x96\x8c\xdc\x8d\x28\xff\x5f\xa5\x2f\xbe\x8f\x3c\xdc\xcc\x80\xa5\xdf\x1d\x21\xef\x8c\xd0\x9f\x88\x44\xdf\xee\x88\x8d\x6f\xf5\x5d\x66\x9b\xb2\x94\xd3\x23\x3c\x8a\x36\xcb\x4e\x63\xe2\x3b\xf7\x9d\x0d\xbc\xbc\x68\x49\x53\x4a\x6c\x64\x98\x42\x96\x50\x52\x45\x45\x2f\x8a\x53\xb9\x61\x2a\x95\xa2\x73\xb0\xcf\x29\x39\xf3\xc6\x7c\xa5\xa8\xe4\x74\x53\x63\x8b\x5b\x73\x4e\x8b\x4c\xe8\xf3\x5d\x55\x1e\x97\x6d\xe5\x58\x1e\x50\x94\xe5\x8a\xc9\x15\xb0\x92\x69\x64\x35\x8b\x6f\x7f\xf2\x5b\x92\x82\x3a\xa1\x2c\xf2\x27\x72\xc5\x96\xef\x57\x13\xca\xa8\x92\x2a\x14\x26\xf8\xe6\x96\x33\x6f\x28\x66\xa5\xc8\x0e\x4e\xec\x6b\xb0\x77\x74\xd9\x9c\x96\x8b\xdd\x2a\xba\xe6\xfd\xf4\xdf\x11\x21\x6f\x8b\xd0\xb7\x46\xa2\x6f\x76\x06\xe8\x9b\x7d\x5c\x1f\x7a\x4c\x2d\xaa\x79\xcd\x14\x9a\xbd\x48\x81\x6a\x59\x46\x56\xe7\x9b\x95\xa3\x43\xab\xfc\x10\x62\x98\x0a\xd3\x65\xca\x37\x9c\xdd\x7b\x55\xbd\xc6\xfa\x5f\x5e\xd1\x2c\xcd\xfe\x3e\x99\xcc\xb0\xe9\x06\x3f\xe0\x2f\x69\x0a\x97\x0c\x5c\x5f\x36\x4c\x25\x39\x7e\x94\x5d\x6b\xaa\x59\x8e\x61\xd8\x51\x53\x7c\x8d\x5c\xa7\x65\xea\x87\xaa\x17\x85\xb9\x85\xeb\x8c\xee\xb5\xfc\x68\x2a\x21\x11\x3b\xe9\xd8\x12\x36\x6f\x14\xd4\x62\x3e\x61\x98\xf9\xb1\xd2\xb5\xfc\x58\xa5\xa8\x67\x8d\x9c\x36\xb6\xe7\xbc\x35\xc7\x5a\x49\xc4\x76\x78\xdf\xd5\x4b\xd7\x7f\xab\x8f\x9c\x60\x9f\x69\x92\x1e\x22\x8f\x90\x6d\x93\x42\xbd\xa2\x43\xa4\xc9\xa5\x47\x4e\xb2\xbb\xc7\xe9\x61\x72\x90\x6c\x4f\x65\x99\xf0\x5e\xd7\xed\x81\xc2\xe3\x88\x10\x1e\x07\x48\x82\x0b\x8f\xa6\x5b\x0c\x17\x1c\x25\xa3\x7d\x82\x23\xfe\xef\x47\x5c\xc1\xf1\x6a\xa1\x86\x2a\x59\xa3\xc0\x0e\x95\x72\x93\x60\x42\x64\x8f\xf8\x45\x08\x91\x49\xe7\xe7\x4e\x8a\x93\x4b\x64\x9e\xcc\x79\xc5\x49\x3c\x4d\xce\xb4\x10\xe7\x3d\xc5\x7b\x7e\x91\x63\x4f\x0b\x80\x14\x80\x14\x80\x14\x80\x74\x0b\x01\x52\xa8\x56\x21\xaa\x55\xef\x10\xe4\x6f\x44\xc8\xd7\x23\xf4\xab\x91\xe8\x57\x9c\xa9\xfa\x68\xe4\x92\xf7\xcc\xa6\x17\x15\x4b\x9c\xbb\x94\x25\x6d\x59\x98\x5b\x1d\xb6\xe1\x6e\x59\xf2\x2b\xe1\x83\xe5\x51\xe2\x8a\x46\x71\xb4\xa8\xe5\x55\x3e\x25\xf2\xd8\xe6\x55\xf6\x04\xe5\x74\x16\x83\xd4\x06\xf4\xd5\x55\x2d\xc7\xd4\xc9\xc2\x0d\xd7\x0e\xea\x8a\x76\xbd\x30\x22\x4f\x73\xfc\x75\x95\xbc\xa9\x66\xf9\x3a\xd1\x8d\x9c\xb3\xf1\xb8\x9b\x03\x37\x31\xdb\xf3\x52\xb1\x58\x27\xbd\x03\xa5\xb2\x3b\xed\x17\x92\x0f\x59\x16\xdf\x9b\xdd\x44\x42\xf4\x73\x55\x53\x8b\x75\xfb\x18\xa3\xbc\x0b\x73\xbc\x07\xf5\x4e\xa9\x00\xf5\x00\xf5\x00\xf5\x00\xf5\x00\xf5\x5b\x1a\xd4\xff\x76\x84\xbc\x14\xa1\x9f\x8d\x44\x5f\x74\x76\xdb\xf7\x46\xa6\x3c\x79\xd7\x4a\x05\x4d\xb5\x34\xe7\xd3\x9f\x33\x8d\x92\x9a\xe7\xfb\xf0\x9c\x51\xd0\xb3\x37\x7c\x6e\x3a\xf6\x74\xbb\x89\xdb\xd8\x84\x27\x13\x47\x12\xca\x82\x90\x23\x62\x93\x2c\x69\x45\xb6\x4c\xdd\x5d\x44\x53\x0c\xb3\xb4\xa2\x16\x6d\xb7\x21\xb3\xa2\x8d\x2d\xab\x05\x5b\xfb\x8f\x89\x5f\x63\xca\xb2\x5e\x54\x0b\xfa\xeb\x6d\xf1\xbd\xa4\x29\x6a\x8e\x53\x6f\x63\x4c\x40\xd0\x9c\xab\x5a\x8a\xc6\x07\x2d\xf7\x26\xa1\x6f\x27\x94\x69\x9d\x8b\x24\x4f\xc7\x0d\xb3\xf6\xcd\x5c\x4b\x43\x59\xa8\xfb\x5c\xfb\x33\xca\x2b\x89\xd8\x4e\xd1\x9f\x29\xfb\x45\xfc\xfe\x47\x2f\x0c\x90\x37\x0d\xd0\x37\x0c\x44\xbf\xe7\x38\xa1\x7d\xb9\xff\xb2\x94\x83\x6c\x89\xae\x18\xd7\x95\xbc\x6a\x2e\xa9\x79\x1f\x66\x70\x14\x35\xcd\x5c\x36\xcc\x55\x36\x16\x75\x7b\x7a\xb1\xea\xe1\xc1\x1d\xe5\x6a\x8d\xad\x93\x94\xc4\x5b\xe9\x4c\x5f\xc8\xea\x39\x57\xb1\xe6\x7b\x23\x3f\xe6\x38\xa3\xcb\x36\x27\xb9\x73\xd8\xbb\x5f\xc2\x33\x8c\xb6\xdc\x74\xf0\xbe\xe3\x7a\xe6\x7f\x58\x42\x11\x30\x89\xcb\x62\xaf\xb6\x3a\x28\xde\x61\x90\x9d\x79\xf8\xbf\xfc\x0b\xc3\x3a\xae\x0c\xa6\xd5\xec\xb5\xbc\x69\x54\x8a\x39\x76\x15\xf7\xf9\xe2\x17\x55\x0d\x9c\x50\x56\xa4\x06\xe4\x6f\xc4\x7e\x83\x25\xa7\xa5\xe3\xca\xe0\x8c\x61\x6a\x9e\x66\x95\xac\x6a\x65\xd5\x1c\x7b\x7b\x39\x3e\xc2\xcb\x8f\xb7\x67\x09\x75\xba\xa6\xc1\x65\xa7\x8d\x44\xec\xce\x52\xf5\xba\xf1\xea\x36\xb0\x83\xc1\x0e\xb6\x45\xed\x60\x99\x7c\x30\x16\x9e\x15\x58\x78\x9a\x4c\x72\x2c\x7c\x92\x1c\x27\xc7\x5a\xa0\x9a\x0b\x65\xb5\x5c\xb1\x6c\x56\xdc\x1e\x16\x7c\x35\x5e\x1f\x39\xef\xa2\x77\x0a\xa1\xe0\x0a\x6c\xb2\x09\x8b\xb0\xd1\x7f\xff\x34\x49\xca\xa2\x4e\xa5\x92\xd5\xc0\x73\xdc\x2a\xab\x65\x6d\xb9\x52\x60\xd2\x89\x7e\xef\x29\xfa\x43\xfb\xc8\x36\x76\xcb\x95\xb5\x64\x74\xb8\xb1\x07\xf9\x82\xbc\x75\x41\x2b\xc7\x1f\xe4\x55\x9c\x4a\x25\xcb\x6b\x77\xf3\x5c\x00\x8f\x72\x78\x94\xc3\xa3\x1c\x06\x13\x18\x4c\x60\x30\x81\xc1\xa4\x67\x0c\x26\xbd\x63\x0f\x00\xa8\x06\xa8\x06\xa8\x06\xa8\x06\xa8\xde\xd2\xa0\x1a\x24\x0d\x24\x6d\x8b\x92\xb4\x4d\xe9\x51\xfe\x4c\x30\xfd\x9b\x14\xf4\xef\x04\x99\xe0\xf4\xef\x20\x19\x27\x07\x82\xab\x5f\x97\x4a\x96\xcd\xfa\x24\x32\x5a\x8f\x67\xf9\xc5\x70\x28\x38\x42\xe3\x76\x1d\xeb\x52\xc9\x92\x58\xd0\xf3\x38\xbf\x8f\xf9\xdf\x6e\x77\x31\xd8\x5d\x8e\x8f\xb9\x97\x78\x3d\x24\xfe\xda\x0d\xe6\x25\x10\x55\x9a\x9c\x21\xa7\xaa\x7c\xce\x13\x64\x64\x3d\x43\x0a\x07\x29\xf8\x9e\xb7\xe8\x7b\xfe\xe7\x7d\xe4\xb4\xf8\xa0\x8f\x92\xc3\xfc\x83\x3e\x40\xd6\xb9\xfa\xc8\x94\x70\x5e\x3f\x49\x8e\xbb\xce\xeb\xeb\x6f\x65\x5a\x38\xb1\x9f\x22\x27\x3c\x4e\xec\xeb\x6f\xa6\xf5\x64\xbb\xc2\x27\xbd\xdd\x22\x27\xfe\x5b\x23\xae\xc8\x51\xea\x7a\xa7\x7b\xc5\xcf\x7e\x71\x85\x10\x3f\xf5\xbc\xd4\x3b\x27\x88\xe0\xad\x0e\xf8\x0a\xf8\x0a\xf8\x0a\xf8\x0a\x6f\x75\x78\xab\xc3\x5b\x1d\xde\xea\x30\x02\xc0\x08\x00\x23\x00\x8c\x00\x30\x02\xc0\x5b\x1d\xde\xea\xf0\x56\x87\xb7\x3a\x6c\x6c\xb0\xb1\xf5\xa0\x8d\x2d\x93\x6f\xaf\x53\x7a\x28\x45\x5e\x87\x9b\x79\x93\x44\xb9\x31\x45\xf6\xf2\xe6\xcd\xe8\xb7\xfe\xc3\x43\x64\x4c\xf8\xad\x5b\x65\xc3\x54\xf3\x1a\x9f\x0a\xdd\x18\x5b\x4b\x8a\x35\x33\xb6\x66\x14\x2a\xab\x9a\x5a\x2e\xab\xd9\x15\xa6\x73\x5b\xf4\x0b\x83\xf4\x53\x03\x84\xc8\x1b\xae\xac\x25\xa3\xdf\x2f\x95\xd9\x62\x4e\x5f\xd3\x73\x15\xb5\xe0\x35\x9e\xaa\xce\xc1\x71\x91\x37\x95\x72\x9a\x4a\x78\x74\x84\x09\x47\xbb\x18\xe4\x8d\x0d\xba\xf4\xd6\x87\xe3\x8c\x92\xe6\x10\x00\xab\xac\xa9\xb9\x44\x3c\xc6\x6f\x58\x10\xdd\x59\x4c\x56\x3f\x65\x56\xb7\x7a\xdd\x1d\x3e\x73\x2d\xd8\xac\x3b\x27\xbe\x9f\xf3\xe4\x2c\xff\x7e\x52\xe4\x34\x39\xd9\xc2\xf7\xc3\xed\xda\xd3\xec\x00\x68\x7f\x2a\x7b\xea\x7f\x2a\x3b\x28\xe1\x1d\x13\x86\xde\x67\xc2\xbf\x91\xe3\xf4\x98\xfc\x0a\xfc\x4b\x48\xda\x5f\xaa\xa7\x03\x45\x0f\x11\x07\x80\xa2\x87\x30\x45\xc1\x14\x05\x53\xd4\x56\x35\x45\xa1\xe8\x21\x8a\x1e\xc2\x04\x00\x13\x00\x4c\x00\x30\x01\xf4\x84\x09\x00\x45\x0f\x51\xf4\x70\xb3\x40\x4f\x14\x3d\xec\x44\xd1\xc3\x7f\x18\x26\xd3\xfe\x04\x16\x02\xff\x05\xa4\xb1\x60\xd2\xda\x34\x98\xac\x64\x47\x07\x3e\xb1\xe2\xf7\xe7\xe9\x87\x86\xe9\x77\x06\x5c\xd7\xda\xff\xd8\x27\xa7\xc1\x43\x04\x8b\xb6\x60\xb3\x53\x5b\x4c\x3a\xcd\xcd\xcb\xe6\xda\xc2\x06\x47\x5c\x7d\x86\xeb\x6c\x72\xf7\x63\x2a\x91\xab\xa8\x0d\xfa\x74\x63\x4f\xdb\x89\xb8\x78\x5c\x75\xc8\x41\x6d\x67\x7b\x1f\x2f\xb6\x9d\x22\x86\x92\xf8\xc5\x70\x72\xf8\x08\x4d\xd6\xfa\x6b\xd7\x8e\xae\x3f\x91\xcc\x83\xf5\xb1\xe5\x76\x7a\x2b\x7f\x61\x20\x45\x20\x45\x20\x45\x20\x45\x20\x45\x20\x45\x20\x45\x20\x45\x20\x45\x20\x45\x20\x45\x20\x45\x20\xc5\x6e\x23\xc5\xd3\xe4\x24\x3d\x1e\x3b\xe6\x78\x43\x3d\xc0\xdd\xa0\x64\x2f\x6a\x4f\x79\xb1\x01\xf6\xbb\xd7\xd9\x69\xf3\xb9\x53\x81\x7a\x82\x7a\x82\x7a\x6e\x22\xea\xf9\xc2\xd3\x24\x21\xa8\xe7\x92\x70\x76\x0c\xcc\xdb\x9b\x35\x8d\xe2\x55\x63\xc9\xa2\x5f\x7c\x8a\x7e\x6b\x2f\xd9\xce\xaf\xbf\xb2\x96\x8c\xee\x6d\x9c\xb4\x77\xd2\x34\x8a\x19\x63\x29\xbe\x9b\x5d\x96\x66\x97\xf8\x50\xa2\xf8\xb5\xc7\xf9\x21\xb2\xf5\x02\xa9\x21\x5b\x2f\x90\x1a\x90\x1a\x90\xda\x16\x42\x6a\x3d\x94\x0f\xa1\x67\x90\x1a\x02\xf5\x81\xd4\x80\xd4\x80\xd4\x80\xd4\x90\xad\x17\x91\xc4\x2f\x1f\xbc\xd4\xf3\x91\xc4\x9b\x32\x5b\xef\xf7\x91\x33\xc2\xef\xea\x18\x39\xc2\xfd\xae\x92\x64\x8c\x8c\x06\xa6\xcd\xe4\x4c\x29\xb1\x96\x4c\x48\x2c\x34\xab\x5b\x37\x93\x37\x53\x44\x70\xce\x86\xfb\x61\x0d\xd3\x41\xe9\x87\xc5\x7b\x60\x3b\x62\x89\x4e\xf8\xf3\xf4\x7e\x65\xbb\x07\x7d\xed\x74\x12\xf5\xda\x94\xeb\x01\xf1\x97\x8e\x73\x2e\x81\xa5\x4e\x93\x93\xe4\x78\x55\x86\xde\xfd\x64\xb8\xe9\xf1\x45\x46\x38\xa4\xe7\x6d\x31\x3d\xef\x57\xfb\x48\x5a\xe4\xc5\x3d\x4e\x8e\x79\xf2\xe2\x8e\x92\xf5\x2c\xc0\xe0\xa8\xef\x13\x42\x6e\x1c\x22\x8f\x70\xb9\xb1\xce\x66\x53\x22\xf1\xef\x04\x39\xea\x26\xfe\x5d\x5f\x13\xcd\x66\xe5\x6d\xab\x74\x89\x7f\x6a\xc4\x23\x5d\x76\xd7\xcd\xc9\xfb\xff\xb3\xf7\xf6\x71\x8e\x5c\x67\x9d\xef\x47\xea\xb6\x67\xe6\xf1\x24\x1e\x9f\x71\xb0\x2d\x8f\x6d\x59\x63\xf7\x8b\xa6\x47\xdd\xea\x79\xef\x79\x95\xfa\x65\xa6\x35\xed\x71\xa7\xdb\x6e\x3b\xc6\x9e\x4e\xb5\x54\xad\xd1\x8c\x5a\x25\xaa\xd4\x3d\xf1\xb2\x66\x37\x6f\x6c\xb2\x6c\x2e\x04\xd8\x04\x96\x10\xc2\x92\x1b\x12\x70\x5e\xc9\x85\xcb\x4d\x16\xb8\x7b\x6f\x12\x83\xc1\x9b\x37\x48\x78\xcb\x26\x10\x08\x09\x9b\x7c\x02\x2c\x04\xd8\x70\x73\x3f\x75\x4e\xbd\x49\xaa\x52\xa9\x35\x25\xb5\x7a\xf4\xfb\x67\x3e\x3d\xaa\xaa\x53\xa7\xce\x39\xf5\xd4\x39\xdf\xe7\x77\x9e\xc7\xb4\x34\x43\xe2\xa8\x61\x69\xdc\x02\xf2\xb6\xc7\xe6\x20\x18\x2f\xd8\x2a\xd8\x2a\xd8\x2a\xd8\x2a\x82\xf1\x22\x18\x2f\x82\xf1\x22\x18\x2f\x18\x3f\x18\x3f\x18\x3f\x18\x3f\x18\x7f\x20\x8c\x1f\xc1\x78\x11\x8c\x17\xc1\x78\x11\x8c\x17\x2e\x34\xb8\xd0\xb6\x79\x30\xde\x40\xe1\xf0\x66\x42\xfb\x6e\xc3\xad\x23\xec\x9f\xc2\x14\x15\x52\x74\x75\x45\xca\x26\xcc\xd6\xe4\x83\xc1\x0c\xca\xcb\x3e\x1f\x66\x9f\x09\xd3\x1d\xfa\x19\x29\xe7\x09\x91\x48\x9e\x7f\x1f\xf4\xaf\x94\x35\x7c\xa4\x28\x6f\xda\xf8\xbe\xbc\x5c\x59\xa8\xbd\x22\x35\x3f\x7b\x5e\x3f\x1a\x1c\x1e\xaf\x2b\x68\xa2\xae\xa0\x89\x66\x0a\xca\x14\xe8\x92\x18\xa6\xe7\x69\x9a\x0f\x53\xee\xe7\x6b\x61\x98\x9a\xcf\xe8\x37\x50\xd9\x47\x47\x89\xe9\x6d\x5f\xad\xff\x67\x3f\x3b\xca\xbe\xfd\x30\xed\xc8\x2a\x2a\x8f\x72\x3c\xd8\x58\xe9\x6f\x79\x1e\xe2\x7b\xf5\x13\x27\x15\x55\x76\xb8\x40\x21\xf1\x87\xc4\x1f\x12\x7f\xb8\xa1\xe0\x86\x82\x1b\x0a\x6e\xa8\xae\x71\x43\x75\x8f\x97\x05\xf8\x1f\xf8\x1f\xf8\x1f\xf8\x1f\xf8\xbf\xa7\xf1\x3f\xf8\x24\xf8\x64\x8f\xf2\xc9\x6d\x29\xf1\x7f\x5a\x88\x6d\xc7\xb8\xd8\x36\xfc\xe8\x45\x36\x4e\x63\x94\xf0\xd4\xd9\x66\x15\x55\x4e\x6c\x24\x13\x16\x17\x0a\x44\xe3\x7f\xd1\x1f\xb4\x0e\xb1\x01\x03\xb4\xc6\x62\x06\x65\xb5\xea\x50\x2d\xf1\xff\x83\x9d\x36\xf2\x62\x96\xc2\xdf\xa6\x5b\xaf\x10\xbf\xb5\x8b\x6f\x09\x1c\x75\x8e\xce\xd0\xa9\x1a\x69\xff\x08\xc5\x9b\x6f\x57\x08\xcc\xa0\xed\x6f\x51\xdb\xff\x95\x10\x9d\x16\xef\xf4\x51\x3a\xcc\xdf\xe9\x04\x6d\x6a\xec\x89\xad\x01\x49\xbe\x35\xc0\xd2\xdf\x6f\xb6\x8c\x49\xb1\xbd\xe0\x14\x4d\x38\xb6\x17\x6c\xb6\x10\x3f\xc3\xd2\x9c\xe1\x70\x49\x78\xe8\x62\x44\xfc\xf6\x0a\x04\xef\x32\x79\xdf\x33\x74\xa0\x1e\xdb\x57\x85\xed\x29\x2b\xb9\x8a\xbc\x56\xe6\x1c\x86\xfd\xd3\xd3\xec\x75\x03\xb6\x71\x1b\x6e\xcc\xf3\xe7\x95\xdc\x63\xc6\xa5\xf1\x07\x5c\x88\x7e\xce\x71\x02\xe8\x3e\xe8\x3e\xe8\x3e\xe8\x3e\xe8\x3e\xe8\x3e\xe8\x3e\xe8\x3e\xe8\x3e\xe8\x3e\xe8\x3e\xe8\x3e\xe8\x3e\xe8\x3e\xe8\x3e\xe8\x3e\xe8\xfe\xf6\xa4\xfb\x97\x05\x86\x1b\xe3\x18\x2e\xfc\xe8\x45\x76\x98\xc6\x69\xcc\x17\xc0\x39\xc8\x50\x20\x7c\xff\x11\x7f\x4c\x17\x67\x43\xb5\x68\xce\x51\x8b\x6a\xc2\xff\x2d\x07\xe1\xbf\xd3\x22\xfc\x4e\xde\xf5\xa0\x2b\xe3\x6f\x0b\xf1\x12\x80\x2a\x4d\xe7\xe8\x4c\x0d\xef\x4f\xd0\xc8\x66\x5a\x1a\xc4\x1f\xc4\xbf\x45\xe2\xff\xb5\x10\x9d\x15\xef\xf9\x71\x3a\xca\xdf\xf3\x31\xda\xe4\xe8\xa3\x29\xc1\xfc\x4f\xd3\x49\x9b\xf9\x6f\xbe\x94\x69\x41\xfd\xcf\xd0\x29\x07\xf5\xdf\x7c\x31\xad\x1b\x1c\x11\xd6\x27\x58\x83\x13\xff\xbd\x11\xdb\xe0\x44\x5d\xc3\xfa\x38\x8d\xcf\x01\x71\x86\x30\x3e\x6e\x91\x7d\xda\x67\x86\x10\xdd\x07\xe0\x15\xe0\x15\xe0\x15\xe0\x15\xd1\x7d\x10\xdd\x07\xd1\x7d\x10\xdd\x07\x0e\x00\x38\x00\xe0\x00\x80\x03\x00\x0e\x80\x40\x1c\x00\x88\xee\x83\xe8\x3e\x88\xee\x83\xe8\x3e\xf0\xaf\xc1\xbf\xb6\xcd\xa3\xfb\x6c\x22\x1e\x4f\xc0\x3c\x79\x3b\x86\xf7\xf9\xa3\x01\xda\x5b\x93\x69\x96\xa7\x93\xfd\xaf\x03\xec\x57\xfb\x1c\x51\xef\x1f\x6c\x2c\x4a\xe7\x49\x36\x1c\xa9\x64\x33\xca\xca\x8c\xa2\xa6\x8a\x45\x8b\x8e\x6b\x5d\xae\x45\xcf\x3c\xd1\x62\x72\x83\x66\x13\xa2\x5c\xf0\x1f\x6b\x0f\xb3\xfd\x2e\x7b\x1a\x9c\x11\xa8\x32\xca\x4a\xa3\x0d\x0d\xdc\x2d\x9b\x81\xaa\x1e\xaa\xfa\x0c\x9c\x3b\x70\xee\xc0\xb9\x03\xe7\x4e\xcf\x38\x77\x32\x5d\xe3\xbb\x08\xbc\x26\x2d\x43\xf5\x0c\xa0\x3a\xa0\x3a\xa0\x3a\xa0\x3a\xa0\x7a\xe7\xa1\x7a\xe0\x8b\xf5\x4c\x4f\x63\xc4\x0c\x30\x62\xfb\x30\x62\xa6\xeb\x31\xe2\x36\x94\xe9\xb3\x9f\x1f\xa4\x98\x80\x6b\xf2\x6b\x2a\x72\x89\x77\xd5\xe8\x46\x72\x45\xae\x48\xc9\xd1\x42\x29\xaf\xca\x9a\x26\x6b\xec\x9f\x07\xd8\xb7\xfa\x88\xd9\xe7\x2c\x1b\xe7\x44\x1e\x6e\x4c\xdd\x66\x45\x11\xf1\x11\xfd\xb4\x69\xeb\xf2\x25\x71\xb5\x71\x74\xbb\x71\x38\x99\x32\x82\xc3\x4d\x52\x8a\x73\xb8\x93\x74\x82\x8e\x79\x72\x38\xbb\xd5\x12\x46\xab\x25\x8c\x07\x6f\x8a\xca\x2d\xf9\x53\xb9\x43\x2c\x69\x90\x38\xfb\x5e\x06\x8e\x33\xee\xe4\xa4\xc0\xbc\x0a\x60\x74\x60\x74\x60\x74\x60\x74\x60\x74\x60\x74\x60\x74\x60\x74\x60\x74\x60\x74\x60\x74\x60\x74\x60\x74\x60\x74\x60\x74\x60\x74\x60\x74\x5d\xc3\xe8\xde\x38\x44\x43\x9e\x8c\x8e\x9f\xee\x20\x75\x5f\x1c\x64\xbf\xdb\xef\x4a\xea\x34\xe3\x9b\x56\xca\x15\x36\x0a\xb9\x75\xa9\xe8\x7c\x5a\xc9\x9a\x3f\x1a\xc0\x28\xe1\x90\xc6\x4f\x58\xd3\x8a\x41\x5e\xc6\xa0\xbd\x66\xae\x5a\x04\x29\x65\xd9\xda\xf8\xa6\x55\x64\x29\x97\x88\x27\xf9\x05\x5e\xe0\x6f\xae\xa0\x55\xb6\x1b\xfc\xbb\x46\xf3\x02\xfe\xcd\xd2\x79\x0e\xff\x52\x74\x96\x4e\xb7\x20\x16\xe5\xa3\x6e\x5a\x9f\xf4\xf9\x22\xc0\xfd\xee\xa8\x6e\x37\x23\x5e\x31\x11\xea\xa4\x39\x4e\xe8\x43\x05\xeb\x31\x22\x38\x20\x38\x20\x38\x20\x38\x20\x38\x20\x38\x20\x38\x20\x38\x20\x38\x20\x38\x20\x38\x20\x38\x20\x38\x20\x38\x20\x38\x20\x38\x20\x38\x60\xa7\x38\xe0\xbf\x3b\x40\xa7\x05\x07\x5c\x2d\x2a\xd7\x75\x63\xac\x2a\xc5\x84\xb5\xb8\xe7\xc8\xa9\xa0\x58\x64\x50\x3f\x49\xcb\x5e\x91\xd7\x24\x23\xb1\xd3\x73\xec\x13\x71\xf6\xa1\x3e\xda\xe7\xb8\x3c\x65\x5e\x6d\x61\xc2\xfb\x54\x59\xca\xd5\xac\x4c\x67\x8a\xca\xf5\x45\x5e\x54\x7c\x58\x3f\x3c\xe3\x52\x80\x41\xf6\xec\x53\x83\x0d\x30\xb9\x59\xd1\x9d\xb3\x89\x4c\xd5\x9d\x5d\x37\x5f\xe2\x76\x9f\x3b\x71\xbb\x95\xf5\xe7\xe5\x0a\x5d\xbd\xe6\xcf\xda\x2e\xb0\x19\x03\xa6\x35\xea\x2d\x43\xa5\xe7\xa8\x59\x1d\x92\x8b\xbc\x75\x97\x4f\x97\x45\x55\xb9\x5c\x94\xb2\xb2\x77\xaf\x8d\x18\x67\x6c\x41\xc7\xa5\x1f\xa1\x8b\x34\x5b\x13\xa0\xb8\xf5\x9e\x43\x80\x3c\xc4\x2a\x6e\x31\x56\xf1\xaf\x86\x02\x35\x21\x8f\x8a\xb0\xc5\x17\x68\xc6\x0e\x5b\xbc\x45\x36\xa9\xbc\xde\x61\x9b\x14\xff\xcd\x3d\x3e\x36\x69\xaf\x11\xe8\x46\x72\x9a\x21\x23\x3e\xf1\x56\x58\xa1\xf6\xc4\x27\x86\x31\xf2\x31\x46\x88\x91\xd9\x91\x18\x99\x08\x8e\x86\xe0\x68\x08\x8e\xd6\xae\xe0\x68\x99\x8f\x85\x3c\x3f\xce\x01\x87\x8e\x5a\x10\x59\x0c\x2e\xd2\xac\x23\x8b\xc1\x8d\x95\x69\x4e\x1f\x3a\x39\x3f\xb8\x1a\x75\x9f\xab\xec\x62\x3b\x44\x9f\x50\xfa\x83\xbb\x7d\x66\x10\xc3\x65\x49\xad\x14\xb8\x4b\x53\xac\xa3\xbd\x97\x37\xf1\xb2\xbe\x58\xee\xf0\xb4\xe2\xde\xda\x82\x0e\xf2\x5a\x1c\xd0\xff\x9c\xd8\xe7\x3c\xb8\x26\xab\x79\xd9\x79\x74\xc0\x79\x54\xab\xa8\x52\x45\xce\x17\xb2\x07\xeb\xce\xab\x2a\x45\xff\xfb\x59\xe3\xa8\x5e\xcb\xf4\x25\x9a\xa3\x4c\xcd\xc2\x6a\x82\x8e\xb7\x30\x50\xe6\xb9\xe3\x1f\x93\x19\x9f\xc9\xcc\x07\xfb\xe8\xf9\x3e\xf6\xbe\xbe\xc8\x7b\xac\x2f\xc2\xeb\xfb\x7a\x67\x65\x55\xe3\x2b\xd1\xdb\x99\xfb\xfe\xb9\x3f\x4f\x1f\x9c\xb6\x02\x68\xc8\x63\xe0\x0e\xf3\x0f\x9b\x90\x8a\x48\x45\x7e\xa5\x3e\x83\x13\x57\xf3\x33\xf8\x6c\x4a\x8b\x0e\x65\x34\xa5\x34\x2f\xa4\x30\x8f\xe8\xaf\x85\xf1\xf7\xa2\xf9\xb2\xd8\x3f\x0e\x7b\x2f\xf9\xd2\x2f\x85\xe8\xc5\x10\x7b\x21\x14\xf9\x84\x85\xf9\xde\x1b\x9a\x51\xd4\x2c\x9f\xe8\xe5\x15\xde\xec\x4a\x34\xb6\xaa\xff\x14\x8b\xa6\xaa\x9e\x82\x03\x5c\x31\x27\x5b\xd7\x6c\xa7\xff\x41\x29\xcb\x1f\x9c\x4b\x29\x8a\x85\xac\xf1\xcd\x95\x8b\x39\x2d\xaa\x5c\x37\xda\x54\x48\x0d\xca\xb2\x52\x2e\xca\x89\xa8\xb8\x23\xd7\x2e\x99\x7d\xc9\x41\xaa\x6b\x03\x58\xb7\x8f\xdd\xc2\xab\x55\xa5\xc3\xe9\x2c\x05\x7b\xc0\xdd\x8a\xef\x64\xb7\xf2\xaa\x76\x76\xcd\x99\x39\x46\x47\xd8\xa1\x58\xd2\x8a\x5d\xf8\x7d\xfc\x45\x33\xde\x7a\xfb\xca\x58\xbf\xfe\x7b\x5b\x43\x12\xbe\x7d\x88\xc6\x04\x89\x2d\xc9\x95\xeb\x8a\xaa\xbf\xbe\x36\x7e\x35\x34\x99\xc6\x21\x3e\x1f\x29\xc8\x1a\xfb\xb3\x41\xf6\x07\xfd\xf4\x32\xfb\x8a\xe5\x8d\x64\xe4\xd9\xe6\x44\x99\x97\xc4\x45\xf3\xc6\x74\x2c\x10\x69\xe6\x38\xbf\xe0\x92\x55\x9d\xa5\x64\xd5\x5d\xa0\xcd\x0c\x50\x9b\x79\xd9\xff\x3d\x39\xc9\x4e\x18\xef\x49\xdd\x98\x32\x5e\x8e\xaa\xee\xa9\x0e\xeb\x09\x8d\x26\x34\x9a\xd0\x68\x42\xa3\x09\x8d\x26\x34\x9a\xd0\x68\x42\xa3\x09\x8d\x26\x34\x9a\xd0\x68\x42\xa3\x09\x8d\x26\x34\x9a\xd0\x68\x42\xa3\x09\x8d\x66\x87\x34\x9a\xdf\x1b\xa4\x84\x41\x06\x95\x9c\x5c\x2b\xc9\x14\x60\x50\x5d\x2f\xe9\x4f\x9d\x2d\x4a\x7c\xc7\xf6\xef\x0e\xb2\xdf\xea\xa7\xdd\xfa\xf9\x96\xef\xeb\x35\xcd\x61\xc1\x05\x51\xd2\xa4\x5e\x52\x40\x54\x50\x7c\x4d\x2f\x29\x39\xd9\x70\x9d\x39\xef\x31\x57\xd0\x2a\x60\x80\x2d\x32\xc0\xa7\xfd\x19\xe0\x09\x76\xcc\x64\x80\xf6\xe8\x31\xe8\x9f\xb3\x1f\x5c\xe0\x38\x08\x20\x08\x20\x08\x20\x08\x20\x08\x20\x08\x20\x08\x20\x08\x20\x08\x20\x08\x20\x08\x20\x08\x20\x08\x20\x08\x20\x08\x20\x08\x20\x08\x60\x87\x08\xe0\xaf\xdd\x46\x27\x05\x01\x34\x39\x11\x2f\xa5\x16\x05\x6a\x72\x71\x55\x5b\xe7\x56\x49\xca\x66\x65\x4d\xd3\x57\x0e\xf2\x75\x8d\x7d\x87\x62\x5f\xbf\x85\x5e\x51\x75\xb1\xbd\xd3\x57\x7c\x3f\xa2\x52\x74\x51\x2e\xae\x2e\x8a\xeb\x53\xfc\xfa\x05\x7e\x7d\x3c\x29\xce\x48\x39\x2f\x37\x48\x9e\xc7\x25\x01\x6f\xb4\x7b\x9a\x9e\xa2\x27\x6b\x54\xe9\x17\x68\xc6\x53\xa2\x5a\xdd\x4a\xa6\x48\xd5\xa3\xae\x99\xff\x23\x4c\xcb\x62\x8b\xc4\x93\xb4\xe4\xd8\x22\x91\xa1\xc0\xee\xe1\xbd\xd5\xe3\x55\x02\x2c\x2e\xd0\x3c\x07\x8b\x41\xde\xf3\xb2\xd8\x4c\xfa\x04\x3d\x6e\x6f\x26\x0d\xb0\x7c\x13\x54\x7a\xe7\x7c\x29\x2b\x5a\x85\xae\x96\xfd\x19\xe5\x23\xec\xa2\x57\xd4\x48\xb7\x01\x6f\xd0\x4b\xaf\xe7\xce\x60\xd3\x41\xe3\x4d\x07\x19\x6c\xe7\xf6\xd8\xce\x1d\xb8\xaa\xfb\xef\x07\x69\xdc\xb2\xdc\x8a\x96\x95\x8a\x85\x52\x7e\x74\x63\x5c\x18\x6c\x3e\xb2\xf5\x07\x2c\x96\x95\x9c\x79\x82\xac\x6a\xec\x37\x06\xd9\x47\xfa\x69\xaf\xe3\x9a\x65\xe3\x9a\xc8\x91\xc6\xc9\xb1\x2e\x58\x45\xce\x2b\xb9\x94\x55\x64\xfc\xb4\x7e\x59\xca\x2e\x6f\x49\x14\xe7\x71\xfa\x76\x13\x69\x6f\x78\x1b\xd8\xef\x17\x06\xf6\x31\x5a\xe0\x06\x76\x8e\x32\x74\xa1\x91\x01\x34\x1b\x28\x61\x34\x78\xc2\xa3\x89\xe6\x0a\x5a\xc5\xdf\x04\x0a\x37\x4d\xde\xdf\x04\x4e\xb1\xb4\x6d\xf1\xcc\x3a\x18\x86\xce\xa3\x06\x0e\x8f\xcd\x38\x3c\x36\xf0\xd8\xc0\x63\x03\x8f\x0d\x3c\x36\xf0\xd8\xc0\x63\x03\x8f\x0d\x3c\x36\xf0\xd8\xc0\x63\x03\x8f\x0d\x3c\x36\xf0\xd8\xc0\x63\x03\x8f\x0d\x3c\x36\x9d\xf5\xd8\xfc\x98\x9d\x03\x9f\xa3\x95\x5a\x57\x8d\xf8\x95\x7d\x7d\x80\xfd\x69\x1f\xbd\x5c\xfc\xcf\xf2\xc8\xec\x6f\x8c\xf8\xb8\x7e\x38\x3e\xc0\xb3\xdf\xf3\x0b\x0d\x5f\x0c\xff\xcf\x76\x23\x77\xcb\x34\x25\x00\xdd\x69\x3a\xc9\x01\xdd\x11\x3a\x44\x49\xef\xbc\xf7\xa2\x35\x4d\xd7\x04\x7f\xe4\xa6\x32\xde\x3f\xe1\x8f\xe0\x0e\xb3\x71\x33\x55\x95\xb3\xcf\x0c\x08\x27\x54\xdb\x48\x79\x0f\x24\x07\x24\x07\x24\x07\x24\x07\x24\x07\x24\x07\x24\x07\x24\x07\x24\x07\x24\x07\x24\x07\x24\x07\x24\x07\x24\x07\x24\x07\x24\xd7\xb5\x48\xee\x4f\x2c\x29\x9e\x56\x51\x54\x29\xef\x88\xa4\x20\x15\xcb\x57\xa4\xe4\x68\x56\xb7\xb3\xfc\x50\x56\x2a\x4b\xd9\x42\xa5\x20\x6b\xec\x7f\x1f\x64\x3f\xdd\x4f\x7b\x8c\x03\xcb\xe6\xc9\x91\xb1\xc6\x90\x6e\x72\x71\x76\x51\x5c\x32\x29\xca\x7a\x36\xce\x95\x7b\xc6\x8f\x4b\x46\x31\xf5\xa7\x6d\x37\x80\x57\xf2\x96\xde\x2d\x0a\xb2\x37\x47\x19\x4e\xf6\xa6\xa8\x41\x7a\x94\x84\xd9\x29\x66\x03\x27\xea\x9b\x66\x33\x92\xbb\x55\x7f\xde\x37\xc9\x52\x02\xed\xd5\xdf\xc9\xc9\xf9\x44\x75\x4c\x3d\x72\xf5\xd8\x01\xde\x03\xde\x03\xde\x03\xde\x03\xde\x03\xde\x03\xde\x03\xde\x03\xde\x03\xde\x03\xde\x03\xde\x03\xde\x03\xde\x03\xde\x03\xde\x03\xde\xeb\x18\xde\x7b\xfb\x01\x7a\x44\xe0\x3d\x75\x45\xca\x26\x3c\x02\x25\x8c\x96\x2c\xb0\x26\x12\xd8\xf3\xbf\x9f\x1b\x55\x95\xa2\xbc\x52\x28\xe5\x0a\xa5\xbc\x33\xb3\xfd\x7f\xea\xa3\x3b\xf5\xe2\x52\x35\x91\x13\x22\xf7\xbb\x64\xb4\x5f\x50\x8a\x72\x5a\x94\x11\x1f\xd1\x8f\x2f\xd4\x5e\xb9\x94\xb4\xb8\x5e\xce\x71\x76\xc0\x59\xed\x9f\xa2\xb3\x02\xbc\x1d\xa7\xa3\x1c\xbc\x8d\x51\x82\x46\x3c\xc1\x1b\x6f\xae\x8d\x64\xc2\x51\x21\x5f\x35\x5d\xce\x9f\xae\xa5\xd8\x59\x03\x99\x79\xf6\x87\x19\x85\xd4\x71\x63\x67\x06\x22\x9f\x84\xf9\x91\xbf\xd8\xe9\xd1\x39\x0f\xba\xe7\xae\x77\xf6\xcf\xa8\x71\xca\xd6\x74\x51\x3a\x4d\xe7\xe8\x4c\x4d\x40\x8b\x4d\xf6\x11\x52\x2b\x22\x69\x7d\x8b\x51\x0e\xde\x15\xba\x71\x0b\x31\x25\x82\x8b\x9c\xa6\x93\x76\x70\x91\xe0\xed\x8c\x4f\x7a\xfa\x8e\x98\xa1\xf8\x47\xf7\x78\xd8\x99\x3b\xad\x7c\xf4\x4e\xd3\x92\x10\xbf\x6e\x91\x65\x41\x4e\x7a\xe4\xa4\x47\x4e\x7a\xe4\xa4\x47\x4e\x7a\xe4\xa4\xef\xcd\x9c\xf4\xbe\x69\xe2\x3b\x33\x6d\x48\xff\xf4\x6e\x8f\x69\x43\xdc\x27\x09\xbd\x73\x32\x21\x52\x5c\x77\x7e\x2e\x81\x44\xf4\xbd\x36\x83\x41\x22\x7a\x24\xa2\xdf\xe2\x44\xf4\x1d\x00\x57\xbe\xd9\xe7\x3b\xf2\x6d\xc8\x1c\xa7\xa3\xec\x70\x6c\xdc\x4a\x3b\x7f\x97\x33\xed\xbc\xe3\xaa\xfa\xbc\xf3\xaf\xa6\xcb\xec\xe9\xd8\x53\xd6\x95\x13\xc6\x84\x5b\xbc\x97\xa5\x1c\x0f\x98\x19\xd5\xb2\x4a\x59\x1e\x89\x6a\xeb\xd9\x2b\xfa\xfb\xc0\xe7\xf2\xb2\xb4\x26\xa6\x42\x65\x55\xe1\xf3\xd8\xd8\x2e\x0b\x80\xb6\x35\xb3\xfd\xf3\x71\x7a\x95\x3f\x99\x35\x34\x98\x46\x9e\xfb\xe6\x29\xed\x4b\xc3\xec\x3d\xb7\x50\xc4\xed\x4b\x6b\x28\x35\x3f\x12\x32\x38\xba\x23\xdd\x55\xc9\x5c\xa8\x98\x7a\x4d\x47\xa3\x07\x92\xf5\x6a\xc4\xf6\x44\xf3\xb5\x91\xe1\xb7\x2c\x54\xe4\x35\xdb\x66\x0e\x56\xa9\x1a\x1c\x65\x27\xe2\x87\xae\x7b\x7c\xf8\xc5\x43\xb5\xf7\xf3\x7f\x13\xa5\xd1\xf2\x7e\xe1\xaf\x8b\x17\xfe\xaa\xff\x0b\x7f\x9e\x4d\xdf\xd8\x0b\x6f\x48\x48\x21\x16\x85\x58\x14\x62\x51\x88\x45\x21\x16\x85\x58\x14\x62\x51\x88\x45\x21\x16\x85\x58\x14\x62\x51\x88\x45\x21\x16\xed\xb0\x58\xb4\x97\xf0\x0b\x84\xac\x10\xb2\x42\xc8\xba\x8d\x84\xac\x9f\x7a\x86\x0e\xea\x5d\xd7\x48\xad\x6a\x14\xf3\x03\xeb\x4a\x45\xd2\xd8\x7f\x7c\x86\xfd\xfb\x01\xda\x91\x55\x54\x79\x79\x23\x19\x39\xd0\x78\x67\xba\xb9\xde\x7c\xa5\x7e\x71\xfc\x41\xfd\xe4\x49\x45\x95\xab\x5c\x8a\xce\x53\xba\x9c\x2a\xa6\x01\xd5\x00\xd5\xd2\x80\x6a\x80\x6a\x80\x6a\x80\x6a\x3d\x03\xd5\xd2\x5d\x03\xd5\x02\xaf\x49\xcb\x50\x2d\x0d\xa8\x06\xa8\x06\xa8\x06\xa8\x06\xa8\xd6\x79\xa8\x96\xee\x69\xce\x94\x06\x67\x6a\x1f\x67\x4a\x77\x3b\x67\x4a\x6f\x43\xce\x94\x79\x35\x4d\x0b\x35\xd6\x19\x3a\xc5\xd5\x58\x47\xe9\x30\x8d\x7b\xaa\x2d\xb3\x8a\x2a\x73\xb5\xa5\x93\x0d\x35\x95\x7a\xc3\x2f\x54\xdf\xa3\xfe\x0a\xac\x11\x16\x37\x14\x58\xb1\x98\x29\xb5\x72\xd6\xa3\x4a\x5d\x19\xfb\xee\x4e\x1b\x86\x7d\x9f\x95\xdd\xbe\x9a\x7b\xed\x17\xbf\x77\x86\x7c\x09\x50\xc5\xe3\x1f\xd6\x48\xda\xc7\x28\xb1\xb9\x16\x87\x90\x1d\xdb\x7e\x5b\xdc\xf6\xfb\xcd\x10\xa5\xc4\x1b\x3f\x41\xc7\xf9\x1b\x3f\x4e\x9b\x1e\x7f\x34\x23\x36\xfe\x9e\xa5\xd3\xf6\xc6\xdf\x56\xca\x39\x2f\x76\x00\x9d\xa3\x33\x8e\x1d\x40\xad\x14\xd4\xba\xf9\x29\x2b\xed\x30\x3f\xf1\xcf\x8d\xd8\xe6\x27\x66\x6c\xf5\x72\xec\x9b\x53\x56\x6b\x4c\xd1\x41\x71\x8e\x30\x45\x93\xd6\x89\x9d\x31\x4a\xed\xd9\x2f\x0c\x1c\x0b\x1c\x0b\x1c\x0b\x1c\xdb\x3b\x38\x16\xd3\x32\x9f\x69\x59\xf7\xf0\x6a\xc4\x6a\xe8\x48\xac\x06\xb8\x05\xe0\x16\x80\x5b\x00\x6e\x01\xb8\x05\x7a\xda\x2d\x80\x90\x3d\x08\xd9\x83\x90\x3d\xed\x0a\xd9\x03\xaf\x1b\xbc\x6e\xbd\xea\x75\xcb\xe4\x03\x0e\x4a\xe5\x47\x92\x83\x26\xc5\x57\xe3\xee\x68\x7a\x2f\xbb\x43\x98\x07\xdb\x74\xd3\x36\xdc\x79\xc2\x5e\x77\x90\xe6\x45\xe0\x0f\x69\xbd\xa2\x68\x59\xa9\x58\x28\xe5\x47\x37\xc6\x57\xe4\x8a\x34\xee\xa5\x6d\xe7\x6d\xae\x94\x2a\x52\xb1\xac\xe4\xcc\xeb\x64\xd5\x8a\xf7\xf1\xfe\x11\xf6\x62\x1f\xed\x75\x94\xb8\x6c\x94\x18\x89\xbb\x04\x65\xbe\x60\x15\x37\xaf\xe4\x52\x56\x71\xf1\x63\xfa\xb9\x29\xbb\x90\x25\x51\x86\x0d\xdd\x3d\x2e\x0c\x38\x56\xb3\x4a\x4f\x88\x21\x3c\x4f\x97\xf8\x10\xbe\x40\x33\x34\xe5\xe9\x01\x71\x3c\x75\xc2\x78\xea\x84\x47\x45\x6f\x20\xb6\x6a\x5e\xae\xd0\xd5\xbc\xff\x60\x9f\x62\x69\x63\xb0\x3b\xea\x65\x8c\x7a\xaf\x5a\xd9\xe3\x5f\x54\x9f\x22\x9f\xdc\xe5\xde\x9b\x07\xdd\xa3\x38\x7b\x75\xe8\x84\x71\xfa\x96\xf7\x69\xfa\x29\x7a\x92\x96\x6a\xfc\xbc\x01\x75\x2a\x30\x23\xbc\xbf\x2d\x7a\x7f\x3f\x1d\x6a\x9f\xa9\x79\x5a\xf8\x84\x1f\xa7\x45\xdb\x27\xdc\x0d\x86\x8c\x07\x89\xee\x94\x21\x8b\xff\xde\x1e\x77\x43\x16\xb5\xc2\x44\x7b\xd9\xae\x13\xe2\x8c\xad\x37\x5d\x88\x1e\x8d\xe8\xd1\x37\xaf\x47\x02\x28\x0a\x28\x0a\x28\xaa\x9d\xd1\xa3\xbb\x3e\x48\xb4\xef\x64\xc2\x3f\x7a\x74\xa7\xe6\x13\xe9\xdf\xd9\xed\x3e\x9f\x38\xea\x13\x3f\xda\x6b\x96\x71\x9c\x87\x38\xdd\xd2\x49\x06\xc2\x4a\xf7\xda\xd4\x06\x61\xa5\x11\x56\x7a\x8b\xc3\x4a\x6f\x21\x63\xf3\x0d\x37\xdd\xa9\x8f\x49\x66\x8a\xd2\xec\x5c\xec\x8c\x85\x8f\xf7\x3b\x43\x1e\x79\x14\x73\x33\x84\x3f\x62\xff\x2b\x4e\xa7\x9b\xc8\x0b\x98\x2d\xae\x6b\x15\xdd\x6c\xd6\x47\x98\xfe\xf5\x38\x7b\xde\x2b\x0f\xe0\xc3\x2e\xc8\x79\x52\x14\xe5\x4c\xe3\x30\xec\x91\x0e\xb0\xfe\xd4\x80\xf9\xb2\xa1\xd7\x1f\xe3\x7a\x7d\x7d\xec\x1f\xa3\x23\x74\xc8\x37\xa4\x7a\x7d\xbd\x7c\x87\xfa\x35\xff\x91\x7c\x81\xcd\x34\x19\x47\xd9\xe5\xfe\x9b\xc9\x0c\xf8\xc6\x5d\x1e\xdd\x35\xe4\xce\x94\x5d\x7a\x6c\xc4\x3b\x41\x60\xbb\x3b\x2d\x3d\x4b\xe7\x69\xba\x66\x92\xd2\x5a\xaf\x61\x7e\x02\x5e\xdc\x22\x2f\xfe\x40\x83\x5c\x40\x41\xd9\x94\x8b\x82\x1b\x4f\x51\xda\xe6\xc6\xad\x16\xd6\x24\x0d\x6e\xce\x4c\x39\x8d\x4d\xeb\x26\x2b\xfe\x9b\x5e\x99\x03\xef\xb5\x90\xb0\x8b\xe9\x39\xe0\x99\x40\xb0\xed\x96\x07\xfc\x17\xfc\x17\xfc\x17\xfc\x17\xfc\x17\xfc\xb7\x37\xb3\x07\x76\x72\x7e\xe0\x0f\x9b\xd3\xbf\xec\x95\x44\x30\xe9\x03\x81\x5d\xe6\x15\x71\xaf\x5c\x82\xed\x9c\x56\x80\xf8\xf6\xda\x64\x06\xc4\x17\xc4\x77\x8b\x89\x6f\xe7\xa8\x97\x2f\xe0\xed\x24\x16\xcb\x9c\xa5\xd3\xec\x64\xec\x84\x85\x67\xef\x77\x42\xde\xfa\x8b\xeb\xf9\x6e\xf0\xb9\xff\x86\x69\x52\xd0\xd7\xd5\xa2\x72\x5d\x7f\xdf\x54\xa5\x98\xb0\x02\xfe\xda\x00\x76\x45\xae\x58\xd9\xff\xf4\x53\xb5\xec\x15\x79\x4d\xb2\x18\xec\x57\x87\xd8\xcf\xdd\x42\xfb\x1c\x85\xa4\xcc\x32\x96\x8d\x8b\x23\x1f\x6e\x26\xcf\xdf\x4c\x51\xb9\xbe\xc8\xcb\xee\x8a\x34\x7f\x71\x7e\xbb\x19\x97\xc7\x5a\x12\x4f\x65\xd7\xb7\xcb\xe3\x70\x67\xae\x79\xcf\xfe\x02\x4f\xfb\xd7\x12\x74\x6e\x34\x02\x8d\x17\xcc\x6e\x6d\xe7\x8b\xc5\x3b\x82\x7c\x53\x09\x22\xbd\x1f\x22\x91\x23\xbd\x1f\x42\xdf\x20\xf4\x0d\x42\xdf\xf4\x50\xe8\x1b\xa4\xf7\x43\x7a\x3f\x84\x1c\x41\xc8\x11\x84\x1c\x41\xc8\x91\xae\x08\x39\x92\x39\x46\x47\xd8\xa1\x58\xd2\xc2\x20\xdf\xe7\xc4\x20\xf6\x12\xaf\xfd\xf8\x03\xb9\xf7\x10\x9d\x01\xb9\xf7\xb6\x4f\x4c\x74\xf6\xee\x61\x4a\x08\x5c\xa9\x55\x14\x55\xca\xcb\xb5\x80\x32\xab\x15\x72\x6a\x61\xc3\x11\x8f\xe0\x6f\x86\xd8\xbf\xed\xa3\xdb\x8d\xf3\x2d\x18\xb9\xcf\x4d\x18\xba\x38\x3b\xc5\x2f\x8e\xdf\xab\x1f\x5d\x14\x97\x18\xa0\xcf\x3a\x18\xb0\x02\x74\x93\x61\xde\xcd\xe7\x36\x9e\x23\x61\x55\xeb\x46\xe3\x09\x3c\xed\x8f\xea\x4e\xb0\x63\x06\xaa\xab\x6e\x7d\x93\x7e\x5b\x55\xa9\x63\x73\x91\x2f\xec\xac\xef\x82\x07\x3c\xc4\x9e\x56\x2f\xdc\x6f\x9c\xd0\x91\x8e\x48\x73\xd5\x79\x8d\x23\xb2\xa5\x9e\x80\x0b\x12\xa2\xce\x16\x45\x9d\xcf\x87\x82\xb2\x06\x19\x21\xdd\x9c\xa4\x94\x2d\xdd\xec\xbc\x65\xe1\x92\xce\xe6\x2c\x8b\xaf\x0d\x71\x37\x3d\xf1\x1f\xde\x53\x6f\x59\x98\x2d\xdf\xb4\x8c\xc9\x7d\xe2\xb7\xce\xd8\x12\xe8\x34\xa1\xd3\x84\x4e\x13\x3a\x4d\xe8\x34\xa1\xd3\xdc\xb4\x4e\xf3\xfd\x81\x4d\x02\x2e\x0a\x1d\xe6\x14\xa5\x1d\x3a\xcc\x76\xcd\x02\xda\xba\x80\x68\x42\x8a\xf9\xbd\xdb\xea\x27\x02\x43\x7e\x2a\x4c\x6b\x7a\xb0\x8f\xeb\x81\xda\x3e\x3b\x80\xdc\xb2\xd7\xe6\x24\x90\x5b\x42\x6e\xb9\xc5\x72\xcb\x57\x7b\x2b\xbf\x82\xf9\xd0\x34\xad\xb6\x6c\xee\x1b\xd1\xe4\xd2\xaf\xf6\xa3\x91\x39\x4a\x87\xd9\x78\x6c\xcc\xf2\x2b\xbc\xa2\x4a\x5e\x69\x9e\xd7\x01\x55\xe5\x97\x18\x1d\x1b\x95\xca\x85\xd1\x8d\xa4\x57\x18\xd5\xb2\x92\x33\x11\xe5\x68\x59\x55\x5e\xf3\xec\xe8\x0f\xea\x75\x7e\x8e\xfd\x67\xc6\x7e\x26\x6c\x27\x28\x7b\x28\xab\x94\x4a\xfa\x5c\xfe\xfc\xf4\x63\xf6\xab\x52\x51\xa2\xfc\x22\xfd\xe1\xe6\x95\x5c\x3c\x6e\x9c\x25\x72\x94\x9d\x97\x2b\x76\xcc\x98\x79\x25\x37\xaf\x9f\xfa\x44\xa1\x72\x65\x5e\xaa\x5c\x19\xd7\x17\xa8\x02\x3d\x1e\xa3\x7d\xa2\xfb\x5f\x41\x7b\x79\xf7\xbf\x8c\x6e\xfb\x48\x68\x27\x19\x4f\xe2\xfb\xc5\x7f\xd0\xbd\xbb\x89\xed\x34\xaa\x43\x57\x5f\xe9\xdf\xe1\x09\x36\x52\x1b\x92\xd7\xac\xb3\xb1\xf0\xad\x12\xd1\x46\x5c\x5b\x67\xfe\xf1\xa6\x5b\x67\x7e\x7d\x9b\xb5\x8e\x7f\x9b\xd8\xed\x17\xfb\x59\x47\xeb\x3c\x6c\xb5\xce\xa3\x8b\x0d\x9a\xe7\x40\x75\xf3\x28\xda\x36\x6b\x9f\xcd\x8c\x9e\xf8\xcf\x3b\xda\x67\xd0\x6c\x9f\xa9\xe9\xb9\xe9\xc7\xa6\xbd\x5b\xe8\x60\x55\x0b\x09\x28\x73\xf3\xb6\xd1\xf8\x2f\x38\xda\x68\xc8\x6c\xa3\x47\xe7\x1f\x9b\x7d\xf4\xd2\xa2\x77\x23\x25\xaa\x1a\xc9\x28\xf8\xe6\x6d\xa5\x09\xd7\x37\xed\xc2\x74\x6a\xaa\xd9\x37\xed\x82\x2c\xe5\x9a\x6c\x1f\xcf\xef\x77\xc3\x86\x33\xdb\x27\x78\x33\xd3\x44\x93\xa7\x7f\xce\xd1\x3e\x03\x96\x25\x4a\x3d\x36\x79\xc1\xbb\x81\x46\xaa\x4d\x91\x3e\x69\xb8\x79\x47\x50\xe6\x14\x4d\xb0\xe3\xb1\xa3\xd6\x7c\xe5\x5e\xe7\x7c\xa5\xe6\xca\xad\x88\xf5\x73\x84\x0e\xb1\x64\x6c\xd4\xba\xc3\x9d\xfa\xbf\xa6\x43\xd8\xc4\x38\x31\x7e\xcc\x79\x99\x44\xcb\xec\x99\xc8\xf7\x9b\xd3\xa9\x94\xde\x57\x5c\x78\x74\x45\x8e\x3e\xbe\x30\x17\x35\x4b\x59\xd7\x64\x8b\x6f\x66\xd7\x55\x55\x2e\x55\x8c\xd1\x60\x6a\x28\xf4\xe1\xa1\xe4\x12\xe2\x16\xce\x09\xd6\xaf\x0c\x8b\x09\x96\xa6\xaf\x13\xb4\x06\xd3\x2c\x55\xe6\x4b\x0a\x4d\xae\x58\x0e\xe1\xef\x0c\xb1\xaf\x85\x69\x87\x7e\xa1\x3e\x34\xef\x73\x71\x04\x2f\x88\xab\x16\xe5\x4a\xfc\x7e\x1e\x87\xbe\x5c\xd6\xaa\xb3\x50\x9b\xc7\x03\x76\x06\xbf\x8a\xce\x88\x71\x7c\x8c\x8e\xf0\x71\x3c\x4a\x07\xe9\x80\x77\x28\xac\x72\x59\x13\x09\x77\xcd\xfa\xf8\x8e\xf4\x4b\xfe\xc3\xf8\x00\x1b\x76\x79\xeb\xf5\x7b\x59\x19\x13\xac\xdb\xf9\x45\xfa\xf9\xd0\x4e\xbb\xa5\xa3\xee\xfe\x5e\x47\x63\x3f\x68\xc6\x88\xef\x50\x7b\xa7\xf9\x4e\x97\x1a\x1a\xb2\xb9\x06\x07\x00\x81\xb3\xb7\x45\x67\xef\x3b\x43\x37\xfc\xb6\x4f\x0a\x2f\xef\x29\x9a\xb0\xbd\xbc\x81\x9b\x0c\x1f\xf7\x6e\xc0\x16\x25\xfe\xba\x3d\xb6\xc9\xd8\x6b\x39\x72\x1d\x56\xc2\x00\xed\x1d\x33\x12\x70\xe6\xc2\x99\x0b\x67\x2e\x9c\xb9\x70\xe6\xc2\x99\xdb\x9b\x41\xd7\x83\x5e\x34\xf8\x3b\x73\xff\xf2\x36\x7b\x12\x30\xec\xe3\xc4\x75\x4c\x0d\x1e\x10\x21\xd4\x3b\x30\x33\x80\x23\xb7\xd7\xe6\x23\x70\xe4\xc2\x91\xbb\xc5\x8e\xdc\x6e\xc1\x43\x0d\xad\x7b\x55\x20\x68\x3f\x8f\x70\xe3\xbd\x60\x76\xa9\x37\x45\xa8\xf3\xbf\x1c\xa6\x09\x41\x2d\x57\x78\x1c\x1d\x73\xd3\x8a\x07\xbb\xcc\xaa\x4a\xe9\xaa\xb2\x62\x81\xcb\x5f\x1c\x66\x7f\x17\xa6\x97\xf1\x6b\x2d\x85\x53\xc4\x6d\x1f\x8b\xaa\x94\x32\xca\x4a\xfc\x41\xfd\x58\x5a\x3f\xdd\x10\x34\xd9\x9f\x44\xe3\x94\x80\xf1\xe5\xd3\x94\x12\xe3\x73\x82\x8e\xf3\xf1\x39\x4e\x63\x94\xf0\x1c\x9f\xfc\x49\x6c\x35\x81\xa8\xd2\x8d\xee\x63\xd9\x14\xa7\xe7\x35\x30\x85\x04\xc6\xfd\xeb\x37\xaf\xfc\xd7\x9d\xb5\xad\x7e\x9f\xc7\xd6\x15\xa3\xe1\x1f\x32\x0e\x77\xb0\xed\xd3\x53\x94\xa6\x73\x35\xf3\x81\x4d\x37\x3e\x66\x01\xa0\x99\x2d\xd2\xcc\x77\x87\x82\x78\xf9\x67\x04\xd0\x3c\x4b\xa7\x6d\xa0\xd9\x0e\x23\x12\xbc\x95\xf0\xc1\xa4\xf1\x1f\xd9\x53\x6b\x44\xf6\xd8\xbb\x54\x0c\xbb\xb1\x5f\xfc\xd2\x49\xb3\x01\xb8\x09\xb8\x09\xb8\x09\xb8\x09\xb8\x09\xb8\xd9\x9b\x11\xc5\xfd\x33\x4a\x06\x3f\x59\x48\xff\xed\x6d\xb5\xb3\x81\x01\xbf\xad\x2a\xc6\x1c\x21\xc6\x17\xce\x1d\x9a\x22\x80\x72\xf6\xda\xc4\x04\x94\x13\x94\x73\x8b\x29\x67\x47\x28\x92\xef\x56\x95\xe0\x8d\x7e\xe6\x30\x8d\xb3\xb1\x58\xc2\x42\x96\x7b\xab\xf6\xa7\x88\xcb\x6e\x0a\xd0\xf9\xbc\x25\xcf\x34\x41\xa7\x11\x39\xdc\x83\x74\x3a\x29\xe7\xb7\x87\xd8\xa7\xfb\x69\xa7\xf9\x71\x8c\xfc\x52\x33\x51\xc3\x33\xca\x4a\x57\x84\x0b\xbf\xe7\xba\xe3\xe3\x6c\x7f\x97\x83\xfc\x26\xb7\x2d\x3a\x78\xe0\x41\xc0\x6f\xe0\x1d\x14\x01\xbb\xaf\x5e\xf0\x7f\x07\x1f\x66\xfb\x5d\xde\xc1\x9a\xf7\x0f\xa1\xbf\x11\xfa\x1b\xa1\xbf\x11\xfa\x1b\xa1\xbf\xfd\x9a\x05\xa1\xbf\x11\xfa\x1b\xa1\xbf\x11\xfa\x1b\xa1\xbf\x11\xfa\x1b\xa1\xbf\x11\xfa\x3b\xe8\xd0\xdf\x63\x94\x60\x23\xb1\xb8\x05\x33\x6e\x77\x22\x90\x9b\x04\x7f\x20\xaa\x38\xa2\x8a\x23\xaa\xf8\x36\x8a\x2a\xfe\xad\x67\xe8\xac\xc0\x95\x9e\x09\x1e\x1b\x6d\x31\x57\x8a\xb2\xc6\x7e\xe9\x19\xf6\xf6\x01\x8f\x5c\xc0\x31\x31\x9d\x55\x8d\x0f\xb1\x69\xa9\x4d\x78\xb9\xa0\x14\xe5\xf8\xc3\xfa\x39\x2e\xb9\x7f\x1d\xbb\x18\x94\xa2\xdc\xe5\x14\x31\x0d\xcc\x06\xcc\x96\x06\x66\x03\x66\x03\x66\x03\x66\xeb\x19\xcc\x96\xee\x1a\xcc\x16\x78\x4d\x5a\xc6\x6c\x69\x60\x36\x60\x36\x60\x36\x60\x36\x60\xb6\xce\x63\xb6\x74\x4f\x13\xa8\x34\x08\x54\xfb\x08\x54\xba\xdb\x09\x54\x7a\x1b\x12\xa8\xcc\x13\x74\x4a\xa8\xaf\x8e\xd0\x21\xae\xbe\x3a\x48\x07\x68\xd8\x53\xf2\xc8\x31\xd5\x46\x32\xb1\xa0\x14\xe5\xb9\x82\xe6\xaf\xb4\xba\xdf\x5d\x69\xb5\x83\xdd\xa2\x77\x15\x5d\x7d\xc6\x5f\x68\x35\xc1\x8e\x1b\x42\x2b\x4f\x48\x66\xee\x05\x57\x8a\x72\x95\xfa\x2a\xf6\xad\x9d\x1e\x64\xec\x65\xe2\x4b\x14\x95\x04\x04\x1b\x14\xff\xed\x1c\x06\x13\xd4\xea\x24\x9d\xa0\x63\x35\x22\xf3\x41\x7a\xb8\xa9\xe6\x87\xa2\x1c\x3b\x66\x5b\xdc\x31\xfb\xd9\x10\x1d\x17\x6f\x7d\x92\x46\xf9\x5b\x3f\x4c\xcd\x0e\x3b\x3a\x2d\x36\xca\x1e\xa5\xc3\xf6\x46\xd9\x4d\x5c\x7e\x46\xec\xa7\x39\x46\x47\x1c\xfb\x69\x36\x71\x7d\xeb\x06\xa7\xac\xb4\xdf\xe0\xc4\xbf\x3e\xe2\x61\x70\xee\x31\xb6\x52\x39\xf6\xa5\x29\xab\xc2\xf8\x24\xc5\x21\x17\xe3\x33\x69\x9d\xdc\x56\x33\xd4\x9e\xad\xb8\xa0\xb1\xa0\xb1\xa0\xb1\xa0\xb1\xbd\x43\x63\x31\x23\xf3\x99\x91\x75\x0f\xae\x46\x18\x84\x8e\x84\x41\x80\x57\x00\x5e\x01\x78\x05\xe0\x15\x80\x57\xa0\xa7\xbd\x02\x88\x86\x83\x68\x38\x88\x86\xd3\xae\x68\x38\x70\xba\xc1\xe9\xd6\xab\x4e\xb7\x4c\x3e\xe0\x78\x4f\x7e\x7c\x39\xee\xce\x97\xf7\xb2\x3b\xc4\xdb\x6c\x5b\xda\x76\xb3\xe6\x6d\xb8\x41\x85\xfd\x53\x98\xa2\x42\xf0\xce\xa5\xca\x25\xa9\x98\xb0\x74\xbf\xa6\xe0\x9d\x7d\x3e\xcc\x3e\x13\xa6\x3b\xcc\x33\x52\xe6\x09\x91\x48\x9e\x7f\x30\xf4\xcf\x96\x35\x9e\xa4\x28\x6f\xbf\xf8\xbe\xbc\x5c\x99\xad\xbd\x22\x35\x3f\x7b\x5e\x3f\x1a\x1c\x2f\xaf\x2b\x68\xa2\xae\xa0\x89\x66\x0a\xca\x14\xe8\x92\x18\xb7\xe7\x69\x9a\x8f\xdb\xb3\x74\x9a\x4e\xb6\x30\x6e\xcd\x67\xf4\x1b\xb9\xec\x9d\x83\x34\xd4\xc4\x66\x03\xb1\xab\xe0\x6f\x06\xd8\x5f\xf4\xdd\xc0\xae\x82\x03\x1e\xbb\x0a\xf4\x83\x33\x8a\x9a\x2a\x16\x2d\x8f\x86\xd6\xe5\x7b\x0b\xb6\x89\x8f\xdc\x25\x09\x46\x53\x26\x05\x11\x4a\xb0\x75\x02\x11\x4a\xe0\xac\x83\xb3\x0e\xce\xba\x1e\x72\xd6\x21\x42\x09\x22\x94\xc0\x49\x02\x27\x09\x9c\x24\x70\x92\x74\x85\x93\x04\xd1\x40\x10\x0d\x64\xbb\x60\x61\x44\x03\x69\x47\x34\x90\xd7\x0f\xd3\x74\x13\x80\xae\x61\x40\x63\x41\xef\x7e\x7d\x88\xbd\xd8\xef\x41\xef\xca\xc6\x27\xaf\x94\x2b\x6c\x14\x72\xeb\x52\xb1\x2a\xc0\xb1\x35\xbd\x5c\x50\xf4\xaf\x67\x00\x91\x8d\x13\xf1\x38\xbf\xc0\x77\x6f\xc5\x5c\x41\x0b\x2e\x4d\xea\x4d\x14\xac\x78\xbf\x3b\x1e\xdc\xcd\x88\x57\xac\x13\xfb\x68\xc0\x08\xc1\x08\xc1\x08\xc1\x08\xc1\x08\xc1\x08\xc1\x08\xc1\x08\xc1\x08\xc1\x08\xc1\x08\xc1\x08\xc1\x08\x3b\xcc\x08\xb7\x9f\xe4\x0b\x14\x12\x14\x12\x14\x72\x1b\x51\xc8\xbf\x1e\x20\xa6\x77\xdd\xe8\x46\x72\x54\x2c\x14\xd7\xa4\xb2\xc6\x3e\x3f\xc0\x5e\xe8\xa3\x1d\x59\x45\x95\x97\x37\x92\x91\xc1\xc6\x1a\xc0\x49\x7e\xe1\x23\x52\x39\xbe\x5f\x3f\x71\x52\x51\xe5\xa5\xa4\xf5\xe3\x76\x13\x00\x6e\x32\x2f\xa0\xde\x46\x89\x8d\x64\xc2\x7a\xde\x40\x54\x80\x17\xfd\x09\xdf\x10\x1b\x30\x32\x01\x9a\x77\x26\x17\x55\x60\x2c\x06\x9e\x07\x9e\x07\x9e\x07\x9e\x07\x9e\x07\x9e\x07\x9e\x07\x9e\x07\x9e\x07\x9e\x07\x9e\x07\x9e\x07\x9e\x07\xcd\x1f\x68\x1b\x68\x1b\x68\x5b\xc7\x68\xdb\xc7\xe3\xb4\x24\x34\x7f\xd2\x7a\x45\xd1\xb2\x52\xb1\x50\xca\x8f\x6e\x8c\xaf\xc8\x15\x69\xbc\xb1\xd4\x8f\xf3\x23\xa5\x54\x91\x8a\x65\x25\x67\x5e\x2d\xab\xc6\x49\xcf\xb1\xaf\x0c\xb3\xf7\xdf\x42\x7b\x1d\xe5\x2e\x1b\xe5\x46\x7e\x23\x64\xf4\x91\x43\xf9\x57\x32\xad\x9e\xc9\xf0\x2e\x58\xe5\xcf\x2b\xb9\x94\x55\x7e\x20\xa2\xc0\x11\x7b\xc6\xc3\x67\x75\xc6\xf7\x51\x9f\x34\xd9\x53\xb9\xc1\xaa\xd9\xb3\xa3\xec\x44\xfc\x38\xbf\x5d\xca\x7e\xb4\x25\xf1\x64\xb6\xa2\xd0\xa3\xf6\xdd\x8e\x1a\xb7\x42\x60\xf8\x80\x3b\x79\xdc\xc9\x6e\xe5\x15\xa3\xab\x79\x7f\xf4\x38\xc5\xd2\x06\x5e\x74\x8c\x37\x43\x4e\xe8\xd1\x15\x0e\x36\x29\x3a\x0f\x58\x12\x58\x12\x58\x12\x58\x12\x58\x12\x58\x12\x58\x12\x58\x12\x58\x12\x58\x12\x58\x12\x58\x12\x58\xb2\xd3\x58\x72\x8a\xd2\xec\x5c\xec\x8c\x25\x33\xdc\xcf\xf5\x85\x46\x2d\x3c\x96\x73\xb1\x7e\xfd\x24\xa7\x94\x10\x62\x45\xe0\x53\xe0\x53\xe0\xd3\x36\xe2\xd3\xaf\x3c\x43\x27\x04\x3e\x15\x08\xc8\xde\x26\xbd\x22\x57\xa4\xa4\x17\x3a\x15\x27\xb3\x5f\x78\x86\xfd\xe8\x00\xbd\x5c\xfc\x6f\xd9\xb8\x26\xb2\xbf\xb1\xb4\x91\x33\xb5\x38\xef\x2a\xfe\xa7\xb6\x24\xae\xb3\xd1\x23\xff\xb9\xcb\x41\x63\x1a\xa8\x0d\xa8\x0d\x29\xba\x80\xda\x80\xda\x80\xda\x7a\x07\xb5\x75\x51\x06\xaa\xae\x41\x6d\x48\x8d\x04\xd4\x06\xd4\x06\xd4\x06\xd4\xb6\x15\xa9\x91\x7a\x9a\x38\x21\x77\x4b\x2f\xe7\x6e\x49\x6f\x43\xe2\x94\x59\xa6\x29\x21\xd0\x3a\x4d\x27\xb9\x40\xeb\x08\x1d\xa2\xa4\xe7\x5e\x50\x03\x4b\x19\x6c\x29\xc1\xd1\x50\x20\xdb\x41\x9f\xf0\xd7\x64\x1d\x66\xe3\x8e\xed\x9f\xbc\x02\xe6\x1e\xd0\x2a\x5a\x66\xc8\xb4\x84\x58\x2c\xf6\xbd\x9d\x75\x44\xec\x76\xf1\x15\x8a\x4a\x25\x83\x7e\xc5\xc4\x0f\x1d\xe1\x5f\x02\x57\x4d\x52\x8a\xce\x3a\x53\x94\x47\x43\xf1\x51\x3a\xb8\xa9\x76\x47\x7e\x5e\xbf\xfc\xbc\x6f\x0b\xd3\x4f\x84\xd9\x8f\x85\x23\x6f\xb1\x1a\xe8\x1b\x21\x3e\x8d\x7a\x44\x2a\x49\x79\x59\x15\x0b\x02\xe1\xc0\xd1\x34\x25\x5b\xe0\xdf\x38\x6b\xea\x2d\xf1\xb5\x8b\xa2\x46\xf5\x29\x50\xe5\x59\xeb\xa3\xbf\x26\x5d\xd3\xeb\x5f\xb9\x22\x6b\xb2\xf9\x5a\x3b\xb3\xe1\x9a\x59\x73\xb9\x41\xe1\xd3\x6c\x45\x8d\x26\xc7\x8f\xeb\xe7\xaa\x52\x96\xd3\x1b\x7d\x85\x2a\x5e\x62\x3e\x15\xd6\x67\x2d\x52\xa1\x24\xbc\x39\x7c\xaa\x69\x9f\xcb\x57\xb4\x06\x5b\xd2\x17\x48\xa6\x61\xce\x2b\x45\xa9\x94\x4f\x28\x6a\x7e\xb4\x7c\x2d\x3f\xba\x5e\x2a\x64\x95\x9c\x3c\xba\x7f\x56\x9b\xd7\x4b\x49\xc4\x76\x3b\x9f\xd5\x09\xef\xbf\x11\xa2\x73\xe2\xb5\x3f\x41\xc7\xf8\x6b\x9f\xa4\xcd\x0e\x3f\x9a\xd6\x4b\x48\xb2\x33\x74\x8a\x76\x4c\x8a\x79\x5d\x2b\xc5\xcc\xe8\xc5\x8c\xf3\x7c\x41\x3b\x45\xe2\xbb\xd6\xca\xf1\xb3\x40\xcd\x59\x18\x5f\x83\x52\x67\x82\x1a\x98\xb6\xb2\xa2\x55\x28\xfe\x87\x23\x75\x16\x28\x62\xa4\xde\x73\xe4\x31\x54\x56\x0d\x63\x34\x22\x8e\x55\x19\xa3\x49\xeb\xbc\xf6\x9a\xa5\xc7\x68\x81\xe6\x9d\x66\x29\x9e\xa6\x73\x2d\xa8\x75\xa7\xf8\x23\x3c\xca\x61\xab\x06\x2c\x0b\x2c\x0b\x2c\x0b\x2c\xdb\x43\x58\x16\x33\x33\x9f\x99\x59\xf7\x70\xeb\xaf\x86\xe9\x2b\x61\xf6\xa5\x70\xe4\x8f\xad\xae\xfa\x70\xf8\x31\xe7\x4a\xb1\x50\x8a\x6a\x62\xb5\x17\x5d\x91\x57\x85\x93\xd7\x22\x2a\xf6\x27\xcb\x78\x4b\x78\x63\x39\xe6\x80\x25\xa5\x74\xb0\x24\xe7\x25\xde\x25\xc6\x62\xd1\x39\x57\x14\x6c\xd5\x1a\x0c\xc6\xc4\xa0\xb0\xb6\x26\xe7\xf4\xd9\x68\xf1\x59\xdb\xfb\x6a\x9b\xf6\x42\x71\xc4\x58\x43\x8a\xc4\xc1\x79\x55\xca\xf2\x71\x52\x50\x72\xd6\x87\xc7\xfe\x38\x70\xc7\xb6\xd9\x2f\xeb\x9a\x5e\x49\x67\x43\x49\xfa\x95\xe6\x03\x19\x37\x59\x15\xef\x9b\x59\x44\x42\xd4\x73\x4d\x96\x4a\xae\x75\x8c\x31\x5e\x85\x79\x5e\x03\xb7\xb5\x31\xdc\x03\x70\x0f\xc0\x3d\x00\xf7\x00\xdc\x03\x3d\xed\x1e\xf8\x4c\x98\x5e\x0a\xb3\x17\xc3\x91\x17\xac\xaf\xed\xbb\xc2\x53\x8e\x0d\xb8\xe5\xa2\x2c\x69\xb2\xf5\xea\xcf\xd7\xe6\x89\xaf\x12\x07\x99\xdd\x6d\xef\xe0\xd5\x3b\x3c\x99\x38\x96\x88\x2e\x0a\x3b\x52\x71\xe6\xb6\xb7\xbf\x22\xb2\x91\x40\xdf\x14\x2b\xa9\xeb\xf2\xe8\xaa\x54\x34\x67\xff\x31\x71\x34\xe6\xc8\xed\x6f\xde\x4a\xca\x71\xd6\xae\x8c\x0a\xf4\x9a\xb3\xa7\x96\xa2\xf0\x41\x2d\xea\x48\xf9\xaf\xb7\x54\x22\x3a\x5d\xe0\x26\xc9\x51\x71\x45\xad\x7f\x32\xdb\xbf\x51\x11\xd3\x7d\x3e\xfb\x53\x2a\x57\x12\xb1\x3d\xa2\x3e\x53\x56\x4e\xfd\x2a\xd5\xd3\x9b\xfa\xe9\x8d\xfd\xec\x75\xfd\x91\xef\x59\xd2\xb7\x2f\xf4\x3d\x61\xd8\x41\x7d\x88\x5e\x51\xae\x47\xf3\x92\xba\x22\xe5\xab\x88\x83\x35\x51\x93\xd5\x55\x45\x5d\xd3\xdb\xc2\xb5\xa6\x8f\xd6\xdc\xdc\xbb\xa2\x7c\x5a\x63\xce\x49\xca\xe2\xa9\x0a\xfa\x7c\x21\x5b\xc8\xd9\x13\x6b\xfe\x6d\xe4\xcb\x1c\xab\x75\x35\x9e\x08\x9b\x1f\x35\xbf\x7e\x09\x47\x33\x9a\x76\xd3\x72\x2a\x58\x82\xb7\xea\x9b\x25\xa2\x02\x20\x71\x5b\xec\x9c\xad\x0e\x8a\x67\x18\xd4\xd7\x3c\xfc\xaf\xea\x81\xa1\x9d\x8c\x0e\xa6\xa5\xec\xb5\xbc\xaa\xac\x97\x72\xfa\x59\x5c\x69\xc6\x4f\xaa\x69\x38\x31\x59\x31\x66\x40\xd5\x85\x98\x4f\xb0\x62\x95\x74\x32\x3a\x38\xa3\xa8\xb2\xa3\xd8\x68\x56\xd2\xb2\x52\x4e\x7f\x7a\xa3\x7d\x84\xb6\x90\x97\xa7\x89\xe9\x74\x5d\x81\xab\x56\x19\x89\xd8\x1d\xe5\xda\x71\xe3\x9c\xdb\xc0\xfb\x06\xef\x5b\x8f\x7a\xdf\x32\x79\x9a\x13\x48\x7b\x9a\x26\x39\xd2\x3e\x4d\x27\xe9\x44\x0b\xf0\x72\xb1\x22\x55\xd6\x35\x5f\x9e\x1c\x77\xc7\xbe\x7b\xd9\x1d\xe2\x6d\xb6\x2d\x6d\xb3\xde\xad\x86\x98\xd9\x15\x4c\x6f\xc3\x3d\x29\xec\xbb\x61\xba\x5f\x68\xdc\xb5\x8a\xa2\x4a\x79\xd9\x16\xb9\x4b\xc5\xf2\x15\x29\x39\xca\xfe\x30\xcc\xfe\x20\x4c\x7b\x8c\xe3\xcb\xe6\x81\xc8\x5d\x79\xb9\x52\x3d\xdb\x16\x7e\xd3\xf8\xfd\x79\xb9\xb2\x28\xce\x5e\x32\x4e\x4e\xcd\xcf\x9a\x9c\x31\xb8\x80\xbc\x13\x75\x05\x4d\xd4\x15\x34\xd1\x4c\x41\x99\x32\x3d\x2e\x46\xeb\x25\x9a\xe3\xa3\x75\x86\xa6\x28\xdd\xc2\x68\x75\x3c\x67\x33\x8e\x58\xf6\x85\x41\x4a\x7a\x34\xbf\xd8\x63\x90\xd5\xe7\xb9\xfc\x48\x56\x2a\x4b\xd9\x42\xa5\x20\x6b\xec\xe7\x07\xd9\x7f\xec\xa7\xdb\xed\x1e\x11\x7e\x8c\x31\x9f\xb0\xc9\x8b\xb3\x46\xaf\x4c\x8a\xa2\x9e\x8d\x1f\xd6\xaf\xb0\xba\x4a\x38\x37\xea\xce\xda\x6e\x01\x95\xd7\x68\x41\x74\xe6\x45\x9a\xe5\x9d\xc9\xdd\xbb\x9e\xee\x2b\xb3\xe1\x4d\xff\x55\x7d\x03\x34\xe5\x52\x97\xfd\x8d\x4a\x9a\x9d\x33\xec\x46\x75\x67\x1b\x1e\xad\xfa\x1b\x6f\xca\xbd\xc5\x3d\xf7\x08\x72\x82\x9d\x17\x08\x72\x02\x17\x1f\x5c\x7c\x70\xf1\xf5\x90\x8b\x0f\x41\x4e\x10\xe4\x04\xae\x15\xb8\x56\xe0\x5a\x81\x6b\xa5\x2b\x5c\x2b\x08\x1e\x82\xe0\x21\xdb\x05\x26\x23\x78\x48\xa7\x63\x2f\x27\xdb\x14\x7b\x39\x79\xd3\xc6\x5e\x4e\x22\xf6\xf2\xf6\x8d\xbd\x9c\x04\x96\x04\x96\x04\x96\x04\x96\x04\x96\x04\x96\x04\x96\x04\x96\x04\x96\x04\x96\x04\x96\x04\x96\x04\x96\x44\xec\x65\xc4\x5e\x06\x3e\x05\x3e\x05\x3e\xad\xc1\xa7\xdf\x8d\xd3\x05\x81\x4f\x4b\x72\xe5\xba\xa2\x5e\xd3\x67\x95\x96\x36\xd2\x8b\x9c\x1a\xe7\x72\x31\x7f\x41\xb6\x80\xe9\x07\xe3\xec\xc7\xfb\xe8\x65\x76\x49\xcb\x1b\xc9\x48\x54\x95\xa5\x5c\xcd\xea\xf9\x92\x38\x43\x48\xf9\xe3\x83\xfa\x19\x97\xac\x8b\x96\x1c\x10\xb2\xea\xc4\x60\xc3\x3e\x64\x56\x3c\xb9\x1e\x9d\x17\x08\xf1\x1c\x9d\xe1\x08\xf1\x38\x1d\xa5\xc3\x9e\xc2\x46\x47\xc3\x6d\x24\x13\x55\x35\x36\x01\xe1\x7d\xee\x80\xf0\x56\xd6\x9f\x97\x2b\x74\xf5\xb2\x3f\x1e\x3c\xc9\x4e\x18\x78\xb0\xae\x9f\x0c\x48\x58\x75\x63\xa7\xa2\x91\x22\xdf\xdc\x59\xdb\x29\xfb\x55\xb9\x5c\x94\xb2\x72\xc3\x7e\x89\x1b\x27\x75\xbc\x6b\xd2\x19\xba\x40\x33\x35\x81\x82\x5a\xec\x02\xec\x4a\x47\xbc\xa0\x16\xe3\x05\x7d\x28\x14\x98\x21\x10\xbb\x34\x92\x7c\x97\x86\x15\x36\xa8\xf5\xd2\xfc\x1c\x12\xde\xf6\xa6\xbc\xde\x7e\x7b\x13\x7f\xf7\x9e\x5a\x7b\xf3\x7d\xc6\xde\x31\xa9\xc6\xc4\x0c\x8b\xdf\x3b\x6f\x61\xda\x13\xf3\x07\xb6\xc6\xc7\xd6\x20\xee\x44\x47\xe2\x4e\x60\xc3\x31\x36\x1c\x63\xc3\x71\xbb\x36\x1c\x67\x3e\x16\x0a\x78\xd7\xe5\x82\x88\x06\x78\x91\x66\x1d\xd1\x00\xdb\xbc\x93\x33\xea\x3e\x47\xd8\xc5\x76\x88\x66\x6a\xfb\x34\x21\xfd\xd6\xdd\xb5\xd3\x84\x91\xb2\xa4\x56\x0a\xdc\x33\x2a\x96\xb9\x0d\xd7\x27\x43\x65\x7d\x39\xdb\xd1\xb9\xc3\xbd\xb5\x05\x1d\xe4\x75\x38\xc0\x37\x45\xee\x73\x1e\x5c\x93\xd5\xbc\xec\x3c\x3a\xe0\x3c\xaa\x55\x54\xa9\x22\xe7\x0b\xd9\x83\x75\xe7\x55\x95\xa2\xff\xfd\xac\x71\x54\xaf\x65\xfa\x12\xcd\x51\xa6\x66\x65\x34\x41\xc7\x5b\x18\x26\xf3\x5c\x40\x80\x19\x8b\xcf\x8c\xe5\x83\x7d\xf4\x7c\x1f\x7b\x5f\x5f\xe4\x3d\x96\xd9\x7f\x7d\x5f\xef\xac\x8e\x6a\x7c\x2e\x7a\x3b\x73\x0d\x01\xf7\x0b\xea\x83\xd3\x56\x12\x0d\x79\x0c\xdc\x61\xfe\xf5\x12\x92\x13\xa9\xc8\xaf\xd4\xa7\x69\xe2\x6a\x7e\x06\x9f\x32\x69\xd1\xa1\x8c\xa6\x94\xe6\x85\xa4\xe6\x11\xfd\xb5\x30\xfe\x5e\x34\x5f\x16\xfb\xc7\x61\xef\x65\x5b\xfa\xa5\x10\xbd\x18\x62\x2f\x84\x22\x9f\xb0\x30\xdc\x7b\x43\x33\x8a\x9a\xe5\xb3\xb9\xbc\xc2\x9b\x5d\x89\xc6\x56\xf5\x9f\x62\xd1\x54\xd5\x53\x70\xc0\x2a\x26\x5e\xeb\x9a\x2d\x1e\x38\x28\x65\xf9\x83\x73\x49\x46\xb1\x90\x35\x3e\xac\x72\x31\xa7\x45\x95\xeb\x46\x9b\x0a\xc9\x42\x59\x56\xca\x45\x39\x11\x15\x77\xe4\x1a\x28\xb3\x2f\x39\xe8\x74\x6d\x00\xeb\xf6\xb1\x5b\x78\xb5\xaa\xf4\x3c\x2b\xc1\x2d\x43\x5b\x57\xb2\x95\x85\x92\xad\xcd\xdf\x84\xcc\x04\x1d\x67\x47\x63\x87\x2d\x97\xc7\x3d\x4e\xc7\x49\xd5\x75\x37\x83\xbb\x84\x7d\x3a\x4c\x2f\x13\xf8\x55\xcc\x53\x46\xd9\x6f\x84\xd9\xc7\xc2\x74\xab\xf8\x6f\x24\x92\xe7\x53\x36\x7d\xe2\x68\x61\x6b\x29\xca\x9b\x37\x7e\x47\x5e\xae\x88\xa6\x48\xcd\xcf\x9e\xd7\x7f\xea\xc2\x1d\xff\x05\xba\x24\xc6\xee\x79\x9a\xe6\x63\xf7\x2c\x9d\xa6\x93\xad\xed\xf8\xe7\xcf\xe8\xbb\xd5\xff\xe3\x83\x94\x10\x4d\xaa\xae\x48\xd9\x84\x79\x02\xaf\x66\x5d\xd0\x05\x55\x29\xca\x1a\x7b\xf3\x20\xfb\x97\x3e\x8a\xe8\xe7\xa7\x9c\xa7\xdb\x31\x18\x62\x8d\xb7\xfc\x2f\x28\x45\x39\x9e\xd4\xcf\x59\xa8\x2d\xc3\x8c\xcc\xa0\x9f\xb2\xdd\x76\xf8\x3f\x43\x69\xd1\x79\x27\xe9\x04\xef\xbc\x43\x94\xa4\x51\x4f\xc3\xc3\xdb\xdb\x6c\xb2\x84\xfe\xc0\x4d\xed\xe8\xcf\xfa\x9b\x94\x73\xec\x8c\xb0\x1c\x7a\xa1\x4e\x83\x21\xee\x65\x86\x09\xf1\xec\x70\xec\xe7\x87\x70\x16\xc2\x59\x08\x67\x21\x9c\x85\x70\x16\xc2\x59\x08\x67\x21\x9c\x85\x70\x16\xc2\x59\x08\x67\x21\x9c\xed\x36\xe1\x2c\x04\xa9\x10\xa4\x42\x90\xda\xc3\x82\xd4\xaf\x0e\xd2\x03\xc6\x7e\xfe\x72\x59\x1b\xdd\x30\xf7\xf0\xe7\xe4\x72\x51\x79\x56\xff\xd2\x6a\xec\xb7\x06\xd9\x47\xfb\x69\x87\x7e\xc2\xf2\x46\x32\xb2\x61\x7c\xbf\x4a\xb9\xc2\x46\x21\xb7\x2e\x15\xab\xb6\xe5\x5b\x73\xc5\x29\xab\x84\x40\x76\xe0\x27\xe2\xc3\x62\x0f\x7d\xb9\xac\x2d\x25\xed\xc2\xe7\x0a\x5a\x65\xbb\x81\xbe\xad\xd8\x34\xbf\xdf\x9d\xc8\xed\x66\xc4\x2b\x26\x12\x64\x5e\xf2\x67\x83\x07\xd8\xb0\xb9\x71\xbe\x5c\xd6\x0c\x0f\x83\xdd\x1d\xd5\xee\x05\x60\x3e\x60\x3e\x60\x3e\x60\x3e\x60\x3e\x60\x3e\x60\x3e\x60\x3e\x60\x3e\x60\x3e\x60\x3e\x60\x3e\x60\x3e\x60\x3e\x60\x3e\x60\x3e\x60\xbe\x0e\x61\xbe\x77\xee\xa3\x05\x97\xb0\x9d\x9e\x3b\xce\x7d\x62\x75\x8e\x6a\x7c\xd3\x03\xfb\xd4\xbd\xec\x53\x7d\xf4\xf2\xaa\x90\x9d\xc9\xc8\x61\xbe\x05\x5d\x9c\x62\x76\x80\xfd\x35\xf6\x08\xc7\x11\x3f\xae\x5f\xe5\x8c\x90\xe9\x1f\x1c\x53\x6c\xbd\x08\x78\x9f\xfa\x26\xf3\xec\x38\x9e\x3d\xb1\x91\x4c\x78\xc5\x8e\xf4\xc3\x73\x2b\xfe\xe4\xed\x2c\x3b\x7d\x03\x21\x2b\x93\xe4\xb3\x2d\x3e\xf2\x7f\xee\xaa\xeb\xc9\x63\xe6\xbe\xf5\xcd\x76\xe6\x49\xe3\xc2\xad\xef\xcf\xf4\xe3\xb4\x48\xaf\xac\xd9\xc2\x71\xe3\x1d\x8a\x9d\x1c\xd8\xe7\xde\xe2\x3e\xf7\x4f\x86\xda\x62\x61\x9e\x10\x5b\xde\xe7\xe9\x92\xbd\xe5\xbd\x23\xa6\xcb\x67\xf7\x7b\x07\x2c\x5b\xfa\x93\xbb\xeb\x4c\xd7\xb9\xba\xbd\x6d\x9b\xb5\x61\x27\xca\xb5\x31\x9b\x3b\x6f\xc1\xb0\x01\xae\xd7\xcc\x26\x36\xc0\x61\x03\xdc\x16\x6f\x80\xdb\x9a\x19\xb0\xef\x5e\xb8\xe6\x3e\x24\xcd\x7f\x35\x5c\x3e\x39\x3d\x1b\x48\x90\x7d\x73\x88\xce\x8a\x05\x62\x55\xf2\x5f\x2b\x61\x6b\xc3\xcc\x0e\xe2\x12\xf6\xbe\x21\xf6\xb1\x7e\x7a\xb9\xf8\x9f\x95\xbe\xf5\x07\x9a\x93\x8b\x70\x15\x43\x40\x4a\x91\x87\xaf\x5b\xba\x08\xcd\xc8\xff\x6a\x7f\xb9\xf9\xcf\x73\x05\xad\xd2\xfd\x2a\x11\xcf\x80\x69\x81\xcb\x47\x36\xa5\x12\x69\x2e\xd1\x74\x73\xc9\xa5\x9d\xe9\xa8\x21\x17\x81\x5c\x04\x72\x11\xc8\x45\x20\x17\x81\x5c\x04\x72\x11\xc8\x45\x20\x17\x81\x5c\x04\x72\x11\xc8\x45\x20\x17\xe9\xb0\x5c\x64\xfb\xf1\x0b\x08\x52\x20\x48\x81\x20\x65\x1b\x09\x52\x3e\x30\x48\x43\x82\x37\xe6\x0a\x5a\x56\xd1\xcd\xaa\x23\x0f\x82\x5c\xca\x95\x95\x42\xa9\xa2\x15\x0b\x59\x59\x63\xaf\x1d\x64\x7f\xdf\x47\xbb\xad\x33\x97\x37\x92\x91\x03\x8d\x43\x44\x4d\x1b\x25\x2c\xea\x25\xc4\x47\xf4\x93\xa7\xcc\xcb\x97\x92\x55\x47\xb7\xdb\xee\x31\x99\x32\x02\xff\x4d\x52\x8a\xe3\xbf\x93\x74\x82\x8e\x79\xe2\x79\xbb\x7d\x37\x92\x89\xaa\x07\x6f\x2a\x5c\x94\x4f\x24\xa7\xab\xcf\xf8\xc3\xc0\x09\x76\xdc\x60\x7f\xb5\x7d\x6d\xe2\x3f\x67\xad\xb0\x83\x0c\x48\x10\x48\x10\x48\x10\x48\x10\x48\x10\x48\x10\x48\x10\x48\x10\x48\x10\x48\x10\x48\x10\x48\x10\x3b\xc8\x00\xec\x00\xec\x00\xec\xb6\x04\xd8\xfd\x43\x98\xf6\x35\x12\x08\xb2\xdf\x0f\xb3\xcf\x86\xeb\xd4\x7f\x77\xe5\xe5\x4a\xf5\x77\x56\x3c\x41\x7c\x5f\x5e\xae\x54\x29\xf4\x52\xf3\xb3\xe6\xba\x2e\x40\x01\x7d\x60\x91\xf5\xcb\xf4\xb8\xa0\x6e\x97\x68\x8e\x53\xb7\x19\x9a\xa2\x74\x6b\x91\xf5\xcd\xe7\x6c\x06\xc0\xb1\x37\x0f\xd1\x43\x7a\xc3\xdb\xb1\xb9\x54\xd9\xaa\xae\xfe\x51\x54\x15\xfd\x93\xa4\xb1\x2f\x0f\xb2\xcf\xf7\xd3\x8e\xac\xa2\xca\xcb\x1b\xc9\xc8\x6b\x43\xcd\x09\x2f\x17\xec\xd2\x26\xad\xd2\x02\x12\x62\x1e\xe6\x17\x4c\x2a\xaa\xbc\x94\x74\xbd\x0f\xa2\x77\x05\x18\xbd\xab\x39\x5d\xa6\x81\x62\x63\x31\x03\xbe\xba\xf6\x0b\x20\x2c\x20\x2c\x20\x2c\x20\x2c\x20\x2c\x20\x2c\x20\x2c\x20\x2c\x20\x2c\x20\x2c\x20\x2c\x20\x2c\x20\x2c\x20\x2c\x20\x2c\x20\x2c\x20\xec\x96\x40\xd8\x4f\x0e\xd3\xf1\xea\x68\xfd\x1e\x3b\xb2\xb5\x8a\x54\x91\x57\xd7\x8b\xfa\xbb\x6b\xc4\xec\x62\x6f\x1e\x66\x7f\x1d\xb6\xc3\xf8\xdf\xcf\xa3\x74\x55\xaf\x3f\x17\x8d\xcb\x16\xe5\x4a\xfc\x01\x1e\x8f\x8b\x47\xdb\xb7\x37\x4f\x3b\x4e\x08\x38\xec\xd6\x53\x74\x56\x50\xb5\xe3\x74\x94\x53\xb5\x31\x4a\xd0\x88\x77\xd0\x81\x72\x59\x33\xb3\xaf\x1b\x15\xba\x81\x40\x35\x79\xb9\x42\x57\x1f\xf5\xc7\x67\x23\x2c\x5e\x1f\xfc\xde\x59\x05\x27\x36\x8b\xfc\xea\x4e\xbb\xb5\x1f\x34\x23\x69\x79\x37\x78\xcc\x8c\x99\xd5\xa9\x36\x4f\xa7\xe9\x1c\x9d\xa9\x09\xee\xb2\xc9\x46\x47\x40\x17\xc4\xc1\x6a\x31\x0e\xd6\xbb\x42\x37\xfe\xca\x4f\x89\xa0\x57\xa7\xe9\xa4\x1d\xf4\x2a\x78\xc3\xd1\x9c\x65\x70\x8b\x2d\xe2\x6e\x25\x7c\x42\x66\xc5\xdf\xb8\xc7\x36\x1c\x77\x8a\xf9\x7b\x54\xaa\xb2\x15\x0f\x8a\x5f\x3b\x67\x2a\x1e\xa3\x05\x9a\x77\x9a\x8a\x78\x9a\xce\xb5\xe0\xf3\x98\xe2\xf5\x7e\x94\x93\x62\x0d\xc6\xc3\xcf\x78\x7c\x35\x4c\x5f\x09\xb3\x2f\x85\x23\x7f\x6c\x35\xd0\x87\xc3\x8f\x39\x67\x46\x05\x7d\x82\xce\x67\x37\xd1\x15\x79\x55\x78\x49\xac\x25\x89\x8d\xe2\x8d\x55\x20\xaf\xa2\xc3\x38\x94\x94\xd2\xc1\x92\x9c\x97\x78\x43\x18\x93\x23\xa7\x11\x11\x70\xc2\xea\x02\x63\x2c\x16\xd6\xd6\xe4\x9c\x6e\xa6\x8a\xcf\xda\xee\x0b\x1b\x59\x17\x8a\x23\xc6\x9c\x89\xcf\x1a\xa3\x79\x55\xff\xf0\x95\x65\xb5\xa0\xe4\xac\xb9\x9f\xfd\x0d\xe4\x9e\x21\xb3\x35\xd6\x35\xbd\x92\xce\xf9\xa6\xa4\x5f\x69\x3e\x90\x71\x93\x55\xb1\x4c\x37\x8b\x48\x88\x7a\x8a\x30\x4a\x2e\x75\x8c\x31\x5e\x85\x79\x5e\x03\x97\xb9\x60\xfa\x33\x61\x7a\x29\xcc\x5e\x0c\x47\x5e\xb0\x9a\xf9\x5d\xe1\x29\x87\x07\xb4\x5c\x94\x25\x4d\xb6\x98\xca\xbc\xaa\x94\xa5\x3c\xef\x00\x91\x12\xbe\xca\xad\x62\x3e\x8b\xed\x42\xd5\x7b\x29\x99\x38\x96\x88\x2e\x8a\x0e\x11\xad\x53\xd6\x97\x02\xfa\x72\xca\xc4\x73\x72\x54\x51\xcb\x57\xa4\x92\xe9\xe6\x51\xd7\xe5\xd1\x55\xa9\x68\xe2\xec\x98\x38\x1a\x8b\xae\x16\x4a\x52\xb1\xf0\xaf\x4c\x2e\xb6\x22\xeb\x73\x4d\xbe\xf8\x18\x15\x73\xcc\x9c\xcd\x4a\x45\xe1\x83\x9a\x7d\x91\x00\xc8\x89\xe8\x74\x81\x0f\x67\x47\xc5\x15\xb5\xfe\xc9\xec\x85\x5c\x45\xf0\x6b\xfe\xb2\x29\x95\x2b\x89\xd8\x1e\x51\x9f\x29\xf3\x41\xaa\xfc\x45\xe9\x37\xf5\xd3\x1b\xfb\xd9\xeb\xfa\x23\xdf\xb3\x9c\x86\x5f\xe8\x7b\xc2\x00\x4c\xfa\x2b\xa5\xaf\xa4\xf2\x92\xba\x22\xe5\xe5\x68\x56\x29\x16\x65\x6e\x04\xed\xf7\x42\x56\x57\x15\x75\x4d\x6f\x0b\xd7\x9a\x3e\x5a\x73\x73\xef\x8a\xf2\xf1\x6c\x0e\x46\x91\xe9\x5f\x1f\xa7\x39\x39\x5b\xc8\xd9\xa4\x98\x43\x47\x11\x66\xcb\x6c\x5d\x7d\x6d\x65\x20\x39\x13\x2b\x26\x1c\xcd\x68\x02\x29\x6b\xf5\x64\xb9\x0a\xab\x6f\x96\x88\xa6\xb2\xfa\x42\x8b\x7f\x51\x9d\xc6\x61\x50\x3c\xc3\x60\xf4\xa0\xd1\xf1\xd5\x03\x43\x3b\x19\x1d\x4c\x4b\xd9\x6b\xfa\xc7\xa4\x94\xd3\xcf\xe2\x3e\x3a\x7e\x52\x4d\xc3\x09\x0a\x6c\x0c\xfd\xea\x42\xcc\x27\x58\xb1\x4a\x3a\x19\x1d\x9c\x51\x54\xd9\x51\x6c\x34\x2b\x69\x59\x29\xa7\x3f\xbd\xd1\x3e\xc2\x2b\xcb\xcb\xd3\x84\xf5\xaa\x2b\x70\xd5\x2a\x23\x11\xbb\xa3\x5c\x3b\x6e\x9c\x5f\xfa\x8f\x85\x68\x4e\x7c\xe9\xa7\x69\x92\x7f\xe9\xf5\x0f\xf6\x89\x16\x3e\x1f\x22\xbe\xa2\x88\x4f\x36\xce\xe3\x93\xed\x14\x6d\x2b\xe7\x6e\xb4\x4c\xbf\x49\x40\xd4\xfd\x9b\xbd\x8b\xed\x10\xcd\xd4\xec\x02\xa2\xf1\xa2\xc1\x39\x71\x48\x7f\xe3\x36\x7b\x1e\x10\xaf\x8b\x67\xe9\xbd\x92\x10\x41\xde\x3a\x32\x39\x40\x80\xca\x5e\x9b\x92\x20\x40\x25\x02\x54\x6e\x71\x80\xca\xa7\xbc\x23\xe3\xdd\xe8\x8a\xb2\xe9\x68\x94\x41\xd3\xa2\xcc\x71\x3a\xca\x0e\xc7\xc6\xad\xa0\x0b\x77\x39\x43\x4f\x3a\xae\xba\x29\xc2\x4d\x7e\x79\x90\xee\x77\x4d\x3b\x2a\xc9\x6b\xba\x81\xab\x68\xec\xbf\x0c\xb2\x0f\x3b\xb2\x8e\xae\x37\x99\x75\x94\x17\xb0\x28\x07\x15\x4a\x72\xc8\x99\x74\xd4\x2c\x7b\x7b\xaa\x16\xbb\x34\x9a\xe4\x23\xfe\x2f\x52\x9c\x0d\x19\x79\x46\xcd\x1e\xf0\x9c\x33\x41\xab\x08\xad\x22\xb4\x8a\xd0\x2a\x42\xab\x08\xad\x22\xb4\x8a\xd0\x2a\x42\xab\x08\xad\x22\xb4\x8a\xd0\x2a\x42\xab\x08\xad\x22\xb4\x8a\xd0\x2a\x42\xab\xd8\x29\xad\xe2\x8f\x0c\x51\x52\x20\x3e\xad\xa2\xa8\x52\x5e\x76\x4f\x29\x63\x1c\xcc\x16\x25\x4d\x93\x35\xf6\xfb\x83\xec\xb7\xfb\xe9\x76\xe3\x57\x6b\x1b\xf9\x6b\x9a\xa3\x7f\x8b\xe2\xb2\x49\xbd\xb0\x80\x00\xe0\x7e\x7e\x81\x51\xb0\xb1\x55\xdd\x79\x9b\xed\x91\x49\xa6\xf3\x3b\x96\x97\xfd\xb1\xde\x29\x36\x61\x32\x71\xbb\x3d\xc9\x2b\x6f\x4c\xf5\x28\xa2\xa6\xe0\x22\x68\x20\x68\x20\x68\x20\x68\x20\x68\x20\x68\x20\x68\x20\x68\x20\x68\x20\x68\x20\x68\x20\x68\x20\x68\x20\x68\x20\x68\x20\x68\x20\x68\x60\xa7\x68\xe0\xef\x0d\xd0\x6e\x33\x8a\x61\x59\xc9\x69\xec\xe3\x03\xec\x43\x7d\x76\xb4\xc2\x07\x1b\xa7\x73\x99\x57\x72\xf1\xfb\xf4\x53\x44\x2c\xc1\x79\x25\xb7\xdd\xf4\x77\x4b\x74\x52\x30\xb8\xc3\x34\xce\x19\xdc\x08\xc5\x69\xc8\x53\x9a\xaa\xb7\x0b\x17\xa5\x2b\xb9\xa6\xd2\xb4\x4c\xfb\xe3\xb6\x18\x8b\xba\xa8\xe6\xac\x38\x80\xf3\x4a\x8e\xfc\xb2\xbd\x80\xa7\x81\xa7\x81\xa7\x81\xa7\x81\xa7\x81\xa7\x81\xa7\x81\xa7\x81\xa7\x81\xa7\x81\xa7\x81\xa7\x81\xa7\x81\xa7\x81\xa7\x81\xa7\x81\xa7\x75\x8a\xa7\xfd\xa2\xb1\x81\x76\x74\x23\xe9\x95\x0f\xe4\x0d\x83\xec\x1f\x1d\x84\xed\x50\x63\xc2\xe6\x9a\x06\x22\x3e\x6a\x33\x37\xd7\x13\xb6\x1b\x85\xbb\xe2\xbd\x0b\xf6\x11\x81\xe7\x66\x68\x8a\xe3\xb9\x33\x74\x8a\x26\x7c\xf1\x9c\x67\x52\x13\x93\xcb\xb5\x2b\x27\x07\x48\x1d\x48\x1d\x48\x1d\x48\x1d\x48\x1d\x48\x1d\x48\x1d\x48\x1d\x48\x1d\x48\x1d\x48\x1d\x48\x1d\x48\x1d\x48\x1d\x48\x1d\x48\x1d\x48\x5d\xb7\x90\xba\xaf\xc4\x69\x46\xec\x83\xcd\x2a\x8a\x9a\x2b\x94\x78\x21\xb5\x9b\x61\x3d\xf2\x78\xf0\xb0\xd3\x56\x06\x8f\xb7\xc5\xd9\xff\xd6\x47\x77\x3a\xcb\xb1\x76\xc8\xde\xed\x92\xce\x63\x4e\xbf\x3a\x3e\xa0\x1f\x99\x74\x5c\x63\xec\x62\xb5\x23\xc3\xf2\xf3\x02\xce\xe7\x21\xd1\x8c\x00\x6a\x67\xe9\x34\x07\x6a\xc7\xe8\x08\x1d\x6a\x00\xd4\x1c\x6d\x63\x3c\x53\x82\xd7\xcb\x57\xfa\xf6\x8c\x3f\x62\x9b\x60\xc7\x0d\xc4\xe6\xd2\x07\x06\x73\x13\x37\xab\xdb\x7d\xea\x93\x35\x24\xf2\xb5\x9d\x1e\x1d\x72\xaf\x7b\xc6\x0f\xd1\x27\xc3\xc6\xc1\x4e\x77\x4b\x7a\x96\xce\xd3\x74\x4d\xb8\xdc\xd6\xfa\x05\x91\x72\x91\xf9\xa3\xc5\xcc\x1f\x1f\x08\xd1\x45\x91\xb8\x63\x8a\xd2\x76\xe2\x8e\xc0\x2d\x44\x50\x26\xc8\x3f\x81\x50\x79\xbd\x42\x4d\x1a\xa2\x86\xd6\xa6\x81\x95\x8a\xff\xfc\x1e\x0f\x4b\xf3\x72\x2b\x45\x88\x30\x2e\x43\xe2\xff\x1d\xb7\x2d\xc8\x11\x82\x1c\x21\xc8\x11\x82\x1c\x21\xc8\x11\x82\x1c\x21\xc8\x11\xe2\x9e\x23\xa4\xbd\x8b\x95\xf4\x5b\x76\x7b\xcc\x11\x1e\xf2\x49\x1f\x22\x66\x0e\x83\x3c\xb8\x7d\x27\x27\x0e\xc8\x1f\xd2\x6b\xd3\x15\xe4\x0f\x41\xfe\x90\x2d\xce\x1f\xd2\x39\x36\xe5\x9b\x46\xa4\xbd\xdf\x83\xcc\x38\x8d\xb1\x44\x6c\xc4\x4a\x0d\x72\x87\x33\xa9\x08\xbf\xe8\xa6\x48\x27\xf2\x96\xcb\x34\x66\xc4\x1a\xcc\x5e\x91\x73\xeb\xc5\x42\x29\x6f\x13\x56\xa9\x58\xbe\x22\x25\x47\xcb\x6a\x41\x51\x0b\x95\x67\xcd\x50\x83\x5f\x7c\x86\xfd\xfa\x00\xed\xb5\xaf\x58\x36\x4f\x8d\x1c\xf0\xd9\x8d\x6c\x94\xc4\x03\xd6\xc5\xf7\xeb\x27\x2f\x5a\xa5\x2c\x19\x85\x54\x9d\xd4\xe5\xba\xc8\x34\xd4\x82\x50\x0b\xa6\xa1\x16\x84\x5a\x10\x6a\x41\xa8\x05\x7b\x46\x2d\x98\xee\x1a\xb5\x60\xe0\x35\x69\x59\x2d\x98\x86\x5a\x10\x6a\x41\xa8\x05\xa1\x16\x84\x5a\xb0\xf3\x6a\xc1\x74\x4f\x8b\xfb\xd2\x10\xf7\xb5\x4f\xdc\x97\xee\x76\x71\x5f\x7a\x1b\x8a\xfb\x32\x45\x7a\xa5\x20\x89\x19\xba\xc0\x49\x62\x9a\xce\xd1\x19\x4f\x92\xe8\xa0\x53\x26\x6b\x4a\x54\x71\xa2\xa6\x62\xbd\xf9\x6c\xfd\xbc\x9a\xf3\x67\x8a\x29\x76\xd6\x88\xfa\xe6\xbc\xbb\x13\x20\x8a\xda\x59\xc9\x17\x6a\xb1\x1a\xc5\xfe\xdb\x2e\x77\x76\xf6\x7d\xe2\x23\x15\x95\x6a\x30\xd9\xc3\xe2\xf7\x4e\x81\x32\xc1\xb5\xe6\xe9\x12\xcd\xd5\x78\x77\x1a\xed\xeb\xf5\xed\x20\xf8\x77\xa0\x7a\x6b\x51\xf5\xf6\xd6\xf0\xe6\xf6\x98\xfb\x8e\x45\xe1\xe2\x4e\x72\x17\xb7\x25\xa2\xbb\xd1\x32\x17\x85\xdb\x7c\x8e\x32\x0e\xb7\xf9\x8d\x16\xea\x67\xd1\x9a\xb3\x58\x9e\xb6\xa8\x39\x53\xd6\xc0\x6e\x96\x15\xad\x42\xf1\x7f\x18\x71\xb7\x68\x31\x43\x33\xe1\x10\xa0\x28\xab\x35\xd6\x6d\x54\x9c\x53\x6f\xdd\x26\xad\x8b\xda\x69\xe7\xda\x23\xbd\x03\x10\x06\x10\x06\x10\x06\x10\xee\x1d\x20\x8c\xd9\x9d\xcf\xec\xae\x7b\x88\x39\x64\xcf\x1d\x91\x3d\xc3\x31\x01\xc7\x04\x1c\x13\x70\x4c\xc0\x31\xd1\xd3\x8e\x09\xec\x7e\xc1\xee\x17\xec\x7e\x69\xd7\xee\x17\xf8\xfd\xe0\xf7\xeb\x55\xbf\x5f\x26\x1f\xf0\xc6\x2f\x3f\xd8\x1c\x77\xc7\xc0\x7b\xd9\x1d\xe2\x6d\xb6\x2d\x6d\xb3\xae\xb4\x1b\x04\xd3\xc1\xeb\xe1\x3f\x72\x37\x45\xcd\xe8\xc0\xb5\x91\x45\x9e\x1b\xd5\x78\x3b\xb1\xb7\xdc\xcd\xbe\x16\xb6\xe3\x03\xf3\x30\x21\x51\x71\xcc\xec\x66\x7b\x06\x6c\x6d\x00\x8b\xdf\x23\xc2\x89\xa8\xf2\x92\xbd\x2b\x4c\xb4\x7c\xc0\x11\x44\x9e\xf4\xde\xd7\x7f\x5a\x0c\x98\xa3\x74\x98\x0f\x98\x04\x8d\x50\xdc\x37\x56\xaf\x55\x5b\x73\x20\x5c\xf4\xef\xdc\x21\x36\xd0\x28\x67\x96\x55\xa4\x6f\x98\x90\x0f\xec\xb4\x5b\xda\x0c\xfe\xd1\x44\x63\xef\xb3\xe2\x84\xb4\xbd\xbd\xd3\xe7\xe8\x0c\x9d\xaa\xf1\x95\x6e\xaa\x5d\x41\xcf\xe0\x1b\x6d\xd1\x37\xfa\x8e\xd0\x0d\xbe\xd3\x94\x16\xbe\xd0\x93\x74\xc2\xf6\x85\x6e\xb6\x0c\xbf\x2f\x87\x4f\xfc\x8f\xe6\xec\x89\xb7\x0d\x71\x5a\x9a\xf4\x5f\xde\x66\x1b\x8c\xf1\xba\xcd\xbb\xfe\x96\x23\x62\x6c\xe5\x6d\xab\xdd\xc0\xee\xdd\x5e\xb3\x60\xd8\xbd\x8b\xdd\xbb\x5b\xbc\x7b\xf7\xc9\x1b\xfd\x54\xf8\x99\xf9\x20\xed\xb8\xef\x0e\xe0\xcc\x51\x3a\xcc\xc6\x63\x63\xd6\x76\xdb\x57\x38\xb7\xe8\x5a\x85\xd6\x6f\xd3\x0d\x7c\xd1\xf0\x77\x61\xba\x57\x6c\xa2\x2d\xc9\x95\xeb\x8a\x7a\xad\x6a\x13\xed\x28\xfb\x5c\x98\x7d\x3a\x4c\x2f\xb3\x0f\xea\x9f\xa6\xbb\xf2\x72\xa5\x9a\xa3\x0b\x2d\x66\xfc\xde\xbc\x5c\xb9\x64\x9d\xba\x94\x4c\xcd\xcf\x9a\xf2\x81\x00\x3f\x40\x75\x05\x4d\xd4\x15\x34\xd1\x4c\x41\x99\x32\x3d\x2e\x06\x95\xfe\x45\xd1\x07\xd5\x0c\x4d\x51\xba\x85\xef\x88\xe3\x39\x9b\x11\x73\xb2\xdf\xb9\x4c\xa9\x06\xad\xee\x11\x17\xd2\x38\x97\xa3\xa8\x82\xac\xb1\x37\x5c\x66\xbf\x3c\x50\xdb\x37\x3e\xbb\x98\x8d\xde\x11\x30\x2a\x3e\xa8\x9f\xec\xec\x30\x3b\xe4\x47\xd5\x89\xd8\xc9\x8c\x9d\xcc\xd8\xc9\x0c\xe1\x1a\x84\x6b\x10\xae\x41\xb8\xd6\x35\xc2\xb5\xee\xd1\x65\x41\x30\x04\xc1\x10\x04\x43\x10\x0c\x41\x30\xd4\xd3\x82\x21\x28\x1a\xa0\x68\xe8\x51\x45\xc3\xb6\xdc\xc9\xbc\x2a\x42\xf2\x8f\xf1\x90\xfc\xe1\x47\x2f\xb2\x53\xd4\xc0\x91\x92\x70\xc0\xaa\x8d\x64\xa2\x8a\x10\x35\xb5\x87\xf9\xb2\x3f\x63\x3d\xc9\x4e\x18\x64\xd5\x59\x3a\xb9\xf8\xe3\xeb\xc8\x99\x6f\x7a\xdc\xd8\x07\x77\xd5\xd2\x32\x7b\xdf\x72\x35\x18\x1b\x16\xbf\x77\x12\x8d\x09\x92\x95\xa1\x0b\x34\x53\xe3\xdb\x3a\x4a\x87\x5b\xe9\x12\xf8\xb5\xe0\x99\x6f\xd1\x33\xff\xbd\x10\x9d\x17\x86\xe1\x1c\x9d\xe1\x86\xe1\x38\xb5\x38\x0a\x85\xce\x2b\xc9\x75\x5e\x96\x8f\xbe\xf5\xd2\x1e\x11\x3b\x95\x67\x68\xca\xb1\x53\xb9\xf5\xe2\x5a\x8f\xba\xc0\x77\x0f\x37\x69\xd1\x3c\x2d\x96\x9f\xa9\x8b\x7f\x6b\xa4\xd6\x62\xb9\xef\x4b\xae\xb6\x5e\x87\xc4\x39\x4e\xeb\x65\xef\x48\xee\x8c\x1d\xc3\xde\x64\x20\x5e\x20\x5e\x20\x5e\x20\x5e\xec\x4d\xc6\xde\x64\xec\x4d\xc6\xde\x64\xb8\x1a\xe0\x6a\x80\xab\x01\xae\x06\xb8\x1a\xb0\x37\x19\x7b\x93\xb1\x37\x19\x7b\x93\xe1\xc9\x83\x27\xaf\x0b\x3d\x79\x5d\xbd\x37\xb9\xcd\x2e\xb4\xed\x98\x07\xec\x0d\x43\x34\x28\xc4\xf4\x52\xb9\xac\x8d\x6e\x24\xc5\xc0\x19\xd5\xe7\x67\xaa\xde\x74\xaa\x2a\x6f\x14\xf8\xe0\x65\x5f\x1c\x64\xbf\xdb\x4f\x3b\xf4\x13\x97\x37\x92\x91\x1f\x32\x26\xb4\xa5\x5c\x61\xa3\x90\x5b\x97\x8a\x4e\x37\xad\x64\x2d\x1e\x27\xad\x92\x16\x8c\x92\x12\x8e\x99\xc2\x84\x35\xc7\x18\xe4\xc5\x0d\xda\x0c\xb7\x0a\xca\x29\x65\xd9\xe2\x00\x5a\x45\x96\x72\x89\x78\x92\x5f\x90\x2a\x97\xb5\xa5\x64\xfd\x4d\xe6\x0a\x5a\x65\x46\x51\x53\xc5\xa2\xc5\xec\xbb\x3d\xa7\x58\xe6\x1a\xcd\x8b\x77\x67\x96\xce\xf3\x77\x27\x45\x67\xe9\x74\x0b\xef\x0e\xf7\x9c\x4f\xeb\x8b\x3f\xdf\xf7\x67\xbf\xfb\xfb\xb3\x9b\x11\xaf\x98\x88\x8f\xbd\xe4\xff\xe2\x1c\x62\x49\xe3\xc5\xd0\xc7\x87\xe1\x9c\xa9\xef\x96\xaa\x37\x29\x83\xad\x07\xd8\x7a\x90\x81\x5f\x0a\x7e\x29\xf8\xa5\xe0\x97\xea\x19\xbf\x54\xa6\x6b\xdc\x2e\x81\xd7\xa4\x65\x7f\x40\x06\xfe\x00\xf8\x03\xe0\x0f\x80\x3f\x00\xfe\x80\xce\xfb\x03\x02\xc7\x0a\x99\x9e\x26\xa0\x19\x10\xd0\xf6\x11\xd0\x4c\xd7\x13\xd0\x6d\xb8\x97\x81\x7d\x3b\x4c\x11\x81\x01\x73\x05\x2d\xab\xe8\x46\xcf\x19\xc8\xe4\x33\x61\xf6\x52\x98\x76\x5b\xc7\x1a\xc6\x31\x89\xe4\xe5\xca\x94\x79\x26\xc2\x98\x78\x85\x31\xf9\xd0\x10\x4d\x88\x26\x57\x57\xa4\x6c\xc2\x3c\x81\xd7\xd6\x6e\xfb\x15\xb9\x22\x59\x4c\xb6\xb8\xae\x55\xf4\x05\x63\x51\xd6\xd8\xdf\x0c\xb2\xbf\xe8\xa7\x7b\xf4\x6b\x53\xce\x4b\x97\x8d\x6b\x22\xd7\x9b\xc4\xb3\xa2\xd0\x05\x45\x9f\xb1\x04\xc2\x65\x47\xf8\x05\x0b\xb5\x15\x5b\x12\xf5\x72\xdc\x4f\x6f\x26\x20\xd9\x16\x91\x6c\xc1\x1f\xc9\xce\xb0\x29\x03\xc9\x7a\x8e\x30\x93\xd3\xda\x9d\xe2\x04\xb4\xbc\xc3\x40\x69\x41\x69\x41\x69\x41\x69\x41\x69\x41\x69\x41\x69\x41\x69\x41\x69\x41\x69\x41\x69\x41\x69\x41\x69\x41\x69\x41\x69\x41\x69\x41\x69\x3b\x46\x69\xbf\x13\xa1\x4b\xde\x91\x8f\x05\x2a\xf4\x08\x7f\x5c\x28\xe5\x55\x59\xd3\xea\x52\xda\xbc\x3b\xc2\xde\xd9\x47\xac\x2a\x4c\x82\xe0\x87\x0f\x35\xcc\x6e\x33\x2b\xca\x8b\x8f\xe8\x67\x39\x63\x25\xf0\x8b\xed\x30\x09\xc6\x79\x6d\x49\x77\x23\xd1\x8c\x60\x73\x67\xe9\x34\x67\x73\xc7\xe8\x08\x1d\x6a\x2e\x94\x05\xaf\x66\xc2\xa8\xdd\x0d\xa4\xb1\xc8\xcb\x15\xba\xfa\x8c\x3f\x8b\x9b\x60\xc7\x7d\x02\x59\x98\x75\xa9\xe3\x6f\x91\xef\xec\x74\xed\xa0\x41\xbf\xa4\x38\x66\x1f\x8d\x1a\x27\x6e\x4d\x37\xa5\x67\xe9\x3c\x4d\xd7\x44\xe5\x69\xad\x9f\xb0\xa1\x1b\x41\x79\x5a\x0c\xca\xf3\x81\x50\x60\xc6\xe2\xa2\x88\xc9\x33\x45\x69\x3b\x26\xcf\x16\x58\x1e\x9e\x40\xa7\x39\xcb\xe3\x63\x60\x3c\x0d\x53\xfa\x67\x77\xbb\x5a\x9e\xb1\xa6\xb3\xeb\x98\x26\x48\x24\xf2\xe8\xbc\x01\x42\xba\x9d\x5e\xb3\x80\x48\xb7\x83\x74\x3b\x5b\x9c\x6e\x47\xf2\x4e\xc3\x18\xd0\x37\xc8\xfc\x3a\x34\x67\xfe\x9b\x37\xf8\xd5\x1f\x0a\xff\x4c\x3c\x87\x69\x9c\x8d\xc5\x12\xd6\x86\xb7\xbd\xce\x4c\x3c\x46\x31\xf5\x79\x78\xb6\xe1\x36\xb9\x4f\x0d\xd1\x88\x57\x7a\x50\x63\x85\x25\xbc\xdd\xc6\xf2\x8a\xbd\x6d\x88\x7d\xc6\x91\x2a\xf4\x6e\xbe\x98\xaa\xfe\x36\x72\x31\x80\x6b\x72\xd0\x1c\x3f\x14\xf0\x6a\xe9\x31\x3a\x21\x06\xdf\x38\x8d\xf1\xc1\x17\xa7\x21\x1a\xf0\x4d\x02\xd5\x9c\x64\xc1\x67\x81\x74\xde\x7f\x9c\x3e\xc4\x62\xb5\xf9\xa1\xc4\xad\x9d\x1b\xc6\x22\x3f\xe6\x48\x0a\x7a\xaf\xb9\xfe\x71\x6b\x56\x8f\x34\xa0\xed\x68\xd9\x34\x8f\xfb\x5a\xf3\x8d\x6f\xba\x69\xf1\x45\xc7\x9a\xa6\xc5\x35\xcd\x4f\x86\x6e\xe4\x95\x3e\x23\x96\x31\xfa\x27\xc8\x5a\xc6\x74\xc6\x24\xf0\x95\x4b\x50\x26\x21\xfe\xb7\xb7\xdb\x26\xe1\x76\x23\x22\x84\x54\x32\xcc\xc0\xbd\xe2\x87\x4e\x58\x81\xf6\x04\xed\x84\x75\xf0\xb1\x0e\x08\x1c\xd7\x91\xc0\x71\x88\x18\x84\x88\x41\x88\x18\xd4\xae\x88\x41\x99\x8f\x85\x02\x0e\x9b\xb2\x20\x42\x7d\x5f\xa4\x59\x47\xa8\xef\x36\x87\x62\x09\xea\x93\x7e\x35\xea\x3e\x75\xd8\xc5\x76\x88\xf6\xa6\xf4\xa7\x1d\xb9\xbe\x1f\xaa\xa3\x91\x6e\x0b\x02\xd7\xec\xde\x41\x4f\x04\x80\x1b\x7b\x6d\xfa\x01\xdc\x08\xdc\xb8\xc5\xb8\xb1\xad\x60\x27\x30\x9b\xee\xcb\x12\xc7\x69\x8c\x25\x62\x23\x16\x15\xbc\xc3\xc9\x12\x79\x81\x37\x05\x49\xfc\xfa\xdd\x94\xf4\x21\x89\x65\x25\x57\x2b\xd3\xf8\x95\xbb\xd9\x1f\x3a\x70\x62\xb4\xa1\x36\x63\x5e\xc9\xc5\xef\x73\xc3\x8a\xf3\x4a\xae\x2d\x42\x8c\x05\x3a\x26\x46\xe0\x18\x25\xf8\x08\x1c\xa2\x01\x7a\xc8\x77\x04\xce\x2b\x39\xdf\xf1\x37\xed\x3f\xfe\x62\x2c\x5a\x3b\xfe\xf4\x92\xab\x46\x5f\x63\x3e\x19\xf9\x49\x07\x56\xdc\xef\x27\xab\xd0\x9b\x37\xea\x81\x17\xdb\xd4\xc2\xe9\x09\x3a\x4e\x47\x6b\xbe\xeb\x4d\x36\x31\xbe\xe1\x00\x8c\x2d\x02\xc6\x1f\x0b\xd1\x29\x41\x09\x8f\xd0\x21\x9b\x12\xde\xf8\xdb\xdd\xb2\xbd\x68\x12\x2e\x06\x63\x35\xd2\x5f\x74\xac\x32\x46\x9a\xd6\x3c\xe8\xf6\xe1\x7e\xd7\xd5\x46\x1b\xac\x03\x56\x1c\xbd\x66\xad\xb0\xe2\xc0\x8a\x63\x8b\x57\x1c\xdd\x3f\xdf\xf3\x5d\x6d\x8c\x51\x82\x8d\xc4\xe2\xd6\xca\xe1\x76\xe7\x6a\x63\x5e\xc9\xdd\x14\x6b\x8d\xff\x11\xa6\x3b\x85\x5e\x7c\x85\x07\x90\x30\x35\xe2\xec\x73\x61\xf6\xe9\x30\xbd\x8c\xff\x6a\xa9\xfa\x3c\x03\x7a\xdc\x9b\x97\x2b\x69\xfd\x54\x43\xb5\xd7\xf5\x11\x3d\x3c\xa7\x1d\xed\x09\xf5\x61\x46\xf4\x78\xdd\x41\x9a\x37\x62\x29\xaf\x57\x14\x2d\x2b\x15\x0b\xa5\xfc\xe8\xc6\x78\x43\x61\x3e\xaf\x9a\x6e\x27\x8b\x65\x25\x67\x5e\x27\xab\x96\x90\xe4\xfd\x23\xec\xc5\x3e\xda\xeb\x28\x71\xd9\x28\x31\x12\x77\x11\x95\x5c\xb0\x8a\x9b\x57\x72\x29\xab\xb8\xf8\x31\xfd\xdc\x94\x5d\xc8\xd2\x78\x8d\x00\xd3\xe3\xc2\x80\x57\x8a\xaa\x77\xdf\x3c\x21\xfa\x66\x9e\x2e\xf1\xbe\xb9\x40\x33\x34\xe5\x69\x52\x1c\xcd\x91\x30\x9a\x23\xe1\xf1\x04\x4d\x4a\x54\xf2\xfe\x86\x67\x8a\xa5\xcd\x10\xc7\xf6\xed\x0d\x0b\xe4\x71\x73\x87\x55\x1a\x37\xd4\xfc\x9f\xdc\xe5\xde\x9b\x07\xdd\xe5\x2c\x5e\x1d\x3a\x61\x9c\xbe\xe5\x7d\x9a\x7e\x8a\x9e\xa4\xa5\x9a\x19\x60\x40\x7d\x87\xd9\x20\xd6\xae\x2d\xae\x5d\x3f\x1d\xa2\xa7\xc5\xda\xf5\x71\x5a\xb4\xd7\xae\x81\x99\x95\x6e\x34\x64\x7c\xed\xdb\x29\x43\x16\xff\xbd\x3d\xee\x86\xcc\x74\xb2\x4a\x9e\xb6\xeb\x84\x38\x63\xeb\x4d\x17\x34\x3b\xd0\xec\x40\xb3\x03\xcd\x0e\x34\x3b\xd0\xec\xf4\xa6\x66\xc7\x57\x6a\xd3\xb1\xf9\x44\xfa\x77\x76\xbb\xcf\x27\x8e\xfa\xe8\x7b\xbc\x66\x19\xc7\x39\xea\xd9\xd2\x49\x06\xe8\x7c\xaf\x4d\x6d\x40\xe7\x41\xe7\xb7\x98\xce\xab\x6d\x5b\x81\xfa\x7e\x4d\x3a\xf5\xad\xf0\xe7\xfb\x53\x94\x66\xe7\x62\x67\x2c\x5a\xbf\xdf\xc9\xf7\x3d\xee\x73\x53\x30\xff\xef\x0e\xd3\x9c\x77\x24\x6f\x11\x48\xda\x6b\x07\x63\x29\x57\x56\x0a\xa5\x8a\x56\x2c\x58\x87\x9e\x63\xbf\x3c\xcc\x5e\x7b\x4b\x4d\xec\xef\x8f\x86\x8c\xb0\x3d\x8e\x88\xd2\x25\x73\x35\xa3\xac\x46\xf5\xee\x8c\x4e\x1b\xc5\x2d\xea\xc5\x05\x12\x5b\x7a\xc4\x0e\x7d\xc7\x97\x50\x46\xa0\xb4\x42\x45\x5e\xb3\x2d\xe8\x60\x55\x18\x45\x47\xd9\x89\xb8\xb8\x9d\x23\x36\xb9\x43\x08\xec\xac\x2c\x82\x52\xd7\xbf\xda\xde\x6f\x1c\xaf\x58\xb3\xa1\x28\x5c\x12\x69\xd6\x8e\x53\x53\x43\xe8\xec\x11\x04\xa1\x46\x10\x6a\x04\xa1\x46\x10\x6a\x04\xa1\xf6\x6b\x16\x04\xa1\x46\x10\x6a\x04\xa1\x46\x10\x6a\x04\xa1\x46\x10\x6a\x04\xa1\x46\x10\xea\xa0\x83\x50\x4f\xd0\x71\x76\x34\x76\xd8\x42\x22\xf7\x54\x6d\xd3\x72\xae\xd9\x6e\x06\x9c\x82\x10\xd9\x08\x91\x8d\x10\xd9\xdb\x28\x44\xf6\x3f\x0d\x99\xf8\x73\xb5\xa8\x5c\xd7\x3f\x15\xaa\x52\x4c\x58\xe8\xc1\x3d\xb1\x5e\x59\x2d\x28\x6a\xa1\xf2\x6c\x51\xde\x90\x8b\x55\x4b\x53\x8d\xbd\x77\x88\xbd\xe3\x16\xda\xe7\x28\x2d\x65\x16\x66\x29\xa7\x7f\x38\xd4\x5c\xae\xbd\x79\xe3\x3e\x73\xfa\x7d\x26\x9d\xf7\x09\x28\xf5\xde\x19\x7e\xc1\x8c\x4b\x5d\x0d\xe9\xb6\x77\x0d\x90\x8c\xcf\x9d\x7b\xfe\xa0\x3f\xd6\x7c\x92\x2d\x79\x85\x58\x6c\x34\x08\xcd\xbd\x0b\x9e\x5d\x42\x4d\x65\x02\x04\x19\x05\x19\x05\x19\x05\x19\x05\x19\x05\x19\x05\x19\x05\x19\x05\x19\x05\x19\x05\x19\x05\x19\x05\x19\x45\x7a\x3e\xb0\x47\xb0\x47\xb0\xc7\x4e\xb1\xc7\xef\x0e\xd1\x49\x33\xb4\x5b\x43\xa1\xa5\x2a\x5b\xf4\xcb\x80\x43\x45\x59\xd5\xd8\xc7\x87\xd8\x4b\xfd\x76\xc4\xa1\xd7\x36\x49\x15\x17\xec\xd2\x26\xad\xd2\x02\x02\x8a\x89\xeb\x6e\x71\x8c\x5c\xef\x08\x80\xe8\x0e\x10\x9b\x61\x78\x57\x9f\xf0\xa7\x8c\x87\xd9\x78\x6d\xd8\x13\xd7\x7e\xa8\x0a\x84\x02\x38\x08\x38\x08\x38\x08\x38\x08\x38\x08\x38\x08\x38\x08\x38\x08\x38\x08\x38\x08\x38\x08\x38\x08\x38\xd8\x61\x38\x08\xe9\x23\xf0\x23\xf0\x23\xf0\x63\x1b\xf1\xe3\x8f\xf4\xd1\x7e\x23\xfc\x68\xb9\x20\xbf\xa6\x22\x97\x78\x6f\xd5\x4a\x1e\xd9\x9f\x87\xd9\x97\xc3\xf4\x8a\xaa\x93\xfc\x83\xc0\xee\xcf\xcb\x95\x94\xf3\x92\xed\x12\x0c\xb6\x3d\x31\x5f\xfd\xb0\x1f\x7b\x5d\x1f\x45\xad\xde\x50\xe5\x7c\x81\xc7\x70\xd1\xfb\xce\xde\x8d\xcf\xfe\x34\xcc\xfe\x28\x4c\xac\xe6\x8c\xe5\x8d\x06\xfd\x10\x15\xfd\xe0\x3c\x7f\x09\x9d\xe0\xd1\x09\x7f\x7e\xd0\x54\x03\x4b\x39\x7d\xfd\x58\x50\x4a\x1e\x5d\xc1\x11\x8d\xa4\x2f\x0c\xae\xcb\x2b\x57\x14\xe5\x5a\xb5\x0c\xd8\x0c\x86\xf0\xe3\x07\xd9\x3f\xf6\xd1\xdd\xae\xa5\xe9\xdd\x96\x74\x09\xc9\xbb\x64\x15\xfd\x84\x28\xba\x4a\xe4\x19\x3f\xc1\x23\xf3\xba\x15\xb8\x94\x6c\x7c\x69\xc0\xb1\x79\x7f\x88\xb2\xa2\x97\x9e\xa6\xa7\x78\x2f\xf1\xe8\x88\xde\x71\x43\x5c\x5b\x74\x23\x99\x68\x5c\x69\x5f\x5e\xfe\xaf\xfc\x51\xf8\x13\xec\x71\x33\x86\x48\x83\x6e\x35\x20\xb9\x4f\x75\x36\x93\x26\xe6\x47\xa8\x41\xd7\x1f\x76\x8f\xdf\xeb\xd3\xfb\xa7\xcc\x30\xbe\x5b\x3f\x00\xd2\xab\x94\xa3\x95\x9a\x60\x51\x6d\x18\x01\x08\x22\x85\xa0\xbe\x2d\x06\xf5\xfd\xab\x50\x67\x6c\xd4\x15\x11\x39\x58\xa2\x65\x3b\x72\xf0\xd6\x58\x43\x9f\x60\xbf\x5b\x68\x2c\xe3\xdf\xda\xd3\xc0\x1a\x0e\x5a\x41\x80\x7d\x0c\xe0\x49\x23\x16\x70\x17\xd8\x3f\x44\x03\x46\x34\x60\x44\x03\x46\x34\x60\x44\x03\x46\x34\x60\x44\x03\x76\x8f\x06\xbc\x85\x13\x8e\xf4\x77\x76\x37\x98\x70\x9c\xf6\x89\x12\xec\x33\x0d\x99\x10\xc1\x82\xb7\x76\x16\x82\x70\xc1\xbd\x36\xf7\x41\xb8\x60\x84\x0b\xde\xe2\x70\xc1\xc0\x7e\xfe\xd1\x84\x2f\xd2\x2c\x3b\x1f\x9b\xb6\xbc\xb7\x71\x67\xd0\x9b\xc6\x77\xaa\x8f\x82\x13\x7c\x4a\xf1\x30\x45\x04\xe5\xce\xca\xaa\xe1\x3e\x92\x2d\xbf\x0f\xfb\x9d\x30\xfb\x54\x98\x76\x3b\x8f\x45\x22\x79\x3e\xed\xd3\x27\x9f\x96\x0f\x4d\x12\x69\x15\xe3\x77\xe5\xe5\xca\xa4\xe3\xe4\xd4\xfc\xec\x79\xfd\x40\x17\x3a\x16\x0a\x74\x49\x8c\xdd\xf3\x34\xcd\xc7\xee\x59\x3a\x4d\x27\x5b\x73\x2c\xf0\x67\xf4\xf5\x28\xbc\x7d\x98\x32\xa2\xad\xd5\x15\x29\x9b\x30\x4f\xa8\x71\x27\x38\x83\x8b\x78\xed\x01\x50\x8a\xb2\xc6\x5e\x18\x62\x7f\xd4\x4f\xf7\xe8\x65\xa5\x9c\x45\x59\xfe\xb8\x72\x93\x7b\x00\x94\x62\x30\x21\x96\x13\x71\x51\xed\x85\xda\x1a\x19\xee\x3e\xc7\x26\x00\xa5\x28\x43\xf3\x7f\x03\x9a\xff\x15\x7f\x8b\x77\x96\x9d\x36\x2c\x9e\xe7\x68\x33\xb7\x02\x28\x45\x99\xea\xa2\x90\x40\xfe\x0f\xf9\x3f\xe4\xff\x90\xff\x43\xfe\x0f\xf9\x3f\xe4\xff\x90\xff\x43\xfe\x0f\xf9\x3f\xe4\xff\x90\xff\x43\xfe\x0f\xf9\x3f\xe4\xff\x90\xff\x43\xfe\x7f\xf3\xc8\xff\xff\x38\x42\xe7\x05\x99\xb4\x35\xfa\x16\x8a\xf4\x80\x90\x85\x52\x5e\x95\x35\xcd\x4a\xf6\x36\xaa\x71\x3f\x31\xfb\xd1\x08\x7b\x7b\x1f\x31\x97\xfd\x01\x0f\x71\x81\xb3\x38\xcd\x6c\x79\xfb\x43\x3f\x2b\xca\x8b\x8f\xe8\x67\x4d\xd7\x6e\x15\xb0\xd9\xa1\x71\x9e\xf0\x4a\x07\x2c\x63\x96\xbc\x33\xf3\xcf\x08\x10\x78\x96\x4e\x73\x10\x78\x8c\x8e\xd0\x21\x4f\x47\x87\x63\x07\x85\xf1\xf0\x09\xa3\xda\xfe\xda\xbc\xbc\x5c\xa1\xab\x4b\xfe\x7c\xef\x10\x4b\x1a\x7c\xcf\xbe\x9b\x01\xf4\x8c\x7b\xd5\x33\xbd\xc8\xb7\x77\xba\xf6\xcc\xa0\xa9\x3f\xf6\xeb\x9c\x51\xe3\xc4\xad\xe9\x9f\xf4\x2c\x9d\xa7\xe9\x1a\x1f\x73\x6b\xfd\x00\xf7\x32\x84\xc4\x2d\x0a\x89\x3f\x10\x0a\xca\x18\xd0\x45\xa1\x15\x9e\xa2\xb4\xad\x15\x6e\xb9\x30\x3f\xc7\x42\x9b\x6c\x8a\x8f\xcc\x38\xfd\xb6\xdd\xae\x26\x67\xac\x4e\x73\xe3\x67\x7b\x84\xcf\xbe\xf3\x96\x07\xca\x9a\x5e\x33\x7d\x50\xd6\x40\x59\xb3\xc5\xca\x1a\x29\xb0\x6f\x4c\xeb\xc9\x79\x85\x80\xa5\x5d\xdf\x8d\xcc\x61\x1a\x67\x63\xb1\x84\xc5\x35\xf6\x3a\x85\x31\xc6\x65\x37\x43\x1e\x28\xf6\xb7\x43\x94\x12\xab\xab\x92\x5c\xb9\xae\xa8\xba\x11\x68\x36\xaf\xb6\xb5\xca\x62\xcf\x0f\xb1\xdf\xe8\xa7\x97\xd9\x45\x2c\x6f\x24\x23\x5a\x73\x12\x0f\xa3\x35\x03\x52\x79\x0c\xf0\x0b\x2e\x59\x15\x59\xaa\xff\x06\x43\xdc\xe1\xfe\xb2\x3d\xe9\xff\x2e\x1d\x61\x87\x8c\x77\xa9\x6e\xb4\x78\xbf\x52\x48\xf7\x02\x49\x07\x24\x1d\x90\x74\x40\xd2\x01\x49\x07\x24\x1d\x90\x74\x40\xd2\x01\x49\x07\x24\x1d\x90\x74\x40\xd2\x01\x49\x07\x24\x1d\x90\x74\x40\xd2\xd1\x6b\x92\x8e\xb7\x8e\xd0\xbc\x80\x8e\x5a\x45\x51\xa5\xbc\x6c\x13\x47\xa9\x58\xbe\xe2\xad\xeb\xc8\xea\x06\x9e\x5f\x91\x95\xca\x52\xb6\x50\x29\x58\x12\x0f\xf6\xf1\x03\xec\x23\x7d\xb4\xc7\x38\xbe\x6c\x16\x15\x79\xd8\x25\x74\xdd\xe4\xe2\xec\xa2\x38\x6f\x52\x94\xf3\x6c\x7c\x54\x3f\xcd\xf8\x71\xc9\xb8\xd6\x46\x87\xf5\x17\x04\xac\xee\xb8\x4a\x8f\x0a\xe0\x77\x81\x66\x38\xf0\x3b\x47\x67\xe8\x94\x27\x53\x37\xdb\xcd\x7c\xca\x44\x7d\x05\x6f\x20\x04\x13\x97\x79\xac\xfa\xe3\xc0\x49\x96\x32\x70\x60\x75\x3f\x1a\x2c\xd0\xa5\x4e\x0e\x2c\x28\x2a\x4e\x91\x9f\xdd\xe5\xd2\x69\x43\xee\x41\xe7\x5c\xfa\x6d\xdc\x38\x73\xcb\xba\x2e\xbd\x40\xf3\x74\xa9\xc6\x05\x7a\x83\x7d\x07\x37\x28\x14\x20\x2d\x2a\x40\x7e\x2b\x14\xbc\x25\x79\x4c\x48\x41\x1e\xa1\x8b\xb6\x14\x64\x2b\xed\x13\x0f\x11\xd7\x9c\x7d\xda\x84\x25\x72\x37\x65\xf1\x8f\xef\x71\xb1\x4f\xf7\x5a\x61\xe0\x5c\x4c\x52\x52\x1c\xdc\x3a\x8b\x84\x80\x6f\x08\xf8\x86\x80\x6f\x08\xf8\x86\x80\x6f\x08\xf8\xd6\x9b\x01\xdf\x3a\xb4\x78\xf1\x0f\x2c\x97\xfe\xf0\x6e\x97\xe9\x43\xd2\x27\xa8\x9b\xcb\xa4\x62\x8c\x2b\x9e\xb6\x64\x4e\x01\x91\x69\xaf\xcd\x64\x20\x32\x85\xc8\x74\x8b\x45\xa6\x5b\x00\xc4\x3a\xf5\xd1\xf0\x0d\xcb\x76\x96\x4e\xb3\x93\xb1\x13\x96\x0b\xe6\x7e\xa7\xfa\xb4\xfe\x1e\x37\x85\x10\xf5\xfd\xb7\xd1\x21\x33\xc9\xb8\x07\xfd\x2d\x2b\x39\x6b\x43\x9f\xbc\x51\x10\xad\xf6\xf7\x14\x73\x26\x17\xbf\x5b\xf8\x27\xa3\xe6\x71\xe1\xb8\x9b\x57\x72\xf1\x07\xc5\x91\xda\x9c\xdf\xf3\x4a\x6e\xda\x38\x37\xe0\x55\x38\x4f\x06\x53\xf3\xd5\x1a\xa7\x31\xcf\x21\x6c\xcc\x3f\x4d\x8d\xb4\x59\xab\xcc\xdf\x85\x68\x52\xbc\x0a\xa7\x68\x82\xbf\x0a\x87\xa9\x85\x72\xe8\x82\xa0\x38\x29\x3a\x6b\x53\x9c\xd6\x4a\x9a\x15\x33\xba\x34\x9d\x73\xcc\xe8\x5a\x2b\xca\xef\x9d\xbc\xdf\xfd\x5d\xd9\xc1\x6e\x29\x2b\x5a\x85\xae\x2e\xfa\xbf\xb3\x63\x2c\x61\xbc\xb3\xa2\x12\xc6\xbb\x6a\x55\xa1\x5e\xfd\x8d\xf9\x41\xe3\xf9\x41\x06\xf4\xd5\x83\xbe\x1e\xa1\x43\x2c\x19\x1b\xb5\x0c\xef\x9d\x4e\xcb\x6d\x8e\xb8\x9b\xc2\x5e\x7f\x75\x1f\x4d\x37\xcc\xca\x36\x9a\x5d\xd7\x2a\xca\x9a\xb9\xde\x76\xda\x85\xea\x4d\xd9\xff\x69\x1f\xfb\x56\x1f\xed\xa9\xcd\xdb\x16\x39\xd2\x70\x4b\xf6\x24\x2f\xdd\xd4\x87\x4e\x59\xa5\xc7\x79\xaa\xaa\x9a\x8c\x6e\x5e\x27\xb7\x65\xa3\xf6\x5b\x42\xa4\x0a\x7b\x7d\x8d\x0a\xdc\x5e\x67\x49\xa2\x65\x2f\xd3\x68\xd7\xf3\xa0\x25\xa0\xb6\x17\x2e\xd5\x8d\xbb\x91\x4c\x78\x3d\x8a\xaf\x25\x2d\xfa\x5b\xca\x59\x76\xde\x98\xc7\x78\xdd\xc4\x29\xeb\x37\x63\xd6\xba\x74\xbf\x6f\xc6\xa9\x77\x92\x4b\x87\x1f\xf7\xdb\xe9\xed\xd9\xe7\x66\x8e\xaa\x2d\xec\xf6\xf4\x3a\x69\xf4\x03\x35\x9f\xfb\xf6\x77\x3b\xd6\xb2\xf0\x14\xb6\xf8\xad\xfa\xe1\xf0\x96\xd8\xa9\xeb\x62\x1a\x5a\xa6\x92\x3d\x0d\xed\x0a\x03\xe9\xe3\x6f\x6c\xce\x7e\x36\x32\x8a\x9b\xb0\xad\xe9\x6f\xee\x76\x31\x90\xa9\xa6\xf7\xa5\x7b\x5a\xca\x71\x91\x0f\x62\x6b\xec\x24\x40\x62\xaf\x19\x5f\x80\x44\x80\xc4\x2d\x06\x89\xdb\x7a\x3a\x1e\xd0\xe7\xc4\x1f\x39\x4e\xd3\x24\x4b\xc5\xce\x5a\x2b\xd0\x87\xaa\x90\xa3\xc7\x3d\x3a\x90\x03\xe2\x0d\xf7\xd0\x71\xb1\xcc\x5c\xe1\x5b\xd1\xbd\xe9\xe0\x55\x65\xa5\x76\x65\xf9\xa9\xbb\xd9\x7f\x0f\xd3\x4e\x7e\xa5\xfe\xfd\x8c\x36\x5c\x51\x66\x94\x95\xf8\xfd\xfa\x19\x69\xfd\x7c\x27\x23\xcc\x28\x2b\x6d\x59\x29\x2e\xd2\x71\x31\x32\x93\x34\xca\x47\xe6\x30\x0d\xd2\xc3\x9e\x0c\x8d\x3f\x87\x3e\xe8\x32\xca\xca\x8d\xaa\x3b\x2f\xf8\x0f\xbf\x87\xd9\x7e\x63\xf8\xf1\x1b\x1b\xe3\x4d\xbf\xb7\x73\x68\x45\xde\xb1\xd3\xd1\xc2\xfb\xfd\x96\x70\x7a\x23\x3f\x68\x9c\xd4\xa9\x76\x4e\x9f\xa4\x13\x74\xac\xe6\xb3\xdf\x6c\x43\xe3\x1b\x8f\x05\x56\x8b\x0b\xac\x1f\x0f\xd1\x69\xb1\xd8\x39\x4a\x87\xed\xc5\x4e\x00\x2f\x79\xeb\x76\xc3\x34\x0f\x81\xbd\xff\x7e\x21\xb6\xbe\x74\x9b\xc3\x3c\x8c\x34\xbd\x80\xd1\xed\xc4\x03\xfc\xdb\xd4\x09\x2b\x81\x85\x49\xaf\x19\x2d\x2c\x4c\xb0\x30\xd9\xe2\x85\x49\x3b\x67\x7f\xc1\x99\x77\xdf\x95\xc3\x18\x25\xd8\x48\x2c\x6e\xad\x1c\x6e\x77\xae\x1c\x32\xca\xca\x4d\xe1\xed\x7a\x6f\x9c\x5e\x69\x78\xbb\xd6\x2b\x8a\x96\x95\x8a\x85\x52\xde\x37\x40\x16\xef\x14\xfd\xed\x2d\x96\x95\x9c\x79\xa1\xac\x5a\x5b\xd6\x3e\x3b\xcc\xde\x79\x0b\xbd\xdc\x51\xa4\xfe\x91\xfc\x8d\x90\xb1\x97\xd0\x11\x2d\xab\x64\x6a\xaa\x95\xd5\xa8\xde\x51\xd1\x0b\x56\xd1\xf3\x4a\x2e\x65\x15\x1d\x48\x14\xad\x11\x7b\xef\x3f\x97\x74\x1b\x3b\xc5\x0b\x15\x79\xcd\x36\x80\x83\x55\x71\x24\x1c\x65\x27\xe2\x87\xf8\xed\x52\xf6\x53\x39\xbf\xde\x1e\x15\x47\x40\xae\xcd\x44\xbf\xbb\x2e\xa2\xdf\x6d\x2a\xd3\x9a\x63\x94\x19\xef\xba\x47\x57\x54\xbd\xff\x08\xcb\x85\xb0\x5c\x08\xcb\x85\xb0\x5c\x08\xcb\x85\xb0\x5c\x08\xcb\x85\xb0\x5c\x08\xcb\x85\xb0\x5c\x08\xcb\x85\xb0\x5c\x08\xcb\xd5\xe1\xb0\x5c\x53\x94\x66\xe7\x62\x67\x2c\x68\xb2\xdf\x89\x59\x3c\x56\x72\x37\x03\x7a\x41\x70\x2f\x04\xf7\x42\x70\xaf\x6d\x14\xdc\xeb\x27\x86\x68\xd4\x3b\xa3\x80\x48\xdb\x26\xa8\xa9\x9d\x3f\xe0\xbf\x0f\xb2\xcf\xf5\x13\xab\xca\x1f\x20\x52\xf1\x6c\x49\x12\x81\x64\x5d\x12\x01\x5e\x19\x47\xfe\x80\x19\x45\x4d\x15\x8b\x16\xd5\x0c\xce\x15\x79\x13\xe1\xcb\x66\xa2\xfe\x5f\x7d\xc6\x1f\x61\x4e\xb0\xe3\x9b\x4f\x3a\x60\xec\xe4\x02\xbd\x04\xbd\x04\xbd\x04\xbd\x04\xbd\x04\xbd\x04\xbd\x04\xbd\x04\xbd\x04\xbd\x04\xbd\x04\xbd\x04\xbd\xec\x2c\xbd\x04\x15\x04\x15\x04\x15\xec\x61\x2a\xf8\xe5\x30\xed\x11\x54\x50\x04\xe1\x19\xdd\x48\x8e\xb2\x17\xc3\xec\x85\x30\xed\x12\xbf\x2c\x6f\x24\x23\x77\xe5\xe5\x4a\xf5\x67\x55\x54\x38\xae\x1f\x10\xa1\x2a\x97\x92\xa9\xf9\x59\x73\x05\x17\xe0\x16\x80\xba\x82\x26\xea\x0a\x9a\x68\xa6\xa0\x4c\x99\x1e\x17\xa8\xed\x12\xcd\x71\xd4\xc6\xe3\x40\xb5\x80\xda\x1c\xcf\x39\x57\xd0\x7c\x79\x1b\x7b\xdb\x32\x9d\xab\x69\x62\x41\x5b\xbd\xc3\x69\xe5\x0a\x9a\xba\xce\xd9\xc7\xca\x7a\x2e\x2f\x57\x34\xf6\x99\xcb\xec\xb7\x06\xe8\xe5\x56\x97\x08\x0a\x9b\x14\x13\x73\xd5\x98\x52\x98\xdf\x1c\x53\x8c\x3a\xaf\xe4\xa6\xac\x92\xd2\xbc\xa4\x78\x42\xbf\xc4\xec\xb2\x9a\x64\xe8\x2e\xe7\x77\x39\x40\x4d\x03\x24\x02\x24\xa6\x01\x12\x01\x12\x01\x12\x01\x12\x7b\x06\x24\xa6\xbb\x06\x24\x06\x5e\x93\x96\x41\x62\x1a\x20\x11\x20\x11\x20\x11\x20\x11\x20\xb1\xf3\x20\x31\xdd\xd3\xdc\x2f\x0d\xee\xd7\x3e\xee\x97\xee\x76\xee\x97\xde\x86\xdc\x2f\xb3\xe6\x1d\xc3\x64\x41\x60\xb2\x8b\x34\xcb\x31\xd9\x24\xa5\xe8\x6c\xb3\xf1\xc3\x5d\x08\xd2\x5c\x41\xab\x98\xd2\xb3\xcb\xfe\xaa\xb2\x93\xec\x84\x5b\x54\x70\x97\x82\xeb\x65\x65\x0d\xa2\x92\x73\x55\x5b\xec\x0f\x77\xd5\x21\xb4\x7d\x46\x60\x7a\xc9\x95\x96\x8d\x89\xa3\x5b\xc0\xcb\x04\xde\x7a\x25\x3d\x4a\x8f\xd4\xc4\x1f\x39\x4d\x27\x6f\xa0\x3b\x10\x82\x04\x71\x93\x5a\x8c\x9b\xf4\x93\x61\xba\x24\x6c\xc3\x79\x9a\xe6\xb6\xe1\x2c\xdd\xd8\x60\xa4\x45\x11\x87\x69\x8e\x32\x76\x1c\xa6\x1b\x2e\xf4\x31\x91\x06\xe1\x11\xba\xe8\x48\x83\x70\xc3\xa5\xfa\xc9\x6a\xb7\xce\xb6\xf1\x8c\x0b\xf1\xef\x8e\xd4\xd9\xb6\x21\x23\x97\x99\x23\x31\x9c\xb2\xea\x6a\xe7\x26\xc4\x99\x55\x76\x6e\xd2\xba\xaa\x93\x16\xaf\x3d\x39\x32\x41\x88\x41\x88\x41\x88\x41\x88\x7b\x87\x10\x63\x9a\xe7\x33\xcd\xeb\x1e\x84\x8e\xfc\xc4\x1d\xc9\x4f\x0c\x4f\x05\x3c\x15\xf0\x54\xc0\x53\x01\x4f\x45\x4f\x7b\x2a\x90\xa6\x1e\x69\xea\x91\xa6\xbe\x5d\x69\xea\xe1\x08\x84\x23\xb0\x57\x1d\x81\x99\x3c\xcd\x09\x3e\x3e\x4d\x93\x9c\x8f\x9f\xa6\x93\x74\xa2\x05\x78\x29\xe2\xe8\x07\x84\x9c\xeb\x50\x72\xb3\x0c\xfa\x6a\xdc\x1d\x39\xef\x65\x77\x08\x6b\x61\x5b\x72\xda\x86\x11\x8c\xd8\x17\x2e\xd3\x8c\x10\xe6\xab\x2b\x52\x36\x61\xb6\x2f\x1f\x1e\x8e\x7c\xa9\x1e\x32\x7d\x55\x29\xca\x2b\xfa\xaa\xb9\x94\xd7\xd8\x7f\xb8\xcc\x7e\x65\x80\xee\xd4\xcb\x49\x39\x8b\x59\xde\x48\x46\x86\x1b\x8b\xf4\x17\x94\xa2\x9c\x16\xe5\xc4\x47\xf4\x53\x17\x6a\x0b\x71\x86\x69\x76\x9c\x0d\x69\x3e\xa4\xf9\x90\xe6\xc3\xf1\x02\xc7\x0b\x1c\x2f\x70\xbc\x74\x8d\xe3\xa5\x7b\xfc\x0a\x00\xde\x00\xde\x00\xde\x00\xde\x00\xde\x3d\x0d\xbc\x41\xe4\x40\xe4\x7a\x94\xc8\x6d\x4b\x69\xfe\x65\x9a\x14\x14\xf1\x14\x4d\x70\x8a\x78\x98\xc6\x69\xcc\x53\xba\xca\xd9\xd5\x46\x32\xe1\x20\x43\xcd\x84\xa5\xb8\x9a\xf3\x87\x87\x29\x76\xd6\x60\x85\x9e\x80\xcc\xc0\x87\x8e\x9b\x57\xa7\xa9\xf3\x53\xe4\xff\xdc\x2e\x0f\x6a\x76\xa7\xa5\xcb\x77\x02\xb2\x84\xf8\xb5\xe3\x88\x4c\x10\xad\x34\x9d\xa3\x33\x35\x6a\xfc\x04\x8d\x6c\xa6\x6b\xa0\xcb\x82\xfc\xbe\x45\xf9\xfd\xd7\x42\x34\x2d\x94\xed\x67\xe8\x94\x43\xd9\x3e\x46\x9b\x1c\x83\xde\x5b\x7f\xce\x0a\xc3\x73\x9c\x8e\x72\xc3\xb3\xf9\x92\xa7\x84\x9e\xff\x34\x9d\xb4\xf5\xfc\x9b\x2e\xc5\xb4\x50\x3e\x8a\xf7\xce\x58\xb0\xf8\xff\x37\xe2\x61\xa1\xa2\xae\xea\x7a\xa7\xb5\x3a\x2e\xce\x70\xb1\x56\x6e\xda\xfa\xf6\xd9\x2d\x68\xea\x81\x76\x81\x76\x81\x76\x81\x76\xa1\xa9\x87\xa6\x1e\x9a\x7a\x68\xea\xe1\x62\x80\x8b\x01\x2e\x06\xb8\x18\xe0\x62\x80\xa6\x1e\x9a\x7a\x68\xea\xa1\xa9\x87\x07\x0f\x1e\xbc\x2e\xf4\xe0\x75\x5c\x53\xdf\x19\xb7\xd8\x4d\xae\xac\xff\xc5\x41\xba\x5f\x1f\xbb\xa3\x1b\xc9\x51\x13\x73\x94\x2a\x1b\x4a\x71\x7d\x4d\xce\x16\xa5\xc2\x9a\xc6\xde\x30\xc8\xfe\xb1\x8f\x76\x64\x15\x55\x5e\xde\x48\x46\x0e\xf9\x44\xb2\xb7\x0a\x59\xe2\x85\x4c\xea\x85\xc4\x47\xf5\x8b\x26\x15\x55\x5e\x4a\xba\x9e\xb0\xdd\xb2\x81\x5e\xa1\x47\xc4\x58\x9f\xa1\x29\x3e\xd6\xcf\xd0\x29\x9a\xf0\x74\x9d\xe8\x6d\xa7\x8f\x6c\xd7\x67\x6f\xca\x07\xec\xe3\x9d\xbd\xfa\x84\xff\xcb\x70\x98\x8d\x1b\x3b\x48\xdc\x6a\x51\x35\xea\x8d\x97\x26\x16\x43\xfe\x4f\xec\x0d\x40\xfe\x4f\x38\x90\xe0\x40\x82\x03\xa9\x97\x1c\x48\xc8\xff\x89\xfc\x9f\x00\xf7\x00\xf7\x00\xf7\x00\xf7\x5d\x01\xee\x91\xff\x13\xf9\x3f\xb7\x0b\xaa\x44\xfe\xcf\x76\xe4\xff\x7c\xf3\x10\x3d\x64\x92\x3a\x7e\xd4\x8b\xd7\x7d\x79\x90\x7d\xbe\xdf\xe6\x75\xaf\x0d\x19\x5f\xb1\x52\xae\xb0\x51\xc8\xad\x4b\x45\xe7\xf3\x49\xd6\x8c\xd1\x95\x0a\x25\x1c\xae\xbd\x09\x6b\x5a\x31\xc8\x4b\x1c\xb4\xd7\xcc\x55\x8b\x20\xa5\x2c\x5b\xc2\x1d\xad\x22\x4b\xb9\x44\xfc\x30\xbf\xa0\x01\xff\x9b\x2b\x68\x95\xed\xc6\x00\xaf\xd1\xbc\x60\x80\xb3\x74\x9e\x33\xc0\x14\x9d\xa5\xd3\x2d\xf0\x6e\x3e\xf0\xa6\xf5\x79\x9f\x2f\x06\xdc\xef\x8e\x01\x77\x33\xe2\x15\xdb\x0c\x0b\xb4\x19\x5f\xb3\x54\x10\x2c\x10\x2c\x10\x2c\x10\x2c\x10\x2c\x10\x2c\x10\x2c\x10\x2c\x10\x2c\x10\x2c\x10\x2c\x10\x2c\x10\x2c\x10\x2c\x10\x2c\x10\x2c\x10\x2c\xb0\x53\x2c\xf0\xed\xcf\xd0\xa8\x88\x87\x2b\x95\xcb\x5a\x83\xd0\xb7\x39\x49\x5e\xd3\x27\x5d\x15\x8d\xfd\xf9\xd3\xec\xbb\x0f\xd3\x0e\xfd\x82\xe5\x8d\x64\x64\xb0\xb1\x8c\x6f\x8a\x5f\xb8\x28\x57\xe2\xf7\xe9\x27\xa6\xca\x65\xcd\x19\xb9\xc3\x3a\xdc\xe5\x90\x0e\xa1\x6d\x81\xac\x10\xda\x16\xc8\x0a\xc8\x0a\xc8\xaa\x87\x90\x55\x17\x6d\xef\xef\x1a\x64\x85\x7d\xe7\x40\x56\x40\x56\x40\x56\x40\x56\x08\x6d\x8b\x8d\xb1\x37\x0f\x61\xea\xfa\x8d\xb1\xdb\x32\xb4\xed\xd3\x94\x12\xe2\xa6\x09\x3a\xce\xc5\x4d\xe3\x34\x46\x09\xcf\x0d\x8e\x52\xb9\xac\xf1\xb8\x83\x26\x17\x0a\x64\x53\xe3\x23\xfe\x42\xa6\x38\x1b\x12\xf2\x25\xeb\xce\x6e\x1b\x19\xf5\xea\x51\xec\xcf\x76\xda\xf8\x8b\x59\x41\x6b\x6d\xd2\xf5\x80\xf8\xad\xfd\xac\x4b\xa0\xa9\x73\x74\x86\x4e\xd5\xc4\xa8\x1d\xa1\x78\xf3\x6d\x8c\x28\x67\x88\x50\xdb\x62\x84\xda\xaf\x84\x44\xe8\xea\x71\x1e\xba\xda\x8e\x50\x9b\xa0\x4d\x8d\x40\xef\xf8\xb4\xa7\x85\xf5\x38\x4a\x87\xb9\xf5\xd8\x6c\xb9\x69\x11\x9d\xf6\x24\x9d\xb0\xa3\xd3\x6e\xb2\x8c\x66\x63\xd3\x36\x67\x64\x9c\x86\xa4\x91\xc1\x89\xff\xf6\x88\x6d\x64\xee\x77\x8d\x3b\x6b\x1b\x9c\x61\x71\x5c\x18\x1c\xb7\x40\xb3\xed\x32\x3d\x08\x33\x0b\xcc\x0a\xcc\x0a\xcc\x0a\xcc\x8a\x30\xb3\x08\x33\x8b\x30\xb3\x08\x33\x0b\xdc\x0f\xdc\x0f\xdc\x0f\xdc\x0f\xdc\x1f\x08\xee\x47\x98\x59\x84\x99\x45\x98\x59\x84\x99\x85\x37\x0d\xde\xb4\x6d\x1e\x66\x36\x58\x3e\x7c\xb3\xc7\x93\x7d\xc3\x20\xdd\x65\x46\xa9\xd0\x6d\x48\x21\x2b\x4b\xd9\xac\xbe\x9c\xd0\xd8\x5f\x0d\xb0\x3f\x71\x04\x92\x1d\x69\xac\x40\x5f\x14\x57\xa7\xc4\xd5\xf1\x21\x3b\x82\x6c\xf5\x91\xed\x16\x36\x42\xa2\x19\x31\x7e\xcf\xd2\x69\x3e\x7e\x8f\xd1\x11\x3a\xe4\x1b\x3a\xb6\xfa\xa1\x03\x71\xaf\xce\xfb\x8f\xec\x83\xec\x40\x6d\x9c\x88\xea\x8a\x20\x40\x04\xd4\xf6\x08\x10\x01\x37\x10\xdc\x40\x70\x03\xf5\xaa\x1b\x08\x01\x22\x10\x20\x02\xf8\x1d\xf8\x1d\xf8\x1d\xf8\xbd\x2b\xf0\x3b\x02\x44\x20\x40\xc4\x76\x01\x8e\x08\x10\xd1\x8e\x00\x11\xff\x32\x40\x91\xea\x00\x11\x5a\x45\xaa\xc8\xab\xeb\x45\x1e\x0b\xe2\x4b\x03\xec\xb3\x7d\xb6\x4e\x75\xd8\x87\xc4\x19\x97\x2e\xca\x95\xf8\xc3\x76\x34\x08\xc7\xcf\xdb\x8d\xc1\x5d\x16\xea\xe7\x31\xae\x7e\x0e\x3f\x7a\x91\x1d\xa6\x71\x1a\xf3\xd5\x16\x3b\x9e\xb8\x29\x00\xf7\xa8\x3f\x60\x1b\x61\xf1\x7a\x74\xec\xb8\x4f\x35\x3c\xf6\x21\x7a\xe0\x6f\xe0\x6f\xe0\x6f\xe0\x6f\xe0\x6f\xe0\x6f\xe0\x6f\xe0\x6f\xe0\x6f\xe0\x6f\xe0\x6f\xe0\x6f\xe0\x6f\xe0\x6f\xe0\x6f\xe0\x6f\xe0\x6f\x9d\xe2\x6f\xff\x6d\x88\x0e\x0b\xfe\xb6\xc2\x53\x35\x59\x39\x9b\x3c\xe2\xb4\x66\x55\xa5\x74\x55\x59\xd1\xd8\xdb\x86\xd8\x7b\xfb\x69\x27\xbf\x6a\x79\x23\x19\xd1\x9a\x4b\xde\x34\xa9\x2a\xa5\x8c\xb2\x12\x50\xba\xa6\x07\xf9\x05\x69\xfd\x1f\x67\x20\x0c\xe3\x26\x73\x05\xad\xdb\xc3\xbe\x76\x6f\x6e\xa6\x39\x7f\x24\x38\xcc\x06\x0d\x24\xc8\x47\x81\xc1\x04\x8d\xc6\x87\xde\x0e\xbc\x0f\xbc\x0f\xbc\x0f\xbc\x0f\xbc\x0f\xbc\x0f\xbc\x0f\xbc\x0f\xbc\x0f\xbc\x0f\xbc\x0f\xbc\x6f\x2b\x79\xdf\xf6\xdb\xa8\x07\xa2\x08\xa2\x08\xa2\xb8\x8d\x88\xe2\xff\x18\xa2\x84\xb9\xb1\xd6\x03\x22\x1a\xfb\x6d\x8d\x1f\x9f\x63\xbf\x3e\xc4\xfe\x30\x6c\xef\xb7\x8d\xa8\xb2\x94\xab\x59\xd7\x1a\x9b\x39\xe3\xf7\xea\xc7\xc4\xee\x5a\x9b\xf7\x19\x07\x83\x8d\x3d\x99\x59\xa2\x93\x02\xcd\x1d\xa6\x71\x8e\xe6\x46\x28\x4e\x43\xcd\xee\x7f\xf5\xa5\x70\xf7\xb9\x53\xb8\x5b\x59\x7f\x5e\xae\xd0\xd5\x59\x7f\xfe\x36\xc0\x1e\xf2\xd8\xf3\x5a\x05\xdf\x22\xef\xd8\x69\xb7\xed\x7d\xaa\x5c\x2e\x4a\x59\xd9\xa3\x79\xef\x37\x0e\x77\xa4\x85\xd3\x67\xe8\x14\x4d\xd4\x04\x16\xde\x44\x13\x23\xaa\x1d\xc2\x0a\xb7\x18\x56\xf8\xa7\x42\x37\xf6\x72\x9f\x13\x61\x7f\x4f\xd0\x31\x3b\xec\x6f\xb0\xe6\x21\xb8\xf7\xbf\x81\xa5\x29\xaf\x57\x28\xfe\x9d\xdb\x6d\xf3\xb0\xc7\x08\x24\x23\x59\x16\xe1\x3e\xf1\x4b\x67\x0c\x42\x7b\xc2\xfd\xc2\x4c\xf8\x98\x09\x84\x9c\xec\x48\xc8\x49\xc4\x1a\x43\xac\x31\xc4\x1a\x6b\x57\xac\xb1\xcc\xc7\x42\x01\x07\x5c\x5a\x10\x89\x07\x2e\xd2\xac\x23\xf1\x40\x9b\x83\x38\x45\xdd\xbf\xd5\xbb\xd8\x0e\xd1\x4c\x41\x2e\x0c\xd2\x5f\xbc\xcd\xfe\xf2\x0f\x94\x25\xb5\x52\xe0\xce\x3f\xb1\x1e\xf4\x58\x21\xec\x2b\xeb\x2b\xbe\xb6\x4f\x07\xee\xad\x2d\xe8\x20\xbf\xef\x01\xfd\xcf\x89\x7d\xce\x83\x6b\xb2\x9a\x97\x9d\x47\x07\x9c\x47\xb5\x8a\x2a\x55\xe4\x7c\x21\x7b\xb0\xee\xbc\xaa\x52\xf4\xbf\x9f\x35\x8e\xea\xb5\x4c\x5f\xa2\x39\xca\xd4\xac\x4d\x26\xe8\x78\x0b\x3d\x3f\xcf\x3d\xe2\x98\x84\xf8\x4c\x42\x3e\xd8\x47\xcf\xf7\xb1\xf7\xf5\x45\xde\x63\x59\xf2\xd7\xf7\xf5\xce\x5a\xa5\xc6\x89\xa0\xb7\x33\x77\x8a\x73\x47\x97\x3e\x38\x6d\x69\xcc\x90\xc7\xc0\x1d\xe6\x1f\x24\xa1\xa1\x90\x8a\xfc\x4a\x7d\xe6\x25\xae\xe6\x67\xf0\x59\x90\x16\x1d\xca\x68\x4a\x69\x5e\x68\x44\x1e\xd1\x5f\x0b\xe3\xef\x45\xf3\x65\xb1\x7f\x1c\xf6\x5e\x44\xa5\x5f\x0a\xd1\x8b\x21\xf6\x42\x28\xf2\x09\x8b\x4e\xbd\x37\x34\xa3\xa8\x59\x3e\x41\xcb\x2b\xbc\xd9\x95\x68\x6c\x55\xff\x29\x16\x4d\x55\x3d\x05\xe7\x8e\x62\x2e\xb5\xae\xd9\xde\xf0\x83\x52\x96\x3f\x38\xd7\x18\x14\x0b\x59\xe3\x5b\x29\x17\x73\x5a\x54\xb9\x6e\xb4\xa9\xf0\xc1\x97\x65\xa5\x5c\x94\x13\x51\x71\x47\x2e\xea\x31\xfb\x92\xf3\x3f\xd7\x06\xb0\x6e\x1f\xbb\x85\x57\xab\x4a\xa0\xd2\x66\xe2\xf3\x80\xbb\x6d\xdf\xc9\x6e\xe5\x75\x6b\xd6\xb4\x7b\x1b\x74\xdb\xe8\x67\x0e\xd3\x38\x1b\x8b\x25\x2c\xd0\xbf\x97\xbf\x37\xc6\x4b\x6c\x5c\x1b\xeb\xd7\x7f\x74\xc2\xfb\xed\xe7\x1e\x60\x5f\x19\xa2\x31\x21\x60\x2c\x29\x39\x99\xf7\x4d\x41\xb1\x65\x8c\xea\x7a\xa9\x52\x58\x93\xb3\x45\x49\xd3\x6c\xe0\xf8\xfc\x10\xfb\x8b\x7e\xda\xa1\x5f\xa1\x7f\xfb\x7e\x25\x64\x00\x5e\x87\x62\xb1\x64\x2e\x06\xcc\xcd\xc5\x0b\xa2\xa4\x49\xbd\xa4\x40\xe4\x8b\x23\xb6\x17\x96\x2f\x40\x0c\x9f\x5d\xa1\x22\xaf\xd9\x56\x6d\xb0\xca\xa3\xef\x28\x3b\x11\xbf\x8b\xdf\xee\x92\x92\x93\x97\x92\xce\xca\x41\xf2\x58\xff\xea\x3d\xe1\xff\x66\x1d\x66\xe3\xc6\xfb\xe3\x18\x48\xc6\xec\xc9\xd9\xbc\xd5\x6c\xc5\xfb\x9d\xe6\x4f\x0c\xe5\x23\x94\x8f\x50\x3e\x42\xf9\x08\xe5\x23\x94\x8f\x50\x3e\x42\xf9\x08\xe5\x23\x94\x8f\x50\x3e\x42\xf9\x08\xe5\x63\xa7\x95\x8f\x27\xe8\x18\x3b\x12\x3b\x64\xa1\x8d\xbb\x9d\x40\xc4\xb9\xbe\xab\xa7\x22\x90\x34\x42\xd2\x08\x49\x63\x0f\x4b\x1a\xdf\x32\x4c\x27\x0d\xc6\x28\x57\xae\x2b\xea\x35\x7d\xa2\x67\x91\xc6\x15\xb9\x22\x99\xb8\xb1\x50\xca\xab\xb2\xa6\xd5\xe0\xc6\xdf\x1b\x62\x3f\x7c\x0b\x31\xfb\xe2\x65\xe3\xaa\xe6\xc8\xe3\xac\x28\xb4\x7b\xc8\x63\x4c\x90\x47\xeb\x71\x96\xc4\xd3\x38\xeb\x09\x08\xb9\x19\xfe\x2f\x58\xe1\xd5\x15\x7f\x4a\x79\x96\x9d\x76\xf0\x47\xde\xec\x26\xf6\xaf\x1b\x9b\x06\xbc\x74\x76\x0b\x78\x24\x78\x24\x78\x24\x78\x24\x78\x24\x78\x24\x78\x24\x78\x24\x78\x24\x78\x24\x78\x24\x78\x24\x78\x64\x57\xf1\x48\xe7\x92\x0d\x3c\x12\x3c\x12\x3c\x12\x3c\xd2\xc1\x23\xbf\x31\x48\x43\x82\x47\x6a\x15\x45\x95\xf2\xf5\xb2\xc7\xac\x56\xc8\xa9\x05\xbd\x1b\xd9\x7f\x19\x64\x1f\xee\x27\x32\xce\x5c\xde\x48\x46\xd6\x9b\x0c\xd5\xb8\x38\x3b\xc5\xcb\x08\x28\x58\xe3\xbd\xfc\x82\x45\x51\x8f\xa5\xa4\x55\x3c\xc2\x34\x06\xa0\x59\xac\x1e\x08\x66\x28\x46\xb3\x89\xab\x35\x8b\xcd\xc4\x7f\x04\x27\x04\x27\x04\x27\x04\x27\x04\x27\x04\x27\x04\x27\x04\x27\x04\x27\x04\x27\x04\x27\x04\x27\x04\x27\x44\x86\x16\xc0\x3e\xc0\x3e\xc0\xbe\x4e\xc1\xbe\x9f\xb4\xc4\x87\x75\xb0\xcf\xa9\x3c\xdc\x50\x8a\xeb\x6b\xb2\x54\xa9\x48\xd9\x2b\xfa\xe7\xd7\x12\x1f\x7e\x7e\x88\xbd\xf9\x16\xba\xdd\xe6\x7f\x42\x79\xf8\x6b\xcd\x28\x0f\x97\x78\xa1\x29\xab\xd0\xae\x50\x1f\xee\xaf\xe6\x88\xfc\x71\x6a\x2b\x0a\x9e\xd8\x82\xfc\x30\xeb\x0f\x1c\xcf\xb1\x33\x02\x2d\xd6\x36\x38\x79\xa9\x12\x6b\xc0\x24\xb8\x22\xb8\x22\xb8\x22\xb8\x22\xb8\x22\xb8\x22\xb8\x22\xb8\x22\xb8\x22\xb8\x22\xb8\x22\xb8\x22\xb8\x62\x87\xb9\xe2\x69\x3a\xc9\x4e\xc4\x8e\x59\xfa\xc3\x7d\x4e\xfd\x61\xed\xea\x0e\x1a\x44\x60\x49\x60\x49\x60\x49\x07\x96\x7c\xfd\x30\x5d\x12\x58\x52\xca\xe9\x33\xe1\x82\x52\x52\xe5\x7c\x81\xc7\xdb\xd5\xaf\x71\x85\x94\x6b\xeb\x15\x49\x9f\xeb\x5c\x97\x57\xae\x28\xca\xb5\xaa\xd5\xa3\xc6\x3e\x34\xc4\xde\x7d\x0b\xdd\xe7\x5a\x9e\xc5\x2d\xdf\x14\x6a\x4e\xbd\xf8\x88\x71\xab\x27\xc4\xad\x26\x9d\xb7\x0a\x48\xd0\x98\xe2\x17\xa4\xdc\xaa\x6b\x60\xc9\x46\x95\xd8\x1e\xb2\x47\x2f\xa8\x18\x3c\xbf\xdc\x54\x76\xea\xe7\xfc\x51\xe5\x53\xec\x49\x81\x2a\x1b\x75\x82\x27\xb6\x6c\x34\xa8\x01\x31\x01\x31\x01\x31\x01\x31\x01\x31\x01\x31\x01\x31\x01\x31\x01\x31\x01\x31\x01\x31\x01\x31\x01\x31\x21\x8e\x04\x85\x04\x85\x04\x85\xec\x18\x85\xfc\xf8\x08\x4d\x0a\x0a\x99\x95\x55\xa3\x14\x59\xab\x85\x8f\xce\x63\x85\x7c\x89\x07\x69\x14\xc6\xda\x14\x49\xfe\xcf\x03\xec\xf3\x7d\x74\xa7\xf3\x44\x8b\x38\x8e\xb8\xa4\xa3\x9e\xb4\x4f\x5c\x14\x25\x2e\x88\x12\xe3\x63\x3c\x41\xb5\xa3\x1c\x03\x05\x7a\x5e\x11\x70\xd6\xea\x75\x7a\x4a\x90\xb9\x45\x7a\x25\x27\x73\x17\x69\x96\xce\x7b\xe7\x30\x72\x36\x9b\xf1\xc4\x09\xcf\xba\xde\x68\x52\xeb\x1f\xf0\xc7\x76\x97\xd8\x9c\x81\xe0\x5c\x7a\xd4\xdc\xd7\xec\x59\xbf\x3a\x9c\x17\xf9\xfd\x5d\x1e\xdd\x3a\xea\x9e\x09\xdb\xbb\x67\x0f\x99\xb9\xb1\xb7\xac\x73\xd3\xcf\xd0\xf7\xd3\xab\x6a\x92\xd2\x05\xd7\xbb\xc8\x51\x87\x7c\xda\x2d\xe6\xd3\xfe\x83\x50\x5b\xcd\xce\xb2\x48\xb7\xfd\x24\x2d\xd9\xe9\xb6\xbb\xc4\xae\x95\xd7\xb7\xc4\xae\xc5\x3f\xb7\xc7\xc3\xae\xc5\xac\x14\xde\xde\xa6\x6c\xdc\x48\xea\xbd\x75\x96\x0c\x99\xbe\x91\xe9\x1b\x99\xbe\x91\xe9\x1b\x99\xbe\x91\xe9\x1b\x99\xbe\xdd\x33\x7d\x77\x7e\x56\x91\xfe\xdc\x6e\x8f\x59\xc5\x71\x9f\xf4\xe0\xde\x73\x8d\xa4\x48\x18\xbe\x25\x53\x0d\x64\x11\xef\xb5\x09\x0e\xb2\x88\x23\x8b\xf8\x16\x67\x11\xdf\x5a\x02\xd7\xf9\x8f\x86\x6f\x5e\xf3\xcc\x0c\x4d\xb1\x74\xec\x9c\xa5\x35\x7f\xd8\xa9\x35\xf7\xbc\x53\xfb\x45\xe7\xec\x67\xfa\x68\x58\xe0\x63\xae\x65\x2b\x49\xc5\x84\x25\x0c\xb3\x21\xb2\x54\x2c\x5f\x91\x92\xa3\xec\x9b\x61\xf6\x8d\x30\x45\xcc\x53\x53\xe6\x99\xcb\xe6\x29\x91\xbb\xf2\x72\xa5\xda\x7f\x2b\xc8\x78\x7c\x28\x2f\x57\x66\x6b\xaf\x5b\x32\x2e\x4b\xcd\xcf\x9a\xda\xa1\xe0\xf2\xe6\x4c\xd4\x15\x34\x51\x57\xd0\x44\x33\x05\x65\xca\xde\x22\xd0\xc7\xc5\x40\xd7\xbf\x72\xfa\x40\x9f\xa1\x29\x4a\xb7\xf0\x6d\x73\x34\xc0\x5c\x41\x33\x95\xa0\xec\x85\x61\x4a\x89\xde\x11\xba\xc9\xba\x28\xa7\x56\x86\x79\x83\xe3\xf3\xbf\x9f\x33\xce\x36\xd1\xfe\xeb\x86\xd9\x97\xfb\x69\x97\xf8\x71\x79\x23\x19\x79\xbe\x99\xc8\x07\x5c\x92\xda\x15\xe1\x0e\xf6\x5d\xb7\x24\xb2\xda\x52\xf2\x92\xf9\x98\x39\xfe\x4b\xf7\x0b\x88\xbb\x30\xce\xc1\x82\xbf\x89\x1c\x65\x07\x0d\x13\x59\x35\xf4\x0c\xe3\x28\xea\xe1\x8c\xa9\x0a\x45\x30\x14\xc1\x50\x04\x43\x11\x0c\x45\x30\x14\xc1\x50\x04\x43\x11\x0c\x45\x30\x14\xc1\x50\x04\x43\x11\x0c\x45\x70\x87\x15\xc1\xe3\x34\xc6\x12\xb1\x11\x0b\x35\xdd\xe1\x44\x4d\x7c\xdd\x56\x8f\x95\x5e\x4d\x97\xd9\xd3\xb1\xa7\xac\x6b\x26\x8c\xda\x0a\x48\xac\x4f\x8a\xd6\x2b\x57\xa2\x5a\x56\x29\xcb\x23\x51\x6d\x3d\x7b\x45\xef\x31\x3e\xeb\x95\xa5\x35\xe1\xb6\x2b\xab\x0a\x6f\x9d\xd8\x2e\x8b\x43\x20\x5a\x02\x74\xca\xd0\x29\x43\xa7\xcc\x75\xca\xdf\x1d\x12\x41\x5c\x7d\xd9\xa5\xe9\x92\x2b\x55\x44\x40\xd7\x6c\x51\x2a\xac\x69\xec\xe3\x43\xec\xa5\x7e\xda\x91\x55\x54\x9e\xc1\xe9\xb5\x4d\x06\x41\x98\xb7\x4a\x13\x11\x5d\x26\xf5\xd2\x02\x8a\x7e\x90\xe0\x17\x4c\x2a\xaa\xec\xa4\x92\xae\x77\xdc\x1e\xa1\x0e\x3a\x4f\x2a\x9b\x0a\x75\xb0\xa9\x34\x50\xb1\x98\x81\x28\x5d\xfb\x01\xc8\x12\xc8\x12\xc8\x12\xc8\x12\xc8\x12\xc8\x12\xc8\x12\xc8\x12\xc8\x12\xc8\x12\xc8\x12\xc8\x12\xc8\x72\x2b\x91\x25\xf0\x23\xf0\x23\xf0\x23\xf0\x63\x1b\xf1\xe3\x77\x86\xe8\x8c\x11\xac\xb5\x5c\xd6\x7c\x21\xa4\xfe\x3d\x50\x15\xdd\x1a\xeb\x8b\x13\xde\xb1\xec\xa3\x43\xec\x93\xfd\xb4\x43\xbf\x7e\x79\x23\x19\xf9\xa1\x26\x73\xc8\x5b\x25\x2d\x18\x25\x05\x44\x1f\x0f\x88\xd8\xab\xe5\x72\x95\x26\xb2\xfe\x76\x40\x8f\x37\x80\x1e\x97\xfc\xd1\xe3\x21\x96\x34\x23\xa6\x96\xcb\x9a\x29\x1e\xaf\xeb\x06\x90\x47\x90\x47\x90\x47\x90\x47\x90\x47\x90\x47\x90\x47\x90\x47\x90\x47\x90\x47\x90\x47\x90\x47\x90\x47\x90\x47\x90\x47\x90\x47\x90\xc7\x9b\x94\x3c\x7e\x2d\x4c\x77\x79\xec\xe1\x66\x2f\x86\xd9\x0b\x61\xe7\xce\x6c\xcf\xed\xf3\xfa\x01\x73\x07\x74\xd7\xef\x96\x6f\xcf\xa6\x78\x3f\xa2\xc7\xde\xb4\x4c\xc7\x9b\x8e\x65\x60\x64\x65\x37\x5f\x1e\xf6\xe2\x65\xf6\x47\x03\x0d\x43\x1b\x8c\x88\x55\x80\x6a\xcc\x5f\xcc\x0f\x9c\xb9\x5f\xde\x4c\xc7\x2f\x0a\x8c\x1f\xd0\xcf\xf6\x0c\x78\x50\x7d\x72\x97\xe3\xd9\x34\x68\x25\x68\x65\x1a\xb4\x12\xb4\x12\xb4\x12\xb4\xb2\x67\x68\x65\xba\x6b\x68\x65\xe0\x35\x69\x99\x56\xa6\x41\x2b\x41\x2b\x41\x2b\x41\x2b\x41\x2b\x3b\x4f\x2b\xd3\x3d\x8d\xfe\xd2\x40\x7f\xed\x43\x7f\xe9\x6e\x47\x7f\xe9\x6d\x88\xfe\x32\x15\x7a\x95\x20\x61\x0b\x34\xcf\x49\x58\x86\x2e\xd0\x8c\x67\x1c\x54\x6b\x91\x6e\xe1\x2b\x93\x3d\x25\xaa\x79\x51\x33\x34\xec\xea\xfd\xee\xfa\xb6\x1d\xec\x16\x21\x6d\x5b\xf3\x97\xb6\x65\xd8\x05\x43\xda\xe6\x09\xd4\x0c\xbd\x5b\x75\xfd\x9c\x5a\x37\xf1\x00\x14\x7b\x13\x35\x8e\x1b\x2a\x3e\x5e\x51\xa9\x96\xa3\x1d\x14\x07\x3a\x4d\xd2\x04\xf8\x7a\x92\x96\xe8\xb1\x9a\xe0\xd5\x0d\x58\x66\xf3\x3d\x88\x30\xd6\x48\x34\xd4\x62\xa2\xa1\xf7\x85\xe9\xfb\x45\xb0\xfe\xc7\x68\xc1\x11\xac\xbf\x21\x65\x6f\x7e\x64\x06\x13\xea\x76\x13\xf7\x7b\x4a\x64\x36\x5a\xa4\x57\xda\x99\x8d\x02\x2a\xdb\xdf\x14\x96\x95\xce\x9b\xc2\xf8\x8f\x1e\x6c\x68\x0a\xf7\x1b\x49\x27\x1c\x19\x3c\x94\xd5\x5a\xb3\x78\x4c\x9c\xe4\x69\x16\x27\xad\x8b\xdb\x6a\x20\xdb\x93\xc4\x08\xa8\x19\xa8\x19\xa8\x19\xa8\xb9\x77\x50\x33\xa6\x83\x3e\xd3\xc1\xee\x61\xf1\x48\x20\xd7\x91\x04\x72\x70\x79\xc0\xe5\x01\x97\x07\x5c\x1e\x70\x79\xf4\xb4\xcb\x03\x79\x44\x91\x47\x14\x79\x44\xdb\x95\x47\x14\x1e\x45\x78\x14\x7b\xd5\xa3\x98\xc9\x07\x9c\x42\xd7\xcf\x21\x17\x77\xa7\xd0\x7b\xd9\x1d\xe2\x6d\xb6\x2d\x6d\xa7\x89\x74\xf0\x69\x05\xdf\x39\x44\x47\x84\x14\xdf\xd0\xd9\xd7\xe9\xef\x45\xf8\x15\x11\xe2\x59\xaa\x54\xa4\xec\x15\x7d\xd6\xac\xb1\xaf\x0e\xb2\x2f\xf6\xd3\x1e\xe3\x32\x9b\x8a\xff\xeb\xe6\xc2\xad\x88\x58\xbf\x29\xab\xc0\x80\x82\xad\x0c\xf1\x0b\xcc\x86\x34\xea\x54\x7b\x2f\x44\x5a\x71\x1f\xf8\x39\xff\xc1\x9c\x62\x67\x8d\xc1\x5c\x3d\x5e\x8c\x11\x5c\xdb\xd2\x2e\x63\xb8\xa9\x78\x2e\x88\xbb\x82\x9d\x0c\x88\xbb\x02\xf7\x12\xdc\x4b\x70\x2f\xf5\x90\x7b\x09\x71\x57\x10\x77\x05\x58\x1f\x58\x1f\x58\x1f\x58\xbf\x2b\xb0\x3e\xa2\xa2\x20\x2a\xca\x76\x01\x99\x88\x8a\xd2\x8e\xa8\x28\x3f\x3a\x4c\xa3\x66\x3a\x38\x8f\x18\xcc\x72\x29\x57\x56\x0a\xa5\x8a\xf1\xeb\x73\xec\x8f\x87\xd8\x57\xc2\x76\x0a\xb8\x7d\xaa\x2c\xe5\x6a\x96\x9d\xd3\xe6\x35\xf1\xfb\xf4\xa3\xb5\xb9\xd9\xac\xc3\xc1\xca\x60\x33\x4f\xd2\x69\x41\xd5\x8e\xd2\x61\x4e\xd5\x12\x34\x42\x71\x4f\x01\xb3\xfe\x04\x89\x8d\x64\xc2\xaa\x8e\x2f\x42\xbb\xcf\x1d\x6e\xdd\xca\xfa\xf3\x72\x85\xae\x5e\xf4\x27\x6c\x43\x6c\xa0\x36\x43\x9a\x7d\x7b\x67\x6c\xe2\xc8\x7b\x77\xda\x6d\xfc\x80\x2a\x97\x8b\x52\x56\xf6\x6c\xe6\xa8\x71\x42\x87\x5a\x3a\x7d\x8e\xce\xd0\xa9\x9a\x1d\x19\x9b\x6a\x6a\x48\xed\xb0\xf3\xa2\xc5\x9d\x17\xef\x08\xdd\xe8\x6b\x9e\x16\x7b\x1d\x4e\xd2\x09\x7b\xaf\x43\xe7\x4c\x45\x79\xbd\x69\x53\xd1\xc8\x40\xd8\x66\x24\xfe\xbf\x6e\xb7\x4d\xc5\x1e\xc3\xc7\x6d\xdb\x86\x07\xc4\x2f\x9d\x32\x0d\xed\xd9\x8b\x00\x73\xe1\x63\x2e\xa0\x87\xed\x88\x1e\x16\x42\x28\x08\xa1\x20\x84\x6a\x97\x10\x2a\xf3\xb1\x50\xc0\x6a\x90\x05\xb1\x47\xf3\x22\xcd\x3a\xf6\x68\xb6\x59\x61\xd2\xdc\xb7\xdd\xfd\x5b\x5e\xfb\xc5\xbf\x1a\x75\x9f\x47\xec\x62\x3b\x44\x9b\x53\xfa\xcb\xb7\xd9\x5f\xff\xa1\xb2\xa4\x56\x0a\xdc\x67\x27\x16\x8a\x9e\x2b\x86\xfb\xcb\x6e\x59\xb3\xdb\x30\x29\xb8\xb7\xb6\xa0\x83\xfc\xce\x07\x78\x6c\xcb\x7d\xce\x83\x6b\xb2\x9a\x97\x9d\x47\x07\x9c\x47\xb5\x8a\x2a\x55\xe4\x7c\x21\x7b\xb0\xee\xbc\xaa\x52\xf4\xbf\x9f\x35\x8e\xea\xb5\x4c\x5f\xa2\x39\xca\xd4\xac\x55\x26\xe8\x78\x0b\xfd\x3f\xcf\x9d\xd9\x98\x8a\xf8\x4c\x45\x3e\xd8\x47\xcf\xf7\xb1\xf7\xf5\x45\xde\x63\xd9\xf3\xd7\xf7\xf5\xce\xca\xa5\x86\xff\xeb\xed\xcc\xfd\xd9\xdc\x47\xa5\x0f\x4e\x5b\xd5\x32\xe4\x31\x70\x87\xf9\x67\x49\xc8\x1f\xa4\x22\xbf\x52\x9f\x7f\x89\xab\xf9\x19\x7c\x2e\xa4\x45\x87\x32\x9a\x52\x9a\x17\xf2\x8e\x47\xf4\xd7\xc2\xf8\x7b\xd1\x7c\x59\xec\x1f\x87\xbd\x97\x54\xe9\x97\x42\xf4\x62\x88\xbd\x10\x8a\x7c\xc2\x42\x57\xef\x0d\xcd\x28\x6a\x96\x4f\xd3\xf2\x0a\x6f\x76\x25\x1a\x5b\xd5\x7f\x8a\x45\x53\x55\x4f\xc1\xa1\xa4\x98\x51\xad\x6b\xb6\x23\xfb\xa0\x94\xe5\x0f\xce\xe5\x01\xc5\x42\xd6\xf8\x62\xca\xc5\x9c\x16\x55\xae\x1b\x6d\x2a\xdc\xe7\x65\x59\x29\x17\xe5\x44\x54\xdc\x91\xeb\x71\xcc\xbe\xe4\x70\xd0\xb5\x01\xac\xdb\xc7\x6e\xe1\xd5\xaa\xd2\x96\x3c\xe9\xbd\x7f\xfe\xc6\xd6\x8e\xa6\x8d\x7f\xc0\xdd\x2c\xef\x64\xb7\xf2\xda\x05\xcb\x82\x32\x47\xe9\x30\x1b\x8f\x8d\x59\xf1\xd1\x5f\xc1\xdf\x1d\xe3\x45\xb6\xae\x89\xf5\xeb\x3f\x3b\xa3\x9e\x6f\xbf\xb8\xea\xec\xf3\x11\x91\x21\xae\x01\x91\x2c\x2b\x39\x13\x46\x8e\xca\xe5\x2b\xf2\x9a\xac\x4a\x45\xe3\x4d\x96\x55\x8d\xbd\x35\xc2\x7e\xa2\xcf\xfe\x26\x1e\xe4\x80\xd2\xe5\x44\xb3\x01\xed\xcf\xe3\xbc\x92\x8b\xc7\xdd\x88\xe5\xbc\x92\x9b\xae\x2f\x20\x60\x7c\xb9\xe2\x3d\x68\xcf\x8b\x41\x7b\x8e\xce\xf0\x41\x7b\x9c\x8e\xd2\x61\xff\x41\x6b\xd6\x78\xd2\xaa\x71\x93\x20\xf3\x71\xff\xc1\x3b\xce\xc6\xea\x06\x6f\xfd\xfd\xaa\x91\xe6\xb7\x1c\x48\x73\xcc\x44\x9a\x4d\x77\xcc\x41\x0f\xc6\xd9\x89\xbe\x49\xf3\x90\x41\x35\x93\x88\x16\xfb\x00\x13\x08\xa0\xcf\x16\xd1\xe7\x87\x8c\xe5\x51\x92\x2f\x8f\x2c\x76\xd9\xb2\x39\xe8\x9c\xc1\x69\xce\xa2\x34\x67\x47\x6c\xbb\xe3\x43\x59\xd3\x3f\xbe\xdb\x36\x38\x27\xea\x96\x46\x4d\x5b\x9e\x03\xae\x6b\xa5\x76\xdb\x1d\x2c\x9c\x7a\xcd\xee\x61\xe1\x84\x85\xd3\x16\x2f\x9c\x56\x02\xb3\xfc\xbe\x98\xcc\x77\x09\xd5\x9e\x59\x68\xe6\x1c\x9d\x61\xa7\x62\x13\xd6\xa2\xe8\x81\xaa\xc5\x54\xfd\xd5\x37\xc5\xb2\xea\x3f\xdf\x43\x83\xe6\xb2\xca\xb4\x9c\xa5\x8a\xd8\xf7\x65\x2d\xa6\x34\xce\x37\xd9\x3f\xdc\xcd\x5e\x5f\xb7\x7e\x12\xc7\x5c\xbe\x8f\x56\x61\x62\x77\x50\x3c\x6a\xaf\x9f\x6a\x8f\x09\x7e\x1a\xf0\xaa\x69\x99\xa6\xc4\x88\x3d\x4d\x27\xf9\x88\x3d\x42\x87\x28\xe9\x3b\x62\x6b\xeb\x76\xa3\xda\x8f\x05\xff\xc1\x3a\xca\x0e\x8a\x21\x5a\x77\x6f\xf7\xd9\x4d\xe4\x8b\x6e\xeb\xa5\xa6\x3b\x62\x7f\xd5\x7a\xa9\x13\x7d\x91\x3e\x4f\xd3\x34\x59\x33\x63\x68\xa5\x33\x30\x55\xc0\x12\xa9\xc5\x25\xd2\x2f\x85\x02\xb2\x07\xb3\x62\xa1\x95\xa6\x73\xf6\x42\xab\xe3\xa6\x85\x6b\x45\x9a\x33\x2d\xb5\xdf\xc1\x86\x46\x26\xfd\xba\x86\x2b\xa3\xa6\x6d\xcc\x83\x8e\x95\x51\xbb\x2d\x0c\xd6\x43\xbd\x66\xe4\xb0\x1e\xc2\x7a\x68\x8b\xd7\x43\x9d\x9a\x5d\xfa\x2e\x86\xda\xf0\x11\xc8\x9c\xa6\x93\xec\x44\xec\x98\xb5\x8e\xd9\xe7\x5c\x09\xd5\x5e\x5a\xbf\x0c\x0a\x3e\x5c\xc5\x30\x8d\xfb\xfb\x7e\x2a\xf2\x5a\x99\x6f\x75\x35\x05\xe9\x5f\x1b\x62\x5f\x77\x08\xd2\xef\x77\x11\xa4\xcf\x2b\xb9\xc7\x8c\xcb\xe2\x0f\x78\x38\x78\xcc\x13\x02\x5e\x9f\x3c\x45\x67\xc5\x08\xd2\x57\xd2\xfa\x08\x1a\xa3\x04\x8d\xf8\x8f\x20\xbb\x42\x37\xba\x34\x79\xc4\x7f\xe8\xc4\xd9\x50\xdd\xd0\x71\x54\xa0\xca\x8b\xf3\x51\xc7\xaa\xe4\x41\x77\x61\xba\xb3\xb9\x63\xde\x6e\x9b\xf6\xb4\x78\x5a\x9f\xb2\x9d\xa9\xf9\x4e\x6f\xb2\xc9\xf1\x6d\xc6\x02\xa4\xc5\x05\xc8\xbb\x42\x37\xfe\xc2\x4f\x89\xb5\x87\xfe\xcd\xb1\xd6\x1e\x9d\x34\x1b\x7c\xd9\x11\xac\xd9\x88\x7f\xdd\x21\x52\xbf\xd3\xd0\x1f\x4a\x55\x96\xe2\x41\x77\xa1\x7a\xfb\x0c\x05\xa4\xea\x90\xaa\x43\xaa\x0e\xa9\x3a\xa4\xea\x90\xaa\x6f\x5a\xaa\xfe\xf3\x21\x9a\x16\xe2\xf2\x33\x74\xca\x21\x2e\x0f\xee\x3b\x7d\xc3\xf3\x08\xf3\x43\xef\xab\x21\x0f\xf8\x5b\x9f\xfe\x2b\x87\x24\x3d\xee\x23\x49\x77\xce\x00\xa2\x5e\x42\x8b\xe0\x27\x00\xa0\x89\xbd\x36\xed\x00\x4d\x04\x4d\xdc\x62\x9a\xd8\x01\x16\xe4\x0b\x12\x83\x35\xf5\x99\xe3\x74\x94\x1d\x8e\x8d\x5b\x0c\xf1\xae\x2a\x86\x68\x5f\x75\x53\xa8\x28\x7e\xf3\xb2\x88\xa7\xdb\x00\x50\xaa\xb2\xf5\xea\xe8\x6f\xb1\xaa\x4f\x65\x54\x8d\xbd\xf1\x32\xfb\xa5\x01\xfb\xa3\x78\x48\x84\x54\x53\x8d\x60\x50\xe6\x64\x59\x59\x8d\xea\xcd\x1d\x5d\xb0\x0b\x99\xb4\x0a\x89\x0f\xeb\x17\xd5\x7e\x1c\x5d\x4f\xed\xf2\xf0\xb7\x69\xc4\x7f\x45\xfc\x57\xa4\x17\x44\xfc\x57\xc4\x7f\x45\xfc\xd7\xde\x89\xff\xda\x45\xd9\xf3\xba\x26\xfe\x2b\xd2\xba\x21\xfe\x2b\xe2\xbf\x22\xfe\x2b\xe2\xbf\x6e\x45\x5a\xb7\x9e\x0e\xd7\x8a\xbc\x53\xbd\x9c\x77\x2a\xbd\x0d\xc3\xb5\x66\xae\xd0\x23\x82\x1f\xce\xd0\x14\xe7\x87\x67\xe8\x14\x4d\xf8\xf2\x43\x57\x46\x34\x57\xd0\xfc\x73\x06\x3d\xe1\x0f\x0b\x0f\xb3\xf1\x46\xa1\x8c\x5c\xef\x4d\x57\xef\x77\xc7\x94\x3b\xd8\x2d\x3c\x43\x50\xec\xa3\xbb\x1c\x82\x3e\xf1\x1d\x8a\x4a\x1e\x5c\xec\x80\x38\xde\x59\x32\x26\x40\xd6\x1c\x65\xe8\x42\x8d\x13\xe7\x38\x1d\x6d\xad\x47\xe0\xc2\x81\xe8\xac\x45\xd1\xd9\x1b\xc3\x62\xbf\xca\x18\xdf\xaf\xa2\x5b\x86\x09\x6a\x79\x1c\xd2\x25\x21\x3f\x3b\x4f\xd3\xb6\xfc\xec\x46\xca\x7b\x54\xf8\xc9\x2f\xd0\x8c\xc3\x4f\x7e\x23\x05\xfa\x99\x2d\x6f\xeb\x52\x56\xb4\x0a\x35\x69\xd6\x9a\x33\x65\x55\x22\xb7\xbf\x1e\x71\x38\xbe\x0d\xe5\x82\x43\x06\xa2\xac\x7a\x98\xb0\x23\x4e\xe9\xdb\xa4\x75\x41\x67\x8d\x59\x7b\xe4\x70\xc0\xbc\xc0\xbc\xc0\xbc\xc0\xbc\xbd\x83\x79\x31\x8d\xf3\x99\xc6\x75\x0f\x07\x87\x14\xb9\x23\x52\x64\xb8\x1b\xe0\x6e\x80\xbb\x01\xee\x06\xb8\x1b\x7a\xda\xdd\x80\x1d\x29\xd8\x91\x82\x1d\x29\xed\xda\x91\x02\x6f\x1e\xbc\x79\xbd\xea\xcd\xcb\xe4\x03\xce\x1b\x12\x8c\x63\x6c\xf3\x04\xf9\x6a\xdc\x1d\x5d\xef\x65\x77\x08\x33\x61\x9b\x70\xda\x8e\x0a\xfa\x0f\xde\x46\x13\xfa\x70\xd5\x46\xcd\x36\xe5\xad\xc1\x3b\xa6\xa0\x8c\x6e\x24\x57\xe4\x8a\x94\x1c\xd5\xe4\xe2\xaa\xb6\xce\x9f\x46\x5d\x2f\xca\x9a\x2a\x6f\x14\xe4\xeb\x1a\xfb\x36\xc5\xfe\xec\x16\x7a\x45\xd5\xb5\xcb\xc6\x45\x91\x07\x2c\x3f\xe1\xa2\x5c\x5c\x5d\x14\x97\x2f\xe8\x97\x2f\xf0\xcb\xe3\x63\xe2\x84\x94\xf3\xea\x25\x71\xb1\xfb\x15\x01\x03\xf6\xef\xa7\x57\xd1\x13\x35\xde\xc2\xf3\x34\xed\xe9\x04\xa9\x6e\x22\xe3\x31\x13\xee\x55\xcd\x7c\x24\x4c\x97\x85\x9f\xe5\x09\x7a\xdc\xe1\x67\x99\xa5\xa0\x6e\xe1\xbd\x51\xf1\x49\xf1\xee\xbd\x92\x1e\xe5\xef\x5e\x80\xb7\x7c\x46\xb8\xa2\x96\xe8\x31\xdb\x15\x15\x5c\xf1\xe6\xdb\xac\xf8\xbf\xcd\x73\x2c\x63\xbc\xcd\x6e\x03\xd7\x78\xbf\x3d\x1e\xc2\xf1\x82\xf3\xda\x34\x72\x7f\x73\x07\x55\x06\x08\xb1\x31\x42\xcc\xc0\x13\xec\xe1\x09\x0e\xdc\x62\xbf\x7f\x37\x25\x37\x91\x90\x43\xaa\x54\xa4\xec\x15\xf6\x9d\xdb\xd8\xdb\x1c\x31\x99\x1e\xce\x2a\xa5\x92\xfe\x69\x3a\x3f\xfd\x98\xbd\xa9\x47\x5f\x5e\xf3\xd3\xf5\xf1\x32\xaf\xe4\xe2\xfb\x8d\xd3\x84\x1f\xf4\xbc\x5c\xa9\xda\x04\x9c\xe2\xe7\x8e\xeb\xa6\x54\x84\x56\x3a\x46\xfb\x84\xe1\x79\x05\xed\xe5\x86\xe7\x65\x74\xdb\x47\x42\x3b\xc9\xa8\xbd\xef\x47\xfc\x41\xf7\xb7\x90\xd8\x4e\xa3\x1e\x2d\x87\xdd\x32\x2b\x6b\x38\x41\xab\x3e\xf1\xb1\x9f\x72\x34\xcc\x80\xd9\x30\xf3\x8f\x2e\x36\x6a\x99\x87\xaa\x5a\x66\x5e\xd1\xda\xdc\x34\x6d\x78\xee\x26\x9a\x3b\xf3\x8e\x10\xfd\x74\x88\xbd\x2d\x14\xf9\x09\x6b\x9e\x59\x31\x7d\xc5\x3c\x1a\xb3\x6e\x88\x84\xbf\x8b\x7b\x31\xe5\xec\x7a\xc5\x74\xe2\xae\xad\x49\xa5\x1a\xb6\xed\x7c\xff\xf4\x6b\xb9\x55\x52\x39\x45\xe7\x87\x94\x52\x4d\xd1\x1c\x38\x2a\xb9\x44\x6c\x97\xf5\xb3\xf3\xe5\x6a\x1c\x30\xad\xe6\xe1\xb7\x62\xc7\xe3\xeb\x43\xf4\x6f\x43\xec\x87\x22\xff\xda\x6c\xbd\xe5\xc5\x4a\x4e\x56\xc5\xa3\xab\xeb\x72\xed\x57\x43\x33\x8e\xf2\xd6\x5a\xd1\x0d\xb6\x30\xff\xb2\xed\x48\x30\xc6\xa1\x98\xd2\x3b\x1b\x97\xf3\xc4\xd8\xad\xa2\x88\x2a\x99\xda\x6b\x43\xf4\x6f\xd8\x73\x91\x1f\x74\x56\xa2\x50\x32\xeb\x30\x62\xdd\x45\x2c\x0b\xb4\x8a\x54\xca\x49\x6a\x2e\x5a\x28\xe9\x56\xc9\x16\xd0\x19\x9d\x61\xd4\xa4\xa0\xb9\xd4\x81\x63\x9b\x44\xec\x16\x4d\xbf\x41\x55\x1d\x5c\x5b\x42\x5f\xae\x78\xb7\x84\x22\x6c\xe2\x8d\xb4\x84\xb2\x5e\xa9\xaa\xc5\xb7\x43\xf4\xcd\x10\xfb\x46\x28\xf2\x35\xc7\x92\xfc\xb1\xc7\x5e\xe5\x55\x0b\x29\xaa\x9b\x63\x0b\x37\x15\x8b\x8a\x00\x5b\xae\x55\x30\xc1\x65\x59\xd2\xbf\x92\xd1\xca\x15\x55\x59\xcf\x5f\xb1\x18\xb3\x18\xd4\xea\x7a\x89\x03\x3c\x4d\xe8\x18\xf5\xe2\x0b\x9a\xa3\x64\xc3\xf7\x70\x5d\x51\xaf\xc9\x6a\xb4\xa4\xe4\x64\x93\xd4\xd4\x95\xe1\xda\xf4\x7d\xfa\xe7\xc2\x99\x52\xfe\xb7\x86\xcc\x19\xbe\xba\x22\x65\x13\x0d\xa7\xf9\x7c\xb5\x38\xaa\x2a\x45\x79\x45\x6f\x88\x52\x5e\x63\xaf\x1d\x62\x7f\xdf\x4f\xf7\xe8\xd7\xa6\x5c\x67\xf9\xd7\x0d\xa0\x5d\xca\x15\x36\x0a\xb9\x75\xa9\xe8\x94\x6a\x4a\x96\xf3\x68\x41\x29\xca\x69\x51\x68\xc2\x81\x08\x27\x2c\xb8\x38\xc8\xcb\x19\xb4\xc5\x1b\x55\xde\x78\xa5\x2c\x5b\x0e\x40\xad\x22\x4b\xb9\x44\xfc\x14\xbf\x60\xa1\xb6\x62\xc6\x02\xc2\x71\xbf\xb9\x82\x56\x99\x51\xd4\x54\xb1\x68\xd9\xe8\xe0\xc2\xe0\xb6\x67\x47\x6e\xe6\x1a\xcd\x8b\xef\x85\x3e\xb9\xd6\xbf\x17\x29\x3a\x4b\xa7\x5b\x58\x3f\x73\x05\xed\xf4\x86\x5c\xf2\x17\x97\xee\x77\xff\x1e\xec\x66\xc4\x2b\xc6\x85\xa0\x57\x0b\xfe\x1f\xa2\x19\x36\x65\x7c\x88\x3c\x47\x9c\xb9\xfe\xb6\x3b\xa9\x7e\x52\x9e\xc1\xae\x64\xec\x4a\xce\x40\xae\x06\xb9\x1a\xe4\x6a\x90\xab\xf5\x8c\x5c\x2d\xd3\x35\x6a\xac\xc0\x6b\xd2\xb2\x4c\x28\x03\x99\x10\x64\x42\x90\x09\x41\x26\x04\x99\x50\xe7\x65\x42\x81\x23\xec\x4c\x4f\x0b\x23\x32\x10\x46\xb4\x4f\x18\x91\xe9\x7a\x61\xc4\x36\xdc\xe6\xcc\xde\x35\x48\x0f\x1a\x22\x81\x72\x59\x1b\xdd\x48\x8e\xda\xa1\xf4\xf4\xd5\x01\xef\x3b\xf6\xcf\x03\xec\x5b\x7d\xb4\x43\x3f\x85\x27\xc8\x6b\x1c\x52\xcf\xd6\x5b\x2c\x18\x25\xc4\x47\xf4\x2b\x52\xe5\xb2\xb6\x94\xac\x3f\xba\xdd\x00\x9e\x4c\x19\x01\xf0\x26\x29\xc5\x01\xde\x49\x3a\x41\xc7\xbc\xbd\xe4\xe5\xb2\x96\xd8\x48\x26\xea\x1f\xbc\xa9\x7d\xe1\x4b\xfe\x54\xee\x10\x4b\x9a\x0e\xf3\x72\x59\x33\x00\x5c\xfd\xed\xaa\x5d\x44\x3e\xdb\xc2\x81\xe8\x80\xe8\x80\xe8\x80\xe8\x80\xe8\x80\xe8\x80\xe8\x80\xe8\x80\xe8\x80\xe8\x80\xe8\x80\xe8\x80\xe8\x80\xe8\x80\xe8\x80\xe8\x80\xe8\x3a\x85\xe8\xde\x3e\x44\x87\x05\xa2\x2b\xc9\x95\xeb\x8a\x7a\x4d\x9f\xad\xb9\xaa\xfb\x0a\xa5\xbc\x2a\x6b\x5a\xb6\x28\x69\x9a\xac\xb1\x2f\x0d\xb2\xcf\xf6\x13\xb3\xaf\xb2\x84\x7d\xaf\x69\x4e\xd8\x37\x2b\xca\x9b\xd4\xcb\x0b\x48\xd9\x37\xc0\x2f\xb8\x64\x55\xc9\x90\xf4\x39\xef\x34\x57\xd0\x2a\xdd\x8e\x00\xbb\x56\xc3\xb7\xe2\x4f\x0b\xcf\xb2\xd3\x06\x2d\xac\x1b\x4f\x06\x3a\x74\xf6\x06\xc4\x7b\x20\x83\x20\x83\x20\x83\x20\x83\x20\x83\x20\x83\x20\x83\x20\x83\x20\x83\x20\x83\x20\x83\x20\x83\x20\x83\x20\x83\x20\x83\x20\x83\x5b\x47\x06\xdf\x3d\x44\xa3\x82\x0c\x8a\x18\x67\x35\x38\xb0\xac\xe4\x72\x05\x4d\x5d\xe7\xeb\xf0\x95\xf5\x5c\x5e\xae\x68\xec\xdb\x83\xec\xab\xfd\xf4\x72\x71\x81\x05\x04\xff\x4d\x73\x40\x70\x5e\xc9\x4d\x59\x25\xa6\x79\x89\x01\x71\xc1\x13\xfc\x02\x11\x68\xcd\x60\x82\x2e\x37\xc3\x76\xdf\xe6\x50\xe1\x65\x7f\x0a\x78\x92\x9d\x30\x28\xa0\x18\x0a\x76\x58\x89\xda\x46\x77\x89\xa9\xd3\x0c\x8a\x04\x26\x04\x26\x04\x26\x04\x26\x04\x26\x04\x26\x04\x26\x04\x26\x04\x26\x04\x26\x04\x26\x04\x26\x04\x26\x04\x26\x04\x26\x04\x26\x04\x26\xec\x14\x26\xfc\xb3\x41\x1a\x10\x98\x50\xab\x28\xaa\x94\x97\x6d\xf5\xa0\x41\x0a\xb3\x5a\xa1\xa4\xe4\x64\x8d\xfd\xda\x20\xfb\xe5\x7e\x22\xe3\xbc\xe5\x8d\x64\x44\x6b\x8e\x0c\x4e\x2e\xce\x5e\x52\x72\x72\x40\x34\xf0\x1e\x7e\xc1\xa2\xa8\xc5\x52\xd2\x28\x1c\xc2\xc0\x1b\x10\x06\x3e\xee\x8f\x04\xc7\xd9\x98\x4b\x7a\xe9\xea\x31\x63\x6e\x2e\x16\x3d\x02\xc8\x07\xc8\x07\xc8\x07\xc8\x07\xc8\x07\xc8\x07\xc8\x07\xc8\x07\xc8\x07\xc8\x07\xc8\x07\xc8\x07\xc8\x07\xc8\x07\xc8\x07\xc8\x07\xc8\xd7\x31\xc8\xf7\x81\x41\x1a\x12\x90\x2f\xab\x28\x6a\xae\x50\x72\xcd\x02\xc2\x93\xfe\x6a\xec\xb5\x83\xec\xef\xfb\xe8\x4e\xe7\x99\x96\x14\x70\x7f\xe3\xe0\x7e\x73\x7a\x09\x22\x9e\xdf\xa4\xe3\x72\x43\xb3\xc7\x8f\x6e\x37\x85\xde\x26\xe3\xf9\x55\xb5\xaf\x99\xf4\x8e\x3f\x78\x53\xf1\xfc\x7c\xe2\xee\x5d\x7d\xc6\x1f\xd4\x4d\xb0\xe3\x75\x9a\x3c\x83\xd6\xb9\x74\xbe\x81\xec\x78\x0d\x01\xec\x00\xec\x00\xec\x00\xec\x00\xec\x00\xec\x00\xec\x00\xec\x00\xec\x00\xec\x00\xec\x00\xec\x00\xec\x00\xec\x00\xec\x00\xec\x00\xec\x3a\x06\xec\xde\x3a\x4c\xa7\xfc\x93\xf7\x9a\x02\xbd\xe2\xba\x56\xd1\x17\x2e\x45\x33\x1f\xfc\x73\xec\xd3\x43\xec\xdf\xdf\x42\x77\xba\xa5\xef\x8d\x7c\x24\x64\x74\x85\x43\xab\x57\x32\x8d\x9b\x95\xa7\x43\x14\xba\xa0\x14\x83\xd1\xed\x8d\xd8\x93\x19\x3e\x61\x33\x3e\x7d\xfa\x7c\xc8\x9e\xa5\x0d\x56\x4d\x8c\x1d\x65\x27\xe2\xfb\xbd\xb2\xfe\x3a\x2a\xda\xed\x2c\xf1\x9a\x27\xff\x0b\x5e\x18\x68\x12\xc5\x07\xdc\x89\xe2\x4e\x76\x2b\xaf\x18\x5d\xcd\xf9\x23\xc5\x14\x3b\xdb\x64\x62\x5f\x47\x67\x54\x25\x14\x01\x59\x04\x59\x04\x59\x04\x59\x04\x59\x04\x59\x04\x59\x04\x59\x04\x59\x04\x59\x04\x59\x04\x59\x04\x59\xec\x30\x59\x3c\x4e\x47\xd9\xe1\xd8\xf8\xce\x10\xeb\x2f\x4b\x95\x2b\x91\xbb\x4a\xba\xf9\x32\x6a\xe1\x58\xbd\xc5\xfa\xf5\x03\x71\xc3\x6c\xff\x14\x98\x24\x98\x24\x98\x64\x6f\x33\xc9\x4f\x0f\x51\xda\x9f\x49\x4a\xc5\xf2\x15\xc9\x85\x4c\xae\x14\x4a\xb9\x42\x29\xaf\xb1\x37\x0f\xb1\x7f\xe9\xa7\x88\x1b\x99\x14\xd7\x46\x7e\xa8\xc9\x5d\xc5\xb6\xb5\x4a\x8b\xc2\x03\xda\x60\x7c\xd8\x0b\x35\x8a\xfa\xd5\xdf\x17\x7b\x8f\x6f\x60\xef\xf1\x0f\xf8\xf3\xc7\x4b\x6c\x6e\xf3\xfc\xd1\xe8\x1b\x27\x86\x14\xfd\x07\x18\x09\x18\x09\x18\x09\x18\x09\x18\x09\x18\x09\x18\x09\x18\x09\x18\x09\x18\x09\x18\x09\x18\x09\x18\x09\x99\x23\x90\x22\x90\x22\x90\x62\xc7\x90\xe2\x3f\x0f\xd1\x88\x47\xf0\x41\xb1\x25\xd9\x8c\x3d\x68\xca\x1a\x7f\x7b\x88\xfd\x63\x98\x6e\xb7\x43\x10\x8a\x6d\xc9\x11\x55\x96\x72\x35\x6b\x4f\x23\x0a\x5d\xfc\x1e\xfd\x98\x15\x2d\x90\x9f\x6f\x1c\x0a\x0c\xd9\x09\xc2\x76\x99\x26\x05\x61\x3b\x45\x13\x9c\xb0\x1d\xa6\x71\x1a\xf3\xdc\x29\x6c\x3e\xb1\xb9\x49\xd8\x8c\x9a\xe7\x07\xd5\x9e\xf2\xe7\x65\xc7\xd8\x91\xea\x48\x7c\x5e\x1b\x82\x6b\xc2\xf7\x5d\xbd\xcf\x1d\xd8\xdd\xca\xfa\xf3\x72\x85\x22\x2f\xee\xac\x6f\xfa\xfb\x54\xb9\x5c\x94\xb2\xb2\x47\xeb\xef\x33\x0e\x77\xa0\x03\xd2\x33\x34\x45\x69\xd6\xbf\xa2\xe4\x9e\x8d\xf0\x7f\xa3\xa1\x78\x0b\x3d\x90\x7e\x67\x98\x7e\x26\xcc\x7e\x2a\x1c\xf9\x8f\x96\x1d\xfd\xc7\xd0\x13\xfa\x07\xc9\xf8\x12\x8e\x70\x36\x9d\xd5\xd7\xbb\xc2\xf0\x55\xad\xbe\x9c\x44\x6e\x45\x8e\x96\xf5\xb6\xd7\xa7\xbc\x89\x68\xaa\x14\x2d\x94\x04\xf7\x50\xd4\xe8\x7a\xc9\x42\x27\xb9\x68\x4e\x7d\x76\x61\xbd\x14\xcd\x15\x54\x59\x7f\xdb\x65\x6b\x3d\xae\x7f\x56\xf9\xbc\xc5\x00\x12\xe6\xf2\xc3\x58\x02\x46\x57\xd7\x55\x3e\xc5\x2d\xab\x4a\x56\xd6\xf8\x04\xc3\x30\x2e\xc6\x97\x2b\x11\x5d\xe2\x77\xe4\x4b\x07\x3e\x23\x98\x88\x1e\x8c\xa6\x8a\xc5\x09\x3e\x7d\xc8\xa9\xcf\x46\xd5\xf5\x92\xbe\x34\xd5\xcd\x83\x39\x67\x32\x8a\x93\x73\xb1\x5b\x45\xd5\x1c\xb6\x30\xfd\xb6\x30\xfd\x44\x98\xfd\x58\x38\xf2\x16\xab\x81\xbe\x11\xe2\x33\xce\x47\xa4\x92\x94\x97\x55\xb1\x76\xe2\xae\x45\x49\xd3\x94\x6c\x81\x4f\x07\xac\x55\x8a\xc4\x97\x79\x8a\x1a\xd5\x67\x8b\x95\x67\xad\xf9\xd1\x9a\x74\x4d\xaf\x7f\xe5\x8a\xac\xc9\xa6\xc1\xd2\x8d\xa8\xc9\x8f\x38\x42\x59\x91\xa3\xdc\x54\xf2\x15\x89\xa2\x46\x93\xe3\xc7\xf5\x73\x55\x29\xcb\x41\x97\xbe\x98\x17\xe6\x89\xaf\x1a\xf4\x09\x9e\x54\x28\x89\x59\x03\x9f\x95\xdb\xe7\xf2\xc5\xbf\x81\xe1\xf4\xb5\xa4\xf9\xc9\xc9\x2b\x45\xa9\x94\x4f\x28\x6a\x7e\xb4\x7c\x2d\x3f\xba\x5e\x2a\x64\x95\x9c\x3c\xba\x7f\x56\x9b\xd7\x4b\x49\xc4\x76\x3b\x9f\xd5\xf9\x91\x78\x6f\x28\x18\x1b\x70\x41\x2f\x24\xc9\x11\xfd\x8e\x49\x31\x0b\x6e\x93\x35\xf1\x7e\xe3\xcb\xeb\x15\x6a\xd2\xd8\x34\x13\x0c\xb4\xce\x04\xc5\xbf\x7b\x7b\xbd\x35\xd9\x23\x66\xf7\x51\xc9\x32\x20\xf7\x8a\x5f\x3a\x61\x3f\x1e\xa3\x05\x9a\x77\xda\x8f\x78\x9a\xce\xb5\xe0\x21\x99\xe2\x35\x7e\x94\xd3\x63\x0d\xd6\xc4\xcf\x9a\x7c\x35\x4c\x5f\x09\xb3\x2f\x85\x23\x7f\x6c\x35\xd0\x87\xc3\x8f\x39\x67\x4b\x05\x7d\xd2\xce\x67\x3c\xd1\x15\x79\x55\x78\x4e\xac\x65\x8a\x8d\xe7\x8d\x95\x21\xaf\xa2\xc3\x5a\x94\x94\xd2\xc1\x92\x9c\x97\x78\x43\x18\x13\x26\xa7\x55\x11\xc0\xc2\xea\x02\x63\x04\x16\xd6\xd6\xe4\x9c\x6e\xb7\x8a\xcf\xda\x2e\x0d\x1b\x63\x17\x8a\x23\xc6\x3c\x8a\xcf\x24\xa3\x79\x55\xff\x06\x96\x65\xb5\xa0\xe4\xac\xf9\xa0\xfd\x39\xe4\xde\x22\xb3\x35\xd6\x35\xbd\x92\xce\x39\xa8\xa4\x5f\x69\x3e\x90\x71\x93\x55\xb1\x74\x37\x8b\x48\x88\x7a\xae\xc9\x52\xc9\xb5\x8e\x31\xc6\xab\x30\xcf\x6b\xe0\x32\x3f\x4c\x7f\x26\x4c\x2f\x85\xd9\x8b\xe1\xc8\x0b\x56\x33\xbf\x2b\x3c\xe5\xf0\x97\x96\x79\xfc\x17\x8b\xb3\xcc\xab\x4a\x59\xca\xf3\x0e\x10\x99\xd7\xaa\x5c\x2d\xe6\xb3\xd8\x0e\x57\xbd\x97\x92\x89\x63\x89\xe8\xa2\xe8\x10\xd1\x3a\x65\x7d\x79\xa0\x2f\xb1\x4c\x64\x27\x47\x15\xb5\x7c\x45\x2a\x99\xae\x1f\x75\x5d\x1e\x5d\x95\x8a\x26\xe2\x8e\x89\xa3\xb1\xe8\x6a\xa1\x24\x15\x0b\xff\xca\x64\x65\x2b\xb2\x3e\xff\xe4\x0b\x92\x51\x31\xef\xcc\xd9\xfc\x54\x14\x3e\xa8\xd9\x17\x09\xa8\x9c\x88\x4e\x17\xf8\x70\x76\x54\x5c\x51\xeb\x9f\xcc\x5e\xdc\x55\x04\xd3\xe6\x2f\x9b\x52\xb9\x92\x88\xed\x11\xf5\x99\x32\x1f\xa4\xca\x87\x94\x7e\x53\x3f\xbd\xb1\x9f\xbd\xae\x3f\xf2\x3d\xcb\x91\xf8\x85\xbe\x27\x0c\xe8\xa4\xbf\x52\xfa\xea\x2a\x2f\xa9\x2b\x52\x5e\x8e\x66\x95\x62\x51\xe6\xe6\xd5\x7e\x2f\x64\x75\x55\x51\xd7\xf4\xb6\x70\xad\xe9\xa3\x35\x37\xf7\xae\x28\x1f\xcf\xe6\x60\x14\x49\xdb\xf4\x71\x9a\x93\xb3\x85\x9c\x4d\x8f\x39\x88\xe4\x2c\xdf\x6a\x5d\x7d\xbd\x65\x60\x3a\x13\x35\x26\x1c\xcd\x68\x42\x2a\x6b\x45\x65\xb9\x0f\xab\x6f\x96\x88\xa6\xb2\xfa\xe2\x8b\x7f\x62\x9d\xc6\x61\x50\x3c\xc3\x60\xf4\xa0\xd1\xf1\xd5\x03\x43\x3b\x19\x1d\x4c\x4b\xd9\x6b\xfa\x27\xa4\x94\xd3\xcf\xe2\x7e\x3b\x7e\x52\x4d\xc3\x09\x32\x6c\x0c\xfd\xea\x42\xcc\x27\x58\xb1\x4a\x3a\x19\x1d\x9c\x51\x54\xd9\x51\x6c\x34\x2b\x69\x59\x29\xa7\x3f\xbd\xd1\x3e\xc2\x53\xcb\xcb\xd3\x84\xf5\xaa\x2b\x70\xd5\x2a\x23\x11\xbb\xa3\x5c\x3b\x6e\x9c\x9f\xfe\xf7\x05\xf4\xe9\x9f\xd5\x0b\x19\x67\x69\x3a\x47\x3b\x45\x93\xb6\xed\xdb\x1f\x75\xff\xf6\xef\x62\x3b\x44\xa3\xb4\xf5\xf3\x9f\xfe\xce\x6d\xf5\x9f\xff\x81\xb2\xa4\x56\x0a\xdc\xe7\x27\x16\x9a\x1e\xab\x8a\x48\xb9\x2a\x04\x7c\x7b\xe6\x04\xf7\xd6\x16\x74\x90\xdf\xf5\x80\xfe\xe7\xc4\x3e\xe7\xc1\x35\x59\xcd\xcb\xce\xa3\x03\xce\xa3\x5a\x45\x95\x2a\x72\xbe\x90\x3d\x58\x77\x5e\x55\x29\xfa\xdf\xcf\x1a\x47\xf5\x5a\xa6\x2f\xd1\x1c\x65\x6a\xd6\x33\x13\x74\xbc\x85\x19\xc9\x3c\x77\x83\x63\x26\xe2\x33\x13\xf9\x60\x1f\x3d\xdf\xc7\xde\xd7\x17\x79\x8f\x65\xce\x5f\xdf\xd7\x3b\xeb\x9a\x1a\xcf\x81\xde\xce\xdc\x13\xce\xbd\x5b\xfa\xe0\xb4\xf5\x30\x43\x1e\x03\x77\x98\x7f\x95\x84\x70\x42\x2a\xf2\x2b\xf5\xe9\x97\xb8\x9a\x9f\xc1\xa7\x42\x5a\x74\x28\xa3\x29\xa5\x79\x21\x0c\x79\x44\x7f\x2d\x8c\xbf\x17\xcd\x97\xc5\xfe\x71\xd8\x7b\xc1\x95\x7e\x29\x44\x2f\x86\xd8\x0b\xa1\xc8\x27\x2c\xe8\xf5\xde\xd0\x8c\xa2\x66\xf9\x2c\x2d\xaf\xf0\x66\x57\xa2\xb1\x55\xfd\xa7\x58\x34\x55\xf5\x14\x1c\x67\x8a\x09\xd5\xba\x66\xbb\xc0\x0f\x4a\x59\xfe\xe0\x5c\x58\x50\x2c\x64\x8d\x0f\xa6\x5c\xcc\x69\x51\xe5\xba\xd1\xa6\xc2\xf1\x5e\x96\x95\x72\x51\x4e\x44\xc5\x1d\xb9\x92\xc7\xec\x4b\x8e\x15\x5d\x1b\xc0\xba\x7d\xec\x16\x5e\xad\x2a\x55\x4a\x87\x20\x92\xf7\xae\xd0\xb2\xd8\x15\xda\x46\xca\x94\x39\x4c\xe3\x6c\x2c\x96\xb0\x34\xc8\x7b\xab\x34\xc8\xa2\xb0\xf6\xeb\x8f\xd9\xff\x33\x44\x07\x47\xa5\x72\xc1\xde\x48\x5d\xb2\xa2\x12\x0a\xde\xc8\xff\x7e\x6e\x54\x93\xd5\x8d\x42\x56\xd6\xd8\x5b\x87\xd8\x2f\xf4\xd3\x8e\xac\xa2\x6e\x26\xfb\xc9\xa2\xb8\x3c\x20\x71\xa2\xf0\xdf\x4d\x2a\xaa\xbc\x94\xb4\xa2\x28\xe6\x8c\x7b\x40\x88\xe8\x3e\xdc\x67\xfd\x47\xf3\x00\x7b\x48\x8c\x66\xa3\x29\xc9\x25\xdb\x49\x2c\x86\xec\xc6\x10\x18\x42\x60\x08\x81\x21\x04\x86\x10\x18\x42\x60\x08\x81\x21\x04\x86\x10\x18\x42\x60\x08\x81\x21\x04\x86\x5d\x29\x30\x7c\x35\x5d\x66\x4f\xc7\x9e\xb2\x48\xc3\x84\x71\x67\x41\xf0\xf4\x09\xce\x7a\xe5\x4a\x54\xcb\x2a\x65\x79\x24\xaa\xad\x67\xaf\xe8\xad\xcf\x67\xb0\xb2\xb4\x26\x9c\x1f\x65\x55\xe1\x4f\x1a\xdb\x65\x11\x01\xec\x8a\x86\x84\x11\x12\x46\x48\x18\xb9\x84\xf1\x27\xfb\xcc\xfc\xc9\x52\x4e\x9f\x2c\x17\x94\x92\x2a\xe7\x0b\xdc\xe9\x53\x1d\xac\x91\x7d\x3d\xcc\xfe\x32\x4c\x77\xbb\x9e\xb7\xbc\x91\x8c\xdc\x95\x97\x2b\xd5\x5f\x77\xf1\x54\xf1\x81\xbc\x5c\x49\xb9\x5d\xb5\x94\x4c\xcd\xcf\x9a\xeb\xca\xe0\x52\xa9\x4c\xd4\x15\x34\x51\x57\xd0\x44\x33\x05\x65\xca\xf4\xb8\x80\x7d\x97\x68\x8e\xc3\x3e\xae\xd1\x6b\x01\xf6\x39\x9e\xb3\x99\x44\x2a\xec\x4f\x06\xe9\x3e\xd1\x2d\x2b\x1c\xed\xda\xc1\x32\x55\xa5\x74\x55\x59\xd1\xd8\xff\x35\xc8\x3e\xd0\x4f\x3b\xf9\xe1\xcd\xe4\xb2\x56\x95\x52\x46\x59\x09\x88\xe6\x8a\x0b\xd2\xfa\x3f\x4b\x49\xa3\x68\xfd\xf9\xb6\x5b\x96\x9c\xad\x88\x6c\xd9\xd4\xee\xf2\x39\x7f\xf2\x3b\xcc\x06\x5d\x58\x2f\x1f\x17\xa6\x13\x5b\x74\x0c\xb8\x2e\xb8\x2e\xb8\x2e\xb8\x2e\xb8\x2e\xb8\x2e\xb8\x2e\xb8\x2e\xb8\x2e\xb8\x2e\xb8\x2e\xb8\x2e\xb8\x2e\x36\x8e\x83\xba\x82\xba\x82\xba\x76\x8c\xba\x7e\x39\x4c\x77\x09\xbc\x97\x2b\x68\x59\x45\x37\x7a\x26\x69\x65\xff\x6f\x98\xfd\xdf\x61\xda\x65\x1d\x88\x44\xf2\x7c\x8f\xcb\xaa\xa2\xae\x59\x8d\x28\x45\x39\xe7\x89\xdf\x99\x97\x2b\x53\xe6\x99\xa9\xf9\xd9\xf3\xfa\xaf\x5d\x08\x52\x0b\x74\x49\x70\xb4\xf3\x34\xcd\x39\xda\x59\x3a\x4d\x27\x5b\x03\xa9\xfc\x19\x7d\x09\xea\x3f\x3c\x4d\x0f\x37\xb5\x37\x9f\xfd\xee\xd3\xec\xad\x03\xf5\x9b\x39\x1e\x6e\x9c\x2b\xdc\xda\x9f\xaf\x9f\xd6\xde\xad\x1c\xed\x81\x9e\x69\xd0\x40\xd0\xc0\x34\x68\x20\x68\x20\x68\x20\x68\x60\xcf\xd0\xc0\x74\xd7\xd0\xc0\xc0\x6b\xd2\x32\x0d\x4c\x83\x06\x82\x06\x82\x06\x82\x06\x82\x06\x76\x9e\x06\xa6\x7b\x1a\xde\xa5\x01\xef\xda\x07\xef\xd2\xdd\x0e\xef\xd2\xdb\x10\xde\x65\x56\xe8\xbc\x60\x59\xe7\xe8\x0c\x67\x59\xc7\xe9\x28\x1d\xde\xec\x1e\xf7\x66\x64\x80\x57\xef\x77\xd7\x88\xed\x60\xb7\x08\x79\x58\x1b\xb7\xb9\xc7\xde\xbc\xcb\x25\xbe\x99\xf8\x18\x39\xe3\x9b\x89\x5f\x10\x1f\xf1\x26\x8a\x23\x82\xf8\x88\x1e\xf1\x11\xff\xae\xeb\xe2\x23\x76\x30\xdc\x92\xb7\x2d\x2a\x2b\xcd\xdb\xa2\xd6\x62\x2d\x7e\x71\xa4\xde\x16\xed\x33\x42\x69\x39\xe2\x92\x29\xab\x96\x5d\x7a\xd8\x35\xee\xa2\x75\xea\x76\x8a\xc0\x08\x44\x0b\x44\x0b\x44\x0b\x44\xdb\x3b\x88\x16\x33\x34\x9f\x19\x5a\xf7\x30\x6c\x44\xbf\xed\x48\xf4\x5b\xb8\x0a\xe0\x2a\x80\xab\x00\xae\x02\xb8\x0a\x7a\xda\x55\x80\x20\xe8\x08\x82\x8e\x20\xe8\xed\x0a\x82\x0e\x4f\x1c\x3c\x71\xbd\xea\x89\xcb\xe4\x69\x4e\xa0\xed\x69\x9a\xe4\x68\xfb\x34\x9d\xa4\x13\x2d\xc0\xcb\xc5\x8a\x54\x59\xd7\xb6\x34\x0f\x58\xdc\x1d\x55\xef\x65\x77\x08\x4b\x61\x5b\x71\x0a\x3e\x2e\xf3\x9f\x3e\x4d\xf7\x98\x71\x99\x4d\xf4\x50\xaa\x6c\x28\xc5\xf5\x35\x59\x63\xbf\xf9\x34\xfb\x0f\x03\x76\x0c\xe6\x44\x63\x91\xf9\xbc\x75\xfd\x12\xbf\x3e\x1e\xd1\xcf\x17\xd1\x93\x6b\x8f\x41\x6e\x0e\xb9\x39\xe4\xe6\xf0\x65\xc0\x97\x01\x5f\x06\x7c\x19\x5d\xe3\xcb\xe8\x1e\x54\x0f\x86\x0c\x86\x0c\x86\x0c\x86\x0c\x86\xdc\xd3\x0c\x19\x90\x0b\x90\xab\x47\x21\xd7\xb6\x94\x9b\x67\xbd\x63\x93\x5e\x10\xc4\x2e\x45\x67\x39\xb1\x3b\x41\xc7\xe8\x88\xa7\xee\x33\xab\xa8\x32\x4f\xa6\x58\xc3\x8d\xe6\x0a\x5a\xa5\x59\xbd\xf9\x82\x3f\xb4\x1b\x65\x07\x05\xb4\xab\xbd\x8f\x47\x46\xaa\xd8\xbf\xdb\x65\xe3\xb0\x7b\x2c\x7d\x79\x1d\xf9\xda\x27\x0e\xb5\x99\x7d\x09\x54\x75\x9e\xa6\x69\xb2\x46\x69\x7e\x88\x92\x9b\x6e\x5a\x08\x99\x20\x35\x6f\x51\x6a\xfe\x0f\x21\x9a\x12\x6f\xf7\x69\x3a\xc9\xdf\xee\x23\xd4\xca\x10\x14\x0a\xf1\x24\x57\x88\x5b\x5a\xf3\x16\x8b\xca\x08\xb1\xf9\x24\xa5\x1c\x62\xf3\x16\xcb\xf2\x73\x0f\x34\x67\x69\xdc\x4d\x8a\x87\xfd\xf1\x53\xb0\xc7\x3f\x3b\x62\x5b\xa2\x87\x5d\xd5\xe5\x75\x56\x69\x40\x9c\x26\xac\x92\x2d\x2f\x6f\xb3\x7d\x82\xce\x1c\x6c\x16\x6c\x16\x6c\x16\x6c\x16\x3a\x73\xe8\xcc\xa1\x33\x87\xce\x1c\x3e\x02\xf8\x08\xe0\x23\x80\x8f\x00\x3e\x02\xe8\xcc\xa1\x33\x87\xce\x1c\x3a\x73\xb8\xe0\xe0\x82\xeb\x42\x17\x5c\xc7\x75\xe6\x9b\xd0\x82\xb7\xc3\xbd\x15\xbc\xbe\xfc\x5d\xc3\x34\x66\xea\xcb\x45\x4e\x48\x2b\xb3\xaf\x36\xfa\x83\xd6\xdf\xcf\x8d\x96\x95\x9c\xf1\xc3\x73\xec\xaf\x87\xd8\x8b\xfd\x36\xdd\xfe\xa5\x90\xd1\xfd\x8e\x14\x91\x25\x73\x7a\x61\x89\xcf\x95\x5c\x20\x69\x22\x47\xec\x65\x04\x5f\x2a\x19\x93\x4e\x7d\x25\x62\xaf\x8f\x06\xab\x56\xfe\x8e\xb2\x13\xf1\xbb\xf9\xed\x04\x62\xb7\x52\x4a\xe6\xe6\x95\x5c\x97\x2b\xde\x33\xd7\x82\x4f\x1e\xe9\x3b\xdc\x1f\x70\x1f\xee\x3b\xd9\xad\xbc\x62\x74\x75\xda\x7f\x8c\xc7\x58\xb4\xce\x99\xa2\xe4\xaa\x06\x38\x52\x49\x42\xcd\x8f\x54\x92\xf0\x18\xc1\x63\x04\x8f\x51\x0f\x79\x8c\x90\x4a\x12\xa9\x24\x41\xea\x41\xea\x41\xea\x41\xea\xbb\x82\xd4\x67\xc6\x28\xc1\x46\x62\xf1\x9d\x21\xd6\x5f\x96\x2a\x57\x22\xb7\x73\xa9\xa4\x51\x8b\x79\x25\x17\xeb\xd7\x7f\x88\x1b\xe6\xfa\xa7\x42\xa1\xcc\xab\xe9\x32\x7b\x3a\xf6\x94\x75\xc5\x84\x51\x57\xa1\xb1\xd4\xa7\x44\xeb\x95\x2b\x51\x2d\xab\x94\xe5\x91\xa8\xb6\x9e\xbd\xa2\xf7\x17\x9f\xf3\xca\xd2\x9a\x80\xbc\x65\x55\xe1\x6d\x13\xdb\x65\xe1\x06\xe7\x1d\x90\xde\x12\xe9\x2d\xb7\x09\x2f\x45\x7a\xcb\x76\xa4\xb7\xfc\x9f\x23\x74\x46\xe4\x5e\x94\xca\x05\xf9\x35\x15\xb9\xc4\x7b\xcb\xce\xc0\x38\x9a\x5d\xd7\x2a\xca\x9a\x59\x96\x13\x88\x19\xc0\xf2\xc3\x23\xec\x4b\x7d\xb4\xa7\xea\xfa\xe5\x8d\x64\xe4\x80\x2a\x4b\xb9\x9a\x25\xf2\x24\x2f\xcc\x5c\x7c\x4e\x59\x85\xc5\xf9\xc9\x29\x67\x11\x4b\x49\xaf\x93\x83\x95\xe8\x66\xde\x12\xf2\xde\xb6\xf1\xff\xb3\xf7\xff\x71\x6e\x5c\xe7\x7d\x2f\xfe\xc2\x2e\x69\x92\x8f\x28\x8b\x3a\xb2\x2c\x11\xa2\x24\x08\x94\xb8\xbb\xe0\x2e\x96\x58\xfe\x5e\xfe\x04\x76\x97\xe4\x82\x2b\x72\xb5\x4b\x91\xb2\x2c\x92\x9a\x05\x86\x20\x48\x2c\x06\x9e\xc1\x2e\xcd\xf6\xa5\x36\xb5\x5e\x89\x9d\xc4\x76\x13\xf9\x47\xdc\xd8\xdf\x7c\x7d\x9d\x5e\xc7\xba\xd7\xd7\xae\x63\xa7\x4d\xed\xd6\x71\x53\xff\x50\xa3\x5c\xd9\xa9\x93\xba\x69\xea\xdc\x38\xb5\x6f\x6b\xa7\xbd\x37\x89\x93\xd8\x71\x93\xf8\xbe\xe6\x9c\x33\xbf\x80\x01\x06\x8b\x05\xb0\x58\xe2\xf3\x8f\x5e\xd4\x62\xe6\xcc\x99\x33\x33\xcf\x39\xe7\xfd\x7c\x9e\xe7\xd1\x05\x15\xbc\x49\x79\x4e\x05\x33\xa4\xd0\xd5\x5a\x54\xd0\xe9\xfa\x88\x0d\x6c\x1c\x40\xe8\x1d\xde\xe5\x44\xbc\xd6\xdd\x59\x78\xb0\x10\x4c\xff\xa6\xd9\x69\x49\xff\xfc\x1e\x9e\x95\xaa\xbb\xc6\x75\x3c\x90\xf0\xc6\xc3\xfe\x30\xf2\x75\x6c\x43\x4e\x2d\x53\xf8\xdd\xe4\xf3\x80\xe3\xba\x5a\x2a\x28\x19\xb5\xd1\x67\x6c\x1d\xbf\x26\x8f\x39\xb5\x44\x06\xbd\xa5\x22\x52\xa4\xfd\x4f\x13\xc2\x45\xc4\x95\x34\x19\x57\xf2\x53\x7d\x6b\x61\x7e\xe8\x96\x88\x42\x29\x51\xd1\x89\x42\xe9\xc8\x85\x83\xfc\x25\xdd\x62\x10\x4b\x4b\x65\x8a\x7d\x71\x9b\x8f\x41\x7c\x4c\xaa\x18\x94\xda\x36\x70\x44\x1c\xb2\x36\x26\xb0\x3d\xc1\x28\xb0\x70\x01\x16\x0e\x82\xe8\x8e\x08\xa2\xa1\x84\x83\x12\x0e\x4a\xb8\x76\x29\xe1\xd2\x9f\x0b\xb5\x58\x0e\x34\x27\x62\x54\xcf\xd2\xb4\x2b\x46\xb5\xcd\x12\xa3\xce\xae\x21\x22\xfe\x6b\x88\x2d\x6c\x93\x78\x28\x94\xfa\xe6\x56\x9f\x65\xc4\xc1\x92\xa2\x97\xf3\xdc\x17\x2c\x36\xfb\x8d\x6e\xb0\x86\x4b\xe6\xfe\xbe\xe3\x6b\x8b\x87\x2a\x1b\x1a\xe1\xfd\xd8\x6d\xfe\x73\x7c\x87\xfb\xc7\x45\x55\xcf\xa9\xee\x5f\x77\xb9\x7f\x35\xca\xba\x52\x56\x73\xf9\xcc\x48\xd5\x71\x9e\x56\xcc\x7f\xdf\x96\xbf\x9a\xbd\x4c\x9d\xa3\x19\x4a\x57\x6c\xed\xc6\xe9\x50\x13\xaf\xd1\x2c\x57\x50\x60\x45\x13\xb0\xa2\xf9\x64\x3f\x7d\xbc\x9f\xbd\xdc\x1f\xfe\xa8\x3d\x2d\xbc\xd8\xdf\x3b\x7b\xb6\x0a\xa7\x93\x39\xce\x5c\x44\xc1\x1d\xa3\xe6\xcb\xe9\x48\xa9\x06\x6b\xbc\xb8\x43\x7c\x76\x13\x9a\x1b\xa5\xc0\xcf\x34\x97\x71\xe2\x6c\x7e\x04\x5f\x52\x19\x91\xc1\xb4\xa1\x15\x67\x85\xa6\xe8\x49\xf3\xb3\x90\xff\x9e\xb7\x3e\x16\xe7\x8f\x43\xb5\x37\x93\xa9\xd7\x42\xf4\x6a\x88\xbd\x12\x0a\x7f\xc9\x66\x93\x1f\x0b\x9d\xd2\xf4\x0c\x5f\xed\xe5\x34\x3e\xec\x5a\x24\x7a\xcd\xfc\x53\x34\x92\xf4\xdc\x05\xa7\xce\x62\x61\xb6\x64\x38\xea\x89\x11\x25\xc3\x6f\x9c\x6b\x52\x0a\xf9\x8c\x9c\x78\xd5\x42\xd6\x88\x68\xb7\xe4\x98\x0a\xcd\x46\x49\xd5\x4a\x05\x35\x1e\x11\x57\xe4\x22\x30\xeb\x59\x72\xfa\xeb\x3b\x00\xf6\xe5\xa3\x1b\x79\xb7\x3c\x82\xa6\x75\x4d\xed\x56\x30\x89\xd4\x9b\x8b\xea\x48\x08\xf9\x08\x52\x7a\x8a\x26\x58\x32\x7a\xc2\xf6\x20\x3d\xee\xf6\x39\xd5\xba\x7e\xb5\x23\xaa\xe5\xca\xd8\x6f\x0f\xd0\xa3\x16\x76\x2e\x19\x8e\x3e\x56\x57\xf9\xd7\x62\xa8\x65\x83\x7d\x61\x80\x7d\x66\x03\x6d\x32\x0f\x30\x67\xc5\x65\xe9\xca\x2d\x66\xf3\xcb\xf9\xec\x92\x52\xf0\x48\x62\x6d\xd9\xc4\x9c\x68\x61\x5e\x2d\xb7\x44\x11\x1b\x8f\x0d\xdd\x12\x93\x6a\xc9\xb8\x98\x70\x1a\x9f\xc9\x1b\xe5\x53\x9a\x9e\x2c\x14\x6c\x9d\xab\x01\x91\x6b\xf5\x82\xeb\x5c\xf0\xf7\xb0\x9b\x0d\xd9\x2f\x79\xc9\x90\x0b\x2c\x67\xa4\xbd\x4b\xaa\x9d\xfe\x6f\xfc\x56\x46\xfc\x46\x79\xee\x23\x28\x5e\xa1\x78\x85\xe2\x15\x8a\x57\x28\x5e\xa1\x78\x85\xe2\x15\x8a\x57\x28\x5e\xa1\x78\x85\xe2\x15\x8a\x57\x28\x5e\x3b\xac\x78\x85\xba\x14\xea\x52\xa8\x4b\x7b\x58\x5d\xfa\x9b\x5b\x69\x5e\x62\x3e\x49\x86\x78\x2b\x8e\xba\x94\xd7\x86\xab\x15\x15\x5f\xd0\x32\x4a\xc1\x58\xe2\xd6\x4a\xc9\x64\x54\xc3\x30\x77\x14\xea\x2d\x83\x7d\xef\xae\xe8\x8f\x36\xd2\xfd\x9e\x46\xaf\xca\xd6\xc2\x8f\xd9\x99\xa9\x67\xcc\x06\xe6\x45\x03\x49\xde\xc0\x1c\x6f\x20\x76\x54\x1c\x92\x74\x9f\x7f\x51\x9c\xee\x84\xad\xd7\x3a\xbb\xc5\xa2\x9c\xcb\xf4\x66\x7a\x53\x85\xf3\x6a\x9a\x4e\xd7\xcc\xd3\xeb\x1d\x49\x79\xd3\xf1\x5a\x9d\x4d\xff\x7a\x1f\x3d\x2f\x1c\xad\x6f\xa2\x4b\x2e\x47\xeb\x59\x6a\xdd\x45\x6a\x93\xf8\x67\x05\x70\x9c\xa7\xa7\x38\x70\x6c\xe9\x45\xaf\x0a\xa1\xda\x33\x74\xd1\x11\xaa\xb5\xf2\x02\xc1\x99\xd6\x79\x2e\xe2\x1b\x6f\x09\x46\x9c\xe7\xd8\x8c\x85\x38\x7d\xbe\x03\x89\x3c\x6b\xde\x68\x55\x2d\xc5\x34\x1c\x94\xf5\x1d\x94\x69\x88\x4a\x6b\x88\x4a\xd7\x5f\x48\x11\xfb\xeb\x41\x3a\x20\x26\x91\xa2\x96\x55\x9d\xb9\x43\x29\x94\xae\x2b\xb6\xe3\x68\xa9\x68\xce\x9d\x99\x82\x62\x18\xaa\x1d\x9a\xf0\xf9\x41\xf6\x83\x0d\x74\xb7\x79\xde\x55\xeb\x84\xf0\xa7\x1b\xc9\xa8\x32\x27\xda\x9b\x30\xdb\xeb\x8a\xd4\x2a\x0f\xf3\xcb\x9d\xd3\xb2\xea\x45\x79\x23\xee\x2e\xc2\xf5\x54\xed\x7a\xba\x1c\x6c\x97\xc7\xd9\x21\xe9\x6e\x72\x8d\xa5\xdb\xde\x8a\x91\xb6\x9c\xb0\xae\xf7\xaf\x9e\xef\x55\xa4\x6f\x81\x17\x0a\x5e\x28\x78\xa1\xe0\x85\x82\x17\x0a\x5e\x28\x78\xa1\xe0\x85\x82\x17\x0a\x5e\x28\x78\xa1\xe0\x85\x82\x17\xaa\xc3\x5e\xa8\xc3\x74\x90\xed\x8f\xee\xb5\x91\xc7\x83\x6e\x0d\xac\x7b\xe3\xd7\x7e\xdd\x2b\x1c\x58\x70\x60\xc1\x81\xb5\x8e\x1c\x58\xef\x8d\xd1\x93\x82\x3d\x8a\x90\x3a\xdb\x65\x15\x94\xce\x39\x9b\x37\xf4\x25\xbe\xb3\x5f\x58\xca\xe6\xd4\xb2\x8d\x24\x7f\x73\x88\xbd\xb4\x91\x5e\x2f\x9a\xb3\x7d\x56\x9f\x6d\x30\xcb\xf3\xa4\xdd\x6c\x8a\x37\xdb\x15\x68\x52\x0c\x86\x88\x18\xac\xf2\xa2\xf9\x74\x1a\xb0\xb2\x1a\x56\x5e\x09\x86\x95\x47\xd8\x61\xc9\x21\xc5\xcb\xe3\xe4\x7b\xae\x1c\xe0\x6a\x8f\x11\x68\x25\x68\x25\x68\x25\x68\x25\x68\x25\x68\x25\x68\x25\x68\x25\x68\x25\x68\x25\x68\x25\x68\x25\x68\x65\xb7\xd1\xca\x93\x74\x9c\x1d\x8d\x8e\xdb\xb4\xf2\xd1\x8a\x2c\xd1\x95\x7b\x3d\x64\x8d\x06\x16\x05\x16\x05\x16\xed\x28\x16\xfd\xbd\xdd\x94\x12\x58\x54\x5f\x50\x32\xf1\xba\xe2\xfe\x4c\x61\xc9\x28\x9b\x7b\xab\x82\xba\x90\x2f\x66\xf3\xc5\x9c\xcd\x42\xdf\xbd\x9b\x7d\xa1\x9f\xb6\x9b\x6d\x24\x7d\xa5\xfc\x4f\xf8\xa5\x90\x16\xed\xcd\x69\x05\x35\x25\xda\x8b\xc5\xcd\xc3\xe6\x2a\x5b\x91\x28\xb2\xfa\xf8\x16\xe7\x8f\xbe\x46\x67\x05\x2e\x9c\xa4\x14\xc7\x85\x47\xa9\x4e\xf2\xa9\x38\x1f\x31\x4b\x7b\x5e\xdd\xb9\x40\x52\x58\x0a\x26\x85\x4f\xb2\xb3\x55\x04\x50\xa2\xc3\x9a\xcf\xcb\x4a\x6c\x56\xdd\xa1\xa0\xdc\xd0\xbf\xbc\xa5\xde\x23\x1c\xac\x91\x24\xba\xfa\x29\x26\xe4\x91\x6b\xf5\x20\x57\x9a\x46\x2c\xe8\x49\x22\x8d\x18\x52\x3f\x37\xa9\xd2\xff\xf5\x50\x6b\x6d\xca\xac\x08\x95\x99\xa6\xd3\x4e\xa8\x4c\x7b\xad\x54\xfd\xf4\xc9\x9d\x37\x62\xb1\xd7\xb6\xd5\xb3\x52\x0f\x39\x99\x9b\xab\x0d\xd3\x1e\xf1\xe3\x9a\xd9\x25\xa4\x6d\x46\xda\x66\xa4\x6d\x46\xda\x66\xa4\x6d\x46\xda\xe6\xde\x4c\xdb\xdc\xf9\x3d\x4f\x70\xea\xe6\xdf\xd8\x5a\x6f\x41\x91\x08\xca\xe1\x5c\xbd\xcc\x18\xe5\x39\x3b\xd7\x62\x95\x81\x04\xce\xbd\xb6\xb6\x41\x02\x67\x24\x70\x5e\xe3\x04\xce\x1d\xc6\x66\x41\xa9\x92\x1b\x9c\x63\x9a\x9f\x52\xaa\xb3\x38\x9c\xa0\x63\xec\x48\xf4\xb0\xed\xa8\x79\xc4\x93\x9c\xb9\xaa\x85\x0e\xa4\x65\xfe\xe6\x10\xed\x1f\x55\x4a\xf9\xd1\xe5\x9a\x49\x59\x0c\x55\x5f\xce\x67\x54\x25\x93\xd1\x96\x8a\x8e\xac\xf5\x97\x87\xd8\x5f\xf6\xd1\xa6\x8c\xa6\xab\xbc\x12\x92\x0f\xb8\x9d\x17\x67\x26\xc5\x99\xb1\xa8\x79\xc8\x84\xa6\xab\x17\x5d\x6a\x51\xef\x31\x2d\x06\xb5\x97\x6b\xe7\x29\x49\x89\x57\xf1\x08\x1d\xe6\xaf\xe2\x5e\x4a\xd0\x68\xcd\x57\xd1\xbc\x49\xbe\x78\xf1\x74\x36\x98\x7c\xe4\xd4\x32\xdd\x98\x0d\x7e\xcd\x46\xd8\x6e\xf9\x9a\x45\xa3\xf2\x7d\xf2\x5e\xca\x93\x12\x39\xfc\xe5\xcd\xce\xb8\x3f\xee\x4f\x5b\x2b\x86\xfe\x09\x79\x54\x27\x47\x3f\x65\x2e\x3f\x93\x15\x73\xfc\xca\x47\x19\x53\x3b\xa0\x6a\x93\x50\xf5\xa3\x21\x3a\x2d\x38\xe8\x49\x3a\xee\x70\xd0\x66\xbe\xf5\x8e\x18\x92\xc6\x2c\x45\xa0\x7d\x70\x4c\x49\x50\x4d\xbb\x1f\xde\xe3\x18\x92\x07\x6c\x20\x5a\x61\x3b\x1e\x17\x3f\x74\xd4\x74\x00\x80\x02\x80\x02\x80\x02\x80\x02\x80\x02\x80\xae\x18\x80\xfe\x4a\xa8\x15\x93\x32\x9d\x11\xd8\x33\x49\x27\x5c\xd8\xb3\xa5\x6b\x87\x95\xcd\xfb\x2b\xd8\x21\x34\x00\x33\xff\xe2\x2e\x67\xea\x1f\x09\x40\x97\x15\x0b\x82\x9d\x7c\xff\xdc\xa9\xf5\x00\x50\x65\xaf\xad\x42\x80\x2a\x81\x2a\xd7\x18\x55\x5e\x6e\xc9\x0c\xd2\x79\xbb\x1f\x58\x1e\xee\x08\x1d\x66\x07\xa3\xfb\x6d\x02\x19\x76\x13\x48\x6f\xcb\x77\x82\xce\x9c\xbd\x1a\xa3\x13\xde\xb2\x73\x35\x28\xa7\xf9\x25\xeb\xe6\xea\x46\xd7\xd5\xe5\x3c\x97\x22\x5b\xa4\xf3\xed\x31\xf6\xf6\x7e\xa7\x2c\x9d\xaf\x44\xd5\x3e\x7b\x4e\x9e\x1d\xdb\x65\x1e\x26\x8a\xc8\x39\x93\x64\xf5\x71\x2d\x26\x9e\x0a\x9d\x12\x2f\xee\x09\x3a\xc6\x5f\xdc\x83\xb4\x9f\xf6\xd6\xce\x8f\x5c\x2a\x89\x22\x87\x55\xfd\x5a\x85\xde\x8b\x53\xcf\x8b\xc1\xef\xf6\x5e\x96\xf0\xad\x7b\x68\x97\x84\xf3\xe9\x55\xf8\x8f\x36\x3b\x4f\xa2\x96\xd2\xb4\xfa\x61\x0c\xc9\x23\x3b\xfd\x3c\x52\xd3\x74\x9a\xa6\x2a\x16\x0f\xcd\x3d\x10\xac\x1b\xc0\x41\x9b\xe4\xa0\x9f\x08\xb5\xcc\x2a\x9c\x15\x3c\x75\x92\x52\x0e\x4f\x5d\x03\x13\xc3\x25\xa5\x8d\x99\x98\x86\xcc\x8a\xdb\x0e\xc5\x7e\x71\x9b\x63\x62\x5c\x32\xd1\x6a\xab\x32\x28\x7e\xec\xb8\x51\x01\x1d\x05\x1d\x05\x1d\x05\x1d\x05\x1d\x05\x1d\xed\x4d\x79\x68\x9b\xa6\xfe\x06\xb8\xe9\x4f\x6d\x75\x16\x07\x81\x92\xcf\xea\x25\xc3\x40\xc9\xa9\x2d\xde\x99\x15\x03\xf8\x69\xaf\xad\x53\xc0\x4f\xc1\x4f\xd7\x98\x9f\x76\x0e\x43\x05\xaa\x3c\xdb\x34\x55\x04\x68\x39\xab\x4e\xbe\x23\x68\xea\x77\xb7\xd3\xb1\x86\x68\xaa\xae\xf2\xef\xca\x70\xd2\xa0\x8e\x1a\x19\xa5\xa0\xb2\x5f\xd9\xce\xfe\xba\xcf\x99\x41\x39\x24\x8d\xf0\x9f\xac\xa1\x73\xa6\xcf\x39\xd1\xc8\xbc\x5a\x8e\xed\xf4\x83\xa9\xce\xef\xf3\x66\x03\x2d\x26\xa9\x6f\xa6\x93\xe2\x15\x3e\x4c\x07\xf9\x2b\x9c\xa0\x51\x1a\xa9\x57\x69\x4e\x33\xef\x23\x5f\xcc\xf1\x75\x8c\xd9\xa3\xd6\x3a\x00\x5c\x57\xb0\x3c\x01\xfc\x22\x9e\x05\x4c\x40\xe4\xfe\x97\x5d\xf4\xd4\x62\xa2\x0d\x0c\xff\xae\x1a\xf8\xb4\xad\x4f\x20\x35\x41\x49\x3a\x51\xb1\x70\x58\xe9\x23\xc0\x6a\x01\xd4\xb4\x49\x6a\xfa\x91\x50\x0b\x2c\xc0\x94\xe0\xa5\xc7\xe9\xa8\xc3\x4b\xdb\x60\x48\x02\x48\x69\xcb\xed\x4c\xea\x87\x77\x39\x86\x64\xac\x6a\x1b\x14\x6c\x51\x1e\xf7\xdd\x07\xb5\xcd\x9e\x60\x13\xd4\x6b\x66\x0d\x9b\x20\x6c\x82\xd6\x78\x13\xb4\x3e\x57\x90\x81\x12\x92\x31\xda\xc3\xe2\xd1\x61\x7b\xdf\x72\xaf\x47\x42\x62\x36\x78\x47\xec\x75\xde\x3e\x48\x7b\xc4\x5e\xc7\xc8\x5c\x57\xb3\x4b\xfc\xb9\xd8\x99\xce\x64\x39\x88\x92\x9e\xd7\xf4\x7c\xf9\xb6\xac\x42\xcb\xfe\xfd\x00\xfb\xf2\x06\xba\xdb\x39\xc3\x9c\x1f\x6f\xcb\x64\xa3\xc5\x6c\x7e\x39\x9f\x5d\x52\x0a\x9e\xa2\x0f\x76\x62\xdf\x59\xd9\x56\xeb\x2a\xd0\xc6\x63\x51\x7e\xc2\xbc\xdd\x9d\x8b\x09\xcf\x55\x66\xf2\x06\x6a\x33\xac\xb6\x36\x43\xd5\xeb\x61\x95\x69\x70\x8f\xb4\xf7\x1b\xdb\xe9\xff\x8d\x6d\x65\xc4\x6f\xdc\x7c\x9a\xa8\xcf\x80\xfa\x0c\xa8\xcf\x80\xfa\x0c\xa8\xcf\x10\x34\x2c\xa8\xcf\x80\xfa\x0c\xa8\xcf\x80\xfa\x0c\xa8\xcf\x80\xfa\x0c\xa8\xcf\x80\xfa\x0c\xad\xae\xcf\x80\xda\x07\xa8\x7d\x80\xda\x07\x3d\x5c\xfb\xe0\x4f\x63\x74\x34\x20\x47\x96\xe5\x40\x29\x96\x97\xb5\xc2\xd2\xa2\x9a\x29\x28\xf9\x45\x3b\x80\xec\x93\x31\xf6\xf3\xfd\x4e\xb8\xf5\xa0\x4f\x00\xd9\xac\xdd\xc0\x45\xde\xc0\x84\xd9\x40\x6c\xc8\x2f\x63\x96\xef\xa1\x2d\x16\x3f\x64\x6b\xe7\xbb\x99\x16\x34\x2e\x45\x27\x39\x8d\x1b\xa7\x43\x74\x20\x30\x30\xd2\xb7\xcf\x0d\x46\x92\x5d\x0a\x86\x71\xfb\xd8\x98\x7f\x02\x1c\x49\xe2\xfc\xae\x4e\xe1\x3f\x75\xa5\xd1\xda\xed\x1f\x4a\xe6\xff\x58\x86\x6b\x64\xd3\xea\xc0\x93\x49\xcd\x50\x9a\xce\x54\x38\x12\x9b\x7e\x02\x70\x23\x42\x1d\xd1\xa4\x3a\xe2\x33\xa1\x16\x5a\x02\x3a\x27\x64\x12\xa7\x69\xca\x91\x49\xac\xa6\xbd\x55\xea\x25\x1a\x33\x39\x8d\x99\x19\x4f\x68\xd9\x07\xb7\x39\x26\xe7\x11\x3b\xb4\xcc\xdf\xca\xec\xf6\xcf\xbb\xd5\x09\x23\x83\x00\x33\x04\x98\x21\xc0\x0c\x01\x66\x08\x30\x43\x80\xd9\x8a\x03\xcc\x7e\xad\xa5\x2b\x83\xf3\x22\xba\xec\x0c\x9d\x72\x45\x97\xb5\x73\x69\x10\x18\x02\xd6\xb6\xd5\x41\xea\xe7\xb6\x3a\xab\x83\x7d\x01\xb1\x65\xfe\x6b\x86\x98\x6f\x6a\xae\x36\x2f\x19\x20\xae\xec\xb5\x85\x0a\xc4\x95\x10\x57\xae\xb1\xb8\xb2\xa3\x84\x2a\x30\xc8\xac\x5d\x53\x42\x3a\x45\x27\xd9\xf1\xe8\x51\x5b\x38\xf9\x98\xa7\x38\xb4\xdf\xf9\x77\x84\xf8\xf2\xfd\x43\x4e\xa0\x59\x5e\x57\x73\x79\x3e\x37\xf8\xd4\x9a\x15\x32\x4c\x29\xb4\xca\xdb\x58\xf6\x05\xf6\xbb\x83\xec\x1f\x6f\xa4\x07\x2a\x4e\xb7\xab\xf5\x7c\x2a\x24\x09\xb8\x4b\x89\x59\xb4\xf6\x1d\xda\xb5\x88\xf9\x80\x22\xc9\xd9\x69\x99\x12\xad\x25\x72\xcc\x61\xc7\x85\xcc\x77\x3a\xd2\xe1\x98\x2f\xab\x8b\x8e\x69\x1c\xf0\xc8\x11\x5c\x6d\xc7\x63\x4f\xdc\x12\x31\x13\x9e\x3b\x92\xc5\x82\x9c\xae\x42\xcf\xb9\x92\x20\xd1\x5b\xe2\xfb\x55\x83\xbf\xdf\x14\x3b\x69\x07\x89\xfa\xbd\x92\xd5\xe5\x3e\xc4\x47\xee\x3c\x19\x48\x3a\x21\xe9\x84\xa4\x13\x92\x4e\x48\x3a\x21\xe9\x84\xa4\x13\x92\x4e\x48\x3a\x21\xe9\x84\xa4\x13\x92\x4e\x48\x3a\x3b\x2d\xe9\x3c\x48\xfb\xd9\xde\x68\xc2\x26\x22\x6f\x74\x53\x15\x67\xc3\xd6\xfe\xfa\x8b\xd0\x82\x42\x0b\x0a\x2d\xe8\x3a\xd2\x82\xbe\x38\x44\x49\x01\x26\x85\xeb\xd4\x09\x05\xaf\xa5\x0c\xd5\xb2\xd9\xbc\xa1\x2f\xf1\x2d\xfd\xc2\x52\x36\xa7\x96\x0d\xf6\xaf\x07\xd9\x57\x37\xd0\x16\xd1\xc4\xd5\xe5\x44\xf8\x1f\x36\x18\x22\xae\x65\x27\xed\xc6\x52\xbc\xb1\x16\x05\x8a\xc7\xf9\x09\xc2\x99\xeb\x71\x1d\x56\x5f\x11\x41\xe3\xfe\x90\xb1\x91\xa0\xee\x1b\x6f\x0a\x06\x8d\x07\xd8\x3e\x09\x1a\xc5\xfb\x61\x39\x0b\xaa\x9f\x84\xd7\x55\x00\xb8\x08\xb8\x08\xb8\x08\xb8\x08\xb8\x08\xb8\x08\xb8\x08\xb8\x08\xb8\x08\xb8\x08\xb8\x08\xb8\x08\xb8\xd8\x59\xb8\xb8\xfe\xe4\x56\xa0\x90\xa0\x90\xa0\x90\xeb\x88\x42\x7e\x67\x0b\x45\x6b\x45\xa4\xbf\x30\x6a\x05\xad\xb0\xcf\x6f\x09\xff\xb0\xdf\x27\xc6\xd9\x3a\xa0\x3a\x43\xb3\x0d\xfe\x62\x8f\xf8\xc7\x38\x9f\x92\xa7\xb6\x38\xe0\xf0\x24\x1d\xa7\xa3\x15\x0a\xfe\x61\x8a\x05\xaa\x76\xed\x7e\xa5\x3f\x14\xa2\x63\x02\xf9\x1d\xa0\x7d\x1c\xf9\xc5\x69\x45\x2d\x88\x8a\xbf\x09\x5e\xf1\xd7\x8e\x41\x5d\x69\x1b\x41\x8c\xf0\x6c\x30\xfe\x1b\x64\xbb\x04\xf0\x73\x5a\xf5\x8f\x6d\x0f\x08\x62\x4d\x23\x8a\xa1\x7e\x14\x43\x1a\xb1\xdd\x35\x62\xbb\x0f\xd0\x3e\x36\x16\xdd\x63\xaf\x60\xee\x77\xbb\x47\xed\xd7\xb2\xfd\xde\x51\xf6\x5b\x83\x14\xb7\xec\x5c\x5d\x2f\x8b\x5a\xcc\x96\xb4\x7c\xb1\x6c\xb0\x5f\x18\x64\x2f\x6f\x70\x6c\xde\x52\x63\x8e\x95\x29\xeb\xfc\x96\xe6\xdd\xad\x8c\xc3\xb2\xaf\x02\x17\xca\x2a\x5c\x28\x8d\xd9\xd0\xca\x58\x0b\x7b\xec\xe1\x34\x81\xd3\x04\x4e\x13\x38\x4d\xe0\x34\x81\xd3\x04\x4e\x13\x38\x4d\xe0\x34\x81\xd3\x04\x4e\x13\x38\x4d\xe0\x34\x81\xd3\x04\x4e\x13\x38\x4d\xe0\x34\xb9\x43\x9d\x26\xff\xb3\x8f\xb6\x0b\xe9\xb6\xfa\xd6\xb2\x5a\xe4\x8f\xca\xce\x23\xc1\xbe\xd9\xc7\xfe\x53\x1f\x31\xe7\x27\x3b\x55\xc4\x03\x39\xb5\xec\x9d\xca\xc5\x2d\xc4\x22\x39\xb5\x3c\x65\x1f\xef\x24\x62\xb0\xb6\x8f\x46\xeb\x9c\x24\x55\x0d\x8d\x57\x35\x34\xde\x48\x43\xe9\x12\x3d\x2d\xa8\xde\x39\x9a\xe1\x54\xef\x14\x4d\x52\xaa\x09\xaa\xe7\xba\xcf\x99\xbc\x11\x88\xf6\xd8\x4b\x43\xa2\x9c\x5a\x9d\x24\xca\x62\xf7\xbe\xa8\x94\xec\x24\x1e\xdf\x1c\x64\xdf\xea\x73\x60\xee\x0e\x9f\xc4\xc9\x13\xfc\xa4\x27\x95\x52\xec\x61\xbf\x64\xc9\xf6\xcf\x2d\x4e\x90\xfc\x4c\x73\xde\x26\xbb\x3b\xab\xc8\x50\xca\x93\x22\x37\x07\x41\x9d\xcb\xbb\x21\x68\xf8\x63\xae\x44\xc8\x8f\xfa\x27\x42\x76\x86\x39\x52\x23\xf9\x71\x9b\x46\xba\x69\xd7\xa0\xdd\x1f\xa4\xf3\x42\x92\xe3\x26\x1d\x61\xcd\x3a\x95\x9d\xef\xac\x79\xa7\x72\xe3\xa6\x62\x25\x4e\x65\x7f\x0b\xd0\xb0\x53\x39\xf6\xb7\xf7\x38\xa6\x82\xd9\x09\x8c\x1d\xeb\xf0\xa8\x7f\xd2\xe2\x76\x19\x07\x24\x2a\x46\xa2\x62\x24\x2a\x46\xa2\x62\x24\x2a\x46\xa2\xe2\x15\x27\x2a\xfe\x5c\x88\xe6\x44\x76\xe1\xb3\x34\xed\xca\x2e\x7c\x8c\x8e\xd0\xe1\x26\x26\x91\xf9\xb2\x52\x5e\x32\x6a\xe7\xa5\x9c\x11\x4b\x89\x29\x9a\xe0\x4b\x89\xd5\x5d\xa6\xf1\x74\xc5\xad\xdc\x2a\xa4\xfe\xe8\x2e\x57\x1d\x9b\x80\x14\xc5\xce\xaa\xe0\x11\xdf\xb4\xc4\x6d\x58\x14\x20\x15\x71\xaf\x2d\x45\x90\x8a\x18\xa9\x88\xd7\x38\x15\xf1\x33\xb5\x4d\xfe\xea\x76\x8f\x0d\xa7\x1f\x6e\xa5\x89\xaf\xaf\xfe\xb4\xcf\xb9\x23\xd2\x0c\xff\xda\x20\xed\x95\x69\x86\x97\xca\x9a\x91\x51\x0a\xf9\x62\xce\x11\x9b\xf2\xa7\x68\x7e\xb4\x85\x92\x96\xb5\x8e\x50\x75\x83\xfd\xed\x00\xfb\xb3\x0d\xf4\x7a\xd7\x49\xe6\x7c\xf8\x62\xa8\x31\xb1\xe9\x19\xbb\xd9\x59\x2d\x9b\xb4\x9b\x6d\x91\xf4\x54\x68\x38\x93\x4e\xd7\x2e\x26\x6a\x5c\x70\x26\x6f\x94\x4f\x69\x7a\xb2\x50\xb0\xe7\xe4\xd6\x21\xeb\x5e\x53\xa5\x2e\x04\x7f\x82\x27\xd8\x31\xf1\xe1\xd5\x78\x1e\x7e\x48\xc6\xf5\x8a\x41\xac\x0a\xb1\x2a\xc4\xaa\x10\xab\x42\xac\x0a\xb1\x2a\xc4\xaa\x10\xab\x42\xac\x0a\xb1\x2a\xc4\xaa\x10\xab\x42\xac\xda\x69\xb1\x2a\xa4\xa4\x90\x92\x42\x4a\xda\xc3\x52\xd2\x6f\x3c\x4f\x53\x92\x1b\x66\xcd\xa5\x6c\x5e\x2b\xfa\x17\x29\x1b\xe5\xbb\x45\xc5\x5c\xa3\xdc\x52\x17\xae\x6b\xda\x4d\xcf\xae\xcf\x60\xef\x7a\x9e\xbd\x34\x40\x0f\xfa\x36\x73\x75\x39\x11\x3e\x2a\x16\x91\xba\x9c\xfe\x2c\xfb\x68\x55\x28\xbb\x68\x37\x7f\x49\x34\x3f\xe1\x6e\x3e\x76\xd8\x3c\x3b\xe9\xd7\xf6\xc5\x44\xfd\x53\xbb\x9c\x03\xa6\x80\xc2\x80\xc2\x52\x40\x61\x40\x61\x40\x61\x40\x61\x3d\x83\xc2\x52\x5d\x83\xc2\x5a\xde\x93\xa6\x51\x58\x0a\x28\x0c\x28\x0c\x28\x0c\x28\x0c\x28\xac\xf3\x28\x2c\xd5\xd3\xe4\x2a\x05\x72\xd5\x3e\x72\x95\xea\x76\x72\x95\x5a\x87\xe4\x2a\xfd\xb6\x10\xe5\x84\x80\xea\x79\xba\xc2\x05\x54\xcf\xd0\x45\xba\x50\x53\x93\xe8\xcf\xb7\x96\x13\xf1\xfa\xf8\xa8\x91\x90\xe0\x1b\x8f\xf8\xeb\xaa\x36\xb1\x8d\x42\x52\xf5\xf7\x82\x25\x55\x97\xd8\xd3\x7e\xa2\xa9\x3a\x50\x4e\x6a\x1f\xeb\x77\x9f\xa2\xdf\xa5\x3a\x50\x6e\x40\x4c\x6b\x11\x25\x88\xbf\x1d\x11\x07\xae\x2d\x81\x13\xc0\xec\x1a\x65\x69\xa1\x42\x98\x3e\x47\xb3\xad\x7e\xf0\x10\xac\x23\xd8\xb6\xc9\x60\xdb\xaf\xf7\x51\x46\x98\xa6\xe7\xe8\x59\x6e\x9a\x78\x74\x67\xab\xdf\x50\xba\x2e\x42\x72\x15\xba\xea\x84\xe4\xb6\xe7\x4a\x79\x11\x5d\xb4\x40\xcf\xbb\xa2\x8b\xda\x73\xa9\xe6\x6d\x6d\x49\x6b\xdc\xd6\xb6\xcc\xbe\xba\x8d\x76\xec\xd7\x47\xea\xd8\xda\xbd\x32\x7a\xcc\x15\x8a\xa7\x5d\x0b\xb2\xbb\x53\xe2\xa4\x1a\x76\x77\xc2\x6e\xaa\xa3\x16\xb8\x3d\xb1\xca\x60\xe0\x60\xe0\x60\xe0\x60\xe0\xbd\xc3\xc0\xb1\xc2\x0c\x58\x61\x76\x8f\x93\x00\x79\x22\x3a\x92\x27\x02\xbe\x18\xf8\x62\xe0\x8b\x81\x2f\x06\xbe\x98\x9e\xf6\xc5\x20\x5d\x10\xd2\x05\x21\x5d\x50\xbb\xd2\x05\xc1\xd5\x09\x57\x67\xaf\xba\x3a\xd3\xb9\xd6\x26\xaf\x0a\xc4\xd5\x31\x7f\x5c\x7d\x1f\xbb\x57\x7c\xcd\x8e\xa5\x5d\x53\x74\xdd\xfa\x8c\x24\xaf\x0e\xd1\x31\x19\x59\x50\x2a\x19\x81\x75\xef\x74\x95\xc3\x67\xd3\xea\x58\x39\x93\x7f\x7a\x88\xfd\xf1\x06\xda\x64\x9e\x7e\x75\x39\x11\xfe\x94\x4c\x4a\xe2\xce\x44\x52\xb4\xd6\x24\x56\x18\xc1\x9c\x68\x66\x5e\x2d\xb7\x24\x09\xc9\xb0\xb3\x05\xe1\xdb\x2c\xb9\x60\x35\x77\x31\xce\xde\x6a\xc0\x43\x0d\x5c\x6d\xc7\x63\x8f\x8a\x14\x26\xa5\x92\xe1\x4e\x17\xe6\x74\xb2\xcb\x83\x13\xd6\x24\x49\x49\xed\x1c\x41\xb7\x44\x8e\xa0\x73\xc1\x9f\xc9\x6e\x36\x64\x7d\x26\xa5\x92\x21\x3f\x07\x67\xd8\x51\x39\x0f\x11\x18\x48\x46\x02\xef\x13\xbc\x4f\xf0\x3e\xf5\xaa\xf7\x09\xc9\x48\x90\x8c\x04\xd4\x1f\xd4\x1f\xd4\x1f\xd4\xbf\x2b\xa8\x7f\xfa\x20\xed\x67\x7b\xa3\x09\x3b\xed\xea\x1b\xdd\xe9\x5a\x9d\xcd\xdb\x9d\x90\xaf\x15\x79\x52\x80\x60\x91\x27\x65\xfd\x44\x9b\xb0\xb7\xed\xa6\x94\xa0\x99\xc2\x21\x53\xa7\xf8\x5b\x49\xcb\x66\xf3\x86\xbe\xc4\x71\xc1\xc2\x52\x36\xe7\x42\x9a\x9f\x8b\xb1\xf7\xf4\xd3\x16\xd1\xc6\xd5\xe5\x44\x78\x97\x4f\x21\xb8\x59\x2d\x3b\x69\x37\x90\xe2\x0d\xc4\x86\xcc\xe3\x84\x27\xc7\x4d\x12\x7d\x0e\x6d\x71\x79\xb8\x2c\x4d\x0b\x02\x98\xa2\x93\x9c\x00\x8e\xd3\x21\x3a\x50\x53\xf5\x2d\x3d\x6c\xcb\x89\xb8\x4f\xd7\x56\x5b\x2a\xee\x4d\xc1\xe0\xef\x00\xdb\x27\xc1\x9f\xe8\x89\x44\x7f\x7e\x9d\xf1\x14\x8e\xfb\xf3\xcd\xee\xa7\x32\xe4\x5f\x3a\xce\xef\xc1\x0c\xcb\x43\xd7\xe0\xd9\xa4\x66\x28\x4d\x67\x2a\x22\x61\x9a\x7e\x38\x50\x23\x22\xde\xa5\xc9\x78\x97\xcf\x84\x5a\x69\x24\xce\x89\xa8\x96\xd3\x34\xe5\x44\xb5\xac\x8d\xd1\x29\x2d\xb5\xd5\xe8\xc4\x7e\x79\x9b\xdb\xe8\xec\xb0\x8b\xd0\xf9\xd9\x99\xdd\xe2\xd7\xb5\x30\x33\x28\x4d\x87\xd2\x74\x77\xae\xe4\x18\x5a\x33\x68\xcd\xa0\x35\x6b\x67\x69\xba\xd6\x0a\x6e\x3a\x59\xe8\xae\xf1\xd2\x74\x8d\xad\x12\x1a\x5b\x17\x78\xd7\x12\xa9\x97\xb6\xba\x57\x09\x63\x01\xa5\xea\xfc\xd6\x0e\x31\x5e\x5c\xa9\xc3\x4b\x07\x14\xb0\xeb\xb5\x05\x0b\x0a\xd8\xa1\x80\xdd\x1a\x17\xb0\xeb\x28\xad\x6a\xdf\xce\x30\xb0\x4e\x5e\xfa\x24\x1d\x67\x47\xa3\xe3\xb6\xcb\xe3\x51\xb7\xaf\xc4\xa7\xf9\x3b\xc1\x69\xc2\xbe\x39\x48\xa3\x02\xc2\x1a\x65\x4d\x57\x72\xaa\x2b\x3d\xb5\x10\x97\x66\x8c\x7c\x56\xcf\x9b\x43\x69\x11\xd7\x97\x07\xd9\x77\x36\x10\xc9\x13\xcc\x19\xf4\x9f\x35\xa2\x23\x9d\x98\x9f\x9e\xe4\x0d\x75\x85\x8c\xf4\x01\x7e\xb9\x79\x71\x0f\x17\x13\x76\xe7\x20\x1f\x6d\x42\x3e\x7a\x29\xf8\xb3\xdd\xc7\xc6\xe4\x67\xeb\x7d\xd1\xac\x72\x93\xd6\xf8\x43\x47\x0a\x1d\x29\x74\xa4\xd0\x91\x42\x47\x0a\x1d\x29\x74\xa4\xd0\x91\x42\x47\x0a\x1d\x29\x74\xa4\xd0\x91\x42\x47\xba\x96\x3a\xd2\xfa\x65\xff\xad\xbd\x5b\x35\x11\x81\xc8\x13\x22\x4f\x88\x3c\x7b\x58\xe4\xf9\x63\xa2\x31\xf3\xd1\xd5\x17\x77\x5a\x68\x71\x74\x21\x5f\xcc\xe6\x8b\x39\xf6\x0a\x45\x3f\xb2\x81\x36\x65\x34\x9d\xf3\xc5\x07\x64\x4e\x6d\xf9\xb3\x30\xbc\xb3\x5a\x36\x26\x67\x9e\x09\x4d\x57\x2b\xbc\x70\x29\x71\x68\x8b\x75\x3b\xc7\xe9\x28\x8d\x57\x38\xc0\x62\x34\x58\x93\x86\x9b\x37\x10\x5f\x4e\xc4\x65\x6f\xd2\x7f\x10\xaa\x09\xdb\xe8\x88\xe0\x7a\xfb\x68\x8c\x73\xbd\x61\x5a\x41\xc3\x74\x52\x28\xbc\x0e\xd3\x41\x47\xe1\xb5\xb2\x16\x92\xc2\x09\x3c\x4e\x87\x5c\x4e\xe0\x15\x35\xd1\x68\x3a\xe1\xe9\x60\x5a\xb8\x8b\x3d\x2e\x69\x61\x34\x2a\x09\xa1\xd5\x4f\x0f\x1f\x84\x03\xb1\xbe\x03\x31\x0d\x81\x65\x0d\x81\xe5\x3e\x1a\x63\x7b\xa2\x71\x7b\x45\x73\x9f\x7b\x45\x23\xdf\xb5\x3b\xc2\xc3\xf3\x37\x7d\xf4\x88\x95\x34\x24\xaf\xbe\xb5\xac\x16\xf9\x7c\xe9\xf2\xf3\xb0\xdf\xef\x63\xff\xa1\x8f\xb6\x79\x7e\xe7\x66\x37\xa7\x96\xbd\xbb\x24\x31\x8f\xc4\x1e\xc9\xa9\xe5\xa4\xfb\xe8\x8b\x89\xe4\xec\xb4\xc5\xe5\x8c\xd6\x19\xdd\xaa\x86\xc6\xab\x1a\x1a\x6f\xa4\xa1\x74\x89\x9e\x16\xe6\xf5\x1c\xcd\x70\xf3\x7a\x8a\x26\x29\xd5\x84\xdb\xc4\x75\x9f\x8d\xd4\xb1\x60\x9f\xbd\x42\xbb\xed\xe1\xaf\x51\x07\x56\x32\xf2\x7c\x46\x35\xd8\xcf\x5c\x61\x9f\xdf\x45\xac\xe2\x60\xf3\x69\x0c\xd6\xaf\xf6\x9a\x9c\x9d\x9e\x17\x8d\xc4\x1e\xe5\x95\x5d\xbd\x2d\xf0\x27\x24\x0f\xe8\x72\x1f\x17\xea\xb7\xc2\xeb\x83\xfa\xad\xf0\xfa\xc0\xeb\x03\xaf\x4f\x0f\x79\x7d\xba\x28\x35\x7b\xd7\x78\x7d\x90\x33\x1c\x5e\x1f\x78\x7d\xe0\xf5\x81\xd7\x07\xf5\x5b\x91\xd4\xf8\xce\x71\xb6\x74\x7d\x52\xe3\x75\x59\xbf\xf5\x05\x5a\x10\x90\xeb\xcd\xf4\x26\x0e\xb9\xe6\xe9\x29\x3a\xef\x0b\xb9\xcc\xf7\x60\x44\xc9\xe5\xcc\xc1\x2a\x6b\xba\xc3\xb9\x2a\x29\x95\x40\x5e\x12\x1c\xb5\xa4\x72\xeb\xf3\xc1\xf8\xff\x18\x3b\x62\xe7\x9a\xf5\x83\x66\x1e\x27\x80\x70\x0f\x38\x9d\xa4\xe8\x3b\xc8\x17\xa0\xbd\xc1\xaa\xcc\x5a\x74\xc3\xb2\xc7\x64\x19\xd6\x0e\xe0\x32\x41\xb7\x14\xba\x4a\x97\x2b\x7c\x48\x4f\xd2\xd9\x16\x3e\x26\xc4\x55\x21\xef\x44\x93\x6e\x91\x2f\xf6\xd1\x15\x61\x43\x2e\xd1\xd3\xdc\x86\x9c\xa7\xd6\xbe\x9c\xa2\x8e\x6b\x82\xd7\x71\xb5\x5d\x95\x2d\xbf\x48\x56\x78\x33\x2f\xd3\x9b\x5d\xde\xcc\x96\x5f\x65\xb5\x85\x55\x1b\x33\x85\x55\x06\xae\x71\xdb\x18\xfb\xde\xb0\xaf\x29\x7c\xd4\xb7\x70\xaa\xcb\x2a\xca\xdc\x18\x55\x56\xd1\x29\x8f\xda\x36\xfb\x88\x52\xa8\xc0\xc9\xc0\xc9\xc0\xc9\xc0\xc9\x28\x85\x8a\x52\xa8\xc8\x4b\x84\x52\xa8\x70\x6b\xc0\xad\x01\xb7\x06\xdc\x1a\x70\x6b\xb4\xc4\xad\x81\xf4\x74\x48\x4f\x87\xf4\x74\x28\x85\x0a\xaf\x21\xbc\x86\x3d\x54\x0a\xb5\xed\x7e\xb7\xd6\xc7\x2e\xfc\x8b\x7b\xe9\x31\x3b\x7a\x4c\xcb\xaa\x76\x9c\x58\x49\xd7\xde\x7a\x7b\xf4\xef\x97\x94\xf2\xf5\x17\xd8\xcf\xdf\xcb\xde\xdb\xe7\x04\x8b\x3d\x91\xd1\x8a\x45\x73\x25\x71\x7a\xea\x82\xa3\x10\x2f\x6b\x11\x7e\x92\xf9\x74\xcf\x69\x59\x35\xf6\x98\x3c\x4c\xc4\x8e\x9d\x56\xcb\xe6\x5f\x67\xcd\x43\x2e\xe5\xcb\xd7\x67\x95\xf2\xf5\xb1\xfe\xd8\x68\x4c\x64\x5d\x3a\x48\x3b\xc4\x73\xbd\x9f\xee\xe3\xcf\xf5\x6e\xba\xeb\x57\x43\x9b\x49\xf6\x35\xf0\x39\x3d\xe6\xff\x9c\x88\x6d\x96\xbd\xa0\x1b\x73\xc1\x8f\x67\x94\x8d\x54\x46\x45\xd9\x9d\x96\x9c\xdb\x9b\x82\xdf\x77\x58\x66\x9f\x6e\x7c\x58\x66\x97\xda\x3a\x2c\x6d\xb8\xe7\x06\x86\x3a\xfa\x7e\xd7\xb0\xec\xb2\x87\xe5\xfc\x7c\xbd\x71\x89\x7a\xc7\x45\x33\x02\x06\xa6\x66\x98\x5f\xdd\x11\x5b\xdb\xf7\x25\xf6\x8b\xae\x81\x19\xb4\x06\x66\x72\x6a\x66\xea\xc2\x54\x9d\xa1\x79\xdc\x33\x34\xc2\xed\x72\xe7\x7d\x4c\x63\x1f\x72\x0d\xce\x90\x35\x38\xe7\x67\x2f\x4c\x9f\x3f\x37\x5f\x67\x74\x9e\xf0\x8c\x8e\x6c\xf9\xce\x1b\x9e\x71\xdf\x8f\xea\xcc\x54\x72\xb2\xe1\x8f\xea\x8c\xaa\x64\xd7\xde\xda\x34\x70\xaf\xce\xc0\x34\x30\xd8\xa9\x0f\xb8\x06\x66\xc0\xb6\x36\xc9\x0b\x13\x67\xea\x8c\xcc\x4e\xaf\xb9\x31\x97\x33\x77\xde\x3b\x93\x3e\x46\x47\xd8\xe1\xe8\x41\x3b\x9c\x72\x87\x3b\x08\xb3\xf2\xd4\xea\x68\xcc\xfd\xb4\x97\x25\xa2\xa3\xf6\xe9\x6f\x30\xff\x6b\x49\xb2\xac\xb5\x64\x94\xff\xe6\x3e\x6d\x81\x9e\x67\x57\xc2\xcf\x59\xcb\x94\x94\x39\x96\x9c\x4c\x5d\x57\x23\x4f\xcf\xcd\x44\xac\x56\xcc\xfd\xbf\xb5\xaa\xcc\x2c\xe9\xba\xb9\x7b\x17\x4f\xc9\xda\x8f\x94\xb5\x88\xb9\x2c\x89\x8b\x6b\xb8\x57\x2e\x9f\x1e\xa4\x21\x6b\xe5\x52\xb7\x48\x7b\x49\xcb\x1a\xec\x27\x07\xd9\x2f\xb8\xc2\xdd\x35\x09\xcb\x8a\xd9\xfc\x72\x3e\xbb\xa4\x14\x3c\x89\x35\x6d\x30\x3d\xab\x65\x5b\x92\x4a\x33\x1e\xdb\xc1\x4f\xf0\x89\xa2\x9f\xc9\x1b\xeb\xa0\xa0\x7a\xcd\xb9\xb6\xe5\xa9\x32\xad\xef\x65\xa7\xff\xf7\xb2\x95\x11\xef\x98\x10\xba\x4d\x05\x7f\x31\x51\x16\xa9\xfc\x62\x66\xb5\x2c\x72\x60\x22\x1a\x12\x39\x30\x21\x5f\x81\x7c\x05\xf2\x95\x5e\x95\xaf\x20\x07\x26\x72\x60\x42\x36\x00\xd9\x00\x64\x03\x90\x0d\x74\x85\x6c\x60\x1d\xe6\x7e\x42\xb6\x4c\xb8\x62\x91\x2d\x73\xfd\x04\x70\xb2\xaf\x0d\xd1\x71\x2b\x59\x58\xc9\x08\x64\x87\x46\x59\x29\xab\xd7\x96\x0a\x86\xab\x1c\xfa\xbb\x86\xd8\x77\x36\xd0\x26\xf3\xfc\xab\xcb\x89\xf0\xaf\x36\x52\x99\x67\x5e\xb6\x33\xaf\x96\xbb\xa2\x36\x8f\x98\xf5\x93\xa5\x92\xe1\xc6\x91\xae\x5e\x76\x3f\x92\xec\xc2\x22\x3d\xe7\x83\x71\xe4\x30\x8b\xd9\xfe\xff\x92\x21\x81\xa4\x6b\xdc\x01\x26\x01\x26\x01\x26\x01\x26\x01\x26\x01\x26\x01\x26\x01\x26\x01\x26\x01\x26\x01\x26\x01\x26\x01\x26\xd7\x12\x4c\x1e\xa2\x03\x6c\x5f\x74\xcc\x06\x93\x0f\xb8\x55\x54\xae\xdd\xdb\x9d\x90\xce\x1e\x48\x13\x48\x13\x48\x73\x1d\x21\xcd\x97\x06\x29\x2e\x90\x66\x46\xd3\xf4\x6c\xbe\x58\x51\xfc\x60\x41\x2d\x2b\x16\xe6\xe4\x61\x97\x06\xfb\xbf\x06\xd8\xd7\x37\xd0\x1b\xdc\xc7\x5f\x95\x07\x86\xdf\xd2\x98\x34\x72\xc6\x6c\xa9\x45\xe2\xc8\x84\x14\x47\x3a\xbd\xb9\x28\x3a\xc3\x2f\x32\x93\x37\xca\xa7\x34\x3d\x59\x28\xd8\xa4\xb2\x75\xf5\x2f\xee\x20\x3c\xd9\x90\x62\xf2\x72\x30\xa2\x1c\x67\x87\x24\xa2\xf4\x79\x9f\x24\xb1\xe4\x0f\xc6\xcd\x2a\xf9\xe3\x02\xb0\x04\xb0\x04\xb0\x04\xb0\x04\xb0\x04\xb0\x04\xb0\x04\xb0\x04\xb0\x04\xb0\x04\xb0\x04\xb0\x04\xb0\xec\x34\xb0\x04\x14\x04\x14\x04\x14\xec\x61\x28\xf8\x13\x31\x3a\x23\xa0\xa0\x48\x40\xd5\x48\x94\x74\x36\x6f\xe8\x4b\x7c\x67\xbe\xb0\x94\xcd\xb9\x14\x8f\x9f\x1e\x62\x2f\x6e\xa4\x2d\xa2\xa5\xab\xcb\x89\xf0\x67\x1b\xd1\x3c\xce\x6a\xd9\x49\xbb\xc5\x14\x6f\xb1\x2b\xb4\x8f\x31\x7e\x39\x91\x55\xab\x22\x18\xbb\xb2\xbf\xc0\x8c\xd5\x98\xf1\x4d\xc1\x04\xf1\x00\xdb\x67\x47\x5a\x57\x0e\xa9\x5f\x9a\x07\xf1\x62\x51\xa0\xc0\x12\x78\x11\x78\x11\x78\x11\x78\x11\x78\x11\x78\x11\x78\x11\x78\x11\x78\x11\x78\x11\x78\x11\x78\x11\x78\xb1\xc3\x78\xf1\x24\x1d\x67\x47\xa3\xe3\xb6\xaa\xf1\x51\xb7\x1e\xd2\x67\xd3\x07\x5d\x24\x10\x28\x10\x28\x10\x68\x47\x11\xe8\x9f\x0d\xd1\x8c\x40\xa0\xfa\x82\x92\x89\x5b\x24\xab\x42\x1d\x59\x9f\x8a\xea\x5a\xc1\x4e\x89\xcd\x3e\x3c\xc4\x7e\xbc\x81\xde\x60\xb6\x96\x74\x37\x76\x75\x39\x11\xfe\xdf\x1b\x21\xa2\x73\x5a\xa1\x35\x92\xc9\xd5\x22\xd0\x5d\xfc\x72\x73\x95\x37\xe2\xa6\xa1\x66\x5f\xbb\x1f\x7f\x76\x3e\x2f\x65\x63\x02\x4a\x81\x3f\xcd\x31\xf4\xe3\x9d\x35\xdf\x47\x20\x50\x20\x50\x20\x50\x20\x50\x20\x50\x20\x50\x20\x50\x20\x50\x20\x50\x20\x50\x20\x50\x20\x50\x20\xd0\xae\x43\xa0\x09\x1a\x65\x23\xd1\xdd\x36\xc0\xdc\xe6\x46\xa0\xe6\xc6\x0f\xcc\x13\xcc\x13\xcc\x13\xcc\xb3\xa3\xcc\xf3\x0b\xb2\x28\x8e\x31\x6a\x94\x35\x5d\xc9\xa9\x2e\xd0\x99\x31\xf2\x59\x3d\x6f\x3e\x40\x0b\x68\xbe\x34\xc8\xfe\x7b\x1f\x91\x3c\xf4\xea\x72\x22\xbc\x43\x57\x95\x6c\xc5\x46\x78\x62\x7e\x7a\x92\x9f\x17\x7b\xa3\xf9\xeb\xbc\x38\xfa\x62\xc2\xfe\x7b\xcb\x30\xa1\xa0\x7a\x6f\xa6\x93\x02\xde\x1d\xa6\x83\x1c\xde\x25\x68\x94\x46\x6a\xc1\xbb\xb8\x75\xa3\xcb\x89\xb8\xdd\xa3\x40\x11\xe3\xc3\xfe\x98\xed\x75\x6c\x43\x4e\x2d\xd3\x8d\x4b\xc1\x90\x6f\x1f\x1b\x93\x34\xcf\x3b\xd2\x32\x40\xda\xe9\x8a\xa7\x5c\xe0\xbf\xdc\xec\x19\xee\x47\x75\xb5\x54\x50\x32\x6a\xcd\x11\xdf\x2e\x0f\x68\xf7\xa0\xa7\x26\x28\x49\x27\xd8\x86\x05\x2d\x7b\x3b\xcc\xff\x1b\x09\xc5\x56\x3a\xea\xa9\x5f\xea\xa3\x0f\xf6\xb1\x0f\xf4\x85\xdf\x67\xdb\xcb\x1f\x86\x2e\x99\x13\x8f\x9c\x86\x87\x79\x5a\x81\x8c\xb9\xd9\x16\x06\xce\xb3\xf5\x73\xe3\x40\x51\xb0\x98\x2f\x54\xb2\xf1\x48\xb2\x18\xc9\x17\x05\x74\xd1\xf4\xc8\x52\xd1\xe6\x36\xd9\x48\x56\xbf\x3d\xb7\x54\x8c\x64\xf3\xba\x6a\x7e\xd5\xaa\x0d\x03\xcc\x39\x9d\x2f\x9a\x24\x0d\xb1\xf6\x3e\x72\xff\x19\xb9\xb6\xa4\xf3\xf5\x75\x49\xd7\x32\xaa\xc1\x57\x37\xd2\x88\xc8\x19\x2a\x1e\xb9\xc8\xaf\xe8\xae\x30\x3c\x12\x49\x16\x0a\xe3\xa2\x80\xaf\x7e\x3b\xa2\x2f\x15\xcd\x7d\xb1\x69\x06\xec\x32\xcb\xa2\x39\x35\x1b\x7d\x9d\xe8\x9a\xbb\xba\xea\xfb\xfb\xe8\x3d\x7d\xec\xe7\xfa\xc2\xef\xb2\x07\xe8\x7b\x21\xbe\xdc\x7d\x52\x29\x2a\x39\x55\x17\x1b\x37\xb1\x20\x30\x0c\x2d\x93\xe7\x6b\x11\x7b\x8b\xa4\xf0\x3d\xa6\xa6\x47\xcc\xa5\x6a\xf9\xb6\xbd\x38\x5b\x54\x6e\x9a\xfd\x2f\x5f\x57\x0d\xd5\x32\x4c\xa2\x4c\xb3\xd8\x74\x71\x7e\xb3\xa0\x46\xb8\x49\xe4\xdb\x21\x4d\x8f\x24\xc6\x0e\x99\xc7\xea\x4a\x86\x53\xb6\x82\x56\xcc\x09\x33\xc4\xb7\x2c\xe6\xea\x52\xc9\x17\xc5\xea\x80\x6f\x09\x9c\x63\x39\x79\x90\x0c\xd0\xdc\xc8\x5a\x53\x4b\x4e\x2b\x28\xc5\x5c\x5c\xd3\x73\xa3\xa5\x9b\xb9\xd1\xa5\x62\x3e\xa3\x65\xd5\xd1\x9d\xd3\xc6\xac\xd9\x4a\x3c\xba\xd5\x7d\xaf\xee\xc9\xe0\x23\xa1\x16\x7c\xf4\x53\x66\x0b\x09\x76\x9c\x8e\xd2\xa6\x09\xb1\xfe\xee\xac\xed\x28\x2d\xb5\xd1\x76\xc4\xfe\xc7\x3d\x1e\xdb\xc1\x64\x75\x6a\xc5\x65\x2e\x1e\x14\x7f\x6b\xbb\xb5\xb8\x40\x73\x34\xeb\xb6\x16\xb1\x14\x9d\x6c\xc2\xbd\x22\x2a\x59\xca\xea\x73\x30\x1f\x41\xe6\xe3\xdb\x7d\xf4\xad\x3e\xf6\x87\x7d\xe1\x3f\xb0\x07\xe8\x53\x7d\x17\xdc\xcb\xa0\xbc\xb9\x1a\xe7\x4b\x99\xc8\x82\x7a\x4d\xf8\x69\xec\x4d\x91\xe3\x0c\x90\xfb\x50\xde\x45\x97\x79\x28\x6a\xc5\x91\xa2\x9a\x53\xf8\x40\xc8\x95\x90\xdb\x8c\x08\x3c\x62\x3f\x02\xf9\x02\xe6\x17\x17\xd5\xac\x69\xa8\x0a\xb7\x1d\x07\x8a\x03\xcd\xf3\x85\x61\xb9\x40\x12\x35\xdc\x73\xba\x39\xe1\x95\x54\x3d\xaf\x65\xed\x85\x9e\x33\xf7\x71\xdf\x94\x35\x1a\x4b\x86\xd9\x49\xf7\xe2\x52\x31\xcf\xb4\x6e\x48\x5e\xe4\x9a\x00\x05\x56\x13\x71\xd1\xcf\x45\x55\x29\xfa\xf6\x31\xca\x78\x17\x66\x79\x0f\x7c\x16\x7e\xa9\xdf\xe9\xa3\xd7\xfa\xd8\xab\x7d\xe1\x57\xec\x61\xfe\x70\xdf\xa4\xcb\x6b\x5b\xe2\x69\x74\x6c\xaa\x53\x55\xe3\xdf\xe3\xd8\xb1\xee\xc5\x71\xfb\x9a\x4f\x29\x11\x3f\x18\x8f\xcc\x8b\x07\x52\x76\xd7\x97\x77\x00\xa1\x2a\x8b\xd8\x5b\x8e\x26\x7d\x49\x1d\xbd\xa6\x14\x2c\xa0\x1e\x15\xbf\x46\x5d\xf5\xf5\xad\x4b\x29\x59\xbe\x83\xd0\x46\xc5\x82\x32\xeb\xd0\x5a\xd1\xf8\x80\x11\x71\x95\xdd\x37\x17\xd9\xf1\xc8\x54\x9e\xbf\xce\xae\x8e\x6b\x7a\xf5\x9d\x39\xbb\xb6\xb2\x20\xe8\xfc\x63\xd3\xca\xd7\xe3\xd1\x6d\xa2\x3f\x93\x76\x5d\x7b\xf7\xc2\x34\xf5\x8e\x0d\xf4\x93\x1b\xd8\xdb\x36\x84\x7f\x6c\xbb\x2d\xbf\xd1\x7f\x49\x22\x2e\xf3\x93\x32\xb7\x4d\x15\x45\xf8\xcd\x17\xda\xfe\x2e\x54\xfd\x9a\xa6\x2f\x9a\x63\xe1\xdb\xd3\xf3\x15\x17\xaf\xdd\x51\xfe\x3e\x5b\x2f\xa3\xac\xce\x9f\x37\x5f\x94\x4c\x3e\xeb\xb0\x6a\x8e\x3d\xb9\xe7\xc0\x1e\x5d\x73\x23\x25\xa1\xa0\x05\x36\xe3\xae\x61\xb4\x90\x98\xbd\x55\xb2\x9d\x95\xde\x8b\xc5\x23\xc9\x8c\xb9\xab\xe2\x73\xaa\xdb\x38\x0c\x88\x7b\x18\x88\x8c\xc8\x07\xef\x7d\x31\x8c\x23\x91\x81\x94\x92\xb9\x69\xce\x1c\xc5\xac\x79\x14\xf7\x12\xf2\x83\x2a\x06\x4e\x70\x68\xf9\xea\x7b\x1b\xb1\xee\x60\xc1\x6e\xe9\x48\x64\xe0\x94\xa6\xab\xae\x66\x23\x19\xc5\xc8\x28\x59\xf3\xee\xe5\xf8\x08\xbf\x30\x6f\xcf\x10\xd6\xab\xaa\xc1\x6b\x76\x1b\xf1\xe8\xbd\xa5\xca\xf7\xc6\x3d\xd7\xff\x72\x2b\xe6\xfa\x53\x66\x0b\x63\xec\x04\x1d\xa3\xcd\x62\x3c\xdb\x33\xd9\x47\xfc\x27\xfb\x2d\x6c\x93\x18\x8e\xf6\xcd\xf7\xa9\x3f\xb9\xcb\x33\xdf\x0f\x96\x14\xbd\x9c\xe7\x3e\x45\xb1\x67\xac\xb9\x69\x78\xa0\x64\xee\x0b\xdb\xb9\x08\x78\xa8\xb2\xa1\x11\x7e\xc9\xdd\xe6\x3f\xc7\x77\xb8\x7f\x5c\x54\xf5\x9c\xea\xfe\x75\x97\xfb\x57\x5e\xfc\x5e\xcd\xe5\x33\x23\x55\xc7\x79\x5a\x31\xff\x7d\x5b\xfe\x6a\xf6\x32\x75\x8e\x66\x28\x5d\xb1\x5d\x19\xa7\x43\x4d\x2c\x41\x78\xe1\x5f\x2c\x3d\x82\x96\x1e\x9f\xec\xa7\x8f\xf7\xb3\x97\xfb\xc3\x1f\xb5\xed\xf7\x8b\xfd\xbd\xb3\x73\xa9\x70\x4c\x98\xe3\xcc\x1d\xed\xdc\x79\x66\xbe\x9c\x8e\xdc\x66\xb0\xc6\x8b\x3b\xc4\xa7\x21\xa1\xcb\x50\x0a\xfc\x4c\x73\xbd\x25\xce\xe6\x47\xf0\xb5\x8f\x11\x19\x4c\x1b\x5a\x71\x56\xe8\x4e\x9e\x34\x3f\x0b\xf9\xef\x79\xeb\x63\x71\xfe\x38\x54\x7b\x4b\x95\x7a\x2d\x44\xaf\x86\xd8\x2b\xa1\xf0\x97\x6c\x7c\xf5\xb1\xd0\x29\x4d\xcf\xf0\x65\x59\x4e\xe3\xc3\xae\x45\xa2\xd7\xcc\x3f\x45\x23\x49\xcf\x5d\x70\x30\x29\x56\x50\x4b\x86\xe3\x61\x1f\x51\x32\xfc\xc6\xb9\x6e\xa1\x90\xcf\xc8\x19\x52\x2d\x64\x8d\x88\x76\x4b\x8e\xa9\xf0\xeb\x97\x54\xad\x54\x50\xe3\x11\x71\x45\x2e\x14\xb2\x9e\x25\x07\x84\xbe\x03\x60\x5f\x3e\xba\x91\x77\xcb\x23\x7a\xe9\x04\x17\x6a\x97\x31\xaf\xa3\xeb\x2a\x09\x5d\xd7\x01\xda\xc7\xc6\xa2\x7b\x6c\xe7\xc0\xfd\x6e\x7f\x82\xdd\x68\xb5\x53\xa1\xd5\xc8\x9f\x7d\x7b\x88\xc6\x6a\x20\x44\x91\x49\x52\xfe\x39\x53\x50\x0c\xc3\x11\x47\xfe\x1f\x43\xec\x9d\xfd\x74\x8f\x33\x61\x89\x6c\x92\x8f\xfa\x00\x45\x39\x33\x4d\x98\x0d\xc4\x1e\xf1\x30\x45\x7e\x92\xfb\xf7\x16\xb3\xc5\x0c\x9d\x11\xef\x50\x92\x4e\xf0\x77\xc8\x7c\x97\xf6\x37\xf0\x0e\xf1\x8e\xc5\xdd\x3d\x5b\x2d\x63\xbc\x1a\xfc\xaa\x1d\x65\xe3\x55\x29\x16\xeb\xbd\x7b\x9e\xee\x85\xbf\xbb\xb9\xfa\x71\x44\xfd\x81\xa3\xe7\x89\x3c\x56\xc9\x1c\xdb\xfc\x50\x52\x67\x69\x9a\x4e\x57\x4c\xe6\xcd\x3e\x15\xcc\xe4\x60\x90\x4d\x32\xc8\x5f\x0d\xb5\xd0\x38\x3c\x29\x58\xe4\x29\x9a\x74\x58\x64\x1b\x6d\x4d\x63\xc6\xa4\x61\xdb\x51\x65\x75\x02\xa0\x67\xec\x7d\xdb\xaa\x6d\xcd\xfd\x36\xa0\xf4\x98\x97\x48\x05\xa3\x6c\xb7\x75\x01\xab\x04\xab\x04\xab\x04\xab\x04\xab\x04\xab\x5c\x31\xab\xfc\x74\x2b\xd7\x04\xe7\x04\xb3\x3c\x4d\x53\x2e\x66\xd9\xc6\x45\x41\x30\xbb\x6c\xf7\xb2\x21\xf5\xb3\x5b\xab\xd7\x05\xbb\x03\x40\xa6\x67\xb5\xf0\xa8\x97\x65\xb6\x71\xb1\x00\xa6\xd9\x6b\x4b\x14\x30\x4d\x30\xcd\x35\x66\x9a\x9d\xe4\x51\x6d\xdf\x23\x06\x32\xce\xc3\x74\x90\xed\x8f\xee\xb5\x19\xe7\x83\xde\x32\x5a\x4e\xe3\x1d\xc0\x9c\xaf\x0c\xd1\xbe\x51\xa5\x94\x1f\x5d\x4e\xd4\x0c\xfe\x96\xab\xa3\xb7\x2c\x69\x65\xc5\x06\x9d\xff\x78\x88\xfd\x59\x1f\x6d\xca\x68\x3a\x77\xcb\x45\x7c\x00\xa7\x15\x8e\xf7\x94\x79\x62\xec\x31\xf3\x88\x09\x4d\x57\x3d\xe1\xd5\xee\x43\x5a\x0c\x39\x9f\xa3\xa4\x78\xa9\xc6\xe9\x10\x7f\xa9\xc6\x68\x0f\xc5\x6b\xbe\x54\xe6\x9d\x98\xb3\x86\xa7\x4b\xab\xa5\x9b\x8d\x95\xc2\x96\x61\xd2\x9e\x0b\xfb\xc4\x4b\x47\xa3\x14\xfe\xc2\x66\x67\xcc\x77\xfa\x53\x4c\xef\xb0\x3f\x2e\x0f\xea\xe0\xc8\xa7\x26\x29\x45\x27\x2b\xa6\xf0\x15\x0f\x3d\x26\x6e\x20\xcc\x26\x11\xe6\x3f\x0d\xb5\xe2\xd3\x3f\x25\xd8\xe5\x09\x3a\xe6\xb0\xcb\x76\x98\x90\x15\x95\xcb\x8f\x46\x29\xc8\x5a\x04\x41\xca\xef\xdf\xe3\x98\x90\x37\xda\x70\xd2\x6b\x35\x76\x8a\xbf\x77\xd2\x68\x00\x50\x02\x50\x02\x50\x02\x50\x02\x50\x02\x50\xae\x18\x50\xfe\xaf\xa1\xda\x39\x90\x5a\xb0\x14\x38\x2d\x90\xe5\x49\x3a\xee\x42\x96\x4d\x34\xd4\xb6\x29\x3f\x90\x71\xa6\xfe\xf4\x2e\x67\xd6\x1f\x0e\x40\x8f\xde\xb5\x40\xb4\x24\xca\x92\x76\x64\x29\x00\xfc\xd8\x6b\x0b\x10\xe0\x47\xe0\xc7\x35\xc6\x8f\x1d\x21\x45\x41\x58\xb0\xe5\x93\x42\x7a\x9c\x0e\xb1\x03\xd1\x7d\x36\x67\xdc\xee\xc9\xcd\xe0\x3e\xef\x4e\x48\xd2\xc0\xbe\x7f\x17\x1d\x09\x40\x99\x86\xaa\x2f\xe7\x33\xaa\x92\xc9\x68\x4b\x45\xbb\xb0\xcf\x28\x4f\xb3\xc5\x3e\x7d\x57\xf4\x1d\x1b\x5d\x44\x53\xe4\x2e\x91\x39\xb8\x78\x46\x8f\x79\x71\x7a\x52\x9c\x1e\x1b\x12\x47\x54\xce\x8c\xde\xa3\x2e\x98\xa7\xb7\x78\xab\xfc\x24\x9d\xa5\xe9\x8a\x39\xea\x30\x1d\xac\xf9\xc2\x9a\xcf\x4a\x64\x75\x31\x7f\x32\x5f\x5d\xde\xab\x39\xf1\x4d\xa4\xdf\xd1\x47\x69\xf1\xfe\x4f\x50\x92\xbf\xff\x47\xa8\xf9\xe6\xe8\xbc\xe0\x26\x67\xe8\x94\xc3\x4d\x56\xd5\xe0\xac\x58\x7d\x4d\xd3\x69\xd7\xea\x6b\x55\x2d\x06\x7d\xab\x8f\xf8\x7f\xab\x9b\xd8\xc6\x92\x66\x94\xe9\x86\x12\xfc\xa9\x1e\x67\x47\xe5\xa7\x5a\xd1\x17\x8f\x2b\xc1\xd3\x2b\xcf\xc7\x8b\x75\x43\xfd\x75\x43\x1a\xf4\xb3\x06\xfd\xac\xeb\x5e\x72\xbf\x70\x77\x84\xd5\xff\xcb\xed\x74\x42\xe8\xf4\x95\x52\xc9\xa8\x67\xfb\xcb\x4a\x59\xbd\xb6\x54\x30\x9c\x8a\x6e\xfc\x6f\x4b\x06\xfb\xd4\x76\xf6\x3f\xfb\x68\x93\xd9\x00\x0f\x31\xe3\xbe\x2c\xf1\x9b\x35\x6e\x6e\x5d\x86\x68\x67\x5e\x2d\xc7\x9e\x30\x8f\x4c\x96\x4a\x86\xc7\xfe\x3b\x07\xcc\xf3\x36\x5a\xec\xd7\x7a\x96\x4e\x08\x6b\x7d\x88\x0e\x70\x6b\xbd\x87\xe2\x34\x5c\xdb\x14\x96\x4a\x86\x69\x00\x5d\xdd\x6a\x11\x92\xb6\xbc\xa1\x4e\xbb\x3e\x4e\x2b\xf3\xf2\xf5\x90\x74\x4e\x2d\x53\xf8\xcb\x9b\x9d\xd1\xdf\x6d\x79\xb5\x1a\x79\x00\x83\xf2\xe0\x0e\x3f\x83\x54\x8a\x4e\xd2\xf1\x8a\x19\x78\x85\x0f\x01\x3b\x43\xf8\xb7\x9a\xb4\xf0\x1f\x0e\xad\xde\x04\x4c\x8a\x55\xda\x31\x3a\xe2\xac\xd2\x5a\x6f\x48\x02\x92\x84\xac\x68\xcb\xc3\x2d\x49\x7d\x9b\x93\xfa\xd1\x5d\x8e\x21\xd9\x57\x45\xb9\x1a\xb1\x28\xbb\xf8\x6e\xac\x83\xf6\x04\xc4\xab\xd7\xec\x1a\x88\x17\x88\xd7\x1a\x13\xaf\x67\x6b\xbb\x4b\x56\x3b\xb3\xb4\x87\x77\x35\x60\xfc\xd3\x87\xe8\x00\xdb\x17\x1d\xb3\x77\x2f\x0f\x78\x75\x75\xf6\x59\x77\xc4\xbe\xe7\x3b\xdb\xe9\x78\x43\xfb\x1e\x73\x85\x9c\xcf\x28\x3e\xdb\x9e\x8f\x6c\x67\x3f\x70\x6d\x7b\x06\xea\x6e\x7b\xe6\x44\x33\xe6\x14\xf9\xb8\xdf\xae\xc7\xf9\xbd\x2d\x9b\x9e\x37\xd1\x71\xf1\x5e\x1e\xa4\xfd\xfc\xbd\x1c\xa5\x11\xda\x1d\xf8\x5e\x3a\xbd\x5a\xad\x92\xef\x5c\xf0\xdb\xba\x9b\x0d\x55\xbf\xad\xae\x1e\x78\x52\x20\x7e\xc1\xb5\xe5\x89\x05\x6d\x79\x5c\x83\x3f\x50\x63\xc7\xd3\xde\xf1\x4f\xf1\xca\x31\x15\x8b\x84\x95\x3d\x00\xac\x0b\xb0\xdf\x69\x72\xbf\xf3\x4b\x75\xbc\xfb\xab\x35\x0b\x13\x62\x1f\x74\x94\xc6\x9d\x7d\xd0\x4a\x1b\x69\x70\xb7\xd3\x62\x13\x92\xfa\x2b\xd7\x66\x67\x6f\xc3\x9b\x1d\x97\x2d\x79\xc2\x77\xaf\xd3\x3e\x4b\x82\xad\x4e\xaf\x99\x34\x6c\x75\xb0\xd5\x59\xe3\xad\x4e\xfb\x57\x8e\x2d\xb6\xeb\xc1\x01\x44\x07\x69\x3f\xdb\x1b\x4d\xd8\xdb\x95\x37\x7a\x1d\xfb\x56\xab\x77\xc4\x3e\xe7\xeb\x97\x69\xaf\xd8\xe7\x2c\xf0\x0a\x95\x56\xfa\xa5\x1a\xbb\x9d\x8c\xae\x15\x6f\x68\x0b\x06\xfb\xe0\x65\xf6\xce\x5d\x74\x37\x3f\xc9\x8e\xb9\x7d\x42\xd4\x21\xd2\x65\x05\x15\x4b\x16\x6b\x15\xa6\x9c\xd0\xb5\x62\x5a\x5b\x88\x3d\x66\x1e\x96\x32\x0f\x91\xa1\xb6\xce\xe4\x28\x0f\xe9\xf2\x92\x90\x29\x94\x47\x44\x79\xc4\x14\xca\x23\xa2\x3c\x22\xca\x23\xa2\x3c\x62\xcf\x94\x47\x4c\x75\x4d\x79\xc4\x96\xf7\xa4\xe9\xf2\x88\x29\x94\x47\x44\x79\x44\x94\x47\x44\x79\x44\x94\x47\xec\x7c\x79\xc4\x54\x4f\x17\x0e\x4c\xa1\x70\x60\xfb\x0a\x07\xa6\xba\xbd\x70\x60\x6a\x1d\x16\x0e\x4c\x3f\x2f\xaa\x67\xed\xe1\xd5\xb3\xfa\xce\x9f\x65\x07\x68\x1f\x8d\xd5\x84\x85\x9c\x2e\xd9\x69\x88\x24\x1b\x9a\xc9\x37\x10\x61\xf0\x54\x30\x33\x8c\xb3\xe1\x5a\x69\xaf\xf9\x75\xad\x4c\xeb\xe2\xaa\x54\x27\x68\xc1\x7c\x0d\x28\xfa\x77\x9b\x2b\x71\xd8\x36\x19\xe2\xa2\xd8\xe4\x6b\xa7\xf8\x4b\x67\xd8\x57\x73\xc9\x62\x7c\xc7\x1c\x9e\x18\x38\x97\x9b\x74\x2e\xff\x8f\x15\x26\x8b\xf1\x7d\xff\x9a\x48\x16\xe3\xdf\x4e\x13\x91\xe6\xfe\x0d\xad\x36\xc4\xa9\x31\x03\xe5\x35\x41\xf5\xcd\x55\xec\xf7\x86\x2b\x0d\xd0\x0e\x99\x4f\xc0\x95\x9c\x41\xbb\x66\x1b\xa3\x11\xf1\xab\xdb\x18\x4d\xd8\x07\xb6\xdb\x2c\xb5\x27\x1d\x0d\x90\x2c\x90\x2c\x90\x2c\x90\x6c\xef\x20\x59\x2c\xcc\x02\x16\x66\xdd\xc3\xac\x91\x0a\xac\x23\xa9\xc0\xe0\x1a\x80\x6b\x00\xae\x01\xb8\x06\xe0\x1a\xe8\x69\xd7\x00\x32\x42\x22\x23\x24\x32\x42\xb6\x2b\x23\x24\x3c\x6f\xf0\xbc\xf5\xaa\xe7\x2d\x9d\xa3\x19\x41\xb4\xa7\x68\x82\x13\xed\x63\x74\x84\x0e\x37\x01\x2f\x45\x00\x50\x20\x4b\x8e\xf9\xb3\xe4\xfb\xd8\xbd\xe2\x6b\x76\x2c\x6d\x3b\xb8\xf2\x7a\x54\xb5\x7f\x6f\x17\xdd\x6b\xe5\xaa\x53\x8b\xd9\x92\x96\x2f\x96\x0d\xf6\xbb\xbb\xd8\x2b\xfd\x4e\x06\xba\x81\xfa\x6a\xf5\x29\xeb\xbc\xd8\x4e\xf3\x40\x91\x86\xce\xfe\xe3\x29\x4d\x4f\x16\x0a\x36\x25\x6f\x5d\x14\x57\x7b\x14\xeb\xcd\xe6\x60\xb4\xef\xb7\x21\xaf\xeb\xd9\xe0\x97\x6f\x90\xed\xaa\x4c\xb1\x68\x5f\xc3\x1b\xa6\x11\xe0\x6f\x4d\x43\x83\x0f\x0d\x7e\x1a\x0e\x1f\x38\x7c\xe0\xf0\x81\xc3\xa7\x67\x1c\x3e\xe9\xae\xf1\x67\xb4\xbc\x27\x4d\x83\xf6\x34\x40\x3b\x40\x3b\x40\x3b\x40\x3b\x40\x7b\xe7\x41\x7b\xcb\x37\xef\xe9\x9e\x46\x8b\x69\xa0\xc5\xf6\xa1\xc5\x74\xd7\xa3\xc5\x75\x28\xea\x67\xff\x7a\x88\xf6\x5b\xb0\x8d\xff\x5a\x2b\x79\x84\x4d\xe2\xac\x22\xb7\x2f\x0e\xb1\x6f\x6e\x70\x80\xdc\x3f\x0b\xc9\x61\x77\xee\x52\x29\x5a\x86\xac\x0a\xcb\xc5\x5d\xce\xb8\x71\x7b\x61\x31\xc0\x9b\x18\x70\x76\xcd\x9e\x6d\x90\x56\x52\x6d\xa9\x8d\x51\x56\x95\xec\xb0\xb3\x6c\xe1\x4b\x33\x39\xc9\x99\x2b\x1f\x67\x3d\x36\xe0\x59\x02\xbb\xda\x8e\xc7\x1e\xb9\xe5\x57\xbc\xc9\xee\x63\xb7\x53\xc1\x9b\xa2\xf8\xc3\x1e\x5e\xfc\xa1\xef\xfc\x59\x5e\x20\xfa\x58\x13\x24\x9b\xbf\xa2\x53\xe6\x0a\x71\x15\x85\x5a\x6e\x89\xc4\x95\xad\xa4\x88\xa0\x84\xa0\x84\xa0\x84\xa0\x84\xa0\x84\xa0\x84\xa0\x84\xa0\x84\xa0\x84\xa0\x84\xa0\x84\xa0\x84\xa0\x84\x1d\xa6\x84\x07\x68\x1f\x1b\x8b\xee\xb1\x45\x44\xf7\xbb\x73\x6a\xda\x7b\xb7\x3b\x21\xa5\x26\xf8\x25\xf8\x25\xf8\xe5\x3a\xe2\x97\xbf\x31\x48\xc3\x0d\xf1\x4b\x43\xcd\xe8\x6a\xd9\x60\xef\x1e\x64\x1f\x76\x61\x4b\x5d\x4e\xb3\xc5\x6c\x7e\x39\x9f\x5d\x52\x0a\x1e\x80\x69\x2f\x69\xe7\xf9\xd9\x2d\xa1\x96\xf1\xd8\xa3\xbe\xdc\x51\x5c\x62\x26\x6f\x94\x01\x1e\xab\xc1\xe3\x4e\x7f\xf0\xb8\x95\x11\xef\x18\x57\x15\xde\x38\x13\x0c\x1f\x9f\x60\x3b\x2b\xe1\xa3\x18\x78\x90\x47\x90\x47\x90\x47\x90\x47\x90\x47\x90\x47\x90\x47\x90\x47\x90\x47\x90\x47\x90\x47\x90\x47\x90\xc7\xb5\x24\x8f\x20\x88\x20\x88\x20\x88\x20\x88\x6d\x24\x88\xdf\x89\xd1\x69\x51\x44\xab\xa8\x96\x6f\x69\xfa\x4d\x73\x3d\x78\xf3\x10\x7f\xd4\x01\x05\xb5\xf2\xc5\x9c\xae\x1a\x86\x6a\x6b\x22\xff\x49\x8c\xbd\xbb\x9f\x98\xd3\x90\x9d\xcd\x33\xcc\x0b\x08\x7b\xf7\xbe\xd3\xe2\xf4\xd8\x2e\xf3\xb7\x73\xf6\x39\x55\xb9\x85\xe5\x71\x2d\xae\x1a\xac\x88\xbc\xac\x7b\x78\x5e\xd6\xbe\xf3\x67\x79\x0d\xb8\xbd\x35\x83\x8a\x5d\x83\x63\xa5\x53\x95\xfd\x5a\x6d\xf5\xe0\xcb\xc1\xd4\x6e\x9c\x1d\x92\xd4\xae\xea\x19\x49\x88\x67\xf5\xa5\x2a\x1c\x3e\xfc\x5f\x37\xfb\x3e\x90\x87\xad\xba\xc2\xfe\xcf\x64\x48\xfe\xdc\xe9\xc7\x92\x9a\xa6\xd3\x34\x55\x91\xf2\xb9\xb9\xe7\x82\xf4\x82\xc8\xfb\xdc\x64\xde\xe7\x4f\x84\x5a\x66\x1c\xce\x8a\xe4\xcf\x93\x94\x72\x92\x3f\xaf\x81\xa5\xe1\x45\x86\xdb\x6b\x69\x62\x1f\xd9\xe6\x6b\x69\x64\xa2\x0f\xf3\xd5\xb7\xac\xcb\xa0\xf8\x53\xc7\x8d\x4b\x7b\x12\x37\xc3\xce\x04\xd8\x19\x24\x0f\xed\x48\xf2\x50\x64\x8d\x43\xd6\x38\x64\x8d\x6b\x57\xd6\xb8\xf4\xe7\x42\x2d\x4e\x9d\x35\x27\xea\x39\x9c\xa5\x69\x57\x3d\x87\x36\xa7\xe3\x8a\xf8\xaf\x10\xb6\xb0\x4d\x62\x98\xda\xbd\x48\x48\xbd\x6b\xab\xef\x22\x61\x57\x49\xd1\xcb\x79\xee\xcb\x14\xdb\xdb\x1a\xfb\x92\x01\x5e\xe6\xba\x93\x0b\x87\x87\x2a\x1b\x12\xb5\xd7\x77\x9b\xff\x1c\xdf\xe1\xfe\x71\x51\xd5\x73\xaa\xfb\xd7\x5d\xee\x5f\x0d\xab\xd6\xfa\x48\xd5\x71\x3b\x6a\xd4\x77\xdf\x6d\xf6\x32\x75\x8e\x66\x28\x5d\xb1\x23\x1a\xa7\x43\x4d\xbc\x23\xbc\xc0\x3b\x96\x2b\x41\xcb\x95\x4f\xf6\xd3\xc7\xfb\xd9\xcb\xfd\xe1\x8f\xda\x36\xff\xc5\xfe\xde\xd9\x16\x55\xb8\x47\xcc\x71\xe6\xee\x7e\xee\xc2\xf3\x94\xf4\x8f\x0c\xd6\x78\x71\x87\xf8\xd4\x25\xd4\x21\x4a\xc1\xb7\x2e\xbf\xb9\x5e\x32\x22\x83\x69\x43\x2b\xce\x0a\xf5\xcb\x93\xe6\x67\x21\xff\x3d\x6f\x7d\x2c\xce\x1f\x87\x6a\xef\xd7\x52\xaf\x85\xe8\xd5\x10\x7b\x25\x14\xfe\x92\xcd\xdd\x3e\x16\x3a\xa5\xe9\x19\xbe\x94\xcb\x69\x7c\xd8\xb5\x48\xf4\x9a\xf9\xa7\x68\x24\xe9\xb9\x0b\x4e\x54\xc5\xaa\x6b\xc9\x70\xfc\xfc\x23\x4a\x86\xdf\x38\x57\x4f\x14\xf2\x19\x39\xab\xaa\x85\xac\x11\xd1\x6e\xc9\x31\x15\xea\x82\x92\xaa\x95\x0a\x6a\x3c\x22\xae\xc8\xe5\x4a\xd6\xb3\xe4\x64\xd3\x77\x00\xec\xcb\x47\x37\xf2\x6e\x79\xa4\x37\x9d\x83\x53\xed\x35\xf7\x75\x02\x66\x4b\x22\x41\xe3\x3e\x1a\x63\x7b\xa2\x71\xdb\xc3\x71\x9f\x5b\x5b\x2d\xdb\xbd\x13\x94\xd5\xec\xed\x31\x4a\x0a\xce\x9a\xd1\x34\x3d\x9b\x2f\xf2\xaf\xc6\x21\xad\xb5\x20\x2b\x5f\xb3\xdb\x84\xf5\xdf\x0c\xb1\x1f\xf5\xd1\x3d\xee\x26\xae\x2e\x27\xc2\x0f\xfa\xe0\xd5\x19\xf3\xc4\xd8\x63\xe6\x2f\x13\xae\xc3\xdd\x9a\x4b\x7e\x48\x8b\xb9\xea\x8a\x93\x35\xba\x06\x63\x39\x11\xe7\x5d\x5a\x2d\x52\x7d\x26\xf8\xa5\xde\xcf\xf6\xca\x97\xda\xe7\x71\xc8\xd7\x5a\xf4\xc5\x2d\x8c\x0c\xff\xbb\xcd\xd5\x83\xff\x90\x3f\x4a\x15\xe3\xff\xb8\xfc\xb1\x83\x8f\x60\xc5\x65\xf3\x7c\x9f\x01\xd6\x09\xc0\xa7\x4d\xe2\xd3\x7f\xba\xc2\xb2\x79\xfe\x36\x60\xe5\x65\xf3\x5a\x6d\x4b\x38\x34\x6d\x9b\x2d\x89\xbd\xb4\xad\xda\x96\xbc\xde\x82\xa5\xd2\x7c\xec\x14\xff\xdf\x49\xeb\x01\x48\x0a\x48\x0a\x48\x0a\x48\x0a\x48\x0a\x48\x0a\x48\xea\x0f\x49\xdb\xb6\x28\x48\xfd\xf5\x5d\xd5\x8b\x82\xc7\x03\xe0\xa8\x58\x2a\x44\x4b\x22\xac\xae\x23\x2b\x05\x50\xd1\x5e\x5b\x9f\x80\x8a\x82\x8a\xae\x31\x15\xed\x08\x5a\x0a\x22\x96\x0d\xda\xfe\x5a\x06\xbe\xce\x9c\x90\x1e\xa3\x3d\x2c\x1e\x1d\xb6\xa9\xe6\xbd\x6e\x16\xca\x9b\xba\x23\x48\xe8\x3f\x19\xa2\xb4\x20\xa1\xd9\xbc\x91\xd1\x96\x4d\xab\x5c\x21\x38\x6d\x2c\x15\x67\x21\x9f\x51\x0d\xf6\x5b\x83\xec\x3f\x6f\xa0\x7b\xed\xb6\x6c\x9f\xe2\xed\xc6\x62\xdb\xad\x04\x1e\xf3\x66\x73\x2d\x0a\x71\xdf\xc3\x4f\x98\xb4\xba\x54\xe5\xa5\xf4\x5c\x73\x7d\xc4\xbc\xd7\xfa\x6e\x5a\x1f\x0c\xbf\xa2\x98\xf7\x85\xe0\xaf\xf1\x04\x3b\x26\xbf\xba\xca\xf7\xad\x22\xfd\x26\x7f\x1a\xd5\x4e\x0c\x44\xc3\x23\x1a\x1e\xd1\xf0\x88\x86\x47\x34\x3c\xa2\xe1\x11\x0d\x8f\x68\x78\x44\xc3\x23\x1a\x1e\xd1\xf0\x88\x86\x47\x34\x3c\xa2\xe1\x11\x0d\x8f\x68\x78\x44\xc3\xdf\x39\xd1\xf0\xbf\x3f\x48\xe3\x82\x4d\x0a\x78\xe3\xd2\x67\xd6\x67\x92\xfc\x68\xf6\x8b\x83\xec\xe3\x1b\x68\x8b\xf8\xbf\xab\xcb\x89\xf0\x5b\x1a\x64\x90\xe6\x09\x2d\x62\x8f\x62\xc6\xe6\x2d\x1a\x9e\xc2\x3e\xe6\x5f\xd6\x07\x6b\xec\xd2\xfc\x9a\x73\xc1\xac\x71\x94\x8d\x48\xd6\xe8\x79\x7f\x2c\xd0\xc8\xfb\x82\x4c\x9b\x60\x8b\x60\x8b\x60\x8b\x60\x8b\x60\x8b\x60\x8b\x60\x8b\x60\x8b\x60\x8b\x60\x8b\x60\x8b\x60\x8b\x60\x8b\x60\x8b\x60\x8b\x60\x8b\x77\x26\x5b\xfc\x88\x62\xe9\x1e\x95\xac\xb9\x58\xce\x6b\x45\x5d\xcd\xe5\xb9\x04\xde\x13\x0a\x2e\x34\x90\x7c\x53\xaa\x98\x4b\xa1\x5b\xea\xc2\x75\x4d\xbb\xe9\xd9\x5c\x1a\xec\xeb\xcf\xb3\x8f\x0e\xd0\xc3\xbe\x6d\xd9\x1a\xc8\xa3\x62\xc1\xaa\xcb\xa9\xd6\xb2\xc5\x56\x41\xf2\x8b\xf6\x35\x2e\x89\x6b\x4c\xb8\xaf\x11\x3b\x6e\x9e\x9d\xf4\xbb\x80\x54\x34\xd6\x3f\xbf\xcb\x41\x63\x0a\xec\x0d\xec\x2d\x05\xf6\x06\xf6\x06\xf6\x06\xf6\xd6\x33\xec\x2d\xd5\x35\xec\xad\xe5\x3d\x69\x9a\xbd\xa5\xc0\xde\xc0\xde\xc0\xde\xc0\xde\xc0\xde\x3a\xcf\xde\x52\x3d\x0d\xb2\x52\x00\x59\xed\x03\x59\xa9\x6e\x07\x59\xa9\x75\x08\xb2\xd2\x6f\x0f\x51\x41\x28\xb4\x54\xca\x70\x85\xd6\x65\x7a\x33\xbd\xa9\x66\x20\xb6\x3f\xee\xb2\x32\x55\xd6\x67\x48\x33\x79\x23\x58\xbd\xf5\x88\xbf\x7a\x6b\x13\xdb\x28\x84\x5b\xff\x30\x58\xb8\xf5\x1c\x7b\x56\x0a\xb7\xea\xc1\x39\xa9\xe3\xaa\xdf\xe5\xea\x08\xd2\xe8\x3b\xef\x0a\x02\x75\x03\x62\x96\x8b\x28\x41\x4c\xee\xa4\x38\xb0\x0b\xa8\x9c\x80\x68\x37\x29\x4f\xb9\x8a\x44\x1c\x97\xe8\xe9\xb6\xbc\x0c\xc8\xd2\x81\x9c\x84\x4d\xe6\x24\xfc\xe3\x3e\x2a\x8a\x54\x42\x39\x52\x5d\xa9\x84\xde\x44\xed\x7a\x59\x6b\x47\xcc\x5f\x17\xc6\x53\xa1\xab\xdc\x78\xb6\xb1\x0b\x8b\x22\x87\xe2\x35\xca\x3a\x39\x14\xdb\x77\x39\xcb\x1c\xaf\xb5\xb9\xad\x33\x1f\x94\x34\xa3\x4c\xb1\xaf\x8c\x04\x99\xe3\xbd\x32\xc1\x96\x2b\x5b\x99\x76\x2d\xc8\x34\xa7\xc5\x49\xf5\x4c\xf3\x84\xdd\x5e\x47\x8d\x74\x7b\x72\x3a\x02\x9d\x03\x9d\x03\x9d\x03\x9d\xf7\x0e\x3a\xc7\xfa\x33\x60\xfd\xd9\x3d\xbe\x05\xe4\xd3\xed\x48\x3e\x5d\xb8\x70\xe0\xc2\x81\x0b\x07\x2e\x1c\xb8\x70\x7a\xda\x85\x83\xb4\xea\x48\xab\x8e\xb4\xea\xed\x4a\xab\x0e\x0f\x29\x3c\xa4\xbd\xea\x21\x4d\xe7\x5a\x5c\x51\x20\xc8\x99\x18\xf3\x87\xc7\xf7\x31\x59\xc8\xdc\xb1\xb4\x8d\x3a\x16\xab\x00\x75\xcb\xd0\x77\xeb\x93\x33\x7f\x77\x07\x5d\x92\x41\x0a\x4b\x65\xcd\xc8\x28\x85\x7c\x31\x37\xba\x3c\x66\x76\x7c\xac\x56\xf6\x13\x3e\x82\x5a\xb1\xac\x14\x4a\x5a\xd6\x3a\x4f\xd5\xad\xaa\x75\xa3\x06\x1f\x79\xf6\xae\x1d\xec\x0f\xfa\xe9\x3e\x57\xc3\x57\x65\xc3\xe1\x7d\xbc\x80\x9d\x38\xce\x7a\x89\x9c\xf5\xf5\x19\xbb\xfd\x59\x2d\x9b\xb4\xdb\x8f\x1d\x33\xcf\x4a\x3a\xcd\x5d\x14\xad\x39\x39\x4f\x6a\x9c\x28\xde\x84\x16\x17\xbe\xd3\xe9\x92\x78\x4f\x67\xe9\x1c\x7f\x4f\xcf\xd0\x29\x9a\xac\xed\x68\x71\xba\x1d\x97\xa3\x10\xaf\xd1\xdd\xd5\x96\xc3\xcb\x05\xbf\xa5\x93\x2c\x25\x5e\xb8\x5a\x5d\x70\xde\x61\xd1\x57\xfb\x1d\x76\x6e\x83\xc2\xff\x61\x8b\xff\xd3\x3d\x68\x55\xc8\x5b\xe9\x03\x3e\x29\x4f\xec\x92\x67\x9c\x7a\x96\x9e\xa1\x8b\x15\xce\xee\x16\x3d\x64\xb0\x45\xf8\xb6\x9b\xf4\x6d\x7f\x2d\xd4\x3e\xd3\xf3\x9c\xf0\x20\x3f\x4d\xf3\x8e\x07\xb9\x1b\x0c\x1b\xaf\xcd\xd7\x29\xc3\x96\xfa\x4f\x5b\xfd\x0d\xdb\xc9\xaa\xca\x3c\x2b\xb5\x70\xc7\x79\x55\x89\x2e\xb0\x6f\xa8\xe8\xd3\x6b\xf6\x14\x15\x7d\x50\xd1\x67\x8d\x2b\xfa\xac\xe1\x9a\x39\xb0\xce\x4f\x63\x93\x8b\xcf\x6c\xb1\xc2\xf9\x26\x3d\x49\x29\x76\x32\x7a\xdc\x4e\x3d\xb1\xd3\x5d\xf6\xa7\x46\x33\x77\x44\x21\xa0\xb7\x85\xe8\x9e\xd1\x82\x96\x33\x46\xff\x7e\x41\xcb\x99\xbd\x7e\x81\x69\xec\x10\x6d\x30\xff\x16\x7b\x7d\x41\xcb\x9d\xca\x17\xd4\x33\x4a\x31\x5b\x50\xf5\xf4\xf6\xa0\x47\x9a\xde\x4b\x09\x36\x1a\x1d\xb1\x87\xe0\x1e\xf3\xbf\x96\x74\xba\xa0\xe5\xa2\x9b\xe4\x65\x5c\x77\xc5\xde\x3f\x40\x8f\x8b\x0d\x6f\x55\x75\xfb\xd1\xe5\xc4\x68\x5e\x94\xa0\x57\x0d\xf6\x3f\x76\xb1\x6f\xf5\xd3\xdd\xce\x51\x57\x97\x13\xe1\x27\xea\xc7\xd7\xcb\x02\xf6\xb1\x01\xf3\xb0\x73\xf6\x99\x17\x13\xf2\x87\x53\x9a\x9e\x2c\x14\xec\xb9\xbe\x75\xd3\x79\x9b\x52\x73\x3e\x5f\x5b\xd4\x38\x25\x3e\xe4\xe3\x74\x94\x7f\xc8\x07\x68\x1f\x8d\xd5\xfc\x90\x5d\x43\xbd\x9c\x88\xcb\xc1\x98\xc9\x1b\x76\xed\x9f\x15\x15\x58\xac\x7a\x70\xf2\x13\x94\xed\x7a\x12\x6e\x06\x69\xc5\x91\x90\x13\x49\x01\x90\x90\x13\xca\x46\x28\x1b\xa1\x6c\xec\x21\x65\x23\x12\x72\x22\x21\x27\x14\x65\x50\x94\x41\x51\x06\x45\x59\x57\x28\xca\x90\x2e\x13\xe9\x32\xd7\x8b\x86\x06\xe9\x32\xdb\x91\x2e\xf3\xc7\x03\x14\xab\x03\xe6\x44\x39\x1e\x07\xcf\x7d\x6d\x80\x7d\x71\x43\x25\x9e\x33\x1a\x2b\xbf\x23\x41\x51\x8b\x0a\xf0\x0c\xf3\x13\x7c\x68\xdf\x4c\xde\x28\xaf\x37\xe2\xd7\xb5\xc5\x78\xda\x46\x08\x41\x00\x41\x00\x41\x00\x41\x00\x41\x00\x41\x00\x41\x00\x41\x00\x41\x00\x41\x00\x41\x00\x41\x00\x41\x00\x41\x00\x41\x00\x41\x00\x41\x00\x3b\x45\x00\x7f\x6f\x3b\x1d\x93\xb1\x68\xa5\x92\x31\xba\x9c\xa8\x15\x7f\x96\x55\xd4\x45\x73\xd1\x55\xae\x8c\x38\x7b\xcf\x76\xf6\xfd\x3e\xda\x64\x9e\x7e\x75\x39\x11\xde\x55\x37\xca\x6c\x92\xb7\x32\xaf\x96\x63\x3b\x79\x5c\x59\xa9\xe4\xa9\x9f\x6d\xff\xdc\x96\xe8\xb1\x67\xe8\x98\xe0\x6c\x07\x68\x1f\xe7\x6c\x71\x1a\xa6\x58\x6d\x25\x6c\xa9\x64\xf0\x84\x6c\x56\xa7\x56\x1b\x23\xf6\x64\x30\x4e\x8b\xb1\x41\x4b\xed\x5a\x2a\x19\x92\xa0\x39\x1d\x70\x33\xb4\xf0\x67\x37\x3b\xa3\x3e\x14\x14\xfd\xe5\x0c\xfc\x2e\x2b\xde\xab\x93\x63\x9f\x3a\x49\xc7\xe9\x68\x45\xe4\xc1\x8a\x06\x1f\xb1\x06\x88\xdd\x6a\x32\x76\xeb\x43\xa1\xd5\x7e\xf8\x29\x11\xa1\x75\x84\x0e\x3b\x11\x5a\x9d\x33\x1e\x3c\x0e\xab\xb5\xc6\x23\xf5\xe7\x77\x39\xc6\x63\xac\xe1\x08\x2b\xc7\x8a\x3c\x2e\x62\xaa\x3a\x65\x43\x10\x39\xd5\x6b\xd6\x0c\x91\x53\x88\x9c\x5a\xe3\xc8\xa9\xb6\xaf\x17\x5b\x6b\xd3\x03\xc3\xad\xd2\x07\x68\x1f\x1b\x8b\xee\xb1\x83\x77\xee\x77\x47\x41\xd9\x8d\xde\x11\x71\x4f\xbf\x3d\x44\xd3\x62\x5f\xa3\x2f\x28\x99\xb8\x35\xf6\x15\x55\x40\x95\x42\xe9\xba\x62\xe9\x1c\x32\x85\x25\xa3\x6c\x1a\xc0\x82\xba\x60\xda\xde\x62\xce\xda\xea\xb0\xbf\x1b\x64\x9f\xda\x48\x61\xb3\xa9\xa4\xbb\xa5\xab\x56\x13\xe1\x7f\x19\x92\xbb\x4e\x97\xf6\xa1\x68\x71\x1c\x2b\x54\x69\x42\x5c\x61\x4e\x2b\xa8\x29\x71\x85\x96\xc8\x21\x86\x1d\x7c\xcb\x11\xb5\x84\x7d\xf9\xb2\xba\xe8\xd8\xc3\x01\x8f\x2b\xc0\xd5\x76\x3c\xb6\x87\x5f\x6e\xae\xf2\xe6\x2e\xca\x7b\xab\xee\x35\x04\x15\x2b\x89\x75\xbc\x25\x62\x1d\xdf\x12\xfc\xb1\x9f\x63\x33\xf2\x63\xaf\xf9\xd2\x4a\x0b\x50\xfd\x4c\xdc\xa6\x40\x3c\x37\xa8\x2c\xa0\xb2\x80\xca\x02\x2a\x0b\xa8\x2c\xa0\xb2\x80\xca\x02\x2a\x0b\xa8\x2c\xa0\xb2\x80\xca\x02\x2a\x0b\xa8\x2c\x3a\xad\xb2\x38\x41\xc7\xd8\x91\xe8\x61\x9b\x9f\x3c\xe2\xe6\x2e\xd5\x5b\xb9\x6a\x00\x03\x99\x06\x64\x1a\x90\x69\xf4\xb0\x4c\xe3\x9d\x7d\x14\x1d\x8d\xdf\x52\x0b\x85\x91\x9b\x45\xed\x56\x71\x54\x2b\xa9\xc5\x7c\x76\xc4\xb3\x27\x1c\x65\xdf\x09\xb1\x3f\x0e\xd1\x96\x4b\x6a\xa1\x70\xd6\x3c\x2c\x7c\x29\xa7\x96\xf9\xa7\x98\xcf\xa8\x11\x25\x93\xe1\x2b\x19\x3e\x6d\xe8\x91\xf3\x25\xb5\x38\x3d\xe9\xdd\x56\x0e\x47\x94\x82\xa1\x45\xf8\x35\xe4\x56\x21\x32\x70\x7e\x7a\x72\x82\x23\x19\x8d\x5b\xeb\xac\x96\x19\x88\xc5\x72\x6a\x79\x5e\xb4\x9b\x14\xcd\x4e\xf3\x56\x45\xa3\x01\x75\xf6\xd2\x07\x69\x87\x00\x74\xf7\xd3\x7d\x1c\xd0\xdd\x4d\x77\xfd\x6a\x68\x33\xc9\xd7\x28\x08\xb6\xb1\xbf\xdc\x45\x6f\x30\xdf\xe4\xd1\xe5\xc4\x68\x49\xcb\x96\xd5\xc5\x12\xdf\x95\xb1\xff\xbc\x8b\x7d\xad\x9f\x36\x65\x34\x5d\xe5\xb2\x88\xfa\xa9\xa3\x66\xb5\xec\x05\x79\x6a\x8c\x67\x99\x9a\xd0\x74\xf5\x62\xc2\xf5\xe7\xf5\x16\x4a\x76\x85\x26\xc4\xc0\x1e\xa5\x71\x3e\xb0\xfb\x68\x8c\xf6\xd4\x74\x59\x98\xe3\xc4\x7d\x92\xce\x1d\xb7\xa4\x18\xf0\x8a\x1c\x1b\xd1\xa8\x84\x9a\xae\x5e\x20\x5a\x0c\x1c\x13\x1c\x13\x1c\x13\x1c\x13\x1c\x13\x1c\x13\x1c\x13\x1c\x13\x1c\x13\x1c\x13\x1c\x13\x1c\x13\xd1\x62\xc0\x90\xc0\x90\xc0\x90\x6b\x82\x21\x7f\xbe\x9f\x9e\xb0\xa2\xc5\xf2\x3e\x15\xd5\x46\x65\xf5\xb5\x51\xf6\x5f\xfb\xd8\xb7\xfb\xe8\x81\x8a\xc3\xae\xca\xdf\xc3\x0f\xe4\xd4\xb2\x77\xe6\x15\xf7\x14\x7b\x22\xa7\x96\x93\xde\x93\x2e\x8a\x73\x92\xb3\xd3\xd6\x96\xaf\x85\x81\x05\x55\x0d\x8d\x57\x35\x34\xde\x48\x43\xe9\x12\x3d\x2d\xc8\xdb\x39\x9a\xe1\xe4\xed\x14\x4d\x52\xaa\x09\xcd\xa1\xeb\x3e\x1b\x61\x71\xec\x9f\x0f\xd1\xa8\xcc\xe1\xa5\x65\xd5\xca\x07\xa1\x2f\x15\xcd\x77\x30\x53\x50\x0c\x43\xb5\xf5\xac\x6f\x1b\x62\x3f\xd1\x4f\x5b\xcd\x13\xec\x47\xf2\x28\x0f\xdc\xf3\xf2\x80\x39\x71\xf6\x84\x79\x76\xec\x21\xf3\x80\x73\x5a\x56\x95\x0f\xc4\xfd\x63\x8b\x23\xf5\x9e\x5f\x61\xaa\x7b\xf3\xc6\xe5\x7d\xc4\xdd\xdd\x0a\x04\x99\xcf\x05\x83\xca\xc3\xec\x60\xad\xe2\x82\xae\x01\x97\x08\xd3\x73\xf1\x80\x78\xc0\xf0\x37\x36\x57\x3c\x82\xa8\x15\xc5\x57\xe7\x29\x3c\x22\x8f\xe9\xc8\x83\x48\xf1\x5a\x21\x15\x61\x2f\x4d\x3d\x09\x04\xbc\x20\x7c\xaf\xc9\xf0\xbd\x8f\x87\x5a\x65\x0d\xd2\x22\x8c\x6f\x82\x92\x4e\x18\xdf\xda\x5a\x96\xc6\x0c\x49\x95\xfd\x09\x08\x16\x8c\xbd\x77\x5b\x85\x65\xb9\x5f\x56\x5d\x56\xbc\xc6\xe4\x61\xf1\xe7\xce\xd8\x92\x0b\x34\x47\xb3\x6e\x5b\x12\x4b\xd1\xc9\x26\x26\xc8\x49\xde\xe7\xf3\x1c\xf6\xc3\xae\x04\xda\x95\x6f\xf7\xd1\xb7\xfa\xd8\x1f\xf6\x85\xff\xc0\x1e\xa0\x4f\xf5\x5d\x70\x2f\x6e\xf3\xe6\x1e\x8b\x2f\x50\x23\x0b\xea\x35\xe1\xe8\xb2\x77\x95\x8e\x37\x45\x6e\xe4\x79\x17\x5d\x76\xa3\xa8\x15\x47\x8a\x6a\x4e\xe1\x03\x21\xd7\xb7\x6e\xfb\x22\xf8\x92\xfd\x08\xe4\x8b\x98\x5f\x5c\x54\xb3\xa6\x05\x2b\xdc\x76\x3c\x50\x8e\xd7\x21\x5f\x18\x96\xcb\x5e\x51\xa3\x3c\xa7\x9b\xd3\x62\x49\xd5\xf3\x5a\xd6\x5e\xbe\x3b\x33\x24\x77\xee\x59\xa3\xb1\x64\x98\x9d\x74\x6f\x19\x14\xf3\x4c\xeb\x86\xe4\x45\xae\x09\xd2\x62\x35\x11\x17\xfd\x14\x11\x68\x3e\x7d\x8c\x32\xde\x85\x59\xde\x03\x9f\xe5\x3c\xaa\xf3\xa3\x3a\xbf\xe0\xc6\x22\x42\xd1\x1a\x5d\x73\x7b\x2c\xa9\xaa\x45\x86\xe3\xae\x61\xb4\x98\xa2\xbd\x01\xb6\xbd\xbd\xde\x8b\xc5\x23\xc9\x8c\xb9\x57\xe6\x93\xad\xdb\x38\xf4\x48\x75\xfe\xf4\xe7\x42\x2d\x2e\x51\x3e\x67\xb6\x36\xc6\xce\xd2\x34\x6d\x16\x63\xab\x66\xdb\x5d\xf6\x3c\xe2\x3f\x6b\x6f\x61\x9b\xc4\x30\x51\x7b\x57\x0d\xa9\x1f\xdf\x55\xb1\x2c\xd8\x5d\x15\xf9\x5f\x67\xe7\xb1\x83\x47\x91\xb6\x7d\xad\x80\x50\xff\x5e\x5b\xa1\x20\xd4\x1f\xa1\xfe\x6b\x1c\xea\xdf\x31\xe0\x14\x58\x12\xb5\xb1\x19\xa0\x11\x73\xef\x33\x4b\xa4\x0f\xd3\x41\xb6\x3f\xba\xd7\x56\xa2\x3f\xe8\x56\xa2\xbb\x9b\x6b\xbf\x06\x9d\xfd\xec\x15\xda\x17\x1c\xa2\x2f\x30\xa6\x2b\x36\xdf\x60\xff\xfe\x32\xfb\xd7\xbb\x68\xbb\x5f\x34\xbe\x98\xd6\x02\x64\x9f\x2e\xc5\xbd\xa8\x1a\xea\x13\xfa\xce\x1b\x72\x1d\xd8\xe5\xc2\xcf\x14\x24\x92\x90\x48\xa6\x20\x91\x84\x44\x12\x12\x49\x48\x24\x7b\x46\x22\x99\xea\x1a\x89\x64\xcb\x7b\xd2\xb4\x44\x32\x05\x89\x24\x24\x92\x90\x48\x42\x22\x09\x89\x64\xe7\x25\x92\xa9\x9e\x56\x34\xa6\xa0\x68\x6c\x9f\xa2\x31\xd5\xed\x8a\xc6\xd4\x3a\x54\x34\xa6\x33\x74\x46\x80\xbf\x24\x9d\xe0\xe0\xef\x30\x1d\xa4\xfd\x35\xc1\x1f\x27\x55\x16\xf8\x73\xe1\xa1\x86\xa2\x66\xf3\xc1\x68\xef\x14\x9b\xac\x4a\xf0\x57\x93\xec\xd5\x4e\x12\x18\x14\xa0\x1b\xfd\xf5\x2d\xf5\xf8\xd9\x1b\xc4\x34\x15\x51\x3c\xa8\x6c\x48\xfc\xb5\x93\xb0\x4c\xb0\xad\xd3\x34\x45\x13\x15\x0e\x99\xbd\x94\x58\xf1\x43\x82\x27\x06\x1a\xb4\x26\x35\x68\x7f\x15\x12\xe2\xb1\x31\x2e\x1e\x73\x1c\xc6\xfb\xa9\x99\x17\xb1\xa6\xa5\xa0\x49\x61\x8c\x8e\xd1\x11\x6e\x8c\x9a\x6c\x7e\x5a\xe8\xdc\x52\x74\xd2\xd1\xb9\x35\xd7\x54\x70\xc0\x7f\x49\x33\xca\xd4\xa0\x69\x5b\x79\x72\xd3\x6a\xdb\x17\x7b\x71\xa4\x9e\xe9\xb2\x04\x0c\x2e\x35\x88\x76\xcd\x63\xc6\xf6\x8a\x23\x6a\x9a\x31\xfb\xc4\xf6\x19\xb4\xf6\x28\xe1\x40\x7f\x41\x7f\x41\x7f\x41\x7f\x7b\x87\xfe\x62\x3d\x17\xb0\x9e\xeb\x1e\x3c\x0e\x15\x72\x47\x54\xc8\xf0\x42\xc0\x0b\x01\x2f\x04\xbc\x10\xf0\x42\xf4\xb4\x17\x02\xc1\x28\x08\x46\x41\x30\x4a\xbb\x82\x51\xe0\xe4\x83\x93\xaf\x57\x9d\x7c\xe9\x5c\x8b\xe3\xb0\x5a\xe3\x34\x6b\x05\x59\xbe\x11\xf3\x87\xdc\xf7\xb1\x7b\x85\xe1\x70\x8c\x3a\xb5\x5e\x0d\xff\xdf\x63\x74\xb6\x51\x35\x7c\x8d\x12\xdd\x5c\x1d\x6f\xa5\xf8\xf8\x50\x8c\xbd\xd4\x5f\x8f\x94\x3f\xe0\x97\xef\x43\x2b\xa8\xb1\x98\xf9\x43\x2d\x3c\xee\xd4\x7a\x6d\x3d\x17\x5f\x69\xc1\x45\x8f\xd3\xa2\xae\x5f\xc5\x7a\x99\x16\x82\x5f\xa6\x13\xec\x58\x83\x2f\x53\x8d\xb7\x28\x20\xe9\xc7\xef\x6f\xae\xf7\x50\xc2\x35\x32\x80\x98\xcf\x65\x44\xfe\xb6\x16\x8f\x66\xc5\xf5\xbb\xab\x9e\x0d\x60\x1d\x9c\xaf\x1d\xaa\xdf\x5d\x6d\x17\x56\x5e\xbf\x7b\xe5\xb6\x25\xa0\x7e\x77\x07\x4c\x4f\xec\x13\xdb\xea\xd9\x96\xbb\x9d\x1c\x20\xa6\x39\x19\xae\xef\x07\x6d\xab\x35\x41\x2a\x10\xa4\x02\xb9\x73\x21\x3c\xe8\x0b\xe8\x0b\xe8\x0b\x52\x81\xac\xf5\x4e\x24\x30\xdd\x48\xea\xe7\xb7\xd6\x5b\x30\xec\x0c\xca\x0e\x62\x2e\x23\x76\x97\x6a\x14\x0f\x6f\xeb\x2a\x02\x49\x42\x7a\x6d\xed\x82\x24\x21\x48\x12\xb2\xc6\x49\x42\x9e\xa9\xad\xdb\x5d\xdd\xfe\xb4\xe1\xe4\x20\x1d\x98\x35\xd2\x09\x1a\x65\x23\xd1\xdd\x76\x8a\x90\x6d\x9e\x14\x21\x5a\x41\xad\x4e\x0d\xf2\x3c\x5d\x61\xcf\x45\x9f\xb5\x4f\x19\x97\xeb\x6b\xf1\x31\x16\xb3\x11\xb3\x17\x11\x23\xa3\x95\xd4\xe1\x88\xb1\x94\xb9\x6e\x7e\x04\x7c\xe9\xae\x2a\x8b\x62\xe5\x53\xd2\x35\xbe\x6c\x8d\x6e\xb1\x81\x66\x5b\x93\x8f\xfc\xe8\x3e\x8a\x5b\x15\xe4\x6a\xe0\xd4\x92\x96\xb5\x68\xea\x68\x41\xcb\xb1\xaf\xdc\xc7\xbe\xd8\xe7\xd4\x96\x7b\x98\xf3\xd3\x82\x66\xdb\x3e\x67\x62\x9c\xd5\xb2\xb1\xb0\xf9\xb3\xa8\x27\xe7\x4c\x82\xb3\x5a\x76\x46\xcb\x8d\x51\x59\x7d\x6b\x79\xb4\x54\x50\xf2\x3e\xc5\xf1\x56\x45\x50\x57\x59\x58\x2f\x00\x5e\xde\x98\x0a\x7e\xff\xa2\x2c\xe2\x53\xd7\xcd\x5b\xcf\xed\xe7\x42\xf4\xae\x10\xfb\x99\x50\xf8\xed\xb6\x65\xb8\x6e\x09\x95\x15\x73\x9a\xe4\x2f\x87\x50\x5b\x96\x35\x2b\x00\xa8\xa0\xe5\x2a\x94\x48\x6e\x6b\x6b\x4e\x00\xfc\x39\xe8\xdc\xbc\x68\x45\x77\x73\x72\x8d\x59\xd2\xb2\xf1\xe8\x16\xfb\xcf\xee\x45\xe5\x25\x7a\x9a\xcd\x87\x9f\xb2\xba\xb3\xef\x94\x66\x2f\x8e\xcd\x47\xec\xc4\x20\x59\xed\x78\x3a\xc2\xb7\x55\xf1\xe8\xeb\xae\xf1\xb3\x3c\x46\xe3\x9d\x1b\xe9\xa7\x37\xb2\x9f\xda\x18\x7e\x71\xa3\xd5\xf8\x57\x37\xe4\x8b\x86\x9a\x59\xd2\xd5\xf9\x9b\xf9\xd2\x85\x99\xf9\x8b\xaa\x9e\xbf\x76\xdb\x5c\x9c\xab\xc5\x6c\xe5\x3c\xcf\x27\x2f\x2b\x37\x88\x7b\x9e\xe7\x32\x61\x7d\xd1\x52\x3f\xe7\xb3\xdc\x93\x73\xcd\x56\x43\x71\x21\x89\xaa\xcb\xd0\x28\xfb\x13\x5e\xb0\x2e\xc3\x3f\x95\x8c\x56\x2c\xaa\xc2\x8c\x96\xb5\x78\x44\x4c\x33\xdc\xd8\x2e\x2a\x37\xc5\x82\xef\xcc\x85\x0b\xb3\xf3\xf6\x81\x5a\x31\xb2\xa0\x96\x6f\xa9\xf2\xa3\x73\x7a\x66\xed\x5f\xec\xf6\xe5\x3d\xca\xa9\x4b\xd8\x72\xef\x29\x19\xa5\x68\xde\xc8\x32\xbf\x7d\x7b\xac\xb9\x28\x4b\xf4\x4e\x08\x39\xf8\x8d\x98\xa6\xc4\xde\x86\xea\xaa\x52\x88\x98\xef\x61\x41\x2d\xc7\x23\x96\x66\x59\xfe\x41\xde\x16\x97\x50\x0b\xd7\xa2\xeb\x02\xf6\xc5\x07\x8c\xc8\x85\x99\xf9\x48\x46\x57\xb9\xb4\x46\x29\x18\xc3\x1e\x15\xb8\xd9\x5f\x4b\x45\x64\xdd\xb8\x8c\x5c\x73\x5f\xdd\xbc\xd8\xf2\x52\xa1\xa8\xea\x7c\xa2\xe7\x84\x61\x51\x29\xda\x1b\xbd\x7c\x36\x5b\x50\x23\x4a\xb9\xac\x64\x6e\x46\x06\xd5\x78\x2e\x6e\x2e\xab\xc4\xff\x9b\x23\x60\x3f\x4d\x9e\xba\x86\x2b\xda\xe5\x6a\x65\x49\x29\x38\xc3\x91\xd1\x16\x3d\x8a\x65\x77\x17\x86\xe2\xd1\x1d\xf5\x5e\x28\xcf\xeb\xf8\x13\x7d\xf4\xb7\x21\xf6\xa3\x50\xf8\x07\xf6\xa7\xf7\x7b\xa1\xe9\x6b\x62\x9f\xcb\x55\x6c\xb6\x1e\x6f\xe1\x76\xd9\xd2\xe2\x29\xd9\xca\x48\x00\x1b\x0f\x71\x07\xaf\x52\x96\x6b\x28\x61\x0f\xb9\x21\xb6\x9e\xbb\x72\x9b\xdf\x5f\x36\x6f\x94\x0a\xca\x6d\xee\x11\x5f\x2c\xf1\x9d\x25\xdf\xfc\x46\x0a\xf9\x22\x7f\x37\x0b\x5a\x2e\x97\xb7\xd6\x51\x2e\x99\x9c\x51\xc8\xe7\xae\x97\x0b\xb7\x85\x34\x4b\xd3\x9d\x3f\x38\x4b\x32\xaf\xf9\xe5\x9e\xd0\x78\x54\xa8\x0d\x53\xe6\x5d\x78\x3c\x98\x7b\x28\xce\x86\xa3\x31\x7b\xb6\xba\xc7\x3d\xc1\xcd\x6a\xd9\x3b\x61\x7e\x4b\x2f\xd0\xf3\xec\x4a\xf8\x39\xab\xc1\x63\x73\x62\x30\x6d\x89\xba\xf5\xdc\x64\x4c\x83\x30\x93\xd5\x16\x56\x1a\xb6\xcd\xd6\x79\x9e\x77\xe9\xff\xec\xa3\xdf\xea\x63\x5f\xe9\x0b\x7f\xd1\xc5\xb9\x92\x11\x5d\x2d\x08\x02\xc8\xf5\x4c\xfe\x44\x31\xb3\xa4\xeb\x5c\xc0\x95\xb7\x3e\x6b\xc7\xda\x5f\xd7\x6e\xc9\x9e\x78\x61\x60\xc9\xb4\x06\x59\xd5\x70\xb4\x52\x8a\x69\x89\xb9\x36\x8a\xeb\xd0\xb9\x8e\xcd\x9c\x12\xcc\xb3\x23\x86\x8c\x54\xe1\xe6\x5a\x0a\xd5\xad\x9d\x86\x2d\x9e\xaa\xe6\x8d\x16\x8e\x58\x2a\x2f\xe9\xea\xb0\x08\xef\xc8\x19\x3e\x67\x9e\x37\xaf\xa4\x89\x77\x97\x5f\x4b\xa2\x40\xfe\x8a\x9a\xff\x7f\xc1\xec\xa2\x85\x91\x6c\xb8\x18\xdd\xea\x3e\xd8\xf3\x62\xbe\x12\xa2\x2f\x85\xd8\x6f\x86\xc2\xbf\x61\x7f\x9b\xbf\x54\xe3\xdb\x2c\x70\x51\x85\xfd\x4d\x9a\xf6\x56\xbe\xc0\xbc\xb7\x72\x18\xf9\xed\x79\xd8\xe6\xb0\xf8\x9d\x67\xe3\xba\xae\xdd\x2a\x3a\x4d\x70\x4d\xa0\x5b\x33\x60\xbf\x15\xd6\xfd\xf8\xdd\x5f\x74\x4b\x59\xc9\x17\x66\xcc\xde\x78\x6e\xe5\x83\x21\xfa\x40\x88\xbd\x2f\x14\x7e\xc9\xbe\x95\xb7\x48\x06\x39\x1c\x51\xb2\x59\xd3\x08\xce\x9d\x9a\xd8\xbb\x77\xef\x61\xb3\x3d\xf9\xcf\x73\x4a\x51\xe3\x4f\xd6\x28\x2b\x8b\x25\x4b\x16\xb7\xa0\xe6\xf2\xc5\xa2\xdc\x64\xaa\x42\xbf\xe7\xd8\x0c\xdb\xda\xf8\xbc\xb6\x64\xb7\xe5\x79\x71\xd9\x2f\x6e\xa5\x73\xb2\x8c\x89\xbf\x9b\xbd\xd6\x92\xb0\xa0\x65\x94\x82\xb1\xc4\xbf\x7e\x25\x63\x6e\x56\xcd\xef\x42\xbd\x65\xb0\xaf\xdc\x15\xfd\xc6\x46\xda\xa6\x54\x80\x94\xf0\x63\x76\x28\xed\x8c\x79\xee\xbc\x38\x37\xc9\xcf\x9d\xe3\xe7\xc6\x0e\x8a\x43\x2a\xf0\x89\xb3\x68\xac\x75\x62\x8b\x7d\x32\xcf\xd0\x45\xba\x50\x41\x34\xea\x54\x30\xa9\xd8\x59\x2c\x27\xe2\xb5\xfa\x99\x7e\xb9\x6f\x45\xb5\x51\x1a\x6f\x99\x9e\x15\x7e\xbd\x79\x7a\xca\xf1\xeb\xb5\xaa\xed\x37\x0b\x2a\x78\x81\xe6\x5c\x54\xb0\x55\x8d\x07\xad\xc3\x0b\xc1\x0b\xed\x69\x76\x5a\x2e\xb4\xeb\xec\xf1\x6a\x76\xc0\xbd\x1e\x0f\x8a\xee\x4c\x03\x4e\xd5\x87\x53\x69\xb8\xee\x6b\xb8\xee\xd7\xdf\xca\x89\xfd\x97\x21\x3a\x23\xeb\x29\xa9\xe5\x5b\x9a\x6e\x3e\x01\xd7\xcc\xc0\x75\x77\xb5\xe6\x87\x7c\x31\xa7\xab\xee\x42\x4b\xef\x1f\x62\x7f\xbe\x81\xee\x76\x5a\x32\xe7\x84\x4f\x84\xa4\x78\xcf\x49\x88\x61\x3e\x39\x31\x32\x56\x92\xd2\x69\xd1\x54\xdc\xe5\xf7\x1b\xb7\x3d\x86\x03\xbc\x81\x01\x27\x1e\xd6\x13\xe0\xa8\x95\x54\xdb\x9d\x6b\x94\x55\x25\x3b\xec\x04\x82\xf0\x0d\x8a\x0c\x1b\xc8\x97\xd5\x45\xe7\x1d\x1c\xf0\xc4\x6e\xb9\xda\x8e\xc7\xa2\xfc\x72\xe7\xec\x9b\x70\xcf\x4e\xb2\x9f\x5d\x9e\x1f\x35\x7d\x93\x66\xc5\x14\x34\x4d\xa7\xf9\x14\x94\xa4\x13\x74\xac\x09\x5c\xcf\xf3\x99\x4c\x2d\xab\xc5\xe0\x7c\x1f\xb5\x71\xde\x2d\x81\xf3\x9e\x09\xb6\xf2\xfb\xd9\x5e\x2b\x8f\x6f\xe5\xdb\x28\x4d\xbc\x7c\x00\xa8\x98\x8f\x74\xb0\xa8\x98\x8f\x84\x00\x48\x08\x80\x84\x00\xe5\x1e\x4d\x08\x80\x8a\xf9\xa8\x98\x8f\x40\x6c\x04\x62\x23\x10\x1b\x81\xd8\x5d\x11\x88\x9d\xde\x47\x63\x6c\x4f\x34\x6e\xf3\x8f\xfb\xdc\xbe\x26\xb9\x73\xbb\x23\xfc\x4d\x3d\x1d\x12\x8b\x4a\xfe\xa8\xe4\xbf\xbe\xf2\xde\xb2\x1f\x86\xe9\x70\x40\x25\xff\x51\x89\x20\xf2\x36\xe5\x7c\x61\xd4\xe0\xea\x66\xf6\xd9\x30\xfb\xb5\x7e\x62\xd5\xd5\xfd\xc3\x03\x5c\x2c\x20\x0e\xab\x16\x46\x25\x67\xa7\xe7\x45\x8b\xb1\x27\xcc\x03\xab\x2a\xfd\x3b\x07\x08\x1d\x75\x8b\xe5\x51\xb7\xe9\x8a\xa0\x80\x97\xe8\x69\x4e\x01\xcf\xd3\x93\x74\xd6\x97\x02\x9a\x6d\x8c\x28\xb9\x9c\xf9\x8a\x94\x35\xdd\x01\x81\x95\xe3\x25\x4a\xf6\xcb\x5e\xaf\x56\x60\xf5\x7c\x30\x11\x3c\xc6\x8e\x58\x7e\x1f\xdf\x27\xe7\x01\x81\x02\x11\xba\xfa\x17\xfe\xfc\x16\xdf\xe7\x16\xb3\x02\x4f\x1b\x78\x74\x83\xf2\xd8\x0e\x3f\xbd\x94\x42\x57\xe9\x72\x85\x87\xb2\xb5\x8f\x0f\x32\x6c\x04\xa9\x36\xe9\xe9\xfa\xc3\x50\xdb\x6d\x4b\x46\x78\xbb\x9f\xa3\x67\x1d\x6f\x77\x17\x19\x30\x1e\xe6\xda\x98\x01\xab\x32\x4b\x8d\x5b\xb4\xd4\x67\xb6\xfa\x1a\xb0\xbd\x55\xc1\x2a\x0d\x58\xb2\x5d\x5c\x57\xdd\x41\x3b\x86\xb8\x95\x5e\x33\x98\x88\x5b\x41\xdc\xca\x1a\xc7\xad\xac\xfd\xaa\xb7\xed\xcb\xda\xc0\xd0\x99\xf4\x41\xda\xcf\xf6\x46\x13\x36\x53\x79\xa3\x9b\xc4\x38\x2d\x75\xa0\xee\xed\xef\x0e\xd1\x49\xb1\xf5\x5a\xe0\x5a\x12\x2b\xab\x4f\x5d\x65\x49\x46\xd7\x8a\x37\xb4\x05\x5b\x58\xf2\x8f\x87\xd8\x9f\x6c\xa0\xbb\x79\x0b\x76\xc0\x66\x43\xc2\x92\x09\x5d\x2b\xa6\xb5\x85\x2e\x12\x96\xa4\xcc\xff\x54\x05\x8c\xca\x7e\x42\x58\xd2\x84\xb0\xe4\xa9\xe0\xef\x2d\xce\x86\xe5\xf7\xc6\xdf\x21\x2b\x41\x96\x18\x74\x9f\xb0\x30\x28\x4a\xa0\x28\x81\xa2\x04\x8a\x12\x28\x4a\xa0\x28\x81\xa2\x04\x8a\x12\x28\x4a\xa0\x28\x81\xa2\x04\x8a\x12\x28\x4a\xba\x48\x51\x22\xb7\x6f\x50\x94\x40\x51\x02\x45\x09\x14\x25\x1d\x55\x94\xfc\xff\x87\x68\x26\x38\x81\x79\x7d\xca\xa9\x6b\x05\x75\x21\x5f\xcc\xe6\x8b\x39\x83\xbd\x36\xc8\xfe\x68\x03\xbd\xc1\x2f\x3f\x5d\xf8\x96\x9c\x91\x8b\xd9\xfc\x72\x3e\xbb\xa4\x14\x3c\xcc\xd3\x5e\xfd\xf2\xc4\xd3\xa2\xbd\x96\xf0\xce\x78\x2c\x71\xab\x46\xba\x3b\x6f\xa6\x3b\x79\xd1\x99\xbc\x51\x06\xc0\xac\x06\x98\xd9\x60\x3e\x99\x64\x27\x56\x90\xc7\x4a\x8e\xb7\x37\xac\x79\xa7\x3f\x26\xdd\xca\x88\xdf\x3e\xaf\x84\x0d\xae\x09\xae\x09\xae\x09\xae\x09\xae\x09\xae\x09\xae\x09\xae\x09\xae\x09\xae\x09\xae\x09\xae\x09\xae\xd9\x61\xae\x09\x42\x09\x42\x09\x42\x09\x42\xd9\x46\x42\xf9\xff\xf6\xd1\x0e\x27\xed\xa3\x98\x9d\xdc\x74\x92\xf1\xaa\x3d\xf4\x7a\xef\xaf\xe1\x70\x8e\x17\x6e\xb9\xa6\xe9\x8b\xf6\x70\x2a\x22\xc9\x75\x6c\x7b\x4e\x2d\x27\x3d\x87\x27\x67\xa7\x4f\x9b\x3f\xb5\x2e\x66\xa0\xaa\xa1\xf1\xaa\x86\xc6\x1b\x69\x28\x9d\xa7\x73\x82\xf4\x9d\xa6\x29\x4e\xfa\x4e\xd0\x31\x3a\xd2\x04\xe9\xb3\xee\x31\x88\xf3\xb1\x8f\x0d\x5b\x45\x2d\x95\xa5\xb2\x66\x64\x94\x42\xbe\x98\xab\x93\x5f\x93\x9f\xae\x15\xcb\x4a\xa1\xa4\x65\xad\x53\x54\xdd\x56\xbd\xfe\xc7\xdd\xec\x5f\xf4\xf3\x07\x64\x35\x26\x63\xd7\xaa\x2a\x59\x9e\xb1\x5b\x9a\xd5\xb2\x49\xbb\xa5\xd8\x18\x0f\x3b\x74\xce\x77\x83\xdb\x1a\xe7\xb4\x38\x06\x71\x51\xd4\x9b\xd9\xc3\xeb\xcd\x98\x4f\x61\x82\x92\x74\xa2\x5e\x4e\x49\xab\xaf\xe6\xd0\xd7\xe8\xe3\x6a\xe3\x0e\x57\x54\x58\xc0\xd5\x25\x89\x60\x6b\xf5\xca\x8d\x63\xc3\x1f\xdb\x52\xf5\xe4\x46\xfc\xcb\x5d\xd6\x7a\x78\xfb\xad\xc0\xc3\x35\x7c\x7e\xa9\xa7\x69\x9e\x9e\xaa\x88\xa0\x59\xfd\x03\x44\x20\x0d\x22\x0f\x9b\x8c\x3c\xfc\x72\x88\x2e\x89\xc8\xc0\x59\x3a\xe7\x44\x06\xb6\xd5\xac\xb4\xc3\x86\x35\x55\x1a\xab\x39\x5b\x14\x10\xc5\x18\xfb\xfc\xb6\x2a\x53\x15\xb1\xab\x67\xd6\xb2\x4e\xfb\xc4\x11\x6b\x6a\x9c\x50\x58\x13\x85\x35\x51\x58\x13\x85\x35\x51\x58\x13\x85\x35\x51\x58\xb3\xf6\xea\xa1\xf1\xa5\x82\xcf\x3a\xa3\x81\xc2\x9a\xff\x7c\x6b\xd5\x02\xe2\x40\x40\x35\xcd\x5a\xcb\x8a\xbd\x22\x47\xc1\x1a\xad\x2a\x90\xb0\xa0\xd7\xd6\x32\x48\x58\x80\x84\x05\x6b\x9c\xb0\x60\x6d\x10\x59\x6b\xab\x6f\x36\xb7\x31\x4d\x4f\x52\x8a\x9d\x8c\x1e\xb7\xdd\x60\x3b\xdd\xf2\xfe\x1a\x2d\xdc\x09\x72\x7f\xf6\x77\x97\x69\x54\xa0\x62\x23\x73\x5d\xcd\x2e\x15\x3c\x65\x37\x44\x86\x84\x92\x9e\xd7\xf4\x7c\xf9\x76\xa6\xa0\x18\x86\x6a\xb0\xdf\xba\xcc\x7e\x6d\x17\x31\xe7\x04\x3b\x13\xc2\x6e\xa1\x13\xd1\xa5\x87\xdb\x5a\xba\x5b\x39\x10\x66\x65\x43\x13\x66\x43\xb1\xa8\x79\xf0\xbc\xdd\x88\xcc\x44\xe0\x39\xa6\xcb\x45\xbc\x29\xa8\x58\xa1\x62\x4d\x41\xc5\x0a\x15\x2b\x54\xac\x50\xb1\xf6\x8c\x8a\x35\xd5\x35\x2a\xd6\x96\xf7\xa4\x69\x15\x6b\x0a\x2a\x56\xa8\x58\xa1\x62\x85\x8a\x15\x2a\xd6\xce\xab\x58\x53\x3d\x2d\x09\x4d\x41\x12\xda\x3e\x49\x68\xaa\xdb\x25\xa1\xa9\x75\x28\x09\x5d\x61\xf0\x73\xdc\x85\xa6\x24\x69\x8a\x7b\x30\xd1\x4c\xde\x08\x0e\x7e\xae\x5d\x6d\x99\x47\x24\xdf\xc8\x04\x63\xc6\x93\xec\x78\x55\x86\x46\xc9\x1d\xab\xe8\x99\xa4\x8f\x9e\x7e\x52\xf4\x95\x2d\xbe\xdc\xec\x8d\x76\xb9\x72\x2f\x22\x7b\x5c\xfc\xbd\x43\x90\x4c\x30\x2d\x9e\xa5\xb6\xc2\xf3\x53\xc7\x75\x18\xf8\x70\xe0\xfa\x81\xc4\xae\x49\x89\xdd\xbb\xfb\x56\xe4\x19\x0f\x7c\x15\xe9\x29\x21\xd8\x4b\xd3\x19\x47\xb0\xb7\xca\x26\x57\xee\x6c\x0f\x6e\xb3\x79\x53\xc6\x0b\xc7\x37\x68\xca\x56\x64\xb9\xaa\xec\x5e\xec\xfb\xc3\xbe\xa6\x2c\x2a\x65\x16\x2e\xcd\x8a\x76\xad\xc2\xac\xc5\xc5\x31\x55\x66\x6d\xc2\x3e\xa7\x9d\x06\xae\x3d\x62\x3d\x50\x60\x50\x60\x50\x60\x50\xe0\xde\xa1\xc0\x58\xd7\x05\xac\xeb\xba\x07\x93\x43\x28\xdd\x11\xa1\x34\xbc\x11\xf0\x46\xc0\x1b\x01\x6f\x04\xbc\x11\x3d\xed\x8d\x40\xbc\x0c\xe2\x65\x10\x2f\xd3\xae\x78\x19\x38\xfb\xe0\xec\xeb\x55\x67\x5f\x3a\xd7\xe2\x50\xb1\x20\xd2\x1c\xf3\x27\xcd\xf7\xb1\x7b\xc5\xd7\xec\x58\xda\xce\x50\xe7\xd6\x0b\xe0\xff\x45\x8c\xf6\x4b\x01\x7c\x59\xd3\x95\x9c\x5a\xa9\x7e\x5f\xd6\x0a\x4b\x8b\xaa\x52\x2e\x2b\x99\xeb\xe6\x22\xd9\xce\x8a\xf2\xb7\x43\xec\x43\xfd\x74\x8f\x3c\xcd\x06\xe0\x3b\x7d\xd2\xa2\x5c\xe4\x6d\x24\xed\x36\x62\x51\xf3\xa0\x79\x71\xa6\x84\xdf\x95\xc7\xb4\x38\xff\xc9\xca\xde\x9c\xb8\x35\x18\x96\x83\xa2\xb2\x77\xab\xcd\x7c\xb2\xb2\x97\xc5\xf3\x64\xe4\x9b\x52\xd5\xa3\xaa\x97\x25\xfc\x8f\xb6\x54\x3f\x9e\x5d\xfe\xb9\x4f\xaa\x9e\xd0\x13\xf2\xb8\x4e\x3e\xa4\x95\xfb\x5e\x03\x9e\x12\x18\x1d\x7c\xaf\x4d\xfa\x5e\x3f\xbb\xb2\xa8\xe4\x60\x83\xd1\x84\xef\xb5\x7d\x36\x88\x17\x4d\xef\x84\x0d\x8a\xbd\xbc\xad\xda\x06\x6d\xb7\x93\x9a\x54\x99\x9d\xc7\xa5\x6b\xb4\x93\x56\x07\xd9\x4b\x90\xbd\xe4\xce\x85\xf2\xa0\x31\xa0\x31\xa0\x31\xed\xcc\x5e\x52\x33\x5b\x59\x6b\x17\x10\xcd\x28\xad\x02\xda\xb4\x16\x0a\x81\x99\x45\x3a\xb2\x56\x48\x7d\x70\x6b\xf5\x5a\x61\x34\x20\x7f\x49\xd5\x0a\x62\x27\x0f\x9b\xef\xd4\x02\x02\x89\x4a\x7a\x6d\xd9\x82\x44\x25\x48\x54\xb2\xc6\x89\x4a\x3a\xcd\xb2\x02\x53\x94\x74\x62\x76\x48\x1f\xa3\x23\xec\x70\xf4\xa0\x9d\x5d\x64\x87\x3b\x47\x49\xe5\xf9\xd5\xc9\x49\x5a\x4e\x4e\xff\xcd\x36\x0a\x8f\x2a\xa5\x3c\x4f\x2c\xad\x65\xad\x9c\xd2\x2f\x8c\x96\x74\xed\xad\xb7\xd9\x47\xb6\xb1\x77\xf6\xd1\xa6\x8c\xa6\x9b\x93\x59\xf8\x89\x8c\x56\x2c\x9a\xcb\xfc\xd3\x53\x17\x9c\x4f\xa4\xac\x45\xf8\xd1\xe6\x6d\x9c\xd3\xb2\x6a\x6c\xbb\x3c\x6c\x42\xd3\xd5\x8b\x89\xd3\x6a\xd9\xfc\xeb\xac\x79\xc8\x98\xb9\x57\x15\x2c\xf3\x20\xed\x10\xcf\xff\x7e\xba\x8f\x3f\xff\xbb\xe9\xae\x5f\x0d\x6d\x26\xd9\xb9\xc0\xe7\xf9\x98\xff\xf3\x24\xb6\x59\x5e\x9d\x6e\xcc\x05\x3f\xd1\x51\x36\x22\x9f\x68\x34\x2a\x9f\xa2\xdd\x59\xb9\x09\xf6\x66\x62\xf6\x1d\x8e\xd9\xa7\x1b\x1f\x8e\xd9\xa5\x1a\xc3\x51\x73\x05\x56\x77\x9c\xd6\x76\x38\xa2\xef\x76\x0d\xc7\x2e\x7b\x38\xce\xcf\xd7\x1b\x8f\xb0\x77\x3c\x34\xe3\x0e\x7a\x3f\x62\x2f\xb9\x06\x64\xd0\x1a\x90\xc9\xa9\x99\xa9\x0b\x53\x75\x86\x64\x87\x67\x48\x04\x83\xe9\xea\x41\xf1\x49\xf3\x57\x7b\x80\xc6\xde\xeb\x1a\x94\x21\x6b\x50\xce\xcf\x5e\x98\x3e\x7f\x6e\xbe\xce\xa8\x3c\xec\x19\x15\xd9\x5a\x57\x0f\xcb\x8a\xde\x95\x71\xdf\x8f\xe7\xcc\x54\x72\xb2\xe1\x8f\xe7\x8c\xaa\x64\xdb\x31\x20\x6d\xb8\xdb\x06\x06\x39\xf5\x73\xae\x01\x19\xb0\xad\x49\xf2\xc2\xc4\x99\x3a\x23\xf2\x90\xd7\x9c\x98\x93\xf9\x9d\x33\x24\xf5\x17\x0c\x95\xad\x57\x2f\x18\x16\xe8\x79\x76\x25\xfc\x9c\xb5\x60\x48\xcd\x2a\x65\x21\xb0\xbb\xae\x46\x9e\x9e\x9b\x31\x17\x6a\xd7\xb9\x6f\xdd\x50\x6d\xf2\x97\x59\xd2\x75\xb5\x58\x96\xc3\x6c\xc9\x2a\xca\x5a\xc4\x5c\x20\xc4\xa3\xbc\x1f\xee\x35\xc4\xef\x0e\xd1\xb4\xac\x54\x51\xca\xab\x6f\x2d\xab\x45\xee\xc9\xaf\xf4\xc1\x8a\xea\xc5\x99\x25\xa3\xac\x2d\x5a\x44\xc6\xbd\xd8\x93\x1e\xd9\x9f\x1a\x62\x9f\xde\x48\xf7\x7b\x9a\xb2\x37\xd2\xbf\x11\x92\x4e\x7b\x57\xc5\xe2\xa2\xc5\x1e\xad\x0c\x65\x13\xfc\x12\x56\xec\xc6\xa4\x7d\x89\x96\x94\x31\x1e\x76\x14\xa1\x9c\x7d\x4a\xfd\x60\xbe\xac\x2e\x3a\xdb\xa3\x01\x8f\x88\xdb\xd5\xb6\x55\x04\x39\xe9\xbe\x3b\x2b\x70\xaa\x46\xb7\xbb\x3c\x7f\xda\x9a\x14\x41\x7e\x4b\xf0\xc7\x78\x8e\xcd\x58\xe9\x04\x7d\xde\x4a\xf9\x79\xd6\x1a\xf3\xea\x95\x7b\x9d\xfd\x03\x1f\x0b\x54\x43\x46\x1e\x39\x54\x43\x46\x04\x21\x22\x08\x11\x41\xd8\x4b\x11\x84\xa8\x86\x8c\x6a\xc8\x88\xdc\x42\xe4\x16\x22\xb7\x10\xb9\xd5\x15\x91\x5b\xe9\x29\x9a\x60\xc9\xe8\x09\x9b\x98\x3c\xee\x26\x26\xb5\x36\x7c\xed\x77\xb5\xa0\xe4\x31\x42\x5e\x50\xf2\x78\xfd\xe4\xb7\x63\x1f\xbd\x4c\x7b\x2c\xac\x59\x32\xea\x54\xde\xcd\xaa\xa5\x82\x76\x9b\x87\x95\xb0\x3f\x7b\x8e\xfd\xc4\x2e\xda\x64\x9e\xc1\x3d\x40\xf5\x6b\x29\x4c\xda\x67\xc6\x1e\x31\x8f\x4c\x96\x4a\x86\xbb\x44\x91\xf3\x7b\x97\x43\x40\x14\x51\x00\xfc\x42\x11\x05\xc0\x2f\xc0\x2f\xc0\xaf\x1e\x82\x5f\x5d\x94\x1d\xaa\x6b\xe0\x17\xd2\x16\x01\x7e\x01\x7e\x01\x7e\x01\x7e\xa1\x88\x02\xf2\xaa\xdc\x39\x90\xa9\xeb\xf3\xaa\xac\xcb\x22\x0a\x97\x29\x25\xc4\x53\x47\xe8\x30\x17\x4f\xed\xa5\x04\x8d\xd6\x2e\xd7\x5a\x2a\x19\x22\x4a\xdb\x02\x43\x0d\x95\x4d\x38\x17\x2c\x97\xda\xcd\x86\xfc\x4a\x77\x97\x4a\x86\x94\x4a\x39\x97\xa4\xa0\x32\x0c\xd1\xef\x6e\x76\x10\xd8\x7d\x76\x59\x04\x17\xed\x92\x13\x51\x07\x78\x97\xc0\x53\x5c\x92\x56\x11\x60\x36\x42\xbb\x57\x30\xce\x88\x29\x43\x16\x8e\x26\xb3\x70\x7c\x3b\x44\xc7\xc5\x47\x7e\x90\xf6\xf3\x8f\x7c\x94\x56\xf6\xf2\xd1\x84\xc8\xbb\x71\x94\xc6\x9d\xbc\x1b\x2b\x6e\x64\x52\xc4\xde\x1e\xa3\x23\xae\xd8\xdb\x15\xb7\xb2\xda\xba\x06\x8d\xd9\xa2\xba\xf6\xc7\x13\x70\xf1\xdb\xc3\x8e\xad\x79\xd4\xb7\x6e\x81\xcb\xee\xc4\xc4\x01\xc2\xee\x38\x95\x0a\x3a\x60\x81\x50\xb0\x00\xc4\x15\xc4\x15\xc4\x15\xc4\x15\x05\x0b\x50\xb0\x00\xb9\x91\x50\xb0\x00\xe4\x1f\xe4\x1f\xe4\x1f\xe4\x1f\xe4\xbf\x25\xe4\x1f\x29\xf2\x90\x22\x0f\x29\xf2\x50\xb0\x00\x8e\x35\x38\xd6\xd6\x79\xc1\x82\x16\x23\xe2\x95\x14\x40\x48\x3f\x4f\x57\xd8\x73\xd1\x67\xed\xe8\x91\x71\x39\x81\x0b\xb7\x45\x31\x1b\x31\xbb\x1b\x31\x32\x5a\x49\x1d\x8e\x18\x4b\x99\xeb\xe6\x22\x86\x3f\x25\x55\x59\x14\xf6\xb4\xa4\x6b\x7c\x32\x8c\x6e\xb1\x45\xe2\x6d\xcd\xe1\xf5\xb9\x2b\x74\x42\x08\xd5\xb3\x79\x23\xa3\x99\xab\x1d\x27\xf7\x46\x2d\xd1\xba\x5a\xcc\x96\xb4\x7c\xb1\x6c\x14\xf2\x19\xd5\x60\x3f\xb8\xcc\x7e\x65\x17\x6d\xb5\x1b\xb8\xba\x9c\x08\xef\xae\x2f\x5e\x9f\x92\x2d\xcc\x9b\x2d\xc4\x76\x99\x07\x4f\x5a\xa7\xbb\x9d\x7a\x9e\xe3\xa0\x63\x87\x8e\x1d\x3a\x76\x78\x55\xe0\x55\x81\x57\x05\x5e\x95\xae\xf1\xaa\x74\x8f\xd3\x00\x34\x1b\x34\x1b\x34\x1b\x34\x1b\x34\xbb\xa7\x69\x36\x70\x1b\x70\x5b\x8f\xe2\xb6\x75\xa9\x63\x57\x29\x2d\x10\xe1\x04\x25\x39\x22\x3c\x42\x87\xe9\x60\x4d\x5d\xa9\x03\xaa\x96\x13\x71\x0f\x20\x6a\x48\xcf\x1e\xa0\x3f\xbf\x71\x39\x18\x20\x8e\xb3\x43\x3e\x7a\xf7\x4a\x80\x26\xc1\xa2\xa7\x87\x14\x7d\x79\x4b\x05\x29\x7b\xc0\xd2\xb8\x17\x2b\xa8\xd8\xa0\xf8\xa1\x83\x5c\x4c\x60\xac\x69\x3a\x4d\x53\x15\x7a\xf7\xfd\xb4\xb7\x89\xe7\x01\xc1\x15\x74\xef\x4d\xea\xde\xff\x26\x44\xa7\x84\x51\x38\x41\xc7\xb8\x51\x38\x48\xcd\xbd\x84\x74\x56\xe8\xdf\x27\x29\xe5\xe8\xdf\x9b\x6e\x6c\x46\xe8\xe0\xa7\x68\xc2\xa5\x83\x6f\xba\xb5\xd5\xea\xe1\x1b\xb3\x55\x2b\xb1\x4f\x1e\x79\xfc\x9f\x0c\x57\xd8\xaa\xa8\xaf\x46\xde\x6b\xb6\xc6\xc4\x31\x2e\xb3\xe5\xa7\x95\x6f\xa7\x01\x83\x5c\x1e\x60\x17\x60\x17\x60\x17\x60\x17\x72\x79\xc8\xe5\x21\x97\x87\x5c\x1e\x0e\x06\x38\x18\xe0\x60\x80\x83\x01\x0e\x06\xc8\xe5\x21\x97\x87\x5c\x1e\x72\x79\xf8\xef\xe0\xbf\xeb\x42\xff\x5d\xc7\xe5\xf2\x2b\x90\xb7\xb7\x99\x36\xaf\x47\xf5\xfc\x57\x06\x68\xa4\xa6\x7a\x5e\x54\xae\xac\xd0\xca\xbf\x6f\x80\xfd\xf4\x06\xba\xd7\x4d\xd5\x45\x75\xca\x15\x09\xe6\x13\x15\x82\x79\xde\x84\xe7\x90\x53\x9a\x9e\x2c\x14\x6c\xde\x6e\x74\xb9\x76\x3e\x7d\x83\xce\x8b\xf7\xfe\x0c\x9d\xe2\xef\xfd\x49\x3a\x4e\x47\x1b\xf2\xa9\x88\x9a\xee\xad\x77\x04\x2f\x04\xbf\xee\x27\xd8\xb1\x26\x5f\x77\x59\xd2\x1d\x21\x03\x08\x19\x40\xdd\x47\x78\x96\xe0\x59\x82\x67\xa9\x77\x3c\x4b\xa8\xfb\x88\xba\x8f\x20\xfa\x20\xfa\x20\xfa\x20\xfa\x5d\x41\xf4\x51\xb0\x11\x05\x1b\xd7\x0b\xc3\x44\xc1\xc6\x76\x14\x6c\x7c\xf5\x21\x3a\x25\x48\x1e\x87\x11\x45\xa5\x10\xb7\x77\xf6\x0e\xd2\x53\x0a\xa5\xeb\x4a\x62\xd4\x28\x6b\xba\x92\x53\xad\x47\x2a\x72\x63\xbc\x30\x6a\x70\xe4\xca\x7e\xe2\x21\xf6\x3b\xfd\x14\xb6\xda\x49\x5a\xcd\x5c\xb5\xce\x0f\xef\xd6\x55\x25\x1b\x11\x87\x5b\x0f\xc0\x99\x8d\xe7\x45\xeb\xb2\xb7\xb1\x84\x79\xf0\x74\x65\x63\x17\x65\x5b\xde\x83\x05\xf4\x6d\xad\x9c\x36\x5d\xaa\x49\xd2\xe8\x69\xc1\xec\xce\xd1\x0c\x67\x76\xa7\x68\x92\x52\x75\xf2\x81\xcb\xbe\xdb\x23\x6c\x0d\x48\xdc\x7b\x17\x16\xa0\x7b\xd8\x1f\xd0\xbd\x8e\x6d\xc8\xa9\x65\xba\xb1\x18\xcc\xe7\xd2\xec\x8c\xe4\x73\x35\x9f\xaa\x04\x75\xde\x1e\xb8\x49\x9d\xe8\x22\x85\x5f\xd9\x52\xf7\x99\xc6\x75\xb5\x54\x50\x32\x6a\xa3\x8f\x75\x9f\x3c\x7e\x0d\x9f\x6c\xea\x19\xba\x48\x17\x2a\x22\x3d\x5a\xf2\x04\x21\x1d\x44\xe0\x47\x93\x81\x1f\xbf\x1d\x6a\x93\x55\xa1\x67\x45\x1c\xc8\x3c\x3d\xe5\xc4\x81\xb4\xaa\xed\x20\x5f\x43\x6d\x53\x56\x5a\xea\xb8\x29\x4b\x7d\x6d\x6b\x5d\x53\x76\xb0\xa4\xe8\xe6\xb6\xdd\xdc\xea\xf2\x49\xb6\x51\x9b\x36\x56\x32\xe7\xd5\x35\xb2\x68\x0f\x55\x36\x34\xc2\x7b\xb3\xdb\xfc\xe7\xf8\x0e\xf7\x8f\x8b\xaa\x9e\x53\xdd\xbf\xee\x72\xff\x6a\x2e\xc5\xcb\x6a\x2e\x9f\x19\xa9\x3a\xce\xd3\x8a\xf9\xef\xdb\xf2\x57\xb3\x97\x29\xf3\x7d\x4d\x57\x58\xd3\x71\x3a\xd4\x84\xef\x76\x96\xfb\x0a\x60\x43\x03\x6c\xe8\x27\xfb\xe9\xe3\xfd\xec\xe5\xfe\xf0\x47\x6d\xe7\xd9\x8b\xfd\xbd\x63\x43\x2b\xf0\x8a\x39\xce\xdc\x5d\xc0\x11\xa0\xf9\x72\x3a\x4e\xc3\xc1\x1a\x2f\xee\x10\xe7\xe6\xc2\xbb\xa4\x14\xf8\x99\x45\xad\x38\x22\xce\xe6\x47\x70\xef\xa2\x11\x19\x4c\x1b\x5a\x71\x56\x78\xcf\x9e\x34\x3f\x0b\xf9\xef\x79\xeb\x63\x71\xfe\x38\x54\xdb\xb8\xa7\x5e\x0b\xd1\xab\x21\xf6\x4a\x28\xfc\x25\x7b\x67\xf0\xb1\xd0\x29\xcd\xdc\xe8\xe6\x8d\x48\x4e\xe3\xc3\xae\x45\xa2\xd7\xcc\x3f\x45\x23\x49\xcf\x5d\xf0\x3d\x9f\xd0\x6e\x2f\x19\x8e\x9f\x60\x44\xc9\xf0\x1b\xe7\xde\x97\x42\x3e\x23\x45\x59\x6a\x21\x6b\x44\xb4\x5b\x72\x4c\x85\x77\xa2\xa4\x6a\xa5\x82\x1a\x8f\x88\x2b\x72\x77\xa7\xf5\x2c\xf9\xde\xcb\x77\x00\xec\xcb\x47\x37\xf2\x6e\x79\x5c\x77\xa5\x76\x4d\x56\x41\x13\xca\xa3\xfe\x13\xca\x66\xf6\x3a\xde\xeb\x4e\x4f\x29\xe9\x23\x74\x98\x1d\x8c\xee\xb7\xc5\x1b\x61\xfe\xd5\x49\x13\xe0\x3d\x3d\xba\xc1\xfc\xad\xad\xba\x8c\xef\xf7\xd1\x43\x62\x37\x57\xd4\xb2\x6a\xd5\xfe\x8d\x7d\xbd\x8f\x7d\xad\x8f\xee\x36\x7f\x74\xa6\xbd\x07\x72\x6a\xd9\xcb\x4c\xc5\x6e\x34\xf6\x50\x4e\x2d\x9f\xd3\xb2\xaa\x35\x8f\x25\x67\xa7\x2d\x17\x5d\x0b\xe7\xaf\xaa\x86\xc6\xab\x1a\x1a\x6f\xa4\xa1\x56\xed\xd7\xea\xcc\x4f\xae\x01\x98\xc9\x1b\x65\xf9\x4e\xb2\x8f\x0f\xd2\x7e\x31\xea\xfa\x82\x92\x89\x5b\xd7\xe5\xbd\x75\x25\x95\xe4\x9b\xef\x51\x5d\x2b\xa8\x0b\xe6\xfc\x55\xcc\x19\xec\xcf\x07\xd8\xff\xbd\x81\xde\x60\x9e\x96\x74\x9f\x75\x75\x39\x11\xbe\x25\x31\x71\x31\x9b\x5f\xce\x67\x97\x94\x82\x1b\x20\x28\xb6\x4b\x66\x4e\x2b\xa8\x29\xd1\x5e\xdc\x25\xa5\x1d\xb7\x69\xfd\x00\x6f\x67\xc0\x71\x45\x7b\x7c\x8b\x5a\x49\xb5\x03\x65\x8c\xb2\xaa\x64\xe3\xb1\x83\xfc\x84\xb9\xca\x3e\x5d\x4c\xb8\x2e\x65\xde\xfe\x7a\x93\xda\xdc\xa4\x59\xf1\x1a\x4c\xd3\x69\xfe\x1a\xf0\x02\x77\x4d\xbc\x06\x1c\xe9\x4c\x2d\x37\x52\xd8\x6b\xa7\xbf\xb9\xda\xca\x88\x77\x4c\x08\x6e\xb2\xc1\x26\x2b\xc9\x4e\x48\x93\x55\xf3\x15\x93\x26\xcb\xf5\x90\xbc\x32\x33\x48\x6e\x20\xb9\x81\xe4\x06\x92\x1b\x48\x6e\x20\xb9\x81\xe4\x06\x92\x1b\x48\x6e\x20\xb9\x81\xe4\x06\x92\x1b\x48\x6e\x20\xb9\x81\xe4\x06\x92\x1b\x48\x6e\x3a\x24\xb9\xf9\xd1\x10\xa5\xcc\x47\xe7\x30\xc1\x1a\xe5\x66\x2c\xd7\x55\xb1\xbc\xac\x15\x96\x16\xd5\x4c\x41\xc9\x2f\x5a\xaa\x1b\xf6\xe9\x21\xf6\x8f\x36\xd2\xa6\x8c\xa6\xab\x57\x97\x13\xe1\x7f\x15\x92\xcf\xc0\x05\x09\x8b\x96\x55\xb3\xa2\xe9\x66\xed\x16\x2f\xf2\x16\x27\xcc\x16\x5b\x82\x0d\x87\x9d\xf5\x0c\x5f\xb3\xc9\xd9\xcf\x5c\x12\x39\x0b\xb5\x01\xcf\xda\xd8\xd5\x76\x3c\x16\xe3\x97\x9b\xd0\x74\xd5\x9d\xee\xd3\xb7\xbf\xdd\xcf\x19\x6b\x72\xe8\x96\x03\x48\x8b\x33\x5e\x0a\x46\x88\xfb\xd8\x98\x20\x84\xbe\x83\x4a\x3e\x89\x5d\xa3\x51\xaa\xe3\x6f\xe1\x77\x0c\xac\x08\xac\x08\xac\x08\xac\x08\xac\x08\xac\x08\xac\x08\xac\x08\xac\x08\xac\x08\xac\x08\xac\x08\xac\xd8\x69\xac\x98\xa2\x93\xec\x78\xf4\xa8\x2d\x44\x7b\xcc\x2d\x44\xf3\xdd\xf2\x55\xeb\xd1\xd6\x5f\x26\x22\xc0\x4f\xc0\x4f\xc0\xcf\x75\x04\x3f\x7f\xb8\x8b\xb6\x0b\xad\xa4\x52\x2a\x19\xa3\xcb\x89\xd1\xac\x5d\x80\xdc\x60\xff\x69\x17\x7b\xad\x9f\x36\x99\x3f\x5d\x5d\x4e\x84\x07\xeb\xe7\x06\x73\x4a\x97\xc7\x1e\x37\x8f\x4c\x96\x4a\xc6\xc5\x84\xf3\xd7\xf5\x26\x50\xbc\x4c\x29\xc1\x07\x8f\xd0\x61\xce\x07\xf7\x52\x82\x46\xeb\x88\xaa\x4b\x86\x28\xd7\x61\xdd\x70\x43\xe9\xbf\x1a\x2b\x14\xef\x83\x03\xfd\x8b\xc6\x07\xa5\x13\x03\x20\x04\x20\x04\x20\x04\x20\x04\x20\x04\x20\x04\x20\x04\x20\x04\x20\x04\x20\x04\x20\x04\x20\x04\x20\x84\xee\x10\xe8\x0d\xe8\x0d\xe8\xad\x53\xe8\xed\xef\x06\x68\x48\xa0\xb7\x8c\xa6\xe9\xd9\x7c\xd1\x3f\x40\x99\x97\xf0\x31\xd8\xd7\x06\xd8\x17\x37\xd0\x3d\xee\x43\xaf\x2e\x27\xc2\x6f\x69\x2c\x2a\x79\xc6\x6c\xa4\x45\xf1\xc8\xc3\x52\x1a\xe8\x74\xe4\x62\x82\xb7\x8f\x20\xe4\x16\x06\x21\x3f\x13\x8c\x05\xf7\xb3\xbd\x12\x05\xfa\xbc\x40\x92\x0c\xf2\x07\x83\xc0\x63\x00\x40\x00\x40\x00\x40\x00\x40\x00\x40\x00\x40\x00\x40\x00\x40\x00\x40\x00\x40\x00\x40\x00\x40\x00\x40\x00\x40\x00\x40\x00\xc0\x35\x01\x80\xff\xa5\x8f\x1e\x14\x00\xd0\xc8\x5c\x57\xb3\x4b\x05\x73\xb5\x26\xf1\x1f\xfb\x72\x1f\xfb\xb7\x7d\x44\xce\x2f\xe1\x70\x8e\xd7\x75\xbe\xa6\xe9\x8b\xf6\x30\x2a\x11\x4e\x80\x62\xf7\xe7\xd4\xf2\xbc\x7d\x68\x72\x76\xfa\xb4\xf9\xe7\x2e\x4c\x0a\x99\xaf\x1d\x8c\x7b\x4e\x80\xb8\xd3\x34\xc5\x41\xdc\x09\x3a\x46\x47\x9a\x4b\x0a\xc9\x6f\xde\xca\x06\xf9\xd2\x10\x1d\xad\x35\xca\x56\x71\x54\x41\x5a\x4b\x7a\x5e\xd3\xf3\xe5\xdb\x99\x82\x62\x18\xaa\x1d\xd8\xfd\x3b\x83\xec\xa7\x37\x12\x73\xce\xb6\x6b\xa5\x7e\xa6\xa1\x18\x6f\xd9\xea\x84\xd9\x6a\x57\xc4\x76\xef\xe4\x97\x73\x5e\x17\x59\xb7\xd5\xd3\x51\x70\xdb\x95\xe4\xba\x15\xb1\xd7\x37\x32\xc1\xcc\xf6\x24\x3b\x2e\x99\x6d\xd5\xdb\x28\x89\xad\xe7\x31\xa0\x54\x2b\xf0\x2d\xf0\x2d\xf0\x2d\xf0\x2d\xf0\x2d\xf0\x2d\xf0\x2d\xf0\x2d\xf0\x2d\xf0\x2d\xf0\x2d\xf0\xed\x9a\xe3\xdb\x71\x3a\xc4\x0e\x44\xf7\xd9\xc1\xd9\xdb\x3d\x01\xde\xee\x4d\x5c\xfb\x0b\x8d\x00\xfd\x02\xfd\x02\xfd\xae\x23\xf4\xfb\x8d\x41\x3a\xe0\x0d\xbb\xae\x9b\x79\xd2\x1d\x93\xfd\xa1\x41\xf6\x89\x0d\x4e\x4c\xf6\x72\x63\x02\x50\x27\x42\xb8\x45\x2a\x50\x01\x11\x45\x88\xb7\x93\x20\xd2\x1b\xfb\x0c\x88\xd8\xa4\xf8\xb3\xb1\x98\xf0\xba\x71\xe0\x90\x7c\x82\x19\x82\x19\x82\x19\x82\x19\x82\x19\x82\x19\x82\x19\x82\x19\x82\x19\x82\x19\x82\x19\x82\x19\xae\x21\x33\x44\x42\x47\x90\x45\x90\x45\x90\xc5\x36\x92\xc5\x2f\x0c\x52\x42\x90\xc5\x05\x4e\x14\x97\x13\xb5\xa0\xe2\x0d\x6d\xc1\xd6\x38\xfe\xcc\x20\xfb\x6a\x1f\x6d\xe6\xa7\x5c\x5d\x4e\x84\xdf\xa8\xab\x4a\xb6\x62\x6f\x9b\xd6\x16\x62\x0f\x9a\x7f\x4f\x99\x47\xb9\xa9\x5f\x5a\x5b\x68\x9d\xd4\x94\x93\xb9\x79\x3a\x24\xc8\x5c\x82\x46\x39\x99\x1b\xa2\x01\x7a\xa2\x66\xea\x45\xde\xef\xf8\x72\x22\x9e\xd6\x16\x02\x09\xdc\xc3\xfe\x04\xee\x75\x6c\x43\x4e\x2d\xd3\x8d\x33\xc1\xec\xed\x09\xb6\x53\xb2\x37\x7e\x61\x09\xdf\xcc\x6b\xbb\xa9\x5b\xf8\x9d\x9b\x5d\x23\xba\x5d\x57\x4b\x05\x25\xa3\xfa\x0c\xea\x43\xf2\xa7\xf6\x8f\x6b\xea\x08\x1d\xa6\x83\x6c\xc3\x82\x96\xbd\x1d\xe6\xff\x8d\x84\x62\x8d\x0e\x6c\xea\x97\xfa\xe8\x83\x7d\xec\x03\x7d\xe1\xf7\xd9\xc6\xf0\x87\xa1\x4b\xe6\xac\x22\x27\xcc\x61\x8e\xa1\x33\xe6\xb6\x58\x58\x2f\xcf\x26\xcd\x0d\xee\x16\xd4\x88\x55\x4d\x29\x1b\x8f\x24\x8b\x91\x7c\x51\xe0\x11\x4d\x8f\x2c\x15\x6d\xc2\x92\x8d\x64\xf5\xdb\x73\x4b\xc5\x48\x36\xaf\xab\xe6\x27\xab\xda\xdb\x76\x73\xf6\xe5\xcb\x1b\xc9\x2d\xac\x5d\x8a\xdc\x29\x46\xae\x2d\xe9\x7c\x25\x5c\xd2\xb5\x8c\x6a\xf0\x75\x88\xb4\x10\x72\xfa\x89\x47\x2e\xf2\x2b\xf2\x1d\x06\x5f\x38\x8c\x47\x46\x22\xc9\x42\x61\x9c\xaf\x32\xb2\xfa\xed\x88\xbe\x54\x34\x77\xb0\xe6\x37\x6e\x2d\xad\x64\x73\x6a\x36\xfa\x3a\xd1\x35\x97\x41\x4b\xbd\xbf\x8f\xde\xd3\xc7\x7e\xae\x2f\xfc\x2e\x7b\x80\xbe\x17\xe2\x0b\xd3\x27\x95\xa2\x92\x53\x75\xb1\xc5\x12\xb3\xbd\x61\x68\x99\x3c\x5f\x35\xd8\x9b\x19\x85\xef\x06\x35\x3d\x62\x2e\x2a\xcb\xb7\xed\x65\xd4\xa2\x72\xd3\xec\x7f\xf9\xba\x6a\xa8\x96\xd5\x31\x2d\xa1\x85\x99\x38\x69\x59\x50\x23\xdc\xde\xf1\x8d\x8b\xa6\x47\x12\x63\x87\xcc\x63\x75\x25\xc3\x79\x98\xb9\xe7\x17\x36\x86\x6f\x2e\xcc\x75\xa0\x92\x2f\x8a\xa9\x9f\x2f\xde\x9d\x63\x39\x23\x90\xb4\xce\xdc\x72\x5a\xf3\x46\x4e\x2b\x28\xc5\x5c\x5c\xd3\x73\xa3\xa5\x9b\xb9\xd1\xa5\x62\x3e\xa3\x65\xd5\xd1\x9d\xd3\xc6\xac\xd9\x4a\x3c\xba\xd5\x7d\xaf\x6e\x4b\xff\x52\x68\x15\xdf\xf3\x31\xf3\xcc\x04\x3b\x40\xfb\x68\xd3\x84\x58\x21\xb7\xd2\x1c\xb4\xec\x7b\xaf\x63\x58\x4a\x4b\x65\x8a\xfd\xe9\x3d\x2e\x73\xb0\x55\xac\xea\x23\x0a\xb7\x00\x61\xf1\x7f\x1d\x30\x00\x17\x68\x8e\x66\xdd\x06\x20\x96\xa2\x93\x4d\x78\x3c\x26\x79\x87\xcf\x73\x60\x6c\xc0\x32\x04\x59\x86\x6f\xf7\xd1\xb7\xfa\xd8\x1f\xf6\x85\xff\xc0\x1e\xa0\x4f\xf5\x5d\x70\x2f\x5f\xf2\xe6\x2a\x9a\x2f\x41\x22\x0b\xea\x35\xe1\x2c\xb1\x77\x26\x0e\x91\x97\x9b\x41\xde\x45\xd7\x97\x5f\xd4\x8a\x23\x45\x35\xa7\xf0\x81\x90\x2b\x18\xb7\x85\x10\x8c\xc2\x7e\x04\xf2\xe5\xcb\x2f\x2e\xaa\x59\xd3\x06\x15\x6e\x3b\x5e\x0c\x87\x5c\xe7\x0b\xc3\x72\x61\xc3\x97\x76\x91\x9c\x6e\xce\x5f\x25\x55\xcf\x6b\x59\x7b\x81\xe6\x4c\x65\xdc\x41\x64\x8d\xc6\x92\x61\x76\xd2\xbd\x28\x54\xcc\x33\xad\x1b\x92\x17\xb9\x26\x76\xeb\x56\x13\x71\xd1\xcf\x45\x55\x29\xfa\xf6\x31\xca\x78\x17\x66\x79\x0f\x7c\x16\x6c\xa9\xdf\xe9\xa3\xd7\xfa\xd8\xab\x7d\xe1\x57\xec\x61\xfe\x70\xdf\xa4\xcb\xdd\x59\xe2\xd9\x74\x6c\xb4\x32\xab\x6b\x25\x25\xc7\x1f\xc0\xac\x56\xc8\x67\x6e\x7b\xbc\x2b\xd6\xbd\x38\xfe\x52\xf3\x29\x25\xe2\x07\xe3\x91\x79\xf1\x40\xc4\xe8\x94\xcc\xf5\xba\xb9\xe7\xb1\x28\x9d\x1a\xd1\xf4\xd2\x75\xa5\x68\x79\x7b\xf4\x25\x75\xf4\x9a\x52\xb0\xa8\x76\x54\xfc\x1a\x8d\x5c\xcb\x17\x95\x42\xfe\xef\x59\x78\x6c\x41\x35\x17\x84\x7c\x87\x30\x2a\x16\x82\x59\x07\x99\x8a\xc6\x07\x0c\xe7\x24\xc1\x91\xe3\x91\xa9\x3c\x7f\x9d\x5d\x1d\xd7\xf4\xea\x3b\x73\x76\x5b\x65\x81\xb1\xf9\xc7\xa6\x95\xaf\xc7\xa3\xdb\x44\x7f\x26\xad\x1b\xf1\xb8\x8d\x52\xef\xd8\x40\x3f\xb9\x81\xbd\x6d\x43\xf8\xc7\xb6\xef\xf0\x1b\xfd\x97\x24\x67\x32\x3f\x29\x73\xbb\x93\x53\xf4\x05\x25\xa7\x46\x32\x5a\xa1\xa0\x72\xb3\xe7\x7c\x17\xaa\x7e\x4d\xd3\x17\xcd\xb1\xf0\xed\xe9\xf9\x8a\x8b\xd7\xee\x28\x7f\x9f\xad\x97\xb1\x24\xee\x2a\x6f\xbe\x28\x99\x7c\xd6\x01\xc6\x9c\x3d\x72\x7c\x6f\x8f\xae\xc1\x03\xa7\xf8\xaf\x16\x5d\x8c\xbb\x86\xd1\xe2\x52\xf6\x16\xc7\xf6\x18\x7a\x2f\x16\x8f\x24\x33\xe6\x6e\x88\x4f\x97\x6e\xe3\x30\x20\xee\x61\x20\x32\x22\x1f\xbc\xf7\xc5\x30\x8e\x44\x06\x52\x4a\xe6\xa6\x39\x87\x14\xb3\xe6\x51\xdc\x55\xc7\x0f\xaa\x18\x38\x01\x83\xe5\xab\xef\x6d\xc4\xba\x83\x05\xbb\xa5\x23\x91\x81\x53\x9a\xae\xba\x9a\x8d\x64\x14\x23\xa3\x64\xcd\xbb\x97\xe3\x23\x9c\xb3\xbc\x3d\x43\x58\xaf\xaa\x06\xaf\xd9\x6d\xc4\xa3\xf7\x96\x2a\xdf\x1b\xf7\x34\xfe\xb9\x10\xcd\x88\x69\x7c\x8a\x26\xf8\x34\x7e\x8c\x8e\xd0\xe1\x26\xa6\x8f\xf9\xb2\x52\x5e\x32\x68\xce\x6c\x6d\x8c\x9d\xa5\x69\xda\x2c\xc6\x56\xcd\xae\xb6\xcd\xa0\xf9\x3e\xe2\x3f\x4b\x6f\x61\x9b\xc4\x30\xb5\x70\x07\x90\x7a\xed\x2e\xd7\x94\x1f\x2d\x29\x7a\x39\xcf\xfd\x7b\x62\xcb\xe7\xb3\x15\xd8\x5e\xe2\xfe\xdb\xb6\xae\x03\x1e\xaa\x6c\x68\x84\x5f\x74\x37\x0f\xeb\xdb\xe1\xfe\x71\x51\xd5\x73\xaa\xfb\xd7\x5d\xee\x5f\x8d\xb2\xae\x94\xd5\x5c\x3e\x33\x52\x75\x9c\xa7\x15\xf3\xdf\xb7\xe5\xaf\x66\x2f\x53\xe7\x68\x86\xd2\x15\x9b\x90\x71\x3a\xd4\xc4\x23\x9f\xe5\xa3\x85\xd5\x47\xc0\xea\xe3\x93\xfd\xf4\xf1\x7e\xf6\x72\x7f\xf8\xa3\xb6\x09\x7f\xb1\xbf\x77\xf6\x25\x15\x0e\x02\x73\x9c\xb9\xc3\x9b\x3b\xb1\xcc\x97\xd3\x91\xbd\x0c\xd6\x78\x71\x87\xf8\x4c\x24\xf4\x11\x4a\x81\x9f\x69\x2e\xb9\xc4\xd9\xfc\x08\xbe\xfc\x31\x22\x83\x69\x43\x2b\xce\x0a\xfd\xc7\x93\xe6\x67\x21\xff\x3d\x6f\x7d\x2c\xce\x1f\x87\x6a\x6f\x98\x52\xaf\x85\xe8\xd5\x10\x7b\x25\x14\xfe\x92\x4d\x9e\x3e\x16\x3a\xa5\xe9\x19\xbe\x32\xcb\x69\x7c\xd8\xb5\x48\xf4\x9a\xf9\xa7\x68\x24\xe9\xb9\x0b\xce\x14\xc5\x22\x6a\xc9\x70\x3c\xdd\x23\x4a\x86\xdf\x38\xd7\x0f\x14\xf2\x19\x39\x49\xaa\x85\xac\x11\xd1\x6e\xc9\x31\x15\xfe\xf5\x92\xaa\x95\x0a\x6a\x3c\x22\xae\xc8\x05\x3b\xd6\xb3\xe4\x6c\xcf\x77\x00\xec\xcb\x47\x37\xf2\x6e\x79\xc4\x27\xed\x04\x3a\xb5\xe3\x32\x4b\x22\x2e\xb3\x65\x06\x3d\xbd\x87\xe2\x6c\x38\x1a\xb3\x01\xfe\x3d\x6e\xd1\x6f\x5a\x5b\xb8\x13\x6a\x38\xb1\xbf\xb6\xc5\x89\x45\xb5\x7c\x4b\xd3\x6f\x7a\x22\xa6\xa5\x52\x31\x5f\xcc\xe9\xaa\x61\x54\xc4\x4a\x7f\x7e\x90\xfd\x60\x03\xdd\xed\x9c\x67\x4e\x7c\x9f\x6e\x24\x4c\x7a\x5a\xb4\xd7\x3d\x51\xd2\x0f\xf3\xcb\x9d\xb3\xef\xe4\x62\xc2\xdd\xc5\xee\x97\x36\x76\xbe\xe8\x75\x60\x7c\xf4\xe5\xe0\xef\x70\x9c\x1d\x92\xdf\x61\xd5\xbb\x27\xbf\x49\xf7\x53\x80\xca\x11\x2a\x47\xa8\x1c\xa1\x72\x84\xca\x11\x2a\x47\xa8\x1c\xa1\x72\x84\xca\x11\x2a\x47\xa8\x1c\xa1\x72\x84\xca\x71\x2d\x55\x8e\x87\xe9\x20\xdb\x1f\xdd\x6b\x23\x8f\x07\xdd\x90\xc4\xbd\x7d\x43\x60\x34\xe4\x8b\x90\x2f\x42\xbe\xe8\x92\x2f\x7e\x66\x90\x8e\x08\xf6\xa8\x2f\x28\x99\xb8\x85\xad\x2a\x4a\xe3\x28\x85\xd2\x75\x3b\x6d\x63\xa6\xb0\x64\x94\xcd\x9d\x4f\x41\x35\xd8\x5f\x0c\xb0\xff\xb6\x81\xc2\xe6\xc9\x49\xf7\xb9\x57\xad\x93\xc2\xb7\x1a\x0b\x98\x9e\x10\xad\xce\x69\x85\x56\xd5\xcd\x19\xe1\x27\xcc\x55\xf6\xec\xa2\xec\x98\xeb\x82\x88\x9d\x5e\x45\xec\xf4\x8d\x60\xc8\x78\x9a\x4d\xb9\xc0\xa1\x18\x7e\xab\xaa\x76\xcd\xd7\x4e\xe2\x47\xd7\x63\x02\x71\x04\x71\x04\x71\x04\x71\x04\x71\x04\x71\x04\x71\x04\x71\x04\x71\x04\x71\x04\x71\x04\x71\x04\x71\x44\x29\x1d\x60\x43\x60\x43\x60\xc3\x8e\x61\xc3\x77\x5e\xa1\x51\x59\xe4\xa5\xac\xe9\x4a\x4e\xad\x62\x85\xcb\x5a\x61\x69\x51\x55\xca\x65\x25\x73\x5d\x24\x52\xfc\x8f\x97\xd9\xbf\xdc\x45\xdb\xe4\x09\x0e\x20\x8c\x8b\x65\xa2\x2e\x27\x38\xcb\x02\x5a\x42\xc5\x8b\xbc\xa1\xa4\xdd\x50\x6c\xa7\x79\xfc\xbc\x68\xc5\x82\x79\x95\x07\x75\x39\xcd\x4b\x01\x64\x01\x64\xa5\x00\xb2\x00\xb2\x00\xb2\x00\xb2\x7a\x06\x64\xa5\xba\x06\x64\xb5\xbc\x27\x4d\x83\xac\x14\x40\x16\x40\x16\x40\x16\x40\x16\x40\x56\xe7\x41\x56\xaa\xa7\xb9\x53\x0a\xdc\xa9\x7d\xdc\x29\xd5\xed\xdc\x29\xb5\x0e\xb9\x53\xba\x40\x4f\x09\x15\x54\x9a\xce\x70\x15\x54\x8a\x4e\xd2\xf1\x9a\x61\xcd\x16\x9c\xb2\x58\x53\xbc\x92\x13\xcd\xe4\x8d\x60\x19\xd4\x23\xfe\x32\xa8\x4d\x6c\xa3\x50\x40\x65\x83\x15\x50\x49\x76\xc2\x2a\x43\xeb\xe1\x65\x52\xe4\x54\xd9\x2d\xaa\x96\x4b\x45\xbf\xba\xc5\x87\x9d\x6d\x17\x33\x54\x44\xa9\xc6\x64\x4f\x88\x9f\x3a\x05\xca\x04\xd7\x9a\xa5\x73\x34\x53\x91\x6a\xe2\x28\x8d\x37\xff\x80\x90\x6c\x02\x49\xf0\x9a\x4c\x82\xf7\xf3\x7d\x34\x2f\xf2\xdd\xcc\x50\xda\x95\xef\xe6\x38\xad\xea\x8d\xac\x1d\xe8\xfd\xa4\x30\x4d\xa7\x68\x92\x9b\xa6\xd5\x5e\x67\x4e\xe4\xe1\x3b\x4b\xd3\x4e\x1e\xbe\x55\xb6\x19\x6c\xd1\x4a\x5a\xc7\x2c\x5a\xec\xaf\x86\x7d\x2c\xda\x13\x32\x19\x93\x2b\xb3\x95\x76\xad\xda\xba\x8d\x8a\xc3\x2a\xac\xdb\x84\x7d\x52\x9b\xed\x5c\x7b\xd2\xfa\x01\x08\x03\x08\x03\x08\x03\x08\xf7\x0e\x10\xc6\xea\x2e\x60\x75\xd7\x3d\xc4\x1c\x29\x55\x3b\x92\x52\x15\x8e\x09\x38\x26\xe0\x98\x80\x63\x02\x8e\x89\x9e\x76\x4c\x20\xb3\x36\x32\x6b\x23\xb3\x76\xbb\x32\x6b\xc3\xef\x07\xbf\x5f\xaf\xfa\xfd\xd2\xb9\x16\x27\x95\x0f\x72\x9f\xc5\xfc\x61\xf3\x7d\xec\x5e\xf1\x35\x3b\x96\xb6\x43\xe0\xb9\xf5\x19\x7c\x7f\xb7\x8f\x36\x9b\x6f\xd6\xe8\x72\x62\x94\x7d\xa5\x8f\x7d\xb1\x8f\x36\x65\x34\x5d\xbd\xba\x9c\x08\x3f\x90\x53\xcb\xde\x95\xaf\xf0\x9e\xc6\xee\xcf\xa9\xe5\x09\x4d\x57\x2f\x26\x92\xb3\xd3\x16\xea\x6b\x5d\xa2\xdb\xf1\xaa\x86\xc6\xab\x1a\x1a\x6f\xa4\xa1\x74\x89\x9e\x16\x2f\xcc\x39\x9a\xe1\x2f\xcc\x29\x9a\xa4\x54\x13\x2f\x8c\xeb\x3e\x1b\x71\xbc\xb2\xaf\xcb\xda\x6a\x4e\x16\xe4\x1a\xa5\xd5\x4a\x5a\xb6\xac\x2e\x96\x38\xee\x63\xff\xbf\x41\xf6\xc9\x0d\xce\xf8\x37\x98\x7f\x64\x56\xcb\x5e\x90\x4d\xb4\x28\xff\xc8\xe3\xfc\x04\xf1\x84\x9d\xd2\x02\xae\xeb\x20\xed\xc8\x2a\xd2\x8e\x3c\x19\x6c\x29\x62\x6c\x50\x5a\x8a\x68\x54\x5a\x07\xd7\xe8\x23\x97\x31\x02\x32\x90\x59\x04\xfe\x37\xf8\xdf\xe0\x7f\xeb\x55\xff\x1b\x32\x8b\x20\xb3\x08\xfc\x1e\xf0\x7b\xc0\xef\x01\xbf\x47\x57\xf8\x3d\xd6\x61\xf9\x26\xe4\x2e\x01\x4b\x46\xee\x92\xf5\x13\x43\xc2\xfe\x7b\x1f\x3d\x24\x72\x97\x28\xa5\xbc\xfa\xd6\xb2\x5a\xe4\x4f\xcb\xca\x60\xc2\x7e\xbb\x8f\xfd\xbb\x3e\xba\xdb\xf3\x63\x38\x9c\xe3\x9e\xb7\x6b\x9a\xbe\x68\x0f\xa6\x12\xe1\x78\x29\xf6\x60\x4e\x2d\x27\xdd\x47\x27\x67\xa7\x4f\x9b\xbf\x74\x21\xcb\xcd\xd7\x96\xaf\x9f\x13\xa0\xef\x34\x4d\x71\xd0\x77\x82\x8e\xd1\x91\xe6\x20\x2f\xbf\x79\x0b\xe2\xfe\xe6\x55\x9a\xae\x9f\x2a\xa6\x06\xd4\xcd\x98\xf3\x29\x3f\x23\xa3\x94\x94\x4c\xbe\x9c\x57\x0d\xf6\x17\x57\xd8\xab\x7e\x49\x64\xf6\xd4\x4f\x22\x33\x31\x3f\x2d\xa5\xe2\x13\xa2\xad\xdb\xb1\x51\x9f\x34\x32\x0e\xa6\xad\x3e\xa1\xcb\x49\x2d\x52\xca\x80\x60\x22\xa5\x0c\x08\x26\x08\x26\x08\x66\x0f\x11\xcc\x2e\x12\xc8\x77\x0d\xc1\x84\x72\x1b\x04\x13\x04\x13\x04\x13\x04\x13\x29\x65\x20\x2d\xbd\x73\x70\x60\xd7\x4b\x4b\xd7\x65\x4a\x99\x62\x6d\x22\x36\x2f\x88\xd8\x0c\xa5\x39\x11\x9b\xa4\x3a\x41\xfe\xd5\xc9\x17\xaa\x11\xd2\x4c\xde\x68\x20\x05\x83\xd0\xb7\x5d\x0b\xd6\xb7\x4d\xb0\x64\x3d\x25\x6c\xf5\xf5\xfd\xd2\xca\xfc\x57\xbf\xb4\x32\x0f\xd9\x69\x65\x7c\xc0\x59\xc2\x37\xb1\x4c\x47\xd0\x99\x20\x5d\x73\x34\x4b\xe7\x2a\x92\xcc\x1c\xa7\xa3\xab\x79\x32\x08\x44\x46\x9a\x99\x26\xd3\xcc\xfc\x42\x9f\x90\x47\x8f\x71\x79\xb4\x93\x66\xe6\x24\xad\xf2\x9d\xac\x6d\x97\xce\x0b\xbb\x74\x86\x4e\x71\xbb\xb4\xfa\x2b\x5d\x10\xa9\x66\x9e\xa4\xb3\x4e\xaa\x99\x55\xb7\xda\x68\xb2\x99\x0e\x59\xba\xd8\x4f\x8d\xf8\x58\xba\x01\xdf\x74\x33\x3e\x56\xef\x48\x40\xc2\x99\x0e\xda\x3f\x24\x9f\x01\x3a\x06\x3a\x06\x3a\x06\x3a\x46\xf2\x19\x24\x9f\x41\xf2\x19\x24\x9f\x81\x0b\x03\x2e\x0c\xb8\x30\xe0\xc2\x80\x0b\xa3\x25\x2e\x0c\x24\x9f\x41\xf2\x19\x24\x9f\x41\xf2\x19\x78\x08\xe1\x21\x5c\xe7\xc9\x67\x3a\x04\x97\x57\x92\xe4\x66\x1d\xc6\x38\xb1\x8f\x0e\xd1\xb9\x1a\x22\xfe\x05\xb5\xac\x04\xa4\x67\xf1\x55\xf2\x7f\x7d\x90\x7d\x67\x03\xdd\xe3\x10\x79\xde\x50\xf8\x1f\x34\x96\xae\xa5\xfa\xa9\xb4\x28\x6b\xcb\x5e\x7e\x82\x8d\xf9\x79\xa7\xea\xb1\x7d\x24\x71\x59\x45\x12\x17\x35\xf8\xeb\x4c\xb1\x93\x8d\x7c\x87\xfc\x39\x91\xff\x77\x8c\xe4\x2e\x08\x8d\x40\x72\x17\xf8\xb7\xe0\xdf\x82\x7f\xab\x87\xfc\x5b\x48\xee\x82\xe4\x2e\xf0\x2b\xc0\xaf\x00\xbf\x02\xfc\x0a\x5d\xe1\x57\x58\x87\xe0\x03\xc9\x5d\xc0\x6a\x91\xdc\x65\xfd\x44\x73\xb0\x3f\x1a\xa2\xd3\x02\x54\x66\x34\x4d\xcf\xe6\x8b\xbc\x11\x87\x56\xd6\x07\x95\xdc\xad\x29\xff\xf4\x02\x7b\xef\x10\xfb\xf3\x0d\x74\x8f\xbb\xa1\xab\xcb\x89\xf0\xc7\x43\xf2\x81\xb8\xb8\x64\xd1\x32\xa2\x56\xc2\x91\x19\xb3\xa5\x96\x20\xc9\x61\x67\xb9\xc4\x97\x84\x72\x72\x35\x57\x5c\xce\x3a\x70\xc0\xb3\xf4\x76\xb5\x1d\x8f\x45\x65\x1a\x6a\xe7\x26\xdc\xe9\xa8\x79\x3f\xc1\x2f\xab\xf9\xe5\xa3\xfe\xfc\x72\x33\x7b\x1d\xef\x18\xdd\x78\x26\x98\x5d\xee\x67\x7b\x25\x91\xf4\x79\x19\xa5\x7b\x81\x3f\x00\xe4\xa2\x06\xae\x04\xae\x04\xae\x04\xae\x04\xae\x04\xae\x04\xae\x04\xae\x04\xae\x04\xae\x04\xae\x04\xae\x5c\x4b\x5c\x39\x46\x7b\x58\x3c\x3a\x6c\xe3\xca\x7b\x39\xa7\x94\xbd\xe0\xfb\xb6\xe8\x06\xf3\x4f\x6e\x00\x09\xc4\x09\xc4\x09\xc4\x09\xc4\xd9\x46\xc4\xf9\x17\x57\xe8\x88\x40\x9c\xfa\x82\x92\x89\x5b\xe8\xaa\x02\x74\x0a\x59\x66\xa6\xb0\x64\x94\xcd\xdd\x54\x41\x5d\xc8\x17\xb3\xf9\x62\xce\x60\x9f\xb9\xc2\x7e\x7f\x17\x6d\x37\x4f\x4e\xba\xcf\xb5\x25\x98\x41\xb9\x94\x45\x9b\x73\x5a\x41\x4d\x89\x36\x63\x71\xf3\x8c\xb9\xca\x06\xa5\x7a\xb2\xfa\xf8\x2e\xe7\x8d\x48\xa5\x0c\x00\x87\x54\xca\x00\x70\x00\x70\x00\x70\x3d\x04\xe0\xba\x28\xdd\x43\xd7\x00\x38\xe4\x21\x00\x80\x03\x80\x03\x80\x03\x80\x43\x2a\x65\x04\x4a\xdf\x39\x64\xaa\xeb\x03\xa5\xd7\x65\x2a\xe5\x1b\x2d\x4a\x59\xca\xb9\x96\xa4\x51\xf1\x6a\x7c\xe4\x4e\xa3\x5c\x0a\x56\x61\x3d\xc9\xce\x4a\x15\x56\x4d\x5e\x66\x85\x7a\x57\x5d\xaa\x3a\xc4\x34\x28\x71\x73\xf4\xbb\x5b\xea\xb1\x35\x57\x66\xe5\x6a\x8c\xb6\x47\xfc\xb8\x06\x20\x4d\x70\xaf\x73\x34\x43\xe9\x8a\xc4\xca\xe3\x74\xa8\xd9\xe7\x84\x04\x7b\x48\xaa\xdc\x64\x52\xe5\x9f\xed\xa3\xb3\xc2\x62\x4c\x52\x8a\x5b\x8c\xa3\xb4\x8a\x37\x51\xe8\x47\x13\x5c\x3f\x6a\x27\x38\x5e\x5d\x8b\x4f\x89\x9c\xcf\x69\x3a\xe3\xca\xf9\xbc\xba\x26\x83\x24\xa9\xdd\x64\xeb\x78\xea\xe6\xd8\x07\x46\xea\xd9\xba\x1a\xb9\x95\xab\xed\xde\xb8\x38\xb0\xa6\xdd\xb3\xcf\x6f\xbb\x05\x44\x6a\x65\xa0\x64\xa0\x64\xa0\x64\xa0\x64\xa4\x56\x46\x6a\x65\xa4\x56\x46\x6a\x65\xb8\x34\xe0\xd2\x80\x4b\x03\x2e\x0d\xb8\x34\x5a\xe2\xd2\x40\x6a\x65\xa4\x56\x46\x6a\x65\xa4\x56\x86\xc7\x10\x1e\xc3\x75\x9e\x5a\x79\x05\x29\x8f\x3b\x8f\xae\x5b\x9f\x02\xf9\xc3\x57\xe8\xb0\x90\xdd\xab\x6f\x2d\xab\x45\xfe\x56\xd9\x3a\xfb\x1a\xf9\x44\xf2\xc5\x9c\xae\x1a\x86\x6a\xb0\x3f\xbe\xcc\x3e\xbc\x8b\x98\x73\xaa\x4d\xc9\x9f\xa8\xaf\xb6\x9f\x16\x4d\xc4\x76\x99\x87\x4d\xd9\xa7\x57\x65\x26\x96\xc7\x41\x5a\x0f\x69\x3d\xa4\xf5\xf0\x87\xc0\x1f\x02\x7f\x08\xfc\x21\x5d\xe3\x0f\xe9\x1e\xdc\x0f\x0e\x0d\x0e\x0d\x0e\x0d\x0e\x0d\x0e\xdd\xd3\x1c\x1a\xa0\x0c\xa0\xac\x47\x41\xd9\xba\x94\xd6\xab\x94\x16\x70\x6f\x82\x92\x1c\xee\x1d\xa1\xc3\x74\xb0\xa6\xd4\xd4\xe1\x4c\xb6\xe0\x54\x02\xa2\x99\xbc\x11\x9c\xfc\x34\x40\xe3\x7e\xe3\x62\x30\xce\xdb\xcb\x12\x12\xe7\x39\x7d\x91\xfc\x4e\xf6\xa4\x1a\xda\x45\x3f\xb2\xc5\x17\x91\xdd\x6b\x89\xe6\x8b\x36\x0e\x1b\x14\x7f\xea\x20\x10\x13\xfc\x6a\x9a\x4e\xd3\x54\x85\x44\x7e\x3f\xed\x6d\xe2\x41\x40\x23\x05\x75\x7c\x93\xea\xf8\xbf\x09\xd1\x29\x61\x0d\x4e\xd0\x31\x6e\x0d\x0e\x52\x73\x2f\xa1\x50\xd9\x27\xb8\xca\xde\x16\xc6\x37\xdd\xd8\x8c\xd0\xc4\x4f\xd1\x84\x4b\x13\xdf\x74\x6b\x41\x46\xaa\x4d\x46\x28\x50\xf4\xfe\xed\x61\x5f\x23\xb5\xc3\x57\xed\x6e\xd9\xab\x31\xf1\x6b\x95\xbd\x72\xb4\xed\xed\xb6\x5c\x90\xb6\x03\xe5\x02\xe5\x02\xe5\x02\xe5\x42\xda\x0e\x69\x3b\xa4\xed\x90\xb6\xc3\xa5\x00\x97\x02\x5c\x0a\x70\x29\xc0\xa5\x00\x69\x3b\xa4\xed\x90\xb6\x43\xda\x0e\x8f\x1d\x3c\x76\x5d\xe8\xb1\xeb\x6a\x69\x7b\x9b\x30\xf4\x3a\xac\x24\xc1\xde\xf3\x10\x4d\x0b\x89\xbc\x30\x80\xa3\xcb\x35\x95\xf1\x25\x2d\x9b\xcd\x1b\xfa\x12\x87\xc3\x0b\x4b\xd9\x9c\x5a\xb6\xea\x6e\x8e\x1a\xfc\x21\xb1\x2f\x85\xd9\x2f\xf7\xd3\x16\xd1\xd4\xd5\xe5\x44\x78\x8f\xae\x2a\xd9\x88\xf8\xd5\x7a\xcb\x9c\x05\xf8\xac\x96\x9d\xb4\x5b\x4c\xf1\x16\x63\xa3\xe6\x19\xc2\x94\xba\x8b\x5e\xfa\x1c\x2a\x5e\x8c\xd6\x22\xf7\x74\xb6\x76\x3e\xb4\x69\xf1\x3e\xa7\xe8\x24\x7f\x9f\xc7\xe9\x10\x1d\xa8\xe9\x24\x91\x33\xe0\x72\x22\xee\xd3\x73\xeb\x9d\x7d\xd8\xff\x9d\x7d\x1d\xdb\x90\x53\xcb\x74\xe3\x4d\xc1\xaf\xe9\x01\xb6\x4f\xbe\xa6\xe2\x82\xf2\x15\xf5\xb9\xa6\xa7\x5e\x65\xf8\x6d\x5b\xdc\x4f\x69\xaf\xae\x96\x0a\x4a\x46\x5d\xd1\x83\x1a\x93\x27\xad\xd9\xb3\x4a\xcd\x50\x9a\xce\x54\x38\x76\x9b\x7e\x26\x80\x84\xf0\xed\x36\xe9\xdb\xfd\x4c\xa8\x85\xb6\x81\xce\x09\xf7\xee\x69\x9a\x72\xdc\xbb\xab\x69\x2f\x68\xe2\xac\x6d\x84\x4a\x4b\x6d\x35\x42\xa9\x8f\x6c\x75\x1b\xa1\xa3\x25\x45\x2f\xe7\xb9\xdb\x4b\x6c\x98\x57\x64\x8d\xf6\x94\xcc\x75\xce\x9a\xd8\xa2\x87\x2a\x1b\x1a\xe1\x7d\xd9\x6d\xfe\x73\x7c\x87\xfb\xc7\x45\x55\xcf\xa9\xee\x5f\x77\xb9\x7f\x35\x97\xff\x65\x35\x97\xcf\x8c\x54\x1d\xe7\x69\xc5\xfc\xf7\x6d\xf9\xab\xd9\xcb\x95\xe6\x80\xac\xb3\xd6\x9a\xe5\x01\x40\xb0\x84\x01\x96\xf0\x93\xfd\xf4\xf1\x7e\xf6\x72\x7f\xf8\xa3\xf6\x16\xff\xc5\xfe\xde\xb1\x84\x15\x80\xd3\x1c\x67\xee\x38\xe6\x10\xde\x7c\x39\x9d\x48\xc0\xc1\x1a\x2f\xee\x10\x27\x15\x42\x67\xa0\x14\xf8\x99\x45\xad\x38\x22\xce\xe6\x47\x70\x2f\x89\x11\x19\x4c\x1b\x5a\x71\x56\x84\xc4\x3d\x69\x7e\x16\xf2\xdf\xf3\xd6\xc7\xe2\xfc\x71\xa8\xb6\x89\x4e\xbd\x16\xa2\x57\x43\xec\x95\x50\xf8\x4b\xf6\x76\xe9\x63\xa1\x53\x9a\xb9\xb9\xce\x1b\x91\x9c\xc6\x87\x5d\x8b\x44\xaf\x99\x7f\x8a\x46\x92\x9e\xbb\xe0\xfb\x4c\xe1\x6b\x59\x32\x1c\x8f\xf1\x88\x92\xe1\x37\xce\xfd\xf0\x85\x7c\x46\x42\x14\xb5\x90\x35\x22\xda\x2d\x39\xa6\xc2\x4f\x5d\x52\xb5\x52\x41\x8d\x47\xc4\x15\x79\x0c\xa3\xf5\x2c\xf9\x7e\xcf\x77\x00\xec\xcb\x47\x37\xf2\x6e\x79\xc4\x85\xad\x5c\x8e\xae\xa2\xb0\x7a\x49\x14\x56\x6f\x6c\x92\x70\x1b\xff\x46\x27\x8c\xf4\x49\x3a\xce\x8e\x46\xc7\xed\x3d\xd5\xa3\xee\x8a\x7e\x3e\x67\xdc\x09\xf5\xfd\xd8\xfb\x63\x34\x5a\xb1\x2b\x13\x41\xcb\x25\x2d\x6b\xa8\x99\x25\x3d\x5f\xbe\xcd\x7f\xc9\x5b\x7b\xb4\x17\xd8\x1f\x0f\xb1\xf7\xf5\xd3\xeb\xed\x09\x55\x48\x9c\x1e\xe7\x1b\xb0\xaa\xf9\x73\x5e\x36\x22\x26\xcc\x58\xd4\xbd\xe9\xe2\x27\x56\x1d\xd3\xe2\x7d\xd6\xca\xf0\x80\xf3\xfe\x0a\xbd\x59\x55\xef\x56\xb1\xca\xe1\x5b\xad\xe7\x82\x5f\xe0\xc3\xec\x60\x8d\x97\xb6\xa2\x2b\x55\x5c\x20\xfc\xa3\xcd\x55\xcf\x65\xc0\xda\x72\x05\x3d\x9a\x27\x2a\xb6\x59\x9d\x78\x3a\xa9\xf3\xf4\x24\x9d\xad\x58\x51\xac\xe6\xf1\x60\x49\x81\xcd\x55\x93\x9b\xab\xcf\x86\x5a\x6c\x29\x9e\x12\xfb\xab\x34\x9d\x71\xf6\x57\x6d\x36\x3e\x6d\xb5\x2e\x01\x1b\xb8\xd8\x47\xb6\x55\x19\x9f\xb0\x74\x98\x28\x3e\xf6\xe6\x71\xf1\x5b\x47\xcd\x4d\x7b\x74\xae\xb0\x39\x01\x36\x07\x5a\xab\x8e\x68\xad\xe0\x64\x87\x93\x1d\x4e\xf6\x76\x39\xd9\xd3\x9f\x6b\xf5\x02\x61\x4e\x84\xc4\x9c\xa5\x69\x57\x48\xcc\xba\x5e\x21\x44\xfc\x57\x08\x5b\xd8\x26\xf1\x10\x28\xf5\xde\xad\x55\x8b\x84\x3d\x55\x3c\x36\x68\xab\xb2\xd3\xc3\x60\xdb\xbd\x72\x00\x76\xed\xb5\xf5\x0a\xb0\x2b\xb0\xeb\x1a\x63\xd7\x4e\x63\xab\xc6\xe6\x85\x86\x67\x02\xef\x04\x12\xc8\x75\xd3\xc7\xe9\x28\x1b\x8f\x1e\xb2\xd1\xe9\xc3\x15\xf0\xd5\x7b\xbd\x6a\xf4\xda\x72\x30\xfa\xd5\x41\xda\x33\xaa\x94\xf2\xa3\xcb\x09\xa1\x6c\xaa\x25\x56\xe1\x2a\x27\x9d\x7f\xca\xec\x17\x07\xd9\xc7\x37\xd0\xa6\x8c\xa6\xab\x57\x97\x13\xe1\x65\x29\xc0\x2e\x66\xf3\xcb\xf9\xec\x92\x52\x70\xa7\x0f\x50\xec\x60\x87\x19\xb3\x85\x39\xf3\x87\xb8\x6b\xb1\x3d\x6e\x2f\xd3\x07\x78\x33\x03\x4e\xac\xa1\x27\x78\x4c\x2b\xa9\xf6\x1e\xca\x28\xab\x4a\x36\x1e\xdb\xc9\x4f\x98\xd0\x74\xd5\xed\xa0\x74\x2e\x33\x93\x37\xca\x5d\x9e\x0b\x32\x7d\x53\x94\xe5\xda\xc3\xcb\x72\x99\xef\x7f\x92\x4e\xd0\xb1\x26\xa6\x3c\x9e\xbb\x61\x6a\x59\x2d\x06\x7b\x1f\x66\x82\xbf\x81\x21\x36\x20\x5f\xed\x68\x54\xae\x8b\x9c\x71\xf5\x38\x9d\x6f\xec\xf4\x7f\xe7\xb7\x32\xe2\xb7\xc9\x93\x25\xa4\x91\xf2\x12\x29\x2f\xd3\x88\x93\x46\x9c\x34\xe2\xa4\x11\x27\xdd\x33\x71\xd2\xe9\xae\x09\x03\x6e\x79\x4f\x9a\x8e\x4f\x4d\x23\x3e\x15\xf1\xa9\x88\x4f\x45\x7c\x2a\xe2\x53\x3b\x1f\x9f\xba\x0e\xa5\x5b\xe9\x9e\x8e\xf9\x4b\x23\xe6\xaf\x7d\x31\x7f\xe9\xae\x8f\xf9\x5b\x87\x59\x3a\xd9\x0f\x06\xe9\xac\x90\x5a\x2a\x59\x73\xb1\x9c\xd7\x8a\xba\x9a\xcb\x73\xaf\x90\x53\xc6\xc6\xe1\x8d\x7c\x57\xaa\x98\x6b\xa1\x5b\xea\xc2\x75\x4d\xbb\xe9\xd9\x5d\x1a\xec\x57\x06\xd9\x07\x37\xd2\x83\xbe\x8d\x5d\x5d\x4e\x84\x7f\x26\xd4\x18\x7e\xbc\x68\x5f\xe7\x92\xb8\xce\x84\xfb\x3a\x2d\x42\x92\xc7\xf9\x09\x49\xbf\xbe\x5e\x4c\xd4\xef\x01\x68\xa5\x3f\xad\x6c\x84\x2f\xde\xf8\x7b\xc1\x48\xf3\x12\x7b\x5a\x22\xcd\x7a\xef\xa5\x84\x9d\xf5\x1f\x95\x07\x80\x82\x6d\x82\x6d\x82\x6d\x82\x6d\x82\x6d\x82\x6d\x82\x6d\x82\x6d\x82\x6d\x82\x6d\x82\x6d\x82\x6d\x82\x6d\x76\x98\x6d\x82\x3c\x82\x3c\x82\x3c\xf6\x30\x79\xfc\xa5\x2b\x74\x48\x92\xc7\x52\xc9\xa8\x93\x78\xcb\xb4\xd3\xba\x66\x5a\x49\x73\xd3\xc0\x1f\x29\xfb\x16\x2f\x4e\xbd\xc9\x3c\x93\xe7\xd9\xaa\x5f\x91\x7a\xc2\x6e\x61\x4e\xb6\x20\x8a\x53\x27\x4b\x25\xc3\x2d\x46\xac\x3e\xae\xcb\x11\x1f\x8a\x53\x83\x66\xa1\x38\x35\x68\x16\x68\x16\x68\x56\x0f\xd1\xac\x2e\x2a\xd8\xd1\x35\x34\x0b\x95\x24\x40\xb3\x40\xb3\x40\xb3\x40\xb3\x50\x9c\x1a\xa9\xee\xef\x1c\xf8\xd4\xf5\xa9\xee\x7b\xa1\x38\xb5\x52\x2a\x19\xf1\xe5\x44\xbc\x1a\x10\x75\xbe\x38\xb5\xd9\x17\xa9\x7b\xaa\xee\x8e\x47\xeb\x14\xfd\x5f\xb6\x38\x88\xec\x21\xab\x22\xb5\x1f\x0d\x93\xb5\xa9\x3b\xc8\xc3\x9a\xab\x4d\x5d\xfb\x39\x20\x7d\x04\x52\xec\x75\xa8\x36\x75\xed\x97\xb0\x89\xda\xd4\x75\x1a\x6b\xa2\x36\x75\x9d\xd6\x9a\xb7\x51\xbc\x86\x74\xbb\x6c\x54\xec\xdb\xc3\x8e\x8d\x1a\xf0\x2d\x48\xed\x63\xaf\x64\x6d\x6a\x61\xaf\xfc\x0a\x52\xb7\xdd\x72\xa1\x36\x35\x48\x2e\x48\x2e\x48\x2e\x48\x2e\x6a\x53\xa3\x36\x35\xf2\xa5\xa2\x36\x35\x3c\x0a\xf0\x28\xc0\xa3\x00\x8f\x02\x3c\x0a\x2d\xf1\x28\x20\x6d\x36\xd2\x66\x23\x6d\x36\x6a\x53\xc3\x61\x07\x87\x1d\x6a\x53\xaf\x16\x33\xaf\xc3\x54\x3a\xec\x93\x03\xf4\x78\x65\x6d\x6a\xbf\x22\xd4\xec\xa7\x06\xd8\x8f\x3c\x65\xa7\x13\xf5\xe5\xf0\xbe\x75\xa7\xcd\x53\xac\xdc\xf5\x3e\x07\x9c\xd2\xf4\x64\xa1\x60\x03\xf6\xd6\xd5\x0f\x6d\x53\xee\x8b\xeb\xf4\xa4\x78\xc7\x4f\xd1\x24\x7f\xc7\x8f\xd3\x51\x1a\x6f\xae\x40\x60\x4b\x7c\xbc\xed\x2b\x24\x8b\x94\x16\x08\x02\x40\x4a\x0b\xb8\x8e\xe0\x3a\x82\xeb\xa8\x87\x5c\x47\x48\x69\x81\x94\x16\x40\xf6\x40\xf6\x40\xf6\x40\xf6\x5d\x81\xec\x91\xd2\x02\x29\x2d\xd6\x0b\xa4\x44\x4a\x8b\xb6\x24\xd3\xdd\x4e\x07\x05\xb1\x33\xca\x9a\xae\xe4\x54\x57\xfa\xdc\x65\xad\xb0\xb4\xa8\x2a\xe5\xb2\x92\xb9\x6e\xce\xb9\x32\xc7\xc5\x0b\xa3\x06\x87\xa8\xec\x73\xdb\xd9\x07\xfa\x89\xe4\x89\x57\x97\x13\xe1\x11\x5d\x55\xb2\x11\xf1\xb3\x35\xc2\xce\x74\x7b\x91\xb7\x97\xb4\xdb\x8b\xed\x34\x0f\x9f\x17\xa7\x5f\x4c\x54\xfe\x2c\x50\x6d\x6b\x45\xb0\xe9\x05\x3a\x2d\x20\xdb\x49\x3a\xce\x21\xdb\x21\x3a\x40\xfb\x6a\x42\x36\x6b\x50\x96\x13\xf1\xca\xee\x05\xe2\xb5\xda\x55\xbe\x73\x6a\x99\x6e\x5c\x09\xa6\x6b\x47\xd8\x61\x49\xd7\xbc\x0f\xc7\xca\x21\x5b\xd9\x23\x37\x62\x0b\x7f\x7f\xb3\xe7\xd1\xec\xd1\xd5\x52\x41\xc9\xa8\x8d\x3f\x9d\x5d\xf2\x8c\x8e\x3e\xa0\x54\x9a\xce\xd0\xa9\x8a\xf8\x8a\x26\x9f\x10\x94\x7a\x08\xb0\x68\x32\xc0\xe2\x9f\x85\x5a\x67\x27\x66\x44\x84\xc5\x14\x4d\x38\x11\x16\xed\xb3\x3a\x8d\x99\x15\xb7\xa5\x58\x91\x89\xa9\x63\xd5\x4a\x4b\x65\x4a\xfd\xc2\x56\x8f\xd5\x39\x5c\x55\x92\xb8\x61\xf3\xf3\x38\xaf\x68\xd9\x31\xe3\x83\xe2\xc4\xbd\x66\xfc\x50\x9c\x18\xc5\x89\xd7\xb8\x38\x71\x07\x57\xa3\x41\x95\x83\xdb\x3d\x71\xa4\x8f\xd1\x11\x76\x38\x7a\xd0\x96\x33\xec\x70\x57\x26\xae\x3c\xbc\x03\x85\x89\xff\xb7\x21\x3a\x5f\x63\xe7\xa3\x14\x4a\xd7\x95\x80\x72\xc5\x19\xd3\x1c\xf2\xf3\x32\x4a\x49\xc9\xe4\xcb\x79\xd5\x60\xff\x61\x90\xfd\xb7\x0d\xb4\xcd\x99\x00\x45\x4b\xe1\x7f\xd0\x58\x05\x91\x89\xf9\x69\x39\xdf\x4d\x88\x36\x6f\xb7\xa8\x6a\xc8\xbe\x5b\x9e\xb9\x54\xf4\xca\x15\x7a\x58\x75\x5d\xd4\x0a\x59\x45\xad\x90\x6b\xc1\x5f\xd2\x04\x4b\xd6\xfb\x7a\xaa\x1f\x88\x7b\x6f\x27\x1e\x1f\x44\x14\x10\x51\x40\x44\x01\x11\x05\x44\x14\x10\x51\x40\x44\x01\x11\x05\x44\x14\x10\x51\x40\x44\x01\x11\x05\x44\x14\xa8\x79\x0c\x99\x06\x64\x1a\x90\x69\xdc\x41\x32\x8d\x9f\x8d\x51\x4a\xc0\xca\xa2\x5a\xbe\xa5\xe9\x37\xcd\xf5\xa0\xa3\xd4\xa8\xc1\x28\xf3\xc5\x9c\xae\x1a\x86\xf5\xd7\x17\xd8\x17\x87\xd8\x8f\xfa\xe8\x6e\xa7\x8d\xab\xcb\x89\x70\x98\x8b\x36\xbc\x3b\xde\x69\x71\x66\xec\x31\xf3\xb7\x73\xf6\xe1\xee\x4c\x8b\xf2\x90\x16\xeb\x33\x9e\xab\x89\xe0\x28\x29\x68\xdf\x38\x1d\xe2\xb4\x6f\x8c\xf6\x50\xbc\x26\x2a\x77\x0d\xd3\x72\x22\x2e\xfb\xda\xa0\x32\xe3\x99\x60\x7e\xb7\x9f\xed\x95\xfc\xae\xea\x79\x48\x84\x27\x2f\xe9\xd5\x64\xfc\xbb\xcd\x95\x83\xff\xb0\x25\xcb\xf0\x1f\xff\xc7\xe5\xcf\x1d\x7c\x04\xa9\x49\x4a\xd1\xc9\x0a\x47\xe4\x8a\x87\x1a\xee\x47\x68\x2f\x9a\xd4\x5e\xfc\xd3\x50\x0b\x3e\x75\x91\x1f\x33\xc1\xf3\x63\xda\xaa\x8b\x66\xda\x69\x5e\xe5\x55\x5a\x6a\xa7\x2d\x89\xbd\x67\x5b\xa5\x2d\x91\xb1\xc9\xe6\x6b\x6e\xd9\x8f\x9d\xe2\x4f\x9d\x34\x1f\xed\x49\x33\x09\x73\x12\x60\x4e\x90\xea\xac\x23\xa9\xce\x90\xe3\x06\x39\x6e\x90\xe3\xa6\x5d\x39\x6e\xd2\x9f\x0b\xb5\x38\xd1\xc7\x9c\xc8\x48\x7d\x96\xa6\x5d\x19\xa9\xdb\x9c\x3c\x24\xe2\xbf\x24\xd8\xc2\x36\x89\x61\x6a\xe3\xaa\x20\xf5\xd7\x77\x55\xae\x0a\x76\x55\x49\x30\xfd\xb7\x1a\x51\xae\x03\xea\xd0\x4a\x01\x6a\xcb\x5e\x5b\x9f\x40\x6d\x09\xb5\xe5\x1a\xab\x2d\x9f\x6b\xc5\xbe\x72\xd5\x3a\xcb\xc6\x6c\xbf\x8f\xce\x32\x68\x1e\x48\xef\xa3\x31\xb6\x27\x1a\xb7\xfd\x10\xf7\xb9\x15\x96\xf2\xa8\x6a\x61\xe5\xfa\xf3\x5e\xb0\x9f\x18\xa2\x91\x5a\x41\x6b\x96\x28\xb3\xa0\xb8\xc1\xe7\x6b\x83\xec\x87\x7d\x9e\xc8\x84\x47\x7d\xa8\xa7\xa5\xb9\x33\xcf\x8d\x6d\xf7\x04\xa7\xb9\x7f\x6a\x31\xf2\xbc\x42\x13\xe2\xb5\x3c\x4a\xe3\xfc\xb5\xdc\x47\x63\xb4\xa7\x11\x11\xb0\xbb\x53\xab\x0d\x47\x7b\x36\xf8\xb5\x3c\xc8\xf6\xd7\x13\x2d\x7a\x7a\xe3\xc1\x9e\xaf\x7a\x43\xd1\xa2\xfe\xcc\xd3\x33\xfa\x3b\x2a\x83\xcf\xda\xf7\x00\x52\xa7\x68\x92\x52\x15\x6b\x81\x26\x9e\x00\xd6\x00\x40\x9e\x4d\x22\xcf\x8f\x85\x5a\x63\x03\xce\x08\xe8\x99\xa4\x13\x0e\xf4\x6c\x8f\x35\x69\xa3\xb9\x08\x40\xaa\xb1\xbf\xb9\xc7\x63\x4d\xee\xb7\xa8\xa7\xd7\x80\x3c\x24\xfe\xdc\x09\xfb\x01\xe2\x09\xe2\x09\xe2\x09\xe2\x09\xe2\x09\xe2\xb9\x62\xe2\xf9\x72\x8b\xa6\xfe\x69\x01\x3a\x53\x74\xd2\x05\x3a\xd7\x72\xee\x6f\x34\x52\xd0\x73\xe9\x60\x76\x9a\xfa\xc1\x5d\x9e\xe9\x7f\x77\x00\xde\xf4\x2c\x0a\xc2\xde\x98\xf2\xf6\xac\x09\xc0\x36\x7b\x6d\x25\x02\xb6\x09\xb6\xb9\xc6\x6c\xb3\x43\x10\x29\x90\x6e\x36\x36\x37\x04\xec\x00\xfd\xa7\x8b\xf4\x61\x3a\xc8\xf6\x47\xf7\xda\xa4\xf2\x41\x37\xdf\x74\x37\xd6\x81\xe8\xf1\x1f\x0d\x09\x41\xe6\xe8\x72\x40\x9c\xb8\xae\xda\x2f\x7c\xc6\x4e\xf8\x6f\x73\xc9\x4f\x0f\xb1\x7f\xb4\x91\x36\x65\x34\x9d\x4f\x66\xff\x2a\x24\x45\xb1\xae\xe8\xf0\xa2\xb5\xbe\xb7\x72\xe1\xcf\x39\x2d\x3a\x25\x04\x5a\x12\x28\x3e\xec\x84\xb0\xf0\xcd\x85\x0c\x78\xc8\x97\xd5\x45\xc7\x58\x0d\x78\xc2\xa1\x5c\x6d\xc7\x63\x31\x7e\xb9\x09\x4d\x57\xdd\xce\x43\xdf\xfe\x22\xb8\xbc\xfa\xe3\xba\x14\xfc\xed\xec\x63\x63\xf2\xe3\x88\x46\xe5\xfa\xc9\x77\x78\xbd\x40\xa5\xf6\x57\xcb\xef\x18\x91\xe4\x88\x24\x47\x24\x39\x22\xc9\x11\x49\x8e\x48\x72\x44\x92\x23\x92\x1c\x91\xe4\x88\x24\x47\x24\x39\x22\xc9\x11\x49\xde\xe9\x48\xf2\x14\x9d\x64\xc7\xa3\x47\x6d\xc2\xf1\x98\x9b\x70\xf8\x6e\xf4\xee\x04\x3d\x17\xa2\xd1\x11\x8d\x8e\x68\xf4\x75\x14\x8d\xfe\x8e\x18\x3d\x2d\xf4\x97\x4a\xd6\x5c\x70\xe7\xb5\xa2\xae\xe6\xf2\xdc\x61\x65\x9e\x63\xab\x31\x17\xd4\xb2\x9d\x47\x73\x71\xa9\xac\x98\x4b\xaa\x5b\xea\xc2\x75\x4d\xbb\xe9\xd9\xa4\xda\x3c\xf4\x13\x43\xec\x1b\x1b\xe9\x61\xdf\x66\xaf\xca\xf6\xc2\xff\xb6\x11\x4a\xfa\xa4\xbc\xdc\x25\x71\xb9\x09\xf7\xe5\xba\x02\x96\x0a\xda\x98\xf4\xbb\xd3\x8b\xe2\x46\xeb\xdd\x02\xf8\xe9\x4a\x9c\x13\x02\x73\xde\x78\x21\x18\xb0\x3e\xcb\x9e\x71\xa1\x53\xfe\x18\x2c\x77\x44\xbd\x77\x5d\xb2\xd8\x7a\x4f\x0c\x94\x15\x94\x15\x94\x15\x94\x15\x94\x15\x94\x15\x94\x15\x94\x15\x94\x15\x94\x15\x94\x15\x94\x15\x94\xb5\xd3\x94\x75\x9a\x4e\xb3\xa9\xe8\x84\x4d\x48\x07\xdd\x94\xb5\xde\x16\xae\xfd\xba\x32\xa0\x50\xa0\x50\xa0\xd0\x75\x84\x42\x3f\x7b\x85\x4e\x08\x14\x9a\xd1\x34\x3d\x9b\x2f\xfa\x12\xd0\x1a\xda\x50\x1e\x38\x65\xb0\xbf\xba\xcc\x7e\x65\x17\xbd\xc1\xdd\x80\xcd\x3a\x77\x8a\x55\xa8\x2e\xe7\x4f\xcb\xc0\x5a\x94\x73\xc6\x6c\x21\xb6\xcb\x3c\x68\xc2\x75\xba\x04\x88\x8e\x06\x93\x1f\xd7\xe5\xcc\x30\x05\x3e\x06\x3e\x96\x02\x1f\x03\x1f\x03\x1f\x03\x1f\xeb\x19\x3e\x96\xea\x1a\x3e\xd6\xf2\x9e\x34\xcd\xc7\x52\xe0\x63\xe0\x63\xe0\x63\xe0\x63\xe0\x63\x9d\xe7\x63\xa9\x9e\x66\x50\x29\x30\xa8\xf6\x31\xa8\x54\xb7\x33\xa8\xd4\x3a\x64\x50\x69\x95\xd2\x42\x6b\x35\x41\x49\xae\xb5\x3a\x42\x87\xe9\x60\xcd\xd8\x6f\x0f\xa8\x92\x9c\x29\xce\x01\xd1\x4c\xde\x08\x56\x59\x3d\xe2\xaf\xb2\xda\xc4\x36\x8a\xea\xc7\x97\x83\x45\x56\xe3\xec\x90\xd0\x4b\xf1\xab\x52\x2d\xc1\x95\x0f\x51\xa3\xe8\xc7\xb6\xd4\x20\x65\xaf\x17\xf3\x52\x44\x91\x50\x6c\x50\xfc\x7f\x07\xb1\x98\xa0\x58\xd3\x74\x9a\xa6\x2a\xb2\x6f\xec\xa7\xbd\x4d\x3c\x0e\x24\xde\x40\x42\xc1\x26\x13\x0a\xfe\x4d\xa8\x76\x1d\xa5\x53\xc2\x58\x9c\xa0\x63\xdc\x58\x1c\xa4\xe6\xde\x4e\x3a\x2b\x92\x0d\x4e\x52\xca\x49\x36\xd8\x74\x63\x33\x22\x7d\xd1\x14\x4d\xb8\xd2\x17\x35\xdb\x5a\xb0\xa9\x2a\x69\x8d\x9b\xaa\x3a\xd6\xa8\xae\x15\x8b\xfd\xc9\x70\x0d\x53\x15\x96\xc9\xa8\x5c\x99\xbd\xb4\x6b\xd2\x6c\x8d\x89\xdf\x7c\xcc\xd6\x84\x7d\x74\x7b\x0d\x58\x7b\xd2\x19\x82\xeb\x82\xeb\x82\xeb\x82\xeb\xf6\x0e\xd7\xc5\xea\x2d\x60\xf5\xd6\x3d\xe0\x1b\xa9\x64\x3b\x92\x4a\x16\xfe\x05\xf8\x17\xe0\x5f\x80\x7f\x01\xfe\x85\x9e\xf6\x2f\x20\xa3\x38\x32\x8a\x23\xa3\x78\xbb\x32\x8a\xc3\x7d\x07\xf7\x5d\xaf\xba\xef\xd2\xb9\x16\x97\x0f\x0d\x72\x86\xb5\xd7\xd9\x75\x23\xe6\x0f\xb0\xef\x63\xb2\xd4\xb7\x63\xc8\x69\x1d\xe6\xfd\x61\xbf\xf5\x1c\xed\x14\xe2\xf9\xa2\x96\x75\x17\x71\xd3\x97\x8a\xe6\x43\x96\x45\xdc\xd8\x47\x9e\x63\x3f\xb9\x8b\x36\x99\x07\x5d\x5d\x4e\x84\x63\xf5\x35\xf1\x73\xe2\x64\x91\xf1\xff\x8d\xe6\xb1\xe7\xb4\xac\x7a\x31\xe1\xfe\x3b\xa4\xf0\x90\xc2\x43\x0a\x0f\x97\x09\x5c\x26\x70\x99\xc0\x65\xd2\x35\x2e\x93\xee\xf1\x08\x00\x55\x03\x55\x03\x55\x03\x55\x03\x55\xf7\x34\xaa\x06\x4b\x03\x4b\xeb\x51\x96\xb6\x2e\xa5\xf0\x57\x69\x52\xf0\xbf\x63\x74\x84\xf3\xbf\xfd\xb4\x97\x12\x35\x25\xa4\x1c\x3b\x2d\x27\xe2\x6e\x34\xd4\x12\x11\xfc\x8a\x4a\x39\xb9\xe0\x97\x55\xd3\xc9\xd5\x1f\x4f\x29\xa7\xe8\x5f\x6c\x76\x38\xd8\xfd\xb6\xe2\xdd\x83\xbc\x1e\x14\x7f\x6e\x23\xf4\x12\x8c\x6a\x82\x92\x74\xa2\x42\xe8\x3e\x4a\x23\x2b\x1a\x6c\x88\xa4\x20\x71\x6f\x52\xe2\xfe\xbd\x3a\x12\xf7\x93\xc2\x08\x1c\xa6\x83\xdc\x08\x24\x68\xa5\xef\x25\x4d\x09\x71\xfb\x71\x3a\xea\x88\xdb\x9b\x68\xe6\x94\x90\xb5\x9f\xa0\x63\x2e\x59\xfb\xca\xdb\x69\x54\xd0\xde\x2e\xb3\x13\xfb\xea\xb0\x63\x76\x1e\xf3\x55\xaf\x7b\x4c\x50\x54\x1c\x22\x4c\x90\xa3\x5b\x6f\xa3\x31\x82\x68\x1d\x04\x16\x04\x16\x04\x16\x04\x16\xa2\x75\x88\xd6\x21\x5a\x87\x68\x1d\x9e\x00\x78\x02\xe0\x09\x80\x27\x00\x9e\x00\x88\xd6\x21\x5a\x87\x68\x1d\xa2\x75\x38\xda\xe0\x68\xeb\x42\x47\x5b\xc7\x45\xeb\x2b\x50\x95\x37\x48\x94\x03\xf0\xb1\x0f\x70\x6e\xbd\x98\xfc\xe5\x2b\x74\x40\x88\xc9\xf5\x05\x25\x13\xb7\x6e\xbb\x22\x1f\xfb\x68\xa6\xb0\x64\x94\x55\x5d\xd7\x0a\xea\x82\xb9\x79\x2d\xe6\x0c\xf6\xff\x5c\x66\x5f\xda\x45\x6f\x30\xcf\x4b\xba\x4f\xbb\xba\x9c\x08\xef\xa9\x2f\x36\x9f\x10\xcd\xcd\x69\x05\x35\x25\x9a\x8b\x0d\x99\x67\xcc\x55\xb6\x75\x31\x51\x7d\x28\x54\xe8\x50\xa1\x43\x85\x0e\x1f\x08\x7c\x20\xf0\x81\xc0\x07\xd2\x35\x3e\x90\xee\x41\xfc\x60\xcf\x60\xcf\x60\xcf\x60\xcf\x60\xcf\x3d\xcd\x9e\x01\xc7\x00\xc7\x7a\x14\x8e\xad\x4b\x15\xba\x5a\x5b\x99\xba\xa2\x4c\xed\x1c\x64\x2d\x27\xe2\xd5\xe4\x68\x26\x6f\x94\xff\x3f\xf6\xde\x05\x4e\x92\xac\xac\x13\xfd\x45\x56\xf5\xeb\xcc\x0c\x30\xc1\xb8\xeb\xc5\xd7\x31\x86\xb5\xbb\x9a\xca\xa8\xae\xee\x9e\x57\xf1\x18\x6a\xaa\xba\x99\x1a\xba\xab\x8b\xaa\xea\x19\x61\x1c\xe8\x93\x19\x27\x33\x83\x8a\x8c\x48\x22\x22\xab\x3a\x87\x99\xdd\xcb\x63\x78\x5f\x11\xd0\x01\x1a\x51\x1e\x0a\x0a\x5c\x5d\x91\xc7\xa2\xe0\x8a\x6f\x60\x15\x05\x77\x55\x5c\x7c\xbb\xa0\xa8\xa8\xe8\x8a\x7d\x95\xbd\xbf\xf3\x7d\xe7\x9c\x38\x27\xf2\x51\xd5\x5d\xdd\xc3\xa8\xc9\xef\xc7\x74\x65\xc4\x89\xf3\x3e\xdf\xf9\x9e\xff\x6f\xa7\xbe\xe8\x1b\xdb\xab\xf0\xee\x74\x4f\xa2\x0a\xaf\xbf\xa5\x41\x8a\xbc\xa1\x0a\x36\xe2\xfd\xd2\x81\x21\x7a\xb4\x6f\xd2\xce\xea\x03\x54\x66\x4f\xc2\x97\x8f\xac\xd2\xec\xf2\xe0\xda\x87\xaf\xc9\xd8\x77\x6a\xec\xcb\x7e\xf9\x70\xed\x97\x01\x80\x3e\x7c\x2b\x5e\x21\xf0\xf7\x11\x0d\x5c\x3a\xf8\xfb\xf0\xca\x76\xea\xdd\xbe\x33\x42\xb6\x2d\x8d\xda\x11\xa5\x3b\xfc\xca\xea\x10\x42\x76\x70\xa0\xfb\xfb\x00\xa2\x76\x13\x16\x1c\x44\xd4\xf4\xa7\x57\x9d\xbc\x8d\xfd\xe2\xc7\x3a\xe1\xb1\x4e\x78\xac\x13\x1e\xeb\x84\xc7\x7e\xf1\x63\xbf\xf8\xb1\x5f\xfc\xd8\x2f\x7e\x6c\x9b\x18\xdb\x26\xc6\xb6\x89\xb1\x6d\x62\x6c\x9b\x18\xfb\xc5\x8f\xfd\xe2\xc7\x7e\xf1\x63\xbf\xf8\xb1\xe9\x6f\x6c\xfa\x7b\x14\x9a\xfe\xee\x1a\xa1\xc6\xbe\xa2\x0e\xf3\x97\xe3\x17\xff\x48\xea\xa2\xaf\xbc\xaf\xfc\xef\x1f\x22\xc7\xc5\x06\x9b\xd9\x9c\xc5\xd5\x9d\xd1\x80\xef\xd9\xcc\x0b\xf5\xdf\x0f\xce\x08\xe2\x10\xd6\x39\xab\xd7\x85\x9c\x90\xb9\xef\x3a\xe4\xfe\x97\x49\xb2\xaf\x9e\xa4\x00\x05\x73\xbf\x64\x44\xe3\x20\xdc\x0c\x83\x2e\x8b\x4c\x7b\x2c\xd3\x42\xdf\x1a\xd6\x32\x8f\xb5\xf8\xc6\xed\x3e\xa7\xf9\x82\x83\x50\xd5\xc1\x42\xef\x6a\x29\xd2\x92\x0e\xd7\xb2\x7b\x96\x73\x16\xf8\x87\xf1\x83\x85\x24\xe5\x77\x1b\x19\x9d\xed\xa6\x4e\x85\x59\xfe\x28\x77\xb2\xbf\x6b\x63\xf8\x2e\x5f\xc1\x5d\xbe\x44\x9e\x01\xbb\x7c\x9e\xdc\x4e\x9e\x7a\x19\xbb\x1c\xac\xe5\x27\x84\xfc\xa6\x76\xfa\x8d\x83\x77\xfa\xb5\x2e\x81\x8e\xa1\xdd\x78\x65\xfb\x2d\x5e\x75\x9f\x24\xb7\xb8\xe7\xc9\xbd\x6c\x2f\x80\xbd\x8f\xc7\xf1\x04\xe3\x78\x82\xbb\xc6\xb6\xa3\xb1\xed\x68\x6c\x3b\x1a\xdb\x8e\xfe\xcd\xd8\x8e\xee\x7a\xd4\x98\x46\xae\x78\x4f\x2e\x5b\x67\x7f\xd7\x58\x67\x3f\xd6\xd9\x8f\x75\xf6\x63\x9d\xfd\x58\x67\xff\xc8\xeb\xec\xff\x05\xa6\x8a\xbb\xeb\xdf\xb4\x1e\xf4\xae\xb1\x1e\xf4\xea\xe9\x41\xef\x7a\xd4\xeb\x41\xff\x05\x86\x40\xb8\x2f\x65\xe4\x4e\x44\xe3\x60\x81\x60\x96\xc3\x24\x4e\x79\x33\x14\xe7\xd2\x06\xe4\x80\x24\x98\x33\xed\x6e\xce\x04\x23\xb4\xc5\x6b\xad\x24\xd9\xb0\x44\xcb\xcc\xfd\xf0\x39\xf7\x07\x0e\x92\x6f\x19\x58\xd3\xf3\x64\x15\x4f\x98\x1b\x0d\xd4\x71\x5a\xb6\x70\x0f\xb6\xb0\x60\xb6\x70\xf8\x29\xe2\xdb\xf9\x41\xd5\xdf\x8d\xb5\x8f\xfa\xfa\x51\xae\x60\x1c\xa3\x78\x8c\xb5\x6e\x63\x14\x8f\xb1\xd6\x6d\xac\x75\x1b\x6b\xdd\xfe\x0d\x69\xdd\x1e\x45\x0e\xc9\x8f\x1a\xad\xdb\xd8\x53\x76\xac\x75\x1b\x6b\xdd\xc6\x5a\xb7\xb1\xd6\x6d\x8c\xe2\x31\x76\xe5\xfb\xd7\xa3\xc2\x7a\xd4\xbb\xf2\xfd\x8b\x44\xf1\x78\xc8\x21\xcf\x47\x07\xac\x3a\x61\xe0\x80\x75\x2f\x79\x36\xb9\x67\x68\x80\xfb\x60\x45\x97\x54\x4f\xf9\xa3\x34\x48\x3b\x4a\x39\xf9\xe0\xf6\xee\x58\xcf\x71\xbf\x53\xba\x63\x8d\x52\xba\x49\x47\xad\x51\x1d\x32\xdd\xb6\xa0\xfb\x64\x3b\x94\x11\xef\x6b\x64\x3b\x05\xdd\x7f\xd0\x08\x20\x23\x75\x71\x4f\xc3\x62\x5f\x77\x6d\x1c\x2a\xcf\x42\xd2\x24\xbc\x04\x0f\x72\x96\xac\x5d\x85\x4d\x30\x0e\x31\x1d\xc3\x87\x5c\x26\x7c\xc8\xff\xac\x90\x06\x52\xaa\xe7\x91\xfb\x80\x52\xdd\x43\xae\xce\x26\x25\x1b\x88\xfb\x11\x90\x5a\x81\xfb\x71\xd5\x1a\x8b\x10\x13\x85\x93\xba\x81\x89\x72\xd5\x5a\xbb\xfc\x9c\xbf\x08\x4f\xb2\x33\x02\x7d\x39\xc4\x77\x27\x44\xfd\xf0\xc7\xab\xdb\x11\xe0\xd9\x81\xc8\x25\x23\x89\xf1\x9d\xf8\xc9\x28\x62\x5c\x80\x99\x3c\x82\x64\x79\x0c\x6b\x32\x56\x92\x8f\x95\xe4\x63\x25\xf9\x58\x49\x3e\x86\x35\x19\xc3\x9a\x8c\x61\x4d\xc6\xb0\x26\x63\x63\xcd\xd8\x58\x33\x36\xd6\x8c\x8d\x35\x63\x63\xcd\x15\x31\xd6\x8c\x61\x4d\xc6\xb0\x26\x63\x58\x93\x31\xac\xc9\xd8\x16\x3a\xb6\x85\xfe\x0b\x4f\xf7\xb9\x33\xbd\xf4\x65\x29\x9d\x77\xa0\xcc\xbe\x14\x54\x95\x2b\x0f\x74\xf2\xb9\x0a\x79\x8c\x0c\x43\xe8\x74\xb2\x99\xcd\xd9\x19\xf7\x97\x2b\xee\x2f\x54\xc8\x3e\xf1\xfb\x79\x9b\xb3\x4f\xf8\xf7\x4d\x9e\xdb\x8c\x31\x1a\x9c\x0f\x7f\x43\x93\xe7\xf3\x9d\x4e\x76\xf7\xec\xfc\xca\x92\xd2\x04\x66\x57\x4e\x8f\xdd\x57\xd1\x5c\x5f\x45\x73\x3b\xa9\xe8\xae\x0e\x39\x8b\xfb\x69\x99\x9c\x82\xfd\x74\x92\x2c\x92\x3b\x2e\x63\x3f\x19\xe3\xdc\x89\x45\xfa\xae\xcf\x7e\xf0\x18\x79\xd3\xb5\xe4\x9b\x4d\xf3\x4b\xa7\x93\x81\x5e\x9d\xf1\x76\x12\xaf\xf1\xdc\xfd\x87\x6b\xbc\x5b\xf4\x2f\x9a\x72\xc9\xb1\x65\x4a\xbe\x30\xf4\xb4\xc0\x5d\x06\x50\x56\x50\x17\xff\xfd\xce\x7e\xb2\x17\xb9\x95\x4f\x3a\xbf\x43\xc8\xcf\x54\x08\x61\x9d\x50\x1e\x7c\xf7\xc7\x2b\xde\xdb\x2b\xf3\x2b\x4b\x8a\x26\xa1\xf6\x3c\x33\xd9\x46\x1e\xd0\xac\xde\xe2\x6d\x86\xe7\x18\x98\x3e\xd9\x81\xa2\xc9\x58\x72\x44\x85\xbc\x25\x65\xbb\x7a\x12\x6f\xf2\xd4\x50\x67\xab\xda\xb4\xa3\x82\xd4\x6f\x42\x6c\x41\xcc\x22\xbc\xca\x91\xdd\x36\x74\xe5\x96\xf6\x0b\x6f\x7b\x9f\x9e\x06\x19\x3c\x6e\x24\x73\x85\x01\x30\xcc\x55\x5c\x8c\xa0\xd7\xdd\x38\xcc\x7b\x33\x42\x0c\x48\xc3\x5a\x37\x4f\xd2\x6c\x26\xe0\x9b\x3c\x9a\xc9\xc2\x66\x95\xa5\xf5\x56\x98\xf3\x7a\xde\x4d\xb9\xa2\xa9\x42\x94\x05\x5d\x5f\x3b\xd0\x84\x35\x83\x49\xc4\x03\x41\x3e\x52\x21\x93\x70\xde\xff\x73\xc5\x7b\x47\xe5\x99\x61\x1c\xa0\x26\x01\x5f\x6b\xf5\xa2\x9c\x21\x69\x13\xa5\xab\x27\xd6\xd6\x8b\x1b\x17\x66\x51\xb2\xe1\xc5\x6a\xda\xb2\x6a\x18\x37\x34\x73\xa6\xb8\x4e\x1e\x07\x9d\x24\x8c\x73\x53\x6b\x9d\x75\x6b\x40\x71\x75\xe0\x49\x9e\xf8\x74\x81\xc5\x52\x9d\x28\xa5\x03\x9f\x2e\xc5\x74\x81\xb5\x79\xb4\xc0\x32\x7e\xd5\x67\x2e\xef\x75\x78\x06\x64\xd1\x9a\xbb\xcf\x38\x64\xbf\x62\xf9\xdc\x5f\x74\x2e\x0b\x88\xe7\x0c\x4c\xdb\x69\x9e\x33\xef\x25\xce\x5a\xce\xe2\x80\xa5\x41\xc1\x8f\x6b\x8e\xf2\x6a\x0f\x51\x35\x44\x3e\xeb\x90\x49\xc1\xa2\xba\x9f\x74\x88\x3f\xdc\xa6\x5a\x3e\xd4\x6b\x1d\x5e\xf7\xde\xe8\x20\x13\x9d\x81\x69\xa4\xc6\x5b\x6c\x33\x4c\x52\x7d\xd0\x8c\x73\x7c\xb5\x87\x23\x46\x50\x65\x71\x50\xcd\xf0\x42\xfc\xb1\x8a\x58\x35\xf1\xa7\xfb\xce\x0a\x39\x72\x09\xe3\x82\x8f\xbc\xbf\x82\x91\xd5\xbb\x69\x0a\x9b\x14\x1e\x0e\x1c\xd7\x3a\x3e\xc8\x99\x62\x3a\x05\x8f\x91\x34\xc4\x23\x2e\x84\x08\x21\xa6\xd3\xad\x30\x0e\x92\x2d\xf8\x3e\x6c\x73\x9f\xae\x24\x1d\x29\x83\x2a\xfd\x7d\x2f\xcb\x79\xdb\xa7\xab\x9c\x05\xd5\x24\x8e\x7a\x8f\xf4\x84\x5d\x74\xd6\xb6\x67\x11\x8e\xb8\x7e\x95\x2a\x9e\xa0\xd3\xc9\x08\xa5\x78\xfb\xeb\xd9\x23\x94\x9a\x68\x4f\xe4\x57\x26\xc9\x77\x18\xb3\x5d\x13\xec\x96\xb6\xc4\x2f\xa4\x49\x7c\x57\x52\xc3\x19\x77\xdf\x3a\xe9\xdd\x66\x3d\xe9\xbb\x28\x8c\xc5\xe0\x78\x51\xd4\xd3\x24\xa6\xcf\x4f\x6a\xf6\x35\xf1\xd9\x09\xf2\x76\x87\xec\x05\x4e\x8c\xbb\x0f\x3b\x5e\x75\x5e\x2b\x69\x81\xfe\x40\xd0\x5a\xa2\x2a\x8c\xc0\x22\x10\x0b\x52\xf7\xfc\xa4\x96\xf9\xef\x77\xf6\x91\x3d\x2c\x4d\x59\xef\xa7\x9c\xe3\xe4\xe8\x88\xcd\x53\x4f\x52\x5e\x9c\xe9\x55\xc5\xe9\x5e\x74\x6e\x24\xff\xce\x9a\x4b\xd1\x7a\x55\x10\x15\xf7\x80\xbb\x8f\xe5\x49\x3b\xac\x13\xf2\xb0\x43\x1e\x17\xb1\x2c\x5f\xab\xb7\x78\xd0\x8d\xb8\x60\x50\xdd\x17\x39\xc3\x73\x41\x8d\xa0\x2a\xe2\x5b\xef\xe4\x52\x2c\x64\x63\xbc\xd5\xa4\xcd\x29\x2b\x2c\x49\x5a\x31\xf2\xfc\xa4\x06\x6f\xb2\x6e\xbd\xce\xb3\xac\xd1\x8d\xa2\x1e\xdc\x6a\xa2\x17\x81\x4f\xde\xe0\x10\x17\x3a\xa6\xdf\x43\xd7\x1e\xbc\xfc\x9e\xdd\x71\x09\x3d\xb3\x7a\x55\x4f\xda\x1d\xb4\x54\x90\xbf\xdb\x4f\xe8\x80\xb9\x47\x4e\xf3\x34\xeb\x08\x76\xc5\xfd\xf4\x7e\x6f\xc1\x7a\x82\x97\x9b\xbe\xb9\xa4\x4f\x8e\xd2\x25\xe3\x9e\xd0\x1f\x68\x1d\xd5\x05\x67\x0f\xa8\x88\xad\x6d\xf5\x96\x7d\x63\xee\x63\xb7\xdc\x47\x83\xe0\xc4\xba\xf7\x79\x74\x09\xd4\xf2\x61\x66\x19\x51\xf4\x5a\xd8\xe7\xd0\x27\xd3\xe4\xf0\xb6\xe7\x50\x7f\x3c\xe6\x72\x76\xc1\xe5\xfc\xa4\xc9\xe5\xbc\xcb\x21\x4f\xbe\x8c\x53\x2f\x8e\x1e\xf0\x38\xcd\x47\x88\x8d\xb9\xe8\x9c\xdd\xfe\xfe\x3a\xea\x1e\xd1\xf7\x97\xe7\xe9\xdb\xcb\x22\x18\xe5\x1b\xec\xa5\x7b\x2d\xe1\x46\x6d\xb5\x67\xf2\xde\x7a\xb2\xc2\xf2\x96\xfb\xc7\x7b\xbc\x69\xb1\x5f\x8b\xdd\xb5\xc1\x7b\xd2\x52\xc9\xf2\x16\x18\x13\xc2\x98\x32\xba\x99\x44\xdd\x36\xf7\x2f\x38\x13\x1b\xbc\x77\xc1\x01\xd8\x0d\x8b\xc0\xbc\x79\x0f\x39\x48\xc4\x4b\x97\x7a\x8f\x17\xec\x87\xac\x48\xe2\x6c\xf8\xe6\x22\xfd\xf4\x04\x99\x6c\x27\x01\x77\xdf\x3f\xe1\xee\x09\xe3\xfc\xd8\x51\xef\xfb\x27\xd0\x87\x89\x45\x73\x54\xbc\xa2\x35\xb1\xe3\xc0\x00\x97\x27\xa0\xaa\xe9\xf0\x54\x0a\xf2\x19\x1a\xf1\x40\x73\x1a\x89\x9d\x26\x0d\xc0\x82\x14\xd5\x73\x45\x47\x68\x8d\xe7\x5b\x9c\xc7\xf4\xc8\x91\x23\x47\x80\xa6\x1c\xb9\xe5\x96\x5b\xd0\xbd\x26\xe0\xf5\xb0\xdd\x5f\x10\x4a\xdd\x34\x3b\xeb\xd3\x67\xcf\x9f\x3e\x45\x19\xa8\x38\x33\xd0\xb8\xca\x9a\x45\x01\xeb\xe3\x6c\x9a\xde\xb5\x76\x66\x19\xce\x46\x98\xf2\xac\xf4\x16\x14\x36\x7a\x3c\xa0\x02\xb7\xac\xbd\xa8\x05\xc7\xc9\x55\x2a\xd6\xd3\xa2\xb8\x6d\x43\x06\x3e\xad\x1d\x36\x5b\x39\xda\x5c\x40\xee\x8c\xc2\xba\xf4\x8c\x41\x8f\x19\x74\xed\x52\xf6\x91\x46\x83\x4b\x13\xaf\x98\x24\xe8\xc3\x34\x8d\xc2\x0d\x4e\x1b\xd9\x33\xc4\x2e\x9a\x36\x95\xbd\xca\x08\x22\x58\x40\x69\xd5\x53\x6b\x80\x82\xec\x01\xa2\x34\x40\xe4\xc7\x1d\x02\xcb\xef\xbe\xcb\xf1\xde\x04\x9c\x66\xca\x23\xb4\xba\xc3\x9e\x91\x1a\x27\x68\x36\x4f\x68\x9b\x75\xe0\x37\xee\x07\x9f\x9e\x66\x3d\xe5\x6e\xc1\x62\xca\x6a\x59\x12\x75\x73\xfc\xb4\x78\xa9\xdc\x4f\xc1\x28\x29\x2a\xe5\x32\x30\xff\xa0\xef\x1f\x2c\x8a\xa1\xef\x49\x61\xa1\xc5\x2d\x0c\x65\xcc\xfd\xf6\x5f\x27\x88\x37\xe0\x18\xac\xf1\x7a\xca\xf3\x13\xf1\xe6\x1a\xd0\x4c\xf7\x4d\x13\xde\x47\x9c\xd2\x43\x69\x39\x17\x07\x04\xdf\xc0\x9e\x96\x1c\xb0\xa4\x98\x9b\x61\x9a\xc4\xd0\xbb\x4d\x96\x86\xac\x16\x71\x04\x1d\x90\x06\x40\x31\x16\xe0\x03\xe5\xc4\xe4\x2c\x6d\x82\xea\x51\x54\x77\x30\xa3\x8b\x82\xff\x36\xcc\x2c\x9a\x5c\xab\x69\xab\xe2\x36\xed\xb0\x30\xcd\x28\xcb\x06\xb7\x68\x73\x91\xbf\xea\x90\x97\x3a\x64\x32\x66\x6d\xee\x3e\xe0\x25\xcb\xac\xcd\x0b\x57\x13\xe0\xf4\x06\x4b\x35\x03\x74\xa0\x5a\xd7\x99\x6c\xf2\x74\x33\xe4\x5b\x33\x5b\x49\xba\x11\xc6\xcd\xaa\x18\x63\x55\x72\x1d\x88\xbf\x3b\x73\x23\xfc\x63\xce\xfd\x22\xd9\x9f\xc8\x93\xed\xde\xea\x1d\x56\xf1\x0b\xca\x7a\x2c\x7a\x24\x27\x56\xf9\x71\x48\x27\x42\xd8\x73\xd2\xf8\x42\xde\xbf\x97\x4c\x1b\x2b\x98\xe5\x49\xca\x9a\xb0\x88\x77\xc3\xd9\x99\xcf\x73\x56\x6f\x89\x19\x91\x6b\xf9\xa2\xbd\xde\xe7\x9d\xc1\xef\x4c\xd6\x5c\x11\x36\x3c\x34\x85\x8b\x09\x83\x6f\xc4\xd1\x5b\x85\x53\x17\x0b\x01\x28\x8e\x7a\x74\x45\x7a\x08\xc5\x58\x77\xa6\x4e\x8d\xfa\x80\x6e\x86\x8c\xf2\xf3\x92\xa1\x91\x4f\xd3\x69\x71\x66\x1b\x5d\x40\x4c\xd8\xe2\x68\x74\x06\xbb\x07\x8b\xb2\x84\x86\x71\x14\xc6\x8a\x0a\x80\x2d\xa2\x93\x04\x99\x4f\x4f\x9c\x67\x75\xc1\xe0\x27\x31\xa7\x6d\x0e\x3e\x12\xb2\xb5\x3e\xe5\xd2\xeb\x27\xc9\xcf\x4e\x90\xc7\x61\x4d\xd8\x35\x31\xd3\xee\x7b\x27\xc8\x4d\xdb\x72\x1e\x7a\x4c\x79\xf1\xa5\xf7\x37\x95\x72\x65\xea\x50\xa2\xf1\x44\x2c\x5c\x68\x30\xc6\x31\x17\x8c\x2f\x43\xa7\x08\x1c\x37\xba\xbb\x28\x63\x6e\x41\xe4\x94\xdf\x38\x13\xe3\x3c\x98\xa9\xf1\xcb\x96\x60\x8d\xca\x96\xf6\x8e\x96\x39\x61\x15\x94\x1a\x7c\x61\x6d\xe9\x74\xd8\x94\xda\x37\x09\x49\x01\xa6\x03\xdd\xd5\x3c\x65\x71\x86\x5f\xa2\xe7\x92\x76\x39\x1d\xd6\x34\xde\x7e\x83\xe6\xa4\xdc\x29\x21\x08\x56\x23\x71\xdb\x03\x29\x15\x0c\x97\xe8\x5c\x2b\x01\x4c\x0b\x90\x9f\x4d\x90\x11\x85\x87\x31\xb4\xe3\xe4\x34\xb9\xa1\x53\x6a\x57\x9c\x5c\xf7\x26\xef\x90\x79\x82\xfb\x27\x55\x4f\xb9\x45\xf6\x3e\x44\xc8\xb7\x0f\xd0\x16\xac\x72\x50\xc9\x4a\x35\x88\xfb\x3d\xc4\x3b\x6e\x3f\x52\x6c\xad\xb2\xfd\x19\xca\xcd\xa2\xa0\x7f\xc1\xd9\xaf\xbc\x8a\xac\xad\xf8\xb3\x07\xc8\x4b\x2a\xe4\xb1\xed\x30\x5e\xe5\x2c\xe8\x49\x03\x82\xfb\x65\x47\x5d\xf5\xbf\xe3\x9c\x0e\xe3\x92\xe3\x8f\x72\xfb\x12\x0b\x8b\x2e\x96\x8c\xc6\x7c\x4b\x08\x51\xe8\xa8\x20\xd6\xcb\x38\x9f\xa9\xa8\xba\x70\x75\x88\x7b\xe8\x2a\x93\xa9\x85\x17\x47\x25\x65\x59\x2b\x8c\x9b\xd3\x50\x29\x7a\x05\xd4\x38\xba\x17\x04\xe0\x11\x63\xf8\x75\x98\x66\x9a\x23\xf4\x90\x68\x4c\xdd\xc0\x83\x3e\x10\x54\x38\x4b\x92\x58\xfc\x8b\xae\x27\xd0\xa1\x29\xeb\x9e\x7c\x7b\x85\xec\x4f\x71\xbe\x32\xf7\x7b\x2b\x6a\xf8\x5f\x73\xe4\x24\x6a\xf1\xa1\x98\x06\xa5\x8c\x52\x9f\x15\x0e\x13\x4c\x09\xff\x60\x14\x45\xb3\x6e\x37\xcc\x5a\x9a\x79\xe1\xe7\xc5\x27\x61\x8e\x3e\x42\x62\x3f\x76\x63\xc3\xa9\xcc\x1c\xe0\xec\x25\x93\x7e\x41\xf1\xa3\x84\x05\x19\x72\xba\x49\x14\xf1\x34\x9b\x91\xbd\x14\xbb\xa3\x78\x3c\x73\xe3\x56\x8b\xe5\xd5\x30\xab\xb2\xea\xc0\x02\xd6\x1c\xfd\x73\x85\xe8\x5d\xe4\xfe\x75\xe5\xb2\x5c\xe0\x4f\x99\xfe\x67\xde\x7b\x2b\xea\x4f\x9c\x36\xf0\x4e\x93\xee\x5a\xe2\x06\x03\xda\x6a\x91\xfb\x36\x98\xd1\xf0\x6a\x84\xfe\x52\x89\xf2\x0e\x15\x4b\xdf\xd9\x58\x3b\x65\xa2\x13\x69\x17\x0c\xb5\x88\x1d\x4f\x93\x34\xc0\x85\xc1\xed\x82\x03\x95\xea\x31\x14\x9a\xa1\x5a\x50\xb9\x2d\x59\x1f\xc3\x71\x4e\x02\x9a\xf3\x76\x47\x50\xa9\x83\x99\xf6\xb7\xbb\xa2\xb7\x33\x56\x3a\x73\x23\xfc\x5b\x55\x33\x9e\x91\x37\x54\xc8\x7e\xd5\xb6\xfb\xb2\x51\xba\x46\x7d\x59\x24\xc1\xba\xfc\x00\xee\x89\xdf\x70\xd4\x4f\xb5\x9d\x4d\x17\x17\x15\x08\x99\x15\x23\x05\xcf\x17\x75\xb6\xe4\xe1\x0e\x1b\x34\x8c\xb3\x6e\xa3\x11\xd6\x41\xe2\x54\xfb\x1f\x7c\x6c\x02\x2e\x44\x28\xb1\x89\xaf\xde\xae\xbd\xb1\x93\x04\x55\x35\x11\xe4\xe1\x6b\xc9\x71\x93\x70\x5a\x89\x0f\xc4\x8e\x4b\xea\x2c\x5a\xeb\xc2\x38\xe7\x41\xe1\xb3\xca\xc5\xdc\xbb\x9f\xbf\xc6\xfb\x82\x33\xec\x2d\xad\xb7\x78\x7d\x23\xd3\xac\x4f\x92\x4a\xc0\xa5\x6e\x86\xbf\x40\xb8\x83\x2b\x5e\x3a\x8a\x00\x83\x5c\x57\xae\xb1\x8c\x36\xc3\x4d\x1e\x53\x8d\x57\xe8\xd3\x3b\xd9\x26\x6a\x83\xf4\x33\x04\x3d\x2c\xe2\x4e\x69\x9b\x6d\xf0\x0c\x7d\xf5\xeb\x2d\xca\x59\x16\xe2\x56\x6d\xa6\x2c\xce\xfb\xbf\x33\x7d\x25\xa4\x6f\x57\x66\x89\x5e\x30\x88\x30\x6e\xfa\x17\x1c\xd0\xbc\x5b\xb4\xff\x8b\xfb\xc7\x5a\xa6\xb1\x8d\xeb\xeb\xa7\xfd\x79\xa6\xa1\xfc\xb9\xbc\x54\x13\x85\x85\x8b\xfc\x8d\xb2\x2d\x7d\xd1\x21\xf3\xc3\x6d\x30\x65\xe2\x30\xe0\xe4\x03\xa1\x7c\x87\x03\xbc\x55\x2b\x11\x4c\xa8\xc9\x39\xb3\x9a\x0a\x95\x51\x1e\x40\x35\x2e\x96\x95\x8b\xa5\xc6\xb9\x05\x56\xcc\x2f\x0e\xab\x12\x95\xf8\x0b\xba\xe8\x0f\x0a\x6c\x84\x7e\xdd\x4b\xba\xb4\xcd\x02\x6e\x55\xca\x9a\x82\x21\xce\x7d\x4a\x97\x1a\xca\x0b\x16\x79\x17\xa9\x77\xe0\x81\x4f\xde\xed\x68\xcb\xd3\xf7\x3b\x64\x61\x77\xa3\x46\x63\xd4\x59\x69\x10\x41\x75\x8d\x04\x84\xeb\x8f\xfc\x28\x1c\xf3\x4d\xd1\xd0\x70\x3c\x05\x81\x89\x07\x92\x6c\x5e\x74\xd2\xed\x55\x66\x67\xdc\xd3\x85\xc9\x67\x50\xf6\x1a\xa5\x44\x1b\x46\xb2\xcb\xfa\xb4\x1f\xdc\x47\x0e\x0d\xb8\x13\xe7\xef\xef\xa6\x7c\x31\xcc\x36\x4c\x39\xc2\xfd\xdb\xbd\xde\xba\x7e\x63\x09\x9d\x31\x85\xe7\x28\xf9\xc3\x5b\xe9\xee\x8d\x0a\x8f\x56\x92\xa1\x17\x74\x4d\x1c\x7e\x7c\x25\xd7\xb8\x93\x04\x82\xf1\x0e\xc2\x6c\x43\x48\x04\x17\x9c\x7d\xe2\xcf\xb3\xab\x4b\x16\x19\xfe\xea\x1e\x72\x5e\xf0\x9e\x2c\x38\x13\x47\x3d\x37\xf2\x9e\x6b\xb2\x7f\xe0\x7e\x49\x0f\x89\xd7\x33\x5b\x69\x98\xf3\x29\x34\xdd\x9d\x01\xe1\x85\xa7\x52\xf9\xd4\x48\x90\x92\xf0\xe2\x65\x26\x3d\xd9\xc3\x58\x4a\x4c\xa7\x21\xa9\x8e\x6f\x89\xea\xcf\x24\xd7\xd4\xe1\x7c\x35\x4f\x27\x01\x77\x9f\xe2\xcd\xdc\x29\xc6\xb3\x80\xcf\x40\xb1\x34\x47\x97\x93\x98\x4f\x43\xc5\x54\xd4\x2c\xff\xbc\x47\xf4\xc6\x12\x61\x4e\x12\x3d\x56\x77\xce\xab\xae\xb7\x38\x35\x25\x21\x30\x5d\x8a\x02\xda\x23\x30\x4a\x6a\x54\x6a\x07\xcc\x7a\xe6\x89\x9a\x28\xf7\x66\x6f\x4a\x54\x73\x76\x75\xe9\xd2\xaa\xf8\x59\x87\xec\x6d\x64\xeb\xbd\x0e\x77\x3f\xe8\x78\xef\x76\x4e\x86\x11\x47\xcb\x27\x46\x7d\xe4\x09\x2e\x95\xa1\x8f\x04\x1d\x98\x59\xa6\x70\x16\x97\x07\x00\x96\x5a\xe6\x06\x8a\x9b\xda\x92\x7a\xe2\xbc\x4f\x3d\x7e\x3e\x3f\xee\x4d\x53\xef\x7c\x23\x13\xff\xc4\x79\x23\xf3\x7c\xba\xd4\x46\x3e\x3f\x92\x14\x5c\xba\x4e\xd7\xb8\xfc\x40\xf0\x52\x26\xe7\x6f\x0e\xe1\x0f\x1c\x79\xb5\xfc\x96\xe3\x7d\xc2\x39\x71\xbe\x03\x7c\x95\x62\x6c\xd7\x5a\x2c\xe5\xc1\x1c\x6d\x77\xa3\x3c\xec\x44\x72\x26\xc4\xd4\x00\x07\xa0\xe6\x84\xca\x5c\x4a\x94\x2e\x72\x3c\xb2\xc1\x9c\xf2\x42\xd7\x5f\x0c\xfe\x00\x23\xbf\x83\x39\xca\x60\xfb\xb7\xf1\xa7\xb1\x04\x87\x40\x80\x0e\x63\xfd\x4a\x4a\x5c\x61\x14\xe6\xb0\xfd\xa6\x7c\x45\xad\x60\x2b\x67\xd0\x65\x73\x88\xbf\x7b\x2d\x39\x6c\x9c\xd0\x98\xe7\x92\x1f\xd6\x86\xdb\xa5\xb8\x99\xf2\x2c\x5b\x88\x58\x96\xb9\xef\xbb\xd6\xfb\x4a\xc5\x7c\xd2\x67\xb7\x85\x87\x72\xbb\xc9\x82\xd3\x54\xfb\x05\xea\x85\x94\xaf\xa8\xd2\x13\x70\x7a\x2e\xc4\x47\x50\x83\x6f\xf3\xa9\x61\x56\x95\xc3\xa8\xc2\xeb\x73\x14\xee\x53\x19\xed\x69\x04\x9f\xe4\x45\xc4\x92\xd4\xeb\xc6\xd4\xea\x6e\x21\x12\x1b\x72\xaa\xac\xdb\xa7\x10\x08\xa7\x63\x04\x4a\xe3\x94\xbc\x42\x0b\x8c\x99\x82\xc0\x16\x5d\xc8\x50\xcf\x99\xa7\x82\x51\x8a\xf9\x96\x1e\x5e\x01\x67\x52\x84\x19\xe0\x14\x15\xb1\x17\xda\x81\x3b\xcb\xc2\x66\x0c\x0a\x8f\xe2\x92\xc1\xd2\xb6\xf2\xea\xa3\x63\xae\x71\xcc\x35\x8e\x3d\xa3\xae\xac\x67\xd4\x17\x14\xf7\xfa\x7b\x0e\x79\xca\x50\x3e\x6e\x1b\xfa\x08\x8c\xeb\x5b\x1d\x53\x29\xa8\x54\x54\xda\x91\xc5\xa0\x7e\xf0\xcd\x23\xef\xfc\xd3\xda\x9e\x13\x3c\xe1\x2e\x54\x25\xaf\x67\xf6\xd5\xe6\xef\xd0\x6d\x98\x2a\x8e\xd1\x98\x1b\xc9\x2e\x92\x37\x4e\x92\x23\x03\xcd\x10\x2c\xea\xb4\xd8\x00\x63\x84\x58\x80\x3f\x9a\xf0\xee\x1c\xf4\x62\x84\x9a\xb5\x5c\x5c\xc7\x07\x5f\x70\xf6\x2b\x9b\xc2\x05\x67\x2f\x9e\xdb\x0b\xce\xfe\x38\x09\x40\x53\x6c\x91\xd5\x3f\xaf\x90\x3b\x89\x7e\x25\x18\x31\x71\x2d\x89\xdf\x45\x04\x9a\xd4\x1f\xf7\x1b\x3e\xc4\x79\x35\xcf\xc8\x4b\x84\x60\x80\x7c\x6d\x6f\xb8\x96\x6e\x07\x33\x02\x75\x78\x37\xf5\x9b\x62\x8c\xee\x0c\x33\xc6\x90\x37\x3a\x44\x8f\xdf\x7d\x95\xe3\x3d\x38\x2f\x7f\x58\x41\xde\x28\x0a\xa9\xbd\xa9\xec\x0e\x69\xb8\x89\xb1\x96\x39\x3d\x7d\x76\x6d\x9d\xb6\x58\x1c\x44\x5c\x5d\x1d\x32\xfc\x5a\xa9\x5b\x75\x25\x66\xac\xfa\x33\x78\xbe\x12\x75\x9b\x61\x2c\xe6\xf3\xd0\x94\x35\x3f\xef\x7e\x0c\xb9\x79\x07\x28\x2e\xfe\x6a\x37\xe2\xf7\x84\x79\xeb\x8c\xca\x07\x99\xb9\x7f\x71\x9d\xf7\x62\xa7\xff\x39\xd2\xef\xbc\x2b\x38\xb1\xa4\x41\x8d\x17\xe2\x0e\xd2\xfe\xdc\x2a\x52\xc2\x0a\x91\x48\x40\xed\x43\x65\x40\x1b\xcb\xb5\xc5\x06\xab\xe3\xe7\x3b\x2c\x96\x61\x27\x29\x47\xd4\x0a\xfb\x4a\xfe\xed\x6b\xc9\x07\x1c\x72\x80\x75\x42\xb0\x15\x67\xee\xbb\x1c\xef\x95\xce\xfc\xca\x12\xfe\x54\x53\x34\xbf\xb2\x84\xa7\x25\xb3\xa2\x86\x32\x5a\xe3\x00\x40\x20\x88\xfe\xc1\xc3\x07\xa5\xf8\x26\x8b\x82\x15\x5c\x3e\xd5\x41\xfa\x70\xe5\xf2\xb8\x59\xd8\x8f\xb3\x28\x34\x24\xdd\x24\xe6\x42\x4a\x01\x23\x7b\x60\x79\xd7\x5c\x47\xae\x31\x17\xe2\xa3\x0e\xb9\xa6\xe0\x24\x32\xf7\x7d\x8e\xf7\x5a\xa7\x60\x25\xac\xae\xeb\x98\x8d\x9d\x74\x5e\x15\xbe\xba\xdd\x7f\x5b\x85\x90\xa4\xd8\x1b\xaf\xab\x78\x7f\xe7\xd8\x7b\x02\x54\xac\xc5\x13\x08\x8b\x55\xbb\x8d\xb6\x92\x64\x83\xd6\x59\xca\x33\xa9\x56\xa8\xd2\x85\xd5\x13\xf3\xeb\x27\xa6\xe9\xd9\x95\x45\xf8\x77\xf1\xc4\xa9\x13\xe2\xdf\x85\x33\xcb\xcb\x27\x16\xd6\x85\x3c\x7d\x18\x83\xac\x55\x9c\x6d\x92\x59\x2d\x30\x89\x24\x2f\xed\x97\x45\x63\x56\x2f\x24\xae\x05\x44\xed\x5d\xdd\x29\x7a\x78\x92\x1c\xd0\x8b\xe5\xbe\x62\xd2\xfb\xd2\x84\x3e\x0d\x52\xe7\xaf\x83\xda\xd5\x63\x3c\xe5\xdd\x88\xcb\x70\x23\xe0\x47\x08\x39\x99\xa4\x94\x9f\x67\xed\x4e\xc4\xe7\xe8\xc1\x4e\x12\x64\x07\x65\xe4\x3d\x5a\x60\xe1\xd1\x4c\x94\x34\xd5\x63\x18\x44\xd2\x14\xec\x8d\x66\x9b\xc0\x31\x13\x4a\x1f\x56\xc5\x30\x1c\x5b\x36\x5e\x84\xee\x19\x5f\xe9\xca\xad\x6f\xcc\x02\x66\xbd\x33\x59\x9d\x45\xdc\x2a\x29\x1e\x94\x2b\x3c\x3c\x33\xb8\x07\xca\xd3\x23\x4c\xed\x2f\x08\x59\x6a\x08\x76\x3d\xa8\x0b\x66\xa5\xbc\x58\x40\x16\xf0\x52\x82\x99\x03\xbe\x5e\x46\xc9\x16\x55\xcb\xd4\x09\xc9\x26\x4f\x23\xd6\x41\x5f\x0c\xce\xea\xd2\x29\x05\x22\xa0\x3a\x1c\x52\x02\x2b\xf5\x06\x8f\xeb\x51\x82\xe0\x17\x40\x6d\xa6\xed\x61\xb7\xa5\xc1\x1d\x45\x68\x54\xfa\xec\x6c\x63\xbc\x73\x82\xec\x01\x35\xb6\xfb\xe6\x09\xef\xd5\x13\xf0\xa7\x96\x4b\xe4\x5d\x0b\xcf\xb4\xc4\xd0\x8d\x78\x3f\xe4\x06\xf5\x64\x3a\x63\x21\x75\x17\x89\x79\x3d\x64\xfe\xbd\xc3\x5e\x51\x40\xef\x0a\x96\x4b\xd8\x34\x7c\x51\x2d\x69\xe1\x25\x56\x87\xb2\xf9\xe8\xa6\x75\xed\x40\x8e\xcc\xc0\x62\xbb\x22\xdf\xea\x48\x5f\xab\x5a\xf3\xb7\x7d\x8b\xa2\xfb\xc6\xe7\x39\xe8\x7b\x44\x83\x71\x22\x27\x47\xc1\x43\x48\xbc\x49\x6b\x69\xb4\xcd\xca\x98\x47\xb1\xab\x3a\x2c\x45\x2e\x25\x93\xd6\x7b\xa9\x6f\x12\x7b\xca\x3b\xec\x59\x37\xe5\x17\x1e\x3b\xd0\x27\x4d\xfb\xb1\xb9\xbf\xf4\x58\xef\x96\xc2\xab\x15\xf5\xa5\x76\x9c\x0d\x28\x0c\x04\xc9\x42\x5b\x5e\x02\xb2\x6f\xb7\xcd\xed\x3b\xec\x3d\x8f\x19\x8b\x95\xbb\x15\x2b\xdf\x34\x41\x48\x2d\x8c\x59\xda\x5b\x14\xc2\xd1\x2b\x27\xbc\x3f\xad\xdc\xa1\x7f\x1b\x6e\x16\x2d\x4e\xb1\x1c\x45\x31\xe7\x84\x20\x01\x1b\xbc\x87\xe4\x5d\xc6\xf4\xc3\xe4\x09\xbe\x30\xee\xb6\x79\x1a\xd6\x2d\x4c\xc1\x83\xd5\x83\xd3\xf4\xe0\xf3\x0e\x8a\x0b\xe9\xa0\x7f\xd0\xa7\x66\x3b\x2c\xd6\x2e\x61\xb5\x5e\xce\x29\x62\x0c\xd4\xb9\x71\xf3\x40\x02\x17\xa4\x30\x67\xd7\x4f\x56\x6f\xa5\x29\x8b\x9b\x1c\x75\x31\x60\xc3\x15\xbc\x29\x6a\x9f\x8d\x9a\xa1\x7b\x7d\x04\x0c\xee\xd8\x98\xeb\xb8\xe0\xc2\x45\x6b\x5a\x27\x4b\xe1\x31\x68\x48\x75\xec\xbf\x41\x2e\x25\x20\x8f\x4f\xcf\x66\x28\x69\xdb\x71\xf4\xd2\x57\x90\xce\xfa\xb3\x47\x9e\x54\xe4\x46\x81\x4d\x20\xc4\x98\x88\xe7\xfe\x7b\x9c\xc7\x93\xeb\xdd\x49\x31\x58\x63\x3d\x8c\xfd\x4d\x3e\x5d\x21\x93\x20\xb1\xfe\x52\xc5\xfb\x91\x4a\xff\x72\xf4\x1f\x99\x2b\xb2\x2a\x77\x23\x9d\x84\x69\x8a\x93\xb8\x8a\x73\x5d\x5a\x14\xa8\x5e\x21\x0b\x18\xb3\x2d\x21\xc0\x06\x2c\xc9\x36\x8b\x01\xa5\xe5\x62\x94\xeb\xbb\xa4\x25\x79\x4f\xe9\xd2\x30\x67\xf4\x8b\x0e\x39\x10\xb6\xdb\x5d\x88\x6a\x77\x3f\xe7\x78\x9f\x72\x96\xd4\xcf\x69\x1a\x36\x6c\xb5\x98\x05\x47\x01\x14\xa9\x18\x0d\xb8\xf8\x68\x12\x56\x2f\xab\x3d\xa4\x9e\x53\xaa\x5a\x34\x0a\x8d\x54\xfc\x29\x44\x8e\xa9\xc2\x5d\xd4\x6c\x17\x7d\x2b\xc5\x66\x2a\x95\x57\x19\x83\x30\x4a\x67\x51\x19\x75\xc4\x97\x71\x18\xd9\x4a\xfa\xb1\xba\x68\xac\x2e\xb2\x3d\xd0\x9f\xb5\xbd\x12\xc5\x77\xa7\xab\x65\xaf\xf3\x92\x85\x8c\x1a\x1e\xea\xe4\x75\x95\x81\xd6\xb2\x35\xcc\x3c\x35\xdf\x80\x39\xeb\x61\x55\xee\x9f\x38\xde\x9d\x03\xdf\x8c\x0c\xb9\xcd\xd0\x79\x0c\xe5\x11\x26\xbf\xb3\xd9\x80\x57\x3b\xe4\x15\x0e\xd9\x8f\x1b\x6d\x69\xc5\x7d\x80\xcc\x6c\x1f\x8b\x21\x0b\x63\x0f\xbc\x25\xf5\xf1\x08\x0a\x0b\x3d\xc1\xef\xe8\xd2\x0a\xad\xb1\x4c\x5c\xfe\xe5\x9e\x91\x9f\x38\x40\x0e\x1a\x0d\xa6\x35\x56\x2f\x42\xca\x90\xe7\x5b\x4d\x22\x08\x5f\x76\x1f\x3a\xe0\xbd\xc3\x29\x3d\xc4\x63\x6a\x03\xa0\x1a\x45\x00\xa7\xcb\x84\x68\xd9\x9c\xf5\x67\x6f\x01\xef\x53\xb6\x89\xc1\x8d\xd0\xe4\x20\x6b\xe8\xcc\xe6\xac\x55\xd5\x74\x81\xc4\x54\x20\x5c\x16\xc0\x14\x58\xf9\xd1\xa3\x83\xe3\x8d\x3e\xbb\x97\x44\x2a\x5c\xa6\xee\x7d\x9b\x0e\x97\x31\x02\x97\x8c\xa6\x4c\xa6\xfe\x26\x72\x8c\xcc\x0e\x5d\xa1\x61\x13\x36\xa6\x68\xbb\xa0\x68\x0d\x83\xa0\x3d\x67\x77\x21\x33\xdf\x34\x82\x98\x8d\xd9\xf1\x5d\xb2\xe3\x17\x9d\x6c\x7b\x2a\xbd\xe2\x2e\x6b\x2a\x6d\xd3\x8e\x91\xda\xee\xa1\x64\x81\x90\xff\x72\x80\x58\x3a\x5e\x0c\xb6\x34\x6d\x06\x2b\x69\x98\xa4\x82\x62\x47\x2c\xcb\x80\x76\xbd\xf4\x80\x77\x73\xdf\xd3\x41\xc4\xab\x23\x0b\xa1\x61\x90\x0f\x09\x5f\xfc\xc5\x71\xf8\xe2\xae\x65\xb9\x9e\xa2\xc7\x1d\xef\x89\xe1\xa0\xf0\x45\x6b\xbd\x6c\xa2\x3c\x12\xe1\x65\xdb\x1d\x31\x26\xce\xbb\x20\xce\x9f\x34\xd9\xcd\x8f\xed\x32\xa2\xf1\x3f\x6a\xf2\x6c\x03\x60\x3e\x62\x6c\x66\x7b\x7b\x02\x76\x97\x7b\x67\x75\x04\xa1\x32\x36\x5b\xc9\x8b\xab\x8f\xde\x10\xf2\x13\xdf\x4c\x76\x36\x43\x90\xca\xe5\x84\xe8\xb3\xfb\xcf\xdf\xe4\xdd\x0c\x7f\xd9\x81\x42\xd2\x89\x02\xf1\x36\x21\x46\x04\xf0\x97\x0c\x9d\x9b\x7f\xc1\x99\x14\x8b\x78\xc1\x91\x74\xcb\x22\x61\xbf\x55\x21\x8f\x27\xf0\xde\xb5\xb4\x96\xff\xb5\xa2\xca\xb8\x1f\xa8\x90\xb9\x9d\xad\x6e\xda\x8d\x41\xcc\x5b\x65\x5b\x27\xce\xe7\x1c\x8c\x39\xde\xdf\x3b\x28\x56\xd0\x30\x9b\x23\xf4\xb0\x90\x1e\xd7\x7b\x1d\xf0\xcb\x9e\x07\x30\xbd\x24\xa5\xa7\xa5\xb0\x38\x87\x26\x2e\xbe\x65\x1b\x72\x25\x2d\x2c\x7d\x8d\x20\xf3\xf2\x9b\x01\xe5\x4d\x80\x5a\x85\xdc\x0b\xd8\x48\xe2\x16\x29\xd5\x75\x22\x4d\x93\x74\x8e\x1e\x2e\xbc\x02\x0d\xcb\xd5\x93\x65\xf4\x21\x1c\x05\x38\xd1\x68\xc7\xe2\x71\xc6\x09\xa5\x12\xb1\x4d\xea\x92\x21\xae\xee\x7c\xee\x5f\x74\x3e\xf5\x8d\xdb\xef\xaa\x77\x7f\xa3\xfb\x43\xdf\x38\x28\x80\xb6\x58\xf9\x92\x2c\x53\xb8\x0e\x2a\x8b\x47\x79\xc3\x5d\x85\x4f\x71\xb3\xf7\x7f\x3f\x08\xbc\xea\x32\xba\x71\x39\xd5\xa8\x2e\x0d\x94\xf3\x58\x27\xe4\x6a\x03\x66\x23\x6a\xac\x5e\xea\x07\x23\x67\xa5\x13\xee\x72\x3e\x2e\xaf\x82\xbe\x6e\x18\x28\x22\x3b\x69\x74\x07\xc5\x2f\xa7\x09\xf1\xcd\x51\x62\x79\xba\x22\x54\xec\x65\x4e\xce\x65\x7d\x3f\x7a\x97\x8c\x72\xbe\x1d\xb8\x4b\x76\xf8\xc1\xc8\xb9\xeb\xe6\x49\x56\x67\xe2\xa6\xd8\xc9\xe8\x8b\x5f\x47\x4b\x37\xce\x36\x15\x5d\x4e\x83\x47\x4b\x6b\x06\xd8\x32\x97\xb0\x46\x3b\x2b\x5f\x9a\x90\x3a\x4f\x65\x2e\x31\xbe\xe3\x93\xb7\xbb\xaf\xcb\x1d\x48\x92\x34\x08\xe3\xcb\xdc\x97\x97\xf3\x75\xa9\x03\x41\x98\xd5\x93\x4d\x71\x89\x5e\x72\xeb\x97\xfc\xe9\xc8\x03\x81\xa9\xe9\x77\x72\x12\xb6\x2d\x39\x6a\xbc\x05\xa5\xbd\xd4\x2f\x1b\x51\xb2\x25\xc3\xa3\x7c\x6d\xa1\xd8\x69\x2f\xd0\xf7\x87\x54\x77\xd4\x24\xdd\x51\x93\xdb\xd5\x25\x9b\xd4\x95\x85\x6d\xd6\xe4\x12\xab\x56\x57\xa1\xde\x49\x81\x6d\x17\x03\x1b\xea\x22\xb6\xf3\x0d\x75\xe9\xdf\xaa\x25\xda\xa6\x85\xc2\x81\x2d\x09\x78\x31\xf8\x11\x93\x65\x16\x1c\xb5\x17\xb7\x29\xb7\xab\xce\xe2\x5a\x15\x6d\xc9\xdf\x97\xb8\x6d\x87\x6b\x31\x76\xbe\x30\x97\x5f\x47\x79\x7b\x5c\x7e\x4d\xa5\x61\x0d\x97\x79\xb6\x1f\xce\xa5\x7f\x5b\x1e\xc6\xa5\xd7\x30\x92\xf6\x29\x1f\xc1\x1d\x6c\xb8\xed\x8b\x8e\xee\xf8\xa5\x7d\x8e\xbd\x26\x5f\xdd\x4f\x8e\xd9\xa1\x4e\xea\x56\xf7\x25\x6b\xe0\x2b\x7f\xa3\xd3\x3c\x4f\xc3\xba\x8c\xf7\xf9\xd9\xfd\xde\x27\x27\x06\xbd\x31\x9c\x13\x5b\xc9\x16\xc4\x2d\x80\xf7\x4e\x12\x9b\xe8\x5e\x6d\xf8\x82\x6e\xc4\xc9\x56\x2c\xca\x3c\x53\x8b\x33\x90\xd0\xa7\xf0\xaf\x0f\xe3\x42\x6f\xc1\xe2\x40\xa2\xfe\x4e\xab\x58\x5b\x08\x1d\x63\xf5\x16\x44\xdb\x4a\x5b\xa4\x46\x9f\x83\x76\x25\x00\xc9\x21\xee\x37\x7d\xba\xb0\x72\x56\xc8\x85\x6d\xde\x4e\xd2\xde\x94\x4f\x8b\x84\x29\x45\x82\x19\xb6\xc9\x53\x08\xc7\xd0\x99\xa3\xa4\x90\x87\x81\x6a\xf5\xa4\xdd\x61\x32\x0e\xa5\x00\x38\xf1\x29\x5d\xeb\xd6\x5b\x72\x5c\xe8\xd5\x52\xeb\x86\x98\x22\xa7\x3c\xbe\x38\xa0\x2d\xb6\x29\xbd\x75\x18\xba\x37\x81\x98\x27\x31\x6d\x12\xf1\x49\xa7\x70\x4f\x2b\x22\xf1\xf3\x84\xc6\x49\xda\x66\x11\xed\xf0\xb4\x2a\xc6\xac\x1a\xec\x66\x4a\x91\xe4\x75\x92\x20\xf3\xa8\x72\x4e\x81\x90\x23\x40\xd5\xf0\xb0\xab\x9e\x8c\xce\x31\x93\xa2\x09\x61\x3e\x2e\xbb\xd4\x7e\x7e\x92\xdc\x21\x51\x55\xe6\xbc\x2a\x38\x88\x86\xfd\x1e\xa7\x7a\x49\xc3\x98\xc2\x3a\x89\x83\x6f\x8a\xfc\x7f\xed\x90\x6f\xc4\x96\xe7\x71\x66\xcf\xe6\x61\x24\x29\x84\xfb\x59\x0d\x94\xf0\x31\x67\x58\x21\xd5\xaa\x5c\x49\x9d\xf8\x0c\x9c\x01\xb1\x74\x5f\x67\xe4\xfe\x62\xf5\x34\xc9\x94\x7f\x58\xc4\x37\x59\x9c\x83\x1b\xcd\x74\xa1\xed\xe0\x01\x66\x62\xe8\xf0\xb4\xce\xe3\xdc\xaa\x4c\xa5\x18\xb1\x9a\xd4\x6d\x28\x5c\x0e\xf0\x5b\xb3\x02\xfd\xdf\x59\x21\xae\x35\x1a\xf0\x23\x70\x5f\x53\xb9\x04\x7d\x96\xaf\x15\x2d\xcf\xea\x32\xc8\x80\xe9\xfd\x37\xa7\xbf\xd2\xab\x32\x39\x30\x21\x29\xdb\x92\xd5\x1d\x0a\xe3\x2c\xe7\x2c\x00\x15\xf2\xc8\xb9\x9a\x9a\xa6\x59\xd8\x0e\x23\x96\xaa\xe3\x21\x77\xa3\x6c\x52\x69\x37\x7b\x1d\xee\x93\xd7\x5e\x6b\x59\x4c\x2d\xef\x7c\xff\xce\xf5\xf5\x15\xe9\xbc\x0e\xd8\x5d\x7f\x74\x8d\x97\x94\x9e\x15\x59\x43\x33\x13\xc1\x8b\x32\x80\xca\xe7\x31\xa8\x34\xeb\x49\x5b\x1c\x8c\x6e\x1a\x49\x8f\x2e\x75\x4c\xa0\x3c\xe4\x8c\x49\xd2\x2d\x96\x06\xc5\x89\x56\x5f\x5f\x70\xf6\xc9\x3f\x6d\x6f\x61\x42\x7e\xd0\x21\xea\x95\xfb\x06\x67\x04\xe8\x8c\x3d\x26\xd9\xf7\x3b\xf0\x4b\xef\x39\xf2\x0f\x4b\x9b\x6f\x04\x5b\x09\x6e\x2d\xac\x9b\x3a\xdd\x44\xc2\x85\xc0\x82\xa7\xac\xd1\x08\xeb\x9a\x6c\x99\xc3\xf0\xc9\x0f\x54\x24\x6c\xd5\xf7\x55\xbc\x97\x57\x60\xb6\x42\x39\x01\x62\xc3\x63\x74\x6c\x31\x0f\x68\x1b\x08\xd5\x6c\x69\x0f\xf1\x05\x8d\xbb\x19\xe6\x96\x5f\x92\x91\x4b\x35\x08\x33\x15\xad\xaa\xd5\xd0\x85\x46\x94\x45\xd4\x13\x4d\x78\xb4\xc3\x52\xf4\xbe\xa1\x67\x57\x4f\x95\x92\xaa\xae\x9e\x5c\xa0\xc7\x6e\xbb\xf5\x66\x9f\x8a\xae\x66\xca\x4d\xb6\x19\xc6\x6a\x49\x0f\xce\x1c\x94\x11\x5e\x46\xbc\xdf\x34\xe6\x2d\x81\x4f\xa0\xed\xf2\x08\x90\x10\xcb\x61\x5b\x54\xe9\xf5\xfb\xc8\x7e\xf1\x21\x84\x38\x3e\xb4\xcf\xfb\x87\xbd\x2b\xf2\x97\x89\xe2\x8f\xb8\x3f\x39\x4f\x3b\x29\xcf\x2d\x88\x79\x98\x52\xb5\xa1\xb0\xdb\xf0\xb1\xc2\x15\x8b\xf5\xd1\x68\x24\x62\x76\xb4\xe6\x3f\x9b\xa3\x87\x11\xec\x68\x8e\x02\x1a\xbe\x6c\x46\x4c\x0a\x82\x7f\x21\x10\x92\x4f\x0f\xd3\x95\x94\x37\xc2\xf3\x45\x39\xb4\xb3\xc3\x4d\xaa\x8b\x77\xa0\x0c\xcd\x3a\x51\x98\x8b\xa9\x84\x89\x3a\xad\x76\x7a\x28\x64\xa1\x00\x7a\x13\xab\x43\xa2\xd0\xc5\x6a\xbd\xe2\x4f\x96\x85\x99\x4f\xe7\xed\x02\xb0\x17\x95\xe1\x84\x50\x6d\x3a\x41\x7c\x0d\x6a\x22\x96\xe9\xe6\xc5\x93\x83\x33\x07\x69\xc6\x3b\x2c\x65\x79\x92\x8a\x5a\xcd\xc0\x66\x42\xa5\x67\x25\xb8\x34\xc2\x08\x68\xd8\xc0\x24\x5b\xe2\x4f\x88\x18\x96\x3d\xa8\x6e\x85\x19\x57\x23\x4c\x1a\x54\xde\x89\xa2\x2f\xaa\x4a\x44\x52\x5b\x4e\x54\xc8\x60\xd8\x90\xd6\xaa\x2c\xd7\xe3\x50\x48\x42\xf2\x14\x30\xc8\xdb\x83\xdb\x80\xaa\x97\xd6\x07\x05\xd3\x01\x1f\xa9\xd0\x71\x04\xb0\xc0\xde\x23\x3f\x31\xd3\x48\x92\x99\x1a\x4b\xd5\xa0\x78\xa6\x1f\xcd\xd4\xd8\xfd\xe8\x0c\xad\x13\x6d\xe2\x97\xaa\x40\x8d\xdd\x3f\xe5\x93\xc3\x10\xe3\x0a\xcd\xc2\xfe\x5a\x93\xf1\x31\x73\x74\x69\xfb\x7d\x07\xa9\x80\x3a\x34\x17\xdc\x5e\x7f\x64\x92\x5d\x31\x82\x77\xe5\x29\x07\x47\xd8\x30\x93\x29\xd9\x71\x99\xb8\xde\xc0\x62\x46\x52\x59\x4c\x8c\x5a\xe5\x61\x8a\x00\xea\x6a\x45\x2e\x45\x8a\x3b\x18\xa7\x14\xf4\xd7\x3e\x29\x37\xc7\x52\xae\x9c\xff\x02\x33\x09\x96\x3a\xb2\xf2\x3b\xf3\x50\xbe\xfc\x00\x79\xe2\x76\xd4\x13\x0c\xae\xbf\xb7\xdf\x3b\x68\xfc\x1e\x64\x6a\x95\xaf\x07\x5b\x58\x3f\x32\xb6\xb0\xee\xda\xc2\xda\x54\x16\xd6\xe7\x7a\xdf\x32\x10\x20\x56\xad\x80\x69\x5a\x3d\x4a\x8e\x8c\x80\x2e\x1f\xb8\xe0\x63\x7b\xea\x2e\xec\xa9\xbf\x6e\xda\x53\x7f\x7e\x97\xf6\xd4\x47\x89\xf3\x5e\x6d\x7b\xfb\xd7\xed\xee\x53\x4b\x11\x90\x03\x00\x63\x47\xc5\x3e\xfe\x85\x43\x96\x8b\xc9\x29\x34\x8b\xd5\x42\x8b\xa6\xe7\xc9\x36\xf2\x6c\xce\xfa\x27\x24\x22\xe2\x62\x52\xef\x6a\x82\xe8\xbe\xd9\xf1\x9e\x3d\xf0\x0d\xc6\x7d\x64\x9a\xf5\x03\x90\xa3\xb8\xc0\x55\xb4\x04\x0e\x68\x49\x70\x79\x81\x59\x85\xed\x04\x78\x84\x3c\x81\x5c\x83\x02\x32\x48\x94\xb6\x09\xd6\x25\x13\xdd\x34\xb2\x9f\xfd\xe5\xd3\xc9\xe9\xcb\x1d\x2e\x2a\x09\xee\x5a\x3b\xb3\xbc\x06\xf4\x6c\x25\x4d\x3a\x99\xfb\x96\xa7\x7b\xf7\x96\x9e\xe1\xa9\x15\x0f\xab\xf8\xd4\x60\x8d\xd6\xac\xb0\xd0\xc5\x94\x35\x72\x7a\x9c\x1e\x12\x1b\x69\x6e\x06\xf2\xad\x54\x91\x5a\x42\xc2\xfd\x29\x7b\xbc\x3f\x7e\x3b\xa1\xe4\x71\xfc\x7c\x3d\xea\x66\xe1\x26\x3f\x8d\x99\x36\xdd\x6b\x2d\x27\x60\xab\x04\x42\xf2\x95\x4a\xbc\xd8\x21\xd7\x77\x58\x2e\x66\x5d\xf4\x97\xa7\x79\xc8\x33\xb7\xfd\x1e\xe7\x79\xe4\x3e\x72\xef\xb0\x83\x73\x05\x26\xcb\x74\xcb\xbe\x81\xec\xc9\xc3\x3c\x2a\x99\xcd\x7f\xb3\x42\xf6\x49\x4c\x01\xf7\x57\x2a\x64\xe5\x4a\x77\xc6\xfb\x8a\x13\x14\x41\x2c\x4c\xe3\x17\xc8\xbc\xe5\x90\x13\x58\xb1\xeb\x92\x8a\x96\x52\xe3\x4a\x6e\x84\x01\x4e\xa4\x02\x79\x84\xaf\x24\x78\x65\x37\xcb\x93\xb6\x52\x18\x19\x1f\xa9\xa2\x4d\x96\x73\xbf\xbf\x98\x1a\x24\xca\x01\x1a\x0e\x43\xc5\xd1\x29\x4c\xb5\x42\xfd\xb1\x39\x4b\x0f\x25\x29\x8d\xf9\x16\x4f\xa7\x86\xd6\x47\xe7\x57\x96\x7c\xf2\x2a\x87\x5c\xab\xf2\xa2\xd5\xc5\x62\xdf\xff\x1e\x27\x22\xcf\x27\xad\xab\xb8\xd8\x67\xd2\x35\x58\xd3\x79\x71\x21\x9a\x2b\xff\x6d\x64\x7f\x9b\x9d\x87\x9b\xd4\x7d\x3c\x68\x45\x6e\x3e\x6e\x69\x15\x3e\x3b\x41\xbe\xd5\x22\x7c\xbc\x5d\xe3\x41\xc0\x83\xaa\xa2\x10\xee\x7f\x9e\xf0\xde\x3e\x31\xba\x8c\xc1\xd9\xa8\xb0\x68\xa5\x47\x10\x44\x47\x16\x37\x14\x56\x54\xb9\x5f\x9c\x91\x01\x6c\xb0\x12\x82\x57\x14\x97\x02\xb0\x27\x85\x83\x37\x86\x3b\x80\x82\x49\x87\x3a\x4a\x7e\x68\xc9\x02\x36\xca\x8b\x04\xd1\x56\x8a\x5e\xdd\x01\xf5\x99\xa0\xe2\xd3\xb4\xe0\xd4\x90\x1f\x52\xae\x3c\x3a\xa2\x17\x76\x01\xeb\xe6\x49\x9b\x49\x7e\xd5\xa7\xd6\x44\xc0\x9d\x9f\x6e\xf2\x6a\x37\x06\xad\x63\x55\x22\xa4\xda\x7d\xaa\x71\x19\x78\x60\x31\xee\xa0\xad\xc3\xb7\xa1\xed\x0a\x92\x51\x99\x93\x41\x2b\x2c\x65\xf2\xda\x72\xb7\xa7\x75\x9f\xa7\xec\xe0\x84\xeb\x49\x25\x0c\xec\xd3\x2e\x76\x42\x18\x8f\xd8\x09\x01\x99\x88\x93\xdc\xbd\xba\x54\x89\xfc\xde\xde\xa1\xb9\x31\x7e\x7e\xaf\xf7\xc1\xbd\x83\xdf\x29\x64\x15\x08\xc4\xa4\xc0\xf6\x99\x8b\xad\x30\x12\x01\xbf\x34\x4f\x3a\x49\x94\x34\x7b\x32\x14\x5d\xf7\x09\xf7\x0e\x84\x8d\x28\x6c\x98\x24\x06\xbe\x32\xd3\xec\x30\xac\xc9\xb1\x22\x69\xa9\x14\xae\x09\x99\x9d\xa2\xe7\x30\x71\xc7\xb9\xb9\x82\x1f\x85\x34\xb5\x48\x2b\x98\xe9\xe0\x04\x9a\x35\x89\x15\xce\x40\x13\xcb\x52\x9f\x50\xf1\xbf\x79\xa8\x44\x36\xab\xd4\x2c\xe2\x83\x94\x43\x96\xbe\x4e\x04\x41\x88\x98\xc6\x56\x31\x7d\xf6\x40\xb0\x22\x99\x6e\x46\x8d\x03\xc2\x56\x7a\x18\x51\x08\x7d\x3b\x94\xe5\x69\x17\x42\x43\xa1\xf9\x69\xea\xfb\xfe\x94\x4f\x8e\x4e\xd1\x73\x19\xcf\xcf\xcd\x61\x2d\x6b\x5c\xaa\x33\xb0\x43\x05\x32\xa7\xde\xa1\x1a\xcb\x08\x1d\x1e\xed\x5c\xce\x30\x3f\x18\x14\x85\xf5\x6d\x5a\xf9\xc4\x99\x6e\x5c\x8b\x30\x58\x81\xb5\xca\x6d\xd6\xc1\x45\x56\x33\x0c\x08\xf3\x72\x98\xb8\xd6\xfd\x1f\x15\x5b\x43\x7d\xe5\x93\x63\x53\xf4\x5c\x9b\x75\xd4\xd8\xd6\x5b\x3c\x53\x03\xc3\x21\x6e\x70\xda\x66\x1d\xa9\x64\x40\x42\x15\xa6\x4a\x40\xcf\x70\xbc\x0c\x62\xb2\xc2\x38\xe0\xe7\xe9\x06\xef\x61\x55\x1a\x49\x08\x24\xd7\x06\x68\x24\xda\x3e\x3d\x03\xa8\xa5\x2a\xea\x17\x7c\xfa\xbb\x1d\xb1\xd3\x78\xaa\xe2\xe6\x00\xbb\x9d\x35\xe5\x9a\x0d\xda\x81\xd2\x9f\x1f\xc3\x7e\x55\x57\x84\x30\x08\xab\x29\xbd\xc9\xac\x14\xe8\xb8\x85\x20\xe0\x5c\xcc\x8e\x2d\xee\x7e\xe8\x7a\xb2\x17\x91\xf1\xdc\xf7\x5e\xef\xbd\xf5\x7a\xfc\x5b\x52\xe2\x33\x1d\x1e\x43\xd8\xfe\x31\x2a\x9f\xe3\x57\x3e\x3d\x8b\x04\x4c\x3e\xc6\x09\x0b\x9b\x00\xc3\x8c\x03\x29\xd8\x2a\xb3\x88\x26\x93\x73\x84\x54\x69\x2d\x4b\x62\xec\x71\x18\xcc\x89\x6b\x3b\x4b\xf4\xba\x2f\x2d\x4e\xd3\xd0\xe7\x3e\x65\xf4\xe8\x71\x53\xd5\xd7\xe2\xe7\x95\xd4\x55\xa5\xdd\x34\x9c\x13\x1d\x3d\xbb\xba\x24\x8e\x54\x87\xa5\x99\x44\x8e\x48\x22\x16\x37\x05\x57\x3d\xd3\x4d\x23\x7f\x45\xbc\x58\x45\x59\x49\x94\xad\x52\xde\x66\x61\x34\x87\xd7\x0d\x0b\x23\xca\x82\x00\xf0\x96\x86\xd5\x22\x0a\x61\x35\xf3\xb2\x64\x15\xb0\xc4\x62\xd6\xe6\x73\x98\xcb\x3c\x0c\xca\xc2\x38\xcc\x79\x8c\x5a\x94\x98\xe7\x08\x3e\x26\xbe\x98\x1e\xa0\x7b\x9c\x3d\x72\xec\xf8\x34\xcd\xa4\xf6\xe0\x98\x3f\x4b\xef\x5d\x3d\xb9\x20\x9e\xde\xe7\xd3\x2a\x0d\x3b\x9b\xc7\xa1\xbf\x4b\x2b\x9b\xc7\xe9\xd2\xca\xb0\x9e\x62\x27\x97\x56\xf0\x93\x9b\xd5\x27\x37\xef\xec\x93\x7a\x18\xa4\x62\x38\x0b\x4b\x8b\xab\xa3\x8b\x43\x89\x2a\x6d\xb3\xba\x28\x7f\x7a\x7e\x61\xbb\x29\xc4\xcf\x44\xc1\x2a\xed\x76\x61\xc5\x63\x7a\xf6\xec\xd2\xa2\x06\xcc\x10\x02\x48\xb7\xd3\xe1\x69\x9d\x65\x16\x6e\x39\x2a\xa5\x9b\xfc\x3c\x3d\x74\x7b\x38\xf5\xdc\x7b\x8f\x54\x6f\x63\xd5\xc6\x7d\x2f\xbc\xf5\xc1\xea\xed\xfa\xc7\xf1\x9d\xfd\x98\x3d\xfa\xe0\x13\x65\x0f\x8e\xe9\x2e\x1c\xbb\x82\x7d\x38\xa6\x7f\x1d\xdb\x49\x27\x8e\xeb\x4e\x1c\xbf\x82\x9d\x38\x6e\x77\xe2\xd6\xdb\x58\xed\xbe\xc1\xfd\x32\xba\x72\x93\xee\xca\x4d\x57\xb0\x2b\x37\x5d\x6a\x57\xc2\xac\x16\xe3\xb6\x5d\xbb\x63\x79\xf6\x88\x20\xef\xf0\xd7\x31\x85\xdb\x2d\x8f\x3f\x10\x68\xef\xc8\xb1\xa3\xb3\xb7\xdc\x34\x7b\xe4\xf8\x31\x4f\x94\xf4\x6e\xbb\xe5\xd6\xaa\x7e\x36\xeb\xc9\xfa\x66\x8f\x98\x35\x6e\x57\x8f\xfc\xe6\x58\xf1\xcd\xe0\xb6\xfb\xdb\xaa\xa7\x3c\x08\xf3\x3a\x4b\x81\xa0\xe1\x2f\x0a\x60\x0f\xf2\xfb\x81\x33\xf8\xdc\x43\xb7\xcf\xc1\x8a\xc1\x1c\x1c\xba\x7d\x0e\xff\x3e\xf6\xe0\xd4\xed\x0f\xdc\x74\xef\x6c\xf5\xa6\xfb\xe4\xcb\xe3\x0f\x3e\x70\xf3\xa1\xdb\xe7\x8e\xcc\xce\x3e\x00\xd3\x8a\xcf\xa7\xf4\xa7\x0f\x1c\xbb\xf7\xf8\x2d\xaa\xf0\xb1\x07\x1f\x38\x26\x0a\xdf\x7b\xa4\x7a\xd3\x7d\x0f\xdc\x7b\xf3\xad\x76\xe9\xd9\x07\x1f\x38\x74\xfb\xdc\xd1\xd9\x63\xb3\x0f\xcc\xde\x7a\xe4\xc8\x03\xc7\x6e\xfa\xae\x40\x34\xf9\x5d\x81\x78\x37\xf5\x44\x69\xf5\x88\x7b\xe2\x86\xa3\x41\xd8\x14\x23\x29\xe8\x70\x3b\x3c\x8f\xa6\xf1\x2a\xcd\x32\xb1\x5e\xf4\xac\xbf\xe6\x53\xb0\x86\x45\x82\x8c\x75\x21\xc8\x44\x0e\xbb\xb8\x0e\x8c\x51\x43\x7b\xf7\x56\xe9\x7d\xb7\x7f\x57\xf0\xc2\xa3\xfa\xaf\xe3\xb0\x0b\x5a\xfc\x7c\x3d\x89\x92\x14\xd6\xa0\xc5\xcf\x33\x95\xe7\x05\x9e\xd2\x7a\x12\xc8\x2b\xda\xbb\xf1\x24\xfc\x6f\x6e\x70\x23\x37\xde\x7e\x48\x6e\xb0\xf9\xea\x49\x31\xa7\x0f\x98\x3f\x6f\x16\x03\xad\xd2\xb4\x59\x2b\x1a\x5b\x7d\xc6\x1d\x7d\x8d\xa4\xcd\x9a\x6c\x2d\x6d\xd6\x0e\x1d\xbd\xe9\xa6\x69\xf9\xff\xdb\xc4\xaa\xd7\x7a\x39\x9f\x03\xcb\xc8\xcd\xc7\x29\x8f\xc5\x67\x81\x19\x9d\x4f\xab\xb4\xc3\xb2\x6c\x2b\x81\x6d\x11\xf7\x80\x33\x87\x40\x4a\x75\x91\x89\x4b\x71\x0e\x72\x99\xe6\xdc\xde\x63\x47\x8f\x1c\xb9\xb9\x7a\x64\xb6\x7a\xe4\xa8\x57\xba\x34\x04\xd7\x5f\x85\x0f\xc2\x58\xdc\x20\xc7\x8e\x1d\xbb\x4d\x54\x25\xe3\x23\xa1\x3a\x15\x8d\x6e\x57\x79\x94\xc6\x99\x37\x90\x4e\x83\x90\x05\x84\x7a\x51\xe7\x58\x4d\xd1\xdf\x20\x07\x16\x17\x36\xc5\x9a\x60\xd3\x8a\xca\x25\x6f\x80\xa3\x10\x35\xe8\x91\x40\xaa\xb6\xd2\x70\x66\x8f\x57\x67\x8f\x56\x67\x6f\x5a\x9f\xbd\x6d\xee\xd8\x91\xb9\xa3\x47\xfc\x23\x47\x8e\x3c\xa7\x3c\x38\xf1\x79\x15\x3e\x2f\x06\x67\x31\x2e\xdf\x4a\xf6\xb5\xa5\x0a\xe5\xf1\xee\xde\x20\xe9\xd6\x22\x74\x1d\xc0\x1d\x47\xbe\x9d\x10\xc5\x8b\x9e\x69\x0c\x2e\xf2\x78\x32\xf9\xc4\x94\x37\x6c\xc1\xe7\xdf\x91\x7d\x4f\x44\x35\x8f\xfd\xfc\x85\xe4\x06\x16\x04\x21\xda\x13\x0d\xdd\x4c\x9d\xb0\xab\x2a\xa9\xdf\x91\x24\x11\x79\x80\x5c\x63\x34\xf1\x48\xeb\x83\x28\x39\xd0\x66\xe7\x4f\x01\x94\xd0\x60\x61\xf0\xbd\x93\xe4\x09\xfd\xfc\xb6\xe0\xd4\x37\x78\x2f\x73\x5f\x33\xe9\x7d\x79\x62\xf8\xfb\x41\xe2\x9a\x16\x1c\x86\xb1\xf1\x82\x73\x87\x8c\x1f\x98\xdf\x46\x9d\x7a\xa8\x0f\x78\x65\xa6\x4c\xa7\x82\x35\x97\x96\xab\x36\xeb\x40\x8e\x20\x21\x89\xb1\x26\xc2\x92\x0d\x16\xf1\xe0\xfe\x43\x99\xbb\xc5\xa9\x37\xb8\x17\x9e\x21\x2e\x4a\xc8\x00\xaf\xcd\x3a\x9e\x4f\xe7\xa3\x2c\x99\x2e\x34\x1b\xa6\x37\x11\xba\x6c\x08\x06\x3b\x47\x1d\x74\xbf\x00\x04\xcc\xbc\xcc\x9f\xa2\xf3\x89\xb7\xc2\x28\xa0\x28\xa5\x75\x53\x4e\x0f\xc5\x09\x8d\x79\xa6\x94\x5e\x1a\xe8\x76\x4a\x26\x41\xea\xe8\x2d\x6a\xb4\x0d\x0d\xf1\x50\x7a\x14\x15\xa6\xb1\x24\x55\xd2\x8c\xa5\x75\x9b\x16\x23\x92\x00\x44\xe8\x06\x64\xd4\x2a\xf8\x79\x95\x37\x49\xa1\x59\xa1\x98\x2b\x24\xbf\x91\x90\x5b\x93\xe4\x1b\x06\x8a\x74\xee\xcb\x26\xbd\xaf\x4e\x0c\x96\xf6\xac\x3d\xa2\x32\x1e\xec\x5e\xa6\x07\xc9\x39\x97\xa1\x32\xb2\x5a\x4b\xbc\x3f\x3a\x44\xbc\x6f\xa6\x2c\xee\x46\x2c\xb5\xc5\x47\x90\x17\x01\x96\xab\x9e\x77\x59\x84\xbf\x0f\x95\x52\x4a\x4d\x41\x0b\xe0\x32\x26\x15\x40\x20\x3e\xc5\x4a\x0d\x98\x63\x8d\x60\x00\x2a\x90\x9d\xe8\xa1\xbc\xc5\x7b\x60\x41\x85\x87\x35\xc0\xf3\x0d\x8d\xd4\xb0\xda\x90\xca\x20\xd7\xc4\x94\x46\xd7\xc3\xfa\x10\x4c\x12\x97\x57\x26\xdf\xed\xa6\x7a\xe9\x44\x4f\x51\xde\xbf\x92\x8a\x0b\x18\xff\x0e\xf5\x16\xe6\x16\xd9\x24\x8f\x2d\xa8\x2d\x6a\xa1\x1e\x11\x42\x1b\x92\x49\x1e\x77\xdb\x2e\x33\xb7\xef\x3a\x59\xbd\xf2\xea\x6e\x92\x91\x6b\x79\x61\x8a\xb9\xe2\xe3\x1b\x68\xe6\x21\x6d\x65\x30\x0d\x48\xed\xaa\xce\x26\xa8\x96\xe1\xe6\x08\xe3\x51\x37\xc7\x37\x91\x6b\xba\x71\xf8\x82\x2e\xc7\x45\xb6\xad\x21\x4f\x24\xd7\xb5\x43\xd3\x10\x32\xb0\x8a\x6f\x24\xfb\xe3\x6e\x04\xce\x89\xa5\xef\xff\x1d\xd9\x27\x8d\x29\xf6\x5d\xfe\x1d\x64\xbf\x22\x7d\xee\x13\x46\x10\xaa\x81\xe1\x83\x6f\x9a\x20\x4f\xdc\x89\x56\xd7\xfd\x72\xc5\xfb\x83\xca\x8e\xf4\xbf\x59\x9e\x74\x0a\x90\x44\x09\x4e\x14\xf0\x7a\x02\x91\x77\x59\xce\x3b\x48\x0c\x3a\x69\x17\x92\xd1\xca\xcf\x64\xde\x26\x09\xc5\x64\xf9\xab\x96\xe0\xe4\xa4\xdd\x0a\xe9\x01\x66\x2a\xcc\x54\x2d\xa9\x60\xd5\xb3\x70\x93\x47\x3d\x54\x39\x67\x5b\xa1\x72\xf5\xa9\x6f\x98\xee\x9e\xb2\xf5\x82\x76\x84\x0d\xb8\x82\x78\x60\xde\x0b\x82\x9e\x0c\x60\x94\xa0\x9f\x7d\x7d\xb4\x3a\x06\xa4\x4d\x5f\x4e\x79\xda\xe5\xd4\xb4\xfa\xf8\xf4\x24\x00\xe9\x87\x90\xb5\xaa\x16\x06\x01\x8f\x6d\x3d\x76\x97\xec\x61\x51\x74\xa6\xe1\x46\xe6\xa2\x5e\x6d\x56\x09\x9a\x8d\x7b\x8f\x78\xb3\xa3\x0c\xac\xf7\x91\x7d\x12\x66\xd1\xbd\x1a\xb4\x4b\x1c\x4c\x76\x7e\xbb\x83\x29\x58\x74\x69\x07\x1d\xc8\x7f\x77\xc9\x9e\x24\xe6\x8f\xf8\xbc\xbd\x90\x90\xce\xd7\xcd\xb6\xfa\xf2\x89\x12\xa7\x1c\xc6\x79\x35\x49\xab\xb8\x6e\xee\x17\x2b\xde\xef\x54\x86\xbf\xb7\xc0\x15\x95\x13\x95\xb6\x9d\xc9\xb3\x03\x5e\x94\xb0\x02\x98\x7b\x55\xe9\x6c\x97\x1a\x1a\xb7\x0b\xed\x4b\xa0\xfc\xec\xe4\x3d\xcd\xff\x28\x23\x14\xa0\x57\x02\xd3\x95\x49\xbe\x13\xdc\x8a\x7a\x67\x1a\xa0\xbd\xe6\x69\x3b\xcc\x65\x16\xa9\x42\xe6\x1e\xe8\x6e\x28\xc9\xaf\x64\x9a\xa0\x0a\xe0\x97\xaa\x50\xff\x9c\xea\xa8\xf9\x48\xee\xe0\xa3\x53\x14\xce\xb2\x2c\x5e\x7c\x3a\xf0\xe3\xbe\xcf\xe1\x89\xef\xfb\x98\x9d\x0d\x72\xc2\xa6\xdc\x22\x16\xbf\xb7\x77\x58\x86\x70\xcc\x67\xb7\x92\xa4\xb9\xfb\x91\xbd\xde\xd3\xac\x27\x76\x88\xba\xf4\xda\xa0\xe0\x54\x16\x1a\xc8\xff\x3a\x2b\x9e\x7f\xc1\xb9\xae\x6e\x56\x60\x79\x0d\x7c\x6e\x0f\x79\x85\x43\xec\x02\xee\x96\x72\x47\xaf\x2d\xeb\x3c\x75\xd0\x80\x60\xc6\xcf\x77\x00\x2c\x36\x56\x5e\xdf\x07\x33\x50\xec\xa2\xea\x55\xe5\xad\xd5\xe2\x04\x6a\xa5\xe1\x63\x3c\x73\xd3\xf4\x08\x7d\x0a\x3d\x4f\x9f\x42\x6f\xbe\xe9\xa6\x63\x37\xdb\x2e\xe3\xf3\x64\x6f\x2b\xc9\xf2\xa5\x15\xf7\x16\xef\xf0\x3d\x20\x00\x25\x19\x80\x2b\xe5\x09\xa6\x46\x01\xeb\xa8\xf2\x09\x91\x7d\xb2\xf8\xb6\x3f\x75\xc8\x7e\xf1\x11\x0c\xe4\xb7\xb5\x63\xfd\xcf\x39\xdb\x0d\x45\x7c\x04\x5b\xd4\xca\xd4\x7b\x69\x83\x11\x9f\xdf\x99\x64\xf9\xb2\x5c\x95\x30\x1b\x5c\x1b\xfa\x40\x5a\xcb\xea\xd3\xd3\x49\x96\x17\xcb\xa6\x61\x56\x63\x2e\xf3\x29\xd8\x53\xf5\x4b\x2a\xd7\xeb\xc7\x1c\xef\xc7\x9d\x51\xdd\x8e\xe9\xd2\xfc\xf2\xfc\xf3\xd6\xee\x5e\x78\xde\xf2\xfc\xe9\x13\x32\x51\xa0\xe0\x78\x54\xae\x67\xb9\x92\x12\x2c\x50\xd4\x1a\x18\x1b\x0a\x02\x2c\x44\x65\x52\x40\x93\xdf\x8a\x62\x08\x67\x6a\xc4\x00\xa4\x32\x09\x9c\x74\x00\x06\x67\x1e\x95\xae\xa4\xa7\x7c\xb9\x6d\xfb\xcf\xb3\xc9\xfe\x4e\x9a\xe4\x49\x3d\x89\xdc\xd3\xde\xd3\x57\xe4\xdf\x12\xec\x33\x35\x92\xab\x9c\x5d\x5c\x99\xa6\xeb\x0b\x2b\xd3\xe2\x34\xad\x2d\xac\xaf\xd8\x39\x0e\xbd\xf5\x85\x15\x1b\x77\xf4\x15\xfb\xc9\xd1\x01\x07\xec\x19\x88\x91\xd3\xc8\xfa\x32\x7e\xa2\xff\xc0\x6f\xec\xf3\x5e\xed\xac\x9a\xa7\x4c\x7f\xa1\x52\xf3\x88\x31\x46\x2c\xcb\x95\xaf\x5f\x03\xb4\x4e\xe8\xd8\x0d\x33\x59\x7c\xa1\x72\xbc\xca\xe5\x54\x0e\xa0\xc9\x96\x58\xe4\x56\xd8\x91\x89\x4f\xd0\x47\x37\xa5\x6b\x27\x4e\x85\x71\xf7\x3c\x24\x58\xae\xf1\x08\xd3\xae\x1d\x50\x1e\x78\xd9\xa0\x3c\xdc\x6f\xdf\x4b\xde\xeb\x90\xa2\x8c\xfb\x56\xc7\x7b\xad\x73\x42\xfd\x5c\x36\x62\x56\xb4\x27\x1f\x04\xaf\xc8\x7c\x7d\x39\x0b\xa3\xcc\xe8\x71\x21\xbc\x0e\xf0\x66\x93\x97\x7a\xa6\x11\xc4\x70\x78\x33\x4d\xf5\xf9\xcc\xea\x89\xf9\xc5\xd3\x27\xfc\x76\x70\x23\xfa\xa5\x54\x59\xb5\x93\x58\x19\x5b\xbe\xaf\x42\x5c\x6e\x76\x0f\x90\x6c\xdd\xaf\x39\xde\x5f\xdb\xdd\x46\xa0\x5c\x23\xde\x06\x1f\xe0\x16\x53\xb8\x6c\x45\xc7\x55\x9d\xc5\x4d\xa3\x13\xb7\xca\xec\x57\xa2\x1e\xd5\x42\xd1\x80\x99\x5f\x46\x9b\x8a\x8b\xe6\xa4\x1e\xa7\x96\x74\xe3\x80\xae\xdc\xbd\x70\xd5\xe6\xe5\x25\x2a\xcd\xf6\x0b\xbd\x58\x45\x2b\x88\x96\xcb\x9b\x49\x65\xce\xbe\x3a\xbd\xf8\x8c\x63\x24\x92\xfa\x45\xc7\xfb\x90\x33\x32\x55\x54\x5f\xe7\xd0\x45\x04\x0e\x0a\xa4\x86\xc9\x5b\x90\x2a\xb5\x0a\x5a\x0f\x23\xaf\xa0\x7d\x7a\x21\x45\xd5\x15\x1e\x93\x71\xd7\xbe\xf3\x00\x79\xc2\xe0\xd4\x96\x0a\xbb\xea\x09\xf2\x6f\x1b\xb2\x6e\x25\x09\x86\x78\x4f\xff\x9f\xb1\xf7\xf4\xae\xbd\xa7\xff\x5f\x47\x69\x03\xde\xe9\x78\xd1\x29\x39\xe7\x08\x81\x7e\x75\xfb\x63\xf2\xfb\x87\xc8\x77\x90\x27\xee\x24\x0b\xea\xd8\x09\x7b\x17\x4e\xd8\x9f\x36\x9d\xb0\x7f\x6e\x97\x4e\xd8\x2f\x76\x06\xa3\x5a\x3d\x92\x83\xbb\xe8\x9c\xd9\xde\x07\x7b\xda\x3d\x3c\x08\x81\x48\xd2\x9a\x72\xb2\xc1\xcf\x5c\x47\xa6\x8c\xad\x37\x40\xb0\x93\x8e\xdc\x90\x65\xe6\x87\xae\xf3\x9e\x6c\xfc\x2e\x65\xde\x55\xf9\xbb\xc4\xdf\x90\x6e\x76\x2b\xcc\x20\xcc\x4a\x30\xbe\x61\x96\xf7\x65\xff\xf8\xa9\x4a\x11\xcf\xf7\x63\x23\x60\xa9\x46\x74\x4b\x05\xf5\x7d\xd9\x99\x2f\x14\xbd\x32\xbe\xaf\xce\x3a\x10\xbd\x0b\xe8\xad\x82\x0f\xb4\x22\xd4\x90\x15\x49\xe2\x83\x8a\x39\x66\x71\x4f\xe2\xd7\xcf\xe7\x34\xe2\x0c\xd4\xe6\xf0\xf5\x41\x59\x23\x02\x54\x8b\x32\xd9\x41\xcd\xed\x1a\xf9\xaf\xed\xcc\xed\x18\x56\x8c\xa9\x33\x31\x11\x3f\x26\x76\x60\x41\x8d\x45\x2c\xae\xf3\xb4\xc8\xe3\x0c\x62\x6b\x50\x78\xe7\x46\x49\x33\xac\x43\xf4\x0e\x9a\x7a\x28\xa3\xcd\x28\xa9\xb1\x48\xa7\x5d\x23\x1f\xd8\x43\x1e\x17\x1a\x81\x47\x90\x7f\xe7\x07\xf7\x78\xaf\xdb\xb3\x54\x7a\x3a\x28\x7c\xd8\x4a\xd3\x26\xf3\x00\x18\xd0\xfa\xeb\x2d\x5e\x84\x79\x06\x76\x69\x75\xc9\xa0\x2a\xce\x18\x02\x5c\xd3\xa1\x0a\x47\xb2\x62\x5f\xe5\xdc\x48\x25\xb8\x4a\xf2\xa4\x31\x64\xcf\x95\x32\xd7\xc9\x08\x96\xbe\xb4\x75\x3e\x3d\x99\xa4\xb0\xbe\x5b\x2c\x05\xc4\x7e\x34\xd2\x42\xea\xbe\x69\x69\xd8\xc0\x0c\x76\x3a\xcd\x9c\x90\x88\x78\x3e\x8d\xd9\x89\x71\xc9\x30\xc5\xb1\x68\x9d\x07\x3c\xae\x73\xcc\xd9\x5d\xb0\x6f\x38\x7e\x63\x64\x82\x42\xf2\x76\x98\x03\x1e\x5b\x0a\x1a\x41\xe9\x90\x8a\xab\x8d\xd9\x4b\x74\x93\x20\xb6\x04\x61\x03\xe2\x0a\x72\x7d\xdf\x95\x23\xb5\xd4\x85\x0c\x0a\x50\xbc\x6f\xd1\x9f\x4c\xcd\xf7\xa8\x0c\x78\x3e\x9d\x8f\x87\x24\xdb\x93\x7e\x8f\x6d\x96\x6e\xa0\xf5\x42\xee\x99\x69\xb5\x64\x76\xee\xbf\x8c\xe7\x03\x5d\xcf\xcd\xf9\x38\x29\xb5\x09\x66\x4e\x59\x99\xa1\x50\x31\x02\xf6\x1e\xe9\x8f\x92\x90\x44\xf9\xb7\x1d\xb2\x07\x4e\x90\xfb\x6b\x8e\xf7\x12\x67\x5e\xf3\x3d\x20\x77\xc3\x1b\xdd\x33\x85\x7d\xcc\xcd\x06\x80\xd5\xb6\x82\x51\x21\x59\x2b\xa6\x0f\x91\xd1\x80\x18\xa0\xaa\x42\x75\x61\x07\x14\xe9\x4d\x4b\x64\xc2\xb2\xda\x3d\x99\xdc\x46\x6e\xb9\x0c\x32\xb4\xda\x8d\x38\x79\xd9\x04\x99\xc8\xa3\xcc\xfd\x5a\xc5\xfb\x40\x65\xfd\xd4\x9a\x8d\xdd\x6c\x46\xf5\x9a\xd4\x12\x98\x54\x29\xa3\x19\x86\x26\xf1\xbd\x78\x34\x4d\x8f\x1f\x3f\x06\x63\xd6\x6e\xa6\x6d\xde\xae\x89\x7b\x5b\xed\x1f\x98\x41\x45\x28\x8a\x6d\x27\x26\x34\x03\x01\xa4\xa7\xcd\x51\xaa\x8e\xf3\x68\xf7\xd5\xa2\x07\x46\x08\xd6\xeb\x00\x7e\xd4\x54\x33\xa5\x9c\xfd\x0c\x1d\x76\xde\x4a\x93\x6e\x13\xcd\xd4\x6b\xcb\x4b\xd0\x4d\x3d\x2d\xd3\xea\x54\xc8\x03\x6c\x1e\xa1\x46\x37\x6a\x84\x51\xa4\x38\x14\x55\x42\x0f\x7c\x6d\x79\xc9\x5a\x89\x39\x72\x2b\xb9\xf9\x32\x56\x62\xfd\xd4\x1a\xf9\xab\x27\x59\x11\xee\x45\xbe\x30\x89\xe8\xbc\xb6\xb4\x08\x89\xba\xe0\x4e\xfb\xf8\x93\xbc\xa3\xd6\x93\x11\x29\xd3\x74\x39\xfb\x2a\xfb\xda\x61\xf2\xbb\x15\x72\x5d\x23\x83\xc4\x55\x2b\x00\x2a\xe3\x7e\xa2\xe2\xfd\x74\x65\x51\xd2\x4a\x39\x2f\x10\x97\x11\x81\xe1\x5e\x25\x45\x53\xe3\xaf\xb7\x58\xdc\x04\x9d\xa2\x16\xd3\x05\x55\x29\xa4\x97\x52\xaa\x31\x0b\x1c\x43\x8a\x3e\x3e\x5d\x35\x4f\xa4\x1a\x00\x3d\xb9\x66\x74\x4c\x59\xe7\x1b\x96\xd1\x42\x09\xe5\xe5\x4b\x0c\xd0\x4e\xaa\x91\xe0\x56\x90\xa9\x0f\xe5\x8e\x6d\x25\xe0\xf9\xaa\x94\x2c\x62\x3f\x02\xe5\xe5\x31\x22\x66\xb4\xb8\x98\x2d\xd4\x72\xd8\xed\x5b\x91\x27\xd2\x33\x41\xb7\xa7\x53\x23\x58\x44\xe3\x47\xaf\x21\x8f\xe9\x24\xc1\x52\xdc\x48\xce\xc4\x90\x0f\xd8\x7d\xf8\x1a\xef\xe5\xd7\x2c\x95\xd2\x25\xd8\x65\xac\x7c\x6d\x61\x26\xfa\x53\x4a\xd4\x26\x2d\x62\x99\x39\x11\x88\x68\x52\x64\xce\x3e\x04\xa6\xde\x4e\x12\x2c\x83\x13\x6b\x27\x09\xce\x2e\x2d\x4e\x53\x9e\xd7\xfd\x29\x95\x03\x42\x66\x56\xd6\xa9\xaa\x50\xab\x87\x3d\x03\x31\x73\xba\xaf\x5a\x09\x79\x0e\xf7\x51\x87\x65\xd2\x11\x43\x26\xf7\x35\x32\xdb\x48\x29\x75\x1d\xe7\x53\x75\xbc\xd0\x89\x97\x86\x8c\x0e\x4e\x40\x50\x65\xd1\x80\x77\xa2\xa4\x27\x88\x31\x2a\x29\x60\xa2\x9e\x89\x19\x40\xb0\x17\xa2\xf9\xbe\xfe\xb1\x4c\x26\x08\x5c\x40\x04\x4c\x9d\x71\x62\x6d\x89\x2e\x27\x01\x5f\xe9\xd6\xa2\x30\x6b\x61\x99\x43\x53\xb4\xce\x22\xdc\x3d\x56\x3f\xe1\xce\xcf\x3a\x49\x8c\xde\x04\x18\x7b\x9e\x66\x18\x6a\x17\x68\x73\x9d\x26\x0a\x45\xfb\x72\x4e\xc2\xfe\x9e\x94\x9d\xad\xf5\x4b\xd1\x4b\x45\xe8\xd4\xe7\x8d\xbe\x3d\x91\x99\x5b\x46\x6e\x77\xe4\xe8\x21\x27\x54\x33\x4d\xb6\xd0\x26\x08\xfa\x45\x0c\xbc\x56\xb5\x8a\x8b\xc9\xa7\x5e\x3d\x2b\x88\x8a\x64\xf3\x3b\x49\x00\xa9\xd3\xbd\x39\xd0\xc6\x01\xdb\x35\xaa\x1c\xe8\x79\x8c\xc2\xa8\xf7\x19\xf6\x45\x37\x0c\x3c\xa5\xe6\x3f\x24\x1e\x9c\x5d\x5a\x9c\x1a\x58\x9a\x77\x5a\xbc\xcd\x53\x16\x79\x73\xd4\x13\x23\xf4\x14\xed\x91\x3b\x5f\xc6\x1b\xa9\x62\x34\x8c\xa3\x30\x56\x6f\xd1\xac\x30\xe2\x7f\x86\xb7\x1a\x2b\xce\x37\x6a\x31\xa7\xd1\x67\x03\xb0\x03\x3c\xd8\xb6\x1e\x21\xa3\xfb\x88\xb2\x6c\xcc\xb7\x34\x51\x08\x63\x33\x04\x6a\xd6\x9f\xbd\x59\x45\x30\x01\xd5\xd1\xde\x3b\x62\x27\xe1\x1e\x53\x8c\xa8\x52\x73\xd6\x12\xe9\x45\xe5\x15\xca\x56\x0f\xb3\x6a\x9d\x28\x1a\xc6\x8e\x9f\x0a\x1b\xbc\xde\xab\x47\xfc\x74\x12\x70\x9f\x9e\x41\xb7\x1a\x59\xad\x60\x93\x22\x2e\x58\x39\x75\x36\x00\x73\xa3\x16\xa1\xb5\x68\x26\x49\x15\xbb\x66\x72\x4a\xf3\x59\x69\x00\x37\x41\x3c\x93\x10\x33\x54\x0f\x8b\xe2\xd3\x56\x63\x26\x27\x00\xa2\x47\x3b\x09\x38\x32\xb5\x78\x88\x91\x46\x64\x5d\x21\xac\x68\xa6\x5d\xa6\x5d\x33\xce\xb9\x89\xa4\x81\x73\xd3\xd6\xf9\x38\xc3\x6c\x5a\xc6\xb3\x82\x8a\x8b\x6e\x86\x0c\x42\xf8\xdb\x6d\x44\x79\x8a\xc5\xd1\x49\x59\x5b\xd4\xa0\x13\xa0\xe3\x95\x37\x8a\x54\x1b\x7a\xaf\xff\x33\x41\xae\x57\x74\x75\x95\x77\x90\x4c\xb8\x7f\x36\xe1\x7d\x6e\x62\xb5\xfc\xb8\x94\x51\xd3\x20\x1c\x5b\x2c\xce\x33\x7a\xae\x8f\xd2\x9c\x93\x37\x5e\x87\xa7\x61\x12\x48\x84\x04\xf1\x5f\xe4\x18\x53\xde\x88\xd0\x9d\xa9\x57\xf8\x30\xc1\xd5\xca\x15\x01\x53\x6a\x42\xdc\xf1\xd6\x7d\x17\xf4\x69\x07\x09\x59\x4e\x72\x3e\x47\xe7\x1b\x30\xd5\x62\xee\xeb\x3c\xcb\x1a\x5d\x71\x70\xc2\x3c\x64\x51\x3f\x31\x84\xee\x40\xbe\x39\xcc\x55\x94\x23\x6d\x14\x95\xf6\x97\x95\x7c\x3f\x2c\x3d\x2a\x4f\x14\x90\x4b\xae\xa3\x5c\xf4\xe1\xf5\xe9\x32\xdf\x92\x97\x0d\xaa\xac\xad\x6b\x24\xe3\x3c\xc6\x93\x99\x76\xe3\x18\x41\xb3\x94\x49\x4e\x2e\x5e\x7f\xa8\xa8\x58\x76\x68\xbd\x40\xbb\x92\x62\x14\xac\xc7\x1a\x1a\x50\xe6\x31\xbb\xfa\x7a\xb2\xc1\xe3\xe2\xac\x66\xf2\xb6\x0f\xec\x1d\xf0\x7f\xef\x25\x8f\x95\x47\x7e\x81\x75\x58\x3d\xcc\x7b\xee\x5f\xec\xf1\x3e\xbf\xa7\x7c\x5d\x97\x0a\x59\xbb\x41\x06\x49\xf6\xdf\xd9\xb8\x33\xc4\x91\x2c\x20\xe3\x54\x7a\xb6\x50\x85\xbd\xaa\xac\xf0\x75\x55\xb5\xae\xb0\xef\x56\x54\xe9\xb2\x90\x78\xf4\x30\xb4\x55\xd4\x29\x46\x5f\xea\xa0\x4a\x9e\x07\x2a\xe6\x7a\xd1\x6d\x7d\x6d\x49\x47\xc4\x7a\x8b\xd7\x37\x94\x9c\x25\xe7\xc8\xc2\xaf\x36\x0e\x35\xdc\x85\xea\x8c\xd1\xa5\x58\x99\xb3\x80\x69\x48\x93\xcd\x50\x30\x7f\x21\xc4\x93\x6c\x69\xd3\x0e\x74\x20\x12\xbb\xa5\x16\x22\x56\xb5\xbc\xc9\xbb\x99\xe0\x32\xf3\x30\x1a\x32\xd8\x96\x60\x10\x70\x07\xf2\x80\x66\x09\xb0\xa0\x21\x1c\xe3\xe1\x03\xf6\x09\x99\x8f\x40\xbf\x9b\x4b\x9f\x19\xa3\x72\x39\x4a\x4d\xa1\xb4\x17\x2b\x9e\xa9\x6e\x2c\x96\x3c\x49\xf1\x40\x21\x0b\xa9\xad\x75\x8d\x28\xec\x74\x78\x00\x23\x49\x71\x52\xfa\x56\xce\x64\x0a\x44\xef\x6b\x62\x97\xeb\x21\x8c\xa0\x4a\xfd\x5b\x5e\xcb\xea\xa3\x36\x7c\x69\x06\x06\x6c\x76\xe0\x3f\x82\x32\x8b\x66\x1d\x81\x3f\xdf\x4b\xae\xcb\xc5\x61\x91\x01\x58\x99\xfb\xdb\x7b\xbd\x3f\xdb\xb3\x6e\x3e\x1a\x4e\xfc\x62\xce\x03\xcc\x0e\x7a\x50\xa3\x51\x31\x3c\x81\x14\x6a\xcd\x24\x32\x0e\x90\x02\x43\x9a\x00\xb1\x3d\x01\xc3\x1f\x17\x74\x8a\xa5\xbd\x32\xd2\xf2\x00\xd6\x0f\x60\xad\x64\xb5\xf1\x25\x70\x7d\x43\x78\x3e\x49\xd2\xc0\xcf\xde\xe4\xf2\x78\xc9\x4f\xc2\x6a\x68\x6e\x20\x37\x93\x59\xd4\xc7\xc7\x4e\x7a\x73\xf4\x85\x84\x52\xef\x29\xac\x1b\x84\x3c\xae\xf3\xa7\xc9\x27\x94\x7a\x50\xc2\x9b\xa3\x4f\x81\x3f\x9e\x36\x8d\x4f\xf9\xf9\x4e\x88\x9c\xf9\x7a\xd8\xe6\x59\xce\xda\x1d\x51\xa6\x78\x0c\x4e\xfb\xf0\xdc\x70\xbd\x87\xaf\x1f\x14\xff\xf1\x7d\x9f\x3c\xa8\xaf\x02\xd9\xaa\x28\x09\x4e\xa9\xe6\xa2\x1a\xf0\x7e\x85\x20\x0e\xda\xa1\x9c\xb6\x13\xa9\x51\x84\xbe\x69\x13\xa1\xf6\x55\x59\x17\xd7\x57\x9d\x87\x18\x61\xc9\xb7\x64\x39\x06\x57\x0f\xf4\xb5\x37\x4d\xfb\xaf\xd0\x92\x36\x27\x4f\xc3\x66\x93\xa7\x03\x56\xcb\xbc\x32\xaf\xfe\x7d\x50\x48\xf2\xb7\x91\x5b\x46\x40\xb5\x95\x85\x73\x73\x36\x2f\x3a\x37\x0e\x0d\x85\x3e\xe0\xee\x43\xa7\x5d\x42\x7e\x72\x2f\xb9\x61\xb3\x9f\x9f\xcb\xdc\x0b\x7b\xbd\x7f\xde\x33\x80\xd3\x33\x75\x98\x2c\xd7\x91\x29\x8a\xb8\x0e\x11\x16\x95\xa8\x5e\x3a\xff\x0d\xcb\x67\x18\x97\x34\xcc\x2c\xee\x53\x29\xde\x42\xa5\x1b\x17\x04\xae\x14\x15\x25\xda\xb3\x35\x0e\x40\x2a\x95\xca\x10\x45\x21\x83\xb3\x14\x8c\x1b\x56\xd6\x65\x11\x5d\xb9\x7b\x66\xe5\xee\x05\xda\xe6\x82\xd7\x09\xb3\x36\xf6\x11\x7d\xa8\x81\xf9\x13\x3d\x2a\xd8\x5f\x79\xcf\x00\x05\x09\xf8\xb4\x1e\x39\x4b\x8b\x7e\x49\xc1\x20\x84\x5b\x55\x39\x6c\x40\x17\x91\xc4\x97\xb8\x7f\x23\xfd\x6f\xa4\xe6\x1a\x06\x1c\x16\x08\x7f\xc5\x0b\x60\x6b\x58\x8e\x9e\x0b\xf3\x6a\x86\x5b\x68\x56\xac\x71\xca\xb6\x44\x57\x94\x82\xab\xc6\xeb\x70\xb1\x85\x85\x20\xd0\x4c\xe4\xb5\xdf\x04\xed\xe5\x60\xda\x04\xf4\x50\xb2\xcb\x8a\x83\x1a\xa4\xc9\x94\x69\xac\xf5\x64\xeb\x7c\x9a\x38\x3b\x19\xe7\xda\xb2\x63\xec\x45\x41\xaf\x9a\x61\xde\xea\xd6\x04\xa9\x0a\x92\x7a\x56\x48\x36\xd5\x28\xa9\xb3\xa8\x2a\xe7\xd5\x6f\xe5\xed\xa8\x18\xa6\x38\xb1\x26\x9b\xaf\x7a\x84\xbc\x5e\x86\x7c\xbf\x8c\xb8\x17\xcf\xf1\xa7\xd4\xea\x42\xee\x6b\x45\x96\x31\x5b\xf6\x48\xce\x7c\xa8\xa3\xef\x27\xf6\x90\xc7\x60\x9a\x7b\x95\xf6\xd8\xfd\xd0\x1e\xef\xdd\x7b\xec\x67\x97\xa2\x43\x89\x65\x12\xfd\x42\x11\x42\x0f\x99\x4b\xa7\xa6\xb7\xb8\xef\x16\xb4\x7e\xb0\xac\x4e\x68\xf3\xbc\x95\x04\x53\xd3\x72\x5b\x49\xe6\xcd\xd8\xff\xb2\xa9\x80\xc3\x3f\x86\xa2\x51\x59\xae\x55\x36\x7a\x59\x50\x89\xbf\x71\xce\xd3\x86\x90\xb5\xa5\x2e\x5c\x70\x6a\x99\xc1\x63\x63\x71\xe0\x95\x32\xcc\x1e\x02\x09\xea\x58\x98\x67\x06\x63\x65\x08\xd3\x50\x5e\x9c\x63\x54\xc8\x41\x0e\x50\xae\xb4\xa8\xea\x82\x2e\x2e\x49\xe5\x4a\x56\x95\x1f\xa6\x05\xe4\xbc\xe2\xeb\xfa\xe7\x18\x1c\xa8\x40\x3a\x18\xdd\x55\x4d\xa9\xfb\x16\x22\x44\x63\x49\xc4\x73\x2e\x7d\x55\x78\xa1\xcd\x5c\xc5\x34\x15\xb6\x6a\xce\x20\xe7\x5a\xc6\xd4\x6e\x97\x86\x42\x58\x6b\xb8\x06\xb6\xab\x34\x27\xd9\x06\x70\x7a\x52\xc6\x06\x1d\xc1\xc8\xf2\x28\xd2\xed\x54\xe6\x7c\xdb\xb5\xe4\x49\x23\xee\x14\xdc\x55\xf3\x7a\xba\xdc\xbf\xbe\xc6\x7b\xa3\x53\x7e\x2a\x58\xce\x5c\x66\x5b\xc5\x8d\x22\x73\xf0\xc8\x3e\xa6\x6a\xb3\x19\xba\x55\x2d\x47\xd2\x3c\x99\xd1\x86\xf3\xe2\x25\x80\x99\x13\xd2\xd7\x94\x99\x85\x3b\x4e\xe2\x6a\x91\x5c\xdb\xbf\xe0\x4c\x8a\xef\x2d\x05\xf3\x6f\x1e\x18\x7b\x7e\xec\xd6\xf3\x63\xec\x49\x71\xe5\xe0\xec\x76\x99\x8d\xf6\x45\x65\x40\xbb\x47\x1e\xce\x8e\xfc\xa8\x43\xe0\x9c\xb9\x6f\x1b\x31\x9c\x6d\x29\xc9\x5a\x87\xd7\xbd\xe7\xad\x95\x2d\x45\xa8\x8f\xcb\xe0\x02\x45\xf2\x31\x23\x69\x87\xb6\xde\x40\x3c\x49\xea\xd3\x95\xc4\x88\x66\x2b\xdd\x71\x59\x2f\xcb\x79\xdb\x27\xff\xdd\x11\x2b\x21\x28\xbc\xfb\x49\x87\xdc\x7e\xf9\xbd\x85\x3a\xbc\x97\x39\x32\x2f\x96\xec\x69\x1f\x75\xd2\x38\xc4\x7d\x9d\xc3\xf0\x37\x75\x95\xa8\x43\xd2\x47\x21\x35\x3d\x97\x80\x26\xa6\x0f\xb5\xbe\xf8\xfc\x8b\x4e\xb8\xbd\x3b\xcb\x49\x77\x71\x3b\xa8\xfd\x72\xff\x07\x02\xee\xff\xd4\x04\xf1\xfa\x53\xbc\xfa\xf3\xcd\x66\xca\x9b\xd0\xd7\xd5\x6e\xc4\xdd\x37\x4c\x78\x77\x97\x9e\x19\x5e\x2e\x12\x59\x5f\x30\x77\x39\xb7\x92\xcb\xc2\x45\x21\xbf\x83\xcb\x03\x69\xa4\x51\xc4\x22\xe8\xef\xab\x90\x1f\xad\x90\x1b\xea\xc5\xeb\x35\x1e\x71\x08\x61\x74\xbf\xa7\xe2\x7d\xd4\xcc\xc8\xab\xdf\xd0\x56\x02\x81\x93\xda\x64\x9e\xe9\x37\xc8\xcc\x98\x66\x0a\xb8\x98\x05\x91\xb3\x7a\x29\x88\x33\x7a\x2c\xa2\x7b\x46\x17\xb2\xf9\x2e\x41\xa4\x83\xda\x0e\x45\xad\x60\x4d\x87\x8b\x3d\x2e\x8f\xe6\x60\x66\x3a\x56\x16\x20\xfe\x82\x3b\x35\x99\xce\x45\x72\x07\x79\xfa\xe5\xf8\x5d\xb1\x1a\x8f\xd4\xc8\xc9\x9f\x4e\x58\x09\x8d\x47\xc9\x8c\xee\x47\x26\xbc\xa7\x58\x22\xb9\x76\xdb\xd5\x8a\xed\x0c\xad\xb9\x03\x55\x2b\xfe\x05\x67\xbf\x52\x2c\x58\x4b\xf6\x87\x15\xf2\x06\x87\xe8\x77\xee\xcb\x1c\xaf\x57\xe8\x02\x0c\xa6\x21\x00\x44\x34\xf9\x42\xce\xa9\x14\xf9\x63\xea\x99\x5d\x03\xea\x01\xf6\x0d\x98\x3f\x25\x52\xca\xbd\xa3\xea\x80\xde\x8a\x43\x52\x64\xf1\xb7\x8c\xa3\xbf\xe2\x90\xeb\x0b\x55\xc6\x1a\xaf\x27\x71\x90\xb9\xef\x77\x64\x78\x92\xf7\xfd\xce\x89\xf2\x5b\xd5\x5f\x0d\x67\x20\xa4\x5f\x16\x85\x01\xe8\xfc\x76\xd6\xe5\x96\x74\x52\x06\xff\x01\xdb\x7b\x24\x69\x50\xaf\xaf\x4d\x6f\x70\x5d\x36\xd4\xde\x01\x72\xcb\x8e\xb6\xc7\x69\xf0\x60\x0f\x4e\x42\x38\xdf\x89\x38\x4f\x7b\xee\x1b\x0f\x78\x59\xff\x63\xbc\xe3\xb7\x92\x74\xa3\x11\x25\x5b\xd5\x30\x98\xa6\x8c\xc2\xfb\x35\x9e\x6b\xbe\x16\xe8\x8b\x22\x1a\x7d\xb8\xfd\x5a\xfc\xc0\xe8\x41\xf1\x5d\xa7\x13\x41\x40\x52\x62\x3b\x02\xbc\x61\x3f\x79\xab\x43\xf6\x63\xb9\xbb\x67\xdd\xef\xb9\x3c\xa7\xc3\x93\xf2\x7b\xef\x59\xea\x2f\x79\xf4\xb1\x13\x69\x96\x03\x9c\xa7\xee\xb0\x04\xa3\x00\x4f\x1f\x24\x55\x5a\x42\xf4\x74\x5d\x12\xfd\xff\x1e\xb2\x0f\xdd\xff\x53\xf7\x94\x77\x3b\x4e\x58\x2a\xad\x82\x12\xbb\x2b\x2c\x4c\x3f\x6a\xe2\x30\x64\x40\xd2\xfb\x4c\xcd\x84\xb5\x0d\xdf\xef\x90\x03\x9a\xee\xbb\x3f\xe4\x78\x0f\x3b\x67\x4c\xf1\x23\x57\x00\x85\x49\xc3\xe4\xf7\x81\x70\x45\x9c\x49\x25\x41\x98\xd1\x01\x8b\x28\x53\x80\x60\x3c\xb6\xd4\x6d\xc4\x51\x4f\x86\xc7\x18\x0e\x0d\x86\x0b\xbe\x60\xad\x0f\xce\x77\x3a\x51\xef\x20\xac\xf3\xc1\xb3\xc0\x51\x1d\xb4\x3a\xfd\x2e\x87\x4c\xe6\x61\x9b\xbb\x6f\x75\x86\xfb\xfd\x8c\x58\xa9\xf5\xb0\xcd\xbd\xda\x7a\x28\x9d\xec\xb4\x16\x31\x69\x68\x59\x4c\xcf\x16\xdd\xe2\x29\x66\xfd\x10\xc7\x47\xb2\xd9\x2c\xda\x62\xbd\x0c\xcc\x04\xa8\x39\x6a\x50\x6b\xd6\xe4\x08\xc8\xc3\x36\xfb\xff\xf2\x8a\xf7\x8f\xce\x68\xf6\xdf\xe0\xfa\xed\x7d\xac\x67\xa8\xb4\x93\xa5\x59\x5d\x61\xa1\x79\x70\x28\x66\x64\x6d\x1e\x7d\x7e\x37\xcb\x31\xec\x1d\xa9\x43\x07\xbd\x42\xa8\xd1\x0b\x69\x02\x45\x7b\x6d\xa1\x81\x06\xad\x24\xc4\xd5\xda\xbd\x63\x46\x3f\x0c\x3d\x41\x5d\xf3\xc0\x16\xae\xa4\x92\x48\x4a\x51\xf3\x6f\x73\x08\xc1\xf9\x85\x94\x02\xaf\x73\xbc\x97\x38\x27\xf5\x6f\x4d\xe8\x42\x71\x2e\xda\x42\xca\x4e\x52\x1d\x3d\x54\xa8\x68\xe5\x0a\xa9\x83\x14\x07\xaa\x9f\x30\x2b\xa8\xdb\xac\x6b\xf7\xad\x44\xa5\x76\xb1\x61\x12\xe6\x8c\xd3\x66\x76\xf1\x27\x26\xb7\xc9\xf5\x73\x54\x47\xae\x5b\xb9\x7e\xfe\x71\xc2\xfb\x75\x67\xd0\x9b\x91\xb9\x7e\x64\xca\x0f\x00\xcd\x2f\x3c\x38\x35\xb0\x91\xc1\x5e\x4a\xde\xfb\x90\x69\x0f\x8e\x20\x6e\x5d\xac\xce\x0b\xba\xbc\x0b\x4a\xee\x7a\x94\x74\x03\xda\x16\x8b\x09\x14\x40\x5e\x9b\xe0\x77\xf7\xac\x95\x35\x94\x72\x2c\xb7\x56\x65\x7e\x4c\xba\x39\x28\x0f\x93\x86\xb2\x56\x4f\xf9\x17\x9c\xbd\xd8\xc3\x0b\xce\x5e\x4c\x9e\x62\x51\xd0\x87\x2a\xe4\x25\x0e\x91\x45\xdc\xde\x08\xd6\x7c\xd0\x34\xe2\x24\x2d\x69\x32\xe6\xdd\x2a\x67\x43\x53\x36\x2b\x6b\x8b\x7c\x59\xeb\xa1\x6b\xac\x58\x76\xc5\xfc\x90\x07\x89\xec\x9e\x9b\x8d\x48\x4a\x3d\xbc\x13\xeb\x98\xf4\xe7\x66\xd9\x94\x19\xc4\x5a\xca\x1a\xa3\x76\x23\x7a\xa5\x62\x9f\xc8\x43\x07\xc8\xad\x66\x48\x80\x99\x17\x71\x73\xd6\x5f\x28\x7e\xaf\x85\x4d\x31\xd9\xf2\x4e\x85\xd8\x92\x5f\xd9\xef\xad\x8e\x2c\x31\x08\xb8\x7f\xe8\x07\x4a\x59\x31\x30\x26\xe5\x4f\xf6\x8e\x35\x13\xbb\xd5\x4c\xbc\x59\xc7\xa4\xbc\xd6\xf1\xe6\x74\xd6\xf4\x4b\x5e\x20\x93\xef\x3e\x49\x16\xc9\x1d\xc3\x23\x4c\x76\xba\x9d\xc6\x5a\x93\x5d\x68\x4d\x96\x0c\xa5\xc9\x53\x77\x15\x7d\x72\xd1\xd9\xdc\x5e\x52\x5e\x73\x9f\x35\x24\x19\xde\xa8\xac\xaa\x23\xe9\x04\x21\xaf\xbf\xc9\x92\xbc\x74\x68\x52\x39\x8e\xb5\xc3\xeb\xee\xff\x3a\xee\xcd\x0f\x7a\x31\xc2\xa1\xb6\xa3\x8b\x2b\x03\x8d\x45\x5d\xbe\xf7\x38\xf9\x7e\x87\x1c\x60\xf7\x77\x53\xbe\x18\x66\x1b\xee\x77\x3b\x23\x9c\x82\x55\xe7\xe6\x55\x71\xd3\x3e\xe5\xad\xeb\xc7\x56\x3c\x7b\x4c\xe1\x39\x5d\x64\x39\xa3\xf0\x56\x3a\x73\x16\x31\xda\x40\x38\x20\x16\x5c\xc6\xe2\x26\xca\x1c\xe6\x93\xff\x51\x21\xfb\xeb\x11\x0b\xdb\xab\xbc\xe1\x7e\xa2\x42\x8e\x6c\xdb\x3b\xd4\x83\xad\xaa\x7c\x53\xde\xf7\x56\x16\xe4\xf7\x00\x34\xa0\xb3\x35\xd5\xc2\x6a\x10\xa6\x78\xfc\x59\xa4\xfd\x3c\x6a\x3c\xdf\xe2\x3c\xa6\xe5\x89\x86\x4e\x96\x1f\x42\xcd\x3e\x3d\x71\xbe\xc3\xeb\xb9\x46\xda\x06\x85\x73\x18\x21\x87\x0a\x31\xa6\x3e\x85\x31\x48\x85\x91\x19\x33\x22\x13\x4b\xe6\xe0\xf9\x81\x93\xa0\x7b\x70\x37\xb6\x39\x24\x3c\xd5\x0e\xe9\x00\xf3\x58\x3d\x89\xeb\xbc\x93\x67\x33\x52\x80\x9f\x29\x96\x5f\x99\xca\x6e\x94\xe3\x24\xef\x71\x48\xa5\x51\x77\xdf\xe9\x90\x99\x6d\xa7\xf4\xe4\x82\xb5\xd2\x9d\x93\x0b\x36\x64\xc1\xc9\xb0\x96\x72\xba\xd0\x62\x71\xcc\xa3\x12\x3f\x6c\x9a\x70\x20\xe1\xfe\x06\xfa\x47\x1c\xcc\x70\xed\xe5\xe9\x54\xa2\x62\x2c\x63\xf8\x03\x6b\x17\xfc\xb0\x43\x1e\xd3\x49\xd2\x7c\x2b\x49\xcf\x63\x57\xdc\xd7\x8f\xca\x4f\x56\x44\xf8\x99\xdf\xc8\xee\x3f\xdb\x7e\x6a\x0f\x45\xb5\xa2\x14\x89\xba\xef\x4c\x6d\x4f\x74\x12\x94\xa3\xb0\x07\x41\x5e\xeb\x90\x7d\x2f\xe8\x26\xb5\x5e\xce\xdd\x97\x38\xe4\xf8\xb6\x1d\x7c\x16\x16\xb6\xfa\xf7\x4c\xf9\xd0\xee\x98\x7a\xd8\x7f\x7a\x60\x9a\xb3\x16\x4b\x31\x5f\x1c\xe0\x37\xa8\xf8\x75\x21\x80\xed\x03\xe6\x75\xe9\x8c\x7b\xc1\x21\x4f\xdb\xb6\x47\x6b\x58\x78\x70\x20\xbd\xf7\x9d\xf2\xb5\xdd\x37\xf5\xb0\x8f\xda\x0c\x9d\x3e\x83\x4b\x8e\x93\x80\x67\x3e\xf9\x13\x87\x5c\x2b\xfe\x9c\x6f\x40\xf7\x7a\xee\x67\x1d\x72\x6c\xdb\xde\xca\x03\x65\x7c\xe7\xbd\xc5\x31\x7f\x6a\xf6\xa8\x9e\xc4\x59\x9e\xb2\x30\x56\xa1\x69\x90\x71\x13\x1d\x14\xa0\x0b\x12\xf8\x44\x59\xb7\xc1\xe9\x83\x81\x37\xa2\xcc\x00\x67\xbb\xee\xc7\x8d\xa8\x8b\xda\xa3\x5c\x62\x0e\x49\x57\x39\x19\xee\x8a\x8d\x74\x33\x6e\xd6\xeb\x93\x17\x55\xc8\x01\x79\x3a\x93\xcc\xfd\x8a\x33\x5c\x79\x57\xac\x08\x16\x3f\xb3\x36\x64\x4d\x7e\xcc\xd1\x25\x4a\xcb\xa2\x1f\x2b\x1b\xda\x80\x03\x29\x7a\x3f\xe2\x48\xaa\x35\xd3\x1a\xd7\x4e\x12\x5c\x4a\x48\xb7\x1e\x6b\x11\xd2\x4d\x3e\xe1\x10\x82\xef\x4f\x27\x01\x77\x7f\xca\xf1\xde\xe7\x14\xbf\xf5\x8a\x85\x0d\xed\x56\x00\xa6\x49\xa5\xfb\x43\x22\x8b\x48\x7b\x98\x44\x0f\xc5\xca\x1c\xe0\x0d\x23\x8e\x5a\x7d\x8a\xae\x5a\x29\x6f\xb3\x10\xd4\x6c\x29\xdb\xa2\xb5\x28\xa9\x6f\x80\x31\x97\xfb\xf4\x6e\xa5\x4b\x3b\x59\x7c\x04\x26\x50\x21\xb1\x4b\x1c\x39\xc1\xf6\x84\x71\x3d\xea\x4a\xa7\x00\x71\xc5\xda\x58\xe7\x42\x3c\x8e\xb8\xa2\x4a\xef\x1e\xa1\x90\x2a\xc8\x69\xc4\xcf\x0f\x59\xcb\xd6\x49\x5d\x97\xbd\x96\x4d\x1e\x73\x21\x4b\x6d\xaa\x77\x25\x1a\xab\x3d\x19\x79\x30\xa3\x97\xb7\x9b\xe9\x9c\x3b\xbc\x2e\xb3\xec\x75\xa2\x6e\x33\x8c\x7d\xf2\xf7\x15\x89\xaa\xc2\xf2\x96\xfb\xc5\xca\x0e\x88\xe9\x9d\xb2\xb4\xbd\xf9\x2a\xea\xb1\xdd\x5f\xbc\x5a\x93\xb4\x67\x83\xb1\xac\x14\xdd\x44\x4f\x5a\x60\x02\x93\x0e\x06\x68\x0a\xa9\x82\xa7\x1a\x62\x50\xac\x71\xa3\x2b\xbd\x4c\x20\x6a\xab\x1a\xe3\x06\x81\x6f\xda\xca\xf7\x2b\x97\x90\x95\x49\x1c\xf5\xbe\x9d\x9e\x89\xab\xb0\x8b\x95\xa3\xa3\x4c\x70\xa7\xc1\x2c\x21\xe4\x21\xee\xd1\x2d\xd6\x83\xaf\xef\x59\x3a\x75\x8a\x2e\x9f\x59\xa7\xf7\x9c\x59\x7d\x26\xe2\xa3\x40\x14\x17\xb6\x25\xe5\xea\xcb\xbe\x81\xd5\xb5\x2b\xba\xd4\x61\x79\x8b\xfc\x95\x43\xae\x85\x43\x75\x06\xb3\xe2\xba\x9f\x77\xbc\x9f\x35\xc2\xf4\x54\xa8\x0b\xbc\x9c\xa6\x90\x8e\xef\x5e\x2f\x4d\xbc\x69\xea\x65\x49\x23\xf7\xee\x83\xb4\x80\x46\x76\x90\xaa\xfc\x06\x74\xdc\x99\xd8\xbe\x3d\xda\x60\x61\x24\x0e\x50\x12\xcb\xb3\x03\xc5\xaf\x20\x1f\x31\x73\x23\x34\x5a\x95\x1d\x1d\xe1\x07\xf3\x13\x15\x72\x03\xdb\xca\x4e\x44\x2c\xcb\xc3\xfa\x1d\xe2\x04\x0a\xc2\xc4\xdd\x37\x55\xc8\xfc\xf6\xbc\xe6\x3d\x6b\x7d\x5f\x5a\x1b\xf0\x33\xce\xa0\x22\x65\x16\xf4\x9e\x35\x2a\x39\xd3\x2b\xcd\x9b\xec\x76\x63\xb0\xad\x8c\x63\xef\x81\x38\x89\xd7\x9c\x7c\x74\x82\x7c\x4b\xa7\x44\x21\x56\x39\xf0\x90\x32\xfa\xed\xc2\x84\xf7\x9a\x09\xc4\x53\x62\x9d\x0e\x8f\xd1\x40\x36\xe0\x06\x06\x32\x96\xf2\x88\x33\x75\x8f\x01\x9c\x29\xf2\xa3\x82\x06\x86\x81\x4e\xd0\xcc\x52\x4e\x57\x39\x24\x42\x3d\xa4\x2c\x0e\xe2\xf0\xb5\x59\xdc\x45\x15\xa1\x44\xec\x2c\x53\xaf\x6c\x6a\x9a\x2e\x8a\x99\xe3\xf6\x87\x41\x2f\x66\x6d\xa9\x5e\x34\x28\xd4\xc0\xef\xc5\x24\xaf\x4a\xf7\xb5\x43\x45\xec\xf2\x94\xaf\x9f\xea\x88\x70\x7d\x94\xa5\xd5\x54\x61\xa8\x00\x69\x33\x83\x00\xe1\xea\x2d\x37\x76\x25\xb9\xe9\x14\x17\x25\x8c\x9b\xe6\x96\xff\x58\x85\x5c\xdf\xac\xf3\xa2\x61\x90\xad\xde\x5d\xd9\x01\xfb\xf5\x8c\x85\x13\xf6\x67\xd6\x66\xff\x13\xa7\xef\xbd\x4d\x76\x9f\xb1\x70\xe2\xaa\x6d\xf4\x32\xed\x8e\x29\x0b\xda\x61\xbc\xeb\x13\xd0\xac\xf3\x62\x66\x83\x30\xdb\x20\x1f\x77\xc8\x44\xdc\xc8\xdc\x8f\x38\x3b\x90\xf7\x96\x4f\xae\x59\x73\xf4\x52\x67\xf9\xe4\x5a\xe9\xfc\x8b\x27\x7d\x8c\xf3\xd5\x1b\x51\xdc\xc8\xc8\x5f\x3a\x64\x5f\x43\x9c\x68\x9e\xba\x7f\xb8\x13\x51\xe0\x24\x16\xb6\xc6\xf2\x23\x8e\x7c\x5a\x92\xb7\xe4\xc3\x32\x93\xbd\xdd\xd2\xf6\xaf\x2a\x9c\x52\x70\xbd\xcb\x58\x53\x05\xeb\x20\x66\x70\xa6\xe6\x4a\xb5\x26\x7d\x00\xb5\x59\x17\x8d\x46\x52\x17\x4d\x1e\x20\x7b\xc0\x27\xd3\xcd\xc8\xd1\x6d\xc7\x7a\x4a\x94\xb4\x46\xfa\x54\x78\x64\x0e\x13\x39\x88\xa8\x57\xd5\xc3\x53\x37\x3a\x70\x7d\x70\x3b\x33\xc9\xe5\x93\xcf\x3a\x64\x22\xad\x05\xee\xa7\x9c\x11\x28\x17\xaa\xf5\xd5\x3b\x16\x87\xb0\x5f\xaf\x71\x56\xef\x58\xb4\xe7\x7a\x95\x05\x49\x46\xe1\x66\xa1\x8b\x1c\x06\x7e\x69\x22\xd8\x25\x21\x20\xa5\xb5\xc0\x60\x94\x7f\xc4\x21\x8f\x53\x31\x3c\x1a\x82\xe2\x0d\x8e\xf7\x90\xb3\x2c\xa1\x26\xd6\x8c\xb7\x66\x1e\x6d\x84\x54\x2c\x5d\x05\x35\x1e\x25\x71\x33\xf3\xe9\x09\x30\x85\xc9\x44\x49\x9c\xc5\x16\xf2\xa3\x74\x8c\x54\x39\xc2\xf0\x23\xd8\x5a\x71\xcf\x6a\xcf\xe2\x83\xdf\xe7\x90\xeb\x36\xb3\x4e\x8b\xab\xeb\x59\x48\x9b\xc3\x3d\x69\xb4\xfc\x26\x3f\x09\xd3\xbc\xcb\xa2\x3e\x7a\x77\xcf\xdd\x66\x95\xf6\xc2\x6c\xae\xc1\xab\xcb\x13\xd4\x3f\xea\x90\x6b\x50\xb8\x43\x4f\xf6\xf7\x39\xde\x6b\x9d\xf9\xe2\x41\xe1\xd4\xc0\xa2\x88\x82\x09\xd1\xb8\x68\xa4\x74\xa8\xa3\xc2\xaf\xdc\x7d\x82\x7d\xaa\x82\x47\xf2\x08\x9e\xea\xaf\x1d\xb2\x5f\x05\xf0\xb8\x7f\xec\x78\x6f\x00\x74\x16\x8d\xdb\xaa\x33\x43\x97\xb7\xc0\xc1\xc2\x5a\x29\x7d\x55\x64\x25\x57\x72\x0c\xaa\xce\xf7\x38\xb7\x93\x4b\x51\xcb\xfa\x1a\xcc\xe4\x59\x5d\x06\x7e\x50\x26\xc8\xe9\xc3\x0e\xd9\x5b\xe7\x9d\x56\x23\x73\x5f\x3d\xca\xa3\x4c\x63\x6e\xf2\x4e\xeb\xe4\x30\x91\xf9\x2e\x7c\x6b\x6f\x28\xf1\x8c\x0e\xba\x28\x46\x6b\x58\x7e\xcd\x21\x37\x74\x5a\x49\x9e\xc4\xa5\xfb\xfe\x83\xce\x0e\xf8\xdb\x95\x01\x5f\xda\xca\xb6\x41\x25\xec\x8e\x63\x89\xc2\xd7\xdb\x5c\x77\x71\x9f\x5e\xe2\xd9\xf8\x9c\x98\xe9\x50\x30\x51\xee\xa7\x77\x34\xd3\x50\x76\xc8\x4c\xff\x3f\x0e\xbe\xb6\x7b\x8c\xd5\x5f\xd6\xd1\xdd\x11\x39\x6d\xf7\xb2\x17\x44\x55\x6c\xa5\xda\x31\x49\xea\xc3\x0e\x99\xa8\x67\xa1\xfb\xdd\x3b\xb9\x28\x16\xd6\x96\x86\x0c\x6b\x65\x61\x6d\xc9\x1c\x92\xba\x9a\x14\xb7\xd5\x62\x71\x10\x69\xae\x42\xc3\x9b\x1a\x51\x5c\x87\xee\x30\xa2\x82\xa6\xc0\x07\x71\x4f\x98\x89\xae\x7d\xca\x21\x4f\xd9\xb6\x6b\x4b\x6b\xc3\x3b\xf7\x2a\x07\xde\x96\x78\x20\x7c\xf6\x48\x33\x87\xe4\x47\x95\x7d\xe1\x64\x18\x71\xf7\x2d\x3b\x51\x78\xcd\xab\xe2\x43\xc6\x77\x8f\x2e\x30\xd0\xd2\x00\x2f\x64\x1c\xd5\xa5\x19\x1b\x1e\xaa\x90\x03\x1a\x83\xd0\xfd\x87\x9d\xf4\x75\x1b\xe4\x51\xef\xfd\x4e\x81\xa6\x98\x0e\x06\x20\x1d\xa1\x9c\x63\x45\x97\x77\xcb\x91\x5f\x02\xe6\x22\xf9\x6f\xd7\x92\xff\xb0\x5d\xfa\x72\x60\x01\xdc\x77\x5c\xeb\x7d\xa5\x52\x42\x49\xd2\x83\x44\xb3\xa2\x78\x68\x83\x62\x4d\xeb\x94\xd0\x85\x08\xa7\xd0\x7a\xd6\x3a\xbc\x8e\x9e\x32\xe7\x24\x84\x0d\xd4\xe0\x97\x00\xac\xb2\xaa\x14\x33\xab\x7d\x18\x56\xe5\x80\x3d\xe5\xcb\xa1\x80\xab\x6c\x20\xa5\x22\x9e\x50\xc5\x37\x73\x1d\xa7\xee\xd3\x7b\xc4\x76\xd7\x90\x41\x83\xd1\xa0\xd0\x4f\x2f\xcc\xcc\x2e\x58\x51\xd8\x31\xdf\xd2\xc3\x2b\x6e\xdf\xa1\xc0\x53\x85\xaf\x67\x96\x85\xcd\x58\x42\x05\x6b\x0f\xc0\x7a\xc1\x7a\x29\x2b\xde\x87\xf7\x03\xc2\xa7\xb6\x85\xfe\xe2\xae\x1d\xc8\x1f\x15\x19\xd1\xc9\x1f\x29\x17\xf2\xdf\x19\xe1\x3c\x36\x62\x77\x82\xff\xe3\x5b\x1d\xd3\x44\xaa\x9c\xc6\x41\x05\x3c\x08\xab\xed\xaa\x8f\x4e\x0c\xa8\xca\xe2\xa0\x8a\x0e\xe7\x63\xef\x8e\x71\xdc\xc9\xd7\xcd\x83\xe2\xa2\x53\xdf\xde\xed\xe1\xe9\xee\xd3\x74\x80\x80\x71\xd6\x4a\x6e\x0e\xe6\x19\x2a\x63\x60\x7e\xf8\x00\x31\x0f\x6c\x07\x34\x98\xda\xb9\x7c\x25\x09\xd6\x64\x66\x3f\xd4\x6d\x82\x8b\xd5\x4b\x0e\x78\x4f\x1d\xf8\xa6\x0f\xcc\xd7\x2e\xa2\x7c\x75\x06\x23\xfc\xfe\xc2\xbe\xf1\x76\xd9\x85\xc3\xcd\xa7\xcc\x5b\xe6\x67\x76\x09\xf8\xfa\x9f\xbe\x4e\x78\xaf\xfa\x7a\x19\x53\xde\x5d\x52\xde\x2d\xe5\x56\x17\x7b\x9e\xe1\x55\xa7\xa3\x67\xe4\x54\xc9\x03\x69\xaa\x33\x9e\x4a\x9e\x3c\xc2\xe9\x73\x3b\x02\x71\xd1\x69\x6c\x4f\xb6\x16\xdc\xf9\x6a\x01\xcd\xdb\x4f\x47\x06\x05\x31\x69\x87\x2e\xec\x01\x21\x1f\x3b\x40\xee\xb9\xdc\xb4\x2d\xfe\x42\x37\xcb\x93\xf6\xaa\x9c\xb9\x45\x3d\x56\x0c\x0e\x73\xff\x70\xbf\xb7\x3a\xba\x48\x09\xc0\xc4\xe2\x59\x86\x7d\x69\xe3\x26\xee\x23\xff\x73\x82\x3c\x06\x6c\x4a\x81\xdc\xd7\x99\xfb\x89\x09\xef\x7d\x13\xf6\x33\x95\xa2\x3c\x8a\xd4\xa4\x00\xcf\x6e\x37\x22\xb5\x84\xe0\x65\xcf\x37\x0d\x35\x43\xe0\xd3\xf5\x94\xd5\x37\x8a\xf0\x05\x5d\x89\xcc\xf6\xcb\x68\x3b\x6c\xa6\x0a\x78\x2e\x6f\xa1\x49\x17\xba\x50\x94\x0d\x63\xca\xf3\xba\xca\xf5\xad\x22\x92\x65\x3c\x32\xcd\x12\xab\x16\x23\x20\x5d\xf0\xfb\x62\xf8\x59\xcb\x2a\x01\x1a\x4b\x44\x68\x50\x3e\xf1\x87\x20\xef\x20\x60\xfd\x24\x34\x89\x02\x2b\x4c\x38\xe2\x0d\x80\x63\x91\xa2\xbc\x0e\x8d\x07\xf3\x59\x3b\x91\x59\x1b\x53\x8e\x9b\xdb\xa0\x0a\x9a\xc0\x4b\xa0\x3b\x9f\xea\x69\x15\xa7\x56\x12\x72\xac\x43\x5a\xe0\xce\x81\x1f\x81\xfa\xfe\x1c\xdd\x6a\x85\x88\xe9\xd8\x43\x24\x67\x8c\x2e\x51\xf5\x8d\x50\x04\xfe\x9d\x43\xae\x63\xf5\x3a\xef\xe4\x1c\xf0\x13\x33\xf7\x8f\x1c\x12\x5c\x99\xbc\x43\x43\x37\x30\x34\xe4\xdd\x6f\xb5\x0b\x53\x98\xab\x9c\x0e\x52\xd6\xd2\x39\x0b\x23\x15\x62\x52\x60\xe2\xa6\x9b\x18\x35\x90\x6c\x8a\x6b\x42\xac\x79\x4f\x41\x30\x14\x61\x03\x79\x8b\xc5\x46\xad\xca\x01\x83\xfc\x70\x85\x90\x7a\x12\x07\x32\x77\xe9\xc3\x15\x6f\xb9\xf8\x59\x48\x7c\x78\x62\x24\x28\x62\x1e\xd6\xbb\x11\x4b\x29\x13\x55\xe4\x32\x44\x6d\xf8\x31\x2a\xa6\x3c\x22\xcf\x27\xad\xab\x3c\xa5\x0b\xaa\xf7\x17\x9d\x83\x23\xd3\x9e\x1e\x70\xf7\x61\x56\x22\x72\xd1\xa1\x43\xc1\x5b\xf6\xba\x93\x6d\xd6\x21\xe4\x8b\x13\xe4\xa9\x3b\xba\x95\x01\x3f\x54\x6e\xdb\x93\x49\xba\xa8\x16\xc6\x7d\xd7\x84\xb7\x65\xbe\x2c\x14\xe3\x10\xfd\x54\x8a\x61\x01\x14\x40\xfd\x4b\xb2\x54\x30\xd1\x3a\xdc\x03\x83\x57\xda\x2c\xe0\xc8\x74\x75\x31\xe7\xe6\x06\xe7\x1d\x05\x74\x8b\x70\xd3\xfe\x05\xe7\xda\xa6\xd1\xf2\x05\x67\x9f\xac\xa4\x1c\xd0\xf0\x46\x87\xa8\x57\xee\xab\x1d\xef\x3f\xaa\xe3\x6e\xc7\x04\xa8\xa7\x0a\xda\x23\x49\xdb\x10\x48\xa7\xba\x5b\xb8\x9d\x88\xfd\xa9\xb2\xb4\x22\x97\x26\xa3\x0a\x52\x48\x37\x06\x77\x5b\x27\x0a\x73\xcd\x1d\x9a\x13\x64\x59\x45\x42\x62\x0d\xc1\x7d\xb6\x77\xca\xfc\x5d\xea\xe1\xfc\xca\x92\x8c\x94\x33\x02\x64\xac\xfe\x96\xe6\xdb\x6c\xea\xd7\x26\xcd\xd0\x3e\x5f\xfa\x95\xde\x8f\xa0\x54\x9b\xb3\xfe\x1a\x8f\x1a\x6b\x5d\x98\x34\xb4\x73\xac\xf2\xcd\x90\x6f\x81\x63\xf1\xeb\x27\xbd\x77\x39\x23\x0a\xe0\xbd\x3e\xc0\xc0\x80\xe6\x8a\x22\x9e\x99\x9e\x38\xcf\xea\xb9\x0c\xde\x49\x1a\x54\x6d\xf4\x79\xb3\x37\xf3\x2a\x47\x2d\x9a\x20\x96\x93\x78\xbb\x62\xda\xf0\x5f\x0a\x66\xf9\x5c\x85\xbc\xc7\x21\xae\x62\x4e\x8a\x2f\xdc\x37\x8c\xd2\xa1\xf6\xcd\xcd\x6a\x5f\x05\xde\xda\x76\x7d\x2a\x82\x96\x4d\xa0\x1b\x00\xfd\x2d\x04\x05\x7b\x7e\x44\x67\xbf\x21\x36\x86\x5b\xf4\xf7\x7b\x46\x19\xcb\xfa\xfa\xbb\x3c\xa8\x0e\xef\xf4\xc0\xc7\x23\x3b\x1a\x27\x71\x75\x58\x67\xff\x6a\x82\xdc\x3e\x3c\xa4\x41\x22\x3d\x0f\x73\x6e\x97\x3c\xce\x7b\x26\xac\xf5\x7a\xcb\x04\x79\x93\x43\xae\x31\xaa\x72\x5f\xe1\xb8\x93\xb5\x5e\xce\xbd\x33\x4b\x0d\xd5\x34\xdd\x62\x19\x65\x9d\x4e\x2a\x2e\x4c\xc4\x3d\x29\xa3\xe0\x03\xcc\x3d\x86\x04\x67\x59\x97\x07\xa6\x0b\x3e\xe4\xb4\xf1\x2d\x31\x77\x47\x30\x57\xff\xec\x58\x97\xca\x5f\x39\x90\xa6\x4d\x5d\x2a\x18\xc8\xa7\xf5\xaf\xb2\xab\xd3\x12\xfe\x48\xf5\x97\x45\x18\xa5\x1f\x87\x2c\xf2\x77\x9c\xef\xf5\x12\x27\xf7\x2a\x5d\x16\xef\xdd\x4f\x2e\xd5\xbc\xe3\xfe\xc3\x3e\xef\x4b\x76\x62\x2d\xdb\xb4\xa3\x37\x57\x18\xd3\x33\x1d\x1e\x67\x39\xab\x6f\xf8\x74\x9e\x2e\x58\xc5\x30\x87\x34\x70\x3e\x12\xe6\x47\x23\xef\x81\x16\xbc\xc0\xd9\x04\xe6\xd0\xfc\x8a\x45\x19\xf8\x83\x86\x06\xda\x7a\xca\x9b\x12\x62\xd9\xf0\x6e\xf5\xed\x36\xb3\xd1\x79\xbb\x04\x65\x1a\x98\xb8\x6b\x3f\x7e\xbe\xb4\x68\xed\xec\x2f\xef\x21\x2f\xa9\x90\xbd\x0d\x0c\x92\xfc\xaa\xe3\xfd\xb9\x63\x78\x95\x42\x58\xae\x42\x2b\x2a\xb2\x9f\x31\xd3\x5d\x15\xca\xf4\x79\x36\x81\xfa\x5f\x46\xf3\xc6\x4d\x05\x58\x21\xc8\x2c\x28\xf3\xe7\xa8\xc7\xcf\xe7\xc7\xbd\x69\xea\x9d\x6f\x64\xe2\x9f\x38\x6f\x64\x1e\xa6\x42\x08\xeb\xa1\x20\xc5\xa0\x88\x48\xb5\xdf\x2c\x7e\x40\x43\x0b\xe3\x7f\x77\x46\x35\xf3\x1a\xfa\xb8\x99\x6a\xea\x03\x8e\xf7\xc3\xce\x19\x99\xa6\x63\xae\x3f\x39\x14\x3d\x24\x8a\xce\x6c\xa5\x61\xce\xc1\xcf\x6b\x44\x52\x2a\xfd\x32\xe3\x78\xf1\x6a\x28\x45\xc0\x9d\x1e\x2c\x02\x5f\xc2\x10\x0c\xb4\xa3\x37\x3b\xe4\x40\xc6\xeb\x29\xcf\x57\x79\xc3\x7d\xf5\x4e\x9c\x90\xd6\x54\x71\x19\x74\x72\x4f\x31\x6a\x09\x24\x0b\xfb\x18\x6b\x55\xaa\x23\xb9\xab\x31\xa7\xa5\x86\x4e\x30\x92\x33\xc4\x32\x21\xb9\x38\x39\x6b\x70\x72\xc8\xcb\x1c\xa2\x77\xa0\x7b\xbf\xd7\x56\xfe\xd1\x41\x61\xef\xc0\x50\x4c\xcb\x33\x2e\x8c\xe5\xb9\xbc\x72\x0b\xfd\x6b\x37\x8c\x84\x8c\x30\x1d\x45\xdc\x77\xdc\xe0\xfd\xb1\x63\xb9\xaa\xd8\x89\x6d\x8c\xd1\xe3\xbd\xa4\xad\x46\xca\xae\x2a\x1e\xa3\x6f\x4b\x9f\xeb\xa0\x06\x48\x1d\xec\x6b\xe8\x13\x62\xb6\xcc\x07\x61\x42\x3d\x59\xcb\x18\x1a\xa3\x43\xa1\xa4\x42\x47\xac\xc4\x0d\x42\x46\x45\x9f\x5a\x5a\x58\x4c\x00\x63\xdc\xbf\xe0\x5c\x53\xb4\x9c\xda\x36\x9a\xeb\xc9\xab\x26\xc8\xf5\x32\x1b\xea\x3a\xe6\xe3\x0b\x79\xe6\xfe\x5d\xc5\x7b\x6f\x65\x95\x8b\x59\xad\xa3\x62\x10\x3c\x9b\x72\x5d\x82\x6e\x19\x6e\x2e\xdb\x8e\x16\x13\x3e\xda\x0e\x91\xda\xa1\x5e\x48\x3d\x5b\xb1\x41\x65\x54\x5e\x40\x3b\x74\x2c\x83\xdc\x27\x18\x2f\x2f\x7b\xda\x53\x50\x21\xeb\x3c\x6d\x2b\x85\x1d\x3a\x0e\xc9\xe8\xed\x38\x29\x6a\x4b\xe5\x70\x64\x7c\xb7\x95\xb4\x67\x87\xb9\x0d\xe4\x2d\x53\x84\x55\x48\x4b\xf9\x25\x20\x5f\xaa\xb3\x39\x68\x08\x63\x35\xf0\x2e\xd4\xc0\x7f\x51\x76\x61\xff\x5d\xc7\xfb\x19\x67\x71\xa7\xbe\xbe\x5a\x79\x5a\x3a\x64\x29\xd7\xfe\xc5\x0a\xe3\x38\x93\x8c\xc0\x99\xcb\x70\x87\x97\x27\x79\xe5\xee\x6c\x27\x9e\xf1\x23\x74\x2c\x31\xb9\x01\x8e\x2d\x76\xff\xc4\xf9\x0e\x03\x79\xde\xbd\xdb\xbb\x73\x7e\xc0\x73\x9a\xb5\x92\x2d\x38\xb5\xa0\x7b\x1a\x40\x4d\x20\x57\x95\x3c\xa2\x5c\x7c\x66\x5f\x3f\xff\x2a\x6d\xb9\xaf\x73\x08\x29\xc8\xbc\xfb\x62\xc7\xe3\x2b\x05\xd5\x2f\xd0\x57\x4a\x57\x01\x3c\x2a\x48\xaa\xf2\xc4\x42\x7d\x3a\xe2\x2c\x6d\x8e\xda\x55\xfe\x7b\x4a\xab\x69\xba\x94\x2d\x13\x93\x5c\xbb\xb7\x7b\x47\x57\x8c\xa6\x6c\xe5\xab\x42\x56\x29\x75\xc8\x92\xf6\xdf\xe8\x90\xeb\x52\xcb\x4b\xff\x21\xc7\x3b\x7f\x15\xce\x05\x18\x1e\x8c\x76\xec\xbc\x9b\xe8\x88\x6f\xf5\xec\xab\x0e\xb9\x1e\xe7\xe9\x0e\x0c\xff\x84\xc0\xab\x3f\x72\xbc\xdf\x94\x28\x8d\xc6\xe3\x12\xf8\xc5\xc0\x90\x57\xd3\x6f\xc2\x1c\x13\xf8\xd6\x60\xc0\x2b\xfa\x4e\x00\x3a\xf9\x34\xb5\x1a\x59\x52\x38\xed\x32\xc4\xa7\x3f\xb1\xdb\xee\xef\x88\x62\xe8\x63\x2b\xcf\xee\xac\x3c\x17\x1d\xbe\xbd\xb1\xe5\x0e\xf7\xe9\xdb\x81\xc8\x99\x4c\xd8\x40\x00\xb9\x4f\xee\x27\x37\x9a\x4a\x8f\x4e\x27\x43\xdd\x8c\x90\x64\xd8\x1a\x57\x3a\x85\x77\xec\xf7\x6e\x2f\x3f\xec\xf3\x3a\x42\x28\x19\x05\xdb\x0a\x1a\xc8\xe2\x1b\x21\xc5\xa5\xf8\xcb\x36\x0f\xff\xf2\x3e\xf2\x9f\x88\x9b\xd4\x60\xc3\x05\xcf\xe0\xb1\x42\x5b\x0a\x15\xd6\xd7\xfa\x99\xbe\x97\x2a\x27\x06\xb6\xdc\x2c\x9e\x4b\x6a\x01\xb0\xe4\x29\xaf\x4b\x68\x1b\xf9\xbd\xd9\x1d\x0b\xa2\xeb\x3b\x05\x0d\x61\x41\x4f\xbe\xcf\xdc\x67\xa8\x84\xe7\x47\x85\xe8\x1b\xeb\x9c\xe7\x50\x8a\xaa\x71\x14\xe8\x4c\xf2\x09\x00\x21\x59\x35\xff\x36\x88\x66\xb2\xd6\x4f\xe9\x3c\xea\x1f\x74\x54\x53\xca\x49\xa6\xdc\x63\xec\xb0\xd9\x32\x96\xbf\x64\xa7\xe1\xad\x24\xdd\x88\x12\x16\x64\x33\x85\x3e\x27\x9b\x91\xd5\x89\x39\x2b\x1e\xcf\xdc\xb8\xd5\x62\x79\x35\xcc\xaa\xac\x3a\xb0\x80\x35\xb4\x87\x1c\x72\xbd\xc6\x53\xd7\x33\xd7\x51\x43\xbc\xd7\x9e\xb9\x02\x79\x5d\xcf\xde\x21\x9c\x4d\x90\x3e\x54\x72\xca\x76\x18\x0b\xa1\xb3\x27\xf1\xd5\xa6\x76\x30\xc5\x5f\xb5\x55\x48\x7f\xe6\x78\xcb\xab\xf6\xce\x94\x87\xbf\xe8\x02\x6e\x88\x22\x63\x21\x33\x6b\x3f\x98\x59\x5b\xd9\xe6\x7e\x6f\x25\x37\x8f\x08\x2b\xe9\x3f\x3f\x96\xda\xe8\x9b\xad\x23\xdd\x61\x79\xbd\x55\x6d\xf3\xb4\xc9\xab\x1b\xbc\xe7\xee\x73\xf7\x48\xb5\xd1\x41\xf2\x4d\x03\x4a\x66\x79\xca\x72\xde\xec\xb9\xfb\xdd\xbd\xf0\x15\x21\xaf\x76\xc8\x0d\x8d\x6e\x14\xf5\x00\x59\x90\x07\x7a\x15\x32\xb5\x0a\xcf\xb5\x57\xa1\x08\x92\x86\x74\x8e\xa0\x62\x91\x90\x88\x8a\xdd\x96\xcf\xd4\xb5\x9b\x04\x34\xe7\xed\x4e\x64\x98\x41\xd5\x02\x96\x17\xe2\xa7\x27\xc9\x6c\x49\x83\x6a\xe4\x68\x28\xe1\x1a\x6a\x3d\xf8\x43\x93\xde\x89\xd2\xb3\xa1\xaa\x6f\x99\x3c\xc0\xaa\x58\x2b\xc2\x2d\xaa\xf2\xe3\x13\xe4\x2b\x15\x72\x40\xc3\x0d\xba\x7f\x5a\xf1\x7e\xa5\x32\xaf\xd1\x07\x2d\xa3\x39\xa8\x34\x35\xbe\x92\x91\xa8\x45\x4b\x1d\x78\x1b\x52\xb9\xab\xcc\x84\x20\x12\x51\xb0\x80\x62\x12\x47\x54\xb5\x53\x45\xc8\xf7\xbe\x6e\x03\xba\x65\x88\x86\x5f\xd4\x1a\xc8\x06\xb1\xe4\x16\x33\x22\xaf\xad\xe3\x21\x55\xfc\x36\x92\xa2\x65\xb7\xa4\x4b\x0d\x21\x16\x16\x6f\x59\x2a\xd9\x85\x40\xe9\x75\x35\x8e\xe3\x28\x80\x46\xd5\x8c\x89\x4e\x6e\x20\x35\x0e\x65\xdc\x6f\x21\x7b\x60\x10\xae\xef\x7d\xfb\xba\xca\x09\x21\x2a\x4a\x3a\xec\x05\x5d\x4e\x6b\x9c\xa5\x90\xcd\x6f\x83\xdb\x66\x9b\x5f\x9a\x24\x47\x2f\xdd\x2f\xd9\x7d\xed\xe4\x55\x73\x4d\xbe\xe0\x10\xd4\x1d\x2d\xb3\x36\xbf\xe0\x1c\x80\x60\x04\xf1\xb7\xb5\xd3\xbe\x7b\x42\x1c\xc3\xc7\x16\x25\x31\x0b\xff\x79\x6f\x23\xb7\xb2\xed\x6b\x20\x52\xd0\x46\xd9\xb9\xf7\xb1\xa3\xf2\xb6\xa6\x32\x0f\x05\x5d\x56\xf8\x5d\xcf\xe4\x3d\x33\x35\x8b\x56\xb9\x4a\x5d\xeb\x8a\x9d\x78\xfe\x89\xa4\xe8\xa9\xfb\xef\x3d\xb2\x26\x7e\x50\xdd\x6f\x59\xea\xbc\xa1\x32\x8c\xbc\xe7\x5e\x5d\x35\xa1\x25\x6a\x3d\x97\x18\xd3\xea\xae\x78\x0b\xa6\x1e\xe8\x32\xa7\xc7\x1c\xd9\x3b\xf7\x90\x6f\x19\x02\x4b\x22\xb9\x99\x17\xed\xb9\xe0\x4c\x76\x92\x34\xbf\xe0\xec\xef\xa4\x49\x9e\xd4\x93\xc8\x5a\xd3\x3f\x98\x24\xbf\x53\x21\x7b\x78\x9a\x26\xa9\xfb\xe9\x8a\xf7\xf1\xca\x09\xf1\xa7\xb4\x53\x0a\x1e\x31\x0d\x94\x54\x52\x8b\x78\xbb\x20\x07\x2a\x4e\x0f\x94\xdc\x06\xf6\xa0\x5c\x7d\xa8\x91\x66\x2d\x16\x45\x88\x37\xdc\x33\x52\x0b\xe9\x24\x32\x80\x60\x3b\x47\xab\xb4\xd6\x0d\xa3\xbc\x1a\xc6\xf2\x3b\x89\x09\x89\x9f\x9b\x59\x9a\x35\x09\x68\x88\xbd\x8e\x2e\x14\x49\xc6\x65\xc9\x6e\xc6\x09\x2d\x34\x18\xb8\x27\x49\x55\x62\xe0\x49\xda\x90\x16\x99\x35\xad\xc6\x40\xdf\x0f\x97\x85\xe1\x64\x50\xea\x3a\xa1\x6a\x98\x8d\x24\xf1\xa5\x66\xd3\xaf\x27\xed\x99\x42\x6d\x62\x5b\x68\x61\xf6\x5d\xa6\x6e\xa9\x53\x62\x71\xd4\xd6\x86\xa9\x2b\xae\xac\xbe\x59\x05\x18\x4a\x48\x8e\x27\x1d\x76\x32\xb9\x22\x3c\x80\xdd\x69\xdd\x49\x0f\x3b\x44\x2f\xb1\xfb\x4a\xc7\x7b\x60\x45\xfe\xd0\xad\xa9\xdf\x97\xd3\x14\xac\x70\xa1\xd9\x93\x53\xc6\x52\x3e\x47\xbd\xf5\x85\x15\x6f\x9a\x7a\x67\x17\xe1\x9f\xb5\x85\xf5\x15\xcb\x74\xfc\xf3\xfb\xc9\x71\x63\x97\x36\xa2\x64\x4b\xf2\x59\xfa\xa6\x34\x4c\x8b\x28\x72\x02\x98\xf3\xab\xf6\x7b\x1f\xae\x0c\x7c\x85\x97\x5a\x27\xe5\xa6\xef\xbd\x4c\x1e\x6c\x5b\x1d\xb5\xc2\xab\x9c\x1d\x37\x04\xbf\x9d\x9a\xc6\x90\x95\x98\x7e\xd6\xc7\x67\x57\x4f\xf9\x74\x9e\x0e\xee\x82\x6a\x8e\x69\xbb\x62\xd8\x28\xd2\xef\x84\x0d\xcc\x64\x78\x88\x4d\xd9\x77\x1a\x66\xff\x05\xc4\x5e\x9e\xd6\x32\x5d\x8d\x61\xf5\x83\x5a\x0e\xd5\x86\x7e\x68\xd8\x78\xcf\xae\x9e\x1a\x58\x85\x7f\xc1\xd9\x03\xf5\x5f\x70\x1e\x5b\x2a\x6e\x1d\xff\x77\xef\x21\xbf\xe1\x10\x2c\xea\xfe\xb2\xe3\xbd\xdc\x39\x07\x7f\x9f\xb3\xd9\x06\xcd\x36\x61\x9f\x95\x2c\x29\xb5\x87\xa0\xca\xf5\xa9\x77\xd8\x2b\x26\x05\x6f\xfc\x1a\xa2\x53\x87\x12\x43\x04\xee\x2b\x2b\x95\x77\xae\xa0\x60\x79\x9c\xa7\x3d\x5f\xe5\x47\x1a\xa5\x30\xdb\xc6\xd6\x98\xf1\x9c\x90\x5f\x9f\x20\xe5\x61\xbb\x1f\x9d\xf0\xfe\xa9\x72\xae\xf4\x54\x8e\x13\x72\x9c\x35\x68\x37\x8d\x64\xca\x50\xed\x63\x84\x99\xf0\xa5\xf0\x0d\xc4\x41\xda\xb1\xc1\xff\x6b\xd0\x34\x9c\x2c\xe0\x38\xe7\x08\xa5\x55\xea\xcd\xb4\x38\x8b\xf2\xd6\xfd\x90\x2f\x33\xe2\x4d\x16\x15\xcf\x0f\xc3\xc3\x30\x2a\x3d\x2e\x8a\x42\x2e\xd3\x62\x6b\xe7\x62\x19\x8a\x72\x33\x87\x3d\x34\x51\x0e\x2d\x21\x1a\x9e\x29\xad\x4c\x87\xa7\x55\x41\xd8\x92\x18\x72\xca\x41\x21\x99\x4a\xc5\x27\xe5\x65\xb4\x4e\x44\x37\x8d\x32\x5f\x6c\xee\x47\x7c\x49\xff\xe6\x06\xf2\x6d\x66\x58\x46\x12\x60\xb0\x75\x37\xce\xc3\xb6\x34\x04\xfd\xea\x0d\xde\xa7\x26\xcc\x27\x5a\xff\x62\xd8\x7c\xb4\xb1\x97\xa6\x58\xd2\xc6\x6e\x41\xa5\x79\x57\x21\xc5\x70\x6a\xd5\x17\x16\x06\x34\x9d\xa5\xd3\xc8\xa4\x6f\xd7\x6b\x14\x4e\xbb\x31\xc5\x9b\x50\x16\xca\x10\x0a\x06\xe2\xac\xcc\x16\x24\x1b\xab\x21\x31\xac\x8c\xad\xb0\x17\x93\x54\xe7\x0e\x35\x34\x85\xa8\xe0\x31\x02\x9f\xe4\x50\x56\x92\xa0\x88\x79\x52\xb9\xe3\x06\xa4\xf5\x15\x2b\x1c\x6d\x6a\x43\x84\xd1\xa3\x65\x34\x79\xcb\x8a\x95\x01\x5d\x61\xc4\xea\x60\xb1\x22\x33\x93\x4c\x45\x3d\x2c\xf1\x52\xbf\xdc\x5e\x4c\xca\x8c\x9c\x3a\x0c\xbb\x9a\xb9\xe0\xec\xc3\x48\x47\xdb\xd8\xf5\xb2\xc7\x01\x9e\x72\x01\x8a\xe5\xbe\xbc\x42\x9e\x34\x3c\x82\x47\x6e\x95\x42\x93\xe7\xfd\x96\x63\xa8\xf5\x0a\xed\xb0\x01\xb3\x65\xe1\x79\x25\x14\x3c\x3b\xb9\x4e\x7a\x95\xe9\xf1\x17\x2a\x53\x6b\x9f\x88\x35\x94\xb5\xe1\x06\x50\x18\x60\xac\xc8\x23\x1b\xa2\x08\x63\x34\x1a\x66\x34\x0e\xa3\xe9\x01\xf5\x09\x2a\x95\x65\xdd\xb6\xb6\xb3\x5b\xa6\x7c\x3c\xa6\x80\x73\x36\xd6\x47\xee\xd2\xeb\xfc\xd7\x27\x89\xda\x74\xee\x2f\x4c\x7a\x1f\x9a\xbc\x13\x7f\x94\x9c\xe9\x0c\x14\x18\x75\xdc\x21\xe0\x3d\x89\x1b\x61\x53\xc1\xf2\x17\x69\x50\x57\x97\x8a\xfc\x59\x46\xa6\x24\xc0\x6f\x4b\x64\x38\x2f\x6e\x2c\xb5\x08\x68\x5f\x80\x63\x6b\xc3\x54\xcb\xcd\xa5\x58\x58\x39\xcb\x60\xd5\xfd\x0e\x68\xc8\xea\x83\x4f\xa5\x4b\xa4\xde\x3e\x70\xad\x45\x91\x6c\x34\xc5\xea\x0c\x85\x51\x0c\xde\xd7\x3d\xa8\x11\x97\x49\x97\x54\x8c\xa3\xa0\x08\x08\xb9\x9c\x72\x2a\xc8\xfb\x26\x8b\x38\x0a\x9b\xc5\xb7\xd6\x4d\x38\x4d\x99\xaa\x46\xa5\xfb\xf5\xd2\x6e\x5c\xf7\x64\xda\x6e\x1c\x8e\xa1\x1e\x10\x2f\xe9\x99\x85\x25\x3d\xbb\x87\x10\x6d\x0c\x73\x98\x52\xf4\x9c\x29\x08\xc7\x54\x5f\xf2\x0c\x41\x71\x95\x6b\x57\x1f\xc5\x15\xb3\xaa\xd6\x55\xdd\x5b\x51\xb2\xc5\x53\xcc\xdb\x2a\x66\x30\x49\xdb\x6a\x6e\x17\x97\xd7\x28\xa8\x9d\xe8\xa1\xd5\x93\x0b\x74\x76\xf6\xe8\xb1\x29\x95\x37\x0d\x12\xa2\xe9\xd4\xfa\x83\xd3\xdf\x8f\x8d\xc1\x97\x6f\x0c\xfe\xa0\x69\xad\xfc\x91\x5d\x5b\x2b\x9b\x8f\x58\x70\x69\x85\xec\x4f\x36\x79\xda\xe2\x2c\x70\xff\x7b\x85\x4c\x6d\x7b\x3d\x9d\x91\xa5\xbd\x77\x57\xd4\x9f\x65\xbb\x83\xde\x0d\xaa\xe6\x3e\x88\x78\x75\x2d\x31\x8d\xbe\xc3\x24\x30\xb9\x79\x9d\xf8\x83\x2f\x6b\xb2\x33\x68\x0e\x7d\x5f\x55\xf9\x26\x7a\x61\xcc\x74\x92\xa0\xaa\xfa\x34\x53\xce\xf9\x16\x63\x86\xd2\x2c\x67\x29\x26\xbb\x9d\xf5\x67\x6f\x55\x27\x66\xa7\xc6\xb8\x95\x24\xd0\xb3\xa2\xec\x70\x17\x9d\xfb\xb6\xb7\x1d\xcd\xb9\xb7\x16\xf1\x85\x62\xaa\x4b\x86\x23\x73\x5e\xca\x91\x85\x1f\x38\x6e\x23\xff\x07\x32\x61\x4e\x8a\x09\xf7\xb4\xc3\xec\xe9\x6e\x0e\x0e\x74\xf7\xf0\x5a\x2b\x49\x36\xdc\x7f\x3a\xe6\x3d\xb7\xf4\xcc\x70\x49\x92\x71\xf4\x50\x13\xdd\x92\xaf\x95\x18\x6a\xe3\xa7\xe8\x44\x1b\x90\x31\xd8\x48\xf6\x70\xc1\x99\x8c\x41\x55\x77\x2d\x9e\xe9\x05\xa0\xf9\x17\x9c\x6b\xb2\x30\xe0\x27\x1a\x0d\x04\x7c\xff\xf7\xba\x1d\xd4\x38\xab\xc0\x11\x8b\x9b\xfa\xf4\x51\xf2\x66\x87\x58\xf5\xb8\xaf\x70\xc8\x89\xe1\xaa\xff\x61\xd3\x20\x87\xba\x60\xd4\xe4\xdd\x6e\xfe\xd2\xec\x87\x4c\x7b\x20\x8f\x1b\x88\xf0\x5a\x39\x24\xaa\x28\xa4\x06\xf2\xf9\x03\xe4\x7a\xad\x5a\x54\x3e\x36\xee\x2f\x1f\xd8\x7d\x5a\x22\xef\xc5\x07\x96\xcb\x15\xd3\x80\xd7\xc3\x80\x1b\xfe\x15\xc5\x4d\xa2\x96\x0a\x72\xbb\x2a\x5a\x8c\xa8\x97\x90\x09\xa5\x70\xc8\x28\x54\xa1\x68\xd3\x61\xda\x27\xcf\x14\xd5\x55\xae\x02\x9d\xd0\x51\x96\x09\xf3\x8c\x47\x0d\xbc\x22\x74\x4d\xa8\xcf\xd6\x72\x38\x02\x30\x89\x4b\x0a\x5b\x97\xdc\x99\x76\xbc\x40\xd3\x46\x5f\xcd\x99\x8e\x59\x52\x22\x44\x56\x4f\x3a\x3c\xd0\xdb\x0e\x24\xb9\x18\xc2\xaf\xb2\x8d\xb0\x93\x99\x03\xf7\x09\xb1\x6e\xf4\x61\x53\x63\xe4\x59\x07\xd5\x5c\x31\x1b\x12\x2b\xb3\x4c\xb4\x04\x27\x00\xc9\x48\x3c\x88\x98\x38\xe2\x09\x19\xc7\x9b\xf5\x9e\x4c\x69\x2f\xe9\x4a\xf7\x1a\x9e\x5b\x93\x46\xc1\x26\x09\xe1\x5f\x73\xd4\xeb\xdb\x20\x2a\xc9\x34\x4c\xd8\x89\xf3\x82\x8a\xc2\xce\xf7\xe6\xe8\xbd\x90\x54\x1a\x13\x4e\x53\xea\x6d\xf0\x9e\x37\x67\x74\x61\x5a\xbd\xc0\xb3\x07\x55\x79\xcb\x49\xbe\x14\x17\xaf\x90\x0f\xd3\x75\xc1\xb3\x23\xfa\x35\x15\x7d\x97\x7f\xdf\x07\xff\x3e\x48\xc4\x5f\x0f\x12\xb2\xd4\xa0\x61\x9c\xe5\x82\x88\xc1\xc8\x18\xaa\xe1\x81\x08\x5e\xfa\x5c\x96\xe7\x11\x42\x66\x78\xbc\x19\xa6\x49\x2c\xf8\x12\x9c\xce\x4e\x9a\x04\x38\xa3\x59\x0e\x19\x40\xbc\x27\x3f\x72\xd3\x6a\xf6\x66\xe0\xcc\x6e\x37\xad\xd0\x7b\x63\x66\xd5\x18\x06\xcf\xef\xda\x0e\x25\x4e\x71\x57\x09\x82\x38\x23\xc3\xcd\xab\x62\xfe\xaa\x72\xaa\x67\xf0\xf0\xcc\x20\x36\xa5\xb8\x24\x95\x07\xab\x98\x4f\x78\x59\x24\x59\xf3\x09\x59\xb4\xcd\x4a\xe8\xd8\x68\x51\x1a\x95\x40\x5a\x9d\x7e\x60\x92\x41\x4f\xe3\x93\x3f\xdb\x43\x1e\x83\x0d\x6b\xe2\xf6\x3f\xf6\x5c\x01\xe2\xf6\xba\x3d\x67\xac\x5a\x77\x42\xd9\x34\x31\x0b\x2d\xb2\xd1\x62\x86\xe1\x54\x51\x16\xbb\xcf\x90\x6d\x56\xac\x1f\xec\x46\xd6\x64\x62\x9b\xa3\x06\x14\x2a\x8a\x02\xec\x0d\xdc\x6a\x31\xdf\x92\xbf\x30\xe2\x53\xb9\xfa\x64\xbc\xb0\x4a\xc9\x2e\x69\xce\xda\x80\x4f\xc9\xa5\xb6\x4b\xf4\x92\x87\x30\x96\x91\xd4\x75\x9e\xc6\xdd\x28\xd2\xe9\x72\x8a\xbe\x28\x6d\x0f\xcb\x30\xc7\x0d\x78\x41\x41\x5e\x9c\xa2\x87\xa5\x32\x01\x38\x3f\x4d\x89\x32\xc5\x1d\x80\x86\x02\xe4\x9f\x4d\x63\xf3\x21\x48\xb7\xc4\xe8\x22\xef\x44\x49\x4f\x9c\x81\xd5\x24\x8a\x6a\xac\xbe\x01\xdf\x0b\x9e\x66\x25\x4d\xce\xf7\xa4\xfb\xa1\xac\x6e\x4a\x91\xc9\x01\x43\xf6\xe9\x59\x99\x79\x57\x36\xad\xcf\xad\x52\x3a\x9b\xcb\x29\xd8\xab\x4e\x5e\x0d\xe3\x69\x9d\x9f\x89\xc7\xe0\xc9\x2d\x05\x06\x41\xe2\xd1\x14\xda\xc7\x8f\xd4\x0a\x13\x57\x61\x2a\xd7\x8e\x60\x97\xbb\xd7\x27\xc9\x1e\xb0\xf8\xb8\xbf\x3f\xe9\xbd\x7c\x72\x55\xfc\x69\x30\x46\x00\x96\x6e\xb0\x3c\x70\xab\xb2\xbc\xe0\x89\x66\xb2\x6e\x2d\x35\xc2\x85\x8b\xa1\xd6\x11\x3c\xad\x96\x74\x73\x94\xee\x06\xbc\x80\x15\x2b\x92\x73\x81\x0e\x53\xf5\xf2\x79\x2c\xee\x3d\x8f\x8a\x0e\xf9\xf4\xce\x64\x4b\x74\x7a\x5a\xac\x7d\x92\x06\x78\x54\x3a\x29\x17\x7c\x3e\x22\xda\x02\x63\x37\xaf\xe6\x4c\xb2\x3d\xc8\xb1\x29\xb6\xaf\xff\x2d\x88\x64\x9d\x6e\x31\xa7\xea\x0a\x06\xb1\x14\x63\x49\xa5\x26\x51\x8b\x62\x29\x87\x38\x49\x15\xd7\xab\x40\x7d\x54\x2a\xe8\xa8\x47\x83\x30\x63\xb5\x48\x6b\xe2\xc0\x23\x7b\x7a\x17\xbd\x04\xef\x75\xbe\x59\x88\xe9\x89\xc9\xad\x6a\x89\x51\x90\xc6\xa2\x11\xc5\xf8\x59\xca\x0f\xb3\x9d\x81\x05\x06\x45\xee\xdf\x49\x4e\x92\xc5\x4b\xe7\x3c\xc5\xc2\xdd\x13\xe6\x2d\x9d\x7b\x2d\x23\x7f\x3f\x41\x4c\x66\xd8\xfd\xd3\x09\xef\xb7\x26\xd6\x8a\x07\x38\xe3\xa6\x23\x6d\x98\xe9\x5d\x23\x28\x1e\xa4\xbe\xe2\x58\xd8\xa7\xf3\x10\x8d\xcc\x6c\x2d\xcc\x1c\x5d\x4e\x62\x3e\x0d\xff\x3d\x13\x2f\xa6\xbd\xd5\x6e\x4c\x0f\x6d\xa9\xb9\x54\x6e\x95\x9b\x21\x53\x7e\x68\x70\xec\x40\x61\xaf\x34\x1e\x6b\x49\x1b\x52\xc8\x9f\x8d\x37\xe2\x64\x2b\x9e\xf2\xa9\x5e\x0b\xb8\xd4\xcd\x6e\xd0\xd3\x67\xd7\xd6\x0b\x45\x12\x98\x9e\xc4\x9d\x16\x46\xa1\x04\x86\x82\x00\x9e\x69\x9a\x85\x71\x9d\x1b\x96\x29\x19\xf9\x8c\xba\x36\xa5\x4d\xc6\xec\xf3\x34\xcb\x79\x47\x91\xb9\x62\xa5\xeb\x2d\x16\xc6\x5a\x2a\xb1\x3a\x01\x3e\xf9\xa0\x04\x8e\x79\x81\x97\x1f\x07\x49\xcc\x91\x6f\x87\x1d\xa2\x39\x92\x00\xa7\x85\xa9\x90\xc1\x02\x80\xaa\x9b\x27\x55\xdd\x25\xa4\x5d\x3d\x49\xda\x99\x5e\x0a\x3d\x09\x6a\xdd\x9e\xfa\x54\x35\x57\x62\xda\xc4\xf4\x59\xca\x96\xef\xaf\x90\xc7\x08\x81\x2e\xe9\xe6\x2a\x97\xe6\x2b\x2b\xca\xfa\xfa\x15\x67\xdd\x7a\x55\xce\xeb\x85\x2f\x0b\x4f\x2c\xc5\xf9\xd2\xf9\x46\x2e\x79\x7b\x55\xa6\x03\xca\xfa\xe9\x12\x15\x8a\x22\x3d\xbc\xb0\x89\x42\xad\x74\x33\x9e\x5f\x59\x32\xde\x83\x9b\xb8\xbe\x6e\xc1\x26\xce\xc2\x48\x2c\x87\x44\xa7\x00\x22\xa6\xda\x92\x50\xaa\x52\x51\xa5\x12\xb8\xcc\xc2\xf2\x1c\x3b\x42\x33\x1c\x8c\x45\x9d\x67\x8b\xc7\xb6\x95\x78\x92\x0c\x93\x0a\xdd\x8b\x13\xde\xe7\x27\xe6\x07\xbf\x94\x29\x26\x81\x1e\xf2\x40\x1b\x06\x3b\x60\x18\x10\x4f\xce\x95\x3e\x3c\x57\xe0\x17\x88\xe1\x29\x31\x98\x43\x2e\x1b\x71\xa0\x56\x96\x94\xaf\x11\xcc\x48\x8e\x99\x06\xbb\x99\x4a\x91\x59\x0a\x50\x86\x16\x91\x3e\x86\x5a\x87\x9e\x49\x27\xa0\xc2\x57\x48\x37\xda\xef\x31\x00\x35\x58\x7a\xf3\xa2\x0f\xd3\xca\xc3\x5f\xab\x66\x61\x85\xf4\x46\x50\xda\xef\x25\x33\xeb\x51\x50\x2c\xbc\x45\xd8\x8a\x4d\x25\xe3\x71\x0c\xc0\x8a\x38\x28\xb0\x6f\x65\xe6\x07\x60\xf3\x75\x09\xdc\xd9\xf2\x7e\x15\x1d\x5c\x93\x1d\x14\x9b\x27\x2b\xb1\x47\x46\x57\xc1\xb9\x87\xd3\xac\x2b\x79\x92\x64\xd0\xae\x1a\xe1\xcd\xf4\x3e\x87\x5c\x27\x4b\x2b\x0c\x78\xc7\x7b\x8d\x73\xd2\x7c\x64\xc9\xef\x96\xc6\x1e\x1c\x29\x0c\xb5\x63\x41\x48\xb4\x02\x52\xdc\x2c\x0a\xb7\xb2\x5a\xcc\x4c\xa1\xd2\x5e\x82\x03\x23\xce\x8b\x68\xd4\x76\x3a\x87\x27\xd6\x31\xdf\x47\xae\x01\x52\x21\x3b\xfb\x9a\x7d\xde\xd7\xf6\x1a\x0f\x6c\x55\x83\x10\x8c\x80\xf1\xf0\x70\x17\x18\x96\x39\xc9\x4a\xc6\xf5\xa4\x0d\xca\x7c\x49\xbf\x7c\x3a\xdf\xdf\x43\x0f\xe2\xcf\x51\x98\x3a\xa1\xd5\xde\x9e\x4f\x48\x15\x43\xd3\xe7\x34\xf9\x52\x94\x57\xf1\x65\x61\x2e\xa4\x08\x08\x5e\x2f\x1c\x07\x8a\x3d\x9a\x02\xe7\x61\x89\xd7\xa1\xe0\x36\x15\xe3\x98\x15\xa0\xc0\x01\x7e\x21\x2e\x15\xd6\xe9\x64\x33\x9b\xb3\xd3\xea\x0f\xb8\x62\xa6\x25\x9e\xa3\xc2\x85\x28\x9e\xd7\xba\xb9\x9e\x06\xec\x97\x4a\x3d\x72\x8e\x75\x42\x40\x19\xc8\xe6\xee\xf5\x44\x65\xde\x7d\xa2\x52\x65\x46\x12\x4f\x37\x67\xc5\x33\xcd\x7d\xcd\xd1\x7b\x3d\xa3\x7b\xde\x7d\xe7\xa6\x8d\x51\xe7\x89\xd5\x25\x0a\xe3\x2a\x77\x48\x32\xfe\x92\xd5\x19\xc0\xfc\xe3\xbc\xea\x79\xee\x9f\xdc\xb0\xa1\xe6\x23\x33\xc3\xe2\x23\x3c\x9c\x61\x8c\xee\x45\xd3\x82\x07\x8d\x71\xc2\xa4\xf6\xa3\x80\x42\x48\xd2\x02\x3b\xe2\x2a\x4f\x3f\xa0\x57\x3c\xea\xa6\x1f\xa1\x29\x31\x33\xab\xf1\xa1\xcc\xa6\x39\x68\x4d\xcc\x73\x69\x1e\x03\xf3\x78\x7e\xc1\x21\xa0\xa0\x74\x7f\xcf\xf1\x7e\xdd\x59\x2f\x85\x3f\xf6\x89\x1b\x3e\xba\xb8\x15\x51\x1f\xe0\xea\x4b\x5f\xd0\x65\x11\x4c\x37\x46\x66\x4d\xd3\xb0\xcd\x9a\x5c\xd2\x32\x4b\xbe\x9f\x96\x61\x8c\x9e\x51\xc2\x53\x8e\x4f\x66\xd3\x96\x5c\x69\x55\x31\xa8\x74\x92\x36\x59\xac\x90\x11\x4c\x4f\x86\x62\xa4\xdf\xb3\x9f\xb8\x29\x0f\xe3\xcd\x04\x9d\x74\x25\x3d\xfa\xc7\x7d\xde\x97\xf6\xf5\x3f\x37\xa2\x5f\x06\x32\x9e\x06\x5e\x28\xb2\xdf\x90\x2b\xa6\x13\x21\x2f\x90\x51\x66\xa6\x98\x93\xb8\xa1\x06\xad\x45\x09\x1c\x3a\x3b\x88\x7c\x2d\x0b\xc6\x5e\xc2\xa8\x2c\x35\x96\x39\x0f\x78\x20\xa8\x17\x3c\x9f\xeb\xbf\x58\xe4\xd1\x54\x5d\x49\xd0\x02\x1e\xd3\x24\xc6\x90\xfb\xd1\x5d\x20\x44\xb5\x31\xa0\xea\xa2\x5a\xcb\xc9\x89\x05\xe8\x43\xce\x22\x8a\x36\xd5\x62\xbc\xa5\x6b\x45\xb7\x53\x52\x56\x20\x10\x90\x28\x08\x19\x9b\xc2\xac\x38\xb3\xb5\x1e\xc5\xe3\x5f\x54\x83\x02\x53\x46\x99\xe6\xef\x40\xee\x60\x91\xc5\xd3\x19\x3c\x39\x5a\xf0\xb5\xb5\x12\x45\x6c\x51\xd3\x61\xc1\x9e\x1d\x06\xc6\x2f\xe0\xed\x4e\x92\x83\x5f\x0c\xda\x2f\x84\xf8\x98\x80\xd7\x90\xd2\xe6\x01\xab\x2b\x64\xca\x30\xe9\x66\x51\x4f\xf7\x17\xa2\x0d\xf9\x1c\x3d\x8c\x5b\xb1\x88\x29\x28\xe6\xa5\xd8\x52\x99\xd2\x14\x34\xbb\x2c\x65\x71\x5e\x70\xe3\xbc\xc0\x49\xf1\xe9\x61\x70\x4c\x1b\x5c\x41\xca\x33\x70\xb5\x8d\x69\xa3\x9b\xc2\xdc\xe0\x6c\xa9\xf7\xf2\xf0\x63\xb7\xa7\xe9\x96\x25\x26\x0e\x6a\x59\x54\xbe\xa1\x54\x40\xa2\xed\x2d\x6b\xe6\x74\xc2\x32\x39\x6b\x5a\x30\x51\x8c\xa5\xb8\x91\xc3\x38\x6c\x87\xf7\xf3\x1d\x4d\x81\x68\x22\x4f\x74\x7c\xa6\xa1\x95\xc1\x25\x15\x1c\x77\xbb\x9b\xcb\xe1\x88\x6e\x1b\x5d\x56\x72\xf4\x34\xf4\x8b\x69\x1e\x50\x6e\x20\x5b\x23\x22\x15\xb7\x65\x02\x88\x67\xca\x22\x09\xef\xb9\x96\xdc\x36\x02\x5f\x05\x5d\x1e\x21\x21\xc5\x00\x40\x1c\xf7\x2f\xae\xf1\xbe\xe0\x0c\x7b\x2b\xbd\xb4\x34\xf1\x48\x52\xd4\xa8\x6b\xd7\x20\xbc\xd5\xc4\x6d\x25\xed\x03\x60\x6e\xc2\x24\xb4\x70\x62\xd1\x1a\xa8\x35\xbb\x3e\xbd\x93\x6d\xa2\xc5\xb0\xd0\x2d\x97\x8c\x02\xb4\xcd\x36\x20\xbe\x9b\xb6\xbb\xf5\x16\xe5\x2c\x0b\x51\x29\xd2\x14\x13\xd9\xff\x1d\x92\x5f\x89\x38\x8d\x77\x1c\x98\x2b\xe4\x8c\x66\x38\x08\xc4\xbb\x00\x04\x5e\xcb\x1e\xf5\xb7\xfb\xc7\x4e\x2c\x63\xd0\xda\xaf\x9f\xc7\xc1\x33\x0d\x87\x83\xdb\x77\xe9\x6f\x40\xfe\xb7\xc2\x98\xfe\x4b\x87\x9c\xdc\x31\x02\x93\xc4\xb8\x18\x8c\x96\xe5\xbd\x03\x21\xa7\xd1\x6d\xcd\x04\x5d\x42\x2d\xa7\xe9\x48\x8c\x97\xa1\x56\xcc\xfb\x14\x01\xee\x8a\x13\xab\x74\x0a\x5c\xb0\x5a\xda\x97\x48\xbf\xee\x25\x5d\xc4\x52\xb3\xbc\x93\x51\xbb\xef\x53\x21\x0d\x83\x06\x78\x5a\xba\x83\xca\xc8\x0d\x1e\xf8\x42\x9c\xdc\x8b\xae\xe4\xee\xdb\x1d\x72\xe7\x15\x18\x3a\x54\xe6\x9d\x5d\xd3\xfe\xe9\x8d\x10\xf8\x87\x30\x56\x68\x36\x52\x9d\x00\x16\x83\x01\x6c\x56\x31\x82\xb0\x90\xcc\x91\x80\x5e\x74\xb6\xb6\xf7\x24\x58\x77\x57\xb5\x27\x81\xdd\xed\x92\x4b\xc1\x30\xe2\x3d\x30\x2e\xf5\xc3\x07\x08\xb5\x62\x38\xc0\x4b\x5d\x6b\x36\x4f\x71\x96\x71\xf7\xf5\x07\xbc\x6f\x85\xbf\x0c\x87\x56\x48\xb9\x46\xa5\x49\xcb\x0e\x09\x7b\xf1\x98\x84\x8e\x49\xe8\xd8\x69\xeb\x92\x9d\xb6\x3e\xa9\xa8\xf5\xc7\x9d\x91\x59\xc6\x06\x1c\x51\xa0\xcc\xaf\x02\xca\x6c\xe5\x48\x17\x2b\x08\x05\x1e\x69\xe4\xff\x8b\xce\x73\xb7\x27\x69\x4f\x76\x6f\xd3\x24\xcd\x1a\x56\x99\xa2\x89\x11\x94\xbd\xa3\xbe\x74\x1d\x99\xda\x26\xae\xe7\x64\x94\x6c\xad\x01\x19\x70\x3f\x76\x9d\xf7\xbf\x9c\xe2\xb7\x45\x81\x0a\xba\xc3\x94\x5a\xa6\x41\x45\x7d\x19\xca\x43\x2a\x16\x43\x3c\xd2\xf0\x9e\x58\x4a\xc7\x6e\x84\x31\x20\x43\x80\x6a\x27\xb5\x8c\x10\x59\xd8\x0e\x01\x99\xd5\x06\x86\x0c\xb3\x22\x96\x55\x5a\x44\x3a\x2c\x4c\x11\x16\x4a\x6c\xe3\x6c\xae\x4f\x1f\x60\xf4\x5f\x54\xc1\xa8\x07\x5d\x0a\x42\xc8\x10\xdb\x0d\xb3\x96\x96\x05\x14\x2d\xfe\x0d\x32\xa6\xc5\x63\x5a\xfc\xf5\xa3\xc5\x7f\x62\xd2\xe2\xdf\xda\x35\x2d\xfe\x3e\xe7\x9c\xaa\xed\x9c\x8e\xd0\x7d\x14\x00\x00\xfd\x93\x22\xdd\x5f\x19\x95\x22\x7b\x34\x8d\x02\x1a\xfe\x93\x0e\xa0\x67\x17\x83\x1b\x44\xd1\x55\x9e\x97\x1a\x6f\xb1\xcd\x30\x41\xfd\x84\x41\x1d\x1e\xf1\x34\x2f\x5f\x2a\xd8\xed\x3f\x18\x95\x54\x6d\x9b\x09\x40\x1e\xfb\x07\x9c\x73\x58\x97\x9e\x84\x41\x80\x27\x5f\xbf\xd1\x5e\x74\x5e\xb0\xfd\xd5\xb6\xec\x9e\xd2\x57\x9b\x39\xea\x22\xb4\xbf\x74\xc7\x15\xe3\x19\xc8\xa7\xbf\x78\x82\x3c\x69\x68\x5a\x20\x19\x73\x7f\x07\xab\x6f\xf0\x38\x58\x49\xd2\xdc\xfd\x4c\xc5\xbb\xb5\xff\xb1\xde\x55\x66\xec\xad\xcc\x74\xaa\x63\xb7\xec\x0b\xe4\x95\x15\xd2\x95\xca\xf4\xb6\x77\x0e\xf4\xe4\x03\x34\xd5\x18\xc4\x8b\xa6\x52\xd9\x6c\x81\x38\xcd\x68\xbb\x2b\x71\xd2\xf9\xf9\x7a\xd4\xcd\xc2\x4d\xae\xdd\x7b\xd0\x05\x73\x19\xf4\x6c\xb6\x1e\xeb\xb5\x0e\xd9\x8b\xfa\x37\xf7\xa5\x1a\xcf\x25\xc1\x92\xba\x0f\xdd\x36\x4f\xc3\x3a\x8b\xac\x60\xe6\x43\x00\xa4\x76\xeb\x91\xa9\x5d\x75\x89\xb5\xb9\x67\x5b\xaf\x3f\x35\x49\xa6\x87\x2d\x02\x6e\x66\x99\x28\x46\x4e\xb9\x7b\x61\xd2\x5b\xb4\x1f\x99\x8e\xd8\x51\xa4\xc9\x7b\x66\x39\xcb\xab\xe5\x11\x17\xa2\x18\x97\xbd\x22\xbf\x38\x41\xbe\x0a\x60\x37\x78\xb5\xb8\x5f\xda\x49\xb2\xbf\xf5\x5e\x87\x07\x20\x19\x22\x35\x2d\xc0\x3c\xdf\xe7\xac\x6a\x18\x5b\x30\xb2\xeb\x02\x66\x92\x01\x03\x9d\xc2\x44\xbd\xcd\x07\x21\x2f\xa8\x74\x60\x86\xd5\x3a\x35\x9a\xd0\x66\xc7\x69\x35\x50\x0d\x30\x20\x7f\xc3\x56\x05\xdd\x80\xb2\xce\x69\x28\x57\xb2\x44\xae\x31\xbe\x72\xe7\xbc\xea\x9a\xe5\x44\x61\xee\x4a\x23\x1e\x51\x7e\x63\x6d\xb0\x07\x75\x55\x70\x64\xe2\x9d\x5e\x4e\xdd\x3c\x8c\x7c\xb1\x68\x79\xea\x2f\xc5\xf9\x99\x74\x0d\xea\x2b\xf7\x44\x05\xb6\x0f\xe9\x09\x79\xf3\x7e\x0b\xc5\xa5\x3f\x2f\xc8\x62\x98\xa5\x5d\x50\x54\xdf\xd1\x0d\x9a\x3c\x87\xd4\x41\x7f\xbc\xcf\x7b\xfa\x90\x77\xb8\xb1\xeb\x49\x14\xf1\xba\xba\x2e\x06\x14\x1d\x92\x3d\xe8\x07\xf7\x8e\x19\x9d\x5d\x30\x3a\x4b\x06\x9f\x73\x29\x79\x61\xfb\x73\x07\x8d\x19\xf6\xdd\x32\xec\x67\x55\xea\x9e\x53\xa6\xc7\xc9\xc8\x7c\xbd\x3b\x38\x7e\x17\x9d\xd6\xf6\xf7\xfe\x09\x77\xa1\x5a\xca\xb3\x43\x8b\x44\x3d\x83\x4e\xed\xc0\xeb\xfe\x6d\x93\x56\x8e\x4a\x8d\x56\xae\xa2\xe6\x35\xda\x95\xfb\xbf\x27\xbc\x99\xa5\x81\x5a\x58\x0d\xd5\x85\x0c\x93\x8e\xb8\xf7\x2f\x38\x93\x62\x13\x5f\x70\x24\xcf\x66\x91\x81\x77\x4d\x90\xba\x02\x64\x79\x8e\x77\x5a\x37\x24\xc1\x4a\xea\x49\xc0\x15\x8c\xb1\xae\xb0\x2f\xd4\xd2\x08\xe9\x37\xbe\xb3\x88\x6f\x46\xf6\xb5\x79\x96\xb1\x26\x77\x5b\xde\xbd\xa7\xf1\xcf\x81\xbd\x1f\xdd\x5a\xbf\x06\xda\x6e\xdf\x6a\xf4\x7e\xcd\xa6\x76\xbc\xfa\x9a\xe6\x26\xb7\x69\x0f\x3c\x4d\x95\x25\x5b\xbc\xf5\xee\x84\x06\x20\xc4\x60\x3d\xed\x72\x6f\x9a\x7a\x27\x59\x94\x89\x3f\xc4\x6b\xe9\x20\x68\xb3\x33\xcb\x04\x66\xdd\x3d\xe9\xdd\xb6\x2e\xe1\x36\x77\xd6\xe6\x5c\xd1\x9e\x59\xdf\xdf\xee\x27\xde\x40\xf4\x9d\x60\x5d\xc2\x88\xc1\x7d\xf1\xa9\xfd\xde\xe1\xd2\xb3\xbe\x24\x73\xea\xe5\x90\x9b\xe1\xc7\xf6\x8d\x49\xd2\x6e\x49\xd2\x7d\x8a\x24\xad\x7b\xdf\x70\x4a\x79\x2f\x1a\x90\x6f\x56\x3e\xf4\x23\xc4\x27\xd3\xdb\x27\xd7\x2e\x16\x6e\x7c\x73\xef\xe2\xe6\xfe\xb4\xa9\xa2\xf8\xb9\x5d\xe6\xfd\x7b\xb1\xf3\x75\x4a\xfc\x67\x0c\xee\xa2\x73\xcf\xf6\x17\xd5\x71\xf7\xa8\xbe\xa8\x3c\xcf\xbc\xa4\x4c\x52\x51\x56\xba\xbe\xa8\x62\x89\xa1\x56\xfa\x27\x4b\x02\x92\x00\x60\xbf\xe1\x78\xb7\x5a\x4f\xb4\xfc\xd3\x27\xd8\x97\xc5\x07\x5b\xe8\x79\x85\x43\x1e\x72\xc8\xb5\x51\xc2\x82\x3b\x58\xc4\xe2\x3a\x4f\xdd\x2e\x39\xb6\xed\x21\x39\x65\x7c\x20\xf5\x0b\x4f\x33\x9f\xd9\x19\x9f\xfa\x15\x0d\x40\x6a\x12\x16\x54\x6b\xf2\x03\x9f\x7c\xec\x5a\x52\x1d\x2d\x05\xde\xb9\xbe\xbe\x22\x47\xb1\xc2\xf2\x96\xfb\xea\x6b\xbd\xa4\xf4\xac\x88\x9e\x03\x28\x29\xf1\x04\xc4\x4e\x46\x6b\x28\x28\x8a\xb3\x21\x9d\x42\xbb\x69\x19\x3a\x12\xca\xb3\x14\x6e\xe2\x2d\x06\x28\x59\x92\x2c\xaa\xaf\x2f\x38\xfb\xe4\x9f\xd6\x34\xbe\xe8\x1a\xf2\x43\x0e\x51\xaf\xdc\x37\x8d\x12\x1d\xb7\x15\x6f\xbd\xe7\x14\x42\x6d\x41\xff\xfb\x45\x1d\x83\x42\x24\xd2\x87\x1a\x5c\xd9\x53\xd6\x68\x84\x75\xed\x90\x65\x8e\xc5\x27\x3f\x50\x21\x93\x62\x98\xee\xf7\x55\xbc\x97\x57\x60\xca\x42\x85\x35\x55\x84\x78\xe9\xc9\xc0\xdb\xa4\xec\x47\xeb\xd3\x05\x5c\xd1\xa8\x47\x43\x08\x92\x52\xeb\x4d\xeb\x2d\x96\xb2\x3a\x40\x71\x07\x61\xa6\xec\xb1\x9a\xa8\x15\xa7\x8b\x45\xd4\x13\x4d\x78\x86\xeb\xdb\xd9\xd5\x53\x94\x65\x26\x3a\xce\xea\xc9\x05\x7a\xec\xb6\x5b\x6f\xf6\xa9\xe8\xaa\x4e\xea\xd4\x0c\x63\xb5\xae\x07\x67\x0e\xfa\x1a\x36\xba\x10\x81\x01\x10\x09\x3e\x81\xb6\xfb\x3c\x81\x25\x1e\x0f\x0c\xdb\xe2\x27\x3e\xb4\x8f\xec\x17\x1f\x42\x4e\x96\x1f\xdd\xe7\xbd\x65\xdf\x8a\xfc\x55\x60\x03\x65\xd2\xa7\x2c\xe7\x69\x27\xe5\xb9\xa5\x44\x84\x29\x55\xbb\x0a\xbb\x0d\x1f\x4b\x57\x53\xc3\xa9\xbd\xc0\xcb\xc3\x1b\x74\x8e\x1e\x56\xfe\xc6\xa7\x8d\x90\x37\x31\x29\xb0\x16\xd2\xfd\xcb\xa7\x87\xe9\x0a\xc0\x59\x15\xe5\x74\xcc\x01\x2b\x8a\x23\xe4\x15\x26\x1d\x13\x53\x09\x13\x75\xba\x08\x35\x26\x94\x06\xd0\x9b\x58\x9d\x14\x2e\x03\x50\x6a\xbd\xe2\x4f\x96\x85\x99\x4f\xe7\xed\x02\xb0\x17\x15\xf2\x2f\xa1\x9a\xe7\x91\x11\x72\x52\x81\x01\x9f\xe8\xe6\xc5\x93\x83\x33\x07\x69\xc6\x3b\x0c\xe2\x44\x45\xad\xa6\xe9\x9e\x50\xe9\x09\x8c\xa9\xf7\xc4\x08\x20\x16\x10\xa0\x47\x3a\x52\x89\x22\x7b\x50\xdd\x0a\x33\xae\x46\x28\xae\x7c\x39\xa7\x84\xea\x2a\x45\x0d\xa6\x9d\x49\xfa\x13\x46\x2c\xcb\xf5\x38\x94\x96\x4d\x9e\x02\x26\xee\x57\xb9\x0d\xa8\xa6\x52\xe6\x07\x61\x6c\xd5\xaf\x3c\x24\xd0\x59\x0b\x7b\x8f\x4a\xb2\x99\x46\x92\xcc\xd4\x58\xaa\x06\xc5\x33\xfd\x68\xa6\xc6\xee\x47\xaf\x6d\x1d\x32\x80\x5f\xaa\x02\x35\x76\xff\x94\x4f\x0e\x43\x3a\x9e\x02\x5a\x46\xd9\x20\xe7\xe8\xd2\xf6\xfb\x0e\x5c\xe1\x3b\x34\x4f\x08\x35\x69\xbf\x84\x89\xb0\x2b\x46\x2f\xe8\x3c\xe5\x80\xd1\x02\x01\xc8\x60\x7f\x83\x65\xe2\x7a\x03\x8b\x19\x49\x65\x31\x31\xea\x00\xa1\x60\xa3\x08\x02\x3c\x56\xe4\x52\xa4\xb8\x83\x71\x4a\xe1\xee\xf4\x49\xb9\x39\x71\xf2\x24\xce\x0a\xa6\x75\x94\xc8\x49\xea\xc8\xca\xef\xac\x48\x81\xc1\x73\x61\x1d\xdc\xcf\x5c\x6f\xdd\xa1\x05\xa0\x45\x21\x7c\xa6\x61\x92\x86\x79\x4f\xe6\x97\xb9\xde\xfb\x43\x67\xf1\xc4\xca\xea\x89\x85\xf9\xf5\x13\x8b\xb4\x8a\x5a\x4c\xb4\x54\xaa\x30\x15\xc1\xc8\x9b\x5f\xa1\x3f\x4c\x27\xe5\x75\x26\xa3\x4d\x8c\x76\x24\xcf\xb1\x39\x3b\x63\x7d\xe3\x97\xaa\x50\x54\xbd\xcd\x3a\x1d\x00\xa0\x17\x04\x8a\xd1\x8e\x2c\x24\x31\xcd\x40\xe1\xa6\xc0\x5c\xd5\x2b\xa9\x31\x45\x82\x21\xd3\x5a\x01\x0f\x2a\xa9\x0b\xc4\x9c\x80\x88\x23\x4b\x02\x62\xa0\x28\x61\x5d\x57\x3f\xfd\x98\x31\x67\xbb\x0b\xce\xf6\x5f\x65\xae\x8d\x97\x56\xc8\xe3\x3a\x29\xe7\xed\x8e\xe1\xef\xfe\x65\xc7\xfb\x43\x67\xa5\xf4\x54\x19\x09\xe4\x2f\x20\xd7\xb2\x48\xdc\x44\xb8\x2b\xb8\x9b\x01\x7a\x49\xef\x5d\x9f\x9e\xc1\xab\x6f\x19\xc3\x70\x65\xad\xa7\x44\xa1\x15\x5d\xc6\x3c\xf3\x83\x4a\xc8\x14\x64\x3c\x2f\xa7\x7f\x10\x27\xbc\x0a\x58\x0f\xd3\xb4\xc9\x8c\x64\x68\xcb\x49\xbc\xa2\x7b\xa7\xab\x91\x60\x33\xd5\x26\x2b\x25\xbd\xf8\x11\x87\xe0\x81\x71\x7f\x40\x1b\x47\x5e\xe1\x14\x07\x4d\x49\xdd\xf6\x69\x35\xd2\x80\xb6\x54\xfa\xda\xa2\x88\x81\x2f\xc7\xeb\x3c\xdc\xe4\x74\x4b\xf0\x2b\xe0\x2d\xde\x52\x39\x43\x0b\x05\xbb\x82\x09\x93\xf7\x68\x98\x82\x44\x0b\x2e\x7e\x96\xd9\x64\xac\x3c\xd8\xa5\xf2\xe0\xd5\x0e\xb9\xc6\x00\x69\x77\x1f\xf0\x12\x13\xb3\x1d\x39\x0e\x96\xd6\xc2\x3c\x65\x69\x4f\x91\x46\xe9\xf1\xde\x2d\x72\xb3\x04\x3c\xa3\xcd\x6e\x18\xf0\x08\x26\x1c\x61\x63\xe2\x41\xfb\xc4\x88\x04\x81\x1c\x26\x66\x6f\xde\x35\x41\xae\x6b\x46\x49\x8d\x45\xf2\x10\xb8\xdf\x3b\xe1\x3d\x34\x61\x3d\x32\x82\x10\xad\x40\x13\xfb\x82\x31\xc2\x4d\x0a\xb0\x01\x89\xb5\xad\x60\xb8\x75\xbf\xe0\xf8\x6a\x54\xfd\x20\xa1\x1a\xef\x40\x5c\x26\xe5\x6d\x0e\x28\xd9\x82\x6b\xb4\x5b\x54\x71\x54\x2c\xdd\xc0\xa6\xce\x59\xdd\x3e\x67\x86\xdf\x37\xac\x90\x93\x52\x4d\x3c\xc3\x8c\x8e\x45\xa4\x71\x98\x96\x2b\x93\x87\x1e\x40\x4e\x12\x9a\xa7\x5d\x09\xa3\x93\xb5\x59\x14\x89\xfd\xa7\x4f\x2a\xa4\xd9\xc4\x8f\xf5\xc0\xcb\xcd\x59\x08\x73\x43\x26\xc9\xc2\xff\xbe\xe8\x84\xdb\xab\x01\x4e\xba\x8b\x45\x6e\x93\x32\x87\x50\x68\x05\xcc\xbe\x0c\x54\x58\x3f\x5c\x31\x41\xe5\x47\xdc\x27\x2b\x10\x33\xae\x72\x48\xfc\xbe\xe3\x3d\xc7\x7a\xa2\x5d\x82\x1b\xdd\x48\x7a\xd8\x4a\xc8\x4f\x0b\x3e\xe1\x10\xde\xb3\xd3\x12\x11\x63\x9a\xf2\xbc\xee\x03\x74\x45\x9d\xa5\x69\x28\x64\x8c\x6e\xc9\x6c\xda\x25\x8b\xe4\xb1\xea\x78\x29\x5a\x34\xeb\x3d\xd1\x36\xda\x49\x1c\xe6\x55\xbb\x9c\xb9\xfd\xab\x64\xa2\x1b\x06\xee\x77\x78\xff\xd7\xc0\x2f\xcf\x2e\x2d\x5a\xa7\xe5\x6f\x1d\xd3\x4d\x6d\xc4\xc4\xac\x87\x6d\xee\xfe\x82\xe3\x1e\x10\x03\xab\xe6\x61\x9b\x7b\xef\x85\x78\x71\xe4\x77\xb6\x52\xd6\xe9\xf0\x94\xb2\x14\xfc\xcc\xc4\x7b\xf8\x44\xe1\x66\xcb\x88\x64\x5a\x4f\xd2\x14\xc1\x48\xd2\xac\xc5\x22\x89\x38\xfd\xec\xf9\xd3\xa7\x80\xbc\xdd\xb5\x76\x66\xd9\xa7\xf4\x1e\xac\xcd\x4e\x5a\x80\x88\x33\x80\xfa\x23\x05\x3f\x56\xcf\x93\xb4\x27\x2e\xf9\x96\x3e\x79\x2a\x0a\x9d\x76\x58\x7d\x83\x35\xc5\xfe\x15\x42\x96\x35\xe8\xff\xef\x7a\xcb\x37\x8f\x75\xf3\x24\xab\x33\xe4\x71\x8f\x22\x8f\x7b\x9a\xe7\x69\x58\x87\xc4\x14\xbf\x7a\xbd\xf7\x40\xf1\xd3\x20\x1d\x12\xa7\x4b\x7c\xca\x4d\xd1\x51\x86\x7d\xb5\xe1\x1b\x7a\x08\xa2\x19\xcf\x09\x1e\xe8\x9c\x44\xc0\xe6\x32\xd2\x4a\x8b\x19\xf2\x24\xb6\x0a\xac\x97\x9c\xb2\x1c\x22\xc9\xa6\x94\x3d\xc4\xda\x2d\x1f\x79\x1c\x79\xdb\x24\xb9\x5e\xc3\x37\xaa\x0d\xe1\xbe\x6a\x92\xdc\x35\xca\x9d\xbc\x6f\xa0\x0b\xe5\x2a\xe4\x50\xe1\x6f\xef\xa7\x27\x0c\xe0\xde\x02\x35\x1c\xc4\x56\x48\xaa\x59\x44\xc1\xc8\xd1\xaa\x94\xbc\x12\x78\xde\x8c\x33\x2f\x74\x06\x71\x40\xa3\x50\xf0\xa9\x53\x45\x44\xb7\x61\xc2\x97\x4a\x38\x0c\xbc\x91\xb3\x59\xf4\x23\x8c\x29\x67\xf5\x16\xdc\xe6\xca\x3a\xa2\x14\x63\xb0\x14\x72\xab\xa3\x04\xb9\xb0\x72\x56\x88\x53\x6d\xde\x4e\xd2\xde\x94\x4f\xd7\x44\xff\xb0\xb3\xb8\xbd\x00\x5b\x1f\x78\x04\xb3\x0f\x0a\xdb\x73\x53\x8e\x81\x45\x54\xce\x9c\x0c\xce\x82\xfb\x29\x4f\xa4\xc4\x2c\xc6\x5a\xa0\x84\x02\xa2\x6d\xda\x66\x88\x25\x2d\xfa\xa9\x1a\x44\x98\x4e\x88\xb8\x16\x97\x85\x47\x71\xf6\x0c\xcf\x8f\x98\xb2\xa8\xd3\x62\x8a\xb3\x42\xdc\x54\xbc\x16\x10\xf0\x4f\x73\x64\x77\xae\xcc\xeb\xc5\x3b\x2d\xeb\x57\x5f\x35\x22\xd6\xf4\xc9\xdf\x55\xc8\x7e\x7e\x1e\x99\x08\xf7\x0b\x15\x32\x7f\x49\x3b\xe3\x84\xfc\xd2\xda\x10\x6f\xaf\xa8\x0a\xad\x6d\x20\x2f\x07\xb9\x09\x50\x51\x30\x18\xce\x4c\x9c\x5f\x63\xa9\xb5\x13\x46\x8e\x41\x07\x19\x35\xba\x62\x40\x2e\x19\x66\x34\xa9\x81\x02\x31\x48\x9b\xa4\x0a\xcc\xe1\xa4\x9b\x03\x20\x47\xd2\xd0\x18\x32\x87\x1a\x85\x49\x8e\x46\x3c\x6e\xa2\x46\xee\x05\x5d\xde\xc5\xf4\xac\x90\x00\x01\xed\x7d\x90\xe9\x17\x15\x83\x60\x2d\x7b\xd6\xca\x1a\x36\x15\x25\x2c\x50\x5a\xd6\x11\x8d\x4d\xf9\xe4\xe7\x1c\x75\x50\xdd\x0f\x6f\x93\x5a\xbc\x6f\xd2\xb5\x3c\x53\x4c\x79\xae\x45\xc3\x62\xbe\xe5\x44\x0f\x3a\x28\x1b\xe5\xc9\xb5\x86\x3f\x4d\x5b\x61\x9e\x55\xc5\xbe\x44\x04\x0c\x09\xd8\x67\x3b\xc5\x4c\xf9\xe4\xfb\x2a\x64\x52\x6c\x51\xf7\x35\x95\x11\x1e\x73\x83\x86\xb0\x92\x04\x99\x35\x80\x4f\x3a\x92\x69\x1f\xd5\x7f\x7d\xa4\x15\xa6\xd4\xc0\x23\xfd\xff\xb3\xf7\x27\x60\x96\x64\x65\x9d\x30\xfe\xc4\xcd\xac\xed\x54\xb3\x05\xfe\x9d\xff\xa7\xce\x78\x26\x98\xb1\xb2\x9a\x9b\x91\x95\x55\xbd\x66\x2f\x4c\x76\x55\x75\x77\xd2\x5d\xd5\x49\x65\x75\xa3\x36\x0d\x19\x79\xe3\xdc\xbc\x41\xc5\x8d\xb8\x1d\x11\x37\xb3\x6e\x43\xfb\x81\x38\x22\x08\x88\xc0\x80\x5d\xa8\xa0\xcc\x08\xd3\x28\x0c\x0a\x02\x8a\xac\x83\xeb\xb0\x0c\x8e\xa8\x0f\xa0\x0e\xc8\x30\x88\xf3\x3d\x33\xe3\x36\xb6\xdf\xcc\x7c\xcf\x79\xdf\xf7\x6c\x71\x23\x97\xaa\xac\x2a\xd4\x49\x1e\xad\xbe\x19\xcb\x89\xb3\xbe\xe7\x3d\xef\xf2\xfb\x39\x2d\xa9\x8a\x28\x2b\x31\x7b\xaf\x9c\xa6\x1c\x52\x11\x5b\x6d\x3b\x1c\x72\x73\xb6\x37\x2a\x4a\xb4\x26\x8a\x68\x15\x8c\x26\xab\xa8\xfc\xd1\x1e\x8e\xa1\x66\x72\x4e\x45\x85\xb1\x59\xd3\xb7\xd1\x56\xc0\x1e\x9b\xb0\x62\x9b\x5e\x35\x71\x91\x6b\xaa\x51\xc8\xfe\x6a\xeb\x9b\x22\x5a\xb7\xd7\xe3\x7f\x87\x84\x28\x7b\x5b\x8b\x9c\xd8\x17\x5a\xc1\xab\x5a\xc0\x1a\x99\xb8\x0c\x92\xd4\x95\x4a\xea\x4a\xb1\x63\x76\x5d\xb2\x29\x07\x63\x5b\x62\xd0\xe6\x81\x92\x86\xf2\x37\x2e\x52\xf9\x6b\x11\xbe\x9f\x17\x3c\xb0\x9e\x85\x8e\x55\x56\x29\x9c\xee\xee\x46\x4f\x1d\xae\x64\x1f\x26\x35\x37\x7c\x96\xab\x26\x38\x00\xd4\xea\xd0\xeb\x1c\xbe\x1b\x77\x83\xa4\x54\x7b\x86\xad\xfd\xbc\x74\x92\xcd\x6d\x3a\x4d\x8f\x86\xc7\x8b\xbc\x2c\x49\xb9\xac\x05\xe4\xf9\x1f\x9f\x08\x56\x36\xb9\x6f\x3c\x56\x22\xcb\x87\xab\x3d\x47\x74\x57\x39\x4f\x45\x05\x89\x73\x0e\x53\xb6\xc6\xc9\x51\x73\x5e\x2a\x3d\x52\xb7\x27\x24\x57\x47\xf7\xf9\x58\x8b\xdd\xe0\x9c\xd8\xa7\x82\x6f\x9f\x5f\x5c\xb0\x6d\x8d\x96\xa3\xa7\xb2\x9b\xfe\x63\x1e\x59\xeb\x7e\xc4\x0b\x5e\xea\x81\xb5\xae\xf6\xf4\x2d\x57\xd1\x16\xe6\xc4\x4b\xa4\x14\xc5\x1a\x07\xcf\x3d\x3d\x1e\x23\x38\x5e\xaf\x66\x0c\xc7\x61\x29\x8a\x69\x38\x43\xcf\x58\x44\x66\xcf\x80\x18\x48\xfb\x6b\xaf\x9f\x6c\x8c\xce\x30\x88\xaf\xe8\x1f\xfd\xd3\x89\xe0\xae\xda\x35\x04\x2d\x6e\x0c\xe8\x69\x08\x83\xd6\x2f\xbb\x87\x9d\x37\x4c\xb0\xbf\x70\xd9\xfa\xfe\x93\x17\xdc\x7b\xf1\x6c\x7d\x3a\xb6\x73\x53\xae\xbe\x1b\xd9\xf5\xdb\x70\xc5\xea\xaa\x5e\x59\xaa\xbe\xc7\x3c\xb6\x67\xd0\x8b\x4a\x81\x73\x70\x51\xfe\xac\x07\x92\xa7\x49\x57\x74\x46\x9d\x54\x70\x78\x52\xcd\x05\x2b\x2d\x7d\x7b\xdc\x8f\x55\x54\x9e\x2b\x67\xa2\xb8\x9f\x64\x89\xd4\x4d\xa6\x49\x47\x99\xd1\x25\x95\x33\xf6\xac\xf8\x0b\xcf\x61\x01\xb5\x22\x39\xce\x88\x28\x4e\x32\x51\x96\x77\x45\x95\xf0\x3f\xe5\x05\x73\xf5\x8b\xae\xa7\xda\x30\x62\x80\xfc\x93\xd2\x5b\x0f\xf6\x05\xef\x49\xfa\xf7\xd9\xfa\xc1\xa6\x64\x0f\x33\xf7\xb6\xbf\x1c\x2c\x1d\xb7\x2f\x38\x9b\xa4\x89\x51\x52\xde\xb2\x3c\x3e\x54\x5a\x97\x11\x19\x2b\xb1\x9d\x3a\x72\xc8\x9c\xf3\xe0\x2b\x27\xd9\xb5\x8d\x74\xfa\x21\xb2\x97\xcd\x57\x55\xd4\xe9\xf5\x45\x56\xc1\x81\xf0\x0b\x13\xc1\xdd\x4d\x37\x36\x4c\x8a\x88\x78\xfd\x71\x8b\x89\x68\x7f\x04\x57\x45\x71\xc1\xdb\x8b\xc2\xef\x82\xb7\x3f\xcb\xe3\x71\x86\xb9\xaf\xb4\xd8\x9b\x3c\xa6\x9f\xf7\x5f\xe9\x05\x8f\xce\xd3\x1f\x35\xc6\x64\x3b\xcc\x98\xc8\xae\xe3\x22\x59\x53\x24\xce\x80\x94\x47\xbc\x0a\x64\xbf\x24\x87\xb4\x6d\x7f\xcd\x90\xdb\xa4\x1a\x16\xe4\x45\xbe\x4b\x54\x8b\x00\x09\x22\xab\x36\x75\xd8\xe9\xc3\xbb\x99\xae\xb4\x7f\x6b\x30\x73\x56\x73\xe9\xab\x43\x39\x55\xc3\x6c\xb7\xd4\x0e\xf0\xa7\xbb\x71\xcf\xd4\x0f\x7e\xb9\x89\xfb\x7f\xb3\x41\xc2\xdd\xf3\xfa\x25\xa5\x53\x39\x62\x85\xea\x61\x93\x59\x5b\x95\x09\xd9\x63\x4f\xb7\xe3\x27\xc6\x2c\x22\xa1\xde\xa2\x9e\x33\x8c\xb2\x2a\xa9\x46\xfe\xd7\xfc\xe0\xf7\x7d\xf5\x17\x9a\x43\xba\xc9\x79\xa9\x89\x82\x77\xa6\xc1\x36\x4c\x99\x00\x70\xec\xd1\xa6\x4f\xdc\x28\xc0\x8b\x63\xac\x23\x33\xc3\xcc\x32\x95\x24\x19\x58\x48\x40\xad\xfa\x9e\xf9\x53\xf7\x02\x0a\xa7\x82\xfe\x90\x0b\x02\x43\xbd\xa7\x0e\xc3\x13\xf3\xe5\x42\x56\xdd\x70\x9d\xfc\x0b\xf2\xac\x11\x90\xf7\x2c\x26\x58\x24\x51\x4a\x09\xda\x8a\xb3\x2d\x29\xe7\x18\xbb\xf5\x61\x6a\xc7\xed\x0a\x54\x78\x6e\xee\x36\x7e\x6b\x99\xac\x66\x22\xc6\xe4\x86\xdb\x6f\x2d\x87\xdd\x6e\x72\xfe\x76\xc6\xf9\x94\x71\x0c\xab\xab\x0a\xb5\x84\x72\xdf\xb5\xb7\x2a\x08\x10\x27\x36\xc9\xf8\xad\xb1\xe8\x24\xfd\x28\x5d\x5a\xb8\x3d\x3c\xcc\x6e\x8d\x93\xd5\xa4\xd2\xdf\xa3\x4f\x1e\xe1\x2f\xe6\xb3\xfc\xc5\x3c\x0c\x43\xfe\x62\x7e\x33\xc7\xa7\xca\xdb\xdd\xa7\xd4\xbb\x2f\x56\xbf\xf4\x63\xb7\x62\x17\x37\x3e\x5f\x9a\x17\xca\xdb\xc3\xa6\x6b\xf2\xc3\xa6\x28\xd9\x7a\xbb\x7e\x50\x54\xf0\xcc\x80\xbf\x98\x07\xd3\x41\xad\x77\xf4\xa7\x54\x05\x5e\x4c\x05\xe8\x0b\xba\xa7\xdc\xaa\xad\x24\x59\x54\x8c\x96\x16\xb0\x22\xd8\x43\x27\xcf\xe3\xf1\xd6\xbe\x26\x9f\xb0\x1e\xb6\x8a\xb8\x27\xe1\x2f\xe6\xa7\xe4\x3f\x77\xc9\x7f\xce\xca\x7f\x16\xe5\x3f\x27\x13\x39\x56\x0b\xe8\x4f\xa0\xa8\x91\x25\x40\xc3\x04\x62\xaf\x2c\xa9\xca\x5b\xf8\x92\x10\x5a\xb5\x18\xf4\x46\x65\xd2\x29\x43\xb9\x6f\x84\xab\xf9\xda\x4c\x67\x38\x9c\xb9\x5f\x3e\x37\x83\x5f\x0e\x7b\x55\x3f\x95\x63\x67\xea\x64\xea\xd1\x97\x1d\x23\x7b\xe7\x9c\xac\x8f\xac\x8e\xac\x8d\xac\x8c\xac\x8b\x3b\x6d\x66\x8f\x1c\xbd\x8e\xdf\xc6\x67\xef\x49\xc0\x97\x3f\x7b\xe4\xc8\x11\xf9\xe7\xb9\x5b\xf8\x02\x8f\x93\x38\x3b\x54\xf1\x4e\x2f\xcf\x09\xd8\xb7\x13\x0d\x92\x4a\xcf\xdc\xd0\x54\xc0\x74\x14\x8c\x8d\x18\x1b\x95\x17\xf3\xe0\x64\xfd\x22\x63\xa7\x01\xe2\xae\x12\x05\xd9\x29\x15\xbf\x6c\xaf\x10\x82\x0b\x2a\x13\x16\x88\x66\xb7\x6a\xf3\x2c\xe7\x6a\x95\x90\x3f\x86\x16\xb8\x5e\xd8\x7c\x15\xc0\x4d\x0b\xb4\xce\x1f\x7d\xfe\x0d\xc7\xa6\x67\xe5\xc4\xef\x47\xab\x59\x52\x0d\x63\x21\x0b\x29\xd0\xb1\x4b\x5e\x02\x63\xcc\x3f\xc6\xa9\x4d\x7c\x90\xca\x2d\x3a\xe4\x58\xdd\x92\xa7\xf2\x4c\x06\x40\x36\xf0\xf4\xa0\x10\x9d\xa4\x14\x16\x64\xd4\x60\x80\xa0\x0d\x60\x84\x15\x31\x1f\x0e\x42\x3e\x75\x32\x5c\x0d\xe7\xf8\x91\x70\xb6\x8f\x4f\x9a\x9b\x00\x85\xd9\x0f\x0f\xa3\xd4\x57\xeb\xf6\x3c\x11\xce\xd2\x86\x4a\x40\xa8\x49\x97\xaf\xeb\x78\x03\xab\x26\xe8\x2d\x28\x54\x8f\x24\x42\xca\x18\x88\x23\x8a\xb8\x2d\x13\x07\x51\x51\xaa\x08\x26\xe5\x1e\x87\xb8\x0f\xac\x93\x20\x02\x3f\xfb\xb0\x86\xcb\x04\x7b\x28\xc6\xb3\xa4\xe1\x05\x52\x4c\x3b\xf0\x30\xc4\x5b\xe1\xc1\x08\x23\x49\x94\x80\x93\x02\x9d\xdd\x81\xa7\x7b\x75\x0d\x3e\xac\xab\xa6\x3a\x6f\x30\x84\xf3\x6b\xd0\x89\xb2\x3c\x83\x94\x2d\x39\xea\x01\xed\x88\x7d\x11\x65\x64\x60\x56\x33\x6d\x86\xaa\xa7\xad\x0a\xf1\x0b\x87\x80\xac\x87\xb8\x79\xb1\x3c\x7b\x4f\x51\x70\x15\x58\xbd\xcb\x41\x0e\x14\xfc\x3c\xc9\x3a\x05\xc0\x53\x20\xee\x38\xfe\x4e\x32\x7e\x4a\x56\xa9\x2c\xa3\xc3\xe8\x70\x91\x5f\x9b\x63\x9c\x47\xf2\x84\x48\x83\x4d\xfe\xb4\x34\x87\xd8\xc7\x15\xb8\xd3\x2d\xd0\x06\x12\xa5\x1c\x25\x96\xae\x92\x40\xd8\x2c\xc6\x39\x51\x9c\xe9\x19\x3d\x25\x47\x0e\xea\x7f\x18\xb1\xf2\x71\x44\x01\x51\x8c\xf8\x94\x42\xdc\x29\x92\xd5\x4c\x97\x97\x13\x6c\xd8\x30\x4b\x81\xe4\xcf\x20\x50\x25\x25\xcf\xc4\x2a\xb0\x0f\x85\x8c\x9d\x24\x44\x78\x59\xfb\xd9\xf0\x7a\xfd\xbe\x19\x15\xf9\xa1\x60\xf6\xfa\x23\x47\xfa\x01\x3e\x73\x57\xb2\xf1\x53\xc7\x6e\x38\x95\x04\x72\xad\x56\x96\x3a\xf1\xb0\x33\x80\xa7\x4f\x3e\x70\xf2\x0c\x22\x6c\xe1\x31\x3d\xb5\x96\xa5\x86\xf4\x4d\xf3\x88\x7c\xeb\x72\x5f\x56\x7b\xf0\x59\xb2\x56\xca\x52\xd7\x7b\x39\x50\x4d\x25\x2a\xaa\x49\x1e\xa1\xcf\x8b\x42\xae\xb3\x50\x56\x21\x9b\x36\x13\xc4\x36\x2b\x95\x55\x02\x61\x37\x45\x09\x9d\x98\xe6\xd9\x2a\x79\xc1\x46\x60\x20\x59\x17\xc8\x94\xdb\x97\x02\x44\x0a\x3a\xd5\xda\x42\x4c\x0b\x85\xc6\xa6\xfc\xd4\xee\x1c\x0c\xf9\xd4\x52\xce\xa3\x74\x3d\x1a\x81\x04\xaa\xdd\x6e\xe3\x6c\x93\x82\x32\x4e\xba\xdd\xf0\x30\x23\x8a\x19\xb5\xab\x1b\x0a\x69\x00\xf4\x3c\x27\xe4\x1a\x91\x8f\x26\x1d\x82\xc3\xa5\x05\x55\xaa\xe1\x2c\x35\x96\xf6\x7a\x91\x40\x8f\x95\xb9\x54\xdd\x28\x63\x4c\xd9\x72\x40\x81\x44\x8b\x59\xac\xd3\xed\x7a\xf9\x40\x68\x57\x4c\x44\xed\x44\x78\x75\x0d\xcd\x9c\x93\xf6\x9e\x96\x39\x61\x8b\x81\xbe\x44\xfd\xee\x52\x81\x39\xaa\xe1\x87\xf7\xb1\x8b\xb5\x3e\xfa\xaf\xdc\x17\x7c\xd5\xab\x5f\xb5\xd4\x65\xc7\x8b\x03\xfe\x9b\xab\x66\x9c\xbc\xcc\xb6\xc9\x0b\x1e\xc3\xaa\x23\x4f\xb5\x8f\x37\xe7\xb1\xc4\x07\xc6\xa2\x97\xfe\xdb\x24\xbb\x87\x59\x6f\xf8\xb7\x05\x47\xcc\x5f\x4d\x69\xb4\xd4\x31\x49\xc6\xe1\xb4\x50\xf3\x3c\x7e\xb1\xc5\xf6\x2b\xc4\x7d\xff\x33\xad\xcb\xc0\xd2\xf0\xca\x56\x69\x31\x28\x60\x32\x7d\x01\xd4\x4a\x99\x9c\x72\xe0\x11\xec\x13\xce\x85\x0a\xfd\xb1\xcc\xdf\x2e\x19\x05\xc1\x15\x0b\x4a\x62\xa5\xb6\xc0\x4e\x55\x8a\x4a\x85\x20\x02\x70\x35\x08\x9e\x28\xb3\x41\xf5\x06\x51\x11\xf5\x45\x85\xc8\x6e\xa6\x2f\x4a\x05\xab\xa4\xd9\x30\x34\xf5\x9c\x7e\xa0\x93\x83\x21\x50\xc5\xd6\xca\x6f\xc9\x9d\xc2\x2a\x05\xfa\xbb\x4e\xd1\xb6\x1a\xa1\x8f\x10\x8b\x01\xaf\x42\xc3\x88\xfa\xef\xbc\x98\x8c\x80\xf1\xc3\x4b\x90\x8e\x97\xa9\x8d\xa6\xd6\xe4\xd2\x18\x93\xf8\x5c\x6d\x46\x44\x9d\x22\x2f\x31\x65\xb8\x10\xa9\x58\x8b\x32\x0a\xd4\x99\x82\x20\x48\x25\xab\x0f\xb3\x1f\xdb\xeb\x9c\xb4\xb5\xed\x25\x8f\x35\x8b\xca\x19\x43\x1d\xe7\x7f\x7d\x4f\xb0\x3e\x8f\xe7\x48\x3d\x8c\x16\xb5\x9c\xa2\xa7\xa5\x3b\x2e\x59\x38\x2e\xac\x36\x8f\xf8\x39\x31\x42\xed\x41\xfb\xe8\xd5\xc3\x85\x48\xf5\x91\xf9\x9c\x94\xd4\x99\x8e\xa4\xb9\xe0\x4d\x9c\x13\xa3\x0b\xde\x7e\xf5\x86\xb3\x76\x3e\x3b\xc9\x9e\xc5\xe4\x03\xfe\x4d\xc1\x33\xcf\x2a\x0a\x08\x28\x43\xef\x50\x86\x35\xc6\x30\x53\xd9\xeb\xe5\x35\x1e\xd3\x85\xfb\x2f\xf5\x82\xca\xb2\x7f\x41\xa5\x0f\x95\x58\x41\x39\xaa\xbd\x64\x80\x06\x0f\x02\x74\x51\xf1\x3e\x98\x88\xa5\x8a\x21\xa8\xe8\xac\xcd\x81\x93\xa7\xcd\x4f\x42\x10\x48\x9b\x9f\xc8\x45\x79\x3a\xaf\xe0\xcf\x90\xdf\x55\x61\x7f\xdc\x5b\xb9\x6e\xf1\x16\xdb\x8b\xe5\xfa\xff\xb5\x15\xfc\x76\x6b\x3e\xe3\x60\x41\x33\xa0\x2f\xfa\xb3\x8a\x39\x49\xf5\x66\x52\xf2\x05\x40\x9c\xa7\xef\x56\x3d\x8b\x09\x40\x16\xa1\xe2\x26\xb2\x3c\x9b\x26\x2a\xe0\x86\x32\xb0\xba\xb2\x1c\xbb\xc2\x9b\x14\xb7\x71\x51\x77\x55\xb2\x98\x7b\x37\x7c\x19\x43\x73\x94\xd3\x8c\x02\x93\x15\x3d\x87\x46\xa9\x57\x21\xc2\x5a\x24\xa8\x78\x50\x54\x0b\xb1\x3c\x8c\xff\x92\xba\x7a\xcc\xe3\x61\x41\xde\x38\x34\xfd\x81\x20\x90\x9a\x15\x18\x04\x37\x83\x18\x7f\xef\x01\x36\x65\x2d\x8d\x62\x25\xea\x84\x6b\xb3\xe0\x0c\x9e\x0d\x8f\xa3\xe1\xee\x4c\x9e\x62\xda\xdc\xcb\x0f\x04\x3f\xed\xd5\x2e\x36\xe5\x57\x5b\x8f\x40\x24\xb0\x8e\xb8\x4d\x32\x60\x9a\xbb\x11\xc0\x4d\xa3\x35\x04\xe9\x80\x6f\x36\x81\xb7\xcd\xac\xcd\x3a\x45\x59\xca\x78\x96\x83\xb2\x03\x1b\x15\x0a\x43\x55\xf8\xd1\xa3\xcd\xf9\x7a\xff\x61\x37\x93\x7b\x27\x51\xb3\x5d\x2b\x68\xf6\x7b\x77\x96\x0d\xf6\xed\x9b\x04\xcc\xee\x86\x45\xee\x34\x2c\xb2\xaf\x72\x2a\xe3\xe0\x3b\x17\xe4\x0f\x37\xb1\xd5\x5e\x4f\xb6\x58\xb8\x81\x5d\xb7\x09\xbc\xda\x86\x62\xe1\x09\xaf\xda\x3a\x9c\xee\x39\xfe\x7d\x3a\x9c\x6e\xc3\xc5\xae\xc3\xea\x6a\xf2\xc5\x0d\xac\xc3\x1a\x30\xf6\x63\xd7\x38\x3b\x3a\xd5\x8f\x62\x8b\x4c\x01\x77\x24\x70\xf6\xf5\xbf\x7e\x30\x78\x53\x6b\xfc\xba\x71\x18\xc8\x2e\xb2\xee\xe3\x61\x89\x08\x9f\x20\x33\x2a\xa9\xd0\x6f\xdb\x89\x32\xcb\xcd\xe0\xbc\xa4\xd4\x74\x8a\x4a\xb1\x68\x02\x41\x0b\x88\x63\x20\x8c\x73\xdc\x58\x6b\x49\xc4\x09\x94\xf2\xf2\xc9\x49\x6a\xdc\xf6\xa5\xe5\xbe\x22\x4f\xc5\x19\xd1\x75\xe4\xe5\xaf\xec\x67\xbf\xe6\x31\x75\xcb\xff\x65\x8f\x4d\x6f\x35\x3d\x28\xd8\x00\xdf\x08\x5e\xe1\xd1\x2f\xe8\x33\xa4\xd3\xbb\xb8\x8e\xd3\x3b\xac\x55\x90\x26\x61\x2a\xf3\x74\x4d\x9e\x6a\xe5\xfd\x79\xea\x14\xc5\x1c\x8c\xde\x03\xc8\x38\x2a\x8a\xbc\x08\xd9\x2b\x3c\xb6\x9f\x58\x38\x4a\xff\xd1\xe0\x36\xea\xf3\x92\x00\x5b\xad\x69\xe0\x80\x6b\x93\x57\x49\x56\xd1\xd1\xa6\xcc\xb2\x99\x65\x33\xdb\xed\x17\xfa\xe6\xae\x84\xdb\x45\x9e\xfb\xe6\x6d\xe3\x3d\x6b\x1b\x7f\xde\x4e\x53\x5f\x36\xdb\xc8\x9f\xf0\xd6\xb6\xde\x18\x96\xfc\xe7\x5c\xda\xc6\x40\x22\xae\x31\xe8\xfa\x73\x13\xec\x38\xb5\x44\x7e\x7d\x3a\x5a\x5d\x2d\xc4\x2a\xe4\x2c\xea\xc6\x44\x83\xa4\x4e\x57\x46\x68\x58\x26\xe2\xe4\x95\x13\xc1\x2d\xf5\x8b\x24\x2f\x22\xd7\xd3\xac\x80\xb4\x52\xb1\x1a\x75\x46\x54\x6d\x47\x98\x7e\xb8\xc5\xae\xa3\x48\x8b\x76\xf0\x9d\x1b\x19\x3a\x28\x00\xd0\x1e\xaf\xe3\xec\x80\x16\x87\xfe\x0d\xc1\xe1\xd3\x36\xd7\x68\xd5\x84\x33\xd5\x50\xc8\x47\x3d\x36\x39\xc8\x8b\xca\x7f\xbf\x4e\x8a\xf9\x29\x6f\xa1\x6b\x63\x4e\x55\x35\xb8\x32\x95\xa4\x0c\xc7\xca\x5e\x5e\x22\x04\x98\x22\x06\xb1\x38\xad\xae\xbb\xee\x18\x58\x21\x56\xa2\xce\xb9\x75\x39\x15\xc0\x56\x54\x25\x2b\x49\x0a\x29\x41\xcb\xb2\xd4\x65\xdb\xe5\x49\x29\x6e\x0e\x34\xd9\xec\xf4\x0d\xd7\x5f\x7f\xec\xfa\x36\x42\xd3\x97\xc9\x9a\x38\xec\x66\xcb\xfc\x97\x83\x0e\x22\xf3\x0a\x1c\x6b\xf4\x86\x5f\xe4\xd9\xb3\xf3\x15\xff\xd7\x0f\x06\x73\xf4\xbb\xee\x7e\x75\xc9\xa0\x6c\xa6\x8e\x4e\x91\x67\xfc\x85\xf9\x8a\x1b\x2a\xf2\xb6\x5d\x84\xd0\x5d\x39\xbd\x9b\xa4\x78\x79\x93\x14\xff\x46\xe1\x81\xfe\xf7\xcd\xa0\x9c\x1b\xd7\x36\xc0\x80\xfe\x72\x33\x94\x73\x33\xf0\xa7\x5a\xd7\x24\x53\x62\x35\xbf\x28\x9f\xe7\xaa\x63\x3f\xb3\xcf\x1a\x38\xd0\x4f\x7a\xec\xba\x8b\x6c\x3f\xa2\x74\xbc\xca\x3b\xde\x10\xee\xa6\x45\xd8\x55\xc7\xfc\xbc\x48\x48\x15\x68\x9a\xd9\xcf\xb1\x69\x8d\x9b\xf8\xef\x1e\x70\xe8\x5a\x3a\xa2\xa8\x70\xdc\x85\x01\x55\x39\x6e\x2e\x2e\x25\xab\x59\x92\xad\x12\xd1\xa5\xff\xd8\x81\xe0\xd0\x09\x03\x29\xc9\xad\xd7\xc1\xb5\x68\x41\x49\x38\x52\xff\x6b\xbb\x98\x4e\xbb\x52\xff\xef\x0b\xcd\xc9\x1b\x95\xb4\x7d\xb5\xc7\xee\xd9\x38\x0e\xf5\xa2\x56\x16\x88\xe1\xdb\xcf\xca\xde\xb5\x96\x94\xc6\x01\xa9\x4a\x91\x76\xc9\xe7\x31\x72\xc9\xa1\xb4\xcd\x23\x64\x2f\x35\x82\x70\x9d\x9d\xba\x5c\x35\x43\x01\xf9\x5d\x27\x44\x91\xa0\x79\x63\x13\x0e\x96\x70\xfb\xdc\x22\x24\xaa\x36\xfa\x6c\x93\xf0\xe2\x1a\xbd\xdf\x6e\x01\x1d\x66\xd8\xbf\xbc\xc6\x81\xcb\x35\x01\x85\x64\x5c\xab\x87\x15\xfa\x7f\x76\x30\x78\x93\x37\x16\xc9\xd9\x89\x06\x72\x72\x19\x2c\x1b\x04\x12\xc2\x80\x42\x0c\xf1\x80\x5f\x56\x64\xa8\x14\x0c\x14\x85\x98\xcf\xe8\x35\x63\x6e\x66\x79\x2c\x42\xc6\xc6\x3e\xa5\x6c\x21\xc8\x2f\x96\x4d\xeb\x23\x47\xdc\xc8\x15\xf5\xf9\x03\xbb\x42\x74\x57\x88\x7e\xf3\x84\xe8\x67\x6d\xd5\xf9\x13\x3b\x56\x9d\x5f\x5a\x57\x9d\xbf\x09\x8a\xf3\xe3\x4a\x94\xff\x94\xc7\x6e\xdf\x46\x6c\xf2\x06\xa2\x04\xa4\xf7\x0b\x36\xd5\xa1\x51\x7e\xcc\x90\xf0\x20\x71\xa1\x14\xeb\x90\x2f\xe6\x83\x61\x6a\xe3\x73\x58\x39\x5e\xc8\x73\x1e\xb2\xcf\x1b\xf1\xfe\x5b\xde\xc6\xe1\x18\xdb\xa8\x2e\x8a\xf4\x1f\xf4\x5c\x4c\xd2\x0d\x83\xda\xc7\x6b\x27\x30\x56\x8b\x28\x05\xd5\x32\x19\x93\x91\x3a\x83\xbe\xcd\x93\x50\x84\xf8\x2a\x25\x5e\x4d\xab\xb8\xf7\xf0\x09\xef\x85\x5b\xef\x19\x77\xf9\x27\x0d\x72\x00\x35\xb0\x66\xc6\xaa\xd7\xbf\xd9\xc1\xf1\xba\xa7\xb2\xef\x36\x9d\x65\x20\x05\xa7\x0d\x56\xbe\x6d\xcd\x72\x30\x07\xc3\xe3\xc3\xb2\xca\xfb\x2a\xa1\xeb\x84\xee\x7f\x25\x90\xdf\xf7\x94\xe0\xd6\x2d\x9e\xb1\x21\xd9\x75\x8e\x53\x37\x2f\xf8\xf1\x33\x27\x42\xca\x8f\xba\xe0\xed\x45\x67\xc2\x05\x6f\x1f\x35\xd6\xd9\x09\x3e\xfd\x64\xf6\x45\x8f\x31\x83\xb8\xe4\x7f\xca\x0b\x3e\xec\xc5\xb6\x9f\xc3\xa4\x0f\x24\x65\x3d\x97\xaa\x03\x55\x34\x12\x6d\x7e\x71\xc1\x45\x70\x0a\x75\x20\x8d\xc1\x92\x70\xb8\x66\x40\xfa\x5b\x05\x2b\x04\x97\x88\xaf\x47\x05\x1c\x03\x7a\x22\x8a\x31\xbb\xbb\x32\x6c\x65\x18\x35\x29\x45\x98\x8d\x68\xd3\x8d\xd2\x52\x38\x60\x12\xec\xdf\xb4\x98\xaf\xaa\x93\xe4\xd9\x73\xb1\x50\xff\xb1\x56\xf0\xc3\xad\xf1\xeb\x3c\x5f\x13\x45\x01\x51\xf7\x36\x4e\x85\xaa\x8a\xce\x79\xa8\x72\x64\xa6\x07\xd9\x2b\x77\xa0\x68\x84\xfe\x13\xca\xd1\x87\x88\xd3\x65\xd3\x0d\x48\x09\x51\x28\x4c\xa9\x7a\xb9\x1b\x74\xb2\x8b\x85\x25\x77\x42\xb9\xf9\xf5\xfb\x22\x8b\x31\xe0\x4f\xe5\xff\x88\x75\xb9\x75\x92\xdb\xc8\x1a\x22\xe4\xa7\xcb\x4d\xd8\x71\x59\x45\x68\xf6\x03\x9c\x90\x3c\x13\x84\x06\xe2\x84\x7b\x7c\x48\xb1\x10\xff\x82\x17\xfc\x2b\x2f\xb3\x4c\xa1\xaa\x68\x79\x0d\xc9\x85\xf9\x97\x5f\xf2\xe3\x6b\xb3\x5f\x7e\xc9\x4f\xb4\xe1\x17\xc6\xda\xc1\x9f\xa2\xa2\xd8\xd2\xda\x1c\x41\x2d\x85\xea\x3a\xcc\x62\xb5\xbb\xa9\xb2\xa3\x8a\x2f\x4b\x51\x5b\xce\xdc\x0a\xab\xf4\xf6\x99\x5b\xe9\xd6\xed\x33\x61\x18\x2e\xcb\x8a\x2f\xe3\xeb\xa6\x57\xed\xea\xff\x81\x94\x6e\xc8\x9e\xf4\xdb\x1e\x7b\xc1\x46\xd2\x6d\x47\x0b\xf6\x01\x4d\x7b\x1f\x0c\x4a\xc5\xcc\xa4\x56\x63\x65\xb8\x99\x20\x66\x4b\xae\x49\xc3\x93\xdf\xe6\x83\x62\x98\x69\xef\x1f\x4d\x05\x98\x7b\xdd\xed\xac\xb1\x90\xf5\x18\x2d\x6a\xff\xf9\xc1\xa2\xf2\x15\x42\x72\x49\x1a\xad\x62\x62\x67\x92\xad\xce\xc4\x49\x89\xbf\xdc\x52\x41\x8b\xc0\xa0\x41\x35\x61\x92\x08\x15\x93\xf9\xc5\x85\xd2\x59\x3c\x8f\x7b\x4c\x89\x0d\xff\x27\xbd\xe0\x47\x3c\xfa\x63\xa3\x09\xeb\xa2\xef\xe0\x2a\x20\xda\x7f\x08\x52\xac\xcf\x84\x2a\xd7\x22\x58\x4e\x95\xc2\x62\x56\x34\x54\xbc\xba\x74\xa4\xa5\xc2\xe7\x6f\xa3\x61\xb7\x2a\xfb\x69\x8f\x5d\x53\x0e\x57\x74\xe9\xfe\xaf\x78\x2c\xba\x22\xa3\xbf\x64\x7d\x25\xf8\x6e\xfb\x9b\x9a\xe3\x78\x1d\xb2\x88\xec\x3b\x4d\x43\xab\x80\x38\xeb\x62\xb4\x17\xad\x89\x90\xbd\x67\x82\xfd\xff\xcd\x09\x6d\xb1\x00\xd5\xf8\xb8\xdc\x9b\xb2\xd2\x7f\xc3\x44\xf0\xe6\xd6\x46\x77\x2d\x2c\x12\xeb\x88\xd7\xa1\x9b\x5a\x8a\x25\x19\x3f\x8b\x09\x94\xc3\x6a\x30\x04\xa5\x5d\x6c\x96\x36\xa8\x5d\x2a\x33\x90\x69\x2d\x7b\x4e\x29\x45\x1d\x31\xa8\xca\x99\x67\xa0\xf4\x96\xf7\x74\xc3\xa7\xa3\x72\xba\x92\x5f\x41\x0c\x72\xb9\xa1\x27\x29\x46\x8a\x65\xb9\xae\x53\x54\x08\xdb\xd9\x61\xa1\x7b\xc8\xfb\x3c\x4e\xca\x41\x1a\x8d\xb4\x7e\x60\x02\x0d\xeb\x5d\x47\xc9\x18\x8e\x0b\x38\x61\xab\x4c\x5c\x91\x99\x80\xfd\x6d\xb6\x66\xf6\x96\xbd\xec\xb6\x8b\x0f\x68\xb5\x43\x1b\xbf\xb4\x27\x38\x3f\x5f\x0f\x51\xfd\x5b\x11\xdb\xf8\x89\x49\x76\xc1\xc3\xe0\xc6\xd7\x79\xc1\x51\xf9\x6e\xa2\x32\x72\x2f\x36\xc8\xf1\x09\xef\xbb\xb6\x48\xa1\xdd\xeb\x4f\x9e\x13\xa3\x8b\xc9\xa0\x1d\x8b\x9b\xd4\xed\x2e\xae\x54\x00\x25\x74\x9e\x13\x43\x69\xef\x44\xaf\x33\x71\x93\x2f\x6f\x05\x7f\xe2\x51\xb0\xa1\xc2\x3d\xfb\x3b\x11\x41\x79\xd9\xc3\x19\x7f\x77\x82\x1d\xdb\x02\x65\xa0\x06\x30\x83\x27\x95\xb7\x4c\x04\x59\xd3\x8d\x5a\x82\xab\x8a\xc0\xd7\xc1\xc9\x75\x0c\x9a\xed\x63\xcf\x5c\xf0\xf6\xe2\x3b\x17\xbc\x7d\x54\xac\xb3\x1e\x5e\xdd\x62\x3f\xe0\x31\x75\xcb\x1f\x6d\x72\xf0\x6b\x6a\x25\x36\x02\x02\xab\xe9\x1c\x75\xa3\xaa\x7c\x23\xb8\x37\xb6\xa8\x29\x58\x9d\xbd\xcc\x63\x54\x55\x7f\x74\x51\xa0\x2c\xaa\x16\x0b\x1a\x13\x20\xb8\x49\x05\xf3\xab\x4b\x4e\xcc\x37\xdd\x5c\x19\xa1\x5b\x1c\xc9\x8f\x70\xa5\xb3\x57\x1d\x74\xc8\x3f\x28\xb4\xa6\x29\xd8\xeb\xcb\x2c\x78\x8b\xf7\xb7\x3c\xd8\x6b\x83\xa0\xab\x5f\xd8\x25\x09\xde\xb5\x9d\xfd\x9f\x10\x1e\xc4\x3e\x6e\xc5\x16\xfe\xa2\xc7\xa6\xb6\x8a\xa1\xfb\x5b\x19\x56\xf8\x03\x76\x58\xe1\xf9\xcb\x18\x56\xd8\x66\xd7\x6e\xa3\x4b\xe8\x73\x17\x4d\xbd\xb8\xf3\x50\x2b\xc6\x9e\x68\xb1\x07\x2e\x55\xcd\x25\x57\xce\x06\x67\x5e\xff\x2d\xad\xe0\xd4\x46\x37\xdd\x60\x66\x73\xee\xd5\x68\x8c\x60\xa2\x72\x5e\xae\x71\x66\x7c\xcc\x63\x1f\xf6\xd8\x53\xf2\x81\xc8\xa4\x58\x3d\x46\x54\xc8\x8f\x7b\xec\xc1\xcb\xa3\xc4\x63\xeb\x9e\xbd\x74\xdf\x69\x2c\x7a\xb1\xc8\x07\x65\x70\x4f\xed\x83\x4a\xb9\xbd\x0f\x2f\xf3\xb5\x63\x4a\x88\x53\x66\xa4\x7b\xae\x47\xd6\x43\x3c\xda\x87\xec\x9d\x07\x5c\x24\xc9\xc1\x00\x4f\x0f\x48\xa7\x99\x8a\xe2\x8c\x58\x83\xac\x5d\xc8\xda\xf8\x9f\xfb\x83\xfb\x9b\x6f\x61\x6f\x6a\xa9\x47\xdb\x1f\xaa\x5e\x3a\x60\x7c\xec\x4d\x35\x8b\x9b\xf3\x2c\x7e\x76\x1f\x5b\x57\x21\xe8\x59\x30\xa5\x43\xd0\x61\x27\xd9\xb0\xcc\x72\xfb\xc8\x39\x1b\xb7\x76\x57\xf4\xef\x40\xf4\xff\x82\xed\x36\xf9\x99\x1d\x12\xfe\x5c\x35\x76\xf8\x5d\x6d\x69\x67\xda\xd2\x13\xde\xf2\xd6\x7b\xc7\x6d\xfe\x2d\xda\x11\xde\x28\x47\x6a\x9b\x83\x76\x80\xcb\xa5\x0a\x27\xe7\x1b\xdc\x73\x82\xb5\xf1\x40\xe4\x6d\xda\xa5\xad\xec\xcc\x30\x15\xa5\x2c\x59\xac\x03\xe6\xd1\x59\x47\xb4\xdc\xc9\x4e\xd8\xe1\xb0\x37\x06\xd7\x9a\x70\xd8\x2a\xe7\x42\xf6\x23\xc4\x23\x0c\xc9\x1e\x14\x72\xb2\x7d\xb8\x58\xdd\x1f\xdb\xef\x70\x15\xd5\x2b\xe4\x62\x26\xca\x2a\xf9\x3f\xb2\xdf\x62\x84\x95\x57\xea\x12\x8d\x52\xae\xd1\x38\x81\x6d\x01\xd1\x43\x0c\x3a\x55\xce\x07\xa2\xc0\xbc\xe1\xcc\x98\x28\xd1\x84\x8d\x65\x14\xb1\x28\x90\xfb\x23\x3b\x54\x61\x94\x52\x37\xe9\x44\x59\xd5\x86\x79\xa3\x8e\x26\xf1\x70\x90\xe2\x81\xb4\x4d\x4c\xb8\x80\x9b\x30\xc2\xbc\x41\xf2\x74\x09\x20\x8e\x10\xc5\x8a\x2b\x9a\x7f\x63\x2f\x7b\x59\x8b\x1d\x88\x06\xc9\x5d\x72\x7c\x4a\xff\x2f\xbc\xe0\xf7\xbc\xf9\xc5\x05\xfc\xb3\x29\x24\x59\xdd\xac\x59\x82\x30\x96\x42\xb7\x42\x2a\x54\xfd\x61\x5a\x25\x83\x14\xbd\x34\xab\x58\x60\xdd\xee\x96\x8d\xa8\xa3\x94\x44\xb4\x48\x8b\x2c\x6a\x1d\x01\x04\xc6\x70\x80\x36\x16\xce\x24\x83\xf7\x75\xe9\x26\x77\x1d\xfb\x38\xe4\x3c\xb8\x36\x20\xc8\x8c\x28\x4d\x37\xb3\x12\x7c\xd0\x63\x4f\x52\x25\xc3\x14\xf2\xdf\xee\x05\xaf\xd4\x03\x0c\x97\xc8\x90\x82\x88\x91\x51\xca\xd7\xe5\xda\xd2\xe3\x0d\xb3\xd0\xd8\xa3\xe4\x8c\xb3\x75\x39\xce\xe7\x33\xb4\x71\x80\xe1\xc7\xc2\xf1\x00\x42\x9c\x4a\xb1\xbc\x5c\x42\xdd\xff\xd8\x63\x07\x8c\x15\xfa\xf3\x5e\xf0\x41\x5d\xef\x5a\xaa\x57\xcd\x3a\x3c\x5e\x47\xe7\x9b\xda\x05\xa6\xe3\x41\xf4\x3c\x09\x19\x0f\xae\x9d\xe9\xe6\x79\x50\x0f\xab\xb6\x6c\xd0\xfc\x50\x37\xcf\x0f\x21\x67\x23\x24\x64\x5b\x03\xb7\x51\xb9\x9b\x34\xf3\x27\x3c\x86\x33\xd8\x7f\xbd\x17\xac\x3f\x20\x8a\x15\xb7\x71\xe7\x1a\xa8\x97\x09\x8e\x71\xa5\x6c\xf3\x34\x39\x27\xe6\xf8\xaa\xa8\xda\xf0\x46\x9b\xaf\x47\x55\xa7\xd7\xe6\x1d\x70\x55\xb5\x79\x1d\x29\x7d\x50\xe4\xe7\x47\x17\x33\x0c\x9f\x7c\xda\xa6\x78\x5d\xe3\x7b\xa2\xff\xfa\xa7\x05\x6f\xf3\xd4\x5f\x96\x43\x47\xed\x65\x84\x0d\x36\xca\xaa\x9e\xa8\x92\x8e\xd5\x83\x3a\x73\xd8\x8e\x65\x4d\xb5\x85\x70\x2d\x2a\x92\x7c\x58\xea\x90\x50\xd2\xce\x80\xa0\x49\x61\xb9\x46\xc4\x55\x91\x2b\x06\x80\xbc\xcb\x5f\x64\xce\x6a\x6d\xae\x2a\xf6\xa8\xab\x2d\xff\xc1\x53\xd8\x9f\x78\x00\xb0\xd0\xbd\x37\xc9\xce\xf9\x5f\xf2\x82\xcf\x78\xea\x2f\x1c\x91\xfb\xcf\xdc\x5b\xd7\xa9\x12\x83\xb0\x3c\xe6\x93\xa7\x30\x01\x7e\x46\x44\xf1\xb4\xac\x4e\xc8\x98\xc5\xe3\x63\x19\xca\x08\xe1\x24\x1f\xc8\xd1\x19\x44\xab\x91\x29\x5d\x03\x9a\xce\x86\x47\x8f\x40\xf2\x7f\x54\xa2\xbd\x08\xb0\x83\x14\xad\xc8\x20\x8d\x32\x72\xa8\xc2\xe1\xae\x9f\x53\xe6\xdb\x6c\x78\x74\x56\xbd\xe6\x6c\x0d\x7f\x3c\xc9\xf6\x4b\x29\x97\x64\x43\xe1\xff\xee\x64\xf0\x1b\x93\xea\x2f\x05\x54\x24\xd7\x33\xb1\x51\x0d\x4b\x51\x20\x68\x3a\x82\xdf\xaa\xe4\x09\xca\x6a\xc8\xbb\x1c\xd4\x60\xed\x12\x41\x89\x6d\x5b\x14\xb5\x39\x1b\xdc\xce\xbd\xa8\x44\x34\x07\x98\x0e\x1a\x81\xd2\x66\x0a\x92\x3d\x3b\x88\x1e\x1e\x0a\xad\x50\x58\xd8\x0d\x49\x59\xc2\x0d\x84\x79\x57\x51\x79\xa4\x97\x58\xfa\x69\xa4\xbd\xb9\xd0\x99\xb0\xa4\xaa\x5c\x56\xb3\x48\x84\x22\x34\x11\xe7\x2b\x65\xb4\xb6\xb1\x30\x69\x6e\x1d\xc7\x5e\xc1\xa3\x02\xf0\x54\x94\x15\x62\x48\x96\x15\x54\x8b\x54\x5c\x05\xeb\xa3\xba\x8c\x5a\xea\xa6\x63\xc8\x76\x77\x7a\x51\xb6\x8a\x30\x52\x06\x93\x2a\xe2\x5d\xb1\xce\xfb\x49\x36\x04\xc8\x14\x39\x81\x11\x29\x03\xbb\xa4\xc6\x5b\x40\xe3\xae\x1d\x50\xe0\x20\x54\xa8\xbd\x09\x20\xdd\xe1\x48\x62\x57\xea\x6c\x7b\xc5\x85\xa5\x7a\x8a\x7a\x9a\x70\xa8\x92\x02\x4e\xfe\x18\x10\xd0\x56\x20\x44\xa3\x7c\x88\xf5\xa1\x88\x02\xea\xca\x2a\x3f\x27\xc8\x09\xaa\xac\x04\x04\xf0\xed\x4e\xb3\x3f\xdc\xc3\xfc\x42\xf4\xf1\xb0\x25\x8f\x48\xc7\xf3\x61\x56\xf9\xbf\xbe\x07\xf2\x73\x6e\xb8\x2e\xf8\xf9\x3d\xe3\xb7\x2d\x7a\x7f\x9a\x5e\xe5\x70\xa5\x94\xa3\x2c\xef\xe1\x39\x2b\x33\x5a\x09\x62\x0a\x60\xd0\x5e\x45\x82\x43\xc1\xfd\xa8\x51\x37\x81\x0e\x64\x12\xa1\xab\x38\x73\x14\xf8\x7d\x4c\x2e\x98\xbc\xd0\xe4\x1d\x68\x94\x2d\xc1\x4e\x52\x9f\xf4\xba\xe6\xaa\x52\x25\x1f\x22\xf7\x6f\x6d\x85\xaa\x11\x48\x45\xb7\x42\x8c\x12\x64\x2a\x20\x60\x22\xf2\x02\x38\xa8\x81\x6e\x45\x61\x50\x51\xe3\xe1\x53\x22\x21\xe0\x1a\x82\xfd\xd1\x58\xf0\x9d\xde\x30\x3b\x07\x2e\x70\x73\xb7\xb2\x00\x27\x81\x23\x0e\x1e\x3a\x6c\xda\x53\x08\xea\x3a\x9c\x8e\xf5\x36\x61\x43\xb4\x24\xba\xa4\x96\xa8\xa3\x45\x9e\xc6\x0a\xb3\x6d\x6d\x36\x9c\xbd\x5e\xd1\xb8\x40\x58\x8b\xfe\x06\x4e\x79\x0d\xaa\x64\x05\x68\x34\xcf\x94\x6b\x45\x59\x25\x7d\x90\x99\xd7\xe2\xd2\x4b\x1e\x11\x8a\xf4\x5a\x81\x35\x84\xfc\x38\x06\x99\xa8\xf3\x8d\xfc\x6e\x21\x60\x8f\xd8\xa8\x6c\x14\xa6\x20\x1a\x0a\xfa\x03\xfc\xe9\x6e\xc2\xd6\xbf\x9a\x18\xe7\x15\xf9\xd1\x89\xe0\x65\x13\x4b\x16\x0f\x4f\xcd\x0b\x80\xc2\xe1\x50\x69\x1d\x9e\x6c\x8f\xb6\x39\x97\xa3\x32\x8a\xf4\x04\x20\xfc\x56\x46\x2a\x5a\x46\xd6\x48\x33\x3d\xa2\x08\x50\x46\x37\x58\xaf\x24\x67\xc0\x03\x37\x34\x11\x01\xc0\x8c\x87\x70\x1b\x24\x5f\xad\x22\x41\xcf\x46\x84\x9e\x61\xd6\xcf\x63\x54\x63\x56\xa2\xce\x39\x25\x32\xc8\x26\xb4\x9d\xdd\xee\x4a\x9f\xf2\x3a\x79\x86\x3e\x9d\xce\x68\xba\x83\xa7\x35\x48\xd9\xd0\x42\xba\x33\xb2\x25\xd1\xcb\x0e\xb0\x7f\xdc\x00\x8d\x73\x92\x76\x8b\x25\x29\x61\x2a\xff\x4b\xfb\x83\x5f\x98\x70\xaf\xe1\xe6\x8f\xaa\xb8\x9c\x55\x71\x5c\x08\xa2\xe4\x21\xf0\xb9\x7e\x3f\xcf\xd4\x16\x02\x34\x2c\x1a\x0d\x2e\x82\x29\x4c\xb7\xd4\xc6\xa4\xd7\xe3\xf1\xa8\xa8\x44\x99\x44\x99\xdc\xf7\xe3\x61\x07\x9e\x9a\xd7\xe5\x9f\xe7\x8b\x58\x98\xc3\x78\x0e\x1e\xab\x39\xc6\xf9\x8b\x18\xe7\xdc\x3c\x3e\xc7\x1f\x7c\x51\x90\x0c\x82\x39\x1e\xcc\x1e\x09\xe5\xff\x85\xb3\xc1\xa3\x6d\xee\x5e\x3c\x1a\x1e\x0d\x1e\x7d\xa8\x0d\xaf\x42\xe9\x73\x80\x2a\xf9\xe0\x8b\x02\xa9\xe8\xcb\xe7\xa2\xa0\xcd\x03\xd9\x8a\x60\x8e\xdf\x74\xc3\x8d\xd7\x43\x11\xea\xe6\x8a\x75\xf3\xd8\x91\x9b\x1f\x7d\x88\x71\xfe\x28\xa3\x2d\x8a\xe2\x6f\xc6\x5a\x4b\xf3\x57\x9e\x75\x61\xe2\xcd\xc1\xd7\xa3\x39\xfe\x20\xd7\x35\x9d\x93\x9f\x6a\x73\x5d\x49\xf8\x9b\x53\x45\x57\xdc\x47\x8f\x1d\xb9\xd9\x7e\xf2\xd8\x91\x9b\xf9\x43\x8e\x2e\xf7\x63\x7b\xd8\x37\x3c\x76\x40\x8f\x94\x54\xe6\x1e\xf3\x16\x16\xed\xb1\x23\x38\xca\x2e\x61\x22\xa2\x37\x1f\x93\x35\x49\x5f\x41\xe6\x55\xc5\x14\x55\x88\x28\x06\x3f\xae\x28\x85\xd5\xb6\x46\x0e\xab\x32\xea\xa2\x59\x33\xcd\x23\xb9\x7c\x90\xd4\x02\x97\x97\xb5\x7a\x87\x55\x92\x26\x8f\xb8\x58\xda\xd7\xb1\xa3\xec\xc8\x96\x58\xda\x6a\x82\xd2\xe0\xb3\x7f\xdd\x62\x4f\xcb\xf2\x4a\xae\xbd\x91\x9e\x10\xfe\xeb\x5b\xc1\x67\x2e\xa6\xd5\x2b\xc3\x4a\xef\xa2\x1d\x4d\x9c\x5b\xeb\x02\x6b\x63\x51\xb4\x70\xf2\xf9\x91\xa8\xb8\xac\x72\xd9\x93\xed\xaf\xa2\xa2\x82\xd0\x2c\xad\x39\x40\x51\xdd\x28\x49\x65\x51\x50\x12\x20\x5b\x23\x49\x3f\x40\xec\x6d\xf0\x68\x2a\xa7\xbb\x7e\xf2\x32\xf4\xd5\x8b\xd9\x1e\x68\xae\x5f\x06\xc7\x16\x4d\x6a\x6e\x8d\x04\xc0\xee\x1d\xbb\x0b\x2f\x02\x13\xa1\x5e\x01\xf9\x31\xf6\xd5\x3d\x4e\x52\x44\x37\xcd\xd7\x49\x76\x69\x7b\xcc\xbd\x52\xc3\x3e\x43\xfa\x8a\xff\xde\x3d\xc1\xa2\x73\x45\x9b\xfa\x08\x58\x8f\x60\xa6\x8d\xe5\x55\x6d\x19\xa4\x98\x8a\xf3\xa2\x33\x04\x0b\x43\xb2\xda\xab\x78\x96\xaf\x37\x32\x1e\x7d\x7d\x82\x7d\xc2\x63\xfb\x1e\x1e\x0a\xa9\xeb\xfa\xef\xf7\x36\x61\xde\x68\xaa\xf5\x73\xf0\xc5\xe3\xb6\xbe\x1b\x14\xcb\x54\xde\x32\x39\x8a\xc6\x33\x94\x35\xf0\x1b\x7a\x34\xe8\x79\x87\x36\x91\x94\x7f\x1d\x98\x81\x67\xbb\xa4\xab\x48\x9f\x92\x92\x2f\x07\xf2\xfb\x22\x58\x0e\xd9\x5b\x15\x49\xc5\x9b\x5a\xc1\x2b\x5a\xe6\x11\x7a\x82\xc8\x24\x80\x60\x22\xd4\x17\x2d\xbb\xc5\xd6\x1d\x39\x1c\xe4\x10\x77\x92\xac\x45\x29\x2c\x98\x1e\x9d\xd1\x22\xa2\xbc\x19\x66\x55\x92\xe2\x02\x51\xd4\x42\xea\xdd\xbc\xa0\xa7\xf0\x64\xdb\x47\xe5\xad\x10\x08\x8e\xad\x6b\xb6\xc3\x0a\xa1\xed\x55\x16\xd8\x64\x16\x7c\xc2\x5b\x66\x4f\x77\x4c\xa1\xc3\x0c\x48\x02\x16\xfc\xbb\xa6\x79\x9c\xc8\xf3\x7a\x3f\xc9\xa2\x2a\x2f\xe6\x00\xff\x95\x71\x1c\x89\x72\xba\xca\xa7\xad\xfb\xe2\x8e\x11\xca\x72\x6a\xd0\x1c\xa7\x59\xc0\xd8\x87\xf6\x3b\x68\x5b\x63\xa6\xd0\x5d\xa3\xe3\xae\xd1\x71\xd7\xe8\xb8\x6b\x74\xdc\xa0\x7e\x9f\xd8\xc3\x9e\xb5\x45\xc4\xd5\xdd\x52\x9e\xc8\x15\x93\x2e\xe6\xf1\x3c\x3d\x20\x0a\x4d\x65\xe1\xff\xef\xc9\x40\x6c\xf5\x50\x3d\xdc\xbc\x8a\x2a\x3a\x3a\x6e\xf0\x26\x97\x8a\x21\xe4\x3b\x4a\x71\x01\xfb\xba\xda\x4e\x2f\x78\x94\x0d\xe4\x48\x85\xbf\x9e\x60\xef\xf4\x98\x2f\x8f\xde\x67\x8b\x28\x2b\x91\x66\x23\xe9\x0b\xff\x0d\x1e\xbb\xf1\x12\x5c\x8f\xf2\xdd\xe0\x7b\xc6\xcb\x73\x0e\xf9\xc0\xd0\x48\x9b\xad\x62\x2f\xd0\x4f\x2b\x98\x70\x29\x13\xc8\x94\x5a\xe5\xca\x9a\xc6\x56\xd9\x3e\x32\xe4\xf8\xcf\x0b\xee\xa3\x9f\x38\x3b\x7a\xc3\x7e\x94\x4d\x4b\xe5\x0d\xd4\x24\x71\x7e\x90\x46\x99\x22\x8d\xd3\x1e\x75\x0a\x4d\xb6\x92\x51\xcd\xa7\xed\x31\x5e\x64\x7b\x0b\x11\x95\x79\xe6\xdf\x19\xdc\x8c\xbf\x54\x1b\xe8\x2f\x15\xa4\xa7\x1b\x71\xa8\xa4\xe6\xe9\x02\x1d\x63\xd3\x92\xce\xc7\x5a\x08\x6e\x2d\x35\x9d\x8e\x1a\x59\x93\x59\x65\x7a\x65\xea\x2c\xe4\xd2\xdc\x19\xa5\xa5\x68\xf3\xfb\xd1\x7a\x73\xd8\x2e\xf4\x66\x52\x27\x66\x83\x7f\x02\x58\xe8\xee\x8c\xb1\x42\x0d\xe3\xb1\x16\xbe\x7f\x2f\xfb\x27\x8e\x42\x98\x17\x71\x92\xe9\x3d\xf0\x5e\x11\x95\x02\xbc\x7f\xaf\xd9\x1b\x4c\xe9\xbf\xc8\x93\x3f\x4e\x72\x72\xaf\x31\xe2\xaa\xd9\xf5\x3b\x7b\xd8\x5b\x41\x62\x65\x62\x1d\x26\xd5\xeb\x3c\x76\xeb\x25\x4c\xaa\x53\x49\xa7\xc8\x61\x66\x9d\xd1\x65\x61\x3d\x2a\x24\x19\x15\x2e\x30\x73\x0f\x4d\x39\x50\x2d\x34\x49\xf7\x22\x1a\x1b\xf2\xf5\xe3\x5c\x84\x1a\xb3\x57\x78\xec\x60\xd4\x01\x45\x04\x2a\xf9\xc8\x0e\xeb\x38\x67\x15\xb6\x59\x2d\xb1\x66\xeb\x51\xc9\xe9\x85\x38\x64\x82\x3d\x19\x2b\x8f\xb1\x9a\xd5\xc8\x5f\x0a\xee\x74\xaf\xb8\x1b\x71\xa2\xae\xd2\xdc\xb1\x9b\xee\x7c\xc8\x99\x8a\xbf\xee\xb1\x6f\x81\xab\x27\x48\xd1\x5d\x02\x50\xea\xd2\x7f\xb7\x46\x26\x7a\xcc\x6b\x7a\x00\xdb\x13\x2b\xf5\x58\xe9\x7c\x71\x12\x83\x25\x1d\x36\x00\x6a\x58\x26\x50\xf7\x59\x8f\x12\x30\x56\x75\x73\x29\xa6\xa9\xa9\x10\xda\xa9\xd8\x66\xfa\x22\x2a\x81\xec\x92\xb4\x01\xe8\xae\xbc\x8b\x03\x86\xb4\x4f\x22\xe6\x67\xd4\xc8\xbb\x06\xae\x82\x3d\x15\xbe\x67\xc4\x4d\xe9\x3f\x5f\x35\x62\xa1\x7e\x6b\xdc\x76\x5b\x59\x37\xad\x09\xb3\x22\xaa\x75\x21\x32\xea\xcf\xd2\xfd\xe6\x05\x17\xac\xd5\x64\x50\x52\x44\xd5\xd2\xc2\x09\xa0\xdb\x81\xb0\x9f\xff\xb2\x3f\x38\xe6\x5c\x69\x44\x6a\x55\x0f\x6c\x1e\xd4\xf3\x81\x5d\x60\x8c\x1d\xc7\xa5\xa6\x2a\x2a\xaa\x13\xfc\xa3\xa4\x31\x2a\x4a\x8d\xc5\xf6\x71\x39\x37\x9c\x01\xbb\xa1\x50\x3b\x08\x85\xfa\x4d\x3b\x14\xea\x57\x76\x18\x0a\xf5\x7d\x3a\x0a\x16\x7d\x63\xca\xdb\x7b\x95\x22\xa4\x9e\xf0\xba\x5b\x07\xf8\x1c\xf7\xe7\xb7\xca\x5a\x76\x24\x49\x23\x64\xcf\x37\xf6\xb3\xd9\x4d\xa6\x66\x73\x76\xb7\xff\xbe\xfd\xc1\xf1\xe6\x5b\xe3\x3a\xca\xb6\x08\xcd\x62\x17\x8c\x62\x1f\xfb\x86\xdc\x66\xe1\xde\xc9\xa2\xc8\x0b\xff\x0b\x9b\x81\x2f\x35\xd7\x1a\x5e\x0c\x7e\xda\x3b\xab\x14\x49\xf4\xec\x89\xac\x93\x0f\xa5\xf4\xb1\x52\x56\xaa\xb1\x8c\x72\x29\xe4\x46\xae\xe5\x66\x08\x47\x4f\x93\xd0\xbb\xad\x74\xf5\x6d\x25\xa9\xb3\xf7\x18\xaa\xb6\xd8\xff\x97\x5e\xf0\x2f\xbc\x05\x27\x83\x85\x52\xfa\x93\x92\x97\x43\xa0\xe7\xea\x0e\xd3\x74\x64\x88\xc8\xae\x52\x3d\x9d\xdc\xca\x4f\xb4\x98\x1f\xe9\x31\x3d\xa5\x56\xde\xcf\xb6\x82\xd7\xb4\xee\x1f\xe4\x99\x55\x55\xfa\x4a\xdb\x09\x03\x28\xf9\x40\xfb\x5d\x74\xc6\x8d\x9d\x79\x61\xb3\xc9\x35\x55\x15\xf5\x09\xe5\x0b\x22\x57\x4f\x92\x55\xb9\xed\x61\x7d\x6e\x94\x54\x77\xe6\xc5\xbc\x46\x0f\x38\x05\xee\xb0\x4e\x94\xa6\xe5\xd5\xea\xb6\xc7\x6b\x27\x42\x6b\xae\xc3\x3c\x47\x40\x83\xab\x30\xcf\x1b\x90\x13\x76\x3a\xcf\x2f\x0a\x8c\x81\xbd\xdd\x63\xf7\x5f\x72\x9a\x65\x2d\x38\xfb\xbe\x02\x9d\x92\xf3\x72\xcb\xf5\x4f\x07\xf7\x6e\x76\xdf\x4d\xf7\xab\x3d\x89\x86\x4c\xda\x63\x61\x07\x0f\xd9\xbf\x77\x3d\x6c\x2a\x7c\xf9\x8c\x00\x9b\xda\x92\xa8\x40\x5b\x7b\xe7\x81\xa0\x76\xa9\x49\x5d\x33\x4f\x6c\xa0\xa8\xbd\x62\x37\x81\x68\xc7\x8a\xda\xfb\x3d\xa5\xa9\xfd\x9c\x17\xe4\xf7\x92\x76\x66\x77\xfd\x36\x89\x50\x75\xe6\xf2\x7a\x5e\x9c\x4b\xf3\x28\x2e\x67\x3a\x3a\x7e\xb6\x9c\x29\xb0\x44\x59\x19\x73\xd9\xd6\xfd\x66\xd8\x34\x7b\xe6\x96\x71\xf0\xa6\x62\xbb\x4a\xdf\x0e\x94\xbe\xcf\xd8\x4a\xdf\xc7\x77\xa8\xf4\x7d\xbf\xd7\xac\xf5\x5d\xcd\xc6\x3d\xe1\x7d\xf7\xd6\x9a\xdf\xf5\xfe\xb1\x69\x27\x5a\x5b\xe9\x7b\xae\x2c\xaa\x67\xff\xbc\xf6\xa2\x18\xb1\x50\xd3\xfb\xe2\xde\xe0\x82\x57\xbf\xba\x75\x7e\xed\xd5\xa2\xc5\xaa\xd1\x58\x3d\x9d\x4a\xdd\x90\xc7\xea\xd5\x7b\xd8\x27\x3d\xd6\xf4\x98\xff\x73\x3b\x24\x47\xca\x1a\x0a\xad\x93\x35\x5f\x4e\x7a\xa4\xcb\xca\xc7\xf5\x17\x36\x1f\xd7\x7f\xbe\x1c\x7c\x5c\x6f\xbb\x7a\x7c\x5c\x6a\x4a\xd5\x89\xdb\xae\x38\x4f\x57\xb8\x63\xa2\xae\x1f\x6d\x39\xf9\xd1\xca\xcd\x8e\x8a\xdd\xe9\x3c\x16\xf3\x5d\x18\x85\x91\xff\x35\x2f\x78\xfe\xf8\x65\xad\x18\x74\xf2\xac\xac\x8a\x28\xc9\x94\x6f\x15\xfd\xb1\x80\x39\x92\xe5\xb1\x06\x1b\xc1\x83\x04\x79\x72\x91\xea\x97\x4c\xe8\xae\x31\x76\xc4\xd6\xd9\x7e\x82\x98\x88\xfd\x73\xdb\x08\x0d\xb0\x79\xb9\x82\x39\xe5\xab\xb5\x60\x47\x7a\x72\x88\x81\x9f\x6b\xac\xb2\x4a\x89\xef\x8b\x2a\x64\xbf\xfd\x0f\x1c\xbe\x79\xb5\x63\x4a\xd1\x23\xba\xc3\x74\x49\x20\xb3\xf6\xcf\xfe\x83\xe0\xa6\x79\x5e\xbb\xba\x09\xad\xb6\xf5\xa4\x3c\x78\xaa\xa9\x75\xc1\xdb\x5f\x89\xfe\x40\x6a\x3b\x17\xbc\x83\x84\xa0\x3e\x46\xa7\xfd\x91\x6f\x65\x3f\xd2\x92\x1d\x02\xf2\xb5\xf4\xbf\xbf\xa5\x8c\x86\x7f\xea\xa9\x8b\xea\xdb\x0a\x95\xcd\x8e\xad\xa4\x27\x68\x2d\xe2\x2c\x3e\x4b\x9f\x55\x81\x38\xe8\xec\x56\x65\x29\x68\xab\xac\x34\x44\x96\x48\x0f\x99\x64\x72\xc1\x54\x89\x21\xb7\xaf\x14\xc1\xa9\x2a\x12\x93\xe3\xa5\x94\x5e\x4b\xe2\x61\x94\x9a\x72\x81\x47\x91\xf8\xac\xac\x08\x60\x65\x18\x86\x48\xcd\x61\x66\x79\x62\x63\x0b\x4b\x6b\xd6\x35\x6c\xfe\x5c\x8b\x7d\x4b\x41\x09\x45\x77\x27\xf2\x70\x32\x82\xe8\x0e\xff\x0d\xba\x77\xfe\x97\xd7\xf4\x80\xea\xa9\x7e\x74\x3e\xe9\x0f\xfb\x4e\x4f\x51\x66\xa1\x45\x08\x29\xe7\x85\x9c\x2b\x18\xd4\x4a\x1d\x63\x8d\x26\x20\x77\x50\x92\x63\x0f\xbf\xa2\x22\x8d\xdd\xab\xaa\xc1\x68\x96\x00\x01\xab\xbe\x86\x11\x94\x35\x0e\x50\x13\x37\x84\xbe\xd0\x78\x6c\xb6\xd1\xf6\xea\x22\x78\xe9\x98\xef\xd9\x23\x6e\x7f\xbd\xc3\x16\xb2\x6f\xbe\x1c\x42\xf6\xf3\x9e\x2d\x64\x23\x92\x9a\x0f\x0f\x45\x31\x02\xd8\x32\xdc\x39\x6c\xfa\x72\x20\xb6\x27\xbf\x14\x4c\x09\x0e\xa7\x44\x60\x17\x87\x55\x68\x1e\x90\x9b\xb5\x5a\x1a\x87\x48\x22\x5f\xbc\x16\x2d\xab\xb1\x96\x88\x75\x50\xa7\xa5\xfc\x97\x67\xfd\x69\xb2\x5b\xcf\x60\xa1\x33\xcf\x80\xff\x4e\xeb\x08\x65\xf6\x37\x2d\x66\xaf\x45\xff\x1b\xad\xe0\x4b\x2d\xeb\xc2\x26\x44\x0c\xd8\xdc\x55\xf9\xdd\x8c\xa4\x9e\xbd\xf4\xf1\xa8\xab\x9e\x85\x26\x03\xde\x99\xe2\xce\xac\x4d\x2e\x8a\xfe\x2f\x55\xd0\x35\x84\xc5\xab\xdd\x28\x13\x95\x6c\xd5\x98\x5b\xa5\x14\x90\x43\x11\x97\x5c\x2a\x35\x27\x4e\x2f\xcd\xf4\xf2\xb2\xb2\x02\x01\xba\x79\x9a\xe6\xeb\xd8\xcb\x40\x29\x9d\xcd\xc9\xee\x9e\x56\x62\x6b\x1a\xf7\xca\xd0\x6a\x71\x48\xd3\x2b\x2c\xd7\x3a\x61\x07\x33\xbd\xc3\x34\xef\x40\xbc\x81\x28\x04\x0f\x1a\x0a\x08\xc0\x61\x12\x65\xc0\x12\x4a\xe7\x78\xab\x71\xdc\x9c\x60\x1c\x87\xcf\xcf\xb6\x98\x16\x8a\xfe\x5b\x5a\xdb\x08\x4c\x5b\xcc\x63\x25\x7b\x00\xaf\xf2\x4f\x3c\xf5\xbe\x1a\x29\x3b\x08\xd8\x75\x3b\xc2\x3c\xb3\x57\x7b\x87\xc2\x7a\x93\xae\x94\x75\xc3\x6e\x37\xe9\x24\x68\x36\x54\x42\xac\x00\xc3\x03\x85\x05\x9d\x54\x9a\x65\x59\x45\x7d\x20\xb5\x1e\x56\x4d\x8d\x85\xe2\xbb\xc3\xb4\x2b\xff\x0b\xf3\xc2\x15\x97\x24\x15\x87\x59\xf2\xf0\xd0\x72\x95\xe9\xb3\x52\x21\xca\x4a\x8d\xb0\x3d\xa3\xd8\x57\x3d\xf6\x64\x3c\x15\x2d\x29\x04\xa2\xcf\x79\x6c\x6e\xcb\x33\xa0\x55\xc8\xfd\xce\xeb\xc1\xeb\x3d\xb7\xbc\x9a\xc2\xbd\xe1\x8b\x6e\x3f\xca\xd6\xe5\x23\x54\x3c\xb0\x3c\x9c\x94\xe3\x22\x14\xdd\x8d\x91\x91\x98\x30\x6d\x62\x48\xd0\xd4\xdb\x14\xfb\x5f\x13\xec\x5b\x50\x81\x38\x9e\x46\x49\x5f\xdd\x28\xfd\xaf\x4e\x04\x6f\x9e\x68\xba\xe3\x06\x62\x74\xe4\x3d\x5a\x01\x20\x98\xe4\x38\x5a\x71\x4f\x1a\x79\x01\xe5\x69\xf3\x44\x6d\x5a\x8b\xfd\x68\x00\xb4\xa9\xb5\xf5\x88\xd1\x2b\xea\xb3\x10\xd3\xb6\x1e\x51\x1f\xa9\x1d\x65\xdc\x2f\x1a\xc9\xba\x85\xfc\xe4\x9a\x14\xa2\xf0\xae\x9b\x7d\x61\x31\x42\xa2\xb3\x14\x03\x92\x40\x6e\xca\x4a\x4c\x11\x10\xce\x61\x52\xb6\xd0\xe0\x98\x64\xf0\x94\x4a\xce\xd0\xd8\x95\x95\x56\x02\xe6\x9b\x3e\x56\x45\xe7\x44\x09\x7c\xde\x22\x06\xac\x0c\x90\xea\x51\x36\xa2\xc2\xcb\x7a\x39\x6d\xb4\xa5\x6a\x8d\x40\xd6\xc4\x09\x4e\x99\x63\x37\xb1\x1b\xb6\x5e\xcf\x88\xd0\x27\xb2\xea\x01\x33\xac\xec\x83\x93\xec\xe9\x83\x3c\x3e\x05\x02\xa5\x2f\xb2\x6a\x31\x4f\x93\xce\xc8\xff\xa9\xc9\xe0\xf5\x93\x0d\x37\xd4\xb0\x61\x7c\xa7\x1e\x72\xb5\xbe\xc9\x2a\x09\xf5\x88\x52\x3a\x09\x0e\x07\x6d\x9c\x8d\x88\x2b\x85\x14\xdc\x71\xc9\xf3\x0c\xf5\x58\x88\xaf\x85\x07\xe8\xec\x0a\xec\xe9\xee\x0e\x3c\xc0\xaf\x27\x25\x5f\xbe\xaf\x80\x30\x66\x88\x26\x5e\x6e\x93\xa8\x1c\xab\x49\x92\x29\xa2\x75\xcc\x38\x89\x45\xc1\xa7\xa4\x3c\x3d\x42\xb9\x25\xf2\xf7\x2c\x00\x58\x1e\xd6\xe9\x30\xd6\x9c\x84\x15\x07\xae\x6b\x0c\x97\x34\x87\x5d\x13\x69\x0c\xbb\x4b\x47\x67\x60\x29\x14\x54\xab\x11\x8a\xd0\x87\x2a\x67\x65\xbe\x81\x00\x1d\x0c\xf2\x32\xa9\x04\x56\x0f\x1b\x1c\xa5\x60\x9c\xab\x92\x35\x61\x37\x7a\x31\x2a\xa2\x34\x15\xe9\xb2\x4d\x51\x8a\x6d\xc5\xe2\x13\x8c\x55\x95\xcf\x20\xd1\xb7\xda\xf3\x95\xee\x8a\x63\xa1\x99\xbd\xa3\xa4\xd2\xe8\x94\x79\x46\x77\x81\xb5\x1e\x8a\xc6\xd0\x28\x50\xa9\xb0\xf6\x72\x49\x74\xdc\x20\x82\x7f\xbd\x87\x7d\x57\xc3\x44\xbb\x37\x8f\xe2\x3b\x28\xa8\x7c\x21\x5b\x2d\x44\x59\xfa\xff\x6b\x32\x78\xad\xd7\x70\x63\x2c\xa4\xcc\xf2\x31\xa5\x79\x14\x4f\xab\xe8\x74\x9e\xd0\x0b\x60\xdb\x9a\xe3\x55\x11\xc9\x4d\xc4\xe4\xe1\xa8\x0d\x5c\xa9\x01\x26\xf2\xbd\x54\x90\xec\x99\x5b\x88\x7b\x3a\xfa\xe2\x04\x7b\x11\xdb\xaf\x36\x75\x3f\x0f\x56\xee\xa6\xdf\xe0\xa3\x11\x95\x8e\x98\xdf\xa0\x4e\x56\x58\xfe\x89\xd3\x4b\x7c\x25\x92\xa7\xb0\xa9\x6a\x34\x48\x3a\xc0\x47\x3f\xff\xdc\x25\xf7\xf5\xd2\x89\xe3\x79\x11\x6b\x25\x03\x7f\x18\xf4\x16\x16\x2f\xfe\x83\x0b\x8b\xe3\xdf\xbb\xeb\xf8\x49\xb9\xae\xee\x1b\x88\x6c\xa9\x8a\x3a\xe7\x36\xfb\xf8\x1f\x7a\x2a\xea\xfc\x77\xbc\xe0\x61\x48\xbc\xa8\x47\x13\x76\xf2\x22\x86\x81\x51\x1d\x8c\x41\xf9\xf2\x6c\x51\xca\x43\x05\x84\x36\x22\x99\x94\xc2\xbb\x4c\xb2\xa6\x11\x41\x39\x9b\x71\x91\x55\xc5\x08\x96\x69\xb5\x7d\x5b\xab\x51\x4e\x0a\xf2\x4e\x3e\xe1\x3d\x83\x7d\xab\x63\x5d\x93\x75\x9e\x86\x98\xa8\x03\xfe\xbe\xa8\xca\xfb\x49\x87\xb1\xaf\x1e\x60\x47\x1b\xca\x59\x42\xf7\xcb\x7d\x4b\x75\xe9\x48\xec\xf1\xef\x3a\x10\x1c\x75\x78\x99\xf5\x0b\x0a\xf1\x14\x6c\x40\x78\x04\xd7\x06\x24\x67\x62\x7d\x63\x3f\xfb\xa8\xc7\xf6\x76\xcb\xb3\xb2\x4a\xef\xf3\x82\xb7\x7b\x77\x26\xa9\xc0\x84\x24\x88\x5f\x86\xf5\x8a\x2a\xfb\x29\x3a\x35\x47\xbc\x5b\x7b\xa6\x1c\x0e\x64\xe7\x1a\xa5\x4f\x4e\x55\xe5\xa4\xc9\x56\x75\x82\xd3\xc9\xf3\x21\x0f\xc4\xf9\xea\xba\xa0\xcd\x83\xf3\xdd\x52\xfe\x27\xab\xba\x65\x10\xf2\x85\xbe\x54\xb6\x12\x79\xfa\x01\xc3\x71\xa1\x33\x72\xf1\x05\xa9\x9d\x59\x07\x45\x67\xad\x9f\x97\x27\xe5\x28\xbe\x2f\x4b\x47\x7e\x1a\x3c\x7f\x0c\x8e\x99\x4f\xc9\xdb\x33\xeb\x45\x52\x89\xc3\x98\x66\x25\x9f\xe5\x20\x9c\x51\x4d\xcb\xd1\xaa\x2d\xcc\xcd\x52\x54\x15\x6e\x17\xe4\x50\x86\x8d\xb5\x74\x9d\x92\xbf\xe9\xb1\x03\xa5\xe8\x14\xa2\x3a\x23\xba\xfe\x87\xbc\x6d\xa8\xae\x98\x4f\xad\xc9\xe2\x82\x97\x7b\x4b\xaa\x00\xcb\x78\x81\x73\x53\x5e\xb7\xa1\x7e\xf2\x15\x15\x28\x88\x0a\x95\x1a\x6e\x00\x82\x2e\x04\x68\x15\x51\x4a\x61\xcf\x90\x1d\x38\x76\xb0\x1e\x23\xf5\xaf\xe4\x56\x2e\x15\x5b\xf6\xc3\x1e\x63\x38\x5b\xe0\x0c\xf4\x68\x30\x78\x40\xff\xa5\xd4\xea\x5a\x18\xa3\x7d\x1e\x32\xd5\xc1\x42\x42\x4e\x1d\x47\x21\xc9\x52\x16\x80\x9f\x8f\x34\x5e\x29\xed\x41\x49\x32\x98\x5b\x0e\x42\xff\x04\x7b\x8a\xa9\x0d\x82\x79\x7c\x68\x22\x78\xd7\xc4\x03\xee\xc5\x7a\xa7\x75\xf2\x81\xae\x12\xcd\x7d\xfa\x92\xae\xa0\xea\x1f\x8b\x17\x2f\x29\xad\x30\x60\x9d\xae\xba\x98\xc7\x87\x4a\xeb\x29\xdb\xbc\x16\x72\x02\xa6\x94\x0a\x25\x7e\xdb\x4a\x4b\x87\x8e\x51\xf4\xfa\x38\x8f\xfb\x49\x51\xe4\x05\x79\x9f\xed\xea\xe0\xf6\x90\xac\xf6\x2a\x90\xa2\x95\x58\x2d\x74\xf2\x67\xc5\xad\x31\x80\x7d\x82\x60\x0f\xab\x5c\x03\x85\xd3\x4e\x8a\xc3\x4b\x30\xfc\xc3\x02\xdf\xae\x72\x1e\xd0\x2d\x58\x42\xa3\x7c\xa8\xf3\x94\x30\xeb\x59\xb7\xae\x6c\xe8\xa7\xd3\xe6\x26\x9e\xa4\x30\xe9\x74\x50\x88\x69\x3c\xc5\x8e\xb5\xa5\x76\xa8\x72\x86\xf4\x65\x07\xd9\x33\x36\xe4\x0b\x46\x15\x0e\x72\x1a\xbe\xc0\x82\x9f\xf2\xcc\xdf\x94\xff\x62\xfb\xea\x6b\xc7\xba\x48\x69\x23\xc5\x50\x21\x35\xc6\xb9\x28\x5d\xb8\xc6\x31\xae\x97\xf5\x5e\xde\x14\x22\x8f\x0a\x9f\xd4\x63\xcc\xc0\x37\x45\xd2\x37\x26\x32\xbc\xf5\x00\xfb\x33\xcf\x4e\x64\xf8\xaa\x17\xfc\xfa\xdf\x9b\x44\x86\x4d\xa2\xce\x3f\x34\xc1\x9e\x92\xe5\x99\x0a\xf8\xbf\xff\xcc\xbd\xa5\xff\x8e\x89\xe0\x87\x27\x4e\xbb\x17\x15\x76\x30\x26\x7c\x46\x05\xa8\xe2\xc3\x22\x55\x0a\x03\xe1\x25\xd8\xdb\x31\x58\x8d\x31\x2f\xe0\x5a\xe7\x10\x87\x23\x0d\x32\x25\xc2\x0e\xeb\x0e\xd3\xb4\xcd\xbb\x49\x26\xf5\xfb\x4a\x0c\xd4\x36\x3f\x88\xaa\x1e\x5f\x4a\xe4\x89\x26\xcb\x33\x8d\x0c\xcd\xa1\x46\x6a\x3d\x18\xca\x9a\x7a\xe4\x08\x7e\x62\x00\xe6\x00\x75\x08\xb4\x39\xb2\xcd\x51\x92\xc2\xc3\xa3\x06\x70\xbc\x90\x03\x70\x11\x18\xc3\x29\x0d\x5d\x16\x39\x52\x48\xfe\x66\x1c\xa6\xca\x61\xa7\x27\x9b\x14\x48\xf5\x16\xd3\xae\x70\x33\x28\x83\xc3\xf2\xaf\x7a\x1b\xa0\x7d\xf6\x7b\x33\xd1\x20\x09\x0e\xb7\xb9\x06\x2d\x5d\xc9\xab\x4d\x21\x71\xdf\x31\x96\x77\xf2\x46\x2f\x78\xe4\x9b\x97\x76\xb2\x49\x55\x7f\xd0\x49\x33\x19\x05\x0f\x5d\x6a\x92\x89\x7a\x6f\x1e\x4c\xb3\x46\x8f\xb2\x73\x44\x36\xab\xc8\x7b\x75\x22\xc8\xe3\x5e\xf0\x6a\xef\x01\xf9\xd3\xad\x02\x5e\xc2\x89\xad\x87\xfa\xde\x7b\x49\xd1\xc0\x4f\xdc\x93\x64\x31\xa6\xb7\xce\x57\xe8\xcc\x15\x67\x84\xfc\x02\xe5\x6d\x19\x7c\x05\x75\x52\x2f\x80\x98\x10\x0a\x6f\xa8\x3a\xb8\x75\x37\xab\xf6\x47\xaf\x69\x92\xc2\x63\xac\xe8\xfe\x8f\x5d\x13\xfc\xb5\xe7\x20\x65\x42\xa8\x09\x5e\xe0\xa9\x58\x13\x69\x9b\xa7\xf9\x2a\xa0\x62\x80\xbc\x20\x06\x01\x23\xb9\x4b\x27\x09\xdf\x5a\x24\xe0\x5b\x1c\x66\x49\x85\x96\x6f\x1b\x80\xd7\x5d\x5a\x7a\xed\x5c\x2e\xde\xf3\xed\x12\x9e\x3b\x52\xfd\xcd\xbb\x6c\x55\xbb\x88\xbb\xff\x47\x20\xee\xbe\xc4\x63\x7b\x00\x19\xcf\x5f\x0f\xae\xc3\x25\x4c\x6c\xd6\x60\xc4\x16\xce\xe2\x46\xb3\x46\x52\xda\xeb\x6b\xfb\x49\xe6\x8e\xe0\x31\xc5\xb2\x77\xb5\xd8\x53\x14\x1d\x77\x92\x67\xa0\x11\x5e\x68\xb1\xeb\xb7\x57\xd0\xbc\xfb\x66\xf0\x47\x5e\xed\x4a\x7d\x1b\xc3\x4d\xbe\xa6\x50\x52\x7e\xf8\xca\x30\x49\xd1\xf8\xb6\x71\x83\xc1\x85\xd9\xf0\x0d\xf0\xd1\xeb\x93\x04\xbe\x1f\x15\x8e\x19\x4f\x79\x4a\x80\x84\x25\x29\xe4\xac\x46\xe4\x11\x58\xe3\xf8\x8a\x52\xc1\xca\x2a\x07\x67\x03\x1d\xb0\x2d\x4f\xca\x13\x5e\xbe\x75\x08\xcf\xbd\xfe\xb3\x2f\x0d\xd9\xb7\x31\x8a\xfb\x87\x0f\x38\x5b\x88\x89\x13\xad\x65\x97\x7c\xe5\x32\x66\x97\xfc\xc2\xbe\x5d\x11\xb2\x9b\xae\xb0\x0b\xe8\x7a\x59\x36\xe3\x55\x15\xbc\xfa\xfc\x8b\x49\x33\xda\x1c\xb3\xa3\x49\x0a\x3c\xe1\x45\x5b\xcb\xa6\xdb\xfd\x5b\x77\x90\x58\xc2\xd8\x3f\x0f\xd8\xf7\x5e\x4e\x94\x71\xc3\xa5\x03\x81\x3f\x3f\xf3\x8f\x83\xc5\xcd\x1e\xa8\x6d\x1b\x74\x82\x5d\x8f\xc8\x6d\x90\x14\x96\xf0\xc9\xe5\x39\x40\x44\xc5\x05\x6f\x0f\x34\xf8\x82\xb7\x07\x0e\x4e\x17\xbc\x3d\x60\xb8\x72\x24\xde\xcf\x71\xf6\xef\xf7\xb0\xff\x1f\x4c\xd3\x62\x4d\x50\x82\xed\x9d\x80\x26\xe1\xbf\x7f\x4f\xf0\x8e\x3d\x8d\xb7\xea\xd8\x81\x24\xec\x10\x85\xa2\x06\xf8\x66\x6c\x5e\x74\x50\x56\x48\xe3\xb4\x58\x8c\xa3\x42\x7d\x6a\x9c\x52\xcb\x66\xd0\x32\x8b\xb2\x0d\x23\xd7\x36\xb2\x41\x2e\x05\xc4\x77\xeb\xaa\x6a\x96\x49\x2c\xac\x07\xe0\x60\xbf\x1e\x8d\x4a\xf3\x31\xd8\x5c\xbb\x98\x60\xac\x56\x9c\x0a\xde\x52\x96\x7c\x95\xd7\x4f\x73\xa2\x74\xf9\xf8\xaa\x02\x61\xfa\x70\xa8\xe1\xe1\x95\xa8\x73\x6e\x3d\x2a\x62\xc4\x85\x8b\xaa\x04\xf9\xe8\xec\x33\xc6\x9c\xde\x77\x55\x4c\x1a\x19\xf1\xd0\x9e\x8c\xa7\x04\xbe\x88\xd5\xd4\x02\x44\x01\xd8\x51\x03\xe9\xd8\x33\xd6\xc7\x16\x60\xbb\xe6\x68\x53\x9b\xd5\xb2\xcb\x33\x44\xfd\x30\x4d\x25\x4f\x63\xc9\x73\xd0\xaa\x65\xae\x67\xf2\x96\xb4\x59\x55\x54\x9e\x2b\x67\xd0\x92\x62\x7f\x20\x1a\x24\x33\x48\x5f\x65\xd8\xb2\xea\x17\xa6\xed\xf5\xfe\x0c\x82\x97\x87\x15\x3c\xd4\x35\x94\x57\xdc\x3a\x3a\x4c\x5b\x8e\xcd\xfc\x27\xf6\xb3\xfd\x6a\xac\xfc\xd7\xee\x0f\x7e\x74\x9f\xfa\x6b\x0c\xba\x24\x4d\x15\x72\x42\x69\xc7\x9e\x6d\xc0\x59\x16\xf2\xfb\x94\x52\x97\x74\xf9\x32\xbd\xb5\xec\xd8\x76\xd1\x8f\x69\x9b\xdf\x10\xbb\x51\x0a\x41\x35\x3e\xea\xcd\x72\xd9\xf2\xc0\x1b\x9f\xa5\x29\x98\xec\x43\xf6\xb7\xe4\x2c\xb7\xde\x97\x73\x7a\x25\xaf\x7a\x76\x05\x1e\xb0\x18\x0c\x51\x25\x54\xd1\x9a\x72\x3a\x0e\x2b\xb4\x36\xa2\x53\x38\xc9\x68\xc1\xba\xc4\x8a\xf8\x9a\xac\x1c\xce\x2a\xd9\x49\x71\x52\x76\xf2\x35\xb9\x6f\x2b\xf4\x43\x4d\x89\x57\x11\x7c\x0b\x0f\xe4\xd0\x4f\xa7\xc9\x39\x11\x40\xb0\x2a\x82\xa7\xe6\x45\xc5\xa3\x95\x1c\xd0\xa8\x32\xfb\x99\x5a\x09\x65\xdb\x92\x1e\x39\x3a\xba\x79\x2a\xce\x27\x9d\x7c\xb5\x88\x06\x3d\xf4\xed\x85\x3c\xb8\x67\xac\x84\x12\x71\xad\x14\xec\x5b\xb0\x16\x90\x6e\x2c\x8b\xc2\xe8\x24\x15\x05\x47\xc1\x79\x53\x18\xb0\xf7\xc2\xbc\x50\x65\x28\xdc\x45\xa5\xb9\xa7\x23\x2b\xcc\x97\x07\x60\x46\x46\x5b\x99\x5c\xe9\x01\x31\x8f\x21\xcc\xa9\x53\x68\x92\x59\x85\xda\xd1\x90\x25\xfa\xb0\x70\x46\xac\x8c\xf8\x5d\xf3\xfc\x76\x0e\x62\xe3\x76\x0e\xc5\xf3\x29\x74\xe8\xdf\x35\x8f\x8a\xa7\x43\x0b\x98\xe5\x1c\x82\x87\xce\x73\x65\x86\x83\x57\x41\x3a\x0d\x7a\xd1\xe1\xb6\xf2\xe4\x67\x00\x1b\x28\x45\x0f\xd4\xdc\x69\x24\xb5\xd1\xa9\x63\x08\xb6\x33\x8c\x52\x57\x75\xd4\xe4\x16\xd4\xbf\x72\x27\x3c\xd2\xe6\x6b\x47\xdb\x7c\x6d\x56\xfe\x3f\x88\x3b\xf8\xeb\x88\xfc\x75\xac\xcd\xd7\x8e\xc1\x66\x27\x2f\x1d\x45\x9b\x3b\x3c\x07\x3f\x8f\xb6\x79\x37\xcf\x67\xf1\xdf\x23\x8e\xf5\x28\x67\x7d\x76\xee\x72\x92\x5e\x6c\xc1\x29\xcb\x3e\x39\xb9\x09\xe7\xe0\x3b\x26\x83\xc7\x27\xfe\x8e\x73\x0e\x92\xde\xe9\x18\x99\x15\xb0\x17\x84\x56\x63\x7d\xc7\xf7\xb5\xb3\xf9\x60\x1a\xec\x6e\x88\xaf\x24\x0a\xa5\x47\x39\x1c\x86\xfd\x61\x35\x84\xd5\x21\xce\x77\xd2\x61\x99\xac\x09\xc5\x74\x58\xe9\xf7\xf3\x62\xc3\xd7\xaf\x18\x05\x62\xc6\x52\xf6\xc2\x2b\x37\x91\xc6\x78\x10\x1f\xf7\x18\x43\xc5\x1d\x0e\x09\x6f\xf6\x58\x7c\x25\xbf\xae\x3e\x14\x1c\x33\x1f\xb5\xc3\xe5\xb5\x2c\x45\xbf\x72\xa9\x83\x42\x8e\x9f\x39\x11\xb2\x0f\x7a\x0c\x35\x41\xff\xdd\x1e\x4b\xae\xc6\x72\x03\x9b\x7e\x70\x07\xee\x42\x8a\x33\xd4\x76\x3a\xa1\xc6\x26\x0f\xd9\xf8\x8c\x46\x94\xa9\x93\xc1\x7e\xba\xc5\x98\xd1\x69\xfc\x8f\xb4\xae\x64\x47\x5b\xb4\xb7\x9f\xf7\x2c\x4d\x6a\xbb\xdc\xb7\x36\x47\xce\x46\xf4\xb6\xe3\x8b\x74\x5c\x65\xa3\x19\x2e\xb7\x6d\xba\x29\xb6\xbd\x5a\x95\x26\xbb\xc1\x6a\x65\x9f\x69\x31\xa5\x13\xf9\x9f\x68\x05\xef\x6b\x59\x6c\xcc\xe4\x31\xdc\x26\x8d\xeb\x76\xe9\x8f\x37\xa5\x3b\xa6\xc8\x0f\xa3\x01\x5d\x9c\xfa\x74\xb1\xfa\x51\x93\x12\x57\xd6\xb5\x38\x5b\x55\x1f\x96\xce\x47\x93\xac\xac\x44\xe4\x7a\x9e\xbf\xea\x31\x3c\x70\xf9\x5f\xf0\x82\x4f\x79\xe8\xdd\xb4\x7a\x53\x23\xd4\x5e\xfe\xbe\xdc\xb2\x07\x37\x5a\xa0\x7c\x4a\xa1\x8b\xe7\x45\x9f\x2f\xdf\x0a\xab\x30\x1c\xa4\xc3\x22\x4a\x6f\x0f\xa9\xf8\xe5\xc3\x61\xdd\x25\x05\x07\x49\xff\x71\x2f\xf8\x71\x0f\x83\x21\xcc\x79\x70\xbd\x27\x40\x1d\xda\xa4\x95\x00\x97\x8d\xe6\xbf\x69\x70\x35\x2a\xa7\xe8\x34\x14\x16\x87\x7c\x9e\xb4\x35\x4d\xd9\x29\xf8\x32\x19\x0c\x69\x7c\x75\xd4\x40\xbc\xac\x0f\x63\x10\x28\x68\xdf\x70\x20\xcb\x5a\x35\xde\xe4\x9f\x6f\xb1\xee\x95\x93\x21\x0e\x79\xf2\xaf\x79\xdb\x66\x4f\xde\x8c\x2d\x79\x5b\x5b\xbb\x53\xde\xc5\xec\xef\xce\x8b\x1b\x89\x8d\x4f\x78\xec\x3b\x2d\x7b\x8c\x39\x10\xac\xcd\x86\x77\xe6\xc5\xf7\xe6\x99\xf0\xdf\xe2\x05\xf7\xd2\x6f\x3e\x28\xf2\x35\xe0\x99\x6f\x0a\x8d\x90\x7a\xfe\x23\xb9\xdc\xbb\x8c\x0d\xac\x1c\xf6\xc9\x80\xaa\xac\xa1\x8a\xe4\xdf\xb1\x5b\xdc\xca\xe6\x88\xbd\xfd\x68\xf0\x4f\x61\xa6\xd7\x02\x29\xed\xd9\x2f\xbf\xe1\xcc\x85\x1f\xdc\xc3\xb8\xd5\x0a\x8a\xb1\x86\xa4\xd1\xd9\x70\x61\xf1\x8e\x34\xef\x9c\xf3\xff\xe3\x64\xf0\x15\x8f\xfe\x70\xe3\x40\xa2\xa2\x4a\x3a\xc3\x34\x2a\xf8\xf1\x85\x13\x67\xf8\x14\x84\x9c\xcd\xde\x7c\x34\x9c\xbd\xe1\xa6\x70\x36\x9c\x9d\x39\x7a\x5d\xd0\x0e\x8e\x1e\x39\x32\x3b\x17\xaf\xdc\x3c\x37\x37\x73\xc3\x75\xc1\x61\x02\x1a\x77\x50\x31\x75\x6c\x2c\xac\x5a\x75\x3a\x39\x8d\xd5\x41\x77\xc5\xd2\x40\x74\x0e\x95\xf2\x29\x95\x21\xa3\xc0\xab\xa5\x5e\x48\x41\x84\xa6\x76\xb2\x42\x6e\x76\x0c\x19\x8a\x35\xec\x3e\x45\xd3\x18\x2f\xef\x05\x6f\xb2\x93\xc4\x2e\x07\xf2\x57\x5b\x6c\x8d\xc1\x65\x3f\x0b\x22\x68\xa5\x6d\x05\x1f\xb3\x7f\x2f\x2c\x72\xec\x27\xa4\x13\xa6\x83\x04\x4e\xa3\x7a\xcf\xc0\xf1\xc9\xed\x1c\x7b\x6c\xfe\xc4\x63\x7b\xb1\x71\xfe\x1f\x7a\xc1\xc7\xbd\x93\xd8\x50\xfc\x7c\x9a\x74\x60\x54\xb7\xdd\xcc\x28\xdb\x69\xdd\x38\x55\xa0\x16\xd3\xa6\x20\x5c\x89\x4f\x02\xd3\xd8\xf2\x61\x55\xaa\x60\x29\xe8\xb4\x22\xca\x56\xc5\x26\x7e\xf2\x97\x1f\xb0\x59\x82\x37\xf3\xad\xad\x67\xa2\xd0\x01\x7d\xfe\x67\xf6\x07\xbf\xe6\xb9\xd7\x4c\x54\x8f\xc8\xf2\xe1\x6a\xcf\x8d\x65\xca\x79\x2a\x2a\x88\xcc\x22\xa8\xfb\x11\x98\xa2\xd7\x51\x45\x21\x8b\xf4\x7c\xed\x8a\x36\x83\xa9\x40\x56\x15\x7d\x8f\x01\x4b\x91\x92\x57\x03\x91\xc5\x20\x91\x80\xd7\x40\x8b\x76\x14\xe6\x6d\x5e\xc2\x44\x2f\x04\xd2\x20\x58\x05\x20\x9d\xc0\x05\xcf\xb2\xb3\x5f\xf0\xc0\xfb\x42\x4b\xfe\x82\x37\x31\x4c\x5c\x1c\x9d\xdf\xd9\xcb\x6e\x74\x0c\xf3\x87\x83\xef\x68\xd0\x55\xe8\x3c\xe5\x12\x55\x7f\xba\xc5\xfc\x15\x39\x15\xa0\xe7\x4e\x88\x54\x80\x32\xf9\xfe\x56\xf0\x8e\xd6\x42\x17\x0c\x5e\x6d\x3e\x7f\xfa\x84\xe2\x08\xc9\xe5\x63\x80\x9c\x27\xff\x0a\xba\x79\x21\xe4\x8e\x98\xc5\xea\xd5\x00\xc3\x80\x92\x47\x44\x61\xf9\xe1\xf0\x35\xc3\xe5\x89\xa1\xe4\xb1\xf1\xf3\x9c\x13\xa3\x69\x74\x24\x95\x55\x5e\x18\x3c\xe2\xc4\x0a\xf2\xc1\x30\x7b\x88\x96\x77\x8d\x8d\x60\x1d\x94\x72\xbc\x46\xcb\xd0\x56\x56\xe1\x4c\x88\xb8\xe4\x01\x7e\x35\x90\x22\xbe\x9f\x94\x76\xdf\x40\xfd\xda\x1c\xac\x16\xeb\x49\x29\xf8\x75\x47\x8f\xf2\xa9\xfb\x33\x4a\x47\x87\x63\xeb\x49\xcc\xc8\xb6\xa6\x3b\x1e\x6c\x5d\x33\xdb\x03\x70\xfa\x21\x27\xa1\x7f\x77\x30\xa7\x7b\xb1\xd6\x18\x15\xaf\x4d\x39\xc9\x51\x16\xad\xca\x69\xe6\xe4\x6a\x59\xe5\xbe\xc9\x23\x27\xdc\x6b\xbc\xe0\x25\x1e\x38\xe1\xea\xe3\xfa\x4d\x72\x71\xa5\xb4\xeb\xc4\xc1\x73\x4f\x5b\x3b\xcc\x86\xd5\x6a\x3e\xed\xcb\x71\x9a\x5e\x1d\x26\xb1\x98\xd1\xcc\x13\x45\xf9\x0c\x58\x19\xf6\xd7\x12\x26\xe7\xbf\xbf\x12\xdc\x7f\xff\xc2\x89\xcb\xfb\xad\x61\xe2\x36\xec\x6f\x26\xd8\xb7\x35\x44\x12\xdf\x0d\xe8\xe5\x85\xff\xc5\x89\xe0\x06\xfa\xad\x0f\x9c\x06\x04\x53\x85\x03\xda\x02\x79\x45\x40\xa6\x4f\xe6\xac\xde\x7f\x31\xc1\xce\xb1\x7d\xb2\xb2\x77\x89\xca\x5f\x66\xe1\x96\xa1\xcc\x77\x9f\x3d\xbb\x78\x97\xa8\xe6\xe1\x03\x81\xfa\xb3\x16\x90\x2b\x0b\xb4\x69\x86\x08\x6d\x3a\x64\x3f\xea\xb1\x03\x55\x67\xb0\x94\x77\xce\x89\xca\x7f\xd9\x76\x62\xa7\xcf\x1e\x5f\xc4\xc7\xe9\x93\xf7\xe9\x0b\xb6\xe9\x27\x53\x4d\x4e\xb2\xb5\x3c\x5d\x43\xfa\xa1\xb3\xc7\x17\x21\x01\x20\x84\x5f\xbd\x3c\x3f\x57\x6a\xf0\x7d\x1d\xbe\x2e\xeb\x34\x29\xce\x8b\x8e\xff\x43\xde\x36\x02\xfd\x4f\x9e\x17\x1d\xaa\xc9\xf7\xdc\x97\x09\x4a\x57\x31\xdc\x59\xa8\xbc\x4b\x95\x02\x82\xe0\x4d\xd2\x87\x39\xc7\xc8\x22\x6a\x1d\xa6\xc6\x2b\x87\x31\x0a\xd9\xe7\x0f\x3a\x0a\x91\xfa\xb8\x52\x66\x9f\x33\xcc\xab\xc8\x7f\xcf\xc1\xe0\x4e\xe7\x8a\x94\x40\x25\x57\x71\x14\x82\x3f\x0c\x17\x0b\x3b\xb2\x4c\x64\x10\xf6\x0e\x9a\xa6\x91\xfc\xce\x9c\xf8\x7e\xc6\xbe\xe6\x69\x64\xd8\x2f\x6e\x06\x16\xd5\x58\x2f\x62\x95\x7f\x9b\x47\x40\x1e\xb6\x67\x36\xea\x48\x15\xd6\xd4\x02\x6b\x08\xe9\xaf\x55\xa9\x21\x2c\x86\x40\x8b\x74\x45\xc4\x88\xec\x76\x60\x3d\xc1\xe6\xed\x7a\x95\x77\x43\xbc\xbe\x79\xf1\x19\x9f\xb3\xe3\x33\x3e\xe9\xed\x34\xc8\xeb\x65\xde\x26\x51\x5e\x57\x2d\x4e\xe3\x13\x1e\x9b\x94\xab\xcc\xff\x25\x6f\x13\x7c\xd2\x66\xc9\x31\x10\x1d\xd9\x0a\x74\xb0\x9b\x95\xa7\x32\x06\x41\x5a\x5c\x15\xb9\xf0\x84\x77\xff\xd6\x31\x0c\x47\xfd\x23\x3a\x86\x21\x08\x2c\x80\x24\xab\x49\xf5\xb8\x85\x77\x4c\xd8\x07\x0c\xb3\xc9\xe5\x83\x3c\xcd\x57\x47\xea\x4c\x09\x10\x0c\x84\x6f\xd2\x17\x59\xe5\xff\xd7\x56\xf0\x7d\xf3\xbc\xa2\xc7\x0c\x68\x4d\x61\x9e\x51\x51\xf6\x74\x87\x52\x90\xe5\x39\xb6\x24\x34\x10\x40\x40\x30\x28\xc7\x72\xd3\x04\x0f\x57\x57\x44\x15\xc0\x1d\x93\x8c\xc1\x80\x34\x4d\x74\x37\x94\x37\xc3\x0b\xde\xc4\x39\x31\xba\xe0\xed\x45\x69\xe3\x6c\x19\x9f\xf3\xd8\xb3\x98\xbc\xed\xdf\x14\x3c\x13\x31\x02\x57\x44\x2a\xf5\x6a\x9b\xca\x90\x2a\xe6\x30\xdb\x9b\xc5\xf0\x1a\x8f\x51\xd1\xfe\xcb\xbc\x60\x75\x3e\x43\x98\x3c\xc8\xf0\xb3\x64\x49\x19\x72\xb9\xed\xae\x19\x92\x2e\x63\x61\xc3\xaf\x2a\x1a\xb2\xd4\xce\xdd\xd7\xc9\x7d\x0f\xe0\xb1\x31\x29\xf9\x7d\x67\x36\x8f\x39\xff\xd2\x93\x1c\x2e\x75\xc7\x28\x81\x16\x26\xca\x19\x85\x68\xc5\x77\x3f\x29\xf8\x53\xcf\xba\x50\xb7\x7f\x20\xf5\xb0\xca\x22\x57\xf9\x09\x25\xd9\x0f\x23\x2b\x62\x00\xf2\xe8\x68\x33\x50\x94\x3a\x2b\x51\xe7\x9c\xc8\x62\x95\xba\x58\x4a\xf9\xd5\xc9\xfb\x78\xf6\x27\x41\x07\x6e\x55\xb0\xcc\x2a\xbe\x63\x8a\x93\xc0\x12\xfb\x48\x39\x00\xa7\xa2\x22\x07\x1e\x14\xfa\x88\x2a\x3c\x2a\xcb\xbc\x93\x18\xb0\x4c\x3c\x1a\x50\xca\xb9\xd5\x34\xe8\x42\x37\x58\xfa\x3d\x07\xd9\x97\x19\x9b\x94\x1f\xf2\x7f\x9f\x05\xbf\xc5\xee\xce\x4b\x0d\xc1\x82\x40\xa2\x0f\x0f\xa3\x14\x1b\x18\xe7\xfd\x28\xc9\xb4\x45\x28\xd2\x39\xf5\xf2\xf5\xb6\x3c\xc6\x2a\x93\xdb\xca\x88\x9f\xb9\xf3\x38\x3f\x76\xf3\x4d\x37\x84\xfc\x74\x4e\x6e\x72\xa3\x5e\xc5\x62\x4d\x41\xd4\xe8\x4d\x21\x90\xa5\x04\x60\x14\x52\xfa\xd8\xfd\x67\x16\xec\x52\x93\x4c\x97\x3a\xc7\x67\x43\xbe\xb0\x68\xf2\x41\x34\x05\xc6\x71\x03\xcc\x92\x8d\x35\x1e\xc2\x3c\x74\x82\xc8\x88\x57\x39\xe3\x5c\x19\x5e\x14\xf4\x81\x94\x62\x54\x81\x41\x04\x7a\x0d\x15\x13\xb2\xa3\x68\x33\x5a\x9e\x5b\x96\x87\xd1\xa4\x9f\x54\x08\x3a\x80\x10\x31\x72\x2a\xc0\xa0\x13\x73\x14\x26\xb6\xd6\x6b\xc8\x0e\x70\xab\x92\x68\xb9\xc2\x26\x9b\x0a\xcb\x32\x13\x93\x64\x39\x77\xd3\x11\x98\x11\xa0\x9e\x47\x59\x2c\x8b\x98\xbb\xee\xba\x63\xfa\x62\x19\xb2\x3b\x72\x1c\xf9\x52\x6c\x2c\x0a\x36\x98\x7c\xca\x68\xa6\x51\xd3\x55\x52\xa8\x05\x7b\x32\x36\x8d\x54\xe0\x42\x8f\x26\x8c\x03\x0c\x64\xbd\x81\x73\x96\x62\x92\x29\xd7\x1a\x53\x8c\xf3\x3a\xa3\xc7\xd8\x37\x18\x4e\x47\x8a\xcd\x09\x06\x85\xe8\x24\xa5\x08\xc8\xe2\x89\x00\xf2\xd6\x9c\x54\x29\xe9\x88\x79\x50\x00\x75\x0f\xe6\xcf\x57\xe3\xf3\x95\x4f\x89\x70\x35\xe4\x41\x37\xcf\xc3\x95\xa8\x08\x3b\x79\x1f\xf3\x75\x82\xf5\x24\x8d\x3b\x51\x11\x07\xed\x8d\x3e\x34\x28\x44\x37\x39\xaf\xb1\x69\x95\xe7\x55\xbd\x48\xf2\x8c\x3e\x70\x6d\x28\x3f\x01\xc5\xe3\xec\xd1\x8f\x75\x7a\x51\x11\x75\xe4\x14\x3a\x74\xed\x21\x94\x89\x18\x71\x26\xd7\x4f\x52\x95\x22\xed\xea\x5c\x29\x90\x0f\x27\x4e\x2f\x51\xd9\x28\xf1\x71\x8f\xc0\xf9\xac\x2a\x41\x7b\xc5\xf7\xe4\x43\x65\x39\x21\xec\x92\x5a\xed\xcc\x27\xb0\x9e\xd0\xd3\xb7\xdd\xc6\x83\x6b\x83\xc3\x48\xa7\x04\xf3\xc3\xa0\x2c\x8d\xcf\x11\x78\x45\x13\xf7\xba\x2b\x7c\x3d\x1a\xe1\x1a\xed\x72\x25\x52\x68\xf8\xda\x24\x20\xf1\x90\xa9\x1a\x61\xd2\x7e\xc8\x66\x04\x73\x1d\x06\xaa\x27\xa2\x18\x97\x99\x90\xb2\x48\x4a\x3f\x59\x64\xc8\x8f\x3a\xc5\x9b\x16\x5a\x26\xa4\x4b\xfa\x4c\x95\x9b\x2f\xc1\x0c\xc5\x48\x91\x29\x30\x23\xa9\x5d\x00\x47\x04\xfa\xf2\xb0\x12\x17\xba\x8b\xc1\x1e\x6c\xef\x49\xcf\x66\x93\xf2\x4b\xfe\x1d\x1b\x03\x3b\x35\x6d\x54\xf2\x94\x5e\x5f\x15\xec\xaf\x0e\x38\x64\xf7\x98\x4d\x69\x05\xe7\xc7\x27\x92\xb2\x18\x82\x63\xee\x8e\x61\xbc\x2a\x2a\xff\x93\x07\x82\x5e\xc3\x75\x15\x5d\x4f\xe8\x3b\x39\x09\x5a\xda\x3f\xce\xf3\x58\x3f\xef\xa4\x06\x81\x70\x83\x4d\xa8\x1e\x1d\x3e\xc8\x63\x57\xbf\xf8\xea\x2e\xcb\xc0\xee\x41\xed\x9b\x78\x50\xbb\xc7\x3a\xa7\x3d\x6b\x87\xc7\x34\xf6\x6a\x75\x40\xfa\x01\x8f\x3d\x6b\xc3\x55\xbc\xf5\x72\x84\xd3\xd2\xfc\x52\x1d\x85\xd0\x3e\x30\x51\x62\x78\xa1\xae\x37\x94\x12\xb2\x1f\x32\xc6\x9e\xef\xdb\x84\xc4\x70\x1b\x15\x42\xc3\xcf\xcd\xa7\x72\xa0\x8a\x26\x66\x4a\x4d\x97\xe2\x52\x0a\x35\x55\xe5\x09\x2f\xde\xfa\xd4\x35\xef\x3f\x4b\x9f\xba\xb0\x4e\xfa\xe4\xd5\x50\x66\x63\x2a\xcb\x07\x9f\xea\x10\x12\x34\xd1\x33\xaa\x43\x9c\x95\xa1\xfe\xb2\xa7\x06\x6f\x9d\x18\xbf\x8e\xab\x68\x50\x08\x74\xb8\xbb\xe7\xae\x32\xb7\x60\x38\xf4\x54\x6f\x73\x29\x39\xd4\x12\xa3\xab\x87\x4a\x60\x0b\xd3\xd0\x3f\x04\x57\x6b\x22\x11\xe6\x79\xc3\xc7\xd5\x87\xa2\xb1\xaf\x20\xee\x7a\xac\xc8\x1f\xe7\xf8\x54\x74\xb8\x06\x27\x25\x14\x24\x22\x64\xb4\x5a\x9b\x9b\x2e\xa4\xcd\xa7\x56\x36\x7c\x4b\x27\xbc\x6f\xf0\x66\x67\xc3\x37\x8d\x5f\xbb\xf1\x4d\x59\xed\xa9\xf8\x70\xe3\xab\x16\x74\x41\xc3\xbb\x3a\x41\xff\x82\x67\xf2\xf1\x2f\x78\x07\x5c\x89\xa8\x4f\x2d\xd7\xb0\x3f\x70\x12\xf7\x3f\xeb\x05\xaf\xf5\x96\xf5\xdf\xcb\x6e\x66\xaf\x3e\x0b\xd9\xa9\xf8\x24\xed\x15\xc5\x64\x7f\x50\x8d\x42\xe4\x6d\x53\x23\x43\x01\xcd\xe6\x05\x80\xc4\xd7\x51\x03\x9a\x68\xba\x47\x50\x19\x70\x54\x75\x98\x28\x37\x3a\xa2\x3e\xe1\xf1\x0d\xa1\x66\xf6\xfa\x93\xa5\xa8\x18\x7b\x6f\x8b\x5d\x43\x0e\xc0\x25\x08\x12\x79\x5b\x2b\x78\x43\x6b\xd9\xbe\xb4\xdc\x14\x2d\xa2\x10\x9b\x5c\x36\x4d\x45\x40\x4e\x01\x13\x16\x8e\x07\x9f\x42\x25\xb7\x27\x55\xcf\xac\xe4\x35\xd2\x75\x27\xc8\x8c\x4e\x3a\x26\xf7\x9e\xe7\x85\xa3\x66\xe1\xdc\xc7\xbe\x33\x03\x7e\x98\x0e\x0b\x4e\x96\x3e\x11\xa9\xe7\x05\x85\xe9\x6b\x95\x6d\xd9\xbc\xb8\x6c\xd3\x0e\x28\x6c\x88\xc8\x22\x48\x95\xdd\xe6\x7a\xbc\xfe\x6a\x82\x31\x53\x80\xff\x9f\x27\x82\x77\x4c\x38\x25\x3a\x33\x83\xd6\x6a\x56\x43\xce\x50\x96\x77\x3d\x55\x43\xce\xe7\x4d\x23\xc1\x39\x63\x5c\x18\x63\xa5\xb8\x9a\x79\xd2\x55\x7d\x2a\x17\xb2\x81\x6f\xb3\xc0\x23\xa2\x6a\xbc\x8c\xbc\x80\x25\xdc\xf0\x7c\x70\x6d\x10\x72\x75\xaa\x8e\x2a\x77\xd2\x66\x23\xeb\x40\x65\x4a\x73\x50\x36\x70\x82\x44\x6e\x83\x5e\xa0\x6f\xd3\x24\x79\x81\x3b\x4b\x4a\x81\x93\xa1\x36\x03\x71\x80\xba\x64\xb7\x3a\x4c\x46\x2a\x0c\xc5\x47\x3a\x5b\x18\x29\x0b\xfd\x21\xe9\xd6\xcb\x90\x2a\x77\x31\x14\x3b\x5c\x30\x9f\x6a\xd9\x50\x03\x1f\x69\x05\xff\xdb\x5b\xd6\x7f\x6f\x24\x11\x2c\x1c\x87\x24\x14\x61\x9b\xcb\x33\x7a\xd1\x89\x4a\x34\xaa\x61\x00\xd7\x61\x38\xe7\xc1\xea\xa7\x0d\xba\x6d\x07\xf9\x84\xdc\x25\x2e\x7f\x90\x07\xca\xdc\x03\x98\x49\x79\x2c\xca\x19\xdc\x44\x03\xfe\x90\x82\xa2\xd1\x5d\xb4\xb9\x04\xb2\x22\x89\xae\xb2\x00\xfa\x77\x1a\x31\xe1\xe3\x5e\xf0\xfd\xde\x32\xfc\xde\xa8\x1f\x71\x23\xda\x9e\x50\xd5\xcf\x5e\xd5\xe6\xbc\x7e\xc2\x41\xd3\x56\x38\x9b\x27\xc4\x20\xcd\x47\xc8\x51\x44\xf8\x9c\x5f\x6f\x05\x77\x8f\x5f\x1e\x4f\x38\x46\x10\x42\x81\x10\xb1\x1a\x8b\x10\xd3\x0b\xc4\xba\xdc\xfe\x4a\xd7\xd8\xf6\xda\x16\x7b\x9b\xc7\x9e\x54\xe4\x69\x9a\x64\xab\x88\xce\xe9\xff\xa8\xc7\x6e\xda\x9a\x11\xc2\x7e\xc5\xd4\x2d\xb8\x9f\x6e\x28\x08\x4f\x0c\x5f\x43\xf0\xf2\x92\x72\x9e\x32\xb3\xee\xc6\x5b\x75\x76\x34\x10\xfc\x36\xee\x94\x1f\xb2\x1e\x51\x41\x2e\x07\x4b\xf0\x40\x2e\x27\xbe\x7a\x15\x94\x7d\xb0\xc7\x9c\x11\x08\x1c\x44\x5c\xd3\x76\x19\x81\x13\x4b\xe8\x16\x6f\x2b\xe8\x1f\x98\x74\x68\xc2\xb7\x44\x3f\xf5\x5f\x3e\x19\x7c\xc6\xdb\x18\xe3\xd4\xc5\x42\x2d\x1d\xe8\xd3\x6a\x63\xdc\x50\xb0\x72\xc0\x76\x67\x18\x96\xb1\x4b\x4b\x40\x3f\xa6\x68\x28\x94\xaf\x4d\x28\xf1\x25\xcf\x04\xc4\x7c\x14\x23\xbb\x0c\xf9\x49\x1a\x1a\x15\x91\xad\x6a\x18\xeb\xda\xb9\x93\xe4\x67\x5a\xc8\x2b\xec\x4c\x92\xb7\x6f\xc6\x52\xde\x38\x49\x6c\x34\x6a\x85\x1c\xbb\xe2\x3c\x61\x47\x45\xd3\xf9\x0b\xf4\x60\xab\x4d\x90\x3d\x08\x33\xa0\x3e\x88\x0d\xc5\xcb\xe7\xc6\xa7\x8e\x3b\x20\xd5\x68\x20\x1a\x60\x72\xdd\x41\xdc\xe6\xd4\xf9\xcb\x83\xec\xba\xcd\x98\xb7\x97\x90\x3f\x1b\x32\xf3\xcf\x88\xb5\x44\xac\x13\x6d\xc5\xaf\x1c\x0c\xbe\xd6\xda\xe8\xee\x18\xa6\x93\xac\x07\x18\x0f\xd1\x11\x80\xec\xfc\x28\xc2\xe1\xb7\xb2\x8a\x18\xd6\x6c\x0a\xe4\x82\xf0\x2f\x05\x5c\x88\x65\x50\x15\x65\xd7\x56\x84\x67\x88\x16\x27\x1d\x76\xaa\xe9\xae\x62\x98\x6a\xc0\xd6\x54\x72\x71\x7e\x20\x8a\x04\xd1\x58\x08\x18\x95\x5c\x05\x90\x71\x74\x07\xe9\x6a\x4e\x17\x50\x7d\x21\x51\x13\x26\xec\x9a\x40\x4a\x27\x0d\xae\x23\xa2\x82\x90\x6f\x31\xf4\x5b\x9e\x64\xca\xa8\x8b\x99\xaf\x25\xc5\x8f\x1a\x1e\x72\x0c\xdf\x8a\x2a\x2b\x10\x0a\xc0\x1a\x33\x34\xa5\x01\xad\x00\x5a\xe2\x1c\x02\x71\x8d\x54\x04\x5d\x7d\xc1\x7b\xaa\x05\x3c\x45\x97\x98\x79\xc1\x59\x0a\x6f\xd8\xcf\x5e\xd5\x62\x4f\x31\x4d\x45\x1a\xac\xff\xe1\x05\x7f\xe2\x9d\x74\x2f\xc2\x28\x90\xf1\x34\xc9\xe4\x7c\x5e\x21\x02\x5a\xec\x50\xf8\x12\x2d\x65\x35\x21\xa3\x8c\xd8\xb0\xf2\x0e\x04\x30\xe8\xbe\x85\x0e\x32\x5f\x6d\xeb\x1c\x31\xf9\x0d\x3d\x86\x4a\xb1\x16\xc8\xb4\x8e\x61\x29\xe3\xef\xe2\xb1\x30\xaa\xb8\xd3\x68\x79\x79\x26\x2f\xf8\xe9\x5a\x67\x28\xa5\xc9\xea\x42\xc7\xb5\xe5\x31\xab\xb3\xfc\x4f\x7b\xc1\x47\xbc\x05\x33\xf1\x48\x91\x32\x04\xb1\x38\x07\x5c\xb2\x34\x39\xdd\xe4\x36\x8c\x74\x01\xfa\x33\x86\x43\x15\x4c\xee\x79\xbf\x4f\x9b\xb0\x61\x0a\x43\x20\x68\xbb\x0f\x9c\xae\x51\x9c\x5e\xce\xfd\xa6\xfe\x29\xed\xd9\xeb\x68\xef\x6f\x6c\xb1\xb1\xf9\xe1\xbf\xb4\x15\xbc\xd7\x1b\xeb\xa8\x9d\x30\xe7\xdb\x90\x5c\x57\x90\x3d\xdf\x56\x58\x6e\x63\xb7\xb0\x9b\x37\x16\xe1\x75\xe1\x55\x6b\x2e\x7b\x45\x8b\xb9\x0b\xc9\xff\x2b\x2f\xf8\x39\xef\xf2\x75\xc9\x55\xee\x8e\xcd\x91\xa6\xc7\xba\xc3\xe9\x8b\x4f\x4c\x3a\xf4\x6b\x2b\x52\xb5\x04\x20\x83\x22\xcf\x9e\x9d\xaf\x90\x94\xff\x89\xc9\xe0\x66\xe7\x4a\xdd\xb1\xab\x49\x86\x0c\x17\x7a\xa7\xc8\x33\xfe\xc2\x7c\xc5\xdd\x91\x7f\x7b\x82\xfd\x94\xc7\xf6\xca\xee\x5c\x13\xfe\x1b\xbd\x60\x7a\x5e\xf7\x31\x58\x47\x41\x9e\xe7\x16\x25\x44\x31\xcc\x20\xfa\xf7\x85\xf9\x8a\x8b\xee\xb5\x39\xc8\xce\x06\xa8\xa3\xdb\x04\xa6\x7d\xa3\xc7\x9e\x9a\x46\x65\xb5\xd4\xe9\x89\x78\x98\x22\x03\xf5\x4b\x77\xc0\xbd\x7e\xe7\x82\x15\xf8\x0c\x6b\x7f\x3d\x6a\xa2\x5e\x7f\x61\xbe\x02\x77\x1c\xfa\xc9\x92\x6a\x11\x87\xec\xf5\x44\x0b\xbf\xa4\xef\x43\xd5\x1e\xbd\xf4\x9a\xdd\x71\x11\x35\x73\x6a\xa5\xe6\x62\x1c\xb2\x5f\x3b\xc8\x8e\x34\xf4\xfd\x5d\xc7\x4f\x1a\x04\xdf\x13\x49\x79\xce\x41\xf1\x7d\xdd\xc1\xe0\x63\x2d\x07\xc6\xd7\x3c\xcc\xe5\xd3\x96\xad\x24\xe3\x77\xe5\xf9\x6a\x2a\xf8\x71\xca\x14\x3f\x99\xad\x26\x99\x08\x19\x9b\x07\x48\xe5\xc5\x13\x0d\x0c\x13\x80\xde\x4b\x40\x0d\x91\x41\x84\x27\x08\x73\xf9\x01\x74\x13\xa6\x65\x5e\x8f\x27\x97\x65\x0e\x8a\x1c\x96\xb9\x5c\x85\x8f\xe4\x99\x0e\x2d\x97\x73\x27\x15\x55\xc8\xf5\xa7\xb5\x23\x7c\x85\x3e\x8a\x40\x6f\x06\x7b\x17\x50\xba\x39\x44\xaa\x44\xf1\x34\x3c\xda\x97\x2a\x89\xec\xdc\x32\xa4\x62\x4a\x2d\xd7\x21\x16\xba\xec\x25\x03\x02\x4a\x82\xc0\x16\x59\x8d\xa5\x93\xf7\x26\xd9\xf0\x3c\x44\x44\xac\x08\x20\x14\xbb\xe0\xed\x1d\xc4\x63\x34\x3a\xbf\xb8\x9f\x7d\xd8\xb3\xc0\x81\xdf\xe3\x05\x3f\xed\xed\x0c\xfe\xb7\x29\xde\xfb\x22\x29\x4a\x08\x2d\x63\x86\x20\xf5\x9f\xb1\xda\x11\x06\xaf\x59\x0e\x88\xb3\x7f\x7d\xac\xa5\xf1\x99\x7f\xb1\x15\xbc\xa3\x55\xc7\x67\x76\xa1\x6e\x41\x2d\x18\xe5\x43\xc0\x1f\xb1\xb0\x9b\xcf\x26\x83\x39\x7e\x32\x03\x26\x73\x7d\x72\xa9\xc3\x38\x27\xe5\x45\x20\x39\x63\xa6\xc6\xdc\xe5\xc2\x73\xbe\x02\x9d\x68\x74\x9c\xbf\x6e\xb1\x03\x90\x19\x04\x39\x05\xdf\xd0\x74\x41\xbf\xd3\x3a\x8b\x11\x19\x78\x47\x03\x74\x6c\xde\x97\x0b\x5d\x65\x6a\x6c\xab\xa4\x30\x75\xb4\x50\x0f\xc9\xde\x5b\x33\xe0\xc7\x76\x7f\xdd\x99\x17\xea\xd6\x4c\x2c\xd6\x66\xca\x38\x9a\x6d\xc3\x67\xec\x24\x5c\x53\xa7\xa8\xe4\xc1\x6c\x10\xf2\xa5\xa4\x9f\xa4\x51\x91\x8e\xda\x76\x1d\xcd\x73\xf2\x30\xa8\x0a\x04\xac\x87\x23\x01\x9f\xca\x0b\x28\x59\xae\xcc\x54\x44\x6b\x38\xc7\x07\x85\x1c\xcf\x6a\x84\xc6\x94\xc3\x57\x68\xfe\x2a\x16\xa2\x9f\xf7\x18\x2d\x4d\xff\xed\x5e\xf0\x98\x77\x3f\xa2\x3f\xdb\x39\x60\x8b\x27\x5c\x19\x77\xfc\x64\xc8\xef\xa7\x63\xa4\x4e\x89\xa9\x94\xb4\x52\x4f\x5c\xc9\x09\xf3\x6f\xaf\x71\x38\xc1\x36\xd8\x45\xfd\x9f\xb8\x26\x78\xa8\x76\x6d\xdb\xa9\x3e\x30\xf7\xa5\x42\xc4\xfb\x79\x6c\x72\xaf\x69\xa9\x90\x27\xda\x91\x66\xef\x3e\xc8\xfe\xc3\x24\x3b\x00\xe6\xd1\xc5\xa8\xea\xf9\xbf\x3a\x19\x7c\x60\x72\xa1\x4b\x6f\x69\x11\x3f\x48\x04\x66\x62\x19\x47\x3c\xe5\xc4\xd2\x45\xd9\xa3\x85\xa2\xc8\xa1\x7c\x10\x72\xfd\x1a\x8f\x37\x19\xc6\x21\xb9\x19\x18\x6c\x67\xee\xca\xc9\x34\x4b\x88\xbc\xa0\xe5\xf4\xc1\xd0\xa6\x54\x76\xb2\x65\xc2\x39\x3c\xec\x47\x59\xd2\x15\x65\x15\xea\x3d\xa7\x7c\xf0\xe8\x43\xa1\x6b\xd9\x54\xe9\x3c\xca\x91\x6c\xa5\xd8\xb8\xfb\x95\xc1\x0b\x1f\xe4\x0a\xa0\x77\x1d\x2a\x5b\x45\xe7\xe4\xd6\x82\x95\x1d\x4a\x45\xf3\x9c\x98\xe3\x81\xec\x5f\xeb\xd3\x2f\x92\x33\xee\xd1\x40\x41\x78\x04\xf2\xcf\x00\x3f\xa8\xdd\xf8\xf6\xa4\x34\x1f\x46\x79\x59\x24\xab\xab\x70\x64\x01\x27\xf6\x9a\xc8\x2a\x08\xed\x49\x00\x59\xc1\x3c\xac\x49\x19\xb4\xc5\xbc\x5e\x91\x07\x8f\x3e\x14\xf0\x29\xb7\x5d\xf2\x08\x29\xce\xf3\xa3\x1a\xe3\x75\x90\xc7\xca\xf0\x5d\x8e\xb2\x2a\x3a\x0f\x47\xfa\x5e\x5e\x0a\xda\x63\x2b\xa2\x55\x03\xaf\xe2\xba\x48\xd3\x69\x15\xd2\xb6\x8e\x81\x92\xaa\x2b\x31\xfd\x41\x85\xc0\x99\x20\x07\x7b\xba\xff\xed\xcd\xe9\xf9\x01\x8f\x92\x7a\x5e\x1c\xe4\xdb\x4a\xea\xd9\x19\x3f\x18\x38\x27\x66\xc6\x93\x7d\x5e\xe3\xb1\x03\xda\x71\xe1\xbf\xc4\x0b\x4a\x83\x3f\x7f\x15\x6a\x04\x7e\xa4\x19\xbb\x42\xff\xc9\x63\x4f\x51\x32\x53\xc5\xc1\x7c\xce\x0b\xfe\xad\xa7\x62\x00\x78\xed\xae\x9c\x30\xe8\x95\x1b\xcf\x65\xeb\x47\xb1\x30\xdc\xdc\x57\x78\xa0\x65\xbb\xe1\x54\xd3\x19\x4d\x93\xb9\x14\x82\xad\x35\x3b\x60\x67\x64\x37\xf4\xa5\x1e\xe6\x59\x3d\x12\xf4\xb7\x93\x67\x75\x59\x86\xbf\x9e\x7f\x75\xc9\x49\x8d\x3f\xf3\x34\xe7\x58\xa9\x89\x3d\xd0\x95\x33\xdf\x01\x3b\x88\xff\x92\xa7\x05\xbf\xe4\xb9\xd7\xf8\x0a\xa0\x42\x57\xf9\x2a\xb8\x60\xe7\xf8\xb5\xe4\x39\x6b\x63\x90\x70\x59\xe5\x39\xa8\x68\xc3\x52\x14\xea\x88\x2c\x8a\x5e\x34\x28\xe5\xd5\x81\x28\x92\x41\x4f\x14\x51\x4a\x0a\x5b\xd9\xc6\xf0\xdf\xcc\x50\x4f\x5d\x0b\x91\x0a\x49\xd6\x49\x06\x51\xea\x04\x63\xc9\xa3\xb2\x7c\x08\x4d\xca\x60\x37\x54\xd6\x97\x18\x5e\x23\xdb\x23\x41\x92\x3b\x7b\xd4\x17\x9e\xbc\x1b\x9d\xb5\xd3\xe8\xac\xdf\xf5\xd8\x77\x44\xc3\x2a\x07\x4d\xd2\x9d\x17\x67\xf3\x73\x22\xf3\x7f\xd1\x0b\xde\xee\xcd\x6f\xf2\x44\x83\x13\x1f\x1c\x49\xca\x88\x10\x51\xd4\xa2\x62\xbf\x89\x68\xd6\xd5\x58\x70\xe4\x34\xaf\xa0\x3c\xa8\x4e\x54\x11\x7b\x0f\x1d\xee\xb4\xd7\x86\x88\x28\x62\xf9\x60\x45\xe1\xc7\x31\x22\x84\xbb\xb6\xb8\xaf\x4e\xb0\xa7\x26\xfd\x68\x55\x2c\x0e\xd3\x14\x69\x4f\x4a\xff\xb3\x13\xc1\xcb\x27\x16\x6a\x57\xeb\x50\xee\x24\xad\x60\x48\x4b\xf5\x48\x63\xe6\xb3\x45\x97\x32\x18\xa2\x27\x4b\x9e\x31\xe1\xb3\xc8\x44\xa5\x39\x2a\x8d\x10\x44\xda\x46\xa7\x23\xe5\x11\xa6\x56\x27\xe0\x01\x04\xc7\x5c\xa7\xc2\x80\x36\x75\x47\x85\x36\xa8\xbf\x69\x25\xa9\x53\xb0\x62\x21\xc8\x89\xb2\xa0\xb1\x64\x8c\xb9\x55\x14\xb9\x74\xfc\xd2\xa7\xec\x8b\x94\x73\x46\xdd\x98\xc1\x96\xcf\x3c\x83\x8e\x17\x52\xe8\xc1\x25\xd9\x3b\xd4\x95\xd3\x79\x36\x1d\x4d\x0f\xf2\xd8\x36\x2c\xdd\xcc\x6e\xdc\x04\x74\xd9\x10\x6a\x75\xa2\xb4\xa6\x03\xef\xc6\x17\xee\x26\x82\xb9\x89\x60\xff\xb6\xc5\xf6\xd1\x5c\xf3\x3f\xd0\x0a\xde\xea\x59\xcb\xdc\xb6\x2f\xab\xa5\x6d\x19\x94\x15\x9b\xb5\xdc\xd6\x6c\x19\xa6\x30\x33\x1b\x16\xee\xc5\xaf\x15\xf0\x94\xc1\x5e\x33\x83\x55\xb8\x0c\x16\xd6\x43\xec\xdb\x5d\x30\xcf\xa8\xea\xf4\xa6\x95\x87\xd6\xdf\xef\xef\xed\x8b\x62\x55\x30\xf9\xe4\x77\x34\x3c\x09\x77\xa7\xcf\x89\x91\xbf\xcf\x07\x6c\x30\xf6\x84\xf7\xc0\xd6\x31\x91\xc7\xfc\xd9\xa6\x4c\x34\xb7\x8f\xea\xa9\x68\x5f\x79\x92\x03\x1d\xd3\x04\xe5\xeb\x7f\xe4\x49\xc1\xa7\x5b\x06\xac\xbb\x13\x0d\x2a\x00\xb5\x19\x47\x8f\x89\xf8\x71\x7d\xba\x21\x66\x20\xbe\x20\x37\xdf\x2e\x84\xfd\x1c\x5f\x5a\x50\x64\x95\x3c\xc6\xc2\x30\x14\xc0\x24\x70\x28\xc2\x59\x9b\x52\x29\xaa\xaa\xa8\xd3\x03\x24\xbd\x4e\xcf\xf6\xb4\x0f\x4b\x15\x85\x6f\x87\x9d\x63\xb6\x86\xd0\x1b\x20\xbd\x9e\x94\x1a\xd2\x15\x4b\x97\x07\xf2\xed\x95\x00\x04\x8b\x56\x63\x11\xcc\x01\xa7\x28\x71\xbe\xe7\x99\x32\x12\x8d\xa1\x9a\x53\xd2\x4e\x36\x6d\x42\xdd\xc2\x0b\x1e\x44\xff\x3a\x1a\xd4\xff\xd8\xe5\x9a\xd8\x8d\x6f\xff\x26\xee\x3f\x8f\x4d\x5a\xfb\xcf\xab\x26\x77\xba\xff\xfc\xe6\x44\x6d\xff\xb1\x76\x1f\xfd\x0b\x19\xe6\x9c\xb0\x0e\x07\x21\x6d\x69\x41\x09\x0a\xb2\x5d\xdb\x43\x43\x06\x9c\x5b\x78\x52\xf1\x53\xf7\x2f\x9d\x55\x01\x5f\x5a\x2f\xac\x39\xab\xb1\xbc\xbb\x44\xb5\x98\x0e\x57\x13\xc0\x41\x9c\x3a\x8c\xfe\x6b\x15\x73\x48\x5f\x23\x17\x09\x7e\x19\x4a\x52\x01\x65\x37\x1c\x33\x99\x56\x25\xcf\x0b\x9e\x8a\xb2\x6c\xf3\x15\xb1\x9a\x90\x86\x9d\xc5\x9c\x02\x36\x28\xfa\x02\xf3\x6b\x81\x76\x2b\xe9\x58\x79\x5a\x53\x0f\x46\xd3\x8f\x1c\x99\xbe\x79\x7e\xfa\x7b\x1f\xc2\xa8\x40\x1e\x47\x65\x4f\x94\x7c\x6a\xfa\x70\x9b\xc7\x79\x55\xf2\xa9\x90\xd0\x63\xed\x32\x00\x5f\x76\x5d\x88\xec\xea\x6d\xe3\x0f\x51\xb6\xc2\xfd\x6c\xf6\xa2\x60\xe0\x21\x3d\x81\x37\xa6\x27\xc8\xb1\xc0\x87\xc2\x27\xbc\x87\xb6\xde\xde\xe6\xfc\x9b\xb6\x0d\x16\x5f\xdf\xe5\x3e\xf9\x24\xf6\xbc\x2b\x84\x23\xb7\xd4\x89\x52\xe1\xff\xf1\x35\xc1\xf3\x37\x7f\x44\x0b\x6f\x0a\xf8\x83\xcf\xe2\x74\x85\xdb\x56\x0c\x28\xb2\x8c\x39\xa5\x95\xe1\x05\xef\xa9\x72\x04\xce\x10\x35\xf9\x62\x54\xf5\x2e\x78\x3e\x46\x82\xda\x17\x9d\x2d\xe5\x53\x07\xd9\x7f\xdc\xc3\x9e\x96\xda\x5c\xfe\x60\x40\xfe\xad\x3d\xc1\xaf\xec\x19\xbb\xec\x6c\x30\xcf\x5e\xba\xef\x34\xd2\xa7\x11\x5e\x3b\x7a\xb5\x6b\xf8\x77\x44\x5d\x57\x20\x53\x36\xee\x8a\xd8\xde\x65\xac\x5b\xa8\x52\xbe\x97\x43\x0e\xfe\x35\x5d\x6e\xe9\xe4\x58\x62\x9e\x77\x96\xd3\xb6\x65\x91\xbd\xd9\xfc\xa3\xf0\x32\x54\x95\x20\x17\x43\xfc\xca\xb2\x5c\x8a\xcb\xa1\xec\xa1\x65\xf3\x7c\x89\x3c\x88\x90\xa6\x09\xeb\xeb\xee\xbc\x48\x1e\x91\x1a\x4a\xba\x98\xc7\xf2\x1c\x0d\x7d\x4f\xcb\x1d\x4d\xdc\xe8\x84\x37\xe1\x2d\xa6\x1b\xfa\xba\x16\xb4\x9b\xe0\x0b\x53\x90\x8f\x4b\xde\xe0\xf3\x26\xc3\xbd\xac\x8a\x61\xa7\x3a\x4c\xb6\x37\xed\x1c\x88\xe4\xc8\x27\x00\x4f\xa5\xb2\x27\xf5\x2b\x89\x86\xec\x06\xa0\x9c\x6d\xaa\xb3\x97\x0b\xe2\xfd\x19\xd0\x19\xd3\xf6\x44\xc4\xb4\x5c\x0d\x12\x86\xdb\x27\xf6\xbc\x1c\x33\x04\x14\xa0\x39\x42\x71\x10\xce\xf4\x40\x8f\xd5\xd8\x4c\xa0\x82\x14\x6c\xe8\x0c\x7c\x78\xd9\x59\x02\x44\xf7\x8c\xfe\x35\xd2\x45\x88\x45\x0e\x7a\xc8\xb1\xb6\x7d\xa5\xc5\xc6\x16\x87\xff\xe9\x56\xf0\xd1\x56\xfd\xea\x65\x9e\xe1\x03\xd1\x09\x0b\x2a\xfe\x4a\xcd\x6f\x9c\xd2\x97\x69\x24\x36\xec\x6a\xdc\x29\xad\x30\xb6\x8c\xdf\x75\xf2\xac\xd3\xcb\x2f\x99\x60\x0d\xf2\xc6\xff\x7a\x2b\xf8\x42\x6b\xfc\xfa\x15\x91\x25\x57\xba\xaf\x51\x96\x5c\xb6\xde\xae\xd7\xfa\x12\xe6\xfd\x11\x67\x08\x7e\xf2\x20\xfb\x47\x9b\x47\x38\xfb\x7f\xc3\x82\xb7\xb4\xec\xc8\x64\x9b\x25\x50\xd3\x6f\xea\xe0\x72\x6d\x7c\xaf\x94\x81\x38\x81\xd8\x46\xfd\x1b\x6d\x5f\xe4\x61\x8a\xca\x39\xc6\xa7\x15\x16\xe6\x1c\x9f\x57\x89\xe2\x25\x20\x9e\x43\x4e\xb9\xd4\x56\x14\x61\x79\x28\x9f\xa6\x83\xe0\x1c\x9f\x2f\x31\xea\xc3\x62\xfa\x2f\x31\x4e\x84\xf8\x4a\x43\x76\xb6\x16\x56\xbd\x3a\x8c\x8a\x28\xab\x84\xd0\x2c\xa1\xd8\xf7\x2a\xf9\x5e\x1b\xb5\xa1\xdf\x88\x44\xa4\x1f\x0d\x74\xb6\x35\xb0\xf1\xd2\x49\x54\x3d\xec\x3a\x57\xff\xfb\x3e\x56\x91\x76\x93\x6e\x72\xda\x6f\xe8\x6b\x50\x6e\x6e\xda\x10\xa8\xc6\xf4\xa7\xee\x72\xe5\xe4\x2b\x45\x15\xb2\x77\x9b\x94\xcb\x7f\xb9\x19\x4a\x4e\xd3\x97\x31\x01\x24\xa3\x60\xb4\x64\x3c\x08\x0d\x73\x2c\x17\xed\x8f\x5a\xef\x93\x83\x11\xd8\x57\x28\x48\x54\xae\x9d\xbc\xcb\x21\x98\x7b\x65\x44\xde\xc5\x24\x8b\xf3\x75\x50\xd8\x12\x39\x98\xbb\xc7\xd3\xdd\xe3\xe9\xdf\x8b\xf4\xeb\x8b\x46\x76\x92\x6b\xd0\x58\xd4\xcc\x42\xaa\x1f\x34\xbe\xde\x62\xf5\xd8\x53\x72\xa8\x51\xf0\x29\x78\x69\x08\x10\x83\x82\x4b\xdf\xd7\x0a\xae\x1b\xbf\xac\x16\xb5\x9d\x35\x80\x2e\x19\x2b\xcb\x15\x2e\x5c\xf0\x9e\x2e\xce\x0f\x12\xb4\x62\x9e\x4d\xfa\xa2\xac\xa2\xfe\xa0\x0e\xcd\xf4\x46\x8f\x35\x3d\xe6\xff\xdf\x97\x1e\x39\x79\xe2\xe4\x78\x79\xaa\xda\x10\x36\x99\x77\xb9\xf9\xa4\xf1\x97\xd2\x99\x1c\x2a\x1f\xb2\x1b\x19\x36\xc3\x0f\x83\x7f\x4c\x3e\x2c\x2c\x22\x1f\x44\x0f\x0f\x05\x5f\x11\x51\x01\xb9\xa8\xf2\x69\x7b\x42\xfc\xc6\x7e\x16\x6e\xa7\xaf\xad\x6c\x8d\x37\xee\x0f\x4e\x8c\x5d\x1d\xef\x69\x68\x80\x72\x7f\x59\x85\xea\xae\x77\x3a\xf7\x63\xfb\xd8\x3a\x9b\x1c\x96\xa2\xf0\x73\x76\x6c\xd3\x38\x64\xb7\x7e\xf7\x97\xa2\x58\xc8\xba\x79\x70\x93\xfc\xa5\xaa\xa1\xae\x36\x22\x31\x11\x72\xb7\xee\xbc\xd7\xed\x61\x07\xa2\x61\x0c\xe9\x1c\xa5\xff\x03\x7b\x82\xaf\x4d\xce\xab\x3f\x51\xef\xa1\xbf\xb8\x05\x33\xaa\xc2\x49\xc8\x28\x62\x55\x4c\x59\x41\x90\xae\x12\x29\xb2\x52\xc4\xc2\x41\xb4\x7e\xf9\xbc\xd5\x81\x98\x90\x00\x55\xe1\xf3\x99\xf5\x0d\x44\x03\x19\x39\x57\x32\x4a\x59\xaa\x44\x51\x1a\x98\x8f\x5a\x89\xb0\x9b\x46\xa6\x09\x2a\x0f\x5e\x3e\x71\xa8\x34\x77\x42\x3e\xaf\x84\xd8\x78\x21\xe8\xbf\x84\xcc\x5a\x41\x01\xda\xa0\xaa\x9b\x72\xf1\xe8\x46\xdb\x8c\xa6\x71\x20\x15\xc3\x6a\x79\x43\xf7\xa1\x21\xd9\x30\xca\x60\x6e\x18\x28\x7a\xf5\xf2\xab\x9c\x8b\x5a\xe4\xa5\x5d\x4b\x93\xb2\xa3\x3f\x13\xad\x47\x05\xc2\x21\x45\xce\xa3\xf8\x41\xcc\x8c\xa0\x53\x90\xf3\x45\xfa\x20\x46\x38\xe9\x7b\xb6\x37\x3f\x29\x79\x50\x15\x43\x81\xfc\x4b\x34\xbd\x15\xc1\x85\x83\xc4\xa3\xcb\xa4\x8e\xb5\x2c\xf1\x40\x10\x87\xf6\x92\x4d\x30\xd3\x56\xd9\x93\x9c\x6f\xfb\x0f\x04\x77\xcf\xbb\x95\x71\x89\xea\x4c\x85\xd6\xa3\x72\x6c\xde\x47\xc4\x1e\x27\x57\x98\xeb\x55\xbe\x9b\xed\x81\xd3\x8a\xff\xac\xe0\x28\x66\xee\x6c\x58\x70\x47\x8e\x74\x76\x08\xb6\x35\x48\xb5\x12\xb1\x5d\xe5\xdf\xdf\xc3\xee\xd8\x02\x0c\x62\xb1\x48\xf2\x22\xa9\x46\xf7\xca\x8d\xec\xb8\xed\x39\x3a\x9e\x67\x98\xc4\xe7\xbf\x6e\x4f\x70\xef\x36\x9e\x73\x34\xa5\x8e\xbe\x2a\xb5\x44\x7a\x59\xfb\xd0\x2d\x39\xf3\xbe\x49\xf6\x2e\x8a\x7e\x3f\x5b\x44\x59\x99\x28\xc1\xeb\xbf\x69\x07\x81\xf9\xcf\x5b\x1e\x2f\x70\x59\x7b\xe7\x9c\x08\x78\x53\xd3\x4a\x3f\xae\x10\xb4\xf3\x4c\xcd\x3b\x88\xde\x43\xf6\xad\x90\xad\xb2\x7d\x7d\x51\x96\xd1\xaa\xf0\x9f\x17\xdc\xb7\x4c\xbf\x29\xf1\xb7\x37\xec\x47\xd9\x74\x21\xa2\x18\x0e\x0f\x74\x53\x8d\x21\x42\xbb\x01\x79\x12\x79\x97\xb0\x36\xfa\xd3\xa1\x0b\x01\xbd\xb7\x10\x51\x99\x67\xfe\x4a\x70\xff\x32\xfe\xa4\xcf\x0c\x21\xee\xb4\x2d\xab\x38\xbd\x9e\x17\x71\xdb\xe8\x32\x1c\x1f\x34\x0c\x37\xaa\x85\x87\xca\x4d\xbf\xd6\xd5\x9a\xbb\x6c\x95\x32\x41\x25\xa5\x25\x0c\xac\x68\x42\x2c\x52\x07\x4d\x9c\x05\x2c\xee\x3b\x91\xdb\x90\x08\x1c\x9d\xcc\x64\xf3\x9d\xe3\x94\x00\x79\x4b\x10\x2e\xcb\x1f\xfa\x1b\x76\x00\xb8\xf5\x85\xc6\x42\x3e\x3a\xc1\xa6\xc6\x49\x93\x91\x08\xac\xce\x9a\xec\xbf\x7e\x22\x78\xa0\xce\x69\x3c\x96\xac\x9c\xe6\x90\xdc\x69\x91\x05\xe3\xa8\x6b\xcc\xe1\x24\x23\xfd\xdc\xe1\x87\xb6\xe6\xf2\xcf\xb6\xd8\xbf\x6e\xb1\x6f\xe9\x98\xdb\xca\x0e\x59\xfa\xaf\x6d\x05\x1f\xb2\xe9\xe7\xf5\x1d\x45\x48\x6d\x39\x8d\xd5\x1d\x34\xb2\x29\x7c\x31\x95\x89\xda\x95\x0a\xb6\x53\x4b\xb9\x9f\x60\x9e\xb1\x49\x69\x43\x71\x9b\x8d\x54\x7f\x9a\x52\x6d\xb4\xc4\x5a\x6b\x0e\x95\x56\xea\xa2\x41\x36\x8b\xe2\x58\x38\xb1\x14\x27\xd8\x26\x28\x5d\x9b\x31\xee\xda\xb6\x59\xf6\x3b\x7b\xd9\x73\x2e\xd5\x7e\xbd\x21\x5f\x95\xff\xbf\xf7\x04\xa7\x36\xba\x39\x3e\xe8\xea\x30\x16\x27\x5d\x0c\x78\x73\xd8\x19\x23\x7e\xfc\x4c\x78\xc1\xdb\xaf\xbc\xdc\xce\x68\xbf\x71\x0f\xfb\xe4\x04\xd3\xf7\xfc\x0f\x4c\x04\x8f\x4f\xe8\x7c\x6a\x83\x7e\x21\xbf\xd4\x48\xb3\x43\xdf\x06\x30\x23\xf0\x7c\x58\xdc\x29\xe3\xac\x34\x73\x7c\x9a\x2f\x9f\xce\x33\xb1\x3c\x87\xcc\x3d\xf4\x76\x81\x91\x36\x84\x66\x08\x5b\x9d\x3e\xcc\xc2\xcc\x58\xd7\xa4\x15\x55\x0e\x71\xcd\x72\x52\x80\x07\xd8\x01\xa6\x1b\xa3\x07\x9a\xe6\xcb\xcf\x15\x2b\xbd\x3c\x3f\xb7\x3c\x07\x7b\x24\x9e\xc5\x70\x56\x80\x7f\x09\x64\xa2\x49\x6a\x5c\xc7\xa7\xc1\xdb\x9c\xab\x45\x6c\x48\xff\x4c\x4e\xb8\xe5\x75\x66\x1c\xac\x51\x42\xc4\x22\x36\x7c\xe4\xc8\x89\x48\xe7\x79\xf2\x6f\x63\x0c\x72\xd8\xcc\x11\x6b\xb1\x99\xe2\x39\x59\x05\x29\xab\xcf\x5b\x75\x43\x13\xba\x23\x4c\x7e\xcb\x63\xfb\xe8\x09\xff\x23\x1e\xfb\xee\xcb\xc3\xd5\x13\x52\xf7\x59\x64\x6a\x1d\x55\x8f\xf1\x89\xa8\x18\xe9\x2d\x6e\x35\x7a\xd8\x48\x40\xcc\xe4\x5a\x56\x93\x6c\x99\x88\xd9\xe5\xfb\x7a\xac\x42\xf6\xce\x6b\xd8\x03\x57\x86\x64\xcd\xff\xec\xc1\xe0\x9f\xb7\x36\x64\x78\x72\x8c\x72\xae\x01\xd4\xa0\xc5\x8b\xf3\x83\xdc\xc2\xb6\xb4\x94\x2f\xce\x17\xaa\x12\x1d\x93\xca\xf1\x69\x51\x46\x45\x15\xbf\x15\xec\xc6\xa1\x7c\xe2\xf6\x90\xfe\x40\xde\x28\x9b\x41\x8b\xe8\x6c\x67\x6f\x68\xf3\x41\x1a\x65\x8a\x53\x17\xa0\x09\x61\xf2\xc9\xbb\x47\x8f\x42\x4e\x06\x77\xdb\x4f\x87\xfd\xb5\xd9\x8d\x59\xac\x14\x1d\x57\x53\xac\xc3\x07\xf6\x4b\x5d\x06\xad\x6e\xff\xca\x63\xbd\xab\xc1\x7b\x07\xe6\xba\x9b\xcb\x71\xe2\x66\xd9\x6f\x2e\x75\xb3\x25\x7e\x34\x73\x33\xfb\x25\x63\xaf\x7b\xb7\x77\x25\x09\x0d\xad\x2a\xa3\x9d\x6f\x9e\x54\x0a\xd7\x51\x4e\x30\xfa\x3a\xe5\xb4\xda\x84\x52\x6c\xd7\x74\xb7\x6b\xba\xfb\xfb\x62\xba\x5b\xdf\xda\x74\x77\xd6\x3f\x63\x99\xee\xc6\xe5\x96\x89\x18\xd8\x68\xbd\x34\x21\x06\xfe\x9e\xc3\x0b\x25\xcf\xd7\xe0\x3f\x06\x8c\xd5\xa3\x2e\x62\xe0\x29\x51\x15\x49\x87\xac\x4e\x6f\x3d\x10\x7c\xa9\xd5\x74\xa7\xb6\xa0\x95\xfd\x1e\xe7\x12\xe2\x84\xa8\xa9\xd3\x87\xd7\xe8\x24\x5c\xe5\xd6\xa1\x1c\xb0\xb2\x1d\xaa\x71\x83\xc7\x9c\xc5\x1c\x80\xa5\xcb\xb6\x12\x79\x00\xf7\x11\x75\x7a\x14\xd3\xe6\xfa\x0d\xc0\xd7\x46\xe0\x61\x08\xe4\x7b\x7c\xf1\x7e\x48\x54\x13\xfd\xbc\x18\x1d\x0e\x39\x5f\x92\x7a\x11\x56\x06\x55\xb3\x95\x61\x92\x56\x50\x52\xad\x52\x19\x85\x93\x43\xd5\xa4\x9c\xc2\xae\x22\x8d\xa5\x84\x5d\x2d\x27\xea\xc5\x5c\xee\x2f\x6b\x51\x92\xc2\x41\xb0\xca\x79\x26\xb7\xb1\x14\x98\xf0\x64\x45\xd5\x07\x0d\x5d\x7a\x30\xc8\xe3\x32\xe0\xa4\x81\x69\x66\xaa\xa7\x53\x5b\xe6\xd7\x44\x11\xad\x22\xc6\xad\x0b\x03\xb2\x97\xfd\x59\x8b\x35\x3d\xe6\x7f\xa1\xc5\x6e\xd9\xf6\xd4\x0c\xb5\xf6\xf7\x9c\x61\x04\x5e\xa5\xe0\xcd\xad\x86\x52\xeb\xbe\x19\x3d\xb6\x20\xc1\xf1\x41\x63\x19\x75\x07\x3b\xea\x14\x79\xa9\x90\xbb\x52\xb1\x16\x65\x15\xb8\x91\x60\xc4\x23\x5e\x44\xeb\x54\xdc\x94\x9d\xe5\x07\x40\x94\xa2\xe8\x48\x39\x6d\x97\x0d\x73\xe2\x70\x9b\x97\x98\x4e\xaa\xc4\x30\x75\x24\x7d\x52\x09\xaa\xd1\x40\x00\xc0\x89\xed\x56\x43\x6d\xb0\xcd\xe5\x19\xaf\x88\x53\x51\x5a\x67\x5c\xe5\xb3\x05\x5a\x6b\x2a\xca\x0e\xfa\x09\xd9\x1d\x94\xce\x35\x17\x4c\xab\x4c\xb9\x7a\xb4\x97\x9d\x0a\x0a\xb5\xad\x1f\xbb\x7f\xb7\xc5\xfe\x2f\xb7\x8f\xef\xaf\x92\x94\xa0\x1d\xfc\x0f\xea\xec\xde\xb7\xb5\x36\x7c\xea\xca\x8c\x87\x16\xe6\x98\xf8\xbe\xc9\x00\xa8\x5d\x6c\xec\x1b\xca\x04\x21\x0b\x04\xfd\x0e\xfb\x5e\xa5\xd5\x53\xf9\x00\x78\x87\x2b\xd4\x9e\x65\xcb\x88\x99\x20\x2a\xbd\xa4\xb7\x1e\x11\x27\x57\xf7\xf7\x0f\xb2\x6f\xdf\x04\x06\xc3\xff\xe0\xc1\x60\x8e\x7e\x8f\x41\x5f\xd8\x26\x2e\x94\x5a\x8a\x3c\xba\x11\x01\xe3\x31\xb6\xab\x8c\xec\x2a\x23\xbb\x69\x16\x97\x35\x3e\xf3\x2f\xd5\x61\xea\xbf\x78\x6c\x7a\x43\x17\xd4\x18\xba\x8d\x3c\x11\xfd\xb2\xb7\x6d\xf4\x68\x03\x6a\xd3\x26\x14\x3b\x35\xb5\x14\x42\xcb\x15\x6f\x71\x9d\xba\xeb\xb7\xcc\xa1\xec\xa3\x1e\x9b\xd9\x7e\xd3\xf1\x64\xf5\x2a\xef\xf8\x58\xd0\x84\x05\xdd\x73\x95\x5b\xf3\x84\x77\x66\x6b\xdd\x76\xc6\x9f\xd6\xba\x2d\xb4\xca\x28\xb3\xd8\xb4\xba\x4f\xfa\x07\x18\x6b\x4a\x5b\x39\x2e\x06\xbd\x3b\x97\x0c\xe4\x8c\x83\x4d\xf3\xd9\x03\xc1\xab\x3d\x07\x9b\x46\x3e\xce\x2d\x08\x12\x44\xbb\x40\xa8\xb6\xa8\xac\x54\x36\x4f\x57\x28\xcf\x2f\xa4\xeb\xc3\x6b\xdd\x92\x92\x3e\x4a\x0d\x1d\xbc\x19\xd0\x4b\x5e\x34\xe3\xbc\xec\xef\xe7\x59\x22\x3b\xd8\x85\x38\xdc\xcf\x3e\x6d\x23\xbd\x7c\xcc\x0b\x7e\xde\x53\x4c\xe2\x73\xe3\xa0\x2d\x7c\xca\xc0\xd2\x00\x37\xc5\x8e\x30\x61\x1a\xe6\x87\xa2\xb2\xd5\x26\x12\x6c\xfa\x4c\x07\x7a\x62\xe6\xcc\xc9\xf9\x13\xa7\x4e\xca\xc1\xef\xe5\xeb\xd3\x55\x3e\x3d\x2c\xc5\x74\x52\x39\x7e\xad\x0f\x7b\x8c\x61\x36\x92\xec\x70\xff\xdd\x5e\xf0\x53\x56\x93\x96\xf4\x1d\xa5\xcc\x40\x24\x5a\x95\x03\xd5\x92\x0a\x1f\x05\x3f\x72\xdb\x86\x28\x99\x11\x55\x07\x6a\x01\xec\x93\x21\x7e\xe0\x72\xb6\xc0\x49\x52\x3f\x80\xe5\x9f\x11\x5d\xff\xf7\xb6\xc3\xf0\xb8\xa4\x1e\xc7\x2c\xaa\xe0\x6d\x63\x2d\x3e\x23\xba\xdc\x49\x60\xa7\xbd\xbb\xe6\xa3\xa7\x76\x35\x76\x01\x81\xc8\x5e\xb6\x36\xb3\x1f\xf3\xc8\xf3\xff\x23\x5e\xf0\x52\xab\xc6\xb6\x43\xbf\x88\xe2\xbc\x24\x16\x58\x48\xe4\xb6\x2a\x14\xc5\xfd\x24\xbb\x32\x63\xf0\x33\x72\x9f\xa3\x15\xe3\x3f\xe6\x05\x8f\x2a\xd3\xe8\x1c\x3f\x45\x97\x51\x69\x70\x69\x37\x60\x9d\xab\xf7\x2e\x67\xcd\x36\x74\x17\x0b\x36\x29\x27\xb0\xff\x50\xb0\xe8\x74\x60\xac\x00\xa7\x54\x32\x6d\x91\xe7\xf2\xf8\x11\x11\x93\x7d\xa4\xe8\x88\xd2\x14\x6b\x5d\x15\xc2\xed\x5d\x07\x38\xe1\x17\xaf\x61\xdf\xda\x30\xef\x16\xf3\xd8\x7f\xf3\x35\xc1\xfa\x62\x1e\x37\x75\x87\x49\xa7\x35\x99\xf2\xc5\x30\x43\xd4\x91\x1e\x30\xc7\x90\xe9\xdd\x62\xd1\x07\x07\x13\x84\x90\xa3\x7e\x84\x27\x71\x8d\x62\xc6\xf3\xac\xca\xe1\xe5\x1a\xa6\xef\x27\x19\xfb\xbc\xda\xc8\x3f\xe5\xb1\xa9\x2d\x17\xcd\x62\x1e\xc3\x1e\xfe\xd6\xed\xef\xe1\x74\xc6\xb8\xea\x1b\xf5\x9b\x5a\x7a\xa3\x7e\x55\x8b\x5d\xbb\xad\xa6\xe1\x1e\xfd\x25\x6f\x5b\x5c\x12\xd0\x28\x37\xac\x51\xab\x9f\xe0\x68\x89\x2a\x11\xf2\xc5\x7c\x30\x4c\x23\x0b\xe6\x4a\xe1\x5a\x9d\x51\xc8\x64\x57\xbd\x67\x76\x4f\x43\xbb\xa7\xa1\xdd\xd3\xd0\x65\x3c\x0d\x3d\xe1\xdd\xb3\xb5\x1a\x3d\xe5\x7f\x57\x53\xb6\xf4\x62\x1e\xd7\xf5\xe7\x3f\x3a\xe0\xc4\x4f\x68\x85\x05\xa3\xca\xef\x5b\x72\x14\xe7\x5f\x38\x10\x1c\x75\xf4\x66\xfd\x18\x37\xa0\x63\x2a\x07\x5a\xdb\x10\x9d\x5d\xe0\xbf\xee\x67\x1f\xf5\x34\xf4\xdf\xfb\xbc\xe0\xed\x5e\x1d\xfa\xcf\x40\xd2\x99\x74\x86\x3a\xa6\xdf\xf6\x01\xfd\xc2\xcb\x05\xe5\x67\x4f\xac\xf3\x96\x4e\x9e\x06\xcf\xbf\xb2\x7a\xb8\xa3\x3d\x7f\xc6\x51\x3e\x3f\xe6\x5d\x22\x96\x45\xf0\x72\xcf\xe8\x9d\x2e\x51\x37\xa9\x98\x16\xe0\x48\xbe\x22\xb5\x04\x25\x5a\xcc\x98\xcf\x2f\x2e\x48\x75\x00\x82\x07\xa3\x14\x0c\x7b\x5d\x8b\x17\x03\xf8\x0d\x95\xc2\x42\x01\x0c\x3a\x94\xa4\xaa\xa4\xba\x2a\xe2\x90\xfd\xb0\xc7\x18\x4e\x19\x40\xd3\x7b\x34\x18\x3c\xa0\xff\x52\x5a\x66\x2d\x98\xca\xb6\xab\x9a\xea\x60\x21\x21\xa7\xde\x43\xf0\x14\x83\x41\x82\x91\x52\x06\x6f\x4d\x27\xac\x3b\x23\xfb\xd9\x09\xf6\x14\x53\x1b\x04\xc6\xfa\xd0\x44\xf0\xae\x89\x07\xdc\x8b\xf5\x4e\xeb\xe4\x63\xa0\x95\xf4\x25\x5d\x41\xd5\x3f\x16\xaa\x8b\x83\xa8\xa6\x23\x71\x16\xf3\xf8\x50\x69\x3d\x65\x47\xfe\x28\x52\x0c\x48\xf9\x29\xeb\x21\x8c\xd0\x31\xb2\x2e\x84\x9a\xb7\x22\x78\x3f\x29\x8a\x5c\xc1\xa5\xdb\xd5\x41\xa3\x6c\xb2\xda\x03\x66\xce\xac\x12\xab\x05\xa1\xa4\x2f\x89\x8a\x5b\x63\x00\xe1\x1d\x23\x2c\xbb\xca\x15\x2c\x8e\x20\x25\x0c\x87\x97\x94\xb0\x61\x81\x6f\x57\x39\x0f\xe8\x16\xac\xa3\x51\x3e\xd4\xec\x9e\xe8\xe6\xb0\x88\x64\xc6\xfb\xe9\x74\x8d\x65\x86\x0e\xd6\x83\x42\x4c\x23\x06\xec\x58\x5b\x54\x17\x91\x76\xea\x0c\xe9\xeb\x3d\x76\xed\xb6\x44\xfd\x62\x54\x75\x7a\xbe\x08\xbe\x1b\x7e\x20\x11\xa3\x8e\x48\x86\xdc\x1c\x44\xee\x93\xeb\x83\x26\x21\x84\xf0\x92\xd0\xaa\x8d\xc5\xe2\xfc\xd9\xe3\x77\x6b\xe6\x98\x95\x3c\x76\x52\x73\xd8\x6b\xf7\xb3\x9b\x9c\x3c\x18\xf2\xa6\x2b\xbd\xc4\x44\xb1\x51\x2b\x49\x65\xba\x37\x29\x2b\xff\xb7\xf7\x05\xdf\x66\xa0\x95\xdd\x07\xca\xf0\x82\xb7\x27\xa9\x44\xbf\x66\x4a\xd8\xcb\x16\xac\xdd\xf0\xb6\x8b\x70\x07\x59\x81\x5b\x49\x89\x0c\x6f\xbb\x6a\xdd\x0e\xd5\xba\xe7\x31\x1c\x23\x7f\xc9\x3e\x3c\xde\xc9\x4e\xb0\x3b\x36\xc9\x95\xda\xe6\x1c\xd9\x55\x1a\x2f\x5d\x69\xbc\x68\x17\xbc\x1e\x0c\x13\x10\x53\xf3\xc3\x8f\x2f\x60\x57\x0b\xc3\x31\x64\xec\x2d\x13\x0e\x5c\x8d\xda\xbf\x4f\xe7\xb1\x0e\x13\xf5\xff\xa6\x15\x7c\xc8\x9b\xe7\x59\x1e\x0b\x9b\x22\xdd\x71\x5a\x0d\x33\x27\x23\xa5\x04\xd5\x24\xef\x42\x18\x33\x00\xb3\x16\x8a\x48\xfc\xe1\xa1\x28\x20\x85\x6f\x0d\x19\xba\x31\x81\x12\x78\x98\x6e\x41\xd1\x9b\x94\x6d\x9e\x54\xf5\x2f\xdc\x77\x66\x3c\x9e\xd4\x76\x13\x92\x52\xe6\xd6\xb2\x12\x45\x5f\x0a\xa7\xa7\x65\x56\x83\xce\xca\x8b\xae\x0b\x0d\xd2\x79\xc6\x1f\xf2\x5f\xe2\x05\xb7\xea\x18\x60\x6e\xc4\x5f\xd3\x57\x20\x34\x12\x7e\xc2\xbe\x33\x46\x84\x7e\x3d\x3b\xb6\x09\xd8\x43\x53\xcf\xcb\x3a\xb0\x9f\xb8\xc6\x21\x94\x6d\x8a\xa4\xbf\x33\xcd\xd7\x97\x40\x34\x2d\x0d\x44\xc7\xff\xc6\xc1\xe0\x2e\xf7\x52\x43\x7c\x96\x79\xe0\x50\xe9\x3a\x32\x79\x9a\xe7\xe7\x4a\xc0\x7e\x0d\x2f\x78\xdf\x36\xd8\x30\xfc\xde\xe9\xc2\xbf\x64\xec\x63\x2d\xb6\xc9\xd3\xfe\x4f\xb7\xd8\xe2\x86\xcd\xbf\xb8\x04\x01\xa3\x53\x7e\xca\x5b\xde\xf8\x93\xcb\x4a\x94\x1b\x13\x67\xc4\x37\x2e\x55\xfb\x7a\x15\x64\xd2\x82\x03\x48\xd9\x11\x8a\xb3\x79\x05\x4f\x1a\xe9\x9a\xc2\xad\x36\x9d\xa9\xb5\x82\x64\x35\x03\x15\x08\x37\x83\xe2\x1c\x5a\xdf\x92\x0c\xd3\x43\x92\x8c\x4b\xd9\x44\x89\x25\x26\xcc\x9c\xfd\x79\x8b\xed\x81\x20\x6a\xff\x4f\x5a\xc1\x9f\x7a\xcb\xf0\x7b\xd9\x1a\x3f\x0c\xcc\x2e\x1c\x06\x68\xc5\xd5\x2f\x45\x62\x9a\xaf\xd3\x36\x45\xc6\x1b\xab\x6e\x36\xad\x65\x13\x9b\xe5\x86\xc4\x92\x44\x7e\x32\x4e\x0c\x29\x5f\x4a\x14\x55\x31\x25\xd2\xa4\x09\xe5\x6b\x17\x46\x8d\xcc\x72\x53\x65\x4d\x4b\xe6\xf6\x9c\xb3\x56\xee\x66\x77\xb2\x13\x17\x37\x59\x34\x7b\x67\xf9\xdc\xa4\xea\x11\x83\x50\xb9\x4d\x7a\x86\x9f\x69\xb1\xa7\x23\x1e\xe1\xea\x30\x29\x7b\xa2\x38\x25\xaa\x5e\x1e\xfb\xaf\x69\x5d\x64\x35\x64\x7b\x4e\x8c\x17\x14\x7c\xd2\x5b\x6e\x28\x7f\xb9\x0e\x62\xd2\x21\x36\x02\xb0\xc3\xca\xa1\x74\x5e\xa2\x60\x52\x9b\x3a\xd2\x1a\x7a\x35\xea\xcb\x59\x92\x2e\x3b\x67\x05\x4a\xdc\x71\xcb\x4a\x4a\x79\x41\x9e\x6d\x62\xca\x0a\x1b\x96\xf5\xf0\x94\xaa\x0e\x12\xc1\x7e\x64\x82\xf9\x6a\x00\x17\x0b\xd1\x91\x27\xb1\x8e\xf0\xff\x87\x0e\x15\xf9\x72\x6b\x79\xfc\xfe\xb2\x43\x67\xd5\xcb\x21\x3c\xa9\x9f\x8f\xcd\x01\xa7\x51\x2a\x35\x5d\xcf\x35\x08\x3d\xc7\x4c\x3b\x6b\x52\xcb\xb9\x47\x45\xc9\x62\x75\x66\x1f\x61\xfb\x00\xcc\x66\x9a\xaf\xcb\xd9\x4e\x64\x9a\xeb\x02\x81\xae\xf1\xb0\x92\xe6\xab\xf4\x54\x2f\x59\xed\x89\xb2\x3a\xcc\x4f\x8d\x35\x20\xe4\xfc\x64\xd4\xe9\x35\xdc\x21\xc5\x46\x61\x99\x14\x51\xb6\x8a\x41\x63\x0f\xce\xb6\x67\x8f\x1c\x39\x72\xe4\xa1\xd0\x62\x83\x24\x8c\xee\x81\x79\x3d\x29\xeb\xc7\xd7\xa4\xd2\xcb\x86\x02\xac\x65\x39\x88\x09\x0e\xc7\x1b\x37\xd2\xe4\xfd\x7b\x1d\xda\x5d\x03\x1a\x84\x13\x12\x0f\x55\xf3\x00\xd9\x06\xdc\x72\x68\x56\x79\xe9\xde\xe0\x4b\x5e\xf3\x3d\x37\x96\xda\x46\xf0\x37\x91\xd4\x08\x01\x27\xf7\xc4\x33\xf2\x34\xc7\xb3\x7c\x1d\x85\x88\x76\x7f\x3e\x40\x0e\x4a\x85\x84\x4b\x2f\xf0\xb5\x24\xb2\xb8\x88\xf0\x6a\xd1\x96\x1d\xd6\x1d\x4a\xad\x49\x8e\x8e\x54\xf3\xe0\xb0\x89\x54\x1a\x49\x96\x26\x99\xd0\x2e\x4f\x02\x1e\x05\x26\x80\x0e\xd8\xaf\x8d\xb0\xa2\xaf\xe9\x20\x7b\xb5\x3b\xbd\x6e\x92\x7d\x74\x82\x3d\x15\x4b\x22\xfb\x92\xdc\x2a\xdf\x39\xb1\x0d\x63\xc6\x98\x4b\x77\x20\x3a\xc1\x7f\x6b\xd5\x0b\xb3\x20\x69\x28\x9e\xde\x85\xb8\xb3\x18\xe8\x08\x41\x2f\x6a\x30\x61\x29\x64\x88\x95\x11\x3a\x7c\x0f\x95\xaa\xfd\xb6\x59\x8c\x64\xbb\x26\x6c\x1d\x68\x2b\x3c\x8c\x82\x8a\x7d\x3a\xbe\xb4\x70\x2a\xa1\x33\x36\xef\x8a\x48\x76\x30\x84\xa1\x19\x1e\xb5\x22\xca\x4a\x7c\xb3\x8b\xf9\x0c\xa0\x54\x6f\xf2\x69\x04\x93\x6f\xea\x93\x7a\xa5\xe4\x04\x9c\x86\xbc\x3b\x10\x30\x09\x51\xae\xf6\x72\xdc\x19\x57\x46\x14\x7d\x4f\xab\x5e\x64\x28\x8c\x36\xac\x38\x3b\xc5\xbe\x65\x50\xfb\x2e\xd8\x6f\xae\x0f\xa6\x6c\x44\xf3\xf1\x4e\xd5\x5d\xee\x1c\xd2\xff\x05\x63\x27\xec\xa3\x4e\x4c\xd9\x47\x85\x58\x4d\x20\xcf\x81\xd2\x8a\x4f\x0d\x2b\xb0\xf0\x99\x9c\x0a\xa3\x33\xc0\xd1\xf8\xdf\x1d\x08\xee\xd9\xea\x21\x17\x86\x77\xb3\xa7\x9b\xcf\xd2\x5f\xde\x25\xeb\xdf\xf1\x01\xf8\xb5\x9e\x3a\x01\xff\xa0\x17\xfc\xd3\x7b\xb7\x33\x16\xb6\x52\x72\x86\x2d\xb2\xd3\x1b\x9f\x94\x2f\x65\xfa\xec\x9e\x9a\x77\xe0\x6a\xf9\x8c\xed\x6a\xf9\xb8\xb7\x23\xeb\x52\xf0\xfd\xc6\xd1\x82\xe4\xbf\x57\xcb\xc9\x62\x35\xee\x09\xef\xfb\xbd\xad\x0d\x01\x2f\xf0\x1f\x32\xb1\xf8\x8d\x93\xae\x66\x0b\xd8\x4a\x34\xd5\xfd\x33\xff\xbc\xcd\xe6\xb6\x31\xb1\x49\xbf\xc0\x5c\x7f\x53\xbc\xff\xab\xcf\x0c\x96\xc7\xae\x5a\x27\x98\x28\x33\xd5\xd6\x89\x7b\x0a\x97\xc0\x61\x54\x56\xce\x95\x3c\x2b\xa5\x56\x14\x0d\x06\x29\x28\xb4\xb9\x89\x4f\xbf\x06\xe7\x2d\xb6\xc9\x11\x98\x1f\xb9\x96\x7d\xf1\x00\x7b\x9a\x36\xfa\x6a\x73\xc6\xaf\x1e\xd8\x79\x02\x69\xf0\xd2\x03\xa7\xeb\x05\xf3\x58\x74\x92\xd8\x65\x7b\x2f\x86\x78\xa4\x54\xcd\x84\xbc\x48\xb5\x56\x57\x22\x4a\x46\xd3\x2f\xf4\x6c\xf8\x75\x0d\xa1\xa9\xd0\x3e\xad\xf3\x97\x32\x3d\xe8\x33\xaa\x62\xa7\xa9\x4a\x91\x76\x51\x84\xe8\x92\xf0\x8c\xaa\x8f\x5d\x49\xa9\xa8\x05\xf1\xeb\x24\xfd\xf5\x84\x07\x33\x4d\x39\x56\x72\xa9\x92\xd0\xd5\xf9\x18\x1d\x10\xb1\x85\xd1\x95\x54\x3c\x13\x6b\xf2\xce\xb9\x64\x50\xda\x0d\x0f\x19\x73\xb8\x6a\x36\xea\x9a\x91\xc6\xf8\x5d\x07\x6d\xde\x71\x5b\x00\x2e\x60\x0d\xcb\x20\x28\x86\x19\xa8\x18\x81\x14\xe5\xc1\x11\x64\x3b\x9e\x0d\x6e\xe1\xc8\x37\x25\x15\x69\xd0\xa2\xad\x4e\x93\xaa\x74\x37\x07\x67\xc6\x1c\xb2\xd7\x38\xe3\x18\xcc\xf1\x17\x31\xce\x03\xe8\xb0\x93\xe7\xa5\x3c\x05\x1b\x77\x30\xc7\x1f\x64\x9c\x73\xb8\x2b\xff\x17\x9c\x13\xa3\x60\xce\xaa\x42\x5b\xdd\xc0\x79\x0b\x45\x05\xa7\xf3\x6a\x21\x33\xb7\x70\xff\xd3\x65\xc1\xb5\x23\xfa\x36\x97\x75\xa7\xdf\x0f\xc1\x7f\x1f\x65\xf2\xd7\xa3\x8c\x2d\x74\x35\xf7\x90\xcd\xa4\x05\x2a\xd5\xc5\xf7\x65\x13\x16\x4a\x20\xb2\xb5\xa4\xc8\x33\x20\xaf\x86\xee\x1c\x14\x79\x8c\x3d\x5a\x56\xd1\x6a\x92\xad\x06\xb7\x5c\xbd\x6e\xb5\x6b\xd3\xd8\xb3\x5b\x75\x2b\xd4\xde\xea\x59\xd5\x86\xe6\xfe\x5d\x12\xe2\x32\xf0\x9e\xe0\xe2\x81\xb5\x0b\x36\x4f\x15\xdc\x25\xbb\xd3\x05\xa7\x2c\x43\xc6\x4e\x34\xe1\x31\x3a\x82\xa6\x4d\x06\x1f\xb5\xf8\xe5\xf2\x1a\x55\x3d\x38\x8b\xff\x3f\x93\xca\x56\xf4\xc7\x93\xc1\xcb\x27\x91\x66\xd4\xb6\x14\x45\x95\x2d\x41\x41\xd0\x00\x57\x83\xc2\xae\xb4\x70\xf2\x9c\xd5\xca\x3b\x51\x21\x08\x24\x02\x8f\xdd\x0d\x37\x40\x90\xa9\xd2\xc9\x0e\xa4\x6a\xf9\x82\x28\x1b\xbd\x00\x68\x7d\x43\x7e\x77\xbe\x2e\x2b\x0d\x47\x3c\xe0\x2c\x05\x6e\xd3\x02\x78\x9f\xb8\xd9\x27\xe6\xd5\x96\x40\x1b\x06\x6e\x00\x6a\xeb\x1a\xbf\x0b\x5a\xcc\x60\x58\x69\x9d\x48\x49\x25\x70\xb4\x62\x0e\x27\x21\x85\x5a\x46\xbb\x8e\x1c\x3d\x05\xb1\xa1\x10\x0e\x15\xef\x64\x3a\x22\x8b\x88\x2a\x72\x00\xb0\xc6\xed\x1d\xd4\x12\x1c\x90\x02\x41\xde\x53\x8c\x54\xb3\x36\x3f\xad\x64\xc9\xe9\x32\xb6\x65\xba\xb6\x49\xfb\x3b\x8d\x0f\xd0\x0c\x74\x34\xd6\x53\xec\x1e\xb6\x70\xd1\x1a\x2b\x65\xde\x0d\x53\xf1\xdc\xa4\xea\xdd\xa7\x67\x10\xfb\xbd\x09\x76\xb0\x4c\x62\x71\xb2\xdb\x95\x9f\xf2\x7f\x7d\x22\xf8\xa5\x89\x25\x73\x01\xbb\xdd\xda\x00\x81\x59\x8c\xa6\x4e\x2f\x2a\x39\x40\x55\x0a\x7c\x38\xe4\xf3\x1d\xb9\xa2\xc0\xbb\x6e\x63\x0d\x50\x7a\x7d\x9b\x9f\xce\x33\xd1\xe6\x4b\x79\x5f\xe0\xef\xfb\xb2\x13\xc5\xe8\xcc\x30\xe3\xba\x7b\x41\x74\xd9\x85\x62\xf6\x76\x22\xc7\x13\x39\x2e\x61\xcc\xb3\x4e\x92\x26\x14\xcc\x0a\x41\x1a\x6d\x5e\x26\x68\x0d\x56\x86\x50\x02\xed\xc3\x13\x8b\x3a\x7e\x93\x45\xa2\xac\xc4\x40\xd9\x86\xcd\xe0\x75\x7a\x40\xeb\x46\x7a\x8b\x53\x09\xb0\x7d\x02\x63\x68\x26\x0c\xf5\x42\x16\xe7\x99\x40\x5b\x2f\x99\x6e\x49\xee\xc6\xd8\xaa\xa8\x42\xf5\xd1\x58\x4d\xa3\x61\x95\x4f\xeb\x2a\xa1\xed\x68\xa4\xad\x63\xaa\x63\x75\x27\xa8\x51\xb8\xed\x36\xd5\x87\x10\xfa\x9d\xf7\x85\xcb\xb5\xa9\x20\x52\x1c\xde\xb2\x7d\xec\x20\x14\x8c\x76\x54\xff\xe5\xfb\x82\xbf\xde\x6b\x5d\x70\x0d\x95\x72\xb3\x00\xc9\x13\x68\x5a\x71\x65\xdd\xc3\xda\x01\xb1\x30\xb0\x75\x53\x6b\x9b\x60\x25\x78\x00\x16\x1c\xdc\x60\x4e\x3e\x3c\x4c\xd6\xa2\x54\x0a\xfb\x90\xb1\x69\x34\xee\xcc\xe9\xc6\xaa\x71\x52\x96\xea\xa4\x92\xa2\x15\xcc\x3f\xc6\xaa\x6d\xe2\x1a\x0a\x10\x3d\x75\x7a\x3c\xe4\x46\xe8\x83\x65\x4b\xf3\xca\xc4\xf8\xc6\x5a\x12\x01\x28\xdd\xcc\xda\x6c\x5b\xfd\x80\x85\x80\xc7\x59\x93\xf1\x6a\xae\xaf\x0c\x2b\xdd\x0d\x58\x2f\x48\xe1\x10\x31\x5f\x8e\x06\xc9\x5d\x52\x43\x2f\xe7\x1e\x0c\x64\x61\xc1\x43\x6d\x0b\x1b\x43\x5e\x5d\x9b\x95\xd7\xb4\xf8\x9d\xe3\x0f\x06\x56\xf5\x82\x87\x96\xdb\x56\xab\x31\x67\x5e\x7f\x9a\x43\xbb\xea\x15\xb2\xd0\x36\xc0\x04\x96\xe9\x7d\xc5\x28\x61\xd3\xdc\xf4\xf3\x78\xe7\x26\x5d\xd5\x1f\x0e\x8a\x82\x1c\x62\x4a\x84\x95\x8d\x25\x5e\x79\xe8\x30\xd2\x08\xe7\x17\x17\xf0\x44\x22\x6b\xa6\x61\x37\xae\x70\xf7\xcb\xeb\x7f\xfb\xba\x7f\xc5\x06\x57\x31\x2f\x62\xc0\x72\xe3\x98\xd8\x4b\x93\x56\x84\xbd\x32\xbf\xa6\x78\xfb\xfe\xc0\x0b\x3e\xeb\x9d\xad\xa5\x78\x8e\x9d\xa4\x30\x92\xc5\x32\xd5\x22\xb7\xf2\xc3\xc3\x28\x25\xfb\xb2\x08\x57\xc3\x36\xb2\x38\x0d\x60\x6d\x87\x8e\xba\xd3\x26\xd0\xb3\xc0\x7a\x22\x68\xca\x2e\xa5\x0f\xe2\x40\x38\x45\x34\x3d\x9d\x17\xab\x51\xa6\x48\xc3\x9b\x71\x95\xde\xe5\xb1\x27\x75\xa3\x24\x1d\x16\x82\xa4\xd0\x8f\x7b\xc1\x6b\xbc\x3b\xed\x4b\x8e\x1c\x72\x0c\x4b\x00\x5c\x66\x59\x37\x4c\xcf\x68\x3b\x87\x94\x39\xbd\x28\x8b\xe5\x46\x3c\xad\x99\x71\x2c\x81\xb4\x00\x4e\x3b\x39\xbe\xf2\xa3\xae\xd4\xc4\x7b\x4e\x85\xbf\xbe\x87\x3d\x19\xb7\x5d\x7d\xb8\xfc\xfc\x9e\xcb\x70\xb8\xfc\xd1\x3d\xf7\x39\xa5\x6e\xe7\x64\xa9\x0f\x93\x2e\x0d\xa8\xdc\x75\xf5\xc9\x4f\x9d\xec\xdc\x3a\x43\x1e\x07\x52\xfe\x0b\x03\x5c\xa7\xd1\x09\xf3\x34\xc6\xda\xc0\x38\x67\x62\x9d\xfe\x82\xa3\xa9\x9e\xf3\x0d\x53\xbb\xad\xac\xbe\x00\x89\x1c\x8b\xc2\xd9\x20\xba\x5c\x24\xd0\x96\x4d\x4f\xb7\xf3\x3c\x1b\xa6\xa9\x7a\x66\xca\xd4\x45\xb9\x6a\xa3\x12\x66\x18\xc6\x60\xb5\xe5\xc8\x99\x1a\xd6\x9e\x89\x85\x54\xf2\x80\x6a\xd4\x9c\xc1\x55\x0e\x82\x94\x9a\x90\x5d\x4f\x0a\xfc\x54\x9a\x9c\x93\xfa\xc1\x09\x2d\x14\xce\xe4\x69\xba\x12\x75\xce\xc1\xfb\x7c\x31\x8f\x17\x8b\xfc\xfc\xe8\x3e\x95\x7c\x0f\xc5\x1d\x56\xc7\xd4\x86\x26\x23\xe8\x8b\x35\x34\xfa\xdc\xa4\xf6\x34\x7b\x38\x11\x89\x68\x5a\x6a\x9f\x8a\x11\x4d\x64\x31\x92\x14\x82\xb2\x22\x8f\xd8\xcd\x12\x00\x0d\xeb\x46\x31\x56\xa3\xbe\xb3\xc3\xc6\x8f\xb7\xd8\x93\xab\xa4\x2f\xf2\x61\xb5\x24\x55\xaa\xb8\xf4\x5f\xa1\x9d\x7e\x7f\xe6\x9d\x75\x6e\xd5\x22\x15\xe9\x3d\x03\xb2\xa4\x65\xd5\x7c\xb7\x22\xbb\x87\x7a\x06\xe8\x7f\xca\x76\xed\x38\x92\xa6\x63\x8e\x75\x72\x71\x40\x40\xa8\xbe\x2f\xc5\x87\x59\x0a\xe0\x45\x45\xe9\xc1\x49\xd4\x61\x90\x06\x7d\xcb\x75\xdd\x29\x24\x2c\x94\xd5\xc7\x8e\xf0\x12\x1b\xe3\xf4\x9c\x75\xd9\xf1\xc2\xfd\x9b\x49\xf6\x0f\xf4\x48\x20\xc6\xa4\xda\x6d\xfc\x37\x4c\x06\x7f\x35\x31\xdf\x7c\x93\x5c\xe7\x70\x30\x12\xb1\xf6\x0f\x0c\x34\x7d\xf1\x72\xed\xc5\x65\x83\x12\x26\x9b\xa7\xcc\x6b\xe2\xfc\x80\x94\x6a\x0d\x6a\x84\x3d\x52\xa1\xc7\x09\xe2\x6a\x93\xa2\xd4\x20\x63\x6a\x75\xc0\x17\x71\xd8\x13\x9d\x47\x88\xd6\x9f\x0c\x82\x77\xba\xb6\x43\xa1\x06\x8c\x01\x83\x09\x25\x38\xc1\xd1\xa6\x0e\x6d\x85\x05\x0a\xf3\x53\x8f\x90\x41\xdb\x22\xcf\x03\xe0\x73\x2a\xbf\x4d\x6c\x06\xde\x39\xe1\x98\x49\xa5\x45\xb7\xaa\x95\x1c\xb1\x38\x17\xb8\xf8\x48\x0f\x00\x13\x88\x7e\x42\x03\x7d\xa8\x49\xb3\x44\x15\x94\x93\xa7\xac\x89\x2e\xab\xaa\xb2\xe4\x15\x60\x13\x51\x74\x56\x4d\xb3\xca\x9a\x21\xcb\x0f\x1e\x22\x8d\xe0\xd0\x43\xcb\x9b\xa1\x7a\xfe\xa4\xc7\x1c\xeb\xa5\xff\x6a\x8f\x3d\xfb\x12\x0f\x6b\xea\x44\x68\x15\x17\x3c\xcb\xfe\xab\x21\xd0\xa0\x3f\xcc\x00\x2b\xc5\x1c\x44\x5c\xc4\x2f\xf6\x47\x07\x1b\xa9\xbb\x17\xf3\x78\x3e\xab\x92\xf9\x2e\xd4\x73\xe4\x7f\xf0\x60\xb0\xb0\x98\xc7\x3c\xca\xaa\x84\x47\x74\x15\x4d\x90\xa4\x13\x76\xd1\x43\x04\xf9\xab\xee\x53\x94\xc2\x05\x27\x05\x80\x0e\x74\x4c\xb8\x7f\xc8\xd8\x5f\xee\x61\x33\x7a\x31\x9c\x18\xca\x8e\x5b\xd2\xef\xe0\x96\x4c\x97\x4f\x9e\x17\x9d\x21\x04\x1a\x7d\x7c\x4f\xf0\x97\x93\x67\xad\x24\x6a\x5a\x0a\x58\x0e\x70\xc5\xd0\x0d\x62\xb0\xcc\x31\xfc\x8c\x9c\xdc\x51\x95\x94\x44\x22\x2e\x2b\x3b\xad\x2b\x2b\x8c\xd1\xca\x5a\x06\x8a\xd7\x04\xdc\x9e\x78\x28\x48\xf0\x3c\xa9\x02\x1d\x30\x5a\x0c\x0a\x5f\x4b\x72\xf0\x99\x39\x71\x71\xb4\xc4\xac\xe2\x51\x4c\x99\xd7\x92\x92\xf7\xf3\xb2\xb2\xc4\x82\x82\x74\xce\xac\xe1\x5b\x85\x4d\x10\x16\x63\x5f\x16\xba\x2e\x92\xd5\x5e\x55\xb6\x79\x12\x8a\x10\xd6\x1c\x00\xd5\x98\x62\xfb\x82\x18\x02\x75\x64\x9d\x35\x1c\x38\x0b\x50\x5b\x9f\xd2\x67\x01\x52\x89\xdb\x9a\xfa\xad\x3e\x26\x1b\xf7\x59\x9b\x8b\xaa\x13\x1e\x6e\xeb\x20\x97\x08\x2a\xba\x32\xe2\x49\xa5\x72\x28\xaa\x5e\x01\x54\xef\xd0\x1f\x29\x7d\x5d\xf9\x2e\x89\x32\x3d\x8b\x79\x14\x43\xa2\x7c\x80\x2d\x0c\x34\x39\xc1\xb0\xaf\xf6\x51\x68\xa4\x54\x7e\x90\x99\xc1\xd9\xd6\xaa\x31\x3c\x8f\x41\x1e\xab\xe9\x7c\x56\x14\xfd\x5b\x74\x11\x53\xe5\x61\x6b\x79\x60\x7c\x08\x7c\x26\x2a\x04\xa5\x52\xda\xc3\xe2\x2c\xf7\x5b\xd9\x1c\xbb\x69\xcb\xe0\x82\xe7\x42\x13\x44\xbc\xe8\x56\x81\x7d\x65\x92\x85\x1b\xf5\xf1\x06\xf3\xfe\xdf\x4c\x06\x7f\x3a\x41\x56\x7b\x77\x14\x9c\xc1\xdc\x60\xea\xea\x60\xf9\xbe\xa8\xb8\x5c\x07\x66\x48\xe5\x7e\xd9\x56\x39\x81\xb8\x96\xd4\x29\xd3\x4d\xc1\x54\xdd\xa6\x9d\x07\x97\x50\x8d\x8e\x90\xfa\x1a\x25\x12\x50\x55\xf2\xbe\x40\x1e\x21\x1e\x43\x9b\xa1\x1e\x42\x35\x9c\xa0\x95\xe2\x21\xc5\x26\x00\x65\x2e\xd8\x5a\xd1\x5d\x79\xb8\x6d\x25\x26\xc2\xca\x94\x2b\x8f\xd2\x19\x69\x7f\x04\x73\xe4\x10\xc2\x80\xc4\x5a\xd2\x31\xdc\xbb\x70\x9e\x48\xaa\x92\xda\xf5\x5c\x4a\x98\x28\x04\xf4\x57\x7f\x98\x56\xc9\x20\x35\x93\xb5\xad\x37\xd5\x52\x87\xb5\xd6\x26\x9b\xfc\x1a\x01\x46\xd9\x23\x0e\xe5\x69\x30\x6f\x08\x04\x92\xcb\x16\x62\x49\x20\xa8\x54\xe9\x29\x28\xa0\x92\xda\x6c\xdb\x1e\xb5\x66\x7d\x96\xfd\xf4\x5e\xf6\x0f\xad\xc7\xa0\x8d\x6b\xb3\xa1\x99\x6a\xfe\x4b\xf6\x06\x67\xad\xd5\x5d\x4f\x41\xd1\x37\xa4\xc6\x5b\x15\x51\x92\x91\x39\x13\x5b\x4e\x6a\x01\x32\xe7\x9f\x19\x66\x72\x26\x1d\x4f\xa3\xb2\x26\xe8\xdf\xbc\x87\x7d\xad\xc5\xae\xb1\xe3\x6f\xfd\xcf\xb7\x82\x0f\xb4\xec\x2b\xd4\xab\xa4\xa0\xa3\x00\xa3\x2e\x51\x60\x3e\x79\xe6\x48\x72\x02\x45\x80\xc9\xe5\x7c\x1c\x79\x3c\x2c\xde\x53\xfb\x2e\xd8\x26\x14\x4c\x90\x99\xe0\x30\xb5\x40\xac\xa0\x1c\x31\xf3\xd6\x1c\x57\xa4\xd4\x76\x8a\x72\xea\x2f\xa5\xb8\x28\x56\x0d\x0c\x37\xc6\xd8\x40\x7a\x09\xe4\xa7\x58\x0f\x87\x7c\x3e\x1b\x81\xfe\x93\x26\x1d\x15\xe7\x89\xe7\x00\x35\x33\x71\x89\x18\xf3\xa0\x65\x59\x0e\x1f\xaf\x29\x1b\x76\x16\xc8\xbb\x5a\xec\x60\x95\xa7\xca\xaa\xeb\xff\x64\x2b\xf8\xa0\x67\x5d\x40\x98\xfb\xc1\x40\x64\xb1\x88\xf9\x94\x38\xaf\x70\x49\xe2\x21\xd0\xee\x54\xa2\x3c\x0c\x36\x7c\x9b\x43\x96\x84\x64\xbd\x2b\x69\xb9\xea\x8a\xb5\xc9\x46\x9a\xac\x09\x4c\x8f\xca\x75\x8e\x97\x1d\x08\xce\xa9\x3a\x26\xac\x1b\x55\x07\xb4\xb5\xd6\xe6\x91\x59\x03\x33\x6c\x9a\x3d\x73\xcb\x35\x70\x56\x37\x75\x9b\xc1\xa1\xbf\x73\xc0\x59\x24\x2e\xde\xf3\x99\x3c\x85\x24\xc5\xcf\x79\xf2\x57\xcd\xf3\x1a\xb7\x55\x78\x21\xaa\x42\x00\xd7\xd6\xe5\x56\xac\xaa\x43\x17\xaf\x03\x8d\x09\xf4\x6a\x98\x25\x15\x5a\xa2\x65\xd9\x77\x24\x20\x3f\x9a\xf0\x46\x6f\x84\xf8\xb9\x68\x0d\x33\xd2\xa1\x82\x8a\x68\xde\x8e\x08\x98\x59\x9b\x85\x92\xf0\x64\x4e\x72\x9c\xa7\x79\xb6\x2a\x0a\x3c\xc4\x43\x1a\xb8\x86\x29\x75\xd6\xe8\x57\xf6\xb2\x9e\x15\x6f\xf1\xbc\x9d\x66\xb6\x7e\xfb\x26\x89\xad\xec\x11\xe5\xd9\x7a\x38\x98\xc6\x7e\x22\xa8\x6a\x8a\xac\xb3\x7b\x50\x1f\x26\x10\x14\x7b\xbb\x01\xf7\xee\x30\x9a\x02\x77\xc3\xac\x76\xd3\xc7\xbf\x89\x99\x40\xc9\xd6\x01\x40\x77\xfa\x27\x74\x00\xd0\x86\x6b\x5d\x47\xff\xc8\x55\xd1\x9c\xfb\xf3\x8b\x07\xec\x24\x45\x9b\x6e\xb4\x1e\x18\x0c\x51\x8e\x2f\x3f\x10\xcc\x37\xdd\x68\x42\xf9\xa8\x3f\xa7\xbd\x93\x8d\xb1\x8d\x1f\xdf\x8d\x6d\xdc\xf1\xa2\x5b\x53\xa1\x8d\xfd\xe0\xbb\x16\xe4\x8f\x3a\x21\x7c\x7d\x48\x4a\x5b\x54\xde\xc4\x6e\x60\xd7\x6d\x87\x88\xb6\x5e\xca\xee\x62\xdf\x41\x00\xe3\x6f\xda\x01\x8c\xbf\xb2\xc3\x00\xc6\xef\x6b\x8e\x5f\xbc\x7a\x18\x11\xbd\xad\x25\xd7\x49\xff\xf8\xb4\x13\x6b\xc8\xb7\x20\x20\x6e\x92\x37\x8c\x7d\x71\x9f\x63\x98\x6a\xe0\xf3\x03\x81\xf5\xbe\x7d\xc1\x91\xda\xb5\x26\x59\x65\x3d\xb2\x81\x7c\x7a\xed\xde\xdd\x69\xbe\x83\x69\xbe\x9b\x03\xfe\xb7\x67\x9b\xb8\x53\x6d\x13\xb7\xd9\xe2\xff\x08\x0b\x59\xfb\x62\xf8\x32\x9f\xf0\xbe\x67\xeb\xd5\x7e\x83\x7f\xdd\x96\x7c\x7f\x4d\xf1\xc7\xef\x74\xcf\x5b\x2e\xa0\x1d\xac\xec\x57\x1c\x08\xbe\xd3\xfc\xe9\xa6\x56\xe0\xf5\xe6\x85\xfc\xff\xee\x2a\x1a\x3b\x9e\x41\x8f\xeb\x24\x8a\xb7\x7a\x41\x57\xab\x1a\x36\x89\x10\x80\xb9\x28\x8d\x6f\x9b\xa4\xdb\x3a\xbe\xd2\xf1\xf9\xcc\x60\x61\xf6\x5c\x7d\x26\x3b\xcc\x0e\x6d\x13\xfd\x70\x57\x6c\xef\xa6\x57\xd8\xe9\x15\x17\x89\x06\x6b\xc1\x58\x19\x69\x53\x97\x56\x5f\xf8\x56\x87\xc4\x80\x3c\x82\x26\x2d\x39\x3e\x91\x94\xc5\x10\xc2\x04\xee\x18\xc6\xab\x8a\x6b\xd8\x7f\xdb\xb7\x06\xaf\xf4\x36\xbc\x6d\x27\x61\xda\x69\x84\x18\x7a\x5b\x39\xac\x68\x10\x8d\x50\x2f\x26\xe4\x54\x90\x9c\x9e\x55\x11\x25\x68\x38\xa9\x73\x9c\x44\x0a\xb6\xea\x82\xe7\xc7\xba\x88\x92\x82\xf5\x2e\x78\x4f\x26\x5c\xf7\xbb\x45\x94\x56\xbd\xd1\x05\xef\xc9\x84\x81\xa8\x2f\x5c\x83\xae\x67\xf0\x60\xb8\xd2\xf6\x63\xdf\xc2\x96\x59\x43\xa9\xfe\xb3\x55\xdc\xc0\xf5\xa7\x87\x2a\xc7\x7c\x90\xc7\xdc\x7a\xd4\xa2\xcd\xc4\x0a\xa4\x23\x4d\x39\xee\x38\xde\x1f\x64\x4e\x05\xfc\x7b\x54\xd9\x37\x54\x79\x15\xa5\x3c\xb3\xbf\x50\xf2\x0e\x41\x5f\x2a\xdb\xad\xf9\x24\x5f\x81\x7e\x73\x0a\xff\xb2\xc7\x7c\x85\x8e\x78\x97\xc8\xc8\x6c\xe8\xff\x96\x07\x1f\xb9\xe1\xba\xe0\x7d\x36\x94\x22\x5f\xd5\x8f\x18\x4c\x45\xa0\x4d\x82\x75\xad\x8d\xcd\x8b\x27\xee\xd0\x99\xff\x27\xc6\x7a\x07\x13\x5f\x20\x34\x46\xb3\xd4\x98\xf1\xd7\x04\x93\x2a\x68\x64\xbc\x7a\x5c\x3c\x3c\x8c\xd0\xa5\xbd\x78\xe2\x8e\x43\x5a\x76\x99\xda\xb9\x3d\xf8\xe7\xfb\x19\xd3\x94\x77\xa5\xff\xd5\xfd\xc1\x9f\xef\xd5\xcc\x8a\xa5\x4a\x15\x35\xac\x78\x68\x71\x5b\x3c\x71\x07\xda\xbb\xad\x1e\xa4\x64\xf8\x54\x56\x5d\xf1\x84\x9a\x06\xaa\xf6\x59\xf4\x7a\x67\x81\x60\x49\x5e\x07\x2b\x71\x21\xc8\x4d\x4f\x21\x59\x2a\x8d\x55\x91\x0a\x82\x7f\x68\x2a\x32\x6c\x5e\x78\xa3\x44\x32\x4a\x4d\x17\xa7\xa9\x9b\x20\x7c\xf7\xf0\x1c\x9f\xe6\x4b\xa3\xac\x73\x67\x94\xa4\x22\xd6\x0c\x66\xaa\xa6\x22\xc3\x39\x81\x60\x0d\xc4\xd6\x0f\xf6\xd1\xa8\xcc\x0e\x55\x5c\x31\x68\x90\xd7\x52\xa7\x13\xe0\xff\x28\xd3\x9c\xa6\x98\x8a\x4b\xb0\x26\x32\x34\x52\x45\x03\xe7\xce\x14\x8f\x8a\x7a\x69\x91\x35\x05\xaa\x8d\x99\x0f\x75\x2c\x0c\x70\x1e\x86\x6c\x9a\x2f\x64\xe5\xb0\xdb\x4d\x3a\x72\x93\x91\xcb\x00\x5b\x59\x9b\xfb\xb2\x7f\x29\xe8\x2a\x02\x54\xe8\x15\x91\x52\x34\x2f\x3e\x59\xab\x0d\xfe\x4f\x39\x21\x95\x25\xbe\x51\xd6\x9c\xde\xaa\x65\x3b\x6c\xdf\xd2\x78\xeb\x94\x07\x2e\x2f\x94\x1b\xbf\x17\x65\xdb\xaa\x6d\x43\xd5\xce\x36\x7e\x1e\x89\x25\x55\x65\xc7\x86\xb9\xa1\x9c\x5a\x27\x18\x30\x2f\xaa\xce\xb8\x30\x94\x8f\x0c\x44\x01\x24\xfa\x46\xc9\xf9\x67\xec\x76\x76\xeb\x25\xec\xb7\x7a\xdd\x3e\xe1\x1d\x62\xdf\x36\xee\xda\xe8\x47\x83\xe9\x73\x62\x54\xfa\x07\xfc\x7d\xd3\x80\x22\xc6\x9e\xf0\xf8\x86\x4e\x90\xbd\xfe\x64\x3f\x1a\x30\x59\xd8\x77\x38\x8f\x0c\xa2\xaa\xd3\x9b\x06\x6f\x96\x2c\xcf\xdf\xe7\xef\xa1\xc2\x0e\xb1\x6f\x6f\x78\x52\x33\x15\xee\xf7\xf7\xc2\x5b\x8c\x9d\x64\xb5\xbd\xc5\x3f\xa6\x44\xf7\x3f\x52\x64\x22\xa6\xcb\x7b\xf8\x0c\x8c\xb4\x23\xbd\x4e\xb1\xda\x8e\xe4\xdf\xa2\x8a\xf9\xae\x7e\x92\x25\xfd\x61\x5f\xc3\xf6\x6e\xa3\xb8\x57\xef\x63\x4f\xa2\x41\xa2\x0d\xe5\x6f\xf6\x06\xef\xde\x7b\xc2\xbe\x64\xb2\xe7\xc7\x77\x66\x0a\x37\xc8\x4b\x81\x7e\x64\x98\x4e\x11\xa0\xba\x75\x44\x59\x9a\x99\x60\xc5\x69\xe9\x07\xad\x7c\x1c\x8a\x53\x2d\x20\x9e\xa4\x17\x61\x60\xd3\x48\x48\x2d\x51\x58\xbb\xcb\xc6\xb3\xdc\x12\x71\x21\x9f\x37\x8e\x7b\xc5\x6c\x97\x48\xcd\x60\x60\xb4\x55\x40\x99\x5f\x57\x70\x80\x56\xed\x4c\xcd\x41\xa9\x55\x75\xb5\x62\xa3\xc7\x5f\x1f\x20\xf6\x73\x29\x90\x14\x5b\x6e\x78\x96\xc4\x8d\x4a\xde\x8b\xd6\xa4\xc4\x87\xc6\x10\x3a\x4e\x17\xe2\x5c\x53\x81\x1e\x7d\x29\x83\x21\x36\x30\x52\xd1\x7a\x87\x71\xbb\x38\x27\x46\x4a\xbe\xcb\xfa\x37\x44\x1a\xdb\xae\xc2\x35\x9b\x32\xe8\x12\x9b\xa8\x83\x19\x74\xed\xe2\x04\x98\x8f\xf3\x4e\x67\x88\x5b\x45\xa4\x5b\x5c\x25\xe8\xa1\x92\x3a\xad\xc1\xf1\x00\x02\x40\x95\x76\xa4\x8d\xb2\xd1\xb0\xca\xe5\xe4\x41\xf4\x11\xd9\x4f\x9b\x0e\x23\x75\x08\x04\x43\xc8\xa6\x40\xbd\x4c\x88\x26\x5f\xcd\x45\xc9\xcb\x7e\x9e\x2b\x4f\xac\xec\x1f\x8b\xfc\x10\xe2\x3d\xd5\x96\x0a\x71\x2b\x8a\x99\x1d\x0a\xbb\x37\x2a\x56\x6d\x21\x27\xa4\xba\x8d\x70\x1b\xaa\xb3\xf1\xa4\x83\x0c\x5b\xb2\xd3\x56\x52\x79\xf8\x03\xd7\x2f\xa8\x6f\xd4\x3f\x65\xf8\xb8\x77\x0b\xbb\xf9\x92\x29\x94\x6d\x67\xf5\x17\x0e\x38\xa6\xbe\x9a\x76\x7d\x92\x86\xca\x7f\xef\x81\xe0\x73\x9e\xfa\x0b\x47\xb0\xa4\x51\x71\x02\x38\xec\x38\xbe\x8e\x28\x40\xb1\x81\x32\x13\xca\x38\x2e\xa3\xae\xa8\x46\x76\x34\x03\xa1\x5a\xe0\xb1\xd1\x5a\xa0\xe0\xc7\x8d\x43\xce\xe7\xed\xb5\x80\x2e\xfa\x12\xc9\x4e\xcd\x54\x72\x41\xcc\x17\xef\x5b\x3a\x4b\x91\x20\x61\x18\xce\x48\x99\x31\x73\xab\xac\x2b\xd0\x4b\xce\xa8\xb7\x6a\x41\x12\x7f\xbe\x97\x15\xec\x49\x18\xc5\x4c\x61\xc7\x7e\x74\x49\xd1\xe6\x27\xec\x32\x82\x7f\xe8\xfc\xa9\x32\xa1\xd4\xce\xb5\x7b\x84\xde\xc1\x11\xfa\x25\xf6\x11\xba\xda\xa9\xc7\xfc\x98\xf9\x6d\xa5\x79\xea\x70\x10\x0a\x14\x5c\x11\x40\x49\x27\xe7\x90\x88\xc3\x5d\x7b\xd7\x0e\xed\x5d\x17\x6d\xe9\x44\x11\xa5\x0d\x07\x4a\x28\x35\x12\x20\xfe\xd0\x53\xd8\x3f\x6d\x30\xb4\x1e\xd7\x32\xff\x8c\x58\x4b\x60\xdc\xfe\xe0\xc9\xc1\x7b\xf6\x8c\x5f\x37\xa9\x8e\x10\x46\x9e\xf4\xfb\x43\x4c\xa8\x2c\xb3\x68\x50\xf6\x72\x34\xc8\xc1\x61\x1f\xad\x2d\xc7\x15\x7f\x42\x01\x58\x0b\x83\x3c\x2b\x13\xf9\xbc\xdc\x17\x4a\x51\x24\x51\x9a\x3c\x82\x51\x9c\x52\x9e\xdb\x57\x4c\xe6\x82\x0a\x5a\xa1\x83\x61\xd5\x13\x49\x61\x86\x13\xbe\x16\xf2\xfb\x30\xbf\xb2\xa1\xca\x52\x9b\x81\x8d\xbf\x1c\x76\xe4\xb6\x8b\x09\x4a\x24\x1e\x01\x44\xa0\x13\x65\xbc\xbe\x9c\xcf\x3a\x61\xdb\x56\x80\xb6\x15\x60\x8e\xaa\x79\x0d\x21\x8d\x60\x9f\x21\x0f\x63\x58\x29\xa2\xf2\x13\x51\x15\xe1\x81\x32\x6c\xa8\x23\x48\xa4\x36\xef\xa9\xd4\xe5\x15\xda\xfc\x65\x45\x34\x98\x57\x5b\x45\x1c\x4a\x69\x24\xa5\xfe\xca\xc8\x64\xcd\x9c\x88\x44\x3f\xcf\x96\x04\x66\xcd\x58\x06\x6f\x6b\x43\xc7\x03\x2e\xb6\x10\x1e\x2b\x28\xc5\xa4\xed\x08\x4c\x42\x52\xb2\x33\xa9\x75\xbe\xaa\xb5\x9d\x69\x6c\xe0\xda\x6a\x45\x76\xee\xd2\x42\xd8\x2a\x44\x2a\xa2\x52\x71\x4a\x2a\x46\x0d\x5a\xbf\xb2\xdf\x63\x31\x10\x19\x26\x13\x61\x52\xef\x4a\x92\x26\xd5\x08\x90\xa3\x00\xa1\x38\xe9\x47\x45\x42\x38\x53\x7a\xe0\xa9\x0b\xac\xf6\x85\x17\xbc\xfd\x05\x75\xa9\xb3\x95\xbd\x67\xff\xdf\x4b\x9c\x7c\xb6\xc2\x74\x7b\xfd\x07\x94\x8d\x68\xde\x2c\x56\x87\x9d\x54\x3d\xa9\x83\xaf\x61\x72\xd6\x20\x4d\xe5\x3c\x75\xcd\x35\xbb\x02\x7d\x87\x0e\x8c\x11\x9b\x84\x49\xf7\x30\x9b\xdb\xde\x9c\x2b\x30\xde\x30\x3c\x13\xad\x9f\x54\x69\x9f\xc1\x31\x90\x20\x89\x4a\x58\x43\x39\x29\xc6\x56\x9f\x3d\xb6\xe1\xae\x2e\xb5\x93\xc8\xa8\xe7\x6d\xbd\x0f\xdf\xec\xdf\xd8\xec\x71\x1c\x17\xf1\x75\x33\xfe\x9b\x27\x1b\x9d\x8e\x27\xcf\x8b\xce\x3c\x9e\x31\xfe\x7a\x22\x98\x35\x7f\xda\x80\x46\x00\x01\xc3\xd1\x46\x8a\xe4\x46\x01\x8f\x3a\x95\x66\x5b\x55\x62\xef\xfd\x13\xec\xbd\x13\x6c\x9f\xec\xa1\x28\x8b\xfd\x77\x4c\x04\x3f\x3c\x71\x1c\xff\xd0\x34\xaa\xf4\x27\xc0\xee\x55\x39\x05\xb9\xcb\xee\x2e\x15\xfe\xbd\xfe\x08\x25\xc9\x21\x0c\x09\x8f\x93\x02\x22\x87\xcd\x19\x4f\x95\x05\x24\x5f\x79\x5e\xf1\xa9\x43\x33\x87\x0e\x1b\x46\x53\x2a\xe6\x50\x69\x51\x5d\x10\xca\xa6\xa9\x54\x29\x35\x8c\x11\xd4\xe3\x10\xee\xce\x94\xe2\x88\x4d\x86\x5a\x45\xbc\xec\x89\x34\x6d\xf3\x32\xe7\x55\x11\x69\xf3\x2c\x5c\x05\xd4\x9a\x62\x88\x27\x1a\x3e\x75\xe8\xc5\x87\x20\x11\xe4\x30\x5f\xcf\xe5\x21\x5a\x56\x3f\xe4\x67\x31\x43\x4d\x17\x34\xca\x87\x1a\x3b\x41\x9c\xd7\xa4\x19\x90\xe8\x07\x0e\x90\x5c\x21\x52\x8a\x34\x0d\xf9\xc9\xf3\x89\x4d\x38\x78\x04\x7a\x93\xce\x5b\x51\xc9\xd3\x64\x4d\xcc\x28\x93\x0f\x64\xb1\xe6\xd9\xf4\x23\xa2\x80\x44\xe5\x61\x46\x77\x36\xcb\xd5\xfa\xdc\x1e\x76\x5d\x93\x97\x11\x10\x90\x14\x13\xb5\x8a\xdd\x3e\x63\xd2\x1c\xfc\xc7\xf6\x04\xaf\xf5\xe6\x09\x2a\x69\x5a\x2f\x62\x0b\x46\x5b\x3f\x4b\xa2\x40\x83\x4a\x5b\x3a\x56\x49\x02\xb3\x2d\x1f\x00\xda\x07\x24\x3e\x03\xdb\x83\x82\x61\x51\xef\x14\x22\xd5\x7b\x8c\x79\x18\x9e\x25\xb1\x7b\xc1\x3b\x00\x37\x4e\x03\x84\xd6\x7e\xf5\xba\x33\x57\xff\x68\x82\x9d\x62\xe6\x31\xff\x9f\x05\xc7\xea\xb9\xe7\x58\xb8\x86\x97\x35\x38\x40\x06\xa7\xcb\xee\xc3\x1f\x6a\xb1\xbd\x58\x01\xff\x7f\x7a\xc1\x1f\x79\xf3\x19\x87\xce\x46\x15\xd5\x08\x40\x0b\x7a\x4a\xb5\x2b\x29\xa5\x08\xca\x0b\x0e\x60\x4a\x6d\x63\xda\x29\xa9\x08\x95\x08\x20\x07\x96\x38\xe9\x1a\xca\x38\x79\x1e\xf3\x32\x0a\x7e\x22\x17\xe5\xe9\xbc\x82\x0b\x9b\x14\x47\x45\x21\xfb\x05\xdc\xc1\xcd\x33\x8d\x3a\x22\xd6\xc1\xed\x9c\xac\x9b\x49\x07\xe3\xfb\x39\xd8\x3c\x37\x9b\x4e\x2f\xf3\x98\xee\x75\x7f\x3d\x78\xa1\x43\x70\x03\xdd\x7a\xa8\xc4\x71\x94\x8b\xa6\x97\x0c\x30\xfb\x80\x42\xe4\x55\x2f\x3d\x80\x8e\x20\x2a\x87\x32\xd8\x01\x37\x05\x3a\x09\x5b\xdb\x76\xda\xea\x0c\xc8\x7b\x0f\xb0\xc3\xd6\xa4\x8e\x93\x12\xe0\x71\x2c\xf3\x0a\x6d\x19\x8b\x79\x51\xf9\x3f\x78\x20\xb8\xd1\xbe\xe0\xc2\xc4\xc2\x95\x21\xd9\x37\xa3\x8c\xab\x27\x97\xd2\xa4\xe3\x12\x86\x7f\x78\x3f\xfb\xfd\x16\x3b\x18\x0d\x06\x8b\x45\x5e\xe5\x9d\x3c\xf5\x7f\xa3\x15\xfc\x72\x4b\xce\x2e\x98\x39\x84\x42\x3e\xa0\xbb\x26\xbe\x7b\x90\x17\x95\x83\x31\x4a\x68\x53\x72\xe5\xa3\xea\x67\x51\x61\x10\xd8\xd2\xff\xc7\xde\x9b\x87\x47\x92\x55\x77\xa2\x5f\xa4\x54\xdb\xad\x5e\x20\x66\xf1\xcc\xd8\x33\x0e\x07\xe0\x92\x9a\xcc\x54\x2d\x5d\xd5\xdd\xd5\x34\x8d\x4a\x55\x45\xa9\xbb\x16\x21\xa9\x7a\x4c\xb3\xb4\x42\x99\x37\xa5\x68\x45\xc6\xcd\x8e\x88\x94\x2a\x9b\x61\xcc\x3a\x30\x80\x19\xf0\xb0\x0a\x63\xcc\x98\xc5\x60\x3f\x30\x36\xc6\xc6\xbb\xb1\x31\x36\x18\xbc\xce\xc3\xd8\xe0\xe7\x05\x8c\x3d\x66\xec\x79\xc6\x6b\x31\x7e\xf3\xbe\x7b\xce\xb9\x5b\x64\x68\xa9\x52\x2f\xc6\x9f\xfe\x80\x56\x45\x46\xdc\xf5\xdc\x73\xef\x3d\xcb\xef\x37\x48\x8b\xe8\x4a\x33\xb8\x9c\x36\x7a\x19\xef\xc4\x57\x78\xdb\xe2\x68\x91\xcd\x07\x33\xaa\xac\x62\x7a\xf2\xe2\xa4\x29\x49\xfe\x10\xb7\x14\xa1\xcb\x58\x04\x98\x69\xc1\xec\xd9\xa9\xc6\x89\x63\xc7\x8e\x23\x19\x7b\x51\xf4\x4e\x4e\x4c\xac\xad\xad\x35\xe3\x28\x8d\x9a\x22\x5b\x9a\x88\xf2\x3c\x5e\x02\xc8\xaa\x7c\x82\x8a\x00\x76\xee\x7c\x5c\x5e\x1c\xd2\x86\x2e\x5f\xf5\x4e\x1f\xb3\xa4\xfa\x2b\x35\x11\xad\x48\x79\xd0\x1d\xb4\x44\xb7\x17\xa5\x83\x66\x4b\x74\x27\xba\x83\x46\x0b\x48\xf6\x1b\xaa\x0c\x67\x52\x3f\x3e\x42\x70\x11\xc0\x20\xe3\x2e\x59\x3d\x86\x93\x49\x02\x7f\xc1\xad\xa0\x3c\x5b\x28\xfd\x90\x0c\x1f\x29\x06\x1b\x59\x86\x5e\x52\xee\xdb\x71\x1e\xb4\x01\x11\xab\xad\xa0\x63\xad\x59\xa0\x31\xa0\x0b\x8d\xc9\x83\xd2\x67\xc7\x39\x7c\xa1\x09\xad\x79\xce\xf3\x9a\x58\x11\x40\x58\x40\x33\xc8\x5f\xb5\xc8\x2d\x80\x71\xd4\x15\x22\x83\x5c\xf1\xe0\xf4\xc5\xb9\x07\xce\x4f\x9e\x3a\x73\xde\xba\x09\x9e\x0c\x6e\xb1\x54\x02\xfa\x88\xc0\x3d\x74\xe2\x98\xbc\x0f\x65\x51\xab\x90\x47\xa5\x44\xa4\x4b\x4d\xf5\x2a\xa4\xec\xa3\x51\x34\x11\x6b\x80\xd8\x24\x77\xa4\xa4\xb7\x1c\x11\x94\xb4\xfd\xa9\xc8\x82\x43\x8d\x43\xfa\xe3\xbc\x88\x32\xbc\xea\xf1\x54\xa5\xf7\xa4\x1b\x7c\x6c\xb2\x85\x15\x81\xa6\x42\xd7\xb6\xe7\xf1\x87\x3d\x36\x2a\x07\xc5\x7f\xbf\xa7\xfc\x19\x6f\x00\xf4\x0f\x48\x69\x32\x66\x5a\xfb\x68\x47\x33\x84\xd6\xca\x12\xaa\x34\x4e\xb7\xca\xf1\xcb\xb8\xac\x06\xf2\x86\xe0\x98\x4e\x63\x05\x47\xf8\x5e\xc6\x0b\xe3\x44\x95\x3b\x10\xbf\xa2\x6d\xc5\x8a\x29\x00\x86\x4b\xf6\xcc\xbd\x9c\x2c\xb2\xfd\x4a\x2a\xfd\xfb\xc2\x69\xd9\xde\xe9\x99\x0d\x97\xb2\xe2\xda\xba\x7c\x7a\xa6\x1e\xcc\x4f\xcd\x00\x7e\xc3\xdc\xd4\xfc\x8c\x33\x44\xf3\x53\x33\xce\xc8\xfc\xea\x08\xfb\x96\xea\xe0\xe4\xa9\xb9\x69\xa0\x4f\xe8\xf1\x96\xff\xbe\x91\xf0\xb9\xd6\xbf\x29\x7f\x64\x83\x50\x8a\x32\xd7\xa3\x3c\x66\x4c\xcd\x4d\x07\xed\x2c\x86\x33\xb5\x3c\xc2\x18\xfc\x2e\xb0\x24\xaf\x7b\xfb\xe8\x57\x47\xbb\xfd\x50\x8d\x7d\xb0\xc6\xd4\x4f\xfe\xf7\xd6\xc2\x57\x79\xba\x14\x3b\x4a\xca\x6e\x89\x55\xe3\x69\x7a\x57\x27\x85\xe9\x0a\x31\x49\x3e\x49\xac\x46\x59\xae\x84\x0c\x28\x38\x54\x33\xd5\x7a\x83\xb4\xa2\x96\xe8\xaa\x9d\x6c\xfb\xd9\x31\xc3\xa3\x8a\x2d\xdb\xbe\x83\x6f\x5b\x4e\x43\xb9\xdc\x19\xfb\xdc\x41\xd6\xbc\x36\xf7\xa6\xff\x9e\x83\xe1\xbc\xfe\x97\x39\x26\xb5\x79\x11\xc5\x84\xbf\x27\x52\x1e\x44\x72\x6a\xb5\xf0\xb6\x2c\x6a\x6a\xa3\x12\x27\x67\xa6\x03\x75\x84\x6b\xae\x7b\xa3\xf2\xfe\xb1\xee\x11\xb7\xe6\xba\xe7\x27\x51\x5e\xcc\x67\x51\x9a\x43\x5d\xf3\xb1\x3c\x33\xed\xc5\xc8\x83\x75\x6f\x5f\x97\xe7\x79\xb4\xe4\x6e\x71\xff\x99\xb1\xdf\xae\x31\x7a\xc7\xff\x74\x2d\xfc\x99\x1a\x85\x30\x18\x88\x70\xb9\x28\x96\xb2\xa8\x0b\x0e\xa0\x20\x06\x42\xb3\x4e\x0c\xf8\x75\x60\x24\x50\x97\x3f\x15\xfb\xa0\xcf\xf4\xd4\xe7\x43\x39\xd0\x44\x23\x80\x37\x85\x53\xcc\x64\xa2\xdd\x6f\x81\x7a\xea\x38\x2b\x95\x86\x09\x6e\x56\x70\x41\x44\x2b\x41\xa0\x22\x67\xf4\xe9\x47\xea\x02\x1e\xa5\x71\xba\x64\xe5\x55\x51\x66\x3b\xc4\x44\x58\x48\xa5\x16\x6e\x8e\x05\x77\x12\x05\x4b\xfd\x28\x8b\xd2\x42\x9e\xde\x27\x67\xa6\xf1\x42\x81\x37\x5b\x0b\x3f\xde\xdc\x27\x95\xf2\xb3\x37\x76\x8b\x6b\x54\x09\xae\x59\xff\xe7\x35\xef\xe9\xa9\xf0\xf8\x06\x11\x04\xf5\x80\xb0\x2b\xd0\x85\x0f\x71\x04\xf5\x4a\xe0\xb3\x79\x06\x13\xee\x9f\x0f\xef\x06\x52\x2d\xa4\xa8\xa5\x01\x8b\xad\x7b\x6f\x00\xb6\xae\xa0\x23\x44\x93\x40\xad\x60\x3b\x36\xf7\x62\xbb\xd4\x1f\xab\xb1\x0a\xb9\xf1\xdf\x59\xbb\x6e\xa7\x58\xf8\x25\x6f\xb8\x40\x9d\xe3\x01\x92\x10\x77\x79\x29\x8e\xc2\x08\x87\xda\x9d\xe5\xb0\xd0\x98\x01\xc7\x1a\x04\x1a\xd1\xd8\x9b\xe9\xd1\x4e\xd2\x7e\xda\xe6\x59\x32\xa0\x04\x5f\xb5\xda\xc0\xa2\xd8\x46\x6e\x39\xe5\x76\x90\xd3\x45\xb8\x7d\x40\x2a\xa7\x92\x6b\xab\xdc\xae\x94\xe8\xbd\x4c\x5c\x09\x79\x10\x69\x24\xc0\x26\x7b\xb1\xc7\xd4\xa2\xf2\x57\xc3\x98\xfe\x44\xe5\x09\x9c\x7c\x81\xe6\xe4\xd3\xbf\x99\x25\xa3\x14\x80\x51\xee\xf6\x02\x99\x47\xb7\xe8\xa0\xe2\x3c\xe1\x4c\xdf\x2f\xd5\x2a\xe3\xbe\x3e\x54\x53\x36\xbd\xb7\xd5\x2a\xe2\xae\x4a\x84\x45\x06\x51\xd7\x8a\x0b\xd3\xb7\x25\x2b\xda\x24\xca\xe1\x64\x8f\xb0\x35\xfd\x9e\x82\x4e\x03\x6d\x9e\xb6\x10\x3b\xad\xb2\x30\xa9\xe2\x75\x74\xdc\x91\xa3\x08\x3e\x01\x55\x53\x78\x99\x89\xd9\x7a\xce\x95\xe7\x35\x2b\x9a\x1c\xe7\xc1\x1d\xf5\x52\x7b\xe2\x1c\xae\xd8\xa2\x03\x0c\xbf\x78\x98\x91\xc7\x36\x0b\xfe\xa4\x42\x91\x72\xdd\x5e\xf7\x44\xf0\xe6\x7f\xe6\x5c\x32\x94\x8b\x63\x56\x24\x49\x9c\x2e\x5d\x06\x0b\x93\x36\x96\xfb\x7f\xea\x87\xa7\x60\xbb\x86\x80\x2b\xb0\xd9\x90\xeb\x7d\x98\x78\xb9\x0d\x5f\xc1\xd0\x65\x58\x1a\x19\xac\x5c\xa3\xcb\x9b\x7c\xf6\x59\xc6\xf6\x77\xa3\x2b\x73\xfd\x6c\x89\xfb\x9f\x64\xdb\xb5\x35\xf7\x8b\x38\x69\xc6\x69\x91\x17\x59\x73\x3a\x2d\x2e\x65\x73\x20\x1d\xe1\x2b\xd9\x3c\x38\xc4\xaf\x40\x70\x89\x39\x8a\x61\xea\xb2\x3a\xfc\xe9\x1d\x3c\x5a\x8d\xe2\x04\xe4\xd5\x38\x05\xb4\xc3\x4e\x6e\xd1\x78\xd4\x4e\x95\xb9\xad\xf4\x1a\xdd\x32\xd5\x65\x53\xbd\x06\xd7\xbf\x3e\xd7\xfc\x1a\xf2\x3c\x93\x8b\xa4\x5f\x68\x1f\xfe\x18\xbf\x72\x32\x38\x8e\x78\x57\xf2\xf6\xd2\xe2\x69\x21\x57\x0b\x40\x61\xe1\x70\x42\xb4\x0a\xbc\x77\xe4\xf0\x53\xc6\x69\x7d\x58\xde\x97\xc3\x52\xf4\x2e\x44\x57\x2e\xa7\xa6\x13\x71\x1e\x1c\x6e\x06\x93\xa5\xca\xe0\xbb\xa4\x45\x24\x14\x08\xce\x6a\xaa\x5c\x1c\x04\x99\xe8\x23\xfc\x41\x9f\x2e\xb3\x2a\x38\x47\x74\x82\x23\xe6\xbc\xa7\x03\x36\x0e\x03\xbf\x87\x54\xb3\x27\x95\xf2\xc0\x73\x2d\x71\xa2\x1c\x3b\xfc\x94\x7a\x10\x15\x18\xc8\x70\xec\xf0\x53\x74\x30\x43\x29\xea\xd3\xc6\x03\xd0\xfa\x4d\x65\xad\x83\x68\xa1\x18\xc9\xa1\x1e\x03\xc4\x05\x5a\x3b\x34\x46\x18\xa1\x3a\xa7\x60\x00\xc6\xcd\x8c\xa1\xdf\x2b\x0a\x52\xbe\x06\x5f\x6b\x07\x3f\x06\xfb\x15\x88\x9d\xa6\x22\x43\x0c\x07\x94\xf6\x24\x49\x29\x22\xef\x0f\xdc\x1f\x72\x39\x4e\x49\xd4\x4f\x11\xad\x8d\xca\x05\xe0\x5e\xea\x20\x74\x46\xf9\xd6\x8c\xc0\x50\x15\x66\x8e\xc6\x66\x79\xd4\x46\x43\xa0\xa6\x74\xea\xc6\x29\x3c\x25\x88\xae\x71\xdd\x40\x57\xdc\x94\x8e\x82\x68\x09\xd3\x6e\xdd\x68\x65\x56\xa1\x9e\xe1\xf1\x32\x0f\xfa\x96\x84\x40\xb5\xe9\x40\x1d\x5d\xa8\x31\x46\x0f\x1b\xce\xda\x3a\x62\xcf\xc5\x88\x77\x81\x46\x9a\x76\x16\xc5\xa9\x1c\xe8\xe1\x0e\xc6\xdd\x2e\x6f\x03\x68\xb5\x71\x18\xba\x0d\x36\x90\xbe\x78\x20\x01\xc8\x0a\xb9\xec\x83\x24\xee\xc6\x1a\x86\xd4\x3c\x8e\xbb\x64\xab\x82\x9b\x55\x9e\xc7\xe8\xea\x32\x7a\xda\x00\x24\xd3\x8d\xc7\xc4\xf2\xc1\xb8\x81\x4d\x06\xe1\xb6\x91\xae\x08\xda\x21\x85\xa4\x2d\xfa\xb0\x5e\x14\x89\x58\xd4\x8e\x53\x9e\xe7\x41\x6b\x99\xb7\x56\xc0\x77\x49\x1e\xb8\x5c\x58\x6c\xf7\x29\x38\x18\x56\xad\xe2\xf5\xc6\x0c\xa4\x45\x71\x2a\x57\x4f\x0b\x62\x56\x75\x2b\x07\x88\x37\x84\x30\x71\x2a\x7a\x44\x6b\x0e\x1d\x52\x64\x85\xb2\xd0\xe5\xd4\xc2\xd4\x21\x4b\x64\x8e\x3c\x2c\xf2\x43\x2d\x18\xa8\xa5\x41\x7d\x2a\x32\x96\x60\x09\x1d\x1a\xfb\xd8\x4d\x5d\x47\x3f\xf8\xef\xd9\xb7\x53\xfd\xfa\xc5\xbd\xd5\xfa\xd5\x11\x54\x17\x39\xc1\x16\x3f\xea\x76\xa1\x57\xd7\x8e\x54\x65\x59\x9f\x94\x1a\x11\xe9\x60\xfc\x4c\x5f\x33\x68\x4d\x5b\x7a\xf5\xfa\xb5\x65\x9b\x50\xcb\x1c\x7d\x09\x38\xc2\x4a\x57\x97\x54\x35\xce\x92\x54\xa0\xc3\x3a\xf5\xc8\xd7\x89\x4e\x85\x91\xcd\x0b\xd1\xeb\x91\x6d\x4e\xab\x02\xd9\x3a\xb3\xd4\x30\x70\xad\x52\x8d\xc2\xd7\xb0\x61\x96\xbb\x23\x72\x3e\x34\x89\x29\x31\x21\x2f\x66\x70\xf3\xe9\xf7\x40\xf9\x96\xde\xd2\xa1\x0e\x60\xfe\x25\x2d\x0c\xc1\x87\x4a\x51\x03\x70\x8a\x92\x43\xf0\x95\x40\xa9\x10\x5e\xc8\x41\x91\x17\x82\x42\xfb\xdd\xb2\xeb\xc8\xbe\xc6\xd3\x5c\xc9\x2e\x04\x2e\x90\xe6\xbe\x0d\x9b\x2e\xb2\x78\x29\x4e\x37\x15\x46\xbb\x7e\x18\xaa\x24\x81\x41\xca\x2b\x16\x05\xfb\xe0\x0d\x4e\xfa\x7f\xf5\xc9\x4c\xc3\x5f\xfa\x2f\xba\x21\xbc\x6d\xbb\x47\xb3\xcd\xce\x63\x3f\x76\x90\x7d\x69\x8f\x75\x1e\xfb\xed\x3d\x3b\xd5\x17\x6f\xda\x53\xad\x2f\x86\xb4\x84\x01\xf3\x89\x16\xc5\x2a\x77\x9a\xef\x7e\xf6\x75\x7c\xba\x72\x51\x6b\x8f\x1e\x7f\xca\x76\x16\xbd\x12\xe3\x59\x0e\x06\x78\x88\x53\x51\x63\x16\x25\x70\x2d\x31\xbb\x6f\x32\x30\xd7\x39\x77\xa6\x69\x01\xd6\xd1\x74\xad\xf7\xd0\xb2\xfe\x10\xb4\xe5\xe8\x85\x43\x64\xdb\xfc\x8a\x5c\x27\xc1\x11\x5a\xab\xf6\x38\xd2\x72\xa3\x63\x47\x8e\xda\x02\xa2\x88\x56\x62\xb4\x78\x6d\xd5\xfc\x4e\x3f\x2b\x80\x6a\xce\x5d\x65\x95\x59\x42\x4a\x97\x91\xb6\x81\x1b\xec\xd0\x0a\x82\x7d\x94\xb4\x4b\x65\x93\xd9\xa7\xf7\x0c\xed\x8e\x3f\xbe\x63\x69\xff\xbb\xd1\x6d\x4a\xfb\xa3\xb7\x27\x6e\x24\xe0\x3b\xdb\xe6\x36\x5e\x20\x66\x4f\xbb\x6e\xe1\x96\x82\xb3\xa1\x74\xa8\x4d\xf6\xb6\xe1\x49\xbc\x06\xa9\x27\x11\x75\x76\x03\x79\xea\x1b\xd4\xb7\x51\xbb\x96\x4e\xf4\x69\x11\x3d\x5e\x2b\x4a\xd4\x95\x69\x68\x81\x0e\x09\x72\xc5\x42\xc3\x76\x6c\x73\x47\x20\x79\x76\xf6\x1c\x57\x9e\xbf\x54\x63\x87\x2a\xbc\xe0\x88\x30\x7a\x21\xea\xdd\xcb\x07\x1a\xbe\xed\xa3\xb5\xf0\x9b\xf1\x1f\x79\x10\x41\xd4\x3e\x79\x87\xf4\xdb\xcd\x75\x6f\x64\x85\x0f\x9c\xcd\xe1\xa5\x35\xf6\xad\x4c\x3e\xf5\xbf\x39\xf4\x55\xb8\x7f\x21\xc8\xb7\xec\xd8\x68\x5e\xa6\x70\xd1\xff\x43\x28\x6c\xf6\x3f\x02\xd1\x2a\xae\x39\xf1\x78\x73\x62\x17\x70\xc9\x4d\x3c\x09\xfe\x63\x37\x63\x96\xed\x17\x3d\x8c\x77\xf0\xcf\x86\xb7\xcf\x81\xd5\x75\xe0\x18\x4a\x75\x8f\xe1\x86\x53\xe4\xd0\x29\xe5\x72\x21\xbe\x47\xb0\x99\x2c\x0a\x91\xf0\x28\x65\xbf\xb8\x9f\x3d\x69\xc3\x9c\xe6\x99\x4c\x3c\x88\xe0\x15\xfe\x77\xef\x0f\xbf\xa3\x36\xd9\x8e\x7a\xe8\x37\xc6\xbc\x6b\xbc\x20\xc8\x43\x07\x01\xc3\x21\x07\x62\x93\x31\x95\xf8\x66\x40\x35\x79\x50\x44\xd9\x12\x2f\x28\xbd\xf5\x50\x6e\xc5\x45\xea\xe4\x05\x13\x8f\x06\xd4\x2a\xe5\x82\x81\xf6\x27\x4e\x78\x6e\x99\xfc\x56\xf8\x40\xfb\x27\xac\x12\x23\xbc\x67\xc9\xb7\xd1\xc5\x69\x53\xa3\xaa\x95\x8b\xa6\xf0\x56\x94\x28\x9f\x37\xf4\x8a\xea\xa2\x5b\x92\xba\xe6\xe1\x06\x8e\xa7\xdc\xae\x68\x97\x4e\x1a\xff\x67\x0f\x7b\xd7\xa8\x4a\x56\x5f\x1f\x0d\x3f\x3f\x32\xdd\x09\xfa\xa9\xe5\x14\x03\x1c\xc6\x15\x3e\x68\xe0\x11\xb9\x17\x41\x20\x6b\xb9\xd9\xa2\x44\x03\xdd\xa6\xe1\xb2\x46\x48\x68\x10\x3e\xb2\x90\x99\xb1\x89\xb0\xbf\x86\x83\x49\x19\x6d\xa5\x14\x40\x00\x26\x4e\x89\x7a\x0c\x4d\x81\x7b\xb6\xd5\x50\xe5\xe8\xe1\x6d\x1c\xdb\x4d\x6a\x36\xb8\x9a\xbd\xa8\x58\xa6\x2b\x66\x3f\x1d\xfa\x9a\x74\x2c\xcd\x2e\x41\x30\x43\x76\x8d\x8d\xcd\x49\xc8\xd0\x68\xdf\x55\x30\x8b\x34\x44\x38\x0a\x75\xbb\xbf\x39\x2f\xfa\x3d\x2c\x1f\x13\x29\xfb\x69\x22\xef\xbc\x18\x36\x44\xb6\x04\xb5\x5e\x9a\xc1\x8c\x6c\xa1\xe1\xce\x85\x80\x87\x55\xae\x23\x07\x09\x49\x5d\x45\x19\x07\x87\x9a\xcd\x43\xd0\x2b\xb9\x90\xf0\xca\x05\xd6\x36\xf9\xdc\xf1\x6d\x35\x59\x9d\xdd\xb2\x25\x46\xc0\xbd\x7c\x30\x2f\x64\x13\xfe\xb1\xe8\x92\x4b\x96\x2e\x99\x0a\x8f\x57\xe9\x12\x92\xbc\x6d\x2a\x92\x2f\xd7\x1c\x76\x7f\x82\xbc\x23\x7e\x1f\x91\xf0\x59\xde\xf1\x7f\xbe\x16\xde\x4d\x7f\x57\x27\xb6\xc1\xea\x04\xff\xb2\xf6\xda\x67\x22\xe1\x94\x68\xd0\xcf\x79\x7b\xdd\xdb\xaf\x18\x37\xd6\x3d\x08\x70\x24\x7e\x3e\x67\x39\xfe\x8e\xc7\x66\x98\x7e\xd1\x3f\x1d\xde\x36\x39\x33\x0d\x7f\x2b\xd1\x47\xb8\x68\x93\xf5\x4b\xab\x1d\x2b\x32\xcb\xcf\x1e\xb2\x53\x14\x50\x79\x32\x6c\xa8\x70\x4a\x50\x6b\xe4\xca\xd9\x6e\x19\x30\xf9\x27\xc3\xc6\x45\x6b\x7d\xaa\xb8\x89\x6d\x95\xf1\xd9\x11\x76\x8e\x46\x5a\xca\x45\x23\x5a\x5a\xca\xf8\x52\x54\x88\xcc\xb8\x73\xa2\x5e\x5c\x09\xde\x4d\x31\x10\x9a\xd4\xde\x7f\xd5\x48\x78\x67\xf9\xa1\x02\x40\xb4\xd8\xe8\x0b\xa1\xc3\x27\x12\xbe\x14\xb5\x06\x14\x82\xe9\x86\xdb\xd4\xd8\x14\x3b\xa0\x11\x29\xfd\x13\xe1\xf8\x45\x9b\x08\xae\x70\x38\x07\x95\x97\x1f\x8b\xb5\x3b\xf8\xb3\x2a\x1e\xe1\x47\x75\x3c\xc2\x3b\xbd\x61\x25\x05\xd1\x09\x04\xbd\xaf\x62\x68\x40\x80\x96\x05\x5a\xc3\x35\xf4\xbf\x05\x99\x7e\xeb\xad\xc7\x60\xd6\x17\xa3\xd6\xca\x5a\x94\xb5\x21\xd7\x3a\x2a\x62\x15\x76\xbe\x20\x4b\x5d\x70\xdc\x87\x98\x04\x6f\xc7\x42\x8c\x1d\x69\x9c\x38\x7e\xfc\xd8\xf1\x3a\xe2\xbf\xe7\xf1\x2a\x1f\x77\x5d\x11\xb7\xd2\x3c\xd7\xc3\x6f\xae\x9a\xe7\x0d\x3a\xfe\x8e\xfd\x2e\x1b\x66\x2f\xc6\xac\x41\x15\xee\x6c\x30\x24\xe7\xd0\x67\x4e\x91\xd8\x04\xf3\xf0\xfb\xfb\xc2\x57\x78\x56\xae\xa1\xf2\x92\x40\x1c\x19\xa2\xd3\x72\x07\xd2\x7f\x80\xc6\x43\xde\x12\x6d\x6e\xf2\x18\x29\xba\x1b\x7e\xe7\x29\xfc\xa6\x93\x31\x04\x1e\x4c\x09\x3e\x1f\x82\x06\xe8\x27\xd2\x9b\x72\x5c\x79\xda\x76\x77\xc7\x4f\xec\x65\xff\xaf\xc7\x6e\xce\x9d\x46\xe7\xfe\x17\xbc\xb0\x39\x0f\xab\x8f\xf0\xfc\x75\xdb\x7a\x44\xf4\x53\xea\x88\xa3\x78\xcf\xb3\x7b\xd8\xb9\x4d\x80\x84\x36\x1e\x3b\x78\xee\x8e\xe0\x55\xaf\xb9\x69\x0e\xf3\x13\xfc\x9b\x1a\x41\xd4\x8b\xf1\xdb\xe9\xd3\xdb\x49\x65\x66\xbf\x59\x63\xff\xa2\x25\xba\x5d\x91\x9e\x91\xc3\x18\xa7\x4b\x2a\x92\xfe\xa3\xb5\xf0\xfb\x6b\x14\x63\x51\x39\x61\xd1\x52\xc6\xb9\x16\x6e\x29\x35\x9c\x8a\x50\xf0\x65\x6a\xb0\xc8\x07\x5a\x38\x74\xd8\x74\x25\x41\x1c\x78\xc5\x91\x74\x49\x6a\xf6\xb5\x38\xe7\xa5\x97\x13\xde\x29\x54\xf8\xa1\x69\x8c\x36\x05\xcb\xe1\xcd\x97\x0d\xae\x04\xe6\x69\x0c\x8b\x1f\x64\x71\x0e\x94\x4b\x02\xa4\x5b\xae\xc1\x2c\x2e\xb8\x45\x0d\x88\x81\xbb\xfa\x10\xe6\x1e\xff\xe2\x34\xc8\x07\x69\xcb\xc0\xa0\x67\x3c\x82\x65\x69\x2f\x92\xab\x9e\x83\x21\xf1\x67\x5e\xf8\x8c\x79\x93\x19\x60\x6e\x20\xe8\x82\x54\x84\x84\x2a\x36\xde\x6e\xf7\x21\x62\x91\x73\xc4\xea\x12\xbb\xc0\xee\xbd\x2e\xb1\x72\xca\x7e\x74\xb2\xe3\xd9\x0f\x1c\x70\x18\xf8\x53\x5e\xd0\xae\x2f\x0f\x19\x17\xf1\x5f\x88\x2f\x3b\x9d\x2e\x65\x3c\xcf\x67\xfb\x09\xf7\xff\x66\x7f\xf8\x61\x6f\xa3\x5f\x9d\xe8\xf2\x5e\x94\x15\xb1\xbc\x45\x67\x2a\x02\xb4\xc8\xa2\x4e\x27\x6e\x69\xe7\xbb\xc2\x55\xa0\xed\x19\xae\x7d\x16\x4a\x75\x14\x38\xf5\xc8\x73\xc5\x21\x40\xc6\x9f\x73\x90\xab\x55\xa9\x70\xa2\x40\x9a\x1e\xc8\x67\xa2\xd0\xb1\x14\xaf\xf0\xae\x16\xf9\xc1\x7d\xec\x73\x23\x6c\x54\xfe\xe0\xff\xda\x48\xf8\xb2\x11\xc5\xaa\xad\xbc\x26\x78\x80\xb4\x54\x37\xc1\x69\x44\x90\xfb\x65\x9a\x8b\x37\x3c\xb2\xf7\x62\x92\x0a\x70\xb8\x11\xc0\x94\xcd\x35\x82\x11\x27\xdd\x45\xe0\xc9\xc7\x4b\x47\xa4\x71\x96\x2f\xcd\x1a\xc1\x36\xf1\x70\x7a\x5d\xa1\xcb\x5f\x64\x01\x00\x52\xa7\x4b\x75\x53\x97\x21\x92\x4b\x12\xdd\xfc\x31\x35\x28\xa5\xa8\x39\x79\x3b\x87\x57\xc6\x2b\x2a\x51\xe7\x64\x75\xba\xc7\x88\x1f\x75\xb5\x16\x29\x0f\x62\x20\x21\x34\x55\x47\x18\xc8\xaa\x2a\xb3\x19\x81\xf4\xac\xa8\xd6\x95\xcb\xd1\x70\x27\xf2\x7e\x9d\x60\x90\xef\x76\x59\x08\x36\x91\xd5\x19\xce\x33\xf6\xeb\x23\x6c\x0f\x4c\xbf\xff\x89\x91\xf0\x6b\x35\x35\xb9\x28\x11\xe5\xa9\xed\x46\x72\xc7\x82\x79\x85\x9c\x42\x91\x6e\x3d\xbd\x67\x22\x20\x9e\x51\xbd\x50\x53\x0c\xc1\xa2\x1b\xce\xf0\x0e\xe6\x15\x5b\xbe\xc9\xac\xca\x17\x76\x36\xa7\x4a\xf1\xef\x68\x62\xe1\x68\x60\x45\xf8\x3d\x42\x73\x2a\xb2\x82\x7d\xd6\x63\xa7\xcc\xeb\x86\xc8\xae\xa1\xf5\xa8\x73\x64\x35\x2f\xe8\x03\xeb\x3d\x73\x97\x2e\xfa\xaf\xf3\xc2\xef\xf0\xe4\x5f\x4e\x20\x78\x3a\xa0\xa3\x19\xfc\x42\x77\xd9\xf9\x65\x9e\x73\x8a\x3e\x93\x8b\x57\x93\x05\x9d\x0c\xe4\x4d\x45\x9e\xd8\x8a\x13\xb7\xd6\x83\x4e\x22\x22\xf8\x03\x77\x95\x7a\xf0\x9c\xe7\x81\x4a\xef\x44\x2d\xfe\x82\x17\xd6\x83\x6e\xd4\x7b\x0e\xfe\x64\x3f\x47\x53\x72\x9c\x34\xd9\x6f\xde\xc8\x9e\xbc\xe1\x40\xd8\xba\xf7\xfd\x37\x86\x5f\xf1\x6c\x75\x5b\x0a\xdd\x01\xec\x71\x59\x5d\x4f\x53\xc1\xc2\x4d\x15\xc2\xa1\x1c\xa2\x49\x79\xac\xd5\xb7\x22\x8e\x86\x4e\x3a\x6e\xa9\xc3\x64\xde\x0c\xa6\xcb\x74\x98\x30\x0c\xc8\xc7\x64\xa8\xd7\xc0\xd3\x85\x25\x82\x4c\x90\x30\x65\xa2\x5f\x18\xdd\xae\x0a\xaf\x22\x70\xd6\x44\x6f\x56\xd7\xc0\xcc\xeb\xea\xec\x1f\x38\xc8\xfe\x90\xb1\x51\x59\x91\xff\x39\x16\x7e\x8a\x9d\x13\xb9\x36\x3f\x94\xe8\x02\x83\xb6\xe8\xca\xeb\xb7\x3a\x24\x47\x01\x8d\x2a\xb4\xb3\x8e\xf1\x0c\x70\xf1\x94\x8b\x67\xf6\xec\x54\x70\xec\x8e\xdb\x4f\x68\xbb\x8e\x0d\xef\xd4\xe6\xab\x31\xed\xfc\x3a\x29\x2d\x94\xa5\x84\xb0\xc3\xa9\xe3\xc0\xe5\xd9\x69\xbb\xd4\x38\xd5\xa5\x9e\x0c\x8e\x34\x83\xe9\x19\x13\xc5\xac\x00\xc1\x82\x29\x83\x11\x96\x0e\x75\xde\xf0\x39\x44\xbd\x5e\x32\x08\x0a\xc1\x08\xb8\x69\x7a\x46\x9b\x32\x7a\xbc\xa5\xf1\x43\x22\x88\x6d\xa2\x62\x9a\xec\x28\xee\x8e\x0b\x27\x17\x82\x36\x87\x30\x02\x34\x6d\x93\xee\xa0\x08\x4a\xc5\xd2\xe6\xc6\x59\xab\x16\xb2\x03\x81\xd5\x48\x73\x51\xea\x58\x0d\xc6\x08\x07\x9d\xeb\x74\xf2\xf6\xc3\x20\x11\xcb\x45\xd1\x93\x22\x2e\x8b\x38\xa9\x6e\x4a\x60\x83\x68\xb2\x53\x94\x6e\x9c\x73\x22\x1c\x8a\xd2\x25\xee\xc2\x5f\x6d\x24\x7c\xea\x78\xa0\xf8\xfe\x0a\xe0\x7f\x02\x53\x82\x0e\x5f\x19\x12\x23\x15\xfd\xb1\x4c\x02\xe3\x18\xd3\xac\x2f\x50\x66\x09\xae\x9f\xd4\x9c\xc3\xca\x66\x16\xd0\x50\x1d\x0c\xc5\x91\x6c\xe4\x61\x2f\xe3\xad\x38\xe7\xa1\xb1\x44\x45\x8e\x4c\xda\xa6\xc0\x82\x67\xdd\x38\xa5\x40\x40\xcc\x7d\x77\xe5\x95\x98\x62\xc2\x8e\x10\xcd\xc5\x28\x6b\xb6\x44\x37\x04\x0f\x47\xb8\x16\x27\xed\x56\x94\xb5\xc3\xfa\x46\x15\xe9\xe4\x0c\x22\xef\x90\xbb\x4c\x02\x5c\xbd\xf0\x21\x25\x9c\x50\x05\xb7\x34\x65\x15\x50\x3c\x11\x68\xab\xd7\x74\x1a\x40\x70\xe8\x96\x43\x78\xd4\x8a\x7a\x3d\x1e\x65\x48\x84\x04\xf4\xfd\xda\x4e\x2a\xf5\xc3\xe9\x8b\x73\x54\x36\x9a\xc5\x70\xb3\x40\x79\x56\x8d\x80\xdf\x9b\xc1\xb3\x45\xdf\xe1\x32\x8c\xca\xad\x33\x55\x60\x3b\x61\xa4\xef\xba\x2b\x08\x6f\x91\xed\xb4\x98\x89\xf1\xe8\x5f\x25\x23\xf0\x09\xed\x8a\x69\x69\x85\xaf\x45\x03\x5c\xa3\x9d\x40\xa9\x14\x9a\xbe\x3a\x29\x48\x45\xb6\xac\x88\x98\xd4\x36\x49\x5b\x22\xc8\x3a\x4c\xd4\x32\x8f\xda\xb8\xcc\x00\xcd\x4e\x6a\x3f\x59\x64\x33\x38\xea\x14\x6f\x7a\xa8\x77\xde\xeb\xac\xa6\x10\xa6\x26\x90\xd0\x7e\xa7\x13\x5f\x09\xc6\x00\xba\x47\xed\x02\x38\x23\x30\x96\xe3\x9a\x06\x55\x0d\x31\x1c\x68\xec\x4b\xd1\x19\x36\x2a\x6b\xda\x0c\xf3\xb8\xb4\x47\x9d\x9b\x9f\x9f\x29\x2f\x08\xf6\xbb\xa3\xec\x8e\x6d\x13\xc1\x0d\xd9\x92\xde\x3e\xba\x23\x5b\xd2\xba\x67\x6c\x47\x55\x46\xbd\x9f\x1e\x61\xcf\x20\xb3\xca\xed\xe1\x53\x17\xe4\x1f\x0b\x9b\x18\x56\x0c\xbb\x9c\x6b\xf7\xb4\x0c\x54\xa7\xc2\xe3\x0b\xfa\x5f\x0b\x5b\x99\xa8\xaa\x0b\xec\xb0\x51\xb9\x61\xfb\xcf\x0f\x9f\xb5\x20\xff\x58\x50\x34\x8b\x64\x5d\x0d\x2e\xcf\x9e\x47\x43\x32\x2e\x76\x25\xf0\xca\xba\x8d\xd1\x6b\x16\xc0\x55\xac\x53\x99\x9a\xff\xc4\x8c\x62\x5f\x1e\x75\x21\x48\xfa\x72\x19\x15\x94\x0b\x23\x65\xf2\x72\xce\xb3\xe9\xb4\x23\xfc\x9f\x1a\x0d\xef\x57\xff\x20\x09\xc2\xb0\xdf\xaa\x94\x9a\x7e\xce\x33\xc8\xe0\xc5\x93\x8b\x61\x64\x57\x3f\x36\xa1\x18\x7d\x8c\x73\x4f\x28\xbf\x31\xc2\x52\xb6\x87\x5f\x29\xb2\xc8\xe7\xe1\x1d\x93\xe9\x20\xb0\x50\x1f\xed\x1a\xcb\x00\x7b\x56\xfb\x45\xd6\x7c\xbf\xf7\x4d\xec\xdf\x6c\x9c\x87\x69\x03\x4d\x3d\x8b\xed\x05\xf3\x73\xee\x3f\x33\x7c\xaa\x4a\x9b\x03\x1b\x05\x3e\x46\x21\x80\x6e\xc5\xea\x52\x1e\x88\xce\x66\x59\x9e\x1f\xf0\xd8\x48\x3f\x6e\xfb\xef\xf1\xc2\xb7\x78\x93\x2a\x95\x0e\x5d\x4d\x78\x73\x57\x59\x1f\x76\xe9\x51\x2b\x13\xf2\x62\x1c\xeb\x8c\x3b\xab\x5e\x0a\xc3\xa4\xc4\x5f\x0c\x25\x82\xdf\xa8\xfb\x60\x95\x52\x4e\x26\x00\xc3\xac\xa3\xcd\x10\x24\x1c\x36\x85\x76\xdc\x41\xa7\x46\x70\x79\xfa\x74\xee\x88\xf3\x73\xd9\x7e\x59\x18\xac\xe6\x99\x70\x4a\x27\x0f\x42\x63\xb1\xf9\xf2\xfa\x52\xd9\xea\xae\x90\x97\xb4\x24\x81\xc4\xf7\x55\x9c\x63\xb7\xf4\x1f\x67\xec\x69\xae\xa4\x09\x72\x70\x37\x57\x8f\xa2\xf6\x3a\x27\xb2\xf8\x61\x79\xb9\x4a\x66\x44\x7b\x92\x5e\xe0\x19\x99\x52\xff\xfe\x40\x78\xff\xa6\x6f\x94\x50\x91\xec\x28\x75\x85\x94\xbb\xac\xbf\x47\x9c\x38\x5d\x42\x73\xdd\xbb\x99\x3e\x20\x1f\x7b\xbe\xee\xdd\x4c\xfe\x6f\xf3\xc4\xb2\x72\x39\x12\xfb\x85\xfd\xec\xcf\x3d\x76\x63\x12\xe5\xc5\x9c\x2c\x0f\xd2\x3d\x3e\xef\x5d\x7f\xba\xc7\xf7\x78\x4e\x59\xd5\x99\x1e\x1b\x8c\x86\x8a\x2c\x28\x86\x30\x40\xeb\x3a\x47\x97\x16\x8b\xfa\xc2\x0a\xea\x5a\x16\x6b\x81\xe8\x14\xb4\x99\x96\x82\x09\xe4\xc5\x9c\xd2\x3f\xd8\x95\xca\x24\x89\x45\x95\x23\x71\xa1\x3a\xdf\xa0\x50\xe8\x73\x9b\x80\xe6\x2a\x74\x5e\x6b\x7a\x1c\xa5\xf5\xbf\x5d\x73\xe3\xff\xf4\xc2\xd7\x78\x16\x3e\xad\x46\xe5\x28\x9c\x74\x9e\xdc\xa0\x83\x6a\x2b\x84\x3b\x04\xf0\x17\x18\x53\xd1\x2f\x4e\x14\xd6\x1a\xb6\x45\x79\xe2\x80\xdf\xae\xa0\x60\x42\xab\x7c\x38\x58\x73\xf7\xb2\xfe\x2c\x76\x89\x5d\xd8\xd8\x76\xb9\xfd\x55\xa0\xad\x97\xec\x07\x3c\x8d\x9d\x79\x81\x17\x59\xdc\xca\xfd\xb7\x7a\xe1\x05\xf7\x91\x23\x31\x19\x8f\xda\x6e\xb6\x46\x97\xde\x32\xf2\x50\x1e\x6f\xd3\x85\xbb\xd8\x9d\xec\x8e\x6b\xea\x02\xb6\x01\x57\x25\x5b\xf7\x58\x79\x69\xf9\xff\x49\x6f\x98\x0f\x95\x7e\xb2\xb2\x5a\x2c\xe1\xcb\xd4\xaf\x4a\x10\xbb\x51\x1a\x2d\x55\x36\x1d\x2e\xa5\xd0\x6b\x85\x3f\xe9\xca\xba\x2b\x4a\xef\xf2\x58\x79\x95\xfb\xaf\xd3\x8d\x7b\x41\xe9\x27\x35\xa8\xc3\x51\x83\xd7\xd5\x40\x2b\x3a\x6a\x8b\x66\xfe\xc5\x7e\xc7\x93\xbb\x08\x08\x03\xab\x47\x9a\x53\x99\x48\xef\x11\x8b\xc0\x8a\xf0\xa9\xfd\xe1\xb8\xf5\xef\x2a\xae\x93\x56\x26\xd2\xe0\x41\xb1\xb8\x01\xd1\xc9\x0f\xee\xdb\x85\xa8\xd9\x01\xdc\xdf\xa7\x6c\x4c\xab\x9f\xde\x21\x62\xfe\xb7\x3f\x4e\x80\xf9\x1a\xcc\x6a\x17\x68\x6a\x87\x40\x53\x2d\x15\x7b\x74\x7f\xf8\xef\xe2\x2a\x4a\x2e\x5a\xac\x2e\x89\x65\x83\x3d\x95\x8d\x6f\xa8\x6c\xcb\x0b\xff\xaa\x77\xdf\xd6\xb0\x48\xc7\xfc\x23\x1b\xd0\x2e\x41\x71\x06\x25\xc9\x28\x0f\xc6\xbe\xf2\x0d\x95\x41\x68\x17\x45\x9b\x63\x40\x1b\x9d\xca\x7e\xe1\x1b\xc2\x7f\x5f\x7e\x58\x3a\x88\x0d\x25\xe9\x76\xe2\xa5\x00\xa1\x32\x50\xf3\xc9\xef\x9b\x73\x3d\xde\xa2\x58\xc2\x39\x4c\xc6\x76\x74\xd3\xe7\xff\x25\xfb\xb9\x1a\xdb\x8b\xc7\x4b\xff\x23\xb5\x4d\x92\xd7\x2b\xda\x0a\x05\x86\x2f\xaa\x4d\xe2\xe9\x14\xbd\xdb\x74\x4c\x5c\xe6\xad\x15\xd0\x3b\x08\x4e\x2f\x1b\x57\x28\x0a\x69\x48\x4e\x55\x74\xa5\x39\xe4\x29\x53\x11\x70\xa2\xd6\xf2\xad\x80\x2a\xec\x73\xa7\x72\xda\x53\xbf\x27\x55\x87\xb1\x0e\xc8\x77\xb2\x5f\x3f\x1f\xe5\xc5\xbd\xa9\x58\x4b\x9f\x29\x84\x79\x09\xb1\xf8\x08\x09\x40\x9d\x3f\x08\xd3\x90\x30\x64\x15\x29\x6c\xa9\x02\xa9\x8f\x21\x52\x16\x31\x3e\x20\x1e\xab\xc9\xfe\x7e\x94\xed\x57\x43\xef\x7f\x65\xf4\x7a\x46\xf1\x23\xa3\xba\xa6\x6d\x8f\x23\x8c\x16\x71\x2d\xf7\x73\x45\xa4\x5c\x3d\xef\x60\x59\x44\xbd\x5e\x37\x25\x98\xe2\xb1\x3a\xcb\x00\x4e\x95\xf5\xa2\x41\x22\x22\xb8\x6f\x26\xa2\x15\x25\x41\x3b\xce\x57\xea\x41\x94\x08\x45\x50\x1b\x81\x72\xc9\xda\x76\xc6\x30\x64\x5c\xb5\x75\x29\x16\xf5\x3a\x58\x47\x72\x6d\x00\xa0\x4f\xe5\x49\x19\x89\xdd\xe5\xb6\x44\x55\x9b\xc6\xd5\x15\x06\x23\x8d\x8b\xf9\x30\x4e\xf5\x0c\x35\xcd\x5c\x81\x21\x0f\x7b\xab\xe3\x35\x68\xbd\x20\xde\x33\x5a\xb4\xa0\x04\x8d\x9c\xe9\x0c\x75\x01\xd8\xfb\x2b\x86\x9b\x1a\x00\x58\x12\x5e\x20\x58\x11\xc4\xc9\x11\xb0\x26\x22\x3a\x17\x22\xe8\x46\x2b\xd5\x32\x03\xcf\x50\xc0\xe9\xc9\xe2\x20\x90\xa3\xaa\x40\x41\x15\xc8\x0a\x6d\xfc\x4e\x4b\xd4\x04\xe8\x1b\x22\x2c\x6e\xdd\x69\xf6\x3d\xfb\xd9\x1e\x10\x43\xff\x4d\xfb\xc3\x57\xee\x3f\x03\x11\x82\x96\xa7\x3b\x1d\x18\x54\x69\xd9\xe5\xb4\x15\x27\xaa\xa2\x61\x29\xa1\x4d\xc1\x69\x6d\x33\x80\x42\xf1\x88\x01\xf8\xdc\x75\x24\xbe\xc7\x20\xf1\x7a\x69\xe5\x98\xd6\x6f\x5c\x3e\x8a\x92\x25\xf1\x72\x2a\x36\x29\x08\x5d\x08\x38\x10\x65\x27\xcd\x50\x25\xe5\x72\xe0\x2b\x91\xa9\x51\xae\x9c\x23\xe4\xd1\x1f\xea\x68\x10\x15\xd6\xdd\x9e\x16\xca\xda\x72\x9c\x70\x88\xdf\xa0\x14\x7e\x1c\xa3\x28\x4b\x62\x9e\xa1\x4a\xc8\x15\x7d\xba\x58\x4b\x55\xf5\xa6\x3b\x80\x25\x0c\xaf\x8d\x9b\xb0\x51\x54\x2c\x18\x0e\xac\x30\x4b\x65\xeb\x1d\x0d\x66\xef\xcb\xb9\x48\x56\xb9\xb2\x6c\x28\xe9\xcc\x38\x88\x63\x33\x38\x1f\x15\xe5\xc6\x28\x89\x33\x43\x81\x3e\xe0\x0a\x1d\x33\xae\x34\xf1\x36\xda\x04\xc7\x44\x3a\x49\x14\x04\xf1\xa3\x30\xed\xfa\x39\xd2\xbf\x63\x16\x28\x06\x29\xa8\x96\xc3\xe1\x14\xa4\x75\x71\x10\x74\xe2\x2b\x5a\xfa\x4b\x5b\x59\x9c\x0e\x4f\xb1\x36\xcb\x07\x1d\x79\x98\xde\xc0\x8e\x85\xe8\xf7\x8b\xfd\xa5\x25\xc0\xc5\x1f\x04\x39\x87\x33\x07\x55\x84\x95\x1b\xbc\x03\x67\x99\x27\x42\xc9\xbd\x85\x92\xd0\xd0\x28\x09\xb8\xc0\x7a\x36\x1c\x25\x16\x07\xf7\xc1\x3b\x03\x3a\x8c\x62\xe6\x05\x26\xa7\x96\xee\xb9\xba\x6c\xf0\xb2\x23\xcc\x80\x05\x17\x9b\xc9\xcd\x51\x68\xd5\x45\x19\xb4\x54\x15\x7e\x0b\x10\x42\xa5\xf9\x57\x81\x65\x8e\x91\xe8\x6f\xf6\xa2\x11\x45\x4f\x99\xff\xc5\xbd\xd7\xb3\x47\x7d\x60\xaf\xbb\x9d\x5e\xdb\x46\xd5\x89\x92\x24\x50\x12\x04\xc1\x75\x71\x61\x88\x62\x72\x8b\x27\x66\x3b\x1b\x31\x81\x17\x97\x34\xad\xca\x9c\x96\x1f\x54\x6d\xfd\x26\xdb\x04\xda\xd5\xe6\xe8\xdd\x52\x89\x97\x55\xca\x3b\x46\xb0\xde\x84\x53\x94\x42\x96\xc1\x39\x5b\x25\xfd\x1a\xac\x08\x6d\x8e\x55\x4c\xe3\x47\x0e\x37\xba\x71\xda\x2f\x78\x90\x8b\x68\x25\xe8\xf1\x2c\x16\x6d\x0c\xb1\x06\xfb\xb4\x6a\x0a\x2a\x43\xda\x8e\x44\xa7\xaa\x05\xe6\x46\x56\x79\xec\x91\xaf\x90\xca\xa6\x5e\x00\xd4\xb0\x82\x27\x83\x8a\x61\x49\x6e\x38\x3e\x76\xd2\x40\xdc\xa9\x50\xdc\xb8\xed\x61\xb4\x5d\x1a\x27\xc1\x98\x9c\x17\x3a\x11\x50\xf6\xd0\x78\xbd\x62\xdc\x21\x90\x2a\x17\x4e\xca\x8f\x5d\x50\x5d\x3b\x79\xcd\x50\xa8\xec\x03\xd3\xb9\x28\x59\x8b\x06\xb9\xd4\x09\x90\x2c\xbe\x04\x2d\x96\x2a\xc0\x5a\x31\xb0\xfd\xc2\x1b\x8a\x2b\x46\x1b\xce\xe5\x64\x23\x76\xf1\xb2\x68\x63\x0a\x0e\x4e\xbc\x51\xe0\xd6\x22\xb3\xe6\x39\xe5\x79\x5e\x47\xd7\x21\x81\x9c\x90\x3b\x18\x88\x7e\x00\x04\x4a\x53\xeb\x41\xa6\xa1\xe3\x25\x66\x5f\x60\xec\x5b\x2b\x11\x2e\xa3\x84\x4f\x5f\x42\x1e\x56\x1c\x5f\xff\x87\x58\x78\xb2\xe2\xb9\x0b\x08\x48\xd1\xa8\x72\x2f\xa2\x77\x29\x47\x60\xdd\xdb\xb7\x14\x15\x7c\x2d\x1a\xac\x7b\x7b\x11\x74\x74\xdd\x3b\x80\x69\x1e\xb3\xbc\xe3\x9c\xf9\x7f\xe9\x00\xeb\xb0\x27\xf4\x32\x51\xa0\x09\xe3\x34\xf8\x63\xfd\xd9\xf0\x4c\x19\x8b\x52\xd5\x31\xa3\xdf\x0d\xf0\x65\x1b\x39\x09\x3a\x2f\xaf\x95\x04\x6e\x65\x2b\x9e\x5f\xf3\x98\x69\x84\xff\x31\x8f\x1d\xdf\x52\xe9\x9c\x97\x12\x80\x18\xd4\xda\xb5\x16\xbe\xd2\x9b\x53\xa5\x18\xf7\x9a\xbe\xc1\x52\x36\x8b\x6c\x93\x6a\x31\x9a\xcf\x0d\xe7\x17\x07\x94\x84\x55\xc7\xb1\x32\x04\xec\xa6\xdc\x1e\xf5\xe0\xbc\x58\x8a\x53\x13\xf2\x66\x80\xd1\x9b\xec\x39\xec\x20\xf5\x74\x46\x88\xc4\x3f\x1f\xde\x3d\x6f\x8d\x14\x85\x46\x06\xf2\xb7\xca\x68\x12\x33\xec\xe4\x07\x6f\xba\x3e\x3b\x9a\x3c\xff\x4c\x78\xfb\x10\x32\x28\x95\x8d\x6f\x48\xa1\xb4\x46\x5f\x6e\x92\xd8\x06\xa7\xc0\x17\x7b\x8c\xa1\x84\x00\xde\x68\x1e\x76\xec\x52\x23\x9d\x51\x93\x40\x4e\x9d\x86\x7f\x50\x01\x1c\xd4\x2b\xaa\x51\x07\x46\x0e\xf5\x2b\xce\xdd\x5c\x22\xa7\x0d\xef\xf4\xd8\xde\x4e\x3e\x3f\xe8\x71\xff\x4d\x5e\xf8\x4a\xef\xac\xc6\xc5\xc5\x8c\x02\x79\x72\x96\x7b\x80\x81\xae\x8b\x2c\xec\x5c\x7c\x47\x07\x37\x29\x93\x1e\x38\x9a\x69\x82\xd2\x25\xc5\xb7\x17\x9c\xb9\xd2\x0c\x42\x7e\xa5\xb8\x35\xac\x07\xe1\x95\x4e\x2e\xff\x93\x16\x9d\x3c\x74\xc0\xef\xe0\x17\xa7\x8d\xa7\x99\x5a\x3f\xfe\x1d\x61\x7d\x5e\x55\x10\xb5\xdb\x10\x79\x51\x5a\x0f\x93\x33\xd3\xc1\x33\xf1\x75\xa7\x94\x2b\x6c\xbf\x1c\xc7\x4b\x69\x32\xf0\x93\xf0\xf9\x76\x56\x25\x20\x73\x04\x63\xf2\xe7\x09\x88\x14\x86\xd0\x00\x7c\x37\x00\x66\x1b\x94\x31\x91\x51\xfe\xbb\xfe\x31\xe7\x05\x5d\xa9\x88\xb8\xf9\x82\x1c\xac\xbc\xe9\xe4\xa4\x2c\x30\x96\xe7\xc9\x99\x54\x2a\xa1\xb6\x3f\x1b\x9e\x3e\x9b\x44\xb0\x7b\x02\xee\x04\x9f\x68\xc7\x39\xe8\xa7\xb9\xb9\xf3\x01\xd9\x65\x5a\x4a\xb4\x8b\x65\xd5\x99\xba\xd6\xbc\xd0\x5c\xa7\x86\xef\xf4\xb4\xe0\x5f\x10\x6d\xee\xbf\xc4\x0b\xfb\xd3\x43\x36\x7c\x5b\x4e\x31\xf2\x4a\xc9\x85\xf6\xa8\xce\x2f\xc7\xad\x95\x19\xb9\xd4\xc8\xba\x25\x32\xf9\x2c\xb5\x1e\xb9\x48\x85\xa5\xdf\x1c\x48\x29\xcf\x89\x4d\x1b\x06\x5b\x3d\x2b\xb2\xfb\x45\xca\xfd\x77\x78\xe1\x79\xfa\x5b\x2d\xf3\x2a\xdc\x42\x74\x5c\x3f\x2c\xe4\x81\xc0\x18\xd0\xe4\x9e\x83\x42\xae\x31\x21\xab\xbc\xf6\x4f\x63\x27\xc9\x69\x7f\x34\x7c\x0a\x2c\xb1\x52\x00\x9c\xbd\x98\x65\x1d\x4e\x57\xfe\xa4\xc6\x82\xe1\xac\x22\x8a\xb8\x7e\x3c\xd2\x8a\x1e\x89\x04\x9e\x7f\x9c\xa9\x49\x5f\xb8\xd9\x91\x1a\x83\xca\x88\x32\x33\x35\x37\x8d\xb0\x8c\xfe\x87\x6f\x0e\x3f\x3a\xaa\xff\x19\xb4\xa2\x9e\xdc\xd6\xab\x04\x07\x39\x39\x00\xf9\x5b\xef\x01\xd3\xca\x0d\x1f\x8c\x4d\xcd\x4d\x8f\xab\x95\x80\x48\x93\x41\x1b\x40\x20\x4c\xf0\x56\x2b\xe9\xe7\x80\x63\x6a\x43\x64\x52\x0a\xbf\x02\xed\x46\xf5\x0c\xaf\x9b\x56\x91\x4b\x00\x91\xca\x93\x81\xbc\x8d\xe5\x05\x8f\xda\x81\x86\xb0\x51\x87\x2b\xaa\xa2\x81\xa5\x37\x54\xa8\x4b\x16\xe4\x71\x9b\xb7\xa2\xcc\xa0\x97\x93\xd9\x43\xb7\x91\xec\x3c\xa6\x69\xf2\x2c\xe9\x32\x6d\x61\xdb\x72\x7c\xcb\x6d\xda\x90\x63\x03\xcb\x68\xda\x98\xb6\x11\xb0\xd1\x03\xd2\x5c\x6b\xd9\xe6\xe7\xea\xe7\xca\x25\x2e\x34\x2b\x87\x3e\xb6\xdb\xb6\xbb\x08\xe3\xcb\x94\x37\xb2\xa9\xaf\x44\xdb\x2b\x01\xd0\x90\xac\x79\x4d\x01\x5c\xa4\x10\x90\xce\x19\xe5\x14\x66\x47\x1b\x55\xb9\x8b\x2a\x36\x31\x6d\xe8\x90\x9a\xb6\xd4\x11\x79\x8f\xb7\x9c\x75\xf5\x0f\x07\x76\x3d\x00\x3b\xf5\x00\xec\x3a\xd3\xae\xdf\x99\xf6\xd6\x51\xcb\x99\xf6\x9a\xd1\x9d\x12\xc4\x7c\x72\xa4\x44\x10\x63\x79\xd4\xf4\x5f\xb8\x7b\x38\x2c\x2d\xf6\x4e\x68\x29\x15\x93\x2d\xa5\xa7\x86\x8c\xc5\x77\x4a\x85\x73\xe1\xf2\xdc\xbc\x1c\x51\x37\x26\x27\xe3\x45\x3f\x4b\xcd\xc9\x50\x96\xf7\x4c\x5e\xcc\x24\xfd\xa5\x38\x95\x75\x8f\x8d\x23\xc5\x41\x47\x61\xf9\x2b\xf5\x33\xaf\x55\x11\x96\xa4\x92\x7e\x5d\x3c\x6b\x91\x05\x09\xdc\x02\x17\xf9\x52\x4c\x08\x26\x08\x49\x1d\x6b\x0b\xf8\x46\xa8\xd4\xc1\xd8\x73\xa2\xc6\xc3\x87\x1b\x77\x4c\x36\xee\x7f\xde\x38\xbe\xdc\x8e\xf2\x65\x9e\x07\x63\x8d\xf1\x7a\xd0\x16\x45\x1e\x8c\x35\xc7\x89\x74\xc0\x2a\x03\xe8\x89\xd6\x38\x4f\x1f\x4b\x9e\x1d\xd0\x57\xfe\xfd\xec\xc4\x36\x10\x8c\x4b\x7b\xe5\x5c\x8f\xb7\xc2\x60\xae\x8c\xf9\xac\x26\x04\x5f\x6a\x5e\xf5\x16\xb7\x76\xac\xdd\xed\xdf\xa5\xf9\x46\x54\x7d\xd8\x59\xe3\x53\x53\xd5\x56\x12\x80\x7d\xc9\x67\x97\xaf\x37\x17\xa3\x39\x05\x30\xf0\x0a\xba\xf8\xb4\x1e\x06\xc0\xbf\x7e\xb5\x1f\xce\x6c\xf6\x82\x65\x77\x5f\x16\x6b\x41\x84\xf7\xd0\xb5\x88\x4e\x80\x71\x66\x69\x20\x41\x21\xca\xeb\xde\x9e\x25\x3c\x8d\x01\x70\x73\xbe\xee\xed\x01\xb2\x82\x75\x6f\xbf\x32\xe6\x39\x5b\xc8\x2b\x9e\xc8\xde\x8d\x91\x3a\xf4\xb3\xff\x26\x8f\x3d\xb0\xd1\x8c\xed\xa8\xf7\x53\xba\x8e\xf0\x98\xa9\x4f\x6f\x51\xd6\x23\xba\xa4\x18\x76\xe9\xa9\xd9\xd3\x4d\xf6\x25\x8f\x61\xdf\xfc\xdf\xf5\xc2\x4f\x7b\x4b\xf6\xd9\x4f\xde\xa1\xf0\x81\x50\x44\xa0\x98\x9b\x80\x38\xfc\x7a\xa0\x88\x3b\xc5\x7d\x48\x19\x2f\x18\xd7\x84\xf9\x23\x0b\x52\xb6\xf3\x89\xa7\x41\x99\x4f\x9f\x68\x36\x9b\x0b\x74\xa1\xc4\xa4\xbb\x21\xb5\xb3\xc1\x34\x06\x63\x3a\x02\x3b\xeb\x06\x0b\x4f\x43\x48\x8d\x5e\xd2\xcf\xa2\xe4\xe9\x4d\x2a\x7e\x61\xdc\xe5\x7c\xf0\x18\xce\x9d\xff\x7e\x8f\xb5\x1f\x95\xa9\x30\x0d\x84\x44\xf3\xf0\x14\xb1\x19\x10\x9a\x81\x73\x7e\x96\xba\x44\xae\x13\x8a\xb6\xd4\xb6\x9a\xd2\xc0\xb2\xf7\x8d\xb2\x7f\xd1\x23\xba\x06\x42\x71\x3e\x1b\xf3\xa4\x9d\xfb\xff\x65\x34\x7c\xd1\x68\xe5\x4f\x8e\x22\x8f\x0a\xa5\xa8\x3b\xf8\x23\xde\x9f\x54\x9e\x86\xc9\x47\xa0\x21\xbd\xd4\xe3\x29\xe4\xdd\xe2\x69\xc6\xdc\x09\x7b\x9a\x34\xa2\x9c\x74\x5d\x08\xad\x03\x02\x73\x6a\xaa\x43\xff\xea\x7a\x8f\xc1\x2e\x03\xcb\x79\x47\x35\x13\x48\x74\xcc\x0b\x19\x57\x46\x44\x5d\x99\x83\x8e\x0d\x71\xa0\xbd\x8c\xb7\x94\x01\xa4\x13\xad\x22\xee\x9a\xba\x80\x2f\x5c\x69\xa8\x4f\x1b\x7d\x1c\x93\x06\xd6\xb6\x00\x27\xa9\xac\x0f\xf6\xbf\x05\xd9\xed\xa6\x5a\xba\xcf\xb9\xe5\x79\x4d\xec\x6e\x53\x60\xef\xef\x3b\x36\x07\xff\x5e\x90\xa7\x0d\xbe\x19\xf0\x45\x11\xe5\x2b\xf9\x04\xe6\xfe\xd9\x3a\x33\xea\xc5\x13\xc4\x56\xa1\x17\x44\xf9\x41\xc3\x96\xc1\x27\xf5\xb2\xbe\xdc\xb8\x40\xcf\xf6\x73\xd5\x0d\xf9\xc4\xed\x08\x79\x4c\x00\xed\xd9\x35\x30\xbc\xcd\x63\xa8\x96\xfc\xd7\x7b\xe1\x4b\x3d\x64\xa9\x19\x8e\xe1\xdb\x64\x21\x83\xb1\x9c\x6e\x20\xe0\x03\x51\x27\xe5\x06\xf2\xf8\x10\x8a\xa8\x85\x9b\x9e\xf1\x60\x61\x0a\xbf\x58\x80\x19\x5e\xd0\x20\x0b\xed\x05\x67\x01\x7e\x75\x2f\xd3\xca\xd2\xff\xe3\xbd\xe1\x57\xf6\xe8\x04\xfb\x52\x74\x88\xca\x43\xd7\xbf\x6f\xa5\x7d\xd4\xb9\xdc\x10\x9c\x40\x70\x9f\xe1\xae\x87\xcf\x45\x06\x19\x0f\xa9\x4a\xdf\x44\x61\xd6\x95\xc8\xcf\x08\x2b\x26\x4e\xa1\x7e\x63\xaa\x50\x26\x7d\xad\x4a\xf1\x18\x1b\xe7\x41\x08\xa0\x17\x49\xbc\xc2\xc3\xba\x26\x3e\xce\x45\x56\x10\xd2\x5e\x2a\x52\xfb\x9d\x52\x09\x79\xdd\x5a\x8e\xd0\x3e\xde\x0e\x12\x7e\x25\x6e\x89\xa5\x2c\xea\x2d\xe3\xbd\xad\x19\x84\xf7\x0e\x95\x90\xdb\x38\x30\x51\x10\xae\x86\x94\x08\x02\x09\x76\x16\x96\x56\xa4\x43\xe2\x21\xfa\x31\x7a\x50\x64\xaa\x8c\x71\xfa\x44\x65\x07\x50\x86\x16\xf5\x2e\x84\xb3\x4e\x08\x59\x42\x72\xd7\x0e\x9d\xe0\x6b\xa7\xd0\x38\xb5\x0a\x55\x69\x8f\xa0\xfe\xd1\x20\x88\xe9\x23\x8b\x83\xe0\x99\x93\xc1\xd3\x81\xd4\x31\x78\x3a\xe1\xb0\x8e\xad\x81\x65\xed\x99\x93\x78\x41\x50\xe3\x03\xdd\x4a\x85\xca\x46\x51\x8c\x30\xf0\xa9\xc8\xf0\xdb\xf1\xba\x05\x60\x39\xc0\x34\x01\x68\xb9\xd3\x49\xea\xa3\xd3\xc6\x66\x30\x99\x2a\xd7\xb8\x6a\xa3\x92\x3e\x35\xbe\xf2\xb0\x72\xb8\x1e\xac\x1e\xad\x07\xab\x47\xe4\xff\xe0\xe8\x02\xff\x3a\x2c\xff\x3a\x56\x0f\x56\x8f\xc1\x69\x46\x3e\x3a\x8a\x56\x20\x78\x0f\xfe\x3c\x5a\x0f\x3a\x42\x1c\xc1\xff\x3f\xec\x04\x3a\x3d\xc8\x96\x59\xe7\x51\xde\x81\x68\x49\xb0\xef\x3d\xe0\x82\x78\x0c\x85\xac\x1e\xdd\x28\xea\x16\x22\x2b\xbf\xb8\x3f\xbc\x77\x93\xdf\x5d\x66\x8f\x0d\x43\xcc\xd5\x0d\xbc\x3a\xf6\xf2\x35\xfb\x76\xef\xdb\x3b\xbd\x6f\xbf\xc5\x53\x21\x77\xaf\xf5\xc2\xdb\x2a\x63\xee\xb6\x9e\x1d\x5b\x46\xcf\xb1\xb3\xec\xf4\x35\x44\x3e\x6f\x28\x46\xbb\xa6\x80\x1d\x98\x02\x32\xcb\x12\xd0\xd9\x59\x54\xed\x21\x7d\xcc\x8a\x75\x6c\x62\x55\x94\xed\x55\xef\xa1\xad\xaf\x7f\x17\xfd\xf3\x86\x6e\xd2\xc8\x82\xbe\xfb\x6d\xa2\x32\x9c\xdb\x20\x8a\x0e\x63\x3f\x54\xed\x83\x3d\xd3\x5b\xe6\x5d\x9e\x45\x89\x36\xdc\xe6\xfe\x2b\x58\xf8\xac\x49\x2d\xd4\x5c\xbd\x61\xec\xa2\x14\xd9\xaf\xbd\x79\x33\xa2\x6d\x5e\xb3\xde\xb2\x28\xed\x9b\xeb\xde\x3f\xe3\xc3\x75\x95\x99\x7b\x77\xb5\xd4\x0e\xb5\xd4\x17\x6b\xac\x6a\x9c\xfd\x5f\xa9\x85\x1f\xf2\xb6\x98\xd4\x4a\x87\x66\x0f\x82\x22\xf8\x5a\xf5\x27\x8a\xef\xa4\xd7\xc3\x38\x47\x15\xcf\x98\x00\xf7\xe1\x62\xbf\x30\x54\x15\x1b\x7e\x4f\x5a\x01\x92\x61\xd1\x0f\xd6\x15\x6d\xb8\x30\x39\xea\xf2\x36\x76\x9c\x1d\xdb\xd2\x6f\x3e\x2c\xcf\xdb\xe7\x8a\xda\x3e\xff\xd4\xae\xc6\xdd\x81\xc6\xbd\xd7\xd2\xb8\x77\xef\xd0\xf4\x7a\xd5\x7b\xce\xd6\xaa\xf4\x76\xff\x84\x56\xa5\x61\x68\xd8\xf3\x87\x97\x49\x99\xb8\xf7\x07\x0f\xd8\xe4\x61\x5a\xc8\x28\x63\xa7\x40\xd8\x27\x72\xd1\x50\xc8\xfa\x3f\xec\x0f\xef\xdb\xe4\xf7\xb2\x33\xb4\x2a\x8f\x30\x33\x9f\x5b\x2e\x20\x24\x3c\xc7\x44\x20\x47\x6d\xbe\x7a\x3f\x6b\xb1\x1b\x21\x72\x41\x67\x19\xcd\xaa\x24\xa3\xbb\xe6\x9d\x3c\x3b\x8c\x6f\xd0\xf9\x44\x06\x30\xa7\xba\x4a\x27\x4d\xe8\xb3\x1e\xd3\x0d\xf0\x3f\xa9\xd3\x98\x3e\xec\x95\x13\x98\xac\x0c\xbc\x64\x10\x88\x45\xbc\x05\x0e\xa7\x33\x5d\x33\xf2\xe5\x9a\xc8\x56\x12\x11\xb5\xf3\x09\x8b\x08\x7e\xc2\x6a\xbb\x79\xfc\xa4\xb5\xe5\xa8\x68\xc4\x79\x23\x6a\x54\xfe\xee\xf4\xec\x75\x1e\x7b\xa2\xc6\x11\xd3\x63\xf8\x02\xd5\xc3\x8e\x3b\x86\x06\x71\x4c\x8f\xe3\x58\xb6\x0d\x4e\x94\x6b\x1a\xec\xd7\xd6\x9c\x2c\xc4\xff\xe3\x85\xcf\x9e\x75\x25\x67\x4b\xfc\xb3\x8d\x04\xe9\x50\xee\x72\x2c\x39\x5a\x76\x8a\x4d\xb2\xbb\xb7\xd4\xb2\x95\x02\xee\x20\xa0\x6d\xa9\x71\x09\x01\x6d\xdb\x1a\xf7\xcd\x1e\xfb\xe7\x80\x1f\x73\x3e\x5a\xe4\x89\x95\x50\xf7\xed\x6a\x9a\x1e\x9c\x1f\x4e\x29\xc5\x4c\xf8\x68\x95\x60\x2c\x72\x03\x63\x83\x43\x08\xcf\x14\x36\x8b\x68\x07\x05\xef\xf6\x12\x2b\x93\x71\x3b\x53\xf5\x6a\xaf\x32\x57\xb5\xaf\x72\x55\x17\x2e\x55\xd1\x79\x75\x10\xbe\x1a\xfc\xff\x56\x96\x6a\xa7\x72\x05\x91\x21\x65\x3b\xad\xf9\xb2\xe7\x30\x2f\x74\x12\xb1\x46\xaf\x6a\x6f\xc5\xe5\x9c\x67\x73\x7d\xd0\x1e\xfe\x8f\x79\xe1\x5d\xd6\xbf\x29\xf7\x1e\x6d\x5f\xbc\x3d\x14\x46\xdc\xcf\x79\x06\x4a\x55\xee\x38\x70\xa2\xaa\x0a\x9b\x68\xb3\x45\x8a\x9a\xb8\x3f\xbc\xe0\xe2\x36\xa8\x1c\x70\x9c\x19\x42\xd1\x80\x74\x95\xf0\x96\x10\xb3\x07\x8a\xd6\x32\xd8\xa7\xd4\xab\xb9\xc1\x61\x70\xac\x5d\xff\x70\x80\x3d\xd5\xea\x69\x0f\x50\xa8\x74\x27\x67\x44\x7b\x8e\xb7\xfa\x59\x5c\x0c\x10\x9f\xca\xff\xf4\x81\xf0\x2d\xde\xd0\xe3\x60\x49\xac\xf2\x2c\xa5\xbc\x0f\xc5\xd0\x43\x59\x0c\x66\x3b\x05\xd2\x8c\x4e\x07\xfc\xe6\x08\x95\x0b\x65\x40\xbc\x03\xbf\x42\x6c\x39\x0a\xea\x01\x49\xaa\xdb\x08\x32\x0d\x37\x41\x03\xec\x85\x1c\xad\xb6\x85\xf5\x48\xf3\xe8\x11\x37\x1d\xe9\xa7\xf7\xb1\x07\xc9\x0b\xb5\xb8\xf1\x06\xb9\x65\x8f\xc1\x19\xf5\x2d\x39\x3a\x64\xcc\xc1\x19\x3f\x0b\x78\x0a\x51\x56\xed\xe6\xee\xa1\x7b\xd7\x15\xff\xf8\x9d\x06\x7f\xc3\xce\x6b\xfd\xb8\xb7\x53\x57\xfc\x4b\xbd\x92\x2b\x1e\xe3\x9d\x1f\xdb\xf4\xd6\xed\xfb\x77\xf1\x24\x3a\xb4\x72\xab\xfc\xb9\x3a\xaf\x12\xd7\x2f\x63\xbf\xb6\x6f\x93\x50\x39\xa5\xdf\xbf\x7f\x5f\xf8\x8b\x9e\x52\xee\x16\x43\xac\x83\xce\x03\xa6\x7b\x7c\x85\x74\x3c\xa5\x59\x15\x31\x84\x32\x61\xec\x5c\x8c\xae\x7e\x8b\x81\x3f\x30\xac\x1a\x94\xa2\xb8\x0c\xf4\x2b\x14\x85\x05\x16\x7e\x3b\x84\x81\x03\xe3\x24\xc6\x43\xc2\x9a\xe8\x40\x12\x48\xaa\xc0\xcb\xb5\x0d\x5a\xc7\x2d\xa3\x6b\x14\x77\x81\x4d\xe2\xf4\x3e\xbe\x87\xfd\xbc\x67\x03\xfd\xfc\x88\x17\xbe\xd7\xbb\x58\xc6\xf5\xb1\x50\xf6\x95\x6a\xd2\x9c\x73\xd8\xcc\x15\x5a\xbb\x4e\x0c\x53\x5d\xb7\x2b\x94\x5b\x25\x9a\xeb\x21\x82\x2f\x54\xe6\xf1\x38\x37\x4c\x58\xc0\x36\x03\x90\x91\xe0\xe0\xed\x17\x60\x16\xe4\x99\x52\x7f\x84\xcd\xac\xd3\x26\xed\xd5\xf0\x7b\x9e\xa3\x8a\x7f\xd5\x0b\x7f\xce\xb3\x54\xb1\x41\xc6\x31\x7e\x63\x48\x9c\x73\xb3\x41\xad\x7e\xaa\x6d\xda\xe1\x36\x09\x57\x8f\x84\x18\x27\x8e\x80\x41\x93\x44\xf9\x46\x2f\xe7\xa5\xb7\x41\xb2\x22\xea\x07\xc6\x8c\xd3\x8a\x51\xe2\x86\xa5\x5d\x56\xb3\x86\xd1\x8d\xba\x34\xbb\x83\xbf\xef\x91\xaa\xfc\xac\x17\xfe\xb2\x07\xaa\x52\x74\xd4\xe8\x97\xa3\x15\x89\x48\xc6\x81\x01\xd4\xb4\xca\xd4\xfb\x8c\xd3\xac\xd4\xdd\x39\x09\xdd\xbe\x85\x26\x67\xc4\x4c\x48\x5b\x70\x05\xb5\xa7\xf7\x11\xf9\x0a\x48\x01\xed\x39\xd7\x3e\x87\x77\xd0\xd9\xe7\x48\xf8\x64\x1b\xef\x7f\xa3\x3e\xda\x9f\x7e\xdf\x5e\xf6\xc0\xce\xe0\x33\x37\x72\x56\x18\x76\xeb\x5f\xd8\x13\x3e\x7b\xcb\xb7\xaa\x59\xaf\xed\x0b\xab\xe1\x74\x35\xf4\xff\xed\x21\x8a\x6b\x67\x95\x7e\x72\x94\xbd\xdb\xab\xe4\x2e\x7e\xed\x0e\xc0\x6c\xe6\x2a\xa8\x8b\x77\xca\x59\xcc\xb8\xe1\x09\xbe\x3f\xbc\x30\xcc\x13\xdc\xd8\x3e\x4f\x70\x99\x49\xdb\x9e\xef\x07\x35\x91\xf7\x42\x38\x47\x94\x96\x50\x09\x02\x22\x01\xd3\x74\x63\x0d\x72\x42\x0d\x57\xf4\x35\xb0\x76\xdb\x75\xdd\xaf\xa9\xad\x67\xc2\x29\xea\x72\xbc\x41\x0e\x7d\x9b\x38\x8d\xa7\x10\x28\x71\x4b\xa2\xeb\x87\x88\xe8\x3a\x0e\x9f\x0b\x21\xc8\xa5\x70\xe4\x52\xa9\xf3\x00\xd6\x0a\xa0\x61\x6d\x1e\x9c\x81\xb4\xb2\x38\x5f\xe6\xed\x7a\x00\x2a\x7b\x12\x18\x9b\x09\x89\x6a\xde\xe0\x2e\x3a\x55\xbe\xfe\x89\xec\xdf\x56\x61\x17\xdc\x23\x16\xc9\x12\xf3\x17\x4f\x08\x0f\xeb\x7f\x6d\x66\x77\xa1\x24\x90\x7b\xc4\xa2\x7b\x0c\xff\xc0\x13\xd8\x94\x06\x05\xb8\x43\x5d\x33\x9f\x5c\xb2\x06\xa8\x0c\x7e\xc5\xeb\x05\x74\x46\xce\x95\xec\xf3\x23\xec\x09\x2d\xd1\xed\x01\xbc\xd6\x74\xda\xe6\x57\x38\x60\x1e\x7f\x74\x64\xaa\xf4\xd4\x52\xf0\xfa\x03\x29\x59\xf0\x1b\xc4\x84\x34\x21\xac\x82\x7e\x8c\x45\x7a\x41\xb4\x79\x70\x57\x10\x62\x01\xed\x10\x93\x54\xe1\x4a\x82\x37\x37\x0c\x1c\x52\x65\x20\x6f\x94\x61\xdd\x01\x30\xd4\x56\xdc\x85\x8c\x51\x68\x6d\x1e\xe4\xbc\x17\x65\x0a\x37\x46\x9e\x89\xa2\x9c\x12\xd7\xa1\xd3\x65\x37\x7e\x9c\xb6\xa4\x44\x62\x46\x6d\x1b\x03\x0a\x01\xcb\x3e\x0b\xba\x82\xf8\xdb\x79\xab\x0f\x69\x47\x76\x09\xb2\x0f\x19\x87\x88\x62\xca\x6a\xd7\xad\xa2\x10\x46\x74\x69\xcb\x1f\x41\xae\x39\xa1\xbc\x19\x90\xbe\x58\x5e\x1d\x9d\xe6\x46\xc1\xf2\xa0\xb7\xcc\x89\xe5\x5a\x67\x66\xc7\x9d\x0d\xc6\x54\x36\xe4\x48\x3d\x38\x56\x0f\x6e\xad\x07\xc7\xa1\xae\xdb\x08\xd5\xac\x62\xa8\xc2\x23\xf5\x63\x8d\xe3\xf5\xdb\xdc\xa4\x99\x8f\xd5\xd8\x4d\x66\x42\x40\x9f\x7d\x70\x07\x5c\xec\x5f\xf5\x6c\x43\x8f\xc3\x6f\xfe\xa0\x58\x04\x46\x6f\xdd\x8f\x66\x30\xad\x09\xd2\x2d\x6a\x7c\x0c\xd7\xce\x81\xb0\x29\x58\x06\xe3\x7c\xde\x20\xec\x55\x0c\xd1\xa0\x74\x59\x35\x76\x16\x5e\xbf\x2a\xd2\xee\x3a\xe2\xe4\x1e\x3b\x76\xec\x0e\x0c\x07\x8b\xf0\x90\x14\xa7\xc1\xe5\xf9\x29\x8a\x4c\xd3\x03\x80\x6d\x8e\x09\x46\x54\x36\xc2\x69\x3f\xb2\x0b\x70\x38\xeb\xb5\x78\x9e\x83\x4d\xa7\xc9\x3e\xb2\xc7\xb1\x77\xbd\x77\x4f\xf8\x67\x23\xdb\x42\xf9\xd7\xd7\xcc\x21\xb3\x16\x06\xef\xc3\xba\x56\x8c\xb8\x44\xdc\xef\xe8\xa3\xdc\xc2\xaf\x03\x85\x15\x9e\x05\xdb\x07\xc6\x62\xa8\xbd\x21\xeb\xbb\x05\xc6\xb2\x03\x39\x7a\x3d\xb6\x5b\xee\x9c\xfa\x60\xa8\xe8\x3b\xcd\x18\x51\xe1\x19\x87\x14\xcf\xfa\x90\x7e\x06\xf4\x72\x4d\xef\x8e\x06\x07\x48\xc0\x84\x5c\xa5\x72\x1b\xb5\xa4\x6c\xb7\x8d\x4a\x23\x55\xf4\xfe\x11\x31\xd6\x3e\x28\x16\xf3\x46\xd6\x4f\x1b\x85\x68\x18\x99\x99\xb0\x4d\x90\x47\xd9\x61\xd6\xdc\x1a\xa4\xe6\x1e\xb1\xf8\xa8\x5a\x1c\xaf\x7a\x4f\xda\x90\x9d\xe1\x80\xbf\x2f\x2a\x44\x37\x6e\x31\x76\x81\xed\xed\x80\xbc\xf8\x53\x6a\x87\x68\x56\x18\x22\x31\x06\x29\xe3\x11\x80\xde\xf6\x96\xe5\x46\x8e\x72\xe6\xee\x15\x5f\xaa\xb1\x03\x10\x75\x04\x7a\xe4\xb3\x3b\xd0\x23\x6f\xab\x6d\xaa\x47\xac\xdc\x12\x42\xf1\x40\x2e\xd9\x9c\x10\xf1\x1f\x14\x8b\x43\xc2\xe4\xa6\x45\x6a\xf9\xc7\xf5\x56\x2f\x81\xda\x43\xe8\x23\x2f\x82\x7e\x5a\xc4\x89\xa5\xcf\x51\x3d\x14\x96\x90\x97\x03\x10\x31\x2f\x9a\xaf\xf2\x8c\xe8\x31\xa3\xd2\xaa\xc0\xa3\x1b\xd6\x8f\xb1\x46\xd7\xaa\xb3\xd8\x1c\x3b\x00\x0a\x88\xb7\x79\xdb\x3f\xab\x66\xee\xc8\x36\x67\x6e\x4e\x7d\x5a\xb2\xbd\xde\x58\xe9\x2e\x9a\x9e\x9b\x9a\x9b\x9e\xd1\x39\xcb\x4e\xbe\xf3\x87\x6f\x0c\x3f\xe0\x6d\xf2\x82\x0b\x80\x1f\xc0\x9b\x04\xc9\x82\x7f\x63\x3a\x55\x6e\x80\xc8\x17\x39\xa6\xe7\xe0\x96\x65\x32\x2d\x03\xb9\x30\xcb\x5f\x51\x42\x69\x20\xd6\x52\x9e\xe5\xcb\x71\x8f\xa0\xe5\xba\x8a\x8e\x60\xee\xcc\xf9\x38\xed\x5f\x01\xfc\xf9\x45\x0e\xd1\x28\xeb\xde\x0d\x88\x60\x38\x23\xb2\x22\x4a\xd6\xbd\x91\xf8\xa1\x74\xdd\x1b\x49\xfa\xa9\x73\x7c\xfa\xdc\x41\xb6\x62\x65\x82\x3e\x10\x3e\x6b\x67\x99\x9e\xc1\x50\x22\xa9\x1b\x9b\xf9\xb0\x9d\x64\xdd\x65\x87\xb7\xf4\x62\xe8\x64\x6a\x4a\xaf\xbe\x63\xea\xdc\xe4\x8c\x62\x41\x93\xc7\xeb\x18\xc6\x8a\x68\x0c\x11\xad\x31\x2e\xe2\xa8\x10\x59\xe0\x62\xd9\xb2\x77\x79\xcc\x19\x14\xff\xbf\x7a\xe1\xcb\x3d\xfc\x7e\x1e\xbf\xc7\x1f\x70\xb7\xc4\xbf\x01\xf5\x02\xed\x26\x72\x6a\x67\x80\x79\xad\xf7\x40\xd4\x6e\x67\x27\x91\xa3\x41\x39\x26\x32\x10\x6f\x41\xb1\xa5\x40\xe1\x84\x89\xa1\x63\xc5\xa0\x47\x99\x67\xf3\x53\x33\x04\x10\x7f\xfb\x89\xc3\xd0\xda\x63\x47\x4f\x1c\x76\x23\xb4\xef\x63\x4f\x6c\x2d\x47\x3d\x79\x9f\x3d\xad\x22\x2f\xfd\xc9\xf0\x98\x8a\x5b\x55\xe2\x80\x0d\xd7\xaf\x04\x30\x30\x6e\x97\x9d\xa1\xff\x2d\x8f\xdd\xa8\xc7\x06\x52\xac\x3f\xe6\x85\x1f\xf6\xf0\x9a\x49\xa5\x4d\xeb\xb1\x93\x2f\xc0\x75\xdc\xf9\xa4\xc4\x0d\x18\x17\xcb\x41\x9c\xb7\xf2\xd8\xe4\x0f\xe6\x71\xb7\x9f\x14\x51\xca\x45\x3f\x4f\x06\xc8\xca\x8b\x65\x6b\xa8\xdf\xe0\x69\x34\x5b\x3d\x18\xe1\xa7\x9f\x7c\x1a\xa5\x1b\xca\x1b\xf9\xd3\xb5\x81\x5e\x69\x32\xeb\x0e\x95\x62\x3a\xba\x33\x5c\x29\xbb\xc9\x6d\x82\xff\xdc\xf0\x92\xea\x8d\xaa\xf1\xa2\x41\xb1\xcd\x01\x68\x48\x89\x8d\xbc\x86\xc9\x66\xb8\x82\x7b\x88\xa6\xee\x50\x30\x56\xb4\x7a\xee\xf4\xdc\xca\xe4\x22\xf2\x1b\x4a\x1d\xfd\x2b\x47\x80\xce\xf7\x53\xd2\x4d\xae\xd6\xf9\x61\x8f\xed\xc3\xee\xe6\xfe\x7b\xbd\xf0\x55\x55\x62\x17\x9c\x8f\xf3\xe2\xf1\x90\xbd\x0d\x01\x8c\x67\xd9\xcd\x4a\x14\xe7\x38\x60\x8e\xfb\x77\x87\x47\xaa\x05\x91\x5e\xd8\x52\x0c\x7f\xa4\xa6\x53\xec\xdf\x5f\x0b\xbf\xab\x56\x4e\xb1\xa7\xe3\x0f\x89\x04\xcc\xd9\x40\xf4\x21\x31\xc5\x4a\xbf\x9f\x8f\x7b\x27\x83\x33\x69\xde\xcf\xb8\x81\x43\x29\x67\xe2\xc7\xf9\x35\x24\xe3\xc3\x2d\x24\x3f\xb9\x51\x4a\xfe\xb4\x21\x66\x00\x0b\x7f\xa6\x8f\xf0\xf8\x81\x9c\x0b\x8b\x0d\xe1\x9a\x4f\x62\x94\x39\x30\x41\x4a\xff\x49\x20\xd3\xf6\x5c\x1c\x66\x52\x85\xfb\xe3\xe1\x37\x91\xd0\xe0\xb0\x3f\x4b\x13\x75\xc0\x8a\xb5\xbf\x78\x7b\x8d\x7d\x4b\x15\x6a\x45\xdc\x8d\x8b\xd9\x28\x5d\xe2\x90\x27\xf4\xb7\x5e\x78\xd1\x7d\xa4\x9d\x49\x51\xd0\x8d\xd3\x89\x6e\x74\x25\xe8\x83\xf9\x04\xb8\x2f\x60\x3d\x9a\xe4\x16\xe3\x22\x0c\x44\x0a\x46\xb9\xe6\xba\xb7\x17\xde\x74\x0d\x4b\xff\xc5\x63\xaf\xf1\x18\xfd\xe2\xbf\xd8\x0b\xef\x86\x5a\x87\xe2\x33\x4d\x5b\xa6\xe5\x44\x6a\x92\x3b\x70\xee\x65\xdc\xb8\xc4\x6c\xb9\x3d\xc6\x8e\xb0\x89\xad\xf1\x3a\x9c\xa2\xd9\x1b\x47\x9d\xdc\x6a\x07\xd5\xc3\xd9\xff\xbf\x32\x12\x9e\x3f\x4f\xc0\x37\x7a\xa3\x57\x49\xcc\x0d\xcc\xe7\x35\xa8\x22\x2a\x66\xbb\xcd\x83\xa8\x03\xed\x19\x04\x63\xa7\x78\x11\x05\x1d\x1e\x15\xfd\x8c\x8f\xaf\x7b\x80\x4e\xef\x0c\xcf\x2b\x47\xd8\x8b\xcc\xca\xf8\x6b\x2f\xfc\xf2\x26\xe0\x13\xd3\x85\xb6\xf0\xc3\x71\x42\x1f\x1a\x67\xa2\x82\x98\x2b\x16\x13\xd1\x5a\x01\xca\x15\x79\xa0\x78\x54\xd1\x2a\xe6\x2d\x12\x5e\x6d\x60\x2f\x04\x44\x44\x36\x90\xf7\x89\x2a\xc6\x7a\x4b\x2b\xc5\x16\xd9\x97\x78\x04\xdc\xff\x70\xd8\x9d\x27\x32\x1a\xc4\xe9\x77\x69\x75\x85\x01\x46\x82\xd1\x20\xb2\x10\xa5\x2c\x69\x72\x44\x06\x8c\x50\xf6\x50\x04\x63\x88\x09\x08\x94\x6a\x05\x84\xc5\x37\x9b\x4d\x57\xc3\xff\xe8\xc1\xca\x75\x73\x51\xb4\xf9\x1c\xf4\x00\xd0\xf0\x5f\x7f\x30\x9c\x72\x1f\x91\x3f\x11\x41\xa7\xe3\x76\x3e\xd1\xef\xc7\x98\x97\x5d\x86\x4e\x1f\x98\xd6\xaf\x7b\x07\xe8\x92\x30\x7d\x7a\xdd\x63\x38\xdc\x97\x2f\xcb\x7f\xec\x5d\x14\xa2\x90\x7f\xdc\xb8\x22\xd5\x46\x42\x0e\x86\x75\x6f\x9f\xc8\xa7\xbb\xd1\x12\x5f\xf7\xbe\x41\x3b\xac\x67\xe5\x11\xbe\xcb\xf5\x3b\x37\xad\x60\x4a\xb9\x7e\xf0\x04\xf9\x60\x26\x13\x57\x06\xfa\xd1\xcd\x7a\x9a\xe7\x08\x86\xe7\x06\xdb\x7b\xe6\xc8\xe7\x7f\x3b\xc0\x52\xe6\x36\xc4\x7f\x5e\x38\x73\x2f\x3c\xd0\x99\x27\x9a\x34\x72\xd1\x74\x11\x2f\x02\x87\xfa\x10\x51\xd0\xc8\x0e\x11\xc2\xdb\xb1\xe6\x91\x13\xcd\xc3\x8d\xc3\xcd\xc5\x9e\x68\xde\xda\x88\xba\xed\x13\xb7\x8e\x97\x80\x4e\x4a\x9d\xf0\x8f\x86\x4f\x51\x99\xf2\x9b\xd5\xe8\x94\x32\xcd\xca\xdd\xf4\x4f\x84\xe3\xf3\x98\xe2\x45\x42\x8e\xcf\x2b\xcb\x72\x8f\x1a\x6a\xe4\xfd\x56\x78\xdf\xa5\xb9\x00\xfe\xde\xa4\xd3\x13\xbc\x68\x4d\x88\xbc\x91\xf1\x84\xcb\x2b\x09\xf6\xfc\x34\x5f\x8c\xa3\x34\x78\xe6\xc5\xcb\x13\x78\x6e\xbf\x0d\xb2\x3f\xf8\xc3\x83\x71\x77\x00\xfe\x3f\x8f\x59\x02\xe1\xff\x85\x17\xfe\x81\x37\xa7\xff\x5d\xdd\x75\xb0\xa9\x11\xd3\x00\x09\x96\x86\x63\xa4\xa8\x94\x0b\x4a\xde\x88\x9f\x05\x77\xb3\xf2\x05\x8f\x16\x68\x4b\xca\xef\x2c\x6f\x07\xe7\x88\xae\x22\xd7\xdb\x19\x66\x7b\x35\x33\xde\x5e\x8e\x8a\x66\x4b\x74\xe5\x96\xd6\xef\xaa\xf8\x82\x09\x9e\x36\xfa\xf9\x44\xc6\xdb\x0f\x2c\x47\xc5\x03\x79\x7f\x51\xc3\xd0\x3d\x60\x2e\x30\x13\x47\x26\x96\x8b\x6e\x32\x91\x2d\xe7\x5d\x58\x30\xf6\x00\xbc\xc2\x63\x1b\x49\xb8\x9f\x84\x0f\x4c\x95\x7e\xda\x5c\x0c\x8b\xe5\x4c\xf4\x97\x96\x83\x8c\x5e\xce\x78\x57\x14\xe8\xa4\x53\x00\x88\xad\x15\x9e\x9d\x9c\x98\x38\xd2\x3c\xde\x3c\x5c\x3e\xf5\xd1\x6a\xf4\x6f\x09\xff\xed\x29\x21\x8a\x60\xa3\x09\xb0\xbf\x3a\xc7\x86\x56\x9d\x7f\x6b\x78\xe8\x5e\xf5\x6c\xfb\x52\xfc\xff\x78\xcc\xe8\x09\xff\xd7\xbd\xf0\xe7\x3d\x33\x8d\xd7\x2b\x08\xb1\x03\xe7\x31\xcc\x77\xa7\x04\xe3\x3c\x8f\xb2\x14\x0d\xc5\x20\xd6\xdd\x28\x1d\x3b\x3e\xae\x4a\x6d\xc4\x6d\x3c\xe2\x9c\x9c\x98\xe8\x46\xe9\x6d\x4d\x91\x2d\x4d\x24\x52\xb0\xe5\x3f\x1b\xbd\x68\x89\xe7\xf2\xaf\xe3\x13\xe6\x83\xe6\xf1\xa6\x9c\x75\x17\x2d\xc5\x51\x3e\x72\xad\x03\x6a\x9e\xf5\x6c\xcb\x05\xfa\x53\x37\xb0\x86\xa5\xb9\x2b\x5c\x6f\x16\xc1\x8e\xdc\x2b\xfd\x57\xdf\x10\x8a\xd2\x33\x13\x62\x8d\x34\x1f\xc5\xb2\x4a\x2e\x53\x34\xba\x86\x51\xab\x9f\x95\xc3\xd5\xe0\x7d\xcc\x3d\xcb\xd6\xa2\xac\x3d\x44\xdc\xd6\x5c\xf7\xf6\xd1\x9f\x8e\x82\x7d\xf1\x41\x79\x41\x55\x3f\xf9\x6f\xf1\xd8\xc9\x0d\x0f\x34\x15\x1d\xa3\x0e\x9c\xc2\xcf\xc3\xfb\xe9\x0f\x27\x30\xc8\x76\x39\x13\x0b\x8d\x89\x4c\x11\x64\x44\x29\x2c\x66\x42\x75\x15\xb3\xfb\xd2\x64\xdf\x5d\xa3\x4d\xfa\x8d\xb5\xf0\x15\x35\x75\xe4\xa8\xe2\x8a\x42\xaa\x76\xb0\xff\xc6\x25\x12\x32\x9b\xb3\x2d\xc6\x0d\x5c\x31\xbd\x5b\x80\x06\xed\x38\x57\xd4\xa6\x3a\x98\xc6\xc4\x73\x44\x49\x10\xca\x2a\x0c\x7f\x5c\x04\xc4\x3e\x1b\x71\xd2\x39\x6c\xf3\x4b\x71\xaa\xe6\xf5\xd0\xc4\x21\x32\xa3\x39\x7c\x66\x11\x9d\x3d\x28\x90\xa7\xdc\x03\x87\x46\xcd\x59\xac\x1f\xd9\xc7\xf6\xcb\x0f\xe1\x28\xf7\xbe\x7d\xe1\xdb\xf6\xcd\xd0\xbf\x5c\x14\x47\x8e\x77\xe2\x5e\xc6\x0b\x27\xb2\x10\x86\x54\x49\x15\x36\x1b\x3e\xa6\x53\x8e\x65\x24\x36\xd4\x5b\x18\x5a\x75\x32\xb8\x45\x5e\x65\x5a\xc5\xc9\xe0\x82\x26\xbf\xe2\x86\xed\x88\xcb\xdf\x92\x41\x33\xb8\x25\x98\x01\x3a\x33\xf3\x9e\xa6\x67\x8b\xcc\xeb\x48\x79\x16\xe4\xbd\x24\x86\xb4\x45\x18\xa8\x0b\x4a\xdc\xe3\x9c\x05\x41\x1b\x5a\x93\xaa\x95\xa2\xfc\x3f\x8b\x03\xf3\x67\x94\xc7\x79\x33\x98\x74\x5f\x20\xb8\x0c\x3c\xfc\xb3\x40\x1f\xff\x29\xdc\x93\x54\x13\x7c\xa2\xab\x97\x4f\x0e\x4d\x1c\x52\x1e\x11\x91\xc9\x52\x15\x4d\x93\x3c\x7c\xb1\x80\xae\x22\xf2\x8e\x82\x3d\x90\xa7\x4d\xb4\x52\xf6\x88\x03\x8a\x5a\xd0\x00\xd2\x65\xea\xa1\xe8\x04\x2a\xb9\x9f\x05\xba\x48\x59\x42\x09\x6c\xb2\x50\x84\x1a\x25\x47\x57\x4f\x1f\xbc\xe5\x3e\x87\x62\x10\xa8\x1f\x9d\x0f\xe2\xd4\x29\x5f\xa1\xcf\x02\x59\x20\xb5\x1e\xb7\xa3\x89\x8e\x10\x13\x8b\x51\xa6\x3a\xc5\x73\xfd\x68\x62\x31\x7a\x18\x33\x37\x74\x74\x04\x7e\xa9\x5e\x58\x8c\x1e\x1e\x6f\xb2\x5b\xe0\xd6\xca\xf5\x8e\xac\x20\x2f\x4e\xa2\x65\x64\x73\xb9\x43\x28\x4f\x24\x4b\x2c\x0c\xb3\xdf\x54\x12\xe5\x79\xb3\x54\x30\x5a\x36\x8b\x8c\x2b\x4c\x94\x08\x4f\xc2\xe4\xb8\x52\x02\x2c\x47\x24\xa3\xd7\x62\xc5\x7e\x84\xc6\x89\x42\x90\x40\xca\x37\x40\x82\xe9\xd8\x3f\xe8\xf1\xbc\xc9\xca\xd5\xa1\xdf\x8f\xb8\x5c\x0a\xa1\x4d\x11\x91\xbe\x2e\xc0\x77\x8e\x51\xa7\x7a\x2c\x9c\x85\xfb\xbe\x03\x4e\x5c\x6e\x2e\x57\x76\x3f\x21\x6e\xb6\x99\x2c\x16\x59\x5c\x0c\x60\x04\x20\x2b\xf4\xea\xfe\xf0\xc4\xd0\xd3\x2a\xd6\x8d\x1e\xbd\x14\xb4\xe4\x5b\x7c\x83\x04\xd0\x9f\xdd\x4d\x00\xdd\x71\x94\x67\xa1\xf2\x3f\x57\xc2\x27\x57\xa6\x7f\x3a\xf3\x25\xbf\x35\x46\x84\xdb\xd9\x09\x76\xeb\xc6\x70\x32\x1b\x0b\xc3\x6e\x6c\xe9\x0e\x62\x4b\x3f\x69\xc7\x96\xfe\xd4\x0e\x39\x53\xfe\x63\x35\x67\xca\x63\x17\x53\xba\xbc\x75\x4c\xe9\x19\x7f\xca\x60\x06\x19\xa1\x2a\xc1\x06\x0d\xe9\x95\x72\xda\xd3\xd7\x9e\xc8\xc6\xb7\x48\x45\x26\x12\xa6\x1e\x6f\xf9\x9f\x7e\x62\xf8\x1f\xcc\x3f\xb5\x0d\x1f\xb1\x7f\x34\xf1\x95\x75\x06\x20\x62\x51\x64\x89\x0a\xc6\xc0\xcc\xb4\x20\xa7\x10\xe1\x2d\x60\xd7\x07\x63\x8b\xde\x2f\xf0\xe6\x60\x80\x52\x72\x5e\x04\x51\x01\x1e\xad\x71\x15\x73\xe6\xe8\xbb\x8f\x3e\x81\xbd\x51\x1e\x25\x45\x3b\xf7\x5f\x53\xdb\x24\x86\xbe\xaa\x6f\x33\xa2\x9d\x53\x87\x10\xf0\xfb\x93\x1e\x78\x02\x0d\x67\x43\xa4\x1a\x4f\x40\x47\x90\xdf\x18\xb5\x96\x09\x3e\xcf\x8d\x30\x82\xee\x93\x5b\x62\xcc\x21\x0c\x00\x17\x41\x04\xaa\x3c\x6f\x90\xf7\x95\xb7\x1b\x3d\x9e\x35\x72\xc8\x1a\x1a\x87\x10\x5b\xae\xa0\x40\x74\x7e\xc1\x2a\xcf\x80\xff\xa9\x10\x4b\x68\x2f\xa7\xe0\x0e\x0c\x2e\x44\x94\x06\x73\x3b\xa0\xba\x91\x30\x9b\xbd\x75\x84\xed\x57\x9a\xc1\x7f\xcd\x08\x9b\xbc\xa6\xb1\x51\x31\x83\xce\xf8\xfc\x62\x4d\xab\x1a\x7b\x8c\xf4\x43\x35\xd3\x2a\x8c\x16\xb9\xcd\x1c\x5c\x1c\x73\xf0\x4d\xdb\x68\x0c\xce\xc7\x09\xca\xa6\x10\x36\x42\xe2\x35\x8f\x38\x1c\x78\xa6\x66\x2e\x43\x40\x12\xef\x8a\x6c\x30\xde\x0c\xe6\x64\x4b\x14\x4d\x99\xdc\xf1\x17\xfb\x31\x22\xfc\x3b\xb5\xe1\x66\x04\xe1\x11\xd0\xda\x28\x09\x68\x40\x08\xd0\x23\x07\x73\xa1\xa0\x03\x9e\xec\x95\x89\x54\x29\x44\x90\x8a\xac\x1b\x25\x81\x9c\x50\xd9\x4e\xc3\x8b\xa6\xf4\x74\x28\x05\x2b\x54\x70\xc1\xec\x7b\x6b\x14\x48\xb7\x5e\x0b\x5f\x53\xab\x0a\xa5\xa3\xa1\x54\xb0\x2c\xc1\x74\x61\x2d\x0b\x3a\xbd\x87\xc6\x78\x41\x33\x10\xd6\x83\xf0\xcc\x15\xdc\x66\xe5\xdf\x18\x30\x2f\xff\x9a\x81\xfa\x45\x16\x84\xd6\xbb\x30\xb0\x9a\xa1\x5c\xa8\xc3\xa3\x59\x89\x34\xe0\x6a\xe7\x97\xc7\xd8\x93\x55\xd5\x6a\x5f\x89\x15\xbf\x93\x1a\x93\x32\x19\xad\x1b\x4b\xf2\x24\x77\x6e\x66\x52\x17\x60\xd1\xcc\x21\x72\xaf\x63\xba\xf9\x9e\x51\xf6\xc4\x56\xb9\x2e\xff\x55\xa3\xec\x9e\x6b\x12\xe5\xa1\xe6\x3a\x32\xfd\x13\x23\xba\x8a\xe0\x71\x91\x6e\xad\x27\x4d\x3b\xe2\xd4\xc8\xbc\x0a\xe5\xf9\x7a\x97\x79\xcd\x20\xa0\xd0\x03\x95\x54\x60\xd2\x14\x19\xdf\x51\x08\xd4\x45\xad\x4a\x54\xd4\x57\x9d\x24\x5a\x6a\xb2\xbf\xaa\xb1\xfd\x9c\x04\xde\xff\x72\xed\x1a\x95\x9c\x5a\x2a\x8e\x40\xbc\xb3\xa6\x0a\x74\xc4\x60\x29\x11\x8b\x51\xa2\x84\x40\x61\x83\xc3\x95\xab\x94\x4e\x1f\xa5\x03\x7b\xaa\xd5\xe2\x99\x26\x26\xf7\xdc\x86\x79\x30\xdb\xa5\x9d\x81\x47\x46\x02\x38\x9f\x49\x25\x2f\x52\x70\x17\xa9\xc8\x53\xd1\x2f\x00\xed\x4b\x74\xb4\xdd\xcd\xde\x6f\x82\x84\xa7\x4b\x68\x34\x79\xa8\xcf\x11\xa5\xab\x95\x88\x7e\x9b\x62\x98\xc1\x25\x83\xb6\x1b\x48\xd2\x78\xd6\xcc\x1c\x56\x95\x88\xa8\xbd\x18\x25\x51\xda\x92\x6b\x61\xc3\xca\xc6\x9b\xec\x63\x9e\xda\x82\xfd\x1f\xf5\x36\xc9\x23\xad\x1a\x74\x9d\xc4\x63\x86\xbc\x28\xe3\x5f\x56\x6e\xbc\x7a\xa1\xac\x94\x07\xb7\xb4\xdd\x2e\xc7\x45\x6e\x6d\xae\x70\x18\x31\x0c\xf9\xf8\xc9\x78\x93\x7d\x71\xaf\x43\x87\xa8\x7c\x34\x33\xa2\x7d\xfa\xe2\x1c\x92\x41\xf8\x3f\xbb\x37\x7c\xc0\x7e\xe0\x5c\x9f\x4e\x5f\x9c\x0b\xe4\xf5\xb4\xcb\x11\x39\xb3\x43\x59\x80\x71\xaa\x19\x5a\x70\x6b\x96\x6b\x87\x92\x3f\x95\x15\xea\xf4\xc5\x39\x4c\x01\x72\x43\x91\x7f\x6d\x0f\xfb\x91\x1a\xdb\x47\x0b\xd0\x7f\x5f\x2d\xfc\x43\x0b\xcd\x41\x56\x48\x74\x32\x99\x5a\xa4\xb4\xb0\x34\xdd\x3a\xcf\x96\x6c\xc8\x0e\x29\x5f\x7a\x3d\x6f\xd8\x86\xe0\x74\x1f\x33\x4e\x79\x3b\xe0\x29\x32\x3c\xa9\x12\x09\xaf\xa1\x19\x48\xf5\x99\xf4\xf1\x42\xa8\x0a\x8c\x57\x39\xd8\x80\x2f\xf5\xac\x30\x43\xb1\xca\xb3\x2c\x06\x73\xb9\xc8\xc9\xee\x41\xfc\xf4\xb4\xa1\x40\xab\xec\x21\xb8\x56\xf8\x07\x7b\x4e\xb0\x6e\xf6\x19\x8f\xed\x47\xc2\x1b\x9e\xfb\x3f\xe7\x85\xef\x2a\x0d\x1c\xfe\x46\x34\x04\x98\xe7\xb0\x2c\xf2\x02\xd2\x7f\x82\x44\x88\x95\x7e\xaf\x34\x96\x2e\xda\x05\xb5\x9a\x8a\x41\xa3\xde\xb6\x06\xd4\xf9\xa2\x3c\xaa\x9b\x44\x4e\xfc\x82\xc7\x0e\x42\x6e\x12\xde\xde\xfc\x0f\x7b\xe1\x9b\x4b\x7d\x82\xb6\xe3\xef\xc1\xf4\x8c\xc2\xef\xe7\x65\xa1\xa8\xec\x88\x55\xf4\xf6\xfa\x61\x7f\x70\x0d\xdd\xf8\xbb\x1b\x58\x58\x95\x5a\x7e\xea\xb4\xe3\x20\xff\xf5\x1b\xc2\x57\xda\x11\xd1\x51\x30\x1b\xb5\x45\x1e\x9c\x02\xcf\xeb\x69\xf4\xbc\x82\xef\x1a\x05\x2a\x89\x72\x95\x20\x1f\x77\x38\x78\x63\xd4\x02\x6c\x06\xb3\xa7\x4e\xef\x30\xf4\x6d\x7f\x57\xa4\xb1\xbc\xc2\xad\x7b\x7b\xe2\x6e\xb4\xe4\x5e\x3b\xde\x75\x90\xfd\xb0\xf1\xb4\x7f\x5f\x2d\x5c\xdf\x8d\x41\xa9\x8e\x41\xc9\x16\xdb\x2e\x0a\x13\x8e\xa6\x1f\x87\xcf\x95\x17\x9e\x0c\xe6\x18\x1e\x81\x7c\x55\xd6\x47\x8a\x3d\xd7\xd9\x68\x58\xf6\x44\xb6\xd8\x9e\x98\x3d\x33\x79\xfa\xc2\x19\x79\x81\x5e\x16\x6b\x8d\x42\x34\xfa\x39\x6f\xc4\x85\x5d\xe7\xf7\x7b\x6c\xdf\x0a\x1f\xc8\xbf\xfd\x77\x78\xe1\xeb\xbd\x7b\xf1\x1f\xea\xc8\xad\x62\x03\x56\xf8\x20\x80\xe7\x52\x35\xcc\x9e\x3a\x7d\x39\xc7\x1c\x6e\x4d\xcd\x00\xae\xd8\x16\xef\x2d\x4f\x50\x71\x8f\x46\x6b\x5f\xeb\x31\x2d\x7b\xfe\x8b\xbd\x90\x4f\x96\x0c\x81\x53\xbc\xb7\x1c\xa8\x37\x1e\xb9\x16\x6c\xb8\x7e\x5f\xe4\xc9\xfb\xb5\x48\xfc\x2b\xe1\x8a\x99\x32\xf9\x84\x66\xcc\x1a\xa1\x6c\xb1\x5a\x62\x76\x38\x26\x1f\xf6\xac\xf8\xd2\xf7\x7a\xe1\x5b\xbc\x47\x3c\xc2\xf4\x11\x6b\xb5\x15\xa6\xf6\xf7\x0e\x1d\xd0\x9f\x5d\x37\x1d\xd0\x87\x2c\x3a\x20\x79\xe6\xb4\x92\x0d\xdd\x20\x39\x9b\x1a\x48\x0b\xf0\x74\x47\x33\xfd\xe8\x9d\x39\x0f\xb4\x04\x5b\xb3\x97\xc6\xc9\x23\x35\x0e\x10\x85\xd3\xcf\x79\xa6\xa2\x70\x50\x6a\x20\xdf\x77\x48\x6a\xa2\x76\x37\xae\x06\xfe\xde\xa1\xdc\xfc\xa5\xc7\xe6\x77\x96\x66\x79\xcf\xdc\xa5\x8b\x88\x5f\x3b\x93\x89\x5e\x7e\x29\x9b\x94\x6b\xc4\x7f\xab\x17\xbe\xc9\xab\xfe\xcd\x65\xb0\x42\xb3\x2d\x68\x76\x2b\x7b\x1a\xa2\xa8\x4a\x9f\x43\xba\x74\x1a\xc0\x1a\x94\xb3\x5b\xfa\xb9\x19\x5c\x88\x62\x2d\xf0\x72\x82\x73\x9e\xc5\x51\x42\x89\xba\x41\xaf\x9f\xf5\x84\xdc\xf9\xd9\xfb\xf7\x38\xe9\xe2\x95\x79\x14\xfe\xcb\xf7\x84\xce\x03\x0b\xc9\xbb\x22\x63\xee\x41\xb1\xb8\x79\xc6\xe7\x47\x46\xd9\xb7\x99\x4c\xca\x0b\xe1\x33\xce\xf5\xbb\x51\x1a\x3c\x32\xc9\x93\xf7\xe8\xe4\xc9\x67\x84\xc7\xc6\x16\xb3\x98\x77\xc6\xaf\x37\x39\xf2\xbc\x4e\x8e\x3c\x15\x1e\x9f\xab\x4e\x87\xd4\x29\x34\x5b\xa6\x43\xde\x4d\x56\x9c\xdb\xc2\x5b\xe6\x69\xcf\xa7\x94\x0b\x55\x92\x4a\xb3\x91\xb3\xab\xd3\x40\x4c\x01\x3d\x24\x2a\x9c\xc9\xc4\x22\x87\x44\x90\x07\xae\x3f\x0f\xe4\xc9\xe7\x37\x48\x86\x85\x4c\xb2\x65\xde\x5a\xe1\xed\x26\x7b\x4d\x75\x62\xee\xea\xf5\xd7\x7b\xe7\x46\xf5\xd2\x14\x6c\x9a\x7f\xfb\x37\x07\xd9\x37\x55\x46\x59\x76\x78\x6b\xd0\x4a\xb8\xff\xdf\x0f\x86\xef\xaf\xe9\x7f\xda\x44\xaf\x68\x4e\x35\xa7\x26\xeb\x54\x47\x87\x27\x32\x98\x15\xd1\x0a\x47\xe3\x4c\xde\x13\x69\xce\x11\xcc\x58\xd9\x5a\x12\x5d\x36\x5f\x45\x6f\xc9\x59\x92\xa9\x19\x91\x17\x73\x00\x0c\x2c\x4f\x89\x33\x19\x9f\x2b\x44\xcf\x7a\x7f\x39\x4a\xdb\x09\xcf\xf2\xba\x5d\xb5\x11\x26\x2a\x1f\x22\x07\x73\x2b\x3b\x06\x1b\x6e\x27\x6d\xd5\x83\x7e\x9a\xc8\xab\xa9\xfb\x25\x19\x8a\x55\x4e\x9b\x46\x5b\x6e\x45\x44\x70\x43\x0d\x00\x15\xba\x08\xa7\x43\xf7\x32\xf9\xd6\x03\xec\xc5\x23\xec\x40\x4f\xf5\xc3\xff\x6a\x8d\x8d\x6d\xb9\x05\x9d\xc3\x52\xc3\x5f\xac\x99\x01\x00\xf0\x87\x04\x80\x82\x2c\x5e\x43\xe4\x16\x8e\x6c\xc3\x95\x4e\x1e\xd2\x69\xf8\xaa\x91\xd4\x0b\xb7\x8b\xf2\x04\x46\x79\xbf\x3a\x3d\x54\x65\x29\x45\xad\x96\xc8\xda\x64\x99\x44\x4f\x14\xc2\x34\x13\x1c\x4e\x70\x89\x7c\x07\xd7\x30\xf6\xcb\x42\xac\xe8\x61\xbf\x76\x5c\x32\x03\x68\x68\xfe\x6c\x68\x81\x68\xc8\xd2\xf3\x89\x27\x99\x9f\xe0\x01\xfb\xce\xbd\x6c\x5f\x0f\xa5\xc7\xff\x4f\x7b\xaf\x61\x06\x3e\xb7\x47\x09\x5d\xf5\xf8\x93\x33\x20\xda\x70\x40\xdb\x7d\x24\x5e\x40\x0c\x6e\x15\x32\x20\x9c\x41\x03\xa9\xd7\xc0\x17\x89\xbc\xd0\xf3\x5c\x9e\xe3\xa3\xac\xe8\xf7\x80\x4b\x99\xc3\xe4\xf5\x33\x5e\x0f\x7a\x19\xe7\xc8\x37\x59\x37\x86\x51\x59\x3d\x7a\xb2\x88\x56\x78\xde\x15\xce\x54\x14\xba\xf9\xe5\x29\x6a\x65\xc8\x0f\x02\xf6\x9b\xb8\xa0\x0c\x64\x5b\xbb\xab\xbc\x70\x5c\x33\xc4\x4d\x44\x17\x59\xaa\x44\x25\x3c\xb4\x0f\xe5\xce\xfb\x4b\x59\xd4\xe2\x8a\x88\x14\xe0\x21\xda\x62\x2d\xc5\xc0\x9d\x5c\x0d\x1f\x2c\x75\x1a\x67\x39\x61\x1c\x1c\xaf\xfc\x0a\x6f\xf5\x0b\x34\x7b\x2c\x45\x59\x3b\xb1\x78\xf1\x44\xbf\x80\x4c\x4c\xe1\x48\x78\x59\xb6\xe1\x50\x0a\xa3\x8b\x9c\xc0\x7a\x5e\xc0\x38\x43\x86\x90\xcd\xdb\xfc\x08\xc8\x38\x00\xbd\xe8\xdf\x36\x1c\x1c\xf0\xf9\x43\x08\xfa\x63\xb4\x28\x7e\xfa\x26\xf6\x94\x6d\x45\xa3\xf9\x6f\xb8\x29\x7c\xf5\x88\x32\xde\x55\x04\x46\x64\xfd\x44\xe5\x10\x80\x7d\x35\x88\xd3\x45\xd1\x47\x20\x2e\x4a\xf6\xc9\x91\x87\x39\xa2\xd0\x34\xe5\xee\x76\x42\xbc\xac\xd0\xbc\x49\x63\x2c\x24\xbb\xb4\xc5\x3c\x59\x08\xb0\x7a\x29\x0b\xaa\x94\x14\xb4\x16\x27\x83\x06\x54\x01\x07\x9e\x7e\x26\x95\x1d\x50\x61\x93\x45\x55\x05\xc4\xd5\x2d\x41\x98\x9b\x3b\x5f\x0f\x44\xa7\xa3\x18\x79\xd0\x18\xbc\x1a\x67\x52\x64\xe0\x8a\x0f\xee\x2f\xb9\xa4\x4e\x9f\x99\x99\x3d\x33\x35\x39\x7f\xe6\x74\xd0\x40\xe3\x0e\xe2\xa2\x58\x88\x30\xd6\x18\x59\xd4\x0e\x8b\x83\x20\xe5\xc5\x9a\xc8\x56\x8c\x87\x78\x82\xc6\x58\x7d\x82\xd4\x0c\x18\xde\x87\x51\xc6\xa9\x28\x88\x4a\xa3\xab\xa4\x41\xd1\x88\x3a\x5b\xcc\x5b\xd8\x3f\x49\x60\x27\xf6\x05\x8f\x70\xd9\x7e\x6b\x13\xc4\x92\x4d\xa4\x16\x20\xd9\xde\xe2\x81\xa3\x9c\xcc\x0c\x6d\x9e\xc7\x99\x4a\xa2\x55\xeb\x58\x4f\xc0\xa3\xdc\x31\xd9\x97\x46\x94\xb6\x1b\x78\x06\x63\x7f\xe4\xe9\x83\xf0\x6f\x7b\xec\x8e\xeb\xe9\x21\x7c\x1d\xae\x7b\x73\x0e\xc4\xc8\xd0\xed\xe1\xf1\xec\xe5\x6e\x28\xd4\x2e\xe0\xdd\xe3\x15\x94\x74\xd5\x7b\xee\xd6\x71\x3c\x77\xf8\xb7\x35\x36\x41\x80\x33\xab\x4f\xc7\xf4\xd0\x52\x62\xec\x47\xf7\xb0\xa3\x5b\xe0\x7f\x9e\x4d\xc4\x1a\x9a\x10\xcc\xc5\xff\x45\x7b\xc2\x93\x15\xcf\xed\xfb\xbf\x01\x8d\x40\x4a\x5b\xf3\xba\xab\xfb\x7f\x64\x94\x7d\xa0\xfa\x36\xf9\xe6\x1d\xc0\x3c\x3d\x77\x61\xb8\x40\x8d\x2a\xba\x63\xbc\xa7\x25\x63\xa5\x78\x6e\x78\x69\x81\xfe\x5e\x78\xe4\x11\x9f\x12\x6d\xb4\x58\x0c\x2f\x2f\xe0\x9f\x0b\x8f\x1a\xe6\x53\x47\x6b\x73\xd9\x2b\xfc\x73\x61\x47\xa8\x4f\xd5\x50\xac\x53\x64\xf0\xb8\x33\x6c\x52\x20\xd7\xe6\x08\x50\xd5\x78\xae\xcc\x41\x74\x22\x3c\xc3\x26\x7a\x9c\x66\xfb\x09\xf7\x7f\x97\x85\xef\xf4\xcc\xbf\x09\x2d\x69\x88\xf8\xd7\x32\x06\x28\xb0\x53\x79\x18\x2c\x45\x35\xab\x94\x80\x2a\xfa\x63\xa2\x0c\x96\x75\x18\xb8\x43\x79\x64\xc6\x9b\xb6\x46\x06\xac\x7a\xad\xb9\xee\xed\x59\xe5\xd9\xa2\x6b\x09\xfb\x9e\x03\x40\x8f\x06\x3f\xf8\xef\xf7\xc2\xef\xf0\xee\x93\x7f\xba\xec\x2e\xf8\x48\xf9\x45\x31\x74\x79\xf2\xfc\x79\x32\x5e\xa3\xde\x94\xca\x16\xe3\x48\x26\x0b\xd4\x4a\x7c\x96\xcb\x11\xa4\x13\xad\x3a\x50\x53\x90\x8e\xdc\xa9\xfa\x09\x6f\x06\x50\xf8\x64\xe2\xe4\x99\x46\x49\x02\xea\x23\xdf\xcc\x4f\xf7\x55\x8f\x1d\x50\xec\xc5\xb9\xff\x25\x2f\xfc\x25\x4f\x11\x18\xe7\x65\x36\xe4\x02\x91\x09\x11\xff\x0f\xad\x9b\x0a\x47\xae\xb0\xa8\xd9\x72\xc4\x5d\xec\xf6\x93\x22\xee\x25\x16\x98\x21\x11\xda\x59\x79\x12\xe9\x40\x19\x46\x48\xb7\x5b\x69\x20\x56\xb2\x02\x07\xbe\x48\x38\xd8\x9a\xfc\xe1\x38\x85\xef\x0d\x58\xa0\xf6\x7b\x62\xde\xc7\x66\xbd\xfe\xc9\x11\x76\x73\x2a\x52\x35\xea\x97\x67\xcf\xe7\xfe\xf7\x8d\x84\xaf\x1e\xb9\xe8\x3e\x74\x12\x33\x21\xf3\x33\x4a\x30\x75\x07\xa7\x11\x4d\xdb\x74\x0e\x80\xa0\x1a\x4c\x6d\x43\xf8\xcc\x5b\x72\x62\x64\x83\xf6\xa0\x80\x42\x38\x64\x84\x03\xd6\xe9\x27\x49\x3d\xe8\xc4\xf2\x48\x90\x17\xbc\xe7\xe4\x2e\xcc\xc5\xf2\xfa\x90\x8a\x54\xb3\x9d\x05\xd0\x22\xc5\x3b\x67\x38\x78\xcb\xd0\x2c\x58\x45\x0f\x3c\xb8\x52\xa3\x49\xb5\x42\x0c\x63\xb3\x42\xde\x9a\xac\x6c\x1e\xd0\x9a\x91\xfd\xf3\x29\x04\x02\x6d\x06\xb3\x70\xc3\xb2\xec\xd7\x46\x68\xc1\xac\xa0\xe6\x41\x47\x46\x51\xe4\x8f\xc8\x82\x10\x3d\x12\x79\x38\x1e\x10\x04\xa8\xdd\x07\xf2\x89\x9b\xef\xe4\xf6\x1a\x8e\xd7\x03\x18\x20\xd8\xd4\x45\xb1\xbc\xd9\xf4\x7d\x9f\xc7\x6e\x54\x25\x02\xa6\x9c\xff\x26\x2f\x7c\x78\xd6\x7e\x42\x31\x47\x8a\x98\x4b\x2e\xed\xc2\xc4\x72\x23\xcf\x99\x36\x22\x96\xd7\x78\x00\xec\x56\x00\xf2\x29\xe7\xbe\xcb\x23\x65\x72\x84\x84\x90\x42\x65\x39\x6c\x43\xd2\xfe\x93\xc7\x0e\xe8\xb1\xf2\x07\xe1\xf3\x66\x8d\x00\xdb\xca\xc1\xce\x8b\xa7\x55\xed\xb6\x48\x7d\x57\xb1\xc8\xcd\xc2\xdb\xa4\x21\x6f\x1c\x65\x9b\x71\x9c\xa2\xa7\x6c\x12\x32\xd2\xbb\x3c\x2d\x20\xf6\xf7\x0f\x46\xc2\x73\x55\x3f\xe8\x3d\xa6\xcc\x84\x1a\x05\xe5\xd7\x75\xd6\xd6\xba\xb7\x9f\xf2\xdd\xb3\x75\x6f\x2f\x36\x78\xdd\xdb\x9f\x8a\x36\x4c\x98\xa3\x4e\xff\xb4\xc6\xce\x31\xfd\x93\xff\xb4\x70\x62\xde\xe4\x62\xd2\x9c\x0d\x51\xee\xeb\x6c\xfa\x42\x94\x33\xc3\xa9\x3a\xff\xca\x26\x41\x4b\x5b\x0e\x08\x06\x2d\x1d\x1f\x06\xee\x29\x3b\xfc\x87\x9b\xd4\x64\x6f\xf6\x98\xee\xbe\xff\x2a\x2f\x7c\xe1\x24\xfd\x63\x13\xce\x60\x97\x4a\x1d\x8a\x06\x72\x60\xb4\x3c\xa9\x7b\x0a\xe5\xc4\xa9\x38\x3b\x5d\x88\xcd\x18\x5c\x62\x0a\x76\x29\xf9\x47\xd9\xf4\x75\x93\xa7\x11\x0a\xab\x76\x5a\xfa\xeb\xa3\xe1\x9d\xe5\x87\xb4\x91\x97\x50\x89\xe9\xad\x66\xc2\x97\xa2\xd6\x80\x8e\xe5\xeb\x9e\x41\xf9\xad\x42\x02\xfe\x89\x11\xf6\x74\xc2\x5f\x3d\x11\x8e\xa7\x15\x8c\xfd\xc5\xb2\x36\xd2\x98\x83\x88\xdd\xdf\x0b\x36\x90\xf0\x33\xc2\x63\x66\xb7\xb7\x4a\x72\x70\x85\x37\x2d\xee\xd9\x94\xd1\xf8\xac\xf0\xb4\xce\xe4\xb2\xd4\x8e\x4e\x88\x8b\x0a\x2b\x4b\x72\x8d\x2f\x82\xbd\x4e\x03\xd6\xc8\x6d\xb4\x55\x94\x4e\x4c\x9f\x01\x17\x7c\x56\xf8\x1f\xd7\x6c\x1c\x1f\xf4\x14\x62\x8b\x5d\x89\x4a\xc9\xc4\x44\xa6\xed\x55\x14\x2c\xc8\xb7\x17\x6c\x61\x95\x17\xbb\xb8\x8d\xa5\x28\x72\xc2\x23\x8d\x13\xc7\x8f\x1f\x3b\x5e\x47\x3c\xcf\x3c\x5e\xe5\xe3\xae\x1f\xfd\xd6\x5b\x8f\xc1\x06\xb3\x18\xb5\x56\xd6\xa2\xac\x8d\xe1\xe9\x45\x8c\x50\xfb\x2e\x94\xcd\xdf\x31\x56\xdf\xe8\x4a\x40\xb9\xd5\xcd\xd9\x68\xed\x8c\x12\x31\xff\x13\x2c\xfc\x28\xb3\x9f\x40\x6a\x19\x59\x82\x01\x8c\xda\x88\x23\x84\xcf\xaa\x10\x4e\x45\x41\xd8\x64\x6c\x5e\xc8\x2f\x60\xb5\xd4\x11\xf6\x3f\xa2\xad\x12\x87\x69\x39\xca\x03\xa7\x8a\x28\x07\xbf\x03\xc6\xe0\xa4\xc1\x40\xf4\x33\x5d\x70\xdd\xb6\x18\x14\x59\xbf\x55\xe0\x2d\x1e\x2d\x59\xfa\x75\x7d\xd1\xc7\x77\x9a\xc1\xb3\x45\x3f\x88\x92\x5c\x00\xe1\x3e\x9a\x25\x97\x62\x08\xe1\x84\xf7\x57\xa3\x2c\x16\xfd\x3c\xe8\xc1\x22\x55\xa9\x6b\x6c\x62\x02\xd3\xed\x64\x49\xbd\xa8\xb5\x12\x2d\xf1\x93\xd8\xae\x0b\x83\xc9\x99\x69\xaa\x14\xeb\x08\x5e\xc0\x0e\xa8\x31\x9c\x1f\xf4\xf8\x05\x5e\x44\xc1\xc2\x83\xb9\x48\x4f\x86\xf5\x38\x4d\xe2\x94\x87\x0b\xec\xc0\x85\x01\x2a\x02\x95\xcb\x4e\x36\x38\xf5\x66\x97\x7e\x0e\x17\xd8\x0b\xb1\x26\xfc\xf7\xa4\x55\xcb\x24\x46\xde\x29\x6b\x00\x7d\x19\xe1\x53\xf9\x21\x34\x5c\x05\xd9\x3e\x6a\x0d\x77\xe6\xec\x11\x6f\xfe\x25\x3c\x89\xad\xc5\x19\x81\x44\xdf\x33\x77\xe9\x22\x2e\xa3\x44\x2e\xa8\x5c\x74\x39\x1e\x03\x92\x78\x05\xa5\xeb\xa4\x2c\x3d\x94\x07\xee\xf0\x64\x68\xf5\x33\xac\xb3\x03\xa1\xb1\x47\x85\x27\xc3\xd5\x23\xf0\x4c\xb7\x16\xbe\xd4\x9f\x52\x93\xe5\x2b\x07\x74\xbb\x4e\x86\x1d\x21\xe4\xa3\x17\xd6\x65\x0b\xe7\x44\xb0\x86\xdc\x27\x80\xfe\x79\x77\x70\x9a\xb7\x00\x3b\x02\x30\xf8\x00\xa9\x4a\xf6\x4b\x9e\xbe\x06\x51\x37\x41\x24\x91\x6e\x94\xe5\xcb\x51\xa2\x74\x1a\x84\x11\xf0\x76\x80\x94\x76\x69\x21\x5c\x51\xb7\xa7\x4a\x6e\x2f\x10\xcb\x00\x25\xc3\x89\x29\x5a\xc3\x21\x21\x30\xd2\x42\x64\xea\x84\x2b\x0f\x70\xfd\x54\x4e\x3b\x42\x43\xf0\x20\xe5\x57\x0a\x3a\xe0\xe6\xe8\x86\xed\x0d\x82\x31\x0c\x19\xef\xad\x2c\x4d\x18\x8a\xed\x71\x6c\x88\x4e\x70\xb6\xd7\x10\x78\x88\x08\x81\x81\x84\xea\x50\xae\x74\x11\x58\x2a\x38\x2c\x66\x8b\xb0\xbb\xd3\x4f\xe9\xde\x24\x6f\x14\xe8\x8b\xc2\x55\x0f\x33\x89\xad\x34\xd3\x8b\xbd\x00\x6c\x41\x4b\xb8\xea\x81\xdc\x48\xe1\xc4\x57\x98\xe6\xb5\x44\x06\x20\xf8\x64\xe2\x92\xc2\x56\x27\x50\x4d\x91\xe9\x97\xe1\x55\x35\x86\x63\xf3\x97\x4e\x5f\x3a\x19\x4c\x53\x3a\x8b\xbc\xf8\x23\x75\xab\x49\xb6\x80\xe3\x3b\xd8\x1a\x89\xb2\x58\x15\xac\xc5\x9e\x6e\xea\xea\xfd\x32\xe4\x99\x6a\x01\x6f\x37\xc7\xad\x9d\x93\xbd\x7d\x5f\x99\xc5\xd4\x82\x7b\x57\x47\x1e\x22\x12\x98\x84\x2b\xcc\x2c\x5f\x8d\xf9\x1a\x81\x2d\xff\xde\xde\xf0\x5f\x6f\xf8\xeb\xba\xb7\x8f\x0e\xc2\xce\x5e\xfd\xfe\xbd\xac\xc5\xd4\x2f\xfe\xb7\x85\xf7\x28\xe6\x63\x3a\xb6\xc4\x08\x1d\x02\x84\xd2\x1d\xdb\x47\xbe\xa6\x77\x24\x75\x71\x82\x60\x2d\xcc\x1a\x5b\x8b\xcb\xc0\x80\x2f\xa9\xb1\xbd\x6d\x9e\xc6\xbc\xed\xff\xad\x17\xfe\x89\x77\x1a\xfe\x86\x91\xa4\x0d\x72\xf3\x5a\xf0\xdb\xba\x29\x5e\xc5\x86\x4d\x77\xe0\x22\xa2\x9a\x21\x4b\xc4\x86\x44\x80\x8e\xa0\x6a\xe9\xa0\x09\xa5\x50\x69\x2f\x91\x81\x93\x97\xe2\x98\x8a\x40\xf4\xe2\x14\x0e\xc8\xa9\xa1\x90\x16\xe6\x3d\xab\x55\x72\x6f\x85\x72\x2d\xe6\xbc\x82\xda\x6e\x0d\x1f\x20\xb6\x3a\x83\xf0\x7b\x35\x76\x33\x5f\x8d\x92\x3e\xcc\xe8\x99\x2c\x13\x99\xff\xc9\x5a\xf8\x93\xb5\x33\xee\x43\x3a\x3a\x28\xe3\x96\xb2\xa9\x48\x75\x86\x58\xf7\x81\x68\x81\x31\xbf\x1d\xb4\xfb\x99\x32\xed\x3a\xe2\x82\x51\x25\x0a\x94\x93\xa7\x45\x9c\xf1\x64\x10\xf4\x44\x9e\xc7\x94\x24\x82\x80\x8a\x54\xa0\x1c\x2d\x39\x99\xf4\x9b\x3c\x82\xc4\x69\xdf\x02\x34\x28\x15\xaf\xc0\xcb\xd3\x20\xef\xc5\xe8\x4d\x88\x0b\x8c\xcf\x80\x55\x0c\x2c\x13\xb3\xa7\x26\xa7\x94\x9b\xae\x1b\x2b\x54\xd3\x4c\x28\x3b\x10\x4f\x11\xb1\x05\xee\xbb\x60\x75\x28\xe4\x4a\xa1\x33\x3b\xb6\x09\xdc\x85\xe8\x22\xcc\xb5\x75\x08\x0d\x19\x78\xa8\xb6\x0f\x63\xcf\xd3\x96\xbd\xb9\xf0\xec\xac\xc6\x72\x37\x22\x06\xe3\x61\x51\x85\x0f\xe0\xc0\x8b\xbe\xf7\xb5\x48\xdf\x15\x03\xe0\x1e\x4f\xcb\xf0\x55\xff\xcb\xab\xe4\xef\xbc\x28\xda\xfc\x74\xc4\xbb\x22\x3d\xa3\xbc\x97\xfe\xc7\xbd\xf0\x6c\xc5\x73\xb8\x49\xe6\x84\xd3\x27\x7a\x9c\x8e\xfe\x6d\x78\xcb\xca\x22\x41\x21\xbd\xa8\x61\x62\xd4\x72\x15\xac\xcb\x6e\x26\xd4\x24\x55\xa8\x7f\xff\x36\xb0\xd1\xdc\x76\x84\x87\xd4\x5f\x28\xee\x52\xd9\x2a\xe4\x25\x62\x8e\xe4\xb2\x21\x4d\xf6\x93\x23\x95\x60\x59\x14\x97\x4d\xa9\x05\xfe\x9b\x46\xc2\xa7\xb9\x8f\x60\x3a\x0b\xc3\xef\x85\x3b\x90\x45\xca\xe4\x78\xca\x9d\x3e\xfe\x72\x8d\xcd\x90\x2d\xf3\x5c\x78\xe7\xbc\xca\x5e\xd3\xb1\xe0\x70\x64\x80\x62\x8d\x99\x8e\xac\x83\x4e\xa1\xce\xd4\xcd\x50\xc8\xe3\xb9\xf0\x4e\xa0\xc8\x70\x4a\x04\xfb\xd0\xb5\x96\xf8\x2c\xb6\x27\xe1\xab\x3c\x91\x45\x9e\x97\x7f\xc8\x32\x55\x89\xf0\xcb\xf5\x34\x52\xae\x05\x59\xe2\xac\x48\x4a\xdd\x06\x02\x98\x6b\x2d\xf1\xf3\xfb\xd9\xbf\xab\x44\x5d\x85\xbb\x08\xa0\x1c\x7c\x74\x7f\xf8\x14\xeb\xdf\xfa\x1e\xa8\x6c\x1e\xca\x99\x5e\x0d\x6a\xf0\xee\x5d\x50\x83\x1d\x7b\xf2\xe6\x15\xa8\xc1\xbd\xe1\x13\xce\x97\x46\xdd\xb6\x15\xd5\xd9\x2d\xdb\x88\x50\xa2\xb9\xdc\xf5\x0f\xee\x00\xb4\xe0\x57\xed\xb8\x89\x8f\xed\x10\xb4\xe0\x25\x5e\x35\x6a\xc1\x63\xd9\xb9\xab\xde\xdc\xd6\x1e\xcf\xc3\x7e\xb3\x8a\xa3\xd5\x52\x0e\x65\x90\x82\x77\x1c\x60\x63\x96\x08\x02\x30\x99\x3a\xa7\x12\x68\x9b\x81\x53\xf9\xcb\xfd\xe1\xb1\xf2\x43\xd7\xbc\x6a\xff\xba\x39\x99\xfe\x4f\xed\xaa\x9d\x1d\xab\x9d\x9e\x52\x3b\x4b\x61\x38\xad\xb0\x54\x2c\xbd\x4f\x43\x55\xc1\x9a\x7f\x82\xdd\xca\x8e\x6e\xa8\x88\x36\x94\x82\x5d\x95\xb4\x03\x95\xf4\x29\x5b\x25\xfd\xf4\x0e\x55\xd2\xb7\x3f\x4e\x1a\xc9\x00\xa9\x74\xb6\x56\x47\x53\xfe\xa4\x56\x47\x20\x53\x25\x08\x95\xb2\x2e\xa9\x22\xec\x63\xbf\xe4\xb1\xb9\x47\x38\xcd\xe4\x94\x10\x89\xff\x50\x28\x2a\x7f\xb0\x5d\x0e\x55\x59\x24\x01\xdd\x05\x09\x09\xc4\xb1\xd2\xc2\x1d\x52\x85\x17\xa8\xf7\x7a\x99\xe8\xf1\xac\x18\x34\xd9\x5f\x8f\xb2\x27\x55\xec\xf7\xe8\x02\x99\xc9\xc4\x83\x18\x50\xe9\x7f\x7a\x34\x3c\x67\xfe\xa9\x10\x9c\x81\x94\xa0\x87\x8f\x79\x3b\x88\x12\x91\x2e\x61\x2a\xb2\xb0\xd1\xbe\xa5\x4e\x22\x2f\x89\x94\x43\x47\xe9\xfe\xd5\x08\x2b\xd8\x01\x8c\xb7\xbc\x10\xf5\xfc\xa5\x4d\xe0\x94\x54\xeb\xa6\xd4\xdb\xa6\x45\xe1\xc4\xb0\xbb\x9f\x4e\xb0\xf8\x2a\x1a\xbb\x0a\xa1\x9a\xcb\x1e\x66\x07\xdb\x62\x2d\x5d\x8b\xb2\xf6\xe4\xcc\xb4\xbf\xc2\x4e\x6c\x7d\xdf\x31\xef\x5b\x35\x1f\xa9\xae\xd9\x2a\x7c\xa8\xee\x15\xb6\x17\xfd\xa4\x7e\xc4\x8e\x6c\x93\xce\xc0\xaa\xb1\x5e\x5d\x23\x25\x83\x95\x2b\xfb\x4e\x8f\xfd\xb3\xdc\xe1\xcc\x9b\x17\x2b\x3c\xf5\x5f\xc0\x9e\xbe\xdd\x73\x9f\xfd\x9d\xd5\x8e\x3b\x36\x6a\xc7\xd0\x47\x43\x8d\x7a\xe9\x28\x3b\xbc\x31\xe3\xed\xd9\x39\x88\x34\x98\x23\xee\x16\x75\x23\xfc\xcc\x48\xf8\xec\xea\x9f\x9c\x9d\x59\x51\xbe\xe0\xa5\x0e\x90\x87\xe8\x2d\xe5\x40\x40\x9b\x99\xf3\xb2\x7b\x25\xfe\x62\x8d\x2d\xb3\xd1\xac\x9f\x70\x20\x70\xeb\x27\xdc\x04\xd7\xa8\xc2\x35\x31\x70\x3b\x6e\x41\xf0\x23\xd8\x65\xa9\x7d\xda\x5d\x41\x96\x40\x45\x03\x4a\xb4\xc2\xce\x7d\xea\x6f\x3d\xb6\x37\x8b\xd2\x25\x9e\xfb\x5f\xf1\xc2\xf7\x79\xf8\xb7\xbe\xec\x2a\xf3\x01\x3d\x16\x9d\xa0\x43\xc1\xc0\x14\x6e\x01\x69\xc6\x70\x9c\x40\x8b\xb4\xa0\xd4\x48\x8d\x9f\xa0\xde\x47\x4b\x95\x5c\x94\xc9\xc0\xfc\x0a\xe5\x1a\x00\x81\x1c\x52\xcc\x75\x1a\x0c\x04\x48\x2b\xf7\x17\x28\x92\x0b\xfd\xbc\x98\xed\xa7\x93\xf9\x35\xa0\xa9\x97\xe6\x77\xfa\x34\x20\xaa\xb3\x8f\x8c\xda\x6e\xa1\xa6\x9b\xdc\x08\x11\x62\x52\x78\xc8\xe2\xd8\xe3\x2d\xff\xe5\xa3\xe1\x99\xd2\x33\xdc\xed\x31\x34\xa8\x57\x58\xc8\x84\x05\x08\x5e\x29\x61\xd2\x31\xf0\xa8\xd9\xfe\xe0\x08\xfb\x6a\x8d\x1d\x88\xfa\xed\x98\xa7\x2d\x9e\xfb\x5f\xaa\x85\xbf\x54\x9b\x54\xff\x74\x8f\x30\x60\xa1\x26\x4c\x5c\x00\xaf\xd0\xa1\x04\xea\x34\x41\xf9\xf9\x86\xb2\x46\x8f\x2d\x36\x49\x7f\x9d\x07\x51\xde\x0c\x54\x3d\x8d\x68\x0d\xa6\xbc\xdc\x6c\xa1\xd2\xef\x57\x79\x86\x30\xe0\x54\x21\xbe\xb9\x16\xe5\x70\x3a\x84\x7c\x7f\x87\xa8\xde\x0a\xa3\x89\x4c\x5f\x28\x78\x28\x01\xde\x88\xe9\x4e\x90\x0a\xeb\x57\xd9\x00\x95\x3c\x5a\x77\xbe\x24\x51\xa7\x24\x4e\x3a\x9c\xea\x1f\xa9\x1a\x0b\x05\xc5\x6c\x85\x9b\x44\x26\xdc\xc6\xf6\x40\x27\xfc\x66\xf8\x2d\xa8\x27\x68\x95\x89\x5e\xf4\x50\x9f\x07\x8b\x3c\xca\xc0\x64\xba\xc2\xdd\xf8\xb7\x3f\x38\x50\x69\x34\x9b\x52\xd8\x29\x68\x9e\x86\x1b\xc2\x47\x0e\x84\x2f\xf6\x4c\xe6\x5f\x94\x24\x6e\xd0\x9a\xc5\x80\xa9\xbe\x46\x28\x4a\x35\xe1\xa5\x42\xf5\xe1\xd5\x62\xfb\x3e\x89\x4e\x78\xa9\xea\xdd\x60\xfc\x38\x0d\x56\x8f\x34\x8f\xdc\xf1\xd4\xdd\x0b\xc7\xa3\x74\xe1\x48\xd4\x85\xa3\x15\x06\xe7\xb7\x98\x31\x5b\x12\x6f\x65\x47\xb7\xc1\x24\x54\x2a\x69\xf7\xb2\xb1\x6b\xff\xb0\xed\x1f\xcf\xd9\xfa\xc2\x71\xbb\x7f\x42\xb1\x81\x57\x68\xa7\x92\xed\x23\xb0\x2c\x25\xec\x27\xf7\x56\xea\xb8\x67\xc6\xc5\x2c\xef\x09\x07\x4b\xe5\xf5\x7b\xc3\xbf\xad\x39\x58\x2a\x76\x54\x12\x50\xf8\xf6\xfa\x49\xe4\xec\x45\x94\xc4\x47\x30\x46\x4b\x31\x08\xa3\xc8\xe3\x42\x64\x83\x66\xf0\x4c\xfa\xb7\x46\x55\x69\x0b\x24\x7e\xdb\x04\x5c\xa5\xe2\x2b\xf5\x7a\x05\xe4\x0a\x63\x26\xc5\xe9\x64\x40\xbd\x72\xd5\x67\x33\x98\x17\xb8\x1d\x61\x78\x86\x93\x6c\x07\x28\xdc\xaa\xd9\x75\x42\x8a\x89\xd2\xe0\x4c\xb7\x57\x0c\x4e\xc7\x19\x3a\x6c\x01\x07\x2a\x2e\x34\xaa\x18\x05\xaf\x26\xc2\xe0\x9b\xf7\x04\x61\x98\x2d\xc5\x05\x39\xf3\x14\xec\x0c\x2f\x95\x66\x32\xf8\x8c\x65\x7c\xdd\x63\x66\xe0\x1c\xf5\xfe\xb5\x1a\x7b\x06\xdb\x9f\x71\x6c\xbe\x7f\x6b\x78\x68\x4a\x74\xbb\x71\x11\x2c\x47\xf9\xb2\xde\x75\x0c\x9e\x9c\x7a\xd3\xd9\xe9\x5e\x5d\x63\x07\x34\x33\x89\xff\x0f\x5e\xf8\x17\x1e\x71\xf9\x18\xbe\x12\x02\x52\xe9\xe7\x85\x13\x00\x2d\x88\x01\x10\x07\xeb\x50\xb3\x79\x08\xcf\x8b\x87\x9a\x87\x14\xc4\x4c\x12\xab\x7d\x5e\x85\x9c\xe9\x42\x95\x7f\x59\xfe\x58\x96\x0e\x4c\x53\x5c\x8b\x73\xa4\x60\xb5\xe2\x7a\xad\xa2\xa0\x00\xd5\x96\xe1\x52\x0c\xdb\xe0\xa2\x5d\x29\x49\x27\x02\x4d\xa5\x65\x7a\xa2\x71\x66\x0d\xb6\xff\x8d\xe1\x4d\xb3\xa6\xbc\xcb\xb3\xe7\xed\x57\x7f\xf1\xc6\x4a\xa6\x1e\xa0\xc9\x73\x16\xcf\xdb\x6f\x0c\xbf\xd3\x01\x22\xfa\xfa\x62\xe3\xfb\xbd\x83\x8f\x0a\xe5\xd6\x35\x92\x8f\xf5\xfe\x71\x90\x8f\x7d\x9d\xd0\xf5\x7d\xbb\x8d\x13\x93\x5d\x2f\x4c\xcc\x0e\x68\x0d\x1f\x2d\xbe\xc0\x5d\xa2\xb6\xeb\x23\x6a\xfb\x27\xca\xb3\x78\xed\xfc\x73\x5f\x1f\xcc\x8c\x8f\x29\xfd\xe9\x3b\x6f\x64\x77\x6c\x91\xf8\xa7\x80\xbf\x21\x64\x60\x8a\x72\xd7\x61\x75\xfa\x7f\x74\x43\x78\x7e\xe3\x9f\x87\xd8\xf3\x9d\x1f\x11\x5f\x4f\xf1\x10\x40\xf8\x41\xb3\xcc\x3f\xb3\x7b\x81\xdd\x4d\xb9\x7d\xdc\xae\x94\x5f\xb4\xaf\x94\x9f\xdd\x31\x14\xc1\x1b\xbd\x05\x55\x9a\x9d\x4c\xf9\xb8\x83\x13\xbc\xa1\x46\xe0\x04\xaf\xae\xb1\x7b\x37\x3c\x2b\x5c\x9b\x62\x00\xc0\x82\x9f\xf0\x16\x64\xb9\x0b\x1b\x66\xf5\xd8\x38\x06\x8b\x7c\x39\x5a\x8d\x45\x86\x6a\x21\x24\xf9\x68\x28\xfd\x10\x3e\xe6\xd9\xfe\x2f\xad\xe9\x2c\xd8\xbf\xf3\xd8\x85\x47\x6a\x60\x10\xe7\xe0\x3d\x5e\x39\xad\xd6\x46\x3a\x20\x5b\xe2\x3f\x82\x51\xb8\xea\xbd\xd8\xdb\xda\x0a\xf1\x7c\xff\xb9\xda\xed\x69\x0f\x87\xb1\xd2\x6e\x40\x25\x31\x3c\x3e\x95\x1e\xd1\x9f\x72\x2f\x5b\x94\xe2\x0b\xb0\xdf\x47\x9a\x56\x6e\xa1\xff\x86\x1b\xc3\xef\x1b\xb1\x1e\x98\xcc\xa0\xdc\x89\xe2\x1c\xce\xe6\x2d\x30\xd0\xb2\x05\x30\x73\x2a\x9b\x28\x0a\x30\xa6\x2d\x35\xae\x0b\x2b\x89\x27\x73\xf3\x1b\xd5\x6b\x84\xec\xad\x5f\x44\xa8\xee\x36\x50\xc2\x0b\x27\x6d\x78\x35\x8e\x02\x0a\x7e\xc6\xd4\x5c\x2b\x65\xc8\x7a\x6d\x71\x30\x94\x3f\x1c\x17\x01\xbf\x02\x61\x99\x71\xda\x0c\x02\xab\xc7\x98\xbe\x6a\x5d\x70\xa9\xb1\x70\x7e\x88\x56\x79\xc0\x3b\x1d\xca\x28\x81\x23\x8e\xd5\xcc\xd3\x43\x86\xe5\xdb\xe4\x1f\x9d\x68\x15\x57\x25\x0c\xbb\x1b\xe0\xad\xf1\x5f\xec\x26\xe0\x66\x08\xe7\x94\x54\x04\x89\x48\x97\x10\xa3\x10\x44\x41\x95\x7d\xf4\x68\x73\xdd\xdb\x27\x67\x64\x96\x77\x9c\x5d\xff\x0b\xfb\x77\x37\xad\x1d\x6c\x5a\xcb\xd6\x9e\xf5\xdc\x9d\x6e\x59\xdf\xb8\x09\x78\x0e\xfb\x63\x8f\xa9\x09\xf4\x7f\xc7\x63\xcd\x0d\x35\xe4\xf0\x7a\x9d\xe5\x9d\xf0\xbd\x1e\xfd\xb5\xe9\xa2\x53\x6a\xf1\xba\xd6\x1d\xee\x30\x56\x35\x34\x61\x04\x7a\x4e\x06\xa5\x49\x13\x57\x0f\x44\x7c\x98\xe0\xa8\xe3\xcc\x9b\xec\x55\x1e\xdb\x9f\xd3\x3a\xf5\xff\x63\x78\x97\x5e\xb3\x18\x77\x6a\xe9\x18\x3a\x23\x1a\x86\x68\x8e\x31\xb0\x56\xc2\xad\x6d\x5e\x38\xca\x0e\x6f\x7b\xd8\xa8\xd2\xdd\x13\xf1\x0e\x4f\xc4\x57\xbd\xde\xd6\x1b\xda\x05\xff\x5e\xbd\xa1\x6d\xa8\xf6\x4c\x54\x8f\xd1\x7d\xee\xf6\x85\x53\xc7\xd8\xdb\x46\x59\x73\xcb\x8c\xe0\x8b\xa2\xcd\x75\x0e\xb7\xff\x27\x23\xe1\x3d\x15\xcf\x1d\xdc\x00\xad\xeb\x90\x1a\x04\x61\x5c\x35\x7d\x93\x7c\x83\x2c\x02\xee\xb5\xea\x3b\x46\xd8\xab\x46\xd8\x1e\x08\x9f\xf0\x5f\x34\xa2\xee\xa6\xff\xa3\x76\x21\xba\x12\x77\xfb\x5d\x95\xa3\x29\x3a\x8a\xac\x55\x19\x1a\xd1\xac\xa8\xed\x21\x60\xc5\xb4\x92\x88\x29\x6d\xa2\xaf\x19\x9b\x90\xf5\x75\xb2\xec\x2e\xc0\xe4\x17\x95\x55\x0d\x72\x42\xb6\x4e\xfd\x15\xe2\x59\xa6\x79\xdc\xe6\xc6\x5a\x42\x05\xb7\x78\x1d\xf6\xee\x62\x2d\x46\x22\x10\xda\x9a\x9d\xd4\x76\xc4\x9a\x71\xda\xaf\xeb\xcf\x97\x81\xe6\x28\xea\x8a\x74\xc9\xa0\x49\x00\x57\x93\xb0\xb7\x7a\xa4\xf2\xee\x94\x50\x10\xd2\x38\xb1\x92\x72\x8c\x91\xc8\x8c\x9a\x1a\x2e\x41\xce\x70\xd5\xa1\x3e\x22\xc9\x41\x86\x86\x75\xdd\x7f\xe3\x01\x07\xc0\x24\xea\xf5\x20\x05\xfa\x34\xef\x25\x62\xd0\xe5\x69\xe1\x7f\x75\x7f\xf8\x0c\xf3\x4f\xa2\x35\xc9\x83\x36\x6f\x25\x91\x3c\x36\xad\xaa\x3d\x08\xfb\x3d\x23\x08\xea\x63\x96\x03\x56\xc3\x1c\x2f\x4a\x22\xf0\xa9\x5d\xd7\xf0\xee\xcd\xfa\x71\x3c\xa4\x74\xac\x43\xca\xfd\x3b\x3d\xa4\xfc\xeb\xd2\x21\xc5\x3a\xa2\xe4\x74\xb3\x5d\xd9\x24\x78\x68\x78\xbd\xc1\xe5\xf5\xf6\xb9\xed\xde\x56\xe5\x73\xf3\x71\x93\x09\x7d\x6f\xe4\x9b\x84\xdf\x55\x54\x8b\x57\xc3\xc3\x17\x04\x1c\x42\x5a\xc8\x44\x2c\x16\xe9\xdc\xec\xe2\x2e\x59\x15\x5e\xf5\xe6\xb7\xde\xd1\x8e\xf8\x13\x7a\x47\x93\x55\xeb\xcd\xcb\x14\x54\x8e\x94\xff\xef\xdf\xca\xbe\x71\x03\xe4\x6f\x88\x96\xfa\x91\x6f\x0d\x6f\xa3\xbf\x2d\xec\x24\x60\xef\x5b\xe6\x80\x5c\x8d\xa8\xa7\x90\x14\xa9\x13\x9c\x93\x78\x85\x37\xd7\xbd\xfd\x05\xef\xf6\xe4\x8a\x77\xf4\xd2\x1f\x3e\x85\xfd\x71\x8d\xfd\x8b\xa8\x25\x75\xda\x69\x1e\xb5\x93\x38\xe5\x73\x40\xbb\x93\xfb\xbf\x52\x83\xad\xea\xc4\xad\xe1\x47\x6a\x73\x9a\x2d\x10\x66\x45\x99\x14\x63\xc0\xac\x97\x6f\x83\xaf\x0b\x34\x23\x69\x17\xf0\x55\xce\xc7\x5d\xcb\xe6\x2f\x9b\x48\x51\xa6\x94\x3c\x08\x96\xeb\x00\xab\xb7\x01\x5d\x95\x67\x20\x53\xd9\x4b\x1a\x73\x33\x2e\xee\xa4\xa5\x4e\x24\xce\x01\x78\x0c\xe5\xf7\xa4\xdf\x61\x0b\x89\x82\x7b\xc4\x22\x3a\x15\x72\x22\x4f\x19\x93\x3b\x66\xc6\x49\xbc\x32\x4d\x06\x1f\xa5\xb4\x56\xc7\x09\x7f\xa7\x88\xbb\x1a\xff\x15\x2e\x6f\xf1\x2a\xc2\xf5\x06\x79\x21\x7a\x3d\x83\x74\xcc\x0b\xc3\x91\x46\xd5\x65\x3c\xef\x77\x15\xf6\x91\xbb\xed\x64\xec\x86\xc5\xa8\xb5\x22\x3a\x9d\xf3\xf2\xf8\xe0\x2f\xaa\x83\xc0\x05\x77\x70\xcd\xbe\x96\x71\x1c\x00\x1a\x98\x6e\x04\x20\xa0\xd8\x48\x39\x96\x1d\x44\x24\x77\x2c\xce\x27\x9c\x3a\x7f\x6d\x84\x1d\x24\x2c\x59\x08\xb9\xfc\x59\x7d\xfa\x78\xff\x48\x69\x4a\x69\xa1\x99\xda\xf3\x3e\x24\x08\x77\xfa\x49\x32\x08\xe4\x92\xca\xe5\xe9\x01\x76\x6d\x35\x99\x06\x73\x22\xeb\x23\x95\x76\x33\x08\xe6\xc8\x30\x5e\x08\xb9\x75\xdb\x98\x3b\xb8\x7f\x23\xae\x12\xec\x5d\x03\xe0\x5b\xca\xe3\xa5\x34\x4a\xf2\xa1\x9f\x93\x04\x6a\xc3\x1d\x89\xb8\xb7\x7a\x51\x16\x25\x09\x4f\xe2\xbc\x0b\xd0\x11\x80\xd4\x04\xe5\x90\x10\x50\xcc\xb4\xdd\x8a\x23\x76\x1b\xec\x02\x20\x6e\xae\x1b\x17\x78\xe0\x39\x02\xf5\x94\x1a\x81\xdf\x6c\xdc\x48\x1a\x89\x6b\x76\x21\xad\x89\x6c\x25\x11\x51\x1b\x41\x77\x33\x91\x24\x3c\xcb\x27\x1e\x14\x8b\x79\x23\xeb\xa7\x8d\x42\x34\xcc\xb4\x4d\x38\x53\xfa\xd1\x3d\xec\xa6\x6e\x94\xf6\xa3\x64\x8e\x27\xe0\x67\xf7\xdf\xb3\x27\x7c\xf3\x1e\xf7\x59\x40\xc5\x6a\x6e\x20\x45\x43\x2c\xda\x2a\xdd\x52\xf6\x16\x7a\x46\x9f\xe4\xc0\xf2\xbf\xca\x83\x05\xb7\xa8\x85\xa0\x9f\x4a\x51\x27\x90\xf3\x81\xe8\x43\x5c\x61\x8b\x67\x60\xc9\x59\x53\x5e\x3f\xf9\xb0\x2d\x00\x71\x0a\x88\xd4\x29\xd7\x3b\xc3\xcf\xeb\xf6\xba\xee\xc5\xad\x15\xd5\x0c\x3a\x32\x82\xd6\x20\xb9\x86\xf9\x06\xce\x23\xc5\xd2\x67\x32\x44\xd1\x73\xdb\x0e\x94\x3a\x6b\x06\x58\x5b\x01\x28\x78\xf2\xd7\x3e\xe5\x6e\x12\x5e\x7c\xac\x90\xb3\x64\xa5\x40\xd8\x8f\x15\x5a\xa3\x80\x76\xd2\x81\x3a\x32\xa8\x01\x69\x06\x80\xf9\x0f\x6e\x4b\x81\x6d\x8e\x9c\xaf\x41\x99\x01\x96\x02\x51\x5e\xa7\x6d\xf2\x26\xcb\x89\x44\x92\xbd\x42\x63\x17\x28\xa4\x81\x64\xd0\x0c\x82\x73\x62\x8d\xaf\xf2\xac\x0e\x80\x22\xb2\x98\x9c\x0f\x0d\xfc\x5d\xb2\x4f\x0b\x52\xc7\x62\x71\x10\xa1\xcc\x33\xe3\xae\xd3\xe1\x15\x22\x69\x07\x0b\x26\x2f\x41\xe1\x03\x2f\x04\x93\x33\xd3\x8f\xae\x68\x3e\xc9\x8c\x5d\x63\x20\xfa\x59\x43\xac\xa5\x8d\x9e\x68\x37\xd4\x20\x3a\xbe\xaf\x37\xec\x61\xfb\x48\x21\xfb\xaf\xdc\x13\xfe\xfd\xe8\x1c\xfe\xc3\x22\xa3\xd5\x79\xf5\xa4\x53\x4d\x1b\xf4\xc1\x16\xa3\xbd\xe1\xd0\x0d\xa0\x64\x85\xab\xf1\x9d\xd1\xc9\x55\x05\xbc\x50\xe9\x13\xf2\x32\x43\x47\x76\x6b\x2c\xe9\x8a\xe5\x56\xb9\xd1\x56\x82\xc8\xf9\x7a\x33\x19\x8b\x9b\xbc\x89\x5e\xed\x24\x5a\x0a\x96\x04\xa7\xa3\x23\x2e\x01\xaa\x77\xbc\x5e\xd5\x29\x8a\xc3\x05\x92\x09\xa9\xf1\x68\x2f\xc4\xf6\x95\x98\x09\x41\xc8\xee\x91\xda\xe6\x72\x0e\xa7\x55\xb9\x03\x4a\xc5\xbd\x04\x7b\x50\x9c\x05\x6a\xee\x20\x77\x3f\x8b\x5a\x1c\xb5\xb7\x05\x34\xd5\x0c\x68\xcc\x31\xd1\x5e\xb6\x06\x9a\x80\xdb\x19\xc4\xb6\xeb\x8d\x1b\xaf\x60\xa4\xe5\xee\x11\x8b\x75\x67\x3f\x84\x2f\xf4\x39\x7b\xb2\xea\x08\x41\x5b\x69\x21\x44\x15\x7f\x24\x94\x8e\x5b\x29\xc4\xa3\xa3\x72\xa5\xe6\xc9\x86\x29\xae\x48\xe0\x1d\xc5\x2b\x29\x31\x4c\xde\x69\x81\x3c\x58\xb7\x45\x0b\x6c\xc1\x9a\xf0\x2d\x5d\xb2\x5f\x1d\x65\xdf\x50\x14\x09\x35\x7a\x52\x4e\xee\x59\xda\xef\xfc\xcf\x8e\xaa\x1d\xf3\xe7\x46\x37\x78\x47\x99\x03\x8a\x21\x32\x33\xd9\x89\x02\xe1\x5d\x72\xb3\x85\x9a\x53\xda\x18\xc5\xa9\x0c\xd3\x8c\x8c\x57\x5c\x84\x51\x8b\x6e\xd0\x06\x14\x49\x25\x60\x54\x57\x5e\x07\xf4\x92\x3c\xe0\x49\xbc\xa4\x30\x1d\x16\x01\xa7\x41\x74\x23\x45\xbc\x8f\xd2\xd7\x26\xb5\x6d\x1d\x66\x90\xa6\x98\x7e\xae\x03\x98\x92\xa1\xcf\x58\xea\x47\x59\x94\x16\x9c\xe7\xc4\x63\x0a\xf0\x87\xf1\xc3\x3c\xcb\xc7\x75\x60\xc1\xb2\x48\x01\xc2\x64\xb8\x33\xd6\xa6\x00\x32\x28\xd2\x43\xc5\x26\x4d\xab\x1a\x0c\xd9\x99\x87\x79\x26\x4c\x29\x8b\xbc\x25\xba\x7c\xa8\xbb\x54\x4a\x05\xf9\x45\x5c\xe8\xa1\x22\x09\xd5\x15\x80\x90\x36\x30\x49\x3f\x4a\x0d\x1e\x23\x75\x49\x2a\x0c\xc5\xa6\x87\x80\x82\x29\x02\x63\x2c\xf3\x60\x7e\xfe\xbc\x3b\x39\x24\xc8\xee\x79\xf0\x67\xf6\xb1\x9b\x8c\x26\xbd\x20\xda\xdc\xff\x81\x7d\xe1\x77\xef\x9b\x72\x9e\x95\x78\xba\x67\x44\x3b\xb0\x0e\x74\x98\x55\x92\x11\x44\xcf\xb4\x36\x09\x2d\x5c\x14\xe9\x74\xda\xe6\x57\x78\x7b\x21\x18\xa3\x80\x09\xc0\x70\x5c\x50\x8f\x9b\x8c\x39\x6f\x95\xce\x69\x4a\x99\x1a\x9b\x90\xe2\x24\xd0\x67\xde\x8c\xe3\xf9\x6b\x91\xf3\x34\x68\xca\x76\x36\xed\xa6\x39\xe7\x47\xf5\x71\x1b\x34\x5b\x33\x38\x13\xb5\x96\x4b\x9d\x91\xd5\x2d\x8b\xae\x48\xc4\x92\x40\xd8\x5f\x40\xfc\x27\xe4\x5f\xb6\xb0\x51\x4b\x71\x23\x50\xcb\x8d\x10\x4b\x2c\xd5\x69\xd7\x20\x8b\x40\xd5\x7c\x58\x56\x30\x36\xdc\xea\x46\x70\x64\xbc\x6e\x31\xe5\x92\xb1\x1b\xae\xf5\xe4\x1e\x82\x7b\x99\xbb\x83\x3e\x28\x16\xad\x5d\xb1\x01\xf5\xa0\xa5\x6c\x7b\xe3\x08\xc2\xc5\x37\x19\x32\x38\xc1\xc0\x78\x50\xd9\xb0\x56\xf1\x22\x14\xe7\x66\x56\xeb\x15\x13\xa1\x2e\x4a\x26\x9a\x48\xca\xf3\x02\xbe\x68\x9d\x87\x17\xf4\x9b\xc4\x66\x13\xc1\x3d\x89\x3f\xd4\x8f\x00\x78\xea\xc8\xe1\xe7\x1f\x6f\x32\xf6\x88\x2d\x13\x6a\x73\x59\xd3\xd3\x81\xc5\x9a\xb6\xae\x68\x73\xcd\xe5\x10\xb5\xdb\x26\x0f\xab\xd3\x87\x75\xa5\x3c\x0f\xa5\xbd\x95\xae\xf2\x79\x10\x41\x11\x64\x8f\x44\x6f\xa4\x54\x37\xda\xb0\x65\xb8\x3f\xd4\x51\x63\x25\xee\xe5\x8e\x8d\x8f\x8a\x77\xa2\x8d\xde\x33\xc2\x0e\x5a\xe3\xe7\xbf\x49\xdf\xae\x5e\x54\xba\x5d\x75\xc9\xd2\x3b\x7c\xcb\xaa\xba\x4f\xc9\xcb\x54\x54\xc0\xbd\x06\xfd\x8a\x00\x18\x05\xe2\x14\xb5\x80\x5b\xa2\xf4\xbd\xc2\x84\x91\xd7\xf1\x82\x47\xed\x01\xe1\xf7\x2b\x35\x6c\xe6\x13\xed\xa3\xf8\x35\xc8\xdf\x58\xe5\x1a\x68\xa2\xf1\xa3\x69\x04\x72\x3c\x78\x5a\x30\x24\x31\xe3\xf5\x00\x8e\x3e\xfa\x16\x2c\xcf\x1f\x41\xc2\x3b\xa0\x9b\xdb\x10\xff\x6d\xea\xee\x46\x57\xec\xeb\xd7\x63\x78\x67\x7a\x7b\x8d\xed\x57\x07\x52\xff\x75\x35\xf6\x8c\xeb\xc9\x55\x90\x27\x7e\x75\x34\x0f\x3f\xe5\x4d\xd2\x1d\xe0\xa1\x3e\xcf\x06\xc0\xcc\xa7\xe6\xd2\x20\x87\x02\x1d\xbb\xbe\xb2\xb4\x30\x1c\xf2\x22\x10\x6f\x27\x03\xe7\x46\x94\xf3\x22\xb7\x77\x38\x29\x72\x03\xd1\xbf\xe6\x31\x92\xed\x58\x8d\xf9\xda\x04\x31\x86\x34\xe4\xc1\xb1\x41\xfe\xb1\x09\xbc\xf3\x4c\x3c\x09\xfe\xab\x8f\xe8\x39\xfb\x5d\x8f\x69\xfb\x90\xff\x19\x6f\x1b\x99\x34\x33\xa2\x3d\x4f\x1f\x80\xf5\xee\xad\xde\x69\x6d\x91\xd2\x57\x34\x9d\x52\x69\x85\x18\x82\xa8\xd0\x09\x08\x4e\xa0\x8f\xfa\xed\x99\xfd\xc3\x0d\x4e\x5a\xa2\xc5\x60\x3b\xc3\xb3\x1c\x70\x8c\x0a\x27\x84\xfc\x57\xbe\x9e\xb8\x6c\xdf\x71\x90\xfd\x95\x43\x54\xf9\xc7\xdb\x99\x3f\xcd\x48\xb9\xcb\x51\xb9\x33\x8e\xca\x5d\x1e\xe1\x5d\x1e\xe1\x5d\x1e\xe1\x5d\x1e\xe1\x4d\x78\x84\x5f\x5c\x63\x4f\xb5\xb1\x6f\x0c\x9d\x57\x25\x27\x93\xff\xeb\x5e\x78\xbb\xf3\x44\x7b\x7b\x86\x02\x17\x87\x28\x9a\x9c\xad\xe1\x95\x1e\x7b\xb9\xc7\x6e\x90\x3b\xe5\x29\x64\x31\xcb\xfc\xfe\x36\xd8\xf9\xcf\x5b\x1f\x90\x93\xec\xe9\xf6\x33\x97\x2d\x62\x38\x90\x12\x76\x42\x11\xb5\x1b\xc4\x9d\x96\x35\xd9\x9f\x1f\x74\x58\xe4\x29\xd4\x86\x82\x37\x0d\x73\xc8\x27\x0e\x7e\xdd\x32\x87\xbc\x86\xed\x52\x70\xec\x52\x70\xec\x52\x70\x3c\x8a\x14\x1c\x7f\xe9\x50\x70\x7c\xd1\x0b\x3f\xe1\x5d\x2f\x09\xc7\xa1\x5b\x0e\x6d\x48\xbe\xa1\xe3\x8f\x8d\xbd\x44\x2d\xea\x66\x70\xe8\x96\x89\x8e\x10\x87\xca\x99\x36\x79\x7f\x51\x4f\xcb\x21\x78\x01\x02\xa2\xb6\x5b\xec\x26\x9d\xfe\x3a\xa5\x23\x7a\x25\x73\x58\x4a\xca\x38\xd5\x55\x10\xd5\xfe\x6f\x1d\x08\x67\x2a\x9e\x23\x4e\xb1\x71\x0d\xa1\xd3\x47\x29\x0c\x91\x91\xca\x92\xab\xab\xc7\x33\xa9\xeb\xc1\x02\x88\xf9\x6b\xeb\x1e\x44\xa4\x38\xaa\xfa\x7f\xef\x63\xef\x35\x04\x8a\xdf\xe5\xb1\xa9\x8d\xa3\x46\xb6\xd1\x6e\xda\x22\x2f\x1b\x26\xc5\x4e\x8c\x6c\xb9\xa9\x3a\xa6\x13\x86\x0c\x26\x71\x1a\x68\x61\xe3\xea\x52\x00\xc3\xb1\x83\x2f\x9c\x8a\xdd\xf8\xd3\xdd\xb8\xb1\xc7\x31\x6e\xec\x5e\x2b\x6e\xec\xee\x1d\xc6\x8d\xc9\xb3\x28\x46\x87\xbd\x90\x4d\xee\x6c\xc1\xe9\x78\xb1\x8a\x03\xe2\x10\xfa\x37\xb9\xb1\x08\x54\x9d\xb7\xaf\x7a\xdd\xad\xc3\xb7\xee\xf1\xcf\x99\xf0\xad\xcd\x62\x91\x2b\x9a\x57\x8e\xeb\x7a\xcb\x3e\x76\xfc\xba\x54\xca\xf5\xa2\xf5\xef\x62\xc8\x7f\x7d\x63\xc8\xef\xb2\x2d\x3c\x56\x6c\x0b\x6f\xdd\xcb\xfe\x75\xc5\x05\xf8\x4c\xba\x7a\x5f\x94\xf9\x5f\xdb\x13\x4e\xe2\x9f\xce\xf1\x27\x0d\x78\xba\x1a\x67\x22\x05\xb3\xed\x6a\x94\xc5\x20\xce\x4a\x9c\x20\x1f\x6c\xca\x02\x94\x19\x66\xbf\xfa\x6f\x7b\xd8\x45\x62\xbf\x3a\x1b\xde\x71\xd1\xba\x12\x56\x95\x4c\x58\x30\xc0\xec\x34\xf5\xc0\xf4\xe9\x33\x17\xe7\xa7\xcf\x4e\x9f\x99\x75\x64\xe6\x27\x46\xd8\x1e\xd8\xca\xfc\x0f\x8d\x84\xdf\x3b\x72\x9f\x6a\x95\x95\x2c\xf3\xe4\xb1\xfb\x26\x67\x1f\xb8\x38\x79\xe1\xcc\x38\xac\x02\x7e\xa5\x17\x41\x38\x0b\xe2\xe5\xc0\x6d\x29\xe3\xab\x40\x60\xa4\x98\xd5\xab\xda\xa3\x4f\xb2\x06\xbf\x07\x22\xb6\xd2\x81\x26\xb0\xaa\xfc\x8c\xa2\x69\xf4\x80\x6d\x94\x1f\x64\x52\x93\xa8\x9e\x38\xed\xf5\x0b\xb5\x5f\xab\x9b\x69\x3f\x6d\x2d\x47\xe9\x92\xa2\xa6\xb1\x3b\x97\x0f\xd2\x22\xba\xa2\x34\x02\xcf\x5b\x51\x4f\x85\xd0\x44\x41\x5b\xf4\x65\xe5\x4f\x7e\x72\x3d\x88\xf9\xc9\xe0\xc9\xd6\x87\xcd\xe0\x0c\xbd\x6b\x8d\x1a\xe6\xd5\xc9\xbb\x0a\x14\x46\x63\x56\x0f\x32\xbe\x14\x65\xed\x84\xe2\x00\xed\xb3\x9c\xee\x20\xa5\x0c\xaa\x20\x25\xdb\xda\x14\x86\xce\xec\xbd\xde\x63\x07\x60\xf6\xce\x66\xa2\xeb\xbf\xd4\x63\x8d\x2d\x8d\x34\x28\x98\x44\x66\x37\x4b\x64\x76\xca\x53\x59\x35\xfe\x87\x72\x15\x1c\x69\x1d\x36\x00\xd3\xb2\x63\x1c\xc9\xf2\x39\x5c\xd6\x9a\xec\x25\x7b\xd8\x91\x2a\xb7\x09\xe6\x38\xc8\x76\x4d\x69\xe7\x8b\x21\x28\xfe\x95\xd1\x70\x71\xf3\x57\x2c\xeb\x0d\xc5\x09\x17\xe4\x2f\xc9\xcc\x77\xb6\x33\x16\x8c\x03\x2a\xdc\x10\x8e\x53\x72\x51\xc9\x13\xcb\xba\x47\x87\x78\x97\x1c\x02\xb8\xe5\x80\x1c\xe2\x44\x38\x3e\x4f\x56\xf8\x0d\x0a\x37\x6c\xb7\x0e\xc7\x62\x35\x31\xf2\xb7\x5f\x3f\x2f\xf2\xe9\xf9\x47\x82\xff\xf8\xd9\x86\xff\xf8\x62\x38\x39\x89\x94\xc7\xc1\xf6\x29\x8f\x65\xb5\x1b\x70\x10\x9f\xd5\x7b\x1a\xb1\x34\x5e\x27\x97\xf1\x79\x7d\xb1\x3a\x15\x1e\x9f\xab\xe6\x2e\xae\x2b\x83\x54\x25\x77\xb1\x5d\xda\x17\x6e\x64\xe3\xdb\xe2\xb3\x07\xf3\xe1\x07\x6f\x0c\xbf\xe2\x59\x0f\xca\xb7\xf4\x0c\xcc\x30\xdd\xa8\xd7\xd3\x0a\x0f\xcc\x27\xfd\xb4\x2d\xe5\xcc\xba\x9a\x83\x5f\x85\xee\x3b\x10\xd9\xce\xdb\xc0\x8c\x87\xb1\x84\xc4\x76\x11\x4c\xa7\x2d\xd1\xc5\xb4\x67\x3a\xcb\x4b\xbd\x8a\xdc\x5d\xfa\xbc\x49\xa9\x51\x50\x22\x38\x84\x69\xd3\xcb\x44\xbf\x30\x3c\x27\xaa\xf0\xe1\x98\x3f\x8e\x5f\xc9\x6a\xac\xae\xdd\x07\x4b\xd9\x91\xfb\x0f\x1d\x64\x7f\xc8\xd8\xa8\xac\xc8\xff\x1c\x0b\x3f\xc5\xce\x09\xbc\x51\x2a\xfb\xd8\x20\x78\x48\x43\xb5\xb4\x45\x57\x2e\x27\x65\x8e\x8c\x02\x32\x4b\x43\x3b\xeb\x41\x64\xb6\x80\xc5\x41\x30\x7b\x76\x2a\x38\x76\xc7\xed\x27\x9a\xc1\x45\x41\x40\xbb\x1d\x21\xf7\x55\x94\xb0\xd5\x38\x22\xe8\x4d\x75\xef\x09\x65\x29\x21\x58\xf9\xd4\xe4\x5f\x9e\x9d\xb6\x4b\x8d\x53\x5d\xea\xc9\xe0\x48\x33\x98\x9e\x31\xe6\x38\x65\x0a\x0a\xa6\xd0\xb4\x9c\x0c\x10\xf8\xcd\xed\xbc\x01\xef\x52\x56\x0f\x16\x04\x68\x0c\x9f\xd1\x38\xbd\xf2\x8e\x40\x0d\xe8\x45\x60\xa6\x56\x96\x72\x76\x14\x37\x8e\x85\x93\x0b\x41\x9b\x63\x1c\x78\xa6\x54\x60\xc6\xa5\x28\xc0\xa4\x73\x0c\xf0\x45\x0c\xa8\x72\x0b\xd9\x81\xc0\x6a\x64\xa1\x50\xa5\xf0\x82\x4d\x35\xc9\x32\x63\xe3\x6e\x3b\x79\xfb\x61\x90\x08\x79\x8b\x93\xfb\xa6\x2c\xe2\xa4\x22\x5f\x84\xab\x5d\x93\x9d\x12\x38\xf3\x39\xc7\x10\x63\xd8\xe8\x86\x62\x5e\x2a\x85\x0f\x64\xc5\xb2\xfc\x6a\x27\xa1\x95\x5d\x31\x24\x46\x2a\x7e\x66\x99\x04\xc6\xf2\xfc\xd5\xed\x2f\x50\x66\xd1\x02\x54\x64\x51\xa7\x13\xb7\x82\xc5\x88\xd2\x0f\x5d\xdb\xd6\x50\x1d\x0c\xc5\x91\x36\xe5\xb0\x97\xf1\x56\x9c\xf3\x90\x0c\xee\x88\xfa\x6b\xc9\xa4\x14\x7e\xad\xb1\x28\xfb\x03\xa4\x4d\x14\xc3\xf2\x4a\x11\x88\x61\x47\x88\xe6\x62\x94\x35\x5b\xa2\x8b\xe6\xd2\x70\x2d\x4e\xda\xad\x28\x6b\x87\xf5\x8d\x2a\xea\x65\xbc\x13\x5f\x31\xe7\x03\x82\x51\x56\x1f\x52\x94\x07\x55\x70\x4b\x53\x56\x01\xc5\xa3\xf4\xe8\xd7\x5a\xcb\x51\x16\xb5\xa4\x08\x1d\xba\xe5\x10\x06\x52\x45\xbd\x1e\x8f\x32\xb9\x7e\xe2\x22\xe7\x49\x47\x9b\xaa\x41\x3f\x9c\xbe\x38\x47\x65\xa3\xe1\x44\x4e\x9b\xb2\x37\xab\x46\xc0\xef\x48\x3a\x49\x87\x25\xb4\x8b\x97\x5b\x67\xaa\xc0\x76\xc2\x48\xdf\x75\x57\x10\xde\x22\xdb\x39\xab\xe4\x43\x1d\x9d\xaa\x64\x04\x3e\x21\xb3\x77\x5a\x5a\xe1\x6b\xd1\x00\xd7\x68\x27\x50\x2a\x85\xa6\xaf\xee\x5c\xb4\x55\x27\x8c\xcd\x95\xee\x0e\x20\xeb\x30\x51\xcb\x3c\x6a\xe3\x32\xd3\x61\x65\xb2\xc8\x66\x70\xd4\x29\xde\xf4\xd0\xba\x21\x5c\x57\x35\x85\x30\x35\xa1\xa1\xb6\xd3\x89\xaf\x04\x63\x19\xef\x8a\x55\xb5\x0b\xe0\x8c\xc0\x58\x8e\x2b\x75\xa1\x87\x18\x0c\xa1\xf6\x9e\x74\x0f\x1b\x95\x35\xf9\xa7\x36\x8e\x23\xaa\xda\xa8\xce\xcd\xcf\xcf\x94\x57\x05\xfb\x98\x8b\x7c\xec\xf8\x06\x9b\x17\xf1\x5f\xe8\x0f\xf3\xdf\x7c\x20\x9c\x76\x9e\x58\x07\x29\x48\xc2\x50\x2b\x42\xad\x4c\xcb\x96\x88\x5b\x10\xf9\x5e\x66\x44\xdb\x3d\x30\xfd\xdf\xfb\xd8\x6f\xd8\xd0\x3b\x1f\xdf\x31\xf4\xce\x4b\xbd\x4d\x80\x0c\x1e\x33\xa0\x9d\x17\x2b\x83\xd3\x80\xdd\xbe\x31\x15\xc9\xc6\x43\x0e\x76\xa6\xbb\xb6\x97\x97\x88\xc7\xa4\x38\x0f\x9c\x12\x9a\xbb\xe6\xdb\x5d\xf3\xed\xe3\x66\xbe\xbd\xea\xb5\xb7\xb6\x74\x4e\xfa\x77\x1b\x0a\x15\xb3\x16\x4a\x66\x4e\x47\xaa\xcb\x06\xce\x0f\xec\xaf\x72\xee\x37\x2d\x47\x28\x40\xb7\xbf\x62\x7f\x38\x51\x7a\x86\x53\x59\x0a\x6c\xb1\xdc\xab\x95\x38\xeb\x9f\xd9\xbb\x2b\x14\x8f\x58\x2e\xf8\x8e\x60\xbb\x37\x85\xab\xd9\xd5\x7c\x3b\xd4\x7c\x4b\x0a\x0b\xff\xf9\xe1\x37\x57\x90\x6f\xd9\xeb\xc4\x76\xc4\x1e\x66\x4d\x56\xdf\x0a\xe4\xc6\x5e\x9c\x57\xbd\x74\x6b\x35\x71\xaf\x3f\x7d\x0d\x08\x2d\xa5\x65\x5e\x56\x18\xef\xbe\x81\x3d\x65\xc3\xa0\x54\x27\x14\xf7\x6b\x07\xc3\xff\xe9\x4d\xb6\xa3\x1e\x84\xe1\x12\x38\x2e\x42\x81\x53\x4c\x25\x64\x24\xb8\xf8\xe7\x70\x67\x40\xc8\x4f\xfc\xe2\x50\x1e\x9c\x8e\x0a\x4d\x17\x4f\xc7\x60\xc3\xe8\x01\x26\x5b\x0a\xd1\x84\x4c\xad\x84\xe7\x96\x55\x74\x85\x0f\xb4\xcd\xd3\x2a\x47\x1f\xe7\x13\x82\x29\x6b\xaa\x06\xee\x24\xde\xd7\xf5\x54\x1f\x60\xff\x63\x84\x1d\xa4\x04\x1e\xc8\x11\xfa\x1d\x9d\x64\xf0\x0b\x23\x97\xc8\x52\x7f\x12\xf3\x1b\x16\xa5\x0a\x52\xa4\x38\xf2\xb0\xd7\x93\x17\xa7\x1c\x59\xf5\x45\x6a\x60\x5e\xa1\x7f\x8b\x03\x85\x77\x6c\x19\x98\xd3\x40\xb4\x0a\xb5\x34\x82\x45\x5e\xac\x71\x9e\x06\x87\x0f\x1f\x46\xec\xe3\xc3\xb7\xdd\x76\x1b\x02\x42\xb5\x79\x2b\xee\x0e\xbf\x08\x6f\x1d\x3f\x72\xa4\x19\x3c\x7b\xf2\xc2\x79\x88\xe0\x91\x53\x07\x0e\x01\x2c\x19\xbd\x00\xd6\xc7\x79\x1d\x49\xbb\x75\x16\xa0\xfb\x2b\x9c\xac\x74\xf7\x5c\x2b\xea\xe1\x13\xb7\xde\xda\x0c\x4e\x13\xde\x38\xa4\x8f\xc6\xc5\xb2\x1d\xf9\xa3\x2f\xec\x90\xb8\xa8\xe2\x66\x31\x7f\xac\x80\xd0\x1c\x48\x67\xe9\xc6\x4b\xcb\x30\x00\x31\x18\x07\x3b\x49\xdc\x2a\x6c\xe6\x2b\xc5\x38\x84\x41\x16\x88\xe8\xa6\xe7\x5e\x36\xae\x8e\x64\x3d\x9d\x1c\x02\x3a\xea\x3a\x95\x3c\xe3\x79\x3f\xd1\xb7\x5e\x2c\xcc\xcc\x55\xce\x0b\x37\x27\xec\x5d\xa3\x6a\xcd\xaf\x8f\x86\x9f\x1f\x99\xee\xb8\x57\x71\x48\x00\x5a\xe1\x83\x06\x8e\x7a\x2f\x02\x24\xfb\xb2\x5c\xd2\x0a\xb0\x22\x93\x48\x2c\x8d\xe0\x2b\x8a\x2f\x0d\x83\x6f\x84\x3f\xc2\x4e\xad\x41\xde\x75\x4a\x40\xc4\xb4\x0a\xa0\x5b\xb4\xd2\xd4\xe3\x55\x6d\x41\x28\xd9\x0c\x80\x21\xb8\x8d\x8b\x67\x93\x9a\x8d\xc9\x00\x6c\x71\x38\x74\xfd\x74\xe8\x6b\xda\x4a\x69\xd1\x92\x2f\x41\xb6\xc9\xc5\x49\x56\x97\x7c\xf9\xba\xe5\x91\x29\x90\xb4\x29\x53\x39\x87\xd4\xdf\x9c\x17\x2a\xd8\x0d\xfd\x93\x94\xe4\x8e\x59\x93\xdd\x28\x5b\xe1\x6d\xcb\x1f\x36\x03\xd6\x42\x95\x25\xa5\x11\x2f\xd4\x06\x62\x07\x1d\xca\x4a\x0e\x35\x9b\x87\x50\x0c\x2b\xb0\xfb\x6d\x95\xdd\x64\x75\x76\xcb\x96\x16\xff\x7b\xf9\x60\x5e\xc8\x26\xb0\x19\xb6\x5f\x35\xca\x3f\x1d\x9e\xc0\x1b\xca\xc0\x71\x42\xd0\x94\x8b\x0c\xd2\x36\x61\x18\x55\xbb\xc9\x04\xe7\x38\xc2\xfe\xab\xc7\x18\x06\x9a\x01\x5c\xf5\xcb\xbc\x70\xcd\x76\x4b\xe5\x4a\xf1\xaa\xe4\x8e\x43\xb9\x1d\x23\x29\xa4\xd6\xd9\x71\x8c\x38\x56\x62\xef\x80\x7f\x74\xc0\x71\x41\x94\x68\xa7\x66\x44\xfb\x74\x9c\x67\x7d\x18\x89\x53\xfd\xf6\x12\x07\x24\x19\xff\xff\x3a\x10\x9e\xda\xe0\xb7\x4a\x76\xa9\x28\xa8\x78\xdb\xd5\xc3\xbf\xb3\x9f\xfd\xaf\x1a\xbb\xa9\x1b\x5d\xb9\x9c\xea\xdc\x40\xff\x0b\xb5\xed\xde\x93\xfb\x45\x9c\x34\xe3\xb4\xc8\x8b\xac\x39\x9d\x16\x97\xb2\x39\xe8\x60\xf8\xb6\xda\x64\x1a\xf0\x55\x8c\xc2\xb2\x2f\xec\x71\x27\x88\x8a\xa0\x2b\xf2\x22\x08\xdd\x5a\x43\x4c\x33\xc2\xe4\x1d\x54\x68\xa1\xca\xe4\x09\x41\xdf\xf5\xcd\xcb\x56\x5a\xb0\xaa\x85\x52\xb6\xf8\x2a\x07\xf8\x96\x68\x31\xb7\x29\x9f\xe0\x2d\x84\xf9\x40\x2f\x3b\x05\x3f\xa3\xc5\x1e\x42\xac\x32\xf9\x29\x98\x40\x61\x15\xa5\x45\x94\x0d\x74\xe9\xb0\xad\x58\x78\x0a\x87\xad\xc4\xef\xa0\xdb\x2f\xfa\x90\xd6\xcb\xaf\xb4\x92\x7e\x2e\x97\x8e\x0a\xcd\x86\x75\x11\x76\xe3\x74\x52\xf7\xb3\xc9\x3e\x51\x63\x37\xd8\x8f\xfc\x8f\xec\x78\xc0\xff\xca\xdb\x74\xc0\x91\x69\xcb\x6d\xc7\xa6\xe3\x0d\xaa\x03\xc3\x09\xe4\xf6\xb9\xfd\x71\x07\xe7\xf5\x26\x63\x1f\xcc\x09\xcc\xf9\xc4\xf1\x87\xa4\x91\x6b\x1f\xfe\xf0\xc8\xe1\xc3\x4f\x09\x9b\x6c\x7d\xc4\x4a\x80\xfb\x8e\x91\x47\x20\x01\xee\xbb\x6a\xe7\x2b\xd3\xdf\x70\xdf\x30\xed\x41\x9b\xb4\x03\x63\xd7\xd6\x4b\x2d\x58\xc4\xb5\x16\x4c\x06\x69\x5f\x0e\xa4\x42\x2f\xc1\x3f\x20\x0a\xa0\x07\xf9\xc2\x56\x0c\x29\xbd\x32\xf6\x82\x17\x8e\x07\x51\x92\x8b\xf2\xcb\xca\xd2\xdb\x8e\x3b\x1d\x79\x3d\x80\x8b\x9b\xc6\x7d\xb6\x81\xa4\xf0\x43\x88\x16\x21\xac\x19\xb8\xa1\xa1\x9a\x99\x58\x3d\x52\x07\x5f\xbf\x5b\x2d\x4e\x38\xfc\x4b\x7f\xa5\xe6\xd3\x40\x61\x5e\xf5\xc6\xd9\x37\x3a\x47\xea\x5e\x54\xb4\x96\x1b\x8a\x6e\xd0\x67\xfe\xfe\x8c\xf7\x92\xa8\xc5\x19\xfb\xd2\x01\x07\xad\xd0\x89\x8d\x1f\x0e\x26\x86\xab\xf4\x0f\x1d\x08\x7f\xdc\xab\xfe\x6d\x8b\x2b\xb5\x82\xad\xdd\x21\xfc\x6c\x75\xdd\xdb\x47\xa2\xad\xb8\xd6\xff\xc1\xde\xdd\x2b\xe3\x4e\xaf\x8c\x0f\xab\xe3\xe3\x43\xe1\xb7\x6e\x7e\x65\x54\x72\x60\x1f\x43\x9e\xc6\x4e\x6e\x62\x28\xdd\x42\x2e\x77\x6d\x32\xff\xf8\x6d\x32\x57\xbd\x87\xb7\xbe\xe9\xff\x7b\xff\xf2\xf5\xdd\xf4\x2d\x45\x50\x89\x2a\xfe\xbd\x7b\xd9\xfd\xd7\xcb\xb3\xdc\x44\xee\x14\x15\xce\x7e\x5a\x0f\x8f\x89\x3c\xf9\x85\x3d\xe1\xb3\xb7\x7c\xcb\x64\xd9\xa8\xc0\x08\x1d\xdf\x40\x69\x4c\x26\x2a\x43\x69\x14\xb9\x1f\x6f\x1a\x70\xf2\xc9\x51\xc6\x4d\x60\xc6\xfd\xe1\x05\x1d\x87\x21\xe5\x1f\x62\x34\x1a\xdb\x8f\xd1\xd8\x2c\xb8\xe2\x41\x1d\xa4\xb1\x10\xce\x65\x3a\xf0\x50\xc1\x52\xc1\x29\xad\xb1\x26\xb2\x76\xdd\xc8\xf4\xf5\x06\x72\xdc\xaf\x03\x39\x66\xc2\xa9\x5c\xc7\xb6\xab\x98\x9d\x8a\xb0\x0e\x58\x5e\x72\x6d\x6d\x19\xd6\xf1\x10\xc5\xe7\xc4\xe1\x73\x55\x6a\x2b\x18\x6d\xac\x8c\x59\xab\xd4\x79\xb9\x68\x82\x38\x6d\x25\xfd\x36\x0f\xce\xe4\x45\xb4\x98\x00\xb0\x4a\x1d\xb8\x63\xf2\x49\xb0\x32\x10\xae\xc5\xbc\x71\x16\x3b\x55\xbe\xbb\x3a\xa4\xe7\xb5\xde\xf5\xc7\xf4\xcc\x0d\x97\xb7\xf3\x10\x9f\xb7\xef\x61\x67\xa9\x09\x72\x9d\x36\xa2\xa5\xa5\x8c\x2f\x45\x85\x70\x57\x47\xc6\x97\x62\x38\x4d\x50\x10\xf1\xe4\xcc\x34\xb1\x3b\x9b\x15\xf1\x1b\xa3\xe1\xc5\x8a\xe7\x1b\x06\x60\xa5\x81\x79\x1b\xa3\xae\x20\x4d\xab\xd5\x4f\xa2\x0c\x03\xaf\x36\x5d\x06\x7f\x34\xc2\xbe\xcd\x2c\x83\x0b\xe1\x33\xce\x3d\x82\x92\xff\x7c\x2d\xf9\xf3\xe1\x33\x2f\x3f\xca\xd2\x3e\xf7\xc8\x4a\xfb\x6d\x24\xed\x13\x61\x38\xbf\xa5\xb4\x97\xc2\x02\xab\x64\xf6\x05\xd7\x2f\xb2\xcf\x38\xbf\x53\xf9\xfc\xf2\xa8\x73\x27\x8f\xfa\x85\xc8\x5b\x11\x98\x2e\x57\x8f\x4a\x4d\x7f\xd4\x38\x82\xb3\xb8\x45\x91\xec\x1f\x1a\x0d\x5f\xeb\x0d\x3f\xb7\x82\xa4\x6d\x1d\x8c\x67\x05\xb8\x9a\x77\xe1\x6d\x25\xb2\x18\xd9\x6d\xf6\x2f\x75\x56\x18\xeb\xd8\x57\xd5\xe5\xb8\xc8\x1b\x3d\x9e\x35\x10\x9b\x14\x50\xae\x4d\x38\x0e\x7e\x32\xde\x5c\xf7\xf6\x62\xe1\xeb\xde\x3e\xaa\x78\xdd\xbb\x59\xad\x8d\x36\x36\xd6\x11\xf0\xaf\xd4\xd8\xcb\x3c\xa6\x5e\xf6\x07\x9b\x30\xae\x57\x0d\x0b\x76\x1c\xfc\xfe\x94\x32\x74\x9b\xb5\xe9\x0c\x27\xd4\xe2\x28\x28\x41\x46\x24\x18\x6c\x31\x7b\x1e\x2b\x37\xd4\xbf\x87\x9d\xbb\xa6\xd6\x4c\x65\x22\xcf\xe9\x64\x5d\xa2\xa2\x63\x2f\xf5\x18\x8d\x8d\x3f\xd8\xf8\xc6\xbd\x49\x27\xa7\x35\xa3\x76\x78\x3b\xcd\xa0\x45\x93\x6d\xd9\xe7\xe9\xc7\x45\x64\xbd\x44\x34\x46\xba\x6a\xb1\x37\xec\x65\x63\xdb\xca\x9b\x9e\x3f\x3f\xe7\x7f\x79\x4f\x78\xc1\xfc\xb3\xa4\xe2\x34\x93\x58\x90\x44\x03\x2e\xaf\x97\x48\xdf\x3e\x14\x6d\x67\xc4\xc4\xb5\xff\xfc\xe7\x3d\xec\x4f\x6b\x8e\x85\xec\x77\x6a\xe1\xaf\xd4\xe6\xf4\xbf\xab\xd2\x7b\xc9\x68\xa6\x0c\xf2\x06\xc3\x56\x36\x50\x05\x69\x88\x14\x43\xc6\x6e\xbd\xf5\x58\x33\x38\xab\xd2\x4e\x01\x42\x47\xe7\x5b\xca\xe5\x97\x24\x62\x0d\x3e\xcc\x04\x22\xa7\xe8\xb8\xab\xb9\x8b\xd3\x10\xf4\x82\x03\x98\x88\xd4\xc4\x73\xa9\x9f\xd0\xc1\x01\x26\xd5\x14\x63\x5e\xc1\xc2\x9d\x9b\x10\xc3\xf0\x1c\x04\xec\x51\xdc\x0c\xda\x91\xa1\xe1\x8b\xe5\xd8\xbb\x7a\xa9\x64\xf2\x38\x80\x98\xaa\xad\x17\x16\x5c\xdb\x2c\x63\x1d\x60\x64\xe2\x72\xf4\x47\xd4\x1f\x47\xef\xad\xd7\xd8\x1e\x59\x7a\xee\xbf\xae\x16\x7e\xd5\x93\x9f\x52\xfa\xaf\xbe\xca\xc0\xcf\xea\x4c\xa0\x63\x96\xe4\x00\xb5\x78\x56\x60\xbc\x06\x61\x26\x91\x1f\xc1\xa6\x4a\x47\x5b\xa8\x81\xe7\x91\x63\x37\xe1\x52\xfc\x17\x49\x8e\xd3\xeb\xba\x1c\x9c\xd0\x20\x18\x01\x65\xc2\x52\x0b\x35\x11\x51\x7b\xd1\xce\x94\xa7\x48\xe3\x4e\x3f\xe9\xc4\x49\xa2\x11\x7c\x69\x4c\x81\x72\x15\xe6\xdb\xc6\xdb\xd8\x24\xb3\xf2\x3f\xdf\xc4\xbe\x65\x4b\x38\x6d\xff\x8f\x6e\x0c\x2f\xba\x8f\xae\x99\x15\xaa\x70\x61\xaf\xd7\x3d\x6d\x42\xda\x08\x4e\xfa\xcf\x6f\x60\xcf\x60\x7b\x7b\x91\x1c\x47\xff\x44\x38\x36\x6d\x69\x77\x4a\x0f\x6e\x1b\x58\x7d\x79\xb4\x86\x57\xdd\x9c\x8c\xef\x19\x61\xdf\xd0\xcb\x04\x0c\x4e\x19\x92\xfa\x65\xda\xf9\xf5\xe7\xb5\x79\x0b\x57\x0b\x36\x34\x0b\x8c\xba\x43\x3e\x2a\x5d\x57\x21\x82\x6e\xb4\x02\x0e\x08\xdc\x05\x28\x1c\x12\x0d\xfd\x43\xcc\x07\x0a\x59\x79\xde\x6d\x71\x19\xb7\x53\xa7\x2f\x15\x40\x6c\x0c\xd9\xea\xf8\xa9\xf5\x15\xa6\xdd\x46\xd6\x5e\x4b\x91\x86\x33\xa5\x4e\x9e\xb9\xd2\xe2\xbc\x0d\xd9\x07\x70\x84\x51\x4e\x93\xbc\x0f\x3c\x89\x5a\x32\xad\x06\x11\x4c\x97\x0a\xcb\x8d\x0a\xd3\x41\xdb\x69\xc2\xf3\x22\xee\x82\x96\xb3\xf2\xb8\x60\xcc\xa2\xea\x09\x71\x21\xa5\x0f\x1f\xce\x5d\x37\xd5\x77\x02\x10\x07\xc4\xd3\xe7\xfe\xcb\x3d\x35\x27\xbd\x8b\x1a\x96\x4c\xc9\x13\x1a\xd5\x8c\x09\x18\x4e\x91\x98\xc8\xd3\x8e\x73\xb9\x6e\xfa\x71\xbe\xac\xfd\x87\xfc\x0a\xc6\xc9\x02\xae\x23\x52\x34\x89\x22\xb0\x60\x68\xec\x76\x1d\x71\x1b\xf5\xf3\x1e\xfb\xe7\x8a\x73\xf9\x5c\x9c\x17\x22\x1b\x20\xd0\xf6\xfb\x75\x03\xdf\xe0\xcd\x3b\x00\xdb\x22\x71\x38\x1b\x30\xff\x0b\xdd\x37\x4a\xe5\xca\xe9\x5e\x8c\x5a\x2b\x8f\x5a\x27\x0e\xbb\xbd\xf8\x1b\xcf\xb2\xd4\xfe\xa9\xf7\x08\x58\x6a\xdf\xe5\xa1\xa5\x56\x9b\x30\x01\x0c\x19\x51\x18\xaf\x60\xf3\x9d\x41\x40\x0b\x6e\x4f\x01\xe4\xda\x86\x6f\xd0\x5b\x36\x93\x34\xf0\x6e\x0f\xf9\x56\x8d\x48\x41\x62\x60\x49\xd7\xda\xe8\xcd\x70\x28\x5f\xe4\x49\xde\x64\x1f\x95\x1d\x57\xe6\xd1\x1f\xf0\x36\x81\x29\xa9\x42\xf2\xc7\xef\xc2\xb3\xf3\xe5\xf5\x81\x3f\x90\x8b\x0a\x27\x18\xcc\xae\x98\x9c\x23\xfb\x8e\x66\x6b\xb9\x24\x53\xbe\x06\x3d\x6a\x5e\xf5\xea\x9b\x9b\x6f\x6f\xf4\x0f\xa2\xa0\xdc\xcb\x07\x39\x63\x0f\x59\xf0\x69\xfc\x3a\xd0\xd3\x8e\xa8\x7f\x95\xce\x2d\x06\x50\xae\x04\xa3\xd6\x64\x2f\xad\xb1\x9b\xbb\x71\x3a\xcb\xa3\xf6\x40\x69\xc7\xbf\xd0\x82\xfe\x39\xef\x42\x9c\x96\xb8\x65\x6c\xdd\x88\x16\xf2\x48\xf6\x38\x19\xe8\xb8\x00\x40\x03\x37\x90\xee\x00\x24\xa8\xe2\xb0\xa3\x74\x80\xc9\x97\x16\x59\x7a\xd0\xca\xa2\x7c\x19\x18\xc8\x80\xaf\xb8\x20\xed\x69\xa9\x53\xed\x11\x29\x39\xee\x83\x31\x59\x99\xee\x55\xc5\x07\x41\x94\x07\xb9\x90\x27\x09\xe5\x8e\x85\x06\x8d\x3b\xab\xe5\xe5\x37\xb2\x13\x5b\x1c\x48\xcf\x89\x2c\x7e\x58\xb6\x38\x99\x11\xed\x49\x7a\x81\x67\xfe\x27\x6f\x08\x3f\xe3\x6d\xf0\xa3\xe6\x08\x74\xf8\x53\x55\x1e\x87\xfa\x04\xc6\x2b\xd2\x1f\x29\xbf\x83\x8b\x60\x8b\xbe\x0f\x4d\x4e\x2f\x57\x19\x02\x01\x2a\x04\x7c\x6d\xfb\x8c\xe5\xe5\xa5\x6b\x99\x46\xa1\x58\x07\x59\xc2\x89\xb5\xc7\xa3\xb3\xe5\xfc\x76\x8f\xac\x57\x0f\xb0\xdf\xb7\x83\x7a\x7f\x73\xc7\x41\xbd\xaf\xf7\x54\x61\x1b\xb0\x69\x3e\x0e\x21\xbe\x2f\x53\x5c\x9a\x5f\xf3\xae\xf1\xfe\xb3\xc1\xd4\xc3\x7a\xfc\x80\x97\x6f\x78\x60\x52\xc7\x3c\x3a\x29\xf5\x33\x0b\x27\x8f\xca\x78\xac\x49\x23\x9b\xec\x75\x06\xce\xe2\xe5\x1e\xbb\xe7\x11\x19\x08\xba\xa2\xba\x96\x3f\x75\x37\xad\xce\xb8\xb7\x86\x60\xd7\x97\xb3\x1b\xf8\xfc\x38\x06\x3e\x5f\x3b\xc4\x83\x5a\x17\xda\xb3\xb1\xc1\xba\x70\x5c\x1b\xb8\x84\x18\x7b\xc9\x7e\x76\x97\xbd\xcf\x9b\x2b\xa8\xc9\xff\x98\x32\x0f\xe7\xe2\xa5\x34\x4e\x97\x28\x31\x07\x3c\xba\x3f\xbb\xaf\xd2\x29\xfa\xfd\xbb\x4e\xd1\x1d\x2f\xa4\x48\x39\x45\xbf\xcd\xbe\x55\xdf\xcb\xa6\xd9\x33\x37\x3e\xa9\x5d\xd3\x0c\xee\xae\xd5\x1d\xf8\x3e\xa7\xad\x43\xca\x5d\x3b\xf2\x7d\x5e\xf5\x5e\xb0\xf5\xb2\xff\x36\xff\x3e\xbd\xec\x9d\x59\x2e\x3b\x36\x37\x5b\xae\x95\xfe\xcd\xdf\x3f\xe0\x18\x66\x34\x9a\xa2\xbc\x84\xce\x46\xe9\x12\x66\x41\xfc\xf8\x81\xb0\xe1\x3e\x72\x7d\xf4\xe6\xb7\x00\xa4\xb6\x3a\x58\xe2\x6d\xfb\x77\xf5\xc2\x4e\xf5\xc2\x2f\x7b\x4a\x31\xfc\x8c\x17\xbe\xc8\xab\x88\x97\xb0\xe6\x82\x20\xb4\xaf\x39\xc8\xd1\xb9\x42\x4c\xe0\x6d\x40\x23\xf8\xe5\x0d\x7d\x97\xca\x27\x6c\xe5\x34\xc1\x1a\xec\xa9\x5b\xe3\x74\xea\xe6\xed\x2a\xa0\x1d\x28\xa0\x5f\xb5\xaf\x49\x1f\xf3\x76\x16\x7e\xf1\x12\x93\xf9\x88\x86\xe6\xc7\xea\x4a\x64\x75\xee\xaa\x77\xdf\xd6\x7a\xf0\x98\x7f\x44\xeb\xc1\x30\xd4\x6a\xcf\x55\x4d\xe5\xc4\x8d\xdf\x58\x62\xff\xae\x32\x71\x03\x7c\xc6\x60\x78\xfe\xe0\x52\x78\xd6\xfa\x77\xc9\xa2\x11\x29\xf4\x41\x17\xf5\x13\x2d\x10\x39\xf2\xd1\x12\xbe\x82\x7b\x9d\xfd\xed\x0e\xfb\xb1\x1a\xbb\x81\x5f\x41\xdd\x02\x3e\x98\xf7\xd6\xc2\xb7\xd6\xec\x27\xea\x96\xa2\x9e\x59\x50\x32\x88\x1b\x1b\xe7\x2d\xb1\xca\xb3\x41\xd0\xe5\xad\xe5\x28\x8d\xf3\x6e\xae\xe8\x8f\x90\x83\x9a\xf8\x89\xe2\x28\x37\x19\x9d\x0a\xd4\x06\x73\xab\x23\xc8\xdc\x9e\xba\x38\x79\xe1\x0c\xa8\xc2\xac\x3d\xde\x0c\x2e\x82\xfd\xf7\xca\xc0\x06\xa8\x89\xd3\x55\x00\xb5\x69\x06\x16\x7e\x4f\x22\xd6\x78\xd6\x8a\x72\x1e\xcc\x9e\x9d\x6a\x1c\x39\x72\xf4\x98\xf1\xdd\x8c\x29\xb1\x28\x84\x48\xf2\x66\xcc\x8b\x4e\x53\x64\x4b\x13\xcb\x45\x37\x99\xc8\x3a\x2d\xf9\xf6\xb8\x4b\x98\xb4\x20\x67\x7d\x41\x21\x77\x9f\xb1\x86\xc2\xc5\x97\x79\xe5\x1e\x76\x53\xdc\x3b\x1b\x75\xe3\x64\x40\xe9\xc4\x7f\x3d\x1a\x7e\x79\x74\x7a\xc6\x7e\x56\x86\xcb\x68\xf7\xa3\x44\x5e\x31\x5b\x2b\x8d\x14\xb2\xff\x35\xae\xac\xc8\x34\x16\x95\xb6\xfa\xd1\xa4\xd7\x15\x0d\xc8\x92\xcd\xab\x15\x4e\xcf\xac\x9e\x38\xdd\x8f\x92\x39\x59\x5c\x58\x22\xfc\x20\x7f\x55\x46\x10\x34\xa4\xae\x14\xa4\xbc\x4e\x01\xd7\xc0\xac\xda\x32\x8e\x24\x40\x73\x90\x2d\x0f\x25\x37\x55\x33\x34\x5f\x48\x68\xfd\x1a\x06\x63\x3a\xb7\x7e\x7a\x26\xe8\x40\xdf\xc7\xeb\x41\x38\x03\x82\x62\xb5\x6f\xac\x58\x13\xfa\x95\x18\x25\xd3\x0c\x87\x36\x0c\xf1\x76\xd0\xc2\x00\xa8\x1c\xd3\x62\xca\x85\xcb\xef\xf0\x99\xfa\x92\x5e\x1f\xaf\x03\x3e\xc1\x2c\x8e\xe2\x8e\x6a\x76\x31\xb8\xe2\x84\xa0\x09\x68\xbe\x65\x11\x90\xb6\x81\x6f\x4f\xcf\xd0\x20\x82\x99\x96\xa7\xda\x9c\x64\x39\xeb\xd4\x38\x37\x03\x9b\x13\x49\x0d\xfa\x5a\xdc\x53\x3c\x0e\xa0\xc6\xd1\x27\xaf\x16\x89\x3c\x0a\x0c\x7a\x3c\xb0\x65\xd1\x11\xc5\xff\x3a\xc2\xfe\x95\x8d\x48\x8d\x89\x5e\xa0\x71\x72\xff\x6f\x6a\xe1\xe7\x6a\x76\x2a\x09\x7a\x84\xcb\xa8\xf7\xbd\x24\x2a\x3a\x22\xeb\xd6\x2d\x8b\x74\x46\x70\xa6\xda\xb3\xaa\xf8\x3d\x71\x57\x12\xfd\x76\x83\x04\x2a\x73\xc1\xa9\x75\xc7\x54\x09\x06\x94\xc5\x34\x83\xb6\xb5\xe9\x19\x97\x27\x4a\xaf\xf5\x25\x64\xbb\x21\x20\x82\x52\x75\x1a\x91\x5a\xe5\x83\x41\xea\x10\x71\x42\x85\xdb\x3c\x51\x14\x51\xbe\x92\x4f\x20\x24\x72\x83\x10\x89\xa5\xf2\x6f\xd0\xc4\xea\x93\x06\x6f\xb8\xd5\x37\x3a\x71\xc6\xd7\xa2\x24\x99\xd8\xc4\xa9\xf8\xc6\x11\xb6\x07\x20\x4e\xfc\x57\x8f\x84\xef\x00\x37\x89\x3a\x04\x21\xf2\x09\x6a\x6b\x44\x0d\x13\xb9\x93\x48\x85\xda\xfa\x9a\xb3\x3f\x68\x9d\x36\x8c\x5f\x5f\x3d\x9b\x78\xd2\x6a\x9c\x15\x52\xe6\xe3\x5e\x8e\x76\x2e\xfc\x41\xf6\xe9\x4a\x7c\x2d\xe9\x8e\xa5\x1d\x6a\x46\x64\xc5\x55\xef\x28\xfb\x37\xce\xee\x28\x7b\xda\xe8\x46\xbd\xc6\x0a\x1f\xe4\xfe\x3f\xf7\xfd\x06\x74\x9a\x35\xa4\x0a\x2a\x44\x4b\x24\xec\xaa\x17\xb0\x7f\x39\xfc\x11\x84\xf5\xec\xf5\x47\xbb\x51\x8f\x5d\xf5\x0e\xb1\x6f\xaa\x70\x1a\x74\x79\xb6\xc4\x65\xd1\xfe\x3e\x1f\xc6\x18\xde\xdc\xd4\xbd\xb0\xdf\xdf\x0b\x5f\x31\xf6\xee\x1a\xbb\x39\xe7\x90\xc2\x37\xd9\x81\x1e\x0e\xfc\xd7\xd7\xc2\x97\xd6\xe6\x50\x94\xf2\x20\x9c\x02\xd1\x9c\x9e\x09\x61\xad\x84\x17\x45\xca\x43\x60\x08\x6c\xa3\xd7\x33\xc6\x84\x24\x2a\x25\x88\xa8\x98\x66\x70\x06\xa9\x98\xb4\x68\x93\x79\x79\xf8\x45\xb5\x7d\xa9\x9a\xa4\xe6\xba\x08\x71\x06\xb6\x4d\x1f\x9f\x3c\xa6\x52\x60\xe4\xf7\xcf\x6e\x64\xcc\x68\x38\xff\xf3\x37\x86\x6f\xbd\x71\xca\x68\x3c\xe7\x54\x3f\x3d\x13\x44\xed\x76\xc6\xf3\x9c\x03\xc7\x62\xbc\x94\xaa\x25\x6f\xe4\x99\x58\x67\x33\x1e\xf4\x73\x4c\x5a\xd1\x6f\x66\x51\xda\x16\x5d\xa0\xf1\x9c\x86\x0b\x13\x95\xe6\x66\xa2\x21\x97\x67\x32\xa8\x03\xfe\x4f\xda\xc8\xe0\x1a\x31\x16\xe5\x41\x8f\x67\x8a\xf6\xc7\xb9\x1d\x8c\xeb\xad\x53\xea\x8a\x38\x95\x47\x23\x20\xf0\xb3\xc1\xd8\x31\x60\x5f\xe9\x27\x6c\xab\xcd\x86\x68\x18\x8e\x3b\xf6\x2b\xc4\x8d\x10\xc5\x89\xa3\xbf\x2c\xbc\x44\x42\xd3\xd3\x6a\x53\x91\x5f\x51\x46\x9c\x0e\x58\xb3\x98\xbf\x72\x41\xd8\xaa\xfa\x5b\xe1\xe8\xfd\x60\x0c\x3d\x22\x16\xbf\xa3\xae\x99\xe8\x1c\xbb\xbd\x62\x30\x1e\x90\x49\xdd\x2d\xdf\x2d\x1a\x6e\x1b\x6e\xe1\x40\x3e\x2b\xcb\x87\xf3\x54\x89\x06\x52\x05\xcf\x10\x71\xb3\x85\x93\x6f\xd1\x29\x44\x8b\x62\x95\x8f\x37\x83\xe0\xbe\x28\x89\xd5\x65\x14\x26\x1d\x97\x51\x5d\x65\x7f\xe0\x2d\x6a\x2c\x0c\x71\xdb\x8e\xe4\xab\x71\xdb\x92\x24\x9b\x71\x78\x19\x61\x67\xb0\x08\x08\x3b\x90\xd2\x17\x2e\xf3\x08\xe1\x02\x69\x4a\xc2\x60\x4c\x1e\x75\x50\xc6\x83\xe9\x99\x71\x0b\xa2\xa8\x9f\xf3\x4e\x3f\xc1\x4d\xb6\x0d\xe9\xad\xe6\x96\xd5\x12\x69\xca\xad\xec\x9a\x1e\x9c\x5d\x32\xda\x2b\xf5\x31\x54\x23\x59\x29\xc8\xd0\xe0\x92\xc6\xb2\x27\x52\x6d\x08\xab\xd5\xab\xa4\x1e\x5c\x14\xff\x3f\x7b\xef\x02\x26\x49\x56\x95\x8b\x7e\x91\xd5\x8f\xea\x3d\x0f\x66\x82\xc3\x39\x5e\xc0\x63\xdc\x18\x3c\xdd\x3d\x66\x66\x4d\xf7\xbc\x7b\x9a\x19\x6b\xaa\xaa\x67\x8a\xe9\x47\x51\x55\x3d\x03\x0e\x5c\x3a\x2a\x63\x67\x65\xd8\x91\x11\x39\x11\x91\x55\x9d\x20\x1e\x18\x60\x7c\xf1\x54\x50\x29\xe4\xa5\x28\x5e\xc0\x37\x82\xa8\x17\x5f\xa0\x72\x44\x50\x44\xf0\x81\xf2\xf0\x00\x9e\x23\x2a\x02\x07\xb5\x8f\xe8\xfd\xf6\x5a\x6b\xbf\x22\x23\xb3\xaa\xba\x7a\x98\xf3\xf9\x15\x1f\xdf\x74\x65\x44\xec\xf7\xde\x6b\xaf\xbd\xf6\x5a\xff\x1f\x82\x84\xc4\x79\x68\x32\x3e\x54\x11\x30\x1a\x31\x97\x9c\x62\x8b\x51\x15\x90\x1e\xa4\x62\x06\x96\x55\x81\xba\x9e\xa0\xd5\x33\x72\xbc\x96\xb1\x34\x4e\xcb\xf0\x86\x2b\x69\x5d\xbc\x5b\x6b\x09\x36\x0b\xe0\xab\x0c\xf5\x49\x56\x49\x10\xa5\xff\x8c\x6e\x76\x9d\x04\x27\xc5\x55\x72\x83\xbc\x47\x0b\xa2\x07\x6f\x78\xb6\xad\x7c\x21\x80\x13\x2c\x4c\x31\x87\xd7\x08\x1a\xeb\xac\x5e\x64\xe3\x34\x65\xc4\xd8\x05\x06\xd4\x32\x51\x81\x41\x64\x9d\x26\x5c\x9a\x5e\x70\x42\xc9\xc0\x4f\x55\x2c\x45\xae\x8f\x68\x2e\xdf\x52\x99\x62\x91\x75\xd2\x38\xf4\x02\xe5\x85\x23\x06\x7c\x3d\xf5\x78\x82\xb4\xe5\x87\x0c\xb5\x75\x7e\x21\xaf\x0b\x91\x46\xf4\x07\x69\x16\xf2\xec\x30\xe8\x97\x3c\xe7\x00\xfe\x06\x95\x04\x8a\xe4\xbc\x97\x26\x4a\xc4\xd1\x9a\x24\x69\x66\xe8\xb4\x54\x65\x80\x4a\x33\x74\x5b\x90\xa0\x86\xe6\x2b\x5a\x21\x8e\x7c\x89\xd6\x1e\xed\x83\x90\xcc\xe8\x31\x52\x5f\x6c\x3d\xec\xa2\x73\xdd\x48\x35\xe3\x80\xbb\x3f\x28\xd2\x6e\xd4\x62\xec\x8f\xf7\xb3\x2b\x8b\xb4\x97\xc6\xe9\xea\xe0\x3e\xa1\xb3\xbc\x6f\xbf\xff\xd6\xfd\xe6\x13\x72\x54\x51\xe7\xdf\x06\xf4\xb8\xda\x02\xe5\xa7\x14\x5f\x8d\x62\x47\xde\x3f\x13\x98\x1f\xb8\x0c\xd0\x59\x8a\x4c\x80\xe4\x42\x21\xb3\x15\x0b\x28\x1e\x78\xb9\x50\x69\xa5\x78\xca\x71\xcd\xa2\x9e\xaa\xc4\xa1\x3a\x1b\x46\x18\x0b\x6f\xc2\x8f\x4a\x62\x78\x31\x31\xd1\x27\x29\x57\x07\xf8\x65\xd4\xe5\x71\xa4\x9e\x7a\x32\x6d\x01\x2a\xb1\x55\x79\x39\xb9\x51\x22\x23\x1e\x1a\xbc\x80\xfd\x9b\x62\x68\x8f\xdc\x42\x1f\x07\xf6\x76\x20\x94\x20\x59\x6f\x60\x83\xee\xa4\x39\x4f\xec\x7b\x76\x04\x07\x33\x7b\x8c\x1c\xb8\x94\xa7\x02\x61\x37\xe6\x63\xa5\x24\x91\xd8\xab\xd5\x01\x82\x20\x49\x55\x62\x14\x1d\xda\x4d\x46\x15\x28\x3d\xc4\x41\xda\xd4\xad\x4d\x9d\x80\x92\x55\x16\x68\xb2\x00\x09\x14\x49\x88\x09\x73\xbb\xa0\x61\x94\x42\x97\x3a\x42\xa1\x38\xf8\xd7\xfb\xb2\x87\xa4\xd3\x6a\x97\x07\x89\xe7\x07\xc9\x40\xd5\xc7\x27\x71\xdd\x02\x95\x15\xc2\x50\x51\xd6\x44\x6d\x48\x55\x47\x0c\x3b\xdc\xf6\x72\x9e\xe4\x4a\xdc\x80\xfb\x3d\x21\xcd\x26\x0a\x22\x40\x77\x5a\x59\x5e\x03\xf9\xa8\xd8\x7f\x81\xb1\x5b\xf5\x47\x2b\x4d\x84\xa2\x8c\x73\x4d\x6a\x46\xb0\xab\x85\x97\x91\xc3\x97\x66\xac\x9a\x6b\xf2\xb8\x56\x2a\x21\xd4\x41\x94\x2a\xf4\x11\x8e\x92\xdd\x74\x4d\x02\x8b\x20\x60\xa3\x34\xa4\x8d\x73\xed\xdc\x70\xd8\x13\x4a\xda\xfe\x0c\x68\x88\xee\x0b\x1c\x76\xcb\x16\x0e\x39\x15\x49\xfd\x13\x95\x39\x96\x5c\xce\x4d\x3d\x94\x96\x7e\xe9\x14\xc0\x3e\x3d\xc9\x0e\x28\x41\xeb\xfe\xd1\xa4\xff\xfe\x49\xbd\x81\x90\xe1\x4d\x2b\x44\x65\xfd\x93\xba\x7f\x8c\x32\xbd\xab\x4b\xef\x4c\x97\x5e\x89\x83\xe4\xfc\xbf\x0f\x5d\x7a\x57\x95\x7e\xac\x55\xe9\xc7\xe8\x18\xff\xa5\x1a\xbb\x42\xee\xfd\xe2\x1c\xff\x99\x9a\xff\xfe\x9a\xf1\x60\xcc\x41\x5e\xbb\x35\x26\x40\x17\x2d\x31\xea\x71\x4c\xb0\x33\x60\x99\x21\x26\x91\x32\x13\x96\xcd\xfc\x96\x52\x2a\xe1\x83\x0c\x04\x83\xfb\x74\x37\xc0\x97\x78\x81\x01\x77\xa9\x42\x71\x45\xda\x0b\x08\x47\x12\x27\x02\x9c\xc5\x81\x2e\x2e\xc8\xb2\x08\x28\xa9\x0b\x2f\x80\x9a\xca\x18\x8c\x28\xf7\xe6\x17\x9a\x9e\x37\xed\xb5\xd2\x6e\x37\x4d\x14\xf2\x43\xa4\xd5\x21\xdb\x70\x69\x18\xe5\x00\xed\xc6\x00\x5b\xd6\x95\x94\x94\xa0\x63\x76\x9d\xdf\x98\x60\x4f\xa8\x54\xb8\xdc\xb7\x4e\xf8\xaf\x9d\xa8\x7c\xe5\x85\x3c\x49\x45\xf6\x51\xdb\xd2\xf0\xc8\xf1\x1b\x5d\xa9\xd3\x7e\x61\xdc\xc5\x28\xbb\x6c\x0a\xed\x6e\x08\xf9\x1b\x0b\x09\x40\x43\xd4\x58\x8f\x42\x7d\x99\x98\x37\x3d\x1f\xf4\x3d\x1f\x61\x7c\x80\xc7\xdb\xbc\x60\xc4\x3b\x4b\x31\x05\x84\x62\xb5\x96\x46\x21\xd2\xcb\x41\xc4\x57\x27\xed\xc1\x18\x58\xac\x85\xe2\x43\xb1\x2e\xd1\x04\x2b\xe6\xbc\x9c\xb6\x48\x13\x92\x45\xf9\xf9\xdc\xeb\xa5\x85\xd2\x6c\xa3\x2e\xf5\x75\xa8\x6a\x9f\xf7\x32\x1e\x20\xa9\x9b\x4f\xeb\xdd\xf7\xd2\x95\xbc\xd5\xcf\xc6\x55\x10\x60\x9c\x01\x48\xda\xaa\xa3\x0e\xac\x83\x3e\xc1\x7a\x98\x14\x78\xab\x69\x8a\x94\xba\x42\xd1\x82\xd1\xd7\x15\x30\xc7\xf0\xab\x35\xf6\x04\x79\xef\x6e\x8f\xe1\x27\x6a\xfe\x87\x6a\xf3\x55\xaf\x94\xdc\xc9\xb5\xdd\x1a\x17\x8b\xba\xc1\x57\xad\xd6\x5e\xc1\x0a\xb5\x1c\x95\x59\xa9\x3d\xa7\x99\x39\xaa\xc6\xf3\x44\xec\xed\xba\xab\x08\x41\x7a\xa8\x04\x40\x74\x33\x64\x92\x95\xbb\x9e\x0b\x94\xbc\x7a\x2e\xd9\xa5\xd6\x4d\x20\xdc\x30\x4b\x7b\x3d\x34\xd0\x27\x23\xd2\x88\x75\x04\x2e\xc6\x32\xec\x03\xe9\x4c\x15\x35\x82\x6a\x83\xd5\xf1\xff\x30\xc9\x98\x3e\x6f\xba\x9f\x99\xf4\xdf\x38\x49\xb7\x6a\x51\x99\x95\xce\xbc\xd5\xc1\xcb\xc4\xf9\x85\xb5\x9b\xea\xe2\xbf\xb7\x1c\xde\xc4\x12\xb9\xcd\x0b\x35\x5b\x4b\x1d\xd2\xba\x6c\x1f\x65\x75\xdc\x91\xe3\x6f\xfb\x3d\x4b\x2c\xb3\xea\x73\xf3\x98\xdd\x4c\xab\x6d\x85\x86\x6f\x16\xfa\x07\x5e\x8d\x89\xbe\x51\x67\x28\x5b\x5c\xd7\xcd\x73\xbc\x2c\x10\x02\x32\x72\x2f\x2a\x2c\x45\x4e\x9c\x39\xb6\xa9\xb4\x95\x7a\x47\x05\xe6\xa0\xc3\x76\xbf\x10\x15\x3a\x26\xca\xa0\x12\xc1\xf1\x3b\x14\x6b\x0e\x2f\x3e\x09\x39\x5a\xae\xe4\x20\x1b\xe8\x0b\x3f\x5c\xc2\x91\x41\x43\x8a\x71\x24\xa0\x7b\x69\x9a\x95\xa8\x6b\xa5\x92\x95\x5d\x52\x7b\xd0\xb0\x16\x25\xe6\x0a\xd9\xf8\xc5\xd8\xfb\x76\x3b\xd2\x92\x46\xa2\xae\x41\x49\x75\xd8\xa2\x76\x82\x4f\xa0\xee\x8a\x4b\x50\xa9\x5b\xbe\x41\x7d\x70\x99\x14\x0d\xc6\x96\x2f\xd5\xa4\x24\x97\xd2\x18\xbb\x92\x5a\x6d\x5b\x32\x2e\x95\x6f\x48\xe1\x48\x6b\x98\x0a\x2e\x97\xa9\x69\xc7\xe6\x9f\x8f\xef\x67\xd7\x9a\x57\xa8\x33\x71\x90\xe7\xee\x6f\xec\xf7\x7f\x61\xff\xd0\x63\xe5\xb8\x0d\x3f\x0c\x72\x5e\x4f\xdd\x7f\xda\x86\x1f\x7b\x3b\x5f\xe1\x71\x9a\xac\xa2\xfb\xce\x30\xc4\x5f\xc5\x9d\xb1\xb2\xc7\x04\x68\x8b\x69\xe4\xc5\x40\x2c\x6f\x15\x10\x5c\x57\x91\xb6\x2a\xbe\x15\x21\xf8\xeb\x1e\x62\xec\xcb\xad\xa1\xb1\x16\xf5\x90\x01\x95\x34\xa1\x66\x2b\xed\x4e\x59\x6f\x9b\xde\xd9\x44\xe1\xf7\x23\x0f\x29\x4a\x71\x02\x1c\x42\x35\x2c\x6c\x08\x15\xcd\xbe\xb8\x55\xdc\x11\xe4\x45\xb0\x2e\x41\xe6\xd5\x6c\xa5\x40\xfd\x83\xe6\xea\x38\x08\x9d\x00\x46\x0a\x09\x24\x28\xb7\x89\xb1\x5d\x4a\xf1\xae\x75\xaf\x48\xc3\x60\xa0\xac\x1d\xc5\xa0\x47\x12\x38\x4c\x13\x3e\x7c\x61\xed\xa9\x1b\x64\x88\x77\x41\x71\x6c\xe9\x08\xb8\x46\x41\x3e\x25\x0a\xce\xb3\x54\x3a\x0e\x1c\x47\xa9\x19\xc1\x8d\x57\xbf\x0b\x87\x53\xd0\x41\x37\xab\xf8\xba\x24\x1f\x11\xa5\x28\xa9\x42\x21\x8c\x8a\x99\x04\xa6\x57\xd3\x9b\x36\x6a\x31\x36\x63\xdc\xfe\xec\x56\xe6\x87\x65\xb3\xf0\x3a\x5d\x97\x86\xb4\x74\xbc\xb0\x7c\x13\x36\x1b\x4d\x75\x8c\x4a\xb3\x71\xe2\xa8\x3c\xc0\x67\x92\x16\x57\xdd\x65\xd8\x2a\x0d\xb6\xa9\x71\x82\x4f\x7b\x42\x88\x41\x47\x37\x37\x54\x6e\x92\x34\x29\x15\x06\x15\xb0\xb4\x89\xef\xd9\xc3\xbe\x51\x5a\x26\xcc\x4f\xa5\xc0\xce\xdd\xcf\x4f\xf8\x7f\x32\x31\xf6\x13\xe5\xf9\x19\xb5\x3d\xfd\x50\xd9\x3d\xac\x9d\x5f\x5b\x41\xda\x80\xba\x66\x8e\x2e\xf4\x8e\x7d\x72\x35\x39\xde\xfd\x22\xeb\x73\x1f\x03\xfc\x82\x81\xe1\x8d\xe3\x03\xb3\x9b\x5f\xd6\x29\x6d\x9f\x0b\xb5\x3b\x02\x5d\x60\x9a\xe8\x9a\x36\xbd\xf1\xad\x03\x83\x84\x31\xd6\x5b\xa8\xb8\x65\x9a\x6b\xc5\x3c\x30\x5c\x35\xe4\x3a\x37\xcc\x2e\x10\xea\x86\x40\x9a\x62\x7c\x2e\xbb\x4d\xf1\xe4\xdd\xb2\x35\xc4\x8e\xa5\x8c\x8b\x56\x1c\xf4\x6b\xf6\xb2\xc7\x77\x78\x10\x17\x9d\x99\x0e\x6f\x9d\x97\x69\xdc\xaf\xed\x91\x51\x7e\x9f\xdf\x53\xf1\xde\xd0\xea\x45\x99\xf8\x05\xb0\x34\x82\xda\x0b\x9f\xc8\x18\x26\x75\xe4\x85\x26\x5a\x2a\x04\x0a\x44\xea\x1c\x1a\xd9\xa1\x3e\xad\x3e\x1a\x9a\x09\xc0\x60\x4f\xb4\x6f\xa4\x47\x9b\xf7\x71\xda\x9a\xb7\x99\xbd\x0e\xc3\x92\x95\xf8\x35\x6c\x50\x94\xf3\x26\x13\xbc\xe9\x29\xc5\x83\x8e\xc4\x52\x07\xb7\xcf\xd4\x87\x61\xcd\xf7\xa5\x11\x0c\xcf\x8a\xa9\xc1\x4f\x19\x89\xc6\x20\x18\x07\x1c\xdf\x91\x81\x54\x1f\x23\x86\xdc\x06\x25\xfd\xdb\xa5\xd8\x7d\x08\xc9\x50\x2e\x96\x84\x8b\x89\x5b\x5c\x3e\xcb\x8f\x46\xe9\xa3\xac\xa5\x60\x56\xda\xea\xa0\xc7\x0f\xdb\x11\xca\x7f\x55\x63\x57\x9b\x6a\xc6\xfc\x82\xfb\x07\x35\xff\x37\x6b\x65\x9b\x98\x2c\x66\x79\xd0\xe3\xc7\xec\xb9\x63\xfd\x80\xca\xae\xf2\x42\x85\xa1\x2a\x50\x8a\xf9\x05\xa3\x8b\xa2\xa4\x42\xfa\xd3\xa1\x07\x3d\xd9\x72\x8b\x29\xb2\xc3\x91\xd6\x2b\x1e\xe0\xfe\x64\x79\x64\xe5\xd2\x7b\xc6\xc0\xca\x94\x8a\x91\x6e\x97\x94\xe8\xa5\x9d\x2c\x57\x51\xb8\x97\xd9\x15\xcc\xdc\x09\xde\xb1\x97\x7d\x43\xaf\x0f\x38\x57\xa7\xd3\x02\xc2\x7c\xa7\xa5\xad\xcb\x7d\xc5\x5e\xff\x05\x7b\x47\xbd\xb5\x30\x75\x02\x8c\xdc\x0d\x56\x79\x52\xc8\xd9\xc4\x83\x98\x24\x65\xc5\xac\x95\xa3\x46\x3b\x71\x18\xe5\x48\x74\x08\xd9\x68\xa6\xd8\x1c\x29\xf5\x82\x70\x30\x95\xa4\x45\xc3\x38\x37\xcb\xb3\x8d\x58\x42\x60\x4c\x46\x01\x6d\x18\x74\xd5\xfc\xc7\x80\xda\xa5\x22\x28\x78\xbb\x1f\x2f\x01\x4e\xfb\xbd\xd2\xb4\x6b\xcc\xd2\x5e\x96\xf6\x02\xb8\x8b\x5e\x5a\xbc\x1f\xdc\x6f\xd1\xf1\x36\xa7\xb0\xe3\x1c\x28\x6d\x94\x54\xeb\xf5\xb3\x5e\x9a\x83\x5e\xda\xe3\xa2\xcf\xa5\xd7\x2f\x56\xd0\xb0\x8d\x69\x3c\x07\xea\xab\x55\x9e\xf0\x4c\x14\x64\x5c\x0b\x26\xa1\xfa\xb5\x14\x8b\x1a\x69\x46\x77\x4b\x25\x02\xcd\xb4\x97\x49\x2d\x45\x5e\x9e\xe1\x18\xc4\x65\x4b\x83\x11\xf2\xec\x43\xef\xf9\x04\x0d\x8b\xd3\x66\x01\x23\xbf\x79\x37\xe7\xf1\x1a\x57\x86\xc8\xa6\x37\xbd\xca\xf1\x92\x15\x8c\xf5\x69\x22\x74\x39\x94\xdc\x46\xbb\x64\x33\x42\xa3\x50\x53\xbb\x9c\x33\xcd\x36\xa3\x1a\x27\xe4\x60\x1e\xb4\x39\xda\x0d\xfa\x5d\x92\x88\x12\x21\xc4\xde\xac\xde\x6e\x02\xcc\xbe\x61\xc2\x7f\xc1\xc4\x22\x58\xff\x94\x5b\xa8\x36\xd8\xe8\x78\xfb\xd2\x65\x2d\x9d\xc6\x94\x4e\x49\x52\x14\x33\x85\x5d\x04\x6f\x10\x88\xff\x9d\x5c\x95\xed\x1b\x51\x53\xbf\x4d\x89\x2d\x2b\xd1\x36\x48\x09\xd2\x01\xf6\x5c\x30\xed\x17\x86\xec\x96\xb7\x06\x46\x4f\x2a\x14\x8d\x6e\x1a\x46\xed\x41\x73\x87\x96\x7f\x43\x36\xd0\xd6\xfa\xa8\x99\xdd\xdf\x56\x3a\x5b\x1a\xde\xf4\xec\xfb\x26\x09\x91\xec\xe1\x49\xff\x2b\xfb\xa1\x2a\x6a\x83\xcb\xbd\x4e\xba\x6e\x1d\x85\xc0\x00\x0d\x4e\x9f\xb6\xc3\x9f\x6a\x74\x93\xac\x15\x12\x25\x5f\x4c\x56\xfb\xa6\x62\x8b\xfd\xe3\xab\xef\x7c\xb5\x73\x03\x9a\x2d\x59\x88\x95\xd5\xd0\xb8\x67\x14\x6b\xd0\xd8\xc2\x61\xe2\xa4\xa6\xe9\xd0\xbe\xe1\x57\xed\x0c\x35\x37\x3f\xe1\x62\x08\x59\xd2\xc6\xf5\x3a\xec\x3a\xb4\x32\x20\x73\x16\xdd\x3f\xf7\x5b\x46\xc4\x94\xb1\x9e\x30\x7c\x66\x68\x59\xa9\xf0\xa1\xf9\xb6\x67\xdd\x9a\xca\xcb\x31\xeb\xfe\x4a\x02\x53\xeb\x8b\x65\x33\xce\x86\xee\xaa\xfa\x04\x82\x88\xa0\xfd\xc4\xed\xa5\xbf\xc9\x02\xda\x07\x03\x20\xb7\x50\x79\x37\x45\x91\x38\x04\xbe\xb7\xd2\x8f\x62\xdc\x37\x55\xcf\x4b\x47\x05\xd5\xf9\xc8\x60\x91\x08\xf1\x94\x0d\xe8\xca\x02\xaf\x22\xc9\x16\x9b\x6a\xff\x0d\xa3\x8a\x25\x17\x23\x30\xe1\xea\xb1\x36\x8b\x56\x9a\x2b\xb8\x2b\x50\x24\x88\xb9\x6a\xed\xa3\xc3\xa1\xa8\x6d\x78\x84\x4b\xbb\xa1\x04\x52\x13\xdb\xed\xe1\x4b\xac\xa0\x15\x3f\x81\x51\x20\xf2\xa2\xd5\x74\x6f\xb7\x1c\xc3\xb9\xb5\x7e\x97\x38\x98\xea\xe9\xf8\x20\xfd\xec\x53\xb4\x03\x4a\x7b\x9a\x75\xf3\xaa\x2d\x6a\x97\xf3\xca\x8d\x26\x47\x94\xac\x36\xd4\x77\xf2\xda\x0d\x24\x96\xa9\x6a\x7c\x79\x82\x1d\xac\xf0\x26\x90\xae\x0f\x12\x48\x66\x99\x67\x5d\xf7\x77\x26\xfc\x57\xd5\xa6\xb5\x33\x86\x5a\x3c\x62\x55\x0d\xd1\xad\x22\xf9\x45\xda\x26\x49\xff\x50\x9f\x67\x91\x68\x2a\xc1\x7d\x4b\xff\x8e\x51\xd9\x49\xa2\xbf\x24\xd5\xeb\x67\x99\x2c\xc9\x51\xc6\xbb\x06\xdf\x4b\x17\xd6\xc4\xf4\xe9\x59\x08\x2a\x2b\xa4\x4d\x01\x56\x46\x7f\x85\x16\x47\xbb\x9f\xb4\xd0\xe4\x84\xd8\x6f\x30\xf3\xcc\xe6\x19\x20\x3f\x09\x1e\xf4\x94\x8a\xa9\x2e\x71\xaa\xb8\x38\xad\x48\xa5\xb7\x38\xec\xcd\x0e\x7b\x02\x54\x1e\x90\x77\xe6\x2e\x88\x5e\x01\x24\x5b\xf7\xbb\x1c\xff\xc6\xe9\x61\x37\x2c\xd5\x6e\xab\x69\x2b\x03\x89\x8e\x63\x9a\x0c\xe7\xd8\x0c\x9b\xde\xd4\x17\xa4\x3c\x7a\x50\x93\x45\x9d\x3b\xfb\xdc\x24\xbb\xde\x48\xa7\x95\x24\xe0\x96\xc6\x55\xa2\x20\x43\x73\xf7\xdd\x93\xfe\xcc\xf0\xe3\xf2\x88\x57\x82\xe8\x02\x61\x3a\xa6\xb4\x7b\xea\xaf\xf6\xb3\x3f\xaa\xb1\xbd\xa0\xfe\xb8\x1f\xa8\xf9\xbf\x5c\x43\xcc\x99\xa8\x0c\x1b\x16\xe9\x4d\x9a\xc8\x27\x7b\x01\x81\x75\x65\xbc\xc5\xa3\x35\xa5\x60\xd4\xbd\xa0\x25\x54\x43\xda\x06\xd6\x3b\x41\x01\xd4\xdd\xe4\x23\x12\x19\x5b\xbf\x29\x52\x61\x4a\x46\xb1\xf2\x4e\x92\xe5\x8b\xa3\x20\x02\x7a\x22\x4c\x2a\x04\x2c\x76\x91\xc7\x34\x47\x05\x52\x28\x1b\x3a\x48\xb6\xa4\x04\x5a\x89\xc5\x8c\x23\x45\xf9\x44\x9a\x79\xad\xb4\xdb\x0b\x8a\x68\x25\x82\xd9\x88\x98\x5f\x79\x9d\x60\x77\x28\x3b\xc5\x3b\x8e\xd6\x16\x1b\x65\x2f\x59\x35\xb6\x39\x4b\x1b\xfb\xd3\x1a\xdb\x0f\xcb\x3d\x59\x75\x7f\xbf\xe6\xbf\xb7\x46\x3f\xe0\xc0\x0d\x96\xd8\x16\xc2\x0a\x62\x61\xfc\x02\xde\x88\xc3\xce\x57\xc8\xf3\xbb\x4d\x70\x5e\x94\x78\x58\x15\x6a\xac\xb1\xd3\xa2\x5f\x98\x1a\x7a\x7d\x69\x48\xe6\x00\xa0\xe4\x47\xa5\x9f\x0a\xd6\x91\xa3\xb8\xe9\x1a\x25\xa0\xa9\x35\x8a\xeb\xc3\x9d\x1c\xf2\x36\xa2\x6f\xa1\x90\x11\x39\x99\x68\xc1\xb6\x5d\x70\x85\x4b\xf7\x55\x7d\xb0\xb4\xf6\x66\x03\x30\x58\x43\xe4\x5a\xd7\x69\x56\xdf\xfe\x74\x8d\x5d\x61\x54\xd3\x7d\x43\xcd\x7f\x45\xcd\xec\x99\xcd\x66\xaf\xd5\xc6\xad\x4e\xbb\x99\x6d\x4d\x34\xeb\xec\x61\x85\xe8\x92\x62\x63\xd5\xe1\x51\xee\xb0\x37\xec\x61\x37\x8e\x26\x71\x59\xec\x27\xd3\x48\x9a\x24\x41\xbc\x90\xd4\x2a\x77\x3f\x37\xe1\x9f\x1b\xf9\xd6\x0a\x6f\xd7\x28\x5f\x42\x93\x05\xfd\x25\x19\x28\x6d\x54\xba\x32\xa2\x66\x61\x25\x68\x6e\x38\x7b\xb2\x7e\x5c\x02\x31\xac\xb1\xaf\x39\x6c\x5f\x86\x11\x69\x5f\x72\xfc\x9f\x71\xf0\x6f\xd8\x62\x20\x88\x95\x38\x43\xe8\x71\xda\xf6\x56\x23\xed\xc0\x39\xd0\xe6\xaa\xf9\x36\xf0\x76\xac\xc3\x88\x01\x41\x54\x01\xac\x1e\x2d\xae\x43\x05\x57\xa3\x10\xe3\x1b\x85\x4e\x63\x92\xff\xa2\x93\x9b\x1a\x02\x50\x5f\x90\x44\x08\x4c\x6f\x49\x88\xcc\xbe\x10\x83\x29\x16\xd5\xa9\x7e\x5e\x40\x7f\x59\xbb\xc5\x8d\xec\x08\x9b\x1a\xb9\x5b\x94\x06\x63\x7e\x16\xa3\xc9\x63\x06\xdd\xe2\x86\xfe\x03\xc8\xaf\x5b\xee\x67\x05\x49\x16\x46\xad\x42\xf6\x2a\x74\x0b\x18\x3b\xf5\xb0\xc9\x43\x9d\xd9\x37\xb9\x64\xd7\xd1\xb1\x67\x26\x07\x2e\xd1\x02\xa9\x4a\x21\x1f\xdc\x5c\x96\xa5\x99\xfb\x3f\x6b\xfe\xac\xf1\xdb\x6b\x05\xbd\x02\x1c\x2f\xc4\x1e\x03\x4f\x78\x02\xe8\x5a\x70\xb0\x26\xb0\x43\x45\xed\x96\xf6\x38\x01\x66\x5b\x03\xfe\x9a\x1a\x5b\x61\x7b\x8a\xa8\xcb\xdd\x6f\xbb\x74\x64\xe5\x6f\x5a\x96\xa0\xca\x58\x91\xf5\x20\x37\x2b\xd3\x64\x3f\xed\x68\x70\xec\x1f\x75\xfc\x57\x3b\x48\x49\x43\x18\xd8\x6a\x47\x1a\xd5\x8a\xe9\xa2\x08\x5a\xc0\x24\x35\xcb\xf1\x2f\xd5\x1a\x5c\xc1\xe4\x58\x47\x9d\x1c\xa7\xab\xab\xe2\xdc\x92\xa7\x42\xa4\xcb\xed\xc4\x20\xa8\xca\x39\xe0\x3d\xaf\x71\x13\xcb\xc9\x1a\x97\xbf\x71\x2a\x83\xbd\xe7\xd6\x78\x52\x10\x3d\xdf\xef\x3a\xbe\xf9\x5b\x3b\x95\x9a\xf8\x50\x78\x3d\x05\xe6\x8d\x92\x02\xf0\x3d\x0e\x3b\xc1\x0e\x88\x8d\x30\x4d\x78\x52\xb8\xb7\xfb\xf5\x19\xf9\x03\xbd\x14\x51\x91\x87\x8e\x59\x23\x88\x4a\x65\xdc\xb0\x2a\x7b\x17\x11\xdf\xdf\xea\x5f\x2f\xb4\x3a\x02\xe2\x4d\xb6\x9e\xc1\xe7\xf6\x5a\x68\xc3\xb2\xb5\xf7\xe0\xf9\xa0\x9d\x5b\xb4\x84\xef\xd9\xeb\x7f\x9f\xb3\xa8\x75\x9f\xc0\x53\xdf\x79\x5d\x40\x77\x83\x09\x1f\x07\x39\x29\x46\x71\xd4\xe6\xe0\xdc\x0e\xa0\xd6\xc0\xf0\xa3\x53\x48\xba\x40\x3a\x28\x8c\x65\x0d\x4c\xb3\x2a\xd2\xc0\x0d\xe7\x80\xda\x87\x37\x9c\x3d\xbd\xa0\xe8\xd8\x1d\xbd\x87\xbd\xc8\x61\xf0\xdc\x7d\x9e\x9f\x2c\x04\x45\x47\x2e\xea\x72\x35\x80\xb0\xac\xf2\x34\x42\xd7\xb0\xb9\xa2\x81\xc1\x6a\x4f\xad\xca\x1c\xa6\x16\xe7\xa6\x67\x4f\xcd\x35\xbb\xe1\x75\x28\x6c\x1b\x41\xa3\x97\x86\x66\x2f\x7f\x04\x90\x43\x83\xf0\x4c\x12\x0f\xdc\xf7\x3b\xfe\xbb\x9c\x45\xfa\xe5\x41\xfc\x37\xda\xb3\x53\x84\xa3\xa8\xa8\x1c\xba\xba\x42\x17\xcb\xfd\x49\x64\xd7\x00\x0b\x98\x41\x77\x68\x5b\x2a\xe0\x46\xea\x32\xb7\xc9\x34\x7e\x39\x4c\x77\xbf\xfb\x7a\xc7\x7f\x85\xa3\x2c\x02\x16\x2c\x81\xdc\x85\x61\x72\x22\x22\x01\x01\xe0\xeb\x86\xca\x33\xc1\xa3\x36\x04\xef\x70\x2e\x9d\x86\x03\x25\xf2\xd3\x96\xce\x9c\x5e\x02\xe8\x97\x85\x2c\xed\xe5\x92\x5c\x6b\x5a\xec\x38\xee\x69\xff\xe4\xb8\xf7\xe6\x89\x21\xf0\x4a\x5f\x52\x0c\x3d\x0a\x32\xd8\xc0\x9a\xac\xcb\x6e\xb3\xb0\x3f\xa9\x8e\xd2\x14\xd4\x5c\x3b\x02\x07\xb5\x23\xcd\x25\xdc\x37\x08\xff\x06\xb0\x28\x8e\xf8\x4f\x19\x7e\x4a\xc7\x3b\xf2\x46\xee\xf1\x96\x29\x93\xd8\x27\x18\x6b\xd8\x80\x79\x1d\xd4\x97\x89\x68\x01\x7b\x60\x39\x3d\xcf\x93\x45\xbe\x16\xf1\x75\xf7\x6d\xcc\x7f\xab\x63\x3c\xf0\x82\xa2\x10\x99\x23\x6c\xbe\x4e\x2f\xf6\xfc\x42\x7c\x86\xd7\xc1\xa8\xaf\xf5\x73\x9e\x21\x7c\xef\x31\xcf\xcc\x43\xe1\xa6\x90\x38\x6f\x05\xc0\xd8\x4f\x26\xab\x75\xbe\xd2\x49\xd3\xf3\x94\x9d\x51\x46\x9a\x79\xbd\xb8\xbf\x1a\x29\x8a\x31\xa4\x90\x50\x03\xbb\xe1\x00\x5a\xa2\xcd\x31\xba\x7f\x17\x4a\x68\x17\xab\xef\xb1\x83\xdf\xb9\xcf\x40\xdf\xb9\x6b\x87\x18\xa5\xb0\xcb\x01\x1e\xe8\xf3\xd8\x5d\xe3\x50\x30\x37\x59\xd4\x80\x02\x7a\x1b\x48\x0b\xbc\xdf\xad\xc6\xbb\xa4\xee\xa5\xf0\x0a\x2e\x86\x59\xf4\x2b\xfb\x7f\x35\x1c\xe7\x1b\x9c\x31\xc6\x9a\x2d\x54\x04\x51\x38\x9f\xa9\x19\x49\xda\x51\x1c\xa3\xdd\x53\xd9\xaf\xc5\xfc\xc0\xeb\x73\x75\x82\x34\xaf\x41\x65\x2d\xe9\x70\x67\x8a\xa4\xb0\x79\xd1\x39\xbf\x39\x56\xd0\xbd\xee\x09\x13\x2a\xd1\xac\x73\x09\x35\xcd\xa8\x7a\x25\x46\xda\x1f\x4f\xb2\x9b\x47\xe1\x91\x1e\x19\x05\x45\x0a\xb8\x69\xaf\x9b\xf4\xaf\xd7\xe0\xff\x23\x30\x78\x95\x9d\xb0\x12\x34\xed\x7f\xec\x82\x29\xee\x58\xd2\xbd\x44\x81\xa6\x7d\xc7\x76\xc6\xc3\x3c\x92\xce\xb0\xe9\xf1\x8b\x73\x0b\x53\x62\x57\xe2\xee\x40\xe2\xae\x18\x12\xf7\xfe\x9d\xc1\x9d\xfd\xa7\x11\x68\x67\x17\x9d\x78\x73\xb1\x32\xef\xde\x73\x29\x08\xac\x55\xc0\x64\x6f\x3c\xc0\x8e\x8d\xc5\x39\x1e\x2f\x5c\x3e\x35\xe9\xdf\x33\x06\x0b\xdc\xa4\x1d\xb9\x24\xc9\xf3\xd2\x5d\x1d\x6b\xc7\x92\xe7\x87\x95\xe4\x79\xb9\xe3\xdf\x1a\x49\xb4\xc6\xc2\x80\x2a\xda\x9e\x1c\xba\x97\x9d\x60\xb3\xdb\x80\xca\xde\x15\x46\x8f\x86\x30\xca\x0c\x61\xd4\xde\x99\x30\x3a\x38\x12\x9f\xbe\x2c\x9c\x1e\xda\x5c\x38\x9d\x76\x4f\x36\xb6\x29\x87\x70\x96\x30\xaf\x4a\xa6\xb1\x1f\xae\x55\xa2\xc3\xa2\x59\x8f\x87\x68\x5e\x72\xbf\xe4\xf8\x37\xd9\x8f\x0c\x00\x45\x65\xc8\x0c\xe8\x0b\xe9\x58\x1c\xf2\x0d\x67\x4f\x12\x74\xf9\x86\xc3\x42\x0e\x40\x57\x65\x0b\xd0\x6b\x1d\xc6\x99\xf1\xd2\x7d\xc0\x7f\xda\xac\xfa\x35\x84\xfc\x07\x6f\x90\xbb\x7e\x1d\x0c\x33\x85\x41\x9a\xaf\xee\x75\x54\xf8\x8e\x39\xa0\x37\x30\xa8\x8a\x7b\xc8\x7f\x92\x49\x21\xaf\xea\x8c\xb9\x98\x29\x5e\x31\x31\xf2\x2a\x12\xd7\x9d\xb4\xa6\xdc\x0b\x06\x96\x4f\xd5\xfc\xfb\xac\x27\xfa\xb6\xb7\x03\x3f\x0d\xb2\xb8\x4e\xba\x6e\xde\x3f\x1a\x75\xa7\x5b\xa5\x12\x6b\xc2\x8b\x6b\xec\x85\x35\x36\xd9\x4e\xb3\x6f\x4b\x13\x9e\xbb\x5f\x71\xfc\xef\x76\xe4\xaf\x12\x5b\xdd\x73\xd3\x84\x1f\xca\x0f\x97\x6e\x78\x86\x4b\x00\x45\x3d\x55\x8e\xc0\xf2\xce\x37\x58\x87\x58\x05\xa2\xbf\xf2\x4e\x05\x03\x65\x9b\xb5\xe2\x5f\x6e\x93\xd1\x2f\x96\xf0\xba\x85\xdd\xc4\x8e\x8e\x14\x5e\xc3\x5d\x78\x02\xdb\xb0\xc5\x08\x93\x17\xed\x61\x47\x8d\xec\x2a\x6c\x40\xf7\x2e\x2f\x2f\x18\xac\x60\xc0\x6a\xe7\x7e\x70\xc2\xff\xb1\x5a\xd5\x9b\xd2\x26\x5a\x14\x3d\x75\xe5\x9d\x23\x9d\x0e\x5d\xd8\x1a\x50\x1a\x68\xc0\x20\x8b\x17\x8a\xa4\x63\x53\x53\xc7\x3b\x69\x5e\xdc\x39\x75\x5c\x4c\xcd\x3b\xef\x3a\x9e\x73\x21\x76\x7a\x41\x56\xdc\xe9\x35\xee\x94\xc9\x69\xce\xe2\x7f\xc5\x4b\x75\x85\xd9\xcf\xe2\x52\x1c\xd0\xe2\x89\x19\xef\xc6\xdb\x6f\xbb\xa5\x2e\xb7\x58\x92\xc7\xa6\xe3\x31\x02\xa9\x15\xad\x8e\x17\xac\x06\x51\x92\x17\xe8\x0c\x53\x80\x9b\x9a\xa6\x7a\x07\x80\x8b\x83\x53\x07\x61\x0b\x25\x82\x29\x8d\x20\x72\xf0\xae\x83\x5e\x9a\x79\x07\xaf\x3b\x28\x74\x04\x51\x7f\x5b\x47\x78\x85\xc3\x5e\xea\x30\x7c\xe1\x3e\x2c\xe4\x40\x89\xc5\x1b\xde\xc8\x9b\x94\x9e\x29\xdc\x75\xb7\x99\x53\xe4\x2e\x36\x06\x4e\x7b\x93\x31\x15\x42\x81\xfd\x7a\xb5\xc8\x9a\x91\x98\xc5\xf3\xdd\x60\x95\xbb\x1b\x35\xff\x89\xb3\x0a\x05\xc0\x60\x87\x89\xc4\xeb\x0d\x67\x2f\x04\xe6\x58\x4d\xfd\xbc\xc3\xa6\xd9\x81\x3c\x7a\x2e\xbf\x7b\x50\xf0\xdc\xbd\x09\x3c\xda\x6f\xb9\xc9\xff\x26\x00\x25\x89\x9e\xab\xa4\x06\xe4\x81\x87\xdd\x82\x97\x58\xa8\xde\xec\x30\xcc\xdb\xfd\x21\xc7\x7f\x1e\x30\xc1\x8a\xa5\x26\x2d\xfe\x51\x2e\x53\xe7\x68\x6c\x6b\x62\x80\xd1\x83\xbe\x68\xd0\x6a\x2b\x13\xbb\x5a\x67\xd0\xe3\x99\x58\x0d\xc7\xd6\x8e\x34\x6f\x68\xde\xea\xd7\x3d\x3f\x4c\x5b\xe7\x79\xd6\xe9\xaf\x88\x0f\x56\xd3\x74\x35\xe6\xcf\x31\x70\x9a\x87\x92\x3c\x7b\x4c\x6c\xf5\xeb\x0f\x58\x97\x9f\x36\x95\xb2\xba\x03\xa5\x39\x37\xad\xc0\x71\xdd\xcf\x4e\xfa\xc5\xf0\x63\xc9\x77\x47\x58\xba\x66\x66\x26\xb2\xae\x8e\xaa\x04\x82\x3d\x39\xa3\xcd\x09\x23\xd2\x4f\x53\x7a\x19\xf0\xdb\x0e\x5a\xf6\x4d\xe8\xa7\xf6\xb3\xaf\xd4\xd8\x01\x45\x6b\xef\x7e\xae\xe6\xff\x49\xed\xb4\xfc\x69\x72\x1e\xe2\x03\x29\xea\x71\xca\xa2\x55\x44\x85\x7d\x36\x3d\x6f\x06\xdd\x43\x28\x22\x54\xc1\xbd\x22\x89\x96\x4c\x84\x24\x5a\x49\x6a\xe4\x2b\xb1\x73\xd4\x93\xdc\xf3\x7d\xef\x10\xa1\xc7\x01\x0c\x0b\x18\xfb\xe9\x26\x14\xc2\x0e\x96\xfa\xd0\x8a\x69\x00\x22\x42\x8b\x44\x39\x15\x9a\x80\xdb\x46\x08\x7a\xde\x4a\x7b\x40\xc0\x26\x9d\x60\x8d\x04\x5d\x1e\x24\xb9\xe7\x07\x71\x8c\x7e\x18\xba\x7a\x43\xa9\x40\x39\x0b\xbc\x8a\x2a\xc0\xfd\x0d\x8f\xdb\x15\xaf\xcc\x69\xf3\x0c\x36\x29\x73\x73\x4f\xfa\x77\x2d\x2a\x8e\xa0\x1c\xd0\xbd\xa8\x9f\x15\x85\x95\x56\x22\x85\x8e\xd5\xf4\x10\xc9\x07\xea\x1b\xc4\x71\x89\x47\xf7\x0a\x83\x51\xc8\x3d\xe3\xdf\xbd\x64\x10\x0c\x6d\x39\x7f\x99\x7d\x92\x26\xb6\xdf\xfa\x8b\x1c\xb6\x67\x8d\x67\x2b\xee\xf3\xfc\xe4\x7e\x9e\xad\xa0\xe4\x37\x18\x5b\x55\x5e\xd3\x0b\xf3\x42\x77\x5a\xa9\xc3\xcd\xf8\x31\x6f\x95\x17\x75\xd8\x22\xea\x18\x73\x46\x51\x0e\xbc\x4e\xfa\x6a\xdd\x0b\x79\xcc\xc5\xbf\x00\xcc\x31\xb6\x95\x4b\x6c\x3f\xa9\x65\xee\xbd\xfe\x1d\xf2\x8c\x45\xf3\x55\x14\x2c\x1f\x51\x4b\x65\x07\x8f\xcd\xf4\x14\xdb\x0b\x8a\x9d\x3b\xeb\xdf\x8a\x97\xdb\x46\x86\xf8\x60\x3b\xd9\x3d\xec\x90\xa2\xf4\x5c\xbf\x3b\x8a\x42\x54\x33\x3f\xd9\x6b\x89\xbc\x68\xfc\x55\x5e\x40\x88\x24\xf6\x8c\x7a\x8c\x3f\xfd\xe6\xf0\xf4\x2d\x57\xe2\x25\x57\xb2\xdb\x37\x95\x4f\x34\x59\xc5\x6e\x9e\x9b\x66\x49\xf7\x77\xae\xf0\x3f\x5f\x1b\xf5\xd6\x46\x18\xd2\xbe\x80\x81\x97\x89\x4f\x3d\x88\x49\x92\x4e\x43\x10\x9f\x44\x06\xca\x28\x69\xa5\x62\xcf\x2f\x64\x60\x07\x04\xf1\x25\x64\xec\xc4\x3c\x94\xe8\xca\x4d\x1b\x28\xba\x1f\x49\x7c\x64\x8a\x33\x45\x6f\x10\xb8\x57\x07\x47\x66\x9e\x45\x1c\x20\x1d\xe8\x62\x9d\xcc\xb6\x70\x91\x7e\x37\x27\x90\x06\x4b\xb4\x62\x7d\x81\x7f\x34\x0c\xe1\xce\xbc\x8e\x61\x40\xe0\x1c\x11\xf4\x7a\x3c\xc8\x72\xcd\xb1\xea\x45\xc5\xc1\x1c\x5c\xe7\x41\x3f\x97\xbe\xf3\x40\xe5\x05\xc7\xbb\x4e\x40\xdb\xb8\xbe\xb0\xac\x1b\xde\xff\x41\x41\xd9\xe4\x46\x57\x34\x37\x9c\xab\xe4\x6c\x80\xae\xde\x70\xae\x49\xd2\x64\xd1\x7e\xc4\x74\x02\x4b\x92\xbf\x61\x92\xbd\xb4\xc6\x1e\xa7\x9b\x8a\xee\x14\xff\xe4\xf8\xff\xd3\x99\xb3\x1f\xc2\x28\x60\x9b\x44\x93\x5a\x69\x77\x45\x72\xba\x42\x87\x42\x49\xe0\x63\x69\xf9\x2b\xa1\xdf\x42\xda\x02\x0f\x40\xd5\xb7\xd0\x41\xba\xd4\xba\x97\xf7\x85\x12\x85\xfe\x95\x7a\xfb\xc1\xab\xd0\x94\xe7\xc9\x41\x7d\xfd\x3d\x94\x16\xfd\xa0\x83\xc2\xb3\x1a\x2d\x1e\x4f\x21\x20\xad\xfd\x9c\x6e\xce\x8c\x2e\x34\x27\xfe\x5f\x38\xcc\xe8\x2c\xf7\x43\x8e\xff\x6b\xce\xbc\x9e\x78\x62\x2d\x66\x7d\xae\xe3\x82\x71\x0e\x20\x4c\xbc\x81\x7e\xdc\x12\xdb\x52\x90\x59\xc5\x28\x27\x52\x74\x14\x04\x34\x97\x78\x60\xf9\x74\x60\x60\x91\xd9\x07\x56\xd7\x28\xcf\x67\xf3\x7d\x55\xff\xe4\xe6\xec\xb5\xee\xa4\x5f\x57\x63\x43\xf3\xc3\x7d\xa4\xe6\xbf\xd3\x19\xea\xa8\x92\x11\x25\x20\x40\x24\x73\xc6\x92\x3f\xfa\x3a\xaa\xc2\x3d\x9e\xb5\xd3\xac\x2b\xd6\x64\x92\x26\x9a\xcd\x02\xbd\x73\x31\x9f\x2c\xe4\x19\x7a\x1c\x42\x9d\xa3\xd5\x04\xc8\x54\x92\xa2\x8e\x6e\xb4\x74\xd2\x09\xfb\x08\x64\xcd\x73\x1c\xdf\x5e\x9a\xe7\xd1\x4a\x3c\x3c\x72\x5a\xc3\xba\x9b\x7d\xeb\x78\xe2\xed\x0a\x09\x56\x6a\x33\x7b\x79\x8d\xd9\xab\xc9\xfd\x17\xc7\xff\x29\xe7\xf2\xf5\xcb\xd7\xb9\x4f\xc6\xab\xfa\xe3\xb5\x4e\xe8\x90\x2f\x5e\xc3\x6e\x1a\x4d\x7f\x34\x9a\xf9\xc8\x7d\xf7\x35\xfe\x3b\xf6\x8e\x7c\x2d\xed\x6e\xf2\x84\x0e\x84\xee\xc4\xbc\x00\x50\xa5\x2b\xd0\xe2\x0b\x37\xdf\x70\xbb\x45\xc6\x03\x51\xb4\x60\xc4\xa2\x98\x45\xe3\x25\x76\x9c\xde\x0d\xb1\x93\x3a\x01\x3a\xb8\x16\x5e\x90\x0f\x92\x56\x27\x4b\x93\xb4\x9f\x63\xac\x4e\x06\x58\x7c\x18\x5f\x9a\xf7\x79\xd8\x64\xec\xbe\xfe\x8a\xd8\x23\x73\x1d\xe9\x29\x36\x71\x55\xa3\x63\xcc\x3b\xd2\x94\xd6\x34\xab\x62\xe5\x3b\xfd\x22\x2d\xdd\xb1\x7b\x87\x34\xa9\xb6\xed\xbf\x6f\x7f\xd7\xc0\xdc\xe1\x28\x1e\x8b\x6d\x1c\xa0\x59\x32\xa1\x09\x1c\x6e\x32\xef\x68\xd3\x93\x4e\xbb\x56\xf9\x62\x87\x5f\x3e\xb9\x64\x04\x32\x94\x8a\x17\xe2\x9b\x70\xcd\x44\xe5\x80\xea\x9c\xc7\x83\xf1\xd5\x8a\x79\xd1\xa0\xe2\x4a\x15\x41\x7c\x0e\xd1\x39\xb4\x3b\xcb\xf3\xb0\xba\x55\xfc\x3a\x74\x92\x55\x27\x40\x8d\xd3\x73\xc7\xee\x1d\xa1\x78\xb7\xfa\x79\x91\x76\x41\x34\x99\x38\x58\x90\x43\x5e\xe9\x02\xf1\xb5\x03\xec\xe1\x9a\xba\xb2\xfd\xc7\x71\x54\x92\x5b\x5e\x19\x74\x73\xfb\x36\x27\x2f\x69\x43\xc3\x57\xc9\x55\x97\xb5\x51\xae\x67\x2e\x28\x78\x09\x46\x3b\x53\x2c\x90\xb9\x1e\x70\x52\xab\xeb\x60\x68\x67\x5d\xe2\x00\xb6\x83\x28\xee\x63\xbc\x21\x79\xea\xca\x20\xce\x64\x95\xbe\x95\xdf\xec\x72\x36\xee\xfa\x81\xfc\x7b\xf1\x03\x79\xbb\xe4\x85\xfd\xd1\x1a\x3b\x71\x19\x16\x73\x8f\xb7\xfc\x8f\x23\x2b\xac\x0d\x9c\x6a\xac\x43\x6b\x3f\x02\xeb\x13\x61\x49\x91\x89\x50\x06\xed\x53\x10\xa9\xb1\xda\xeb\x86\x7c\xc3\xe4\xfd\x1c\x58\x83\x29\x82\x8c\x44\x2f\x1c\x7e\x12\x33\x1f\x33\xcc\x0c\xa3\x1b\xb3\x68\xad\x8c\x53\x88\x71\x75\x6a\xd0\x21\x92\x35\xc2\x8f\x10\x18\xe7\xa2\x93\x6d\x7e\x1f\x72\xc6\x3d\xb5\x33\xde\xbc\xf2\x95\xed\x2b\x6b\x95\x0e\xb7\xca\xba\x08\x71\xe1\x0f\x04\x11\x44\x59\xfc\x95\xe3\xdf\x56\xf9\x06\xd7\xd7\x3a\xfd\x50\x51\x29\x86\x1d\xd2\x36\xf0\x6f\x38\xec\x8c\xf6\xc3\x9e\xf5\x6f\x3d\x85\x7f\x52\xb8\x0b\x10\x38\x75\x70\x70\x0c\x4b\x26\x46\x4d\x0c\xb8\xd0\xba\x93\xa4\x0c\xbe\x77\x0f\xdb\x87\xe1\x3b\xee\x53\xfd\x1b\x0e\xad\x64\x11\x6f\x1f\x96\x24\xfe\xdb\xca\xe8\xc5\x36\x8d\x68\x3b\x4e\xd7\x29\x44\x5d\x69\x6d\x0b\x59\x94\x66\x51\x31\x38\x29\x96\xdb\x8c\x89\xd3\x06\x1e\x8f\xbf\xb9\xdf\x3f\x33\xfe\x93\x12\x3e\x88\x0d\xf5\x86\xde\xc9\x94\xde\x03\x90\x13\xb1\x61\x8a\x15\x6b\xf5\xe2\x3f\xed\x65\x8f\xec\xa1\x18\xe2\xaf\x4d\xf8\x7f\x3f\x41\x44\x54\x55\x0e\x48\x10\xb0\x65\xe6\x08\x01\x46\xa4\x40\x17\x29\x22\xd7\x53\xf1\x89\xda\xff\xf8\x05\xde\xea\xe3\x2c\xf7\xa6\x35\xd0\xd4\x39\x7f\xee\x02\xef\xf6\x0a\xff\x1c\x19\x34\xe0\x40\xa8\xc4\x9b\xdc\x84\x4a\x05\x4a\x88\x4c\xa3\xd4\x00\xcb\xf5\x0e\xe1\x8e\xda\xa7\x10\x7b\x88\xb7\x7a\xa8\xcf\xfb\x3c\x3c\x4c\x50\x68\x90\x32\xe4\x45\x16\xb4\x0a\x83\x2a\x20\xe8\x05\x2d\x51\x42\x37\x08\x8d\x8b\x30\x50\x4c\xa0\xe1\x76\x15\xf2\x72\x33\x4e\x22\x5e\xbf\xdd\x8e\x43\xc1\xe1\x4d\xdb\xf2\x9c\x20\xe3\xcf\x19\xea\x3f\x5c\xe4\x87\x56\x0e\x7b\x79\xaa\xcd\x47\xa8\x44\x1d\xd4\xec\x00\xaa\xd6\x10\x08\x67\x55\x9c\x5f\x68\xc5\xfd\x3c\x5a\xe3\x18\xa4\x5a\x51\xb4\x8e\x37\xb1\x26\xed\x17\x1c\xb6\x9f\xf2\x77\x3f\xe5\xb0\xd3\x23\xa5\x6d\xd5\x74\xa6\x6e\x18\x3d\x65\xfd\x97\x39\xe7\x28\xf7\x73\xc6\xd4\xed\xa4\x86\x8f\xac\x18\xb9\x4e\x90\x84\xb1\xb2\x80\x51\xb6\x43\x0d\x58\x1e\xc6\x29\x13\x6a\x22\x1a\x82\xa3\x36\x74\x22\x1c\xd6\xa3\xb6\xe4\x56\x8b\x72\x73\xb4\x9a\x17\x9d\x73\xec\xf1\x96\xac\xec\x27\x10\xae\x04\xce\x2c\x61\x94\xb7\xb2\x08\xa2\xa3\xd2\xec\x18\x98\x4b\x99\x47\x02\xba\x51\xa4\x0d\xe3\x3d\xbf\x7b\x70\x8c\x79\x9e\x27\xc7\xe6\x98\xac\x34\x63\x5f\x65\xec\xfe\x4b\xf5\xd0\x6e\xce\x80\xf6\x2b\x0f\x77\xb3\x6a\x28\xc0\x6c\xef\xbe\x8e\xf9\xcf\x18\xfb\x45\xe9\x8e\x13\x41\xd5\xe0\x1c\x91\xad\x91\x6e\x32\x2a\xfd\x86\xb3\xaf\x17\xf7\xb3\x20\xde\x70\x40\x09\xb2\x24\xc6\x8f\x1e\x60\x5f\x71\x18\x13\x39\xaf\xa6\x59\xc4\x73\xf7\xb3\x8e\xff\xbb\x8e\xfe\x6d\x5f\x11\xc2\x46\x63\xd9\xd4\xd1\xdc\x82\xaa\xbd\x61\x16\x95\xf0\x74\x04\x5c\x73\x30\x88\xe3\x83\x87\xb5\x09\x46\x47\xc9\x47\x09\x9c\x62\x34\x05\x60\x98\xb6\xfa\x10\x67\x2b\x77\x5c\xdc\x12\x25\xab\x87\x68\x33\x59\x5a\xa2\x64\x2d\x95\xb0\x27\x10\xc5\x75\x4e\x0c\x7f\xab\x40\xd8\x9a\x20\x8e\xcf\x8d\x83\xd7\x7d\xaf\x43\x3a\xe1\x2f\x3a\xfe\x5b\x9d\xf3\xa4\x13\xd2\xf2\x94\x14\x24\xf0\xb8\x64\xf4\x45\x23\x9b\xd8\x31\xb2\x2e\x80\x19\x29\x15\x0d\x59\xd1\xa2\x64\xb5\x1f\x07\x59\x93\x06\x44\xf7\x4a\x94\xe4\x45\x90\xb4\x24\x7c\x85\x3a\xe2\xa2\xf8\xa1\xc0\xf7\x73\xa2\xc8\x73\xfa\xda\x48\x76\x50\x2b\x88\x21\xe0\x58\x37\xe0\x21\x36\x29\x86\x45\x68\xb3\x2e\xf7\x9f\x21\xff\xde\xa4\x15\x30\x92\x0a\x56\x46\xb7\xc9\x8c\xcb\xf0\xb1\x12\x27\xa3\xbc\xb0\x51\x55\x5f\x56\x63\x34\x97\xdc\x87\x6b\xfe\x57\x1c\xfc\x5b\x96\x48\xbf\x2a\x0d\xe5\x72\xaa\xa2\xdd\xa5\x34\x5f\x50\x54\x10\x38\x20\xa0\x03\x79\xe7\x84\x86\x9a\x4f\x1d\x87\x09\x77\xe7\xd4\x71\x52\x51\xee\x9c\x6a\x36\x9b\x53\xc7\xb1\xa4\x3b\xcf\x11\x07\x96\x66\x67\x30\xcb\x1e\xb5\x1e\x00\x55\x1d\xce\x60\x69\xd6\xf5\xce\x1d\x87\xb5\xd4\xa4\x2c\x9b\x54\xe2\xb9\xc3\x9a\x5f\x0b\x31\x7e\x89\x20\xd2\xea\x8f\x4f\x3b\x8c\xe5\x9d\x34\x2b\x70\x15\x7f\xc4\xf1\x7f\xd1\xd1\xbf\xb1\x55\xe2\x27\xad\x57\x89\x84\x23\xdb\x5d\x57\xac\x6d\x8f\xda\x2a\x38\x0e\xe5\x8b\xe2\x45\x6f\xcd\x17\x1a\x07\xb2\xd4\xa8\x91\xeb\xe4\x05\x0e\x9b\x94\x73\xda\x2d\xfc\x55\xf9\xb7\x9a\x67\xf2\x77\xd5\xb8\x8f\x29\xd2\x9a\x71\xea\x71\x48\x0b\xc0\xea\xe6\x17\xec\x61\xe3\x5d\xc0\x8e\x36\x17\xd2\x30\x3f\xc5\x8b\x2c\x6a\xd1\x1d\xc8\x07\x27\xfc\x0d\xa7\xfc\xb4\x24\x45\x65\x58\xbc\xda\xff\x03\xaf\x0b\x5f\x9b\xae\x2a\x3c\x68\x75\xc0\x6d\xad\x04\x69\x01\xce\x46\x5e\x11\x64\xa2\x9b\x0f\x01\xa4\x25\xfa\x44\x00\xc0\x71\x92\x93\x5d\xb2\x41\xd8\x36\x3c\x6c\xf4\x78\xd6\x40\x68\xda\xc3\xcd\x0d\x67\x1f\x16\xb5\xe1\xec\xa7\x1c\x2d\xb9\xfc\xb2\x1a\x7b\xb1\xc3\xe4\x2b\x77\x30\xde\xb4\x3a\xd4\x1d\xd8\x68\xf0\xf1\x20\x83\xc7\xad\x06\x06\x80\x71\x4e\xb2\x7a\x40\xce\x4f\x84\x51\xc3\xfa\xb1\x17\x39\x8c\xaa\xea\x0e\x46\x1f\xff\xc6\xd4\x62\x5e\x61\x8c\xfa\xb7\x51\xf7\x2a\xd8\x51\x22\x5d\xc0\x4e\xa4\x97\x2b\x03\x9c\x4a\x20\x4c\xc9\x1b\x85\x7d\x6c\x92\x3d\xc9\x28\x6d\x45\xac\x78\xb1\xad\x3e\x2d\x5d\x01\x4f\xd1\x77\x4d\xfa\x1e\xfd\x8d\x3b\x96\xed\xa3\xf1\xed\xe9\xca\x08\x17\xd0\x9f\xdc\xcf\x1e\x94\x0e\x8c\x8b\xfe\x13\x2b\xfd\x17\x9f\x26\x52\x9b\x4b\xe4\x30\x3b\xc8\xbe\x79\x64\x57\x98\x95\xdb\x35\x3d\xec\xc0\xf4\xf0\x7b\x26\x03\xf4\x7b\x77\xc8\x00\xfd\x5f\x1f\x23\x02\x68\x59\xd0\xae\x15\x6f\x87\x56\xbc\x8b\xce\xe2\xe6\xe6\x90\x29\xb7\x21\xdd\x43\x49\x1c\x94\xec\x1b\xca\x0b\x14\x56\x29\x63\x2f\x9c\x18\x13\x4d\x0d\xb8\x38\xee\x5f\xd6\xfc\x87\x8c\xdf\xea\x42\xc8\xb4\x18\xa7\x09\x28\x5c\x08\x3b\x00\x21\xcd\x79\xdd\x8b\x9a\xbc\xe9\x15\x1d\x45\x36\xb1\x1e\xe4\x53\x51\xee\x75\x82\x5e\x8f\xc3\x55\x89\xc8\x29\x4a\xfa\x78\x23\x02\x80\x7c\x29\xb1\x6d\xd9\xd6\x91\x4f\x38\xec\x1c\xdb\x0b\xf7\x94\xee\x03\x12\x66\xf4\xee\xd3\xfd\xee\x0a\xcf\x44\x81\x74\xbf\x9b\xb4\x24\xc1\x06\x42\x23\x89\xea\xf4\x7b\x7a\xb4\xf3\xc2\xeb\xf0\x20\x2b\x56\x78\x50\x40\x29\x96\xdf\xd6\x05\x76\x8d\xf8\xe4\xcc\x0a\x2a\x62\xcb\x51\x97\xbb\x21\x3b\x7e\x09\x6b\xee\x54\xd4\xca\x52\x88\xbe\x7f\xca\x72\xa4\x95\x02\xa8\x80\xae\xaa\x97\x52\x49\xec\x8b\x57\x31\xbf\x62\x0c\x16\xd2\x50\x92\x23\x01\xc8\xd1\x07\xae\xf2\x3f\x59\x9b\xa5\x65\xa2\xa0\xb5\x00\xb7\xee\x90\xd8\x31\xc0\x78\x97\xe6\xdc\x84\xaa\xe3\x08\xd5\xb3\xa4\x81\x7c\xe2\x00\xa2\xeb\xa9\x53\x08\x31\x54\xfa\x0c\x1d\xca\x0f\x1f\x36\xf0\x41\xc4\xb6\x6f\x3a\x8e\x36\x24\xf6\xd7\x21\xc9\xbf\x74\x58\xc2\xde\x59\x2f\x93\x22\x6a\xe8\x2f\xd6\xa3\xa2\x53\x27\xaf\x47\xe3\xb3\x48\xa2\x65\x00\x54\x18\xd9\x9d\x90\x6a\x9d\xd0\xbc\x44\x5b\x0c\x2c\x6f\x6a\x0b\xde\xf7\x9f\xe7\x03\xef\xb8\x41\x2d\x77\xa7\x82\x65\x82\xea\x83\x64\x20\x58\x30\x15\x6e\x0f\x11\xee\xda\x08\xa1\xbb\x2f\x52\xe5\x6f\x38\x57\x18\x99\x5a\x93\xf0\xbf\x31\xf6\x72\x87\x5d\x65\xf5\xa7\xfb\x7c\xf6\xad\x97\x22\x94\xcd\x3c\xfc\xdb\xa7\x0d\x20\xaa\x01\xd0\x6a\xe8\xe1\x55\x92\xa0\xae\x66\x36\xc0\x57\x8a\x7a\x37\xd9\xff\x9a\x60\xd7\xaa\xc1\x53\x95\xfa\xe4\xc4\x65\xa8\xd5\xc6\x44\x45\xb5\x8c\x8e\x33\x9c\xde\x14\x9e\x0b\xc0\x63\x69\x14\x42\x3c\xec\xc0\x43\xbc\x37\x8a\x23\x4d\x6c\x05\xf6\x09\x39\x18\x46\x66\xa8\xf2\x18\xbe\x0c\x68\x17\x91\x37\x4c\xe0\xf0\x2c\x76\x30\x0d\xb2\x66\x24\x26\x14\x56\x80\xf1\x52\xe0\x55\x22\xa9\x0d\xec\x65\xa4\xa0\xcd\x10\x7c\xe8\xe4\x9c\x3f\x98\xeb\x2f\xfc\xa6\x37\xad\xa2\xb2\x65\x8e\x87\x9e\xf7\xfc\xc3\x6a\xbe\xd9\x1e\x80\xdb\xc5\x65\x06\x97\x0b\x63\xa5\x9f\x2e\x8f\xa6\x82\xb0\xd1\x84\x97\x4d\xf6\xfe\x1a\x63\xba\x4c\xf7\x5d\x35\xff\xb5\x35\xb3\x0f\x95\x41\x2a\x00\xdb\x73\xd4\x52\xba\x9c\x76\x0f\x24\x1b\xca\xe5\x1c\x3b\x73\x5c\xaa\x47\xce\x1c\xdd\xa1\x89\xdb\xdc\x64\x98\xd4\x40\x0e\xa5\x1c\x3b\x82\x63\x0e\x77\x5f\xad\x31\x73\xbd\xa3\x27\xe9\xf2\xe5\x15\x7d\x68\x1b\x10\x62\x66\x8c\x5c\xa6\xa9\xac\x01\xfc\x74\xdb\x1f\x15\xd1\x69\x34\x7a\x2b\x82\x33\x19\x68\xb1\x49\x03\x58\x12\x9c\x4d\x6f\xce\xc2\xcc\x13\x19\x47\x06\xd3\x48\xc9\x3a\xfb\xe1\xfd\x56\x6c\x85\x06\x0b\x14\x82\xe8\x34\xfe\x42\xdc\x6e\x00\x17\x7f\xd3\x7e\xff\x96\xa1\xa7\x56\x08\x8a\x44\xc4\x46\x5a\x13\x89\xeb\x9a\x26\x96\x08\xff\xd3\x7d\xec\xb5\x13\x6c\x3f\x4f\x42\xc8\xf5\x65\x13\x52\x97\xf8\xc7\x9a\x22\x23\x28\xc3\x64\x49\xc4\x23\x45\x39\x0f\xc7\x0b\x59\x1c\x65\x55\x47\x17\xe8\x1c\x7c\xf0\x8c\x40\x14\x72\xc2\xa1\x3b\x70\x82\x35\x2a\x21\x5b\xd1\xc9\x43\x0e\x28\x21\xed\x42\x01\x16\x61\xb0\xfc\x40\xe2\x81\x96\xbf\x31\x66\x44\x00\xd3\x27\xf4\x0e\x61\x6f\x1f\x86\x2f\x71\x45\x53\x85\x95\x51\x82\x3f\xd4\x47\xba\xab\x55\xf0\x6a\x25\x64\x4e\xf9\xbd\x01\x66\x0d\x6e\x7f\xde\x34\xa0\x0f\x12\x6e\x5c\x62\x2e\x11\x09\xce\xd5\xcf\xe5\x0c\x3f\x41\x29\xef\x11\x1f\xfb\xd6\xf0\xcd\x61\x2d\x7c\xdb\x73\xfe\x5d\x35\xb6\x47\x94\xec\xfe\x54\x6d\xab\x17\xad\xfd\x22\x8a\x9b\x51\x52\xe4\x45\xd6\x9c\x4f\x0a\x89\xe9\xe1\xff\x8d\xb3\x2c\x3b\x88\x6e\xbb\x50\xd3\x91\xcc\xf9\x8a\x2d\x54\x71\xb4\x40\x94\x40\xd2\xef\xf2\x2c\x22\x02\x30\xec\x43\x99\x07\xc1\xe3\x54\x72\x39\x93\x1b\x91\x64\x22\x36\x77\x86\x9e\x36\x7f\xa1\xf8\x12\x3a\x2b\x02\xae\x2a\xa4\x60\xd8\x10\xf4\x94\x2d\x49\x02\x59\x65\x6f\xfa\xf4\x2c\x66\x27\x63\x40\xb0\x9c\xb0\xc9\x5e\xe8\xb0\x49\xf9\x99\xdb\xf7\x3b\x08\x78\x4d\xc9\x0e\x2d\xcf\x2c\xd4\xbd\xb3\xb3\x0b\xe0\x7c\xb1\x34\xb3\xbc\x20\x81\x48\x65\x91\x5d\x65\x44\x6c\x56\x20\xd9\x1b\xcd\x0d\x0d\x93\xd5\xf2\xcc\x82\xb5\xa2\x3f\x7b\xc0\x32\x52\x65\x2b\x41\x4b\x83\xa0\x10\x8c\xeb\x62\x1a\xf3\xbb\x23\xf0\x9c\x05\xab\xc5\xcf\x1d\xf0\xdf\xed\x54\xbf\xab\xb2\x62\x0c\x7f\x09\x80\x3a\x8a\xea\x34\x4a\xbc\xb5\x23\xcd\x23\xb7\x8a\x3f\xda\xc1\x5a\x0a\x67\x03\xa8\x88\xed\x6a\x26\x51\x6a\x8e\x54\xe5\x58\xd7\xb4\x0c\x1a\x86\x7e\x45\x99\x67\xb1\x8c\xa3\x47\xab\xad\x29\x9f\xd9\x0d\xe5\xdf\xb1\xb3\xca\xf3\xa4\x39\x2a\xf3\xff\xcb\xbc\x34\x47\xe9\x2b\x98\x8a\x21\x33\x37\xf8\xa7\xb2\x3b\xd8\xed\x23\x4d\x53\x9b\xcd\xca\x5d\x73\xd5\x0e\xcc\x55\x6d\xc3\x5a\xf5\x6d\x3b\x33\x56\x3d\x49\x19\xab\xb0\x1f\x0f\xe6\x66\x98\xec\xf3\x36\xb7\x83\x3c\xc3\xbd\x5f\xb9\x85\x8c\x94\x00\xda\x39\xa4\x52\x04\xd9\x96\x13\x9c\x33\x8c\xbd\xef\x3f\x58\x87\x75\x0d\x0b\x28\x91\x9e\x90\xf6\xea\xf5\xff\xc1\xff\x2b\xc7\x7c\x62\x68\x2b\xb0\x77\x07\x59\xd0\xe5\x85\x98\x0f\x78\x37\xac\x98\xb0\x28\x47\x83\x39\x74\x41\xd4\x22\x2f\x78\x52\xdc\x4f\x90\x6c\xe4\x79\x13\x0e\x92\xa0\x4b\x94\x22\xb0\x07\xa1\x38\x69\x32\x66\x96\xac\x70\xfa\x93\x86\xd2\x2a\xc3\x3b\x86\xee\x8b\x64\xb9\x58\x11\x0b\xaf\x96\x17\xad\x90\x14\x00\xed\xcc\xd4\x04\x6c\xe9\x0d\xe7\x0a\x5d\x72\x66\x09\xc3\x77\x5f\xcb\x12\xf6\x1f\x40\x07\x22\x70\xc4\x0b\xbd\x00\x6e\x84\xdd\xfb\xfd\x7b\xa7\x2b\x9e\x0b\x99\xb6\x6e\xa3\xc4\x94\x6a\x05\xda\x1d\x05\xfc\x72\x91\xcc\x86\x3c\xfb\xde\x09\x76\x2d\x29\x5d\x84\x34\x1c\xf1\xdc\xfd\x4a\xcd\x7f\x7b\x6d\x91\x8b\x69\xda\xc2\xd5\x05\xea\x6d\xa1\xbe\x20\x0d\x7b\x6d\x6b\xbd\xeb\xcd\x05\xad\x8e\x82\xa5\x43\x5c\x2b\x45\x6e\x54\xe4\x1e\x00\x9e\x2a\x24\x70\x0d\xa6\x8c\x5b\x2a\xdd\x55\x19\xc7\xca\x2a\x44\x6b\xf3\x5c\x6a\xc6\xa4\xa9\xdc\x32\x6a\x4e\x19\x5b\x76\x1b\xbc\x3f\x04\x1d\x28\x54\x88\x3e\x00\x3d\x6a\xc2\x0f\x2d\x4f\x6f\x67\xb7\xb2\x9b\xb7\x0d\xeb\x2c\x9a\xb0\xbb\x13\xee\xba\x6d\x3e\x76\x9b\xd1\xab\x1c\xc6\xb4\x8c\x75\x1f\x76\x7c\xbe\xa0\x45\x2e\xa2\x67\x55\xc8\xe1\x02\x35\x67\x29\xcf\x88\xe2\x8d\xe6\x17\x22\xf5\x4a\x29\x21\xa7\xa8\x25\xa1\x9a\xe3\xf8\x2d\x3e\x62\xde\xe7\xbc\xdf\xd9\xa1\x33\xa9\xff\x22\x67\xcc\x2e\xf9\x75\xbb\xd6\xf9\x82\xc3\xae\x04\xe0\x4b\x09\x90\xfc\xe7\x8e\xff\x5e\x67\xb6\x5a\x76\x56\x6c\x65\x95\xdd\x88\x5c\x34\x25\xe2\xa5\x9c\x10\x36\xa9\xa0\xba\x8c\x9b\xce\x52\xbf\xee\xf9\x79\xda\x2e\xfc\x67\x03\x68\x21\x52\xb7\x43\xda\x06\xe1\x9e\xd2\x1e\xb7\x70\x3f\x39\x9f\xe4\x51\x17\x28\x0a\x83\x28\x16\xa7\xe9\x34\xa1\x03\x2e\xa4\x1c\xe7\x0e\x70\x9a\x99\xfb\x9d\x7b\x97\x7f\x74\xc1\x98\x2e\xf6\xfd\x3a\xe0\x3e\x53\xc9\x46\x22\xeb\xd8\xf4\x43\x0e\xbb\x2a\xe3\xad\x38\x88\xba\xc4\x8c\xfc\x12\xc7\xbf\xf0\x28\x74\x1f\x08\x53\xa3\x1c\xdb\x01\x61\x96\x0f\x85\xa2\xfd\x93\xc3\xae\xc5\xb9\x4e\x3a\xd1\xa9\x34\xe4\xee\x67\x1c\xff\xa3\xce\xfd\xe5\xc7\x46\xc3\x3b\xe9\xfa\x50\x35\x67\x44\xb1\xb9\x61\x2c\x30\xdb\x04\xa8\x04\x69\x3f\x09\x9b\x9e\xf7\x00\x70\x82\x25\x60\x89\xb1\x0a\x99\xef\x76\x79\x18\x61\x58\x01\xa1\x58\x5f\xf6\x4d\xcf\xb8\x69\x3b\xb7\xb9\x86\xf9\x54\xf7\x8e\x46\xf5\xcd\x9a\x54\x09\x4b\x4a\xa6\xa9\x92\x31\x21\x0b\x9e\x7a\xc9\xce\x74\x4f\x5b\x3a\x73\xda\x7d\xa5\xe3\xbf\xcc\x11\x7f\x59\xd8\xa5\xc9\x00\x67\x3f\x60\x98\xe2\x16\xd1\x24\xda\x59\xe4\x04\x02\xa7\x1c\xa9\x9d\x1c\xf3\x84\xe6\x54\xf7\x00\xe6\xa0\xee\xb5\xe3\x34\x80\x3f\xb0\x1f\xea\xde\x83\xcf\x56\x21\xf8\xcf\x7b\x7e\xdd\xeb\x06\xbd\x07\xf1\x95\xf9\x1c\x0d\x1b\x51\xdc\x64\x9f\x98\x64\xf5\x6a\xdd\x18\xbb\x1d\x21\x64\xba\x3c\xa1\x30\x14\xf7\xed\x93\xfe\x4c\xf5\x2b\x03\x2b\x47\xfc\x02\xe7\x94\xf2\x97\x72\x23\x6a\x6e\x38\x93\x12\xc7\xc5\xd2\x40\x3f\xb8\x9f\xfd\x9c\xc3\xd4\x3b\xf7\x2d\x8e\xff\x1a\x67\xde\x5a\xa3\xa4\xc6\x81\xef\x2f\x44\xbd\xb7\xfb\x40\xd0\x47\x49\x86\x7d\x33\x4d\x92\x47\xb2\xeb\x09\xb1\x58\x0c\x3c\x0a\x81\x93\xfb\x70\x50\xd8\x78\xd8\xea\x3e\x54\x93\xcf\x37\xa8\x98\x12\x6b\xd5\x6f\xd5\x98\x1b\xa8\x56\x9e\x92\x3b\xc6\x3b\x6a\xfe\xcb\x6b\x67\x7b\x42\x4d\x56\x55\xa5\x52\xea\x25\xa3\x54\x2f\xed\xf5\x63\xbd\xfa\x91\x24\x4d\xdf\xd6\xda\xf1\xa2\xc3\x55\x25\x34\x0f\x32\x11\xf6\xc4\x19\x02\xa0\xfd\x53\x64\x2d\x79\xa8\x2f\x3a\xff\x81\x20\x2a\x4e\xa4\x99\x06\x00\x3f\x05\x92\x16\x1d\xf5\xbe\x4e\xdd\x36\x6e\xb7\xfd\x9c\xc3\xae\x08\x01\x93\x1c\xa3\x8a\x3f\xe6\x8c\x41\x9c\x1f\x9a\xaa\x90\xc6\xff\x51\x30\x23\xc2\xc5\xed\x48\x04\xf4\x90\x0f\x55\x18\x6c\xe8\x3b\xe8\x83\x8a\x2c\x47\xf7\x01\x34\x14\x7f\x3d\xba\x0d\xad\x18\x99\x9d\x36\x74\x5b\x83\xcd\xde\x73\x25\x9b\x33\x5d\xae\x42\x8a\x52\xcf\xf8\x6a\x04\x24\x00\x66\x1c\xe9\xa9\x7e\x01\xd1\x64\x0f\x20\x28\xb1\xe5\xbd\xed\xfe\xfd\x15\xfe\xbf\x39\xe3\xbe\x28\x9d\xd6\x87\xc3\x11\x92\xd0\x53\xe5\x6b\xe0\x63\x20\xd5\x6b\x01\x6d\x09\x5c\xb6\x83\xda\x5d\xe2\xe8\x81\xbb\x30\x3a\xc1\x0c\x1b\x2f\x6f\xa9\x7b\xbd\x38\x48\x12\xf2\x19\x07\x56\xf7\x20\x96\x6f\x6f\x6f\x7a\x67\x73\xee\x55\xb7\x5c\x9b\x35\xc7\xb6\x2c\x4a\xf2\x82\x07\x25\x80\xa9\x8f\x4f\xb2\x17\xd5\xd8\x24\x35\x24\x77\xbf\xea\xf8\xf3\x94\xba\x64\x7f\x93\x9f\xa8\x7b\xbd\xa0\xdd\xc6\x1b\x21\xc3\x9d\x35\x09\xf5\x98\xda\xae\x63\x4f\x63\xf7\x8e\x89\x7c\xda\xd6\x90\x5e\x74\x0e\xb2\x27\x5b\xdb\x74\x2f\x28\x5a\x9d\x46\x97\x67\xab\xbc\x71\x9e\x0f\xdc\xfd\x2e\x20\xf1\x30\xf1\xe5\x93\x2a\xbe\x94\xcc\x11\xee\xa4\xbb\x0f\x52\xb1\xdd\x43\xeb\xee\xa1\xf5\xb1\x3b\xb4\xfe\xa1\x79\x40\x7c\xdf\x8e\x0f\x88\x0f\x97\x0f\x88\xea\x78\x78\xc7\xd7\xeb\x78\xd8\xbc\xe8\xbc\xc8\xd9\x5c\x99\x3e\xe7\xfe\x3f\x1a\x72\x75\x8c\x70\x53\xca\xf4\x38\x09\x57\x89\xf0\xfc\xd9\x3d\x56\x58\x9f\xf4\x51\x25\xe6\x80\x74\x65\x99\x77\x7b\x62\xa5\x41\xb8\xda\x2f\xed\xf1\x9f\x5e\x7a\x56\xda\x10\x00\xce\x31\xf0\x9e\x96\xae\xc8\x85\x0c\xa4\x9e\x9a\x30\x59\xc8\x6f\x84\x5b\x2a\x28\x17\x4b\xde\x7e\x6c\x82\x7d\x5c\x62\x82\x7f\xc8\x61\x87\xb7\xe4\x4c\x0b\xe1\x9e\x6f\x72\x96\x4c\x43\xa2\x3c\x5f\x86\x3c\x07\xca\x1d\xc9\x83\x2a\x9f\x7f\x7b\xba\xf2\xa8\xcf\x66\xd1\x8a\x46\x90\x84\x0d\x54\xd6\xd9\x3f\x9b\xd3\xf8\x0b\x3b\x9e\xc6\x6f\x1b\x63\xe7\x30\x9a\x99\xdb\x1d\x8f\x6c\xb7\xd4\xf7\x5f\x3f\x73\xc8\x8b\x1f\x67\x21\xfe\x6e\x33\x2e\xdf\x7d\xff\xd5\xfe\xcb\x9d\x4d\x3e\xd2\x2e\xec\x2d\xcd\x78\x27\xf1\x0f\xe4\x41\x5c\x85\xe9\x4f\x61\x8c\xfe\x54\x3b\x88\x62\xb1\xb9\xa8\xf3\x94\x15\xe8\x2b\x37\x73\x0a\xda\x37\xaa\x6d\xeb\x09\x3f\x7e\x15\xfb\xde\x2b\xd8\x15\xc6\x7b\xf7\x22\x73\xf7\xac\x0c\x0a\xee\xff\x3a\xb3\xc3\xff\x87\x4f\x21\x15\xd9\xdb\xf8\x00\x14\x92\x1c\x24\xde\xb4\x44\x19\x30\x10\x02\x72\x79\x65\x5e\x3e\xfc\x0b\x3d\x73\x2d\x0a\x20\xa3\x29\x6a\xa1\x01\x27\xd6\xf4\xce\x24\x2d\xae\xab\x53\x3e\x2d\xa9\x88\xe8\x26\x63\xf3\xed\xa1\x00\xea\x12\xb0\x07\xfa\x5a\x10\xee\x81\x4d\x29\x08\x06\x1f\x7f\x16\x5e\xfa\xb0\xed\x85\xa1\x62\x4a\x55\x25\x66\xbc\x0b\xa3\x07\xd6\x7f\xf2\x28\x50\x1d\x40\x0e\x21\xd0\x51\xe5\x9a\x8c\x28\xef\x04\x8c\xec\x56\xcb\x63\xec\x7e\xb4\x8e\x45\x14\xd6\x2a\x79\x1d\x09\x5c\xc4\x68\x38\xe8\xf2\xd2\xdb\x17\x00\xd8\x32\xaf\x2b\xd6\xd1\xc2\xdc\x29\x6f\x25\x4e\x5b\xe7\x73\x84\x04\x99\x8e\x63\xe3\x19\xa6\x03\x79\x08\x48\x1a\x33\x73\x8b\xcb\xf3\x27\xe6\x67\xa6\x97\xe7\x7c\xf4\x43\xaa\xab\x5c\x93\xd4\xeb\xf0\x20\xe4\x59\x5e\x37\x08\x65\x5b\xa9\x68\x06\xac\x27\x4f\x87\xcf\x78\x77\xcf\x2d\x36\xe4\xcb\xe9\xa5\xd3\xcd\x23\x66\x54\xb7\x87\xec\xb7\x40\x8a\xa9\x2f\xdb\x40\xaf\xce\xc9\x85\xe0\x26\xd1\x67\x8b\x27\x66\x6e\x3e\x7a\xdb\x0d\x4d\xe6\xdd\xd8\xf4\x4e\xa7\x49\x43\x54\x5c\x54\x47\x28\x0b\x42\xb1\x20\x90\x29\x02\xca\x4c\x33\x03\x49\xd3\x6e\x8a\xd1\x62\xf2\xec\xeb\x27\xca\xf2\x58\x67\x9e\x76\x47\xc2\xe8\x18\xa1\xd7\x07\x45\x9a\x0d\xbc\x82\x5f\x28\x46\xd6\xf2\xe6\xe6\x51\xaa\xe7\xad\x37\xdd\x72\x1b\x4e\xc9\x2e\x62\x76\x06\x38\x0c\xaa\x60\x63\x49\xe8\xee\xd3\xa2\xb6\xb4\xca\xc5\xea\xef\xf1\x56\x53\x07\xf5\x6b\xde\x77\x25\x36\x20\x4a\x78\x3d\xca\x39\x12\x58\x23\x46\xa8\x2a\xac\x5a\x44\x60\xd9\x86\x69\x80\x7a\x45\xdb\xfb\x0a\x92\xcc\x01\xf1\x91\x4b\x63\x9e\x85\x92\x02\xa0\x42\xd8\x1a\xec\x91\xe5\x93\x4b\x10\x40\x9b\x77\x82\xf3\x3c\x07\xd0\x97\x32\xc4\x88\x9a\x2c\x51\x02\xdd\x82\x36\x8e\x26\x63\x60\x49\x34\x62\x00\x83\x1c\x2d\x62\x69\xe6\x3d\x73\xfa\xd4\xc9\xba\xde\xc5\x71\xd9\x40\x87\x81\xbd\x75\x25\xc8\xf9\x2d\x37\xc9\x89\x26\xa9\xca\x80\x18\x1d\xe3\x9f\x8f\x31\x08\x90\xc5\xef\x0e\xc1\xdf\x0d\xf1\xbf\xbb\xe7\xee\x99\x3f\xed\x19\x53\x04\x9e\xc2\xfb\x66\xb3\xa9\xbf\x9b\x3b\x3d\x5b\xfd\xd5\x61\xcb\x06\xb9\x25\x44\xdc\xd7\xd4\x18\xd3\xbb\x80\xfb\x48\xcd\x7f\xd0\xd8\x14\x4a\x6e\x9b\xd2\x5c\xe6\xdd\x07\x24\x3f\xe6\x87\x19\xf7\x7c\x29\x72\xfd\xba\x92\x61\x38\xb2\x52\xc2\x58\x07\xb9\x33\xec\x14\xbb\x6f\xe7\x10\x16\x8a\xaa\x51\x9c\xd1\x9e\x38\xdc\xe0\x6e\xd0\x13\x47\xb9\x5c\x34\xba\x81\x91\xcb\x17\x1d\x6f\x64\xd7\xec\x73\xf7\x74\x83\x1e\x63\x2f\x39\xc0\x9e\x62\xdd\x53\xc2\x65\xb6\x3c\x4e\x36\x4f\xf2\x20\xe7\xe0\x82\xf4\x89\x49\xff\x9b\xd5\x2f\xfb\xa4\x0b\x8f\xc7\x03\xe8\xbf\x67\xff\xee\x79\x67\x37\xc0\x69\x37\xc0\xe9\xf2\x98\x0e\x62\xe9\xf9\xd5\xf2\xfd\x0a\xcf\x2f\xd9\x55\x15\x9c\x09\x47\xd9\x0d\xac\x39\xc6\x4b\xa1\x62\xf5\x5f\x74\x56\x36\x3f\x97\xde\xe5\x3e\x55\xa3\xcb\x98\xb9\x94\x8e\xa3\x4a\x82\x94\xd1\x64\x3e\xdb\x64\x63\x88\x4d\x17\xd2\x70\x89\xb7\xfa\x59\x54\x0c\xf0\x52\x0e\x4e\x9f\x3f\xd7\xf4\x8f\x56\xbe\xb1\xa6\x10\x66\xe5\xf1\x04\x68\x09\xc3\xe6\x86\xb3\x5f\x54\x21\xe9\x5f\xd8\x70\x0e\x64\xfd\x64\x3a\x3f\x9b\xf3\x6c\xc3\x71\x81\xc0\x15\x54\xbc\x20\x06\x38\xd8\x7c\xc3\xd9\xdf\x46\x1e\x54\x5b\x98\x35\x58\x8f\x5d\xd1\x49\xf3\x82\x7c\x75\xdd\xc0\x5f\x32\x7e\x7a\x21\x47\x82\x5e\x9e\x6b\x0f\x64\xa8\x04\x68\x39\x58\xad\x7e\x0e\x57\x9e\xf7\x1a\xc9\xc8\xb7\x1d\x3c\xea\x91\xd7\xce\xb8\xeb\x78\x67\x8d\xb1\x4c\xf1\xb2\xba\x3f\x5e\x1b\xc3\x4b\xb5\x55\x8e\x5e\xff\x93\x8e\x41\xf5\x7a\xf9\x59\x62\x87\x9d\x80\xd3\x6e\x54\xd0\xc1\x82\x53\xfc\x81\x91\x4d\x2b\x48\xbc\x22\x38\xcf\xe5\xed\x5c\x9f\x5b\x07\x18\x52\xc2\xb1\x9a\x46\x32\x93\xbb\x98\x18\x26\x55\x00\xc8\xcf\xd7\xd8\xe3\xc9\xd1\x69\x26\xe8\x05\xc0\xd6\x1d\xf1\xdc\xdd\xa8\xf9\x5f\x73\x2a\x5e\xd8\x2b\xa9\x65\xbe\x81\xd6\x91\xcb\x93\xd6\x14\x85\xee\x1a\x2a\xcd\x41\xa3\x16\x79\x76\xae\x56\xa4\x07\x75\x11\x1d\x42\x0a\x35\xea\xe8\x7b\x77\x30\x47\x1c\x12\x8e\x3e\x4b\xcf\x4c\xfb\xa8\xda\x8b\x8d\x09\xc3\x3b\x74\xbd\x06\x80\xad\x9e\x8a\x43\x63\x45\x5b\x84\xfc\xa2\x4e\x0b\x67\xb3\xb4\x67\xbe\x1c\x77\x77\xff\x77\x13\xe4\x8e\xc6\xc3\xb3\x49\x1e\xb4\xf9\xd2\x20\x6f\x15\x71\xee\xfe\xf1\x84\xff\x4b\x13\x55\x6f\xec\x6e\x13\x2a\x7c\xd4\x8a\x8a\x78\xa0\x3c\xfb\xfb\xf0\xb5\x97\xe3\xe7\x75\xcb\x43\x1a\x40\xa8\xd1\x59\x8c\x27\x45\x06\xf1\x10\xe4\x6c\x1e\x78\xbd\x18\xd8\x6e\x21\x1d\xb9\xe1\x65\x62\x3f\x87\x3e\xf5\xaf\xf7\xc5\x3f\xe8\xfd\x07\xe1\x5e\xc8\x7f\x0e\x4a\x68\x08\x77\x32\xe0\xe5\xdf\xcb\x78\x3b\xba\x00\xbb\x04\xd5\x87\x2a\xd2\xf4\x96\x90\xad\xf9\x7a\x0d\xb0\x5c\xaa\x2b\x02\x07\x53\x68\x86\x47\xc0\x93\x88\x01\x4c\xc7\x16\x1c\x94\x38\x1e\xd1\x58\xb3\x3b\x44\x92\xb5\x34\x0a\x69\x4b\x11\x03\xcc\xd8\x1c\xb1\x82\x1e\x43\x47\x0d\xbf\x9d\xa6\x53\xd7\xfb\x52\x58\xc0\xcf\x95\x20\x13\xda\x26\xfe\xf9\x5c\xbf\xee\xf1\xa2\xd5\xd4\x9f\x37\xed\xcf\x9b\xfa\xf3\xa6\xfe\x7c\xcc\x80\xbf\xdb\x61\xdf\x44\x23\x02\xee\x86\x0b\x59\xb4\x16\xc5\x7c\x95\xcf\xe5\xad\x20\xc6\xab\xa0\x1f\x70\xfc\x17\x3b\x9b\x7c\xe4\x11\x3e\x90\x64\x21\x81\x8f\x85\x28\x00\x7d\x0e\x1d\x35\xb9\x1c\x58\xc4\x3b\x80\x15\xb5\x2a\xc6\x18\xce\x6e\x3d\x99\x69\x8e\xc7\x38\xa1\xa1\xf5\x02\xc0\x1e\xa0\x04\xb6\x58\xfc\x71\x87\x49\x19\xed\xbe\xd6\x19\x83\x7e\x50\x92\x89\x27\x96\x2a\x05\xe2\x03\xed\x2d\x0b\xc3\x75\xf1\xa4\x9d\xe3\xae\x27\xbd\x2d\xa4\x95\x46\xee\x49\x33\xe2\xbc\x7c\xa1\x68\xb2\xdf\xaf\xb1\x2b\xb3\x7e\x52\x44\x5d\xf2\x7b\xfd\xd5\x1a\x9b\xd9\x86\x00\x57\x09\xcb\x35\xfe\x8a\x63\x66\x7b\x29\x42\x5c\x25\xe6\xd2\xc5\xb6\x3a\x80\xa3\x42\x76\x9b\x45\xc3\x39\x59\x7d\x2c\x74\x25\x74\xbc\x04\x47\x50\xdc\x7c\x91\x01\xb9\x6d\x47\x4a\xf4\x60\x31\x53\x34\x87\x59\x1d\x5b\xae\x13\x47\xa3\x94\xeb\xaf\x77\x98\xdc\xc6\xdd\x57\x6d\x63\xdc\x89\x7c\xb9\xdc\x8b\x67\x28\xaf\x6d\xf7\x1f\x98\x69\x86\x77\x3e\x98\x97\xe4\x00\xe7\xbe\xd6\xf1\x9f\x2f\x9d\xe1\x90\xbc\x56\x8b\x8d\xb4\x6d\x3b\xc8\xe6\x32\x3e\xac\x14\x5f\x95\xa4\xca\x9f\xce\xa2\xa8\x5f\x96\xa6\x13\x21\x7f\xe4\x17\x03\xb1\x65\x04\x00\x0f\xe8\x1d\xbc\xfe\xe0\xb8\x95\xff\x6a\xed\x08\x3c\xb3\x34\x3f\x9b\x45\x42\x2b\x73\xff\xb5\xe6\xff\x7c\x6d\xba\xfc\xb8\xaa\xf2\x51\x12\x47\x09\xf7\x66\x96\xe6\xbd\x90\xbe\xb2\x7c\x22\x0c\xd9\x97\xf3\x42\xee\xce\xdd\x15\x0e\x7b\xdf\x7a\x54\x74\x22\x0a\x19\x42\x9d\x47\x7b\xfb\xe2\x81\xb0\xd4\x0d\x42\x31\xd0\x65\x59\x98\xb6\x6d\x88\x0e\x84\xda\xf0\x5e\x87\x77\x79\x16\xa8\x1e\xd1\x80\x52\x81\x27\xe6\x01\x4e\xbe\x7a\x65\xa0\x29\x69\x6c\xd3\x0b\xf3\x12\x96\x1e\x27\x1d\x4e\x8c\x99\xa5\xf9\x79\x28\x84\xd8\x9d\xcc\x39\x6a\xf5\xf3\x71\x76\x8c\xdd\xb6\xd5\x59\x59\xee\x6a\xf6\x6b\x0e\xbb\x86\x86\x45\x68\x88\x0b\x40\x2a\xf3\x36\xc7\x3f\x57\x7e\x58\x35\x26\x42\x15\x45\xb6\x99\x11\x93\x49\xcc\x15\xfd\x91\x35\xa1\xcc\x26\xdc\xc1\x6e\x1f\xcd\xa7\x3f\xa2\x09\xb2\x62\xec\x65\x13\xec\x9a\x76\x9a\xad\x44\x61\xc8\x13\xa9\x3f\xfc\x53\xcd\xff\xf3\x5a\xf9\xe9\x48\xdd\x41\x7d\xf8\xd8\xab\x0d\x43\x55\xa9\x54\x1c\x4c\x8d\x41\xa5\x18\xbd\xc1\xe3\x27\x5b\xdf\xe1\xcd\xef\xb7\xbd\xc5\xff\x88\xc3\x0e\x88\x31\x5f\x48\xb3\x02\x28\xf8\x4e\xa8\x5f\xe6\x79\x05\xfb\x04\x27\x07\xa0\xd4\x07\xc9\x2a\xb7\x74\x20\xb9\x86\x11\x91\x6a\x1b\x3e\xf0\xa5\x09\x73\x2f\x15\xbf\x28\x4a\x60\xcf\x61\x4c\x6d\xfd\xa1\xfb\x74\x7f\x46\xff\x2a\x1d\xa7\x50\x58\x88\x95\x2f\xef\x19\xb0\x42\x59\x3f\x11\xa3\xa6\xd3\xd9\x8a\xc2\x57\x6b\xec\x3f\x4a\xe6\xfa\xc5\x34\x2d\x4e\x44\x31\xcf\x07\x79\xc1\xbb\xee\x9f\xd7\xfc\x0f\xd6\xaa\xdf\xe1\x45\x25\x49\x2e\x64\x14\xd0\x0c\xf7\x9a\x54\x08\x00\xb5\xfb\xc4\xb0\x10\x00\xa5\x3d\x0a\x95\x2c\x4d\x0b\xaf\x1d\xc5\xa0\x0c\x16\xbc\xdb\xf4\xe4\x35\x86\x06\x15\x55\xf1\x0e\xb1\x48\x60\x90\xfc\x18\x39\x22\x4e\xff\xa8\x5c\xd1\x65\x77\x69\x41\x1a\x3c\x42\x9e\xc8\x40\x5a\xdc\xc8\xa9\x01\xc0\xa3\x5f\x2a\x1d\xec\x1b\x5b\xa9\xba\xe8\xfb\x48\xec\x85\x79\x87\xe7\xde\x4a\xbf\xc0\x5f\x10\xfe\x07\xa2\x1e\xcf\xd7\x5e\x91\xda\x1d\xff\x3b\x0e\xfb\x86\x51\x87\x10\x21\xd2\x5e\xe6\x8c\x7a\x0b\xb3\xae\x20\xb0\x4e\xfb\x18\x26\x23\x3b\xc3\x2c\xed\xf5\xf4\x4d\xa6\x75\x00\x23\x6f\x4e\x60\x69\xa3\x12\x68\xaa\xc8\x54\x36\xb0\x2e\x1c\xc7\xc6\x2d\xa1\x90\xed\x17\x0b\x63\x7e\x61\xc6\x7d\xa6\x7f\x1f\xfd\xb9\xdd\xc3\xbe\x48\x32\xf6\xa0\x4f\xa5\x2c\xcc\xcf\xca\x52\x16\xe6\x67\xb7\x5b\x8a\x48\x32\xb6\x94\x9f\x72\x98\x36\x7e\xb8\x6f\x74\x46\x03\x61\x54\x5a\x13\x44\xaa\xb2\x0e\xf5\xa0\xca\xef\xd2\x4c\x09\x90\x72\x84\x25\x81\x7d\xc4\x61\x15\x06\x1a\xf7\x57\x1c\x36\xbf\x65\xd5\x6f\x28\x79\xb9\x05\xc9\x70\x09\x5b\x3d\x08\x98\x29\xf1\x48\x80\xd3\x77\xec\xa1\xe0\x2d\x0e\xfb\x86\x60\xd4\x79\xeb\xbb\x1c\x7f\x30\xea\xe5\x56\x44\x22\xaa\x85\x4a\x1c\x7a\x5c\xa5\x06\x91\xd0\x4f\x8c\xd0\x65\x73\x5b\x15\x52\xce\x9e\x2b\xef\xae\x31\x97\x84\xff\x89\x98\x5f\x20\x8f\x7a\xf7\x4d\x35\xff\x8f\x9c\xe1\xe7\x55\x1a\x89\x78\xad\x54\x31\xd2\x49\xd2\xcc\x4b\xa2\xb8\x4a\x35\x31\xbe\xb6\x95\x5d\xd4\xe2\x54\x24\x0a\x6c\xf8\xe0\x54\x17\xad\x71\x14\x5a\x8a\xef\x05\x00\xb8\xe5\xbd\x9e\x99\xa1\x41\xf9\x41\x0b\xc4\xa7\x57\x3e\xa1\xa2\x6c\x3d\x4a\xb6\x5a\x05\xd2\x7d\xc1\x2e\x3a\xec\x09\x54\xda\x42\x96\xb6\xc0\xf1\x77\x79\xd0\xe3\xb9\xfb\x29\xc7\xff\x2d\x67\xba\xea\x55\x55\xff\xc9\x1a\xdb\x5f\x36\xc7\xf6\x64\x2a\x41\xca\x29\x7c\xc1\x4a\x5b\x3a\x44\xa0\x45\xdd\xb0\xae\xd9\x1f\x4b\x25\xb7\x1d\x07\xab\x25\x03\xdb\x18\x71\xf9\xfd\x13\xec\x3f\x4a\x7b\x41\x68\x5b\xdf\xfe\xb1\xe6\xff\x59\xad\xfa\x9d\x5c\x70\x86\xf1\xa0\xda\x12\x27\xb7\x00\xb4\xa2\x95\xed\x6f\x5e\x3f\x89\x79\x9e\x5b\x12\xd0\xde\x69\xc5\x26\x90\xdb\xdb\xcb\xa0\xe9\xa1\xb9\x2d\x18\x6c\x62\x6d\x1b\x51\xf7\xb1\x06\x37\xdb\x22\x88\xd5\x86\x88\x45\xe0\x1f\xea\x96\x4d\x66\x78\x3a\x49\x38\x0f\xe5\x06\x4b\xec\x81\x6a\xe2\x56\x99\xfc\x44\x95\xc7\x0d\xca\xfb\xae\xb4\xee\xfb\x46\xc6\x79\xbb\xaf\xbb\xd2\xff\x67\x13\x72\x80\x70\x06\xf0\x01\xe2\x31\xd7\xbd\x38\x5d\x05\x10\x08\x10\x78\x00\xad\xd2\xf6\xd0\x0c\x8f\x14\x3c\xb6\xc9\xb4\xcd\x33\x64\xee\x02\xe5\xba\x9f\x44\xe0\xf4\x1c\x78\x46\x38\xb1\x98\xcb\xc3\x41\xc6\x97\x0f\xbc\x60\xab\xa0\x05\x96\xbd\xff\xf5\x07\xd8\xcf\xd4\xd8\xe3\x82\xd5\xd5\x8c\xaf\x42\xe6\xa2\x75\xee\xeb\x6a\xec\x96\x2d\x06\xd0\x4f\xdb\x49\xfd\x4f\x39\xa5\x27\xb4\xe8\xd3\x1e\xde\xae\x93\x71\x04\x79\xb5\x94\x3f\x5d\x27\x5d\x87\xd5\xd7\x8f\xe2\x90\xac\x25\xb1\x42\x8b\x8d\x72\xb3\x9d\x20\xe2\x2b\xca\x80\x80\xa1\x42\x0a\xc9\x45\x45\x8c\x46\x76\xbb\x18\x14\xc2\x24\x58\x25\xe5\x28\x8c\x32\xde\x2a\xc8\x21\x1b\x76\x07\x4c\x22\xd7\x5e\x5e\xa4\xdd\x9e\xde\xe0\x74\x2e\xbb\x5c\x24\xbb\xfe\xc1\x8f\xe1\x7d\x79\xc7\xb8\x2e\x7f\xd6\x4e\xdd\x2a\xc7\x61\x2c\xb0\x17\x3a\x6c\x2f\x30\xb9\xb9\x17\xfc\x9b\x70\x71\x60\xcc\xac\x50\x64\x60\x27\x35\xc4\x61\xd5\x4a\x35\x65\xf5\xcd\xec\x46\x76\x64\x8b\x22\x45\xe7\x7b\xd1\xe9\x6d\x7e\x41\x7b\xca\xbd\xef\xd2\x70\x1e\xaa\xc1\x1d\x3e\x3d\x31\x0a\xdc\x61\x39\x3d\xcf\x13\xc9\x2e\xf6\xcb\x13\xfe\x71\xf3\x81\xf6\xc8\x34\xc2\x89\x21\x64\x0d\xd8\xab\x5a\x1c\xe0\x14\xfa\x62\xe2\x89\x54\x10\xaf\xd6\x0f\x81\xef\xd1\x86\x8f\xa9\xb1\x1f\x70\x98\x7a\xe7\x3e\xe2\xf8\x83\x69\xfa\xa1\xdc\xaf\x92\x82\x27\x70\xc1\x26\x5f\x90\x36\x08\x59\x83\x19\xc8\xac\x1a\xf8\x0c\x03\x0c\x35\x2a\xf7\xa4\x7e\x90\xec\x90\x79\x40\x6d\x45\x4f\x7b\x3a\xfc\xd0\x9c\x78\x1f\x70\xd8\xb5\xfc\x42\x2f\x22\xbe\x0e\x00\x71\xce\xdd\x5f\x70\x24\x41\xf2\xeb\x9d\xb9\xf2\x5b\xa5\xf0\x18\x51\x33\xe0\x1d\x27\xf4\x8d\x2d\x56\xb9\x43\xa0\xf0\x39\xf8\xaa\x51\xd5\x15\xac\x99\x3f\x54\xa6\x3f\x22\x2f\x0b\x65\xea\x3d\x93\xec\x04\x8d\x31\xb2\x7a\xd1\x76\x92\xda\x11\x97\x95\x11\x28\xd3\x0b\xf3\x4b\x38\xa2\xe0\x3c\xf4\x77\xfb\xfd\x29\xfb\x91\x6d\xf4\xd3\xef\xc6\xbb\x11\xbd\x73\x17\x36\x68\xc7\xfb\xca\xb7\x4b\xe7\x91\xc0\x14\x3d\xcb\x6c\x91\x2d\x54\x8a\x9e\x1d\x8c\xfd\xee\x1e\xb6\x83\x3d\x6c\xde\xd8\xc3\xc6\xb0\x43\x6e\xc1\xe3\xeb\xa2\x93\x6e\xbe\x41\x9c\x74\x9f\xa6\x23\x4b\x4a\x23\x5b\xda\x1d\xec\x95\x5c\x19\x45\xf2\x6f\x93\xec\xe6\x51\xa0\xef\x47\x9a\xf7\x8a\x8d\x47\xec\x04\xf1\x42\x1a\x4e\xd3\x3b\x9e\x81\x53\xcf\xfb\x27\xfd\x46\x5e\x0e\xdc\x08\xbc\x8e\x4a\x22\x3d\x25\x28\x51\x73\xc3\xb9\x1a\xfe\x5a\x06\x70\xf8\x45\xde\xde\x70\xae\xe8\x06\x17\x16\x39\xb0\x70\xda\xf2\xe3\xaf\xf7\xb3\x47\x6a\xac\xf4\xbd\xfb\x65\x67\xcc\x55\x6c\xa9\xea\x33\x59\x9a\xe7\x24\x6c\x50\x47\x58\x94\xe7\x1a\xff\xed\x8e\x3a\xe3\x00\xf1\x82\x28\x45\x47\xfb\xdd\x31\xba\x0d\xb8\xe5\xc4\x3c\xc8\x6c\xea\x00\xb5\x06\x5a\x69\x92\xf7\xbb\x70\x38\xd0\x07\x18\x30\xea\x1a\x11\x2d\x89\x82\x79\x06\xc8\x49\xa0\x07\x43\x4e\xcd\xdc\x5b\x02\x12\x02\xd3\xd5\x9f\x7d\xdc\x61\xff\x19\x01\xf5\x67\x16\xce\x9e\x2d\xa2\x98\x74\x81\x05\x9e\xb5\x84\x68\x5c\xe5\xee\x3b\x1d\x89\xfb\xf8\x06\x87\xb0\xf7\x83\x35\x0e\xf0\x09\x33\x0b\x67\xbd\xbe\x4e\xe4\x1d\x52\x4b\x53\x5d\x9e\xa8\x7c\x10\x9e\x57\x3a\xcc\xcc\x2c\x9c\x3d\x4c\xd8\xbd\xa4\x22\x89\xea\xde\xe1\x45\x25\x40\x3d\xcb\x0a\x60\x8c\x82\x34\x7c\xca\x33\x08\x5d\x5b\x19\x1b\xd7\xcb\x1c\x66\xce\x00\xf7\x3b\x65\x2b\xa2\x7e\xaf\x27\x0e\xaf\xc0\x1c\x25\x51\x4c\x4a\xdd\x66\x1e\x59\x8d\xb0\x5c\x3d\x58\x77\x18\x26\xe3\xbc\x1b\xc0\x99\x09\x5c\x15\x4e\x45\x89\x2c\xd2\xae\xcf\x97\x6a\xec\x8a\xae\x7e\xe9\x7e\xa6\x26\x2b\xf4\xc1\x9a\xf1\x5c\xb1\x09\xa4\xeb\x63\x2a\x99\xc9\xaf\x8b\x54\xa2\x13\x5a\xd5\x83\xba\x23\xe7\x44\x98\xae\x27\x4d\x4f\xe8\x07\xa6\x7d\xef\x08\xde\x0a\x78\xa5\x92\xed\xdb\x9d\x1b\xa4\x95\x19\x14\x3e\xfb\x26\xfe\xde\x85\x69\x98\x4e\xcb\xe9\xb7\xf1\x2c\x35\xe0\x76\x31\xd8\xb7\x10\x13\x19\x62\x9b\x39\x81\x60\x89\x43\xfd\x9c\xa4\x44\x96\xcc\x0e\x26\xd5\x77\xd3\x83\x09\x2a\xe9\xe0\xd0\x9e\x17\xe4\x70\x3e\x87\xc9\x64\xe6\x49\x19\xd0\xf5\x70\xae\x29\xb0\xec\x4e\xff\xed\xfd\x16\xc4\x82\x41\x4f\xd7\x8e\x56\x4f\x05\xbd\xd3\x69\xc8\xf1\xc7\x12\x52\xe9\xbf\x66\xbf\x1f\x8f\x7c\x6b\xb3\x61\x98\x10\x01\x40\xa5\x2a\x57\x7d\xe0\xa9\x1c\x70\x11\x60\x1b\x3d\x5a\xc6\x72\x34\x45\xee\xcd\x0d\xe7\x80\x42\x19\xdb\x70\x80\x4a\x7e\xc3\xb9\x86\xd8\x5c\x31\x9b\x32\xb2\xf6\x97\xf6\xb2\x1e\x91\xce\x77\xfc\x07\x4d\xd2\x79\x75\x20\xb1\xc9\x55\x94\xc5\x45\x55\xab\x1c\x11\xa4\x6e\x46\x22\x30\x39\xc2\x6d\xa8\x4d\x1f\xf4\x5f\x99\xae\xa7\x9b\xf9\x5c\x01\x2f\x57\x96\x8d\x6f\x2e\x6b\x05\x7e\xce\x61\x8f\x93\x62\x4b\xaa\x7d\xaf\x77\xfc\x57\x28\xba\x67\xa9\xfb\x95\xeb\x53\x7e\xbf\x8d\x5a\xe9\xfb\xde\x28\xc1\xe1\x12\x9b\x53\xdd\x32\xf0\xe9\x57\x10\x48\x65\xd5\xf9\xa5\x0e\x9b\xe8\x47\xa1\xfb\x62\xc7\x5f\x3f\x3b\x3f\x3b\x54\x35\xf1\xec\xeb\x58\x9d\xf7\x38\x6c\x68\x66\xb9\x6f\x71\xfc\x1f\x74\xee\x2b\x3d\xf5\x42\xde\x8a\x83\x4c\xdd\x04\x9f\xe7\x83\x71\x15\xf5\x5a\x69\x96\xf1\xbc\x07\x07\x19\xd2\x87\xad\x2c\xe5\xa1\x46\x07\x1d\x6d\x77\xf8\xdf\x7b\x45\x25\xf1\x82\x01\x05\xee\xbe\xee\x0a\xff\xae\x05\xb1\xa3\xd2\x03\x54\x32\xd1\x31\x0b\x7c\x54\x0a\x9e\xe1\x96\x2b\x3f\xc8\x35\xae\x0d\x9c\xde\x6d\x83\xdf\xef\x31\xf6\x85\xbd\x6c\xaa\x07\x2d\xce\x78\x38\x0b\xb8\x0e\x1a\x0b\x67\x7e\x15\x5c\x45\xf0\xf1\x9c\x64\x3a\x74\x7f\x69\xaf\xff\x85\x3d\xcb\xe2\x18\x86\x5f\xca\x8d\x1d\xf3\x41\x95\x00\x5f\xd0\x56\x93\x02\xbe\x1e\xed\x39\x79\x50\x44\x79\x7b\x20\xa1\x02\xb0\x9e\xfc\x82\xd8\x55\x01\xcf\xc6\xd8\x19\x2d\xc4\xf7\xba\xbc\x8b\x45\xe8\x84\x34\xcd\xb9\x84\xb7\x86\x7c\xd7\xa2\x14\x4e\x28\x56\x60\x1a\x0d\xa9\x91\x3d\xa2\x1e\xeb\x64\x92\xff\x5e\x75\x82\x9c\xc3\x22\x1b\x05\xd7\x8d\x60\xc8\xb9\xd0\xac\xbb\x08\x7a\x10\xad\x76\x14\xa5\x05\x84\x73\x05\xad\x8e\x91\x6d\x97\xf3\x02\x8d\x23\x12\x4d\xd1\x18\x09\x23\xc8\x4e\x28\x14\x24\x35\x55\xec\xa5\xb2\xac\x97\x86\xa3\xb2\xbb\xd0\x21\xe2\x70\x1d\x90\x34\xfa\x85\xe8\x13\x51\xc7\x95\x81\x17\x15\x00\xb8\x00\x87\x8d\x2c\xed\xaf\x62\x4b\x78\x4c\x05\xdb\xfe\x69\x88\x5f\x01\xa6\x69\x1f\x1b\xe7\xcb\x79\x2e\xb2\xa3\x5d\x12\xda\x27\x0e\xe1\x30\xae\xb8\x72\x34\x5a\x38\x37\x56\x09\x2a\x30\x16\x5f\xc5\x1d\x2a\x8b\x43\xb9\x81\x84\xde\x89\x56\x3b\xb2\x67\xe5\x45\xb8\x3d\x22\xdb\xf0\x37\x92\xab\xe6\x01\x68\x02\x0f\x4b\x94\x19\xec\x4f\xf7\xb0\xe6\xa8\xee\x1d\x31\xdb\x7f\x62\x8f\xff\x99\x09\x72\x66\x50\x03\x60\x0d\xe1\x88\x09\xab\xe8\x3c\xbb\x42\x9f\x2c\xcc\x19\x50\x44\x5d\xae\xfc\x0b\x2d\xe7\x02\xb9\x72\x42\x2f\x4d\xa8\xff\x45\x8f\xa9\xa8\xd0\xed\xd5\xa0\x05\x11\x4b\xa8\xea\xc8\x5a\xa4\x5d\x51\xaa\x38\x30\x12\x8c\x8b\xa8\x82\xa2\x31\x25\x7e\xc2\xb0\xcf\x91\x7d\x54\xbc\x44\xa8\x78\x3c\x34\x1e\xc6\x6a\x93\xab\x84\x58\x8a\x69\xa6\xee\x91\x8a\x0c\x3c\x7f\x81\xee\xa5\x0f\x97\x4f\x7c\x4d\x22\x6c\x8a\x8c\xe0\xcc\x2a\xd4\x74\x6c\xd2\x03\x64\x9f\xa7\xab\xa1\x6e\x3f\x2e\xa2\x5e\xac\xa7\x28\x16\x15\x53\x94\x1d\xc9\x10\x7b\x8a\x89\xd2\x88\x8f\xcc\x1c\x67\xbc\x6a\x12\xe2\x30\x07\x28\x12\x5a\xa7\xa0\x88\xf3\xac\x9b\x2b\xb7\x3d\x14\x46\x51\x69\x8e\xdd\xc4\x8e\xb2\x1b\x36\x9d\x63\xe5\xb9\xf5\x23\x13\xa5\x10\x33\xfc\x6c\x89\xb7\x32\x5e\xdc\xc7\x15\x16\xa6\xfb\xe5\x9a\x5f\x1f\x7a\x4a\x40\xfa\x42\xa0\xd3\x5e\x14\x78\xf8\x51\x73\xc3\x99\x38\x5f\xd2\x90\x7e\xb6\xc6\xee\x67\xe2\xa9\x7b\xc6\xbf\x5b\x08\x34\x63\xff\xca\x21\x15\x32\x0c\x8a\x2c\xa1\xdb\x9b\x9e\xa6\xef\x23\x40\x30\xfa\xee\x3c\x1f\xd8\xe4\xbe\x0e\xa9\x5e\xdf\xe1\xa7\xa7\x87\xb5\xac\xa2\xd2\x4e\x60\x93\xe3\x87\x69\x2b\x9f\x6a\xa5\x49\x8b\xf7\x8a\x7c\x4a\x9c\x81\xd6\x22\xbe\x3e\x45\x88\xfe\x0d\xb1\xf4\x1b\x64\xff\x9a\x02\x65\x6a\xea\x3a\xf8\xc7\xac\xc6\x19\x36\x29\x6f\x89\xdc\x19\xff\x66\xc4\x38\x18\x58\x50\xb0\xd8\x3d\x80\x7f\x5f\xe4\xd0\x03\x72\x58\x09\xfa\xde\xba\xdd\xff\xd9\x49\x76\xd8\x18\x1e\x45\x2d\x08\xec\x46\x64\x43\x59\x8a\xa5\x25\xef\xe1\x49\xff\x96\xa1\xa7\x16\xb0\x9a\xf6\xe4\x93\x06\x98\x5c\x7c\x97\x57\x1a\xf4\x3e\xb0\x6b\xd0\xdb\xb1\x41\xaf\x2d\x0d\x7a\xcf\xf6\xff\xd3\xc9\xea\xbe\x37\x17\xf1\xad\xec\x66\x76\xe3\xc8\x45\x3c\x7a\xf8\x77\x8d\x79\x3b\x30\xe6\xad\x18\xc6\xbc\xfb\x77\x16\xbe\xf9\x9f\x46\x84\x6f\x5e\x74\x56\x37\xb7\xf2\xcd\xba\x77\x8f\x00\x63\xd4\x03\x5f\xb2\xf6\x0d\xad\x76\xc6\x7e\xdb\x16\x19\x41\xbf\xe8\x88\x2e\x68\xa9\xc0\x41\xeb\x12\xe8\x87\x27\xfd\x63\xd6\x25\x90\x26\x7e\xa6\x8b\x0d\x8c\x3a\x40\xe2\x89\xd2\x45\x50\x73\xc3\x01\xf0\x17\x9b\xe6\x6c\x57\x6a\xec\x5e\x2f\x3f\x86\xab\xf9\x3e\x63\x35\xdf\xb5\xc3\xeb\x65\x36\x47\xe8\x46\x63\x6c\xfc\x9b\xac\x30\xa1\x03\xb0\x79\x51\x3b\x80\xc6\x19\x53\xa3\xcd\x32\x82\x0c\xb6\x2e\x48\xe4\x75\x81\x9d\x69\x49\x7e\x98\x05\x94\xa3\x7e\x3f\x5a\xb3\xc0\xa6\xa4\x6a\x38\x9b\xae\x27\xeb\x41\x16\x4e\x2f\xcc\x2f\x64\x29\x05\xca\xb9\x6f\xad\xf9\xaf\x75\x16\xb5\xa6\x11\xd2\x57\x10\xaa\x21\xe6\x00\xc8\x91\x1e\x25\x48\x56\x11\x88\x33\x90\x4f\xc4\x7a\x03\xaf\x3c\x80\x3e\xe6\x06\x7b\x9f\xf8\x7f\x88\x0d\x88\x51\xbb\x0f\x75\x05\x64\x78\x0e\x4d\x79\xa1\xa3\xa5\xfd\xc2\x32\x4e\x77\x85\xd6\x6e\x09\xa8\xe7\x9b\xe4\x1c\x87\x2b\x42\xb4\x8d\x16\xca\x40\x92\xc8\xf6\x05\x38\xc6\x6e\x1b\xe3\x5e\x54\xd1\x53\x98\xcf\x89\x28\xe6\xec\x07\x27\xd8\x8d\x55\x8a\x79\x27\x2d\xc0\xbe\x4f\x98\xc3\xb3\x51\x7e\x9e\x60\x7e\xd1\x04\xfa\x97\x35\xff\xb6\x45\x53\x95\xc3\x14\xde\x8c\xf6\x0e\xea\xa9\xd4\x62\xc7\x38\xaf\x09\x9c\x37\x9c\x3d\xbd\x70\x7e\xd6\xea\x86\x97\xd7\xd8\xaf\x3b\x6c\x5f\x3b\x5f\x1e\xf4\x38\xf2\xa7\x1b\xae\xf5\x00\xca\x53\xa4\x08\x3c\x6d\xb0\x68\x43\x57\x98\xdf\x68\x8e\x00\x32\xc6\x43\x78\x02\xe1\x26\x26\xab\xca\xb5\x7e\xee\x42\xd3\xf3\xf9\x85\xe2\x26\xbf\xee\xf9\x17\xda\xb9\xf8\x27\x29\xda\xb9\xdf\xf4\xe6\xb5\x7b\x1d\x08\x24\xed\x0b\x8e\x09\xc4\x41\xde\xf0\x88\x6d\xda\x17\x71\xd0\x32\x77\xda\xbf\x69\x7e\x96\x8c\x23\x9a\x97\x78\xd3\x2e\x32\xb3\xfa\xed\x03\xac\x61\x0c\x4c\x3b\x4e\xd7\xc9\x67\x4a\x07\x26\xc6\xe9\xfa\x12\xec\x2c\xa0\x6f\xbf\xfa\x80\x3f\x65\x3f\xb2\x27\x92\x7e\x37\xfe\xe6\xfc\xa3\xfb\x77\xb7\xcc\x9d\x6e\x99\x85\x5c\xd3\xe7\xfd\xff\xfb\x1c\xfc\x75\x6e\xd4\x60\xe4\xdb\x08\xa4\x1a\x3f\x0b\x76\x37\xea\x1d\x6c\xd4\x7f\x69\xe2\xa6\xfc\xe1\x0e\x71\x53\x5e\xe5\x9c\x93\x79\x9d\x33\x50\xb7\x1f\x4b\x28\x95\x8b\x4e\x7f\xf3\xad\x7a\xd1\x5d\x50\x5b\xb5\x39\xd7\xb4\x07\x53\x69\xc7\xb6\xe5\x4d\xe5\xfd\xfe\xff\x66\xec\xc1\x4b\x45\x65\xc7\x19\x3e\xd3\xcf\x8b\xb4\x2b\xaf\x68\x66\xd5\xa8\xc0\xf5\x92\xfb\x3a\xe6\x3f\x63\xec\x17\x25\x06\x01\xe2\xe8\x4c\xd1\x91\x97\x9c\xec\x46\xa4\xdf\x70\xf6\xf5\xe2\x7e\x16\xc4\x1b\x0e\x2c\x2c\x4b\x4e\xfe\xe8\x01\xf6\x10\x9b\x14\xa3\x29\x56\x9a\xcb\xfd\x67\xc8\xbf\xd5\x90\x6b\xac\x2c\x91\x5a\xf1\x46\x8a\x09\xa0\x1c\xfc\x34\xa2\x9e\x49\x1e\xe0\x9f\x13\x29\xce\x89\x5e\xf5\xad\x2d\xe6\x65\x35\x46\x75\x72\x1f\xae\xf9\x5f\x71\xf0\x6f\x59\x22\xfd\xb2\xaf\xf6\xe4\xca\xa6\x26\xa3\xf9\xbe\x05\x4d\x36\x01\x86\x33\xe5\xdb\xdc\x4f\x42\x9e\x79\xe7\xc4\x74\xca\xa7\x8e\xc3\x7c\xb8\x73\xea\x38\x0d\xed\x9d\x53\xcd\x66\x73\xea\x38\x96\x74\xe7\x39\xda\x8d\xc1\x84\xad\xfa\x57\x96\x3d\xaa\x5f\xbd\x43\xe4\x97\xde\x4e\xb3\xae\x77\xee\x38\x8c\x49\x93\xb2\x6c\x52\x89\xe7\x0e\x1b\x3b\x7d\x1c\xe3\x65\x77\x4b\x88\x08\xb3\x3f\x3e\xed\x30\x96\x77\xd2\xac\xc0\xd9\xf0\x11\xc7\xff\x45\x47\xff\xc6\x56\x75\x34\x61\xa0\xbc\x57\x95\xed\xae\xcb\xe8\x44\x60\x62\x5c\x98\xd7\x87\x5b\x2f\x4c\x5b\x7d\x32\xa2\x8a\x6d\x46\x86\xe7\xa0\x6c\xc3\x19\x84\xda\x86\x17\x25\x6b\x29\x71\x10\x79\x71\x74\x9e\x7b\xe7\xc4\x32\x6b\x15\xb1\xb7\xca\x0b\xef\x38\x94\x2f\x8a\x17\xbd\x35\xaf\x03\x9e\xcb\x8d\x1a\xe9\x89\xff\x02\x87\x4d\xe6\x51\xb2\xda\x8f\x83\xcc\x2d\xfc\x55\xf9\xb7\x9a\x67\xf2\x77\xd5\xb8\x8f\x29\xd2\x9a\x71\xea\x71\xe8\xe1\xdc\xb3\xba\xf9\x2b\x0e\x63\x62\x0d\xad\xa6\xc0\x5f\xfe\x59\xc7\xff\x5d\x47\xff\xb6\xf7\x36\x18\x3e\x0b\xbc\x1a\x39\x96\xed\x19\xe7\xad\xf0\x38\x4d\x56\xa1\x6c\xb4\x98\x1f\x0c\xe2\xf8\xe0\x61\x1d\x80\xdd\xeb\xaf\xc4\x51\xde\x79\x34\xc7\x26\x88\xe3\x73\xe3\x7a\xfe\xbd\x0e\xed\xa8\xa0\x91\x9e\xdf\x7c\x6d\x5b\xbd\x0e\xfc\x52\x59\x17\xcc\xf8\x6a\x83\x43\x60\x3f\x1a\xb1\x26\x2d\x11\xdd\x2b\x51\x22\x36\x8a\x96\xf4\x9c\xef\xe7\x24\xa2\x70\xf3\x26\xe7\x4d\x1c\x20\x2f\x28\x70\x47\xe0\xb2\x83\x90\x28\xc0\x6c\xc0\x3b\xae\x66\x77\x6c\x19\x0c\x7c\xb1\x1f\xf3\x07\xa2\xa2\x73\x46\xe1\x8c\xbb\x5f\xb8\xca\x7f\xd8\x19\x7e\x8e\x03\x5e\xf4\x7b\x31\xcc\x37\xe3\x85\x68\x9d\x5c\xf0\xb9\xec\x05\xa1\x95\x75\xbb\xe8\x63\x2b\xd4\xf8\xe0\xbc\x50\xd5\x33\xae\x03\xb9\xc0\x75\x15\xb2\xe3\x92\xb9\x0c\x17\xaf\x64\x8f\x31\x04\xef\x9f\x5c\xc9\x7e\x6c\x82\xed\xcd\x5b\x69\x8f\xbb\xaf\x9d\xf0\xbf\x6f\x02\xfe\x34\x28\x9a\xf1\xb6\x30\x95\x54\x31\x40\xa9\x1b\xf3\xa6\x07\x30\x9d\x32\x70\x10\x00\xfa\xc8\x7d\x59\xe8\xff\xca\x5b\x41\x61\xf4\x5d\xef\xeb\x0f\x14\x71\x98\x8c\x97\xa2\xf8\x96\x06\x94\x63\x4e\x76\x18\x37\x29\x0f\x55\xd1\xda\x17\x42\x0c\x14\x29\xe0\x18\x50\x61\x65\xd4\xb4\x2a\x32\x54\xaa\x66\x9b\xdb\xb4\x44\x51\x7d\x23\xb9\xbe\x25\x4a\x52\xea\x1c\x83\xf0\x4c\x68\x78\xda\xe5\x2b\x37\xe4\xb9\xd1\x8f\x3c\xca\x24\xc2\xca\xd0\xae\x25\x86\xd9\xbf\xde\xde\xab\xde\xe9\xb0\x03\x41\x2f\xa2\x00\xcc\x9f\x70\xfc\xef\x71\xa6\x17\xe6\xed\x68\x49\xd1\x1b\x14\x04\x69\xae\x9f\x9c\xc4\x03\xa8\x8c\x07\xaf\x3f\x48\x7e\x47\xf4\x29\xdc\xe5\xd1\x53\x05\xd6\x09\x5b\x2b\x4f\x56\x8b\x8e\xba\xc6\x89\xa3\x16\x57\xb2\x0f\x30\x00\x16\xe9\xe6\x72\xdc\xa2\xff\x55\x87\x5d\xa1\x4f\x3f\xb9\xfb\x0e\xc7\x7f\x85\xa3\x8f\x3f\x56\xd5\xd7\xe4\xb3\xad\x54\x5e\x7e\xfc\xe8\x56\xff\x4d\x35\xc6\x34\x53\x80\xfb\x2a\xa1\x25\xd8\x2b\x17\xee\xe6\xf5\x13\xb8\x14\x55\xc4\x0b\xc0\xba\xd0\x02\xbf\x8e\x60\x25\xed\x17\x5e\xc3\x9b\x59\x9c\x9b\x5e\x9e\xab\x7b\x67\x17\x66\xe1\xdf\xd9\xb9\x93\x73\xe2\xdf\x99\x33\xa7\x4f\xcf\xcd\x2c\x7b\x69\xe6\x5d\x8f\x96\x59\x79\x59\x9f\xe6\x56\x09\x70\x35\x9e\x0c\xbc\x76\x1f\xc1\x64\x55\x61\x56\x2d\x84\x28\xc8\x64\x70\xf5\xa3\xda\x45\x3f\xb8\x87\x1d\x50\x83\xe5\x7e\xf7\x1e\xff\x6f\x26\x94\xcc\xb2\xf7\xb2\xd2\x1e\x26\x56\x96\xc9\xe8\xce\xd8\x09\xc0\xa1\x05\xd0\x86\x63\xde\xc1\x5e\x1a\xe6\x07\x69\xd5\x89\xbf\x9b\xf8\x68\x2a\x4e\x57\x0f\x6a\xea\x41\x2f\x4e\x57\x4d\x0f\x4b\xe9\x51\x88\x93\x45\x83\x44\xa8\xc2\xd1\x71\x03\x7c\x1e\x8d\x45\x2a\x33\xb7\xd2\x98\x1f\x98\xf9\x4e\x81\xa3\x9f\xf5\x65\xd9\xd1\x13\xbf\xab\xae\x81\x84\xc2\x8d\x32\x3b\x05\x40\xe9\xae\x47\x71\xd8\x12\x47\x9b\xf2\x60\xad\x19\xb0\xc8\xa2\xe7\x40\x50\xf1\x04\x44\xbf\xce\x3a\x4c\xa1\x69\x62\x67\x8f\x83\x1e\xba\x35\xc0\x95\x34\x00\xe7\x36\x19\x9b\x05\xe4\x1f\xe2\x63\xc7\xc3\x66\x2b\x4e\xc1\x63\x15\x05\x69\xdd\x6e\x76\x37\x5a\xed\x14\xd2\x1d\x40\xe1\x71\x6d\x65\x62\xfc\xee\x5e\xf6\x5f\xcc\xed\xb2\xd7\x03\xa8\xd5\x59\xde\x8b\xd3\x81\x50\x38\x14\xb6\xaa\xfb\xfa\xbd\xfe\x7d\x15\xcf\x4b\xa0\xf6\x48\xeb\x0d\x57\xd1\xa1\xfa\xd8\x0b\x20\x56\x94\x67\x80\xd7\x0c\xc7\xe6\xe6\x86\xb3\x47\x9c\x4c\x37\x1c\xb2\xcd\x5a\x3b\xde\xcf\xed\x61\xaf\x72\x98\x1b\x07\x79\xb1\x9c\x89\xdd\x51\x94\xb4\x1c\x75\xb9\xfb\xbc\xd1\xd6\x82\x31\x07\x55\x91\xd4\xff\xd6\x93\x41\x5e\x80\x1f\x85\x8c\xc8\xa3\x16\x14\xaa\x08\x09\x97\x90\x26\x8a\x35\xaa\x48\xbd\x20\xa1\x81\x59\x63\x57\x8b\x2a\x9d\x85\x73\x3c\x54\x27\xbc\xf4\xea\x1c\x56\x6c\x39\x54\xa5\xc8\x00\x63\xf7\xd6\x83\x5c\xd9\x0b\xd8\x33\xd9\xfe\x2e\xcf\xf3\x60\x95\xbb\xa7\xfd\xe9\x69\xaf\xd3\xef\x42\x40\x7b\x10\x02\x44\x00\xbd\x93\xe7\x3e\x49\x28\x14\xc5\x52\xa2\x81\xb2\xa1\x1a\x69\x6d\x59\x27\xd8\xbe\x8c\x07\x79\x9a\xb8\xc7\xfd\xa9\x65\x90\xe9\xe2\x97\x3a\x37\xa8\x1a\x1d\xcc\xa9\xb2\xd5\xf9\x9c\x54\x36\xf6\xbb\xfd\x9b\x97\x2c\x80\x78\x95\x45\x1d\xfd\xac\xda\xde\x72\xd6\xe7\x75\xef\x44\x10\xe7\xbc\xee\x9d\x4d\xce\x27\xe9\xba\x9d\xdb\x51\x06\x93\xc3\xbd\xde\xff\xc6\x65\x22\xc0\x33\x66\x93\xca\xd0\x4a\xf3\xf3\xd7\x98\x6c\x68\x65\xf4\x60\x3a\x59\x8f\x44\xc5\xef\xf1\x96\xfb\xc5\xc7\xf9\xef\x75\x50\x19\x37\xbc\x58\x4d\x70\x77\x03\xc7\xdb\x40\x72\x27\xce\x80\xa6\x77\x46\xc6\x95\xcb\xeb\x3c\x21\x44\xce\x8a\xb1\x21\xef\x9a\xdc\x74\x9f\x4e\x89\xe6\x01\x7b\x06\x5c\x14\xe8\x23\xb1\x2b\x84\x3c\x8b\xd6\x50\xcb\xbf\x4f\xd9\x30\x4a\xb0\x1c\xdd\x34\x54\x2e\x3c\xfd\x9c\x67\x79\x73\xc3\xd9\x4f\x15\xb3\xd6\xd3\x0f\x5e\xcd\x1e\x71\xd8\x5e\x7e\xa1\xc8\x02\xf7\xf9\xfe\xd3\xe7\xc4\x1f\x56\x2b\xf5\x44\xa1\xf4\x62\x16\x89\x3c\x9b\xde\x12\xe7\xf8\xd7\x7c\xd2\x4e\x3d\x45\xda\x06\x53\x84\xe6\x59\xf3\x6d\xce\x93\xd9\x13\x47\xcb\x19\x93\x53\xeb\x0d\x0e\xdb\x87\x5a\x8d\xfb\x03\x8e\xff\x74\xc2\x94\xbb\x7c\x55\x19\x5d\x8b\x2d\xe2\x61\xb7\x98\xec\x43\xf7\x19\x44\x4b\xf0\x4d\x77\x5b\x80\xde\xde\xc2\x7d\x33\x4b\xd7\x1d\xb9\xc1\x9b\x59\x5a\x04\x00\xf0\xed\x17\xf2\xfd\x7b\x18\xd3\x20\xea\xee\x8b\xf6\xf8\xff\x6b\x62\x51\x63\xac\x23\x90\xbf\x3e\xbc\x13\xe8\xf6\x3c\x99\xb8\x1f\xea\x07\x31\x8e\x3c\x9c\x80\x0d\xe3\xc2\x31\xef\x1c\x28\xb0\x8d\x4e\x9a\xc3\x19\xbc\x19\xa5\xe0\x30\x73\x0e\x34\x0c\xc0\x0f\xab\x2b\x78\x9a\x15\x75\x53\xc3\x43\xc4\xee\x9f\x6f\x7b\x51\x71\x10\x5c\x8a\x08\xce\x91\x6c\x9b\x16\x56\x3b\x62\x42\x05\x39\xd4\x33\x04\xe0\x71\xdf\xf6\xe7\xc1\xd0\x28\x69\xf1\x6a\x60\x26\x0d\xca\xd3\x47\xc8\xff\xe1\xb2\xe0\x86\x3b\x59\xbd\x94\xc2\x62\x5e\x34\x28\xb9\x8f\xc0\xfc\x67\x34\x0c\xbd\x9d\x45\x39\x79\xcc\x57\x83\xd6\xa0\xd1\x47\x41\xe4\x37\xd9\xac\x38\x2a\x8a\x83\xa6\x74\x8d\xce\xfa\x64\xc1\xc2\x81\xc9\xbd\x4e\xd0\xeb\xf1\x24\xf7\xc4\x4c\x4d\xdb\xde\x4a\x90\x84\x08\x47\x0a\x21\x06\xe8\x43\x95\x5a\xc0\xa6\x18\x70\x72\xae\x84\x9e\x6f\x1b\x1d\x5a\xe8\x19\xfd\x2c\xff\x0c\x38\x46\x5f\xce\x35\xa1\x0b\x79\xcb\x5e\xb6\x0f\x20\x40\x72\xf7\xb5\x7b\xfd\x8f\xed\x91\x98\xa5\x28\xa6\xf4\x99\x32\x90\xf8\x12\x88\x17\xd2\x42\x64\x16\xdc\xe5\xcf\x73\x1d\x64\x82\x9e\x61\xed\x14\xab\xa2\x8d\xba\x45\x9a\xc6\x79\x33\xe2\x45\xbb\x99\x66\xab\x53\x9d\xa2\x1b\x4f\x65\xed\xd6\xcd\x47\x6f\xbb\xe1\x3a\xe2\x29\x68\xdc\xd4\x3c\xda\x3c\xd2\xbc\x11\xc6\xf4\x12\x12\x1e\x39\xca\xca\x27\xdc\x63\xcc\xf3\x89\x6c\xc3\xaf\x33\xcf\x0f\xa3\xd5\xa8\x08\x62\x18\x38\x08\xd4\x80\xa7\x92\xab\x41\x9c\xd2\xa3\x42\x6c\x2a\xf0\x58\x34\x8b\x27\xad\xa8\xd7\xe1\x99\xf5\x30\x58\xcd\x38\x57\x4f\x00\xf2\x7f\xe8\x3b\x31\x67\xa1\x18\xfc\x95\xc5\xfa\x87\xfc\x16\x8e\xb4\x98\x05\x2f\x3f\x09\x12\xfc\x97\x80\xf5\x82\x7e\xd1\xc1\x8c\x70\xf9\xe9\xdf\x69\xa8\xe8\x44\x30\xf3\x6e\x10\xc5\x5e\x2f\x4b\x0b\xec\x1b\xcc\x65\xaa\x2b\x74\x0c\xf1\x67\xd4\xcb\x79\xcb\xe3\x49\x48\x97\x81\xc6\xc3\xa2\x9f\x24\x3c\x36\x1e\x88\x79\x04\x3f\x85\x4a\x92\x17\x41\xb7\x27\x4b\x49\x5b\x79\xcf\x2a\xb6\x1b\xb5\xb2\x34\x4f\xdb\x85\x97\xaf\xb6\xe0\x49\xc2\x8b\xbc\x15\xf4\x38\x3c\xd8\xb1\x14\x0e\xd9\xa4\xa8\x0d\xb8\x15\x3e\xc3\xbf\x6f\xfe\xd1\x59\x0c\xff\x7a\x80\x3d\xb1\xe2\x3a\x98\xc0\x35\xdc\x4f\x1e\xf0\xdf\xec\x48\xfc\x0d\x00\x11\x01\x0d\x06\x6f\x8b\xb4\x66\x78\x07\xb1\x73\xc0\xa9\xa8\x4e\x2e\xb0\x51\x8e\x94\xb4\x78\x6d\x0e\x6e\xd0\x00\xe9\xa1\x3c\xe0\xcb\xd0\x1d\x47\x9a\xb7\xd6\xbd\x5e\x0c\xfe\xb7\x7d\x02\x23\x5b\xc1\xb2\xf3\xaa\xd3\x93\x62\xe1\xdb\x70\xf6\x61\x08\x9a\xb5\xe7\xff\xe1\xee\xb5\xe6\xae\x27\xd0\x63\x78\xc1\xf8\xef\x92\xa9\xfc\xf9\x8c\x96\x9a\x9b\x6f\xc1\xdd\xbb\x1c\x05\x7b\x97\x38\x60\x51\xb4\xa8\x14\x22\x9d\xa0\x00\x50\xda\xf5\x20\x41\xb8\xc6\x28\x51\x90\x4d\xb9\xdd\xe2\xe6\x45\xe7\xcc\xe6\x77\x9a\x75\xf7\x7a\x75\xa7\xe9\xfb\xea\xe6\x92\xa4\x58\xd9\xcd\xe8\x6f\x1f\xac\x14\x80\x0b\x69\x08\x47\xa2\x0f\x3d\xe8\xfb\xf4\x37\xce\x7c\x3c\xed\xf7\x74\xf4\x71\x2f\x15\x02\x88\x69\xc0\x47\xdb\xcd\xe5\x41\xf6\xeb\x8e\x4d\x08\xf0\xb3\x8e\xff\x66\xe7\xde\x34\x2f\xbc\x04\x9f\x18\xbc\x58\x84\x55\x0b\x0b\x01\x42\x31\xcf\x92\x1c\x14\x19\x1c\xcc\x65\x0a\x6d\x15\xd6\x58\xcc\xe8\xf9\x6d\x02\xf9\x00\x4a\x67\x09\x11\x0b\x2e\x4e\x94\x27\xbf\xf2\x69\x51\x46\x5d\x89\x04\x69\xa3\xbc\x7d\xd4\x61\x93\x42\x80\x83\xaa\xfe\x3b\x8e\xff\x1e\xe7\x34\xfd\xc2\x4e\x31\xa0\xe5\x54\x18\x93\x6c\x03\x06\x65\x04\x0a\x60\x4b\xc7\x66\x44\x74\x61\x92\x34\x48\x2b\x2f\xac\xf8\x28\xa2\x97\x97\x0f\xf2\x52\x8e\x04\x7d\x1c\x0a\xe9\x99\xe7\xfd\x2e\x0a\x9f\x00\xc2\x9d\xda\x28\x23\x8c\x20\x21\x19\xf6\x61\x6d\x7e\x5f\xdc\xc7\x26\xd3\x35\x9e\x75\x78\x10\xba\x7f\xb5\xcf\xff\x81\x7d\x67\xe8\x97\xe9\xb5\x6e\xdd\xa9\xca\xcf\x45\x99\x69\x2b\xd2\xc4\x6c\x59\x3f\x01\x82\x33\xdc\xfb\x4c\xaf\x55\x13\xb7\xda\x0a\xde\x53\x28\x65\xfd\x22\xd5\x34\x6f\x41\x61\x98\x4b\xc1\x32\x42\x9e\x4d\x16\xfe\xb5\xfe\xc4\x00\x56\x92\x01\x2f\x9b\x7e\x69\x04\xe6\xd6\x75\x93\x14\x93\x00\x9d\xcf\xa3\xc4\x5b\x48\x43\x3a\xdd\x2b\x91\x8b\xb7\xc9\x9b\x17\x01\xad\xa3\xfd\xac\x22\x1b\x89\x26\x2b\x19\xce\x74\xc7\xc6\x19\x0f\xc2\x81\x22\x89\x58\x2c\x41\x98\xeb\xd0\x60\xbc\x58\x83\xb3\x86\x06\x3e\xa3\xc5\x5a\xf7\xd4\x50\x2a\x40\x2a\xae\x20\x5b\x70\xdf\xa2\x88\x07\x99\xd2\x8e\x92\x31\x8b\xad\x6b\x46\x2f\x75\x72\x44\x42\x38\xe4\xd9\x47\x5b\xa9\xa6\xe7\x7a\x2e\xcf\xd2\xcd\x44\x32\x4f\x3a\x41\x82\xb0\xe7\xf9\xd4\x79\xde\xcb\x41\x0e\x8b\xf9\x3c\x75\xf4\x86\x23\xb7\xdf\x70\xf4\xe8\x2d\x8d\x5e\x1a\x36\x64\xbf\x34\xbb\x61\x29\x3c\x12\xc2\xaf\x1b\x80\xb6\x26\x0a\x4d\xdb\xa6\x9d\x84\x68\x90\xab\x40\xac\xc7\x10\xfb\x2f\xa4\xa1\xea\x36\xc9\xe9\xff\x36\xe7\x2e\xb6\x1d\x8c\x89\xa6\xba\x29\x7a\x7a\x3f\x00\xc2\x6a\xd3\xf8\xf1\xe2\x1a\xbb\xa6\x27\xce\x12\x20\xad\x10\xa8\xc8\xfd\x7b\xc7\xff\xb4\xb3\x50\x7a\x2a\xef\x2d\xe8\x17\xfa\x6f\xe2\x27\x18\x80\x95\xe3\xc2\xc3\x90\xf8\x5e\x16\xa5\x19\xa0\xf4\x9d\x41\x13\xdb\x69\xbe\xc6\xb3\xba\x47\xb9\x9e\x14\x1f\x2d\xa8\x6f\xcc\x6b\xf0\xaa\x2f\xc8\xe5\x8f\x0f\x91\x24\xae\xf0\x82\xba\xbc\x0e\x01\xef\xca\xed\xf0\x74\x9a\x2c\xa8\xda\xa9\x6c\xa8\x0f\x1b\xab\x8a\x03\x92\x24\xcf\x97\x6b\xec\x6a\x31\xcd\x85\xfa\x99\xdf\x23\x74\x42\xf7\x53\x35\xff\x75\xb5\xf9\xb6\x67\x40\x6f\xa2\x41\x9e\xbe\x82\xf2\x34\xbc\x1a\x17\x73\x38\x90\x1b\x86\x90\x39\xea\xcb\xa6\x37\x2d\x15\x70\x5c\x4a\x80\x7c\x29\x32\x13\x62\xd1\x40\x26\x46\xf8\x5b\xf1\xc5\xf4\xe9\x59\x0c\xb1\xd5\x74\x66\x3a\x3e\x8e\xd6\x47\xb9\x26\xb0\x74\xc9\x48\xcc\x1f\xea\xa3\x7f\xac\xbf\x9c\xf5\xb9\x7f\x69\x73\x1f\xf7\xb6\xa9\x1b\x6e\xb8\xe1\x56\x98\xfa\x50\xb5\x6f\x3e\x7a\xf7\x37\x1f\xbd\xbb\xd9\x0d\xb7\x0e\x86\x65\xec\xe1\x8b\x66\x1f\xb3\x1f\x73\xd8\x55\x6a\x7f\x81\xbd\xec\x55\x8e\xff\x22\xc7\xee\x74\x2b\xc2\x70\x85\x7b\x61\x94\x03\xd1\x35\xad\x1c\xd5\x2b\xc6\x31\x66\xbe\x04\x4f\xb1\x59\x26\x0a\xbf\x52\x65\x61\xce\x8d\x0f\xd7\xd8\xa4\x9c\xce\xee\x6f\x2a\x3c\x88\x77\xd4\x84\xdc\x95\x2f\x24\x05\xce\xfd\x41\x16\xa5\xfd\x5c\x06\x17\xb6\xd2\x6e\x2f\x4d\x60\xdb\x52\x8e\x04\x84\x17\x98\x7a\xed\x88\xd8\x0d\x55\x26\xa9\x84\x0b\x0e\x29\xb2\x50\xcd\xdc\x69\x25\xd2\x67\xaa\x77\x8d\x08\x82\x4d\xd7\x64\x51\x19\x29\xee\x92\xcf\x43\x97\x8c\xfb\x45\xe5\x16\x21\x37\xbd\xdc\xac\x28\x64\x23\xeb\xa1\xd8\x23\x30\x17\x88\x7b\xcd\xb4\x08\xaf\xeb\x68\xd8\xcc\x6a\x99\x8d\xf7\xf0\xea\x09\x76\x6d\xaf\x9c\xa3\xfb\xaf\x35\xff\x8b\xa5\x05\x67\x3b\x8e\x21\x8f\x85\x96\x2c\x3e\x76\x32\x08\xe9\x46\x2b\x8b\xc0\x29\xdc\x47\xcf\x01\x7a\x25\xaf\xf6\x8d\xb7\x19\xf7\x8a\xf5\x14\x4b\x09\x62\xef\x3c\x1f\xac\xa7\x99\x8a\x04\x56\x9c\x91\x66\x58\x2f\x15\x19\xf1\x5c\x87\xfc\x8a\xd3\x3f\xe0\x51\xca\x43\x56\xe9\xe3\x41\xd3\x9b\x4e\x06\x64\x46\x07\xa3\x68\x29\xb0\x0f\xdc\x65\xc0\xdc\x0e\x5a\x8a\xd5\xc3\x52\x19\xa7\xd2\x02\x74\x9e\x1a\x37\xb1\xd5\x14\x2a\x99\x51\xbd\x34\x83\xed\x8f\xa2\x9f\x33\x8e\x2a\x9e\x7c\x5d\xf6\xe4\xba\x2a\xe3\x79\x11\x64\x05\x6d\x04\x1f\x76\xfc\xdf\x70\x16\xf1\x91\xc4\x72\x91\xd7\xcc\x86\xdc\x22\x6a\x08\x35\x75\x49\xe4\x4f\xc7\xeb\xc1\x20\xaf\x7b\x67\x92\x13\x41\x14\xf7\x33\x5e\xc7\x5d\xc0\xd2\x6e\xf1\xa3\x6d\x07\x64\x0a\xc9\x14\xa7\x41\x98\x4f\xc1\x0d\xac\x10\x4f\x71\xd4\xe6\xad\x41\x2b\xe6\x53\xd7\x51\x2b\x1a\x58\x65\xb3\x8d\x1f\x72\xd8\x81\xbc\xbf\x12\xa6\x42\x5b\x70\x7f\xdd\xf1\x7f\xbe\x42\xdc\xb4\xfb\x71\x3c\x30\x6c\xda\x42\x5d\x92\xe6\x6b\xd5\xc1\xfe\x71\xf9\xe8\xce\xe6\x71\x95\xe5\x9d\xcd\xe3\x62\x38\xd4\x79\xe0\xce\x66\xbe\xd6\x6a\x1e\x97\x58\xac\xf4\x91\xbf\xa9\x8c\x12\xef\x40\xa0\x07\x94\x06\xca\x46\x5f\x1d\x6b\xd0\x56\xd9\xa4\x8c\xa7\x76\x1f\x1c\xc3\xb9\x2d\x85\xb0\x0c\xf7\xf5\x9b\x95\x62\xf6\x60\x6e\xc6\x78\xb7\xd2\x24\x2f\xb2\x20\x4a\x8a\x9c\xfd\xb6\xc3\x0e\x84\x49\x8e\x50\x11\xee\x2f\x39\xac\xb1\x15\x81\x3f\x7b\x7a\x09\x53\xf8\x8f\x48\x8e\x6f\x5a\xcd\xb3\xa7\x97\x86\x90\x05\x61\xf6\x2c\xe8\x87\x5a\xba\xc3\xd4\x95\x5d\xdf\xe5\xd9\xaa\xc6\x11\x5e\xe5\x09\xcf\x60\xe7\x15\x59\xb6\x2c\x28\x8b\x15\x70\xa7\x4b\x13\xf1\x0a\xe7\x74\x93\x2d\x6a\xd0\xf6\x7b\xfc\xdb\x4b\x07\xba\x5e\x14\x9a\x87\xb9\x33\x14\xbe\x7b\x6c\x93\x03\xd9\x23\x0e\x9b\x94\xd3\xc1\x7d\xae\xdf\xb5\x9b\xaa\xe6\x0e\xc9\x77\x31\x9f\x46\x8e\xff\xc1\x7c\x78\xae\x91\xaa\x1c\xd0\xb6\xd2\x90\x22\x04\x37\x1d\x73\x3a\xfc\x81\xc3\x5c\x0a\xcb\x9b\xc6\xa8\x3c\x90\xad\xef\x71\xfc\xb7\x3b\x4b\x43\xcf\xa5\x4e\x67\x56\xce\xfe\x4a\x14\xdb\xc7\xf8\xfb\xac\x9f\x18\x07\xe1\xad\xad\xd7\x22\xc8\xcf\xc3\xaa\xc5\x23\x02\xa8\x11\x4a\x70\x18\xcf\xa9\xca\x0d\x8a\x24\x9c\xb2\x3c\x1f\x6b\xec\x09\x79\x27\xc8\xf8\x02\x92\x4a\x29\xef\x2c\xf7\xcf\x6a\xfe\xef\xd5\x96\x3a\xe0\xb3\x02\x1e\x7d\x31\x57\x54\x55\x1a\xe0\x66\x85\x17\xeb\x9c\x14\xae\xb4\x44\xe8\x00\x14\x23\x81\xb1\xe1\xca\x20\x23\xd1\xe3\x96\x84\xa3\xa3\x21\x68\xe6\xa9\xb7\x16\xf1\x75\xf2\x23\x5c\x4d\x82\x58\x96\xca\x69\xd7\x45\xa9\x6f\x97\x52\x48\xcc\xc7\x5e\x1a\x6a\x62\x63\xe4\x22\x96\x95\x8e\x12\xf4\xbb\xd0\xd0\xd8\x26\xae\x82\xba\x2e\x5a\x98\x9f\xf5\x8e\x34\x15\x79\x80\xc8\x6b\xa9\xaa\x83\xd4\xcd\x6c\x5a\x74\x14\xcf\xdf\x56\xa7\xf4\x43\xec\x8a\x22\x8d\x95\x17\xd3\x8a\xff\x94\x51\x02\xc3\xf8\xcc\xba\xec\x9c\x62\x0d\xf6\x2d\x9b\x0a\x89\x65\x95\x9a\xfd\x4a\x0d\x2d\x33\xd3\x71\x14\xe4\x3c\x77\xdf\x5e\xf3\x5f\x07\x96\x19\x7a\x50\x46\x5e\x36\x49\x74\xf0\x2a\x7a\x7e\xa1\x64\x5f\x89\x92\x6f\x97\xc7\x51\x12\x17\x7a\x89\xe5\x48\x99\x11\xb5\x4d\xc3\x8b\xf4\x7d\x85\x23\x9a\xba\x4a\x02\xab\x88\x49\x1b\x09\x5e\x3d\x66\x63\x9b\xac\xce\xae\xdf\xb4\xb1\xaa\x31\x17\x9d\x6f\x66\x4f\xb6\x2c\x67\xa0\x8f\x36\x40\xb4\x35\xce\xf3\x81\xbb\xd7\x9d\x88\x7a\xec\xa2\x73\x90\x3d\xa9\xe2\x3b\xc9\x71\xe0\x4e\xba\xfb\x20\x0d\x93\x72\x6d\x7e\x61\xa6\x42\xae\x45\xbd\xd6\xa5\xc8\xb5\xff\x3d\xc1\xae\xcd\x79\x71\x2f\x09\xa4\xe9\xfc\xc4\xd3\x67\x4f\xbb\x9f\x9d\xf0\x3f\x06\x70\x22\x19\xf1\xb9\x8f\x10\x5b\xa6\x69\xc0\x54\xe1\x44\x26\x75\x2f\x0b\x08\x05\x21\x48\xc8\xb1\x2c\x68\xa3\x24\x3a\x64\x44\xec\x1d\x06\xe3\x31\x12\x7e\xe9\x05\x45\x6c\xf7\xe8\x27\xa5\x75\x5c\x0e\x59\xcb\xd5\xa6\xea\x83\x8a\x2c\xad\xfd\xf3\xa2\x23\x63\x2c\x43\x68\x8e\xf6\x17\x88\x7d\xe4\xf5\x8b\x5c\x3c\xc7\xc2\x1f\x88\x92\x30\x5d\xcf\xb7\x52\x3c\x79\xf5\x0e\x34\xa0\xab\xae\x84\xba\x3b\xa7\x4f\xce\xf3\x81\x77\xef\x7d\x73\xcf\x7c\xce\xc9\x33\x33\xd3\x27\x9f\x73\x6a\x7a\xe6\xde\xf9\xd3\x73\xcf\x5a\x7a\xe6\xd2\xf2\xdc\xa9\x67\xcd\x20\xae\x20\x69\xfb\x4b\xbc\x78\x16\x09\xe6\xfc\x59\xcb\xad\x5e\xd4\x7b\x96\xb1\x4d\x16\x29\xb4\x1b\x94\x0a\xb4\x77\x29\x0e\x74\xd0\x21\xb0\xbf\xa1\xca\x9d\x00\xd4\x3f\xa4\x62\xd8\xcc\xcc\xf8\x8e\x9a\x26\x46\x7b\x53\xcd\x7f\xc4\x39\x69\xd1\xa0\xd9\x00\x7c\x10\x1a\x48\x6a\xad\x16\x7c\xe8\x87\x49\x30\x27\x4a\x41\xdc\xa6\xb2\x47\x90\xc5\x53\x54\xac\xb9\xec\xbe\x85\x1d\x66\x07\x37\x5d\x76\x18\x39\x29\xd6\xd2\xf8\x35\xb7\xdf\xdd\x2b\xc6\x8a\x5d\x74\x8e\x8e\x5f\x75\x8f\x77\xaf\x85\x54\xf5\x8c\x8b\x96\xde\xc7\x07\x39\x63\xaf\x71\xd8\x93\x83\x7e\x91\x42\x4f\xd8\xdb\x28\x04\xd6\xba\x7d\x7f\x75\x7a\xcc\x7b\xe3\xb8\xa3\xa9\x17\x2b\xc1\x96\x0d\x16\x7a\x28\x30\x28\x88\x28\x81\x06\x61\x88\x4e\x49\x68\x6e\xa4\xd3\xff\x75\xcd\xff\xb3\xda\x12\x2f\x50\x01\xd3\x3a\xbd\x1a\x1c\x2b\x0a\x86\xbc\xaf\x4f\x88\x6d\xca\xaf\xf0\xdf\x3e\x68\x7e\xf0\x40\x54\x74\x88\x24\xf7\x60\xdd\x7e\x25\x7e\x53\xc6\x07\xc5\x99\xe4\xe0\xe9\x34\xe1\x07\x9b\x65\x2d\x10\x2d\xb4\x11\xe8\x6b\xa8\x37\x96\x95\x3e\x75\x00\xa3\xaa\x2b\x7b\x23\xbc\xd0\x6a\x9e\xb7\x9c\xe2\xe4\x17\x25\xe0\x8e\x81\xbb\x7a\x00\x8e\xc1\xf0\xb5\x21\xd0\xeb\x70\xe7\x81\xd6\x4f\x3a\x1c\xb6\x07\x66\x17\xd9\xc4\xa0\x23\x9b\x6d\x29\x63\x7f\xee\x30\x17\x0f\xe8\x0a\x83\x35\x39\x9f\xbb\xef\x73\xfc\x5f\x74\xe6\x86\x9e\x57\x0c\xff\xb0\xc7\x05\x4d\x87\xdc\x98\x01\xf6\x16\x87\x12\x96\x27\x6b\x51\x96\x26\xe0\x9d\xb6\x16\x64\x11\x90\xe2\xd5\xd1\xa9\x5c\xca\xaa\x7c\x90\x14\xc1\x05\x8c\x70\x6e\x9d\x07\x18\xcb\xe4\x7c\x5e\xb1\x37\x8c\xa0\x9a\xf9\xf8\x1e\x76\x4d\xd4\x0d\x56\xf9\x42\x3f\x8e\x11\xc7\x26\x77\x7f\x73\x8f\xff\xe3\x13\xf3\xa5\xa7\xa3\xf6\x6d\x85\x52\x47\xe1\x60\xf4\xb1\xa1\x2b\x69\x2d\x8e\xf4\x50\x30\xae\xf5\x63\x84\x12\x4b\x94\xc5\x04\xea\x61\xd2\x7a\x46\xb9\xb4\x3c\x23\xa9\x96\xa5\xb7\xe4\x5c\x15\x26\x67\x57\x2f\xc8\x73\x3c\x52\x88\x51\x58\x8b\xc2\xbe\xd0\xea\xfa\x68\x66\xe9\x4a\xba\x20\x9c\x45\xb4\x5a\xba\x54\xa7\xa6\x77\xc2\xbc\x6c\x97\xd6\xeb\x00\x19\x9e\x42\xe8\xdb\x3a\xea\x13\xd8\xd1\x34\xb1\x31\x5e\x9a\xea\x21\xd6\x12\x19\x84\xb7\x2d\x1e\xb5\xb8\x9d\xc2\x7e\xb8\x8e\xe6\x6f\x94\xac\x36\xe0\x89\x68\x08\x95\xd4\x48\x93\x46\x20\xf4\xf0\xad\x93\xc1\x49\x29\x7a\x32\x6d\x05\x71\xe9\x0a\x71\x3b\x32\x75\xcb\x9a\xcc\xf7\x4c\xb2\xab\x45\x45\x66\x54\xc3\xdc\xaf\xee\xf7\xff\xfb\xbe\x93\x8a\xc8\x32\x2a\x20\xf6\x47\x13\xd9\x8e\xdd\x6e\xe6\x93\xa8\x28\xdb\x59\x11\x2d\x0c\xad\xa9\x69\x16\x4a\x93\xb5\x48\x67\xe5\x07\x41\xeb\x45\x90\x15\xe4\x12\x2f\x26\x5d\x64\xe5\xe7\xb5\x83\x28\xce\xf5\xf9\xdd\x26\x27\x2c\x48\x0c\x89\x8f\xe8\x8a\x04\xb6\xe1\x24\x84\x9f\xad\x16\x10\xb0\x43\x7d\xe9\x92\x4c\xdb\x5f\x08\xe7\x4f\x6a\x0f\x41\x52\x2e\x19\x14\xd3\xac\x1b\xc4\x26\x49\x1c\x99\x99\xfa\x49\xf4\x50\x9f\x7b\x41\x17\x80\x59\x2d\x83\xcd\x70\x8f\x48\xf4\x33\xa8\xea\x49\x69\x48\x01\x78\x57\xc0\xe7\x53\x76\x5b\x71\x54\x59\x11\xa2\xe4\xa4\x90\xd4\xe6\x83\x34\xf3\x96\x44\xd5\xfb\x3d\x7a\x84\xb5\x97\xb7\x0f\x8b\x26\xd6\x1b\x3a\x6d\x94\x1a\x03\x96\xb9\x00\xf7\x41\x71\xd8\xa5\x0d\x8f\x10\xde\x0c\xab\xc4\xca\x00\x4c\xa7\x65\xc3\x1b\xdd\x64\x4d\x69\x34\x5e\x38\x4b\x69\xbf\x87\x41\x8f\xab\x83\x57\x42\xfe\x6f\x22\x83\x2e\x4a\x41\x10\x25\x81\xc2\xe2\xc7\x1d\x91\xb0\x12\x51\x59\xb4\x7b\x3a\x6f\x7a\x27\x23\xf0\x7e\x80\x03\x28\xc4\x24\x90\x04\xb1\x3b\x17\x8e\x98\x79\xd4\x8d\xe2\x40\x4c\x96\xbc\x83\xbc\x5e\xa5\xaf\xe8\xac\x46\x78\xd2\xb1\xc1\x3a\x9e\x66\x5e\xc6\xbb\xe9\x9a\x98\x81\x15\xbe\x15\x3b\xb3\x9c\x89\xca\x36\x0c\x09\xb2\xfd\x33\x8d\x5a\xa5\x8f\x8a\x2c\xf8\x91\x1a\xbb\x52\xa8\xe9\x0a\x79\xee\xfb\x6a\xfe\xdf\xc2\x75\xb7\x42\x9d\x43\x0f\x18\xf9\x8b\x10\x1d\x69\x15\xc0\x11\xc5\x50\x6f\xd0\xee\x0e\xbe\x90\x01\xdd\x7c\x2f\x55\xa4\xc4\xe8\x2b\xfc\x02\x1c\xcd\x81\x39\xb8\x94\x4f\x09\xea\x50\xdf\x80\x5f\x8a\x04\xd7\x46\xab\x29\x3c\xe7\x83\xad\x04\xee\x1f\xdf\x36\xc6\x79\xf9\xcb\x0e\x7b\x5c\x6e\x73\xd5\xb9\x9f\x74\xc6\x80\x86\x99\x0e\x15\x76\x3a\xff\xad\x4e\xe9\x09\xd1\xa3\x80\x71\x15\xae\x35\x65\x49\x3a\xf0\x91\x3c\xc0\xd3\x6e\xd7\x14\xc4\xf2\x4c\x34\x52\x9b\x00\x07\x83\xa6\x07\xee\x71\xb0\x0f\x9a\x6e\x1c\xe8\x1b\x67\x10\x63\x80\xc0\x80\xc5\x8c\x37\x18\xec\x07\x1c\x76\xb5\x6d\xe5\x72\x5f\xe0\xf8\xb9\x76\x5f\x2b\x19\xb1\xc8\x53\x44\xbc\x45\x17\x81\x40\x9c\xc1\xa1\xa0\x61\xa3\x98\xe9\x06\x77\x0c\x1c\x3e\x86\x0d\x6a\xca\xd5\xcd\x54\xf7\xbe\xb6\x87\x7d\x23\x52\xfd\xc1\x38\xde\x93\x05\x2d\xbe\xc0\xb3\x08\x7a\x1a\xc8\x45\xfe\x7c\x8f\x24\x17\x79\xff\x1e\xd9\x31\x9a\x4c\x24\x4a\x44\x07\x23\x3c\x2f\xcd\xb2\x84\x73\x02\xeb\xa5\x7c\xb9\xb7\x2a\xb2\x05\x0b\x75\xd3\x3b\x85\xcc\x70\xa1\xd8\xda\x03\x8a\xa1\x0e\x79\xcc\x0b\xc3\x45\xfb\x7e\x10\x67\x72\x3d\x24\x69\xd2\x48\x80\x68\x6a\x0d\xd1\x25\x57\x79\x86\x82\x1a\xc5\x1e\xde\x15\x28\x45\x34\x2f\xd2\x9e\x17\x75\xbb\x3c\x14\xfd\x16\x0f\xbc\xb5\x28\xc0\x53\x34\xa0\xda\xa3\xf1\xeb\x50\x92\x7a\x29\x04\xfb\x82\x4f\x13\xe8\x72\x9d\x7e\x01\xc8\x3c\x87\xb5\x43\x8c\x42\x01\x4f\xa2\x18\x77\x4b\x39\xc8\xd0\x24\xaf\x07\x5d\x65\x7b\xc6\xc8\x6e\x86\x1a\x5a\x9f\x95\x99\x58\x8c\xce\xd3\x31\x11\xda\x2c\x27\xdd\x41\x0c\xa2\x4d\x8c\xb7\x4f\x0a\x2f\xf0\x8c\x51\x93\x8d\x92\x06\x3a\xf0\xf8\x50\x54\x85\x3a\x43\xe2\x0d\x6e\x45\x2b\xf1\xc0\xeb\x04\xb1\x3a\x82\x04\x66\xdf\x08\xe9\x52\x98\xcd\x27\x1a\x33\x65\xf4\xe0\x17\x7a\xa8\xbc\xb7\x84\x4e\xdd\xef\x61\x79\x62\x62\x0e\xd2\x7e\xa6\x78\xf4\xad\xc5\x73\xe3\x0d\xb2\xa9\xf6\xb5\xda\xbf\xed\x61\x8f\x57\x74\xda\x86\xee\xf4\xf9\x3d\xfe\x07\x27\x14\xda\xa0\xe2\xdb\x36\xf6\x9e\xac\x9f\x60\xcf\x48\xeb\xee\x5c\xd5\x57\xc4\x43\x48\x1f\x07\x89\xc7\x2f\x44\xb9\xbc\xfd\x17\x15\xeb\xf1\x0c\xf0\x04\xfa\x39\xcf\x1a\xa8\xa4\xc1\x62\x6b\xd1\xe9\xab\x2f\x64\x6a\xee\x85\x7c\xa5\xbf\xba\x0a\x5c\x71\x60\x6d\x83\xe3\x80\x01\xd4\xaf\x8c\xfe\xd0\xed\xc6\x1d\x99\xb2\x9c\x46\xc5\xa8\xa0\x13\xb1\x29\xca\x7d\x5d\x13\x95\xcf\x4b\x1d\x4f\xe8\x15\x61\x08\x75\x1f\x6e\x21\x3a\xd0\x5a\xad\xaa\x2b\xc7\x57\x3a\x57\xc9\x54\x46\xb7\x98\x4c\x0d\xe3\x5c\x42\xb6\xe7\xfa\x31\x37\x3c\x90\xca\x05\x64\xeb\x10\x91\x52\xda\x0f\xe7\xf6\xa8\x6c\xd6\xff\xe2\xb0\x27\x20\x25\xc0\x2c\x0f\xc2\x38\x4a\xb8\x94\x7c\x9f\x51\xb4\x4a\x1f\x74\xb6\x24\xf9\x68\xb2\x05\x92\x30\xd4\x93\xf6\x3a\x2f\xe3\x31\x8a\xaf\x22\x45\x8d\x73\x19\x9c\xb2\x78\x3b\x25\xe4\x65\x49\x07\x2d\x96\x21\xa6\x17\x87\x76\xc4\xf5\xed\x06\xd9\x79\xf0\x48\xd3\xea\x38\x2c\x57\xc3\x7d\xcc\x54\xf0\x6c\xe1\x29\x66\x60\x1e\x59\xa2\xd3\x5a\x80\xbf\x5a\x63\x86\xdf\xa1\xfb\x53\x35\xff\x75\xca\x64\xb6\xe9\x21\x65\x66\xbb\xaa\xe0\x32\xdc\x89\xa9\xba\x99\xbc\x0b\x7a\x4a\x83\xee\xb9\x90\x56\x6a\x8e\xff\xa7\xa9\x7a\xff\x30\xc1\xae\xc9\x0c\x37\x2f\xb8\xb9\xfa\xc4\x84\xff\xa1\x89\xc5\xd2\x53\xb4\x1c\x60\x2c\xa4\xed\x90\x46\x17\xe7\x91\x9e\x2f\xe4\xe4\x82\x1e\xa8\x75\x52\xf2\xb4\xf5\xa4\x4f\xc7\x7e\xfb\x76\x0b\xaf\xe7\xec\xac\xd5\x41\xc2\x44\x0b\x17\x6d\x14\xc2\x1b\xbc\xd2\x86\x6e\x70\x51\x5a\x4a\x0e\x5f\xc4\xf9\x35\x7c\x2b\x7d\x0c\xf4\xf1\xed\x72\xcc\x0d\x50\xd6\x17\x0d\x28\x92\x78\x14\xcb\xa3\xed\x26\xc1\x1c\x3d\x3d\x74\x28\x4b\xfa\x39\xb7\xd9\x59\xa9\x6b\xe9\xec\x99\xed\xc0\x21\x8e\x72\x6a\x40\x35\x94\x23\x1c\x28\x59\x2b\xbc\xd0\x14\x24\x95\x5e\x70\x37\xd9\xf1\x0e\x13\xec\xff\x2a\xd2\x5e\x1a\xa7\xab\x83\xa5\x5e\xc6\x83\x70\x46\xdf\x39\xbb\x9f\x9a\xf0\xff\xc0\x59\x1e\xf5\xba\x44\xb7\x69\xb0\x08\x80\x37\x5a\xda\x5f\xed\xa0\x0b\x2c\x24\xf4\x82\x56\x96\xe6\x62\xce\x60\x76\x74\xaf\x9e\x37\xbd\x25\x9b\x02\xc0\x06\xfe\x87\x05\xb4\x1e\x0c\x68\x20\x82\x95\x28\xe4\xb9\x41\xa2\x29\x2b\xd3\xf4\xa6\xe3\xd8\x1b\xd9\x14\xd0\x17\xa6\x4f\xcf\xf2\xed\x70\x16\xeb\x2b\xb2\xea\x5c\x2f\x3a\x77\xb3\x27\x0e\x47\xae\x74\x83\x9e\x58\x82\xb9\xfb\x14\xd7\x6f\xa8\x2a\xdd\xc7\x07\xac\x01\x5b\xea\xd9\x84\x20\xc3\xc5\x66\xc3\x2e\x3a\xde\xc8\xf0\x97\x7d\xee\x9e\x6e\xd0\x63\x17\x9d\xe6\x26\xab\xfd\x6a\xf7\x4a\xb3\x9c\x6d\x2c\xfa\x9f\xd9\x6f\xf9\x7b\x13\x71\x62\x73\xa9\x0f\x0b\xd9\x7d\xe5\x7e\xff\xb7\x1d\xfa\xa1\x89\x5d\x02\xcf\x62\x6f\x02\x7f\x55\x45\x5f\xd3\x07\x56\x73\x40\xfd\x43\xf6\x5e\x2f\x4b\x63\x15\xb9\x62\x82\x07\x10\x49\x75\x4b\xac\xa1\x08\x0c\xae\xe2\xc0\x23\x8e\x0a\xc8\xa5\xaa\x81\x42\x74\x79\x60\xe8\x08\x48\x9b\x93\x37\x83\x12\x4d\x44\x6a\x38\x50\x05\xb1\xb7\xe0\x8c\x44\x74\x25\x82\xb0\x22\xfe\x18\xcb\x2b\xfd\x6d\x7b\xd9\x6f\x39\x6c\x52\x42\x75\xb8\xef\x72\xfc\x9f\x54\x48\x1d\x74\x0a\xb3\xb0\x3a\x2a\x78\x3e\xf2\x3e\xc5\xc0\x58\xf6\x7b\xbf\xe2\x90\x23\x3f\x2d\xa9\x95\xfe\x48\xae\x49\xcc\xe4\xac\x6c\x14\xd6\x4a\x65\x62\x2e\xe7\x4f\x49\xb8\x9e\x8f\x3b\xfe\x07\x9c\xfb\x08\x97\x87\xfa\x10\x8d\x69\xba\xca\xb4\xbd\xe6\xa6\x47\x14\x88\x60\xdd\x4c\x80\x88\x39\x9b\x23\x3e\x0c\x94\x2b\xa1\x61\xec\x26\xf9\xca\xd7\x7a\x9a\xea\x0f\xce\x36\x74\x09\x66\x04\xef\xe0\xd9\x25\x09\x4d\x7f\x35\x23\x09\xed\x0b\x19\x07\xe8\x22\x31\x2f\xb2\x2c\xb5\xdd\x01\x6f\x27\x68\xf9\x23\xfe\x53\x4c\x68\xf9\x51\x6d\x34\x93\xfe\x96\x63\xf2\xf3\x00\xa2\xd1\xe9\x31\x3c\x3c\x32\xa8\x49\x36\x8d\x8a\x90\x20\x48\x70\x94\x93\xc9\xeb\x6a\xee\x61\x77\x89\x59\x6a\x75\x58\xe9\x08\x96\x16\xb4\x6d\x6c\xbf\x03\xbe\xfb\x1a\x13\x18\x73\x4c\xb0\x8c\x9c\xc0\xee\xc7\x1e\xe7\x3f\x53\xcd\x66\x8b\x9d\x49\xd4\x9f\xe2\x0c\x14\x70\xa8\x04\x69\xd1\x4e\x12\x9a\xd7\x64\x4d\xd3\x03\x91\xb8\x6f\x2a\x3e\xa6\x49\x99\xd0\x5a\x5a\xdf\x75\x35\x7b\xbd\xc3\xd4\x3b\xf7\x95\x8e\x7f\x54\x61\xc6\x48\xae\x0e\xf5\x40\xd7\x42\x1e\x87\xb0\x10\x53\x66\x9f\x61\xa7\xd8\x7d\x97\x10\x3b\x04\xcd\xa7\x50\xb7\x13\x69\x36\x2b\xb1\xb4\x76\xa3\xe2\x76\xa3\xe2\x1e\xbb\xa8\xb8\x1b\x49\x9c\x7d\x8b\xff\x9f\x93\x11\x1e\x61\x72\x09\xe8\x44\xbf\xe3\x40\xd4\x00\x2e\x4a\x39\x6f\x7f\xde\xb9\xac\xcb\xc2\x6f\x95\x4b\x90\x75\x93\x42\x40\x8b\x05\x52\xc7\xc4\xbe\x81\xe7\x69\xa9\x37\xf7\xb2\x74\x25\x58\x89\x07\x1a\x03\x14\x3c\x09\x64\x16\x4d\xf6\xd7\x7b\xd9\x13\x31\xc9\x74\x18\x66\x3c\xcf\xef\x1e\xcc\xc0\x20\xce\xcc\xcf\x2e\xe6\xee\x07\xf6\xfa\xff\x63\x4f\xe0\x75\x03\xd8\x71\x69\x78\xc5\x2b\x05\xe6\x98\x89\x93\x99\x48\xa8\xa8\x98\x24\x66\x80\x21\x3e\x94\x82\x5c\xa4\x5e\x87\xc7\x3d\x85\x93\x97\x81\x55\x53\xda\x00\xe8\xd4\xd2\x35\x62\xd1\x1a\xbc\xdd\x8e\x5a\x50\xac\x50\x42\x7b\x69\x9e\x47\x2b\x31\x6f\x7a\x33\x94\x83\x50\x5e\xa4\x8d\x22\xe8\xf5\xb2\xb4\x97\x89\x63\x6c\xb9\x72\x41\xee\xf5\xc8\x28\x86\xd5\x27\x44\xb2\x01\x9e\x66\x60\x2e\xca\x2b\x4b\x45\x62\x43\x07\x9d\xba\xaa\x2e\x09\x10\x59\x1e\x18\xb3\xa4\xb5\x5c\x34\x59\x64\x8d\xb6\x3a\x2a\x3e\xe3\x45\x3f\x4b\xc8\xea\x81\xa8\x54\xd0\xb1\x2a\x32\xac\xe8\xc0\xd5\xb7\xac\x8e\x02\x77\x08\x12\x59\x31\x0b\xdf\x09\xaf\x6b\xc0\x95\x96\xa2\x7e\x44\xfe\x78\x99\x44\xb2\x6a\x7e\x01\x5b\x28\x8a\xac\x4b\xd2\x27\xca\x16\xba\x9b\x2b\xfc\x40\x51\x43\xbc\x06\xb2\x33\x90\xab\xde\x8b\xd3\xf4\x3c\x50\x1a\x3e\xa3\x71\x22\xcd\xd6\x83\x2c\xe4\xa1\xf8\xcb\xeb\xf0\x20\xc4\xfb\xb7\x67\x34\x16\x79\x10\x37\xe6\x7b\xc6\x33\x69\x7b\x5d\xe4\xdd\xb4\xe0\x62\x62\x11\xde\x66\x50\xa0\x1d\xea\xb0\x98\x08\xab\xdc\x6a\xf2\xfc\x82\xb5\xcb\x2c\xb0\xd3\xec\xe4\x25\x2c\xa7\xa5\x51\x93\xf9\xa2\xb3\xb0\x79\xac\x66\xc3\xfd\x96\xaa\x58\x4d\xb9\x79\x97\x83\x35\xbf\x78\x05\xbb\xad\x84\x58\xaf\x75\x47\x89\x71\xb3\xc4\xe3\x36\x69\xf0\xd3\xad\x16\xcf\xf3\x45\xbe\x16\xf1\x75\xf7\x17\xae\xf0\xbf\xea\x8c\x78\xe9\xb5\x3a\xbc\x75\x5e\x3b\x42\x48\xf0\x1f\x22\x5b\x05\xfd\x5a\xcc\x11\x69\x71\x0c\x12\xb2\x32\x36\x3d\xef\x74\x5a\x78\xed\x08\x5d\x04\xf0\xea\xad\xc7\x5b\x06\xe1\x21\x7a\x6d\xf9\x44\x62\xa7\x9e\xe7\x3e\xdc\x47\xc4\x6d\xda\x3b\x28\x3e\x40\x2c\x8a\xba\xb7\xc2\x5b\x41\x1f\xc3\xe0\xf5\x3e\x1a\x80\xeb\xba\xe9\x16\x0a\xb5\x36\xf9\x7d\x06\xd5\xb5\xac\x22\xca\x78\xfb\xe4\xae\x22\xb0\xab\x08\xfc\x3b\x21\xca\xf8\x19\x87\x98\x32\x7e\xc2\x61\x4f\x1b\xcb\x70\xb1\x65\x79\x01\xac\xf7\xcf\x80\xc0\x6f\x3c\x10\x8f\x85\xa3\xa1\x83\x98\x8a\xca\x6b\x7a\xa5\x43\xb9\xe6\x4f\x83\x73\x10\x7b\x87\xa3\x00\xc3\xde\xec\xb0\x7b\xb7\x5b\xe7\x8a\xfa\x42\x66\xfe\x59\xc2\x1e\x83\x6b\x81\x38\xc6\x93\x05\xe9\x2b\x72\x8f\x16\xd3\x74\xc8\xf7\xab\xb0\x31\xbd\x24\xe7\x2f\x58\x1c\x8a\x8b\xce\xda\xe6\xc2\x7c\xc9\x7d\xba\xc5\xfb\x51\x3e\xd6\x2b\xf1\x3e\xa2\xc7\x2b\xd1\xc4\xdf\xb8\xcf\xe2\xab\xb0\x28\xb7\x8f\x62\x67\x48\xfe\xe0\x53\xc0\xfe\x8b\xed\x77\x3f\xbf\xd7\x4f\xaa\x5e\x94\x62\xbc\xa4\x84\x57\xfe\xb3\x81\xb7\x1a\xa7\x2b\x9a\x8c\x58\x2c\x9d\x72\xac\x77\x90\x58\x98\x64\x24\xed\x36\x1c\x86\x69\x4e\xc3\xf1\xf0\x4a\xca\x1a\x6c\x0e\x96\xe4\xfd\xe0\x1e\xf6\x72\x87\x59\xef\xdd\xef\xdc\x51\x84\xad\x7f\x97\x99\x99\x54\x3e\x87\xda\x56\x74\x14\x45\xf2\xa1\x80\x60\xb4\x20\xfd\x61\x16\x32\xa3\xf2\xee\xfd\xfe\xbc\xfe\x55\x56\xd1\x03\x99\x07\x98\xb2\xc1\x51\xc8\x60\xe0\x8e\x12\xf9\x9a\xa8\x37\xcc\x35\xff\x56\x87\x5d\x8d\x6f\x95\x7b\xc5\xab\x1d\xf6\xad\x97\x82\xbc\x1f\xac\xf0\x58\x66\xe2\x2f\xd8\x99\x8a\x1a\x4b\x3b\x3b\xd1\x71\x0c\x4c\x04\x02\x30\x4b\xe7\x3c\x93\x01\x76\xb0\x6b\xa3\x2b\x28\x66\xd4\x64\x3f\xe9\xb0\xc7\x53\xff\x4d\x23\xad\x39\x8e\xd3\x2b\xb7\x43\x14\x50\x31\x50\x4f\xaf\xc8\x74\xe4\x78\x51\x47\x12\xaf\x7a\x48\xcc\xe8\x92\xce\x3b\xc4\xa0\x00\xf6\x72\xc6\x9e\x54\x61\xc4\x05\x97\x15\x21\x12\xff\xee\x80\x7f\xa7\xfc\x51\x02\xab\x34\xdc\x2a\x10\x8d\x15\x6f\xbc\x34\xa4\x1f\x74\x8f\x0d\xc6\xfc\xc6\x03\xec\x63\x62\xf6\x9a\xfc\xd8\xef\x77\xb6\x10\x8e\x5b\xe6\xcd\xf6\x5f\x51\x11\x0a\xa7\xa1\xeb\x85\xba\x0a\xb5\xb1\x23\xac\x60\xff\x13\x1a\xff\xec\x20\x09\xba\x51\xcb\x62\x14\xb6\xc9\xc8\x95\xc0\x25\x0a\x72\xe9\x4e\x43\x49\x54\xa8\x91\xba\x42\x65\x8f\x38\x8c\x71\x12\x1a\xf3\xb3\xee\x05\xff\xbc\x76\xcd\x00\x6a\x20\x50\xe1\x08\x6d\x2d\x37\xa9\xf6\x75\xb4\xeb\x22\xdc\x97\x49\x3a\x53\x70\x0d\x38\xd2\x3c\x72\x63\xd3\xcb\x4d\x70\xb0\x28\xcf\x85\xd6\x42\x7b\xec\x2d\x47\x6e\xbf\xe5\x16\x73\xa1\x3c\x9d\xed\xef\xa5\xa1\x50\xa3\xdd\x13\xfe\xed\x0b\xf8\x67\x19\x94\xa2\x97\x86\xe2\xf4\x91\x05\xc9\xaa\x11\xac\x63\x32\xa0\x5a\xc0\xe0\x35\x36\x49\x79\xe6\xee\x1b\x6b\xfe\x9f\x38\xf2\x57\x39\x5f\x99\x67\x5e\x99\x29\x74\x23\x42\xa2\xad\x0c\xbc\x05\xb8\xf9\xb0\x7c\x91\xe6\x2d\x92\xdc\x28\x2f\x0f\xf1\x0d\x45\xc7\xe3\x49\x91\x0d\x4c\xd7\x27\x6a\x0f\x34\x93\x3a\x72\x9e\x68\x8b\xd1\x7e\x27\x4e\x45\x70\x50\x3d\x62\xd8\xc2\x11\x34\xb6\xed\xcd\x2f\xac\xdd\x44\xf1\x38\x6b\xb7\x8c\x05\x40\xdc\xf2\x3d\xc1\x0b\x1d\xc6\x7a\x59\xba\x16\x85\x3c\x9b\x9f\x75\x73\xbf\xad\x69\xb9\xa1\x1b\x54\xdf\xc8\xbb\x99\x38\xed\x87\x9e\x4c\x62\x42\x12\x06\xc5\x31\xef\xf8\x02\xbd\x10\x12\xf5\xce\x63\x53\x53\xea\x01\x85\xee\xb5\xc4\xf2\x98\x9f\xbd\xd3\x86\xc3\xdb\x57\xe0\xc5\xd4\x33\xfd\x61\xaf\x62\xe9\x2c\x86\x9f\x58\xad\xbe\x9e\x1d\x62\xff\x65\xf3\x6b\x1e\x91\x90\x7d\xd8\x61\x57\xf5\x13\xba\x84\x12\x0b\xc5\xfd\xff\x1c\xff\xa7\x9d\xb3\xe6\x23\x19\xb4\x8d\x2c\xb4\x9e\x7a\x13\xc5\x14\x45\x9e\xf0\x75\x02\x1e\xbe\x5b\x85\xb7\xd7\x95\x30\x31\x72\xda\xb6\xab\x1a\x30\xd8\xc2\x7f\xa7\xae\xeb\x06\x49\x3f\x88\x31\xfe\x3a\x08\xbb\x51\xa2\x10\xed\x2d\x47\xf1\x17\xba\xec\x1b\xaa\x3c\xd0\xb2\x74\x85\xbb\xff\xfd\x5a\xff\x05\x0e\xfc\x69\xc8\xc2\x40\x1c\xa6\xe3\xa2\x43\x07\x2a\xf4\xb5\xa3\x53\x14\x0f\xbd\x60\x35\x88\x92\xbc\x40\xce\x7e\xed\xbb\x11\x72\xf4\xe3\xe1\xda\x7f\x9e\x54\x27\x70\x21\xc8\x08\x5b\xa1\x48\xc5\x81\x87\x83\x07\x41\x16\xb4\xdb\x51\xcb\x16\xa8\x1f\xb9\x46\xec\x8b\xd7\xb4\x31\x66\x79\xb9\x93\xf1\x5c\x28\x9c\xee\xf7\x3b\x32\xf4\xff\xf9\xa7\xa2\x24\xea\xf6\xbb\x70\xff\x07\xa4\xc3\xe4\xe0\xdb\xcf\x0c\x86\x0b\xf0\x82\xa5\xba\x1b\x0e\xc1\xd2\xf3\x00\x24\x51\x27\x00\x53\x51\xde\x6f\xb5\x38\x0f\x79\x29\xfa\xe2\xc6\xa6\x27\x4b\x52\x96\xfb\x23\xb6\xcb\xc1\x79\xb6\x5f\x8c\xda\x3d\xbc\x70\xcf\xb1\xe6\xe6\xf1\x67\xcb\xcb\x0b\xf7\xf0\x62\x1a\x81\xf9\xe4\xcf\x12\x70\xbf\xc8\xd0\x84\x10\xa2\x8e\x6f\xb2\x57\x39\xec\x40\xd1\xea\x2d\xa5\xad\xf3\xbc\x70\x5f\xe4\x6c\x01\x71\x6a\x79\x66\x01\x3f\xa7\x22\xcf\xa8\x07\x26\xb2\xa3\x3c\x17\x03\x59\x44\xbc\x86\xde\x3e\xcb\x33\x0b\x80\x98\xd4\x84\xbf\x3a\x60\x8a\x11\xda\xdf\x40\xa4\x95\x76\x7a\xf6\xd5\xbd\x9b\x39\xdd\x7d\x74\xaf\x74\x3d\x79\xef\xde\x9d\x3b\xdd\x79\xfd\x1e\x98\x1e\xc5\xd8\xd2\x90\xef\x7a\xa7\x8d\x76\xf1\xa3\x08\xd1\x71\x03\x64\x39\x3c\x58\x28\xa9\x46\x9e\x42\xd5\xca\xa2\x50\x5a\x3f\xe0\x19\xc9\x76\x25\xf1\xb5\xbf\xd7\x63\xee\xf3\xa8\x1c\x22\x12\xf4\x01\x33\x18\xea\x09\xfd\x8a\xa0\x3b\xc4\xa8\x83\xf4\x5b\xae\xec\x22\x4b\x81\xb2\x57\xfe\x67\x1c\x76\xb5\x18\x8e\xb4\x5f\xc8\x99\xfe\x61\x25\xa1\xde\xe3\x9c\xee\x77\x57\x78\x06\x21\x8d\xd6\xc4\x43\xbb\xb8\x21\x9f\xa2\x2e\x07\xd8\x58\x5b\xf4\x1c\xa1\x64\x95\x12\xe8\x72\x82\x35\x5c\xa7\x44\x78\x03\xc3\x06\xac\x46\xbe\xca\x61\x7b\xf8\x05\xde\x72\xbf\xdb\xd9\x42\x28\xf1\xdc\x05\xde\x22\x39\xf3\xcc\x33\x09\x12\xbd\x80\xe5\x99\x60\xbe\x51\x01\x10\x07\x69\x10\xba\xca\x07\xc8\x08\xff\x15\x59\x94\xc4\x21\x89\x26\x21\x0f\x82\xf3\xbc\x29\x3a\xfe\xf1\x14\x81\x32\xcb\xe3\x60\x20\x7b\xff\xbf\xa9\xde\x7f\xe7\xc8\xde\x2f\xcc\xe0\x73\x08\xc6\xa4\xd8\x12\xe9\xbf\x16\xdb\x61\x15\x44\x02\x4f\x9e\x94\x5f\xc7\x8e\x7f\x3e\xbb\xaa\x67\x49\xd1\x58\x36\xee\x81\x7b\xd3\x75\x2f\x6d\x17\x1c\x49\xa4\xa8\x7d\x87\x4d\xff\x4f\x35\xbb\xac\x00\xd3\x23\xda\x6d\x75\xd3\x6d\xed\x43\x0e\xbb\x06\x36\xc5\x3c\xd7\x1b\xf0\x7b\x54\x07\xff\x98\x53\xb5\x03\x53\x82\xcd\xb7\x60\xfa\xb0\xdd\x8f\xed\x6d\x18\xb7\xe6\xd2\x42\xd0\x1c\x58\x47\x20\x5f\x35\x42\x10\xfe\x8f\x11\x2f\x9b\x37\xe8\x2d\xcc\x02\x83\xaf\xe2\x11\x94\x08\x30\x27\xf9\x1a\x8f\x67\xcc\x43\x16\xb0\x4b\x7e\xe6\x80\x7f\x66\xfc\x27\x36\x71\xc6\xe8\x6f\xc7\xb3\x4f\xfe\xc3\x2e\x4c\xeb\x8e\xed\xd0\x2f\x75\x24\xfd\xe4\xc3\x8e\x7f\xa8\x92\x7f\x92\xf4\xab\x86\xc6\x16\xb2\x4e\x0c\xf7\xb1\x79\x76\xcf\xb6\x68\x28\x47\x8f\xf7\xae\x59\x7c\x07\x66\xf1\xcf\x98\xa8\xb1\x7f\xbc\x43\x5a\xca\xd7\x8c\xa3\xa5\x7c\xec\x50\x64\x2f\x3a\x2f\x71\x36\x37\x27\xaf\xb8\xe7\xb6\xc7\x4d\x39\x5e\x5a\x55\x5a\x97\x3f\x7a\x2d\xab\x1b\xf3\x5c\x07\xfd\x35\xd7\x8e\x80\x22\xa5\xe7\x39\x38\xcb\xba\x3f\x76\xad\xff\x69\x67\x76\x6e\x61\x71\x6e\x66\x7a\x79\x6e\xd6\x6b\xa0\xea\x85\xde\x63\x86\xb7\x90\x0d\xaf\x15\xe5\x14\x0d\x24\x21\x03\x8d\x82\xa8\x73\xd7\x8e\x4c\x59\x69\x9a\xa5\x2c\xa4\x10\xec\x06\xbd\x1e\xec\x1d\x62\xc2\x07\x1a\x87\x0b\x5d\x74\xc1\x46\x2b\xbd\xbc\x15\x98\x21\xee\x09\x12\x32\x4e\x2b\xa2\x84\xa4\x10\x24\x12\x79\x44\x2a\xab\x1b\xce\xde\xb5\x21\xb3\xf5\xaf\x5c\xbd\xbb\xb0\x77\xe1\xa0\x6d\x38\xe8\x5d\x38\x4f\x18\xdb\x9f\x74\x18\x2e\x18\xf7\x0d\x4a\x67\xfc\x6e\x47\x2f\x34\xa9\xa4\xd8\xab\xd5\x70\xd3\x41\xb5\x1f\x30\x00\xe4\x27\x60\x51\x85\x7e\x91\xd6\x23\x79\xee\x1e\x68\xd4\x5c\xed\x36\x15\xe5\x24\x02\xf0\x4c\x1f\x65\xfa\x78\x6a\x29\x86\xbb\xba\xd6\x0e\x75\xad\xef\x73\xd8\x15\x46\xf4\xa8\xfb\x1d\x7e\x6a\x06\x93\xd2\x21\x3c\x5b\x89\x8a\x2c\xc8\x06\x52\x34\x52\x88\x44\x1f\x50\x53\xc8\x90\x90\x7b\xab\xfd\x28\xe4\x31\x74\x78\x9a\xc8\xf1\x1d\x9a\x27\xa5\xe8\x11\x6b\xe6\xfd\xc4\x04\xbb\x0a\x2f\x2c\x69\x11\xb8\xaf\x9e\xf0\x5f\x32\x61\x3d\x32\xce\x97\xfa\xb2\x37\xca\x4b\x1b\x8c\x2e\xc4\x38\xb9\x04\x76\x48\x87\xaa\x17\x61\xce\xd2\xb5\x11\xf1\xb9\x21\x7e\x60\x32\x18\x9a\xe6\x67\xe4\x99\xd8\x2e\x51\x02\xf9\x04\xd9\x79\x2c\xea\x9c\x55\xed\x73\x4d\xef\xde\x74\x1d\xd7\x7d\xd4\xf6\xba\x18\x6e\x25\x66\x5a\x39\x27\x9e\x63\x10\x9d\x86\xcb\x8c\xb2\x72\x66\xb4\xe8\x25\x08\x74\x26\x9d\xb1\xf3\x6e\x10\xc7\x62\xfe\xa9\x95\x0a\x8e\xcd\x74\x09\x2c\x1b\x5e\x2e\xce\x0a\x1a\x1d\xd1\x49\x16\x7a\xc9\x45\xe7\xdb\x37\xd7\x78\xee\x71\xe7\x94\xc6\x33\xa4\x21\x0c\xa9\x39\x50\x17\x5b\xab\x41\x95\x85\xb1\x37\xed\x61\x87\x4d\xb5\x06\xbd\x10\x35\x32\xd1\xe9\x34\xe4\x8a\xff\xd0\xfd\xd2\x84\xff\xb4\x8a\xe7\x32\xce\xdd\xa2\x45\xf4\x62\x84\x20\x00\x2e\x20\x0d\x91\xa0\x31\x9a\x6c\xdb\xf6\x0f\x4d\xb0\x57\x4f\xb0\xbd\x18\x32\xfd\xbd\x13\x52\x36\x7e\xa5\x76\x2a\xb8\x00\xe7\xd7\x44\x19\x2e\x08\x3f\x42\x42\x3d\x75\x83\x04\xee\x3c\x49\x20\xcf\x2c\xcd\x7b\x61\x16\xad\xa1\xb5\x50\x81\x40\xf5\x09\x6e\x51\xc6\xd6\x4f\x53\x7a\xe5\x1c\x09\x50\x74\x41\x51\x04\x80\xbd\x0b\x32\x85\x70\xa3\x54\xaa\x61\x00\x0d\x9d\x71\x8b\xd7\x61\x6a\x17\xeb\x51\x8b\x54\x27\xc0\x89\xb1\x68\x21\x11\xec\xdd\xaa\xbf\x76\xce\xec\x04\xb0\x8e\x00\x15\x43\x39\x3a\xf6\xd4\xad\x99\xc4\x9d\xa9\xbe\x39\x1b\x46\x6c\x4c\x4a\xce\xeb\xba\xff\x64\xc7\x49\xd6\x25\xd9\xb4\x7e\x02\x2c\x2c\x12\xa4\x49\xc5\x0e\x5e\xcd\x0e\x55\x98\xb4\x16\x79\x2f\x8e\x90\x3e\x59\x03\xff\xba\xaf\xb8\xda\x3f\x53\xf9\xa6\x7c\x75\x68\xdf\xd5\x82\xb3\x40\xa6\xd3\x99\x58\xf5\xd6\x34\xf9\xf0\x95\xbb\xfb\xd2\xae\x2f\xda\x63\xa7\x9b\x7f\xb2\x66\xe8\xe6\x1f\xa9\xed\x54\x37\x7f\x65\x8d\x22\x68\x4e\x22\x8e\x07\xac\x83\xea\xf5\x03\xd0\x40\x2a\x42\x73\x40\xcc\x87\xc4\x48\x47\xb2\x48\x49\x89\x40\xaa\xd0\xe1\xa1\xfc\xb0\xf6\x61\xae\x5e\x61\x24\x41\xc5\xe8\xfd\x1f\x70\x50\x78\x69\x8d\x1c\xf4\x5e\x54\x63\xc7\x36\x35\xac\x57\xf6\x15\x38\xe4\xbd\xcf\x21\x37\x16\x2d\x0e\xa4\x5b\x8f\x5a\xf4\xb8\x19\xe7\x11\x78\xea\xf3\x4e\xb0\x16\xa5\x99\x0e\x77\xaa\x94\x46\x8f\x76\x3f\x88\x3a\x36\x82\x24\x6c\xa0\xcb\x1f\xfb\xcb\x9a\xf2\xfe\xfb\xa3\x1a\x3b\x7e\x89\x1d\x82\x1e\x7f\xdf\x5f\xd3\x2e\x7f\xca\x9d\x5f\x9c\x19\x20\x94\x3b\x5d\x01\x63\x49\x28\x91\xfa\x37\xe9\x07\x38\x91\x00\xbf\x1b\x05\xc4\x13\xc1\x9f\x58\xac\x60\xb8\x48\x01\x6f\x33\x09\xc1\x28\x0f\xb7\x39\x4d\x6f\x41\x91\x97\x48\x47\x43\x74\xfd\x02\x18\xa7\x46\x9a\x00\x74\xc8\xd7\xb5\x83\x2f\x3a\xcf\xde\x5c\xdd\x3a\xe6\xde\x56\xe5\x7c\x5e\xd9\xd7\x65\x4f\xf4\x5f\x66\xec\xf8\x58\xb7\xc4\xa3\xcd\x7b\xd3\x2c\x7a\x6e\x9a\x14\x41\xbc\x90\x86\xd3\xd2\x6b\x8b\x46\xcd\xfd\xe7\x03\xfe\xb7\x8d\xfd\xa2\xe4\xaa\x25\x9d\xc3\xf4\x30\x06\x5e\x47\xa5\xc7\x2b\x5c\x95\x43\x73\xc3\x79\x1c\x25\xa0\xd6\xe4\x1b\xce\xe3\x68\x4d\xe8\x27\x4c\xd3\x3d\x58\xdb\xf1\x5f\x4c\xb2\x7f\x71\x98\xf1\xd6\xfd\x5b\xc7\x7f\xa9\x63\x90\x43\x48\x5b\x22\x97\x58\x03\xf2\x05\xdd\x36\x1a\x34\x46\xba\x56\x48\x0f\x14\xc4\x1c\x90\xc7\x90\x06\xaa\x3e\xc2\x1b\x15\xdd\x4e\x29\x84\xc3\xc8\x5f\xc8\xc7\x2e\x2f\x2c\xdb\xf5\xd3\xd9\x19\x76\x6a\x9c\x03\xed\x56\x87\x46\x71\x3a\xb3\x77\x38\xec\x6a\xea\x40\x74\x1e\xcd\xdd\xd7\x3a\xfe\x29\xfb\x91\xec\x05\xa0\x05\x86\x90\x6f\x45\xfe\xac\x3d\x2d\x4b\x20\x81\xc6\x18\x6d\x3d\x2e\xbb\xaa\x09\xa6\x4f\x2b\xdb\x70\x58\x79\xbc\xdd\x47\x94\x25\xe2\xa1\xd2\x2b\x50\x78\x69\x3a\x69\xfd\x31\x93\x6f\x65\x3c\xbb\xa5\x81\x5b\x55\xaf\x8b\x9d\x08\x5a\x9d\x73\xae\xbc\x8b\xad\xa6\x99\x57\x51\x0e\x2b\x4f\x3d\xf7\x95\xaa\x72\xcf\x2b\xbd\x52\xae\x0c\x24\xc0\x77\x58\xc1\x56\x10\xb7\x6c\xd9\x34\xaa\x9a\x7f\xe7\xb0\xab\x44\x92\x25\xf1\x0e\xb8\xad\x3f\xe1\x5c\x3a\xb9\xf5\x9b\x1c\x2b\x2f\x6b\xaa\x28\x06\xee\x11\xd3\xd0\x23\xf7\x4e\x30\xf0\xa8\xe6\x8b\x26\xd7\x8d\xc9\xc4\x4b\x2b\x8b\xa4\x38\x40\x13\xe0\x75\xe9\x70\x7a\x18\xf9\x4e\x90\xac\xf2\xb0\xc9\x2e\x30\x57\x6e\x0e\xf7\x20\xa4\xbd\x50\xbc\x57\xa4\xf3\xca\xa9\xe1\x97\x15\x3b\x8c\x44\xc3\xc7\x6b\x3e\xda\x6a\x2a\x27\xbb\xd1\xd5\xbf\xb0\xc7\xb2\xba\x2b\xdf\x9d\x41\x8f\x87\x55\xa0\x8f\xee\xc3\x7b\xfc\xef\x1c\xf9\x56\x47\xf8\xf2\x24\xed\xaf\x76\x2c\x47\xfd\x22\xf5\x62\x8e\x04\x73\x71\xaa\x88\x36\x84\x1a\x18\x0e\x87\x3e\x7b\x11\x9c\x02\x8d\x63\x99\x42\xb0\x1e\x13\x4c\xff\xd9\x1a\xfb\x33\x33\x98\xfe\xf7\x1d\xff\xd7\x74\x30\x3d\x75\x19\x5e\x10\x68\x4c\x66\x52\xb8\x87\x43\xd4\xe7\xdb\x9e\x99\xb6\x02\xb3\x5f\xe3\x15\x81\x92\x2f\xbd\x4e\x34\x8b\x95\x11\xb7\x8f\xe1\x6c\x81\x22\x06\x29\x3a\x51\x16\x36\x7a\x41\x56\x0c\xa0\x13\xf2\xba\x55\x5a\xa6\x19\xf3\xb5\x72\x7c\x37\x9d\x2b\x8e\xf9\x0d\x79\xaa\x90\x7d\x68\x59\x06\xca\x6d\x29\xe5\x01\x51\x9f\xc7\xfc\x46\x95\x4b\xf9\x96\xf2\x78\xc3\x7f\xb6\x82\xbf\x4a\xfc\xe6\x9b\x50\x9b\x7f\xfa\x1b\xfd\xbb\xc6\x7e\x61\xc7\x89\x1b\x99\xab\xe8\x3a\x4d\x2d\xbe\xe1\x18\xd4\xd5\xd6\x5c\xb8\xf8\x64\xf6\xca\xc7\x59\xc4\xd6\x2f\x7c\x9c\xff\xe5\xab\xf5\xef\x52\xf8\x41\x56\x62\xbc\x56\x8c\x5d\x65\x8a\xeb\x26\x63\x27\xa3\xbc\x98\x5a\x07\x6f\x59\x75\xa6\x12\x13\x6a\x64\xb3\xd0\xc2\xd6\x8e\xe2\x02\x78\x76\x87\xc9\x98\x03\xcf\x2f\xd1\x31\x3f\xf5\xf4\xf4\xa9\x39\x1f\x3f\x92\xde\xf4\x4d\xc6\x1e\xe0\x71\xdc\x00\x72\x68\x33\xee\x41\x72\x41\x23\xeb\xf0\x91\xe6\x96\x28\xb0\xfd\x63\x1e\xfa\x3e\x57\xf0\x6a\xe7\xc3\xb6\x9d\x22\x85\x50\x12\xa1\xe9\xe1\xea\x4d\x3d\x3b\xdb\x26\xf3\xbc\x45\xb3\x3b\xa0\x95\xc4\x1f\x2e\xb4\x85\x84\x4b\xaf\xf9\x06\xc4\xab\x92\x80\x82\x5c\xb4\xe6\xdb\xc0\xcd\x24\xab\xcb\xd2\xa1\x92\x4a\xd4\xfa\xad\x3c\x93\xe4\xbf\x16\x8f\x5e\x32\x2a\x23\x64\xf8\xde\x16\x29\xf8\xe6\x3d\xa3\x3c\xcf\x89\x22\x63\x07\x5d\x23\xef\xfe\xca\xfd\x22\x5b\x8b\xcf\xb6\xde\xde\xba\xa4\xe6\xbf\x4c\x9d\x77\x63\x65\xe7\x99\x24\xe7\xb2\xb7\x2a\x38\xd3\x47\x74\x17\x74\x8b\xb7\x7c\x72\x49\x19\x2c\x72\x19\xb8\x6d\xf7\x1c\xb4\xa3\x95\x26\x09\xd1\x1c\x03\x0e\x25\x8f\x07\x97\x7d\xb2\x5d\xd6\x3e\x63\x70\xc6\x22\x96\x67\x04\x89\x5d\x0b\x22\x74\xe0\x0e\x0a\xed\xc0\x75\x9b\xf6\xdc\x52\x92\x76\x2a\x00\x17\xa5\x86\x98\x51\x09\xfc\xf7\xb9\x53\x46\x87\x36\xa8\x2e\x0d\x29\x79\xa6\xae\x33\xce\x56\x24\x08\x18\x9b\xe9\xe7\x45\xda\xf5\xb4\x3c\x41\x11\x14\xc4\x79\x5a\xf2\x7b\x03\x4b\x2a\xf6\x1b\x9d\xe5\x51\x84\x2c\x03\xd3\x7c\x68\xf0\xcf\x1f\x03\x8d\x06\x19\xe8\x0f\xcd\x4c\x7b\x2b\xfd\x24\x8c\x79\x7e\x18\x4d\x25\xf2\x43\xa1\xd0\x88\x05\xb7\xc0\xb3\x6e\x54\x14\x1a\x9f\x26\x3f\x06\x9d\xac\xec\x00\xc8\x85\x27\x12\xca\x08\x37\xfa\x50\xee\x7f\x20\x8e\x71\x02\x12\x86\x70\x58\xf7\x7a\x32\x5b\x80\xe3\x69\xa7\xd9\x4a\x14\x86\x3c\xf1\x2e\xdc\x7c\xc3\xed\x1e\xbf\x50\xf0\x04\xf1\x3c\x14\x55\x1e\x3a\x33\x1f\x8a\x92\x56\xdc\x07\x18\x20\x79\xb0\xa1\xd2\xa6\xe3\x02\xfb\x07\x86\x09\x6b\x22\xe7\x22\x6d\xcc\x19\x17\x6d\x23\x2c\xc3\x34\x51\x11\x79\x68\x64\x3c\xbc\x59\xb3\x54\xad\xca\x0d\xbb\x69\x2b\x0d\x3b\xcf\x07\x18\xe4\x91\x7b\x53\x98\x55\xc8\x43\xe3\x69\x93\x79\x37\x37\xbd\xb9\x0b\xbd\x88\x40\x64\xcd\x1d\x33\x8e\xda\x5c\x28\xb9\xc7\x4a\x8e\xf1\xed\xe8\x82\x61\x23\xa0\x0d\x4f\x99\x8c\xc5\x34\x95\x9a\x6d\xd8\x8d\x92\x26\xf3\x6e\x01\x96\x1c\xf3\x40\x68\xef\x7c\xd3\xf6\xa2\x37\xfa\xd2\xd2\x60\x5e\xeb\xb0\x89\x7e\x14\x22\xdb\x5f\x3f\x0a\xed\xbd\x5e\x3c\xa0\x23\x1b\x84\x6c\xe2\x1e\x44\xf1\x4f\x70\xf7\x30\x6a\x83\xad\xb0\x7c\x68\x48\x08\x31\x64\x88\x25\x29\xc6\x4e\xec\xea\xdd\x6e\xbf\x80\x18\x08\xb3\x6e\x2f\xde\xc7\xf6\x61\x97\xba\xff\xbc\xd7\x7f\xd7\x5e\xea\x74\xc3\x59\x5d\x9e\xb2\x8d\x21\xd1\x6a\x03\x4d\x38\x12\x1e\x46\x6f\x34\x19\xb3\x24\x95\x90\x7a\x95\xfb\xca\xa0\x47\x5c\x0e\x94\xe9\x31\xcf\x0f\xa3\xd5\xa8\x08\xc8\xf7\xb8\xe8\x67\xdc\xaf\x7b\xbe\x28\xde\xe6\xfc\xb7\xb9\xf9\xab\x0a\xac\x16\xcd\x15\x25\x56\x65\x5e\x59\x0b\x19\xc2\x4a\x25\x96\xf9\x21\x8e\x31\xcf\x57\x24\xfd\x23\xb2\x10\x83\x0f\xdd\x90\x76\xbb\x51\x81\xa5\xb1\xea\x2a\x88\x67\xc1\x6a\xc6\xb9\xaa\x53\x50\x04\xa5\xaf\x98\xe7\x8b\xe6\x41\x19\x90\x7d\x16\xab\xbf\xe5\x97\xe0\x15\x0c\xe9\x79\xe9\x41\x90\x0c\x20\x0b\xb3\x5d\xa5\x8e\x85\x12\x20\xec\x46\x37\x8c\x77\x83\x08\x58\xa0\x0a\x8e\xfe\xc7\xa2\x6b\xa6\xba\xe2\xe4\x29\x3e\x8f\x7a\x39\x6f\x89\x4d\x8e\x2c\x71\xe2\x35\x3e\x2b\xfa\x49\xc2\x63\xfd\xbb\x0f\x58\x57\xcc\xf3\xc1\x2f\xbb\x08\xba\x3d\x2a\x21\x6d\xe5\x3d\xb3\xc4\x6e\xd4\xca\xd2\x3c\x6d\x17\x5e\xbe\xda\x12\x0f\x12\x5e\xe4\xad\xa0\xc7\xe1\xf7\xb8\x90\xab\xeb\x46\xc2\xbd\x1d\x70\xf7\x07\x45\xda\x8d\x5a\x8c\xbd\xc5\x61\x93\xa2\x2e\x70\x4a\xf8\x21\xc7\xff\x1e\x47\xfe\x1a\x06\x70\x7a\x0c\x57\xeb\xfb\x1d\xb6\x97\x5f\x28\xb2\xc0\xfd\x15\xc7\x7f\xb9\x03\x7f\x1a\xe7\x4f\xf8\x69\x04\x55\x7e\x7d\x2b\xfa\x36\xe7\xc9\xec\x89\xa3\x47\xc2\x84\xf1\xfe\x0b\x87\xed\xc3\xb0\x74\xf7\x23\x8e\xff\x0a\x87\x42\xd4\x55\x4b\xf0\xb8\xda\xe5\xdd\x15\x9e\xe5\x9d\xa8\xf7\x75\xef\xf2\x1d\x4e\xa7\x2f\x39\x4c\x1e\xd6\xdc\xcf\x39\xee\x9e\x95\x41\xc1\xfd\x77\x38\x72\x5f\xd6\xc0\x7e\xb4\x85\x9b\xbb\x17\x4d\x7a\xb5\x89\xf3\x44\xac\xbe\x10\xb1\x3d\xfc\x99\xb9\xc5\xe5\xf9\x13\xf3\x33\xd3\xcb\x73\xde\xe2\xdc\xd3\xcf\xce\x2d\x2d\xfb\xde\xc2\xdc\x29\x6f\x25\x4e\x5b\xe7\x89\xd5\x2d\xe7\x19\xf0\x45\xa0\x73\xc0\xd3\x96\xce\x9c\x16\xfb\xd7\x33\xa7\x4f\x9d\x24\x20\x6a\x21\x46\xc4\x29\x2f\x44\x7b\x23\x48\xc3\x95\x20\xe7\xb7\xdc\xd4\xa0\xe2\x9a\xdb\x6f\xf4\x23\x57\x58\xa1\xf2\x8a\x81\xf1\x81\xa5\xb9\x38\xc8\x8b\xa8\x75\xb7\xa8\xe2\x52\x91\x66\x1c\xaf\xfb\x29\x7a\xf7\x43\xcc\x7f\x73\x6d\x51\x5f\xe4\x06\x42\x8b\xca\xa3\x1c\xa4\xe4\x6c\x94\x9f\xd7\xe7\xf3\x28\xf1\xa6\x1f\x58\x6a\x32\x36\x0d\x7f\x78\x73\x77\x2f\x09\x9d\xe3\x3c\x5a\x21\xc0\x09\x43\x46\x16\xc0\x3d\x3b\x81\xce\x1a\x81\x73\xa8\xfa\xe9\x34\x52\x37\x34\x59\x58\x44\xce\xcf\x4d\x13\x75\xe1\x45\x7a\x7c\xd3\x2b\x97\xda\x02\x6f\x10\x04\xac\x95\xf7\xfa\x01\xb2\x1e\x4f\xad\x67\x51\xc1\xe1\x0a\xbf\xa9\x12\xc9\x3b\x72\xba\x3f\xf7\xd2\xf5\x84\xe6\x37\x2a\xd1\xc0\x5f\x03\xf4\x76\x73\xc8\x00\x96\x71\x80\xe2\x8f\x92\xd5\xe6\x86\x33\x89\xc9\xe7\x67\xad\x23\xff\x2b\x27\xd9\xfb\x6a\x6c\x5f\x3b\x5f\x16\xc3\xf1\x9e\x9a\xff\xf6\xda\x89\x28\xe6\x04\x0a\x2c\xad\x24\x70\x6f\x6d\xb8\x06\x0c\xd2\xbe\xb7\x1e\x20\xdf\x21\xd4\xbc\xe9\x2d\x47\xbd\x63\xde\x5c\x92\xf7\x33\xae\xef\xf6\xda\xa5\xac\x22\x13\x33\x8e\x96\x54\x27\xcd\x0b\x2f\xed\x81\x19\x2e\x59\x55\x97\x2f\x73\x08\x62\x94\x1f\xf3\x7c\x7e\xa1\xb8\x49\xc8\xec\x0b\xed\x1c\x44\x77\xd1\xce\xfd\xa6\x37\xdf\x55\x14\x43\x70\xa9\xab\xbd\x1f\x30\x01\xb9\xcd\x69\xa5\x7d\x67\x34\x5a\xd7\x05\xeb\x39\xc7\x89\x08\x6b\x45\xbc\xe6\x96\x17\x5d\x8d\x1d\xe8\x05\x59\x01\x4b\xc2\xdd\x50\xcc\xc7\x2f\x46\xe6\x63\xf9\x46\x4e\x95\xff\x9f\xbd\x77\x0f\xb3\x24\x29\xeb\x84\x9f\x3c\xd5\xd7\x98\x19\x61\xd2\x4f\x77\xd7\x65\x25\x9e\x44\xec\x2a\xac\x3a\xd5\xd5\x3d\x17\xa6\x67\x18\xa6\xa6\xba\x7b\xa6\x98\xbe\xd4\x74\x55\x0f\xa2\xe2\x74\xd6\xc9\x38\x55\x49\xe5\xc9\x3c\x93\x91\x59\xd5\x07\xd7\x5d\x17\x14\xd7\x15\x04\x56\x5c\xb1\x01\x2f\x88\x5c\x57\x58\x15\x50\x14\x41\x17\x51\x57\xc0\x55\x46\x5d\xf1\x82\x7c\xc8\xb7\x9f\xba\x5e\x70\xd7\xcb\xda\x9f\xae\xdf\x13\xef\xfb\xc6\x2d\xcf\xa9\x4b\x77\xf5\x0c\xa0\xf5\xcf\x4c\x57\x9e\xcc\xc8\x88\xc8\x88\x37\xde\xeb\xef\xb7\xcd\x74\xce\x77\x79\xa1\x55\x5b\x37\x3d\x07\x51\xb1\xe0\x26\x35\x81\xd4\x0a\xf2\xdd\xda\x29\x3b\x5d\x94\xfa\xa7\xe9\x44\xac\x4f\xcb\x24\x9e\x41\xce\x26\xcd\xd5\x54\x79\x7d\x8a\x25\x8f\x66\xa2\x36\x5f\x44\xda\x8d\x8c\x10\x77\xa9\x09\x7b\x9f\xd2\x8c\x74\x83\xaa\x2b\xd1\xd1\x88\x8f\x63\x7d\x1b\xac\xe6\x4c\xe8\xd4\xbe\x7e\xa9\x3e\x69\x35\xc0\xf0\xf0\x84\xef\x41\xfd\x4c\xc0\x0e\xa9\x55\x7e\x3e\xcf\x06\xe1\x7f\x0b\xa2\x5f\x24\xb2\xd3\x01\x8f\x2a\x20\xe0\xae\x0a\xa8\xc7\x13\xc4\x91\x8f\x8b\xe9\x02\x3d\x61\xdb\x4e\x73\x8e\xa2\xe0\xac\x9a\x0f\x84\xe5\x84\x06\xb6\x9c\xbf\x08\xb8\xdb\xa2\x27\x68\x41\x38\x95\xbc\xef\x0e\x98\xd9\x74\xe1\x5b\x82\xe8\x7b\x82\x8b\x98\x65\x63\x6b\xb1\xfb\x56\x54\x25\x23\x44\x15\x1f\x9f\xed\xc5\x2f\x2e\x72\x67\xfb\x4f\x3c\xe1\x0b\xf9\x07\xc6\x18\x1f\x55\x2e\x96\xaf\x9f\x2e\x8b\x1e\x49\xdd\xbf\x6d\x45\x27\xbc\x2b\xcd\x5c\x1a\x1a\x07\x44\xfa\xc8\x04\xc0\xa4\xf6\xb3\x71\xdf\x8f\xd7\xfd\x48\x8b\x75\x34\x22\xc3\xd9\xb8\x7f\x41\x74\xc3\xc5\x1d\x80\xb4\x9b\xd6\x4e\xe5\xeb\x04\xc9\xf0\x34\xb5\xd3\xcc\x75\x74\x7d\x64\xca\x38\xee\x96\x45\x8f\xe5\xec\x40\xbf\x14\xdd\xf4\x72\x98\x44\xcf\x9f\x75\x08\xb6\x08\x64\x23\xc5\x48\x44\xbf\x14\x7d\xa5\x7b\x56\x05\x16\xe8\x2b\x2d\x9a\xf6\xac\x69\xda\x56\x39\xc5\x7c\xee\xd1\xf9\x93\xa7\xce\xa9\x53\xf5\xd4\x05\x4f\xdb\xfa\x1a\x76\x18\x59\xa4\xd4\x88\xce\xee\xa0\xfa\x17\xf9\xbf\xec\x70\xfe\xd9\x12\x10\xcc\xaa\x8b\xcd\xb1\xfc\xd0\x61\x76\xd4\x69\x81\xe0\xef\x30\xf3\xbf\x4d\x24\x6d\x98\xab\x7c\x6a\xa5\x14\x52\x5e\xa8\x33\x11\x7e\xf6\x50\xf4\x2b\xc1\x26\x3f\x7a\xe5\xe4\xb0\xe1\x3b\x75\x16\x97\xfa\xd3\x51\xe9\xb7\x49\x0c\x33\xf8\x3a\x18\x5f\xa7\x80\x96\xa1\x88\x8f\xb9\xf7\x1a\xb5\xbb\x8f\x00\x56\xb8\xf1\xca\xc2\x39\xaa\x5b\x75\x90\x14\x20\xe3\x4d\x1d\x10\x58\x31\x56\x15\x14\xd4\xd7\xc7\x87\xcd\x79\x56\x1f\x65\xa6\xfd\x6c\x6f\x29\x7d\xc7\x41\xf6\xae\x31\xb6\x1f\x9e\x0f\x7f\x68\x2c\xfa\x44\x4b\x03\xca\x27\x42\x56\xba\x2a\x18\x9b\x57\xb2\xac\xa8\xab\x95\x02\x4e\x79\x2a\x6d\xe7\xa7\xd4\x27\x4f\xd5\x81\xa5\x21\x4d\x33\xaa\x15\xeb\x14\xbd\x65\xc0\xdd\xd5\xde\xe7\xac\x58\x51\x96\x20\x3f\x7f\x61\x44\xee\x1b\xc2\xc5\x16\x25\x07\xe2\xf8\x7c\x85\xca\x73\x21\xf3\x4e\x23\xa2\xc7\x59\x46\x7d\x19\xd7\x33\x81\x4e\x02\xf4\x9c\xe0\x54\xaa\x1b\x26\x46\xbc\x80\x36\x1b\x11\xca\x68\x85\xd0\x85\xb5\x57\xa3\x30\x59\x77\xfa\xdd\xf0\xe1\xa4\x99\x79\x50\x3f\x08\xf5\xcf\x7c\x0d\xdd\x3d\xb7\x31\x50\x38\x68\x1b\xa8\x19\xf1\x94\xdc\x7b\xd8\x09\xf6\xec\x4d\x97\xf7\x16\x8b\x73\xa1\x28\x2b\xf6\x89\x31\xd6\xaa\x8a\xf0\xe3\x63\xd1\xcb\xc6\x46\x7c\xae\xd1\x5f\xca\xac\x3a\xc3\x68\x68\x1c\x9a\x6a\x9c\x6d\x3e\x5f\x89\x9e\xf4\x3f\x62\x5c\x8a\xad\xbe\xa2\x56\x42\x8a\x7c\x17\xdf\xd3\xeb\xf8\x16\x9f\xd5\xb9\x6f\x77\x5f\x77\xb7\x1f\xd6\xae\x75\x70\x32\xdf\xc0\x6f\x2b\x44\xc9\xde\x76\x98\x7d\xd5\xc8\x54\x5e\x02\x02\xc3\xbf\x21\x17\x18\xca\x36\xff\xe6\x50\x74\x5b\xf3\x22\x06\x94\x3a\x45\x96\xa1\xb7\x00\x89\x67\x11\x99\xb4\x83\x19\xcd\xa3\x6b\x33\x7f\xe6\x20\xab\x74\x65\xe1\x5a\xf4\x0c\x5a\x11\xd2\xac\x61\xd5\x90\xfb\x32\x9f\x2b\x75\x6b\x96\xbf\xad\x46\xb2\x97\xcc\xb8\x8b\x64\xc6\x5f\x72\x0b\x8d\x7e\x7a\x97\x15\x84\xff\xca\x24\x0f\xc2\xf7\xd6\xed\x3e\x69\x79\x83\x7b\x69\xc1\xbb\x4b\x0b\xbe\x1a\xa4\xdb\x27\xc2\x9d\x0e\x4f\xda\xba\x03\xda\x96\x4d\xc8\xbe\x86\x48\x19\x59\x4d\xf9\x6e\xc6\xee\xa7\xe5\x85\xf1\xb4\x95\x95\x52\xac\xc4\x4a\x5b\x31\x2b\x2c\xee\xa7\xc4\x48\xed\x23\x1a\xce\x2e\xcc\x13\xc4\x7e\xf8\x27\x87\xa3\xaf\xb5\x7f\xba\x6a\x71\xac\x5d\x47\x98\x72\xef\x68\x59\x2e\xaa\x73\x9b\x43\xa4\x5d\x27\x46\x44\x1a\x7c\x19\x46\x18\xf9\x99\xe7\xdf\xb9\x87\x82\xba\x97\x79\xfe\x0f\x05\x05\xf5\x2d\x1a\x05\xf5\x7b\x03\xb6\x34\xb2\xa9\x5d\x6c\x4b\x48\xbf\x3e\xed\xa7\xca\xb8\x99\x56\x80\x55\x51\x74\x88\x3b\x8d\x48\x1a\xeb\x3c\xa5\x2b\x84\x06\x84\xfb\x97\xbd\xde\xa2\x9f\xbe\x3a\x60\x8f\xdc\xf0\xbe\x62\x66\xf4\x9d\x94\x49\x6b\xfa\x9b\x88\x32\x5d\x07\x57\x6e\x13\xca\x35\xce\x1d\xcf\xf4\xd5\x60\x6d\x7b\xa1\xf9\x60\x78\xda\xa2\x9d\x36\x7a\xd4\x10\x9e\xb6\x63\x23\xc5\xe6\x9f\x04\xec\xbc\xfd\xd4\x36\x9a\xec\x64\x72\xb8\x63\xb7\x37\xa8\xcf\xff\xbc\xc5\xf3\xe7\x16\x41\x7c\x2c\x94\x45\x5f\x9e\x2f\x67\x95\xf2\x15\x7e\x4f\x10\xfd\x87\x60\xf4\x6f\xbe\x40\xc5\xdd\x69\xf2\x6e\x88\x97\x06\xec\xf2\xc6\xe3\x1c\x29\x81\x41\xb9\x53\x12\xae\xf1\x73\x9b\x9f\x8d\x53\x20\x9b\x13\x08\x06\x65\xbc\xe0\x64\x33\xd6\x65\xbf\x50\x9a\x26\xfb\xd0\x7e\xf6\xdc\x6d\x20\x5d\xb7\x4b\xd0\x0d\xff\x7e\x5f\x24\xb6\xbb\xa9\x91\x41\x6d\x92\x73\xe3\x4d\x13\x2f\x01\x02\xb3\x23\x4a\x00\x1c\x04\xb9\xd2\xbe\x12\xec\x53\x5b\xf7\x4a\x40\xeb\xd5\x3b\x3d\xfe\x66\x8c\xbd\x23\x60\x61\x16\xcb\x6a\xa9\x8c\x73\x09\xaf\x85\xdc\xd1\xd7\xec\x22\x77\xf4\x05\xc3\xed\x8d\xce\x1f\x35\x79\xd1\xca\x40\xa1\xbb\x95\x1d\xa7\x84\xa3\xb2\x4c\x28\x57\x1c\x68\x06\x21\xff\x8f\xad\xb0\x83\x3d\x21\x65\xbc\x22\xc2\xaf\x8b\xce\xd3\x3f\x51\x5a\xaf\xd6\xbd\x38\x9f\x2a\x45\x9c\x40\x24\x5e\x5c\xee\x67\x71\xee\x11\x5e\xab\x6d\x6c\xb2\x4b\x0c\x00\xb2\x7d\xb5\x2b\xd7\x16\xd8\x81\x52\xc4\xb2\xc8\xc3\xd3\xd1\x5d\xf8\x2f\x3d\x06\xfa\x4b\xe7\x42\x9a\x41\x1c\xa1\x94\x5d\xdb\xa0\xe7\x0c\x5a\x34\x12\x63\x3e\xba\x47\x7a\x15\x0f\x7e\x69\x83\x9d\x95\xf1\x25\x28\xf3\x3c\x1d\x67\x52\x4c\xf2\x8b\x39\x64\xb0\x4d\x34\xc8\x75\x20\x8a\x32\x13\x7d\x85\x43\x0b\xdb\xcc\xb9\x37\x2d\xba\x8f\xbe\xee\xc0\xb6\x15\x00\x86\xbe\x4e\xd7\x54\x7a\x08\xc5\xbf\xb5\x3f\xfa\xdb\xd6\x96\xb7\x6c\x8f\x55\x6c\x39\xe2\x10\x2a\x16\x73\xf4\xaa\xc2\x49\xd3\x83\x5c\x68\x9b\x33\x9a\xe6\xf6\x5c\x54\x52\x1a\xeb\x39\x27\xf5\xc8\xd1\xa4\x57\xf6\x79\xd6\xa0\xf5\x03\x57\x1e\xf0\x8d\xe7\x7e\x41\x02\x64\xf4\x63\x36\x3f\x1f\x17\xed\x95\x36\x9f\x5b\xb8\x08\x86\xbe\xe8\x15\xe5\x60\xa2\xcd\xf9\x62\xdd\x59\x35\xf9\xf0\x71\x29\xf8\x72\x9d\x66\xe8\x0d\x69\x74\x35\x4f\xb0\x8c\x58\xc3\xe1\x6b\x58\x61\x74\x35\x62\x75\x63\x41\xe1\xc8\x42\xba\x19\x4e\x55\xa1\x19\xb3\xfb\xa2\x9c\x02\x4a\x47\x93\x80\xaf\x75\x8e\xa8\x5f\x24\x32\x22\xcf\xaa\x65\xf2\x39\x48\x63\xb9\x12\x1c\x36\x43\xf6\xf6\xf9\xbb\x5a\x6c\x99\xd9\xdf\xc2\x8b\xd1\x83\x73\x76\x6e\x86\x23\xd3\xde\xc4\x55\xab\xba\xe0\x13\x7f\xd4\x43\xc2\x29\xf3\x72\x41\x02\xa6\xbb\x12\x0e\xd8\xbd\xd7\x51\x0f\x00\x40\x74\xfa\xf4\x73\x96\xaf\x93\xd9\xea\x2d\x22\xbd\x09\x5d\xf0\xe3\xed\x92\x75\xbd\x04\xe6\x34\xe7\xb0\x98\x9a\xbb\xf5\x47\xf7\x8f\x74\x81\x13\x06\x30\x09\xf1\x57\xec\x8f\x9e\xed\x5d\xb1\x5d\xb5\x9b\xb8\xa9\x63\x50\xa9\xef\x96\x72\xf9\xdd\xfb\xd8\xf3\x8c\x00\xba\x2f\x3a\x3e\xbe\x5c\xa6\xa2\x3b\x71\xbd\xa2\xe7\x8c\x11\x3d\xf7\x47\xb7\x2f\x8e\x16\x36\x93\x1a\xf4\x6d\x94\xcc\xf1\x5a\x9b\x24\x99\xf3\x15\xd1\x3f\x59\xa2\xe8\xa0\xc6\x39\x4e\x86\xdf\xfd\x4d\x01\xbb\x55\xf5\xed\x41\x11\x97\xd5\xb2\x88\x81\x7d\x34\x5c\xbb\xfe\xd3\xe5\xe8\x19\x73\x86\x6c\x08\xbe\x52\x80\xee\x83\x3a\x31\xd6\x44\xe3\x5a\xb0\xbd\x61\x2f\x1f\x7d\xc4\xad\x5f\x7f\x1f\xee\x3e\xb3\xf5\x39\xb6\xc5\x11\xd6\x66\x5f\x6d\xcf\xb0\xb3\xd1\x7d\x0f\xaa\x63\x8b\x9b\x63\xcb\x1c\x69\x28\x39\x87\x8f\xac\xad\xbe\xf3\xa7\x0f\xb3\x23\xa3\x80\x63\x4d\x88\x09\x63\x65\xe0\x67\x7b\xef\xe1\xe8\xae\x51\x3f\x34\x40\xd1\x1a\x77\x80\xb3\x70\x13\x67\xdb\xb7\xec\x99\xa2\xbb\x36\x45\x7f\xcc\x00\xa1\xbd\x2d\x88\x84\xf6\x85\x3b\x31\x42\x8d\x52\x70\xbd\x21\x40\xdb\xd4\x14\x35\xe5\x7a\x3c\x6f\x67\xc7\x77\x00\x84\xde\x5c\x14\x7b\x06\xf4\x2e\x0c\xe8\xff\xea\x7a\x3b\xff\xf3\x2e\xbd\x9d\x2f\x09\x46\xbb\x3b\x9f\xcc\xc1\x5d\x0d\xbe\x6e\x7b\xe3\xf3\xae\xf0\xce\x51\xa5\xab\xa3\x04\x52\xb3\x72\xf5\x7f\x1c\x66\xcf\x1c\x19\x3a\x75\xf9\x2d\x41\xc4\xfd\xec\xe1\xe8\x8e\xe1\xcb\xbe\x80\x6b\x30\x7d\x12\xd2\xe3\x48\xf9\xf6\x5d\x7b\xf2\x6d\xd7\xf2\xed\x43\x46\xbe\xbd\x2f\x88\x36\xce\x8c\xfc\x08\x3b\x16\x6e\x55\x2c\xd7\x40\xc4\x41\xfe\xb5\x50\x3a\xf3\x94\xd1\x5c\x9d\xeb\x12\x9b\x9f\x8a\xb1\xfd\x69\x57\xe2\x1d\x67\x33\x6c\x7a\x07\x71\x79\xb7\x83\x7b\xf2\x6e\x4f\xde\xb9\xf2\xee\x6b\xb6\x97\x77\x77\x86\xb7\x8f\x92\x77\xc3\xd2\xa9\x29\xed\x5e\x16\xb2\x2f\xdf\x7c\x41\x2e\x14\x65\x15\xfe\xfe\xad\xd1\x71\xe7\xef\xd1\xde\xcd\x22\xe7\xb4\x0d\x20\x0d\xa3\x04\xc7\x90\xfa\xbf\x27\xe2\x5e\x7b\x2b\xfb\xe9\x31\x76\x53\xdc\xef\x2f\x94\x45\x55\x74\x8a\x2c\xfc\xe1\xb1\xe8\xfb\xc6\x96\x56\x09\x2d\x88\x10\x17\xfa\xf4\xab\x0d\xb9\x13\xf0\xbc\x0d\x61\x23\x6e\xb4\xb4\x70\x9d\x4e\xe1\x1d\xe4\x24\x72\x39\xc8\xab\xf8\x72\x9b\x5f\xcc\xa7\x30\x2b\x87\x4a\x05\xd1\xc2\x56\x1b\x02\x8a\x71\xd5\x2b\xe6\x67\xcf\xcd\xda\x96\x68\x20\x74\xf3\x38\x51\x35\x5e\x38\x3d\x37\x75\xc7\xf1\xe3\xb7\xa3\x0d\x5e\x55\xfd\x13\xd3\xd3\x1b\x1b\x1b\xed\x34\xce\xe3\x76\x51\xae\x4c\x23\xe1\x05\xf2\xb3\x6b\x91\x00\x4d\x4c\xb4\xf9\xb9\x22\x9f\x32\xed\xeb\xd1\x79\xfc\x8d\x8d\x2e\x6a\xf6\xe0\xde\xa0\x53\xf4\xfa\x71\x3e\x68\x77\x8a\xde\x74\x6f\x30\xd5\x81\x12\xa2\x29\xdd\x46\x7b\x88\xeb\x1d\x66\x47\x67\xd1\xac\xd4\xc0\x91\xa8\x33\x21\xf5\x7a\xb0\xf3\xef\x33\xc2\xa8\xa1\x69\x36\x98\x65\x43\x54\xe1\x1b\xae\x2d\xb2\x7e\xdf\xd6\x8a\x5e\x07\x89\x87\x1e\xc6\x1e\x64\x71\x10\x67\x50\x45\x94\x5a\x04\x0d\x95\x5a\x8a\xaf\x98\x9f\x3c\xb7\xf8\xe8\x99\xd9\xfb\x4f\x9d\x41\x9e\x76\x4c\x52\x31\x5c\x43\x8e\x4b\x1d\x9f\x01\x9f\x07\x21\x48\x21\x7b\x37\x26\x12\x6b\x5c\x2a\x2d\x03\x4d\xdd\x1a\x99\xc2\xd4\x10\xa5\x31\x34\xf8\x54\x8e\xa8\x96\x8e\xe8\x94\x08\xec\xef\x29\x6a\x60\x01\xd6\x9b\xa1\x27\x48\xbb\x16\xb8\xdc\xdd\x0b\xa9\x25\xcb\xd6\x05\xa4\x7a\xc4\xee\xa4\xbd\x64\x3f\x3b\xa4\x6c\x58\xd8\x4f\x7f\xb9\x4f\x27\x6e\xfe\xde\x3e\x48\xdc\x84\x4c\x5b\x72\x20\x81\xa5\x0b\x58\x77\x08\x0b\x6f\x1b\x84\x1c\x91\xcb\xfd\x42\x8a\x84\x90\xf0\x28\x61\xe9\x1c\x35\xcc\x8b\x92\x9f\x29\xe2\xe4\xfe\x38\x8b\xf3\x8e\x28\xdb\x9c\x5f\x24\x40\xbd\x26\x17\x8b\x4e\x81\x9d\xef\x1a\x0f\xb7\xcf\x43\x93\xe6\x53\x40\x71\x83\x27\xbd\x92\xf3\x29\xd2\x9a\xa6\x95\x87\xed\x36\x89\x75\xd3\x1b\x29\x31\x90\x9a\x04\x17\xbc\xab\x1b\xa7\x19\xf2\x65\x37\xea\xb4\x63\xbd\x50\xb0\xa9\x38\xc3\xe2\xf3\x04\x13\x4a\x52\xc9\x6d\x70\x93\xd0\xf9\x8b\x5c\x68\xe6\xed\x91\xdc\x39\x38\x27\x98\x2f\x0f\x3e\x3a\xdd\x02\xce\xa4\xe1\x1e\xcf\x85\x7a\x4b\x35\x69\x53\xeb\x9d\x9e\x3a\xf2\x45\x77\x6d\x23\xed\xeb\xc6\xe1\x9c\xf3\x1b\x07\xa7\x9a\xa6\x69\xa0\xa6\xc9\xc9\x07\x38\x02\xb0\x2e\xd5\x77\x82\xf3\xd5\x7c\xa9\xaa\xe0\x73\x59\x2d\x2b\x51\xce\x2f\x5c\x47\xba\x25\xbe\x5c\x4e\xd9\xdc\x18\x7d\x6d\x1a\x4e\x0e\x60\x80\x41\xe1\xeb\xe4\xc4\x3e\xc4\x40\x20\x87\x73\x7a\xf9\xb5\xcd\xea\x03\x71\xa1\x47\xac\x17\x99\x46\x29\xb0\x0b\xda\x69\xec\x45\xec\x90\x16\x41\xe1\xd7\x47\x0f\x2f\x21\x2d\xd2\x66\x72\x7b\x11\x53\xb2\x25\x8f\x96\xe6\x16\xa2\x49\x1e\x5d\x3c\xb9\x60\x88\xe3\xe7\x96\x16\x22\x0b\x4c\x9f\x4a\xbe\x34\xb7\xe0\xbb\x1d\xf6\x31\x86\xce\x40\xd8\x3f\x8f\xef\xdb\x69\x1c\xb0\xae\xd2\xac\xad\xa4\x41\x55\xb6\xe7\xf3\xea\x7c\xb9\x08\x0d\x46\xaf\xde\xa7\xf9\x00\x4a\xcf\x6b\xd7\xa7\x6f\x83\xb5\x9e\x1a\x80\x0e\x71\x1c\xe1\xfd\xce\x0e\xd2\x72\x8d\x5a\x6a\xa0\x0c\x20\xe7\xd4\x8c\x6a\xec\x8e\xdb\x6f\x3f\x7e\x7b\x23\xe4\x1e\xe7\x70\xe4\x3c\xba\xf8\xc8\xdc\xa3\xe7\x66\xcf\x9e\xb2\xf9\x59\x8e\x9e\x37\xe9\x6e\xb6\xac\x28\xd6\x44\xc2\xeb\x3e\x07\x62\x3a\xd5\xeb\xc4\x4b\x99\x23\x07\xf3\x02\xf0\x7b\x58\xff\x2a\x4c\xbb\xd7\xfc\x08\xc4\x04\x8f\x00\xef\x88\x7a\xe4\x88\xdd\x61\x50\x66\x3e\x1e\xe7\x94\xc4\x5a\x0d\x78\x2f\xee\x4f\x34\x91\x62\xd3\x95\xbc\xd0\xb0\x36\x7a\x7d\x62\x4c\xb3\xa3\x17\xfa\x73\xce\x15\x39\x09\x14\x8b\xa5\x49\x29\xd4\xbc\xc0\x44\x50\xf1\x58\x1d\x67\xda\xf6\x70\x7b\x72\x63\x37\x09\x2e\x9e\x7c\x65\x2a\xd6\xca\x3b\xfb\x31\xdf\xb7\x55\x2e\xc7\x1d\x13\x38\xbd\x50\x64\xe2\xfe\x34\x4f\xd2\x7c\x05\x0c\xbf\x6f\x3d\x1c\xbd\x29\x68\x5c\x1c\x95\x43\xe6\xdc\x22\xb9\x65\x4a\x53\x9f\x6c\x7d\xa6\x3d\x73\xa7\xfa\x47\x37\x5e\x47\xf4\x2d\x78\xe3\x28\x5a\xc8\xe9\xf5\x19\xde\x78\x19\xce\x22\xac\x0d\x2b\x7e\x96\x89\xc0\x52\xb7\x7f\xec\xd8\x68\x3f\xda\xe3\x07\xf6\xec\xcc\xdd\xda\x99\x99\x36\x33\x3b\xd1\xd3\x4d\xd6\x9f\xb5\xfa\xdd\x0f\xbf\x73\xff\xd7\x66\x6b\x6e\xcf\x1e\xdc\x85\x3d\xd8\x75\xcc\xc1\xaf\xd9\x9d\x35\xf8\xcf\xb7\x00\x0a\xbc\x1a\xc8\xed\xad\xb4\x85\xf0\x9c\xb1\xd2\x36\xdd\xee\x16\x67\xcd\xdf\xf3\x23\x53\x23\xfe\x6f\xc6\x6e\x73\x03\x5f\x3a\x21\x42\xef\x23\x0b\xd3\x4f\x09\x6a\x7a\xcb\xbf\x95\x45\x13\x4c\x67\xad\xb9\xc0\xfc\x0e\x0d\xa8\x61\xe7\x24\x7a\xec\xd1\xb1\xa4\x3f\xd8\x73\x5b\xed\x65\x88\x7d\x0e\x37\x78\xe6\x6c\xf0\x4b\xbb\x45\x26\x7d\xba\x31\x68\x53\xc9\xef\x81\xad\x7a\x6f\xfb\x1e\x3d\xc7\xf7\xb6\xd9\xf7\xe8\x14\xb2\x57\x05\xec\xf4\xe6\x01\xe8\x9d\xee\x43\x27\x69\x0c\x81\xd1\xb1\x0a\x00\x59\xd3\xe6\x41\xa9\x80\x74\x21\xc0\x2f\xeb\xf5\xb3\x01\xea\x54\x8e\xaf\x03\xb2\xb2\xaa\x41\x26\xda\xec\x93\x36\x69\xec\xf1\x2d\x29\xb3\x77\xdc\x3b\x0c\x94\xbf\x2c\x70\x8a\x92\xd3\x5c\x56\xca\xbc\x84\x1d\x8b\xb6\x83\x95\x1f\x86\x61\x3f\x11\x50\x91\xaf\x69\xf1\xbc\xdf\xb1\x80\x57\xbb\xc2\xd5\xd0\xc0\xba\xa2\xc8\x11\x24\x33\xd0\x4f\xa4\xda\x2e\xc7\x9d\x35\x91\x27\xd7\x2e\x63\xcd\xf8\x36\xa5\x44\xf1\xc7\x3b\x1a\x2c\xfc\xf7\x6f\x62\x4f\x1b\x15\xaa\xd7\xd8\x67\xe1\x7f\xbe\x29\x3a\x6b\xfe\xb2\xe0\xf5\x31\x97\x9d\xa2\x8f\x39\x04\xe7\xd0\x67\x71\x51\x22\x6f\xb1\xc6\xb9\x36\xf8\x69\xa0\x3f\xe8\x72\x31\x3f\x03\xf7\x55\x6c\x4f\xbe\xee\xc9\xd7\x3d\x5e\x96\x1b\x5a\x36\xf1\x1b\x5a\x8c\x7f\x2c\xd8\x01\x4b\xab\xd9\xdc\x20\xae\xaf\x0c\x43\x2c\x37\x51\x94\xcd\x03\x4f\x3a\x70\xf2\xa7\xed\x19\xf0\xdf\x76\xc2\x07\x6b\x87\x86\xb2\xfe\x8d\xc1\x8e\xd1\x75\x3f\x67\x83\xbc\x1a\x3c\xbc\xfd\x39\xd0\x0e\x27\x47\x45\x44\x4c\xa7\x9b\x81\x90\x57\x1e\x60\x33\x3b\xc8\x45\x98\xcb\xe2\xb4\x67\x33\xb4\x3e\xb1\x3f\xba\x7f\xeb\x5b\xc8\x17\x93\xc9\x46\x9e\x8d\xc9\xb6\xed\xaf\x77\xb6\xcc\xd5\xfa\xab\x7d\xec\x4b\xcc\x37\x75\xa1\x3e\xd8\x17\x53\xa2\x94\x77\x31\x47\x94\x56\xe4\x30\x4d\x7b\x22\x7c\xe1\xf5\xa7\x21\x45\x5e\x2a\x14\x90\x37\x26\x7e\x42\x12\x70\x10\x8f\x4a\x7e\xfa\x86\xeb\x7f\xeb\x7d\xdb\x24\x3f\x6d\x97\xc4\x3b\x32\x03\x6a\xea\xc6\x64\x40\xfd\x61\x60\xd2\xe6\x3e\x19\x44\xbf\x42\xe5\xf6\x14\x5e\xb0\x5e\xad\x58\xfd\xbb\xac\x26\x39\x8d\x95\xd7\x79\x22\x4a\x0c\x00\xa9\x3e\xb8\xa4\x37\x2b\xe9\xba\x18\x4a\xfc\xdd\x2a\xf3\x8e\xcf\x77\x79\x5a\x91\xfa\x25\x79\x74\x41\xc8\xf4\xc5\x6a\xff\x96\x95\x48\x22\x6c\xb4\x27\x62\x8d\xde\xa5\xde\x9c\x0d\x80\x44\xaa\x99\xe6\x83\xe5\xce\x88\xe5\xa2\xda\xf0\x51\xc1\xfe\xc3\xbe\xd1\xd9\x5e\x45\x59\x6d\x14\xe5\x65\x0f\x22\xe5\x8f\xc6\xa2\xbb\x47\xfd\xe0\xe7\xd2\xeb\x3b\xf4\xeb\x1d\x03\x73\x34\x76\xc8\x77\x8e\xb1\xcb\x0e\x90\x43\x16\x7d\xbd\x4b\x65\x05\x28\x0b\x7c\xdc\xa2\x99\x4c\xb4\x2d\x84\x03\xa8\xcd\xe8\xda\x2f\xf0\xf8\x76\xf0\x1d\xa4\xa8\x2a\xe2\x77\x76\xe1\x1d\x3c\x46\x1a\xf6\x80\x83\xad\x70\x77\x44\xcc\x30\xf3\x27\x29\x0c\x95\x0d\x6c\x55\xff\x88\xb1\xb9\x13\xf9\xb1\xc0\xc0\x9f\xfc\xe7\x20\x7a\x77\x70\x7a\x11\xf2\x1a\x1b\x70\x06\x4d\x24\x13\x03\xc2\x61\x81\x00\x9a\xb7\xec\x1c\xe9\xa4\xed\x63\x9c\x5c\x3b\xb6\x89\x3b\x9e\x4f\xfa\xb9\xab\x62\x1d\x14\xa1\xf5\x99\xf6\x29\xf5\xaf\x45\x51\xa6\x42\x86\xef\xdb\x1f\xfd\x41\xcb\xb9\xa0\x7d\xd2\x23\xa2\xc6\x29\x22\x41\x61\x3b\x93\x3c\x6d\x8b\xb6\xda\x50\x7a\x83\x6c\xc4\x72\x5a\xd9\x41\x71\xbf\x2f\x20\xc7\x5e\xb5\x94\xe6\x75\x51\xcb\x0c\x99\x96\x00\x74\x1f\xa1\xf6\x2d\x19\x6e\x55\xe8\xac\x4d\x88\xeb\x39\x3d\x49\x25\xaf\xfb\x5a\x93\x85\xb7\xd2\x66\x12\xa5\x24\xf8\x1d\x0a\x46\xf8\x3f\xaa\xe5\x12\xe9\x33\x0d\xa1\x49\x57\x8a\xe9\xaa\x28\x32\x39\x8d\x9d\xc7\xff\x3d\xba\x5c\x16\x71\xd2\x89\x65\x25\xca\xf6\x4a\x11\x29\x61\xb0\x21\x11\xa6\x11\xe4\x44\x55\xd6\x88\xa7\x48\x8a\x9e\x9a\x87\x55\x9d\xbf\x2a\x0d\xe8\x25\xb0\x5f\x71\x0c\xf8\x82\x0a\x6d\x3b\xd2\xeb\x67\x00\xc6\x83\x65\xe0\xed\x2b\x01\x52\x08\x5d\x09\x9e\xaa\xa4\xc5\x79\x02\x9a\x56\xe2\xd4\xdb\x4f\x6f\x6a\xb1\x5c\xb3\x0d\x09\x1d\x06\x5a\xc0\xd4\x24\x9d\xc5\x6c\x00\xb1\x8b\x0e\x9e\xfa\x60\x9d\xd8\xe0\xa6\x9a\x41\x3b\x7d\x20\x9c\x4c\xdf\xf1\x23\x78\x81\xa2\x1f\x09\xd8\x50\x9f\xc2\xd7\x07\x9b\x73\x3a\x6c\x71\x3c\x9c\x4d\x3b\x65\x01\x67\xc4\xd7\x35\x9b\x34\xa8\xcb\x86\x80\x1d\x7a\x06\x9f\xdd\xea\xe2\xd4\xfd\x8d\x58\x12\x32\x3b\x91\x3c\x7b\x83\x68\xb3\xd7\xed\x63\xc7\x9c\x05\xde\x87\x6a\x73\xeb\x99\xad\xf3\x59\x79\x51\x8a\x72\xb1\x2a\xe3\x4a\xac\x0c\x30\x4a\x2c\xc3\xcf\x8c\x45\x8f\x6e\xf6\xa3\xcf\xc8\x41\xbf\xe1\x2e\x56\x9f\x1b\x10\xa8\xe9\x4e\x8d\xeb\x8b\x08\x62\xde\x03\xed\x2b\xc1\xbe\xb2\xce\xfc\x8f\xfa\x27\x2d\xb6\xc6\xe0\x72\xd8\x89\x1e\x81\x52\xfd\xb4\xf9\x1e\x13\xdf\x4b\xd2\x4e\xa5\x5b\x85\x82\x7e\x38\x8f\x4c\xaf\x35\x54\x20\x1e\x22\xc8\x70\x21\x85\x9f\x01\xf0\x77\xea\x0c\x8c\xf3\x15\x21\xc3\xff\x19\x44\xef\x0a\xf0\xdf\x90\x54\x61\x5a\x55\x8b\x15\x2f\x17\x5d\x5e\xa7\x89\xdf\x22\x12\xcb\xcf\x77\x11\x96\x08\x0e\xcd\x2c\x5d\x13\x0e\x28\x8f\xae\xb0\xa8\xd3\x04\xf1\x25\x94\xa8\xcb\x06\xf6\x07\x0c\xb0\x69\x3a\x33\x84\xc5\x02\xf2\x67\xca\x61\x48\x2c\x88\x27\x88\x08\x25\x44\x61\x94\xed\x9d\x67\x67\x35\xbe\xfb\xfc\xc9\x0b\xea\xa5\xec\xed\x87\xd8\xec\xb5\x97\xe0\x39\xd5\x77\x10\x43\xfa\xcc\xc1\x68\xda\xbf\xe4\x87\x10\x9c\x02\xdf\x2d\xe9\xa1\xdf\x75\x80\x09\x1d\x8c\xf8\x3a\x77\x6c\xe7\xd9\x59\xf6\xd0\x6e\x0b\x07\x9d\x5e\xef\x19\xd1\xbb\x30\xa2\xe7\x1d\x1b\xfa\x39\xbb\x8a\x42\xec\x39\x83\x76\x5d\xf1\xbf\x53\xa6\x41\xd7\x3e\xe4\xd7\x5c\xca\x0a\x31\x1b\x76\xf5\xf0\x36\x55\x70\x33\x9b\x56\xc1\xa1\x66\xfd\xbe\xc3\xd1\xe3\x63\x5b\xde\xe2\x54\xc1\x81\x8a\xa1\x49\x64\xa0\x58\xe5\x09\x29\x80\xdb\x4d\xa9\x9b\x21\x7d\xb5\x24\x91\xf1\xba\x28\x81\xa8\xa4\x2a\x56\x04\x95\xd7\xc2\xb9\x8c\xb6\x09\x24\xc0\x91\x7e\x6a\x33\x1d\x3e\x6f\xab\xe6\xb8\xa5\xf3\x8c\xb0\xab\x11\x69\xeb\xc6\x3c\x54\x27\xaa\x29\xae\xdb\xa4\xa4\xee\x67\xf7\xbb\x75\x66\xf9\xf5\xd6\x99\x7d\x36\x60\xff\x14\x7b\x31\x8b\xb3\x7c\xb1\x4a\x75\xc9\x71\xf8\xb8\x61\x99\xf9\xe9\x60\xb3\x9b\x8c\x62\x85\x5f\xd5\x4b\x15\xa1\x0f\x37\xd4\x19\x5a\x6b\x71\xa7\x2c\x24\x82\x16\x95\x22\x13\xeb\x71\x5e\x11\x4b\x8b\x91\x3f\x88\x47\x19\xab\xc9\xed\x28\x71\xe4\x36\xa6\x21\x9c\xbd\x57\x9a\x77\xe8\x1a\x35\xd5\xa0\xaf\x71\xfe\x60\x8b\x85\xde\x68\xa0\xe8\x2f\x7c\x79\xeb\x1a\xe4\x6e\xdb\x98\xa6\x0f\xd7\x31\x64\xbd\x44\x1f\x0d\x86\x1b\x7d\x42\x26\x07\x26\xa4\x8c\x37\xa8\xb9\xf1\x34\x97\x95\x88\x01\x83\x7b\xeb\xb9\x9a\x98\xe4\x12\xe1\x15\xf5\x56\xa1\x95\x49\xaf\xd4\x67\xf0\xa0\x2f\xda\x43\xf5\x9a\x9d\x27\xa0\x5e\xf3\xfb\x5a\xec\x9f\x8e\xf4\x20\x24\xf3\x0b\xe1\x4b\x5a\xd1\x9b\x83\xf9\x05\x1e\x27\x49\x29\xe4\x30\x56\x82\x50\x12\x5f\x98\x20\xd0\x78\x3f\xab\xcb\x38\x9b\xe0\xf0\xb4\xd4\x59\x41\x80\xa6\xa6\x6e\x55\x7a\x43\x27\xab\x13\x00\xca\xe7\x7c\x7e\xe1\x04\x9f\xcd\xb9\xd3\xbe\xcd\x31\xd4\xfc\xef\x85\x52\x12\x0b\x84\xd4\xb5\x90\x55\x4e\xf2\x2a\xa5\x2e\xf9\xf1\x98\x87\xd8\x3c\x6b\xa5\xfd\x70\x2e\xba\x23\xed\x53\xd4\xce\x79\xcd\xf8\xfc\xc2\xfa\x6d\x4a\xe4\xcd\x2f\xac\xdf\x31\x61\x33\x2f\xed\x4b\xdd\x19\xfa\xcc\x01\xf6\x15\x23\xe9\xec\xf0\x5b\x3d\x5c\x17\x55\x0c\xfc\x2c\x3f\x75\x20\x7a\x60\xe8\xaa\x77\xd8\x6b\x42\xa8\x55\xcc\x56\x07\xd5\xa8\x2a\xb8\xc8\x51\xa5\x56\x53\x0a\x0f\xfa\xa3\xf9\xfd\xfd\xec\xfb\x02\x76\x00\x22\x55\x32\x7c\x4d\x10\x5d\x9e\x6d\x24\x31\x21\x3f\x8a\x56\xe0\x6d\x06\x2d\x1c\x02\xa4\xca\x55\x65\xdc\x59\xd3\xc0\x7c\x8f\xc1\x5b\x46\x24\x7d\xaa\x5e\xc2\x8f\x1e\x9e\x99\xd6\x6e\x37\xc7\x34\x66\xbf\x17\xb0\x7d\x6a\x58\xe1\x6f\x04\xd1\xcb\x02\x18\xa0\x4f\xb0\x36\x6a\xec\xb0\x86\x20\xa5\x16\x72\xe5\xcc\x86\xbe\xd6\x44\x32\xb4\x02\xa6\xf5\xf3\x53\x30\x02\x39\xfd\xf6\xe0\xb9\xec\x5a\x34\xb9\x61\x89\xe2\xe2\x4d\xff\x4e\x8b\xdd\x02\xdf\x40\xc3\x17\x86\xbf\xd4\xda\x41\x60\x62\xd1\x7d\x24\xfa\xee\x96\xd7\x04\xa2\x28\xca\x62\x28\x2d\x4d\x7f\x51\xb0\xb9\xf0\xcb\x5f\xe3\xd7\xe5\xcb\x75\xc5\xc5\x65\x25\xc4\xa5\x41\xba\xf3\x3a\x73\x1e\x9c\x50\x05\x08\x0c\x44\xc4\xd3\xc9\xb6\x80\xbe\x28\x65\xaa\x36\x9d\x56\x03\x81\x84\xc9\xb1\x12\x0a\xec\xc5\x24\x82\x35\x52\x17\x67\xcf\x9d\xe4\xfe\x00\xc7\xd3\xae\xaf\xb8\xa8\x3f\x26\x26\x4d\x9a\x25\xe1\x45\xb6\xd9\xff\x38\xc4\xdc\xe9\x4b\x52\xd9\x29\xd6\xd5\xc7\xd1\xb6\x9d\x4e\xfb\x9e\xb3\x94\x7e\x3f\x7e\x28\x9a\x1b\xbe\x3c\x44\xe8\xdb\x84\x40\x20\x65\x5a\x1b\x2c\x8d\xdd\x76\x90\x3d\xde\x62\xfb\x4b\x11\x27\x83\xf0\xbf\xb4\xa2\x9f\x6c\xc1\x3f\x3d\x1c\x03\x00\x36\x4e\xa5\x35\x79\x10\xac\xcf\xa8\x40\x9a\xed\x9e\x30\xf7\x26\x79\xdc\xe9\x14\x65\x42\x48\xd2\x1b\xab\x71\x05\x1c\x2b\xe4\x27\x4c\x89\x06\xae\x99\x20\xdf\xe6\xb3\x3c\x4f\x33\x9d\xfc\x6d\xde\x1f\xe7\xbc\xc6\x9a\x6c\x8c\x50\x80\xf9\x04\x7c\x66\x9d\x58\xa2\x17\x4f\xd6\x3d\xc7\x3c\x00\xad\xbf\x0f\x00\xa2\xab\xc0\xa6\xec\x3c\xac\xb1\xa6\x07\xf8\x85\x41\x91\xab\xd2\xe5\x34\x4b\xab\x01\x79\xbb\x41\x19\x50\x53\x40\xcd\x21\x41\xcc\xb2\xd0\x38\xbd\x70\xcc\x8b\xb2\x07\xeb\x47\xa9\x9e\x3a\xc1\xdf\xf7\xd5\x7e\xa2\xc5\x0e\x12\x99\x42\xf8\xb1\x56\xf4\x81\x96\x66\x56\x48\x25\xb9\x69\x3b\x98\x57\x8a\x2f\x13\x97\xd5\xde\xa6\x2a\x09\xe4\xa1\x16\xca\xc2\x59\x89\xcb\x24\x83\xd4\x5f\xc2\x35\x74\xde\x6c\x02\x36\xb6\x0b\x98\x03\x6b\x3f\xbd\xa7\xe1\x69\x1a\x75\xaa\x44\xa0\x17\x5b\x3b\x16\x0b\x34\x9c\x37\xa0\xc8\x4c\xb3\xc9\xe1\x49\x4e\x44\x57\x98\x43\x1d\x5b\xb2\x21\x18\x37\x13\x97\xb8\x72\x74\x0d\x87\xf1\x8f\xe8\x85\xbc\x98\xa5\x1d\xb1\x64\xdf\x69\xc3\x54\x6e\x1d\x88\x3f\xb7\xef\x6c\xb1\x9b\x9c\x6e\x86\xdf\xdb\x8a\x5e\xd9\x72\x67\x66\xbb\xd5\xeb\x8d\x71\xa7\xcb\x6e\xee\x9a\x16\x9a\x92\x18\x22\xce\x2d\x2e\xb8\xfb\x7e\x20\xca\x74\xfb\xf0\x04\x4f\xd8\x5b\x67\xd9\xb5\x86\xc5\xc3\xbf\xb8\x2f\xca\xec\x9f\xb0\x6d\x35\x94\x20\x8c\x09\x90\x5c\x29\x7e\x63\x0f\x33\x69\xab\x63\x34\x39\x8e\xd6\x82\xdc\xb3\x15\x68\x09\xe8\x5e\xf4\x2a\xfa\x62\xe9\xaf\x9f\xcb\xde\x74\x13\xbb\x35\x11\x99\xd0\x01\x3c\xa0\xba\x08\xbf\xe3\xa6\xeb\x0f\xe3\x7d\x9c\x9d\x6c\xb6\xa7\x86\x75\xe1\xf4\x1c\x3f\x7e\xfc\xf8\x5d\xc8\x98\x0b\x09\x42\x69\x0f\xd4\x2f\xa7\xe4\xc5\x9c\x04\xda\x44\x84\xae\x21\x2f\x92\x57\xfd\x21\x2a\x37\x21\x5f\x18\x9e\x9f\x95\x32\xee\x88\x6e\x9d\x71\x3d\x26\x8f\xe4\x47\x3f\xa3\xa6\xc5\x30\xca\xa9\x55\x92\xa4\xa5\xe8\x54\x14\x20\xd2\x84\x3b\x31\x39\x9c\x30\x34\x60\x2d\x2e\x28\xc7\x41\x64\x58\x8c\x9c\x50\x27\xf9\xb8\xcd\xc9\x5e\x4f\xf1\xa0\x03\x47\x96\x79\x34\x4b\x65\x25\x6d\x69\x4d\xa9\x0e\x5b\xfd\x36\xa5\xad\x4c\xf0\xb8\x5b\x89\xd2\x3a\xb4\x53\x97\x9c\x6e\x12\x40\xfb\x29\x66\x94\x03\x8d\x42\x69\x41\x84\x21\x81\xac\xcd\x67\x25\x74\x41\x33\x04\x34\x6f\xb4\x35\x7c\x95\xe8\x81\x71\x6f\xa7\x09\x30\xbb\xd5\x5c\x9f\xd7\xaf\x19\x5a\x18\x34\xf7\x14\xf7\xc4\xcd\xdc\x8b\x07\x5c\xbb\xde\x72\xd0\xcb\x4a\x2d\x09\xbb\x75\x89\x2c\x47\x39\x89\xb0\x6e\xad\xb6\xce\x24\x8f\xb3\x6a\x15\x29\x29\xad\xb7\x79\xb5\x28\x2b\x91\x63\x49\x80\x6f\x38\xe1\x0d\x7a\x96\xfb\x65\x5a\x90\x4c\x54\x32\x06\xa2\x3f\xea\x94\x11\x88\x51\x3f\xc9\x63\x64\xe3\x40\x17\x14\x52\x55\xe0\x56\x42\xd7\x85\x34\x2d\xa5\x39\x3f\x7e\x94\x4b\xa1\x44\x2a\x05\x80\x1e\x42\x46\x05\x5c\x7f\xea\xfb\xc0\x3a\x93\x02\xb2\x71\xdd\xf5\x65\xe4\x8a\x12\xff\xe9\x4a\x6e\xab\x17\x8c\xcd\x24\x1d\xa3\xa9\xcd\x67\xe9\xcb\xc6\x95\xf3\x52\xd4\x8d\xbd\x97\xaa\x77\xf1\x18\x35\xda\x11\x2f\x19\x5f\x9c\x7f\xe0\xa1\xf9\x33\x67\x26\x86\x5e\x87\xf1\x04\x78\x4b\x47\x89\xa3\xba\xaf\x8e\xd8\x5e\xa1\x61\xf3\x8b\xc4\xba\x55\x67\x17\xe6\xe1\x80\x87\x1f\x40\xad\x41\x40\x75\xaa\x99\xb0\xb8\xfc\x72\xd2\x73\xdd\xaa\x39\x95\x95\xea\x26\x52\x5a\xe8\xe5\x4a\x1f\x02\xd6\xc8\x24\xaf\xf3\x2a\xcd\x00\x12\x2d\xe9\xa5\x39\xba\xcc\x0a\x28\xba\x89\xeb\xaa\xe8\xc5\xf8\x15\x0b\xa8\xb5\xc1\xa4\x41\x1c\xa8\x68\xb8\x36\x24\xef\xd6\x59\x36\x30\xd3\x40\xc1\x03\xb0\x2e\xd4\x22\x1c\xde\xec\x74\x7c\x53\x6f\x57\x63\x49\x2b\x53\xe4\x2e\xd3\x17\xdb\x84\x97\x7b\x67\x42\xe4\xc9\x64\xef\x36\x79\x4b\xff\x3e\x60\xcc\x32\xca\x86\x2f\x0d\x34\x1b\x6d\x3e\xcb\xa5\xea\x99\xfa\x80\x14\xc2\xf3\x5c\xf1\x4e\x5a\xb7\xcb\x48\xeb\x93\xc1\xd3\xd1\xbb\x03\xba\x72\xcf\xe1\xf2\x97\xba\x24\xf4\x8f\x5b\xd1\x27\x5b\x5e\xa1\x13\x95\x6c\x9a\xc2\x4e\x4b\x18\xcb\xe7\x1d\x32\x6c\xbf\x76\xcf\x9c\x6e\x8e\x80\x80\x10\xaf\x73\xec\xc5\x03\x0c\x34\x19\xe9\x8c\xca\x9d\xde\xe6\xa2\x31\x4a\xb5\x08\xfb\xfd\xb2\xe8\x97\xa9\x3a\x76\xc0\xb7\x41\x8b\x10\xb9\xb6\xa8\x40\x0b\x74\xed\xb4\x17\x97\x29\x04\xc6\x89\xd6\x0d\x32\x32\x74\xb9\x60\x9a\x88\x5e\xbf\xa8\x60\xa6\x09\x3c\x1b\xf9\xd9\x2a\xe3\x7e\x27\xbd\x6c\x44\x2c\xa2\xb1\x4e\x46\x9b\x9e\x4a\x6c\x4d\x41\xf0\x77\xda\x12\x07\xc8\x67\xc0\xdc\xb9\x66\xf1\x1b\x5a\xec\x26\x72\x51\x00\x95\xea\x2b\x5a\xd1\xdf\x07\x4b\x4d\xd7\x0d\xde\x60\x4e\x57\xb3\x2b\x96\x85\x3a\x20\xa4\x05\xc0\x4f\x6d\xe8\x31\xc1\x44\xdc\x3a\x95\xab\xce\xa4\x83\x72\x64\x78\x7f\xf1\xf8\x32\x69\xaf\x69\xce\x93\xb4\x0b\x6c\x89\x95\x7e\xa9\x6c\x9e\xd7\xb4\x65\x79\x9c\x0f\x36\x20\x41\xa3\x4c\x57\x56\x2b\x9e\xab\xef\xa8\xa4\x96\xe1\x97\x4c\x25\x27\x30\xf6\x82\x4a\xcb\x40\x4f\xef\xc2\xd3\x69\xae\x63\xa3\x45\xa9\x63\xfc\x9a\x84\xd6\x9d\x9f\xf7\x1e\x64\x37\xd3\x32\x10\x30\x41\x3f\x74\x30\xfa\xee\x83\x0f\x38\x57\xc8\x7d\x63\x78\x1a\xb0\x08\xdb\x67\x91\xc6\x1e\x4d\xaa\x9e\xe8\xc6\xd4\xd1\x62\x6b\x91\xf9\xf9\x73\x67\x5e\xc0\xe7\x4f\x9b\xcc\x3f\x1a\xaf\x27\x76\x28\x2b\x38\x19\x81\xc4\x8e\x75\xb4\xc6\xe5\x56\x8a\xaa\x2e\x1d\x8f\x11\x2d\x6f\xa3\x09\x99\x49\xae\x56\xe3\xdc\x3e\xd6\x8f\xa5\x34\x0a\x12\x9e\xc8\xf0\x88\xe6\x0f\x32\xb0\xf4\x04\x34\x4a\x03\x90\x75\xb7\x9b\x5e\xc6\x43\x4f\xf7\x91\x1e\x5f\x25\xdd\x01\xbe\xf8\x7a\x9c\xa5\x09\x2e\xf1\xb2\xce\x94\x7a\x29\x1b\xe3\xb5\x01\x9f\x65\x65\x9c\xd6\x79\xc7\x15\x21\x99\xc8\x57\xaa\x55\xe3\x32\x84\xb7\xda\xfd\x0f\x06\xff\x9a\x70\x8a\x11\xa9\x7b\x45\xee\x7c\x83\x36\x63\x5b\xd4\xff\xea\x5c\x73\xfd\x91\x70\x71\xe2\x01\x45\x07\xac\xd6\x11\xd5\xbc\x9c\x3b\xbf\x44\x53\xcd\x63\x7e\xdb\xd1\xbb\xf8\x14\x27\x47\xab\xad\xbb\x24\xb0\x4f\xba\xed\xd8\xd1\x19\x3e\x47\xac\x5e\x45\xc9\x6f\x3f\x7a\x14\xe7\xf2\x02\xa6\x6d\x61\xd8\x4c\xa9\x48\x45\x5d\xb9\xd9\x65\xfe\x62\xe9\xa0\x99\x8b\x72\xa1\x5b\xd4\xb9\x89\xa2\xa0\x1e\x9c\x65\x05\x72\xca\xe8\xf1\xe8\x68\x27\x5a\x41\xa5\xa8\xca\x01\x1f\xd7\x2b\x36\x1b\x0c\xab\x8a\x68\x53\x99\x66\x2f\xa8\x27\xa6\x50\xed\x58\x15\x71\x22\xca\x89\x36\x63\xb3\xfd\x7e\x96\x42\xe6\x09\xa2\xf8\xeb\xdd\xe0\xb9\xec\x9e\xf0\x73\xcd\xca\xd2\x81\xbb\x71\xff\xf7\x18\x7b\x0a\x50\x4f\x19\x0e\x73\x48\xae\x78\xbf\xe1\xda\xd0\x76\x4d\x02\x44\x2a\x4e\xad\xb2\x8e\x61\xce\x77\xf9\xec\x99\x33\xcd\x42\x02\x50\x7d\x21\x10\x04\x7b\x92\xf4\x3f\x5f\xb5\xd1\xfb\x6c\x25\x2e\x97\x01\xff\x1f\x5d\x67\xee\xce\x2d\x0c\x1f\xaa\xc3\xb0\x1f\x3b\x2c\xb4\xc4\x89\x01\x6e\x20\xf4\x4c\x3b\x1c\x11\xf0\x02\x72\x02\x90\xf2\xea\x3e\x69\x2c\x50\x87\xd4\x16\x57\xbb\xe3\x53\x80\xfd\x5a\x0a\xa5\x35\xd1\x4a\xea\x15\xc8\x8a\x95\x43\xe0\xc9\xb8\x7c\x6c\x23\x9e\x7f\xf5\x14\x9b\x63\xb3\xd7\x93\xc7\xed\x7d\x94\xab\xc1\x57\xb2\xa7\x79\x91\xd4\x7e\x5c\x75\x56\xa7\x7a\xa2\x5c\x11\x53\x6b\x62\x10\x1e\x08\xf7\xd5\x69\xc2\xae\x06\x47\xd8\x3f\x1f\x71\xa3\xce\x4f\x09\x0f\x85\x07\xe0\x21\xc6\x7e\xa6\xc5\x6e\x82\x41\x61\x66\x53\xf8\x9f\x5a\xd1\xbf\x6f\xcd\xda\x0b\x24\xb1\xeb\x1c\x93\xa8\xea\x92\x58\x57\xb5\x0d\xd2\x07\x80\x76\x2b\xe6\x9c\xcc\x03\x2f\xa3\x45\x7d\x32\x71\x99\x02\xd6\x90\xc2\x05\x81\x53\xf5\x2c\xec\x3c\xb5\xcf\x52\xb1\x2e\x78\x5c\x2e\xa7\x55\x19\x97\x03\x27\x4b\x7d\x69\x55\x0c\x90\xce\xb8\xa8\xf8\x63\xb5\x28\x07\x18\x42\xf0\x2a\x9b\xfb\x06\x61\x04\xb4\x9b\x5e\x91\xa4\xdd\x81\x53\xdd\x72\xed\xca\x80\x33\x2f\x6f\xdf\x82\xbb\xf0\xb3\x01\xfb\x32\xad\xb1\x3e\xa0\x54\xd8\x05\x51\xa6\x45\xb2\x88\xa6\x46\xf8\xab\x46\x67\xfc\xa9\xe0\x9c\x49\xf6\x22\x43\xc4\x64\xef\x98\x02\x7e\xed\x03\x2e\x8c\x3a\xec\x6a\xe2\x3a\x52\xeb\x54\xaa\xa3\xad\xe1\x18\x19\x5a\x7b\xd4\x99\x97\x38\x1f\x23\x6d\x4a\x38\xac\xa4\xa8\xda\xfc\x6c\x3c\x30\xcc\x75\xc6\x24\xdc\x54\x03\xfd\xe4\x41\xc6\xac\x89\x1b\xfe\xd7\x83\xd1\xbf\x3d\xa8\xd3\x26\xb1\xa2\x8a\xfa\xe9\xe8\x3f\x8e\x01\x68\xba\x4a\x91\xfd\x81\x1f\x57\x82\x15\xe7\x50\x38\x75\xad\x65\xda\x2f\x72\x34\xf0\x3b\x45\xaf\x5f\xe4\x22\x77\xb1\x14\x1c\xab\x0b\x5b\x32\xef\x01\x0e\x14\x94\x27\xa3\xac\x6b\xdf\x7c\x01\xa9\x9c\x4f\x81\x67\xd0\x0b\x8a\x69\x89\xe2\xb2\xfc\xd1\xec\xb7\xf9\x69\x6b\xf1\xd3\xaa\x27\x53\x8b\x8e\x4a\xfd\x99\x94\x5a\x9e\x0f\x78\x51\x26\x80\x18\x72\x5e\xfd\x1f\x50\x45\xce\x2f\xe9\xd8\x91\x5a\xce\x9d\x98\xd0\x3f\x52\x25\x50\x92\xba\x43\xfc\xf6\x40\x0a\x99\x57\xbc\x4c\xe5\x1a\xd2\xa6\xd4\x9d\x35\xc7\xdd\xd0\x76\x5d\x0f\x98\x2e\xb4\x0a\x9e\x6c\xa3\x33\x0c\x78\x0c\xce\x7c\x8c\x0c\xa8\x85\x25\x21\x91\xa5\x03\xb0\x95\x05\xf6\xc7\xce\x96\x69\xce\x78\x3c\xec\xb8\xd2\x1c\xc7\xe1\x72\x12\x11\x69\x1c\x32\xe5\x73\x99\x56\x35\xa9\xf1\xb9\xa3\x12\xdb\xaf\xe7\x7e\x53\xfd\x9d\xbb\x69\x29\x2b\xe7\xc5\xee\x69\x92\x4a\xbe\x11\xa7\x70\xce\xa3\x9f\x57\xdb\xe7\x28\xb3\x29\x15\xc6\x48\x1a\xdc\x0b\xc0\x25\x0d\xb9\xea\x13\xaa\xf7\x6a\x36\xcd\x19\xb2\x59\x47\x62\x77\xe4\x71\xe5\x77\x03\xc8\xb0\xeb\x4c\xe7\x34\xc7\x3c\x11\x71\x42\x7c\x9b\xa9\xb2\xa0\x2a\xfb\x2d\x61\x86\xa0\xbf\xf6\xc3\x28\x59\xd6\x2d\x05\xf8\x51\x71\xc6\xe3\x9e\x32\x0e\xc0\x94\xea\x49\x91\xad\x0b\x4c\x06\xd1\x42\x6f\xbd\xce\x94\x96\x45\x19\x12\xa6\x49\xc0\x3c\x11\x72\x53\x1a\xa7\x26\x57\xe9\x8e\x8f\x85\x37\x8e\xb1\xc3\xc6\xd6\x08\x5f\x33\x16\xbd\x6c\xcc\x56\xdc\x79\xa9\x95\x70\x85\xec\x4d\xfc\xc0\x26\x08\xd8\xb0\x4a\x81\x2e\x13\xa5\x83\x63\xc6\x48\xae\x94\xd2\xf5\x38\x13\xfa\x80\x16\x3c\xa2\x7c\xe0\xc8\xde\x38\x09\x21\x30\xfb\x03\xc5\x23\x3b\x71\x5e\xe4\x10\x6b\xf0\x53\xac\xda\xfc\x5c\x51\x79\x2e\x59\xc4\xa0\xb2\xfa\xef\x32\x85\xe2\x68\xa1\xda\x1e\x4d\x39\x5a\x71\xe1\xa9\xbf\xb8\x3e\x0b\x69\x6b\x29\x0d\x84\x0b\x38\x01\x19\x3b\x3b\x0a\x6f\xe9\x06\x98\xa5\xb6\x6e\xd1\x55\xdb\xfe\x28\x60\x87\xa4\xc8\xba\x67\xd2\x7c\x2d\xfc\xdd\x20\xfa\xaf\xc1\x22\xfd\x85\x3b\xff\xe2\x85\x33\xcd\xfc\x40\x47\x65\xdb\x81\xd7\x81\xb1\x93\xa7\x16\x2e\x9c\x9a\x9b\x5d\x3a\x75\xd2\xad\x81\x45\x87\x59\x55\xf4\x81\xb8\x31\x5e\x89\x6d\xeb\x06\xdc\x69\xa6\x7d\xec\x28\x64\x5a\xc4\xd2\xd6\xa5\x5a\x36\xac\x2c\xce\x73\xf3\x21\x1c\xd9\x38\xd3\x3e\x36\xa3\x1f\xf3\x8c\xcb\x1f\x6b\x21\x67\xfa\x3b\x5a\xd1\x1b\x5a\x17\xe7\x4f\xea\x15\x40\xba\xbe\xda\x01\x29\x19\xc9\xf8\x1d\x5d\x40\x69\x57\x53\xc5\x10\x89\xe1\xfc\xb6\xe6\x8b\xef\xd8\x2e\x72\x2e\x6b\xc0\xa5\xe9\xd6\x99\xf5\x46\xf8\x28\xe7\x8e\x2b\x5b\x1f\xe4\x55\x41\xbb\x52\xb5\xb0\x70\x71\xc9\x42\x34\xc9\xcd\x3d\x60\x5b\xf9\xb6\xae\xc9\x67\x51\xa7\x7e\x1e\xe4\x9f\x8e\xb1\x5b\x75\xdf\x6d\x98\xe1\x37\xc7\xae\x3f\xcc\xf0\xfa\xb1\xb9\x66\x7b\xb8\xda\x8c\x23\x72\x38\x27\x95\xa6\xd4\xe6\x8a\x7b\x06\x40\x2c\x35\x79\xb3\xfe\x3a\x6a\x3e\x57\xea\xb8\x8c\xf3\x4a\xd8\xdd\x8a\x9e\x08\x2c\x4b\x90\x53\xa4\x60\x90\xf4\xc4\xe4\x1e\x29\xfa\x31\xf8\x0b\x9c\x39\xe7\x73\x60\xcf\x49\xe3\x2f\x97\x3a\xa2\x05\x0b\x44\xbf\xd2\xcd\x90\x4a\x73\x7e\xe1\xf4\x1c\x04\x4d\xba\x45\xd9\xd3\x5f\x39\xcd\xf9\xc5\xa5\xb9\x1d\x7e\xc4\x73\x35\x56\xc2\x60\xec\xe1\xc9\x73\x58\xbe\xa4\xc5\x0e\x00\x1c\x9f\x0c\xff\x3a\x88\x3e\x11\x9c\x8d\xfb\xa8\x26\xc0\x79\xb1\x26\x06\x78\xae\xb8\x69\xe7\x14\x92\xd3\xbe\xa8\xa2\x5c\x89\xf3\xf4\xc5\xe4\x6c\x53\x07\x43\x51\xaa\x3f\xc7\xb1\xba\x1a\xf9\x5b\x95\x89\x36\xe1\x68\xd6\xf1\x80\xf2\x18\x24\xe5\x0a\x40\x48\xb7\x14\x16\x62\xd0\x5a\x46\x92\xda\x40\xbc\xa0\x6b\x5f\xef\x38\xbc\xad\x34\xf2\x97\xee\x63\xb7\x90\xa9\x78\x5a\x49\x1c\x19\xfe\xf9\x58\xf4\xda\xb1\xb3\xee\x25\x65\xbb\x48\xbe\x51\x94\x6b\xdd\xac\xd8\x98\x4a\x51\x4b\x33\x85\xf3\x85\x9b\xee\xd2\xc5\x27\x30\x9a\x51\x0a\xd7\x0c\x45\xed\x93\x5a\xb1\x8e\xbd\x5e\x21\x2b\x2a\x96\x31\x69\xba\xab\x45\x2d\xc5\x9a\x10\x7d\xc0\x9a\x52\x6f\xc3\x30\xa1\x95\x45\x68\xcc\xe4\x47\x08\x35\x0d\x18\x42\x21\xae\x63\xcb\xd9\x1c\x29\xdb\xe6\xb3\xe6\xcd\xfa\x23\xea\x28\xdb\x11\x09\x27\xda\xa4\x67\x26\x9b\x8b\xa4\x67\x69\xb7\xa5\xe3\xab\x8e\x21\xeb\xbf\x1f\x57\xab\x98\xad\x12\x75\xd2\xa9\x4e\x12\xa1\xbf\xca\x9f\x0d\x30\x1f\x36\xe2\x81\xd1\x3e\x2c\xe8\x00\xc5\x84\x4d\xe7\x6a\x39\x6c\x95\x59\x85\xdb\xd3\x58\xe6\xd9\x03\xec\xd4\xf5\x94\xaa\xb8\xdf\xf6\x94\xd2\xfe\xd9\xab\xf7\xb3\xa7\x68\x49\xad\xb3\xb7\xff\x6e\x5f\xf4\x67\xfb\x80\x29\x36\x56\xa7\x86\x43\x36\xd3\xc8\x33\xb1\xc9\xd5\x16\xaa\xc5\xb3\xcf\x9a\x3b\x67\x79\x40\x9e\x23\x30\x6c\x6d\x68\x05\x86\xad\xf5\x05\xf0\x85\xe0\xf1\x90\xe0\xae\xd1\x8f\x03\x23\x66\xbf\x4a\x7b\xa9\xac\x52\x60\x34\xa2\x62\xa0\xc1\xa4\x3e\x4f\x54\x9b\x90\x53\x64\x7d\x55\x1b\xb0\xe7\x2c\x08\xa0\x9f\x82\x5c\x18\xb2\x57\xe3\x53\x76\xc4\x61\x0d\x55\x8e\x02\xbf\x95\x34\x49\xc2\xb1\xd4\x93\xa3\x5e\x82\x5e\x4e\x5e\xe7\xf0\xe1\x52\x35\xce\xb8\xb3\x66\xb7\x07\xb8\x09\xd1\x3e\xef\x39\x16\x24\x78\x2f\x87\x49\xd1\xb6\xec\xd9\xce\xe4\x2a\xa6\x81\x6a\xc5\xb2\x22\xf7\xa0\xed\xb4\xf3\x19\x54\xff\x9f\x70\xc1\xeb\x7c\xa8\x29\xda\x69\x50\x39\x0d\x40\x99\x72\xc8\xd3\xf6\xf1\x83\x1e\x25\xfe\xa8\xf4\xf4\x53\x64\xbb\x78\x59\xe9\x57\x0e\x46\x7f\x13\x8c\xfa\x65\xcb\x64\x74\xca\x43\x05\xf5\x44\xca\xa2\x93\xc2\x64\xa1\xa7\x26\x1f\xb8\x1a\x1d\xad\xea\xf1\xae\x0d\xe8\x3a\x2e\xe4\xc7\x6a\x81\x2a\x56\x27\x2b\xea\x84\x2a\x7a\x21\x47\x47\xc3\x7d\x16\x25\x7f\x78\x61\x11\x0d\xee\xac\x88\x93\x65\xc2\xc4\xe4\x65\x9d\x43\x0d\x61\x51\x57\x32\x4d\x40\xdc\x50\xb0\x62\x02\xe8\xcd\x21\xfa\xbf\x7d\xee\x36\xc3\xa1\x28\x1b\xc4\xcb\xa4\x78\xc9\x7e\xf6\xbe\x80\xdd\x84\xcf\x62\xde\xf1\xdb\xae\x05\x83\x78\x44\xde\xf1\x8b\x9c\xc6\xb6\xca\x37\xa6\xc9\x1d\x87\x1c\xe1\xc7\xe8\xe9\x89\x36\x3f\x5b\x57\x08\x02\x2a\x2e\xab\x91\xa6\xeb\x54\x36\xb5\x34\x94\xcd\xdc\x66\x67\x98\x33\xb0\xf0\xde\x68\xc6\xfe\x35\x2a\x2d\x98\x5e\xb9\x59\xee\xf9\x5b\x02\xf6\x45\x78\x8b\xc9\x6a\x7c\x4d\xc0\xee\xbb\x9e\xe2\x17\x75\xc4\x9a\x3c\xc7\x05\xbf\x51\x37\x70\x45\xba\xe7\xc0\x3d\x43\x40\xcd\xd3\x95\x7f\x3a\x10\xe9\x12\xba\xb4\xd9\x47\x82\x91\x29\xe3\xef\xde\xe5\xa7\xab\xb7\xcd\x18\xd7\x45\x05\xe6\x4b\xae\x64\xc5\x72\x9c\x5d\xe7\xc7\xa4\xaf\xf8\x2d\xb7\xb0\x3b\xae\x8f\x3f\x2c\xfc\xa5\x9b\xa3\x5f\x0e\x36\x63\xff\xd2\x36\xae\x17\xf0\x44\xa1\xba\x6a\x1e\x81\x04\x83\xd8\x3c\xa4\xd3\x92\xbc\x60\x2b\x29\x2c\xba\xea\x1d\x94\x32\x4e\x00\xf9\x5d\x10\x05\x36\xf8\xaf\x2b\x5d\x8d\xee\x0e\xe2\x44\xd6\xcb\xe6\x96\xe5\x58\x6a\xf8\x5d\x61\xaa\x33\x1a\x95\xcb\x7a\x7f\x5e\x3d\xbc\x57\xc6\xb6\x8b\x32\xb6\x4f\xb9\x58\x30\x8f\xef\x1a\x0b\xe6\xd5\x81\x49\x72\xb3\x4c\x65\x2e\x36\xcc\xe7\x00\x19\xe6\x9b\x5b\x84\x0c\xf3\xff\x6d\x09\xa1\xb5\xf3\x3d\x05\x98\x31\xef\x0c\x24\x61\x7c\xa1\x93\x0a\x45\x93\xdd\x41\x95\x05\x91\xa9\x0d\x8a\x8c\xdd\x45\x4f\x36\xc2\x4a\x9b\xbd\xca\xe2\xc8\x7c\x4b\xc0\x9e\x77\x43\x26\x82\x68\xb7\x7c\x6e\x3a\x9d\x40\x3d\x4c\x39\xd9\x98\x82\xbd\xc2\xc7\x5d\x17\x3e\xf6\xb6\x2f\x7c\x7c\x5e\xf8\xa0\x65\xed\xb4\xdf\xd6\xd4\x37\x6e\xf2\x6d\x3d\x34\x9d\x63\x04\x4e\xf9\xf3\x2d\xf6\x95\x23\x8a\x16\x50\x00\x80\x65\x64\xf4\x82\xd7\xb5\xa2\xe7\x8e\xb8\x4e\xe6\xbb\x24\xfa\xd1\x47\xcc\x67\x45\xc7\x9d\xf7\xf9\xae\x04\x87\xe1\xea\x42\x5c\xad\x7a\x32\xff\x83\x01\x5b\xf5\x56\xce\xd7\x44\x67\x1f\x71\xad\x28\xa1\x57\x89\xfa\xe7\x69\xdd\x06\xb8\xf6\xcb\xb4\xaa\x04\x04\x0b\x94\xfd\x24\x79\xd1\x9d\xd4\xe0\x10\xb0\x0a\xa2\xf5\x99\xa8\xc1\xc2\x68\x7b\x11\x9e\x8e\xee\x82\x96\x8a\xae\xe3\x6d\x04\x2b\x3a\x83\xc0\x4e\xee\x4a\x03\x91\x00\x96\x9f\x26\x63\x76\x1b\x7d\xd7\x61\xaf\x4a\xc8\x2d\x5f\x68\xbb\x80\xf5\xe1\xcb\x0e\x47\x77\xba\x17\x86\xe1\x57\x8c\x71\x18\xe7\x7e\x8e\xb3\x37\x65\x1f\x38\xc4\x7e\x2c\x20\xb8\xf0\xb7\x9b\x22\xc1\xd7\x04\x06\x30\xdc\xa2\x44\xf8\x45\x05\x9b\xe3\x4c\x23\x58\x8d\x8e\x1f\x94\x42\x0d\x0d\x72\x67\x61\xb7\x18\xf4\x6c\xca\xf1\xb6\xe9\x0b\x6a\x03\x88\xcb\x95\xf9\x52\x5a\xab\xd3\x39\xf2\x7e\x20\x70\xd9\x81\x25\x7f\x24\x9a\xdf\x06\x96\x5c\xbb\xc7\x2f\x9e\x5c\x98\xe4\x4b\x73\x0b\x60\x37\x2c\xce\x2d\x2d\x6c\x09\x47\xfe\x89\x96\xcf\x60\xf1\x5f\x5a\xd1\x4f\xb5\xf6\x18\x2c\xae\x9b\xc1\xc2\x9d\xdb\x0f\x8f\x51\x2a\xe1\xfb\xc7\xa2\x77\x8e\x8d\x64\x97\x70\x09\x23\x20\x78\xe9\xaf\x63\x87\x2f\xc2\x4b\xbc\x31\x01\x44\xff\x6e\x88\x02\x97\xeb\xa9\x8e\x02\xc7\xee\x57\x90\x1e\x7b\x44\xa7\x28\x31\x28\x97\x98\x03\x80\x4a\xbd\xdb\xd0\x9b\xaf\x7d\x61\x1b\x5f\x64\x33\x20\x1d\xb6\x60\x03\xed\x89\x6a\x66\x51\x82\x2f\xc3\xc6\x65\x9c\x0c\xab\x13\xfc\x59\x66\x47\xe4\x85\x93\xda\x71\xc7\x71\xde\x59\x8d\xcb\xb8\x83\xe5\x5b\x45\xbe\xd2\xd6\xb7\x92\x7d\xaf\x66\x2a\x2b\x36\x44\x09\xe5\x3a\x1c\x20\x2c\x73\xb5\x4d\xd4\x8e\xb1\x8f\x16\x25\x3f\x32\x75\xc4\x3c\xec\x01\x67\x68\x7b\x7c\x93\x87\xbd\xad\xe1\x0e\xc9\xfb\x8e\x1f\x1c\xdb\x1c\x4d\x7d\x96\x90\x27\xd2\x22\xbf\x50\x67\x22\xfc\xce\xb1\xe8\x91\xc6\x35\x07\x7d\x8e\xbc\x08\x58\xbb\xa9\x59\x13\x2e\x14\x99\x40\xc8\x2f\x7a\x4e\xd8\xdc\x72\xe7\x16\x4f\xa6\xfd\xc7\x16\x7b\x5b\x8b\xfd\x5f\x1d\xfb\xb3\x3e\x65\x64\xf8\xaa\x56\xf4\xfe\x60\x6e\xc4\x2f\x7c\xb5\xc8\x12\x17\x96\xc3\xfa\x93\xd1\xae\x71\xc9\x30\x00\xbf\x44\xd9\x13\x5e\x2f\xc1\x6d\x6d\xa1\x5c\x20\x7b\x0e\x99\x37\xf2\x81\x91\x6a\xa6\x55\xaa\x7b\xa3\xf8\xb5\x37\x9a\x23\xd2\x09\x8f\x3b\xd5\xf3\x49\x22\x12\xd7\x65\x79\x92\xdd\xbf\x7b\x23\x9b\xbd\xe2\x8b\xd8\x99\xeb\x26\xdd\x7e\xbe\x58\x5e\x2d\x8a\x35\xf4\xed\xcd\x81\xbd\x18\xbe\xff\x96\xe8\xf9\x23\xae\xfb\xec\xab\xae\x16\xa8\x93\x02\x63\xbe\x74\x66\x51\xdd\x96\x53\x09\xa3\x49\x91\xda\xc0\xe6\x7c\x13\xef\xd7\x6e\x66\x1f\x0a\xd8\xa1\x4e\x7c\x7f\x9d\x27\x99\x08\xdf\x1b\x84\xfb\x96\x07\x95\x88\xde\x18\xe8\x6b\x68\xf0\x2d\x9c\x3a\x4b\x58\xb4\x09\x9f\x9b\xe5\xcb\xf8\xd3\xe8\xcf\x4a\x9b\x53\xb8\xaf\x3d\x22\x75\x20\xa9\x23\xca\x0a\xf5\x79\x14\x33\x0e\x70\xd6\xa4\xce\x29\xaf\x4a\xb5\xd3\xca\xa2\xa8\x0c\xb1\x84\x4d\x77\x55\xe2\x1c\x40\x71\x3c\xfc\x35\x5d\xd3\xd6\x11\xe1\xbf\x6b\xb1\xe7\x6f\xf6\x49\xaf\xf1\xdb\x90\xcc\x32\x59\x5c\xca\x36\xb1\x0c\x33\x31\x2f\xf5\x0f\xae\x57\x35\xed\x38\xa1\x4b\x3d\xed\xfc\x14\x8a\x37\x7d\x43\x51\xf2\xba\xcc\x8c\xe8\xb2\x26\x38\xe5\x6d\x9a\x99\x83\x00\x17\x39\xe2\x86\xcb\xad\x69\xf5\x0f\x8a\xda\x3d\x5d\x2e\xd1\x5b\x2e\xb5\xd9\xff\x3c\xc4\xc6\xea\x32\x0b\xff\xe8\x50\xf4\x3b\x87\xd4\x1b\x2d\x84\x1e\x12\xec\x5b\xc5\x8e\x5e\x38\x09\xc5\xa1\xfa\xf4\xba\x78\xe1\x0c\x06\xd2\xc6\x2f\x81\xe2\x27\x4e\x4c\x4f\xaf\x16\xb2\x3a\xa1\xc4\xf8\x74\x3f\xae\x56\x2f\x35\x9c\x81\x45\x97\x5f\xaa\xcb\xec\x92\x1a\xa2\xe9\xc8\xc8\x81\xaa\x23\xeb\x92\x6a\xec\x92\xa9\x68\x04\x75\x87\xea\xf7\x62\x33\x59\x7a\xfc\xfe\xd8\xef\x86\xb1\xaa\x0b\xf6\x35\x3a\x84\x0d\xc9\xa9\x18\xf9\x00\x9c\xb7\x1e\xe4\x4e\x2f\x63\x5a\x7c\xa6\x14\x81\xf5\x34\xb6\xa9\x26\x27\xcf\x2d\xc2\xa8\x8b\x9e\xb3\xd2\x24\xc2\x72\x4c\xf2\x4b\x08\x02\xa4\xaf\x5f\xd2\xa9\x84\xd4\x16\x4f\xf3\x29\x9d\x39\xae\x1a\x8a\xa5\x8e\x2c\x19\x84\xc3\x2c\x1e\x60\xd2\xc7\x7a\x5a\x64\x30\xe9\x13\x6d\x3d\x74\x4c\xcf\xc7\xc4\x63\xaf\x3c\xbe\xcd\xd8\x02\x86\xe0\xf3\xa2\xa2\x48\x07\x56\x0f\x5f\x52\x9f\x2e\xc3\xc7\xd5\x2c\xcf\x1c\xbb\xb3\x7d\xb4\x7d\xb4\x3d\x73\x09\x51\x0f\xa8\x65\xb5\x72\x52\xb9\x36\xe0\x75\x0e\x85\x9a\x6a\x95\x54\x4a\x4a\xac\x40\xe8\xa0\x13\x23\x58\x76\x59\xe7\xde\x5a\x05\xff\x73\x96\xc1\xc4\x69\xd1\xad\xee\x81\xba\x80\xd4\xd4\x8e\xa9\xcb\x38\xad\x3a\xe0\x05\x12\xa8\x13\x67\x99\x34\xd9\x9a\x66\xf9\x03\xfe\x08\xe0\x61\xab\x9f\xd5\x9b\xb3\x74\x4d\x64\x03\x0a\x10\xe7\x45\x3e\xa5\x56\x54\xbc\x9c\x09\x44\xb5\x9b\x84\xc5\x20\x62\x09\xb7\x40\x52\x71\xdd\xc7\x84\x9d\x5c\x6c\x18\xb8\x01\x5c\x45\xb8\x34\xcd\x22\x8b\xc0\x4c\x8c\xee\x86\xc5\xa1\x56\x30\xfd\xb0\x92\x92\x40\x8c\xb4\x1d\x19\xb5\x19\x9b\xc5\x98\x99\x03\x2a\x4d\x75\x6e\x5d\xaa\xf3\x31\xb9\x90\xea\x14\x22\x9d\x44\x9f\x2e\xcb\x99\xc0\x4e\x5d\xbc\x70\xa6\xcd\x5f\x50\xd4\x70\xaf\x5e\x98\xd0\x70\x55\xa0\xfa\xa2\xe6\xcf\x24\x48\x6a\x54\xcb\xc2\xdf\x7a\x5d\xbf\x28\x4b\x2f\x2b\x9b\x26\xa0\xfa\x5b\x55\x4a\x97\xa0\xc7\xd5\xab\xa8\x7a\xab\x28\xf9\x72\x2c\xd3\x8e\x32\x46\x57\x39\x40\xca\x44\xea\x87\x13\xea\xf5\x1b\x45\x99\xdc\x17\x35\x32\x1e\xda\xfc\x74\x19\xaf\x80\x12\xcb\xc7\xa3\x67\xb4\xdb\xed\x68\x02\xc6\x0e\x89\x9a\xbc\x1f\x97\x71\x4f\x80\x16\x34\x1e\x3d\x97\x7e\x25\xab\x84\x5a\x98\x24\xbd\xcd\x93\xc6\xef\xd9\xc7\x5e\x78\xbd\x32\x97\x70\x7e\x40\xef\xd5\x20\x0e\x8b\xd6\x83\x49\x7c\xf7\x8f\x8f\x45\x1f\x1e\xdb\xe6\x26\xe3\xe5\xd0\xc1\x15\xf5\x66\xed\x39\x53\xbf\xbb\x8e\x51\x35\xf1\x7e\x7b\xb2\xcd\x17\x8d\xf7\xc5\x4d\x31\xa0\x00\xd7\xa5\x36\x36\x73\x89\x3f\x6f\xf1\xfc\x39\x5a\x43\xb9\x0e\x94\xc4\x8d\xd6\x88\x83\x0d\x6a\xb0\x9e\x45\xb4\x51\x6a\xab\x4e\x6f\xd2\x17\x74\xf7\xa8\x16\xac\x27\xf5\x59\x90\x93\xe2\xf8\x3e\xe1\xae\x51\x2d\x54\xa8\x0b\x34\x1b\xc0\x63\x9f\x56\x37\x56\x8a\xe8\x2c\x34\x80\x84\x1d\x20\x92\xa4\xa9\xf8\xb6\x33\x55\xc5\xf9\x8b\x63\xec\xc0\xf4\xc2\xf9\xc5\xa5\xe9\x85\xd9\xa5\xb9\x07\x87\xfa\xd2\x7c\xe1\xf0\x4b\x86\x1a\x75\x63\xff\xdf\x19\xb0\xbb\x7d\x7f\x99\xc3\xf8\xa1\x97\xc6\xa2\xc8\xba\x8b\x35\x3c\xa0\xd4\x5f\x79\x41\xac\xa7\x62\x03\x80\x3f\x96\x3c\xe5\xe6\x34\x3b\xe9\x26\xc2\xdd\x19\x3d\xcb\xa6\xc1\x55\x05\x17\xeb\x71\x56\x43\x39\x0c\xd4\x68\x74\x8b\xd2\xc2\xe0\x79\xab\xf9\x6d\xfb\xd9\xd1\x6b\x25\xcc\x0f\xff\x62\x5f\x74\xc7\xd0\x55\xd2\x90\xab\x91\xd4\xf9\x3a\xe4\xe7\x8d\xe1\x87\xf7\xb1\x3f\x0e\x58\x18\x0f\xe3\x11\xfd\xba\x71\x35\x7c\x30\xa0\xc6\x36\x07\x24\xf2\xdf\xf6\x79\x8d\x48\xf4\xe3\x01\xbb\x39\x76\x03\x4b\x6f\xde\x65\x60\x69\x25\x1e\x11\x52\xda\xc9\x84\x6c\x33\x0f\xcd\x80\x13\xfb\x37\x01\xdb\x0f\xed\x85\x97\x77\xd7\xe3\xbb\xd6\xb7\xed\xea\x26\x31\x2f\xf6\xc6\xc3\x6c\xc2\x59\xab\x79\x91\x08\x4b\x58\x71\xa1\xce\xab\x14\x30\xb7\xa5\x04\x5c\xc5\xbf\x38\x14\x1d\x6f\x5e\x6c\x90\x33\x39\xbf\x6e\x8d\xad\xf8\x81\x83\xec\x23\x6e\xc4\xe3\x03\xbb\xa4\x93\xfd\xd7\x9f\x23\x36\x59\x13\xdc\xd8\x73\xa1\xef\x92\x48\xe2\x31\x0d\xb5\xb9\x1a\x45\x23\x78\xbf\xf4\x54\x8d\x80\x34\xba\x93\xdd\xce\x8e\x6f\x1a\x46\xd9\x7c\x51\xef\xc5\x2b\xaf\x3f\x5e\x79\x35\x58\xd9\x3e\xe2\x71\x32\xbc\xdf\x44\x3c\xe0\x33\x34\x69\xb8\x1a\xc2\x64\x34\x49\xcc\x3b\x0f\xb1\x68\xd8\xe1\x35\xcc\x1c\x78\x28\x9a\xbe\x46\xe2\xc0\x91\x92\xe9\x97\x0f\xb0\x15\xbd\x14\xbf\xfe\x9a\x28\xe8\x8e\xb2\x36\x9b\xdc\x8e\x82\x6e\x8f\x7d\xee\x0b\x8b\x7d\x6e\x4f\xb0\xef\x3a\x36\x9a\x6f\x2f\x29\x1e\x0a\xe7\x6f\x14\x7d\x1f\x63\xef\x3e\xcc\x2e\x5e\xb7\x0f\xcf\xb7\xc3\x4e\x9a\x35\x05\x32\xe6\xb7\x0e\x45\x0f\x6d\x75\x83\x2f\x27\x36\xbb\x73\x6b\xcd\xe8\xef\x0e\xec\x41\x1a\x7f\xfe\xac\x5e\xf6\xa3\x81\x3e\x0c\xde\x1a\x44\x77\xc0\xbf\xa8\x3c\x2d\x4f\xd2\xf5\x34\xa9\xe3\x6c\xdb\x0f\xed\x1e\x12\x1d\x16\xb3\x47\x6f\x90\xbf\x79\xb3\xf7\xee\x9d\x2b\xbb\x51\x6c\xd6\xb7\x17\x57\x8b\xe1\xc3\x53\x24\x8b\xb6\x12\x07\x0d\xc1\xe4\x02\x5d\x3b\x1f\x92\x84\x1b\xfb\x2c\xbb\x6e\x3c\x6b\x74\x22\xbc\x8b\x45\x7f\xdb\xda\xf2\x16\x0f\x4f\x6e\x84\xad\xf8\x04\x81\x5a\x1b\x6a\x01\x0f\xec\x76\x37\x50\xd7\x9f\x9f\xf8\xd4\x06\x78\xfa\x8b\x7d\x17\x0b\xf8\x12\x36\x85\xa3\xfe\xdf\x07\xd8\xff\x6a\xb1\x51\x8f\x84\xbf\xbd\x4b\x60\xe5\xd7\xb5\x46\xb4\xfa\xc4\x78\x79\x9e\x14\x68\x65\x3e\x5f\x69\xe8\x15\x28\x47\xc1\xa4\xf1\xc9\x11\xf0\x92\x36\xa3\x40\x7d\x2a\xdd\x94\x9b\x1c\xd8\xbe\x21\x20\xe0\x4f\x06\xd6\xf3\x7f\x6b\xb1\x7f\xb6\xa9\xcf\x2e\x7c\x5f\x4b\x7b\xf6\x7e\xb0\xf5\x05\xee\xd9\xe3\xe6\xfb\xea\xea\x12\x1d\x51\x49\xbb\xfc\xd2\x70\xc6\xf7\x25\xa2\x9b\xa9\x6c\x46\xd3\xb6\x5f\xdd\xf3\x1e\xfe\xf7\x96\x97\x4b\xd1\x60\x25\x79\xb0\x90\x90\xea\x05\xdc\x24\xe1\x4f\xb6\xa2\x57\x05\xde\x25\xa3\x3d\xc5\xc4\x99\x52\x74\x31\x7c\x88\x19\x34\x16\xad\xc0\x41\xc1\x84\x52\x74\x7c\x0f\x8c\x1d\x56\x00\xc6\x65\x70\xf8\x54\xb8\x2c\x11\x9f\x97\xfc\xdf\x4e\x0a\x89\xc6\x43\x54\x6f\x4e\xda\x57\x82\xb1\x5e\x9a\xab\xff\xc6\x97\x3d\xa1\xf2\xf2\x80\xcd\x31\x75\x35\xbc\x47\x2f\x8f\x23\xbd\xf8\xb2\x5e\x07\xaa\x25\xfd\x29\x54\xd7\x27\x11\xdc\x52\xa6\xeb\x0d\x8e\xa1\x53\x4c\xbd\x20\xbc\x57\x37\x32\xd1\x4b\x73\x27\xa3\xb8\xac\x76\xd6\xcc\x9f\x3f\x9d\xb5\x9d\x89\x96\xc8\x0d\x6b\xdd\x32\x73\x8b\xf3\xc4\x17\x3b\x17\xf7\xe3\x4e\x5a\x0d\xc2\x0f\x3c\x3d\xfa\xe4\xc1\xe1\xeb\x08\x24\xa2\xf3\xdb\x65\x9d\x21\x6a\x4d\x2e\xf8\xdc\xe2\x3c\x7f\x40\x54\xe6\xc6\x4e\x9c\x65\x1a\xff\x18\x6b\x12\x74\x53\x59\x2c\x35\xea\x9e\xcf\xc5\x68\x85\x7f\x47\xb7\x02\xd1\x3a\xa7\xb0\xa9\x2a\xfa\x45\x56\xac\x0c\xb8\x14\x10\x09\x03\xde\x05\x02\x43\xd0\x59\x0d\x88\xb9\x56\x40\x74\x07\x14\xae\x0d\xcd\x34\x8c\x14\xbf\x15\x22\xa5\x89\x0d\xde\x24\x38\x94\x6d\xc6\x1c\xa4\x45\x8b\xb3\x40\x88\xd0\x48\xde\x85\xf8\xd2\x27\xf8\x94\x37\x22\x1e\xe9\x30\x7c\x04\x00\x53\xd1\xcc\xb1\xe3\xb7\xf1\x07\xd2\xfb\x23\x67\x5c\x69\xce\x23\x3d\x84\xb6\x5f\x7c\xf9\xe2\x22\x17\xcf\xa9\xe5\x94\x88\x65\x35\x13\x0d\x35\x0e\x41\x64\x29\x4d\xe3\x47\x47\x35\xed\xb7\xa8\x36\x83\x92\x7f\xcf\x59\xcb\x8b\x44\x4c\xc5\xcb\x9d\x99\x63\xc7\x23\x8c\xc1\x62\x8a\x1e\x9e\xa3\xa5\x10\x84\x81\xac\x84\x4c\x0a\x64\xcc\xb0\x7b\xf2\xc2\xf9\x10\xd2\x79\x17\x46\x40\x3a\xa2\x04\xde\x33\x07\x05\x5b\x4d\x4a\x5e\x68\xbd\x15\x11\xaa\x08\x5d\xad\x4e\x2b\x3a\xd7\xe9\x0b\x42\x6d\x2a\xd1\xb4\x77\x60\x90\x20\xac\xa7\x28\xbf\x2e\xf7\x5b\x41\x58\x02\x90\x32\x4e\x97\x10\x8f\xf3\x9a\x1e\x79\xb1\x28\x0b\x9c\x03\x02\xa8\xd0\xc9\x9e\x0e\xda\x00\x11\x3d\xa7\x89\xce\x9a\x01\x88\x3d\xa5\x30\x41\xc5\x69\x29\xcc\x70\x30\xa4\x8d\x98\x39\x94\xb8\x69\x62\x8e\x90\x88\xa0\xcc\xaf\xa4\x86\x22\x13\xdc\xa9\x23\xf6\x94\x92\x77\x1e\xea\x2e\x64\xa0\x91\xc8\xaa\x60\xf1\x02\x44\x05\xec\xb1\xa4\x4c\xa1\x6a\xbe\x0f\x59\x82\x95\xfd\x44\x53\xf1\x86\xea\x05\xbd\x50\x67\xa0\xa8\x67\x4e\xc2\x23\xed\xc6\x6b\xdb\x57\x82\xa7\x4a\x67\x8d\x0d\x95\x7c\x7d\xf4\x4b\xd9\x1b\xf6\x39\xb6\xf0\xab\xf6\xed\xb6\x2c\xe2\x97\xc7\xb6\xa2\xc8\x35\x49\x91\x88\x2f\xe7\x6e\xfb\x9e\x88\x73\x04\x92\xae\x4c\xde\x80\x46\x7f\x50\xe6\x4d\x52\xf4\xd4\x4a\x1c\x4f\x8a\x4a\xda\x60\xf7\xb1\xdb\xdd\xb4\xc2\x89\x36\x5f\x2a\xb8\xc8\x65\x5d\x0a\x53\x3a\xab\xa6\x16\x62\xe4\x50\xfc\x93\xa5\x1d\xbd\x5e\x01\xc4\xc4\x99\x70\x93\xdb\xe4\xe6\xf2\x80\x9d\xdd\xeb\x89\x3c\xb1\xc7\x3c\x06\xf9\x3b\x32\x95\x9d\xa9\x7b\xea\x3a\x4d\xee\x9d\x54\x12\xd0\xc3\x6e\x83\x74\x5c\xa5\xed\xab\x86\xc5\x14\xf5\x1e\xc6\x4e\xc8\x1e\x79\x22\x6d\x36\x18\x25\x7b\x3a\x5f\x1f\xd2\x31\x19\x3b\xef\x40\x6e\x98\xd8\x69\xd2\x66\xec\xc9\x0a\xbb\xfc\x42\x8b\xdd\xac\x84\xcb\x12\x6d\xea\xf0\xbd\xad\x1b\x50\x06\xf7\xe7\xc1\x39\xa7\x4d\x73\xce\xe3\xd4\xa8\xd7\x51\x7d\x6f\x0c\xa8\x11\x36\x50\x8d\xb2\x44\x09\x27\xbc\xd5\x6c\xfb\x8d\x58\x93\xba\x37\x11\x56\xdd\x07\x75\xb6\x05\xb4\x6a\xc1\x8d\xe3\x7c\x00\x2f\x6d\x24\x34\x41\x3b\x90\x26\x3a\xd4\xca\x50\x0b\x59\x86\xdd\x6e\xa2\x46\xa6\xbd\x5e\x4d\x62\xe4\xd7\x5a\x6c\x68\x37\x86\x1f\x6c\x45\x3f\xd2\x6a\xe2\x5e\x7a\xe7\x82\x29\x01\xd7\xc3\xb3\x83\x86\xa4\x6d\x81\xc6\xbe\xde\x36\x3d\x21\x28\x55\x00\x01\x19\x41\xd9\xc1\x8c\x92\xd8\x57\x98\x63\xff\x3d\xba\x6c\x35\x2f\xf2\x29\x1a\xb4\xb7\xf5\x26\x28\x0b\x39\xae\xf4\xad\x16\x2a\xda\x05\x2a\x1c\x21\xfd\x2c\x18\x54\xb1\x2c\x8b\x4c\x54\x4d\xbc\x31\x0d\x5a\xb2\x3c\xe0\x69\x45\x10\x16\x45\xb9\xf9\x5c\xba\xca\xfb\x9e\x03\x6e\x97\x0e\xb8\x8f\x8f\xb1\x43\x7a\x49\x85\x1f\x1e\xdb\x9d\x41\xfc\x2d\x63\x73\xce\x49\x5c\x19\xf4\x1f\xb3\x78\xe9\xe4\x74\x24\x9d\xd2\x77\x2b\xe9\x6a\x96\x17\x10\x3f\x4a\x6b\x21\xde\x2f\x88\x92\x8b\x82\xd3\xd5\x33\x9c\xdc\x28\x82\xcb\xab\x08\x20\xab\x5f\x8a\xf5\xb4\xa8\x69\x21\x49\x9d\xa2\x26\x7a\xaa\xcb\x50\xd7\x46\x46\x5b\x36\xe0\xe3\xaa\x5f\x50\xee\x36\xd3\x3e\x36\xa1\xad\x00\x1e\xcb\x13\x70\x76\x0d\xab\xaf\x90\x9d\xb9\x3c\x00\x57\x88\xb6\x33\x49\x4c\x8c\x02\x04\x01\x98\x52\x58\x97\xeb\xa4\x8e\x36\x64\x55\xec\x57\x93\x79\x9d\xab\x73\xfb\x7e\x40\x2d\xa0\x8a\x7d\x40\x97\x50\x4a\x8f\xe9\x55\x7b\xcf\x41\xb9\x8b\xc0\xd7\x7b\xf7\xb1\x5b\x7b\xf1\xe5\xb4\x57\xf7\x88\x0f\x3a\x7d\xb1\x08\xbf\x7f\xdf\xee\x76\xc6\xa7\xc6\xce\x36\xdb\xfc\xbc\xde\x22\x58\x09\xa5\x77\x80\x4c\xf3\x0e\x76\x89\x76\xc7\x6d\xed\xa3\xfa\x40\xc9\xe2\x72\x45\xbd\x51\xaa\x21\x35\xb9\x52\xd1\xbe\x43\xec\x59\x1c\x39\x75\xb0\xad\x17\xeb\xa3\x60\xd9\xb6\x35\xa0\xd8\xa3\xb0\x9b\x6c\xc1\x19\xd5\x1f\xc4\x9a\x78\xdb\xe7\x4d\x75\xc6\x04\xbd\x29\x24\x9c\xe2\xc3\xf3\x81\xca\xa7\xef\xbf\xd0\x4c\x1e\xd0\x9c\x53\x3b\x33\xbb\x30\x0f\x74\x0f\xf4\x0d\x2f\x38\x87\x68\xfb\x82\x5e\xc0\x30\x2e\xea\x53\x27\x8b\xd3\x5e\xfb\x6a\x90\x6d\xef\xd9\x9e\x0f\x1f\x30\x81\x38\x6d\xa5\x37\xa2\x6f\xc3\x27\xe8\xe8\xb8\xfd\xdf\x1c\x60\x5f\xfd\x04\xa5\x75\xca\xf0\xf5\x07\xa2\x17\x6c\xfe\x73\x83\x12\x18\x5c\xdf\x70\xa4\x37\x2b\xdc\xe5\xc8\x4c\x4e\xcf\x08\xf9\xd1\xfd\xec\x4f\x03\xb6\x1f\x1e\x0d\x3f\x13\xb0\x17\xdd\x98\xe0\xcd\x76\x89\xab\xea\x75\xd1\x3a\x76\xb8\xe9\xb5\xf7\xb3\x26\xe9\xe0\xc7\x7c\xd5\x98\x5f\x9a\x86\x87\x2e\xf9\x19\x9e\x88\x7b\x53\xd5\x65\x0e\x99\xc5\x97\x9c\xe8\xc2\xf4\xfa\xcc\x25\xbe\x88\x50\x22\xa8\x53\xb0\x0f\x8c\x99\x12\xe5\x1f\x1b\x63\x6b\x4f\xce\x88\xb1\x86\xf9\x43\x2d\x39\x3a\x54\xb1\xdd\xa0\x29\xbb\xd6\x19\x35\x25\xd1\x92\x1d\x7b\x82\xcf\xb4\xb7\xcd\x40\x45\x84\x7a\x87\x4c\x68\x74\x4a\xea\x25\xf3\x36\xcc\x74\xf5\x50\x45\xdb\xfc\xd8\xf6\x2f\x1a\xd9\xe1\xad\xb2\x6c\xd1\x1c\x34\xc0\xe4\x5b\xf7\x80\xfd\xc9\x2d\xec\x5f\xb8\xb1\xa4\x7e\x5f\x22\xf9\x1d\x94\x51\x2e\x8a\x2a\xfc\xc8\x2d\xd1\x0b\xec\x9f\x64\x95\x6a\xe0\x2b\x27\xbc\x63\xcb\x51\xfb\x45\xa2\x11\x25\xa8\x4a\x92\xea\x2c\x62\x40\x9d\x27\x1f\x1b\xd1\x94\x3b\x1b\xe8\xdf\xdd\xcc\xfe\x32\xa0\xca\xff\x3f\x0e\xb6\x20\x85\x1e\xee\x25\x14\xf8\xff\x44\x30\x44\xc8\xe7\x57\xf9\x37\xa8\x16\xa8\xd8\xdf\x94\xd0\xda\xe6\x9e\xec\x5a\x7f\x65\x9d\xea\x7d\xf4\xfe\x16\x9b\xb9\x96\x91\xe3\x6e\x78\x59\x6b\xd1\x2b\xe9\x07\xba\xb0\x52\x74\x50\xe3\x2a\x88\xa5\x5d\x8b\xb8\x11\x03\x86\x83\x12\x60\x20\xe8\xd0\x2b\x6a\xa4\xf5\x03\x84\xe1\x01\xd6\xb0\x6c\xa4\x79\x02\xe4\xfe\xc4\xf5\x72\x1d\xd0\x85\x4f\xf4\x4c\xee\x99\x51\xbb\x34\xa3\xf6\x34\xee\xeb\xd7\xb8\x7f\xb1\xe5\x38\x21\x7f\xaa\xb5\x5b\x27\xe4\xdf\x04\x54\xb3\x07\x4e\x27\x89\xce\x0e\x47\x16\x2b\xd9\x6a\xfd\x3a\xe8\xda\x25\x64\x04\x03\x91\x69\x34\x4c\x52\x72\x17\x8a\x64\x5c\x4e\x58\x6f\x8c\xd3\x1c\x21\x02\x41\x7d\xca\xa6\xae\xcf\x27\xc9\x5f\x77\x35\x58\xda\x5e\x07\x9d\x09\xa7\x2d\x50\x46\xbf\x2f\x6d\xde\x97\x19\x54\x33\xe5\xeb\xb3\x01\x1b\x1f\x81\x87\x61\x92\x21\x94\x14\x15\x17\xf0\xbc\x0a\x3f\x14\x44\xcf\x1e\xf9\x0b\x55\x69\xd2\x1f\x86\x95\x30\xb6\x81\x5b\xff\x64\xfb\x06\x36\x60\x87\x21\x0a\x26\x92\xd9\x2a\xcc\xae\x1f\x6a\x75\x66\xa9\xc1\xd4\xe6\x06\x8b\x37\x62\xc9\xb3\x58\x56\x7c\xbc\x14\x53\x13\xf4\x3e\xf6\xca\x03\xde\x90\x47\xa8\x5a\xf3\xf9\x4a\x29\xa4\x5c\x3a\xb3\x18\x7e\x7a\x7f\x74\xd6\xfe\xd9\x88\x7a\x55\x65\x9c\x4b\xc0\x9e\x80\xc2\x43\x2e\x45\xa7\x2e\xc1\x81\x37\x84\x24\xc7\xa9\x11\x7f\x1e\xbe\x79\x3f\xbb\xd2\x62\xfb\xa1\x02\x30\x7c\x55\x2b\xfa\x5f\x10\x27\x45\x25\xc1\xa6\xc3\x61\x81\x20\x91\xe8\x99\xac\x0f\x28\x40\x76\x8b\x7c\x1d\x16\x73\x0f\x8a\xdd\x61\x50\xd5\x6e\xc2\x69\x69\x6c\x38\x18\x47\x26\x17\x45\xa7\x54\xc7\xde\x49\x07\x48\x04\x2a\xe6\xd2\x2c\xe9\xa8\xa5\x0f\xf1\x59\x29\x2a\x03\x2b\x0e\xa2\xdc\x85\xb1\x73\xc9\x21\xea\xac\x9b\x66\x99\x41\x3c\xa6\xc1\x4f\xf2\xb4\xcb\x33\xd1\xad\xdc\x6a\xe4\xad\x48\x76\x3f\xd3\x62\x4c\x42\xcf\xc0\xa9\xfa\xeb\xad\xe8\x17\x5a\x8b\xe6\xef\x51\x99\x02\x78\xb7\xf1\xcb\x58\x52\x80\xc5\xc5\x33\x9a\x9e\x94\x17\x39\xbf\xed\xb6\xe3\x6d\xc4\x55\x51\xad\x40\x9f\x0c\xe3\x8e\xd2\x1e\x81\xc7\x49\x3d\x53\x16\x35\x0c\xd9\x20\x7a\x2d\x9e\x9b\xe7\x3a\x3e\xc7\xe3\xac\xc8\x2d\x8c\x83\xfe\x09\x6d\xc8\x0c\xe2\x93\x38\x31\x6e\x7c\x02\x32\x35\xd4\x77\x8e\x88\xfb\x84\x6c\x62\x07\x05\x85\xe6\xeb\x42\x9d\x89\xc9\x46\xcb\xd2\x62\x61\xba\x14\x6c\x06\xb0\x56\x4f\x84\x7a\x81\x6e\xdf\x7d\x88\xc6\xe3\xd7\x11\x1e\x60\xcf\x70\x13\xff\x91\x69\x0d\xf2\xa7\xbc\xcd\xf0\x8a\x03\x4f\xe4\x66\x78\xd7\x7e\xf6\x33\x66\x33\xbc\x77\x6f\x33\x0c\x21\xd3\x3f\x83\x7d\xa9\x77\x02\xa8\x01\x4d\xa9\x93\x37\x3c\x1c\x1e\x8c\xab\xa2\x97\x76\x18\xfb\x43\x7f\xcb\xfc\x56\x2b\xfa\xe8\xf5\x6e\x19\x35\xa9\xce\x96\x81\x6f\xbb\xa3\x7d\xa3\x1e\xfc\xc7\xb0\x6f\x3e\x7e\x98\x3d\x6d\x33\x44\x91\x0b\x45\x26\xc2\x1f\x39\x1c\x7d\x3c\x50\xff\xc2\x03\xd2\x06\xfa\x26\x79\x56\xac\x00\x26\x3f\x1c\xd7\x60\xa7\x76\xf9\x02\xa4\xb7\x40\xb5\xa5\xe7\x65\x36\xf0\x07\x94\x2d\xa4\x34\x0a\x4c\x88\x71\x12\xba\xd5\x72\xed\x97\xc2\xf0\x2c\xad\xcf\xb4\x67\xee\x54\xff\xe8\xc6\xeb\x68\xd3\x6d\x9a\x1f\x3e\xbd\x3e\x03\x2d\xa1\x12\x0e\x99\x37\x36\x06\xb4\x4c\x18\xb6\xba\xd1\x63\xc7\xfc\x6d\xfb\xe9\x03\x7b\x36\xc6\x9e\x8d\xf1\xb9\xb3\x31\x56\x1d\x13\xe3\xeb\x76\x6b\x61\x6c\x59\xd0\x32\x60\xfb\xa1\x86\x39\xec\x47\x53\xb8\x49\x09\x89\x27\xcb\xc8\x94\xb0\xdb\xd7\x00\x93\x20\xe6\x8f\x15\xea\xb7\xb1\x63\xec\xe8\x76\xb5\x4e\x28\x42\x6c\x7b\x57\x83\xd5\xed\xb5\xff\x53\xe1\xdc\x35\x96\x82\xf8\xc6\x00\x21\xe4\xfd\xec\x4d\xec\x91\x1b\xe9\xa9\x9c\x83\xcd\x0a\x82\xe1\xbf\xb3\xe8\xec\x66\x3f\x0e\xc3\x2b\xe9\x5d\x6e\xd9\x05\xe9\x56\x32\xfc\xe6\x2e\xb4\xaf\x04\x87\x34\x31\x8b\x5f\x0a\x72\x98\xbd\x7e\x1f\xfb\xa7\x1d\xd3\x3a\x16\xaf\x93\x40\x92\xe1\xdf\x8f\x45\x9f\x1e\xdb\xec\x57\x4d\xc0\x58\x26\xa2\x14\x89\x51\x3c\xfa\x20\x85\xd5\x95\x4b\x73\x8d\x27\x2f\xd9\x9e\xa9\x75\x40\x88\x42\x44\xc5\x4c\xec\xbd\xb3\x0b\xf3\x1e\xd7\x9f\x86\xae\x40\x22\x1f\x3d\x09\x2e\x8d\x0f\x71\x67\xab\xdd\xd8\x87\xc4\x48\x8a\x29\xe6\xe6\xac\x32\x6f\xf5\x92\xca\xad\xb2\x03\x49\x45\xf8\x30\x1e\x91\xb6\x13\x93\xdc\x0e\x1f\x3b\xd4\x8d\xd3\x6c\x33\x48\x04\xc4\x86\x72\xc8\xbe\xf5\x10\x7d\xdc\x5d\xdd\x0d\x4b\xd9\x65\x7a\xa8\x24\x6f\x52\x08\xcc\xd3\x20\xed\x0d\x9c\x9f\xe6\x0e\x93\x30\x5f\xd1\x6c\x2d\xea\x8e\x5a\xa4\x13\x8b\xd6\x63\xba\xec\x6b\x69\x97\xbe\x36\xa2\x55\x18\xbd\xf0\xd2\x56\x96\xc5\xaf\x8e\x31\xb3\x74\xc2\x9f\x1b\x8b\xde\x3b\xa6\xff\x72\x46\xa1\x16\x62\x63\x26\xa4\xce\x17\x53\x4b\x13\x7c\xa6\xd5\x86\x10\xb9\x19\x06\x20\xc1\xe1\xd0\x09\x2b\xbe\x84\x7c\xc3\x4b\xe7\x8a\x5c\x5c\x3a\x41\xc1\x2a\x7c\xba\xc4\x6c\x5d\x82\xae\xaf\x10\x7d\x49\x1f\x9a\x70\x12\x1b\xb0\x9e\xaa\xc0\x34\xb9\x01\xb9\xb3\x0d\x85\xcc\xc8\x8f\x35\xc5\x2f\xd1\x07\xba\x74\xc2\x99\x4a\x9c\xb4\x0e\x88\xab\x02\xd0\xdf\x34\x2e\x8f\x9e\xd5\xaa\xe0\x89\xa1\x6e\xd6\xa8\x8f\x7c\x36\x41\x7a\xf9\x38\x73\x63\xd8\x8c\x43\xda\x8d\x10\x89\x47\xcd\xd6\xaf\x2c\xff\xbf\x49\xc9\x55\x53\xda\xd6\xe4\x73\x17\x91\x25\x9f\x28\x26\xd0\x2b\xd3\x8d\x33\x49\xe7\x33\xdc\xeb\xbc\x7e\x63\x04\x3e\x97\x61\x3b\xf1\xd4\xb1\x6f\x6d\xb1\x2f\x1e\x71\x77\xf8\x67\xc1\x8d\x2a\x1c\x42\xf9\x36\x02\x31\x2c\xfa\xf6\x60\x54\x3f\x53\x8d\x20\x86\xcc\x80\xb0\xce\xd5\x54\x69\x09\xa7\x4f\x0e\x83\x41\x05\x2c\x24\xb8\x0c\x53\x69\xbf\xa2\x45\xcc\xc0\x14\xd9\x4b\xfa\xae\x4b\x9a\x71\x5e\xad\x7d\x73\x37\xfb\xab\x5b\xfc\x8a\x98\x84\x10\xda\x88\x4b\xce\x07\xfa\x18\x05\x8c\xf6\x9e\x5b\xa2\x47\x9e\x18\x60\x34\xbf\x64\xf8\x66\xf6\x61\x17\x17\xed\x27\x34\x2e\xda\x9b\x82\x4b\xfa\xe2\xa5\x2f\x0c\x64\xb4\x97\x3b\xc8\x68\xdf\xd4\x62\x0f\x6c\x1e\xb2\xd8\xf2\x63\x0c\x21\xa1\xbd\x3b\xb0\xa8\x5b\xd7\x89\x85\x66\x1b\x28\x4a\xc2\x0c\x7b\xc2\xf1\xd0\xfe\x82\xf0\xd0\xfe\xf8\x50\xf4\xc9\x43\xf8\xce\x3d\x44\xb4\x3d\x44\xb4\x3d\x44\xb4\x3d\x44\xb4\x27\x12\x11\xed\x9d\xcc\x83\xbc\xb0\xe1\x0c\xa2\xb0\xa4\x82\xcf\x6f\x65\xd1\xa0\x71\x8d\x8f\xab\xb7\x37\x2e\x9e\x49\x65\x35\xe1\xa2\x49\xd1\xac\x38\xcc\xe3\xea\x10\x74\x5d\x2f\x27\x50\xf5\xa1\x54\xa3\x64\xc8\x25\x73\xd7\x57\x79\x27\xe0\x0f\x1e\xda\xf3\x9e\xec\xd6\x7b\xf2\xcb\x01\x63\x9d\x22\x47\x25\x55\x86\x1f\x0c\xa2\x67\x6a\x52\x6e\xcb\x5d\x6a\x6f\x30\xd1\xff\x9d\x43\xe1\x0c\xad\xa3\x39\xdd\xda\xd5\xe0\xc8\x36\x7c\xd3\x07\xc3\xfd\xd5\xa0\x2f\xae\x85\x70\x7a\xcf\x1d\x74\xfd\xee\xa0\x8f\xbb\xe0\x58\x1f\xde\x35\x1d\xc8\x4b\x83\xcf\x8b\xe0\xef\xf3\xb7\x77\xff\xdc\x16\x1e\x33\xee\x9f\x28\xb2\x49\x87\xbe\x44\x6b\xc6\x7f\xff\xf4\xa0\x17\xfa\xd1\x0b\xfd\x74\x26\x2e\x53\x3e\x2b\x92\x6b\xfd\xfc\xc1\x68\xd5\x5e\xf4\x31\xfc\xa1\x42\x26\xed\xe8\xa4\x49\x3f\x77\x0e\xc9\x90\x31\x39\x5a\x24\xd3\x71\x55\xc5\x9d\x55\x91\x90\x3e\x01\x46\xa8\xe8\x50\x94\xa0\x9f\xd5\x2b\x69\xde\xbe\x12\x1c\xc0\xfc\x58\x4f\x52\xfe\xdc\x01\x76\x9e\xd1\x0f\xe1\xa9\xe8\xd9\x27\x29\x85\x76\x38\xa0\x41\xc9\xb5\x74\x44\x19\xb5\x18\xbb\xe7\x1d\x17\x3f\x17\xb0\x03\x5d\xb9\x34\xe8\x8b\xf0\x7d\x41\xf4\x8e\xe0\x74\x9a\x09\x6d\x01\x0c\xfa\xa0\xa3\xf4\x8a\x3a\x77\x60\xf9\x63\xde\x6d\xdc\xe3\x39\x58\x2a\xad\xf6\x11\xdf\x5c\xbe\x62\x52\x80\x4e\x5d\x6e\xf3\x48\x5c\xae\x6e\x8b\x26\x79\x74\xb9\x2b\xd5\xff\xf2\xaa\x2b\x89\x38\x90\xf2\x14\xdc\xe6\x13\xd1\x87\x6a\xa2\x22\xe7\xce\xd4\xcb\x4e\x99\xf6\x7d\xc3\xf7\x3c\x3b\x48\x55\xf9\xe1\xc9\xe8\xc8\x79\xd2\x25\x4e\xf0\x53\x97\xab\x12\xf8\x9b\x7b\x4a\x74\xeb\xc2\xfd\x14\x60\xbe\xdb\x5b\x91\x43\xbe\x24\x60\x87\x4a\x11\x27\xe7\xf3\x6c\x10\xae\x47\xab\xb6\x49\xd7\xd9\x02\x46\x3b\x1f\x57\x37\x4e\x6f\x94\x69\x25\x26\x30\xd1\x09\x48\xd5\xa1\x40\x0b\xbd\x34\x05\x2e\x06\x61\x7f\xd4\xa1\xb3\x34\xe7\x38\xaa\xb3\x6a\x96\x09\xa1\x70\xb9\x28\x32\x11\xe7\xec\xf1\x16\x3b\x8c\xb1\xa9\x0b\xa2\x1b\x7e\xb8\xc5\x6e\xdf\x56\x3e\x9f\x51\xda\x29\xee\x5e\x6b\x41\x7d\x7b\xcb\x76\x7f\x51\xb7\x87\x60\xa3\x43\x96\x14\x44\xc2\x48\x6a\x92\xad\x8b\x1c\x6e\xb9\x4c\xab\x74\x7d\xc8\xe6\x05\xf5\x8a\x9e\xc6\xd5\x4b\xdf\x47\x17\x0c\x91\xfe\x86\xa0\xf4\x69\x97\xe7\x45\xe3\x2d\xa9\xcb\x0b\xa5\x03\x62\x23\x3b\x22\x1d\xd4\x7d\x65\xee\xe0\x4d\x93\xa0\x31\xe3\xbf\x51\xbd\x25\x3e\xc2\xd1\xbd\x62\xaf\xbc\x95\x3d\x6b\x13\xde\x0e\xe2\xd6\x73\xb9\x08\xc2\x4f\x3d\x35\xfa\x9d\xc0\xa7\x27\xf0\xf6\xbe\xac\x97\x89\xa5\xd0\x3d\x3c\xc8\x0e\x31\x44\x59\xd6\xa2\xf2\xeb\x8a\xb5\x99\x85\xe5\x7c\x34\x57\xbd\x3a\xab\xd2\x7e\xd6\x64\x45\xa0\x0a\xcf\x49\x02\xa6\xc7\xfd\x86\x3c\xa7\x9a\xd0\x4b\x6b\xe1\x2f\x2a\xd2\xdc\xd4\x65\x24\x35\xad\xbe\x6e\x0d\x13\x05\x9d\x35\x1d\x6d\x5f\x09\x6e\x22\xab\x47\x89\x81\x2b\xc1\x61\xf3\x93\x27\x7d\xfe\xe4\x96\xbd\x53\xf9\x0b\x22\x48\xf3\xb6\x31\xb6\x1f\xbc\xe5\xe1\xf7\x8d\x45\xef\x6c\x21\xa2\x80\x75\xe9\x1a\xef\x7a\xd1\xe5\x94\xe7\x40\xa8\x03\x88\x15\x0c\xab\x0a\x00\x56\x6c\x26\x33\x19\xa9\x32\x83\xf5\x7b\x0a\xd1\x57\xca\x6a\x73\x56\x0f\xc8\x9e\x26\x36\x10\xa9\x33\xd2\xd2\xca\xcb\xcc\x6e\x16\xb1\xea\x82\x0c\xf2\xf4\x43\x13\x31\xbe\xc7\x29\xd7\xc0\x04\x0a\x9e\xa7\xc8\x36\xa2\x35\x73\xaf\xed\x28\xd6\x5c\x24\x11\xf5\x56\x22\x09\x09\xac\x2d\xf2\xbc\x73\x2a\x84\x51\xf3\x30\x73\xf4\x28\xbd\xd6\xd5\x88\xef\x66\x77\x6d\x9e\x96\xb5\x85\xdc\x58\x28\xca\x6a\x87\xb9\x0a\x9f\x6d\x31\x77\xf3\x85\x9f\x6a\x45\x1f\x6f\x39\x17\x1a\xdf\x0d\x8e\x5b\x65\xda\xe0\x1d\xbc\x13\x97\x65\xaa\xcf\xdd\x54\xfa\xf2\x02\x29\x59\xe8\x56\x27\x0b\x44\x5a\x42\x16\x37\x1b\x10\x51\x52\x36\xa9\x4b\xe4\x71\x57\x59\x7d\x9a\x24\x1c\x0f\x6c\x5b\x87\xaf\xfb\x03\x6b\x1f\xe3\x03\xa6\xb6\xcb\x68\x07\x27\xf8\xb3\xf8\xfc\xc2\xfa\x6d\x90\x8c\x67\xe4\x67\x0e\xd7\xf8\x2c\xf9\x5d\xf0\x9e\x3b\x46\xdc\x73\x87\x7b\xcf\xe9\x87\x4f\x9e\xf3\xef\xe1\xa7\xeb\x2c\x1b\xf0\x87\xeb\x38\xc3\x38\xd0\x49\x2c\x4c\x3e\x17\xf7\xf6\xaa\x2a\x6f\xa8\xb1\xf9\x99\x80\xd9\x23\x22\xfc\x8d\x20\x7a\x91\x3d\xf4\x3c\x10\x3b\x92\x08\xce\xaf\x23\xe4\xc8\xf6\x3b\xf3\xa8\x73\x56\xed\xdc\x60\xdd\x7c\x7b\xee\x6c\x6b\xee\x3c\xe0\x3c\x14\x40\x36\x60\x5d\xb6\x0f\x8d\xd0\xb3\xb7\x4f\x19\x7b\xcf\x01\x76\xec\xda\x4b\xcd\xc3\xff\xb3\x3f\xfa\x48\x30\xab\x59\xa9\x1c\xde\xd5\x98\xae\xa1\x27\xa9\x00\x8f\xfd\x08\x92\xe7\x25\x0f\x07\x05\x52\xc2\x28\xad\x18\x97\x5e\xd5\x59\x3d\x85\xd8\x21\x18\xc0\x2c\x05\x9f\x3d\x77\x52\x1d\xa8\xb3\x9a\x37\xa9\xf1\x6e\x78\x86\xb0\x38\x0c\xed\xfb\x2c\xcf\x95\xde\xb1\xc9\xad\x06\x71\xa3\x91\x0b\xf7\xb7\x63\xec\x87\x5b\xec\x26\xa7\x57\xe1\x1b\x5a\xd1\xdf\x07\x6e\x37\x61\xa8\x3d\xe4\xae\xff\x86\x35\x31\x98\x84\x6d\xf1\x8d\xbc\x1f\xa7\x25\xbc\x98\xb0\xc3\xdc\xdf\xc8\x8f\xed\x36\xa3\x5a\x50\xa7\xd4\x63\x75\xba\x1e\x67\x4a\xb1\xa0\xe0\x20\xa9\x6e\x7a\x72\x9c\xc9\x50\xfa\x56\x21\x05\x5f\x13\x03\x2b\x2d\xa3\x35\x31\x88\x30\xeb\x0a\x8d\x1f\xfc\x1a\xd1\x7c\x1e\x59\x32\x6e\x13\x14\x2d\xe3\x81\xd5\x6b\x21\x0c\x1a\xc1\x6f\x91\xfe\x30\x6e\x7d\xbb\x99\xfa\xad\x6c\x96\xff\x12\xb0\xa7\x36\x3b\x1a\xbe\x3b\x88\x1e\x19\xfa\x94\xde\x36\x6d\x7c\x18\xf7\xc5\x5b\x76\xc5\xdd\x8b\xe7\xd9\x59\xf6\xd0\x6e\xb1\x13\x9c\x6a\xc4\xab\x41\xc4\xbe\xc4\xdb\x7d\xbd\xb8\x3f\x74\x7a\x7e\x74\x1f\x7b\xe6\x88\x52\x98\x93\xb1\xe8\x15\xf9\xa2\xb0\x3e\xaa\xf0\x8d\xfb\xa2\xf9\xe1\xcb\x8d\xfc\x4d\x27\x6b\xdb\xdc\x0b\x15\x4a\x06\x2d\x06\xf9\xf4\xae\x04\xfb\x2a\xd0\x94\xa9\x40\xc7\x5b\xb7\x3f\x31\xc6\x5e\x1d\xb0\x30\x8b\x65\xb5\x54\xc6\x60\x34\x15\xf9\x52\xda\x13\xe1\x37\x5c\x7f\x8e\xf7\x7d\x67\x62\x59\x21\x65\x32\x85\xa6\x69\x00\x95\x79\x85\xa6\x4a\x03\xbb\x08\xfd\xb9\xb0\x8a\x21\x5a\xde\x66\x2f\x60\x07\x91\x90\x5b\x84\xe7\xa2\xd9\x59\xbe\x5a\xf7\xe2\x9c\x2b\xc3\x15\x8e\x77\xfa\x4d\xeb\x50\xea\x4c\x4f\x44\x15\xa7\x4a\x16\x18\xda\x4f\xfb\x32\xef\x40\x3d\xcd\x0e\x94\x22\x96\x45\x1e\xde\x13\x4d\xe3\x7a\x51\x7f\xd9\x4c\x0a\xdd\xdb\x23\x94\x8b\xbe\x49\x3b\x67\x4c\xc1\xd3\xfd\xd1\xed\x8b\x5e\x59\x92\x69\x62\x52\x87\xb9\x96\x4a\x75\x44\x9e\xc6\xa0\x39\xc5\xd3\xbd\xd6\x66\x18\x7c\xa4\x70\x22\x7a\xda\x12\x69\x4d\xf6\xa3\x9a\xf6\xbc\x47\xfe\x92\xb1\xa7\x3b\xcb\x69\x59\xed\x1a\xf0\x79\x96\x45\xfe\xbc\x62\x19\x88\x1f\x7e\x95\x45\x2f\x70\xfe\x6e\xe6\xec\xac\x2a\xd3\x6b\x19\x3c\x3a\x75\x65\x12\x4b\xb2\xa2\x58\xc3\x5a\x76\xc8\x69\x50\x8a\x6d\xaa\xd1\xe8\x3a\x44\x1d\x5d\xd6\x39\x24\xf3\x10\xe4\xce\x95\xe0\xa6\x17\x15\xcb\x4b\xa2\xd7\x57\xda\x81\x1f\x32\x3e\xcc\xbe\x3f\x60\x07\x65\x2d\xfb\x22\x4f\xc2\xd7\x04\xd1\xb7\x04\xa8\xb6\x65\xf1\x0a\xaf\x04\xc4\x80\xa8\x0a\x80\x12\x70\xab\x82\xd3\xed\x68\xae\x3e\x56\x2b\xb9\x66\x7a\x29\x41\x7f\x36\xc9\x29\x71\xbf\x8f\xc1\xa1\x38\x53\x0b\x64\xc0\xa9\x6e\xc0\x79\xa0\xcd\x87\xfd\x20\xbe\xef\xe2\xa3\x2d\x76\xab\x43\x7b\x8f\x99\x5c\xe1\x7b\x5b\xd1\x5b\x5b\x8b\x5e\x7a\x89\x52\x82\x30\x26\xa6\xef\x76\x7b\x86\xdb\xf1\x79\xc5\x32\x90\xfa\xa7\xcd\xa4\x92\x08\x72\x4d\x22\x3e\x4e\xce\xa3\x89\x13\x18\x1c\x91\x9c\x3e\x92\xd4\x51\x36\xdb\x7a\x36\xb8\x5b\x3d\x79\xba\x28\x97\xd3\x24\x3a\xa1\xd6\xe9\x72\x9a\x48\xf7\xfd\x65\xad\xe6\x44\xae\xa5\x7d\x48\x4c\xcd\xc5\x65\xb8\x46\x61\x29\x2c\x28\x57\x7f\xaf\xc6\x32\x3f\x52\x71\xb5\xa5\xe5\xaa\x48\xf8\x40\x54\xd0\xf6\x05\xd1\xcf\xe2\x8e\x88\x4e\xf0\x4e\x9c\x77\xd4\x19\x63\xf5\x61\x1d\x50\x55\xeb\x44\x2d\x87\x12\xef\x95\xb8\x24\xd0\xb8\x11\x1b\x6a\x9d\xbb\x6b\xf3\x95\x01\xfb\xd2\x6e\x9c\x66\x22\x51\x83\x7a\x30\x95\x55\x51\x0e\xce\xa4\xbd\xb4\x0a\x6b\x0d\xb0\x76\x09\xd0\x56\x4c\xd1\x25\xde\x6e\x3b\xf7\x22\x3d\x1b\x6a\x63\xe7\x30\x9f\xb5\x70\x28\x0d\xf3\xa9\x1c\xc8\xfe\xd6\x91\xf1\x73\xc5\x61\x15\x84\xe7\x66\x7c\x5c\xb6\x6f\x0e\x98\xbb\x44\xc3\x7a\x8b\x22\x45\xb3\x95\x9e\x67\x1f\x80\x02\xcd\xfb\x16\x3d\xfb\x46\xcd\x89\x87\x7d\xd7\x21\x20\x08\xd8\x33\xb4\x2a\x00\x15\x94\x3e\x6f\x9b\xbd\x90\x99\x3d\x13\x3e\x1c\x9d\xd4\x11\x49\xf5\xb7\x3a\xeb\xd5\x7d\x1c\x1d\x56\x93\x5c\x0a\x61\xd4\x64\x91\xb7\x37\xd2\xb5\xb4\x2f\x92\x14\x69\x36\xd5\x5f\xd3\xea\x76\x4f\x26\xfc\x42\xc0\xfe\x09\x2c\xff\x34\x5f\x39\x29\xe2\x24\x4b\x73\xb1\x28\x94\xfc\x90\xe1\x3b\x90\x18\xe5\x8e\xdb\xa2\xef\x0a\xb4\x83\x8d\x27\x74\x13\xc4\xb4\xf1\x46\x90\x84\xba\x11\x33\xce\xb4\xab\xbe\x78\x2f\x05\xdb\x4c\x77\x39\x41\x21\x0f\xd0\x07\x40\xb8\xae\x24\x69\x9b\xf3\xb3\x29\x78\xb4\xe0\x13\x3a\x9b\xc3\x4c\x53\x51\x6b\x24\x45\xfa\xea\x45\x2e\x1a\x74\x27\xdf\x1d\xb0\x2f\x93\x35\xa0\xfb\x74\xeb\x6c\x68\x15\x0d\xf4\x2a\x4a\xfc\x55\x64\x1f\xb9\x71\x2b\xe9\xb8\xdf\xb3\xab\x37\x6f\x56\x81\xd5\x4d\x57\xce\xc6\x7d\xcf\x0d\xff\xb1\x9b\xa3\x0f\xb7\x66\x93\xb8\x0f\x46\x9f\xb9\x07\xe1\xc4\x34\x6c\x01\x85\xa6\x81\xa5\x56\x29\x2d\x74\x8c\x10\x30\xac\x79\xe8\x88\xe4\x27\xe3\x2a\x26\x0d\x4e\x4f\xa6\x05\xa6\x74\x81\x10\xd4\xd4\xa6\x99\x70\x11\x5c\xd7\xc4\x40\x6a\x7d\xd2\x69\x87\xca\xea\xd4\xdd\x98\xef\x3e\xa9\x93\x00\x20\x65\x08\x60\xa0\xb5\x6a\x09\xec\xa9\xba\x62\x16\xb1\xe6\x34\x95\x6e\x2f\x06\xe1\x03\x9d\x87\x37\x81\xb3\xb5\x5a\x95\x6d\x67\xd4\x84\xb5\xa2\x8d\x6c\x5e\x6c\xe4\xa2\x94\xab\x69\x9f\x4a\xf7\xd0\xf5\x98\x27\x7c\xf1\xd4\x99\x34\xaf\x2f\xf3\x52\x80\xba\x67\xf2\xf8\xf5\xa1\xf2\x57\x87\xd9\x22\x3b\xa4\x83\xf0\xe1\x03\xd1\x5d\xb8\x33\x07\x6a\xeb\x51\xfd\xb8\x70\x5e\xac\x54\xdb\x4a\x62\xc7\xf4\x87\x27\x17\x8d\x77\x0c\xfc\xd1\x18\xbb\x89\x64\xf3\xd9\x22\x11\xe1\x6f\x8d\xe9\x75\xf6\x73\x63\xd6\x29\xdd\x2b\x12\xc1\x97\x55\x83\x3a\x81\x49\x59\x2b\x2e\xaf\x66\x91\x1b\x59\x80\x9f\x61\x79\xa0\x03\x06\x4e\x68\x22\xe7\x45\xa7\xd2\x16\xb4\xc9\x4c\x3c\xaa\x6c\x48\x35\x09\x47\xef\xbc\xf3\x4e\x44\x2f\x4b\x44\x27\xed\x0d\xdf\x08\x77\xdd\x3e\x33\xd3\xe6\x2f\x98\x3d\x7b\x06\xb0\xb0\xd4\x3a\x03\x3c\x4d\x6c\x19\xb2\x38\xdd\x87\xe5\x24\xb2\x72\x99\x4c\x3f\xff\x57\xd8\xca\x66\x78\xfe\x36\x38\x7a\xc7\x6d\xb7\xb5\xf9\xc9\xb4\x04\xed\x57\xc9\x40\x27\xcd\x08\xd2\x17\x4c\xc0\xbf\xdb\x35\x0e\x5f\xb4\xa0\x31\x7c\xa0\x5d\xec\x3a\xc3\x06\x00\x0d\xb1\x64\xc4\x45\x82\xd3\x71\x0f\xac\xd0\x87\xb6\xec\x12\x55\x9d\x9b\x44\xed\xa4\x2b\x1f\x50\x86\xab\x35\x56\xc8\x3a\xa4\x22\x0c\x6c\xcc\x7e\x2b\xcc\x3e\x74\x36\xf2\xdb\xf7\x69\xc0\xf3\xef\xdf\x17\x7d\x7a\xac\x99\x59\x06\x4e\xc5\x35\x31\x98\xc2\x59\x57\x56\xda\x88\xed\x63\x60\x5e\x4d\xc5\x87\x5d\x75\x76\x8b\x16\x2f\xc2\x09\x31\x04\xb3\x76\x9b\x62\x80\x8a\x0c\x34\x17\x9d\x57\x19\x6b\xc0\xfb\x8a\x62\xc1\xc3\xa8\x81\xc0\x83\xd3\x57\xed\x25\x15\x09\xae\xf1\x2d\xde\x6c\x53\x8f\x61\x7b\xe2\xec\xd5\xf9\xd0\xd3\xe4\x95\x26\xf1\x42\x09\xc5\xaa\x4f\x6e\x00\x44\xe7\x3c\xa3\x26\x66\x30\x6c\x73\x7f\xfb\x4d\xba\x43\x96\xa2\xaa\x69\x6a\x44\x59\x16\xa5\x96\x36\x29\x8c\xb0\x17\x97\x6b\x22\x31\xe9\x35\x6d\xbe\xa0\x3a\x69\xf6\xac\x92\x07\x20\xa8\xb5\xb7\x49\xbd\x96\xcc\x52\x78\xc9\x91\x76\xfb\x08\x2e\x46\x7d\x88\xe1\xca\x52\xd7\x3d\x13\xb0\xcd\x26\xd9\xb3\xb6\x8d\x4f\x3d\x24\x06\x4b\x85\xea\x82\xd2\x1f\x10\x43\xf9\x5f\x46\xc5\x39\x0f\x37\x19\x73\xdd\x47\x3a\xb7\x7c\x90\xd0\xa4\xe8\xc8\x69\xa5\xb6\xa9\x5d\x3a\x5d\xac\x03\x65\xf4\xc6\x34\x95\xee\x4d\xa9\x7e\x4e\x91\x73\x61\x1a\x24\xf1\xf4\x33\xe0\x7f\xee\x01\xff\x21\x9f\x73\x4d\xf7\xb3\x89\xae\x3a\x97\xc5\x69\xcf\xe8\x3a\xdf\xb1\x3f\x92\x5b\xde\x61\x0a\xa7\x9c\x08\xcc\xc8\x07\x0c\x6c\x67\x2c\x01\x33\x92\x7c\x89\xa7\xfa\xab\xa2\x27\xca\x38\x73\xcf\x3e\x65\x78\xaa\x85\xe2\x09\xee\x97\xee\x63\x7f\xe0\x06\xfc\x7f\x7b\xd7\x01\xff\xef\x09\xce\x5a\xd7\x04\xc5\x97\x10\xc3\x33\xcf\x0b\xf4\x78\x36\x10\x8a\x3b\x45\x3f\x75\x77\xc4\xc2\x23\x73\x04\x64\x0b\xfe\xe2\x7c\x85\xa7\x55\x9b\x9f\x2b\xdc\xd4\x6d\xaa\x6a\xa4\x54\x71\x53\x75\x05\x4b\x92\x76\x58\x52\xeb\xb0\x12\xa5\x1a\xb5\xd9\x77\xb5\x08\x0d\xe4\xe5\x2d\x76\x62\xdb\xc5\x36\x72\xc6\x41\xef\xfc\x18\x90\xe6\xfb\x58\x20\xda\x5e\x1d\xf9\x14\x7a\x42\x44\x5e\xa5\xa5\x70\x05\x08\x0d\xbd\xce\x31\x87\xbd\x31\x09\x30\x4b\x2b\x42\x03\xff\x69\x1b\x1d\x44\x78\x45\x4b\x05\x5b\x06\x17\xbc\x9e\x18\x82\x60\x1a\xbd\x60\x70\xda\x24\xe5\xf8\x42\x94\xb9\xcd\x5e\xba\xcf\xf5\x20\xfa\xf5\xab\x84\x48\xbd\xb4\xb4\xe0\x14\x07\x22\x48\xfc\x47\xc7\xa2\x1f\x6c\x8d\xfa\xc5\xf7\x10\xa9\xdd\xe7\xb0\x61\x83\x17\x84\x52\xe0\x96\xe3\xce\x9a\xc8\x13\x09\x41\x36\x88\xd3\x61\x06\xdd\x09\x4d\x65\x7f\xcf\x6a\x21\xab\x7b\xa7\xef\x51\x22\xe4\xde\xe7\xde\x23\x45\x5c\x76\x56\xd5\x4a\xbf\x97\x4f\xdd\xab\x1f\x27\x94\x63\xfc\xaf\xfa\xd1\xa8\x6c\x75\x99\x39\xd0\x56\xea\x8d\x17\x4e\xcf\xf1\xe3\x77\x3d\xfb\x8e\x49\xed\x8a\xa7\xc0\x62\x33\x05\x1a\x4b\x5c\xe3\x95\x38\xcd\x65\xc5\xc5\xba\x28\x09\x0e\x07\x43\x19\xe8\x78\x97\x15\x3f\x32\x7d\x04\x96\xdf\xb2\xe8\x62\x70\x59\x57\xa4\x1c\x79\xee\x11\xa0\x64\x7f\xc6\x91\xf6\x95\x60\x3f\xc8\x76\x6f\xe7\xbd\x32\x60\x2f\x0f\x18\xfe\x10\xbe\x24\x88\x6e\x9b\x6d\xf0\x45\xc1\x2f\x1a\x36\xac\xef\xe1\xfa\x98\x69\x73\x25\xe8\x73\xd9\x16\x8c\x2d\xdb\x7c\x53\x10\xa9\x3f\x79\xc0\x83\xca\x1e\xf1\x04\xdd\x0d\xb8\x98\xe0\xcf\xf8\xd6\x03\xd1\xc9\xe6\x45\x4c\x57\x49\x20\x64\x64\x63\xfd\xd6\x0f\x84\x80\xc7\x28\xa8\x46\xd6\x31\xff\xe8\x7e\xf6\xe6\x31\xc8\x48\x23\x07\x44\xf8\xdd\x63\xd1\xb7\x8d\xcd\x59\x87\x04\x08\x79\x13\x00\x69\x02\xdd\x6b\xaf\x85\x9a\x39\x8a\xa2\xac\xc6\x90\xed\x8e\xa0\xd6\xea\xfd\xa4\xfa\x90\xb5\xaf\xf6\xae\xad\x92\x8a\xba\x59\xbc\x5e\x94\x32\x22\x8d\xa7\x74\x9a\xb5\xc0\x34\xea\xa5\xf6\x6d\x18\x96\x37\xf9\x9f\x03\xca\x26\x85\xe0\xa6\x6d\x79\xc1\x66\x65\x6a\x71\x01\xed\x98\x38\xbf\x5a\x60\x6e\xa3\xd0\x49\x0b\x07\x6a\xcf\x79\x50\x54\x10\x7f\x74\xaa\x5f\x8a\x6e\x7a\x99\x14\x08\x9e\x17\x4e\x9a\xc3\xb1\xdb\x8f\x3a\x30\xc0\x4a\x2e\x64\x22\x5f\xa9\x56\x27\x29\xc7\x34\xee\xf4\x84\x3a\x0a\x53\xfc\x0e\x53\xf6\xdd\xd1\xce\x40\x46\x5f\xd6\x62\xcc\xe6\x9a\x86\x7f\x1d\x6c\xee\xc7\xdd\x6e\x41\xd9\xc9\xb1\xa9\x27\x6f\x09\x9c\x29\x23\xa1\x92\xaf\x61\x8a\x79\x13\xd8\xca\x49\x37\x89\x6d\xc1\x8d\x5f\x60\xe5\x38\x15\xfd\x39\x76\x52\x88\x35\x5a\xb5\xb3\x94\x8c\x6f\x8b\xd4\x74\x2e\x20\x31\xc8\x0e\xbc\xcd\xde\x7d\x33\xfb\xf2\xad\x39\xd7\xc2\x57\xdf\x1c\xfd\x78\xcb\xb9\x60\x95\x54\x28\x4b\x80\xfa\xe1\xe5\xda\xf1\xa4\xe9\x43\x54\x1d\x7f\x7c\x1e\x15\x69\x9b\x73\x83\xc5\xcb\x5a\xb9\x83\x75\x64\xea\xa3\xd1\x4c\x99\xc3\x6c\x5b\xf7\xb6\x95\xac\x58\x8e\x33\x7b\x23\xe0\xe3\xc6\x49\x22\x95\xc2\xeb\x6d\xd8\xf5\x34\xe6\x44\x5f\x8b\xe7\xb7\x6d\xdc\xbd\x6d\x79\xa0\xc1\x89\xed\xcf\x06\xfe\x5c\x59\xf7\x1e\x69\x1d\x9e\x4c\x98\xbb\xe2\x74\x16\xf2\x9d\xd4\x56\x11\x68\x5d\x40\x67\xe3\xca\xe9\xe6\x95\xe0\xa0\x9a\xa0\x0b\xa2\xeb\x89\x8a\x5f\xdd\xcb\xfe\xdd\xab\x9d\xfe\x47\x91\x96\xf3\xa9\x80\xe9\x1d\x10\xfe\x5a\xc0\xc6\x77\xc4\xf6\x78\x41\x74\xa3\xb7\x04\xf4\xaf\x2d\xc5\x87\x76\x5d\x5f\x97\x04\x21\xf0\x37\xfb\x1a\xfa\x54\xba\x62\x07\xed\xcd\x59\xaa\xa6\x16\x25\x9a\x8f\x08\x0a\x09\x91\x52\x65\x77\xb6\x95\x49\x77\x48\x92\xc4\x09\x2f\x47\xcf\x31\xd2\x07\xeb\x07\x1c\x69\x49\x1b\x4d\x1b\x3f\x60\xf7\xa9\x2e\x3a\xb8\xdf\xae\x66\x34\xc9\x9e\xb5\x83\x09\xa3\xd7\x5d\x0d\x5e\xb4\x7d\xe4\xfe\x81\xf0\xd4\xf5\xb1\x06\x36\xd3\x87\x5f\x7a\xb3\x97\x3e\x6c\x62\x90\xa2\x9f\x15\x83\x9e\x2d\xb8\xf8\xed\x9b\xa2\x07\x9b\x17\xaf\x09\x9a\xcf\x3e\xec\x2b\x5b\x2f\xb9\x89\x5d\x62\xa1\x7e\xe8\x01\xc4\xea\x57\x82\xf4\x79\xda\x3b\x7d\xbb\x32\x30\x56\xcc\x0f\xf6\x05\xa4\x09\x25\xa6\x65\xf7\x58\xf5\x3c\x3b\x2f\x64\xb7\x40\x28\x88\x60\xb4\x64\x78\x46\xbb\xf1\xee\x5c\x2a\x2a\xb5\x9a\x8c\xc3\x18\x43\x46\x48\x4e\x03\xfe\x56\xc7\x6d\x95\xb8\x63\x70\x9a\x7f\x29\x64\xdb\x52\xd3\x1b\xba\xe9\xe5\x66\xd3\x79\x91\x4f\x19\x70\x96\x64\xdb\x77\xf0\xf1\x6a\x55\xa4\xa5\x36\x61\x2d\xe6\x8d\x36\x65\x26\xfc\x5e\xfc\x6c\x8b\x7d\xb1\x83\x44\x6d\xc6\xfa\x36\x43\x93\xf4\x9d\xad\x66\x97\x5c\xe4\xea\x6d\xc7\x6c\x34\x15\x70\x46\x37\x5a\xc2\xa7\xb5\xbe\x2a\xab\x14\x48\x93\xa8\xe6\x55\xab\x3d\xce\xe0\xaa\x02\x4f\xdc\x99\xa3\x47\x9f\x39\x02\xbe\x1b\xcc\xca\x01\xc8\x6d\xac\x12\x02\xdf\x93\xf7\x0e\x1d\x89\x52\x2a\x8b\xda\xf0\x03\x51\x39\x0d\x19\x86\x21\xd0\xc2\xa1\x3b\xf0\x3e\x14\x0d\xc2\xf8\x63\xfd\x39\x7c\x79\xc0\x9e\x42\x02\xde\xcc\x9f\x13\x5a\xd8\xe5\x07\x85\xbe\x40\x2f\x2a\x07\xb5\x53\x5b\xd2\x58\x38\xed\x75\xe7\xdf\x05\xec\xd6\xe1\x0f\xea\x44\xcc\x1a\x1d\x6a\x7c\xcc\x71\x5c\xcc\x10\x8e\xa9\x78\x26\x62\x28\x67\xcc\x2f\xa8\xab\x14\x05\x9a\xd8\xf9\x2a\xff\x64\xc0\xbe\x48\x59\x88\x50\x09\x30\x57\xd4\x79\x15\x7e\xc4\x70\xeb\xbf\x27\x80\x2b\x60\x6e\xc7\x72\x95\x9b\x1b\xad\xa5\x71\xd2\x5b\x49\xee\xdf\xae\xaa\x5b\x4b\x50\x96\x8c\xe6\x1f\x6b\x22\x63\x44\x67\x8f\xd7\x8b\x34\x89\x73\xe0\xe8\xea\xac\xc6\x79\x2a\x7b\x26\x22\x9d\x0b\x81\xf5\xe8\x84\x4c\x6d\x6c\x33\xdd\x83\x5c\x6c\x28\xc5\xc8\x41\x09\xf5\x06\xf8\xd7\x7e\x19\xd2\x1f\x04\xd1\x59\x27\x45\xcf\xd1\xac\x9c\x55\x06\xb2\x28\x76\x62\xbd\x76\xf6\x8e\x48\x4b\xec\x57\xc5\x95\xf0\x8e\x84\x67\xb3\x3b\xd8\x6d\xdb\xa2\xa2\xda\x29\x7a\x62\xeb\x95\x3e\xf5\x45\xec\x4e\x9f\x80\xd1\x39\x4c\x6c\x65\x73\xd6\xa5\x33\x0a\x20\x52\x10\x3a\x23\x7c\xd3\x17\x45\xff\x76\xff\xe8\xdf\xb8\xc8\xeb\x1e\x70\xaf\x50\x86\x0a\xe6\x70\xc5\x9d\xca\x40\x6d\xe8\x19\x82\x2a\x44\xa5\x20\xf4\x45\x09\x45\xc3\x14\x4b\x88\xdd\x83\x1e\xb3\x33\xd4\xa9\xed\xc0\x7a\xe8\xd6\x28\xf9\x3c\xcd\x3b\x85\xb2\x66\x2b\x41\xe5\x17\x00\xcd\x94\x9b\x42\x6b\x51\x1e\x91\xdc\x1b\x20\x85\x10\xd0\x45\x38\x40\x65\x00\xb2\x89\x45\x99\xa2\x07\x9f\x3c\x79\xa0\x30\x2a\x75\x94\x92\x48\x37\x19\xb4\x35\x97\x35\xb0\xd5\xc5\x79\x58\x96\x72\xb5\xd8\x98\x5e\x4d\x13\xa1\xfb\x0c\x5c\x34\x55\xc1\x1f\xab\xd3\xce\x5a\x36\xe0\x99\x92\x60\x39\x50\x94\xc1\x7c\x50\x26\x8a\x71\x5d\xa4\xa5\x1b\x54\x02\xd3\x89\x5e\x76\xee\xfc\x12\xbf\xdf\xbe\xd0\x54\x27\x63\x21\x0a\xbc\x1d\x8a\x6a\x1a\x23\x4f\x44\x87\x36\x69\x4c\x9b\xae\x8c\x53\xb5\x01\x95\xd5\x0a\x8d\x25\xa2\x5f\x57\x83\x49\xde\x89\x3b\x10\x52\xe8\x8a\x2a\xed\x89\xe9\x52\xac\x53\x09\xf8\x24\xc5\x24\xca\x52\x74\xaa\x1c\xb2\x7a\x8b\xbc\x23\x4a\xd5\x3f\x9a\x9c\x59\x08\xc1\xe2\xec\xe0\xed\x50\xe6\xe1\x5e\x06\x81\x5e\x69\x1c\xf8\x4e\xc5\x37\x62\x48\xe1\x48\xa0\xa2\x7b\xb3\x4e\x3b\x58\x23\x04\xfc\x30\xca\xc5\xfc\xed\x7b\x36\xda\x9e\x8d\xf6\x39\xb4\xd1\x1e\x72\x6c\xb4\xe7\xee\xd2\x46\x63\xaf\xd4\x78\xe2\x2f\x0b\xd8\xfc\xe6\xe7\xc7\x35\x08\x70\x08\x28\x40\xb8\x9c\xec\x9c\xd1\x5e\x53\x9a\x69\xbe\x2c\xd4\xd7\x25\x31\x28\x92\x36\xfb\x8f\x81\x49\x7c\xfb\x81\x60\x2b\xd8\x8c\xd1\x7d\x1a\xee\x0f\xe2\x7f\x3f\x62\x6d\x8c\x6e\x0a\x8e\x4f\xe0\x73\x71\xe4\x38\x56\xda\x7b\x58\xf9\x8d\x03\x26\x1e\x3a\x56\xda\x57\x83\x7a\x7b\xeb\xea\x42\xb8\xb0\x55\x5e\xf4\x96\xb6\xd6\xe8\x49\x66\xec\x63\xfb\xd8\xf4\x96\x1c\xc7\xc7\xda\x0f\x2e\xcc\x2e\xe2\x25\x4a\x37\xfb\x9e\x7d\xd1\xf3\x9b\x17\x69\xdf\x61\x66\x30\xd1\x69\x3a\xc5\x53\xea\x13\xf2\xaa\xac\x35\xff\x88\x1b\xdd\xd5\xf2\x66\x3d\xce\x6c\x12\xe8\xfe\x75\xa4\xe8\xbd\x45\x1d\x77\x45\x42\x6a\xa1\x27\x40\xff\xfd\x18\xfb\xa6\x80\xe1\x8d\x8e\x79\x83\x91\x16\x0f\x50\x26\xee\x69\x25\x90\x30\x91\x4c\x38\x18\xce\xad\xca\x29\xb2\x24\xc6\x51\x97\x55\x0e\xb0\x25\x34\xd4\xff\x8b\x45\x59\x78\xda\xd9\x2f\x05\xcc\xef\x63\xf8\x13\x46\xfb\x7c\x63\xb0\xe0\xfe\xd2\x28\x3b\xf1\x41\xde\x1d\x92\x32\xdb\x0f\xe3\xa7\xd7\xd3\xd7\xe6\x7e\x8b\x9b\xf6\x11\x99\x9f\x31\x3d\x06\x40\xc7\xb8\x78\xac\x46\x2c\xcd\x99\x67\x1f\x3d\xca\xc7\x8f\x1f\x55\x3a\x77\xc3\x56\xbb\x8f\xd2\x3b\x9f\x1d\x7d\x15\xa4\x77\x3a\xf1\x56\x49\x89\x2b\x95\xc3\x8c\x4b\x93\xe5\x4a\x95\xff\x73\x88\x7d\xc5\x88\x14\x35\x02\x70\xc3\xf4\xb2\x33\xa9\xac\xc2\x5f\x3f\x14\x4d\x38\x7f\xe3\xfa\xf1\x23\x3d\x9d\xb2\xc8\x21\x2b\x6a\x34\x2f\xff\x7b\x0e\xee\x1d\xa0\xbb\x3d\x40\x57\x75\x6a\xc9\xa3\xd1\x97\x63\x0e\x55\xea\xd7\xb2\xe9\x84\x4f\xcf\x4a\x38\xc6\x8e\xb2\xf6\xb6\x69\x89\xde\x37\xdf\x3b\xaa\x77\x71\x54\x7f\xc4\x4d\x45\xf8\x40\x70\x0d\xbc\x52\x4e\x4d\x40\x2a\xd1\x9d\xfa\xaf\x8d\x3b\x15\x81\x8b\x9f\x7c\xd0\x81\xaf\xdd\xfe\xa8\x7b\x76\x78\xc7\x56\x47\x1d\x2c\x31\x0b\x45\x60\xc5\x08\x63\xdf\xec\xa7\x9b\xeb\xa4\x85\x73\x45\x22\x66\xbb\x30\x67\x83\xf0\x53\x87\xa3\xbb\xd5\x05\x1e\xd3\x15\x5c\x8a\xd0\x38\x3a\x50\xdc\xdf\x1c\xfa\x54\x80\xe9\xf4\x1d\x85\xaf\x39\xcc\xfe\xd3\x18\x33\x6c\x54\x27\xc1\x26\x5b\x34\x8f\xcc\x03\x81\x0c\x5d\x3e\xa5\x73\x4c\xc3\xbf\x6b\xb1\xa9\x6d\x13\x2d\x54\x17\x0d\x03\xe6\x47\x5a\xe4\x4f\x36\xfd\xf2\x0a\x48\xec\x81\xaa\xfd\x25\xe4\xa7\xa0\x5c\xb7\x1e\x16\x5d\x38\x63\x51\x87\xce\x24\x9d\x35\x89\x97\x4b\x65\xd3\x66\x0b\x9d\x76\xa1\x66\xc4\x78\xb4\xaf\xad\x07\x1d\x00\x7c\x42\x50\x24\xdd\x8b\xa2\x27\x30\xdf\x41\xdb\xb0\xaa\x0b\x36\xbd\x1f\x50\xaa\x78\x52\x0b\x2a\x19\xc2\xcd\x38\x41\xac\x9a\x08\x62\xa0\xf6\x3a\x14\x3c\x61\x72\x55\x55\x82\x61\x26\xd4\x8a\xc3\xd4\x7f\xb1\x9e\x52\x42\x9e\x6a\x1c\x64\x81\xda\xef\x30\x12\xf6\xc9\xfd\x6c\xda\x00\x6f\xee\xf0\x9b\xbd\x7d\x7f\xf4\xc9\x7d\x6e\x26\x34\x01\x1f\xf6\x0d\xbe\x97\x49\x91\xd6\x24\xe2\xc8\x4c\x8a\xbe\xbe\xb8\x4a\x25\x9d\x9f\x66\x02\x85\x53\x3d\xb4\xc9\xfc\x61\xec\x33\x45\xc4\xa6\xce\x6a\x51\x00\x3a\x12\xac\x50\x68\x17\xf1\xb7\x84\xc4\x12\x8e\x12\x83\xdc\xba\x6c\xde\x36\x4f\x5c\xba\xe6\x31\x60\x2d\x96\x95\x83\x3e\x4a\x82\x5f\x35\x63\xb0\xf5\x50\xad\x90\x4a\x5a\x42\xdd\xe0\x86\x48\x57\x56\x2b\x89\x78\x56\x08\xed\x14\x13\x01\x2b\x65\x64\x08\x51\x51\xa1\x9a\x26\xd1\xb7\x9b\xc7\x5d\x2d\xe3\x46\xa8\x93\x00\x9e\xe4\x9b\x6d\xa1\x91\xd3\x35\xc9\x45\xd5\x69\x4f\x4c\x02\x12\x4f\x0d\x7c\x6f\xaa\x8f\x40\x08\xaa\x11\x32\xaa\xd5\xb2\xa8\x57\x70\x24\x94\x1a\x2c\xcd\xb1\x4f\xdb\x23\x4f\x20\x2a\x9e\xaf\xf0\x08\x07\x17\x19\xd0\x86\xba\xa7\x43\xde\x30\x3e\x5d\x5a\x57\x0d\xd3\xda\x37\x0a\xc1\xee\x36\x0f\x8d\xcb\x09\x3b\x99\xab\xe9\xca\xaa\x9e\x4b\xed\x57\xf0\xbf\x81\x77\xc8\xde\xc3\x4e\xb0\x67\x6f\x9f\x8c\xa5\x9f\xb5\xf3\xb5\x24\xca\x1e\xfb\xc3\x16\xfb\x2a\xe7\xf6\x6e\x56\x6c\x90\x37\xd3\x9c\xcc\x90\x95\x4a\x36\x41\xf8\xbe\x56\xf4\x5c\xf7\x02\x19\x5d\x58\xae\x04\x56\x8e\xb5\xbe\xd4\x77\x47\x99\xad\xe4\x2f\xa7\xd8\x94\xd2\xdd\xf3\x26\x61\xf4\xa7\x03\xf6\x7b\x3a\x23\xf1\x37\x82\xe8\x17\x03\x37\x73\x14\xac\x20\x14\xba\x96\x5f\x50\xa0\xfb\x29\x7a\x56\xe4\xa4\x1b\x21\xae\x2d\xdd\x0c\x07\xbe\x70\xcf\xa8\xd5\x7a\xb9\xdd\x29\x7a\x4e\x1e\xe3\xb4\xc1\x75\x9b\x5e\xce\x8a\xe5\xe9\x5e\x2c\x2b\x51\x4e\xf7\xd7\x56\xa6\x95\x99\xa4\x8e\x25\xf4\x13\x4d\xab\x76\xe1\x3f\xed\x95\x02\x4b\x0a\x80\x80\x49\x64\xd9\x14\x22\xc7\x62\x07\xc1\xdd\x67\xe1\x32\x3d\x9d\xf7\x1d\xcc\x4b\x13\xdb\x01\x97\x3e\x68\xc0\x7f\x71\x38\x3a\x35\xfa\xa7\x51\xca\xf0\xa6\x34\xb9\x9b\x68\xc7\x3f\x78\x68\x4f\xe5\xda\x85\xca\xf5\x4b\xae\xca\xf5\xd3\xbb\x54\xb9\xfe\xd5\x68\x95\xeb\xc9\xd2\xb8\xf6\xcc\xa4\xdd\x9a\x49\xbf\x11\x68\x3b\xe9\xa3\x41\x74\x74\x7e\xa4\xa1\xb4\xf9\xfe\x74\xa5\xfa\x7d\xec\x5e\x76\xcf\xa6\x52\x7d\x07\xa2\xe3\x6a\x70\x84\x7d\xd9\x70\x9d\x7d\x2f\xee\x4f\xad\x89\x81\x0c\x0f\x87\x07\xa7\x40\x5a\xb1\xab\x01\xdf\xb4\x22\xff\x40\xb8\xaf\x17\xf7\xd9\xd5\xa0\xbf\xbd\x2e\x7e\x36\x7c\xe8\xda\x19\x48\x41\x19\x1f\xc9\x42\xfa\xe6\x9b\xd8\xc3\xd7\x8b\x93\xdc\x80\x80\x3f\x69\x66\x31\xfc\x15\x16\xbd\x26\xd8\xec\x57\x1f\x5a\xc8\xc7\x11\xb3\x61\x11\x0d\xd4\x42\x51\x19\xc7\x7d\xcf\xf9\xbc\xd2\x1c\xd5\xd1\x75\xf6\xe2\xe2\x12\xd5\x84\x40\x4e\x2b\x1c\x8a\xfc\x9e\x36\x04\x49\xd5\x1d\xf7\xb6\xe9\x0f\x98\xb1\x7b\x47\xba\xfe\xdf\xb9\xe7\xfa\xdf\x73\xfd\xff\x43\x71\xfd\xbf\x4d\xbb\xfe\xbf\x3f\x60\x9d\x1b\x03\x87\xbe\xe9\x36\xc7\xa0\x80\x1c\x5d\x22\x0e\x1a\xe2\x46\xac\x83\xe2\x16\x59\x5f\x19\x91\xfd\xbe\x88\x4b\xf6\x1e\x1b\x14\x78\x7b\xc0\xc4\x13\xdd\x5b\x0c\x19\xcc\x8e\xe4\xcf\xc5\x12\x75\x8b\x8e\x00\x95\x48\x9b\x34\x74\x35\x28\xb7\x17\xd3\xe7\xc3\xb3\x0e\x49\x9f\xdb\xc5\xa6\xb0\xde\xe4\x2d\xcd\x1c\xac\xdf\xb9\x89\x1d\xdf\x22\x50\xe2\xc6\x6d\xdc\x98\x69\xf8\xa6\x9b\xa2\xbf\x0a\x36\xf9\x91\x77\x56\x45\x67\x4d\x9a\xf2\x47\x43\x0b\xb1\x49\xb8\x3d\xce\x29\x6a\xd2\xe6\xfc\x5c\x01\x28\x86\x19\x01\xfc\x61\x10\xa1\x6d\x33\xf3\x7a\x22\xce\x25\x8f\x52\xc4\x7a\x36\xd7\x65\xd4\xe6\x10\xfe\x20\xf9\xa0\xcc\xec\x38\xe3\x9d\x58\x8a\x49\xbe\x2c\x3a\x71\x2d\x71\xed\x18\x59\x19\x67\x1b\xf1\x40\x42\xe9\xe3\x72\x06\x3e\x08\xe8\xb5\x5b\xb3\x39\x18\xdd\xcb\x51\xc2\xfe\x07\xf6\x84\xfd\x9e\xb0\xff\x87\x22\xec\xdf\xae\x85\xfd\x0f\x04\xec\xd4\x8e\x63\xaa\x9b\x89\x0a\x10\xe7\x5f\x7d\xdd\x31\x5e\x8e\xf2\x42\x2d\x5a\x74\x0c\x98\x70\x18\xc0\x28\xb1\xb7\x58\x69\xff\xfa\x80\xcd\x5d\x43\x77\x47\x74\x15\x65\xf9\xc5\x6b\x0d\xff\xba\x75\xde\x7a\x1c\xa9\xe5\xb1\x29\x4a\x9e\x17\xd5\xd5\xe0\xb1\xed\xe5\xfb\xb9\xf0\xcc\xd4\xb5\x86\x7a\xdd\x11\x34\xc5\xfb\x6f\x1d\x62\xcf\xde\x69\x1c\xbc\xf9\xd1\xc2\x37\x1c\x8a\xde\x18\x6c\xf2\x23\x6e\x4d\x3c\x9f\xfb\x95\x43\xc7\x10\xc3\x8d\x7a\x1a\xda\xbc\x49\xb2\xa0\x8f\xa4\x59\xb7\x2b\xb3\x15\xee\x05\x81\xd5\x16\xe7\x8a\x7c\xbb\xdb\x0c\x31\x83\xa8\x3c\x41\xfc\x87\x07\x60\xf9\xaa\x35\x13\xfe\x40\x10\x7d\x67\x70\x51\x5a\x9c\x5f\x58\x49\x83\xa2\x3e\x52\x0a\xae\x44\x23\x11\x30\x82\xcf\x1b\xd8\x28\x28\xfc\x19\xa9\x87\x22\x93\xdc\x19\x81\xcf\x2c\x22\xda\x8a\x14\xcb\x83\x95\x50\xed\x97\x82\xa0\x23\xa2\xe7\x83\xbf\xb5\xcb\xe1\x75\x1b\x42\x17\x9f\xf3\x9e\x30\xf9\x91\xf9\x80\x56\xb0\xbb\x71\x7f\x3e\x60\xfb\xa1\xa0\x26\x7c\x7f\x10\xbd\x32\xd0\xa0\xbb\xda\xf3\x68\x64\x39\x38\xaf\xe6\xf3\x6e\xd1\x7e\x40\x54\x70\xd7\xf8\x04\xef\x89\x6a\xb5\x48\xac\x14\x73\xbc\x5e\x6a\x54\x7c\x31\xcd\x1d\x24\xe5\x34\xef\xd7\x95\x6e\x2f\xb6\x09\xe9\x26\x7b\x11\xe8\x41\xb4\x37\x0a\x8a\x23\xdf\x1e\x3c\x8d\x7d\xd9\xe6\x44\x48\x2e\x82\xd6\x59\xb6\x1f\x46\x17\x9e\x8c\xc6\x1f\xc0\x8d\x4a\xb3\x4e\xdb\x76\xc4\xbc\x6f\x41\xb1\xf4\xae\x80\x7d\x49\xee\x2c\x03\xf3\xe5\xc3\xef\x0a\xd8\xc9\x6b\x4c\xf4\x38\x37\xaa\xa1\xe8\xec\xc8\xcb\x8e\xce\xd9\x74\x87\xc6\x90\x74\x6b\xce\x1a\x7f\xa5\xab\x1e\x87\xe5\x70\x77\x5f\x1b\xb0\xd9\x6b\xec\xee\x88\xbe\x2e\x6e\xb7\x1f\xb6\xea\xf5\x66\x3d\xbe\x97\x8d\xd5\x69\x12\xde\x19\x3d\xeb\xe2\xfc\xc9\xad\xc5\xb2\xfa\x62\xb0\x04\x3d\xd6\x9a\x83\xcd\xcc\x4d\x9b\x56\x32\xd3\x7e\x50\x75\xb3\xc8\xab\x38\x5b\x28\x92\x59\xfa\x0d\x99\x9f\x6b\x19\xfe\xca\x81\x68\xca\xcd\x50\xad\x29\x85\x75\xd5\x3c\x05\x11\x9d\xd8\x3c\x77\x25\x78\x0a\xdd\xaf\x73\x91\xaf\x04\x4f\xa1\x34\x66\x7d\xc5\x93\x04\x7f\xba\x9f\xfd\x5e\xc0\x9e\x4e\x0f\xcd\x2d\x5c\xbc\x58\xa5\x19\x4d\xdc\x82\x28\x3b\x4a\xcb\x5a\x11\xe1\x4f\x99\x44\x8e\x1f\x0a\x74\x87\xe2\x75\x51\xc6\x2b\x82\xcf\x2d\x5c\xe4\xb5\x7d\x8a\xe0\x00\x01\x20\x35\x91\x93\x56\xc1\xd0\x35\x89\x7d\xd3\x2c\x66\xf3\xc3\xd4\x89\x44\xb5\x43\x45\x87\x77\x1e\x25\x0d\x16\x33\xc9\x73\xf3\x2a\x35\xd8\x54\x23\xa4\xe4\xc5\x06\xbf\xf3\xe8\x33\x55\x23\x8e\x02\x82\x0d\xf9\xb9\x1c\x5d\xd6\x9c\x95\x70\x51\x8f\xe7\x5e\x53\xd7\xe2\x14\x18\xe0\x4d\x26\x69\x1e\xa1\x4e\x6c\x34\xca\xce\xf7\xd0\x7b\x1a\x73\xed\xbc\x47\x27\x93\xdf\x80\xf7\x7c\x22\x60\xb7\x64\xb1\xac\x16\xd5\x6f\x00\xfd\xf6\x0b\xc1\xf5\x63\xbf\x7d\x7b\x90\x79\xe0\x6f\x9b\x2c\x49\x48\x75\x11\x08\xdb\xe1\x17\x15\xdc\x6d\xb2\x5a\x49\x66\xea\x27\x90\x61\xb0\x2a\x8b\x0c\x2c\xd3\xa2\x5b\x89\x7c\xc4\xf3\x50\xe6\x8e\xd5\xed\x6d\xf6\xf5\x23\x4b\x4d\x1e\xd4\xa5\x26\xc7\x9d\x52\x96\xcd\x4b\x4e\xb6\x98\xbb\xbf\x3f\xec\x41\xfa\x19\x2c\x20\xd1\x5f\x3d\xbd\xe8\x01\x01\xfd\xfa\xe1\xe8\x15\x81\x87\x00\xab\x6e\xe2\x0e\x80\x3d\xe6\x52\xc1\x22\x55\x53\xa8\xbd\xa0\x98\x81\x8b\x3b\x55\xad\x58\xf5\x58\x57\x1a\x28\x9d\xa4\x80\x53\x6f\x4b\x44\x9d\xa2\x1c\x05\xa8\x73\x25\x38\xd4\x2b\xf2\x54\x29\xc3\xde\x26\x7e\xc7\x21\xf6\xe6\x80\x99\xdf\xc2\xef\x09\xa2\x6f\xd4\xe1\x99\x13\xfc\x2c\x5d\x1e\x19\x4a\x51\x23\xd2\xcf\x8d\xd2\xca\xa9\x5e\x59\x1a\x1a\x5b\x1c\xc4\x74\x07\xc6\x34\x7d\xe1\xd4\xec\xc9\xb3\xa7\x94\xca\xbd\x5a\x6c\x4c\x55\xc5\x54\x2d\xc5\x54\x5a\x6d\x71\x64\x09\xb6\xaf\x1f\x57\xab\xe1\x0b\xa3\x05\x0b\xcf\x73\x51\x0a\x03\x6b\xd4\x23\xa8\xa9\xb2\x28\xaa\x49\x5e\xc6\xa4\x33\xc6\xe4\x65\xac\xb3\x0c\x7b\x5d\x95\x42\x4c\x1a\x4c\xff\x54\xf2\xe9\x06\x61\x89\x85\xd7\xff\xd9\x20\xfa\xd1\xe0\xc9\x02\xd8\xbf\x91\xb3\xe8\xe0\x1c\x7d\x20\xd0\xa4\xd3\x6a\x01\x86\xef\x0a\xa2\x1f\x08\x9a\xa0\xfb\xea\x17\xad\x4f\x68\x76\xa2\x35\x31\xe0\xa5\xe6\xd0\x56\x7a\x97\x3f\x67\xa2\xea\x40\x2f\x30\xee\x47\xa0\xf8\x37\x70\x04\xf6\x8b\xfc\x8f\xc0\xe5\x1a\xf8\xdd\xe0\x7a\xb9\x06\x7e\x70\x68\xd8\x9b\x71\x0d\xf8\xe1\x4d\x8d\xf8\x3f\x72\x1e\xc0\x4a\xba\x81\x9f\x8e\xbd\x56\xab\xd7\xaf\x0c\xa2\x7f\x13\x78\x2b\xdd\x28\xda\x65\x9c\x14\x12\xd5\xed\x3c\xee\xf9\x8b\x39\x4e\x7a\x69\xfe\xc4\x7c\x88\x9f\xbc\xc5\x93\x80\x9b\xd7\xdc\x87\xaf\xba\x25\xfa\xa6\x16\xfd\x31\x4a\x7a\x94\x96\x46\x1b\x59\xc9\xd3\x7c\xb9\xa8\x11\x00\x89\xc8\x09\x09\xc6\x2d\xa6\x5c\x4e\x0b\xd5\xac\xe1\xd6\x81\x63\x9b\xd0\x2a\x00\xf7\x57\xbf\x8f\x30\xa1\x74\x75\x3e\xa6\x5e\xae\xa4\xeb\x86\x8d\x4f\x9a\x22\x8a\x6c\x30\x05\xaf\x00\x1f\x55\x5d\x66\x72\x12\x98\xe2\x39\x51\xc5\x6b\x86\xf5\x49\x87\x78\x7d\x71\xf1\xcc\x24\x2f\xba\x5d\x9a\x7b\x62\x47\x59\x4f\x4b\x70\x45\xae\x16\xa8\xcc\x89\xaa\xe3\xa7\x38\xbd\x96\xb1\xdf\xb7\xa6\xf4\x6f\x06\xec\xae\xeb\xc0\x32\x20\x03\xfa\x4a\xe0\x17\x69\x7a\xa5\x48\xda\x50\xd4\xf0\x17\x4f\xb4\xc7\x44\x19\x75\x53\x71\x9e\x4c\xe1\xd0\xf6\xfc\x74\x7b\x7e\xba\x3d\x82\xa9\x1b\x9a\x79\xf0\xbb\xda\x5f\xf8\x6b\x5b\xe8\xea\x5b\x49\x8d\xbe\xe8\x44\xaf\x0d\xb4\x5b\xc9\xad\x4f\xfd\x7c\x90\x18\x57\x83\xce\xf6\x8e\xbb\xfb\xc2\x7b\xb7\xca\x65\x75\x06\xdf\x70\xe4\xd1\xa0\x18\xfb\x8e\xc6\xe1\x55\x24\x4e\x8a\xc0\x85\x3a\x57\x9a\x37\x60\xc5\x84\x9f\xb9\x39\xfa\xcd\x31\xf7\x8a\x11\x5a\xb1\x05\x18\xa2\xda\x08\x51\xf2\x12\xef\x74\xb8\xa6\x7c\x42\x52\xcc\x1a\xf4\xda\x73\x4a\x02\x12\x81\x47\x8b\xae\xa7\x18\x6e\xd7\xb9\x19\xf8\x36\xb3\xcc\xde\x44\xa0\x27\xfd\x22\x69\x7b\x6f\x20\xaa\x8b\x71\x83\xed\x3b\xa1\x6c\x04\xcc\xe9\xf4\xce\x4f\xcd\x10\xa9\xc9\x13\x2d\x1d\x58\x39\x49\x18\xc0\x06\xec\x90\x86\xb5\x50\x24\x6a\x29\xe1\xb0\x1e\xaa\x97\x45\x26\x2a\xd4\xa2\x64\xbf\xc8\x91\xfb\xb2\x0b\x68\xed\xb2\xc8\xd6\x8d\x7c\x72\x7a\x07\x98\x7a\x56\xe9\x22\x78\x2b\x5d\xf3\x4d\xd9\xa6\x6d\x0e\xb0\x47\x90\x8a\x49\x80\xdf\x3e\x4c\xae\xb3\x24\x45\xbe\xaa\x8e\x6b\x48\x4e\x9c\x5e\x13\x7d\x09\xeb\x50\x7d\xe2\x69\x9a\xc5\x29\x44\x66\xea\x25\xa3\xa2\x4b\xaf\xd8\x4b\xf3\xda\x8d\xd0\x7d\x8f\x2b\x74\xdf\xba\x6b\xa1\xbb\xf2\x64\xc9\xd5\x5f\xd7\x72\xf5\xa3\x5b\xca\xd5\x4d\x05\x05\xc8\xd5\x57\x05\x8b\x1e\x54\x1f\xc9\x52\x6f\xbb\xef\x69\x60\x5f\x50\x1a\xd8\xce\x0f\x24\x82\x60\x71\xbe\xf5\xc8\x74\x2d\x7b\x4c\xa9\xb5\x44\x07\x14\x7b\xdf\x2d\x1e\x3c\x0b\x41\xc5\x90\x8b\xda\x85\xf6\xba\x25\x7a\xeb\xd8\x1e\xb4\xd7\x75\x41\x7b\x39\xdc\xbf\x9a\xe3\xf7\x4e\xf5\x8f\x6e\xbc\x5e\xa0\x27\x75\x33\x80\x9d\xe9\xf5\x19\xb7\x0b\x93\x16\x07\x34\x2f\x78\x56\xe4\x2b\x08\x5b\x42\xbe\x43\x6c\xfb\xd8\xb1\xcd\xb0\xc4\x7e\xfb\x10\xfb\x36\x17\x81\xe8\x1b\x6f\x20\x02\xd1\x0c\x9b\xde\xa2\x0e\xc6\x5b\x56\xf4\xce\x3d\x09\xb1\x67\xa3\xfd\x63\xc0\x35\xfb\x7f\x1c\x5c\xb3\x4f\x04\x3b\xdd\x24\x5f\x70\xe0\x66\x57\x83\x62\xfb\xf3\xea\x4c\xf8\xbc\x1b\x81\x2a\x86\x76\x17\x7b\x03\x63\x5f\x77\xbd\xa9\x7e\x54\xd2\xea\x25\xd0\xcd\x15\x59\xdd\xcb\x9d\x54\xe4\xf7\x1f\x8e\x1e\xda\xfa\x16\xa7\x10\x1c\xbc\x8b\x75\x0f\xe3\xb1\x94\x41\x22\xd3\x44\xf0\x7e\x89\x70\xc0\xba\xac\xc6\x54\xc6\x1f\x7a\xde\xe2\xf9\x73\x0b\x71\xb5\xea\x49\xe9\x5f\x38\xc4\xde\x15\x50\xf5\xf6\x9b\x83\xe8\xb5\x41\x45\xf5\xdb\x71\xce\xcf\xf7\x45\x3e\xbb\x30\x8f\x3c\x87\x76\x19\x59\x06\x63\xec\xc2\xa6\x65\x35\xe7\x67\xe7\xa7\xa9\x8d\x29\x4f\x63\xf4\x6a\x6b\x68\xa6\xe5\xf4\xb1\xf6\x51\xb5\x85\xd4\x3a\x9e\x42\xea\x42\xc0\x91\x45\x3b\xc8\x8b\x12\xbf\x3d\x60\x66\x34\xe1\x1b\x82\xe8\x95\x81\xfe\x4b\xc3\x09\xf4\xfa\x99\x40\x26\x00\x70\xed\x8f\x43\xdd\x19\xf2\xb9\x00\xd5\x97\x86\xce\x9e\xb0\x25\xfd\x26\x3f\xc8\xa2\x14\xc7\xca\x38\x6d\xc0\xa2\x36\x48\x5c\x51\xec\x35\x67\xc4\xed\xec\xf3\xd9\x4d\x4e\x4e\x4b\xf8\x60\x74\xb7\x9b\xe2\x02\xfd\x6d\xd0\x3f\x0d\xa5\xc0\x8c\x6e\xf8\x27\x5a\xec\x00\x6a\x17\xe1\x0f\xb7\xa2\xef\x6b\x51\x4e\x39\x7e\x3b\x83\xbe\xba\xe3\x8f\xa8\x4c\xdb\x23\x6a\xc5\x1c\xe1\x4e\x4b\x70\xfe\x5a\xf2\xde\x32\xed\xc5\xe5\x80\xa7\x89\x92\x79\xdd\x54\x94\x7a\x19\x56\x05\x8f\xa5\x84\x1a\xa4\x9c\x24\xb4\xd4\xb7\x0d\x10\x86\x17\xee\x4b\xfd\x24\x5b\x22\x28\x7d\xb2\x17\xd0\xfd\x54\x5a\x76\x22\x9a\xd2\x85\x65\x43\x5f\xc1\x83\xda\x1a\x31\xfd\xaf\x68\xb1\x43\xfd\x32\x2d\xca\xb4\x1a\x84\xdf\x64\x40\xe9\xfe\x28\xd0\x17\xe9\x4b\x50\x2c\x95\xe6\x9e\x8e\x45\x03\xf4\x9f\xf6\xfa\x45\x59\x81\xe3\xdd\xff\xd4\x50\xa0\x18\x93\x27\x1f\x90\xda\x65\x9b\x9f\x29\x36\x44\x49\x01\x61\xa9\x91\x94\xd5\xb6\x57\xf7\x41\x9d\x60\xc9\xf5\xeb\xdb\x1c\xc5\x87\xc1\xbc\x06\x3c\xa9\x82\x60\x2b\xd2\x9c\x67\x69\x2f\x55\xff\x44\x11\x2e\x3b\x22\x8f\xcb\xb4\x70\xf1\x91\x51\xfb\x8c\x4d\x93\x3e\x5c\xc4\x51\x3f\x56\xfc\x6d\x37\xb1\x99\x6b\x4e\xdd\x08\x1f\x67\xd1\x94\x8f\x29\xbc\x75\xce\x86\x1f\x61\x78\xfb\xe1\x3d\xbd\x6e\x4f\xaf\xfb\xdc\xe9\x75\xbf\xe2\xba\x81\x3e\xb4\x6b\x37\xd0\xbf\x69\xfa\xde\x3f\x07\x9e\xf7\x4f\x68\x0f\xd1\xaf\x6c\x93\xfa\xba\x93\xc4\xac\xbe\xe8\x44\xff\x36\x58\x16\xab\xf1\x7a\x5a\xd4\x98\xb3\x68\xb7\xf2\x93\xec\x24\x6a\xb3\x7f\x69\x82\x91\xe5\xd6\x59\xc8\x3b\x4e\x3a\x8b\x26\xb4\x32\x3c\x3a\xd7\xcd\x19\xed\x75\x51\xd8\x7a\x28\x4d\xba\x57\x46\x65\xdd\xa4\x6b\x8c\xfd\xe1\x01\x76\xcf\x36\xe8\x4c\x73\xda\x9f\xae\x95\xcd\xb3\xa2\x2a\xd3\x0e\xa5\xf3\xbc\xf5\x40\xf4\xf8\xd8\x96\xb7\x38\xb9\xca\xc4\x1b\x08\x2f\xe7\x6a\xf8\x56\x30\xf4\xe0\x09\x8e\x15\xd1\x55\x01\xbe\x73\x1c\xfd\x24\x8f\x5d\xec\x82\x34\xb7\x1b\x1e\x20\x88\xd4\xe1\x24\x27\x75\x12\x22\xc4\x97\x91\xe8\x3c\x69\x9a\x21\xf8\x5e\x62\x13\x43\x08\x88\xb9\x85\x8b\x80\x69\x20\x7a\x45\x39\x98\x68\x73\x50\x6e\x88\x02\x4a\x33\x53\x50\x9a\x9c\x3a\x5f\x57\x04\x41\xb2\x82\x53\x1e\xd3\xc5\xdd\xe3\xb7\x32\x6c\x65\x6d\xce\x17\xeb\xce\x2a\x8d\x0b\x8f\xe0\xe5\x3a\xcd\xd0\x11\xd3\x18\x5f\x9e\xa0\xab\x46\x97\x8e\x68\xf8\x23\x4d\x00\x55\xa8\x47\xfa\x78\x0a\x01\x3c\x83\xc1\xe1\x04\x08\x88\xb2\xa7\x4e\x3f\x51\x4e\xa9\x31\xeb\x17\x5a\xbe\xb3\xa8\x5f\x24\x32\xe2\x38\xd1\x6d\xce\x21\xcf\xa6\xc8\x05\x8f\xb0\xab\x11\xaa\x7c\x0e\xdb\x81\xa8\xac\x51\x70\x00\x6f\xba\x12\x1c\x36\x81\x15\xef\x64\x7d\x4b\x8b\x2d\x33\xfb\x5b\x78\x31\x7a\xd0\x86\x69\x48\x89\x6b\x12\x45\xd0\x8f\xb9\x0e\x67\x48\x0b\xe6\x80\x03\xc7\x77\x6e\xa3\x88\x35\x5b\x36\x6b\x29\xcd\x39\x26\x8e\x36\x48\x01\xbf\x91\xd1\x60\x42\xb9\x45\x86\xc1\xa8\x3d\x80\xeb\x79\x09\xa7\xeb\x0e\x5a\x41\x0d\x8e\x77\xbc\xe8\xaa\xf9\x5a\x2f\xc2\x4f\xc2\x5e\x7f\x70\x24\x70\xcc\xa9\x7c\xfd\x91\xb8\xa4\xed\xf4\xbf\x0f\x44\xf7\xb8\x17\xfc\xc2\x52\x1a\x9f\x6e\x1d\xdf\x45\xcc\x43\xf0\x90\xaf\xf4\xbc\xe3\x00\x4b\xd9\x53\x3a\x9a\x7d\xea\x21\x31\x50\xc6\xfe\x23\x3b\x48\x11\x9a\x73\x9e\x31\x00\x31\xff\x02\xff\x25\x89\xfe\x0a\xd4\x2f\x73\x63\x9b\x7d\x6f\x8b\x1d\x02\xcc\x0b\xf5\x92\x57\xb7\xb6\x40\x79\xd5\x6f\xc1\x03\xed\xb4\x7a\xc6\xbc\xe4\x37\x03\xfb\x16\x8f\x58\xac\x5f\x24\x27\x74\x18\xd1\xf1\x63\x60\x8a\x8f\xf7\x27\xa8\xa9\x93\xfc\x92\xb9\x88\x40\xd2\x5f\x7b\xe4\x9e\x87\x4e\xbd\xe0\xde\x23\x2f\xbc\xe4\xfe\xe6\x90\x23\xb9\x37\x60\xe5\x57\x91\x88\x73\xd0\x3e\xfc\x49\x09\x32\xb3\x1d\xa0\x6d\xa4\x1f\xf0\xc0\x58\x2d\x64\x35\xbf\x60\xfe\xec\x17\x49\xf3\x2f\xd9\x66\x6f\x6a\xb1\xa7\xea\x35\x7a\x5a\x4f\xd4\x2b\x5b\xec\x8e\x6d\x27\xea\x82\xfb\x94\x99\xaa\x5f\x73\xa6\xca\xac\xfd\xe6\x2e\x3b\x81\x9e\x60\x5b\xab\x88\xf2\x92\xc2\x97\x24\x47\xc7\xf1\x62\xbb\xd3\xaf\x27\xe9\x86\x36\x8a\x44\xf3\xa7\xd0\xcc\x56\x53\x54\xa1\x3d\x69\x1e\xc7\xc7\xcc\x5f\xf8\xa0\xf7\x82\xe1\xa7\x27\xd0\x26\x31\xec\xaa\x26\x3e\xdc\x66\xeb\xec\x66\xcc\x29\xa3\xf5\xda\x65\xc7\xb6\x9d\xa0\x45\xfd\x80\x99\x9c\xa3\x23\x16\x2b\xa5\xaa\x59\xb9\x73\x44\x5a\x8f\x13\xfb\x9b\x43\x6c\xd2\x69\x9a\xa0\xe7\xd6\x67\xda\x0b\x45\x72\x32\x95\x65\x0d\xc2\xf8\xfe\x3a\x59\x11\x15\x94\xa8\xfc\xe2\xa1\xe8\xfe\x4d\x7e\x1b\x59\xa1\x12\xf3\x11\x77\xfb\x3b\xf6\x2f\x0f\xb2\xf7\xb4\xd8\x21\x0d\x74\x1e\xbe\xb5\xc5\xee\xdb\x2d\x3d\x77\xf4\xe3\xc1\x99\x26\xad\x3c\xc8\x5c\x64\xda\x03\x14\x23\x43\x14\xef\xe5\x4a\x0b\x9e\x98\xde\xf2\x65\xec\xae\xa6\x85\x37\xbc\xe3\x70\x4a\x22\x8a\x4a\x5e\x50\x72\xfa\xc6\x6a\x9a\x01\xad\x23\xb2\xcd\x8f\x7f\xc3\x37\x4e\x34\x1e\xc0\xbf\x4c\x3e\xbb\xcb\xa0\x68\x7d\x80\x57\x83\x89\xad\x81\x9c\x59\x78\x88\x68\x78\x19\xfb\x6c\x8b\x7d\x51\x2f\xbe\x7c\xd1\x02\xbb\x87\xbf\xdb\xda\xa9\x9e\x5d\x57\x69\xd6\x4e\xf3\x4a\x56\x65\x7b\x3e\xaf\xce\x97\x8b\x70\x62\x44\xaf\x6b\xcd\xe6\x66\x86\xdc\xb2\xaa\xb4\xcb\x95\xa9\x5c\xc8\x8a\x47\xfe\x5b\x23\x1c\x10\x0e\x10\x67\x32\xd2\x63\x8f\x60\x8e\x5d\xec\x79\x4b\x6a\xa5\xdf\x42\xd0\x47\x42\x1d\x1c\xa9\xd2\x10\xa5\xc8\xed\xbe\x86\xbb\x10\x72\xbd\xc1\x7c\xa4\x0e\x74\x28\x19\x2d\x01\xa2\x0a\xa6\x76\xbd\xc8\xea\xbc\x8a\xcb\x81\xf3\x95\x97\x07\xba\xd4\x48\x1d\xb4\x47\x2d\xb8\x7d\xcc\x7b\xb5\x46\xb6\xba\xdc\xc9\x6a\x89\x49\x81\x98\x8e\x0b\x1e\xb1\xa8\x97\xe6\xb3\x66\x9c\x6d\xf6\x0b\x2d\x76\xb3\x7b\x29\x7c\xef\xae\x27\xfc\x2f\x82\x2d\x27\x1c\xa1\xdc\xfd\x7e\x6c\x39\xdf\xb8\xd8\x2a\xa3\xc9\xed\x78\xde\x41\x27\xdf\x62\xee\xf9\x22\x82\xf9\xd0\xfc\x43\x09\xd7\xb5\x4f\x7f\x34\x73\xf4\xe8\x33\xa3\x36\xfb\xb3\xa7\xb3\xa9\x91\x28\x1d\xe4\x0f\x1e\x42\xbf\x08\x7f\xfa\xe9\xd1\x27\x0f\x8e\x80\x04\x51\x8f\x0a\xe3\x3a\xab\x33\x80\x0e\x51\x6b\x63\x6e\x71\x9e\x3f\x20\x2a\x73\x63\x27\xce\x32\x5c\x42\x3a\x78\xa8\x9b\xca\x62\x29\x27\x35\x24\xbe\x4b\xb4\x3f\xcc\x56\x40\x19\x36\x71\x59\xa5\x9d\x3a\x8b\x4b\xa5\xa6\x16\x59\xb1\x32\xe0\x52\xac\x20\xe2\x3d\xae\x2f\x4a\x3b\x85\x5c\x1d\xa4\x18\x24\x77\x14\x2c\x2e\xc8\x08\xaf\x0a\x9e\xe6\xb2\x8a\xf3\x2a\x8d\x2b\xc0\xac\x1f\x62\xd2\x93\x6d\xc6\x9c\x45\x4f\x5e\x30\x25\x67\x10\x1b\x8b\x03\x53\x9c\x04\x56\xd4\x13\x7c\xca\x1b\x11\x8f\x24\x99\xcc\x11\x5f\x8d\x25\x8f\x66\x8e\x1d\xbf\x8d\x3f\x90\xde\x1f\x39\xe3\x4a\x73\x1e\xe9\x21\xb4\x7d\xd2\xca\x17\x17\xb9\x78\x4e\x2d\xa7\xd4\x0a\x9c\x89\x86\x1a\xcf\x8a\x4e\x9c\x49\x69\x1a\x3f\x3a\xaa\x69\xbf\x45\xa5\x34\x28\x61\xf7\x9c\x35\xa5\x68\x4c\xc5\xcb\x9d\x99\x63\xc7\x23\xa4\x40\xee\x16\x6a\xdd\x13\xc6\x98\x10\x50\x4c\x8e\xb0\x67\x69\x0f\x58\xde\x21\x94\x5b\x38\x1f\x42\x3a\xef\xc2\xd2\xab\x8e\x28\x21\xd4\xdd\x29\x7a\xcb\x69\x0e\x3a\x8e\x9a\x94\xbc\xd0\x3e\x03\x8a\x28\x23\x7f\x71\x9d\x56\x64\x51\xd0\x17\x54\x07\x38\x2d\x44\xca\xec\x02\x65\x7b\x8a\x4b\x65\xd7\x18\xbf\x17\xb5\x82\x61\x76\x50\x3d\x9c\x2e\xd5\xb9\x14\xd5\xb5\x3d\xf2\x62\x51\x16\x38\x07\xe4\x3d\x2f\x69\xff\x49\x1b\xf5\x55\x9f\x3c\x11\x9d\x34\xd1\x89\x61\x71\xbf\x5f\x16\x31\xba\xe7\x21\x29\x4a\x0f\x07\x19\xa5\x07\xc6\x03\x5a\xf7\xec\xe1\xa6\xbe\xc6\x94\x85\xda\x23\x28\xb6\x11\x7b\x4a\x6d\x42\xde\x15\x71\x55\x97\x82\xaf\x10\x4d\xa8\xc8\x55\xfb\x50\xb8\x53\x22\x0d\x6b\x0c\x7b\x0c\xe0\xe6\x81\xbb\x57\x22\xa9\xa4\x1e\xdc\x54\xbc\x01\x0c\x21\x16\x76\x0e\x26\x7e\x6e\x71\xfe\x24\x3c\xd2\x6e\xbc\xb6\x7d\x25\x78\xaa\x74\xd6\xd8\xb9\x26\xf4\xd9\x47\xbf\x94\xfd\x5a\x8b\x0d\xdd\x13\x7e\xb0\x15\xfd\x48\x6b\xa9\x61\x1c\x79\xab\x15\x56\x0f\x8a\x08\xca\xca\x33\x5f\xc0\x89\xa3\x1b\x88\xe2\x9e\x10\x95\x4d\x88\xf0\x50\xf6\x62\xdf\x0c\x8b\xfd\xf7\xd0\xe7\x1e\xcf\x8b\x7c\x0a\x54\x81\x49\x7e\xf2\xdc\x22\x97\xf5\x32\x32\xe8\x4d\x50\x98\x2f\xae\xf4\xad\x36\x7f\x40\xaf\x91\x4d\xbe\x09\xdd\x0f\xde\x44\x59\x00\xed\x01\x2c\x58\x63\xc4\x96\xa2\x57\x50\xe5\x52\xaa\x89\x3c\x8b\x72\x67\xe4\x7a\x7b\xae\xe2\x5d\xba\x8a\x3f\x3e\xc6\x0e\xe9\x25\x15\x7e\x78\xec\x1a\xc0\xcd\xda\xba\xbd\xf6\xc3\xb5\x3a\x0a\xaa\x41\xf4\x2d\x63\x73\x8e\x7c\xb0\x86\xaf\x59\xbc\xb4\x9f\x9d\xdd\x07\x09\x3e\xd2\x3d\xef\x2e\x60\x02\xa6\x96\x8d\xde\x2f\x58\x34\x8f\x30\x8a\xae\xf4\xb3\x34\x83\x0e\x7c\x20\x85\xb7\xc4\x7a\x5a\xd4\xb4\x90\x24\xf1\xd6\x4b\xd1\x53\x5d\x06\xed\xdf\x9a\x36\xe3\xaa\x5f\x80\x28\x33\xd3\x3e\x36\x61\x32\x4c\x63\x79\x02\x9c\x4d\xc3\x87\xea\x24\x96\xfc\x83\x6b\x48\xfb\x45\x48\x0e\x43\x37\xdc\xb3\x14\x83\x8c\x98\x95\xaa\x4b\xe1\x60\x53\x41\x2d\x9c\xa8\x26\xa9\x02\xdb\xf1\x39\x7a\x9d\xf3\x74\xd1\x3c\xe1\x15\xf1\xdd\x02\xaf\x38\xc0\x7c\x1b\x62\xa2\x3d\xff\xff\x2e\xfc\xff\xef\xdd\xc7\x6e\xed\xc5\x97\xd3\x5e\xdd\xa3\x6a\xc8\xf4\xc5\x22\xfc\xfe\x7d\xbb\xdb\x19\x9f\x1a\x3b\xdb\x6c\xf3\xf3\x7a\x8b\xa0\xa1\xa1\x77\x80\x04\x84\x00\x67\x77\xdc\xd6\x3e\xaa\x0f\x94\x2c\x2e\x57\x00\xca\x54\x0d\xc9\x0d\x4b\xc2\xaa\x07\xad\x73\x0e\x96\x2a\x8e\x9c\x3a\xd8\xd6\x8b\xf5\xd1\x32\xce\x57\x84\xc1\x4c\x7e\x14\x76\x13\x49\x7d\xcb\x93\x14\x6b\x2a\x76\x83\xa0\x0a\x07\x9c\x33\x26\xe8\x8d\xb2\x92\xd3\x7c\xc4\x7c\x60\x28\xdc\x87\x6a\xc5\x79\x27\x03\xc2\x3a\x79\x01\xec\x2d\x95\x06\x81\xe2\x82\x73\x88\xb6\x2f\xe8\x05\x0c\xe3\xa2\x3e\x75\x80\xbe\x9a\xbd\x61\x9f\x13\x38\x7a\xd5\xbe\xdd\x06\x8e\x7e\x79\x6c\xab\xa2\x0d\xa3\x34\x28\x1d\x56\x59\xf3\x56\xb1\xef\x89\x38\x4f\xf3\x15\x8f\xb7\x40\x59\x54\xfe\x81\xce\xc7\x93\xa2\x32\x46\xdb\x24\x3f\x76\xfb\x71\x87\x06\x77\xa2\xcd\x97\x0a\x2e\x72\x59\x97\xc2\xe8\x20\x4a\x79\x02\xc4\x0a\xa8\x49\xcb\xd2\x8e\xd6\x48\x91\x74\xdc\xae\x58\xa9\x71\xf3\x28\x1d\x7f\x92\x34\x18\xb5\x65\x45\x9e\x18\xe1\x56\x15\x6a\x91\xf0\x8e\x4c\x65\x67\xea\x9e\xba\x4e\x93\x7b\x27\x95\x8d\x83\x55\xcd\x22\xa1\xaa\x40\x42\x27\x50\x0d\x8b\x29\xea\x3d\x8c\x1d\x35\x4a\x91\x93\x57\x02\x11\x30\xf2\xf4\xb1\xda\xdb\x3e\x90\x8e\xc0\xd8\x79\x9d\xcc\x59\x3a\x8e\x8b\xa4\xcd\xd8\x93\x15\x85\x53\x36\xb8\x32\x1f\x96\x68\x57\x2a\x1b\x7c\xf7\x2e\xa3\x3f\x0f\xce\x39\x6d\x1a\x85\x87\xb2\x52\x01\x73\x1a\x02\x16\x04\xea\xa0\x01\x8d\xe9\x94\xb2\x44\x13\x46\xad\xdc\x88\xa5\x11\x46\xcd\xf3\xc9\x3e\x98\x62\x8e\x2e\xb6\x8a\xb5\x12\xea\x00\x88\xf3\x01\x22\x24\x37\x6b\x47\xe6\xbb\x9c\xd4\xca\x46\x2b\x43\x2d\x40\x6a\x6a\x22\xe4\xe6\xfa\xdf\xd5\x60\x6d\xfb\xa8\xdb\x83\xe1\xe9\x6b\x47\xaa\x1c\x99\x24\xf6\xff\xee\x6f\x62\x9f\x0d\x05\x1d\x46\xc6\xdb\xde\xb5\x3f\xfa\xa5\xb1\xbd\x30\xdb\x3f\xd4\x30\x9b\x67\xe0\x7d\x28\xf8\x87\x10\xf6\x7a\xd5\x57\xb0\xa7\x8d\xc2\x15\x2f\x12\x82\x63\xf9\xb3\x67\x44\xef\x0d\xcc\x9f\x6e\xc4\x6b\x74\xa8\xdc\x85\x6c\x01\x5f\x1c\x3d\xa8\x34\x84\xaa\x8c\xd3\x0c\x9d\x55\x0d\xf8\xc3\x98\x70\xfd\x27\xb9\xa0\xef\x9f\x0d\x3c\xf8\x75\x24\xa9\x2c\x34\xe0\x84\xfa\xc8\x94\x74\x0a\xc1\x14\x82\xfa\xd7\xc8\x1b\xfd\x2c\xce\x85\xef\xbc\x7f\x4b\xc4\xbe\x75\x8c\x1d\xc0\x70\x4f\xf8\xb7\xad\xe8\xb3\x01\xfe\x9b\xb2\xd8\xa1\x8c\x70\x81\xc7\x49\x52\x0a\x49\xee\x9c\x02\xd3\xef\x75\xd6\x5c\x91\x90\x45\xec\xca\x28\xb3\x29\x51\xcc\x1d\xad\xd4\xe9\x54\x95\x03\x32\xce\xad\xc6\xa5\x5e\x86\x8f\xb5\xf9\x02\x22\x9f\x80\xce\x64\xdf\xa3\x7d\xd6\x33\xce\x07\x83\x6d\x5c\x74\xf9\xfc\xc2\xfa\x6d\xb0\x47\xe6\x17\xd6\xef\x20\x39\x99\x11\x56\x38\xfa\xf1\x53\x25\xb6\x39\x0c\x48\x6d\x23\x60\x13\xb5\x6d\x0f\x20\x98\x61\x53\xef\x9f\xc5\xc6\xd9\x57\x6e\x0f\x2f\xaf\x3a\x7d\x35\x78\xe6\x36\xdc\x8e\xfb\xc3\xb1\xb4\x7f\x2d\xcc\x8e\xbf\x1d\xb0\xc3\xb2\x8a\xcb\x0a\x80\x5c\x3e\xb6\x0b\x20\x97\x57\x07\x17\x4e\xcf\xf1\xe3\xc7\x8f\xdf\xc5\x93\x98\xdc\x0c\x50\x7b\x18\x57\x0e\x9d\x12\xd9\x34\xea\x9c\x8b\x3b\x4a\xbc\x66\x22\x71\x02\x29\x54\x0a\x68\xbd\xed\x24\xdb\x9c\xdf\x78\xbf\xce\x34\x12\x8c\x13\x24\xef\xc5\x2b\x80\xf2\xaf\xf7\x96\x5a\x23\xec\x3f\xb6\xd8\xad\xe6\x1e\x5c\xfe\x42\x86\xff\xa1\x15\x7d\x3c\x58\xd2\x90\xd1\x4a\x87\x53\xe2\x07\xd7\x4a\x1f\x32\x30\x1b\xa1\xf7\x5e\x9c\xa7\x5d\x50\x64\x4f\xc5\x1d\xbd\xaa\x3c\xfb\x10\x86\x56\x57\xfd\x1a\xfc\xc8\x97\x92\xa2\xb3\x06\x8f\xab\x35\x59\x5d\x1a\x69\x4d\xf9\x4e\xce\xa4\xe8\xc8\x69\x60\x46\xec\x57\x72\x7a\xa3\x28\xd7\xb2\x22\x4e\xe4\xb4\x12\x96\xea\x3f\x53\x59\xda\x15\x9d\x41\x27\x13\xcf\x50\x7f\xc5\x79\x32\x65\xba\x49\xe9\x38\xee\xa2\xba\x8d\x1d\x63\x47\x77\x12\xbe\x76\xa7\x86\x7d\x5b\x8b\x7d\x99\x09\x41\xce\x0d\xcd\xdb\x1f\x05\xd1\x9b\x35\x6a\x00\xd8\x3e\xf9\x80\x9b\xdb\xdd\x7a\x52\xcb\x63\x5b\xd6\x14\x25\x48\x25\xee\x5a\x5f\xad\x80\xda\xa6\xa9\x4c\xa9\x73\x08\xd7\x27\x31\x0c\xdb\x2f\xfa\x75\x16\x93\x41\x26\xc9\xe6\x85\x56\xd1\x9d\x08\xf3\x7d\x6a\xa8\xa7\x52\x7b\x1f\xdb\xbb\x9f\x8b\xbf\x6d\xb1\x2f\x51\xf7\x0f\x4f\xc3\xa7\x5b\xd1\xf7\xb6\xb6\x58\x3e\xea\xa9\xad\xd6\xd0\x92\x4f\x89\xcd\x65\x0d\x5a\x58\xb7\xce\x9a\x8f\x6e\x18\x56\x62\x24\xea\x7d\x0e\x50\x8f\xa1\x78\xf3\x49\xb5\x61\x0b\x8b\x64\xe4\xb3\x66\x7b\xc3\x49\xfa\x05\xb2\x14\xd7\xd8\xc1\x9e\x90\x32\x5e\x11\xe1\xa5\x68\x71\xb6\x99\x4b\x4c\xbf\x69\x65\x4e\xe9\x16\x94\x96\x4c\x07\xe0\xc6\xea\xc0\x1c\x4f\x80\xab\xa7\x53\x81\x89\x26\xd7\x3b\xf9\x2f\xb3\xfd\x70\x28\x84\x45\xb4\x6c\x4f\x9e\x4d\xce\x9d\x0b\x05\x6a\xc2\x36\xce\xe6\x04\x65\x8d\xca\x7d\xca\x9e\x04\xc4\x3c\xad\x1b\xf3\xde\xfc\xd2\x16\x3b\xf4\x58\x21\xb1\x66\xfc\xaf\x82\xe8\x0f\x40\x2e\x3d\x5c\xc7\x19\x38\x6f\xbb\xe0\xf0\x49\x3b\x82\x8f\x3f\x7c\x7e\x71\x02\xe3\x0b\xb6\x4e\x54\xfd\xb1\x92\x7b\xfd\x23\x28\x11\x80\x5a\x77\x78\x5d\x8c\x23\x7a\x51\x40\xf1\xf5\xc3\xe7\x17\xc9\xc5\xad\x74\x2d\xd8\xcc\x46\x89\x7b\xf8\xfc\x22\xbe\x48\x5c\x77\xd5\xa9\xea\xd6\x54\xbf\x2c\xfa\x85\x8c\x33\x39\x8d\x45\xd4\xd4\x9f\xa9\xc7\x0a\x65\x9a\xb9\xb3\xb0\xce\x0e\x20\x95\x6d\x98\x45\x8f\xce\xf2\xe5\x32\x15\x5d\xeb\x8b\xba\xee\x8f\x8d\xac\xca\x08\xea\x76\xe4\x14\x46\x25\x8f\xb8\xef\x7d\x5d\xcb\x23\x74\x7e\x79\x2b\xba\x3c\xa7\x95\x73\x9a\x77\xa3\x17\xc1\xb7\xbf\xd1\x7b\xc7\xbe\x7c\xe7\xc5\x78\x8e\x46\xf0\xc4\x92\x3e\xaf\xb0\x03\x98\xaf\x13\xbe\x30\x5a\x70\xb6\x05\xe9\xd3\xea\x37\xb5\xf0\x5c\xaa\x44\x14\xea\xb4\x2a\x47\x6c\x02\x43\x68\xe5\x6d\x82\x8f\xed\x63\xb7\xe6\x05\xb1\xa4\x9f\xa3\x64\xa2\xf0\xc7\xf7\x45\x6f\xdb\x37\x74\x19\x14\x3d\x51\xe1\x31\x01\x11\x52\x7d\xb6\xf0\x7e\x29\x94\xfe\x25\xc9\x23\x82\xf9\x72\xb9\x51\x5c\x0d\x7f\x93\x2d\x91\xb2\xfc\x5a\x65\xba\xb2\x5a\xf1\x78\x23\x1e\x28\xf3\x8e\x5a\xc2\x52\xd4\x4e\x95\xf6\x24\x48\xda\x14\x89\xd9\xd3\x92\xaf\x94\x71\x47\x28\x81\xad\x21\x7d\xd4\xad\x48\x3e\xe9\x9b\xce\xa6\x9e\x76\xa5\x8e\xcb\x38\xaf\x84\x75\xe8\x58\xb6\xaf\x06\xd3\x17\x8e\x08\x89\xbe\x16\x4d\xd8\x4d\xe9\xa8\x14\xcb\xab\x0a\x0e\xc9\x1c\xa6\x15\x91\x49\x81\xc1\xe1\xb4\x4b\xa3\x47\xe7\xc3\xb2\xe8\x14\x3d\xd7\x40\x93\x45\x91\x2b\xf1\xe4\xb7\x1b\x67\xb2\x70\x1a\x5f\xa1\x81\x3a\xd9\x50\x6e\xaf\xa0\x34\xa5\x59\x1c\x01\xfd\xd0\x28\xa6\x44\x9d\x4f\xd9\x03\x76\x36\xdb\x7c\x96\x92\xb0\xea\xac\x9a\x74\xd5\x77\xd2\xc0\x93\xb4\x0b\x15\x72\x15\x16\x44\x68\x94\x08\x9d\x60\xa6\x3f\xb8\x59\x6a\xa3\xd7\xd3\xcf\x1f\x66\xfb\xfb\xab\xb1\x14\xe1\xfb\x0f\x47\xef\x3c\x0c\x31\x52\xf5\xa7\x49\x2e\x72\x8b\x9a\x26\x61\x24\xa4\x83\xc8\xba\x07\xe5\x38\x45\x57\x07\xdb\x11\xab\x82\xa4\x4a\x5a\x49\x6e\x36\xb0\xf6\x6a\xea\x1d\x8c\x85\x50\xda\xdb\x86\xc4\xdc\x79\x62\x84\x17\xba\x77\xd1\xba\x56\xb7\x28\x61\xb6\x9e\x26\xb5\xab\x39\x69\x93\x0d\x5a\x92\xa6\x06\xdb\x81\xaf\x70\xcc\x3b\xcc\xcb\xa2\xdc\x39\xd5\x17\xf2\x10\x76\xd5\xd7\xeb\x17\xe4\xd6\xc1\x81\xa3\x0b\xe1\x04\x63\x0b\x48\x78\x8e\x21\x15\x35\x89\x4a\x7d\x41\x03\xa5\xa3\x64\x96\xaf\x89\x93\x4f\x56\x1b\x84\x6a\xff\x8c\x20\x37\x6b\x28\xe1\x92\xbc\xa2\x15\xb6\x4b\x6b\x41\x6b\xf4\x79\x27\xab\x81\x8a\x4d\xe9\x23\x9e\xe3\xc2\x6e\x81\x58\x02\xed\x13\x78\x95\x41\x6d\xe9\xab\x15\x91\x14\x1b\xb9\x12\xa6\x80\x7a\x87\x2f\x82\x1c\x2d\xd8\xdf\x08\xdd\x32\x69\xf0\x4f\xea\x2c\xe1\x55\xbc\x26\x78\x8c\x49\x56\x80\x6c\x92\x8f\x1e\x39\x82\x86\xc1\xa2\xce\x2d\xd3\xbb\x65\x4e\x73\x14\x5b\x6b\xcf\x99\x61\xcd\x6a\x2d\x00\x12\x8b\xdc\x8c\x5e\x4c\xa7\x21\x44\x12\x70\xa4\xea\xb3\x09\x62\xf6\x1d\x92\xa5\xa0\x9e\x81\x7b\x05\xe0\x4e\xe8\xaf\x36\x5f\x54\x6a\xa1\x48\x44\x72\x82\xcf\x0e\xc1\xb5\x54\x66\x10\x6a\xab\x6a\x5c\x31\x70\x31\x91\x3a\xe9\x15\x9b\xeb\x82\x50\xd4\x12\xdb\xfc\x34\x70\x89\x5d\x43\xc3\x34\x29\xa3\xc7\xaa\x66\xd2\xef\x43\x37\x4e\x33\xa5\x86\xeb\x2d\x42\x37\x8a\x14\x64\x93\xb8\x0c\x65\x52\xe0\x35\xce\x8b\x7c\x0a\xe2\x67\xda\x5b\x51\x82\x6d\xe8\x34\xa7\x41\xbd\x61\x11\xb6\xf9\xc5\x1c\x9c\x72\x27\x20\x25\x07\x28\xc2\x68\xb3\x69\x97\x87\x70\x32\x61\x69\x25\xd0\x04\x14\xcb\xd0\x8f\x64\x52\x69\x3d\x69\x07\x81\x6c\x0c\xb7\x21\xd4\xc1\x72\xcc\x03\x51\x5a\x0d\x69\x1a\x96\x35\xae\x40\x7e\x21\x63\x5c\x8e\xf2\x5d\xef\x4a\x1b\x80\xbd\xea\x0a\xb2\x8f\x1e\x62\x5f\x3e\xe2\xe4\x77\x00\x1f\xc3\xb7\x1d\x8a\xee\x73\xfe\x76\x32\x91\x62\xc4\xb2\x84\x95\xa5\xe4\xde\x23\x36\x86\x03\xf1\x13\xf3\x59\xac\x73\xed\x30\x3c\x31\x54\xd2\xfa\xe1\x83\xec\x83\x2d\x76\x93\xac\x97\xd5\x4f\xa7\x2e\xf7\x4b\x0c\xf5\x9f\xba\xdc\x8f\xf3\x04\xa8\xa3\xab\x55\x57\x0b\xa6\xd0\x0c\xb8\x94\xad\x7a\x60\x5e\x78\x44\xa3\x91\x3a\x4e\x3e\xc2\xdd\x6c\xf3\xfb\x85\x5a\x7a\x52\x49\xe7\x34\x8b\xcb\x0c\xd8\x24\x17\xf1\xd5\x20\x81\x44\xbe\x9e\x96\x45\x0e\x40\xa5\xeb\x71\x99\xc2\xb9\xe6\x20\x1f\x7c\xc5\xf8\x23\xb3\x17\x1e\x3d\x37\x7b\xf6\x14\x26\xcf\x0a\xdd\x4b\xeb\x82\x74\x7b\xe2\x34\xd7\xf6\xb0\x39\xa3\x88\x8f\x63\x37\x8f\x48\x80\x03\x9d\x68\xeb\x7e\xa8\x29\x80\x0d\xa1\xfb\x05\x29\xa1\x43\x59\x81\xde\xa1\xf4\x18\xb3\xb3\x1b\x26\xd1\xf3\x17\x1a\x73\x66\x77\x89\xe7\x2f\xd9\x7c\xa2\xf8\xd9\x5a\x56\x1e\x56\xc7\x91\x13\x47\xbc\x57\xfe\x7a\xc0\x9e\x8a\xef\x2c\x8b\x7e\xbc\x82\x58\xb6\x3f\x13\x44\x3f\x1a\x34\xaf\x5a\x04\x29\xf4\x8a\xc3\xef\xe8\x25\xee\xd3\x5d\xc2\xc1\x30\xd7\xaa\x9f\xd3\x67\x3a\xd5\x50\xf9\x00\x35\xaa\x54\x62\xb5\xcd\x9f\xaf\x8e\x6c\x13\xc5\x38\xdb\x78\xf1\x39\x25\x49\x08\x9c\xaa\xe9\x1c\x80\x74\xa2\x34\xe7\x33\xed\x99\xa3\xde\xb8\x4e\x90\xb3\xf7\x58\xf4\x4c\x78\xa2\xe1\xdf\x3b\x67\x92\x6c\x70\xc9\x7b\xcf\x56\x0e\x30\xeb\x6a\xf4\x35\x67\x35\xdc\xab\x88\x93\x29\xd0\x29\xd3\x2e\x19\xd9\x70\x09\x40\x59\x71\x54\x1b\xa9\x14\x7c\x1c\x11\x5b\x8b\x92\xd7\xb9\xf1\x37\x4e\xb4\x87\x41\x5d\xdb\x1e\x7c\xea\x4b\x03\x76\x90\xb6\x4f\x78\x39\x5a\x6b\x7e\xfb\xdd\xec\x97\x6d\x96\xac\x3b\xf6\xc7\xf7\x79\x05\xa5\x46\x9c\xc8\xbe\x52\x1e\x1e\x41\xf4\xc9\x93\xa9\x5c\xf3\x80\x88\xdf\xb0\x2f\x7a\xa6\x87\x43\xbc\xbe\x08\xf7\xeb\x3e\x99\x70\xfb\x95\x80\xe1\xa5\x21\x01\xf2\x5b\x63\xec\x67\x02\x76\xa0\x2b\x97\x06\x7d\x11\xbe\x27\x88\xde\x12\x38\x38\xc6\x60\x82\x56\x05\x0e\xa9\x8d\xcb\x1a\x42\xa6\xdd\xc6\x3d\x16\x1c\x8d\xce\x04\x14\xc9\x7d\x4d\x33\xaa\x8f\x88\x53\x97\xdb\x3c\x12\x97\xab\xdb\xa2\x49\x1e\x5d\xee\x4a\xf5\xbf\xbc\xea\xca\xa8\xcd\xe7\x7b\xfd\x2c\xed\xa4\x55\x46\xe9\x13\x14\x28\x59\x16\xf4\x80\xfa\xfc\xce\x97\x6d\x78\x09\x9e\x42\xb1\x2c\x64\xda\x9f\x3f\x19\x8a\xe8\xab\x29\x88\xc5\x89\x7d\xff\x7e\x30\xbf\xcf\x5a\x2c\xe5\xf1\xc5\x85\xfb\xcf\x4e\xa8\x6d\xa4\x86\xc3\xe7\x4f\x2a\xfb\xa8\xe8\xa4\xb1\x39\x02\x9d\xb4\x33\x6c\x44\x2d\x60\xef\xcd\x8f\xb0\x5b\x65\xf3\x86\x70\x36\xba\xed\x1a\xdf\x9d\x37\xdb\x9d\x63\xce\x17\x0b\x6f\x8f\xc6\x61\x61\xa2\x16\xaf\x0b\xd2\x65\xf3\x7b\xaf\xf7\x92\x35\xb7\x91\x6f\xdf\xcf\xbe\x72\x1b\x82\x53\xcd\x6d\xfa\xa9\x7d\xd1\xbb\x35\x59\x85\x47\xe3\x5a\x94\xe9\x8a\x3a\xee\x11\x4f\x27\xb6\x54\xb4\xb1\xb4\x3d\x31\x9f\xfd\xff\x67\xef\x5d\xe0\x24\xc9\xca\x3a\xd1\x5f\x64\x55\x57\x77\x9f\x1e\x06\x88\x45\xf4\xae\xee\xde\x63\x8c\xde\xae\x1a\xb2\xb2\xba\xa7\xe7\x59\x33\x34\x54\x57\xf5\x30\x05\xdd\x35\x45\x55\x75\x8f\x80\xa3\x1d\x95\x71\xb2\x32\xa6\x22\x23\x72\x22\x22\xab\x3a\xe1\x72\x77\x98\x01\x17\x50\x04\x45\x14\xda\x17\xa2\xe0\x8a\x22\xb0\xac\xe8\x8a\xf8\x00\x74\xf5\x22\x08\xab\x0b\x0a\xeb\x82\x88\xec\xfa\xd8\xd5\x2b\xac\xab\xe3\xf5\xee\xfd\x9d\xef\xfb\xce\x2b\x32\xb3\xaa\xba\xab\x67\xd8\xdd\x5f\xf1\xd3\xe9\xca\x88\x13\xe7\xfd\xf8\xce\xf7\xf8\xff\x15\x7d\x47\x15\x61\x97\x86\xdf\x88\xc2\xe8\x13\x0a\x1c\x42\x59\x0b\x0b\x04\x1a\xdb\xd4\x2a\xf0\x6e\x99\x6b\x0f\x10\x79\xc1\x60\x09\x82\x9a\xba\xfd\x87\x18\xc3\x22\x4f\xc8\xcd\x38\x8d\x9c\x49\xfd\x8a\x1a\x5b\x50\x7c\x0a\x77\xef\x60\x30\xda\x8d\xf1\x95\xfd\x13\x72\x17\xfa\x9a\xe0\x88\x82\xcd\x76\x07\xff\x46\x37\xa2\xc6\x5f\x60\x67\xae\xaa\xb4\x55\xe7\x73\x55\xec\x19\x82\x08\xde\x89\xdc\x76\x58\x6e\x17\x0a\x91\x53\x1e\x8f\x7b\xdf\xed\xb1\x7f\xe4\x68\x13\x7a\x29\xa8\x52\xb6\xfd\xde\x34\x8f\x62\x29\x8b\x74\xb0\x9f\x67\xc1\xee\xcb\x38\x5d\x84\xa6\xcb\x6c\xda\x7a\x2f\xce\xf4\x67\x19\xe7\x3a\x38\x13\x3a\x08\x1e\xb8\x6d\x9f\xe5\x6e\x63\x20\x89\x6c\x06\x62\x1b\x33\xf6\xe8\x51\xc6\x77\x02\x65\x01\xc2\xd7\x3f\x3c\x12\xbc\xde\x53\xbf\x86\x41\x0b\xcb\x77\xc5\xfe\x71\x9f\x64\xf6\x7b\x07\x7d\x1a\xc2\x1d\xfb\xeb\x13\xac\x65\xf9\xb5\xbc\x78\x7f\xec\xa7\x3b\xe2\xdc\x1c\xf8\x72\xee\xd3\x97\xf3\xdb\x14\x33\xe9\x85\xe0\xeb\x34\x31\x69\xa8\x69\x49\x61\x4a\xd9\x5a\xbe\x06\xab\xb3\x9b\xf7\x8e\x26\x74\xe0\x56\x78\xed\x6e\x85\x8f\x7b\xc9\xee\x3e\x2b\x8b\xfe\xf3\xa6\x2d\xe4\xa2\x41\xde\xd4\x0a\x5c\xec\x68\x00\x24\x76\xe5\xa8\x73\x24\x9a\x30\x95\x86\xed\xf6\x0d\x5b\xd1\x5f\x1e\xd1\xc7\xb8\x7e\x38\x6c\x47\x72\x22\x0c\xc4\x08\xaa\xe9\x0f\x1c\x3e\xa0\x4b\x3e\xd8\x93\xac\x3d\x29\x53\x7b\x52\x2b\xb8\x69\x28\x59\xb2\x3d\xf5\xc4\x55\x98\xed\x46\x4c\xe9\x83\x4d\x6a\x3f\x9b\x54\xb4\xfb\x26\x35\xe7\x3f\x67\x37\xc7\xba\xea\x6e\x52\xa5\x9b\xfb\x83\xf1\xd1\xb0\x42\xe4\xcf\xa4\x1d\x61\x8d\x3f\xdd\x8f\x8f\x07\xaf\xf1\x06\x9f\xef\xe8\x4d\x47\x4e\x74\x96\x2b\x5c\xc8\x4d\xf3\x74\xd4\x4b\xcb\x0e\xcf\x6c\xc7\x65\x31\xdd\x15\xf9\x74\x21\x9a\x59\x0a\xe6\x90\xd0\xb0\x32\xe0\x27\x53\x0d\xa4\x95\x02\x45\x57\x84\x95\xb2\x00\x18\x26\xb0\x5c\x67\x67\xfc\x62\x8d\x3d\xc8\xaa\xdf\xf8\xcf\x67\xf7\x5d\x95\x9f\xd7\x7c\x9e\x15\x05\xed\x3e\x15\x62\x10\x79\xc5\xa7\x82\xfd\xfe\x68\xef\xe3\x1d\xdc\xc7\x16\x35\x04\x58\x70\x27\xf5\x9c\x75\x09\xb3\x7c\xc8\xe8\xe5\x7a\x1f\xdd\xdb\x20\x9c\x87\x1c\x52\xbf\xda\x3e\x6c\x6f\x1b\x77\xa4\x6f\x13\x76\x0e\x32\x3b\xf9\xb1\xfd\xc3\x58\x70\x97\xf3\xc4\x76\x65\x2b\x2b\x54\x14\xca\x81\x8d\xae\x01\xae\x27\xd9\xfb\xc6\xd8\xf7\xb9\x26\xdc\x57\xd5\x82\xaf\x19\x6a\xc2\xdd\x33\xf5\xfb\x0e\xe7\xa2\x63\x6e\xdd\x95\xfa\x9d\xcc\xad\x7b\xa0\x7e\x7f\x02\x6c\xb7\x6f\xf1\xd8\x0d\x49\x16\x46\x67\x90\x83\x24\xf7\x5f\xed\xb1\x53\x7b\x60\xbc\x31\x5f\x10\x1c\xcf\x0b\xed\x67\x4a\x25\x35\x6a\x98\xe0\x64\xc9\xc2\x68\x9a\xa8\x4f\xf2\x3a\x18\x24\x51\xc5\x47\x43\xdc\x60\xef\x99\x60\x53\xa3\x38\x07\x14\xdd\x80\xc6\xc6\xf6\x1f\x9d\x08\x16\xaa\x0f\x31\x96\x27\x12\xa3\x3c\x1f\x35\xc0\xbe\xd9\x3a\xdc\x89\xf3\xae\x43\xec\x1d\x63\x30\x71\xe4\xd5\x36\x11\xb9\xff\x03\x63\xc1\x6b\x00\x9f\x07\x7f\xa3\x42\x59\x1f\xfb\x55\x60\x16\x4a\x64\xf3\xd6\xb7\xc3\x34\xd2\xa1\xb6\x80\x13\x8f\xea\x4c\xf0\xf1\x27\xe0\x3c\x6d\xdd\x0c\x5a\x89\xbc\x44\x16\x01\xd1\xd7\xe4\x56\xb6\xc6\xe2\x21\x0b\x35\xa5\x55\xe2\xd8\xfb\x59\x0f\x4e\x42\x30\xd4\x98\x9c\x97\x4d\x50\x86\x5a\xa1\x90\x0f\xd8\x3a\x3b\x74\xe6\xda\x99\x42\x25\x2d\x67\x5b\xed\xd9\x0c\x6c\x79\xe8\xf0\x3f\xdd\xcd\x45\x2b\xbe\xac\x34\xfd\x69\x86\xf6\x3f\xb0\xd1\xde\x72\xdb\x09\x2b\x74\x01\x60\xf0\x44\xba\x51\xb6\x89\x4c\x2f\x08\x9b\x1d\x21\x4f\xcd\x18\xc7\x61\xda\x94\x1d\xec\x2d\xc8\xf0\x15\x35\xc6\x4c\xa8\x89\xff\xd7\x1e\xbb\x77\x6f\xfc\x15\xce\x5c\x32\xfd\x62\xb8\x9c\x7e\xd2\xb3\x7a\x8b\x2e\x6b\xe9\x26\x5a\x02\xab\x28\x95\x34\xf3\xe1\x10\x8b\x70\x17\x40\xcb\xad\x05\xb4\x67\xb0\x0d\x2b\xdd\x2b\xe5\x19\x05\x1f\x19\x0f\xcc\x22\xed\x23\x40\x8e\x3a\x1c\xb8\x46\xad\xf0\x9a\x06\xfb\xd7\x13\xec\x96\xa1\xd2\x17\x21\xca\xa3\xc2\x76\xae\x2c\xc3\x66\x5b\x0e\x32\x1d\xda\x8f\x4e\x04\x7f\xe8\x0d\x7f\xe7\x02\xe6\x90\x6a\xcf\x9e\xcf\xeb\x82\x87\xf0\x8d\x14\x8f\x56\xc0\x3d\x22\xcd\xb6\xd1\xef\x42\xc7\x9b\x53\xb8\xb9\x0a\xb5\x53\x1f\x00\x80\xb7\xa2\x47\x52\x4f\x73\x88\xd7\x6b\xf5\x20\x3a\x78\x5b\x90\xe3\x41\x92\x6d\xa3\xfb\x41\x9c\x26\x71\x2a\x34\x4d\x5d\x9c\x82\x03\x47\xc3\xa1\xa6\x25\xa2\x56\x2a\xad\xa8\xa2\x82\xbc\x71\x9c\xfd\xda\x18\x7b\x1a\xe6\x44\x3a\x6c\xb9\x85\xfc\xcc\xd8\x1e\xa0\x7c\xaa\x31\xf4\x00\xb5\xf6\xd7\xb5\x6a\x66\x66\x0b\x0c\x93\x84\x0c\xf9\x66\x0b\x4a\x45\x53\x14\x45\x98\x83\xd1\x0a\xdb\x8d\x94\x93\x94\xb5\xea\x68\x87\x3e\x03\x0d\xf9\xd4\x7e\x5b\xf5\x5e\x5d\x1f\xc6\x2b\x12\x46\x41\x4d\xb7\xf9\xd5\xc5\xf3\xf1\x86\x9a\x83\xe4\x00\x09\x98\xed\x7a\xb7\xce\xc3\xb4\xc0\x2f\x51\xfb\x46\xd1\x1e\xa3\x8b\xc6\x45\x30\xac\x4f\xf6\xea\xc2\xd9\xce\xd2\x2c\x1f\xe9\xc0\x19\x8d\xae\x39\x3b\xcf\x9e\xd1\xad\x14\x0c\x0a\xef\xdb\x82\xc9\x25\x6b\x1f\x1e\xec\x55\xdd\xe7\xce\xfe\xf1\xe1\xa3\xec\xc5\xd7\x13\x66\xd8\xa0\x07\xc3\x05\xfe\x8b\x47\xaa\x20\xc3\x6e\x02\x57\x0b\x34\x2a\xa5\x0a\xd9\x1f\x7e\xaf\x7f\xf4\xf0\xc1\xc5\x6a\x1f\x41\xa5\x8b\x96\x4a\xe4\xd9\xfb\xd2\x88\x1c\x68\x24\xf6\xab\x91\xf8\x79\x4f\xa9\x24\xde\xe5\x05\xb7\xc3\x5f\x14\x3d\x61\xfc\xa1\x76\x5b\x24\xb6\x2c\xdf\x66\x2d\x16\x8d\x1a\xd1\xeb\xb9\xd8\x1f\xf7\x5e\xb6\xfb\xf5\xfc\x5b\xfc\x8b\x86\x1a\xde\xc9\xbe\x1a\xfd\xb6\xc3\x8e\x31\x34\x0e\xee\x17\x8f\xb1\x33\xf6\x0d\x2e\xea\xc4\x85\x4c\x92\x8b\x8d\x18\xe4\x7f\x62\xcc\xbf\x18\x26\x71\x04\xe6\xd0\x07\xc4\x7a\x3b\xcb\x36\xe7\x6d\x11\xc5\xff\x32\x0b\x5e\xe3\xed\x9c\xa6\x02\x66\x33\x88\x25\x9c\x46\x5c\x17\xcf\xb7\x31\x07\x92\x63\xc1\x87\x0c\x1d\x99\x60\xda\xc9\xb4\x2a\xe2\x23\x2e\xdb\x52\x3e\x07\xaa\x5d\xf0\xe1\xaa\x9c\xde\xbf\x77\xe4\x60\x75\x1d\x40\x0f\x7f\xf5\x4e\x89\x4f\xda\x9a\xf3\x8f\xec\x1b\x7a\xf8\xd1\x91\xd0\xc3\x77\x3f\x59\xfa\xf3\x06\x7b\xa4\xc6\x8e\xd0\x0a\x2d\xfc\x2f\x7b\xc1\x22\x2d\xf8\x8a\x6d\x4a\x25\xd1\x6e\x3c\x21\x70\xe1\x80\x5f\x8c\xf2\x00\x86\xa5\xdc\x25\xc2\xeb\xc2\x09\xb0\x79\x1e\x3b\xbb\x13\xb2\xf1\x9e\xb7\xaa\x3d\x69\x42\xe4\x55\xfc\x2a\x34\x21\x8f\x7b\x8f\x78\xbb\xef\xdb\x0f\xfa\x2f\x31\xfb\xf6\xd0\xfa\x56\xf6\xef\x9d\xb7\xd0\x21\x2a\xd7\xaf\x1f\x72\xe5\x98\x6b\x41\x87\xf5\xfd\x7f\x3d\x1e\x9c\x54\x3f\x70\x64\xa0\x2e\xb0\x79\xa9\xc7\x16\x1e\x12\x10\xdf\xba\x9b\xe7\x7f\x1b\x63\x5b\x18\xe0\xae\x33\x6d\xed\x21\x86\x60\xc9\xfa\x20\xb8\x6d\x41\x6f\xfc\xe0\xe6\x3d\xb2\x68\x37\xc6\xee\x5f\x79\xec\x58\x37\x8b\x74\xb9\x3f\xe1\xb1\xfa\x5e\x82\x17\x74\xb9\xa5\x29\x17\xa0\xe9\x47\x16\x8b\x31\xd2\xcd\x6c\x1a\x23\x69\x8c\xe7\xbf\xc3\x43\x05\x2e\xbc\x2f\xcd\x52\x51\x07\x02\x5d\x08\xd7\xce\x3a\xc2\x44\x05\x4c\x16\x53\x53\x0d\xf6\xeb\x1e\x7b\xaa\xac\x76\x5a\xc6\xba\xea\xef\xf5\xf6\x10\xa9\xb4\xec\x7e\x14\xbc\xbc\x52\xfd\xb4\x8c\xa7\x77\x6b\x43\xb8\x95\xc5\x11\xef\xf6\x4a\xda\x83\xf7\xd1\x8e\xbf\xaa\x55\xd5\xf9\x96\x4f\x8c\xac\xef\x99\xac\x97\x46\x15\x6d\xb5\xff\x8b\xb5\xe0\xf9\xc3\x5e\xe0\xec\x73\xb8\xac\x0d\x1c\x19\x9e\xf1\xbc\xcc\x36\x05\x20\x48\x28\xc7\x69\x77\x2a\x7e\xce\x63\x77\x38\xc7\xf8\x54\xf0\x0d\x73\xcb\x8b\x6a\x45\x98\x70\x6c\xd4\x58\x39\x77\xb5\x25\x3a\xbe\xee\x0d\xee\x82\xc3\xab\x9a\x16\xd7\x1d\xac\x41\xf4\x4e\x3c\xbe\x9c\x45\xc7\x61\x6f\x3a\x8e\xd8\xa6\xae\x07\xe4\xcd\xe4\x29\x18\x04\x5f\xb3\xe4\x84\x82\x0f\x29\x7b\x92\x8d\xf5\xe2\xc8\xff\xc6\xe0\x19\x17\x16\x17\x76\x4c\xf9\xc9\xda\x70\x2d\x77\x33\xeb\x0a\x05\x0d\xe1\xff\x4c\x2d\x48\xe7\x78\x21\x9f\x19\x4c\xcf\x8a\xa2\x7b\x6e\x49\x17\xa4\x92\x58\x02\x8c\xa5\x09\x94\xb9\x44\xd3\xfa\x88\xb6\xf2\xb3\xe0\x51\x5c\x0d\xa7\xc7\xde\xe9\xb1\xa7\x81\xcf\xd3\x59\x44\xfd\x03\x05\xf9\x9b\xbc\xe0\xb9\x73\x7a\xe3\x1f\xa8\x9e\x15\x29\x26\x2f\xee\xf0\xba\x12\x3f\xef\xee\xfd\xf7\xb2\x9d\xbc\x91\x9c\xae\x89\x94\xb8\xab\xfa\xc8\x02\x77\x61\x3f\x79\x94\xdd\x3c\x52\x91\xb7\x84\xbf\xd0\xcd\x0d\x6e\xdd\x7f\x7b\x24\xb8\x6d\xe0\xa9\x7b\xa8\x39\xaf\x77\xbe\x5f\xff\xca\xc1\xfd\x7a\x3f\x92\xd3\x47\x6d\xc9\xe9\x97\xf7\xe9\x73\xf0\xcf\x86\xfb\x1c\x3c\x79\x7c\x0d\x07\x97\x90\x7d\x5e\x42\x72\x75\xc3\x8f\x83\x60\x88\x23\x94\xea\x2a\x5a\x90\xf6\x66\x72\x27\xbb\x7d\x07\x38\xf4\x1d\xf6\x84\xbd\x53\x41\xec\xca\xf5\x3c\xb0\xab\x54\x85\xb9\x5f\x7d\x0a\x7b\xe0\x5a\x55\x0c\x15\xed\xc2\x6a\x6f\x5d\xf5\xe0\x6a\x33\x4c\x84\xff\xc5\x1b\x82\x6f\xdb\x39\x89\x9e\x7f\xca\xdc\x2e\x4b\xa4\x43\x42\xbe\x2e\x4c\x7a\x10\xd3\xdc\xdc\x0a\x00\xcb\xec\x8a\xe6\x8a\xe8\x26\x71\x33\x2c\x96\xc3\xb2\x7d\xc5\xf3\xd1\x84\x67\x3f\x74\xf6\xc7\x8f\x1d\x63\x7f\x5c\x63\x03\x1f\xfa\x1f\xaf\x05\xbf\x5a\xab\x3e\x75\x56\x88\x61\x0c\x8b\x01\xc7\x16\x8d\xb9\x03\x14\x60\x00\xd7\xa7\xf1\xc1\x60\xe2\x63\x6b\x2f\x01\xa2\x7c\x4e\xd9\x5f\x6a\x20\x5a\x8c\xce\xb5\xd0\x6a\x05\xb8\xb5\x38\x4c\x64\x20\x1f\x10\xc2\x96\xed\x55\x0e\x1f\x43\x45\x7b\x69\x24\x72\x7e\xa9\x21\xcb\xb8\xa4\x98\xf4\x72\x82\x57\xa2\x2d\x1f\xd3\x18\x43\x37\xb5\x85\x0c\xa0\x4e\x33\x30\xf4\xef\xd2\x0c\x0c\xc4\x25\x67\x24\xc0\xfd\xb3\x42\xb9\xc7\xb3\x94\x3f\xef\xec\x9a\x23\x59\x3c\x32\xc6\x86\x8c\x85\xff\xa7\xb5\xe0\xb3\xb5\xc1\xe7\xd7\xb9\xa7\x31\x92\xf0\x89\xee\x6b\x28\xe5\xfa\xf5\x76\xb5\xd6\x2e\xb0\xdc\xe8\xc1\x88\x30\x6c\x42\xb6\xdf\x0d\x2e\xf9\xa3\x43\xec\xe9\x89\x0d\xf2\x05\x23\xf0\xd1\x43\xc1\x07\x0f\x0d\x3c\x7e\x42\x06\x40\x49\x63\x4f\xec\x00\xf0\xcc\x9a\xf9\x2a\x7d\x21\x30\xa2\x3b\xcb\x37\x31\x34\x61\x04\x1f\x0e\xc6\xf5\xa1\x09\x08\x24\x17\x25\xaa\xc6\x85\xd5\x0d\x1d\x5d\x0b\x12\xa2\xf0\x83\x49\x80\x2e\x03\x9c\xaa\x44\x5c\x36\xc2\x67\x51\xe6\xbd\x66\x39\xe5\x52\xd8\x17\xe8\xfa\x11\x87\x09\x1c\x6b\x30\x02\xe6\x93\x38\xd5\x59\x67\x79\x67\xaf\xe1\xf9\x65\x58\x6c\x16\x33\x08\x7d\x66\x1f\x19\x61\x37\x9e\xc1\xe1\xd2\x92\x76\x51\x7d\x30\x6d\x9d\x4d\x37\x41\x67\x4c\xdb\x53\xeb\xfa\x4e\x6a\x3d\x13\xae\x61\x52\x83\x5c\x09\xe1\xf7\xd8\x43\xce\x1c\xff\x2f\x47\x9c\x0b\x4c\xd8\xed\xc2\xe1\xb4\x10\x8a\x4e\x96\xae\x8a\x12\x44\xec\xdf\x3a\x12\x4c\x3b\x4f\x86\xb9\xa5\x46\x90\x40\x4e\x9c\x11\xa2\xf5\x4f\x1d\x3e\x10\x0f\x0f\xc4\x43\x7b\xf2\x7d\xab\x12\x0f\x57\x83\x67\x9a\x9b\xa8\x3d\x91\xf6\xee\x25\x3f\x30\x73\x0f\xee\x71\xfb\x71\x40\x7d\x60\x77\x21\xfa\x56\xff\x16\xcb\xc2\xd5\x2d\xb4\xdc\xec\x6c\x15\x55\x99\xf9\xb7\x6f\x74\xfc\x57\x5c\xaf\x79\x70\x10\x4c\x5a\x14\x53\xb4\xd2\x4b\x44\xb1\x22\xb6\x62\xb1\xed\xbf\xe9\xc6\xe0\xd5\x87\x86\xbf\xe3\x22\xed\x75\x00\xa8\xb4\x20\xfd\x09\x4c\xa3\x90\xe8\x23\x6c\xff\xb4\x5e\x41\x3e\x23\x5d\x91\xcb\x73\xc2\x84\x40\x5b\x34\xca\x6b\xa0\xe1\x90\x02\x9a\x88\xf4\xa4\x54\xb9\x11\x3a\x45\x9c\xe2\xa1\x55\x4a\x29\xbc\x8b\x48\x0a\x0a\x61\x04\x25\xff\xe3\x05\x77\xda\xc6\x3b\x06\x50\x20\xed\xa3\xdc\x57\x70\x71\xb9\x2b\xf2\x58\xa4\x4d\x11\xf1\xa8\x97\xab\x49\x48\x7c\xb9\x80\x93\x31\xa2\xd1\xc6\x37\x07\xf0\x7d\xd7\xfb\xfc\xc2\x22\xec\x03\x45\x3b\xdb\x9e\x69\x4b\xa9\x83\xea\x0c\x61\x6c\x65\xc6\x1f\xee\xc5\xcd\xcd\xa4\xcf\x13\x51\x82\xe4\x99\x46\xd8\x1f\x0a\xa1\x42\xf9\xcc\xc5\xb9\xec\x1e\xd2\x7c\x17\xe0\x3e\x42\x85\x2d\xdd\xbf\xc6\xcf\x98\x02\xb5\x5b\x0f\x86\xdb\x41\xe9\x80\xf5\x5a\x69\x79\x24\x9a\x80\xb6\x4d\xe0\xc0\x72\xd7\x0b\xe3\x42\x00\xaa\x45\x0b\x32\x8b\x44\xb7\x57\xf6\xeb\xbc\x19\x36\xc1\x23\xbd\x25\xca\xb8\x23\x66\x72\xb1\x95\xa1\xf6\x12\x3b\x0e\x84\xa5\x66\x99\x8a\x02\xbe\x6d\x8a\x5c\xd6\x8f\x3a\x67\x0e\x4e\x71\xec\x1d\x4c\x7e\x2e\x6b\x86\x89\xfd\x98\x22\x01\x85\xca\x08\xa2\x93\x65\xa5\x85\x5c\xc1\xa3\x2a\x4d\x7b\xeb\xdc\xf2\x22\x0d\x6d\xe3\x8a\x07\x34\x8e\x6e\x0c\xe0\x91\x83\x0d\x67\x1f\x8a\xa3\x17\x58\x82\xc1\x73\xf6\x69\x70\x63\xaf\x55\x3c\x9b\xaf\xf0\xd8\xc2\x4e\xae\xcf\x7b\xd9\x7a\xc0\xfb\xeb\x2e\x70\xf8\x42\x50\xca\xe1\x8e\xa6\x2a\x12\x15\x11\x4c\x34\xe1\x75\x83\xfd\xa4\xa7\x99\x31\x7f\xc8\xdb\x41\x41\x3a\x58\x9d\xc1\xaa\xa0\x23\xee\x45\xf2\x95\x06\xdf\x2b\x70\x13\x05\xf4\x7b\x6b\xf3\x41\xf7\x2b\xed\x8f\x3f\x64\x57\x0c\x07\xf6\xc2\x83\xb8\xbf\xfd\xca\x33\x8f\x7b\xdd\xdd\x4f\xcd\xf3\xfe\x0b\xa6\x2d\xde\xd1\xd1\x9c\xf9\xc3\x67\x63\xf5\x38\x7d\xc5\x38\x9b\xdd\xd1\x9d\xff\xe4\x4e\xa1\x0a\xfe\x87\xc6\x82\xf5\x1d\xde\x9b\xbb\x97\x48\xb3\xde\x46\xdb\x99\xfb\x65\x06\x47\x49\x3f\xeb\x69\x32\x72\x63\x28\xc9\x2d\x8b\xb1\x8a\x99\x26\x70\x11\x67\xdb\xfc\xb5\x1a\xbb\xdd\x99\x75\x93\xc1\xd7\xef\x60\x22\xb2\xb7\x8c\x37\x7b\xb4\xdd\xbe\xde\x0b\x5e\xe1\x0d\x33\x12\x3d\xe1\xe6\x75\x6b\x33\x0b\xec\xaa\x25\x64\x6c\x8a\x82\x07\x86\x19\x9b\x06\xea\x35\xfc\x76\x2a\x57\xe8\xf4\x46\x2f\x8e\xc4\x8c\x21\x85\x2f\x6e\x02\x51\xc5\x2e\xed\x1f\xc6\xd9\xd7\x0d\xb1\xb4\xac\x85\x71\x0a\x81\xf6\x97\xd6\x0c\x60\x6f\x5c\x70\x78\x0e\x27\x93\xf2\xd1\x2d\x33\x04\xee\x69\x0b\x1e\x08\xb0\xf7\x07\x18\x6d\x63\x61\x79\x69\xd7\xe4\x32\x4b\x40\xd8\x82\xe4\x90\x57\xe3\x8a\x37\xb6\x29\xfa\x57\xbc\x09\xfc\xd8\x19\xe0\xcf\x8f\xb1\x77\x79\xec\xa8\x3c\xcf\xe7\xa2\x48\x44\xfe\x8f\xee\x03\x58\x36\x5a\x53\xd9\x54\xed\x67\x83\xf0\xb2\x25\x34\x13\xd0\x65\xe5\x07\x20\xc7\x28\x8f\xd4\xed\x3c\x2e\x4b\x81\x6e\xda\x4b\xd9\xd9\xcb\xa2\xd9\x2b\xe9\x8b\xa2\xc1\xce\xb2\x43\xb0\x8b\xf8\xf7\x04\x33\x6b\x3a\x27\x3c\xbe\x5d\xea\x02\x0d\xac\x2d\x13\x6c\x8a\xbe\x73\xb5\x7e\xab\xc7\xa8\x43\xfc\x37\x79\xc1\x3f\xf7\x54\x44\x3f\x4a\x98\xf8\x46\xcd\x0c\xcc\x21\x43\x4f\x67\xd5\xe1\x83\xdd\x0d\xc9\x94\xe9\x13\x73\x40\xe3\xe7\x52\xa6\x60\xdc\xea\x7c\x19\xa6\x99\x79\x02\xdb\xa5\x6e\xa5\x53\xc5\x05\x26\x07\xce\x7f\x76\x70\xc2\xad\x9c\x6e\x10\x21\x62\x20\xc5\x91\x85\x8c\xe5\xe4\xf2\xdd\x6c\xaf\x06\xbb\x65\x21\x72\xff\x73\x47\x83\x64\xe0\xa9\x83\x56\xd4\x95\x0f\x64\x59\xe0\x13\x5e\xe6\x61\xab\x15\x37\x79\x99\xcd\x48\x71\x87\x74\x61\x43\xa8\xba\x20\xce\x83\xbc\x9a\x2d\x25\x98\x33\x1d\xbf\x70\x84\x7d\x66\x8c\x3d\x5d\x8b\xfb\xda\x48\xfb\x91\xb1\xeb\x40\x02\xf0\xdf\x6b\x8a\x43\x73\x49\x15\xa0\xf0\xce\x09\x0e\x74\x1a\x0d\xb8\xa8\xbe\x72\x01\x02\x91\xc0\x0c\x70\xdc\x48\xad\xe1\xaa\xb8\x14\x57\x4e\x71\x37\x8f\x5b\x2a\x86\x06\x71\x90\x10\xd1\x3f\x2e\x29\x31\x7a\xa4\xeb\x36\x16\x0d\xc6\x16\x5b\x00\xa1\xa7\xd5\x65\x05\xba\xda\x2b\x3e\x01\xbc\xb9\x0c\x8e\x0a\x44\x7e\x6c\xb7\xb3\x44\xe8\xac\x4b\xc4\xc1\x2b\x0c\x88\x86\x93\x71\xaa\x81\x77\xa8\xf9\x36\xcd\xe0\x52\xb5\xdb\x1b\xfc\x7e\x0d\xa8\x53\xa9\x3e\x94\x71\xb5\xd9\xb1\xdf\x1b\x03\x17\x94\xeb\x3d\xac\x86\xf1\xb1\x32\x28\xb8\xdf\xa8\x7a\x2f\x57\x41\x1f\xaf\xf7\x98\x42\x20\x04\x8c\xe6\x40\xdb\xff\x47\x1f\xd3\x3d\x95\x81\x14\xb2\xc7\x0b\x9e\x6d\xa7\x26\xe7\x06\xfb\x69\x8f\x1d\x8e\xbb\x67\x92\xac\xb9\x29\x0f\x90\xc6\x5e\xc3\x7e\x96\xe1\x93\xa0\x43\x7f\x68\x19\xb6\x4b\xae\x00\x15\x2e\x46\x4a\x36\x0c\x51\x1e\xf9\xdc\x52\x9e\x12\x72\x1d\x6d\xdc\xe8\x82\x43\x9b\x0e\x46\xa3\x34\xd8\x8f\x31\x76\xef\xfe\x3d\x74\x41\xf5\xfa\xa9\xa3\xc1\xfd\xbb\x27\x73\xcd\xaa\x3b\xa7\x1f\xae\x9c\xfd\xd2\xe1\x03\xf1\x7f\xbf\xea\xcc\xef\xd3\x0e\xed\xaf\xf5\x82\xe3\xe7\xf6\x36\x1a\xb6\x86\x73\x8d\xad\xb0\xe5\xeb\xe0\x3d\xe9\x7a\x20\x1e\xa8\x25\xae\x5d\x2d\xf1\x3b\xb6\xc1\xe2\x43\xfb\x34\x58\x58\x7e\xc0\x4f\xae\xc5\xc2\x6a\xdc\xe3\xde\x2b\xf7\xe0\x04\x1b\xfa\xdf\x7e\x3d\x9d\x60\x87\xe9\x81\xdf\x33\xe8\xac\xe8\x68\x3f\x96\xb2\x54\xb9\x2a\xcc\x95\xd8\x68\x51\xf8\x8f\x7b\xc1\xcb\x86\xbe\xb1\xe0\x64\xdb\x55\xfd\x63\x68\x52\xb9\x84\xaf\x69\x96\x4e\x3b\xd8\xe8\x34\x1d\x51\xdf\x47\x79\x00\x6e\x7f\x29\xf2\x56\xd8\x74\xaf\xae\x19\xbb\x93\x8d\x77\xc3\xb2\xed\x9f\x08\x6e\x02\xc3\x2a\x21\x6a\x5c\x58\x39\x87\x96\x3d\x7d\xed\x83\x9c\xed\x79\x75\x8a\x8d\x6f\x89\x7c\xdd\x7f\x56\xf0\x4f\x2f\x8a\x7c\x5d\x7d\xa9\xc5\x84\xfb\xd6\xd6\x96\x65\x7f\xad\xdb\x1f\x7d\x69\x82\x3d\xeb\x2a\x42\xf7\xfd\xf7\x4f\x04\xa1\xfd\xc0\xd9\xc2\xed\x08\xfe\xba\x62\x12\x52\x3f\x01\x04\x1e\x9f\xf4\xca\x38\x51\x1d\x89\xe1\xf7\x18\x16\xdc\xa4\x40\xff\x2b\xde\xb8\x9c\x5e\x4e\xcf\x7c\xf0\x10\x7b\x4b\x8d\xf9\x94\xc5\x05\x93\x83\xff\x68\xcd\x3f\x14\xa7\xe5\xa9\x5b\x82\xbf\xf0\x06\x5f\xab\x6e\x70\xd0\x05\xa8\x13\x55\x7d\xaa\x14\x3e\x04\x81\x10\x36\xf3\x0c\x71\xfa\x79\x2e\x12\xb1\x15\xa6\x25\x31\xab\xdb\x4e\x94\x21\xde\x2e\xf2\xa6\x3c\xa1\xec\xcc\x60\x80\xd4\xf1\x31\x50\x86\xe5\xe4\x5c\x34\xf8\xbc\xa6\xfa\x80\xbb\xe4\x16\x5c\xc6\x64\x92\x95\x4a\x9d\xd4\xde\x09\xdd\x73\x94\x1d\x96\xd3\x68\x43\xe4\xec\xfd\x1e\xbb\x81\x9a\x73\x11\xee\x99\x6f\xbf\x9a\x8d\x65\x08\xa9\x61\xcb\xce\xed\x2a\x3a\x71\x97\xbe\xe3\x93\xd0\x5f\x0f\x53\x31\x53\xac\xc9\x60\xac\xfd\x97\x04\x4b\x80\xc2\x68\xdd\xc1\xb7\xdb\x48\x40\x65\x65\x0b\x49\xe2\x82\x5b\x03\x5c\xe7\x17\xf5\x04\x9b\xb3\xea\xec\x38\xbe\x78\xea\xfa\xbd\xbd\xbf\x5e\xb9\x73\x6b\xb7\xee\xa0\x8a\x56\x9a\xd9\x60\xdf\x35\xce\x6e\x1a\xe1\x22\xaf\x04\xd6\x35\x91\x77\xfc\x2f\x8e\x05\x6f\xf7\x88\xdd\x3f\xcb\xc9\xc8\x0e\x8a\x16\x2d\xe0\x97\x22\xef\x68\x7c\x43\xcd\x23\x5d\x28\x2b\x93\xe5\x64\x8b\x75\xea\xc0\xcd\x75\x6e\x69\x41\x5d\xc5\x15\xa3\x9c\x5d\x30\x75\xad\x8a\xe3\x87\xc3\xbc\xb7\x4e\x1a\x5e\x10\xd5\x2b\x35\xad\x38\x04\xd7\xd8\xf7\x0f\x73\x08\x7e\x85\x17\xdc\x6e\xcc\xb0\x6e\x3b\xaa\xfe\xc0\xf2\xed\xf1\x42\x5d\x63\x6d\x21\xe6\x1e\xb6\x13\x8c\xe0\xb0\xbe\xb4\x9d\x7f\xbf\xc7\x63\xc7\xa0\x62\xf7\x82\x48\x7d\x2d\x75\x22\xf6\xcc\xeb\x57\xa7\x37\x8c\xb1\x5b\xaf\x05\x57\xd1\xff\x74\x2d\x58\x19\xfa\x86\x2c\x09\x08\xe4\x0e\xfa\x7b\xa3\x56\x6d\x19\xd0\xc9\x69\x02\x9d\x84\x43\x59\x0e\x31\xc8\xd1\x57\xbc\xa3\xfa\x6a\x3f\x4c\xa5\xfa\x47\x1e\xeb\x93\xfe\xf1\xe1\x20\xba\x24\xff\xb8\x54\x65\x41\xd3\x77\x30\xb7\x7a\x6a\x7a\xc2\x02\x0d\x6e\x0e\x00\x8b\x15\xd0\x74\x73\xb1\x11\xe6\x51\x42\x40\xe5\x00\x1f\xca\xb5\xce\xc8\x5e\xbe\x11\x33\xb5\xf3\x1f\x08\x9e\x7f\x49\xff\x72\x2a\x01\x4f\xf6\x50\x93\x11\xa5\xbc\xe1\xa8\xb3\x42\x41\x25\xb5\x75\xb2\xb1\xd2\x4b\xcb\xb8\x63\x61\xaa\xfd\xa7\x23\xc1\xa9\xea\xc3\x0a\x18\x9f\xf5\x76\x67\xd7\xf0\x5f\x38\xcc\x36\x95\x80\xbf\x7e\xb5\xfe\xac\x3b\x13\x79\x0c\xab\xff\x81\xdc\x7e\xe0\x87\x7e\xe0\x68\x74\x9d\x0c\x73\xe1\xee\x77\x9e\xd3\xfe\x3d\xc6\x27\x5c\xae\xc7\xca\x15\xa7\xba\x8d\x54\x2f\x34\xdf\x37\xc1\xa6\xf7\x34\xaf\xf0\x64\xbb\x78\xd2\xff\xc2\xa1\xe0\xf7\x0e\xa9\x5f\x80\xe1\x26\xd0\xc9\xb1\xb4\x14\xd9\xe0\x9d\x02\x50\x8b\xe8\x15\xd9\xcb\x05\x52\x8d\x87\x7c\x2d\x8f\x05\x20\xa9\x80\xa3\x25\x9e\x20\x0d\xc6\x80\x98\x6e\x53\x40\xf8\x20\x29\xab\x42\x7e\xbc\x71\x7c\x70\xaf\x20\xed\x56\x59\x88\xa4\x65\x81\xd3\x86\x09\xe0\x24\x77\xc2\xae\xe2\x43\x40\xef\x41\x51\x12\x07\x30\xed\x40\x4e\x7e\x20\x82\x4c\x63\x8e\x59\xce\x63\x85\xbf\xac\x12\x43\xce\xa8\x0e\x45\xe6\x10\x90\x54\x80\x3a\xbb\x97\x53\xe5\x8b\x59\x7e\xbc\x35\x7b\x8f\x3c\x1f\x4e\x1f\xaf\x13\xef\x0a\xfe\xac\x1e\x60\xa1\xaa\x7c\xca\x55\xcf\x40\xe5\xa0\xdd\x80\x38\x17\x76\xf9\xf1\xad\xd9\x7b\x60\xda\x59\xb9\xe1\x6f\x95\x9d\xb8\x1c\x36\x4b\xfe\x50\x81\xe7\x6e\x27\x2c\x9d\x4b\x00\xed\xec\xb2\x2d\xfc\x78\x3c\x7b\x4f\x9c\x46\xe2\xb2\x95\x17\xfe\x46\x3c\x96\x22\x36\x57\x24\xf8\x00\x6a\x01\xdf\x1f\xdf\x9c\xbd\x67\x53\xf4\x0b\xeb\x4b\xf8\x89\xdb\xb9\xac\x68\xd6\xe2\x76\x61\xc7\x0b\x68\x07\xcd\x00\x5c\x72\x71\xae\x28\x95\x89\x04\x76\x51\x96\x24\x93\x75\xc2\x6e\xe1\x0c\x14\x4e\x29\xb5\x26\xcd\x40\x83\x59\x49\x7e\x61\xf3\x85\x16\xa0\xff\x34\xb1\x67\x25\x31\xf3\x63\xcf\x60\xa7\xd8\x14\xe4\x71\xca\x8b\x78\x43\xa1\x18\xcc\xe8\x49\x19\x51\x6c\x6e\x14\xb7\x5a\xd6\xb1\xc9\xbe\xfc\x34\x16\xec\xe4\xa6\x47\x48\x70\xbf\xfd\xb4\xe0\x74\xe5\xd9\x5e\xb0\xe0\x8c\xaf\x60\xe3\x8a\xf7\x4c\x4a\xb1\xd4\xeb\xac\x8b\x5c\x99\xbf\xa2\x2b\x9e\x9f\xc2\x93\xf3\x71\x51\x98\x87\xcf\x8c\x44\x21\xe5\x8a\x81\xd4\xc7\x30\xf5\x8a\x08\xa3\xbe\x23\x00\xfc\x8b\xa7\xb2\xaf\x78\x6c\xc4\x77\xfe\x1f\x78\xea\x6a\xfb\x61\x60\x6e\x2b\xb3\x32\x4c\x38\xe6\xa5\x64\xd7\xa2\x8a\xab\x44\x94\x30\xd0\x3e\x6a\x4b\x37\x8b\xf8\x24\x6a\x33\xe4\x1b\xfc\x8c\x1c\x96\x92\xfe\x88\x2f\xa6\xf6\x41\x48\x66\xf0\xa7\x8a\x19\xcc\xb1\x10\xe5\x8c\x73\x63\xfd\x75\x8f\x3d\x1d\x5b\x72\x21\xd5\x2a\x14\xff\xdd\xba\xc5\x6f\x81\x16\x5f\x5b\x5b\x35\xc7\x70\x6a\xb6\x05\xfb\xbd\xfa\x0c\x3c\xe7\xb4\xfa\x66\x12\x69\x10\x81\xae\x4e\x51\xd1\x40\x80\x48\x27\x4e\x61\xe4\x56\x01\x34\xb2\x98\x72\xda\xf1\xc7\x1e\x1b\x31\x49\xfc\xdf\xd4\x8d\xf9\x97\xa3\x1b\x23\xef\x66\xba\x3e\xaa\xd8\x93\xd5\xd6\xc8\x54\x40\x50\x50\xa0\xc9\x34\xef\xa5\x95\x46\x3d\xb1\xa3\xf5\x7f\x7b\xec\xa9\x58\xfd\x39\x3d\x56\xef\xd7\xcd\x7b\xeb\xf5\x18\xab\x21\xdc\x4f\x4f\xd0\x90\xfd\xa1\xc7\x86\x2c\x5f\xff\x37\x74\x7b\xde\xb3\xb7\xe1\x72\xab\x88\x0c\x56\xc8\xa2\x5f\x7e\x55\x07\xeb\xcd\x1e\xb3\x37\x1c\xff\xd5\xba\x61\xc5\x93\x3a\x4e\x30\x38\x0d\xa7\x6a\x09\xf3\xb3\x75\x04\xa7\x7f\x9e\x48\x09\xef\xc1\xbf\x08\xf5\xbb\xfd\xd6\x60\xae\xca\x5e\xba\xa1\x13\x71\xf5\x9d\x72\x4b\x33\xfb\xb4\x0d\x89\x57\x29\xed\x99\x74\x85\xa8\x2e\xcd\x15\xd5\x23\xcf\xde\x65\x5f\xb5\xc7\x9b\xf2\xb2\x9a\xeb\x94\xf6\x45\x8f\xdd\xd8\xcc\x92\x04\x7c\x3c\xe7\x81\x4b\xe1\x93\xba\xe7\x3f\xe0\xcd\xe3\x1d\xb4\xc5\xdb\x61\xd1\xe6\x3a\xa1\xc1\x3b\xd0\x67\x15\x0a\x39\xfa\xa7\x8d\xe6\xd7\x2b\x44\x61\x9b\x11\x43\x15\x34\x01\x79\x61\xe4\x7f\x98\x82\xbe\xb0\xd9\x0e\xd3\xb8\xe8\x20\xab\x5d\x5c\xf2\x54\x08\x3c\xf9\x91\x5c\xcc\x88\x3e\xaa\xfc\x54\x6c\x4b\x01\xdc\xc0\x54\xae\x88\x2d\xc8\xd6\xed\xd4\xff\xea\x39\x98\xa8\x5f\xf2\x82\x73\x2b\xee\xa9\x4a\x92\xbc\x59\xa6\x38\x74\xc6\xa1\x22\x34\x8d\x3b\x5e\x38\x87\xb0\xcb\xad\x7b\x07\xbb\x6d\x07\x5c\xd1\x81\x73\xff\x89\x25\xac\xfc\xf2\x0d\xec\xd9\xb6\x86\x47\xe4\x25\x72\xa5\x0a\x8c\xbd\x34\xbf\x57\xe3\x0d\x39\x5f\x56\xf0\x52\xab\x6b\xe5\xbf\xf7\x86\xe0\xdb\x76\x4f\xe6\xb8\xad\xe8\x8e\xc6\x6e\x1b\xf9\x35\x5d\xbb\x48\x73\x7e\xc5\x9b\x50\x4c\xb9\x96\xac\xf1\x2f\x8f\xb1\x73\x9a\x0a\xf5\x4c\x70\x1b\x39\x69\x1b\x9f\xce\x90\xb8\x51\xe9\x85\x9a\x17\xca\x0d\x95\x90\x6e\xcd\x8d\xf8\xfb\x8d\x1b\xea\x77\x7a\xc1\xff\xe5\x22\xb5\xea\x9a\xd7\x95\x6c\xbe\x06\xc4\x47\xf7\x86\x49\x21\xea\x8a\x68\xad\xc1\xe7\xba\xdd\x3c\xdb\x12\x51\x9d\x2f\x88\x34\x56\x5c\x70\x48\x21\x67\xf3\x1f\x76\x30\x1e\x0d\xc8\x74\x20\x8f\x00\x14\x4a\x94\x4f\xe0\xa8\x72\xde\x7c\x88\xb4\xca\xaf\x3f\x14\xbc\x02\x06\x7a\xa0\x56\x0d\xfe\x02\xf9\x9d\xcb\xb0\x28\x78\xa0\xaa\x13\xd4\x79\x80\x15\x0a\xb0\x46\x01\x56\x29\x68\x30\x36\x97\x5a\xe9\xac\x21\x8a\xc9\x2f\x0c\x00\x2a\x65\x69\x33\x21\xa4\x0a\x13\x3b\x98\xaa\x6e\x33\xcd\xda\xfd\x0b\x7e\x65\x94\x2d\xe2\x2e\xeb\x3d\x39\x2e\x8a\x9e\x05\xd8\x10\x6f\xa4\x22\x97\x15\xd1\x75\xbc\xbe\xb5\x88\x20\x53\xbb\x0e\xd4\xf3\xa3\xeb\x41\xbd\xb3\x63\x3d\x68\x82\xec\x54\x0b\xcc\x12\x18\xfe\xf0\xec\x84\x12\x71\xe8\xcc\xdc\x97\x45\xda\x1d\x85\x9d\x50\x1d\xcb\x21\x94\x69\x7b\x9e\x6d\x86\xc5\x35\x17\x1d\x28\x47\x9e\xc4\xe4\xf6\xc7\x18\xb8\x8b\x11\x4d\xa1\xbd\x3e\x31\x04\x4f\x59\x29\x54\xc4\xa4\x3d\x35\xdf\x5f\x63\x7e\x12\x16\xe5\x5a\x1e\xa6\x78\xbf\x03\x6a\xfc\x1f\xad\x5d\xbb\x07\xe3\x1f\x7b\x83\x19\x6a\x13\x45\xdc\x11\xee\xc4\xe7\x32\x31\x62\x76\xc2\x6f\xc5\xbc\x26\x5b\x43\x03\x04\x17\x3f\xf0\x42\x01\xaf\x95\x5e\x0a\xd7\x74\x38\x47\x42\x79\x4a\x58\x99\xe9\xa6\xc2\x48\x03\x6b\x3b\x17\x97\xe3\x42\x01\x01\x63\x32\xcd\x24\x0a\xf4\xad\xed\x30\xdd\x00\x9a\x44\xe3\x5b\x1e\x69\x9a\x31\x79\xb4\x91\x42\x48\x9d\x0b\xb2\x0d\x0d\xf6\x5d\x1e\xbb\x51\x56\xfd\x02\x1c\xc2\xd0\x69\x2f\xbd\xf6\x3e\x7b\x8e\x9b\x95\xd3\x5d\x0a\x6a\x5a\xf6\x13\x1e\xf9\x58\x23\x9b\xe0\x9b\xb5\x0c\x83\xf8\x4b\x82\x25\x45\xc3\x6a\xc5\x95\x8e\xa0\x14\x87\xc0\x57\x97\x5f\x7a\xc7\x3d\xf6\x55\x35\xf6\x8d\xd6\xa9\x83\x4e\x46\xda\x46\xb0\xb8\xb0\x22\x3b\xd3\xff\x9c\x17\xdc\x4e\x7f\x1b\xf4\xea\x90\x77\xe2\x74\xa6\x13\x5e\x26\xcd\x1c\x4d\x47\x9e\x43\xb2\xac\xc5\x17\x17\x8a\xc6\x15\x6f\xac\x13\xa7\xf2\xbf\xe1\x65\xe7\xb4\xf8\x2e\x8f\xcd\x33\xf9\xd4\xbf\x47\x49\x67\xc7\x65\x5e\x4a\xcb\x61\xb9\x46\xcb\xfc\xea\x68\x2d\x27\x62\x42\x4b\x5c\x38\xcb\x64\x01\xfe\x69\x95\xc9\x54\x27\x4e\x2d\xdb\xb4\xd1\x13\xec\x9c\xcd\xef\x8f\xb1\x79\xea\x07\x79\x58\x4f\x87\x1b\x1b\xb9\xd8\x08\xcb\xcc\xc5\x43\xa8\xfa\xb1\xcc\x2d\x2f\xba\xf0\xf0\x6f\x18\x0b\xe6\xaa\x0f\xcd\xb0\x45\x22\x8f\xb7\x2a\xc6\x13\x1c\xa4\x30\xb5\xa2\x75\x9c\x8e\xfa\xe5\x1a\xfb\x80\x0b\x13\xff\x33\xb5\xe0\x9b\x46\x32\x7d\x87\xdd\x78\x55\xa3\xcd\x1b\x51\xe7\x5b\xd8\x45\xb6\x36\x74\x36\x5f\x5b\x73\xff\x27\x42\x93\x7f\x0f\x63\x2f\xd8\x83\x4f\x12\xce\xf8\x3d\xf8\xb7\x7d\xfe\x49\xf2\x6f\xfb\xf3\x03\xff\xb6\x7d\xfb\xb7\xbd\x45\xfb\xb7\xbd\xfe\xda\xfc\xdb\x5e\xc4\x1e\x60\x17\xae\xda\xbf\x6d\x2f\x73\xe9\xc0\x58\x76\xe0\xe4\x66\x3b\xb9\xbd\x66\x0f\x4e\x6e\x2d\x3f\x7a\x62\x9d\xdc\x08\xaf\xf7\x0b\x87\x1d\x0a\x30\xe5\x6d\xf0\xc2\x5e\xb6\xde\x2f\x85\x43\xb0\xfa\xf3\x87\x21\x4e\xc4\x82\xe3\xa7\x54\xc8\x88\x8a\x5a\x0e\x29\xeb\x28\xea\x26\x0c\x94\x45\x79\x16\x54\x55\x2a\xbd\x02\xcf\xa7\x28\x12\xe2\x4b\xe5\xd9\x76\x2a\xf2\xa2\x1d\x77\x79\xc7\x70\x83\x66\x39\x5f\x3d\x7b\x2e\x4e\x7b\x97\x79\x2e\xc0\xa3\x23\x4e\x37\x1a\x57\xbc\x23\xd4\x19\xfd\x2b\xde\x04\xe6\xe7\x6c\xa9\xaf\x9d\x60\x3f\xe4\xb1\x89\x52\xa4\x61\x5a\xfa\xdf\xe3\x05\x8f\x79\x6b\xf0\xb7\x2c\x45\xad\x30\x14\xb2\xdd\x5a\x29\x67\xef\x33\x61\x73\x53\x8a\x26\x17\x0a\xc5\x7f\x1a\xf5\xd3\xb0\x43\x74\xdc\x20\x1a\xd1\x2e\x5c\x69\x55\x9d\x6b\xd7\x9e\x42\x94\xea\x86\xd3\x4d\x7a\x1b\x71\x6a\x4f\xec\x17\x12\xaf\xe5\x62\x70\xcf\x85\x02\x43\x4a\x3a\x61\x57\xd5\x02\x61\x3f\xe4\x43\x9b\x38\xb7\x90\x52\x45\x53\x90\xe7\x05\x44\x49\xba\xee\x0d\xd4\x15\xfe\x8b\x83\xf3\xc4\xa3\x6d\x6f\x34\x30\x42\x16\x05\x35\x88\x72\xa8\xf8\x24\x9e\xf8\x6a\x67\x10\x79\x8f\x73\xf1\x78\x9e\x62\x13\x3d\x1d\x9c\x04\xfe\xcb\xdd\xaa\x4e\x28\x23\xf0\x91\x9d\xd1\xa3\x9e\x45\x72\xbc\x15\xb4\x57\xe8\x6f\x0e\x66\x28\xb2\xc9\xe1\xde\x27\xaa\x15\xc3\xd0\x1f\x62\x17\xc6\xf1\x31\xdc\xc8\x4e\x84\xf8\x2e\x94\xc7\x7f\x04\x95\xc0\xa9\xe4\xff\x9e\x17\xfc\x86\xb7\x42\xbf\x5c\xea\x89\x22\x4e\x37\x12\xd4\x57\xf6\x92\x32\xee\x26\xa6\x4a\xfa\x03\x12\xd1\x8a\x2a\x3b\x09\x75\x7f\x58\x00\x13\xf0\x2c\x4c\xf6\x6e\x18\xe7\x7c\x52\xe7\x25\xe4\xb6\x22\xf0\xba\x59\x88\x6e\x98\x1b\xde\x5d\xb9\xf9\x84\x85\x02\x9c\x09\x21\xda\x82\x8c\x4e\xf2\xab\x30\xe1\xaa\xfe\xa0\x68\xa1\x69\x68\x77\xf4\x6f\x8e\xb1\xc9\x21\x8b\x5c\xb9\x04\x82\x49\x4e\x07\xa5\xfc\xe0\x58\xf0\xe2\xa1\x6f\xec\xfe\x30\x8c\xda\x06\x79\x77\xb2\xd9\xed\xd5\x79\x47\x74\xb2\xbc\x3f\xa5\x20\x7a\xe3\x9c\x67\xbd\xb2\xdb\x53\xd6\x3a\x58\xb8\xf8\x85\xb3\x5e\xdf\x5e\x63\x2f\x62\x4f\xd1\xd9\x02\x91\xc2\x7d\xc1\xdd\xf3\xba\x1c\x39\x0d\x67\x95\x57\x55\x64\xb7\xb4\x6e\x48\x4b\x80\xa2\x2b\xdd\xe2\x5b\x61\xee\x74\xc0\x1b\x3c\x76\x38\x8a\xb7\xe2\x22\xcb\xfd\x57\xee\xd3\x9f\xf1\xec\xaa\x43\x36\xe5\xb4\x4e\xdd\x40\xc4\x65\x54\xd9\xeb\xce\xa9\x5b\x17\xd3\x8c\x07\x27\x03\x76\x1b\xd3\x1d\xe1\x4f\x05\xdf\xa0\x1c\x89\x66\xad\x13\x3f\x23\x6f\x32\xbb\x25\x5f\x76\xa9\xf6\xc5\x16\x48\x01\x5b\x27\x1b\x67\xe5\x5f\x20\xb5\x7e\xe2\x48\xf0\xcd\xfa\x97\x2b\x9c\xc2\xe3\x9d\x1d\x89\xde\x77\x20\x8b\xee\x5b\x16\x6d\x29\x51\xf4\xc1\x20\x88\xaf\xca\x13\xab\xce\x6e\x66\x93\x23\x85\xd0\xca\x68\x1f\xc8\x95\x07\x4e\x58\x58\xd0\xe3\xde\xb7\xee\x2e\x52\xde\xe5\xdf\xa1\x45\x4a\x9a\x49\x15\x19\x52\xef\x1a\x55\xf7\xa1\xff\xd7\x73\xa4\xc4\xa1\xf4\x55\xa4\x16\xf9\xa4\x17\xdc\xe9\x3c\xd1\x56\x88\x01\x3f\x09\xad\x20\x1b\xca\x7d\xf6\x6a\x8f\xbd\xaa\xca\x0e\xd7\xbb\x36\x72\xb8\xd3\xfb\x22\x87\x6b\xb0\x1f\xac\x3b\x0e\x9d\x16\xa9\xe8\xfc\xea\xe2\x42\x1e\x6f\x89\x1c\x08\x9c\xbe\xfc\xac\xe0\x16\xe7\x89\x56\x4f\x51\x58\x82\x15\xa9\xa0\xd3\xb9\xad\x7e\xcf\xb3\xd8\x23\x13\x9a\xc0\x7f\x3e\xec\x86\xcd\xb8\xec\xfb\x7f\x71\x28\xf8\xc3\x43\x8b\x2d\x85\x7c\x57\x82\x01\xa4\x92\xc8\xc1\xd4\x08\x71\x61\xce\xaf\x2e\x6a\x2e\x27\x28\x8d\x6f\x87\xf2\xfc\xee\x66\x91\x8d\xf9\x5d\x66\xb2\x57\x8a\x58\x01\xc0\x69\x16\x5f\x95\xb5\xce\x90\x72\x89\x44\x37\xc9\xfa\x20\xa0\x13\x66\x24\x08\x35\xeb\x24\x48\xca\x3c\xe7\x57\x17\x57\x2b\x15\xa4\x1d\x8f\xc4\x1a\x53\x6d\xad\x22\x23\xf7\x9e\x66\x5b\x34\x37\x15\x7d\x96\x22\x62\x8a\x3b\x1d\x11\xc5\x61\x29\x92\x3e\x6a\x90\xb1\x0e\xe8\xde\x85\xd5\x82\x9d\x05\x91\x0b\xc3\x42\xd4\x8d\x94\x0e\xbe\x2a\x62\x5b\x5f\x3c\xa0\x02\xf2\x50\xe1\xeb\x31\x06\xcb\x43\x2b\xba\x61\xaf\x10\xbc\x97\x96\x71\x32\xa2\xb1\xed\xb0\xe0\xdd\xde\x7a\x12\x17\x6d\x79\x4a\x65\x1d\xc1\x8b\x5e\x0c\x64\x70\xa3\x1b\xdc\x60\x6c\x2e\x81\x93\xab\x8c\xb7\x44\xd2\xaf\xdb\x99\x53\x2b\xb1\x0c\x25\xf2\x19\xb7\x28\x50\x99\x4b\xa9\x13\x44\x57\x84\x4e\x29\xd5\x47\xad\x24\xee\x62\xbc\x76\x29\x47\x56\x76\xca\xc0\xc8\xd9\x0a\x48\x59\xfb\x75\x21\x52\xd3\x04\xe8\xf0\xe1\xdc\x76\xf4\x06\x0e\x14\x79\x59\x54\x76\xe2\x94\x68\xbd\x8c\x51\x76\x5b\x85\xf3\x0e\xe9\x01\x62\xcb\x02\x77\x3f\x1c\x48\xb4\x49\x47\xe6\x6a\x30\x44\x28\xff\x93\x09\xf6\x14\x80\x6f\x27\xa3\x64\xe1\xff\xee\x44\xf0\xa7\x87\xd6\xec\x47\x15\x08\x19\x39\xd3\xa9\x4b\xd1\x3e\xdd\xcd\xa2\xe2\xb8\xd6\x9a\xaa\x2b\x13\xe4\x5a\xc8\x3e\x8c\x0b\xbc\x3e\xc0\x49\x89\x4b\xa4\x85\x58\x54\xf2\x5a\xaa\x09\xd2\x2a\x40\xf5\xfc\x05\xbd\x75\x91\x88\x52\x4d\x98\x82\xd4\xfd\x94\x6d\x4a\xec\x64\x52\x6e\x15\x97\x4b\x75\x99\x94\x95\x5b\xca\x22\xb1\x8c\xfd\x4e\x57\x33\x79\x95\xa4\x60\x0b\xab\xf6\x24\x14\x75\xc3\x9c\xc6\x7b\x0b\x6f\xf6\xb8\x7f\xa2\x93\xa2\xac\xb3\x53\xd0\x2c\x0f\x9a\x85\xd9\x99\x94\xff\x9b\xe3\xb5\xde\xc0\x4a\x06\xb3\xfc\x65\x8c\xf3\xe0\x9e\xb0\x17\x01\xb8\xd7\x69\x7a\xc2\x79\x00\x29\x82\x59\x7e\x0f\xfc\x71\xba\x8e\x4f\xc5\xe5\x6e\x8c\x6a\x84\xb5\xb8\x23\x8a\x32\xec\x74\x65\x1a\xf3\x18\xac\x1d\xf0\x5c\x36\x78\xe5\xde\xf9\x53\xa7\x4e\xdd\x05\x5f\xbf\x5c\xfe\xa7\xd1\x68\xb0\x97\x33\xb6\x94\x95\x62\x96\xcf\x51\xa9\x32\xa5\x08\x9b\x6d\x6e\x0f\xaa\x65\xa8\x34\x54\x91\xe0\xa8\x53\xa2\x33\x47\x96\x0a\x83\xeb\xef\xe0\x46\xf2\xb5\x0c\x5c\x3d\x00\xe1\x0b\x16\x3b\xa6\x0b\x5b\x72\x6d\x40\x5d\xfb\x75\xe5\xaf\x5f\xac\x08\x5a\x02\x6a\x29\xf5\xc8\xc3\xa6\xcc\xe3\x8d\x0d\x91\x0f\x19\xad\xae\xc8\xe3\x2c\xc2\xfb\xff\x90\xc5\x41\xf3\x7c\xb7\xe5\xe1\x8c\x08\x34\x7d\xd8\x12\xb9\x26\x82\x6b\xbb\x23\x1f\xf7\x6e\x1a\xa9\x81\x3f\xea\x1f\x0e\xcb\xac\x13\x37\x19\xfb\xb3\x09\xf6\x0c\x9c\xfb\xe7\xe2\x96\x68\xf6\x9b\x89\x38\x9f\x45\xa2\xf0\x3f\x39\x11\x7c\xcf\xc4\xb0\x37\x5a\xfa\xdf\x06\x7f\x4d\xc2\xb5\x51\xfb\x2a\x88\x88\x83\x67\x0e\x29\x78\x8a\xca\xd2\xa7\xb3\x96\x6e\x29\x38\x9a\x71\xc1\x03\x43\xe7\x17\xd4\xe9\xd6\x4b\xe7\x68\x0f\x2c\x5f\x16\x2b\xa1\x5a\x5c\xee\x01\x0b\xbb\xa4\x0a\x40\x42\xb7\xd0\x17\x18\x3e\x67\x65\x45\xee\x15\xbd\x30\xe1\xcb\x17\x67\x96\x2f\xce\x1b\x2f\x17\xac\x23\x46\xce\x77\xb2\x08\x86\x25\x38\xdb\x6d\x8b\x8e\xc8\xc3\x24\xa0\x23\x06\x36\x8f\x48\xd4\x75\xcb\xe5\xbd\xdd\x78\xa1\x02\x4f\x21\xc1\xeb\x52\x6c\x1e\x54\x11\x77\xf7\xf9\xd5\x45\x87\xc3\xd0\x5c\x95\x13\xd5\xd7\xd0\x60\x02\x35\x51\xca\x34\x7c\x01\x12\x4a\x58\xa2\x42\x6d\x4e\xf5\x70\x1b\xef\x4a\xeb\x82\x87\xdb\xa1\x72\xa7\x8a\xe5\x6e\xdf\x84\x33\x2d\x36\xf0\x32\x1b\x19\x9d\xf8\x1b\xa2\xe4\xe1\x88\x6d\x09\x03\x7d\x7a\x40\x0b\x89\x4d\x44\x5a\xd7\x8e\x92\x67\x5d\x9b\x96\xc3\xda\x6a\xf5\x4e\x21\xc4\x10\xa7\xb4\x69\xb9\x55\x6d\xc4\x65\xbb\xb7\xae\xfd\xd3\x84\xea\x61\x20\x4d\x49\xa6\xa9\x5f\x1b\xed\xb2\x93\x98\x66\xca\xc5\xaa\xb5\x85\x03\xde\x63\x85\x80\x62\x91\x03\x08\x9e\xe3\x4f\x82\x45\x44\xcb\x32\xed\xc8\xc8\xef\x59\x25\x89\x94\x4b\x79\x87\x23\xd1\x5e\x96\x4f\x61\xc7\x1c\x27\xfe\x1d\x2d\x5e\x85\x28\x19\xfb\xad\x43\xec\x46\x44\x35\x52\x97\x7d\xff\xfd\x87\x82\x9f\x3c\xe4\x3e\x73\x8e\xb5\xa1\xab\x89\x74\x20\xa8\xbe\x43\xee\x4e\x4d\x78\xc4\x27\xed\x11\x37\x31\x78\x6a\x9d\x18\x97\x2c\x67\xcc\x27\xa7\xe4\x9d\xa5\x9d\x45\x53\x75\x9a\x8d\x24\xee\x59\xcb\x86\x8a\x8a\x04\xfc\x63\x79\x92\xa9\x5b\xbc\x22\x1a\xa5\x84\x5a\x9d\x4a\xe1\xc9\x0a\x30\x59\xca\x76\xa4\x3c\x80\x14\xa1\x66\x7c\x55\x42\x38\xf8\xfa\x87\xf2\x22\x69\x44\xb1\x2d\xa3\xcd\x54\xc0\x50\xeb\xa2\x25\xc7\xb8\x9b\x67\x4d\x21\x14\xe2\x91\x3a\xd2\xcd\xb1\xaa\x80\x20\xa7\x15\xbf\x2b\x6f\x66\x59\x1e\xc5\x29\xf4\xb1\x5a\x90\x95\x3e\x96\x55\xc0\xeb\xea\xce\x55\xd5\x7b\xfb\xc0\x40\x80\x8d\x1f\x51\x38\x15\x88\xb8\x91\xf9\xb5\xc6\x50\xed\xfd\x1b\xf2\x7c\x37\x07\x80\x26\xb8\x32\xaa\x64\xad\x51\x54\x6a\xcc\xfa\xf0\x72\x41\x2e\x59\x17\xbc\xd8\x04\xd9\xd0\xc6\x3b\xd9\x31\xbd\x1c\xbe\x1d\xe5\x41\x47\x40\xfb\x6c\x8d\x3d\xa5\x55\x80\xf6\x17\xc1\x5b\xfc\xdf\xaa\x05\x1f\xa8\x2d\xd0\xe1\x40\x5b\x3b\x20\x4a\x27\x7d\x4b\xc2\x52\x27\x81\xa1\xd7\x33\x4a\x7f\xd9\x66\xa3\xb9\x55\x57\x31\xa5\x88\xc6\xc1\x46\x00\x43\x52\xfb\x36\x38\x60\xc1\xa9\x3d\x52\xc7\x7e\xdf\xbb\x6a\x55\x4c\x45\x24\x80\x67\xaf\x61\x44\x26\xc7\x89\x1d\x58\x62\xeb\x57\x41\x13\xab\x46\x17\x57\x93\x5b\xbe\x3d\xc4\x3b\x76\xaf\xd1\x4d\xfc\xd4\x31\x76\x63\x37\x8b\x16\xd3\x56\x76\x7f\x7a\x1e\xfc\x3f\xbf\xff\x58\xf0\xcf\x8f\x55\x2f\x80\x6e\x9a\xab\xd9\x39\x4c\x47\x20\x9f\x93\xd9\xd0\x27\x21\x7e\xa7\x9b\x45\x4b\x61\x07\x8b\xb8\xb0\xb8\x80\xd4\x4e\x53\x0a\x05\x16\xed\x3d\x16\xcb\x1a\x37\x35\xa3\xb9\x59\xcd\x16\xa6\x19\xe9\x81\xa4\xd4\x0c\x7e\x50\x98\x51\xc3\xb6\x13\xe0\x65\x60\x40\x26\xd6\x2a\xd7\x4a\x93\x43\x13\x21\x32\x70\x59\xc3\x65\x07\x1d\x35\x28\xb4\x57\xeb\x17\x16\x57\x21\xb9\x4f\x4e\x8d\x90\xdd\x41\xf1\x59\x74\xe5\x55\x5a\xc1\x38\x48\x39\x5e\xb9\x31\x6f\x69\x1b\x1d\xe4\x6d\x97\x4f\x7d\x12\x0f\xd6\x84\x40\xec\x07\xe5\x7e\x59\x4b\xb5\x7a\xd5\xe7\xad\x81\x39\x51\xd8\x53\x86\xa6\x3b\x2a\xa9\x80\x2b\x7b\x23\xcf\xb6\xd1\xdf\x1c\xe4\x14\xe0\x4f\xd7\xb9\x4a\xa1\xb8\x31\xf4\x66\x21\xa5\x8f\x34\xec\x88\x60\x16\x04\x11\xc0\x11\xdc\x29\x1d\x44\xd4\x5a\x89\x31\xc2\x76\xd4\x17\xbd\x38\x0a\x66\x49\xb0\x9f\x94\x0f\x2e\x2c\x2e\x4c\x0d\x4d\xad\xc5\x86\x60\x96\x07\xb2\x85\x81\xda\x7b\xac\x03\x23\xe5\x3a\x99\x4b\xdf\x0d\xd7\x9b\x9d\xfe\xe7\xf0\x5f\x57\xc4\xb6\x3a\x0a\x89\xb0\xb3\x06\x30\x6d\x03\xc6\x76\xae\x23\xde\x17\xe4\xdd\x44\xcb\xfc\x8e\x64\x7a\xb2\x71\xf2\x76\x07\x0a\xd0\x31\x77\xe0\x1c\x2b\x14\xaa\x17\x89\x41\xeb\x19\xe9\x0b\x6c\xb1\x19\xfd\x4c\x8d\xd4\x4a\x93\xc6\x11\xe5\xe9\x64\xd0\xd9\x4a\xd9\x2a\x11\xe1\x96\xd0\x6b\x83\x47\x71\xa1\x8f\xa3\x99\x2c\xe7\xf1\x46\x8a\x7c\xfa\x6a\x0b\x6b\xf0\xb9\xa2\xd2\x80\xdb\x00\x8c\x31\x3d\x6e\xcc\xba\x26\x79\xdd\x29\x0c\x5a\x68\x4b\x73\x20\x6e\x5b\xaa\x1d\xdc\x23\x48\x0a\x25\x88\x3a\x7d\x32\x5a\x4a\x99\x48\x94\xf2\xd8\xc0\x5b\x89\xec\x9b\x0e\xc2\x49\x42\x6c\x58\x1d\x8d\x42\x97\x43\x79\x16\x83\xec\x1f\xa2\x45\x2d\x8d\x38\x4c\x05\xcd\x5f\xaf\x63\x10\x50\x97\xb4\xc7\x93\xf0\xbf\x8f\xb1\xa7\xe7\xd5\x5b\xa5\xff\xa7\x63\xc1\x67\xc6\x06\x2f\x9b\x23\x55\x16\xa8\x95\xbb\x34\xb0\xd3\x5c\xa2\x13\xcf\xbe\x7c\xd2\x51\x0d\xf1\x20\xa2\x95\x20\x7f\x6d\x9f\x77\xb3\x02\x77\x1d\x74\x8b\x54\x1b\x98\x32\x91\x2a\x29\xde\x6a\x54\x34\x60\x19\xd5\x97\x74\xb8\x34\x87\xb2\xef\x9b\xa2\x28\x5a\x3d\xb9\x70\xe2\x32\x0e\x93\x11\xf7\x85\x3a\x62\x3c\x3c\xdc\x93\xe3\x01\x7b\xa3\xcc\x74\x30\x2d\xc9\x8a\x30\xf4\xca\x23\x12\x7d\x4a\x4b\x0b\x67\x42\x57\x76\x49\x6c\xd3\x61\x03\xb6\x86\xc2\x39\x46\x0a\x21\x52\x5c\x99\x2a\xac\x42\x9b\x0f\x9f\xf8\xfb\xb9\x35\x03\x5e\x77\xc4\x71\xac\xd4\xc1\x04\x7a\x82\x82\x55\xee\x3f\x1e\x0e\x26\xdd\x47\xae\x51\xc8\xbc\x1b\x61\x98\xfb\xe8\xc4\x81\x61\x6e\xbf\x86\xb9\xb6\x32\xcc\x7d\x7b\xf0\x8d\x1a\x22\x41\x2b\x21\x2a\xa3\x60\xdf\xf6\x66\xd8\x34\x7b\xd6\xee\xf1\x23\xfa\xeb\x03\xd3\xdc\x3e\x4c\x73\xeb\x96\x65\xee\xe2\xfe\x0c\x73\x5f\x3b\xc2\x30\xf7\xb8\xf7\x2d\xbb\x1b\xcc\x6e\xf3\x4f\x8d\xe0\x90\x70\xd6\x71\xd5\x58\xf6\xef\x8e\x3a\xfb\x81\xb6\x4b\xc5\x9d\xb8\x04\xc7\x6a\x39\xf3\xfc\x77\x1f\x0d\x56\xdd\x47\x7a\xfd\x1a\x77\x6b\xd4\x77\x25\x32\x19\x5e\x60\xd2\x7e\x85\xa2\x49\xa1\xf7\x64\x29\xd4\xad\x31\x0c\xf1\xea\x23\x47\xd8\xa7\x6b\xec\x19\x9d\xf0\x32\x16\x88\x53\x60\x45\x6e\x00\xfe\x2f\xd7\x82\xff\xe2\x9d\x1f\xf2\x46\xca\x51\xfa\xd2\x59\xd7\x31\x5e\x91\x05\x6e\xd5\x2b\x4a\x0c\xe4\x0b\xb5\xd7\x39\x9e\xaa\xb2\xba\x3a\xe6\x0d\x04\x94\x34\x4b\xa7\x5f\x2a\xf2\x8c\x42\xcc\x31\x09\x10\xe9\xa3\x74\xa5\xbe\x97\xc2\x29\x38\x0f\xb5\xe5\xae\x94\x73\xf1\x70\x2f\x4c\x34\x4f\x90\xa2\xd2\xa0\x4d\xe4\xee\xca\x8e\x86\x4b\x59\xf6\xdb\x7a\x2f\x2f\x4a\x13\x8e\xe6\xd4\xbb\xf1\x4e\xef\x39\xec\xd9\xfb\xf2\x01\xb1\x43\xc8\xbf\xd3\x43\xb7\xf4\xc7\xbc\xe0\xd6\xf3\x71\x4a\x43\xd6\xcc\xd2\xa2\xcc\x01\xb2\x19\x99\x37\xe2\x02\x95\xa5\xeb\xd6\x00\x82\x67\xd5\xf5\xad\xcd\x1c\x85\x2b\xdd\x15\xd4\xd7\x28\x58\xc9\x9d\x2f\x25\xca\xff\xb2\xfb\x11\x37\xb9\xd0\xc4\xb8\xb4\xfa\xfe\xa5\xc7\x0e\x93\x64\xe0\xbf\xc3\x0b\x1e\x50\x97\x33\x07\x8b\x8e\xd0\x87\x28\x27\xdc\xcd\xaa\x4d\x93\x33\x48\x3f\xc0\x84\x72\x3f\xeb\xc4\xa5\xdc\x69\xae\x6f\xbb\x7f\xd7\x63\x37\x52\xa5\x69\x12\xfb\xbf\xea\x05\x0f\x2f\x38\x8f\xd4\x66\x1f\xed\xd4\x22\x35\x13\xf7\xd0\x26\x6b\xd2\x3e\x31\xad\x82\xb9\x15\x5e\xc6\xb9\xa5\xb7\x83\xaf\xd6\xdc\x7a\xec\x46\x56\x1f\xc6\x33\xad\xaf\x1d\x74\x33\x4d\xc2\xb8\x03\xe6\xf0\x7f\xfb\x94\xe0\x15\xde\xc8\xd7\x56\x74\x22\x8a\x80\x9d\x8e\x0b\x87\x98\xb5\xb4\x35\x33\x12\xe8\x57\x07\xa6\x20\x04\x2d\x0e\xf9\xaa\xc1\xbf\xa3\x48\x95\x7c\x5a\xeb\x80\x4c\x3e\x2e\x83\xee\x0d\xec\xa3\x1e\x3b\x86\x2e\x8a\x68\xea\xf8\x80\x17\xfc\x88\x37\x67\x1e\xb8\xfe\x01\x84\xa7\xa0\x9c\x1a\x3b\x59\xe4\x68\x04\x95\xa4\x24\xb7\xc1\xab\x0e\xc5\xa6\xd6\xcd\x74\x75\x17\x29\xb5\xf7\x4d\xc4\xfa\x06\xc5\x4d\x9f\x1c\xad\x77\x66\xbf\x37\xce\x98\x3c\xd1\xc8\x47\xf7\xd7\xc7\xd9\xec\xae\x1e\x12\x72\x67\x88\x80\x7f\xa6\xc2\xa8\x10\x7c\xc7\xb8\x75\x3d\xa8\x58\xc6\xb0\x6b\xfb\x84\xda\x32\xcb\x6f\xe6\x73\x56\x84\x16\xdd\x8c\xd3\xb0\x5b\xb4\x33\xe5\x62\xc6\x27\x0b\x7a\x50\xbd\x13\xbb\xc9\xa7\x2a\x99\x2d\x5f\x9c\xe7\x93\x43\x27\x4e\x35\xe5\x50\xda\x42\x4b\xef\x0d\xd8\x34\xdd\xac\xdb\x4b\x48\xbb\x35\x97\x74\xdb\xe1\x94\x14\x73\xb2\x3c\x42\xdd\x61\xaf\x18\xe0\xb7\x83\x30\x96\xa2\x92\x5b\x35\x33\x3c\x14\xe7\xd2\x3e\xd6\x6f\x41\x8f\x82\xab\xd5\x55\xf4\x82\xda\xfc\x4d\xca\x60\xe3\x42\x9c\xeb\x70\x37\x92\xa2\x2d\xe5\xba\x6d\xf1\xb0\x94\x9c\x10\x3b\x5e\x86\x5c\x07\x3f\x92\x2a\x88\x22\xb2\x43\xcb\xdb\x81\xaf\x87\xa4\x6d\x1b\x76\xd3\x1a\x9a\x5f\x83\xfd\x07\x8f\x1d\xd5\x12\xb4\xff\x09\x8f\xdd\xb6\xeb\xac\x52\x3e\xa3\x16\x38\x5d\x11\x7c\xbf\xa7\x29\x5d\x07\xce\xe9\x38\x8d\x3b\xbd\x8e\xe5\x40\xfa\xc4\x2f\x2b\x5d\x16\x7b\xcc\x63\x47\x14\x56\x9f\xbf\x7d\x1d\x60\xd8\x4f\xcd\x11\x7c\xfa\xc3\x3d\x91\xf7\x79\x26\x6f\xf5\xda\x2c\x6a\xb9\xd7\xc8\xed\x8a\x9c\x4e\x1a\xec\x27\x3c\xf6\x34\xe5\xc5\x93\x84\x45\x01\x6e\xaf\xc0\x18\x62\x33\x73\xac\x5a\x29\x8c\x4a\x88\xac\x9f\x4d\xb9\x2c\xae\x67\x1f\x35\x65\x31\x72\xcf\x31\x9b\xcc\x0f\x7b\x8c\xe1\x6b\xb9\x43\xfa\xdf\xed\x05\x8f\x78\xe6\xb7\x6b\x12\x56\x31\xd2\x46\xff\x36\xa2\xc6\x17\x15\x90\xd1\xbd\x71\x22\x90\xa4\x0b\xd5\x2c\xc8\xe6\x00\xb7\x72\x79\x3b\x21\xec\x5c\xd0\x8d\xc2\xa7\x88\xcb\x61\xd7\xef\x21\x55\x3d\xe8\xbf\x6f\x0d\xee\xbf\xa8\x7f\xa9\x33\x5f\xf9\xf9\x68\xef\x77\x25\x54\x56\xb7\x19\xbe\x1e\x36\x37\xb5\x19\x13\xeb\x6a\x97\xf5\xe1\x71\x36\xb5\x87\x53\x90\xbc\xe1\xde\x34\x1e\x2c\x0c\x7f\xa5\x2a\x36\x0c\x38\xc8\x8c\x8a\xd2\x84\x38\x87\xd8\xaf\x8e\xb1\x87\x4c\xd0\xe8\xb7\x07\x2b\x73\x18\x23\x3a\x3d\x10\x23\x6a\xc5\x44\xbb\x91\xa2\xdb\xed\x7e\x45\x4b\x1a\x93\x24\xa1\xb0\x13\x4c\x8b\x3f\xe0\xb1\x43\xdd\x76\x58\x08\xff\xbd\x5e\xf0\xe3\xde\xb2\xfc\xd3\xd2\x64\xc5\x2d\x6d\x23\x86\x2b\xae\xd2\xab\xd4\xf9\x7a\xd6\x4b\x89\x96\x03\xfa\x11\x30\xb0\x72\x91\x88\xb0\x50\x3a\xd5\xeb\x3e\x7b\xa1\xa2\x76\xed\xdf\xe8\x69\xa4\x82\x57\x7b\xc1\xcb\x56\x08\xaa\xc0\x60\x14\xe8\xeb\xae\x13\x25\x61\x41\x27\xa4\x7d\x88\x22\x57\xda\xa3\xb8\xe0\x1d\x11\xa6\x78\xbd\xa0\xed\xc1\xd1\xf2\x97\x71\xd4\xe7\x51\x5c\x74\x13\xb8\x9f\xa3\x6a\xe9\xdc\xa2\xd3\xa7\xbf\xfb\x8c\xbd\xb2\x92\x80\x24\xf5\x13\xcf\x08\x9e\x33\xf0\xd4\xc4\xe7\x8e\x70\x31\x74\xbe\xb8\xe2\xd9\xd4\x13\xce\x7c\xfa\x8d\x7f\xc4\x7e\x67\x9c\x4d\x08\x70\xc2\xf4\x3f\x32\x1e\xfc\xf5\x98\x8a\x9f\xc3\x67\x3c\xef\x25\xa2\x18\xa4\x5b\xc1\xb8\x6b\x62\x5b\x40\xfc\xe1\xfb\x7b\x25\x39\x18\x10\x31\x8a\x89\x5e\x27\xcd\xbc\xec\x46\x80\xb6\x71\xea\x17\x6b\xe2\x06\xa5\x0b\x01\xa8\x29\x20\xd6\x23\xcd\xaf\xa2\x45\xd0\x5a\x77\x92\x04\xc1\xff\x0a\x4b\x9b\xaa\xf3\xfb\x57\x94\x05\x40\xd5\x40\x5d\x91\x35\xae\x4f\x96\x0a\xbb\x61\x36\xc4\xb0\x82\xa8\xb5\x7b\xce\xb8\x2d\xb6\xb3\x02\xea\xa5\x23\x22\x54\xd6\x54\xdf\x21\xd4\x0c\xe8\xd5\x42\x84\x17\x71\x51\xc9\x19\x6e\x45\x54\x72\xb5\xe3\xa0\xed\x60\x6b\x2c\x78\x91\x25\x22\x01\xbe\x1b\x91\x16\xbd\x5c\x18\x03\x3d\x40\x21\xdb\x3c\x1c\xa0\xa8\xcc\x92\x90\x08\x30\xe8\xae\x33\x35\xcc\xd3\x01\xed\x9c\x72\x8a\x9e\x6c\xdc\x69\xcb\x98\x67\xd8\x73\xd9\xe9\x6b\xe1\xb7\x3f\x0b\xbd\xba\xd2\x4b\x04\xfb\xe3\x71\x76\x38\x46\xbf\x5e\xff\xd3\xe3\xc1\x2b\xc7\xd5\x94\xa2\x87\x57\x31\xa7\xd6\x06\xa7\x12\x6c\x2a\x60\xa7\xf8\xea\xcc\x29\x12\x13\x63\x3d\xf4\xc7\x0b\x0e\x8e\x2b\x80\xf8\xb3\xe7\x59\x68\xf7\xc5\x57\x71\x1a\x6a\xfa\x2c\xe4\x34\x92\x3b\xde\x13\x33\x0b\xed\x49\x36\xcf\xe6\xd8\x73\xae\x65\x92\x91\xb7\x38\xcc\xb2\xcf\x56\x18\x75\x3e\x7a\x3d\x18\x75\xbe\x63\x6c\xd5\xa2\x85\x41\xd2\xab\x4c\x93\x77\x0d\xf4\x1e\xdd\x75\x48\x9d\x82\xe6\x5a\x64\x3d\x1f\x98\xed\x71\xe1\xb0\x55\x21\x85\x99\xcb\x58\x63\x1b\xd7\xce\xab\xe8\x30\xea\x0d\x9c\xae\x72\x5a\xc3\xb5\x00\xbe\xc2\x05\x23\x25\x1d\x82\xe6\xc4\x35\xa3\xbc\xd4\xd0\x11\x1a\xad\xcd\x76\x4d\xc0\x28\x16\x36\xdb\x30\x54\x48\x53\x25\x6f\xb9\xe0\x17\xb0\x25\x92\x7e\x75\xbf\x58\xba\x7f\xcd\x84\x59\xc9\x39\xb1\x67\xf2\xa0\x06\x5c\xd8\x60\xfe\x0d\x9b\xb3\x8a\x38\x48\x0b\x20\x86\xec\x96\xbd\x6b\x42\x8e\xae\xec\x64\x79\x65\x2d\xfc\x1f\x9e\x08\x1e\x99\x50\xfb\x08\xac\x19\xeb\x9e\x36\xb8\x60\x72\x91\xa0\xad\x2d\x53\xac\x64\xd8\x02\x9c\x9f\x2f\x09\x68\x22\x05\x0f\xd6\xf9\x4b\x82\xb3\xfa\xef\x2c\xb7\xde\xd5\xb9\x7e\x33\x64\x59\x41\xf4\xaa\x51\x92\xaa\x5b\x98\x52\x30\x39\x37\x2f\xb8\xb3\x82\xe4\x99\xb5\x54\xc4\x83\x2c\xeb\xac\x35\x2c\x77\x9b\x11\x26\x02\x7e\x50\x45\xc8\xcb\x21\x25\x2b\x88\xd3\x1c\x28\xc4\x8a\xa2\xd7\xa1\xa9\x84\x84\x6d\x98\xa8\xae\xf4\x24\x26\xb7\x49\x05\x81\x0f\xc4\x12\xd0\x59\x7d\x3b\x77\x55\x1f\xca\x7e\x6a\x44\xfe\x2a\x50\x43\xf6\x44\x3f\xeb\x81\xd9\x12\xd6\x46\x1e\xcb\x5b\x67\x4a\xc7\x2a\x45\x61\xc2\x28\xd4\x21\x21\x5c\x82\xc5\xe5\xae\xac\x4e\x99\xf4\xb5\x32\xc1\x1a\x5d\xfe\x12\xdd\xd5\xfc\xc1\x06\x3f\x17\x6f\x0a\xb9\x23\xd7\xe5\x46\x3a\xa4\x2c\xb5\x75\x23\xe6\x9c\x15\x92\x17\x96\xf2\x1c\xa0\xf3\xdd\x1c\x19\x56\x3d\x54\xe1\xa1\x53\x3c\x2a\xfc\xf0\xca\x8f\x57\x0e\x53\x9f\xc9\x22\x96\x03\x47\xa6\x68\x2a\x79\x5b\xe3\x19\xa9\xf4\x43\x86\x29\x8d\x28\x9d\x39\x62\x2c\xf6\xfb\x87\x64\x75\x5e\xc2\xf5\x6c\xe3\x0f\x5e\xdd\x41\x5d\x51\x06\xfd\xc8\xd7\x6a\x6a\xa7\xab\xc0\xfa\x40\x08\x03\x0b\xca\x44\x4a\x9c\xbf\xfb\xcc\xe0\xc7\x3d\xf7\x99\x51\x8c\x55\x11\xe1\x93\x8c\x2e\x19\xc8\x83\x0c\x56\x21\x7a\x02\xfe\x75\xa1\xe2\x26\x46\x76\x3c\x10\xf1\xc1\x33\x05\x15\x1b\x68\x5f\x00\x0a\x4f\x39\x46\x30\xf5\xc0\xa9\x4a\x7b\x20\xd8\x90\x4d\x7c\x4b\xe4\x5a\xd0\x6d\x5c\xf1\x9e\x01\x16\x9a\xe5\x3c\xce\xf2\xb8\xec\x9f\x47\xad\xc2\x15\xef\xa9\x64\x93\x51\x2f\x1c\x89\xf7\xbf\x3e\x83\x7d\x0b\x3b\x4c\x29\xfc\xf3\xc1\x73\x95\x09\x95\x0e\x74\x9b\xe4\x13\x6f\x45\x88\x2e\xd4\xce\x8a\xb2\x68\x70\x70\x85\x25\x97\x82\x3a\x0f\xb6\x4e\x3a\xfc\x9a\x5f\x3c\xcc\xaa\x85\xfb\x9f\x38\xac\xe0\xfb\x7e\xf1\xf0\x45\xf7\x9d\xd2\xf6\x50\x38\x69\x1e\x09\xb8\x85\x28\x7b\xad\x5d\x15\xf2\x28\x96\xc7\x4a\x59\xa0\x65\xaa\xc1\xf9\x79\x52\x30\x6d\x80\xee\x27\x47\xdb\xc9\x4b\x45\x9e\xe1\x51\xd4\xcd\xe3\x4e\x98\xf7\x79\x91\xe5\xa0\xaa\xd6\x9b\x52\xa5\x1e\x75\x2c\x5b\x44\xbc\x1d\x6f\xb4\x45\x01\x13\x54\x2e\x9d\xa2\xe4\x93\xb7\x9c\x50\x1e\x78\x27\x4f\x4c\x35\xf8\x2a\x2c\x87\xb8\x3c\x5e\x58\x75\x0a\xb1\x46\x64\x2b\x42\x08\x44\xd2\x21\x16\x1d\xf0\x11\xe8\xe6\xd9\x7a\xb8\x9e\xe8\x5b\xd1\xc9\x13\x78\x52\xc9\x43\x0a\x6e\x1b\x60\xed\x51\xad\xed\x62\xc5\x62\x51\xd4\x6d\x93\xb6\x83\xd9\x6c\xe9\x27\x9b\x59\xa7\xdb\x23\x7f\x02\xd4\xed\x51\xd5\x42\xd5\x53\xa4\x78\xab\xe4\x13\x17\x3c\x80\xd5\x92\xc4\x9b\x22\x30\x9b\x38\xf4\x57\xb8\x9e\x21\xf8\xab\x9d\xa6\x92\x43\xa1\x9c\xd4\xc1\xf1\x9a\xfa\x30\x11\x97\xe3\x66\xb6\x91\x87\xdd\x36\x85\x0c\xf0\xe0\x05\x03\x39\x14\x04\x5c\x44\xab\x24\xd8\x0a\x88\x1c\x4f\x66\x85\x27\xac\xba\x29\x53\x87\x4e\xa2\x89\xeb\xa1\x2c\x57\x79\x4c\xd1\x27\xea\x74\x4e\x08\x52\x0d\x5b\x17\x80\x47\x23\x22\xdc\xc9\x85\x1e\x10\xc9\x3b\x3a\xb8\x3b\x99\xc6\xa9\x95\x29\xcc\x9d\x02\xc5\xea\x02\xd6\x28\x6f\xc5\x79\x01\x21\x5e\xcf\x9b\xe3\xa7\xd1\xab\xe2\x34\x3a\x4c\xc2\xf1\x92\x0b\xf9\x02\x2e\xd6\xaa\x7f\xa0\x59\x69\xc6\x8b\x5e\xab\x15\x5f\xa6\xed\x13\xb7\x34\x50\x79\x82\x2e\x56\x79\x1c\xa3\x33\x87\x1c\xc5\x10\x9d\x0c\xed\x46\x52\x1b\x9d\x3a\xa2\x60\x41\x8e\x3d\x54\x47\x65\xc7\x57\xfd\x3b\xcb\xb7\x4e\x9e\xa8\xf3\xad\x5b\xea\x7c\xeb\xa4\xfc\x7f\xd8\xed\xe0\xd7\x09\xf9\xd7\xa9\x3a\xdf\x3a\x05\x1b\xa0\x7c\x74\x0b\xd4\x08\xd3\xc1\x9f\xb7\xd4\x79\x2b\xcb\x4e\xe2\x7f\x4f\xb8\x38\x52\x7f\xe1\xb1\x23\xcd\xf0\x4c\x2f\x8d\x12\xe1\x7f\xce\xf3\xc7\xd7\xfb\xa5\x08\xde\xee\xcd\xcf\xe1\x33\xec\x8a\xe5\xb3\xe7\xb9\x48\x9b\x59\x24\x22\x3e\x3f\xc7\xd7\xf1\x15\xce\x97\xea\x0c\xd6\x81\x3e\x0e\x44\xd4\x71\xdc\x7d\x40\xdb\x6d\x01\xd7\x11\x9e\x9a\x11\x3e\x48\x85\x56\xe6\x72\x3b\xc8\xb3\x4c\x59\x87\xe4\xed\x2a\x56\xcc\xdb\x39\x39\xf5\x39\xae\xeb\x7b\x0a\x15\x99\x57\xa8\x0f\xb3\xc1\x34\xa2\x3e\x58\x7b\x25\xbc\x41\x03\xd9\xc0\x76\x69\x6f\x8d\xef\x3d\xc4\x86\x6e\xd7\xfe\x9b\x0f\xa9\xfd\xf1\xd1\x43\xcf\xab\x26\x48\x7b\x1d\x7d\xd3\x52\x9b\x26\x14\x83\xc5\x5a\xba\x62\x7d\xbb\x6a\xf0\xfb\xe4\x26\x96\x9b\x0f\x3a\x22\x4c\x2d\x49\x71\x43\x35\xa1\xab\x19\xa1\xe5\xec\x03\x67\x89\x02\xb5\xb7\x72\xf1\x59\x19\x64\xa9\x14\xee\x97\xb2\x92\x84\x04\x5c\x41\x7a\x21\xab\xfd\x1a\x33\x46\xe7\x4a\x6d\x32\xd9\x12\x29\xee\xaa\x39\x1f\xda\x3a\xf2\x51\x86\x05\xa2\xab\x88\x2c\x98\x98\xdf\x86\x00\x10\x8a\xb6\xdb\xa8\x5d\x36\xf8\x81\xa2\x3a\xbd\xce\xe0\x2e\x4f\x7b\xc0\xe8\xcd\x1e\x70\xf2\x01\xfd\x78\x68\x29\x30\xc3\xe4\x62\x59\x17\xa5\xdc\xea\xd4\x12\x2e\x8c\x0f\x77\x6a\x29\xb3\x95\xab\x11\x9f\xdc\x3a\xd9\x58\x0f\x73\x55\xd4\xd6\xc9\x46\x2b\xcb\xa6\xf8\x03\xe2\x78\x04\x0e\x47\x9d\x8e\x48\x31\xc4\xb2\x04\x0a\x16\xb9\x71\xce\xf2\x9b\xc9\x82\xc4\x27\xc5\xe5\xa6\xe8\x96\x60\x34\x49\x61\x08\xa6\xe4\xe8\x9f\xbc\xf3\xc4\x89\x13\xb0\xa3\x2c\x87\xe1\xaa\x94\x7c\xef\xef\x8a\x74\xb5\x1d\xb7\xca\x3a\x5f\x10\x71\x81\xa2\xad\x2e\x00\x57\xde\xba\x76\x97\xbb\xe5\xc4\x89\x13\x85\xb3\xce\x3f\xe6\xb1\xaf\x89\xd3\x42\x34\x7b\xb9\x58\xdd\x8c\xbb\x6b\xe7\x56\x2f\x4a\x09\xa4\xef\xbf\xcf\x0b\x7e\xc2\x5b\x1c\xf6\x4a\xc9\x2d\x05\x5f\x3b\xb7\x3a\x52\x78\x41\x1d\xf7\x10\x79\xc9\x5a\x43\x24\x0e\x82\x62\x36\xcf\xd2\x8d\x04\xf2\x6e\x66\xbd\x3c\xdc\x10\x51\x83\xf3\x17\x65\x3d\xb5\x02\x7a\xe4\xe3\x6f\x76\xa0\xb4\x28\x45\x58\x71\x57\xfb\xbb\x1a\x3b\x4c\x81\x81\xfe\x7f\xae\xb1\x8b\xfb\x85\x8a\x73\x38\x86\x8c\x29\xf1\x7b\x6b\xf4\x08\xf7\xc1\x01\xbd\xbb\x0a\xcc\x44\x27\x0d\x12\x74\x54\x9b\xf9\x62\x89\xa2\xba\xe9\x1c\x81\x04\xd4\x79\xc9\x6f\xbd\xf5\x94\x3e\xcb\xad\x32\xd2\x38\xa9\x93\x4f\x0c\x2d\x75\xc1\xdb\x61\x1a\x41\x80\xb3\x72\x05\xd1\x9b\xd5\x96\x11\xf8\x20\x91\x3c\x3b\x32\x74\xaf\x74\x65\x3e\x9c\xff\x10\xdc\x82\x62\x41\xdc\xe9\xca\x41\x10\x89\xd8\xd0\x80\x8e\x52\x44\xc8\x3b\x61\x42\x79\xe5\xbc\xd9\x96\x17\x2b\x9c\x59\xad\x5e\xd2\x8a\x31\xb8\xe2\xbd\x37\xec\x4a\x88\x7f\x5f\x96\xc7\x2f\x95\x82\x76\xb2\x9c\x45\x73\x94\x80\xe2\xcb\xff\xfa\x58\xf0\xed\x3b\xbc\xaf\x58\xd4\x95\xe9\xba\xd5\x4b\x9b\x28\x1a\xc0\x36\x86\x1d\x37\x22\x9b\xc6\x15\xef\x46\xf8\x0b\x49\xf9\x56\x44\xeb\x8a\x77\xac\x13\x5e\x5e\x11\xf2\xea\x16\xba\xc6\xf4\x3f\x66\xec\xfd\xe3\xec\x30\x12\x95\x15\xfe\x3b\xc7\x83\xcf\x8d\xd1\x0f\xd7\x88\xee\xe8\xa6\x51\xf7\x40\xda\x14\xb4\xbe\x4a\xe9\x2d\x4c\x9a\xbd\x44\xf9\x83\xaa\xaa\xe7\x58\x2c\xc7\xd8\x5d\x92\x7d\x2e\x93\xd9\xd0\x7e\x65\xe9\xce\x54\x0d\xec\xd3\x75\xaa\xc1\x29\xf4\x70\x58\xbe\xa0\x26\xa1\xe2\x23\x05\xef\xd3\xd7\x70\xb6\xe0\x0d\xb5\x2e\xca\x6d\x41\x7e\xa2\x0e\x5b\x9b\xf2\x47\x56\x76\x1c\xed\x37\x62\x3f\x34\x80\xe0\xa8\x9d\xe1\x67\xf3\x8d\xac\xae\xab\x0a\x02\x00\xcc\xf7\x48\x34\x73\x21\xa5\xe1\x50\x2b\x9f\x4c\x25\xe3\x14\x5f\x12\xd6\x2c\x90\x70\xc9\x79\x1c\x36\x38\x5f\x15\x82\xb4\x3c\xe0\x55\x25\xe5\xe8\x41\xa2\x3f\xec\xfa\x11\x31\x7c\xed\x6c\x1b\x35\x42\xca\x82\x47\xdf\x43\xbd\x88\x56\xde\xf1\x89\xbc\x9b\xdd\x35\x1a\x36\x75\xe8\xdc\x46\xbe\x47\x39\x55\xd9\x5f\xd7\xd8\x31\x80\xd6\xc7\x79\xe5\x7f\x41\x73\x2f\xfe\x76\xcd\x7a\xae\xfd\x33\xe1\x2c\x36\x8e\x70\xa5\x83\x3e\x9f\xab\xd4\x96\x9a\x0e\x78\x36\x69\x56\xa3\xba\x4c\xfe\xc9\x23\x80\x8a\x96\xfb\x8b\xed\xfd\x7c\x12\xd5\xa6\xbc\x52\xb2\xa5\x6d\x5e\x17\xfc\x84\x52\xe9\xa2\xcc\xeb\x18\xf9\xef\x5b\x9e\x5b\x85\x65\x93\xbd\x58\xe4\x59\x35\x92\xcb\xd1\xf9\xa2\xcf\x05\x68\x7e\x94\xbd\x9f\x7a\x1a\x61\x61\x01\xb4\x0d\xb6\xf6\x55\xec\x3e\xa8\x49\xb3\x84\xc0\xe6\x82\x27\x19\x22\x49\x39\x79\x52\x06\x3a\x5a\x4c\x1b\xe1\x5c\x91\xf5\x3b\x6a\xac\xb2\xba\xfd\x2f\x7b\xec\xbe\xab\x1a\xc3\x79\xb9\xd0\xe8\xea\x58\x75\x1f\x79\x87\xe7\xe6\xae\xbc\xb6\x69\x8f\xa4\x75\xe3\x00\x1c\xc9\xf4\x3a\xd2\x4a\x07\x61\x2b\xb5\xab\xd9\x29\xd4\x52\x31\x01\xe2\xcd\x2c\x41\xad\x69\x5d\x76\xc7\xb6\x48\x12\x8e\x33\x20\x6c\x12\x5a\x33\x39\xc2\xc3\x22\xb6\x17\x7c\x83\xfd\x14\x10\xf9\xe9\x5d\xcd\x7f\x8b\x46\xd7\x7f\xcc\xb3\x9e\xeb\xb0\xe3\x6e\xf7\xfa\xcc\x3e\xb8\x85\x96\x16\x26\xb4\x72\x76\x2c\xed\xa9\xe7\x0e\xda\xaf\x4d\xb0\xd3\xbb\x10\xab\x8e\xd8\xcc\xcf\x88\x76\xb8\x15\x67\xb9\xff\xff\x1d\x0a\xde\xe2\xed\x92\xc8\x4c\x3d\xda\xb3\x69\xf2\xad\xab\xf7\x74\x70\xd0\x20\xc6\x29\x3a\x76\x5e\xc0\xb8\xbd\x85\x6c\x3b\xe5\x51\x9c\xa3\xda\xab\xe0\x93\x90\x39\xbd\x84\xbf\x21\x05\x91\x06\xc9\xdd\x44\x34\x51\xd1\x3c\xe5\xda\xb6\x7f\x77\x9c\xbd\xa7\xc6\x8e\xea\x4f\xfc\xb7\xd5\xd8\x3d\x57\x31\x41\x6f\x69\xd0\x52\x8c\xd3\x8d\x95\x5e\x22\x8a\xe0\x8f\x3c\x53\xbe\x3c\xd5\xa9\x5d\xa4\xc4\x83\x38\x67\x7a\xb4\x00\x7b\xc3\x62\x0b\xd5\xba\x44\x54\xaf\xd5\x75\x86\xb0\x33\x23\x3b\x89\x9a\xbf\xb0\xa9\x40\xf0\xa9\xb5\x7d\x20\xbf\x2b\x5d\xec\x4f\x9d\x38\x41\x22\xb4\xbc\xf0\xaf\x1b\x4e\xd9\xed\x38\x8d\xb2\x6d\x3e\x19\x37\x44\x03\x8b\x53\x62\xb9\x96\x50\x8d\x9a\xad\x54\x58\xd2\xa7\x4e\x9c\x28\x10\x5c\x06\x0f\x37\xf6\xc3\x52\xa6\xc3\x1e\xf7\xbf\x67\xbf\x1d\xf6\x09\x4f\x0d\xde\xce\xdd\x75\xa1\xbb\x97\xce\x52\x4d\x92\x13\x68\x96\x71\x7e\xb3\x3e\xc6\x78\x9a\xe1\x59\x04\x0a\xab\x5b\x71\xc5\xcb\x85\x76\xbb\xea\xac\x02\xd2\x47\x59\x4f\x85\x58\xba\xe7\x68\x35\xf1\x52\x56\xe9\x5d\xea\xa0\x06\xfb\xd0\x0d\x43\x01\xf0\x86\xba\x98\xf9\x6f\xba\x21\x58\x1a\xfa\x06\x25\xd9\x5e\x01\x77\x72\xe5\xfc\x89\x6e\xd9\x11\xb9\xa6\xa0\x5d\xb2\xea\xbe\xe1\xcc\xf0\x4f\x31\xb9\x0f\x2b\xba\x83\xbf\xf7\x76\x18\xad\x9d\x5d\x2c\x11\xdb\xe8\x17\xbd\x9d\x09\xa9\xac\x83\x7e\x66\x47\x1f\x13\xe5\x8b\xb1\xa2\x60\x14\xaf\xab\x5b\x86\x7e\x84\x4f\xa0\xac\xe2\x20\xa0\x65\xbf\x01\x2d\x07\x61\x26\xd7\x1e\x66\xf2\x6f\x6d\x04\xb8\x5f\xf7\xd8\xb3\xaf\xc1\x70\x8c\x12\x10\x84\x9a\x3c\x66\xb0\x85\xb1\x33\x8f\x17\x5f\x05\x36\xce\xbf\xf5\xd8\xb8\x3c\x5c\xfd\xbf\xf4\xf6\xe0\x09\x3c\xd2\x39\x3b\x78\x8f\x47\x37\x4a\xb3\x02\xd5\xe5\xa9\xd9\x0e\xf3\xb0\x59\x8a\x3c\x2e\x4a\x29\x92\x65\x96\x03\x98\x21\x2b\x5f\xef\x93\x87\x06\xd2\xdd\x3f\xf1\x9b\xc9\xe3\xde\x83\xbb\x87\xf4\xcc\xfa\x77\xea\x90\x9e\x20\xd0\x01\x3d\x43\xfb\xa1\x1a\xd7\xf3\xf9\xa3\xec\xb9\xbb\x30\x2d\x43\x14\x8d\x88\x94\xce\xed\x9c\x1c\x3f\x07\x87\xd9\xff\xc1\xa3\xc1\x7f\xf2\x76\x4d\x66\x19\x34\xdb\x28\x68\xa0\x62\xc1\x5a\x57\x2a\xbc\x86\x88\x97\x41\x7f\x07\xde\x44\x20\x61\x86\x51\x94\x8b\x02\x28\x9e\xb6\x89\xfa\xa4\x98\x65\xfc\x66\x7e\x5f\xb6\x4d\x0a\x30\xca\x48\xeb\x5f\xb4\xa2\x13\x8d\x8d\x09\xd6\xf1\x39\xf2\xa3\x07\x5c\x5e\xaf\x48\x5e\x39\x08\x72\xd7\xae\x8e\xb8\xdc\x14\x22\xa2\x78\xba\x4e\x5c\x3e\xc7\x39\xf7\x7e\xec\x30\xfb\x9b\x43\xec\xeb\xc2\xa2\x90\xd7\x9b\xf9\x2c\xc5\x13\xaa\xd9\x5f\x6d\x87\xb9\x28\xfc\x3f\xd0\x2a\xe0\x0f\x1f\xba\x34\x2a\xd5\x25\x3e\x39\x37\xbf\x3a\x55\x15\x56\xc5\x65\xd1\xec\x21\x27\x89\x2c\xd8\x42\x0d\x0a\x49\x6c\x27\x45\xa5\x2d\xb5\x53\xd5\xd5\x39\x52\x69\x3f\x45\x57\x01\x72\x8c\xb8\x2c\x7a\xe8\x44\x24\x3b\x5d\x71\xb3\xc4\x1d\xd1\xe0\x7c\x6e\x7e\x55\xbb\x78\x87\x44\xb5\xb9\xa5\x0a\x52\xca\x53\xd2\xe3\x37\x4d\x73\xa8\x5a\x93\xab\xf3\xe7\xa6\x80\xc1\x92\x62\xa1\xc2\x4e\x46\x9b\xb4\x95\x78\x5a\x3b\x84\x47\x95\x6a\x82\xdb\x44\x37\xcf\xba\x59\x8e\x40\x5c\x8a\x8e\x93\x3a\xd0\x29\xb2\x80\x2e\x24\x8d\x62\x37\xcf\xa2\x9e\xf2\xba\x1e\x96\x1a\xcf\x8e\xc9\xb9\xf9\x8b\x53\x7c\x7a\x7a\x7a\x54\xf7\x55\xfa\x49\x0e\x83\xea\x27\x40\xff\x96\x9f\x6a\x67\x13\x50\x70\xbb\x2d\x98\x65\x4e\x14\xfe\xdc\xfc\xc5\xc9\x64\x8a\x3f\x9b\x37\x45\x9c\x4c\xf2\xd5\xf9\x73\xfc\x66\xd9\xc7\xf2\xe1\x0c\x9f\xe4\x45\xaf\xf3\x92\x6a\x17\x6c\x3e\x08\x29\x36\xa7\xf8\x14\x9f\x62\x6c\x1d\x11\xbc\xb0\xae\x30\xbe\x30\x46\x22\x4c\x51\xdc\x94\x07\x1c\xd0\xbf\xe9\xd6\x96\xa6\x39\x93\xa4\x7c\x17\x97\xbb\x22\x25\xab\xe4\x16\x38\x74\x83\xba\x7f\xf9\x9c\x6b\xa0\x6f\x03\xbe\xb3\x2b\xf5\x66\x2d\x7e\xaa\x62\x2b\x7a\xbb\xc7\x9e\x92\x60\x84\x1d\xa0\x43\x08\xff\x8d\x3b\x6d\xcf\x23\xb7\x16\xf5\x79\x70\xe1\x92\x93\xdd\x25\xcb\x1f\x17\xbd\xb0\x01\xc5\x6e\xc8\x1a\x95\x77\x51\x3a\x8c\x71\xb4\x44\xc4\x73\x30\x56\xa4\xd9\x36\xfb\xd0\x31\xf6\xbf\x8f\xba\x2d\x9c\x6c\x80\x86\xc3\xff\x91\x63\xc1\x2d\xf0\x57\x05\x1f\x9b\x6e\x05\x8e\x5c\x6c\x82\xee\x9c\xad\xe0\x51\xc6\x3e\x69\x1f\xbe\x1f\xd9\xf7\xe1\xfb\x68\xf5\xf0\xd5\x47\xef\xdd\x4f\xd6\xd1\xdb\x90\x6d\xc2\xb3\xf7\x37\x3d\x76\x72\x6f\x57\x30\xea\x54\x38\x72\xbf\xd7\xb3\x4f\xdb\xea\xbd\x1b\xee\x64\x4f\xb8\x1c\x21\xab\x3f\x1d\xa6\xd1\x34\x5e\x15\x1a\xec\x33\x86\x99\xed\x77\xbc\x9d\x28\xf4\x86\xb5\x0a\x6f\x28\x3f\xe0\x0d\x07\x59\xfd\xea\xb4\xc8\xba\xdf\x1c\x5c\x3f\x0e\xae\x1f\x5f\xb5\xeb\xc7\xe3\xde\xc5\xdd\xc5\xd5\x53\xfe\x49\x13\x81\x6e\x56\x98\x96\x5b\x61\x99\x55\xe5\xd4\x77\x8d\xb3\xdd\x54\x3e\xa8\x88\x5f\x8c\x64\x2d\x5b\xb1\xc8\xfd\xbf\x1b\x0b\xee\xad\x3e\x74\xe6\x3f\x98\x70\x01\x3c\xc3\xb8\x99\x68\x5f\x4f\xdc\xeb\x51\x45\x7b\xc5\x1b\x97\x69\x9d\xfd\xfe\x07\xc7\xd8\x5d\x0c\x1e\xfb\x27\x83\x6f\x4a\xad\xb0\x1c\xdb\x32\x8c\x62\x15\xe6\x62\x4f\xb2\x3f\xac\x59\xa1\x5a\x9f\xa8\x5d\x07\x07\xdf\xef\xac\xe9\xaa\x6b\xfe\x30\x59\xd4\xb4\xf2\xd4\x68\x65\x79\x07\xef\x35\xda\xbd\xd5\x0c\x54\xd5\xd3\x55\xa9\xe6\xec\xfa\xf3\x07\x00\x8c\x57\x94\x75\x82\x5e\x24\x80\xa6\x10\x51\xfb\x2c\xf8\x2d\x8d\x3e\x43\x3b\x80\x56\x74\xa3\x0b\x85\x36\xd8\xe8\xc8\x56\x9d\xa0\x99\x75\x01\xe8\x0e\x8a\x22\x6a\x3d\x70\x28\x34\xd9\x40\x04\x54\xd5\xcd\x64\x23\x44\x70\x4b\xcc\xa7\xc1\xde\xc8\x86\xc6\xf5\x92\x26\xb3\x04\x0a\x5a\x15\x8f\x08\x50\x26\x5f\x38\x1a\x9c\x1d\xf9\x16\x37\x00\x52\xce\xd3\x8e\x98\x9b\xc4\x56\x6c\xe3\x08\x9c\x93\xb7\x1e\x39\xd8\x97\xf7\xbb\x2f\x7f\x5c\x93\x61\x7d\xc4\x0b\x5e\xa6\x3d\xa6\x47\x0c\xc3\xf5\xa1\x90\xb6\x72\x37\x8f\x6d\x7b\xe1\x2c\xbb\x93\xdd\xbe\x87\x30\xd2\x21\x13\xeb\xe0\xa0\x39\x60\xd0\xb2\x19\xb4\xc2\xdd\x8f\xce\xd3\xfe\x3d\xd3\x74\x4a\x8e\xdc\xab\x2a\x27\x27\xb7\x34\x43\xec\x33\x8c\xfd\x93\x61\xb1\xf3\x59\xa2\xb8\xc6\x7f\x81\x05\xaf\x03\x7a\xf7\x6e\x16\xe1\x94\x31\x2f\x1d\xa0\x52\xb9\x87\xe0\x1b\x0a\x27\x2c\xc3\x58\xf1\x65\xd9\xa1\x3b\x65\x0e\xc1\x1e\xf7\x6c\x8a\x7e\x1d\x37\x18\x01\x6e\xf7\xa7\x79\xaf\x50\x53\x1a\xd2\x83\x7f\x30\xa0\x2f\x66\x39\xbf\x47\xfd\x75\xda\xbd\x64\xbd\xe5\x28\x7b\x9b\xc7\x0e\x41\x46\xfe\x9b\xbd\xe0\xb5\xde\x45\xdb\x28\x83\x75\x50\x4e\xef\x42\xd5\x50\xd6\x5d\xd7\x29\xd3\x7e\x36\xba\xb4\xb8\xe0\x67\x2f\xc7\x45\xa9\x7c\x72\xe1\x7b\xa3\x1a\x82\x38\x0f\x1b\x19\x0f\x0e\x24\x79\x0f\xdc\xe8\x25\x61\xae\xc0\xba\xed\xe9\xf9\x0b\x1e\x9b\xc0\x76\xfa\xef\xf2\x82\x1f\xf5\xce\x62\xa8\x81\x0b\x95\x86\xb5\xc5\x64\x48\x37\x55\x36\xdb\x0d\x7e\x16\xc2\x4a\xd0\xdf\x07\x1e\x81\x07\x88\x9d\xb8\xa0\xf3\xd1\x72\x94\x54\x56\x7d\x72\xba\x0b\x73\xc1\x97\x32\x45\xe8\x5e\xe7\xcb\xe0\xaa\x64\x9e\xc0\x26\xbf\x94\x9d\xc5\xdb\xb2\x1b\xc5\xe9\xb1\xb1\x4d\xd1\xf7\x3f\xea\x05\x1f\xf4\x5e\x20\xfa\x6e\xdf\x6e\x0a\x8b\x37\xc1\xea\x5e\x0b\x77\x65\xc7\x06\x6c\x8a\x7e\xa1\x07\x60\x13\x73\x57\xfd\xab\x86\x43\x69\x9e\x70\x4c\xee\x56\xdc\xb2\x9d\xf5\x38\xa5\xb1\x44\x5f\xa8\xcc\xca\x5d\xb5\x9b\x62\x44\xa0\x18\xbb\x55\x7f\xe3\xb1\x23\xaa\x00\xff\x4f\xbd\xe0\xb3\xde\xfd\xaa\x38\xe7\xc6\xbf\x29\xfa\x60\x07\x43\x34\x04\x80\x70\xa5\xd3\x12\x4a\x30\x31\x37\xf8\x31\xf6\x34\x56\x14\x0a\x3f\xfb\x70\x2f\x4c\x5c\x7e\x2e\x7a\x44\x89\x64\x7b\x1f\xee\xc5\x5b\x61\x22\x28\xf4\x23\x4e\xa2\xa6\xdc\x7a\x80\xfd\x09\x8f\xe0\x22\x23\x5d\x28\xfa\xca\x84\xa9\x5e\x6b\xa6\x2b\x95\xc9\x2b\xcc\xcb\xb8\x09\xf3\x50\xce\xac\x8d\x2c\xef\x3b\x0d\xff\x8f\x35\xf6\x74\x33\x4e\xab\x68\x55\xf4\x3f\x59\x53\x84\xb3\x1f\xa8\xad\x55\xdf\x56\xad\x6e\x88\xd3\x07\x42\x88\xe2\x4b\xb6\x46\x7e\x92\x7c\x19\x68\xd0\xb2\x96\x9a\xd1\x7a\x7a\xd9\x4b\xc7\x0d\x35\x42\xec\xc5\x68\xca\xda\x4a\xf4\x54\x6b\xf0\x33\x3a\xc6\x4e\x09\x9c\xda\x2c\xab\xfc\x27\x70\x1e\x50\xd7\x98\x59\xda\xca\x72\x21\x05\xcd\x49\x22\xe3\x13\x5b\x71\xb3\x9c\x6a\x70\xf0\x63\x91\xc3\x94\x8a\x0d\xe0\xad\x50\xf3\x46\x89\x93\x25\x31\xc6\x85\x05\x3f\xc1\x27\xe1\x33\x9b\xa3\x63\x4a\x73\x7b\x83\x5f\xb2\xab\x0f\xfb\xd2\x61\x76\xe7\x6e\x7c\x32\x00\x77\xb0\xac\xc4\xe3\x42\x7b\x99\xf8\x3f\x75\x38\x78\xf9\x2e\x69\x78\xac\x6e\x31\x85\x72\xa6\x56\xa2\xdf\x1a\x46\xc5\x0d\x85\x36\x31\x28\x93\x59\x6e\xe2\xd0\xa6\xa5\xa4\x6d\x03\x48\x5d\xf1\x40\x16\x19\x76\xd3\x79\xdd\x04\xfb\x8c\xc7\x8e\x84\xdd\x18\x9c\x6f\xfd\x8f\x79\xc1\xaf\x78\x73\xcb\x8b\x8e\xc7\x34\xba\xf4\x1a\x52\x7c\x92\x4f\x10\xe9\x51\x3b\x4a\x62\x18\xa7\xfd\x6d\x25\xda\xac\x74\xe0\x3b\x40\x26\x52\x33\x2b\x56\x60\x1f\xb9\xe5\xf2\x88\x08\xee\xf2\xfc\x41\x5d\x66\xd9\x8e\xf3\x68\x5a\x2e\x8a\x3e\x7a\x87\xd5\x9d\xd2\x14\x6c\x83\xb3\x44\xe6\x49\x0c\xbb\x3b\x68\x28\x21\x0c\xa6\x52\x15\x6b\x6a\xa0\x2d\x95\x4c\xe0\x2e\x78\x77\xd0\x58\x1a\x72\x17\xdc\x5b\x26\x1f\xf2\xd8\x51\x3d\x44\xfe\xbf\xf2\x82\x77\x78\x06\x58\xd6\xca\x11\x1f\x28\x66\xe8\xd1\x7d\xed\x46\x5d\x69\xcc\x0a\x24\x55\x91\x13\xc0\x82\xd2\x0d\x74\x49\x18\x4e\xa1\xba\x1d\xc9\x5a\x86\x7f\x32\x8f\x33\x2b\x70\x1a\xf1\x1f\x3c\x76\x08\x52\x22\xf3\xe0\x2a\x7c\x64\x6d\x29\xb1\xbe\xcc\xb4\x00\x71\x3a\x1b\x31\x45\x79\x75\x8a\x62\x73\x48\x2d\x5f\xad\x02\x9f\x54\xf1\xb8\x10\x16\x62\x1a\xd3\xe0\xf7\xda\xc8\x3f\xca\x85\x0d\xd4\xc8\xf6\x8a\xd3\x5f\x44\xb0\xf6\x0a\x17\xe3\xda\x6e\xe0\xfb\x9e\xc1\x1e\x34\x0b\xdd\xf8\x6a\x4f\xeb\x98\x04\xc7\xb5\xd8\x24\xd0\x7a\xef\x79\x40\xe6\x51\x28\x32\x0b\x5a\x70\x55\x97\xc3\x4f\xfe\xa3\xe0\x9e\x5d\xd2\xd8\x60\x0e\x3a\x36\x45\x2e\xbf\xf9\x95\x85\x06\xad\xe2\x2b\xde\x04\x5a\x05\xae\x78\x87\xc9\xf4\xe8\x2c\xec\x3f\xf3\xd9\x63\x63\x6c\x02\xaf\x85\xfe\xdf\xd6\x58\x34\x4a\x8a\xde\x7f\x23\x15\x95\x6b\x96\x06\xaf\xaf\xd1\xb5\xd6\x75\xed\xa5\x87\xb0\x7f\xd1\x59\x48\x5f\x20\x8a\x7a\xde\x4b\xed\x18\x32\xd5\x66\x5a\x05\x15\xb0\xa3\x06\x5f\xcb\xba\x14\x62\x48\x18\xec\xd3\x3a\xc2\x89\xae\xc1\xf2\xe8\xee\xf4\xc8\xaf\x4e\x5c\x56\xc4\xea\x7c\x79\x48\x5a\x58\x0d\x14\x4d\x6e\x4d\x3f\xdc\x92\x9b\xa1\x16\x40\x26\x4b\x5d\xac\x55\x7f\x6a\x9a\x11\x29\x7b\x88\x8b\x0d\x9e\xec\x53\x0d\xd6\x66\x34\x50\xfe\xb7\x05\xcb\x64\xc8\x81\xab\x60\x2b\x09\x37\x70\xca\xc6\xe9\xc6\x0c\x3a\xe0\x6b\x1c\x17\x3d\xea\xf2\x52\x87\x8b\x9f\xbe\xdd\x8a\x43\xbc\x27\xce\x2d\x2f\x16\x8e\xa3\xfc\x3b\x3d\xa6\xa6\x82\xff\x23\x5e\xf0\x7a\x4f\xa1\x91\x55\x70\xd6\x75\xfb\xdd\x2a\xc3\x36\x40\xa6\xea\x21\x50\x55\xc8\xe7\x4a\xa8\x58\x7c\x0d\xe2\xa7\x34\x54\xd4\xe5\xb0\x59\x82\x27\xba\x70\x63\xa9\x28\xfd\xb3\x01\xcb\xdb\xa9\xec\xab\xc6\xd8\x0d\x45\x6f\xdd\x60\x36\x7d\xa5\xc6\x5a\x4f\xdc\x14\x5d\xb5\x8a\x0a\x5e\x53\xb3\x4b\xd6\xa7\x29\x18\xa2\x9c\x37\xc3\x26\xa3\x82\xd8\xae\x22\x70\x21\xf4\xd3\x0e\x33\xd3\xce\x78\x4f\xd3\xd3\xfe\xe0\x1a\xe6\xa8\xdb\xc6\x51\xd3\xf3\xff\x19\x67\x5f\x67\xd4\x7b\xcb\x39\x68\x8c\xe6\xb3\xa4\xd7\x49\x0b\xff\xf7\xc6\x83\x4f\x8d\x8d\x7a\x6b\xd9\xfc\x2d\xfd\x60\x93\x5e\xe6\xa2\xec\xe5\x48\x2e\xc3\xd7\x20\x24\x16\x89\x47\x1b\xe0\xf9\xbd\x83\xd6\x46\x9f\x71\x33\x70\x89\x94\x03\xae\xae\xd7\xa8\xcd\xb9\x09\x59\x93\xe4\x3b\xdd\xbe\xe9\xb0\x98\x2e\x31\x80\x05\x90\xc7\x35\x59\xc2\xc8\xe1\x50\xf5\xdc\xcb\x48\xa8\xb4\xd7\x30\x08\xea\xd3\x51\xfd\x8f\x0e\x89\xdc\x7c\x90\xe5\x23\xab\x69\x5f\x09\x15\xbd\x2f\xbe\x57\xe8\x3d\xea\xd2\x2d\x17\xfd\xf0\xbd\x53\xbb\x18\xda\x8a\xae\x94\x25\xec\xa1\x27\x6e\xed\xe1\x7c\x31\xa7\x1c\xfb\xf7\x1e\x63\x91\x14\x1a\xe4\xa6\x14\x49\x99\xf3\x97\x3d\xf3\x7b\xd4\x76\x35\xa2\x41\x52\x5c\x8c\x0b\x6e\xbe\x6f\x68\x5d\xb6\x21\x9e\x90\x89\x2c\xd5\x97\x9b\xb1\x61\xe1\xda\x0e\x73\x38\x87\xda\x22\xc4\x78\x5c\x1d\xf9\x83\xc4\xc1\x60\xbb\xde\x95\xa1\xf9\x3d\x35\xe6\xab\xea\xc4\x59\xfa\x00\x66\xea\xbf\xa5\x16\x7c\x67\x6d\xf0\x39\xc4\xee\xe5\x1a\x16\x49\x99\xe6\x55\x55\xf4\x3a\x2a\x33\x68\x05\x45\xfc\x35\xf8\xf9\xb0\x8f\xc0\xe0\x34\x11\x61\xfb\xbe\x64\xba\xe1\x12\x08\x95\xc4\xa1\x30\x98\xef\x88\x4e\x76\x7a\x12\x16\x8d\xf6\xeb\x85\x89\xa3\x23\xe4\x04\x84\xde\xa9\x33\xc9\x0c\x11\x86\x44\x67\xb9\x8e\xee\x26\x0f\xd7\xb2\x0f\xc0\x08\x00\x65\x04\xb7\x65\x47\xec\xfa\x25\x8f\x44\xec\xf7\x79\xc1\xdb\x3d\xdb\xe0\xa2\xb2\x4e\x81\xdd\x43\x34\x36\x1a\xfc\x0b\x8f\xfc\xd0\xd6\xc9\x2f\x3c\xf2\xc3\x75\xf8\x0b\xdd\xfc\xe1\xa7\x28\x9b\x14\xfd\x54\x3d\xba\x90\xa5\x1a\xea\x0a\x1c\x2f\x6e\xa3\xc3\x92\x5f\x92\x7b\x4c\x31\x73\x0f\x5c\x3c\x4e\xcf\xdc\x43\xaf\x4e\xcf\x34\x1a\x8d\x4b\xb2\xe2\x97\xf0\x73\xd3\xab\x76\xf5\x7f\x7f\x8c\x7d\xd3\x28\xb5\xa4\x0a\xfe\x5d\x4c\x5b\x99\xff\xee\xb1\x60\x4d\xfe\x61\xc2\x8d\xe8\x35\x0e\x89\xe1\x95\x04\x37\xaa\x6d\x71\x3c\x49\x34\x8e\x44\x14\x17\x04\x11\xaa\x40\x1f\x4c\xf2\x2b\xde\x21\x08\x3f\x96\xff\xc6\xa9\xfc\x97\x6d\xc4\x25\x89\x93\x57\xbc\xa3\x1b\x71\x39\x9f\x75\x3a\x71\x79\xc5\xbb\x61\x23\x2e\xd7\x72\x01\xc6\x6e\x71\xc5\x3b\xba\xde\x8b\x93\x68\x01\xff\xde\xc8\xf4\x27\x47\x9a\x59\xa7\x1b\x27\x22\xbf\xe2\x1d\xe9\x26\x61\x29\xcb\x72\x04\xcc\x2f\x7a\xec\x19\x0c\x4b\xf5\x1d\x50\x87\xaf\x65\xfa\x83\x81\x17\x2a\x53\xf7\xc5\xd7\x33\xa7\x52\xee\xcb\xff\x8d\x59\x4d\x71\x5f\xc9\xf2\x65\x6b\xdd\xa7\x5f\xc7\x4c\x9b\x06\xde\xe8\x8e\x18\x7c\x93\x0d\x2d\xe3\xca\xd3\xd8\x89\x3d\x69\x9c\xe7\x96\x17\xd5\x86\xe7\xff\xc9\x53\x83\xe7\x5b\xbf\x1d\xb8\x0f\x73\x6f\x34\xde\x26\x08\xbb\x41\x88\x27\xa4\x0e\xd1\x57\x16\x23\xf1\xdf\x20\x37\xfd\x5e\x12\x02\xdb\xf8\x15\x8f\x99\x34\xfa\x86\x7f\x68\x4b\xe4\xeb\xae\x7d\xea\xf7\x6f\x64\x2f\x67\x8c\x14\x48\xb1\x28\xfc\x2c\x58\x35\xbf\x5c\x50\x7f\x7d\xdb\xb7\xb9\xc0\xd5\x95\x4e\x5f\x45\x93\x2c\xdd\x80\xcd\x6f\x12\xd6\xe3\xf1\x30\x49\x8e\x4f\xed\x00\xf3\xf1\x6f\x3c\x15\x8b\xfd\x41\x2f\x78\xb7\xb7\x61\xeb\x16\x4c\x38\x33\x3e\xae\x5c\x7c\x1b\x9c\x54\x8e\x08\xb3\x68\xeb\x23\xd4\x79\x80\x2b\x09\xf7\x4a\x0d\xde\x5c\x94\xa8\x3d\xb0\x85\xa0\x3a\x31\xbd\x85\x7d\x85\x02\x6e\x38\x1b\x49\x39\x67\x51\x6f\x90\xb1\xda\xbd\xff\x3e\x9b\xb6\xa9\xdb\x82\x49\x7b\x93\xea\x26\xbd\x3c\x4c\x1c\xe3\xb0\xeb\x48\x44\x9f\xaf\x31\x6b\xcc\xfc\x7b\x83\x3b\xcd\xaf\x2a\x40\xa1\x7d\x60\x5b\xa9\x10\x0e\xc7\x3d\x6f\xda\x8c\x15\xed\x2c\x2f\xe1\x96\xeb\xbf\x38\x38\x6d\x7e\xb9\xa3\x5b\xf4\x36\x36\xd0\xd9\x15\x52\x60\xbe\x43\x2a\x3c\x72\x20\x7f\x7b\x8c\xf9\x24\xd2\xd3\x62\xb9\x2f\x2c\xda\xfe\xcf\x8d\x05\x3f\x39\xb6\x06\xe1\xab\x45\xdb\x38\x95\x95\x16\x31\xaf\x0d\x8b\xe0\x22\x95\xd8\x0d\x25\xbb\x26\x9e\x76\x70\xa0\x6d\xe7\x71\x59\x0a\xe5\x27\x48\x98\xaf\x65\x96\x0b\x85\xc7\xa9\xae\x20\x96\x76\x2f\xeb\x86\x0f\x63\x48\xa3\x3e\x2c\x01\xc6\x05\x8e\x26\x04\x30\x31\x01\xdf\xa9\x65\x16\x88\x0b\xbc\xd8\x99\x18\xe6\x30\xad\x04\xcf\x29\x03\x2a\x85\x6a\x65\xb9\x2c\x3b\x17\x9d\x6c\x6b\x18\x55\x9f\x30\x0a\x1a\x82\xe1\x35\xa8\xa2\x06\xe4\x00\x4e\xf1\xd8\x81\x4e\xb5\x7a\x77\x14\xe5\x9a\xa3\x01\x22\x4e\xe3\x4e\x18\x1b\x5c\x0d\x8c\xe2\x8f\x5b\x72\x43\xd9\xc8\xc3\xa8\x27\x27\x97\x33\x1d\x5f\x53\x33\x98\x32\xff\xe0\x05\x7f\xe9\x6d\xb9\xa8\x32\x66\x6d\x56\x64\xb0\x1d\x57\x67\x55\x5e\x1b\xb1\x3e\xf7\xbd\x3c\xb7\x4e\x82\x7e\x3a\x11\x06\x37\x85\xe4\xcf\xc1\x2a\xe4\xa6\xce\xc7\x09\xf2\x60\xca\x5d\xd9\x11\x29\x0a\xbf\x35\xb8\x7f\xd3\x52\x14\xc2\xdf\x03\x9a\x4f\xda\xf7\xee\xcd\xb2\xe3\x03\x09\xad\xa5\x7b\xbc\x95\x65\x72\x63\xb4\x00\x8f\x6a\xcc\xd9\xc4\xfd\xd7\xd5\x82\xff\xee\xd9\x4f\xb4\x83\x07\x3d\x1b\xbe\xa9\x70\x1c\x7c\x02\xff\x53\x28\x10\xc6\xed\x9a\x36\x24\x08\x66\x53\x19\xe1\xb2\x48\x08\x84\xa1\x5a\x26\xf8\x6c\x34\xb3\x3c\x17\x4d\xf4\x85\x44\x86\x6c\x50\x3c\x90\x17\x5c\x6a\xae\x1d\x71\x29\x3a\x90\x3b\xc4\xd4\xe9\x22\xe0\x92\x45\x45\xe7\x42\x1b\xae\xb4\x65\x5a\x5e\xf7\x9a\x65\xc2\xe7\xcf\x2d\x1a\x9e\x45\x67\x18\x7e\xda\x63\x78\x84\xf9\x3f\xe6\x05\xaf\xf4\xe0\xcf\xea\x26\x46\x18\x4c\x90\x1b\xc7\x14\x93\x30\x75\x08\xd6\xaa\xe0\x1b\xa2\xac\xc3\x07\x75\xbe\x1d\x96\xcd\x76\x9d\x70\xa6\xeb\x64\xe8\xae\xf3\x2e\x3e\x8e\x44\x22\xe4\x4f\xfc\xd7\x38\x81\xd4\x49\x2d\x95\x5d\xee\xef\x74\xb0\x7d\x6a\xdc\xa1\x99\x57\xb4\x2a\x64\xbf\x5d\x15\xe5\x7c\x96\xe2\xcd\xd8\xff\xe9\xf1\xe0\xdc\x90\xe7\x55\x3d\x99\x62\x99\x0f\x75\x04\xa8\x94\xed\xc1\x5c\xd4\x14\x39\xa0\x9f\x81\x6d\x5f\xf1\x66\x5c\xf1\xc8\xdb\xd1\x39\xf2\x7f\x79\x8c\x9d\xd3\x6e\x90\x67\x82\xdb\x56\x1d\x3f\xc6\xa6\x2a\xbc\x8e\x9c\xa4\x2d\xbe\x06\x97\xa4\x7b\x91\x09\xef\x42\xba\x99\x66\xdb\xa9\x33\x2c\xa7\x88\xa6\xe1\x59\xc1\x3f\x35\x34\x0d\xa6\x7e\x3a\x47\xe7\xa3\x37\x79\xcc\x4f\xc2\xa2\x5c\xcb\xc3\xb4\x88\x15\x1d\xb3\xff\xcf\x46\x07\x61\xef\x20\x5e\xc9\x4f\x83\x85\x35\x15\x51\xa8\xad\x55\xba\x68\x5e\xea\x62\xd4\x94\x93\xad\xa3\xc9\x0b\xe8\x85\x60\x46\x68\xb0\x17\x19\x2c\xe2\xa5\x60\x8e\xb0\x88\xf9\xde\xb1\x88\xd1\xf4\xad\x0a\x73\x9a\x7c\xaf\xc6\xee\xbd\x27\x98\x59\x83\x15\x0b\xf0\xbd\x6a\x07\xd1\xb5\x3d\x5e\x50\x3b\x86\xe7\xf3\xb1\x23\xec\x94\xeb\x12\xd7\xce\x72\x8a\x12\x04\x77\x55\x0c\xa2\x40\x16\x80\x15\xb1\x15\x8b\x6d\x00\x5c\x78\xd3\x91\xe0\x6d\xde\x88\x97\xb8\x8c\x70\xbe\x75\x4b\x6b\x7b\x24\xaa\x00\xba\x1f\xcb\x3d\xdd\x52\xe7\x65\x2d\xae\xc4\xd8\x39\xbb\x16\x73\x86\xf7\x00\xed\xcd\xe9\x6e\xc9\xd4\x49\x5d\x88\xd2\x99\xac\x7f\x34\xc1\x7e\xc3\x63\x87\xc4\xe5\x32\x0f\xfd\x5f\xf2\x82\xd7\x7b\x67\xe5\x9f\xb8\x19\x41\x14\xbf\xf6\x6a\xea\x15\x22\x87\x8b\x54\xe3\x79\xa2\x84\x54\x9a\x08\xd6\x6c\x32\x16\x01\x7a\x96\x37\x38\x61\x7f\x11\xbb\x1a\x8f\xd3\x6e\xaf\x54\xf9\xa9\x7e\x45\xa9\x1b\x69\xd8\x43\x45\x52\x06\x04\xf4\x22\x17\x8d\x77\x7a\xdf\xc0\xfe\xf1\xe8\x5d\xc0\xa6\x9c\x58\x62\x13\x70\xb8\x14\xfe\x42\x30\x09\x96\xa9\xc2\x31\xa2\x15\xbc\x9f\xf5\x8e\xe7\x82\x97\x02\x95\xac\xad\x2c\xdf\x49\xe0\x7a\xa7\xc7\xbe\x26\xb5\xba\x56\xf7\xa6\xff\x06\x6f\x07\x30\xd2\x81\xf9\xb2\x34\x2c\x8f\xe0\xfc\xd0\xc7\xd6\x96\x54\xc5\xcd\x0b\x81\x17\xc7\xdc\x5a\x9c\x89\x23\x2b\xeb\xe7\x83\x35\x7d\xe3\x4e\x11\xa3\x03\x35\x1d\x52\xcd\xd5\xdd\x66\xd6\x4e\x15\x1e\x55\xd9\xd3\x6c\xac\x17\x47\xfe\x1d\xc1\xcd\x17\x16\x17\x86\xa0\x4b\xe0\x71\x0b\x69\xe5\x38\xc1\xcc\xab\x1c\x54\xe3\xf2\xa1\xff\x36\x2f\xf8\x3e\xef\x42\x21\xb4\x6b\xa6\x7c\x3a\x6c\x98\x15\x06\xa5\x52\x37\x07\xf2\xa3\x00\xa8\x2c\xd3\xac\xe4\x01\x4e\x17\x05\xa8\x16\x23\xe7\xbf\x3c\x24\xbb\xb9\x20\xc9\x36\x80\xc0\xa6\xb8\xc5\xa1\xbc\x6d\x01\x10\xc2\x25\xb8\xb2\xaa\x38\x97\x30\xed\xd3\x54\x73\x5c\xaa\x8e\xd9\x0a\x8a\xc6\x3a\x78\xa3\x68\x6d\x5d\x9e\xa5\xcf\xcf\xd6\x61\x03\x79\xc7\xb1\xe0\x45\xd6\x6f\xab\x6b\x21\xae\xab\x2d\xf8\x43\xd9\xba\x15\xbe\x04\x82\x67\x92\x65\x9b\x00\x77\xa4\xee\xb1\xa9\x06\xa5\xd3\xd8\x06\x79\x2f\x6d\x5c\xf1\x8e\x14\xe4\xa4\x72\xc5\x3b\xf6\x50\xb6\xbe\x26\x3a\x5d\x29\x14\x3b\xfb\xc1\x8f\x33\xf6\xdb\x35\xf6\x74\x2b\xb4\x87\x18\x7b\xdf\x5f\x0b\xfe\x45\x6d\xb5\x1a\x68\x06\x82\xbf\x1d\x1a\xa3\x2b\x47\x5e\x14\xcf\xcf\xd6\x95\x6b\x87\xf1\xa0\x99\xe5\xd3\x3c\x98\x93\xf2\x89\x65\x5d\x9c\x55\x02\x15\xf5\x00\xec\x3b\x79\x2f\xb5\x72\x4f\xfa\x77\xcb\x2f\xef\xcd\xf2\x75\xe0\xfc\x6c\xc1\x1f\x85\x13\x9a\xd3\x4b\x8b\x3a\xd2\x19\xcb\xa1\x07\xda\x53\x99\x49\xdc\x92\x02\xf5\x56\x9c\xf5\x0a\xf8\xdd\x0e\x81\x75\x52\x2e\x8b\xa2\x2d\x22\xde\x17\x25\xe4\x2d\xa5\x04\x24\x1f\x6d\x86\x69\x53\x24\x05\xd7\x65\x6b\xe2\x40\x39\x08\xa8\x9c\x83\xb4\x05\xf6\x37\x84\xee\xa7\x62\x5b\x6e\xdc\xf6\xe8\xff\xbc\xc7\x9e\xd9\x0a\xe3\x44\x44\xb2\x51\xf7\xc5\xf2\x02\xd5\x87\xf8\x1c\xff\x87\x34\x90\xc4\x77\x80\x6b\x98\x09\x98\xc2\x0f\x4c\xf5\x1e\x52\xfd\x21\xcf\xc2\xd4\xba\x22\xa1\x40\x82\x0e\xc1\x11\xda\x8e\x7a\x71\xd1\xd6\x08\x34\x0a\x45\x15\x20\x1e\xd1\x43\xc3\xf6\x0b\x70\xd5\xa9\x27\x5d\xbf\x8b\xd7\x78\xcc\x9e\x27\xfe\x4b\x77\x70\xc8\x74\x27\xf5\xf3\xcd\x57\x10\xac\xf2\xdc\x55\x47\x07\x23\x3b\x10\x8e\x04\x4d\x27\x4d\xf7\x47\x98\xbd\x56\x5c\x98\x9a\x0b\x0d\xf6\x20\xd3\xb3\xd7\x7f\x21\x8a\x22\xea\xb7\xbc\xf9\xc9\x74\x1c\x77\x11\x97\x47\x5e\xa4\x8d\xed\x78\x33\xee\x8a\x28\x0e\x1b\x59\xbe\x31\x23\x7f\xcd\xc8\xe4\x8d\x8a\x92\xe4\x6b\x01\x5c\x31\x4e\x37\x16\x44\x18\x25\x71\x2a\x94\x4b\xcf\x4f\x7b\xca\xa5\xe7\x4d\xde\xfd\xea\x7a\x17\x51\x22\x59\x38\x21\x0a\x20\xdc\x01\x65\xa2\xdb\x89\x57\xc0\x4e\x0c\xe1\x95\xaa\xca\x11\x8a\x50\x86\xa4\x4d\xca\x29\x0d\xce\xcf\xc7\xe0\xf7\x0d\xa3\x6d\xad\x24\xdd\x4d\xc4\xce\x19\x16\x6a\x82\x00\xcc\x9c\x33\x68\xbf\xe2\xb1\x7f\x6c\x88\x38\x07\xa6\xdc\x5b\xf5\x94\x7b\x6d\x65\xca\x59\xec\x9d\x4f\xf2\xb4\x3b\xe5\xb6\xe0\xad\x1e\x3b\x5c\xf4\x8a\xae\x48\x23\xff\xfb\xbc\xe0\x55\x1e\x5e\xb5\x93\x70\x83\x97\x22\x49\x0a\x7d\xb1\x25\xd2\x9b\x32\xe3\x94\xdc\xa6\x15\x35\xdd\x07\x3e\x4e\x06\xb4\xbc\xdb\x45\x54\xf2\x30\x91\x42\x67\x1f\x47\x4c\x44\xd6\x07\x0d\xbe\x9b\x91\xe1\xd1\x09\x76\x7c\x8f\xa4\x36\xfe\xa7\x0e\x05\x73\xc3\x5e\x0c\x32\x5a\x01\x20\xe9\x30\x9a\xb1\xc2\xf5\xd5\x7c\xe5\x21\xf6\x37\x1e\x9b\xc0\x00\x5e\xff\xcf\xbd\xe0\x07\x31\x46\xb8\x9a\xa5\x02\xbf\x0a\x89\x81\xbb\x35\x50\x88\x06\x2d\xba\x6a\xaf\xee\xa6\x1d\x80\x3c\xd3\x09\xd3\x70\x43\x58\x16\x41\xcd\xad\x5a\xcc\x5c\x5f\x5a\xb1\x57\x8f\xb1\x23\xca\x96\xe4\xff\x7d\x2d\xf8\xe9\xda\x8a\xb2\x2c\x55\x1a\x4f\x84\x41\x3b\x35\x5e\x3b\x2d\x49\xe9\x40\xe7\x63\x08\xda\x48\x8a\xd1\x8d\xc1\x99\x64\x4d\x0d\xea\x76\x50\x1f\xa1\x84\x3b\x80\x5a\x0d\x16\x43\xcb\x4d\x4f\xae\x06\xc3\x12\x05\xdd\x37\xad\xac\xda\xe4\x09\xf9\x3f\xc9\x50\xfc\x55\x8d\xed\x16\x86\x7a\x6f\x92\x6d\xaf\x82\x8b\x06\x31\xdc\xfc\x52\x2d\x38\x5d\x7d\x38\x0a\x8b\xc4\xba\x8e\x9b\x4f\xdc\x95\xf0\x9f\x3d\xf6\x67\x1e\x63\xfa\x62\x57\xf8\x9f\xf5\x82\xbb\x2f\x99\xdf\x97\x06\x35\xec\x4e\xf6\x20\xa5\x38\xb9\x9b\xdb\xc0\x02\x3b\x33\x3a\x7a\x68\x97\xe6\x6a\x15\xc3\xe3\x1e\x1f\x89\x97\x3a\xe1\x8f\x77\xc2\x2e\x7b\xdc\x3b\xce\xfe\xf1\x60\x92\x4e\xd8\x9d\xde\x14\xfd\xc2\x3f\xea\x1f\x9e\x06\x9f\x39\xc6\x3e\x70\xd4\x09\xbe\x41\x98\x1d\x80\x66\xc8\xa2\x85\xb8\xc8\x7b\x70\x3c\x9d\xe9\x45\x1b\x02\x79\x84\x5f\x7b\x34\x78\xee\x88\x77\xc3\x42\x6f\x86\x24\x1d\xc5\x2f\x7c\x98\x7d\xc2\x8e\x14\xf8\xf0\x3e\x23\x05\xfe\xc7\xc0\xc3\x38\x08\x25\xda\x67\x28\x51\x5f\x45\x12\x75\x83\xe3\x9a\x32\xd9\xac\xbf\x61\xf3\x6b\xef\x41\x3f\x3b\x4e\xf7\x83\xa0\x9f\xfd\x44\x97\x36\x77\x0f\x91\x79\xae\x7f\x5a\x47\x97\xe2\x48\x18\x40\x94\xe1\x3b\x4c\x35\xd4\xf4\x55\x87\x1c\x32\x34\x3d\x9c\x44\x29\x80\x92\xc8\x7d\x59\x51\x2e\x87\x65\xdb\xff\xf4\x78\xf0\x7a\xaf\xf2\xd0\x59\x81\xed\xac\x30\x68\x54\x7a\xc7\x77\x2f\x16\xca\x29\x75\xdd\xf0\x37\x20\x05\x28\xd1\xb4\xf4\x64\x9f\x2f\x96\x4a\x12\x20\xcb\x8b\x2c\xa9\x9b\x8b\x56\x7c\x99\xc0\x1c\xe9\x80\x76\x0f\x9f\xf7\x8f\xb1\x77\xd5\x18\x93\xa9\x97\x21\xb1\xff\x23\xb5\xe0\x0d\x35\xf3\x5b\x5b\x72\xec\xfc\x54\x88\x87\x5d\x7b\x50\xce\x51\x90\xca\xa2\x25\xab\x2a\x2a\xc7\x4b\x37\x5f\x02\x5e\xa3\x18\x5c\x14\x8b\x24\x2c\xda\xe4\x56\x51\xe6\xe0\x44\x8f\x17\x27\xe5\x17\xa9\xe8\x8b\xac\x62\xe9\x7a\x0a\x85\xca\xe7\x0d\xc6\xce\xa2\x29\xa7\x98\xe5\x97\x66\x5a\x59\x76\x89\x98\x27\x10\xac\x0e\x1f\xd5\xf1\xdf\x99\x4b\xb0\xdf\xe0\xdf\xeb\x61\x7e\xc9\xfd\xc2\x50\x01\xc1\xe3\xe8\x12\xcf\x72\x7e\x69\x46\x94\x4d\x48\x65\x6f\x0f\x8f\x79\x52\x7a\x0b\xa3\xfb\xd3\xa4\xef\x6f\x07\xf1\xf6\x80\xaf\x10\xea\x2d\x20\x37\xab\x87\x0a\x13\xc9\xa4\x5a\x46\x5d\xac\xcc\x77\x10\xaa\x42\xbd\x29\x05\xbe\x82\x70\x6b\xb0\x2c\x57\x7a\xff\xe7\x4f\x65\xdf\x30\x44\x7a\x3f\x4b\x8b\xb8\xf0\xbf\x74\x63\xf0\x0f\x35\xfd\x73\xd8\x41\x29\xf4\xcb\x0a\xeb\x27\xaa\x74\xcb\x5e\x98\x28\xcc\xe2\x06\xa7\x9e\x9e\x65\x9c\x2f\x85\x1d\x31\xcb\x83\x4e\xbf\xd8\x6a\x06\x75\xc6\xf9\xaa\xbc\xb1\x94\xc5\x2c\x7f\x09\x00\x9b\xbc\x8c\xe0\x4d\xe6\x14\x22\xcf\x2c\x7f\xc9\xcb\x82\xb8\x1b\xcc\xf2\xe0\xe4\x89\x86\xfc\xbf\xc6\xc9\xe0\xe5\x75\xee\x3e\xbc\xa5\x71\x4b\xf0\xf2\x07\xeb\xf4\xf1\x72\x96\x97\xf8\x61\x1a\x76\x84\x4c\x15\x06\x75\x1e\xc8\xa9\x14\xcc\xf2\x3b\x6f\xbf\xe3\x36\xc8\x40\xbd\x5c\xb7\x5e\x9e\x3a\x71\xd7\xcb\x1f\x84\x6c\x5e\x5e\xdf\x63\x85\x4e\x35\x4e\xed\xb9\xec\xbb\x4e\x8d\x2c\xf9\x8e\xdb\xad\x82\x1f\x74\x16\xda\x63\xc7\xfe\xd7\x44\xdf\xfa\xd9\x71\x79\xd1\x85\xf1\xf7\xdf\x36\x1e\x7c\x6e\x0c\xe1\x7f\xe0\xa4\x94\xf3\x59\xd8\x33\x10\x94\x9b\xa9\x92\x28\x92\x84\xd3\x97\x0d\x33\x34\x30\xe5\x41\x25\x15\x49\x81\x21\x53\x49\x78\xd8\x6c\x66\x39\x10\x5a\x92\x54\xb1\xb8\x0c\x19\x12\xc8\x4f\x83\xcf\x29\xd3\x22\x21\x41\xe1\x7e\xd1\x51\x84\x52\x72\x88\x8a\x3a\xa0\xab\xcb\xd2\x0d\x7f\x05\xde\xa0\x43\x42\x5e\x77\xdf\xc9\x6d\x61\x72\x5d\x34\x43\x02\x1a\x07\xcb\xbf\xc0\x33\xd3\xd8\x96\xcd\xed\x64\x4a\xd9\xd1\x8b\x5e\x52\x2a\x6b\xbe\xaa\x0f\x3a\x61\x93\xa3\x25\x1a\xfb\x4d\x1e\xaa\x99\xca\xce\x63\xde\x40\xc5\x1b\x7c\x29\xb3\x1a\x26\xf7\x97\x6e\x57\x84\xb9\x46\x25\xb5\x3a\x10\x8c\x29\xe5\x8a\x6c\x96\x79\xaa\x3c\x11\x81\x36\x0b\xca\x92\x12\x01\xc5\x89\x39\xdf\x42\x79\x8a\x8c\xa9\xd3\xcd\x81\x23\x4e\x6f\x04\xb6\xa4\x73\x8a\x9d\x64\x33\xbb\x86\x37\xab\x3d\x08\x77\x89\x03\xf1\xf4\x00\x81\xe4\xab\x28\x23\xbe\x70\x77\x19\xb1\xe1\xd7\x87\x01\xe6\xe9\xa3\xb4\x2a\x11\xfe\xd5\x31\x76\xfb\x2e\x77\x6a\x34\x3f\x00\xd6\xec\x03\x71\xd9\x26\xf3\x6a\xe1\xff\xdc\xb1\xe0\x4d\x63\x23\x5e\x4a\xa9\xc7\xc4\xf0\xc0\x0c\xc5\xa8\x4f\x1d\x4b\x0b\xb6\x29\x84\x9e\x42\x8d\x8c\xf1\xae\x06\x07\x0d\xf8\x46\xb1\x30\x93\x77\x00\x41\xe7\x75\xc2\x4d\x0d\xf6\x8e\x59\x68\xbf\xaa\x75\x1d\x29\x46\xb8\x86\x9a\xad\xc6\x81\xb1\x5e\x07\x11\x41\x44\xbc\xd7\xcd\x94\x52\x75\x54\x4b\x34\xf1\x9d\xae\xaf\x14\x76\xd2\x48\x0b\x3e\xb0\x83\x4d\x86\x53\x55\x88\x6f\xa3\xd6\xad\xe4\x64\x55\x1c\x32\x9a\x5c\x1f\xf9\xad\xaa\x34\x54\x0b\xbd\xdf\xb4\xc9\x12\x9f\x0d\xc9\x14\x0c\x4d\x54\xa8\x7b\x8c\x1f\x61\x6f\xad\xb1\xa7\x55\xf3\xf0\xbf\xb3\x16\xbc\xde\xbb\x54\x7d\x5c\xd1\xdc\x58\xc6\x52\xab\xab\x48\xfa\xc2\xf0\xcd\xbe\x11\x12\xf5\x7a\xaa\x9e\x7c\x71\x8e\xe3\xa4\x86\x85\xf0\xa9\x1d\xc3\xea\x85\x95\x73\xce\x56\x7d\x2f\x5b\x60\x67\xae\x4a\x0f\x34\xb4\xb2\x7b\x64\xce\xf9\x83\x1a\x7b\x8a\xd3\xef\xfe\xbf\xa9\x05\x1f\xf7\x2e\xe5\x43\x3a\xa7\x48\xe2\xa6\xe3\x24\xf0\x04\x74\x8d\xf1\x7a\x9a\xb3\x27\x49\xd6\xe2\xd5\x2a\xc1\x1d\x61\x70\x18\xdb\xa1\xe2\x6d\x95\xbd\x0c\x21\xe9\x8d\xbd\x33\x7b\x0e\xeb\xde\x6b\xee\xdb\x57\x8c\x31\x3d\x35\xfd\xaf\xd4\x82\xef\xa8\xe9\xd5\xa1\x98\x03\x68\xba\x11\x41\x47\xaf\x10\x79\x5d\x9d\xdf\xb2\xc3\x7a\x69\x59\x47\xff\xfa\xac\xd7\x55\x97\xb9\x98\x28\x59\x9b\xa1\xbc\x41\x82\x05\xbb\x1a\xa3\x35\x6c\x81\x69\x0e\xed\x04\x6e\x09\x73\x34\x9c\x36\xa7\x60\x81\xcb\xdb\x04\x46\xcf\x5a\xfe\x15\x14\x22\x40\x2f\x7a\xa9\xfb\x0a\x0c\xe1\xe4\xf6\xa0\x56\x29\x62\x13\x6a\x57\x93\x15\x13\xb3\x6b\x86\xe3\x4e\x76\x3b\xbb\xf5\xaa\x86\x83\xf6\xaa\x3d\x8e\xc1\x7f\x1e\x67\x4b\xfb\x8b\x6f\xa9\x92\xc7\xf8\x57\xc6\x83\xbb\xab\x0f\x79\x3b\x4b\xa2\x01\x2a\x19\x4a\xd5\x48\xc4\x46\xd8\xec\xd3\x89\x79\xc5\x33\xa1\xc1\xc3\xa2\xb4\x3f\x30\xc6\x5e\xc4\xc6\xe5\x9d\xd3\x7f\x61\xb0\x00\xb7\x6a\x74\x4e\xd5\xbe\x9e\x17\x56\xce\xe1\x6d\x3b\x2c\x2d\x4c\xff\x6d\xb1\xde\xce\xb2\x4d\xcb\x7a\x97\x96\xb0\xef\x37\x2a\xe0\x3b\xe3\x52\x6c\xf4\x7f\x5d\x5b\xe6\xde\xed\x75\x89\x36\xc9\x2e\x44\x51\xe0\xc0\xbb\x3d\x16\xc4\x2f\xc9\xd4\x97\xac\x00\xa8\x10\xb5\x04\x98\x8b\x22\x74\x3b\x39\x7d\xfb\x6d\xb7\x9d\xba\xad\x8e\xd3\xae\x88\xb7\xc4\x94\x6b\xa1\xbb\xf5\xd6\x53\x20\x5d\xaf\x87\xcd\xcd\x6d\x79\x6b\x02\x27\xde\x32\xc6\xd8\x12\xd7\x7c\x77\x9a\xbc\xb4\x6f\x0f\xa6\x46\x61\x77\xe9\x9b\xb1\x9a\x81\x76\x87\x9c\xb7\x23\xb5\x9f\x1b\x9c\x4a\x77\x8d\xd3\xde\x31\xbb\x8f\x8f\xb1\x6f\x1e\x22\x59\x23\x80\xee\xf9\xb0\x7b\x36\xdd\x5a\xc5\xb8\x81\x9f\x18\x0b\x3e\xe4\x0d\x3e\x37\x34\xc5\x5c\xbf\x94\x7d\xa2\x7c\x8a\x49\xb8\xdb\x8a\xf3\x2c\xed\xa0\xbb\x6c\x1e\x63\x34\x9c\xbc\x45\x35\x18\x5b\x23\x7b\xa5\x48\xcb\xa2\x42\x8c\xa0\x73\x3c\x5e\xf0\x85\xb0\x0c\x5d\x8f\x62\x12\x2e\x15\xa4\xc7\x34\xca\xa7\xdd\x30\xce\x0b\x1e\x16\xc3\x0b\x75\x75\x54\x9f\xf0\xd8\x2b\x55\x74\xcf\xff\x19\x64\x4b\x8e\x3b\x2b\x5e\x92\xae\xda\xde\x94\x6d\xc9\xfe\x16\xdb\x33\x84\xc2\x30\x2d\x9b\x39\x4d\x7c\xd3\x33\x30\x3a\x33\x37\xc1\x3f\xf6\x38\x3c\x8f\x1d\x51\x53\xd9\xbf\x3b\x98\x5e\xd5\x61\x9f\x82\xe0\x05\x84\xd5\xbd\x6a\xdb\x24\xbd\x9b\xcb\x48\x75\x74\x28\xd4\x0e\x22\x9e\x86\xe9\x86\xf0\x3f\x7d\x34\xb8\xdf\xfc\xe4\x70\x37\xd4\xa7\x7b\x0f\xdc\x0b\x89\x4a\x5d\x43\xcd\x82\x03\xb1\x8d\x26\x10\xa7\x3c\xe4\x3a\x72\xdd\xed\xd4\xb7\x1d\x60\x8e\x1d\xdc\xc4\x0e\xa0\xe8\xaf\xaf\x32\xec\x63\x0a\x0e\xf7\x23\xde\x1e\x14\x23\x66\x79\x83\x7f\xd1\x1b\x06\xf1\xe7\x69\x85\x8b\xb4\x95\xe5\xcd\x11\x0e\x0e\x4f\x20\x72\xec\xe3\xde\xca\xee\xd7\xe5\x19\x7f\x7a\xd8\x75\xd9\x34\xae\x7a\x5f\xfe\xf9\x71\x16\x0c\x03\xe6\xcf\x22\xdb\xdd\xca\x7f\xc3\x78\xf0\xc2\xca\xb3\x2a\xdb\x9b\x3c\x6b\x10\x04\xc9\x26\xc4\x44\x8a\x41\x72\xc6\x82\xf5\x22\xaf\xcf\x43\xdc\x04\x7f\x76\x8c\x7d\x4a\x0d\xd8\xc7\x3c\x36\xb9\x3b\x77\x40\x16\xc1\x48\xbd\xd5\x5b\xb5\xe9\xdd\x4c\x5c\x3f\xb2\x05\x54\x71\x8c\x81\x68\xeb\xc9\x1d\xb9\xff\x35\x97\xd7\x2f\x1e\x71\x6c\x6f\xa3\x31\x94\xc0\x6d\xe0\xbb\x8e\x04\xa7\xaa\x0f\x87\x99\x41\xec\x34\x62\x84\xa7\xc0\xa7\x26\xd8\xba\xd5\xa1\x17\xf7\xe7\x27\xf0\xb5\x23\x00\x05\x0f\x4e\xe4\xfd\x9e\xc8\x85\x32\xdd\x3f\x14\x7c\x93\x36\xdd\xdb\x77\xe2\xca\x60\xdb\x97\xc6\x3b\xd8\x6d\x3b\xa0\x7d\x8f\x9e\x6c\x07\x62\xc0\x7e\x14\xb2\x1b\xbb\x9f\x30\x0b\xfe\x19\x7d\xc2\x58\xc3\x80\x35\xd3\x07\x4e\x75\xa9\x57\x8f\x9d\xc7\x0e\x3b\x40\xff\x55\xeb\xc4\xb2\xbc\xbe\x7e\x6e\x22\xb8\xcd\x7e\x80\xe3\x58\xf6\xba\x09\xa9\x34\x6c\x58\x25\xb2\x36\xc9\x4b\x68\xe3\x8a\x07\xf7\x5f\x67\xcf\xf8\x5e\xd8\x33\xba\x79\x56\x66\xcd\x2c\xf1\x2f\x06\x8b\x6b\x60\xb5\xe2\xea\x91\x45\x44\x22\xf3\xd0\xac\xf6\x17\x16\x96\xeb\x7c\x6d\x7e\x19\x94\x34\xab\xf3\x6b\xcb\xfa\x1e\x2b\xeb\xb3\x36\xbf\xec\xdc\xbd\x3f\x38\xc6\x8e\x85\xdd\xee\xb2\x2a\xe7\x5d\x63\xc1\x8f\x82\x11\x0e\x14\xc5\x74\x42\x8d\x2a\xd2\x0a\x00\x45\xee\xf5\xc2\xc0\x3f\xbf\x60\x00\xfe\xb9\x9f\x96\xe1\xe5\x06\xbf\x90\x4e\xa3\x45\x5e\x44\x14\x00\x1c\xda\x1c\x13\xb2\x88\xc5\xb9\xa5\x39\x93\x93\xba\xf5\x63\xe2\xc9\x10\x69\xcc\x56\xee\x9d\x9f\xbe\xfd\xd4\xa9\xdb\x60\x33\x91\x53\x6e\x76\x66\x66\x7b\x7b\xbb\x11\x87\x29\x7a\x39\x87\x45\x11\x6f\xc0\xcd\xb0\x98\xa1\x2c\xa6\x21\x8b\xa9\x06\x5f\xca\xd2\x69\x9d\xbf\x6a\x5d\x61\xd3\x02\x57\xaa\xa8\x98\xd8\x3b\x7d\xb8\xf6\xa7\xfd\x46\x33\xeb\xcc\x74\xfa\xd3\x88\xf4\x30\xad\xf2\xb0\xfd\x83\x81\xb5\x1d\x7b\x47\xb9\x46\x6e\xf4\xc2\x3c\x32\x21\xb8\xa4\x8b\x99\x33\xfd\xef\x06\xdb\xca\xa6\x59\xee\x1b\xe4\x76\xe9\x8c\xdf\xcf\xa8\xab\xed\x8f\x7b\xc1\x9b\xd0\x9d\x59\x5f\x70\xf5\x38\x11\xb8\x99\x76\xb1\x80\xc2\x8f\xcb\x84\xc7\x55\x80\xb0\xc6\xbf\xa3\x90\x27\xb9\xcf\x50\xf5\x96\x9d\xe9\x15\xf2\x85\xa5\xd5\x6f\x3f\x37\x77\xe6\xec\xb9\x06\xd7\xbe\xe0\x4a\x15\x9f\xa5\xa4\x9d\x01\x1c\x0f\xcb\x63\xc4\xc4\xaf\x83\xa6\xe7\x36\xa5\xe8\x41\x42\x6e\x4b\x13\x43\x52\x8f\xda\x99\x5c\xc5\xca\x9f\x1f\x66\xcf\x1e\xb5\xab\xa2\x66\xec\x00\x0b\xf1\x00\x0b\xf1\x00\x0b\xf1\x7f\x0d\x2c\xc4\x5f\xaa\xb9\x41\xa8\x2a\xba\x39\x4b\x92\x38\xdd\xb8\x00\x82\x08\x00\xb6\xb4\x7a\xc9\xaa\x28\x57\xcb\x3c\x2c\xc5\x46\xdf\x7f\x65\x2d\xd8\xdc\x2d\x91\xcd\x9e\x6b\x73\xa6\x1b\x7a\x01\xb9\xc4\x76\xcb\x65\xad\xdf\xad\x28\xc6\x5e\xed\xb1\x57\x79\xec\x28\x20\xe7\x42\xdc\xf5\x65\xb5\xd3\x35\x97\xd5\xb3\x0a\x54\x33\x98\xa0\xc2\xc4\x55\x68\x5b\x85\x59\xaa\x6b\x9d\xad\x15\x3f\x62\xb0\x23\x2a\x1c\x4a\x6f\x3b\x3c\x34\x42\x03\x00\x13\x16\xe2\x1c\x89\xdb\x48\xf1\xfb\x37\x13\x41\x6f\xc5\xc2\x2a\x4e\x11\x38\x99\x18\x6a\xb3\xbc\x4f\x71\x00\x70\x19\x3d\x5b\x79\xa5\x1c\xd4\x94\xaf\x5e\xb6\x9d\x8a\x1c\xe0\x8d\xd1\x13\x1f\xb4\xb3\x72\xaa\xaf\x9e\x3d\x17\xa7\xbd\xcb\x00\x81\xbc\x2e\x12\x0d\x6c\xad\x3a\xef\xaf\x0e\xb1\x57\xd5\xd8\x44\x47\x44\x71\xaf\xe3\x3f\xee\x05\x7f\xe1\x41\xc0\xa1\xda\x21\x14\x98\x07\x26\xd0\xfd\x12\x36\x37\x71\xa6\xeb\x2a\xb9\x90\x53\x71\xc1\x83\xa0\x02\xeb\xab\xb9\xff\xd3\x2c\x12\xc7\x0b\x9d\x16\xb3\xb6\x8e\x3b\xd5\x13\x24\x8e\x3b\xb3\xff\xbc\xe8\x40\x61\xd7\xc8\xd4\xa7\xe8\xf9\xa0\x80\x28\xce\xed\xb9\xff\x27\x63\xec\x68\x11\xbf\x54\x60\xc8\xd2\xa7\xc7\xf6\x15\xb2\x10\xfc\xc0\xd8\x5a\x56\xca\x29\xa6\x23\x41\x80\xbb\x5f\x77\xa8\xde\xb1\xb4\x80\xa7\x66\x09\x0d\xae\xc2\x6c\x78\x29\x69\x95\x90\xec\xbb\xc8\x94\x98\xb8\x9e\x60\x28\x57\x07\x7a\x44\xf7\xe2\x9a\x15\x82\x83\x5a\x67\x40\xd8\xb6\xd2\x98\x82\xb6\xd5\x24\xb7\x43\x57\x88\x1c\xde\xe2\x92\x5f\x55\x9d\x62\x1d\x5f\x60\x67\x54\x46\xdb\xa2\xd7\x41\x32\x76\x28\x85\x74\x60\xe4\x30\x66\x5c\xad\x50\xbb\x0d\xd3\xb9\x32\x55\xd2\x38\x71\xe7\x8a\x72\x57\xd5\x0d\xef\xa5\x4a\xb4\xa9\x8e\xfc\xf0\x81\xef\x15\x22\x9f\xde\xe8\xc5\xd1\xe0\x90\xb3\x5f\x39\xc2\x1a\xd6\x22\x8d\xe2\xa2\x99\x6d\xc9\xc1\x54\x02\x8d\xf6\x7f\x4a\xe2\xa6\x50\x9a\x89\xdb\x07\x9e\xba\x48\xe3\xea\xbe\xaa\xef\x77\x60\x57\x2d\x86\x2a\x27\x3e\x3e\x71\xa0\x38\xd8\xaf\xe2\x60\x53\x29\x0e\xd6\x83\xaf\x3d\x37\xbc\xef\x6d\x5d\xc1\x3d\x6c\x96\xdd\x39\x52\x57\xb0\xcb\x1c\x38\x50\x18\xec\xc3\x6e\xf0\x24\xa8\xe1\x1e\xf7\x92\xdd\x95\x12\x8b\xfe\xf3\xb4\x52\xc2\x8c\x77\x45\x27\x31\xb0\xc8\x5d\xa5\x04\xcc\x0d\xc6\xde\x5f\x63\xdf\x68\xdf\x89\xb2\x48\x1e\xf3\x80\x1a\x75\xb2\x71\xff\x96\xc8\xdb\x22\x8c\xfc\x37\xd4\x82\x15\xf5\x43\xce\x94\x1e\xf4\x5c\x35\xee\x4c\xcf\x8f\x4c\x25\x0d\x8b\x22\x6b\xc6\x18\x99\x0c\xe4\x88\x14\x00\x8e\x7b\xa7\xb3\x91\xbc\xcb\x63\xef\xf4\xd8\x91\x6e\x16\xdd\x2b\x6f\xce\xfe\x0f\x7b\xc1\xd2\x32\xfd\xa8\x16\xd4\xa2\x87\x57\x57\xdc\xf5\x0d\xde\x7b\xe5\x11\xf6\xf5\x56\xc7\xe5\xeb\x61\x93\xc4\x4b\xdc\x67\xbf\x78\x38\xf8\x46\xf5\x63\x98\xe6\x57\xbe\x1b\xbe\xa5\xfe\xea\xc1\x96\xba\xef\x2d\xf5\x45\x6a\x4b\x5d\x0e\xbe\x6e\x48\x18\x15\x74\xbe\xbd\xa7\x4e\xb1\xe3\xec\x9b\x47\xee\xa9\xf6\xe0\x1e\x6c\xa0\xfb\xd8\x40\x5b\xd6\x06\xfa\xe2\xfd\x6d\xa0\x5f\xbf\x83\x51\x68\xef\x9a\x5d\x62\x2c\xa2\x75\x3a\x8a\xa0\x08\xc6\xdf\xc5\x7a\xa1\xcd\x96\xfd\xc9\x0d\xec\x96\x3d\x55\x1c\x43\x75\x17\x10\x8a\xc9\xff\xd9\x1b\x82\x3f\xad\x39\x8f\x68\x12\x51\xf0\x82\xc5\x58\x97\x67\x5d\x91\x97\xb1\x72\x48\x3c\x3f\xf7\x22\x75\xb1\x56\x8c\x1f\x88\xc3\x57\x66\x32\xed\x16\x40\xc9\x99\xcf\x07\xa1\x61\x42\x0b\x0a\x58\x0a\xaf\x2b\x84\xf1\x04\xd7\x6f\x08\x16\x56\x78\x5b\x38\x3f\xd5\x66\x03\xf8\xe2\xa1\x81\xad\x51\xce\x52\xe0\xcd\x3f\x4f\x18\x6e\xa0\x8e\x40\xee\x14\xcc\x91\x6a\x4d\x6c\x27\x46\x7f\xa8\x22\xb6\xd5\xe5\x0c\x9c\x48\x74\xee\xb8\xb1\xd0\xe6\x14\x16\x45\xaf\x43\x3a\xf0\x30\xed\x9b\x54\x9a\x07\x19\x59\x7a\xe2\x14\x3c\xb3\x40\x73\x8d\x30\xb9\x43\xa3\xce\xde\x77\x94\xbd\x4e\x2d\xe1\x57\xd6\x82\xbf\x01\xb5\x27\xb8\xaf\x98\x8c\xab\x3a\x9b\xea\xc1\xa2\xc0\xce\x7a\x05\x75\xd6\x0a\x01\x50\xdc\x9f\x52\x20\x47\x97\x48\x68\x70\x2d\x63\x40\x85\x59\xc7\x86\xb7\x5d\x17\x21\x37\x92\xaf\xd6\xb2\xfc\x01\xa5\x06\xfe\x6e\x2f\x78\xc4\xa8\x81\xf7\xdd\x1f\x7c\x12\x14\x52\x25\xdc\xb0\x62\xcb\x6e\x01\xd9\xe3\x35\x89\x14\x3e\xca\xb8\x11\x4d\x39\x4a\x9c\x1f\xa8\xb1\xa7\xe7\xa2\xcc\xfb\x73\xad\x52\xe4\x0a\x50\xe4\x15\x35\xa5\x16\xf9\x73\x6f\xb1\x55\x55\x4c\x02\x32\x88\x85\x2a\xb2\x2e\x5a\xb2\x57\xcb\xb6\x35\x2c\x96\x56\x44\x66\x0f\x88\x1a\xab\x72\xe0\x44\x9e\x67\x7a\x03\x46\x3d\x8b\xbd\xd9\xc2\xfc\x2e\x43\xc0\x0a\xe2\x61\x02\x87\x61\x09\xde\xe8\x32\xd3\x69\xba\x01\x67\x85\xce\xc8\x62\x15\x72\xf2\x6c\x67\xdb\x3c\xc9\xd0\x77\x78\x3b\x8c\x4b\x5d\x4b\xe3\x1c\x5f\xcd\x7e\x80\xe3\x1a\x20\xa0\x7e\xd8\x0b\x5e\xef\x5d\x58\x5c\x18\x04\x59\x1c\xd5\xf9\x7a\x14\x47\x0d\xc0\x55\xdf\x4b\xb5\xca\x3b\x2f\x6e\xea\xc5\xee\xdc\xfa\xbc\xc7\x26\x20\x84\xa9\xf0\xff\x9d\x17\x3c\x06\xb3\x6b\x1e\x7e\x73\x38\x7b\x8d\xa7\x2e\x60\x38\x6a\xac\xba\x21\x33\xcc\x99\x5a\xad\x30\x4e\x00\xa7\x74\x89\x10\xed\xed\xb7\x38\x80\x6a\x3b\xc4\x3c\x45\xc4\xb1\x1e\x8e\xe1\xf5\x0c\x7b\x2e\x3b\x7d\x0d\xe7\x10\x96\x06\x0d\x61\xeb\x0a\x1f\xf8\x45\xc1\xb9\x35\xad\x64\xdf\xff\x6e\xe2\x40\x6f\x8e\x3b\x72\xba\xe5\x85\x89\x2a\x09\x84\x9e\xfe\xdb\xb1\xe0\xed\x9e\xfb\x4c\xfb\xf1\x76\xb3\xa2\x88\xd7\x13\x0b\xa5\x51\xeb\x33\x08\x61\x96\xdc\xd2\xa5\x30\x81\x1e\xd6\x46\x8d\x6b\x70\x67\x00\xf1\x3f\x55\x8d\xea\x80\x9e\xd9\x5d\x7f\x4a\x1b\x22\x53\xc5\x05\x77\xab\xf3\x40\x18\x97\x03\x9a\xbb\x5f\xab\xb1\x16\x3b\x4c\xd2\xba\xff\x92\x3d\xd0\x56\xba\x99\xae\xe0\x97\xc1\x37\x2e\x38\x48\x87\xa1\xbe\x00\xe8\x96\xb2\x8c\xb1\x52\xe4\x9d\x38\x05\xec\xfe\x90\xdd\x75\x95\x45\xad\xe9\x8f\x83\x6f\xaa\x96\x66\x32\xb6\x0a\x6c\xb1\xc3\xdb\xd8\xe6\x6b\x68\x18\xf5\xd6\x60\xc3\x28\x4b\xab\x9c\xff\xe4\x3b\x6e\xba\xa3\xd5\x00\xfe\x2f\xfb\xc1\xbd\xea\x47\x85\x54\x1e\x37\x88\x24\xdb\x00\x3e\x88\x60\x3d\x6c\x6e\x8a\x34\x0a\x4c\x78\x2e\xde\xa6\x94\xbf\xf0\x15\xef\xa8\x0e\xdf\x73\x06\xf4\xb3\x4f\x67\x6f\x71\x61\x45\x5e\xbb\x83\x1b\xd0\x0e\x95\xd5\x30\x20\x45\xb0\x68\x85\xa8\x6b\xfc\xf9\xe1\xc8\x77\xc3\x09\xd0\xb5\x51\x90\x7d\x9f\xc7\x0e\xb5\x21\x50\xf9\xb5\xde\x35\xa9\x52\xee\x93\x1f\x07\x4b\x90\xc7\x88\xca\x54\xd6\xb8\xdc\xef\xc3\xd4\x52\xeb\xe8\xf3\xa7\x99\xa5\x52\xbe\x89\x1a\xec\xe3\x35\x76\xa4\x9d\x15\x25\x1c\xc5\xbf\x56\x0b\xde\x57\x53\xbf\xf4\xa5\x4e\xb7\xc1\x36\x1a\xd1\x22\x05\x83\xc4\x7a\x5f\x65\x98\x17\x95\x38\x6b\x17\x68\xca\xbc\x00\xa9\x04\xe4\x2f\x34\xce\x21\x3c\x70\x9c\xf2\x85\xa5\x55\xae\x6c\xde\xe7\x55\x28\xab\xf9\x0e\x8f\x0f\xa5\x09\x87\xe0\x4e\x5d\x5f\xb7\x79\x71\x24\x40\x3d\xdc\x4b\x37\x60\x07\xc2\x12\x74\x74\xec\x9c\x42\xb6\xc3\x32\xa7\x8c\xfe\x3c\xc9\xb6\x45\xde\x0c\x0b\xd4\xcf\x76\xc3\xa2\x80\x4a\x01\xbd\x34\x9f\x5c\xb9\x77\x9e\x9f\x3c\x79\xcb\xa9\x29\x8b\xd0\xc8\xd9\x34\x3f\xe3\xb1\x23\x69\x16\x09\xc0\x2a\x06\x7b\xa8\xfa\x55\xd5\x28\xd8\xce\xf5\x4b\x59\x84\x2d\xd1\x74\x46\x95\x5e\xaf\x98\x70\x23\x81\x0b\xdf\xee\x1b\x54\x90\x83\xd1\x4c\x66\xe7\x0c\xd7\x30\x13\x97\x2c\xd7\x51\xd8\x2c\xa9\x8a\x8e\xb4\x6f\xbd\xc1\x63\x47\xd1\x09\x7e\x45\xb4\xfc\x47\x3d\x76\x62\xd7\xcd\x05\x9d\xea\xb4\xa9\x3a\x58\xd2\xdf\xa3\x80\xe0\x84\x7a\x84\xb6\x13\x06\xdd\x05\x40\x06\x77\xba\xce\xee\x1d\xf6\xe5\x09\x76\xa4\xcc\xba\x59\x92\x6d\xf4\xfd\x2f\x4d\x04\xbf\x39\xa1\x7e\x99\x45\x12\xe6\xeb\x71\x99\x87\x79\x9f\xeb\x77\x3b\xad\x1b\x67\xe1\xca\xfb\x4a\x01\x9e\xfc\x33\xb6\x27\x3f\x08\x65\xcd\x0c\x72\x31\x5f\xa1\xdf\x08\xe6\xdc\xb8\x0e\x7e\xf9\x90\x5f\xc1\xd7\x54\xad\x3b\x46\x76\xe1\xa1\xb6\x53\x64\x2d\x7e\xf2\xf6\x6a\x0d\x95\x5f\x07\x49\x3a\x75\x40\xcd\x24\xab\x3a\xd8\x05\x88\xb5\xb6\x2d\xc8\x13\x46\xce\xbc\x6d\x91\x24\x1c\xb0\x8c\x81\x33\x74\x96\xdf\xcc\xdd\xca\xab\xc5\x36\x8b\x7a\x20\xb4\xe3\x39\xb6\x41\x77\xfb\x40\x6b\x15\xe3\x7c\x1b\x44\x42\x47\x9f\x10\xe3\x94\x2d\xb5\x39\x9a\x16\xb0\xb9\xb0\x39\xce\x1d\x8c\x43\x5e\xd8\xc7\x0d\x76\xb3\x1e\xcb\x86\x5b\xc5\x97\x66\xe9\x0e\xd5\x93\x6f\x4d\x65\x18\xbf\xe6\xea\xec\xad\x32\xb9\xd8\x80\x9b\xfd\xa8\xea\xe0\xfb\xeb\x5f\x21\xd7\xbc\x5f\xe1\xa7\x51\xb7\x68\x0b\x84\x1f\x01\xf8\x79\xd8\x8d\x95\x36\xa2\x68\xbc\x73\x07\xd4\xde\xff\x52\x63\xe6\x18\xf6\x3f\x5f\x0b\xde\x5a\x33\x41\xf5\xc3\x0e\x8e\x6a\x30\x8d\xae\x5e\x08\x62\xbf\x85\xd9\x5a\x85\x3d\x70\x1b\xe9\x6c\x58\x2a\x90\x1f\x00\xb6\x21\xbb\x86\x14\xfd\xe8\x24\x82\x25\x4a\xe8\xee\x06\x5d\x00\xae\xa3\x2e\x08\x80\x76\x1f\x49\x4b\x71\x59\x41\x8e\xc5\x39\x97\xcb\xa0\x19\x76\x91\x8c\x27\x16\x6a\x49\xa9\xa5\x0f\xd0\xe2\x4e\x8c\xa0\x06\x3e\x00\x80\x5a\xbc\x5c\x94\xed\x30\xe5\x27\x4f\x9c\xd8\x01\xb3\x78\x17\xb8\xb1\x42\x94\x8c\xfd\xeb\x71\x76\xf7\x68\x18\x9e\xd5\x5e\x57\x61\xd3\x25\x08\x8a\xab\xec\xfd\xe8\xef\x54\xf8\x7f\x37\x16\x44\xbb\xa6\x72\x94\xbc\x85\xf2\x3b\x00\x75\x09\x44\x2f\x53\x2a\xed\x85\x00\x3e\xe7\x4e\xe2\x0a\xe6\xe1\x18\xfb\xce\x1a\x9b\xc8\xc3\x74\x43\x14\xfe\x23\xb5\xe0\x83\x1e\xfe\x8d\x30\x38\x6d\x83\x77\x4f\x8f\x09\xac\x5e\x55\x92\x42\x21\x1b\x5c\x01\x01\xa3\xc5\x15\x70\x73\xcb\x8c\x43\x90\x80\x11\x21\x07\xbf\xe4\x80\x0b\x0c\xcf\xfb\xd6\x5d\x14\x02\x8c\xcc\x2d\x08\x64\x87\x32\xcc\x4b\xf2\x5e\x8b\x4c\x4c\x1a\xdc\xad\xa5\x60\xb0\xd2\x4b\xe7\x8a\xab\xc0\x82\xa8\x8c\xcf\xe2\x02\x46\x06\x94\x6c\x3c\xef\x25\xc2\x4f\x82\x6f\x87\xe0\xd3\xb8\xda\xd5\x1a\x06\x29\x8a\x9b\x70\x65\x22\x86\xbd\x81\x3e\xd1\xde\x20\x34\x79\x57\x45\xb3\x97\xc7\x65\x7f\x1e\x27\xb1\x73\x6a\xbf\x99\xb1\x07\xae\x35\x7a\x73\x17\x62\x32\xff\x97\x8e\x06\x2f\xd8\x39\x89\x4d\x7a\xa7\xc8\xd7\x00\x74\x15\x55\x88\xc0\x43\xd1\xcd\x63\x90\xf3\x0d\x71\x0f\x41\xf5\x1f\x79\xa8\xc8\xd2\xe5\xb0\x6c\x3b\xf3\xea\xdf\x1c\x61\x67\x48\x7b\x34\x1b\x4c\xab\x80\xc5\xb0\x0a\x4b\x0f\x2f\x0c\x8e\xbc\x2c\xd9\xe9\x97\xd7\xd5\xd8\x91\x6e\x1e\x67\xb2\xdf\xfc\x47\xb4\x7e\xe7\xcf\x3c\xf5\x90\xa2\x39\x49\xfd\x81\xab\xc3\xc0\x08\x24\xc8\x99\x1c\x77\xba\x59\x5e\x86\x69\xd3\x48\xcc\xd4\x4a\x24\x4d\xc1\xb5\x02\x62\x6e\xd1\xe0\xe7\xa4\x74\x49\x9e\x83\xb8\x0c\x2c\x61\xb5\x1d\x6f\x48\x61\x58\x15\x2f\x37\x33\xe4\xb2\x23\x1e\x79\x10\xb9\x15\xcc\x65\x9c\xea\x73\x5c\x39\x45\x89\x34\xcc\xe3\xcc\xa6\xce\xdb\x88\xb7\x04\xb8\x0d\xa8\x16\x29\x8e\x31\xd8\x96\x2a\xee\x37\xef\xf6\x88\xb3\xe0\x1d\x5e\xf0\x66\x0f\x96\x3d\x76\xc0\xfd\x5d\x91\xce\x2d\x2f\xe2\x4e\x60\x66\xbc\xf1\xbd\xa0\xce\x75\x88\x0a\x37\xe2\xb2\xdd\x5b\x07\xaf\xd3\xfb\xe7\x16\x67\x28\x8f\x69\x27\x92\x64\x66\x3d\xc9\xd6\x67\x3a\x61\x51\x8a\x7c\x46\x1d\x3c\x33\xb7\x34\x4e\x34\x3a\xd1\x4d\x51\x58\x86\xd3\xb8\x5d\xdb\x0c\x85\xf6\x08\x3e\xc0\x8e\x59\xe8\xfc\xfe\x7d\xc1\xdd\x36\x58\xff\xb0\x39\x31\x00\xe6\x6f\x6a\xef\x30\xd6\xd7\xd8\x04\x8a\x71\xfe\xbb\x6a\xc1\x8f\xd6\xf0\xef\x6a\x74\xef\x9e\xfb\x65\xcd\xf2\x5e\x35\x39\x01\xb0\x85\x96\xc2\xba\x79\xdc\x91\x22\xaa\x51\x6c\xa9\x79\x24\x05\xe3\xa2\x00\x9b\x5e\xaa\x99\x4b\x14\x48\x00\xde\xc8\x21\x5d\x5c\x31\x89\xca\x02\x9f\xfc\x31\x79\xa7\xc7\xf4\xaa\x45\x4d\xa1\xfa\xa5\x34\x82\xf2\x62\xcf\x9f\xbf\x7a\xff\x12\xc6\x5f\x4f\xc6\x0d\xd1\x20\xb0\x33\xd0\xce\xa5\x19\xda\x0f\xa7\xe8\xba\x27\x45\x09\x29\x3c\xa1\x00\xb3\x21\x45\xfa\x12\x2f\x8f\x55\x66\x43\xb4\x47\x44\xbd\xa6\xb0\x24\xae\xea\x68\xd8\x95\xfd\xde\xa3\xec\xa4\x8b\xad\x9f\x15\xcd\x10\xfc\xbc\x88\x26\xcf\x44\x05\xe5\x71\x93\x00\x51\xff\xfd\x91\xe0\xbb\xbd\xc1\xe7\x15\xd9\x4e\x69\x04\x34\xbb\x53\xc8\x3b\x90\x5a\xe9\x3d\x51\xb1\xb1\x39\x70\xe3\x99\xb4\x48\x7b\xea\xbc\x1d\x97\xc5\x74\x57\xe4\xd3\xa8\x5b\x06\x52\x99\x54\xf9\x27\xd2\x27\x53\x8d\x2b\xde\x04\x5e\xac\xae\x78\x0c\x4b\x41\xc6\xb3\x1b\xa8\x16\x40\xfd\xe4\x6c\xa2\x3f\x70\x98\xbd\xde\x63\xce\x7b\xff\x9f\xed\xcf\x69\xeb\xb9\x76\x66\x6a\x3a\x0e\x74\x03\x78\x4b\x61\x47\x4c\x86\x72\x46\x3c\x4c\xdf\x4f\x35\xd8\x39\x66\xd5\xde\x3f\x1d\x9c\x34\xbf\x86\xc5\xa4\x53\x36\x71\xca\x91\x76\xa0\x72\x17\xff\x6f\x35\x76\x04\x03\xc1\xb3\xdc\xff\xb3\xda\x68\x60\xd8\x9d\x8c\x7f\x52\xa0\x5e\xa5\x4c\x82\xb7\xd7\x54\x7e\xd6\xd9\x2d\xaf\x6d\x22\x6d\x66\x11\x0a\x0c\x1d\x1c\x6b\xed\xad\xbf\x39\x10\x57\xa0\xb2\x50\x67\x13\xee\xd2\xd4\x18\x4d\xc5\x49\x27\xbb\x33\xcf\xa0\xc3\x15\xff\x7f\x37\x04\xe0\xf1\x10\x49\xb7\x2c\xf3\x9d\xf6\x08\xa5\xad\x05\x73\x2e\xd4\x91\x0b\x6e\x6f\x99\xa1\x47\x6d\x9a\x04\xcd\xac\x2b\xe7\x3e\x56\x02\xfc\x7b\xeb\xfc\x21\xb0\x3f\xe8\x6c\x60\x2c\xd4\x15\x42\x89\x82\x1b\x21\xa8\x71\x28\x9f\x06\x7b\xc4\x63\x34\x1f\xfd\x2d\x76\xdf\x4e\x5c\x16\x03\xeb\x6d\x3e\xcf\x8a\x82\xbc\x0e\xaa\xca\x83\x9b\x29\x02\x3f\x56\xcc\x9f\x64\x3f\x18\x54\x1b\x34\xd8\xcf\x7b\xec\x86\x70\x4b\x00\x37\x18\x4c\xee\x77\x5c\x0d\xda\xed\x90\xd9\xbd\x61\xe7\xb6\xe3\xec\xa6\x84\x95\x59\x1a\x36\x65\xcb\xc0\x6e\x90\x8b\x44\x6c\x85\x80\x75\x16\x15\xd5\x55\xc0\x3e\x3f\xce\x6e\x1a\x82\xd2\x5f\x05\xe8\xf7\x7f\x61\x3c\x78\x61\xe5\xd9\xf0\x88\xd1\xe7\x67\xeb\xd7\x16\x31\xfa\xa9\x31\xf6\x69\x15\x31\xfa\x71\x8f\x4d\xed\xca\x24\xd0\x20\x16\x8c\xab\x0d\x19\x7d\x28\x5b\x7f\xd2\x43\x46\xff\xce\x0e\x19\xfd\x8b\x7d\x87\x8c\xbe\x73\x87\x90\x51\xab\x99\x85\xdb\xf1\x70\x30\xa9\xbe\x7f\xf2\x22\x4b\x1f\x3d\xcc\x6e\x1e\xa2\xac\x5b\xc8\xb6\xd3\xed\x30\x8f\xe6\x96\x17\x1d\x67\xeb\xdf\x9d\x08\xde\xe8\x8d\x78\xe9\xaa\xf3\x0d\xb4\xab\xa2\xb0\x8b\xe8\x33\xa4\x1d\x4e\x5b\x59\x83\x2f\xd8\x8f\xae\x9b\x2f\xf6\xcf\x1e\x62\x3f\x33\x2e\x05\x42\x30\x05\x9d\xcf\x22\xe1\xff\xd0\xb8\xe6\xea\x18\x57\x91\x3f\xb3\xbc\x93\x45\x82\xaf\xc7\xa5\xf6\xaa\xce\xac\xd5\x10\x27\xa2\xb0\x43\x97\xac\x30\xa2\x61\x39\xe8\x98\x1a\x51\xf2\xae\xc8\x3b\x71\x51\x20\x8f\xca\x9e\xb2\x4c\x79\xd6\x2c\x95\x67\x93\x76\x1a\x3e\x71\xe2\xc4\x09\x68\xf1\x89\x3b\xee\xb8\x83\x83\x17\x7b\x24\x9a\x71\x67\x30\x21\xa4\xba\xed\xe4\xc9\x06\x7f\xd1\xdc\xf9\x73\x40\xd8\xd3\x2d\x09\x7f\x08\x73\x96\x09\x9c\x8f\x8b\x3a\x8a\x5e\x1a\x3c\xd7\x7d\x4b\x87\x03\x35\xcf\x05\x94\x39\x71\xfb\xad\xb7\x36\xf8\x02\xb9\xac\xc7\x84\x95\x42\xc7\x14\x42\xe9\x28\x7a\x9d\x56\x4b\x34\x35\x73\x23\x86\x85\xc0\xfd\x8e\x34\x28\xf1\x46\x5b\x05\xee\x34\xb3\xb4\x95\xc4\x4d\x22\x63\x41\x6b\x80\x52\x34\xa0\xfb\x05\xe4\x45\x3e\x78\x89\x80\xca\xd5\x51\x07\xd0\x2a\x40\x8d\xe1\x00\xb6\xf5\x92\x52\x69\xbb\x31\x33\x33\x56\x85\xa8\x04\x67\xbd\x5c\x79\x6c\x95\xc1\xb3\x86\x78\x6c\x45\x83\xd3\x14\xaa\xb0\x77\xf0\xeb\x91\xeb\xea\xde\x38\x11\xec\x5f\xd4\x9c\x7d\x5e\x25\x5e\xca\x22\x81\xa8\x2a\xb4\xfa\x1e\xa9\x05\xbd\xea\x43\xe7\x56\xad\x7c\x12\x5b\xa8\x03\x74\xb8\x05\x1a\x0e\x37\x59\xd1\x5b\x47\xb5\xdb\x24\x10\xb7\x83\x4a\x4d\x6d\x0a\x53\x3a\xb0\x27\xcd\xd2\xe9\x34\x4e\xdc\xe5\xf5\x32\xd6\x67\x47\x9b\x0a\xed\xc5\x4f\xd8\xec\x5e\x0c\x8b\x98\xba\x5a\xfb\xc0\xbc\x1a\x6a\x05\x58\xc2\x10\x07\x9d\x88\x7d\xc6\x1f\x8a\x1f\x23\xd3\x91\x4c\xfe\x0b\x7e\xf0\x6c\xf3\x13\x79\xcb\xf6\x66\xa7\x0b\xa1\xd7\xdc\xc6\xfe\xd9\xd3\xe5\x6d\x18\x0c\x39\xc0\x42\xfd\xb6\xbd\xe0\x5b\x40\xf1\x00\xec\x25\xbf\x09\xb2\x55\x74\xac\x8a\xa3\x62\xa6\xd7\x8b\x09\xbb\x3a\x8d\x81\x52\xd2\x80\xbc\x29\x25\xf9\x55\x07\x65\xc8\x8f\xf0\xbf\x33\x37\xc9\xaf\xd8\x63\x1e\x7b\x2a\xed\xa6\x73\x65\x19\x36\xdb\x22\xf2\xbb\x41\x43\xb9\x77\xab\x8d\x16\x57\x55\x0e\xbe\x36\x90\x48\x89\x89\xd4\x0d\x57\x8b\x77\xaa\xca\xc2\x99\xcd\x22\x76\x03\x95\xb4\x98\x5e\x28\x84\xbf\x16\xdc\xa9\x6a\x80\x05\xc2\x3d\x5c\x55\x26\x4e\x61\x07\x9e\xec\x20\x4b\xce\x94\x72\x30\x1b\xa8\x4b\x85\xe6\xed\x1d\xe3\xb6\x02\xfa\xcd\xe3\xc1\x2b\xc7\x74\x29\x5a\xb1\x9b\x0b\x55\x9c\xdd\x42\xfe\xc2\x9e\xc8\x63\x75\x00\x37\x93\xac\x17\x29\xb7\x8d\x1c\x18\xd7\xc3\xad\x30\x4e\xe4\x67\xfb\x1a\x12\x53\x8d\xa5\xac\x14\xb3\xbc\xaa\x92\x6f\x26\xa0\x1b\x0a\xa5\x94\x90\x6f\x08\x59\x1e\x1a\x69\x50\x64\xcc\x37\xc0\xe8\xa4\x03\x21\x7b\xad\x56\xdc\x8c\x91\xd3\x0a\x27\x51\xdd\x72\xa6\x41\xc0\x5e\x10\x35\x9a\x59\x4e\xa0\xee\x9a\x57\x2c\xa6\x32\xa2\x06\x9f\x0f\x93\xc4\x72\xc2\x95\x57\x69\x11\x62\x00\x71\xc8\x5b\xbd\x24\x99\x26\x82\x2c\x38\x76\xbb\x08\x6f\xae\x54\x08\xb3\x33\x33\xdd\x5c\x09\x23\x77\xdc\x75\xea\xae\x93\xc4\x86\xa4\x6e\xab\xce\x88\x9d\x60\x0d\x56\xdf\xd3\xa2\x21\xd4\xde\xc7\xbd\xe3\xec\x1b\x1c\x3d\x38\x94\x3f\x0d\x75\x9f\xde\x14\x7d\xff\xb0\x7f\x08\x38\x35\x64\xca\xaf\x1f\x92\x52\x29\x52\xfd\x23\xfe\x04\x7c\xc5\x58\xc9\x9e\x1a\x85\xa2\x93\xa5\x06\x29\x3c\xdc\x01\x2b\xcf\xae\xd6\x82\xfb\x5d\x30\x65\xd0\xc5\xe5\xe9\x00\x6f\x0b\xed\xef\x41\xbc\xc8\x60\x7a\x65\x0f\xb3\x89\xb8\x13\x6e\x88\xc2\xdf\x08\xbe\x59\x4d\x4c\xed\x38\xc1\xf1\x1d\x57\x84\xce\x72\xc2\x5c\xfd\xba\xd3\x6e\x1b\x8b\x32\x37\xf6\x3d\x1e\x9b\xc0\xed\xd9\xff\x0e\x8f\x9d\xdc\x53\x0b\x69\x4f\x86\xad\x30\x78\xe1\x00\xe7\x69\x2b\xde\xe0\x18\x94\xee\x6e\x12\x7c\x2b\x0e\x51\x9c\xef\xa7\x61\x27\x6e\xc2\xf5\x2b\x41\x56\x53\xf9\x0d\xd9\x8f\x1b\xec\x63\x1e\x3b\xd4\x6d\x87\x85\xf0\x3f\xec\x05\x3f\xe7\xc9\x22\x97\xe5\x4f\xa3\xaa\x6a\xe2\x8c\xce\xd6\x29\x98\x3e\x89\x5b\xa2\xd9\x6f\x26\x82\xc3\x77\xb6\x15\x71\x5f\xab\x11\x73\x73\xf8\xa5\x53\x21\x2f\xc3\x9a\x65\xba\x4e\x8c\x57\xdb\xae\xc5\xcc\x51\x28\xfc\x86\xc7\x8e\x85\x09\x58\xe5\xe4\x7a\xf5\xdf\xef\x05\x1b\x73\xe6\xf7\xa8\xe0\x04\xeb\x98\xb1\x76\x5f\xb5\xcb\xa0\x36\x1c\x49\xc6\x40\x46\xb2\x65\xae\xf9\xb0\x1b\x36\xe3\xb2\x7f\x9d\x23\x09\xbe\xe0\xb1\x23\x4d\xca\xda\xff\x77\x5e\xf0\x2a\x4f\x15\x54\x6d\x43\x09\x61\x78\x43\x5a\x72\xcd\x41\x84\x5d\x79\xb7\x2f\x4a\x91\x96\xd3\x2a\xb8\x4c\x55\xe5\xfa\x36\xf2\xed\x35\xc7\x1d\xe8\xfb\x6b\xc1\x23\x9e\x71\xee\x51\x64\xe5\xa0\x72\x94\xab\x93\x04\x03\x3d\x15\x95\x2c\x45\xe9\xf7\x35\xfd\x74\x36\xf6\x32\xbf\x85\x9d\x60\x8d\xbd\xae\x53\xc5\x4c\xf4\x04\x6c\x91\x9f\x7a\xa6\x13\xd1\xb7\x23\x63\x0b\x49\x5b\x3f\xfe\xcc\xe0\xb5\xde\xc8\xd7\x4e\x4c\xf7\x50\x29\xcc\x96\xbe\x86\x64\xd3\x50\xfe\xe0\x9d\xb0\xcf\xcb\x3c\x8c\x13\xd4\xab\x10\x47\x83\xe1\x98\x42\x1c\xd5\xc6\x15\xcf\x8f\x74\x16\x05\xf1\x8f\x5c\xf1\x6e\xa4\x31\xbd\x4f\x84\x49\xd9\xee\x5f\xf1\x6e\x24\xfd\x83\x7e\x70\x83\xb8\xdc\x85\x9b\xca\x72\x16\xb9\xee\x64\xbf\xf6\x0c\xf6\x95\x23\xce\xfc\xf9\x93\x23\xc1\x57\x26\xe6\x07\x1c\xc2\x6c\x1a\x13\xb9\x92\x97\x17\xce\x50\x84\xa6\xae\x91\x4d\x7c\x07\xc0\x86\xb2\x31\xa6\xcd\x54\x5f\x8b\x13\x1a\x37\x2a\xed\x96\x21\xb7\x0b\xf4\xca\xb0\x2e\x69\xa5\xc5\x95\x8c\x22\xbd\xa5\x02\xcc\xc9\x25\xb5\xa9\x21\x44\xa3\xa8\x4a\xb7\x3f\x35\xcb\xa7\xf9\x6a\x3f\x6d\xde\x0b\x9e\xaa\xb3\xda\x4a\x4f\x35\x15\x29\x52\x17\x82\x94\x92\xa2\x73\x31\xfa\x0f\x20\x0d\xa7\x12\xac\x88\xa2\x8d\xb8\x24\xd4\xff\x4a\x87\xa7\x50\xd9\x79\xad\x51\x22\xb4\x5d\xf0\x40\x4e\x33\xfb\x8d\x6c\x6f\x25\x37\xf5\xbd\x0e\x99\x1d\x4e\xcf\xad\xf5\x92\x40\xcc\xdd\x60\xd3\x7c\x31\x35\x92\x93\x1c\x63\x6c\xa5\xa9\x18\x28\xe0\x64\xff\x8a\x18\x6e\x8b\x61\x29\x2f\xdc\xeb\x22\x21\xee\x56\x4c\x59\xa9\x0d\xfe\x4f\x87\x20\x93\xc8\x3a\x74\x1e\x2f\xed\xd6\xb2\x7d\xb6\x6f\x75\xb0\x75\xf2\x6c\xc9\x05\x6a\x78\x91\x32\xa7\x0d\x16\xb0\xdd\x6b\x3b\xa4\x6a\x6b\x43\x8b\x47\xf6\x73\x55\xd9\x81\x61\x1e\x92\x4f\xa5\x13\x94\xc0\xad\xab\x33\xb8\x7c\x55\x14\x8a\x0b\x3c\xfd\x5c\x76\x7a\x34\x37\xf2\x0e\x8a\x3a\x67\x07\xdd\x1b\x71\xdb\x1e\x59\xe0\xae\xfb\x76\x7c\x96\x55\xf6\x2d\xff\x94\xd2\x62\xfd\x53\x75\x48\x99\x2e\x6f\x63\x1a\x18\x69\x47\xb9\x71\x9e\x55\x76\x3b\xff\x6e\x95\xcd\xff\xa1\x82\xd5\x95\x3a\x76\x0f\xd9\xbd\xee\x30\x7b\x0a\x0d\x12\xee\x96\xfe\xdf\x4f\x04\xef\x9e\x58\xb0\x1f\xed\xe4\x23\x0b\x33\x71\x1b\xc3\x14\xb6\x62\x8c\x5d\xd8\x0e\x0b\x39\xca\x4d\x51\x14\x66\x26\xcc\x2d\x2f\x2a\x43\x85\x4e\x58\xf4\xd6\xb5\x8d\x0f\x3d\x7a\x72\xb8\x2a\xb5\x43\xbc\x1d\xf5\x45\xc9\xd7\x85\x48\xcd\xe1\x3d\x7a\x96\x5b\x5b\x5c\x83\xcf\x01\x9a\xa2\x9a\xd6\x0a\xdc\xbb\x13\x76\x4d\xdc\x0c\x84\x76\xa8\xb0\x06\xbb\x76\xa6\xe6\xe0\xd6\xa6\xea\x6a\x51\x14\x0c\x7e\x2e\x4b\x03\x75\x98\x48\x65\x15\x97\x17\xce\xd8\x3b\x6e\x58\xf0\x76\xb8\x25\x77\x7c\x68\x4c\x27\xcc\x37\xc9\x07\x25\x92\xe2\xb5\xcc\x7d\x52\xee\xc1\xad\x52\x26\x86\xac\xb3\x5e\x39\x85\xc7\x05\x5c\x16\xb1\x94\x4e\xd8\x1d\x66\x2d\x93\x85\xab\x35\xbb\x65\x1b\x31\xae\xb1\x89\xe0\x98\x8f\x5a\x7d\xaa\x5d\x14\x47\xf2\x64\xc8\x9a\xcd\x1e\x1e\x15\xa1\x6e\x71\x29\xfb\x98\x02\x43\xca\x01\x17\x34\xdd\xdb\xa0\x7b\x0b\x7b\x65\x26\x27\x4f\x13\x78\xb0\x65\x3f\xed\x38\x8c\xd4\x21\x10\x04\x25\x9b\x02\xf5\x02\xd8\xf4\x12\xd0\xf3\x37\x32\x51\xf0\xa2\x93\x21\x2a\x3b\x8d\xaf\xf1\x91\x40\xb4\x0c\x75\xa4\x76\x32\xc3\x3a\x89\x99\x9d\x0b\xe5\x5d\xdc\x2c\x11\x91\x96\xa0\xfc\xb4\x3a\xdb\x09\xb3\xe9\xe6\xd9\x7a\x22\x3a\xc4\xc7\x23\xdb\xaf\xfa\xa7\x68\xbc\xd3\xbb\x9b\xdd\xc5\xee\xb8\x86\x0d\x6c\x2d\x76\xb0\x97\xd8\x25\x36\x44\xe4\xf1\x9f\xaf\x96\xf8\x6d\x4b\xf6\x11\xe7\x6c\xbf\xfa\x06\x62\x48\xb2\x15\xa1\xac\xb3\xe2\x5f\xc2\x1c\xe9\xc8\x7f\x81\xca\xfb\x76\xbc\x13\x54\x0e\x51\xc5\x73\xac\x54\xbe\x96\xf8\xb3\x0e\x23\xe6\x64\xfe\x05\x8f\xf9\x6a\xb1\x3e\x4f\xa4\x14\x22\xe5\x7f\x54\xd3\x36\xff\x9c\x77\x3e\x03\x90\x08\x79\x43\xe4\x1b\x3a\x89\x59\xe2\x30\x61\x21\xd4\x54\x3b\x4d\xcb\xf5\x84\x47\x67\xc3\x92\xaf\xf4\x89\x02\x4e\x6c\x70\xcc\x17\xca\x60\x6f\xb6\xa9\xb8\x20\x94\x75\x8d\x0c\x36\x50\x3d\x2e\x1e\xee\x85\x09\xdc\xcb\x96\x17\xce\x1c\xd7\x06\x7b\x53\x3b\xb7\x07\x5f\xed\xd9\x82\xf5\x0e\x83\x7b\x3e\x6e\xe6\x99\x1c\x61\xff\xa2\x7f\x34\x0a\x4b\x31\x2d\xa7\x5e\x70\x5a\x3f\x87\xda\x51\x24\x76\xd6\xe2\xf0\x08\xe9\x9e\x64\x0a\xf2\x0c\x48\xc4\x96\x48\xb8\xbc\xb8\xc6\x45\xd5\x14\xfe\xe6\xa3\x8e\x8c\xef\x06\x96\x5a\x2c\xc8\x73\x3a\xd8\x52\xca\xbb\xe5\xe0\x63\x13\x3b\x05\x12\xb9\x9d\x8f\x1d\xa9\xe9\xde\x6e\x1d\x7e\x64\x0a\x18\xc6\xbd\x86\xbe\x07\x66\x85\x52\xe4\xad\xb0\xe9\x5a\x20\x3f\x7f\x98\x7d\x0b\x3b\xa2\xbe\xf7\xcf\x05\xcf\x59\xd1\x68\xdf\x05\x37\x41\x41\x5c\x5c\xc6\x40\x03\xcb\x19\xa4\xdf\x15\x45\x83\xf3\xe0\xe6\x80\x80\x51\xc2\x24\x71\x3a\xe5\xdb\xd8\x31\xeb\x64\xf1\xef\x0f\xce\xac\x5a\x07\xcd\x9e\xf3\x57\xd9\xa7\x59\xea\xba\xcb\x3f\xe6\xb1\xf1\x2d\x91\xaf\xfb\x2f\x0b\xd2\x8b\x22\x5f\x47\x5d\xb7\xe5\x0f\xa0\xf3\x02\x0b\x83\xc8\xd7\xd1\xb0\x31\xcb\x37\x44\x59\x87\xbd\xb0\xce\xb7\xa5\x9c\x50\x27\x6b\x52\x9d\x62\xab\xeb\xb8\xa7\x88\xba\xdc\x6d\x2e\xf7\x77\x6c\xe5\x2a\x3b\x4c\x53\xc7\xbf\x2f\xb8\x5b\xc5\xf3\xd3\xd6\x2f\x0b\xbe\x68\x26\x16\x84\x8d\xeb\x68\xbe\x1d\x32\x3d\xaf\xe2\xcf\x16\x82\x3b\x1c\xb4\x37\x99\x21\x3e\xb8\x9a\xec\x1e\x55\xd1\xa0\x2f\x0d\x3a\xa3\x9c\x3d\x06\xd0\xcc\x54\x3c\x2b\x02\x3d\x05\x1b\xa2\x0c\xb8\x3a\x2b\xcd\x63\xfc\x19\x34\xe4\x38\x4d\xc2\x5e\x3f\x35\xa2\x12\x5f\xa9\xd9\x18\x6b\x5f\xaa\x05\xbf\x5f\xdb\x1d\x63\x8d\xc2\x30\x2b\x75\x6a\x70\x3e\xaf\x76\xd7\xba\x89\x87\x4c\x55\x3c\x8c\xfa\x08\xed\x78\x69\x66\xe5\x0b\xc7\x66\x92\x98\x27\x85\x5d\xf3\x58\x03\x3f\x51\x0b\xcf\x65\xcd\x30\x21\x36\x8f\x39\x20\x83\x5f\x11\x5b\xb1\xd8\xae\x7e\x65\x4e\x39\x42\x54\xab\xe2\xfc\x15\x83\x1d\x14\x84\x49\x12\xc0\x37\x23\xa1\xd7\x0a\xe5\x3f\x30\xa4\x0a\x00\xe7\x29\x92\xd6\x90\x57\x76\xb7\xbf\xf7\x98\xc3\x8f\x6c\x78\xd9\x35\x9c\xe7\xbc\x3e\xea\xc1\xef\xe1\x91\x63\xc1\x0b\x46\xbe\xd5\x7e\x39\x55\xf7\x83\x90\xe7\xe6\x1b\x5b\x08\x74\xf6\x9b\x9f\x60\xec\xb1\x1a\x7b\x6a\x27\x4e\x81\x4f\x4e\x45\xff\xfe\xa5\xe6\xf9\xf8\x03\xef\x3c\x09\xcf\x16\x0b\x3f\x45\xfd\xca\x9e\x22\x2e\x3d\x9e\x8a\xed\xa4\xaf\x6d\xc0\x16\x66\xf7\xba\x62\xe0\x93\xfb\x37\x44\xd6\xa5\x7d\x15\x02\x69\x34\xc4\xcd\x3c\x2c\xa4\xf0\x52\x87\x4c\xe3\x92\xd8\x78\x2c\x67\x51\xcb\x4a\xe1\x18\x69\xf9\xa4\x2d\xd2\x0e\xfb\x40\xca\x99\x45\x06\x81\x2f\x64\x1d\x80\x0a\x4d\xb9\x84\xfe\x35\xb9\xed\x42\x87\x15\xfe\x1b\xb5\x73\xec\x3f\x78\xd4\xf3\x1a\x69\xd8\x74\x83\xba\x4d\xa8\xcf\x6c\x68\x51\xd0\x9b\xa3\x47\x92\x1d\x11\xa6\x56\x80\x62\x60\xe7\x2f\x15\x79\x06\x4b\xa0\x97\x5a\x01\xa0\x76\x03\x4f\x5e\xb5\x22\x6e\x3b\xcb\x37\x93\x2c\x8c\x8a\x19\x33\xea\xc5\x8c\x35\x1b\xcc\xe3\x9b\xb6\xdb\x61\x39\x1d\x17\xd3\xe1\xf4\xd0\xf7\x4e\x17\xfd\xc2\x98\xe5\x5e\xf6\xd3\x63\xc1\xeb\xc6\x56\x2d\xe7\xb0\x90\xbc\xbd\x1e\xee\x89\xbc\x0f\x78\x31\xfa\x36\x5e\x0e\x86\x72\xe8\x5e\x05\x31\x0a\x24\x58\x3b\x33\x05\x37\x50\xba\x1b\x80\x06\x4a\x81\x30\x21\xc5\x3c\x42\x96\x88\xe5\x2c\xb2\x3c\x4b\x30\x7e\x4d\x5e\x71\xa1\x7b\x49\x91\x84\x8e\xc5\x06\x66\x35\x4e\x79\x96\x47\x38\x4e\xeb\x96\x36\xc8\x88\x75\xc3\x17\x11\xd8\xcd\x08\x80\xcf\xae\x1d\xd5\x2c\x4b\x2b\xb5\xb9\xae\xec\x25\x58\xc8\xcc\x4d\xf0\xef\xb4\x1a\x91\x62\xa7\xf8\x95\x0f\xd6\xd8\x11\x55\x1b\xff\x3d\xb5\x3d\xc4\xb1\x55\xa0\xf9\x83\xbf\xf7\xd4\x4f\xb5\x10\xec\x78\x35\xd7\x0d\x4b\x2e\x48\x87\xe1\x58\x6d\x0b\x71\x8b\xc7\x96\x82\x4a\xaf\x1c\x10\xcf\x23\x51\x8a\xa6\x89\xfe\x29\xc3\x4d\x01\x63\xdc\x14\x11\x58\xca\x61\x4a\x85\x5c\x55\x63\x45\xb4\x9e\xd0\x95\xd1\xcd\xa2\x69\xd5\x65\xec\x3f\x1c\x65\xdf\x34\x74\xcf\xc6\x53\xe1\x85\xbd\xac\x0c\x01\x92\xe8\xe7\x8e\x06\xa7\x06\x9e\x56\x80\x71\xec\xd7\x1c\x1c\x32\x86\x83\xd2\xbf\xee\x80\xc2\x65\xdf\x20\x45\x1f\xf0\x94\xcf\xcb\x7b\xbd\xa0\x3b\x0c\xa6\xc8\x19\x0d\x5a\x62\x57\x3d\xb1\xd0\x86\x30\xa3\xaa\x30\xfd\xb0\xcc\xad\x98\xb9\x7a\xeb\x87\x53\x9d\x03\x1c\xa4\x7d\x00\xae\xfc\x8e\xed\xee\xf8\xa1\xab\xf1\x85\x1d\x82\x84\xf4\xa8\x37\x02\x4b\xee\x49\x6c\xdc\xe3\xde\x8b\x76\x47\x5c\xba\xdd\xbf\x75\x7a\x38\xc0\x92\xc5\xdd\x32\xb0\x41\x31\xf6\x5b\x2e\xca\xe5\x2e\xb8\xdd\xb0\xd5\x7d\xff\x75\xe4\xdf\xf8\xec\xc4\xc1\x5c\xff\x1f\x1b\x34\xf1\xe0\x28\xda\xef\x51\x74\x59\x9d\x44\xd9\xd5\x73\x97\xec\x8c\x47\xba\xcb\x6a\xdd\x3b\xde\xe5\x5e\x98\x36\x10\xd4\x92\x8f\x26\xec\x60\x1f\xbe\xc1\x71\x5e\x24\x3f\x08\xb0\x4a\xad\x2e\x2e\x65\x91\xf0\x7f\xec\x86\xe0\xe3\xe3\xf4\x83\xc0\x73\x86\x80\xa8\x25\x09\x9f\x5f\x5d\xe4\x51\x1e\x6f\x21\x1e\x70\x51\x86\x20\x9b\xcb\x24\xe4\x93\x61\x27\x20\x00\xb4\x54\x0c\x84\xeb\xaa\xa2\x14\xdc\x1a\xb8\xf4\x26\xfd\x06\x9f\x2b\x10\x21\x2a\x24\xaa\x79\x1b\x73\x7a\x1a\xf3\x9d\xce\xc5\x46\x5c\x94\x79\x88\xb1\x9b\xcd\x30\x37\xd7\x56\x04\xe3\xd9\x24\x6f\x20\xa4\x6d\x77\x74\xf9\x0e\xff\x62\xa5\x16\x4a\x03\x6f\x9a\x20\xab\xd1\x0d\x73\x98\x0c\x2a\xd3\x6e\xd2\xdb\x88\x53\xae\x2a\x81\xe6\x72\xdd\x75\x61\x61\x62\x7a\x11\x4f\xac\xd0\x5d\x43\xc6\x0a\x2a\x0d\xdc\x90\x8b\x02\xae\xd8\x71\x49\x0a\x0f\x32\x02\x97\xda\x88\x9a\x66\x50\x9d\x05\xea\x51\x73\x85\xa6\x3b\x56\x0a\xce\xc8\x54\x71\xe5\x05\xb5\x65\x54\x6c\x49\xb6\xcd\x45\x9a\xf5\x36\xda\xc4\xa8\x51\xf2\xe8\xff\x67\xef\x5d\xe0\x2c\xb9\xca\x7a\xd1\x5f\xed\xee\x79\xad\x90\x04\xca\x07\x2a\xc7\xe3\x3a\x05\x3a\x33\x61\xf7\xee\xee\xc9\x83\x30\x49\x08\x9d\x9e\x19\xd2\xc9\x4c\x4f\x33\xdd\x49\x78\x1c\x4c\x57\xef\xbd\x76\xef\xa2\x6b\xd7\xda\x54\xd5\xee\x9e\x1d\xf4\x08\x41\x0c\x08\x02\x2a\x39\x62\x0b\x5c\x1f\x11\x90\xab\x08\x57\x2e\x28\x2a\x1e\xc0\x5c\x50\x3c\x1e\x44\x05\xf4\xca\x43\x8f\x28\xa0\xc7\x17\x78\xd5\xe0\xef\x9c\xfb\x5b\xdf\xf7\xad\x55\x6b\xd5\xae\xde\xdd\x3d\x3d\x09\x5c\x6f\xeb\x8f\x4c\xef\x7a\xac\x5a\xcf\x6f\x7d\xeb\x7b\xfc\xff\x52\x80\xfb\xdc\x0c\x87\x11\xd1\x6e\x3b\xc2\x84\x9f\xdf\x48\x44\x5a\xb0\x3c\x40\x09\x05\xb2\xca\x16\x08\x00\x54\xd6\xa6\x07\x69\x1b\xce\xae\xf2\x27\xfb\x28\x9f\xfb\x1c\x88\x5f\xc3\x6d\xf9\x7b\xac\x6d\xb9\xb7\xd7\x7c\x9b\x49\xb3\x15\xc3\x42\xd7\xb1\xeb\x7a\x21\x92\x85\x1d\x96\x04\x24\xc2\xb2\x7b\x29\x91\xe9\x9e\x11\xb1\x95\xc3\xb2\x19\x0e\xfb\x4f\xc9\x46\x59\x16\xe9\xc9\x47\xbc\xe7\x6f\xbf\xad\xdc\xe8\xdf\x60\x60\x94\xf5\xc7\x4a\x20\xca\x54\x5c\x99\xcf\xe9\x9d\xe3\xec\x39\x97\x29\x8b\xdf\xf2\x72\x50\x3c\xd7\xef\x8f\x05\x0f\x8f\x6d\xf3\x90\x11\x0e\x1d\xb9\x81\x29\x2f\xe9\xba\xb0\xa3\x55\x6c\x2f\xbd\x12\xe6\x6e\x79\x99\x09\xea\xb2\x45\x48\xe1\xaa\x5f\x6e\x60\x31\xcb\x56\x6a\x70\x04\xc6\x4b\xb4\xde\xba\xa5\x35\x4c\x9e\x64\x9d\x5f\xc3\xc5\xc5\x9e\x04\x74\x3f\x3e\xb9\x45\x5d\x30\xf4\xdf\xcd\x16\xbe\x86\x2f\xdc\xb5\x34\xe4\x92\xaa\x2a\x01\xd1\x17\x87\x0a\xc0\x25\x8c\xb2\x8a\x00\x48\x9b\x1d\x44\xb2\xc8\x25\x0f\x13\xf2\x3f\x8b\x8b\xea\x50\xec\xf4\x54\x1e\x26\xf7\x85\x58\x81\xc9\x85\xf3\x8b\x4b\x93\x0b\x33\x4b\xb3\xb7\x0f\xd5\xa5\xfc\xc1\xe1\x8f\x0c\x15\x6a\x5b\xb9\x1e\xaa\xb3\xeb\x6d\xa7\x5f\x8b\xd2\x93\x9c\xcd\x73\x7d\xba\x71\x37\x41\x59\x25\xab\xf7\x20\x2b\xb5\xff\xa5\xa7\x06\xcb\x43\x57\x6d\x36\xb0\x84\x9b\xd2\x0c\x95\xb5\x95\x85\x43\xbe\x01\x44\x0d\x31\xb0\xa4\x51\x4e\x49\xef\x20\xa5\x0c\xd6\xc3\xe3\x50\x94\x61\x30\xf2\xa6\x77\x85\x1a\xf3\xd3\x90\xf5\x93\x6d\x7a\x4f\x34\xdf\x41\xcf\x01\xed\x54\xee\x71\xe9\x57\xaf\x61\x3f\xef\xb1\x2b\x09\x9f\x11\x29\xe6\xfd\x4d\x2f\x78\xb5\x77\xc6\xbe\xe4\xcc\x60\x67\x47\x21\xe4\x4c\x23\x69\x8b\xc6\x19\x99\xab\xd4\x01\x8c\x3d\x69\xf1\x09\x13\xb0\x45\x76\x54\x75\x73\x0e\x07\x47\xa6\x5c\x7d\xd4\x35\x5a\xc3\x15\x5b\x14\x7e\xf1\x00\xbb\x0a\x6b\xaf\xcd\xbc\xfe\x27\x0e\x5c\x86\x04\xe5\x1f\x3e\x70\xde\x29\x15\xd2\xbb\x5a\x00\xa5\x4b\x9c\xcd\x92\xa7\x7d\x54\x5e\xf4\xb8\xad\x84\x19\x2a\x91\x91\xa3\x21\x29\x25\x04\xac\xc2\x6a\x0e\xa3\x8d\xb5\xc1\xdd\x3a\x57\xa7\xe6\x1b\xfa\x7b\x19\xb7\xb0\x36\x18\x5a\x2d\x36\xce\x5b\x26\x52\xc3\x9e\x81\x6c\xd9\xd2\xae\x12\x2d\xa9\xcc\x76\x5f\xe4\x52\xdb\xa8\xdb\x5a\x4f\xa3\x8a\x6a\xa6\x7c\x58\x0b\x54\xb3\x06\x9f\xe1\x49\x3f\x8e\x4d\x4e\x7d\x51\x17\x0d\xf7\x43\xe1\xe5\xda\xb1\x2a\x53\xab\x86\xa5\x67\xd0\x87\x08\x0c\x2a\x46\xd5\xc1\x56\x34\x71\xa7\x85\xb4\x5a\x32\x76\x1f\x83\xdc\xb4\x90\x9f\x12\xbd\x58\x0e\xba\x22\xc9\x2f\xc8\x38\x06\xce\x17\xf0\x48\x2e\xc8\xd6\x42\x2a\x2f\x1a\xd0\x1d\x4a\xe1\xd7\x99\x1e\x15\x4d\x6e\xf0\xbb\x48\x0f\xa7\x4f\x9b\x0c\x72\x1d\xab\x60\x0f\xa7\xd2\x2d\x7a\xf9\x44\x94\xd4\xf9\x8a\xc0\xc4\x10\x91\x40\x8a\x07\xa9\x16\xd9\x5a\xd4\x2b\xcd\x72\x33\x15\x06\x3a\x55\xcf\x72\x2c\x14\xc4\x3d\x34\x4a\x68\xe8\x77\x26\x9e\x4e\x46\xd1\x63\x51\x84\xdf\x34\xd8\x1b\x6b\xec\x2a\x8a\x55\xd2\xfe\xb4\x57\x1a\x87\xd2\x97\xbd\x25\xe7\x96\x95\xd8\xa6\x43\x70\xd4\xe1\xc7\x80\x38\x50\x4d\x1b\x1c\xd0\x79\x9d\x67\x20\x1f\x3e\xab\x3b\x9d\xa1\x8e\x1d\x45\x7c\x17\xac\xd0\x96\xd6\xd7\x67\x16\xe6\xac\xfb\x4a\x78\x14\x4b\x01\xc2\x64\x51\x76\x70\x0a\x88\x86\x28\x2b\xfd\x2d\xd4\xf3\xb4\xd2\xa1\xdd\x58\xd3\x30\x6f\xaf\x9d\xd2\x1e\x41\xa7\xe7\xa6\x8b\xcb\x8e\x1b\xe9\x4f\x8e\xb0\x27\x18\xff\xaa\x91\x06\xff\xd7\x91\xcb\x20\x0d\x5e\x7a\x64\xbe\x5c\xf0\x4e\x04\x02\x42\x4c\xd0\x5c\x33\x5d\x62\xb3\xbe\x17\xfe\x60\x1c\x98\x30\x1f\xbd\x18\x4b\x67\xaf\x3c\x13\x31\xe1\xff\x99\x92\xea\x14\x4d\x45\x02\x27\x02\xd2\x44\x75\x06\xc6\xaf\xd3\xf9\xc2\x28\x7d\x7a\x6a\x0e\x9d\xea\xc2\x04\x43\x7c\x34\x71\x58\xc9\x61\x0d\xa7\x3d\x4c\xfd\x50\xeb\x20\xb3\x1b\xde\x60\xec\x8c\x0d\xbd\xb1\x55\xd7\x0c\xb4\x5d\x9c\x02\x1a\x13\x3b\x4a\x00\xf2\x5f\x4b\x88\x82\x41\xda\x4f\x20\x3a\x27\x50\xd2\x24\x98\x82\x38\x85\x60\x3a\xb8\x89\x23\xac\x95\x9a\x7f\x40\x5b\x66\x75\x9a\x3a\xba\x12\x47\xe5\x49\x1e\x0c\x4d\x90\xe0\x24\x7f\x31\xe3\x3c\x80\x0e\x3b\x7d\x51\xa9\x53\xb0\x2f\x06\x27\xf9\xf3\x21\xfe\xf6\xc5\x14\x85\x1b\xac\x89\x41\x70\xd2\xaa\x42\x5d\xdf\xc0\x9d\x19\x8a\x0a\xe6\x65\x3e\x97\x14\xb7\x70\x5b\x33\x65\xc1\xb5\x29\x73\x9b\xab\xba\xd3\xdf\x2f\x80\x7f\xbf\x97\xa9\xbf\xbe\x97\xb1\xb9\xb6\xc9\x29\x83\x96\x85\x28\xdb\x41\x4e\xed\xbe\x2f\xab\x90\x19\x03\x91\xac\x47\xa9\x04\x9e\x4c\xec\xce\x5e\x2a\x5b\xd8\xa3\x59\x1e\xae\x46\xc9\x6a\x70\xd3\x63\xd7\xad\x76\x6d\x2a\x7b\x76\xbb\x6e\x85\xda\x5b\x3d\xab\xdb\x50\xdd\xbf\x36\x9a\xcf\x9e\x71\x25\x0d\x10\x08\xcd\x78\x08\x38\x77\x31\x4a\xb2\x06\x63\x7b\x93\xfe\x5f\x1c\x67\x07\xd2\x7e\x2c\x32\xff\xb3\xe3\xc1\x03\xe3\x17\xd4\x9f\x96\x26\x09\x00\x67\x96\x8e\x08\x82\x06\x10\x3f\x49\x89\x9c\xb4\x14\xf1\xac\x24\xdb\x53\x41\xf0\xc4\x28\x9c\x2b\x6e\x20\x5e\x93\x8e\xdf\x8b\xda\x60\xeb\xa1\x5a\xde\x1b\x26\x83\x7b\xb9\xaa\x50\x83\xdf\x2e\x37\x54\xa5\xeb\x8e\x07\xbc\x97\x0a\x75\xaa\xe5\x85\x26\x3c\xa3\x77\x4c\x52\x89\x51\xc5\x3d\xd7\xcf\xb7\xb8\x0b\x0a\x65\xaf\x5f\xec\xa8\x5a\x2a\x01\x99\x57\x46\x10\x6f\x94\xc5\x49\x47\x76\xa5\x96\xae\x23\x78\xad\x7a\x5b\x87\x89\x34\xa5\x1a\xa2\x5c\xc4\x03\xde\x8a\xb2\x70\x25\xd6\x45\xa2\x45\xac\xbe\x87\x5a\x82\xa5\x0b\x44\x62\xb3\x30\x28\x1a\xdd\xc0\x1c\x4a\xd4\x74\x19\x3a\x14\xcc\xda\xc9\xe6\xce\x77\x2a\x1f\xd0\x0e\x45\xdb\x98\x7b\x3b\x3b\xc3\x4e\x6d\x8d\x11\xb3\xd5\xa9\x45\x0d\xdc\x3d\x51\xde\x39\x6f\x26\x0f\xfb\xc7\x31\x66\x9f\x1e\xfc\xcf\x8f\x05\x9f\x1c\x5b\x2c\x2e\x60\x8f\x5b\x7b\x9f\xa5\x51\x80\xbe\x0b\xc7\x4d\x81\x0f\x37\xf8\x0c\xe0\x29\x60\xbe\xb2\xd1\xf3\x4f\xf2\x79\x99\x88\x3a\xfc\xf7\x7c\x72\x2a\x1d\x5c\xe8\x27\xfc\xd8\x86\xee\x4b\xed\xda\x5f\x8f\x42\x6d\x1c\x06\xa5\x0b\xb8\xe7\x34\xf3\x2a\xc0\xfe\xcb\x94\xdf\x95\x40\x5a\xcf\xf1\x06\x37\x63\x01\x72\xce\xae\x06\x3f\x77\xd7\xe2\x52\x81\x86\x0d\x71\x4c\x6a\x99\x47\x71\x44\xb4\x02\x90\x03\x55\xe7\x59\x94\x00\x1c\xa2\x0e\x40\x27\xbc\x38\x34\xa0\xe1\x39\x3b\xd4\x40\x9f\x59\x2e\x7a\x5a\xc9\x2d\x46\xba\xd9\x01\x48\x4b\x9d\x83\x62\x57\x22\x2f\x72\x75\xc8\x9c\x0c\x04\xa0\x2d\x99\x08\x84\x4b\x84\x19\x62\x84\x74\x0b\xbb\xa5\xc0\xa3\xd7\x2a\x58\xd8\xcf\xe5\x84\xa9\x12\x6a\xae\x03\x52\xec\x43\x33\x14\xa6\x13\xf4\xb8\xdd\x72\x8b\xee\x2b\x08\x2a\x93\x5d\x37\xd0\xf2\x3f\x8f\xb3\xad\xce\x89\xfe\x23\x63\xc1\xa7\xc7\x66\xaa\x6f\x6a\x40\xb7\x14\xf5\x6d\xed\x78\xe8\x01\x1c\x81\xba\xb2\x5c\x7a\x71\xd9\xc0\xa3\x42\x33\xf5\xc1\x18\xe3\xa4\xd5\x8c\x29\x62\xe7\xa1\xc5\x39\x60\x0e\x83\x19\xbd\x1d\xa5\x99\x65\x1b\x4e\x0a\x57\x07\xa1\x9c\xe5\x1a\x02\x25\x2b\x23\xde\x17\x1f\x2d\x18\x04\x75\xae\x02\x94\x40\x2f\xe2\x20\x17\x75\xa8\x5b\x20\xd5\x96\x92\x6b\x74\x69\x6d\xb3\x9d\x6b\xf3\x90\xeb\xb4\xcc\x56\x21\x46\x9d\x95\x6b\x01\x4e\xe8\xb3\xaf\xae\x15\x80\x8c\x48\x81\xba\x8f\xc1\x27\x4e\x06\xc5\x13\x38\x74\x3a\xe8\x77\x61\x8e\x4c\x9d\x75\x10\x38\x59\xe9\xf4\x67\x55\x55\x95\xbc\x02\xb0\x15\x78\xe4\x92\x55\x8a\xf9\x08\x98\x80\x1f\xf7\x98\x63\x5d\xf0\x5f\xe1\xb1\xd3\xbb\x17\x35\x5a\x94\x59\x25\x05\xb7\xda\xbf\xca\xb6\x31\x9b\xa0\xd5\x2c\x0a\x3c\xb7\x68\x6c\x51\xf6\xc6\x43\xec\x0a\x98\xf8\x64\xaf\x78\xf5\xa1\xe0\x7f\x1e\xb4\x2e\xb8\x65\x2a\xcd\x07\xb6\xd1\x00\x87\xdc\x62\x83\xd5\xa1\x5b\x4d\xd9\xb5\x82\x50\xd5\x6c\x1c\x36\x52\x04\x80\x06\x82\xda\xd2\xe9\x17\xf5\xa3\xf5\x30\x56\x9a\x4b\x83\xb1\x09\x04\x0a\x39\x69\x16\xa3\x96\x23\xfa\x8c\x19\xe5\x4a\x4f\x00\x28\x11\xbd\x83\x86\xd6\x84\x4c\x61\x1f\x75\xf4\xe7\x48\x9d\x9c\xf5\x21\xd8\x60\x98\x77\x65\x0b\xdf\x50\x22\x32\xec\xf5\xb2\xc9\xf5\xe9\xba\xfe\x03\x04\x26\x1e\xff\x0b\x0b\x66\x71\x7d\xa5\x9f\x9b\x6e\xc0\x7a\xe1\x6c\x6b\xf1\x65\x4d\x42\x9d\x9d\x7c\x7e\xa0\x0a\x0b\x5e\xa0\x0a\xd5\x9e\x0e\x75\x75\x7d\x5a\x5d\x33\xba\xc4\x49\xfe\xfc\xc0\xaa\x5e\xf0\x82\xe5\xba\xd5\xea\x5c\x3a\x55\xe2\xd0\xae\x72\x85\xc8\x88\x41\x1b\x77\x85\x21\x03\xfb\xd5\xf4\xf3\x70\xe7\x46\x6d\xdd\x1f\x08\x83\x42\x86\xbe\x18\x57\x62\x94\x40\xb7\x66\x75\xa5\x51\x25\xd8\x61\x74\xbc\x31\x3c\xd7\xaa\x66\xb4\xce\x1e\xf5\xee\x57\xd7\xbf\xfe\xba\x1f\x03\x15\xd7\x45\x4a\x41\x87\xf4\x22\xf2\x39\x55\x8e\x89\x6d\x9a\xb3\x97\x81\x2d\x3a\xfe\x52\x87\xa4\x7f\xc6\x0b\x3e\x56\xe2\xa9\xaf\x30\x9d\x34\xf8\xbc\x4b\x42\xd0\xee\xc7\xf1\x80\xbf\xa8\x1f\xc6\xc4\x53\x22\x1a\xab\x8d\x3a\x42\x3f\x90\xe0\x72\x14\xf8\x3a\xa1\x80\x07\xd6\x13\x41\x55\x1c\xbc\x63\x23\x73\x8a\xa8\x7a\x5a\xa6\xab\x61\xa2\x13\x3d\x8c\xf0\x71\x76\xcf\x8f\x3c\x8e\x3d\x6b\x07\x52\x10\x1d\xe9\xa3\x15\x40\xff\x5f\xaf\x08\x5e\x51\xdb\x46\x49\x74\x83\x23\xdd\x5d\x06\x9c\x89\xad\x0a\xcb\x14\x66\x2d\x81\x42\xc6\x21\xa3\xc4\xd8\x15\xe9\xe8\x6f\xf4\xe4\x4e\x98\xac\x82\x05\x21\x6f\xf0\x53\x05\xf2\x79\x94\xf0\xf5\xe9\xc6\xf4\x0d\x75\xde\x8b\xc3\x24\xa1\xf0\x79\x48\x40\x03\xce\x32\xb8\xfb\x74\x34\xb5\x55\x77\x01\x79\xc7\xd6\xa7\xb7\xd3\x82\xe9\x04\xec\x46\x96\xff\xd1\x61\xf6\x7b\x76\x08\xd6\x6f\xee\x19\x71\xee\xfe\x32\xe2\x9c\x89\x4e\xb9\xe9\xb1\x02\x92\x6b\xb0\x97\xd7\xd8\x61\xad\xfc\xfa\xff\xec\x05\x73\x46\x93\x75\xc2\x0a\x37\xec\x93\x08\x2c\x20\x0d\x11\xb6\x95\xb7\xc0\xd9\xd6\xcf\xb2\x3b\x46\xc1\x48\xee\x6e\xc6\xee\x3c\x17\x77\x47\xf9\xbd\x6a\xb5\xb1\x7d\xc7\xfa\xbe\x63\xfd\x6b\xe6\x58\x7f\xc4\x7b\xb9\xb7\xbd\xeb\x79\xc5\x5f\x9e\x18\x11\xb8\x34\x4a\xe6\x19\xdf\xf4\x68\xc1\xc7\xd8\xfd\x47\x1c\x48\x3b\x30\x9f\x64\x05\x95\x91\xfa\x09\xb1\x92\x7f\x7c\x38\xf8\x4e\xf3\xcb\x95\x14\x70\xd9\xd8\x09\x2a\xa3\x23\x7f\xf9\x90\xcd\x5f\x1d\x44\xc3\x51\xcc\x7a\x61\x55\x58\x1b\xa6\xd9\x24\x9b\xd8\x52\x94\x54\xd5\x78\x7f\x6a\xee\x21\xe6\xe3\xa3\xf6\x9e\xf7\xfe\x3d\x86\x1d\x7f\xdf\xd7\x28\xea\xd8\xe0\xa6\xee\x4b\xf9\xbd\x49\xf9\x47\xbc\x70\x7b\x41\xf5\x0c\xff\x66\x13\x23\x43\xeb\xb1\xcc\x33\xae\x45\x47\x25\xbf\xf8\x6b\x8f\xb0\xe3\xf6\x92\xb6\x23\x61\x9c\x68\x50\x10\x45\x7f\x7a\x38\x38\x6a\xfd\x1e\x11\xb1\x5d\x2d\x8c\xde\x7f\x88\xc5\x5a\x18\x35\x83\x6f\x1f\x15\xc9\xea\xc8\xa1\xa7\xb1\xeb\xd9\xb5\x5b\xcb\xa1\x2d\x2b\xbd\x2f\x8d\xf6\x20\x8d\x3e\x66\x4b\xa3\x0f\xed\x51\x1a\xbd\x6c\x04\xe2\xf3\xbe\x48\xfa\xff\x8e\x48\x5a\xde\x5e\x24\xdd\xe2\xdf\x54\x88\x24\xb3\x34\x8d\x3c\xb2\xe4\x47\xa5\x44\xfa\x90\xc7\xe6\x2f\x39\x76\xef\x8e\xc5\xf3\xf3\x8b\xd0\xc3\x0b\xa9\xec\x65\xe7\xd3\xdb\xa4\x8c\xfd\x17\x05\xb2\xf2\x86\x8d\xbd\x56\x7a\x00\xc3\x4f\x56\xa4\x8c\x45\x48\x50\x62\x6e\x94\x52\x9e\xf6\x8b\x68\x39\xfd\x9c\x81\x61\x62\x3f\x70\x88\x4d\xed\x96\xa8\xd6\xff\xbd\x83\xc1\x45\xeb\xb7\x06\x7e\x22\xea\xdd\x8a\x28\xf7\x84\x2b\xf9\x47\xa1\x82\x64\xe9\xad\x93\xa1\x09\xc8\x4e\xc2\x0c\x3d\x38\x49\xc1\xe6\x48\xe1\x5b\x80\xe3\x55\xa0\x96\xb9\xe7\xef\x8f\x1c\x60\xef\x19\x63\x07\x00\x2b\xcd\xff\xf9\xb1\xe0\xcd\x63\x05\x1a\x64\x19\x61\x00\x8c\x0d\x9d\x30\x43\x5c\xd5\x16\xd1\x99\xa9\x8f\xd4\x79\x98\x81\x7d\x05\x4c\xed\x11\x75\x32\xcf\x44\x1a\x85\xb1\x31\xb3\x9c\xb3\x78\xfa\x5a\x12\xcd\x14\x3d\x99\xe5\xed\xe8\xa2\x61\x37\xc1\xbc\x7a\x44\x30\x28\x80\x33\x1a\x7c\x46\x6d\x0f\xd8\x96\xfb\x44\x2a\x27\xa2\xa4\x25\x2e\x02\xa2\xc0\x19\x24\x37\x07\x6f\x52\xaf\x27\xc2\xd4\x62\x18\x93\x49\x13\xf0\x8b\x1c\x44\x43\xa4\x3c\x6e\xf5\x91\x2d\x0b\xdf\x26\x80\xa1\x52\xd7\x35\x0c\xb8\x79\x83\xb1\xd3\xe4\x0d\x3e\xc9\x38\x7a\xc8\x03\x3e\x81\x76\x77\xe8\x2c\xba\x44\x41\x32\x1a\x91\x4a\xf7\x9d\x7a\x07\x36\xc3\xe7\x4f\xbd\xa0\xb1\xdd\xcb\xe8\x13\xc1\x0a\x8b\x24\x4f\x01\xc1\x08\x5f\x77\x6c\x71\xdf\xc7\x0e\x75\x45\x96\x85\xab\xc2\xcf\x83\xd5\x19\x24\xf5\x99\xd8\x9a\xd4\x47\x10\x20\xae\xc6\xee\x50\x6d\x6c\xf0\x0a\xfe\xd2\x22\x0a\x35\xcc\x26\x22\x0c\xdb\x84\x6c\x78\x8d\x0b\x40\x15\x78\x95\xc7\x0e\x22\xa6\x9e\xff\x12\x2f\xc8\x66\x38\xcd\xfe\x5d\xd7\x61\x8e\x24\xae\xc1\x5f\x42\x6f\xba\x8d\x10\xe1\xac\x09\x93\xe4\x6f\xd7\xe6\x21\xc6\xe6\x76\x6c\xfe\x18\xe5\x8e\x05\x05\xe8\x13\x47\x82\x3b\xb7\x7b\xc8\x3d\x5d\x8d\x7a\xba\x5a\x49\xfa\xcb\x43\xfb\xfb\xd4\x5e\x0d\x24\x0f\x9a\xd4\xdd\x57\x79\x05\xa8\xf0\xc8\xb1\xb0\xf5\xcd\x7b\xd8\x5d\x6c\xf1\x12\x4d\x68\xa3\x3e\xb2\xaf\x8f\xee\x27\xe5\xda\x49\xb9\x0f\xec\xc0\x14\xd5\xf2\x57\x26\x76\x65\x77\xda\x4e\x3e\x55\x6a\x5d\x7f\x3b\xce\x4e\xda\x53\x5c\xeb\x5a\x7a\xc1\x37\xd6\xa7\xc3\xb8\xd7\x09\xa7\x1b\x38\xcd\x16\x31\x1f\x43\x4b\xa8\x77\x8e\x07\x3f\xe0\xcd\x24\xb6\x4f\x1f\x52\xee\x12\xe4\x3c\x91\x69\xee\x48\x2b\x1e\x21\xf1\x44\x4b\x34\x65\x4b\x14\x40\x7b\xc5\x5d\xe4\x88\xca\x4c\xc0\x5b\x2e\x51\x8d\x21\xcf\x3b\x80\x88\xd3\x2d\x0a\x0f\x20\x32\x74\x57\x91\x79\xc3\x18\xbb\x95\x5d\x11\xf6\x22\xac\xf5\xdc\x29\x7f\x2a\x78\xb2\xd2\x65\xe6\x4e\x15\x8a\x8c\xaa\x9e\x2a\xb0\xa8\x7c\xa3\x74\x0e\x7a\x02\x54\x54\xed\x2d\x26\x54\xe2\x7d\x5e\xf0\xe2\x25\x17\x01\xd0\x6a\x91\xae\x9b\xa6\xba\xc2\x3a\x66\x45\x74\x02\x06\x61\xc1\xed\x28\x59\xd5\x82\x5d\xc7\xc8\x1a\x57\x21\xb5\x6d\xe8\xf3\x7b\x64\x48\x7d\xa9\xc7\xae\x2e\x7d\xdb\x4f\x82\xb0\xd4\x1e\x3d\x06\x36\x60\x87\xa4\x2d\x99\x2a\x5c\x1e\x93\x28\x2f\x0d\x07\x72\x89\xd7\xb9\xc8\x9b\xad\xe3\x4e\xb7\xbe\xb7\xc6\x8e\x56\x80\x18\x00\x46\x53\x89\xcb\xca\x7f\x55\x2d\xc8\xaa\x6e\x14\x20\x9a\x94\x38\x68\xeb\x03\xb9\xe4\xb1\xc8\x21\xba\x11\xb9\x81\x69\xb8\xe9\x5d\xe3\x08\xa2\xc4\x19\x27\x17\x12\xe2\x1c\xdd\xa9\xf4\x80\xc7\xbe\x5f\xbb\x39\xbf\x27\x90\xf3\x0e\xda\x16\x12\xe6\x5e\x66\xac\x16\xa8\xc8\xe4\x93\xe1\x1f\xbb\xe7\x5e\x3f\xc6\xbe\xb3\x0a\xfc\x5a\xd7\xdb\xe0\xb7\xfa\x5f\xaa\x05\xb7\x0c\x5f\x2e\x7a\x8d\x38\x09\xe9\x38\x61\xb0\xa2\x8b\x1e\x30\xe4\xa2\x07\x31\x71\xc6\xe9\x91\x57\xd7\xd8\xcd\xc4\x82\x79\x5d\x70\x14\x88\x85\xed\x97\x6d\xd4\xc9\x02\xae\xd9\x6e\xc8\x79\xe6\xc7\x61\x96\x2f\xa5\x61\x92\xc1\x5d\x80\xf5\xbb\x74\xcc\x47\xf6\xcd\x85\xee\xeb\x84\xb6\x7c\x93\xd1\x48\x9d\xcb\x67\x19\x35\xcb\xbf\x2d\xb8\x7e\x08\xd1\x1f\x2b\x5c\xd7\xc0\x76\x88\xe3\x0b\x60\xc2\x75\x1d\x60\xe5\x22\xd8\x1d\x62\x77\x5c\xf2\xc1\xb5\x10\xd6\x1a\x7f\xee\xdd\x07\x83\x9b\x87\xae\x5a\xfe\x60\x1d\x3d\x13\xc6\x31\x18\xe1\xcc\x23\xe4\x3e\xdc\xf4\xbe\xa5\xb8\x38\x22\x1f\xe8\x77\x0e\xb0\x87\xcb\x91\x3f\xef\xf6\xd8\xf3\xb6\x1a\x83\x4b\x6c\x98\x1d\x0e\x74\xb7\xfd\x31\x6d\xff\x53\xfb\x45\xda\x6f\xe6\x06\x1c\xdc\x6e\xa0\x93\xb3\xd1\x2e\x48\x80\xa3\x8c\x2f\xd3\x17\x96\x1b\xec\xa5\xe3\x6c\xcb\x36\xfb\x7f\x3e\x16\x7c\x78\x6c\xab\xbb\xdb\x07\xb7\xcd\x96\xde\xdc\x2e\xba\xad\x24\x4b\x21\x4c\x4b\x67\x88\x3f\x9a\xe1\x6d\xea\x2c\xbc\x65\x88\x9b\x3d\x4b\x4a\x21\x6e\x43\x09\x74\x43\xa1\x6e\xf7\x7c\xdd\x84\xba\x8d\x8a\x62\x7b\xf0\xaa\x1d\x1a\x5e\x8a\xf3\x54\xe6\x7f\xee\xca\xe0\x87\x3c\xeb\x02\x74\x65\xe6\xf6\xf7\x30\x19\x05\x24\x3d\x40\xab\x0d\xd3\x2c\x42\xb6\x41\x4c\xb2\x69\x53\x98\x73\xa5\x08\xd6\x0b\x86\x56\xd8\x33\xa4\xcc\x31\x71\x93\x06\x36\x16\xab\x61\x73\xc0\xd7\xa7\xd5\x4b\x8d\x4d\xef\xb0\xfe\xf2\xa6\xf7\x6d\x38\x7e\x44\xfd\x72\xdb\x80\x16\xd3\xdc\xa9\x0b\xee\x52\xfe\xd0\x15\xec\x0b\x07\xd8\x88\xa7\xfd\xdf\x3a\x10\x7c\x71\x3c\x04\x1c\x5e\xd9\xd6\x87\x00\x75\xcb\x24\xa9\xa6\x86\x99\x1d\x93\xf0\x91\x09\xd3\xa0\xc6\x82\x22\x5a\x80\xd5\xe5\x92\x77\x44\xdc\x33\xed\x07\x16\x21\x2a\xa8\x40\xfd\x95\x59\xae\xb1\x1e\x26\x84\x01\xf0\xda\x08\x07\xbc\x27\xb3\x2c\x02\x5c\xbe\x59\x2a\x41\x29\x51\x7a\x9d\x84\xbd\x5e\x2a\x7b\x69\xa4\xb6\xa5\x52\xe5\x42\x48\x79\x81\xa7\xb0\xfa\xaa\xb2\x45\x7c\x2c\x9c\x58\x74\x46\x9a\xb1\xdf\x50\x28\x5e\xdd\x54\x97\x8e\xbf\xfa\x7b\xb1\x4c\x56\x85\xc6\x77\x53\x4d\x56\x45\xe3\x52\xa6\xcf\xa7\x22\xef\xa7\x10\x79\x1f\x0f\x78\x0e\x49\x18\xd0\xb1\x06\xb1\x20\xef\x44\xc9\x5a\x66\xaa\xa3\xbb\x58\xb5\x8a\x2a\x66\x85\x9d\x9d\xa4\x34\x1e\x88\x72\x87\xd9\x8d\xe5\x6b\x22\x6d\x38\x69\xcf\x2d\x60\x0b\xd5\x27\xeb\x3a\x7f\x8d\x8a\x85\xee\x36\x09\x44\x50\xc3\x7e\x06\x2c\x08\x4e\x01\xfa\x6c\xc8\x63\x0c\x2b\xc9\xf9\x73\x26\xce\xc8\x74\x23\x4c\x5b\xa2\xa5\xfe\xe2\x1d\x30\xe3\x70\x99\xf2\xe7\x4c\x5c\x10\x61\x3c\x31\xd7\xb3\xae\x69\x0c\xeb\x0b\xa2\x2b\x73\x60\x20\xe2\xc7\x60\x6c\x81\x01\xa0\x25\xd2\xe3\xc0\x6b\x2a\x9c\x26\xcf\x2d\x38\xcb\x74\x81\xcd\xb3\xb3\x97\xb0\xaf\x2f\x6e\x35\x99\xd9\x73\x99\x59\x22\xfe\xb9\x60\xba\x10\x3b\x9a\x2f\xbf\x17\x8d\x5a\xbd\xa3\x84\xc8\xbe\xfd\x65\x3f\x40\xe5\x6b\x17\xa0\xb2\xb8\xbd\x51\x60\xca\x6f\x4c\x54\x80\x73\x59\x5b\x58\x19\x12\xe1\x1f\xea\xec\xc4\x8e\x16\xdc\x29\xc8\xdf\xa5\x84\x5b\xff\x57\xeb\xc1\x49\xe7\x4a\x61\x0d\x26\x52\x0a\x38\x02\x22\x6a\x3b\x0a\x1e\xb5\xe7\xd1\x3c\x77\x76\xa7\x57\xf9\xfb\xeb\x6a\xaf\xeb\xea\x27\x6b\xec\x20\xe6\x8b\xf8\x0f\xd6\x82\x7f\xf6\x00\xd8\x81\xfa\xa3\xee\x70\xaa\x87\x39\x45\x2f\x37\x29\x59\x8c\xba\x84\x66\xbc\x51\xeb\x1a\x7c\x46\xed\x15\x04\xe7\x9e\xba\x4d\xa5\xd4\x14\xc4\x3c\x8a\xd6\x85\xde\xa4\x80\x39\x14\x3d\x28\x48\x75\x83\xc0\x3a\x99\x20\x5e\x30\xde\xee\xa7\x10\x79\x4d\xa4\x08\x60\xae\xd1\x67\x65\xe2\x43\x80\xf0\x28\x27\x57\x68\x82\xcf\xc4\xf1\x49\xc0\x6e\x6a\xa5\x98\x02\x99\xe5\x40\xfe\xa6\x33\x62\x0c\xc7\xc2\x08\xd9\xfd\x99\x1a\xf3\x57\xd3\xb0\x29\x16\x44\x1a\xc9\x96\xce\xa2\xfe\x70\x4d\xa3\xe5\xbf\xab\x06\x8c\x43\x45\x00\xaa\xc1\x24\x5e\xc1\xac\x1d\x3b\x79\xdc\x84\x28\x13\x52\x36\xd4\xdb\xca\x66\x06\xfa\x4f\xb1\x1a\x42\xef\x50\x96\x32\x6a\x0c\x28\xe3\x00\xa3\xb7\x18\x17\x2c\x85\x47\xdd\xae\x68\x29\xb5\x26\x1e\x54\xb8\x39\x92\x28\xae\x93\xd9\x07\x93\x09\xa1\x39\x6a\xc8\x22\xd9\x32\xea\x7a\xa1\xff\x2b\x39\xe2\xb0\x8c\xbb\x9e\x4a\xd0\xe1\x75\x83\xe8\x23\x6d\x24\x4a\x2c\x50\x83\xa1\x9e\x08\xec\x54\x51\x47\x27\x07\x7b\x5f\xb6\x5f\xba\x0d\xfb\x37\x6b\xec\xf1\x32\xed\x75\xc2\xe4\x94\xe8\x89\xa4\xa5\x5a\xad\xc4\xe0\x4f\xd6\x8a\xe8\xeb\x93\xbc\x17\x0b\xa5\xba\x6a\xb5\x74\x21\x95\xbd\x70\x15\x66\x2b\x66\xbb\xd4\xa9\x57\xc0\x3b\xa7\x07\xbe\xe5\x84\x6f\x4f\x37\x9e\xd6\xe0\x8b\x38\x7b\x71\x2a\xd1\xe7\x8c\x69\x72\x45\x70\xac\x09\xf4\x4d\x1b\x1c\xda\x93\x6d\x34\x6f\x40\x06\x0d\xde\x0d\x78\x3b\x4a\xc2\x18\x68\x07\x4c\x62\x1a\x10\x64\xe5\x72\x72\x88\x92\xc4\xc4\x76\x98\x97\xf0\x2c\xd5\xe0\xa7\xa3\x22\x8b\x90\x1c\xc9\xe9\x70\xcb\xf4\xee\x02\x58\x35\x2b\xfd\x1c\xc5\x95\xcc\x3b\x38\x05\xc9\xcf\xce\x3e\xe8\xb1\x2b\x7b\x90\xda\xa7\x09\xc7\xde\xe9\x5d\x12\x04\xc0\x82\x5d\x48\x10\x6b\xb2\xe9\x76\x3f\x6e\x47\x08\xe5\x8c\x22\x21\x2c\x78\x5b\x22\x75\x46\x49\x81\x14\x15\x92\x69\xe7\x70\x2d\xe9\x93\x4c\x9d\x87\xfc\xba\xa9\xa7\x03\x1f\x2f\x70\x35\x13\xe2\x4c\xc1\xe2\xa2\x34\x7c\xd1\x6a\xb0\xaf\x8e\xb1\x27\xf4\xca\x1d\x80\x69\x98\xf7\x50\xce\xa5\x92\xa6\x1d\xb9\xc1\x57\xc3\x74\x25\x5c\x15\x76\xa8\x95\x11\x89\x3a\xf1\x7f\x8b\x2e\x3e\x5f\x9a\x6d\x5b\xf7\x30\x12\xb1\x91\xc8\xc1\x9c\x0a\x62\x5f\xb5\xc9\xa7\x0c\xb7\x43\x31\x2d\x32\x61\xac\xbe\xc6\x8d\x62\x8d\x7f\x19\xea\x66\x42\x83\x42\x95\x3e\xb6\x65\x0e\xe9\x51\x6c\xc3\x51\x3e\x41\x33\xd6\x9d\xd1\xd9\x4d\xfc\xe8\x6d\x61\x73\x4d\xa9\x43\x49\xeb\xa8\x06\x9c\x81\x87\x4a\x1d\x27\x11\x54\x1d\x05\x9c\x5b\x88\x6d\xb7\xc6\x92\x6e\xe2\x47\xcf\xc8\x54\x58\xc5\xaa\x13\x65\x33\x84\xc8\x0a\xea\x1f\x02\xb0\x8e\x01\x3f\x0b\x36\xae\xa1\x02\xdb\xa6\x8c\x86\xa3\xe5\xfd\xe9\xb7\x6e\xaf\xe6\xfd\xfa\xb7\xfa\xef\xfb\xd6\xed\x31\x59\x1d\x05\x8d\x6d\xf1\xbc\xf1\x1d\x95\xfd\x45\xe5\xb7\xab\xae\x8e\x42\x71\x1c\x2a\x78\x77\xee\xaa\x11\x1f\xda\x4b\x65\xaa\x3e\x59\x54\xcc\xb1\x52\xee\xaa\x42\x7b\x2c\x01\xab\xbb\xd5\x10\xf5\xa2\x9d\xf7\xd4\xc4\x25\xbd\x55\x59\x19\x53\x50\x2f\xdb\x6d\x2f\xec\xec\x8d\x4b\xfc\x90\x7a\xed\xc4\x96\x9d\xd5\xcf\x3b\x6a\xc3\x6d\xee\xaa\xaf\x76\xf1\xd2\xc8\x16\x38\x9c\x40\x97\x34\x81\x2e\xb1\x84\xe1\x8a\xc8\xac\x19\xc6\x4a\xb9\xb8\x3c\x2b\xea\x44\x79\x45\x59\x5f\xb8\xc4\xcf\x9e\xd0\x03\x49\x6f\xaf\x84\x79\xb3\xb3\xbb\xee\xda\xf1\x2b\xa5\xfe\x69\x8a\x34\xc7\x43\x90\xb8\xb4\x85\x7e\x89\x05\xe8\x6a\x6c\xff\x25\xd3\xd1\x4d\x29\xd3\x56\x94\x94\x24\xd6\xd6\xa2\xae\xea\xf9\x6d\xa6\xbf\xb6\x4d\x0f\x1e\x5d\x21\x3c\xf4\x99\x6d\x42\xd4\x2f\xef\xd7\xdd\x6f\x8c\xea\xc1\x8a\xe8\xd4\x2d\x3a\xae\x1d\xcb\x0d\x72\x67\x16\xb1\x11\xbb\x68\x06\xc6\x4e\x5c\xbe\xf2\x4a\xb3\xdc\x49\x94\xdd\x7d\xa5\x86\xaf\x99\x2e\x32\xf1\x1f\x3b\xac\xe5\xc4\xd6\xd8\xce\xbb\x5a\x76\x97\xf4\x7a\xa9\x57\x00\xca\x78\x57\x1f\x1f\xd1\x11\xdb\x17\x36\x6a\xa6\xed\xe4\xed\x5d\x88\x0a\x1c\xea\xa2\xa5\xf4\x7b\xf7\x5d\x94\xae\x84\xcd\xc6\xde\x37\xb3\x3d\x15\x53\x5e\x1b\x7b\x2a\xac\xd4\x3e\x8b\x2a\xfe\x52\xda\x75\x49\xaf\x97\xdb\x73\x49\x85\x94\xdb\x51\x0d\x7f\xbb\xb3\x46\xec\xfa\xdd\xa1\x16\xec\xba\x04\x8a\x2a\x7b\x13\x63\xd7\x8d\x60\x52\xc4\x80\xc9\x0a\xca\x33\xff\xcf\x8f\x04\x0b\x55\x2c\x69\xcd\x8e\x68\xae\x15\x98\x44\x32\x45\x08\x39\x00\x6c\x54\xbf\x10\xe5\xa1\x19\x26\xfa\x5c\x0c\x41\xde\x4d\x0a\xb6\x1d\x46\xf9\x7e\x60\x9f\x26\x67\xdf\xd7\xf3\x35\xb4\x07\xde\x69\x85\xb4\xde\xba\x47\x8c\x03\xf6\x2a\x8f\x50\xbb\xef\xf7\xd8\x99\xad\xa3\x97\x77\xba\x08\x01\xcd\xfb\x46\xe0\x09\xdc\x8a\x66\xc1\x32\xe8\x13\xab\xa3\x41\xb8\x65\x3f\xef\x99\xe8\xaa\x9f\xf2\x46\x01\x12\xec\xb8\x3e\x50\x58\x70\x57\x81\x8c\x4d\x36\xba\x28\xd1\xc6\x29\x1d\x24\xa0\xa6\xa0\xb1\xb9\xdb\x58\x9c\x06\x4a\xa6\x08\x57\x41\x19\xf2\x88\x97\x6e\x6f\x8e\x39\xef\x9f\xdb\xd9\xf9\xad\xa2\xf6\x95\xf2\xf1\x65\x07\xd8\xb5\x6e\x57\xe8\x53\x55\x83\x0e\x4d\x86\xd4\xe9\x9c\xc8\xd3\xa8\x49\x10\xe4\x1f\x1d\x0f\x3e\x5d\xab\xba\xe3\xb8\x80\x8a\x84\x13\x5c\x83\x44\xec\x48\x4b\xae\x0b\xaf\x15\x21\x38\x05\x10\x3c\xe4\xed\x38\xe1\x45\x66\x29\xa9\x9e\x8d\x23\xb5\xbc\xea\x3a\x14\x0d\x46\x3d\x6c\x22\x7b\x73\xe4\x26\xba\xa8\xc6\x08\x9e\x87\xe9\xaa\xc8\x31\x12\x94\xcf\x2e\xdc\xa5\xba\xbc\x2b\xba\x32\x1d\x1c\x6f\x70\xbe\xd8\x6f\x76\xa8\x32\xe8\xbb\x5f\xe9\x47\xe8\x5d\x2a\x57\x2a\x69\x21\x76\x30\x54\x2d\x8c\x39\x75\x15\x97\x1a\x1c\x58\xbd\x42\x5c\xaa\x32\xb3\x5c\xfd\xaa\xa4\x44\x4d\xdd\x58\x6d\x0b\x13\xaa\xa2\xfa\x83\x18\x2e\x01\xf6\xee\x9e\x6c\x65\x01\xa7\xe0\x27\x03\xb8\x7d\x88\xda\xe2\x6c\x1b\x1f\xf5\xd8\x6d\x14\x0a\x7a\x32\x98\xd8\x96\x84\x35\x4a\x38\xf4\x5f\x39\xfe\xf1\xfb\x3d\xa6\x8b\xf7\x07\xec\x19\xa3\x96\xc8\xd0\xbc\xc0\x51\x07\x67\x14\x2d\x8c\xa7\xe9\x5e\x37\xe1\x9d\xc3\x53\x40\x3b\x8f\x56\xa3\x75\x91\x50\x27\xb0\xff\xed\x9b\x1c\x82\x3a\xd0\x55\xf5\x3a\xbc\xd0\x4f\xf2\xa8\x2b\x80\xcf\xc5\xff\x7f\xbe\x31\xf8\xd4\x98\x7d\xc5\xec\x8e\x21\x6f\xc2\x6f\xd9\xb6\x78\x39\x53\x7c\xd2\x0a\x47\xd3\xd3\x03\x81\x1d\xd1\xe2\xec\x94\x67\x21\x75\xb5\x44\x2e\xd2\x6e\x94\x18\xd0\xc7\xa1\x72\xad\x87\xd3\x7e\x02\xe6\x57\xf3\x50\x86\xa8\x91\x3d\xd9\x6a\x38\x5f\x20\x68\xaf\x63\x86\xcf\xfb\x38\xef\x86\x49\x1f\x08\x57\xb0\x31\x04\xfe\xa7\x35\x0a\x0d\x42\x09\xfe\x6e\xd8\xfd\x53\x9c\x8a\x56\x20\x71\x64\x48\x24\x95\xb4\xc4\x66\x69\x82\x13\xd0\x0e\xc0\x39\x1a\xd9\x0c\xcf\xf1\xba\xd9\x08\xad\xda\xc1\x4c\x32\x05\x6b\xe7\x43\xda\x4f\x12\x03\x60\x29\x21\xbb\x4d\x83\x91\x52\x00\x6f\x9d\x67\x16\xd6\xa9\xb5\x6f\x89\xa4\x13\x26\x4d\x00\x43\xcc\x26\xd7\x44\x2f\x83\xcd\x4a\x8d\xf0\x24\xf5\xe2\x04\x0c\x5c\xa3\xdb\xda\xf4\x0e\x21\x64\x7b\xea\x4c\xf5\x37\x3d\x9e\x7d\x6c\x9c\xe9\x5b\xfe\x6f\x8e\x07\xef\x19\xbf\x1d\x7f\x94\xe0\xa7\xfb\x49\x4b\xa4\xf1\x00\x60\xd5\x68\x84\x54\x3f\xb9\xe1\x82\x26\x30\x6a\xf6\xc2\x5c\x01\xd4\x68\xa1\xee\x81\xd3\x4b\x12\x7a\x3c\xb2\x80\x6a\x2d\x0b\x6b\x0a\xbd\xab\xbd\x2d\x36\x5c\x9b\x71\x2b\x90\x1a\x05\x74\x16\xdf\x05\x1f\x72\xea\xd0\xe0\x7c\x2e\x27\xc4\xdc\x7e\x57\x10\xdd\xa4\x9a\x3d\xd4\xc8\xcc\x0d\x14\x52\x72\x05\x40\x5a\x89\xc1\x06\xe5\x10\x3d\x49\x4b\xdd\x22\xd1\x49\x05\x17\x06\x25\xcb\x7d\xb7\x84\x39\x16\xea\x62\x34\x94\x68\x90\xf6\x93\x66\xc0\xbb\xd1\x6a\x27\x37\xf8\x97\xa6\xc7\xd4\x4d\x7e\x7e\x76\xce\xf4\xee\x31\x14\x5e\x09\x3a\x9f\xcf\x46\x49\xff\xa2\xb5\x00\x8e\x3b\x2e\x61\x1b\x9f\xb9\x72\x91\xa8\x5e\xd5\xe3\xaa\x9d\xdb\x6a\x83\x4c\x9b\x61\x26\x20\x72\x14\xd4\x69\xea\xdb\x53\xf3\x8b\xc4\x92\x7a\xec\xc2\x99\x59\x3e\x3d\x7d\xe2\xda\xe3\xb0\x4b\x44\x29\x4e\x36\x83\x4a\x1f\x75\xbb\xfd\x7c\x28\x2b\x6f\x5f\x67\xbc\x74\x9d\xf1\xff\xb4\xf3\xa0\xde\xb6\x67\x64\xac\xd5\xc7\x2a\xf9\xfe\x2b\x35\x76\x58\xae\x8b\xb4\x23\xc2\x96\xff\x97\xb5\x11\x84\x96\xce\x0e\x74\x9e\x5e\x09\xde\x5d\xd3\x7f\xda\x79\xdb\xce\x46\xab\x8b\x1f\x02\xc3\xd6\x22\x14\x26\x3b\xb1\x9d\xe3\x1e\x68\x8b\xdf\xc6\x65\x11\xac\x27\xa6\xa6\x9f\x3e\x75\xe2\xc4\x0d\x4a\xcf\x98\xd0\x35\x6a\x74\x5b\x76\x4a\x2d\xe8\x9f\xbd\x4e\x38\x01\x30\xe3\x4a\xdf\x92\x6d\x9b\x8a\x67\x7d\xba\x31\x7d\xbd\x59\x43\x10\x6d\xda\x91\x08\xc8\x0f\xb4\x03\x38\xc3\x41\x34\x88\x04\x55\x1c\xdc\x80\x4c\x17\xb5\x45\xa8\x46\xa4\xc1\x7e\xa2\xc6\x58\x61\x82\xf0\x5f\x3d\x8a\xc0\xd7\xe9\xf8\x45\xf3\x52\xf0\x49\xaf\xf8\x41\x87\x01\x90\x7a\xc5\xc5\xa6\x4c\xb2\x3c\x0d\x35\xdf\x96\x48\xb2\x7e\x6a\x58\xb8\x5a\x99\x19\x00\x02\xf8\x8c\x32\x77\xdf\x07\xf9\x8d\xa5\xa1\xac\x4a\x28\xf3\x28\x34\xa1\xf0\x80\x51\x37\xd7\xb6\x3f\x5a\xc4\xca\x94\xcb\xb3\xa5\xbb\x44\x54\x54\x2b\x24\x1e\x28\xe3\xd5\x07\xf6\x99\x09\xf7\x8e\x08\xb1\xb2\xfd\xb9\xe9\x56\xff\x96\x91\x46\x59\x7b\xe8\x2a\xcf\x49\x6f\xb8\xca\xd1\x50\xc3\x5e\x2f\xd3\xd8\x09\xa2\xdd\x8f\x17\x45\x4e\x07\xa3\xbf\xbd\x32\x78\xe6\xd0\xd5\xb2\xb8\x30\xa7\x13\x9d\xef\x14\x72\xeb\x9d\xc6\xa6\x67\xc8\xdc\x1d\x4d\xe8\x47\xaf\x64\xef\xf4\xd8\xd5\xf4\xb6\x26\x21\xf7\xdf\x68\xe8\xee\x7f\xc0\x2b\xdd\x1b\xa6\x7d\x5f\x50\x6b\x41\xc3\x5e\xd3\xa1\xd5\xfa\xb6\x9d\x32\x65\xf6\x2b\xfb\x7e\x91\x33\x82\xc7\x3c\x28\xc4\x7c\x15\x15\x54\x37\x5a\xeb\x21\xbb\xca\xf8\x80\xff\x3a\x2f\xb8\xdf\x2b\x5d\xac\xeb\xa0\x30\x4d\x9f\xee\x1c\x24\xf5\x77\x49\xdd\xb1\xab\xa4\xb5\x8b\x55\x91\x88\x54\x75\x28\xb4\x91\x54\xe2\x4c\xed\xa7\x4a\x95\x7d\xfe\x54\xbd\xd4\x39\x6e\x36\xe0\x9f\x78\xcc\x97\x2b\x20\xd8\x5a\xcf\xc2\x92\x54\x4d\x1f\xf6\x74\xd4\xde\x2f\x7a\xc3\xb7\x75\xff\x42\x82\x41\x2a\x9a\x6a\x50\x57\x8b\xbb\xfa\x85\x02\xc4\xd9\x1e\x66\xa5\x04\x16\x94\x80\x66\xf9\x59\x8f\x1c\xcd\xac\xd2\xac\xf4\x0d\xd2\x06\x38\x24\x6c\xd2\xa2\xa7\xb1\x2c\x72\x58\xdc\x51\x78\x97\xc7\xae\xc2\xd7\xcc\x20\xbc\xd9\x0b\x5e\xe7\xb9\xd7\x1e\xed\x31\xd0\xd3\x7a\x82\x5a\xa0\x87\xa2\xae\x6f\x1c\xb7\x87\xe4\x17\x3d\x76\x75\xe9\x41\xff\x27\xcc\x64\x7f\xb9\x57\xba\xf7\x18\x4d\x76\xb7\xc7\xdc\x5e\xfe\x9f\x1e\xbb\xaa\x29\xe3\x18\x6e\xcd\xca\x7e\x92\xfb\x7f\x65\x2a\xfc\x87\x9e\x7b\x4b\xd7\x17\x20\x50\x54\x75\x3b\x61\xd6\xe1\xe6\x99\xcc\x9c\x95\x9d\x49\xb3\xb4\x75\x1b\x00\x40\xc4\x0a\xbe\x0a\x35\x38\x16\x94\xc7\xc3\x75\x19\xb5\x20\x21\xba\x2b\x9a\x9d\x30\x89\xb2\x2e\xc6\x4e\x47\x48\x3b\x9a\x95\x78\x47\xe1\x34\xa1\xeb\x90\x88\x0d\xb5\x29\xcc\x9a\xaf\x55\x77\xc0\xbf\x78\x8c\x59\x41\x71\x5f\xf2\x82\xf9\x0b\xae\xec\xa3\xdd\xc5\x3a\xdc\xc0\x22\xd1\x84\x12\x6d\xcd\xb4\xd0\xee\xc7\x19\xac\x00\x47\x58\x3a\x39\x13\x4f\x67\x4f\x63\xd7\x6f\x6d\xb3\x18\x96\xd1\x26\x01\x75\x47\x50\xa1\x4a\xfb\x65\x3b\x87\x1f\x65\xaf\xf6\xd8\x95\xa9\x08\x5b\x03\x33\x59\x5f\xac\x87\xbe\xed\x5c\xdf\xd3\x44\x25\xb4\x9b\x75\xc1\x43\x7e\x41\x95\xca\x67\xad\xd4\x56\x6b\x28\xda\xcc\xec\x22\xfe\xf3\x74\x45\x4e\xa7\x97\xa1\x0e\xee\x77\xfe\xf1\xb0\x9d\xef\x66\x92\x81\x95\x10\x8a\x9a\x62\xa6\x09\xd3\x7b\x49\xae\x89\x64\x21\x95\x2f\xc4\xe0\x41\xff\xbf\x1c\x0e\xfe\xda\x1b\xf9\x88\xbd\x67\x86\xbc\x87\xd7\x95\xb2\x82\x2f\xf1\x10\xdf\xe2\xb9\x7a\x8d\xaf\xcb\xb8\xdf\x15\x94\x16\xd6\x2b\x0a\x21\x18\x6d\x2d\x9e\xa2\x24\x53\xba\x4f\xb8\x45\x29\x51\x42\x32\x58\x6b\x8c\x70\xca\x6d\x47\xb1\x40\xda\x06\x58\x0d\xfd\x4c\x18\xf2\xb4\x99\x85\xb9\x8c\x1f\xb3\xd4\xe6\x42\xfc\x72\x99\x72\x00\xff\xde\x88\x32\x71\xbc\xb1\xe9\x8d\xf7\xc2\xbc\xe3\x12\xe1\x1d\x64\x3f\x52\x63\x87\xc3\x7e\x2b\x82\x24\xf3\x97\xd7\x82\x7f\xf2\x66\xe8\x57\x91\x95\x9a\x8b\xa4\x25\x5a\x5c\x3f\xa6\xc5\x2f\x54\xb9\xc1\x67\xd4\xbe\x13\xf5\xe0\x10\x09\xab\x07\x9b\x02\x27\xe8\xa8\xa5\x94\xa7\xf6\x40\x73\x38\x81\xee\x1b\x26\xfa\x7a\x64\x59\x50\x8c\x0d\xa9\xf2\x33\xa8\xfd\x99\xe6\x68\x5d\x92\x54\x41\xab\x36\x4b\x76\x09\x2d\x1b\xad\x4a\x35\xa5\xf8\xac\x06\xe6\x36\x3e\x7d\xe7\x6c\x3e\xc6\x9e\x20\x2e\xf6\x22\xdc\xf7\x74\xfc\xfc\xcf\x8c\xe9\x9d\xf8\x87\xc6\x4e\x97\xef\x9a\xa4\x46\x3c\x3e\x8b\x56\x11\x5e\x2f\xdb\x48\xac\x10\xe5\x03\x63\x2c\xa9\x1a\x7d\xe0\x53\x36\x4d\xc1\xd4\x3f\x4c\x6e\x2b\xea\xe2\x52\x26\xe3\xa4\xd3\x24\xc7\x60\xec\x80\x77\xf2\x68\x5d\xc4\x03\x9e\xca\x5c\x8b\xd2\x2d\x3e\xb8\x54\xe6\x5f\xce\xf2\x30\xcd\x79\x9e\x82\x0d\x2b\x97\x76\x11\x34\x43\xdb\xf6\x8f\x8c\xcb\xb8\x85\x32\x21\xe1\x37\x4e\xf1\x9e\x48\x9b\x34\x0f\x22\xd5\xed\x6a\xf6\xe6\x92\xc7\xd1\x3a\x10\x98\x8c\x78\xf9\xc4\x75\xbc\x23\xfb\x69\xd6\xb0\xe3\xf6\xa7\xe1\x1a\x2a\xfe\x64\x90\x09\x73\x1e\x8b\x30\xcb\xf9\xf4\x14\xef\x46\x09\x80\x60\x39\xd2\xa0\xc3\x60\x9e\xfb\xcb\xc1\xe2\x02\x90\x82\x62\x9f\x42\x9e\x69\x2a\x62\xb4\x14\xd1\x7c\xe8\x42\x5f\xa0\x29\x84\x46\x46\xad\x35\x24\xf3\x91\xee\xd4\x82\xb5\xe9\xcc\x92\xff\x71\xc0\xe1\xcb\xa4\xe0\x93\x2a\xb3\xf1\x22\xc9\x6a\x9d\x52\xf4\x4b\x07\x82\x68\xc4\x7d\x3a\x73\xe1\xc0\xe9\x3c\x6f\x64\x41\x54\x63\xd4\x8a\x9a\x66\x50\xc0\x85\x03\xbb\x58\xc9\xc4\x8b\x07\xfc\x9e\x6c\x35\x36\xbd\x6f\x21\x47\x4f\xd9\xce\xea\x2a\xf7\x6f\x1e\x67\xef\xab\xb1\x2d\x9f\xf5\xdf\x54\x0b\x5e\x52\xdb\xea\x2e\x65\x8f\xc3\x6d\x9d\x3a\xee\x1c\x47\x01\x13\x81\x92\x72\x28\xfc\xda\x2c\x7c\x69\x4c\x70\x33\x85\x9f\x26\xb8\x26\xa0\x6c\x0c\x34\x4e\x26\x83\xe1\x02\x2d\x27\x56\xdd\x99\x25\x10\x88\x0f\x8c\x03\x4a\x68\x5a\xe9\xe5\x90\xeb\x83\x20\x5a\x50\x4d\x32\xd8\x65\xd5\x76\x68\xd4\x62\x34\x7b\x4d\x26\xf2\x51\x19\x93\x9f\xf1\xd8\x13\x49\xe0\x94\x0b\xf2\x3f\xe8\x05\xef\xf6\xb6\xb8\xa9\x67\xa8\x0e\x05\x1f\xba\x0f\x79\xc9\xb9\x06\x41\x33\xa6\x4a\xfd\x3c\x10\xfe\xac\x08\xe3\xcd\xa3\x9d\x73\xcb\x91\xa2\x6e\x28\x7a\x3a\x89\xe2\x22\x49\x1d\xd4\x79\x63\x4b\x71\xe6\xfb\xfb\xae\x60\xff\xde\x9a\xef\x10\xa4\xb2\x3e\xdd\x98\x45\xf7\xc0\x05\x19\x0b\xff\xc7\xae\x08\x5e\xe1\x59\x17\x08\x1e\x95\x1c\x08\x60\xe9\xa9\xf3\x58\xae\x46\xcd\x30\xc6\xe3\x30\xe5\x45\x61\xe8\x3f\xb2\x7d\x69\xa6\x4c\xcc\x15\x30\x2e\x06\x50\x26\xd5\xe9\x1d\xbd\x13\xaa\xf8\xdb\x22\x64\x32\x97\x29\xb7\x3e\x4a\x57\xdd\xd4\xbb\xd7\x1d\x61\x2f\xd6\xcc\x62\x69\x70\x1d\x7e\x09\xed\x38\x1a\x5d\xc1\xae\x83\x39\x2f\x59\xe5\xda\x63\x3f\xc9\x26\xd8\x53\xb7\xd4\xfc\x74\xd7\x14\x25\xb2\x9f\xab\xb1\xab\xc3\xd5\xd5\x54\x60\xaa\x83\xba\xe6\x3f\x38\xca\x10\xa5\xcb\x98\x71\x5f\x0a\x3e\xe7\x95\xae\x68\xe0\x06\x42\xe4\xd3\x93\x16\xc3\xf2\x4b\x50\x19\x2b\xfd\x88\xb2\x61\xb6\x6e\x26\x98\x98\x2a\xbe\x01\xe9\x12\xb9\x52\xd7\x8b\xf7\xc3\xd4\xc1\x38\xe9\x86\x49\xb8\xaa\x86\x2a\x69\x51\xc6\x9c\x4d\x3e\x8c\xaf\x68\x93\x7c\x96\xcb\x6e\xaf\x98\xae\x96\x72\xb7\x6f\x91\xda\x8f\x47\xf9\xda\xf9\x16\x3a\x96\x6b\xe1\x3f\xee\xd5\xb3\xf0\xa4\x11\x90\xbf\x8f\x78\x2f\xdc\xde\x6e\xf8\x2c\xff\xf4\x2e\xa2\x02\xad\x55\x5c\x4e\x7e\x7e\xff\x11\x36\x51\x0a\x39\xb1\xb2\x00\xd6\xa7\x1b\x70\xfa\x21\x6a\xb6\xc5\x9e\x68\xfa\xaf\x3e\x12\xdc\x5e\xbe\x58\x38\xd6\x69\x64\x4d\x0e\x74\x2f\x4c\xc3\xae\xc8\xc9\x21\xa8\x0f\x01\x3a\xd5\x75\xd3\x3b\xa2\x95\x72\x57\xe9\x78\xeb\x61\xf6\xe0\x18\x2b\x6e\xfa\x0f\x8c\x05\x5f\xaa\xe9\x23\x48\x81\x64\x40\x87\x90\xa4\x38\x85\x64\xbb\x3e\x86\xe4\xe0\x4a\x14\xdd\xad\x4e\x22\x36\x0a\x8d\x2a\xa1\xf2\x43\x3b\x3e\x88\xcc\x18\x35\x37\xeb\x93\x01\xce\xa0\x70\x14\x45\x93\x2e\xa4\x8f\x87\xd6\xb0\x14\x67\x3c\x60\x3d\x6d\x3b\x67\xa3\x4c\x53\x3e\xad\xf4\x73\xf0\x21\x23\x21\x54\x27\x5a\xed\xf0\x96\x58\x4d\x05\x9e\x9e\x52\x54\x87\x90\x6d\x18\xea\x86\x71\x28\xa6\x98\x51\xfa\xcc\x6b\xc6\xd8\x55\x2b\xb2\x9f\xb4\x0c\xe2\x98\xff\xd5\x1a\xbb\x75\x64\x14\x93\x3b\xa5\x6e\x73\xde\xc6\x7d\x3c\x78\x6f\xcd\xbd\x8c\x92\xa9\xf0\xf8\x03\x15\xbe\x43\x9a\x5d\xa8\xe0\x7a\xef\x80\x6a\x81\x10\x59\x72\xef\x81\xce\xb7\x22\xf0\xbc\x85\x3a\x70\x06\x98\x26\xea\x5f\xc8\x6d\x83\x37\xa9\x74\x48\xe4\xcb\x1a\x7c\xfe\xfc\xd2\xe9\x93\x25\xb8\xa2\xa3\x19\xa7\xc9\x0f\x51\x97\x46\xaa\xc1\x67\x88\x27\x0f\xa7\xa6\xdb\x1c\xcc\x28\x44\xd2\x2d\x77\x98\x13\x99\x37\xf8\x9d\x42\xf4\xf8\xf0\xe1\x31\xeb\x2a\x25\x24\x6a\x17\x2c\xb8\xbd\x54\x76\x7b\x4a\xf2\xae\x4b\xea\x50\xf6\x55\xaf\xea\x54\xfa\x79\x63\x1f\xfe\x6f\xde\x1e\x4f\xa5\x26\x31\x7d\xc9\x3a\xa4\x65\x7d\xd8\xd8\x07\x06\x98\xc5\xf4\xb7\x5a\x40\xbc\x15\xb5\x11\xf9\xad\x28\xcd\x7c\x22\x93\xa0\xfc\xc1\x92\x2c\xec\x7b\x1d\xd1\x5c\x83\xcf\x1d\x2d\x1a\x73\x54\x3b\x05\x13\x8c\xcf\x82\x4c\x7a\xf7\x5c\xf7\x96\xc3\x95\x90\x6f\xb3\x51\xd2\x12\xe9\xdd\x70\x10\x5e\x84\x9d\xcb\xff\xd7\x43\xc1\x5f\x79\x17\x6c\xe3\x4d\x13\x1e\xd2\xc7\x65\x3b\x28\xe9\x7c\x4f\x24\x59\x1e\x36\xd7\xd4\x82\x9d\x75\x1e\x03\xc9\x01\x53\x44\x47\xa1\xc0\x71\x91\x0e\xc6\x61\x11\x43\x40\xc9\xee\xd6\x5b\xc0\xde\x09\x20\x86\x45\x68\x44\x2a\x56\xc1\x06\x9a\xd9\x27\xf8\x86\xfb\xcd\xcc\x78\xfa\xe4\x46\x22\xd2\xac\x13\xf5\x48\xa7\x42\x2e\xcf\xa4\xc5\x17\x4f\x63\x94\x83\x3a\xca\xae\x08\x88\x87\xda\xf4\x0e\xe3\xeb\x73\xa7\x1c\xd9\xfa\x95\x03\xec\x65\x35\x76\xb0\x9d\x2d\x0d\x7a\xc2\xff\x67\x2f\xf8\x92\x77\xa6\xb0\x24\x41\xca\x7c\x2e\xb1\x51\x0d\xae\xf3\x7e\x43\xdb\xda\x04\xcf\x38\x7e\xc3\x1c\x88\x09\x33\xc3\xc1\x9b\xac\x12\xa1\x68\x83\x1b\x1c\x68\x1e\x88\x8b\xf9\x75\x41\x9d\x07\x17\xdb\x99\xfa\x27\xc9\xdb\x59\xd0\xe0\x73\x4a\x4e\x35\xa3\x3c\x26\xc5\x21\x35\xae\x49\x7c\x41\xcd\xff\x7e\x62\x65\xe4\x57\x28\x00\x9a\x7a\x58\x6b\x01\xdd\x41\xf6\xa2\x78\x02\xc7\x77\xa2\xd7\x9a\xbc\x70\x7a\xe6\xd4\xb9\xd3\x8d\x6e\xcb\x96\x64\x1f\xf0\xd8\xe1\x54\x84\xad\xf3\x49\x3c\xf0\xdf\xed\x05\x3f\xeb\x69\xf8\xea\x93\x0e\x4c\x00\xa4\x7e\xf3\x63\xea\xd1\xc9\x8d\x34\xca\xc5\xf1\x06\x58\x38\xcf\x83\xf3\x59\xa4\x04\x31\xd0\x96\xa8\x1f\x89\xe2\xa6\x66\xc1\x8f\x12\x8e\x53\xf1\x9c\xea\xd5\x6a\xed\x6f\x17\x4d\xb0\xf2\xbd\xdf\xec\xb1\x23\x99\x68\xa6\x02\x04\xf1\xeb\xbc\x11\x76\xe7\x51\x38\x92\xc1\x3d\x45\xd3\x41\xa0\x11\x3e\x02\x16\xad\x05\x23\x4d\x6d\xc8\xf2\x2d\xf6\x75\xbd\x49\x35\x65\x92\x10\x12\xa6\x5a\x3e\x8b\xb0\x7c\xd8\x0f\x78\xcc\x4c\x43\xff\xbe\xa0\x4b\xeb\x21\x6a\x15\xb6\x4f\x6d\x0c\xcc\x8b\xe5\x12\x25\xb4\x38\x2f\xdf\x68\x7f\xe5\x89\xec\x5b\x2a\x7a\x03\x48\x40\xfc\x4f\x3e\x31\x78\xe5\x18\x72\x06\xd1\xbe\x83\xcb\x0d\x8e\x07\x48\xdf\x9c\xc9\xae\x40\x6e\xbd\x72\xac\x1e\x12\x89\x64\xda\xf8\x0d\x51\xa0\x40\x49\x96\xa3\x5a\xc9\x4d\xc4\x57\x9e\x46\xab\xab\x3a\xf3\x9b\xf0\x18\x71\x17\x10\xeb\x32\x5e\xd7\x2c\x9f\x51\x57\xe8\x52\x21\x7c\xa0\xdf\xb5\x4e\x25\x4a\x39\x4e\x45\x3c\xd0\x07\xff\x3c\xea\xd2\x61\xd9\x54\x95\x64\x30\x85\x71\x00\xbc\xa3\xda\x49\x21\x41\x1e\x42\x3d\x54\xa1\x4a\x51\x48\x72\x3b\x36\x8d\x6a\x57\xe7\x1a\xf6\x4e\x2a\xb1\xa6\xb4\x14\x10\x77\xda\xf8\x8a\x59\x64\x3a\x5e\x21\xcc\xe9\x0b\x45\x3f\x14\xd0\x20\x39\x59\xed\x43\x2b\x44\x7a\x5d\xd4\xf9\x8a\xc8\xf2\x09\xd1\x6e\xcb\x34\xaf\x83\x20\xa1\x60\xb7\x98\x83\x0a\xbc\xe9\x19\x5d\x7b\xd3\xbb\x2a\x4a\xa0\x6f\x68\x2f\x75\x44\xd9\xc7\xbe\x81\xdd\x55\x00\x5b\xde\x11\xdc\xb2\x13\x50\xf7\xcc\x82\xb3\x54\x67\x19\xcd\x15\xe7\x18\x35\x3e\x6e\x87\x12\x3d\xbc\xe7\x50\xa2\xaf\x0f\x92\x8f\xd7\x7a\xec\x20\xee\x71\xfe\xf7\x7b\xac\xbe\xad\xa4\x80\xf1\xc4\xdd\x33\x58\x5a\x82\x19\xd1\xed\xc9\x04\xf1\xd5\x34\x36\x30\xb2\x1a\xac\x03\xc8\xeb\xa2\x19\xf9\x50\xcd\x82\x34\xd7\x08\xf7\x38\xcd\x32\xe8\x03\x35\x2c\xd8\xcb\x0d\x76\x37\x3b\x88\x39\x28\xfe\xd9\xe0\xd6\x7b\x90\x9c\x11\x23\x1e\xd5\x86\x18\xae\x89\x64\xb2\x1d\x46\x31\xac\xa6\xd5\x30\x6d\xd1\x2e\x8b\x42\x56\x5f\xb0\x21\x95\x68\xf8\xee\x60\x07\xc0\xa0\xed\xcf\x68\x07\x53\x7d\xc9\x71\x2a\xa9\x35\x96\x59\x75\x07\x9e\x06\xd9\x04\x9f\x5e\xcb\xd5\x30\x5e\xc8\x4a\x53\xd0\x7f\xce\x08\xfb\x8c\xee\xbb\xb2\x80\x7d\xca\x92\x85\x15\x8c\xea\xab\xf9\x76\xa4\xf9\xe7\x59\x48\xa8\xb1\xcf\x0d\xce\x6a\xd4\x58\xeb\xb9\x63\xf3\x10\xaa\x5d\xe7\xf7\x84\xa9\x92\xc2\xc7\xeb\x3c\x11\x1b\xb0\x1d\x67\xbc\x69\xba\xbe\x65\xe1\x23\x23\x53\xf7\x3e\x82\xdb\x65\xb4\xa2\xbc\xc5\x63\x57\x01\x4e\xe9\x92\x9a\x43\x79\xd8\xed\xf9\x3f\xea\x5d\x32\x32\x6f\xf0\x9c\x25\x14\xe2\xe0\xc3\xc0\x48\x0a\xb0\x97\xa0\x24\x0f\x33\xc2\x44\x55\x8d\x4f\x5b\x4a\xfd\x39\xa6\x5e\x03\x7a\x3a\x8d\xbc\xd8\x14\x51\x0f\x66\x51\x94\x70\x35\x6d\x94\xc8\x69\x1c\x67\x0f\x7a\xec\x4a\x40\x11\x36\xf5\x7c\xd9\x1e\xea\x79\x7b\x75\x3d\xed\x08\x13\x5a\x3f\xc6\x49\x67\x26\xae\x6a\x86\x69\x00\xeb\x31\xdf\x88\x8f\x59\x2d\x51\xfc\xe7\x05\xe7\x6c\xe4\xe8\xb2\x67\x59\x74\xa3\x3c\xd7\x24\x2a\x20\x98\x90\x0b\x97\x2f\xbb\x30\xd2\xa4\x41\x2f\x37\x4a\x04\xde\x1a\xe6\xf8\x35\x5e\xf0\x12\x0f\xbc\xb1\x59\x59\x58\xd5\x47\x4b\x2b\xac\x87\xda\x54\xf5\xe1\x09\x36\x56\x1d\x88\x90\x1b\xac\xe6\xc2\x5d\x6b\x64\xbd\x1d\x2b\xd0\xcf\x9c\xba\xa5\xec\x10\xf8\x9f\x44\xcb\x5f\xbd\x04\xb9\x72\xad\x56\xdc\x08\xab\x2b\x4c\x07\x5a\xcc\xb4\x75\xc8\xa6\x12\xdb\xb1\xb8\x48\xb2\x35\x6b\xb0\xbb\xd8\x13\xcc\x08\xcc\x11\x1a\xbd\xff\xcc\xe0\xda\x02\xfb\xdd\xea\x7e\x0d\x57\x6f\xf7\x77\x2c\xf2\x89\x8b\x83\xfb\xda\x6e\x37\xbf\x46\xed\x2f\x22\x8d\x44\xa6\x66\xda\x4e\xf7\x17\x78\x21\x58\x3c\x15\xe6\xa1\x95\x3c\x85\xda\x0f\x96\x66\x4f\x25\xcb\xfb\x2e\x53\xf0\x51\x00\xa9\xf8\x51\xb0\x63\x46\xc9\x6a\x2c\x72\x99\xe0\xdb\x0d\xd6\x67\x47\xe0\x2d\x40\xcf\xee\xb0\x9b\x2f\x61\xee\x9f\x8b\x9a\xa9\x84\x05\x80\xeb\x6e\x03\x2d\xdd\x7a\x12\x5a\x2b\x54\x07\x55\x35\xf6\xed\xac\x7b\xc1\x78\x3c\xb7\xbd\xf5\xf3\x1a\xff\x58\x15\xc6\x23\xd2\x6c\x96\x0c\x9c\x7f\x56\x63\xdf\x56\xe1\x3e\xb9\x20\x63\xa1\x4e\x4c\x1f\xaa\x05\xb7\xd2\xdf\x85\x11\xd3\xc1\xca\xc7\x40\x5d\x7d\x24\x82\x85\x2f\x63\x41\x49\x7d\xea\x0c\xb3\xe9\x1d\xd6\xb4\xe5\x9b\x1e\x8c\x3b\xa5\x48\x39\xaa\xea\x1f\x43\x62\x14\x54\xff\x64\x30\xa1\xe7\x04\x08\x0e\xda\xe8\xcd\xd0\x63\xd1\x85\x8b\xcb\x5e\x62\xdb\x24\x57\xed\xa8\x8c\x05\x66\x2a\xec\x9f\x0a\x9e\x36\xb3\x30\x07\x7f\xeb\xb2\x30\x53\x58\x8b\xb5\x1d\x95\xf8\x9e\x23\xec\xd8\x70\x27\x13\x2d\x86\xe5\x7b\x03\xa6\xa0\x57\x1e\x09\x1e\xf2\x4a\x17\xab\xf8\x12\xad\x47\xb2\x0a\x0a\xee\xa7\xa9\x3f\xda\xe1\xba\x04\x7d\x6e\x4b\x23\xf8\xe4\xfa\x34\x2f\x7d\x0c\x55\x0b\x38\xb3\x27\x12\xa1\x8d\x53\x04\xfe\x82\x98\x48\x2c\xff\xc4\x89\x6a\x0e\xa2\x3f\x38\xb8\xaf\x41\xed\x55\x83\xea\x6a\x0a\xa2\x56\xf0\x1d\x73\xc3\xb4\xbb\xf6\xc0\xdb\x86\xe8\x1b\xd8\x75\xec\xc4\x76\x8e\xd1\xe1\x49\xb7\x2f\x8e\xf7\xe0\xf6\x6a\x5b\xc7\xe0\xe7\xed\x8d\x58\x68\xb4\xd3\x2b\xdf\x5e\xec\x3f\xdb\x3f\xaf\xb1\x40\x4a\x2b\xba\x12\xa4\x81\x6f\xef\x20\x63\x7f\x73\xd8\xc6\xfe\x6d\x68\x38\x07\x33\x8d\xd0\x6a\x37\x93\xe7\x61\xb3\xd3\x55\xca\x0a\x06\xd3\xbf\xf7\x70\x30\x5b\x7d\x4b\x0b\xd1\xc2\xc8\x10\xf2\xf2\x93\x96\xfb\xeb\x70\x08\x57\x49\x9a\x6a\x19\xf3\xa9\x43\xec\xaf\x3d\x76\x45\x4b\xa8\x7b\xa7\xd3\x54\xa6\xfe\x9f\x8c\xb2\xec\x6d\x51\x6d\x78\x33\xf8\x69\x6f\x09\x24\x44\x96\x13\x22\xad\xc5\x6d\xc8\x5b\x7d\x58\x02\xf8\xa5\xc2\x14\x02\xe1\xd6\x61\x32\x68\x38\x64\x77\x7d\xb5\x3c\xc9\x93\x92\x89\xdc\xe0\x1e\x26\x79\x94\x0f\x48\xc9\x34\xcb\xa7\xa2\xc8\x86\x68\xe0\x0b\x17\x51\x4c\x4d\x50\xe3\xd3\x06\x34\x17\x7f\x3d\x16\xcd\xc5\x2f\x5d\xd6\xe6\x56\x14\x39\xa2\xb9\xef\xf2\x98\x19\x79\xff\x21\x2f\x78\xd0\x9b\x73\x03\xda\xc9\x0a\x9a\xf1\xac\x0f\x99\xf2\xed\x7e\x1c\x0f\xb8\x7e\xe5\xb1\xaa\xa7\x63\x69\xfe\x50\x8d\xf9\xa1\x99\xc3\xe7\xb4\x50\xf8\xf9\x5a\xf0\x9a\xda\x5d\x3d\x99\x58\x55\xa5\xaf\x38\x60\xac\x51\xc6\x7b\xb2\xd7\x8f\x8b\xcc\xb3\x30\x19\x38\x9a\x96\xc6\xff\x34\x91\x4a\xa5\xaa\x52\x94\x18\x39\x24\x7a\x61\x96\xc1\x66\x9d\x4b\x25\x50\x31\x94\x3f\xe7\xf7\x84\x51\x7e\x46\xa6\x33\xf4\x6e\xca\xc1\xe2\x8e\xac\x19\x8f\x55\xb7\xbd\xbd\xe4\x32\xb5\xd6\x36\xfb\x7b\x8f\x2d\x5e\x2a\x63\x0c\x91\xc9\xd3\xf7\x4e\xc9\x66\xdf\x64\x08\xfb\x3f\xee\x05\xcf\xad\xbc\x83\x01\x5f\x99\x51\xdc\x08\x8a\x5c\xd7\xba\xd8\xe1\xda\x90\x80\x4b\x31\xbd\x2d\xbb\x08\x37\x62\x6a\x8a\x7d\x9b\x12\x4d\xc6\xac\xea\x12\x07\xf9\x6c\xac\x9f\xc6\xee\xb5\x5f\xb8\xda\x65\x50\xab\xc8\xd9\xbf\x5d\x89\x66\xa5\x7e\xc7\x0b\xb2\x35\x43\x0f\x88\x14\x02\x0e\xfe\xe6\xaa\xe0\xde\x11\xf7\xad\x68\x26\x94\x3b\x59\xa4\x96\x7a\xbb\x9f\x34\xf1\x60\x6c\x79\x32\xb7\x28\xa6\xb1\xe9\x5d\x05\x7f\x2d\x81\x1f\xfc\x82\x68\x6f\x7a\x57\x74\xc3\x8b\x17\xaa\x92\x9d\x3e\x7b\x25\x7b\xe9\x01\x76\x88\x60\x12\xfc\x7f\x1c\x0f\xde\x3e\xae\x31\x13\x1c\x7c\x01\x9d\x75\x4d\x19\x04\xaa\x7f\xc9\x6c\x22\x75\x2e\x77\x33\x8c\x9b\xb0\x24\x9c\xaa\x53\x28\x3c\xe5\x5f\x1c\x03\x2b\x4b\x78\x31\xea\xf6\xbb\xa5\x5b\x61\x33\x95\x19\x06\xaa\xe9\x1a\xd8\x99\xcd\xc7\x81\xac\x74\xab\x72\x01\xad\x97\x3e\xdf\xd2\x31\x08\x03\x3d\xe1\x61\x9a\x57\xc5\x08\xa0\xb6\xa4\x91\x6b\x5d\x0c\x05\x1d\xb3\x45\x17\x0b\x6b\x6b\x4f\xb6\xb2\x06\xe7\xa7\xd3\x55\x59\xb7\x00\x26\x04\x2d\xc3\x96\x68\xa6\x80\xeb\x4c\x5e\xd0\x9e\x6c\x15\x95\x8c\x12\xbc\x49\xa1\x9c\xeb\x51\x53\x80\x5a\x10\x36\x38\x5f\x14\x3a\x0c\xa4\x15\xad\x47\xad\x7e\xa8\x3b\x82\x6b\xb5\x0d\x4c\xa3\xc6\x10\x32\x8c\xd3\xd2\x91\x1b\x88\xd1\xa1\x4f\x61\xf4\x3e\xd4\x8b\x32\xa0\x0c\x92\xb1\x0e\x75\x33\x31\x96\xf4\xb0\x89\x5d\x13\xe0\xfd\xba\x71\xea\x3b\x79\xb8\x2e\xd4\x1e\x05\xa0\x1e\xfd\x3c\x32\xa4\xbe\xb6\x3e\x7b\x13\x1b\x41\xe8\x35\x02\xda\x42\xcd\x7a\xf6\x0f\x35\x76\x45\x37\x4a\x4c\x4a\xc7\x9f\xd5\xb4\xa5\xfb\x77\x6a\xd6\x75\xc3\x21\x2f\x37\x44\x8a\xae\xa9\x22\x75\xc6\x8c\x8f\x49\xbe\x00\x32\x41\x6d\xda\x0b\xcd\x02\x81\xb0\x4b\x84\x2c\x69\xc9\x0d\xc2\x09\x68\x39\x11\xd9\x08\xbf\x50\xfa\xb2\x8e\x3d\x45\x77\xee\x94\x0e\xf4\x86\x6d\x5b\xe7\xe1\xf2\x55\x35\xff\x6f\x5f\x98\x59\x84\x15\x28\x9f\x07\xb8\xf0\x19\x65\xef\x62\xd0\xa0\x89\xee\x96\x89\xe0\x68\x01\x53\xb2\x5d\x0b\x3c\x3d\x0e\x51\x66\xf0\x0c\x80\xea\x78\x91\x60\x50\x54\x4d\x10\xa5\xdf\x0a\xfb\x70\xca\xa4\x02\x0c\xd0\xbc\xcd\x85\x62\xb9\x02\x7e\xa0\xc6\x4a\x82\xc2\xff\xf2\x36\x08\x3e\x43\x63\x38\xab\xd6\x2c\x9d\x15\xcb\xc6\xbc\xb7\x78\x6e\xe9\x25\xc3\x03\x2d\xc1\xe2\x50\x22\x71\x50\x4c\x3a\xb4\x76\xa9\x9a\x54\x91\x42\xe8\xe8\x55\x57\x58\x3d\xe9\xb4\x0d\x0b\x2b\xe3\x1b\x22\x86\x6c\xeb\x5c\xaa\xbe\x42\xd8\x0f\x0c\xd2\x24\x33\x80\x25\x3b\x1a\xec\x1d\x35\x76\x78\x45\x74\xc2\xf5\x48\xa6\xfe\x4f\xd5\xb6\xe6\xaf\xd9\x8d\xb4\xbf\x8d\x0a\x0c\x3e\xe6\xe9\xb2\x8b\xf1\xd4\x79\xd5\x38\xa2\xe6\xbe\x8e\xc1\xc2\x9e\x89\x12\x00\xec\xe6\x77\xf5\xa0\x47\x4e\xc9\x0d\x43\xd1\xa0\x44\xf0\x31\xf8\x0e\xdd\x84\xbf\xe1\x09\xe2\xb4\x56\xab\x5d\x50\x8e\xc4\xf1\xad\xd7\x3c\xcd\xd4\x28\x59\x2d\x62\x65\x71\x69\xf4\xad\x82\x61\x9d\x40\x98\x1a\xd0\x0e\xb0\x9f\xf3\x98\xbd\xa3\xf8\x3f\x6e\xb2\xef\x5e\xe6\x59\xd7\xf5\x72\xed\xf7\x7a\x97\x67\xb9\xf6\x7b\x98\xce\x69\x4e\x97\xb1\x21\xb0\xb2\xd6\xaa\x3b\xcb\xdf\xfe\x78\xf6\xad\x95\x89\x53\xcd\x54\xe4\xfe\xab\x1f\x1f\xdc\xef\xe1\xdf\x14\x28\x4d\x41\x02\x4a\x1d\xc4\x03\x4f\x53\xa4\x6a\x1b\x04\x99\xaa\xa3\x86\xf2\x30\xe6\x2b\x83\xbc\x08\x9b\x23\x7c\x12\xf2\x53\x81\xf5\xd7\xd2\xcc\xac\x9a\x26\xfc\x5c\x78\x11\x3f\xb8\x18\xdd\x27\xb0\x14\x57\x27\x79\xeb\x55\xec\xb7\x6b\x8c\xa1\xbe\xa1\x8a\xf2\x7f\xb5\x16\xbc\xa9\x56\xfc\xd6\x5a\x10\x41\x87\x00\x38\x88\x4c\x26\x56\xa2\x24\x4c\x07\x4e\x03\xa2\x44\xdb\x05\xd4\x56\xd1\x20\x40\x14\x13\xcf\x08\xd1\xe6\x10\x04\x32\x81\x89\x04\x49\xaf\x9f\x53\xc5\xdb\x38\x5f\xd7\x45\x02\xe1\x5d\x0d\x3e\x13\xc7\x7c\x4d\x0c\xd0\xdd\x6f\xe1\xb1\x40\x5e\x5e\xab\x70\x13\xb4\x8a\xc6\xcb\x04\x4b\xaf\x03\x62\x83\xfa\x13\x15\xb6\x41\x01\x2f\xaf\x2d\x37\x4b\x1d\xed\x99\xb0\x3a\x2f\xca\x78\x22\x20\xcb\xab\x9f\xab\x9a\x81\xb9\x3a\x15\x08\xcd\x6e\xac\x12\x33\x0b\x73\x23\xb5\xd4\x73\xe4\x86\x3c\x1d\xdc\x78\x17\x89\x94\x76\xd8\x8c\xe2\x08\x92\x00\x7a\xa9\x5c\x4d\xc3\xae\xda\x47\x9b\x08\xd4\x42\x01\x08\x56\x3f\x36\xf6\x5d\x8e\x97\xd1\x60\xf6\xbb\x35\x36\x8e\x91\x08\xaa\xeb\x60\xb8\x5d\x55\xd3\xea\x78\x7e\x5a\xa9\x33\x6b\x62\x80\x0b\x89\x42\x3d\xa0\xc3\xd4\xb6\x9b\xf4\xbb\x42\x6d\x75\xcd\x4e\x98\x86\xcd\x5c\xa4\x59\x9d\x1f\x9d\x38\x5a\xe7\x47\xef\x3d\xaa\xf6\xd4\xa3\x8d\xa3\x86\xd7\x2d\x02\xa2\x02\x98\xd8\xdd\x22\x45\xcd\x5a\x2b\x6a\x31\xac\x84\x99\xb8\xe1\x3a\xc3\xe7\x8b\x35\xae\x0f\xdb\xd3\xc2\x74\x25\xca\x53\xb5\xdc\x8e\x11\x46\xd1\x00\xd6\x20\xbe\x70\x1c\x4b\xc4\x0d\xb8\x23\x52\xd1\xe0\xa7\x48\xaf\x07\x8b\xac\xee\xea\x5c\xca\x38\x6b\x44\x22\x6f\x37\x64\xba\x3a\xd9\xc9\xbb\xf1\x64\xda\x6e\x5e\x77\xc3\x75\x37\x3e\x39\x43\x39\x3f\x71\xdd\xdb\xbd\x6f\x60\x4f\xf0\xc7\x95\xa0\xd8\x62\x82\x7f\xde\x63\x47\x0c\xfe\x8e\xff\x49\x2f\xf8\x88\x37\xa7\x7f\x82\x35\x80\x54\xb9\x1c\xa8\x4d\x11\xb3\x83\xc4\x26\xd4\x33\xcb\x01\x71\x84\x84\x17\x49\xc3\x66\xd9\x84\xc7\x8f\x81\x8c\x20\xb3\xa1\x36\x76\xe9\x1c\x16\x24\x21\x02\x35\xbd\xd8\x6b\x8a\x8f\x62\xd6\x99\x5a\xd3\xa5\xe7\x39\xa5\x3d\x61\x98\x10\x05\xaa\x11\x36\x08\x30\x40\x5a\x87\xf6\x7d\xd3\xe7\xa5\x9b\x3e\xff\x2d\x86\x00\x3d\xe2\xcd\x6f\x6f\x67\x7d\xaa\x7f\x5c\xdb\x59\x71\x66\x6f\x05\xb6\x1c\x04\x8c\x3d\x38\xe6\x90\x55\x8f\xb2\xcd\xf9\x5f\xac\x05\xa7\xac\xdf\xbc\x19\xf6\x72\x58\x58\x86\x2d\xab\xca\x58\xa7\xad\x61\xa5\x40\x2d\xbd\xf7\xbf\xbe\xc6\x7e\xc1\x2b\x82\xc0\x7e\xca\x0b\x7e\xd4\x5b\xcc\x8d\x59\x33\x8a\xf5\xac\xde\xf2\x0b\x85\xb1\xe8\x54\xc9\x68\x49\x16\x23\x5a\x2d\xdd\x70\x00\xd0\x5f\xab\xab\x4a\x67\xce\x24\xb0\xd1\x16\x41\x79\x24\x91\x79\x26\x20\x0e\x60\xdd\x39\x6e\x3a\xfb\xe1\x0a\x1b\x57\x8b\xd7\x7f\xde\xa5\x47\x63\x7c\x07\x38\xa3\x8b\x66\x6d\x84\x99\xdd\xb4\x06\x7b\xfd\x13\xd9\x0c\x15\xa7\x46\x7b\x42\x27\x99\x49\xd7\xc0\xe4\xf0\x63\x20\xf7\x2b\x65\xbf\x83\xed\xe5\x77\xbf\x39\xf8\x19\xcf\xbd\x56\xed\x26\x55\xba\x0f\x70\x89\xa3\xba\xa2\xf6\x60\x98\xb2\x74\x85\x22\x12\xc9\xc2\xc5\x31\x72\x56\xcd\x73\xb4\x71\x52\x24\xb1\x12\x7a\x40\x56\x3e\x90\x7d\x44\x9a\x23\x88\xca\x56\x94\xc1\x9f\x16\xe5\x80\x9a\x91\xc6\xba\xd2\xd8\xf4\xbe\x11\xe6\xe4\x42\x1a\xc9\x34\xca\x07\xe7\xa2\x24\xea\xf6\xbb\x9b\xde\xd5\x34\x71\xf5\x0d\x67\xea\xfc\xdd\x37\xb2\xff\xea\xb1\x6f\x8a\x92\x4c\x34\xfb\xa9\x58\x5c\x8b\x7a\x4b\x67\x17\xef\x56\x05\x0f\xfc\x5f\xf2\x82\x87\xbc\xb9\xaa\x5b\xba\x3a\x19\x5f\x3a\xbb\xb8\x65\x9d\x50\xf5\xaa\xe8\x06\x90\x92\xba\x27\x34\x5d\x6c\x96\xa7\x32\x59\x8d\x07\xc8\x10\xd0\x57\x6b\x48\x9d\x60\x9f\x2b\xfb\x65\x2a\xd6\xd9\x99\xdb\xfa\x80\x00\x18\x25\x59\x2e\xc2\x96\x2b\xf0\xbf\x52\x63\x87\x28\xa9\xdb\xff\x42\x8d\x3d\xbb\x72\x7e\xed\x66\x42\xd0\xc8\x17\x67\xd4\x1f\xa9\xd1\xa5\x8a\x0c\x8d\xdc\x4a\x29\x37\x39\x84\x45\xf2\x04\xda\x0d\x48\x2d\xd1\xfd\x02\x28\x82\x10\x6d\x7b\xdd\x75\xd7\x12\xe7\x9b\xe0\xd6\x37\x08\xc8\x4a\x9d\x58\x28\xef\x57\x14\x5a\xa7\x3e\x1c\xa9\x8f\xc0\x0c\x30\xd0\x28\x19\x61\x08\xb6\x60\x5e\xc6\x3a\x60\xd6\xe9\x7b\x81\x1c\xda\x98\xe2\x1e\x75\x7b\x00\x75\x19\x0b\xb0\x48\x18\xac\x44\x40\x47\x35\x78\x84\x9d\x10\xf1\x57\x6d\x2e\xac\x06\x7b\x0e\x3b\xa4\xd9\xc9\xcf\x05\xcf\xbc\xbb\xa8\x83\xae\x9b\xae\x96\x55\x01\x08\x98\xcf\x08\xb3\xd2\x40\x1f\x06\xeb\xd3\x81\x2d\x2b\xfe\xfc\x10\x2b\xcf\x61\xff\x63\x87\xf4\xe1\xf1\x7d\x87\xee\x76\xef\xe9\xc0\x1d\xfc\x32\x50\xd0\x1a\x8a\x41\x1a\x8b\x02\x3c\x06\xd8\xfd\x29\x27\x9f\xe8\x8b\x4d\xc0\xff\x2a\x84\xee\x52\x16\xfe\x7d\x22\xa5\xa4\x9a\x5e\x1a\x75\xe1\xc8\x04\xb8\x63\x19\x68\x7f\x70\x6a\x29\xd5\xa3\x6e\x18\xc3\x3b\xd1\x6a\x47\xe9\xda\xb9\x04\x23\x54\x96\xf3\x63\x27\xa6\x74\xea\xc4\xf4\xd4\xf1\x06\x5f\x8c\x00\x56\x42\x6d\x88\x45\x9d\x42\xac\x51\xdd\x3e\xfa\x92\x22\x04\x59\x31\x75\x75\x0c\x59\x09\x57\xe0\x0c\x06\x0f\x4d\x4f\x65\x0e\xb9\xb1\x78\x51\x5f\x69\xf6\xd4\xda\x1e\x56\x2c\x12\x59\xdd\x3e\x68\x68\xd9\x5e\x46\x84\x6c\xca\x6e\xaf\x4f\x76\x59\x68\x89\xae\x5a\xa8\x7b\x6a\xae\x5d\x55\x4e\x94\xf1\x00\x96\x57\x1c\xad\x89\xa0\xae\xb6\x08\x9c\x5d\xaa\xbf\xc2\x15\xb9\x0e\xc4\x88\xf6\x33\xa5\x12\x32\x0d\xa7\xa4\xe4\x9f\x61\x5d\x17\x17\xa3\xa6\x3a\x74\xf5\x3a\x11\xcc\xe5\x06\x0f\xee\x1c\x2a\x21\x23\x98\x06\x12\xb6\xc1\x7a\x40\x89\xb9\xaa\xa8\xb6\x2c\xf2\xc0\x43\xdd\xa1\x64\x5b\x7e\xa1\x4c\x75\x19\xc7\xe9\x15\x9d\x36\x1c\x13\x7c\x34\xb6\x2e\x80\x4d\x3d\x50\x5b\x65\xb0\xa2\x94\x1a\xb4\xce\x25\x98\xd7\xe4\x14\x1a\x25\x56\xa1\x30\x77\x32\x84\x00\xcd\x30\x69\x04\x63\xa6\x56\x06\xfc\x59\x33\xfc\x19\x5c\x15\xc6\x9f\x41\x86\xc1\x63\x18\x66\xff\xac\x19\x94\x30\x05\x2f\x7b\xde\xe1\x89\xe4\x59\xbf\xdd\x8e\x2e\xf2\xac\xaf\x3a\x29\xc3\x57\x65\x8a\xef\x1e\xaf\x6b\xd3\x34\x00\x4f\xa9\x51\x0c\x69\xef\xb6\x1a\x49\x6d\x74\xea\x88\x08\x00\xb8\x0a\x75\x1d\x75\x40\x82\xee\x5f\xa5\xfd\x4c\xd5\xf9\xfa\x89\x3a\x5f\x9f\x56\xff\x43\x1e\x26\xf5\xd7\x94\xfa\xeb\xda\x3a\x5f\xbf\x16\xbc\x34\xea\xd2\x09\xd4\x80\xe0\x39\xf8\xf3\x44\x9d\xb7\xa5\x9c\xc6\xff\x4e\xb9\x36\x97\xbf\xf6\xd8\xe1\x66\x88\x92\xdd\xff\xac\x87\x87\x97\xe0\x67\xbd\x42\xda\xab\xae\x58\x38\x7d\xce\x1c\xb4\x66\x67\xf8\x0a\xde\xc2\xf9\x52\x9e\xc1\x26\x19\x8d\x88\x67\x4d\xfe\x9a\x66\x2d\xb7\x36\x2e\x98\xcd\x56\x8e\x4d\x9d\xeb\x4c\x1f\x48\x15\x4c\xa5\xcc\x33\x9d\x6f\x60\x1c\x55\x85\x75\xcb\x89\xdf\x7a\x32\xfb\x66\x47\xc1\x54\x9d\x38\x01\xd6\x84\x23\xfe\xa1\x30\x97\xdd\xa8\xc9\xd8\x2c\x3b\x00\xcb\xc8\x3f\x19\x4c\x38\xc1\x47\x46\x8e\x63\x48\xd3\x90\xb8\xb4\x45\xe3\xbb\x0e\xb0\xca\x5d\xdf\x7f\xc3\x01\x2d\x1f\xef\x3f\xf0\xac\xf2\x03\x49\xbf\x6b\xc0\x3f\xb4\xd0\x2c\x08\xdc\xf5\x6e\x8b\xb9\x1c\x64\x22\x6e\xf0\xdb\x95\x10\x4b\x8b\x17\x2c\x04\x8a\x22\x64\x0a\xec\x44\x82\x32\x98\xd4\xec\x23\x2e\x75\x89\x04\xe3\x1b\x76\x01\x32\x11\x59\x83\xcf\xcb\x9c\xa0\x20\x71\x05\x99\x85\xac\xe5\x35\x16\xec\xc2\xde\x8a\x75\x91\xa0\x54\x4d\x79\x65\xeb\xc8\xd2\x04\x0b\xc4\x54\x71\xa3\x23\x63\x5d\xd1\x55\x91\xeb\xb4\x50\xab\x4e\xdb\x08\xf8\xa1\x4f\x75\xfb\xdd\x61\x29\x4f\x32\x60\x6b\x61\x8f\xa6\x05\x1d\xa9\x3a\xf4\x15\xe3\x1e\x58\x11\x39\xa0\x41\xd0\x12\xce\x8a\xfc\x0d\x1b\x48\x5c\x1b\x80\xf8\xb1\xf5\xe9\xc6\x4a\x98\xea\x4f\xad\x4f\x37\xda\x52\x1e\xe7\xf7\x88\xa3\x2d\x30\x03\x75\xbb\x22\x69\x41\x0e\x4f\x0e\xfc\xf5\x4a\x70\x9e\xe4\xd7\xd0\x01\x8b\x1f\x13\x17\x9b\xa2\x97\x5b\xbc\x47\xc7\xd5\xe8\x4f\xdf\x38\x35\x35\x05\x12\x65\x21\x0c\x17\x45\xc6\x8f\x41\x66\x53\x27\x6a\xe7\x75\x7e\x4a\x44\xea\xa9\x54\x14\x1f\x30\xae\x0e\xda\x92\x4e\x4c\x4d\x4d\x65\xce\x3a\xff\x51\xee\x84\x23\x12\x23\x93\xc9\x43\xfa\xca\x77\x04\xef\xbf\xe4\x3c\xa4\x39\x8d\xf1\x87\x90\xdd\x89\xcc\xd5\x2c\x90\x5d\x41\x78\x8e\x64\xce\xd7\xd9\x87\x3a\x3f\x6f\x3f\x79\xe9\x32\x27\x2f\x15\x31\xc7\xce\x69\xe3\xd7\x9f\xc4\x3e\xe0\xb1\x6f\x29\xd8\x68\xcf\xb8\x49\x04\x0f\xed\x21\x38\x3f\xda\xaa\xd4\x02\x45\xc6\xc4\x4f\x6a\x0c\xbe\x0c\x4f\xbf\x2b\x61\x73\x6d\x23\x4c\x5b\xb8\xd2\xf2\x68\x25\x02\x8f\x39\xf4\x10\x99\xfe\x69\x34\xc1\x9c\xcf\x7e\xdd\x63\xe3\x6a\x6a\xf9\xef\xf6\x82\xb7\x78\xea\x2f\x9c\xaa\x7b\x48\xbc\xe2\xe7\xc2\x8b\x91\xd2\xb2\x63\x91\xac\xe6\x1d\xb3\xd0\xa9\xec\xe9\xb5\xdb\x30\x7d\x3a\x8e\x56\xd2\x10\x02\xc2\x8b\x51\xea\xa5\xa2\x17\x52\xca\x28\x41\xa3\x93\xfc\xeb\xf7\xd4\xb5\x1b\xae\x5b\xbb\xcd\x39\x7c\x6f\x16\x41\xea\xaf\xf5\x46\x40\x2d\x97\x96\x26\x85\xa9\xbf\x80\x22\xd2\xa3\x0c\x0d\x81\x97\x39\x60\xfd\x77\x3c\x93\x10\xf5\x01\x2f\xf8\x25\x8f\xb2\xa1\xa2\x8c\x6f\xec\x2a\x39\x2a\x2d\x27\x47\x91\x1f\x83\xe6\x91\x19\x26\x27\x24\xa6\xb0\x5f\x22\x12\x92\x3a\x5b\x25\x62\x43\xaf\x0c\xf0\x31\x22\x02\x8f\xde\x1d\x21\xf9\x63\xfa\xc4\x8d\x96\x35\xd9\xe9\xeb\x1f\xf3\xec\x00\xfc\x57\x7a\x7b\x8c\xc0\x9f\x33\x65\x99\xd8\xe9\x1d\x86\xe4\x53\xf3\x09\xd6\xa9\xd5\x60\x0f\x15\x19\x21\x3f\xee\x05\xaf\xf2\x28\x99\x03\x3a\x9a\xc2\x8f\x4a\x7d\xad\xcb\x70\xe7\xf9\xa3\xdc\x81\xef\xa9\xb1\x23\x66\x2c\xfd\xb7\x8d\x02\x06\xda\x2a\x41\xe4\xcb\x5e\x31\x19\x1c\xa7\x81\x49\x46\x33\x1d\x67\xf2\xd0\xd4\x31\x0a\xaa\xa6\xce\x52\x19\xcd\xd6\x44\x7b\xde\x8b\xdc\x3f\x3b\x4b\x44\x33\x16\x64\x94\x27\x42\xbe\x45\x44\xb7\x1c\x7e\xca\xba\xaf\x89\x90\xed\x7c\x38\x9d\xee\xb3\x22\x9a\x61\x3f\x53\xa7\x43\x35\x20\xa0\x84\xc2\x8e\xa6\xf1\x83\x00\x19\xa0\x28\x4a\x4f\x77\xf6\x7b\x5e\x91\x56\xf3\xb0\x77\x09\xdd\xf6\x3a\x8f\x5e\xd7\x53\x4d\xee\x3e\xcf\x86\x9f\x56\x1d\x41\x2e\x38\x77\x41\x5a\xbb\x29\x62\x5b\x82\x9c\x4c\x0b\x32\x6d\x70\xf3\x62\x05\x74\x9b\x3e\xe8\x55\xa5\xed\xfc\xbc\x17\xbc\xd9\x1b\xba\xac\x6b\x7d\x09\x19\x3d\x8f\xee\x8c\xfe\x25\x8f\x7c\x8b\x6f\xf7\x82\x37\x7a\x10\x75\x53\xca\x83\xb8\x1c\x09\x8f\x97\x41\xde\x39\xb5\x7e\x85\xc7\xae\x2e\xb6\x50\x04\xd0\xed\xeb\x43\xc6\x72\xe9\xce\x65\xdf\x73\x1d\x0d\xf2\x37\x00\x4f\x4e\x97\x7c\xd6\xc9\xef\xfb\x99\x3d\xa8\x10\x9d\x2d\x0a\xbd\xfc\x1a\xc4\x5b\x3c\xf6\xf8\xa2\x34\x42\xe7\xf8\xe1\xdd\x26\x24\x87\xe5\x22\x2e\x7f\x45\xf7\xbd\x67\x97\xee\x3d\xfb\x15\x8f\x7d\x83\x95\xe5\xa9\x65\x0f\xfa\x67\x2a\x6e\x54\xd1\x44\xed\x39\x07\xf4\x12\x57\xfb\x7e\xbc\xc2\x1e\xe3\x15\xfe\x6d\xba\x4e\x9f\xb3\xbd\xeb\xf4\x7a\xff\xda\x6d\x18\x9d\x2b\x93\x14\xdf\x54\x63\x37\x58\xe2\xce\xe6\x40\xd6\x61\xdf\x67\x62\xb9\x71\x0a\x23\x80\xfa\x51\xd6\x11\xe9\x39\x91\x77\x64\xcb\xff\x33\x2f\x38\xbd\xc5\xbd\x12\x0b\x55\x17\x2f\x82\x6d\x5d\x7d\x81\xb7\xec\x57\x1a\x9b\x1e\xec\xcb\xce\x91\xf5\xe5\x1e\xbb\x5f\xef\xd7\xf7\x05\xdd\x65\xf5\xc7\x72\x79\xbf\x1e\x2e\x4b\x7f\x0a\x6c\x3d\x06\x26\x08\x77\xed\x30\x15\x3c\xb8\x6d\x70\x57\x26\x52\xb4\x1e\x07\xb7\x0d\x00\x80\xb4\x17\x36\x45\xa0\xd4\x46\x52\xd1\xed\xf9\xf4\xb3\x63\xec\xd6\x6d\xfa\x47\x5b\xa6\xce\xaa\x81\x9d\xb5\x59\xad\x28\x67\xe7\x4f\x6b\xc1\xdd\xdb\x3d\xb4\x03\x3e\x8c\x80\x84\xef\x84\x36\x9b\x05\xae\x3b\xfa\x11\x8f\xfd\x93\x8b\x35\xff\x05\x2f\xb8\x71\xb9\xf8\x6d\xfa\x6f\xa8\xf0\xca\xa2\x8b\x70\xe1\x25\x76\x81\x2d\x6c\xb9\x45\xee\xae\x4f\x1c\xc0\xf9\x6f\x1b\xb6\xd7\x76\xc3\xde\xc4\x9a\x18\x64\xfe\x11\xff\xd0\x04\x27\xc0\x79\xbe\xa5\x65\xf7\xa0\x3f\xde\x0d\x7b\x8c\xbd\x8d\xb1\xe9\xca\x60\x00\xac\xcf\xec\xe2\xdc\x22\x5e\x9a\x0d\x7b\x61\x53\xd5\x2c\xca\x72\xff\x1f\x8e\x04\xa7\xab\x6f\x55\xa5\x85\x0e\x3f\x49\x42\x21\xab\x4e\xd8\xfc\xe9\xc3\xec\x0f\x3d\x9d\x70\xf8\x51\x2f\x98\x32\x19\x87\xb9\x85\xea\x37\xa2\x54\x7b\x0c\x6e\x65\xb7\x6c\x9d\x04\xb7\x83\xf6\xee\xa0\x13\x77\x34\x22\x6a\x97\x64\xfb\xfa\xc9\x1e\xf4\x93\xdf\xb6\xb7\xa8\x5f\xf7\xf6\x96\xda\xf8\x9f\xcc\xfe\x04\xf3\xc9\x44\x7a\x3d\x56\xc0\x3e\xfb\x0a\xcb\x5e\xb9\x9a\xe4\xf6\x7b\xfb\x59\xff\x8e\xed\x78\xbf\xab\xa5\x58\x25\x71\xd3\x5f\x5f\xc9\x9e\x66\x87\xc9\xb7\xba\x51\xa6\x1e\x29\xc7\x5f\xdc\x23\x56\x3a\x52\xae\xcd\xc2\x0a\x43\x19\xee\xbf\xf3\xca\xe0\xee\x8a\xeb\xae\x79\xc7\x01\x31\x90\xbc\x1b\xae\x09\x1e\x62\xc4\x0a\x02\xb5\x19\x9f\x2a\xb8\x87\xb0\x38\x47\x72\xfe\xd6\xe3\xd8\x03\x56\x38\xc9\x57\x3d\x76\xdb\xd6\x61\xfe\x5b\xd5\x7f\x28\x7e\xe4\xdd\xde\x32\x95\xb8\xbc\xd3\x08\x12\xaa\x5c\x83\x9f\x8e\xc0\x4d\x56\x14\x20\x53\xbe\xdc\x4f\xe3\x65\x13\x34\x5e\xc0\x04\x32\x46\x1e\x7a\x7a\x1b\xec\x7f\x16\xd7\x9a\xeb\x3d\x21\x97\xf0\xc0\x8d\xb7\x31\x1f\x6a\xb0\xaf\x1c\xc6\xcc\xb6\xbf\x3e\x1c\x7c\xe6\x30\x7e\xb3\x80\x82\x89\x09\x8c\x53\x1f\x5c\xe8\x93\x75\x8c\x26\x27\xd1\x70\xd7\x85\xb3\x18\x49\x7b\x6c\x19\x16\x8b\x38\x39\x39\xd9\x91\x59\x7e\x52\xe9\x47\x93\xbd\x30\xef\x2c\x1f\x07\xb8\xc4\x66\x0e\x0e\x12\xd0\x09\xf0\x4b\xd2\x6e\x73\x55\x53\x95\xa6\xb5\xac\x0a\x5b\x76\x3d\x2d\x6d\xf4\xc5\x15\xbc\x22\xba\x07\xdc\xd6\xdf\x64\xa2\x8b\x8a\xcf\x68\xe4\x4d\x0c\x32\x02\x5d\x0e\x10\x1e\xd1\x19\xb9\x22\x88\xac\x55\x2d\xdc\x28\x2c\xf2\x09\x4f\xcd\x2f\x42\xab\x65\xd7\x72\x15\x67\x48\x71\x5c\xc7\x83\x5a\x91\xeb\xb8\xac\x4f\x65\x54\x16\x8f\x92\x09\x8d\x0a\xaf\x0a\x0a\xc9\xc7\xba\x51\x20\xf5\xc4\xe1\x00\x43\x5a\xd6\x23\x19\x43\xa7\x1f\x6f\xe8\xa6\x2b\xc9\xa2\x31\x36\xc3\x84\xcf\x2d\xf0\xb0\xd5\x4a\x45\x96\x35\x18\x5b\x88\x21\xc3\x2c\x31\x1e\x57\xa4\x08\x5d\x86\xe0\x20\x7c\x5d\xf5\xf2\xf4\x89\xa7\x35\xa6\x1a\x53\x8d\xe9\x65\x0c\xf5\xa7\x92\xd5\xdc\x89\xb2\xb5\x01\xef\x27\x90\x96\xa0\xe6\x49\xae\x56\x14\x84\xc9\xf0\x26\xe0\x11\x6b\x1e\xd1\x62\xc6\x72\xcc\xbf\x44\xd7\x35\xf9\xe9\x81\x90\x37\xb1\xdc\xe8\x94\x9f\x03\xdd\x9a\x08\xf4\x64\xc0\x6a\x85\xa4\x55\x5c\x14\xf6\x22\x00\x5a\x68\x30\xe1\xa9\xdb\xea\xcb\x71\xb4\x26\xe2\x01\xb9\x1e\x13\x99\x4c\xa8\x19\x45\xa1\xcc\x0d\xd1\xa8\x23\x73\x56\x98\xc1\x23\x80\xd6\xda\xef\xa1\xe5\x54\x1d\x80\xb5\xff\x10\x67\x11\x4e\x4d\x33\xc9\x02\x10\xc1\xc1\x4d\x30\x39\xd4\x0c\xa6\x1b\x48\x2c\x92\x77\xe8\x81\x93\x93\x93\x41\x83\xb1\x19\xe4\xd3\x00\xe7\x0e\x5a\x4b\x29\x35\xa9\xcd\x69\x73\xd1\xc8\xc6\x61\x32\xd0\x6a\x4a\x4f\xa4\x20\x3b\x56\x20\xa6\x8d\x87\xea\x33\x0d\x88\x7c\x53\xcf\xea\x89\x09\x05\xe7\x12\xf2\x7e\xa1\xff\x4c\x38\xb9\x46\x67\x92\xee\xd2\x6b\xbb\x84\xb2\x7a\x5a\x15\xc0\xce\xaa\xbe\x79\x2e\xba\x3d\x8d\xdd\x0a\x04\x3a\x86\xde\x78\x25\xcc\xa2\x26\x20\x2f\xa3\x8d\x21\x50\x37\x4e\xaa\xcf\x6f\xc8\xb4\xf5\xcc\x00\x42\xd3\x64\xae\x73\xdc\x1a\xfc\x4c\x1a\xae\xa2\x69\xfb\x58\xf0\xe4\x46\xa3\x11\x1c\x87\xb6\xbf\xa8\x2f\xd2\x81\x8d\x97\x79\x2c\xb8\x95\xee\xa6\xc2\x2e\xa1\xce\x05\x88\x37\xe7\xe4\xf3\xb0\x1d\x17\xf2\xcb\x3a\x2e\xe4\x21\x6f\x59\x5f\x5c\xde\x43\x64\x88\xd5\x5f\x47\x4d\x98\xc5\xa3\x12\x16\xc2\x3e\x57\x63\xc1\x96\x39\x45\x66\x73\xf0\x7f\xa5\x16\xc4\xa5\x6b\x2e\xdf\x12\x85\xda\x9b\xbb\x60\xe8\xed\x40\xf0\x2b\x44\x8e\x96\x76\xbd\x54\xe4\x69\x24\xd6\x4d\xda\x82\x9a\x5f\xc9\x00\x59\x47\xd4\x81\xd3\xd9\xef\x7e\xcd\x63\x77\x13\xbc\xce\x7c\x30\xa3\xe1\x75\xfa\x49\xf4\xa2\xbe\xd0\x5b\x46\x58\xbc\x8b\xe5\xeb\x5a\x1a\xac\x54\xad\x5f\x94\x22\x7e\x8f\x98\xf7\xfc\xbb\x82\xdb\xcd\x89\xd7\xd1\xcd\xf0\x0a\x7d\xa9\x48\xec\xa2\x82\xc1\x32\xa6\xd7\x25\xd6\xca\xf9\xc6\x1f\x7b\xec\xa9\x5b\xf3\xce\xcc\xe0\x24\x3b\x13\x8b\x8b\x18\x82\xed\xbf\xdd\x0b\xce\x0e\x5d\x75\x7b\x1b\xfd\x93\x5c\xdd\xa6\x20\x6c\x10\x9d\x43\x99\x9d\x30\xdc\x9b\xde\xc1\x56\x1a\xad\x97\x58\xb2\x4f\xb3\x59\x46\xd7\xfd\xa7\x07\x75\xfc\xab\xca\xd8\x67\x7d\x04\x1f\x72\x1a\xf7\x47\x63\xec\xbb\x46\x9f\xb4\xe6\x65\x0b\x63\x96\xdf\x31\x16\xfc\x47\xeb\x37\x25\xa9\x0d\xa7\xfe\x0e\xe5\x68\x63\x8e\x4c\xac\xb4\x38\xaa\x42\xa6\xe5\xac\x66\xa3\x49\x64\x4b\x6c\x7a\x87\xe8\xae\xd3\xd0\xf7\xd6\xd8\xbb\x6b\x4c\xdf\xf2\xdf\x56\x0b\x7e\xd0\x33\xa5\xd8\xf0\x36\x76\x4d\xac\x2f\x9e\xa2\x67\x4d\x9e\x97\xf9\x20\x2c\x43\xf5\x58\x51\xa9\xe2\xec\x0a\xab\x2d\x31\xd5\x24\xcc\x05\x8c\x94\x6c\xaa\x4d\x18\xac\x9d\xce\x21\xf6\x24\xbb\x91\xdd\xb0\x9b\x43\xac\xea\x4a\xac\xde\x8e\xf8\xe9\xe0\x70\xba\x0b\x7e\xba\x0f\x33\x07\x3d\x6a\x4b\x0e\x82\xf5\x48\x6c\xf8\x9b\x2c\x78\xab\x67\x43\xb0\x87\x28\xc3\xb3\x61\x9c\x7c\x42\x24\x07\xfd\x67\x2d\x91\x1b\x09\xc8\x76\x8c\xba\x3a\xe9\xc0\xb8\x9b\x03\x2b\xed\x4e\x4d\x80\xd9\xd0\xf9\xec\x7a\x33\x27\xfe\xad\xe2\x1b\x32\xd5\x1c\x5b\x34\x22\xae\x76\xd3\xd8\xf4\xc6\xd5\x04\x73\xa6\xc9\xdf\x1f\x62\x77\x5a\x27\xcf\x5b\xf7\x68\x1b\x65\xff\x89\xc1\x37\xfc\x75\x76\x72\x17\x10\xfc\x56\xe3\xd5\x1a\x09\x6e\xdc\x76\xa5\x50\x17\x11\x0c\x98\x50\x87\x35\x75\x98\x07\x47\x3a\x06\x76\xf8\x3f\x3e\xc2\xbf\xbf\x4d\x1d\xa0\x80\xe0\xb9\x05\x86\x0e\x06\x56\x43\x42\xef\xc0\x1c\x0a\x04\x72\x7e\x15\xe4\x9f\x1b\x1d\x01\x07\x02\xbb\x82\x14\x24\x6c\x4f\x85\xd6\x3e\x77\xcc\x3e\x77\xcc\xd7\x12\xd3\xb0\xbd\xbd\x75\x61\xd6\x9f\x31\xd6\x85\xd2\x5a\x29\x19\x19\xac\x75\x53\xf6\x23\xfc\x15\xab\xa6\xbc\x6c\x86\xb1\x98\x3b\xbf\xa0\x1e\x85\xc0\x39\x87\x17\xe1\x3d\x2c\x38\x35\xf2\x89\x12\xe3\xa5\x79\x86\xd3\x5b\x94\xa0\xb5\xe9\x1d\x5a\x0d\x73\xb1\x11\x0e\x36\xbd\x83\xa8\x28\x6e\x7a\x05\x38\xbd\x23\x05\x3f\x78\x84\xfd\xa4\x67\x38\x08\x1e\xf4\x82\x07\x1e\x65\x0e\x82\xc6\x56\xec\x03\x94\x3f\x09\x81\xfb\xea\x8e\x3d\xe7\x4f\x31\xdd\x22\xa5\xba\x98\x13\x30\x1d\x2a\x0d\xdd\x30\xf5\xc2\xcc\xc2\x1c\x7f\x16\x3e\xde\x70\x21\xd4\x1e\xdf\x4b\x65\x8e\x16\x97\x53\xb2\x1b\x46\x89\x7f\x21\x38\xbd\x54\xd2\x7f\x74\x31\x0b\xe6\x59\x8e\x0f\x9b\x1c\x97\x02\xdb\xc2\xd8\x9f\xec\xef\x9c\x67\xd4\xeb\xfe\xe9\xe0\xc6\x72\xe9\xf4\x82\x56\xe0\x43\x1b\x29\x43\x49\x59\xfa\xba\x53\xe0\xf3\xd9\x15\xf4\xda\x82\x94\xb1\x7f\x36\xb8\x75\xc9\xaa\x27\x19\xba\xb8\xba\xc7\xc3\x2c\x93\xcd\xa8\xc0\x76\xc2\xe8\x6a\xd3\x90\x16\x34\xc4\x29\xfc\xa5\x1e\x63\x38\x6f\x80\x09\x2f\x0b\xda\x76\x95\x4d\xd2\x5f\x18\x03\x43\xad\xe1\x7f\xd5\x19\xb7\x54\x09\x3d\x19\xb4\x56\x3a\x54\x8d\x28\xd3\x25\x55\x68\xe5\x17\x2d\xfe\x87\x38\xf8\xee\x47\x97\xf3\xc1\x49\xd3\xfa\xa8\x43\xdb\xf0\xeb\x3b\x09\x50\x2a\x1d\x8b\x82\x57\x78\xe6\x4a\x71\x0c\xc9\x0a\x1b\x1a\x9c\x19\xd4\xd4\xd1\x7d\x05\x07\x5b\xc3\x52\xb4\x45\x9a\x22\xa6\xb5\x60\x4e\x9a\x12\xa5\x1a\xf8\xa0\xce\xcf\x4a\xa5\xe8\x14\x68\x5c\xd8\xfe\x30\x8a\x1b\x6c\x99\xb1\x2c\x8b\x4f\x23\x60\x8b\x7f\x21\x38\x75\x26\x0e\xe1\x44\x8d\x18\x2e\x93\x3a\x7d\x6f\x71\xf1\xac\x9d\x10\xa7\xed\x8f\xb4\x68\xea\x06\x62\x03\x3a\xdf\xe9\xaf\x1f\xf1\xcc\x5c\x3c\x27\x5b\xc2\xbf\xdf\x0b\xfa\x73\x95\x6a\x80\x9e\xe8\x48\x74\xa9\xc7\xde\x84\x8b\x2e\x75\xa2\xe6\xda\x82\x6a\x14\xed\xf1\x32\x55\xd7\x12\xeb\x92\x23\x13\xca\xf7\xec\xe9\xf3\xbf\x1f\x71\xce\x24\x86\x7a\x06\x16\xd6\xb9\xb0\x67\xd1\x0a\xbf\xe4\x48\xf0\xf9\xda\x4c\x2b\xec\x81\x08\x35\x4f\x20\x04\x84\xcd\x22\x4c\x7c\xc1\x68\x8b\x51\xbb\x10\x06\x8e\x3a\x28\x27\xe6\xf5\xa3\x99\x8d\x9b\xa1\x8f\xf9\x24\xab\x05\xd1\xe6\x94\xcb\xe6\x10\x1d\x19\x8b\x8c\x2c\x60\xa0\xb7\x8a\x41\x15\x12\x07\xc1\x31\x01\xf7\x29\x1c\x5f\xeb\xda\xfe\x05\x06\x66\xf0\xa3\x09\x8c\xe7\xab\xc0\x77\xd3\x67\x2b\xde\x0d\x7b\x3d\x00\x71\x95\x6d\xfc\x12\x98\x71\xf2\x8e\x93\x00\xa1\x27\x1d\xda\x67\x9a\x61\x6c\xd8\x74\xda\xd1\x6a\x37\xec\xb9\xcb\x18\xbe\xa0\x55\x53\x83\xc6\xa4\xce\x4a\xce\x36\xf3\xca\x83\xec\xfb\x3d\x3a\xd2\x7f\x4f\x20\x6d\x7c\x71\x5a\x32\x79\xa5\x4e\xe0\x86\x93\xb4\x64\x33\x53\x1a\x41\x53\xf4\xf2\x6c\x52\xae\x8b\x54\xed\xbd\x93\x1b\x32\x5d\x8b\x92\xd5\x09\x55\x95\x09\x72\x16\x4e\x42\x37\x4d\x3e\x39\x31\x34\xaa\x34\x57\x16\xd9\x61\x6d\x12\xf3\x9f\x15\x3c\x7d\x91\x72\x39\xec\x99\x5b\xcc\x0a\x99\x42\x4a\x1e\xf4\x95\x3e\xf0\xa3\x86\xea\x92\xbf\xbc\x7d\x5c\xfb\x35\x7f\x72\x3c\xf8\xb3\xb1\xb2\xb1\x46\x10\x10\xc4\x04\x2a\x67\xbd\x30\x4a\x2b\x06\xd9\xed\x8f\xa6\x68\x59\x15\x29\xa6\x94\x9e\x43\x06\xb3\xa4\x98\x4c\xb8\x2d\xf3\x8d\x8e\xcc\x84\xa1\x5f\xa5\x59\x45\xa9\xc0\x30\x8d\xf5\x65\xa8\x0d\x08\x1a\xab\xae\xfa\x3c\x2b\x5a\xd8\xec\x11\x5f\x2e\x08\x62\x61\x12\xa1\xca\xdc\x4f\x86\xde\x26\x4d\x90\x96\x03\x1e\xa2\xa1\x4e\x51\x66\x95\x81\x66\x16\x23\xed\xd0\x48\x49\xbd\x64\x3a\xa2\x6e\x37\x39\x13\x79\x9f\xba\x06\x73\xaf\x69\x4d\x44\x14\x71\x98\xae\x29\xb1\x42\x83\xdd\xe0\x0b\xaa\x92\x66\x18\x0d\xd5\xb0\xd6\xf3\xed\xcc\x71\xf5\x91\xa3\x8d\xc6\x51\x34\x76\xca\xd4\xce\xe7\x53\xd7\x9d\x53\x7c\x83\xd5\xd9\x35\xdb\xee\x1a\x77\x8a\xc1\x92\x54\x55\x60\x5f\xb8\xa2\xd2\x02\x37\xab\xe9\xaa\x28\x4c\xe2\x03\x57\x04\x77\x94\xae\x15\x7e\x25\x4c\xa8\xcf\x0a\x8d\xc4\x81\xb5\x37\x07\xa5\x82\x02\x8b\x90\xb0\x37\xbd\x03\xb0\x8d\x6f\x7a\x8f\x4b\x05\x34\x0a\x02\x25\x37\xbd\x03\x51\x37\x5c\x55\x9a\x23\xfc\x5b\x22\xaa\x7a\x0f\x63\x8b\xec\x0a\x53\xd8\xdc\x29\xff\x54\xf0\x34\x53\xb7\xa3\x19\x9f\x3b\x65\xa2\x3e\x61\x03\xe3\x47\x5b\xb2\xb9\x26\xd2\x93\x93\x93\x37\x9b\xd7\xee\x8d\x5a\xcf\x38\xea\xc8\xed\xa7\x33\xfd\x39\xbf\x11\xfc\x87\x39\xfc\xd3\x8e\x39\xd3\xe5\xc3\x53\xce\xab\xef\xac\xb1\x43\x50\x7f\xd1\xf2\x1f\xaa\x05\x0f\xd6\x16\x4d\x88\x8d\xbd\x94\x4d\x21\x60\x9a\xd4\x50\x95\x39\x25\x68\xf6\x7b\x90\xbb\xaa\xd6\x80\x1a\x39\x02\x59\x51\x62\x59\xed\x7b\x75\x32\xdc\x64\x80\x03\xc2\xc3\x76\x2e\x52\xfd\xde\x82\x7a\x8d\x60\xce\xb2\x08\x33\xaf\x0a\xd8\x4d\xa5\xa1\x64\xc2\xd6\x5f\x36\x34\x2d\x6b\x51\x21\x38\xc7\x52\x13\xea\x44\xbe\xad\xa9\xbe\x63\x99\x89\x8c\xe2\x51\x72\xd1\xed\xc9\x34\x4c\xa3\x78\xd0\xe0\x73\x19\x0f\xe3\x8d\x70\x40\x75\x82\x62\x13\x39\x54\x2b\x92\x51\xae\xaa\xf3\x1b\x35\xe6\x0c\xba\xff\x0e\x83\x54\xf7\x86\x5a\x35\x29\x4b\xb9\x03\x57\x04\x44\x50\x9b\x5a\xd3\xb4\x8b\x07\x6e\xde\x58\x51\x50\x4b\x84\xad\xa2\x0c\x72\x22\x41\x84\xb2\x5a\x6e\x03\x91\xeb\x22\xbb\x12\xb2\x03\x86\xb7\x21\x0b\x1a\x11\x8e\xa1\xa5\x12\x1b\xfc\x36\xd8\x7c\x94\xc8\xb3\xbe\x03\xf9\xad\x7d\x0a\xf0\x96\x7c\x35\x4c\x57\x94\x2e\x52\x04\xb0\x50\x44\x22\x0a\x64\x10\x21\xab\x00\x1c\xd3\xeb\x21\xae\xcb\xf5\x90\x11\x3b\xeb\x46\xfc\xc6\xec\x00\x8c\x89\xdf\x64\x93\xdb\x2e\x78\x67\xed\x8a\x60\xea\x14\x2d\xd9\xc2\x92\x63\xcf\x70\xbd\x80\x4d\x78\x52\x83\xdd\xc7\x70\x51\xfa\x2f\x0a\x5a\x6a\x78\xe0\x47\xc5\x24\x42\x47\xe2\xae\xb7\xcf\xa2\xb7\x26\xa1\x64\x67\x97\x1c\xb0\x23\x71\x98\x01\x94\xb2\xf0\xe3\xdd\xb7\xf6\xe9\xa3\x5b\x0b\xa8\xc0\xb9\x48\xbb\x51\x82\xea\xa7\xd5\xec\x94\xd4\x84\x17\x06\x2f\x80\x21\x32\xc4\xf2\xfc\xd4\xfc\xe2\xbd\x67\x67\x6e\x3b\x7d\x96\xa0\x95\xac\x6e\x20\x82\x72\x7c\x98\x32\xe8\xc8\x5f\xa0\x0a\xab\x32\x48\xd8\xcd\xbd\x9b\xa1\x58\xf4\xcf\x05\xb7\xee\x52\x90\x20\xa4\x97\xda\x76\x50\x94\x38\x4b\xee\x0b\x2e\x1c\xbf\x89\x9e\xee\x75\x44\x57\xa4\x61\xec\x1c\xff\x7f\xf5\x48\x70\x87\xcd\x8a\x98\x70\xa1\x9f\xe3\x25\xa3\xbf\x06\x54\xc0\x14\x72\x04\x46\xd0\xfa\xb6\x6d\xb3\xd7\x02\xfc\x73\x87\xd9\xa7\x0f\xb3\x6f\xc0\x52\x66\xe3\x30\xea\x2e\x89\x6e\x4f\xad\x2a\xff\xe1\xc3\xec\x19\xdb\x8e\x6e\xd9\x1c\xe1\x14\x11\xdc\x7f\xf8\x9e\x72\xd2\x3e\x1c\x12\xc1\x28\x15\x26\xad\x89\x30\x96\x89\xe0\x0b\x77\xcf\x12\x71\x3f\x2a\xf1\xd6\x56\x4e\x19\xaf\x12\x34\x65\xed\x6f\x89\x32\x5e\xd9\x51\x98\x95\xb2\x22\x20\xd9\x40\xab\x27\x90\x18\xb2\x91\x08\x03\x44\xb8\x70\xf7\xac\x85\x0d\xac\xbe\xad\x1f\x85\xcc\x0e\xa8\xe7\x2a\x8e\x6f\x71\x50\x06\xe8\xcc\xf2\x89\xdd\x7e\x77\xf9\x66\x55\x49\x75\xf7\x19\x13\x37\xd3\xa0\xc0\xaf\x65\x8e\xa9\xa0\xcb\xa5\xab\xb6\x7f\xc5\x98\xd1\x96\x17\x64\x4b\x4d\x33\xc2\xe4\xc9\x96\x39\xa8\x12\x5c\x24\x79\x3a\x68\xf0\x05\xd9\xd2\xae\x41\x73\xbe\xb3\xf8\x6b\xa1\x9b\xcc\x1e\xa9\x0e\x5e\x09\x88\x47\xad\xf1\xa9\x79\x6e\xf1\xab\x42\xfd\x8f\x39\x4e\xd8\x5c\x22\xdb\xc2\xf1\x06\x63\x90\x6c\x4f\x8e\x0e\x6c\xa9\x4e\xc8\xa4\xbc\x6f\x9c\x71\xaa\x50\xd5\xbf\xc6\xc0\xa3\x6a\x01\x35\xbb\x26\x91\xf9\x35\x66\xf0\xb5\x42\xa2\x6e\xab\x73\xc3\xba\x04\x82\x41\x02\x3b\xee\x27\x3a\x95\x86\x7a\x69\x65\xc0\xbb\x51\x96\x87\x6b\xa2\xc1\x17\xd5\xae\xa2\x0f\x42\xd0\xc8\x0c\x63\x41\x56\x62\xa5\x4c\x28\xd5\x32\x8f\x90\x09\xbe\x28\x47\x55\x19\x76\x52\xda\x40\x94\x32\x0b\x78\x04\x4a\x85\x9c\xd0\xc6\x0a\x7a\xaa\x2b\xc2\x24\xb7\x3c\x65\x56\x5b\xea\x66\xa8\x3b\x68\x19\xd6\xc8\x61\x9a\x87\x18\x27\xd7\x50\x88\x8c\xaa\xa7\x4c\xc8\xf4\xa0\x7e\x18\xce\x5a\x58\x95\x31\xa5\xb4\x5b\xb1\x20\x2b\x82\x27\x42\x29\x0a\x61\x3a\xc0\x6c\xca\x28\xb7\x68\x86\xdb\xfd\x18\xb7\xf5\x6e\x98\x20\xf8\x67\x2a\x94\x92\x91\xa7\x7d\x9d\x77\xbb\x92\x82\xff\xc3\x0e\x17\xb0\xd1\xbd\x95\x44\x42\x4c\x44\xa5\xda\x26\xd2\xa4\x68\xe9\x49\xdc\x0d\x5b\xd0\xf3\x77\x9a\xdd\x41\xb7\x46\xb5\x1f\xf5\x9c\x28\x2f\x36\x7c\xea\xc5\x06\x63\x3a\x26\xb8\x8e\x82\x56\x37\x27\x8a\x1b\xec\xf5\x47\xd8\x71\x47\x72\xc8\xb4\x45\xd2\xdd\x78\xb0\xce\x8a\x30\x13\x10\x69\xfa\x17\x87\x83\xef\x34\xbf\x5c\xaf\x1c\x5c\x1e\x1d\x49\xfa\xfe\x43\xec\xa3\x76\xd4\xe0\xfb\xf7\x18\x35\xf8\x7d\xd5\x51\x83\x8f\x1d\x1f\xe0\xbe\x53\x64\x8f\x4e\x91\x17\xe9\xf3\x77\x27\x08\x2a\x88\x4c\x74\x57\x55\x04\x12\x3f\x8d\x5d\xcf\xae\x1d\xb1\x01\x6e\x35\x8d\xf7\xfd\x30\x7b\xf1\xc3\xac\x6e\xef\x87\x39\xe5\xdf\x66\xfc\x30\xce\x30\x94\xbc\x30\x46\x8c\x54\x46\x77\xbe\xf5\x40\xe5\x61\x7b\xfe\xcc\xa2\xa3\x7b\xbd\xe4\x40\xf0\x12\xcf\x55\xbe\xe6\xcf\x2c\xa2\xdf\x03\xf7\x40\xa5\xb2\xea\x48\xf5\xb6\xc8\x23\x6d\x1e\x07\x9d\x41\x3d\xab\x19\xa2\x5b\x12\x21\x24\x47\x11\x45\xcb\xb4\x9a\x27\xfa\x20\x3a\x57\x37\xbd\xf1\x5e\x98\x77\x1c\x99\xf7\x99\x31\xf6\x12\x8f\xc1\x75\xff\x62\xb0\xb6\x10\xea\x6d\x5a\x69\x43\x17\x5d\xe7\x8b\xaa\x8e\xc6\xd6\xda\xe5\xa9\x80\xb4\xc8\x49\x6a\xcd\x93\x93\xb6\xb3\xce\x3e\x64\x33\x35\xbf\xc7\x0b\xde\xea\x8d\xb4\xc5\xab\x8a\x60\xe5\x68\xd7\x85\x0e\xd5\xbb\x6a\xb1\x51\xe9\xc8\x33\xc8\xd5\x1d\xb2\xfe\x5f\x9e\x46\xb8\x46\x6c\xea\x69\xff\x01\x2f\xb8\x0f\x57\x9b\x56\xd5\x3a\x32\xcb\x51\xfd\x4b\xad\xc0\x45\xad\x0c\x3e\x7a\x5d\xfb\x89\x1a\xfb\x8e\x8a\x99\x8a\xd3\xf4\x94\x80\xc8\xdf\xff\xa3\x16\xdc\xb1\x6e\x5d\xb0\x28\x17\x42\x6d\xdd\xc5\x69\x99\x86\x1b\xa8\x37\xf1\x16\x3e\x69\xc2\xa6\x2a\x6c\x42\x0c\x9f\x59\x28\xcf\xb9\x0f\x79\x2c\x66\xd6\x4d\xff\xbb\x83\x67\x17\xbf\x0c\x78\x0f\xfc\x6d\xf0\xc2\xdc\xd3\x92\x81\xbd\x31\xd5\xd0\x3a\x08\x9c\xb4\x73\xd9\x70\x8d\xb3\x78\xf6\xbb\x33\x78\x46\x11\x64\xd5\x0d\x73\x8a\xbf\x2a\x9c\x52\xbd\xaa\x03\x89\xb6\x41\xf5\xa4\xc3\x89\xf6\x3f\x0e\xd9\xb9\x30\x23\xf4\x01\xcd\xbf\x06\x1a\xca\x7b\x0f\x05\x17\xec\x0b\xee\x86\xa2\xef\xd4\x41\xc9\x8d\x63\xb9\x61\x40\x86\x10\x25\xb1\x09\x58\x43\x39\x01\x29\x85\x39\x9f\x84\x4f\x6d\x7a\x07\x41\xa4\x65\x65\x22\xf8\x7d\x0d\x60\x8f\x1a\x40\x9f\x51\xcf\xfa\x6b\xc1\xb7\xe3\x5f\xd5\x43\xb6\xf3\x34\xa2\x1d\x4c\x95\x7d\x2d\x60\x2f\x5a\xc0\xd2\xf6\x5a\xc0\xb4\x3f\x59\xc5\x30\x69\xaf\xcc\x72\xec\xc5\xdf\x5d\xcd\xb8\x25\x48\xf5\x62\x1c\x80\xe5\x85\xba\xcc\xff\xe8\xd5\xc1\x19\xfd\xa3\x32\xd4\x32\x96\xab\xe0\xfc\x0a\x56\xc2\xe6\x9a\x48\x5a\x41\x01\x99\x81\xa7\x30\x8a\xcf\x6f\x6c\x7a\x47\x68\x8f\x10\xee\xaa\xfe\xc2\x55\xec\xfd\x63\xcc\x2f\xb2\xe0\x97\x64\x4f\xc6\x72\x75\xe0\xbf\x75\x2c\x78\xe5\xd8\xf0\x75\x2b\x6d\x44\x5f\xb1\x43\xc0\x7a\x21\x02\x50\x81\x0c\x40\xfd\x06\xf0\xe3\xb9\x7b\xfc\x2b\xca\xb5\xe8\x15\xc1\xe1\x01\x47\xe4\xc2\x14\x6d\x95\x61\x1d\xa1\xf9\xb1\x44\xf2\x4c\xca\x44\x43\x4e\x16\xe3\x03\x6c\x8c\xd7\x1d\x6f\x70\x7e\x4f\x27\x8a\x85\x4d\x2a\x05\xc0\x13\x32\xd6\x22\xa0\x4e\x3e\x18\x35\xeb\x36\xd2\x28\x47\xf8\xd8\x4e\x0a\x91\xc1\xf8\x6d\xf5\xd9\x3a\xa1\x16\x0e\x9c\xd8\x41\xf0\xf2\xab\x3f\x34\x64\xe3\x8a\xe0\x59\x14\xa3\x9d\x39\x5a\x4d\x24\x70\x8a\x2c\x55\x75\x11\x85\x9c\xb5\x65\x3f\x31\x11\x0a\xf7\xc9\x44\xd0\x49\xb8\x05\x21\x0e\x9a\x66\x42\x67\x54\x8c\xc2\xdf\x7f\xad\xc7\x0e\x74\xa2\x24\xcf\xfc\x97\x7b\x23\x8e\x09\x95\x73\xec\x76\xf5\x5e\x30\x0f\xaf\x57\x63\xf5\x96\xa3\x24\x3a\x72\x03\xcc\x7e\x7a\x5e\xda\x14\x21\x80\xdf\xd5\x6a\xb0\xdf\xad\xb1\xc3\x5a\x45\xf1\x3f\x50\x0b\x7e\xa9\x56\x28\x2c\x1a\xb2\x83\xde\x77\x69\xb6\x8c\x85\x01\x21\xf1\x0c\x20\x98\x6c\x9b\x17\xf4\xe6\xa5\x13\x88\xad\x1b\x20\x74\xc0\x8f\x89\x41\x0b\x90\x46\xa2\xba\xf8\xd4\xfc\x22\xba\xa4\x8f\x37\xf8\x39\xe4\x2e\x12\xd6\x7b\x68\xcc\xd3\xb9\x03\x99\xaa\xa6\xa9\xaf\xdb\x3c\xf2\xa2\xb4\xfb\xc9\x2a\x64\x20\xe0\x17\xba\xba\xc8\x19\x8b\xa7\xe2\xd4\xfc\xe2\xf1\x22\x1a\x09\x00\xfd\x00\x6b\x54\x8d\x32\xa4\x25\xa8\x4a\x9d\x55\x6a\x35\x3f\x76\xe1\xcc\x2c\x9f\x9e\x3e\x71\xed\x71\xcb\xa4\x56\x8e\xd6\x3e\xac\xa7\x86\xff\x5f\xbd\xe0\x37\x3c\x33\x51\x4a\x49\xc8\xb6\x51\x70\x5e\xb6\xb0\x25\x05\xf3\xbe\xdb\xeb\x34\x15\xb5\x45\xb4\x25\xd0\xdc\x6d\xf7\x0d\x64\xbc\xa0\x77\x7d\x1e\xa2\x8b\x5d\x90\x04\x40\x48\x20\xee\x1d\x63\xa2\xd4\x93\x6b\x31\x8e\x9a\x62\xde\xcc\x68\x8b\xc1\xc7\x69\xdc\xeb\x3c\x76\x24\x37\x14\x39\xf7\x5f\x0a\xfe\xce\xbc\x79\xbf\x22\x4b\x2c\xb4\x8d\x48\x36\xa9\xbe\xd3\x75\x76\xef\xb0\x3b\xd8\xb8\x5a\x92\xfe\x6d\xc1\xf5\xb0\x34\x2b\x22\xd0\x9f\xa7\xae\x3b\xaf\x91\x59\x8d\x97\x62\x97\xfe\xa6\xc6\x0a\xe1\xeb\x7f\xae\x16\xfc\x64\xcd\xfc\xac\x5c\x0e\xe5\x50\x0e\xd3\xdf\x21\x6c\x80\xb9\x48\x7b\x29\x18\x87\xc3\x66\x53\x3a\x40\x5e\x4d\x99\x12\x0b\x95\xba\xe8\x0c\x83\x3e\x23\x2c\x0d\x7a\x24\x5c\x1a\x7c\xd6\xac\x2f\x72\x49\x40\x1a\x48\x2b\x6a\x63\xb0\x03\xe5\xe0\x2b\x15\xcd\xd4\x37\x2a\x3c\x84\xe2\xa2\x96\xf4\x51\xaa\x4e\x90\xbc\x19\xf6\x42\x00\x49\x89\x84\x66\xcf\xd3\xa4\x12\xe0\xb0\x76\x38\x94\xf4\x91\x65\xa5\x9f\xf3\x44\x22\x22\x12\x88\xf2\xe9\xa9\x29\x47\xfb\x71\xe5\xde\x36\x29\xd1\x99\xc8\x19\x7b\xbd\x9b\x51\xff\x72\x8f\xdd\xb8\x3b\xa1\x68\xf2\xdd\xb3\x60\xae\x28\x68\x0b\xf1\x58\xf8\x8e\x2a\xdc\xdb\xc2\x9a\x53\x5f\x7d\x3c\xfb\xce\xed\xbe\x0c\x43\xe5\xff\xde\xe3\x83\x3f\xf1\xdc\xd1\x73\x77\xff\xfe\x4a\x26\xf2\xf2\x17\xc8\x71\x69\x34\x00\x6b\xfb\x07\xd0\x68\x8d\x92\xa8\x93\xfb\x72\x38\x0c\x93\xc8\x35\x22\xcc\xfd\x2c\x19\xa3\xea\x3c\x13\xc8\xfe\xa4\xc4\x32\xd8\x02\x0c\xf2\xb0\x76\x7d\xbd\x50\x46\x09\x8a\x91\x5e\x2a\x5b\x7d\x3a\x5c\xb7\xfb\x71\xcc\xa9\xb2\xa6\xa2\x8d\x4d\xef\x0a\x6b\x3a\x6e\x7a\x47\xcc\x2d\x47\x39\xf9\xef\x57\xb2\xcf\x7a\xac\xb8\xe9\xff\x9e\x17\xbc\xb0\x68\xae\xa3\x39\x93\x23\xcd\xba\xab\xe1\xb3\x63\xe8\x01\x70\xc6\xc1\xdf\xa4\xaa\x36\xe3\x3e\x00\x34\x6b\xb2\x3c\xd9\x56\x53\x6f\xca\xaa\xa5\x3d\x0b\x4f\xb0\xa9\x11\xe8\x7f\x95\x63\xb9\x43\x70\xdb\x7d\xe5\xfc\xd2\xd3\xf2\x3b\x96\x7d\xfd\x3f\xee\x15\x37\x66\x14\xe3\x30\x7b\x68\x8c\x1d\xe8\xc9\x34\xcf\xfc\xcd\xb1\xe0\x1d\x35\xf8\xb3\x84\x98\xa2\x67\x62\x22\xf2\x0d\x99\xae\x71\x7c\x46\x5c\xec\x49\x52\x67\x40\x33\x31\x5d\x5e\x35\x3f\xc1\x08\xb5\xa5\x7b\xf8\x1e\xa5\x14\x63\xa9\xe0\x5d\xec\xe5\x03\xd4\x61\x2d\x36\x58\x34\x64\xa4\x82\xd2\x05\x75\x90\x05\xbe\x46\x45\x84\xf8\x9d\x22\x04\x43\xa3\xa8\x26\x51\x8c\xb7\xe8\x18\xed\x94\x1d\x84\x31\xde\xcd\x82\x1d\xaf\x26\xfa\xec\xce\x69\xb9\x2b\x17\xd2\x82\x4c\x77\xba\x98\xfe\xae\xc6\x6c\xc9\xa2\x76\xdb\x8f\xd7\xec\x9d\xcf\x1d\x32\x0d\x4a\xa3\x37\xa3\x66\x98\xa6\x91\x36\x51\x46\x99\x2b\x0c\x91\xa1\xab\xb4\x15\xea\x01\x34\x62\xd0\x68\x90\x9a\xce\xcc\x3e\xf6\x18\x12\x21\x72\x60\x69\x2c\x3f\xdc\xf5\x11\x74\x1d\x0e\x6e\x54\x9f\x02\x04\xa7\x08\x62\x31\x51\xec\x27\xf9\x35\x7c\x6e\x61\xfd\xba\x93\xdc\xb5\x09\xab\x6b\x7c\x86\x52\x99\xf1\x99\x1b\x2a\x9e\xb9\xc1\x7e\xe6\xcc\xb3\x4f\xcd\xbb\xcf\xf0\x33\x40\x22\xfc\xec\x7e\x18\x63\xe8\x1b\x85\x97\x2b\x55\x6e\x1f\xfe\xea\xb2\xa2\x49\x34\xb7\xb7\x30\x3c\xd3\x7f\x86\x26\xd9\x71\xe6\xe4\x56\x5c\x3b\xc5\x3a\xd2\xdc\xe5\xff\xd9\x75\x7d\x92\x90\x02\x9e\x45\xf2\x18\xcd\x25\xab\x6a\x3a\x80\x61\xf1\x0b\x87\x83\xa3\xd6\xef\x2a\x64\x1d\xba\xbd\xa5\xf3\xf3\x63\xb6\xf3\xf3\x43\x7b\x74\x7e\x7e\x5d\x60\x7a\xed\x4f\xf5\xbd\xda\x3f\x63\xed\x01\x6d\x06\xdf\x5e\x09\xac\xa4\x27\xd5\xce\x9d\x9f\x5b\x4f\xe4\x7d\xcd\xea\x31\x74\x7e\x5a\xc3\x50\x72\x7d\x5a\x62\xa4\xd2\xf9\xf9\xbf\x0e\xb3\xff\x50\x99\x50\xac\x73\x89\x41\x20\xfd\xd1\xe1\x60\xd2\xfa\xbd\x05\xd4\x17\x18\x3c\x46\x46\x65\xfc\xe2\x21\xd6\xd4\x93\xf0\x79\xc1\xbf\x8b\xb6\x40\xf7\x52\x05\xd9\x73\x70\x92\x4d\xb0\xa7\xee\x20\x09\x5a\xd7\x79\x7f\xee\xed\x83\x6d\xed\xef\x19\x97\x47\x3d\xba\x77\x7b\x49\x74\xb3\x7f\x72\xa2\x00\xd5\xd2\x42\x62\x2b\xe5\xa8\x04\xc7\xc5\x7e\xfa\x00\xbb\x73\xf7\x5c\x67\x04\x94\x61\xd8\xee\x8c\xd1\xc8\xff\xf8\x78\x30\x5f\x71\xdd\xf2\x83\xe7\x1d\x61\xa1\x44\x02\xe3\x8e\xa6\x30\x0b\x73\x75\x3e\x0b\xd3\x3c\x6a\xf6\xe3\x30\x45\x4e\x6f\x42\xdb\xdc\xf4\x28\x79\xde\xb5\x92\x8c\xb1\x1f\xf6\x98\x1f\x87\x59\xbe\x94\x86\x90\xa6\x27\x13\x80\xd0\x7f\xf1\xa5\xe3\x3b\x3f\xf3\x2c\x44\x3f\x6b\xda\x40\x63\x05\xe3\xb9\xf9\x84\x0e\x76\x97\x89\x21\x6b\xc8\xa5\xa6\x77\x02\x92\x33\xcd\xb2\x78\x2e\x78\xe6\xed\x2e\xdf\x03\xdd\xd1\xc7\xcb\x82\x7e\x51\x07\x63\x63\xf0\xb5\xf9\x96\x73\xe2\xf8\x6e\x03\xc6\xbf\x14\x3c\xeb\x2e\x38\x21\xd7\x55\x2d\x26\x36\x64\xda\xaa\x17\xf2\x8b\x13\x4c\xbf\x95\x11\x8b\x8d\x30\xc1\xdd\xd5\xe5\x3f\xcf\x60\x14\x2c\x04\xb3\x05\xc8\x40\x5e\x22\xa5\xb0\x0a\x04\x51\x0a\x09\x83\x40\xc6\x7a\x06\x33\x33\xee\x4a\x00\x47\xc2\x29\xfb\x69\x84\x8f\x3a\x19\x04\x4b\x95\x68\xe6\x76\xa9\xf6\x8b\x1f\x39\xe2\x24\x6b\x6f\xc1\x9c\x89\xe4\x94\x5d\x91\xe4\xb0\x6b\xfe\xe8\x91\x60\xa6\xea\x46\xd5\xf6\x59\x7e\x6e\xf4\x3e\xfa\x91\x43\xfb\x92\x6d\xaf\xda\xf0\xf7\x68\x45\x24\x0b\xbe\xab\x52\x1b\x2e\x0f\x49\x66\xab\x24\xcf\x60\x37\x8f\x00\xf1\xd8\x76\x7e\xec\x6b\x28\xfb\x1a\x0a\x21\x55\x27\xdb\x6f\xb0\x77\xfa\x73\x13\xf6\x66\x8a\x93\x6a\xcb\x2d\x55\xeb\xfe\x55\xb2\x87\xb1\xef\x1f\x77\xa0\xa7\xc2\x7e\xde\x91\x69\x74\x9f\x81\x7a\x99\x97\xc9\x05\x9a\x61\x17\xfa\xb1\xf0\xff\x60\x2c\x38\x5b\xba\x56\x01\x3e\x83\x74\xdb\x56\xa8\x59\xaa\x9e\xd3\xb2\x3f\x91\x6a\xf7\xc1\x02\x36\xbd\x03\xeb\x22\x5d\x71\x05\xda\xdf\xd6\xd8\x47\x3d\x76\x75\x52\x7c\xe7\xae\x0b\x67\x33\xff\xbd\x5e\xb0\xe9\xcd\xbb\x17\x69\x9d\xa0\x53\x03\xb6\xea\x30\xe6\xfd\x34\x26\xfb\x2b\x81\xc2\x39\xd4\x70\x90\x74\x07\x33\x9a\x5f\x83\x06\x3d\x03\xe3\xb6\xd2\xcf\x39\x06\xc2\x67\xc6\x63\x52\xe7\xed\x08\xc8\x43\x72\xd1\x33\x01\x63\x61\xde\x69\x70\x1e\x5c\x13\x10\x9f\x5c\x18\xc7\x23\x1c\x65\xec\xcd\x1e\xc3\x66\xfa\xaf\xf7\x82\x8b\x77\x8b\x74\xc5\x75\x98\x58\x21\x13\x76\xe7\x68\xd2\xcf\x95\xac\x4e\xb4\x67\xab\x22\xaf\xf3\x9e\xcc\xd4\x7f\xfb\x79\x9d\x52\x53\xea\x1c\x10\x9a\xea\xbc\x23\xc2\x56\x9d\x32\x58\xb3\xdd\x54\xf0\x95\xe3\xce\x8e\x56\x9e\x06\xa8\x5f\x7d\xad\xe6\xc2\xd7\x7d\xef\xfd\xdb\x9a\xac\xef\x18\xab\xcc\x41\x9b\xb9\xaf\x9f\x8a\x33\x51\x2c\x9c\x38\xe8\x97\x8e\x05\xf7\x98\x3b\x8e\x67\x34\xe1\x70\x9d\xc3\x0d\xad\x51\x63\x7c\x34\xa5\x72\x21\x24\x4b\xd2\xe2\x2b\x6a\xc3\xa3\xd0\x69\x93\x25\xd3\xd8\xf4\x18\x62\x61\xcc\x43\xcc\xe9\x91\xac\x13\xa6\x10\xbd\xe0\xcc\x8f\x97\xd4\xbe\x86\x60\x20\xdf\xcd\xac\x2a\x2a\x0d\xd5\x0e\x4c\x20\x20\x0f\x18\x5a\xe3\xae\xc6\x3e\xd1\x08\x2c\x33\x4d\xe0\xfd\x06\x43\x3e\xf4\xc4\x9d\x62\x60\x0f\xc5\x53\x58\xd1\x6a\xff\x89\x01\x5b\x54\x3f\xb8\xe9\x03\x7a\xea\xdd\x07\xd8\x75\x3b\xcd\xc1\x73\x06\xef\xab\xe3\xc1\x9b\x6b\xdb\x3e\xe6\x60\x94\x74\x20\x42\x25\x3d\x9a\x61\x8a\x54\x52\xf8\x58\x0c\x4a\xa2\xce\x94\xc5\x84\xad\xb6\xda\xaf\xe1\xa9\x15\x08\xb2\x5a\xb8\x1b\x75\x40\xe8\x4d\xec\x1c\xfd\x64\x91\x09\xd6\xe0\x33\x7c\xfb\x7a\x45\x59\x9d\x8b\x0c\x34\xa2\x30\x8e\x07\x75\x1e\xf2\x8d\x34\xec\xf5\x00\xc9\x12\x3e\xa6\xf9\x6d\xb5\x4a\x5f\xca\x8a\x34\xf9\x69\x99\xec\x0a\x75\x74\x12\x30\x5b\x72\xc3\xb1\x78\xbc\xb1\xe9\x1d\x69\xaa\x0f\x0f\xcd\xbb\xdf\xa8\xb1\x3f\xf5\x58\x71\xd3\xff\x7d\x2f\x78\xd8\x9b\xd5\x3f\xcb\x51\x2a\x61\x75\x7b\xaa\x7b\x50\xaf\xe8\x9e\x6c\x19\xa8\x0f\xd3\xa3\x97\x1c\x46\x5e\x84\x40\x4f\xe8\x88\xf2\xe2\x12\x5e\x81\xd6\x38\xda\xd5\x73\xad\xb5\x75\x2e\xb8\xf5\x9e\x5d\xae\x16\x03\xc8\x82\x71\xf9\xce\xe2\xf9\x97\xc7\xb9\x5e\x10\xd9\xb2\x54\xe4\x0b\xfd\x44\x1d\x78\x67\xe3\x30\xcb\x00\x1b\xf2\xa3\x8f\x0b\x7e\xae\x56\xbe\x4a\x02\x75\x08\x0a\x92\xdb\x0f\x02\xd0\xa8\x59\x80\x16\x9c\x2b\x0a\xdd\x54\x18\x72\x39\x8c\xbb\xc2\x9d\x0a\xdb\x67\x15\xa3\x45\x93\x49\x5c\xd6\x77\xf9\x9c\x3a\xe3\xb4\xd5\xb8\x1d\x9b\xbd\x30\x77\xbc\x88\xfa\x80\x0a\xd5\xd5\x68\x6e\x88\x38\x06\xc4\x8d\x64\x40\xf1\x70\x4d\xd9\xed\xc9\x44\x98\x45\xa0\xf1\x83\x81\x18\x13\xb2\x60\x21\xba\xcf\xc9\x9c\x5c\x01\x14\x68\x74\x50\x56\x75\x85\x71\x69\x36\x36\xbd\xab\x52\x7c\xe0\x76\xa4\x3f\x77\xe6\xee\xff\x3a\xc2\xde\x58\x63\x4c\x9d\xd8\x5a\xfd\x38\x4a\x56\xfd\x1f\xaa\xb1\xe9\xad\xcd\xfa\xce\xc8\x2c\x9a\xb7\x82\x4f\x7a\xc5\x0f\xda\xf9\x73\x02\x22\xa6\x8b\x98\x88\x18\xea\x50\x41\x91\x64\xfd\x94\xd6\x5f\x4f\xb6\x5c\x58\x6f\x9c\xe4\x4e\x97\x43\x56\x3e\x96\x86\xbd\xa3\xaa\x42\x1d\xa6\xf3\x65\x22\x04\x08\xb1\x3e\x5a\x30\xcf\x97\xcb\x43\xa0\xa9\x7e\xd7\xc0\x9f\x3a\x30\x64\x21\x40\x8f\xb4\x44\xd6\x60\xff\x58\x63\x87\xe5\xba\x48\x95\x4a\xe0\x7f\xa1\x36\x22\x9f\xdd\xed\x9c\xf3\xf4\x4e\xf0\xee\x9a\xfe\xb3\x1c\x14\x68\xd4\x13\x5d\xfe\x50\x54\xa7\xee\x14\xcc\x50\x6f\x5b\xe1\x42\xee\xb4\x3e\xa3\xd9\xeb\xc8\x5c\x53\xe7\x99\x10\x55\xe7\x13\x91\x74\xc2\xa4\x89\xec\x7d\x93\x6b\xa2\x97\xc1\xa1\x44\xd5\x7c\xf2\xc4\xd4\xf4\xd3\xa7\x4e\x9c\xb8\x61\xa2\x27\x5b\x13\xba\x46\x8d\x6e\xab\xe4\x2c\x87\xe6\x4d\xc4\xea\x40\xa3\xa6\xb1\x6c\xdb\x61\x7c\xeb\xd3\x8d\xe9\xeb\x09\x2e\x3a\x43\x95\xa4\x23\x21\xea\x16\x64\x2b\x9d\x3f\x91\x07\x2a\xa1\xc8\x5e\xc1\x17\x64\xcb\x74\x11\x85\x23\x36\xd8\xe7\xc7\x59\x69\xe2\xfa\x1f\x1f\x0f\x7e\x73\xfc\x82\x73\xad\x14\x39\x60\x71\xc9\xd2\xbb\x1a\xbc\xa6\xa0\x4d\x29\xf2\x4a\x66\x2f\xcc\x95\x56\x28\x2e\x2e\x08\x39\x35\x4c\xa4\x30\x3b\x0d\x2a\x0a\xf6\x37\xa6\x9c\x13\xde\x35\x05\x97\xc2\x0c\xd5\x70\x49\x24\x21\x54\xc7\xf2\xef\x82\x0f\x39\x75\x68\x70\xe2\xb6\x33\x73\x10\x04\x50\x1c\xd3\x47\x09\x86\x22\x5c\x0f\xa3\x18\xba\x49\x02\xb3\x6e\x3a\x80\x12\xb1\x83\xcd\x93\x1a\x1d\x4e\x6f\x1c\xf0\xaa\x92\x63\xeb\x61\x2c\x50\xc7\x2a\xde\xc5\xb9\x62\x61\x6a\x53\x31\x00\x54\x2e\x5a\x3c\x48\xfb\x49\x33\x28\xb1\x55\x9b\x1e\x53\x37\xf9\xf9\xd9\x39\xd3\xbb\xc7\x70\x53\x4a\x10\x0f\x07\xd3\xd2\x0a\x74\x88\xe3\x43\xb0\xd5\x08\xae\xee\xe0\x6d\x68\x00\x06\x47\x98\xe9\xe1\xed\x96\x03\x75\xeb\xd0\x91\x32\xed\xea\x2e\xae\x8c\xd7\x25\x31\x4e\x54\x96\x34\x1d\x0b\x99\x68\x6f\x6b\x6f\x3b\xc8\x9e\xbc\x03\x09\xe7\xbf\xe4\x60\xb0\x64\xc9\x38\x77\xde\x6d\x21\xe7\x80\x9e\x0c\xe4\x14\x49\x17\x5c\xcb\xce\xda\x75\xc4\xf1\x4f\x1c\x60\x7f\x59\x63\x8f\x53\xef\x2c\x42\x68\x9f\x4c\xfd\x4f\xd4\x82\x5f\xae\xd9\x57\xe0\xb4\x93\x51\xbc\x1f\x8e\x8d\xee\x26\x8d\x7d\x24\x93\x2a\xf9\x38\x24\x05\x01\x2f\x20\xb3\x15\x0b\x47\x46\x36\xc3\x04\xd7\xf0\x4a\x49\xf6\x22\xa4\x31\x66\x57\x59\x71\x39\x19\x55\x70\x78\x5b\xe2\x4e\xfd\x21\x9d\x3e\x5d\x2d\x22\x9c\x7a\xb2\x75\xd4\x02\x4d\xb6\x1f\x6e\xf0\x99\x04\x42\xce\xdb\x71\xd4\xcc\x29\x11\x1d\xe9\x44\x2d\xac\x00\xc8\x51\x30\x18\x53\xdc\x10\x59\x8c\x0c\xd0\x7f\x47\x8d\x5d\x91\xcb\x98\xb0\xf0\x32\xff\xcd\xb5\xe0\x57\x3c\xeb\x02\x2e\xc1\x5e\x0f\x39\xc1\x8f\x89\x8b\xcd\xb8\x0f\x11\xbc\xad\x3e\x50\x95\xe6\x22\x3b\x0e\x81\x95\x3b\xd8\xbe\x5a\x48\x5e\x68\x2a\x56\xe7\xa2\xdd\x16\x4d\xb5\x6a\xe2\x01\xef\x27\x91\x4c\xb4\x2d\x8f\x0e\x85\x34\x7e\x58\x1d\x17\x3b\x01\x99\x56\x45\x79\x1e\xed\xd4\x2f\xaa\x4f\x05\x4b\xa6\xa9\x3b\x0c\xe3\xfa\xd4\x61\xf6\x44\xab\x9c\x74\x25\x6c\xaa\x72\x2e\xc8\x58\xf8\xbf\x76\x38\xe8\xa8\x3f\x50\x0f\x33\xfa\x6b\xab\x6e\xb2\x61\xc0\x26\x45\x49\x86\x0b\x80\x6b\x7e\xa1\x1f\xeb\x29\x4a\x31\xeb\x16\x80\x19\x80\x92\xf5\x93\x28\x47\xa4\x12\x55\xf6\x6d\x11\x44\x50\xbb\x4b\xe6\xd3\x07\xf7\x4d\xde\xfb\xb8\xc0\xff\x7f\x08\x76\xcd\xd9\x81\x54\xad\x18\x7f\x2d\x98\xc0\xa5\x83\x8a\xb6\x52\x1b\x50\x8d\x2a\x16\x95\xa1\xdd\x51\xeb\x66\xe7\xa2\x41\x2f\xe9\xa2\xa8\xdd\xc6\xc1\xa9\xef\x6d\xe5\xe1\x85\xd2\x5d\x83\xa2\x76\xf6\x7e\x7a\x9c\xdd\xbc\xad\xd5\x71\x51\xc4\xed\x45\x44\xe6\x9a\x01\x6b\x58\x01\x7e\xee\xbf\x71\x3c\x78\x8b\x37\xe2\x01\x9c\xd0\x15\x84\xf6\x64\x57\xa3\xa9\xd6\xe0\x65\xf2\x1e\x6d\xb5\x9b\xb1\xab\x34\x93\xe3\x0c\x12\x48\x9f\x6c\x19\xf7\xb6\x7a\xcc\x10\xfe\x88\xdc\x11\x5f\x7f\x5e\x63\xbf\xe8\xb1\x6f\xb2\x6c\x86\xc5\x4b\xfe\x83\x1e\x3b\x35\x12\x8c\x7d\xa4\x65\xb6\x28\x28\x38\x57\x79\xd9\xb2\xc5\xda\x66\x5a\x3c\x66\x38\xf6\x53\xb7\x93\x54\x8d\xfd\x74\xb8\xba\x6f\xf0\xd8\xcc\x2e\xab\x5b\x51\xd7\xc5\xed\xba\x72\x54\xad\xb7\xaa\xf1\xbf\x8e\xb1\xeb\xdd\xca\xc8\xac\x19\xc6\x18\x9f\xd6\x98\x4d\x65\x96\xd1\x76\x51\xca\x61\xf2\x3f\x38\x16\xac\x8c\xb8\x5f\x98\x13\xaa\xc9\x4b\x62\x91\x03\xd1\x10\x51\xd6\x0c\xe8\xe0\xd7\x16\x69\x0a\x9c\xff\x84\x68\xbc\xe9\x81\x00\xa6\xb4\x7a\x67\x86\x7c\xa0\xc6\x6e\x70\xf6\xb7\x63\xc1\x93\xc8\x9e\x9d\x59\xf3\x58\x63\xa1\xda\xb2\xe9\x0d\x1e\xc9\xf5\xd7\x7a\xc1\x4b\x3d\x90\xeb\xa5\xa7\x6f\x7a\x0c\xa5\x66\xe0\xc6\x1c\x62\xba\x7e\x2b\xb8\xa7\x0a\xd1\x75\xa8\x5e\xd5\x96\xad\x7e\x26\xd2\x89\xd5\x7e\xd4\x12\x93\x05\x27\x50\x36\x8c\xdc\xfa\x55\x8f\xfd\xfb\x2a\x28\x0f\xd9\x12\x14\x6e\xed\x7f\xca\x0b\x6e\xb4\x7e\x57\xa7\x15\x15\xbe\x8a\x96\x38\x9a\x19\x66\x2a\x13\x08\x72\x88\xae\x38\x03\xf8\x7d\xec\x38\xd3\x37\xfc\x7f\x1f\x3c\x61\x49\x1f\x0c\xf5\xeb\x76\x4d\x2f\x50\x24\xc2\x1d\xc1\x2d\xf3\xd6\x33\x60\xb7\xac\x6b\x99\x74\x3b\xa5\x41\xd6\xf9\x69\xa2\xec\x9a\x5b\x00\xcc\x89\x44\xff\x2a\x03\x5e\x3e\x69\xf8\x88\x63\x2c\x14\xfe\xeb\x6a\xc1\x05\x73\x00\x47\xb4\xa8\x7e\x3a\x94\xc2\xb8\x4b\x6b\x85\xab\xa5\xfd\x82\xc7\xde\xee\xb1\xc3\x3d\xd9\x3a\x13\x5d\x14\x2d\xff\x4d\x5e\x30\xbf\x40\x3f\xca\x1f\x6a\xd3\xc5\xdd\x7d\xee\xed\xbb\x4c\xc8\x6f\x98\xb5\xf7\xec\x7e\x98\xe4\x51\x3e\xb0\xcf\x06\x5f\x3a\xc8\x16\x8b\x97\xc5\xc5\x5c\x24\x00\x31\x62\x11\x83\xd8\x41\x48\xc5\x03\x20\x4e\xfa\x59\x2e\xbb\x5a\x8c\x2d\xf6\x57\x8c\xd2\xe5\xff\xc8\xc1\xe0\xb9\x5b\xdf\x76\x89\x84\x30\xa8\x45\xed\x2f\x4a\x54\x01\x28\x65\xf1\xa4\x9a\x89\x6e\x41\xa5\xa3\xe4\xdb\x0e\xb0\x2f\x7a\xec\x00\xbc\xea\x7f\xd6\x63\x62\xab\x9e\xb9\x5c\x8d\x03\x88\xf2\x60\x1d\xeb\x6a\x27\xbf\x08\xde\x84\x77\x8a\x21\x25\x3d\x1a\xbe\xc5\x43\xbe\x3c\x09\x2f\x2d\xdb\x2d\xd4\xa9\xa0\x79\x3f\x4d\xc0\x85\xb4\x6c\xc9\xec\xc9\xf5\xe9\x65\x84\x44\xd7\x2a\x3a\xfb\x95\x31\x13\x1e\xf4\x8e\x31\xd6\x7e\xd4\x1b\x8b\x64\x27\x1f\xaa\xd1\x28\xed\xb6\xbd\xf0\x96\xd3\x60\xca\x02\xa2\xac\xdd\x93\x7c\xba\x61\xab\xbf\x95\xc5\xf6\xd2\xa8\x1b\xa6\x03\x2b\x79\x09\x32\xdc\x0d\x68\x1b\xbd\xb6\x6c\xbe\x96\x87\xc9\x7d\xa1\x16\xb5\xfa\x70\x73\x62\xfb\x0f\x55\x56\xb8\xe2\x6b\x61\x32\xc8\x3b\x70\xc4\x23\xf0\xcb\x30\xd9\x41\x0d\xd8\x83\xd7\xb1\x1b\x77\x40\x43\x89\x1a\xc3\xb9\x7e\x0e\x91\x69\xc4\x9d\xe9\x7f\xea\xda\xe0\xbb\x4b\xd7\x6c\x1f\xb3\x65\x0c\x30\x1c\x40\xfa\xfc\x5c\xac\x26\x40\xd4\xef\x99\x83\x7f\x94\xab\x73\x7f\x0c\xd6\x1d\x59\x60\xdd\x3c\xae\x69\x11\x75\x3a\x8b\xed\xf7\x4f\xb0\x77\x8e\xb3\x27\x9a\x4f\xa1\xde\x49\x1b\x76\xe6\xbf\x7e\x3c\xf8\xa7\xb1\x99\xea\x9b\xa0\x98\x26\x5c\xa6\x98\xc3\xae\x3d\xd9\x3d\xa3\x23\x2c\x97\x5e\x5c\xd6\x3b\x3f\xce\x35\xdd\x66\x71\xb1\x07\x71\x61\xe0\xeb\xd6\xac\x84\x91\x3a\x1a\xa4\x03\x4d\x8c\xd7\x8e\xd2\x2c\x37\x8a\x83\xcd\x40\x45\x08\xda\xc6\x56\x94\x81\x25\x3d\xa1\xfd\xc6\x3a\x39\xdb\xb0\xdb\x3a\xd5\x0a\x4a\x70\xec\xe7\x45\x1d\xea\x43\x70\x94\xed\x30\x8a\x8b\xf3\x89\x9e\x85\x73\x36\x34\x4f\xcb\x0c\x95\x6b\xb9\x2d\x8c\x6e\x9a\xba\xcc\xd4\x4a\x8d\x60\x4b\x0a\xc4\x8d\x30\x89\x6f\xc9\xa0\x78\x02\xd9\xa3\x68\x86\xab\x0a\x2e\x52\x05\x2d\x8a\xc6\x82\x27\xaa\xa8\x2a\xb8\xa5\x1d\x48\x60\xd8\xa4\xc2\x28\x56\x9b\x24\x31\xb4\x19\xef\x56\x2e\xf9\xf2\xf3\x8f\xd2\x64\x3d\xfa\x82\xe5\x91\xee\x75\x8f\x5d\x49\xe5\xe0\x81\xcb\x7f\xa3\x17\xbc\xc6\x3b\x63\x5f\x32\x5b\x42\x47\x6e\xb8\x06\x03\xc0\x2d\xb7\x0e\xd2\xc5\x3c\x37\xf2\x20\x4c\x85\xc1\x7b\x9d\x28\xfa\xac\xb0\x57\xcf\xe1\x12\x96\x29\x57\x1f\x75\xf1\xb3\xf0\x9e\xa3\x48\xfc\xa5\xc6\xe1\xff\x8c\x17\x7c\xcc\x2b\x83\x9d\x0e\x2d\xb4\x06\x7a\xb3\x0b\xac\x86\x36\x24\xaf\xbd\x48\x27\xaf\xd5\x39\x12\x8a\x02\x86\x30\x75\xa4\xa3\xe4\xd5\x09\x19\x35\xb0\x9e\x08\xaa\xb2\xfe\x0d\x61\xa4\x1a\x2c\xa7\x88\xaa\xa7\x65\xba\x1a\x26\xfa\x24\x52\x4d\x56\xff\xba\xc3\xea\x84\x13\x25\xeb\x44\x0a\x4b\xe3\xf3\x2f\x87\x82\xbf\x3a\x34\x7c\xbd\x92\xcd\xca\x62\x10\xb5\xd0\x2a\xd0\xca\x6e\xf2\xba\x11\x2d\x1b\x60\x81\x11\xa1\xc5\x80\xc8\x58\xc3\x89\x3c\x5d\x50\xd9\x99\xe1\x31\x0c\xe6\xc5\xba\xe1\xe1\x9f\x6b\xcf\x0b\xd1\x12\xad\xa0\xc1\x18\x5c\x3f\x39\x3c\xab\xc9\x8a\xa2\xab\x62\x52\xfc\x01\x8b\x14\xac\xf1\xa3\xaa\xc0\x98\xfe\x46\x45\xd1\x45\xb1\x65\x54\x81\x08\xa1\xf4\x31\x76\xd9\x6a\x6f\x69\xe6\x9a\xef\x68\x98\x5a\xb2\x28\x21\x63\x99\x7a\x30\x07\x1b\x6f\xc6\xbb\xb2\x85\x52\x68\x45\xfb\x51\x8b\x62\x90\xd0\x2d\xa3\x74\xce\x1c\x88\x94\x01\xa4\xbd\x90\x2b\x61\x1c\x37\xb4\xec\xd4\x66\x72\xe3\xed\x30\xdc\xa7\xfc\x1a\x75\x6e\x07\x88\xda\xa8\x25\xba\x3d\x99\x8b\x24\xaf\x73\xf4\x5c\x41\x4a\x3d\x9c\x32\x29\x26\x57\x7d\x69\xa0\x24\xf7\x7a\x24\xfb\x59\x3c\x30\xf5\xd5\x74\x75\xd7\xe0\x54\x34\x10\xe7\x56\xbf\x14\x53\xca\xd0\xb6\xac\xf6\xc3\x34\x4c\x72\x61\x5c\x94\xa2\xb0\x4c\x34\xf8\x35\xaa\x87\xb6\x28\x20\x15\x19\x50\x9f\x24\xbc\xdd\x4f\xa1\x6f\xb0\xb7\xf4\x7d\x92\x61\x58\xed\xba\xee\x94\xcc\x90\x99\x0e\x7d\x59\x15\xbe\xa6\x46\x75\x35\x8c\x12\xf5\xed\x0d\xa7\xe7\xd0\x1a\x5f\xf4\x1a\xa1\x17\xa4\x42\xef\x6a\xb9\xe4\xdd\x28\x89\xba\xd1\x7d\x62\x47\x5d\xa0\x3e\x61\x93\x9c\x1a\x5b\x2c\x0d\x69\x18\xc7\xbc\xdb\xcf\x2d\x3b\xbd\x55\xe5\xa6\xec\xf6\x30\x9a\x0b\xc9\x60\xf5\x06\x64\xdb\xdf\x0b\x42\x69\x42\xf2\x61\xcc\x96\x7d\xb4\xa6\x5c\xc0\x90\x71\x6d\x7f\xfb\xf3\xf1\xe0\x81\x71\xb4\xb3\x15\x9a\xc6\x86\xea\x08\x4b\x87\x50\xdf\x40\x15\x96\x94\x8c\x49\x47\x7f\xb7\x97\x4e\x33\x4c\x05\x45\xd8\xa3\xeb\xa4\xe2\x06\x74\x81\xe1\xed\x89\xda\x88\xfc\x9b\x37\x3b\x22\xe3\xf7\x86\xc9\xe0\x5e\xae\x2a\xd4\xe0\xb7\xcb\x0d\x01\xbb\x5a\x44\x3a\x05\xce\x53\xa1\xce\xe4\xfc\x6e\xd3\x13\x46\xa7\x30\x4b\x40\x89\x0f\xad\x47\x0d\xdf\x85\x5d\xa6\xd7\xcf\x8d\xf1\xd7\x50\xf1\x26\x08\xd5\x9d\x6b\xa2\xda\xa6\x31\xd3\xaa\xbd\x6a\x1d\x81\x79\xd4\xdb\x9a\xed\x45\x0f\x4f\x3c\xe0\xc8\x29\x64\x70\x9b\x61\xd5\xd6\xf7\x50\x4b\x98\xbf\x62\xbd\xf0\x66\x4a\x5b\xfd\x33\x5a\xae\x52\x3e\x8a\x8f\x68\x12\x76\x47\xd3\xb0\xbf\x53\xf9\x40\x15\x1e\xec\x39\x76\x27\x9b\xdb\x35\xbb\x3a\x19\xc2\xfa\xb1\xb8\x27\xca\x3b\xe7\xcd\x0c\x62\x6f\xac\xb1\xab\x94\xb8\x94\xfd\x7c\x51\x34\x65\xd2\xca\xfc\x57\x1a\xda\x85\x2f\x7b\x4b\xce\xad\x72\x0a\x3d\xde\xac\xa0\x5f\x9f\x31\x32\x51\x3f\x03\x88\xf4\x59\xbd\x34\x25\xe3\xd8\x88\x74\x02\xce\xe2\xb2\x40\x25\x2c\xee\x83\x8e\xe4\x50\x38\x94\x55\xa3\x25\xeb\x5b\xe8\x4a\xd0\xc6\xd0\x15\x91\x6f\x08\x91\xf0\x69\xe8\xef\x6b\xa7\x78\x86\x8d\x71\xd4\x29\xeb\xb2\xc3\xa8\xf0\x66\x8f\x39\x0a\xb9\xff\x43\x1e\xbb\xe3\x12\x7b\xbf\x82\x88\x3f\xb8\xd5\xa1\xe5\xb7\xd5\xb0\x5c\x5a\x0c\x58\xa2\x00\x58\xc2\x0e\xd6\xfa\x04\xfb\xb1\x43\xec\x0a\x58\xa2\xa4\x3c\x3c\x70\x28\xf8\x97\x83\xd6\x05\xb7\xcc\x8e\xe0\x01\x88\x97\x00\xf5\xe9\x28\x33\x4e\x73\x44\xb1\x8c\x92\xa6\xec\x42\x64\x03\xcd\xe3\x6a\x6d\x00\xcc\xd7\x81\x1a\xab\xe0\xb4\x89\x01\x50\xea\xc0\x04\x5a\xb6\x4f\x52\x71\xa1\x21\xdb\x04\x17\x2f\x4a\x14\xbd\xc3\x68\xc9\x12\x5a\xda\x7e\x0a\xf2\xc5\x89\x1e\x88\xda\xbc\x25\x7a\xb1\x1c\x20\x65\x36\x39\xf1\xcc\xce\xbc\x1e\x85\xea\x1c\x95\x4d\xae\x4f\xd7\xf5\x1f\xd0\xdf\xa8\xa7\x15\x47\xed\xe2\xfa\x4a\x3f\x37\xdd\x80\xf5\x42\x55\xbe\xc5\x97\xc3\x5e\x04\xb8\x7d\xd9\xc9\xe7\x07\xaa\xb0\xe0\x05\xaa\x50\x6d\x15\x55\x57\xd7\xa7\xd5\x35\x23\x63\x4f\xf2\xe7\x07\x56\xf5\x82\x17\x2c\xd7\xad\x56\xab\xe3\xaa\x55\x25\x0e\xed\x2a\x57\x88\x48\xeb\x49\xa0\x81\x6b\xdd\x3d\x27\x60\xbf\x9a\x7e\x1e\xee\xdc\xa8\xad\xfb\x23\xb3\xcd\xd3\x44\x74\x14\x25\xd0\xad\x59\x9d\x2b\x01\x8d\x1d\x46\x81\x8a\x6a\x95\x81\xdf\x44\xd5\x8c\x0e\x31\x8f\x7a\xf7\x83\x0e\xf9\x75\xd7\xfd\x88\xf2\xb6\x2e\xd2\x9c\xc2\x0f\xf0\x45\x34\x8d\x55\x8e\x89\xb3\x97\xe3\x8a\xb0\xb7\xf2\x4f\x1f\x61\x4f\x30\x2e\x6a\x13\x68\xf1\xe1\x23\xec\x99\x97\x92\x31\x12\xae\x88\x58\x17\x12\xdc\x7f\x64\xbe\x5c\x30\x6f\x89\x66\xd4\xb2\xcf\x06\x45\x1c\x8c\x96\xb7\xb0\xe5\x18\x65\x57\x4b\x53\x9b\x45\xa4\x08\x09\x45\x99\x1e\xea\x54\x30\xb3\x58\x31\x78\x40\x87\x4d\xcc\x39\xfa\x73\x94\x67\x22\x6e\x97\x9c\xf3\x28\xf2\xe1\x75\x0a\x96\xeb\x89\xb4\x2d\xd3\x2e\x7e\x9d\x8e\xe6\xc6\x01\x89\x01\x27\x43\x25\x67\x66\xca\x6a\x9d\x20\x6b\xca\x9e\x65\xc1\x05\xc4\x1a\xdc\x96\xb3\xb5\xa8\x97\x95\xc6\xea\x8c\x4b\x2f\x51\xdd\x35\x03\xa3\x63\x17\x14\x65\xd8\x1b\x9a\xc1\xbf\x64\x1c\x0e\xd2\x7e\x02\x41\x6a\x81\xd2\x32\x83\x29\x94\x88\xd3\xc1\x4d\x1c\xdc\x31\xb0\x75\x65\x22\x77\x3a\x0d\xe8\x9b\x00\xed\x25\x3b\xc9\x83\xa1\x09\x12\x9c\xe4\x2f\x66\x9c\x07\xd0\x61\xa7\x2f\xf6\x52\x81\xb0\xd3\xc1\x49\xfe\x7c\xc6\x39\x87\xbb\xea\xff\x82\x35\x31\x08\x4e\x5a\x55\xa8\xeb\x1b\xa8\xc1\x41\x51\xc1\xbc\xcc\xe7\x92\xe2\x16\xca\x70\x53\x16\x5c\x9b\x32\xb7\xb9\xaa\x3b\xfd\xfd\x02\xf8\xf7\x7b\x99\xfa\xeb\x7b\xd5\x71\x4c\x2b\xb1\xd8\x32\xe2\xa9\x80\xe5\xbb\xfb\xbe\xac\x22\x01\x0d\x44\xb2\x1e\xa5\x32\x51\xeb\x18\xbb\xb3\x97\xca\x16\xf6\x68\x96\x87\xab\x51\xb2\x1a\xdc\xf4\xd8\x75\xab\x5d\x9b\xca\x9e\xdd\xae\x5b\xa1\xf6\x56\xcf\xea\x36\x54\xf7\xef\xa2\x15\x49\x79\xe9\x9c\x82\xb8\x78\x26\x61\xf1\xc2\x91\x9b\xa6\x3c\x84\xef\xc1\x4d\xd3\x5f\x59\x21\xc0\xb4\x64\x03\x54\x29\xee\x48\x1a\x03\xf4\x46\xab\x1f\x42\xfc\xc0\xfa\xda\x60\x5f\x3c\xc0\xae\xc2\x0f\x17\x51\x64\x07\x2e\x83\x70\xfb\xe1\x03\xe7\x9d\x52\x77\x22\xd9\x8c\x30\x73\x0f\xf4\x9d\x30\x2b\x24\x8f\x96\x2c\x6e\x9d\x01\x4e\x4b\x73\x94\xe3\xd1\x53\xa9\x8d\x92\x66\xa5\x8c\x5b\xe7\xe9\x4c\x98\xb4\x78\x22\x36\xce\x5b\x18\x92\x66\xe3\xa8\xd8\x1f\x4c\x40\xa0\x05\x1d\x5a\x68\x59\x6d\x2e\x22\x68\xcb\x48\xe9\x3a\xc3\x93\x7e\x1c\xeb\x67\x8e\x15\x75\xd1\x48\x8c\x40\x44\xd2\x26\xfe\x13\xe0\x68\x2b\x6a\x58\x7a\x06\x73\x8f\x8e\xab\x67\x8a\x3d\x40\x47\x45\x29\xd9\x06\xf9\x3f\x14\xee\x77\x2c\x8e\xd6\x80\xd0\xca\xec\xac\x17\x64\x1c\xaf\x84\xcd\x35\x8e\x8c\x3d\xb2\xb5\x90\xca\x8b\x83\xf3\x3d\x3a\x86\x42\x71\xc7\xb5\x98\xac\x68\x72\x83\xdf\x45\xc1\x74\xf4\x69\xb3\x6e\xb5\x62\x68\x0f\x27\x1e\xf2\x27\xd4\x39\x6d\x45\x60\x1c\x9e\x48\x5a\x90\x09\x82\x31\x3e\x4a\xc4\x57\x9b\x03\x31\x04\xb8\x38\x42\xea\x51\xdf\xdb\x5c\xff\xd4\x18\xbb\x42\x35\xe9\x34\xc4\xd3\x65\xfe\x47\xc6\x82\xf7\x8d\x2d\x16\x17\xf0\x70\xba\x85\x61\x4e\xcd\x42\x00\x9f\xc7\x68\x3c\xa5\x52\x37\xd5\x6a\x0e\xdd\xb8\xde\x93\x3a\x69\xbc\xce\xe7\x65\x22\xea\x7c\x51\x76\x05\xfe\x7d\x3e\x39\x95\x0e\x2e\xf4\x93\xc2\x96\x84\xbc\xa9\x56\xa1\xfc\xdc\x5d\x8b\x4b\x0e\x00\x24\xd0\xf2\x34\xa3\x38\x22\xb3\x36\x64\x98\xd4\x79\x16\x25\x4d\x61\xe9\x48\xc6\x8c\xf2\x42\x03\xf2\x18\xf2\x76\x1f\x9c\xb3\x76\x5a\x57\xd1\xd3\xcd\x0e\x20\x7a\x92\x7f\xc3\xa9\x04\xe0\xcf\xb5\x25\x9c\x90\x8d\x5d\xa7\x9f\xb4\xc0\x98\x74\x41\x1f\x8d\x8d\xcc\x6f\x61\xab\x42\x1d\x76\x61\x0e\x83\x61\x3f\x97\x13\x45\xb0\x65\x1b\x8d\x5e\x5a\xed\x2d\xac\x81\xd4\x09\x7a\x14\x6e\xb9\x45\xf7\x21\x30\x58\xc8\xae\x70\xad\xcd\x55\x59\xf9\xaf\xbd\x85\xfd\xbb\x51\x7c\x71\xfe\xdf\xdc\x1c\xcc\xcc\x18\x6b\x65\x0f\xa3\x32\x89\x13\xce\x26\x11\xb0\xf7\x45\x25\x9f\x0c\xa1\x01\x26\x97\x0d\xc7\x5c\x3c\x78\x33\xfb\xec\x38\x1b\x0f\xd3\xd5\xcc\xff\xc4\x78\xf0\x2b\xe3\x33\xe9\x6a\xbf\xab\x31\xfa\x31\x6c\x2d\x4f\x07\x16\x36\x2c\x92\x56\xa2\x29\xfb\x68\xc6\x67\xcf\x9d\x32\x27\xb8\xa8\x9a\x8d\xb9\xc1\xef\x0e\xd3\x08\x66\x9a\x95\x56\xf5\x94\x63\x77\xcf\x5c\xb8\x77\x7e\xe6\xdc\xe9\xe3\x18\xc7\x7d\xb1\x17\x42\xfc\x69\x41\xf4\x6b\xb3\xe1\x59\x7b\x21\xf9\x50\xd6\x75\xa1\xb6\x21\x26\x93\xf1\xba\x66\x68\x2d\x40\x78\x69\xfa\x44\x49\xaf\x9f\xeb\x58\x3f\x13\xb0\x9d\xa0\x5f\x8f\xc2\xb2\xed\x6a\x65\x83\x24\x0f\x2f\x1a\x98\xe1\xac\x19\xf6\x8a\x50\xde\x96\xec\xab\x8f\x3f\xe5\x29\x75\x1e\x89\x93\xfc\x29\xd6\x8b\x0d\x7e\x9a\x9e\xb5\xda\x8b\x16\x69\x50\x0e\x57\x8a\xd6\xaa\x63\xc4\x6a\x98\xb6\x62\xa2\xcf\xb0\x15\x61\xd3\x40\xc2\xf5\x85\x18\xeb\xbc\x32\x3e\x70\x67\xe9\x51\x79\x98\xad\x65\x93\x51\xa2\x86\x7e\x42\x69\xba\x13\xd6\x54\xc2\x2d\x53\x4c\xa8\x03\x3f\xf0\xd1\xd1\x44\x98\x30\xa3\x30\xf9\x64\x0a\x44\x98\x08\xcd\x53\x51\x32\x11\x4e\x64\x1d\x11\xc7\x23\xdc\x3f\xf7\xd7\xd8\x95\x71\xb4\x2e\x12\x91\x65\x40\xbf\xe9\xff\x9d\xc7\xbe\x6b\x7b\x42\x3d\xf5\x68\xf0\xb0\xb7\x20\xd2\x48\xb6\xa2\x26\x92\x07\xc2\x66\x63\x66\xbd\x2e\xb6\x61\xe5\x28\x15\x60\xee\xc4\xc1\xa9\x45\x3b\xbe\xdf\x0e\x23\x25\x8c\x2f\xb9\x17\x8d\x1e\xa4\xd4\x9f\x58\x86\xad\x6c\xb2\x27\xf1\x3f\x13\x71\xd4\x16\xcd\x41\x33\x16\x4f\x36\x55\x9c\x80\xaf\x66\xec\x41\xed\x52\x7a\xb5\x17\x7c\x9f\x1d\x09\x54\x34\xa6\x30\x41\x40\x4c\xf0\xa5\x53\x39\xf2\x63\xe6\xdd\xe3\xdb\xd1\x3a\xbe\xd4\x63\x63\x79\x3e\xf0\xef\x0b\xe2\x7b\xec\x9d\xc3\xaa\x16\x3a\x75\xc2\x38\x96\x4d\x64\x2c\x5c\x5a\x7a\x2e\xe8\x77\x78\xd8\xaa\xf3\x30\xce\xa4\x4e\x45\xc8\xf8\xd1\x2c\x6f\x45\xc9\x51\x92\xbc\x79\xda\x17\x0e\x49\x79\x45\x5a\xdc\x7f\xf1\x18\x23\x65\xf2\x54\x94\xfa\xef\xf2\x82\x9f\xf1\x6c\xea\x5c\xba\xc7\x5b\x51\x0a\xdb\xe4\x80\x9c\xb6\x79\x99\x94\xb9\xa8\x34\xe5\x6d\x1c\xcd\x0c\xe1\xb6\x9d\xa1\x61\xf6\x59\xc8\xfe\xc0\x63\x37\xd8\x3c\x45\xcb\x86\x98\xa6\xde\x06\x62\xdd\x6d\xba\xf1\xab\xe3\xec\x10\x2d\x0a\xff\x6f\xc7\x83\x8f\x8f\x9f\x36\x72\x13\x89\x0b\xc1\x35\xc2\xc5\x45\xd1\xec\xeb\x33\x07\x9a\x94\xd5\xe2\xa9\x14\xad\xa7\xe7\x97\x2e\x3c\x77\xe1\xfc\xdc\xfc\xd2\xbe\x84\xdd\x97\xb0\x23\x25\xec\x0f\xd5\x34\x0f\xee\xcb\x6a\xc1\x3f\x7a\xa7\xac\x89\x44\xe0\xbd\x7b\x25\xbe\x2d\x25\xc7\x69\xc6\xf0\x82\xda\xa7\x13\xad\xaa\x6e\xc5\x7c\x39\x5c\x4e\x36\x9b\x17\xa4\x99\xe2\x42\x54\x0a\xf7\xba\x48\x53\xa5\xb4\x95\x56\x19\x24\x49\x69\xb9\x0a\x37\x53\x19\x43\xee\x17\x9c\x06\x4e\x59\x46\x40\xa5\xfb\x01\x8f\x6e\xbb\x1f\x2f\x8a\xdc\x0d\x2e\x7c\x9b\xc7\x8e\x18\x59\xec\x6f\x7a\x3b\xe0\x1e\x3f\xab\x1f\x0f\xe2\x99\x26\x79\x0f\x75\x36\x98\xd5\x0e\x54\x61\xb5\x4c\xcc\xc3\x35\x98\xfb\x88\x7a\x8f\xd9\x74\xf6\xe6\x44\x45\x82\xd1\x33\xaf\xdc\x74\xd8\x4f\xd5\xd8\x55\x86\x1f\x17\x77\xc7\xd7\xd4\x76\xbc\x3b\xfe\xf7\x91\xbb\xa3\x86\x5a\x37\xe5\x57\x6f\x93\xc8\x69\x02\xbe\x2b\xfd\x86\x85\x63\xfe\x75\xb0\x77\xfe\xc1\x38\x7b\x9c\x4d\xdf\xed\x7f\x68\x7c\xc7\x3d\xf4\x86\xf1\x45\x87\xf8\x7b\x08\xac\x1a\xa8\x64\xe1\x7c\x64\xb8\xc9\xc1\x1e\x6c\xc8\xce\xcb\xec\xff\x89\x24\x3f\x3c\xd6\x8e\x64\x2b\xc9\x75\xcd\xbf\x0a\x3b\x28\xfa\xff\xdc\x92\xc9\xac\x18\x65\x76\x97\xd6\x4d\x45\x86\x94\x97\x3a\x7f\xa1\xda\xe4\x43\x33\x12\x8e\x26\x05\xaf\xa3\x64\x1d\xe6\xd3\xa0\xed\xc1\x62\x54\xc0\x4f\x5a\xf9\xe0\xd4\x05\x2b\x62\x35\xc2\x18\x53\xcc\xdb\x87\x34\x35\x33\x20\x75\xe4\xc3\x89\x72\xda\x2f\x61\xd6\x87\xc0\x8e\x4b\x10\x6d\x92\xc3\x82\x05\xdc\x20\x99\xf2\x8d\x30\xed\xf2\x90\x37\xc3\x66\x07\x6c\xaf\x61\xa2\xf3\xc2\xc0\x7c\x37\x98\x20\xf0\x39\xed\x02\x2c\xaa\xff\x98\x4e\xab\xbf\x18\x63\xdf\x62\x11\x6c\x9f\x43\x50\x38\x72\x62\xfd\xd6\x58\xf0\xab\x63\x73\x34\x5b\x8c\xe7\xca\xe6\xe3\xd6\x20\x72\x45\xd0\x4b\x4f\xf6\x90\x86\xbd\x81\x10\x20\x45\x92\x6d\x99\x54\x63\xf8\xab\xc0\x55\x28\x4d\x11\x65\xd5\x10\xa3\x2f\xf5\x27\x65\x82\xe6\x21\x9a\x58\x20\x0c\xc9\x1b\xd9\xe0\x67\x42\xb4\x93\x2c\xc9\xb3\x72\x35\x3b\x9f\x9c\x4e\x53\x99\xba\x75\x01\xf8\xb9\x66\xa7\x9f\xac\x95\xd4\x69\xb9\xca\x65\x3f\x57\x9b\x38\xcd\xb6\xaa\x06\xb7\xa3\x58\x18\x08\x78\x73\x08\x2f\x4a\x11\x17\x23\x9b\x15\x18\xe2\xb7\x70\xef\xb7\xcb\x57\x13\xac\x1b\x91\xa7\xe3\xc4\xd4\x75\x37\xf2\x95\x01\x30\xa4\xa4\xfc\xc6\x29\x1e\x2b\x79\x45\x6a\x9a\x20\xe6\xc1\xac\x1b\xaa\xcd\xc0\x3d\x4f\xab\x8e\xde\x4e\x39\xfb\xb2\xc7\xae\xb4\x29\x01\x33\xff\x4f\xbd\xe0\x59\xce\x95\x32\xf6\x99\xcd\x0b\x98\x55\xd0\x21\x17\x0c\x81\xf6\xb6\x3c\xcd\x26\xd9\xc4\xb6\x82\xc9\xa6\x2b\x7c\xc4\x9b\x60\xff\xce\x49\x3b\x02\x64\x9e\x09\xc8\x1b\x9d\x58\x13\x03\xff\x4a\xff\x8a\x82\x4f\x90\x3d\xe2\x1d\x65\x4f\xaa\x78\x1e\x3c\xbd\x62\x75\xe0\x1f\xf6\x0f\xc2\xbb\x8c\xfd\xbd\xc7\x1e\xb7\x6e\x21\x53\xf8\x9f\xf3\x82\xdb\x81\x37\x9b\x58\x38\x73\x49\x08\x34\x51\x62\x08\x5c\x0a\x7d\x50\x8d\x32\xee\x76\xd5\xdd\x5b\xb4\x7a\x8a\x35\x58\x7d\x87\xad\x86\xaa\x3c\xe2\xd5\xb7\x69\xf4\xe3\x7c\x06\x55\xdb\x6d\x9b\x3f\xeb\xb1\x31\x91\xac\xfb\x9f\xf4\x82\xb9\xb3\x34\x94\x96\x62\x6b\x34\x3e\x68\x7c\x26\xf2\x21\x6d\x7f\xbb\xb6\x3e\x95\x1d\x67\x47\xb7\x6d\xeb\xe9\x64\xfd\xee\x30\xdd\x79\xbd\xd5\x93\xa3\x3b\xe4\x90\x7f\x40\x29\x72\x8c\x7d\x62\x8c\x1d\x12\xc9\xfa\x99\x54\x76\xfd\xdf\x1e\x0b\x5e\x31\xa6\x9b\x69\x02\x6e\x2c\x21\x52\xdd\xf4\xe1\x36\xab\xb5\xb9\x26\x06\x2e\x23\x03\x1e\x4f\xd0\x8d\xab\x03\x19\x42\x3e\x7b\xef\xdc\xa9\xd3\xf3\x4b\x73\x67\xe6\x4e\x5f\x40\x4a\x82\x28\x41\x26\x75\x28\xa0\xd8\xbf\x28\x48\x36\x44\x96\x7e\x08\xcb\x31\xb4\x6a\x96\xda\x07\x76\x4b\x48\x18\x37\xf4\x10\x6b\x62\x50\x70\x19\x15\x21\x84\xd4\xc0\x3a\xa9\xee\x71\x5f\x54\x3a\x71\x40\xb6\x51\xb5\x31\x2e\x58\x6d\x57\xbd\x54\x34\x45\x4b\x1d\x14\xd4\x61\x09\xec\x9d\xba\xad\x2b\x4a\x86\xf1\xd3\xc9\xba\x39\x78\xe8\xb4\x67\xa8\x49\x75\x19\xa3\x67\xc9\x68\xba\x16\x6b\x96\xa8\x61\x44\x68\x1f\xf6\xfa\x03\x9a\xe2\xe3\x07\x0f\x04\x3f\x68\x86\x15\x09\x37\x72\x49\x4c\x1e\x45\x18\xac\x35\x7c\xa7\xd5\x2d\x9d\x21\x92\xe6\x88\xf2\xb4\x1a\xad\x6b\x6b\x3e\xea\xac\x4e\x04\x5a\x15\x83\x90\x66\x0e\x69\xca\x24\x11\xa4\x03\x5b\x5c\xa8\x4a\xfe\x65\xc4\xc6\x9e\x51\x4c\x7e\x14\x3b\xe4\x72\x61\x8c\xc7\x5c\x8a\x30\x2c\x57\xe9\xd4\xf9\xd3\x8b\x7c\xfe\xfc\x92\x89\xd3\x22\x54\x94\x34\xc7\x66\x61\xf0\x23\x51\x96\x60\x42\x3c\xdc\xa4\xa0\x6d\x0c\xc0\x16\xa8\xa7\xe0\x44\xd2\x67\x8a\x60\xaa\x01\xff\x1f\x98\x3c\x22\x22\x5b\xb5\xeb\x6f\x2c\xbb\xb0\x69\x02\xa4\x85\xe9\x4d\x6a\xfb\xe5\x19\x58\xa3\x64\x23\x75\xc8\x4d\xec\xdb\x86\x73\xce\xbb\x61\x4f\x2d\xec\xcc\xff\x76\xff\x49\x13\x45\x25\xd5\x1b\x6c\x42\x29\x6a\xb9\x6c\xca\x98\x6d\x43\x38\xd5\x0d\x7b\xec\x11\x6f\x6a\x1b\xe1\xf1\x78\xff\x2a\xf7\x03\xbb\x90\xa8\x7f\xe6\xb1\x23\x45\x5a\xcf\x1f\x78\xec\xfa\x6d\x9b\x6f\xd0\xf1\x2c\x70\x8a\x60\xd3\x9b\x95\xdd\x5e\x3f\x17\x26\xd1\x34\x2b\x40\x88\x34\xb0\xc2\x48\x31\x7c\x09\x67\xd8\x22\x8e\x6d\x12\xcf\x70\x26\xd3\x33\x9b\xb0\x8e\xb8\xec\x75\x35\x76\x75\x26\x9a\xfd\x34\xca\x07\xb3\xc8\x2d\xe6\xff\xeb\x4e\x88\xe0\x16\xdd\x97\x82\x0f\x7b\xfa\x8a\x06\xd5\x33\x60\x06\xa4\x26\x6a\xb3\xfc\xae\x9b\x83\x51\x66\x93\xba\x9a\x13\xc4\x81\x36\xb9\x2b\xd3\x84\xb1\x73\x01\xf8\x4d\x61\x78\x18\x2a\x95\xfd\x37\x8f\x1d\x00\x43\x9e\xff\xb0\x17\xbc\xc7\xdb\xb1\x6d\x70\xa5\xaf\x0e\x1b\x60\x1e\x84\xd7\x87\xed\x69\x64\x9a\x2b\x0e\x42\x64\xcd\xca\x44\x5e\x87\xa3\x2a\x45\x61\x6e\xf1\x3a\xac\xe2\x30\xde\x08\x07\x76\xfc\xef\xe9\xf3\x67\xb6\xb3\x32\x3e\x3c\xc6\xbe\xb9\x5a\xf1\xf6\xdf\x3e\x16\xbc\x71\xec\x3c\xd9\x34\x4e\x72\x50\xc6\x43\x2d\x77\x30\x55\x0f\x03\xa1\x8b\x2b\xb6\xaa\x54\xa5\x24\x6b\x61\xb3\x91\x46\x79\xae\x4e\x4f\x99\x21\xf6\xde\x56\xdd\x3a\xa7\xcb\x28\xde\x8d\xd4\xe1\xa1\x65\xfc\x59\x2b\x69\x24\xda\x06\xf8\x50\x9d\x0d\xea\xea\x30\xd0\xa1\xed\x36\xcc\x32\x91\x62\x22\x27\xc5\x28\x52\xb5\x1a\xfc\x1e\xaa\x57\x9e\xf6\x93\xa6\x0d\xb8\x01\x99\x9a\x51\x9b\xaf\x82\x27\x97\x92\x9a\xae\x9b\x7a\xfa\x0d\xa8\x97\x53\x78\xa3\xcc\xc3\xd8\xb4\x31\x16\xc9\xaa\xea\xa9\x66\x2a\x33\x4c\xcf\xb7\xe0\x6e\x74\x07\x58\x5a\xfe\xf4\x89\xb5\x15\x57\x7b\x9f\x6c\x89\xf5\x49\xab\xfb\x26\x62\xb9\xba\x9d\x36\xff\x40\x8d\x5d\x0d\xd6\xa2\x85\x7e\x1c\xd3\x69\xed\xcb\x5e\xf0\x79\x6f\x0e\xec\x5d\xbd\x3e\x10\x45\x61\x48\xe6\x79\xcc\xeb\x99\x81\xe9\x52\xe7\xf3\x18\x32\x3c\xd7\x9e\x97\xf9\x02\xa6\x62\xba\xf5\xc1\x07\x55\x37\x9c\x24\x68\x8b\x3c\x84\x80\x21\xeb\xfc\x2f\x53\xa7\x00\x34\x06\x6c\x44\x59\xa5\x56\xb0\x67\xc3\xdb\x93\xa1\xa4\x28\x59\x9d\xc0\xdf\x76\x4f\x7c\x72\x9c\x1d\x81\x55\x72\x3e\x69\x0a\xff\xb7\xc6\x83\xf7\x8d\xdf\x63\x99\x37\x87\x96\x9c\xc1\xf5\x88\xa5\x26\x1b\x85\x35\xd6\xec\x84\x49\x22\x62\x8a\x39\x8f\x30\x68\x61\x45\x08\x88\xc4\xd6\x2a\x92\x71\x3f\x02\x9c\x2e\x29\x6b\xb4\x46\x33\x30\xf3\x5b\x25\x66\x79\x2a\xc2\x2e\xce\x81\x54\x00\x73\x93\x2a\x4a\x4f\x15\xa3\xd3\x61\x61\x3c\x13\x9a\xd8\x7e\xae\xcd\x4d\x8b\xa0\xdf\x05\xfa\xcb\x01\xd8\xdc\x7c\x8d\xaa\xe5\x38\x40\x41\x8d\xac\x17\xe7\x52\x6d\x89\xd1\xd9\x60\x04\xb9\x81\x5f\xa4\x03\x80\x2a\xaf\xae\x4f\xb0\x09\xd5\x34\xa3\xaa\x26\xc0\x70\xa9\x46\x05\x0d\x1b\x45\x81\x54\x14\xb0\x1c\x81\xaa\x94\xd5\x2d\x71\x01\x1d\xad\x6b\x0a\x5d\x8d\x48\x36\xba\x74\xba\x64\x15\x67\x6b\xc3\xc6\xf0\x53\xc8\xc7\x76\x8c\x73\xb0\x8d\xb8\xee\xb6\x4a\x43\x89\x19\xda\x9c\x35\x24\x3d\x2d\x9b\xb8\x52\x5e\xa3\x75\x48\x31\xa8\x14\x96\x8e\xac\xfc\xed\x9a\xc3\x0f\x6d\xf2\xc8\x4d\x4c\x53\x4f\x34\xfd\x9f\xad\x05\x37\x38\x57\x4a\x14\x03\x61\x01\x65\xa0\xf4\x4c\x6e\x9e\x75\x13\x78\x3f\xe3\xb1\xff\xdb\x63\x0c\x84\x59\x74\x9f\x48\x33\xff\x77\xbc\xe0\x17\xbd\x33\xe6\xb7\xce\x1c\xec\x85\x2f\xea\x17\x27\x74\x8a\x5a\x70\x60\xa1\x70\xe4\xd5\x09\x48\xa4\xdd\x30\x41\xc6\x32\x34\x70\xea\xa0\x0f\xea\x1c\xc4\x8b\xde\xd5\xde\x19\xb6\xba\x51\xa2\x14\xd0\x74\x82\x02\x00\x27\x4d\x8c\x57\x36\x39\xc2\x3a\xff\xf0\x11\x56\x8d\x8d\x8e\x31\xd9\x95\xd0\xf9\x3f\xfc\xa8\x41\xe7\x7f\xf8\xd0\xbf\x29\xfc\xf0\x7d\x50\xa4\xbd\x82\x22\xbd\x58\xf3\x00\xa4\x97\xc2\x03\x70\x0b\xbb\x89\x3d\x7d\x07\x3c\x00\xd5\x73\x7d\x1f\x91\x69\x2f\x24\x59\xdd\xed\x11\x8b\xee\xf0\x6f\x9f\x18\x66\xbd\xba\x34\xe0\xfc\x37\x5f\xe1\xc0\xa2\xad\x40\x50\xdd\xfa\x74\xe3\x0e\xb9\xe2\xdf\x7f\x45\x30\x7d\x87\x5c\x29\x43\x5c\xb8\x69\xcd\x76\xda\xe7\x0b\xe5\x8a\xbb\x0d\xfc\xed\x11\xf6\x87\x1e\x1b\x57\x8a\x96\xff\x3b\x1e\x3b\xbe\xe5\x9c\xb2\xbf\xab\x76\x9d\xe0\xcd\xde\x62\x19\x0e\x17\x6d\x03\x19\x1e\x2e\x45\x27\x5c\x8f\x24\x66\xe1\xc1\x77\x1f\xed\xf1\x52\x6d\x98\x08\x93\xd6\x04\xaa\xe6\xec\x83\x9e\xc1\x6c\x78\xaf\x37\x02\x95\xca\x69\x19\x02\x2f\x3c\xe0\xcd\x0e\xf1\x3a\x7f\x6d\x1a\xb1\x2f\x67\xf7\xc1\xe7\xbe\x66\xe0\x73\x1f\xb7\x35\x96\x87\xbd\xbd\xc2\xcf\x7d\x5d\xf0\x79\x3e\xe2\xcd\x6f\x2f\xbf\x9f\xea\x1f\x37\x24\x87\x20\x1e\x8c\x8c\xbe\x43\xae\x94\xf0\xe7\xd8\x5f\x8c\x39\x94\x16\x74\x08\x36\xa8\x72\xa7\x01\xb6\x76\x91\x6c\x7c\x14\x38\xed\xbf\x6b\x2c\x78\x41\xf5\xad\x12\x4a\x0f\xde\x43\x60\x79\x38\x1c\x25\x85\x91\x4b\xbb\x9c\x31\x0c\xdc\x79\xa1\xb1\xe9\x8d\xa7\xfd\xd8\x8d\x3b\xfd\xb5\x1a\x0b\x19\x5c\xf6\x9f\x1b\x9c\x05\x7a\x8c\xa8\xfc\x1d\x08\x6f\x57\xe7\x97\x56\xd4\xcc\x75\xa9\x10\x6c\x02\x31\x3b\x0e\x2c\x2c\x06\x10\x67\x22\x77\x2c\x05\x9f\xf0\xd8\x55\x99\x80\xa6\xe9\xd6\x7e\xc8\x1b\x01\x6c\x6d\xac\x7a\xa7\xed\x77\x82\xd7\x7a\x6e\x21\x0e\x78\x7a\xda\x4f\x78\x98\xdd\x54\x5c\x6b\xcb\x94\x9f\xeb\x67\xf9\x85\x7e\x32\x93\x3d\x4a\xc6\xb9\x1f\x1b\x63\x41\x15\xd0\xe9\xec\xc2\xa2\x6c\xae\x89\x1c\x23\x58\xfc\xbf\xab\x05\xb7\x94\xae\x95\x20\x63\xf0\x9a\x49\x5d\x50\x07\x5f\x34\xda\x67\xf0\xce\xa6\x37\xde\x93\xa9\x0b\xe4\xf7\x13\x35\x76\x9e\x8d\x77\x64\x96\xfb\xcf\x0a\x4e\x16\x46\xb3\xdb\x65\x96\x63\xf4\x21\x06\xc1\x24\x08\x22\x52\xd7\x36\xfa\xcc\x22\xba\xe0\x25\xe0\xae\x0f\x7b\x0c\x3e\xe4\xbf\x7f\xc7\x4b\xbb\x9f\x47\x71\x23\x4a\xf2\x2c\x4f\x1b\x73\x49\x7e\x3e\x5d\x84\xa2\x82\xef\x9d\xa7\x94\xfb\xd4\x81\xc2\x40\x5c\x60\xa9\xe1\xf2\xe4\x90\x0b\x8c\x5e\xd3\x27\x49\x32\x3b\xa6\x61\xb2\x2a\xf8\xb4\x7a\xf3\x86\xeb\xaf\xbf\xf6\x7a\x42\xfa\x30\xee\xb0\x84\xcf\xcd\xcc\xcf\xdc\xbb\x78\xf7\x2c\x04\xa6\x35\xd8\x6b\xbe\xd1\x21\x17\x2a\x20\x68\x7b\x32\x96\xab\x83\xc5\x9e\x3a\xa2\xcf\x1a\xe8\x64\xff\x33\xdf\x10\x3c\x67\xab\x9b\x56\xaa\x33\x65\xe3\x66\xf0\x44\x91\x4f\x02\x88\xbc\x61\x57\xd2\x5e\x81\x88\xe9\x39\x15\xd7\xd8\xf4\x0e\x75\xc3\x8b\x8b\x6b\x62\x63\xd3\xbb\x42\x5f\xbd\x53\x0c\x36\xbd\x27\x6c\x74\x44\x72\x57\x92\x85\x79\x94\xb5\xc1\x2b\xe8\x0c\xf1\x6f\xf9\xec\xab\x1e\xbb\x32\xb6\x53\x13\xfc\x2f\x7a\x97\x21\xb1\xe6\x21\xcf\xf9\x6d\x27\xff\xb6\x81\x11\xe5\xff\x65\xef\x5d\xe0\x2b\x39\xaa\x3b\xe1\x5f\x5f\x69\x66\x34\xe5\x07\xa6\x61\xd9\x84\x64\xa1\xb6\xed\x30\x12\xd6\xbd\x92\x66\xc6\x63\x5b\x18\x0f\x1a\x69\x06\x0b\xe6\x21\x4b\x1a\x1b\x30\xe0\x69\xdd\xae\xab\xdb\x99\xbe\xdd\xd7\xdd\x7d\xa5\xb9\xc6\xb0\x84\xf7\xc3\x6b\x1e\x81\x8f\x30\xbc\x09\x18\x62\x0c\x1b\x58\x9e\x09\x2c\x8f\x24\xec\x06\xb2\x21\x4b\x5e\x90\x8f\x4d\x02\x79\x90\x4d\x48\xd8\xec\xe6\xfb\x36\x3b\xbf\x6c\xbe\xef\x57\xe7\x9c\xaa\xae\x6a\xf5\xd5\x68\x1e\x18\x92\x9f\xc8\x2f\x1e\xdd\xee\xea\x7a\xd7\xa9\x53\xa7\xce\xf9\xff\xcd\x96\x11\x6a\x33\xad\xf0\xbc\x49\x78\xc3\x76\x10\x11\xd2\x93\x93\x65\x15\xbc\xcc\xd0\x9c\x58\xc6\x5f\x80\xae\xc2\x51\x0d\x53\xde\x4c\x52\xf4\xd9\x02\x9c\x63\xd5\x37\x3c\x00\x92\xf1\x06\xfb\x8d\x9d\x4c\x75\x9d\xfb\x85\x9d\x2a\x14\xfd\xa1\x9d\xc7\xf0\x59\xc9\xce\x11\x88\xd5\x54\x18\xe6\x61\x28\x8a\x44\x52\x2f\x16\x6b\x22\x46\x08\x00\xb2\x86\x04\x64\x3b\x3b\xb5\x61\x10\x9e\x3a\x97\x1c\x4f\x72\x02\xdf\x16\xa7\x90\x01\x3f\x23\x17\x34\x24\xb6\xef\xca\xc6\x01\x34\x88\xf2\xea\x69\x16\xe1\xe5\x76\x8b\xed\x59\x42\x13\x3a\xf7\xd3\x55\x30\xa9\x51\x8b\x95\xf7\xc6\x6a\x94\xac\xf8\x11\x82\x57\xf4\x3a\xe5\xf8\xdb\x98\xfb\x7c\x5f\xfd\xde\x24\xd6\x78\x08\xe3\x5c\xf5\x45\x61\xa4\xa3\xb8\x5a\x28\x4e\x5f\xc7\x02\x5a\xbb\x35\x93\xd4\x2c\xf6\x33\x3e\x35\x31\x35\x31\x39\xcd\xef\xe3\x32\xeb\x29\xfa\x77\x2f\xfd\xbb\x8f\xdf\xc7\xef\xe3\x9c\x2f\x70\x6e\xfd\xcb\xe1\xdf\x3a\x0f\x5b\x66\x1d\xa6\xc6\x8b\xc0\x71\x29\x61\x06\x62\x7a\x63\xd6\x60\x46\x6f\x26\x1d\x01\x75\x98\x7a\x8a\x45\xa6\x90\xf3\x24\xa6\x94\x53\xa3\x50\xa5\x31\x0a\xb4\xea\xf8\xa7\x71\x62\xcd\x34\xf3\x9e\x1f\xc9\xc2\x47\xf7\xd6\x27\xc7\xa4\x40\xb1\x92\xaf\x85\x09\xdc\xc0\x53\x0d\x47\xa7\xc6\x1a\x1b\xaa\xbc\xb7\xa2\xca\x56\x6d\xa1\x16\x72\x9b\xbd\x17\x82\x57\x06\xcd\x1a\x35\x61\x66\xe2\xfe\xba\xdf\xd7\xd3\x46\x2d\x2c\x29\x15\x94\x7b\x66\x71\x85\x0d\xd2\x18\x67\x41\xa8\xf1\xd3\x21\xd3\x3e\xf2\x4b\x48\x9d\xc8\x37\xb6\xb5\x50\x44\x41\x61\x35\x44\x6d\x55\xf6\x3b\x8c\xf9\xa4\x0e\x4f\xc5\x48\x7d\x1b\xc1\xe0\x03\x00\x40\xae\xe5\x8f\xfb\x96\x9a\xf7\xea\xda\x72\xf1\x40\x4d\xf2\xd3\xa2\xaf\x10\xc1\x75\xd0\xd4\xf1\x02\xde\x9d\x1c\xdd\x71\xfd\x17\xf8\xe3\xf2\x2b\x08\x74\x03\x60\xcc\xa6\x3a\x08\x64\x24\x19\xcc\x38\xb0\x42\xb0\x67\xb8\x51\x91\xa4\xe4\x77\x16\x29\xb9\xf0\x9b\x6d\x7e\xcb\x69\xd1\x1f\xc7\x8c\x6e\x45\x77\x7c\x6f\xa5\x27\xb7\x44\x8f\xec\xc5\x08\x36\xd6\xed\xe5\x7c\xc5\x8f\x7c\x40\xf2\xde\x20\x6c\xf2\x04\x33\xc3\x2f\x07\xf5\xa9\xb9\x11\x7e\x6d\x17\xdb\x28\x9b\xdd\xcf\xec\xf2\x3e\xb4\xeb\xce\xf2\x63\xc3\x97\x91\xb6\x87\x40\xf8\x91\x01\x35\x4f\x58\x07\x41\x22\xb2\x78\x4f\x31\xba\xd0\x7c\x5c\x82\x05\x86\xbf\x9c\x9d\x96\xf4\xe1\xa3\xb4\x6f\x8f\xf1\x5c\x00\x6e\x58\x01\xff\x2f\xc0\x4f\x1a\x36\x24\x95\x3a\x84\x1c\xec\x99\x58\xf9\xa1\xf9\x91\xd2\x06\x42\x8c\xd6\x8d\x08\x15\x67\x9c\x71\xf0\x32\x58\x0d\xd7\x80\x65\x65\x2b\x53\x17\x97\x67\x5b\x44\x5d\x9e\x8a\xa0\x87\x64\x3d\x8c\xf3\xec\xb4\x58\x6f\xb0\x19\xa3\xa5\xa5\x80\x48\xcf\xea\x53\x0f\xe1\x75\x63\x7b\x61\x86\x2d\x04\xce\xa3\x30\x41\x24\x99\xd0\xb4\x18\x08\x71\x9a\x65\xe1\x2a\x18\x5f\x75\xd4\x3a\x70\xd8\x40\xb5\x94\x30\xf0\x68\xf1\x7b\x52\x5c\x64\x89\x35\x03\x1f\x19\x81\xbb\x4f\x0a\xbb\xcd\x05\xee\x02\xfc\xdf\x46\xc1\x3b\xdf\xe2\x15\x53\x50\xd7\xc5\x9a\x3c\x17\x22\x8b\xf7\x82\xc8\xdc\x37\x66\x88\xe4\x7d\x13\x7b\x27\xa6\x46\x65\x5d\xf7\x8e\xc9\x5a\x5b\xc2\x76\x4a\x0b\x5b\xfd\x25\xd5\x48\x64\x96\xb8\x9d\x8f\xc9\x4f\x77\x3d\x49\x03\x72\x1b\x52\x91\xfb\xb2\x46\x59\xae\x60\x5f\x3a\x6a\x09\xa3\x77\x4b\x31\x59\xd7\x13\xb9\x70\x40\xe8\x87\x39\x7f\x72\x27\x49\xc5\x93\x8d\xe4\x5b\x59\xd1\xbf\x58\x63\x87\x0c\x85\xb0\x15\x25\xeb\xe4\xd7\xae\x0f\x66\x0b\x69\x98\x48\xfd\xfe\xa8\x3c\x42\x5a\xe8\x3b\x05\x3a\xf3\x7f\x73\xbc\x9f\xde\x42\xba\x6a\x34\x5f\x9a\x8e\xa1\x11\xd6\xe7\xd1\xa9\xbf\xde\xa5\x4c\x3d\xf2\xbe\x91\xbb\x46\x65\xa8\x60\x9b\xb5\x28\x82\xe9\xf9\xde\xed\xa7\xe4\x1f\xa7\xaa\x30\xe7\x54\x7e\x56\x24\x80\x32\x00\x62\x11\x06\xf9\x41\x25\x26\xdd\xc7\x87\x58\xc3\x84\xf1\x2d\xb8\xfd\xd7\xa6\x1a\xc4\xe7\x4f\xec\x7a\x87\xfc\xe6\x69\x11\x07\xee\xcf\x0c\x79\xb3\x95\x6f\xcc\x00\x11\xdf\x64\xf0\xd1\x84\xd7\xf2\x39\x25\xae\x6c\xf7\x83\x35\x76\x86\x1a\xde\xf5\x9a\x26\xd1\x99\xd1\x0e\xf2\x9b\xc7\x4b\x72\xe5\x44\x0f\xa7\x04\x70\x64\xdb\x9c\xf3\x8c\x2a\xae\x0c\x61\x66\x57\xfc\x82\x3a\x18\xbd\xdb\xd9\xc4\xca\x6e\xf7\x90\xdd\x01\x0b\x49\x9a\x7b\x4d\xf9\xdf\x12\xf4\xb4\x55\xed\x19\x3c\x20\xe1\x40\xa6\xf4\x03\xb7\xb3\x30\xb3\xcf\xb6\x3e\xaf\xec\xe8\x06\xfb\xf6\x35\xec\x49\xa6\xe9\x5f\x2b\x54\xe8\x8c\x8f\xd3\x02\x38\x3c\xdc\x4f\x5e\xe3\xbd\xc0\x7a\xa2\x4d\x0d\x1d\xbf\x0b\xdc\x19\x60\xb9\xf2\x8b\xd9\xd4\x44\x76\x15\x3a\x5e\x5a\x13\x8d\xb4\x0c\xdc\xac\x71\x04\x50\x3b\x21\x7d\x0a\xc0\x31\xc1\x43\x91\x52\x36\xce\x3a\x3b\x20\x85\x35\xce\xbf\x7c\xf5\xb6\x89\xf3\x52\x4d\x9c\xaf\x75\xd8\x15\x06\xf5\x80\x7b\x9f\x97\x98\x4c\x04\x78\x8f\xeb\xa7\x2b\x61\x9e\xfa\x69\x5f\x59\x3e\x09\x5a\xaf\xe7\x47\x51\x5f\x05\x2d\x64\x1c\xd0\xce\xc1\x0d\x9c\x10\x62\x62\x15\x36\x61\x4d\x89\xc2\xfb\x1e\x24\x97\x59\x9b\x07\x87\xd8\x55\x78\xae\x21\xad\xd5\x7d\xd3\x90\xf7\xf2\x21\xeb\x91\x71\xc6\xb6\x02\xe7\xed\xd9\x69\xe0\x5a\x16\x9a\x83\x9f\x59\x2e\x88\xba\x5e\x2d\x58\x40\xea\xe0\x1a\x24\x5c\x43\x1b\xc8\x99\x68\x57\xbf\xc1\x81\x4b\x50\xee\xf3\x76\x89\x0a\xe3\xc8\x4f\x4f\x63\x51\xa7\xac\x6a\x9f\x32\x01\xf0\x5a\x16\xb6\x65\x29\x27\x91\x29\x5f\x5a\xa5\x21\x84\x69\x39\x33\x8a\xeb\xb2\x7c\x2d\x40\x5c\x81\xc3\x7d\xa6\xb4\xfd\xa4\x85\x3e\x46\x74\x56\x54\x0d\x2f\x17\x67\x51\x61\x0d\xe8\x24\xdb\x33\x6b\xdb\x32\xbe\x6d\x19\xb7\xee\xf4\x5f\x56\x63\xd7\x74\x53\x21\x3a\x5d\x03\x93\xf6\xfb\x8e\xf7\x6d\x67\xa1\xf4\x54\xed\xc5\xf4\x0b\xd6\x1e\x25\x51\x96\x0f\x98\xf7\xc0\xab\x56\x4c\x3f\xe5\x18\x46\x0e\x61\x94\xeb\x51\x99\x68\x41\xa7\x31\x1d\xc3\xaa\x52\xc8\x95\xd7\x8b\x33\x91\x37\x4a\xd1\x91\x52\xad\x43\xe6\xc0\x71\xbe\x6a\xfa\xd8\x1d\x4f\xe2\x05\x5d\x3b\x9d\x0d\x51\x01\xd6\x65\xd2\x72\x18\x23\x6e\x54\xee\x3b\x1d\x65\x84\x7a\x95\x53\x6c\x70\x49\xab\x4a\x24\x52\x6d\xa8\x63\x7c\xd0\x9d\x8b\x24\x06\x11\x25\x39\x04\x29\xaf\xfc\x3e\x0a\x29\x5b\xa1\x53\x54\x80\x85\xe9\x0c\x7c\x59\xbb\xa2\x69\x1d\xf1\xcf\x39\xc1\xf9\xef\x32\x66\xdc\x83\xf5\x6a\xc2\x1c\x43\x57\x28\xdd\x44\x5b\xc2\x85\xb1\xb7\x5c\xcd\x6e\xbf\x58\x90\xfb\x81\x08\x88\xee\x17\xaf\xf2\xee\xac\x78\x5e\x28\xd3\x18\xdb\x6c\xf1\x9d\x74\x30\x08\x6e\xf9\xe8\x92\xe1\x2f\x5f\x9c\xc2\x14\xec\x97\xa5\x62\x7c\xf3\x4a\xf6\x3f\x46\xd8\x50\x2f\x8d\xdc\xbf\x1c\xf1\xbe\x35\xd2\x4b\x23\xc3\x4d\x5f\x1d\x7f\x37\x60\x3d\x83\x3f\x1d\x2d\xca\x93\x8b\x47\x39\xb0\x02\x8e\x9e\x02\x55\x41\x4c\x4f\x4c\xb4\x93\x2c\x9f\x96\x2a\xdb\x44\xd7\xcf\xdb\xa7\xc6\x1a\x65\x6a\x9f\x53\xbd\x34\x3a\x25\xf5\xba\x53\xa4\xf0\x9d\x2a\x68\x7a\x94\x5f\x63\x83\x31\x39\xb1\x4e\xc9\xcc\x4e\xa9\x0d\x4f\x0a\x3c\x50\x17\x91\x0c\x4f\xc7\x93\x12\x21\x85\xf2\xcd\xc5\x43\xd5\x53\x74\x78\x59\x51\x0c\x2d\x09\xc2\x9e\x05\xdd\x0c\x28\xb0\x75\xe0\xbd\x0a\x28\x07\x10\x3f\x41\x24\x1f\xc0\x75\x18\xd2\x11\x59\x8f\x6c\xc6\x47\x11\x46\xfb\x94\x9c\x66\xc5\x88\x9f\x52\x81\x83\x94\x17\x0f\x63\xe5\xa0\x05\x19\xf9\x59\x09\x2a\xc9\xe7\x91\xdf\x17\xb8\xb5\xc0\xc9\x3c\x4c\xe2\xb1\x86\x6a\xba\xdc\x28\x00\xd0\x80\xec\xfb\x0b\x9a\xbe\x84\xb1\x85\x48\xf8\x19\x40\x07\x0b\xa5\xb5\xc8\x5c\x4e\xc9\xa1\x8b\xf0\x73\xd9\xcb\x53\x7b\x6f\x84\x70\x84\xa9\x53\x78\xbc\xa0\x9c\xa5\x76\x18\x66\xa7\xfb\xbc\x17\x43\x34\x7a\x3f\xe9\x61\x60\x09\xb8\xdc\x02\x08\x6e\x01\x2c\x65\x80\xf7\x24\x31\x32\x66\x26\xb0\x8b\x83\x89\x19\x6e\x9d\xe2\xa2\x6f\x2c\x3c\x03\x85\x7b\x03\x53\xd4\x00\x7d\x37\xd1\x51\x97\x7a\x80\xb4\x99\xe5\xf0\x5a\x96\x1c\x85\xa7\x45\xd4\x27\x2b\x59\x9c\xc4\x75\x39\xa3\xe4\x21\x7f\x9c\x87\x0d\xd1\x18\x87\xc9\x20\xfc\x0c\x92\xe4\xbd\x34\xe6\xbd\x2e\x1a\x2a\x62\xb1\xae\xe6\x00\xcd\x22\x9c\x9a\x7a\x92\x79\xb0\x59\x78\x4f\x81\xc9\x21\x67\x30\xbd\x58\x0d\x69\xc5\x78\x6a\x37\xf1\x1a\x8c\xcd\x00\x7d\xbb\x19\x65\x4e\x40\x56\x2d\x4d\xfb\x48\xc6\x75\xa9\x4f\x91\x8e\x00\x76\x71\x32\xc8\x40\xa5\x4e\x2e\x1e\x6d\xf0\x67\x27\x3d\x48\xab\x59\x14\x55\x94\x25\x30\xed\x56\xa9\xa2\x25\x00\xad\x96\xcd\x21\xaa\xc1\x80\x35\x07\x8f\xac\x6f\x9e\xab\xfd\x86\xe8\x07\x88\xd5\x3e\x49\xf9\x8a\x9f\x85\x4d\xee\xf7\xf2\x36\x40\xc0\x73\x4f\xbe\x98\x96\xc5\xaf\x27\x69\xf0\x34\xaf\x6c\x36\xe5\x47\x52\x7f\x15\x03\xdc\x47\xbd\x6b\x1b\x8d\x86\x37\x06\x6d\xbf\xa7\x07\x26\xa7\x22\x70\x77\xd4\x3b\x48\x6f\x09\xca\x5a\x73\xe4\x23\xaa\x97\xb5\x8f\xfc\x8a\xc3\x46\x9a\xfe\xa1\x5e\x1c\x44\xc2\xfd\xa4\xe3\x0e\xaf\xf4\x73\xe1\xbd\xd7\x51\xcf\x50\xdb\x5a\x38\x7c\x8c\x8b\xb8\x99\x04\x22\xe0\xb3\x33\x7c\x05\x5f\xe1\xc4\x2a\xd3\x9b\x6a\xc0\x6a\xa3\xb7\xf6\x64\x8a\x8e\xa1\x29\xd2\x1c\xdd\x71\xd0\xcb\xbf\x17\x1b\xee\xd3\x14\x8d\x94\xa7\x72\x0e\xa4\x49\x92\xeb\xdb\xb8\x62\x36\xcb\x46\x6d\x50\xe7\xdf\x56\x63\xbb\x48\xb0\xb8\xaf\xab\xb1\xe7\x5e\x1e\xea\x13\xc5\xb8\x06\xf9\x6a\x3b\x8a\xf7\x11\x47\x09\xbb\x10\x0d\x3c\xca\xc0\x42\x33\x44\xbd\xdd\x88\x3b\x7c\x18\x51\xd5\x54\x82\x24\xe5\x52\xcc\x57\xc9\xdb\xf9\x0d\x88\x63\x26\xb9\xa6\x2d\x5c\xc7\xd1\x43\x59\x8a\x0c\x92\xcd\x72\xa2\x69\x41\xdb\x60\xdf\x76\xd8\x13\xab\x42\x91\xfc\xae\xbf\x12\x46\x61\x1e\x8a\xcc\xfd\x9c\xe3\xdd\x32\x13\x04\x99\x72\x47\x4e\xe4\xd6\xb3\x70\x62\x69\xfe\x59\xbc\x69\xa4\x43\xe5\x58\xd5\xa5\xf0\x48\xb7\x37\xb3\x7b\xd8\x0d\x6c\xc8\x0f\x02\xb7\xe1\xb9\x33\x81\x9c\x34\x66\x1e\x9b\xb8\xc3\xde\xc4\x86\x83\x34\xe9\xba\x93\xde\x63\x17\x09\x7b\x60\x8b\x5f\xfe\x3f\x3b\xd9\xbf\xae\x68\xe3\x91\x59\x8b\xe2\xff\x6b\x3b\xbd\x0f\x39\x8b\x85\x1f\x9a\xcf\x8f\x84\x2b\xa9\xe0\xb3\xe4\xe5\xae\x38\xe5\xab\x9e\xda\x5c\xb0\x2a\x60\xc3\xcf\xc0\xb3\x7a\x62\x3d\x0d\x73\x01\xf4\x01\x83\xbe\x56\x0c\xb4\xc9\xba\xec\xb0\x76\xd8\x35\xb1\x23\x00\xb2\x02\x5d\x0b\x78\x2a\xc0\x44\xbb\x81\xe5\xf3\x8d\x3b\xd8\x17\x1c\xb6\xb3\x95\x2d\xf7\xbb\xc2\xfd\x84\xe3\x7d\xc0\x39\xa2\x23\x43\xd0\xf7\x42\x85\xed\x36\xc0\xcd\x00\x37\xb4\x56\x29\x8d\x45\x52\x92\xab\x5d\x97\x02\xee\xe3\x55\xae\x22\x4d\x0e\x9f\x69\x70\x4f\x9c\xc9\xf7\x7b\xe3\xdc\x3b\xd3\xca\xe4\x3f\x71\xde\xca\xbc\x06\x9f\xef\x74\xa3\xb0\x19\xe6\x11\x9d\x9b\x8a\x2b\x14\xfc\x80\xb4\x5f\x3d\x9f\xcd\x81\x9a\x66\x43\x51\x2f\x76\xf7\x29\xa5\xf5\x09\x85\x9b\xc0\x91\x59\x75\x07\x19\xf5\x62\xb2\x31\x59\x97\x45\x2f\x71\x0c\xfe\xfd\x35\xaf\x5d\x7c\x6a\xea\xe3\xe0\xb2\xce\x47\x8b\x61\x19\x6b\x14\xd4\xfc\x10\x6c\xb8\x7e\x81\xbc\xfd\xd6\x89\x74\x99\x31\xac\xe5\x9d\x77\x1e\xcf\xdc\x23\xde\x93\xab\x1a\xb0\x9e\xa4\x51\xb0\x1e\x06\x64\xd2\xe3\xa3\x32\xf1\xd8\x26\xf3\xf7\x13\x0e\xdb\xb1\xbe\x1e\x06\x99\xfb\x21\xc7\x7b\xc0\xb1\xf2\xc4\x19\x84\x79\x72\xc8\xd4\x20\x7a\xe3\xa3\xf0\xd9\x98\x12\x2e\xf0\x4b\x8a\x96\x66\xd2\x59\x51\x91\x47\x52\x6d\xd4\x75\x86\xc9\x26\x7b\xd8\xe0\x63\x44\xeb\x36\x1c\x62\x01\x3c\x20\xec\xf4\xa2\xdc\x8f\x05\x70\x38\x6c\xc6\xdf\xf2\xbd\x21\xcb\xb2\xa7\xd7\x5d\x04\x38\x33\xd6\xe2\xfb\xe2\x90\xf7\x2b\xa5\xc5\x87\xa9\x54\x03\xd5\x9a\xa2\x79\xa9\xde\xfa\xab\x10\x8b\x23\x8f\x65\xfa\xaa\x85\xb4\x57\x79\x22\xcc\x44\x0e\x96\x57\x60\xbf\xc1\xdf\x27\x4f\xce\xcf\x19\x86\x19\x38\x86\xd9\x65\x65\xca\xf8\xb2\xe9\xaa\x4c\xd2\xf3\x2e\xca\xef\x39\xec\x55\x0e\xbb\xc2\xa8\x88\xdb\xf7\x22\x13\xc4\x8b\x5e\x81\x3f\x2d\x0a\x0c\xed\x07\x5f\xbf\x95\x8e\x53\xb1\x95\x52\x6e\x1c\xaa\xba\x83\xcc\x4b\x81\xec\x47\x08\xd2\x32\x47\xe3\x6e\x5d\x13\xd9\x05\xee\x82\x37\x0b\x5d\x61\xd7\xa4\x38\x04\x12\x2e\x58\x31\x9b\xd0\x85\x54\x95\x4d\xe9\xcd\x02\xce\x8d\x58\x34\x7a\x26\x89\x20\xc4\x26\xfc\xc1\x88\x77\x42\xfd\x50\xc7\xcc\xf5\x76\x12\x15\x1e\xe3\x52\x5d\xc5\x8b\x5b\x54\x1f\xe0\x60\x09\x01\x45\x88\x4a\x0f\x0d\x04\xcd\xaf\xe3\x83\xda\x58\x19\xa9\xf0\xae\x5d\xdb\x96\xa1\x4b\xb0\x0c\x7d\xcd\xb4\x0c\x7d\xe9\x12\xa3\x3c\x5e\xe2\x54\x87\x79\x3c\x92\x8d\xdb\xb6\xcf\x5f\xaa\x7d\xfe\xb8\x0a\xf5\x38\xec\x5d\xa5\x00\x06\x80\x7f\xdd\x14\xfe\x63\x6c\x0f\xfb\xa9\xf3\xfa\x48\xca\xe5\x7d\xce\x59\x38\xbf\xd5\xa7\xee\x5e\x3f\xc0\xea\xe3\x79\xda\xcc\xa3\xc4\x09\x63\x5f\x71\xd8\x8f\x57\xb9\x64\xf6\xb3\x66\x1e\xb9\x0f\x3b\xde\xf5\xf8\xa7\x1e\x6d\x9f\x9f\x96\xa5\x47\xc5\xe9\x88\xd4\x94\x0c\xfc\x17\x91\xd1\xae\xe2\xbe\x67\x85\x4d\x2a\xeb\xda\x1e\xef\xf1\x77\x28\x83\x9a\xcf\xbb\xa9\xd4\x93\x30\x8e\xac\x24\x19\x1b\x74\x11\xf8\x24\xef\xc7\x95\xf4\xdf\x34\xfd\x5f\x0d\xb1\x9f\x32\x1a\x43\x30\x60\xea\xd0\x71\x58\xfe\x5c\x12\xa9\x54\xcd\xbf\x38\xe4\xdd\x63\xfc\x56\x5a\xb7\x65\x75\x4a\x62\x79\xaa\x08\x11\x4a\x1b\xf3\xc2\xb3\x39\x47\x32\x42\xb4\x72\xf8\xd9\x44\x98\xf1\x36\xf0\xf9\x2b\xfd\x3d\x8c\x7b\x48\xd4\x04\x61\xd9\xe0\x78\x10\x76\x84\x94\xba\xe0\x39\x77\xd6\xb9\x26\xf2\xb3\xfc\xc4\x0a\x1c\x96\x82\xe5\xb0\x74\x05\xfa\xbe\x1a\x8b\x19\x26\x75\x85\xd2\xe9\x16\x9a\x88\x1d\x93\x95\xdc\xce\x92\x66\x13\x22\x16\x9a\x0a\x69\x04\x7c\x04\xa0\xda\xbd\x6e\xb1\x6e\xb2\x9c\xb7\x85\x9f\xe6\x2b\xc2\xcf\xb1\x36\x96\x16\xf8\x51\x87\x6d\xa8\x93\xfb\x76\x87\xdd\x72\x11\x42\xec\x58\xd8\x4c\x13\x99\x81\xf7\xdc\x72\x96\xaa\xfa\x10\xb4\x09\x86\x50\xa8\x19\x8c\x44\xb1\x13\x50\xf5\xd7\x7d\xd9\x12\x11\xf3\x15\xc4\x17\xb6\x1b\xd1\x60\x2f\x19\x66\x4f\xae\xc4\x21\x23\x86\xc3\x25\x6d\xe5\x5c\x16\x69\xc7\xfd\xed\x21\xef\x23\xce\x4c\x4c\x41\x8b\x05\x0f\xa2\xe1\x89\x96\x8b\xb4\x53\x70\x94\x68\x1c\x6e\xb2\x69\x87\xa4\xa1\xf3\x75\x01\x76\x9f\x49\x3e\x0a\xb3\x21\x44\xa7\x84\x38\xa9\x27\xdd\x31\x0d\xe1\x7d\xfe\x02\xe2\x44\xe7\x4f\x19\x65\x68\x09\xd3\x79\x9d\x75\x76\x62\x59\x67\x1d\xd6\xd5\x67\x62\x6b\xae\xfc\x1f\x47\x6a\xf0\xc6\x5b\x37\x67\x53\x5b\x92\x26\xca\x5d\x45\x76\x8e\x77\x70\x06\xfd\x6a\xb4\x9b\xa7\xac\xe9\x78\x25\xe0\x8b\xed\xcb\x89\xf5\x6b\xb0\x35\x46\x55\x75\x23\x35\x63\xef\xbc\x13\xfb\xa9\x9c\x89\x76\x94\xdc\x98\x5b\x5c\xaa\xd7\x78\xc9\x31\xb8\x3e\x35\x39\x69\x4f\xdc\xd7\x0c\x57\xea\xca\x0a\xf4\xe2\xf6\x5e\x92\xfb\x18\xdb\xe3\xfe\xd1\x90\x77\xa4\xe2\xb9\xb5\x8f\x89\x18\x8e\x30\x01\x6f\xe3\xd6\x0b\xda\x07\x68\xc8\x34\x8b\x79\x2f\x2b\xc5\xd3\xbe\x6a\x88\xfd\xb1\xc3\x86\xe5\x07\xee\xef\x3b\xde\x2b\x9d\xdb\xe4\xa7\xca\xbd\x5e\x10\x26\x52\x45\xb6\x60\xec\xf2\x9b\x6d\xd0\x57\x0d\xce\xee\x8b\x44\xaa\x50\xdf\xd7\xef\x91\x6d\xcb\x26\x2e\x2f\x71\xf1\x7b\x1d\x36\xdc\xcb\x44\xe0\xbe\xd5\xf1\x9e\x71\x32\x13\xba\x85\x4d\x8a\x97\xd2\x1d\x84\x98\x05\x3d\x04\x4e\x53\x2e\x10\x8a\xda\x35\xd6\xf7\x1d\x18\x99\x7c\x79\x2b\xf9\xae\x61\x56\x1f\xe8\xa7\x71\xdb\xf2\xf2\x02\xb9\x52\x2c\xf6\x22\x01\x3b\x90\xfb\xd7\x43\xde\xcf\xd7\xaa\xde\xa0\xde\xab\x14\x6c\x39\x0c\x05\x8f\x02\xfa\xf6\x90\x01\x72\x05\xfd\x31\x32\x50\x42\x61\x0a\xa1\xfd\x52\xd3\x8b\xdf\xd2\x4e\xb2\xfc\xd6\x89\x5b\xba\x7e\xde\xbe\xf5\xe0\x2d\x99\x90\xaa\x44\xd7\x4f\xf3\x5b\xe5\x59\x85\x3e\x27\x42\x4a\xfc\xaf\x7c\x99\xa9\xbe\xeb\xa5\x91\xb1\x48\x64\x89\x8b\x47\x66\xf9\xbe\x9b\x6f\x3a\x30\xae\x34\x2c\x13\x7d\xc9\x30\x1a\x12\x76\x3a\xf1\x1b\x14\xd8\xf6\x06\x7d\x21\x88\xd4\x3d\x13\x7b\x88\x8c\xb4\x85\xf7\xda\x2a\x84\x7f\xcf\xc1\x3d\xf2\xb8\xb6\xe7\xda\x3d\x72\xeb\x92\xf5\xb7\x0f\x0c\xbf\xe8\xb0\x0f\x3b\x0c\x5f\xb8\x3f\xef\x78\xfb\x67\x4a\x91\xd2\xf0\x46\x39\x94\x77\x2d\x3a\x60\xdd\x6d\xa6\x2a\x34\xcd\x6e\x62\x07\xb6\xe8\x76\x63\x0c\xda\x82\x9f\xb7\xcf\x39\xd7\x0e\x04\xee\xd9\xed\xee\xf2\xf3\xa4\x13\x36\x19\xfb\xc0\x4e\x2b\x92\x83\x28\xcb\xc9\x28\xa9\xe5\xb4\xfb\xe2\x9d\xde\x72\xf1\xb3\xc4\x81\x66\xc8\xf3\xc2\xcd\x11\x97\x33\x28\x77\xea\xfc\x8b\x91\x1d\x8b\x88\x05\x01\x17\x6a\xb6\xe0\x78\xdb\x0e\xf6\x11\xf0\xd4\x8d\x14\x35\x9b\xfb\xce\x9a\xf7\x19\xc7\x78\x00\x96\x59\x50\x2d\x02\x11\xf0\x51\x71\xa6\x19\xf5\x40\x50\x6a\xcc\xac\x6c\x0c\x11\xc8\x02\xdb\x9a\x89\x53\xc3\x2c\x5b\x41\x42\x6a\x50\xff\x71\x82\xf0\x0f\xd7\x44\xd4\x97\xc7\xd6\x24\x56\x42\x99\xa4\x16\xb6\x86\xaa\x53\xd8\x10\xba\x49\xa0\xfd\xd8\x4b\xad\x2b\x86\x72\x82\xd5\x37\x89\xbc\x2c\xe2\x34\x54\x53\xb7\x38\x7e\xdf\xad\xb1\x2b\xcd\x4d\xc2\xfd\xbd\x9a\xf7\xe9\x9a\xf9\x04\xd6\x6c\x66\x87\x2b\x91\x4d\x46\x5d\x67\x24\xb1\x6a\x1a\x78\x61\x93\xb5\x62\x43\x8f\x51\x3c\x84\x82\x6f\x2e\xf7\xe7\x40\x2f\x4b\x1f\xb7\x52\xdc\xe6\x0b\xb0\xa5\x82\xe4\x63\xb9\xd4\x71\xd6\xb6\x07\xc8\x35\x22\x5d\x2d\x80\x99\xbb\x00\x0f\x0a\x5e\x25\xe5\x3d\x12\x41\xbb\x9a\x49\xdc\x8a\x42\xd4\x53\xa2\x88\x23\x7b\x86\x1a\x29\x54\xce\x0b\x62\x05\x83\xb9\xb0\xf1\x50\xc9\xf2\x64\xca\xd2\xb7\x5f\x69\x45\xd6\xa4\x2b\x7e\xb3\xb1\x36\xe5\x47\xdd\xb6\x3f\xd5\x98\x45\x2b\xf9\x62\x12\x89\x43\x21\x6c\xdd\xee\xf7\xae\xf0\xde\x52\xdb\xf8\xdc\x76\x08\x34\xde\x17\xd6\x31\xad\x7b\xe7\x0d\xce\xe7\x81\x9d\xc4\xb8\x00\xb0\x3e\x52\x1b\x08\xb9\xc4\x18\x8c\x53\x10\x21\x17\x04\xc0\x3d\x64\x69\xf1\x6b\xa1\xcf\x97\x7a\x74\xe0\x9c\xd3\x16\x1e\x99\xd3\xda\x54\x63\xea\x46\x60\x33\xf5\xd7\x30\x5e\x19\x5a\xe9\xf7\xf2\x76\x92\x2a\x1e\x5f\x3a\x20\xae\x4d\xf1\x8d\x8d\xc3\x62\x89\xfc\x16\x00\x5a\x11\x0c\x9b\x76\x42\x2c\x62\xef\xde\xc6\x59\x67\x57\x9a\x44\x62\x51\xb4\x2c\x01\xf0\xf9\x91\x6d\x83\xcb\x25\x18\x5c\xda\x86\xbd\xe5\xb9\x97\xea\x88\xf3\x13\x9b\xf8\xe1\xb0\xff\xe4\x30\x35\x80\xee\x67\x9d\x4d\x10\xe9\xec\x55\xb2\x88\x9f\x78\xaf\x76\xe8\xaf\x42\x66\x5c\xe0\xfc\xd6\xe4\x68\x46\x46\x95\x10\xf1\x33\x34\x77\x55\x68\x5d\x2a\xe0\xea\x58\xc3\xc2\xb2\xd7\x38\x6c\x84\x28\xc7\x33\xf7\x45\xde\x53\x69\x69\x64\xbc\x9d\x44\xe0\xa4\xa2\x57\xab\x45\xe6\x4b\x1e\xb8\x89\xe2\x43\x41\x06\xfb\xad\x43\xf5\xd9\x1d\x43\x85\x6e\x1b\x98\x2e\xd1\xc0\x74\xce\x59\x3f\xbf\x41\x68\xd9\x5d\xd4\x21\xcd\x03\xe5\x9b\xb6\x0c\x6d\x14\x72\x76\xd4\x33\x8e\x20\x63\xbf\x37\xcc\xf6\x6f\x81\x06\x75\xc3\x4d\xaf\xfb\x8e\x61\xef\x29\xe5\x87\x34\xf9\x4a\xf7\xbe\x94\xaa\x11\x89\x55\xbf\xd9\xa7\x8a\x9e\x75\x76\xeb\x55\x51\xe5\x3e\xfe\x1f\x86\xd8\xd3\xc8\x6a\x74\x93\x77\xfd\x60\xbf\x79\xed\x8a\xad\x5c\xe2\x4d\xc9\x72\x82\x15\x85\xb8\x87\xbc\x1b\x4e\xe9\x5f\x56\x5e\xe8\x55\xbe\x95\x0c\x5b\x6c\x58\xea\xc2\xe0\xca\x0f\x4e\x43\x1a\x63\x89\x10\x42\x4f\x2e\x1e\x45\x6f\x09\xfb\xfe\x1f\xd4\x15\x0a\xd7\x31\x18\x2e\x95\x91\x07\x0a\x34\xcb\xf9\x82\xf2\x5f\xff\x94\x76\x60\x7b\x8f\x63\xc3\xa9\xeb\xe8\x5c\xba\x20\x51\x17\xe7\x18\xf2\x95\xa0\x8e\xa1\x6f\xd7\x0d\x0e\xad\xfd\xfb\xf7\x81\x8e\x2b\x35\xf7\x75\x29\x28\x9b\x49\xa7\xeb\xe7\x21\x5c\x24\xf7\x1b\xfc\x94\xcc\xf5\x94\x71\xb9\x42\x0c\xd9\x96\x77\xfb\xe8\x54\x1d\x02\x7b\xc7\x91\x01\x34\x0b\xd7\xc4\x98\x7d\xa0\xff\xde\x35\x96\xde\xe1\xf7\xf2\x24\x6b\xfa\xe8\xd7\xbe\x57\x2a\xea\x7b\x1b\xc7\x44\x9e\x86\x4d\x3a\xd5\x7f\xf6\x1a\xef\x56\xf3\x41\x29\x58\x54\x9e\x70\xea\x10\x8e\x43\x20\xe8\x06\x26\x4a\x07\x3e\x6b\x9c\x75\x86\xe5\x0e\x63\x4d\xa3\x3f\x7f\x14\x7b\x73\x4d\xf6\x65\x90\xb9\xf7\xd7\x06\x6f\x2e\x95\xf5\x93\x6a\xa3\x59\x25\xef\x2b\x0e\x79\x00\xb6\xa4\x30\x02\x15\x11\xcb\x56\x95\x05\x1c\x56\x1f\x63\x59\xb5\x9b\x97\x02\x22\x69\xfa\x91\x0e\x24\x1d\xb5\x3c\x64\xf2\xd4\x8f\x33\x0c\x2a\xcf\xea\x0a\x9b\x2c\xa8\x77\x45\x5a\x47\x6a\xe3\xb1\x06\x2f\x1c\xf4\x0b\x57\x61\x7f\x4d\xa4\xfe\x2a\x68\xab\xab\xe8\x84\x4d\x67\x3f\x0c\x18\x81\x81\xa5\xfb\x67\x23\x88\x15\x1d\xfe\xd9\x5b\x87\xd8\x88\x12\x46\xee\xfd\x43\x6c\xe6\x82\xfa\x46\x19\x60\xac\xfe\xf9\x72\x4d\x2b\x33\x66\x1f\xe9\x87\xd4\x59\xa3\x0a\x72\x31\x07\x7e\xc9\x82\xbf\x27\x34\x48\xb8\xe1\x22\x16\x0c\x2c\x63\x1c\x79\xc1\xf2\xc4\x0c\x44\xb9\xe0\x1e\x07\x47\xa2\xd9\x85\x93\xf2\x28\xdc\x11\x9d\x24\xed\x8f\x91\x3f\x17\x56\x0b\x0f\x69\x2b\xbd\x10\x91\x31\xad\xd2\x70\xe7\x80\xeb\x38\xa8\xad\x1f\x71\xea\x10\x0d\xe5\x00\xee\x8d\x5d\x94\x22\xb2\x55\xfe\x9a\x1f\x46\x10\xec\x95\x27\x3c\x96\x6a\x6c\xc4\xe5\x80\x02\xff\x10\x15\x58\x30\xca\x78\x72\x62\x79\x84\xbf\xdc\x60\xef\xaf\x31\x98\xcb\xee\xdb\x6b\xde\x03\x35\x70\x4d\x50\x16\x57\xf9\x77\xd2\x52\x5d\xa9\x4c\x4d\x52\xdf\x56\xb3\x82\xee\x7f\x3d\x0d\xa7\xab\xc6\xca\x1b\xe7\xde\x61\xf2\x15\x94\x7f\xa3\xda\x24\xff\x5a\x80\xd2\x93\x94\x7b\x46\x5a\x81\xec\x49\xca\x64\xa1\x26\xbc\xb2\xfa\x29\x1f\x45\x43\xbb\x00\x14\x63\x31\x5d\x55\x34\x57\x8d\x28\xfa\xa5\x08\x4f\x10\x96\x2f\x2f\xbf\x6d\x61\x46\x67\x70\x8c\xba\x2a\xcc\xb8\x88\xe5\x67\x96\x3c\xfe\xea\x10\x7b\x74\xb3\x5c\x96\xfb\x89\xa1\xcd\x88\xbe\x2b\x26\xf3\x86\xea\x5a\xb3\xfa\xcf\x6b\x06\x22\xe4\x0f\x63\x7e\x6b\x41\x67\x51\x59\xfd\xf3\x9b\xf5\x7f\x57\x63\x23\xca\x97\xd5\xfd\x6e\xed\x02\x25\x92\x9a\xd9\xd6\xd8\xbd\xa7\xa6\x9d\x63\xcd\x11\x53\x61\xfb\x38\x5e\xb0\x65\x0e\xe0\x09\x96\x3b\xb6\x31\x2a\x6a\x9e\xcf\x93\xe7\x60\xc6\x8d\xaa\x18\x5c\xa6\xc6\xc1\x95\x02\x3a\xe1\xb8\x26\x25\x72\x12\x83\x87\x87\xb2\xf2\x24\xbd\x1c\x10\xb7\x93\x96\x76\x93\x34\x37\x07\x05\x16\x9b\xb4\xf8\x3d\x3d\xd1\x83\x93\x45\x33\x4a\x7a\x01\xa1\xc9\x82\x59\x0b\xb7\x7e\x80\x58\xbd\x7d\x61\x09\x8b\x8a\x12\x3f\xa0\x80\xcb\x74\x93\xc2\xc6\x1a\x00\xb3\x85\xed\x72\x3f\xe5\xb0\x83\x17\xd4\xe9\xfa\xe4\x55\x74\x79\xae\x8f\xb0\x9b\xed\x92\x7a\x4e\x9f\x2e\x77\x6e\x69\x6f\x6c\x87\x79\x66\xec\x84\xc4\x84\x6d\xc7\xfe\x8d\x35\xd8\x3b\x77\x59\xc1\x8f\xfa\x12\x49\x6a\xbc\x59\x2e\xe2\x1c\xdd\x6d\x66\x23\x3f\xec\x90\xc6\xf1\x57\x3b\xbd\x13\x9b\xbc\x2f\x1b\xc6\x4d\x20\xb1\xae\xfe\x4c\xf9\xe7\x34\xe5\x87\xb6\x5d\xf0\xb5\x3b\xd9\x7f\xac\x31\x26\x6b\x8d\x9d\xe9\x7e\xba\xe6\xbd\x41\x03\x93\xcd\xaa\xe7\x60\x61\x1d\x90\x21\xba\x81\x06\x22\x8d\xfa\xe4\xae\x5b\x4a\x06\x61\x13\x68\x9f\xc9\xe0\x18\x93\x2b\x91\x5a\xe4\x5f\x68\xa1\xa0\x00\xee\x59\x84\xa4\x4b\x88\x97\xba\xc7\x3a\xfd\xcd\xb2\x99\x4d\x66\xc0\xa6\xbd\xaa\xcb\xdb\x12\x2b\x83\xdc\x0e\x2e\x04\x4f\x7d\x91\xed\xe8\xb6\xfd\x4c\xb8\xf3\xde\x2d\x0b\xf2\x8f\x0d\x90\x79\xd4\xad\x90\x4a\x76\x69\x65\x25\x1b\xa5\x18\xa0\x2b\x10\xd8\xe6\x58\x12\x88\xcc\xfd\x92\xe3\xbd\xdf\x99\x29\x1e\xd8\x81\x0c\x14\x11\x42\x48\x38\x1d\x32\x3c\x0a\x35\x10\x52\x9d\x56\x72\x6d\xe1\x8e\x59\xde\xf6\xab\xcf\x92\x9b\xdd\x00\x11\xac\xe0\x44\x31\xcc\x75\x72\xc9\xba\x16\x8b\xad\x43\xb1\xf5\xa9\x4d\x9c\xce\xde\x0c\x4e\xcb\x5d\xbf\x19\xe6\x7d\xf7\x55\x8e\x77\xf3\xa2\xdd\x4f\xd4\x0c\x7d\x0c\xd5\xf7\x13\xc5\x2c\x23\x4f\xcf\xcb\x7b\xa7\xf3\x26\xc6\x9e\x50\x35\x95\x92\x60\x59\x74\xba\xf2\xbc\xee\xfe\xed\x6e\x6f\xde\xf8\x6d\x62\x2e\xf1\x5c\x3d\x94\xc2\x01\xe0\xb2\x50\xc3\xed\xd2\xbd\xbe\xcf\xbb\xa9\x50\xd4\x14\xdd\x24\xb0\x97\xe2\x17\x47\xb6\x6d\x14\xdb\x38\x7c\xdb\xd1\x86\x97\x35\xda\xf0\x7b\x0e\x1b\x51\xcb\xd2\xfd\xa3\xad\xd0\x3e\x18\x8b\x1b\x10\x48\x1f\x72\x8c\xb5\x5e\xac\xbf\x22\x0a\x58\xed\x5c\x88\x8f\x17\xa8\x09\x11\x66\x78\x25\x42\x1f\x37\x1e\x09\x20\xcf\x73\xce\xd2\xf9\x6d\x74\x93\x6e\xa3\x5e\xe1\xa6\x65\xb4\xbb\x8c\x3d\xf8\xde\x9b\x2b\xfd\xb6\x70\xcb\x72\x5f\x76\xb3\x77\x17\xfe\x69\x6e\x77\x3e\x79\x1a\x28\x15\x40\xd1\xda\x9a\x98\x7e\xb8\x5f\x28\x9a\x9e\xbe\x7d\x74\xa0\x4e\xae\xc4\x6d\x78\xc3\x4d\xec\xfd\x0e\xbb\xba\x9b\xa4\xf9\x7a\x92\x9e\xa1\x8a\xbc\x71\x2b\x04\x26\x0b\xd6\x37\xe8\xd9\xec\x3d\xdb\x7e\x6a\xb7\x43\x95\xa2\x9a\x42\x28\xf3\x78\x2f\xa9\x5c\x9e\x93\x18\x94\xc4\x48\x80\x75\x1b\x78\xcf\x61\x91\xb0\x5f\x73\xd8\xce\x4c\x34\x53\x91\xbb\xbf\xe4\xb0\x7d\x5b\x61\x1d\x49\x45\x6e\xd5\xee\x25\x0e\x3e\xb4\xab\x85\x99\xd2\xb5\x22\x8a\x73\x83\x60\x2e\xcc\x74\x2c\xc4\x45\xee\xef\x6a\x53\xc7\x72\xd8\xaf\xd7\xd8\xae\xd5\x30\x5f\x14\xdd\xc4\xfd\x5c\x8d\xed\x3f\x6f\x43\x9e\x8e\x89\xad\x96\xbc\xac\x46\x4f\xed\xa6\xac\x86\xd0\xb6\x24\x0b\xf3\x24\xed\x73\x3f\x97\xbd\xee\xa7\x79\xd8\xec\x45\xbe\x3c\xcf\xae\x85\x70\x85\xc8\xe7\x0e\x2f\x2c\x1e\x9e\x9d\x59\x3e\x3c\x37\xcd\x55\x4e\xa1\xe9\x4b\xdd\xe0\xcb\xc4\x8d\x08\x1b\xa6\xcd\x10\x04\x17\x9c\xaa\xac\x71\xe2\x47\xf3\x63\x7e\xb8\xd3\xcd\xfb\x73\x61\x8a\xa8\x4e\xa0\xb8\x87\xf9\xac\xcd\xbe\xde\x8c\x12\xb5\xf2\xe5\xd7\x74\x3e\x5c\x0d\x73\x0a\xde\xc1\xcc\xe4\x6b\x3b\x37\x8c\x5f\x0e\xf6\x98\xfc\x37\xec\x4d\x43\x6c\x44\x4e\x12\xe0\x27\x79\xe5\xd0\x16\x66\xed\x6d\x94\xda\xea\xcd\xff\x5c\x53\x8f\x4b\x13\x36\x15\x75\x7d\x83\x0b\xec\x26\x49\x5a\xf0\x2b\x2b\x5b\xac\x39\x4b\xf5\xe9\x12\x53\x45\x7d\x45\xd4\xc4\xcb\x6c\x26\x85\xef\xf9\xaa\x88\x45\x0a\xb0\x0e\xe0\x03\x02\xde\x87\x44\x46\xb5\x8a\x5c\x88\xa9\xe6\xd2\x0c\xd7\xc2\x48\x80\x0d\xb0\x1d\xc6\xab\x24\x37\xc1\xdd\x00\x23\xdb\xd0\xbd\x52\x6c\xa8\x97\x9c\xbc\x59\xbe\x81\x79\xe4\xf8\x89\x65\x0a\x84\x6c\x87\x17\xaf\xc0\xaa\x09\x2e\x0b\xec\xfa\x79\x9b\xfd\xb5\xc3\x76\x84\x59\x33\x0b\xdd\x3f\x71\xd8\xde\xf3\x8e\xc9\xfc\xd2\xec\xd2\xbc\x35\x20\x0f\x3b\xf0\xcc\x1a\x8d\x98\xe3\xb3\xb9\x30\x3b\x6d\xea\x18\xd8\xdf\x5a\x96\xc0\x09\x94\x24\xc8\x1e\x5b\x84\x14\x1c\x16\xa5\x41\x91\xd2\xb1\xaa\xf1\x74\x2c\xcd\xf4\x75\x32\x36\x74\x02\xda\x36\xb1\x78\x78\x66\xee\xd8\xe1\x46\x27\x60\x1f\xad\xb1\xc7\xfa\xeb\xd9\xe1\xc8\xcf\xf2\xb0\x79\x28\x4a\x9a\xa7\x97\xf2\x24\x15\xee\xcf\x6d\x66\xd6\x50\xcd\x9f\xb9\x73\x69\xc3\x97\x56\x6f\x7c\xdd\xa9\x4a\x52\xea\x9c\x99\x3b\x97\x1e\xc9\xae\xb9\x90\x79\xe1\xaf\x67\x02\x6b\x0f\x84\x91\x10\xfe\xc1\x3e\xa2\xa8\xde\xdf\xef\x78\x6f\x71\xb0\xbd\x7b\x32\x45\xc4\xac\x63\xb6\x34\x47\x3b\xd4\x90\xc2\x34\x8c\xc8\xbf\x8b\xa9\x5f\xb2\x26\xd2\xb5\x50\xac\x4f\x90\x63\x52\x5d\xe6\x57\xa7\x2b\x53\xa4\xab\x98\xb8\x16\xfe\x31\xb5\xba\x87\x6b\xec\x5f\x74\xab\x4e\x99\xee\x1b\x6b\xec\xd0\xc5\x9d\xa2\xad\x61\xfe\xaa\x73\xde\x34\xb6\x78\xb2\xee\xdd\xfc\xea\x23\x70\x35\xa8\xd2\xe5\x3c\xab\x16\x8f\xf0\x09\x98\x32\x32\xf6\x76\x87\xed\x02\xe3\xe4\xfc\x09\xf7\xf5\xce\x16\xb6\xb9\x25\x4c\x6c\x75\xc9\xb3\xe8\xa1\xdd\x6e\xf5\x70\xa3\x7d\x64\x90\x46\x61\xd8\xf4\xc0\x87\xa8\xc1\x1e\x76\x18\x6b\x45\x42\x69\x3c\xef\x70\xb6\xe0\x7f\x7b\x44\xa7\xa7\xea\xb5\x8b\x27\xa5\x7d\x58\x8a\xf4\xb0\xa9\xaa\xb5\x61\x49\xea\x8d\x55\x04\x13\xba\xce\xb8\x13\xfa\x31\xf0\x24\x93\x75\xb1\x1b\xf5\x56\xc3\xb8\xc1\xbe\xe1\xb0\xdd\xab\x68\xc3\x6b\x65\xee\x57\x9c\x4d\x1c\xee\xb4\xda\xa0\x92\x5b\x55\x7e\x9d\xa3\x9f\xdb\x55\x2e\x1e\xe3\x0e\x6c\x6e\x6e\xa4\x1a\xf9\xa9\xc8\xb4\x67\x53\x14\xb6\x04\x32\x94\x5d\x80\xe0\xd4\x4d\x30\x84\xe7\x6f\x3a\xec\xb1\xdd\x76\x92\x27\x71\x31\x81\xa5\x20\x73\x3f\xe1\x6c\x41\x78\x2e\x54\x7c\x69\x35\xb8\x5b\x95\xc2\x6e\x3a\xa6\x98\xd5\x44\xea\xe6\xc4\x0a\x64\xea\x0b\x53\x54\xff\x93\xc3\x76\xb5\x30\x70\xcc\xfd\xec\x56\x66\x7e\x45\x88\xa0\xf7\x52\x47\xc5\x9e\xa5\x9b\xc4\x09\x6e\x45\xb4\x93\xa2\x11\x88\xae\x88\x03\x1d\x46\xae\x32\x22\x98\x3d\x7d\xa1\x4c\xe6\x45\xb4\x20\xb3\xd7\x39\x6c\xd7\x3d\xbd\x64\xa5\x9f\x0b\xf7\xa5\x5b\x69\xca\xed\x98\xd8\x6a\xca\x33\xe9\xa1\xdd\x12\xf5\xf0\xc2\x66\x1b\x7b\xab\xc3\x76\x93\x30\x4a\x32\xf7\xb5\x5b\x59\x08\x4b\x98\xfc\xc4\x92\x55\xab\xdb\xf5\xe3\x92\x70\xd1\x8f\x2f\x58\xa6\xbc\xcb\x61\xbb\xfd\x7b\x7b\xa9\x38\x12\x46\xc2\x7d\xc3\x56\xea\x36\xa3\x92\x5b\x75\xbb\x53\x3f\x2e\x6f\xf2\xf2\x39\xd2\x66\x2b\x68\xbe\x8d\xfd\x07\x5e\xc1\xa1\xaa\xac\xb9\x91\xb3\x5f\xde\xcd\x76\x8b\x6e\x5b\x74\xa4\xc2\xe9\x7e\x78\xf7\x16\x6a\x78\x58\x25\xb7\x6a\xf8\x3f\x46\xf4\x73\xbb\xfb\xa8\xd3\x94\xa0\x6b\xfb\x71\x10\x29\x6e\x34\x75\xe3\x41\xe3\xc7\x83\x34\x5c\x53\xc4\xba\x6b\x4a\x01\xd0\x54\xe4\x60\x91\x0f\x2d\x4d\x84\xc0\xc2\xc8\x78\x10\xe6\xbc\x2e\xff\x53\x36\x1b\x18\x1e\xd1\x00\xc3\x93\xfb\x69\x4e\xb7\x5b\x81\x5c\x1f\x22\x28\x6e\x22\xe1\x46\x2d\x53\xf4\xfe\x0d\xc6\x4e\x66\x74\xe8\x0b\x5b\xd3\xdc\x1f\x33\x6d\xbe\x61\x86\x5e\x60\x52\x61\x86\x3c\x42\x03\x9d\x35\xed\xc5\xd9\x38\x5f\x19\x53\x77\x9b\x19\xba\xe2\xc2\x95\x98\x0a\xb4\x8d\xc2\xd3\xc8\x59\x9f\xa4\xfa\x8e\x28\x8b\xfd\x6e\xd6\x4e\x20\xc2\x56\x19\x72\x19\xe7\x3c\x4f\xc9\xc2\x0c\xd0\x15\x50\xe2\x38\x6b\x62\x7d\xec\xfe\xb3\x88\xf7\x78\xde\x4e\x93\xde\x6a\x1b\x2c\x75\x98\x0a\x90\x89\xa8\xf9\x95\xdf\x93\x2b\x6d\xc6\x83\x7e\xec\x77\x8a\x5d\x4b\x6f\x52\x68\xdd\x83\x7c\x65\xd5\x06\x69\x1a\xa3\xf2\xe0\x51\x39\x5d\xe0\x4c\xd3\x91\x5a\x1f\xe7\xe5\x60\x2d\x3a\x14\x29\x6c\xa0\x02\xa5\x5b\x1f\xbc\xe1\x32\x19\x0a\x8e\x83\xea\xa2\xc7\x68\xe0\xaa\xeb\x25\x8f\x4f\xb1\xf6\xf8\x59\x13\x71\x90\xa4\x75\xea\xb1\x26\x9f\x59\x98\x47\x2f\x70\x4d\xf8\x0d\xd8\x4f\x98\x13\xbc\x20\x0f\x51\x40\x8e\x03\x4b\xae\x9e\xa1\x68\x12\x0e\xe3\x20\x5c\x0b\x03\x00\x90\x4a\xd4\x1c\x92\x27\x15\xf8\x38\x5c\x6d\xe7\x75\x8a\x3d\x02\x04\x1c\xae\x17\xa0\x2e\x92\x68\xe4\xe5\x37\xc5\x98\x76\x84\x8f\xab\x57\x07\x07\x60\xe4\x5a\x9f\xd7\xf5\x11\x2f\x48\x9a\xbd\x8e\x69\xa1\x86\x87\x98\x85\xea\x73\xb3\xc3\x11\x38\x86\xc0\x66\x7b\x99\xc0\x18\x77\x30\x63\x42\xc0\xcb\x86\x9a\x01\x72\x6e\x59\xcd\x92\x47\x8a\x42\xa9\x04\x25\x80\x31\x75\x9a\xf5\x01\xd8\x4b\x2d\x83\x22\x4e\xbd\xb8\x2b\xd6\x8b\xef\xe9\xa8\x25\x95\xa6\x8c\xfe\x14\xbc\x03\x0a\x4f\x80\x06\x7b\xc8\x61\xb5\x56\xd3\xfd\xf9\xad\xb0\x53\xd8\x70\x17\x5e\xf7\xc8\x6c\x69\x23\xb5\x90\x29\x2e\xff\x99\x89\xbd\xd3\x61\x57\x04\xc9\x7a\xbc\xee\xa7\xc1\xcc\xc2\xbc\xfb\x80\xc3\x6e\x3a\x6f\xad\xe7\x8a\x0f\xac\xea\x2f\x1a\x2f\xcc\x76\xa8\x02\xe4\x2c\x36\x38\xaa\xb5\xa8\xdc\xc4\x9c\xc5\x7e\xcf\x61\x23\x82\x4c\x2c\xee\xaf\x6f\xc5\xe2\xa7\x0c\x32\x25\x85\x52\xdb\x69\xac\x0e\xce\x45\xa7\x9b\x00\x6a\x50\x61\x30\xb9\x60\x3d\xf2\x42\x4e\x99\xd0\x96\x20\x4c\xd9\xfb\x6a\xec\xd1\xab\x4d\x51\xd2\x26\x1f\xa8\xb1\x5b\xcf\xaf\x33\xcf\x1e\xde\x44\x95\xfc\xaa\xb3\xe1\x7d\x49\x87\x9e\x3d\xfc\xa3\x7a\x06\x5f\x6d\x8a\x62\x1d\x4b\xa5\x96\xfd\x96\xc3\x76\x36\xc3\x38\x10\xa9\xfb\x6b\x5b\xb1\xa7\xce\x42\x5a\xab\x43\xfe\xad\x83\x0f\xed\x5e\xc0\x4c\x2f\xca\xc8\xbb\xa5\xc3\x44\xa7\x9f\xdd\x13\xd5\xb1\x94\x7a\x37\x30\x8e\x12\xaf\x72\xd8\x6e\xc4\x52\x3e\xe6\x77\xdd\x17\x6c\x41\xbb\x99\x55\xa9\xad\x76\xcd\xe8\xc7\xa5\x96\xe9\xc7\xe7\x5d\x5d\xbf\xe4\xb0\xa1\x66\x16\xba\x1f\xdb\xca\x4d\x49\xd9\xfc\xf5\x22\xb9\x13\x8c\x16\x86\x53\xd2\x49\xf9\x7c\x2c\x0f\x4f\x7e\x53\x8c\x99\xf5\x2a\xa4\xb6\xda\xd8\x2b\xb4\xaf\xa6\x48\x21\x5c\x43\x3b\xc8\x14\x9b\x4d\xc6\x47\x0f\x19\x22\x7b\xac\x21\xcf\xee\xa8\xc8\xe2\xca\xd9\xb2\x22\xbb\x61\xc5\x2c\xeb\xc7\x95\x8a\xec\x9c\x9f\xfb\xb8\x60\x2e\x48\x8b\xbd\x5f\xce\x5c\xd1\x6d\xb7\x32\xf7\x67\xb6\x34\x73\x45\xb7\x7d\xc4\xd6\xfe\x9f\x81\xcf\xec\xe1\x95\xcf\xf8\x91\xa5\x0b\x3d\x92\xfc\xaa\xc3\x86\xe2\x56\x26\xcf\x7a\xe7\x1f\xea\xe3\xa5\x8a\xbc\xd2\x39\x5e\xaa\x46\xcc\x8f\x5f\x70\x1d\x2e\x55\x3a\xc4\xad\x8c\xbd\xd6\x61\xbb\xbb\x69\x82\x11\x47\xee\x8b\xb6\x30\xe6\x0b\x2a\xb5\xd5\xa2\x39\xa4\xc7\x04\x14\xec\x28\xe2\x21\xc2\xed\x16\x1e\x08\x78\x0d\x92\x8d\xd3\x6a\xea\xf8\x5d\xa5\x9d\x1a\x9b\x19\xfb\x75\x87\x0d\xa5\x2b\x81\xfb\xc5\xad\x74\xea\xe2\xa1\x39\xab\x0a\xf7\x3b\x8b\x87\xe6\xec\xb1\x5d\xf4\x83\x24\xe3\x60\x3d\xe5\x73\x62\xc0\xc9\xe9\xb2\xd9\x39\xd2\x15\x53\x2c\x3d\xec\xb0\xab\xd6\xb2\x6e\x5b\x28\xbb\xae\x7b\x76\x33\xcf\x2b\x7d\x2b\x48\x9f\x84\x69\xde\xf3\xa3\x0d\x6b\xeb\xce\x3b\xcc\x2c\x4b\xa7\xb0\x25\x78\x75\x71\x17\x6d\x5f\x1d\x66\xe3\x26\x1e\xc3\x46\x20\x38\xf2\xc7\x52\xb8\xf2\x67\x87\xbd\x39\xfb\x91\xe9\xcc\x11\x45\xfa\x42\x9f\x66\x05\x51\x30\x29\x93\x03\xb2\x33\xa4\xb9\xed\xc4\xf1\x6b\x43\xec\xef\x1d\xc3\x67\xf9\xaf\x1c\x36\x7d\xfe\xc8\xc4\x7e\x57\x04\x47\xa5\x96\x8d\xf7\xe7\x05\x54\xdd\xc3\xce\xa2\x0e\x67\x86\x45\xa6\x13\xc0\x96\x1c\xe3\x05\x8b\x71\xa6\x1f\x18\xfd\xac\xd4\xec\x12\x20\x3d\x9f\x6f\x19\xdf\x58\x5c\xe8\xd4\x50\x8d\xcd\x44\xbf\x01\x6e\x1e\xe2\x7d\xc8\x89\xc1\x80\xbd\x9b\x67\x57\x18\x5f\xb9\xd3\x5e\x7d\xc9\x8a\x66\x35\x83\x22\x2a\xa0\xea\x4d\xbb\xf5\x0b\x75\x56\xb2\x40\x37\xbe\x54\xee\xb0\x52\x4d\xba\x9b\x83\xe6\xb3\x87\xaf\x60\x4f\xdb\x4a\xc8\xc9\xb1\x5e\x0e\x5e\x3e\x0a\x62\xd6\xa4\x44\x70\xbf\xcb\xbc\x97\x38\x9b\xa5\x28\xc5\x0f\x6c\x64\x54\x85\x40\x43\x2a\x5a\x83\x09\xe2\xed\x19\xd0\x97\xcb\x53\x22\xf9\xe0\x28\x97\x9c\x66\x1b\xe0\x0b\x0c\x87\x67\x6b\x82\x7e\x7d\xdb\xcb\x68\xdb\xcb\xe8\x87\xe8\x65\xf4\x5f\x4c\x2f\xa3\x5f\xbd\x64\x2f\xa3\x97\x94\xbd\x8c\xb4\x8f\xd1\x53\x1e\x29\x1f\xa3\x06\xfb\x47\x87\x8d\xd0\xe2\xcc\xdc\xbf\x75\xbc\x79\x5a\xeb\x99\x0d\xec\xa0\x92\xe8\x80\x76\x1f\x62\xe2\x0d\x38\x0e\x82\xff\xe8\xaa\x90\x7c\xcb\xed\xf5\x30\x9b\xdd\xcc\xdb\x7c\x8b\x12\x6a\x4b\x8e\xaf\x52\x4e\x5f\x80\xe3\xeb\x39\xe7\x45\xe7\x77\x3b\xba\xcb\x7d\xb6\x76\x3b\xaa\xae\x6c\x29\x3a\x70\x33\xc1\x59\xf6\x50\xfa\x9d\x61\xb6\xc7\xec\x8c\x6e\x37\x43\x1b\xba\x9f\x8b\x56\x2f\x5a\x12\xb9\xf6\xfc\x75\x3f\x38\xec\x1d\xab\x7a\x51\x12\xc6\x66\x08\x17\xa5\xce\x44\x8e\xce\x29\xea\x58\x02\x2b\x51\xc5\x74\x9d\x75\x88\x08\xda\x92\xb7\xbf\x34\xc4\xf6\x51\x9c\xcc\xf5\xde\x13\x96\x29\x32\xc6\xcc\x51\xfb\x5e\x5b\xfb\xdf\x1b\x1c\xe6\x46\x7e\x96\x2f\xa7\x7e\x9c\xc1\x6b\x80\x49\x7a\x01\xbb\xf1\x22\x16\x0c\x00\x24\x3d\xed\xa8\x9f\x21\x1c\x93\xda\x6c\xa8\xdd\xb9\x2e\x42\x79\xaf\x49\xd5\x97\x5c\xc9\x0b\x35\xa3\xc1\x9e\xcd\x76\xa1\x43\xbf\x70\x8f\x7b\x33\x33\xbc\xdd\xeb\x40\xf8\xbc\x1f\x80\x85\x8c\xde\x29\xee\x32\x80\x8e\x10\xb9\x1f\x46\x99\x61\xe4\x29\x0a\xb3\x9a\x7b\x84\xed\x4c\x85\x9f\x25\xb1\x7b\x8b\x37\xb1\x0c\x9b\xb2\xfc\x45\x18\xbc\x46\x6d\xa5\x6e\x0b\xed\xa8\xce\xe7\xa8\x66\xe3\x3e\xe4\xdd\xb0\xa4\xbd\xe1\xad\x2c\xc6\x95\x61\x75\x19\xd8\x30\x8e\xf8\x51\x26\xc6\xf9\xc9\x18\x22\x5c\xac\xdc\xbe\x34\xcc\x2e\x20\xfe\x0e\x35\xbe\x07\x86\xbd\x3f\x73\xca\x4f\x37\xf2\xb9\x61\x04\x0c\xf8\x28\x3d\x62\xe1\x79\x97\x39\x3a\xef\xac\xb3\x13\xab\x7e\xd6\xd9\x89\x2f\xac\x99\xff\xf2\x1a\x7b\xa9\xc3\x28\x89\xdb\xbf\xc0\xb8\x46\xec\xbd\x79\x8d\x6c\xe9\xdd\x44\xdd\xa4\xc1\x2e\x33\xb3\x46\xf4\x72\xa5\x8f\x3a\x26\xea\xab\x88\x5b\xc1\x5e\xc8\xa8\x7a\x6e\xb6\x09\xd1\xd2\xe0\x4a\x2c\xc3\xc7\xde\x01\x2a\xca\x06\x68\x31\x7b\x44\xcf\x56\x3c\x29\x60\x9d\xd8\x17\x9d\x4a\x64\xe3\x39\x5f\x74\x92\xf8\x30\x6d\xe7\xee\xdb\x1c\x6f\xd6\x7e\x54\xcd\xf7\x85\x2b\x49\x47\xa6\xe0\x27\x5a\x2b\x90\xb2\x68\xa1\xcc\xea\x3b\xc3\x0e\x32\x78\xea\xde\xa8\x02\x75\xbd\x05\x23\x4e\x96\xd6\x07\x56\x5a\xe7\x64\x05\xca\xfe\xf2\x8e\x4a\x52\x62\x55\xd5\x19\x44\xd1\x77\xdf\xb4\xc3\xbb\xa5\xf4\x0c\xb7\xc0\xbc\xd7\x8d\x84\xba\x07\x53\x52\x96\x9a\x60\xa0\xf0\x9f\x75\x6a\x61\xd7\xaa\xfb\x97\x86\x59\xc4\x76\x63\x27\x2f\x8a\x96\x7b\xf7\x16\xce\xd5\xe5\x43\xd4\xf5\x8b\xa6\xc7\x09\xa9\x09\xc8\x45\xa4\x74\x33\xdd\x6a\x76\x00\x5d\xf3\xc0\xc7\xe7\xc9\xde\xbf\x92\x4b\xe6\x36\xfa\xad\x95\x5f\x95\xda\x14\x15\xef\xae\xb1\x5a\xd8\x75\xdf\x5a\xf3\x5e\x5b\x93\x1f\xcd\x2f\x6c\x48\xde\xe0\xc7\xfc\xbe\x3a\x35\x45\x49\xd2\x5d\xf1\x9b\xa7\xf9\xa8\x62\x14\x98\x9c\xb8\x69\x6c\x9c\x47\x61\x7c\xba\x8e\x37\x2e\xa3\x53\x07\x6e\x6e\xec\xbd\x61\x3f\xbc\x9b\x3a\x30\x06\xb1\x53\xc6\xfb\x4e\x2f\xca\xc3\xa6\x14\x86\xa3\xa3\x7b\xf7\xee\xa7\x4c\xf6\xee\x1f\x6b\xf0\xf9\x85\xb5\x03\x05\xc4\x1b\x1c\x15\x44\xa0\x41\x50\x5a\xbd\x28\xea\x1b\x38\xd2\x44\x42\xd0\x8d\xfc\x5c\x4e\xb4\xac\xc1\x67\xa2\x2c\x19\xd7\xdb\x9c\x11\xfe\x54\x04\x87\x8d\xe3\xc5\x20\xf0\x35\x74\xd3\xe4\x4c\x7f\x5c\xe3\xd5\x43\xe9\x72\x5b\xe8\x5b\xd2\x74\x9d\x8d\xc4\x49\x80\x47\xc3\xd3\xde\xf3\x0b\x88\xe4\xe3\x49\x20\x74\x38\x78\xa9\xcb\xe0\x82\x86\x18\x93\x14\xd8\x54\xc1\x03\x5c\x1c\xd1\xb1\x4b\x34\x22\x8e\x4d\x3a\xb7\xcb\xc2\x4f\x27\x7c\x08\x02\x62\x42\x78\x08\xf7\xf5\xbb\xbc\x2f\x3b\xf4\xa3\x58\x79\x15\xe8\xf0\x34\x7f\x92\x14\x89\x00\x50\x1c\x01\xb4\xba\x8f\x98\x15\x2b\x04\x46\x63\x60\x57\xf0\xa2\x19\x08\xe1\x0f\x20\x04\xdc\xa7\x4b\x06\xb8\x07\x31\x23\xd2\x64\x79\x30\xda\xbe\x21\x58\xe2\x24\x56\xde\x5e\x5c\x05\x6f\x42\x15\xa4\xb0\x03\xc5\x0a\x4f\xfb\x52\x06\x48\x0d\xaa\xca\x71\xfa\xa1\x1d\xec\x66\x72\x60\x9b\xf2\xae\x33\x51\x8e\xa9\xf8\x32\x8b\x5f\x99\x6b\xc0\xc0\x2a\x00\x00\xf3\xe3\x65\xfb\x82\x71\x98\x56\xc7\x41\x85\x27\x42\x45\x9c\xa6\xf3\x92\x6c\x8f\x01\xaa\xa3\x9a\xe4\x9d\xcc\x44\x8a\x71\xbe\x4f\x97\x8d\x52\xa4\xac\x60\xa5\x56\x68\x69\xc0\x57\x01\xd8\x8a\x25\x20\x12\x3a\x72\xa6\x02\x0e\xf8\x1a\x8a\xa4\xcc\x98\xe0\x77\x43\xc8\xdc\xfd\xa4\xe3\x7d\xd0\x99\x59\x98\x87\x5f\x04\x0d\x01\x59\x2e\xcc\x53\x9f\x56\x18\x09\x0a\x84\x9f\x02\xb4\xdc\x43\x7a\x51\xf2\x6f\x98\x69\x22\x82\xa6\x42\x3f\x29\xa5\x1d\x08\x8d\x81\x99\x9c\x54\xa3\x8a\xb5\xd2\x99\x98\xad\xf8\x63\x87\xce\xa0\xbf\xef\x78\xbf\xee\xc0\x19\x34\x69\x0d\x1c\x45\x7e\x07\x6e\xfb\x2a\xf8\x48\xe1\x44\x15\xcd\x94\x6b\x17\xbb\x7e\xdc\xee\x78\xcf\x6e\x92\xa7\xe1\x61\x8c\x5e\x0f\x12\x91\x11\xa1\x8c\x3e\xa0\xcb\x24\x30\xd4\x74\x98\xbf\xf0\x81\xfa\xcb\x83\xec\xb6\x8b\xa5\x7e\x68\x3c\x63\xe9\xc4\xf1\x25\xb0\x32\x2c\xa4\x49\x37\x73\xdf\x71\xd0\xbb\xab\xf4\x0c\xb7\x26\xf9\xb0\x8e\x4f\x79\x2b\x89\xa2\x64\x5d\xf6\x1d\x59\x8b\x88\xb5\x67\x2e\xf5\x5b\x39\xdf\xcf\x47\x09\x66\xef\xa7\xb3\x24\xae\xa3\x0d\xa3\x91\xa4\xab\x13\x63\xb6\x8d\xe5\xa3\xb7\xb2\x2e\xdb\x91\xc4\xe2\x44\xcb\x5d\x35\x8f\x70\xcf\x61\xcf\x62\x77\x5c\x1e\x6e\x8b\x72\x03\xd9\x87\x86\xd9\xe3\x37\x62\x9a\x75\xfc\xae\x3c\xd4\x65\xee\xfd\xc3\xde\xf7\x87\x06\xbf\xe7\x60\x2d\x00\x05\x15\xb8\x53\x52\xbf\x5f\xa0\x70\x56\x43\xa5\xf1\x53\x1d\xbf\x7b\x4a\x4e\x25\xd4\x88\xfa\x6a\x33\x85\xfc\x4c\x86\xb8\x30\x0e\xc4\x19\xb5\x90\x3a\x7e\x57\xdd\xbb\xe7\xfe\x2a\x3f\x76\x72\x69\x59\x43\x9b\xf5\x28\x34\x19\x61\xd5\x0a\x62\x68\x88\xc3\xae\xae\x85\xc7\x75\xb7\xa8\xd8\x51\xaf\xe3\x77\x3d\xb5\x87\xe5\x85\xce\x5b\xb8\x9b\x68\x66\x0f\x3f\x27\xe2\xf6\x82\xf6\x1f\x94\x6c\x3f\x05\xf7\x02\x22\x7d\xd5\x27\x88\x76\x18\x05\x3c\xcb\xd3\x1e\x18\x05\xf8\x68\x9c\xf0\x58\xe0\xb6\x15\x66\xc5\x86\x3a\x46\x54\x39\x84\x1e\x1c\x5a\x65\x23\x73\x68\x48\xba\x76\xc1\xbf\x99\xa4\x8a\x04\x3b\x30\x79\xb8\xc7\x65\x8b\x44\x9c\xf5\xc0\x37\x28\xc9\xac\x5c\xe5\xa2\x55\x40\x73\xea\xe6\x02\xac\x0d\x80\x04\xbd\x19\xec\xff\x8f\xb1\x91\xb8\x17\x81\x67\x83\x7b\xa5\x45\x8f\x70\x0f\x7b\x94\x1f\xe0\x41\xc9\x8f\xe0\x52\xc4\x7d\xfe\xe5\x22\x64\x29\x4f\xda\x13\xe9\xa1\x24\x89\x58\xcc\xae\x54\x17\x7c\x73\x49\xf3\x72\x96\x77\xb8\xc8\xb6\xf0\x38\x61\x6d\x05\x95\x7d\x37\x7b\xde\x0f\xaa\x61\x33\xb2\xdb\xd9\x75\xec\xaa\x8e\x7f\x66\x41\x8f\x98\xfb\x18\xd0\xc0\x0f\xec\xb7\xb4\x6b\x99\x2a\x8c\xcf\x97\x8a\xb3\x6b\x00\x93\x31\x0b\xd7\xc4\x31\xe4\xf2\x2f\x0d\xdd\x0b\xd9\xa3\xbb\x7e\x2e\x5b\x6c\xe4\xd5\x7e\xe8\x07\x29\x76\xcc\xe8\xd9\xc7\x90\x9d\xc3\x9a\x68\xbf\x3d\xc4\x9e\x60\xad\x5c\xd1\x59\x11\x41\x20\x82\xba\xbe\x23\xf9\xc5\x21\xef\x3d\x43\x9b\xa7\x31\x8c\xd2\xe4\xc4\xa3\x55\x01\xb9\x75\x50\x72\xeb\x22\x04\x31\x0f\xe9\x30\x30\x8e\xc2\x6c\xb9\xdf\x15\xc7\x44\xee\xc3\xc6\x56\x58\x11\xf1\x64\x0c\x32\x4d\x89\x01\x03\x43\x01\xd4\x68\x1d\xa6\xd2\xea\xa5\xb0\x74\x53\x21\x1b\xd8\xc4\xca\xe8\x0a\xa8\xcf\xe4\xc6\x37\xce\x0b\x23\x3b\x9a\xb2\x15\x6d\x84\x5c\xb6\x8a\x65\x29\x00\x70\x06\x79\xb8\x6b\xfa\x51\xd4\x6f\xd8\xc2\x16\x16\x77\xba\x26\xea\x3d\xb4\x4e\xd4\x41\x1e\x65\xa5\x3a\xad\x08\x22\xf6\x94\x0a\xbe\xde\x8b\x51\x72\x22\x31\xbe\xa5\x80\x85\x99\x3a\x01\x68\xa1\x34\x8a\xf0\xdd\xe5\x6a\x8f\xeb\x3a\x8f\xd9\x1c\x2a\xef\x1e\x66\xff\xc2\xaa\xa8\xdc\x47\x60\xf0\x5f\x31\xec\xfd\xfd\x50\xe5\x2b\x7b\x8b\xa1\xba\x18\x3d\xaa\x0e\x86\x3c\x04\x2d\x49\x91\xa7\xc3\x4e\x51\xc8\x78\x18\x20\x6b\xbf\x40\xc7\x2c\x42\x6e\xa1\x6c\xd5\xcd\x01\xf4\xc1\xde\x82\xcf\x1d\x77\x82\x69\xc6\xa6\xc6\xf8\xa9\xd5\xd4\x8f\x7b\x91\x9f\x9e\x9a\x66\x5c\xfe\x6f\xb9\x2d\x32\xd8\x9f\x08\x0a\x15\x83\xd0\xe1\xf7\xe8\x69\xd1\xaf\xe3\x94\xeb\xfa\x61\x9a\x21\x73\x17\x98\x69\x68\x44\xfc\x14\xf7\x39\x80\x4f\x8d\x73\xcc\x11\x8c\x69\x90\x0a\x2f\xea\x46\x81\x8a\x11\x8e\x01\xf2\x21\x90\xc0\xc6\x21\xfa\x61\x80\x52\x96\x89\xae\x9f\xfa\x39\x14\x9e\xa4\xd9\x98\x0e\xb7\xc2\xfc\x72\x83\x6e\x75\x45\xb4\xfd\xb5\x30\xe9\xa5\x5a\xf2\xcb\x9a\x36\xd8\xde\x31\x7e\x0a\x11\x4c\x4f\x4d\x93\xe3\x1f\x51\x79\x90\xa3\x29\xd0\xd6\xd1\xd9\x1b\xce\x2e\x7d\x3a\xca\xa9\xad\xaf\x81\x85\xcd\x40\x26\xd8\x7e\x65\x2e\x92\xe9\x53\x01\x98\x82\xdd\xc8\x6f\xaa\xde\x57\x37\x0c\xe6\xc2\x0f\xd8\xb0\x88\x7b\x1d\xf7\xb9\xe6\x2e\x74\x82\x1d\x63\xcf\xbc\x8c\x92\x88\x3d\x9a\xd5\xc2\xc0\x96\x38\x9c\xed\xee\xf8\x67\x8e\x02\x24\x49\xb5\x24\x7d\x22\x1b\xe9\x84\x31\xee\x6d\xe7\x17\xb5\xfe\x99\x0a\x51\x2b\xb3\xf0\xcf\x6c\x92\xc5\x2b\x87\x4a\xea\x58\x18\xe7\xf5\x24\xad\x63\x25\xdd\xbf\xa8\x79\xdf\xac\x0d\x7e\x6f\x19\x99\xfc\xbc\x74\xfa\x21\xed\x01\x9c\x38\x91\x1f\x1b\x8e\x8a\xf8\x29\xe9\xe7\xc4\x12\x9a\xe2\x3d\x9a\x3a\x2c\x29\x7c\x23\x92\x1d\x70\xb0\x82\xa5\x99\x91\x72\x03\x17\x79\xfd\x13\x2d\x08\xf7\x90\x87\xec\x1c\xf0\x4b\x5b\x86\x6a\x6c\x78\xa5\x16\x0f\x69\xdf\xa1\xa5\x05\x59\xc0\xaa\xaa\x43\xfe\xd3\x5c\xf7\x6c\xf1\x88\x86\x6b\xef\x98\xac\x8e\x4e\x5e\x7c\x5a\xf9\xf1\x86\xcf\xe1\x49\xa3\xd1\xe0\xf7\x8a\x34\xe1\xe4\x3c\x6a\x0d\xd5\x1a\x7b\x6c\xa1\xd0\x18\x1b\xe3\x0f\x5a\xab\xe9\xb2\x1d\xd0\xb0\x47\xee\x08\xf0\x8e\x1a\xdb\x45\xe2\xc1\x7d\x43\xed\xb2\x2e\x34\xef\x8b\x8e\x12\x3c\x70\x6a\xb2\x74\x54\x90\x40\xbd\x58\x1d\x2e\x49\x06\xa3\x60\xd4\x27\x5f\x52\x92\x4b\x8e\xb6\x80\xe8\x81\x6e\xc4\xbd\x2c\x4f\x3a\xca\xdd\xc1\xf8\xc8\x74\xac\xb5\x72\x23\xd5\x19\x95\xeb\x86\xda\x2a\xc9\x8e\x7f\x04\xc5\x32\xee\x7f\xc0\x28\xd6\x60\xeb\xec\x0a\xa3\x43\x1e\x41\xcd\xe8\xe5\x0e\xbb\x52\x6d\x0d\x4d\x39\xf7\x7a\x0f\x39\xab\x4c\xb0\xe6\x0f\x6a\x02\xa2\xd3\x03\xe8\xa0\x66\x3d\x9e\xc5\x76\xd1\x85\x81\x7b\x99\xe5\xf0\x13\xd8\xae\x0e\x09\xca\xc7\xb8\x3b\x83\xa4\xb7\x12\xa1\xe5\x09\x6d\xcc\xec\x71\x6c\x17\x89\x08\x5b\x58\x3f\x96\xed\xc8\xc3\x3c\x2a\x29\x8d\x3f\xc1\xae\xc0\x98\x49\x14\xb0\xb6\xe8\xfd\xe4\xa3\xd9\x4e\xb4\x87\xbb\x1f\x7a\xb4\xf7\x8e\x47\xe3\xdf\xca\x3f\xa6\x2b\xe2\x99\x85\x79\xbe\x06\xf8\x91\xf2\xb9\x92\x8a\x34\x2f\xe8\x31\x6d\xd8\xab\x71\x92\x0a\x22\xaf\x2d\x84\x99\x99\x44\xeb\x69\xd3\x8c\xd5\xf9\x4a\x96\xc4\xd8\x97\x61\x30\x2d\xe7\x72\x96\x68\x55\x66\x7e\x8e\x18\x5b\x7c\xbe\x77\x3f\x6f\xb6\xfd\xd4\x6f\x02\x9f\x67\x5b\x9c\x51\xae\x01\x75\xde\x4b\xc3\x69\x59\xd1\x93\x8b\xf3\x52\xea\x76\xfd\x94\x00\x10\x9e\x9e\x44\x7e\xbc\xca\x63\x91\x4f\xf4\xd2\xa8\xb1\x20\x5f\x2c\xe2\x85\xbe\x4c\x5b\xe7\xa2\xe3\x87\xd1\x34\x0a\x73\x3f\x8c\x94\xd1\x7c\x60\x2e\x32\x11\x66\xa3\x4c\xf1\x75\xae\x4c\xdb\xd3\x1a\x30\xb3\xe4\xc8\x01\xba\x44\x8c\x2e\x9b\xb1\x40\x90\x4e\x30\x2b\x8e\x23\x69\x99\x36\x1f\x2d\x1e\x99\xe5\x53\x93\xfb\xf6\x8f\xf3\x8c\x62\x20\xf6\x35\xa6\xf8\x5d\x8b\x47\x66\xe5\xd3\xe7\x35\x78\x9d\x87\xdd\xb5\xfd\xd3\xc8\xb3\xbb\xb6\x1f\xcc\xfc\xd5\x35\xc5\x4a\xce\x2f\xe0\x27\x07\xd4\x27\x07\xb6\xf6\x49\x33\x0c\x52\xd9\x9c\xd9\xf9\xb9\xc5\xcd\x93\x43\x8a\x3a\xef\xf8\x4d\x99\xfe\xd8\xcc\xec\xf9\xba\x10\x3f\x93\x09\xeb\xbc\xd7\x83\x11\x8f\x39\x10\xb2\xa1\x0b\x0e\x82\xab\xf5\xba\x5d\x91\x36\xfd\x4c\xd8\xd6\x35\x79\xb4\x5f\x15\x67\xf8\xe8\xc1\x70\xec\xf9\x77\x4d\xd6\x6f\xf6\xeb\xad\xe7\xbd\xe0\xa6\x17\xd6\x0f\xea\x1f\xfb\xb7\xf6\x63\x6a\xef\x0b\xaf\xa3\x1a\xec\xd3\x55\xd8\x77\x19\xeb\xb0\x4f\xff\xda\xb7\x95\x4a\xec\xd7\x95\xd8\x7f\x19\x2b\xb1\xdf\xae\xc4\x4d\x37\xfb\x2b\xcf\xab\xae\x97\x51\x95\x1b\x74\x55\x6e\xb8\x8c\x55\xb9\xe1\x42\xab\x12\x66\x2b\x31\x4e\xdb\xa5\x43\xc7\xa7\x26\xa5\x1a\x02\x7f\xed\x53\x57\x6c\xb4\xfc\x41\xcd\xf6\x26\xf7\xed\x9d\xba\xf1\x86\xa9\xc9\xfd\xfb\xd0\xcc\x7d\xf3\x8d\x37\xd5\xf5\xb3\x29\x8f\xf2\x9b\x9a\x34\x73\x3c\x5f\x3e\xf4\xcd\xbe\xe2\x9b\xea\xb2\x37\x96\xd5\x4c\x45\x10\xe6\x4d\x3f\x05\x81\x86\xbf\xb8\xfc\xa9\xbe\xaf\xec\xc1\xe7\x8f\x1e\x9c\x86\x11\x83\x3e\x18\x3d\x38\x8d\x7f\xef\x7b\xe1\xd8\xc1\xfb\x6e\xb8\x6b\xaa\x7e\xc3\xf3\xe8\xe5\xfe\x17\xde\x77\x60\xf4\xe0\xf4\xe4\xd4\xd4\x7d\xd0\xad\xf8\x7c\x4c\x7f\x7a\xdf\xbe\xbb\xf6\xdf\xa8\x12\xef\x7b\xe1\x7d\xfb\x64\xe2\xbb\x26\xeb\x37\x3c\xef\xbe\xbb\x0e\xdc\x64\xa7\x9e\x7a\xe1\x7d\xa3\x07\xa7\xf7\x4e\xed\x9b\xba\x6f\xea\xa6\xc9\xc9\xfb\xf6\xdd\xf0\xdc\x40\x16\xf9\xdc\x40\xbe\x1b\xbb\xae\x40\x43\x8c\x93\x98\x07\xe1\xaa\x6c\x49\x21\x87\x3b\xe1\x19\xc4\xb7\xac\xf3\x2c\x93\xe3\xc5\x4f\x36\x96\x1a\x1c\xb0\x14\x23\x29\xc6\x7a\xc0\xa2\x4f\xcd\x2e\xb6\x03\xa3\xd5\x50\xde\x5d\x75\xfe\xbc\x83\xcf\x0d\x5e\xb0\x57\xff\xb5\x1f\x66\x41\x5b\x9c\x69\x26\x51\x92\xc2\x18\xb4\xc5\x19\x3f\x10\xcd\xb0\xe3\x47\x1c\x9e\xf2\x66\x12\x08\x1a\x85\x6b\x8f\xc0\xff\xa6\xab\x0b\xb9\xf6\xe0\x28\x4d\xb0\x99\xfa\x11\xd9\xa7\xf7\x99\x3f\x0f\xc8\x86\xd6\x79\xba\xba\x52\x14\xb6\xf8\xf4\x43\x1b\x0a\x49\x57\x57\xa8\xb4\x74\x75\x65\x74\xef\x0d\x37\x8c\xd3\xff\xdf\x2c\x47\x7d\xa5\x9f\x8b\x69\x88\xd6\x3e\xb0\x5f\x33\x43\xaf\x84\x31\x44\xbe\x00\xb5\x25\x57\x4c\xd6\xd3\xd0\xa3\xa7\xe9\x86\x41\x6f\x64\x72\x53\x94\x7d\x08\x54\xd1\xd6\x1c\xdb\x3b\x39\x79\xa0\x3e\x39\x55\x9f\xdc\xeb\x95\x36\x8d\x56\x2f\x8a\xea\xf0\x41\x18\xcb\x1d\x64\xdf\xbe\x7d\x37\xcb\xac\xc8\xab\x07\xb2\x53\xee\x8f\x76\x96\x7b\x79\x9c\x79\x95\x72\x1a\xac\x3c\x20\xa8\xe7\xb4\xe7\x64\xaa\xf1\xa2\x23\x84\x5d\x80\xe0\x7b\x23\x73\xd2\x0d\xb0\x15\x32\x07\xdd\x12\xf0\x8f\x29\x35\x67\x6a\x7f\x7d\x6a\x6f\x7d\xea\x86\xe5\xa9\x9b\xa7\xf7\x4d\x4e\xef\x9d\x6c\x4c\x4e\x4e\x3e\xa7\xdc\x38\xf9\x79\x1d\x3e\x2f\x1a\x67\x9d\x88\xff\x35\x63\x70\x65\xdb\x8d\xc4\x89\x56\xb5\x9a\x74\x37\x1b\x8a\x93\xdc\xfd\xc1\x1d\x11\x9e\xc4\x46\x94\xc5\xd9\x7d\xfc\x26\xf6\xe1\x3f\xdc\x39\x90\x21\xe5\x57\x76\x7a\x9f\xd8\x39\xe0\x4a\xa0\xe2\x16\xe1\x32\x58\x78\xf4\x8d\x80\x65\xd6\xd9\x37\xc0\xac\x73\x39\x8d\x1f\x58\xec\x16\xad\x1f\xa5\x86\x60\x46\x04\x75\xa5\xda\x21\x97\x92\x82\x47\x86\xba\x8d\xe2\x75\xc2\x38\x15\x3f\x2e\xcf\xb2\x63\x68\xc5\xc9\x44\xae\x4c\x53\x4b\x22\x57\x4c\xfe\xfa\x66\x44\xfb\x60\x43\x6f\xa8\x99\x85\xa6\xff\xe2\xee\x06\x82\x1d\xd1\x5f\x87\x1f\xf6\x9b\x6d\xcc\x0f\x8f\x6d\xe5\x3b\x8f\x71\xc3\x30\x07\x19\x54\xdb\xf1\x54\x0f\x83\xd5\x81\x9a\x69\xdc\x18\x0d\xba\x2d\xa2\xaf\x1a\x6c\xdf\x18\x5e\x1d\x59\x66\x37\x1a\xe0\x94\xa4\x17\x58\x9d\xc0\xfb\x09\xed\xbd\x61\xca\x45\x24\x90\x3d\x9f\xae\x49\xe2\x24\xae\xe3\xcd\xd2\x69\xd1\xc7\xac\x94\x83\x00\xf9\x08\xc1\x86\xd5\x69\xf0\x13\x69\x80\xc1\xa9\xea\x8c\x18\xf0\x5e\x57\xce\x34\x91\xae\x0a\x54\xfe\x3b\x7e\x97\xe7\xfe\x2a\x8d\x59\xd5\x0c\x24\x3f\x4e\x68\xa2\xae\x4a\xd2\xa2\xd1\x44\xbb\x2f\x33\x6f\x79\xb1\xbd\xa8\x51\xcb\xde\xb1\xef\x6f\xe5\x81\x89\x8c\xf8\x95\x92\x60\x8d\xb1\xee\x0f\xc3\x88\xff\x73\x43\xec\xba\xad\x98\xa0\xdd\xef\xd7\xbc\x3f\xae\x6d\xc9\x58\x9d\xe5\x49\xb7\xb8\x55\xc7\xca\xf1\x40\x34\x13\x70\x93\xc8\x72\xd1\x45\x43\x69\x37\xed\xc5\x1a\xb4\x5b\xd1\x0b\x2b\x9f\x12\x0b\xa0\x9a\x2e\x00\xe4\xc1\x0c\xb6\x0a\xbc\x89\xc5\xf5\x87\x4e\xb5\x99\xca\x25\x95\xdb\x7a\x06\xbc\x53\x68\x1f\xcf\xd6\x43\xa4\x44\x04\xef\x1b\x03\x01\x9a\x4a\x2f\xec\xaa\x61\x0b\x6e\xf7\x44\x60\x5e\xb9\xc9\xd1\xac\xb0\x26\x41\x3d\x37\xd4\xd1\xaa\x98\xe1\xfd\x41\x06\x7b\x6e\x9a\x4d\x1a\xe8\x88\x08\xd6\xf9\x24\x5d\x09\x83\x40\xc4\xb6\xd1\xfd\x31\x6c\xf8\xba\x54\xb4\xec\xa3\xf2\xe3\xd8\xae\xeb\xb0\x18\xfb\x79\x97\xed\x00\x53\xda\x23\x67\x7d\x7a\x3c\xbb\x02\x05\x3c\xf8\xf5\x6c\xb4\xc9\x86\xf1\x66\x36\xd9\xff\x5e\x63\xb7\x5f\x74\x55\x6c\xdb\xd1\x1d\x7a\x66\xb8\x67\x6b\xde\xb1\x41\x2f\x6d\xe7\x6c\x63\x3a\x75\x44\xde\x4e\x02\x8c\xfa\xb1\x3f\x2e\x91\xaa\x7d\xd6\x61\x9f\x71\xd8\xa3\x12\xb4\x39\xdc\xb1\x0f\x7b\xc3\x7d\xbf\xf3\x83\xea\x63\xef\x99\xa5\xb2\x14\xfe\xb3\x61\xf6\xa0\x40\x8d\x3c\x81\x48\x79\x80\x08\x28\x9a\x06\x41\x4b\x38\xd1\x1b\xec\x6f\x76\x9b\xb4\x2a\x9b\xb8\x0f\xcf\x2c\xcc\xab\x1e\x00\x92\xf0\x4f\xec\xf6\x1e\x74\x4a\x0f\xed\xde\x34\x5e\x8e\xf3\x10\x5e\x2a\xd9\x8c\x51\xc2\x15\xe1\x40\x3a\xd2\x4e\xfb\xa5\x01\x68\xa4\x86\x3c\x20\x3f\x95\x38\x50\xae\xdf\xe8\x9f\x12\x96\x69\x1f\xb3\x22\xe8\x29\x68\x9c\x75\xae\x84\xef\xe8\x42\xeb\xac\xb3\xdb\x8e\xe8\xd0\xc4\x9a\xbb\xb6\xc3\x62\x2e\x35\x2c\xe6\x6e\x66\xf5\xb5\x7b\xc2\x3b\x64\xfe\x56\x73\x75\xc3\x38\x6a\x57\xa4\xf2\x7c\x6a\x95\x1c\x82\xb6\xe3\x6e\x2e\x3e\xee\xe6\x03\x0e\x2b\xa6\xbe\xfb\x56\xc7\xbb\xad\x58\x71\x16\x84\x78\xf5\xa2\x2c\x56\x5a\x1f\xb7\xe4\x62\x89\x99\xfb\xcb\x21\xf6\xb4\xc1\x78\x05\x5b\x93\x30\xe7\x9c\x3b\xcf\x1f\x4c\xb2\xdf\xdd\x5b\x85\x61\x5b\x9a\x43\xe5\x28\x91\xdf\x62\x16\xfe\x7e\x95\xc7\xf7\x6d\x0b\x33\x4b\xf8\x68\xb1\x17\x89\xcc\x7d\x07\xf3\xde\x34\x54\x7a\xa8\xe3\xf4\x34\x47\x27\x31\x2b\xa0\xe6\x80\x17\xb2\x49\x2c\xc8\xbb\x13\x90\x4b\x51\xc9\xc5\xcf\x89\x67\x33\x92\x8a\x02\xd2\xa3\x36\xfd\xa8\xd9\x8b\x30\x64\x62\x4e\x64\xf2\x74\xb6\x28\x80\x74\x93\x66\xa0\xa2\xa5\x50\x0e\xe6\xb7\x2d\xcc\x40\x9e\x78\x99\x0c\x14\x1d\x56\x55\xd6\x44\x94\x34\xc3\xbc\x5f\xf2\xce\x52\xaf\x81\xc5\x37\x94\x72\x42\xe7\xd1\x4d\x05\x12\x63\x47\x7e\xb7\x0b\xad\xd9\xe0\xd7\x95\xe5\xfe\x4a\x18\x91\xc3\x22\x5f\x0f\xe3\x20\x59\x1f\xe7\x59\x52\x38\x65\x14\x0e\xe5\xa9\xaa\x3e\x39\x6b\x66\x42\xca\xb1\x2c\xf7\xe3\x5c\x2a\x62\xf2\x4f\xe1\x13\x43\x54\xe6\xb7\xa4\x98\xa3\xab\x24\x4d\xcc\x5d\x51\x9a\xcc\xad\xd9\x4e\x32\x11\xdb\x1b\xf1\xff\xda\xc9\xde\x50\x63\x23\xaa\x59\xee\xcb\x6a\xde\xbf\x77\xd4\x2f\x7b\x67\xea\x26\xb9\x5c\x2c\x06\x4d\x08\xa4\x13\x4a\xdf\x34\x5d\x8d\x89\xc5\x54\xcd\x11\x3e\x93\xf3\x48\xf8\x70\x36\x10\xf8\x59\x5f\x9f\xa1\x8c\xc0\x59\xb8\xeb\x5f\x0f\x69\x93\x2b\x4f\x1e\x75\x98\x0c\xc2\xac\xe9\xa7\x01\x9e\x49\xc3\x18\x36\x69\x73\x29\xcd\xb0\x83\x17\x18\x32\x51\x94\xb4\x00\x75\x63\x6f\x70\xd8\x95\x18\x05\x81\x0f\xdc\x17\x3b\x5e\x66\x3e\x30\xf7\x65\x1a\x6c\xea\x06\x6a\x5d\x41\xb0\x25\x93\xc1\xd5\x32\x8d\xe6\xb8\xe5\x8c\x80\x63\x77\xcc\x3f\x83\xf9\x22\x65\xa8\xca\xdd\x92\xe1\xbf\x31\xc4\x1e\x6f\x0d\xed\x9d\x30\xb2\x4b\x10\xa3\x92\xb9\x1f\x1e\x52\x21\x0a\x6f\x19\x5a\x1a\x98\x6c\x23\x33\x7d\x46\x2f\xe4\x02\xa1\x16\xf8\x19\xee\xad\x9d\x8e\x88\x03\xa2\xb8\x2d\xda\xd3\x4c\xe2\x2c\x0c\x44\xaa\x21\xb1\xd4\x74\xe8\x75\xa5\x5a\xae\x7e\x05\xc9\x7a\xdc\xe0\x9b\xd4\x44\x8d\xff\x2a\x18\x18\x08\x6f\x29\x49\xb9\xb8\xa7\x87\xfe\xe8\x70\x2f\x0d\x44\x3a\x22\xcb\x36\xbe\xde\x77\x60\x72\x92\x8f\xca\x09\xd5\x4e\x7a\xe9\x98\xdd\xc5\x8a\x5b\xd5\xea\xe6\x6c\x9a\xd7\xf9\x11\xaa\xa3\xdc\x65\xa6\x35\x3b\x7c\x9c\x94\x96\x4d\x98\xf1\x20\x89\xc5\x58\xc3\xfa\x44\x36\x6a\x9a\xef\x9b\x54\x9f\x6d\xb6\xdc\x64\x2a\xd5\xb9\x51\x12\xaf\x96\x18\xd4\x7e\x6f\x37\x1b\xdd\x0a\x22\x10\x60\xcb\xfd\xc2\x6e\xef\x59\x95\x6f\x4c\x18\x00\x33\xd8\x25\x4f\x08\x1e\x0d\xbd\x0d\xc2\x82\x5e\x48\xc9\xa4\x6e\x42\x3e\x9a\x67\x1d\x60\xbd\xb3\xc4\xc2\x67\x46\xd8\xdf\x38\xec\x1a\xb5\x8b\xc1\x95\xf0\xa2\x68\xb9\xdf\xdc\x0a\x34\xc8\xa2\xf9\x95\xe2\xc0\xf5\xde\xe9\xe0\x9f\x99\x49\xa9\x54\x04\x98\x21\xf2\xc9\xb4\xe2\xdd\x54\xbb\xa7\xc1\xed\xae\x75\x85\x51\x7c\xd8\x68\x76\x7b\xe3\x94\xa0\x81\xe4\x47\xe3\x3a\x91\x7c\x69\x7d\x45\x29\xc6\x60\x0f\xa1\xa8\x30\x33\x94\xa3\xc1\x1e\x74\xd8\x48\x4b\x35\xf4\xad\x5b\x01\x3f\x44\x3f\x38\xbb\x99\xbe\x22\x16\x9c\xe6\x45\x7b\x2d\x5f\xd8\x6e\x12\x50\x33\xc9\xe6\x27\xb3\x1f\x27\x2a\xe4\xf1\x22\x0a\xab\x00\x20\x80\x13\x72\x51\xd1\x5f\x1e\x62\xc3\x9d\x24\x10\xee\xc7\xf4\x92\x7f\xfb\x50\x11\x13\x22\x5f\xf1\x15\xd9\x6b\x5a\x40\x89\x1c\x5d\x52\x20\x72\x94\x20\x21\xa5\x8a\x16\x46\x62\xbc\xb0\x65\xc5\x3c\x69\xe6\x4a\x59\xd6\xc0\x6c\x93\x93\x93\x93\x50\x9f\xc9\x1b\x6f\xbc\x11\xdd\x65\x94\x75\xbe\x94\x10\x52\xdd\x30\x35\xd5\xe0\xcf\x9e\x39\x76\x94\x82\x67\x32\x84\x1c\xc3\x9c\x11\x92\xcf\xf8\x38\x1b\x07\x2f\xf2\xc2\x21\xc1\x7e\x4b\x98\x66\xd4\x9e\x62\x85\xdb\x3c\x89\x04\x7a\x41\x4b\xfd\x98\x4c\x6e\x92\xac\x93\x11\xa1\x03\x88\x6c\x2b\x48\xb1\x44\x54\xcc\x68\x93\x42\x0f\x33\xc5\x79\x85\x97\x61\x60\x0a\x29\xd6\x8e\xac\x03\x99\x3b\x5b\x19\xf8\xf8\x8f\xeb\x58\xe4\x54\x64\x52\xc2\xd0\xf6\x87\x99\x15\x63\x90\x89\x52\x40\xd8\x1f\x3a\xc4\x32\xf9\xbb\x8e\xf7\x1f\x9d\x62\xb6\x00\x1a\x79\x98\x71\xca\x53\xea\x34\x6b\x02\xd9\x26\x4d\xc5\x12\xaa\x83\xbe\x19\x84\x7f\x48\xe8\xc9\xa4\x3a\xfb\x2b\x59\x12\xf5\x72\x81\xa6\x7c\xa4\x6c\x96\xdf\xed\x69\x34\xf6\x40\x6e\x05\xd8\x72\x2f\x6f\xd5\x6f\x52\x57\x18\x74\x93\x0f\x8c\xf2\x61\x2e\x3a\x85\x22\x6b\xd6\x44\x5b\x4e\x01\x64\x11\xbb\x4f\xe6\x6c\x05\x1f\x30\x4b\xb0\xe1\x7e\x48\xfc\x10\x73\x61\x96\xf6\xa0\xa3\x0f\xf5\x82\x55\x91\xbb\x9f\x63\x5e\xbb\xe2\xb9\x22\xde\xd4\xae\x8e\x78\x86\x24\x37\xf8\x33\x52\x05\xa0\xf4\x04\x32\x8f\x9d\x0f\x9c\xda\x84\xb9\x55\xe2\xb8\x4f\x02\xfb\xd8\xfa\x9d\x6d\x34\x87\x6d\x34\x87\x6d\xce\x98\xcb\xcb\x19\xf3\x4a\x87\x0d\x4b\xe1\xec\xfe\x9b\x4d\xb0\x7b\x36\x15\x08\x40\x1c\x33\x63\xc7\x10\x29\x98\x4b\x3c\xde\x15\x87\x45\x7a\x5e\x91\x4b\x03\xe2\xa7\x29\x9c\xbd\xcf\x6e\xb9\xc8\xba\x20\xe3\xdd\xcd\xc0\xa4\x90\x8a\x26\x6a\x0c\xc9\x0a\x5d\x84\x64\x56\x8c\x7c\x55\x2d\xce\x39\x77\x9f\xff\x40\x7e\x8b\x3b\xad\x0f\xe4\x58\x1d\x93\x58\xa6\x9c\x67\xf9\x60\xfe\xce\x21\xf6\xe4\x0a\xf8\x06\x0c\x6e\x5e\x12\xf9\x49\x98\xf3\x4b\x0a\x78\xe2\xfb\x35\xef\x59\x03\xde\xe9\xa5\xdb\x93\x22\x86\xc4\xa8\x42\x8b\x96\x2d\xc4\xe5\xc3\x15\x88\x05\x41\x3b\xe9\xdc\xec\x73\xe5\x2b\x6a\xec\x8d\x0e\xbb\x2a\x4d\x22\x79\x18\xc0\x92\xdc\x17\x3b\x83\x31\x18\x74\xd5\x17\xcd\x4f\x74\xee\xde\x61\x7a\xae\xaa\x81\x96\x04\xde\xf5\x53\xbf\x93\x35\xf8\x02\xc5\xf2\x80\x5e\x15\xd2\xdd\xd2\x53\xb9\x67\xe5\xe6\x35\x58\x42\x91\x16\xab\xde\x73\x14\xa2\x44\x80\x81\xe0\x52\x49\xc2\xbc\x41\x66\x48\x81\x51\xfa\x1a\x5c\x4e\x4e\xc4\x73\x80\x29\xec\x15\xac\xcb\x61\xc6\xad\x84\xd6\xa9\xed\x9d\x3b\x2a\xd5\xfc\x4a\x28\x35\xf7\x6f\x87\xbd\xeb\x16\x6d\x42\x12\x4a\xa6\x94\x1c\x94\x9a\xb6\x2d\x7d\x98\xfd\xe6\x10\xf8\x67\x2a\xf5\xc7\xfd\x0f\x5a\x31\xfc\xe0\xd0\xb1\xad\xa8\x83\x9a\x81\x29\x94\x07\xed\x95\xbe\x52\xa6\x0c\x66\x86\x1f\x7d\xed\x70\x8e\x70\x47\x43\x91\x59\x8c\x11\x52\x71\x51\x97\x61\x1a\x38\x46\xc5\x71\x66\x22\xcf\xc1\x44\xf1\x23\xa5\x24\x86\x6c\x97\x32\x38\x3e\xdf\x7b\xbc\xbe\x69\xd1\x38\xcd\x3f\x8d\x9a\x4d\x66\x9a\x3d\x6e\x60\xfb\xb6\xc0\x69\x80\xf3\x6d\x41\x67\xc1\xde\x75\x05\xdb\x67\xa4\x6b\x45\xc9\x3a\xad\x7a\x1d\xe9\x7d\x7b\x4f\xf4\xc2\x78\x75\x03\x44\xd7\x6c\xd5\x0b\x23\x14\xd8\x46\xe5\x82\xa5\x2a\xc0\x9f\x48\x0e\xdc\x3d\xf8\xad\x35\x95\x7f\x96\xb1\xf7\xee\x60\x23\x6d\x3f\x0e\x96\xc2\x7b\x85\xfb\xe6\x1d\x6a\x1e\xff\x7f\xc3\xa7\xd4\xd3\x53\x24\xa9\x3a\x10\x79\x9f\x64\x21\xa8\xa7\x64\xd0\x40\x6d\xb0\x64\x65\x6c\xf7\x5a\xad\x48\x00\xd0\x1f\x5c\x9c\x82\x95\x8d\x54\x04\xe0\x1a\x02\xee\xd5\xac\xc1\xf9\x9d\x80\xc6\x1a\x53\xdd\xe0\xa4\x8a\x74\xee\x2a\x92\xa0\x9b\x86\x09\xf8\x3a\x45\x72\x77\xa4\xa1\x85\x24\x7b\x32\x2e\xfb\xae\x40\xd9\x48\xf9\xa8\x56\x85\xba\x7e\x98\x8e\x21\x42\x67\xa6\x70\xf9\x00\x85\xd0\xcf\xda\x45\x74\x82\x5e\xa0\x54\x61\xed\x86\xa1\xe8\x61\x33\x5a\x23\x72\xb1\x00\xd8\xa7\xa6\xb5\x0f\xef\x35\x2f\x51\xdb\x22\x15\xc4\x29\xae\x1a\x20\xeb\xde\xcb\xb1\xb9\x46\x1c\x42\xd6\x96\x87\xca\x2c\x57\xf9\x2b\xc7\x01\x99\x79\x83\x1b\x7d\xae\x4e\x89\x71\xc2\x23\x3f\xd5\xf8\xd8\xa7\xf0\xbb\x53\x38\xd3\x0b\x23\x51\x16\xae\xc6\xb0\x83\xe3\x29\x5b\x8e\x95\xec\x10\x65\xf2\xf4\x79\x4b\xac\xf3\xb6\xf0\xd7\xfa\xd0\x6b\x19\x0f\x12\x3c\x57\xf8\x79\x0f\xc2\x78\x3a\x49\xa6\x61\xe6\xb0\x8c\xb1\x06\xe7\x4b\x84\x83\xdd\xcb\x44\x5a\x6f\xf9\x4d\x34\x34\x99\x98\xd8\x1a\x05\x9b\xae\x03\xd7\x04\x5f\xed\x85\x81\x1f\x37\x01\x33\x86\x96\xbb\x3a\xff\x8a\x28\x50\x10\x03\x78\x46\x6f\xfb\x1b\x7d\xf4\x93\x16\xbf\xc9\x5e\x9e\x3f\x5b\x63\xd7\x40\xa5\xf0\x5e\xf6\x68\xd8\x09\x73\xf7\x1f\x35\x99\xff\x5f\x38\xa7\xca\x6f\x4f\x29\xc3\x1b\xf9\x7a\x5b\x06\x5f\xc5\x19\x6d\xc5\xa5\xad\xfb\x21\x7a\xfe\xc7\x1a\x40\x11\x29\x82\xd5\xd1\xa3\x34\x15\xa1\x57\xf3\xb0\x23\x9e\xc2\xc5\x19\x20\x31\x2d\x32\x06\xf2\x20\xdc\x48\x54\x73\x6d\x3f\x16\xb5\x8c\x10\x72\xa0\x74\xc6\x36\x20\xf7\xa9\x63\xb0\x92\x37\x4c\xda\xbd\xf2\xbb\x35\xb6\x13\x87\xca\xfd\x4a\x4d\xf5\xc5\xc7\x6b\x6a\x8a\x6c\x34\x3d\xd2\x9c\xd3\x31\xc5\x76\x8b\xf0\x44\x4a\x69\x80\x95\xcb\x0c\x13\x8b\x80\xed\x0c\x82\xc1\x8a\xeb\xe0\x02\xa7\xa7\xaa\x65\x4b\x34\xf6\x21\x9c\x28\xa7\xb8\x00\xf9\x0d\x0e\x0e\xbc\x9b\x8a\x66\xd4\x0b\x44\xa6\x16\x9f\x16\x16\xb8\x54\x7b\xf2\x24\x72\x9a\x04\x4a\x80\x0c\x61\xbd\x30\x03\x31\x0e\x97\xde\x70\xf4\x2b\xd8\xa5\x41\x14\xa8\xd3\x5d\x98\xa6\x22\x12\x6b\x7e\x9c\x6f\x69\xb2\x1d\xd8\x6f\xf7\xeb\x83\x57\x31\x6e\x48\xe8\x58\xe4\xc4\x63\x04\x5c\x5a\x88\x4a\xe9\xfe\xcc\x55\xde\x8b\x6b\x0a\xa2\x32\xcc\x36\x1c\x80\x53\x30\xa1\x17\x9e\xbe\x3c\x8c\x57\x92\x5e\x1c\x18\x58\xfc\x70\x0c\x4d\xa1\x4b\xcd\x13\x96\xe5\xaa\xe7\x83\xf3\x87\x90\xc2\x61\xa6\xe0\x69\x56\xc7\x6f\x25\x77\x61\x7a\xc8\x39\xab\x60\x21\x33\x8d\x43\x1c\xf5\xeb\x50\x04\xe0\x5e\xf5\xd2\x28\x1b\x07\x2e\x6b\x4e\x64\xd6\x3c\x4f\xfd\x56\x2b\x6c\x8e\x73\x04\x2a\x91\xa2\x60\x69\xe9\xe8\x38\x4f\x5a\xf2\x0c\x08\x96\x10\x64\xca\x59\x43\x98\x54\x8d\x7e\x22\xf2\xa6\xad\x82\x3e\xc0\xb6\x4f\xf8\xdb\x27\xfc\xed\x13\xfe\x65\x3d\xe1\x7f\x43\x9d\xf0\xbf\xb6\x19\xd1\x5f\xa5\x88\x82\xa3\xfd\xcf\x39\xf2\x1f\xb5\x15\xa8\x23\xbd\x46\x0c\x34\x70\x76\x7f\xe0\x6d\x2a\x31\xc0\xb2\x3f\x2c\x4c\x06\xbf\xbd\x99\xf5\xbf\xba\x71\x68\x2b\x38\xeb\x0c\x66\x97\xff\x61\x37\xf0\x9c\xf3\xfc\xf3\x5b\x23\x9e\xe2\xde\xac\xad\x11\x46\x43\x4b\x00\x93\xd4\x82\xb2\x31\xe2\x5b\x8e\x65\x8c\xd0\xc6\x15\x3c\x45\xcc\xa0\x7a\x33\xbb\x34\x3f\x07\x30\xf4\xee\x87\x1d\x6f\xb1\xfc\xb0\xc4\xd4\x8a\xee\xc6\x61\x1c\x85\x31\xd2\xa5\x50\x2a\x4d\xb3\x60\xa9\x4c\x60\xed\xaf\x02\x6f\x9a\x63\x87\x08\xbb\x69\xda\xab\x03\x76\x53\xa8\x18\x49\x57\xc3\x2c\x87\xbb\x4c\xd3\xc8\x5e\x60\xe5\x9b\x0b\xfa\xfd\xc3\xec\xd6\x2d\xad\x5a\x94\x6c\x14\x3b\x76\xa8\x3f\x0b\xb2\x6b\x76\x7e\x6e\xd1\xfd\xce\x90\xf7\x6f\x9d\x81\xaf\x79\x5b\x44\xe4\xef\x49\xf2\xce\x82\xec\x02\x7d\x1d\x7d\x40\x55\xf8\x95\xf2\x1f\xd0\xf7\xcd\xbd\x4c\x8c\x13\xf5\x17\x46\x1c\x1b\xb9\x41\x11\xc5\x17\x1d\x3f\x6f\xb6\x1b\x67\x1d\x56\xbc\x3d\xeb\x5c\x95\x99\x95\xb3\x3a\xf1\xc1\x1a\x7b\xb1\xc3\x8c\xd4\x6e\xea\x09\xa9\x70\x41\xbe\x70\x48\x26\x47\x00\x48\x81\x5a\x01\x14\x42\x6e\xc8\xf3\x0b\xe0\xd2\x0e\x1a\x02\x57\xa8\x96\x5b\x68\x90\x65\x4f\x79\xb7\xc3\xec\x3a\xba\x0f\x38\xde\x8b\x1d\x15\xa8\xa7\x76\x6d\x4c\x32\xce\xb3\x5e\x98\x83\xaa\x81\xd6\x2a\xd5\xad\x48\xa5\x8c\xde\xac\x80\x27\xbb\x92\xac\x61\x43\x6c\xdc\x34\x5f\xc7\xfd\x8d\x17\x11\x80\xdd\x24\xcd\xc7\x01\xa6\x4e\xb6\x69\xba\x80\x32\x57\xc4\x91\x8f\x62\xd7\x6f\x6d\x9e\xa0\xb4\xf9\x87\xab\xbd\xd9\x42\x6c\xc8\x33\x67\xde\x4b\x63\x23\x40\xb8\xe9\x47\x11\x75\x4d\x90\xc4\x7b\x72\x95\x82\x6c\x12\x26\xc6\x95\x1a\xac\xdf\xbf\x6a\x7b\xef\xbe\x84\xbd\xfb\x64\x81\xd7\xfa\x0c\xef\xa9\x84\xd7\x5a\xd7\x78\xad\x86\xb7\xae\x3e\x48\x1b\xd6\x60\xd9\x67\x0a\x89\xd8\x9a\x19\x5f\x33\x55\x82\x2f\x39\xec\x29\x17\xa1\x12\x1c\x0d\xb3\x0d\x00\xce\x60\x24\x78\xc4\x94\x01\xa3\xcf\xd8\x9f\x3a\x1a\x7e\xf6\x9b\x8e\xf7\x55\x67\x46\xb1\x0a\x0c\xec\xac\xf5\x76\xbf\xd4\x45\x72\x5a\x92\xad\xce\x3b\xe2\x87\x51\x2f\x15\x1e\xf5\x67\x01\xc9\x50\x40\x38\x28\xf0\xba\x94\xf0\xec\x6c\x90\x4f\xc5\x3a\xd5\xe0\x33\x7c\x11\x91\x70\x9b\x91\x9f\x22\x22\x84\x1f\xf3\xdb\x96\x97\x17\xd4\x60\x41\xc8\x97\x85\xfc\x92\xac\x89\x34\x0d\x03\xc1\x43\x7b\x49\x7f\xa1\xd0\x0d\x00\xbc\xcf\xc6\xc7\x2d\x06\x9b\x9f\x00\xd3\xca\x34\xf7\x96\x7a\x40\xd1\x8e\x46\x63\xd5\xaa\x47\x7a\xcb\x37\x9b\xb0\x7d\x16\xba\xc4\xb3\xd0\x1d\x6c\x58\x4e\x18\xf7\xb8\x32\x6d\xdc\xbc\xd4\x5b\x5d\xc5\x30\x07\x98\x55\x24\x95\x61\x56\x69\x9b\x06\x0e\xc4\x38\x9f\x84\xa0\x08\x74\x4f\xb2\x8f\xf7\x0f\x03\xf6\x04\xa0\x3d\xbb\xef\xae\xb1\xa7\x5d\x84\x4c\xc0\xe9\x38\x87\x99\x78\xff\xb7\x73\xf8\x4c\x2e\xe2\x40\x04\x18\x90\x68\x98\x25\x74\x70\x13\xae\xd9\x06\x87\xc8\x26\x05\x19\x2d\x7b\x9d\x2e\xda\xa5\xa0\x4e\xd6\x91\x3e\x08\x73\xc2\xcc\x1b\xa6\xfd\x02\x16\x31\xba\x9d\x68\x8b\x26\x94\x88\x3d\x21\x02\xe5\xc3\xb8\xda\xf3\x53\x3f\xce\x85\xbe\x54\x92\x0b\x16\x01\xb2\xfb\x6a\x8e\x89\x33\x40\xcb\x60\x30\x3e\x1a\x81\xb3\x50\x3d\x29\x77\x1a\xe7\x9c\xe3\xe7\xd7\x62\xaf\x77\xc7\xaa\x9c\x5c\xb1\x9b\xca\x5a\xeb\xfd\x57\xb2\x27\x19\x5a\x2b\x51\xe5\x14\xb6\xf2\x19\x20\x53\xe9\x88\x38\x77\xbf\x7d\x85\xa6\xae\x2e\x9e\xf2\xa6\xdf\xcd\xb5\xb1\x59\x8e\x2a\x2a\x6e\x48\xc2\x02\x0c\xf2\x22\x57\x46\x95\xc2\x46\xab\xb8\x0e\x93\x89\xc2\x71\x53\xbf\x04\x20\x56\xc6\x36\x14\xa5\x50\x4c\xf1\x3a\xc3\x40\x01\x05\xbd\x57\x7e\x6f\x69\x01\x5f\xd9\x0d\xac\x5f\x24\xb9\x7e\x6d\x33\x46\x95\x4d\x9a\x4d\x67\x9b\x57\x94\xa4\xde\x86\xca\xd1\xc6\xde\xe0\x0b\x89\x01\xcc\x84\xea\x40\x1e\xe6\x7d\x08\x2d\x8d\x84\x56\x35\x36\x74\x90\x96\xa3\x04\x07\x01\x9f\x92\xdd\xa8\x4e\x9c\x36\x69\x63\x5b\x92\x6d\x5b\x75\x7e\x78\x9a\xe1\x6f\x99\x2a\xdc\xaf\x5c\xb2\x55\xe7\x67\x06\xb2\x70\x3c\x72\x36\x9d\xf7\x29\x9b\xce\xdb\x36\xa3\xac\xdc\x4c\x40\x74\x45\xd3\xbb\x7b\x53\xa7\x0d\x5c\xbd\x13\xb4\xd0\x49\xf6\x29\x4f\x8e\x0a\x89\x61\xe0\x11\x66\xfd\x2c\x17\x9d\xc6\x39\x27\x38\xbf\xe0\x9f\x71\x0f\x6a\xc1\xaf\x2a\x5c\xb2\x5d\x94\x2b\x5f\xde\x0e\xbe\x54\x63\x17\x4a\x91\xe4\x3e\x50\x73\xaf\xb2\x50\xc8\xbc\xbf\x75\x8c\xf7\x84\xe4\xde\xef\x8a\xc2\x5b\x0d\x61\xac\x01\x87\x6c\xdf\x5e\x1b\x85\x0c\x6f\x21\xe1\x32\x30\x8c\xf1\x06\x3c\x49\xf1\xd6\xbc\xe3\xa7\x59\xdb\x47\x47\x08\x29\x5d\x7a\xb1\xf1\x04\x6e\x6a\xba\x69\x12\xf4\x9a\x18\x6e\xd9\x4c\xe2\x8c\x28\x6e\xe5\x44\x8a\x05\x62\xb3\xaa\x4b\x08\x42\xfc\xe8\x27\x3d\x29\xc7\xda\xfe\x9a\x18\xe7\x16\x33\x02\x42\xfc\xd2\x66\xaf\x6b\x4e\xfc\x49\x3e\x59\x4c\x52\xba\xd0\xb1\xf4\xe5\x4f\xd4\xd8\x01\xdb\xe7\xde\x00\x6c\x56\x06\xa1\xe3\x49\xac\x5c\x85\x67\x14\x9a\x6c\xe6\x9e\x73\xbc\x17\x54\xbe\xe1\x61\x4c\x57\x34\xb0\x79\x98\x59\x16\x68\xb4\x99\xc1\x3b\xab\xa0\xbf\xb5\xcc\x32\xe4\x0b\x06\xd5\x16\xa0\xca\xa1\x62\x5a\xb4\xf6\xcf\x84\xdd\x44\xce\x9a\x93\xde\xb5\xca\x41\x53\x7e\x79\x72\xf1\x28\xfa\x15\x68\x2f\x49\xc8\xd9\xec\x82\x7d\x6c\x78\x4d\xa4\x2b\xee\xf5\xde\x13\xee\x10\xe9\x8a\xfa\x32\x53\xcb\x1d\x54\x46\x99\xc2\xfc\xe8\xc1\x9d\xa6\xe9\xc0\x64\xad\x44\xff\x68\x60\x5f\x59\x56\x37\x23\x81\xfb\xff\xee\xf0\x6e\x1d\xf4\x92\x66\x5d\xf1\xdb\xe0\x65\xd1\x0e\xd7\x8d\xb3\xce\x88\x38\x13\xe6\xb3\x49\x60\x37\xfd\xed\x3b\xd8\x22\xbb\x42\xa7\x9b\x9f\x73\x67\xbd\x03\xba\xa8\x3d\x19\x9f\x9f\x53\x87\x36\x82\x84\xd8\x13\x00\xc3\xfc\xf4\xc4\xc4\x2d\xfa\xb3\xbb\xc3\xe0\x56\xcb\x39\xf4\x4e\xa6\x8b\x73\x9f\xa9\x14\xe9\x03\x87\xcf\x84\xb9\x3a\x94\xe9\x9d\x02\xc9\x4a\xa8\xfa\x86\x48\xd1\x99\x5b\x5a\x74\xce\x98\x14\x5b\x59\x5b\x04\x33\xb9\xdb\xba\x78\xb2\x97\xeb\xe5\x7f\xb9\x9f\x93\x31\xcb\x2a\xd1\xae\x93\x08\xd8\x89\xc2\x4e\x30\xe7\xdd\x78\x8c\x68\x5c\x52\xb1\x4a\x97\x87\x5b\x6c\x47\xd1\x3f\x0b\xfa\x38\x7d\xc4\xbb\x79\x74\x25\x0d\x45\x6b\x4c\x33\xba\x5c\x40\xcf\x58\x39\x66\xe1\x6a\xec\x47\xee\x11\xd5\xdf\x53\x4b\xf0\xe0\x62\xbb\xfa\x67\x80\x92\xdf\x4f\x73\xe8\xea\xfc\xe2\xbb\xfa\x66\xbb\xab\xbb\xa9\x58\x0b\x93\x5e\xc6\xc5\x19\xd1\xec\x55\xd6\x83\x53\xb9\xec\xf5\x43\x16\x35\xc8\x86\xcd\xe9\x70\x9a\x26\xa9\xfb\x97\x35\x6f\xce\xf8\x5d\x68\xea\x0a\x35\x1d\xbc\x9f\x7b\x31\x5a\x80\x29\x68\x49\x73\xda\x97\x6c\x38\x6a\x65\xbc\xb9\xc6\x3e\xe2\x14\xe3\xfe\x5e\xc7\x7b\x93\x43\x72\x1e\x0f\x49\x9a\x1a\x63\x50\x09\x33\x5a\xf1\x9d\x2b\x29\xbe\x74\xbc\x22\x45\x8c\x10\x30\xa2\x64\x75\x15\x68\x05\x13\x29\xe0\x49\x29\x95\xba\x91\xf2\xef\xce\x44\x4c\x5e\x30\x26\xf5\xb7\x39\x09\x56\xd8\x70\x1e\x76\x84\xfb\x9c\x8b\x1f\xac\x27\x2e\x2b\xfe\x23\x6c\xd7\xba\x9f\x99\x6d\x6b\xb0\x8f\x5f\xcd\xae\xdb\xca\x1d\x90\xfb\xda\xab\xbd\xa7\x18\xbf\x4b\xec\x51\xea\x4e\x59\xb9\x79\xf0\x75\xb9\xa8\x33\x0c\x80\x0e\xb3\x92\x9f\xe1\xe7\xaf\x62\x7f\x54\x63\x57\xd3\x1d\xba\x22\xa8\xfc\x8d\xda\x26\xec\xd6\x95\x15\xa3\x2f\xbd\x37\xd6\xe6\xac\xac\x94\xd8\xa6\x5b\x6f\x8b\x07\x18\xd9\x76\x8d\x5d\xa5\x30\xd0\xa2\xd9\x5b\x9e\x6e\xd3\x5e\x24\xc0\x8a\x55\x44\x30\x96\xdc\x2b\x4a\x05\x6e\x08\x8b\x83\xaf\x37\xd6\xca\x8a\x26\x83\xaa\x94\x5d\x9b\xa8\x3e\x90\xb2\xa8\x90\xda\xb1\xac\x90\x3a\x04\x31\x36\xbb\x9f\x7c\xc0\x22\x79\xe0\xfa\xf8\x0e\x76\x4d\x88\xcf\x67\x23\x3f\xcb\x80\x87\xe4\x5d\x3b\xbc\x37\xec\x98\x2f\x3d\xd5\x3e\x1e\xc6\x65\x8a\x99\x86\x37\xa3\x5e\x96\x23\x08\x34\xec\xc9\xe8\xb2\x61\x58\x28\xac\xd4\xea\x28\x47\xf7\x0a\xba\x4a\x58\xef\x50\x6a\x29\x1d\x41\x67\x09\x33\x47\x3c\xe0\x45\x7e\x53\x39\x6c\xc8\x03\x4a\x13\xf2\x3f\x65\xd3\xe4\x52\xb3\x1a\x4d\x59\xde\x29\x23\x22\xa7\x01\x51\x5f\x72\xd8\xd7\xfd\x34\xc8\x34\x2c\x52\x18\x01\xf2\x0d\x71\xda\xfb\xb9\xf1\x09\x47\x77\x42\x50\xc3\x74\x70\x1b\x38\xee\xc8\xd2\x45\x00\x5c\x28\xc9\x9a\x3e\x12\xa1\xf7\xd1\x32\xc9\x37\x6a\x99\x5c\xf3\xa2\x13\x4a\xfd\x6a\xdd\x4f\x21\x5a\x2b\x54\x91\x1f\x22\x42\xcf\x31\xa3\x48\x40\x74\x09\xc2\x16\xf0\x55\xe4\xfa\x54\x39\xaf\xba\x86\xa2\xf7\xd4\xb1\x17\x60\x44\x70\xf6\x22\x82\xa3\xea\x6f\x72\x99\x44\x86\x24\xe8\x0c\x73\x02\x16\xae\x1e\x38\x2e\x5a\xa3\x22\x09\xd5\xf1\xd3\xd3\x18\x8e\x49\x0b\x71\xbc\x22\x26\x94\x3c\x4f\xab\x10\x50\xcd\xfe\x38\xa2\x1c\xb8\x0c\x59\x36\x8e\x8c\x1c\xa5\x39\x4a\x73\xc4\x74\xff\xb2\x84\xde\xff\x76\xd8\x0e\x98\xe6\xee\xf7\x1d\xef\xa5\xce\x8c\xf6\xa5\x03\x68\x46\x5c\x00\x86\xa3\x33\x5d\x4c\x59\x37\xb4\xf3\x2d\xde\x8b\xcd\x00\x55\xa9\x51\xc2\xa7\xea\xfa\x68\x1c\x00\xa4\xc9\x6b\x05\x67\x40\xc1\x5e\xad\x11\xa7\xc9\x67\xc6\x74\xd7\x3c\xc0\xf6\x5f\xe8\x0d\xba\x14\x21\xe7\x9c\x6b\x07\xe2\x4b\xed\x76\x77\x21\x74\x0e\x63\x1f\x18\x62\x43\x79\x94\xb9\xef\x1a\xf2\x3e\x5e\x5b\x3e\xba\x64\xfb\x62\x36\xf8\xac\x8e\x80\x33\x17\x3d\x78\x4f\x53\xa4\x99\x71\xff\x2a\xbf\xc7\x4b\xaf\xfd\xfb\xf7\x41\xa7\x68\xcc\xa4\x8e\x90\xba\x7f\x31\xc1\xa0\x8b\x55\x40\x6c\x31\x2f\x65\x8f\x67\xe3\x78\xb1\xa7\x64\x8e\xca\xe3\x0c\xa2\x04\xe5\x0a\x72\x09\x69\x4d\x9a\xcd\x84\x54\x28\xec\x4a\x75\xfb\x66\x18\xc9\xf2\x76\x9a\xf4\x56\x51\x45\x5b\x3a\x3e\x0f\xd5\xd4\x20\x20\xe3\x6a\xd9\x84\x1b\x04\x1a\x6f\xf5\xa2\x56\x18\xe9\x7d\x5a\xa5\xd0\x0d\x5f\x3a\x3e\xdf\xd8\xba\x67\x6d\xe5\x50\x2d\x1f\x5d\xda\xe2\x48\xbd\x62\xb7\xa5\xc9\x10\xc5\x92\x1f\x75\xdb\x3e\x38\xc3\x23\x70\xc8\x1f\x8f\x78\xaf\x77\xd4\xaf\x2a\xff\x2e\xf9\x0e\x20\x83\xb5\xa4\x0b\x63\xbe\x36\xd5\x98\xba\x51\xfe\xd1\xf2\xd7\x30\x60\x62\x20\x7f\xce\xc4\xda\x14\x57\xf9\xa3\xe5\x0a\xc6\x29\x4e\x20\x76\x15\x91\x77\x28\xf0\x01\x33\xde\xbb\xb7\x71\xd6\x41\x36\x08\x6b\x47\xfe\xf2\x4e\xd6\x32\x4c\x24\xcf\xb9\xb4\x4b\xae\x9f\xd8\xc4\xe9\x65\xdb\x10\x78\xe9\xb8\x23\x44\xe7\x71\x87\xf7\x63\xc8\xe2\x6e\x45\xfc\xc3\x9c\x32\x17\xc2\x04\xab\xb3\xeb\x07\x2e\x84\x8d\x53\x77\xdb\xd2\x78\xf1\x96\xc6\x73\x4e\xe7\xfc\xf6\xae\x67\xb8\xb7\x69\x7b\xd7\xc0\xa5\xad\x4d\x5f\x6a\x7d\xdb\x26\x2f\x1c\x2f\xc6\x7e\xf3\x2a\x8b\xa9\xb0\x38\x52\xa1\xb5\x66\x76\x69\xfe\xb8\x3c\xb5\x7f\xe0\x2a\xef\x2b\x3b\xe6\x0e\x2f\x2c\x1e\x9e\x9d\x59\x3e\x3c\xc7\xeb\xa8\x6f\x21\x36\x8d\xc2\xa5\x49\x5a\x9c\xd2\x43\x20\x7d\x21\x94\x56\xfa\xca\x2e\x37\xb1\x36\x35\x41\x69\x1a\xda\xaf\x3b\x15\x91\xf0\x33\x50\x91\x75\x7c\x87\xad\x0a\x34\x74\xc6\x18\x67\x50\xc1\xf0\x18\x45\x86\x03\x4f\x86\xe0\x19\x51\xa4\xb0\xe8\xe0\x6a\xc5\x4a\x40\x2a\x72\xac\xae\xa7\x8a\xb8\x79\x55\x14\xcd\x3e\x44\x25\x89\xfa\x0d\x3e\x83\x21\xfd\x44\xd3\xd4\xd7\x70\x03\x32\xf3\x3a\xe6\x5b\x57\x0c\xbd\x29\xcf\xc2\x40\x34\xfd\xb4\x38\xc6\xa2\xd2\x4e\x6c\xfc\x28\x68\x2d\x2e\x13\xde\x25\x7b\x68\x55\x2d\x14\x92\x49\xd1\x04\x42\xf7\x84\x35\xab\x32\xed\x46\xbd\xd5\x30\xe6\x16\x4d\x70\xd1\x75\x44\x2f\x05\xfb\x2d\x06\x9c\x67\xba\x6b\xe6\xcb\x94\x27\x10\x28\x44\xe6\xc5\x8e\xf0\x63\x4d\xa3\x80\x97\xf0\x78\xa4\x31\xbc\xb3\x4c\x1b\x1c\x6d\xec\x31\x84\xc6\x50\xc5\x9f\x49\x55\x5c\x2b\xd0\x8d\xa2\x64\x9d\x8b\x98\x76\x73\x3f\x97\x25\x05\x89\xc8\xe4\x51\x4a\x0f\x47\x58\x50\xef\x9b\xed\xf0\x63\x7e\x62\x3d\x16\xa9\x41\x55\x29\x73\x20\xd7\x65\x92\xcb\xcd\x24\x4d\x45\xd6\x4d\xd0\x2b\x2a\x2e\x7a\xb3\xf2\xda\xec\xdb\x3b\xb7\xb7\x96\xed\x3b\xa6\x1f\xde\x1d\xd3\x7d\x86\xfe\xd4\xbd\xd4\x1b\xa6\x09\xad\x2f\xc1\x42\x57\x07\xd3\xd2\x25\x0b\x2c\x09\x99\xa0\xc1\x02\xba\x0d\x7a\xee\x26\x3e\xb0\x03\x36\x07\xb8\x08\xba\x2e\x33\x3c\x7c\xb3\xf2\xa5\x10\xa5\x3c\xe7\x9c\x3a\xff\xee\xf6\x54\xf7\x29\xe7\xbb\xcd\xa1\xec\xec\x1d\x0d\xea\xc4\xd8\x4b\xaf\xb6\x42\x2f\x07\xd4\x99\x9c\x51\x7f\xef\x2a\xef\x79\xd6\x93\x81\xfb\x4b\x65\xb3\x92\xd8\x12\xc8\x15\x7b\x0e\xf9\xa5\x9e\x75\x76\xca\x5f\xf3\x73\x96\xc4\xf9\xc6\x95\xec\x83\x0e\xbb\xc2\x8f\xa2\xa4\xe9\x83\xc3\xa2\xfb\x73\xce\x26\x71\xcb\xe5\xb6\xa0\x91\x53\x56\x5e\x03\x2e\x7a\xcf\x32\x72\x33\xdd\x6a\xf3\x02\x32\xa3\xc0\x59\x81\x5b\x01\x98\x04\x68\xd4\x90\x72\xdd\xba\x48\x91\xd2\x28\xe8\x01\x6a\x12\x7b\xc8\x21\x6f\xda\xf7\x38\xde\xcf\x3a\xcb\x8a\x31\xa7\x64\xf7\x31\xba\xa3\x60\xe2\x31\xb9\x5a\x71\x0d\xc2\xe7\xc0\x65\x48\xb3\xb2\xd8\x94\xb4\x1b\x09\x5d\x0a\xca\x1c\x9f\x2e\xf2\x05\xd8\xda\x8e\xfb\x1d\x31\x3a\x06\xbe\x91\xb4\x25\xfa\x39\x95\x67\x59\x01\x3e\x3d\xcc\xa8\xc7\xdd\x0f\x0f\x7b\xef\x1a\xc6\xbf\x55\x25\xa1\xc9\x5a\x70\x50\x75\x51\x78\x24\x2d\xbe\x16\x8a\x75\xcb\xe3\x45\xc4\xb2\x43\x32\x73\xe5\x80\xf1\x00\xe4\x80\xd4\x70\xd0\xc3\x86\x86\x87\xae\x2e\x6d\x4b\x5c\xd6\xf6\x53\xb3\xa1\x49\x47\xc4\xcd\x08\x89\x5a\xf0\xc6\x2a\x90\x32\xfb\x88\x79\x11\x67\x14\x87\xb2\x9e\x8c\x21\x2a\x30\x0c\x5a\xe1\x67\xdc\x93\x7f\x4c\x79\x08\xd7\x8a\xb7\x4d\x66\x45\xec\x8f\x8d\x2a\x18\x5f\xcf\x78\x0d\xbc\x7f\x34\xca\x0c\xb3\x0c\x62\x0f\xa1\xa1\xe0\xe8\x93\x54\xe5\x5e\xf8\xbc\xf8\x85\x77\x8b\x89\x43\x89\x5a\x40\x88\xd7\x88\xa8\x32\xe9\x9e\x85\xd0\x23\xa3\x66\x5a\x20\xf1\x5e\xa6\x76\x07\x45\x1f\x51\x51\x36\xe8\x50\x40\x89\x03\x17\x6c\xe3\x5c\x34\x56\x1b\xaa\x45\x0a\x34\x4d\x0e\x29\x75\x51\xd9\x8f\x49\x41\x7b\xdb\x24\xf6\x3b\xd8\x95\x0a\x6c\xfb\x99\xa2\x9f\xb9\x1f\xdd\xe1\xbd\x69\x87\xf9\x44\xcd\x7b\x75\x62\x02\x02\xcf\x02\x86\x93\xe6\x2d\xcd\x4a\xec\x57\x5f\xcb\x08\x29\x5c\xc2\x3c\xf4\x23\xd8\xac\x41\x50\x90\x79\x54\xdd\xe4\xae\x85\x01\xf4\x7b\x26\x30\x16\x92\x4a\xc6\x62\x94\xa2\x54\xb4\x3a\xe3\xa3\xd8\x6c\x30\x56\xc6\xfd\x46\x33\xe9\x4c\xdc\x9b\xc4\xc2\x1b\xb7\x9f\x49\xad\x30\x89\xbd\xb1\xad\x54\x49\x0f\x9a\xae\x8f\x9e\x38\x76\x7d\x7c\xd0\x88\x61\xfe\x2b\xc5\xe3\x99\xa6\x86\x5b\xc0\x97\x66\x1b\x3e\xcd\x08\xfe\x48\x16\xa9\x5c\xcf\x4c\x2d\x6d\xc3\x94\x04\x8f\x4d\x9d\x89\xbf\x8e\x7c\x9e\xc9\x5a\x28\xf7\x00\xa5\xac\x5a\xd3\x0c\x86\xc8\xf2\xa7\x47\x13\x25\x15\x5c\xdc\xac\xa4\x22\x4f\x43\xb1\x66\x88\x05\xa3\x26\x88\x03\xeb\x67\x05\x08\xb2\x39\xc0\xc8\x79\xa8\xc1\xd5\xe5\x72\x2e\x6c\x60\xb0\xb0\x15\xba\x6c\xf1\xd8\xea\x09\xdb\xfb\x1c\x5d\x5d\xc3\x96\x1a\x1e\xed\xa6\x4a\x33\xac\x40\x82\xdf\x04\x8f\xfe\xbf\xd7\x2a\x49\xf4\x31\xea\x60\x7e\x01\x63\xb7\xdd\xaf\xd4\xbc\xdb\xed\x47\xe5\x2d\xc3\x32\x20\xc2\x86\x81\xe9\xf9\xfc\x02\x45\xe4\x65\x22\x43\xc6\xc6\x16\xec\x59\x7d\xfb\xa6\xe6\x2f\x1c\xf6\x67\x0e\xbb\x3a\x0f\x3b\x22\xe9\xe5\x0a\xb5\xee\xeb\x3a\x68\xf6\xb3\x8e\xfd\xca\x22\x72\x13\x1a\x49\x4d\x97\x3b\xbf\x80\x1e\x15\xaa\xd4\x2c\x0f\x9b\xa7\xfb\x48\x6a\x50\x11\x07\x7a\xeb\x24\x7f\xd2\x93\xf8\x2d\x4f\xbd\xe9\xc0\xfe\xc9\xc9\x51\x39\x32\x53\x3c\xf0\xfb\x63\xb2\x7b\x15\x4f\x33\xd5\x9b\x3f\xf5\xa9\xdc\x53\x85\x18\x38\x0f\xda\x05\x79\x6a\xf2\x26\xca\x63\x1f\x60\xcf\x65\x25\x68\xb7\xef\xec\xb6\x02\x36\x55\x97\x6b\xc6\x6f\xb0\xe8\x7d\x6e\xb7\xf7\x24\xeb\x89\x6d\x7b\xd1\xaf\xb2\x6a\x33\xdb\x83\xdb\xf8\x45\x97\x7c\x46\xf9\x1d\x47\xd9\xbf\xbe\xe2\x78\xf7\x3b\xda\x02\x66\x4a\x74\x83\xa6\x9d\x7c\x2f\xc9\xeb\x41\x26\xa8\xac\xb6\x7d\xc1\x14\x24\xcd\x4c\x56\x1a\xd0\x2e\x26\x92\x35\x39\xd5\xc4\xfa\x04\x59\x8c\xeb\x52\x5c\x2a\x6e\xfa\x09\xed\xcd\x99\x4d\x98\x0b\xba\xc1\xc6\xd9\x93\xcf\x0b\xec\xa0\x2b\xba\x7d\xf4\xba\x84\xa3\xd7\x3f\xbb\x08\x8d\x73\xce\xc9\xf3\x1f\xb4\xf6\xba\x93\x55\xfe\xd2\x96\x78\x2a\xfb\xc9\xbd\xfc\x2a\xf6\xf8\x8a\x69\x48\xb2\xd4\xfd\xf3\x2b\xbd\xef\x3a\xf4\x03\xa7\x9f\x9c\xdd\x01\xf7\x57\xb2\x3c\xf5\xf5\xb5\x45\x96\xb4\x72\xd8\xbc\x29\x50\x9c\x8f\x5a\x1e\x68\x9d\x7e\x76\x4f\x34\x86\x90\xa3\x18\xe6\x9d\xb4\xb8\x3c\xd5\x44\x78\x4d\x64\xa6\xe6\xfb\xf6\x4d\x1e\x18\x2b\x34\xc4\x6e\x9a\x9c\xe9\x43\xc7\x0b\x00\xb9\x29\xc0\x58\x32\x02\x6b\x54\xce\xe6\xa4\x10\x64\x1a\xc1\x35\xa0\x9b\x71\x3f\xce\xd6\xe1\xb2\x9a\x26\x2e\xde\xed\x19\xd7\x4e\x50\x86\xbd\xcf\xbd\x8d\x6d\x2f\xc0\xed\xa8\x69\xdb\xc3\xf6\xd7\x94\x87\xed\x67\x1d\x36\x7e\x5e\x49\x4e\xab\x06\x8c\x29\xaf\x75\xc8\x45\xa6\xd8\xcb\x4d\xfc\x33\x5f\xad\x9b\xc6\x23\x12\x22\xfd\x8f\x45\x30\xc1\xff\x74\x58\x63\xcb\x2d\xc1\x00\x82\x2f\x38\x5b\x42\x52\xd3\x2d\xda\xe0\x14\x4c\x9e\xc0\x7c\x51\xf8\x41\x3d\x89\xa3\xfe\x23\x1e\x23\xbe\xad\x72\x5d\x9a\xca\x75\xce\x39\x71\xfe\xdd\x68\xdc\x7d\x72\x65\xf4\x0e\xce\x8b\xf2\x3e\xf4\xc7\x35\xf6\x53\xc6\xd4\x0b\xc2\xac\x29\xb5\x2c\x00\xf5\x3b\x4c\xc2\xf0\xb6\x30\xce\x33\xf7\x93\x35\xef\x99\xd6\x93\xe2\x48\xdb\x26\x9c\x13\x70\x44\x93\x02\xb9\x9d\xac\x83\x93\xa0\x92\xa6\x36\xfc\x75\xaf\xa3\x2c\x05\x4a\xea\xff\x81\xc3\x7e\xdf\x61\x23\xad\x24\x7d\x4e\x12\x0b\x50\x28\x03\xf5\x83\x87\x71\x00\xc6\x21\x9c\x18\xf2\x40\x3e\x9a\x8d\xe1\x64\xd8\xa4\x00\x98\xf5\x09\x99\x9c\xca\x67\xdd\x34\xe9\x01\x6c\x99\xa9\x27\x4e\xb1\x09\x56\x1f\xb8\x26\xad\x8e\x39\x82\x55\xdb\xa2\x8b\xc2\x6f\xec\x66\xcf\xbd\x58\x22\x16\xb2\xb5\x96\x29\x8a\xa9\x86\x14\x01\xfd\x57\x23\xde\xe2\xe6\x49\x4a\x7d\x68\xe1\x29\x0c\xfa\xd2\xa6\x29\x19\x61\xff\xdb\x61\x57\xa1\xf3\xba\x08\x40\xb5\x71\xbf\xeb\xb0\xf0\xf2\xf0\xcd\x6c\xde\x4c\x28\xcd\xbb\xd7\x2a\x9c\x2b\x33\x20\x68\xfd\x86\xd9\x15\xc8\xf3\x81\x41\x0b\xe0\x0e\xb5\xeb\x54\xba\x86\xd0\xf7\x38\x88\xc8\x3f\x40\xfe\x57\x86\x35\xa1\xed\xc7\x46\xae\x61\x8c\x14\xcf\xec\xa1\x1a\x63\xf2\x00\x4d\x04\xce\x6f\xab\x79\xc7\x8b\x9f\xba\x73\xa9\x5f\xa5\x52\xd5\xf5\xd3\x3c\x6c\xf6\x22\x3f\xe5\xbe\xcc\x22\x27\x1b\xf1\xe0\xce\x2e\x26\xe2\x3d\x2c\x61\x9d\x47\xa2\x5f\x67\x55\x13\xce\x39\x7c\xe0\x44\xde\xe9\x0e\x77\xfc\x2e\x3b\xe7\xec\x29\xf1\xca\x43\x92\x8e\xdf\xad\x9f\x16\xfd\x4c\xce\x77\x24\x48\x67\xec\x5b\x43\xec\xea\x2c\x4f\x52\x11\x90\x60\xcf\xdc\x5f\x1f\xf2\x1e\x1e\xb2\x9f\x29\xe2\xb5\x28\x52\x02\x09\xad\x13\x36\xef\x11\x0e\xec\xba\x48\x05\x17\x60\x5b\x96\x49\x33\x24\xbd\x4b\xfd\xe6\x69\xd2\xfe\x32\x51\x64\x42\x71\x19\x3e\xef\x84\xab\x1a\x3b\x2f\x6f\xa3\x19\x1e\xaa\x50\xa4\x0d\x63\x2e\xf2\xa6\x46\x6f\x26\x6b\x66\xa7\x87\x56\xff\x2c\xb1\x72\x31\x5c\xa0\x9a\x7e\xcc\xd1\x5f\xde\x4a\x01\x21\x99\x08\x2b\xa0\x6e\x67\x47\x45\x9c\xa1\xdb\x72\x9c\xf0\x24\x0a\xac\x18\xc4\x48\xb4\x72\x98\x64\x68\x8d\x1d\xd3\x3a\x76\xcc\x53\xd1\x49\xd6\xd4\xad\x7e\x81\xe5\xa6\x6b\x4e\x1a\x2b\x59\xe6\x1a\x5c\x77\xab\x9c\xd3\xa4\x99\x62\x1e\x01\xa6\x3d\x05\x33\x59\x7d\x7f\x8a\xc8\x07\xe0\xfa\x5d\xa1\x83\x19\xf9\x6d\x62\x11\xfb\xa6\xc3\xfe\x55\x85\xb2\x72\xdb\xf2\xf2\xc2\x6d\xc2\x0f\x44\xea\x7e\xca\xf1\x6e\x2d\x7e\x1a\x0e\xca\x3e\x6f\xc2\xf0\xf2\x36\xbe\x29\x70\x47\x64\xe9\x10\xd2\xd1\x4d\x93\x15\x91\xe9\xdb\x9e\x1d\xb0\xdb\x5a\xa2\xe8\x39\xec\xc9\x74\x7f\xe2\x79\xff\x42\x8e\x1b\x65\x86\xc3\xa7\xc1\x4b\xa8\xb6\xe3\x0c\xb3\x70\xaf\xf5\x1e\xb7\x21\x71\x91\x39\xa5\x7e\xdd\xe3\x2d\x27\x8e\x42\x11\x43\x8a\xd6\xd9\x24\xce\xc5\x99\xdc\xfd\x8b\x1f\xf7\xbe\xe5\x94\x1e\xd2\x85\x97\x66\x73\xb5\xd1\x1b\x71\x1a\x93\xeb\x9e\xe2\x60\x21\xa0\x6d\x15\x4b\xc2\x97\x92\x8e\x50\xf4\x71\x68\x91\x45\x54\xd6\x30\x46\x9c\xcf\x72\x89\x72\xb2\x2c\x24\x41\xe9\xb1\x8a\x80\x82\x4f\xf0\x6c\x48\x6e\xce\x84\xfb\x19\xc6\x1b\x72\xca\xfd\xd3\xc2\x70\xb3\xb5\x37\xe7\x73\xff\x92\xfd\x62\x8d\xed\x4e\x7b\xf1\x4c\x76\x32\x13\xa9\xfb\xde\x1a\x11\xa9\x79\xf7\xd7\x64\x9f\x02\x31\x75\xc2\xd3\x5e\xac\xc2\x55\xd3\xbe\xbe\x04\xb2\x03\x10\xba\x69\xd2\x04\xd7\x50\x93\xb0\x10\xfc\xd4\x2d\x0e\xbb\xb0\xe3\xaf\x0a\x7d\xd2\xe0\xa1\xe5\x47\xda\xe0\xc7\xfc\x3e\xf7\xa3\x2c\x41\xaf\x3a\xe8\xa0\xca\x7e\x98\x6f\xa9\xd7\x17\xd0\x7f\x46\x5f\xd9\x95\xaa\xea\xb4\xcc\xee\x35\xc3\x8a\xf9\x77\x35\x76\x75\x26\x8e\x86\x71\xef\x0c\x92\x0b\x64\xee\xb7\x6b\x6c\xe2\xfc\x4a\xff\x61\xf3\x1b\xef\xc3\xd0\xc3\xf4\x10\x3a\x12\x8a\x4e\x4a\xf3\xc8\xea\xe5\x8d\x8e\xb7\xf6\x20\xa4\xbd\x18\xe8\x62\xf1\x90\x8e\xd7\x9c\x82\xfb\x3c\xf5\xe3\x20\xe9\x6c\x28\x0c\x8c\x04\x3e\x79\x90\x53\x01\x3f\xaa\x43\xc0\xbe\xeb\xc8\x6e\x6f\x36\x93\x4e\x77\x21\x4d\x5a\x61\x24\xdc\xdf\x71\xb6\xd2\xed\xd6\x37\xde\xbb\x9d\x65\xb4\x9a\xcb\x87\x05\x6e\x2d\xde\x3e\x28\xf0\x5b\xbb\xc3\xcb\x89\xf5\x9d\x0a\x50\xed\xe4\xd8\xfe\x9c\xa8\x43\x9e\x64\x46\x45\xc9\x33\x41\x79\x8c\x54\x2e\x1a\x52\x43\x7d\x49\x2f\x1a\xec\x57\x6b\xec\x6a\xa4\x4b\xc9\xd4\x04\xfb\x68\x6d\x30\x09\x96\x6e\x29\xd2\xc8\x64\xa5\xae\x54\xf3\xed\x6f\xa0\xe1\x94\xa6\xb8\x7b\x24\xe0\xcf\xcc\x92\x5d\x51\x54\x54\xb8\xc2\xdb\x1b\xdc\xa0\xa8\x19\xda\xc0\xb2\x71\xb0\x4b\x6c\x13\x8f\xf4\x84\xf9\xb2\xc3\xae\x6c\xfa\x5d\x20\xa1\x01\xca\xd3\x4f\x38\x9b\x1c\x03\xf4\xfd\x8f\xf1\x85\xf7\x52\xe8\x33\x33\x13\xe8\x9e\x20\x98\x08\xd2\xa4\x8b\xc1\x0e\x69\x2f\x86\x68\x04\xb3\xc3\x4c\x19\x68\xfa\xbb\xd3\x7d\xa5\x95\xe1\x2a\x20\x40\xe8\xb3\xfc\x86\xc5\xdc\x60\xaf\xa9\xb1\xdd\x52\xbc\x1e\x4b\x7a\x71\xee\xfe\x83\xe3\xfd\x8d\xa3\x7f\xf2\x40\xa0\x4f\xa0\xfc\x56\xd1\x00\xcb\xb7\xbc\x03\xaf\x0d\xd2\x46\x2b\x77\x24\xea\xd2\x15\x0b\x33\x55\xe7\x05\x9d\x33\x1a\xfd\x7a\x99\xc8\x06\x48\x99\x40\xb5\x52\xe6\x9e\x0a\x3f\x00\x37\x79\xa9\x92\x29\x5e\xe5\xec\xb4\x08\xf0\x81\x8e\x3e\x21\xc4\x6a\x98\x31\xaa\x28\x40\x1c\x6f\x09\xba\xeb\x8f\xfc\x55\x12\x83\x78\xc4\xb3\xef\x9e\x3f\x37\xc4\xae\x84\x0d\xeb\x78\x12\x2f\x26\x49\xee\x3e\x3c\xe4\xbd\x63\x68\xde\x38\x05\x91\x99\xb3\xa8\x2f\x5c\x75\xc9\x3d\x8c\x9c\xf9\xe2\x7a\x9a\x24\x80\xe5\x8e\xeb\x3b\x4f\x7b\x62\xdc\xf2\xc0\x83\x89\x4b\x24\x97\xb8\x40\x71\xdf\xf2\x73\xdd\x78\x38\x81\x66\x18\x18\x51\x38\xe6\x81\x82\x46\x45\xc9\xcd\x73\x92\x8f\xca\xb2\xc6\xa0\x3f\x5a\x7e\x08\x04\x4d\xc8\x11\x62\xd7\x31\x6c\xa9\x2c\xd4\x72\x93\x53\x25\xe5\x2d\x3f\xca\xc4\x38\xd0\x30\xf5\x9a\x6d\x93\x78\x53\x2d\xae\xae\x48\x5b\x49\xda\xf9\x51\xdf\x3d\x15\xe5\xec\xcf\xd6\x18\x83\xf1\x03\x20\x70\xf7\x65\x5a\xe3\x40\xf9\xf4\xf4\x8b\xd0\x38\x4e\xca\x29\x5a\x9a\x94\xa4\x59\x88\xfc\x47\xbb\x57\x0c\x88\xe0\x1f\x83\xe3\xcd\x42\x1a\xae\x85\x91\x58\x15\x87\x81\x40\x1b\x10\xc5\x3f\x5d\xf3\x7e\xa1\x36\x33\xe0\xad\x3a\xbc\x64\x52\x1a\xc1\x01\xc5\x57\x3d\x03\x87\x99\x55\x3f\x8c\xd1\x59\xb8\xab\x3e\x26\xce\xb0\x30\x07\xef\x58\xa9\x87\xea\xae\x84\x45\x2a\x87\x4a\xfb\xf4\x16\xf9\x87\xca\x33\xe8\xee\x58\xac\xdf\x2d\x73\xcb\x70\xb1\xaa\x99\x08\x53\x36\x1e\x34\x4a\x03\x1b\x00\x5c\xea\x3d\xc1\xfd\x68\xdd\xef\x67\x2a\x82\xcc\x5a\x1c\xd9\x34\x9f\x1a\x53\xeb\x4a\xe7\x11\xf0\xbd\x63\xe0\xea\x3a\x3b\xb3\x70\xf7\xd2\xb3\x97\xee\x9e\x99\x3b\x36\x7f\xdc\x9a\x6d\xef\x77\x18\xd3\xed\x0e\xdc\xff\xcb\xf1\x5e\xe9\x2c\xf6\x62\x33\xef\xb8\xe8\x98\x00\xa0\xe7\x1b\x20\x98\x30\xf6\xcb\x7e\x5b\x48\x4f\xd0\x01\x64\x12\x20\xfe\x8b\xfa\x5c\xca\xb5\x35\x3f\xa2\x18\x27\x90\x2f\xd4\x15\xed\x44\x9e\xe2\xcc\x1d\x01\xd6\xb4\xbd\x2a\xee\x61\x8f\x93\x02\xf4\x44\x1c\xf5\xa5\x50\x3b\x12\x46\x02\x8d\xba\xee\x9d\xde\xfc\x9d\x34\xb0\xb6\x6a\x42\x28\xc9\xa9\xb2\xf9\x62\xa1\x2d\xfd\xa5\xc5\xc3\x50\x51\xe4\x83\x4f\x64\x4f\x34\xf6\x3f\xe0\x6a\x2c\x2c\x0b\x87\xe5\x4f\xf7\x25\x4f\xf4\xfe\xc3\x10\xfc\xa9\x10\xf8\xe0\x76\x09\x4d\xb3\xc8\xee\x98\x25\x1d\xb1\x8e\xa0\x63\x0a\x53\x11\x5c\x75\xc0\xe9\x63\x55\xc4\x22\x85\xfe\x51\xdb\x94\x4c\x4e\xd6\x94\x66\xdb\x8f\x57\xf5\x67\xaa\xd2\x50\x9a\x66\x64\x07\x16\x33\x01\xbe\x27\x68\x41\x05\x3f\x06\x3c\x4c\xa7\xe1\xea\x2a\x0c\x85\xdc\x6a\x30\xe8\x18\x0f\xc9\x62\x2d\x89\xd6\xc8\xe3\x0c\xdd\x1e\x30\x57\x65\x41\x2c\xcc\xc8\x20\xad\x45\xd4\x57\x63\x95\x87\x1d\xba\x4b\xd3\xed\x83\x5c\x94\x3f\x19\x01\xa7\xa5\xa2\x05\x11\x46\x10\x14\x4d\x77\x70\x32\x2d\x78\x1c\x45\xc8\x6e\x89\xb5\xd3\xbe\xdd\x72\xd8\xc2\xb8\x27\x02\x3c\x93\x63\xc8\x63\x0b\xcb\xd0\xdc\xfa\x7e\x4e\x25\xa8\x1a\x9b\xf4\x82\x39\x51\x51\xf8\x86\xef\xe5\x9a\x18\xe7\x2b\x22\xcb\xeb\xa2\xd5\x82\x38\xb4\xac\xd7\x55\x01\x8e\x11\x40\x4e\x35\xce\x3a\xbb\xa1\x90\xe5\xb0\x84\xfd\xf9\xe5\xc7\xb3\x4f\xca\xc3\x9f\x8a\xc9\x77\x3f\x58\x63\x93\x5b\xa4\x76\xd3\x3e\xe5\xde\xff\x74\x8a\xa0\x7e\x8b\xf4\x55\x51\x54\xc9\x39\x5b\xcc\xa0\x95\xa4\x97\xc3\x7d\x1a\xc0\xd8\x37\x7d\x58\x63\xf9\x1e\xf4\x56\xd7\x97\x7a\x49\x9a\xab\xfc\xc8\x2c\xa3\x43\x5a\x33\xf2\x60\x23\x32\xd3\x25\x91\xcf\x56\xa5\x32\xde\x67\x64\x7a\x09\x33\x1a\x51\xc0\xca\x0b\x73\xd0\xb9\x04\x30\x63\xc9\xad\xd7\x07\x4b\x5e\x8c\x13\x14\xa7\x66\x86\x18\xf3\x45\x56\x9a\x94\xff\x4b\x0e\x7b\xb4\xae\xe7\x3c\x90\x90\x36\x85\xfb\xb0\xe3\xbd\xd3\xd9\xf0\x58\x39\x4e\x14\xbe\x95\x66\xbb\x28\x11\xb5\xea\x14\x45\x29\xd4\xcf\xf4\xef\x6d\x9d\xb2\x7c\xf1\x9a\xfa\x5a\x12\xbd\x9f\xc0\x25\x52\xac\xab\x79\x02\x6c\xba\x84\xa0\x02\x4b\x27\xc7\x2e\x9e\xda\x7b\x93\x6c\x4d\xea\x37\x73\xa9\xf4\x99\x9a\xd4\xbb\x1c\xb6\x33\x13\xa9\xd4\x8c\xdf\xe4\xb0\x7d\x03\x87\xbe\x4a\x32\x2c\xc1\x77\xde\xf3\xf0\x7b\x88\x65\x01\x44\x35\xed\x08\x8c\x43\x4e\xaf\x8d\xce\x37\x9c\xa7\x64\x03\xc2\x08\x35\x9f\x3d\x45\x54\x65\x9e\xc4\xf8\x75\x83\xbd\xc2\x21\x56\x9a\x17\x79\xf7\x80\x6e\x1b\xda\x7a\xae\x91\xef\xe8\x71\xe0\xdc\x1f\xe7\x77\x62\x70\xf0\xd8\x38\xf4\x0e\x5c\xa6\xf2\xa6\x5a\x43\x7e\x10\x14\x54\xfa\xad\x9e\xd4\x37\x95\x73\x5a\x19\x9e\xb1\x61\x3b\x9e\x2b\xf4\x89\xd4\x13\x84\x3a\x11\x66\x04\xd9\x08\xa6\x69\xd0\xc8\xfc\x0c\xb6\xf9\x58\xe5\x69\xa3\x63\x96\x87\x73\xcb\x03\xb5\x7d\x6d\x7e\xf1\xd7\xe6\x9f\x71\xd8\x63\xf4\x92\x2c\x44\x05\x7a\x68\x57\xbc\xa8\x72\xd8\x36\xd6\x2b\xc8\x68\x25\x3d\x0a\xd9\x66\x2e\xdf\xc2\xc5\x89\x16\xf3\x85\xac\x63\x6b\xdc\x1f\x74\xd8\x35\x45\x88\x18\x51\x21\xbd\x61\x2b\x37\xe5\xb8\x46\xe1\x03\xcf\x2f\x67\x51\x80\x8c\xeb\xe8\x33\x0a\xa1\xcf\xc8\xa0\xad\xa2\xfb\xed\xe0\x7e\xdc\xa5\xa8\x08\x5a\xe0\x00\x9b\xc4\xbe\xe8\xb0\x1f\x2b\x72\x3b\x12\xa6\x19\x6c\x37\x59\xee\x77\xba\xee\xfb\x36\x21\xb7\x3a\x1f\xb6\x46\x38\x28\xd7\xcb\xdf\x86\xb7\x38\xac\xd8\x28\xdd\x57\x6f\x12\x64\xb0\x49\xa5\x8f\x85\xcd\x34\x81\x9a\xcf\xeb\xbc\xb4\xd0\x02\xc3\x1c\x2a\xb7\x7a\x4f\x94\x22\x03\xb9\x25\xd5\xa5\xbf\x92\x1d\xda\xf1\xfa\x9f\xa7\xe7\xc7\xe7\x1c\x36\x2c\x35\x42\xf7\xe3\x8e\xf7\xa0\x23\xff\x42\x99\x76\x09\x80\xc2\xfc\x98\x7f\x06\x58\xb0\x22\xa0\x97\x29\x22\x19\x30\xef\xa9\xd3\x87\xd0\xff\x3f\x0a\x57\x52\x1f\xf6\xa5\x42\xb9\xea\xa6\x42\x1e\x85\x02\x04\xfc\x02\xf8\x12\xb2\xa9\x23\x02\xc8\x81\xfd\xa7\x0f\x59\x6b\xf3\xbf\x38\x6c\x17\x50\x80\x8a\x40\x8e\xc9\x85\x2b\x4e\xaf\x77\xe8\x73\x35\x3f\x34\x62\x28\x7a\xf4\xfa\x69\xdf\x0c\x6c\x84\x13\x1c\xe2\x44\x9e\xa1\xfd\x26\x6b\xf0\xc3\x52\xea\xa0\x15\x4a\x6b\x61\x4a\xf1\xd2\xea\x31\x46\x0a\x42\x0f\xa6\x3c\x90\x12\x49\x51\x9f\x50\x05\x94\x56\xf3\xa0\xc3\x76\x62\xd6\xee\xdb\x1c\xef\xdf\x3a\xb4\xad\xc1\x46\xe7\xe7\x1b\x76\xb9\x89\x96\x1f\x46\xa0\x9b\x6b\x54\xa7\x84\xae\xb5\xec\xba\x0c\xdc\x62\x2f\x76\x43\x7c\x95\xc3\x1e\x55\xac\xfc\x59\x30\x8b\xf5\x94\xbf\xf4\xa9\xd2\x9b\xcb\x2e\x2a\xac\x83\xfb\xe7\x1d\xf6\x2f\x8b\x9c\x8f\xfa\xa6\xe4\xfb\xf9\x4b\x90\x7c\xed\x01\x99\x5e\x7e\xc1\xb7\xed\xba\x73\xa9\xae\x3b\xcf\x3b\xbf\xeb\xce\xb4\x7b\x93\x76\xdd\x21\x7d\xba\x14\xb0\x07\x43\x52\x19\xae\xf7\xa9\x2b\x2c\xaf\xf9\x0d\x54\x96\x80\x1d\xf5\xc6\x2b\xbc\x7d\xd6\x93\x81\x81\x86\xbe\x41\xec\xd8\x38\xeb\x8c\x28\xa7\xcf\xb3\xce\x48\x2e\x3a\x5d\xd9\xf9\xd6\x39\xf1\xd3\x8c\xbd\xb1\xc6\x1e\xd5\x09\xe3\x45\xe1\x07\x7d\x15\xa0\x60\xb2\x7a\x2d\xb7\x05\xef\x84\x71\x89\xbf\x6b\x23\x81\xbe\x2f\x35\x9d\xa8\xaf\x59\x15\x75\x85\xe1\xfe\xa3\x90\xc6\x52\x40\xf4\x0b\xdc\x1d\x04\x67\x92\x1a\x67\x61\xfc\x68\xa6\x7e\xd6\x86\x78\x16\x99\x7d\xa8\x2e\xce\x0c\x0e\x7e\x03\xf1\xdc\x34\xbe\x4c\xf2\x51\x59\x98\xb2\x59\x55\x7d\x20\x8f\xd8\x59\x92\x80\xb1\x29\xa4\xcd\xd8\x0f\xfa\x63\x1b\x56\xfe\x63\x53\x81\x81\x35\xb7\x85\x59\x9e\xa4\x7d\xe4\x3b\x7b\x50\xf7\xcc\xeb\xa1\x67\x8a\x1e\x49\xa2\x80\xb7\x31\x29\xc6\x75\x21\x0b\x75\x42\xcc\x53\x52\xc7\x94\xab\x97\xe4\x22\xec\x87\xa0\x7c\xe3\x85\xba\xc1\xae\xa5\xd9\x23\xc5\x19\x79\x36\x0d\x73\x7e\xaf\x48\x13\x64\x47\x37\x41\xb4\xec\xa6\x4f\x95\x78\xc9\xbe\x58\x63\x7a\xf4\xdd\x8f\x5f\x1c\xc2\xf6\x51\x7f\x45\x44\x9a\xe4\xfd\xfb\xce\x0c\xc6\x0d\xf1\x7b\x7a\x42\x6e\x60\x18\x35\x18\x18\x6e\x3c\x1d\x3f\xf6\x57\x8d\x10\xb0\x62\x2e\x22\xa5\x26\x02\x72\x85\x72\xb3\x2a\x1c\x09\xb4\x06\x8e\xea\x51\xa7\x48\xa8\x2e\xcf\xd4\xd4\xdd\xa3\x22\xa6\x2e\x73\x08\x02\x66\x3a\x71\x2d\xfc\x5b\x57\xbd\x96\xb1\x97\x0d\x31\xbd\x6c\xdc\xff\xb5\x15\x0b\xca\x42\x12\x2c\xd3\x07\xe0\xc9\xfa\xa5\xda\x4c\x41\xe8\x8d\x7e\xd7\x26\xec\x1b\x34\xce\xf4\x31\xd0\xec\xe6\x72\x6e\x15\x2b\x08\x5e\x13\x26\x80\x38\xe3\x83\xe9\x36\x89\x65\xd7\x75\xfb\x05\x35\x5e\x02\xc1\x6b\x62\x4d\x0e\x4e\x11\xd5\x6a\x32\x7e\x18\x1d\x09\x09\xb4\x4f\xf8\x68\x92\x96\xbe\x05\xe0\xf6\x52\xaa\xd0\xc0\xc7\x1a\xbb\xe0\x31\x90\x5d\x1f\x25\x7e\x90\x4d\x14\x67\xae\x6c\x22\x45\x03\x8c\xec\xd1\xe2\xf1\xb5\xdd\x24\xa8\xab\xca\xb2\x9f\x75\xd8\xd5\x3d\x9b\xd2\xf7\xc5\x9b\x81\xf6\x9e\x87\x0f\xd8\x9b\x9b\x89\x37\xf0\xfa\xc2\x8a\x05\xf0\x34\xb4\xe1\xc9\xcd\xd6\x92\x60\x64\xc7\x93\xa7\x39\xf9\xab\xc1\xfe\xf3\x08\xfb\xc9\x41\xa7\x33\x88\x75\x7a\x78\xc4\x7b\x82\xfe\x65\xc7\x39\xd1\x2e\x51\x19\xe3\xf4\x9e\x5d\x6c\x41\x45\xe8\x3c\xdd\xbb\xfa\xa8\xf5\x89\xe9\xe0\xf3\x64\x36\xca\x9e\xb4\xb5\xd3\xe2\xb6\x95\x61\x3b\x3a\xc6\xe0\x2f\xd9\xd6\x0a\x2f\x55\x2b\xbc\xfd\xfc\x5a\x61\xc3\x1d\xaf\x72\xe8\xd6\x12\xa1\xec\xd2\xfd\x41\xc7\x72\xe9\x36\x76\x94\xb9\xe3\x4b\x18\x9d\x8a\xde\x1e\xee\xbf\xf1\x6e\xde\xf8\x54\x8f\xda\xdc\xf1\x25\x58\xb3\xd1\x9a\xe9\x8f\xd2\x02\x75\xa3\xe4\xbf\x7d\x80\x3d\x81\x7c\xf2\x1e\xe7\xed\x5e\xac\x0a\x06\x7f\xac\xf2\xc3\xb3\x7c\x09\xbf\x7e\x15\x1b\x1b\x84\x05\x87\x76\x64\x13\xf9\xf4\x7d\x57\x5d\x3e\xe4\xd3\x6f\x5c\xc9\x5e\x41\x20\x7f\xff\x58\xdb\x06\xf9\xbb\x64\x90\xbf\x69\x76\x13\x3b\xb0\x35\x90\x3f\x6b\x60\x97\x8f\x2e\xb1\x5f\xaa\xb1\x5d\x84\xf1\xe8\x7e\xa4\xb6\x09\xcb\xc6\xe0\x6c\x14\x00\xad\x54\x2d\x4b\xb0\x91\xe8\x47\x13\x09\x3c\x6c\xa4\x6b\x21\xd0\x1e\x6f\x05\x76\x76\x26\xe7\x91\xf0\xe5\xae\x89\x8c\xcf\x7b\x28\xc7\x3d\x3c\x49\xf9\x1e\x40\xc0\xdc\x53\x05\x38\x3b\x80\xe3\x45\x6b\xf0\x20\xa7\x12\x3f\x20\xd2\xd6\xd4\xec\x77\x30\xbe\x40\xfd\x65\x2d\xa3\x64\x35\x6c\x82\x33\x08\x4d\x17\x9f\xaf\x46\xc9\x8a\x1f\x69\x86\xf9\x6d\x74\xd9\x6d\x74\xd9\x7f\x8a\xe8\xb2\xdf\xd0\xe8\xb2\xbf\xf9\x23\x88\x2e\xfb\x14\x76\xf3\x60\xa3\xdc\x26\x62\x68\xb1\x17\x09\xf6\x89\x9a\x4d\x38\x9d\x04\x05\xd2\xd0\x89\x35\x91\xb6\x85\x1f\xb8\xaf\xaf\x79\x8b\xea\x87\x54\x9e\x7b\xa0\x37\x94\x51\x23\xf4\x58\x26\x2a\x69\x99\x8d\x4a\xf9\x15\x56\x6c\xca\x1f\x76\xd8\x43\x0e\x1b\xe9\x26\xc1\x91\xf0\x8c\x08\xdc\x77\x38\xde\xf1\x05\xfa\x51\x2e\xa8\x45\x0f\x2f\xac\xb8\x87\x9c\x83\xec\xa9\x17\xa0\xc6\x36\xb4\x1c\xb8\xbd\xe7\x03\xa9\x91\x51\x61\xf6\xcd\x5a\xa5\xde\x72\x34\xf1\x83\x43\x24\x29\x29\xe0\xe9\xdf\xd5\xbc\x5b\x36\x3e\x2e\xb7\xa9\xb8\x02\xf0\x41\xdc\xd6\x95\xbc\xb5\xbb\xe9\x3b\x0e\xfb\x23\x87\xed\x22\x61\xe3\xfe\xb6\xe3\xbd\xd6\xb1\x98\xc0\x61\x66\x92\x4d\x09\x29\xe5\xf1\x25\x61\xe4\x29\xa7\x49\xbb\x08\xbe\xac\x66\x5d\x4c\x14\x60\x2a\x9d\x0a\xd5\x36\xd8\xfe\x8b\x59\x99\x89\x52\xf6\xd6\xb4\xbc\x89\x1d\xd8\x04\x55\xac\xaa\xc3\x14\xd5\xec\x1f\x0c\x59\xdc\xb2\xda\x17\x58\x84\xab\xed\x5c\x04\x0b\x49\xa0\xe0\x3b\x96\x45\xda\x71\x3f\x34\xe4\xad\x49\xd9\xb7\x0e\xef\xb1\x0f\xa3\x48\x6d\x1a\xb8\xba\x02\x3e\xe0\x6b\x33\x84\x01\xaf\xd2\xbb\x22\xad\xa3\x1d\x21\xe1\xad\x90\xc2\xc8\xc1\x7c\xdf\x05\xd9\x91\x12\x67\xd7\x68\x36\x76\xd6\xd9\x89\x85\x9e\x75\x1e\xd5\xb5\xf3\xb5\x46\xed\xd5\x35\xf6\x3a\x87\x95\x93\xb8\xf7\x6d\xcd\xb4\x62\x7e\xe3\xdd\xa6\x15\x56\x3e\x03\xb6\x0f\x85\xc0\x02\x9c\x0e\xe3\x95\x04\x70\x36\x22\x22\xd6\xb8\xc1\x7a\x8c\x2a\xef\x9e\x56\xc6\xbd\x3b\xf0\xc1\x86\x4c\xa0\x0f\x95\x76\x65\xe7\x56\x6a\xd3\xb8\xf2\x44\x48\xc1\x11\x6a\xaa\x3e\x35\x59\xb2\xd0\x7d\x67\x88\xdd\x46\xed\x94\x1b\x68\xdd\x5f\x5d\x4d\xc5\xaa\x9f\x27\x76\x64\x98\x05\x66\xa9\x69\x85\x17\xe6\xad\x30\x63\xf7\xcd\x43\xde\x4c\xf9\x61\xe1\xb3\x13\x88\x34\x44\x10\xe3\x0d\xb8\xa1\x31\x6e\x60\x70\x60\xb3\x86\xea\x57\x6a\xec\x0b\x76\xfc\xdc\x47\x6b\xde\x75\xb3\x8a\xdb\x59\x2d\x07\x4d\xaf\xd2\x0d\xa9\x70\x6b\xee\x3f\x8f\xdd\xc5\x9e\x5d\x39\xb6\x97\xd0\x66\x23\x02\x6e\xab\xe1\x6d\x5b\x8c\x95\xfb\x49\x2b\x49\x57\x8e\x76\xbd\x23\xd2\x55\x21\xf3\x73\x77\xb9\x3b\x28\xb3\x3d\xec\x27\x2a\x52\x2a\x6b\x92\x3b\xe2\xee\x84\xaf\x18\xfb\xcc\xb0\x25\x1d\xfd\x5e\x9e\x64\x4d\x3f\x22\xdc\xec\xa5\xa6\x1f\xa9\x11\x7c\xdd\xb0\x37\x63\xfc\xde\x80\x44\x64\x90\x6a\x2b\xf1\x28\x73\x12\x3c\xeb\xad\x68\x01\x7d\xd6\x19\x21\x83\x9a\x6d\x54\xfa\xd8\x10\x7b\x0e\xd3\xaf\x0c\x36\x47\x0c\xbc\x34\xcd\xd8\x2b\x1a\xf0\x1a\xbd\x97\x8a\x10\x75\x59\x9a\xbe\x50\xb4\xa6\xf2\x6f\x9b\xc6\xe6\x2f\xd7\xbc\x4f\xd7\x36\x31\x14\x93\x04\x2d\x4c\xbc\xaa\x5a\x1c\x78\x35\x0a\x03\x79\x46\x18\xad\x68\x20\x90\xf9\x69\x4b\xe4\x4a\x2f\xd7\xbe\x85\x68\xc2\x22\x3e\x1e\xa9\xad\xaf\x25\xa1\xac\x7e\x9e\x26\x10\xc3\x29\x27\xfb\x4a\x5f\x11\x34\xa3\x76\x48\x1f\xa9\x03\x5b\x68\x1c\xd2\x28\x23\x2a\x17\x5a\x50\xef\xfa\xa9\xdf\xe1\x59\x3f\xce\xfd\x33\x86\xc5\x81\xd6\x90\x5d\xb7\x0c\xed\x10\xd5\xc6\x50\x79\xc2\xad\xaf\xf6\xc2\x40\x90\xd1\xb9\x6c\x73\x36\x95\xad\x3f\x7d\x0c\x1b\xaf\x0a\x62\x58\x9a\x5f\xa0\x78\xca\x38\x47\x0c\x44\x72\x1f\xf9\xf7\x8f\xf1\x16\x17\x8b\x69\xa3\xd0\xe2\x14\x6f\xb8\x61\x9d\xf7\x63\xcd\x31\x08\x00\x83\x84\x5c\x47\x90\x5b\xa3\x87\x44\xee\x2b\x9f\x7d\x29\xdb\xf1\xf9\x59\xe7\x4a\x4c\x77\x1b\x5c\xa2\xdb\x17\x49\x2e\xfb\xf0\x10\x7b\x7c\xa1\x75\x2f\xf4\x56\xa2\x30\x6b\x2f\x89\x66\x2a\xf2\x45\xd1\x72\x1f\x18\xda\x82\x90\xd7\xc9\xe9\x22\xfd\x9b\xb5\xd9\x81\x39\x2a\xaf\x55\x8d\x80\x4b\xf8\x7c\xf0\x5e\x19\x2a\x0d\x05\xa0\x92\x30\x46\x7e\x05\xc8\x66\xf4\xb5\x89\xdf\x98\x28\xee\x46\x8d\x48\xcc\x37\xd4\x06\xfb\x1f\x8e\x10\xc5\xbb\x93\x71\xd7\x7a\x0b\x54\xd6\x83\x0e\x98\x85\x95\xcb\x04\x3f\x8b\x13\xd5\x10\xd3\x5d\x44\xc1\x14\x57\xb6\x31\x43\x1d\x1f\xdc\xbf\xe5\xd1\x17\x13\xa1\x32\x8d\x7f\x53\x74\x93\x9f\x65\x22\x68\xb0\x67\x33\x1a\x57\xf7\x84\x77\x68\x4e\x63\xe1\x95\xcf\x9a\x45\x6f\x14\xb1\x26\x61\x46\x33\xa6\xc1\x2b\xcd\x46\x6f\x1e\x62\x8f\x95\x9a\xc1\x86\x49\xf0\x0f\x5b\xb9\x44\x29\x4f\x82\xff\x58\x3b\x5e\x91\xd7\x0f\x63\xf8\x8d\x7a\x18\x03\x2f\x9f\xfe\xd3\x18\xf2\x93\xec\x9a\x35\xc5\x04\xa8\xa8\xe7\x66\xbc\xeb\x0c\xba\x39\x15\xb0\xac\x91\x2c\xa9\x59\x8d\x87\x4a\x01\xc5\xe6\x11\xe0\xf7\x87\xd8\x8f\x17\x2b\xff\xf0\x99\xae\x1f\x07\xc5\x98\x7f\xe6\x62\x16\xfe\xcb\x86\x66\x07\x65\xf8\xc3\x5d\xf7\x58\x19\x63\x94\x8d\x0b\xdd\x98\x03\xac\xbc\x61\x56\xd0\x21\x51\x10\xed\x24\x6b\x83\xdf\xcf\x2e\xcd\x63\x16\x99\x0e\x8d\x5a\xf5\x73\xf1\x23\x37\x61\x1e\x70\xd8\xce\x56\xb6\x2c\xb5\xa4\x97\x3a\xde\x5a\x11\xba\x40\xc4\x8e\x09\x46\xa2\xd1\xf5\xee\x8a\xe0\xbe\x11\xa4\x40\x50\x85\x65\x60\x50\x30\x15\x90\x67\x97\x1c\x1e\x15\x1b\x70\xa6\xc1\x3d\x71\x26\xdf\xef\x8d\x73\xef\x4c\x2b\x93\xff\xc4\x79\x2b\xf3\x2c\xc9\xf2\x9e\x21\xe6\x4a\xc9\xb2\x94\xfb\xab\xa2\x98\x63\xaf\xb9\x98\x39\xf6\xbb\x20\x57\xec\x9c\x7e\x58\x52\x05\x6a\x51\x92\x29\x55\xcf\x4e\x4a\xad\x4c\x3f\xfd\xd1\x94\x32\x67\xa4\xa6\x89\xf1\x2e\x6e\xe4\x3d\xff\x04\xd5\x67\xda\x00\xa8\x34\x3a\x68\xc0\x96\xba\xa8\x78\x95\x37\x04\xd7\xf0\x51\x99\xfb\xc4\x7a\x1a\xe6\x62\xcc\x0e\x7b\xf9\x98\xc3\x2c\x15\x05\x3d\x81\xef\x30\x9e\xa8\x1d\xae\x17\x87\xf7\xf4\xb4\x9c\x1b\x08\xbc\x4c\xef\x91\x57\xe0\x3b\x2f\x7e\x6b\xc6\x67\xe1\x16\xfe\x0e\x2d\x1f\x2d\x2b\x9a\xe2\xd0\x8b\xb1\x6f\x7a\x2b\x99\x6c\x05\xb0\x65\xc3\x40\x55\x6e\x96\x7f\xba\xbb\x12\xbd\x40\x8b\x08\x52\xee\x3e\xb7\xdb\x5b\x36\x94\x3b\x9f\x93\xd1\x07\xe2\xc0\xb5\xfb\x4f\x21\xb8\x61\x61\x8e\x6f\xa6\xf4\x29\xad\x8e\xd4\x00\x4b\x9f\xfb\xda\x08\x7b\xaf\xa3\x15\x84\xb7\x38\xde\xab\x9d\xc1\x2a\x42\x19\xf4\x1a\x9d\x2c\x33\x5b\x51\x98\x4d\xe2\xac\x17\x51\xcc\x4d\x3f\xe9\xa5\xdc\x0f\x3a\x61\x6c\x44\xaf\xa6\xa9\x9c\x74\x8a\x99\x01\xcf\x80\xe0\xbc\x53\x0a\x3e\x32\x3b\xef\xab\x85\x80\xfa\x82\xe3\x7d\xcc\x19\x2c\xa1\x06\xcb\x17\x39\xf9\xe3\x44\x63\xfd\x52\x0c\x34\xae\x18\x0d\x7f\x8a\x93\x5b\x0d\xb4\x61\x17\x30\x1a\x8f\x06\x5a\x38\x54\x14\x80\xbb\xa6\xd1\xd2\x94\x8d\x09\x04\x65\xf7\xad\xd6\xbc\x7f\x90\xde\x74\xff\xd0\x26\xdc\x7e\x85\x05\xa9\xe9\x47\x65\x57\xd4\xaf\xff\xf3\x54\x9e\x1e\x19\xb9\x56\xf4\x90\x2d\xe1\x3a\x86\x84\xf3\xbd\xa5\x25\x0d\xda\x6b\x86\xec\xd9\x50\x22\x6a\x9a\xab\xe5\x70\x21\x62\xed\x4b\x4e\x85\xde\xf6\x61\xc7\x7b\x5d\x41\xcb\xaf\xf4\x37\x80\xca\xc9\x68\x18\xea\x1a\x08\xa0\x9b\xca\x0d\x17\x63\xdc\x95\xb3\x96\x3d\xa3\x8b\xc1\x2b\x96\x2a\xac\x52\x7c\xb8\xa7\x74\x2b\x80\xb8\x3c\x7a\x6b\xa7\x4b\x92\xcd\x94\xc4\x07\x76\xb3\x27\x9d\x9f\x98\x00\x3c\x67\xfe\x64\xc4\x9b\x30\x7e\x57\x31\x7f\xd9\xf4\x30\x03\x5c\x69\x3e\xbe\x6b\xdb\xf1\xe5\x12\x1c\x5f\xbe\x62\x3a\xbe\x7c\xee\x12\x1d\x5f\x5e\x54\xed\xf7\xf2\x88\xc5\x24\x6c\xfb\xbc\x5c\x22\x6e\x74\x5b\x39\xa5\xdd\xed\xfd\x64\x58\x05\x1a\x4d\x4b\xd2\xb4\xfe\xee\x67\x7b\x37\xd1\xcb\x07\x88\x80\xcb\xc5\x79\x6f\x48\x90\x4a\xd7\xeb\xef\x0d\x5b\x97\x2b\x7e\x2f\x6f\xcb\x3e\x68\xda\x56\xe7\x93\x99\x48\xe7\xe3\x56\xe2\x7e\x6e\xd8\x7b\x8e\xfa\x41\xa8\x51\xe8\x62\x51\x45\x95\x02\x9e\x2c\xb1\x10\x01\x0a\x58\xfb\x5a\x1d\xb0\x29\x20\x1b\x4d\xc0\x6e\xdf\x6d\x7d\x7d\x88\x7d\xc4\x61\x43\xbd\x30\x70\x1f\x74\xbc\x9f\x73\x66\xb4\xba\x8a\xca\x33\xd8\xf3\x02\x59\xd9\x96\x8e\xc0\x84\x12\xfd\x66\x9a\xc8\xfd\x18\xe2\xa2\xe7\x5b\xc6\x1b\x20\x24\x93\xdb\xb1\xba\xee\x46\xbc\x33\x78\xa7\x80\x46\x35\x05\x89\x94\x90\x81\x52\x84\xc8\xad\xa5\x74\x2b\x7e\x72\x7e\xce\x0e\xdb\x78\x2e\x1b\x91\x99\x81\x37\xd1\x82\x37\xbb\xac\x54\x44\xa8\x2c\x56\x3f\xea\x0f\xa8\x75\x07\x58\xc5\xa2\x08\xa2\x50\xd6\xb0\x83\xec\xdc\x63\xb6\x43\x9c\xc9\x53\xdf\x15\xde\xcd\x33\x71\x5f\x56\x2f\x24\xff\x0c\x73\x00\x34\x70\x0f\x35\xc9\x18\xd3\x24\x6d\x3c\xe4\xfc\x24\x7b\xfc\x60\x88\x34\x73\xb3\xba\x9d\xed\x84\xc9\x95\xb9\x4f\xf7\xae\x5f\xd6\xc8\x82\x49\x0b\xe7\x5c\x66\xf7\xac\xaf\x88\xc8\x36\x03\x60\xfb\xeb\x11\x36\x35\xe8\x26\x60\x2f\x5d\x33\xab\x40\xae\x34\x6c\x92\xd6\xff\xa9\x11\xef\xd5\xce\xc6\xe7\x06\x32\x64\x3b\x59\x07\x3f\x00\xb8\x0b\x00\xf2\x8a\x0e\x24\x34\x81\x3d\x7d\x5e\xac\x26\xb5\x93\xd9\x98\xd3\xed\x30\xcf\xea\x5d\xa9\x32\x80\x63\x3f\x64\x14\x17\xde\x53\xf0\xc9\x58\xe3\xac\xb3\x33\xf7\xd3\x55\x91\x9f\x75\x18\x96\x72\x1c\xf0\xde\xae\xc0\xa7\x77\x6c\x40\x7d\xfb\xfb\x9d\xec\x28\x33\x92\xba\xb7\x7a\x53\xc5\xaf\xaa\xb3\x04\x55\x3e\x8c\x39\x6c\x90\x65\x07\x84\x6f\x99\x37\x0d\x5f\xbb\x1c\x6e\xed\xaf\xa9\x99\xfe\xcd\xc5\x8d\x42\x5d\xc4\xcd\x84\x6e\x80\x3b\x74\xdf\xa2\xb6\x30\xa3\x37\x4b\x17\x13\x4a\xcd\x43\x27\x15\x6a\x0c\x00\xbb\x29\x37\x96\xe2\x2c\x81\x3c\x6e\xc6\x54\x86\x6b\x06\x91\x17\xe7\x49\xfc\x3e\xa3\xeb\xb9\x22\x56\x4c\xeb\x75\x3a\x41\x33\xe9\xca\x81\x86\x92\x00\x1a\x65\x9c\xff\x74\x2f\xcb\x8d\x5c\xa0\xc3\x4d\xd0\x26\x59\xc8\xaa\x0f\x62\x80\xb2\x69\xb0\x17\x3b\x8c\x46\xd8\x5d\x63\xb7\x0d\xf6\xb0\xae\x98\xbc\xb3\x52\xf4\xd0\x76\x5a\x3e\x84\x3c\x19\xf3\x2c\xe2\x9b\xd0\x03\x30\x30\xc9\x4d\x54\xa0\xda\xfd\x0e\x33\xa7\x93\xfb\xc2\x4b\xf2\x54\xf0\x6e\x35\xf2\xd2\xd1\x9a\x58\x1b\x94\xa6\xf6\xbc\x1b\x05\xdc\x8d\x7b\xe8\xeb\xb1\x06\xfb\xa4\xc3\xae\xf4\xd7\x84\xdc\x60\xb0\x3e\xef\xbf\x10\x45\xa8\xa2\x42\x2d\x33\xb7\xcd\x6a\x44\xe9\x4a\x15\x24\x11\x2f\xa5\x65\x2a\x22\xb1\xe6\xc7\xe4\x9e\x5e\xaa\x39\x7b\xf5\x30\xdb\x53\x05\xf8\x98\x64\xf9\x82\x9f\xb7\x2d\xdb\xc2\x7f\x1d\xf2\xd6\x2c\xdb\x02\xd8\xe8\x00\x7f\xb3\xe3\x77\xbb\x70\x04\x07\xd8\xc3\x6e\x12\x34\xf8\x6d\xfa\xe5\x1a\xd9\x30\x15\xcb\x13\x31\xb4\x24\xeb\xb1\x48\xb3\x76\xd8\x25\xeb\x03\xec\x7c\x49\xaa\x21\xea\x52\x01\xab\x46\xce\x9e\xb3\xce\xb0\xcc\xc9\xb6\x3d\xd4\x00\x3b\x5c\x3e\x77\x3f\xeb\x78\x1f\x71\x64\x7d\xf5\x75\x04\x40\xd7\x24\x69\xdf\x86\x60\xa1\x73\x1e\xd4\x0a\x15\xfc\x7e\x27\x0a\xe3\xd3\xb0\xe4\x60\xd6\xb7\x92\xc2\x8b\x2f\x8c\x4f\x17\xf1\x8c\xb0\xf0\xf2\xf6\x05\xc7\x33\x68\x4a\x4f\xec\x84\x6b\x65\x45\x74\x5b\x48\x5c\xbd\x4c\x81\x1c\xdc\xe7\x25\x08\x84\x95\xa4\x5c\x0d\x01\xa7\xe3\xae\x79\x14\xf4\xbc\x1f\x44\x35\x3e\xb6\x93\x4d\x5e\x28\xa6\x9c\xfb\x7f\x76\x78\x27\x36\x4d\xa1\xce\xd1\x0a\x77\xae\x38\x6e\x6a\x30\xbd\x38\xe0\xcd\x54\x04\x88\xa4\x93\xd9\x5a\xce\x3b\x76\xb0\xff\xe6\x30\x77\xb5\x93\xf9\xb3\x3a\x0d\x78\x0c\x7f\xdd\xf1\x7e\xd5\x79\xfa\xb1\xa5\x19\xfb\x39\x06\xab\x0a\x72\x28\x93\xef\xc1\x84\x84\x4c\x38\xeb\x62\xa5\x9d\x24\xa7\xf9\xa8\xa1\x10\xb7\x7b\x2b\xc0\xfc\x64\xa8\x92\x59\xb8\x9a\x4d\x10\xfe\x5e\x5d\x16\x3d\xc6\xc3\x38\xd2\xaa\x3f\x80\x27\xc6\xb9\xbe\x07\x81\x42\x8a\x16\x80\xe0\x25\x4e\x07\x52\x31\x36\x56\x13\x04\x2d\x7a\xde\x99\x63\xd0\x61\x8f\xdb\xd8\x54\xd8\x13\x97\xbc\x23\x03\x72\xa9\xd8\x1f\x2b\x6b\x84\x97\x73\x56\x71\x9f\xaf\xb1\xab\x34\xf6\x27\x14\xf3\xe1\x9a\xf7\x2e\x04\xfe\xa4\x27\xbc\x18\xba\x4b\x02\x02\xd5\x0a\xef\x0f\x00\x0c\xf4\x11\xc7\xed\x32\xec\xb2\xb6\x00\xad\x64\x3c\x27\x07\x66\xf7\xd3\xc3\xde\x9c\xfd\xc8\xc4\xcf\x8d\x22\x6d\x0b\x40\xc7\x33\x05\x39\xa4\xbc\x68\x80\x5f\x2b\x49\x4b\xce\xee\x7f\x32\xc4\x3e\x5a\x63\x23\x6a\x0b\x71\xdf\xb7\x99\x93\xb5\x5a\xd3\x52\xca\x04\x95\x96\xc0\x3f\x73\x14\x3e\x33\x5d\x56\xe9\x04\x26\x02\xb2\xb1\x23\x6b\x03\x48\x68\xa0\x6b\x23\x2b\x50\xcb\x76\xae\x57\x91\xe0\x2d\xe3\x1b\xc3\xdb\x75\xdc\xa0\x6c\x80\x89\x27\xdb\xab\x1e\x2c\xc8\x1d\x03\x7c\x7b\xc9\x06\x52\x76\xc9\x06\x71\xde\xe9\x11\x40\xb8\x38\xd3\x8c\x7a\x99\x3c\x25\x10\xb8\x25\x1a\x94\x3d\x72\x0d\xf2\x1a\xec\x61\x87\xed\xa2\xcc\xdd\x77\x6f\xc6\x27\x59\x39\xa2\x94\x8f\xf2\x4c\x3f\xa5\xd8\x5c\x4c\x4b\xa0\x42\xe5\x47\xcc\x41\x4a\x7a\x41\xb5\x55\x23\xe1\x35\xd8\xf7\xae\x61\xd7\x9f\x47\xb5\x22\xcd\x1f\xfd\x84\x3e\x7b\x8d\x77\xab\xf9\xa0\x14\x4f\x11\xf9\x59\x0e\x41\xf8\x86\x6b\x96\x8a\x76\x40\x15\x42\xee\xb9\x72\x4f\xb2\xe6\xda\x9f\x3f\x8a\x7d\x75\x88\x3d\x5a\xaf\x74\x55\x41\xf7\x13\x43\xec\x19\x17\xa6\x07\x96\xb3\x30\x2b\xeb\xfd\x79\xcd\x80\x9a\x54\x73\x45\x13\x63\x82\xfd\x54\xf9\x41\x93\x42\x06\xd0\x88\xe0\x8d\x93\x64\xa5\xe5\xac\x8d\x68\x72\x3e\x01\x9a\x58\x36\xc6\x4f\xc7\xc9\x3a\x98\xa6\x4d\xe2\x3c\xf3\x28\x44\x9d\x61\xa1\xc4\x01\x50\x6e\x37\x29\xae\x1a\x94\xb7\x15\x9c\xaa\x48\x3b\x43\x9e\xc1\xd9\x85\x93\x52\x97\xe9\x88\x4e\x92\xf6\xc7\x1a\x7c\x49\xd6\x4f\xe9\xe1\x7e\x2a\xf8\x4a\x2f\x8c\xd0\x3b\xc9\xac\x03\x1a\x76\xe0\x14\x0d\x6d\x90\xa2\x1b\x7b\xae\x08\xd2\x91\x9f\x74\x71\x71\xc9\xb6\x16\x31\xcb\xb9\xd4\xaf\xd2\x8e\xd4\x54\x44\x5a\x97\xf5\x54\x05\x16\x3c\x91\x9e\xd4\x02\x3d\xba\x15\x6a\xb0\xbf\xab\xb1\x11\x75\xdb\xe3\x7e\xb7\xc6\x66\x2e\x68\x10\x0f\xd3\x97\xd6\xd8\xbd\xa7\xa6\xaf\x8f\xcc\x11\xa3\xd0\x06\x1a\x2f\xe5\x6c\x24\x17\x73\xd9\x7b\xd2\x8f\xfb\x15\x1a\x3f\x9f\xcf\x35\xfa\x7b\x51\x15\xa2\xd7\x4b\x62\xeb\x80\xdf\x4c\x00\xc3\x0d\x4c\xac\xcd\xa4\xd3\x4d\x62\xd8\xad\x95\x7f\x73\xd2\xcb\xb3\x30\x80\x49\xaf\xa2\x22\x2c\xb2\xa4\x02\x3c\xe4\x9e\x9e\xe8\x81\x60\x6b\x46\x49\x4f\x41\xcc\xe1\x4d\x07\x2c\x6d\xf0\x4b\xbf\x7d\x61\x09\x8b\xb2\xc2\x3e\x06\x17\x36\x06\xe0\x61\xb4\xa6\xdc\x4f\x39\xec\xe0\x05\x75\xba\x75\xcc\xc7\x2e\xcf\xcb\xd4\xb1\x03\x8e\xf7\x34\xa7\x2f\xcf\x29\x9f\xbd\xb9\xc6\x86\xe5\x6c\x72\xef\xaf\x0d\x06\xa4\xa9\x6c\xc2\x42\x12\x64\x56\x03\xbe\xe2\xc0\xe1\x64\xf3\xfa\x6f\x6d\xf5\x59\x2d\xc9\x53\x3f\xce\x08\x2a\xa5\x4e\x5a\x89\x08\x8c\xb6\x8d\x35\x78\x71\xdf\x9c\x15\x20\xee\x78\xa8\x92\x87\xdf\x55\x04\x5e\x5c\x11\x2d\xa9\x70\x23\xf1\x04\x84\xa4\xa4\xc5\xad\x88\x79\x2e\x6b\xb0\xb7\x0e\x19\xbb\xf1\xfd\x43\x17\xb8\xa6\x2a\xe5\xe1\x97\x6b\x3f\x14\x29\xf8\xcf\x4f\xde\xbd\xbf\x46\x27\xad\xb7\xd7\xbc\x07\x6a\x55\x80\x72\xd4\x95\x2a\xa4\x49\x8a\x1d\x35\x2b\x28\x52\xcc\xdb\xb0\x77\x79\xe3\xdc\x53\xb2\x50\xfe\x8d\x4b\x54\xfe\xb5\x00\xa5\x27\xa9\xb1\x97\x8f\x2b\xbc\x75\xe5\x16\xae\x26\xbc\x72\x1a\xa7\xbb\x4c\xec\x72\x25\xfd\x8e\x27\xb9\x98\xae\x2a\x9a\xab\x46\x14\xfd\x22\xcf\x39\x0a\x41\x95\xfc\x86\xea\xab\x72\x97\xbf\x6d\x61\x46\x67\x70\x8c\xba\x2a\xcc\x14\xc6\xb2\xa9\xd5\x7e\x79\x77\x29\x5c\x03\x82\x11\x6d\x9b\xf7\x51\xe1\x67\xc2\x7d\xfb\x6e\xef\x09\xf0\x97\xbe\x1c\xf1\x21\xb0\x0e\xb6\x4e\x79\xf6\xb4\xb5\xd5\x57\x8e\xb0\xaf\x29\xc6\xaf\x2f\x6f\x02\x8e\xb3\x49\x91\x00\x99\xf0\x1a\x67\xa9\x8c\x6a\x22\x9b\x0b\x09\xb6\xa9\xaf\xfe\xa9\xdd\x1a\x6d\xdf\xbf\x5e\xfc\xfd\xeb\x27\xcc\xfb\xd7\x0f\x5e\x32\x36\xdc\xea\x23\x74\xd5\x7a\xce\x69\x9e\xff\xfe\xee\x69\xee\xad\xfa\xfe\xce\x12\x08\xa5\x4b\x3c\x58\xf6\x95\xd7\x77\x9f\xdd\x69\x05\xa1\x6f\x2e\x55\xdc\x07\x76\x7a\xa3\xfa\x17\x4d\xc1\x8d\xe0\x49\x28\x64\x2c\xb1\xf6\xbb\x3b\xd8\xab\x1d\x76\x85\xdf\x04\x8f\x12\xc0\x0f\xbc\xf7\x12\xe1\x03\xa7\x8d\xcc\xb0\x2a\x26\x7c\x60\xb1\x19\xa3\xb0\x5d\x97\x87\xcc\xa6\xc2\x0b\x14\xec\xea\x76\x12\x05\x22\x9d\x07\x03\x50\xde\x77\x97\xbc\x23\xf6\x13\x1b\xaa\x37\x54\x4f\x49\x8e\x62\x5a\x6c\xae\x55\x90\x65\xfb\xf8\x4f\x0e\x7b\x2c\x3c\x9d\x23\xff\x15\x85\x0c\xf5\xef\x34\xfe\xd1\x5b\x9d\xaa\x04\xd8\x9e\xc0\x22\xd0\x69\xfa\x71\x00\x60\xfb\xca\xf8\x81\x0d\x8b\x05\xea\x59\xeb\x3e\x22\x3c\xb5\x12\xb9\xd8\xa9\xa9\x3c\x34\x02\x41\x3a\xc2\x07\x30\x7e\x7f\x55\x36\x2b\xc7\xee\x4a\x5a\x70\xd6\x2d\x02\x56\x16\x45\x2c\xd6\x65\x9f\xda\xb1\x29\x29\xbb\x06\xca\x5b\x96\x1a\x23\x45\x32\x3d\x5f\x35\x62\xbe\xfc\x4a\x9b\xdc\x74\x40\x4c\x6e\xbc\xc4\xa0\x44\xa8\xbd\x02\x69\xc2\xfe\xcc\xec\x32\xdf\xed\xb0\xdd\xa9\xaa\x8e\xfb\xc6\x4b\xc5\x9b\x5c\xd4\x79\x6d\x36\x5d\xcc\x91\xc5\x3a\xb6\x81\x62\x3e\xcb\x95\x58\xc3\x0d\x04\x06\x9b\xfd\xe9\x48\x25\x5d\xb7\xa2\x0a\xcc\xc0\x11\xe7\xf3\x23\xde\x4f\x59\x4f\x4a\x30\x36\xea\x55\xb5\xfb\xcd\x2f\xec\xda\xde\x3f\x2f\x75\xff\x7c\x96\xf2\xba\x38\xe1\xb9\x47\x37\x74\xfb\x85\x13\x66\xeb\xd1\xdc\xde\x99\xb7\x21\x81\x2e\x0f\x61\xb6\x25\x20\xca\xa8\x36\xaf\x1b\x61\xf5\x8a\x69\x78\x24\x12\x67\x06\x04\xb1\xfd\xd7\x5d\xde\x4b\x9d\xc1\xef\xcd\xb8\x48\x1f\x39\x08\xc2\xa6\x26\x18\x8c\x73\xe5\x01\x6d\xcc\x51\x34\x48\x81\x6f\x08\x4a\x98\x09\x3f\xcf\x7d\x88\x85\xc6\xe3\x24\x38\x46\x8b\x26\x99\x9c\xd0\xd9\xbb\x51\xed\x17\xfd\xf9\x9d\xec\x25\x8e\xe1\xfd\xb9\xe6\xb5\x0b\xff\xf6\xf3\xf8\x74\x02\x85\xaf\xfc\x8a\xc3\x25\x16\xdd\x4a\x62\x1d\x45\xf1\x52\x59\x8a\xc3\x98\x2e\x08\x81\x46\x27\xb3\x5d\x42\x7f\xb3\xc6\x76\x67\xda\x3d\xf8\x0b\x17\x13\x56\xf5\xda\x5a\x51\x73\xcb\x31\xf8\x32\xbb\x05\x63\x7f\x72\xc4\xfa\x55\x6e\xbd\x83\xdd\x77\xa9\x94\xd0\x42\xcb\xb8\x7c\xe1\x09\x03\x6a\xc5\x4e\x68\x67\xf7\xc3\xde\x4d\x17\x1b\x0d\x67\xca\x88\x5f\x2d\x3c\xd3\x3f\xe3\x78\x1f\xda\xc4\x33\xfd\x07\x19\x3b\x63\x11\x41\x19\xd9\x07\xa2\x2b\xa4\xba\x96\xc4\x5c\xae\x35\xba\x89\xc6\xde\xb0\x9a\x71\x82\xed\x22\x7b\x8d\x3b\xe7\xed\x29\x66\xcc\xe1\x33\x79\xea\x73\x29\x83\xe4\xd6\xa9\x4c\x3a\xa1\xdc\x9c\xfb\x9b\xfa\x01\x7f\x63\xc4\xd2\xdb\xd3\x15\xbf\x09\xe1\x0e\x68\x42\x5d\x4c\x22\x71\x28\x84\x88\x7a\xd0\x40\x1e\x1a\xf1\x9e\x5a\xfd\xaa\xd2\x2b\x78\x43\xca\xac\x52\x33\xf9\xd6\x4e\xd6\x53\x1b\x6b\xe4\x3d\x69\x5e\xb9\x33\x16\xaa\x4d\x45\x4e\xe6\x66\x7b\x23\xbb\x61\x13\x52\x85\xc1\x6d\xda\xde\x75\x2f\x61\xd7\x6d\x19\x9b\xee\x73\x2e\x6d\xcf\xfd\x89\x4d\x60\xd2\xb7\x95\xd6\x4b\x86\xc7\xeb\x9d\x5f\x99\x58\x74\x17\xb4\x32\x01\xeb\xc5\xef\xe5\xed\x24\x0d\xef\xad\x34\x03\x54\x8b\x80\xb2\xb2\xf1\xcb\xbb\x2d\x37\x17\xd9\x89\x41\x8f\xb0\x16\x20\x32\x73\xaa\xb1\x90\x86\x09\x78\x00\x44\x7e\x86\x67\x9c\x57\xec\xf6\x0e\x6c\x78\x5a\x25\x5c\xba\x94\x08\xb1\x9c\xc4\x80\x43\xcf\x97\x77\x6d\xfb\xcd\x6f\x2f\x06\x43\x6a\xdd\xab\x36\x9a\x7b\xbc\xeb\x2a\xfd\xe6\xad\xc9\x27\xac\x6d\xe6\x56\x76\xcb\x26\x2e\x1f\xe7\x9d\xdf\xdb\xbb\xcd\xc5\xef\x36\xe7\x9c\xf8\xfc\x42\xec\x99\xee\x7c\x11\x85\x50\x8c\x46\x49\x78\x6d\x90\x2e\xb6\xdc\xc2\x91\x63\xec\xdd\x8c\x3d\xf5\xc2\xb1\x71\x0c\x58\x1c\xf7\x0f\x77\x7b\x77\x15\x3f\xed\x93\x92\xe1\x42\xec\x9b\x3c\xf7\xc0\xd4\x48\xab\xb9\xc1\xc1\x3b\x47\x01\xed\x79\x54\xc9\x06\xb4\xd0\xb3\xed\xa2\xaf\x1e\x61\x6f\x71\x64\x67\x81\x53\xca\xfd\x0e\xbb\xfd\x52\x51\x7e\x36\x80\x1a\x79\x37\x5e\x24\x8e\xd1\xb6\xd0\xda\xbe\xb6\xf9\xe1\xa9\xa9\xcf\x34\x76\xff\x83\x97\x78\x69\xc3\xde\xab\xae\x54\xdf\xea\xb0\x13\x97\x73\x85\x75\x45\xd3\x3b\x02\x97\x21\x7a\x75\x99\xab\x4a\xca\x09\x8c\x2c\x07\xfb\x08\x10\x8e\xc8\xde\xa2\x27\x44\x9c\x88\xcb\xed\x9c\xd3\x3a\xbf\xa8\x9c\x75\x67\xb4\xa8\x2c\xd7\xac\x24\x2f\x8b\x5a\x96\x15\xbc\x07\x6b\x95\x98\xeb\xb7\x25\x59\x3e\x13\x85\x7e\xe6\xbe\xbc\xe6\x25\xfa\x97\x11\xa5\xd5\xf1\xbb\x10\x1f\xa1\xac\xf6\xf3\x0b\xe8\x9e\x40\xd0\xbb\x99\x8d\xc2\x1f\xc6\xb2\xff\x75\x84\x06\x38\xc4\xaa\x6b\xfb\x6e\x12\xec\xc9\x10\xf5\x17\xce\xd3\xb6\x54\x7c\xb9\xc3\x8e\xb2\xdd\x3a\x5b\xf7\xa0\x77\xed\x6d\xba\x0c\x15\x1b\xe2\xaf\x24\x6b\x02\xaa\x10\x04\x80\x89\xb9\x49\xd4\xd0\x0d\xac\x16\x76\xdd\x09\xcf\x2b\x92\x17\x37\x39\x19\x1e\xe9\xb1\x82\xd6\xa9\xfd\xef\xae\x60\xff\xb2\xa2\xa3\x8e\x27\x81\x70\xbf\x71\x85\x17\x42\xec\x2c\xac\xe8\xf5\x24\x3d\x2d\x52\xc2\xfc\x8f\x0d\x07\x8e\x06\x3f\xec\x37\xdb\xf8\xa2\x88\x00\xf3\x55\x28\x9a\x8e\xe4\x4a\xb5\x0f\x89\xdf\x6c\x0b\x3e\x1a\x36\x44\x03\x5c\xea\xf2\x66\x30\x66\xf7\xce\xeb\xd8\xb6\x64\xfe\xff\xd9\xbb\xf6\x18\xb9\xae\xb3\xce\xdd\x87\x9d\x9c\xd8\x29\xdc\x88\x0a\x08\x12\x87\xe3\x88\xf5\xaa\x33\xb3\xb6\xf3\x20\x31\x69\xe8\xc6\xbb\x6b\xaf\x62\xaf\x57\xde\xb5\xd3\x80\x4a\x72\x66\xe6\xcc\xcc\xcd\xde\xb9\x77\x74\xcf\x9d\xd9\x4c\x68\x40\x81\x42\xa3\x08\x90\xda\x14\x81\xd2\x28\x41\xaa\x04\x6a\x00\xd1\x80\x94\xd0\x00\x6d\x40\x0a\xa1\xa8\xbc\x5a\xd1\xf2\x5f\x8b\x4a\x89\x14\x51\x21\x08\x2f\x05\x09\xa1\xf3\x7d\xe7\x75\xef\xdc\x7d\xd8\x09\x2e\xad\xfc\x4f\xe2\xbd\x73\xef\x79\x9f\xef\xfd\xfd\xbe\x6b\x94\xf9\x9b\x47\x99\xbf\x2d\x8b\xad\x7d\xd6\x70\x88\x17\x03\x32\xbf\xa7\x11\x18\x70\x65\x14\xed\x7f\x22\xd0\x60\xec\xee\xc2\x35\x45\x8f\x8f\xa2\x54\xbb\x10\x01\x00\xf7\xaa\x04\xd9\xfc\x97\x93\x23\xbf\x11\x90\xf7\xec\x6f\x0e\x28\x21\xfe\x51\x70\x0e\x80\x87\x45\x0b\x21\xdf\xad\x33\xd8\x2f\x24\x27\xf4\x5c\xd6\xd3\xc1\x10\x8b\xa2\x99\x8c\x57\x6d\x3e\xbd\x60\x30\x1b\xae\x76\x7c\xd1\x5b\xc1\xd9\xbd\x39\xe7\x7c\x38\x57\xe5\x76\x51\xab\x30\x61\x00\x39\x4c\x8e\x54\x41\xa7\x96\x3c\x29\xe1\x53\x87\xd9\x0b\x41\xf9\x29\x3d\xba\x7e\x69\xde\x10\x13\x44\x0e\xb4\x14\xc3\x73\x9e\x68\x24\x19\x00\x6f\x41\x16\x9e\x66\xa6\x08\x1c\x4f\x78\x9c\x76\xd3\xa1\x0e\x7c\xc3\x65\xbf\xc2\x7c\x26\xe7\xd2\xa9\xeb\xd4\xa6\x02\x2f\xf9\xf7\x6b\xbc\xe4\x1a\x2f\xb9\xc6\x4b\xde\x59\x5e\xf2\xe4\x94\xe6\x25\x8f\x4f\xed\x03\x6f\x68\xc2\x41\xab\xf8\xca\x6b\x45\xbe\x52\x19\x66\x35\xe9\xad\x4d\xb7\x3d\xe0\x2d\x5b\x64\x7e\x7d\x2f\xaa\xf3\x8e\x91\x96\x23\x93\x8f\xc8\x53\x53\x96\x2d\x3d\x31\xb5\x6b\x3c\xeb\x0e\xcb\x81\x2c\xea\xf3\xc1\xee\x80\xbe\x9e\xd6\xb5\xa0\xb9\x96\x51\x14\x26\xd6\xe9\x8a\x79\xd8\x3b\xb6\x2a\x6f\x05\xef\xdf\x9b\x63\xdd\x1e\xde\x5a\xc5\xb1\xca\x0b\x54\xe6\x5e\x1f\x27\x95\x78\xb7\xe5\xcf\x4e\xc5\x3c\xea\x83\xe9\xfe\x8d\xeb\xd9\xa9\x1d\x7f\x2d\xfa\xf3\x2a\x5f\xa3\x60\x8f\xad\xb6\xe3\x3f\x7f\xdd\xb7\x5f\x94\xc7\x35\x8e\xf9\x76\x39\xe6\xdf\x05\xc6\x9a\xff\x97\x01\xfb\x90\x57\xff\x62\x92\xa4\xb5\xd4\x09\xbb\xfc\x4a\x85\xfb\xba\x8d\xf8\x04\x7b\xd8\x7f\x39\x9f\x5d\x2f\xd4\x35\x61\xe0\xed\xf8\x0a\xf8\xde\x44\xf1\x9e\xf0\xee\xfd\x10\x45\x4b\xbf\xca\xd4\xf1\x57\x0e\x92\x1f\xa8\x2e\x8b\x60\xe1\xf0\xc3\x37\x0f\xb0\x25\xff\x81\x6f\x39\xcf\x79\x14\x3b\xd6\x62\xb8\x8f\x85\xf7\xf7\xcb\x48\x9a\x0c\xd1\xa7\x03\xcd\x00\x0b\x94\xf1\x97\x0e\x90\xf7\x93\x83\x98\x31\x27\xc2\x73\xec\x7d\x67\x8a\x65\xbd\xf5\x2f\x06\xa2\x46\x9d\x14\xd3\xbb\xc1\x4b\x97\xb9\x17\x56\x5b\x30\x5c\xfd\x04\x39\x90\x09\x2e\xd3\x24\xdc\x64\xa7\x2f\x82\xa9\xa9\x46\xd3\x44\xd4\xb7\xd3\xac\x5d\x73\x3b\x4d\xf1\x2d\x0f\x3d\x52\xcf\x63\x4e\xee\xda\xfe\x4b\x4e\xd7\xfc\xad\x80\x3d\x6b\x78\x73\x54\xae\x3d\x52\x68\x13\xce\x9d\x3a\x74\x9b\x99\x1a\xce\x0a\x8f\xa5\xa8\xd1\x8b\x09\x24\x59\xbd\x8d\x3a\x98\x83\x14\xff\x53\x8f\xa3\x8e\x68\x8d\x5b\xb1\x80\xc2\x97\xae\xe4\x82\x3f\xf2\xa7\x0c\x94\xc4\x93\x01\x7b\x6c\xb3\x22\xbf\xa9\x34\xe4\xab\x33\xaa\x84\x1c\x56\xcb\xbd\x9e\xa5\x4d\x0c\x8e\xff\xc0\x95\x97\xc5\x66\x67\xb9\x09\xee\xde\x06\x95\xb3\xa9\x43\x96\xdd\xac\xc8\x47\x02\x12\xaa\x0e\x5d\xc8\x36\xf4\xfa\x93\x57\xde\xeb\xfb\x5c\xaf\x85\xbe\xbc\x13\x24\xda\x48\xaa\x20\xba\x0c\x8f\x88\xcb\x98\x6f\x90\x37\x6e\xde\xa9\x72\x5f\x09\x6f\x20\x7c\xe5\x66\xf6\x6f\xc1\xe4\x73\x6d\xa8\x86\x35\x57\xa4\x88\x4a\xfd\x3b\xe5\x0e\xd9\xd1\x18\xe1\xdd\xad\x16\x99\x89\x15\x54\x24\x36\x35\xa8\x13\xba\x84\x4b\x2c\x53\xaa\x29\x30\xe4\xb9\x9a\x6f\x1a\xb2\x8c\xb1\x40\x57\x20\x2f\x4d\x67\x4a\xa6\x9d\x9d\xdf\x05\xc0\x84\x89\xd2\x5b\x9d\xd2\xe7\x15\x38\x0e\x05\x02\xf2\xf2\xf7\x92\x97\xa7\xc9\x21\x40\xa7\x58\x4b\x93\x0b\x69\x9a\x87\x9f\x9c\x66\x4f\x4f\xaf\x5a\x50\x2b\x30\xc7\x17\xa1\x27\xc0\x2b\x99\x0d\x13\x4c\xba\x4f\xd2\xa4\x9e\xa5\x69\x8e\x60\x6a\x10\x1f\x08\x77\x53\x7d\x73\xdf\xb0\x29\x62\x53\x35\x77\xc4\x63\xc8\x3d\xc0\x64\x08\xc0\xa4\xe0\xd0\x0e\xee\x78\x4a\x45\x22\xb1\x46\x15\xcf\x69\x94\xd3\x76\x2a\x30\x79\x59\x77\x75\x71\x75\x89\x1e\xa3\x47\x55\x5f\xf3\xb0\x07\x1d\x1e\x41\x51\x38\x99\xf3\xac\x3c\xc6\xa8\x63\x9a\x30\x75\xae\x04\x00\xdf\x74\x90\x62\x24\x29\x85\x3c\x4e\x3d\x26\x80\x2d\xd1\x2e\x87\x81\xc8\x94\x1a\xb0\x03\x32\xc6\x04\x2c\xc6\xd5\xc7\xc5\xf0\x62\x4f\x5f\x99\x22\xd7\x5b\x68\x91\xf0\x77\xa7\x20\x99\xe2\x8e\xdb\xd8\x33\x88\x2e\xb2\xba\xf4\xb6\xd0\x44\xde\x09\x24\x91\x6f\xf6\x7a\x69\xb6\xc4\x73\xef\x2a\x15\x12\x44\x7e\x6e\x9a\xdc\x28\x05\xa0\x21\x19\xb8\x9d\x7f\x9d\x22\x0b\x7b\xc7\xf0\x2e\xfb\xdf\xb0\xcf\xc0\x8a\x1b\x58\xa5\x96\x19\x0d\x2c\x05\x1f\x0c\xe2\x08\xe3\x5d\x79\x1c\xbb\x81\x54\x94\x60\x2b\xee\x8a\xb9\x1b\x70\x34\x79\x0c\x5e\x40\x41\x39\xcd\x78\xd2\x4e\xfb\x13\xbd\x41\x5a\x36\xd7\xb5\x04\x71\xaa\xf4\x5b\x65\x4f\xc8\x4f\xa9\x6d\x68\xb5\xd2\xfe\x60\x3d\x4b\x3b\x51\x2c\xc2\x78\x3f\xbb\x50\xf8\x84\xdd\xb5\x89\xa1\xc9\xea\x99\x8d\x84\xd5\x11\xc2\xc6\xa4\x61\x57\x1f\xbd\x65\x5a\xce\x22\x7f\x31\x45\x6e\xd4\x68\x44\xe6\x1c\xbc\x3c\x45\xee\xd9\x73\x04\xbb\xe2\x32\xb1\xff\x84\xd2\xf4\x06\xda\xc7\xa2\x32\x19\x66\x71\xb9\x47\xc3\x4c\x69\x3b\xca\x7b\x51\x02\x71\x71\xfa\x83\x39\x39\xb1\xec\x3e\xc2\xdc\x55\x87\xef\x21\x9f\x9a\x26\x37\x75\x24\xc4\xb4\x9c\xea\xf1\xa4\x2b\xd6\xd3\x38\x6a\x8d\xc3\x5f\x9d\x66\x4f\x4e\x57\xfc\x60\x55\x5e\xdf\xf7\xd1\x52\x2f\x40\xa2\xba\xc5\x31\x03\x80\x1e\x91\x19\xb0\xa9\x62\x95\x8c\x02\x82\x80\x78\x64\x90\x4a\x2c\x9f\x14\xb5\x85\x9a\x5d\x01\xc8\x1a\x96\x07\xe0\xa1\x01\xfd\x5b\x6d\x81\x81\x6c\x57\xaa\x85\x86\x10\x37\x40\x6a\x7a\xc4\x06\x0b\xc3\x0c\xe7\x68\x71\x38\x72\xbe\x61\x93\xd9\xc1\x49\x9b\xa4\x54\x74\x3a\x4a\x09\x4b\x13\x2a\x06\x3d\xd1\x17\x99\xd2\xad\xfd\x8e\x34\xa0\xc0\x49\x1b\x2e\x8f\x70\xd5\x7d\x3e\x40\x51\x03\x22\xf3\xdb\x51\xd6\xa0\x97\x14\xb7\x32\xec\x5d\x89\x16\xec\x3c\xf0\xec\x73\x91\x84\xcc\x76\x06\xef\xb3\xc5\x78\x9b\x8f\x3d\x34\x75\xef\x10\x99\xdf\x28\x62\x66\x16\x71\xb1\x3e\x31\x45\x08\x70\x13\x98\x6a\xf8\x31\xcb\x4e\xfe\x07\x4e\xf1\xe9\x2b\x60\x27\x17\xa5\x90\x96\x8c\x99\xe0\xf7\x48\xf3\xe3\x6f\x4d\x86\xf1\x7a\x40\x42\x75\x2a\x74\x09\xd2\xf8\x34\xa2\x93\xfe\x75\xc0\x7e\xd3\xb3\x42\x68\x70\x52\xef\x7e\x03\x52\x40\x94\x41\xcd\x3e\x58\x1d\x58\x49\x83\x78\x63\x3b\x83\x6a\x75\x06\x89\xd2\x7c\xe7\x5f\xf3\x41\x16\xf5\x79\x36\x56\xdb\x81\x8b\x53\xa0\x12\x49\x6a\xba\xb6\x38\x1b\x6d\x0d\x7d\xcb\x93\x71\x61\x4e\xce\x58\xf1\xdd\xe4\x26\xbd\xd5\x85\x99\xfe\x4d\x40\x0e\xca\xb1\x6c\xe5\xb1\x0c\x5f\x0d\xd8\x93\xc1\x06\xfe\x01\x42\xb2\x67\xd1\xb3\x68\x54\x6d\xaa\x5f\x47\x54\x4b\x6b\x3c\x55\x37\x6f\xdd\x16\xee\x1f\x26\x2e\x99\xc2\xbc\x7f\xb4\x4c\x9d\xcd\xa1\x99\xa7\x7d\x28\xff\x67\x64\xbd\x98\x0f\x93\x56\xaf\x30\xfa\xf7\x90\x79\x32\xb7\x37\xa7\x80\x9e\xc8\x9f\x4d\x93\x83\xfa\x2e\x87\x7f\x38\x6d\x0e\xf8\xaf\x4f\x2f\x3a\x6c\x0c\x6f\x6f\x71\x2d\x35\x50\x3b\x6c\xa5\x9c\x24\xd5\xb0\x61\x38\x49\x10\xfd\x0b\x97\xdb\x15\x2c\x36\xb2\x70\x9e\x22\x59\x43\x39\xd8\x11\x36\xb8\x44\x3c\xf7\xea\x46\x34\x4b\xd6\xf8\x41\xda\x3e\x49\xc8\x71\xcc\x24\x49\xb7\x21\xef\x47\x5d\x4a\xb3\xd3\xea\x9d\x95\x0d\xa4\x53\x27\x74\x75\x35\x91\x77\xa3\x36\x6d\x22\xda\xa9\xba\x46\x47\x13\xb1\x8d\xe9\x27\xb4\x05\x05\x34\x2c\x0c\x86\xee\xd8\x22\x71\x98\xae\x75\x93\xf3\xf4\x56\x6c\xd3\xa3\xbe\xcd\x48\x67\xf4\x9c\xbf\x30\x67\x0a\x9c\x6e\xd7\xb3\xed\x7a\xbd\x5e\x27\xc4\xc8\xdd\x15\xba\x80\x22\x4b\xfd\xb4\x1d\x75\xc6\xa5\x55\x28\xd1\x53\x34\x6a\x8e\x5d\x56\x8f\x77\x3c\xff\xe9\x00\xf9\xc1\x3d\x45\x82\xf0\x4f\x0f\xb0\x4e\xf1\x91\xe7\x11\x19\xa4\xed\x05\xff\x6e\x19\xd1\x61\xa0\xdf\x74\x4a\x1d\xe4\x83\x29\xad\xd3\xfe\x54\xa8\x11\xac\xa8\x59\x15\x98\xd7\x17\x67\xc8\xef\x4c\x91\xef\x54\x92\x5b\xdc\x4b\x41\x3b\x87\x51\x3d\x3d\xc5\x7e\x61\xaa\xfc\xd4\x83\x12\xe6\xb6\x1f\x1c\x6c\x1b\x0f\x19\x3c\xd1\x68\x9b\x10\x0e\xe4\x6a\xa0\x22\x97\x87\xfd\xd1\x5f\x9a\xe0\x51\x45\xdb\x4c\x01\xe0\x76\xe1\xeb\x3c\x85\xa0\x23\x3f\xef\xa9\x2d\x64\x4b\xe8\x32\x9a\x3c\xef\xd5\x00\x21\x14\xf2\xca\x34\x29\xda\xc2\x6d\x9c\x93\xd4\x6b\xb4\xbc\x6e\xa6\x12\x8a\x6e\x19\xb8\xac\x21\xf1\x1d\x8b\xa6\xc2\xce\x9a\x05\x28\x56\x16\x7a\xd6\x00\xc8\xfc\xf2\x14\xfb\xb0\x06\x90\xb1\x2b\x83\x6c\x79\x2b\x4a\xda\x58\x8f\xbc\xd8\xb1\x25\x7a\x48\x77\x0d\xcb\xb4\x28\x98\x99\x38\x49\x88\xed\x96\xd6\xaf\x78\xa1\x2f\x20\x79\xd2\xea\x12\xad\xef\x20\xb9\x1b\x96\x67\x4f\x4d\xa9\x99\x8b\x09\xac\xa2\xea\xb7\xae\x68\xf7\xe4\x7b\x66\x26\x05\x23\x67\x46\x6e\x2a\x18\x39\x87\x09\x08\xac\x3f\x1e\x3e\x50\xa7\xed\x48\xb6\xb2\xa8\x1f\x25\x3c\x4f\xb3\x93\x58\x73\x93\x6a\x7b\x44\x3d\x4f\xeb\xde\xef\xe2\xde\xf1\x49\x42\x29\xa5\xe5\x93\x78\x92\x9e\x2d\x3d\x21\xe4\x6b\x07\xc9\xbd\xfe\x75\x13\x59\x8e\xce\x44\x21\x1d\x6e\xbc\x7b\xb8\x11\x75\x15\x81\xd2\xc5\x83\x9c\x61\xf4\x99\x83\x55\xf7\xe4\xe7\x0f\x92\x2f\x38\x7b\xe0\x6b\x01\xfb\xb4\xb1\x07\x96\xcd\x69\x35\x03\x11\x54\x6d\x01\x5c\x1c\x0c\xb2\x74\xa4\x38\xe1\x92\x48\x10\xf0\x30\x69\xd3\x15\x1e\xc5\xa2\xed\x1a\x41\xfb\xb7\xb6\x5f\x33\x68\x03\x11\x84\x74\x3b\xac\xa8\x08\x33\xd5\x17\x73\x86\x84\x9a\xb7\x3f\xb9\x26\xa2\x5c\x9a\xd7\x8a\x50\xfd\x78\x92\x1f\x62\x1b\x3b\x18\x07\xef\x03\x78\x28\x6f\x64\x51\xd2\x8a\x87\x6d\x41\x99\x99\x0a\xab\x51\x86\x93\x61\x38\x1b\x86\xd3\x29\xf6\xf4\xe2\x54\xa5\x39\xee\xb9\x5d\xfc\xa5\x7b\xd9\xe3\xbe\x16\x4c\x36\x68\x4d\x9d\x93\x56\xba\x92\xb1\x77\x77\x53\x9d\xb7\x96\x00\x9f\xc0\xa9\xe2\x4b\x9e\xc9\xcf\x20\x2e\x81\xf4\x92\x66\x98\x19\x1c\xc9\x1c\xb1\xc1\x9c\x89\x59\x5a\xb3\x31\x72\x55\xad\x29\xe9\x20\xfb\xb6\xdd\x45\x25\xf8\x1b\x69\x4a\x5b\xdc\x01\x9c\x9f\x7c\x90\xdc\xa8\x46\x7e\x11\xbc\x18\xb0\x66\x0f\x5f\xf9\x92\x2d\xa8\x36\x65\xce\xfb\x03\x57\xd6\xda\xc1\x3e\xe0\x00\x22\xe9\x26\x40\x36\x9c\xfd\xfe\x0c\xfb\x91\xde\xb0\xcf\x13\x3a\x61\xbf\x07\xc6\x5a\xb4\xdc\xe7\x00\x98\x0c\x77\x0b\xe1\x25\xfd\xb3\x70\x97\x35\xdd\x2f\x30\xd6\xcc\x22\xd1\x29\x1b\xe9\x77\xfc\xf4\x1f\x66\x2b\xc1\x28\xce\x6c\x6e\xae\x9f\x16\xf9\x22\xa4\x60\x85\x9f\x9d\x65\xef\x2d\x3c\xf1\x21\x56\x13\xca\x75\xa5\x57\x03\x1b\xa8\x5e\xa5\xa7\xa1\x86\x0f\x3a\x90\x00\x6b\x3a\xcd\xf2\x02\x09\x78\x63\x86\x7c\x24\x20\x37\xf4\xf2\x7c\x70\x46\xf0\xb6\xc8\x64\xf8\x78\xc0\x4e\x9d\x1a\xca\x3c\xed\xd3\x1e\x3e\x32\x75\xf6\x4d\x45\x67\x53\x9a\x0c\xba\xd0\xd0\x85\x99\x18\xe0\x95\xd4\xdf\x14\x84\xc5\x05\x52\xdf\x47\x5c\x9b\x6a\x0e\x07\x41\x7e\x58\xc3\x5f\x2f\x30\x06\x48\xd1\xea\x0c\xb7\x40\x7c\xd7\xec\x01\xba\xc6\xe3\x56\xb8\x90\xaf\x05\x04\x26\x19\x7e\x66\xdf\x21\x29\xc3\x3c\x8a\x1b\x51\x92\xcb\x3c\x6b\xac\x26\xf9\xf9\x6c\x03\x9a\x62\x8f\x41\x32\x48\x9a\xf9\x58\x28\x20\x0f\x66\xf9\xe4\x78\x3c\xe3\xcf\x1a\xbe\x6e\x04\x81\x62\x19\x6c\xf5\xe5\x1d\xb7\xdf\x7e\xeb\xed\xa5\x5c\x13\x9e\xd0\xd5\xc5\xb5\xc5\x07\x37\x2e\x9d\x7a\x70\x6d\xf1\xdc\x72\x83\x5c\x20\x07\xc0\x57\x0c\x47\x74\x03\xfe\xe5\xa7\x5d\xb7\xd2\x24\x11\x2d\xf4\x43\xa6\x36\x1e\xba\x48\x41\xd5\x22\x15\x56\xe7\x31\x32\xa3\xde\x0a\x87\xac\x07\x20\xe6\x58\xa1\x22\x35\x8d\xd1\x3c\xad\x79\x97\x37\x35\xf2\x2f\x5d\x5d\x6f\xd0\x07\xd2\x21\xf8\x24\x78\x33\x1e\xd3\x6d\x8e\xb5\xdf\xd5\xa9\x60\xaa\x29\xa6\xe6\xe9\x9d\x22\x28\x9f\x2c\x78\x51\xd5\xfd\xc5\x1b\x0b\xe1\x79\xae\xfe\x89\x29\x7d\x82\x79\xe7\xe1\xd7\x0f\xb3\x0f\x14\x9e\x68\x07\x41\x75\xad\x91\x89\x00\x1b\x45\xfb\xbc\x5a\x5c\x50\xc8\x39\x8e\xf1\x56\x60\x50\xde\xd3\xc1\x4c\x02\x85\x1b\x0e\xa8\xbf\x56\x97\x0a\x57\xe2\xf5\x43\xe4\xa5\x80\xdc\xa0\x2d\x7f\x8a\x24\x84\xbf\xb1\x1b\x9e\x9b\x37\x0d\x74\x61\xaa\x71\x1b\x14\x3b\xc9\x62\xaf\xa1\x72\x0c\x4c\x09\xab\x41\xba\xc8\x53\x57\xa6\xca\xa1\xdf\x41\xc9\x29\x97\x65\x55\xaa\x0f\xa6\x64\x81\x06\x79\x3e\x20\x30\x35\xac\xfc\x67\x00\x84\xca\x59\xfc\xe5\x82\x75\x45\xbf\xb5\x86\x61\xd4\x1d\x9c\xbb\xb8\xb1\x69\xf4\x1c\x57\x22\xa5\xaa\x58\xe0\x69\x91\xaf\x03\xaa\x80\x3a\xd9\x47\xe7\xa1\x8c\x99\x53\xec\x75\x71\x2d\xff\x3c\xfc\xfe\x0c\xd1\x1b\x10\xfe\xf6\x0c\x7b\x6e\x06\xff\xed\x07\xad\x3a\x17\xb9\x1e\xae\x35\x7d\x8c\x22\xb1\x5d\x58\x02\xc4\xfa\x93\x3e\xe0\x23\x56\x61\xd3\x69\x1b\x9a\xa0\x9b\xd0\x4e\x8c\x1b\xd2\x9e\x16\x83\xdf\xdf\xe3\x99\x3f\xd1\xb4\x2f\x92\x56\x8c\xe5\x49\xd5\x3c\xd4\x88\x64\x83\xae\xf8\x40\x9c\x5e\x77\x18\xb0\xa1\xcb\x21\x1a\x88\x6b\x98\x85\x12\x53\xd4\x3f\x8e\xb3\x1a\x94\xee\x46\x5f\xab\x3f\x90\xe2\xc7\xde\x10\xbc\xaf\x17\x59\x03\x0b\x5c\x78\x7d\x46\x52\x82\x59\xca\x22\x11\x98\xaf\x8b\xad\xab\x01\x01\xe6\x47\xa1\x44\xa2\x0b\x4e\x83\x8e\xa0\x56\x40\x8b\x27\x40\x63\x72\xb7\xb2\xe5\x2a\x8f\x30\x28\x38\x05\x0e\x8d\x72\x75\xc9\xf9\xac\x4a\x7d\x83\x76\x30\x4c\x14\x55\xc8\x79\xd2\xae\x51\x80\xd5\xd4\x33\x32\x74\x02\xe0\x27\x71\x89\xca\x07\x3b\xab\x2a\x1a\xf9\x27\xb3\xe4\x50\x9e\x0e\xd2\x38\xed\x8e\xef\x13\x63\x19\xbe\x30\xcb\x3e\x36\xeb\x3f\x29\xa7\x99\x6e\xa9\x67\x13\x80\x12\xa6\xe4\xdb\xfd\x28\x0e\xb5\x2d\xf0\x05\xdc\x74\x1e\x43\xc4\x0d\xd0\x0d\x1d\x95\x07\x8b\xa4\xeb\xec\x60\x5e\x21\x5a\xe2\x74\xcf\xd8\x8d\x71\xa6\xb9\x59\x4b\x8d\x26\xca\x00\x61\x35\x19\x03\x2e\xff\xa3\x69\x02\x08\x9b\xfe\xb3\x4c\x74\xa3\x34\x61\xf3\xfb\x19\x92\xdd\x34\x3b\x1e\x7b\x70\x8a\xe3\xe1\x71\x6a\x92\x96\x4c\xf4\x50\xc1\x30\x80\x46\x5b\xf5\xb5\x9c\xf8\x54\x97\x78\x01\x4e\x17\xe5\x92\x2a\xc1\x39\x71\xa5\xe7\x26\x8f\x24\x78\x10\x6d\x23\x7c\x1b\xb0\x47\x4c\x24\x63\x94\x74\x27\x8f\x19\x6c\x51\x9e\x7a\x45\x23\x51\xdf\xd4\x1d\x47\xb6\x66\x7e\x26\xf2\x2c\x12\x23\x8f\x2c\x78\x23\x41\x2b\x06\x97\x92\x36\x79\xcb\xd6\xb7\x30\x1b\x8c\x01\xda\x83\x54\xca\xc8\xd0\x52\x57\xcd\x09\x2e\xb6\xe1\xae\xee\x71\x61\x25\xf4\xb1\x6c\x61\x24\x84\x05\x6e\xd1\xdb\x63\xdd\xa6\xc6\x74\x6d\xbe\xdd\x2d\xb9\xe9\xab\xb3\x36\xe3\x15\x40\x73\x07\x11\x4a\x34\x26\x1a\xcc\xa5\x35\x6f\xe0\x95\xd2\x81\x6a\x4e\xaf\x7b\x76\x96\xbd\x77\xa9\x80\x7f\x6e\x51\xcf\xbd\x9b\x68\xe2\xdb\x14\x47\xa1\x4a\x85\xe4\x51\x82\x94\x74\x22\xd2\xe5\xe9\x40\x0b\xb1\x05\x96\xf8\xd2\x0c\x59\xb1\xd2\xed\xdd\x6c\x61\xb3\x77\xc5\x01\x28\x67\xad\xbe\x79\x2f\xbb\xfd\x8a\xb4\x4d\xbf\xb5\xf7\x68\x4d\xef\x08\x7b\xf7\x66\xa5\xa6\xe7\xbf\xfc\xff\x31\x76\xe2\x01\xa7\x89\xac\xb1\xc5\x45\xba\x83\x2e\xb2\x63\x2c\x11\x68\x85\xd5\x2b\xfd\x33\x01\x09\x4d\x3e\xc8\x69\x91\x08\x4c\x36\x0c\x63\x63\x7e\xbd\x1f\x4d\xfc\xb5\x52\x58\x23\x1e\xa3\x86\x8d\xcf\xec\xda\x4f\x0b\x51\x09\x7a\xa2\xdb\x1c\x0d\x9c\xa8\x76\x0c\x07\x30\x06\xcf\x5c\xf8\xc5\xeb\xc8\xad\x7b\x17\x99\xdb\x4c\xb7\x44\x72\x41\x28\x9e\xae\x51\xfe\x3f\x7e\x1d\x5b\x9a\x78\x6a\x48\x7a\x26\xa0\x3c\xa7\xde\xec\x5c\xbd\x46\x8b\x2d\x5b\x1d\xa5\x8c\x4d\xf1\xd1\x59\x72\x3d\x1f\xb6\x23\xa8\x64\x10\x7e\x68\x96\xbd\x3e\xb3\x68\xfe\x44\x71\x4b\xff\xe5\x25\xf8\x29\x25\x37\x95\x22\xa9\xac\xaa\xe6\x04\x35\xa0\xe2\x39\x50\x17\xa0\xb4\xe0\x37\x51\xef\x7b\xf3\xa0\xc8\xa2\xb7\x44\xd2\xa0\x8b\x49\x21\x89\x50\x82\xc9\x75\x32\xad\x10\x88\x81\x74\x30\x1c\xa5\x16\x21\xda\x9c\xbb\x29\x24\x6d\xb7\x28\x73\xd2\xfd\xd2\xa0\x8b\x26\xb2\x70\xb2\x11\xc8\x1d\x87\x89\x48\xa1\x0f\x80\x92\x0c\x1a\xae\x5d\xe4\xc6\x9a\x0c\x7b\x31\x25\x48\x52\xdc\xcc\x2b\x96\x0f\x79\xb8\x16\x17\xf5\xa4\xf0\x26\x4c\xb4\x5f\x0a\x47\x29\x8f\x52\x9b\x17\x22\x37\x2d\x64\x2f\x60\xd7\xe0\x85\x57\xb1\x43\x4c\x5f\x05\x52\x5d\xea\xd1\xb8\x23\x01\x89\xcc\xfe\x66\xf7\x55\x80\xe4\xc1\xf2\x6c\xa8\x18\xb4\x3b\x65\x91\xc4\xc9\x3b\x28\xce\x9e\x37\x67\xbd\xb0\x1e\x2f\x74\x39\xf9\xbb\xf1\x81\x2e\x39\x5c\xe8\x3b\xbc\xc4\xce\x2c\x16\x07\x33\x19\x19\x84\x03\x02\x74\xd4\x72\x99\x01\x8d\x7e\x0e\xa1\x41\x85\xc8\x95\x33\x64\x56\x64\x59\x9a\x85\x3f\xca\x4e\x2c\xab\x7f\xec\xdc\x70\x4b\xed\x74\x32\x07\xca\x69\xab\x27\x5a\x5b\x45\x18\xed\x0f\x92\x19\xd5\x7c\x98\x93\x3b\x77\x03\x81\xdf\xad\xa2\x24\xbb\xf3\xa2\x74\x20\x63\xb6\xb4\x64\x79\x36\x79\x4f\xb8\xba\x86\x78\x75\x94\x96\x7f\x64\x27\xb4\xf9\xe3\x8d\x8d\x16\x8f\x11\xf5\xf6\xb9\x80\x9d\xb4\x7f\x95\x0a\x85\x78\xa1\x65\x58\x23\x04\xa0\xdf\xe5\xb0\x69\x4b\x96\x15\x68\xc7\x45\xb2\x41\xae\xcb\xc4\x20\x8e\x5a\x5c\x86\xa7\x0d\x80\xea\x89\xb6\x90\x4a\x38\xf5\x8c\x04\xa0\x6f\xe2\xa1\xd6\xbc\x11\x9a\x36\x89\x2d\x45\xfa\xf8\x1f\x77\x54\xc6\xce\x2d\x1b\xa7\xb5\x45\x35\x0f\x3f\x7f\x07\xfb\xd9\xd9\xc5\x84\x4e\xfe\x64\xc0\x7a\xcc\x9f\xb0\x93\xda\x45\xa2\xfd\x90\xa2\x3f\x48\x33\x9e\x45\xe8\x71\xf7\xad\x7a\x4a\xbd\x57\xe3\x54\xbb\x59\x47\x09\x13\x0c\xab\xad\x3c\x1a\x45\x50\x30\xd9\x40\xef\xb7\x45\x73\xd8\xed\x82\xe6\x69\xc7\xe0\x3b\xe4\x8c\xeb\xdd\x46\x43\x17\xd4\x55\xda\x1d\xf2\x8c\x27\xb9\x30\xd0\xf8\xae\xb4\xa6\xb6\x08\x67\x02\x42\xca\x44\xdb\x42\xbb\x8e\xd5\x30\x21\x80\x4c\x5b\x2b\x01\xb1\x5f\x51\x93\x7e\x3a\x42\x03\xa5\xfd\x08\x69\x80\xef\xee\x77\x0b\xd2\xe2\x43\x69\x3c\x4f\x40\x63\x1e\x69\x09\x75\xa9\x72\xaf\xc6\x8f\xd6\xd2\x41\xfa\x30\x66\x0f\x03\xd2\x37\x8a\x5a\xd0\x43\xe5\xb4\x3d\x9b\x36\x2e\x76\x73\xac\x8b\xb4\xc5\x63\xb4\x40\x1a\x1d\x49\x35\x09\x64\x95\x6e\xaa\xb9\x59\xd3\x0f\x7c\x35\x8a\xb8\x79\x69\x4e\xba\x59\x78\x1d\x79\x47\xb3\xbc\x82\x7c\x30\x10\x3c\xf3\x52\xf4\xb1\x2c\x56\x0a\x14\x52\x35\xef\x15\xe7\x49\x28\xc8\x94\x06\x3f\xdf\x60\xe4\x1b\xe6\x36\x79\xbc\xa4\x7d\xb5\x13\x73\xa8\x58\xa7\x74\xbf\xc2\xe5\xf8\xd4\x71\xf2\xd3\xe4\x5d\xa5\x60\xc9\x30\xde\x1f\x28\xa3\xff\x0d\xbb\xb3\x1c\x29\x60\x4a\xa9\xc4\x71\xba\xad\xbd\xdb\x15\x5b\x2c\x1b\xe4\x61\x72\x08\x8e\xc2\x70\x00\xc1\xb8\xe1\x8f\x91\x1f\xda\x3b\x13\x40\xbd\xc9\x8e\xc1\xff\x90\xfd\xef\xaf\xaf\x57\xa7\xc9\xbb\x51\x55\x81\x13\x73\x0e\xa5\xb4\x75\x9e\xf7\xc2\xe7\xa7\xd9\x33\xd3\x0e\x26\x10\xac\x97\x3c\xd7\x0a\x0d\x46\x23\x60\x81\x07\xf7\xc4\xf7\x85\x7a\xad\x7a\x86\x68\x74\xaf\x6d\x67\x51\x9e\x23\x13\x02\xe4\x44\x53\x96\xb0\xdc\x86\x83\x39\x6c\xd0\x73\xa6\x0d\xf7\xad\x22\x3d\x89\x8e\x4e\x68\x0a\x8a\x96\xea\x4e\x94\xf0\x58\x33\xc2\x9a\xbd\xf2\xea\xb0\x48\x29\x32\x84\xc4\xe0\x51\xac\x4e\x81\x1e\x56\x83\xde\x6f\x3c\xe0\xd9\x30\x69\xf9\x39\x59\x08\xa6\xd0\xa1\x5d\xf0\xd2\x64\x08\x4d\x79\xdb\xb1\xbb\xee\xa0\xcd\x31\x20\x2b\x6c\x02\x9b\xc9\xa1\x6a\x0e\x8e\x4f\x57\xa6\xf1\xaa\x3b\x7a\x27\xdf\x2c\x00\x14\xf7\xc0\x81\x1f\x3f\xb1\xd5\x2c\x1a\x3b\x17\xda\x62\xb4\xe0\x2d\x5f\x3d\x4e\xbb\x55\x09\x13\x3e\x17\x7b\x3c\x20\xd3\x79\x3e\x0e\x1f\x65\xf1\xfd\x3d\x2c\x87\x62\x3c\x05\x26\xc0\x18\x25\x1e\x2f\x0c\x70\x73\xf3\x01\x38\x19\x51\x2e\x45\xdc\xa9\x61\x24\x8d\xb6\x51\x48\x3a\x27\xf3\x76\x94\xcc\xe9\xb5\x55\xf2\x83\x1d\xa5\x5a\x7b\x08\x84\x2d\xf2\xe4\x3e\xb9\xde\x06\x9a\x87\x0f\xed\x03\xc2\xf8\xac\x79\x9b\x9d\xb0\xff\xdc\xff\x35\x89\xc9\x8d\x4a\xbb\x88\x12\x21\xe5\xff\xfd\x45\x89\xc8\x2c\x44\xaf\x86\x0f\xb1\x8d\xa5\xb4\xb5\xa5\x98\x15\x44\xb3\x2a\x12\x72\xd9\x31\xfa\xae\xe5\x05\x68\xa5\x10\x89\xff\x49\x63\xf9\xfc\xb5\x80\x7d\x34\x58\xf3\xac\x9d\x55\x2c\xc1\x45\x27\x41\x38\xf5\xd2\xda\xc6\x83\x67\x17\xef\x5d\x3e\xab\x09\x65\xe2\xdb\xe6\x35\xe2\x87\x2b\xd3\xec\xc6\x51\x03\xa3\x8c\x7f\x56\x21\x76\xac\x6a\x2d\xfc\xb1\x8e\xc9\xec\x20\xcd\x72\x19\x0e\xd8\xc2\xba\xfa\xc7\xfe\x97\xd4\x17\x23\x4f\x90\x63\xa4\xb1\xe7\xde\x59\x42\xae\x7a\x22\x6f\x06\xe4\x30\x5a\x00\x97\x14\x5f\x13\x32\xfc\xfb\x80\x9d\x2e\x3c\x29\x5b\xce\x9a\x71\xda\xda\xa2\x6d\xfd\x23\x9e\x6c\x08\x35\x2a\x87\x0f\x15\x06\x77\x9c\x2c\x90\xfa\x9e\x83\xbb\xe4\x75\xfc\x56\x50\x27\xdf\x5f\xf0\xb0\x0f\x78\xde\xea\xd5\xfb\x22\xeb\x8a\xfa\x96\x18\x87\x87\xc3\x1b\x70\x18\x8a\xac\x92\xb7\x82\x39\x72\x73\xc5\xfb\x90\x1e\x2b\xba\xe3\xf0\xba\xf0\x00\x7c\x4b\xc8\x7f\xcf\x90\x83\xda\x42\x1a\xfe\xf3\x0c\xfb\xc2\xcc\xb2\x8b\xa3\x83\xf1\x42\x1d\x1a\x40\x41\x1e\x1a\xc9\x13\x42\x12\x64\x4f\xc4\xb1\x46\x91\xf5\xce\xef\x9c\xa4\xcb\x6b\x9b\x17\x1e\x58\x3f\xbf\xba\xb6\x69\xc2\xfa\x20\xca\x42\xb3\x59\xb5\x97\x46\x6a\x6d\xd0\x4b\x3c\x8b\xb4\xfd\xdf\x56\xd1\xbb\xe5\xe8\xa5\xc5\x0b\xe0\xeb\x99\x87\xdd\x17\x8f\x0c\x38\x90\x65\x67\x54\xf5\x89\xba\x48\x46\x51\x96\x26\x7d\x91\xe4\x5a\xdd\x19\x99\x46\x5b\x96\xc6\x29\xf9\x20\x1e\x19\x6f\xac\xc3\x31\xb6\xaa\xe4\x60\x98\x9b\x84\x36\x1b\xa8\x9a\x68\x17\x2e\xce\xd2\x1f\x96\x1c\x27\x39\x7f\xc4\x9a\xbc\x64\x8b\x0f\x9c\x8e\xd1\x4e\x87\xaa\xf3\x5b\x6e\xa9\xd1\x48\x9c\xa4\xb7\x78\x1f\x36\xe8\xb2\x7e\xd7\x9b\x2f\x8a\x7a\x62\x04\x25\xa7\xec\x6c\x6b\x34\x13\x5d\x9e\xb5\x63\x0d\xec\xb3\x6d\xc9\xb0\x70\x13\x04\x61\x55\x82\x2b\x2e\xcd\x2b\x93\xe0\xf6\x47\x48\x72\x2e\xb7\xe4\x02\xa2\x1b\xd5\xdb\x3c\xe7\x75\x88\xf3\x40\xb1\x0f\x4f\xaa\xa8\xeb\x63\x52\xe7\x59\x77\xa8\x56\xbb\x6e\x77\x61\xe1\x88\x2e\x7d\x56\xe7\xf6\xad\x28\xa9\xf3\x3a\x1c\x92\x5d\xf4\xbb\xaf\x04\x64\x5a\x24\xa3\xf0\xcb\x01\x5b\x75\x20\xf6\x76\x3f\xed\x44\xcb\x8e\x56\xcf\xa9\x58\xc5\xc7\x2e\x37\x18\x6f\x39\x19\x5d\xe2\x99\xba\x35\xbb\xdf\xb2\x83\xe1\xac\xa2\x7f\x97\x73\xbf\xfe\x2a\x20\xb3\xc0\xf9\xc2\x57\x03\xf6\x62\xb0\x6f\x66\xda\x1c\x76\x3a\x1a\x95\x0f\x3e\x9f\x98\xb9\x89\xe9\x71\xe5\xfc\xf5\xe5\x02\xcb\x95\xe2\x64\x3a\x8d\x72\x87\xcf\x75\x10\xff\x36\x1f\x4b\x63\x36\x8a\x12\xba\x7c\x7e\x65\x2f\xb6\xfc\xe5\x19\x72\x3d\xb4\x79\x3e\x69\x89\xf0\x73\x33\xec\xe5\x99\xfb\xbd\xb3\x39\x19\x74\x64\x52\x7e\x63\x6d\x49\xd7\x23\x52\x97\x2b\x11\x31\xe5\x1d\x25\x09\x45\x39\x14\xa5\x68\x0a\x91\xd0\x74\x20\x4c\x62\xbf\xa9\x5f\x87\x3e\x1a\x6d\x52\xd7\x33\x92\x20\x45\x78\x2d\xca\x3c\x13\x5c\xbb\x55\x32\xd1\xe7\x11\x36\x65\x64\xa7\xfe\x30\xce\xa3\x81\x6d\x8c\x4a\x81\x41\x7d\x18\x8c\x6e\x66\x64\x02\x13\x95\xf8\x08\x46\x56\xdb\x9b\x1e\x56\x31\xcd\x4a\x09\xd6\x35\xa8\xa8\x05\xc6\x14\x35\xe5\xd8\x8b\xad\xd5\x86\x25\x0d\x2b\x8f\xc7\x58\xb5\x67\xf5\x94\x44\x8f\x54\xea\xa1\x26\x6d\xf0\x9f\x0f\x72\x49\x21\xa7\xc5\x35\xa8\x9b\x6a\x47\x52\x3b\xa5\x95\xba\x68\xe5\x67\x58\x68\x33\x52\x58\xea\x36\x34\x66\x5a\xd7\x8f\xbc\xe6\x7c\x25\xb9\xa8\x2c\xa2\x87\x2b\xe6\x5d\x7b\x02\x6a\x05\x35\xda\x54\xd5\xd3\xa6\x91\x89\xb3\xe6\x11\xb4\x4c\xb4\x44\x34\x02\x2f\x7e\xe5\xd1\x2a\x9c\xac\x0f\x4f\x91\x77\x01\x13\x59\x1f\xc6\xb1\x8e\xcf\x7f\x33\x60\x5f\x0f\x56\x41\x32\x1a\x0c\xe3\x98\x0e\xe0\x71\x83\x9e\x47\x3b\x38\xc6\x8f\xd7\xe8\x9a\xea\xad\x46\x57\x3b\x6b\x69\xbe\x8e\xe6\xda\xa2\x10\x8c\x2f\x2a\x46\x74\x52\x67\x96\xe7\x38\x3f\x2f\x58\x39\xcd\x0a\x0d\x50\xb0\x44\x6f\x47\x52\xbc\x0d\xca\xba\xb3\x88\x76\xc4\xa8\xc0\xf5\x49\x91\xed\x8f\xa1\x4c\x8c\xf6\x7d\x87\xbf\x17\xec\x03\x73\xc3\xf8\xd5\x2f\xa0\xc0\xad\xc8\xa7\x64\x8f\x5a\x6f\xfb\xfe\xe5\xa8\x6a\x65\x7e\x08\xc5\x05\x55\x23\xce\x27\xcf\x63\xb5\xf5\x63\x4b\xb6\xda\x5e\x64\x44\x83\x6c\x91\xc3\x71\x34\x12\x57\x47\x9c\xfe\xc6\x14\xb9\x09\x8b\x13\x5a\xa1\x0e\x4a\x5b\xff\xed\x14\x7b\x6d\xca\x99\xf3\x8b\xce\x7e\x77\xa2\xe1\xf0\xae\xa7\x6d\xb0\x86\x39\xc7\x7f\x95\x7c\x8c\xbd\x68\x55\xad\xea\x05\x23\x3e\xe8\x70\xfa\xdc\xaf\x8f\x2c\xe9\xd1\xd5\xf5\x53\x35\xba\xbe\xba\x54\xa3\x22\x6f\xcd\xdb\xe4\x6a\x8f\xa3\x99\x34\x09\x91\x23\x81\xd8\x49\x52\x8f\x6c\xc8\xfe\x76\x8f\xe7\x70\xdd\xbc\x8e\xd4\xda\x81\xdb\xbe\x14\xf8\xbe\x96\xe6\xa2\x2a\x8b\xd2\x50\x6b\x90\xed\xad\xaf\x0e\x28\x01\x1a\x39\x0a\x72\xfa\x3f\x4e\x93\xef\xa9\xd0\xf3\xf1\xce\x7e\x6e\x9a\xfd\x81\x4d\xd9\xa4\x3d\x1d\x70\x5e\xa5\xc0\xbb\xb8\xc5\x81\x81\x2f\x69\xd0\x15\x1b\x39\x3b\x94\xd6\x7d\xe4\x8a\xaf\x57\x5a\x17\xa0\xb4\x84\x6e\xa2\x34\x31\xed\x5b\x32\x5d\xa6\x3a\x6f\x43\x0e\x31\x4c\xc9\x64\x6e\xaa\x19\xd2\x15\x1e\xc7\x4d\xde\xda\xda\x4c\xcf\xa6\x5d\x79\x3e\x41\x53\x70\x61\x2c\xe0\xc2\x6b\xf5\x86\xc9\x56\x21\x21\x96\xc6\x29\x14\x7e\x55\x72\x64\xd4\xd9\x71\xc2\x18\x57\x6d\xb8\x85\xf1\x49\xb8\x56\xc4\x23\x91\x57\x14\x97\x82\x4d\x1a\x8f\x9a\xdf\xbe\xf4\x15\xfe\x13\xc7\x6e\xbb\x13\xcd\x07\x8a\x80\xdd\x79\x8c\x42\xd1\xfa\x1a\x32\x06\xa1\xdd\x02\xb2\xcf\xe3\x58\x1d\x2e\x9f\x26\xaa\x85\xde\xcb\x10\xf0\x2f\x01\x39\x34\xf2\x8a\x8d\x84\x5f\x0d\xd8\x99\xf5\xb4\xad\x83\x25\xa4\xad\x56\xb1\xb7\xc5\x65\x77\x49\xed\x18\x69\x90\xda\x3e\xb5\x22\x18\xca\x5b\x41\x6d\x0f\x71\xed\x50\x48\x60\x68\x97\xab\x13\xbd\x12\x10\xa2\xeb\x7f\x2f\x45\x59\xf8\x42\xc0\x3e\x11\x9c\xf2\x26\xa5\x7f\xd3\xc6\xcc\x34\x1b\x57\xa5\x36\x55\xde\xae\x39\x69\x43\xb0\xfd\x74\x38\xbd\x59\x3a\xb7\xa4\x29\xfc\x58\xf6\x09\xc1\x0d\xb8\xc5\x5e\xdb\xf6\x95\x19\x32\xc3\xb3\xae\x0c\xbf\x34\xc3\x3e\x3d\xb3\xa8\x25\x76\x1b\xba\xe6\x92\xa5\x2a\x35\xb8\x53\xe7\x96\xae\xa9\x6e\xd7\x54\xb7\x5d\x55\xb7\x2f\x4d\x93\x83\x22\x19\xad\x64\x69\x3f\xfc\xf3\x69\xf6\xc4\xb4\xd1\xdf\x8c\x74\xe0\x53\xe4\x6a\x9d\x6e\x52\x99\x53\x9b\x05\xc1\x35\x26\xfb\xc1\x99\x1b\x74\x7e\x8b\xcd\x0c\x39\xf5\xe0\xea\xd2\xf2\xda\xe6\xea\xca\xea\xf2\x85\x06\x5d\x8c\x63\x1a\x25\xe8\x81\x84\x06\x2c\x17\x16\x3a\xac\x49\x23\xf6\x8e\xd4\x10\x5c\x85\x3c\x9f\x99\x82\x08\x0c\x5e\x1c\x1d\x60\xb4\x85\x7e\x16\xb5\x4d\x51\xe2\xd4\x07\x3d\x41\x3f\xa5\xaf\xca\x35\x07\x8c\x42\x0f\x1b\x46\x53\x82\x48\x80\x64\x90\xa1\x70\x73\x45\x20\xb3\xe5\x64\x64\x4f\xe3\x10\x37\x12\xd6\x64\x87\x36\x76\x27\xaa\xfb\xb3\x83\x2d\xe3\x36\x62\x19\xad\xe6\x77\x91\x77\x91\x1b\xee\x15\x3c\x13\x19\xf8\x8d\xc3\xef\x78\xf8\x3c\x39\x57\x7c\x74\x4f\x78\x37\x39\xc0\x07\xd1\x7d\x62\x1c\x1e\x2e\xd4\xe7\xf8\xbe\x03\x18\xe6\xcc\x6e\xc6\xf7\xd1\xf7\x5c\x0a\x42\xf8\xdf\x00\x00\x00\xff\xff\xf1\xf6\xa3\x3b\x88\x0a\x3a\x00") + +func kubernetesapiV1218pbSwaggerPbBytes() ([]byte, error) { + return bindataRead( + _kubernetesapiV1218pbSwaggerPb, + "kubernetesapi/v1218pb/swagger.pb", + ) +} + +func kubernetesapiV1218pbSwaggerPb() (*asset, error) { + bytes, err := kubernetesapiV1218pbSwaggerPbBytes() + if err != nil { + return nil, err + } + + info := bindataFileInfo{name: "kubernetesapi/v1218pb/swagger.pb", size: 3803784, mode: os.FileMode(0644), modTime: time.Unix(1642212163, 0)} + a := &asset{bytes: bytes, info: info, digest: [32]uint8{0xa0, 0xef, 0xb7, 0xb5, 0xd9, 0x76, 0xe0, 0xda, 0x67, 0x9a, 0xa2, 0xc2, 0x6a, 0x12, 0xf, 0xf3, 0x35, 0x41, 0x66, 0xd3, 0xf8, 0xde, 0x58, 0xb4, 0xcb, 0xe9, 0x46, 0x7d, 0x19, 0xaf, 0x6d, 0x30}} + return a, nil +} + +// Asset loads and returns the asset for the given name. +// It returns an error if the asset could not be found or +// could not be loaded. +func Asset(name string) ([]byte, error) { + canonicalName := strings.Replace(name, "\\", "/", -1) + if f, ok := _bindata[canonicalName]; ok { + a, err := f() + if err != nil { + return nil, fmt.Errorf("Asset %s can't read by error: %v", name, err) + } + return a.bytes, nil + } + return nil, fmt.Errorf("Asset %s not found", name) +} + +// AssetString returns the asset contents as a string (instead of a []byte). +func AssetString(name string) (string, error) { + data, err := Asset(name) + return string(data), err +} + +// MustAsset is like Asset but panics when Asset would return an error. +// It simplifies safe initialization of global variables. +func MustAsset(name string) []byte { + a, err := Asset(name) + if err != nil { + panic("asset: Asset(" + name + "): " + err.Error()) + } + + return a +} + +// MustAssetString is like AssetString but panics when Asset would return an +// error. It simplifies safe initialization of global variables. +func MustAssetString(name string) string { + return string(MustAsset(name)) +} + +// AssetInfo loads and returns the asset info for the given name. +// It returns an error if the asset could not be found or +// could not be loaded. +func AssetInfo(name string) (os.FileInfo, error) { + canonicalName := strings.Replace(name, "\\", "/", -1) + if f, ok := _bindata[canonicalName]; ok { + a, err := f() + if err != nil { + return nil, fmt.Errorf("AssetInfo %s can't read by error: %v", name, err) + } + return a.info, nil + } + return nil, fmt.Errorf("AssetInfo %s not found", name) +} + +// AssetDigest returns the digest of the file with the given name. It returns an +// error if the asset could not be found or the digest could not be loaded. +func AssetDigest(name string) ([sha256.Size]byte, error) { + canonicalName := strings.Replace(name, "\\", "/", -1) + if f, ok := _bindata[canonicalName]; ok { + a, err := f() + if err != nil { + return [sha256.Size]byte{}, fmt.Errorf("AssetDigest %s can't read by error: %v", name, err) + } + return a.digest, nil + } + return [sha256.Size]byte{}, fmt.Errorf("AssetDigest %s not found", name) +} + +// Digests returns a map of all known files and their checksums. +func Digests() (map[string][sha256.Size]byte, error) { + mp := make(map[string][sha256.Size]byte, len(_bindata)) + for name := range _bindata { + a, err := _bindata[name]() + if err != nil { + return nil, err + } + mp[name] = a.digest + } + return mp, nil +} + +// AssetNames returns the names of the assets. +func AssetNames() []string { + names := make([]string, 0, len(_bindata)) + for name := range _bindata { + names = append(names, name) + } + return names +} + +// _bindata is a table, holding each asset generator, mapped to its name. +var _bindata = map[string]func() (*asset, error){ + "kubernetesapi/v1218pb/swagger.pb": kubernetesapiV1218pbSwaggerPb, +} + +// AssetDebug is true if the assets were built with the debug flag enabled. +const AssetDebug = false + +// AssetDir returns the file names below a certain +// directory embedded in the file by go-bindata. +// For example if you run go-bindata on data/... and data contains the +// following hierarchy: +// data/ +// foo.txt +// img/ +// a.png +// b.png +// then AssetDir("data") would return []string{"foo.txt", "img"}, +// AssetDir("data/img") would return []string{"a.png", "b.png"}, +// AssetDir("foo.txt") and AssetDir("notexist") would return an error, and +// AssetDir("") will return []string{"data"}. +func AssetDir(name string) ([]string, error) { + node := _bintree + if len(name) != 0 { + canonicalName := strings.Replace(name, "\\", "/", -1) + pathList := strings.Split(canonicalName, "/") + for _, p := range pathList { + node = node.Children[p] + if node == nil { + return nil, fmt.Errorf("Asset %s not found", name) + } + } + } + if node.Func != nil { + return nil, fmt.Errorf("Asset %s not found", name) + } + rv := make([]string, 0, len(node.Children)) + for childName := range node.Children { + rv = append(rv, childName) + } + return rv, nil +} + +type bintree struct { + Func func() (*asset, error) + Children map[string]*bintree +} + +var _bintree = &bintree{nil, map[string]*bintree{ + "kubernetesapi": {nil, map[string]*bintree{ + "v1218pb": {nil, map[string]*bintree{ + "swagger.pb": {kubernetesapiV1218pbSwaggerPb, map[string]*bintree{}}, + }}, + }}, +}} + +// RestoreAsset restores an asset under the given directory. +func RestoreAsset(dir, name string) error { + data, err := Asset(name) + if err != nil { + return err + } + info, err := AssetInfo(name) + if err != nil { + return err + } + err = os.MkdirAll(_filePath(dir, filepath.Dir(name)), os.FileMode(0755)) + if err != nil { + return err + } + err = ioutil.WriteFile(_filePath(dir, name), data, info.Mode()) + if err != nil { + return err + } + return os.Chtimes(_filePath(dir, name), info.ModTime(), info.ModTime()) +} + +// RestoreAssets restores an asset under the given directory recursively. +func RestoreAssets(dir, name string) error { + children, err := AssetDir(name) + // File + if err != nil { + return RestoreAsset(dir, name) + } + // Dir + for _, child := range children { + err = RestoreAssets(dir, filepath.Join(name, child)) + if err != nil { + return err + } + } + return nil +} + +func _filePath(dir, name string) string { + canonicalName := strings.Replace(name, "\\", "/", -1) + return filepath.Join(append([]string{dir}, strings.Split(canonicalName, "/")...)...) +} diff --git a/go/internal/forked/kyaml/openapi/kubernetesapi/v1218pb/swagger.pb b/go/internal/forked/kyaml/openapi/kubernetesapi/v1218pb/swagger.pb new file mode 100644 index 000000000..44bfdd863 --- /dev/null +++ b/go/internal/forked/kyaml/openapi/kubernetesapi/v1218pb/swagger.pb @@ -0,0 +1,48094 @@ + +2.0 + +Kubernetesv1.21.8B¬Þ´Ü+ +G/apis/policy/v1beta1/namespaces/{namespace}/poddisruptionbudgets/{name}+§ +policy_v1beta1&read the specified PodDisruptionBudget*.readPolicyV1beta1NamespacedPodDisruptionBudget2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*Ji +N +200G +E +OK? += +;#/definitions/io.k8s.api.policy.v1beta1.PodDisruptionBudget + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionget +j^ +x-kubernetes-group-version-kind;9group: policy +kind: PodDisruptionBudget +version: v1beta1 + +policy_v1beta1)replace the specified PodDisruptionBudget*1replacePolicyV1beta1NamespacedPodDisruptionBudget2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BQ +O +Mbodybody *= +;#/definitions/io.k8s.api.policy.v1beta1.PodDisruptionBudgetBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string J¾ +N +200G +E +OK? += +;#/definitions/io.k8s.api.policy.v1beta1.PodDisruptionBudget +S +201L +J +Created? += +;#/definitions/io.k8s.api.policy.v1beta1.PodDisruptionBudget + +401 + + UnauthorizedRhttpsj^ +x-kubernetes-group-version-kind;9version: v1beta1 +group: policy +kind: PodDisruptionBudget +j +x-kubernetes-actionput +*² +policy_v1beta1delete a PodDisruptionBudget*0deletePolicyV1beta1NamespacedPodDisruptionBudget2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string J» + +401 + + Unauthorized +L +200E +C +OK= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status +R +202K +I +Accepted= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.StatusRhttpsj +x-kubernetes-action delete +j^ +x-kubernetes-group-version-kind;9group: policy +kind: PodDisruptionBudget +version: v1beta1 +B¦ +policy_v1beta12partially update the specified PodDisruptionBudget*/patchPolicyV1beta1NamespacedPodDisruptionBudget2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json-patch+json:application/merge-patch+json:&application/strategic-merge-patch+json:application/apply-patch+yamlBN +L +Jbodybody *: +8#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.PatchBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B¯ +¬©¦queryƒfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch)." fieldManager2string BÎ +ËÈÅquery¨Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests."force2boolean Ji +N +200G +E +OK? += +;#/definitions/io.k8s.api.policy.v1beta1.PodDisruptionBudget + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionpatch +j^ +x-kubernetes-group-version-kind;9group: policy +kind: PodDisruptionBudget +version: v1beta1 +J@ +><":pathname of the PodDisruptionBudget"name*string˜J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string ¨( +4/apis/rbac.authorization.k8s.io/v1alpha1/watch/rolesï'ã +rbacAuthorization_v1alpha1pwatch individual changes to a list of Role. deprecated: use the 'watch' parameter with a list operation instead.*6watchRbacAuthorizationV1alpha1RoleListForAllNamespaces2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsj# +x-kubernetes-action  +watchlist +jc +x-kubernetes-group-version-kind@>group: rbac.authorization.k8s.io +kind: Role +version: v1alpha1 +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean ÷\ +&/apis/storage.k8s.io/v1/storageclassesÌ\‘& + +storage_v1*list or watch objects of kind StorageClass*listStorageV1StorageClass2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*B‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Bï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string B‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string B‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Bú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer Bû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string BÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Bž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer B± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean Jb +G +200@ +> +OK8 +6 +4#/definitions/io.k8s.api.storage.v1.StorageClassList + +401 + + UnauthorizedRhttpsjZ +x-kubernetes-group-version-kind75group: storage.k8s.io +kind: StorageClass +version: v1 +j +x-kubernetes-actionlist +"‰ + +storage_v1create a StorageClass*createStorageV1StorageClass2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BF +D +Bbodybody *2 +0#/definitions/io.k8s.api.storage.v1.StorageClassBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string Jó +C +200< +: +OK4 +2 +0#/definitions/io.k8s.api.storage.v1.StorageClass +H +201A +? +Created4 +2 +0#/definitions/io.k8s.api.storage.v1.StorageClass +I +202B +@ +Accepted4 +2 +0#/definitions/io.k8s.api.storage.v1.StorageClass + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionpost +jZ +x-kubernetes-group-version-kind75group: storage.k8s.io +kind: StorageClass +version: v1 +*Ø, + +storage_v1!delete collection of StorageClass*%deleteStorageV1CollectionStorageClass2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string Bž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer B‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Bú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string Bû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string BÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Bž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer Jg +L +200E +C +OK= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status + +401 + + UnauthorizedRhttpsj* +x-kubernetes-actiondeletecollection +jZ +x-kubernetes-group-version-kind75group: storage.k8s.io +kind: StorageClass +version: v1 +JO +MKIquery-If 'true', then the output is pretty printed."pretty2string ·( +8/apis/storage.k8s.io/v1alpha1/watch/csistoragecapacitiesú'î +storage_v1alpha1~watch individual changes to a list of CSIStorageCapacity. deprecated: use the 'watch' parameter with a list operation instead.*:watchStorageV1alpha1CSIStorageCapacityListForAllNamespaces2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsj# +x-kubernetes-action  +watchlist +jf +x-kubernetes-group-version-kindCAgroup: storage.k8s.io +kind: CSIStorageCapacity +version: v1alpha1 +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean ¿^ +5/api/v1/namespaces/{namespace}/persistentvolumeclaims…^ª& +core_v13list or watch objects of kind PersistentVolumeClaim*)listCoreV1NamespacedPersistentVolumeClaim2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*B‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Bï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string B‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string B‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Bú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer Bû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string BÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Bž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer B± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean Jh +M +200F +D +OK> +< +:#/definitions/io.k8s.api.core.v1.PersistentVolumeClaimList + +401 + + UnauthorizedRhttpsjW +x-kubernetes-group-version-kind42version: v1 +group: "" +kind: PersistentVolumeClaim +j +x-kubernetes-actionlist +"´ +core_v1create a PersistentVolumeClaim*+createCoreV1NamespacedPersistentVolumeClaim2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BL +J +Hbodybody *8 +6#/definitions/io.k8s.api.core.v1.PersistentVolumeClaimBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string J… +I +200B +@ +OK: +8 +6#/definitions/io.k8s.api.core.v1.PersistentVolumeClaim +N +201G +E +Created: +8 +6#/definitions/io.k8s.api.core.v1.PersistentVolumeClaim +O +202H +F +Accepted: +8 +6#/definitions/io.k8s.api.core.v1.PersistentVolumeClaim + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionpost +jW +x-kubernetes-group-version-kind42group: "" +kind: PersistentVolumeClaim +version: v1 +*ë, +core_v1*delete collection of PersistentVolumeClaim*5deleteCoreV1CollectionNamespacedPersistentVolumeClaim2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string Bž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer B‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Bú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string Bû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string BÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Bž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer Jg +L +200E +C +OK= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status + +401 + + UnauthorizedRhttpsj* +x-kubernetes-actiondeletecollection +jW +x-kubernetes-group-version-kind42group: "" +kind: PersistentVolumeClaim +version: v1 +J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string ¿+ +7/apis/apiregistration.k8s.io/v1beta1/apiservices/{name}ƒ+¹ +apiregistration_v1beta1read the specified APIService*$readApiregistrationV1beta1APIService2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*J~ + +401 + + Unauthorized +c +200\ +Z +OKT +R +P#/definitions/io.k8s.kube-aggregator.pkg.apis.apiregistration.v1beta1.APIServiceRhttpsj +x-kubernetes-actionget +je +x-kubernetes-group-version-kindB@group: apiregistration.k8s.io +version: v1beta1 +kind: APIService +Ì +apiregistration_v1beta1 replace the specified APIService*'replaceApiregistrationV1beta1APIService2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*Bf +d +bbodybody *R +P#/definitions/io.k8s.kube-aggregator.pkg.apis.apiregistration.v1beta1.APIServiceBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string Jè +h +201a +_ +CreatedT +R +P#/definitions/io.k8s.kube-aggregator.pkg.apis.apiregistration.v1beta1.APIService + +401 + + Unauthorized +c +200\ +Z +OKT +R +P#/definitions/io.k8s.kube-aggregator.pkg.apis.apiregistration.v1beta1.APIServiceRhttpsj +x-kubernetes-actionput +je +x-kubernetes-group-version-kindB@version: v1beta1 +kind: APIService +group: apiregistration.k8s.io +*° +apiregistration_v1beta1delete an APIService*&deleteApiregistrationV1beta1APIService2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string J» +L +200E +C +OK= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status +R +202K +I +Accepted= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status + +401 + + UnauthorizedRhttpsj +x-kubernetes-action delete +je +x-kubernetes-group-version-kindB@kind: APIService +group: apiregistration.k8s.io +version: v1beta1 +B¸ +apiregistration_v1beta1)partially update the specified APIService*%patchApiregistrationV1beta1APIService2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json-patch+json:application/merge-patch+json:&application/strategic-merge-patch+json:application/apply-patch+yamlBN +L +Jbodybody *: +8#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.PatchBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B¯ +¬©¦queryƒfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch)." fieldManager2string BÎ +ËÈÅquery¨Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests."force2boolean J~ +c +200\ +Z +OKT +R +P#/definitions/io.k8s.kube-aggregator.pkg.apis.apiregistration.v1beta1.APIService + +401 + + UnauthorizedRhttpsje +x-kubernetes-group-version-kindB@kind: APIService +group: apiregistration.k8s.io +version: v1beta1 +j +x-kubernetes-actionpatch +J7 +53"1pathname of the APIService"name*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string ü) +S/apis/flowcontrol.apiserver.k8s.io/v1beta1/watch/prioritylevelconfigurations/{name}¤)Ï +flowcontrolApiserver_v1beta1Áwatch changes to an object of kind PriorityLevelConfiguration. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.*:watchFlowcontrolApiserverV1beta1PriorityLevelConfiguration2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk + +401 + + Unauthorized +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEventRhttpsj +x-kubernetes-actionwatch +j{ +x-kubernetes-group-version-kindXVgroup: flowcontrol.apiserver.k8s.io +kind: PriorityLevelConfiguration +version: v1beta1 +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer JG +EC"Apath&name of the PriorityLevelConfiguration"name*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean ( +*/apis/policy/v1/watch/poddisruptionbudgetsá'Õ + policy_v1watch individual changes to a list of PodDisruptionBudget. deprecated: use the 'watch' parameter with a list operation instead.*4watchPolicyV1PodDisruptionBudgetListForAllNamespaces2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsjY +x-kubernetes-group-version-kind64version: v1 +group: policy +kind: PodDisruptionBudget +j# +x-kubernetes-action  +watchlist +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean Ó) +0/apis/storage.k8s.io/v1/volumeattachments/{name}ž)ˆ + +storage_v1#read the specified VolumeAttachment*readStorageV1VolumeAttachment2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*Jb +G +200@ +> +OK8 +6 +4#/definitions/io.k8s.api.storage.v1.VolumeAttachment + +401 + + UnauthorizedRhttpsj^ +x-kubernetes-group-version-kind;9kind: VolumeAttachment +version: v1 +group: storage.k8s.io +j +x-kubernetes-actionget +ã + +storage_v1&replace the specified VolumeAttachment* replaceStorageV1VolumeAttachment2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BJ +H +Fbodybody *6 +4#/definitions/io.k8s.api.storage.v1.VolumeAttachmentBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string J° +G +200@ +> +OK8 +6 +4#/definitions/io.k8s.api.storage.v1.VolumeAttachment +L +201E +C +Created8 +6 +4#/definitions/io.k8s.api.storage.v1.VolumeAttachment + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionput +j^ +x-kubernetes-group-version-kind;9group: storage.k8s.io +kind: VolumeAttachment +version: v1 +* + +storage_v1delete a VolumeAttachment*deleteStorageV1VolumeAttachment2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string J± +M +202F +D +Accepted8 +6 +4#/definitions/io.k8s.api.storage.v1.VolumeAttachment + +401 + + Unauthorized +G +200@ +> +OK8 +6 +4#/definitions/io.k8s.api.storage.v1.VolumeAttachmentRhttpsj +x-kubernetes-action delete +j^ +x-kubernetes-group-version-kind;9group: storage.k8s.io +kind: VolumeAttachment +version: v1 +B‡ + +storage_v1/partially update the specified VolumeAttachment*patchStorageV1VolumeAttachment2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json-patch+json:application/merge-patch+json:&application/strategic-merge-patch+json:application/apply-patch+yamlBN +L +Jbodybody *: +8#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.PatchBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B¯ +¬©¦queryƒfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch)." fieldManager2string BÎ +ËÈÅquery¨Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests."force2boolean Jb +G +200@ +> +OK8 +6 +4#/definitions/io.k8s.api.storage.v1.VolumeAttachment + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionpatch +j^ +x-kubernetes-group-version-kind;9group: storage.k8s.io +kind: VolumeAttachment +version: v1 +J= +;9"7pathname of the VolumeAttachment"name*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string ¹` +C/apis/admissionregistration.k8s.io/v1/mutatingwebhookconfigurationsñ_Š' +admissionregistration_v1:list or watch objects of kind MutatingWebhookConfiguration*7listAdmissionregistrationV1MutatingWebhookConfiguration2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*B‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Bï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string B‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string B‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Bú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer Bû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string BÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Bž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer B± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean J€ +e +200^ +\ +OKV +T +R#/definitions/io.k8s.api.admissionregistration.v1.MutatingWebhookConfigurationList + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionlist +jx +x-kubernetes-group-version-kindUSgroup: admissionregistration.k8s.io +kind: MutatingWebhookConfiguration +version: v1 +"Û + +admissionregistration_v1%create a MutatingWebhookConfiguration*9createAdmissionregistrationV1MutatingWebhookConfiguration2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*Bd +b +`bodybody *P +N#/definitions/io.k8s.api.admissionregistration.v1.MutatingWebhookConfigurationBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string JÍ +a +200Z +X +OKR +P +N#/definitions/io.k8s.api.admissionregistration.v1.MutatingWebhookConfiguration +f +201_ +] +CreatedR +P +N#/definitions/io.k8s.api.admissionregistration.v1.MutatingWebhookConfiguration +g +202` +^ +AcceptedR +P +N#/definitions/io.k8s.api.admissionregistration.v1.MutatingWebhookConfiguration + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionpost +jx +x-kubernetes-group-version-kindUSgroup: admissionregistration.k8s.io +kind: MutatingWebhookConfiguration +version: v1 +*²- +admissionregistration_v11delete collection of MutatingWebhookConfiguration*CdeleteAdmissionregistrationV1CollectionMutatingWebhookConfiguration2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string Bž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer B‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Bú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string Bû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string BÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Bž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer Jg +L +200E +C +OK= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status + +401 + + UnauthorizedRhttpsj* +x-kubernetes-actiondeletecollection +jx +x-kubernetes-group-version-kindUSgroup: admissionregistration.k8s.io +kind: MutatingWebhookConfiguration +version: v1 +JO +MKIquery-If 'true', then the output is pretty printed."pretty2string ð +>/apis/apps/v1/namespaces/{namespace}/statefulsets/{name}/scale­û +apps_v1'read scale of the specified StatefulSet*$readAppsV1NamespacedStatefulSetScale2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*J[ +@ +2009 +7 +OK1 +/ +-#/definitions/io.k8s.api.autoscaling.v1.Scale + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionget +jP +x-kubernetes-group-version-kind-+group: autoscaling +kind: Scale +version: v1 +È +apps_v1*replace scale of the specified StatefulSet*'replaceAppsV1NamespacedStatefulSetScale2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BC +A +?bodybody */ +-#/definitions/io.k8s.api.autoscaling.v1.ScaleBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string J¢ +@ +2009 +7 +OK1 +/ +-#/definitions/io.k8s.api.autoscaling.v1.Scale +E +201> +< +Created1 +/ +-#/definitions/io.k8s.api.autoscaling.v1.Scale + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionput +jP +x-kubernetes-group-version-kind-+group: autoscaling +kind: Scale +version: v1 +Bú +apps_v13partially update scale of the specified StatefulSet*%patchAppsV1NamespacedStatefulSetScale2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json-patch+json:application/merge-patch+json:&application/strategic-merge-patch+json:application/apply-patch+yamlBN +L +Jbodybody *: +8#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.PatchBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B¯ +¬©¦queryƒfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch)." fieldManager2string BÎ +ËÈÅquery¨Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests."force2boolean J[ + +401 + + Unauthorized +@ +2009 +7 +OK1 +/ +-#/definitions/io.k8s.api.autoscaling.v1.ScaleRhttpsj +x-kubernetes-actionpatch +jP +x-kubernetes-group-version-kind-+group: autoscaling +kind: Scale +version: v1 +J2 +0.",pathname of the Scale"name*string˜J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string * +N/apis/networking.k8s.io/v1/watch/namespaces/{namespace}/networkpolicies/{name}®)„ + networking_v1´watch changes to an object of kind NetworkPolicy. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.*(watchNetworkingV1NamespacedNetworkPolicy2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsj^ +x-kubernetes-group-version-kind;9group: networking.k8s.io +kind: NetworkPolicy +version: v1 +j +x-kubernetes-actionwatch +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer J: +86"4pathname of the NetworkPolicy"name*string˜J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean Ü( +*/apis/node.k8s.io/v1/runtimeclasses/{name}­(ì +node_v1read the specified RuntimeClass*readNodeV1RuntimeClass2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*J[ +@ +2009 +7 +OK1 +/ +-#/definitions/io.k8s.api.node.v1.RuntimeClass + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionget +jW +x-kubernetes-group-version-kind42group: node.k8s.io +kind: RuntimeClass +version: v1 +¹ +node_v1"replace the specified RuntimeClass*replaceNodeV1RuntimeClass2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BC +A +?bodybody */ +-#/definitions/io.k8s.api.node.v1.RuntimeClassBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string J¢ +@ +2009 +7 +OK1 +/ +-#/definitions/io.k8s.api.node.v1.RuntimeClass +E +201> +< +Created1 +/ +-#/definitions/io.k8s.api.node.v1.RuntimeClass + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionput +jW +x-kubernetes-group-version-kind42group: node.k8s.io +kind: RuntimeClass +version: v1 +*… +node_v1delete a RuntimeClass*deleteNodeV1RuntimeClass2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string J» +L +200E +C +OK= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status +R +202K +I +Accepted= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status + +401 + + UnauthorizedRhttpsj +x-kubernetes-action delete +jW +x-kubernetes-group-version-kind42version: v1 +group: node.k8s.io +kind: RuntimeClass +Bë +node_v1+partially update the specified RuntimeClass*patchNodeV1RuntimeClass2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json-patch+json:application/merge-patch+json:&application/strategic-merge-patch+json:application/apply-patch+yamlBN +L +Jbodybody *: +8#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.PatchBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B¯ +¬©¦queryƒfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch)." fieldManager2string BÎ +ËÈÅquery¨Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests."force2boolean J[ +@ +2009 +7 +OK1 +/ +-#/definitions/io.k8s.api.node.v1.RuntimeClass + +401 + + UnauthorizedRhttpsjW +x-kubernetes-group-version-kind42group: node.k8s.io +kind: RuntimeClass +version: v1 +j +x-kubernetes-actionpatch +J9 +75"3pathname of the RuntimeClass"name*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string ö* +"<path!name of the ReplicationController"name*string˜J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string ÿ& +/api/v1/resourcequotasä&Ø +core_v1+list or watch objects of kind ResourceQuota*'listCoreV1ResourceQuotaForAllNamespaces2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*J` +E +200> +< +OK6 +4 +2#/definitions/io.k8s.api.core.v1.ResourceQuotaList + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionlist +jO +x-kubernetes-group-version-kind,*kind: ResourceQuota +version: v1 +group: "" +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean †_ +0/apis/apiregistration.k8s.io/v1beta1/apiservicesÑ^Ó& +apiregistration_v1beta1(list or watch objects of kind APIService*$listApiregistrationV1beta1APIService2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*B‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Bï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string B‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string B‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Bú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer Bû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string BÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Bž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer B± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean J‚ +g +200` +^ +OKX +V +T#/definitions/io.k8s.kube-aggregator.pkg.apis.apiregistration.v1beta1.APIServiceList + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionlist +je +x-kubernetes-group-version-kindB@kind: APIService +group: apiregistration.k8s.io +version: v1beta1 +"« + +apiregistration_v1beta1create an APIService*&createApiregistrationV1beta1APIService2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*Bf +d +bbodybody *R +P#/definitions/io.k8s.kube-aggregator.pkg.apis.apiregistration.v1beta1.APIServiceBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string JÓ +c +200\ +Z +OKT +R +P#/definitions/io.k8s.kube-aggregator.pkg.apis.apiregistration.v1beta1.APIService +h +201a +_ +CreatedT +R +P#/definitions/io.k8s.kube-aggregator.pkg.apis.apiregistration.v1beta1.APIService +i +202b +` +AcceptedT +R +P#/definitions/io.k8s.kube-aggregator.pkg.apis.apiregistration.v1beta1.APIService + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionpost +je +x-kubernetes-group-version-kindB@group: apiregistration.k8s.io +version: v1beta1 +kind: APIService +*ù, +apiregistration_v1beta1delete collection of APIService*0deleteApiregistrationV1beta1CollectionAPIService2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string Bž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer B‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Bú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string Bû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string BÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Bž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer Jg +L +200E +C +OK= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status + +401 + + UnauthorizedRhttpsje +x-kubernetes-group-version-kindB@group: apiregistration.k8s.io +version: v1beta1 +kind: APIService +j* +x-kubernetes-actiondeletecollection +JO +MKIquery-If 'true', then the output is pretty printed."pretty2string ø( +?/apis/extensions/v1beta1/watch/namespaces/{namespace}/ingresses´(Æ +extensions_v1beta1swatch individual changes to a list of Ingress. deprecated: use the 'watch' parameter with a list operation instead.*+watchExtensionsV1beta1NamespacedIngressList2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk + +401 + + Unauthorized +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEventRhttpsjV +x-kubernetes-group-version-kind31group: extensions +kind: Ingress +version: v1beta1 +j# +x-kubernetes-action  +watchlist +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean ä' +/api/v1/watch/persistentvolumesÀ'´ +core_v1|watch individual changes to a list of PersistentVolume. deprecated: use the 'watch' parameter with a list operation instead.*watchCoreV1PersistentVolumeList2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsj# +x-kubernetes-action  +watchlist +jR +x-kubernetes-group-version-kind/-group: "" +kind: PersistentVolume +version: v1 +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean á` + +2007 +5 +OK/ +- ++#/definitions/io.k8s.api.apps.v1.ReplicaSet +C +201< +: +Created/ +- ++#/definitions/io.k8s.api.apps.v1.ReplicaSet +D +202= +; +Accepted/ +- ++#/definitions/io.k8s.api.apps.v1.ReplicaSet + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionpost +jN +x-kubernetes-group-version-kind+)group: apps +kind: ReplicaSet +version: v1 +*Ì, +apps_v1delete collection of ReplicaSet**deleteAppsV1CollectionNamespacedReplicaSet2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string Bž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer B‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Bú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string Bû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string BÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Bž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer Jg +L +200E +C +OK= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status + +401 + + UnauthorizedRhttpsjN +x-kubernetes-group-version-kind+)group: apps +kind: ReplicaSet +version: v1 +j* +x-kubernetes-actiondeletecollection +J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Ü +/apis/extensions/Æà + +extensionsget information of a group*getExtensionsAPIGroup2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json:application/yaml:#application/vnd.kubernetes.protobufJi +N +200G +E +OK? += +;#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.APIGroup + +401 + + UnauthorizedRhttpsï +/apis/policy/v1beta1/ÕÒ +policy_v1beta1get available resources*getPolicyV1beta1APIResources2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json:application/yaml:#application/vnd.kubernetes.protobufJp +U +200N +L +OKF +D +B#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.APIResourceList + +401 + + UnauthorizedRhttpsÐ\ +%/api/v1/namespaces/{namespace}/events¦\ê% +core_v1#list or watch objects of kind Event*listCoreV1NamespacedEvent2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*B‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Bï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string B‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string B‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Bú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer Bû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string BÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Bž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer B± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean JX += +2006 +4 +OK. +, +*#/definitions/io.k8s.api.core.v1.EventList + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionlist +jG +x-kubernetes-group-version-kind$"group: "" +kind: Event +version: v1 +"Å +core_v1create an Event*createCoreV1NamespacedEvent2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*B< +: +8bodybody *( +&#/definitions/io.k8s.api.core.v1.EventBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string JÕ +? +2028 +6 +Accepted* +( +&#/definitions/io.k8s.api.core.v1.Event + +401 + + Unauthorized +9 +2002 +0 +OK* +( +&#/definitions/io.k8s.api.core.v1.Event +> +2017 +5 +Created* +( +&#/definitions/io.k8s.api.core.v1.EventRhttpsj +x-kubernetes-actionpost +jG +x-kubernetes-group-version-kind$"group: "" +kind: Event +version: v1 +*», +core_v1delete collection of Event*%deleteCoreV1CollectionNamespacedEvent2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string Bž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer B‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Bú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string Bû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string BÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Bž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer Jg + +401 + + Unauthorized +L +200E +C +OK= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.StatusRhttpsj* +x-kubernetes-actiondeletecollection +jG +x-kubernetes-group-version-kind$"group: "" +kind: Event +version: v1 +J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string È) +8/api/v1/watch/namespaces/{namespace}/podtemplates/{name}‹)ã +core_v1²watch changes to an object of kind PodTemplate. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.* watchCoreV1NamespacedPodTemplate2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionwatch +jM +x-kubernetes-group-version-kind*(group: "" +kind: PodTemplate +version: v1 +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer J8 +64"2pathname of the PodTemplate"name*string˜J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean ‚) +8/apis/apiregistration.k8s.io/v1/watch/apiservices/{name}Å(€ +apiregistration_v1±watch changes to an object of kind APIService. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.* watchApiregistrationV1APIService2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionwatch +j` +x-kubernetes-group-version-kind=;group: apiregistration.k8s.io +version: v1 +kind: APIService +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer J7 +53"1pathname of the APIService"name*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean Í + /version/¿¼ +versionget the code version*getCodeVersion2application/json:application/jsonJ` +E +200> +< +OK6 +4 +2#/definitions/io.k8s.apimachinery.pkg.version.Info + +401 + + UnauthorizedRhttps»( +/api/v1/watch/namespaces/{name}—(Ó +core_v1°watch changes to an object of kind Namespace. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.*watchCoreV1Namespace2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionwatch +jK +x-kubernetes-group-version-kind(&group: "" +kind: Namespace +version: v1 +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer J6 +42"0pathname of the Namespace"name*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean µ* +6/apis/scheduling.k8s.io/v1beta1/priorityclasses/{name}ú)œ +scheduling_v1beta1 read the specified PriorityClass*"readSchedulingV1beta1PriorityClass2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*Jg +L +200E +C +OK= +; +9#/definitions/io.k8s.api.scheduling.v1beta1.PriorityClass + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionget +jc +x-kubernetes-group-version-kind@>kind: PriorityClass +version: v1beta1 +group: scheduling.k8s.io + +scheduling_v1beta1#replace the specified PriorityClass*%replaceSchedulingV1beta1PriorityClass2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BO +M +Kbodybody *; +9#/definitions/io.k8s.api.scheduling.v1beta1.PriorityClassBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string Jº +Q +201J +H +Created= +; +9#/definitions/io.k8s.api.scheduling.v1beta1.PriorityClass + +401 + + Unauthorized +L +200E +C +OK= +; +9#/definitions/io.k8s.api.scheduling.v1beta1.PriorityClassRhttpsj +x-kubernetes-actionput +jc +x-kubernetes-group-version-kind@>version: v1beta1 +group: scheduling.k8s.io +kind: PriorityClass +*© +scheduling_v1beta1delete a PriorityClass*$deleteSchedulingV1beta1PriorityClass2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string J» +L +200E +C +OK= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status +R +202K +I +Accepted= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status + +401 + + UnauthorizedRhttpsjc +x-kubernetes-group-version-kind@>version: v1beta1 +group: scheduling.k8s.io +kind: PriorityClass +j +x-kubernetes-action delete +B› +scheduling_v1beta1,partially update the specified PriorityClass*#patchSchedulingV1beta1PriorityClass2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json-patch+json:application/merge-patch+json:&application/strategic-merge-patch+json:application/apply-patch+yamlBN +L +Jbodybody *: +8#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.PatchBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B¯ +¬©¦queryƒfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch)." fieldManager2string BÎ +ËÈÅquery¨Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests."force2boolean Jg + +401 + + Unauthorized +L +200E +C +OK= +; +9#/definitions/io.k8s.api.scheduling.v1beta1.PriorityClassRhttpsjc +x-kubernetes-group-version-kind@>group: scheduling.k8s.io +kind: PriorityClass +version: v1beta1 +j +x-kubernetes-actionpatch +J: +86"4pathname of the PriorityClass"name*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string «\ + /apis/storage.k8s.io/v1/csinodes†\ý% + +storage_v1%list or watch objects of kind CSINode*listStorageV1CSINode2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*B‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Bï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string B‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string B‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Bú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer Bû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string BÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Bž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer B± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean J] +B +200; +9 +OK3 +1 +/#/definitions/io.k8s.api.storage.v1.CSINodeList + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionlist +jU +x-kubernetes-group-version-kind20kind: CSINode +version: v1 +group: storage.k8s.io +"æ + +storage_v1create a CSINode*createStorageV1CSINode2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BA +? +=bodybody *- ++#/definitions/io.k8s.api.storage.v1.CSINodeBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string Jä +> +2007 +5 +OK/ +- ++#/definitions/io.k8s.api.storage.v1.CSINode +C +201< +: +Created/ +- ++#/definitions/io.k8s.api.storage.v1.CSINode +D +202= +; +Accepted/ +- ++#/definitions/io.k8s.api.storage.v1.CSINode + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionpost +jU +x-kubernetes-group-version-kind20group: storage.k8s.io +kind: CSINode +version: v1 +*É, + +storage_v1delete collection of CSINode* deleteStorageV1CollectionCSINode2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string Bž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer B‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Bú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string Bû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string BÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Bž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer Jg +L +200E +C +OK= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status + +401 + + UnauthorizedRhttpsj* +x-kubernetes-actiondeletecollection +jU +x-kubernetes-group-version-kind20group: storage.k8s.io +kind: CSINode +version: v1 +JO +MKIquery-If 'true', then the output is pretty printed."pretty2string ©0 +'/api/v1/namespaces/{namespace}/servicesý/ò% +core_v1%list or watch objects of kind Service*listCoreV1NamespacedService2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*B‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Bï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string B‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string B‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Bú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer Bû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string BÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Bž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer B± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean JZ +? +2008 +6 +OK0 +. +,#/definitions/io.k8s.api.core.v1.ServiceList + +401 + + UnauthorizedRhttpsjI +x-kubernetes-group-version-kind&$version: v1 +group: "" +kind: Service +j +x-kubernetes-actionlist +"Ò +core_v1create a Service*createCoreV1NamespacedService2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*B> +< +:bodybody ** +(#/definitions/io.k8s.api.core.v1.ServiceBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string JÛ +; +2004 +2 +OK, +* +(#/definitions/io.k8s.api.core.v1.Service +@ +2019 +7 +Created, +* +(#/definitions/io.k8s.api.core.v1.Service +A +202: +8 +Accepted, +* +(#/definitions/io.k8s.api.core.v1.Service + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionpost +jI +x-kubernetes-group-version-kind&$kind: Service +version: v1 +group: "" +J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string õ' +2/apis/autoscaling/v2beta2/horizontalpodautoscalers¾'² +autoscaling_v2beta25list or watch objects of kind HorizontalPodAutoscaler*=listAutoscalingV2beta2HorizontalPodAutoscalerForAllNamespaces2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jv +[ +200T +R +OKL +J +H#/definitions/io.k8s.api.autoscaling.v2beta2.HorizontalPodAutoscalerList + +401 + + UnauthorizedRhttpsjg +x-kubernetes-group-version-kindDBversion: v2beta2 +group: autoscaling +kind: HorizontalPodAutoscaler +j +x-kubernetes-actionlist +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean ã( +9/apis/batch/v1beta1/watch/namespaces/{namespace}/cronjobs¥(· + batch_v1beta1swatch individual changes to a list of CronJob. deprecated: use the 'watch' parameter with a list operation instead.*&watchBatchV1beta1NamespacedCronJobList2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsj# +x-kubernetes-action  +watchlist +jQ +x-kubernetes-group-version-kind.,group: batch +kind: CronJob +version: v1beta1 +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean ÿ +/apis/discovery.k8s.io/v1beta1/ÛØ +discovery_v1beta1get available resources*getDiscoveryV1beta1APIResources2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json:application/yaml:#application/vnd.kubernetes.protobufJp +U +200N +L +OKF +D +B#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.APIResourceList + +401 + + UnauthorizedRhttpsÜ+ +?/apis/internal.apiserver.k8s.io/v1alpha1/storageversions/{name}˜+Á +internalApiserver_v1alpha1!read the specified StorageVersion*+readInternalApiserverV1alpha1StorageVersion2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*Jp +U +200N +L +OKF +D +B#/definitions/io.k8s.api.apiserverinternal.v1alpha1.StorageVersion + +401 + + UnauthorizedRhttpsjm +x-kubernetes-group-version-kindJHkind: StorageVersion +version: v1alpha1 +group: internal.apiserver.k8s.io +j +x-kubernetes-actionget +¸ +internalApiserver_v1alpha1$replace the specified StorageVersion*.replaceInternalApiserverV1alpha1StorageVersion2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BX +V +Tbodybody *D +B#/definitions/io.k8s.api.apiserverinternal.v1alpha1.StorageVersionBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string JÌ + +401 + + Unauthorized +U +200N +L +OKF +D +B#/definitions/io.k8s.api.apiserverinternal.v1alpha1.StorageVersion +Z +201S +Q +CreatedF +D +B#/definitions/io.k8s.api.apiserverinternal.v1alpha1.StorageVersionRhttpsj +x-kubernetes-actionput +jm +x-kubernetes-group-version-kindJHgroup: internal.apiserver.k8s.io +kind: StorageVersion +version: v1alpha1 +*Å +internalApiserver_v1alpha1delete a StorageVersion*-deleteInternalApiserverV1alpha1StorageVersion2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string J» +L +200E +C +OK= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status +R +202K +I +Accepted= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status + +401 + + UnauthorizedRhttpsjm +x-kubernetes-group-version-kindJHgroup: internal.apiserver.k8s.io +kind: StorageVersion +version: v1alpha1 +j +x-kubernetes-action delete +BÀ +internalApiserver_v1alpha1-partially update the specified StorageVersion*,patchInternalApiserverV1alpha1StorageVersion2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json-patch+json:application/merge-patch+json:&application/strategic-merge-patch+json:application/apply-patch+yamlBN +L +Jbodybody *: +8#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.PatchBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B¯ +¬©¦queryƒfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch)." fieldManager2string BÎ +ËÈÅquery¨Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests."force2boolean Jp +U +200N +L +OKF +D +B#/definitions/io.k8s.api.apiserverinternal.v1alpha1.StorageVersion + +401 + + UnauthorizedRhttpsjm +x-kubernetes-group-version-kindJHkind: StorageVersion +version: v1alpha1 +group: internal.apiserver.k8s.io +j +x-kubernetes-actionpatch +J; +97"5pathname of the StorageVersion"name*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string ½- +J/apis/admissionregistration.k8s.io/v1/mutatingwebhookconfigurations/{name}î,ð +admissionregistration_v1/read the specified MutatingWebhookConfiguration*7readAdmissionregistrationV1MutatingWebhookConfiguration2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*J| +a +200Z +X +OKR +P +N#/definitions/io.k8s.api.admissionregistration.v1.MutatingWebhookConfiguration + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionget +jx +x-kubernetes-group-version-kindUSversion: v1 +group: admissionregistration.k8s.io +kind: MutatingWebhookConfiguration +ÿ +admissionregistration_v12replace the specified MutatingWebhookConfiguration*:replaceAdmissionregistrationV1MutatingWebhookConfiguration2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*Bd +b +`bodybody *P +N#/definitions/io.k8s.api.admissionregistration.v1.MutatingWebhookConfigurationBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string Jä +a +200Z +X +OKR +P +N#/definitions/io.k8s.api.admissionregistration.v1.MutatingWebhookConfiguration +f +201_ +] +CreatedR +P +N#/definitions/io.k8s.api.admissionregistration.v1.MutatingWebhookConfiguration + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionput +jx +x-kubernetes-group-version-kindUSgroup: admissionregistration.k8s.io +kind: MutatingWebhookConfiguration +version: v1 +*è +admissionregistration_v1%delete a MutatingWebhookConfiguration*9deleteAdmissionregistrationV1MutatingWebhookConfiguration2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string J» +L +200E +C +OK= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status +R +202K +I +Accepted= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status + +401 + + UnauthorizedRhttpsjx +x-kubernetes-group-version-kindUSgroup: admissionregistration.k8s.io +kind: MutatingWebhookConfiguration +version: v1 +j +x-kubernetes-action delete +Bï +admissionregistration_v1;partially update the specified MutatingWebhookConfiguration*8patchAdmissionregistrationV1MutatingWebhookConfiguration2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json-patch+json:application/merge-patch+json:&application/strategic-merge-patch+json:application/apply-patch+yamlBN +L +Jbodybody *: +8#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.PatchBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B¯ +¬©¦queryƒfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch)." fieldManager2string BÎ +ËÈÅquery¨Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests."force2boolean J| +a +200Z +X +OKR +P +N#/definitions/io.k8s.api.admissionregistration.v1.MutatingWebhookConfiguration + +401 + + UnauthorizedRhttpsjx +x-kubernetes-group-version-kindUSgroup: admissionregistration.k8s.io +kind: MutatingWebhookConfiguration +version: v1 +j +x-kubernetes-actionpatch +JI +GE"Cpath(name of the MutatingWebhookConfiguration"name*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string ¼^ +@/apis/networking.k8s.io/v1beta1/namespaces/{namespace}/ingresses÷]§& +networking_v1beta1%list or watch objects of kind Ingress*&listNetworkingV1beta1NamespacedIngress2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*B‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Bï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string B‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string B‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Bú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer Bû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string BÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Bž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer B± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean Je +J +200C +A +OK; +9 +7#/definitions/io.k8s.api.networking.v1beta1.IngressList + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionlist +j] +x-kubernetes-group-version-kind:8group: networking.k8s.io +kind: Ingress +version: v1beta1 +"© +networking_v1beta1create an Ingress*(createNetworkingV1beta1NamespacedIngress2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BI +G +Ebodybody *5 +3#/definitions/io.k8s.api.networking.v1beta1.IngressBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string Jü +F +200? += +OK7 +5 +3#/definitions/io.k8s.api.networking.v1beta1.Ingress +K +201D +B +Created7 +5 +3#/definitions/io.k8s.api.networking.v1beta1.Ingress +L +202E +C +Accepted7 +5 +3#/definitions/io.k8s.api.networking.v1beta1.Ingress + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionpost +j] +x-kubernetes-group-version-kind:8group: networking.k8s.io +kind: Ingress +version: v1beta1 +*ë, +networking_v1beta1delete collection of Ingress*2deleteNetworkingV1beta1CollectionNamespacedIngress2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string Bž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer B‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Bú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string Bû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string BÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Bž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer Jg +L +200E +C +OK= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status + +401 + + UnauthorizedRhttpsj* +x-kubernetes-actiondeletecollection +j] +x-kubernetes-group-version-kind:8kind: Ingress +version: v1beta1 +group: networking.k8s.io +J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Á' +//apis/rbac.authorization.k8s.io/v1/rolebindings' +rbacAuthorization_v1)list or watch objects of kind RoleBinding*2listRbacAuthorizationV1RoleBindingForAllNamespaces2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*J^ +C +200< +: +OK4 +2 +0#/definitions/io.k8s.api.rbac.v1.RoleBindingList + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionlist +jd +x-kubernetes-group-version-kindA?group: rbac.authorization.k8s.io +kind: RoleBinding +version: v1 +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean é +/apis/coordination.k8s.io/ÊÇ + coordinationget information of a group*getCoordinationAPIGroup2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json:application/yaml:#application/vnd.kubernetes.protobufJi +N +200G +E +OK? += +;#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.APIGroup + +401 + + UnauthorizedRhttpsô) +L/apis/coordination.k8s.io/v1beta1/watch/namespaces/{namespace}/leases/{name}£) +coordination_v1beta1¬watch changes to an object of kind Lease. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.*'watchCoordinationV1beta1NamespacedLease2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionwatch +j] +x-kubernetes-group-version-kind:8group: coordination.k8s.io +kind: Lease +version: v1beta1 +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer J2 +0.",pathname of the Lease"name*string˜J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean ‚ + /apis/networking.k8s.io/v1beta1/ÝÚ +networking_v1beta1get available resources* getNetworkingV1beta1APIResources2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json:application/yaml:#application/vnd.kubernetes.protobufJp +U +200N +L +OKF +D +B#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.APIResourceList + +401 + + UnauthorizedRhttps¦* +V/apis/storage.k8s.io/v1alpha1/watch/namespaces/{namespace}/csistoragecapacities/{name}Ë)œ +storage_v1alpha1¹watch changes to an object of kind CSIStorageCapacity. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.*0watchStorageV1alpha1NamespacedCSIStorageCapacity2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionwatch +jf +x-kubernetes-group-version-kindCAgroup: storage.k8s.io +kind: CSIStorageCapacity +version: v1alpha1 +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer J? +=;"9pathname of the CSIStorageCapacity"name*string˜J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean ì' +/api/v1/watch/serviceaccountsÊ'¾ +core_v1zwatch individual changes to a list of ServiceAccount. deprecated: use the 'watch' parameter with a list operation instead.*-watchCoreV1ServiceAccountListForAllNamespaces2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsj# +x-kubernetes-action  +watchlist +jP +x-kubernetes-group-version-kind-+group: "" +kind: ServiceAccount +version: v1 +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean ‹) +P/apis/admissionregistration.k8s.io/v1beta1/watch/validatingwebhookconfigurations¶(ª +admissionregistration_v1beta1Šwatch individual changes to a list of ValidatingWebhookConfiguration. deprecated: use the 'watch' parameter with a list operation instead.*CwatchAdmissionregistrationV1beta1ValidatingWebhookConfigurationList2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsj# +x-kubernetes-action  +watchlist +j +x-kubernetes-group-version-kind\Zgroup: admissionregistration.k8s.io +kind: ValidatingWebhookConfiguration +version: v1beta1 +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean Á) +D/apis/certificates.k8s.io/v1/watch/certificatesigningrequests/{name}ø(¤ +certificates_v1Àwatch changes to an object of kind CertificateSigningRequest. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.*,watchCertificatesV1CertificateSigningRequest2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionwatch +jl +x-kubernetes-group-version-kindIGgroup: certificates.k8s.io +kind: CertificateSigningRequest +version: v1 +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer JF +DB"@path%name of the CertificateSigningRequest"name*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean ó +/apis/scheduling.k8s.io/v1/ÓÐ + scheduling_v1get available resources*getSchedulingV1APIResources2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json:application/yaml:#application/vnd.kubernetes.protobufJp +U +200N +L +OKF +D +B#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.APIResourceList + +401 + + UnauthorizedRhttpsË) +=/apis/apps/v1/watch/namespaces/{namespace}/deployments/{name}‰)â +apps_v1±watch changes to an object of kind Deployment. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.*watchAppsV1NamespacedDeployment2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsjN +x-kubernetes-group-version-kind+)group: apps +kind: Deployment +version: v1 +j +x-kubernetes-actionwatch +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer J7 +53"1pathname of the Deployment"name*string˜J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean Š) +G/apis/networking.k8s.io/v1/watch/namespaces/{namespace}/networkpolicies¾(Ð + networking_v1ywatch individual changes to a list of NetworkPolicy. deprecated: use the 'watch' parameter with a list operation instead.*,watchNetworkingV1NamespacedNetworkPolicyList2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsj# +x-kubernetes-action  +watchlist +j^ +x-kubernetes-group-version-kind;9version: v1 +group: networking.k8s.io +kind: NetworkPolicy +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean È^ +E/apis/rbac.authorization.k8s.io/v1alpha1/namespaces/{namespace}/rolesþ]¯& +rbacAuthorization_v1alpha1"list or watch objects of kind Role*+listRbacAuthorizationV1alpha1NamespacedRole2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*B‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Bï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string B‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string B‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Bú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer Bû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string BÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Bž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer B± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean J] +B +200; +9 +OK3 +1 +/#/definitions/io.k8s.api.rbac.v1alpha1.RoleList + +401 + + UnauthorizedRhttpsjc +x-kubernetes-group-version-kind@>group: rbac.authorization.k8s.io +kind: Role +version: v1alpha1 +j +x-kubernetes-actionlist +"˜ +rbacAuthorization_v1alpha1 create a Role*-createRbacAuthorizationV1alpha1NamespacedRole2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BA +? +=bodybody *- ++#/definitions/io.k8s.api.rbac.v1alpha1.RoleBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string Jä +> +2007 +5 +OK/ +- ++#/definitions/io.k8s.api.rbac.v1alpha1.Role +C +201< +: +Created/ +- ++#/definitions/io.k8s.api.rbac.v1alpha1.Role +D +202= +; +Accepted/ +- ++#/definitions/io.k8s.api.rbac.v1alpha1.Role + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionpost +jc +x-kubernetes-group-version-kind@>group: rbac.authorization.k8s.io +kind: Role +version: v1alpha1 +*û, +rbacAuthorization_v1alpha1delete collection of Role*7deleteRbacAuthorizationV1alpha1CollectionNamespacedRole2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string Bž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer B‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Bú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string Bû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string BÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Bž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer Jg +L +200E +C +OK= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status + +401 + + UnauthorizedRhttpsjc +x-kubernetes-group-version-kind@>group: rbac.authorization.k8s.io +kind: Role +version: v1alpha1 +j* +x-kubernetes-actiondeletecollection +J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string ´' +/api/v1/watch/nodesœ' +core_v1pwatch individual changes to a list of Node. deprecated: use the 'watch' parameter with a list operation instead.*watchCoreV1NodeList2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsjF +x-kubernetes-group-version-kind#!kind: Node +version: v1 +group: "" +j# +x-kubernetes-action  +watchlist +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean Ì' +/apis/batch/v1/watch/jobs®'¢ +batch_v1owatch individual changes to a list of Job. deprecated: use the 'watch' parameter with a list operation instead.*#watchBatchV1JobListForAllNamespaces2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsj# +x-kubernetes-action  +watchlist +jH +x-kubernetes-group-version-kind%#version: v1 +group: batch +kind: Job +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean ¿( +=/apis/certificates.k8s.io/v1/watch/certificatesigningrequestsý'ñ +certificates_v1…watch individual changes to a list of CertificateSigningRequest. deprecated: use the 'watch' parameter with a list operation instead.*0watchCertificatesV1CertificateSigningRequestList2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk + +401 + + Unauthorized +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEventRhttpsj# +x-kubernetes-action  +watchlist +jl +x-kubernetes-group-version-kindIGgroup: certificates.k8s.io +kind: CertificateSigningRequest +version: v1 +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean †_ +D/apis/discovery.k8s.io/v1beta1/namespaces/{namespace}/endpointslices½^»& +discovery_v1beta1+list or watch objects of kind EndpointSlice*+listDiscoveryV1beta1NamespacedEndpointSlice2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*B‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Bï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string B‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string B‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Bú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer Bû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string BÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Bž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer B± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean Jj +O +200H +F +OK@ +> +<#/definitions/io.k8s.api.discovery.v1beta1.EndpointSliceList + +401 + + UnauthorizedRhttpsjb +x-kubernetes-group-version-kind?=group: discovery.k8s.io +kind: EndpointSlice +version: v1beta1 +j +x-kubernetes-actionlist +"Ì +discovery_v1beta1create an EndpointSlice*-createDiscoveryV1beta1NamespacedEndpointSlice2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BN +L +Jbodybody *: +8#/definitions/io.k8s.api.discovery.v1beta1.EndpointSliceBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string J‹ + +401 + + Unauthorized +K +200D +B +OK< +: +8#/definitions/io.k8s.api.discovery.v1beta1.EndpointSlice +P +201I +G +Created< +: +8#/definitions/io.k8s.api.discovery.v1beta1.EndpointSlice +Q +202J +H +Accepted< +: +8#/definitions/io.k8s.api.discovery.v1beta1.EndpointSliceRhttpsj +x-kubernetes-actionpost +jb +x-kubernetes-group-version-kind?=kind: EndpointSlice +version: v1beta1 +group: discovery.k8s.io +*ú, +discovery_v1beta1"delete collection of EndpointSlice*7deleteDiscoveryV1beta1CollectionNamespacedEndpointSlice2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string Bž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer B‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Bú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string Bû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string BÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Bž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer Jg +L +200E +C +OK= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status + +401 + + UnauthorizedRhttpsjb +x-kubernetes-group-version-kind?=group: discovery.k8s.io +kind: EndpointSlice +version: v1beta1 +j* +x-kubernetes-actiondeletecollection +J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Ö] +./api/v1/namespaces/{namespace}/serviceaccounts£]Ž& +core_v1,list or watch objects of kind ServiceAccount*"listCoreV1NamespacedServiceAccount2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*B‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Bï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string B‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string B‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Bú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer Bû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string BÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Bž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer B± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean Ja + +401 + + Unauthorized +F +200? += +OK7 +5 +3#/definitions/io.k8s.api.core.v1.ServiceAccountListRhttpsjP +x-kubernetes-group-version-kind-+group: "" +kind: ServiceAccount +version: v1 +j +x-kubernetes-actionlist +"ƒ +core_v1create a ServiceAccount*$createCoreV1NamespacedServiceAccount2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BE +C +Abodybody *1 +/#/definitions/io.k8s.api.core.v1.ServiceAccountBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string Jð +B +200; +9 +OK3 +1 +/#/definitions/io.k8s.api.core.v1.ServiceAccount +G +201@ +> +Created3 +1 +/#/definitions/io.k8s.api.core.v1.ServiceAccount +H +202A +? +Accepted3 +1 +/#/definitions/io.k8s.api.core.v1.ServiceAccount + +401 + + UnauthorizedRhttpsjP +x-kubernetes-group-version-kind-+kind: ServiceAccount +version: v1 +group: "" +j +x-kubernetes-actionpost +*Ö, +core_v1#delete collection of ServiceAccount*.deleteCoreV1CollectionNamespacedServiceAccount2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string Bž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer B‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Bú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string Bû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string BÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Bž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer Jg +L +200E +C +OK= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status + +401 + + UnauthorizedRhttpsj* +x-kubernetes-actiondeletecollection +jP +x-kubernetes-group-version-kind-+kind: ServiceAccount +version: v1 +group: "" +J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string â +/api/v1/nodes/{name}/statusÂÓ +core_v1!read status of the specified Node*readCoreV1NodeStatus2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*JS +8 +2001 +/ +OK) +' +%#/definitions/io.k8s.api.core.v1.Node + +401 + + UnauthorizedRhttpsjF +x-kubernetes-group-version-kind#!version: v1 +group: "" +kind: Node +j +x-kubernetes-actionget + +core_v1$replace status of the specified Node*replaceCoreV1NodeStatus2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*B; +9 +7bodybody *' +%#/definitions/io.k8s.api.core.v1.NodeBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string J’ + +401 + + Unauthorized +8 +2001 +/ +OK) +' +%#/definitions/io.k8s.api.core.v1.Node += +2016 +4 +Created) +' +%#/definitions/io.k8s.api.core.v1.NodeRhttpsjF +x-kubernetes-group-version-kind#!group: "" +kind: Node +version: v1 +j +x-kubernetes-actionput +BÒ +core_v1-partially update status of the specified Node*patchCoreV1NodeStatus2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json-patch+json:application/merge-patch+json:&application/strategic-merge-patch+json:application/apply-patch+yamlBN +L +Jbodybody *: +8#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.PatchBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B¯ +¬©¦queryƒfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch)." fieldManager2string BÎ +ËÈÅquery¨Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests."force2boolean JS +8 +2001 +/ +OK) +' +%#/definitions/io.k8s.api.core.v1.Node + +401 + + UnauthorizedRhttpsjF +x-kubernetes-group-version-kind#!group: "" +kind: Node +version: v1 +j +x-kubernetes-actionpatch +J1 +/-"+pathname of the Node"name*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string ×' +/api/v1/watch/endpoints»'¯ +core_v1uwatch individual changes to a list of Endpoints. deprecated: use the 'watch' parameter with a list operation instead.*(watchCoreV1EndpointsListForAllNamespaces2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsjK +x-kubernetes-group-version-kind(&group: "" +kind: Endpoints +version: v1 +j# +x-kubernetes-action  +watchlist +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean ’( +./apis/discovery.k8s.io/v1/watch/endpointslicesß'Ó + discovery_v1ywatch individual changes to a list of EndpointSlice. deprecated: use the 'watch' parameter with a list operation instead.*1watchDiscoveryV1EndpointSliceListForAllNamespaces2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsj# +x-kubernetes-action  +watchlist +j] +x-kubernetes-group-version-kind:8version: v1 +group: discovery.k8s.io +kind: EndpointSlice +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean ˜) + +< +:bodybody ** +(#/definitions/io.k8s.api.events.v1.EventBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string JÛ +; +2004 +2 +OK, +* +(#/definitions/io.k8s.api.events.v1.Event +@ +2019 +7 +Created, +* +(#/definitions/io.k8s.api.events.v1.Event +A +202: +8 +Accepted, +* +(#/definitions/io.k8s.api.events.v1.Event + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionpost +jR +x-kubernetes-group-version-kind/-group: events.k8s.io +kind: Event +version: v1 +*Ê, + events_v1delete collection of Event*'deleteEventsV1CollectionNamespacedEvent2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string Bž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer B‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Bú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string Bû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string BÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Bž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer Jg +L +200E +C +OK= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status + +401 + + UnauthorizedRhttpsjR +x-kubernetes-group-version-kind/-group: events.k8s.io +kind: Event +version: v1 +j* +x-kubernetes-actiondeletecollection +J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string ‰* +R/apis/rbac.authorization.k8s.io/v1alpha1/watch/namespaces/{namespace}/roles/{name}²)‘ +rbacAuthorization_v1alpha1«watch changes to an object of kind Role. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.*,watchRbacAuthorizationV1alpha1NamespacedRole2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionwatch +jc +x-kubernetes-group-version-kind@>group: rbac.authorization.k8s.io +kind: Role +version: v1alpha1 +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer J1 +/-"+pathname of the Role"name*string˜J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean ¡ ++/apis/flowcontrol.apiserver.k8s.io/v1beta1/ñî +flowcontrolApiserver_v1beta1get available resources**getFlowcontrolApiserverV1beta1APIResources2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json:application/yaml:#application/vnd.kubernetes.protobufJp +U +200N +L +OKF +D +B#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.APIResourceList + +401 + + UnauthorizedRhttps”* +S/apis/rbac.authorization.k8s.io/v1/watch/namespaces/{namespace}/rolebindings/{name}¼)” +rbacAuthorization_v1²watch changes to an object of kind RoleBinding. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.*-watchRbacAuthorizationV1NamespacedRoleBinding2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionwatch +jd +x-kubernetes-group-version-kindA?group: rbac.authorization.k8s.io +kind: RoleBinding +version: v1 +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer J8 +64"2pathname of the RoleBinding"name*string˜J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean Ã +>/apis/apiregistration.k8s.io/v1beta1/apiservices/{name}/status€É +apiregistration_v1beta1'read status of the specified APIService**readApiregistrationV1beta1APIServiceStatus2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*J~ +c +200\ +Z +OKT +R +P#/definitions/io.k8s.kube-aggregator.pkg.apis.apiregistration.v1beta1.APIService + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionget +je +x-kubernetes-group-version-kindB@group: apiregistration.k8s.io +version: v1beta1 +kind: APIService +Ü +apiregistration_v1beta1*replace status of the specified APIService*-replaceApiregistrationV1beta1APIServiceStatus2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*Bf +d +bbodybody *R +P#/definitions/io.k8s.kube-aggregator.pkg.apis.apiregistration.v1beta1.APIServiceBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string Jè +c +200\ +Z +OKT +R +P#/definitions/io.k8s.kube-aggregator.pkg.apis.apiregistration.v1beta1.APIService +h +201a +_ +CreatedT +R +P#/definitions/io.k8s.kube-aggregator.pkg.apis.apiregistration.v1beta1.APIService + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionput +je +x-kubernetes-group-version-kindB@group: apiregistration.k8s.io +version: v1beta1 +kind: APIService +BÈ +apiregistration_v1beta13partially update status of the specified APIService*+patchApiregistrationV1beta1APIServiceStatus2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json-patch+json:application/merge-patch+json:&application/strategic-merge-patch+json:application/apply-patch+yamlBN +L +Jbodybody *: +8#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.PatchBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B¯ +¬©¦queryƒfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch)." fieldManager2string BÎ +ËÈÅquery¨Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests."force2boolean J~ +c +200\ +Z +OKT +R +P#/definitions/io.k8s.kube-aggregator.pkg.apis.apiregistration.v1beta1.APIService + +401 + + UnauthorizedRhttpsje +x-kubernetes-group-version-kindB@group: apiregistration.k8s.io +version: v1beta1 +kind: APIService +j +x-kubernetes-actionpatch +J7 +53"1pathname of the APIService"name*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string •' +#/apis/coordination.k8s.io/v1/leasesí&á +coordination_v1#list or watch objects of kind Lease*'listCoordinationV1LeaseForAllNamespaces2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*J` +E +200> +< +OK6 +4 +2#/definitions/io.k8s.api.coordination.v1.LeaseList + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionlist +jX +x-kubernetes-group-version-kind53group: coordination.k8s.io +kind: Lease +version: v1 +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean ¦( +3/apis/discovery.k8s.io/v1beta1/watch/endpointslicesî'â +discovery_v1beta1ywatch individual changes to a list of EndpointSlice. deprecated: use the 'watch' parameter with a list operation instead.*6watchDiscoveryV1beta1EndpointSliceListForAllNamespaces2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsj# +x-kubernetes-action  +watchlist +jb +x-kubernetes-group-version-kind?=group: discovery.k8s.io +kind: EndpointSlice +version: v1beta1 +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean À] +//apis/rbac.authorization.k8s.io/v1/clusterrolesŒ]©& +rbacAuthorization_v1)list or watch objects of kind ClusterRole*"listRbacAuthorizationV1ClusterRole2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*B‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Bï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string B‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string B‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Bú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer Bû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string BÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Bž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer B± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean J^ +C +200< +: +OK4 +2 +0#/definitions/io.k8s.api.rbac.v1.ClusterRoleList + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionlist +jd +x-kubernetes-group-version-kindA?group: rbac.authorization.k8s.io +kind: ClusterRole +version: v1 +"• +rbacAuthorization_v1create a ClusterRole*$createRbacAuthorizationV1ClusterRole2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BB +@ +>bodybody *. +,#/definitions/io.k8s.api.rbac.v1.ClusterRoleBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string Jç + +401 + + Unauthorized +? +2008 +6 +OK0 +. +,#/definitions/io.k8s.api.rbac.v1.ClusterRole +D +201= +; +Created0 +. +,#/definitions/io.k8s.api.rbac.v1.ClusterRole +E +202> +< +Accepted0 +. +,#/definitions/io.k8s.api.rbac.v1.ClusterRoleRhttpsj +x-kubernetes-actionpost +jd +x-kubernetes-group-version-kindA?group: rbac.authorization.k8s.io +kind: ClusterRole +version: v1 +*ô, +rbacAuthorization_v1 delete collection of ClusterRole*.deleteRbacAuthorizationV1CollectionClusterRole2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string Bž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer B‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Bú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string Bû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string BÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Bž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer Jg +L +200E +C +OK= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status + +401 + + UnauthorizedRhttpsj* +x-kubernetes-actiondeletecollection +jd +x-kubernetes-group-version-kindA?group: rbac.authorization.k8s.io +kind: ClusterRole +version: v1 +JO +MKIquery-If 'true', then the output is pretty printed."pretty2string ³] +*/apis/scheduling.k8s.io/v1/priorityclasses„]¡& + scheduling_v1+list or watch objects of kind PriorityClass*listSchedulingV1PriorityClass2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*B‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Bï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string B‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string B‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Bú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer Bû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string BÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Bž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer B± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean Jf +K +200D +B +OK< +: +8#/definitions/io.k8s.api.scheduling.v1.PriorityClassList + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionlist +j^ +x-kubernetes-group-version-kind;9group: scheduling.k8s.io +kind: PriorityClass +version: v1 +"¥ + scheduling_v1create a PriorityClass*createSchedulingV1PriorityClass2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BJ +H +Fbodybody *6 +4#/definitions/io.k8s.api.scheduling.v1.PriorityClassBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string Jÿ +G +200@ +> +OK8 +6 +4#/definitions/io.k8s.api.scheduling.v1.PriorityClass +L +201E +C +Created8 +6 +4#/definitions/io.k8s.api.scheduling.v1.PriorityClass +M +202F +D +Accepted8 +6 +4#/definitions/io.k8s.api.scheduling.v1.PriorityClass + +401 + + UnauthorizedRhttpsj^ +x-kubernetes-group-version-kind;9group: scheduling.k8s.io +kind: PriorityClass +version: v1 +j +x-kubernetes-actionpost +*ä, + scheduling_v1"delete collection of PriorityClass*)deleteSchedulingV1CollectionPriorityClass2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string Bž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer B‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Bú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string Bû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string BÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Bž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer Jg +L +200E +C +OK= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status + +401 + + UnauthorizedRhttpsj* +x-kubernetes-actiondeletecollection +j^ +x-kubernetes-group-version-kind;9group: scheduling.k8s.io +kind: PriorityClass +version: v1 +JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Ú +/apis/storage.k8s.io/À½ +storageget information of a group*getStorageAPIGroup2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json:application/yaml:#application/vnd.kubernetes.protobufJi +N +200G +E +OK? += +;#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.APIGroup + +401 + + UnauthorizedRhttps³( +7/apis/storage.k8s.io/v1beta1/watch/csistoragecapacities÷'ë +storage_v1beta1~watch individual changes to a list of CSIStorageCapacity. deprecated: use the 'watch' parameter with a list operation instead.*9watchStorageV1beta1CSIStorageCapacityListForAllNamespaces2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsje +x-kubernetes-group-version-kindB@kind: CSIStorageCapacity +version: v1beta1 +group: storage.k8s.io +j# +x-kubernetes-action  +watchlist +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean ×( +6/apis/apps/v1/watch/namespaces/{namespace}/replicasetsœ(® +apps_v1vwatch individual changes to a list of ReplicaSet. deprecated: use the 'watch' parameter with a list operation instead.*#watchAppsV1NamespacedReplicaSetList2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsj# +x-kubernetes-action  +watchlist +jN +x-kubernetes-group-version-kind+)group: apps +kind: ReplicaSet +version: v1 +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean ß + +0/apis/authentication.k8s.io/v1beta1/tokenreviewsª +"œ +authentication_v1beta1create a TokenReview*&createAuthenticationV1beta1TokenReview2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BQ +O +Mbodybody *= +;#/definitions/io.k8s.api.authentication.v1beta1.TokenReviewJ” +N +200G +E +OK? += +;#/definitions/io.k8s.api.authentication.v1beta1.TokenReview +S +201L +J +Created? += +;#/definitions/io.k8s.api.authentication.v1beta1.TokenReview +T +202M +K +Accepted? += +;#/definitions/io.k8s.api.authentication.v1beta1.TokenReview + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionpost +je +x-kubernetes-group-version-kindB@group: authentication.k8s.io +kind: TokenReview +version: v1beta1 +Jž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string J– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string JO +MKIquery-If 'true', then the output is pretty printed."pretty2string ñ] +;/apis/networking.k8s.io/v1/namespaces/{namespace}/ingresses±]“& + networking_v1%list or watch objects of kind Ingress*!listNetworkingV1NamespacedIngress2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*B‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Bï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string B‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string B‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Bú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer Bû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string BÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Bž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer B± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean J` + +401 + + Unauthorized +E +200> +< +OK6 +4 +2#/definitions/io.k8s.api.networking.v1.IngressListRhttpsj +x-kubernetes-actionlist +jX +x-kubernetes-group-version-kind53group: networking.k8s.io +kind: Ingress +version: v1 +"† + networking_v1create an Ingress*#createNetworkingV1NamespacedIngress2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BD +B +@bodybody *0 +.#/definitions/io.k8s.api.networking.v1.IngressBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string Jí +A +200: +8 +OK2 +0 +.#/definitions/io.k8s.api.networking.v1.Ingress +F +201? += +Created2 +0 +.#/definitions/io.k8s.api.networking.v1.Ingress +G +202@ +> +Accepted2 +0 +.#/definitions/io.k8s.api.networking.v1.Ingress + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionpost +jX +x-kubernetes-group-version-kind53group: networking.k8s.io +kind: Ingress +version: v1 +*Ü, + networking_v1delete collection of Ingress*-deleteNetworkingV1CollectionNamespacedIngress2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string Bž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer B‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Bú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string Bû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string BÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Bž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer Jg +L +200E +C +OK= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status + +401 + + UnauthorizedRhttpsj* +x-kubernetes-actiondeletecollection +jX +x-kubernetes-group-version-kind53group: networking.k8s.io +kind: Ingress +version: v1 +J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string ¸) +E/apis/internal.apiserver.k8s.io/v1alpha1/watch/storageversions/{name}î(¥ +internalApiserver_v1alpha1µwatch changes to an object of kind StorageVersion. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.*,watchInternalApiserverV1alpha1StorageVersion2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionwatch +jm +x-kubernetes-group-version-kindJHgroup: internal.apiserver.k8s.io +kind: StorageVersion +version: v1alpha1 +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer J; +97"5pathname of the StorageVersion"name*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean ( +./apis/rbac.authorization.k8s.io/v1/watch/rolesÝ'Ñ +rbacAuthorization_v1pwatch individual changes to a list of Role. deprecated: use the 'watch' parameter with a list operation instead.*0watchRbacAuthorizationV1RoleListForAllNamespaces2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsj# +x-kubernetes-action  +watchlist +j] +x-kubernetes-group-version-kind:8group: rbac.authorization.k8s.io +kind: Role +version: v1 +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean á +//api/v1/namespaces/{namespace}/pods/{name}/exec­  +core_v1#connect GET requests to exec of Pod*!connectCoreV1GetNamespacedPodExec2*/*:*/*J7 + +401 + + Unauthorized + +200 + +OK + ² +stringRhttpsjP +x-kubernetes-group-version-kind-+version: v1 +group: "" +kind: PodExecOptions +j! +x-kubernetes-action +connect +"’ +core_v1$connect POST requests to exec of Pod*"connectCoreV1PostNamespacedPodExec2*/*:*/*J7 + +200 + +OK + ² +string + +401 + + UnauthorizedRhttpsjP +x-kubernetes-group-version-kind-+group: "" +kind: PodExecOptions +version: v1 +j! +x-kubernetes-action +connect +Ju +sqoqueryRCommand is the remote command to execute. argv array. Not executed within a shell."command2string J˜ +•’querypContainer in which to execute the command. Defaults to only container if there is only one container in the pod." container2string J; +97"5pathname of the PodExecOptions"name*string˜J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜Jq +omkqueryNRedirect the standard error stream of the pod for this call. Defaults to true."stderr2boolean Jq +omkqueryORedirect the standard input stream of the pod for this call. Defaults to false."stdin2boolean Jr +pnlqueryORedirect the standard output stream of the pod for this call. Defaults to true."stdout2boolean Jx +vtrqueryXTTY if true indicates that a tty will be allocated for the exec call. Defaults to false."tty2boolean á& +/api/v1/servicesÌ&À +core_v1%list or watch objects of kind Service*!listCoreV1ServiceForAllNamespaces2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*JZ +? +2008 +6 +OK0 +. +,#/definitions/io.k8s.api.core.v1.ServiceList + +401 + + UnauthorizedRhttpsjI +x-kubernetes-group-version-kind&$group: "" +kind: Service +version: v1 +j +x-kubernetes-actionlist +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean Ä +#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.APIVersions + +401 + + UnauthorizedRhttpsö) +@/apis/events.k8s.io/v1beta1/namespaces/{namespace}/events/{name}±)ö +events_v1beta1read the specified Event* readEventsV1beta1NamespacedEvent2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*J[ +@ +2009 +7 +OK1 +/ +-#/definitions/io.k8s.api.events.v1beta1.Event + +401 + + UnauthorizedRhttpsjW +x-kubernetes-group-version-kind42group: events.k8s.io +kind: Event +version: v1beta1 +j +x-kubernetes-actionget +à +events_v1beta1replace the specified Event*#replaceEventsV1beta1NamespacedEvent2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BC +A +?bodybody */ +-#/definitions/io.k8s.api.events.v1beta1.EventBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string J¢ +@ +2009 +7 +OK1 +/ +-#/definitions/io.k8s.api.events.v1beta1.Event +E +201> +< +Created1 +/ +-#/definitions/io.k8s.api.events.v1beta1.Event + +401 + + UnauthorizedRhttpsjW +x-kubernetes-group-version-kind42group: events.k8s.io +kind: Event +version: v1beta1 +j +x-kubernetes-actionput +* +events_v1beta1delete an Event*"deleteEventsV1beta1NamespacedEvent2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string J» +L +200E +C +OK= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status +R +202K +I +Accepted= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status + +401 + + UnauthorizedRhttpsjW +x-kubernetes-group-version-kind42group: events.k8s.io +kind: Event +version: v1beta1 +j +x-kubernetes-action delete +Bõ +events_v1beta1$partially update the specified Event*!patchEventsV1beta1NamespacedEvent2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json-patch+json:application/merge-patch+json:&application/strategic-merge-patch+json:application/apply-patch+yamlBN +L +Jbodybody *: +8#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.PatchBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B¯ +¬©¦queryƒfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch)." fieldManager2string BÎ +ËÈÅquery¨Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests."force2boolean J[ +@ +2009 +7 +OK1 +/ +-#/definitions/io.k8s.api.events.v1beta1.Event + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionpatch +jW +x-kubernetes-group-version-kind42group: events.k8s.io +kind: Event +version: v1beta1 +J2 +0.",pathname of the Event"name*string˜J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string ü +T/apis/flowcontrol.apiserver.k8s.io/v1beta1/prioritylevelconfigurations/{name}/status£€ +flowcontrolApiserver_v1beta17read status of the specified PriorityLevelConfiguration*?readFlowcontrolApiserverV1beta1PriorityLevelConfigurationStatus2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*Ju +Z +200S +Q +OKK +I +G#/definitions/io.k8s.api.flowcontrol.v1beta1.PriorityLevelConfiguration + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionget +j{ +x-kubernetes-group-version-kindXVkind: PriorityLevelConfiguration +version: v1beta1 +group: flowcontrol.apiserver.k8s.io + + +flowcontrolApiserver_v1beta1:replace status of the specified PriorityLevelConfiguration*BreplaceFlowcontrolApiserverV1beta1PriorityLevelConfigurationStatus2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*B] +[ +Ybodybody *I +G#/definitions/io.k8s.api.flowcontrol.v1beta1.PriorityLevelConfigurationBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string JÖ + +401 + + Unauthorized +Z +200S +Q +OKK +I +G#/definitions/io.k8s.api.flowcontrol.v1beta1.PriorityLevelConfiguration +_ +201X +V +CreatedK +I +G#/definitions/io.k8s.api.flowcontrol.v1beta1.PriorityLevelConfigurationRhttpsj{ +x-kubernetes-group-version-kindXVkind: PriorityLevelConfiguration +version: v1beta1 +group: flowcontrol.apiserver.k8s.io +j +x-kubernetes-actionput +Bÿ +flowcontrolApiserver_v1beta1Cpartially update status of the specified PriorityLevelConfiguration*@patchFlowcontrolApiserverV1beta1PriorityLevelConfigurationStatus2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json-patch+json:application/merge-patch+json:&application/strategic-merge-patch+json:application/apply-patch+yamlBN +L +Jbodybody *: +8#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.PatchBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B¯ +¬©¦queryƒfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch)." fieldManager2string BÎ +ËÈÅquery¨Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests."force2boolean Ju + +401 + + Unauthorized +Z +200S +Q +OKK +I +G#/definitions/io.k8s.api.flowcontrol.v1beta1.PriorityLevelConfigurationRhttpsj{ +x-kubernetes-group-version-kindXVversion: v1beta1 +group: flowcontrol.apiserver.k8s.io +kind: PriorityLevelConfiguration +j +x-kubernetes-actionpatch +JG +EC"Apath&name of the PriorityLevelConfiguration"name*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string ˆ +"/apis/coordination.k8s.io/v1beta1/áÞ +coordination_v1beta1get available resources*"getCoordinationV1beta1APIResources2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json:application/yaml:#application/vnd.kubernetes.protobufJp +U +200N +L +OKF +D +B#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.APIResourceList + +401 + + UnauthorizedRhttpsÉ) +0/apis/networking.k8s.io/v1/ingressclasses/{name}”)„ + networking_v1read the specified IngressClass*readNetworkingV1IngressClass2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*Ja +F +200? += +OK7 +5 +3#/definitions/io.k8s.api.networking.v1.IngressClass + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionget +j] +x-kubernetes-group-version-kind:8group: networking.k8s.io +kind: IngressClass +version: v1 +Ý + networking_v1"replace the specified IngressClass*replaceNetworkingV1IngressClass2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BI +G +Ebodybody *5 +3#/definitions/io.k8s.api.networking.v1.IngressClassBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string J® +F +200? += +OK7 +5 +3#/definitions/io.k8s.api.networking.v1.IngressClass +K +201D +B +Created7 +5 +3#/definitions/io.k8s.api.networking.v1.IngressClass + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionput +j] +x-kubernetes-group-version-kind:8group: networking.k8s.io +kind: IngressClass +version: v1 +*˜ + networking_v1delete an IngressClass*deleteNetworkingV1IngressClass2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string J» + +401 + + Unauthorized +L +200E +C +OK= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status +R +202K +I +Accepted= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.StatusRhttpsj +x-kubernetes-action delete +j] +x-kubernetes-group-version-kind:8group: networking.k8s.io +kind: IngressClass +version: v1 +Bƒ + networking_v1+partially update the specified IngressClass*patchNetworkingV1IngressClass2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json-patch+json:application/merge-patch+json:&application/strategic-merge-patch+json:application/apply-patch+yamlBN +L +Jbodybody *: +8#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.PatchBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B¯ +¬©¦queryƒfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch)." fieldManager2string BÎ +ËÈÅquery¨Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests."force2boolean Ja +F +200? += +OK7 +5 +3#/definitions/io.k8s.api.networking.v1.IngressClass + +401 + + UnauthorizedRhttpsj] +x-kubernetes-group-version-kind:8group: networking.k8s.io +kind: IngressClass +version: v1 +j +x-kubernetes-actionpatch +J9 +75"3pathname of the IngressClass"name*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string £* +5/apis/networking.k8s.io/v1beta1/ingressclasses/{name}é)˜ +networking_v1beta1read the specified IngressClass*!readNetworkingV1beta1IngressClass2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*Jf +K +200D +B +OK< +: +8#/definitions/io.k8s.api.networking.v1beta1.IngressClass + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionget +jb +x-kubernetes-group-version-kind?=kind: IngressClass +version: v1beta1 +group: networking.k8s.io +û +networking_v1beta1"replace the specified IngressClass*$replaceNetworkingV1beta1IngressClass2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BN +L +Jbodybody *: +8#/definitions/io.k8s.api.networking.v1beta1.IngressClassBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string J¸ +K +200D +B +OK< +: +8#/definitions/io.k8s.api.networking.v1beta1.IngressClass +P +201I +G +Created< +: +8#/definitions/io.k8s.api.networking.v1beta1.IngressClass + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionput +jb +x-kubernetes-group-version-kind?=group: networking.k8s.io +kind: IngressClass +version: v1beta1 +*§ +networking_v1beta1delete an IngressClass*#deleteNetworkingV1beta1IngressClass2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string J» + +401 + + Unauthorized +L +200E +C +OK= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status +R +202K +I +Accepted= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.StatusRhttpsj +x-kubernetes-action delete +jb +x-kubernetes-group-version-kind?=group: networking.k8s.io +kind: IngressClass +version: v1beta1 +B— +networking_v1beta1+partially update the specified IngressClass*"patchNetworkingV1beta1IngressClass2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json-patch+json:application/merge-patch+json:&application/strategic-merge-patch+json:application/apply-patch+yamlBN +L +Jbodybody *: +8#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.PatchBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B¯ +¬©¦queryƒfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch)." fieldManager2string BÎ +ËÈÅquery¨Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests."force2boolean Jf +K +200D +B +OK< +: +8#/definitions/io.k8s.api.networking.v1beta1.IngressClass + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionpatch +jb +x-kubernetes-group-version-kind?=group: networking.k8s.io +kind: IngressClass +version: v1beta1 +J9 +75"3pathname of the IngressClass"name*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string ”] +'/apis/storage.k8s.io/v1beta1/csidriversè\™& +storage_v1beta1'list or watch objects of kind CSIDriver*listStorageV1beta1CSIDriver2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*B‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Bï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string B‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string B‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Bú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer Bû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string BÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Bž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer B± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean Jd +I +200B +@ +OK: +8 +6#/definitions/io.k8s.api.storage.v1beta1.CSIDriverList + +401 + + UnauthorizedRhttpsj\ +x-kubernetes-group-version-kind97group: storage.k8s.io +kind: CSIDriver +version: v1beta1 +j +x-kubernetes-actionlist +"— +storage_v1beta1create a CSIDriver*createStorageV1beta1CSIDriver2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BH +F +Dbodybody *4 +2#/definitions/io.k8s.api.storage.v1beta1.CSIDriverBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string Jù + +401 + + Unauthorized +E +200> +< +OK6 +4 +2#/definitions/io.k8s.api.storage.v1beta1.CSIDriver +J +201C +A +Created6 +4 +2#/definitions/io.k8s.api.storage.v1beta1.CSIDriver +K +202D +B +Accepted6 +4 +2#/definitions/io.k8s.api.storage.v1beta1.CSIDriverRhttpsj +x-kubernetes-actionpost +j\ +x-kubernetes-group-version-kind97group: storage.k8s.io +kind: CSIDriver +version: v1beta1 +*Þ, +storage_v1beta1delete collection of CSIDriver*'deleteStorageV1beta1CollectionCSIDriver2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string Bž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer B‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Bú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string Bû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string BÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Bž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer Jg +L +200E +C +OK= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status + +401 + + UnauthorizedRhttpsj* +x-kubernetes-actiondeletecollection +j\ +x-kubernetes-group-version-kind97group: storage.k8s.io +kind: CSIDriver +version: v1beta1 +JO +MKIquery-If 'true', then the output is pretty printed."pretty2string ¯) +3/api/v1/watch/namespaces/{namespace}/secrets/{name}÷(Ô +core_v1­watch changes to an object of kind Secret. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.*watchCoreV1NamespacedSecret2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionwatch +jH +x-kubernetes-group-version-kind%#group: "" +kind: Secret +version: v1 +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer J3 +1/"-pathname of the Secret"name*string˜J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean ¿. +Q/apis/admissionregistration.k8s.io/v1beta1/validatingwebhookconfigurations/{name}é- +admissionregistration_v1beta11read the specified ValidatingWebhookConfiguration*>readAdmissionregistrationV1beta1ValidatingWebhookConfiguration2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*Jƒ +h +200a +_ +OKY +W +U#/definitions/io.k8s.api.admissionregistration.v1beta1.ValidatingWebhookConfiguration + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionget +j +x-kubernetes-group-version-kind\Zgroup: admissionregistration.k8s.io +kind: ValidatingWebhookConfiguration +version: v1beta1 +© + +admissionregistration_v1beta14replace the specified ValidatingWebhookConfiguration*AreplaceAdmissionregistrationV1beta1ValidatingWebhookConfiguration2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*Bk +i +gbodybody *W +U#/definitions/io.k8s.api.admissionregistration.v1beta1.ValidatingWebhookConfigurationBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string Jò +h +200a +_ +OKY +W +U#/definitions/io.k8s.api.admissionregistration.v1beta1.ValidatingWebhookConfiguration +m +201f +d +CreatedY +W +U#/definitions/io.k8s.api.admissionregistration.v1beta1.ValidatingWebhookConfiguration + +401 + + UnauthorizedRhttpsj +x-kubernetes-group-version-kind\Zgroup: admissionregistration.k8s.io +kind: ValidatingWebhookConfiguration +version: v1beta1 +j +x-kubernetes-actionput +*ý +admissionregistration_v1beta1'delete a ValidatingWebhookConfiguration*@deleteAdmissionregistrationV1beta1ValidatingWebhookConfiguration2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string J» +L +200E +C +OK= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status +R +202K +I +Accepted= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status + +401 + + UnauthorizedRhttpsj +x-kubernetes-group-version-kind\Zgroup: admissionregistration.k8s.io +kind: ValidatingWebhookConfiguration +version: v1beta1 +j +x-kubernetes-action delete +BŒ +admissionregistration_v1beta1=partially update the specified ValidatingWebhookConfiguration*?patchAdmissionregistrationV1beta1ValidatingWebhookConfiguration2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json-patch+json:application/merge-patch+json:&application/strategic-merge-patch+json:application/apply-patch+yamlBN +L +Jbodybody *: +8#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.PatchBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B¯ +¬©¦queryƒfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch)." fieldManager2string BÎ +ËÈÅquery¨Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests."force2boolean Jƒ + +401 + + Unauthorized +h +200a +_ +OKY +W +U#/definitions/io.k8s.api.admissionregistration.v1beta1.ValidatingWebhookConfigurationRhttpsj +x-kubernetes-actionpatch +j +x-kubernetes-group-version-kind\Zgroup: admissionregistration.k8s.io +kind: ValidatingWebhookConfiguration +version: v1beta1 +JK +IG"Epath*name of the ValidatingWebhookConfiguration"name*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string ø& +/apis/apps/v1/replicasetsÚ&Î +apps_v1(list or watch objects of kind ReplicaSet*$listAppsV1ReplicaSetForAllNamespaces2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*J] +B +200; +9 +OK3 +1 +/#/definitions/io.k8s.api.apps.v1.ReplicaSetList + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionlist +jN +x-kubernetes-group-version-kind+)group: apps +kind: ReplicaSet +version: v1 +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean ·- +M/apis/flowcontrol.apiserver.k8s.io/v1beta1/prioritylevelconfigurations/{name}å,ð +flowcontrolApiserver_v1beta1-read the specified PriorityLevelConfiguration*9readFlowcontrolApiserverV1beta1PriorityLevelConfiguration2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*Ju +Z +200S +Q +OKK +I +G#/definitions/io.k8s.api.flowcontrol.v1beta1.PriorityLevelConfiguration + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionget +j{ +x-kubernetes-group-version-kindXVgroup: flowcontrol.apiserver.k8s.io +kind: PriorityLevelConfiguration +version: v1beta1 +ñ +flowcontrolApiserver_v1beta10replace the specified PriorityLevelConfiguration* +<bodybody *, +*#/definitions/io.k8s.api.apps.v1.DaemonSetBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string Jœ += +2006 +4 +OK. +, +*#/definitions/io.k8s.api.apps.v1.DaemonSet +B +201; +9 +Created. +, +*#/definitions/io.k8s.api.apps.v1.DaemonSet + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionput +jM +x-kubernetes-group-version-kind*(kind: DaemonSet +version: v1 +group: apps +*ÿ +apps_v1delete a DaemonSet*deleteAppsV1NamespacedDaemonSet2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string J» +L +200E +C +OK= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status +R +202K +I +Accepted= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status + +401 + + UnauthorizedRhttpsj +x-kubernetes-action delete +jM +x-kubernetes-group-version-kind*(group: apps +kind: DaemonSet +version: v1 +Bâ +apps_v1(partially update the specified DaemonSet*patchAppsV1NamespacedDaemonSet2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json-patch+json:application/merge-patch+json:&application/strategic-merge-patch+json:application/apply-patch+yamlBN +L +Jbodybody *: +8#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.PatchBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B¯ +¬©¦queryƒfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch)." fieldManager2string BÎ +ËÈÅquery¨Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests."force2boolean JX += +2006 +4 +OK. +, +*#/definitions/io.k8s.api.apps.v1.DaemonSet + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionpatch +jM +x-kubernetes-group-version-kind*(version: v1 +group: apps +kind: DaemonSet +J6 +42"0pathname of the DaemonSet"name*string˜J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string × +/apis/events.k8s.io/¾» +eventsget information of a group*getEventsAPIGroup2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json:application/yaml:#application/vnd.kubernetes.protobufJi +N +200G +E +OK? += +;#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.APIGroup + +401 + + UnauthorizedRhttpsí( +3/apis/storage.k8s.io/v1/watch/storageclasses/{name}µ(î + +storage_v1³watch changes to an object of kind StorageClass. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.*watchStorageV1StorageClass2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionwatch +jZ +x-kubernetes-group-version-kind75group: storage.k8s.io +kind: StorageClass +version: v1 +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer J9 +75"3pathname of the StorageClass"name*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean ù +/apis/storage.k8s.io/v1beta1/×Ô +storage_v1beta1get available resources*getStorageV1beta1APIResources2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json:application/yaml:#application/vnd.kubernetes.protobufJp +U +200N +L +OKF +D +B#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.APIResourceList + +401 + + UnauthorizedRhttpsˆ) +5/apis/policy/v1beta1/watch/podsecuritypolicies/{name}Î(‚ +policy_v1beta1¸watch changes to an object of kind PodSecurityPolicy. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.*#watchPolicyV1beta1PodSecurityPolicy2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk + +401 + + Unauthorized +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEventRhttpsj +x-kubernetes-actionwatch +j\ +x-kubernetes-group-version-kind97kind: PodSecurityPolicy +version: v1beta1 +group: policy +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer J> +<:"8pathname of the PodSecurityPolicy"name*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean –( +'/apis/storage.k8s.io/v1/csinodes/{name}ê'ä + +storage_v1read the specified CSINode*readStorageV1CSINode2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*JY +> +2007 +5 +OK/ +- ++#/definitions/io.k8s.api.storage.v1.CSINode + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionget +jU +x-kubernetes-group-version-kind20group: storage.k8s.io +kind: CSINode +version: v1 +­ + +storage_v1replace the specified CSINode*replaceStorageV1CSINode2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BA +? +=bodybody *- ++#/definitions/io.k8s.api.storage.v1.CSINodeBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string Jž +C +201< +: +Created/ +- ++#/definitions/io.k8s.api.storage.v1.CSINode + +401 + + Unauthorized +> +2007 +5 +OK/ +- ++#/definitions/io.k8s.api.storage.v1.CSINodeRhttpsjU +x-kubernetes-group-version-kind20group: storage.k8s.io +kind: CSINode +version: v1 +j +x-kubernetes-actionput +*ã + +storage_v1delete a CSINode*deleteStorageV1CSINode2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string JŸ +> +2007 +5 +OK/ +- ++#/definitions/io.k8s.api.storage.v1.CSINode +D +202= +; +Accepted/ +- ++#/definitions/io.k8s.api.storage.v1.CSINode + +401 + + UnauthorizedRhttpsj +x-kubernetes-action delete +jU +x-kubernetes-group-version-kind20kind: CSINode +version: v1 +group: storage.k8s.io +Bã + +storage_v1&partially update the specified CSINode*patchStorageV1CSINode2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json-patch+json:application/merge-patch+json:&application/strategic-merge-patch+json:application/apply-patch+yamlBN +L +Jbodybody *: +8#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.PatchBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B¯ +¬©¦queryƒfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch)." fieldManager2string BÎ +ËÈÅquery¨Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests."force2boolean JY + +401 + + Unauthorized +> +2007 +5 +OK/ +- ++#/definitions/io.k8s.api.storage.v1.CSINodeRhttpsjU +x-kubernetes-group-version-kind20group: storage.k8s.io +kind: CSINode +version: v1 +j +x-kubernetes-actionpatch +J4 +20".pathname of the CSINode"name*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Ó( +-/apis/storage.k8s.io/v1/watch/csinodes/{name}¡(ß + +storage_v1®watch changes to an object of kind CSINode. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.*watchStorageV1CSINode2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionwatch +jU +x-kubernetes-group-version-kind20group: storage.k8s.io +kind: CSINode +version: v1 +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer J4 +20".pathname of the CSINode"name*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean ë' +)/apis/node.k8s.io/v1/watch/runtimeclasses½'± +node_v1xwatch individual changes to a list of RuntimeClass. deprecated: use the 'watch' parameter with a list operation instead.*watchNodeV1RuntimeClassList2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsj# +x-kubernetes-action  +watchlist +jW +x-kubernetes-group-version-kind42group: node.k8s.io +kind: RuntimeClass +version: v1 +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean Ë^ +;/apis/policy/v1/namespaces/{namespace}/poddisruptionbudgets‹^¬& + policy_v11list or watch objects of kind PodDisruptionBudget*)listPolicyV1NamespacedPodDisruptionBudget2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*B‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Bï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string B‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string B‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Bú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer Bû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string BÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Bž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer B± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean Jh +M +200F +D +OK> +< +:#/definitions/io.k8s.api.policy.v1.PodDisruptionBudgetList + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionlist +jY +x-kubernetes-group-version-kind64group: policy +kind: PodDisruptionBudget +version: v1 +"¶ + policy_v1create a PodDisruptionBudget*+createPolicyV1NamespacedPodDisruptionBudget2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BL +J +Hbodybody *8 +6#/definitions/io.k8s.api.policy.v1.PodDisruptionBudgetBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string J… +I +200B +@ +OK: +8 +6#/definitions/io.k8s.api.policy.v1.PodDisruptionBudget +N +201G +E +Created: +8 +6#/definitions/io.k8s.api.policy.v1.PodDisruptionBudget +O +202H +F +Accepted: +8 +6#/definitions/io.k8s.api.policy.v1.PodDisruptionBudget + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionpost +jY +x-kubernetes-group-version-kind64group: policy +kind: PodDisruptionBudget +version: v1 +*í, + policy_v1(delete collection of PodDisruptionBudget*5deletePolicyV1CollectionNamespacedPodDisruptionBudget2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string Bž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer B‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Bú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string Bû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string BÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Bž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer Jg +L +200E +C +OK= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status + +401 + + UnauthorizedRhttpsjY +x-kubernetes-group-version-kind64group: policy +kind: PodDisruptionBudget +version: v1 +j* +x-kubernetes-actiondeletecollection +J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string ©[ + /api/v1/nodes—[Ü% +core_v1"list or watch objects of kind Node*listCoreV1Node2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*B‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Bï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string B‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string B‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Bú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer Bû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string BÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Bž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer B± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean JW +< +2005 +3 +OK- ++ +)#/definitions/io.k8s.api.core.v1.NodeList + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionlist +jF +x-kubernetes-group-version-kind#!version: v1 +group: "" +kind: Node +"³ +core_v1 create a Node*createCoreV1Node2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*B; +9 +7bodybody *' +%#/definitions/io.k8s.api.core.v1.NodeBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string JÒ += +2016 +4 +Created) +' +%#/definitions/io.k8s.api.core.v1.Node +> +2027 +5 +Accepted) +' +%#/definitions/io.k8s.api.core.v1.Node + +401 + + Unauthorized +8 +2001 +/ +OK) +' +%#/definitions/io.k8s.api.core.v1.NodeRhttpsj +x-kubernetes-actionpost +jF +x-kubernetes-group-version-kind#!version: v1 +group: "" +kind: Node +*®, +core_v1delete collection of Node*deleteCoreV1CollectionNode2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string Bž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer B‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Bú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string Bû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string BÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Bž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer Jg +L +200E +C +OK= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status + +401 + + UnauthorizedRhttpsj* +x-kubernetes-actiondeletecollection +jF +x-kubernetes-group-version-kind#!group: "" +kind: Node +version: v1 +JO +MKIquery-If 'true', then the output is pretty printed."pretty2string ×) +;/api/v1/watch/namespaces/{namespace}/serviceaccounts/{name}—)ì +core_v1µwatch changes to an object of kind ServiceAccount. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.*#watchCoreV1NamespacedServiceAccount2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsjP +x-kubernetes-group-version-kind-+version: v1 +group: "" +kind: ServiceAccount +j +x-kubernetes-actionwatch +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer J; +97"5pathname of the ServiceAccount"name*string˜J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean ó& +/apis/apps/v1/daemonsetsÖ&Ê +apps_v1'list or watch objects of kind DaemonSet*#listAppsV1DaemonSetForAllNamespaces2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*J\ + +401 + + Unauthorized +A +200: +8 +OK2 +0 +.#/definitions/io.k8s.api.apps.v1.DaemonSetListRhttpsjM +x-kubernetes-group-version-kind*(group: apps +kind: DaemonSet +version: v1 +j +x-kubernetes-actionlist +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean ¸( +<":pathname of the PodDisruptionBudget"name*string˜J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string ì +/apis/authorization.k8s.io/ÌÉ + authorizationget information of a group*getAuthorizationAPIGroup2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json:application/yaml:#application/vnd.kubernetes.protobufJi +N +200G +E +OK? += +;#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.APIGroup + +401 + + UnauthorizedRhttpsÍ + /apis/batch/¼¹ +batchget information of a group*getBatchAPIGroup2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json:application/yaml:#application/vnd.kubernetes.protobufJi +N +200G +E +OK? += +;#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.APIGroup + +401 + + UnauthorizedRhttpsÀ( +>/apis/internal.apiserver.k8s.io/v1alpha1/watch/storageversionsý'ñ +internalApiserver_v1alpha1zwatch individual changes to a list of StorageVersion. deprecated: use the 'watch' parameter with a list operation instead.*0watchInternalApiserverV1alpha1StorageVersionList2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsj# +x-kubernetes-action  +watchlist +jm +x-kubernetes-group-version-kindJHgroup: internal.apiserver.k8s.io +kind: StorageVersion +version: v1alpha1 +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean Ä( +;/apis/rbac.authorization.k8s.io/v1alpha1/watch/rolebindings„(ø +rbacAuthorization_v1alpha1wwatch individual changes to a list of RoleBinding. deprecated: use the 'watch' parameter with a list operation instead.*=watchRbacAuthorizationV1alpha1RoleBindingListForAllNamespaces2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsjj +x-kubernetes-group-version-kindGEgroup: rbac.authorization.k8s.io +kind: RoleBinding +version: v1alpha1 +j# +x-kubernetes-action  +watchlist +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean ¢_ +K/apis/rbac.authorization.k8s.io/v1beta1/namespaces/{namespace}/rolebindingsÒ^Ç& +rbacAuthorization_v1beta1)list or watch objects of kind RoleBinding*1listRbacAuthorizationV1beta1NamespacedRoleBinding2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*B‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Bï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string B‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string B‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Bú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer Bû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string BÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Bž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer B± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean Jc +H +200A +? +OK9 +7 +5#/definitions/io.k8s.api.rbac.v1beta1.RoleBindingList + +401 + + UnauthorizedRhttpsji +x-kubernetes-group-version-kindFDgroup: rbac.authorization.k8s.io +kind: RoleBinding +version: v1beta1 +j +x-kubernetes-actionlist +" +rbacAuthorization_v1beta1create a RoleBinding*3createRbacAuthorizationV1beta1NamespacedRoleBinding2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BG +E +Cbodybody *3 +1#/definitions/io.k8s.api.rbac.v1beta1.RoleBindingBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string Jö +D +200= +; +OK5 +3 +1#/definitions/io.k8s.api.rbac.v1beta1.RoleBinding +I +201B +@ +Created5 +3 +1#/definitions/io.k8s.api.rbac.v1beta1.RoleBinding +J +202C +A +Accepted5 +3 +1#/definitions/io.k8s.api.rbac.v1beta1.RoleBinding + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionpost +ji +x-kubernetes-group-version-kindFDgroup: rbac.authorization.k8s.io +kind: RoleBinding +version: v1beta1 +*- +rbacAuthorization_v1beta1 delete collection of RoleBinding*=deleteRbacAuthorizationV1beta1CollectionNamespacedRoleBinding2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string Bž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer B‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Bú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string Bû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string BÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Bž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer Jg +L +200E +C +OK= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status + +401 + + UnauthorizedRhttpsj* +x-kubernetes-actiondeletecollection +ji +x-kubernetes-group-version-kindFDgroup: rbac.authorization.k8s.io +kind: RoleBinding +version: v1beta1 +J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Ž +6/api/v1/namespaces/{namespace}/pods/{name}/portforwardÓ¥ +core_v1*connect GET requests to portforward of Pod*(connectCoreV1GetNamespacedPodPortforward2*/*:*/*J7 + +200 + +OK + ² +string + +401 + + UnauthorizedRhttpsjW +x-kubernetes-group-version-kind42group: "" +kind: PodPortForwardOptions +version: v1 +j! +x-kubernetes-action +connect +"§ +core_v1+connect POST requests to portforward of Pod*)connectCoreV1PostNamespacedPodPortforward2*/*:*/*J7 + +200 + +OK + ² +string + +401 + + UnauthorizedRhttpsjW +x-kubernetes-group-version-kind42version: v1 +group: "" +kind: PodPortForwardOptions +j! +x-kubernetes-action +connect +JB +@>"<path!name of the PodPortForwardOptions"name*string˜J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JY +WUSquery7List of ports to forward Required when using WebSockets"ports2integer ¢( +6/apis/apiregistration.k8s.io/v1beta1/watch/apiservicesç'Û +apiregistration_v1beta1vwatch individual changes to a list of APIService. deprecated: use the 'watch' parameter with a list operation instead.*)watchApiregistrationV1beta1APIServiceList2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsj# +x-kubernetes-action  +watchlist +je +x-kubernetes-group-version-kindB@group: apiregistration.k8s.io +version: v1beta1 +kind: APIService +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean å +>/apis/apps/v1/namespaces/{namespace}/deployments/{name}/status¢÷ +apps_v1'read status of the specified Deployment*$readAppsV1NamespacedDeploymentStatus2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*JY +> +2007 +5 +OK/ +- ++#/definitions/io.k8s.api.apps.v1.Deployment + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionget +jN +x-kubernetes-group-version-kind+)group: apps +kind: Deployment +version: v1 +À +apps_v1*replace status of the specified Deployment*'replaceAppsV1NamespacedDeploymentStatus2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BA +? +=bodybody *- ++#/definitions/io.k8s.api.apps.v1.DeploymentBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string Jž +> +2007 +5 +OK/ +- ++#/definitions/io.k8s.api.apps.v1.Deployment +C +201< +: +Created/ +- ++#/definitions/io.k8s.api.apps.v1.Deployment + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionput +jN +x-kubernetes-group-version-kind+)group: apps +kind: Deployment +version: v1 +Bö +apps_v13partially update status of the specified Deployment*%patchAppsV1NamespacedDeploymentStatus2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json-patch+json:application/merge-patch+json:&application/strategic-merge-patch+json:application/apply-patch+yamlBN +L +Jbodybody *: +8#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.PatchBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B¯ +¬©¦queryƒfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch)." fieldManager2string BÎ +ËÈÅquery¨Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests."force2boolean JY +> +2007 +5 +OK/ +- ++#/definitions/io.k8s.api.apps.v1.Deployment + +401 + + UnauthorizedRhttpsjN +x-kubernetes-group-version-kind+)group: apps +kind: Deployment +version: v1 +j +x-kubernetes-actionpatch +J7 +53"1pathname of the Deployment"name*string˜J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string ê +/apis/storage.k8s.io/v1/ÍÊ + +storage_v1get available resources*getStorageV1APIResources2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json:application/yaml:#application/vnd.kubernetes.protobufJp +U +200N +L +OKF +D +B#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.APIResourceList + +401 + + UnauthorizedRhttpsÈ) +H/apis/rbac.authorization.k8s.io/v1beta1/watch/clusterrolebindings/{name}û(® +rbacAuthorization_v1beta1¹watch changes to an object of kind ClusterRoleBinding. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.*/watchRbacAuthorizationV1beta1ClusterRoleBinding2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsjp +x-kubernetes-group-version-kindMKgroup: rbac.authorization.k8s.io +kind: ClusterRoleBinding +version: v1beta1 +j +x-kubernetes-actionwatch +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer J? +=;"9pathname of the ClusterRoleBinding"name*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean © +5/api/v1/namespaces/{namespace}/services/{name}/statusïé +core_v1$read status of the specified Service*!readCoreV1NamespacedServiceStatus2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*JV +; +2004 +2 +OK, +* +(#/definitions/io.k8s.api.core.v1.Service + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionget +jI +x-kubernetes-group-version-kind&$group: "" +kind: Service +version: v1 +¬ +core_v1'replace status of the specified Service*$replaceCoreV1NamespacedServiceStatus2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*B> +< +:bodybody ** +(#/definitions/io.k8s.api.core.v1.ServiceBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string J˜ +; +2004 +2 +OK, +* +(#/definitions/io.k8s.api.core.v1.Service +@ +2019 +7 +Created, +* +(#/definitions/io.k8s.api.core.v1.Service + +401 + + UnauthorizedRhttpsjI +x-kubernetes-group-version-kind&$group: "" +kind: Service +version: v1 +j +x-kubernetes-actionput +Bè +core_v10partially update status of the specified Service*"patchCoreV1NamespacedServiceStatus2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json-patch+json:application/merge-patch+json:&application/strategic-merge-patch+json:application/apply-patch+yamlBN +L +Jbodybody *: +8#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.PatchBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B¯ +¬©¦queryƒfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch)." fieldManager2string BÎ +ËÈÅquery¨Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests."force2boolean JV +; +2004 +2 +OK, +* +(#/definitions/io.k8s.api.core.v1.Service + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionpatch +jI +x-kubernetes-group-version-kind&$version: v1 +group: "" +kind: Service +J4 +20".pathname of the Service"name*string˜J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string ¼) +O/apis/autoscaling/v2beta1/watch/namespaces/{namespace}/horizontalpodautoscalersè(ú +autoscaling_v2beta1ƒwatch individual changes to a list of HorizontalPodAutoscaler. deprecated: use the 'watch' parameter with a list operation instead.* +2007 +5 +OK/ +- ++#/definitions/io.k8s.api.core.v1.SecretList + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionlist +jH +x-kubernetes-group-version-kind%#version: v1 +group: "" +kind: Secret +"Ë +core_v1create a Secret*createCoreV1NamespacedSecret2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*B= +; +9bodybody *) +'#/definitions/io.k8s.api.core.v1.SecretBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string JØ +: +2003 +1 +OK+ +) +'#/definitions/io.k8s.api.core.v1.Secret +? +2018 +6 +Created+ +) +'#/definitions/io.k8s.api.core.v1.Secret +@ +2029 +7 +Accepted+ +) +'#/definitions/io.k8s.api.core.v1.Secret + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionpost +jH +x-kubernetes-group-version-kind%#group: "" +kind: Secret +version: v1 +*¾, +core_v1delete collection of Secret*&deleteCoreV1CollectionNamespacedSecret2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string Bž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer B‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Bú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string Bû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string BÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Bž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer Jg + +401 + + Unauthorized +L +200E +C +OK= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.StatusRhttpsj* +x-kubernetes-actiondeletecollection +jH +x-kubernetes-group-version-kind%#group: "" +kind: Secret +version: v1 +J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Ì' +/api/v1/watch/secrets²'¦ +core_v1rwatch individual changes to a list of Secret. deprecated: use the 'watch' parameter with a list operation instead.*%watchCoreV1SecretListForAllNamespaces2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk + +401 + + Unauthorized +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEventRhttpsjH +x-kubernetes-group-version-kind%#group: "" +kind: Secret +version: v1 +j# +x-kubernetes-action  +watchlist +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean Ü) +F/apis/events.k8s.io/v1beta1/watch/namespaces/{namespace}/events/{name}‘)ï +events_v1beta1¬watch changes to an object of kind Event. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.*!watchEventsV1beta1NamespacedEvent2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsjW +x-kubernetes-group-version-kind42group: events.k8s.io +kind: Event +version: v1beta1 +j +x-kubernetes-actionwatch +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer J2 +0.",pathname of the Event"name*string˜J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean É\ +"/apis/storage.k8s.io/v1/csidrivers¢\…& + +storage_v1'list or watch objects of kind CSIDriver*listStorageV1CSIDriver2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*B‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Bï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string B‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string B‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Bú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer Bû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string BÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Bž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer B± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean J_ +D +200= +; +OK5 +3 +1#/definitions/io.k8s.api.storage.v1.CSIDriverList + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionlist +jW +x-kubernetes-group-version-kind42group: storage.k8s.io +kind: CSIDriver +version: v1 +"ô + +storage_v1create a CSIDriver*createStorageV1CSIDriver2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BC +A +?bodybody */ +-#/definitions/io.k8s.api.storage.v1.CSIDriverBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string Jê +@ +2009 +7 +OK1 +/ +-#/definitions/io.k8s.api.storage.v1.CSIDriver +E +201> +< +Created1 +/ +-#/definitions/io.k8s.api.storage.v1.CSIDriver +F +202? += +Accepted1 +/ +-#/definitions/io.k8s.api.storage.v1.CSIDriver + +401 + + UnauthorizedRhttpsjW +x-kubernetes-group-version-kind42group: storage.k8s.io +kind: CSIDriver +version: v1 +j +x-kubernetes-actionpost +*Ï, + +storage_v1delete collection of CSIDriver*"deleteStorageV1CollectionCSIDriver2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string Bž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer B‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Bú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string Bû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string BÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Bž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer Jg +L +200E +C +OK= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status + +401 + + UnauthorizedRhttpsj* +x-kubernetes-actiondeletecollection +jW +x-kubernetes-group-version-kind42group: storage.k8s.io +kind: CSIDriver +version: v1 +JO +MKIquery-If 'true', then the output is pretty printed."pretty2string ñ( +4/apis/storage.k8s.io/v1beta1/watch/csidrivers/{name}¸(ô +storage_v1beta1°watch changes to an object of kind CSIDriver. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.*watchStorageV1beta1CSIDriver2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionwatch +j\ +x-kubernetes-group-version-kind97group: storage.k8s.io +kind: CSIDriver +version: v1beta1 +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer J6 +42"0pathname of the CSIDriver"name*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean Þ( +&/api/v1/watch/persistentvolumes/{name}³(è +core_v1·watch changes to an object of kind PersistentVolume. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.*watchCoreV1PersistentVolume2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionwatch +jR +x-kubernetes-group-version-kind/-group: "" +kind: PersistentVolume +version: v1 +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer J= +;9"7pathname of the PersistentVolume"name*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean ù +/apis/coordination.k8s.io/v1/×Ô +coordination_v1get available resources*getCoordinationV1APIResources2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json:application/yaml:#application/vnd.kubernetes.protobufJp +U +200N +L +OKF +D +B#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.APIResourceList + +401 + + UnauthorizedRhttpsÂ* +@/apis/extensions/v1beta1/namespaces/{namespace}/ingresses/{name}ý)‡ +extensions_v1beta1read the specified Ingress*&readExtensionsV1beta1NamespacedIngress2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*Ja +F +200? += +OK7 +5 +3#/definitions/io.k8s.api.extensions.v1beta1.Ingress + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionget +jV +x-kubernetes-group-version-kind31group: extensions +kind: Ingress +version: v1beta1 +à +extensions_v1beta1replace the specified Ingress*)replaceExtensionsV1beta1NamespacedIngress2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BI +G +Ebodybody *5 +3#/definitions/io.k8s.api.extensions.v1beta1.IngressBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string J® +F +200? += +OK7 +5 +3#/definitions/io.k8s.api.extensions.v1beta1.Ingress +K +201D +B +Created7 +5 +3#/definitions/io.k8s.api.extensions.v1beta1.Ingress + +401 + + UnauthorizedRhttpsjV +x-kubernetes-group-version-kind31group: extensions +kind: Ingress +version: v1beta1 +j +x-kubernetes-actionput +*› +extensions_v1beta1delete an Ingress*(deleteExtensionsV1beta1NamespacedIngress2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string J» +L +200E +C +OK= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status +R +202K +I +Accepted= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status + +401 + + UnauthorizedRhttpsj +x-kubernetes-action delete +jV +x-kubernetes-group-version-kind31group: extensions +kind: Ingress +version: v1beta1 +B† +extensions_v1beta1&partially update the specified Ingress*'patchExtensionsV1beta1NamespacedIngress2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json-patch+json:application/merge-patch+json:&application/strategic-merge-patch+json:application/apply-patch+yamlBN +L +Jbodybody *: +8#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.PatchBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B¯ +¬©¦queryƒfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch)." fieldManager2string BÎ +ËÈÅquery¨Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests."force2boolean Ja +F +200? += +OK7 +5 +3#/definitions/io.k8s.api.extensions.v1beta1.Ingress + +401 + + UnauthorizedRhttpsjV +x-kubernetes-group-version-kind31group: extensions +kind: Ingress +version: v1beta1 +j +x-kubernetes-actionpatch +J4 +20".pathname of the Ingress"name*string˜J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string â] +(/apis/policy/v1beta1/podsecuritypoliciesµ]®& +policy_v1beta1/list or watch objects of kind PodSecurityPolicy*"listPolicyV1beta1PodSecurityPolicy2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*B‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Bï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string B‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string B‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Bú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer Bû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string BÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Bž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer B± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.api.policy.v1beta1.PodSecurityPolicyList + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionlist +j\ +x-kubernetes-group-version-kind97group: policy +kind: PodSecurityPolicy +version: v1beta1 +"Á +policy_v1beta1create a PodSecurityPolicy*$createPolicyV1beta1PodSecurityPolicy2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BO +M +Kbodybody *; +9#/definitions/io.k8s.api.policy.v1beta1.PodSecurityPolicyBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string JŽ + +401 + + Unauthorized +L +200E +C +OK= +; +9#/definitions/io.k8s.api.policy.v1beta1.PodSecurityPolicy +Q +201J +H +Created= +; +9#/definitions/io.k8s.api.policy.v1beta1.PodSecurityPolicy +R +202K +I +Accepted= +; +9#/definitions/io.k8s.api.policy.v1beta1.PodSecurityPolicyRhttpsj +x-kubernetes-actionpost +j\ +x-kubernetes-group-version-kind97kind: PodSecurityPolicy +version: v1beta1 +group: policy +*ì, +policy_v1beta1&delete collection of PodSecurityPolicy*.deletePolicyV1beta1CollectionPodSecurityPolicy2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string Bž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer B‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Bú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string Bû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string BÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Bž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer Jg +L +200E +C +OK= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status + +401 + + UnauthorizedRhttpsj* +x-kubernetes-actiondeletecollection +j\ +x-kubernetes-group-version-kind97kind: PodSecurityPolicy +version: v1beta1 +group: policy +JO +MKIquery-If 'true', then the output is pretty printed."pretty2string š^ +5/apis/rbac.authorization.k8s.io/v1alpha1/clusterrolesà]Á& +rbacAuthorization_v1alpha1)list or watch objects of kind ClusterRole*(listRbacAuthorizationV1alpha1ClusterRole2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*B‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Bï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string B‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string B‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Bú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer Bû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string BÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Bž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer B± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean Jd +I +200B +@ +OK: +8 +6#/definitions/io.k8s.api.rbac.v1alpha1.ClusterRoleList + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionlist +jj +x-kubernetes-group-version-kindGEgroup: rbac.authorization.k8s.io +kind: ClusterRole +version: v1alpha1 +"¿ +rbacAuthorization_v1alpha1create a ClusterRole**createRbacAuthorizationV1alpha1ClusterRole2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BH +F +Dbodybody *4 +2#/definitions/io.k8s.api.rbac.v1alpha1.ClusterRoleBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string Jù +E +200> +< +OK6 +4 +2#/definitions/io.k8s.api.rbac.v1alpha1.ClusterRole +J +201C +A +Created6 +4 +2#/definitions/io.k8s.api.rbac.v1alpha1.ClusterRole +K +202D +B +Accepted6 +4 +2#/definitions/io.k8s.api.rbac.v1alpha1.ClusterRole + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionpost +jj +x-kubernetes-group-version-kindGEgroup: rbac.authorization.k8s.io +kind: ClusterRole +version: v1alpha1 +*†- +rbacAuthorization_v1alpha1 delete collection of ClusterRole*4deleteRbacAuthorizationV1alpha1CollectionClusterRole2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string Bž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer B‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Bú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string Bû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string BÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Bž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer Jg +L +200E +C +OK= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status + +401 + + UnauthorizedRhttpsj* +x-kubernetes-actiondeletecollection +jj +x-kubernetes-group-version-kindGEgroup: rbac.authorization.k8s.io +kind: ClusterRole +version: v1alpha1 +JO +MKIquery-If 'true', then the output is pretty printed."pretty2string ° +B/api/v1/namespaces/{namespace}/replicationcontrollers/{name}/scaleé +core_v11read scale of the specified ReplicationController*.readCoreV1NamespacedReplicationControllerScale2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*J[ +@ +2009 +7 +OK1 +/ +-#/definitions/io.k8s.api.autoscaling.v1.Scale + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionget +jP +x-kubernetes-group-version-kind-+version: v1 +group: autoscaling +kind: Scale +Ü +core_v14replace scale of the specified ReplicationController*1replaceCoreV1NamespacedReplicationControllerScale2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BC +A +?bodybody */ +-#/definitions/io.k8s.api.autoscaling.v1.ScaleBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string J¢ + +401 + + Unauthorized +@ +2009 +7 +OK1 +/ +-#/definitions/io.k8s.api.autoscaling.v1.Scale +E +201> +< +Created1 +/ +-#/definitions/io.k8s.api.autoscaling.v1.ScaleRhttpsjP +x-kubernetes-group-version-kind-+group: autoscaling +kind: Scale +version: v1 +j +x-kubernetes-actionput +BŽ +core_v1=partially update scale of the specified ReplicationController*/patchCoreV1NamespacedReplicationControllerScale2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json-patch+json:application/merge-patch+json:&application/strategic-merge-patch+json:application/apply-patch+yamlBN +L +Jbodybody *: +8#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.PatchBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B¯ +¬©¦queryƒfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch)." fieldManager2string BÎ +ËÈÅquery¨Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests."force2boolean J[ +@ +2009 +7 +OK1 +/ +-#/definitions/io.k8s.api.autoscaling.v1.Scale + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionpatch +jP +x-kubernetes-group-version-kind-+group: autoscaling +kind: Scale +version: v1 +J2 +0.",pathname of the Scale"name*string˜J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string é +=/apis/apps/v1/namespaces/{namespace}/deployments/{name}/scale§ù +apps_v1&read scale of the specified Deployment*#readAppsV1NamespacedDeploymentScale2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*J[ +@ +2009 +7 +OK1 +/ +-#/definitions/io.k8s.api.autoscaling.v1.Scale + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionget +jP +x-kubernetes-group-version-kind-+version: v1 +group: autoscaling +kind: Scale +Æ +apps_v1)replace scale of the specified Deployment*&replaceAppsV1NamespacedDeploymentScale2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BC +A +?bodybody */ +-#/definitions/io.k8s.api.autoscaling.v1.ScaleBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string J¢ +@ +2009 +7 +OK1 +/ +-#/definitions/io.k8s.api.autoscaling.v1.Scale +E +201> +< +Created1 +/ +-#/definitions/io.k8s.api.autoscaling.v1.Scale + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionput +jP +x-kubernetes-group-version-kind-+group: autoscaling +kind: Scale +version: v1 +Bø +apps_v12partially update scale of the specified Deployment*$patchAppsV1NamespacedDeploymentScale2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json-patch+json:application/merge-patch+json:&application/strategic-merge-patch+json:application/apply-patch+yamlBN +L +Jbodybody *: +8#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.PatchBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B¯ +¬©¦queryƒfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch)." fieldManager2string BÎ +ËÈÅquery¨Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests."force2boolean J[ +@ +2009 +7 +OK1 +/ +-#/definitions/io.k8s.api.autoscaling.v1.Scale + +401 + + UnauthorizedRhttpsjP +x-kubernetes-group-version-kind-+group: autoscaling +kind: Scale +version: v1 +j +x-kubernetes-actionpatch +J2 +0.",pathname of the Scale"name*string˜J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Ä+ +K/apis/discovery.k8s.io/v1beta1/namespaces/{namespace}/endpointslices/{name}ô*¢ +discovery_v1beta1 read the specified EndpointSlice*+readDiscoveryV1beta1NamespacedEndpointSlice2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*Jf +K +200D +B +OK< +: +8#/definitions/io.k8s.api.discovery.v1beta1.EndpointSlice + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionget +jb +x-kubernetes-group-version-kind?=group: discovery.k8s.io +kind: EndpointSlice +version: v1beta1 +… +discovery_v1beta1#replace the specified EndpointSlice*.replaceDiscoveryV1beta1NamespacedEndpointSlice2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BN +L +Jbodybody *: +8#/definitions/io.k8s.api.discovery.v1beta1.EndpointSliceBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string J¸ +K +200D +B +OK< +: +8#/definitions/io.k8s.api.discovery.v1beta1.EndpointSlice +P +201I +G +Created< +: +8#/definitions/io.k8s.api.discovery.v1beta1.EndpointSlice + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionput +jb +x-kubernetes-group-version-kind?=version: v1beta1 +group: discovery.k8s.io +kind: EndpointSlice +*± +discovery_v1beta1delete an EndpointSlice*-deleteDiscoveryV1beta1NamespacedEndpointSlice2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string J» +L +200E +C +OK= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status +R +202K +I +Accepted= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status + +401 + + UnauthorizedRhttpsj +x-kubernetes-action delete +jb +x-kubernetes-group-version-kind?=group: discovery.k8s.io +kind: EndpointSlice +version: v1beta1 +B¡ +discovery_v1beta1,partially update the specified EndpointSlice*,patchDiscoveryV1beta1NamespacedEndpointSlice2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json-patch+json:application/merge-patch+json:&application/strategic-merge-patch+json:application/apply-patch+yamlBN +L +Jbodybody *: +8#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.PatchBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B¯ +¬©¦queryƒfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch)." fieldManager2string BÎ +ËÈÅquery¨Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests."force2boolean Jf +K +200D +B +OK< +: +8#/definitions/io.k8s.api.discovery.v1beta1.EndpointSlice + +401 + + UnauthorizedRhttpsjb +x-kubernetes-group-version-kind?=kind: EndpointSlice +version: v1beta1 +group: discovery.k8s.io +j +x-kubernetes-actionpatch +J: +86"4pathname of the EndpointSlice"name*string˜J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Ó( +5/apis/apps/v1/watch/namespaces/{namespace}/daemonsets™(« +apps_v1uwatch individual changes to a list of DaemonSet. deprecated: use the 'watch' parameter with a list operation instead.*"watchAppsV1NamespacedDaemonSetList2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsj# +x-kubernetes-action  +watchlist +jM +x-kubernetes-group-version-kind*(group: apps +kind: DaemonSet +version: v1 +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean œ) +;/apis/events.k8s.io/v1/namespaces/{namespace}/events/{name}Ü(â + events_v1read the specified Event*readEventsV1NamespacedEvent2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*JV +; +2004 +2 +OK, +* +(#/definitions/io.k8s.api.events.v1.Event + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionget +jR +x-kubernetes-group-version-kind/-group: events.k8s.io +kind: Event +version: v1 +¥ + events_v1replace the specified Event*replaceEventsV1NamespacedEvent2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*B> +< +:bodybody ** +(#/definitions/io.k8s.api.events.v1.EventBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string J˜ +; +2004 +2 +OK, +* +(#/definitions/io.k8s.api.events.v1.Event +@ +2019 +7 +Created, +* +(#/definitions/io.k8s.api.events.v1.Event + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionput +jR +x-kubernetes-group-version-kind/-group: events.k8s.io +kind: Event +version: v1 +* + events_v1delete an Event*deleteEventsV1NamespacedEvent2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string J» +L +200E +C +OK= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status +R +202K +I +Accepted= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status + +401 + + UnauthorizedRhttpsj +x-kubernetes-action delete +jR +x-kubernetes-group-version-kind/-group: events.k8s.io +kind: Event +version: v1 +Bá + events_v1$partially update the specified Event*patchEventsV1NamespacedEvent2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json-patch+json:application/merge-patch+json:&application/strategic-merge-patch+json:application/apply-patch+yamlBN +L +Jbodybody *: +8#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.PatchBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B¯ +¬©¦queryƒfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch)." fieldManager2string BÎ +ËÈÅquery¨Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests."force2boolean JV +; +2004 +2 +OK, +* +(#/definitions/io.k8s.api.events.v1.Event + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionpatch +jR +x-kubernetes-group-version-kind/-group: events.k8s.io +kind: Event +version: v1 +J2 +0.",pathname of the Event"name*string˜J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string ’* +F/apis/rbac.authorization.k8s.io/v1/namespaces/{namespace}/roles/{name}Ç)þ +rbacAuthorization_v1read the specified Role*%readRbacAuthorizationV1NamespacedRole2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*JS +8 +2001 +/ +OK) +' +%#/definitions/io.k8s.api.rbac.v1.Role + +401 + + UnauthorizedRhttpsj] +x-kubernetes-group-version-kind:8version: v1 +group: rbac.authorization.k8s.io +kind: Role +j +x-kubernetes-actionget +» +rbacAuthorization_v1replace the specified Role*(replaceRbacAuthorizationV1NamespacedRole2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*B; +9 +7bodybody *' +%#/definitions/io.k8s.api.rbac.v1.RoleBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string J’ +8 +2001 +/ +OK) +' +%#/definitions/io.k8s.api.rbac.v1.Role += +2016 +4 +Created) +' +%#/definitions/io.k8s.api.rbac.v1.Role + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionput +j] +x-kubernetes-group-version-kind:8group: rbac.authorization.k8s.io +kind: Role +version: v1 +*Ÿ +rbacAuthorization_v1 delete a Role*'deleteRbacAuthorizationV1NamespacedRole2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string J» + +401 + + Unauthorized +L +200E +C +OK= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status +R +202K +I +Accepted= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.StatusRhttpsj +x-kubernetes-action delete +j] +x-kubernetes-group-version-kind:8version: v1 +group: rbac.authorization.k8s.io +kind: Role +Bý +rbacAuthorization_v1#partially update the specified Role*&patchRbacAuthorizationV1NamespacedRole2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json-patch+json:application/merge-patch+json:&application/strategic-merge-patch+json:application/apply-patch+yamlBN +L +Jbodybody *: +8#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.PatchBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B¯ +¬©¦queryƒfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch)." fieldManager2string BÎ +ËÈÅquery¨Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests."force2boolean JS +8 +2001 +/ +OK) +' +%#/definitions/io.k8s.api.rbac.v1.Role + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionpatch +j] +x-kubernetes-group-version-kind:8group: rbac.authorization.k8s.io +kind: Role +version: v1 +J1 +/-"+pathname of the Role"name*string˜J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string ´ + +'/api/v1/namespaces/{namespace}/bindingsˆ +"˜ +core_v1create a Binding*createCoreV1NamespacedBinding2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*B> +< +:bodybody ** +(#/definitions/io.k8s.api.core.v1.BindingJÛ +@ +2019 +7 +Created, +* +(#/definitions/io.k8s.api.core.v1.Binding +A +202: +8 +Accepted, +* +(#/definitions/io.k8s.api.core.v1.Binding + +401 + + Unauthorized +; +2004 +2 +OK, +* +(#/definitions/io.k8s.api.core.v1.BindingRhttpsj +x-kubernetes-actionpost +jI +x-kubernetes-group-version-kind&$version: v1 +group: "" +kind: Binding +Jž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string J– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Ã) +7/api/v1/watch/namespaces/{namespace}/limitranges/{name}‡)à +core_v1±watch changes to an object of kind LimitRange. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.*watchCoreV1NamespacedLimitRange2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionwatch +jL +x-kubernetes-group-version-kind)'kind: LimitRange +version: v1 +group: "" +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer J7 +53"1pathname of the LimitRange"name*string˜J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean À) +D/apis/apiextensions.k8s.io/v1/watch/customresourcedefinitions/{name}÷(¤ +apiextensions_v1¿watch changes to an object of kind CustomResourceDefinition. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.*,watchApiextensionsV1CustomResourceDefinition2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionwatch +jl +x-kubernetes-group-version-kindIGgroup: apiextensions.k8s.io +kind: CustomResourceDefinition +version: v1 +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer JE +CA"?path$name of the CustomResourceDefinition"name*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean ­` +F/apis/flowcontrol.apiserver.k8s.io/v1beta1/prioritylevelconfigurationsâ_‰' +flowcontrolApiserver_v1beta18list or watch objects of kind PriorityLevelConfiguration*9listFlowcontrolApiserverV1beta1PriorityLevelConfiguration2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*B‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Bï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string B‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string B‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Bú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer Bû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string BÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Bž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer B± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean Jy +^ +200W +U +OKO +M +K#/definitions/io.k8s.api.flowcontrol.v1beta1.PriorityLevelConfigurationList + +401 + + UnauthorizedRhttpsj{ +x-kubernetes-group-version-kindXVgroup: flowcontrol.apiserver.k8s.io +kind: PriorityLevelConfiguration +version: v1beta1 +j +x-kubernetes-actionlist +"Æ + +flowcontrolApiserver_v1beta1#create a PriorityLevelConfiguration*;createFlowcontrolApiserverV1beta1PriorityLevelConfiguration2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*B] +[ +Ybodybody *I +G#/definitions/io.k8s.api.flowcontrol.v1beta1.PriorityLevelConfigurationBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string J¸ +Z +200S +Q +OKK +I +G#/definitions/io.k8s.api.flowcontrol.v1beta1.PriorityLevelConfiguration +_ +201X +V +CreatedK +I +G#/definitions/io.k8s.api.flowcontrol.v1beta1.PriorityLevelConfiguration +` +202Y +W +AcceptedK +I +G#/definitions/io.k8s.api.flowcontrol.v1beta1.PriorityLevelConfiguration + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionpost +j{ +x-kubernetes-group-version-kindXVgroup: flowcontrol.apiserver.k8s.io +kind: PriorityLevelConfiguration +version: v1beta1 +*¹- +flowcontrolApiserver_v1beta1/delete collection of PriorityLevelConfiguration*EdeleteFlowcontrolApiserverV1beta1CollectionPriorityLevelConfiguration2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string Bž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer B‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Bú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string Bû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string BÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Bž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer Jg + +401 + + Unauthorized +L +200E +C +OK= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.StatusRhttpsj* +x-kubernetes-actiondeletecollection +j{ +x-kubernetes-group-version-kindXVgroup: flowcontrol.apiserver.k8s.io +kind: PriorityLevelConfiguration +version: v1beta1 +JO +MKIquery-If 'true', then the output is pretty printed."pretty2string ›) +K/apis/rbac.authorization.k8s.io/v1alpha1/watch/namespaces/{namespace}/rolesË(Ý +rbacAuthorization_v1alpha1pwatch individual changes to a list of Role. deprecated: use the 'watch' parameter with a list operation instead.*0watchRbacAuthorizationV1alpha1NamespacedRoleList2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsjc +x-kubernetes-group-version-kind@>group: rbac.authorization.k8s.io +kind: Role +version: v1alpha1 +j# +x-kubernetes-action  +watchlist +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean ²] +)/apis/storage.k8s.io/v1/volumeattachments„]¡& + +storage_v1.list or watch objects of kind VolumeAttachment*listStorageV1VolumeAttachment2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*B‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Bï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string B‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string B‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Bú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer Bû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string BÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Bž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer B± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean Jf +K +200D +B +OK< +: +8#/definitions/io.k8s.api.storage.v1.VolumeAttachmentList + +401 + + UnauthorizedRhttpsj^ +x-kubernetes-group-version-kind;9group: storage.k8s.io +kind: VolumeAttachment +version: v1 +j +x-kubernetes-actionlist +"¥ + +storage_v1create a VolumeAttachment*createStorageV1VolumeAttachment2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BJ +H +Fbodybody *6 +4#/definitions/io.k8s.api.storage.v1.VolumeAttachmentBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string Jÿ +G +200@ +> +OK8 +6 +4#/definitions/io.k8s.api.storage.v1.VolumeAttachment +L +201E +C +Created8 +6 +4#/definitions/io.k8s.api.storage.v1.VolumeAttachment +M +202F +D +Accepted8 +6 +4#/definitions/io.k8s.api.storage.v1.VolumeAttachment + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionpost +j^ +x-kubernetes-group-version-kind;9kind: VolumeAttachment +version: v1 +group: storage.k8s.io +*ä, + +storage_v1%delete collection of VolumeAttachment*)deleteStorageV1CollectionVolumeAttachment2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string Bž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer B‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Bú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string Bû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string BÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Bž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer Jg +L +200E +C +OK= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status + +401 + + UnauthorizedRhttpsj* +x-kubernetes-actiondeletecollection +j^ +x-kubernetes-group-version-kind;9group: storage.k8s.io +kind: VolumeAttachment +version: v1 +JO +MKIquery-If 'true', then the output is pretty printed."pretty2string ‰ +C/api/v1/namespaces/{namespace}/persistentvolumeclaims/{name}/statusÁ¡ +core_v12read status of the specified PersistentVolumeClaim*/readCoreV1NamespacedPersistentVolumeClaimStatus2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*Jd +I +200B +@ +OK: +8 +6#/definitions/io.k8s.api.core.v1.PersistentVolumeClaim + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionget +jW +x-kubernetes-group-version-kind42group: "" +kind: PersistentVolumeClaim +version: v1 +€ +core_v15replace status of the specified PersistentVolumeClaim*2replaceCoreV1NamespacedPersistentVolumeClaimStatus2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BL +J +Hbodybody *8 +6#/definitions/io.k8s.api.core.v1.PersistentVolumeClaimBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string J´ +I +200B +@ +OK: +8 +6#/definitions/io.k8s.api.core.v1.PersistentVolumeClaim +N +201G +E +Created: +8 +6#/definitions/io.k8s.api.core.v1.PersistentVolumeClaim + +401 + + UnauthorizedRhttpsjW +x-kubernetes-group-version-kind42version: v1 +group: "" +kind: PersistentVolumeClaim +j +x-kubernetes-actionput +B  +core_v1>partially update status of the specified PersistentVolumeClaim*0patchCoreV1NamespacedPersistentVolumeClaimStatus2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json-patch+json:application/merge-patch+json:&application/strategic-merge-patch+json:application/apply-patch+yamlBN +L +Jbodybody *: +8#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.PatchBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B¯ +¬©¦queryƒfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch)." fieldManager2string BÎ +ËÈÅquery¨Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests."force2boolean Jd + +401 + + Unauthorized +I +200B +@ +OK: +8 +6#/definitions/io.k8s.api.core.v1.PersistentVolumeClaimRhttpsjW +x-kubernetes-group-version-kind42group: "" +kind: PersistentVolumeClaim +version: v1 +j +x-kubernetes-actionpatch +JB +@>"<path!name of the PersistentVolumeClaim"name*string˜J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string ‰ +C/api/v1/namespaces/{namespace}/replicationcontrollers/{name}/statusÁ¡ +core_v12read status of the specified ReplicationController*/readCoreV1NamespacedReplicationControllerStatus2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*Jd + +401 + + Unauthorized +I +200B +@ +OK: +8 +6#/definitions/io.k8s.api.core.v1.ReplicationControllerRhttpsj +x-kubernetes-actionget +jW +x-kubernetes-group-version-kind42group: "" +kind: ReplicationController +version: v1 +€ +core_v15replace status of the specified ReplicationController*2replaceCoreV1NamespacedReplicationControllerStatus2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BL +J +Hbodybody *8 +6#/definitions/io.k8s.api.core.v1.ReplicationControllerBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string J´ +N +201G +E +Created: +8 +6#/definitions/io.k8s.api.core.v1.ReplicationController + +401 + + Unauthorized +I +200B +@ +OK: +8 +6#/definitions/io.k8s.api.core.v1.ReplicationControllerRhttpsj +x-kubernetes-actionput +jW +x-kubernetes-group-version-kind42group: "" +kind: ReplicationController +version: v1 +B  +core_v1>partially update status of the specified ReplicationController*0patchCoreV1NamespacedReplicationControllerStatus2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json-patch+json:application/merge-patch+json:&application/strategic-merge-patch+json:application/apply-patch+yamlBN +L +Jbodybody *: +8#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.PatchBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B¯ +¬©¦queryƒfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch)." fieldManager2string BÎ +ËÈÅquery¨Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests."force2boolean Jd +I +200B +@ +OK: +8 +6#/definitions/io.k8s.api.core.v1.ReplicationController + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionpatch +jW +x-kubernetes-group-version-kind42group: "" +kind: ReplicationController +version: v1 +JB +@>"<path!name of the ReplicationController"name*string˜J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string ð' +"/apis/batch/v1beta1/watch/cronjobsÉ'½ + batch_v1beta1swatch individual changes to a list of CronJob. deprecated: use the 'watch' parameter with a list operation instead.*,watchBatchV1beta1CronJobListForAllNamespaces2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsj# +x-kubernetes-action  +watchlist +jQ +x-kubernetes-group-version-kind.,group: batch +kind: CronJob +version: v1beta1 +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean ö' ++/apis/storage.k8s.io/v1beta1/watch/csinodesÆ'º +storage_v1beta1swatch individual changes to a list of CSINode. deprecated: use the 'watch' parameter with a list operation instead.*watchStorageV1beta1CSINodeList2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsj# +x-kubernetes-action  +watchlist +jZ +x-kubernetes-group-version-kind75group: storage.k8s.io +kind: CSINode +version: v1beta1 +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean ¢* +U/apis/storage.k8s.io/v1beta1/watch/namespaces/{namespace}/csistoragecapacities/{name}È)™ +storage_v1beta1¹watch changes to an object of kind CSIStorageCapacity. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.*/watchStorageV1beta1NamespacedCSIStorageCapacity2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsje +x-kubernetes-group-version-kindB@version: v1beta1 +group: storage.k8s.io +kind: CSIStorageCapacity +j +x-kubernetes-actionwatch +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer J? +=;"9pathname of the CSIStorageCapacity"name*string˜J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean „_ +7/apis/certificates.k8s.io/v1/certificatesigningrequestsÈ^Ù& +certificates_v17list or watch objects of kind CertificateSigningRequest*+listCertificatesV1CertificateSigningRequest2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*B‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Bï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string B‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string B‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Bú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer Bû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string BÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Bž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer B± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean Jt +Y +200R +P +OKJ +H +F#/definitions/io.k8s.api.certificates.v1.CertificateSigningRequestList + +401 + + UnauthorizedRhttpsjl +x-kubernetes-group-version-kindIGgroup: certificates.k8s.io +kind: CertificateSigningRequest +version: v1 +j +x-kubernetes-actionlist +"‡ + +certificates_v1"create a CertificateSigningRequest*-createCertificatesV1CertificateSigningRequest2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BX +V +Tbodybody *D +B#/definitions/io.k8s.api.certificates.v1.CertificateSigningRequestBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string J© +[ +202T +R +AcceptedF +D +B#/definitions/io.k8s.api.certificates.v1.CertificateSigningRequest + +401 + + Unauthorized +U +200N +L +OKF +D +B#/definitions/io.k8s.api.certificates.v1.CertificateSigningRequest +Z +201S +Q +CreatedF +D +B#/definitions/io.k8s.api.certificates.v1.CertificateSigningRequestRhttpsj +x-kubernetes-actionpost +jl +x-kubernetes-group-version-kindIGkind: CertificateSigningRequest +version: v1 +group: certificates.k8s.io +*Ž- +certificates_v1.delete collection of CertificateSigningRequest*7deleteCertificatesV1CollectionCertificateSigningRequest2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string Bž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer B‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Bú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string Bû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string BÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Bž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer Jg + +401 + + Unauthorized +L +200E +C +OK= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.StatusRhttpsj* +x-kubernetes-actiondeletecollection +jl +x-kubernetes-group-version-kindIGgroup: certificates.k8s.io +kind: CertificateSigningRequest +version: v1 +JO +MKIquery-If 'true', then the output is pretty printed."pretty2string •] +(/apis/node.k8s.io/v1beta1/runtimeclassesè\™& + node_v1beta1*list or watch objects of kind RuntimeClass*listNodeV1beta1RuntimeClass2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*B‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Bï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string B‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string B‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Bú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer Bû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string BÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Bž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer B± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean Jd +I +200B +@ +OK: +8 +6#/definitions/io.k8s.api.node.v1beta1.RuntimeClassList + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionlist +j\ +x-kubernetes-group-version-kind97group: node.k8s.io +kind: RuntimeClass +version: v1beta1 +"— + node_v1beta1create a RuntimeClass*createNodeV1beta1RuntimeClass2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BH +F +Dbodybody *4 +2#/definitions/io.k8s.api.node.v1beta1.RuntimeClassBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string Jù +K +202D +B +Accepted6 +4 +2#/definitions/io.k8s.api.node.v1beta1.RuntimeClass + +401 + + Unauthorized +E +200> +< +OK6 +4 +2#/definitions/io.k8s.api.node.v1beta1.RuntimeClass +J +201C +A +Created6 +4 +2#/definitions/io.k8s.api.node.v1beta1.RuntimeClassRhttpsj\ +x-kubernetes-group-version-kind97group: node.k8s.io +kind: RuntimeClass +version: v1beta1 +j +x-kubernetes-actionpost +*Þ, + node_v1beta1!delete collection of RuntimeClass*'deleteNodeV1beta1CollectionRuntimeClass2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string Bž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer B‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Bú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string Bû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string BÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Bž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer Jg +L +200E +C +OK= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status + +401 + + UnauthorizedRhttpsj* +x-kubernetes-actiondeletecollection +j\ +x-kubernetes-group-version-kind97group: node.k8s.io +kind: RuntimeClass +version: v1beta1 +JO +MKIquery-If 'true', then the output is pretty printed."pretty2string ¤( +3/apis/rbac.authorization.k8s.io/v1beta1/watch/rolesì'à +rbacAuthorization_v1beta1pwatch individual changes to a list of Role. deprecated: use the 'watch' parameter with a list operation instead.*5watchRbacAuthorizationV1beta1RoleListForAllNamespaces2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsjb +x-kubernetes-group-version-kind?=group: rbac.authorization.k8s.io +kind: Role +version: v1beta1 +j# +x-kubernetes-action  +watchlist +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean ‰ +#/apis/rbac.authorization.k8s.io/v1/áÞ +rbacAuthorization_v1get available resources*"getRbacAuthorizationV1APIResources2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json:application/yaml:#application/vnd.kubernetes.protobufJp +U +200N +L +OKF +D +B#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.APIResourceList + +401 + + UnauthorizedRhttpsË* +6/apis/storage.k8s.io/v1alpha1/volumeattachments/{name}*  +storage_v1alpha1#read the specified VolumeAttachment*#readStorageV1alpha1VolumeAttachment2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*Jh +M +200F +D +OK> +< +:#/definitions/io.k8s.api.storage.v1alpha1.VolumeAttachment + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionget +jd +x-kubernetes-group-version-kindA?group: storage.k8s.io +kind: VolumeAttachment +version: v1alpha1 +‡ +storage_v1alpha1&replace the specified VolumeAttachment*&replaceStorageV1alpha1VolumeAttachment2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BP +N +Lbodybody *< +:#/definitions/io.k8s.api.storage.v1alpha1.VolumeAttachmentBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string J¼ +R +201K +I +Created> +< +:#/definitions/io.k8s.api.storage.v1alpha1.VolumeAttachment + +401 + + Unauthorized +M +200F +D +OK> +< +:#/definitions/io.k8s.api.storage.v1alpha1.VolumeAttachmentRhttpsjd +x-kubernetes-group-version-kindA?group: storage.k8s.io +kind: VolumeAttachment +version: v1alpha1 +j +x-kubernetes-actionput +*® +storage_v1alpha1delete a VolumeAttachment*%deleteStorageV1alpha1VolumeAttachment2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string J½ +S +202L +J +Accepted> +< +:#/definitions/io.k8s.api.storage.v1alpha1.VolumeAttachment + +401 + + Unauthorized +M +200F +D +OK> +< +:#/definitions/io.k8s.api.storage.v1alpha1.VolumeAttachmentRhttpsj +x-kubernetes-action delete +jd +x-kubernetes-group-version-kindA?group: storage.k8s.io +kind: VolumeAttachment +version: v1alpha1 +BŸ +storage_v1alpha1/partially update the specified VolumeAttachment*$patchStorageV1alpha1VolumeAttachment2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json-patch+json:application/merge-patch+json:&application/strategic-merge-patch+json:application/apply-patch+yamlBN +L +Jbodybody *: +8#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.PatchBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B¯ +¬©¦queryƒfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch)." fieldManager2string BÎ +ËÈÅquery¨Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests."force2boolean Jh + +401 + + Unauthorized +M +200F +D +OK> +< +:#/definitions/io.k8s.api.storage.v1alpha1.VolumeAttachmentRhttpsj +x-kubernetes-actionpatch +jd +x-kubernetes-group-version-kindA?version: v1alpha1 +group: storage.k8s.io +kind: VolumeAttachment +J= +;9"7pathname of the VolumeAttachment"name*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string ³_ +H/apis/storage.k8s.io/v1beta1/namespaces/{namespace}/csistoragecapacitiesæ^Ç& +storage_v1beta10list or watch objects of kind CSIStorageCapacity*.listStorageV1beta1NamespacedCSIStorageCapacity2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*B‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Bï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string B‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string B‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Bú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer Bû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string BÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Bž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer B± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean Jm +R +200K +I +OKC +A +?#/definitions/io.k8s.api.storage.v1beta1.CSIStorageCapacityList + +401 + + UnauthorizedRhttpsje +x-kubernetes-group-version-kindB@group: storage.k8s.io +kind: CSIStorageCapacity +version: v1beta1 +j +x-kubernetes-actionlist +"à +storage_v1beta1create a CSIStorageCapacity*0createStorageV1beta1NamespacedCSIStorageCapacity2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BQ +O +Mbodybody *= +;#/definitions/io.k8s.api.storage.v1beta1.CSIStorageCapacityBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string J” +T +202M +K +Accepted? += +;#/definitions/io.k8s.api.storage.v1beta1.CSIStorageCapacity + +401 + + Unauthorized +N +200G +E +OK? += +;#/definitions/io.k8s.api.storage.v1beta1.CSIStorageCapacity +S +201L +J +Created? += +;#/definitions/io.k8s.api.storage.v1beta1.CSIStorageCapacityRhttpsj +x-kubernetes-actionpost +je +x-kubernetes-group-version-kindB@group: storage.k8s.io +kind: CSIStorageCapacity +version: v1beta1 +*ƒ- +storage_v1beta1'delete collection of CSIStorageCapacity*:deleteStorageV1beta1CollectionNamespacedCSIStorageCapacity2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string Bž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer B‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Bú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string Bû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string BÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Bž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer Jg +L +200E +C +OK= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status + +401 + + UnauthorizedRhttpsj* +x-kubernetes-actiondeletecollection +je +x-kubernetes-group-version-kindB@group: storage.k8s.io +kind: CSIStorageCapacity +version: v1beta1 +J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Ü' +/api/v1/watch/limitranges¾'² +core_v1vwatch individual changes to a list of LimitRange. deprecated: use the 'watch' parameter with a list operation instead.*)watchCoreV1LimitRangeListForAllNamespaces2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsjL +x-kubernetes-group-version-kind)'group: "" +kind: LimitRange +version: v1 +j# +x-kubernetes-action  +watchlist +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean …) +E/apis/discovery.k8s.io/v1/watch/namespaces/{namespace}/endpointslices»(Í + discovery_v1ywatch individual changes to a list of EndpointSlice. deprecated: use the 'watch' parameter with a list operation instead.*+watchDiscoveryV1NamespacedEndpointSliceList2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsj] +x-kubernetes-group-version-kind:8group: discovery.k8s.io +kind: EndpointSlice +version: v1 +j# +x-kubernetes-action  +watchlist +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean ð] +./apis/networking.k8s.io/v1beta1/ingressclasses½]±& +networking_v1beta1*list or watch objects of kind IngressClass*!listNetworkingV1beta1IngressClass2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*B‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Bï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string B‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string B‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Bú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer Bû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string BÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Bž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer B± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean Jj +O +200H +F +OK@ +> +<#/definitions/io.k8s.api.networking.v1beta1.IngressClassList + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionlist +jb +x-kubernetes-group-version-kind?=group: networking.k8s.io +kind: IngressClass +version: v1beta1 +" +networking_v1beta1create an IngressClass*#createNetworkingV1beta1IngressClass2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BN +L +Jbodybody *: +8#/definitions/io.k8s.api.networking.v1beta1.IngressClassBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string J‹ +Q +202J +H +Accepted< +: +8#/definitions/io.k8s.api.networking.v1beta1.IngressClass + +401 + + Unauthorized +K +200D +B +OK< +: +8#/definitions/io.k8s.api.networking.v1beta1.IngressClass +P +201I +G +Created< +: +8#/definitions/io.k8s.api.networking.v1beta1.IngressClassRhttpsj +x-kubernetes-actionpost +jb +x-kubernetes-group-version-kind?=group: networking.k8s.io +kind: IngressClass +version: v1beta1 +*ð, +networking_v1beta1!delete collection of IngressClass*-deleteNetworkingV1beta1CollectionIngressClass2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string Bž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer B‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Bú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string Bû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string BÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Bž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer Jg + +401 + + Unauthorized +L +200E +C +OK= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.StatusRhttpsj* +x-kubernetes-actiondeletecollection +jb +x-kubernetes-group-version-kind?=group: networking.k8s.io +kind: IngressClass +version: v1beta1 +JO +MKIquery-If 'true', then the output is pretty printed."pretty2string — +7/apis/authorization.k8s.io/v1beta1/subjectaccessreviewsÛ +"Í +authorization_v1beta1create a SubjectAccessReview*-createAuthorizationV1beta1SubjectAccessReview2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BX +V +Tbodybody *D +B#/definitions/io.k8s.api.authorization.v1beta1.SubjectAccessReviewJ© +U +200N +L +OKF +D +B#/definitions/io.k8s.api.authorization.v1beta1.SubjectAccessReview +Z +201S +Q +CreatedF +D +B#/definitions/io.k8s.api.authorization.v1beta1.SubjectAccessReview +[ +202T +R +AcceptedF +D +B#/definitions/io.k8s.api.authorization.v1beta1.SubjectAccessReview + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionpost +jl +x-kubernetes-group-version-kindIGgroup: authorization.k8s.io +kind: SubjectAccessReview +version: v1beta1 +Jž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string J– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string JO +MKIquery-If 'true', then the output is pretty printed."pretty2string —) +F/apis/policy/v1beta1/watch/namespaces/{namespace}/poddisruptionbudgetsÌ(Þ +policy_v1beta1watch individual changes to a list of PodDisruptionBudget. deprecated: use the 'watch' parameter with a list operation instead.*3watchPolicyV1beta1NamespacedPodDisruptionBudgetList2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsj# +x-kubernetes-action  +watchlist +j^ +x-kubernetes-group-version-kind;9group: policy +kind: PodDisruptionBudget +version: v1beta1 +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean ß' +5/apis/rbac.authorization.k8s.io/v1alpha1/rolebindings¥'™ +rbacAuthorization_v1alpha1)list or watch objects of kind RoleBinding*8listRbacAuthorizationV1alpha1RoleBindingForAllNamespaces2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jd +I +200B +@ +OK: +8 +6#/definitions/io.k8s.api.rbac.v1alpha1.RoleBindingList + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionlist +jj +x-kubernetes-group-version-kindGEgroup: rbac.authorization.k8s.io +kind: RoleBinding +version: v1alpha1 +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean ‹] +)/api/v1/namespaces/{namespace}/configmapsÝ\ú% +core_v1'list or watch objects of kind ConfigMap*listCoreV1NamespacedConfigMap2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*B‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Bï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string B‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string B‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Bú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer Bû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string BÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Bž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer B± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean J\ +A +200: +8 +OK2 +0 +.#/definitions/io.k8s.api.core.v1.ConfigMapList + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionlist +jK +x-kubernetes-group-version-kind(&group: "" +kind: ConfigMap +version: v1 +"à +core_v1create a ConfigMap*createCoreV1NamespacedConfigMap2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*B@ +> +<bodybody *, +*#/definitions/io.k8s.api.core.v1.ConfigMapBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string Já += +2006 +4 +OK. +, +*#/definitions/io.k8s.api.core.v1.ConfigMap +B +201; +9 +Created. +, +*#/definitions/io.k8s.api.core.v1.ConfigMap +C +202< +: +Accepted. +, +*#/definitions/io.k8s.api.core.v1.ConfigMap + +401 + + UnauthorizedRhttpsjK +x-kubernetes-group-version-kind(&group: "" +kind: ConfigMap +version: v1 +j +x-kubernetes-actionpost +*Ç, +core_v1delete collection of ConfigMap*)deleteCoreV1CollectionNamespacedConfigMap2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string Bž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer B‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Bú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string Bû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string BÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Bž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer Jg +L +200E +C +OK= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status + +401 + + UnauthorizedRhttpsj* +x-kubernetes-actiondeletecollection +jK +x-kubernetes-group-version-kind(&group: "" +kind: ConfigMap +version: v1 +J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string È' +/api/v1/watch/namespaces«'Ÿ +core_v1uwatch individual changes to a list of Namespace. deprecated: use the 'watch' parameter with a list operation instead.*watchCoreV1NamespaceList2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsj# +x-kubernetes-action  +watchlist +jK +x-kubernetes-group-version-kind(&group: "" +kind: Namespace +version: v1 +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean ï + +2/apis/authorization.k8s.io/v1/subjectaccessreviews¸ +"ª +authorization_v1create a SubjectAccessReview*(createAuthorizationV1SubjectAccessReview2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BS +Q +Obodybody *? +=#/definitions/io.k8s.api.authorization.v1.SubjectAccessReviewJš +P +200I +G +OKA +? +=#/definitions/io.k8s.api.authorization.v1.SubjectAccessReview +U +201N +L +CreatedA +? +=#/definitions/io.k8s.api.authorization.v1.SubjectAccessReview +V +202O +M +AcceptedA +? +=#/definitions/io.k8s.api.authorization.v1.SubjectAccessReview + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionpost +jg +x-kubernetes-group-version-kindDBgroup: authorization.k8s.io +kind: SubjectAccessReview +version: v1 +Jž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string J– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string JO +MKIquery-If 'true', then the output is pretty printed."pretty2string ) +8/apis/storage.k8s.io/v1beta1/watch/storageclasses/{name}Ä(ý +storage_v1beta1³watch changes to an object of kind StorageClass. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.*watchStorageV1beta1StorageClass2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionwatch +j_ +x-kubernetes-group-version-kind<:group: storage.k8s.io +kind: StorageClass +version: v1beta1 +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer J9 +75"3pathname of the StorageClass"name*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean Û( +3/api/v1/watch/namespaces/{namespace}/resourcequotas£(µ +core_v1ywatch individual changes to a list of ResourceQuota. deprecated: use the 'watch' parameter with a list operation instead.*&watchCoreV1NamespacedResourceQuotaList2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsj# +x-kubernetes-action  +watchlist +jO +x-kubernetes-group-version-kind,*group: "" +kind: ResourceQuota +version: v1 +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean –` +7/apis/apiextensions.k8s.io/v1/customresourcedefinitionsÚ_÷& +apiextensions_v16list or watch objects of kind CustomResourceDefinition*+listApiextensionsV1CustomResourceDefinition2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*B‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Bï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string B‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string B‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Bú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer Bû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string BÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Bž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer B± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean J‘ +v +200o +m +OKg +e +c#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1.CustomResourceDefinitionList + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionlist +jl +x-kubernetes-group-version-kindIGgroup: apiextensions.k8s.io +kind: CustomResourceDefinition +version: v1 +"û + +apiextensions_v1!create a CustomResourceDefinition*-createApiextensionsV1CustomResourceDefinition2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*Bu +s +qbodybody *a +_#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1.CustomResourceDefinitionBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string J€ +r +200k +i +OKc +a +_#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1.CustomResourceDefinition +w +201p +n +Createdc +a +_#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1.CustomResourceDefinition +x +202q +o +Acceptedc +a +_#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1.CustomResourceDefinition + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionpost +jl +x-kubernetes-group-version-kindIGgroup: apiextensions.k8s.io +kind: CustomResourceDefinition +version: v1 +*Ž- +apiextensions_v1-delete collection of CustomResourceDefinition*7deleteApiextensionsV1CollectionCustomResourceDefinition2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string Bž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer B‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Bú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string Bû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string BÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Bž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer Jg +L +200E +C +OK= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status + +401 + + UnauthorizedRhttpsj* +x-kubernetes-actiondeletecollection +jl +x-kubernetes-group-version-kindIGgroup: apiextensions.k8s.io +kind: CustomResourceDefinition +version: v1 +JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Æ) + +<bodybody *, +*#/definitions/io.k8s.api.rbac.v1beta1.RoleBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string Já += +2006 +4 +OK. +, +*#/definitions/io.k8s.api.rbac.v1beta1.Role +B +201; +9 +Created. +, +*#/definitions/io.k8s.api.rbac.v1beta1.Role +C +202< +: +Accepted. +, +*#/definitions/io.k8s.api.rbac.v1beta1.Role + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionpost +jb +x-kubernetes-group-version-kind?=kind: Role +version: v1beta1 +group: rbac.authorization.k8s.io +*ø, +rbacAuthorization_v1beta1delete collection of Role*6deleteRbacAuthorizationV1beta1CollectionNamespacedRole2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string Bž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer B‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Bú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string Bû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string BÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Bž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer Jg +L +200E +C +OK= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status + +401 + + UnauthorizedRhttpsjb +x-kubernetes-group-version-kind?=group: rbac.authorization.k8s.io +kind: Role +version: v1beta1 +j* +x-kubernetes-actiondeletecollection +J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string ý +/openid/v1/jwks/èå +openid\get service account issuer OpenID JSON Web Key Set (contains public token verification keys)*#getServiceAccountIssuerOpenIDKeyset2application/jwk-set+jsonJ7 + +200 + +OK + ² +string + +401 + + UnauthorizedRhttpsŽ +$/apis/authentication.k8s.io/v1beta1/åâ +authentication_v1beta1get available resources*$getAuthenticationV1beta1APIResources2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json:application/yaml:#application/vnd.kubernetes.protobufJp +U +200N +L +OKF +D +B#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.APIResourceList + +401 + + UnauthorizedRhttps…) +E/apis/coordination.k8s.io/v1beta1/watch/namespaces/{namespace}/leases»(Í +coordination_v1beta1qwatch individual changes to a list of Lease. deprecated: use the 'watch' parameter with a list operation instead.*+watchCoordinationV1beta1NamespacedLeaseList2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsj# +x-kubernetes-action  +watchlist +j] +x-kubernetes-group-version-kind:8version: v1beta1 +group: coordination.k8s.io +kind: Lease +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean ´) +C/apis/rbac.authorization.k8s.io/v1/watch/clusterrolebindings/{name}ì(Ÿ +rbacAuthorization_v1¹watch changes to an object of kind ClusterRoleBinding. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.**watchRbacAuthorizationV1ClusterRoleBinding2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionwatch +jk +x-kubernetes-group-version-kindHFgroup: rbac.authorization.k8s.io +kind: ClusterRoleBinding +version: v1 +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer J? +=;"9pathname of the ClusterRoleBinding"name*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean ×& +/api/v1/eventsÄ&¸ +core_v1#list or watch objects of kind Event*listCoreV1EventForAllNamespaces2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*JX += +2006 +4 +OK. +, +*#/definitions/io.k8s.api.core.v1.EventList + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionlist +jG +x-kubernetes-group-version-kind$"kind: Event +version: v1 +group: "" +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean À' +/api/v1/watch/pods©' +core_v1owatch individual changes to a list of Pod. deprecated: use the 'watch' parameter with a list operation instead.*"watchCoreV1PodListForAllNamespaces2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk + +401 + + Unauthorized +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEventRhttpsj# +x-kubernetes-action  +watchlist +jE +x-kubernetes-group-version-kind" group: "" +kind: Pod +version: v1 +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean à' +/api/v1/watch/podtemplatesÁ'µ +core_v1wwatch individual changes to a list of PodTemplate. deprecated: use the 'watch' parameter with a list operation instead.**watchCoreV1PodTemplateListForAllNamespaces2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsjM +x-kubernetes-group-version-kind*(group: "" +kind: PodTemplate +version: v1 +j# +x-kubernetes-action  +watchlist +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean é) +F/apis/extensions/v1beta1/watch/namespaces/{namespace}/ingresses/{name}ž)ú +extensions_v1beta1®watch changes to an object of kind Ingress. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.*'watchExtensionsV1beta1NamespacedIngress2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionwatch +jV +x-kubernetes-group-version-kind31group: extensions +kind: Ingress +version: v1beta1 +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer J4 +20".pathname of the Ingress"name*string˜J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean Ñ +/apis/node.k8s.io/º· +nodeget information of a group*getNodeAPIGroup2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json:application/yaml:#application/vnd.kubernetes.protobufJi +N +200G +E +OK? += +;#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.APIGroup + +401 + + UnauthorizedRhttps‚ + /apis/scheduling.k8s.io/v1beta1/ÝÚ +scheduling_v1beta1get available resources* getSchedulingV1beta1APIResources2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json:application/yaml:#application/vnd.kubernetes.protobufJp +U +200N +L +OKF +D +B#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.APIResourceList + +401 + + UnauthorizedRhttpsÐ' +/api/v1/watch/servicesµ'© +core_v1swatch individual changes to a list of Service. deprecated: use the 'watch' parameter with a list operation instead.*&watchCoreV1ServiceListForAllNamespaces2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsjI +x-kubernetes-group-version-kind&$group: "" +kind: Service +version: v1 +j# +x-kubernetes-action  +watchlist +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean Û( +7/apis/apps/v1/watch/namespaces/{namespace}/statefulsetsŸ(± +apps_v1wwatch individual changes to a list of StatefulSet. deprecated: use the 'watch' parameter with a list operation instead.*$watchAppsV1NamespacedStatefulSetList2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsjO +x-kubernetes-group-version-kind,*group: apps +kind: StatefulSet +version: v1 +j# +x-kubernetes-action  +watchlist +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean « +L/apis/certificates.k8s.io/v1beta1/certificatesigningrequests/{name}/approvalÚè +certificates_v1beta18read approval of the specified CertificateSigningRequest*8readCertificatesV1beta1CertificateSigningRequestApproval2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*Ju +Z +200S +Q +OKK +I +G#/definitions/io.k8s.api.certificates.v1beta1.CertificateSigningRequest + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionget +jq +x-kubernetes-group-version-kindNLgroup: certificates.k8s.io +kind: CertificateSigningRequest +version: v1beta1 +é +certificates_v1beta1;replace approval of the specified CertificateSigningRequest*;replaceCertificatesV1beta1CertificateSigningRequestApproval2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*B] +[ +Ybodybody *I +G#/definitions/io.k8s.api.certificates.v1beta1.CertificateSigningRequestBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string JÖ + +401 + + Unauthorized +Z +200S +Q +OKK +I +G#/definitions/io.k8s.api.certificates.v1beta1.CertificateSigningRequest +_ +201X +V +CreatedK +I +G#/definitions/io.k8s.api.certificates.v1beta1.CertificateSigningRequestRhttpsj +x-kubernetes-actionput +jq +x-kubernetes-group-version-kindNLgroup: certificates.k8s.io +kind: CertificateSigningRequest +version: v1beta1 +Bç +certificates_v1beta1Dpartially update approval of the specified CertificateSigningRequest*9patchCertificatesV1beta1CertificateSigningRequestApproval2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json-patch+json:application/merge-patch+json:&application/strategic-merge-patch+json:application/apply-patch+yamlBN +L +Jbodybody *: +8#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.PatchBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B¯ +¬©¦queryƒfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch)." fieldManager2string BÎ +ËÈÅquery¨Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests."force2boolean Ju +Z +200S +Q +OKK +I +G#/definitions/io.k8s.api.certificates.v1beta1.CertificateSigningRequest + +401 + + UnauthorizedRhttpsjq +x-kubernetes-group-version-kindNLgroup: certificates.k8s.io +kind: CertificateSigningRequest +version: v1beta1 +j +x-kubernetes-actionpatch +JF +DB"@path%name of the CertificateSigningRequest"name*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string ƒ( +//apis/networking.k8s.io/v1/watch/ingressclassesÏ'à + networking_v1xwatch individual changes to a list of IngressClass. deprecated: use the 'watch' parameter with a list operation instead.*!watchNetworkingV1IngressClassList2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsj] +x-kubernetes-group-version-kind:8group: networking.k8s.io +kind: IngressClass +version: v1 +j# +x-kubernetes-action  +watchlist +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean ÿ+ +O/apis/storage.k8s.io/v1beta1/namespaces/{namespace}/csistoragecapacities/{name}«+® +storage_v1beta1%read the specified CSIStorageCapacity*.readStorageV1beta1NamespacedCSIStorageCapacity2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*Ji +N +200G +E +OK? += +;#/definitions/io.k8s.api.storage.v1beta1.CSIStorageCapacity + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionget +je +x-kubernetes-group-version-kindB@group: storage.k8s.io +kind: CSIStorageCapacity +version: v1beta1 +— +storage_v1beta1(replace the specified CSIStorageCapacity*1replaceStorageV1beta1NamespacedCSIStorageCapacity2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BQ +O +Mbodybody *= +;#/definitions/io.k8s.api.storage.v1beta1.CSIStorageCapacityBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string J¾ +N +200G +E +OK? += +;#/definitions/io.k8s.api.storage.v1beta1.CSIStorageCapacity +S +201L +J +Created? += +;#/definitions/io.k8s.api.storage.v1beta1.CSIStorageCapacity + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionput +je +x-kubernetes-group-version-kindB@group: storage.k8s.io +kind: CSIStorageCapacity +version: v1beta1 +*¹ +storage_v1beta1delete a CSIStorageCapacity*0deleteStorageV1beta1NamespacedCSIStorageCapacity2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string J» +L +200E +C +OK= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status +R +202K +I +Accepted= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status + +401 + + UnauthorizedRhttpsje +x-kubernetes-group-version-kindB@kind: CSIStorageCapacity +version: v1beta1 +group: storage.k8s.io +j +x-kubernetes-action delete +B­ +storage_v1beta11partially update the specified CSIStorageCapacity*/patchStorageV1beta1NamespacedCSIStorageCapacity2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json-patch+json:application/merge-patch+json:&application/strategic-merge-patch+json:application/apply-patch+yamlBN +L +Jbodybody *: +8#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.PatchBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B¯ +¬©¦queryƒfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch)." fieldManager2string BÎ +ËÈÅquery¨Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests."force2boolean Ji +N +200G +E +OK? += +;#/definitions/io.k8s.api.storage.v1beta1.CSIStorageCapacity + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionpatch +je +x-kubernetes-group-version-kindB@group: storage.k8s.io +kind: CSIStorageCapacity +version: v1beta1 +J? +=;"9pathname of the CSIStorageCapacity"name*string˜J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string ’' +/api/v1/nodes/{name}ù&à +core_v1read the specified Node*readCoreV1Node2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*JS +8 +2001 +/ +OK) +' +%#/definitions/io.k8s.api.core.v1.Node + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionget +jF +x-kubernetes-group-version-kind#!group: "" +kind: Node +version: v1 +€ +core_v1replace the specified Node*replaceCoreV1Node2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*B; +9 +7bodybody *' +%#/definitions/io.k8s.api.core.v1.NodeBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string J’ +8 +2001 +/ +OK) +' +%#/definitions/io.k8s.api.core.v1.Node += +2016 +4 +Created) +' +%#/definitions/io.k8s.api.core.v1.Node + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionput +jF +x-kubernetes-group-version-kind#!group: "" +kind: Node +version: v1 +*ä +core_v1 delete a Node*deleteCoreV1Node2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string J» +L +200E +C +OK= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status +R +202K +I +Accepted= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status + +401 + + UnauthorizedRhttpsj +x-kubernetes-action delete +jF +x-kubernetes-group-version-kind#!group: "" +kind: Node +version: v1 +B +core_v1#partially update the specified Node*patchCoreV1Node2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json-patch+json:application/merge-patch+json:&application/strategic-merge-patch+json:application/apply-patch+yamlBN +L +Jbodybody *: +8#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.PatchBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B¯ +¬©¦queryƒfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch)." fieldManager2string BÎ +ËÈÅquery¨Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests."force2boolean JS +8 +2001 +/ +OK) +' +%#/definitions/io.k8s.api.core.v1.Node + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionpatch +jF +x-kubernetes-group-version-kind#!group: "" +kind: Node +version: v1 +J1 +/-"+pathname of the Node"name*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string è' +/api/v1/watch/resourcequotasÇ'» +core_v1ywatch individual changes to a list of ResourceQuota. deprecated: use the 'watch' parameter with a list operation instead.*,watchCoreV1ResourceQuotaListForAllNamespaces2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsj# +x-kubernetes-action  +watchlist +jO +x-kubernetes-group-version-kind,*group: "" +kind: ResourceQuota +version: v1 +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean ‡ +5/apis/authorization.k8s.io/v1/selfsubjectrulesreviewsÍ +"¿ +authorization_v1create a SelfSubjectRulesReview*+createAuthorizationV1SelfSubjectRulesReview2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BV +T +Rbodybody *B +@#/definitions/io.k8s.api.authorization.v1.SelfSubjectRulesReviewJ£ + +401 + + Unauthorized +S +200L +J +OKD +B +@#/definitions/io.k8s.api.authorization.v1.SelfSubjectRulesReview +X +201Q +O +CreatedD +B +@#/definitions/io.k8s.api.authorization.v1.SelfSubjectRulesReview +Y +202R +P +AcceptedD +B +@#/definitions/io.k8s.api.authorization.v1.SelfSubjectRulesReviewRhttpsj +x-kubernetes-actionpost +jj +x-kubernetes-group-version-kindGEgroup: authorization.k8s.io +kind: SelfSubjectRulesReview +version: v1 +Jž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string J– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string JO +MKIquery-If 'true', then the output is pretty printed."pretty2string ` +I/apis/autoscaling/v2beta2/namespaces/{namespace}/horizontalpodautoscalersÏ_ä& +autoscaling_v2beta25list or watch objects of kind HorizontalPodAutoscaler*7listAutoscalingV2beta2NamespacedHorizontalPodAutoscaler2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*B‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Bï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string B‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string B‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Bú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer Bû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string BÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Bž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer B± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean Jv +[ +200T +R +OKL +J +H#/definitions/io.k8s.api.autoscaling.v2beta2.HorizontalPodAutoscalerList + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionlist +jg +x-kubernetes-group-version-kindDBgroup: autoscaling +kind: HorizontalPodAutoscaler +version: v2beta2 +"˜ + +autoscaling_v2beta2 create a HorizontalPodAutoscaler*9createAutoscalingV2beta2NamespacedHorizontalPodAutoscaler2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BZ +X +Vbodybody *F +D#/definitions/io.k8s.api.autoscaling.v2beta2.HorizontalPodAutoscalerBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string J¯ + +401 + + Unauthorized +W +200P +N +OKH +F +D#/definitions/io.k8s.api.autoscaling.v2beta2.HorizontalPodAutoscaler +\ +201U +S +CreatedH +F +D#/definitions/io.k8s.api.autoscaling.v2beta2.HorizontalPodAutoscaler +] +202V +T +AcceptedH +F +D#/definitions/io.k8s.api.autoscaling.v2beta2.HorizontalPodAutoscalerRhttpsjg +x-kubernetes-group-version-kindDBversion: v2beta2 +group: autoscaling +kind: HorizontalPodAutoscaler +j +x-kubernetes-actionpost +*—- +autoscaling_v2beta2,delete collection of HorizontalPodAutoscaler*CdeleteAutoscalingV2beta2CollectionNamespacedHorizontalPodAutoscaler2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string Bž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer B‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Bú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string Bû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string BÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Bž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer Jg +L +200E +C +OK= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status + +401 + + UnauthorizedRhttpsjg +x-kubernetes-group-version-kindDBkind: HorizontalPodAutoscaler +version: v2beta2 +group: autoscaling +j* +x-kubernetes-actiondeletecollection +J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string À) +;/apis/batch/v1/watch/namespaces/{namespace}/cronjobs/{name}€)Ü +batch_v1®watch changes to an object of kind CronJob. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.*watchBatchV1NamespacedCronJob2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionwatch +jL +x-kubernetes-group-version-kind)'group: batch +kind: CronJob +version: v1 +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer J4 +20".pathname of the CronJob"name*string˜J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean ·) +R/apis/rbac.authorization.k8s.io/v1alpha1/watch/namespaces/{namespace}/rolebindingsà(ò +rbacAuthorization_v1alpha1wwatch individual changes to a list of RoleBinding. deprecated: use the 'watch' parameter with a list operation instead.*7watchRbacAuthorizationV1alpha1NamespacedRoleBindingList2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsjj +x-kubernetes-group-version-kindGEgroup: rbac.authorization.k8s.io +kind: RoleBinding +version: v1alpha1 +j# +x-kubernetes-action  +watchlist +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean …* +Q/apis/rbac.authorization.k8s.io/v1beta1/watch/namespaces/{namespace}/roles/{name}¯)Ž +rbacAuthorization_v1beta1«watch changes to an object of kind Role. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.*+watchRbacAuthorizationV1beta1NamespacedRole2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsjb +x-kubernetes-group-version-kind?=group: rbac.authorization.k8s.io +kind: Role +version: v1beta1 +j +x-kubernetes-actionwatch +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer J1 +/-"+pathname of the Role"name*string˜J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean ¾) +6/api/v1/watch/namespaces/{namespace}/configmaps/{name}ƒ)Ý +core_v1°watch changes to an object of kind ConfigMap. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.*watchCoreV1NamespacedConfigMap2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsjK +x-kubernetes-group-version-kind(&group: "" +kind: ConfigMap +version: v1 +j +x-kubernetes-actionwatch +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer J6 +42"0pathname of the ConfigMap"name*string˜J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean ô) +P/apis/admissionregistration.k8s.io/v1/watch/mutatingwebhookconfigurations/{name}Ÿ)È +admissionregistration_v1Ãwatch changes to an object of kind MutatingWebhookConfiguration. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.*8watchAdmissionregistrationV1MutatingWebhookConfiguration2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsjx +x-kubernetes-group-version-kindUSgroup: admissionregistration.k8s.io +kind: MutatingWebhookConfiguration +version: v1 +j +x-kubernetes-actionwatch +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer JI +GE"Cpath(name of the MutatingWebhookConfiguration"name*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean ¨) +J/apis/autoscaling/v1/watch/namespaces/{namespace}/horizontalpodautoscalersÙ(ë +autoscaling_v1ƒwatch individual changes to a list of HorizontalPodAutoscaler. deprecated: use the 'watch' parameter with a list operation instead.*7watchAutoscalingV1NamespacedHorizontalPodAutoscalerList2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk + +401 + + Unauthorized +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEventRhttpsj# +x-kubernetes-action  +watchlist +jb +x-kubernetes-group-version-kind?=group: autoscaling +kind: HorizontalPodAutoscaler +version: v1 +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean ´' +*/apis/networking.k8s.io/v1/networkpolicies…'ù + networking_v1+list or watch objects of kind NetworkPolicy*-listNetworkingV1NetworkPolicyForAllNamespaces2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jf +K +200D +B +OK< +: +8#/definitions/io.k8s.api.networking.v1.NetworkPolicyList + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionlist +j^ +x-kubernetes-group-version-kind;9group: networking.k8s.io +kind: NetworkPolicy +version: v1 +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean ‰ +;/api/v1/namespaces/{namespace}/resourcequotas/{name}/statusÉ +core_v1*read status of the specified ResourceQuota*'readCoreV1NamespacedResourceQuotaStatus2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*J\ +A +200: +8 +OK2 +0 +.#/definitions/io.k8s.api.core.v1.ResourceQuota + +401 + + UnauthorizedRhttpsjO +x-kubernetes-group-version-kind,*group: "" +kind: ResourceQuota +version: v1 +j +x-kubernetes-actionget +Ð +core_v1-replace status of the specified ResourceQuota**replaceCoreV1NamespacedResourceQuotaStatus2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BD +B +@bodybody *0 +.#/definitions/io.k8s.api.core.v1.ResourceQuotaBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string J¤ +A +200: +8 +OK2 +0 +.#/definitions/io.k8s.api.core.v1.ResourceQuota +F +201? += +Created2 +0 +.#/definitions/io.k8s.api.core.v1.ResourceQuota + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionput +jO +x-kubernetes-group-version-kind,*group: "" +kind: ResourceQuota +version: v1 +B€ +core_v16partially update status of the specified ResourceQuota*(patchCoreV1NamespacedResourceQuotaStatus2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json-patch+json:application/merge-patch+json:&application/strategic-merge-patch+json:application/apply-patch+yamlBN +L +Jbodybody *: +8#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.PatchBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B¯ +¬©¦queryƒfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch)." fieldManager2string BÎ +ËÈÅquery¨Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests."force2boolean J\ +A +200: +8 +OK2 +0 +.#/definitions/io.k8s.api.core.v1.ResourceQuota + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionpatch +jO +x-kubernetes-group-version-kind,*group: "" +kind: ResourceQuota +version: v1 +J: +86"4pathname of the ResourceQuota"name*string˜J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string æ( + /api/v1/persistentvolumes/{name}Á(ó +core_v1#read the specified PersistentVolume*readCoreV1PersistentVolume2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*J_ +D +200= +; +OK5 +3 +1#/definitions/io.k8s.api.core.v1.PersistentVolume + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionget +jR +x-kubernetes-group-version-kind/-group: "" +kind: PersistentVolume +version: v1 +È +core_v1&replace the specified PersistentVolume*replaceCoreV1PersistentVolume2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BG +E +Cbodybody *3 +1#/definitions/io.k8s.api.core.v1.PersistentVolumeBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string Jª +D +200= +; +OK5 +3 +1#/definitions/io.k8s.api.core.v1.PersistentVolume +I +201B +@ +Created5 +3 +1#/definitions/io.k8s.api.core.v1.PersistentVolume + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionput +jR +x-kubernetes-group-version-kind/-group: "" +kind: PersistentVolume +version: v1 +*ø +core_v1delete a PersistentVolume*deleteCoreV1PersistentVolume2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string J« +D +200= +; +OK5 +3 +1#/definitions/io.k8s.api.core.v1.PersistentVolume +J +202C +A +Accepted5 +3 +1#/definitions/io.k8s.api.core.v1.PersistentVolume + +401 + + UnauthorizedRhttpsj +x-kubernetes-action delete +jR +x-kubernetes-group-version-kind/-group: "" +kind: PersistentVolume +version: v1 +Bò +core_v1/partially update the specified PersistentVolume*patchCoreV1PersistentVolume2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json-patch+json:application/merge-patch+json:&application/strategic-merge-patch+json:application/apply-patch+yamlBN +L +Jbodybody *: +8#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.PatchBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B¯ +¬©¦queryƒfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch)." fieldManager2string BÎ +ËÈÅquery¨Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests."force2boolean J_ +D +200= +; +OK5 +3 +1#/definitions/io.k8s.api.core.v1.PersistentVolume + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionpatch +jR +x-kubernetes-group-version-kind/-group: "" +kind: PersistentVolume +version: v1 +J= +;9"7pathname of the PersistentVolume"name*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string ¯ +J/apis/apiextensions.k8s.io/v1beta1/customresourcedefinitions/{name}/statusà‚ +apiextensions_v1beta15read status of the specified CustomResourceDefinition*6readApiextensionsV1beta1CustomResourceDefinitionStatus2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*J’ +w +200p +n +OKh +f +d#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1beta1.CustomResourceDefinition + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionget +jq +x-kubernetes-group-version-kindNLversion: v1beta1 +group: apiextensions.k8s.io +kind: CustomResourceDefinition +¼ + +apiextensions_v1beta18replace status of the specified CustomResourceDefinition*9replaceApiextensionsV1beta1CustomResourceDefinitionStatus2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*Bz +x +vbodybody *f +d#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1beta1.CustomResourceDefinitionBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string J + +401 + + Unauthorized +w +200p +n +OKh +f +d#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1beta1.CustomResourceDefinition +| +201u +s +Createdh +f +d#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1beta1.CustomResourceDefinitionRhttpsj +x-kubernetes-actionput +jq +x-kubernetes-group-version-kindNLgroup: apiextensions.k8s.io +kind: CustomResourceDefinition +version: v1beta1 +B +apiextensions_v1beta1Apartially update status of the specified CustomResourceDefinition*7patchApiextensionsV1beta1CustomResourceDefinitionStatus2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json-patch+json:application/merge-patch+json:&application/strategic-merge-patch+json:application/apply-patch+yamlBN +L +Jbodybody *: +8#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.PatchBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B¯ +¬©¦queryƒfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch)." fieldManager2string BÎ +ËÈÅquery¨Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests."force2boolean J’ +w +200p +n +OKh +f +d#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1beta1.CustomResourceDefinition + +401 + + UnauthorizedRhttpsjq +x-kubernetes-group-version-kindNLgroup: apiextensions.k8s.io +kind: CustomResourceDefinition +version: v1beta1 +j +x-kubernetes-actionpatch +JE +CA"?path$name of the CustomResourceDefinition"name*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Ç* +7/apis/scheduling.k8s.io/v1alpha1/priorityclasses/{name}‹*  +scheduling_v1alpha1 read the specified PriorityClass*#readSchedulingV1alpha1PriorityClass2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*Jh +M +200F +D +OK> +< +:#/definitions/io.k8s.api.scheduling.v1alpha1.PriorityClass + +401 + + UnauthorizedRhttpsjd +x-kubernetes-group-version-kindA?kind: PriorityClass +version: v1alpha1 +group: scheduling.k8s.io +j +x-kubernetes-actionget +‡ +scheduling_v1alpha1#replace the specified PriorityClass*&replaceSchedulingV1alpha1PriorityClass2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BP +N +Lbodybody *< +:#/definitions/io.k8s.api.scheduling.v1alpha1.PriorityClassBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string J¼ +M +200F +D +OK> +< +:#/definitions/io.k8s.api.scheduling.v1alpha1.PriorityClass +R +201K +I +Created> +< +:#/definitions/io.k8s.api.scheduling.v1alpha1.PriorityClass + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionput +jd +x-kubernetes-group-version-kindA?group: scheduling.k8s.io +kind: PriorityClass +version: v1alpha1 +*¬ +scheduling_v1alpha1delete a PriorityClass*%deleteSchedulingV1alpha1PriorityClass2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string J» +R +202K +I +Accepted= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status + +401 + + Unauthorized +L +200E +C +OK= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.StatusRhttpsjd +x-kubernetes-group-version-kindA?group: scheduling.k8s.io +kind: PriorityClass +version: v1alpha1 +j +x-kubernetes-action delete +BŸ +scheduling_v1alpha1,partially update the specified PriorityClass*$patchSchedulingV1alpha1PriorityClass2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json-patch+json:application/merge-patch+json:&application/strategic-merge-patch+json:application/apply-patch+yamlBN +L +Jbodybody *: +8#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.PatchBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B¯ +¬©¦queryƒfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch)." fieldManager2string BÎ +ËÈÅquery¨Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests."force2boolean Jh +M +200F +D +OK> +< +:#/definitions/io.k8s.api.scheduling.v1alpha1.PriorityClass + +401 + + UnauthorizedRhttpsjd +x-kubernetes-group-version-kindA?group: scheduling.k8s.io +kind: PriorityClass +version: v1alpha1 +j +x-kubernetes-actionpatch +J: +86"4pathname of the PriorityClass"name*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string  +J/apis/certificates.k8s.io/v1beta1/certificatesigningrequests/{name}/statusÎä +certificates_v1beta16read status of the specified CertificateSigningRequest*6readCertificatesV1beta1CertificateSigningRequestStatus2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*Ju +Z +200S +Q +OKK +I +G#/definitions/io.k8s.api.certificates.v1beta1.CertificateSigningRequest + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionget +jq +x-kubernetes-group-version-kindNLgroup: certificates.k8s.io +kind: CertificateSigningRequest +version: v1beta1 +å +certificates_v1beta19replace status of the specified CertificateSigningRequest*9replaceCertificatesV1beta1CertificateSigningRequestStatus2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*B] +[ +Ybodybody *I +G#/definitions/io.k8s.api.certificates.v1beta1.CertificateSigningRequestBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string JÖ +Z +200S +Q +OKK +I +G#/definitions/io.k8s.api.certificates.v1beta1.CertificateSigningRequest +_ +201X +V +CreatedK +I +G#/definitions/io.k8s.api.certificates.v1beta1.CertificateSigningRequest + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionput +jq +x-kubernetes-group-version-kindNLgroup: certificates.k8s.io +kind: CertificateSigningRequest +version: v1beta1 +Bã +certificates_v1beta1Bpartially update status of the specified CertificateSigningRequest*7patchCertificatesV1beta1CertificateSigningRequestStatus2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json-patch+json:application/merge-patch+json:&application/strategic-merge-patch+json:application/apply-patch+yamlBN +L +Jbodybody *: +8#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.PatchBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B¯ +¬©¦queryƒfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch)." fieldManager2string BÎ +ËÈÅquery¨Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests."force2boolean Ju +Z +200S +Q +OKK +I +G#/definitions/io.k8s.api.certificates.v1beta1.CertificateSigningRequest + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionpatch +jq +x-kubernetes-group-version-kindNLkind: CertificateSigningRequest +version: v1beta1 +group: certificates.k8s.io +JF +DB"@path%name of the CertificateSigningRequest"name*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string * +Q/apis/discovery.k8s.io/v1beta1/watch/namespaces/{namespace}/endpointslices/{name}º) +discovery_v1beta1´watch changes to an object of kind EndpointSlice. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.*,watchDiscoveryV1beta1NamespacedEndpointSlice2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk + +401 + + Unauthorized +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEventRhttpsj +x-kubernetes-actionwatch +jb +x-kubernetes-group-version-kind?=group: discovery.k8s.io +kind: EndpointSlice +version: v1beta1 +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer J: +86"4pathname of the EndpointSlice"name*string˜J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean Ð* +;/apis/rbac.authorization.k8s.io/v1beta1/clusterroles/{name}*¤ +rbacAuthorization_v1beta1read the specified ClusterRole*'readRbacAuthorizationV1beta1ClusterRole2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*J_ +D +200= +; +OK5 +3 +1#/definitions/io.k8s.api.rbac.v1beta1.ClusterRole + +401 + + UnauthorizedRhttpsji +x-kubernetes-group-version-kindFDgroup: rbac.authorization.k8s.io +kind: ClusterRole +version: v1beta1 +j +x-kubernetes-actionget +ù +rbacAuthorization_v1beta1!replace the specified ClusterRole**replaceRbacAuthorizationV1beta1ClusterRole2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BG +E +Cbodybody *3 +1#/definitions/io.k8s.api.rbac.v1beta1.ClusterRoleBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string Jª +D +200= +; +OK5 +3 +1#/definitions/io.k8s.api.rbac.v1beta1.ClusterRole +I +201B +@ +Created5 +3 +1#/definitions/io.k8s.api.rbac.v1beta1.ClusterRole + +401 + + UnauthorizedRhttpsji +x-kubernetes-group-version-kindFDkind: ClusterRole +version: v1beta1 +group: rbac.authorization.k8s.io +j +x-kubernetes-actionput +*¹ +rbacAuthorization_v1beta1delete a ClusterRole*)deleteRbacAuthorizationV1beta1ClusterRole2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string J» +L +200E +C +OK= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status +R +202K +I +Accepted= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status + +401 + + UnauthorizedRhttpsj +x-kubernetes-action delete +ji +x-kubernetes-group-version-kindFDgroup: rbac.authorization.k8s.io +kind: ClusterRole +version: v1beta1 +B£ +rbacAuthorization_v1beta1*partially update the specified ClusterRole*(patchRbacAuthorizationV1beta1ClusterRole2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json-patch+json:application/merge-patch+json:&application/strategic-merge-patch+json:application/apply-patch+yamlBN +L +Jbodybody *: +8#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.PatchBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B¯ +¬©¦queryƒfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch)." fieldManager2string BÎ +ËÈÅquery¨Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests."force2boolean J_ +D +200= +; +OK5 +3 +1#/definitions/io.k8s.api.rbac.v1beta1.ClusterRole + +401 + + UnauthorizedRhttpsji +x-kubernetes-group-version-kindFDgroup: rbac.authorization.k8s.io +kind: ClusterRole +version: v1beta1 +j +x-kubernetes-actionpatch +J8 +64"2pathname of the ClusterRole"name*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string ¯' +)/apis/networking.k8s.io/v1beta1/ingresses'õ +networking_v1beta1%list or watch objects of kind Ingress*,listNetworkingV1beta1IngressForAllNamespaces2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Je +J +200C +A +OK; +9 +7#/definitions/io.k8s.api.networking.v1beta1.IngressList + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionlist +j] +x-kubernetes-group-version-kind:8version: v1beta1 +group: networking.k8s.io +kind: Ingress +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean †) +F/apis/networking.k8s.io/v1beta1/watch/namespaces/{namespace}/ingresses»(Í +networking_v1beta1swatch individual changes to a list of Ingress. deprecated: use the 'watch' parameter with a list operation instead.*+watchNetworkingV1beta1NamespacedIngressList2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk + +401 + + Unauthorized +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEventRhttpsj# +x-kubernetes-action  +watchlist +j] +x-kubernetes-group-version-kind:8group: networking.k8s.io +kind: Ingress +version: v1beta1 +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean Ò_ +D/apis/autoscaling/v1/namespaces/{namespace}/horizontalpodautoscalers‰_Ð& +autoscaling_v15list or watch objects of kind HorizontalPodAutoscaler*2listAutoscalingV1NamespacedHorizontalPodAutoscaler2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*B‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Bï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string B‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string B‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Bú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer Bû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string BÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Bž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer B± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean Jq +V +200O +M +OKG +E +C#/definitions/io.k8s.api.autoscaling.v1.HorizontalPodAutoscalerList + +401 + + UnauthorizedRhttpsjb +x-kubernetes-group-version-kind?=group: autoscaling +kind: HorizontalPodAutoscaler +version: v1 +j +x-kubernetes-actionlist +"õ +autoscaling_v1 create a HorizontalPodAutoscaler*4createAutoscalingV1NamespacedHorizontalPodAutoscaler2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BU +S +Qbodybody *A +?#/definitions/io.k8s.api.autoscaling.v1.HorizontalPodAutoscalerBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string J  +R +200K +I +OKC +A +?#/definitions/io.k8s.api.autoscaling.v1.HorizontalPodAutoscaler +W +201P +N +CreatedC +A +?#/definitions/io.k8s.api.autoscaling.v1.HorizontalPodAutoscaler +X +202Q +O +AcceptedC +A +?#/definitions/io.k8s.api.autoscaling.v1.HorizontalPodAutoscaler + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionpost +jb +x-kubernetes-group-version-kind?=kind: HorizontalPodAutoscaler +version: v1 +group: autoscaling +*ˆ- +autoscaling_v1,delete collection of HorizontalPodAutoscaler*>deleteAutoscalingV1CollectionNamespacedHorizontalPodAutoscaler2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string Bž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer B‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Bú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string Bû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string BÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Bž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer Jg +L +200E +C +OK= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status + +401 + + UnauthorizedRhttpsj* +x-kubernetes-actiondeletecollection +jb +x-kubernetes-group-version-kind?=group: autoscaling +kind: HorizontalPodAutoscaler +version: v1 +J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string ï] +:/apis/coordination.k8s.io/v1/namespaces/{namespace}/leases°]“& +coordination_v1#list or watch objects of kind Lease*!listCoordinationV1NamespacedLease2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*B‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Bï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string B‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string B‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Bú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer Bû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string BÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Bž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer B± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean J` +E +200> +< +OK6 +4 +2#/definitions/io.k8s.api.coordination.v1.LeaseList + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionlist +jX +x-kubernetes-group-version-kind53group: coordination.k8s.io +kind: Lease +version: v1 +"… +coordination_v1create a Lease*#createCoordinationV1NamespacedLease2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BD +B +@bodybody *0 +.#/definitions/io.k8s.api.coordination.v1.LeaseBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string Jí +A +200: +8 +OK2 +0 +.#/definitions/io.k8s.api.coordination.v1.Lease +F +201? += +Created2 +0 +.#/definitions/io.k8s.api.coordination.v1.Lease +G +202@ +> +Accepted2 +0 +.#/definitions/io.k8s.api.coordination.v1.Lease + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionpost +jX +x-kubernetes-group-version-kind53version: v1 +group: coordination.k8s.io +kind: Lease +*Ü, +coordination_v1delete collection of Lease*-deleteCoordinationV1CollectionNamespacedLease2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string Bž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer B‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Bú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string Bû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string BÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Bž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer Jg +L +200E +C +OK= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status + +401 + + UnauthorizedRhttpsj* +x-kubernetes-actiondeletecollection +jX +x-kubernetes-group-version-kind53version: v1 +group: coordination.k8s.io +kind: Lease +J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string ú' +(/apis/events.k8s.io/v1beta1/watch/eventsÍ'Á +events_v1beta1qwatch individual changes to a list of Event. deprecated: use the 'watch' parameter with a list operation instead.*+watchEventsV1beta1EventListForAllNamespaces2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsj# +x-kubernetes-action  +watchlist +jW +x-kubernetes-group-version-kind42group: events.k8s.io +kind: Event +version: v1beta1 +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean €) +6/apis/storage.k8s.io/v1/watch/volumeattachments/{name}Å(ú + +storage_v1·watch changes to an object of kind VolumeAttachment. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.*watchStorageV1VolumeAttachment2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsj^ +x-kubernetes-group-version-kind;9group: storage.k8s.io +kind: VolumeAttachment +version: v1 +j +x-kubernetes-actionwatch +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer J= +;9"7pathname of the VolumeAttachment"name*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean þ' +-/apis/storage.k8s.io/v1beta1/watch/csidriversÌ'À +storage_v1beta1uwatch individual changes to a list of CSIDriver. deprecated: use the 'watch' parameter with a list operation instead.* watchStorageV1beta1CSIDriverList2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsj# +x-kubernetes-action  +watchlist +j\ +x-kubernetes-group-version-kind97version: v1beta1 +group: storage.k8s.io +kind: CSIDriver +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean è' + /apis/apps/v1/watch/statefulsetsÃ'· +apps_v1wwatch individual changes to a list of StatefulSet. deprecated: use the 'watch' parameter with a list operation instead.**watchAppsV1StatefulSetListForAllNamespaces2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsj# +x-kubernetes-action  +watchlist +jO +x-kubernetes-group-version-kind,*kind: StatefulSet +version: v1 +group: apps +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean ˜ +(/apis/rbac.authorization.k8s.io/v1beta1/ëè +rbacAuthorization_v1beta1get available resources*'getRbacAuthorizationV1beta1APIResources2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json:application/yaml:#application/vnd.kubernetes.protobufJp +U +200N +L +OKF +D +B#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.APIResourceList + +401 + + UnauthorizedRhttps¥) +A/apis/rbac.authorization.k8s.io/v1beta1/watch/clusterroles/{name}ß(™ +rbacAuthorization_v1beta1²watch changes to an object of kind ClusterRole. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.*(watchRbacAuthorizationV1beta1ClusterRole2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsji +x-kubernetes-group-version-kindFDgroup: rbac.authorization.k8s.io +kind: ClusterRole +version: v1beta1 +j +x-kubernetes-actionwatch +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer J8 +64"2pathname of the ClusterRole"name*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean ´ +4/api/v1/namespaces/{namespace}/services/{name}/proxyûŸ +core_v1(connect GET requests to proxy of Service*&connectCoreV1GetNamespacedServiceProxy2*/*:*/*J7 + +200 + +OK + ² +string + +401 + + UnauthorizedRhttpsj! +x-kubernetes-action +connect +jU +x-kubernetes-group-version-kind20group: "" +kind: ServiceProxyOptions +version: v1 +Ÿ +core_v1(connect PUT requests to proxy of Service*&connectCoreV1PutNamespacedServiceProxy2*/*:*/*J7 + +200 + +OK + ² +string + +401 + + UnauthorizedRhttpsjU +x-kubernetes-group-version-kind20group: "" +kind: ServiceProxyOptions +version: v1 +j! +x-kubernetes-action +connect +"¡ +core_v1)connect POST requests to proxy of Service*'connectCoreV1PostNamespacedServiceProxy2*/*:*/*J7 + +200 + +OK + ² +string + +401 + + UnauthorizedRhttpsj! +x-kubernetes-action +connect +jU +x-kubernetes-group-version-kind20kind: ServiceProxyOptions +version: v1 +group: "" +*¥ +core_v1+connect DELETE requests to proxy of Service*)connectCoreV1DeleteNamespacedServiceProxy2*/*:*/*J7 + +200 + +OK + ² +string + +401 + + UnauthorizedRhttpsj! +x-kubernetes-action +connect +jU +x-kubernetes-group-version-kind20group: "" +kind: ServiceProxyOptions +version: v1 +2§ +core_v1,connect OPTIONS requests to proxy of Service**connectCoreV1OptionsNamespacedServiceProxy2*/*:*/*J7 + +200 + +OK + ² +string + +401 + + UnauthorizedRhttpsj! +x-kubernetes-action +connect +jU +x-kubernetes-group-version-kind20group: "" +kind: ServiceProxyOptions +version: v1 +:¡ +core_v1)connect HEAD requests to proxy of Service*'connectCoreV1HeadNamespacedServiceProxy2*/*:*/*J7 + +200 + +OK + ² +string + +401 + + UnauthorizedRhttpsj! +x-kubernetes-action +connect +jU +x-kubernetes-group-version-kind20group: "" +kind: ServiceProxyOptions +version: v1 +B£ +core_v1*connect PATCH requests to proxy of Service*(connectCoreV1PatchNamespacedServiceProxy2*/*:*/*J7 + +200 + +OK + ² +string + +401 + + UnauthorizedRhttpsjU +x-kubernetes-group-version-kind20group: "" +kind: ServiceProxyOptions +version: v1 +j! +x-kubernetes-action +connect +J@ +><":pathname of the ServiceProxyOptions"name*string˜J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JÐ +ÍÊÇquery¬Path is the part of URLs that include service endpoints, suffixes, and parameters to use for the current proxy request to service. For example, the whole request URL is http://localhost/api/v1/namespaces/kube-system/services/elasticsearch-logging/_search?q=user:kimchy. Path is _search?q=user:kimchy."path2string Ì\ +*/apis/batch/v1/namespaces/{namespace}/jobs\è% +batch_v1!list or watch objects of kind Job*listBatchV1NamespacedJob2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*B‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Bï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string B‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string B‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Bú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer Bû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string BÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Bž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer B± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean JW +< +2005 +3 +OK- ++ +)#/definitions/io.k8s.api.batch.v1.JobList + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionlist +jH +x-kubernetes-group-version-kind%#group: batch +kind: Job +version: v1 +"¿ +batch_v1 create a Job*createBatchV1NamespacedJob2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*B; +9 +7bodybody *' +%#/definitions/io.k8s.api.batch.v1.JobBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string JÒ +8 +2001 +/ +OK) +' +%#/definitions/io.k8s.api.batch.v1.Job += +2016 +4 +Created) +' +%#/definitions/io.k8s.api.batch.v1.Job +> +2027 +5 +Accepted) +' +%#/definitions/io.k8s.api.batch.v1.Job + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionpost +jH +x-kubernetes-group-version-kind%#group: batch +kind: Job +version: v1 +*º, +batch_v1delete collection of Job*$deleteBatchV1CollectionNamespacedJob2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string Bž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer B‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Bú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string Bû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string BÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Bž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer Jg +L +200E +C +OK= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status + +401 + + UnauthorizedRhttpsjH +x-kubernetes-group-version-kind%#group: batch +kind: Job +version: v1 +j* +x-kubernetes-actiondeletecollection +J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string æ' +#/apis/events.k8s.io/v1/watch/events¾'² + events_v1qwatch individual changes to a list of Event. deprecated: use the 'watch' parameter with a list operation instead.*&watchEventsV1EventListForAllNamespaces2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsjR +x-kubernetes-group-version-kind/-group: events.k8s.io +kind: Event +version: v1 +j# +x-kubernetes-action  +watchlist +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean ü +/apis/authorization.k8s.io/v1/ÙÖ +authorization_v1get available resources*getAuthorizationV1APIResources2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json:application/yaml:#application/vnd.kubernetes.protobufJp +U +200N +L +OKF +D +B#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.APIResourceList + +401 + + UnauthorizedRhttpsß +/apis/autoscaling/ÈÅ + autoscalingget information of a group*getAutoscalingAPIGroup2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json:application/yaml:#application/vnd.kubernetes.protobufJi +N +200G +E +OK? += +;#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.APIGroup + +401 + + UnauthorizedRhttpsõ( +5/apis/node.k8s.io/v1beta1/watch/runtimeclasses/{name}»(ô + node_v1beta1³watch changes to an object of kind RuntimeClass. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.*watchNodeV1beta1RuntimeClass2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionwatch +j\ +x-kubernetes-group-version-kind97group: node.k8s.io +kind: RuntimeClass +version: v1beta1 +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer J9 +75"3pathname of the RuntimeClass"name*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean ÿ +/apis/authentication.k8s.io/v1/ÛØ +authentication_v1get available resources*getAuthenticationV1APIResources2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json:application/yaml:#application/vnd.kubernetes.protobufJp +U +200N +L +OKF +D +B#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.APIResourceList + +401 + + UnauthorizedRhttpsœ( +5/apis/rbac.authorization.k8s.io/v1/watch/clusterrolesâ'Ö +rbacAuthorization_v1wwatch individual changes to a list of ClusterRole. deprecated: use the 'watch' parameter with a list operation instead.*'watchRbacAuthorizationV1ClusterRoleList2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsj# +x-kubernetes-action  +watchlist +jd +x-kubernetes-group-version-kindA?group: rbac.authorization.k8s.io +kind: ClusterRole +version: v1 +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean › +)/apis/rbac.authorization.k8s.io/v1alpha1/íê +rbacAuthorization_v1alpha1get available resources*(getRbacAuthorizationV1alpha1APIResources2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json:application/yaml:#application/vnd.kubernetes.protobufJp +U +200N +L +OKF +D +B#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.APIResourceList + +401 + + UnauthorizedRhttpsñ' +/api/v1/namespaces/{name}Ó'× +core_v1read the specified Namespace*readCoreV1Namespace2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*JX += +2006 +4 +OK. +, +*#/definitions/io.k8s.api.core.v1.Namespace + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionget +jK +x-kubernetes-group-version-kind(&group: "" +kind: Namespace +version: v1 +ž +core_v1replace the specified Namespace*replaceCoreV1Namespace2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*B@ +> +<bodybody *, +*#/definitions/io.k8s.api.core.v1.NamespaceBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string Jœ +B +201; +9 +Created. +, +*#/definitions/io.k8s.api.core.v1.Namespace + +401 + + Unauthorized += +2006 +4 +OK. +, +*#/definitions/io.k8s.api.core.v1.NamespaceRhttpsj +x-kubernetes-actionput +jK +x-kubernetes-group-version-kind(&version: v1 +group: "" +kind: Namespace +*ó +core_v1delete a Namespace*deleteCoreV1Namespace2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string J» + +401 + + Unauthorized +L +200E +C +OK= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status +R +202K +I +Accepted= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.StatusRhttpsj +x-kubernetes-action delete +jK +x-kubernetes-group-version-kind(&version: v1 +group: "" +kind: Namespace +BÖ +core_v1(partially update the specified Namespace*patchCoreV1Namespace2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json-patch+json:application/merge-patch+json:&application/strategic-merge-patch+json:application/apply-patch+yamlBN +L +Jbodybody *: +8#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.PatchBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B¯ +¬©¦queryƒfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch)." fieldManager2string BÎ +ËÈÅquery¨Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests."force2boolean JX += +2006 +4 +OK. +, +*#/definitions/io.k8s.api.core.v1.Namespace + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionpatch +jK +x-kubernetes-group-version-kind(&version: v1 +group: "" +kind: Namespace +J6 +42"0pathname of the Namespace"name*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string ’* +W/apis/admissionregistration.k8s.io/v1beta1/watch/validatingwebhookconfigurations/{name}¶)Ý +admissionregistration_v1beta1Åwatch changes to an object of kind ValidatingWebhookConfiguration. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.*?watchAdmissionregistrationV1beta1ValidatingWebhookConfiguration2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionwatch +j +x-kubernetes-group-version-kind\Zkind: ValidatingWebhookConfiguration +version: v1beta1 +group: admissionregistration.k8s.io +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer JK +IG"Epath*name of the ValidatingWebhookConfiguration"name*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean Ž( +1/apis/apiregistration.k8s.io/v1/watch/apiservicesØ'Ì +apiregistration_v1vwatch individual changes to a list of APIService. deprecated: use the 'watch' parameter with a list operation instead.*$watchApiregistrationV1APIServiceList2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsj# +x-kubernetes-action  +watchlist +j` +x-kubernetes-group-version-kind=;group: apiregistration.k8s.io +version: v1 +kind: APIService +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean ™. +O/apis/admissionregistration.k8s.io/v1beta1/mutatingwebhookconfigurations/{name}Å-… +admissionregistration_v1beta1/read the specified MutatingWebhookConfiguration*deleteAdmissionregistrationV1beta1MutatingWebhookConfiguration2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string J» +R +202K +I +Accepted= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status + +401 + + Unauthorized +L +200E +C +OK= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.StatusRhttpsj +x-kubernetes-action delete +j} +x-kubernetes-group-version-kindZXkind: MutatingWebhookConfiguration +version: v1beta1 +group: admissionregistration.k8s.io +B„ +admissionregistration_v1beta1;partially update the specified MutatingWebhookConfiguration*=patchAdmissionregistrationV1beta1MutatingWebhookConfiguration2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json-patch+json:application/merge-patch+json:&application/strategic-merge-patch+json:application/apply-patch+yamlBN +L +Jbodybody *: +8#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.PatchBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B¯ +¬©¦queryƒfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch)." fieldManager2string BÎ +ËÈÅquery¨Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests."force2boolean J +f +200_ +] +OKW +U +S#/definitions/io.k8s.api.admissionregistration.v1beta1.MutatingWebhookConfiguration + +401 + + UnauthorizedRhttpsj} +x-kubernetes-group-version-kindZXgroup: admissionregistration.k8s.io +kind: MutatingWebhookConfiguration +version: v1beta1 +j +x-kubernetes-actionpatch +JI +GE"Cpath(name of the MutatingWebhookConfiguration"name*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string ‚ +#/apis/flowcontrol.apiserver.k8s.io/Ú× +flowcontrolApiserverget information of a group*getFlowcontrolApiserverAPIGroup2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json:application/yaml:#application/vnd.kubernetes.protobufJi +N +200G +E +OK? += +;#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.APIGroup + +401 + + UnauthorizedRhttps· + ++/apis/authentication.k8s.io/v1/tokenreviews‡ +"ù +authentication_v1create a TokenReview*!createAuthenticationV1TokenReview2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BL +J +Hbodybody *8 +6#/definitions/io.k8s.api.authentication.v1.TokenReviewJ… +I +200B +@ +OK: +8 +6#/definitions/io.k8s.api.authentication.v1.TokenReview +N +201G +E +Created: +8 +6#/definitions/io.k8s.api.authentication.v1.TokenReview +O +202H +F +Accepted: +8 +6#/definitions/io.k8s.api.authentication.v1.TokenReview + +401 + + UnauthorizedRhttpsj` +x-kubernetes-group-version-kind=;group: authentication.k8s.io +kind: TokenReview +version: v1 +j +x-kubernetes-actionpost +Jž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string J– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string JO +MKIquery-If 'true', then the output is pretty printed."pretty2string ê* +F/apis/discovery.k8s.io/v1/namespaces/{namespace}/endpointslices/{name}Ÿ*Ž + discovery_v1 read the specified EndpointSlice*&readDiscoveryV1NamespacedEndpointSlice2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*Ja + +401 + + Unauthorized +F +200? += +OK7 +5 +3#/definitions/io.k8s.api.discovery.v1.EndpointSliceRhttpsj +x-kubernetes-actionget +j] +x-kubernetes-group-version-kind:8group: discovery.k8s.io +kind: EndpointSlice +version: v1 +ç + discovery_v1#replace the specified EndpointSlice*)replaceDiscoveryV1NamespacedEndpointSlice2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BI +G +Ebodybody *5 +3#/definitions/io.k8s.api.discovery.v1.EndpointSliceBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string J® + +401 + + Unauthorized +F +200? += +OK7 +5 +3#/definitions/io.k8s.api.discovery.v1.EndpointSlice +K +201D +B +Created7 +5 +3#/definitions/io.k8s.api.discovery.v1.EndpointSliceRhttpsj +x-kubernetes-actionput +j] +x-kubernetes-group-version-kind:8group: discovery.k8s.io +kind: EndpointSlice +version: v1 +*¢ + discovery_v1delete an EndpointSlice*(deleteDiscoveryV1NamespacedEndpointSlice2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string J» +L +200E +C +OK= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status +R +202K +I +Accepted= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status + +401 + + UnauthorizedRhttpsj] +x-kubernetes-group-version-kind:8kind: EndpointSlice +version: v1 +group: discovery.k8s.io +j +x-kubernetes-action delete +B + discovery_v1,partially update the specified EndpointSlice*'patchDiscoveryV1NamespacedEndpointSlice2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json-patch+json:application/merge-patch+json:&application/strategic-merge-patch+json:application/apply-patch+yamlBN +L +Jbodybody *: +8#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.PatchBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B¯ +¬©¦queryƒfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch)." fieldManager2string BÎ +ËÈÅquery¨Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests."force2boolean Ja +F +200? += +OK7 +5 +3#/definitions/io.k8s.api.discovery.v1.EndpointSlice + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionpatch +j] +x-kubernetes-group-version-kind:8group: discovery.k8s.io +kind: EndpointSlice +version: v1 +J: +86"4pathname of the EndpointSlice"name*string˜J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string ƒ, +S/apis/rbac.authorization.k8s.io/v1alpha1/namespaces/{namespace}/rolebindings/{name}«+² +rbacAuthorization_v1alpha1read the specified RoleBinding*2readRbacAuthorizationV1alpha1NamespacedRoleBinding2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*J` +E +200> +< +OK6 +4 +2#/definitions/io.k8s.api.rbac.v1alpha1.RoleBinding + +401 + + UnauthorizedRhttpsjj +x-kubernetes-group-version-kindGEversion: v1alpha1 +group: rbac.authorization.k8s.io +kind: RoleBinding +j +x-kubernetes-actionget +‰ +rbacAuthorization_v1alpha1!replace the specified RoleBinding*5replaceRbacAuthorizationV1alpha1NamespacedRoleBinding2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BH +F +Dbodybody *4 +2#/definitions/io.k8s.api.rbac.v1alpha1.RoleBindingBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string J¬ + +401 + + Unauthorized +E +200> +< +OK6 +4 +2#/definitions/io.k8s.api.rbac.v1alpha1.RoleBinding +J +201C +A +Created6 +4 +2#/definitions/io.k8s.api.rbac.v1alpha1.RoleBindingRhttpsjj +x-kubernetes-group-version-kindGEgroup: rbac.authorization.k8s.io +kind: RoleBinding +version: v1alpha1 +j +x-kubernetes-actionput +*Æ +rbacAuthorization_v1alpha1delete a RoleBinding*4deleteRbacAuthorizationV1alpha1NamespacedRoleBinding2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string J» +L +200E +C +OK= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status +R +202K +I +Accepted= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status + +401 + + UnauthorizedRhttpsjj +x-kubernetes-group-version-kindGEkind: RoleBinding +version: v1alpha1 +group: rbac.authorization.k8s.io +j +x-kubernetes-action delete +B± +rbacAuthorization_v1alpha1*partially update the specified RoleBinding*3patchRbacAuthorizationV1alpha1NamespacedRoleBinding2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json-patch+json:application/merge-patch+json:&application/strategic-merge-patch+json:application/apply-patch+yamlBN +L +Jbodybody *: +8#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.PatchBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B¯ +¬©¦queryƒfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch)." fieldManager2string BÎ +ËÈÅquery¨Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests."force2boolean J` +E +200> +< +OK6 +4 +2#/definitions/io.k8s.api.rbac.v1alpha1.RoleBinding + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionpatch +jj +x-kubernetes-group-version-kindGEkind: RoleBinding +version: v1alpha1 +group: rbac.authorization.k8s.io +J8 +64"2pathname of the RoleBinding"name*string˜J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string þ( +7/apis/scheduling.k8s.io/v1/watch/priorityclasses/{name}Â(ú + scheduling_v1´watch changes to an object of kind PriorityClass. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.*watchSchedulingV1PriorityClass2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk + +401 + + Unauthorized +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEventRhttpsj^ +x-kubernetes-group-version-kind;9group: scheduling.k8s.io +kind: PriorityClass +version: v1 +j +x-kubernetes-actionwatch +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer J: +86"4pathname of the PriorityClass"name*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean ÷' +,/apis/storage.k8s.io/v1/watch/storageclassesÆ'º + +storage_v1xwatch individual changes to a list of StorageClass. deprecated: use the 'watch' parameter with a list operation instead.*watchStorageV1StorageClassList2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsj# +x-kubernetes-action  +watchlist +jZ +x-kubernetes-group-version-kind75group: storage.k8s.io +kind: StorageClass +version: v1 +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean š( +4/apis/storage.k8s.io/v1beta1/watch/volumeattachmentsá'Õ +storage_v1beta1|watch individual changes to a list of VolumeAttachment. deprecated: use the 'watch' parameter with a list operation instead.*'watchStorageV1beta1VolumeAttachmentList2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk + +401 + + Unauthorized +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEventRhttpsjc +x-kubernetes-group-version-kind@>group: storage.k8s.io +kind: VolumeAttachment +version: v1beta1 +j# +x-kubernetes-action  +watchlist +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean £ ++/apis/admissionregistration.k8s.io/v1beta1/óð +admissionregistration_v1beta1get available resources*+getAdmissionregistrationV1beta1APIResources2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json:application/yaml:#application/vnd.kubernetes.protobufJp +U +200N +L +OKF +D +B#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.APIResourceList + +401 + + UnauthorizedRhttps¿( +=/apis/apiextensions.k8s.io/v1/watch/customresourcedefinitionsý'ñ +apiextensions_v1„watch individual changes to a list of CustomResourceDefinition. deprecated: use the 'watch' parameter with a list operation instead.*0watchApiextensionsV1CustomResourceDefinitionList2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsjl +x-kubernetes-group-version-kindIGgroup: apiextensions.k8s.io +kind: CustomResourceDefinition +version: v1 +j# +x-kubernetes-action  +watchlist +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean þ +/apis/autoscaling/v2beta1/ßÜ +autoscaling_v2beta1get available resources*!getAutoscalingV2beta1APIResources2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json:application/yaml:#application/vnd.kubernetes.protobufJp +U +200N +L +OKF +D +B#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.APIResourceList + +401 + + UnauthorizedRhttpsþ* +L/apis/rbac.authorization.k8s.io/v1alpha1/namespaces/{namespace}/roles/{name}­*– +rbacAuthorization_v1alpha1read the specified Role*+readRbacAuthorizationV1alpha1NamespacedRole2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*JY +> +2007 +5 +OK/ +- ++#/definitions/io.k8s.api.rbac.v1alpha1.Role + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionget +jc +x-kubernetes-group-version-kind@>group: rbac.authorization.k8s.io +kind: Role +version: v1alpha1 +ß +rbacAuthorization_v1alpha1replace the specified Role*.replaceRbacAuthorizationV1alpha1NamespacedRole2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BA +? +=bodybody *- ++#/definitions/io.k8s.api.rbac.v1alpha1.RoleBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string Jž +> +2007 +5 +OK/ +- ++#/definitions/io.k8s.api.rbac.v1alpha1.Role +C +201< +: +Created/ +- ++#/definitions/io.k8s.api.rbac.v1alpha1.Role + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionput +jc +x-kubernetes-group-version-kind@>group: rbac.authorization.k8s.io +kind: Role +version: v1alpha1 +*± +rbacAuthorization_v1alpha1 delete a Role*-deleteRbacAuthorizationV1alpha1NamespacedRole2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string J» +L +200E +C +OK= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status +R +202K +I +Accepted= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status + +401 + + UnauthorizedRhttpsj +x-kubernetes-action delete +jc +x-kubernetes-group-version-kind@>kind: Role +version: v1alpha1 +group: rbac.authorization.k8s.io +B• +rbacAuthorization_v1alpha1#partially update the specified Role*,patchRbacAuthorizationV1alpha1NamespacedRole2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json-patch+json:application/merge-patch+json:&application/strategic-merge-patch+json:application/apply-patch+yamlBN +L +Jbodybody *: +8#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.PatchBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B¯ +¬©¦queryƒfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch)." fieldManager2string BÎ +ËÈÅquery¨Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests."force2boolean JY + +401 + + Unauthorized +> +2007 +5 +OK/ +- ++#/definitions/io.k8s.api.rbac.v1alpha1.RoleRhttpsj +x-kubernetes-actionpatch +jc +x-kubernetes-group-version-kind@>group: rbac.authorization.k8s.io +kind: Role +version: v1alpha1 +J1 +/-"+pathname of the Role"name*string˜J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string –) +=/apis/scheduling.k8s.io/v1alpha1/watch/priorityclasses/{name}Ô(Œ +scheduling_v1alpha1´watch changes to an object of kind PriorityClass. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.*$watchSchedulingV1alpha1PriorityClass2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionwatch +jd +x-kubernetes-group-version-kindA?group: scheduling.k8s.io +kind: PriorityClass +version: v1alpha1 +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer J: +86"4pathname of the PriorityClass"name*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean ª +;/api/v1/namespaces/{namespace}/services/{name}/proxy/{path}ê§ +core_v1(connect GET requests to proxy of Service*.connectCoreV1GetNamespacedServiceProxyWithPath2*/*:*/*J7 + +401 + + Unauthorized + +200 + +OK + ² +stringRhttpsj! +x-kubernetes-action +connect +jU +x-kubernetes-group-version-kind20group: "" +kind: ServiceProxyOptions +version: v1 +§ +core_v1(connect PUT requests to proxy of Service*.connectCoreV1PutNamespacedServiceProxyWithPath2*/*:*/*J7 + +200 + +OK + ² +string + +401 + + UnauthorizedRhttpsj! +x-kubernetes-action +connect +jU +x-kubernetes-group-version-kind20kind: ServiceProxyOptions +version: v1 +group: "" +"© +core_v1)connect POST requests to proxy of Service*/connectCoreV1PostNamespacedServiceProxyWithPath2*/*:*/*J7 + +200 + +OK + ² +string + +401 + + UnauthorizedRhttpsjU +x-kubernetes-group-version-kind20group: "" +kind: ServiceProxyOptions +version: v1 +j! +x-kubernetes-action +connect +*­ +core_v1+connect DELETE requests to proxy of Service*1connectCoreV1DeleteNamespacedServiceProxyWithPath2*/*:*/*J7 + +200 + +OK + ² +string + +401 + + UnauthorizedRhttpsj! +x-kubernetes-action +connect +jU +x-kubernetes-group-version-kind20group: "" +kind: ServiceProxyOptions +version: v1 +2¯ +core_v1,connect OPTIONS requests to proxy of Service*2connectCoreV1OptionsNamespacedServiceProxyWithPath2*/*:*/*J7 + +200 + +OK + ² +string + +401 + + UnauthorizedRhttpsjU +x-kubernetes-group-version-kind20group: "" +kind: ServiceProxyOptions +version: v1 +j! +x-kubernetes-action +connect +:© +core_v1)connect HEAD requests to proxy of Service*/connectCoreV1HeadNamespacedServiceProxyWithPath2*/*:*/*J7 + +200 + +OK + ² +string + +401 + + UnauthorizedRhttpsj! +x-kubernetes-action +connect +jU +x-kubernetes-group-version-kind20version: v1 +group: "" +kind: ServiceProxyOptions +B« +core_v1*connect PATCH requests to proxy of Service*0connectCoreV1PatchNamespacedServiceProxyWithPath2*/*:*/*J7 + +200 + +OK + ² +string + +401 + + UnauthorizedRhttpsjU +x-kubernetes-group-version-kind20group: "" +kind: ServiceProxyOptions +version: v1 +j! +x-kubernetes-action +connect +J@ +><":pathname of the ServiceProxyOptions"name*string˜J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜J5 +31"/pathpath to the resource"path*string˜JÐ +ÍÊÇquery¬Path is the part of URLs that include service endpoints, suffixes, and parameters to use for the current proxy request to service. For example, the whole request URL is http://localhost/api/v1/namespaces/kube-system/services/elasticsearch-logging/_search?q=user:kimchy. Path is _search?q=user:kimchy."path2string Ò) +:/api/v1/watch/namespaces/{namespace}/resourcequotas/{name}“)é +core_v1´watch changes to an object of kind ResourceQuota. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.*"watchCoreV1NamespacedResourceQuota2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk + +401 + + Unauthorized +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEventRhttpsj +x-kubernetes-actionwatch +jO +x-kubernetes-group-version-kind,*kind: ResourceQuota +version: v1 +group: "" +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer J: +86"4pathname of the ResourceQuota"name*string˜J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean É( +8/apis/autoscaling/v2beta1/watch/horizontalpodautoscalersŒ(€ +autoscaling_v2beta1ƒwatch individual changes to a list of HorizontalPodAutoscaler. deprecated: use the 'watch' parameter with a list operation instead.*BwatchAutoscalingV2beta1HorizontalPodAutoscalerListForAllNamespaces2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsj# +x-kubernetes-action  +watchlist +jg +x-kubernetes-group-version-kindDBgroup: autoscaling +kind: HorizontalPodAutoscaler +version: v2beta1 +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean ù +/apis/certificates.k8s.io/v1/×Ô +certificates_v1get available resources*getCertificatesV1APIResources2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json:application/yaml:#application/vnd.kubernetes.protobufJp +U +200N +L +OKF +D +B#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.APIResourceList + +401 + + UnauthorizedRhttpsÏ_ + +< +OK6 +4 +2#/definitions/io.k8s.api.rbac.v1alpha1.RoleBinding +J +201C +A +Created6 +4 +2#/definitions/io.k8s.api.rbac.v1alpha1.RoleBinding +K +202D +B +Accepted6 +4 +2#/definitions/io.k8s.api.rbac.v1alpha1.RoleBinding + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionpost +jj +x-kubernetes-group-version-kindGEgroup: rbac.authorization.k8s.io +kind: RoleBinding +version: v1alpha1 +*- +rbacAuthorization_v1alpha1 delete collection of RoleBinding*>deleteRbacAuthorizationV1alpha1CollectionNamespacedRoleBinding2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string Bž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer B‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Bú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string Bû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string BÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Bž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer Jg + +401 + + Unauthorized +L +200E +C +OK= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.StatusRhttpsjj +x-kubernetes-group-version-kindGEgroup: rbac.authorization.k8s.io +kind: RoleBinding +version: v1alpha1 +j* +x-kubernetes-actiondeletecollection +J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string … +!/apis/scheduling.k8s.io/v1alpha1/ßÜ +scheduling_v1alpha1get available resources*!getSchedulingV1alpha1APIResources2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json:application/yaml:#application/vnd.kubernetes.protobufJp +U +200N +L +OKF +D +B#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.APIResourceList + +401 + + UnauthorizedRhttpsš] +*/api/v1/namespaces/{namespace}/limitrangesë\þ% +core_v1(list or watch objects of kind LimitRange*listCoreV1NamespacedLimitRange2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*B‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Bï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string B‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string B‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Bú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer Bû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string BÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Bž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer B± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean J] +B +200; +9 +OK3 +1 +/#/definitions/io.k8s.api.core.v1.LimitRangeList + +401 + + UnauthorizedRhttpsjL +x-kubernetes-group-version-kind)'group: "" +kind: LimitRange +version: v1 +j +x-kubernetes-actionlist +"ç +core_v1create a LimitRange* createCoreV1NamespacedLimitRange2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BA +? +=bodybody *- ++#/definitions/io.k8s.api.core.v1.LimitRangeBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string Jä +> +2007 +5 +OK/ +- ++#/definitions/io.k8s.api.core.v1.LimitRange +C +201< +: +Created/ +- ++#/definitions/io.k8s.api.core.v1.LimitRange +D +202= +; +Accepted/ +- ++#/definitions/io.k8s.api.core.v1.LimitRange + +401 + + UnauthorizedRhttpsjL +x-kubernetes-group-version-kind)'group: "" +kind: LimitRange +version: v1 +j +x-kubernetes-actionpost +*Ê, +core_v1delete collection of LimitRange**deleteCoreV1CollectionNamespacedLimitRange2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string Bž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer B‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Bú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string Bû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string BÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Bž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer Jg +L +200E +C +OK= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status + +401 + + UnauthorizedRhttpsj* +x-kubernetes-actiondeletecollection +jL +x-kubernetes-group-version-kind)'kind: LimitRange +version: v1 +group: "" +J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Õ) +I/apis/certificates.k8s.io/v1beta1/watch/certificatesigningrequests/{name}‡)³ +certificates_v1beta1Àwatch changes to an object of kind CertificateSigningRequest. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.*1watchCertificatesV1beta1CertificateSigningRequest2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionwatch +jq +x-kubernetes-group-version-kindNLgroup: certificates.k8s.io +kind: CertificateSigningRequest +version: v1beta1 +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer JF +DB"@path%name of the CertificateSigningRequest"name*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean ¤] +)/apis/node.k8s.io/v1alpha1/runtimeclassesö\& + node_v1alpha1*list or watch objects of kind RuntimeClass*listNodeV1alpha1RuntimeClass2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*B‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Bï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string B‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string B‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Bú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer Bû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string BÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Bž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer B± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean Je +J +200C +A +OK; +9 +7#/definitions/io.k8s.api.node.v1alpha1.RuntimeClassList + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionlist +j] +x-kubernetes-group-version-kind:8group: node.k8s.io +kind: RuntimeClass +version: v1alpha1 +"ž + node_v1alpha1create a RuntimeClass*createNodeV1alpha1RuntimeClass2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BI +G +Ebodybody *5 +3#/definitions/io.k8s.api.node.v1alpha1.RuntimeClassBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string Jü +F +200? += +OK7 +5 +3#/definitions/io.k8s.api.node.v1alpha1.RuntimeClass +K +201D +B +Created7 +5 +3#/definitions/io.k8s.api.node.v1alpha1.RuntimeClass +L +202E +C +Accepted7 +5 +3#/definitions/io.k8s.api.node.v1alpha1.RuntimeClass + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionpost +j] +x-kubernetes-group-version-kind:8group: node.k8s.io +kind: RuntimeClass +version: v1alpha1 +*á, + node_v1alpha1!delete collection of RuntimeClass*(deleteNodeV1alpha1CollectionRuntimeClass2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string Bž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer B‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Bú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string Bû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string BÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Bž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer Jg +L +200E +C +OK= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status + +401 + + UnauthorizedRhttpsj] +x-kubernetes-group-version-kind:8version: v1alpha1 +group: node.k8s.io +kind: RuntimeClass +j* +x-kubernetes-actiondeletecollection +JO +MKIquery-If 'true', then the output is pretty printed."pretty2string é +W/apis/autoscaling/v2beta1/namespaces/{namespace}/horizontalpodautoscalers/{name}/statusÛ +autoscaling_v2beta14read status of the specified HorizontalPodAutoscaler*=readAutoscalingV2beta1NamespacedHorizontalPodAutoscalerStatus2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*Jr +W +200P +N +OKH +F +D#/definitions/io.k8s.api.autoscaling.v2beta1.HorizontalPodAutoscaler + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionget +jg +x-kubernetes-group-version-kindDBgroup: autoscaling +kind: HorizontalPodAutoscaler +version: v2beta1 +Ö +autoscaling_v2beta17replace status of the specified HorizontalPodAutoscaler*@replaceAutoscalingV2beta1NamespacedHorizontalPodAutoscalerStatus2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BZ +X +Vbodybody *F +D#/definitions/io.k8s.api.autoscaling.v2beta1.HorizontalPodAutoscalerBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string JÐ +W +200P +N +OKH +F +D#/definitions/io.k8s.api.autoscaling.v2beta1.HorizontalPodAutoscaler +\ +201U +S +CreatedH +F +D#/definitions/io.k8s.api.autoscaling.v2beta1.HorizontalPodAutoscaler + +401 + + UnauthorizedRhttpsjg +x-kubernetes-group-version-kindDBgroup: autoscaling +kind: HorizontalPodAutoscaler +version: v2beta1 +j +x-kubernetes-actionput +BÚ +autoscaling_v2beta1@partially update status of the specified HorizontalPodAutoscaler*>patchAutoscalingV2beta1NamespacedHorizontalPodAutoscalerStatus2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json-patch+json:application/merge-patch+json:&application/strategic-merge-patch+json:application/apply-patch+yamlBN +L +Jbodybody *: +8#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.PatchBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B¯ +¬©¦queryƒfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch)." fieldManager2string BÎ +ËÈÅquery¨Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests."force2boolean Jr +W +200P +N +OKH +F +D#/definitions/io.k8s.api.autoscaling.v2beta1.HorizontalPodAutoscaler + +401 + + UnauthorizedRhttpsjg +x-kubernetes-group-version-kindDBkind: HorizontalPodAutoscaler +version: v2beta1 +group: autoscaling +j +x-kubernetes-actionpatch +JD +B@">path#name of the HorizontalPodAutoscaler"name*string˜J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string â+ +>/apis/certificates.k8s.io/v1/certificatesigningrequests/{name}Ÿ+À +certificates_v1,read the specified CertificateSigningRequest*+readCertificatesV1CertificateSigningRequest2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*Jp +U +200N +L +OKF +D +B#/definitions/io.k8s.api.certificates.v1.CertificateSigningRequest + +401 + + UnauthorizedRhttpsjl +x-kubernetes-group-version-kindIGgroup: certificates.k8s.io +kind: CertificateSigningRequest +version: v1 +j +x-kubernetes-actionget +· +certificates_v1/replace the specified CertificateSigningRequest*.replaceCertificatesV1CertificateSigningRequest2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BX +V +Tbodybody *D +B#/definitions/io.k8s.api.certificates.v1.CertificateSigningRequestBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string JÌ +Z +201S +Q +CreatedF +D +B#/definitions/io.k8s.api.certificates.v1.CertificateSigningRequest + +401 + + Unauthorized +U +200N +L +OKF +D +B#/definitions/io.k8s.api.certificates.v1.CertificateSigningRequestRhttpsj +x-kubernetes-actionput +jl +x-kubernetes-group-version-kindIGkind: CertificateSigningRequest +version: v1 +group: certificates.k8s.io +*Ä +certificates_v1"delete a CertificateSigningRequest*-deleteCertificatesV1CertificateSigningRequest2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string J» + +401 + + Unauthorized +L +200E +C +OK= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status +R +202K +I +Accepted= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.StatusRhttpsj +x-kubernetes-action delete +jl +x-kubernetes-group-version-kindIGgroup: certificates.k8s.io +kind: CertificateSigningRequest +version: v1 +B¿ +certificates_v18partially update the specified CertificateSigningRequest*,patchCertificatesV1CertificateSigningRequest2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json-patch+json:application/merge-patch+json:&application/strategic-merge-patch+json:application/apply-patch+yamlBN +L +Jbodybody *: +8#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.PatchBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B¯ +¬©¦queryƒfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch)." fieldManager2string BÎ +ËÈÅquery¨Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests."force2boolean Jp + +401 + + Unauthorized +U +200N +L +OKF +D +B#/definitions/io.k8s.api.certificates.v1.CertificateSigningRequestRhttpsj +x-kubernetes-actionpatch +jl +x-kubernetes-group-version-kindIGgroup: certificates.k8s.io +kind: CertificateSigningRequest +version: v1 +JF +DB"@path%name of the CertificateSigningRequest"name*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string ½^ +6/apis/flowcontrol.apiserver.k8s.io/v1beta1/flowschemas‚^É& +flowcontrolApiserver_v1beta1(list or watch objects of kind FlowSchema*)listFlowcontrolApiserverV1beta1FlowSchema2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*B‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Bï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string B‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string B‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Bú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer Bû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string BÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Bž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer B± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean Ji +N +200G +E +OK? += +;#/definitions/io.k8s.api.flowcontrol.v1beta1.FlowSchemaList + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionlist +jk +x-kubernetes-group-version-kindHFversion: v1beta1 +group: flowcontrol.apiserver.k8s.io +kind: FlowSchema +"Ö +flowcontrolApiserver_v1beta1create a FlowSchema*+createFlowcontrolApiserverV1beta1FlowSchema2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BM +K +Ibodybody *9 +7#/definitions/io.k8s.api.flowcontrol.v1beta1.FlowSchemaBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string Jˆ +P +202I +G +Accepted; +9 +7#/definitions/io.k8s.api.flowcontrol.v1beta1.FlowSchema + +401 + + Unauthorized +J +200C +A +OK; +9 +7#/definitions/io.k8s.api.flowcontrol.v1beta1.FlowSchema +O +201H +F +Created; +9 +7#/definitions/io.k8s.api.flowcontrol.v1beta1.FlowSchemaRhttpsjk +x-kubernetes-group-version-kindHFgroup: flowcontrol.apiserver.k8s.io +kind: FlowSchema +version: v1beta1 +j +x-kubernetes-actionpost +*‰- +flowcontrolApiserver_v1beta1delete collection of FlowSchema*5deleteFlowcontrolApiserverV1beta1CollectionFlowSchema2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string Bž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer B‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Bú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string Bû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string BÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Bž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer Jg +L +200E +C +OK= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status + +401 + + UnauthorizedRhttpsj* +x-kubernetes-actiondeletecollection +jk +x-kubernetes-group-version-kindHFgroup: flowcontrol.apiserver.k8s.io +kind: FlowSchema +version: v1beta1 +JO +MKIquery-If 'true', then the output is pretty printed."pretty2string ‡' +/apis/batch/v1beta1/cronjobsæ&Ú + batch_v1beta1%list or watch objects of kind CronJob*'listBatchV1beta1CronJobForAllNamespaces2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*J` +E +200> +< +OK6 +4 +2#/definitions/io.k8s.api.batch.v1beta1.CronJobList + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionlist +jQ +x-kubernetes-group-version-kind.,kind: CronJob +version: v1beta1 +group: batch +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean ñ( +@/apis/coordination.k8s.io/v1/watch/namespaces/{namespace}/leases¬(¾ +coordination_v1qwatch individual changes to a list of Lease. deprecated: use the 'watch' parameter with a list operation instead.*&watchCoordinationV1NamespacedLeaseList2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsj# +x-kubernetes-action  +watchlist +jX +x-kubernetes-group-version-kind53group: coordination.k8s.io +kind: Lease +version: v1 +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean ð +/apis/node.k8s.io/v1beta1/ÑÎ + node_v1beta1get available resources*getNodeV1beta1APIResources2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json:application/yaml:#application/vnd.kubernetes.protobufJp + +401 + + Unauthorized +U +200N +L +OKF +D +B#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.APIResourceListRhttpsâ* + +< +OK6 +4 +2#/definitions/io.k8s.api.rbac.v1alpha1.ClusterRole + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionget +jj +x-kubernetes-group-version-kindGEgroup: rbac.authorization.k8s.io +kind: ClusterRole +version: v1alpha1 +ÿ +rbacAuthorization_v1alpha1!replace the specified ClusterRole*+replaceRbacAuthorizationV1alpha1ClusterRole2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BH +F +Dbodybody *4 +2#/definitions/io.k8s.api.rbac.v1alpha1.ClusterRoleBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string J¬ +E +200> +< +OK6 +4 +2#/definitions/io.k8s.api.rbac.v1alpha1.ClusterRole +J +201C +A +Created6 +4 +2#/definitions/io.k8s.api.rbac.v1alpha1.ClusterRole + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionput +jj +x-kubernetes-group-version-kindGEversion: v1alpha1 +group: rbac.authorization.k8s.io +kind: ClusterRole +*¼ +rbacAuthorization_v1alpha1delete a ClusterRole**deleteRbacAuthorizationV1alpha1ClusterRole2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string J» +L +200E +C +OK= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status +R +202K +I +Accepted= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status + +401 + + UnauthorizedRhttpsj +x-kubernetes-action delete +jj +x-kubernetes-group-version-kindGEgroup: rbac.authorization.k8s.io +kind: ClusterRole +version: v1alpha1 +B§ +rbacAuthorization_v1alpha1*partially update the specified ClusterRole*)patchRbacAuthorizationV1alpha1ClusterRole2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json-patch+json:application/merge-patch+json:&application/strategic-merge-patch+json:application/apply-patch+yamlBN +L +Jbodybody *: +8#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.PatchBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B¯ +¬©¦queryƒfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch)." fieldManager2string BÎ +ËÈÅquery¨Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests."force2boolean J` +E +200> +< +OK6 +4 +2#/definitions/io.k8s.api.rbac.v1alpha1.ClusterRole + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionpatch +jj +x-kubernetes-group-version-kindGEgroup: rbac.authorization.k8s.io +kind: ClusterRole +version: v1alpha1 +J8 +64"2pathname of the ClusterRole"name*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Û) +1/apis/scheduling.k8s.io/v1/priorityclasses/{name}¥)ˆ + scheduling_v1 read the specified PriorityClass*readSchedulingV1PriorityClass2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*Jb +G +200@ +> +OK8 +6 +4#/definitions/io.k8s.api.scheduling.v1.PriorityClass + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionget +j^ +x-kubernetes-group-version-kind;9group: scheduling.k8s.io +kind: PriorityClass +version: v1 +ã + scheduling_v1#replace the specified PriorityClass* replaceSchedulingV1PriorityClass2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BJ +H +Fbodybody *6 +4#/definitions/io.k8s.api.scheduling.v1.PriorityClassBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string J° +G +200@ +> +OK8 +6 +4#/definitions/io.k8s.api.scheduling.v1.PriorityClass +L +201E +C +Created8 +6 +4#/definitions/io.k8s.api.scheduling.v1.PriorityClass + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionput +j^ +x-kubernetes-group-version-kind;9kind: PriorityClass +version: v1 +group: scheduling.k8s.io +*š + scheduling_v1delete a PriorityClass*deleteSchedulingV1PriorityClass2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string J» + +401 + + Unauthorized +L +200E +C +OK= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status +R +202K +I +Accepted= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.StatusRhttpsj^ +x-kubernetes-group-version-kind;9kind: PriorityClass +version: v1 +group: scheduling.k8s.io +j +x-kubernetes-action delete +B‡ + scheduling_v1,partially update the specified PriorityClass*patchSchedulingV1PriorityClass2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json-patch+json:application/merge-patch+json:&application/strategic-merge-patch+json:application/apply-patch+yamlBN +L +Jbodybody *: +8#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.PatchBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B¯ +¬©¦queryƒfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch)." fieldManager2string BÎ +ËÈÅquery¨Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests."force2boolean Jb +G +200@ +> +OK8 +6 +4#/definitions/io.k8s.api.scheduling.v1.PriorityClass + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionpatch +j^ +x-kubernetes-group-version-kind;9group: scheduling.k8s.io +kind: PriorityClass +version: v1 +J: +86"4pathname of the PriorityClass"name*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string ¥) +1/api/v1/namespaces/{namespace}/limitranges/{name}ï(å +core_v1read the specified LimitRange*readCoreV1NamespacedLimitRange2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*JY +> +2007 +5 +OK/ +- ++#/definitions/io.k8s.api.core.v1.LimitRange + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionget +jL +x-kubernetes-group-version-kind)'group: "" +kind: LimitRange +version: v1 +® +core_v1 replace the specified LimitRange*!replaceCoreV1NamespacedLimitRange2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BA +? +=bodybody *- ++#/definitions/io.k8s.api.core.v1.LimitRangeBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string Jž +C +201< +: +Created/ +- ++#/definitions/io.k8s.api.core.v1.LimitRange + +401 + + Unauthorized +> +2007 +5 +OK/ +- ++#/definitions/io.k8s.api.core.v1.LimitRangeRhttpsjL +x-kubernetes-group-version-kind)'group: "" +kind: LimitRange +version: v1 +j +x-kubernetes-actionput +*€ +core_v1delete a LimitRange* deleteCoreV1NamespacedLimitRange2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string J» +L +200E +C +OK= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status +R +202K +I +Accepted= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status + +401 + + UnauthorizedRhttpsj +x-kubernetes-action delete +jL +x-kubernetes-group-version-kind)'group: "" +kind: LimitRange +version: v1 +Bä +core_v1)partially update the specified LimitRange*patchCoreV1NamespacedLimitRange2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json-patch+json:application/merge-patch+json:&application/strategic-merge-patch+json:application/apply-patch+yamlBN +L +Jbodybody *: +8#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.PatchBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B¯ +¬©¦queryƒfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch)." fieldManager2string BÎ +ËÈÅquery¨Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests."force2boolean JY +> +2007 +5 +OK/ +- ++#/definitions/io.k8s.api.core.v1.LimitRange + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionpatch +jL +x-kubernetes-group-version-kind)'kind: LimitRange +version: v1 +group: "" +J7 +53"1pathname of the LimitRange"name*string˜J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string ³) +7/apis/apps/v1/namespaces/{namespace}/deployments/{name}÷(ç +apps_v1read the specified Deployment*readAppsV1NamespacedDeployment2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*JY +> +2007 +5 +OK/ +- ++#/definitions/io.k8s.api.apps.v1.Deployment + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionget +jN +x-kubernetes-group-version-kind+)group: apps +kind: Deployment +version: v1 +° +apps_v1 replace the specified Deployment*!replaceAppsV1NamespacedDeployment2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BA +? +=bodybody *- ++#/definitions/io.k8s.api.apps.v1.DeploymentBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string Jž +> +2007 +5 +OK/ +- ++#/definitions/io.k8s.api.apps.v1.Deployment +C +201< +: +Created/ +- ++#/definitions/io.k8s.api.apps.v1.Deployment + +401 + + UnauthorizedRhttpsjN +x-kubernetes-group-version-kind+)group: apps +kind: Deployment +version: v1 +j +x-kubernetes-actionput +*‚ +apps_v1delete a Deployment* deleteAppsV1NamespacedDeployment2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string J» +R +202K +I +Accepted= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status + +401 + + Unauthorized +L +200E +C +OK= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.StatusRhttpsj +x-kubernetes-action delete +jN +x-kubernetes-group-version-kind+)version: v1 +group: apps +kind: Deployment +Bæ +apps_v1)partially update the specified Deployment*patchAppsV1NamespacedDeployment2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json-patch+json:application/merge-patch+json:&application/strategic-merge-patch+json:application/apply-patch+yamlBN +L +Jbodybody *: +8#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.PatchBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B¯ +¬©¦queryƒfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch)." fieldManager2string BÎ +ËÈÅquery¨Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests."force2boolean JY +> +2007 +5 +OK/ +- ++#/definitions/io.k8s.api.apps.v1.Deployment + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionpatch +jN +x-kubernetes-group-version-kind+)group: apps +kind: Deployment +version: v1 +J7 +53"1pathname of the Deployment"name*string˜J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string ˆ +"/apis/certificates.k8s.io/v1beta1/áÞ +certificates_v1beta1get available resources*"getCertificatesV1beta1APIResources2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json:application/yaml:#application/vnd.kubernetes.protobufJp +U +200N +L +OKF +D +B#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.APIResourceList + +401 + + UnauthorizedRhttpsþ) +R/apis/admissionregistration.k8s.io/v1/watch/validatingwebhookconfigurations/{name}§)Î +admissionregistration_v1Åwatch changes to an object of kind ValidatingWebhookConfiguration. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.*:watchAdmissionregistrationV1ValidatingWebhookConfiguration2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionwatch +jz +x-kubernetes-group-version-kindWUkind: ValidatingWebhookConfiguration +version: v1 +group: admissionregistration.k8s.io +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer JK +IG"Epath*name of the ValidatingWebhookConfiguration"name*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean å* +2/apis/apiregistration.k8s.io/v1/apiservices/{name}®*¥ +apiregistration_v1read the specified APIService*readApiregistrationV1APIService2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*Jy +^ +200W +U +OKO +M +K#/definitions/io.k8s.kube-aggregator.pkg.apis.apiregistration.v1.APIService + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionget +j` +x-kubernetes-group-version-kind=;version: v1 +kind: APIService +group: apiregistration.k8s.io +® +apiregistration_v1 replace the specified APIService*"replaceApiregistrationV1APIService2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*Ba +_ +]bodybody *M +K#/definitions/io.k8s.kube-aggregator.pkg.apis.apiregistration.v1.APIServiceBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string JÞ +^ +200W +U +OKO +M +K#/definitions/io.k8s.kube-aggregator.pkg.apis.apiregistration.v1.APIService +c +201\ +Z +CreatedO +M +K#/definitions/io.k8s.kube-aggregator.pkg.apis.apiregistration.v1.APIService + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionput +j` +x-kubernetes-group-version-kind=;kind: APIService +group: apiregistration.k8s.io +version: v1 +*¡ +apiregistration_v1delete an APIService*!deleteApiregistrationV1APIService2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string J» +L +200E +C +OK= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status +R +202K +I +Accepted= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status + +401 + + UnauthorizedRhttpsj +x-kubernetes-action delete +j` +x-kubernetes-group-version-kind=;group: apiregistration.k8s.io +version: v1 +kind: APIService +B¤ +apiregistration_v1)partially update the specified APIService* patchApiregistrationV1APIService2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json-patch+json:application/merge-patch+json:&application/strategic-merge-patch+json:application/apply-patch+yamlBN +L +Jbodybody *: +8#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.PatchBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B¯ +¬©¦queryƒfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch)." fieldManager2string BÎ +ËÈÅquery¨Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests."force2boolean Jy +^ +200W +U +OKO +M +K#/definitions/io.k8s.kube-aggregator.pkg.apis.apiregistration.v1.APIService + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionpatch +j` +x-kubernetes-group-version-kind=;group: apiregistration.k8s.io +version: v1 +kind: APIService +J7 +53"1pathname of the APIService"name*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string à +G/apis/certificates.k8s.io/v1/certificatesigningrequests/{name}/approval”Ô +certificates_v18read approval of the specified CertificateSigningRequest*3readCertificatesV1CertificateSigningRequestApproval2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*Jp +U +200N +L +OKF +D +B#/definitions/io.k8s.api.certificates.v1.CertificateSigningRequest + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionget +jl +x-kubernetes-group-version-kindIGgroup: certificates.k8s.io +kind: CertificateSigningRequest +version: v1 +Ë +certificates_v1;replace approval of the specified CertificateSigningRequest*6replaceCertificatesV1CertificateSigningRequestApproval2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BX +V +Tbodybody *D +B#/definitions/io.k8s.api.certificates.v1.CertificateSigningRequestBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string JÌ +U +200N +L +OKF +D +B#/definitions/io.k8s.api.certificates.v1.CertificateSigningRequest +Z +201S +Q +CreatedF +D +B#/definitions/io.k8s.api.certificates.v1.CertificateSigningRequest + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionput +jl +x-kubernetes-group-version-kindIGgroup: certificates.k8s.io +kind: CertificateSigningRequest +version: v1 +BÓ +certificates_v1Dpartially update approval of the specified CertificateSigningRequest*4patchCertificatesV1CertificateSigningRequestApproval2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json-patch+json:application/merge-patch+json:&application/strategic-merge-patch+json:application/apply-patch+yamlBN +L +Jbodybody *: +8#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.PatchBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B¯ +¬©¦queryƒfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch)." fieldManager2string BÎ +ËÈÅquery¨Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests."force2boolean Jp +U +200N +L +OKF +D +B#/definitions/io.k8s.api.certificates.v1.CertificateSigningRequest + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionpatch +jl +x-kubernetes-group-version-kindIGgroup: certificates.k8s.io +kind: CertificateSigningRequest +version: v1 +JF +DB"@path%name of the CertificateSigningRequest"name*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string ( +./apis/policy/v1beta1/watch/podsecuritypoliciesÚ'Î +policy_v1beta1}watch individual changes to a list of PodSecurityPolicy. deprecated: use the 'watch' parameter with a list operation instead.*'watchPolicyV1beta1PodSecurityPolicyList2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsj# +x-kubernetes-action  +watchlist +j\ +x-kubernetes-group-version-kind97kind: PodSecurityPolicy +version: v1beta1 +group: policy +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean Î- +C/apis/apiextensions.k8s.io/v1beta1/customresourcedefinitions/{name}†-ò +apiextensions_v1beta1+read the specified CustomResourceDefinition*0readApiextensionsV1beta1CustomResourceDefinition2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*J’ +w +200p +n +OKh +f +d#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1beta1.CustomResourceDefinition + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionget +jq +x-kubernetes-group-version-kindNLgroup: apiextensions.k8s.io +kind: CustomResourceDefinition +version: v1beta1 +¬ + +apiextensions_v1beta1.replace the specified CustomResourceDefinition*3replaceApiextensionsV1beta1CustomResourceDefinition2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*Bz +x +vbodybody *f +d#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1beta1.CustomResourceDefinitionBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string J +w +200p +n +OKh +f +d#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1beta1.CustomResourceDefinition +| +201u +s +Createdh +f +d#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1beta1.CustomResourceDefinition + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionput +jq +x-kubernetes-group-version-kindNLversion: v1beta1 +group: apiextensions.k8s.io +kind: CustomResourceDefinition +*Ó +apiextensions_v1beta1!delete a CustomResourceDefinition*2deleteApiextensionsV1beta1CustomResourceDefinition2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string J» +L +200E +C +OK= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status +R +202K +I +Accepted= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status + +401 + + UnauthorizedRhttpsj +x-kubernetes-action delete +jq +x-kubernetes-group-version-kindNLversion: v1beta1 +group: apiextensions.k8s.io +kind: CustomResourceDefinition +Bñ +apiextensions_v1beta17partially update the specified CustomResourceDefinition*1patchApiextensionsV1beta1CustomResourceDefinition2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json-patch+json:application/merge-patch+json:&application/strategic-merge-patch+json:application/apply-patch+yamlBN +L +Jbodybody *: +8#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.PatchBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B¯ +¬©¦queryƒfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch)." fieldManager2string BÎ +ËÈÅquery¨Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests."force2boolean J’ + +401 + + Unauthorized +w +200p +n +OKh +f +d#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1beta1.CustomResourceDefinitionRhttpsj +x-kubernetes-actionpatch +jq +x-kubernetes-group-version-kindNLgroup: apiextensions.k8s.io +kind: CustomResourceDefinition +version: v1beta1 +JE +CA"?path$name of the CustomResourceDefinition"name*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Œ) +5/apis/batch/v1/namespaces/{namespace}/cronjobs/{name}Ò(ß +batch_v1read the specified CronJob*readBatchV1NamespacedCronJob2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*JW +< +2005 +3 +OK- ++ +)#/definitions/io.k8s.api.batch.v1.CronJob + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionget +jL +x-kubernetes-group-version-kind)'group: batch +kind: CronJob +version: v1 +¤ +batch_v1replace the specified CronJob*replaceBatchV1NamespacedCronJob2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*B? += +;bodybody *+ +)#/definitions/io.k8s.api.batch.v1.CronJobBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string Jš +< +2005 +3 +OK- ++ +)#/definitions/io.k8s.api.batch.v1.CronJob +A +201: +8 +Created- ++ +)#/definitions/io.k8s.api.batch.v1.CronJob + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionput +jL +x-kubernetes-group-version-kind)'group: batch +kind: CronJob +version: v1 +*ü +batch_v1delete a CronJob*deleteBatchV1NamespacedCronJob2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string J» +L +200E +C +OK= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status +R +202K +I +Accepted= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status + +401 + + UnauthorizedRhttpsj +x-kubernetes-action delete +jL +x-kubernetes-group-version-kind)'group: batch +kind: CronJob +version: v1 +BÞ +batch_v1&partially update the specified CronJob*patchBatchV1NamespacedCronJob2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json-patch+json:application/merge-patch+json:&application/strategic-merge-patch+json:application/apply-patch+yamlBN +L +Jbodybody *: +8#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.PatchBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B¯ +¬©¦queryƒfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch)." fieldManager2string BÎ +ËÈÅquery¨Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests."force2boolean JW +< +2005 +3 +OK- ++ +)#/definitions/io.k8s.api.batch.v1.CronJob + +401 + + UnauthorizedRhttpsjL +x-kubernetes-group-version-kind)'kind: CronJob +version: v1 +group: batch +j +x-kubernetes-actionpatch +J4 +20".pathname of the CronJob"name*string˜J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string ›( +5/apis/scheduling.k8s.io/v1beta1/watch/priorityclassesá'Õ +scheduling_v1beta1ywatch individual changes to a list of PriorityClass. deprecated: use the 'watch' parameter with a list operation instead.*'watchSchedulingV1beta1PriorityClassList2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsjc +x-kubernetes-group-version-kind@>kind: PriorityClass +version: v1beta1 +group: scheduling.k8s.io +j# +x-kubernetes-action  +watchlist +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean ý] +./apis/storage.k8s.io/v1beta1/volumeattachmentsÊ]µ& +storage_v1beta1.list or watch objects of kind VolumeAttachment*"listStorageV1beta1VolumeAttachment2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*B‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Bï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string B‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string B‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Bú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer Bû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string BÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Bž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer B± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.api.storage.v1beta1.VolumeAttachmentList + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionlist +jc +x-kubernetes-group-version-kind@>group: storage.k8s.io +kind: VolumeAttachment +version: v1beta1 +"È +storage_v1beta1create a VolumeAttachment*$createStorageV1beta1VolumeAttachment2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BO +M +Kbodybody *; +9#/definitions/io.k8s.api.storage.v1beta1.VolumeAttachmentBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string JŽ +Q +201J +H +Created= +; +9#/definitions/io.k8s.api.storage.v1beta1.VolumeAttachment +R +202K +I +Accepted= +; +9#/definitions/io.k8s.api.storage.v1beta1.VolumeAttachment + +401 + + Unauthorized +L +200E +C +OK= +; +9#/definitions/io.k8s.api.storage.v1beta1.VolumeAttachmentRhttpsj +x-kubernetes-actionpost +jc +x-kubernetes-group-version-kind@>kind: VolumeAttachment +version: v1beta1 +group: storage.k8s.io +*ó, +storage_v1beta1%delete collection of VolumeAttachment*.deleteStorageV1beta1CollectionVolumeAttachment2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string Bž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer B‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Bú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string Bû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string BÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Bž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer Jg + +401 + + Unauthorized +L +200E +C +OK= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.StatusRhttpsj* +x-kubernetes-actiondeletecollection +jc +x-kubernetes-group-version-kind@>version: v1beta1 +group: storage.k8s.io +kind: VolumeAttachment +JO +MKIquery-If 'true', then the output is pretty printed."pretty2string H +/logs/>< +logs*logFileListHandlerJ + +401 + + UnauthorizedRhttpsˆ] +(/api/v1/namespaces/{namespace}/endpointsÛ\ú% +core_v1'list or watch objects of kind Endpoints*listCoreV1NamespacedEndpoints2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*B‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Bï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string B‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string B‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Bú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer Bû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string BÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Bž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer B± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean J\ +A +200: +8 +OK2 +0 +.#/definitions/io.k8s.api.core.v1.EndpointsList + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionlist +jK +x-kubernetes-group-version-kind(&group: "" +kind: Endpoints +version: v1 +"Þ +core_v1create Endpoints*createCoreV1NamespacedEndpoints2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*B@ +> +<bodybody *, +*#/definitions/io.k8s.api.core.v1.EndpointsBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string Já + +401 + + Unauthorized += +2006 +4 +OK. +, +*#/definitions/io.k8s.api.core.v1.Endpoints +B +201; +9 +Created. +, +*#/definitions/io.k8s.api.core.v1.Endpoints +C +202< +: +Accepted. +, +*#/definitions/io.k8s.api.core.v1.EndpointsRhttpsj +x-kubernetes-actionpost +jK +x-kubernetes-group-version-kind(&kind: Endpoints +version: v1 +group: "" +*Ç, +core_v1delete collection of Endpoints*)deleteCoreV1CollectionNamespacedEndpoints2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string Bž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer B‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Bú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string Bû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string BÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Bž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer Jg +L +200E +C +OK= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status + +401 + + UnauthorizedRhttpsj* +x-kubernetes-actiondeletecollection +jK +x-kubernetes-group-version-kind(&group: "" +kind: Endpoints +version: v1 +J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Ò +E/apis/certificates.k8s.io/v1/certificatesigningrequests/{name}/statusˆÐ +certificates_v16read status of the specified CertificateSigningRequest*1readCertificatesV1CertificateSigningRequestStatus2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*Jp +U +200N +L +OKF +D +B#/definitions/io.k8s.api.certificates.v1.CertificateSigningRequest + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionget +jl +x-kubernetes-group-version-kindIGgroup: certificates.k8s.io +kind: CertificateSigningRequest +version: v1 +Ç +certificates_v19replace status of the specified CertificateSigningRequest*4replaceCertificatesV1CertificateSigningRequestStatus2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BX +V +Tbodybody *D +B#/definitions/io.k8s.api.certificates.v1.CertificateSigningRequestBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string JÌ +U +200N +L +OKF +D +B#/definitions/io.k8s.api.certificates.v1.CertificateSigningRequest +Z +201S +Q +CreatedF +D +B#/definitions/io.k8s.api.certificates.v1.CertificateSigningRequest + +401 + + UnauthorizedRhttpsjl +x-kubernetes-group-version-kindIGgroup: certificates.k8s.io +kind: CertificateSigningRequest +version: v1 +j +x-kubernetes-actionput +BÏ +certificates_v1Bpartially update status of the specified CertificateSigningRequest*2patchCertificatesV1CertificateSigningRequestStatus2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json-patch+json:application/merge-patch+json:&application/strategic-merge-patch+json:application/apply-patch+yamlBN +L +Jbodybody *: +8#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.PatchBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B¯ +¬©¦queryƒfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch)." fieldManager2string BÎ +ËÈÅquery¨Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests."force2boolean Jp +U +200N +L +OKF +D +B#/definitions/io.k8s.api.certificates.v1.CertificateSigningRequest + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionpatch +jl +x-kubernetes-group-version-kindIGgroup: certificates.k8s.io +kind: CertificateSigningRequest +version: v1 +JF +DB"@path%name of the CertificateSigningRequest"name*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string ö) +6/apis/rbac.authorization.k8s.io/v1/clusterroles/{name}») +rbacAuthorization_v1read the specified ClusterRole*"readRbacAuthorizationV1ClusterRole2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*JZ +? +2008 +6 +OK0 +. +,#/definitions/io.k8s.api.rbac.v1.ClusterRole + +401 + + UnauthorizedRhttpsjd +x-kubernetes-group-version-kindA?group: rbac.authorization.k8s.io +kind: ClusterRole +version: v1 +j +x-kubernetes-actionget +Û +rbacAuthorization_v1!replace the specified ClusterRole*%replaceRbacAuthorizationV1ClusterRole2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BB +@ +>bodybody *. +,#/definitions/io.k8s.api.rbac.v1.ClusterRoleBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string J  +? +2008 +6 +OK0 +. +,#/definitions/io.k8s.api.rbac.v1.ClusterRole +D +201= +; +Created0 +. +,#/definitions/io.k8s.api.rbac.v1.ClusterRole + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionput +jd +x-kubernetes-group-version-kindA?group: rbac.authorization.k8s.io +kind: ClusterRole +version: v1 +*ª +rbacAuthorization_v1delete a ClusterRole*$deleteRbacAuthorizationV1ClusterRole2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string J» +R +202K +I +Accepted= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status + +401 + + Unauthorized +L +200E +C +OK= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.StatusRhttpsj +x-kubernetes-action delete +jd +x-kubernetes-group-version-kindA?version: v1 +group: rbac.authorization.k8s.io +kind: ClusterRole +B +rbacAuthorization_v1*partially update the specified ClusterRole*#patchRbacAuthorizationV1ClusterRole2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json-patch+json:application/merge-patch+json:&application/strategic-merge-patch+json:application/apply-patch+yamlBN +L +Jbodybody *: +8#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.PatchBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B¯ +¬©¦queryƒfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch)." fieldManager2string BÎ +ËÈÅquery¨Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests."force2boolean JZ +? +2008 +6 +OK0 +. +,#/definitions/io.k8s.api.rbac.v1.ClusterRole + +401 + + UnauthorizedRhttpsjd +x-kubernetes-group-version-kindA?group: rbac.authorization.k8s.io +kind: ClusterRole +version: v1 +j +x-kubernetes-actionpatch +J8 +64"2pathname of the ClusterRole"name*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string ñ& +/api/v1/componentstatusesÓ&Ç +core_v1$list objects of kind ComponentStatus*listCoreV1ComponentStatus2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jb +G +200@ +> +OK8 +6 +4#/definitions/io.k8s.api.core.v1.ComponentStatusList + +401 + + UnauthorizedRhttpsjQ +x-kubernetes-group-version-kind.,group: "" +kind: ComponentStatus +version: v1 +j +x-kubernetes-actionlist +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean Ý +/apis/batch/v1/ÉÆ +batch_v1get available resources*getBatchV1APIResources2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json:application/yaml:#application/vnd.kubernetes.protobufJp +U +200N +L +OKF +D +B#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.APIResourceList + +401 + + UnauthorizedRhttps·' +-/apis/rbac.authorization.k8s.io/v1beta1/roles…'ù +rbacAuthorization_v1beta1"list or watch objects of kind Role*0listRbacAuthorizationV1beta1RoleForAllNamespaces2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*J\ + +401 + + Unauthorized +A +200: +8 +OK2 +0 +.#/definitions/io.k8s.api.rbac.v1beta1.RoleListRhttpsj +x-kubernetes-actionlist +jb +x-kubernetes-group-version-kind?=group: rbac.authorization.k8s.io +kind: Role +version: v1beta1 +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean Ù( +-/api/v1/namespaces/{namespace}/secrets/{name}§(Õ +core_v1read the specified Secret*readCoreV1NamespacedSecret2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*JU +: +2003 +1 +OK+ +) +'#/definitions/io.k8s.api.core.v1.Secret + +401 + + UnauthorizedRhttpsjH +x-kubernetes-group-version-kind%#version: v1 +group: "" +kind: Secret +j +x-kubernetes-actionget +– +core_v1replace the specified Secret*replaceCoreV1NamespacedSecret2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*B= +; +9bodybody *) +'#/definitions/io.k8s.api.core.v1.SecretBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string J– +: +2003 +1 +OK+ +) +'#/definitions/io.k8s.api.core.v1.Secret +? +2018 +6 +Created+ +) +'#/definitions/io.k8s.api.core.v1.Secret + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionput +jH +x-kubernetes-group-version-kind%#group: "" +kind: Secret +version: v1 +*ô +core_v1delete a Secret*deleteCoreV1NamespacedSecret2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string J» +L +200E +C +OK= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status +R +202K +I +Accepted= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status + +401 + + UnauthorizedRhttpsj +x-kubernetes-action delete +jH +x-kubernetes-group-version-kind%#group: "" +kind: Secret +version: v1 +BÔ +core_v1%partially update the specified Secret*patchCoreV1NamespacedSecret2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json-patch+json:application/merge-patch+json:&application/strategic-merge-patch+json:application/apply-patch+yamlBN +L +Jbodybody *: +8#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.PatchBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B¯ +¬©¦queryƒfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch)." fieldManager2string BÎ +ËÈÅquery¨Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests."force2boolean JU +: +2003 +1 +OK+ +) +'#/definitions/io.k8s.api.core.v1.Secret + +401 + + UnauthorizedRhttpsjH +x-kubernetes-group-version-kind%#group: "" +kind: Secret +version: v1 +j +x-kubernetes-actionpatch +J3 +1/"-pathname of the Secret"name*string˜J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Ø' +/api/v1/watch/configmaps»'¯ +core_v1uwatch individual changes to a list of ConfigMap. deprecated: use the 'watch' parameter with a list operation instead.*(watchCoreV1ConfigMapListForAllNamespaces2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsj# +x-kubernetes-action  +watchlist +jK +x-kubernetes-group-version-kind(&group: "" +kind: ConfigMap +version: v1 +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean Ó( +B/apis/apiextensions.k8s.io/v1beta1/watch/customresourcedefinitionsŒ(€ +apiextensions_v1beta1„watch individual changes to a list of CustomResourceDefinition. deprecated: use the 'watch' parameter with a list operation instead.*5watchApiextensionsV1beta1CustomResourceDefinitionList2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsj# +x-kubernetes-action  +watchlist +jq +x-kubernetes-group-version-kindNLgroup: apiextensions.k8s.io +kind: CustomResourceDefinition +version: v1beta1 +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean »( ++/api/v1/watch/namespaces/{namespace}/events‹( +core_v1qwatch individual changes to a list of Event. deprecated: use the 'watch' parameter with a list operation instead.*watchCoreV1NamespacedEventList2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsj# +x-kubernetes-action  +watchlist +jG +x-kubernetes-group-version-kind$"version: v1 +group: "" +kind: Event +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean á +/apis/node.k8s.io/v1/ÇÄ +node_v1get available resources*getNodeV1APIResources2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json:application/yaml:#application/vnd.kubernetes.protobufJp + +401 + + Unauthorized +U +200N +L +OKF +D +B#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.APIResourceListRhttpsÜ& +/api/v1/secretsÈ&¼ +core_v1$list or watch objects of kind Secret* listCoreV1SecretForAllNamespaces2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*JY +> +2007 +5 +OK/ +- ++#/definitions/io.k8s.api.core.v1.SecretList + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionlist +jH +x-kubernetes-group-version-kind%#group: "" +kind: Secret +version: v1 +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean È' +/api/v1/watch/events¯'£ +core_v1qwatch individual changes to a list of Event. deprecated: use the 'watch' parameter with a list operation instead.*$watchCoreV1EventListForAllNamespaces2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsj# +x-kubernetes-action  +watchlist +jG +x-kubernetes-group-version-kind$"group: "" +kind: Event +version: v1 +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean Ë( +//api/v1/watch/namespaces/{namespace}/configmaps—(© +core_v1uwatch individual changes to a list of ConfigMap. deprecated: use the 'watch' parameter with a list operation instead.*"watchCoreV1NamespacedConfigMapList2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsjK +x-kubernetes-group-version-kind(&group: "" +kind: ConfigMap +version: v1 +j# +x-kubernetes-action  +watchlist +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean Ü' +-/apis/autoscaling/v1/horizontalpodautoscalersª'ž +autoscaling_v15list or watch objects of kind HorizontalPodAutoscaler*8listAutoscalingV1HorizontalPodAutoscalerForAllNamespaces2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jq +V +200O +M +OKG +E +C#/definitions/io.k8s.api.autoscaling.v1.HorizontalPodAutoscalerList + +401 + + UnauthorizedRhttpsjb +x-kubernetes-group-version-kind?=kind: HorizontalPodAutoscaler +version: v1 +group: autoscaling +j +x-kubernetes-actionlist +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean Ì( +A/apis/rbac.authorization.k8s.io/v1beta1/watch/clusterrolebindings†(ú +rbacAuthorization_v1beta1~watch individual changes to a list of ClusterRoleBinding. deprecated: use the 'watch' parameter with a list operation instead.*3watchRbacAuthorizationV1beta1ClusterRoleBindingList2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsjp +x-kubernetes-group-version-kindMKkind: ClusterRoleBinding +version: v1beta1 +group: rbac.authorization.k8s.io +j# +x-kubernetes-action  +watchlist +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean ð& +/api/v1/limitrangesØ&Ì +core_v1(list or watch objects of kind LimitRange*$listCoreV1LimitRangeForAllNamespaces2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*J] +B +200; +9 +OK3 +1 +/#/definitions/io.k8s.api.core.v1.LimitRangeList + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionlist +jL +x-kubernetes-group-version-kind)'group: "" +kind: LimitRange +version: v1 +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean ±\ +#/api/v1/namespaces/{namespace}/pods‰\â% +core_v1!list or watch objects of kind Pod*listCoreV1NamespacedPod2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*B‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Bï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string B‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string B‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Bú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer Bû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string BÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Bž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer B± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean JV + +401 + + Unauthorized +; +2004 +2 +OK, +* +(#/definitions/io.k8s.api.core.v1.PodListRhttpsj +x-kubernetes-actionlist +jE +x-kubernetes-group-version-kind" group: "" +kind: Pod +version: v1 +"¶ +core_v1 create a Pod*createCoreV1NamespacedPod2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*B: +8 +6bodybody *& +$#/definitions/io.k8s.api.core.v1.PodBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string JÏ +< +2015 +3 +Created( +& +$#/definitions/io.k8s.api.core.v1.Pod += +2026 +4 +Accepted( +& +$#/definitions/io.k8s.api.core.v1.Pod + +401 + + Unauthorized +7 +2000 +. +OK( +& +$#/definitions/io.k8s.api.core.v1.PodRhttpsj +x-kubernetes-actionpost +jE +x-kubernetes-group-version-kind" group: "" +kind: Pod +version: v1 +*µ, +core_v1delete collection of Pod*#deleteCoreV1CollectionNamespacedPod2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string Bž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer B‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Bú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string Bû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string BÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Bž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer Jg + +401 + + Unauthorized +L +200E +C +OK= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.StatusRhttpsjE +x-kubernetes-group-version-kind" group: "" +kind: Pod +version: v1 +j* +x-kubernetes-actiondeletecollection +J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string µ] +1/apis/apps/v1/namespaces/{namespace}/statefulsetsÿ\„& +apps_v1)list or watch objects of kind StatefulSet*listAppsV1NamespacedStatefulSet2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*B‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Bï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string B‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string B‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Bú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer Bû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string BÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Bž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer B± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean J^ + +401 + + Unauthorized +C +200< +: +OK4 +2 +0#/definitions/io.k8s.api.apps.v1.StatefulSetListRhttpsj +x-kubernetes-actionlist +jO +x-kubernetes-group-version-kind,*group: apps +kind: StatefulSet +version: v1 +"ð +apps_v1create a StatefulSet*!createAppsV1NamespacedStatefulSet2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BB +@ +>bodybody *. +,#/definitions/io.k8s.api.apps.v1.StatefulSetBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string Jç +? +2008 +6 +OK0 +. +,#/definitions/io.k8s.api.apps.v1.StatefulSet +D +201= +; +Created0 +. +,#/definitions/io.k8s.api.apps.v1.StatefulSet +E +202> +< +Accepted0 +. +,#/definitions/io.k8s.api.apps.v1.StatefulSet + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionpost +jO +x-kubernetes-group-version-kind,*group: apps +kind: StatefulSet +version: v1 +*Ï, +apps_v1 delete collection of StatefulSet*+deleteAppsV1CollectionNamespacedStatefulSet2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string Bž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer B‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Bú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string Bû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string BÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Bž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer Jg +L +200E +C +OK= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status + +401 + + UnauthorizedRhttpsj* +x-kubernetes-actiondeletecollection +jO +x-kubernetes-group-version-kind,*kind: StatefulSet +version: v1 +group: apps +J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string †( +//apis/storage.k8s.io/v1/watch/volumeattachmentsÒ'Æ + +storage_v1|watch individual changes to a list of VolumeAttachment. deprecated: use the 'watch' parameter with a list operation instead.*"watchStorageV1VolumeAttachmentList2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk + +401 + + Unauthorized +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEventRhttpsj# +x-kubernetes-action  +watchlist +j^ +x-kubernetes-group-version-kind;9group: storage.k8s.io +kind: VolumeAttachment +version: v1 +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean ó) +E/apis/apps/v1/watch/namespaces/{namespace}/controllerrevisions/{name}©)ú +apps_v1¹watch changes to an object of kind ControllerRevision. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.*'watchAppsV1NamespacedControllerRevision2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsjV +x-kubernetes-group-version-kind31group: apps +kind: ControllerRevision +version: v1 +j +x-kubernetes-actionwatch +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer J? +=;"9pathname of the ControllerRevision"name*string˜J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean ˆ] +./apis/batch/v1/namespaces/{namespace}/cronjobsÕ\ø% +batch_v1%list or watch objects of kind CronJob*listBatchV1NamespacedCronJob2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*B‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Bï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string B‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string B‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Bú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer Bû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string BÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Bž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer B± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean J[ +@ +2009 +7 +OK1 +/ +-#/definitions/io.k8s.api.batch.v1.CronJobList + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionlist +jL +x-kubernetes-group-version-kind)'group: batch +kind: CronJob +version: v1 +"Û +batch_v1create a CronJob*createBatchV1NamespacedCronJob2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*B? += +;bodybody *+ +)#/definitions/io.k8s.api.batch.v1.CronJobBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string JÞ +B +202; +9 +Accepted- ++ +)#/definitions/io.k8s.api.batch.v1.CronJob + +401 + + Unauthorized +< +2005 +3 +OK- ++ +)#/definitions/io.k8s.api.batch.v1.CronJob +A +201: +8 +Created- ++ +)#/definitions/io.k8s.api.batch.v1.CronJobRhttpsj +x-kubernetes-actionpost +jL +x-kubernetes-group-version-kind)'group: batch +kind: CronJob +version: v1 +*Æ, +batch_v1delete collection of CronJob*(deleteBatchV1CollectionNamespacedCronJob2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string Bž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer B‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Bú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string Bû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string BÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Bž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer Jg +L +200E +C +OK= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status + +401 + + UnauthorizedRhttpsjL +x-kubernetes-group-version-kind)'group: batch +kind: CronJob +version: v1 +j* +x-kubernetes-actiondeletecollection +J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string ù + /apis/rbac.authorization.k8s.io/ÔÑ +rbacAuthorizationget information of a group*getRbacAuthorizationAPIGroup2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json:application/yaml:#application/vnd.kubernetes.protobufJi +N +200G +E +OK? += +;#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.APIGroup + +401 + + UnauthorizedRhttps´/ +/api/v1/namespaces/ð% +core_v1'list or watch objects of kind Namespace*listCoreV1Namespace2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*B‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Bï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string B‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string B‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Bú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer Bû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string BÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Bž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer B± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean J\ +A +200: +8 +OK2 +0 +.#/definitions/io.k8s.api.core.v1.NamespaceList + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionlist +jK +x-kubernetes-group-version-kind(&group: "" +kind: Namespace +version: v1 +"Ö +core_v1create a Namespace*createCoreV1Namespace2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*B@ +> +<bodybody *, +*#/definitions/io.k8s.api.core.v1.NamespaceBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string Já += +2006 +4 +OK. +, +*#/definitions/io.k8s.api.core.v1.Namespace +B +201; +9 +Created. +, +*#/definitions/io.k8s.api.core.v1.Namespace +C +202< +: +Accepted. +, +*#/definitions/io.k8s.api.core.v1.Namespace + +401 + + UnauthorizedRhttpsjK +x-kubernetes-group-version-kind(&version: v1 +group: "" +kind: Namespace +j +x-kubernetes-actionpost +JO +MKIquery-If 'true', then the output is pretty printed."pretty2string ©] ++/api/v1/namespaces/{namespace}/podtemplatesù\‚& +core_v1)list or watch objects of kind PodTemplate*listCoreV1NamespacedPodTemplate2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*B‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Bï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string B‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string B‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Bú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer Bû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string BÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Bž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer B± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean J^ +C +200< +: +OK4 +2 +0#/definitions/io.k8s.api.core.v1.PodTemplateList + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionlist +jM +x-kubernetes-group-version-kind*(group: "" +kind: PodTemplate +version: v1 +"î +core_v1create a PodTemplate*!createCoreV1NamespacedPodTemplate2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BB +@ +>bodybody *. +,#/definitions/io.k8s.api.core.v1.PodTemplateBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string Jç +? +2008 +6 +OK0 +. +,#/definitions/io.k8s.api.core.v1.PodTemplate +D +201= +; +Created0 +. +,#/definitions/io.k8s.api.core.v1.PodTemplate +E +202> +< +Accepted0 +. +,#/definitions/io.k8s.api.core.v1.PodTemplate + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionpost +jM +x-kubernetes-group-version-kind*(group: "" +kind: PodTemplate +version: v1 +*Í, +core_v1 delete collection of PodTemplate*+deleteCoreV1CollectionNamespacedPodTemplate2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string Bž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer B‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Bú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string Bû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string BÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Bž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer Jg +L +200E +C +OK= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status + +401 + + UnauthorizedRhttpsj* +x-kubernetes-actiondeletecollection +jM +x-kubernetes-group-version-kind*(group: "" +kind: PodTemplate +version: v1 +J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Ú& +/apis/batch/v1/jobsÂ&¶ +batch_v1!list or watch objects of kind Job*listBatchV1JobForAllNamespaces2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*JW +< +2005 +3 +OK- ++ +)#/definitions/io.k8s.api.batch.v1.JobList + +401 + + UnauthorizedRhttpsjH +x-kubernetes-group-version-kind%#version: v1 +group: batch +kind: Job +j +x-kubernetes-actionlist +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean ¡' +"/apis/extensions/v1beta1/ingressesú&î +extensions_v1beta1%list or watch objects of kind Ingress*,listExtensionsV1beta1IngressForAllNamespaces2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Je +J +200C +A +OK; +9 +7#/definitions/io.k8s.api.extensions.v1beta1.IngressList + +401 + + UnauthorizedRhttpsjV +x-kubernetes-group-version-kind31group: extensions +kind: Ingress +version: v1beta1 +j +x-kubernetes-actionlist +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean …( +(/apis/extensions/v1beta1/watch/ingressesØ'Ì +extensions_v1beta1swatch individual changes to a list of Ingress. deprecated: use the 'watch' parameter with a list operation instead.*1watchExtensionsV1beta1IngressListForAllNamespaces2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsj# +x-kubernetes-action  +watchlist +jV +x-kubernetes-group-version-kind31kind: Ingress +version: v1beta1 +group: extensions +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean ‡+ +=/apis/flowcontrol.apiserver.k8s.io/v1beta1/flowschemas/{name}Å*° +flowcontrolApiserver_v1beta1read the specified FlowSchema*)readFlowcontrolApiserverV1beta1FlowSchema2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*Je +J +200C +A +OK; +9 +7#/definitions/io.k8s.api.flowcontrol.v1beta1.FlowSchema + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionget +jk +x-kubernetes-group-version-kindHFgroup: flowcontrol.apiserver.k8s.io +kind: FlowSchema +version: v1beta1 +‘ +flowcontrolApiserver_v1beta1 replace the specified FlowSchema*,replaceFlowcontrolApiserverV1beta1FlowSchema2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BM +K +Ibodybody *9 +7#/definitions/io.k8s.api.flowcontrol.v1beta1.FlowSchemaBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string J¶ +J +200C +A +OK; +9 +7#/definitions/io.k8s.api.flowcontrol.v1beta1.FlowSchema +O +201H +F +Created; +9 +7#/definitions/io.k8s.api.flowcontrol.v1beta1.FlowSchema + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionput +jk +x-kubernetes-group-version-kindHFgroup: flowcontrol.apiserver.k8s.io +kind: FlowSchema +version: v1beta1 +*¿ +flowcontrolApiserver_v1beta1delete a FlowSchema*+deleteFlowcontrolApiserverV1beta1FlowSchema2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string J» + +401 + + Unauthorized +L +200E +C +OK= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status +R +202K +I +Accepted= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.StatusRhttpsjk +x-kubernetes-group-version-kindHFgroup: flowcontrol.apiserver.k8s.io +kind: FlowSchema +version: v1beta1 +j +x-kubernetes-action delete +B¯ +flowcontrolApiserver_v1beta1)partially update the specified FlowSchema**patchFlowcontrolApiserverV1beta1FlowSchema2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json-patch+json:application/merge-patch+json:&application/strategic-merge-patch+json:application/apply-patch+yamlBN +L +Jbodybody *: +8#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.PatchBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B¯ +¬©¦queryƒfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch)." fieldManager2string BÎ +ËÈÅquery¨Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests."force2boolean Je +J +200C +A +OK; +9 +7#/definitions/io.k8s.api.flowcontrol.v1beta1.FlowSchema + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionpatch +jk +x-kubernetes-group-version-kindHFgroup: flowcontrol.apiserver.k8s.io +kind: FlowSchema +version: v1beta1 +J7 +53"1pathname of the FlowSchema"name*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string —( +0/apis/networking.k8s.io/v1/watch/networkpoliciesâ'Ö + networking_v1ywatch individual changes to a list of NetworkPolicy. deprecated: use the 'watch' parameter with a list operation instead.*2watchNetworkingV1NetworkPolicyListForAllNamespaces2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsj# +x-kubernetes-action  +watchlist +j^ +x-kubernetes-group-version-kind;9group: networking.k8s.io +kind: NetworkPolicy +version: v1 +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean ÿ' +./apis/node.k8s.io/v1beta1/watch/runtimeclassesÌ'À + node_v1beta1xwatch individual changes to a list of RuntimeClass. deprecated: use the 'watch' parameter with a list operation instead.* watchNodeV1beta1RuntimeClassList2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsj# +x-kubernetes-action  +watchlist +j\ +x-kubernetes-group-version-kind97group: node.k8s.io +kind: RuntimeClass +version: v1beta1 +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean · +;/apis/authorization.k8s.io/v1beta1/selfsubjectaccessreviews÷ +"é +authorization_v1beta1 create a SelfSubjectAccessReview*1createAuthorizationV1beta1SelfSubjectAccessReview2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*B\ +Z +Xbodybody *H +F#/definitions/io.k8s.api.authorization.v1beta1.SelfSubjectAccessReviewJµ +_ +202X +V +AcceptedJ +H +F#/definitions/io.k8s.api.authorization.v1beta1.SelfSubjectAccessReview + +401 + + Unauthorized +Y +200R +P +OKJ +H +F#/definitions/io.k8s.api.authorization.v1beta1.SelfSubjectAccessReview +^ +201W +U +CreatedJ +H +F#/definitions/io.k8s.api.authorization.v1beta1.SelfSubjectAccessReviewRhttpsj +x-kubernetes-actionpost +jp +x-kubernetes-group-version-kindMKversion: v1beta1 +group: authorization.k8s.io +kind: SelfSubjectAccessReview +Jž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string J– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string JO +MKIquery-If 'true', then the output is pretty printed."pretty2string õ' +2/apis/autoscaling/v2beta1/horizontalpodautoscalers¾'² +autoscaling_v2beta15list or watch objects of kind HorizontalPodAutoscaler*=listAutoscalingV2beta1HorizontalPodAutoscalerForAllNamespaces2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jv + +401 + + Unauthorized +[ +200T +R +OKL +J +H#/definitions/io.k8s.api.autoscaling.v2beta1.HorizontalPodAutoscalerListRhttpsj +x-kubernetes-actionlist +jg +x-kubernetes-group-version-kindDBgroup: autoscaling +kind: HorizontalPodAutoscaler +version: v2beta1 +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean ' +"/apis/events.k8s.io/v1beta1/eventsé&Ý +events_v1beta1#list or watch objects of kind Event*&listEventsV1beta1EventForAllNamespaces2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*J_ +D +200= +; +OK5 +3 +1#/definitions/io.k8s.api.events.v1beta1.EventList + +401 + + UnauthorizedRhttpsjW +x-kubernetes-group-version-kind42group: events.k8s.io +kind: Event +version: v1beta1 +j +x-kubernetes-actionlist +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean Ü' +2/apis/storage.k8s.io/v1alpha1/csistoragecapacities¥'™ +storage_v1alpha10list or watch objects of kind CSIStorageCapacity*5listStorageV1alpha1CSIStorageCapacityForAllNamespaces2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jn + +401 + + Unauthorized +S +200L +J +OKD +B +@#/definitions/io.k8s.api.storage.v1alpha1.CSIStorageCapacityListRhttpsj +x-kubernetes-actionlist +jf +x-kubernetes-group-version-kindCAkind: CSIStorageCapacity +version: v1alpha1 +group: storage.k8s.io +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean —+ +M/apis/rbac.authorization.k8s.io/v1/namespaces/{namespace}/rolebindings/{name}Å*š +rbacAuthorization_v1read the specified RoleBinding*,readRbacAuthorizationV1NamespacedRoleBinding2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*JZ +? +2008 +6 +OK0 +. +,#/definitions/io.k8s.api.rbac.v1.RoleBinding + +401 + + UnauthorizedRhttpsjd +x-kubernetes-group-version-kindA?group: rbac.authorization.k8s.io +kind: RoleBinding +version: v1 +j +x-kubernetes-actionget +å +rbacAuthorization_v1!replace the specified RoleBinding*/replaceRbacAuthorizationV1NamespacedRoleBinding2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BB +@ +>bodybody *. +,#/definitions/io.k8s.api.rbac.v1.RoleBindingBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string J  +? +2008 +6 +OK0 +. +,#/definitions/io.k8s.api.rbac.v1.RoleBinding +D +201= +; +Created0 +. +,#/definitions/io.k8s.api.rbac.v1.RoleBinding + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionput +jd +x-kubernetes-group-version-kindA?group: rbac.authorization.k8s.io +kind: RoleBinding +version: v1 +*´ +rbacAuthorization_v1delete a RoleBinding*.deleteRbacAuthorizationV1NamespacedRoleBinding2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string J» + +401 + + Unauthorized +L +200E +C +OK= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status +R +202K +I +Accepted= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.StatusRhttpsj +x-kubernetes-action delete +jd +x-kubernetes-group-version-kindA?group: rbac.authorization.k8s.io +kind: RoleBinding +version: v1 +B™ +rbacAuthorization_v1*partially update the specified RoleBinding*-patchRbacAuthorizationV1NamespacedRoleBinding2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json-patch+json:application/merge-patch+json:&application/strategic-merge-patch+json:application/apply-patch+yamlBN +L +Jbodybody *: +8#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.PatchBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B¯ +¬©¦queryƒfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch)." fieldManager2string BÎ +ËÈÅquery¨Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests."force2boolean JZ +? +2008 +6 +OK0 +. +,#/definitions/io.k8s.api.rbac.v1.RoleBinding + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionpatch +jd +x-kubernetes-group-version-kindA?group: rbac.authorization.k8s.io +kind: RoleBinding +version: v1 +J8 +64"2pathname of the RoleBinding"name*string˜J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string ¬* +Y/apis/rbac.authorization.k8s.io/v1alpha1/watch/namespaces/{namespace}/rolebindings/{name}Î)¦ +rbacAuthorization_v1alpha1²watch changes to an object of kind RoleBinding. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.*3watchRbacAuthorizationV1alpha1NamespacedRoleBinding2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionwatch +jj +x-kubernetes-group-version-kindGEgroup: rbac.authorization.k8s.io +kind: RoleBinding +version: v1alpha1 +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer J8 +64"2pathname of the RoleBinding"name*string˜J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean Ç] +-/api/v1/namespaces/{namespace}/resourcequotas•]Š& +core_v1+list or watch objects of kind ResourceQuota*!listCoreV1NamespacedResourceQuota2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*B‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Bï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string B‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string B‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Bú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer Bû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string BÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Bž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer B± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean J` +E +200> +< +OK6 +4 +2#/definitions/io.k8s.api.core.v1.ResourceQuotaList + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionlist +jO +x-kubernetes-group-version-kind,*group: "" +kind: ResourceQuota +version: v1 +"ü +core_v1create a ResourceQuota*#createCoreV1NamespacedResourceQuota2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BD +B +@bodybody *0 +.#/definitions/io.k8s.api.core.v1.ResourceQuotaBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string Jí +A +200: +8 +OK2 +0 +.#/definitions/io.k8s.api.core.v1.ResourceQuota +F +201? += +Created2 +0 +.#/definitions/io.k8s.api.core.v1.ResourceQuota +G +202@ +> +Accepted2 +0 +.#/definitions/io.k8s.api.core.v1.ResourceQuota + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionpost +jO +x-kubernetes-group-version-kind,*group: "" +kind: ResourceQuota +version: v1 +*Ó, +core_v1"delete collection of ResourceQuota*-deleteCoreV1CollectionNamespacedResourceQuota2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string Bž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer B‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Bú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string Bû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string BÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Bž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer Jg +L +200E +C +OK= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status + +401 + + UnauthorizedRhttpsjO +x-kubernetes-group-version-kind,*group: "" +kind: ResourceQuota +version: v1 +j* +x-kubernetes-actiondeletecollection +J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string ‚- +P/apis/autoscaling/v2beta2/namespaces/{namespace}/horizontalpodautoscalers/{name}­,Ë +autoscaling_v2beta2*read the specified HorizontalPodAutoscaler*7readAutoscalingV2beta2NamespacedHorizontalPodAutoscaler2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*Jr +W +200P +N +OKH +F +D#/definitions/io.k8s.api.autoscaling.v2beta2.HorizontalPodAutoscaler + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionget +jg +x-kubernetes-group-version-kindDBgroup: autoscaling +kind: HorizontalPodAutoscaler +version: v2beta2 +Æ +autoscaling_v2beta2-replace the specified HorizontalPodAutoscaler*:replaceAutoscalingV2beta2NamespacedHorizontalPodAutoscaler2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BZ +X +Vbodybody *F +D#/definitions/io.k8s.api.autoscaling.v2beta2.HorizontalPodAutoscalerBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string JÐ +W +200P +N +OKH +F +D#/definitions/io.k8s.api.autoscaling.v2beta2.HorizontalPodAutoscaler +\ +201U +S +CreatedH +F +D#/definitions/io.k8s.api.autoscaling.v2beta2.HorizontalPodAutoscaler + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionput +jg +x-kubernetes-group-version-kindDBgroup: autoscaling +kind: HorizontalPodAutoscaler +version: v2beta2 +*Í +autoscaling_v2beta2 delete a HorizontalPodAutoscaler*9deleteAutoscalingV2beta2NamespacedHorizontalPodAutoscaler2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string J» +L +200E +C +OK= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status +R +202K +I +Accepted= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status + +401 + + UnauthorizedRhttpsj +x-kubernetes-action delete +jg +x-kubernetes-group-version-kindDBgroup: autoscaling +kind: HorizontalPodAutoscaler +version: v2beta2 +BÊ +autoscaling_v2beta26partially update the specified HorizontalPodAutoscaler*8patchAutoscalingV2beta2NamespacedHorizontalPodAutoscaler2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json-patch+json:application/merge-patch+json:&application/strategic-merge-patch+json:application/apply-patch+yamlBN +L +Jbodybody *: +8#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.PatchBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B¯ +¬©¦queryƒfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch)." fieldManager2string BÎ +ËÈÅquery¨Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests."force2boolean Jr +W +200P +N +OKH +F +D#/definitions/io.k8s.api.autoscaling.v2beta2.HorizontalPodAutoscaler + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionpatch +jg +x-kubernetes-group-version-kindDBgroup: autoscaling +kind: HorizontalPodAutoscaler +version: v2beta2 +JD +B@">path#name of the HorizontalPodAutoscaler"name*string˜J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string û* +=/apis/rbac.authorization.k8s.io/v1/clusterrolebindings/{name}¹*¬ +rbacAuthorization_v1%read the specified ClusterRoleBinding*)readRbacAuthorizationV1ClusterRoleBinding2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*Ja +F +200? += +OK7 +5 +3#/definitions/io.k8s.api.rbac.v1.ClusterRoleBinding + +401 + + UnauthorizedRhttpsjk +x-kubernetes-group-version-kindHFgroup: rbac.authorization.k8s.io +kind: ClusterRoleBinding +version: v1 +j +x-kubernetes-actionget +… +rbacAuthorization_v1(replace the specified ClusterRoleBinding*,replaceRbacAuthorizationV1ClusterRoleBinding2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BI +G +Ebodybody *5 +3#/definitions/io.k8s.api.rbac.v1.ClusterRoleBindingBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string J® + +401 + + Unauthorized +F +200? += +OK7 +5 +3#/definitions/io.k8s.api.rbac.v1.ClusterRoleBinding +K +201D +B +Created7 +5 +3#/definitions/io.k8s.api.rbac.v1.ClusterRoleBindingRhttpsj +x-kubernetes-actionput +jk +x-kubernetes-group-version-kindHFversion: v1 +group: rbac.authorization.k8s.io +kind: ClusterRoleBinding +*¿ +rbacAuthorization_v1delete a ClusterRoleBinding*+deleteRbacAuthorizationV1ClusterRoleBinding2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string J» + +401 + + Unauthorized +L +200E +C +OK= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status +R +202K +I +Accepted= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.StatusRhttpsjk +x-kubernetes-group-version-kindHFversion: v1 +group: rbac.authorization.k8s.io +kind: ClusterRoleBinding +j +x-kubernetes-action delete +B« +rbacAuthorization_v11partially update the specified ClusterRoleBinding**patchRbacAuthorizationV1ClusterRoleBinding2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json-patch+json:application/merge-patch+json:&application/strategic-merge-patch+json:application/apply-patch+yamlBN +L +Jbodybody *: +8#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.PatchBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B¯ +¬©¦queryƒfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch)." fieldManager2string BÎ +ËÈÅquery¨Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests."force2boolean Ja +F +200? += +OK7 +5 +3#/definitions/io.k8s.api.rbac.v1.ClusterRoleBinding + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionpatch +jk +x-kubernetes-group-version-kindHFgroup: rbac.authorization.k8s.io +kind: ClusterRoleBinding +version: v1 +J? +=;"9pathname of the ClusterRoleBinding"name*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string ¬) +C/apis/flowcontrol.apiserver.k8s.io/v1beta1/watch/flowschemas/{name}ä(Ÿ +flowcontrolApiserver_v1beta1±watch changes to an object of kind FlowSchema. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.**watchFlowcontrolApiserverV1beta1FlowSchema2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk + +401 + + Unauthorized +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEventRhttpsjk +x-kubernetes-group-version-kindHFgroup: flowcontrol.apiserver.k8s.io +kind: FlowSchema +version: v1beta1 +j +x-kubernetes-actionwatch +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer J7 +53"1pathname of the FlowSchema"name*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean ¤) +./apis/storage.k8s.io/v1beta1/csidrivers/{name}ñ(€ +storage_v1beta1read the specified CSIDriver*readStorageV1beta1CSIDriver2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*J` +E +200> +< +OK6 +4 +2#/definitions/io.k8s.api.storage.v1beta1.CSIDriver + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionget +j\ +x-kubernetes-group-version-kind97group: storage.k8s.io +kind: CSIDriver +version: v1beta1 +× +storage_v1beta1replace the specified CSIDriver*replaceStorageV1beta1CSIDriver2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BH +F +Dbodybody *4 +2#/definitions/io.k8s.api.storage.v1beta1.CSIDriverBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string J¬ +E +200> +< +OK6 +4 +2#/definitions/io.k8s.api.storage.v1beta1.CSIDriver +J +201C +A +Created6 +4 +2#/definitions/io.k8s.api.storage.v1beta1.CSIDriver + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionput +j\ +x-kubernetes-group-version-kind97kind: CSIDriver +version: v1beta1 +group: storage.k8s.io +*† +storage_v1beta1delete a CSIDriver*deleteStorageV1beta1CSIDriver2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string J­ +E +200> +< +OK6 +4 +2#/definitions/io.k8s.api.storage.v1beta1.CSIDriver +K +202D +B +Accepted6 +4 +2#/definitions/io.k8s.api.storage.v1beta1.CSIDriver + +401 + + UnauthorizedRhttpsj\ +x-kubernetes-group-version-kind97group: storage.k8s.io +kind: CSIDriver +version: v1beta1 +j +x-kubernetes-action delete +Bÿ +storage_v1beta1(partially update the specified CSIDriver*patchStorageV1beta1CSIDriver2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json-patch+json:application/merge-patch+json:&application/strategic-merge-patch+json:application/apply-patch+yamlBN +L +Jbodybody *: +8#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.PatchBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B¯ +¬©¦queryƒfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch)." fieldManager2string BÎ +ËÈÅquery¨Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests."force2boolean J` + +401 + + Unauthorized +E +200> +< +OK6 +4 +2#/definitions/io.k8s.api.storage.v1beta1.CSIDriverRhttpsj +x-kubernetes-actionpatch +j\ +x-kubernetes-group-version-kind97version: v1beta1 +group: storage.k8s.io +kind: CSIDriver +J6 +42"0pathname of the CSIDriver"name*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Þ +7/api/v1/namespaces/{namespace}/pods/{name}/proxy/{path}¢› +core_v1$connect GET requests to proxy of Pod**connectCoreV1GetNamespacedPodProxyWithPath2*/*:*/*J7 + +200 + +OK + ² +string + +401 + + UnauthorizedRhttpsj! +x-kubernetes-action +connect +jQ +x-kubernetes-group-version-kind.,group: "" +kind: PodProxyOptions +version: v1 +› +core_v1$connect PUT requests to proxy of Pod**connectCoreV1PutNamespacedPodProxyWithPath2*/*:*/*J7 + +200 + +OK + ² +string + +401 + + UnauthorizedRhttpsj! +x-kubernetes-action +connect +jQ +x-kubernetes-group-version-kind.,kind: PodProxyOptions +version: v1 +group: "" +" +core_v1%connect POST requests to proxy of Pod*+connectCoreV1PostNamespacedPodProxyWithPath2*/*:*/*J7 + +200 + +OK + ² +string + +401 + + UnauthorizedRhttpsj! +x-kubernetes-action +connect +jQ +x-kubernetes-group-version-kind.,group: "" +kind: PodProxyOptions +version: v1 +*¡ +core_v1'connect DELETE requests to proxy of Pod*-connectCoreV1DeleteNamespacedPodProxyWithPath2*/*:*/*J7 + +200 + +OK + ² +string + +401 + + UnauthorizedRhttpsj! +x-kubernetes-action +connect +jQ +x-kubernetes-group-version-kind.,group: "" +kind: PodProxyOptions +version: v1 +2£ +core_v1(connect OPTIONS requests to proxy of Pod*.connectCoreV1OptionsNamespacedPodProxyWithPath2*/*:*/*J7 + +200 + +OK + ² +string + +401 + + UnauthorizedRhttpsj! +x-kubernetes-action +connect +jQ +x-kubernetes-group-version-kind.,group: "" +kind: PodProxyOptions +version: v1 +: +core_v1%connect HEAD requests to proxy of Pod*+connectCoreV1HeadNamespacedPodProxyWithPath2*/*:*/*J7 + +401 + + Unauthorized + +200 + +OK + ² +stringRhttpsjQ +x-kubernetes-group-version-kind.,kind: PodProxyOptions +version: v1 +group: "" +j! +x-kubernetes-action +connect +BŸ +core_v1&connect PATCH requests to proxy of Pod*,connectCoreV1PatchNamespacedPodProxyWithPath2*/*:*/*J7 + +200 + +OK + ² +string + +401 + + UnauthorizedRhttpsj! +x-kubernetes-action +connect +jQ +x-kubernetes-group-version-kind.,group: "" +kind: PodProxyOptions +version: v1 +J< +:8"6pathname of the PodProxyOptions"name*string˜J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜J5 +31"/pathpath to the resource"path*string˜Ja +_][queryAPath is the URL path to use for the current proxy request to pod."path2string ³) +7/apis/apps/v1/namespaces/{namespace}/replicasets/{name}÷(ç +apps_v1read the specified ReplicaSet*readAppsV1NamespacedReplicaSet2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*JY +> +2007 +5 +OK/ +- ++#/definitions/io.k8s.api.apps.v1.ReplicaSet + +401 + + UnauthorizedRhttpsjN +x-kubernetes-group-version-kind+)version: v1 +group: apps +kind: ReplicaSet +j +x-kubernetes-actionget +° +apps_v1 replace the specified ReplicaSet*!replaceAppsV1NamespacedReplicaSet2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BA +? +=bodybody *- ++#/definitions/io.k8s.api.apps.v1.ReplicaSetBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string Jž +> +2007 +5 +OK/ +- ++#/definitions/io.k8s.api.apps.v1.ReplicaSet +C +201< +: +Created/ +- ++#/definitions/io.k8s.api.apps.v1.ReplicaSet + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionput +jN +x-kubernetes-group-version-kind+)version: v1 +group: apps +kind: ReplicaSet +*‚ +apps_v1delete a ReplicaSet* deleteAppsV1NamespacedReplicaSet2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string J» +L +200E +C +OK= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status +R +202K +I +Accepted= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status + +401 + + UnauthorizedRhttpsjN +x-kubernetes-group-version-kind+)version: v1 +group: apps +kind: ReplicaSet +j +x-kubernetes-action delete +Bæ +apps_v1)partially update the specified ReplicaSet*patchAppsV1NamespacedReplicaSet2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json-patch+json:application/merge-patch+json:&application/strategic-merge-patch+json:application/apply-patch+yamlBN +L +Jbodybody *: +8#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.PatchBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B¯ +¬©¦queryƒfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch)." fieldManager2string BÎ +ËÈÅquery¨Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests."force2boolean JY +> +2007 +5 +OK/ +- ++#/definitions/io.k8s.api.apps.v1.ReplicaSet + +401 + + UnauthorizedRhttpsjN +x-kubernetes-group-version-kind+)group: apps +kind: ReplicaSet +version: v1 +j +x-kubernetes-actionpatch +J7 +53"1pathname of the ReplicaSet"name*string˜J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string æ) +:/apis/batch/v1beta1/namespaces/{namespace}/cronjobs/{name}§)ó + batch_v1beta1read the specified CronJob*!readBatchV1beta1NamespacedCronJob2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*J\ +A +200: +8 +OK2 +0 +.#/definitions/io.k8s.api.batch.v1beta1.CronJob + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionget +jQ +x-kubernetes-group-version-kind.,group: batch +kind: CronJob +version: v1beta1 + + batch_v1beta1replace the specified CronJob*$replaceBatchV1beta1NamespacedCronJob2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BD +B +@bodybody *0 +.#/definitions/io.k8s.api.batch.v1beta1.CronJobBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string J¤ +A +200: +8 +OK2 +0 +.#/definitions/io.k8s.api.batch.v1beta1.CronJob +F +201? += +Created2 +0 +.#/definitions/io.k8s.api.batch.v1beta1.CronJob + +401 + + UnauthorizedRhttpsjQ +x-kubernetes-group-version-kind.,group: batch +kind: CronJob +version: v1beta1 +j +x-kubernetes-actionput +*‹ + batch_v1beta1delete a CronJob*#deleteBatchV1beta1NamespacedCronJob2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string J» + +401 + + Unauthorized +L +200E +C +OK= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status +R +202K +I +Accepted= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.StatusRhttpsj +x-kubernetes-action delete +jQ +x-kubernetes-group-version-kind.,group: batch +kind: CronJob +version: v1beta1 +Bò + batch_v1beta1&partially update the specified CronJob*"patchBatchV1beta1NamespacedCronJob2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json-patch+json:application/merge-patch+json:&application/strategic-merge-patch+json:application/apply-patch+yamlBN +L +Jbodybody *: +8#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.PatchBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B¯ +¬©¦queryƒfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch)." fieldManager2string BÎ +ËÈÅquery¨Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests."force2boolean J\ +A +200: +8 +OK2 +0 +.#/definitions/io.k8s.api.batch.v1beta1.CronJob + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionpatch +jQ +x-kubernetes-group-version-kind.,group: batch +kind: CronJob +version: v1beta1 +J4 +20".pathname of the CronJob"name*string˜J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string ¬) +7/apis/batch/v1/watch/namespaces/{namespace}/jobs/{name}ð(Ð +batch_v1ªwatch changes to an object of kind Job. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.*watchBatchV1NamespacedJob2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionwatch +jH +x-kubernetes-group-version-kind%#group: batch +kind: Job +version: v1 +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer J0 +.,"*pathname of the Job"name*string˜J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean î] +?/apis/rbac.authorization.k8s.io/v1/namespaces/{namespace}/rolesª]—& +rbacAuthorization_v1"list or watch objects of kind Role*%listRbacAuthorizationV1NamespacedRole2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*B‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Bï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string B‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string B‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Bú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer Bû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string BÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Bž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer B± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean JW +< +2005 +3 +OK- ++ +)#/definitions/io.k8s.api.rbac.v1.RoleList + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionlist +j] +x-kubernetes-group-version-kind:8group: rbac.authorization.k8s.io +kind: Role +version: v1 +"î +rbacAuthorization_v1 create a Role*'createRbacAuthorizationV1NamespacedRole2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*B; +9 +7bodybody *' +%#/definitions/io.k8s.api.rbac.v1.RoleBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string JÒ +8 +2001 +/ +OK) +' +%#/definitions/io.k8s.api.rbac.v1.Role += +2016 +4 +Created) +' +%#/definitions/io.k8s.api.rbac.v1.Role +> +2027 +5 +Accepted) +' +%#/definitions/io.k8s.api.rbac.v1.Role + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionpost +j] +x-kubernetes-group-version-kind:8group: rbac.authorization.k8s.io +kind: Role +version: v1 +*é, +rbacAuthorization_v1delete collection of Role*1deleteRbacAuthorizationV1CollectionNamespacedRole2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string Bž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer B‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Bú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string Bû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string BÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Bž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer Jg +L +200E +C +OK= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status + +401 + + UnauthorizedRhttpsj* +x-kubernetes-actiondeletecollection +j] +x-kubernetes-group-version-kind:8group: rbac.authorization.k8s.io +kind: Role +version: v1 +J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string ù + /apis/internal.apiserver.k8s.io/ÔÑ +internalApiserverget information of a group*getInternalApiserverAPIGroup2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json:application/yaml:#application/vnd.kubernetes.protobufJi +N +200G +E +OK? += +;#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.APIGroup + +401 + + UnauthorizedRhttpsž' +(/apis/rbac.authorization.k8s.io/v1/rolesñ&å +rbacAuthorization_v1"list or watch objects of kind Role*+listRbacAuthorizationV1RoleForAllNamespaces2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*JW +< +2005 +3 +OK- ++ +)#/definitions/io.k8s.api.rbac.v1.RoleList + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionlist +j] +x-kubernetes-group-version-kind:8version: v1 +group: rbac.authorization.k8s.io +kind: Role +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean ƒ) +E/apis/rbac.authorization.k8s.io/v1/watch/namespaces/{namespace}/roles¹(Ë +rbacAuthorization_v1pwatch individual changes to a list of Role. deprecated: use the 'watch' parameter with a list operation instead.**watchRbacAuthorizationV1NamespacedRoleList2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsj# +x-kubernetes-action  +watchlist +j] +x-kubernetes-group-version-kind:8group: rbac.authorization.k8s.io +kind: Role +version: v1 +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean ë& +/api/v1/configmapsÔ&È +core_v1'list or watch objects of kind ConfigMap*#listCoreV1ConfigMapForAllNamespaces2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*J\ +A +200: +8 +OK2 +0 +.#/definitions/io.k8s.api.core.v1.ConfigMapList + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionlist +jK +x-kubernetes-group-version-kind(&kind: ConfigMap +version: v1 +group: "" +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean ¼* +V/apis/autoscaling/v2beta2/watch/namespaces/{namespace}/horizontalpodautoscalers/{name}á)­ +autoscaling_v2beta2¾watch changes to an object of kind HorizontalPodAutoscaler. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.*8watchAutoscalingV2beta2NamespacedHorizontalPodAutoscaler2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionwatch +jg +x-kubernetes-group-version-kindDBgroup: autoscaling +kind: HorizontalPodAutoscaler +version: v2beta2 +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer JD +B@">path#name of the HorizontalPodAutoscaler"name*string˜J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean á] +9/apis/events.k8s.io/v1beta1/namespaces/{namespace}/events£]& +events_v1beta1#list or watch objects of kind Event* listEventsV1beta1NamespacedEvent2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*B‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Bï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string B‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string B‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Bú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer Bû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string BÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Bž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer B± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean J_ +D +200= +; +OK5 +3 +1#/definitions/io.k8s.api.events.v1beta1.EventList + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionlist +jW +x-kubernetes-group-version-kind42version: v1beta1 +group: events.k8s.io +kind: Event +"ÿ +events_v1beta1create an Event*"createEventsV1beta1NamespacedEvent2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BC +A +?bodybody */ +-#/definitions/io.k8s.api.events.v1beta1.EventBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string Jê +@ +2009 +7 +OK1 +/ +-#/definitions/io.k8s.api.events.v1beta1.Event +E +201> +< +Created1 +/ +-#/definitions/io.k8s.api.events.v1beta1.Event +F +202? += +Accepted1 +/ +-#/definitions/io.k8s.api.events.v1beta1.Event + +401 + + UnauthorizedRhttpsjW +x-kubernetes-group-version-kind42group: events.k8s.io +kind: Event +version: v1beta1 +j +x-kubernetes-actionpost +*Ù, +events_v1beta1delete collection of Event*,deleteEventsV1beta1CollectionNamespacedEvent2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string Bž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer B‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Bú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string Bû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string BÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Bž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer Jg +L +200E +C +OK= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status + +401 + + UnauthorizedRhttpsj* +x-kubernetes-actiondeletecollection +jW +x-kubernetes-group-version-kind42kind: Event +version: v1beta1 +group: events.k8s.io +J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string ü +/apis/storage.k8s.io/v1alpha1/ÙÖ +storage_v1alpha1get available resources*getStorageV1alpha1APIResources2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json:application/yaml:#application/vnd.kubernetes.protobufJp +U +200N +L +OKF +D +B#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.APIResourceList + +401 + + UnauthorizedRhttps×' +1/apis/storage.k8s.io/v1beta1/csistoragecapacities¡'• +storage_v1beta10list or watch objects of kind CSIStorageCapacity*4listStorageV1beta1CSIStorageCapacityForAllNamespaces2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jm +R +200K +I +OKC +A +?#/definitions/io.k8s.api.storage.v1beta1.CSIStorageCapacityList + +401 + + UnauthorizedRhttpsje +x-kubernetes-group-version-kindB@group: storage.k8s.io +kind: CSIStorageCapacity +version: v1beta1 +j +x-kubernetes-actionlist +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean ¼* +V/apis/autoscaling/v2beta1/watch/namespaces/{namespace}/horizontalpodautoscalers/{name}á)­ +autoscaling_v2beta1¾watch changes to an object of kind HorizontalPodAutoscaler. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.*8watchAutoscalingV2beta1NamespacedHorizontalPodAutoscaler2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionwatch +jg +x-kubernetes-group-version-kindDBgroup: autoscaling +kind: HorizontalPodAutoscaler +version: v2beta1 +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer JD +B@">path#name of the HorizontalPodAutoscaler"name*string˜J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean ü* +H/apis/networking.k8s.io/v1/namespaces/{namespace}/networkpolicies/{name}¯*’ + networking_v1 read the specified NetworkPolicy*'readNetworkingV1NamespacedNetworkPolicy2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*Jb + +401 + + Unauthorized +G +200@ +> +OK8 +6 +4#/definitions/io.k8s.api.networking.v1.NetworkPolicyRhttpsj +x-kubernetes-actionget +j^ +x-kubernetes-group-version-kind;9group: networking.k8s.io +kind: NetworkPolicy +version: v1 +í + networking_v1#replace the specified NetworkPolicy**replaceNetworkingV1NamespacedNetworkPolicy2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BJ +H +Fbodybody *6 +4#/definitions/io.k8s.api.networking.v1.NetworkPolicyBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string J° +G +200@ +> +OK8 +6 +4#/definitions/io.k8s.api.networking.v1.NetworkPolicy +L +201E +C +Created8 +6 +4#/definitions/io.k8s.api.networking.v1.NetworkPolicy + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionput +j^ +x-kubernetes-group-version-kind;9group: networking.k8s.io +kind: NetworkPolicy +version: v1 +*¤ + networking_v1delete a NetworkPolicy*)deleteNetworkingV1NamespacedNetworkPolicy2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string J» +L +200E +C +OK= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status +R +202K +I +Accepted= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status + +401 + + UnauthorizedRhttpsj +x-kubernetes-action delete +j^ +x-kubernetes-group-version-kind;9group: networking.k8s.io +kind: NetworkPolicy +version: v1 +B‘ + networking_v1,partially update the specified NetworkPolicy*(patchNetworkingV1NamespacedNetworkPolicy2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json-patch+json:application/merge-patch+json:&application/strategic-merge-patch+json:application/apply-patch+yamlBN +L +Jbodybody *: +8#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.PatchBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B¯ +¬©¦queryƒfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch)." fieldManager2string BÎ +ËÈÅquery¨Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests."force2boolean Jb +G +200@ +> +OK8 +6 +4#/definitions/io.k8s.api.networking.v1.NetworkPolicy + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionpatch +j^ +x-kubernetes-group-version-kind;9group: networking.k8s.io +kind: NetworkPolicy +version: v1 +J: +86"4pathname of the NetworkPolicy"name*string˜J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Ð + /apis/policy/¾» +policyget information of a group*getPolicyAPIGroup2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json:application/yaml:#application/vnd.kubernetes.protobufJi +N +200G +E +OK? += +;#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.APIGroup + +401 + + UnauthorizedRhttps¼' +./apis/rbac.authorization.k8s.io/v1alpha1/roles‰'ý +rbacAuthorization_v1alpha1"list or watch objects of kind Role*1listRbacAuthorizationV1alpha1RoleForAllNamespaces2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*J] +B +200; +9 +OK3 +1 +/#/definitions/io.k8s.api.rbac.v1alpha1.RoleList + +401 + + UnauthorizedRhttpsjc +x-kubernetes-group-version-kind@>kind: Role +version: v1alpha1 +group: rbac.authorization.k8s.io +j +x-kubernetes-actionlist +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean ä' +/apis/apps/v1/watch/deploymentsÀ'´ +apps_v1vwatch individual changes to a list of Deployment. deprecated: use the 'watch' parameter with a list operation instead.*)watchAppsV1DeploymentListForAllNamespaces2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsj# +x-kubernetes-action  +watchlist +jN +x-kubernetes-group-version-kind+)group: apps +kind: Deployment +version: v1 +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean ž +R/apis/autoscaling/v1/namespaces/{namespace}/horizontalpodautoscalers/{name}/statusÇÇ +autoscaling_v14read status of the specified HorizontalPodAutoscaler*8readAutoscalingV1NamespacedHorizontalPodAutoscalerStatus2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*Jm +R +200K +I +OKC +A +?#/definitions/io.k8s.api.autoscaling.v1.HorizontalPodAutoscaler + +401 + + UnauthorizedRhttpsjb +x-kubernetes-group-version-kind?=group: autoscaling +kind: HorizontalPodAutoscaler +version: v1 +j +x-kubernetes-actionget +¸ +autoscaling_v17replace status of the specified HorizontalPodAutoscaler*;replaceAutoscalingV1NamespacedHorizontalPodAutoscalerStatus2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BU +S +Qbodybody *A +?#/definitions/io.k8s.api.autoscaling.v1.HorizontalPodAutoscalerBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string JÆ +R +200K +I +OKC +A +?#/definitions/io.k8s.api.autoscaling.v1.HorizontalPodAutoscaler +W +201P +N +CreatedC +A +?#/definitions/io.k8s.api.autoscaling.v1.HorizontalPodAutoscaler + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionput +jb +x-kubernetes-group-version-kind?=group: autoscaling +kind: HorizontalPodAutoscaler +version: v1 +BÆ +autoscaling_v1@partially update status of the specified HorizontalPodAutoscaler*9patchAutoscalingV1NamespacedHorizontalPodAutoscalerStatus2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json-patch+json:application/merge-patch+json:&application/strategic-merge-patch+json:application/apply-patch+yamlBN +L +Jbodybody *: +8#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.PatchBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B¯ +¬©¦queryƒfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch)." fieldManager2string BÎ +ËÈÅquery¨Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests."force2boolean Jm +R +200K +I +OKC +A +?#/definitions/io.k8s.api.autoscaling.v1.HorizontalPodAutoscaler + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionpatch +jb +x-kubernetes-group-version-kind?=kind: HorizontalPodAutoscaler +version: v1 +group: autoscaling +JD +B@">path#name of the HorizontalPodAutoscaler"name*string˜J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string í( +?/apis/events.k8s.io/v1beta1/watch/namespaces/{namespace}/events©(» +events_v1beta1qwatch individual changes to a list of Event. deprecated: use the 'watch' parameter with a list operation instead.*%watchEventsV1beta1NamespacedEventList2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk + +401 + + Unauthorized +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEventRhttpsj# +x-kubernetes-action  +watchlist +jW +x-kubernetes-group-version-kind42version: v1beta1 +group: events.k8s.io +kind: Event +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean ®' +(/apis/discovery.k8s.io/v1/endpointslices'õ + discovery_v1+list or watch objects of kind EndpointSlice*,listDiscoveryV1EndpointSliceForAllNamespaces2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Je +J +200C +A +OK; +9 +7#/definitions/io.k8s.api.discovery.v1.EndpointSliceList + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionlist +j] +x-kubernetes-group-version-kind:8group: discovery.k8s.io +kind: EndpointSlice +version: v1 +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean ö +/apis/events.k8s.io/v1beta1/ÕÒ +events_v1beta1get available resources*getEventsV1beta1APIResources2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json:application/yaml:#application/vnd.kubernetes.protobufJp +U +200N +L +OKF +D +B#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.APIResourceList + +401 + + UnauthorizedRhttps‰( +$/api/v1/watch/replicationcontrollersà'Ô +core_v1watch individual changes to a list of ReplicationController. deprecated: use the 'watch' parameter with a list operation instead.*4watchCoreV1ReplicationControllerListForAllNamespaces2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsj# +x-kubernetes-action  +watchlist +jW +x-kubernetes-group-version-kind42group: "" +kind: ReplicationController +version: v1 +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean Æ) +8/apis/apps/v1/namespaces/{namespace}/statefulsets/{name}‰)ë +apps_v1read the specified StatefulSet*readAppsV1NamespacedStatefulSet2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*JZ +? +2008 +6 +OK0 +. +,#/definitions/io.k8s.api.apps.v1.StatefulSet + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionget +jO +x-kubernetes-group-version-kind,*group: apps +kind: StatefulSet +version: v1 +¶ +apps_v1!replace the specified StatefulSet*"replaceAppsV1NamespacedStatefulSet2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BB +@ +>bodybody *. +,#/definitions/io.k8s.api.apps.v1.StatefulSetBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string J  +? +2008 +6 +OK0 +. +,#/definitions/io.k8s.api.apps.v1.StatefulSet +D +201= +; +Created0 +. +,#/definitions/io.k8s.api.apps.v1.StatefulSet + +401 + + UnauthorizedRhttpsjO +x-kubernetes-group-version-kind,*version: v1 +group: apps +kind: StatefulSet +j +x-kubernetes-actionput +*… +apps_v1delete a StatefulSet*!deleteAppsV1NamespacedStatefulSet2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string J» +L +200E +C +OK= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status +R +202K +I +Accepted= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status + +401 + + UnauthorizedRhttpsj +x-kubernetes-action delete +jO +x-kubernetes-group-version-kind,*kind: StatefulSet +version: v1 +group: apps +Bê +apps_v1*partially update the specified StatefulSet* patchAppsV1NamespacedStatefulSet2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json-patch+json:application/merge-patch+json:&application/strategic-merge-patch+json:application/apply-patch+yamlBN +L +Jbodybody *: +8#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.PatchBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B¯ +¬©¦queryƒfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch)." fieldManager2string BÎ +ËÈÅquery¨Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests."force2boolean JZ + +401 + + Unauthorized +? +2008 +6 +OK0 +. +,#/definitions/io.k8s.api.apps.v1.StatefulSetRhttpsj +x-kubernetes-actionpatch +jO +x-kubernetes-group-version-kind,*group: apps +kind: StatefulSet +version: v1 +J8 +64"2pathname of the StatefulSet"name*string˜J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string à' +/apis/apps/v1/watch/daemonsets½'± +apps_v1uwatch individual changes to a list of DaemonSet. deprecated: use the 'watch' parameter with a list operation instead.*(watchAppsV1DaemonSetListForAllNamespaces2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk + +401 + + Unauthorized +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEventRhttpsj# +x-kubernetes-action  +watchlist +jM +x-kubernetes-group-version-kind*(kind: DaemonSet +version: v1 +group: apps +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean ‹( +1/apis/storage.k8s.io/v1beta1/watch/storageclassesÕ'É +storage_v1beta1xwatch individual changes to a list of StorageClass. deprecated: use the 'watch' parameter with a list operation instead.*#watchStorageV1beta1StorageClassList2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsj_ +x-kubernetes-group-version-kind<:kind: StorageClass +version: v1beta1 +group: storage.k8s.io +j# +x-kubernetes-action  +watchlist +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean Í& + /api/v1/pods¼&° +core_v1!list or watch objects of kind Pod*listCoreV1PodForAllNamespaces2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*JV +; +2004 +2 +OK, +* +(#/definitions/io.k8s.api.core.v1.PodList + +401 + + UnauthorizedRhttpsjE +x-kubernetes-group-version-kind" version: v1 +group: "" +kind: Pod +j +x-kubernetes-actionlist +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean §' +/api/v1/replicationcontrollers„'ø +core_v13list or watch objects of kind ReplicationController*/listCoreV1ReplicationControllerForAllNamespaces2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jh + +401 + + Unauthorized +M +200F +D +OK> +< +:#/definitions/io.k8s.api.core.v1.ReplicationControllerListRhttpsjW +x-kubernetes-group-version-kind42group: "" +kind: ReplicationController +version: v1 +j +x-kubernetes-actionlist +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean á* +F/apis/coordination.k8s.io/v1beta1/namespaces/{namespace}/leases/{name}–*Ž +coordination_v1beta1read the specified Lease*&readCoordinationV1beta1NamespacedLease2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*Ja +F +200? += +OK7 +5 +3#/definitions/io.k8s.api.coordination.v1beta1.Lease + +401 + + UnauthorizedRhttpsj] +x-kubernetes-group-version-kind:8group: coordination.k8s.io +kind: Lease +version: v1beta1 +j +x-kubernetes-actionget +ç +coordination_v1beta1replace the specified Lease*)replaceCoordinationV1beta1NamespacedLease2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BI +G +Ebodybody *5 +3#/definitions/io.k8s.api.coordination.v1beta1.LeaseBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string J® +K +201D +B +Created7 +5 +3#/definitions/io.k8s.api.coordination.v1beta1.Lease + +401 + + Unauthorized +F +200? += +OK7 +5 +3#/definitions/io.k8s.api.coordination.v1beta1.LeaseRhttpsj +x-kubernetes-actionput +j] +x-kubernetes-group-version-kind:8kind: Lease +version: v1beta1 +group: coordination.k8s.io +*¡ +coordination_v1beta1delete a Lease*(deleteCoordinationV1beta1NamespacedLease2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string J» +L +200E +C +OK= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status +R +202K +I +Accepted= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status + +401 + + UnauthorizedRhttpsj +x-kubernetes-action delete +j] +x-kubernetes-group-version-kind:8group: coordination.k8s.io +kind: Lease +version: v1beta1 +B +coordination_v1beta1$partially update the specified Lease*'patchCoordinationV1beta1NamespacedLease2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json-patch+json:application/merge-patch+json:&application/strategic-merge-patch+json:application/apply-patch+yamlBN +L +Jbodybody *: +8#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.PatchBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B¯ +¬©¦queryƒfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch)." fieldManager2string BÎ +ËÈÅquery¨Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests."force2boolean Ja +F +200? += +OK7 +5 +3#/definitions/io.k8s.api.coordination.v1beta1.Lease + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionpatch +j] +x-kubernetes-group-version-kind:8group: coordination.k8s.io +kind: Lease +version: v1beta1 +J2 +0.",pathname of the Lease"name*string˜J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string ^ +0/apis/scheduling.k8s.io/v1alpha1/priorityclassesØ]¹& +scheduling_v1alpha1+list or watch objects of kind PriorityClass*#listSchedulingV1alpha1PriorityClass2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*B‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Bï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string B‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string B‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Bú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer Bû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string BÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Bž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer B± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean Jl +Q +200J +H +OKB +@ +>#/definitions/io.k8s.api.scheduling.v1alpha1.PriorityClassList + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionlist +jd +x-kubernetes-group-version-kindA?kind: PriorityClass +version: v1alpha1 +group: scheduling.k8s.io +"Ï +scheduling_v1alpha1create a PriorityClass*%createSchedulingV1alpha1PriorityClass2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BP +N +Lbodybody *< +:#/definitions/io.k8s.api.scheduling.v1alpha1.PriorityClassBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string J‘ +M +200F +D +OK> +< +:#/definitions/io.k8s.api.scheduling.v1alpha1.PriorityClass +R +201K +I +Created> +< +:#/definitions/io.k8s.api.scheduling.v1alpha1.PriorityClass +S +202L +J +Accepted> +< +:#/definitions/io.k8s.api.scheduling.v1alpha1.PriorityClass + +401 + + UnauthorizedRhttpsjd +x-kubernetes-group-version-kindA?group: scheduling.k8s.io +kind: PriorityClass +version: v1alpha1 +j +x-kubernetes-actionpost +*ö, +scheduling_v1alpha1"delete collection of PriorityClass*/deleteSchedulingV1alpha1CollectionPriorityClass2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string Bž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer B‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Bú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string Bû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string BÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Bž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer Jg +L +200E +C +OK= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status + +401 + + UnauthorizedRhttpsj* +x-kubernetes-actiondeletecollection +jd +x-kubernetes-group-version-kindA?group: scheduling.k8s.io +kind: PriorityClass +version: v1alpha1 +JO +MKIquery-If 'true', then the output is pretty printed."pretty2string ² + /api/v1/namespaces/{name}/statusç +core_v1&read status of the specified Namespace*readCoreV1NamespaceStatus2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*JX + +401 + + Unauthorized += +2006 +4 +OK. +, +*#/definitions/io.k8s.api.core.v1.NamespaceRhttpsjK +x-kubernetes-group-version-kind(&version: v1 +group: "" +kind: Namespace +j +x-kubernetes-actionget +® +core_v1)replace status of the specified Namespace*replaceCoreV1NamespaceStatus2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*B@ +> +<bodybody *, +*#/definitions/io.k8s.api.core.v1.NamespaceBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string Jœ += +2006 +4 +OK. +, +*#/definitions/io.k8s.api.core.v1.Namespace +B +201; +9 +Created. +, +*#/definitions/io.k8s.api.core.v1.Namespace + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionput +jK +x-kubernetes-group-version-kind(&group: "" +kind: Namespace +version: v1 +Bæ +core_v12partially update status of the specified Namespace*patchCoreV1NamespaceStatus2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json-patch+json:application/merge-patch+json:&application/strategic-merge-patch+json:application/apply-patch+yamlBN +L +Jbodybody *: +8#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.PatchBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B¯ +¬©¦queryƒfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch)." fieldManager2string BÎ +ËÈÅquery¨Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests."force2boolean JX += +2006 +4 +OK. +, +*#/definitions/io.k8s.api.core.v1.Namespace + +401 + + UnauthorizedRhttpsjK +x-kubernetes-group-version-kind(&group: "" +kind: Namespace +version: v1 +j +x-kubernetes-actionpatch +J6 +42"0pathname of the Namespace"name*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string ó +/apis/networking.k8s.io/v1/ÓÐ + networking_v1get available resources*getNetworkingV1APIResources2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json:application/yaml:#application/vnd.kubernetes.protobufJp +U +200N +L +OKF +D +B#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.APIResourceList + +401 + + UnauthorizedRhttpsÊ^ +A/apis/networking.k8s.io/v1/namespaces/{namespace}/networkpolicies„^«& + networking_v1+list or watch objects of kind NetworkPolicy*'listNetworkingV1NamespacedNetworkPolicy2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*B‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Bï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string B‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string B‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Bú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer Bû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string BÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Bž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer B± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean Jf +K +200D +B +OK< +: +8#/definitions/io.k8s.api.networking.v1.NetworkPolicyList + +401 + + UnauthorizedRhttpsj^ +x-kubernetes-group-version-kind;9kind: NetworkPolicy +version: v1 +group: networking.k8s.io +j +x-kubernetes-actionlist +"¯ + networking_v1create a NetworkPolicy*)createNetworkingV1NamespacedNetworkPolicy2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BJ +H +Fbodybody *6 +4#/definitions/io.k8s.api.networking.v1.NetworkPolicyBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string Jÿ +G +200@ +> +OK8 +6 +4#/definitions/io.k8s.api.networking.v1.NetworkPolicy +L +201E +C +Created8 +6 +4#/definitions/io.k8s.api.networking.v1.NetworkPolicy +M +202F +D +Accepted8 +6 +4#/definitions/io.k8s.api.networking.v1.NetworkPolicy + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionpost +j^ +x-kubernetes-group-version-kind;9group: networking.k8s.io +kind: NetworkPolicy +version: v1 +*î, + networking_v1"delete collection of NetworkPolicy*3deleteNetworkingV1CollectionNamespacedNetworkPolicy2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string Bž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer B‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Bú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string Bû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string BÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Bž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer Jg +L +200E +C +OK= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status + +401 + + UnauthorizedRhttpsj* +x-kubernetes-actiondeletecollection +j^ +x-kubernetes-group-version-kind;9kind: NetworkPolicy +version: v1 +group: networking.k8s.io +J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string „( +'/apis/apps/v1/watch/controllerrevisionsØ'Ì +apps_v1~watch individual changes to a list of ControllerRevision. deprecated: use the 'watch' parameter with a list operation instead.*1watchAppsV1ControllerRevisionListForAllNamespaces2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsj# +x-kubernetes-action  +watchlist +jV +x-kubernetes-group-version-kind31group: apps +kind: ControllerRevision +version: v1 +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean ð +/apis/discovery.k8s.io/v1/ÑÎ + discovery_v1get available resources*getDiscoveryV1APIResources2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json:application/yaml:#application/vnd.kubernetes.protobufJp +U +200N +L +OKF +D +B#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.APIResourceList + +401 + + UnauthorizedRhttps°( +:/apis/rbac.authorization.k8s.io/v1beta1/watch/clusterrolesñ'å +rbacAuthorization_v1beta1wwatch individual changes to a list of ClusterRole. deprecated: use the 'watch' parameter with a list operation instead.*,watchRbacAuthorizationV1beta1ClusterRoleList2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsj# +x-kubernetes-action  +watchlist +ji +x-kubernetes-group-version-kindFDgroup: rbac.authorization.k8s.io +kind: ClusterRole +version: v1beta1 +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean ÷ +N/apis/networking.k8s.io/v1beta1/namespaces/{namespace}/ingresses/{name}/status¤ž +networking_v1beta1$read status of the specified Ingress*,readNetworkingV1beta1NamespacedIngressStatus2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*Ja +F +200? += +OK7 +5 +3#/definitions/io.k8s.api.networking.v1beta1.Ingress + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionget +j] +x-kubernetes-group-version-kind:8group: networking.k8s.io +kind: Ingress +version: v1beta1 +÷ +networking_v1beta1'replace status of the specified Ingress*/replaceNetworkingV1beta1NamespacedIngressStatus2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BI +G +Ebodybody *5 +3#/definitions/io.k8s.api.networking.v1beta1.IngressBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string J® +F +200? += +OK7 +5 +3#/definitions/io.k8s.api.networking.v1beta1.Ingress +K +201D +B +Created7 +5 +3#/definitions/io.k8s.api.networking.v1beta1.Ingress + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionput +j] +x-kubernetes-group-version-kind:8kind: Ingress +version: v1beta1 +group: networking.k8s.io +B +networking_v1beta10partially update status of the specified Ingress*-patchNetworkingV1beta1NamespacedIngressStatus2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json-patch+json:application/merge-patch+json:&application/strategic-merge-patch+json:application/apply-patch+yamlBN +L +Jbodybody *: +8#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.PatchBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B¯ +¬©¦queryƒfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch)." fieldManager2string BÎ +ËÈÅquery¨Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests."force2boolean Ja + +401 + + Unauthorized +F +200? += +OK7 +5 +3#/definitions/io.k8s.api.networking.v1beta1.IngressRhttpsj] +x-kubernetes-group-version-kind:8version: v1beta1 +group: networking.k8s.io +kind: Ingress +j +x-kubernetes-actionpatch +J4 +20".pathname of the Ingress"name*string˜J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Ç( +,/api/v1/namespaces/{namespace}/events/{name}–(Ñ +core_v1read the specified Event*readCoreV1NamespacedEvent2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*JT +9 +2002 +0 +OK* +( +&#/definitions/io.k8s.api.core.v1.Event + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionget +jG +x-kubernetes-group-version-kind$"group: "" +kind: Event +version: v1 + +core_v1replace the specified Event*replaceCoreV1NamespacedEvent2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*B< +: +8bodybody *( +&#/definitions/io.k8s.api.core.v1.EventBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string J” +9 +2002 +0 +OK* +( +&#/definitions/io.k8s.api.core.v1.Event +> +2017 +5 +Created* +( +&#/definitions/io.k8s.api.core.v1.Event + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionput +jG +x-kubernetes-group-version-kind$"group: "" +kind: Event +version: v1 +*ò +core_v1delete an Event*deleteCoreV1NamespacedEvent2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string J» +L +200E +C +OK= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status +R +202K +I +Accepted= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status + +401 + + UnauthorizedRhttpsjG +x-kubernetes-group-version-kind$"group: "" +kind: Event +version: v1 +j +x-kubernetes-action delete +BÐ +core_v1$partially update the specified Event*patchCoreV1NamespacedEvent2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json-patch+json:application/merge-patch+json:&application/strategic-merge-patch+json:application/apply-patch+yamlBN +L +Jbodybody *: +8#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.PatchBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B¯ +¬©¦queryƒfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch)." fieldManager2string BÎ +ËÈÅquery¨Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests."force2boolean JT +9 +2002 +0 +OK* +( +&#/definitions/io.k8s.api.core.v1.Event + +401 + + UnauthorizedRhttpsjG +x-kubernetes-group-version-kind$"group: "" +kind: Event +version: v1 +j +x-kubernetes-actionpatch +J2 +0.",pathname of the Event"name*string˜J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string é +1/api/v1/namespaces/{namespace}/pods/{name}/status³Ù +core_v1 read status of the specified Pod*readCoreV1NamespacedPodStatus2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*JR +7 +2000 +. +OK( +& +$#/definitions/io.k8s.api.core.v1.Pod + +401 + + UnauthorizedRhttpsjE +x-kubernetes-group-version-kind" group: "" +kind: Pod +version: v1 +j +x-kubernetes-actionget +” +core_v1#replace status of the specified Pod* replaceCoreV1NamespacedPodStatus2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*B: +8 +6bodybody *& +$#/definitions/io.k8s.api.core.v1.PodBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string J +< +2015 +3 +Created( +& +$#/definitions/io.k8s.api.core.v1.Pod + +401 + + Unauthorized +7 +2000 +. +OK( +& +$#/definitions/io.k8s.api.core.v1.PodRhttpsj +x-kubernetes-actionput +jE +x-kubernetes-group-version-kind" group: "" +kind: Pod +version: v1 +BØ +core_v1,partially update status of the specified Pod*patchCoreV1NamespacedPodStatus2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json-patch+json:application/merge-patch+json:&application/strategic-merge-patch+json:application/apply-patch+yamlBN +L +Jbodybody *: +8#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.PatchBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B¯ +¬©¦queryƒfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch)." fieldManager2string BÎ +ËÈÅquery¨Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests."force2boolean JR +7 +2000 +. +OK( +& +$#/definitions/io.k8s.api.core.v1.Pod + +401 + + UnauthorizedRhttpsjE +x-kubernetes-group-version-kind" group: "" +kind: Pod +version: v1 +j +x-kubernetes-actionpatch +J0 +.,"*pathname of the Pod"name*string˜J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string ì +/apis/batch/v1beta1/ÓÐ + batch_v1beta1get available resources*getBatchV1beta1APIResources2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json:application/yaml:#application/vnd.kubernetes.protobufJp + +401 + + Unauthorized +U +200N +L +OKF +D +B#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.APIResourceListRhttps‚- +P/apis/autoscaling/v2beta1/namespaces/{namespace}/horizontalpodautoscalers/{name}­,Ë +autoscaling_v2beta1*read the specified HorizontalPodAutoscaler*7readAutoscalingV2beta1NamespacedHorizontalPodAutoscaler2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*Jr + +401 + + Unauthorized +W +200P +N +OKH +F +D#/definitions/io.k8s.api.autoscaling.v2beta1.HorizontalPodAutoscalerRhttpsj +x-kubernetes-actionget +jg +x-kubernetes-group-version-kindDBgroup: autoscaling +kind: HorizontalPodAutoscaler +version: v2beta1 +Æ +autoscaling_v2beta1-replace the specified HorizontalPodAutoscaler*:replaceAutoscalingV2beta1NamespacedHorizontalPodAutoscaler2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BZ +X +Vbodybody *F +D#/definitions/io.k8s.api.autoscaling.v2beta1.HorizontalPodAutoscalerBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string JÐ +\ +201U +S +CreatedH +F +D#/definitions/io.k8s.api.autoscaling.v2beta1.HorizontalPodAutoscaler + +401 + + Unauthorized +W +200P +N +OKH +F +D#/definitions/io.k8s.api.autoscaling.v2beta1.HorizontalPodAutoscalerRhttpsj +x-kubernetes-actionput +jg +x-kubernetes-group-version-kindDBgroup: autoscaling +kind: HorizontalPodAutoscaler +version: v2beta1 +*Í +autoscaling_v2beta1 delete a HorizontalPodAutoscaler*9deleteAutoscalingV2beta1NamespacedHorizontalPodAutoscaler2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string J» +L +200E +C +OK= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status +R +202K +I +Accepted= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status + +401 + + UnauthorizedRhttpsj +x-kubernetes-action delete +jg +x-kubernetes-group-version-kindDBgroup: autoscaling +kind: HorizontalPodAutoscaler +version: v2beta1 +BÊ +autoscaling_v2beta16partially update the specified HorizontalPodAutoscaler*8patchAutoscalingV2beta1NamespacedHorizontalPodAutoscaler2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json-patch+json:application/merge-patch+json:&application/strategic-merge-patch+json:application/apply-patch+yamlBN +L +Jbodybody *: +8#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.PatchBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B¯ +¬©¦queryƒfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch)." fieldManager2string BÎ +ËÈÅquery¨Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests."force2boolean Jr +W +200P +N +OKH +F +D#/definitions/io.k8s.api.autoscaling.v2beta1.HorizontalPodAutoscaler + +401 + + UnauthorizedRhttpsjg +x-kubernetes-group-version-kindDBgroup: autoscaling +kind: HorizontalPodAutoscaler +version: v2beta1 +j +x-kubernetes-actionpatch +JD +B@">path#name of the HorizontalPodAutoscaler"name*string˜J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string ü) +L/apis/discovery.k8s.io/v1/watch/namespaces/{namespace}/endpointslices/{name}«) + discovery_v1´watch changes to an object of kind EndpointSlice. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.*'watchDiscoveryV1NamespacedEndpointSlice2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionwatch +j] +x-kubernetes-group-version-kind:8version: v1 +group: discovery.k8s.io +kind: EndpointSlice +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer J: +86"4pathname of the EndpointSlice"name*string˜J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean ù( +L/apis/flowcontrol.apiserver.k8s.io/v1beta1/watch/prioritylevelconfigurations¨(œ +flowcontrolApiserver_v1beta1†watch individual changes to a list of PriorityLevelConfiguration. deprecated: use the 'watch' parameter with a list operation instead.*>watchFlowcontrolApiserverV1beta1PriorityLevelConfigurationList2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsj{ +x-kubernetes-group-version-kindXVversion: v1beta1 +group: flowcontrol.apiserver.k8s.io +kind: PriorityLevelConfiguration +j# +x-kubernetes-action  +watchlist +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean ü( +;/api/v1/watch/namespaces/{namespace}/replicationcontrollers¼(Î +core_v1watch individual changes to a list of ReplicationController. deprecated: use the 'watch' parameter with a list operation instead.*.watchCoreV1NamespacedReplicationControllerList2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsj# +x-kubernetes-action  +watchlist +jW +x-kubernetes-group-version-kind42group: "" +kind: ReplicationController +version: v1 +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean ‹ +#/apis/apiextensions.k8s.io/v1beta1/ãà +apiextensions_v1beta1get available resources*#getApiextensionsV1beta1APIResources2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json:application/yaml:#application/vnd.kubernetes.protobufJp +U +200N +L +OKF +D +B#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.APIResourceList + +401 + + UnauthorizedRhttps‚ + /apis/apiregistration.k8s.io/v1/ÝÚ +apiregistration_v1get available resources* getApiregistrationV1APIResources2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json:application/yaml:#application/vnd.kubernetes.protobufJp +U +200N +L +OKF +D +B#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.APIResourceList + +401 + + UnauthorizedRhttpsã- +L/apis/admissionregistration.k8s.io/v1/validatingwebhookconfigurations/{name}’-ø +admissionregistration_v11read the specified ValidatingWebhookConfiguration*9readAdmissionregistrationV1ValidatingWebhookConfiguration2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*J~ +c +200\ +Z +OKT +R +P#/definitions/io.k8s.api.admissionregistration.v1.ValidatingWebhookConfiguration + +401 + + UnauthorizedRhttpsjz +x-kubernetes-group-version-kindWUgroup: admissionregistration.k8s.io +kind: ValidatingWebhookConfiguration +version: v1 +j +x-kubernetes-actionget +‹ + +admissionregistration_v14replace the specified ValidatingWebhookConfiguration* +<#/definitions/io.k8s.api.storage.v1alpha1.CSIStorageCapacity + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionget +jf +x-kubernetes-group-version-kindCAgroup: storage.k8s.io +kind: CSIStorageCapacity +version: v1alpha1 + +storage_v1alpha1(replace the specified CSIStorageCapacity*2replaceStorageV1alpha1NamespacedCSIStorageCapacity2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BR +P +Nbodybody *> +<#/definitions/io.k8s.api.storage.v1alpha1.CSIStorageCapacityBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string JÀ +O +200H +F +OK@ +> +<#/definitions/io.k8s.api.storage.v1alpha1.CSIStorageCapacity +T +201M +K +Created@ +> +<#/definitions/io.k8s.api.storage.v1alpha1.CSIStorageCapacity + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionput +jf +x-kubernetes-group-version-kindCAkind: CSIStorageCapacity +version: v1alpha1 +group: storage.k8s.io +*¼ +storage_v1alpha1delete a CSIStorageCapacity*1deleteStorageV1alpha1NamespacedCSIStorageCapacity2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string J» +L +200E +C +OK= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status +R +202K +I +Accepted= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status + +401 + + UnauthorizedRhttpsjf +x-kubernetes-group-version-kindCAgroup: storage.k8s.io +kind: CSIStorageCapacity +version: v1alpha1 +j +x-kubernetes-action delete +B± +storage_v1alpha11partially update the specified CSIStorageCapacity*0patchStorageV1alpha1NamespacedCSIStorageCapacity2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json-patch+json:application/merge-patch+json:&application/strategic-merge-patch+json:application/apply-patch+yamlBN +L +Jbodybody *: +8#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.PatchBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B¯ +¬©¦queryƒfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch)." fieldManager2string BÎ +ËÈÅquery¨Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests."force2boolean Jj +O +200H +F +OK@ +> +<#/definitions/io.k8s.api.storage.v1alpha1.CSIStorageCapacity + +401 + + UnauthorizedRhttpsjf +x-kubernetes-group-version-kindCAgroup: storage.k8s.io +kind: CSIStorageCapacity +version: v1alpha1 +j +x-kubernetes-actionpatch +J? +=;"9pathname of the CSIStorageCapacity"name*string˜J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string ­ +3/api/v1/namespaces/{namespace}/pods/{name}/evictionõ +"Î +core_v1create eviction of a Pod*!createCoreV1NamespacedPodEviction2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BF +D +Bbodybody *2 +0#/definitions/io.k8s.api.policy.v1beta1.EvictionJó +C +200< +: +OK4 +2 +0#/definitions/io.k8s.api.policy.v1beta1.Eviction +H +201A +? +Created4 +2 +0#/definitions/io.k8s.api.policy.v1beta1.Eviction +I +202B +@ +Accepted4 +2 +0#/definitions/io.k8s.api.policy.v1beta1.Eviction + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionpost +jS +x-kubernetes-group-version-kind0.group: policy +kind: Eviction +version: v1beta1 +Jž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string J– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string J5 +31"/pathname of the Eviction"name*string˜J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string ä +E/apis/apiextensions.k8s.io/v1/customresourcedefinitions/{name}/statusšî +apiextensions_v15read status of the specified CustomResourceDefinition*1readApiextensionsV1CustomResourceDefinitionStatus2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*J +r +200k +i +OKc +a +_#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1.CustomResourceDefinition + +401 + + UnauthorizedRhttpsjl +x-kubernetes-group-version-kindIGkind: CustomResourceDefinition +version: v1 +group: apiextensions.k8s.io +j +x-kubernetes-actionget +ž + +apiextensions_v18replace status of the specified CustomResourceDefinition*4replaceApiextensionsV1CustomResourceDefinitionStatus2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*Bu +s +qbodybody *a +_#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1.CustomResourceDefinitionBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string J† +r +200k +i +OKc +a +_#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1.CustomResourceDefinition +w +201p +n +Createdc +a +_#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1.CustomResourceDefinition + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionput +jl +x-kubernetes-group-version-kindIGgroup: apiextensions.k8s.io +kind: CustomResourceDefinition +version: v1 +Bí +apiextensions_v1Apartially update status of the specified CustomResourceDefinition*2patchApiextensionsV1CustomResourceDefinitionStatus2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json-patch+json:application/merge-patch+json:&application/strategic-merge-patch+json:application/apply-patch+yamlBN +L +Jbodybody *: +8#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.PatchBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B¯ +¬©¦queryƒfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch)." fieldManager2string BÎ +ËÈÅquery¨Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests."force2boolean J +r +200k +i +OKc +a +_#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1.CustomResourceDefinition + +401 + + UnauthorizedRhttpsjl +x-kubernetes-group-version-kindIGgroup: apiextensions.k8s.io +kind: CustomResourceDefinition +version: v1 +j +x-kubernetes-actionpatch +JE +CA"?path$name of the CustomResourceDefinition"name*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string „ +8/apis/batch/v1/namespaces/{namespace}/jobs/{name}/statusÇß +batch_v1 read status of the specified Job*readBatchV1NamespacedJobStatus2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*JS +8 +2001 +/ +OK) +' +%#/definitions/io.k8s.api.batch.v1.Job + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionget +jH +x-kubernetes-group-version-kind%#group: batch +kind: Job +version: v1 +œ +batch_v1#replace status of the specified Job*!replaceBatchV1NamespacedJobStatus2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*B; +9 +7bodybody *' +%#/definitions/io.k8s.api.batch.v1.JobBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string J’ += +2016 +4 +Created) +' +%#/definitions/io.k8s.api.batch.v1.Job + +401 + + Unauthorized +8 +2001 +/ +OK) +' +%#/definitions/io.k8s.api.batch.v1.JobRhttpsjH +x-kubernetes-group-version-kind%#group: batch +kind: Job +version: v1 +j +x-kubernetes-actionput +BÞ +batch_v1,partially update status of the specified Job*patchBatchV1NamespacedJobStatus2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json-patch+json:application/merge-patch+json:&application/strategic-merge-patch+json:application/apply-patch+yamlBN +L +Jbodybody *: +8#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.PatchBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B¯ +¬©¦queryƒfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch)." fieldManager2string BÎ +ËÈÅquery¨Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests."force2boolean JS +8 +2001 +/ +OK) +' +%#/definitions/io.k8s.api.batch.v1.Job + +401 + + UnauthorizedRhttpsjH +x-kubernetes-group-version-kind%#group: batch +kind: Job +version: v1 +j +x-kubernetes-actionpatch +J0 +.,"*pathname of the Job"name*string˜J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string ¨* +Q/apis/autoscaling/v1/watch/namespaces/{namespace}/horizontalpodautoscalers/{name}Ò)ž +autoscaling_v1¾watch changes to an object of kind HorizontalPodAutoscaler. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.*3watchAutoscalingV1NamespacedHorizontalPodAutoscaler2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionwatch +jb +x-kubernetes-group-version-kind?=group: autoscaling +kind: HorizontalPodAutoscaler +version: v1 +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer JD +B@">path#name of the HorizontalPodAutoscaler"name*string˜J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean “( +//apis/networking.k8s.io/v1beta1/watch/ingressesß'Ó +networking_v1beta1swatch individual changes to a list of Ingress. deprecated: use the 'watch' parameter with a list operation instead.*1watchNetworkingV1beta1IngressListForAllNamespaces2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsj# +x-kubernetes-action  +watchlist +j] +x-kubernetes-group-version-kind:8group: networking.k8s.io +kind: Ingress +version: v1beta1 +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean à +/apis/policy/v1/ËÈ + policy_v1get available resources*getPolicyV1APIResources2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json:application/yaml:#application/vnd.kubernetes.protobufJp +U +200N +L +OKF +D +B#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.APIResourceList + +401 + + UnauthorizedRhttps–_ +@/apis/policy/v1beta1/namespaces/{namespace}/poddisruptionbudgetsÑ^À& +policy_v1beta11list or watch objects of kind PodDisruptionBudget*.listPolicyV1beta1NamespacedPodDisruptionBudget2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*B‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Bï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string B‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string B‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Bú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer Bû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string BÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Bž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer B± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean Jm + +401 + + Unauthorized +R +200K +I +OKC +A +?#/definitions/io.k8s.api.policy.v1beta1.PodDisruptionBudgetListRhttpsj^ +x-kubernetes-group-version-kind;9group: policy +kind: PodDisruptionBudget +version: v1beta1 +j +x-kubernetes-actionlist +"Ù +policy_v1beta1create a PodDisruptionBudget*0createPolicyV1beta1NamespacedPodDisruptionBudget2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BQ +O +Mbodybody *= +;#/definitions/io.k8s.api.policy.v1beta1.PodDisruptionBudgetBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string J” +N +200G +E +OK? += +;#/definitions/io.k8s.api.policy.v1beta1.PodDisruptionBudget +S +201L +J +Created? += +;#/definitions/io.k8s.api.policy.v1beta1.PodDisruptionBudget +T +202M +K +Accepted? += +;#/definitions/io.k8s.api.policy.v1beta1.PodDisruptionBudget + +401 + + UnauthorizedRhttpsj^ +x-kubernetes-group-version-kind;9group: policy +kind: PodDisruptionBudget +version: v1beta1 +j +x-kubernetes-actionpost +*ü, +policy_v1beta1(delete collection of PodDisruptionBudget*:deletePolicyV1beta1CollectionNamespacedPodDisruptionBudget2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string Bž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer B‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Bú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string Bû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string BÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Bž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer Jg +L +200E +C +OK= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status + +401 + + UnauthorizedRhttpsj^ +x-kubernetes-group-version-kind;9version: v1beta1 +group: policy +kind: PodDisruptionBudget +j* +x-kubernetes-actiondeletecollection +J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string ×^ +F/apis/rbac.authorization.k8s.io/v1/namespaces/{namespace}/rolebindingsŒ^³& +rbacAuthorization_v1)list or watch objects of kind RoleBinding*,listRbacAuthorizationV1NamespacedRoleBinding2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*B‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Bï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string B‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string B‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Bú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer Bû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string BÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Bž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer B± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean J^ +C +200< +: +OK4 +2 +0#/definitions/io.k8s.api.rbac.v1.RoleBindingList + +401 + + UnauthorizedRhttpsjd +x-kubernetes-group-version-kindA?group: rbac.authorization.k8s.io +kind: RoleBinding +version: v1 +j +x-kubernetes-actionlist +"Ÿ +rbacAuthorization_v1create a RoleBinding*.createRbacAuthorizationV1NamespacedRoleBinding2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BB +@ +>bodybody *. +,#/definitions/io.k8s.api.rbac.v1.RoleBindingBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string Jç +E +202> +< +Accepted0 +. +,#/definitions/io.k8s.api.rbac.v1.RoleBinding + +401 + + Unauthorized +? +2008 +6 +OK0 +. +,#/definitions/io.k8s.api.rbac.v1.RoleBinding +D +201= +; +Created0 +. +,#/definitions/io.k8s.api.rbac.v1.RoleBindingRhttpsj +x-kubernetes-actionpost +jd +x-kubernetes-group-version-kindA?group: rbac.authorization.k8s.io +kind: RoleBinding +version: v1 +*þ, +rbacAuthorization_v1 delete collection of RoleBinding*8deleteRbacAuthorizationV1CollectionNamespacedRoleBinding2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string Bž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer B‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Bú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string Bû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string BÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Bž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer Jg +L +200E +C +OK= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status + +401 + + UnauthorizedRhttpsjd +x-kubernetes-group-version-kindA?group: rbac.authorization.k8s.io +kind: RoleBinding +version: v1 +j* +x-kubernetes-actiondeletecollection +J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string §' +/api/v1/persistentvolumeclaims„'ø +core_v13list or watch objects of kind PersistentVolumeClaim*/listCoreV1PersistentVolumeClaimForAllNamespaces2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jh +M +200F +D +OK> +< +:#/definitions/io.k8s.api.core.v1.PersistentVolumeClaimList + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionlist +jW +x-kubernetes-group-version-kind42kind: PersistentVolumeClaim +version: v1 +group: "" +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean ‰( +$/api/v1/watch/persistentvolumeclaimsà'Ô +core_v1watch individual changes to a list of PersistentVolumeClaim. deprecated: use the 'watch' parameter with a list operation instead.*4watchCoreV1PersistentVolumeClaimListForAllNamespaces2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsj# +x-kubernetes-action  +watchlist +jW +x-kubernetes-group-version-kind42group: "" +kind: PersistentVolumeClaim +version: v1 +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean —] +//apis/apps/v1/namespaces/{namespace}/daemonsetsã\ü% +apps_v1'list or watch objects of kind DaemonSet*listAppsV1NamespacedDaemonSet2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*B‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Bï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string B‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string B‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Bú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer Bû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string BÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Bž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer B± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean J\ +A +200: +8 +OK2 +0 +.#/definitions/io.k8s.api.apps.v1.DaemonSetList + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionlist +jM +x-kubernetes-group-version-kind*(kind: DaemonSet +version: v1 +group: apps +"â +apps_v1create a DaemonSet*createAppsV1NamespacedDaemonSet2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*B@ +> +<bodybody *, +*#/definitions/io.k8s.api.apps.v1.DaemonSetBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string Já +C +202< +: +Accepted. +, +*#/definitions/io.k8s.api.apps.v1.DaemonSet + +401 + + Unauthorized += +2006 +4 +OK. +, +*#/definitions/io.k8s.api.apps.v1.DaemonSet +B +201; +9 +Created. +, +*#/definitions/io.k8s.api.apps.v1.DaemonSetRhttpsj +x-kubernetes-actionpost +jM +x-kubernetes-group-version-kind*(group: apps +kind: DaemonSet +version: v1 +*É, +apps_v1delete collection of DaemonSet*)deleteAppsV1CollectionNamespacedDaemonSet2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string Bž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer B‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Bú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string Bû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string BÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Bž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer Jg +L +200E +C +OK= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status + +401 + + UnauthorizedRhttpsjM +x-kubernetes-group-version-kind*(group: apps +kind: DaemonSet +version: v1 +j* +x-kubernetes-actiondeletecollection +J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string „' +/api/v1/serviceaccountsè&Ü +core_v1,list or watch objects of kind ServiceAccount*(listCoreV1ServiceAccountForAllNamespaces2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Ja +F +200? += +OK7 +5 +3#/definitions/io.k8s.api.core.v1.ServiceAccountList + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionlist +jP +x-kubernetes-group-version-kind-+group: "" +kind: ServiceAccount +version: v1 +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean ý& +/apis/apps/v1/statefulsetsÞ&Ò +apps_v1)list or watch objects of kind StatefulSet*%listAppsV1StatefulSetForAllNamespaces2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*J^ +C +200< +: +OK4 +2 +0#/definitions/io.k8s.api.apps.v1.StatefulSetList + +401 + + UnauthorizedRhttpsjO +x-kubernetes-group-version-kind,*group: apps +kind: StatefulSet +version: v1 +j +x-kubernetes-actionlist +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean Ï( +4/apis/batch/v1/watch/namespaces/{namespace}/cronjobs–(¨ +batch_v1swatch individual changes to a list of CronJob. deprecated: use the 'watch' parameter with a list operation instead.*!watchBatchV1NamespacedCronJobList2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsj# +x-kubernetes-action  +watchlist +jL +x-kubernetes-group-version-kind)'group: batch +kind: CronJob +version: v1 +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean ì( +./api/v1/namespaces/{namespace}/services/{name}¹(Ù +core_v1read the specified Service*readCoreV1NamespacedService2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*JV +; +2004 +2 +OK, +* +(#/definitions/io.k8s.api.core.v1.Service + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionget +jI +x-kubernetes-group-version-kind&$group: "" +kind: Service +version: v1 +œ +core_v1replace the specified Service*replaceCoreV1NamespacedService2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*B> +< +:bodybody ** +(#/definitions/io.k8s.api.core.v1.ServiceBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string J˜ +; +2004 +2 +OK, +* +(#/definitions/io.k8s.api.core.v1.Service +@ +2019 +7 +Created, +* +(#/definitions/io.k8s.api.core.v1.Service + +401 + + UnauthorizedRhttpsjI +x-kubernetes-group-version-kind&$group: "" +kind: Service +version: v1 +j +x-kubernetes-actionput +*÷ +core_v1delete a Service*deleteCoreV1NamespacedService2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string J» +L +200E +C +OK= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status +R +202K +I +Accepted= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status + +401 + + UnauthorizedRhttpsj +x-kubernetes-action delete +jI +x-kubernetes-group-version-kind&$group: "" +kind: Service +version: v1 +BØ +core_v1&partially update the specified Service*patchCoreV1NamespacedService2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json-patch+json:application/merge-patch+json:&application/strategic-merge-patch+json:application/apply-patch+yamlBN +L +Jbodybody *: +8#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.PatchBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B¯ +¬©¦queryƒfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch)." fieldManager2string BÎ +ËÈÅquery¨Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests."force2boolean JV +; +2004 +2 +OK, +* +(#/definitions/io.k8s.api.core.v1.Service + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionpatch +jI +x-kubernetes-group-version-kind&$kind: Service +version: v1 +group: "" +J4 +20".pathname of the Service"name*string˜J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string á( +0/apis/node.k8s.io/v1/watch/runtimeclasses/{name}¬(å +node_v1³watch changes to an object of kind RuntimeClass. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.*watchNodeV1RuntimeClass2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsjW +x-kubernetes-group-version-kind42group: node.k8s.io +kind: RuntimeClass +version: v1 +j +x-kubernetes-actionwatch +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer J9 +75"3pathname of the RuntimeClass"name*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean ) +;/apis/networking.k8s.io/v1beta1/watch/ingressclasses/{name}Í(† +networking_v1beta1³watch changes to an object of kind IngressClass. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.*"watchNetworkingV1beta1IngressClass2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionwatch +jb +x-kubernetes-group-version-kind?=version: v1beta1 +group: networking.k8s.io +kind: IngressClass +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer J9 +75"3pathname of the IngressClass"name*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean ê' +(/apis/storage.k8s.io/v1/watch/csidrivers½'± + +storage_v1uwatch individual changes to a list of CSIDriver. deprecated: use the 'watch' parameter with a list operation instead.*watchStorageV1CSIDriverList2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsjW +x-kubernetes-group-version-kind42group: storage.k8s.io +kind: CSIDriver +version: v1 +j# +x-kubernetes-action  +watchlist +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean ”) +;/apis/storage.k8s.io/v1beta1/watch/volumeattachments/{name}Ô(‰ +storage_v1beta1·watch changes to an object of kind VolumeAttachment. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.*#watchStorageV1beta1VolumeAttachment2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionwatch +jc +x-kubernetes-group-version-kind@>kind: VolumeAttachment +version: v1beta1 +group: storage.k8s.io +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer J= +;9"7pathname of the VolumeAttachment"name*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean ƒ) +N/apis/admissionregistration.k8s.io/v1beta1/watch/mutatingwebhookconfigurations°(¤ +admissionregistration_v1beta1ˆwatch individual changes to a list of MutatingWebhookConfiguration. deprecated: use the 'watch' parameter with a list operation instead.*AwatchAdmissionregistrationV1beta1MutatingWebhookConfigurationList2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk + +401 + + Unauthorized +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEventRhttpsj# +x-kubernetes-action  +watchlist +j} +x-kubernetes-group-version-kindZXkind: MutatingWebhookConfiguration +version: v1beta1 +group: admissionregistration.k8s.io +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean ¼, +C/apis/certificates.k8s.io/v1beta1/certificatesigningrequests/{name}ô+Ô +certificates_v1beta1,read the specified CertificateSigningRequest*0readCertificatesV1beta1CertificateSigningRequest2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*Ju +Z +200S +Q +OKK +I +G#/definitions/io.k8s.api.certificates.v1beta1.CertificateSigningRequest + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionget +jq +x-kubernetes-group-version-kindNLgroup: certificates.k8s.io +kind: CertificateSigningRequest +version: v1beta1 +Õ +certificates_v1beta1/replace the specified CertificateSigningRequest*3replaceCertificatesV1beta1CertificateSigningRequest2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*B] +[ +Ybodybody *I +G#/definitions/io.k8s.api.certificates.v1beta1.CertificateSigningRequestBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string JÖ +Z +200S +Q +OKK +I +G#/definitions/io.k8s.api.certificates.v1beta1.CertificateSigningRequest +_ +201X +V +CreatedK +I +G#/definitions/io.k8s.api.certificates.v1beta1.CertificateSigningRequest + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionput +jq +x-kubernetes-group-version-kindNLgroup: certificates.k8s.io +kind: CertificateSigningRequest +version: v1beta1 +*Ó +certificates_v1beta1"delete a CertificateSigningRequest*2deleteCertificatesV1beta1CertificateSigningRequest2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string J» +L +200E +C +OK= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status +R +202K +I +Accepted= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status + +401 + + UnauthorizedRhttpsj +x-kubernetes-action delete +jq +x-kubernetes-group-version-kindNLgroup: certificates.k8s.io +kind: CertificateSigningRequest +version: v1beta1 +BÓ +certificates_v1beta18partially update the specified CertificateSigningRequest*1patchCertificatesV1beta1CertificateSigningRequest2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json-patch+json:application/merge-patch+json:&application/strategic-merge-patch+json:application/apply-patch+yamlBN +L +Jbodybody *: +8#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.PatchBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B¯ +¬©¦queryƒfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch)." fieldManager2string BÎ +ËÈÅquery¨Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests."force2boolean Ju +Z +200S +Q +OKK +I +G#/definitions/io.k8s.api.certificates.v1beta1.CertificateSigningRequest + +401 + + UnauthorizedRhttpsjq +x-kubernetes-group-version-kindNLgroup: certificates.k8s.io +kind: CertificateSigningRequest +version: v1beta1 +j +x-kubernetes-actionpatch +JF +DB"@path%name of the CertificateSigningRequest"name*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string › +)/apis/internal.apiserver.k8s.io/v1alpha1/íê +internalApiserver_v1alpha1get available resources*(getInternalApiserverV1alpha1APIResources2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json:application/yaml:#application/vnd.kubernetes.protobufJp + +401 + + Unauthorized +U +200N +L +OKF +D +B#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.APIResourceListRhttpsÈ) +A/apis/events.k8s.io/v1/watch/namespaces/{namespace}/events/{name}‚)à + events_v1¬watch changes to an object of kind Event. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.*watchEventsV1NamespacedEvent2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionwatch +jR +x-kubernetes-group-version-kind/-group: events.k8s.io +kind: Event +version: v1 +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer J2 +0.",pathname of the Event"name*string˜J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean ü( +;/api/v1/watch/namespaces/{namespace}/persistentvolumeclaims¼(Î +core_v1watch individual changes to a list of PersistentVolumeClaim. deprecated: use the 'watch' parameter with a list operation instead.*.watchCoreV1NamespacedPersistentVolumeClaimList2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsj# +x-kubernetes-action  +watchlist +jW +x-kubernetes-group-version-kind42group: "" +kind: PersistentVolumeClaim +version: v1 +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean ÷( +>/apis/apps/v1/watch/namespaces/{namespace}/controllerrevisions´(Æ +apps_v1~watch individual changes to a list of ControllerRevision. deprecated: use the 'watch' parameter with a list operation instead.*+watchAppsV1NamespacedControllerRevisionList2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsj# +x-kubernetes-action  +watchlist +jV +x-kubernetes-group-version-kind31group: apps +kind: ControllerRevision +version: v1 +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean ç +/apis/events.k8s.io/v1/ËÈ + events_v1get available resources*getEventsV1APIResources2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json:application/yaml:#application/vnd.kubernetes.protobufJp +U +200N +L +OKF +D +B#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.APIResourceList + +401 + + UnauthorizedRhttpsˆ_ +8/apis/internal.apiserver.k8s.io/v1alpha1/storageversionsË^Ú& +internalApiserver_v1alpha1,list or watch objects of kind StorageVersion*+listInternalApiserverV1alpha1StorageVersion2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*B‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Bï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string B‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string B‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Bú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer Bû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string BÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Bž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer B± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean Jt +Y +200R +P +OKJ +H +F#/definitions/io.k8s.api.apiserverinternal.v1alpha1.StorageVersionList + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionlist +jm +x-kubernetes-group-version-kindJHgroup: internal.apiserver.k8s.io +kind: StorageVersion +version: v1alpha1 +"ˆ + +internalApiserver_v1alpha1create a StorageVersion*-createInternalApiserverV1alpha1StorageVersion2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BX +V +Tbodybody *D +B#/definitions/io.k8s.api.apiserverinternal.v1alpha1.StorageVersionBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string J© +[ +202T +R +AcceptedF +D +B#/definitions/io.k8s.api.apiserverinternal.v1alpha1.StorageVersion + +401 + + Unauthorized +U +200N +L +OKF +D +B#/definitions/io.k8s.api.apiserverinternal.v1alpha1.StorageVersion +Z +201S +Q +CreatedF +D +B#/definitions/io.k8s.api.apiserverinternal.v1alpha1.StorageVersionRhttpsj +x-kubernetes-actionpost +jm +x-kubernetes-group-version-kindJHgroup: internal.apiserver.k8s.io +kind: StorageVersion +version: v1alpha1 +*- +internalApiserver_v1alpha1#delete collection of StorageVersion*7deleteInternalApiserverV1alpha1CollectionStorageVersion2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string Bž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer B‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Bú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string Bû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string BÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Bž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer Jg +L +200E +C +OK= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status + +401 + + UnauthorizedRhttpsj* +x-kubernetes-actiondeletecollection +jm +x-kubernetes-group-version-kindJHgroup: internal.apiserver.k8s.io +kind: StorageVersion +version: v1alpha1 +JO +MKIquery-If 'true', then the output is pretty printed."pretty2string ž( +5/apis/storage.k8s.io/v1alpha1/watch/volumeattachmentsä'Ø +storage_v1alpha1|watch individual changes to a list of VolumeAttachment. deprecated: use the 'watch' parameter with a list operation instead.*(watchStorageV1alpha1VolumeAttachmentList2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsjd +x-kubernetes-group-version-kindA?group: storage.k8s.io +kind: VolumeAttachment +version: v1alpha1 +j# +x-kubernetes-action  +watchlist +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean ) +//api/v1/namespaces/{namespace}/endpoints/{name}Û(á +core_v1read the specified Endpoints*readCoreV1NamespacedEndpoints2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*JX += +2006 +4 +OK. +, +*#/definitions/io.k8s.api.core.v1.Endpoints + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionget +jK +x-kubernetes-group-version-kind(&group: "" +kind: Endpoints +version: v1 +¨ +core_v1replace the specified Endpoints* replaceCoreV1NamespacedEndpoints2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*B@ +> +<bodybody *, +*#/definitions/io.k8s.api.core.v1.EndpointsBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string Jœ += +2006 +4 +OK. +, +*#/definitions/io.k8s.api.core.v1.Endpoints +B +201; +9 +Created. +, +*#/definitions/io.k8s.api.core.v1.Endpoints + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionput +jK +x-kubernetes-group-version-kind(&kind: Endpoints +version: v1 +group: "" +*û +core_v1delete Endpoints*deleteCoreV1NamespacedEndpoints2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string J» +L +200E +C +OK= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status +R +202K +I +Accepted= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status + +401 + + UnauthorizedRhttpsjK +x-kubernetes-group-version-kind(&version: v1 +group: "" +kind: Endpoints +j +x-kubernetes-action delete +Bà +core_v1(partially update the specified Endpoints*patchCoreV1NamespacedEndpoints2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json-patch+json:application/merge-patch+json:&application/strategic-merge-patch+json:application/apply-patch+yamlBN +L +Jbodybody *: +8#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.PatchBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B¯ +¬©¦queryƒfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch)." fieldManager2string BÎ +ËÈÅquery¨Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests."force2boolean JX + +401 + + Unauthorized += +2006 +4 +OK. +, +*#/definitions/io.k8s.api.core.v1.EndpointsRhttpsj +x-kubernetes-actionpatch +jK +x-kubernetes-group-version-kind(&group: "" +kind: Endpoints +version: v1 +J6 +42"0pathname of the Endpoints"name*string˜J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Ô +>/api/v1/namespaces/{namespace}/pods/{name}/ephemeralcontainers‘“ +core_v1-read ephemeralcontainers of the specified Pod**readCoreV1NamespacedPodEphemeralcontainers2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*Jb + +401 + + Unauthorized +G +200@ +> +OK8 +6 +4#/definitions/io.k8s.api.core.v1.EphemeralContainersRhttpsj +x-kubernetes-actionget +jU +x-kubernetes-group-version-kind20group: "" +kind: EphemeralContainers +version: v1 +î +core_v10replace ephemeralcontainers of the specified Pod*-replaceCoreV1NamespacedPodEphemeralcontainers2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BJ +H +Fbodybody *6 +4#/definitions/io.k8s.api.core.v1.EphemeralContainersBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string J° +L +201E +C +Created8 +6 +4#/definitions/io.k8s.api.core.v1.EphemeralContainers + +401 + + Unauthorized +G +200@ +> +OK8 +6 +4#/definitions/io.k8s.api.core.v1.EphemeralContainersRhttpsjU +x-kubernetes-group-version-kind20kind: EphemeralContainers +version: v1 +group: "" +j +x-kubernetes-actionput +B’ +core_v19partially update ephemeralcontainers of the specified Pod*+patchCoreV1NamespacedPodEphemeralcontainers2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json-patch+json:application/merge-patch+json:&application/strategic-merge-patch+json:application/apply-patch+yamlBN +L +Jbodybody *: +8#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.PatchBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B¯ +¬©¦queryƒfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch)." fieldManager2string BÎ +ËÈÅquery¨Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests."force2boolean Jb +G +200@ +> +OK8 +6 +4#/definitions/io.k8s.api.core.v1.EphemeralContainers + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionpatch +jU +x-kubernetes-group-version-kind20group: "" +kind: EphemeralContainers +version: v1 +J@ +><":pathname of the EphemeralContainers"name*string˜J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string ¢ +'/api/v1/persistentvolumes/{name}/statusöƒ +core_v1-read status of the specified PersistentVolume* readCoreV1PersistentVolumeStatus2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*J_ +D +200= +; +OK5 +3 +1#/definitions/io.k8s.api.core.v1.PersistentVolume + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionget +jR +x-kubernetes-group-version-kind/-kind: PersistentVolume +version: v1 +group: "" +Ø +core_v10replace status of the specified PersistentVolume*#replaceCoreV1PersistentVolumeStatus2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BG +E +Cbodybody *3 +1#/definitions/io.k8s.api.core.v1.PersistentVolumeBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string Jª +D +200= +; +OK5 +3 +1#/definitions/io.k8s.api.core.v1.PersistentVolume +I +201B +@ +Created5 +3 +1#/definitions/io.k8s.api.core.v1.PersistentVolume + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionput +jR +x-kubernetes-group-version-kind/-group: "" +kind: PersistentVolume +version: v1 +B‚ +core_v19partially update status of the specified PersistentVolume*!patchCoreV1PersistentVolumeStatus2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json-patch+json:application/merge-patch+json:&application/strategic-merge-patch+json:application/apply-patch+yamlBN +L +Jbodybody *: +8#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.PatchBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B¯ +¬©¦queryƒfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch)." fieldManager2string BÎ +ËÈÅquery¨Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests."force2boolean J_ +D +200= +; +OK5 +3 +1#/definitions/io.k8s.api.core.v1.PersistentVolume + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionpatch +jR +x-kubernetes-group-version-kind/-group: "" +kind: PersistentVolume +version: v1 +J= +;9"7pathname of the PersistentVolume"name*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string ž) +2/api/v1/namespaces/{namespace}/podtemplates/{name}ç(é +core_v1read the specified PodTemplate*readCoreV1NamespacedPodTemplate2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*JZ +? +2008 +6 +OK0 +. +,#/definitions/io.k8s.api.core.v1.PodTemplate + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionget +jM +x-kubernetes-group-version-kind*(group: "" +kind: PodTemplate +version: v1 +´ +core_v1!replace the specified PodTemplate*"replaceCoreV1NamespacedPodTemplate2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BB +@ +>bodybody *. +,#/definitions/io.k8s.api.core.v1.PodTemplateBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string J  +? +2008 +6 +OK0 +. +,#/definitions/io.k8s.api.core.v1.PodTemplate +D +201= +; +Created0 +. +,#/definitions/io.k8s.api.core.v1.PodTemplate + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionput +jM +x-kubernetes-group-version-kind*(group: "" +kind: PodTemplate +version: v1 +*é +core_v1delete a PodTemplate*!deleteCoreV1NamespacedPodTemplate2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string J¡ +E +202> +< +Accepted0 +. +,#/definitions/io.k8s.api.core.v1.PodTemplate + +401 + + Unauthorized +? +2008 +6 +OK0 +. +,#/definitions/io.k8s.api.core.v1.PodTemplateRhttpsj +x-kubernetes-action delete +jM +x-kubernetes-group-version-kind*(group: "" +kind: PodTemplate +version: v1 +Bè +core_v1*partially update the specified PodTemplate* patchCoreV1NamespacedPodTemplate2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json-patch+json:application/merge-patch+json:&application/strategic-merge-patch+json:application/apply-patch+yamlBN +L +Jbodybody *: +8#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.PatchBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B¯ +¬©¦queryƒfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch)." fieldManager2string BÎ +ËÈÅquery¨Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests."force2boolean JZ +? +2008 +6 +OK0 +. +,#/definitions/io.k8s.api.core.v1.PodTemplate + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionpatch +jM +x-kubernetes-group-version-kind*(group: "" +kind: PodTemplate +version: v1 +J8 +64"2pathname of the PodTemplate"name*string˜J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string ¿^ +5/api/v1/namespaces/{namespace}/replicationcontrollers…^ª& +core_v13list or watch objects of kind ReplicationController*)listCoreV1NamespacedReplicationController2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*B‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Bï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string B‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string B‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Bú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer Bû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string BÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Bž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer B± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean Jh +M +200F +D +OK> +< +:#/definitions/io.k8s.api.core.v1.ReplicationControllerList + +401 + + UnauthorizedRhttpsjW +x-kubernetes-group-version-kind42version: v1 +group: "" +kind: ReplicationController +j +x-kubernetes-actionlist +"´ +core_v1create a ReplicationController*+createCoreV1NamespacedReplicationController2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BL +J +Hbodybody *8 +6#/definitions/io.k8s.api.core.v1.ReplicationControllerBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string J… +I +200B +@ +OK: +8 +6#/definitions/io.k8s.api.core.v1.ReplicationController +N +201G +E +Created: +8 +6#/definitions/io.k8s.api.core.v1.ReplicationController +O +202H +F +Accepted: +8 +6#/definitions/io.k8s.api.core.v1.ReplicationController + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionpost +jW +x-kubernetes-group-version-kind42group: "" +kind: ReplicationController +version: v1 +*ë, +core_v1*delete collection of ReplicationController*5deleteCoreV1CollectionNamespacedReplicationController2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string Bž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer B‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Bú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string Bû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string BÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Bž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer Jg +L +200E +C +OK= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status + +401 + + UnauthorizedRhttpsjW +x-kubernetes-group-version-kind42group: "" +kind: ReplicationController +version: v1 +j* +x-kubernetes-actiondeletecollection +J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string ¯ +:/apis/authorization.k8s.io/v1beta1/selfsubjectrulesreviewsð +"â +authorization_v1beta1create a SelfSubjectRulesReview*0createAuthorizationV1beta1SelfSubjectRulesReview2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*B[ +Y +Wbodybody *G +E#/definitions/io.k8s.api.authorization.v1beta1.SelfSubjectRulesReviewJ² +^ +202W +U +AcceptedI +G +E#/definitions/io.k8s.api.authorization.v1beta1.SelfSubjectRulesReview + +401 + + Unauthorized +X +200Q +O +OKI +G +E#/definitions/io.k8s.api.authorization.v1beta1.SelfSubjectRulesReview +] +201V +T +CreatedI +G +E#/definitions/io.k8s.api.authorization.v1beta1.SelfSubjectRulesReviewRhttpsjo +x-kubernetes-group-version-kindLJgroup: authorization.k8s.io +kind: SelfSubjectRulesReview +version: v1beta1 +j +x-kubernetes-actionpost +Jž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string J– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string JO +MKIquery-If 'true', then the output is pretty printed."pretty2string ­ +1/api/v1/namespaces/{namespace}/pods/{name}/attach÷ – +core_v1%connect GET requests to attach of Pod*#connectCoreV1GetNamespacedPodAttach2*/*:*/*J7 + +200 + +OK + ² +string + +401 + + UnauthorizedRhttpsj! +x-kubernetes-action +connect +jR +x-kubernetes-group-version-kind/-group: "" +kind: PodAttachOptions +version: v1 +"˜ +core_v1&connect POST requests to attach of Pod*$connectCoreV1PostNamespacedPodAttach2*/*:*/*J7 + +200 + +OK + ² +string + +401 + + UnauthorizedRhttpsjR +x-kubernetes-group-version-kind/-group: "" +kind: PodAttachOptions +version: v1 +j! +x-kubernetes-action +connect +Jœ +™–“querytThe container in which to execute the command. Defaults to only container if there is only one container in the pod." container2string J= +;9"7pathname of the PodAttachOptions"name*string˜J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜Jƒ +€~|query_Stderr if true indicates that stderr is to be redirected for the attach call. Defaults to true."stderr2boolean J +}{query_Stdin if true, redirects the standard input stream of the pod for this call. Defaults to false."stdin2boolean Jƒ +€~|query_Stdout if true indicates that stdout is to be redirected for the attach call. Defaults to true."stdout2boolean Jð +íêçqueryÌTTY if true indicates that a tty will be allocated for the attach call. This is passed through the container runtime so the tty is allocated on the worker node by the container runtime. Defaults to false."tty2boolean À( +:/apis/rbac.authorization.k8s.io/v1beta1/watch/rolebindings(õ +rbacAuthorization_v1beta1wwatch individual changes to a list of RoleBinding. deprecated: use the 'watch' parameter with a list operation instead.* +OK8 +6 +4#/definitions/io.k8s.api.storage.v1beta1.CSINodeList + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionlist +jZ +x-kubernetes-group-version-kind75kind: CSINode +version: v1beta1 +group: storage.k8s.io +"‰ +storage_v1beta1create a CSINode*createStorageV1beta1CSINode2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BF +D +Bbodybody *2 +0#/definitions/io.k8s.api.storage.v1beta1.CSINodeBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string Jó +C +200< +: +OK4 +2 +0#/definitions/io.k8s.api.storage.v1beta1.CSINode +H +201A +? +Created4 +2 +0#/definitions/io.k8s.api.storage.v1beta1.CSINode +I +202B +@ +Accepted4 +2 +0#/definitions/io.k8s.api.storage.v1beta1.CSINode + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionpost +jZ +x-kubernetes-group-version-kind75group: storage.k8s.io +kind: CSINode +version: v1beta1 +*Ø, +storage_v1beta1delete collection of CSINode*%deleteStorageV1beta1CollectionCSINode2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string Bž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer B‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Bú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string Bû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string BÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Bž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer Jg +L +200E +C +OK= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status + +401 + + UnauthorizedRhttpsjZ +x-kubernetes-group-version-kind75kind: CSINode +version: v1beta1 +group: storage.k8s.io +j* +x-kubernetes-actiondeletecollection +JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Ý\ +/api/v1/persistentvolumes¿\Œ& +core_v1.list or watch objects of kind PersistentVolume*listCoreV1PersistentVolume2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*B‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Bï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string B‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string B‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Bú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer Bû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string BÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Bž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer B± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean Jc + +401 + + Unauthorized +H +200A +? +OK9 +7 +5#/definitions/io.k8s.api.core.v1.PersistentVolumeListRhttpsj +x-kubernetes-actionlist +jR +x-kubernetes-group-version-kind/-kind: PersistentVolume +version: v1 +group: "" +"‡ +core_v1create a PersistentVolume*createCoreV1PersistentVolume2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BG +E +Cbodybody *3 +1#/definitions/io.k8s.api.core.v1.PersistentVolumeBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string Jö +D +200= +; +OK5 +3 +1#/definitions/io.k8s.api.core.v1.PersistentVolume +I +201B +@ +Created5 +3 +1#/definitions/io.k8s.api.core.v1.PersistentVolume +J +202C +A +Accepted5 +3 +1#/definitions/io.k8s.api.core.v1.PersistentVolume + +401 + + UnauthorizedRhttpsjR +x-kubernetes-group-version-kind/-version: v1 +group: "" +kind: PersistentVolume +j +x-kubernetes-actionpost +*Ò, +core_v1%delete collection of PersistentVolume*&deleteCoreV1CollectionPersistentVolume2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string Bž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer B‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Bú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string Bû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string BÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Bž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer Jg +L +200E +C +OK= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status + +401 + + UnauthorizedRhttpsj* +x-kubernetes-actiondeletecollection +jR +x-kubernetes-group-version-kind/-kind: PersistentVolume +version: v1 +group: "" +JO +MKIquery-If 'true', then the output is pretty printed."pretty2string  ) +0/api/v1/watch/namespaces/{namespace}/pods/{name}ë(Ë +core_v1ªwatch changes to an object of kind Pod. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.*watchCoreV1NamespacedPod2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionwatch +jE +x-kubernetes-group-version-kind" group: "" +kind: Pod +version: v1 +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer J0 +.,"*pathname of the Pod"name*string˜J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean ô, +>/apis/apiextensions.k8s.io/v1/customresourcedefinitions/{name}±,Þ +apiextensions_v1+read the specified CustomResourceDefinition*+readApiextensionsV1CustomResourceDefinition2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*J + +401 + + Unauthorized +r +200k +i +OKc +a +_#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1.CustomResourceDefinitionRhttpsjl +x-kubernetes-group-version-kindIGgroup: apiextensions.k8s.io +kind: CustomResourceDefinition +version: v1 +j +x-kubernetes-actionget +Ž + +apiextensions_v1.replace the specified CustomResourceDefinition*.replaceApiextensionsV1CustomResourceDefinition2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*Bu +s +qbodybody *a +_#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1.CustomResourceDefinitionBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string J† +r +200k +i +OKc +a +_#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1.CustomResourceDefinition +w +201p +n +Createdc +a +_#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1.CustomResourceDefinition + +401 + + UnauthorizedRhttpsjl +x-kubernetes-group-version-kindIGgroup: apiextensions.k8s.io +kind: CustomResourceDefinition +version: v1 +j +x-kubernetes-actionput +*Ä +apiextensions_v1!delete a CustomResourceDefinition*-deleteApiextensionsV1CustomResourceDefinition2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string J» +L +200E +C +OK= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status +R +202K +I +Accepted= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status + +401 + + UnauthorizedRhttpsjl +x-kubernetes-group-version-kindIGgroup: apiextensions.k8s.io +kind: CustomResourceDefinition +version: v1 +j +x-kubernetes-action delete +BÝ +apiextensions_v17partially update the specified CustomResourceDefinition*,patchApiextensionsV1CustomResourceDefinition2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json-patch+json:application/merge-patch+json:&application/strategic-merge-patch+json:application/apply-patch+yamlBN +L +Jbodybody *: +8#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.PatchBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B¯ +¬©¦queryƒfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch)." fieldManager2string BÎ +ËÈÅquery¨Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests."force2boolean J + +401 + + Unauthorized +r +200k +i +OKc +a +_#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1.CustomResourceDefinitionRhttpsjl +x-kubernetes-group-version-kindIGkind: CustomResourceDefinition +version: v1 +group: apiextensions.k8s.io +j +x-kubernetes-actionpatch +JE +CA"?path$name of the CustomResourceDefinition"name*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string ä' +/apis/apps/v1/watch/replicasetsÀ'´ +apps_v1vwatch individual changes to a list of ReplicaSet. deprecated: use the 'watch' parameter with a list operation instead.*)watchAppsV1ReplicaSetListForAllNamespaces2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsjN +x-kubernetes-group-version-kind+)group: apps +kind: ReplicaSet +version: v1 +j# +x-kubernetes-action  +watchlist +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean  +S/apis/authorization.k8s.io/v1beta1/namespaces/{namespace}/localsubjectaccessreviewsê "ú +authorization_v1beta1!create a LocalSubjectAccessReview*<":pathname of the PodDisruptionBudget"name*string˜J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean Õ+ +B/apis/rbac.authorization.k8s.io/v1beta1/clusterrolebindings/{name}Ž+À +rbacAuthorization_v1beta1%read the specified ClusterRoleBinding*.readRbacAuthorizationV1beta1ClusterRoleBinding2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*Jf +K +200D +B +OK< +: +8#/definitions/io.k8s.api.rbac.v1beta1.ClusterRoleBinding + +401 + + UnauthorizedRhttpsjp +x-kubernetes-group-version-kindMKversion: v1beta1 +group: rbac.authorization.k8s.io +kind: ClusterRoleBinding +j +x-kubernetes-actionget +£ +rbacAuthorization_v1beta1(replace the specified ClusterRoleBinding*1replaceRbacAuthorizationV1beta1ClusterRoleBinding2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BN +L +Jbodybody *: +8#/definitions/io.k8s.api.rbac.v1beta1.ClusterRoleBindingBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string J¸ +K +200D +B +OK< +: +8#/definitions/io.k8s.api.rbac.v1beta1.ClusterRoleBinding +P +201I +G +Created< +: +8#/definitions/io.k8s.api.rbac.v1beta1.ClusterRoleBinding + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionput +jp +x-kubernetes-group-version-kindMKversion: v1beta1 +group: rbac.authorization.k8s.io +kind: ClusterRoleBinding +*Î +rbacAuthorization_v1beta1delete a ClusterRoleBinding*0deleteRbacAuthorizationV1beta1ClusterRoleBinding2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string J» +L +200E +C +OK= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status +R +202K +I +Accepted= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status + +401 + + UnauthorizedRhttpsjp +x-kubernetes-group-version-kindMKversion: v1beta1 +group: rbac.authorization.k8s.io +kind: ClusterRoleBinding +j +x-kubernetes-action delete +B¿ +rbacAuthorization_v1beta11partially update the specified ClusterRoleBinding*/patchRbacAuthorizationV1beta1ClusterRoleBinding2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json-patch+json:application/merge-patch+json:&application/strategic-merge-patch+json:application/apply-patch+yamlBN +L +Jbodybody *: +8#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.PatchBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B¯ +¬©¦queryƒfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch)." fieldManager2string BÎ +ËÈÅquery¨Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests."force2boolean Jf +K +200D +B +OK< +: +8#/definitions/io.k8s.api.rbac.v1beta1.ClusterRoleBinding + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionpatch +jp +x-kubernetes-group-version-kindMKgroup: rbac.authorization.k8s.io +kind: ClusterRoleBinding +version: v1beta1 +J? +=;"9pathname of the ClusterRoleBinding"name*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Ý) +5/api/v1/namespaces/{namespace}/serviceaccounts/{name}£)õ +core_v1!read the specified ServiceAccount*"readCoreV1NamespacedServiceAccount2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*J] + +401 + + Unauthorized +B +200; +9 +OK3 +1 +/#/definitions/io.k8s.api.core.v1.ServiceAccountRhttpsj +x-kubernetes-actionget +jP +x-kubernetes-group-version-kind-+group: "" +kind: ServiceAccount +version: v1 +Æ +core_v1$replace the specified ServiceAccount*%replaceCoreV1NamespacedServiceAccount2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BE +C +Abodybody *1 +/#/definitions/io.k8s.api.core.v1.ServiceAccountBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string J¦ +G +201@ +> +Created3 +1 +/#/definitions/io.k8s.api.core.v1.ServiceAccount + +401 + + Unauthorized +B +200; +9 +OK3 +1 +/#/definitions/io.k8s.api.core.v1.ServiceAccountRhttpsjP +x-kubernetes-group-version-kind-+kind: ServiceAccount +version: v1 +group: "" +j +x-kubernetes-actionput +*ø +core_v1delete a ServiceAccount*$deleteCoreV1NamespacedServiceAccount2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string J§ +B +200; +9 +OK3 +1 +/#/definitions/io.k8s.api.core.v1.ServiceAccount +H +202A +? +Accepted3 +1 +/#/definitions/io.k8s.api.core.v1.ServiceAccount + +401 + + UnauthorizedRhttpsjP +x-kubernetes-group-version-kind-+group: "" +kind: ServiceAccount +version: v1 +j +x-kubernetes-action delete +Bô +core_v1-partially update the specified ServiceAccount*#patchCoreV1NamespacedServiceAccount2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json-patch+json:application/merge-patch+json:&application/strategic-merge-patch+json:application/apply-patch+yamlBN +L +Jbodybody *: +8#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.PatchBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B¯ +¬©¦queryƒfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch)." fieldManager2string BÎ +ËÈÅquery¨Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests."force2boolean J] +B +200; +9 +OK3 +1 +/#/definitions/io.k8s.api.core.v1.ServiceAccount + +401 + + UnauthorizedRhttpsjP +x-kubernetes-group-version-kind-+group: "" +kind: ServiceAccount +version: v1 +j +x-kubernetes-actionpatch +J; +97"5pathname of the ServiceAccount"name*string˜J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Ë* +?/apis/apps/v1/namespaces/{namespace}/controllerrevisions/{name}‡*‡ +apps_v1%read the specified ControllerRevision*&readAppsV1NamespacedControllerRevision2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*Ja +F +200? += +OK7 +5 +3#/definitions/io.k8s.api.apps.v1.ControllerRevision + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionget +jV +x-kubernetes-group-version-kind31version: v1 +group: apps +kind: ControllerRevision +à +apps_v1(replace the specified ControllerRevision*)replaceAppsV1NamespacedControllerRevision2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BI +G +Ebodybody *5 +3#/definitions/io.k8s.api.apps.v1.ControllerRevisionBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string J® +F +200? += +OK7 +5 +3#/definitions/io.k8s.api.apps.v1.ControllerRevision +K +201D +B +Created7 +5 +3#/definitions/io.k8s.api.apps.v1.ControllerRevision + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionput +jV +x-kubernetes-group-version-kind31group: apps +kind: ControllerRevision +version: v1 +*š +apps_v1delete a ControllerRevision*(deleteAppsV1NamespacedControllerRevision2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string J» +L +200E +C +OK= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status +R +202K +I +Accepted= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status + +401 + + UnauthorizedRhttpsjV +x-kubernetes-group-version-kind31group: apps +kind: ControllerRevision +version: v1 +j +x-kubernetes-action delete +B† +apps_v11partially update the specified ControllerRevision*'patchAppsV1NamespacedControllerRevision2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json-patch+json:application/merge-patch+json:&application/strategic-merge-patch+json:application/apply-patch+yamlBN +L +Jbodybody *: +8#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.PatchBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B¯ +¬©¦queryƒfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch)." fieldManager2string BÎ +ËÈÅquery¨Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests."force2boolean Ja +F +200? += +OK7 +5 +3#/definitions/io.k8s.api.apps.v1.ControllerRevision + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionpatch +jV +x-kubernetes-group-version-kind31group: apps +kind: ControllerRevision +version: v1 +J? +=;"9pathname of the ControllerRevision"name*string˜J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string é +=/apis/apps/v1/namespaces/{namespace}/replicasets/{name}/scale§ù +apps_v1&read scale of the specified ReplicaSet*#readAppsV1NamespacedReplicaSetScale2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*J[ +@ +2009 +7 +OK1 +/ +-#/definitions/io.k8s.api.autoscaling.v1.Scale + +401 + + UnauthorizedRhttpsjP +x-kubernetes-group-version-kind-+group: autoscaling +kind: Scale +version: v1 +j +x-kubernetes-actionget +Æ +apps_v1)replace scale of the specified ReplicaSet*&replaceAppsV1NamespacedReplicaSetScale2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BC +A +?bodybody */ +-#/definitions/io.k8s.api.autoscaling.v1.ScaleBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string J¢ +@ +2009 +7 +OK1 +/ +-#/definitions/io.k8s.api.autoscaling.v1.Scale +E +201> +< +Created1 +/ +-#/definitions/io.k8s.api.autoscaling.v1.Scale + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionput +jP +x-kubernetes-group-version-kind-+group: autoscaling +kind: Scale +version: v1 +Bø +apps_v12partially update scale of the specified ReplicaSet*$patchAppsV1NamespacedReplicaSetScale2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json-patch+json:application/merge-patch+json:&application/strategic-merge-patch+json:application/apply-patch+yamlBN +L +Jbodybody *: +8#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.PatchBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B¯ +¬©¦queryƒfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch)." fieldManager2string BÎ +ËÈÅquery¨Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests."force2boolean J[ +@ +2009 +7 +OK1 +/ +-#/definitions/io.k8s.api.autoscaling.v1.Scale + +401 + + UnauthorizedRhttpsjP +x-kubernetes-group-version-kind-+group: autoscaling +kind: Scale +version: v1 +j +x-kubernetes-actionpatch +J2 +0.",pathname of the Scale"name*string˜J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string ‡( +0/apis/scheduling.k8s.io/v1/watch/priorityclassesÒ'Æ + scheduling_v1ywatch individual changes to a list of PriorityClass. deprecated: use the 'watch' parameter with a list operation instead.*"watchSchedulingV1PriorityClassList2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsj^ +x-kubernetes-group-version-kind;9group: scheduling.k8s.io +kind: PriorityClass +version: v1 +j# +x-kubernetes-action  +watchlist +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean ð* +"<path!name of the PersistentVolumeClaim"name*string˜J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string –) +=/apis/apiregistration.k8s.io/v1beta1/watch/apiservices/{name}Ô( +apiregistration_v1beta1±watch changes to an object of kind APIService. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.*%watchApiregistrationV1beta1APIService2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionwatch +je +x-kubernetes-group-version-kindB@group: apiregistration.k8s.io +version: v1beta1 +kind: APIService +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer J7 +53"1pathname of the APIService"name*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean ƒ) +A/apis/policy/v1/watch/namespaces/{namespace}/poddisruptionbudgets½(Ï + policy_v1watch individual changes to a list of PodDisruptionBudget. deprecated: use the 'watch' parameter with a list operation instead.*.watchPolicyV1NamespacedPodDisruptionBudgetList2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsj# +x-kubernetes-action  +watchlist +jY +x-kubernetes-group-version-kind64group: policy +kind: PodDisruptionBudget +version: v1 +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean å +"/api/v1/namespaces/{name}/finalize¾ ø +core_v1+replace finalize of the specified Namespace*replaceCoreV1NamespaceFinalize2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*B@ +> +<bodybody *, +*#/definitions/io.k8s.api.core.v1.NamespaceJœ += +2006 +4 +OK. +, +*#/definitions/io.k8s.api.core.v1.Namespace +B +201; +9 +Created. +, +*#/definitions/io.k8s.api.core.v1.Namespace + +401 + + UnauthorizedRhttpsjK +x-kubernetes-group-version-kind(&kind: Namespace +version: v1 +group: "" +j +x-kubernetes-actionput +Jž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string J– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string J6 +42"0pathname of the Namespace"name*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Ê( +./api/v1/watch/namespaces/{namespace}/endpoints—(© +core_v1uwatch individual changes to a list of Endpoints. deprecated: use the 'watch' parameter with a list operation instead.*"watchCoreV1NamespacedEndpointsList2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsj# +x-kubernetes-action  +watchlist +jK +x-kubernetes-group-version-kind(&group: "" +kind: Endpoints +version: v1 +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean û +/apis/extensions/v1beta1/ÝÚ +extensions_v1beta1get available resources* getExtensionsV1beta1APIResources2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json:application/yaml:#application/vnd.kubernetes.protobufJp +U +200N +L +OKF +D +B#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.APIResourceList + +401 + + UnauthorizedRhttps’) +0/api/v1/namespaces/{namespace}/configmaps/{name}Ý(á +core_v1read the specified ConfigMap*readCoreV1NamespacedConfigMap2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*JX += +2006 +4 +OK. +, +*#/definitions/io.k8s.api.core.v1.ConfigMap + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionget +jK +x-kubernetes-group-version-kind(&group: "" +kind: ConfigMap +version: v1 +¨ +core_v1replace the specified ConfigMap* replaceCoreV1NamespacedConfigMap2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*B@ +> +<bodybody *, +*#/definitions/io.k8s.api.core.v1.ConfigMapBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string Jœ += +2006 +4 +OK. +, +*#/definitions/io.k8s.api.core.v1.ConfigMap +B +201; +9 +Created. +, +*#/definitions/io.k8s.api.core.v1.ConfigMap + +401 + + UnauthorizedRhttpsjK +x-kubernetes-group-version-kind(&kind: ConfigMap +version: v1 +group: "" +j +x-kubernetes-actionput +*ý +core_v1delete a ConfigMap*deleteCoreV1NamespacedConfigMap2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string J» +R +202K +I +Accepted= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status + +401 + + Unauthorized +L +200E +C +OK= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.StatusRhttpsj +x-kubernetes-action delete +jK +x-kubernetes-group-version-kind(&group: "" +kind: ConfigMap +version: v1 +Bà +core_v1(partially update the specified ConfigMap*patchCoreV1NamespacedConfigMap2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json-patch+json:application/merge-patch+json:&application/strategic-merge-patch+json:application/apply-patch+yamlBN +L +Jbodybody *: +8#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.PatchBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B¯ +¬©¦queryƒfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch)." fieldManager2string BÎ +ËÈÅquery¨Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests."force2boolean JX + +401 + + Unauthorized += +2006 +4 +OK. +, +*#/definitions/io.k8s.api.core.v1.ConfigMapRhttpsj +x-kubernetes-actionpatch +jK +x-kubernetes-group-version-kind(&group: "" +kind: ConfigMap +version: v1 +J6 +42"0pathname of the ConfigMap"name*string˜J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string µ( +3/apis/autoscaling/v1/watch/horizontalpodautoscalersý'ñ +autoscaling_v1ƒwatch individual changes to a list of HorizontalPodAutoscaler. deprecated: use the 'watch' parameter with a list operation instead.*=watchAutoscalingV1HorizontalPodAutoscalerListForAllNamespaces2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsj# +x-kubernetes-action  +watchlist +jb +x-kubernetes-group-version-kind?=kind: HorizontalPodAutoscaler +version: v1 +group: autoscaling +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean ×` +E/apis/admissionregistration.k8s.io/v1/validatingwebhookconfigurations`’' +admissionregistration_v1<":pathname of the PodDisruptionBudget"name*string˜J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Ý( +//apis/storage.k8s.io/v1/watch/csidrivers/{name}©(å + +storage_v1°watch changes to an object of kind CSIDriver. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.*watchStorageV1CSIDriver2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionwatch +jW +x-kubernetes-group-version-kind42group: storage.k8s.io +kind: CSIDriver +version: v1 +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer J6 +42"0pathname of the CSIDriver"name*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean ÿ + +2/api/v1/namespaces/{namespace}/pods/{name}/bindingÈ +"¢ +core_v1create binding of a Pod* createCoreV1NamespacedPodBinding2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*B> +< +:bodybody ** +(#/definitions/io.k8s.api.core.v1.BindingJÛ + +401 + + Unauthorized +; +2004 +2 +OK, +* +(#/definitions/io.k8s.api.core.v1.Binding +@ +2019 +7 +Created, +* +(#/definitions/io.k8s.api.core.v1.Binding +A +202: +8 +Accepted, +* +(#/definitions/io.k8s.api.core.v1.BindingRhttpsj +x-kubernetes-actionpost +jI +x-kubernetes-group-version-kind&$group: "" +kind: Binding +version: v1 +Jž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string J– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string J4 +20".pathname of the Binding"name*string˜J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string ü +/apis/apiextensions.k8s.io/v1/ÙÖ +apiextensions_v1get available resources*getApiextensionsV1APIResources2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json:application/yaml:#application/vnd.kubernetes.protobufJp +U +200N +L +OKF +D +B#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.APIResourceList + +401 + + UnauthorizedRhttpsº^ ++/apis/apiregistration.k8s.io/v1/apiservicesŠ^¾& +apiregistration_v1(list or watch objects of kind APIService*listApiregistrationV1APIService2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*B‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Bï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string B‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string B‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Bú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer Bû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string BÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Bž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer B± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean J} +b +200[ +Y +OKS +Q +O#/definitions/io.k8s.kube-aggregator.pkg.apis.apiregistration.v1.APIServiceList + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionlist +j` +x-kubernetes-group-version-kind=;group: apiregistration.k8s.io +version: v1 +kind: APIService +"ˆ + +apiregistration_v1create an APIService*!createApiregistrationV1APIService2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*Ba +_ +]bodybody *M +K#/definitions/io.k8s.kube-aggregator.pkg.apis.apiregistration.v1.APIServiceBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string JÄ +^ +200W +U +OKO +M +K#/definitions/io.k8s.kube-aggregator.pkg.apis.apiregistration.v1.APIService +c +201\ +Z +CreatedO +M +K#/definitions/io.k8s.kube-aggregator.pkg.apis.apiregistration.v1.APIService +d +202] +[ +AcceptedO +M +K#/definitions/io.k8s.kube-aggregator.pkg.apis.apiregistration.v1.APIService + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionpost +j` +x-kubernetes-group-version-kind=;kind: APIService +group: apiregistration.k8s.io +version: v1 +*ê, +apiregistration_v1delete collection of APIService*+deleteApiregistrationV1CollectionAPIService2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string Bž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer B‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Bú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string Bû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string BÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Bž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer Jg +L +200E +C +OK= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status + +401 + + UnauthorizedRhttpsj* +x-kubernetes-actiondeletecollection +j` +x-kubernetes-group-version-kind=;group: apiregistration.k8s.io +version: v1 +kind: APIService +JO +MKIquery-If 'true', then the output is pretty printed."pretty2string · +!/api/v1/nodes/{name}/proxy/{path}‘” +core_v1%connect GET requests to proxy of Node*!connectCoreV1GetNodeProxyWithPath2*/*:*/*J7 + +200 + +OK + ² +string + +401 + + UnauthorizedRhttpsj! +x-kubernetes-action +connect +jR +x-kubernetes-group-version-kind/-group: "" +kind: NodeProxyOptions +version: v1 +” +core_v1%connect PUT requests to proxy of Node*!connectCoreV1PutNodeProxyWithPath2*/*:*/*J7 + +200 + +OK + ² +string + +401 + + UnauthorizedRhttpsjR +x-kubernetes-group-version-kind/-group: "" +kind: NodeProxyOptions +version: v1 +j! +x-kubernetes-action +connect +"– +core_v1&connect POST requests to proxy of Node*"connectCoreV1PostNodeProxyWithPath2*/*:*/*J7 + +401 + + Unauthorized + +200 + +OK + ² +stringRhttpsj! +x-kubernetes-action +connect +jR +x-kubernetes-group-version-kind/-group: "" +kind: NodeProxyOptions +version: v1 +*š +core_v1(connect DELETE requests to proxy of Node*$connectCoreV1DeleteNodeProxyWithPath2*/*:*/*J7 + +200 + +OK + ² +string + +401 + + UnauthorizedRhttpsj! +x-kubernetes-action +connect +jR +x-kubernetes-group-version-kind/-group: "" +kind: NodeProxyOptions +version: v1 +2œ +core_v1)connect OPTIONS requests to proxy of Node*%connectCoreV1OptionsNodeProxyWithPath2*/*:*/*J7 + +200 + +OK + ² +string + +401 + + UnauthorizedRhttpsj! +x-kubernetes-action +connect +jR +x-kubernetes-group-version-kind/-group: "" +kind: NodeProxyOptions +version: v1 +:– +core_v1&connect HEAD requests to proxy of Node*"connectCoreV1HeadNodeProxyWithPath2*/*:*/*J7 + +200 + +OK + ² +string + +401 + + UnauthorizedRhttpsjR +x-kubernetes-group-version-kind/-kind: NodeProxyOptions +version: v1 +group: "" +j! +x-kubernetes-action +connect +B˜ +core_v1'connect PATCH requests to proxy of Node*#connectCoreV1PatchNodeProxyWithPath2*/*:*/*J7 + +200 + +OK + ² +string + +401 + + UnauthorizedRhttpsj! +x-kubernetes-action +connect +jR +x-kubernetes-group-version-kind/-group: "" +kind: NodeProxyOptions +version: v1 +J= +;9"7pathname of the NodeProxyOptions"name*string˜J5 +31"/pathpath to the resource"path*string˜Jb +`^\queryBPath is the URL path to use for the current proxy request to node."path2string ³( +)/api/v1/watch/namespaces/{namespace}/pods…(— +core_v1owatch individual changes to a list of Pod. deprecated: use the 'watch' parameter with a list operation instead.*watchCoreV1NamespacedPodList2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk + +401 + + Unauthorized +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEventRhttpsj# +x-kubernetes-action  +watchlist +jE +x-kubernetes-group-version-kind" group: "" +kind: Pod +version: v1 +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean Ð) +>/apis/apps/v1/watch/namespaces/{namespace}/statefulsets/{name})å +apps_v1²watch changes to an object of kind StatefulSet. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.* watchAppsV1NamespacedStatefulSet2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionwatch +jO +x-kubernetes-group-version-kind,*group: apps +kind: StatefulSet +version: v1 +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer J8 +64"2pathname of the StatefulSet"name*string˜J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean ’( +./apis/coordination.k8s.io/v1beta1/watch/leasesß'Ó +coordination_v1beta1qwatch individual changes to a list of Lease. deprecated: use the 'watch' parameter with a list operation instead.*1watchCoordinationV1beta1LeaseListForAllNamespaces2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsj# +x-kubernetes-action  +watchlist +j] +x-kubernetes-group-version-kind:8group: coordination.k8s.io +kind: Lease +version: v1beta1 +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean €* +H/apis/policy/v1/watch/namespaces/{namespace}/poddisruptionbudgets/{name}³)ƒ + policy_v1ºwatch changes to an object of kind PodDisruptionBudget. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.**watchPolicyV1NamespacedPodDisruptionBudget2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsjY +x-kubernetes-group-version-kind64kind: PodDisruptionBudget +version: v1 +group: policy +j +x-kubernetes-actionwatch +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer J@ +><":pathname of the PodDisruptionBudget"name*string˜J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean ñ) +L/apis/rbac.authorization.k8s.io/v1/watch/namespaces/{namespace}/roles/{name} )ÿ +rbacAuthorization_v1«watch changes to an object of kind Role. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.*&watchRbacAuthorizationV1NamespacedRole2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk + +401 + + Unauthorized +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEventRhttpsj] +x-kubernetes-group-version-kind:8kind: Role +version: v1 +group: rbac.authorization.k8s.io +j +x-kubernetes-actionwatch +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer J1 +/-"+pathname of the Role"name*string˜J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean À( +)/apis/storage.k8s.io/v1/csidrivers/{name}’(ì + +storage_v1read the specified CSIDriver*readStorageV1CSIDriver2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*J[ +@ +2009 +7 +OK1 +/ +-#/definitions/io.k8s.api.storage.v1.CSIDriver + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionget +jW +x-kubernetes-group-version-kind42group: storage.k8s.io +kind: CSIDriver +version: v1 +¹ + +storage_v1replace the specified CSIDriver*replaceStorageV1CSIDriver2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BC +A +?bodybody */ +-#/definitions/io.k8s.api.storage.v1.CSIDriverBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string J¢ +@ +2009 +7 +OK1 +/ +-#/definitions/io.k8s.api.storage.v1.CSIDriver +E +201> +< +Created1 +/ +-#/definitions/io.k8s.api.storage.v1.CSIDriver + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionput +jW +x-kubernetes-group-version-kind42group: storage.k8s.io +kind: CSIDriver +version: v1 +*í + +storage_v1delete a CSIDriver*deleteStorageV1CSIDriver2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string J£ +@ +2009 +7 +OK1 +/ +-#/definitions/io.k8s.api.storage.v1.CSIDriver +F +202? += +Accepted1 +/ +-#/definitions/io.k8s.api.storage.v1.CSIDriver + +401 + + UnauthorizedRhttpsj +x-kubernetes-action delete +jW +x-kubernetes-group-version-kind42group: storage.k8s.io +kind: CSIDriver +version: v1 +Bë + +storage_v1(partially update the specified CSIDriver*patchStorageV1CSIDriver2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json-patch+json:application/merge-patch+json:&application/strategic-merge-patch+json:application/apply-patch+yamlBN +L +Jbodybody *: +8#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.PatchBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B¯ +¬©¦queryƒfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch)." fieldManager2string BÎ +ËÈÅquery¨Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests."force2boolean J[ +@ +2009 +7 +OK1 +/ +-#/definitions/io.k8s.api.storage.v1.CSIDriver + +401 + + UnauthorizedRhttpsjW +x-kubernetes-group-version-kind42group: storage.k8s.io +kind: CSIDriver +version: v1 +j +x-kubernetes-actionpatch +J6 +42"0pathname of the CSIDriver"name*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string ä) +2/apis/storage.k8s.io/v1beta1/storageclasses/{name}­)Œ +storage_v1beta1read the specified StorageClass*readStorageV1beta1StorageClass2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*Jc +H +200A +? +OK9 +7 +5#/definitions/io.k8s.api.storage.v1beta1.StorageClass + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionget +j_ +x-kubernetes-group-version-kind<:version: v1beta1 +group: storage.k8s.io +kind: StorageClass +é +storage_v1beta1"replace the specified StorageClass*!replaceStorageV1beta1StorageClass2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BK +I +Gbodybody *7 +5#/definitions/io.k8s.api.storage.v1beta1.StorageClassBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string J² +H +200A +? +OK9 +7 +5#/definitions/io.k8s.api.storage.v1beta1.StorageClass +M +201F +D +Created9 +7 +5#/definitions/io.k8s.api.storage.v1beta1.StorageClass + +401 + + UnauthorizedRhttpsj_ +x-kubernetes-group-version-kind<:group: storage.k8s.io +kind: StorageClass +version: v1beta1 +j +x-kubernetes-actionput +*• +storage_v1beta1delete a StorageClass* deleteStorageV1beta1StorageClass2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string J³ +H +200A +? +OK9 +7 +5#/definitions/io.k8s.api.storage.v1beta1.StorageClass +N +202G +E +Accepted9 +7 +5#/definitions/io.k8s.api.storage.v1beta1.StorageClass + +401 + + UnauthorizedRhttpsj +x-kubernetes-action delete +j_ +x-kubernetes-group-version-kind<:group: storage.k8s.io +kind: StorageClass +version: v1beta1 +B‹ +storage_v1beta1+partially update the specified StorageClass*patchStorageV1beta1StorageClass2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json-patch+json:application/merge-patch+json:&application/strategic-merge-patch+json:application/apply-patch+yamlBN +L +Jbodybody *: +8#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.PatchBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B¯ +¬©¦queryƒfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch)." fieldManager2string BÎ +ËÈÅquery¨Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests."force2boolean Jc +H +200A +? +OK9 +7 +5#/definitions/io.k8s.api.storage.v1beta1.StorageClass + +401 + + UnauthorizedRhttpsj_ +x-kubernetes-group-version-kind<:group: storage.k8s.io +kind: StorageClass +version: v1beta1 +j +x-kubernetes-actionpatch +J9 +75"3pathname of the StorageClass"name*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string È) +4/api/v1/namespaces/{namespace}/resourcequotas/{name})ñ +core_v1 read the specified ResourceQuota*!readCoreV1NamespacedResourceQuota2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*J\ +A +200: +8 +OK2 +0 +.#/definitions/io.k8s.api.core.v1.ResourceQuota + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionget +jO +x-kubernetes-group-version-kind,*kind: ResourceQuota +version: v1 +group: "" +À +core_v1#replace the specified ResourceQuota*$replaceCoreV1NamespacedResourceQuota2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BD +B +@bodybody *0 +.#/definitions/io.k8s.api.core.v1.ResourceQuotaBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string J¤ +A +200: +8 +OK2 +0 +.#/definitions/io.k8s.api.core.v1.ResourceQuota +F +201? += +Created2 +0 +.#/definitions/io.k8s.api.core.v1.ResourceQuota + +401 + + UnauthorizedRhttpsjO +x-kubernetes-group-version-kind,*group: "" +kind: ResourceQuota +version: v1 +j +x-kubernetes-actionput +*ó +core_v1delete a ResourceQuota*#deleteCoreV1NamespacedResourceQuota2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string J¥ + +401 + + Unauthorized +A +200: +8 +OK2 +0 +.#/definitions/io.k8s.api.core.v1.ResourceQuota +G +202@ +> +Accepted2 +0 +.#/definitions/io.k8s.api.core.v1.ResourceQuotaRhttpsjO +x-kubernetes-group-version-kind,*group: "" +kind: ResourceQuota +version: v1 +j +x-kubernetes-action delete +Bð +core_v1,partially update the specified ResourceQuota*"patchCoreV1NamespacedResourceQuota2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json-patch+json:application/merge-patch+json:&application/strategic-merge-patch+json:application/apply-patch+yamlBN +L +Jbodybody *: +8#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.PatchBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B¯ +¬©¦queryƒfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch)." fieldManager2string BÎ +ËÈÅquery¨Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests."force2boolean J\ +A +200: +8 +OK2 +0 +.#/definitions/io.k8s.api.core.v1.ResourceQuota + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionpatch +jO +x-kubernetes-group-version-kind,*group: "" +kind: ResourceQuota +version: v1 +J: +86"4pathname of the ResourceQuota"name*string˜J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string ó +;/api/v1/namespaces/{namespace}/serviceaccounts/{name}/token³ "ˆ +core_v1 create token of a ServiceAccount*)createCoreV1NamespacedServiceAccountToken2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BM +K +Ibodybody *9 +7#/definitions/io.k8s.api.authentication.v1.TokenRequestJˆ +J +200C +A +OK; +9 +7#/definitions/io.k8s.api.authentication.v1.TokenRequest +O +201H +F +Created; +9 +7#/definitions/io.k8s.api.authentication.v1.TokenRequest +P +202I +G +Accepted; +9 +7#/definitions/io.k8s.api.authentication.v1.TokenRequest + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionpost +ja +x-kubernetes-group-version-kind>bodybody *. +,#/definitions/io.k8s.api.apps.v1.StatefulSetBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string J  +? +2008 +6 +OK0 +. +,#/definitions/io.k8s.api.apps.v1.StatefulSet +D +201= +; +Created0 +. +,#/definitions/io.k8s.api.apps.v1.StatefulSet + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionput +jO +x-kubernetes-group-version-kind,*group: apps +kind: StatefulSet +version: v1 +Bú +apps_v14partially update status of the specified StatefulSet*&patchAppsV1NamespacedStatefulSetStatus2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json-patch+json:application/merge-patch+json:&application/strategic-merge-patch+json:application/apply-patch+yamlBN +L +Jbodybody *: +8#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.PatchBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B¯ +¬©¦queryƒfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch)." fieldManager2string BÎ +ËÈÅquery¨Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests."force2boolean JZ + +401 + + Unauthorized +? +2008 +6 +OK0 +. +,#/definitions/io.k8s.api.apps.v1.StatefulSetRhttpsj +x-kubernetes-actionpatch +jO +x-kubernetes-group-version-kind,*group: apps +kind: StatefulSet +version: v1 +J8 +64"2pathname of the StatefulSet"name*string˜J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string å +>/apis/apps/v1/namespaces/{namespace}/replicasets/{name}/status¢÷ +apps_v1'read status of the specified ReplicaSet*$readAppsV1NamespacedReplicaSetStatus2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*JY +> +2007 +5 +OK/ +- ++#/definitions/io.k8s.api.apps.v1.ReplicaSet + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionget +jN +x-kubernetes-group-version-kind+)group: apps +kind: ReplicaSet +version: v1 +À +apps_v1*replace status of the specified ReplicaSet*'replaceAppsV1NamespacedReplicaSetStatus2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BA +? +=bodybody *- ++#/definitions/io.k8s.api.apps.v1.ReplicaSetBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string Jž + +401 + + Unauthorized +> +2007 +5 +OK/ +- ++#/definitions/io.k8s.api.apps.v1.ReplicaSet +C +201< +: +Created/ +- ++#/definitions/io.k8s.api.apps.v1.ReplicaSetRhttpsj +x-kubernetes-actionput +jN +x-kubernetes-group-version-kind+)group: apps +kind: ReplicaSet +version: v1 +Bö +apps_v13partially update status of the specified ReplicaSet*%patchAppsV1NamespacedReplicaSetStatus2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json-patch+json:application/merge-patch+json:&application/strategic-merge-patch+json:application/apply-patch+yamlBN +L +Jbodybody *: +8#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.PatchBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B¯ +¬©¦queryƒfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch)." fieldManager2string BÎ +ËÈÅquery¨Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests."force2boolean JY +> +2007 +5 +OK/ +- ++#/definitions/io.k8s.api.apps.v1.ReplicaSet + +401 + + UnauthorizedRhttpsjN +x-kubernetes-group-version-kind+)group: apps +kind: ReplicaSet +version: v1 +j +x-kubernetes-actionpatch +J7 +53"1pathname of the ReplicaSet"name*string˜J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Ó] +3/apis/batch/v1beta1/namespaces/{namespace}/cronjobs›]Œ& + batch_v1beta1%list or watch objects of kind CronJob*!listBatchV1beta1NamespacedCronJob2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*B‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Bï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string B‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string B‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Bú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer Bû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string BÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Bž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer B± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean J` +E +200> +< +OK6 +4 +2#/definitions/io.k8s.api.batch.v1beta1.CronJobList + +401 + + UnauthorizedRhttpsjQ +x-kubernetes-group-version-kind.,version: v1beta1 +group: batch +kind: CronJob +j +x-kubernetes-actionlist +"þ + batch_v1beta1create a CronJob*#createBatchV1beta1NamespacedCronJob2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BD +B +@bodybody *0 +.#/definitions/io.k8s.api.batch.v1beta1.CronJobBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string Jí +A +200: +8 +OK2 +0 +.#/definitions/io.k8s.api.batch.v1beta1.CronJob +F +201? += +Created2 +0 +.#/definitions/io.k8s.api.batch.v1beta1.CronJob +G +202@ +> +Accepted2 +0 +.#/definitions/io.k8s.api.batch.v1beta1.CronJob + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionpost +jQ +x-kubernetes-group-version-kind.,kind: CronJob +version: v1beta1 +group: batch +*Õ, + batch_v1beta1delete collection of CronJob*-deleteBatchV1beta1CollectionNamespacedCronJob2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string Bž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer B‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Bú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string Bû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string BÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Bž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer Jg +L +200E +C +OK= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status + +401 + + UnauthorizedRhttpsj* +x-kubernetes-actiondeletecollection +jQ +x-kubernetes-group-version-kind.,kind: CronJob +version: v1beta1 +group: batch +J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string ê& +/api/v1/endpointsÔ&È +core_v1'list or watch objects of kind Endpoints*#listCoreV1EndpointsForAllNamespaces2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*J\ +A +200: +8 +OK2 +0 +.#/definitions/io.k8s.api.core.v1.EndpointsList + +401 + + UnauthorizedRhttpsjK +x-kubernetes-group-version-kind(&group: "" +kind: Endpoints +version: v1 +j +x-kubernetes-actionlist +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean ½) +5/api/v1/watch/namespaces/{namespace}/endpoints/{name}ƒ)Ý +core_v1°watch changes to an object of kind Endpoints. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.*watchCoreV1NamespacedEndpoints2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionwatch +jK +x-kubernetes-group-version-kind(&group: "" +kind: Endpoints +version: v1 +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer J6 +42"0pathname of the Endpoints"name*string˜J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean ¿( +,/api/v1/watch/namespaces/{namespace}/secretsŽ(  +core_v1rwatch individual changes to a list of Secret. deprecated: use the 'watch' parameter with a list operation instead.*watchCoreV1NamespacedSecretList2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsj# +x-kubernetes-action  +watchlist +jH +x-kubernetes-group-version-kind%#group: "" +kind: Secret +version: v1 +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean å* +G/apis/networking.k8s.io/v1beta1/namespaces/{namespace}/ingresses/{name}™*Ž +networking_v1beta1read the specified Ingress*&readNetworkingV1beta1NamespacedIngress2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*Ja +F +200? += +OK7 +5 +3#/definitions/io.k8s.api.networking.v1beta1.Ingress + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionget +j] +x-kubernetes-group-version-kind:8group: networking.k8s.io +kind: Ingress +version: v1beta1 +ç +networking_v1beta1replace the specified Ingress*)replaceNetworkingV1beta1NamespacedIngress2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BI +G +Ebodybody *5 +3#/definitions/io.k8s.api.networking.v1beta1.IngressBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string J® +F +200? += +OK7 +5 +3#/definitions/io.k8s.api.networking.v1beta1.Ingress +K +201D +B +Created7 +5 +3#/definitions/io.k8s.api.networking.v1beta1.Ingress + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionput +j] +x-kubernetes-group-version-kind:8group: networking.k8s.io +kind: Ingress +version: v1beta1 +*¢ +networking_v1beta1delete an Ingress*(deleteNetworkingV1beta1NamespacedIngress2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string J» +L +200E +C +OK= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status +R +202K +I +Accepted= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status + +401 + + UnauthorizedRhttpsj +x-kubernetes-action delete +j] +x-kubernetes-group-version-kind:8group: networking.k8s.io +kind: Ingress +version: v1beta1 +B +networking_v1beta1&partially update the specified Ingress*'patchNetworkingV1beta1NamespacedIngress2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json-patch+json:application/merge-patch+json:&application/strategic-merge-patch+json:application/apply-patch+yamlBN +L +Jbodybody *: +8#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.PatchBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B¯ +¬©¦queryƒfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch)." fieldManager2string BÎ +ËÈÅquery¨Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests."force2boolean Ja +F +200? += +OK7 +5 +3#/definitions/io.k8s.api.networking.v1beta1.Ingress + +401 + + UnauthorizedRhttpsj] +x-kubernetes-group-version-kind:8group: networking.k8s.io +kind: Ingress +version: v1beta1 +j +x-kubernetes-actionpatch +J4 +20".pathname of the Ingress"name*string˜J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string ‡* +A/apis/coordination.k8s.io/v1/namespaces/{namespace}/leases/{name}Á)ú +coordination_v1read the specified Lease*!readCoordinationV1NamespacedLease2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*J\ +A +200: +8 +OK2 +0 +.#/definitions/io.k8s.api.coordination.v1.Lease + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionget +jX +x-kubernetes-group-version-kind53group: coordination.k8s.io +kind: Lease +version: v1 +É +coordination_v1replace the specified Lease*$replaceCoordinationV1NamespacedLease2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BD +B +@bodybody *0 +.#/definitions/io.k8s.api.coordination.v1.LeaseBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string J¤ +A +200: +8 +OK2 +0 +.#/definitions/io.k8s.api.coordination.v1.Lease +F +201? += +Created2 +0 +.#/definitions/io.k8s.api.coordination.v1.Lease + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionput +jX +x-kubernetes-group-version-kind53group: coordination.k8s.io +kind: Lease +version: v1 +*’ +coordination_v1delete a Lease*#deleteCoordinationV1NamespacedLease2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string J» +L +200E +C +OK= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status +R +202K +I +Accepted= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status + +401 + + UnauthorizedRhttpsj +x-kubernetes-action delete +jX +x-kubernetes-group-version-kind53group: coordination.k8s.io +kind: Lease +version: v1 +Bù +coordination_v1$partially update the specified Lease*"patchCoordinationV1NamespacedLease2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json-patch+json:application/merge-patch+json:&application/strategic-merge-patch+json:application/apply-patch+yamlBN +L +Jbodybody *: +8#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.PatchBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B¯ +¬©¦queryƒfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch)." fieldManager2string BÎ +ËÈÅquery¨Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests."force2boolean J\ +A +200: +8 +OK2 +0 +.#/definitions/io.k8s.api.coordination.v1.Lease + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionpatch +jX +x-kubernetes-group-version-kind53kind: Lease +version: v1 +group: coordination.k8s.io +J2 +0.",pathname of the Lease"name*string˜J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string ™) +J/apis/discovery.k8s.io/v1beta1/watch/namespaces/{namespace}/endpointslicesÊ(Ü +discovery_v1beta1ywatch individual changes to a list of EndpointSlice. deprecated: use the 'watch' parameter with a list operation instead.*0watchDiscoveryV1beta1NamespacedEndpointSliceList2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk + +401 + + Unauthorized +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEventRhttpsj# +x-kubernetes-action  +watchlist +jb +x-kubernetes-group-version-kind?=group: discovery.k8s.io +kind: EndpointSlice +version: v1beta1 +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean Ù( +:/apis/events.k8s.io/v1/watch/namespaces/{namespace}/eventsš(¬ + events_v1qwatch individual changes to a list of Event. deprecated: use the 'watch' parameter with a list operation instead.* watchEventsV1NamespacedEventList2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsj# +x-kubernetes-action  +watchlist +jR +x-kubernetes-group-version-kind/-group: events.k8s.io +kind: Event +version: v1 +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean ¢a +J/apis/admissionregistration.k8s.io/v1beta1/validatingwebhookconfigurationsÓ`¦' +admissionregistration_v1beta1listAdmissionregistrationV1beta1ValidatingWebhookConfiguration2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*B‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Bï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string B‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string B‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Bú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer Bû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string BÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Bž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer B± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean J‡ +l +200e +c +OK] +[ +Y#/definitions/io.k8s.api.admissionregistration.v1beta1.ValidatingWebhookConfigurationList + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionlist +j +x-kubernetes-group-version-kind\Zgroup: admissionregistration.k8s.io +kind: ValidatingWebhookConfiguration +version: v1beta1 +"Œ +admissionregistration_v1beta1'create a ValidatingWebhookConfiguration*@createAdmissionregistrationV1beta1ValidatingWebhookConfiguration2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*Bk +i +gbodybody *W +U#/definitions/io.k8s.api.admissionregistration.v1beta1.ValidatingWebhookConfigurationBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string Jâ +n +202g +e +AcceptedY +W +U#/definitions/io.k8s.api.admissionregistration.v1beta1.ValidatingWebhookConfiguration + +401 + + Unauthorized +h +200a +_ +OKY +W +U#/definitions/io.k8s.api.admissionregistration.v1beta1.ValidatingWebhookConfiguration +m +201f +d +CreatedY +W +U#/definitions/io.k8s.api.admissionregistration.v1beta1.ValidatingWebhookConfigurationRhttpsj +x-kubernetes-group-version-kind\Zgroup: admissionregistration.k8s.io +kind: ValidatingWebhookConfiguration +version: v1beta1 +j +x-kubernetes-actionpost +*Ç- +admissionregistration_v1beta13delete collection of ValidatingWebhookConfiguration*JdeleteAdmissionregistrationV1beta1CollectionValidatingWebhookConfiguration2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string Bž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer B‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Bú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string Bû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string BÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Bž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer Jg +L +200E +C +OK= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status + +401 + + UnauthorizedRhttpsj* +x-kubernetes-actiondeletecollection +j +x-kubernetes-group-version-kind\Zversion: v1beta1 +group: admissionregistration.k8s.io +kind: ValidatingWebhookConfiguration +JO +MKIquery-If 'true', then the output is pretty printed."pretty2string é +W/apis/autoscaling/v2beta2/namespaces/{namespace}/horizontalpodautoscalers/{name}/statusÛ +autoscaling_v2beta24read status of the specified HorizontalPodAutoscaler*=readAutoscalingV2beta2NamespacedHorizontalPodAutoscalerStatus2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*Jr +W +200P +N +OKH +F +D#/definitions/io.k8s.api.autoscaling.v2beta2.HorizontalPodAutoscaler + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionget +jg +x-kubernetes-group-version-kindDBkind: HorizontalPodAutoscaler +version: v2beta2 +group: autoscaling +Ö +autoscaling_v2beta27replace status of the specified HorizontalPodAutoscaler*@replaceAutoscalingV2beta2NamespacedHorizontalPodAutoscalerStatus2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BZ +X +Vbodybody *F +D#/definitions/io.k8s.api.autoscaling.v2beta2.HorizontalPodAutoscalerBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string JÐ +W +200P +N +OKH +F +D#/definitions/io.k8s.api.autoscaling.v2beta2.HorizontalPodAutoscaler +\ +201U +S +CreatedH +F +D#/definitions/io.k8s.api.autoscaling.v2beta2.HorizontalPodAutoscaler + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionput +jg +x-kubernetes-group-version-kindDBkind: HorizontalPodAutoscaler +version: v2beta2 +group: autoscaling +BÚ +autoscaling_v2beta2@partially update status of the specified HorizontalPodAutoscaler*>patchAutoscalingV2beta2NamespacedHorizontalPodAutoscalerStatus2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json-patch+json:application/merge-patch+json:&application/strategic-merge-patch+json:application/apply-patch+yamlBN +L +Jbodybody *: +8#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.PatchBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B¯ +¬©¦queryƒfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch)." fieldManager2string BÎ +ËÈÅquery¨Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests."force2boolean Jr +W +200P +N +OKH +F +D#/definitions/io.k8s.api.autoscaling.v2beta2.HorizontalPodAutoscaler + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionpatch +jg +x-kubernetes-group-version-kindDBgroup: autoscaling +kind: HorizontalPodAutoscaler +version: v2beta2 +JD +B@">path#name of the HorizontalPodAutoscaler"name*string˜J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string ‚ +/logs/{logpath}o8 +logs*logFileHandlerJ + +401 + + UnauthorizedRhttpsJ3 +1/"-pathpath to the log"logpath*string˜–' +$/apis/networking.k8s.io/v1/ingressesí&á + networking_v1%list or watch objects of kind Ingress*'listNetworkingV1IngressForAllNamespaces2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*J` + +401 + + Unauthorized +E +200> +< +OK6 +4 +2#/definitions/io.k8s.api.networking.v1.IngressListRhttpsjX +x-kubernetes-group-version-kind53group: networking.k8s.io +kind: Ingress +version: v1 +j +x-kubernetes-actionlist +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean ÿ' +*/apis/networking.k8s.io/v1/watch/ingressesÐ'Ä + networking_v1swatch individual changes to a list of Ingress. deprecated: use the 'watch' parameter with a list operation instead.*,watchNetworkingV1IngressListForAllNamespaces2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsj# +x-kubernetes-action  +watchlist +jX +x-kubernetes-group-version-kind53group: networking.k8s.io +kind: Ingress +version: v1 +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean Õ +=/apis/apps/v1/namespaces/{namespace}/daemonsets/{name}/status“ó +apps_v1&read status of the specified DaemonSet*#readAppsV1NamespacedDaemonSetStatus2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*JX += +2006 +4 +OK. +, +*#/definitions/io.k8s.api.apps.v1.DaemonSet + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionget +jM +x-kubernetes-group-version-kind*(group: apps +kind: DaemonSet +version: v1 +º +apps_v1)replace status of the specified DaemonSet*&replaceAppsV1NamespacedDaemonSetStatus2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*B@ +> +<bodybody *, +*#/definitions/io.k8s.api.apps.v1.DaemonSetBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string Jœ += +2006 +4 +OK. +, +*#/definitions/io.k8s.api.apps.v1.DaemonSet +B +201; +9 +Created. +, +*#/definitions/io.k8s.api.apps.v1.DaemonSet + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionput +jM +x-kubernetes-group-version-kind*(group: apps +kind: DaemonSet +version: v1 +Bò +apps_v12partially update status of the specified DaemonSet*$patchAppsV1NamespacedDaemonSetStatus2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json-patch+json:application/merge-patch+json:&application/strategic-merge-patch+json:application/apply-patch+yamlBN +L +Jbodybody *: +8#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.PatchBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B¯ +¬©¦queryƒfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch)." fieldManager2string BÎ +ËÈÅquery¨Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests."force2boolean JX += +2006 +4 +OK. +, +*#/definitions/io.k8s.api.apps.v1.DaemonSet + +401 + + UnauthorizedRhttpsjM +x-kubernetes-group-version-kind*(group: apps +kind: DaemonSet +version: v1 +j +x-kubernetes-actionpatch +J6 +42"0pathname of the DaemonSet"name*string˜J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Ì) +I/apis/rbac.authorization.k8s.io/v1alpha1/watch/clusterrolebindings/{name}þ(± +rbacAuthorization_v1alpha1¹watch changes to an object of kind ClusterRoleBinding. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.*0watchRbacAuthorizationV1alpha1ClusterRoleBinding2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionwatch +jq +x-kubernetes-group-version-kindNLgroup: rbac.authorization.k8s.io +kind: ClusterRoleBinding +version: v1alpha1 +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer J? +=;"9pathname of the ClusterRoleBinding"name*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean Œ +"/.well-known/openid-configuration/åâ + WellKnownWget service account issuer OpenID configuration, also known as the 'OIDC discovery doc'**getServiceAccountIssuerOpenIDConfiguration2application/jsonJ7 + +200 + +OK + ² +string + +401 + + UnauthorizedRhttpsõ& +/api/v1/podtemplatesÜ&Ð +core_v1)list or watch objects of kind PodTemplate*%listCoreV1PodTemplateForAllNamespaces2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*J^ +C +200< +: +OK4 +2 +0#/definitions/io.k8s.api.core.v1.PodTemplateList + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionlist +jM +x-kubernetes-group-version-kind*(group: "" +kind: PodTemplate +version: v1 +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean ‘ +%/apis/apiregistration.k8s.io/v1beta1/çä +apiregistration_v1beta1get available resources*%getApiregistrationV1beta1APIResources2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json:application/yaml:#application/vnd.kubernetes.protobufJp +U +200N +L +OKF +D +B#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.APIResourceList + +401 + + UnauthorizedRhttps¶) +//apis/node.k8s.io/v1beta1/runtimeclasses/{name}‚)€ + node_v1beta1read the specified RuntimeClass*readNodeV1beta1RuntimeClass2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*J` +E +200> +< +OK6 +4 +2#/definitions/io.k8s.api.node.v1beta1.RuntimeClass + +401 + + UnauthorizedRhttpsj\ +x-kubernetes-group-version-kind97version: v1beta1 +group: node.k8s.io +kind: RuntimeClass +j +x-kubernetes-actionget +× + node_v1beta1"replace the specified RuntimeClass*replaceNodeV1beta1RuntimeClass2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BH +F +Dbodybody *4 +2#/definitions/io.k8s.api.node.v1beta1.RuntimeClassBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string J¬ +E +200> +< +OK6 +4 +2#/definitions/io.k8s.api.node.v1beta1.RuntimeClass +J +201C +A +Created6 +4 +2#/definitions/io.k8s.api.node.v1beta1.RuntimeClass + +401 + + UnauthorizedRhttpsj\ +x-kubernetes-group-version-kind97group: node.k8s.io +kind: RuntimeClass +version: v1beta1 +j +x-kubernetes-actionput +*” + node_v1beta1delete a RuntimeClass*deleteNodeV1beta1RuntimeClass2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string J» +L +200E +C +OK= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status +R +202K +I +Accepted= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status + +401 + + UnauthorizedRhttpsj +x-kubernetes-action delete +j\ +x-kubernetes-group-version-kind97group: node.k8s.io +kind: RuntimeClass +version: v1beta1 +Bÿ + node_v1beta1+partially update the specified RuntimeClass*patchNodeV1beta1RuntimeClass2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json-patch+json:application/merge-patch+json:&application/strategic-merge-patch+json:application/apply-patch+yamlBN +L +Jbodybody *: +8#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.PatchBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B¯ +¬©¦queryƒfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch)." fieldManager2string BÎ +ËÈÅquery¨Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests."force2boolean J` +E +200> +< +OK6 +4 +2#/definitions/io.k8s.api.node.v1beta1.RuntimeClass + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionpatch +j\ +x-kubernetes-group-version-kind97kind: RuntimeClass +version: v1beta1 +group: node.k8s.io +J9 +75"3pathname of the RuntimeClass"name*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string ‹^ +4/apis/rbac.authorization.k8s.io/v1beta1/clusterrolesÒ]½& +rbacAuthorization_v1beta1)list or watch objects of kind ClusterRole*'listRbacAuthorizationV1beta1ClusterRole2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*B‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Bï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string B‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string B‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Bú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer Bû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string BÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Bž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer B± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean Jc +H +200A +? +OK9 +7 +5#/definitions/io.k8s.api.rbac.v1beta1.ClusterRoleList + +401 + + UnauthorizedRhttpsji +x-kubernetes-group-version-kindFDkind: ClusterRole +version: v1beta1 +group: rbac.authorization.k8s.io +j +x-kubernetes-actionlist +"¸ +rbacAuthorization_v1beta1create a ClusterRole*)createRbacAuthorizationV1beta1ClusterRole2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BG +E +Cbodybody *3 +1#/definitions/io.k8s.api.rbac.v1beta1.ClusterRoleBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string Jö +J +202C +A +Accepted5 +3 +1#/definitions/io.k8s.api.rbac.v1beta1.ClusterRole + +401 + + Unauthorized +D +200= +; +OK5 +3 +1#/definitions/io.k8s.api.rbac.v1beta1.ClusterRole +I +201B +@ +Created5 +3 +1#/definitions/io.k8s.api.rbac.v1beta1.ClusterRoleRhttpsj +x-kubernetes-actionpost +ji +x-kubernetes-group-version-kindFDgroup: rbac.authorization.k8s.io +kind: ClusterRole +version: v1beta1 +*ƒ- +rbacAuthorization_v1beta1 delete collection of ClusterRole*3deleteRbacAuthorizationV1beta1CollectionClusterRole2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string Bž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer B‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Bú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string Bû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string BÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Bž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer Jg +L +200E +C +OK= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status + +401 + + UnauthorizedRhttpsji +x-kubernetes-group-version-kindFDgroup: rbac.authorization.k8s.io +kind: ClusterRole +version: v1beta1 +j* +x-kubernetes-actiondeletecollection +JO +MKIquery-If 'true', then the output is pretty printed."pretty2string ì* +K/apis/rbac.authorization.k8s.io/v1beta1/namespaces/{namespace}/roles/{name}œ*’ +rbacAuthorization_v1beta1read the specified Role**readRbacAuthorizationV1beta1NamespacedRole2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*JX += +2006 +4 +OK. +, +*#/definitions/io.k8s.api.rbac.v1beta1.Role + +401 + + UnauthorizedRhttpsjb +x-kubernetes-group-version-kind?=group: rbac.authorization.k8s.io +kind: Role +version: v1beta1 +j +x-kubernetes-actionget +Ù +rbacAuthorization_v1beta1replace the specified Role*-replaceRbacAuthorizationV1beta1NamespacedRole2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*B@ +> +<bodybody *, +*#/definitions/io.k8s.api.rbac.v1beta1.RoleBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string Jœ += +2006 +4 +OK. +, +*#/definitions/io.k8s.api.rbac.v1beta1.Role +B +201; +9 +Created. +, +*#/definitions/io.k8s.api.rbac.v1beta1.Role + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionput +jb +x-kubernetes-group-version-kind?=group: rbac.authorization.k8s.io +kind: Role +version: v1beta1 +*® +rbacAuthorization_v1beta1 delete a Role*,deleteRbacAuthorizationV1beta1NamespacedRole2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string J» +L +200E +C +OK= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status +R +202K +I +Accepted= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status + +401 + + UnauthorizedRhttpsjb +x-kubernetes-group-version-kind?=group: rbac.authorization.k8s.io +kind: Role +version: v1beta1 +j +x-kubernetes-action delete +B‘ +rbacAuthorization_v1beta1#partially update the specified Role*+patchRbacAuthorizationV1beta1NamespacedRole2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json-patch+json:application/merge-patch+json:&application/strategic-merge-patch+json:application/apply-patch+yamlBN +L +Jbodybody *: +8#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.PatchBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B¯ +¬©¦queryƒfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch)." fieldManager2string BÎ +ËÈÅquery¨Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests."force2boolean JX + +401 + + Unauthorized += +2006 +4 +OK. +, +*#/definitions/io.k8s.api.rbac.v1beta1.RoleRhttpsj +x-kubernetes-actionpatch +jb +x-kubernetes-group-version-kind?=group: rbac.authorization.k8s.io +kind: Role +version: v1beta1 +J1 +/-"+pathname of the Role"name*string˜J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string ú +./api/v1/namespaces/{namespace}/pods/{name}/logÇÄ +core_v1read log of the specified Pod*readCoreV1NamespacedPodLog2 +text/plain2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*J7 + +200 + +OK + ² +string + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionget +jE +x-kubernetes-group-version-kind" group: "" +kind: Pod +version: v1 +J +Š‡queryhThe container for which to stream logs. Defaults to only container if there is one container in the pod." container2string JW +USQquery4Follow the log stream of the pod. Defaults to false."follow2boolean JŒ +‰†ƒqueryÏinsecureSkipTLSVerifyBackend indicates that the apiserver should not confirm the validity of the serving certificate of the backend it is connecting to. This will make the HTTPS connection between the apiserver and the backend insecure. This means the apiserver cannot verify the log data it is receiving came from the real kubelet. If the kubelet is configured to verify the apiserver's TLS credentials, it does not mean the connection to the real kubelet is vulnerable to a man in the middle attack (e.g. an attacker could not intercept the actual log data coming from the real kubelet)."insecureSkipTLSVerifyBackend2boolean J€ +ýú÷queryÕIf set, the number of bytes to read from the server before terminating the log output. This may not display a complete final line of logging, and may return slightly more or slightly less than the specified limit." +limitBytes2integer J0 +.,"*pathname of the Pod"name*string˜J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jb +`^\query=Return previous terminated container logs. Defaults to false."previous2boolean JÍ +ÊÇÄquery A relative time in seconds before the current time from which to show logs. If this value precedes the time a pod was started, only logs since the pod start will be returned. If this value is in the future, no logs will be returned. Only one of sinceSeconds or sinceTime may be specified." sinceSeconds2integer JÈ +Å¿queryžIf set, the number of lines from the end of the logs to show. If not specified, logs are shown from the creation of the container or sinceSeconds or sinceTime" tailLines2integer J› +˜•’queryqIf true, add an RFC3339 or RFC3339Nano timestamp at the beginning of every line of log output. Defaults to false." +timestamps2boolean š +N/apis/authorization.k8s.io/v1/namespaces/{namespace}/localsubjectaccessreviewsÇ "× +authorization_v1!create a LocalSubjectAccessReview*7createAuthorizationV1NamespacedLocalSubjectAccessReview2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BX +V +Tbodybody *D +B#/definitions/io.k8s.api.authorization.v1.LocalSubjectAccessReviewJ© +U +200N +L +OKF +D +B#/definitions/io.k8s.api.authorization.v1.LocalSubjectAccessReview +Z +201S +Q +CreatedF +D +B#/definitions/io.k8s.api.authorization.v1.LocalSubjectAccessReview +[ +202T +R +AcceptedF +D +B#/definitions/io.k8s.api.authorization.v1.LocalSubjectAccessReview + +401 + + UnauthorizedRhttpsjl +x-kubernetes-group-version-kindIGgroup: authorization.k8s.io +kind: LocalSubjectAccessReview +version: v1 +j +x-kubernetes-actionpost +Jž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string J– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string ã) +H/apis/networking.k8s.io/v1/watch/namespaces/{namespace}/ingresses/{name}–)ò + networking_v1®watch changes to an object of kind Ingress. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.*"watchNetworkingV1NamespacedIngress2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionwatch +jX +x-kubernetes-group-version-kind53group: networking.k8s.io +kind: Ingress +version: v1 +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer J4 +20".pathname of the Ingress"name*string˜J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean ø +9/apis/apiregistration.k8s.io/v1/apiservices/{name}/statusºµ +apiregistration_v1'read status of the specified APIService*%readApiregistrationV1APIServiceStatus2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*Jy +^ +200W +U +OKO +M +K#/definitions/io.k8s.kube-aggregator.pkg.apis.apiregistration.v1.APIService + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionget +j` +x-kubernetes-group-version-kind=;group: apiregistration.k8s.io +version: v1 +kind: APIService +¾ +apiregistration_v1*replace status of the specified APIService*(replaceApiregistrationV1APIServiceStatus2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*Ba +_ +]bodybody *M +K#/definitions/io.k8s.kube-aggregator.pkg.apis.apiregistration.v1.APIServiceBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string JÞ +^ +200W +U +OKO +M +K#/definitions/io.k8s.kube-aggregator.pkg.apis.apiregistration.v1.APIService +c +201\ +Z +CreatedO +M +K#/definitions/io.k8s.kube-aggregator.pkg.apis.apiregistration.v1.APIService + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionput +j` +x-kubernetes-group-version-kind=;kind: APIService +group: apiregistration.k8s.io +version: v1 +B´ +apiregistration_v13partially update status of the specified APIService*&patchApiregistrationV1APIServiceStatus2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json-patch+json:application/merge-patch+json:&application/strategic-merge-patch+json:application/apply-patch+yamlBN +L +Jbodybody *: +8#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.PatchBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B¯ +¬©¦queryƒfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch)." fieldManager2string BÎ +ËÈÅquery¨Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests."force2boolean Jy +^ +200W +U +OKO +M +K#/definitions/io.k8s.kube-aggregator.pkg.apis.apiregistration.v1.APIService + +401 + + UnauthorizedRhttpsj` +x-kubernetes-group-version-kind=;group: apiregistration.k8s.io +version: v1 +kind: APIService +j +x-kubernetes-actionpatch +J7 +53"1pathname of the APIService"name*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Ô) +@/apis/batch/v1beta1/watch/namespaces/{namespace}/cronjobs/{name})ë + batch_v1beta1®watch changes to an object of kind CronJob. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.*"watchBatchV1beta1NamespacedCronJob2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionwatch +jQ +x-kubernetes-group-version-kind.,group: batch +kind: CronJob +version: v1beta1 +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer J4 +20".pathname of the CronJob"name*string˜J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean Ÿ) +L/apis/rbac.authorization.k8s.io/v1/watch/namespaces/{namespace}/rolebindingsÎ(à +rbacAuthorization_v1wwatch individual changes to a list of RoleBinding. deprecated: use the 'watch' parameter with a list operation instead.*1watchRbacAuthorizationV1NamespacedRoleBindingList2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsjd +x-kubernetes-group-version-kindA?group: rbac.authorization.k8s.io +kind: RoleBinding +version: v1 +j# +x-kubernetes-action  +watchlist +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean ï +/apis/authentication.k8s.io/ÎË +authenticationget information of a group*getAuthenticationAPIGroup2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json:application/yaml:#application/vnd.kubernetes.protobufJi +N +200G +E +OK? += +;#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.APIGroup + +401 + + UnauthorizedRhttps¨, +K/apis/autoscaling/v1/namespaces/{namespace}/horizontalpodautoscalers/{name}Ø+· +autoscaling_v1*read the specified HorizontalPodAutoscaler*2readAutoscalingV1NamespacedHorizontalPodAutoscaler2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*Jm +R +200K +I +OKC +A +?#/definitions/io.k8s.api.autoscaling.v1.HorizontalPodAutoscaler + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionget +jb +x-kubernetes-group-version-kind?=group: autoscaling +kind: HorizontalPodAutoscaler +version: v1 +¨ +autoscaling_v1-replace the specified HorizontalPodAutoscaler*5replaceAutoscalingV1NamespacedHorizontalPodAutoscaler2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BU +S +Qbodybody *A +?#/definitions/io.k8s.api.autoscaling.v1.HorizontalPodAutoscalerBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string JÆ +W +201P +N +CreatedC +A +?#/definitions/io.k8s.api.autoscaling.v1.HorizontalPodAutoscaler + +401 + + Unauthorized +R +200K +I +OKC +A +?#/definitions/io.k8s.api.autoscaling.v1.HorizontalPodAutoscalerRhttpsjb +x-kubernetes-group-version-kind?=group: autoscaling +kind: HorizontalPodAutoscaler +version: v1 +j +x-kubernetes-actionput +*¾ +autoscaling_v1 delete a HorizontalPodAutoscaler*4deleteAutoscalingV1NamespacedHorizontalPodAutoscaler2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string J» +L +200E +C +OK= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status +R +202K +I +Accepted= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status + +401 + + UnauthorizedRhttpsjb +x-kubernetes-group-version-kind?=kind: HorizontalPodAutoscaler +version: v1 +group: autoscaling +j +x-kubernetes-action delete +B¶ +autoscaling_v16partially update the specified HorizontalPodAutoscaler*3patchAutoscalingV1NamespacedHorizontalPodAutoscaler2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json-patch+json:application/merge-patch+json:&application/strategic-merge-patch+json:application/apply-patch+yamlBN +L +Jbodybody *: +8#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.PatchBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B¯ +¬©¦queryƒfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch)." fieldManager2string BÎ +ËÈÅquery¨Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests."force2boolean Jm +R +200K +I +OKC +A +?#/definitions/io.k8s.api.autoscaling.v1.HorizontalPodAutoscaler + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionpatch +jb +x-kubernetes-group-version-kind?=group: autoscaling +kind: HorizontalPodAutoscaler +version: v1 +JD +B@">path#name of the HorizontalPodAutoscaler"name*string˜J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string þ] +//apis/scheduling.k8s.io/v1beta1/priorityclassesÊ]µ& +scheduling_v1beta1+list or watch objects of kind PriorityClass*"listSchedulingV1beta1PriorityClass2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*B‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Bï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string B‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string B‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Bú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer Bû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string BÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Bž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer B± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.api.scheduling.v1beta1.PriorityClassList + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionlist +jc +x-kubernetes-group-version-kind@>version: v1beta1 +group: scheduling.k8s.io +kind: PriorityClass +"È +scheduling_v1beta1create a PriorityClass*$createSchedulingV1beta1PriorityClass2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BO +M +Kbodybody *; +9#/definitions/io.k8s.api.scheduling.v1beta1.PriorityClassBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string JŽ +L +200E +C +OK= +; +9#/definitions/io.k8s.api.scheduling.v1beta1.PriorityClass +Q +201J +H +Created= +; +9#/definitions/io.k8s.api.scheduling.v1beta1.PriorityClass +R +202K +I +Accepted= +; +9#/definitions/io.k8s.api.scheduling.v1beta1.PriorityClass + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionpost +jc +x-kubernetes-group-version-kind@>group: scheduling.k8s.io +kind: PriorityClass +version: v1beta1 +*ó, +scheduling_v1beta1"delete collection of PriorityClass*.deleteSchedulingV1beta1CollectionPriorityClass2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string Bž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer B‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Bú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string Bû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string BÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Bž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer Jg +L +200E +C +OK= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status + +401 + + UnauthorizedRhttpsj* +x-kubernetes-actiondeletecollection +jc +x-kubernetes-group-version-kind@>group: scheduling.k8s.io +kind: PriorityClass +version: v1beta1 +JO +MKIquery-If 'true', then the output is pretty printed."pretty2string ·* +5/apis/storage.k8s.io/v1beta1/volumeattachments/{name}ý)œ +storage_v1beta1#read the specified VolumeAttachment*"readStorageV1beta1VolumeAttachment2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*Jg +L +200E +C +OK= +; +9#/definitions/io.k8s.api.storage.v1beta1.VolumeAttachment + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionget +jc +x-kubernetes-group-version-kind@>group: storage.k8s.io +kind: VolumeAttachment +version: v1beta1 + +storage_v1beta1&replace the specified VolumeAttachment*%replaceStorageV1beta1VolumeAttachment2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BO +M +Kbodybody *; +9#/definitions/io.k8s.api.storage.v1beta1.VolumeAttachmentBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string Jº +L +200E +C +OK= +; +9#/definitions/io.k8s.api.storage.v1beta1.VolumeAttachment +Q +201J +H +Created= +; +9#/definitions/io.k8s.api.storage.v1beta1.VolumeAttachment + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionput +jc +x-kubernetes-group-version-kind@>group: storage.k8s.io +kind: VolumeAttachment +version: v1beta1 +*© +storage_v1beta1delete a VolumeAttachment*$deleteStorageV1beta1VolumeAttachment2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string J» + +401 + + Unauthorized +L +200E +C +OK= +; +9#/definitions/io.k8s.api.storage.v1beta1.VolumeAttachment +R +202K +I +Accepted= +; +9#/definitions/io.k8s.api.storage.v1beta1.VolumeAttachmentRhttpsj +x-kubernetes-action delete +jc +x-kubernetes-group-version-kind@>group: storage.k8s.io +kind: VolumeAttachment +version: v1beta1 +B› +storage_v1beta1/partially update the specified VolumeAttachment*#patchStorageV1beta1VolumeAttachment2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json-patch+json:application/merge-patch+json:&application/strategic-merge-patch+json:application/apply-patch+yamlBN +L +Jbodybody *: +8#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.PatchBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B¯ +¬©¦queryƒfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch)." fieldManager2string BÎ +ËÈÅquery¨Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests."force2boolean Jg +L +200E +C +OK= +; +9#/definitions/io.k8s.api.storage.v1beta1.VolumeAttachment + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionpatch +jc +x-kubernetes-group-version-kind@>group: storage.k8s.io +kind: VolumeAttachment +version: v1beta1 +J= +;9"7pathname of the VolumeAttachment"name*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Á +/api/v1/nodes/{name}/proxy¢Œ +core_v1%connect GET requests to proxy of Node*connectCoreV1GetNodeProxy2*/*:*/*J7 + +200 + +OK + ² +string + +401 + + UnauthorizedRhttpsj! +x-kubernetes-action +connect +jR +x-kubernetes-group-version-kind/-group: "" +kind: NodeProxyOptions +version: v1 +Œ +core_v1%connect PUT requests to proxy of Node*connectCoreV1PutNodeProxy2*/*:*/*J7 + +401 + + Unauthorized + +200 + +OK + ² +stringRhttpsj! +x-kubernetes-action +connect +jR +x-kubernetes-group-version-kind/-group: "" +kind: NodeProxyOptions +version: v1 +"Ž +core_v1&connect POST requests to proxy of Node*connectCoreV1PostNodeProxy2*/*:*/*J7 + +200 + +OK + ² +string + +401 + + UnauthorizedRhttpsj! +x-kubernetes-action +connect +jR +x-kubernetes-group-version-kind/-group: "" +kind: NodeProxyOptions +version: v1 +*’ +core_v1(connect DELETE requests to proxy of Node*connectCoreV1DeleteNodeProxy2*/*:*/*J7 + +200 + +OK + ² +string + +401 + + UnauthorizedRhttpsj! +x-kubernetes-action +connect +jR +x-kubernetes-group-version-kind/-version: v1 +group: "" +kind: NodeProxyOptions +2” +core_v1)connect OPTIONS requests to proxy of Node*connectCoreV1OptionsNodeProxy2*/*:*/*J7 + +200 + +OK + ² +string + +401 + + UnauthorizedRhttpsj! +x-kubernetes-action +connect +jR +x-kubernetes-group-version-kind/-group: "" +kind: NodeProxyOptions +version: v1 +:Ž +core_v1&connect HEAD requests to proxy of Node*connectCoreV1HeadNodeProxy2*/*:*/*J7 + +200 + +OK + ² +string + +401 + + UnauthorizedRhttpsjR +x-kubernetes-group-version-kind/-group: "" +kind: NodeProxyOptions +version: v1 +j! +x-kubernetes-action +connect +B +core_v1'connect PATCH requests to proxy of Node*connectCoreV1PatchNodeProxy2*/*:*/*J7 + +200 + +OK + ² +string + +401 + + UnauthorizedRhttpsjR +x-kubernetes-group-version-kind/-group: "" +kind: NodeProxyOptions +version: v1 +j! +x-kubernetes-action +connect +J= +;9"7pathname of the NodeProxyOptions"name*string˜Jb +`^\queryBPath is the URL path to use for the current proxy request to node."path2string Ô) +I/apis/apiextensions.k8s.io/v1beta1/watch/customresourcedefinitions/{name}†)³ +apiextensions_v1beta1¿watch changes to an object of kind CustomResourceDefinition. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.*1watchApiextensionsV1beta1CustomResourceDefinition2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsjq +x-kubernetes-group-version-kindNLgroup: apiextensions.k8s.io +kind: CustomResourceDefinition +version: v1beta1 +j +x-kubernetes-actionwatch +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer JE +CA"?path$name of the CustomResourceDefinition"name*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean ¦] +0/apis/apps/v1/namespaces/{namespace}/deploymentsñ\€& +apps_v1(list or watch objects of kind Deployment*listAppsV1NamespacedDeployment2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*B‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Bï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string B‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string B‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Bú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer Bû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string BÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Bž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer B± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean J] +B +200; +9 +OK3 +1 +/#/definitions/io.k8s.api.apps.v1.DeploymentList + +401 + + UnauthorizedRhttpsjN +x-kubernetes-group-version-kind+)version: v1 +group: apps +kind: Deployment +j +x-kubernetes-actionlist +"é +apps_v1create a Deployment* createAppsV1NamespacedDeployment2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BA +? +=bodybody *- ++#/definitions/io.k8s.api.apps.v1.DeploymentBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string Jä +> +2007 +5 +OK/ +- ++#/definitions/io.k8s.api.apps.v1.Deployment +C +201< +: +Created/ +- ++#/definitions/io.k8s.api.apps.v1.Deployment +D +202= +; +Accepted/ +- ++#/definitions/io.k8s.api.apps.v1.Deployment + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionpost +jN +x-kubernetes-group-version-kind+)group: apps +kind: Deployment +version: v1 +*Ì, +apps_v1delete collection of Deployment**deleteAppsV1CollectionNamespacedDeployment2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string Bž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer B‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Bú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string Bû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string BÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Bž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer Jg +L +200E +C +OK= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status + +401 + + UnauthorizedRhttpsjN +x-kubernetes-group-version-kind+)group: apps +kind: Deployment +version: v1 +j* +x-kubernetes-actiondeletecollection +J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string »^ +?/apis/discovery.k8s.io/v1/namespaces/{namespace}/endpointslices÷]§& + discovery_v1+list or watch objects of kind EndpointSlice*&listDiscoveryV1NamespacedEndpointSlice2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*B‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Bï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string B‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string B‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Bú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer Bû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string BÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Bž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer B± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean Je +J +200C +A +OK; +9 +7#/definitions/io.k8s.api.discovery.v1.EndpointSliceList + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionlist +j] +x-kubernetes-group-version-kind:8version: v1 +group: discovery.k8s.io +kind: EndpointSlice +"© + discovery_v1create an EndpointSlice*(createDiscoveryV1NamespacedEndpointSlice2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BI +G +Ebodybody *5 +3#/definitions/io.k8s.api.discovery.v1.EndpointSliceBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string Jü +F +200? += +OK7 +5 +3#/definitions/io.k8s.api.discovery.v1.EndpointSlice +K +201D +B +Created7 +5 +3#/definitions/io.k8s.api.discovery.v1.EndpointSlice +L +202E +C +Accepted7 +5 +3#/definitions/io.k8s.api.discovery.v1.EndpointSlice + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionpost +j] +x-kubernetes-group-version-kind:8group: discovery.k8s.io +kind: EndpointSlice +version: v1 +*ë, + discovery_v1"delete collection of EndpointSlice*2deleteDiscoveryV1CollectionNamespacedEndpointSlice2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string Bž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer B‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Bú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string Bû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string BÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Bž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer Jg +L +200E +C +OK= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status + +401 + + UnauthorizedRhttpsj* +x-kubernetes-actiondeletecollection +j] +x-kubernetes-group-version-kind:8group: discovery.k8s.io +kind: EndpointSlice +version: v1 +J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Ç' +-/apis/discovery.k8s.io/v1beta1/endpointslices•'‰ +discovery_v1beta1+list or watch objects of kind EndpointSlice*1listDiscoveryV1beta1EndpointSliceForAllNamespaces2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jj +O +200H +F +OK@ +> +<#/definitions/io.k8s.api.discovery.v1beta1.EndpointSliceList + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionlist +jb +x-kubernetes-group-version-kind?=group: discovery.k8s.io +kind: EndpointSlice +version: v1beta1 +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean Ë +F/apis/internal.apiserver.k8s.io/v1alpha1/storageversions/{name}/status€Ñ +internalApiserver_v1alpha1+read status of the specified StorageVersion*1readInternalApiserverV1alpha1StorageVersionStatus2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*Jp + +401 + + Unauthorized +U +200N +L +OKF +D +B#/definitions/io.k8s.api.apiserverinternal.v1alpha1.StorageVersionRhttpsj +x-kubernetes-actionget +jm +x-kubernetes-group-version-kindJHgroup: internal.apiserver.k8s.io +kind: StorageVersion +version: v1alpha1 +È +internalApiserver_v1alpha1.replace status of the specified StorageVersion*4replaceInternalApiserverV1alpha1StorageVersionStatus2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BX +V +Tbodybody *D +B#/definitions/io.k8s.api.apiserverinternal.v1alpha1.StorageVersionBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string JÌ +U +200N +L +OKF +D +B#/definitions/io.k8s.api.apiserverinternal.v1alpha1.StorageVersion +Z +201S +Q +CreatedF +D +B#/definitions/io.k8s.api.apiserverinternal.v1alpha1.StorageVersion + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionput +jm +x-kubernetes-group-version-kindJHgroup: internal.apiserver.k8s.io +kind: StorageVersion +version: v1alpha1 +BÐ +internalApiserver_v1alpha17partially update status of the specified StorageVersion*2patchInternalApiserverV1alpha1StorageVersionStatus2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json-patch+json:application/merge-patch+json:&application/strategic-merge-patch+json:application/apply-patch+yamlBN +L +Jbodybody *: +8#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.PatchBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B¯ +¬©¦queryƒfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch)." fieldManager2string BÎ +ËÈÅquery¨Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests."force2boolean Jp +U +200N +L +OKF +D +B#/definitions/io.k8s.api.apiserverinternal.v1alpha1.StorageVersion + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionpatch +jm +x-kubernetes-group-version-kindJHgroup: internal.apiserver.k8s.io +kind: StorageVersion +version: v1alpha1 +J; +97"5pathname of the StorageVersion"name*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string ó +/apis/node.k8s.io/v1alpha1/ÓÐ + node_v1alpha1get available resources*getNodeV1alpha1APIResources2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json:application/yaml:#application/vnd.kubernetes.protobufJp + +401 + + Unauthorized +U +200N +L +OKF +D +B#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.APIResourceListRhttps¬( +5/apis/rbac.authorization.k8s.io/v1/watch/rolebindingsò'æ +rbacAuthorization_v1wwatch individual changes to a list of RoleBinding. deprecated: use the 'watch' parameter with a list operation instead.*7watchRbacAuthorizationV1RoleBindingListForAllNamespaces2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsj# +x-kubernetes-action  +watchlist +jd +x-kubernetes-group-version-kindA?group: rbac.authorization.k8s.io +kind: RoleBinding +version: v1 +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean ú) +B/api/v1/watch/namespaces/{namespace}/persistentvolumeclaims/{name}³) +core_v1¼watch changes to an object of kind PersistentVolumeClaim. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.**watchCoreV1NamespacedPersistentVolumeClaim2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk + +401 + + Unauthorized +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEventRhttpsjW +x-kubernetes-group-version-kind42kind: PersistentVolumeClaim +version: v1 +group: "" +j +x-kubernetes-actionwatch +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer JB +@>"<path!name of the PersistentVolumeClaim"name*string˜J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean ø& +/apis/apps/v1/deploymentsÚ&Î +apps_v1(list or watch objects of kind Deployment*$listAppsV1DeploymentForAllNamespaces2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*J] +B +200; +9 +OK3 +1 +/#/definitions/io.k8s.api.apps.v1.DeploymentList + +401 + + UnauthorizedRhttpsjN +x-kubernetes-group-version-kind+)version: v1 +group: apps +kind: Deployment +j +x-kubernetes-actionlist +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean þ' +)/apis/coordination.k8s.io/v1/watch/leasesÐ'Ä +coordination_v1qwatch individual changes to a list of Lease. deprecated: use the 'watch' parameter with a list operation instead.*,watchCoordinationV1LeaseListForAllNamespaces2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsj# +x-kubernetes-action  +watchlist +jX +x-kubernetes-group-version-kind53group: coordination.k8s.io +kind: Lease +version: v1 +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean ã +/apis/scheduling.k8s.io/Æà + +schedulingget information of a group*getSchedulingAPIGroup2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json:application/yaml:#application/vnd.kubernetes.protobufJi + +401 + + Unauthorized +N +200G +E +OK? += +;#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.APIGroupRhttps’) +group: scheduling.k8s.io +kind: PriorityClass +version: v1beta1 +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer J: +86"4pathname of the PriorityClass"name*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean ×( +6/apis/apps/v1/watch/namespaces/{namespace}/deploymentsœ(® +apps_v1vwatch individual changes to a list of Deployment. deprecated: use the 'watch' parameter with a list operation instead.*#watchAppsV1NamespacedDeploymentList2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsj# +x-kubernetes-action  +watchlist +jN +x-kubernetes-group-version-kind+)group: apps +kind: Deployment +version: v1 +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean À( +1/apis/batch/v1/namespaces/{namespace}/jobs/{name}Š(Ï +batch_v1read the specified Job*readBatchV1NamespacedJob2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*JS +8 +2001 +/ +OK) +' +%#/definitions/io.k8s.api.batch.v1.Job + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionget +jH +x-kubernetes-group-version-kind%#group: batch +kind: Job +version: v1 +Œ +batch_v1replace the specified Job*replaceBatchV1NamespacedJob2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*B; +9 +7bodybody *' +%#/definitions/io.k8s.api.batch.v1.JobBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string J’ +8 +2001 +/ +OK) +' +%#/definitions/io.k8s.api.batch.v1.Job += +2016 +4 +Created) +' +%#/definitions/io.k8s.api.batch.v1.Job + +401 + + UnauthorizedRhttpsjH +x-kubernetes-group-version-kind%#group: batch +kind: Job +version: v1 +j +x-kubernetes-actionput +*ð +batch_v1 delete a Job*deleteBatchV1NamespacedJob2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string J» +L +200E +C +OK= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status +R +202K +I +Accepted= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status + +401 + + UnauthorizedRhttpsj +x-kubernetes-action delete +jH +x-kubernetes-group-version-kind%#group: batch +kind: Job +version: v1 +BÎ +batch_v1"partially update the specified Job*patchBatchV1NamespacedJob2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json-patch+json:application/merge-patch+json:&application/strategic-merge-patch+json:application/apply-patch+yamlBN +L +Jbodybody *: +8#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.PatchBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B¯ +¬©¦queryƒfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch)." fieldManager2string BÎ +ËÈÅquery¨Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests."force2boolean JS +8 +2001 +/ +OK) +' +%#/definitions/io.k8s.api.batch.v1.Job + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionpatch +jH +x-kubernetes-group-version-kind%#group: batch +kind: Job +version: v1 +J0 +.,"*pathname of the Job"name*string˜J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string ù( +6/apis/networking.k8s.io/v1/watch/ingressclasses/{name}¾(÷ + networking_v1³watch changes to an object of kind IngressClass. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.*watchNetworkingV1IngressClass2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk + +401 + + Unauthorized +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEventRhttpsj +x-kubernetes-actionwatch +j] +x-kubernetes-group-version-kind:8group: networking.k8s.io +kind: IngressClass +version: v1 +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer J9 +75"3pathname of the IngressClass"name*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean ´( +;/apis/rbac.authorization.k8s.io/v1alpha1/watch/clusterrolesô'è +rbacAuthorization_v1alpha1wwatch individual changes to a list of ClusterRole. deprecated: use the 'watch' parameter with a list operation instead.*-watchRbacAuthorizationV1alpha1ClusterRoleList2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsj# +x-kubernetes-action  +watchlist +jj +x-kubernetes-group-version-kindGEversion: v1alpha1 +group: rbac.authorization.k8s.io +kind: ClusterRole +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean Œ^ +//apis/storage.k8s.io/v1alpha1/volumeattachmentsØ]¹& +storage_v1alpha1.list or watch objects of kind VolumeAttachment*#listStorageV1alpha1VolumeAttachment2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*B‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Bï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string B‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string B‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Bú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer Bû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string BÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Bž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer B± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean Jl +Q +200J +H +OKB +@ +>#/definitions/io.k8s.api.storage.v1alpha1.VolumeAttachmentList + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionlist +jd +x-kubernetes-group-version-kindA?group: storage.k8s.io +kind: VolumeAttachment +version: v1alpha1 +"Ï +storage_v1alpha1create a VolumeAttachment*%createStorageV1alpha1VolumeAttachment2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BP +N +Lbodybody *< +:#/definitions/io.k8s.api.storage.v1alpha1.VolumeAttachmentBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string J‘ +S +202L +J +Accepted> +< +:#/definitions/io.k8s.api.storage.v1alpha1.VolumeAttachment + +401 + + Unauthorized +M +200F +D +OK> +< +:#/definitions/io.k8s.api.storage.v1alpha1.VolumeAttachment +R +201K +I +Created> +< +:#/definitions/io.k8s.api.storage.v1alpha1.VolumeAttachmentRhttpsj +x-kubernetes-actionpost +jd +x-kubernetes-group-version-kindA?group: storage.k8s.io +kind: VolumeAttachment +version: v1alpha1 +*ö, +storage_v1alpha1%delete collection of VolumeAttachment*/deleteStorageV1alpha1CollectionVolumeAttachment2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string Bž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer B‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Bú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string Bû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string BÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Bž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer Jg +L +200E +C +OK= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status + +401 + + UnauthorizedRhttpsj* +x-kubernetes-actiondeletecollection +jd +x-kubernetes-group-version-kindA?group: storage.k8s.io +kind: VolumeAttachment +version: v1alpha1 +JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Ô +/api/v1/ÇÄ +core_v1get available resources*getCoreV1APIResources2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json:application/yaml:#application/vnd.kubernetes.protobufJp +U +200N +L +OKF +D +B#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.APIResourceList + +401 + + UnauthorizedRhttpsÓ( +1/api/v1/watch/namespaces/{namespace}/podtemplates(¯ +core_v1wwatch individual changes to a list of PodTemplate. deprecated: use the 'watch' parameter with a list operation instead.*$watchCoreV1NamespacedPodTemplateList2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsj# +x-kubernetes-action  +watchlist +jM +x-kubernetes-group-version-kind*(group: "" +kind: PodTemplate +version: v1 +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean ì +/apis/apiextensions.k8s.io/ÌÉ + apiextensionsget information of a group*getApiextensionsAPIGroup2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json:application/yaml:#application/vnd.kubernetes.protobufJi + +401 + + Unauthorized +N +200G +E +OK? += +;#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.APIGroupRhttpsÂ_ +I/apis/storage.k8s.io/v1alpha1/namespaces/{namespace}/csistoragecapacitiesô^Ë& +storage_v1alpha10list or watch objects of kind CSIStorageCapacity*/listStorageV1alpha1NamespacedCSIStorageCapacity2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*B‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Bï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string B‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string B‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Bú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer Bû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string BÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Bž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer B± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean Jn + +401 + + Unauthorized +S +200L +J +OKD +B +@#/definitions/io.k8s.api.storage.v1alpha1.CSIStorageCapacityListRhttpsj +x-kubernetes-actionlist +jf +x-kubernetes-group-version-kindCAgroup: storage.k8s.io +kind: CSIStorageCapacity +version: v1alpha1 +"ç +storage_v1alpha1create a CSIStorageCapacity*1createStorageV1alpha1NamespacedCSIStorageCapacity2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BR +P +Nbodybody *> +<#/definitions/io.k8s.api.storage.v1alpha1.CSIStorageCapacityBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string J— +U +202N +L +Accepted@ +> +<#/definitions/io.k8s.api.storage.v1alpha1.CSIStorageCapacity + +401 + + Unauthorized +O +200H +F +OK@ +> +<#/definitions/io.k8s.api.storage.v1alpha1.CSIStorageCapacity +T +201M +K +Created@ +> +<#/definitions/io.k8s.api.storage.v1alpha1.CSIStorageCapacityRhttpsj +x-kubernetes-actionpost +jf +x-kubernetes-group-version-kindCAgroup: storage.k8s.io +kind: CSIStorageCapacity +version: v1alpha1 +*†- +storage_v1alpha1'delete collection of CSIStorageCapacity*;deleteStorageV1alpha1CollectionNamespacedCSIStorageCapacity2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string Bž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer B‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Bú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string Bû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string BÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Bž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer Jg +L +200E +C +OK= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status + +401 + + UnauthorizedRhttpsjf +x-kubernetes-group-version-kindCAgroup: storage.k8s.io +kind: CSIStorageCapacity +version: v1alpha1 +j* +x-kubernetes-actiondeletecollection +J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string ¦) +N/apis/storage.k8s.io/v1beta1/watch/namespaces/{namespace}/csistoragecapacitiesÓ(å +storage_v1beta1~watch individual changes to a list of CSIStorageCapacity. deprecated: use the 'watch' parameter with a list operation instead.*3watchStorageV1beta1NamespacedCSIStorageCapacityList2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsj# +x-kubernetes-action  +watchlist +je +x-kubernetes-group-version-kindB@kind: CSIStorageCapacity +version: v1beta1 +group: storage.k8s.io +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean à) +G/apis/coordination.k8s.io/v1/watch/namespaces/{namespace}/leases/{name}”)ò +coordination_v1¬watch changes to an object of kind Lease. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.*"watchCoordinationV1NamespacedLease2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionwatch +jX +x-kubernetes-group-version-kind53group: coordination.k8s.io +kind: Lease +version: v1 +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer J2 +0.",pathname of the Lease"name*string˜J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean ô^ +;/apis/rbac.authorization.k8s.io/v1beta1/clusterrolebindings´^Ù& +rbacAuthorization_v1beta10list or watch objects of kind ClusterRoleBinding*.listRbacAuthorizationV1beta1ClusterRoleBinding2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*B‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Bï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string B‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string B‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Bú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer Bû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string BÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Bž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer B± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean Jj + +401 + + Unauthorized +O +200H +F +OK@ +> +<#/definitions/io.k8s.api.rbac.v1beta1.ClusterRoleBindingListRhttpsjp +x-kubernetes-group-version-kindMKgroup: rbac.authorization.k8s.io +kind: ClusterRoleBinding +version: v1beta1 +j +x-kubernetes-actionlist +"é +rbacAuthorization_v1beta1create a ClusterRoleBinding*0createRbacAuthorizationV1beta1ClusterRoleBinding2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BN +L +Jbodybody *: +8#/definitions/io.k8s.api.rbac.v1beta1.ClusterRoleBindingBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string J‹ +K +200D +B +OK< +: +8#/definitions/io.k8s.api.rbac.v1beta1.ClusterRoleBinding +P +201I +G +Created< +: +8#/definitions/io.k8s.api.rbac.v1beta1.ClusterRoleBinding +Q +202J +H +Accepted< +: +8#/definitions/io.k8s.api.rbac.v1beta1.ClusterRoleBinding + +401 + + UnauthorizedRhttpsjp +x-kubernetes-group-version-kindMKgroup: rbac.authorization.k8s.io +kind: ClusterRoleBinding +version: v1beta1 +j +x-kubernetes-actionpost +*˜- +rbacAuthorization_v1beta1'delete collection of ClusterRoleBinding*:deleteRbacAuthorizationV1beta1CollectionClusterRoleBinding2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string Bž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer B‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Bú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string Bû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string BÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Bž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer Jg +L +200E +C +OK= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status + +401 + + UnauthorizedRhttpsj* +x-kubernetes-actiondeletecollection +jp +x-kubernetes-group-version-kindMKgroup: rbac.authorization.k8s.io +kind: ClusterRoleBinding +version: v1beta1 +JO +MKIquery-If 'true', then the output is pretty printed."pretty2string  ^ +9/apis/extensions/v1beta1/namespaces/{namespace}/ingressesâ] & +extensions_v1beta1%list or watch objects of kind Ingress*&listExtensionsV1beta1NamespacedIngress2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*B‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Bï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string B‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string B‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Bú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer Bû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string BÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Bž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer B± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean Je +J +200C +A +OK; +9 +7#/definitions/io.k8s.api.extensions.v1beta1.IngressList + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionlist +jV +x-kubernetes-group-version-kind31group: extensions +kind: Ingress +version: v1beta1 +"¢ +extensions_v1beta1create an Ingress*(createExtensionsV1beta1NamespacedIngress2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BI +G +Ebodybody *5 +3#/definitions/io.k8s.api.extensions.v1beta1.IngressBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string Jü +F +200? += +OK7 +5 +3#/definitions/io.k8s.api.extensions.v1beta1.Ingress +K +201D +B +Created7 +5 +3#/definitions/io.k8s.api.extensions.v1beta1.Ingress +L +202E +C +Accepted7 +5 +3#/definitions/io.k8s.api.extensions.v1beta1.Ingress + +401 + + UnauthorizedRhttpsjV +x-kubernetes-group-version-kind31group: extensions +kind: Ingress +version: v1beta1 +j +x-kubernetes-actionpost +*ä, +extensions_v1beta1delete collection of Ingress*2deleteExtensionsV1beta1CollectionNamespacedIngress2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string Bž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer B‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Bú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string Bû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string BÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Bž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer Jg +L +200E +C +OK= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status + +401 + + UnauthorizedRhttpsj* +x-kubernetes-actiondeletecollection +jV +x-kubernetes-group-version-kind31group: extensions +kind: Ingress +version: v1beta1 +J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string “ +I/apis/policy/v1/namespaces/{namespace}/poddisruptionbudgets/{name}/statusÅ£ + policy_v10read status of the specified PodDisruptionBudget*/readPolicyV1NamespacedPodDisruptionBudgetStatus2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*Jd + +401 + + Unauthorized +I +200B +@ +OK: +8 +6#/definitions/io.k8s.api.policy.v1.PodDisruptionBudgetRhttpsj +x-kubernetes-actionget +jY +x-kubernetes-group-version-kind64group: policy +kind: PodDisruptionBudget +version: v1 +‚ + policy_v13replace status of the specified PodDisruptionBudget*2replacePolicyV1NamespacedPodDisruptionBudgetStatus2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BL +J +Hbodybody *8 +6#/definitions/io.k8s.api.policy.v1.PodDisruptionBudgetBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string J´ +I +200B +@ +OK: +8 +6#/definitions/io.k8s.api.policy.v1.PodDisruptionBudget +N +201G +E +Created: +8 +6#/definitions/io.k8s.api.policy.v1.PodDisruptionBudget + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionput +jY +x-kubernetes-group-version-kind64group: policy +kind: PodDisruptionBudget +version: v1 +B¢ + policy_v1<":pathname of the PodDisruptionBudget"name*string˜J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string –* +//apis/policy/v1beta1/podsecuritypolicies/{name}â)• +policy_v1beta1$read the specified PodSecurityPolicy*"readPolicyV1beta1PodSecurityPolicy2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*Jg +L +200E +C +OK= +; +9#/definitions/io.k8s.api.policy.v1beta1.PodSecurityPolicy + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionget +j\ +x-kubernetes-group-version-kind97group: policy +kind: PodSecurityPolicy +version: v1beta1 +ú +policy_v1beta1'replace the specified PodSecurityPolicy*%replacePolicyV1beta1PodSecurityPolicy2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BO +M +Kbodybody *; +9#/definitions/io.k8s.api.policy.v1beta1.PodSecurityPolicyBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string Jº +L +200E +C +OK= +; +9#/definitions/io.k8s.api.policy.v1beta1.PodSecurityPolicy +Q +201J +H +Created= +; +9#/definitions/io.k8s.api.policy.v1beta1.PodSecurityPolicy + +401 + + UnauthorizedRhttpsj\ +x-kubernetes-group-version-kind97group: policy +kind: PodSecurityPolicy +version: v1beta1 +j +x-kubernetes-actionput +*¢ +policy_v1beta1delete a PodSecurityPolicy*$deletePolicyV1beta1PodSecurityPolicy2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string J» +L +200E +C +OK= +; +9#/definitions/io.k8s.api.policy.v1beta1.PodSecurityPolicy +R +202K +I +Accepted= +; +9#/definitions/io.k8s.api.policy.v1beta1.PodSecurityPolicy + +401 + + UnauthorizedRhttpsj\ +x-kubernetes-group-version-kind97group: policy +kind: PodSecurityPolicy +version: v1beta1 +j +x-kubernetes-action delete +B” +policy_v1beta10partially update the specified PodSecurityPolicy*#patchPolicyV1beta1PodSecurityPolicy2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json-patch+json:application/merge-patch+json:&application/strategic-merge-patch+json:application/apply-patch+yamlBN +L +Jbodybody *: +8#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.PatchBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B¯ +¬©¦queryƒfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch)." fieldManager2string BÎ +ËÈÅquery¨Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests."force2boolean Jg +L +200E +C +OK= +; +9#/definitions/io.k8s.api.policy.v1beta1.PodSecurityPolicy + +401 + + UnauthorizedRhttpsj\ +x-kubernetes-group-version-kind97kind: PodSecurityPolicy +version: v1beta1 +group: policy +j +x-kubernetes-actionpatch +J> +<:"8pathname of the PodSecurityPolicy"name*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Ï( +0/api/v1/watch/namespaces/{namespace}/limitrangesš(¬ +core_v1vwatch individual changes to a list of LimitRange. deprecated: use the 'watch' parameter with a list operation instead.*#watchCoreV1NamespacedLimitRangeList2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsjL +x-kubernetes-group-version-kind)'group: "" +kind: LimitRange +version: v1 +j# +x-kubernetes-action  +watchlist +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean ÷( +K/apis/admissionregistration.k8s.io/v1/watch/validatingwebhookconfigurations§(› +admissionregistration_v1Šwatch individual changes to a list of ValidatingWebhookConfiguration. deprecated: use the 'watch' parameter with a list operation instead.*>watchAdmissionregistrationV1ValidatingWebhookConfigurationList2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsj# +x-kubernetes-action  +watchlist +jz +x-kubernetes-group-version-kindWUgroup: admissionregistration.k8s.io +kind: ValidatingWebhookConfiguration +version: v1 +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean ž^ +8/apis/apps/v1/namespaces/{namespace}/controllerrevisionsá] & +apps_v10list or watch objects of kind ControllerRevision*&listAppsV1NamespacedControllerRevision2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*B‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Bï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string B‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string B‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Bú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer Bû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string BÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Bž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer B± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean Je +J +200C +A +OK; +9 +7#/definitions/io.k8s.api.apps.v1.ControllerRevisionList + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionlist +jV +x-kubernetes-group-version-kind31group: apps +kind: ControllerRevision +version: v1 +"¡ +apps_v1create a ControllerRevision*(createAppsV1NamespacedControllerRevision2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BI +G +Ebodybody *5 +3#/definitions/io.k8s.api.apps.v1.ControllerRevisionBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string Jü +F +200? += +OK7 +5 +3#/definitions/io.k8s.api.apps.v1.ControllerRevision +K +201D +B +Created7 +5 +3#/definitions/io.k8s.api.apps.v1.ControllerRevision +L +202E +C +Accepted7 +5 +3#/definitions/io.k8s.api.apps.v1.ControllerRevision + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionpost +jV +x-kubernetes-group-version-kind31group: apps +kind: ControllerRevision +version: v1 +*ä, +apps_v1'delete collection of ControllerRevision*2deleteAppsV1CollectionNamespacedControllerRevision2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string Bž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer B‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Bú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string Bû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string BÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Bž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer Jg +L +200E +C +OK= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status + +401 + + UnauthorizedRhttpsj* +x-kubernetes-actiondeletecollection +jV +x-kubernetes-group-version-kind31group: apps +kind: ControllerRevision +version: v1 +J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string ¯' +$/apis/policy/v1/poddisruptionbudgets†'ú + policy_v11list or watch objects of kind PodDisruptionBudget*/listPolicyV1PodDisruptionBudgetForAllNamespaces2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jh +M +200F +D +OK> +< +:#/definitions/io.k8s.api.policy.v1.PodDisruptionBudgetList + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionlist +jY +x-kubernetes-group-version-kind64group: policy +kind: PodDisruptionBudget +version: v1 +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean ÷ +7/apis/storage.k8s.io/v1/volumeattachments/{name}/status»˜ + +storage_v1-read status of the specified VolumeAttachment*#readStorageV1VolumeAttachmentStatus2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*Jb +G +200@ +> +OK8 +6 +4#/definitions/io.k8s.api.storage.v1.VolumeAttachment + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionget +j^ +x-kubernetes-group-version-kind;9group: storage.k8s.io +kind: VolumeAttachment +version: v1 +ó + +storage_v10replace status of the specified VolumeAttachment*&replaceStorageV1VolumeAttachmentStatus2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BJ +H +Fbodybody *6 +4#/definitions/io.k8s.api.storage.v1.VolumeAttachmentBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string J° +G +200@ +> +OK8 +6 +4#/definitions/io.k8s.api.storage.v1.VolumeAttachment +L +201E +C +Created8 +6 +4#/definitions/io.k8s.api.storage.v1.VolumeAttachment + +401 + + UnauthorizedRhttpsj^ +x-kubernetes-group-version-kind;9version: v1 +group: storage.k8s.io +kind: VolumeAttachment +j +x-kubernetes-actionput +B— + +storage_v19partially update status of the specified VolumeAttachment*$patchStorageV1VolumeAttachmentStatus2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json-patch+json:application/merge-patch+json:&application/strategic-merge-patch+json:application/apply-patch+yamlBN +L +Jbodybody *: +8#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.PatchBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B¯ +¬©¦queryƒfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch)." fieldManager2string BÎ +ËÈÅquery¨Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests."force2boolean Jb +G +200@ +> +OK8 +6 +4#/definitions/io.k8s.api.storage.v1.VolumeAttachment + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionpatch +j^ +x-kubernetes-group-version-kind;9version: v1 +group: storage.k8s.io +kind: VolumeAttachment +J= +;9"7pathname of the VolumeAttachment"name*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string ª) +O/apis/storage.k8s.io/v1alpha1/watch/namespaces/{namespace}/csistoragecapacitiesÖ(è +storage_v1alpha1~watch individual changes to a list of CSIStorageCapacity. deprecated: use the 'watch' parameter with a list operation instead.*4watchStorageV1alpha1NamespacedCSIStorageCapacityList2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsj# +x-kubernetes-action  +watchlist +jf +x-kubernetes-group-version-kindCAgroup: storage.k8s.io +kind: CSIStorageCapacity +version: v1alpha1 +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean ‹* +B/apis/networking.k8s.io/v1/namespaces/{namespace}/ingresses/{name}Ä)ú + networking_v1read the specified Ingress*!readNetworkingV1NamespacedIngress2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*J\ + +401 + + Unauthorized +A +200: +8 +OK2 +0 +.#/definitions/io.k8s.api.networking.v1.IngressRhttpsj +x-kubernetes-actionget +jX +x-kubernetes-group-version-kind53group: networking.k8s.io +kind: Ingress +version: v1 +É + networking_v1replace the specified Ingress*$replaceNetworkingV1NamespacedIngress2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BD +B +@bodybody *0 +.#/definitions/io.k8s.api.networking.v1.IngressBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string J¤ +A +200: +8 +OK2 +0 +.#/definitions/io.k8s.api.networking.v1.Ingress +F +201? += +Created2 +0 +.#/definitions/io.k8s.api.networking.v1.Ingress + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionput +jX +x-kubernetes-group-version-kind53group: networking.k8s.io +kind: Ingress +version: v1 +*“ + networking_v1delete an Ingress*#deleteNetworkingV1NamespacedIngress2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string J» +L +200E +C +OK= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status +R +202K +I +Accepted= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status + +401 + + UnauthorizedRhttpsj +x-kubernetes-action delete +jX +x-kubernetes-group-version-kind53group: networking.k8s.io +kind: Ingress +version: v1 +Bù + networking_v1&partially update the specified Ingress*"patchNetworkingV1NamespacedIngress2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json-patch+json:application/merge-patch+json:&application/strategic-merge-patch+json:application/apply-patch+yamlBN +L +Jbodybody *: +8#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.PatchBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B¯ +¬©¦queryƒfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch)." fieldManager2string BÎ +ËÈÅquery¨Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests."force2boolean J\ +A +200: +8 +OK2 +0 +.#/definitions/io.k8s.api.networking.v1.Ingress + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionpatch +jX +x-kubernetes-group-version-kind53version: v1 +group: networking.k8s.io +kind: Ingress +J4 +20".pathname of the Ingress"name*string˜J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string €) +-/apis/storage.k8s.io/v1/storageclasses/{name}Î(ø + +storage_v1read the specified StorageClass*readStorageV1StorageClass2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*J^ +C +200< +: +OK4 +2 +0#/definitions/io.k8s.api.storage.v1.StorageClass + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionget +jZ +x-kubernetes-group-version-kind75group: storage.k8s.io +kind: StorageClass +version: v1 +Ë + +storage_v1"replace the specified StorageClass*replaceStorageV1StorageClass2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BF +D +Bbodybody *2 +0#/definitions/io.k8s.api.storage.v1.StorageClassBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string J¨ +C +200< +: +OK4 +2 +0#/definitions/io.k8s.api.storage.v1.StorageClass +H +201A +? +Created4 +2 +0#/definitions/io.k8s.api.storage.v1.StorageClass + +401 + + UnauthorizedRhttpsjZ +x-kubernetes-group-version-kind75group: storage.k8s.io +kind: StorageClass +version: v1 +j +x-kubernetes-actionput +*ü + +storage_v1delete a StorageClass*deleteStorageV1StorageClass2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string J© +C +200< +: +OK4 +2 +0#/definitions/io.k8s.api.storage.v1.StorageClass +I +202B +@ +Accepted4 +2 +0#/definitions/io.k8s.api.storage.v1.StorageClass + +401 + + UnauthorizedRhttpsjZ +x-kubernetes-group-version-kind75version: v1 +group: storage.k8s.io +kind: StorageClass +j +x-kubernetes-action delete +B÷ + +storage_v1+partially update the specified StorageClass*patchStorageV1StorageClass2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json-patch+json:application/merge-patch+json:&application/strategic-merge-patch+json:application/apply-patch+yamlBN +L +Jbodybody *: +8#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.PatchBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B¯ +¬©¦queryƒfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch)." fieldManager2string BÎ +ËÈÅquery¨Force is going to "force" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests."force2boolean J^ +C +200< +: +OK4 +2 +0#/definitions/io.k8s.api.storage.v1.StorageClass + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionpatch +jZ +x-kubernetes-group-version-kind75kind: StorageClass +version: v1 +group: storage.k8s.io +J9 +75"3pathname of the StorageClass"name*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string ú) +B/api/v1/watch/namespaces/{namespace}/replicationcontrollers/{name}³) +core_v1¼watch changes to an object of kind ReplicationController. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.**watchCoreV1NamespacedReplicationController2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsjW +x-kubernetes-group-version-kind42group: "" +kind: ReplicationController +version: v1 +j +x-kubernetes-actionwatch +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer JB +@>"<path!name of the ReplicationController"name*string˜J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean ˆ* +U/apis/admissionregistration.k8s.io/v1beta1/watch/mutatingwebhookconfigurations/{name}®)× +admissionregistration_v1beta1Ãwatch changes to an object of kind MutatingWebhookConfiguration. deprecated: use the 'watch' parameter with a list operation instead, filtered to a single item with the 'fieldSelector' parameter.*=watchAdmissionregistrationV1beta1MutatingWebhookConfiguration2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionwatch +j} +x-kubernetes-group-version-kindZXversion: v1beta1 +group: admissionregistration.k8s.io +kind: MutatingWebhookConfiguration +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer JI +GE"Cpath(name of the MutatingWebhookConfiguration"name*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean º^ +?/apis/coordination.k8s.io/v1beta1/namespaces/{namespace}/leasesö]§& +coordination_v1beta1#list or watch objects of kind Lease*&listCoordinationV1beta1NamespacedLease2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*B‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Bï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string B‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string B‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Bú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer Bû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string BÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Bž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer B± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean Je +J +200C +A +OK; +9 +7#/definitions/io.k8s.api.coordination.v1beta1.LeaseList + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionlist +j] +x-kubernetes-group-version-kind:8kind: Lease +version: v1beta1 +group: coordination.k8s.io +"¨ +coordination_v1beta1create a Lease*(createCoordinationV1beta1NamespacedLease2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BI +G +Ebodybody *5 +3#/definitions/io.k8s.api.coordination.v1beta1.LeaseBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string Jü + +401 + + Unauthorized +F +200? += +OK7 +5 +3#/definitions/io.k8s.api.coordination.v1beta1.Lease +K +201D +B +Created7 +5 +3#/definitions/io.k8s.api.coordination.v1beta1.Lease +L +202E +C +Accepted7 +5 +3#/definitions/io.k8s.api.coordination.v1beta1.LeaseRhttpsj +x-kubernetes-actionpost +j] +x-kubernetes-group-version-kind:8group: coordination.k8s.io +kind: Lease +version: v1beta1 +*ë, +coordination_v1beta1delete collection of Lease*2deleteCoordinationV1beta1CollectionNamespacedLease2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string Bž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer B‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Bú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string Bû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string BÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Bž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer Jg +L +200E +C +OK= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status + +401 + + UnauthorizedRhttpsj] +x-kubernetes-group-version-kind:8kind: Lease +version: v1beta1 +group: coordination.k8s.io +j* +x-kubernetes-actiondeletecollection +J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Ê\ +#/apis/node.k8s.io/v1/runtimeclasses¢\…& +node_v1*list or watch objects of kind RuntimeClass*listNodeV1RuntimeClass2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*B‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Bï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string B‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string B‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Bú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer Bû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string BÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Bž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer B± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean J_ +D +200= +; +OK5 +3 +1#/definitions/io.k8s.api.node.v1.RuntimeClassList + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionlist +jW +x-kubernetes-group-version-kind42group: node.k8s.io +kind: RuntimeClass +version: v1 +"ô +node_v1create a RuntimeClass*createNodeV1RuntimeClass2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BC +A +?bodybody */ +-#/definitions/io.k8s.api.node.v1.RuntimeClassBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string Jê + +401 + + Unauthorized +@ +2009 +7 +OK1 +/ +-#/definitions/io.k8s.api.node.v1.RuntimeClass +E +201> +< +Created1 +/ +-#/definitions/io.k8s.api.node.v1.RuntimeClass +F +202? += +Accepted1 +/ +-#/definitions/io.k8s.api.node.v1.RuntimeClassRhttpsj +x-kubernetes-actionpost +jW +x-kubernetes-group-version-kind42group: node.k8s.io +kind: RuntimeClass +version: v1 +*Ï, +node_v1!delete collection of RuntimeClass*"deleteNodeV1CollectionRuntimeClass2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string Bž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer B‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Bú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string Bû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string BÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Bž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer Jg +L +200E +C +OK= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status + +401 + + UnauthorizedRhttpsj* +x-kubernetes-actiondeletecollection +jW +x-kubernetes-group-version-kind42kind: RuntimeClass +version: v1 +group: node.k8s.io +JO +MKIquery-If 'true', then the output is pretty printed."pretty2string ©^ +6/apis/rbac.authorization.k8s.io/v1/clusterrolebindingsî]Å& +rbacAuthorization_v10list or watch objects of kind ClusterRoleBinding*)listRbacAuthorizationV1ClusterRoleBinding2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*B‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Bï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string B‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string B‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Bú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer Bû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string BÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Bž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer B± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean Je + +401 + + Unauthorized +J +200C +A +OK; +9 +7#/definitions/io.k8s.api.rbac.v1.ClusterRoleBindingListRhttpsj +x-kubernetes-actionlist +jk +x-kubernetes-group-version-kindHFkind: ClusterRoleBinding +version: v1 +group: rbac.authorization.k8s.io +"Æ +rbacAuthorization_v1create a ClusterRoleBinding*+createRbacAuthorizationV1ClusterRoleBinding2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BI +G +Ebodybody *5 +3#/definitions/io.k8s.api.rbac.v1.ClusterRoleBindingBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string Jü +L +202E +C +Accepted7 +5 +3#/definitions/io.k8s.api.rbac.v1.ClusterRoleBinding + +401 + + Unauthorized +F +200? += +OK7 +5 +3#/definitions/io.k8s.api.rbac.v1.ClusterRoleBinding +K +201D +B +Created7 +5 +3#/definitions/io.k8s.api.rbac.v1.ClusterRoleBindingRhttpsj +x-kubernetes-actionpost +jk +x-kubernetes-group-version-kindHFgroup: rbac.authorization.k8s.io +kind: ClusterRoleBinding +version: v1 +*‰- +rbacAuthorization_v1'delete collection of ClusterRoleBinding*5deleteRbacAuthorizationV1CollectionClusterRoleBinding2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string Bž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer B‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Bú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string Bû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string BÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Bž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer Jg + +401 + + Unauthorized +L +200E +C +OK= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.StatusRhttpsj* +x-kubernetes-actiondeletecollection +jk +x-kubernetes-group-version-kindHFgroup: rbac.authorization.k8s.io +kind: ClusterRoleBinding +version: v1 +JO +MKIquery-If 'true', then the output is pretty printed."pretty2string ß( +4/api/v1/watch/namespaces/{namespace}/serviceaccounts¦(¸ +core_v1zwatch individual changes to a list of ServiceAccount. deprecated: use the 'watch' parameter with a list operation instead.*'watchCoreV1NamespacedServiceAccountList2application/json2application/yaml2#application/vnd.kubernetes.protobuf2application/json;stream=watch20application/vnd.kubernetes.protobuf;stream=watch:*/*Jk + +401 + + Unauthorized +P +200I +G +OKA +? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEventRhttpsj# +x-kubernetes-action  +watchlist +jP +x-kubernetes-group-version-kind-+group: "" +kind: ServiceAccount +version: v1 +J‚ +ÿüùqueryÎallowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored. If the feature gate WatchBookmarks is not enabled in apiserver, this field is ignored."allowWatchBookmarks2boolean Jï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string J‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string J‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Jú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer J` +^\"Zpath:object name and auth scope, such as for teams and projects" namespace*string˜JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Jû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string JÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Jž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer J± +®«¨query‹Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion."watch2boolean „a +H/apis/admissionregistration.k8s.io/v1beta1/mutatingwebhookconfigurations·`ž' +admissionregistration_v1beta1:list or watch objects of kind MutatingWebhookConfiguration*createAdmissionregistrationV1beta1MutatingWebhookConfiguration2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*Bi +g +ebodybody *U +S#/definitions/io.k8s.api.admissionregistration.v1beta1.MutatingWebhookConfigurationBž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B– +“queryêfieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." fieldManager2string JÜ +f +200_ +] +OKW +U +S#/definitions/io.k8s.api.admissionregistration.v1beta1.MutatingWebhookConfiguration +k +201d +b +CreatedW +U +S#/definitions/io.k8s.api.admissionregistration.v1beta1.MutatingWebhookConfiguration +l +202e +c +AcceptedW +U +S#/definitions/io.k8s.api.admissionregistration.v1beta1.MutatingWebhookConfiguration + +401 + + UnauthorizedRhttpsj +x-kubernetes-actionpost +j} +x-kubernetes-group-version-kindZXkind: MutatingWebhookConfiguration +version: v1beta1 +group: admissionregistration.k8s.io +*Á- +admissionregistration_v1beta11delete collection of MutatingWebhookConfiguration*HdeleteAdmissionregistrationV1beta1CollectionMutatingWebhookConfiguration2application/json2application/yaml2#application/vnd.kubernetes.protobuf:*/*BT +R +Pbodybody*B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptionsBï +ì é æ queryÇ The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + +This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications."continue2string Bž +›˜•queryøWhen present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed"dryRun2string B‡ +„query\A selector to restrict the list of returned objects by their fields. Defaults to everything." fieldSelector2string Bä +áÞÛquery±The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately."gracePeriodSeconds2integer B‡ +„query\A selector to restrict the list of returned objects by their labels. Defaults to everything." labelSelector2string Bú + +÷ +ô +ñ +queryÔ +limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + +The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned."limit2integer BÑ +ÎËÈquery Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both."orphanDependents2boolean Bˆ +…‚ÿquery×Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground."propagationPolicy2string Bû +øõòqueryÌresourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersion2string BÚ +×ÔÑquery¦resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + +Defaults to unset"resourceVersionMatch2string Bž +›˜•querypTimeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity."timeoutSeconds2integer Jg +L +200E +C +OK= +; +9#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status + +401 + + UnauthorizedRhttpsj} +x-kubernetes-group-version-kindZXversion: v1beta1 +group: admissionregistration.k8s.io +kind: MutatingWebhookConfiguration +j* +x-kubernetes-actiondeletecollection +JO +MKIquery-If 'true', then the output is pretty printed."pretty2string Ú +/apis/apps/v1/ÇÄ +apps_v1get available resources*getAppsV1APIResources2application/json2application/yaml2#application/vnd.kubernetes.protobuf:application/json:application/yaml:#application/vnd.kubernetes.protobufJp +U +200N +L +OKF +D +B#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.APIResourceList + +401 + + UnauthorizedRhttpsJÓµ3 +˜ +io.k8s.api.apps.v1.DaemonSet÷ "7DaemonSet represents the configuration of a daemon set.² +objectÊÙ + +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +string +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +string +Ò +metadataÅ +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"ƒStandard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata +Ó +specÊ +.#/definitions/io.k8s.api.apps.v1.DaemonSetSpec"—The desired behavior of this daemon set. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status +® +status£ +0#/definitions/io.k8s.api.apps.v1.DaemonSetStatus"îThe current status of this daemon set. This data may be out of date by some window of time. Populated by the system. Read-only. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-statusúS +x-kubernetes-group-version-kind0.- group: apps + kind: DaemonSet + version: v1 + +È +&io.k8s.api.batch.v1beta1.CronJobStatus"9CronJobStatus represents the current state of a cron job.² +objectÊÓ +¡ +active–"-A list of pointers to currently running jobs.² +arrayº4 +2 +0#/definitions/io.k8s.api.core.v1.ObjectReferenceú# +x-kubernetes-list-type atomic + +– +lastScheduleTime +7#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"FInformation when was the last time the job was successfully scheduled. +“ +lastSuccessfulTime} +7#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"BInformation when was the last time the job successfully completed. +ô + io.k8s.api.core.v1.ConfigMapListÏ"CConfigMapList is a resource containing a list of ConfigMap objects.šitems² +objectÊ› +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +string +f +items]" Items is the list of ConfigMaps.² +arrayº. +, +*#/definitions/io.k8s.api.core.v1.ConfigMap +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +string +³ +metadata¦ +;#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"gMore info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadataúU +x-kubernetes-group-version-kind20- group: "" + kind: ConfigMapList + version: v1 + +„ +io.k8s.api.core.v1.KeyToPathã",Maps a string key to a path within a volume.škeyšpath² +objectÊ™ +' +key "The key to project.² +string +» +mode²int32"œOptional: mode bits used to set permissions on this file. Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts both octal and decimal values, JSON requires decimal values for mode bits. If not specified, the volume defaultMode will be used. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.² +integer +¯ +path¦"˜The relative path of the file to map the key to. May not be an absolute path. May not contain the path element '..'. May not start with the string '..'.² +string +¿ +"io.k8s.api.core.v1.SecretEnvSource˜"¹SecretEnvSource selects a Secret to populate the environment variables with. + +The contents of the target Secret's Data field will represent the key-value pairs as environment variables.² +objectÊÍ +„ +name|"oName of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names² +string +D +optional8"*Specify whether the Secret must be defined² +boolean +² +,io.k8s.api.storage.v1.VolumeAttachmentSource"ÝVolumeAttachmentSource represents a volume that should be attached. Right now only PersistenVolumes can be attached via external attacher, in future we may allow also inline volumes in pods. Exactly one member can be set.² +objectÊ’ +À +inlineVolumeSpec« +5#/definitions/io.k8s.api.core.v1.PersistentVolumeSpec"ñinlineVolumeSpec contains all the information necessary to attach a persistent volume defined by a pod's inline VolumeSource. This field is populated only for the CSIMigration feature. It contains translated fields from a pod's inline VolumeSource to a PersistentVolumeSpec. This field is beta-level and is only honored by servers that enabled the CSIMigration feature. +M +persistentVolumeName5"(Name of the persistent volume to attach.² +string +¶ + +!io.k8s.api.apps.v1.ReplicaSetSpec +"4ReplicaSetSpec is the specification of a ReplicaSet.šselector² +objectÊÀ +ƒ +minReadySecondsïint32"ÙMinimum number of seconds for which a newly created pod should be ready without any of its container crashing, for it to be considered available. Defaults to 0 (pod will be considered available as soon as it is ready)² +integer +¡ +replicas”int32"þReplicas is the number of desired replicas. This is a pointer to distinguish between explicit zero and unspecified. Defaults to 1. More info: https://kubernetes.io/docs/concepts/workloads/controllers/replicationcontroller/#what-is-a-replicationcontroller² +integer +ý +selectorð +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector"«Selector is a label query over pods that should match the replica count. Label keys and values that must match in order to be controlled by this replica set. It must match the pod template's labels. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#label-selectors +“ +template† +0#/definitions/io.k8s.api.core.v1.PodTemplateSpec"ÑTemplate is the object that describes the pod that will be created if insufficient replicas are detected. More info: https://kubernetes.io/docs/concepts/workloads/controllers/replicationcontroller#pod-template +– +4io.k8s.api.authorization.v1.LocalSubjectAccessReviewÝ "çLocalSubjectAccessReview checks whether or not a user or group can perform an action in a given namespace. Having a namespace scoped resource makes it much easier to grant namespace scoped policy that includes permissions checking.šspec² +objectÊè +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +string +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +string +K +metadata? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta +ñ +specè +A#/definitions/io.k8s.api.authorization.v1.SubjectAccessReviewSpec"¢Spec holds information about the request being evaluated. spec.namespace must be equal to the namespace you made the request against. If empty, it is defaulted. +§ +statusœ +C#/definitions/io.k8s.api.authorization.v1.SubjectAccessReviewStatus"UStatus is filled in by the server and indicates whether the request is allowed or notúr +x-kubernetes-group-version-kindOM- group: authorization.k8s.io + kind: LocalSubjectAccessReview + version: v1 + +Ÿ +(io.k8s.api.core.v1.AzureDiskVolumeSourceò"TAzureDisk represents an Azure Data Disk mount on the host and bind mount to the pod.šdiskNamešdiskURI² +objectÊø +x +readOnlyl"^Defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts.² +boolean +K + cachingMode<"/Host Caching mode: None, Read Only, Read Write.² +string +F +diskName:"-The Name of the data disk in the blob storage² +string +A +diskURI6")The URI the data disk in the blob storage² +string +À +fsTypeµ"§Filesystem type to mount. Must be a filesystem type supported by the host operating system. Ex. "ext4", "xfs", "ntfs". Implicitly inferred to be "ext4" if unspecified.² +string +à +kind×"ÉExpected values Shared: multiple blob disks per storage account Dedicated: single blob disk per storage account Managed: azure managed data disk (only in managed availability set). defaults to shared² +string +Û +*io.k8s.api.networking.v1beta1.IngressClass¬ "óIngressClass represents the class of the Ingress, referenced by the Ingress Spec. The `ingressclass.kubernetes.io/is-default-class` annotation can be used to indicate that an IngressClass should be considered default. When a single IngressClass resource has this annotation set to true, new Ingress resources without a class specified will be assigned this default class.² +objectʼ +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +string +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +string +Ò +metadataÅ +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"ƒStandard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata +ç +specÞ +<#/definitions/io.k8s.api.networking.v1beta1.IngressClassSpec"Spec is the desired state of the IngressClass. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-statusúh +x-kubernetes-group-version-kindEC- kind: IngressClass + version: v1beta1 + group: networking.k8s.io + +— +0io.k8s.api.storage.v1alpha1.VolumeAttachmentSpecâ"HVolumeAttachmentSpec is the specification of a VolumeAttachment request.šattacheršsourcešnodeName² +objectÊê +H +nodeName<"/The node that the volume should be attached to.² +string +ƒ +sourcey +@#/definitions/io.k8s.api.storage.v1alpha1.VolumeAttachmentSource"5Source represents the volume that should be attached. +— +attacherŠ"}Attacher indicates the name of the volume driver that MUST handle this request. This is the name returned by GetPluginName().² +string +§ +6io.k8s.api.admissionregistration.v1.RuleWithOperationsì "‚RuleWithOperations is a tuple of Operations and Resources. It is recommended to make sure that all the tuple expansions are valid.² +objectÊØ +´ + apiGroups¦"‰APIGroups is the API groups the resources belong to. '*' is all groups. If '*' is present, the length of the slice must be one. Required.² +arrayº + ² +string +¼ + apiVersions¬"APIVersions is the API versions the resources belong to. '*' is all versions. If '*' is present, the length of the slice must be one. Required.² +arrayº + ² +string +  + +operations‘"ôOperations is the operations the admission hook cares about - CREATE, UPDATE, DELETE, CONNECT or * for all of those operations and any future admission operations that are added. If '*' is present, the length of the slice must be one. Required.² +arrayº + ² +string +– + resourcesˆ"ëResources is a list of resources this rule applies to. + +For example: 'pods' means pods. 'pods/log' means the log subresource of pods. '*' means all resources, but not subresources. 'pods/*' means all subresources of pods. '*/scale' means all scale subresources. '*/*' means all resources and their subresources. + +If wildcard is present, the validation rule will ensure resources do not overlap with each other. + +Depending on the enclosing object, subresources might not be allowed. Required.² +arrayº + ² +string +£ +scope™"‹scope specifies the scope of this rule. Valid values are "Cluster", "Namespaced", and "*" "Cluster" means that only cluster-scoped resources will match this rule. Namespace API objects are cluster-scoped. "Namespaced" means that only namespaced resources will match this rule. "*" means that there are no scope restrictions. Subresources match the scope of their parent resource. Default is "*".² +string +ç +io.k8s.api.core.v1.ConfigMapÆ"7ConfigMap holds configuration data for pods to consume.² +objectʪ +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +string +˜ + +binaryData‰"åBinaryData contains the binary data. Each key must consist of alphanumeric characters, '-', '_' or '.'. BinaryData can contain byte sequences that are not in the UTF-8 range. The keys stored in BinaryData must not overlap with the ones in the Data field, this is enforced during validation process. Using this field will require 1.10+ apiserver and kubelet.ª +byte² +string² +object +Ï +dataÆ"¨Data contains the configuration data. Each key must consist of alphanumeric characters, '-', '_' or '.'. Values with non-UTF-8 byte sequences must use the BinaryData field. The keys stored in Data must not overlap with the keys in the BinaryData field, this is enforced during validation process.ª + ² +string² +object +è + immutableÚ"ËImmutable, if set to true, ensures that data stored in the ConfigMap cannot be updated (only object metadata can be modified). If not set to true, the field can be modified at any time. Defaulted to nil.² +boolean +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +string +Ò +metadataÅ +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"ƒStandard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadataúQ +x-kubernetes-group-version-kind.,- kind: ConfigMap + version: v1 + group: "" + +‘ +(io.k8s.api.core.v1.SessionAffinityConfigä"HSessionAffinityConfig represents the configurations of session affinity.² +objectÊ‹ +ˆ +clientIP| +/#/definitions/io.k8s.api.core.v1.ClientIPConfig"IclientIP contains the configurations of Client IP based session affinity. +± +'io.k8s.api.rbac.v1beta1.ClusterRoleList… "¢ClusterRoleList is a collection of ClusterRoles. Deprecated in v1.17 in favor of rbac.authorization.k8s.io/v1 ClusterRoles, and will no longer be served in v1.22.šitems² +objectÊÓ +l +itemsc"Items is a list of ClusterRoles² +arrayº5 +3 +1#/definitions/io.k8s.api.rbac.v1beta1.ClusterRole +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +string +f +metadataZ +;#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"Standard object's metadata. +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +stringús +x-kubernetes-group-version-kindPN- kind: ClusterRoleList + version: v1beta1 + group: rbac.authorization.k8s.io + +¸ +/io.k8s.api.scheduling.v1beta1.PriorityClassList„ "6PriorityClassList is a collection of priority classes.šitems² +objectÊÅ +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +string +y +itemsp"$items is the list of PriorityClasses² +arrayº= +; +9#/definitions/io.k8s.api.scheduling.v1beta1.PriorityClass +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +string +Ê +metadata½ +;#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"~Standard list metadata More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadataúm +x-kubernetes-group-version-kindJH- version: v1beta1 + group: scheduling.k8s.io + kind: PriorityClassList + +± +/io.k8s.apimachinery.pkg.apis.meta.v1.WatchEventý"6Event represents a single event to a watched resource.štypešobject² +objectÊ× + +type ² +string +¿ +object´ +:#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension"õObject is: + * If Type is Added or Modified: the new state of the object. + * If Type is Deleted: the state of the object immediately before deletion. + * If Type is Error: *Status is recommended; other types may make sense + depending on context.úË +x-kubernetes-group-version-kind§¤- group: "" + kind: WatchEvent + version: v1 +- group: admission.k8s.io + kind: WatchEvent + version: v1 +- group: admission.k8s.io + kind: WatchEvent + version: v1beta1 +- group: admissionregistration.k8s.io + kind: WatchEvent + version: v1 +- group: admissionregistration.k8s.io + kind: WatchEvent + version: v1beta1 +- version: v1 + group: apiextensions.k8s.io + kind: WatchEvent +- group: apiextensions.k8s.io + kind: WatchEvent + version: v1beta1 +- group: apiregistration.k8s.io + kind: WatchEvent + version: v1 +- group: apiregistration.k8s.io + kind: WatchEvent + version: v1beta1 +- group: apps + kind: WatchEvent + version: v1 +- group: apps + kind: WatchEvent + version: v1beta1 +- group: apps + kind: WatchEvent + version: v1beta2 +- group: authentication.k8s.io + kind: WatchEvent + version: v1 +- group: authentication.k8s.io + kind: WatchEvent + version: v1beta1 +- version: v1 + group: authorization.k8s.io + kind: WatchEvent +- group: authorization.k8s.io + kind: WatchEvent + version: v1beta1 +- group: autoscaling + kind: WatchEvent + version: v1 +- version: v2beta1 + group: autoscaling + kind: WatchEvent +- group: autoscaling + kind: WatchEvent + version: v2beta2 +- group: batch + kind: WatchEvent + version: v1 +- group: batch + kind: WatchEvent + version: v1beta1 +- group: certificates.k8s.io + kind: WatchEvent + version: v1 +- group: certificates.k8s.io + kind: WatchEvent + version: v1beta1 +- group: coordination.k8s.io + kind: WatchEvent + version: v1 +- group: coordination.k8s.io + kind: WatchEvent + version: v1beta1 +- group: discovery.k8s.io + kind: WatchEvent + version: v1 +- group: discovery.k8s.io + kind: WatchEvent + version: v1beta1 +- version: v1 + group: events.k8s.io + kind: WatchEvent +- group: events.k8s.io + kind: WatchEvent + version: v1beta1 +- group: extensions + kind: WatchEvent + version: v1beta1 +- group: flowcontrol.apiserver.k8s.io + kind: WatchEvent + version: v1alpha1 +- kind: WatchEvent + version: v1beta1 + group: flowcontrol.apiserver.k8s.io +- kind: WatchEvent + version: v1alpha1 + group: imagepolicy.k8s.io +- group: internal.apiserver.k8s.io + kind: WatchEvent + version: v1alpha1 +- group: networking.k8s.io + kind: WatchEvent + version: v1 +- group: networking.k8s.io + kind: WatchEvent + version: v1beta1 +- kind: WatchEvent + version: v1 + group: node.k8s.io +- version: v1alpha1 + group: node.k8s.io + kind: WatchEvent +- group: node.k8s.io + kind: WatchEvent + version: v1beta1 +- kind: WatchEvent + version: v1 + group: policy +- group: policy + kind: WatchEvent + version: v1beta1 +- group: rbac.authorization.k8s.io + kind: WatchEvent + version: v1 +- group: rbac.authorization.k8s.io + kind: WatchEvent + version: v1alpha1 +- group: rbac.authorization.k8s.io + kind: WatchEvent + version: v1beta1 +- group: scheduling.k8s.io + kind: WatchEvent + version: v1 +- group: scheduling.k8s.io + kind: WatchEvent + version: v1alpha1 +- group: scheduling.k8s.io + kind: WatchEvent + version: v1beta1 +- version: v1 + group: storage.k8s.io + kind: WatchEvent +- group: storage.k8s.io + kind: WatchEvent + version: v1alpha1 +- group: storage.k8s.io + kind: WatchEvent + version: v1beta1 + +ø +3io.k8s.api.autoscaling.v2beta1.ResourceMetricSourceÀ"ÊResourceMetricSource indicates how to scale on a resource metric known to Kubernetes, as specified in requests and limits, describing each pod in the current scale target (e.g. CPU or memory). The values will be averaged together before being compared to the target. Such metrics are built in to Kubernetes, and have special scaling options on top of those available to normal per-pod metrics using the "pods" source. Only one "target" type should be set.šname² +objectÊÝ +B +name:"-name is the name of the resource in question.² +string +ð +targetAverageUtilizationÓint32"½targetAverageUtilization is the target value of the average of the resource metric across all relevant pods, represented as a percentage of the requested value of the resource for the pods.² +integer +£ +targetAverageValueŒ +;#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity"ÌtargetAverageValue is the target value of the average of the resource metric across all relevant pods, as a raw value (instead of as a percentage of the request), similar to the "pods" metric source type. + +(io.k8s.api.networking.v1.HTTPIngressPathâ "oHTTPIngressPath associates a path with a backend. Incoming urls matching the path are forwarded to the backend.šbackend² +objectÊØ + +Ÿ +backend“ +5#/definitions/io.k8s.api.networking.v1.IngressBackend"ZBackend defines the referenced service endpoint to which the traffic will be forwarded to. +ž +path•"‡Path is matched against the path of an incoming request. Currently it can contain characters disallowed from the conventional "path" part of a URL as defined by RFC 3986. Paths must begin with a '/'. When unspecified, all paths from incoming requests are matched.² +string +’ +pathType…"÷PathType determines the interpretation of the Path matching. PathType can be one of the following values: * Exact: Matches the URL path exactly. * Prefix: Matches based on a URL path prefix split by '/'. Matching is + done on a path element by element basis. A path element refers is the + list of labels in the path split by the '/' separator. A request is a + match for path p if every p is an element-wise prefix of p of the + request path. Note that if the last element of the path is a substring + of the last element in request path, it is not a match (e.g. /foo/bar + matches /foo/bar/baz, but does not match /foo/barbaz). +* ImplementationSpecific: Interpretation of the Path matching is up to + the IngressClass. Implementations can treat this as a separate PathType + or treat it identically to Prefix or Exact path types. +Implementations are required to support all path types.² +string +‡ +$io.k8s.api.networking.v1.IngressListÞ"'IngressList is a collection of Ingress.šitems² +objectʹ +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +string +g +items^"Items is the list of Ingress.² +arrayº2 +0 +.#/definitions/io.k8s.api.networking.v1.Ingress +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +string +Ð +metadataà +;#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"ƒStandard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadataúb +x-kubernetes-group-version-kind?=- kind: IngressList + version: v1 + group: networking.k8s.io + +ì +Nio.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1.ExternalDocumentation™"YExternalDocumentation allows referencing an external resource for extended documentation.² +objectÊ0 + + description ² +string + +url ² +string +í@ +Mio.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1beta1.JSONSchemaProps›@"[JSONSchemaProps is a JSON-Schema following Specification Draft 4 (http://json-schema.org/).² +objectʯ? + +exclusiveMaximum ² +boolean + +exclusiveMinimum ² +boolean +‚ +patternPropertiesmª_ +] +[#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1beta1.JSONSchemaProps² +object + +title ² +string +Ô +defaultÈ +P#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1beta1.JSON"ódefault is a default value for undefined object fields. Defaulting is a beta feature under the CustomResourceDefaulting feature gate. CustomResourceDefinitions with defaults must be created using the v1 (or newer) CustomResourceDefinition API. +Š + dependencieszªl +j +h#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1beta1.JSONSchemaPropsOrStringArray² +object + +maxItemsint64² +integer +Ó +x-kubernetes-embedded-resource°"¡x-kubernetes-embedded-resource defines that the value is an embedded Kubernetes runtime.Object, with TypeMeta and ObjectMeta. The type must be object. It is allowed to further restrict the embedded object. kind, apiVersion and metadata are validated automatically. x-kubernetes-preserve-unknown-fields is allowed to be true, but does not have to be if the object is fully specified (up to kind, apiVersion, metadata).² +boolean + +id ² +string + +minItemsint64² +integer +d +not] +[#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1beta1.JSONSchemaProps +Þ +x-kubernetes-list-typeÃ"µx-kubernetes-list-type annotates an array to further describe its topology. This extension must only be used on lists and may have 3 possible values: + +1) `atomic`: the list is treated as a single entity, like a scalar. + Atomic lists will be entirely replaced when updated. This extension + may be used on any type of list (struct, scalar, ...). +2) `set`: + Sets are lists that must not have multiple items with the same value. Each + value must be a scalar, an object with x-kubernetes-map-type `atomic` or an + array with x-kubernetes-list-type `atomic`. +3) `map`: + These lists are like maps in that their elements have a non-index key + used to identify them. Order is preserved upon merge. The map tag + must only be used on a list with elements of type object. +Defaults to atomic for arrays.² +string +¶ +format«"format is an OpenAPI v3 format string. Unknown formats are ignored. The following formats are validated: + +- bsonobjectid: a bson object ID, i.e. a 24 characters hex string - uri: an URI as parsed by Golang net/url.ParseRequestURI - email: an email address as parsed by Golang net/mail.ParseAddress - hostname: a valid representation for an Internet host name, as defined by RFC 1034, section 3.1 [RFC1034]. - ipv4: an IPv4 IP as parsed by Golang net.ParseIP - ipv6: an IPv6 IP as parsed by Golang net.ParseIP - cidr: a CIDR as parsed by Golang net.ParseCIDR - mac: a MAC address as parsed by Golang net.ParseMAC - uuid: an UUID that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?[0-9a-f]{4}-?[0-9a-f]{4}-?[0-9a-f]{12}$ - uuid3: an UUID3 that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?3[0-9a-f]{3}-?[0-9a-f]{4}-?[0-9a-f]{12}$ - uuid4: an UUID4 that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?4[0-9a-f]{3}-?[89ab][0-9a-f]{3}-?[0-9a-f]{12}$ - uuid5: an UUID5 that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?5[0-9a-f]{3}-?[89ab][0-9a-f]{3}-?[0-9a-f]{12}$ - isbn: an ISBN10 or ISBN13 number string like "0321751043" or "978-0321751041" - isbn10: an ISBN10 number string like "0321751043" - isbn13: an ISBN13 number string like "978-0321751041" - creditcard: a credit card number defined by the regex ^(?:4[0-9]{12}(?:[0-9]{3})?|5[1-5][0-9]{14}|6(?:011|5[0-9][0-9])[0-9]{12}|3[47][0-9]{13}|3(?:0[0-5]|[68][0-9])[0-9]{11}|(?:2131|1800|35\d{3})\d{11})$ with any non digit characters mixed in - ssn: a U.S. social security number following the regex ^\d{3}[- ]?\d{2}[- ]?\d{4}$ - hexcolor: an hexadecimal color code like "#FFFFFF: following the regex ^#?([0-9a-fA-F]{3}|[0-9a-fA-F]{6})$ - rgbcolor: an RGB color code like rgb like "rgb(255,255,2559" - byte: base64 encoded binary data - password: any kind of string - date: a date string like "2006-01-02" as defined by full-date in RFC3339 - duration: a duration string like "22 ns" as parsed by Golang time.ParseDuration or compatible with Scala duration format - datetime: a date time string like "2014-12-15T19:30:20.000Z" as defined by date-time in RFC3339.² +string + +minimumdouble² +number +! + +multipleOfdouble² +number + +$ref ² +string + +$schema ² +string +{ +additionalPropertiesc +a#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1beta1.JSONSchemaPropsOrBool +| + definitionsmª_ +] +[#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1beta1.JSONSchemaProps² +object + + maxLengthint64² +integer +« +x-kubernetes-list-map-keysŒ"ïx-kubernetes-list-map-keys annotates an array with the x-kubernetes-list-type `map` by specifying the keys used as the index of the map. + +This tag MUST only be used on lists that have the "x-kubernetes-list-type" extension set to "map". Also, the values specified for this attribute must be a scalar typed field of the child structure (no nesting is supported). + +The properties specified must either be required or have a default value, to ensure those properties are present for all list items.² +arrayº + ² +string +  +x-kubernetes-map-type†"øx-kubernetes-map-type annotates an object to further describe its topology. This extension must only be used when type is object and may have 2 possible values: + +1) `granular`: + These maps are actual maps (key-value pairs) and each fields are independent + from each other (they can each be manipulated by separate actors). This is + the default behaviour for all maps. +2) `atomic`: the list is treated as a single entity, like a scalar. + Atomic maps will be entirely replaced when updated.² +string +v +additionalItemsc +a#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1beta1.JSONSchemaPropsOrBool +i +enuma² +arrayºT +R +P#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1beta1.JSON +s + externalDocsc +a#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1beta1.ExternalDocumentation +m +itemsd +b#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1beta1.JSONSchemaPropsOrArray + + minLengthint64² +integer + + uniqueItems ² +boolean +$ + minPropertiesint64² +integer + +nullable ² +boolean + +pattern ² +string +& +required² +arrayº + ² +string + +type ² +string +˜ +$x-kubernetes-preserve-unknown-fieldsï"àx-kubernetes-preserve-unknown-fields stops the API server decoding step from pruning fields which are not specified in the validation schema. This affects fields recursively, but switches back to normal pruning behaviour if nested properties or additionalProperties are specified in the schema. This can either be true or undefined. False is forbidden.² +boolean +u +allOfl² +arrayº_ +] +[#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1beta1.JSONSchemaProps +u +anyOfl² +arrayº_ +] +[#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1beta1.JSONSchemaProps + + description ² +string +] +exampleR +P#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1beta1.JSON +$ + maxPropertiesint64² +integer + +maximumdouble² +number +u +oneOfl² +arrayº_ +] +[#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1beta1.JSONSchemaProps +{ + +propertiesmª_ +] +[#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1beta1.JSONSchemaProps² +object +‡ +x-kubernetes-int-or-stringè"Ùx-kubernetes-int-or-string specifies that this value is either an integer or a string. If this is true, an empty type is allowed and type as child of anyOf is permitted if following one of the following patterns: + +1) anyOf: + - type: integer + - type: string +2) allOf: + - anyOf: + - type: integer + - type: string + - ... zero or more² +boolean +Þ + io.k8s.api.core.v1.ContainerPort¹">ContainerPort represents a network port in a single container.š containerPort² +objectÊÚ +ˆ + containerPortwint32"bNumber of port to expose on the pod's IP address. This must be a valid port number, 0 < x < 65536.² +integer +A +hostIP7"*What host IP to bind the external port to.² +string +å +hostPortØint32"ÂNumber of port to expose on the host. If specified, this must be a valid port number, 0 < x < 65536. If HostNetwork is specified, this must match ContainerPort. Most containers do not need this.² +integer +Æ +name½"¯If specified, this must be an IANA_SVC_NAME and unique within the pod. Each named port in a pod must have a unique name. Name for the port that can be referred to by services.² +string +Y +protocolM"@Protocol for port. Must be UDP, TCP, or SCTP. Defaults to "TCP".² +string +ˆ +2io.k8s.api.core.v1.GlusterfsPersistentVolumeSourceÑ"‹Represents a Glusterfs mount that lasts the lifetime of a pod. Glusterfs volumes do not support ownership management or SELinux relabeling.š endpointsšpath² +objectÊ¡ +« + endpoints"EndpointsName is the endpoint name that details Glusterfs topology. More info: https://examples.k8s.io/volumes/glusterfs/README.md#create-a-pod² +string +• +endpointsNamespaceþ"ðEndpointsNamespace is the namespace that contains Glusterfs endpoint. If this field is empty, the EndpointNamespace defaults to the same namespace as the bound PVC. More info: https://examples.k8s.io/volumes/glusterfs/README.md#create-a-pod² +string +ƒ +path{"nPath is the Glusterfs volume path. More info: https://examples.k8s.io/volumes/glusterfs/README.md#create-a-pod² +string +Ò +readOnlyÅ"¶ReadOnly here will force the Glusterfs volume to be mounted with read-only permissions. Defaults to false. More info: https://examples.k8s.io/volumes/glusterfs/README.md#create-a-pod² +boolean +£ +io.k8s.api.core.v1.PodList„ "PodList is a list of Pods.šitems² +objectÊÿ +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +string +­ +items£"lList of pods. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md² +arrayº( +& +$#/definitions/io.k8s.api.core.v1.Pod +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +string +Ï +metadata +;#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"‚Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kindsúO +x-kubernetes-group-version-kind,*- group: "" + kind: PodList + version: v1 + +Ò +)io.k8s.api.extensions.v1beta1.IngressSpec¤ ";IngressSpec describes the Ingress the user wishes to exist.² +objectÊØ +º +backend® +:#/definitions/io.k8s.api.extensions.v1beta1.IngressBackend"ïA default backend capable of servicing requests that don't match any rule. At least one of 'backend' or 'rules' must be specified. This field is optional to allow the loadbalancer controller or defaulting logic to specify a global default. +´ +ingressClassNameŸ"‘IngressClassName is the name of the IngressClass cluster resource. The associated IngressClass defines which controller will implement the resource. This replaces the deprecated `kubernetes.io/ingress.class` annotation. For backwards compatibility, when that annotation is set, it must be given precedence over this field. The controller may emit a warning if the field and annotation have different values. Implementations of this API should ignore Ingresses without a class specified. An IngressClass resource may be marked as default, which can be used to set a default value for this field. For more information, refer to the IngressClass documentation.² +string +Ø +rulesÎ"ƒA list of host rules used to configure the Ingress. If unspecified, or no rule matches, all traffic is sent to the default backend.² +arrayº; +9 +7#/definitions/io.k8s.api.extensions.v1beta1.IngressRule +† +tlsþ"´TLS configuration. Currently the Ingress only supports a single TLS port, 443. If multiple members of this list specify different hosts, they will be multiplexed on the same port according to the hostname specified through the SNI TLS extension, if the ingress controller fulfilling the ingress supports SNI.² +arrayº: +8 +6#/definitions/io.k8s.api.extensions.v1beta1.IngressTLS +î+ +(io.k8s.api.storage.v1beta1.CSIDriverSpecÁ+"2CSIDriverSpec is the specification of a CSIDriver.² +objectÊþ* +Û + fsGroupPolicyÉ"»Defines if the underlying volume supports changing ownership and permission of the volume before being mounted. Refer to the specific FSGroupPolicy values for additional details. This field is alpha-level, and is only honored by servers that enable the CSIVolumeFSGroupPolicy feature gate. + +This field is immutable.² +string +© +podInfoOnMount– "‡ If set to true, podInfoOnMount indicates this CSI volume driver requires additional pod information (like podName, podUID, etc.) during mount operations. If set to false, pod information will not be passed on mount. Default is false. The CSI driver specifies podInfoOnMount as part of driver deployment. If true, Kubelet will pass pod information as VolumeContext in the CSI NodePublishVolume() calls. The CSI driver is responsible for parsing and validating the information passed in as VolumeContext. The following VolumeConext will be passed if podInfoOnMount is set to true. This list might grow, but the prefix will be used. "csi.storage.k8s.io/pod.name": pod.Name "csi.storage.k8s.io/pod.namespace": pod.Namespace "csi.storage.k8s.io/pod.uid": string(pod.UID) "csi.storage.k8s.io/ephemeral": "true" if the volume is an ephemeral inline volume + defined by a CSIVolumeSource, otherwise "false" + +"csi.storage.k8s.io/ephemeral" is a new feature in Kubernetes 1.16. It is only required for drivers which support both the "Persistent" and "Ephemeral" VolumeLifecycleMode. Other drivers can leave pod info disabled and/or ignore this field. As Kubernetes 1.15 doesn't support this field, drivers can only support one mode when deployed on such a cluster and the deployment determines which mode that is, for example via a command line parameter of the driver. + +This field is immutable.² +boolean +ÿ +requiresRepublishé"ÚRequiresRepublish indicates the CSI driver wants `NodePublishVolume` being periodically called to reflect any possible change in the mounted volume. This field defaults to false. + +Note: After a successful initial NodePublishVolume call, subsequent calls to NodePublishVolume should only update the contents of the volume. New mount points will not be seen by a running container. + +This is a beta feature and only available when the CSIServiceAccountToken feature is enabled.² +boolean +€ +storageCapacityì"ÝIf set to true, storageCapacity indicates that the CSI volume driver wants pod scheduling to consider the storage capacity that the driver deployment will report by creating CSIStorageCapacity objects with capacity information. + +The check can be enabled immediately when deploying a driver. In that case, provisioning new volumes with late binding will pause until the driver deployment has published some suitable CSIStorageCapacity object. + +Alternatively, the driver can be deployed with the field unset or false and it can be flipped later when storage capacity information has been published. + +This field is immutable. + +This is a beta field and only available when the CSIStorageCapacity feature is enabled. The default is false.² +boolean +ê + tokenRequestsØ"éTokenRequests indicates the CSI driver needs pods' service account tokens it is mounting volume for to do necessary authentication. Kubelet will pass the tokens in VolumeContext in the CSI NodePublishVolume calls. The CSI driver should parse and validate the following VolumeContext: "csi.storage.k8s.io/serviceAccount.tokens": { + "": { + "token": , + "expirationTimestamp": , + }, + ... +} + +Note: Audience in each TokenRequest should be different and at most one token is empty string. To receive a new token after expiry, RequiresRepublish can be used to trigger NodePublishVolume periodically. + +This is a beta feature and only available when the CSIServiceAccountToken feature is enabled.² +arrayº9 +7 +5#/definitions/io.k8s.api.storage.v1beta1.TokenRequestú# +x-kubernetes-list-type atomic + +³ +volumeLifecycleModesš"ýVolumeLifecycleModes defines what kind of volumes this CSI volume driver supports. The default if the list is empty is "Persistent", which is the usage defined by the CSI specification and implemented in Kubernetes via the usual PV/PVC mechanism. The other mode is "Ephemeral". In this mode, volumes are defined inline inside the pod spec with CSIVolumeSource and their lifecycle is tied to the lifecycle of that pod. A driver has to be aware of this because it is only going to get a NodePublishVolume call for such a volume. For more information about implementing this mode, see https://kubernetes-csi.github.io/docs/ephemeral-local-volumes.html A driver can support one or more of these modes and more modes may be added in the future. + +This field is immutable.² +arrayº + ² +string +É +attachRequired¶"§attachRequired indicates this CSI volume driver requires an attach operation (because it implements the CSI ControllerPublishVolume() method), and that the Kubernetes attach detach controller should call the attach volume interface which checks the volumeattachment status and waits until the volume is attached before proceeding to mounting. The CSI external-attacher coordinates with CSI volume driver and updates the volumeattachment status when the attach operation is complete. If the CSIDriverRegistry feature gate is enabled and the value is specified to false, the attach operation will be skipped. Otherwise the attach operation will be called. + +This field is immutable.² +boolean +  ++io.k8s.api.storage.v1beta1.VolumeAttachmentð "—VolumeAttachment captures the intent to attach or detach the specified volume to/from the specified node. + +VolumeAttachment objects are non-namespaced.šspec² +objectÊÔ +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +string +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +string +Ð +metadataà +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"Standard object metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata +© +spec  +=#/definitions/io.k8s.api.storage.v1beta1.VolumeAttachmentSpec"_Specification of the desired attach/detach volume behavior. Populated by the Kubernetes system. +Õ +statusÊ +?#/definitions/io.k8s.api.storage.v1beta1.VolumeAttachmentStatus"†Status of the VolumeAttachment request. Populated by the entity completing the attach or detach operation, i.e. the external-attacher.úi +x-kubernetes-group-version-kindFD- group: storage.k8s.io + kind: VolumeAttachment + version: v1beta1 + +º +"io.k8s.api.rbac.v1.AggregationRule“"VAggregationRule describes how to locate ClusterRoles to aggregate into the ClusterRole² +objectʬ +© +clusterRoleSelectors"¼ClusterRoleSelectors holds a list of selectors which will be used to find ClusterRoles and create the rules. If any of the selectors match, then the ClusterRole's permissions will be added² +arrayºD +B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector +å +'io.k8s.api.storage.v1beta1.TokenRequest¹"#/definitions/io.k8s.api.core.v1.ScaleIOPersistentVolumeSource"XScaleIO represents a ScaleIO persistent volume attached and mounted on Kubernetes nodes. +ä + nodeAffinityÓ +3#/definitions/io.k8s.api.core.v1.VolumeNodeAffinity"›NodeAffinity defines constraints that limit what nodes this volume can be accessed from. This field influences the scheduling of pods that use this volume. + + storageosó +@#/definitions/io.k8s.api.core.v1.StorageOSPersistentVolumeSource"®StorageOS represents a StorageOS volume that is attached to the kubelet's host machine and mounted into the pod More info: https://examples.k8s.io/volumes/storageos/README.md +É + +volumeModeº"¬volumeMode defines if a volume is intended to be used with a formatted filesystem or to remain in raw block state. Value of Filesystem is implied when not included in spec.² +string +¶ + +flexVolume§ +;#/definitions/io.k8s.api.core.v1.FlexPersistentVolumeSource"hFlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin. +õ +hostPathè +5#/definitions/io.k8s.api.core.v1.HostPathVolumeSource"®HostPath represents a directory on the host. Provisioned by a developer or tester. This is useful for single-node development and testing only! On-host storage is not supported in any way and WILL NOT WORK in a multi-node cluster. More info: https://kubernetes.io/docs/concepts/storage/volumes#hostpath +î + mountOptionsÝ"ÀA list of mount options, e.g. ["ro", "soft"]. Not validated - mount will simply fail if one is invalid. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes/#mount-options² +arrayº + ² +string +± +awsElasticBlockStore˜ +A#/definitions/io.k8s.api.core.v1.AWSElasticBlockStoreVolumeSource"ÒAWSElasticBlockStore represents an AWS Disk resource that is attached to a kubelet's host machine and then exposed to the pod. More info: https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore +¼ +persistentVolumeReclaimPolicyš"ŒWhat happens to a persistent volume when released from its claim. Valid options are Retain (default for manually created PersistentVolumes), Delete (default for dynamically provisioned PersistentVolumes), and Recycle (deprecated). Recycle must be supported by the volume plugin underlying this PersistentVolume. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#reclaiming² +string +½ +gcePersistentDisk§ +>#/definitions/io.k8s.api.core.v1.GCEPersistentDiskVolumeSource"äGCEPersistentDisk represents a GCE Disk resource that is attached to a kubelet's host machine and then exposed to the pod. Provisioned by an admin. More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk +Á +nfs¹ +0#/definitions/io.k8s.api.core.v1.NFSVolumeSource"„NFS represents an NFS mount on the host. Provisioned by an admin. More info: https://kubernetes.io/docs/concepts/storage/volumes#nfs +í +flockerá +4#/definitions/io.k8s.api.core.v1.FlockerVolumeSource"¨Flocker represents a Flocker volume attached to a kubelet's host machine and exposed to the pod for its usage. This depends on the Flocker control service being running +| +locals +2#/definitions/io.k8s.api.core.v1.LocalVolumeSource"=Local represents directly-attached storage with node affinity +Ó +rbdË +:#/definitions/io.k8s.api.core.v1.RBDPersistentVolumeSource"ŒRBD represents a Rados Block Device mount on the host that shares a pod's lifetime. More info: https://examples.k8s.io/volumes/rbd/README.md +¨ +storageClassName“"…Name of StorageClass to which this persistent volume belongs. Empty value means that this volume does not belong to any StorageClass.² +string +¬ + vsphereVolumeš +?#/definitions/io.k8s.api.core.v1.VsphereVirtualDiskVolumeSource"WVsphereVolume represents a vSphere volume attached and mounted on kubelets host machine +¼ + accessModes¬"AccessModes contains all ways the volume can be mounted. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#access-modes² +arrayº + ² +string +ð +capacityã"“A description of the persistent volume's resources and capacity. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#capacityª? += +;#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity² +object +– +cephfs‹ +=#/definitions/io.k8s.api.core.v1.CephFSPersistentVolumeSource"JCephFS represents a Ceph FS mount on the host that shares a pod's lifetime +Î +photonPersistentDiskµ +A#/definitions/io.k8s.api.core.v1.PhotonPersistentDiskVolumeSource"pPhotonPersistentDisk represents a PhotonController persistent disk attached and mounted on kubelets host machine +Ú +cinderÏ +=#/definitions/io.k8s.api.core.v1.CinderPersistentVolumeSource"Cinder represents a cinder volume attached and mounted on kubelets host machine. More info: https://examples.k8s.io/mysql-cinder-pd/README.md +– +csiŽ +:#/definitions/io.k8s.api.core.v1.CSIPersistentVolumeSource"PCSI represents storage that is handled by an external CSI driver (Beta feature). +Õ +iscsiË +<#/definitions/io.k8s.api.core.v1.ISCSIPersistentVolumeSource"ŠISCSI represents an ISCSI Disk resource that is attached to a kubelet's host machine and then exposed to the pod. Provisioned by an admin. +© + azureFile› +@#/definitions/io.k8s.api.core.v1.AzureFilePersistentVolumeSource"WAzureFile represents an Azure File Service mount on the host and bind mount to the pod. +… + glusterfs÷ +@#/definitions/io.k8s.api.core.v1.GlusterfsPersistentVolumeSource"²Glusterfs represents a Glusterfs volume that is attached to a host and exposed to the pod. Provisioned by an admin. More info: https://examples.k8s.io/volumes/glusterfs/README.md +Ì +%io.k8s.api.networking.v1.IngressClass¢ "óIngressClass represents the class of the Ingress, referenced by the Ingress Spec. The `ingressclass.kubernetes.io/is-default-class` annotation can be used to indicate that an IngressClass should be considered default. When a single IngressClass resource has this annotation set to true, new Ingress resources without a class specified will be assigned this default class.² +objectÊ· +Ò +metadataÅ +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"ƒStandard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata +â +specÙ +7#/definitions/io.k8s.api.networking.v1.IngressClassSpec"Spec is the desired state of the IngressClass. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +string +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +stringúc +x-kubernetes-group-version-kind@>- group: networking.k8s.io + kind: IngressClass + version: v1 + +· +/io.k8s.api.policy.v1beta1.PodSecurityPolicyListƒ "=PodSecurityPolicyList is a list of PodSecurityPolicy objects.šitems² +objectÊÄ +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +string +Ë +metadata¾ +;#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +string +w +itemsn""items is a list of schema objects.² +arrayº= +; +9#/definitions/io.k8s.api.policy.v1beta1.PodSecurityPolicyúf +x-kubernetes-group-version-kindCA- kind: PodSecurityPolicyList + version: v1beta1 + group: policy + +½ +Wio.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1.CustomResourceDefinitionStatusá"RCustomResourceDefinitionStatus indicates the state of the CustomResourceDefinition² +objectÊþ +Ü +storedVersionsÉ"¬storedVersions lists all versions of CustomResources that were ever persisted. Tracking these versions allows a migration path for stored versions in etcd. The field is mutable so a migration controller can finish a migration to another version (ensuring no old objects are left in storage), and then remove the rest of the versions from this list. Versions may not be removed from `spec.versions` while they exist in this list.² +arrayº + ² +string +ô + acceptedNamesâ +d#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1.CustomResourceDefinitionNames"zacceptedNames are the names that are actually being used to serve discovery. They may be different than the names in spec. +¥ + +conditions–"Nconditions indicate state for particular aspects of a CustomResourceDefinition² +arrayºl +j +h#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1.CustomResourceDefinitionConditionú' +x-kubernetes-list-map-keys - type +ú +x-kubernetes-list-typemap + +è +=io.k8s.apimachinery.pkg.apis.meta.v1.GroupVersionForDiscovery¦"wGroupVersion contains the "group/version" and "version" string of a version. It is made a struct to keep extensibility.š groupVersionšversion² +objectÊ… +— +version‹"~version specifies the version in the form of "version". This is to save the clients the trouble of splitting the GroupVersion.² +string +i + groupVersionY"LgroupVersion specifies the API group and version in the form "group/version"² +string +Î +7io.k8s.api.authorization.v1.SelfSubjectAccessReviewSpec’"¦SelfSubjectAccessReviewSpec is a description of the access request. Exactly one of ResourceAuthorizationAttributes and NonResourceAuthorizationAttributes must be set² +objectÊÚ +ª +resourceAttributes“ +<#/definitions/io.k8s.api.authorization.v1.ResourceAttributes"SResourceAuthorizationAttributes describes information for a resource access request +ª +nonResourceAttributes +?#/definitions/io.k8s.api.authorization.v1.NonResourceAttributes"MNonResourceAttributes describes information for a non-resource access request +î +?io.k8s.api.certificates.v1beta1.CertificateSigningRequestStatusª² +objectÊ› +˜ + certificateˆbyte"OIf request was approved, the controller will place the issued certificate here.² +stringú# +x-kubernetes-list-type atomic + +ý + +conditionsî">Conditions applied to the request, such as approval or denial.² +arrayºT +R +P#/definitions/io.k8s.api.certificates.v1beta1.CertificateSigningRequestConditionú' +x-kubernetes-list-map-keys - type +ú +x-kubernetes-list-typemap + +« +/io.k8s.api.core.v1.CinderPersistentVolumeSource÷"ëRepresents a cinder volume resource in Openstack. A Cinder volume must exist before mounting to a container. The volume must also be in the same region as the kubelet. Cinder volumes support ownership management and SELinux relabeling.švolumeID² +objectÊï +ƒ +fsTypeø"êFilesystem type to mount. Must be a filesystem type supported by the host operating system. Examples: "ext4", "xfs", "ntfs". Implicitly inferred to be "ext4" if unspecified. More info: https://examples.k8s.io/mysql-cinder-pd/README.md² +string +Á +readOnly´"¥Optional: Defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts. More info: https://examples.k8s.io/mysql-cinder-pd/README.md² +boolean +™ + secretRef‹ +0#/definitions/io.k8s.api.core.v1.SecretReference"WOptional: points to a secret object containing parameters used to connect to OpenStack. +† +volumeIDz"mvolume id used to identify the volume in cinder. More info: https://examples.k8s.io/mysql-cinder-pd/README.md² +string +Î +'io.k8s.api.storage.v1beta1.StorageClass¢"ãStorageClass describes the parameters for a class of storage for which PersistentVolumes can be dynamically provisioned. + +StorageClasses are non-namespaced; the name of the storage class according to etcd is in ObjectMeta.Name.š provisioner² +objectÊ· +Š +allowedTopologiesô"«Restrict the node topologies where volumes can be dynamically provisioned. Each volume plugin defines its own supported topology specifications. An empty TopologySelectorTerm list means there is no topology restriction. This field is only honored by servers that enable the VolumeScheduling feature.² +arrayº9 +7 +5#/definitions/io.k8s.api.core.v1.TopologySelectorTerm +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +string +ì + mountOptionsÛ"¾Dynamically provisioned PersistentVolumes of this storage class are created with these mountOptions, e.g. ["ro", "soft"]. Not validated - mount of the PVs will simply fail if one is invalid.² +arrayº + ² +string +n +allowVolumeExpansionV"HAllowVolumeExpansion shows whether the storage class allow volume expand² +boolean +Ò +metadataÅ +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"ƒStandard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata +‘ + +parameters‚"eParameters holds the parameters for the provisioner that should create volumes of this storage class.ª + ² +string² +object +N + provisioner?"2Provisioner indicates the type of the provisioner.² +string +— + reclaimPolicy…"xDynamically provisioned PersistentVolumes of this storage class are created with this reclaimPolicy. Defaults to Delete.² +string +ø +volumeBindingModeâ"ÔVolumeBindingMode indicates how PersistentVolumeClaims should be provisioned and bound. When unset, VolumeBindingImmediate is used. This field is only honored by servers that enable the VolumeScheduling feature.² +string +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +stringúe +x-kubernetes-group-version-kindB@- group: storage.k8s.io + kind: StorageClass + version: v1beta1 + +Ê +#io.k8s.api.apps.v1.ReplicaSetStatus¢"?ReplicaSetStatus represents the current status of a ReplicaSet.šreplicas² +objectÊÇ + +observedGenerationiint64"TObservedGeneration reflects the generation of the most recently observed ReplicaSet.² +integer +X + readyReplicasGint32"2The number of ready replicas for this replica set.² +integer +Ø +replicasËint32"µReplicas is the most recently oberved number of replicas. More info: https://kubernetes.io/docs/concepts/workloads/controllers/replicationcontroller/#what-is-a-replicationcontroller² +integer +… +availableReplicaspint32"[The number of available replicas (ready for at least minReadySeconds) for this replica set.² +integer +ø + +conditionsé"NRepresents the latest available observations of a replica set's current state.² +arrayº8 +6 +4#/definitions/io.k8s.api.apps.v1.ReplicaSetConditionú' +x-kubernetes-patch-merge-keytype +ú' +x-kubernetes-patch-strategymerge + +‹ +fullyLabeledReplicassint32"^The number of pods that have labels matching the labels of the pod template of the replicaset.² +integer +» +1io.k8s.api.authentication.v1beta1.TokenReviewSpec…"ETokenReviewSpec is a description of the token authentication request.² +objectʯ +ó + audienceså"ÈAudiences is a list of the identifiers that the resource server presented with the token identifies as. Audience-aware token authenticators will verify that the token was intended for at least one of the audiences in this list. If no audiences are provided, the audience will default to the audience of the Kubernetes apiserver.² +arrayº + ² +string +7 +token."!Token is the opaque bearer token.² +string +Æ +2io.k8s.api.core.v1.AzureFilePersistentVolumeSource"WAzureFile represents an Azure File Service mount on the host and bind mount to the pod.š +secretNameš shareName² +objectÊŽ +‹ +secretNamespacex"kthe namespace of the secret that contains Azure Storage Account Name and Key default is the same as the Pod² +string +$ + shareName" +Share Name² +string +x +readOnlyl"^Defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts.² +boolean +^ + +secretNameP"Cthe name of secret that contains Azure Storage Account Name and Key² +string +£ +io.k8s.api.core.v1.PortStatusšportšprotocol² +objectÊà +Ù +errorÏ"ÁError is to record the problem with the service port The format of the error shall comply with the following rules: - built-in error values shall be specified in this file and those shall use + CamelCase names +- cloud provider specific error values must have names that comply with the + format foo.example.com/CamelCase.² +string +i +portaint32"LPort is the port number of the service port of which status is recorded here² +integer +– +protocol‰"|Protocol is the protocol of the service port of which status is recorded here The supported values are: "TCP", "UDP", "SCTP"² +string +à +4io.k8s.api.flowcontrol.v1beta1.NonResourcePolicyRuleŠ"·NonResourcePolicyRule is a predicate that matches non-resource requests according to their verb and the target non-resource URL. A NonResourcePolicyRule matches a request if and only if both (a) at least one member of verbs matches the request and (b) at least one member of nonResourceURLs matches the request.šverbsšnonResourceURLs² +objectʧ +Ñ +verbsÇ"‡`verbs` is a list of matching verbs and may not be empty. "*" matches all verbs. If it is present, it must be the only entry. Required.² +arrayº + ² +stringú +x-kubernetes-list-typeset + +Ð +nonResourceURLs¼"ü`nonResourceURLs` is a set of url prefixes that a user should have access to and may not be empty. For example: + - "/healthz" is legal + - "/hea*" is illegal + - "/hea" is legal but matches nothing + - "/hea/*" also matches nothing + - "/healthz/*" matches all per-component health checks. +"*" matches all non-resource urls. if it is present, it must be the only entry. Required.² +arrayº + ² +stringú +x-kubernetes-list-typeset + +ñ +io.k8s.api.node.v1.RuntimeClassÍ"ËRuntimeClass defines a class of container runtime supported in the cluster. The RuntimeClass is used to determine which container runtime is used to run all containers in a pod. RuntimeClasses are manually defined by a user or cluster provisioner, and referenced in the PodSpec. The Kubelet is responsible for resolving the RuntimeClassName reference before running the pod. For more details, see https://kubernetes.io/docs/concepts/containers/runtime-class/šhandler² +objectʆ +– + +scheduling‡ ++#/definitions/io.k8s.api.node.v1.Scheduling"×Scheduling holds the scheduling constraints to ensure that pods running with this RuntimeClass are scheduled to nodes that support it. If scheduling is nil, this RuntimeClass is assumed to be supported by all nodes. +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +string +Ð +handlerÄ"¶Handler specifies the underlying runtime and configuration that the CRI implementation will use to handle pods of this class. The possible values are specific to the node & CRI configuration. It is assumed that all handlers are available on every node, and handlers of the same name are equivalent on every node. For example, a handler called "runc" might specify that the runc OCI runtime (using native Linux containers) will be used to run the containers in a pod. The Handler must be lowercase, conform to the DNS Label (RFC 1123) requirements, and is immutable.² +string +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +string +µ +metadata¨ +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"gMore info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata +â +overheadÕ +)#/definitions/io.k8s.api.node.v1.Overhead"§Overhead represents the resource overhead associated with running a pod for a given RuntimeClass. For more details, see + https://kubernetes.io/docs/concepts/scheduling-eviction/pod-overhead/ +This field is in beta starting v1.18 and is only honored by servers that enable the PodOverhead feature.ú] +x-kubernetes-group-version-kind:8- group: node.k8s.io + kind: RuntimeClass + version: v1 + +´4 +3io.k8s.api.admissionregistration.v1.MutatingWebhookü3"^MutatingWebhook describes an admission webhook and the resources and operations it applies to.šnameš clientConfigš sideEffectsšadmissionReviewVersions² +objectÊÏ2 +™ + clientConfigˆ +E#/definitions/io.k8s.api.admissionregistration.v1.WebhookClientConfig"?ClientConfig defines how to communicate with the hook. Required +Ý +namespaceSelectorÇ +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector"‚ NamespaceSelector decides whether to run the webhook on an object based on whether the namespace for that object matches the selector. If the object itself is a namespace, the matching is performed on object.metadata.labels. If the object is another cluster scoped resource, it never skips the webhook. + +For example, to run the webhook on any objects whose namespace is not associated with "runlevel" of "0" or "1"; you will set the selector as follows: "namespaceSelector": { + "matchExpressions": [ + { + "key": "runlevel", + "operator": "NotIn", + "values": [ + "0", + "1" + ] + } + ] +} + +If instead you want to only run the webhook on any objects whose namespace is associated with the "environment" of "prod" or "staging"; you will set the selector as follows: "namespaceSelector": { + "matchExpressions": [ + { + "key": "environment", + "operator": "In", + "values": [ + "prod", + "staging" + ] + } + ] +} + +See https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/ for more examples of label selectors. + +Default to the empty LabelSelector, which matches everything. +é +objectSelectorÖ +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector"‘ObjectSelector decides whether to run the webhook based on if the object has matching labels. objectSelector is evaluated against both the oldObject and newObject that would be sent to the webhook, and is considered to match if either object matches the selector. A null object (oldObject in the case of create, or newObject in the case of delete) or an object that cannot have labels (like a DeploymentRollback or a PodProxyOptions object) is not considered to match. Use the object selector only if the webhook is opt-in, because end users may skip the admission webhook by setting the labels. Default to the empty LabelSelector, which matches everything. +é +rulesß"‡Rules describes what operations on what resources/subresources the webhook cares about. The webhook cares about an operation if it matches _any_ Rule. However, in order to prevent ValidatingAdmissionWebhooks and MutatingAdmissionWebhooks from putting the cluster in a state which cannot be recovered from without completely disabling the plugin, ValidatingAdmissionWebhooks and MutatingAdmissionWebhooks are never called on admission requests for ValidatingWebhookConfiguration and MutatingWebhookConfiguration objects.² +arrayºH +F +D#/definitions/io.k8s.api.admissionregistration.v1.RuleWithOperations +õ + sideEffectså"×SideEffects states whether this webhook has side effects. Acceptable values are: None, NoneOnDryRun (webhooks created via v1beta1 may also specify Some or Unknown). Webhooks with side effects MUST implement a reconciliation system, since a request may be rejected by a future step in the admission chain and the side effects therefore need to be undone. Requests with the dryRun attribute will be auto-rejected if they match a webhook with sideEffects == Unknown or Some.² +string +œ +timeoutSeconds‰int32"óTimeoutSeconds specifies the timeout for this webhook. After the timeout passes, the webhook call will be ignored or the API call will fail based on the failure policy. The timeout value must be between 1 and 30 seconds. Default to 10 seconds.² +integer +– +admissionReviewVersionsú"ÝAdmissionReviewVersions is an ordered list of preferred `AdmissionReview` versions the Webhook expects. API server will try to use first version in the list which it supports. If none of the versions specified in this list supported by API server, validation will fail for this object. If a persisted webhook configuration specifies allowed versions and does not include any versions known to the API Server, calls to the webhook will fail and be subject to the failure policy.² +arrayº + ² +string +¬ + failurePolicyš"ŒFailurePolicy defines how unrecognized errors from the admission endpoint are handled - allowed values are Ignore or Fail. Defaults to Fail.² +string +œ + matchPolicyŒ"þmatchPolicy defines how the "rules" list is used to match incoming requests. Allowed values are "Exact" or "Equivalent". + +- Exact: match a request only if it exactly matches a specified rule. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, but "rules" only included `apiGroups:["apps"], apiVersions:["v1"], resources: ["deployments"]`, a request to apps/v1beta1 or extensions/v1beta1 would not be sent to the webhook. + +- Equivalent: match a request if modifies a resource listed in rules, even via another API group or version. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, and "rules" only included `apiGroups:["apps"], apiVersions:["v1"], resources: ["deployments"]`, a request to apps/v1beta1 or extensions/v1beta1 would be converted to apps/v1 and sent to the webhook. + +Defaults to "Equivalent"² +string +ç +nameÞ"ÐThe name of the admission webhook. Name should be fully qualified, e.g., imagepolicy.kubernetes.io, where "imagepolicy" is the name of the webhook, and kubernetes.io is the name of the organization. Required.² +string + +reinvocationPolicyù"ëreinvocationPolicy indicates whether this webhook should be called multiple times as part of a single admission evaluation. Allowed values are "Never" and "IfNeeded". + +Never: the webhook will not be called more than once in a single admission evaluation. + +IfNeeded: the webhook will be called at least one additional time as part of the admission evaluation if the object being admitted is modified by other admission plugins after the initial webhook call. Webhooks that specify this option *must* be idempotent, able to process objects they previously admitted. Note: * the number of additional invocations is not guaranteed to be exactly one. * if additional invocations result in further modifications to the object, webhooks are not guaranteed to be invoked again. * webhooks that use this option may be reordered to minimize the number of additional invocations. * to validate an object after all mutations are guaranteed complete, use a validating admission webhook instead. + +Defaults to "Never".² +string +ª +9io.k8s.api.authorization.v1beta1.LocalSubjectAccessReviewì "çLocalSubjectAccessReview checks whether or not a user or group can perform an action in a given namespace. Having a namespace scoped resource makes it much easier to grant namespace scoped policy that includes permissions checking.šspec² +objectÊò +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +string +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +string +K +metadata? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta +ö +specí +F#/definitions/io.k8s.api.authorization.v1beta1.SubjectAccessReviewSpec"¢Spec holds information about the request being evaluated. spec.namespace must be equal to the namespace you made the request against. If empty, it is defaulted. +¬ +status¡ +H#/definitions/io.k8s.api.authorization.v1beta1.SubjectAccessReviewStatus"UStatus is filled in by the server and indicates whether the request is allowed or notúw +x-kubernetes-group-version-kindTR- group: authorization.k8s.io + kind: LocalSubjectAccessReview + version: v1beta1 + +· + io.k8s.api.coordination.v1.Lease’ "Lease defines a lease concept.² +objectÊ‚ +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +string +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +string +µ +metadata¨ +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"gMore info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata +Ê +specÁ +2#/definitions/io.k8s.api.coordination.v1.LeaseSpec"ŠSpecification of the Lease. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-statusú^ +x-kubernetes-group-version-kind;9- group: coordination.k8s.io + kind: Lease + version: v1 + +ë +)io.k8s.api.flowcontrol.v1beta1.FlowSchema½ "æFlowSchema defines the schema of a group of flows. Note that a flow is made up of a set of inbound API requests with similar attributes and is identified by a pair of strings: the name of the FlowSchema and a "flow distinguisher".² +objectÊÑ + +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +string +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +string +ä +metadata× +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"•`metadata` is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata +ü +specó +;#/definitions/io.k8s.api.flowcontrol.v1beta1.FlowSchemaSpec"³`spec` is the specification of the desired behavior of a FlowSchema. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status +ë +statusà +=#/definitions/io.k8s.api.flowcontrol.v1beta1.FlowSchemaStatus"ž`status` is the current status of a FlowSchema. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-statusúq +x-kubernetes-group-version-kindNL- group: flowcontrol.apiserver.k8s.io + kind: FlowSchema + version: v1beta1 + +‚ ++io.k8s.api.networking.v1.ServiceBackendPortÒ"8ServiceBackendPort is the service port being referenced.² +objectʉ +u +namem"`Name is the name of the port on the Service. This is a mutually exclusive setting with "Number".² +string + +number„int32"oNumber is the numerical port number (e.g. 80) on the Service. This is a mutually exclusive setting with "Name".² +integer +Ë +,io.k8s.api.networking.v1beta1.IngressBackendš"DIngressBackend describes all endpoints for a given service and port.² +objectÊÅ +ø +resourceë +:#/definitions/io.k8s.api.core.v1.TypedLocalObjectReference"¬Resource is an ObjectRef to another Kubernetes resource in the namespace of the Ingress object. If resource is specified, serviceName and servicePort must not be specified. +I + serviceName:"-Specifies the name of the referenced service.² +string +} + servicePortn +=#/definitions/io.k8s.apimachinery.pkg.util.intstr.IntOrString"-Specifies the port of the referenced service. +™ +1io.k8s.api.policy.v1beta1.PodDisruptionBudgetListã"@PodDisruptionBudgetList is a collection of PodDisruptionBudgets.šitems² +objectÊŸ +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +string +I +metadata= +;#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +string +U +itemsL² +arrayº? += +;#/definitions/io.k8s.api.policy.v1beta1.PodDisruptionBudgetúh +x-kubernetes-group-version-kindEC- group: policy + kind: PodDisruptionBudgetList + version: v1beta1 + +  +%io.k8s.api.core.v1.ComponentConditionö"/Information about the condition of a component.štypešstatus² +objectʦ +c +errorZ"MCondition error code for a component. For example, a health check error code.² +string +s +messageh"[Message about the condition for a component. For example, information about a health check.² +string +z +statusp"cStatus of the condition for a component. Valid values for "Healthy": "True", "False", or "Unknown".² +string +N +typeF"9Type of condition for a component. Valid value: "Healthy"² +string +ò +"io.k8s.api.core.v1.PodTemplateListË"*PodTemplateList is a list of PodTemplates.šitems² +objectÊ® +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +string +] +itemsT"List of pod templates² +arrayº0 +. +,#/definitions/io.k8s.api.core.v1.PodTemplate +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +string +Ï +metadata +;#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"‚Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kindsúW +x-kubernetes-group-version-kind42- group: "" + kind: PodTemplateList + version: v1 + + ++io.k8s.api.extensions.v1beta1.IngressStatusÑ"8IngressStatus describe the current state of the Ingress.² +objectʈ +… + loadBalanceru +3#/definitions/io.k8s.api.core.v1.LoadBalancerStatus">LoadBalancer contains the current status of the load-balancer. +½ +-io.k8s.api.networking.v1beta1.HTTPIngressPath‹ "oHTTPIngressPath associates a path with a backend. Incoming urls matching the path are forwarded to the backend.šbackend² +objectÊ +¤ +backend˜ +:#/definitions/io.k8s.api.networking.v1beta1.IngressBackend"ZBackend defines the referenced service endpoint to which the traffic will be forwarded to. +ž +path•"‡Path is matched against the path of an incoming request. Currently it can contain characters disallowed from the conventional "path" part of a URL as defined by RFC 3986. Paths must begin with a '/'. When unspecified, all paths from incoming requests are matched.² +string +¶ +pathType©"›PathType determines the interpretation of the Path matching. PathType can be one of the following values: * Exact: Matches the URL path exactly. * Prefix: Matches based on a URL path prefix split by '/'. Matching is + done on a path element by element basis. A path element refers is the + list of labels in the path split by the '/' separator. A request is a + match for path p if every p is an element-wise prefix of p of the + request path. Note that if the last element of the path is a substring + of the last element in request path, it is not a match (e.g. /foo/bar + matches /foo/bar/baz, but does not match /foo/barbaz). +* ImplementationSpecific: Interpretation of the Path matching is up to + the IngressClass. Implementations can treat this as a separate PathType + or treat it identically to Prefix or Exact path types. +Implementations are required to support all path types. Defaults to ImplementationSpecific.² +string +Ò ++io.k8s.api.scheduling.v1beta1.PriorityClass¢"áDEPRECATED - This group version of PriorityClass is deprecated by scheduling.k8s.io/v1/PriorityClass. PriorityClass defines mapping from a priority class name to the priority integer value. The value can be any valid integer.švalue² +objectÊ» +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +string +Ò +metadataÅ +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"ƒStandard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata +„ +preemptionPolicyï"áPreemptionPolicy is the Policy for preempting pods with lower priority. One of Never, PreemptLowerPriority. Defaults to PreemptLowerPriority if unset. This field is beta-level, gated by the NonPreemptingPriority feature-gate.² +string +¨ +valuežint32"ˆThe value of this priority class. This is the actual priority that pods receive when they have the name of this class in their pod spec.² +integer +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +string +‹ + description|"odescription is an arbitrary string that usually provides guidelines on when this priority class should be used.² +string +¦ + globalDefault”"…globalDefault specifies whether this PriorityClass should be considered as the default priority for pods that do not have any priority class. Only one PriorityClass can be marked as `globalDefault`. However, if more than one PriorityClasses exists with their `globalDefault` field set to true, the smallest value of such global default PriorityClasses will be used as the default priority.² +booleanúi +x-kubernetes-group-version-kindFD- group: scheduling.k8s.io + kind: PriorityClass + version: v1beta1 + +– +2io.k8s.apimachinery.pkg.apis.meta.v1.Preconditionsß"ZPreconditions must be fulfilled before an operation (update, delete, etc.) is carried out.² +objectÊu +D +resourceVersion1"$Specifies the target ResourceVersion² +string +- +uid&"Specifies the target UID.² +string +ò +)io.k8s.apimachinery.pkg.apis.meta.v1.TimeÄ date-time"«Time is a wrapper around time.Time which supports correct marshaling to YAML and JSON. Wrappers are provided for many of the factory methods that the time package offers.² +string +û +)io.k8s.api.autoscaling.v2beta1.MetricSpecÍ"|MetricSpec specifies how to scale based on a single metric (only `type` and one other matching field should be set at once).štype² +objectʹ +  +containerResourceŠ +J#/definitions/io.k8s.api.autoscaling.v2beta1.ContainerResourceMetricSource"»container resource refers to a resource metric (such as those specified in requests and limits) known to Kubernetes describing a single container in each pod of the current scale target (e.g. CPU or memory). Such metrics are built in to Kubernetes, and have special scaling options on top of those available to normal per-pod metrics using the "pods" source. This is an alpha feature and can be enabled by the HPAContainerMetrics feature flag. +ô +externalç +A#/definitions/io.k8s.api.autoscaling.v2beta1.ExternalMetricSource"¡external refers to a global metric that is not associated with any Kubernetes object. It allows autoscaling based on information coming from components running outside of cluster (for example length of queue in cloud messaging service, or QPS from loadbalancer running outside of cluster). + +object· +?#/definitions/io.k8s.api.autoscaling.v2beta1.ObjectMetricSource"tobject refers to a metric describing a single kubernetes object (for example, hits-per-second on an Ingress object). +• +podsŒ +=#/definitions/io.k8s.api.autoscaling.v2beta1.PodsMetricSource"Êpods refers to a metric describing each pod in the current scale target (for example, transactions-processed-per-second). The values will be averaged together before being compared to the target value. +™ +resourceŒ +A#/definitions/io.k8s.api.autoscaling.v2beta1.ResourceMetricSource"Æresource refers to a resource metric (such as those specified in requests and limits) known to Kubernetes describing each pod in the current scale target (e.g. CPU or memory). Such metrics are built in to Kubernetes, and have special scaling options on top of those available to normal per-pod metrics using the "pods" source. +£ +typeš"Œtype is the type of metric source. It should be one of "ContainerResource", "External", "Object", "Pods" or "Resource", each mapping to a matching field in the object. Note: "ContainerResource" type is available on when the feature-gate HPAContainerMetrics is enabled² +string + +:io.k8s.api.autoscaling.v2beta2.CrossVersionObjectReferenceÂ"bCrossVersionObjectReference contains enough information to let you identify the referred resource.škindšname² +objectÊÁ +6 + +apiVersion("API version of the referent² +string +˜ +kind"Kind of the referent; More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds"² +string +l +named"WName of the referent; More info: http://kubernetes.io/docs/user-guide/identifiers#names² +string +“ +"io.k8s.api.core.v1.NamespaceStatusì"GNamespaceStatus is information about the current status of a Namespace.² +objectÊ” +õ + +conditionsæ"LRepresents the latest available observations of a namespace's current state.² +arrayº7 +5 +3#/definitions/io.k8s.api.core.v1.NamespaceConditionú' +x-kubernetes-patch-merge-keytype +ú' +x-kubernetes-patch-strategymerge + +™ +phase"Phase is the current lifecycle phase of the namespace. More info: https://kubernetes.io/docs/tasks/administer-cluster/namespaces/² +string +õ +#io.k8s.api.core.v1.PodReadinessGateÍ":PodReadinessGate contains the reference to a pod conditionš conditionType² +objectÊs +q + conditionType`"SConditionType refers to a condition in the pod's condition list with matching type.² +string +Š +*io.k8s.api.storage.v1.VolumeAttachmentSpecÛ"HVolumeAttachmentSpec is the specification of a VolumeAttachment request.šattacheršsourcešnodeName² +objectÊã +— +attacherŠ"}Attacher indicates the name of the volume driver that MUST handle this request. This is the name returned by GetPluginName().² +string +H +nodeName<"/The node that the volume should be attached to.² +string +} +sources +:#/definitions/io.k8s.api.storage.v1.VolumeAttachmentSource"5Source represents the volume that should be attached. +™ +-io.k8s.apimachinery.pkg.api.resource.Quantityç"ÙQuantity is a fixed-point representation of a number. It provides convenient marshaling/unmarshaling in JSON and YAML, in addition to String() and AsInt64() accessors. + +The serialization format is: + + ::= + (Note that may be empty, from the "" case in .) + ::= 0 | 1 | ... | 9 ::= | ::= | . | . | . ::= "+" | "-" ::= | ::= | | ::= Ki | Mi | Gi | Ti | Pi | Ei + (International System of units; See: http://physics.nist.gov/cuu/Units/binary.html) + ::= m | "" | k | M | G | T | P | E + (Note that 1024 = 1Ki but 1000 = 1k; I didn't choose the capitalization.) + ::= "e" | "E" + +No matter which of the three exponent forms is used, no quantity may represent a number greater than 2^63-1 in magnitude, nor may it have more than 3 decimal places. Numbers larger or more precise will be capped or rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the future if we require larger or smaller quantities. + +When a Quantity is parsed from a string, it will remember the type of suffix it had, and will use the same type again when it is serialized. + +Before serializing, Quantity will be put in "canonical form". This means that Exponent/suffix will be adjusted up or down (with a corresponding increase or decrease in Mantissa) such that: + a. No precision is lost + b. No fractional digits will be emitted + c. The exponent (or suffix) is as large as possible. +The sign will be omitted unless the number is negative. + +Examples: + 1.5 will be serialized as "1500m" + 1.5Gi will be serialized as "1536Mi" + +Note that the quantity will NEVER be internally represented by a floating point number. That is the whole point of this exercise. + +Non-canonical values will still parse as long as they are well formed, but will be re-emitted in their canonical form. (So always use canonical form, or don't diff.) + +This format is intended to make it difficult to use these numbers without writing some sort of special handling code in the hopes that that will cause implementors to also use a fixed point implementation.² +string +¾ +/io.k8s.api.autoscaling.v2beta1.PodsMetricSourceŠ"åPodsMetricSource indicates how to scale on a metric describing each pod in the current scale target (for example, transactions-processed-per-second). The values will be averaged together before being compared to the target value.š +metricNameštargetAverageValue² +objectÊñ +K + +metricName="0metricName is the name of the metric in question² +string +Ü +selectorÏ +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector"Šselector is the string-encoded form of a standard kubernetes label selector for the given metric When set, it is passed as an additional parameter to the metrics server for more specific metrics scoping When unset, just the metricName will be used to gather metrics. + +targetAverageValue« +;#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity"ltargetAverageValue is the target value of the average of the metric across all relevant pods (as a quantity) +˜ +*io.k8s.api.core.v1.NodeSelectorRequirementé"wA node selector requirement is a selector that contains values, a key, and an operator that relates the key and values.škeyšoperator² +objectÊÐ +? +key8"+The label key that the selector applies to.² +string +Ž +operator"tRepresents a key's relationship to a set of values. Valid operators are In, NotIn, Exists, DoesNotExist. Gt, and Lt.² +string +û +valuesð"ÓAn array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. If the operator is Gt or Lt, the values array must have a single element, which will be interpreted as an integer. This array is replaced during a strategic merge patch.² +arrayº + ² +string +´ +(io.k8s.api.rbac.v1alpha1.ClusterRoleList‡ "¢ClusterRoleList is a collection of ClusterRoles. Deprecated in v1.17 in favor of rbac.authorization.k8s.io/v1 ClusterRoles, and will no longer be served in v1.22.šitems² +objectÊÔ +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +string +f +metadataZ +;#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"Standard object's metadata. +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +string +m +itemsd"Items is a list of ClusterRoles² +arrayº6 +4 +2#/definitions/io.k8s.api.rbac.v1alpha1.ClusterRoleút +x-kubernetes-group-version-kindQO- group: rbac.authorization.k8s.io + kind: ClusterRoleList + version: v1alpha1 + +˜ +*io.k8s.api.rbac.v1beta1.ClusterRoleBindingé "—ClusterRoleBinding references a ClusterRole, but not contain it. It can reference a ClusterRole in the global namespace, and adds who information via Subject. Deprecated in v1.17 in favor of rbac.authorization.k8s.io/v1 ClusterRoleBinding, and will no longer be served in v1.22.šroleRef² +objectʽ +Ç +roleRef» +-#/definitions/io.k8s.api.rbac.v1beta1.RoleRef"‰RoleRef can only reference a ClusterRole in the global namespace. If the RoleRef cannot be resolved, the Authorizer must return an error. +‰ +subjects}"=Subjects holds references to the objects the role applies to.² +arrayº1 +/ +-#/definitions/io.k8s.api.rbac.v1beta1.Subject +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +string +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +string +h +metadata\ +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"Standard object's metadata.úv +x-kubernetes-group-version-kindSQ- group: rbac.authorization.k8s.io + kind: ClusterRoleBinding + version: v1beta1 + +Ò +Cio.k8s.kube-aggregator.pkg.apis.apiregistration.v1.ServiceReferenceŠ";ServiceReference holds a reference to Service.legacy.k8s.io² +objectʾ +4 +name,"Name is the name of the service² +string +C + namespace6")Namespace is the namespace of the service² +string +À +port·int32"¡If specified, the port on the service that hosting webhook. Default to 443 for backward compatibility. `port` should be a valid port number (1-65535, inclusive).² +integer +í + io.k8s.api.batch.v1beta1.CronJobÈ ":CronJob represents the configuration of a single cron job.² +objectÊ£ + +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +string +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +string +Ò +metadataÅ +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"ƒStandard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata +û +specò +2#/definitions/io.k8s.api.batch.v1beta1.CronJobSpec"»Specification of the desired behavior of a cron job, including the schedule. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status +Ð +statusÅ +4#/definitions/io.k8s.api.batch.v1beta1.CronJobStatus"ŒCurrent status of a cron job. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-statusúW +x-kubernetes-group-version-kind42- group: batch + kind: CronJob + version: v1beta1 + +× +9io.k8s.api.certificates.v1beta1.CertificateSigningRequest™ "'Describes a certificate signing request² +objectÊç +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +string +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +string +K +metadata? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta +– +spec +K#/definitions/io.k8s.api.certificates.v1beta1.CertificateSigningRequestSpec">The certificate request itself and any additional information. + +statusw +M#/definitions/io.k8s.api.certificates.v1beta1.CertificateSigningRequestStatus"&Derived information about the request.úw +x-kubernetes-group-version-kindTR- kind: CertificateSigningRequest + version: v1beta1 + group: certificates.k8s.io + +¤ +,io.k8s.api.storage.v1alpha1.VolumeAttachmentó "—VolumeAttachment captures the intent to attach or detach the specified volume to/from the specified node. + +VolumeAttachment objects are non-namespaced.šspec² +objectÊÖ +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +string +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +string +Ð +metadataà +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"Standard object metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata +ª +spec¡ +>#/definitions/io.k8s.api.storage.v1alpha1.VolumeAttachmentSpec"_Specification of the desired attach/detach volume behavior. Populated by the Kubernetes system. +Ö +statusË +@#/definitions/io.k8s.api.storage.v1alpha1.VolumeAttachmentStatus"†Status of the VolumeAttachment request. Populated by the entity completing the attach or detach operation, i.e. the external-attacher.új +x-kubernetes-group-version-kindGE- group: storage.k8s.io + kind: VolumeAttachment + version: v1alpha1 + +’ +Xio.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1.CustomResourceDefinitionVersionµ"//...` if `served` is true.² +string +Þ +schemaÓ +_#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1.CustomResourceValidation"pschema describes the schema used for validation, pruning, and defaulting of this version of the custom resource. +h +served^"Pserved is a flag enabling/disabling this version from being served via REST APIs² +boolean +ª +storagež"storage indicates this version should be used when persisting custom resources to storage. There must be exactly one version with storage=true.² +boolean +Î + subresources½ +a#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1.CustomResourceSubresources"Xsubresources specify what subresources this version of the defined custom resource have. +± +additionalPrinterColumns”"›additionalPrinterColumns specifies additional columns returned in Table output. See https://kubernetes.io/docs/reference/using-api/api-concepts/#receiving-resources-as-tables for details. If no columns are specified, a single column displaying the age of the custom resource is used.² +arrayºi +g +e#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1.CustomResourceColumnDefinition +Ÿ +=io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelectorRequirementÝ"xA label selector requirement is a selector that contains values, a key, and an operator that relates the key and values.škeyšoperator² +objectÊà +š +key’"2key is the label key that the selector applies to.² +stringú& +x-kubernetes-patch-merge-keykey +ú' +x-kubernetes-patch-strategymerge + +Ž +operator"toperator represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist.² +string +’ +values‡"êvalues is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch.² +arrayº + ² +string +× +3io.k8s.api.autoscaling.v2beta2.ExternalMetricStatusŸ"nExternalMetricStatus indicates the current value of a global metric not associated with any Kubernetes object.šmetricšcurrent² +objectÊ +„ +currenty +>#/definitions/io.k8s.api.autoscaling.v2beta2.MetricValueStatus"7current contains the current value for the given metric +ƒ +metricy +=#/definitions/io.k8s.api.autoscaling.v2beta2.MetricIdentifier"8metric identifies the target metric by name and selector +Œ +%io.k8s.api.rbac.v1.ClusterRoleBindingâ +"ŸClusterRoleBinding references a ClusterRole, but not contain it. It can reference a ClusterRole in the global namespace, and adds who information via Subject.šroleRef² +objectʳ +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +string +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +string +h +metadata\ +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"Standard object's metadata. + +roleRef¶ +(#/definitions/io.k8s.api.rbac.v1.RoleRef"‰RoleRef can only reference a ClusterRole in the global namespace. If the RoleRef cannot be resolved, the Authorizer must return an error. +„ +subjectsx"=Subjects holds references to the objects the role applies to.² +arrayº, +* +(#/definitions/io.k8s.api.rbac.v1.Subjectúq +x-kubernetes-group-version-kindNL- group: rbac.authorization.k8s.io + kind: ClusterRoleBinding + version: v1 + +ú +Vio.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1beta1.CustomResourceValidationŸ"MCustomResourceValidation is a list of validation methods for CustomResources.² +objectÊÁ +¾ +openAPIV3Schemaª +[#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1beta1.JSONSchemaProps"KopenAPIV3Schema is the OpenAPI v3 schema to use for validation and pruning. +« +)io.k8s.api.apps.v1.ControllerRevisionListý"UControllerRevisionList is a resource containing a list of ControllerRevision objects.šitems² +objectʬ +w +itemsn"(Items is the list of ControllerRevisions² +arrayº7 +5 +3#/definitions/io.k8s.api.apps.v1.ControllerRevision +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +string +³ +metadata¦ +;#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"gMore info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +stringú` +x-kubernetes-group-version-kind=;- kind: ControllerRevisionList + version: v1 + group: apps + +Ž +6io.k8s.api.authorization.v1.SelfSubjectRulesReviewSpecT² +objectÊF +D + namespace7"*Namespace to evaluate rules for. Required.² +string +Á +-io.k8s.api.authorization.v1beta1.ResourceRule"¬ResourceRule is the list of actions the subject is allowed to perform on resources. The list ordering isn't significant, may contain duplicates, and possibly be incomplete.šverbs² +objectÊÉ +ƒ + apiGroupsõ"ØAPIGroups is the name of the APIGroup that contains the resources. If multiple API groups are specified, any action requested against one of the enumerated resources in any API group will be allowed. "*" means all.² +arrayº + ² +string +¹ + resourceNames§"ŠResourceNames is an optional white list of names that the rule applies to. An empty set means that everything is allowed. "*" means all.² +arrayº + ² +string +ä + resourcesÖ"¹Resources is a list of resources this rule applies to. "*" means all in the specified apiGroups. + "*/foo" represents the subresource 'foo' for all resources in the specified apiGroups.² +arrayº + ² +string + +verbs“"wVerb is a list of kubernetes resource API verbs, like: get, list, watch, create, update, delete, proxy. "*" means all.² +arrayº + ² +string +Å +-io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta“"£ListMeta describes metadata that synthetic resources must have, including lists and various status objects. A resource may have only one of {ObjectMeta, ListMeta}.² +objectÊÞ +ê +selfLinkÝ"ÏselfLink is a URL representing this object. Populated by the system. Read-only. + +DEPRECATED Kubernetes will stop propagating this field in 1.20 release and the field is planned to be removed in 1.21 release.² +string +ä +continue×"Écontinue may be set if the user set a limit on the number of items returned, and indicates that the server has more data available. The value is opaque and may be used to issue another request to the endpoint that served this list to retrieve the next set of available objects. Continuing a consistent list may not be possible if the server configuration has changed or more than a few minutes have passed. The resourceVersion field returned when using this continue value will be identical to the value in the first response, unless you have received this token from an error message.² +string +ß +remainingItemCountÈint64"²remainingItemCount is the number of subsequent items in the list which are not included in this list response. If the list request contained label or field selectors, then the number of remaining items is unknown and the field will be left unset and omitted during serialization. If the list is complete (either because it is not chunking or because this is the last chunk), then there are no more remaining items and this field will be left unset and omitted during serialization. Servers older than v1.15 do not set this field. The intended use of the remainingItemCount is *estimating* the size of a collection. Clients should not rely on the remainingItemCount to be set or to be exact.² +integer +¥ +resourceVersion‘"ƒString that identifies the server's internal version of this object that can be used by clients to determine when objects have changed. Value must be treated as opaque by clients and passed unmodified back to the server. Populated by the system. Read-only. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency² +string +ƒ +!io.k8s.api.core.v1.EndpointSubsetÝ"³EndpointSubset is a group of addresses with a common set of ports. The expanded set of endpoints is the Cartesian product of Addresses x Ports. For example, given: + { + Addresses: [{"ip": "10.10.1.1"}, {"ip": "10.10.2.2"}], + Ports: [{"name": "a", "port": 8675}, {"name": "b", "port": 309}] + } +The resulting set of endpoints can be viewed as: + a: [ 10.10.1.1:8675, 10.10.2.2:8675 ], + b: [ 10.10.1.1:309, 10.10.2.2:309 ]² +objectʘ +ë + addressesÝ"™IP addresses which offer the related ports that are marked as ready. These endpoints should be considered safe for load balancers and clients to utilize.² +arrayº4 +2 +0#/definitions/io.k8s.api.core.v1.EndpointAddress +© +notReadyAddresses“"ÏIP addresses which offer the related ports but are not currently marked as ready because they have not yet finished starting, have recently failed a readiness check, or have recently failed a liveness check.² +arrayº4 +2 +0#/definitions/io.k8s.api.core.v1.EndpointAddress +| +portss"3Port numbers available on the related IP addresses.² +arrayº1 +/ +-#/definitions/io.k8s.api.core.v1.EndpointPort +å +,io.k8s.api.flowcontrol.v1beta1.LimitResponse´"PLimitResponse defines how to handle requests that can not be executed right now.štype² +objectÊé +à +queuing· +A#/definitions/io.k8s.api.flowcontrol.v1beta1.QueuingConfiguration"r`queuing` holds the configuration parameters for queuing. This field may be non-empty only if `type` is `"Queue"`. +  +type—"‰`type` is "Queue" or "Reject". "Queue" means that requests that can not be executed upon arrival are held in a queue until they can be executed or a queuing limit is reached. "Reject" means that requests that can not be executed upon arrival are rejected. Required.² +stringú` +x-kubernetes-unionsIG- discriminator: type + fields-to-discriminateBy: + queuing: Queuing + +¼ +(io.k8s.api.authorization.v1.ResourceRule"¬ResourceRule is the list of actions the subject is allowed to perform on resources. The list ordering isn't significant, may contain duplicates, and possibly be incomplete.šverbs² +objectÊÉ +ƒ + apiGroupsõ"ØAPIGroups is the name of the APIGroup that contains the resources. If multiple API groups are specified, any action requested against one of the enumerated resources in any API group will be allowed. "*" means all.² +arrayº + ² +string +¹ + resourceNames§"ŠResourceNames is an optional white list of names that the rule applies to. An empty set means that everything is allowed. "*" means all.² +arrayº + ² +string +ä + resourcesÖ"¹Resources is a list of resources this rule applies to. "*" means all in the specified apiGroups. + "*/foo" represents the subresource 'foo' for all resources in the specified apiGroups.² +arrayº + ² +string + +verbs“"wVerb is a list of kubernetes resource API verbs, like: get, list, watch, create, update, delete, proxy. "*" means all.² +arrayº + ² +string +à +?io.k8s.api.autoscaling.v2beta2.HorizontalPodAutoscalerConditionÿ"eHorizontalPodAutoscalerCondition describes the state of a HorizontalPodAutoscaler at a certain point.štypešstatus² +objectÊù +« +lastTransitionTime” +7#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"YlastTransitionTime is the last time the condition transitioned from one status to another +g +message\"Omessage is a human-readable explanation containing details about the transition² +string +P +reasonF"9reason is the reason for the condition's last transition.² +string +S +statusI"<- group: storage.k8s.io + kind: CSIDriverList + version: v1 + +…" +Zio.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1beta1.CustomResourceDefinitionSpec¦!"PCustomResourceDefinitionSpec describes how a user wants their resource to appearšgroupšnamesšscope² +objectÊ­ +Ñ +preserveUnknownFields·"¨preserveUnknownFields indicates that object fields which are not specified in the OpenAPI schema should be preserved when persisting to storage. apiVersion, kind, metadata and known fields inside metadata are always preserved. If false, schemas must be defined for all versions. Defaults to true in v1beta for backwards compatibility. Deprecated: will be required to be false in v1. Preservation of unknown fields can be specified in the validation schema using the `x-kubernetes-preserve-unknown-fields: true` extension. See https://kubernetes.io/docs/tasks/access-kubernetes-api/custom-resources/custom-resource-definitions/#pruning-versus-preserving-unknown-fields for details.² +boolean + +versions"‘versions is the list of all API versions of the defined custom resource. Optional if `version` is specified. The name of the first item in the `versions` list must match the `version` field if `version` and `versions` are both specified. Version names are used to compute the order in which served versions are listed in API discovery. If the version string is "kube-like", it will sort above non "kube-like" version strings, which are ordered lexicographically. "Kube-like" versions start with a "v", then are followed by a number (the major version), then optionally the string "alpha" or "beta" and another number (the minor version). These are sorted first by GA > beta > alpha (where GA is a version with no suffix such as beta or alpha), and then by comparing major version, then minor version. An example sorted list of versions: v10, v2, v1, v11beta2, v10beta3, v3beta1, v12alpha1, v11alpha2, foo1, foo10.² +arrayºo +m +k#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1beta1.CustomResourceDefinitionVersion +Å +additionalPrinterColumns¨"ªadditionalPrinterColumns specifies additional columns returned in Table output. See https://kubernetes.io/docs/reference/using-api/api-concepts/#receiving-resources-as-tables for details. If present, this field configures columns for all versions. Top-level and per-version columns are mutually exclusive. If no top-level or per-version columns are specified, a single column displaying the age of the custom resource is used.² +arrayºn +l +j#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1beta1.CustomResourceColumnDefinition +ª + +conversion› +d#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1beta1.CustomResourceConversion"3conversion defines conversion settings for the CRD. +¹ +names¯ +i#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1beta1.CustomResourceDefinitionNames"Bnames specify the resource and kind names for the custom resource. +Î + +validation¿ +d#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1beta1.CustomResourceValidation"Övalidation describes the schema used for validation and pruning of the custom resource. If present, this validation schema is used to validate all versions. Top-level and per-version schemas are mutually exclusive. +Ï +versionÃ"µversion is the API version of the defined custom resource. The custom resources are served under `/apis///...`. Must match the name of the first item in the `versions` list if `version` and `versions` are both specified. Optional if `versions` is specified. Deprecated: use `versions` instead.² +string +å +groupÛ"Ígroup is the API group of the defined custom resource. The custom resources are served under `/apis//...`. Must match the name of the CustomResourceDefinition (in the form `.`).² +string +´ +scopeª"œscope indicates whether the defined custom resource is cluster- or namespace-scoped. Allowed values are `Cluster` and `Namespaced`. Default is `Namespaced`.² +string +à + subresources² +f#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1beta1.CustomResourceSubresources"Çsubresources specify what subresources the defined custom resource has. If present, this field configures subresources for all versions. Top-level and per-version subresources are mutually exclusive. +à +io.k8s.api.discovery.v1.ForZoneŸ"LForZone provides information about which zones should consume this endpoint.šname² +objectÊ< +: +name2"%name represents the name of the zone.² +string +† + io.k8s.api.networking.v1.IPBlocká"ãIPBlock describes a particular CIDR (Ex. "192.168.1.1/24","2001:db9::/64") that is allowed to the pods matched by a NetworkPolicySpec's podSelector. The except entry describes CIDRs that should not be included within this rule.šcidr² +objectÊå +v +cidrn"aCIDR is a string representing the IP Block Valid examples are "192.168.1.1/24" or "2001:db9::/64"² +string +ê +exceptß"ÂExcept is a slice of CIDRs that should not be included within an IP Block Valid examples are "192.168.1.1/24" or "2001:db9::/64" Except values will be rejected if they are outside the CIDR range² +arrayº + ² +string +‡ +3io.k8s.apimachinery.pkg.apis.meta.v1.OwnerReferenceÏ"ÇOwnerReference contains enough information to let you identify an owning object. An owning object must be in the same namespace as the dependent, or be cluster-scoped, so there is no namespace field.š +apiVersionškindšnamešuid² +objectÊÕ +7 + +apiVersion)"API version of the referent.² +string +Î +blockOwnerDeletion·"¨If true, AND if the owner has the "foregroundDeletion" finalizer, then the owner cannot be deleted from the key-value store until this reference is removed. Defaults to false. To set this field, a user needs "delete" permission of the owner, otherwise 422 (Unprocessable Entity) will be returned.² +boolean +V + +controllerH":If true, this reference points to the managing controller.² +boolean +— +kindŽ"€Kind of the referent. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +string +l +named"WName of the referent. More info: http://kubernetes.io/docs/user-guide/identifiers#names² +string +i +uidb"UUID of the referent. More info: http://kubernetes.io/docs/user-guide/identifiers#uids² +string +û +io.k8s.api.core.v1.HandlerÜ"6Handler defines a specific action that should be taken² +objectÊ• +k +httpGet` +.#/definitions/io.k8s.api.core.v1.HTTPGetAction".HTTPGet specifies the http request to perform. +‘ + tcpSocketƒ +0#/definitions/io.k8s.api.core.v1.TCPSocketAction"OTCPSocket specifies an action involving a TCP port. TCP hooks not yet supported +‘ +execˆ ++#/definitions/io.k8s.api.core.v1.ExecAction"YOne and only one of the following should be specified. Exec specifies the action to take. +Ö + io.k8s.api.core.v1.ResourceQuota± "FResourceQuota sets aggregate quota restrictions enforced per namespace² +objectÊ‚ + +ç +statusÜ +4#/definitions/io.k8s.api.core.v1.ResourceQuotaStatus"£Status defines the actual enforced quota and its current usage. https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +string +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +string +Ò +metadataÅ +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"ƒStandard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata +à +specº +2#/definitions/io.k8s.api.core.v1.ResourceQuotaSpec"ƒSpec defines the desired quota. https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-statusúU +x-kubernetes-group-version-kind20- group: "" + kind: ResourceQuota + version: v1 + +¨ +3io.k8s.api.core.v1.TopologySelectorLabelRequirementð"~A topology selector requirement is a selector that matches given label. This is an alpha feature and may change in the future.škeyšvalues² +objectÊÒ +? +key8"+The label key that the selector applies to.² +string +Ž +valuesƒ"gAn array of string values. One value must match the label to be selected. Each entry in Values is ORed.² +arrayº + ² +string +Ý +)io.k8s.api.networking.v1beta1.IngressRule¯ "ìIngressRule represents the rules mapping the paths under a specified host to the related backend services. Incoming requests are first evaluated for a host match, then routed to the backend associated with the matching IngressRuleValue.² +objectʱ +â + +hostÙ +"Ë +Host is the fully qualified domain name of a network host, as defined by RFC 3986. Note the following deviations from the "host" part of the URI as defined in RFC 3986: 1. IPs are not allowed. Currently an IngressRuleValue can only apply to + the IP in the Spec of the parent Ingress. +2. The `:` delimiter is not respected because ports are not allowed. + Currently the port of an Ingress is implicitly :80 for http and + :443 for https. +Both these may change in the future. Incoming requests are matched against the host before the IngressRuleValue. If the host is unspecified, the Ingress routes all traffic based on the specified IngressRuleValue. + +Host can be "precise" which is a domain name without the terminating dot of a network host (e.g. "foo.bar.com") or "wildcard", which is a domain name prefixed with a single wildcard label (e.g. "*.foo.com"). The wildcard character '*' must appear by itself as the first DNS label and matches only a single label. You cannot have a wildcard label by itself (e.g. Host == "*"). Requests will be matched against the Host field in the following way: 1. If Host is precise, the request matches this rule if the http host header is equal to Host. 2. If Host is a wildcard, then the request matches this rule if the http host header is to equal to the suffix (removing the first label) of the wildcard rule.² +string +J +httpB +@#/definitions/io.k8s.api.networking.v1beta1.HTTPIngressRuleValue +÷ +-io.k8s.api.policy.v1beta1.PodDisruptionBudgetÅ "hPodDisruptionBudget is an object to define the max disruption that can be caused to a collection of pods² +objectÊå +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +string +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +string +K +metadata? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta + +spec„ +?#/definitions/io.k8s.api.policy.v1beta1.PodDisruptionBudgetSpec"ASpecification of the desired behavior of the PodDisruptionBudget. +ˆ +status~ +A#/definitions/io.k8s.api.policy.v1beta1.PodDisruptionBudgetStatus"9Most recently observed status of the PodDisruptionBudget.úd +x-kubernetes-group-version-kindA?- group: policy + kind: PodDisruptionBudget + version: v1beta1 + +¹ +1io.k8s.api.flowcontrol.v1beta1.ResourcePolicyRuleƒ" ResourcePolicyRule is a predicate that matches some resource requests, testing the request's verb and the target resource. A ResourcePolicyRule matches a resource request if and only if: (a) at least one member of verbs matches the request, (b) at least one member of apiGroups matches the request, (c) at least one member of resources matches the request, and (d) least one member of namespaces matches the request.šverbsš apiGroupsš resources² +objectʱ +Þ + apiGroupsÐ"`apiGroups` is a list of matching API groups and may not be empty. "*" matches all API groups and, if present, must be the only entry. Required.² +arrayº + ² +stringú +x-kubernetes-list-typeset + +´ + clusterScope£"”`clusterScope` indicates whether to match requests that do not specify a namespace (which happens either because the resource is not namespaced or the request targets all namespaces). If this field is omitted or false then the `namespaces` field must contain a non-empty list.² +boolean +÷ + +namespacesè"¨`namespaces` is a list of target namespaces that restricts matches. A request that specifies a target namespace matches only if either (a) this list contains that target namespace or (b) this list contains "*". Note that "*" matches any specified namespace but does not match a request that _does not specify_ a namespace (see the `clusterScope` field for that). This list may be empty, but only if `clusterScope` is true.² +arrayº + ² +stringú +x-kubernetes-list-typeset + +Í + resources¿"ÿ`resources` is a list of matching resources (i.e., lowercase and plural) with, if desired, subresource. For example, [ "services", "nodes/status" ]. This list may not be empty. "*" matches all resources and, if present, must be the only entry. Required.² +arrayº + ² +stringú +x-kubernetes-list-typeset + +Ì +verbsÂ"‚`verbs` is a list of matching verbs and may not be empty. "*" matches all verbs and, if present, must be the only entry. Required.² +arrayº + ² +stringú +x-kubernetes-list-typeset + +“ +%io.k8s.api.apps.v1.DeploymentStrategyé"HDeploymentStrategy describes how to replace existing pods with new ones.² +objectÊ +£ + rollingUpdate‘ +8#/definitions/io.k8s.api.apps.v1.RollingUpdateDeployment"URolling update config params. Present only if DeploymentStrategyType = RollingUpdate. +h +type`"SType of deployment. Can be "Recreate" or "RollingUpdate". Default is RollingUpdate.² +string +¸ +,io.k8s.api.apps.v1.StatefulSetUpdateStrategy‡"ÏStatefulSetUpdateStrategy indicates the strategy that the StatefulSet controller will use to perform updates. It includes any additional parameters necessary to perform the update for the indicated strategy.² +objectʦ +¹ + rollingUpdate§ +A#/definitions/io.k8s.api.apps.v1.RollingUpdateStatefulSetStrategy"bRollingUpdate is used to communicate parameters when Type is RollingUpdateStatefulSetStrategyType. +h +type`"SType indicates the type of the StatefulSetUpdateStrategy. Default is RollingUpdate.² +string +ö +4io.k8s.api.authorization.v1.SubjectRulesReviewStatus½ "çSubjectRulesReviewStatus contains the result of a rules check. This check can be incomplete depending on the set of authorizers the server is configured with and any errors experienced during evaluation. Because authorization rules are additive, if a rule appears in a list it's safe to assume the subject has that permission, even if that list is incomplete.š resourceRulesšnonResourceRulesš +incomplete² +objectÊ” +Œ +evaluationErrorø"êEvaluationError can appear in combination with Rules. It indicates an error occurred during rule evaluation, such as an authorizer that doesn't support rule evaluation, and that ResourceRules and/or NonResourceRules may be incomplete.² +string +Ý + +incompleteÎ"¿Incomplete is true when the rules returned by this call are incomplete. This is most commonly encountered when an authorizer, such as an external authorizer, doesn't support rules evaluation.² +boolean +– +nonResourceRules"´NonResourceRules is the list of actions the subject is allowed to perform on non-resources. The list ordering isn't significant, may contain duplicates, and possibly be incomplete.² +arrayº= +; +9#/definitions/io.k8s.api.authorization.v1.NonResourceRule +‰ + resourceRules÷"­ResourceRules is the list of actions the subject is allowed to perform on resources. The list ordering isn't significant, may contain duplicates, and possibly be incomplete.² +arrayº: +8 +6#/definitions/io.k8s.api.authorization.v1.ResourceRule +à +!io.k8s.api.batch.v1.CronJobStatus"9CronJobStatus represents the current state of a cron job.² +objectÊÓ +¡ +active–"-A list of pointers to currently running jobs.² +arrayº4 +2 +0#/definitions/io.k8s.api.core.v1.ObjectReferenceú# +x-kubernetes-list-type atomic + +– +lastScheduleTime +7#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"FInformation when was the last time the job was successfully scheduled. +“ +lastSuccessfulTime} +7#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"BInformation when was the last time the job successfully completed. +Ç +0io.k8s.api.core.v1.GCEPersistentDiskVolumeSource’ "ÁRepresents a Persistent Disk resource in Google Compute Engine. + +A GCE PD must exist before mounting to a container. The disk must also be in the same GCE project and zone as the kubelet. A GCE PD can only be mounted as read/write once or read-only many times. GCE PDs support ownership management and SELinux relabeling.špdName² +objectʶ +¾ +readOnly±"¢ReadOnly here will force the ReadOnly setting in VolumeMounts. Defaults to false. More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk² +boolean +Á +fsType¶"¨Filesystem type of the volume that you want to mount. Tip: Ensure that the filesystem type is supported by the host operating system. Examples: "ext4", "xfs", "ntfs". Implicitly inferred to be "ext4" if unspecified. More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk² +string +ù + partitionëint32"ÕThe partition in the volume that you want to mount. If omitted, the default is to mount by volume name. Examples: For volume /dev/sda1, you specify the partition as "1". Similarly, the volume partition for /dev/sda is "0" (or you can leave the property empty). More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk² +integer +² +pdName§"™Unique name of the PD resource in GCE. Used to identify the disk in GCE. More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk² +string +Ä +"io.k8s.api.core.v1.ObjectReference "]ObjectReference contains enough information to let you inspect or modify the referred object.² +objectʯ +Ô + fieldPathÆ"¸If referring to a piece of an object instead of an entire object, this string should contain a valid JSON/Go field access statement, such as desiredState.manifest.containers[2]. For example, if the object reference is to a container within a pod, this would take on a value like: "spec.containers{name}" (where "name" refers to the name of the container that triggered the event) or if no container name is specified "spec.containers[2]" (container with index 2 in this pod). This syntax is chosen only to have some well-defined way of referencing a part of an object.² +string +— +kindŽ"€Kind of the referent. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +string +„ +name|"oName of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names² +string +Ž + namespace€"sNamespace of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/² +string +æ +resourceVersionÒ"ÄSpecific resourceVersion to which this reference is made, if any. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency² +string + +uidz"mUID of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#uids² +string +7 + +apiVersion)"API version of the referent.² +string +¦ +!io.k8s.api.core.v1.ServiceAccount€"ºServiceAccount binds together: * a name, understood by users, and perhaps by peripheral systems, for an identity * a principal that can be authenticated and authorized * a set of secrets² +objectÊÛ +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +string +× +automountServiceAccountToken¶"§AutomountServiceAccountToken indicates whether pods running as this service account should have an API token automatically mounted. Can be overridden at the pod level.² +boolean +å +imagePullSecretsÐ"‡ImagePullSecrets is a list of references to secrets in the same namespace to use for pulling any images in pods that reference this ServiceAccount. ImagePullSecrets are distinct from Secrets because Secrets can be mounted in the pod, but ImagePullSecrets are only accessed by the kubelet. More info: https://kubernetes.io/docs/concepts/containers/images/#specifying-imagepullsecrets-on-a-pod² +arrayº9 +7 +5#/definitions/io.k8s.api.core.v1.LocalObjectReference +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +string +Ò +metadataÅ +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"ƒStandard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata +Ä +secrets¸" Secrets is the list of secrets allowed to be used by pods running using this ServiceAccount. More info: https://kubernetes.io/docs/concepts/configuration/secret² +arrayº4 +2 +0#/definitions/io.k8s.api.core.v1.ObjectReferenceú' +x-kubernetes-patch-strategymerge +ú' +x-kubernetes-patch-merge-keyname +úV +x-kubernetes-group-version-kind31- group: "" + kind: ServiceAccount + version: v1 + +ã +io.k8s.api.storage.v1.CSIDriver¿ "ÎCSIDriver captures information about a Container Storage Interface (CSI) volume driver deployed on the cluster. Kubernetes attach detach controller uses this object to determine whether attach is required. Kubelet uses this object to determine whether pod information needs to be passed on mount. CSIDriver objects are non-namespaced.šspec² +objectÊø +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +string +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +string +™ +metadataŒ +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"ÊStandard object metadata. metadata.Name indicates the name of the CSI driver that this object refers to; it MUST be the same name returned by the CSI GetPluginName() call for that driver. The driver name must be 63 characters or less, beginning and ending with an alphanumeric character ([a-z0-9A-Z]) with dashes (-), dots (.), and alphanumerics between. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata +] +specU +1#/definitions/io.k8s.api.storage.v1.CSIDriverSpec" Specification of the CSI Driver.ú] +x-kubernetes-group-version-kind:8- group: storage.k8s.io + kind: CSIDriver + version: v1 + +Å +\io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1beta1.CustomResourceSubresourceScaleä "^CustomResourceSubresourceScale defines how to serve the scale subresource for CustomResources.šspecReplicasPathšstatusReplicasPath² +objectÊÍ +á +labelSelectorPathË"½labelSelectorPath defines the JSON path inside of a custom resource that corresponds to Scale `status.selector`. Only JSON paths without the array notation are allowed. Must be a JSON Path under `.status` or `.spec`. Must be set to work with HorizontalPodAutoscaler. The field pointed by this JSON path must be a string field (not a complex selector struct) which contains a serialized label selector in string form. More info: https://kubernetes.io/docs/tasks/access-kubernetes-api/custom-resources/custom-resource-definitions#scale-subresource If there is no value under the given path in the custom resource, the `status.selector` value in the `/scale` subresource will default to the empty string.² +string +ã +specReplicasPathÎ"ÀspecReplicasPath defines the JSON path inside of a custom resource that corresponds to Scale `spec.replicas`. Only JSON paths without the array notation are allowed. Must be a JSON Path under `.spec`. If there is no value under the given path in the custom resource, the `/scale` subresource will return an error on GET.² +string +€ +statusReplicasPathé"ÛstatusReplicasPath defines the JSON path inside of a custom resource that corresponds to Scale `status.replicas`. Only JSON paths without the array notation are allowed. Must be a JSON Path under `.status`. If there is no value under the given path in the custom resource, the `status.replicas` value in the `/scale` subresource will default to 0.² +string +ž +io.k8s.api.apps.v1.StatefulSetû +"ŸStatefulSet represents a set of pods with consistent identities. Identities are defined as: + - Network: A single stable DNS and hostname. + - Storage: As many VolumeClaims as requested. +The StatefulSet guarantees that a given network identity will always map to the same storage identity.² +objectÊò +t +specl +0#/definitions/io.k8s.api.apps.v1.StatefulSetSpec"8Spec defines the desired identities of pods in this set. +¯ +status¤ +2#/definitions/io.k8s.api.apps.v1.StatefulSetStatus"nStatus is the current status of Pods in this StatefulSet. This data may be out of date by some window of time. +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +string +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +string +K +metadata? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMetaúU +x-kubernetes-group-version-kind20- group: apps + kind: StatefulSet + version: v1 + +é +/io.k8s.api.authentication.v1.TokenRequestStatusµ"4TokenRequestStatus is the result of a token request.štokenšexpirationTimestamp² +objectÊÒ +– +expirationTimestamp +7#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"DExpirationTimestamp is the time of expiration of the returned token. +7 +token."!Token is the opaque bearer token.² +string +É +.io.k8s.api.authentication.v1.TokenReviewStatus–"DTokenReviewStatus is the result of the token authentication request.² +objectÊÁ +w +usero +3#/definitions/io.k8s.api.authentication.v1.UserInfo"8User is the UserInfo associated with the provided token. +’ + audiences„"çAudiences are audience identifiers chosen by the authenticator that are compatible with both the TokenReview and token. An identifier is any identifier in the intersection of the TokenReviewSpec audiences and the token's audiences. A client of the TokenReview API that sets the spec.audiences field should validate that a compatible audience identifier is returned in the status.audiences field to ensure that the TokenReview server is audience aware. If a TokenReview returns an empty status.audience field where status.authenticated is "true", the token is valid against the audience of the Kubernetes API server.² +arrayº + ² +string +g + authenticatedV"HAuthenticated indicates that the token was associated with a known user.² +boolean +H +error?"2Error indicates that the token couldn't be checked² +string +Ù +Bio.k8s.api.flowcontrol.v1beta1.PriorityLevelConfigurationCondition’"LPriorityLevelConfigurationCondition defines the condition of priority level.² +objectʵ +® +lastTransitionTime— +7#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"\`lastTransitionTime` is the last time the condition transitioned from one status to another. +g +message\"O`message` is a human-readable message indicating details about last transition.² +string +l +reasonb"U`reason` is a unique, one-word, CamelCase reason for the condition's last transition.² +string +f +status\"O`status` is the status of the condition. Can be True, False, Unknown. Required.² +string +C +type;".`type` is the type of the condition. Required.² +string +À +(io.k8s.api.rbac.v1alpha1.AggregationRule“"VAggregationRule describes how to locate ClusterRoles to aggregate into the ClusterRole² +objectʬ +© +clusterRoleSelectors"¼ClusterRoleSelectors holds a list of selectors which will be used to find ClusterRoles and create the rules. If any of the selectors match, then the ClusterRole's permissions will be added² +arrayºD +B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector +Õ +Qio.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1.CustomResourceConversionÿ"MCustomResourceConversion describes how to convert different versions of a CR.šstrategy² +objectÊ– +Å +strategy¸"ªstrategy specifies how custom resources are converted between versions. Allowed values are: - `None`: The converter only change the apiVersion and would not touch any other field in the custom resource. - `Webhook`: API Server will call to an external webhook to do the conversion. Additional information + is needed for this option. This requires spec.preserveUnknownFields to be false, and spec.conversion.webhook to be set.² +string +Ë +webhook¿ +X#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1.WebhookConversion"cwebhook describes how to call the conversion webhook. Required when `strategy` is set to `Webhook`. +« +Vio.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1beta1.CustomResourceDefinitionÐ "…CustomResourceDefinition represents a resource that should be exposed on the API server. Its name MUST be in the format <.spec.name>.<.spec.group>. Deprecated in v1.16, planned for removal in v1.22. Use apiextensions.k8s.io/v1 CustomResourceDefinition instead.šspec² +objectʸ +® +spec¥ +h#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1beta1.CustomResourceDefinitionSpec"9spec describes how the user wants the resources to appear +º +status¯ +j#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1beta1.CustomResourceDefinitionStatus"Astatus indicates the actual state of the CustomResourceDefinition +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +string +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +string +K +metadata? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMetaúw +x-kubernetes-group-version-kindTR- group: apiextensions.k8s.io + kind: CustomResourceDefinition + version: v1beta1 + +Ø +3io.k8s.api.autoscaling.v2beta1.ResourceMetricStatus  "ÝResourceMetricStatus indicates the current value of a resource metric known to Kubernetes, as specified in requests and limits, describing each pod in the current scale target (e.g. CPU or memory). Such metrics are built in to Kubernetes, and have special scaling options on top of those available to normal per-pod metrics using the "pods" source.šnamešcurrentAverageValue² +objectÊ” +ó +currentAverageValueÛ +;#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity"›currentAverageValue is the current value of the average of the resource metric across all relevant pods, as a raw value (instead of as a percentage of the request), similar to the "pods" metric source type. It will always be set, regardless of the corresponding metric specification. +B +name:"-name is the name of the resource in question.² +string +× +currentAverageUtilization¹int32"£currentAverageUtilization is the current value of the average of the resource metric across all relevant pods, represented as a percentage of the requested value of the resource for the pods. It will only be present if `targetAverageValue` was set in the corresponding metric specification.² +integer +Ù +io.k8s.api.batch.v1.CronJob¹ ":CronJob represents the configuration of a single cron job.² +objectÊ™ + +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +string +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +string +Ò +metadataÅ +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"ƒStandard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata +ö +specí +-#/definitions/io.k8s.api.batch.v1.CronJobSpec"»Specification of the desired behavior of a cron job, including the schedule. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status +Ë +statusÀ +/#/definitions/io.k8s.api.batch.v1.CronJobStatus"ŒCurrent status of a cron job. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-statusúR +x-kubernetes-group-version-kind/-- group: batch + kind: CronJob + version: v1 + +„ + +/io.k8s.api.core.v1.CephFSPersistentVolumeSourceÐ "Represents a Ceph Filesystem mount that lasts the lifetime of a pod Cephfs volumes do not support ownership management or SELinux relabeling.šmonitors² +objectʦ +Î +readOnlyÁ"²Optional: Defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts. More info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it² +boolean +¾ + +secretFile¯"¡Optional: SecretFile is the path to key ring for User, default is /etc/ceph/user.secret More info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it² +string +æ + secretRefØ +0#/definitions/io.k8s.api.core.v1.SecretReference"£Optional: SecretRef is reference to the authentication secret for User, default is empty. More info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it +˜ +user"Optional: User is the rados user name, default is admin More info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it² +string +¦ +monitors™"}Required: Monitors is a collection of Ceph monitors More info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it² +arrayº + ² +string +e +path]"POptional: Used as the mounted root, rather than the full Ceph tree, default is /² +string +¶ +io.k8s.api.core.v1.Pod› "wPod is a collection of containers that can run on a host. This resource is created by clients and scheduled onto hosts.² +objectÊÅ + +Ö +specÍ +(#/definitions/io.k8s.api.core.v1.PodSpec" Specification of the desired behavior of the pod. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status +— +statusŒ +*#/definitions/io.k8s.api.core.v1.PodStatus"ÝMost recently observed status of the pod. This data may not be up to date. Populated by the system. Read-only. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +string +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +string +Ò +metadataÅ +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"ƒStandard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadataúK +x-kubernetes-group-version-kind(&- group: "" + kind: Pod + version: v1 + +à +(io.k8s.api.core.v1.StorageOSVolumeSource³ "2Represents a StorageOS persistent volume resource.² +objectÊð +À +fsTypeµ"§Filesystem type to mount. Must be a filesystem type supported by the host operating system. Ex. "ext4", "xfs", "ntfs". Implicitly inferred to be "ext4" if unspecified.² +string +x +readOnlyl"^Defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts.² +boolean +Ï + secretRefÁ +5#/definitions/io.k8s.api.core.v1.LocalObjectReference"‡SecretRef specifies the secret to use for obtaining the StorageOS API credentials. If not specified, default values will be attempted. +‹ + +volumeName}"pVolumeName is the human-readable name of the StorageOS volume. Volume names are only unique within a namespace.² +string +Ð +volumeNamespace¼"®VolumeNamespace specifies the scope of the volume within StorageOS. If no namespace is specified then the Pod's namespace will be used. This allows the Kubernetes name scoping to be mirrored within StorageOS for tighter integration. Set VolumeName to any name to override the default behaviour. Set to "default" if you are not using namespaces within StorageOS. Namespaces that do not pre-exist within StorageOS will be created.² +string +“ +*io.k8s.apimachinery.pkg.apis.meta.v1.Patche"XPatch is provided to give a concrete name and type to the Kubernetes PATCH request body.² +object + +8io.k8s.api.apiserverinternal.v1alpha1.StorageVersionListÓ"A list of StorageVersions.šitems² +objectʦ +I +metadata= +;#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +string +\ +itemsS² +arrayºF +D +B#/definitions/io.k8s.api.apiserverinternal.v1alpha1.StorageVersion +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +stringúw +x-kubernetes-group-version-kindTR- group: internal.apiserver.k8s.io + kind: StorageVersionList + version: v1alpha1 + +Ÿ +io.k8s.api.core.v1.NodeSelectorû"¼A node selector represents the union of the results of one or more label queries over a set of nodes; that is, it represents the OR of the selectors represented by the node selector terms.šnodeSelectorTerms² +objectÊ™ +– +nodeSelectorTerms€" +<#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Conditionú' +x-kubernetes-list-map-keys - type +ú +x-kubernetes-list-typemap +ú' +x-kubernetes-patch-merge-keytype +ú' +x-kubernetes-patch-strategymerge + +E +currentHealthy3int32"current number of healthy pods² +integer +M +desiredHealthy;int32"&minimum desired number of healthy pods² +integer + + disruptedPodsû"¯DisruptedPods contains information about pods whose eviction was processed by the API server eviction subresource handler but has not yet been observed by the PodDisruptionBudget controller. A pod will be in this map from the time when the API server processed the eviction request to the time when the pod is seen by PDB controller as having been marked for deletion (or after a timeout). The key in the map is the name of the pod and the value is the time when the API server processed the eviction request. If the deletion didn't occur and a pod is still there it will be removed from the list automatically by PodDisruptionBudget controller after some time. If everything goes smooth this map should be empty for the most of the time. Large number of entries in the map may indicate problems with pod deletions.ª; +9 +7#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time² +object +Û +"io.k8s.api.policy.v1beta1.Eviction´ "ÒEviction evicts a pod from its node subject to certain policies and safety constraints. This is a subresource of Pod. A request to cause such an eviction is created by POSTing to .../pods//evictions.² +objectÊô +r + deleteOptionsa +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions"DeleteOptions may be provided +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +string +€ +metadatat +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"3ObjectMeta describes the pod that is being evicted. +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +stringúY +x-kubernetes-group-version-kind64- group: policy + kind: Eviction + version: v1beta1 + +ˆ +%io.k8s.api.apps.v1.ControllerRevisionÞ"±ControllerRevision implements an immutable snapshot of state data. Clients are responsible for serializing and deserializing the objects that contain their internal state. Once a ControllerRevision has been successfully created, it can not be updated. The API Server will fail validation of all requests that attempt to mutate the Data field. ControllerRevisions may, however, be deleted. Note that, due to its use by both the DaemonSet and StatefulSet controllers for update and rollback, this object is beta. However, it may be subject to name and representation changes in future releases, and clients should not depend on its stability. It is primarily for internal use by controllers.šrevision² +objectʱ +Ò +metadataÅ +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"ƒStandard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata +b +revisionVint64"ARevision indicates the revision of the state represented by Data.² +integer +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +string +y +dataq +:#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension"3Data is the serialized representation of the state. +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +stringú\ +x-kubernetes-group-version-kind97- group: apps + kind: ControllerRevision + version: v1 + +› +io.k8s.api.core.v1.ExecActionù"1ExecAction describes a "run in container" action.² +objectÊ· +´ +command¨"‹Command is the command line to execute inside the container, the working directory for the command is root ('/') in the container's filesystem. The command is simply exec'd, it is not run inside a shell, so traditional shell instructions ('|', etc) won't work. To use a shell, you need to explicitly call out to that shell. Exit status of 0 is treated as live/healthy and non-zero is unhealthy.² +arrayº + ² +string +Ò +4io.k8s.api.core.v1.ScopedResourceSelectorRequirement™"A scoped-resource selector requirement is a selector that contains values, a scope name, and an operator that relates the scope name and values.š scopeNamešoperator² +objectÊà +M + scopeName@"3The name of the scope that the selector applies to.² +string +ˆ +valuesý"àAn array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch.² +arrayº + ² +string +ƒ +operatorw"jRepresents a scope's relationship to a set of values. Valid operators are In, NotIn, Exists, DoesNotExist.² +string +´ +)io.k8s.api.discovery.v1beta1.EndpointPort† "7EndpointPort represents a Port used by an EndpointSlice² +objectʾ +Ù + appProtocolÉ"»The application protocol for this port. This field follows standard Kubernetes label syntax. Un-prefixed names are reserved for IANA standard service names (as per RFC-6335 and http://www.iana.org/assignments/service-names). Non-standard protocols should use prefixed names such as mycompany.com/my-custom-protocol.² +string +Å +name¼"®The name of this port. All ports in an EndpointSlice must have a unique name. If the EndpointSlice is dervied from a Kubernetes service, this corresponds to the Service.ports[].name. Name must either be an empty string or pass DNS_LABEL validation: * must be no more than 63 characters long. * must consist of lower case alphanumeric characters or '-'. * must start and end with an alphanumeric character. Default is empty string.² +string +³ +portªint32"”The port number of the endpoint. If this is not specified, ports are not restricted and must be interpreted in the context of the specific consumer.² +integer +b +protocolV"IThe IP protocol for this port. Must be UDP, TCP, or SCTP. Default is TCP.² +string +Ï +!io.k8s.api.storage.v1.CSINodeSpec©"\CSINodeSpec holds information about the specification of all CSI drivers installed on a nodešdrivers² +objectʲ +¯ +drivers£"Šdrivers is a list of information of all CSI Drivers existing on a node. If all drivers in the list are uninstalled, this can become empty.² +arrayº5 +3 +1#/definitions/io.k8s.api.storage.v1.CSINodeDriverú' +x-kubernetes-patch-strategymerge +ú' +x-kubernetes-patch-merge-keyname + +Ù +.io.k8s.apimachinery.pkg.apis.meta.v1.Condition¦ "TCondition contains details for one aspect of the current state of this API Resource.štypešstatusšlastTransitionTimešreasonšmessage² +objectʉ + +Ø +reasonÍ"¿reason contains a programmatic identifier indicating the reason for the condition's last transition. Producers of specific condition types may define expected values and meanings for this field, and whether the values are considered a guaranteed API. The value should be a CamelCase string. This field may not be empty.² +string +L +statusB"5status of the condition, one of True, False, Unknown.² +string +T +typeL"?type of condition in CamelCase or in foo.example.com/CamelCase.² +string +¸ +lastTransitionTime¡ +7#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"ålastTransitionTime is the last time the condition transitioned from one status to another. This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. + +messagev"imessage is a human readable message indicating details about the transition. This may be an empty string.² +string +È +observedGeneration±int64"›observedGeneration represents the .metadata.generation that the condition was set based upon. For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date with respect to the current state of the instance.² +integer +— +)io.k8s.api.apps.v1.RollingUpdateDaemonSeté"BSpec to control the desired behavior of daemon set rolling update.² +objectÊ– +× + +maxSurgeÊ + +=#/definitions/io.k8s.apimachinery.pkg.util.intstr.IntOrString"ˆ +The maximum number of nodes with an existing available DaemonSet pod that can have an updated DaemonSet pod during during an update. Value can be an absolute number (ex: 5) or a percentage of desired pods (ex: 10%). This can not be 0 if MaxUnavailable is 0. Absolute number is calculated from percentage by rounding up to a minimum of 1. Default value is 0. Example: when this is set to 30%, at most 30% of the total number of nodes that should be running the daemon pod (i.e. status.desiredNumberScheduled) can have their a new pod created before the old pod is marked as deleted. The update starts by launching new pods on 30% of nodes. Once an updated pod is available (Ready for at least minReadySeconds) the old DaemonSet pod on that node is marked deleted. If the old pod becomes unavailable for any reason (Ready transitions to false, is evicted, or is drained) an updated pod is immediatedly created on that node without considering surge limits. Allowing surge implies the possibility that the resources consumed by the daemonset on any given node can double if the readiness check fails, and so resource intensive daemonsets should take into account that they may cause evictions during disruption. This is an alpha field and requires enabling DaemonSetUpdateSurge feature gate. +¹ +maxUnavailable¦ +=#/definitions/io.k8s.apimachinery.pkg.util.intstr.IntOrString"äThe maximum number of DaemonSet pods that can be unavailable during the update. Value can be an absolute number (ex: 5) or a percentage of total number of DaemonSet pods at the start of the update (ex: 10%). Absolute number is calculated from percentage by rounding down to a minimum of one. This cannot be 0 if MaxSurge is 0 Default value is 1. Example: when this is set to 30%, at most 30% of the total number of nodes that should be running the daemon pod (i.e. status.desiredNumberScheduled) can have their pods stopped for an update at any given time. The update starts by stopping at most 30% of those DaemonSet pods and then brings up new DaemonSet pods in their place. Once the new pods are available, it then proceeds onto other DaemonSet pods, thus ensuring that at least 70% of original number of DaemonSet pods are available at all times during the update. +¯ +*io.k8s.api.apps.v1.RollingUpdateDeployment€ "7Spec to control the desired behavior of rolling update.² +objectʸ +å +maxSurgeØ +=#/definitions/io.k8s.apimachinery.pkg.util.intstr.IntOrString"–The maximum number of pods that can be scheduled above the desired number of pods. Value can be an absolute number (ex: 5) or a percentage of desired pods (ex: 10%). This can not be 0 if MaxUnavailable is 0. Absolute number is calculated from percentage by rounding up. Defaults to 25%. Example: when this is set to 30%, the new ReplicaSet can be scaled up immediately when the rolling update starts, such that the total number of old and new pods do not exceed 130% of desired pods. Once old pods have been killed, new ReplicaSet can be scaled up further, ensuring that total number of pods running at any time during the update is at most 130% of desired pods. +Í +maxUnavailableº +=#/definitions/io.k8s.apimachinery.pkg.util.intstr.IntOrString"øThe maximum number of pods that can be unavailable during the update. Value can be an absolute number (ex: 5) or a percentage of desired pods (ex: 10%). Absolute number is calculated from percentage by rounding down. This can not be 0 if MaxSurge is 0. Defaults to 25%. Example: when this is set to 30%, the old ReplicaSet can be scaled down to 70% of desired pods immediately when the rolling update starts. Once new pods are ready, old ReplicaSet can be scaled down further, followed by scaling up the new ReplicaSet, ensuring that the total number of pods available at all times during the update is at least 70% of desired pods. +å +'io.k8s.api.core.v1.ConfigMapKeySelector¹"Selects a key from a ConfigMap.škey² +objectʃ +& +key"The key to select.² +string +„ +name|"oName of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names² +string +R +optionalF"8Specify whether the ConfigMap or its key must be defined² +boolean +Æ +#io.k8s.api.core.v1.SecretProjectionž"Adapts a secret into a projected volume. + +The contents of the target Secret's Data field will be presented in a projected volume as files using the keys in the Data field as the file names. Note that this is identical to a secret volume source without the default mode.² +objectÊÿ +¤ +itemsš"ÜIf unspecified, each key-value pair in the Data field of the referenced Secret will be projected into the volume as a file whose name is the key and content is the value. If specified, the listed keys will be projected into the specified paths, and unlisted keys will not be present. If a key is specified which is not present in the Secret, the volume setup will error unless it is marked optional. Paths must be relative and may not contain the '..' path or start with '..'.² +arrayº. +, +*#/definitions/io.k8s.api.core.v1.KeyToPath +„ +name|"oName of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names² +string +O +optionalC"5Specify whether the Secret or its key must be defined² +boolean +ç +io.k8s.api.rbac.v1beta1.RoleRefÃ"?RoleRef contains information that points to the role being usedšapiGroupškindšname² +objectÊÚ +P +apiGroupD"7APIGroup is the group for the resource being referenced² +string +B +kind:"-Kind is the type of resource being referenced² +string +B +name:"-Name is the name of resource being referenced² +string +× +Hio.k8s.kube-aggregator.pkg.apis.apiregistration.v1beta1.ServiceReferenceŠ";ServiceReference holds a reference to Service.legacy.k8s.io² +objectʾ +C + namespace6")Namespace is the namespace of the service² +string +À +port·int32"¡If specified, the port on the service that hosting webhook. Default to 443 for backward compatibility. `port` should be a valid port number (1-65535, inclusive).² +integer +4 +name,"Name is the name of the service² +string +Ÿ +:io.k8s.api.apiserverinternal.v1alpha1.StorageVersionStatusà"‡API server instances report the versions they can decode and the version they encode objects to when persisting objects in the backend.² +objectÊÇ +ñ +storageVersionsÝ".The reported versions per API server instance.² +arrayºL +J +H#/definitions/io.k8s.api.apiserverinternal.v1alpha1.ServerStorageVersionú. +x-kubernetes-list-map-keys- apiServerID +ú +x-kubernetes-list-typemap + +Ó +commonEncodingVersion¹"«If all API server instances agree on the same encoding storage version, then this field is set to that version. Otherwise this field is left empty. API servers should finish updating its storageVersionStatus entry before serving write operations, so that this field will be in sync with the reality.² +string +ú + +conditionsë"@The latest available observations of the storageVersion's state.² +arrayºO +M +K#/definitions/io.k8s.api.apiserverinternal.v1alpha1.StorageVersionConditionú' +x-kubernetes-list-map-keys - type +ú +x-kubernetes-list-typemap + +¬ +1io.k8s.api.networking.v1.NetworkPolicyIngressRuleö"´NetworkPolicyIngressRule describes a particular set of traffic that is allowed to the pods matched by a NetworkPolicySpec's podSelector. The traffic must match both ports and from.² +objectÊ° +Ù +fromÐ"„List of sources which should be able to access the pods selected for this rule. Items in this list are combined using a logical OR operation. If this field is empty or missing, this rule matches all sources (traffic not restricted by source). If this field is present and contains at least one item, this rule allows traffic only if the traffic matches at least one item in the from list.² +arrayº< +: +8#/definitions/io.k8s.api.networking.v1.NetworkPolicyPeer +Ñ +portsÇ"ûList of ports which should be made accessible on the pods selected for this rule. Each item in this list is combined using a logical OR. If this field is empty or missing, this rule matches all ports (traffic not restricted by port). If this field is present and contains at least one item, then this rule allows traffic only if the traffic matches at least one port in the list.² +arrayº< +: +8#/definitions/io.k8s.api.networking.v1.NetworkPolicyPort +× +Bio.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1beta1.JSON"JSON represents any valid JSON value. These types are supported: bool, int64, float64, string, []interface{}, map[string]interface{} and nil. +Ó +$io.k8s.api.networking.v1.IngressRuleª "ìIngressRule represents the rules mapping the paths under a specified host to the related backend services. Incoming requests are first evaluated for a host match, then routed to the backend associated with the matching IngressRuleValue.² +objectʬ +â + +hostÙ +"Ë +Host is the fully qualified domain name of a network host, as defined by RFC 3986. Note the following deviations from the "host" part of the URI as defined in RFC 3986: 1. IPs are not allowed. Currently an IngressRuleValue can only apply to + the IP in the Spec of the parent Ingress. +2. The `:` delimiter is not respected because ports are not allowed. + Currently the port of an Ingress is implicitly :80 for http and + :443 for https. +Both these may change in the future. Incoming requests are matched against the host before the IngressRuleValue. If the host is unspecified, the Ingress routes all traffic based on the specified IngressRuleValue. + +Host can be "precise" which is a domain name without the terminating dot of a network host (e.g. "foo.bar.com") or "wildcard", which is a domain name prefixed with a single wildcard label (e.g. "*.foo.com"). The wildcard character '*' must appear by itself as the first DNS label and matches only a single label. You cannot have a wildcard label by itself (e.g. Host == "*"). Requests will be matched against the Host field in the following way: 1. If Host is precise, the request matches this rule if the http host header is equal to Host. 2. If Host is a wildcard, then the request matches this rule if the http host header is to equal to the suffix (removing the first label) of the wildcard rule.² +string +E +http= +;#/definitions/io.k8s.api.networking.v1.HTTPIngressRuleValue +Û +9io.k8s.api.admissionregistration.v1beta1.ServiceReference";ServiceReference holds a reference to Service.legacy.k8s.ioš namespacešname² +objectʾ +@ +name8"+`name` is the name of the service. Required² +string +O + namespaceB"5`namespace` is the namespace of the service. Required² +string +f +path^"Q`path` is an optional URL path which will be sent in any request to this service.² +string +À +port·int32"¡If specified, the port on the service that hosting webhook. Default to 443 for backward compatibility. `port` should be a valid port number (1-65535, inclusive).² +integer +ç +%io.k8s.api.authentication.v1.UserInfo½"ZUserInfo holds the information about the user needed to implement the user.Info interface.² +objectÊÒ +n +extrae"9Any additional information provided by the authenticator.ª +² +arrayº + ² +string² +object +Q +groupsG"+The names of groups this user is a part of.² +arrayº + ² +string +® +uid¦"˜A unique value that identifies this user across time. If this user is deleted and another user by the same name is added, they will have different UIDs.² +string +\ +usernameP"CThe name that uniquely identifies this user among all active users.² +string +º + +/...`. Must match the name of the CustomResourceDefinition (in the form `.`).² +string +´ +namesª +d#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1.CustomResourceDefinitionNames"Bnames specify the resource and kind names for the custom resource. +© +preserveUnknownFields"€preserveUnknownFields indicates that object fields which are not specified in the OpenAPI schema should be preserved when persisting to storage. apiVersion, kind, metadata and known fields inside metadata are always preserved. This field is deprecated in favor of setting `x-preserve-unknown-fields` to true in `spec.versions[*].schema.openAPIV3Schema`. See https://kubernetes.io/docs/tasks/access-kubernetes-api/custom-resources/custom-resource-definitions/#pruning-versus-preserving-unknown-fields for details.² +boolean +› +scope‘"ƒscope indicates whether the defined custom resource is cluster- or namespace-scoped. Allowed values are `Cluster` and `Namespaced`.² +string +ó +versionsæ"ìversions is the list of all API versions of the defined custom resource. Version names are used to compute the order in which served versions are listed in API discovery. If the version string is "kube-like", it will sort above non "kube-like" version strings, which are ordered lexicographically. "Kube-like" versions start with a "v", then are followed by a number (the major version), then optionally the string "alpha" or "beta" and another number (the minor version). These are sorted first by GA > beta > alpha (where GA is a version with no suffix such as beta or alpha), and then by comparing major version, then minor version. An example sorted list of versions: v10, v2, v1, v11beta2, v10beta3, v3beta1, v12alpha1, v11alpha2, foo1, foo10.² +arrayºj +h +f#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1.CustomResourceDefinitionVersion +£ +:io.k8s.api.autoscaling.v2beta2.HorizontalPodAutoscalerListä"KHorizontalPodAutoscalerList is a list of horizontal pod autoscaler objects.šitems² +objectÊŒ +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +string +˜ +itemsŽ"7items is the list of horizontal pod autoscaler objects.² +arrayºH +F +D#/definitions/io.k8s.api.autoscaling.v2beta2.HorizontalPodAutoscaler +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +string +r +metadataf +;#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"'metadata is the standard list metadata.úq +x-kubernetes-group-version-kindNL- group: autoscaling + kind: HorizontalPodAutoscalerList + version: v2beta2 + +² + +&io.k8s.api.core.v1.EphemeralContainers‡ +"QA list of ephemeral containers used with the Pod ephemeralcontainers subresource.šephemeralContainers² +objectʱ +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +string +ä +ephemeralContainersÌ"±A list of ephemeral containers associated with this pod. New ephemeral containers may be appended to this list, but existing ephemeral containers may not be removed or modified.² +arrayº7 +5 +3#/definitions/io.k8s.api.core.v1.EphemeralContainerú' +x-kubernetes-patch-merge-keyname +ú' +x-kubernetes-patch-strategymerge + +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +string +K +metadata? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMetaú[ +x-kubernetes-group-version-kind86- group: "" + kind: EphemeralContainers + version: v1 + +° +.io.k8s.api.core.v1.ReplicationControllerStatusý"VReplicationControllerStatus represents the current status of a replication controller.šreplicas² +objectÊ‹ +c + readyReplicasRint32"=The number of ready replicas for this replication controller.² +integer +× +replicasÊint32"´Replicas is the most recently oberved number of replicas. More info: https://kubernetes.io/docs/concepts/workloads/controllers/replicationcontroller#what-is-a-replicationcontroller² +integer + +availableReplicas{int32"fThe number of available replicas (ready for at least minReadySeconds) for this replication controller.² +integer +Ž + +conditionsÿ"YRepresents the latest available observations of a replication controller's current state.² +arrayºC +A +?#/definitions/io.k8s.api.core.v1.ReplicationControllerConditionú' +x-kubernetes-patch-merge-keytype +ú' +x-kubernetes-patch-strategymerge + +— +fullyLabeledReplicasint32"jThe number of pods that have labels matching the labels of the pod template of the replication controller.² +integer +‹ +observedGenerationuint64"`ObservedGeneration reflects the generation of the most recently observed replication controller.² +integer +ç +*io.k8s.api.flowcontrol.v1beta1.UserSubject¸"=UserSubject holds detailed information for user-kind subject.šname² +objectÊd +b +nameZ"M`name` is the username that matches, or "*" to match all usernames. Required.² +string +ý ++io.k8s.api.policy.v1beta1.PodSecurityPolicyÍ "˜PodSecurityPolicy governs the ability to make requests that affect the Security Context that will be applied to a pod and container. Deprecated in 1.21.² +objectʾ +j +specb +=#/definitions/io.k8s.api.policy.v1beta1.PodSecurityPolicySpec"!spec defines the policy enforced. +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +string +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +string +Ò +metadataÅ +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"ƒStandard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadataúb +x-kubernetes-group-version-kind?=- kind: PodSecurityPolicy + version: v1beta1 + group: policy + +Ð + io.k8s.api.rbac.v1alpha1.Subject«"ÆSubject contains a reference to the object or user identities a role binding applies to. This can either hold a direct API object reference, or a value for non-objects such as user and group names.škindšname² +objectÊÅ +à + namespaceµ"§Namespace of the referenced object. If the object kind is non-namespace, such as "User" or "Group", and this value is not empty the Authorizer should report an error.² +string +Þ + +apiVersionÏ"ÁAPIVersion holds the API group and version of the referenced subject. Defaults to "v1" for ServiceAccount subjects. Defaults to "rbac.authorization.k8s.io/v1alpha1" for User and Group subjects.² +string +à +kind×"ÉKind of object being referenced. Values defined by this API group are "User", "Group", and "ServiceAccount". If the Authorizer does not recognized the kind value, the Authorizer should report an error.² +string +9 +name1"$Name of the object being referenced.² +string +¨ +_io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1beta1.CustomResourceDefinitionConditionÄ"YCustomResourceDefinitionCondition contains details for the current condition of this pod.štypešstatus² +objectÊÊ +¥ +lastTransitionTimeŽ +7#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"SlastTransitionTime last time the condition transitioned from one status to another. +e +messageZ"Mmessage is a human-readable message indicating details about last transition.² +string +j +reason`"Sreason is a unique, one-word, CamelCase reason for the condition's last transition.² +string +Z +statusP"Cstatus is the status of the condition. Can be True, False, Unknown.² +string +q +typei"\type is the type of the condition. Types include Established, NamesAccepted and Terminating.² +string +‘ +io.k8s.api.batch.v1.JobStatusï"0JobStatus represents the current state of a Job.² +objectÊ® +C +active9int32"$The number of actively running pods.² +integer +Ü +completedIndexesÇ"¹CompletedIndexes holds the completed indexes when .spec.completionMode = "Indexed" in a text format. The indexes are represented as decimal integers separated by commas. The numbers are listed in increasing order. Three or more consecutive numbers are compressed and represented by the first and last element of the series, separated by a hyphen. For example, if the completed indexes are 1, 3, 4, 5 and 7, they are represented as "1,3-5,7".² +string + +completionTime¯ +7#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"óRepresents time when the job was completed. It is not guaranteed to be set in happens-before order across separate operations. It is represented in RFC3339 form and is in UTC. The completion time is only set when the job finishes successfully. +¶ + +conditions§"ëThe latest available observations of an object's current state. When a Job fails, one of the conditions will have type "Failed" and status true. When a Job is suspended, one of the conditions will have type "Suspended" and status true; when the Job is resumed, the status of this condition will become false. When a Job is completed, one of the conditions will have type "Complete" and status true. More info: https://kubernetes.io/docs/concepts/workloads/controllers/jobs-run-to-completion/² +arrayº2 +0 +.#/definitions/io.k8s.api.batch.v1.JobConditionú' +x-kubernetes-patch-merge-keytype +ú' +x-kubernetes-patch-strategymerge +ú# +x-kubernetes-list-type atomic + +M +failedCint32".The number of pods which reached phase Failed.² +integer +å + startTime× +7#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"›Represents time when the job controller started processing a job. When a Job is created in the suspended state, this field is not set until the first time it is resumed. This field is reset every time a Job is resumed from suspension. It is represented in RFC3339 form and is in UTC. +S + succeededFint32"1The number of pods which reached phase Succeeded.² +integer +ç +.io.k8s.api.core.v1.ISCSIPersistentVolumeSource´ "®ISCSIPersistentVolumeSource represents an ISCSI disk. ISCSI volumes can only be mounted as read/write once. ISCSI volumes support ownership management and SELinux relabeling.š targetPortalšiqnšlun² +objectÊÙ +k +readOnly_"QReadOnly here will force the ReadOnly setting in VolumeMounts. Defaults to false.² +boolean +z + secretRefm +0#/definitions/io.k8s.api.core.v1.SecretReference"9CHAP Secret for iSCSI target and initiator authentication +¤ + targetPortal“"…iSCSI Target Portal. The Portal is either an IP or ip_addr:port if the port is other than default (typically TCP ports 860 and 3260).² +string +V +chapAuthDiscoveryA"3whether support iSCSI Discovery CHAP authentication² +boolean +Ô + initiatorNameÂ"´Custom iSCSI Initiator Name. If initiatorName is specified with iscsiInterface simultaneously, new iSCSI interface : will be created for the connection.² +string +n +iscsiInterface\"OiSCSI Interface Name that uses an iSCSI transport. Defaults to 'default' (tcp).² +string +4 +lun-int32"iSCSI Target Lun number.² +integer +³ +portals§"ŠiSCSI Target Portal List. The Portal is either an IP or ip_addr:port if the port is other than default (typically TCP ports 860 and 3260).² +arrayº + ² +string +R +chapAuthSession?"1whether support iSCSI Session CHAP authentication² +boolean +µ +fsTypeª"œFilesystem type of the volume that you want to mount. Tip: Ensure that the filesystem type is supported by the host operating system. Examples: "ext4", "xfs", "ntfs". Implicitly inferred to be "ext4" if unspecified. More info: https://kubernetes.io/docs/concepts/storage/volumes#iscsi² +string +0 +iqn)"Target iSCSI Qualified Name.² +string + +!io.k8s.api.core.v1.LimitRangeSpec÷"NLimitRangeSpec defines a min/max usage limit for resources that match on kind.šlimits² +objectÊ +Œ +limits"?Limits is the list of LimitRangeItem objects that are enforced.² +arrayº3 +1 +/#/definitions/io.k8s.api.core.v1.LimitRangeItem +• +$io.k8s.api.core.v1.LocalVolumeSourceì"LLocal represents directly-attached storage with node affinity (Beta feature)špath² +objectʈ +€ +fsTypeõ"çFilesystem type to mount. It applies only when the Path is a block device. Must be a filesystem type supported by the host operating system. Ex. "ext4", "xfs", "ntfs". The default value is to auto-select a fileystem if unspecified.² +string +‚ +pathz"mThe full path to the volume on the node. It can be either a directory or block device (disk, partition, ...).² +string +· +!io.k8s.api.core.v1.NodeSystemInfo‘ "CNodeSystemInfo is a set of ids/uuids to uniquely identify the node.š machineIDš +systemUUIDšbootIDš kernelVersionšosImagešcontainerRuntimeVersionškubeletVersionškubeProxyVersionšoperatingSystemš architecture² +objectÊ¢ +n + kernelVersion]"PKernel Version reported by the node from 'uname -r' (e.g. 3.16.0-0.bpo.4-amd64).² +string +D +kubeletVersion2"%Kubelet Version reported by the node.² +string +I +operatingSystem6")The Operating System reported by the node² +string +n +osImagec"VOS Image reported by the node from /etc/os-release (e.g. Debian GNU/Linux 7 (wheezy)).² +string +þ + +systemUUIDï"áSystemUUID reported by the node. For unique machine identification MachineID is preferred. This field is specific to Red Hat hosts https://access.redhat.com/documentation/en-us/red_hat_subscription_management/1/html/rhsm/uuid² +string +‡ +containerRuntimeVersionl"_ContainerRuntime Version reported by the node through runtime remote API (e.g. docker://1.5.0).² +string +4 +bootID*"Boot ID reported by the node.² +string +H +kubeProxyVersion4"'KubeProxy Version reported by the node.² +string +ß + machineIDÑ"ÃMachineID reported by the node. For unique machine identification in the cluster this field is preferred. Learn more from man(5) machine-id: http://man7.org/linux/man-pages/man5/machine-id.5.html² +string +B + architecture2"%The Architecture reported by the node² +string +½ +-io.k8s.api.extensions.v1beta1.HTTPIngressPath‹ "oHTTPIngressPath associates a path with a backend. Incoming urls matching the path are forwarded to the backend.šbackend² +objectÊ +¤ +backend˜ +:#/definitions/io.k8s.api.extensions.v1beta1.IngressBackend"ZBackend defines the referenced service endpoint to which the traffic will be forwarded to. +ž +path•"‡Path is matched against the path of an incoming request. Currently it can contain characters disallowed from the conventional "path" part of a URL as defined by RFC 3986. Paths must begin with a '/'. When unspecified, all paths from incoming requests are matched.² +string +¶ +pathType©"›PathType determines the interpretation of the Path matching. PathType can be one of the following values: * Exact: Matches the URL path exactly. * Prefix: Matches based on a URL path prefix split by '/'. Matching is + done on a path element by element basis. A path element refers is the + list of labels in the path split by the '/' separator. A request is a + match for path p if every p is an element-wise prefix of p of the + request path. Note that if the last element of the path is a substring + of the last element in request path, it is not a match (e.g. /foo/bar + matches /foo/bar/baz, but does not match /foo/barbaz). +* ImplementationSpecific: Interpretation of the Path matching is up to + the IngressClass. Implementations can treat this as a separate PathType + or treat it identically to Prefix or Exact path types. +Implementations are required to support all path types. Defaults to ImplementationSpecific.² +string +© +*io.k8s.api.scheduling.v1.PriorityClassListú"6PriorityClassList is a collection of priority classes.šitems² +objectÊÀ +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +string +t +itemsk"$items is the list of PriorityClasses² +arrayº8 +6 +4#/definitions/io.k8s.api.scheduling.v1.PriorityClass +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +string +Ê +metadata½ +;#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"~Standard list metadata More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadataúh +x-kubernetes-group-version-kindEC- group: scheduling.k8s.io + kind: PriorityClassList + version: v1 + +û +)io.k8s.api.autoscaling.v2beta2.MetricSpecÍ"|MetricSpec specifies how to scale based on a single metric (only `type` and one other matching field should be set at once).štype² +objectʹ +• +podsŒ +=#/definitions/io.k8s.api.autoscaling.v2beta2.PodsMetricSource"Êpods refers to a metric describing each pod in the current scale target (for example, transactions-processed-per-second). The values will be averaged together before being compared to the target value. +™ +resourceŒ +A#/definitions/io.k8s.api.autoscaling.v2beta2.ResourceMetricSource"Æresource refers to a resource metric (such as those specified in requests and limits) known to Kubernetes describing each pod in the current scale target (e.g. CPU or memory). Such metrics are built in to Kubernetes, and have special scaling options on top of those available to normal per-pod metrics using the "pods" source. +£ +typeš"Œtype is the type of metric source. It should be one of "ContainerResource", "External", "Object", "Pods" or "Resource", each mapping to a matching field in the object. Note: "ContainerResource" type is available on when the feature-gate HPAContainerMetrics is enabled² +string +  +containerResourceŠ +J#/definitions/io.k8s.api.autoscaling.v2beta2.ContainerResourceMetricSource"»container resource refers to a resource metric (such as those specified in requests and limits) known to Kubernetes describing a single container in each pod of the current scale target (e.g. CPU or memory). Such metrics are built in to Kubernetes, and have special scaling options on top of those available to normal per-pod metrics using the "pods" source. This is an alpha feature and can be enabled by the HPAContainerMetrics feature flag. +ô +externalç +A#/definitions/io.k8s.api.autoscaling.v2beta2.ExternalMetricSource"¡external refers to a global metric that is not associated with any Kubernetes object. It allows autoscaling based on information coming from components running outside of cluster (for example length of queue in cloud messaging service, or QPS from loadbalancer running outside of cluster). + +object· +?#/definitions/io.k8s.api.autoscaling.v2beta2.ObjectMetricSource"tobject refers to a metric describing a single kubernetes object (for example, hits-per-second on an Ingress object). +ä +io.k8s.api.core.v1.PodDNSConfigÀ"_PodDNSConfig defines the DNS parameters of a pod in addition to those generated from DNSPolicy.² +objectÊÐ +µ +options©"âA list of DNS resolver options. This will be merged with the base options generated from DNSPolicy. Duplicated entries will be removed. Resolution options given in Options will override those that appear in the base DNSPolicy.² +arrayº7 +5 +3#/definitions/io.k8s.api.core.v1.PodDNSConfigOption +Î +searchesÁ"¤A list of DNS search domains for host-name lookup. This will be appended to the base search paths generated from DNSPolicy. Duplicated search paths will be removed.² +arrayº + ² +string +Ä + nameservers´"—A list of DNS name server IP addresses. This will be appended to the base nameservers generated from DNSPolicy. Duplicated nameservers will be removed.² +arrayº + ² +string +ø +"io.k8s.api.core.v1.RBDVolumeSourceÑ "ˆRepresents a Rados Block Device mount that lasts the lifetime of a pod. RBD volumes support ownership management and SELinux relabeling.šmonitorsšimage² +objectʤ +³ +fsType¨"šFilesystem type of the volume that you want to mount. Tip: Ensure that the filesystem type is supported by the host operating system. Examples: "ext4", "xfs", "ntfs". Implicitly inferred to be "ext4" if unspecified. More info: https://kubernetes.io/docs/concepts/storage/volumes#rbd² +string +r +imagei"\The rados image name. More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it² +string +« +keyringŸ"‘Keyring is the path to key ring for RBDUser. Default is /etc/ceph/keyring. More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it² +string +Ž +monitors"eA collection of Ceph monitors. More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it² +arrayº + ² +string +€ +poolx"kThe rados pool name. Default is rbd. More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it² +string +´ +readOnly§"˜ReadOnly here will force the ReadOnly setting in VolumeMounts. Defaults to false. More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it² +boolean +ù + secretRefë +5#/definitions/io.k8s.api.core.v1.LocalObjectReference"±SecretRef is name of the authentication secret for RBDUser. If provided overrides keyring. Default is nil. More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it +‚ +userz"mThe rados user name. Default is admin. More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it² +string +ò +Tio.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1beta1.JSONSchemaPropsOrArray™"–JSONSchemaPropsOrArray represents a value that can either be a JSONSchemaProps or an array of JSONSchemaProps. Mainly here for serialization purposes. +ª + io.k8s.api.batch.v1.JobCondition…".JobCondition describes current state of a job.štypešstatus² +objectʶ +X +messageM"@Human readable message indicating details about last transition.² +string +J +reason@"3(brief) reason for the condition's last transition.² +string +L +statusB"5Status of the condition, one of True, False, Unknown.² +string +? +type7"*Type of job condition, Complete or Failed.² +string +p + lastProbeTime_ +7#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"$Last time the condition was checked. +Œ +lastTransitionTimev +7#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time";Last time the condition transit from one status to another. +ö +io.k8s.api.core.v1.LifecycleÕ "ªLifecycle describes actions that the management system should take in response to container lifecycle events. For the PostStart and PreStop lifecycle handlers, management of the container blocks until the action is complete, unless the container process fails, in which case the handler is aborted.² +objectÊ™ + + postStartó +(#/definitions/io.k8s.api.core.v1.Handler"ÆPostStart is called immediately after a container is created. If the handler fails, the container is terminated and restarted according to its restart policy. Other management of the container blocks until the hook completes. More info: https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks +’ +preStop† +(#/definitions/io.k8s.api.core.v1.Handler"ÙPreStop is called immediately before a container is terminated due to an API request or management event such as liveness/startup probe failure, preemption, resource contention, etc. The handler is not called if the container crashes or exits. The reason for termination is passed to the handler. The Pod's termination grace period countdown begins before the PreStop hooked is executed. Regardless of the outcome of the handler, the container will eventually terminate within the Pod's termination grace period. Other management of the container blocks until the hook completes or until the termination grace period is reached. More info: https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks +¾ +%io.k8s.api.extensions.v1beta1.Ingress”"‹Ingress is a collection of rules that allow inbound connections to reach the endpoints defined by a backend. An Ingress can be configured to give services externally-reachable urls, load balance traffic, terminate SSL, offer name based virtual hosting etc. DEPRECATED - This group version of Ingress is deprecated by networking.k8s.io/v1beta1 Ingress. See the release notes for more information.² +objectʘ + +Ò +metadataÅ +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"ƒStandard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata +Ý +specÔ +7#/definitions/io.k8s.api.extensions.v1beta1.IngressSpec"˜Spec is the desired state of the Ingress. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status +ã +statusØ +9#/definitions/io.k8s.api.extensions.v1beta1.IngressStatus"šStatus is the current state of the Ingress. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +string +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +stringú\ +x-kubernetes-group-version-kind97- version: v1beta1 + group: extensions + kind: Ingress + +· +2io.k8s.api.flowcontrol.v1beta1.FlowSchemaCondition€":FlowSchemaCondition describes conditions for a FlowSchema.² +objectʵ +® +lastTransitionTime— +7#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"\`lastTransitionTime` is the last time the condition transitioned from one status to another. +g +message\"O`message` is a human-readable message indicating details about last transition.² +string +l +reasonb"U`reason` is a unique, one-word, CamelCase reason for the condition's last transition.² +string +f +status\"O`status` is the status of the condition. Can be True, False, Unknown. Required.² +string +C +type;".`type` is the type of the condition. Required.² +string +ý + +io.k8s.api.rbac.v1.PolicyRuleÛ +"¡PolicyRule holds information that describes a policy rule, but does not contain information about who the rule applies to or which namespace the rule applies to.šverbs² +objectÊ  +´ +verbsª"Verbs is a list of Verbs that apply to ALL the ResourceKinds and AttributeRestrictions contained in this rule. VerbAll represents all kinds.² +arrayº + ² +string +ó + apiGroupså"ÈAPIGroups is the name of the APIGroup that contains the resources. If multiple API groups are specified, any action requested against one of the enumerated resources in any API group will be allowed.² +arrayº + ² +string +¼ +nonResourceURLs¨"‹NonResourceURLs is a set of partial urls that a user should have access to. *s are allowed, but only as the full, final step in the path Since non-resource URLs are not namespaced, this field is only applicable for ClusterRoles referenced from a ClusterRoleBinding. Rules can either apply to API resources (such as "pods" or "secrets") or non-resource URL paths (such as "/api"), but not both.² +arrayº + ² +string +¨ + resourceNames–"zResourceNames is an optional white list of names that the rule applies to. An empty set means that everything is allowed.² +arrayº + ² +string +† + resourcesy"]Resources is a list of resources this rule applies to. ResourceAll represents all resources.² +arrayº + ² +string +• +/io.k8s.api.storage.v1beta1.VolumeAttachmentSpecá"HVolumeAttachmentSpec is the specification of a VolumeAttachment request.šattacheršsourcešnodeName² +objectÊé +H +nodeName<"/The node that the volume should be attached to.² +string +‚ +sourcex +?#/definitions/io.k8s.api.storage.v1beta1.VolumeAttachmentSource"5Source represents the volume that should be attached. +— +attacherŠ"}Attacher indicates the name of the volume driver that MUST handle this request. This is the name returned by GetPluginName().² +string +è +Iio.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1.ServiceReferenceš";ServiceReference holds a reference to Service.legacy.k8s.ioš namespacešname² +objectÊ» +> +name6")name is the name of the service. Required² +string +M + namespace@"3namespace is the namespace of the service. Required² +string +Y +pathQ"Dpath is an optional URL path at which the webhook will be contacted.² +string +Î +portÅint32"¯port is an optional service port at which the webhook will be contacted. `port` should be a valid port number (1-65535, inclusive). Defaults to 443 for backward compatibility.² +integer +ø + +,io.k8s.apimachinery.pkg.runtime.RawExtensionÇ +"¹ +RawExtension is used to hold extensions in external versions. + +To use this, make a field which has RawExtension as its type in your external, versioned struct, and Object in your internal struct. You also need to register your various plugin types. + +// Internal package: type MyAPIObject struct { + runtime.TypeMeta `json:",inline"` + MyPlugin runtime.Object `json:"myPlugin"` +} type PluginA struct { + AOption string `json:"aOption"` +} + +// External package: type MyAPIObject struct { + runtime.TypeMeta `json:",inline"` + MyPlugin runtime.RawExtension `json:"myPlugin"` +} type PluginA struct { + AOption string `json:"aOption"` +} + +// On the wire, the JSON will look something like this: { + "kind":"MyAPIObject", + "apiVersion":"v1", + "myPlugin": { + "kind":"PluginA", + "aOption":"foo", + }, +} + +So what happens? Decode first uses json or yaml to unmarshal the serialized data into your external MyAPIObject. That causes the raw JSON to be stored, but not unpacked. The next step is to copy (using pkg/conversion) into the internal struct. The runtime package's DefaultScheme has conversion functions installed which will unpack the JSON stored in RawExtension, turning it into the correct object type, and storing it in the Object. (TODO: In the case where the object is of an unknown type, a runtime.Unknown object will be created and stored.)² +object + +:io.k8s.api.authorization.v1beta1.SubjectAccessReviewStatusÞ"SubjectAccessReviewStatusšallowed² +objectʪ +c +allowedX"JAllowed is required. True if the action would be allowed, false otherwise.² +boolean +‚ +denied÷"èDenied is optional. True if the action would be denied, otherwise false. If both allowed is false and denied is false, then the authorizer has no opinion on whether to authorize the action. Denied may not be true if Allowed is true.² +boolean +Þ +evaluationErrorÊ"¼EvaluationError is an indication that some error occurred during the authorization check. It is entirely possible to get an error and be able to continue determine authorization status in spite of it. For instance, RBAC can be missing a role, but enough roles are still present and bound to reason about the request.² +string +] +reasonS"FReason is optional. It indicates why a request was allowed or denied.² +string +ð +&io.k8s.api.core.v1.NodeDaemonEndpointsÅ"FNodeDaemonEndpoints lists ports opened by daemons running on the Node.² +objectÊo +m +kubeletEndpointZ +/#/definitions/io.k8s.api.core.v1.DaemonEndpoint"'Endpoint on which Kubelet is listening. +¼ +!io.k8s.api.core.v1.SELinuxOptions–"#/definitions/io.k8s.api.core.v1.ServiceAccountTokenProjection"9information about the serviceAccountToken data to project +ƒ +0io.k8s.api.policy.v1beta1.FSGroupStrategyOptionsÎ"YFSGroupStrategyOptions defines the strategy type and options used to create the strategy.² +objectÊä +h +rule`"Srule is the strategy that will dictate what FSGroup is used in the SecurityContext.² +string +÷ +rangesì"©ranges are the allowed ranges of fs groups. If you would like to force a single fs group then supply a single range with the same start and end. Required for MustRunAs.² +arrayº3 +1 +/#/definitions/io.k8s.api.policy.v1beta1.IDRange +¶ +,io.k8s.api.authentication.v1.TokenReviewSpec…"ETokenReviewSpec is a description of the token authentication request.² +objectʯ +ó + audienceså"ÈAudiences is a list of the identifiers that the resource server presented with the token identifies as. Audience-aware token authenticators will verify that the token was intended for at least one of the audiences in this list. If no audiences are provided, the audience will default to the audience of the Kubernetes apiserver.² +arrayº + ² +string +7 +token."!Token is the opaque bearer token.² +string +á +&io.k8s.api.core.v1.ComponentStatusList¶ "Status of all the conditions for the component as a list of ComponentStatus objects. Deprecated: This API is deprecated in v1.19+šitems² +objectʽ +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +string +l +itemsc" List of ComponentStatus objects.² +arrayº4 +2 +0#/definitions/io.k8s.api.core.v1.ComponentStatus +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +string +Ï +metadata +;#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"‚Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kindsú[ +x-kubernetes-group-version-kind86- kind: ComponentStatusList + version: v1 + group: "" + +¼ +&io.k8s.api.core.v1.GitRepoVolumeSource‘"÷Represents a volume that is populated with the contents of a git repository. Git repo volumes do not support ownership management. Git repo volumes support SELinux relabeling. + +DEPRECATED: GitRepo is deprecated. To provision a container with a git repo, mount an EmptyDir into an InitContainer that clones the repo using git, then mount the EmptyDir into the Pod's container.š +repository² +objectÊû +@ +revision4"'Commit hash for the specified revision.² +string +‹ + directoryý"ïTarget directory name. Must not contain or start with '..'. If '.' is supplied, the volume directory will be the git repository. Otherwise, if specified, the volume will contain the git repository in the subdirectory with the given name.² +string +) + +repository"Repository URL² +string +Æ +$io.k8s.api.core.v1.ISCSIVolumeSource "’Represents an ISCSI disk. ISCSI volumes can only be mounted as read/write once. ISCSI volumes support ownership management and SELinux relabeling.š targetPortalšiqnšlun² +objectÊÞ +R +chapAuthSession?"1whether support iSCSI Session CHAP authentication² +boolean +³ +portals§"ŠiSCSI Target Portal List. The portal is either an IP or ip_addr:port if the port is other than default (typically TCP ports 860 and 3260).² +arrayº + ² +string +¤ + targetPortal“"…iSCSI Target Portal. The Portal is either an IP or ip_addr:port if the port is other than default (typically TCP ports 860 and 3260).² +string + + secretRefr +5#/definitions/io.k8s.api.core.v1.LocalObjectReference"9CHAP Secret for iSCSI target and initiator authentication +V +chapAuthDiscoveryA"3whether support iSCSI Discovery CHAP authentication² +boolean +µ +fsTypeª"œFilesystem type of the volume that you want to mount. Tip: Ensure that the filesystem type is supported by the host operating system. Examples: "ext4", "xfs", "ntfs". Implicitly inferred to be "ext4" if unspecified. More info: https://kubernetes.io/docs/concepts/storage/volumes#iscsi² +string +Ô + initiatorNameÂ"´Custom iSCSI Initiator Name. If initiatorName is specified with iscsiInterface simultaneously, new iSCSI interface : will be created for the connection.² +string +0 +iqn)"Target iSCSI Qualified Name.² +string +n +iscsiInterface\"OiSCSI Interface Name that uses an iSCSI transport. Defaults to 'default' (tcp).² +string +4 +lun-int32"iSCSI Target Lun number.² +integer +k +readOnly_"QReadOnly here will force the ReadOnly setting in VolumeMounts. Defaults to false.² +boolean +¡ +9io.k8s.api.flowcontrol.v1beta1.PriorityLevelConfigurationã "LPriorityLevelConfiguration represents the configuration of a priority level.² +objectÊ +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +string +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +string +ä +metadata× +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"•`metadata` is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata +” +spec‹ +K#/definitions/io.k8s.api.flowcontrol.v1beta1.PriorityLevelConfigurationSpec"»`spec` is the specification of the desired behavior of a "request-priority". More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status +ƒ +statusø +M#/definitions/io.k8s.api.flowcontrol.v1beta1.PriorityLevelConfigurationStatus"¦`status` is the current status of a "request-priority". More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-statusú +x-kubernetes-group-version-kind^\- group: flowcontrol.apiserver.k8s.io + kind: PriorityLevelConfiguration + version: v1beta1 + +½ +$io.k8s.api.rbac.v1alpha1.RoleBinding” "¨RoleBinding references a role, but does not contain it. It can reference a Role in the same namespace or a ClusterRole in the global namespace. It adds who information via Subjects and namespace information by which namespace it exists in. RoleBindings in a given namespace only have effect in that namespace. Deprecated in v1.17 in favor of rbac.authorization.k8s.io/v1 RoleBinding, and will no longer be served in v1.22.šroleRef² +objectÊÝ +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +string +h +metadata\ +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"Standard object's metadata. +æ +roleRefÚ +.#/definitions/io.k8s.api.rbac.v1alpha1.RoleRef"§RoleRef can reference a Role in the current namespace or a ClusterRole in the global namespace. If the RoleRef cannot be resolved, the Authorizer must return an error. +Š +subjects~"=Subjects holds references to the objects the role applies to.² +arrayº2 +0 +.#/definitions/io.k8s.api.rbac.v1alpha1.Subject +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +stringúp +x-kubernetes-group-version-kindMK- group: rbac.authorization.k8s.io + kind: RoleBinding + version: v1alpha1 + +› +.io.k8s.api.storage.v1beta1.VolumeNodeResourcesè"JVolumeNodeResources is a set of resource limits for scheduling of volumes.² +objectÊ +Š +count€int32"êMaximum number of unique volumes managed by the CSI driver that can be used on a node. A volume that is both attached and mounted on a node is considered to be used once, not twice. The same rule applies for a unique volume that is shared among multiple pods on the same node. If this field is nil, then the supported number of volumes on this node is unbounded.² +integer +• +io.k8s.api.apps.v1.Deploymentó"@Deployment enables declarative updates for Pods and ReplicaSets.² +objectÊË +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +string +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +string +f +metadataZ +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"Standard object metadata. +s +speck +/#/definitions/io.k8s.api.apps.v1.DeploymentSpec"8Specification of the desired behavior of the Deployment. +o +statuse +1#/definitions/io.k8s.api.apps.v1.DeploymentStatus"0Most recently observed status of the Deployment.úT +x-kubernetes-group-version-kind1/- group: apps + kind: Deployment + version: v1 + +Õ& +io.k8s.api.batch.v1.JobSpecµ&"7JobSpec describes how the job execution will look like.štemplate² +objectÊâ% +æ +activeDeadlineSecondsÌint64"¶Specifies the duration in seconds relative to the startTime that the job may be continuously active before the system tries to terminate it; value must be positive integer. If a Job is suspended (at creation or through an update), this timer will effectively be stopped and reset when the Job is resumed again.² +integer +r + backoffLimitbint32"MSpecifies the number of retries before marking this job failed. Defaults to 6² +integer +Ð + completionsÀint32"ªSpecifies the desired number of successfully finished pods the job should be run with. Setting to nil means that the success of any pod signals the success of all pods, and allows parallelism to have any positive value. Setting to 1 means that parallelism is limited to 1 and the success of that pod signals the success of the job. More info: https://kubernetes.io/docs/concepts/workloads/controllers/jobs-run-to-completion/² +integer +¹ +manualSelector¦"—manualSelector controls generation of pod labels and pod selectors. Leave `manualSelector` unset unless you are certain what you are doing. When false or unset, the system pick labels unique to this job and appends those labels to the pod template. When true, the user is responsible for picking unique labels and specifying the selector. Failure to pick a unique label may cause this and other jobs to not function correctly. However, You may see `manualSelector=true` in jobs that were created with the old `extensions/v1beta1` API. More info: https://kubernetes.io/docs/concepts/workloads/controllers/jobs-run-to-completion/#specifying-your-own-pod-selector² +boolean +” +suspendˆ"ùSuspend specifies whether the Job controller should create Pods or not. If a Job is created with suspend set to true, no Pods are created by the Job controller. If a Job is suspended after creation (i.e. the flag goes from false to true), the Job controller will delete all active Pods associated with this Job. Users must design their workload to gracefully handle this. Suspending a Job will reset the StartTime field of the Job, effectively resetting the ActiveDeadlineSeconds timer too. This is an alpha field and requires the SuspendJob feature gate to be enabled; otherwise this field may not be set to true. Defaults to false.² +boolean +ó +ttlSecondsAfterFinished×int32"ÁttlSecondsAfterFinished limits the lifetime of a Job that has finished execution (either Complete or Failed). If this field is set, ttlSecondsAfterFinished after the Job finishes, it is eligible to be automatically deleted. When the Job is being deleted, its lifecycle guarantees (e.g. finalizers) will be honored. If this field is unset, the Job won't be automatically deleted. If this field is set to zero, the Job becomes eligible to be deleted immediately after it finishes. This field is alpha-level and is only honored by servers that enable the TTLAfterFinished feature.² +integer +¿ +completionMode¬"žCompletionMode specifies how Pod completions are tracked. It can be `NonIndexed` (default) or `Indexed`. + +`NonIndexed` means that the Job is considered complete when there have been .spec.completions successfully completed Pods. Each Pod completion is homologous to each other. + +`Indexed` means that the Pods of a Job get an associated completion index from 0 to (.spec.completions - 1), available in the annotation batch.kubernetes.io/job-completion-index. The Job is considered complete when there is one successfully completed Pod for each index. When value is `Indexed`, .spec.completions must be specified and `.spec.parallelism` must be less than or equal to 10^5. + +This field is alpha-level and is only honored by servers that enable the IndexedJob feature gate. More completion modes can be added in the future. If the Job controller observes a mode that it doesn't recognize, the controller skips updates for the Job.² +string +¦ + parallelism–int32"€Specifies the maximum desired number of pods the job should run at any given time. The actual number of pods running in steady state will be less than this number when ((.spec.completions - .status.successful) < .spec.parallelism), i.e. when the work left to do is less than max parallelism. More info: https://kubernetes.io/docs/concepts/workloads/controllers/jobs-run-to-completion/² +integer + +selector +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector"ËA label query over pods that should match the pod count. Normally, the system sets this field for you. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#label-selectors +Û +templateÎ +0#/definitions/io.k8s.api.core.v1.PodTemplateSpec"™Describes the pod that will be created when executing a job. More info: https://kubernetes.io/docs/concepts/workloads/controllers/jobs-run-to-completion/ +ý +,io.k8s.api.core.v1.RBDPersistentVolumeSourceÌ "ˆRepresents a Rados Block Device mount that lasts the lifetime of a pod. RBD volumes support ownership management and SELinux relabeling.šmonitorsšimage² +objectÊŸ +ô + secretRefæ +0#/definitions/io.k8s.api.core.v1.SecretReference"±SecretRef is name of the authentication secret for RBDUser. If provided overrides keyring. Default is nil. More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it +‚ +userz"mThe rados user name. Default is admin. More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it² +string +³ +fsType¨"šFilesystem type of the volume that you want to mount. Tip: Ensure that the filesystem type is supported by the host operating system. Examples: "ext4", "xfs", "ntfs". Implicitly inferred to be "ext4" if unspecified. More info: https://kubernetes.io/docs/concepts/storage/volumes#rbd² +string +r +imagei"\The rados image name. More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it² +string +« +keyringŸ"‘Keyring is the path to key ring for RBDUser. Default is /etc/ceph/keyring. More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it² +string +Ž +monitors"eA collection of Ceph monitors. More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it² +arrayº + ² +string +€ +poolx"kThe rados pool name. Default is rbd. More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it² +string +´ +readOnly§"˜ReadOnly here will force the ReadOnly setting in VolumeMounts. Defaults to false. More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it² +boolean + ++io.k8s.api.networking.v1beta1.IngressStatusÑ"8IngressStatus describe the current state of the Ingress.² +objectʈ +… + loadBalanceru +3#/definitions/io.k8s.api.core.v1.LoadBalancerStatus">LoadBalancer contains the current status of the load-balancer. +î +"io.k8s.api.rbac.v1beta1.PolicyRuleÇ "¡PolicyRule holds information that describes a policy rule, but does not contain information about who the rule applies to or which namespace the rule applies to.šverbs² +objectÊŒ + +ó + apiGroupså"ÈAPIGroups is the name of the APIGroup that contains the resources. If multiple API groups are specified, any action requested against one of the enumerated resources in any API group will be allowed.² +arrayº + ² +string +¼ +nonResourceURLs¨"‹NonResourceURLs is a set of partial urls that a user should have access to. *s are allowed, but only as the full, final step in the path Since non-resource URLs are not namespaced, this field is only applicable for ClusterRoles referenced from a ClusterRoleBinding. Rules can either apply to API resources (such as "pods" or "secrets") or non-resource URL paths (such as "/api"), but not both.² +arrayº + ² +string +¨ + resourceNames–"zResourceNames is an optional white list of names that the rule applies to. An empty set means that everything is allowed.² +arrayº + ² +string +ò + resourcesä"ÇResources is a list of resources this rule applies to. '*' represents all resources in the specified apiGroups. '*/foo' represents the subresource 'foo' for all resources in the specified apiGroups.² +arrayº + ² +string +´ +verbsª"Verbs is a list of Verbs that apply to ALL the ResourceKinds and AttributeRestrictions contained in this rule. VerbAll represents all kinds.² +arrayº + ² +string +ˆ + +/io.k8s.api.authorization.v1.SubjectAccessReviewÔ "PSubjectAccessReview checks whether or not a user or group can perform an action.šspec² +objectÊü +§ +statusœ +C#/definitions/io.k8s.api.authorization.v1.SubjectAccessReviewStatus"UStatus is filled in by the server and indicates whether the request is allowed or not +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +string +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +string +K +metadata? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta +… +spec} +A#/definitions/io.k8s.api.authorization.v1.SubjectAccessReviewSpec"8Spec holds information about the request being evaluatedúm +x-kubernetes-group-version-kindJH- group: authorization.k8s.io + kind: SubjectAccessReview + version: v1 + +˜ +5io.k8s.api.authorization.v1.SubjectAccessReviewStatusÞ"SubjectAccessReviewStatusšallowed² +objectʪ +Þ +evaluationErrorÊ"¼EvaluationError is an indication that some error occurred during the authorization check. It is entirely possible to get an error and be able to continue determine authorization status in spite of it. For instance, RBAC can be missing a role, but enough roles are still present and bound to reason about the request.² +string +] +reasonS"FReason is optional. It indicates why a request was allowed or denied.² +string +c +allowedX"JAllowed is required. True if the action would be allowed, false otherwise.² +boolean +‚ +denied÷"èDenied is optional. True if the action would be denied, otherwise false. If both allowed is false and denied is false, then the authorizer has no opinion on whether to authorize the action. Denied may not be true if Allowed is true.² +boolean +™ +io.k8s.api.core.v1.EnvVarû"AEnvVar represents an environment variable present in a Container.šname² +objectÊ¢ +N +nameF"9Name of the environment variable. Must be a C_IDENTIFIER.² +string +» +value±"£Variable references $(VAR_NAME) are expanded using the previous defined environment variables in the container and any service environment variables. If a variable cannot be resolved, the reference in the input string will be unchanged. The $(VAR_NAME) syntax can be escaped with a double $$, ie: $$(VAR_NAME). Escaped references will never be expanded, regardless of whether the variable exists or not. Defaults to "".² +string +‘ + valueFromƒ +-#/definitions/io.k8s.api.core.v1.EnvVarSource"RSource for the environment variable's value. Cannot be used if value is not empty. +‚ +1io.k8s.api.core.v1.ReplicationControllerConditionÌ"bReplicationControllerCondition describes the state of a replication controller at a certain point.štypešstatus² +objectÊÉ +> +type6")Type of replication controller condition.² +string +• +lastTransitionTime +7#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"DThe last time the condition transitioned from one status to another. +Y +messageN"AA human readable message indicating details about the transition.² +string +F +reason<"/The reason for the condition's last transition.² +string +L +statusB"5Status of the condition, one of True, False, Unknown.² +string +Ý +)io.k8s.api.extensions.v1beta1.IngressRule¯ "ìIngressRule represents the rules mapping the paths under a specified host to the related backend services. Incoming requests are first evaluated for a host match, then routed to the backend associated with the matching IngressRuleValue.² +objectʱ +â + +hostÙ +"Ë +Host is the fully qualified domain name of a network host, as defined by RFC 3986. Note the following deviations from the "host" part of the URI as defined in RFC 3986: 1. IPs are not allowed. Currently an IngressRuleValue can only apply to + the IP in the Spec of the parent Ingress. +2. The `:` delimiter is not respected because ports are not allowed. + Currently the port of an Ingress is implicitly :80 for http and + :443 for https. +Both these may change in the future. Incoming requests are matched against the host before the IngressRuleValue. If the host is unspecified, the Ingress routes all traffic based on the specified IngressRuleValue. + +Host can be "precise" which is a domain name without the terminating dot of a network host (e.g. "foo.bar.com") or "wildcard", which is a domain name prefixed with a single wildcard label (e.g. "*.foo.com"). The wildcard character '*' must appear by itself as the first DNS label and matches only a single label. You cannot have a wildcard label by itself (e.g. Host == "*"). Requests will be matched against the Host field in the following way: 1. If Host is precise, the request matches this rule if the http host header is equal to Host. 2. If Host is a wildcard, then the request matches this rule if the http host header is to equal to the suffix (removing the first label) of the wildcard rule.² +string +J +httpB +@#/definitions/io.k8s.api.extensions.v1beta1.HTTPIngressRuleValue + +&io.k8s.api.networking.v1.NetworkPolicy— "INetworkPolicy describes what network traffic is allowed for a set of Pods² +objectÊÖ +Ò +metadataÅ +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"ƒStandard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata + +specy +8#/definitions/io.k8s.api.networking.v1.NetworkPolicySpec"=Specification of the desired behavior for this NetworkPolicy. +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +string +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +stringúd +x-kubernetes-group-version-kindA?- group: networking.k8s.io + kind: NetworkPolicy + version: v1 + +® +"io.k8s.api.rbac.v1.ClusterRoleList‡"/ClusterRoleList is a collection of ClusterRolesšitems² +objectÊÎ +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +string +f +metadataZ +;#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"Standard object's metadata. +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +string +g +items^"Items is a list of ClusterRoles² +arrayº0 +. +,#/definitions/io.k8s.api.rbac.v1.ClusterRoleún +x-kubernetes-group-version-kindKI- group: rbac.authorization.k8s.io + kind: ClusterRoleList + version: v1 + +¥ +%io.k8s.api.core.v1.SecretVolumeSourceû "íAdapts a Secret into a volume. + +The contents of the target Secret's Data field will be presented in a volume as files using the keys in the Data field as the file names. Secret volumes support ownership management and SELinux relabeling.² +objectÊü +ê + defaultModeÚint32"ÄOptional: mode bits used to set permissions on created files by default. Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts both octal and decimal values, JSON requires decimal values for mode bits. Defaults to 0644. Directories within the path are not affected by this setting. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.² +integer +¤ +itemsš"ÜIf unspecified, each key-value pair in the Data field of the referenced Secret will be projected into the volume as a file whose name is the key and content is the value. If specified, the listed keys will be projected into the specified paths, and unlisted keys will not be present. If a key is specified which is not present in the Secret, the volume setup will error unless it is marked optional. Paths must be relative and may not contain the '..' path or start with '..'.² +arrayº. +, +*#/definitions/io.k8s.api.core.v1.KeyToPath +P +optionalD"6Specify whether the Secret or its keys must be defined² +boolean +“ + +secretName„"wName of the secret in the pod's namespace to use. More info: https://kubernetes.io/docs/concepts/storage/volumes#secret² +string +ã +1io.k8s.api.policy.v1beta1.PodDisruptionBudgetSpec­ "BPodDisruptionBudgetSpec is a description of a PodDisruptionBudget.² +objectÊÚ +ð +maxUnavailableÝ +=#/definitions/io.k8s.apimachinery.pkg.util.intstr.IntOrString"›An eviction is allowed if at most "maxUnavailable" pods selected by "selector" are unavailable after the eviction, i.e. even in absence of the evicted pod. For example, one can prevent all voluntary evictions by specifying 0. This is a mutually exclusive setting with "minAvailable". +Ç + minAvailable¶ +=#/definitions/io.k8s.apimachinery.pkg.util.intstr.IntOrString"ôAn eviction is allowed if at least "minAvailable" pods selected by "selector" will still be available after the eviction, i.e. even in the absence of the evicted pod. So for example you can prevent all voluntary evictions by specifying "100%". +š +selector +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector"œLabel query over pods whose evictions are managed by the disruption budget. A null selector selects no pods. An empty selector ({}) also selects no pods, which differs from standard behavior of selecting all pods. In policy/v1, an empty selector will select all pods in the namespace.ú) +x-kubernetes-patch-strategy +replace + +å +.io.k8s.api.rbac.v1beta1.ClusterRoleBindingList² "ºClusterRoleBindingList is a collection of ClusterRoleBindings. Deprecated in v1.17 in favor of rbac.authorization.k8s.io/v1 ClusterRoleBindingList, and will no longer be served in v1.22.šitems² +objectÊá +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +string +z +itemsq"&Items is a list of ClusterRoleBindings² +arrayº< +: +8#/definitions/io.k8s.api.rbac.v1beta1.ClusterRoleBinding +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +string +f +metadataZ +;#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"Standard object's metadata.úz +x-kubernetes-group-version-kindWU- group: rbac.authorization.k8s.io + kind: ClusterRoleBindingList + version: v1beta1 + +£ +Zio.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1.CustomResourceDefinitionConditionÄ"YCustomResourceDefinitionCondition contains details for the current condition of this pod.štypešstatus² +objectÊÊ +e +messageZ"Mmessage is a human-readable message indicating details about last transition.² +string +j +reason`"Sreason is a unique, one-word, CamelCase reason for the condition's last transition.² +string +Z +statusP"Cstatus is the status of the condition. Can be True, False, Unknown.² +string +q +typei"\type is the type of the condition. Types include Established, NamesAccepted and Terminating.² +string +¥ +lastTransitionTimeŽ +7#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"SlastTransitionTime last time the condition transitioned from one status to another. + +Fio.k8s.kube-aggregator.pkg.apis.apiregistration.v1.APIServiceConditionÒ"NAPIServiceCondition describes the state of an APIService at a particular pointštypešstatus² +objectÊã +X +messageM"@Human-readable message indicating details about last transition.² +string +^ +reasonT"GUnique, one-word, CamelCase reason for the condition's last transition.² +string +Z +statusP"CStatus is the status of the condition. Can be True, False, Unknown.² +string +7 +type/""Type is the type of the condition.² +string +‘ +lastTransitionTime{ +7#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"@Last time the condition transitioned from one status to another. +ç +1io.k8s.api.autoscaling.v2beta2.ObjectMetricStatus±"ŽObjectMetricStatus indicates the current value of a metric describing a kubernetes object (for example, hits-per-second on an Ingress object).šmetricšcurrentšdescribedObject² +objectÊì +„ +currenty +>#/definitions/io.k8s.api.autoscaling.v2beta2.MetricValueStatus"7current contains the current value for the given metric +] +describedObjectJ +H#/definitions/io.k8s.api.autoscaling.v2beta2.CrossVersionObjectReference +ƒ +metricy +=#/definitions/io.k8s.api.autoscaling.v2beta2.MetricIdentifier"8metric identifies the target metric by name and selector +” +(io.k8s.api.networking.v1beta1.IngressTLSç"MIngressTLS describes the transport layer security associated with an Ingress.² +objectʉ +é + +secretNameÚ"ÌSecretName is the name of the secret used to terminate TLS traffic on port 443. Field is left optional to allow TLS routing based on SNI hostname alone. If the SNI host in a listener conflicts with the "Host" header field used by an IngressRule, the SNI host is used for termination and value of the Host header is used for routing.² +string +š +hosts"óHosts are a list of hosts included in the TLS certificate. The values in this list must match the name/s used in the tlsSecret. Defaults to the wildcard host setting for the loadbalancer controller fulfilling this Ingress, if left unspecified.² +arrayº + ² +string +‰ +!io.k8s.api.apps.v1.DeploymentSpecã "NDeploymentSpec is the specification of the desired behavior of the Deployment.šselectorštemplate² +objectÊî +@ +paused6"(Indicates that the deployment is paused.² +boolean +  +progressDeadlineSeconds„int32"îThe maximum time in seconds for a deployment to make progress before it is considered to be failed. The deployment controller will continue to process failed deployments and a condition with a ProgressDeadlineExceeded reason will be surfaced in the deployment status. Note that progress will not be estimated during the time a deployment is paused. Defaults to 600s.² +integer +’ +replicas…int32"pNumber of desired pods. This is a pointer to distinguish between explicit zero and not specified. Defaults to 1.² +integer +à +revisionHistoryLimitªint32"”The number of old ReplicaSets to retain to allow rollback. This is a pointer to distinguish between explicit zero and not specified. Defaults to 10.² +integer +ö +selectoré +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector"¤Label selector for pods. Existing ReplicaSets whose pods are selected by this will be the ones affected by this deployment. It must match the pod template's labels. +¹ +strategy¬ +3#/definitions/io.k8s.api.apps.v1.DeploymentStrategy"FThe deployment strategy to use to replace existing pods with new ones.ú, +x-kubernetes-patch-strategy  retainKeys + +q +templatee +0#/definitions/io.k8s.api.core.v1.PodTemplateSpec"1Template describes the pods that will be created. +ƒ +minReadySecondsïint32"ÙMinimum number of seconds for which a newly created pod should be ready without any of its container crashing, for it to be considered available. Defaults to 0 (pod will be considered available as soon as it is ready)² +integer +… +6io.k8s.api.autoscaling.v2beta2.HorizontalPodAutoscalerÊ "ÎHorizontalPodAutoscaler is the configuration for a horizontal pod autoscaler, which automatically manages the replica count of any resource implementing the scale subresource based on the metrics specified.² +objectÊú +à +metadataÓ +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"‘metadata is the standard object metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata +„ +specû +H#/definitions/io.k8s.api.autoscaling.v2beta2.HorizontalPodAutoscalerSpec"®spec is the specification for the behaviour of the autoscaler. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status. + +status… +J#/definitions/io.k8s.api.autoscaling.v2beta2.HorizontalPodAutoscalerStatus"7status is the current information about the autoscaler. +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +string +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +stringúm +x-kubernetes-group-version-kindJH- group: autoscaling + kind: HorizontalPodAutoscaler + version: v2beta2 + +‚ +=io.k8s.api.certificates.v1beta1.CertificateSigningRequestListÀšitems² +objectÊ« +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +string +a +itemsX² +arrayºK +I +G#/definitions/io.k8s.api.certificates.v1beta1.CertificateSigningRequest +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +string +I +metadata= +;#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMetaú{ +x-kubernetes-group-version-kindXV- group: certificates.k8s.io + kind: CertificateSigningRequestList + version: v1beta1 + +à +!io.k8s.api.core.v1.LimitRangeListº "-LimitRangeList is a list of LimitRange items.šitems² +objectÊ› +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +string +É +items¿"€Items is a list of LimitRange objects. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/² +arrayº/ +- ++#/definitions/io.k8s.api.core.v1.LimitRange +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +string +Ï +metadata +;#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"‚Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kindsúV +x-kubernetes-group-version-kind31- group: "" + kind: LimitRangeList + version: v1 + +Òg +io.k8s.api.core.v1.ServiceSpec¯g"FServiceSpec describes the attributes that a user creates on a service.² +objectÊØf +¸ + externalName§"™externalName is the external reference that discovery mechanisms will return as an alias for this service (e.g. a DNS CNAME record). No proxying will be involved. Must be a lowercase RFC-1123 hostname (https://tools.ietf.org/html/rfc1123) and requires `type` to be "ExternalName".² +string +ˆ +ipFamilyPolicyõ"çIPFamilyPolicy represents the dual-stack-ness requested or required by this Service, and is gated by the "IPv6DualStack" feature gate. If there is no value provided, then this field will be set to SingleStack. Services can be "SingleStack" (a single IP family), "PreferDualStack" (two IP families on dual-stack configured clusters or a single IP family on single-stack clusters), or "RequireDualStack" (two IP families on dual-stack configured clusters, otherwise fail). The ipFamilies and clusterIPs fields depend on the value of this field. This field will be wiped when updating a service to type ExternalName.² +string +“ +loadBalancerSourceRangesö"ÙIf specified and supported by the platform, this will restrict traffic through the cloud-provider load-balancer will be restricted to the specified client IPs. This field will be ignored if the cloud-provider does not support the feature." More info: https://kubernetes.io/docs/tasks/access-application-cluster/configure-cloud-provider-firewall/² +arrayº + ² +string +• +ports‹"ŸThe list of ports that are exposed by this service. More info: https://kubernetes.io/docs/concepts/services-networking/service/#virtual-ips-and-service-proxies² +arrayº0 +. +,#/definitions/io.k8s.api.core.v1.ServicePortú2 +x-kubernetes-list-map-keys- port +- protocol +ú +x-kubernetes-list-typemap +ú' +x-kubernetes-patch-merge-keyport +ú' +x-kubernetes-patch-strategymerge + +¥ +sessionAffinity‘"ƒSupports "ClientIP" and "None". Used to maintain session affinity. Enable client IP based session affinity. Must be ClientIP or None. Defaults to None. More info: https://kubernetes.io/docs/concepts/services-networking/service/#virtual-ips-and-service-proxies² +string +ë + +clusterIPsÜ "™ ClusterIPs is a list of IP addresses assigned to this service, and are usually assigned randomly. If an address is specified manually, is in-range (as per system configuration), and is not in use, it will be allocated to the service; otherwise creation of the service will fail. This field may not be changed through updates unless the type field is also being changed to ExternalName (which requires this field to be empty) or the type field is being changed from ExternalName (in which case this field may optionally be specified, as describe above). Valid values are "None", empty string (""), or a valid IP address. Setting this to "None" makes a "headless service" (no virtual IP), which is useful when direct endpoint connections are preferred and proxying is not required. Only applies to types ClusterIP, NodePort, and LoadBalancer. If this field is specified when creating a Service of type ExternalName, creation will fail. This field will be wiped when updating a Service to type ExternalName. If this field is not specified, it will be initialized from the clusterIP field. If this field is specified, clients must ensure that clusterIPs[0] and clusterIP have the same value. + +Unless the "IPv6DualStack" feature gate is enabled, this field is limited to one value, which must be the same as the clusterIP field. If the feature gate is enabled, this field may hold a maximum of two entries (dual-stack IPs, in either order). These IPs must correspond to the values of the ipFamilies field. Both clusterIPs and ipFamilies are governed by the ipFamilyPolicy field. More info: https://kubernetes.io/docs/concepts/services-networking/service/#virtual-ips-and-service-proxies² +arrayº + ² +stringú# +x-kubernetes-list-type atomic + +Õ + topologyKeysÄ"§topologyKeys is a preference-order list of topology keys which implementations of services should use to preferentially sort endpoints when accessing this Service, it can not be used at the same time as externalTrafficPolicy=Local. Topology keys must be valid label keys and at most 16 keys may be specified. Endpoints are chosen based on the first topology key with available backends. If this field is specified and all entries have no backends that match the topology of the client, the service has no backends for that client and connections should fail. The special value "*" may be used to mean "any topology". This catch-all value, if used, only makes sense as the last value in the list. If this is not specified or empty, no topology constraints will be applied. This field is alpha-level and is only honored by servers that enable the ServiceTopology feature. This field is deprecated and will be removed in a future version.² +arrayº + ² +string +š +sessionAffinityConfig€ +6#/definitions/io.k8s.api.core.v1.SessionAffinityConfig"FsessionAffinityConfig contains the configurations of session affinity. +á + clusterIPÓ"ÅclusterIP is the IP address of the service and is usually assigned randomly. If an address is specified manually, is in-range (as per system configuration), and is not in use, it will be allocated to the service; otherwise creation of the service will fail. This field may not be changed through updates unless the type field is also being changed to ExternalName (which requires this field to be blank) or the type field is being changed from ExternalName (in which case this field may optionally be specified, as describe above). Valid values are "None", empty string (""), or a valid IP address. Setting this to "None" makes a "headless service" (no virtual IP), which is useful when direct endpoint connections are preferred and proxying is not required. Only applies to types ClusterIP, NodePort, and LoadBalancer. If this field is specified when creating a Service of type ExternalName, creation will fail. This field will be wiped when updating a Service to type ExternalName. More info: https://kubernetes.io/docs/concepts/services-networking/service/#virtual-ips-and-service-proxies² +string +ò + externalIPsâ"ÅexternalIPs is a list of IP addresses for which nodes in the cluster will also accept traffic for this service. These IPs are not managed by Kubernetes. The user is responsible for ensuring that traffic arrives at a node with this IP. A common example is external load-balancers that are not part of the Kubernetes system.² +arrayº + ² +string +Á +externalTrafficPolicy§"™externalTrafficPolicy denotes if this Service desires to route external traffic to node-local or cluster-wide endpoints. "Local" preserves the client source IP and avoids a second hop for LoadBalancer and Nodeport type services, but risks potentially imbalanced traffic spreading. "Cluster" obscures the client source IP and may cause a second hop to another node, but should have good overall load-spreading.² +string +ö +internalTrafficPolicyÜ"ÎInternalTrafficPolicy specifies if the cluster internal traffic should be routed to all endpoints or node-local endpoints only. "Cluster" routes internal traffic to a Service to all endpoints. "Local" routes traffic to node-local endpoints only, traffic is dropped if no node-local endpoints are ready. The default value is "Cluster".² +string +ñ + +ipFamiliesâ"ŸIPFamilies is a list of IP families (e.g. IPv4, IPv6) assigned to this service, and is gated by the "IPv6DualStack" feature gate. This field is usually assigned automatically based on cluster configuration and the ipFamilyPolicy field. If this field is specified manually, the requested family is available in the cluster, and ipFamilyPolicy allows it, it will be used; otherwise creation of the service will fail. This field is conditionally mutable: it allows for adding or removing a secondary IP family, but it does not allow changing the primary IP family of the Service. Valid values are "IPv4" and "IPv6". This field only applies to Services of types ClusterIP, NodePort, and LoadBalancer, and does apply to "headless" services. This field will be wiped when updating a Service to type ExternalName. + +This field may hold a maximum of two entries (dual-stack families, in either order). These families must correspond to the values of the clusterIPs field, if specified. Both clusterIPs and ipFamilies are governed by the ipFamilyPolicy field.² +arrayº + ² +stringú# +x-kubernetes-list-type atomic + +× +loadBalancerClassÁ"³loadBalancerClass is the class of the load balancer implementation this Service belongs to. If specified, the value of this field must be a label-style identifier, with an optional prefix, e.g. "internal-vip" or "example.com/internal-vip". Unprefixed names are reserved for end-users. This field can only be set when the Service type is 'LoadBalancer'. If not set, the default load balancer implementation is used, today this is typically done through the cloud provider integration, but should apply for any default implementation. If set, it is assumed that a load balancer implementation is watching for Services with a matching class. Any default load balancer implementation (e.g. cloud providers) should ignore Services that set this field. This field can only be set when creating or updating a Service to type 'LoadBalancer'. Once set, it can not be changed. This field will be wiped when a service is updated to a non 'LoadBalancer' type.² +string +‰ +allocateLoadBalancerNodePortsç"ØallocateLoadBalancerNodePorts defines if NodePorts will be automatically allocated for services with type LoadBalancer. Default is "true". It may be set to "false" if the cluster load-balancer does not rely on NodePorts. allocateLoadBalancerNodePorts may only be set for services with type LoadBalancer and will be cleared if the type is changed to any other type. This field is alpha-level and is only honored by servers that enable the ServiceLBNodePortControl feature.² +boolean +• +healthCheckNodePortýint32"çhealthCheckNodePort specifies the healthcheck nodePort for the service. This only applies when type is set to LoadBalancer and externalTrafficPolicy is set to Local. If a value is specified, is in-range, and is not in use, it will be used. If not specified, a value will be automatically allocated. External systems (e.g. load-balancers) can use this port to determine if a given node holds endpoints for this service or not. If this field is specified when creating a Service which does not need it, creation will fail. This field will be wiped when updating a Service to no longer need it (e.g. changing type).² +integer +ã +loadBalancerIPÐ"ÂOnly applies to Service Type: LoadBalancer LoadBalancer will get created with the IP specified in this field. This feature depends on whether the underlying cloud-provider supports specifying the loadBalancerIP when a load balancer is created. This field will be ignored if the cloud-provider does not support the feature.² +string +¬ +publishNotReadyAddresses"€publishNotReadyAddresses indicates that any agent which deals with endpoints for this Service should disregard any indications of ready/not-ready. The primary use case for setting this field is for a StatefulSet's Headless Service to propagate SRV DNS records for its Pods for the purpose of peer discovery. The Kubernetes controllers that generate Endpoints and EndpointSlice resources for Services interpret this to mean that all endpoints are considered "ready" even if the Pods themselves are not. Agents which consume only Kubernetes generated endpoints through the Endpoints or EndpointSlice resources can safely assume this behavior.² +boolean +« +selectorž"€Route service traffic to pods with label keys and values matching this selector. If empty or not present, the service is assumed to have an external process managing its endpoints, which Kubernetes will not modify. Only applies to types ClusterIP, NodePort, and LoadBalancer. Ignored if type is ExternalName. More info: https://kubernetes.io/docs/concepts/services-networking/service/ª + ² +string² +object +‹ +type‚"ôtype determines how the Service is exposed. Defaults to ClusterIP. Valid options are ExternalName, ClusterIP, NodePort, and LoadBalancer. "ClusterIP" allocates a cluster-internal IP address for load-balancing to endpoints. Endpoints are determined by the selector or if that is not specified, by manual construction of an Endpoints object or EndpointSlice objects. If clusterIP is "None", no virtual IP is allocated and the endpoints are published as a set of endpoints rather than a virtual IP. "NodePort" builds on ClusterIP and allocates a port on every node which routes to the same endpoints as the clusterIP. "LoadBalancer" builds on NodePort and creates an external load-balancer (if supported in the current cloud) which routes to the same endpoints as the clusterIP. "ExternalName" aliases this service to the specified externalName. Several other fields do not apply to ExternalName services. More info: https://kubernetes.io/docs/concepts/services-networking/service/#publishing-services-service-types² +string +ó +'io.k8s.api.core.v1.TopologySelectorTermÇ"‘A topology selector term represents the result of label queries. A null or empty topology selector term matches no objects. The requirements of them are ANDed. It provides a subset of functionality as NodeSelectorTerm. This is an alpha feature and may change in the future.² +objectʤ +¡ +matchLabelExpressions‡"3A list of topology selector requirements by labels.² +arrayºE +C +A#/definitions/io.k8s.api.core.v1.TopologySelectorLabelRequirement +æ +*io.k8s.api.discovery.v1.EndpointConditions·"CEndpointConditions represents the current condition of an endpoint.² +objectÊã +Ó +readyÉ"ºready indicates that this endpoint is prepared to receive traffic, according to whatever system is managing the endpoint. A nil value indicates an unknown state. In most cases consumers should interpret this unknown state as ready. For compatibility reasons, ready should never be "true" for terminating endpoints.² +boolean +Ù +servingÍ"¾serving is identical to ready except that it is set regardless of the terminating state of endpoints. This condition should be set to true for a ready endpoint that is terminating. If nil, consumers should defer to the ready condition. This field can be enabled with the EndpointSliceTerminatingCondition feature gate.² +boolean +® + terminatingž"terminating indicates that this endpoint is terminating. A nil value indicates an unknown state. Consumers should interpret this unknown state to mean that the endpoint is not terminating. This field can be enabled with the EndpointSliceTerminatingCondition feature gate.² +boolean +ž +3io.k8s.api.policy.v1beta1.RunAsGroupStrategyOptionsæ"`RunAsGroupStrategyOptions defines the strategy type and any options used to create the strategy.šrule² +objectÊî +ý +rangesò"¯ranges are the allowed ranges of gids that may be used. If you would like to force a single gid then supply a single range with the same start and end. Required for MustRunAs.² +arrayº3 +1 +/#/definitions/io.k8s.api.policy.v1beta1.IDRange +l +ruled"Wrule is the strategy that will dictate the allowable RunAsGroup values that may be set.² +string +• +&io.k8s.api.storage.v1beta1.VolumeErrorê"DVolumeError captures an error encountered during a volume operation.² +objectÊ• +b +timeZ +7#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"Time the error was encountered. +® +message¢"”String detailing the error encountered during Attach or Detach operation. This string may be logged, so it should not contain sensitive information.² +string +ë +io.k8s.api.core.v1.EventSourceÈ".EventSource contains information for an event.² +objectʉ +F + component9",Component from which the event is generated.² +string +? +host7"*Node name on which the event is generated.² +string +æ +(io.k8s.api.core.v1.GlusterfsVolumeSource¹"‹Represents a Glusterfs mount that lasts the lifetime of a pod. Glusterfs volumes do not support ownership management or SELinux relabeling.š endpointsšpath² +objectʉ +ƒ +path{"nPath is the Glusterfs volume path. More info: https://examples.k8s.io/volumes/glusterfs/README.md#create-a-pod² +string +Ò +readOnlyÅ"¶ReadOnly here will force the Glusterfs volume to be mounted with read-only permissions. Defaults to false. More info: https://examples.k8s.io/volumes/glusterfs/README.md#create-a-pod² +boolean +« + endpoints"EndpointsName is the endpoint name that details Glusterfs topology. More info: https://examples.k8s.io/volumes/glusterfs/README.md#create-a-pod² +string +¬ +Zio.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1beta1.JSONSchemaPropsOrStringArrayN"LJSONSchemaPropsOrStringArray represents a JSONSchemaProps or a string array. +m +8io.k8s.api.apiserverinternal.v1alpha1.StorageVersionSpec1"$StorageVersionSpec is an empty spec.² +object +Ü + +-io.k8s.api.authentication.v1beta1.TokenReviewª +"§TokenReview attempts to authenticate a token to a known user. Note: TokenReview requests may be cached by the webhook token authenticator plugin in the kube-apiserver.šspec² +objectÊü +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +string +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +string +K +metadata? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta +ƒ +spec{ +?#/definitions/io.k8s.api.authentication.v1beta1.TokenReviewSpec"8Spec holds information about the request being evaluated +© +statusž +A#/definitions/io.k8s.api.authentication.v1beta1.TokenReviewStatus"YStatus is filled in by the server and indicates whether the request can be authenticated.úk +x-kubernetes-group-version-kindHF- group: authentication.k8s.io + kind: TokenReview + version: v1beta1 + +Õ +5io.k8s.api.autoscaling.v1.HorizontalPodAutoscalerList›"*list of horizontal pod autoscaler objects.šitems² +objectÊé +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +string +… +items|"*list of horizontal pod autoscaler objects.² +arrayºC +A +?#/definitions/io.k8s.api.autoscaling.v1.HorizontalPodAutoscaler +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +string +b +metadataV +;#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"Standard list metadata.úl +x-kubernetes-group-version-kindIG- group: autoscaling + kind: HorizontalPodAutoscalerList + version: v1 + +Ÿ +:io.k8s.api.autoscaling.v2beta1.HorizontalPodAutoscalerListà"GHorizontalPodAutoscaler is a list of horizontal pod autoscaler objects.šitems² +objectÊŒ +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +string +˜ +itemsŽ"7items is the list of horizontal pod autoscaler objects.² +arrayºH +F +D#/definitions/io.k8s.api.autoscaling.v2beta1.HorizontalPodAutoscaler +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +string +r +metadataf +;#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"'metadata is the standard list metadata.úq +x-kubernetes-group-version-kindNL- kind: HorizontalPodAutoscalerList + version: v2beta1 + group: autoscaling + +˜ +!io.k8s.api.core.v1.AttachedVolumeò"4AttachedVolume describes a volume attached to a nodešnameš +devicePath² +objectÊ™ +e + +devicePathW"JDevicePath represents the device path where the volume should be available² +string +0 +name("Name of the attached volume² +string + +*io.k8s.api.discovery.v1beta1.EndpointHintsà"KEndpointHints provides hints describing how an endpoint should be consumed.² +objectÊ„ + +forZonesô"ˆforZones indicates the zone(s) this endpoint should be consumed by to enable topology aware routing. May contain a maximum of 8 entries.² +arrayº6 +4 +2#/definitions/io.k8s.api.discovery.v1beta1.ForZoneú# +x-kubernetes-list-type atomic + +ƒ +2io.k8s.api.extensions.v1beta1.HTTPIngressRuleValueÌ"£HTTPIngressRuleValue is a list of http selectors pointing to backends. In the example: http:///? -> backend where where parts of the url correspond to RFC 3986, this resource will be used to match against everything after the last '/' and before the first '?' or '#'.špaths² +objectÊ +Œ +paths‚"4A collection of paths that map requests to backends.² +arrayº? += +;#/definitions/io.k8s.api.extensions.v1beta1.HTTPIngressPath +À +!io.k8s.api.core.v1.ContainerImageš"Describe a container imagešnames² +objectÊç +A + sizeBytes4int64"The size of the image in bytes.² +integer +¡ +names—"{Names by which this image is known. e.g. ["k8s.gcr.io/hyperkube:v1.0.7", "dockerhub.io/google_containers/hyperkube:v1.0.7"]² +arrayº + ² +string + +3io.k8s.api.authorization.v1beta1.ResourceAttributeså"tResourceAttributes includes the authorization attributes available for resource requests to the Authorizer interface² +objectÊà +ô + namespaceæ"ØNamespace is the namespace of the action being requested. Currently, there is no distinction between no namespace and all namespaces "" (empty) is defaulted for LocalSubjectAccessReviews "" (empty) is empty for cluster-scoped resources "" (empty) means "all" for namespace scoped resources from a SubjectAccessReview or SelfSubjectAccessReview² +string +X +resourceL"?Resource is one of the existing resource types. "*" means all.² +string +^ + subresourceO"BSubresource is one of the existing resource types. "" means none.² +string +ƒ +verb{"nVerb is a kubernetes resource API verb, like: get, list, watch, create, update, delete, proxy. "*" means all.² +string +S +versionH";Version is the API Version of the Resource. "*" means all.² +string +M +groupD"7Group is the API Group of the Resource. "*" means all.² +string +‚ +namez"mName is the name of the resource being requested for a "get" or deleted for a "delete". "" (empty) means all.² +string +… +9io.k8s.api.authorization.v1beta1.SubjectRulesReviewStatusÇ "çSubjectRulesReviewStatus contains the result of a rules check. This check can be incomplete depending on the set of authorizers the server is configured with and any errors experienced during evaluation. Because authorization rules are additive, if a rule appears in a list it's safe to assume the subject has that permission, even if that list is incomplete.š resourceRulesšnonResourceRulesš +incomplete² +objectÊž +Œ +evaluationErrorø"êEvaluationError can appear in combination with Rules. It indicates an error occurred during rule evaluation, such as an authorizer that doesn't support rule evaluation, and that ResourceRules and/or NonResourceRules may be incomplete.² +string +Ý + +incompleteÎ"¿Incomplete is true when the rules returned by this call are incomplete. This is most commonly encountered when an authorizer, such as an external authorizer, doesn't support rules evaluation.² +boolean +› +nonResourceRules†"´NonResourceRules is the list of actions the subject is allowed to perform on non-resources. The list ordering isn't significant, may contain duplicates, and possibly be incomplete.² +arrayºB +@ +>#/definitions/io.k8s.api.authorization.v1beta1.NonResourceRule +Ž + resourceRulesü"­ResourceRules is the list of actions the subject is allowed to perform on resources. The list ordering isn't significant, may contain duplicates, and possibly be incomplete.² +arrayº? += +;#/definitions/io.k8s.api.authorization.v1beta1.ResourceRule +ð +4io.k8s.api.certificates.v1.CertificateSigningRequest·"¬CertificateSigningRequest objects provide a mechanism to obtain x509 certificates by submitting a certificate signing request, and having it asynchronously approved and issued. + +Kubelets use this API to obtain: + 1. client certificates to authenticate to kube-apiserver (with the "kubernetes.io/kube-apiserver-client-kubelet" signerName). + 2. serving certificates for TLS endpoints kube-apiserver can connect to securely (with the "kubernetes.io/kubelet-serving" signerName). + +This API can be used to request client certificates to authenticate to kube-apiserver (with the "kubernetes.io/kube-apiserver-client" signerName), or to obtain certificates from custom non-Kubernetes signers.šspec² +objectÊý +‚ +status÷ +H#/definitions/io.k8s.api.certificates.v1.CertificateSigningRequestStatus"ªstatus contains information about whether the request is approved or denied, and the certificate issued by the signer, or the failure condition indicating signer failure. +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +string +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +string +K +metadata? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta +« +spec¢ +F#/definitions/io.k8s.api.certificates.v1.CertificateSigningRequestSpec"×spec contains the certificate request, and is immutable after creation. Only the request, signerName, and usages fields can be set on creation. Other fields are derived by Kubernetes and cannot be modified by users.úr +x-kubernetes-group-version-kindOM- group: certificates.k8s.io + kind: CertificateSigningRequest + version: v1 + + +(io.k8s.api.core.v1.ContainerStateWaitingã"8ContainerStateWaiting is a waiting state of a container.² +objectÊš +O +messageD"7Message regarding why the container is not yet running.² +string +G +reason="0(brief) reason the container is not yet running.² +string +„ +=io.k8s.api.flowcontrol.v1beta1.PriorityLevelConfigurationSpecÂ"OPriorityLevelConfigurationSpec specifies the configuration of a priority level.štype² +objectÊø +† +typeý"ï`type` indicates whether this priority level is subject to limitation on request execution. A value of `"Exempt"` means that requests of this priority level are not subject to a limit (and thus are never queued) and do not detract from the capacity made available to other priority levels. A value of `"Limited"` means that (a) requests of this priority level _are_ subject to limits and (b) some of the server's limited capacity is made available exclusively to this priority level. Required.² +string +ì +limitedà +N#/definitions/io.k8s.api.flowcontrol.v1beta1.LimitedPriorityLevelConfiguration"`limited` specifies how requests are handled for a Limited priority level. This field must be non-empty if and only if `type` is `"Limited"`.ú` +x-kubernetes-unionsIG- discriminator: type + fields-to-discriminateBy: + limited: Limited + +ö + +Vio.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1.CustomResourceDefinitionNames› +"XCustomResourceDefinitionNames indicates the names to serve this CustomResourceDefinitionšpluralškind² +objectÊ¢ +ô + +categorieså"Ècategories is a list of grouped resources this custom resource belongs to (e.g. 'all'). This is published in API discovery documents, and used by clients to support invocations like `kubectl get all`.² +arrayº + ² +string +¾ +kindµ"§kind is the serialized kind of the resource. It is normally CamelCase and singular. Custom resource instances will use this value as the `kind` attribute in API calls.² +string +q +listKinde"XlistKind is the serialized kind of the list for this resource. Defaults to "`kind`List".² +string + +plural‚"ôplural is the plural name of the resource to serve. The custom resources are served under `/apis///.../`. Must match the name of the CustomResourceDefinition (in the form `.`). Must be all lowercase.² +string +á + +shortNamesÒ"µshortNames are short names for the resource, exposed in API discovery documents, and used by clients to support invocations like `kubectl get `. It must be all lowercase.² +arrayº + ² +string +€ +singulart"gsingular is the singular name of the resource. It must be all lowercase. Defaults to lowercased `kind`.² +string +€ +/io.k8s.api.autoscaling.v2beta2.PodsMetricStatusÌ"šPodsMetricStatus indicates the current value of a metric describing each pod in the current scale target (for example, transactions-processed-per-second).šmetricšcurrent² +objectÊ +„ +currenty +>#/definitions/io.k8s.api.autoscaling.v2beta2.MetricValueStatus"7current contains the current value for the given metric +ƒ +metricy +=#/definitions/io.k8s.api.autoscaling.v2beta2.MetricIdentifier"8metric identifies the target metric by name and selector +Ö +io.k8s.api.batch.v1.JobList¶" JobList is a collection of jobs.šitems² +objectʨ +[ +itemsR"items is the list of Jobs.² +arrayº) +' +%#/definitions/io.k8s.api.batch.v1.Job +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +string +Ë +metadata¾ +;#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +stringúR +x-kubernetes-group-version-kind/-- kind: JobList + version: v1 + group: batch + + +io.k8s.api.core.v1.EventSeriesÞ"qEventSeries contain information on series of events, i.e. thing that was/is happening continuously for some time.² +objectÊÜ +` +countWint32"BNumber of occurrences in this series up to the last heartbeat time² +integer +x +lastObservedTimed +<#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.MicroTime"$Time of the last occurrence observed +ð +"io.k8s.api.core.v1.PodAffinityTermÉ "ßDefines a set of pods (namely those matching the labelSelector relative to the given namespace(s)) that this pod should be co-located (affinity) or not co-located (anti-affinity) with, where co-located is defined as running on a node whose value of the label with key matches that of any node on which a pod of the set of pods is runningš topologyKey² +objectÊÊ + +Ž + labelSelector} +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector"9A label query over a set of resources, in this case pods. +õ +namespaceSelectorß +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector"šA label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. This field is alpha-level and is only honored when PodAffinityNamespaceSelector feature is enabled. +Å + +namespaces¶"™namespaces specifies a static list of namespace names that the term applies to. The term is applied to the union of the namespaces listed in this field and the ones selected by namespaceSelector. null or empty namespaces list and null namespaceSelector means "this pod's namespace"² +arrayº + ² +string +ö + topologyKeyæ"ØThis pod should be co-located (affinity) or not co-located (anti-affinity) with the pods matching the labelSelector in the specified namespaces, where co-located is defined as running on a node whose value of the label with key topologyKey matches that of any node on which any of the selected pods is running. Empty topologyKey is not allowed.² +string +Ï +*io.k8s.api.networking.v1.NetworkPolicyPort "6NetworkPolicyPort describes a port to allow traffic on² +objectÊÙ +™ +endPortint32"÷If set, indicates that the range of ports from port to endPort, inclusive, should be allowed by the policy. This field cannot be defined if the port field is not defined or if the port field is defined as a named (string) port. The endPort must be equal or greater than port. This feature is in Alpha state and should be enabled using the Feature Gate "NetworkPolicyEndPort".² +integer +¶ +port­ +=#/definitions/io.k8s.apimachinery.pkg.util.intstr.IntOrString"ëThe port on the given protocol. This can either be a numerical or named port on a pod. If this field is not provided, this matches all port names and numbers. If present, only traffic on the specified protocol AND port will be matched. + +protocolu"hThe protocol (TCP, UDP, or SCTP) which traffic must match. If not specified, this field defaults to TCP.² +string +å +/io.k8s.api.rbac.v1alpha1.ClusterRoleBindingList± "·ClusterRoleBindingList is a collection of ClusterRoleBindings. Deprecated in v1.17 in favor of rbac.authorization.k8s.io/v1 ClusterRoleBindings, and will no longer be served in v1.22.šitems² +objectÊâ +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +string +{ +itemsr"&Items is a list of ClusterRoleBindings² +arrayº= +; +9#/definitions/io.k8s.api.rbac.v1alpha1.ClusterRoleBinding +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +string +f +metadataZ +;#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"Standard object's metadata.ú{ +x-kubernetes-group-version-kindXV- group: rbac.authorization.k8s.io + kind: ClusterRoleBindingList + version: v1alpha1 + +Ä +"io.k8s.api.storage.v1.StorageClass"ãStorageClass describes the parameters for a class of storage for which PersistentVolumes can be dynamically provisioned. + +StorageClasses are non-namespaced; the name of the storage class according to etcd is in ObjectMeta.Name.š provisioner² +objectÊ· +n +allowVolumeExpansionV"HAllowVolumeExpansion shows whether the storage class allow volume expand² +boolean +Š +allowedTopologiesô"«Restrict the node topologies where volumes can be dynamically provisioned. Each volume plugin defines its own supported topology specifications. An empty TopologySelectorTerm list means there is no topology restriction. This field is only honored by servers that enable the VolumeScheduling feature.² +arrayº9 +7 +5#/definitions/io.k8s.api.core.v1.TopologySelectorTerm +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +string +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +string +‘ + +parameters‚"eParameters holds the parameters for the provisioner that should create volumes of this storage class.ª + ² +string² +object +Ò +metadataÅ +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"ƒStandard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata +ì + mountOptionsÛ"¾Dynamically provisioned PersistentVolumes of this storage class are created with these mountOptions, e.g. ["ro", "soft"]. Not validated - mount of the PVs will simply fail if one is invalid.² +arrayº + ² +string +N + provisioner?"2Provisioner indicates the type of the provisioner.² +string +— + reclaimPolicy…"xDynamically provisioned PersistentVolumes of this storage class are created with this reclaimPolicy. Defaults to Delete.² +string +ø +volumeBindingModeâ"ÔVolumeBindingMode indicates how PersistentVolumeClaims should be provisioned and bound. When unset, VolumeBindingImmediate is used. This field is only honored by servers that enable the VolumeScheduling feature.² +stringú` +x-kubernetes-group-version-kind=;- version: v1 + group: storage.k8s.io + kind: StorageClass + +Ò +=io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1.JSON"JSON represents any valid JSON value. These types are supported: bool, int64, float64, string, []interface{}, map[string]interface{} and nil. +Ü +,io.k8s.api.storage.v1.VolumeAttachmentStatus«"CVolumeAttachmentStatus is the status of a VolumeAttachment request.šattached² +objectÊÌ +± +attached¤"•Indicates the volume is successfully attached. This field must only be set by the entity completing the attach operation, i.e. the external-attacher.² +boolean +à +attachmentMetadata¬"ŽUpon successful attach, this field is populated with any information returned by the attach operation that must be passed into subsequent WaitForAttach or Mount calls. This field must only be set by the entity completing the attach operation, i.e. the external-attacher.ª + ² +string² +object +æ + detachErrorÖ +/#/definitions/io.k8s.api.storage.v1.VolumeError"¢The last error encountered during detach operation, if any. This field must only be set by the entity completing the detach operation, i.e. the external-attacher. +æ + attachErrorÖ +/#/definitions/io.k8s.api.storage.v1.VolumeError"¢The last error encountered during attach operation, if any. This field must only be set by the entity completing the attach operation, i.e. the external-attacher. +¹ +Eio.k8s.api.admissionregistration.v1beta1.MutatingWebhookConfigurationï "ÿMutatingWebhookConfiguration describes the configuration of and admission webhook that accept or reject and may change the object. Deprecated in v1.16, planned for removal in v1.19. Use admissionregistration.k8s.io/v1 MutatingWebhookConfiguration instead.² +objectÊ× +ƒ +webhooksö"IWebhooks is a list of webhooks and the affected resources and operations.² +arrayºJ +H +F#/definitions/io.k8s.api.admissionregistration.v1beta1.MutatingWebhookú' +x-kubernetes-patch-merge-keyname +ú' +x-kubernetes-patch-strategymerge + +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +string +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +string +Ñ +metadataÄ +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"‚Standard object metadata; More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata.úƒ +x-kubernetes-group-version-kind`^- group: admissionregistration.k8s.io + kind: MutatingWebhookConfiguration + version: v1beta1 + +å +(io.k8s.api.batch.v1beta1.JobTemplateSpec¸"QJobTemplateSpec describes the data a Job should have when created from a template² +objectÊÖ +× +specÎ +)#/definitions/io.k8s.api.batch.v1.JobSpec" Specification of the desired behavior of the job. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status +ù +metadataì +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"ªStandard object's metadata of the jobs created from this template. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata +„ +:io.k8s.api.certificates.v1.CertificateSigningRequestStatusÅ"ŽCertificateSigningRequestStatus contains conditions used to indicate approved/denied/failed status of the request, and the issued certificate.² +objectÊ¥ +Š + certificateú +byte"À +certificate is populated with an issued certificate by the signer after an Approved condition is present. This field is set via the /status subresource. Once populated, this field is immutable. + +If the certificate signing request is denied, a condition of type "Denied" is added and this field remains empty. If the signer cannot issue the certificate, a condition of type "Failed" is added and this field remains empty. + +Validation requirements: + 1. certificate must contain one or more PEM blocks. + 2. All PEM blocks must have the "CERTIFICATE" label, contain no headers, and the encoded data + must be a BER-encoded ASN.1 Certificate structure as described in section 4 of RFC5280. + 3. Non-PEM content may appear before or after the "CERTIFICATE" PEM blocks and is unvalidated, + to allow for explanatory text as described in section 5.2 of RFC7468. + +If more than one PEM block is present, and the definition of the requested spec.signerName does not indicate otherwise, the first block is the issued certificate, and subsequent blocks should be treated as intermediate certificates and presented in TLS handshakes. + +The certificate is encoded in PEM format. + +When serialized as JSON or YAML, the data is additionally base64-encoded, so it consists of: + + base64( + -----BEGIN CERTIFICATE----- + ... + -----END CERTIFICATE----- + )² +stringú# +x-kubernetes-list-type atomic + +• + +conditions†"[conditions applied to the request. Known conditions are "Approved", "Denied", and "Failed".² +arrayºO +M +K#/definitions/io.k8s.api.certificates.v1.CertificateSigningRequestConditionú' +x-kubernetes-list-map-keys - type +ú +x-kubernetes-list-typemap + +… +$io.k8s.api.coordination.v1.LeaseListÜ"%LeaseList is a list of Lease objects.šitems² +objectʹ +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +string +Ë +metadata¾ +;#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +string +l +itemsc""Items is a list of schema objects.² +arrayº2 +0 +.#/definitions/io.k8s.api.coordination.v1.Leaseúb +x-kubernetes-group-version-kind?=- group: coordination.k8s.io + kind: LeaseList + version: v1 + +å. +/io.k8s.api.policy.v1beta1.PodSecurityPolicySpec±."2PodSecurityPolicySpec defines the policy enforced.šseLinuxš runAsUseršsupplementalGroupsšfsGroup² +objectʹ- +p + hostNetworka"ShostNetwork determines if the policy allows the use of HostNetwork in the pod spec.² +boolean +´ + +runAsGroup¥ +A#/definitions/io.k8s.api.policy.v1beta1.RunAsGroupStrategyOptions"ßRunAsGroup is the strategy that will dictate the allowable RunAsGroup values that may be set. If this field is omitted, the pod's RunAsGroup can take any value. This field requires the RunAsGroup feature gate to be enabled. +² +allowedCapabilitiesš"ýallowedCapabilities is a list of capabilities that can be requested to add to the container. Capabilities in this field may be added at the pod author's discretion. You must not list a capability in both allowedCapabilities and requiredDropCapabilities.² +arrayº + ² +string +î +allowedUnsafeSysctlsÕ"¸allowedUnsafeSysctls is a list of explicitly allowed unsafe sysctls, defaults to none. Each entry is either a plain sysctl name or ends in "*" in which case it is considered as a prefix of allowed sysctls. Single * means all unsafe sysctls are allowed. Kubelet has to allowlist all allowed unsafe sysctls explicitly to avoid rejection. + +Examples: e.g. "foo/*" allows "foo/bar", "foo/baz", etc. e.g. "foo.*" allows "foo.bar", "foo.baz", etc.² +arrayº + ² +string +· +defaultAllowPrivilegeEscalation“"„defaultAllowPrivilegeEscalation controls the default setting for whether a process can gain more privileges than its parent process.² +boolean +¥ +fsGroup™ +>#/definitions/io.k8s.api.policy.v1beta1.FSGroupStrategyOptions"WfsGroup is the strategy that will dictate what fs group is used by the SecurityContext. +Í + runtimeClass¼ +C#/definitions/io.k8s.api.policy.v1beta1.RuntimeClassStrategyOptions"ôruntimeClass is the strategy that will dictate the allowable RuntimeClasses for a pod. If this field is omitted, the pod's runtimeClassName field is unrestricted. Enforcement of this field depends on the RuntimeClass feature gate being enabled. + +seLinux‘ +>#/definitions/io.k8s.api.policy.v1beta1.SELinuxStrategyOptions"OseLinux is the strategy that will dictate the allowable labels that may be set. +¥ +volumes™"}volumes is an allowlist of volume plugins. Empty indicates that no volumes may be used. To allow all volumes you may use '*'.² +arrayº + ² +string +” +allowedCSIDriversþ"²AllowedCSIDrivers is an allowlist of inline CSI drivers that must be explicitly set to be embedded within a pod spec. An empty value indicates that any CSI driver can be used for inline ephemeral volumes. This is a beta field, and is only honored if the API server enables the CSIInlineVolume feature gate.² +arrayº< +: +8#/definitions/io.k8s.api.policy.v1beta1.AllowedCSIDriver +¿ +allowedHostPathsª"`allowedHostPaths is an allowlist of host paths. Empty indicates that all host paths may be used.² +arrayº; +9 +7#/definitions/io.k8s.api.policy.v1beta1.AllowedHostPath + +forbiddenSysctlsø"ÛforbiddenSysctls is a list of explicitly forbidden sysctls, defaults to none. Each entry is either a plain sysctl name or ends in "*" in which case it is considered as a prefix of forbidden sysctls. Single * means all sysctls are forbidden. + +Examples: e.g. "foo/*" forbids "foo/bar", "foo/baz", etc. e.g. "foo.*" forbids "foo.bar", "foo.baz", etc.² +arrayº + ² +string +œ + hostPortsŽ"FhostPorts determines which host port ranges are allowed to be exposed.² +arrayº9 +7 +5#/definitions/io.k8s.api.policy.v1beta1.HostPortRange +_ + +privilegedQ"Cprivileged determines if a pod can request to be run as privileged.² +boolean +ö +readOnlyRootFilesystemÛ"ÌreadOnlyRootFilesystem when set to true will force containers to run with a read only root file system. If the container specifically requests to run with a non-read only root file system the PSP should deny the pod. If set to false the container may run with a read only root file system if it wishes but it will not be forced to.² +boolean +Ç +requiredDropCapabilitiesª"requiredDropCapabilities are the capabilities that will be dropped from the container. These are required to be dropped and cannot be added.² +arrayº + ² +string +d +hostIPCY"KhostIPC determines if the policy allows the use of HostIPC in the pod spec.² +boolean +d +hostPIDY"KhostPID determines if the policy allows the use of HostPID in the pod spec.² +boolean +­ + runAsUserŸ +@#/definitions/io.k8s.api.policy.v1beta1.RunAsUserStrategyOptions"[runAsUser is the strategy that will dictate the allowable RunAsUser values that may be set. +Ò +supplementalGroups» +I#/definitions/io.k8s.api.policy.v1beta1.SupplementalGroupsStrategyOptions"nsupplementalGroups is the strategy that will dictate what supplemental groups are used by the SecurityContext. +¤ +allowPrivilegeEscalation‡"yallowPrivilegeEscalation determines if a pod can request to allow privilege escalation. If unspecified, defaults to true.² +boolean +· +allowedFlexVolumes "ÓallowedFlexVolumes is an allowlist of Flexvolumes. Empty or nil indicates that all Flexvolumes may be used. This parameter is effective only when the usage of the Flexvolumes is allowed in the "volumes" field.² +arrayº= +; +9#/definitions/io.k8s.api.policy.v1beta1.AllowedFlexVolume +ú +allowedProcMountTypesà"ÃAllowedProcMountTypes is an allowlist of allowed ProcMountTypes. Empty or nil indicates that only the DefaultProcMountType may be used. This requires the ProcMountType feature flag to be enabled.² +arrayº + ² +string +’ +defaultAddCapabilities÷"ÚdefaultAddCapabilities is the default set of capabilities that will be added to the container unless the pod spec specifically drops the capability. You may not list a capability in both defaultAddCapabilities and requiredDropCapabilities. Capabilities added here are implicitly allowed, and need not be included in the allowedCapabilities list.² +arrayº + ² +string +Ä +$io.k8s.api.rbac.v1alpha1.ClusterRole› "ùClusterRole is a cluster level, logical grouping of PolicyRules that can be referenced as a unit by a RoleBinding or ClusterRoleBinding. Deprecated in v1.17 in favor of rbac.authorization.k8s.io/v1 ClusterRole, and will no longer be served in v1.22.² +objectÊ +¯ +aggregationRule› +6#/definitions/io.k8s.api.rbac.v1alpha1.AggregationRule"àAggregationRule is an optional field that describes how to build the Rules for this ClusterRole. If AggregationRule is set, then the Rules are controller managed and direct changes to Rules will be stomped by the controller. +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +string +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +string +h +metadata\ +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"Standard object's metadata. + +rulesx"4Rules holds all the PolicyRules for this ClusterRole² +arrayº5 +3 +1#/definitions/io.k8s.api.rbac.v1alpha1.PolicyRuleúp +x-kubernetes-group-version-kindMK- group: rbac.authorization.k8s.io + kind: ClusterRole + version: v1alpha1 + +á +"io.k8s.api.storage.v1.TokenRequestº"//.../`. Must match the name of the CustomResourceDefinition (in the form `.`). Must be all lowercase.² +string +á + +shortNamesÒ"µshortNames are short names for the resource, exposed in API discovery documents, and used by clients to support invocations like `kubectl get `. It must be all lowercase.² +arrayº + ² +string +€ +singulart"gsingular is the singular name of the resource. It must be all lowercase. Defaults to lowercased `kind`.² +string +ô + +categorieså"Ècategories is a list of grouped resources this custom resource belongs to (e.g. 'all'). This is published in API discovery documents, and used by clients to support invocations like `kubectl get all`.² +arrayº + ² +string +¾ +kindµ"§kind is the serialized kind of the resource. It is normally CamelCase and singular. Custom resource instances will use this value as the `kind` attribute in API calls.² +string +¬ +;io.k8s.api.admissionregistration.v1beta1.RuleWithOperationsì "‚RuleWithOperations is a tuple of Operations and Resources. It is recommended to make sure that all the tuple expansions are valid.² +objectÊØ +£ +scope™"‹scope specifies the scope of this rule. Valid values are "Cluster", "Namespaced", and "*" "Cluster" means that only cluster-scoped resources will match this rule. Namespace API objects are cluster-scoped. "Namespaced" means that only namespaced resources will match this rule. "*" means that there are no scope restrictions. Subresources match the scope of their parent resource. Default is "*".² +string +´ + apiGroups¦"‰APIGroups is the API groups the resources belong to. '*' is all groups. If '*' is present, the length of the slice must be one. Required.² +arrayº + ² +string +¼ + apiVersions¬"APIVersions is the API versions the resources belong to. '*' is all versions. If '*' is present, the length of the slice must be one. Required.² +arrayº + ² +string +  + +operations‘"ôOperations is the operations the admission hook cares about - CREATE, UPDATE, DELETE, CONNECT or * for all of those operations and any future admission operations that are added. If '*' is present, the length of the slice must be one. Required.² +arrayº + ² +string +– + resourcesˆ"ëResources is a list of resources this rule applies to. + +For example: 'pods' means pods. 'pods/log' means the log subresource of pods. '*' means all resources, but not subresources. 'pods/*' means all subresources of pods. '*/scale' means all scale subresources. '*/*' means all resources and their subresources. + +If wildcard is present, the validation rule will ensure resources do not overlap with each other. + +Depending on the enclosing object, subresources might not be allowed. Required.² +arrayº + ² +string +È +&io.k8s.api.apps.v1.DeploymentCondition"KDeploymentCondition describes the state of a deployment at a certain point.štypešstatus² +objectʱ +‘ +lastTransitionTime{ +7#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"@Last time the condition transitioned from one status to another. +v +lastUpdateTimed +7#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time")The last time this condition was updated. +Y +messageN"AA human readable message indicating details about the transition.² +string +F +reason<"/The reason for the condition's last transition.² +string +L +statusB"5Status of the condition, one of True, False, Unknown.² +string +2 +type*"Type of deployment condition.² +string +² +=io.k8s.api.certificates.v1beta1.CertificateSigningRequestSpecð"¾This information is immutable after the request is created. Only the Request and Usages fields can be set on creation, other fields are derived by Kubernetes and cannot be modified by users.šrequest² +objectÊ– +† +extra}"QExtra information about the requesting user. See user.Info interface for details.ª +² +arrayº + ² +string² +object +ž +groups“"QGroup information about the requesting user. See user.Info interface for details.² +arrayº + ² +stringú# +x-kubernetes-list-type atomic + +c +requestXbyte"Base64-encoded PKCS#10 CSR data² +stringú# +x-kubernetes-list-type atomic + +’ + +signerNameƒ"õRequested signer for the request. It is a qualified name in the form: `scope-hostname.io/name`. If empty, it will be defaulted: + 1. If it's a kubelet client certificate, it is assigned + "kubernetes.io/kube-apiserver-client-kubelet". + 2. If it's a kubelet serving certificate, it is assigned + "kubernetes.io/kubelet-serving". + 3. Otherwise, it is assigned "kubernetes.io/legacy-unknown". +Distribution of trust for signers happens out of band. You can select on this field using `spec.signerName`.² +string +c +uid\"OUID information about the requesting user. See user.Info interface for details.² +string +¤ +usages™"ÖallowedUsages specifies a set of usage contexts the key will be valid for. See: https://tools.ietf.org/html/rfc5280#section-4.2.1.3 + https://tools.ietf.org/html/rfc5280#section-4.2.1.12 +Valid values are: + "signing", + "digital signature", + "content commitment", + "key encipherment", + "key agreement", + "data encipherment", + "cert sign", + "crl sign", + "encipher only", + "decipher only", + "any", + "server auth", + "client auth", + "code signing", + "email protection", + "s/mime", + "ipsec end system", + "ipsec tunnel", + "ipsec user", + "timestamping", + "ocsp signing", + "microsoft sgc", + "netscape sgc"² +arrayº + ² +stringú# +x-kubernetes-list-type atomic + +d +usernameX"KInformation about the requesting user. See user.Info interface for details.² +string +þ +io.k8s.api.core.v1.Bindingß "¡Binding ties one object to another; for example, a pod is bound to a node by a scheduler. Deprecated in 1.7, please use the bindings subresource of pods instead.štarget² +objectÊÑ +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +string +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +string +Ò +metadataÅ +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"ƒStandard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata +} +targets +0#/definitions/io.k8s.api.core.v1.ObjectReference"?The target object that you want to bind to the standard object.úO +x-kubernetes-group-version-kind,*- group: "" + kind: Binding + version: v1 + +í[ +io.k8s.api.core.v1.PodSpecÎ[""PodSpec is a description of a pod.š +containers² +objectÊŽ[ +À + hostNetwork°"¡Host networking requested for this pod. Use the host's network namespace. If this option is set, the ports that will be used must be specified. Default to false.² +boolean +Ô +nodeNameÇ"¹NodeName is a request to schedule this pod onto a specific node. If it is non-empty, the scheduler simply schedules this pod onto that node, assuming that it fits resource requirements.² +string +ð +overheadã"“Overhead represents the resource overhead associated with running a pod for a given RuntimeClass. This field will be autopopulated at admission time by the RuntimeClass admission controller. If the RuntimeClass admission controller is enabled, overhead must not be set in Pod create requests. The RuntimeClass admission controller will reject Pod create requests which have the overhead already set. If RuntimeClass is configured and selected in the PodSpec, Overhead will be set to the value defined in the corresponding RuntimeClass, otherwise it will remain unset and treated as zero. More info: https://git.k8s.io/enhancements/keps/sig-node/20190226-pod-overhead.md This field is alpha-level as of Kubernetes v1.16, and is only honored by servers that enable the PodOverhead feature.ª? += +;#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity² +object +„ +preemptionPolicyï"áPreemptionPolicy is the Policy for preempting pods with lower priority. One of Never, PreemptLowerPriority. Defaults to PreemptLowerPriority if unset. This field is beta-level, gated by the NonPreemptingPriority feature-gate.² +string +ó +readinessGatesà"›If specified, all readiness gates will be evaluated for pod readiness. A pod is ready when all its containers are ready AND all conditions specified in the readiness gates have status equal to "True" More info: https://git.k8s.io/enhancements/keps/sig-network/0007-pod-ready%2B%2B.md² +arrayº5 +3 +1#/definitions/io.k8s.api.core.v1.PodReadinessGate +£ + schedulerName‘"ƒIf specified, the pod will be dispatched by specified scheduler. If not specified, the pod will be dispatched by default scheduler.² +string +Ï +priorityÂint32"¬The priority value. Various system components use this field to find the priority of the pod. When Priority Admission Controller is enabled, it prevents users from setting this field. The admission controller populates this field from PriorityClassName. The higher the value, the higher the priority.² +integer +” +priorityClassNameþ"ðIf specified, indicates the pod's priority. "system-node-critical" and "system-cluster-critical" are two special keywords which indicate the highest priorities with the former being the highest priority. Any other name must be defined by creating a PriorityClass object with that name. If not specified, the pod priority will be default or zero if there is no default.² +string +á + restartPolicyÏ"ÁRestart policy for all containers within the pod. One of Always, OnFailure, Never. Default to Always. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle/#restart-policy² +string +Î + subdomainÀ"²If specified, the fully qualified Pod hostname will be "...svc.". If not specified, the pod will not have a domainname at all.² +string +g +affinity[ +)#/definitions/io.k8s.api.core.v1.Affinity".If specified, the pod's scheduling constraints +Æ + dnsConfig¸ +-#/definitions/io.k8s.api.core.v1.PodDNSConfig"†Specifies the DNS parameters of a pod. Parameters specified here will be merged to the generated DNS configuration based on DNSPolicy. +R +hostPIDG"9Use the host's pid namespace. Optional: Default to false.² +boolean +† +hostnamez"mSpecifies the hostname of the Pod If not specified, the pod's hostname will be set to a system-defined value.² +string +Ð +serviceAccountName¹"«ServiceAccountName is the name of the ServiceAccount to use to run this pod. More info: https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/² +string +ô +shareProcessNamespaceÚ"ËShare a single process namespace between all of the containers in a pod. When this is set containers will be able to view and signal processes from other containers in the same pod, and the first process in each container will not be assigned PID 1. HostPID and ShareProcessNamespace cannot both be set. Optional: Default to false.² +boolean +q + tolerationsb"$If specified, the pod's tolerations.² +arrayº/ +- ++#/definitions/io.k8s.api.core.v1.Toleration +» + hostAliases«"›HostAliases is an optional list of hosts and IPs that will be injected into the pod's hosts file if specified. This is only valid for non-hostNetwork pods.² +arrayº. +, +*#/definitions/io.k8s.api.core.v1.HostAliasú% +x-kubernetes-patch-merge-keyip +ú' +x-kubernetes-patch-strategymerge + +R +hostIPCG"9Use the host's ipc namespace. Optional: Default to false.² +boolean +û +setHostnameAsFQDNå"ÖIf true the pod's hostname will be configured as the pod's FQDN, rather than the leaf name (the default). In Linux containers, this means setting the FQDN in the hostname field of the kernel (the nodename field of struct utsname). In Windows containers, this means setting the registry value of hostname for the registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters to FQDN. If a pod does not have FQDN, this has no effect. Default to false.² +boolean +¬ +volumes "†List of volumes that can be mounted by containers belonging to the pod. More info: https://kubernetes.io/docs/concepts/storage/volumes² +arrayº+ +) +'#/definitions/io.k8s.api.core.v1.Volumeú' +x-kubernetes-patch-merge-keyname +ú2 +x-kubernetes-patch-strategymerge,retainKeys + +• +automountServiceAccountTokenu"gAutomountServiceAccountToken indicates whether a service account token should be automatically mounted.² +boolean +ö + dnsPolicyè"ÚSet DNS policy for the pod. Defaults to "ClusterFirst". Valid values are 'ClusterFirstWithHostNet', 'ClusterFirst', 'Default' or 'None'. DNS parameters given in DNSConfig will be merged with the policy selected with DNSPolicy. To have DNS options set along with hostNetwork, you have to specify DNS policy explicitly to 'ClusterFirstWithHostNet'.² +string +Û +enableServiceLinksÄ"µEnableServiceLinks indicates whether information about services should be injected into pod's environment variables, matching the syntax of Docker links. Optional: Defaults to true.² +boolean +× +imagePullSecretsÂ"¥ImagePullSecrets is an optional list of references to secrets in the same namespace to use for pulling any of the images used by this PodSpec. If specified, these secrets will be passed to individual puller implementations for them to use. For example, in the case of docker, only DockerConfig type secrets are honored. More info: https://kubernetes.io/docs/concepts/containers/images#specifying-imagepullsecrets-on-a-pod² +arrayº9 +7 +5#/definitions/io.k8s.api.core.v1.LocalObjectReferenceú' +x-kubernetes-patch-merge-keyname +ú' +x-kubernetes-patch-strategymerge + +‰ +initContainersö"äList of initialization containers belonging to the pod. Init containers are executed in order prior to containers being started. If any init container fails, the pod is considered to have failed and is handled according to its restartPolicy. The name for an init container or normal container must be unique among all containers. Init containers may not have Lifecycle actions, Readiness probes, Liveness probes, or Startup probes. The resourceRequirements of an init container are taken into account during scheduling by finding the highest request/limit for each resource type, and then using the max of of that value or the sum of the normal containers. Limits are applied to init containers in a similar fashion. Init containers cannot currently be added or removed. Cannot be updated. More info: https://kubernetes.io/docs/concepts/workloads/pods/init-containers/² +arrayº. +, +*#/definitions/io.k8s.api.core.v1.Containerú' +x-kubernetes-patch-merge-keyname +ú' +x-kubernetes-patch-strategymerge + +œ + nodeSelector‹"íNodeSelector is a selector which must be true for the pod to fit on a node. Selector which must match a node's labels for the pod to be scheduled on that node. More info: https://kubernetes.io/docs/concepts/configuration/assign-pod-node/ª + ² +string² +object +ó +securityContextß +3#/definitions/io.k8s.api.core.v1.PodSecurityContext"§SecurityContext holds pod-level security attributes and common container settings. Optional: Defaults to empty. See type description for default values of each field. +“ +serviceAccount€"sDeprecatedServiceAccount is a depreciated alias for ServiceAccountName. Deprecated: Use serviceAccountName instead.² +string +ý +terminationGracePeriodSecondsÛint64"ÅOptional duration in seconds the pod needs to terminate gracefully. May be decreased in delete request. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). If this value is nil, the default grace period will be used instead. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. Defaults to 30 seconds.² +integer +ÿ +ephemeralContainersç"ÌList of ephemeral containers run in this pod. Ephemeral containers may be run in an existing pod to perform user-initiated actions such as debugging. This list cannot be specified when creating a pod, and it cannot be modified by updating the pod spec. In order to add an ephemeral container to an existing pod, use the pod's ephemeralcontainers subresource. This field is alpha-level and is only honored by servers that enable the EphemeralContainers feature.² +arrayº7 +5 +3#/definitions/io.k8s.api.core.v1.EphemeralContainerú' +x-kubernetes-patch-merge-keyname +ú' +x-kubernetes-patch-strategymerge + +ü +activeDeadlineSecondsâint64"ÌOptional duration in seconds the pod may be active on the node relative to StartTime before the system will actively try to mark it failed and kill associated containers. Value must be a positive integer.² +integer +¼ + +containers­"›List of containers belonging to the pod. Containers cannot currently be added or removed. There must be at least one container in a Pod. Cannot be updated.² +arrayº. +, +*#/definitions/io.k8s.api.core.v1.Containerú' +x-kubernetes-patch-merge-keyname +ú' +x-kubernetes-patch-strategymerge + +ñ +runtimeClassNameÜ"ÎRuntimeClassName refers to a RuntimeClass object in the node.k8s.io group, which should be used to run this pod. If no RuntimeClass resource matches the named class, the pod will not be run. If unset or empty, the "legacy" RuntimeClass will be used, which is an implicit class with an empty definition that uses the default runtime handler. More info: https://git.k8s.io/enhancements/keps/sig-node/runtime-class.md This is a beta feature as of Kubernetes v1.14.² +string +þ +topologySpreadConstraintsà"ÐTopologySpreadConstraints describes how a group of pods ought to spread across topology domains. Scheduler will schedule pods in a way which abides by the constraints. All topologySpreadConstraints are ANDed.² +arrayº= +; +9#/definitions/io.k8s.api.core.v1.TopologySpreadConstraintúB +x-kubernetes-list-map-keys$"- topologyKey +- whenUnsatisfiable +ú +x-kubernetes-list-typemap +ú. +x-kubernetes-patch-merge-key topologyKey +ú' +x-kubernetes-patch-strategymerge + +¯ +io.k8s.api.rbac.v1.Subject"ÆSubject contains a reference to the object or user identities a role binding applies to. This can either hold a direct API object reference, or a value for non-objects such as user and group names.škindšname² +objectʪ +à +apiGroup¶"¨APIGroup holds the API group of the referenced subject. Defaults to "" for ServiceAccount subjects. Defaults to "rbac.authorization.k8s.io" for User and Group subjects.² +string +à +kind×"ÉKind of object being referenced. Values defined by this API group are "User", "Group", and "ServiceAccount". If the Authorizer does not recognized the kind value, the Authorizer should report an error.² +string +9 +name1"$Name of the object being referenced.² +string +à + namespaceµ"§Namespace of the referenced object. If the object kind is non-namespace, such as "User" or "Group", and this value is not empty the Authorizer should report an error.² +string +ˆ +-io.k8s.apimachinery.pkg.apis.meta.v1.APIGroupÖ"YAPIGroup contains the name, the supported versions, and the preferred version of a group.šnamešversions² +objectʇ + +versions"2versions are the versions supported in this group.² +arrayºO +M +K#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.GroupVersionForDiscovery +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +string +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +string +3 +name+"name is the name of the group.² +string +Ç +preferredVersion² +K#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.GroupVersionForDiscovery"cpreferredVersion is the version preferred by the API server, which probably is the storage version. +è +serverAddressByClientCIDRsÉ"éa map of client CIDR to server address that is serving this group. This is to help clients reach servers in the most network-efficient way possible. Clients can use the appropriate server address as per the CIDR that they match. In case of multiple matches, clients should use the longest matching CIDR. The server returns only those CIDRs that it thinks that the client can match. For example: the master will return an internal IP CIDR only, if the client reaches the server using an internal IP. Server looks at X-Forwarded-For header or X-Real-Ip header or request.RemoteAddr (in that order) to get the client IP.² +arrayºP +N +L#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ServerAddressByClientCIDRúP +x-kubernetes-group-version-kind-+- group: "" + kind: APIGroup + version: v1 + +ð +8io.k8s.api.authorization.v1beta1.SelfSubjectAccessReview³ "öSelfSubjectAccessReview checks whether or the current user can perform an action. Not filling in a spec.namespace means "in all namespaces". Self is a special case, because users should always be able to check whether they can perform an actionšspec² +objectÊ« +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +string +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +string +K +metadata? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta +¯ +spec¦ +J#/definitions/io.k8s.api.authorization.v1beta1.SelfSubjectAccessReviewSpec"XSpec holds information about the request being evaluated. user and groups must be empty +¬ +status¡ +H#/definitions/io.k8s.api.authorization.v1beta1.SubjectAccessReviewStatus"UStatus is filled in by the server and indicates whether the request is allowed or notúv +x-kubernetes-group-version-kindSQ- group: authorization.k8s.io + kind: SelfSubjectAccessReview + version: v1beta1 + +Ÿ +3io.k8s.api.autoscaling.v2beta1.ExternalMetricStatusç"nExternalMetricStatus indicates the current value of a global metric not associated with any Kubernetes object.š +metricNameš currentValue² +objectÊÌ +Ž + currentValue~ +;#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity"?currentValue is the current value of the metric (as a quantity) +d + +metricNameV"ImetricName is the name of a metric used for autoscaling in metric system.² +string +§ +metricSelector” +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector"PmetricSelector is used to identify a specific time series within a given metric. +¨ +currentAverageValue +;#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity"QcurrentAverageValue is the current value of metric averaged over autoscaled pods. +Ž + +io.k8s.api.core.v1.NodeSpecî ">NodeSpec describes the attributes that a node is created with.² +objectÊŸ +Ö + configSourceÅ +1#/definitions/io.k8s.api.core.v1.NodeConfigSource"If specified, the source to get node configuration from The DynamicKubeletConfig feature gate must be enabled for the Kubelet to use this field +† + +externalIDx"kDeprecated. Not all kubelets will set this field. Remove field after 1.13. see: https://issues.k8s.io/61966² +string +Q +podCIDRF"9PodCIDR represents the pod IP range assigned to the node.² +string +¬ +podCIDRsŸ"ØpodCIDRs represents the IP ranges assigned to the node for usage by Pods on that node. If this field is specified, the 0th entry must match the podCIDR field. It may contain at most 1 value for each of IPv4 and IPv6.² +arrayº + ² +stringú' +x-kubernetes-patch-strategymerge + + + +providerIDs"fID of the node assigned by the cloud provider in the format: ://² +string +c +taintsY" If specified, the node's taints.² +arrayº* +( +&#/definitions/io.k8s.api.core.v1.Taint +Ï + unschedulable½"®Unschedulable controls node schedulability of new pods. By default, node is schedulable. More info: https://kubernetes.io/docs/concepts/nodes/node/#manual-node-administration² +boolean + +io.k8s.api.core.v1.Probeä"€Probe describes a health check to be performed against a container to determine whether it is alive or ready to receive traffic.² +objectÊÒ +§ +failureThreshold’int32"}Minimum consecutive failures for the probe to be considered failed after having succeeded. Defaults to 3. Minimum value is 1.² +integer +k +httpGet` +.#/definitions/io.k8s.api.core.v1.HTTPGetAction".HTTPGet specifies the http request to perform. +‘ + tcpSocketƒ +0#/definitions/io.k8s.api.core.v1.TCPSocketAction"OTCPSocket specifies an action involving a TCP port. TCP hooks not yet supported +ö +terminationGracePeriodSecondsÔint64"¾Optional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is an alpha field and requires enabling ProbeTerminationGracePeriod feature gate.² +integer +â +timeoutSecondsÏint32"¹Number of seconds after which the probe times out. Defaults to 1 second. Minimum value is 1. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes² +integer +‘ +execˆ ++#/definitions/io.k8s.api.core.v1.ExecAction"YOne and only one of the following should be specified. Exec specifies the action to take. +â +initialDelaySecondsÊint32"´Number of seconds after the container has started before liveness probes are initiated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes² +integer +} + periodSecondslint32"WHow often (in seconds) to perform the probe. Default to 10 seconds. Minimum value is 1.² +integer +Î +successThreshold¹int32"£Minimum consecutive successes for the probe to be considered successful after having failed. Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.² +integer +¤ + +=io.k8s.api.flowcontrol.v1beta1.PriorityLevelConfigurationListâ "OPriorityLevelConfigurationList is a list of PriorityLevelConfiguration objects.šitems² +objectÊñ +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +string +Œ +items‚"(`items` is a list of request-priorities.² +arrayºK +I +G#/definitions/io.k8s.api.flowcontrol.v1beta1.PriorityLevelConfiguration +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +string +â +metadataÕ +;#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"•`metadata` is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadataú… +x-kubernetes-group-version-kindb`- group: flowcontrol.apiserver.k8s.io + kind: PriorityLevelConfigurationList + version: v1beta1 + +Ô +,io.k8s.api.scheduling.v1alpha1.PriorityClass£"áDEPRECATED - This group version of PriorityClass is deprecated by scheduling.k8s.io/v1/PriorityClass. PriorityClass defines mapping from a priority class name to the priority integer value. The value can be any valid integer.švalue² +objectÊ» +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +string +Ò +metadataÅ +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"ƒStandard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata +„ +preemptionPolicyï"áPreemptionPolicy is the Policy for preempting pods with lower priority. One of Never, PreemptLowerPriority. Defaults to PreemptLowerPriority if unset. This field is beta-level, gated by the NonPreemptingPriority feature-gate.² +string +¨ +valuežint32"ˆThe value of this priority class. This is the actual priority that pods receive when they have the name of this class in their pod spec.² +integer +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +string +‹ + description|"odescription is an arbitrary string that usually provides guidelines on when this priority class should be used.² +string +¦ + globalDefault”"…globalDefault specifies whether this PriorityClass should be considered as the default priority for pods that do not have any priority class. Only one PriorityClass can be marked as `globalDefault`. However, if more than one PriorityClasses exists with their `globalDefault` field set to true, the smallest value of such global default PriorityClasses will be used as the default priority.² +booleanúj +x-kubernetes-group-version-kindGE- group: scheduling.k8s.io + kind: PriorityClass + version: v1alpha1 + +  +)io.k8s.api.storage.v1.VolumeNodeResourcesò"JVolumeNodeResources is a set of resource limits for scheduling of volumes.² +objectÊ— +” +countŠint32"ôMaximum number of unique volumes managed by the CSI driver that can be used on a node. A volume that is both attached and mounted on a node is considered to be used once, not twice. The same rule applies for a unique volume that is shared among multiple pods on the same node. If this field is not specified, then the supported number of volumes on this node is unbounded.² +integer +¼ +(io.k8s.api.core.v1.ReplicationController"OReplicationController represents the configuration of a replication controller.² +objectÊÏ +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +string +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +string +ß +metadataÒ +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"If the Labels of a ReplicationController are empty, they are defaulted to be the same as the Pod(s) that the replication controller manages. Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata +Œ +specƒ +:#/definitions/io.k8s.api.core.v1.ReplicationControllerSpec"ÄSpec defines the specification of the desired behavior of the replication controller. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status +Þ +statusÓ +<#/definitions/io.k8s.api.core.v1.ReplicationControllerStatus"’Status is the most recently observed status of the replication controller. This data may be out of date by some window of time. Populated by the system. Read-only. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-statusú] +x-kubernetes-group-version-kind:8- group: "" + kind: ReplicationController + version: v1 + +º + +#/definitions/io.k8s.api.autoscaling.v2beta2.MetricValueStatus"7current contains the current value for the given metric +B +name:"-Name is the name of the resource in question.² +string +² + io.k8s.api.core.v1.NodeCondition"8NodeCondition contains condition information for a node.štypešstatus² +objectÊ´ +J +reason@"3(brief) reason for the condition's last transition.² +string +L +statusB"5Status of the condition, one of True, False, Unknown.² +string +, +type$"Type of node condition.² +string +€ +lastHeartbeatTimek +7#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"0Last time we got an update on a given condition. +Œ +lastTransitionTimev +7#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time";Last time the condition transit from one status to another. +X +messageM"@Human readable message indicating details about last transition.² +string +â +'io.k8s.api.core.v1.PersistentVolumeList¶ "9PersistentVolumeList is a list of PersistentVolume items.šitems² +objectÊ… +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +string +³ +items©"eList of persistent volumes. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes² +arrayº5 +3 +1#/definitions/io.k8s.api.core.v1.PersistentVolume +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +string +Ï +metadata +;#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"‚Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kindsú\ +x-kubernetes-group-version-kind97- group: "" + kind: PersistentVolumeList + version: v1 + +ë +%io.k8s.api.core.v1.ServiceAccountListÁ "6ServiceAccountList is a list of ServiceAccount objectsšitems² +objectÊ• +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +string +à +items¹"wList of ServiceAccounts. More info: https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/² +arrayº3 +1 +/#/definitions/io.k8s.api.core.v1.ServiceAccount +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +string +Ï +metadata +;#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"‚Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kindsúZ +x-kubernetes-group-version-kind75- group: "" + kind: ServiceAccountList + version: v1 + +† +io.k8s.api.core.v1.ServicePortã"3ServicePort contains information on service's port.šport² +objectʘ +½ + appProtocol­"ŸThe application protocol for this port. This field follows standard Kubernetes label syntax. Un-prefixed names are reserved for IANA standard service names (as per RFC-6335 and http://www.iana.org/assignments/service-names). Non-standard protocols should use prefixed names such as mycompany.com/my-custom-protocol. This is a beta field that is guarded by the ServiceAppProtocol feature gate and enabled by default.² +string +² +name©"›The name of this port within the service. This must be a DNS_LABEL. All ports within a ServiceSpec must have unique names. When considering the endpoints for a Service, this must match the 'name' field in the EndpointPort. Optional if only one ServicePort is defined on this service.² +string +‚ +nodePortõint32"ßThe port on each node on which this service is exposed when type is NodePort or LoadBalancer. Usually assigned by the system. If a value is specified, in-range, and not in use it will be used, otherwise the operation will fail. If not specified, a port will be allocated if this Service requires one. If this field is specified when creating a Service which does not need it, creation will fail. This field will be wiped when updating a Service to no longer need it (e.g. changing type from NodePort to ClusterIP). More info: https://kubernetes.io/docs/concepts/services-networking/service/#type-nodeport² +integer +K +portCint32".The port that will be exposed by this service.² +integer +j +protocol^"QThe IP protocol for this port. Supports "TCP", "UDP", and "SCTP". Default is TCP.² +string +â + +targetPortÓ +=#/definitions/io.k8s.apimachinery.pkg.util.intstr.IntOrString"‘Number or name of the port to access on the pods targeted by the service. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME. If this is a string, it will be looked up as a named port in the target Pod's container ports. If this is not specified, the value of the 'port' field is used (an identity map). This field is ignored for services with clusterIP=None, and should be omitted or set equal to the 'port' field. More info: https://kubernetes.io/docs/concepts/services-networking/service/#defining-a-service +³ +'io.k8s.api.rbac.v1beta1.RoleBindingList‡ "¤RoleBindingList is a collection of RoleBindings Deprecated in v1.17 in favor of rbac.authorization.k8s.io/v1 RoleBindingList, and will no longer be served in v1.22.šitems² +objectÊÓ +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +string +l +itemsc"Items is a list of RoleBindings² +arrayº5 +3 +1#/definitions/io.k8s.api.rbac.v1beta1.RoleBinding +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +string +f +metadataZ +;#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"Standard object's metadata.ús +x-kubernetes-group-version-kindPN- group: rbac.authorization.k8s.io + kind: RoleBindingList + version: v1beta1 + +á + +4io.k8s.api.apiserverinternal.v1alpha1.StorageVersion¨ +") + Storage version of a specific resource.šspecšstatus² +objectÊè +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +string +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +string +l +metadata` +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"The name is .. +™ +spec +F#/definitions/io.k8s.api.apiserverinternal.v1alpha1.StorageVersionSpec"FSpec is an empty spec. It is here to comply with Kubernetes API style. +Þ +statusÓ +H#/definitions/io.k8s.api.apiserverinternal.v1alpha1.StorageVersionStatus"†API server instances report the version they can decode and the version they encode objects to when persisting objects in the backend.ús +x-kubernetes-group-version-kindPN- group: internal.apiserver.k8s.io + kind: StorageVersion + version: v1alpha1 + +ã +io.k8s.api.core.v1.Namespace "MNamespace provides a scope for Names. Use of multiple namespaces is optional.² +objectÊ + +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +string +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +string +Ò +metadataÅ +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"ƒStandard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata +Ö +specÍ +.#/definitions/io.k8s.api.core.v1.NamespaceSpec"šSpec defines the behavior of the Namespace. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status +â +status× +0#/definitions/io.k8s.api.core.v1.NamespaceStatus"¢Status describes the current status of a Namespace. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-statusúQ +x-kubernetes-group-version-kind.,- group: "" + kind: Namespace + version: v1 + + +1io.k8s.api.core.v1.PersistentVolumeClaimConditionÙ"BPersistentVolumeClaimCondition contails details about state of pvcštypešstatus² +objectÊö + +status ² +string + +type ² +string +n + lastProbeTime] +7#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time""Last time we probed the condition. +‘ +lastTransitionTime{ +7#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"@Last time the condition transitioned from one status to another. +X +messageM"@Human-readable message indicating details about last transition.² +string +é +reasonÞ"ÐUnique, this should be a short, machine understandable string that gives the reason for condition's last transition. If it reports "ResizeStarted" that means the underlying persistent volume is being resized.² +string +– +'io.k8s.api.core.v1.PortworxVolumeSourceê";PortworxVolumeSource represents a Portworx volume resource.švolumeID² +objectÊ“ +x +readOnlyl"^Defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts.² +boolean +G +volumeID;".VolumeID uniquely identifies a Portworx volume² +string +Í +fsTypeÂ"´FSType represents the filesystem type to mount Must be a filesystem type supported by the host operating system. Ex. "ext4", "xfs". Implicitly inferred to be "ext4" if unspecified.² +string +Þ + io.k8s.api.events.v1.EventSeries¹"èEventSeries contain information on series of events, i.e. thing that was/is happening continuously for some time. How often to update the EventSeries is up to the event reporters. The default event reporter in "k8s.io/client-go/tools/events/event_broadcaster.go" shows how this struct is updated on heartbeats and can guide customized reporter implementations.šcountšlastObservedTime² +objectʤ +n +counteint32"Pcount is the number of occurrences in this series up to the last heartbeat time.² +integer +± +lastObservedTimeœ +<#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.MicroTime"\lastObservedTime is the time when last Event from the series was seen before last heartbeat. +› +2io.k8s.api.policy.v1beta1.RunAsUserStrategyOptionsä"_RunAsUserStrategyOptions defines the strategy type and any options used to create the strategy.šrule² +objectÊí +k +rulec"Vrule is the strategy that will dictate the allowable RunAsUser values that may be set.² +string +ý +rangesò"¯ranges are the allowed ranges of uids that may be used. If you would like to force a single uid then supply a single range with the same start and end. Required for MustRunAs.² +arrayº3 +1 +/#/definitions/io.k8s.api.policy.v1beta1.IDRange +ª +Aio.k8s.kube-aggregator.pkg.apis.apiregistration.v1.APIServiceListä"/APIServiceList is a list of APIService objects.šitems² +objectʯ +e +items\² +arrayºO +M +K#/definitions/io.k8s.kube-aggregator.pkg.apis.apiregistration.v1.APIService +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +string +I +metadata= +;#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +stringúj +x-kubernetes-group-version-kindGE- version: v1 + group: apiregistration.k8s.io + kind: APIServiceList + +ú +"1metricName is the name of the metric in question.² +string +§ +metricSelector” +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector"PmetricSelector is used to identify a specific time series within a given metric. +Ë +targetAverageValue´ +;#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity"utargetAverageValue is the target per-pod value of global metric (as a quantity). Mutually exclusive with TargetValue. +… +6io.k8s.api.autoscaling.v2beta1.HorizontalPodAutoscalerÊ "ÎHorizontalPodAutoscaler is the configuration for a horizontal pod autoscaler, which automatically manages the replica count of any resource implementing the scale subresource based on the metrics specified.² +objectÊú +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +string +à +metadataÓ +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"‘metadata is the standard object metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata +„ +specû +H#/definitions/io.k8s.api.autoscaling.v2beta1.HorizontalPodAutoscalerSpec"®spec is the specification for the behaviour of the autoscaler. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status. + +status… +J#/definitions/io.k8s.api.autoscaling.v2beta1.HorizontalPodAutoscalerStatus"7status is the current information about the autoscaler. +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +stringúm +x-kubernetes-group-version-kindJH- group: autoscaling + kind: HorizontalPodAutoscaler + version: v2beta1 + +Æ +&io.k8s.api.core.v1.ObjectFieldSelector›"?ObjectFieldSelector selects an APIVersioned field of an object.š fieldPath² +objectÊ¿ +h + +apiVersionZ"MVersion of the schema the FieldPath is written in terms of, defaults to "v1".² +string +S + fieldPathF"9Path of the field to select in the specified API version.² +string +¯ +$io.k8s.api.discovery.v1.EndpointPort† "7EndpointPort represents a Port used by an EndpointSlice² +objectʾ +³ +portªint32"”The port number of the endpoint. If this is not specified, ports are not restricted and must be interpreted in the context of the specific consumer.² +integer +b +protocolV"IThe IP protocol for this port. Must be UDP, TCP, or SCTP. Default is TCP.² +string +Ù + appProtocolÉ"»The application protocol for this port. This field follows standard Kubernetes label syntax. Un-prefixed names are reserved for IANA standard service names (as per RFC-6335 and http://www.iana.org/assignments/service-names). Non-standard protocols should use prefixed names such as mycompany.com/my-custom-protocol.² +string +Å +name¼"®The name of this port. All ports in an EndpointSlice must have a unique name. If the EndpointSlice is dervied from a Kubernetes service, this corresponds to the Service.ports[].name. Name must either be an empty string or pass DNS_LABEL validation: * must be no more than 63 characters long. * must consist of lower case alphanumeric characters or '-'. * must start and end with an alphanumeric character. Default is empty string.² +string +¿ +'io.k8s.api.rbac.v1beta1.AggregationRule“"VAggregationRule describes how to locate ClusterRoles to aggregate into the ClusterRole² +objectʬ +© +clusterRoleSelectors"¼ClusterRoleSelectors holds a list of selectors which will be used to find ClusterRoles and create the rules. If any of the selectors match, then the ClusterRole's permissions will be added² +arrayºD +B +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector + +Lio.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1.WebhookClientConfig¼ "WWebhookClientConfig contains the information to make a TLS connection with the webhook.² +objectÊÔ +à +caBundle¶byte"¢caBundle is a PEM encoded CA bundle which will be used to validate the webhook's server certificate. If unspecified, system trust roots on the apiserver are used.² +string +– +serviceŠ +W#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1.ServiceReference"®service is a reference to the service for this webhook. Either service or url must be specified. + +If the webhook is running within the cluster, then you should use `service`. +ò +urlê"Üurl gives the location of the webhook, in standard URL form (`scheme://host:port/path`). Exactly one of `url` or `service` must be specified. + +The `host` should not refer to a service running in the cluster; use the `service` field instead. The host might be resolved via external DNS in some apiservers (e.g., `kube-apiserver` cannot resolve in-cluster DNS as that would be a layering violation). `host` may also be an IP address. + +Please note that using `localhost` or `127.0.0.1` as a `host` is risky unless you take great care to run this webhook on all hosts which run an apiserver which might need to make calls to this webhook. Such installs are likely to be non-portable, i.e., not easy to turn up in a new cluster. + +The scheme must be "https"; the URL must begin with "https://". + +A path is optional, and if present may be any string permissible in a URL. You may use the path to pass an arbitrary string to the webhook, for example, a cluster identifier. + +Attempting to use a user or basic auth e.g. "user:password@" is not allowed. Fragments ("#...") and query parameters ("?...") are not allowed, either.² +string +µ +]io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1beta1.CustomResourceSubresourceStatusÓ"ÅCustomResourceSubresourceStatus defines how to serve the status subresource for CustomResources. Status is represented by the `.status` JSON path inside of a CustomResource. When set, * exposes a /status subresource for the custom resource * PUT requests to the /status subresource take a custom resource object, and ignore changes to anything except the status stanza * PUT/POST/PATCH requests to the custom resource ignore changes to the status stanza² +object +“ +;io.k8s.api.authorization.v1beta1.SelfSubjectRulesReviewSpecT² +objectÊF +D + namespace7"*Namespace to evaluate rules for. Required.² +string +© +0io.k8s.api.autoscaling.v2beta2.MetricValueStatusô"6MetricValueStatus holds the current value for a metric² +objectÊ­ +ì +averageUtilizationÕint32"¿currentAverageUtilization is the current value of the average of the resource metric across all relevant pods, represented as a percentage of the requested value of the resource for the pods.² +integer +· + averageValue¦ +;#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity"gaverageValue is the current value of the average of the metric across all relevant pods (as a quantity) + +valuex +;#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity"9value is the current value of the metric (as a quantity). +¢ +)io.k8s.api.node.v1alpha1.RuntimeClassListô"3RuntimeClassList is a list of RuntimeClass objects.šitems² +objectʾ +Ë +metadata¾ +;#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +string +q +itemsh""Items is a list of schema objects.² +arrayº7 +5 +3#/definitions/io.k8s.api.node.v1alpha1.RuntimeClass +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +stringúg +x-kubernetes-group-version-kindDB- group: node.k8s.io + kind: RuntimeClassList + version: v1alpha1 + +® +"io.k8s.api.rbac.v1.RoleBindingList‡"/RoleBindingList is a collection of RoleBindingsšitems² +objectÊÎ +g +items^"Items is a list of RoleBindings² +arrayº0 +. +,#/definitions/io.k8s.api.rbac.v1.RoleBinding +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +string +f +metadataZ +;#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"Standard object's metadata. +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +stringún +x-kubernetes-group-version-kindKI- group: rbac.authorization.k8s.io + kind: RoleBindingList + version: v1 + +´ +Uio.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1.CustomResourceDefinitionListÚ"KCustomResourceDefinitionList is a list of CustomResourceDefinition objects.šitems² +objectÊý +I +metadata= +;#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +string +² +items¨"6items list individual CustomResourceDefinition objects² +arrayºc +a +_#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1.CustomResourceDefinition +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +stringúv +x-kubernetes-group-version-kindSQ- kind: CustomResourceDefinitionList + version: v1 + group: apiextensions.k8s.io + +ð + +int32")min is the start of the range, inclusive.² +integer +ñ +.io.k8s.api.storage.v1alpha1.CSIStorageCapacity¾"ÞCSIStorageCapacity stores the result of one CSI GetCapacity call. For a given StorageClass, this describes the available capacity in a particular topology segment. This can be used when considering where to instantiate new PersistentVolumes. + +For example this can express things like: - StorageClass "standard" has "1234 GiB" available in "topology.kubernetes.io/zone=us-east1" - StorageClass "localssd" has "10 GiB" available in "kubernetes.io/hostname=knode-abc123" + +The following three cases all imply that no capacity is available for a certain combination: - no object exists with suitable topology and storage class name - such an object exists, but the capacity is unset - such an object exists, but the capacity is zero + +The producer of these objects can decide which approach is more suitable. + +They are consumed by the kube-scheduler if the CSIStorageCapacity beta feature gate is enabled there and a CSI driver opts into capacity-aware scheduling with CSIDriver.StorageCapacity.šstorageClassName² +objectÊÌ + +metadata +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"ÎStandard object's metadata. The name has no particular meaning. It must be be a DNS subdomain (dots allowed, 253 characters). To ensure that there are no conflicts with other CSI drivers on the cluster, the recommendation is to use csisc-, a generated name, or a reverse-domain name which ends with the unique CSI driver name. + +Objects are namespaced. + +More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata +Ç + nodeTopology¶ +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector"ñNodeTopology defines which nodes have access to the storage for which capacity was reported. If not set, the storage is not accessible from any node in the cluster. If empty, the storage is accessible from all nodes. This field is immutable. +Ô +storageClassName¿"±The name of the StorageClass that the reported capacity applies to. It must meet the same requirements as the name of a StorageClass object (non-empty, DNS subdomain). If that object no longer exists, the CSIStorageCapacity object is obsolete and should be removed by its creator. This field is immutable.² +string +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +string +Ò +capacityÅ +;#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity"…Capacity is the value reported by the CSI driver in its GetCapacityResponse for a GetCapacityRequest with topology and parameters that match the previous fields. + +The semantic is currently (CSI spec 1.2) defined as: The available capacity, in bytes, of the storage that can be used to provision volumes. If not set, that information is currently unavailable and treated like zero capacity. +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +string +¶ +maximumVolumeSize  +;#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity"àMaximumVolumeSize is the value reported by the CSI driver in its GetCapacityResponse for a GetCapacityRequest with topology and parameters that match the previous fields. + +This is defined since CSI spec 1.4.0 as the largest size that may be used in a CreateVolumeRequest.capacity_range.required_bytes field to create a volume with the same parameters as those in GetCapacityRequest. The corresponding value in the Kubernetes API is ResourceRequirements.Requests in a volume claim.úl +x-kubernetes-group-version-kindIG- group: storage.k8s.io + kind: CSIStorageCapacity + version: v1alpha1 + +ù +Xio.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1beta1.CustomResourceSubresourcesœ"YCustomResourceSubresources defines the status and scale subresources for CustomResources.² +objectʲ +î +scaleä +j#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1beta1.CustomResourceSubresourceScale"vscale indicates the custom resource should serve a `/scale` subresource that returns an `autoscaling/v1` Scale object. +¾ +status³ +k#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1beta1.CustomResourceSubresourceStatus"Ãstatus indicates the custom resource should serve a `/status` subresource. When enabled: 1. requests to the custom resource primary endpoint ignore changes to the `status` stanza of the object. 2. requests to the custom resource `/status` subresource ignore changes to anything other than the `status` stanza of the object. +í +io.k8s.api.apps.v1.ReplicaSetË "YReplicaSet ensures that a specified number of pod replicas are running at any given time.² +objectÊŠ +õ +specì +/#/definitions/io.k8s.api.apps.v1.ReplicaSetSpec"¸Spec defines the specification of the desired behavior of the ReplicaSet. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status +Ç +status¼ +1#/definitions/io.k8s.api.apps.v1.ReplicaSetStatus"†Status is the most recently observed status of the ReplicaSet. This data may be out of date by some window of time. Populated by the system. Read-only. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +string +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +string +È +metadata» +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"ùIf the Labels of a ReplicaSet are empty, they are defaulted to be the same as the Pod(s) that the ReplicaSet manages. Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadataúT +x-kubernetes-group-version-kind1/- group: apps + kind: ReplicaSet + version: v1 + +ð +(io.k8s.api.core.v1.ContainerStateRunningÃ"8ContainerStateRunning is a running state of a container.² +objectÊ{ +y + startedAtl +7#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"1Time at which the container was last (re-)started + +(io.k8s.api.extensions.v1beta1.IngressTLSâ"MIngressTLS describes the transport layer security associated with an Ingress.² +objectÊ„ +š +hosts"óHosts are a list of hosts included in the TLS certificate. The values in this list must match the name/s used in the tlsSecret. Defaults to the wildcard host setting for the loadbalancer controller fulfilling this Ingress, if left unspecified.² +arrayº + ² +string +ä + +secretNameÕ"ÇSecretName is the name of the secret used to terminate SSL traffic on 443. Field is left optional to allow SSL routing based on SNI hostname alone. If the SNI host in a listener conflicts with the "Host" header field used by an IngressRule, the SNI host is used for termination and value of the Host header is used for routing.² +string +µ +#io.k8s.api.networking.v1.IngressTLS"MIngressTLS describes the transport layer security associated with an Ingress.² +objectʯ +À +hosts¶"óHosts are a list of hosts included in the TLS certificate. The values in this list must match the name/s used in the tlsSecret. Defaults to the wildcard host setting for the loadbalancer controller fulfilling this Ingress, if left unspecified.² +arrayº + ² +stringú# +x-kubernetes-list-type atomic + +é + +secretNameÚ"ÌSecretName is the name of the secret used to terminate TLS traffic on port 443. Field is left optional to allow TLS routing based on SNI hostname alone. If the SNI host in a listener conflicts with the "Host" header field used by an IngressRule, the SNI host is used for termination and value of the Host header is used for routing.² +string +Ò +io.k8s.api.rbac.v1beta1.Role± "ÒRole is a namespaced, logical grouping of PolicyRules that can be referenced as a unit by a RoleBinding. Deprecated in v1.17 in favor of rbac.authorization.k8s.io/v1 Role, and will no longer be served in v1.22.² +objectÊâ +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +string +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +string +h +metadata\ +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"Standard object's metadata. +y +rulesp"-Rules holds all the PolicyRules for this Role² +arrayº4 +2 +0#/definitions/io.k8s.api.rbac.v1beta1.PolicyRuleúh +x-kubernetes-group-version-kindEC- group: rbac.authorization.k8s.io + kind: Role + version: v1beta1 + +Á +Vio.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1beta1.CustomResourceConversionæ +"MCustomResourceConversion describes how to convert different versions of a CR.šstrategy² +objectÊý +œ +conversionReviewVersionsÿ"âconversionReviewVersions is an ordered list of preferred `ConversionReview` versions the Webhook expects. The API server will use the first version in the list which it supports. If none of the versions specified in this list are supported by API server, conversion will fail for the custom resource. If a persisted Webhook configuration specifies allowed versions and does not include any versions known to the API Server, calls to the webhook will fail. Defaults to `["v1beta1"]`.² +arrayº + ² +string +Ñ +strategyÄ"¶strategy specifies how custom resources are converted between versions. Allowed values are: - `None`: The converter only change the apiVersion and would not touch any other field in the custom resource. - `Webhook`: API Server will call to an external webhook to do the conversion. Additional information + is needed for this option. This requires spec.preserveUnknownFields to be false, and spec.conversion.webhookClientConfig to be set.² +string +‡ +webhookClientConfigï +_#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1beta1.WebhookClientConfig"‹webhookClientConfig is the instructions for how to call the webhook if strategy is `Webhook`. Required when `strategy` is set to `Webhook`. +ö +/? -> backend where where parts of the url correspond to RFC 3986, this resource will be used to match against everything after the last '/' and before the first '?' or '#'.špaths² +objectÊ +Œ +paths‚"4A collection of paths that map requests to backends.² +arrayº? += +;#/definitions/io.k8s.api.networking.v1beta1.HTTPIngressPath +º +.io.k8s.api.networking.v1beta1.IngressClassSpec‡"DIngressClassSpec provides information about the class of an Ingress.² +objectʲ +¦ + +controller—"‰Controller refers to the name of the controller that should handle this class. This allows for different "flavors" that are controlled by the same controller. For example, you may have different Parameters for the same implementing controller. This should be specified as a domain-prefixed path no more than 250 characters in length, e.g. "acme.io/ingress-controller". This field is immutable.² +string +† + +parameters÷ +K#/definitions/io.k8s.api.networking.v1beta1.IngressClassParametersReference"§Parameters is a link to a custom resource containing additional configuration for the controller. This is optional if the controller does not require extra parameters. +´ +io.k8s.api.rbac.v1.RoleBinding‘ "·RoleBinding references a role, but does not contain it. It can reference a Role in the same namespace or a ClusterRole in the global namespace. It adds who information via Subjects and namespace information by which namespace it exists in. RoleBindings in a given namespace only have effect in that namespace.šroleRef² +objectÊÑ +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +string +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +string +h +metadata\ +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"Standard object's metadata. +à +roleRefÔ +(#/definitions/io.k8s.api.rbac.v1.RoleRef"§RoleRef can reference a Role in the current namespace or a ClusterRole in the global namespace. If the RoleRef cannot be resolved, the Authorizer must return an error. +„ +subjectsx"=Subjects holds references to the objects the role applies to.² +arrayº, +* +(#/definitions/io.k8s.api.rbac.v1.Subjectúj +x-kubernetes-group-version-kindGE- group: rbac.authorization.k8s.io + kind: RoleBinding + version: v1 + +ƒ +#io.k8s.api.apps.v1.DeploymentStatusÛ "HDeploymentStatus is the most recently observed status of the Deployment.² +objectÊ‚ +` +observedGenerationJint64"5The generation observed by the deployment controller.² +integer +] + readyReplicasLint32"7Total number of ready pods targeted by this deployment.² +integer +ƒ +replicaswint32"bTotal number of non-terminated pods targeted by this deployment (their labels match the selector).² +integer +Á +unavailableReplicas©int32"“Total number of unavailable pods targeted by this deployment. This is the total number of pods that are still required for the deployment to have 100% available capacity. They may either be pods that are running but not yet available or pods that still have not been created.² +integer +Œ +updatedReplicasyint32"dTotal number of non-terminated pods targeted by this deployment that have the desired template spec.² +integer +Š +availableReplicasuint32"`Total number of available pods (ready for at least minReadySeconds) targeted by this deployment.² +integer +Þ +collisionCountËint32"µCount of hash collisions for the Deployment. The Deployment controller uses this field as a collision avoidance mechanism when it needs to create the name for the newest ReplicaSet.² +integer +÷ + +conditionsè"MRepresents the latest available observations of a deployment's current state.² +arrayº8 +6 +4#/definitions/io.k8s.api.apps.v1.DeploymentConditionú' +x-kubernetes-patch-merge-keytype +ú' +x-kubernetes-patch-strategymerge + +à +7io.k8s.api.authorization.v1beta1.SelfSubjectRulesReview¤"ˆSelfSubjectRulesReview enumerates the set of actions the current user can perform within a namespace. The returned list of actions may be incomplete depending on the server's authorization mode, and any errors experienced during the evaluation. SelfSubjectRulesReview should be used by UIs to show/hide actions, or to quickly let an end user reason about their permissions. It should NOT Be used by external systems to drive authorization decisions as this raises confused deputy, cache lifetime/revocation, and correctness concerns. SubjectAccessReview, and LocalAccessReview are the correct way to defer authorization decisions to the API server.šspec² +objectÊ‹ +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +string +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +string +K +metadata? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta + +spec† +I#/definitions/io.k8s.api.authorization.v1beta1.SelfSubjectRulesReviewSpec"9Spec holds information about the request being evaluated. +¬ +status¡ +G#/definitions/io.k8s.api.authorization.v1beta1.SubjectRulesReviewStatus"VStatus is filled in by the server and indicates the set of actions a user can perform.úu +x-kubernetes-group-version-kindRP- version: v1beta1 + group: authorization.k8s.io + kind: SelfSubjectRulesReview + +Í +/io.k8s.api.autoscaling.v2beta2.HPAScalingPolicy™"WHPAScalingPolicy is a single policy which must hold true for a specified past interval.štypešvalueš periodSeconds² +objectÊ’ +€ +valuewint32"bValue contains the amount of change which is permitted by the policy. It must be greater than zero² +integer +Ê + periodSeconds¸int32"¢PeriodSeconds specifies the window of time for which the policy should hold true. PeriodSeconds must be greater than zero and less than or equal to 1800 (30 min).² +integer +@ +type8"+Type is used to specify the scaling policy.² +string +þ +$io.k8s.api.batch.v1beta1.CronJobListÕ")CronJobList is a collection of cron jobs.šitems² +objectʵ +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +string +h +items_"items is the list of CronJobs.² +arrayº2 +0 +.#/definitions/io.k8s.api.batch.v1beta1.CronJob +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +string +Ë +metadata¾ +;#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadataú[ +x-kubernetes-group-version-kind86- version: v1beta1 + group: batch + kind: CronJobList + +„ + +io.k8s.api.core.v1.NodeAffinityà ";Node affinity is a group of node affinity scheduling rules.² +objectÊ” +° +.requiredDuringSchedulingIgnoredDuringExecutioný +-#/definitions/io.k8s.api.core.v1.NodeSelector"ËIf the affinity requirements specified by this field are not met at scheduling time, the pod will not be scheduled onto the node. If the affinity requirements specified by this field cease to be met at some point during pod execution (e.g. due to an update), the system may or may not try to eventually evict the pod from its node. +Þ +/preferredDuringSchedulingIgnoredDuringExecutionª"ÞThe scheduler will prefer to schedule pods to nodes that satisfy the affinity expressions specified by this field, but it may choose a node that violates one or more of the expressions. The node that is most preferred is the one with the greatest sum of weights, i.e. for each node that meets all of the scheduling requirements (resource request, requiredDuringScheduling affinity expressions, etc.), compute a sum by iterating through the elements of this field and adding "weight" to the sum if the node matches the corresponding matchExpressions; the node(s) with the highest sum are the most preferred.² +arrayº< +: +8#/definitions/io.k8s.api.core.v1.PreferredSchedulingTerm +é ++io.k8s.api.flowcontrol.v1beta1.GroupSubject¹"?GroupSubject holds detailed information for group-kind subject.šname² +objectÊâ +ß +nameÖ"Èname is the user group that matches, or "*" to match all user groups. See https://github.com/kubernetes/apiserver/blob/master/pkg/authentication/user/user.go for some well-known group names. Required.² +string +« + +2io.k8s.api.storage.v1alpha1.CSIStorageCapacityListô "ECSIStorageCapacityList is a collection of CSIStorageCapacity objects.šitems² +objectÊ£ +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +string +Ê +metadata½ +;#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"~Standard list metadata More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +string +Ö +itemsÌ"0Items is the list of CSIStorageCapacity objects.² +arrayº@ +> +<#/definitions/io.k8s.api.storage.v1alpha1.CSIStorageCapacityú' +x-kubernetes-list-map-keys - name +ú +x-kubernetes-list-typemap +úp +x-kubernetes-group-version-kindMK- group: storage.k8s.io + kind: CSIStorageCapacityList + version: v1alpha1 + +¦ +Qio.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1.CustomResourceDefinitionÐ +"”CustomResourceDefinition represents a resource that should be exposed on the API server. Its name MUST be in the format <.spec.name>.<.spec.group>.šspec² +objectÊ® +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +string +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +string +K +metadata? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta +© +spec  +c#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1.CustomResourceDefinitionSpec"9spec describes how the user wants the resources to appear +µ +statusª +e#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1.CustomResourceDefinitionStatus"Astatus indicates the actual state of the CustomResourceDefinitionúr +x-kubernetes-group-version-kindOM- group: apiextensions.k8s.io + kind: CustomResourceDefinition + version: v1 + +Ü +3io.k8s.api.authorization.v1.SelfSubjectAccessReview¤ "öSelfSubjectAccessReview checks whether or the current user can perform an action. Not filling in a spec.namespace means "in all namespaces". Self is a special case, because users should always be able to check whether they can perform an actionšspec² +objectÊ¡ +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +string +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +string +K +metadata? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta +ª +spec¡ +E#/definitions/io.k8s.api.authorization.v1.SelfSubjectAccessReviewSpec"XSpec holds information about the request being evaluated. user and groups must be empty +§ +statusœ +C#/definitions/io.k8s.api.authorization.v1.SubjectAccessReviewStatus"UStatus is filled in by the server and indicates whether the request is allowed or notúq +x-kubernetes-group-version-kindNL- group: authorization.k8s.io + kind: SelfSubjectAccessReview + version: v1 + +Ú +8io.k8s.api.authorization.v1beta1.SubjectAccessReviewSpec"¢SubjectAccessReviewSpec is a description of the access request. Exactly one of ResourceAuthorizationAttributes and NonResourceAuthorizationAttributes must be set² +objectÊé +ª +user¡"“User is the user you're testing for. If you specify "User" but not "Group", then is it interpreted as "What if User were not a member of any groups² +string +Æ +extra¼"Extra corresponds to the user.Info.GetExtra() method from the authenticator. Since that is input to the authorizer it needs a reflection here.ª +² +arrayº + ² +string² +object +M +groupD"(Groups is the groups you're testing for.² +arrayº + ² +string +¯ +nonResourceAttributes• +D#/definitions/io.k8s.api.authorization.v1beta1.NonResourceAttributes"MNonResourceAttributes describes information for a non-resource access request +¯ +resourceAttributes˜ +A#/definitions/io.k8s.api.authorization.v1beta1.ResourceAttributes"SResourceAuthorizationAttributes describes information for a resource access request +> +uid7"*UID information about the requesting user.² +string +Œ +7io.k8s.api.autoscaling.v1.HorizontalPodAutoscalerStatusÐ"-current status of a horizontal pod autoscaleršcurrentReplicasšdesiredReplicas² +objectÊî +ß +currentCPUUtilizationPercentage»int32"¥current average CPU utilization over all pods, represented as a percentage of requested CPU, e.g. 70 means that an average pod is using now 70% of its requested CPU.² +integer +f +currentReplicasSint32">current number of replicas of pods managed by this autoscaler.² +integer +f +desiredReplicasSint32">desired number of replicas of pods managed by this autoscaler.² +integer +Ù + lastScaleTimeÇ +7#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"‹last time the HorizontalPodAutoscaler scaled the number of pods; used by the autoscaler to control how often the number of pods is changed. +^ +observedGenerationHint64"3most recent generation observed by this autoscaler.² +integer +ÿ +%io.k8s.api.core.v1.CephFSVolumeSourceÕ "Represents a Ceph Filesystem mount that lasts the lifetime of a pod Cephfs volumes do not support ownership management or SELinux relabeling.šmonitors² +objectÊ« +¦ +monitors™"}Required: Monitors is a collection of Ceph monitors More info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it² +arrayº + ² +string +e +path]"POptional: Used as the mounted root, rather than the full Ceph tree, default is /² +string +Î +readOnlyÁ"²Optional: Defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts. More info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it² +boolean +¾ + +secretFile¯"¡Optional: SecretFile is the path to key ring for User, default is /etc/ceph/user.secret More info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it² +string +ë + secretRefÝ +5#/definitions/io.k8s.api.core.v1.LocalObjectReference"£Optional: SecretRef is reference to the authentication secret for User, default is empty. More info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it +˜ +user"Optional: User is the rados user name, default is admin More info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it² +string +º +%io.k8s.api.networking.v1beta1.Ingress "€Ingress is a collection of rules that allow inbound connections to reach the endpoints defined by a backend. An Ingress can be configured to give services externally-reachable urls, load balance traffic, terminate SSL, offer name based virtual hosting etc.² +objectʘ + +ã +statusØ +9#/definitions/io.k8s.api.networking.v1beta1.IngressStatus"šStatus is the current state of the Ingress. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +string +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +string +Ò +metadataÅ +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"ƒStandard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata +Ý +specÔ +7#/definitions/io.k8s.api.networking.v1beta1.IngressSpec"˜Spec is the desired state of the Ingress. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-statusúc +x-kubernetes-group-version-kind@>- version: v1beta1 + group: networking.k8s.io + kind: Ingress + +Ž +%io.k8s.api.node.v1alpha1.RuntimeClassä "ØRuntimeClass defines a class of container runtime supported in the cluster. The RuntimeClass is used to determine which container runtime is used to run all containers in a pod. RuntimeClasses are (currently) manually defined by a user or cluster provisioner, and referenced in the PodSpec. The Kubelet is responsible for resolving the RuntimeClassName reference before running the pod. For more details, see https://git.k8s.io/enhancements/keps/sig-node/runtime-class.mdšspec² +objectÊ +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +string +µ +metadata¨ +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"gMore info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata +Õ +specÌ +7#/definitions/io.k8s.api.node.v1alpha1.RuntimeClassSpec"Specification of the RuntimeClass More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +stringúc +x-kubernetes-group-version-kind@>- kind: RuntimeClass + version: v1alpha1 + group: node.k8s.io + +¹ +#io.k8s.api.rbac.v1beta1.RoleBinding‘ "¨RoleBinding references a role, but does not contain it. It can reference a Role in the same namespace or a ClusterRole in the global namespace. It adds who information via Subjects and namespace information by which namespace it exists in. RoleBindings in a given namespace only have effect in that namespace. Deprecated in v1.17 in favor of rbac.authorization.k8s.io/v1 RoleBinding, and will no longer be served in v1.22.šroleRef² +objectÊÛ +‰ +subjects}"=Subjects holds references to the objects the role applies to.² +arrayº1 +/ +-#/definitions/io.k8s.api.rbac.v1beta1.Subject +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +string +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +string +h +metadata\ +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"Standard object's metadata. +å +roleRefÙ +-#/definitions/io.k8s.api.rbac.v1beta1.RoleRef"§RoleRef can reference a Role in the current namespace or a ClusterRole in the global namespace. If the RoleRef cannot be resolved, the Authorizer must return an error.úo +x-kubernetes-group-version-kindLJ- group: rbac.authorization.k8s.io + kind: RoleBinding + version: v1beta1 + + + +\io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1beta1.CustomResourceColumnDefinition¼ "KCustomResourceColumnDefinition specifies a column for server side printing.šnameštypešJSONPath² +objectÊÇ +¯ +type¦"˜type is an OpenAPI type definition for this column. See https://github.com/OAI/OpenAPI-Specification/blob/master/versions/2.0.md#data-types for details.² +string +ª +JSONPath"JSONPath is a simple JSON path (i.e. with array notation) which is evaluated against each custom resource to produce the value for this column.² +string +W + descriptionH";description is a human readable description of this column.² +string +¸ +format­"Ÿformat is an optional OpenAPI type definition for this column. The 'name' format is applied to the primary identifier column to assist in clients identifying column is the resource name. See https://github.com/OAI/OpenAPI-Specification/blob/master/versions/2.0.md#data-types for details.² +string +B +name:"-name is a human readable name for the column.² +string + +priority€int32"êpriority is an integer defining the relative importance of this column compared to others. Lower numbers are considered higher priority. Columns that may be omitted in limited space scenarios should be given a priority greater than 0.² +integer +‰ +1io.k8s.api.autoscaling.v1.HorizontalPodAutoscalerÓ +"-configuration of a horizontal pod autoscaler.² +objectʪ +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +string +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +string +Ð +metadataà +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"Standard object metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata +Ù +specÐ +C#/definitions/io.k8s.api.autoscaling.v1.HorizontalPodAutoscalerSpec"ˆbehaviour of autoscaler. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status. +| +statusr +E#/definitions/io.k8s.api.autoscaling.v1.HorizontalPodAutoscalerStatus")current information about the autoscaler.úh +x-kubernetes-group-version-kindEC- version: v1 + group: autoscaling + kind: HorizontalPodAutoscaler + +é +']`, `metadata.annotations['']`, spec.nodeName, spec.serviceAccountName, status.hostIP, status.podIP, status.podIPs. +¤ +resourceFieldRef +6#/definitions/io.k8s.api.core.v1.ResourceFieldSelector"ÔSelects a resource of the container: only resources limits and requests (limits.cpu, limits.memory, limits.ephemeral-storage, requests.cpu, requests.memory and requests.ephemeral-storage) are currently supported. +v + secretKeyReff +2#/definitions/io.k8s.api.core.v1.SecretKeySelector"0Selects a key of a secret in the pod's namespace +ù +,io.k8s.api.policy.v1.PodDisruptionBudgetSpecÈ"BPodDisruptionBudgetSpec is a description of a PodDisruptionBudget.² +objectÊõ +µ +selector¨ +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector"·Label query over pods whose evictions are managed by the disruption budget. A null selector will match no pods, while an empty ({}) selector will select all pods within the namespace.ú) +x-kubernetes-patch-strategy +replace + +ð +maxUnavailableÝ +=#/definitions/io.k8s.apimachinery.pkg.util.intstr.IntOrString"›An eviction is allowed if at most "maxUnavailable" pods selected by "selector" are unavailable after the eviction, i.e. even in absence of the evicted pod. For example, one can prevent all voluntary evictions by specifying 0. This is a mutually exclusive setting with "minAvailable". +Ç + minAvailable¶ +=#/definitions/io.k8s.apimachinery.pkg.util.intstr.IntOrString"ôAn eviction is allowed if at least "minAvailable" pods selected by "selector" will still be available after the eviction, i.e. even in the absence of the evicted pod. So for example you can prevent all voluntary evictions by specifying "100%". +ï +-io.k8s.api.storage.v1beta1.CSIStorageCapacity½"ÞCSIStorageCapacity stores the result of one CSI GetCapacity call. For a given StorageClass, this describes the available capacity in a particular topology segment. This can be used when considering where to instantiate new PersistentVolumes. + +For example this can express things like: - StorageClass "standard" has "1234 GiB" available in "topology.kubernetes.io/zone=us-east1" - StorageClass "localssd" has "10 GiB" available in "kubernetes.io/hostname=knode-abc123" + +The following three cases all imply that no capacity is available for a certain combination: - no object exists with suitable topology and storage class name - such an object exists, but the capacity is unset - such an object exists, but the capacity is zero + +The producer of these objects can decide which approach is more suitable. + +They are consumed by the kube-scheduler if the CSIStorageCapacity beta feature gate is enabled there and a CSI driver opts into capacity-aware scheduling with CSIDriver.StorageCapacity.šstorageClassName² +objectÊÌ +Ô +storageClassName¿"±The name of the StorageClass that the reported capacity applies to. It must meet the same requirements as the name of a StorageClass object (non-empty, DNS subdomain). If that object no longer exists, the CSIStorageCapacity object is obsolete and should be removed by its creator. This field is immutable.² +string +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +string +Ò +capacityÅ +;#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity"…Capacity is the value reported by the CSI driver in its GetCapacityResponse for a GetCapacityRequest with topology and parameters that match the previous fields. + +The semantic is currently (CSI spec 1.2) defined as: The available capacity, in bytes, of the storage that can be used to provision volumes. If not set, that information is currently unavailable and treated like zero capacity. +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +string +¶ +maximumVolumeSize  +;#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity"àMaximumVolumeSize is the value reported by the CSI driver in its GetCapacityResponse for a GetCapacityRequest with topology and parameters that match the previous fields. + +This is defined since CSI spec 1.4.0 as the largest size that may be used in a CreateVolumeRequest.capacity_range.required_bytes field to create a volume with the same parameters as those in GetCapacityRequest. The corresponding value in the Kubernetes API is ResourceRequirements.Requests in a volume claim. + +metadata +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"ÎStandard object's metadata. The name has no particular meaning. It must be be a DNS subdomain (dots allowed, 253 characters). To ensure that there are no conflicts with other CSI drivers on the cluster, the recommendation is to use csisc-, a generated name, or a reverse-domain name which ends with the unique CSI driver name. + +Objects are namespaced. + +More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata +Ç + nodeTopology¶ +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector"ñNodeTopology defines which nodes have access to the storage for which capacity was reported. If not set, the storage is not accessible from any node in the cluster. If empty, the storage is accessible from all nodes. This field is immutable.úk +x-kubernetes-group-version-kindHF- group: storage.k8s.io + kind: CSIStorageCapacity + version: v1beta1 + +ç +3io.k8s.api.autoscaling.v2beta2.ResourceMetricSource¯"ÊResourceMetricSource indicates how to scale on a resource metric known to Kubernetes, as specified in requests and limits, describing each pod in the current scale target (e.g. CPU or memory). The values will be averaged together before being compared to the target. Such metrics are built in to Kubernetes, and have special scaling options on top of those available to normal per-pod metrics using the "pods" source. Only one "target" type should be set.šnameštarget² +objectÊà +B +name:"-name is the name of the resource in question.² +string +} +targets +9#/definitions/io.k8s.api.autoscaling.v2beta2.MetricTarget"6target specifies the target value for the given metric +$ +io.k8s.api.core.v1.PodStatusï#"¶PodStatus represents information about the status of a pod. Status may trail the actual state of a system, especially if the node that hosts the pod cannot contact the control plane.² +objectʧ" +‡ +podIPsü"ðpodIPs holds the IP addresses allocated to the pod. If this field is specified, the 0th entry must match the podIP field. Pods may be allocated at most 1 value for each of IPv4 and IPv6. This list is empty if no IPs have been allocated yet.² +arrayº* +( +&#/definitions/io.k8s.api.core.v1.PodIPú% +x-kubernetes-patch-merge-keyip +ú' +x-kubernetes-patch-strategymerge + +Û + startTimeÍ +7#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"‘RFC 3339 date and time at which the object was acknowledged by the Kubelet. This is before the Kubelet pulled the container image(s) for the pod. +¬ +containerStatuses–"ÒThe list has one entry per container in the manifest. Each entry is currently the output of `docker inspect`. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#pod-and-container-status² +arrayº4 +2 +0#/definitions/io.k8s.api.core.v1.ContainerStatus +‰ +ephemeralContainerStatusesê"¦Status for any ephemeral containers that have run in this pod. This field is alpha-level and is only populated by servers that enable the EphemeralContainers feature.² +arrayº4 +2 +0#/definitions/io.k8s.api.core.v1.ContainerStatus +ü +initContainerStatusesâ"žThe list has one entry per init container in the manifest. The most recent successful init container will have ready = true, the most recently started container will have startTime set. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#pod-and-container-status² +arrayº4 +2 +0#/definitions/io.k8s.api.core.v1.ContainerStatus +k +message`"SA human readable message indicating details about why the pod is in this condition.² +string +x +podIPo"bIP address allocated to the pod. Routable at least within the cluster. Empty if not yet allocated.² +string +ƒ +qosClassö"èThe Quality of Service (QOS) classification assigned to the pod based on resource requirements See PodQOSClass type for available QOS classes More info: https://git.k8s.io/community/contributors/design-proposals/node/resource-qos.md² +string +v +reasonl"_A brief CamelCase message indicating details about why the pod is in this state. e.g. 'Evicted'² +string +› + +conditionsŒ"xCurrent service state of pod. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#pod-conditions² +arrayº1 +/ +-#/definitions/io.k8s.api.core.v1.PodConditionú' +x-kubernetes-patch-merge-keytype +ú' +x-kubernetes-patch-strategymerge + +g +hostIP]"PIP address of the host to which the pod is assigned. Empty if not yet scheduled.² +string +Í +nominatedNodeName·"©nominatedNodeName is set only when this pod preempts other pods on the node, but it cannot be scheduled right away as preemption victims receive their graceful termination periods. This field does not guarantee that the pod will be scheduled on this node. Scheduler may decide to place the pod elsewhere if other nodes become available sooner. Scheduler may also decide to give the resources on this node to a higher priority pod that is created after preemption. As a result, this field may be different than PodSpec.nodeName when the pod is scheduled.² +string +Æ +phase¼ "® The phase of a Pod is a simple, high-level summary of where the Pod is in its lifecycle. The conditions array, the reason and message fields, and the individual container status arrays contain more detail about the pod's status. There are five possible phase values: + +Pending: The pod has been accepted by the Kubernetes system, but one or more of the container images has not been created. This includes time before being scheduled as well as time spent downloading images over the network, which could take a while. Running: The pod has been bound to a node, and all of the containers have been created. At least one container is still running, or is in the process of starting or restarting. Succeeded: All containers in the pod have terminated in success, and will not be restarted. Failed: All containers in the pod have terminated, and at least one container has terminated in failure. The container either exited with non-zero status or was terminated by the system. Unknown: For some reason the state of the pod could not be obtained, typically due to an error in communicating with the host of the pod. + +More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#pod-phase² +string +Ì +io.k8s.api.core.v1.VolumeMount©"@VolumeMount describes a mounting of a Volume within a container.šnameš mountPath² +objectÊÅ +¿ + subPathExpr¯"¡Expanded path within the volume from which the container's volume should be mounted. Behaves similarly to SubPath but environment variable references $(VAR_NAME) are expanded using the container's environment. Defaults to "" (volume's root). SubPathExpr and SubPath are mutually exclusive.² +string +q + mountPathd"WPath within the container at which the volume should be mounted. Must not contain ':'.² +string +Õ +mountPropagationÀ"²mountPropagation determines how mounts are propagated from the host to container and the other way around. When not set, MountPropagationNone is used. This field is beta in 1.10.² +string +: +name2"%This must match the Name of a Volume.² +string +t +readOnlyh"ZMounted read-only if true, read-write otherwise (false or unspecified). Defaults to false.² +boolean +ƒ +subPathx"kPath within the volume from which the container's volume should be mounted. Defaults to "" (volume's root).² +string +Ó +1io.k8s.api.core.v1.VsphereVirtualDiskVolumeSource"%Represents a vSphere volume resource.š +volumePath² +objectÊÚ +À +fsTypeµ"§Filesystem type to mount. Must be a filesystem type supported by the host operating system. Ex. "ext4", "xfs", "ntfs". Implicitly inferred to be "ext4" if unspecified.² +string +x +storagePolicyIDe"XStorage Policy Based Management (SPBM) profile ID associated with the StoragePolicyName.² +string +V +storagePolicyNameA"4Storage Policy Based Management (SPBM) profile name.² +string +C + +volumePath5"(Path that identifies vSphere volume vmdk² +string +‹ +&io.k8s.api.flowcontrol.v1beta1.Subjectà"´Subject matches the originator of a request, as identified by the request authentication system. There are three ways of matching an originator; by user, group, or service account.škind² +objectÊ +D +group; +9#/definitions/io.k8s.api.flowcontrol.v1beta1.GroupSubject + +kind"Required² +string +V +serviceAccountD +B#/definitions/io.k8s.api.flowcontrol.v1beta1.ServiceAccountSubject +B +user: +8#/definitions/io.k8s.api.flowcontrol.v1beta1.UserSubjectúŽ +x-kubernetes-unionswu- discriminator: kind + fields-to-discriminateBy: + group: Group + serviceAccount: ServiceAccount + user: User + +‚ + io.k8s.api.rbac.v1beta1.RoleListÝ"RoleList is a collection of Roles Deprecated in v1.17 in favor of rbac.authorization.k8s.io/v1 RoleList, and will no longer be served in v1.22.šitems² +objectÊÅ +f +metadataZ +;#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"Standard object's metadata. +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +string +^ +itemsU"Items is a list of Roles² +arrayº. +, +*#/definitions/io.k8s.api.rbac.v1beta1.Role +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +stringúl +x-kubernetes-group-version-kindIG- kind: RoleList + version: v1beta1 + group: rbac.authorization.k8s.io + +š +&io.k8s.api.storage.v1.StorageClassListï"4StorageClassList is a collection of storage classes.šitems² +objectÊ» +Ê +metadata½ +;#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"~Standard list metadata More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +string +o +itemsf"#Items is the list of StorageClasses² +arrayº4 +2 +0#/definitions/io.k8s.api.storage.v1.StorageClass +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +stringúd +x-kubernetes-group-version-kindA?- group: storage.k8s.io + kind: StorageClassList + version: v1 + +Ù +1io.k8s.api.autoscaling.v2beta2.ObjectMetricSource£"‰ObjectMetricSource indicates how to scale on a metric describing a kubernetes object (for example, hits-per-second on an Ingress object).šdescribedObjectštargetšmetric² +objectÊä +] +describedObjectJ +H#/definitions/io.k8s.api.autoscaling.v2beta2.CrossVersionObjectReference +ƒ +metricy +=#/definitions/io.k8s.api.autoscaling.v2beta2.MetricIdentifier"8metric identifies the target metric by name and selector +} +targets +9#/definitions/io.k8s.api.autoscaling.v2beta2.MetricTarget"6target specifies the target value for the given metric +¢ + io.k8s.api.core.v1.ServiceStatusý"9ServiceStatus represents the current status of a service.² +objectʳ +” + +conditions…"Current service state² +arrayº@ +> +<#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Conditionú' +x-kubernetes-list-map-keys - type +ú +x-kubernetes-list-typemap +ú' +x-kubernetes-patch-merge-keytype +ú' +x-kubernetes-patch-strategymerge + +™ + loadBalancerˆ +3#/definitions/io.k8s.api.core.v1.LoadBalancerStatus"QLoadBalancer contains the current status of the load-balancer, if one is present. +° +)io.k8s.api.networking.v1.IngressClassSpec‚"DIngressClassSpec provides information about the class of an Ingress.² +objectÊ­ +¦ + +controller—"‰Controller refers to the name of the controller that should handle this class. This allows for different "flavors" that are controlled by the same controller. For example, you may have different Parameters for the same implementing controller. This should be specified as a domain-prefixed path no more than 250 characters in length, e.g. "acme.io/ingress-controller". This field is immutable.² +string + + +parametersò +F#/definitions/io.k8s.api.networking.v1.IngressClassParametersReference"§Parameters is a link to a custom resource containing additional configuration for the controller. This is optional if the controller does not require extra parameters. +¹ +2io.k8s.api.storage.v1alpha1.VolumeAttachmentSource‚"ÝVolumeAttachmentSource represents a volume that should be attached. Right now only PersistenVolumes can be attached via external attacher, in future we may allow also inline volumes in pods. Exactly one member can be set.² +objectÊ“ +Á +inlineVolumeSpec¬ +5#/definitions/io.k8s.api.core.v1.PersistentVolumeSpec"òinlineVolumeSpec contains all the information necessary to attach a persistent volume defined by a pod's inline VolumeSource. This field is populated only for the CSIMigration feature. It contains translated fields from a pod's inline VolumeSource to a PersistentVolumeSpec. This field is alpha-level and is only honored by servers that enabled the CSIMigration feature. +M +persistentVolumeName5"(Name of the persistent volume to attach.² +string +à +Zio.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1beta1.CustomResourceDefinitionListä"KCustomResourceDefinitionList is a list of CustomResourceDefinition objects.šitems² +objectÊ‚ +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +string +I +metadata= +;#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +string +· +items­"6items list individual CustomResourceDefinition objects² +arrayºh +f +d#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1beta1.CustomResourceDefinitionú{ +x-kubernetes-group-version-kindXV- group: apiextensions.k8s.io + kind: CustomResourceDefinitionList + version: v1beta1 + +º +Bio.k8s.api.admissionregistration.v1.ValidatingWebhookConfigurationó +"‰ValidatingWebhookConfiguration describes the configuration of and admission webhook that accept or reject and object without changing it.² +objectÊÔ +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +string +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +string +Ñ +metadataÄ +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"‚Standard object metadata; More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata. +€ +webhooksó"IWebhooks is a list of webhooks and the affected resources and operations.² +arrayºG +E +C#/definitions/io.k8s.api.admissionregistration.v1.ValidatingWebhookú' +x-kubernetes-patch-merge-keyname +ú' +x-kubernetes-patch-strategymerge +ú€ +x-kubernetes-group-version-kind][- group: admissionregistration.k8s.io + kind: ValidatingWebhookConfiguration + version: v1 + +Ù +io.k8s.api.core.v1.Affinity¹"1Affinity is a group of affinity scheduling rules.² +objectÊ÷ +v + nodeAffinityf +-#/definitions/io.k8s.api.core.v1.NodeAffinity"5Describes node affinity scheduling rules for the pod. +´ + podAffinity¤ +,#/definitions/io.k8s.api.core.v1.PodAffinity"tDescribes pod affinity scheduling rules (e.g. co-locate this pod in the same node, zone, etc. as some other pod(s)). +Å +podAntiAffinity± +0#/definitions/io.k8s.api.core.v1.PodAntiAffinity"}Describes pod anti-affinity scheduling rules (e.g. avoid putting this pod in the same node, zone, etc. as some other pod(s)). +ð +1io.k8s.api.authentication.v1.BoundObjectReferenceº"JBoundObjectReference is a reference to an object that a token is bound to.² +objectÊß +7 + +apiVersion)"API version of the referent.² +string +N +kindF"9Kind of the referent. Valid kinds are 'Pod' and 'Secret'.² +string +* +name""Name of the referent.² +string +( +uid!"UID of the referent.² +string +Ñ + io.k8s.api.core.v1.ScopeSelector¬"nA scope selector represents the AND of the selectors represented by the scoped-resource selector requirements.² +objectÊ­ +ª +matchExpressions•"@A list of scope selector requirements by scope of the resources.² +arrayºF +D +B#/definitions/io.k8s.api.core.v1.ScopedResourceSelectorRequirement +§ +*io.k8s.api.networking.v1.NetworkPolicyListø"5NetworkPolicyList is a list of NetworkPolicy objects.šitems² +objectÊ¿ +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +string +Ë +metadata¾ +;#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +string +r +itemsi""Items is a list of schema objects.² +arrayº8 +6 +4#/definitions/io.k8s.api.networking.v1.NetworkPolicyúh +x-kubernetes-group-version-kindEC- group: networking.k8s.io + kind: NetworkPolicyList + version: v1 + +À +Wio.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1.CustomResourceSubresourceScaleä "^CustomResourceSubresourceScale defines how to serve the scale subresource for CustomResources.šspecReplicasPathšstatusReplicasPath² +objectÊÍ +ã +specReplicasPathÎ"ÀspecReplicasPath defines the JSON path inside of a custom resource that corresponds to Scale `spec.replicas`. Only JSON paths without the array notation are allowed. Must be a JSON Path under `.spec`. If there is no value under the given path in the custom resource, the `/scale` subresource will return an error on GET.² +string +€ +statusReplicasPathé"ÛstatusReplicasPath defines the JSON path inside of a custom resource that corresponds to Scale `status.replicas`. Only JSON paths without the array notation are allowed. Must be a JSON Path under `.status`. If there is no value under the given path in the custom resource, the `status.replicas` value in the `/scale` subresource will default to 0.² +string +á +labelSelectorPathË"½labelSelectorPath defines the JSON path inside of a custom resource that corresponds to Scale `status.selector`. Only JSON paths without the array notation are allowed. Must be a JSON Path under `.status` or `.spec`. Must be set to work with HorizontalPodAutoscaler. The field pointed by this JSON path must be a string field (not a complex selector struct) which contains a serialized label selector in string form. More info: https://kubernetes.io/docs/tasks/access-kubernetes-api/custom-resources/custom-resource-definitions#scale-subresource If there is no value under the given path in the custom resource, the `status.selector` value in the `/scale` subresource will default to the empty string.² +string +î + io.k8s.api.apps.v1.DaemonSetListÉ"-DaemonSetList is a collection of daemon sets.šitems² +objectÊ© +Ë +metadata¾ +;#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +string +\ +itemsS"A list of daemon sets.² +arrayº. +, +*#/definitions/io.k8s.api.apps.v1.DaemonSet +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +stringúW +x-kubernetes-group-version-kind42- group: apps + kind: DaemonSetList + version: v1 + +Ì +2io.k8s.api.authorization.v1.SelfSubjectRulesReview•"ˆSelfSubjectRulesReview enumerates the set of actions the current user can perform within a namespace. The returned list of actions may be incomplete depending on the server's authorization mode, and any errors experienced during the evaluation. SelfSubjectRulesReview should be used by UIs to show/hide actions, or to quickly let an end user reason about their permissions. It should NOT Be used by external systems to drive authorization decisions as this raises confused deputy, cache lifetime/revocation, and correctness concerns. SubjectAccessReview, and LocalAccessReview are the correct way to defer authorization decisions to the API server.šspec² +objectÊ +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +string +K +metadata? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta +Š +spec +D#/definitions/io.k8s.api.authorization.v1.SelfSubjectRulesReviewSpec"9Spec holds information about the request being evaluated. +§ +statusœ +B#/definitions/io.k8s.api.authorization.v1.SubjectRulesReviewStatus"VStatus is filled in by the server and indicates the set of actions a user can perform. +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +stringúp +x-kubernetes-group-version-kindMK- group: authorization.k8s.io + kind: SelfSubjectRulesReview + version: v1 + + +:io.k8s.api.autoscaling.v2beta1.CrossVersionObjectReferenceÂ"bCrossVersionObjectReference contains enough information to let you identify the referred resource.škindšname² +objectÊÁ +6 + +apiVersion("API version of the referent² +string +˜ +kind"Kind of the referent; More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds"² +string +l +named"WName of the referent; More info: http://kubernetes.io/docs/user-guide/identifiers#names² +string +ý +io.k8s.api.core.v1.Taintà"`The node this Taint is attached to has the "effect" on any pod that does not tolerate the Taint.škeyšeffect² +objectÊà +­ + timeAddedŸ +7#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"dTimeAdded represents the time at which the taint was added. It is only written for NoExecute taints. +E +value<"/The taint value corresponding to the taint key.² +string +  +effect•"‡Required. The effect of the taint on pods that do not tolerate the taint. Valid effects are NoSchedule, PreferNoSchedule and NoExecute.² +string +D +key="0Required. The taint key to be applied to a node.² +string +Ž + +*io.k8s.api.networking.v1.NetworkPolicyPeerß "lNetworkPolicyPeer describes a peer to allow traffic to/from. Only certain combinations of fields are allowed² +objectÊâ +Ú +namespaceSelectorÄ +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector"ÿSelects Namespaces using cluster-scoped labels. This field follows standard label selector semantics; if present but empty, it selects all namespaces. + +If PodSelector is also set, then the NetworkPolicyPeer as a whole selects the Pods matching PodSelector in the Namespaces selected by NamespaceSelector. Otherwise it selects all Pods in the Namespaces selected by NamespaceSelector. +Ô + podSelectorÄ +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector"ÿThis is a label selector which selects Pods. This field follows standard label selector semantics; if present but empty, it selects all pods. + +If NamespaceSelector is also set, then the NetworkPolicyPeer as a whole selects the Pods matching PodSelector in the Namespaces selected by NamespaceSelector. Otherwise it selects the Pods matching PodSelector in the policy's own Namespace. +« +ipBlockŸ +.#/definitions/io.k8s.api.networking.v1.IPBlock"mIPBlock defines policy on a particular IPBlock. If this field is set then neither of the other fields can be. +¡ + +Fio.k8s.api.admissionregistration.v1.ValidatingWebhookConfigurationListÖ "OValidatingWebhookConfigurationList is a list of ValidatingWebhookConfiguration.šitems² +objectÊæ +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +string +” +itemsŠ"'List of ValidatingWebhookConfiguration.² +arrayºT +R +P#/definitions/io.k8s.api.admissionregistration.v1.ValidatingWebhookConfiguration +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +string +Ï +metadata +;#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"‚Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kindsú„ +x-kubernetes-group-version-kinda_- group: admissionregistration.k8s.io + kind: ValidatingWebhookConfigurationList + version: v1 + +° +1io.k8s.api.authorization.v1.NonResourceAttributesú"{NonResourceAttributes includes the authorization attributes available for non-resource requests to the Authorizer interface² +objectÊo +8 +path0"#Path is the URL path of the request² +string +3 +verb+"Verb is the standard HTTP verb² +string +æ ++io.k8s.api.autoscaling.v2beta2.MetricTarget¶"aMetricTarget defines the target value, average value, or average utilization of a specific metricštype² +objectʽ +™ +averageUtilization‚int32"ìaverageUtilization is the target value of the average of the resource metric across all relevant pods, represented as a percentage of the requested value of the resource for the pods. Currently only valid for Resource metric source type² +integer +¶ + averageValue¥ +;#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity"faverageValue is the target value of the average of the metric across all relevant pods (as a quantity) +c +type["Ntype represents whether the metric type is Utilization, Value, or AverageValue² +string +€ +valuew +;#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity"8value is the target value of the metric (as a quantity). +Œ +#io.k8s.api.core.v1.NodeSelectorTermä"¥A null or empty node selector term matches no objects. The requirements of them are ANDed. The TopologySelectorTerm type implements a subset of the NodeSelectorTerm.² +objectÊ­ +– +matchExpressions"6A list of node selector requirements by node's labels.² +arrayº< +: +8#/definitions/io.k8s.api.core.v1.NodeSelectorRequirement +‘ + matchFields"6A list of node selector requirements by node's fields.² +arrayº< +: +8#/definitions/io.k8s.api.core.v1.NodeSelectorRequirement + +4io.k8s.api.flowcontrol.v1beta1.ServiceAccountSubject×"RServiceAccountSubject holds detailed information for service-account-kind subject.š namespacešname² +objectÊá +y +nameq"d`name` is the name of matching ServiceAccount objects, or "*" to match regardless of name. Required.² +string +d + namespaceW"J`namespace` is the namespace of matching ServiceAccount objects. Required.² +string + +#io.k8s.api.node.v1.RuntimeClassListè"3RuntimeClassList is a list of RuntimeClass objects.šitems² +objectʸ +k +itemsb""Items is a list of schema objects.² +arrayº1 +/ +-#/definitions/io.k8s.api.node.v1.RuntimeClass +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +string +Ë +metadata¾ +;#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +stringúa +x-kubernetes-group-version-kind><- group: node.k8s.io + kind: RuntimeClassList + version: v1 + +” +-io.k8s.apimachinery.pkg.apis.meta.v1.FieldsV1â"ÔFieldsV1 stores a set of fields in a data structure like a Trie, in JSON format. + +Each key is either a '.' representing the field itself, and will always map to an empty set, or a string representing a sub-field or item. The string will follow one of these four formats: 'f:', where is the name of a field in a struct, or key in a map 'v:', where is the exact json formatted value of a list item 'i:', where is position of a item in a list 'k:', where is a map of a list item's key fields to their unique values If a key maps to an empty Fields value, the field that key represents is part of the set. + +The exact format is defined in sigs.k8s.io/structured-merge-diff² +object +ó +"io.k8s.api.apps.v1.DaemonSetStatusÌ">DaemonSetStatus represents the current status of a daemon set.šcurrentNumberScheduledšnumberMisscheduledšdesiredNumberScheduledš numberReady² +objectʨ +ô +desiredNumberScheduledÙint32"ÃThe total number of nodes that should be running the daemon pod (including nodes correctly running the daemon pod). More info: https://kubernetes.io/docs/concepts/workloads/controllers/daemonset/² +integer +Å +numberUnavailable¯int32"™The number of nodes that should be running the daemon pod and have none of the daemon pod running and available (ready for at least spec.minReadySeconds)² +integer +ã +currentNumberScheduledÈint32"²The number of nodes that are running at least 1 daemon pod and are supposed to run the daemon pod. More info: https://kubernetes.io/docs/concepts/workloads/controllers/daemonset/² +integer +Ê +numberAvailable¶int32" The number of nodes that should be running the daemon pod and have one or more of the daemon pod running and available (ready for at least spec.minReadySeconds)² +integer +Ý +numberMisscheduledÆint32"°The number of nodes that are running the daemon pod, but are not supposed to run the daemon pod. More info: https://kubernetes.io/docs/concepts/workloads/controllers/daemonset/² +integer +˜ + numberReadyˆint32"sThe number of nodes that should be running the daemon pod and have one or more of the daemon pod running and ready.² +integer +l +observedGenerationVint64"AThe most recent generation observed by the daemon set controller.² +integer +l +updatedNumberScheduledRint32"=The total number of nodes that are running updated daemon pod² +integer +ä +collisionCountÑint32"»Count of hash collisions for the DaemonSet. The DaemonSet controller uses this field as a collision avoidance mechanism when it needs to create the name for the newest ControllerRevision.² +integer +õ + +conditionsæ"LRepresents the latest available observations of a DaemonSet's current state.² +arrayº7 +5 +3#/definitions/io.k8s.api.apps.v1.DaemonSetConditionú' +x-kubernetes-patch-merge-keytype +ú' +x-kubernetes-patch-strategymerge + +ó +=io.k8s.api.certificates.v1.CertificateSigningRequestCondition± "^CertificateSigningRequestCondition describes a condition of a CertificateSigningRequest objectštypešstatus² +objectʲ +L +reasonB"5reason indicates a brief reason for the request state² +string +– +status‹"~status of the condition, one of True, False, Unknown. Approved, Denied, and Failed conditions may not be "False" or "Unknown".² +string +˜ +type"type of the condition. Known conditions are "Approved", "Denied", and "Failed". + +An "Approved" condition is added via the /approval subresource, indicating the request was approved and should be issued by the signer. + +A "Denied" condition is added via the /approval subresource, indicating the request was denied and should not be issued by the signer. + +A "Failed" condition is added via the /status subresource, indicating the signer failed to issue the certificate. + +Approved and Denied conditions are mutually exclusive. Approved, Denied, and Failed conditions cannot be removed once added. + +Only one condition of a given type is allowed.² +string +¶ +lastTransitionTimeŸ +7#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"ãlastTransitionTime is the time the condition last transitioned from one status to another. If unset, when a new condition type is added or an existing condition's status is changed, the server defaults this to the current time. +Œ +lastUpdateTimez +7#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"?lastUpdateTime is the time of the last update to this condition +f +message["Nmessage contains a human readable message with details about the request state² +string +… +!io.k8s.api.policy.v1beta1.IDRangeß"6IDRange provides a min/max of an allowed range of IDs.šminšmax² +objectÊŒ +C +max<int64"'max is the end of the range, inclusive.² +integer +E +min>int64")min is the start of the range, inclusive.² +integer +Ø +Cio.k8s.kube-aggregator.pkg.apis.apiregistration.v1.APIServiceStatus"AAPIServiceStatus contains derived information about an API server² +objectʾ +» + +conditions¬"$Current service state of apiService.² +arrayºX +V +T#/definitions/io.k8s.kube-aggregator.pkg.apis.apiregistration.v1.APIServiceConditionú' +x-kubernetes-list-map-keys - type +ú +x-kubernetes-list-typemap +ú' +x-kubernetes-patch-merge-keytype +ú' +x-kubernetes-patch-strategymerge + +° + +Kio.k8s.api.admissionregistration.v1beta1.ValidatingWebhookConfigurationListà "OValidatingWebhookConfigurationList is a list of ValidatingWebhookConfiguration.šitems² +objectÊë +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +string +™ +items"'List of ValidatingWebhookConfiguration.² +arrayºY +W +U#/definitions/io.k8s.api.admissionregistration.v1beta1.ValidatingWebhookConfiguration +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +string +Ï +metadata +;#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"‚Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kindsú‰ +x-kubernetes-group-version-kindfd- group: admissionregistration.k8s.io + kind: ValidatingWebhookConfigurationList + version: v1beta1 + +â +&io.k8s.api.core.v1.QuobyteVolumeSource·"‡Represents a Quobyte mount that lasts the lifetime of a pod. Quobyte volumes do not support ownership management or SELinux relabeling.šregistryšvolume² +objectÊŠ +œ +tenant‘"ƒTenant owning the given Quobyte volume in the Backend Used with dynamically provisioned Quobyte volumes, value is set by the plugin² +string +Q +userI""1Group to map volume access to Default is no group² +string +‚ +readOnlyv"hReadOnly here will force the Quobyte volume to be mounted with read-only permissions. Defaults to false.² +boolean +á +registryÔ"ÆRegistry represents a single or multiple Quobyte Registry services specified as a string as host:port pair (multiple entries are separated with commas) which acts as the central registry for volumes² +string +È +(io.k8s.api.core.v1.ResourceFieldSelector›"ZResourceFieldSelector represents container resources (cpu, memory) and their output formatšresource² +objectÊ¥ +Y + containerNameH";Container name: required for volumes, optional for env vars² +string + +divisor„ +;#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity"ESpecifies the output format of the exposed resources, defaults to "1" +5 +resource)"Required: resource to select² +string +ó +io.k8s.api.events.v1.EventListÐ"%EventList is a list of Event objects.šitems² +objectʳ +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +string +f +items]""items is a list of schema objects.² +arrayº, +* +(#/definitions/io.k8s.api.events.v1.Event +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +string +Ë +metadata¾ +;#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadataú\ +x-kubernetes-group-version-kind97- group: events.k8s.io + kind: EventList + version: v1 + +ü +&io.k8s.api.networking.v1.IngressStatusÑ"8IngressStatus describe the current state of the Ingress.² +objectʈ +… + loadBalanceru +3#/definitions/io.k8s.api.core.v1.LoadBalancerStatus">LoadBalancer contains the current status of the load-balancer. +›, +#io.k8s.api.storage.v1.CSIDriverSpecó+"2CSIDriverSpec is the specification of a CSIDriver.² +objectÊ°+ +€ +storageCapacityì"ÝIf set to true, storageCapacity indicates that the CSI volume driver wants pod scheduling to consider the storage capacity that the driver deployment will report by creating CSIStorageCapacity objects with capacity information. + +The check can be enabled immediately when deploying a driver. In that case, provisioning new volumes with late binding will pause until the driver deployment has published some suitable CSIStorageCapacity object. + +Alternatively, the driver can be deployed with the field unset or false and it can be flipped later when storage capacity information has been published. + +This field is immutable. + +This is a beta field and only available when the CSIStorageCapacity feature is enabled. The default is false.² +boolean +å + tokenRequestsÓ"éTokenRequests indicates the CSI driver needs pods' service account tokens it is mounting volume for to do necessary authentication. Kubelet will pass the tokens in VolumeContext in the CSI NodePublishVolume calls. The CSI driver should parse and validate the following VolumeContext: "csi.storage.k8s.io/serviceAccount.tokens": { + "": { + "token": , + "expirationTimestamp": , + }, + ... +} + +Note: Audience in each TokenRequest should be different and at most one token is empty string. To receive a new token after expiry, RequiresRepublish can be used to trigger NodePublishVolume periodically. + +This is a beta feature and only available when the CSIServiceAccountToken feature is enabled.² +arrayº4 +2 +0#/definitions/io.k8s.api.storage.v1.TokenRequestú# +x-kubernetes-list-type atomic + +ê +volumeLifecycleModesÑ"‘volumeLifecycleModes defines what kind of volumes this CSI volume driver supports. The default if the list is empty is "Persistent", which is the usage defined by the CSI specification and implemented in Kubernetes via the usual PV/PVC mechanism. The other mode is "Ephemeral". In this mode, volumes are defined inline inside the pod spec with CSIVolumeSource and their lifecycle is tied to the lifecycle of that pod. A driver has to be aware of this because it is only going to get a NodePublishVolume call for such a volume. For more information about implementing this mode, see https://kubernetes-csi.github.io/docs/ephemeral-local-volumes.html A driver can support one or more of these modes and more modes may be added in the future. This field is beta. + +This field is immutable.² +arrayº + ² +stringú +x-kubernetes-list-typeset + +É +attachRequired¶"§attachRequired indicates this CSI volume driver requires an attach operation (because it implements the CSI ControllerPublishVolume() method), and that the Kubernetes attach detach controller should call the attach volume interface which checks the volumeattachment status and waits until the volume is attached before proceeding to mounting. The CSI external-attacher coordinates with CSI volume driver and updates the volumeattachment status when the attach operation is complete. If the CSIDriverRegistry feature gate is enabled and the value is specified to false, the attach operation will be skipped. Otherwise the attach operation will be called. + +This field is immutable.² +boolean +Û + fsGroupPolicyÉ"»Defines if the underlying volume supports changing ownership and permission of the volume before being mounted. Refer to the specific FSGroupPolicy values for additional details. This field is alpha-level, and is only honored by servers that enable the CSIVolumeFSGroupPolicy feature gate. + +This field is immutable.² +string +© +podInfoOnMount– "‡ If set to true, podInfoOnMount indicates this CSI volume driver requires additional pod information (like podName, podUID, etc.) during mount operations. If set to false, pod information will not be passed on mount. Default is false. The CSI driver specifies podInfoOnMount as part of driver deployment. If true, Kubelet will pass pod information as VolumeContext in the CSI NodePublishVolume() calls. The CSI driver is responsible for parsing and validating the information passed in as VolumeContext. The following VolumeConext will be passed if podInfoOnMount is set to true. This list might grow, but the prefix will be used. "csi.storage.k8s.io/pod.name": pod.Name "csi.storage.k8s.io/pod.namespace": pod.Namespace "csi.storage.k8s.io/pod.uid": string(pod.UID) "csi.storage.k8s.io/ephemeral": "true" if the volume is an ephemeral inline volume + defined by a CSIVolumeSource, otherwise "false" + +"csi.storage.k8s.io/ephemeral" is a new feature in Kubernetes 1.16. It is only required for drivers which support both the "Persistent" and "Ephemeral" VolumeLifecycleMode. Other drivers can leave pod info disabled and/or ignore this field. As Kubernetes 1.15 doesn't support this field, drivers can only support one mode when deployed on such a cluster and the deployment determines which mode that is, for example via a command line parameter of the driver. + +This field is immutable.² +boolean +ÿ +requiresRepublishé"ÚRequiresRepublish indicates the CSI driver wants `NodePublishVolume` being periodically called to reflect any possible change in the mounted volume. This field defaults to false. + +Note: After a successful initial NodePublishVolume call, subsequent calls to NodePublishVolume should only update the contents of the volume. New mount points will not be seen by a running container. + +This is a beta feature and only available when the CSIServiceAccountToken feature is enabled.² +boolean + +!io.k8s.api.apps.v1.DeploymentListç"(DeploymentList is a list of Deployments.šitems² +objectÊË +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +string +h +items_"!Items is the list of Deployments.² +arrayº/ +- ++#/definitions/io.k8s.api.apps.v1.Deployment +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +string +b +metadataV +;#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"Standard list metadata.úX +x-kubernetes-group-version-kind53- group: apps + kind: DeploymentList + version: v1 + +Õ +!io.k8s.api.core.v1.LimitRangeItem¯ "SLimitRangeItem defines a min/max usage limit for any resource that matches on kind.štype² +objectÊÄ +× +maxLimitRequestRatio¾"îMaxLimitRequestRatio if specified, the named resource must have a request and limit that are both non-zero where limit divided by request is less than or equal to the enumerated value; this represents the max burst for the named resource.ª? += +;#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity² +object +‹ +minƒ"4Min usage constraints on this kind by resource name.ª? += +;#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity² +object +A +type9",Type of resource that this limit applies to.² +string +² +default¦"WDefault resource requirement limit value by resource name if resource limit is omitted.ª? += +;#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity² +object +Ó +defaultRequestÀ"qDefaultRequest is the default resource requirement request value by resource name if resource request is omitted.ª? += +;#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity² +object +‹ +maxƒ"4Max usage constraints on this kind by resource name.ª? += +;#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity² +object +ƒ +,io.k8s.api.core.v1.PersistentVolumeClaimSpecÒ "PersistentVolumeClaimSpec describes the common attributes of storage devices and allows a Source for provider-specific attributes² +objectÊ¿ +Ë + accessModes»"žAccessModes contains the desired access modes the volume should have. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#access-modes-1² +arrayº + ² +string +Ô + +dataSourceÅ +:#/definitions/io.k8s.api.core.v1.TypedLocalObjectReference"†This field can be used to specify either: * An existing VolumeSnapshot object (snapshot.storage.k8s.io/VolumeSnapshot) * An existing PVC (PersistentVolumeClaim) * An existing custom resource that implements data population (Alpha) In order to use custom resource types that implement data population, the AnyVolumeDataSource feature gate must be enabled. If the provisioner or an external controller can support the specified data source, it will create a new volume based on the contents of the specified data source. +Þ + resourcesÐ +5#/definitions/io.k8s.api.core.v1.ResourceRequirements"–Resources represents the minimum resources the volume should have. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources +ƒ +selectorw +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector"3A label query over volumes to consider for binding. +¤ +storageClassName"Name of the StorageClass required by the claim. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#class-1² +string + + +volumeModeŽ"€volumeMode defines what type of volume is required by the claim. Value of Filesystem is implied when not included in claim spec.² +string +j + +volumeName\"OVolumeName is the binding reference to the PersistentVolume backing this claim.² +string +à +)io.k8s.api.core.v1.PersistentVolumeStatus•"DPersistentVolumeStatus is the current status of a persistent volume.² +objectÊÀ +j +message_"RA human-readable message indicating details about why the volume is in this state.² +string +» +phase±"£Phase indicates if a volume is available, bound to a claim, or released by a claim. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#phase² +string +“ +reasonˆ"{Reason is a brief CamelCase string that describes any failure and is meant for machine parsing and tidy display in the CLI.² +string +Ó +*io.k8s.api.networking.v1.NetworkPolicySpec¤"?NetworkPolicySpec provides the specification of a NetworkPolicyš podSelector² +objectÊÆ +Ï +egressÄ"òList of egress rules to be applied to the selected pods. Outgoing traffic is allowed if there are no NetworkPolicies selecting the pod (and cluster policy otherwise allows the traffic), OR if the traffic matches at least one egress rule across all of the NetworkPolicy objects whose podSelector matches the pod. If this field is empty then this NetworkPolicy limits all outgoing traffic (and serves solely to ensure that the pods it selects are isolated by default). This field is beta-level in 1.8² +arrayºB +@ +>#/definitions/io.k8s.api.networking.v1.NetworkPolicyEgressRule +ã +ingress×"„List of ingress rules to be applied to the selected pods. Traffic is allowed to a pod if there are no NetworkPolicies selecting the pod (and cluster policy otherwise allows the traffic), OR if the traffic source is the pod's local node, OR if the traffic matches at least one ingress rule across all of the NetworkPolicy objects whose podSelector matches the pod. If this field is empty then this NetworkPolicy does not allow any traffic (and serves solely to ensure that the pods it selects are isolated by default)² +arrayºC +A +?#/definitions/io.k8s.api.networking.v1.NetworkPolicyIngressRule +Û + podSelectorË +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector"†Selects the pods to which this NetworkPolicy object applies. The array of ingress rules is applied to any pods selected by this field. Multiple network policies can select the same set of pods. In this case, the ingress rules for each are combined additively. This field is NOT optional and follows standard label selector semantics. An empty podSelector matches all pods in this namespace. +­ + policyTypes"€List of rule types that the NetworkPolicy relates to. Valid options are ["Ingress"], ["Egress"], or ["Ingress", "Egress"]. If this field is not specified, it will default based on the existence of Ingress or Egress rules; policies that contain an Egress section are assumed to affect Egress, and all policies (whether or not they contain an Ingress section) are assumed to affect Ingress. If you want to write an egress-only policy, you must explicitly specify policyTypes [ "Egress" ]. Likewise, if you want to write a policy that specifies that no egress is allowed, you must specify a policyTypes value that include "Egress" (since such a policy would not include an Egress section and would otherwise default to just [ "Ingress" ]). This field is beta-level in 1.8² +arrayº + ² +string +ž +Fio.k8s.kube-aggregator.pkg.apis.apiregistration.v1beta1.APIServiceSpecÓ"£APIServiceSpec contains information for locating and communicating with a server. Only https is supported, though you are able to disable certificate verification.šgroupPriorityMinimumšversionPriority² +objectÊõ +X +versionM"@Version is the API version this server hosts. For example, "v1"² +string +ä +versionPriorityÐint32"ºVersionPriority controls the ordering of this API version inside of its group. Must be greater than zero. The primary sort is based on VersionPriority, ordered highest to lowest (20 before 10). Since it's inside of a group, the number can be small, probably in the 10s. In case of equal version priorities, the version string will be used to compute the order inside a group. If the version string is "kube-like", it will sort above non "kube-like" version strings, which are ordered lexicographically. "Kube-like" versions start with a "v", then are followed by a number (the major version), then optionally the string "alpha" or "beta" and another number (the minor version). These are sorted first by GA > beta > alpha (where GA is a version with no suffix such as beta or alpha), and then by comparing major version, then minor version. An example sorted list of versions: v10, v2, v1, v11beta2, v10beta3, v3beta1, v12alpha1, v11alpha2, foo1, foo10.² +integer +ì +caBundleßbyte"¥CABundle is a PEM encoded CA bundle which will be used to validate an API server's serving certificate. If unspecified, system trust roots on the apiserver are used.² +stringú# +x-kubernetes-list-type atomic + +C +group:"-Group is the API group name this server hosts² +string +± +groupPriorityMinimum˜int32"‚GroupPriorityMininum is the priority this group should have at least. Higher priority means that the group is preferred by clients over lower priority ones. Note that other versions of this group might specify even higher GroupPriorityMininum values such that the whole group gets a higher priority. The primary sort is based on GroupPriorityMinimum, ordered highest number to lowest (20 before 10). The secondary sort is based on the alphabetical comparison of the name of the object. (v1.bar before v1.foo) We'd recommend something like: *.k8s.io (except extensions) at 18000 and PaaSes (OpenShift, Deis) are recommended to be in the 2000s² +integer +Í +insecureSkipTLSVerify³"¤InsecureSkipTLSVerify disables TLS certificate verification when communicating with this server. This is strongly discouraged. You should use the CABundle instead.² +boolean +ù +serviceí +V#/definitions/io.k8s.kube-aggregator.pkg.apis.apiregistration.v1beta1.ServiceReference"’Service is a reference to the service for this API server. It must communicate on port 443. If the Service is nil, that means the handling for the API groupversion is handled locally on this server. The call will simply delegate to the normal handler chain to be fulfilled. +± +:io.k8s.api.autoscaling.v2beta1.HorizontalPodAutoscalerSpecò "_HorizontalPodAutoscalerSpec describes the desired functionality of the HorizontalPodAutoscaler.šscaleTargetRefš maxReplicas² +objectÊã + +¶ +metricsª"ßmetrics contains the specifications for which to use to calculate the desired replica count (the maximum replica count across all metrics will be used). The desired replica count is calculated multiplying the ratio between the target value and the current value by the current number of pods. Ergo, metrics used must decrease as the pod count is increased, and vice-versa. See the individual metric source types for more information about how each type of metric must respond.² +arrayº; +9 +7#/definitions/io.k8s.api.autoscaling.v2beta1.MetricSpec +ò + minReplicasâint32"ÌminReplicas is the lower limit for the number of replicas to which the autoscaler can scale down. It defaults to 1 pod. minReplicas is allowed to be 0 if the alpha feature gate HPAScaleToZero is enabled and at least one Object or External metric is configured. Scaling is active as long as at least one metric value is available.² +integer +† +scaleTargetRefó +H#/definitions/io.k8s.api.autoscaling.v2beta1.CrossVersionObjectReference"¦scaleTargetRef points to the target resource to scale, and is used to the pods for which metrics should be collected, as well as to actually change the replica count. +© + maxReplicas™int32"ƒmaxReplicas is the upper limit for the number of replicas to which the autoscaler can scale up. It cannot be less that minReplicas.² +integer +Á +>io.k8s.api.autoscaling.v2beta2.HorizontalPodAutoscalerBehaviorþ"™HorizontalPodAutoscalerBehavior configures the scaling behavior of the target in both Up and Down directions (scaleUp and scaleDown fields respectively).² +objectÊÓ +° + scaleDown¢ +<#/definitions/io.k8s.api.autoscaling.v2beta2.HPAScalingRules"áscaleDown is scaling policy for scaling Down. If not set, the default value is to allow to scale down to minReplicas pods, with a 300 second stabilization window (i.e., the highest recommendation for the last 300sec is used). + +scaleUp‘ +<#/definitions/io.k8s.api.autoscaling.v2beta2.HPAScalingRules"ÐscaleUp is scaling policy for scaling Up. If not set, the default value is the higher of: + * increase no more than 4 pods per 60 seconds + * double the number of pods per 60 seconds +No stabilization is used. + +(io.k8s.api.core.v1.PersistentVolumeClaim• "NPersistentVolumeClaim is a user's request for and claim to a persistent volume² +objectÊÖ + +† +statusû +<#/definitions/io.k8s.api.core.v1.PersistentVolumeClaimStatus"ºStatus represents the current information/status of a persistent volume claim. Read-only. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#persistentvolumeclaims +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +string +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +string +Ò +metadataÅ +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"ƒStandard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata +ø +specï +:#/definitions/io.k8s.api.core.v1.PersistentVolumeClaimSpec"°Spec defines the desired characteristics of a volume requested by a pod author. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#persistentvolumeclaimsú] +x-kubernetes-group-version-kind:8- group: "" + kind: PersistentVolumeClaim + version: v1 + +à +@io.k8s.api.flowcontrol.v1beta1.LimitedPriorityLevelConfiguration› "èLimitedPriorityLevelConfiguration specifies how to handle requests that are subject to limits. It addresses two issues: + * How are requests for this priority level limited? + * What should be done with requests that exceed the limit?² +objectÊ¡ +ö +assuredConcurrencySharesÙint32"Ã`assuredConcurrencyShares` (ACS) configures the execution limit, which is a limit on the number of requests of this priority level that may be exeucting at a given time. ACS must be a positive number. The server's concurrency limit (SCL) is divided among the concurrency-controlled priority levels in proportion to their assured concurrency shares. This produces the assured concurrency value (ACV) --- the number of requests that may be executing at a time --- for each such priority level: + + ACV(l) = ceil( SCL * ACS(l) / ( sum[priority levels k] ACS(k) ) ) + +bigger numbers of ACS mean more reserved concurrent requests (at the expense of every other PL). This field has a default value of 30.² +integer +¥ + limitResponse“ +:#/definitions/io.k8s.api.flowcontrol.v1beta1.LimitResponse"U`limitResponse` indicates what to do with requests that can not be executed right now + +io.k8s.api.autoscaling.v1.Scalež "2Scale represents a scaling request for a resource.² +objectÊ‚ + +Ñ +metadataÄ +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"‚Standard object metadata; More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata. +Ñ +specÈ +1#/definitions/io.k8s.api.autoscaling.v1.ScaleSpec"’defines the behavior of the scale. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status. +Ú +statusÏ +3#/definitions/io.k8s.api.autoscaling.v1.ScaleStatus"—current status of the scale. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status. Read-only. +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +string +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +stringúV +x-kubernetes-group-version-kind31- group: autoscaling + kind: Scale + version: v1 + +­ +/io.k8s.api.autoscaling.v2beta2.MetricIdentifierù"FMetricIdentifier defines the name and optionally selector for a metricšname² +objectÊ› +9 +name1"$name is the name of the given metric² +string +Ý +selectorÐ +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector"‹selector is the string-encoded form of a standard kubernetes label selector for the given metric When set, it is passed as an additional parameter to the metrics server for more specific metrics scoping. When unset, just the metricName will be used to gather metrics. +“ + +,io.k8s.api.core.v1.ReplicationControllerListâ "EReplicationControllerList is a collection of replication controllers.šitems² +objectÊ  +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +string +Î +itemsÄ"{List of replication controllers. More info: https://kubernetes.io/docs/concepts/workloads/controllers/replicationcontroller² +arrayº: +8 +6#/definitions/io.k8s.api.core.v1.ReplicationController +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +string +Ï +metadata +;#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"‚Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kindsúa +x-kubernetes-group-version-kind><- kind: ReplicationControllerList + version: v1 + group: "" + +Ú + +io.k8s.api.core.v1.Toleration¸ +"The pod this Toleration is attached to tolerates any taint that matches the triple using the matching operator .² +objectÊ™ +¢ +value˜"ŠValue is the taint value the toleration matches to. If the operator is Exists, the value should be empty, otherwise just a regular string.² +string +¸ +effect­"ŸEffect indicates the taint effect to match. Empty means match all taint effects. When specified, allowed values are NoSchedule, PreferNoSchedule and NoExecute.² +string +Ó +keyË"½Key is the taint key that the toleration applies to. Empty means match all taint keys. If the key is empty, operator must be Exists; this combination means to match all values and all keys.² +string +ö +operatoré"ÛOperator represents a key's relationship to the value. Valid operators are Exists and Equal. Defaults to Equal. Exists is equivalent to wildcard for value, so that a pod can tolerate all taints of a particular category.² +string +ç +tolerationSecondsÑint64"»TolerationSeconds represents the period of time the toleration (which must be of effect NoExecute, otherwise this field is ignored) tolerates the taint. By default, it is not set, which means tolerate the taint forever (do not evict). Zero and negative values will be treated as 0 (evict immediately) by the system.² +integer +æ +8io.k8s.api.networking.v1.IngressClassParametersReference©"}IngressClassParametersReference identifies an API object. This can be used to specify a cluster or namespace-scoped resource.škindšname² +objectÊ +Ú +apiGroupÍ"¿APIGroup is the group for the resource being referenced. If APIGroup is not specified, the specified Kind must be in the core API group. For any other third-party types, APIGroup is required.² +string +C +kind;".Kind is the type of resource being referenced.² +string +C +name;".Name is the name of resource being referenced.² +string + + namespace´"¦Namespace is the namespace of the resource being referenced. This field is required when scope is set to "Namespace" and must be unset when scope is set to "Cluster".² +string +Þ +scopeÔ"ÆScope represents if this refers to a cluster or namespace scoped resource. This may be set to "Cluster" (default) or "Namespace". Field can be enabled with IngressClassNamespacedParams feature gate.² +string +³ +]io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1beta1.CustomResourceDefinitionVersionÑ"//...` if `served` is true.² +string +Ø +$io.k8s.apimachinery.pkg.version.Info¯"TInfo contains versioning information. how we'll want to distribute that information.šmajoršminorš +gitVersionš gitCommitš gitTreeStateš buildDateš goVersionšcompileršplatform² +objectÊä + +major ² +string + +platform ² +string + +compiler ² +string + + gitTreeState ² +string + + +gitVersion ² +string + +minor ² +string + + buildDate ² +string + + gitCommit ² +string + + goVersion ² +string +š +0io.k8s.apimachinery.pkg.apis.meta.v1.APIResourceå"JAPIResource specifies the name of a resource and whether it is namespaced.šnameš singularNameš +namespacedškindšverbs² +objectÊØ +} + +categorieso"Scategories is a list of the grouped resources this resource belongs to (e.g. 'all')² +arrayº + ² +string +Ç +group½"¯group is the preferred group of the resource. Empty implies the group of the containing resource list. For subresources, this may have a different value, for example: Scale".² +string += +name5"(name is the plural name of the resource.² +string +T + +namespacedF"8namespaced indicates if a resource is namespaced or not.² +boolean +h + +shortNamesZ">shortNames is a list of suggested short names of the resource.² +arrayº + ² +string +Ì +storageVersionHashµ"§The hash value of the storage version, the version this resource is converted to when written to the data store. Value must be treated as opaque by clients. Only equality comparison on the value is valid. This is an alpha feature and may change or be removed in the future. The field is populated by the apiserver only if the StorageVersionHash feature gate is enabled. This field will remain optional even if it graduates.² +string +‰ +versioný"ïversion is the preferred version of the resource. Empty implies the version of the containing resource list For subresources, this may have a different value, for example: v1 (while inside a v1beta1 version of the core resource's group)".² +string +d +kind\"Okind is the kind for the resource (e.g. 'Foo' is the kind for a resource 'foo')² +string +ž + singularName"ÿsingularName is the singular name of the resource. This allows clients to handle plural and singular opaquely. The singularName is more correct for reporting status on a single item and both singular and plural are allowed from the kubectl CLI interface.² +string +« +verbs¡"„verbs is a list of supported kube verbs (this includes get, list, watch, create, update, patch, delete, deletecollection, and proxy)² +arrayº + ² +string +Ö +&io.k8s.api.apps.v1.ReplicaSetCondition«"LReplicaSetCondition describes the state of a replica set at a certain point.štypešstatus² +objectʾ +L +statusB"5Status of the condition, one of True, False, Unknown.² +string +3 +type+"Type of replica set condition.² +string +• +lastTransitionTime +7#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"DThe last time the condition transitioned from one status to another. +Y +messageN"AA human readable message indicating details about the transition.² +string +F +reason<"/The reason for the condition's last transition.² +string +Í +3io.k8s.api.authorization.v1.SubjectAccessReviewSpec•"¢SubjectAccessReviewSpec is a description of the access request. Exactly one of ResourceAuthorizationAttributes and NonResourceAuthorizationAttributes must be set² +objectÊá +Æ +extra¼"Extra corresponds to the user.Info.GetExtra() method from the authenticator. Since that is input to the authorizer it needs a reflection here.ª +² +arrayº + ² +string² +object +N +groupsD"(Groups is the groups you're testing for.² +arrayº + ² +string +ª +nonResourceAttributes +?#/definitions/io.k8s.api.authorization.v1.NonResourceAttributes"MNonResourceAttributes describes information for a non-resource access request +ª +resourceAttributes“ +<#/definitions/io.k8s.api.authorization.v1.ResourceAttributes"SResourceAuthorizationAttributes describes information for a resource access request +> +uid7"*UID information about the requesting user.² +string +« +user¢"”User is the user you're testing for. If you specify "User" but not "Groups", then is it interpreted as "What if User were not a member of any groups² +string +Ï +$io.k8s.api.batch.v1beta1.CronJobSpec¦ "YCronJobSpec describes how the job execution will look like and when it will actually run.šscheduleš jobTemplate² +objectÊ£ + +Ì +concurrencyPolicy¶"¨Specifies how to treat concurrent executions of a Job. Valid values are: - "Allow" (default): allows CronJobs to run concurrently; - "Forbid": forbids concurrent runs, skipping next run if previous run hasn't finished yet; - "Replace": cancels currently running job and replaces it with a new one² +string +· +failedJobsHistoryLimitœint32"†The number of failed finished jobs to retain. This is a pointer to distinguish between explicit zero and not specified. Defaults to 1.² +integer +‰ + jobTemplatez +6#/definitions/io.k8s.api.batch.v1beta1.JobTemplateSpec"@Specifies the job that will be created when executing a CronJob. +] +scheduleQ"DThe schedule in Cron format, see https://en.wikipedia.org/wiki/Cron.² +string +Ç +startingDeadlineSeconds«int64"•Optional deadline in seconds for starting the job if it misses scheduled time for any reason. Missed jobs executions will be counted as failed ones.² +integer +¿ +successfulJobsHistoryLimit int32"ŠThe number of successful finished jobs to retain. This is a pointer to distinguish between explicit zero and not specified. Defaults to 3.² +integer +  +suspend”"…This flag tells the controller to suspend subsequent executions, it does not apply to already started executions. Defaults to false.² +boolean +‚ +'io.k8s.api.core.v1.ResourceRequirementsÖ"AResourceRequirements describes the compute resource requirements.² +objectÊ„ +ö +limitsë"›Limits describes the maximum amount of compute resources allowed. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/ª? += +;#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity² +object +ˆ +requestsû"«Requests describes the minimum amount of compute resources required. If Requests is omitted for a container, it defaults to Limits if that is explicitly specified, otherwise to an implementation-defined value. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/ª? += +;#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity² +object +ð +/io.k8s.api.flowcontrol.v1beta1.FlowSchemaStatus¼">FlowSchemaStatus represents the current state of a FlowSchema.² +objectÊí +ê + +conditionsÛ";`conditions` is a list of the current states of FlowSchema.² +arrayºD +B +@#/definitions/io.k8s.api.flowcontrol.v1beta1.FlowSchemaConditionú +x-kubernetes-list-typemap +ú' +x-kubernetes-list-map-keys - type + +» +,io.k8s.api.policy.v1.PodDisruptionBudgetListŠ "@PodDisruptionBudgetList is a collection of PodDisruptionBudgets.šitems² +objectÊË +Ð +metadataà +;#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"ƒStandard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +string +y +itemsp"'Items is a list of PodDisruptionBudgets² +arrayº: +8 +6#/definitions/io.k8s.api.policy.v1.PodDisruptionBudget +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +stringúc +x-kubernetes-group-version-kind@>- group: policy + kind: PodDisruptionBudgetList + version: v1 + +… +)io.k8s.api.policy.v1beta1.AllowedHostPath×"AllowedHostPath defines the host volume conditions that will be enabled by a policy for pods to use. It requires the path prefix to be defined.² +objectʶ +­ + +pathPrefixž"pathPrefix is the path prefix that the host volume must match. It does not support `*`. Trailing slashes are trimmed when validating the path prefix with a host path. + +Examples: `/foo` would allow `/foo`, `/foo/` and `/foo/bar` `/foo` would not allow `/food` or `/etc/foo`² +string +ƒ +readOnlyw"iwhen set to true, will allow host volumes matching the pathPrefix only if all volume mounts are readOnly.² +boolean +‡ +io.k8s.api.core.v1.Endpointsæ"ýEndpoints is a collection of endpoints that implement the actual service. Example: + Name: "mysvc", + Subsets: [ + { + Addresses: [{"ip": "10.10.1.1"}, {"ip": "10.10.2.2"}], + Ports: [{"name": "a", "port": 8675}, {"name": "b", "port": 309}] + }, + { + Addresses: [{"ip": "10.10.3.3"}], + Ports: [{"name": "a", "port": 93}, {"name": "b", "port": 76}] + }, + ]² +objectʃ +Ò +metadataÅ +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"ƒStandard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata +® +subsets¢"ßThe set of all endpoints is the union of all subsets. Addresses are placed into subsets according to the IPs they share. A single address with multiple ports, some of which are ready and some of which are not (because they come from different containers) will result in the address being displayed in different subsets for the different ports. No address will appear in both Addresses and NotReadyAddresses in the same subset. Sets of addresses and ports that comprise a service.² +arrayº3 +1 +/#/definitions/io.k8s.api.core.v1.EndpointSubset +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +string +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +stringúQ +x-kubernetes-group-version-kind.,- group: "" + kind: Endpoints + version: v1 + +ð +6io.k8s.api.flowcontrol.v1beta1.PolicyRulesWithSubjectsµ "•PolicyRulesWithSubjects prescribes a test that applies to a request to an apiserver. The test considers the subject making the request, the verb being requested, and the resource to be acted upon. This PolicyRulesWithSubjects matches a request if and only if both (a) at least one member of subjects matches the request and (b) at least one member of resourceRules or nonResourceRules matches the request.šsubjects² +objectʃ +  +nonResourceRules‹"`nonResourceRules` is a list of NonResourcePolicyRules that identify matching requests according to their verb and the target non-resource URL.² +arrayºF +D +B#/definitions/io.k8s.api.flowcontrol.v1beta1.NonResourcePolicyRuleú# +x-kubernetes-list-type atomic + +Ù + resourceRulesÇ"Î`resourceRules` is a slice of ResourcePolicyRules that identify matching requests according to their verb and the target resource. At least one of `resourceRules` and `nonResourceRules` has to be non-empty.² +arrayºC +A +?#/definitions/io.k8s.api.flowcontrol.v1beta1.ResourcePolicyRuleú# +x-kubernetes-list-type atomic + + +subjectsô"†subjects is the list of normal user, serviceaccount, or group that this rule cares about. There must be at least one member in this slice. A slice that includes both the system:authenticated and system:unauthenticated user groups matches every request. Required.² +arrayº8 +6 +4#/definitions/io.k8s.api.flowcontrol.v1beta1.Subjectú# +x-kubernetes-list-type atomic + +í +Nio.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1beta1.ServiceReferenceš";ServiceReference holds a reference to Service.legacy.k8s.ioš namespacešname² +objectÊ» +Y +pathQ"Dpath is an optional URL path at which the webhook will be contacted.² +string +Î +portÅint32"¯port is an optional service port at which the webhook will be contacted. `port` should be a valid port number (1-65535, inclusive). Defaults to 443 for backward compatibility.² +integer +> +name6")name is the name of the service. Required² +string +M + namespace@"3namespace is the namespace of the service. Required² +string +Î +%io.k8s.api.core.v1.ConfigMapEnvSource¤"ÂConfigMapEnvSource selects a ConfigMap to populate the environment variables with. + +The contents of the target ConfigMap's Data field will represent the key-value pairs as environment variables.² +objectÊÐ +„ +name|"oName of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names² +string +G +optional;"-Specify whether the ConfigMap must be defined² +boolean +ù +io.k8s.api.core.v1.LimitRange× "OLimitRange sets resource usage limits for each kind of resource in a Namespace.² +objectÊ¢ +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +string +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +string +Ò +metadataÅ +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"ƒStandard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata +Í +specÄ +/#/definitions/io.k8s.api.core.v1.LimitRangeSpec"Spec defines the limits enforced. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-statusúR +x-kubernetes-group-version-kind/-- group: "" + kind: LimitRange + version: v1 + +· +"io.k8s.api.core.v1.PodTemplateSpec"QPodTemplateSpec describes the data a pod should have when created from a template² +objectÊ® +Ö +specÍ +(#/definitions/io.k8s.api.core.v1.PodSpec" Specification of the desired behavior of the pod. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status +Ò +metadataÅ +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"ƒStandard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata +º +)io.k8s.api.networking.v1.IngressClassListŒ"3IngressClassList is a collection of IngressClasses.šitems² +objectÊÖ +b +metadataV +;#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"Standard list metadata. +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +string +s +itemsj"$Items is the list of IngressClasses.² +arrayº7 +5 +3#/definitions/io.k8s.api.networking.v1.IngressClass +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +stringúg +x-kubernetes-group-version-kindDB- group: networking.k8s.io + kind: IngressClassList + version: v1 + +ƒ +io.k8s.api.core.v1.EndpointPortß"5EndpointPort is a tuple that describes a single port.šport² +objectÊ’ +b +protocolV"IThe IP protocol for this port. Must be UDP, TCP, or SCTP. Default is TCP.² +string +½ + appProtocol­"ŸThe application protocol for this port. This field follows standard Kubernetes label syntax. Un-prefixed names are reserved for IANA standard service names (as per RFC-6335 and http://www.iana.org/assignments/service-names). Non-standard protocols should use prefixed names such as mycompany.com/my-custom-protocol. This is a beta field that is guarded by the ServiceAppProtocol feature gate and enabled by default.² +string +¬ +name£"•The name of this port. This must match the 'name' field in the corresponding ServicePort. Must be a DNS_LABEL. Optional only if one port is defined.² +string += +port5int32" The port number of the endpoint.² +integer +ë +=io.k8s.api.networking.v1beta1.IngressClassParametersReference©"}IngressClassParametersReference identifies an API object. This can be used to specify a cluster or namespace-scoped resource.škindšname² +objectÊ +Ú +apiGroupÍ"¿APIGroup is the group for the resource being referenced. If APIGroup is not specified, the specified Kind must be in the core API group. For any other third-party types, APIGroup is required.² +string +C +kind;".Kind is the type of resource being referenced.² +string +C +name;".Name is the name of resource being referenced.² +string + + namespace´"¦Namespace is the namespace of the resource being referenced. This field is required when scope is set to "Namespace" and must be unset when scope is set to "Cluster".² +string +Þ +scopeÔ"ÆScope represents if this refers to a cluster or namespace scoped resource. This may be set to "Cluster" (default) or "Namespace". Field can be enabled with IngressClassNamespacedParams feature gate.² +string +¼ +3io.k8s.api.apps.v1.RollingUpdateStatefulSetStrategy„"kRollingUpdateStatefulSetStrategy is used to communicate parameter for RollingUpdateStatefulSetStrategyType.² +objectʈ +… + partitionxint32"cPartition indicates the ordinal at which the StatefulSet should be partitioned. Default value is 0.² +integer +¢ +'io.k8s.api.core.v1.EmptyDirVolumeSourceö"uRepresents an empty directory for a pod. Empty directory volumes support ownership management and SELinux relabeling.² +objectÊð +… +mediumú"ìWhat type of storage medium should back this directory. The default is "" which means to use the node's default medium. Must be an empty string (default) or Memory. More info: https://kubernetes.io/docs/concepts/storage/volumes#emptydir² +string +å + sizeLimit× +;#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity"—Total amount of local storage required for this EmptyDir volume. The size limit is also applicable for memory medium. The maximum usage on memory medium EmptyDir would be the minimum value between the SizeLimit specified here and the sum of memory limits of all containers in a pod. The default is nil which means that the limit is undefined. More info: http://kubernetes.io/docs/user-guide/volumes#emptydir +¿ +.io.k8s.api.discovery.v1beta1.EndpointSliceListŒ"6EndpointSliceList represents a list of endpoint slicesšitems² +objectÊÎ +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +string +k +itemsb"List of endpoint slices² +arrayº< +: +8#/definitions/io.k8s.api.discovery.v1beta1.EndpointSlice +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +string +b +metadataV +;#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"Standard list metadata.úl +x-kubernetes-group-version-kindIG- group: discovery.k8s.io + kind: EndpointSliceList + version: v1beta1 + +¶ +!io.k8s.api.node.v1alpha1.Overhead"ROverhead structure represents the resource overhead associated with running a pod.² +objectÊ­ +ª +podFixed"NPodFixed represents the fixed resource overhead associated with running a pod.ª? += +;#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity² +object +„ +io.k8s.api.rbac.v1.RoleListä"!RoleList is a collection of Rolesšitems² +objectÊÀ +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +string +Y +itemsP"Items is a list of Roles² +arrayº) +' +%#/definitions/io.k8s.api.rbac.v1.Role +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +string +f +metadataZ +;#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"Standard object's metadata.úg +x-kubernetes-group-version-kindDB- kind: RoleList + version: v1 + group: rbac.authorization.k8s.io + +å +2io.k8s.apimachinery.pkg.apis.meta.v1.StatusDetails® "éStatusDetails is a set of additional properties that MAY be set by the server to provide additional information about a response. The Reason field of a Status object defines what attributes will be set. Clients must ignore fields that do not match the defined type of each attribute, and should assume that any attribute may be empty, invalid, or under defined.² +objectʳ + +kind„"öThe kind attribute of the resource associated with the status StatusReason. On some operations may differ from the requested resource Kind. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +string +— +nameŽ"€The name attribute of the resource associated with the status StatusReason (when there is a single name which can be described).² +string +— +retryAfterSecondsint32"ëIf specified, the time in seconds before the operation should be retried. Some errors may indicate the client must take an alternate action - for those errors this field may indicate how long to wait before taking the alternate action.² +integer +¥ +uid"UID of the resource. (when there is a single resource which can be described). More info: http://kubernetes.io/docs/user-guide/identifiers#uids² +string +à +causesÕ"ƒThe Causes array includes more details associated with the StatusReason failure. Not all StatusReasons may provide detailed causes.² +arrayºB +@ +>#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.StatusCause +b +groupY"LThe group attribute of the resource associated with the status StatusReason.² +string +ž +!io.k8s.api.core.v1.ContainerStateø"¥ContainerState holds a possible state of container. Only one of its members may be specified. If none of them is specified, the default one is ContainerStateWaiting.² +objectÊÁ +f +running[ +6#/definitions/io.k8s.api.core.v1.ContainerStateRunning"!Details about a running container +o + +terminateda +9#/definitions/io.k8s.api.core.v1.ContainerStateTerminated"$Details about a terminated container +f +waiting[ +6#/definitions/io.k8s.api.core.v1.ContainerStateWaiting"!Details about a waiting container +è +%io.k8s.api.discovery.v1beta1.Endpoint¾"FEndpoint represents a single logical "backend" implementing a service.š addresses² +objectÊÛ +™ + +conditionsŠ +=#/definitions/io.k8s.api.discovery.v1beta1.EndpointConditions"Iconditions contains information about the current status of the endpoint. +” +hintsŠ +8#/definitions/io.k8s.api.discovery.v1beta1.EndpointHints"Nhints contains information associated with how an endpoint should be consumed. +Î +hostnameÁ"³hostname of this endpoint. This field may be used by consumers of endpoints to distinguish endpoints from each other (e.g. in DNS names). Multiple endpoints which use the same hostname should be considered fungible (e.g. multiple A values in DNS). Must be lowercase and pass DNS Label (RFC 1123) validation.² +string +Ú +nodeNameÍ"¿nodeName represents the name of the Node hosting this endpoint. This can be used to determine endpoints local to a Node. This field can be enabled with the EndpointSliceNodeName feature gate.² +string + + targetRef‚ +0#/definitions/io.k8s.api.core.v1.ObjectReference"NtargetRef is a reference to a Kubernetes object that represents this endpoint. +ó +topologyæ"Ètopology contains arbitrary topology information associated with the endpoint. These key/value pairs must conform with the label format. https://kubernetes.io/docs/concepts/overview/working-with-objects/labels Topology may include a maximum of 16 key/value pairs. This includes, but is not limited to the following well known keys: * kubernetes.io/hostname: the value indicates the hostname of the node + where the endpoint is located. This should match the corresponding + node label. +* topology.kubernetes.io/zone: the value indicates the zone where the + endpoint is located. This should match the corresponding node label. +* topology.kubernetes.io/region: the value indicates the region where the + endpoint is located. This should match the corresponding node label. +This field is deprecated and will be removed in future api versions.ª + ² +string² +object +î + addressesà" addresses of this endpoint. The contents of this field are interpreted according to the corresponding EndpointSlice addressType field. Consumers must handle different types of addresses in the context of their own capabilities. This must contain at least one address but no more than 100.² +arrayº + ² +stringú +x-kubernetes-list-typeset + +¹ +;io.k8s.api.policy.v1beta1.SupplementalGroupsStrategyOptionsù"dSupplementalGroupsStrategyOptions defines the strategy type and options used to create the strategy.² +objectÊ„ +‹ +ranges€"½ranges are the allowed ranges of supplemental groups. If you would like to force a single supplemental group then supply a single range with the same start and end. Required for MustRunAs.² +arrayº3 +1 +/#/definitions/io.k8s.api.policy.v1beta1.IDRange +t +rulel"_rule is the strategy that will dictate what supplemental groups is used in the SecurityContext.² +string +˜ + +Wio.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1.CustomResourceColumnDefinition¼ "KCustomResourceColumnDefinition specifies a column for server side printing.šnameštypešjsonPath² +objectÊÇ +B +name:"-name is a human readable name for the column.² +string + +priority€int32"êpriority is an integer defining the relative importance of this column compared to others. Lower numbers are considered higher priority. Columns that may be omitted in limited space scenarios should be given a priority greater than 0.² +integer +¯ +type¦"˜type is an OpenAPI type definition for this column. See https://github.com/OAI/OpenAPI-Specification/blob/master/versions/2.0.md#data-types for details.² +string +W + descriptionH";description is a human readable description of this column.² +string +¸ +format­"Ÿformat is an optional OpenAPI type definition for this column. The 'name' format is applied to the primary identifier column to assist in clients identifying column is the resource name. See https://github.com/OAI/OpenAPI-Specification/blob/master/versions/2.0.md#data-types for details.² +string +ª +jsonPath"jsonPath is a simple JSON path (i.e. with array notation) which is evaluated against each custom resource to produce the value for this column.² +string +’ +1io.k8s.api.autoscaling.v2beta1.ObjectMetricStatusÜ"ŽObjectMetricStatus indicates the current value of a metric describing a kubernetes object (for example, hits-per-second on an Ingress object).štargetš +metricNameš currentValue² +objectÊ— + + currentValue +;#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity"@currentValue is the current value of the metric (as a quantity). +L + +metricName>"1metricName is the name of the metric in question.² +string +÷ +selectorê +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector"¥selector is the string-encoded form of a standard kubernetes label selector for the given metric When set in the ObjectMetricSource, it is passed as an additional parameter to the metrics server for more specific metrics scoping. When unset, just the metricName will be used to gather metrics. +€ +targetv +H#/definitions/io.k8s.api.autoscaling.v2beta1.CrossVersionObjectReference"*target is the described Kubernetes object. +· + averageValue¦ +;#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity"gaverageValue is the current value of the average of the metric across all relevant pods (as a quantity) +à +#io.k8s.api.batch.v1.JobTemplateSpec¸"QJobTemplateSpec describes the data a Job should have when created from a template² +objectÊÖ +× +specÎ +)#/definitions/io.k8s.api.batch.v1.JobSpec" Specification of the desired behavior of the job. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status +ù +metadataì +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"ªStandard object's metadata of the jobs created from this template. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata +‚ +*io.k8s.api.core.v1.DownwardAPIVolumeSourceÓ"“DownwardAPIVolumeSource represents a volume containing downward API info. Downward API volumes support ownership management and SELinux relabeling.² +objectÊ® +¬ + defaultModeœint32"†Optional: mode bits to use on created files by default. Must be a Optional: mode bits used to set permissions on created files by default. Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts both octal and decimal values, JSON requires decimal values for mode bits. Defaults to 0644. Directories within the path are not affected by this setting. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.² +integer +} +itemst"+Items is a list of downward API volume file² +arrayº: +8 +6#/definitions/io.k8s.api.core.v1.DownwardAPIVolumeFile +¨ +#io.k8s.api.core.v1.NodeConfigSource€"uNodeConfigSource specifies a source of node configuration. Exactly one subfield (excluding metadata) must be non-nil.² +objectÊ{ +y + configMapl +:#/definitions/io.k8s.api.core.v1.ConfigMapNodeConfigSource".ConfigMap is a reference to a Node's ConfigMap +Ú +io.k8s.api.core.v1.NodeStatus¸"=NodeStatus is information about the current status of a node.² +objectÊê +¯ +nodeInfo¢ +/#/definitions/io.k8s.api.core.v1.NodeSystemInfo"oSet of ids/uuids to uniquely identify the node. More info: https://kubernetes.io/docs/concepts/nodes/node/#info +ƒ +volumesAttachedp".List of volumes that are attached to the node.² +arrayº3 +1 +/#/definitions/io.k8s.api.core.v1.AttachedVolume +d + volumesInUseT"8List of attachable volumes in use (mounted) by the node.² +arrayº + ² +string +¦ + addresses˜"„List of addresses reachable to the node. Queried from cloud provider, if available. More info: https://kubernetes.io/docs/concepts/nodes/node/#addresses Note: This field is declared as mergeable, but the merge key is not sufficiently unique, which can cause data corruption when it is merged. Callers should instead use a full-replacement patch. See http://pr.k8s.io/79391 for an example.² +arrayº0 +. +,#/definitions/io.k8s.api.core.v1.NodeAddressú' +x-kubernetes-patch-merge-keytype +ú' +x-kubernetes-patch-strategymerge + +t +daemonEndpointsa +4#/definitions/io.k8s.api.core.v1.NodeDaemonEndpoints")Endpoints of daemons running on the Node. +q +imagesg"%List of container images on this node² +arrayº3 +1 +/#/definitions/io.k8s.api.core.v1.ContainerImage +‘ +config† +1#/definitions/io.k8s.api.core.v1.NodeConfigStatus"QStatus of the config assigned to the node via the dynamic Kubelet config feature. +Í +phaseÃ"µNodePhase is the recently observed lifecycle phase of the node. More info: https://kubernetes.io/docs/concepts/nodes/node/#phase The field is never populated, and now is deprecated.² +string +Æ + allocatable¶"gAllocatable represents the resources of a node that are available for scheduling. Defaults to Capacity.ª? += +;#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity² +object +â +capacityÕ"…Capacity represents the total resources of a node. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#capacityª? += +;#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity² +object +¥ + +conditions–"€Conditions is an array of current observed node conditions. More info: https://kubernetes.io/docs/concepts/nodes/node/#condition² +arrayº2 +0 +.#/definitions/io.k8s.api.core.v1.NodeConditionú' +x-kubernetes-patch-merge-keytype +ú' +x-kubernetes-patch-strategymerge + +Ö +.io.k8s.api.policy.v1.PodDisruptionBudgetStatus£"ŠPodDisruptionBudgetStatus represents information about the status of a PodDisruptionBudget. Status may trail the actual state of a system.šdisruptionsAllowedšcurrentHealthyšdesiredHealthyš expectedPods² +objectÊÁ +ô + +conditionså"ôConditions contain conditions for PDB. The disruption controller sets the DisruptionAllowed condition. The following are known values for the reason field (additional reasons could be added in the future): - SyncFailed: The controller encountered an error and wasn't able to compute + the number of allowed disruptions. Therefore no disruptions are + allowed and the status of the condition will be False. +- InsufficientPods: The number of pods are either at or below the number + required by the PodDisruptionBudget. No disruptions are + allowed and the status of the condition will be False. +- SufficientPods: There are more pods than required by the PodDisruptionBudget. + The condition will be True, and the number of allowed + disruptions are provided by the disruptionsAllowed property.² +arrayº@ +> +<#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Conditionú' +x-kubernetes-list-map-keys - type +ú +x-kubernetes-list-typemap +ú' +x-kubernetes-patch-merge-keytype +ú' +x-kubernetes-patch-strategymerge + +E +currentHealthy3int32"current number of healthy pods² +integer +M +desiredHealthy;int32"&minimum desired number of healthy pods² +integer + + disruptedPodsû"¯DisruptedPods contains information about pods whose eviction was processed by the API server eviction subresource handler but has not yet been observed by the PodDisruptionBudget controller. A pod will be in this map from the time when the API server processed the eviction request to the time when the pod is seen by PDB controller as having been marked for deletion (or after a timeout). The key in the map is the name of the pod and the value is the time when the API server processed the eviction request. If the deletion didn't occur and a pod is still there it will be removed from the list automatically by PodDisruptionBudget controller after some time. If everything goes smooth this map should be empty for the most of the time. Large number of entries in the map may indicate problems with pod deletions.ª; +9 +7#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time² +object +` +disruptionsAllowedJint32"5Number of pod disruptions that are currently allowed.² +integer +[ + expectedPodsKint32"6total number of pods counted by this disruption budget² +integer +â +observedGenerationËint64"µMost recent generation observed when updating this PDB status. DisruptionsAllowed and other status information is valid only if observedGeneration equals to PDB's object generation.² +integer +ˆ +.io.k8s.apimachinery.pkg.apis.meta.v1.MicroTimeV date-time">MicroTime is version of Time with microsecond level precision.² +string +˜ +.io.k8s.api.authorization.v1.ResourceAttributeså"tResourceAttributes includes the authorization attributes available for resource requests to the Authorizer interface² +objectÊà +X +resourceL"?Resource is one of the existing resource types. "*" means all.² +string +^ + subresourceO"BSubresource is one of the existing resource types. "" means none.² +string +ƒ +verb{"nVerb is a kubernetes resource API verb, like: get, list, watch, create, update, delete, proxy. "*" means all.² +string +S +versionH";Version is the API Version of the Resource. "*" means all.² +string +M +groupD"7Group is the API Group of the Resource. "*" means all.² +string +‚ +namez"mName is the name of the resource being requested for a "get" or deleted for a "delete". "" (empty) means all.² +string +ô + namespaceæ"ØNamespace is the namespace of the action being requested. Currently, there is no distinction between no namespace and all namespaces "" (empty) is defaulted for LocalSubjectAccessReviews "" (empty) is empty for cluster-scoped resources "" (empty) means "all" for namespace scoped resources from a SubjectAccessReview or SelfSubjectAccessReview² +string +± +,io.k8s.api.core.v1.ReplicationControllerSpec€ "KReplicationControllerSpec is the specification of a replication controller.² +objectʤ + +ƒ +minReadySecondsïint32"ÙMinimum number of seconds for which a newly created pod should be ready without any of its container crashing, for it to be considered available. Defaults to 0 (pod will be considered available as soon as it is ready)² +integer +  +replicas“int32"ýReplicas is the number of desired replicas. This is a pointer to distinguish between explicit zero and unspecified. Defaults to 1. More info: https://kubernetes.io/docs/concepts/workloads/controllers/replicationcontroller#what-is-a-replicationcontroller² +integer +¸ +selector«"Selector is a label query over pods that should match the Replicas count. If Selector is empty, it is defaulted to the labels present on the Pod template. Label keys and values that must match in order to be controlled by this replication controller, if empty defaulted to labels on Pod template. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#label-selectorsª + ² +string² +object +½ +template° +0#/definitions/io.k8s.api.core.v1.PodTemplateSpec"ûTemplate is the object that describes the pod that will be created if insufficient replicas are detected. This takes precedence over a TemplateRef. More info: https://kubernetes.io/docs/concepts/workloads/controllers/replicationcontroller#pod-template +Þ +$io.k8s.api.core.v1.ResourceQuotaListµ "3ResourceQuotaList is a list of ResourceQuota items.šitems² +objectÊ +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +string +» +items±"pItems is a list of ResourceQuota objects. More info: https://kubernetes.io/docs/concepts/policy/resource-quotas/² +arrayº2 +0 +.#/definitions/io.k8s.api.core.v1.ResourceQuota +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +string +Ï +metadata +;#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"‚Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kindsúY +x-kubernetes-group-version-kind64- version: v1 + group: "" + kind: ResourceQuotaList + +É +.io.k8s.api.networking.v1beta1.IngressClassList–"3IngressClassList is a collection of IngressClasses.šitems² +objectÊÛ +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +string +b +metadataV +;#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"Standard list metadata. +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +string +x +itemso"$Items is the list of IngressClasses.² +arrayº< +: +8#/definitions/io.k8s.api.networking.v1beta1.IngressClassúl +x-kubernetes-group-version-kindIG- kind: IngressClassList + version: v1beta1 + group: networking.k8s.io + +à +io.k8s.api.storage.v1.CSINode¡ "ÎCSINode holds information about all CSI drivers installed on a node. CSI drivers do not need to create the CSINode object directly. As long as they use the node-driver-registrar sidecar container, the kubelet will automatically populate the CSINode object for the CSI driver as part of kubelet plugin registration. CSINode has the same name as a node. If the object is missing, it means either there are no CSI Drivers available on the node, or the Kubelet version is low enough that it doesn't create this object. CSINode has an OwnerReference that points to the corresponding node object.šspec² +objectÊÜ +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +string +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +string +| +metadatap +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"/metadata.name must be the Kubernetes node name. +_ +specW +/#/definitions/io.k8s.api.storage.v1.CSINodeSpec"$spec is the specification of CSINodeú[ +x-kubernetes-group-version-kind86- group: storage.k8s.io + kind: CSINode + version: v1 + +° +Xio.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1.CustomResourceSubresourceStatusÓ"ÅCustomResourceSubresourceStatus defines how to serve the status subresource for CustomResources. Status is represented by the `.status` JSON path inside of a CustomResource. When set, * exposes a /status subresource for the custom resource * PUT requests to the /status subresource take a custom resource object, and ignore changes to anything except the status stanza * PUT/POST/PATCH requests to the custom resource ignore changes to the status stanza² +object +¤, +5io.k8s.api.admissionregistration.v1.ValidatingWebhookê+"`ValidatingWebhook describes an admission webhook and the resources and operations it applies to.šnameš clientConfigš sideEffectsšadmissionReviewVersions² +objectÊ»* +¬ + failurePolicyš"ŒFailurePolicy defines how unrecognized errors from the admission endpoint are handled - allowed values are Ignore or Fail. Defaults to Fail.² +string +é +objectSelectorÖ +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector"‘ObjectSelector decides whether to run the webhook based on if the object has matching labels. objectSelector is evaluated against both the oldObject and newObject that would be sent to the webhook, and is considered to match if either object matches the selector. A null object (oldObject in the case of create, or newObject in the case of delete) or an object that cannot have labels (like a DeploymentRollback or a PodProxyOptions object) is not considered to match. Use the object selector only if the webhook is opt-in, because end users may skip the admission webhook by setting the labels. Default to the empty LabelSelector, which matches everything. +œ +timeoutSeconds‰int32"óTimeoutSeconds specifies the timeout for this webhook. After the timeout passes, the webhook call will be ignored or the API call will fail based on the failure policy. The timeout value must be between 1 and 30 seconds. Default to 10 seconds.² +integer +Ü +namespaceSelectorÆ +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector" NamespaceSelector decides whether to run the webhook on an object based on whether the namespace for that object matches the selector. If the object itself is a namespace, the matching is performed on object.metadata.labels. If the object is another cluster scoped resource, it never skips the webhook. + +For example, to run the webhook on any objects whose namespace is not associated with "runlevel" of "0" or "1"; you will set the selector as follows: "namespaceSelector": { + "matchExpressions": [ + { + "key": "runlevel", + "operator": "NotIn", + "values": [ + "0", + "1" + ] + } + ] +} + +If instead you want to only run the webhook on any objects whose namespace is associated with the "environment" of "prod" or "staging"; you will set the selector as follows: "namespaceSelector": { + "matchExpressions": [ + { + "key": "environment", + "operator": "In", + "values": [ + "prod", + "staging" + ] + } + ] +} + +See https://kubernetes.io/docs/concepts/overview/working-with-objects/labels for more examples of label selectors. + +Default to the empty LabelSelector, which matches everything. +é +rulesß"‡Rules describes what operations on what resources/subresources the webhook cares about. The webhook cares about an operation if it matches _any_ Rule. However, in order to prevent ValidatingAdmissionWebhooks and MutatingAdmissionWebhooks from putting the cluster in a state which cannot be recovered from without completely disabling the plugin, ValidatingAdmissionWebhooks and MutatingAdmissionWebhooks are never called on admission requests for ValidatingWebhookConfiguration and MutatingWebhookConfiguration objects.² +arrayºH +F +D#/definitions/io.k8s.api.admissionregistration.v1.RuleWithOperations +õ + sideEffectså"×SideEffects states whether this webhook has side effects. Acceptable values are: None, NoneOnDryRun (webhooks created via v1beta1 may also specify Some or Unknown). Webhooks with side effects MUST implement a reconciliation system, since a request may be rejected by a future step in the admission chain and the side effects therefore need to be undone. Requests with the dryRun attribute will be auto-rejected if they match a webhook with sideEffects == Unknown or Some.² +string +– +admissionReviewVersionsú"ÝAdmissionReviewVersions is an ordered list of preferred `AdmissionReview` versions the Webhook expects. API server will try to use first version in the list which it supports. If none of the versions specified in this list supported by API server, validation will fail for this object. If a persisted webhook configuration specifies allowed versions and does not include any versions known to the API Server, calls to the webhook will fail and be subject to the failure policy.² +arrayº + ² +string +™ + clientConfigˆ +E#/definitions/io.k8s.api.admissionregistration.v1.WebhookClientConfig"?ClientConfig defines how to communicate with the hook. Required +œ + matchPolicyŒ"þmatchPolicy defines how the "rules" list is used to match incoming requests. Allowed values are "Exact" or "Equivalent". + +- Exact: match a request only if it exactly matches a specified rule. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, but "rules" only included `apiGroups:["apps"], apiVersions:["v1"], resources: ["deployments"]`, a request to apps/v1beta1 or extensions/v1beta1 would not be sent to the webhook. + +- Equivalent: match a request if modifies a resource listed in rules, even via another API group or version. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, and "rules" only included `apiGroups:["apps"], apiVersions:["v1"], resources: ["deployments"]`, a request to apps/v1beta1 or extensions/v1beta1 would be converted to apps/v1 and sent to the webhook. + +Defaults to "Equivalent"² +string +ç +nameÞ"ÐThe name of the admission webhook. Name should be fully qualified, e.g., imagepolicy.kubernetes.io, where "imagepolicy" is the name of the webhook, and kubernetes.io is the name of the organization. Required.² +string +È +Gio.k8s.api.admissionregistration.v1beta1.ValidatingWebhookConfigurationü "ˆValidatingWebhookConfiguration describes the configuration of and admission webhook that accept or reject and object without changing it. Deprecated in v1.16, planned for removal in v1.19. Use admissionregistration.k8s.io/v1 ValidatingWebhookConfiguration instead.² +objectÊÙ +Ñ +metadataÄ +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"‚Standard object metadata; More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata. +… +webhooksø"IWebhooks is a list of webhooks and the affected resources and operations.² +arrayºL +J +H#/definitions/io.k8s.api.admissionregistration.v1beta1.ValidatingWebhookú' +x-kubernetes-patch-strategymerge +ú' +x-kubernetes-patch-merge-keyname + +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +string +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +stringú… +x-kubernetes-group-version-kindb`- version: v1beta1 + group: admissionregistration.k8s.io + kind: ValidatingWebhookConfiguration + +‚ +#io.k8s.api.events.v1beta1.EventListÚ"%EventList is a list of Event objects.šitems² +objectʸ +k +itemsb""items is a list of schema objects.² +arrayº1 +/ +-#/definitions/io.k8s.api.events.v1beta1.Event +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +string +Ë +metadata¾ +;#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +stringúa +x-kubernetes-group-version-kind><- group: events.k8s.io + kind: EventList + version: v1beta1 + + +)io.k8s.api.extensions.v1beta1.IngressListá"'IngressList is a collection of Ingress.šitems² +objectʾ +l +itemsc"Items is the list of Ingress.² +arrayº7 +5 +3#/definitions/io.k8s.api.extensions.v1beta1.Ingress +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +string +Ð +metadataà +;#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"ƒStandard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +stringú` +x-kubernetes-group-version-kind=;- group: extensions + kind: IngressList + version: v1beta1 + +à +Nio.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1.JSONSchemaPropsOrBoolq"oJSONSchemaPropsOrBool represents JSONSchemaProps or a boolean value. Defaults to true for the boolean property. +† +0io.k8s.apimachinery.pkg.apis.meta.v1.StatusCauseÑ"xStatusCause provides more information about an api.Status failure, including cases when multiple errors are encountered.² +objectÊÈ +¶ +field¬"žThe field of the resource that has caused this error, as named by its JSON serialization. May include dot and postfix notation for nested attributes. Arrays are zero-indexed. Fields may appear more than once in an array of causes due to fields having multiple errors. Optional. + +Examples: + "name" - the field "name" on the current resource + "items[0].name" - the field "name" on the first array entry in "items"² +string + +messaget"gA human-readable description of the cause of the error. This field may be presented as-is to a reader.² +string +‹ +reason€"sA machine-readable description of the cause of the error. If this value is empty there is no information available.² +string +¤ + +Iio.k8s.api.admissionregistration.v1beta1.MutatingWebhookConfigurationListÖ "KMutatingWebhookConfigurationList is a list of MutatingWebhookConfiguration.šitems² +objectÊç +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +string +• +items‹"%List of MutatingWebhookConfiguration.² +arrayºW +U +S#/definitions/io.k8s.api.admissionregistration.v1beta1.MutatingWebhookConfiguration +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +string +Ï +metadata +;#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"‚Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kindsú‡ +x-kubernetes-group-version-kinddb- group: admissionregistration.k8s.io + kind: MutatingWebhookConfigurationList + version: v1beta1 + +ï +:io.k8s.api.apiserverinternal.v1alpha1.ServerStorageVersion°"†An API server instance reports the version it can decode and the version it encodes objects to when persisting objects in the backend.² +objectʘ +? + apiServerID0"#The ID of the reporting API server.² +string +Ð +decodableVersionsº"{The API server can decode objects encoded in these versions. The encodingVersion must be included in the decodableVersions.² +arrayº + ² +stringú +x-kubernetes-list-typeset + + +encodingVersionn"aThe API server encodes the object to this version when persisting it in the backend (e.g., etcd).² +string +· +'io.k8s.api.core.v1.LocalObjectReference‹"sLocalObjectReference contains enough information to let you locate the referenced object inside the same namespace.² +objectʇ +„ +name|"oName of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names² +string +” +%io.k8s.api.core.v1.NamespaceConditionê"=NamespaceCondition contains details about state of namespace.štypešstatus² +objectÊŒ +< +type4"'Type of namespace controller condition.² +string +O +lastTransitionTime9 +7#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time + +message ² +string + +reason ² +string +L +statusB"5Status of the condition, one of True, False, Unknown.² +string +ƒ +Jio.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1.WebhookConversion´"#/definitions/io.k8s.api.autoscaling.v2beta2.MetricValueStatus"7current contains the current value for the given metric +Ÿ +$io.k8s.api.node.v1beta1.RuntimeClassö"ØRuntimeClass defines a class of container runtime supported in the cluster. The RuntimeClass is used to determine which container runtime is used to run all containers in a pod. RuntimeClasses are (currently) manually defined by a user or cluster provisioner, and referenced in the PodSpec. The Kubelet is responsible for resolving the RuntimeClassName reference before running the pod. For more details, see https://git.k8s.io/enhancements/keps/sig-node/runtime-class.mdšhandler² +objectÊ +Ð +handlerÄ"¶Handler specifies the underlying runtime and configuration that the CRI implementation will use to handle pods of this class. The possible values are specific to the node & CRI configuration. It is assumed that all handlers are available on every node, and handlers of the same name are equivalent on every node. For example, a handler called "runc" might specify that the runc OCI runtime (using native Linux containers) will be used to run the containers in a pod. The Handler must be lowercase, conform to the DNS Label (RFC 1123) requirements, and is immutable.² +string +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +string +µ +metadata¨ +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"gMore info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata +ô +overheadç +.#/definitions/io.k8s.api.node.v1beta1.Overhead"´Overhead represents the resource overhead associated with running a pod for a given RuntimeClass. For more details, see https://git.k8s.io/enhancements/keps/sig-node/20190226-pod-overhead.md This field is alpha-level as of Kubernetes v1.15, and is only honored by servers that enable the PodOverhead feature. +› + +schedulingŒ +0#/definitions/io.k8s.api.node.v1beta1.Scheduling"×Scheduling holds the scheduling constraints to ensure that pods running with this RuntimeClass are scheduled to nodes that support it. If scheduling is nil, this RuntimeClass is assumed to be supported by all nodes. +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +stringúb +x-kubernetes-group-version-kind?=- group: node.k8s.io + kind: RuntimeClass + version: v1beta1 + +˜ +$io.k8s.api.apps.v1.StatefulSetStatusï "@StatefulSetStatus represents the current state of a StatefulSet.šreplicas² +objectÊ“ +° +currentReplicasœint32"†currentReplicas is the number of Pods created by the StatefulSet controller from the StatefulSet version indicated by currentRevision.² +integer +¤ +currentRevision"‚currentRevision, if not empty, indicates the version of the StatefulSet used to generate Pods in the sequence [0,currentReplicas).² +string +Ü +observedGenerationÅint64"¯observedGeneration is the most recent generation observed for this StatefulSet. It corresponds to the StatefulSet's generation, which is updated on mutation by the API Server.² +integer +± +updateRevisionž"updateRevision, if not empty, indicates the version of the StatefulSet used to generate Pods in the sequence [replicas-updatedReplicas,replicas)² +string +¯ +updatedReplicas›int32"…updatedReplicas is the number of Pods created by the StatefulSet controller from the StatefulSet version indicated by updateRevision.² +integer +þ +collisionCountëint32"ÕcollisionCount is the count of hash collisions for the StatefulSet. The StatefulSet controller uses this field as a collision avoidance mechanism when it needs to create the name for the newest ControllerRevision.² +integer +ù + +conditionsê"NRepresents the latest available observations of a statefulset's current state.² +arrayº9 +7 +5#/definitions/io.k8s.api.apps.v1.StatefulSetConditionú' +x-kubernetes-patch-merge-keytype +ú' +x-kubernetes-patch-strategymerge + +Œ + readyReplicas{int32"freadyReplicas is the number of Pods created by the StatefulSet controller that have a Ready Condition.² +integer +f +replicasZint32"Ereplicas is the number of Pods created by the StatefulSet controller.² +integer +õ +0io.k8s.api.core.v1.ServiceAccountTokenProjectionÀ"ìServiceAccountTokenProjection represents a projected service account token volume. This projection can be used to insert a service account token into the pods runtime filesystem for use against APIs (Kubernetes API Server or otherwise).špath² +objectÊ» +’ +audience…"÷Audience is the intended audience of the token. A recipient of a token must identify itself with an identifier specified in the audience of the token, and otherwise should reject the token. The audience defaults to the identifier of the apiserver.² +string +¹ +expirationSeconds£int64"ExpirationSeconds is the requested duration of validity of the service account token. As the token approaches expiration, the kubelet volume plugin will proactively rotate the service account token. The kubelet will start trying to rotate the token if the token is older than 80 percent of its time to live or if the token is older than 24 hours.Defaults to 1 hour and must be at least 10 minutes.² +integer +h +path`"SPath is the path relative to the mount point of the file to project the token into.² +string +í +5io.k8s.api.policy.v1beta1.RuntimeClassStrategyOptions³"iRuntimeClassStrategyOptions define the strategy that will dictate the allowable RuntimeClasses for a pod.šallowedRuntimeClassNames² +objectÊž +º +allowedRuntimeClassNames"€allowedRuntimeClassNames is an allowlist of RuntimeClass names that may be specified on a pod. A value of "*" means that any RuntimeClass name is allowed, and must be the only item in the list. An empty list requires the RuntimeClassName field to be unset.² +arrayº + ² +string +Þ +defaultRuntimeClassNameÂ"´defaultRuntimeClassName is the default RuntimeClassName to set on the pod. The default MUST be allowed by the allowedRuntimeClassNames list. A value of nil does not mutate the Pod.² +string +º +io.k8s.api.rbac.v1.ClusterRole— "ˆClusterRole is a cluster level, logical grouping of PolicyRules that can be referenced as a unit by a RoleBinding or ClusterRoleBinding.² +objectÊ +{ +rulesr"4Rules holds all the PolicyRules for this ClusterRole² +arrayº/ +- ++#/definitions/io.k8s.api.rbac.v1.PolicyRule +© +aggregationRule• +0#/definitions/io.k8s.api.rbac.v1.AggregationRule"àAggregationRule is an optional field that describes how to build the Rules for this ClusterRole. If AggregationRule is set, then the Rules are controller managed and direct changes to Rules will be stomped by the controller. +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +string +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +string +h +metadata\ +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"Standard object's metadata.új +x-kubernetes-group-version-kindGE- group: rbac.authorization.k8s.io + kind: ClusterRole + version: v1 + +¾ +-io.k8s.api.authentication.v1.TokenRequestSpecŒ "HTokenRequestSpec contains client provided parameters of a token request.š audiences² +objectʧ +• + audiences‡"êAudiences are the intendend audiences of the token. A recipient of a token must identitfy themself with an identifier in the list of audiences of the token, and otherwise should reject the token. A token issued for multiple audiences may be used to authenticate against any of the audiences listed but implies a high degree of trust between the target audiences.² +arrayº + ² +string +Ž +boundObjectRefû +?#/definitions/io.k8s.api.authentication.v1.BoundObjectReference"·BoundObjectRef is a reference to an object that the token will be bound to. The token will only be valid for as long as the bound object exists. NOTE: The API server's TokenReview endpoint will validate the BoundObjectRef, but other audiences may not. Keep ExpirationSeconds small if you want prompt revocation. +û +expirationSecondsåint64"ÏExpirationSeconds is the requested duration of validity of the request. The token issuer may return a token with a different validity duration so a client needs to check the 'expiration' field in a response.² +integer +¦ +%io.k8s.api.core.v1.CinderVolumeSourceü"ëRepresents a cinder volume resource in Openstack. A Cinder volume must exist before mounting to a container. The volume must also be in the same region as the kubelet. Cinder volumes support ownership management and SELinux relabeling.švolumeID² +objectÊô +ƒ +fsTypeø"êFilesystem type to mount. Must be a filesystem type supported by the host operating system. Examples: "ext4", "xfs", "ntfs". Implicitly inferred to be "ext4" if unspecified. More info: https://examples.k8s.io/mysql-cinder-pd/README.md² +string +Á +readOnly´"¥Optional: Defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts. More info: https://examples.k8s.io/mysql-cinder-pd/README.md² +boolean +ž + secretRef +5#/definitions/io.k8s.api.core.v1.LocalObjectReference"WOptional: points to a secret object containing parameters used to connect to OpenStack. +† +volumeIDz"mvolume id used to identify the volume in cinder. More info: https://examples.k8s.io/mysql-cinder-pd/README.md² +string +ô +io.k8s.api.core.v1.Event×"‰Event is a report of an event somewhere in the cluster. Events have a limited retention time and triggers and messages may evolve with time. Event consumers should not rely on the timing of an event with a given Reason reflecting a consistent underlying trigger, or the continued existence of events with that Reason. Events should be treated as informative, best-effort, supplemental data.šmetadatašinvolvedObject² +objectÊÐ +U +messageJ"=A human-readable description of the status of this operation.² +string +Ò +metadataÅ +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"ƒStandard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata + +source„ +,#/definitions/io.k8s.api.core.v1.EventSource"TThe component reporting this event. Should be a short machine understandable string. +V +actionL"?What action was taken/failed regarding to the Regarding object.² +string +J +countAint32",The number of times this event has occurred.² +integer +j +involvedObjectX +0#/definitions/io.k8s.api.core.v1.ObjectReference"$The object that this event is about. +a +typeY"LType of this event (Normal, Warning), new types could be added in the future² +string +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +string +¦ +firstTimestamp“ +7#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"XThe time at which the event was first recorded. (Time of server receipt is in TypeMeta.) +• + lastTimestampƒ +7#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"HThe time at which the most recent occurrence of this event was recorded. +p +reportingComponentZ"MName of the controller that emitted this Event, e.g. `kubernetes.io/kubelet`.² +string +™ +reasonŽ"€This should be a short, machine understandable string that gives the reason for the transition into the object's current status.² +string +r +relatedg +0#/definitions/io.k8s.api.core.v1.ObjectReference"3Optional secondary object for more complex actions. +U +reportingInstance@"3ID of the controller instance, e.g. `kubelet-xyzf`.² +string +Ž +seriesƒ +,#/definitions/io.k8s.api.core.v1.EventSeries"SData about the Event series this event represents or nil if it's a singleton Event. +u + eventTimeh +<#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.MicroTime"(Time when this Event was first observed. +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +stringúM +x-kubernetes-group-version-kind*(- group: "" + kind: Event + version: v1 + +â +io.k8s.api.rbac.v1.RoleRefÃ"?RoleRef contains information that points to the role being usedšapiGroupškindšname² +objectÊÚ +B +kind:"-Kind is the type of resource being referenced² +string +B +name:"-Name is the name of resource being referenced² +string +P +apiGroupD"7APIGroup is the group for the resource being referenced² +string +¶ +(io.k8s.api.rbac.v1alpha1.RoleBindingList‰ "¤RoleBindingList is a collection of RoleBindings Deprecated in v1.17 in favor of rbac.authorization.k8s.io/v1 RoleBindingList, and will no longer be served in v1.22.šitems² +objectÊÔ +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +string +m +itemsd"Items is a list of RoleBindings² +arrayº6 +4 +2#/definitions/io.k8s.api.rbac.v1alpha1.RoleBinding +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +string +f +metadataZ +;#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"Standard object's metadata.út +x-kubernetes-group-version-kindQO- kind: RoleBindingList + version: v1alpha1 + group: rbac.authorization.k8s.io + +î +2io.k8s.api.storage.v1alpha1.VolumeAttachmentStatus·"CVolumeAttachmentStatus is the status of a VolumeAttachment request.šattached² +objectÊØ +ì + detachErrorÜ +5#/definitions/io.k8s.api.storage.v1alpha1.VolumeError"¢The last error encountered during detach operation, if any. This field must only be set by the entity completing the detach operation, i.e. the external-attacher. +ì + attachErrorÜ +5#/definitions/io.k8s.api.storage.v1alpha1.VolumeError"¢The last error encountered during attach operation, if any. This field must only be set by the entity completing the attach operation, i.e. the external-attacher. +± +attached¤"•Indicates the volume is successfully attached. This field must only be set by the entity completing the attach operation, i.e. the external-attacher.² +boolean +à +attachmentMetadata¬"ŽUpon successful attach, this field is populated with any information returned by the attach operation that must be passed into subsequent WaitForAttach or Mount calls. This field must only be set by the entity completing the attach operation, i.e. the external-attacher.ª + ² +string² +object +ñ +Sio.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1beta1.ExternalDocumentation™"YExternalDocumentation allows referencing an external resource for extended documentation.² +objectÊ0 + + description ² +string + +url ² +string +­ +:io.k8s.api.autoscaling.v2beta2.HorizontalPodAutoscalerSpecî"_HorizontalPodAutoscalerSpec describes the desired functionality of the HorizontalPodAutoscaler.šscaleTargetRefš maxReplicas² +objectÊß + +metricsõ"ªmetrics contains the specifications for which to use to calculate the desired replica count (the maximum replica count across all metrics will be used). The desired replica count is calculated multiplying the ratio between the target value and the current value by the current number of pods. Ergo, metrics used must decrease as the pod count is increased, and vice-versa. See the individual metric source types for more information about how each type of metric must respond. If not set, the default metric will be set to 80% average CPU utilization.² +arrayº; +9 +7#/definitions/io.k8s.api.autoscaling.v2beta2.MetricSpec +ò + minReplicasâint32"ÌminReplicas is the lower limit for the number of replicas to which the autoscaler can scale down. It defaults to 1 pod. minReplicas is allowed to be 0 if the alpha feature gate HPAScaleToZero is enabled and at least one Object or External metric is configured. Scaling is active as long as at least one metric value is available.² +integer +† +scaleTargetRefó +H#/definitions/io.k8s.api.autoscaling.v2beta2.CrossVersionObjectReference"¦scaleTargetRef points to the target resource to scale, and is used to the pods for which metrics should be collected, as well as to actually change the replica count. +® +behavior¡ +L#/definitions/io.k8s.api.autoscaling.v2beta2.HorizontalPodAutoscalerBehavior"Ðbehavior configures the scaling behavior of the target in both Up and Down directions (scaleUp and scaleDown fields respectively). If not set, the default HPAScalingRules for scale up and scale down are used. +© + maxReplicas™int32"ƒmaxReplicas is the upper limit for the number of replicas to which the autoscaler can scale up. It cannot be less that minReplicas.² +integer +ª +io.k8s.api.core.v1.SecretŒ"‚Secret holds secret data of a certain type. The total bytes of the values in the Data field must be less than MaxSecretSize bytes.² +objectʧ +Ê + +stringData»"stringData allows specifying non-binary secret data in string form. It is provided as a write-only input field for convenience. All keys and values are merged into the data field on write, overwriting any existing values. The stringData field is never output when reading from the API.ª + ² +string² +object +M +typeE"8Used to facilitate programmatic handling of secret data.² +string +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +string +Î +dataÅ"¡Data contains the secret data. Each key must consist of alphanumeric characters, '-', '_' or '.'. The serialized form of the secret data is a base64 encoded string, representing the arbitrary (possibly non-string) data value here. Described in https://tools.ietf.org/html/rfc4648#section-4ª +byte² +string² +object +å + immutable×"ÈImmutable, if set to true, ensures that data stored in the Secret cannot be updated (only object metadata can be modified). If not set to true, the field can be modified at any time. Defaulted to nil.² +boolean +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +string +Ò +metadataÅ +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"ƒStandard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadataúN +x-kubernetes-group-version-kind+)- kind: Secret + version: v1 + group: "" + +• +'io.k8s.api.storage.v1alpha1.VolumeErroré"DVolumeError captures an error encountered during a volume operation.² +objectÊ” +­ +message¡"“String detailing the error encountered during Attach or Detach operation. This string maybe logged, so it should not contain sensitive information.² +string +b +timeZ +7#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"Time the error was encountered. +” +Aio.k8s.kube-aggregator.pkg.apis.apiregistration.v1.APIServiceSpecÎ"£APIServiceSpec contains information for locating and communicating with a server. Only https is supported, though you are able to disable certificate verification.šgroupPriorityMinimumšversionPriority² +objectÊð +Í +insecureSkipTLSVerify³"¤InsecureSkipTLSVerify disables TLS certificate verification when communicating with this server. This is strongly discouraged. You should use the CABundle instead.² +boolean +ô +serviceè +Q#/definitions/io.k8s.kube-aggregator.pkg.apis.apiregistration.v1.ServiceReference"’Service is a reference to the service for this API server. It must communicate on port 443. If the Service is nil, that means the handling for the API groupversion is handled locally on this server. The call will simply delegate to the normal handler chain to be fulfilled. +X +versionM"@Version is the API version this server hosts. For example, "v1"² +string +ä +versionPriorityÐint32"ºVersionPriority controls the ordering of this API version inside of its group. Must be greater than zero. The primary sort is based on VersionPriority, ordered highest to lowest (20 before 10). Since it's inside of a group, the number can be small, probably in the 10s. In case of equal version priorities, the version string will be used to compute the order inside a group. If the version string is "kube-like", it will sort above non "kube-like" version strings, which are ordered lexicographically. "Kube-like" versions start with a "v", then are followed by a number (the major version), then optionally the string "alpha" or "beta" and another number (the minor version). These are sorted first by GA > beta > alpha (where GA is a version with no suffix such as beta or alpha), and then by comparing major version, then minor version. An example sorted list of versions: v10, v2, v1, v11beta2, v10beta3, v3beta1, v12alpha1, v11alpha2, foo1, foo10.² +integer +ì +caBundleßbyte"¥CABundle is a PEM encoded CA bundle which will be used to validate an API server's serving certificate. If unspecified, system trust roots on the apiserver are used.² +stringú# +x-kubernetes-list-type atomic + +C +group:"-Group is the API group name this server hosts² +string +± +groupPriorityMinimum˜int32"‚GroupPriorityMininum is the priority this group should have at least. Higher priority means that the group is preferred by clients over lower priority ones. Note that other versions of this group might specify even higher GroupPriorityMininum values such that the whole group gets a higher priority. The primary sort is based on GroupPriorityMinimum, ordered highest number to lowest (20 before 10). The secondary sort is based on the alphabetical comparison of the name of the object. (v1.bar before v1.foo) We'd recommend something like: *.k8s.io (except extensions) at 18000 and PaaSes (OpenShift, Deis) are recommended to be in the 2000s² +integer +“ +io.k8s.api.events.v1.Eventô"¾Event is a report of an event somewhere in the cluster. It generally denotes some state change in the system. Events have a limited retention time and triggers and messages may evolve with time. Event consumers should not rely on the timing of an event with a given Reason reflecting a consistent underlying trigger, or the continued existence of events with that Reason. Events should be treated as informative, best-effort, supplemental data.š eventTime² +objectʽ +Á +deprecatedFirstTimestamp¤ +7#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"ideprecatedFirstTimestamp is the deprecated field assuring backward compatibility with core.v1 Event type. +½ +note´"¦note is a human-readable description of the status of this operation. Maximal length of the note is 1kB, but libraries should be prepared to handle values up to 64kB.² +string +š +series +.#/definitions/io.k8s.api.events.v1.EventSeries"]series is data about the Event series this event represents or nil if it's a singleton Event. +Ì +actionÁ"³action is what action was taken/failed regarding to the regarding object. It is machine-readable. This field cannot be empty for new Events and it can have at most 128 characters.² +string +— + eventTime‰ +<#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.MicroTime"IeventTime is the time when this Event was first observed. It is required. +¤ +reason™"‹reason is why the action was taken. It is human-readable. This field cannot be empty for new Events and it can have at most 128 characters.² +string +¶ + regarding¨ +0#/definitions/io.k8s.api.core.v1.ObjectReference"óregarding contains the object this Event is about. In most cases it's an Object reporting controller implements, e.g. ReplicaSetController implements ReplicaSets and this event is emitted because it acts on some changes in a ReplicaSet object. +Ñ +relatedÅ +0#/definitions/io.k8s.api.core.v1.ObjectReference"related is the optional secondary object for more complex actions. E.g. when regarding object triggers a creation or deletion of related object. + +reportingInstance¬"žreportingInstance is the ID of the controller instance, e.g. `kubelet-xyzf`. This field cannot be empty for new Events and it can have at most 128 characters.² +string +³ +typeª"œtype is the type of this event (Normal, Warning), new types could be added in the future. It is machine-readable. This field cannot be empty for new Events.² +string +ˆ +deprecatedCountuint32"`deprecatedCount is the deprecated field assuring backward compatibility with core.v1 Event type.² +integer +¿ +deprecatedLastTimestamp£ +7#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"hdeprecatedLastTimestamp is the deprecated field assuring backward compatibility with core.v1 Event type. +¦ +deprecatedSource‘ +,#/definitions/io.k8s.api.core.v1.EventSource"adeprecatedSource is the deprecated field assuring backward compatibility with core.v1 Event type. +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +string +¹ +reportingController¡"“reportingController is the name of the controller that emitted this Event, e.g. `kubernetes.io/kubelet`. This field cannot be empty for new Events.² +string +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +string +Ò +metadataÅ +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"ƒStandard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadataúX +x-kubernetes-group-version-kind53- group: events.k8s.io + kind: Event + version: v1 + + +6io.k8s.api.flowcontrol.v1beta1.FlowDistinguisherMethodâ"EFlowDistinguisherMethod specifies the method of a flow distinguisher.štype² +objectÊ… +‚ +typez"m`type` is the type of flow distinguisher method The supported types are "ByUser" and "ByNamespace". Required.² +string +¥ +?io.k8s.api.flowcontrol.v1beta1.PriorityLevelConfigurationStatusá"VPriorityLevelConfigurationStatus represents the current state of a "request-priority".² +objectÊú +÷ + +conditionsè"8`conditions` is the current state of "request-priority".² +arrayºT +R +P#/definitions/io.k8s.api.flowcontrol.v1beta1.PriorityLevelConfigurationConditionú' +x-kubernetes-list-map-keys - type +ú +x-kubernetes-list-typemap + +¨ + +1io.k8s.api.storage.v1beta1.CSIStorageCapacityListò "ECSIStorageCapacityList is a collection of CSIStorageCapacity objects.šitems² +objectÊ¢ +Õ +itemsË"0Items is the list of CSIStorageCapacity objects.² +arrayº? += +;#/definitions/io.k8s.api.storage.v1beta1.CSIStorageCapacityú +x-kubernetes-list-typemap +ú' +x-kubernetes-list-map-keys - name + +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +string +Ê +metadata½ +;#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"~Standard list metadata More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +stringúo +x-kubernetes-group-version-kindLJ- group: storage.k8s.io + kind: CSIStorageCapacityList + version: v1beta1 + +ì +7io.k8s.api.admissionregistration.v1.WebhookClientConfig° "VWebhookClientConfig contains the information to make a TLS connection with the webhook² +objectÊÉ +‡ +serviceû +B#/definitions/io.k8s.api.admissionregistration.v1.ServiceReference"´`service` is a reference to the service for this webhook. Either `service` or `url` must be specified. + +If the webhook is running within the cluster, then you should use `service`. +ô +urlì"Þ`url` gives the location of the webhook, in standard URL form (`scheme://host:port/path`). Exactly one of `url` or `service` must be specified. + +The `host` should not refer to a service running in the cluster; use the `service` field instead. The host might be resolved via external DNS in some apiservers (e.g., `kube-apiserver` cannot resolve in-cluster DNS as that would be a layering violation). `host` may also be an IP address. + +Please note that using `localhost` or `127.0.0.1` as a `host` is risky unless you take great care to run this webhook on all hosts which run an apiserver which might need to make calls to this webhook. Such installs are likely to be non-portable, i.e., not easy to turn up in a new cluster. + +The scheme must be "https"; the URL must begin with "https://". + +A path is optional, and if present may be any string permissible in a URL. You may use the path to pass an arbitrary string to the webhook, for example, a cluster identifier. + +Attempting to use a user or basic auth e.g. "user:password@" is not allowed. Fragments ("#...") and query parameters ("?...") are not allowed, either.² +string +Å +caBundle¸byte"¤`caBundle` is a PEM encoded CA bundle which will be used to validate the webhook's server certificate. If unspecified, system trust roots on the apiserver are used.² +string +à +"io.k8s.api.core.v1.SecretReference¹"lSecretReference represents a Secret Reference. It has enough information to retrieve secret in any namespace² +objectʼ +V +nameN"AName is unique within a namespace to reference a secret resource.² +string +b + namespaceU"HNamespace defines the space within which the secret name must be unique.² +string +Ú ++io.k8s.api.policy.v1beta1.AllowedFlexVolumeª"LAllowedFlexVolume represents a single Flexvolume that is allowed to be used.šdriver² +objectÊE +C +driver9",driver is the name of the Flexvolume driver.² +string +Ù +&io.k8s.api.storage.v1beta1.CSINodeSpec®"\CSINodeSpec holds information about the specification of all CSI drivers installed on a nodešdrivers² +objectÊ· +´ +drivers¨"Šdrivers is a list of information of all CSI Drivers existing on a node. If all drivers in the list are uninstalled, this can become empty.² +arrayº: +8 +6#/definitions/io.k8s.api.storage.v1beta1.CSINodeDriverú' +x-kubernetes-patch-merge-keyname +ú' +x-kubernetes-patch-strategymerge + +Ç + +(io.k8s.api.authentication.v1.TokenReviewš +"§TokenReview attempts to authenticate a token to a known user. Note: TokenReview requests may be cached by the webhook token authenticator plugin in the kube-apiserver.šspec² +objectÊñ +K +metadata? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta +~ +specv +:#/definitions/io.k8s.api.authentication.v1.TokenReviewSpec"8Spec holds information about the request being evaluated +¤ +status™ +<#/definitions/io.k8s.api.authentication.v1.TokenReviewStatus"YStatus is filled in by the server and indicates whether the request can be authenticated. +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +string +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +stringúf +x-kubernetes-group-version-kindCA- group: authentication.k8s.io + kind: TokenReview + version: v1 + +ë + +0io.k8s.api.core.v1.ScaleIOPersistentVolumeSource¶ +"DScaleIOPersistentVolumeSource represents a persistent ScaleIO volumešgatewayšsystemš secretRef² +objectÊ +  +fsType•"‡Filesystem type to mount. Must be a filesystem type supported by the host operating system. Ex. "ext4", "xfs", "ntfs". Default is "xfs"² +string +D +gateway9",The host address of the ScaleIO API Gateway.² +string +f +protectionDomainR"EThe name of the ScaleIO Protection Domain for the configured storage.² +string +O +systemE"8The name of the storage system as configured in ScaleIO.² +string +[ + storagePoolL"?The ScaleIO Storage Pool associated with the protection domain.² +string + + +volumeNames"fThe name of a volume already created in the ScaleIO system that is associated with this volume source.² +string +x +readOnlyl"^Defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts.² +boolean +Ë + secretRef½ +0#/definitions/io.k8s.api.core.v1.SecretReference"ˆSecretRef references to the secret for ScaleIO user and other sensitive information. If this is not provided, Login operation will fail. +` + +sslEnabledR"DFlag to enable/disable SSL communication with Gateway, default false² +boolean +’ + storageMode‚"uIndicates whether the storage for a volume should be ThickProvisioned or ThinProvisioned. Default is ThinProvisioned.² +string +« +&io.k8s.api.core.v1.ConfigMapProjection€ "åAdapts a ConfigMap into a projected volume. + +The contents of the target ConfigMap's Data field will be presented in a projected volume as files using the keys in the Data field as the file names, unless the items element is populated with specific mappings of keys to paths. Note that this is identical to a configmap volume source without the default mode.² +objectʉ +„ +name|"oName of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names² +string +S +optionalG"9Specify whether the ConfigMap or its keys must be defined² +boolean +ª +items "âIf unspecified, each key-value pair in the Data field of the referenced ConfigMap will be projected into the volume as a file whose name is the key and content is the value. If specified, the listed keys will be projected into the specified paths, and unlisted keys will not be present. If a key is specified which is not present in the ConfigMap, the volume setup will error unless it is marked optional. Paths must be relative and may not contain the '..' path or start with '..'.² +arrayº. +, +*#/definitions/io.k8s.api.core.v1.KeyToPath +è +"io.k8s.api.core.v1.ContainerStatusÁ "JContainerStatus contains details for the current status of this container.šnamešreadyš restartCountšimagešimageID² +objectʶ + +S + containerIDD"7Container's ID in the format 'docker://'.² +string +9 +imageID."!ImageID of the container's image.² +string +° +started¤"•Specifies whether the container has passed its startup probe. Initialized as false, becomes true after startupProbe is considered successful. Resets to false when the container is restarted, or if kubelet loses state temporarily. Is always true when no startupProbe is defined.² +boolean +¿ + restartCount®int32"˜The number of times the container has been restarted, currently based on the number of dead containers that have not yet been removed. Note that this is calculated from dead containers. But those containers are subject to garbage collection. This value will get capped at 5 by GC.² +integer +l +statec +/#/definitions/io.k8s.api.core.v1.ContainerState"0Details about the container's current condition. +z +imageq"dThe image the container is running. More info: https://kubernetes.io/docs/concepts/containers/images² +string +y + lastStatel +/#/definitions/io.k8s.api.core.v1.ContainerState"9Details about the container's last termination condition. +r +namej"]This must be a DNS_LABEL. Each container in a pod must have a unique name. Cannot be updated.² +string +V +readyM"?Specifies whether the container has passed its readiness probe.² +boolean +è +(io.k8s.api.core.v1.EphemeralVolumeSource» "JRepresents an ephemeral volume that is handled by a normal storage driver.² +objectÊà +Ý +volumeClaimTemplateÅ +>#/definitions/io.k8s.api.core.v1.PersistentVolumeClaimTemplate"‚Will be used to create a stand-alone PVC to provision the volume. The pod in which this EphemeralVolumeSource is embedded will be the owner of the PVC, i.e. the PVC will be deleted together with the pod. The name of the PVC will be `-` where `` is the name from the `PodSpec.Volumes` array entry. Pod validation will reject the pod if the concatenated name is not valid for a PVC (for example, too long). + +An existing PVC with that name that is not owned by the pod will *not* be used for the pod to avoid using an unrelated volume by mistake. Starting the pod is then blocked until the unrelated PVC is removed. If such a pre-created PVC is meant to be used by the pod, the PVC has to updated with an owner reference to the pod once the pod exists. Normally this should not be necessary, but it may be useful when manually reconstructing a broken cluster. + +This field is read-only and no changes will be made by Kubernetes to the PVC after it has been created. + +Required, must not be nil. +” +)io.k8s.api.coordination.v1beta1.LeaseListæ"%LeaseList is a list of Lease objects.šitems² +objectʾ +Ë +metadata¾ +;#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +string +q +itemsh""Items is a list of schema objects.² +arrayº7 +5 +3#/definitions/io.k8s.api.coordination.v1beta1.Lease +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +stringúg +x-kubernetes-group-version-kindDB- group: coordination.k8s.io + kind: LeaseList + version: v1beta1 + +§ +"io.k8s.api.core.v1.NFSVolumeSource€"€Represents an NFS mount that lasts the lifetime of a pod. NFS volumes do not support ownership management or SELinux relabeling.šserveršpath² +objectÊÞ +€ +pathx"kPath that is exported by the NFS server. More info: https://kubernetes.io/docs/concepts/storage/volumes#nfs² +string +à +readOnly¶"§ReadOnly here will force the NFS export to be mounted with read-only permissions. Defaults to false. More info: https://kubernetes.io/docs/concepts/storage/volumes#nfs² +boolean +’ +server‡"zServer is the hostname or IP address of the NFS server. More info: https://kubernetes.io/docs/concepts/storage/volumes#nfs² +string +Ö +io.k8s.api.core.v1.VolumeDevice²"JvolumeDevice describes a mapping of a raw block device within a container.šnameš +devicePath² +objectÊà +l + +devicePath^"QdevicePath is the path inside of the container that the device will be mapped to.² +string +S +nameK">name must match the name of a persistentVolumeClaim in the pod² +string +í +1io.k8s.apimachinery.pkg.apis.meta.v1.APIGroupList·"RAPIGroupList is a list of APIGroup, to allow clients to discover the API at /apis.šgroups² +objectÊô +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +string +u +groupsk"groups is a list of APIGroup.² +arrayº? += +;#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.APIGroup +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +stringúT +x-kubernetes-group-version-kind1/- group: "" + kind: APIGroupList + version: v1 + +ð + io.k8s.api.discovery.v1.EndpointË"FEndpoint represents a single logical "backend" implementing a service.š addresses² +objectÊè +¾ +deprecatedTopology§"‰deprecatedTopology contains topology information part of the v1beta1 API. This field is deprecated, and will be removed when the v1beta1 API is removed (no sooner than kubernetes v1.24). While this field can hold values, it is not writable through the v1 API, and any attempts to write to it will be silently ignored. Topology information can be found in the zone and nodeName fields instead.ª + ² +string² +object + +hints… +3#/definitions/io.k8s.api.discovery.v1.EndpointHints"Nhints contains information associated with how an endpoint should be consumed. +Î +hostnameÁ"³hostname of this endpoint. This field may be used by consumers of endpoints to distinguish endpoints from each other (e.g. in DNS names). Multiple endpoints which use the same hostname should be considered fungible (e.g. multiple A values in DNS). Must be lowercase and pass DNS Label (RFC 1123) validation.² +string +Ú +nodeNameÍ"¿nodeName represents the name of the Node hosting this endpoint. This can be used to determine endpoints local to a Node. This field can be enabled with the EndpointSliceNodeName feature gate.² +string + + targetRef‚ +0#/definitions/io.k8s.api.core.v1.ObjectReference"NtargetRef is a reference to a Kubernetes object that represents this endpoint. +J +zoneB"5zone is the name of the Zone this endpoint exists in.² +string +î + addressesà" addresses of this endpoint. The contents of this field are interpreted according to the corresponding EndpointSlice addressType field. Consumers must handle different types of addresses in the context of their own capabilities. This must contain at least one address but no more than 100.² +arrayº + ² +stringú +x-kubernetes-list-typeset + +” + +conditions… +8#/definitions/io.k8s.api.discovery.v1.EndpointConditions"Iconditions contains information about the current status of the endpoint. +û +%io.k8s.api.discovery.v1.EndpointSliceÑ"ÜEndpointSlice represents a subset of the endpoints that implement a service. For a given service there may be multiple EndpointSlice objects, selected by labels, which must be joined to produce the full set of endpoints.š addressTypeš endpoints² +objectÊã +ß + endpointsÑ"jendpoints is a list of unique endpoints in this slice. Each slice may include a maximum of 1000 endpoints.² +arrayº2 +0 +.#/definitions/io.k8s.api.discovery.v1.Endpointú# +x-kubernetes-list-type atomic + +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +string +h +metadata\ +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"Standard object's metadata. +¤ +portsš"®ports specifies the list of network ports exposed by each endpoint in this slice. Each port must have a unique name. When ports is empty, it indicates that there are no defined ports. When a port is defined with a nil port value, it indicates "all ports". Each slice may include a maximum of 100 ports.² +arrayº6 +4 +2#/definitions/io.k8s.api.discovery.v1.EndpointPortú# +x-kubernetes-list-type atomic + +ð + addressTypeà"ÒaddressType specifies the type of address carried by this EndpointSlice. All addresses in this slice must be the same type. This field is immutable after creation. The following address types are currently supported: * IPv4: Represents an IPv4 Address. * IPv6: Represents an IPv6 Address. * FQDN: Represents a Fully Qualified Domain Name.² +string +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +stringúc +x-kubernetes-group-version-kind@>- kind: EndpointSlice + version: v1 + group: discovery.k8s.io + +– +)io.k8s.api.networking.v1beta1.IngressListè"'IngressList is a collection of Ingress.šitems² +objectʾ +Ð +metadataà +;#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"ƒStandard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +string +l +itemsc"Items is the list of Ingress.² +arrayº7 +5 +3#/definitions/io.k8s.api.networking.v1beta1.Ingress +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +stringúg +x-kubernetes-group-version-kindDB- group: networking.k8s.io + kind: IngressList + version: v1beta1 + +ÿ +!io.k8s.api.storage.v1.CSINodeListÙ"/CSINodeList is a collection of CSINode objects.šitems² +objectʯ +c +itemsZ"items is the list of CSINode² +arrayº/ +- ++#/definitions/io.k8s.api.storage.v1.CSINode +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +string +Ê +metadata½ +;#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"~Standard list metadata More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +stringú_ +x-kubernetes-group-version-kind<:- kind: CSINodeList + version: v1 + group: storage.k8s.io + +¢ +Kio.k8s.kube-aggregator.pkg.apis.apiregistration.v1beta1.APIServiceConditionÒ"NAPIServiceCondition describes the state of an APIService at a particular pointštypešstatus² +objectÊã +‘ +lastTransitionTime{ +7#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"@Last time the condition transitioned from one status to another. +X +messageM"@Human-readable message indicating details about last transition.² +string +^ +reasonT"GUnique, one-word, CamelCase reason for the condition's last transition.² +string +Z +statusP"CStatus is the status of the condition. Can be True, False, Unknown.² +string +7 +type/""Type is the type of the condition.² +string +È +0io.k8s.api.storage.v1alpha1.VolumeAttachmentList“ "AVolumeAttachmentList is a collection of VolumeAttachment objects.šitems² +objectÊÈ +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +string +| +itemss"&Items is the list of VolumeAttachments² +arrayº> +< +:#/definitions/io.k8s.api.storage.v1alpha1.VolumeAttachment +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +string +Ê +metadata½ +;#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"~Standard list metadata More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadataún +x-kubernetes-group-version-kindKI- version: v1alpha1 + group: storage.k8s.io + kind: VolumeAttachmentList + +„ ++io.k8s.api.authorization.v1.NonResourceRuleÔ"LNonResourceRule holds information that describes a rule for the non-resourcešverbs² +objectÊï +Ë +nonResourceURLs·"šNonResourceURLs is a set of partial urls that a user should have access to. *s are allowed, but only as the full, final step in the path. "*" means all.² +arrayº + ² +string +ž +verbs”"xVerb is a list of kubernetes non-resource API verbs, like: get, post, put, delete, patch, head, options. "*" means all.² +arrayº + ² +string +‰ +0io.k8s.api.authorization.v1beta1.NonResourceRuleÔ"LNonResourceRule holds information that describes a rule for the non-resourcešverbs² +objectÊï +ž +verbs”"xVerb is a list of kubernetes non-resource API verbs, like: get, post, put, delete, patch, head, options. "*" means all.² +arrayº + ² +string +Ë +nonResourceURLs·"šNonResourceURLs is a set of partial urls that a user should have access to. *s are allowed, but only as the full, final step in the path. "*" means all.² +arrayº + ² +string +® +(io.k8s.api.core.v1.AzureFileVolumeSource"WAzureFile represents an Azure File Service mount on the host and bind mount to the pod.š +secretNameš shareName² +objectÊ€ +x +readOnlyl"^Defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts.² +boolean +^ + +secretNameP"Cthe name of secret that contains Azure Storage Account Name and Key² +string +$ + shareName" +Share Name² +string +´ +4io.k8s.api.core.v1.PersistentVolumeClaimVolumeSourceû"žPersistentVolumeClaimVolumeSource references the user's PVC in the same namespace. This volume finds the bound PV and mounts that volume for the pod. A PersistentVolumeClaimVolumeSource is, essentially, a wrapper around another type of volume that is owned by someone else (the system).š claimName² +objectÊ¿ +á + claimNameÓ"ÅClaimName is the name of a PersistentVolumeClaim in the same namespace as the pod using this volume. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#persistentvolumeclaims² +string +Y +readOnlyM"?Will force the ReadOnly setting in VolumeMounts. Default false.² +boolean +ù +)io.k8s.api.node.v1alpha1.RuntimeClassSpecË "©RuntimeClassSpec is a specification of a RuntimeClass. It contains parameters that are required to describe the RuntimeClass to the Container Runtime Interface (CRI) implementation, as well as any other components that need to understand how the pod will be run. The RuntimeClassSpec is immutable.šruntimeHandler² +objectÊÿ +œ + +scheduling +1#/definitions/io.k8s.api.node.v1alpha1.Scheduling"×Scheduling holds the scheduling constraints to ensure that pods running with this RuntimeClass are scheduled to nodes that support it. If scheduling is nil, this RuntimeClass is assumed to be supported by all nodes. +õ +overheadè +/#/definitions/io.k8s.api.node.v1alpha1.Overhead"´Overhead represents the resource overhead associated with running a pod for a given RuntimeClass. For more details, see https://git.k8s.io/enhancements/keps/sig-node/20190226-pod-overhead.md This field is alpha-level as of Kubernetes v1.15, and is only honored by servers that enable the PodOverhead feature. +å +runtimeHandlerÒ"ÄRuntimeHandler specifies the underlying runtime and configuration that the CRI implementation will use to handle pods of this class. The possible values are specific to the node & CRI configuration. It is assumed that all handlers are available on every node, and handlers of the same name are equivalent on every node. For example, a handler called "runc" might specify that the runc OCI runtime (using native Linux containers) will be used to run the containers in a pod. The RuntimeHandler must be lowercase, conform to the DNS Label (RFC 1123) requirements, and is immutable.² +string +¨ +#io.k8s.api.node.v1alpha1.Scheduling€"TScheduling specifies the scheduling constraints for nodes supporting a RuntimeClass.² +objectÊ› +ç + nodeSelectorÖ"¸nodeSelector lists labels that must be present on nodes that support this RuntimeClass. Pods using this RuntimeClass can only be scheduled to a node matched by this selector. The RuntimeClass nodeSelector is merged with a pod's existing nodeSelector. Any conflicts will cause the pod to be rejected in admission.ª + ² +string² +object +® + tolerationsž"¹tolerations are appended (excluding duplicates) to pods running with this RuntimeClass during admission, effectively unioning the set of nodes tolerated by the pod and the RuntimeClass.² +arrayº/ +- ++#/definitions/io.k8s.api.core.v1.Tolerationú# +x-kubernetes-list-type atomic + +Ø +io.k8s.api.rbac.v1.Role¼"hRole is a namespaced, logical grouping of PolicyRules that can be referenced as a unit by a RoleBinding.² +objectÊÝ +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +string +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +string +h +metadata\ +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"Standard object's metadata. +t +rulesk"-Rules holds all the PolicyRules for this Role² +arrayº/ +- ++#/definitions/io.k8s.api.rbac.v1.PolicyRuleúc +x-kubernetes-group-version-kind@>- kind: Role + version: v1 + group: rbac.authorization.k8s.io + +Ý + as a "bucket", and try to put balanced number of pods into each bucket. It's a required field.² +string +Ï +whenUnsatisfiable¹"«WhenUnsatisfiable indicates how to deal with a pod if it doesn't satisfy the spread constraint. - DoNotSchedule (default) tells the scheduler not to schedule it. - ScheduleAnyway tells the scheduler to schedule the pod in any location, + but giving higher precedence to topologies that would help reduce the + skew. +A constraint is considered "Unsatisfiable" for an incoming pod if and only if every possible node assigment for that pod would violate "MaxSkew" on some topology. For example, in a 3-zone cluster, MaxSkew is set to 1, and pods with the same labelSelector spread as 3/1/1: | zone1 | zone2 | zone3 | | P P P | P | P | If WhenUnsatisfiable is set to DoNotSchedule, incoming pod can only be scheduled to zone2(zone3) to become 3/2/1(3/1/2) as ActualSkew(2-1) on zone2(zone3) satisfies MaxSkew(1). In other words, the cluster can still be imbalanced, but scheduler won't make it *more* imbalanced. It's a required field.² +string +° +Bio.k8s.api.flowcontrol.v1beta1.PriorityLevelConfigurationReferenceé"jPriorityLevelConfigurationReference contains information that points to the "request-priority" being used.šname² +objectÊh +f +name^"Q`name` is the name of the priority level configuration being referenced Required.² +string +´ +.io.k8s.api.networking.v1.IngressServiceBackend"CIngressServiceBackend references a Kubernetes Service as a Backend.šname² +objectʦ +x +namep"cName is the referenced service. The service must exist in the same namespace as the Ingress object.² +string +© +port  +9#/definitions/io.k8s.api.networking.v1.ServiceBackendPort"cPort of the referenced service. A port name or port number is required for a IngressServiceBackend. +á +&io.k8s.api.scheduling.v1.PriorityClass¶"{PriorityClass defines mapping from a priority class name to the priority integer value. The value can be any valid integer.švalue² +objectÊ» +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +string +‹ + description|"odescription is an arbitrary string that usually provides guidelines on when this priority class should be used.² +string +¦ + globalDefault”"…globalDefault specifies whether this PriorityClass should be considered as the default priority for pods that do not have any priority class. Only one PriorityClass can be marked as `globalDefault`. However, if more than one PriorityClasses exists with their `globalDefault` field set to true, the smallest value of such global default PriorityClasses will be used as the default priority.² +boolean +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +string +Ò +metadataÅ +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"ƒStandard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata +„ +preemptionPolicyï"áPreemptionPolicy is the Policy for preempting pods with lower priority. One of Never, PreemptLowerPriority. Defaults to PreemptLowerPriority if unset. This field is beta-level, gated by the NonPreemptingPriority feature-gate.² +string +¨ +valuežint32"ˆThe value of this priority class. This is the actual priority that pods receive when they have the name of this class in their pod spec.² +integerúd +x-kubernetes-group-version-kindA?- version: v1 + group: scheduling.k8s.io + kind: PriorityClass + +— +Qio.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1beta1.WebhookClientConfigÁ "WWebhookClientConfig contains the information to make a TLS connection with the webhook.² +objectÊÙ +ò +urlê"Üurl gives the location of the webhook, in standard URL form (`scheme://host:port/path`). Exactly one of `url` or `service` must be specified. + +The `host` should not refer to a service running in the cluster; use the `service` field instead. The host might be resolved via external DNS in some apiservers (e.g., `kube-apiserver` cannot resolve in-cluster DNS as that would be a layering violation). `host` may also be an IP address. + +Please note that using `localhost` or `127.0.0.1` as a `host` is risky unless you take great care to run this webhook on all hosts which run an apiserver which might need to make calls to this webhook. Such installs are likely to be non-portable, i.e., not easy to turn up in a new cluster. + +The scheme must be "https"; the URL must begin with "https://". + +A path is optional, and if present may be any string permissible in a URL. You may use the path to pass an arbitrary string to the webhook, for example, a cluster identifier. + +Attempting to use a user or basic auth e.g. "user:password@" is not allowed. Fragments ("#...") and query parameters ("?...") are not allowed, either.² +string +à +caBundle¶byte"¢caBundle is a PEM encoded CA bundle which will be used to validate the webhook's server certificate. If unspecified, system trust roots on the apiserver are used.² +string +› +service +\#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1beta1.ServiceReference"®service is a reference to the service for this webhook. Either service or url must be specified. + +If the webhook is running within the cluster, then you should use `service`. +á +io.k8s.api.core.v1.Capabilities½" name on the dataset for Flocker should be considered as deprecated² +string +_ + datasetUUIDP"CUUID of the dataset. This is unique identifier of a Flocker dataset² +string +ú +io.k8s.api.core.v1.NodeListÚ"ONodeList is the whole list of all Nodes which have been registered with master.šitems² +objectÊŸ +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +string +Ï +metadata +;#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"‚Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +string +N +itemsE" List of nodes² +arrayº) +' +%#/definitions/io.k8s.api.core.v1.NodeúP +x-kubernetes-group-version-kind-+- version: v1 + group: "" + kind: NodeList + +Ê +io.k8s.api.core.v1.Sysctl¬"+Sysctl defines a kernel parameter to be setšnamešvalue² +objectÊb +0 +value'"Value of a property to set² +string +. +name&"Name of a property to set² +string +ë +%io.k8s.api.events.v1beta1.EventSeriesÁ"qEventSeries contain information on series of events, i.e. thing that was/is happening continuously for some time.šcountšlastObservedTime² +objectʤ +n +counteint32"Pcount is the number of occurrences in this series up to the last heartbeat time.² +integer +± +lastObservedTimeœ +<#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.MicroTime"\lastObservedTime is the time when last Event from the series was seen before last heartbeat. +‚ +*io.k8s.api.core.v1.PreferredSchedulingTermÓ"®An empty preferred scheduling term matches all objects with implicit weight 0 (i.e. it's a no-op). A null preferred scheduling term matches no objects (i.e. is also a no-op).šweightš +preference² +objectÊý +‚ + +preferencet +1#/definitions/io.k8s.api.core.v1.NodeSelectorTerm"?A node selector term, associated with the corresponding weight. +v +weightlint32"WWeight associated with matching the corresponding nodeSelectorTerm, in the range 1-100.² +integer +Š +&io.k8s.api.core.v1.ResourceQuotaStatusß"FResourceQuotaStatus defines the enforced hard limits and observed use.² +objectʈ +à +hard×"‡Hard is the set of enforced hard limits for each named resource. More info: https://kubernetes.io/docs/concepts/policy/resource-quotas/ª? += +;#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity² +object +¢ +used™"JUsed is the current observed total usage of the resource in the namespace.ª? += +;#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity² +object +Ÿ +-io.k8s.api.networking.v1.HTTPIngressRuleValueí"£HTTPIngressRuleValue is a list of http selectors pointing to backends. In the example: http:///? -> backend where where parts of the url correspond to RFC 3986, this resource will be used to match against everything after the last '/' and before the first '?' or '#'.špaths² +objectÊ° +­ +paths£"4A collection of paths that map requests to backends.² +arrayº: +8 +6#/definitions/io.k8s.api.networking.v1.HTTPIngressPathú# +x-kubernetes-list-type atomic + +§ +"io.k8s.api.node.v1beta1.Scheduling€"TScheduling specifies the scheduling constraints for nodes supporting a RuntimeClass.² +objectÊ› +® + tolerationsž"¹tolerations are appended (excluding duplicates) to pods running with this RuntimeClass during admission, effectively unioning the set of nodes tolerated by the pod and the RuntimeClass.² +arrayº/ +- ++#/definitions/io.k8s.api.core.v1.Tolerationú# +x-kubernetes-list-type atomic + +ç + nodeSelectorÖ"¸nodeSelector lists labels that must be present on nodes that support this RuntimeClass. Pods using this RuntimeClass can only be scheduled to a node matched by this selector. The RuntimeClass nodeSelector is merged with a pod's existing nodeSelector. Any conflicts will cause the pod to be rejected in admission.ª + ² +string² +object +œ ++io.k8s.api.rbac.v1alpha1.ClusterRoleBindingì "—ClusterRoleBinding references a ClusterRole, but not contain it. It can reference a ClusterRole in the global namespace, and adds who information via Subject. Deprecated in v1.17 in favor of rbac.authorization.k8s.io/v1 ClusterRoleBinding, and will no longer be served in v1.22.šroleRef² +objectÊ¿ +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +string +h +metadata\ +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"Standard object's metadata. +È +roleRef¼ +.#/definitions/io.k8s.api.rbac.v1alpha1.RoleRef"‰RoleRef can only reference a ClusterRole in the global namespace. If the RoleRef cannot be resolved, the Authorizer must return an error. +Š +subjects~"=Subjects holds references to the objects the role applies to.² +arrayº2 +0 +.#/definitions/io.k8s.api.rbac.v1alpha1.Subject +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +stringúw +x-kubernetes-group-version-kindTR- group: rbac.authorization.k8s.io + kind: ClusterRoleBinding + version: v1alpha1 + +Ö +4io.k8s.api.admissionregistration.v1.ServiceReference";ServiceReference holds a reference to Service.legacy.k8s.ioš namespacešname² +objectʾ +@ +name8"+`name` is the name of the service. Required² +string +O + namespaceB"5`namespace` is the namespace of the service. Required² +string +f +path^"Q`path` is an optional URL path which will be sent in any request to this service.² +string +À +port·int32"¡If specified, the port on the service that hosting webhook. Default to 443 for backward compatibility. `port` should be a valid port number (1-65535, inclusive).² +integer +ì ++io.k8s.api.autoscaling.v2beta2.MetricStatus¼">MetricStatus describes the last-read state of a single metric.štype² +objectÊæ +• +podsŒ +=#/definitions/io.k8s.api.autoscaling.v2beta2.PodsMetricStatus"Êpods refers to a metric describing each pod in the current scale target (for example, transactions-processed-per-second). The values will be averaged together before being compared to the target value. +™ +resourceŒ +A#/definitions/io.k8s.api.autoscaling.v2beta2.ResourceMetricStatus"Æresource refers to a resource metric (such as those specified in requests and limits) known to Kubernetes describing each pod in the current scale target (e.g. CPU or memory). Such metrics are built in to Kubernetes, and have special scaling options on top of those available to normal per-pod metrics using the "pods" source. +¥ +typeœ"Žtype is the type of metric source. It will be one of "ContainerResource", "External", "Object", "Pods" or "Resource", each corresponds to a matching field in the object. Note: "ContainerResource" type is available on when the feature-gate HPAContainerMetrics is enabled² +string +Ë +containerResourceµ +J#/definitions/io.k8s.api.autoscaling.v2beta2.ContainerResourceMetricStatus"æcontainer resource refers to a resource metric (such as those specified in requests and limits) known to Kubernetes describing a single container in each pod in the current scale target (e.g. CPU or memory). Such metrics are built in to Kubernetes, and have special scaling options on top of those available to normal per-pod metrics using the "pods" source. +ô +externalç +A#/definitions/io.k8s.api.autoscaling.v2beta2.ExternalMetricStatus"¡external refers to a global metric that is not associated with any Kubernetes object. It allows autoscaling based on information coming from components running outside of cluster (for example length of queue in cloud messaging service, or QPS from loadbalancer running outside of cluster). + +object· +?#/definitions/io.k8s.api.autoscaling.v2beta2.ObjectMetricStatus"tobject refers to a metric describing a single kubernetes object (for example, hits-per-second on an Ingress object). +ž +.io.k8s.api.core.v1.PersistentVolumeClaimStatusë"OPersistentVolumeClaimStatus is the current status of a persistent volume claim.² +objectÊ‹ +Ç + +conditions¸"‘Current Condition of persistent volume claim. If underlying persistent volume is being resized then the Condition will be set to 'ResizeStarted'.² +arrayºC +A +?#/definitions/io.k8s.api.core.v1.PersistentVolumeClaimConditionú' +x-kubernetes-patch-merge-keytype +ú' +x-kubernetes-patch-strategymerge + +R +phaseI"#/definitions/io.k8s.api.core.v1.GCEPersistentDiskVolumeSource"ËGCEPersistentDisk represents a GCE Disk resource that is attached to a kubelet's host machine and then exposed to the pod. More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk +Ð +cinderÅ +3#/definitions/io.k8s.api.core.v1.CinderVolumeSource"Cinder represents a cinder volume attached and mounted on kubelets host machine. More info: https://examples.k8s.io/mysql-cinder-pd/README.md +ˆ + configMap{ +6#/definitions/io.k8s.api.core.v1.ConfigMapVolumeSource"AConfigMap represents a configMap that should populate this volume +º +csi² +0#/definitions/io.k8s.api.core.v1.CSIVolumeSource"~CSI (Container Storage Interface) represents ephemeral storage that is handled by certain external CSI drivers (Beta feature). +œ + azureDiskŽ +6#/definitions/io.k8s.api.core.v1.AzureDiskVolumeSource"TAzureDisk represents an Azure Data Disk mount on the host and bind mount to the pod. +Œ +cephfs +3#/definitions/io.k8s.api.core.v1.CephFSVolumeSource"JCephFS represents a Ceph FS mount on the host that shares a pod's lifetime +Ä +nfs¼ +0#/definitions/io.k8s.api.core.v1.NFSVolumeSource"‡NFS represents an NFS mount on the host that shares a pod's lifetime More info: https://kubernetes.io/docs/concepts/storage/volumes#nfs +‹ + projected~ +6#/definitions/io.k8s.api.core.v1.ProjectedVolumeSource"DItems for all in one resources secrets, configmaps, and downward API +É +rbdÁ +0#/definitions/io.k8s.api.core.v1.RBDVolumeSource"ŒRBD represents a Rados Block Device mount on the host that shares a pod's lifetime. More info: https://examples.k8s.io/volumes/rbd/README.md +¬ + vsphereVolumeš +?#/definitions/io.k8s.api.core.v1.VsphereVirtualDiskVolumeSource"WVsphereVolume represents a vSphere volume attached and mounted on kubelets host machine +Ë +,io.k8s.api.extensions.v1beta1.IngressBackendš"DIngressBackend describes all endpoints for a given service and port.² +objectÊÅ +ø +resourceë +:#/definitions/io.k8s.api.core.v1.TypedLocalObjectReference"¬Resource is an ObjectRef to another Kubernetes resource in the namespace of the Ingress object. If resource is specified, serviceName and servicePort must not be specified. +I + serviceName:"-Specifies the name of the referenced service.² +string +} + servicePortn +=#/definitions/io.k8s.apimachinery.pkg.util.intstr.IntOrString"-Specifies the port of the referenced service. +¬ +@io.k8s.api.admissionregistration.v1.MutatingWebhookConfigurationç +"‚MutatingWebhookConfiguration describes the configuration of and admission webhook that accept or reject and may change the object.² +objectÊÒ +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +string +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +string +Ñ +metadataÄ +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"‚Standard object metadata; More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata. +þ +webhooksñ"IWebhooks is a list of webhooks and the affected resources and operations.² +arrayºE +C +A#/definitions/io.k8s.api.admissionregistration.v1.MutatingWebhookú' +x-kubernetes-patch-merge-keyname +ú' +x-kubernetes-patch-strategymerge +ú~ +x-kubernetes-group-version-kind[Y- group: admissionregistration.k8s.io + kind: MutatingWebhookConfiguration + version: v1 + +Ô +'io.k8s.api.apps.v1.StatefulSetCondition¨"MStatefulSetCondition describes the state of a statefulset at a certain point.štypešstatus² +objectʺ +3 +type+"Type of statefulset condition.² +string +‘ +lastTransitionTime{ +7#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"@Last time the condition transitioned from one status to another. +Y +messageN"AA human readable message indicating details about the transition.² +string +F +reason<"/The reason for the condition's last transition.² +string +L +statusB"5Status of the condition, one of True, False, Unknown.² +string + +/io.k8s.api.autoscaling.v2beta2.PodsMetricSourceŽ"åPodsMetricSource indicates how to scale on a metric describing each pod in the current scale target (for example, transactions-processed-per-second). The values will be averaged together before being compared to the target value.šmetricštarget² +objectÊ… +ƒ +metricy +=#/definitions/io.k8s.api.autoscaling.v2beta2.MetricIdentifier"8metric identifies the target metric by name and selector +} +targets +9#/definitions/io.k8s.api.autoscaling.v2beta2.MetricTarget"6target specifies the target value for the given metric +Á +!io.k8s.api.core.v1.DaemonEndpoint›"CDaemonEndpoint contains information about a single Daemon endpoint.šPort² +objectÊA +? +Port7int32""Port number of the given endpoint.² +integer +» +"io.k8s.api.core.v1.EndpointAddress”" +p +oneOfg² +arrayºZ +X +V#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1.JSONSchemaProps +« +x-kubernetes-list-map-keysŒ"ïx-kubernetes-list-map-keys annotates an array with the x-kubernetes-list-type `map` by specifying the keys used as the index of the map. + +This tag MUST only be used on lists that have the "x-kubernetes-list-type" extension set to "map". Also, the values specified for this attribute must be a scalar typed field of the child structure (no nesting is supported). + +The properties specified must either be required or have a default value, to ensure those properties are present for all list items.² +arrayº + ² +string + +nullable ² +boolean +q +additionalItems^ +\#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1.JSONSchemaPropsOrBool +n + externalDocs^ +\#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1.ExternalDocumentation +h +items_ +]#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1.JSONSchemaPropsOrArray +$ + maxPropertiesint64² +integer +$ + minPropertiesint64² +integer + +exclusiveMinimum ² +boolean +} +patternPropertieshªZ +X +V#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1.JSONSchemaProps² +object + +type ² +string +Ó +x-kubernetes-embedded-resource°"¡x-kubernetes-embedded-resource defines that the value is an embedded Kubernetes runtime.Object, with TypeMeta and ObjectMeta. The type must be object. It is allowed to further restrict the embedded object. kind, apiVersion and metadata are validated automatically. x-kubernetes-preserve-unknown-fields is allowed to be true, but does not have to be if the object is fully specified (up to kind, apiVersion, metadata).² +boolean +  +x-kubernetes-map-type†"øx-kubernetes-map-type annotates an object to further describe its topology. This extension must only be used when type is object and may have 2 possible values: + +1) `granular`: + These maps are actual maps (key-value pairs) and each fields are independent + from each other (they can each be manipulated by separate actors). This is + the default behaviour for all maps. +2) `atomic`: the list is treated as a single entity, like a scalar. + Atomic maps will be entirely replaced when updated.² +string +d +enum\² +arrayºO +M +K#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1.JSON + +id ² +string + + maxLengthint64² +integer + +minItemsint64² +integer + +exclusiveMaximum ² +boolean + +maxItemsint64² +integer +‡ +x-kubernetes-int-or-stringè"Ùx-kubernetes-int-or-string specifies that this value is either an integer or a string. If this is true, an empty type is allowed and type as child of anyOf is permitted if following one of the following patterns: + +1) anyOf: + - type: integer + - type: string +2) allOf: + - anyOf: + - type: integer + - type: string + - ... zero or more² +boolean +v +additionalProperties^ +\#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1.JSONSchemaPropsOrBool +p +allOfg² +arrayºZ +X +V#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1.JSONSchemaProps + +default‘ +K#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1.JSON"Ádefault is a default value for undefined object fields. Defaulting is a beta feature under the CustomResourceDefaulting feature gate. Defaulting requires spec.preserveUnknownFields to be false. +w + definitionshªZ +X +V#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1.JSONSchemaProps² +object +… + dependenciesuªg +e +c#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1.JSONSchemaPropsOrStringArray² +object +X +exampleM +K#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1.JSON + +maximumdouble² +number + +pattern ² +string + +title ² +string + + uniqueItems ² +boolean +¶ +format«"format is an OpenAPI v3 format string. Unknown formats are ignored. The following formats are validated: + +- bsonobjectid: a bson object ID, i.e. a 24 characters hex string - uri: an URI as parsed by Golang net/url.ParseRequestURI - email: an email address as parsed by Golang net/mail.ParseAddress - hostname: a valid representation for an Internet host name, as defined by RFC 1034, section 3.1 [RFC1034]. - ipv4: an IPv4 IP as parsed by Golang net.ParseIP - ipv6: an IPv6 IP as parsed by Golang net.ParseIP - cidr: a CIDR as parsed by Golang net.ParseCIDR - mac: a MAC address as parsed by Golang net.ParseMAC - uuid: an UUID that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?[0-9a-f]{4}-?[0-9a-f]{4}-?[0-9a-f]{12}$ - uuid3: an UUID3 that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?3[0-9a-f]{3}-?[0-9a-f]{4}-?[0-9a-f]{12}$ - uuid4: an UUID4 that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?4[0-9a-f]{3}-?[89ab][0-9a-f]{3}-?[0-9a-f]{12}$ - uuid5: an UUID5 that allows uppercase defined by the regex (?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?5[0-9a-f]{3}-?[89ab][0-9a-f]{3}-?[0-9a-f]{12}$ - isbn: an ISBN10 or ISBN13 number string like "0321751043" or "978-0321751041" - isbn10: an ISBN10 number string like "0321751043" - isbn13: an ISBN13 number string like "978-0321751041" - creditcard: a credit card number defined by the regex ^(?:4[0-9]{12}(?:[0-9]{3})?|5[1-5][0-9]{14}|6(?:011|5[0-9][0-9])[0-9]{12}|3[47][0-9]{13}|3(?:0[0-5]|[68][0-9])[0-9]{11}|(?:2131|1800|35\d{3})\d{11})$ with any non digit characters mixed in - ssn: a U.S. social security number following the regex ^\d{3}[- ]?\d{2}[- ]?\d{4}$ - hexcolor: an hexadecimal color code like "#FFFFFF: following the regex ^#?([0-9a-fA-F]{3}|[0-9a-fA-F]{6})$ - rgbcolor: an RGB color code like rgb like "rgb(255,255,2559" - byte: base64 encoded binary data - password: any kind of string - date: a date string like "2006-01-02" as defined by full-date in RFC3339 - duration: a duration string like "22 ns" as parsed by Golang time.ParseDuration or compatible with Scala duration format - datetime: a date time string like "2014-12-15T19:30:20.000Z" as defined by date-time in RFC3339.² +string +! + +multipleOfdouble² +number +_ +notX +V#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1.JSONSchemaProps +& +required² +arrayº + ² +string +Þ +x-kubernetes-list-typeÃ"µx-kubernetes-list-type annotates an array to further describe its topology. This extension must only be used on lists and may have 3 possible values: + +1) `atomic`: the list is treated as a single entity, like a scalar. + Atomic lists will be entirely replaced when updated. This extension + may be used on any type of list (struct, scalar, ...). +2) `set`: + Sets are lists that must not have multiple items with the same value. Each + value must be a scalar, an object with x-kubernetes-map-type `atomic` or an + array with x-kubernetes-list-type `atomic`. +3) `map`: + These lists are like maps in that their elements have a non-index key + used to identify them. Order is preserved upon merge. The map tag + must only be used on a list with elements of type object. +Defaults to atomic for arrays.² +string + +minimumdouble² +number +v + +propertieshªZ +X +V#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1.JSONSchemaProps² +object +˜ +$x-kubernetes-preserve-unknown-fieldsï"àx-kubernetes-preserve-unknown-fields stops the API server decoding step from pruning fields which are not specified in the validation schema. This affects fields recursively, but switches back to normal pruning behaviour if nested properties or additionalProperties are specified in the schema. This can either be true or undefined. False is forbidden.² +boolean + +$ref ² +string + +$schema ² +string +p +anyOfg² +arrayºZ +X +V#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1.JSONSchemaProps + + description ² +string + + minLengthint64² +integer +ð +Qio.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1.CustomResourceValidationš"MCustomResourceValidation is a list of validation methods for CustomResources.² +objectʼ +¹ +openAPIV3Schema¥ +V#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1.JSONSchemaProps"KopenAPIV3Schema is the OpenAPI v3 schema to use for validation and pruning. +î +4io.k8s.apimachinery.pkg.apis.meta.v1.APIResourceListµ "¦APIResourceList is a list of APIResource, it is used to expose the name of the resources supported in a specific group and version, and if the resource is namespaced.š groupVersionš resources² +objectʈ +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +string +_ + groupVersionO"BgroupVersion is the group and version this APIResourceList is for.² +string +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +string +§ + resources™"Hresources contains the name of the resources and if they are namespaced.² +arrayºB +@ +>#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.APIResourceúW +x-kubernetes-group-version-kind42- group: "" + kind: APIResourceList + version: v1 + +Ð + +.io.k8s.api.autoscaling.v2beta2.HPAScalingRules +"”HPAScalingRules configures the scaling behavior for one direction. These Rules are applied after calculating DesiredReplicas from metrics for the HPA. They can limit the scaling velocity by specifying scaling policies. They can prevent flapping by specifying the stabilization window, so that the number of replicas is not set instantly, instead, the safest value from the stabilization window is chosen.² +objectÊ÷ +‘ +policies„"³policies is a list of potential scaling polices which can be used during scaling. At least one policy must be specified, otherwise the HPAScalingRules will be discarded as invalid² +arrayºA +? +=#/definitions/io.k8s.api.autoscaling.v2beta2.HPAScalingPolicy +‘ + selectPolicy€"sselectPolicy is used to specify which policy should be used. If not set, the default value MaxPolicySelect is used.² +string +Ì +stabilizationWindowSeconds­int32"—StabilizationWindowSeconds is the number of seconds for which past recommendations should be considered while scaling up or scaling down. StabilizationWindowSeconds must be greater than or equal to zero and less than or equal to 3600 (one hour). If not set, use the default values: - For scale up: 0 (i.e. no stabilization is done). - For scale down: 300 (i.e. the stabilization window is 300 seconds long).² +integer +Ö +(io.k8s.api.core.v1.DownwardAPIVolumeFile© "XDownwardAPIVolumeFile represents information to create the file containing the pod fieldšpath² +objectʹ +î +resourceFieldRefÙ +6#/definitions/io.k8s.api.core.v1.ResourceFieldSelector"žSelects a resource of the container: only resources limits and requests (limits.cpu, limits.memory, requests.cpu and requests.memory) are currently supported. +¦ +fieldRef™ +4#/definitions/io.k8s.api.core.v1.ObjectFieldSelector"aRequired: Selects a field of the pod: only annotations, labels, name and namespace are supported. +» +mode²int32"œOptional: mode bits used to set permissions on this file, must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts both octal and decimal values, JSON requires decimal values for mode bits. If not specified, the volume defaultMode will be used. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.² +integer +Þ +pathÕ"ÇRequired: Path is the relative path name of the file to be created. Must not be absolute or contain the '..' path. Must be utf-8 encoded. The first item of the relative path must not start with '..'² +string +ê + +(io.k8s.api.policy.v1.PodDisruptionBudget½ +"hPodDisruptionBudget is an object to define the max disruption that can be caused to a collection of pods² +objectÊâ +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +string +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +string +Ò +metadataÅ +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"ƒStandard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata +‡ +spec +:#/definitions/io.k8s.api.policy.v1.PodDisruptionBudgetSpec"ASpecification of the desired behavior of the PodDisruptionBudget. +ƒ +statusy +<#/definitions/io.k8s.api.policy.v1.PodDisruptionBudgetStatus"9Most recently observed status of the PodDisruptionBudget.ú_ +x-kubernetes-group-version-kind<:- group: policy + kind: PodDisruptionBudget + version: v1 + +ž +*io.k8s.api.apps.v1.DaemonSetUpdateStrategyï"XDaemonSetUpdateStrategy is a struct used to control the update strategy for a DaemonSet.² +objectʆ +’ + rollingUpdate€ +7#/definitions/io.k8s.api.apps.v1.RollingUpdateDaemonSet"ERolling update config params. Present only if type = "RollingUpdate". +o +typeg"ZType of daemon set update. Can be "RollingUpdate" or "OnDelete". Default is RollingUpdate.² +string +ž +(io.k8s.api.core.v1.ProjectedVolumeSourceñ"$Represents a projected volume source² +objectʼ +Î + defaultMode¾int32"¨Mode bits used to set permissions on created files by default. Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts both octal and decimal values, JSON requires decimal values for mode bits. Directories within the path are not affected by this setting. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.² +integer +i +sources^"list of volume projections² +arrayº5 +3 +1#/definitions/io.k8s.api.core.v1.VolumeProjection +Ÿ +3io.k8s.api.flowcontrol.v1beta1.QueuingConfigurationç +"CQueuingConfiguration holds the configuration parameters for queuing² +objectÊ“ + +¢ +handSize•int32"ÿ`handSize` is a small positive number that configures the shuffle sharding of requests into queues. When enqueuing a request at this priority level the request's flow identifier (a string pair) is hashed and the hash value is used to shuffle the list of queues and deal a hand of the size specified here. The request is put into one of the shortest queues in that hand. `handSize` must be no larger than `queues`, and should be significantly smaller (so that a few heavy flows do not saturate most of the queues). See the user-facing documentation for more extensive guidance on setting this field. This field has a default value of 8.² +integer +“ +queueLengthLimitþint32"è`queueLengthLimit` is the maximum number of requests allowed to be waiting in a given queue of this priority level at a time; excess requests are rejected. This value must be positive. If not specified, it will be defaulted to 50.² +integer +Õ +queuesÊint32"´`queues` is the number of queues for this priority level. The queues exist independently at each apiserver. The value must be positive. Setting it to 1 effectively precludes shufflesharding and thus makes the distinguisher method of associated flow schemas irrelevant. This field has a default value of 64.² +integer +¦ + io.k8s.api.networking.v1.Ingress "€Ingress is a collection of rules that allow inbound connections to reach the endpoints defined by a backend. An Ingress can be configured to give services externally-reachable urls, load balance traffic, terminate SSL, offer name based virtual hosting etc.² +objectÊŽ + +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +string +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +string +Ò +metadataÅ +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"ƒStandard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata +Ø +specÏ +2#/definitions/io.k8s.api.networking.v1.IngressSpec"˜Spec is the desired state of the Ingress. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status +Þ +statusÓ +4#/definitions/io.k8s.api.networking.v1.IngressStatus"šStatus is the current state of the Ingress. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-statusú^ +x-kubernetes-group-version-kind;9- group: networking.k8s.io + kind: Ingress + version: v1 + +Ü +*io.k8s.api.policy.v1beta1.AllowedCSIDriver­"RAllowedCSIDriver represents a single inline CSI Driver that is allowed to be used.šname² +objectÊD +B +name:"-Name is the registered name of the CSI driver² +string +¥ +>io.k8s.apimachinery.pkg.apis.meta.v1.ServerAddressByClientCIDRâ"ServerAddressByClientCIDR helps the client to determine the server address that they should use, depending on the clientCIDR that they match.š +clientCIDRš serverAddress² +objectʦ +€ + +clientCIDRr"eThe CIDR with which clients can match their IP to figure out the server address that they should use.² +string +  + serverAddressŽ"€Address of this server, suitable for a client that matches the above CIDR. This can be a hostname, hostname:port, IP or IP:port.² +string +¬ ++io.k8s.apimachinery.pkg.apis.meta.v1.Statusü"CStatus is a return value for calls that don't return other objects.² +objectÊ× +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +string +U +messageJ"=A human-readable description of the status of this operation.² +string +Ï +metadata +;#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"‚Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds +ä +reasonÙ"ËA machine-readable description of why this operation is in the "Failure" status. If this value is empty there is no information available. A Reason clarifies an HTTP status code but does not override it.² +string +À +statusµ"§Status of the operation. One of: "Success" or "Failure". More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status² +string +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +string +V +codeNint32"9Suggested HTTP return code for this status, 0 if not set.² +integer +¬ +details  +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.StatusDetails"ÛExtended data associated with the reason. Each reason may define its own extended details. This field is optional and the data returned is not guaranteed to conform to any schema except that defined by the reason type.úN +x-kubernetes-group-version-kind+)- group: "" + kind: Status + version: v1 + +Œ +&io.k8s.api.storage.v1.VolumeAttachmentá "—VolumeAttachment captures the intent to attach or detach the specified volume to/from the specified node. + +VolumeAttachment objects are non-namespaced.šspec² +objectÊÊ +Ð +statusÅ +:#/definitions/io.k8s.api.storage.v1.VolumeAttachmentStatus"†Status of the VolumeAttachment request. Populated by the entity completing the attach or detach operation, i.e. the external-attacher. +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +string +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +string +Ð +metadataà +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"Standard object metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata +¤ +spec› +8#/definitions/io.k8s.api.storage.v1.VolumeAttachmentSpec"_Specification of the desired attach/detach volume behavior. Populated by the Kubernetes system.úd +x-kubernetes-group-version-kindA?- group: storage.k8s.io + kind: VolumeAttachment + version: v1 + + +/io.k8s.apimachinery.pkg.util.intstr.IntOrStringŽ int-or-string"ñIntOrString is a type that can hold an int32 or a string. When used in JSON or YAML marshalling and unmarshalling, it produces or consumes the inner type. This allows you to have, for example, a JSON field that can accept a name or number.² +string +µ +6io.k8s.api.authorization.v1beta1.NonResourceAttributesú"{NonResourceAttributes includes the authorization attributes available for non-resource requests to the Authorizer interface² +objectÊo +8 +path0"#Path is the URL path of the request² +string +3 +verb+"Verb is the standard HTTP verb² +string +¦ ++io.k8s.api.core.v1.ContainerStateTerminatedö">ContainerStateTerminated is a terminated state of a container.šexitCode² +objectÊœ +R + containerIDC"6Container's ID in the format 'docker://'² +string +W +exitCodeKint32"6Exit status from the last termination of the container² +integer +t + +finishedAtf +7#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"+Time at which the container last terminated +O +messageD"7Message regarding the last termination of the container² +string +P +reasonF"9(brief) reason from the last termination of the container² +string +P +signalFint32"1Signal from the last termination of the container² +integer + + startedAtt +7#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"9Time at which previous execution of the container started + +!io.k8s.api.storage.v1.VolumeErrorê"DVolumeError captures an error encountered during a volume operation.² +objectÊ• +® +message¢"”String detailing the error encountered during Attach or Detach operation. This string may be logged, so it should not contain sensitive information.² +string +b +timeZ +7#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"Time the error was encountered. +´ +$io.k8s.api.networking.v1.IngressSpec‹";IngressSpec describes the Ingress the user wishes to exist.² +objectÊ¿ +ß +defaultBackendÌ +5#/definitions/io.k8s.api.networking.v1.IngressBackend"’DefaultBackend is the backend that should handle requests that don't match any rule. If Rules are not specified, DefaultBackend must be specified. If DefaultBackend is not set, the handling of requests that do not match any of the rules will be up to the Ingress controller. +´ +ingressClassNameŸ"‘IngressClassName is the name of the IngressClass cluster resource. The associated IngressClass defines which controller will implement the resource. This replaces the deprecated `kubernetes.io/ingress.class` annotation. For backwards compatibility, when that annotation is set, it must be given precedence over this field. The controller may emit a warning if the field and annotation have different values. Implementations of this API should ignore Ingresses without a class specified. An IngressClass resource may be marked as default, which can be used to set a default value for this field. For more information, refer to the IngressClass documentation.² +string +ù +rulesï"ƒA list of host rules used to configure the Ingress. If unspecified, or no rule matches, all traffic is sent to the default backend.² +arrayº6 +4 +2#/definitions/io.k8s.api.networking.v1.IngressRuleú# +x-kubernetes-list-type atomic + +§ +tlsŸ"´TLS configuration. Currently the Ingress only supports a single TLS port, 443. If multiple members of this list specify different hosts, they will be multiplexed on the same port according to the hostname specified through the SNI TLS extension, if the ingress controller fulfilling the ingress supports SNI.² +arrayº5 +3 +1#/definitions/io.k8s.api.networking.v1.IngressTLSú# +x-kubernetes-list-type atomic + +† +!io.k8s.api.rbac.v1alpha1.RoleListà"RoleList is a collection of Roles. Deprecated in v1.17 in favor of rbac.authorization.k8s.io/v1 RoleList, and will no longer be served in v1.22.šitems² +objectÊÆ +f +metadataZ +;#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"Standard object's metadata. +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +string +_ +itemsV"Items is a list of Roles² +arrayº/ +- ++#/definitions/io.k8s.api.rbac.v1alpha1.Role +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +stringúm +x-kubernetes-group-version-kindJH- group: rbac.authorization.k8s.io + kind: RoleList + version: v1alpha1 + +Î +"io.k8s.api.storage.v1beta1.CSINode§ "ÊDEPRECATED - This group version of CSINode is deprecated by storage/v1/CSINode. See the release notes for more information. CSINode holds information about all CSI drivers installed on a node. CSI drivers do not need to create the CSINode object directly. As long as they use the node-driver-registrar sidecar container, the kubelet will automatically populate the CSINode object for the CSI driver as part of kubelet plugin registration. CSINode has the same name as a node. If the object is missing, it means either there are no CSI Drivers available on the node, or the Kubelet version is low enough that it doesn't create this object. CSINode has an OwnerReference that points to the corresponding node object.šspec² +objectÊá +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +string +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +string +| +metadatap +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"/metadata.name must be the Kubernetes node name. +d +spec\ +4#/definitions/io.k8s.api.storage.v1beta1.CSINodeSpec"$spec is the specification of CSINodeú` +x-kubernetes-group-version-kind=;- group: storage.k8s.io + kind: CSINode + version: v1beta1 + +ƒ +(io.k8s.api.storage.v1beta1.CSINodeDriverÖ "]CSINodeDriver holds information about the specification of one CSI driver installed on a nodešnamešnodeID² +objectÊØ +¨ + allocatable˜ +<#/definitions/io.k8s.api.storage.v1beta1.VolumeNodeResources"Xallocatable represents the volume resources of a node that are available for scheduling. +ª +name¡"“This is the name of the CSI driver that this object refers to. This MUST be the same name returned by the CSI GetPluginName() call for that driver.² +string +¸ +nodeID­"ŸnodeID of the node from the driver point of view. This field enables Kubernetes to communicate with storage systems that do not share the same nomenclature for nodes. For example, Kubernetes may refer to a given node as "node1", but the storage system may refer to the same node as "nodeA". When Kubernetes issues a command to the storage system to attach a volume to a specific node, it can use this field to refer to the node name using the ID that the storage system will understand, e.g. "nodeA" instead of "node1". This field is required.² +string + + topologyKeys±"”topologyKeys is the list of keys supported by the driver. When a driver is initialized on a cluster, it provides a set of topology keys that it understands (e.g. "company.com/zone", "company.com/region"). When a driver is initialized on a node, it provides the same topology keys along with values. Kubelet will expose these topology keys as labels on its own node object. When Kubernetes does topology aware provisioning, it can use this list to determine which labels it should retrieve from the node object and pass back to the driver. It is possible for different nodes to use different topology keys. This can be empty if driver does not support topology.² +arrayº + ² +string +ð +!io.k8s.api.core.v1.ClientIPConfigÊ"QClientIPConfig represents the configurations of Client IP based session affinity.² +objectÊè +å +timeoutSecondsÒint32"¼timeoutSeconds specifies the seconds of ClientIP type session sticky time. The value must be >0 && <=86400(for 1 day) if ServiceAffinity == "ClientIP". Default value is 10800(for 3 hours).² +integer +â + io.k8s.api.core.v1.NamespaceList½ "&NamespaceList is a list of Namespaces.šitems² +objectʦ +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +string +Ô +itemsÊ"ŒItems is the list of Namespace objects in the list. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/² +arrayº. +, +*#/definitions/io.k8s.api.core.v1.Namespace +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +string +Ï +metadata +;#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"‚Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kindsúU +x-kubernetes-group-version-kind20- group: "" + kind: NamespaceList + version: v1 + +… +io.k8s.api.core.v1.Serviceæ "çService is a named abstraction of software service (for example, mysql) consisting of local port (for example 3306) that the proxy listens on, and the selector that determines which pods will answer requests sent through the proxy.² +objectÊ› + +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +string +Ò +metadataÅ +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"ƒStandard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata +Å +spec¼ +,#/definitions/io.k8s.api.core.v1.ServiceSpec"‹Spec defines the behavior of a service. https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status +þ +statusó +.#/definitions/io.k8s.api.core.v1.ServiceStatus"ÀMost recently observed status of the service. Populated by the system. Read-only. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +stringúO +x-kubernetes-group-version-kind,*- group: "" + kind: Service + version: v1 + +à +%io.k8s.api.discovery.v1.EndpointHints¶"KEndpointHints provides hints describing how an endpoint should be consumed.² +objectÊÚ +× +forZonesÊ"dforZones indicates the zone(s) this endpoint should be consumed by to enable topology aware routing.² +arrayº1 +/ +-#/definitions/io.k8s.api.discovery.v1.ForZoneú# +x-kubernetes-list-type atomic + +Ì +\io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1beta1.CustomResourceDefinitionStatusë"RCustomResourceDefinitionStatus indicates the state of the CustomResourceDefinition² +objectʈ +ù + acceptedNamesç +i#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1beta1.CustomResourceDefinitionNames"zacceptedNames are the names that are actually being used to serve discovery. They may be different than the names in spec. +ª + +conditions›"Nconditions indicate state for particular aspects of a CustomResourceDefinition² +arrayºq +o +m#/definitions/io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1beta1.CustomResourceDefinitionConditionú +x-kubernetes-list-typemap +ú' +x-kubernetes-list-map-keys - type + +Ü +storedVersionsÉ"¬storedVersions lists all versions of CustomResources that were ever persisted. Tracking these versions allows a migration path for stored versions in etcd. The field is mutable so a migration controller can finish a migration to another version (ensuring no old objects are left in storage), and then remove the rest of the versions from this list. Versions may not be removed from `spec.versions` while they exist in this list.² +arrayº + ² +string +Ù +io.k8s.api.core.v1.HTTPHeader·">HTTPHeader describes a custom header to be used in HTTP probesšnamešvalue² +objectÊZ +* +name""The header field name² +string +, +value#"The header field value² +string + +"io.k8s.api.core.v1.SecurityContextè"ÜSecurityContext holds security configuration that will be applied to a container. Some fields are present in both SecurityContext and PodSecurityContext. When both are set, the values in SecurityContext take precedence.² +objectÊú +° + runAsUser¢int64"ŒThe UID to run the entrypoint of the container process. Defaults to user specified in image metadata if unspecified. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.² +integer +ô +seLinuxOptionsá +/#/definitions/io.k8s.api.core.v1.SELinuxOptions"­The SELinux context to be applied to the container. If unspecified, the container runtime will allocate a random SELinux context for each container. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence. +ç +seccompProfileÔ +/#/definitions/io.k8s.api.core.v1.SeccompProfile" The seccomp options to use by this container. If seccomp options are provided at both the pod & container level, the container options override the pod options. +Ä +windowsOptions± +>#/definitions/io.k8s.api.core.v1.WindowsSecurityContextOptions"îThe Windows specific settings applied to all containers. If unspecified, the options from the PodSecurityContext will be used. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence. +Æ + capabilitiesµ +-#/definitions/io.k8s.api.core.v1.Capabilities"ƒThe capabilities to add/drop when running containers. Defaults to the default set of capabilities granted by the container runtime. +Š + procMountü"îprocMount denotes the type of proc mount to use for the containers. The default is DefaultProcMount which uses the container runtime defaults for readonly paths and masked paths. This requires the ProcMountType feature flag to be enabled.² +string +½ + runAsNonRoot¬"Indicates that the container must run as a non-root user. If true, the Kubelet will validate the image at runtime to ensure that it does not run as UID 0 (root) and fail to start the container if it does. If unset or false, no such validation will be performed. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.² +boolean +“ + +runAsGroup„int64"îThe GID to run the entrypoint of the container process. Uses runtime default if unset. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.² +integer +Õ +allowPrivilegeEscalation¸"©AllowPrivilegeEscalation controls whether a process can gain more privileges than its parent process. This bool directly controls if the no_new_privs flag will be set on the container process. AllowPrivilegeEscalation is true always when the container is: 1) run as Privileged 2) has CAP_SYS_ADMIN² +boolean +¥ + +privileged–"‡Run container in privileged mode. Processes in privileged containers are essentially equivalent to root on the host. Defaults to false.² +boolean +q +readOnlyRootFilesystemW"IWhether this container has a read-only root filesystem. Default is false.² +boolean +¦ +io.k8s.api.events.v1beta1.Event‚"¾Event is a report of an event somewhere in the cluster. It generally denotes some state change in the system. Events have a limited retention time and triggers and messages may evolve with time. Event consumers should not rely on the timing of an event with a given Reason reflecting a consistent underlying trigger, or the continued existence of events with that Reason. Events should be treated as informative, best-effort, supplemental data.š eventTime² +objectÊÆ +¶ + regarding¨ +0#/definitions/io.k8s.api.core.v1.ObjectReference"óregarding contains the object this Event is about. In most cases it's an Object reporting controller implements, e.g. ReplicaSetController implements ReplicaSets and this event is emitted because it acts on some changes in a ReplicaSet object. + +reportingInstance¬"žreportingInstance is the ID of the controller instance, e.g. `kubelet-xyzf`. This field cannot be empty for new Events and it can have at most 128 characters.² +string +Ÿ +series” +3#/definitions/io.k8s.api.events.v1beta1.EventSeries"]series is data about the Event series this event represents or nil if it's a singleton Event. +† +type~"qtype is the type of this event (Normal, Warning), new types could be added in the future. It is machine-readable.² +string +| +reasonr"ereason is why the action was taken. It is human-readable. This field can have at most 128 characters.² +string +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +string +¹ +reportingController¡"“reportingController is the name of the controller that emitted this Event, e.g. `kubernetes.io/kubelet`. This field cannot be empty for new Events.² +string +¦ +deprecatedSource‘ +,#/definitions/io.k8s.api.core.v1.EventSource"adeprecatedSource is the deprecated field assuring backward compatibility with core.v1 Event type. +Á +deprecatedFirstTimestamp¤ +7#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"ideprecatedFirstTimestamp is the deprecated field assuring backward compatibility with core.v1 Event type. +— + eventTime‰ +<#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.MicroTime"IeventTime is the time when this Event was first observed. It is required. +Ò +metadataÅ +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"ƒStandard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata +½ +note´"¦note is a human-readable description of the status of this operation. Maximal length of the note is 1kB, but libraries should be prepared to handle values up to 64kB.² +string +Ñ +relatedÅ +0#/definitions/io.k8s.api.core.v1.ObjectReference"related is the optional secondary object for more complex actions. E.g. when regarding object triggers a creation or deletion of related object. +¦ +action›"action is what action was taken/failed regarding to the regarding object. It is machine-readable. This field can have at most 128 characters.² +string +ˆ +deprecatedCountuint32"`deprecatedCount is the deprecated field assuring backward compatibility with core.v1 Event type.² +integer +¿ +deprecatedLastTimestamp£ +7#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"hdeprecatedLastTimestamp is the deprecated field assuring backward compatibility with core.v1 Event type. +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +stringú] +x-kubernetes-group-version-kind:8- group: events.k8s.io + kind: Event + version: v1beta1 + +· + io.k8s.api.apps.v1.DaemonSetSpec’ "3DaemonSetSpec is the specification of a daemon set.šselectorštemplate² +objectʸ + +’ +minReadySecondsþint32"èThe minimum number of seconds for which a newly created DaemonSet pod should be ready without any of its container crashing, for it to be considered available. Defaults to 0 (pod will be considered available as soon as it is ready).² +integer +¿ +revisionHistoryLimit¦int32"The number of old history to retain to allow rollback. This is a pointer to distinguish between explicit zero and not specified. Defaults to 10.² +integer +Á +selector´ +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector"ïA label query over pods that are managed by the daemon set. Must match in order to be controlled. It must match the pod template's labels. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#label-selectors +„ +template÷ +0#/definitions/io.k8s.api.core.v1.PodTemplateSpec"ÂAn object that describes the pod that will be created. The DaemonSet will create exactly one copy of this pod on every node that matches the template's node selector (or on every node if no node selector is specified). More info: https://kubernetes.io/docs/concepts/workloads/controllers/replicationcontroller#pod-template +“ +updateStrategy€ +8#/definitions/io.k8s.api.apps.v1.DaemonSetUpdateStrategy"DAn update strategy to replace existing DaemonSet pods with new pods. +Í +io.k8s.api.core.v1.EventList¬"EventList is a list of events.šitems² +objectÊ¡ +P +itemsG"List of events² +arrayº* +( +&#/definitions/io.k8s.api.core.v1.Event +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +string +Ï +metadata +;#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"‚Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +stringúQ +x-kubernetes-group-version-kind.,- group: "" + kind: EventList + version: v1 + +¨ +%io.k8s.api.core.v1.PodDNSConfigOption"9PodDNSConfigOption defines DNS resolver options of a pod.² +objectÊ6 + +name" Required.² +string + +value ² +string +Ò +)io.k8s.api.networking.v1beta1.IngressSpec¤ ";IngressSpec describes the Ingress the user wishes to exist.² +objectÊØ +† +tlsþ"´TLS configuration. Currently the Ingress only supports a single TLS port, 443. If multiple members of this list specify different hosts, they will be multiplexed on the same port according to the hostname specified through the SNI TLS extension, if the ingress controller fulfilling the ingress supports SNI.² +arrayº: +8 +6#/definitions/io.k8s.api.networking.v1beta1.IngressTLS +º +backend® +:#/definitions/io.k8s.api.networking.v1beta1.IngressBackend"ïA default backend capable of servicing requests that don't match any rule. At least one of 'backend' or 'rules' must be specified. This field is optional to allow the loadbalancer controller or defaulting logic to specify a global default. +´ +ingressClassNameŸ"‘IngressClassName is the name of the IngressClass cluster resource. The associated IngressClass defines which controller will implement the resource. This replaces the deprecated `kubernetes.io/ingress.class` annotation. For backwards compatibility, when that annotation is set, it must be given precedence over this field. The controller may emit a warning if the field and annotation have different values. Implementations of this API should ignore Ingresses without a class specified. An IngressClass resource may be marked as default, which can be used to set a default value for this field. For more information, refer to the IngressClass documentation.² +string +Ø +rulesÎ"ƒA list of host rules used to configure the Ingress. If unspecified, or no rule matches, all traffic is sent to the default backend.² +arrayº; +9 +7#/definitions/io.k8s.api.networking.v1beta1.IngressRule +µ + io.k8s.api.node.v1beta1.Overhead"ROverhead structure represents the resource overhead associated with running a pod.² +objectÊ­ +ª +podFixed"NPodFixed represents the fixed resource overhead associated with running a pod.ª? += +;#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity² +object +Ù +%io.k8s.api.core.v1.LoadBalancerStatus¯""1metricName is the name of the metric in question.² +string +Ü +selectorÏ +@#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector"Šselector is the string-encoded form of a standard kubernetes label selector for the given metric When set, it is passed as an additional parameter to the metrics server for more specific metrics scoping When unset, just the metricName will be used to gather metrics. +€ +targetv +H#/definitions/io.k8s.api.autoscaling.v2beta1.CrossVersionObjectReference"*target is the described Kubernetes object. +Œ + targetValue} +;#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity">targetValue is the target value of the metric (as a quantity). +¶ + averageValue¥ +;#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity"faverageValue is the target value of the average of the metric across all relevant pods (as a quantity) +‰ +'io.k8s.api.core.v1.HostPathVolumeSourceÝ"vRepresents a host path mapped into a pod. Host path volumes do not support ownership management or SELinux relabeling.špath² +objectÊÏ +Å +path¼"®Path of the directory on the host. If the path is a symlink, it will follow the link to the real path. More info: https://kubernetes.io/docs/concepts/storage/volumes#hostpath² +string +„ +type|"oType for HostPath Volume Defaults to "" More info: https://kubernetes.io/docs/concepts/storage/volumes#hostpath² +string +² +0io.k8s.api.core.v1.WindowsSecurityContextOptionsý"OWindowsSecurityContextOptions contain Windows-specific options and credentials.² +objectÊ +é +gmsaCredentialSpecÒ"ÄGMSACredentialSpec is where the GMSA admission webhook (https://github.com/kubernetes-sigs/windows-gmsa) inlines the contents of the GMSA credential spec named by the GMSACredentialSpecName field.² +string +m +gmsaCredentialSpecNameS"FGMSACredentialSpecName is the name of the GMSA credential spec to use.² +string +¿ + runAsUserName­"ŸThe UserName in Windows to run the entrypoint of the container process. Defaults to the user specified in image metadata if unspecified. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.² +string +ä +'io.k8s.api.networking.v1.IngressBackend¸"DIngressBackend describes all endpoints for a given service and port.² +objectÊã +± +resource¤ +:#/definitions/io.k8s.api.core.v1.TypedLocalObjectReference"åResource is an ObjectRef to another Kubernetes resource in the namespace of the Ingress object. If resource is specified, a service.Name and service.Port must not be specified. This is a mutually exclusive setting with "Service". +¬ +service  +<#/definitions/io.k8s.api.networking.v1.IngressServiceBackend"`Service references a Service as a Backend. This is a mutually exclusive setting with "Resource". +ì ++io.k8s.api.autoscaling.v2beta1.MetricStatus¼">MetricStatus describes the last-read state of a single metric.štype² +objectÊæ +Ë +containerResourceµ +J#/definitions/io.k8s.api.autoscaling.v2beta1.ContainerResourceMetricStatus"æcontainer resource refers to a resource metric (such as those specified in requests and limits) known to Kubernetes describing a single container in each pod in the current scale target (e.g. CPU or memory). Such metrics are built in to Kubernetes, and have special scaling options on top of those available to normal per-pod metrics using the "pods" source. +ô +externalç +A#/definitions/io.k8s.api.autoscaling.v2beta1.ExternalMetricStatus"¡external refers to a global metric that is not associated with any Kubernetes object. It allows autoscaling based on information coming from components running outside of cluster (for example length of queue in cloud messaging service, or QPS from loadbalancer running outside of cluster). + +object· +?#/definitions/io.k8s.api.autoscaling.v2beta1.ObjectMetricStatus"tobject refers to a metric describing a single kubernetes object (for example, hits-per-second on an Ingress object). +• +podsŒ +=#/definitions/io.k8s.api.autoscaling.v2beta1.PodsMetricStatus"Êpods refers to a metric describing each pod in the current scale target (for example, transactions-processed-per-second). The values will be averaged together before being compared to the target value. +™ +resourceŒ +A#/definitions/io.k8s.api.autoscaling.v2beta1.ResourceMetricStatus"Æresource refers to a resource metric (such as those specified in requests and limits) known to Kubernetes describing each pod in the current scale target (e.g. CPU or memory). Such metrics are built in to Kubernetes, and have special scaling options on top of those available to normal per-pod metrics using the "pods" source. +¥ +typeœ"Žtype is the type of metric source. It will be one of "ContainerResource", "External", "Object", "Pods" or "Resource", each corresponds to a matching field in the object. Note: "ContainerResource" type is available on when the feature-gate HPAContainerMetrics is enabled² +string +Æ +%io.k8s.api.coordination.v1beta1.Leaseœ "Lease defines a lease concept.² +objectʇ +Ï +specÆ +7#/definitions/io.k8s.api.coordination.v1beta1.LeaseSpec"ŠSpecification of the Lease. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +string +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +string +µ +metadata¨ +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"gMore info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadataúc +x-kubernetes-group-version-kind@>- group: coordination.k8s.io + kind: Lease + version: v1beta1 + +¼ +)io.k8s.api.coordination.v1beta1.LeaseSpecŽ"(LeaseSpec is a specification of a Lease.² +objectÊÕ +‰ + acquireTimez +<#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.MicroTime":acquireTime is a time when the current lease was acquired. +e +holderIdentityS"FholderIdentity contains the identity of the holder of a current lease.² +string +È +leaseDurationSeconds¯int32"™leaseDurationSeconds is a duration that candidates for a lease need to wait to force acquire it. This is measure against time of last observed RenewTime.² +integer +r +leaseTransitions^int32"IleaseTransitions is the number of transitions of a lease between holders.² +integer +  + renewTime’ +<#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.MicroTime"RrenewTime is a time when the current holder of a lease has last updated the lease. +ä + io.k8s.api.core.v1.EndpointsList¿"%EndpointsList is a list of endpoints.šitems² +objectÊ© +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +string +X +itemsO"List of endpoints.² +arrayº. +, +*#/definitions/io.k8s.api.core.v1.Endpoints +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +string +Ï +metadata +;#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"‚Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kindsúU +x-kubernetes-group-version-kind20- group: "" + kind: EndpointsList + version: v1 + + +-io.k8s.api.core.v1.FlexPersistentVolumeSourceÝ"ƒFlexPersistentVolumeSource represents a generic persistent volume resource that is provisioned/attached using an exec based plugin.šdriver² +objectÊ¿ +‚ +readOnlyv"hOptional: Defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts.² +boolean +Î + secretRefÀ +0#/definitions/io.k8s.api.core.v1.SecretReference"‹Optional: SecretRef is reference to the secret object containing sensitive information to pass to the plugin scripts. This may be empty if no secret object is specified. If the secret object contains more than one secret, all secrets are passed to the plugin scripts. +O +driverE"8Driver is the name of the driver to use for this volume.² +string +Ä +fsType¹"«Filesystem type to mount. Must be a filesystem type supported by the host operating system. Ex. "ext4", "xfs", "ntfs". The default filesystem depends on FlexVolume script.² +string +O +optionsD"'Optional: Extra command options if any.ª + ² +string² +object +Ø +)io.k8s.api.rbac.v1.ClusterRoleBindingListª"=ClusterRoleBindingList is a collection of ClusterRoleBindingsšitems² +objectÊÜ +u +itemsl"&Items is a list of ClusterRoleBindings² +arrayº7 +5 +3#/definitions/io.k8s.api.rbac.v1.ClusterRoleBinding +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +string +f +metadataZ +;#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"Standard object's metadata. +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +stringúu +x-kubernetes-group-version-kindRP- group: rbac.authorization.k8s.io + kind: ClusterRoleBindingList + version: v1 + +» +0io.k8s.api.scheduling.v1alpha1.PriorityClassList† "6PriorityClassList is a collection of priority classes.šitems² +objectÊÆ +Ê +metadata½ +;#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"~Standard list metadata More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +string +z +itemsq"$items is the list of PriorityClasses² +arrayº> +< +:#/definitions/io.k8s.api.scheduling.v1alpha1.PriorityClass +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +stringún +x-kubernetes-group-version-kindKI- group: scheduling.k8s.io + kind: PriorityClassList + version: v1alpha1 + +  + +=io.k8s.kube-aggregator.pkg.apis.apiregistration.v1.APIServiceÞ "[APIService represents a server for a particular GroupVersion. Name must be "version.group".² +objectʉ +— +statusŒ +Q#/definitions/io.k8s.kube-aggregator.pkg.apis.apiregistration.v1.APIServiceStatus"7Status contains derived information about an API server +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +string +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +string +K +metadata? +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta +¢ +spec™ +O#/definitions/io.k8s.kube-aggregator.pkg.apis.apiregistration.v1.APIServiceSpec"FSpec contains information for locating and communicating with a serverúf +x-kubernetes-group-version-kindCA- group: apiregistration.k8s.io + kind: APIService + version: v1 + +¦ +io.k8s.api.core.v1.HostAlias…"oHostAlias holds the mapping between IP and hostnames that will be injected as an entry in the pod's hosts file.² +objectÊ… +L + hostnames?"#Hostnames for the above IP address.² +arrayº + ² +string +5 +ip/""IP address of the host file entry.² +string +ô +io.k8s.api.core.v1.NodeØ "iNode is a worker node in Kubernetes. Each node will have a unique identifier in the cache (i.e. in etcd).² +objectÊ + +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +string +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +string +Ò +metadataÅ +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"ƒStandard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata +¿ +spec¶ +)#/definitions/io.k8s.api.core.v1.NodeSpec"ˆSpec defines the behavior of a node. https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status +ø +statusí ++#/definitions/io.k8s.api.core.v1.NodeStatus"½Most recently observed status of the node. Populated by the system. Read-only. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-statusúL +x-kubernetes-group-version-kind)'- group: "" + kind: Node + version: v1 + +» +#io.k8s.api.core.v1.PersistentVolume“ "±PersistentVolume (PV) is a storage resource provisioned by an administrator. It is analogous to a node. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes² +objectÊõ + +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +string +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +string +Ò +metadataÅ +=#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"ƒStandard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata +Š +spec +5#/definitions/io.k8s.api.core.v1.PersistentVolumeSpec"ÇSpec defines a specification of a persistent volume owned by the cluster. Provisioned by an administrator. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#persistent-volumes +“ +statusˆ +7#/definitions/io.k8s.api.core.v1.PersistentVolumeStatus"ÌStatus represents the current information/status for the persistent volume. Populated by the system. Read-only. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#persistent-volumesúX +x-kubernetes-group-version-kind53- group: "" + kind: PersistentVolume + version: v1 + +› + +,io.k8s.api.core.v1.PersistentVolumeClaimListê "CPersistentVolumeClaimList is a list of PersistentVolumeClaim items.šitems² +objectʪ +Ï +metadata +;#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta"‚Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds +¾ + +apiVersion¯"¡APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources² +string +Ø +itemsÎ"„A list of persistent volume claims. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#persistentvolumeclaims² +arrayº: +8 +6#/definitions/io.k8s.api.core.v1.PersistentVolumeClaim +¹ +kind°"¢Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds² +stringúa +x-kubernetes-group-version-kind><- group: "" + kind: PersistentVolumeClaimList + version: v1 + +— +io.k8s.api.core.v1.PodConditionó"DPodCondition contains details for the current condition of this pod.štypešstatus² +objectÊŽ +X +messageM"@Human-readable message indicating details about last transition.² +string +^ +reasonT"GUnique, one-word, CamelCase reason for the condition's last transition.² +string +· +status¬"žStatus is the status of the condition. Can be True, False, Unknown. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#pod-conditions² +string +“ +typeŠ"}Type is the type of the condition. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#pod-conditions² +string +n + lastProbeTime] +7#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time""Last time we probed the condition. +‘ +lastTransitionTime{ +7#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"@Last time the condition transitioned from one status to another. +ê +%io.k8s.api.core.v1.PodSecurityContextÀ"ôPodSecurityContext holds pod-level security attributes and common container settings. Some fields are also present in container.securityContext. Field values of container.securityContext take precedence over field values of PodSecurityContext.² +objectʺ +º + runAsNonRoot©"šIndicates that the container must run as a non-root user. If true, the Kubelet will validate the image at runtime to ensure that it does not run as UID 0 (root) and fail to start the container if it does. If unset or false, no such validation will be performed. May also be set in SecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.² +boolean +À + runAsUser²int64"œThe UID to run the entrypoint of the container process. Defaults to user specified in image metadata if unspecified. May also be set in SecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence for that container.² +integer +… +seLinuxOptionsò +/#/definitions/io.k8s.api.core.v1.SELinuxOptions"¾The SELinux context to be applied to all containers. If unspecified, the container runtime will allocate a random SELinux context for each container. May also be set in SecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence for that container. +~ +seccompProfilel +/#/definitions/io.k8s.api.core.v1.SeccompProfile"9The seccomp options to use by the containers in this pod. +Í +windowsOptionsº +>#/definitions/io.k8s.api.core.v1.WindowsSecurityContextOptions"÷The Windows specific settings applied to all containers. If unspecified, the options within a container's SecurityContext will be used. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence. +° +fsGroupChangePolicy˜"ŠfsGroupChangePolicy defines behavior of changing ownership and permission of the volume before being exposed inside Pod. This field will only apply to volume types which support fsGroup based ownership(and permissions). It will have no effect on ephemeral volume types such as: secret, configmaps and emptydir. Valid values are "OnRootMismatch" and "Always". If not specified, "Always" is used.² +string +£ + +runAsGroup”int64"þThe GID to run the entrypoint of the container process. Uses runtime default if unset. May also be set in SecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence for that container.² +integer +ç +supplementalGroupsÐ"«A list of groups applied to the first process run in each container, in addition to the container's primary GID. If unspecified, no groups will be added to any container.² +arrayº +int64² +integer +Ñ +sysctlsÅ"ŠSysctls hold a list of namespaced sysctls used for the pod. Pods with unsupported sysctls (by the container runtime) might fail to launch.² +arrayº+ +) +'#/definitions/io.k8s.api.core.v1.Sysctl +È +fsGroup¼int64"¦A special supplemental group that applies to all containers in a pod. Some volume types allow the Kubelet to change the ownership of that volume to be owned by the pod: + +1. The owning GID will be the FSGroup 2. The setgid bit is set (new files created in the volume will be owned by FSGroup) 3. The permission bits are OR'd with rw-rw---- + +If unset, the Kubelet will not modify the ownership and permissions of any volume.² +integer +ì +!io.k8s.api.core.v1.SeccompProfileÆ"fSeccompProfile defines a pod/container's seccomp profile settings. Only one profile source may be set.štype² +objectÊÓ +¯ +localhostProfileš"ŒlocalhostProfile indicates a profile defined in a file on the node should be used. The profile must be preconfigured on the node to work. Must be a descending path, relative to the kubelet's configured seccomp profile location. Must only be set if type is "Localhost".² +string +ž +type•"‡type indicates which kind of seccomp profile will be applied. Valid options are: + +Localhost - a profile defined in a file on the node should be used. RuntimeDefault - the container runtime default profile should be used. Unconfined - no profile should be applied.² +stringúr +x-kubernetes-unions[Y- discriminator: type + fields-to-discriminateBy: + localhostProfile: LocalhostProfile + +ã +Bio.k8s.api.certificates.v1beta1.CertificateSigningRequestConditionœštype² +objectʆ +Ò +statusÇ"¹Status of the condition, one of True, False, Unknown. Approved, Denied, and Failed conditions may not be "False" or "Unknown". Defaults to "True". If unset, should be treated as "True".² +string +h +type`"Stype of the condition. Known conditions include "Approved", "Denied", and "Failed".² +string +¶ +lastTransitionTimeŸ +7#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"ãlastTransitionTime is the time the condition last transitioned from one status to another. If unset, when a new condition type is added or an existing condition's status is changed, the server defaults this to the current time. +| +lastUpdateTimej +7#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"/timestamp for the last update to this condition +S +messageH";human readable message with details about the request state² +string +9 +reason/""brief reason for the request state² +string +ä + io.k8s.api.core.v1.HTTPGetAction¿"=HTTPGetAction describes an action based on HTTP Get requests.šport² +objectÊê +‘ + httpHeaders"CCustom headers to set in the request. HTTP allows repeated headers.² +arrayº/ +- ++#/definitions/io.k8s.api.core.v1.HTTPHeader +7 +path/""Path to access on the HTTP server.² +string +Ç +port¾ +=#/definitions/io.k8s.apimachinery.pkg.util.intstr.IntOrString"}Name or number of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME. +R +schemeH";Scheme to use for connecting to the host. Defaults to HTTP.² +string +} +hostu"hHost name to connect to, defaults to the pod IP. You probably want to set "Host" in httpHeaders instead.² +string + +#io.k8s.api.storage.v1.CSINodeDriverå "]CSINodeDriver holds information about the specification of one CSI driver installed on a nodešnamešnodeID² +objectÊç +· + allocatable§ +7#/definitions/io.k8s.api.storage.v1.VolumeNodeResources"lallocatable represents the volume resources of a node that are available for scheduling. This field is beta. +ª +name¡"“This is the name of the CSI driver that this object refers to. This MUST be the same name returned by the CSI GetPluginName() call for that driver.² +string +¸ +nodeID­"ŸnodeID of the node from the driver point of view. This field enables Kubernetes to communicate with storage systems that do not share the same nomenclature for nodes. For example, Kubernetes may refer to a given node as "node1", but the storage system may refer to the same node as "nodeA". When Kubernetes issues a command to the storage system to attach a volume to a specific node, it can use this field to refer to the node name using the ID that the storage system will understand, e.g. "nodeA" instead of "node1". This field is required.² +string + + topologyKeys±"”topologyKeys is the list of keys supported by the driver. When a driver is initialized on a cluster, it provides a set of topology keys that it understands (e.g. "company.com/zone", "company.com/region"). When a driver is initialized on a node, it provides the same topology keys along with values. Kubelet will expose these topology keys as labels on its own node object. When Kubernetes does topology aware provisioning, it can use this list to determine which labels it should retrieve from the node object and pass back to the driver. It is possible for different nodes to use different topology keys. This can be empty if driver does not support topology.² +arrayº + ² +string +à +=io.k8s.api.apiserverinternal.v1alpha1.StorageVersionConditionž"=Describes the state of the storageVersion at a certain point.štypešstatusšreason² +objectÊ· +F +reason<"/The reason for the condition's last transition.² +string +L +statusB"5Status of the condition, one of True, False, Unknown.² +string ++ +type#"Type of the condition.² +string +‘ +lastTransitionTime{ +7#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time"@Last time the condition transitioned from one status to another. +Y +messageN"AA human readable message indicating details about the transition.² +string +‚ +observedGenerationlint64"WIf set, this represents the .metadata.generation that the condition was set based upon.² +integer +Ó +3io.k8s.api.authentication.v1beta1.TokenReviewStatus›"DTokenReviewStatus is the result of the token authentication request.² +objectÊÆ +’ + audiences„"çAudiences are audience identifiers chosen by the authenticator that are compatible with both the TokenReview and token. An identifier is any identifier in the intersection of the TokenReviewSpec audiences and the token's audiences. A client of the TokenReview API that sets the spec.audiences field should validate that a compatible audience identifier is returned in the status.audiences field to ensure that the TokenReview server is audience aware. If a TokenReview returns an empty status.audience field where status.authenticated is "true", the token is valid against the audience of the Kubernetes API server.² +arrayº + ² +string +g + authenticatedV"HAuthenticated indicates that the token was associated with a known user.² +boolean +H +error?"2Error indicates that the token couldn't be checked² +string +| +usert +8#/definitions/io.k8s.api.authentication.v1beta1.UserInfo"8User is the UserInfo associated with the provided token. +Ç +#io.k8s.api.autoscaling.v1.ScaleSpecŸ":ScaleSpec describes the attributes of a scale subresource.² +objectÊU +S +replicasGint32"2desired number of instances for the scaled object.² +integer +ö6 +%io.k8s.api.core.v1.EphemeralContainerÌ6"ƒAn EphemeralContainer is a container that may be added temporarily to an existing pod for user-initiated activities such as debugging. Ephemeral containers have no resource or scheduling guarantees, and they will not be restarted when they exit or when a pod is removed or restarted. If an ephemeral container causes a pod to exceed its resource allocation, the pod may be evicted. Ephemeral containers may not be added by directly updating the pod spec. They must be added via the pod's ephemeralcontainers subresource, and they will appear in the pod spec once added. This is an alpha feature enabled by the EphemeralContainers feature flag.šname² +objectÊ°1 + +securityContextl +0#/definitions/io.k8s.api.core.v1.SecurityContext"8SecurityContext is not allowed for ephemeral containers. +j + startupProbeZ +&#/definitions/io.k8s.api.core.v1.Probe"0Probes are not allowed for ephemeral containers. +Å +terminationMessagePathª"œOptional: Path at which the file to which the container's termination message will be written is mounted into the container's filesystem. Message written is intended to be brief final status, such as an assertion failure message. Will be truncated by the node if greater than 4096 bytes. The total message length across all containers will be limited to 12kb. Defaults to /dev/termination-log. Cannot be updated.² +string + +ttyz"lWhether this container should allocate a TTY for itself, also requires 'stdin' to be true. Default is false.² +boolean +m + lifecycle` +*#/definitions/io.k8s.api.core.v1.Lifecycle"2Lifecycle is not allowed for ephemeral containers. +l +readinessProbeZ +&#/definitions/io.k8s.api.core.v1.Probe"0Probes are not allowed for ephemeral containers. +i +image`"SDocker image name. More info: https://kubernetes.io/docs/concepts/containers/images² +string +© +name "’Name of the ephemeral container specified as a DNS_LABEL. This name must be unique among all containers, init containers and ephemeral containers.² +string +y +portsp"/Ports are not allowed for ephemeral containers.² +arrayº2 +0 +.#/definitions/io.k8s.api.core.v1.ContainerPort +ó + volumeDevicesá"GvolumeDevices is the list of block devices to be used by the container.² +arrayº1 +/ +-#/definitions/io.k8s.api.core.v1.VolumeDeviceú- +x-kubernetes-patch-merge-key  devicePath +ú' +x-kubernetes-patch-strategymerge + +û +commandï"ÒEntrypoint array. Not executed within a shell. The docker image's ENTRYPOINT is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container's environment. If a variable cannot be resolved, the reference in the input string will be unchanged. The $(VAR_NAME) syntax can be escaped with a double $$, ie: $$(VAR_NAME). Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell² +arrayº + ² +string +ß +env×"IList of environment variables to set in the container. Cannot be updated.² +arrayº+ +) +'#/definitions/io.k8s.api.core.v1.EnvVarú' +x-kubernetes-patch-merge-keyname +ú' +x-kubernetes-patch-strategymerge + +Ï +stdinÅ"¶Whether this container should allocate a buffer for stdin in the container runtime. If this is not set, reads from stdin in the container will always result in EOF. Default is false.² +boolean +× + stdinOnceÉ"ºWhether the container runtime should close the stdin channel after it has been opened by a single attach. When stdin is true the stdin stream will remain open across multiple attach sessions. If stdinOnce is set to true, stdin is opened on container start, is empty until the first client attaches to stdin, and then remains open and accepts data until the client disconnects, at which time stdin is closed and remains closed until the container is restarted. If this flag is false, a container processes that reads from stdin will never receive an EOF. Default is false² +boolean +‡ +imagePullPolicyó"åImage pull policy. One of Always, Never, IfNotPresent. Defaults to Always if :latest tag is specified, or IfNotPresent otherwise. Cannot be updated. More info: https://kubernetes.io/docs/concepts/containers/images#updating-images² +string +Á + resources³ +5#/definitions/io.k8s.api.core.v1.ResourceRequirements"zResources are not allowed for ephemeral containers. Ephemeral containers use spare resources already allocated to the pod. +k + livenessProbeZ +&#/definitions/io.k8s.api.core.v1.Probe"0Probes are not allowed for ephemeral containers. +í +targetContainerNameÕ"ÇIf set, the name of the container from PodSpec that this ephemeral container targets. The ephemeral container will be run in the namespaces (IPC, PID, etc) of this container. If not set then the ephemeral container is run in whatever namespaces are shared for the pod. Note that the container runtime must support this feature.² +string +æ +terminationMessagePolicyÉ"»Indicate how the termination message should be populated. File will use the contents of terminationMessagePath to populate the container status message on both success and failure. FallbackToLogsOnError will use the last chunk of container log output if the termination message file is empty and the container exited with an error. The log output is limited to 2048 bytes or 80 lines, whichever is smaller. Defaults to File. Cannot be updated.² +string +ñ + volumeMountsà"HPod volumes to mount into the container's filesystem. Cannot be updated.² +arrayº0 +. +,#/definitions/io.k8s.api.core.v1.VolumeMountú, +x-kubernetes-patch-merge-key  +mountPath +ú' +x-kubernetes-patch-strategymerge + +À + +workingDir±"£Container's working directory. If not specified, the container runtime's default will be used, which might be configured in the container image. Cannot be updated.² +string +ß +argsÖ"¹Arguments to the entrypoint. The docker image's CMD is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container's environment. If a variable cannot be resolved, the reference in the input string will be unchanged. The $(VAR_NAME) syntax can be escaped with a double $$, ie: $$(VAR_NAME). Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell² +arrayº + ² +string +Ö +envFromÊ"ˆList of sources to populate environment variables in the container. The keys defined within a source must be a C_IDENTIFIER. All invalid keys will be reported as an event when the container is starting. When a key exists in multiple sources, the value associated with the last source will take precedence. Values defined by an Env with a duplicate key will take precedence. Cannot be updated.² +arrayº2 +0 +.#/definitions/io.k8s.api.core.v1.EnvFromSourceb + + BearerTokenjO +M + BearerToken>< +apiKey authorizationheader"Bearer Token authentication \ No newline at end of file diff --git a/go/internal/forked/kyaml/openapi/kustomizationapi/swagger.go b/go/internal/forked/kyaml/openapi/kustomizationapi/swagger.go new file mode 100644 index 000000000..4f4ec3e4a --- /dev/null +++ b/go/internal/forked/kyaml/openapi/kustomizationapi/swagger.go @@ -0,0 +1,249 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +// Code generated for package kustomizationapi by go-bindata DO NOT EDIT. (@generated) +// sources: +// kustomizationapi/swagger.json +package kustomizationapi + +import ( + "bytes" + "compress/gzip" + "fmt" + "io" + "io/ioutil" + "os" + "path/filepath" + "strings" + "time" +) + +func bindataRead(data []byte, name string) ([]byte, error) { + gz, err := gzip.NewReader(bytes.NewBuffer(data)) + if err != nil { + return nil, fmt.Errorf("Read %q: %v", name, err) + } + + var buf bytes.Buffer + _, err = io.Copy(&buf, gz) + clErr := gz.Close() + + if err != nil { + return nil, fmt.Errorf("Read %q: %v", name, err) + } + if clErr != nil { + return nil, err + } + + return buf.Bytes(), nil +} + +type asset struct { + bytes []byte + info os.FileInfo +} + +type bindataFileInfo struct { + name string + size int64 + mode os.FileMode + modTime time.Time +} + +// Name return file name +func (fi bindataFileInfo) Name() string { + return fi.name +} + +// Size return file size +func (fi bindataFileInfo) Size() int64 { + return fi.size +} + +// Mode return file mode +func (fi bindataFileInfo) Mode() os.FileMode { + return fi.mode +} + +// Mode return file modify time +func (fi bindataFileInfo) ModTime() time.Time { + return fi.modTime +} + +// IsDir return file whether a directory +func (fi bindataFileInfo) IsDir() bool { + return fi.mode&os.ModeDir != 0 +} + +// Sys return file is sys mode +func (fi bindataFileInfo) Sys() interface{} { + return nil +} + +var _kustomizationapiSwaggerJson = []byte("\x1f\x8b\x08\x00\x00\x00\x00\x00\x00\xff\xe4\x56\xc1\x6e\xdb\x30\x0c\xbd\xe7\x2b\x04\x6d\xc7\xd8\x45\x6e\x43\x6e\xc3\x0e\x3b\x14\x05\x0a\x74\xb7\xa1\x07\xc6\xa1\x5d\xce\x8e\xa4\x51\xb4\xb1\x6c\xc8\xbf\x0f\xd6\x62\xd7\x4a\xec\x75\x0b\x1a\xac\x4b\x0f\x06\x0c\x99\x7c\x4f\xe4\x7b\x24\xfc\x63\xa6\x94\x5e\x63\x4e\x86\x84\xac\xf1\x7a\xa9\xda\x23\xa5\x34\xd9\xb4\x7c\xe7\x53\x70\x94\x82\x73\x3e\x6d\x16\xe9\x07\x6b\x72\x2a\x6e\xc0\xbd\xe7\xe2\x31\x52\x29\xed\xd8\x3a\x64\x21\x1c\x9e\x2a\xa5\x3f\xa2\x41\x06\xb1\x7c\x90\x10\x3e\xbe\x65\xcc\xf5\x52\xe9\x37\x57\x03\xfe\xab\x11\xda\x18\xa5\x87\xd8\xed\xdf\x76\xf3\xee\x1a\xb0\x5e\x07\x14\xa8\x6e\x87\x17\xca\xa1\xf2\xd8\x07\xc9\xd6\x61\x4b\x6b\x57\x5f\x30\x13\xdd\x9f\x7f\x4b\xca\x7a\x85\x6c\x50\xd0\x27\x05\xdb\xda\x25\x0d\xb2\x27\x6b\x92\x92\xcc\x5a\x2f\xd5\xe7\x9e\x3a\xaa\x23\xc4\xb6\x88\x65\xed\xc5\x6e\xe8\x3b\xa6\x59\x68\x54\x28\x84\x6c\x4f\x11\xa2\xf7\x58\x3a\xee\x65\x14\xb2\xa7\x6d\xa3\x9a\xc5\x0a\x05\x16\xc7\x45\xdf\xcf\x06\xa5\x8f\x69\x75\x87\x19\xa3\xbc\x0c\xa1\x1e\xab\xeb\xba\x1f\xe1\x77\x8a\x78\x61\x32\xc5\xa5\x08\x3c\x10\xe0\xf9\xd5\x9d\xd2\x6b\x52\x60\x03\x1b\xf4\x0e\xb2\x3f\x6f\xfe\x3c\x4e\x3e\x25\x6f\x85\x0f\xd0\x90\xe5\x53\x72\xaf\x9b\x5b\x20\xbe\xb3\x35\x67\x78\xba\x23\x63\x94\x0b\x71\x56\x2c\xfe\xf3\x9b\xeb\x7a\x7f\x19\x90\x5f\x50\xbd\xb9\x18\xbf\xd6\xc4\x18\x17\xa4\x3f\x6d\x1d\xde\xa0\x40\xc7\x74\x3f\x7f\xca\x8c\x59\xb7\xfb\xfa\x4a\x0e\x05\x26\xc1\xcd\xa1\xea\x7f\xa3\x7b\xbc\x5d\x07\x20\xbb\xf9\x98\x11\x81\x19\xb6\x71\x27\x23\x4d\x1d\x48\xf6\x90\x6c\x90\x0b\x4c\x4a\xdc\xb6\x29\x61\x26\x9e\xca\xf0\xc2\x20\x58\x84\x84\x90\x3d\xee\x75\x1f\x56\xc5\xd9\x9a\x31\xd8\x44\x2f\xb2\x13\xff\xf5\x30\xc6\xc3\x72\x86\x61\x9c\xd8\x83\x93\xc3\x55\x91\x20\x43\x75\xb4\x33\x27\x5c\x34\xb5\x8b\x7f\x6f\x90\x51\x1b\xe7\x54\x1d\xaf\xea\xf3\xd3\xa2\x69\xfe\x0d\xeb\xeb\xf8\x8f\x89\x0d\x78\xaa\xc1\x67\xed\xb3\xfb\x19\x00\x00\xff\xff\x2f\x39\x79\xd0\x6e\x0c\x00\x00") + +func kustomizationapiSwaggerJsonBytes() ([]byte, error) { + return bindataRead( + _kustomizationapiSwaggerJson, + "kustomizationapi/swagger.json", + ) +} + +func kustomizationapiSwaggerJson() (*asset, error) { + bytes, err := kustomizationapiSwaggerJsonBytes() + if err != nil { + return nil, err + } + + info := bindataFileInfo{name: "kustomizationapi/swagger.json", size: 3182, mode: os.FileMode(420), modTime: time.Unix(1615228558, 0)} + a := &asset{bytes: bytes, info: info} + return a, nil +} + +// Asset loads and returns the asset for the given name. +// It returns an error if the asset could not be found or +// could not be loaded. +func Asset(name string) ([]byte, error) { + cannonicalName := strings.Replace(name, "\\", "/", -1) + if f, ok := _bindata[cannonicalName]; ok { + a, err := f() + if err != nil { + return nil, fmt.Errorf("Asset %s can't read by error: %v", name, err) + } + return a.bytes, nil + } + return nil, fmt.Errorf("Asset %s not found", name) +} + +// MustAsset is like Asset but panics when Asset would return an error. +// It simplifies safe initialization of global variables. +func MustAsset(name string) []byte { + a, err := Asset(name) + if err != nil { + panic("asset: Asset(" + name + "): " + err.Error()) + } + + return a +} + +// AssetInfo loads and returns the asset info for the given name. +// It returns an error if the asset could not be found or +// could not be loaded. +func AssetInfo(name string) (os.FileInfo, error) { + cannonicalName := strings.Replace(name, "\\", "/", -1) + if f, ok := _bindata[cannonicalName]; ok { + a, err := f() + if err != nil { + return nil, fmt.Errorf("AssetInfo %s can't read by error: %v", name, err) + } + return a.info, nil + } + return nil, fmt.Errorf("AssetInfo %s not found", name) +} + +// AssetNames returns the names of the assets. +func AssetNames() []string { + names := make([]string, 0, len(_bindata)) + for name := range _bindata { + names = append(names, name) + } + return names +} + +// _bindata is a table, holding each asset generator, mapped to its name. +var _bindata = map[string]func() (*asset, error){ + "kustomizationapi/swagger.json": kustomizationapiSwaggerJson, +} + +// AssetDir returns the file names below a certain +// directory embedded in the file by go-bindata. +// For example if you run go-bindata on data/... and data contains the +// following hierarchy: +// data/ +// foo.txt +// img/ +// a.png +// b.png +// then AssetDir("data") would return []string{"foo.txt", "img"} +// AssetDir("data/img") would return []string{"a.png", "b.png"} +// AssetDir("foo.txt") and AssetDir("notexist") would return an error +// AssetDir("") will return []string{"data"}. +func AssetDir(name string) ([]string, error) { + node := _bintree + if len(name) != 0 { + cannonicalName := strings.Replace(name, "\\", "/", -1) + pathList := strings.Split(cannonicalName, "/") + for _, p := range pathList { + node = node.Children[p] + if node == nil { + return nil, fmt.Errorf("Asset %s not found", name) + } + } + } + if node.Func != nil { + return nil, fmt.Errorf("Asset %s not found", name) + } + rv := make([]string, 0, len(node.Children)) + for childName := range node.Children { + rv = append(rv, childName) + } + return rv, nil +} + +type bintree struct { + Func func() (*asset, error) + Children map[string]*bintree +} + +var _bintree = &bintree{nil, map[string]*bintree{ + "kustomizationapi": &bintree{nil, map[string]*bintree{ + "swagger.json": &bintree{kustomizationapiSwaggerJson, map[string]*bintree{}}, + }}, +}} + +// RestoreAsset restores an asset under the given directory +func RestoreAsset(dir, name string) error { + data, err := Asset(name) + if err != nil { + return err + } + info, err := AssetInfo(name) + if err != nil { + return err + } + err = os.MkdirAll(_filePath(dir, filepath.Dir(name)), os.FileMode(0755)) + if err != nil { + return err + } + err = ioutil.WriteFile(_filePath(dir, name), data, info.Mode()) + if err != nil { + return err + } + err = os.Chtimes(_filePath(dir, name), info.ModTime(), info.ModTime()) + if err != nil { + return err + } + return nil +} + +// RestoreAssets restores an asset under the given directory recursively +func RestoreAssets(dir, name string) error { + children, err := AssetDir(name) + // File + if err != nil { + return RestoreAsset(dir, name) + } + // Dir + for _, child := range children { + err = RestoreAssets(dir, filepath.Join(name, child)) + if err != nil { + return err + } + } + return nil +} + +func _filePath(dir, name string) string { + cannonicalName := strings.Replace(name, "\\", "/", -1) + return filepath.Join(append([]string{dir}, strings.Split(cannonicalName, "/")...)...) +} diff --git a/go/internal/forked/kyaml/openapi/kustomizationapi/swagger.json b/go/internal/forked/kyaml/openapi/kustomizationapi/swagger.json new file mode 100644 index 000000000..7441a5ee6 --- /dev/null +++ b/go/internal/forked/kyaml/openapi/kustomizationapi/swagger.json @@ -0,0 +1,130 @@ +{ + "definitions": { + "io.k8s.api.apps.v1.ConfigMapArgs": { + "properties": { + "GeneratorArgs": { + "$ref": "#/definitions/io.k8s.api.apps.v1.GeneratorArgs" + } + }, + "additionalProperties": false, + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "kustomize.config.k8s.io", + "kind": "ConfigMapArgs", + "version": "v1beta1" + } + ] + }, + "io.k8s.api.apps.v1.SecretArgs": { + "properties": { + "GeneratorArgs": { + "$ref": "#/definitions/io.k8s.api.apps.v1.GeneratorArgs" + }, + "type": { + "type": "string" + } + }, + "additionalProperties": false, + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "kustomize.config.k8s.io", + "kind": "SecretArgs", + "version": "v1beta1" + } + ] + }, + "io.k8s.api.apps.v1.GeneratorArgs": { + "properties": { + "namespace": { + "type": "string" + }, + "name": { + "type": "string" + }, + "behavior": { + "type": "string" + }, + "KvPairSources": { + "$ref": "#/definitions/io.k8s.api.apps.v1.KvPairSources" + } + }, + "additionalProperties": false, + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "kustomize.config.k8s.io", + "kind": "GeneratorArgs", + "version": "v1beta1" + } + ] + }, + "io.k8s.api.apps.v1.Kustomization": { + "required": [ + "TypeMeta" + ], + "properties": { + "configMapGenerator": { + "items": { + "$ref": "#/definitions/io.k8s.api.apps.v1.ConfigMapArgs" + }, + "type": "array", + "x-kubernetes-patch-merge-key": "name", + "x-kubernetes-patch-strategy": "merge" + }, + "secretGenerator": { + "items": { + "$ref": "#/definitions/io.k8s.api.apps.v1.SecretArgs" + }, + "type": "array", + "x-kubernetes-patch-merge-key": "name", + "x-kubernetes-patch-strategy": "merge" + } + }, + "additionalProperties": false, + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "kustomize.config.k8s.io", + "kind": "Kustomization", + "version": "v1beta1" + } + ] + }, + "io.k8s.api.apps.v1.KvPairSources": { + "properties": { + "literals": { + "items": { + "type": "string" + }, + "type": "array" + }, + "files": { + "items": { + "type": "string" + }, + "type": "array" + }, + "envs": { + "items": { + "type": "string" + }, + "type": "array" + }, + "env": { + "type": "string" + } + }, + "additionalProperties": false, + "type": "object", + "x-kubernetes-group-version-kind": [ + { + "group": "kustomize.config.k8s.io", + "kind": "KvPairSources", + "version": "v1beta1" + } + ] + } + } +} \ No newline at end of file diff --git a/go/internal/forked/kyaml/openapi/openapi.go b/go/internal/forked/kyaml/openapi/openapi.go new file mode 100644 index 000000000..5efc00aa9 --- /dev/null +++ b/go/internal/forked/kyaml/openapi/openapi.go @@ -0,0 +1,726 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package openapi + +import ( + "encoding/json" + "fmt" + "io/ioutil" + "path/filepath" + "reflect" + "strings" + + "k8s.io/kube-openapi/pkg/validation/spec" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/errors" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/openapi/kubernetesapi" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/openapi/kustomizationapi" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" + k8syaml "sigs.k8s.io/yaml" +) + +// globalSchema contains global state information about the openapi +var globalSchema openapiData + +// kubernetesOpenAPIVersion specifies which builtin kubernetes schema to use +var kubernetesOpenAPIVersion string + +// customSchemaFile stores the custom OpenApi schema if it is provided +var customSchema []byte + +// openapiData contains the parsed openapi state. this is in a struct rather than +// a list of vars so that it can be reset from tests. +type openapiData struct { + // schema holds the OpenAPI schema data + schema spec.Schema + + // schemaForResourceType is a map of Resource types to their schemas + schemaByResourceType map[yaml.TypeMeta]*spec.Schema + + // namespaceabilityByResourceType stores whether a given Resource type + // is namespaceable or not + namespaceabilityByResourceType map[yaml.TypeMeta]bool + + // noUseBuiltInSchema stores whether we want to prevent using the built-n + // Kubernetes schema as part of the global schema + noUseBuiltInSchema bool + + // schemaInit stores whether or not we've parsed the schema already, + // so that we only reparse the when necessary (to speed up performance) + schemaInit bool +} + +// precomputedIsNamespaceScoped precomputes IsNamespaceScoped for known types. This avoids Schema creation, +// which is expensive +// The test output from TestIsNamespaceScopedPrecompute shows the expected map in go syntax,and can be copy and pasted +// from the failure if it changes. +var precomputedIsNamespaceScoped = map[yaml.TypeMeta]bool{ + {APIVersion: "admissionregistration.k8s.io/v1", Kind: "MutatingWebhookConfiguration"}: false, + {APIVersion: "admissionregistration.k8s.io/v1", Kind: "ValidatingWebhookConfiguration"}: false, + {APIVersion: "admissionregistration.k8s.io/v1beta1", Kind: "MutatingWebhookConfiguration"}: false, + {APIVersion: "admissionregistration.k8s.io/v1beta1", Kind: "ValidatingWebhookConfiguration"}: false, + {APIVersion: "apiextensions.k8s.io/v1", Kind: "CustomResourceDefinition"}: false, + {APIVersion: "apiextensions.k8s.io/v1beta1", Kind: "CustomResourceDefinition"}: false, + {APIVersion: "apiregistration.k8s.io/v1", Kind: "APIService"}: false, + {APIVersion: "apiregistration.k8s.io/v1beta1", Kind: "APIService"}: false, + {APIVersion: "apps/v1", Kind: "ControllerRevision"}: true, + {APIVersion: "apps/v1", Kind: "DaemonSet"}: true, + {APIVersion: "apps/v1", Kind: "Deployment"}: true, + {APIVersion: "apps/v1", Kind: "ReplicaSet"}: true, + {APIVersion: "apps/v1", Kind: "StatefulSet"}: true, + {APIVersion: "autoscaling/v1", Kind: "HorizontalPodAutoscaler"}: true, + {APIVersion: "autoscaling/v1", Kind: "Scale"}: true, + {APIVersion: "autoscaling/v2beta1", Kind: "HorizontalPodAutoscaler"}: true, + {APIVersion: "autoscaling/v2beta2", Kind: "HorizontalPodAutoscaler"}: true, + {APIVersion: "batch/v1", Kind: "CronJob"}: true, + {APIVersion: "batch/v1", Kind: "Job"}: true, + {APIVersion: "batch/v1beta1", Kind: "CronJob"}: true, + {APIVersion: "certificates.k8s.io/v1", Kind: "CertificateSigningRequest"}: false, + {APIVersion: "certificates.k8s.io/v1beta1", Kind: "CertificateSigningRequest"}: false, + {APIVersion: "coordination.k8s.io/v1", Kind: "Lease"}: true, + {APIVersion: "coordination.k8s.io/v1beta1", Kind: "Lease"}: true, + {APIVersion: "discovery.k8s.io/v1", Kind: "EndpointSlice"}: true, + {APIVersion: "discovery.k8s.io/v1beta1", Kind: "EndpointSlice"}: true, + {APIVersion: "events.k8s.io/v1", Kind: "Event"}: true, + {APIVersion: "events.k8s.io/v1beta1", Kind: "Event"}: true, + {APIVersion: "extensions/v1beta1", Kind: "Ingress"}: true, + {APIVersion: "flowcontrol.apiserver.k8s.io/v1beta1", Kind: "FlowSchema"}: false, + {APIVersion: "flowcontrol.apiserver.k8s.io/v1beta1", Kind: "PriorityLevelConfiguration"}: false, + {APIVersion: "networking.k8s.io/v1", Kind: "Ingress"}: true, + {APIVersion: "networking.k8s.io/v1", Kind: "IngressClass"}: false, + {APIVersion: "networking.k8s.io/v1", Kind: "NetworkPolicy"}: true, + {APIVersion: "networking.k8s.io/v1beta1", Kind: "Ingress"}: true, + {APIVersion: "networking.k8s.io/v1beta1", Kind: "IngressClass"}: false, + {APIVersion: "node.k8s.io/v1", Kind: "RuntimeClass"}: false, + {APIVersion: "node.k8s.io/v1beta1", Kind: "RuntimeClass"}: false, + {APIVersion: "policy/v1", Kind: "PodDisruptionBudget"}: true, + {APIVersion: "policy/v1beta1", Kind: "PodDisruptionBudget"}: true, + {APIVersion: "policy/v1beta1", Kind: "PodSecurityPolicy"}: false, + {APIVersion: "rbac.authorization.k8s.io/v1", Kind: "ClusterRole"}: false, + {APIVersion: "rbac.authorization.k8s.io/v1", Kind: "ClusterRoleBinding"}: false, + {APIVersion: "rbac.authorization.k8s.io/v1", Kind: "Role"}: true, + {APIVersion: "rbac.authorization.k8s.io/v1", Kind: "RoleBinding"}: true, + {APIVersion: "rbac.authorization.k8s.io/v1beta1", Kind: "ClusterRole"}: false, + {APIVersion: "rbac.authorization.k8s.io/v1beta1", Kind: "ClusterRoleBinding"}: false, + {APIVersion: "rbac.authorization.k8s.io/v1beta1", Kind: "Role"}: true, + {APIVersion: "rbac.authorization.k8s.io/v1beta1", Kind: "RoleBinding"}: true, + {APIVersion: "scheduling.k8s.io/v1", Kind: "PriorityClass"}: false, + {APIVersion: "scheduling.k8s.io/v1beta1", Kind: "PriorityClass"}: false, + {APIVersion: "storage.k8s.io/v1", Kind: "CSIDriver"}: false, + {APIVersion: "storage.k8s.io/v1", Kind: "CSINode"}: false, + {APIVersion: "storage.k8s.io/v1", Kind: "StorageClass"}: false, + {APIVersion: "storage.k8s.io/v1", Kind: "VolumeAttachment"}: false, + {APIVersion: "storage.k8s.io/v1beta1", Kind: "CSIDriver"}: false, + {APIVersion: "storage.k8s.io/v1beta1", Kind: "CSINode"}: false, + {APIVersion: "storage.k8s.io/v1beta1", Kind: "CSIStorageCapacity"}: true, + {APIVersion: "storage.k8s.io/v1beta1", Kind: "StorageClass"}: false, + {APIVersion: "storage.k8s.io/v1beta1", Kind: "VolumeAttachment"}: false, + {APIVersion: "v1", Kind: "ComponentStatus"}: false, + {APIVersion: "v1", Kind: "ConfigMap"}: true, + {APIVersion: "v1", Kind: "Endpoints"}: true, + {APIVersion: "v1", Kind: "Event"}: true, + {APIVersion: "v1", Kind: "LimitRange"}: true, + {APIVersion: "v1", Kind: "Namespace"}: false, + {APIVersion: "v1", Kind: "Node"}: false, + {APIVersion: "v1", Kind: "NodeProxyOptions"}: false, + {APIVersion: "v1", Kind: "PersistentVolume"}: false, + {APIVersion: "v1", Kind: "PersistentVolumeClaim"}: true, + {APIVersion: "v1", Kind: "Pod"}: true, + {APIVersion: "v1", Kind: "PodAttachOptions"}: true, + {APIVersion: "v1", Kind: "PodExecOptions"}: true, + {APIVersion: "v1", Kind: "PodPortForwardOptions"}: true, + {APIVersion: "v1", Kind: "PodProxyOptions"}: true, + {APIVersion: "v1", Kind: "PodTemplate"}: true, + {APIVersion: "v1", Kind: "ReplicationController"}: true, + {APIVersion: "v1", Kind: "ResourceQuota"}: true, + {APIVersion: "v1", Kind: "Secret"}: true, + {APIVersion: "v1", Kind: "Service"}: true, + {APIVersion: "v1", Kind: "ServiceAccount"}: true, + {APIVersion: "v1", Kind: "ServiceProxyOptions"}: true, +} + +// ResourceSchema wraps the OpenAPI Schema. +type ResourceSchema struct { + // Schema is the OpenAPI schema for a Resource or field + Schema *spec.Schema +} + +// IsEmpty returns true if the ResourceSchema is empty +func (rs *ResourceSchema) IsMissingOrNull() bool { + if rs == nil || rs.Schema == nil { + return true + } + return reflect.DeepEqual(*rs.Schema, spec.Schema{}) +} + +// SchemaForResourceType returns the Schema for the given Resource +// TODO(pwittrock): create a version of this function that will return a schema +// which can be used for duck-typed Resources -- e.g. contains common fields such +// as metadata, replicas and spec.template.spec +func SchemaForResourceType(t yaml.TypeMeta) *ResourceSchema { + initSchema() + rs, found := globalSchema.schemaByResourceType[t] + if !found { + return nil + } + return &ResourceSchema{Schema: rs} +} + +// SupplementaryOpenAPIFieldName is the conventional field name (JSON/YAML) containing +// supplementary OpenAPI definitions. +const SupplementaryOpenAPIFieldName = "openAPI" + +const Definitions = "definitions" + +// AddSchemaFromFile reads the file at path and parses the OpenAPI definitions +// from the field "openAPI", also returns a function to clean the added definitions +// The returned clean function is a no-op on error, or else it's a function +// that the caller should use to remove the added openAPI definitions from +// global schema +func SchemaFromFile(path string) (*spec.Schema, error) { + object, err := parseOpenAPI(path) + if err != nil { + return nil, err + } + + return schemaUsingField(object, SupplementaryOpenAPIFieldName) +} + +// DefinitionRefs returns the list of openAPI definition references present in the +// input openAPIPath +func DefinitionRefs(openAPIPath string) ([]string, error) { + object, err := parseOpenAPI(openAPIPath) + if err != nil { + return nil, err + } + return definitionRefsFromRNode(object) +} + +// definitionRefsFromRNode returns the list of openAPI definitions keys from input +// yaml RNode +func definitionRefsFromRNode(object *yaml.RNode) ([]string, error) { + definitions, err := object.Pipe(yaml.Lookup(SupplementaryOpenAPIFieldName, Definitions)) + if definitions == nil { + return nil, err + } + if err != nil { + return nil, err + } + return definitions.Fields() +} + +// parseOpenAPI reads openAPIPath yaml and converts it to RNode +func parseOpenAPI(openAPIPath string) (*yaml.RNode, error) { + b, err := ioutil.ReadFile(openAPIPath) + if err != nil { + return nil, err + } + + object, err := yaml.Parse(string(b)) + if err != nil { + return nil, errors.Errorf("invalid file %q: %v", openAPIPath, err) + } + return object, nil +} + +// addSchemaUsingField parses the OpenAPI definitions from the specified field. +// If field is the empty string, use the whole document as OpenAPI. +func schemaUsingField(object *yaml.RNode, field string) (*spec.Schema, error) { + if field != "" { + // get the field containing the openAPI + m := object.Field(field) + if m.IsNilOrEmpty() { + // doesn't contain openAPI definitions + return nil, nil + } + object = m.Value + } + + oAPI, err := object.String() + if err != nil { + return nil, err + } + + // convert the yaml openAPI to a JSON string by unmarshalling it to an + // interface{} and the marshalling it to a string + var o interface{} + err = yaml.Unmarshal([]byte(oAPI), &o) + if err != nil { + return nil, err + } + j, err := json.Marshal(o) + if err != nil { + return nil, err + } + + var sc spec.Schema + err = sc.UnmarshalJSON(j) + if err != nil { + return nil, err + } + + return &sc, nil +} + +// AddSchema parses s, and adds definitions from s to the global schema. +func AddSchema(s []byte) error { + return parse(s) +} + +// ResetOpenAPI resets the openapi data to empty +func ResetOpenAPI() { + globalSchema = openapiData{} +} + +// AddDefinitions adds the definitions to the global schema. +func AddDefinitions(definitions spec.Definitions) { + // initialize values if they have not yet been set + if globalSchema.schemaByResourceType == nil { + globalSchema.schemaByResourceType = map[yaml.TypeMeta]*spec.Schema{} + } + if globalSchema.schema.Definitions == nil { + globalSchema.schema.Definitions = spec.Definitions{} + } + + // index the schema definitions so we can lookup them up for Resources + for k := range definitions { + // index by GVK, if no GVK is found then it is the schema for a subfield + // of a Resource + d := definitions[k] + + // copy definitions to the schema + globalSchema.schema.Definitions[k] = d + gvk, found := d.VendorExtensible.Extensions[kubernetesGVKExtensionKey] + if !found { + continue + } + // cast the extension to a []map[string]string + exts, ok := gvk.([]interface{}) + if !ok { + continue + } + + for i := range exts { + typeMeta, ok := toTypeMeta(exts[i]) + if !ok { + continue + } + globalSchema.schemaByResourceType[typeMeta] = &d + } + } +} + +func toTypeMeta(ext interface{}) (yaml.TypeMeta, bool) { + m, ok := ext.(map[string]interface{}) + if !ok { + return yaml.TypeMeta{}, false + } + + g := m[groupKey].(string) + apiVersion := m[versionKey].(string) + if g != "" { + apiVersion = g + "/" + apiVersion + } + return yaml.TypeMeta{Kind: m[kindKey].(string), APIVersion: apiVersion}, true +} + +// Resolve resolves the reference against the global schema +func Resolve(ref *spec.Ref, schema *spec.Schema) (*spec.Schema, error) { + return resolve(schema, ref) +} + +// Schema returns the global schema +func Schema() *spec.Schema { + return rootSchema() +} + +// GetSchema parses s into a ResourceSchema, resolving References within the +// global schema. +func GetSchema(s string, schema *spec.Schema) (*ResourceSchema, error) { + var sc spec.Schema + if err := sc.UnmarshalJSON([]byte(s)); err != nil { + return nil, errors.Wrap(err) + } + if sc.Ref.String() != "" { + r, err := Resolve(&sc.Ref, schema) + if err != nil { + return nil, errors.Wrap(err) + } + sc = *r + } + + return &ResourceSchema{Schema: &sc}, nil +} + +// IsNamespaceScoped determines whether a resource is namespace or +// cluster-scoped by looking at the information in the openapi schema. +// The second return value tells whether the provided type could be found +// in the openapi schema. If the value is false here, the scope of the +// resource is not known. If the type is found, the first return value will +// be true if the resource is namespace-scoped, and false if the type is +// cluster-scoped. +func IsNamespaceScoped(typeMeta yaml.TypeMeta) (bool, bool) { + if res, f := precomputedIsNamespaceScoped[typeMeta]; f { + return res, true + } + return isNamespaceScopedFromSchema(typeMeta) +} + +func isNamespaceScopedFromSchema(typeMeta yaml.TypeMeta) (bool, bool) { + initSchema() + isNamespaceScoped, found := globalSchema.namespaceabilityByResourceType[typeMeta] + return isNamespaceScoped, found +} + +// IsCertainlyClusterScoped returns true for Node, Namespace, etc. and +// false for Pod, Deployment, etc. and kinds that aren't recognized in the +// openapi data. See: +// https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces +func IsCertainlyClusterScoped(typeMeta yaml.TypeMeta) bool { + nsScoped, found := IsNamespaceScoped(typeMeta) + return found && !nsScoped +} + +// SuppressBuiltInSchemaUse can be called to prevent using the built-in Kubernetes +// schema as part of the global schema. +// Must be called before the schema is used. +func SuppressBuiltInSchemaUse() { + globalSchema.noUseBuiltInSchema = true +} + +// Elements returns the Schema for the elements of an array. +func (rs *ResourceSchema) Elements() *ResourceSchema { + // load the schema from swagger.json + initSchema() + + if len(rs.Schema.Type) != 1 || rs.Schema.Type[0] != "array" { + // either not an array, or array has multiple types + return nil + } + if rs == nil || rs.Schema == nil || rs.Schema.Items == nil { + // no-scheme for the items + return nil + } + s := *rs.Schema.Items.Schema + for s.Ref.String() != "" { + sc, e := Resolve(&s.Ref, Schema()) + if e != nil { + return nil + } + s = *sc + } + return &ResourceSchema{Schema: &s} +} + +const Elements = "[]" + +// Lookup calls either Field or Elements for each item in the path. +// If the path item is "[]", then Elements is called, otherwise +// Field is called. +// If any Field or Elements call returns nil, then Lookup returns +// nil immediately. +func (rs *ResourceSchema) Lookup(path ...string) *ResourceSchema { + s := rs + for _, p := range path { + if s == nil { + break + } + if p == Elements { + s = s.Elements() + continue + } + s = s.Field(p) + } + return s +} + +// Field returns the Schema for a field. +func (rs *ResourceSchema) Field(field string) *ResourceSchema { + // load the schema from swagger.json + initSchema() + + // locate the Schema + s, found := rs.Schema.Properties[field] + switch { + case found: + // no-op, continue with s as the schema + case rs.Schema.AdditionalProperties != nil && rs.Schema.AdditionalProperties.Schema != nil: + // map field type -- use Schema of the value + // (the key doesn't matter, they all have the same value type) + s = *rs.Schema.AdditionalProperties.Schema + default: + // no Schema found from either swagger.json or line comments + return nil + } + + // resolve the reference to the Schema if the Schema has one + for s.Ref.String() != "" { + sc, e := Resolve(&s.Ref, Schema()) + if e != nil { + return nil + } + s = *sc + } + + // return the merged Schema + return &ResourceSchema{Schema: &s} +} + +// PatchStrategyAndKeyList returns the patch strategy and complete merge key list +func (rs *ResourceSchema) PatchStrategyAndKeyList() (string, []string) { + ps, found := rs.Schema.Extensions[kubernetesPatchStrategyExtensionKey] + if !found { + // empty patch strategy + return "", []string{} + } + mkList, found := rs.Schema.Extensions[kubernetesMergeKeyMapList] + if found { + // mkList is []interface, convert to []string + mkListStr := make([]string, len(mkList.([]interface{}))) + for i, v := range mkList.([]interface{}) { + mkListStr[i] = v.(string) + } + return ps.(string), mkListStr + } + mk, found := rs.Schema.Extensions[kubernetesMergeKeyExtensionKey] + if !found { + // no mergeKey -- may be a primitive associative list (e.g. finalizers) + return ps.(string), []string{} + } + return ps.(string), []string{mk.(string)} +} + +// PatchStrategyAndKey returns the patch strategy and merge key extensions +func (rs *ResourceSchema) PatchStrategyAndKey() (string, string) { + ps, found := rs.Schema.Extensions[kubernetesPatchStrategyExtensionKey] + if !found { + // empty patch strategy + return "", "" + } + + mk, found := rs.Schema.Extensions[kubernetesMergeKeyExtensionKey] + if !found { + // no mergeKey -- may be a primitive associative list (e.g. finalizers) + mk = "" + } + return ps.(string), mk.(string) +} + +const ( + // kubernetesOpenAPIDefaultVersion is the latest version number of the statically compiled in + // OpenAPI schema for kubernetes built-in types + kubernetesOpenAPIDefaultVersion = kubernetesapi.DefaultOpenAPI + + // kustomizationAPIAssetName is the name of the asset containing the statically compiled in + // OpenAPI definitions for Kustomization built-in types + kustomizationAPIAssetName = "kustomizationapi/swagger.json" + + // kubernetesGVKExtensionKey is the key to lookup the kubernetes group version kind extension + // -- the extension is an array of objects containing a gvk + kubernetesGVKExtensionKey = "x-kubernetes-group-version-kind" + + // kubernetesMergeKeyExtensionKey is the key to lookup the kubernetes merge key extension + // -- the extension is a string + kubernetesMergeKeyExtensionKey = "x-kubernetes-patch-merge-key" + + // kubernetesPatchStrategyExtensionKey is the key to lookup the kubernetes patch strategy + // extension -- the extension is a string + kubernetesPatchStrategyExtensionKey = "x-kubernetes-patch-strategy" + + // kubernetesMergeKeyMapList is the list of merge keys when there needs to be multiple + // -- the extension is an array of strings + kubernetesMergeKeyMapList = "x-kubernetes-list-map-keys" + + // groupKey is the key to lookup the group from the GVK extension + groupKey = "group" + // versionKey is the key to lookup the version from the GVK extension + versionKey = "version" + // kindKey is the the to lookup the kind from the GVK extension + kindKey = "kind" +) + +// SetSchema sets the kubernetes OpenAPI schema version to use +func SetSchema(openAPIField map[string]string, schema []byte, reset bool) error { + // this should only be set once + schemaIsSet := (kubernetesOpenAPIVersion != "") || customSchema != nil + if schemaIsSet && !reset { + return nil + } + + version, exists := openAPIField["version"] + if exists && schema != nil { + return fmt.Errorf("builtin version and custom schema provided, cannot use both") + } + + if schema != nil { // use custom schema + customSchema = schema + kubernetesOpenAPIVersion = "custom" + // if the schema is changed, initSchema should parse the new schema + globalSchema.schemaInit = false + return nil + } + + // use builtin version + kubernetesOpenAPIVersion = strings.ReplaceAll(version, ".", "") + if kubernetesOpenAPIVersion == "" { + return nil + } + if _, ok := kubernetesapi.OpenAPIMustAsset[kubernetesOpenAPIVersion]; !ok { + return fmt.Errorf("the specified OpenAPI version is not built in") + } + customSchema = nil + // if the schema is changed, initSchema should parse the new schema + globalSchema.schemaInit = false + return nil +} + +// GetSchemaVersion returns what kubernetes OpenAPI version is being used +func GetSchemaVersion() string { + switch { + case kubernetesOpenAPIVersion == "" && customSchema == nil: + return kubernetesOpenAPIDefaultVersion + case customSchema != nil: + return "using custom schema from file provided" + default: + return kubernetesOpenAPIVersion + } +} + +// initSchema parses the json schema +func initSchema() { + if globalSchema.schemaInit { + return + } + globalSchema.schemaInit = true + + if customSchema != nil { + err := parse(customSchema) + if err != nil { + panic("invalid schema file") + } + if err = parse(kustomizationapi.MustAsset(kustomizationAPIAssetName)); err != nil { + // this should never happen + panic(err) + } + return + } + + if kubernetesOpenAPIVersion == "" { + parseBuiltinSchema(kubernetesOpenAPIDefaultVersion) + } else { + parseBuiltinSchema(kubernetesOpenAPIVersion) + } +} + +// parseBuiltinSchema calls parse to parse the json schemas +func parseBuiltinSchema(version string) { + if globalSchema.noUseBuiltInSchema { + // don't parse the built in schema + return + } + + // parse the swagger, this should never fail + assetName := filepath.Join( + "kubernetesapi", + version, + "swagger.json") + + if err := parse(kubernetesapi.OpenAPIMustAsset[version](assetName)); err != nil { + // this should never happen + panic(err) + } + + if err := parse(kustomizationapi.MustAsset(kustomizationAPIAssetName)); err != nil { + // this should never happen + panic(err) + } +} + +// parse parses and indexes a single json schema +func parse(b []byte) error { + var swagger spec.Swagger + s := string(b) + if len(s) > 0 && s[0] != '{' { + var err error + b, err = k8syaml.YAMLToJSON(b) + if err != nil { + return errors.Wrap(err) + } + } + if err := swagger.UnmarshalJSON(b); err != nil { + return errors.Wrap(err) + } + AddDefinitions(swagger.Definitions) + findNamespaceability(swagger.Paths) + + return nil +} + +// findNamespaceability looks at the api paths for the resource to determine +// if it is cluster-scoped or namespace-scoped. The gvk of the resource +// for each path is found by looking at the x-kubernetes-group-version-kind +// extension. If a path exists for the resource that contains a namespace path +// parameter, the resource is namespace-scoped. +func findNamespaceability(paths *spec.Paths) { + if globalSchema.namespaceabilityByResourceType == nil { + globalSchema.namespaceabilityByResourceType = make(map[yaml.TypeMeta]bool) + } + + if paths == nil { + return + } + + for path, pathInfo := range paths.Paths { + if pathInfo.Get == nil { + continue + } + gvk, found := pathInfo.Get.VendorExtensible.Extensions[kubernetesGVKExtensionKey] + if !found { + continue + } + typeMeta, found := toTypeMeta(gvk) + if !found { + continue + } + + if strings.Contains(path, "namespaces/{namespace}") { + // if we find a namespace path parameter, we just update the map + // directly + globalSchema.namespaceabilityByResourceType[typeMeta] = true + } else if _, found := globalSchema.namespaceabilityByResourceType[typeMeta]; !found { + // if the resource doesn't have the namespace path parameter, we + // only add it to the map if it doesn't already exist. + globalSchema.namespaceabilityByResourceType[typeMeta] = false + } + } +} + +func resolve(root interface{}, ref *spec.Ref) (*spec.Schema, error) { + res, _, err := ref.GetPointer().Get(root) + if err != nil { + return nil, errors.Wrap(err) + } + switch sch := res.(type) { + case spec.Schema: + return &sch, nil + case *spec.Schema: + return sch, nil + case map[string]interface{}: + b, err := json.Marshal(sch) + if err != nil { + return nil, err + } + newSch := new(spec.Schema) + if err = json.Unmarshal(b, newSch); err != nil { + return nil, err + } + return newSch, nil + default: + return nil, errors.Wrap(fmt.Errorf("unknown type for the resolved reference")) + } +} + +func rootSchema() *spec.Schema { + initSchema() + return &globalSchema.schema +} diff --git a/go/internal/forked/kyaml/openapi/openapi_benchmark_test.go b/go/internal/forked/kyaml/openapi/openapi_benchmark_test.go new file mode 100644 index 000000000..e9a72069a --- /dev/null +++ b/go/internal/forked/kyaml/openapi/openapi_benchmark_test.go @@ -0,0 +1,84 @@ +// Copyright 2021 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package openapi + +import ( + "path/filepath" + "testing" + + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/openapi/kubernetesapi" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/openapi/kubernetesapi/v1218pb" + "github.com/golang/protobuf/proto" + openapi_v2 "github.com/google/gnostic/openapiv2" + "k8s.io/kube-openapi/pkg/validation/spec" +) + +// Benchmark for swagger parsing (UnmarshalJSON) +func BenchmarkSwaggerUnmarshalJSON(t *testing.B) { + version := kubernetesOpenAPIDefaultVersion + + // parse the swagger, this should never fail + assetName := filepath.Join( + "kubernetesapi", + version, + "swagger.json") + + b := kubernetesapi.OpenAPIMustAsset[version](assetName) + + for i := 0; i < t.N; i++ { + var swagger spec.Swagger + if err := swagger.UnmarshalJSON(b); err != nil { + t.Fatalf("swagger.UnmarshalJSON failed: %v", err) + } + } +} + +func BenchmarkOpenAPIV2ParseDocument(t *testing.B) { + version := kubernetesOpenAPIDefaultVersion + + assetName := filepath.Join( + "kubernetesapi", + version, + "swagger.json") + + b := kubernetesapi.OpenAPIMustAsset[version](assetName) + + for i := 0; i < t.N; i++ { + // We parse JSON and get an openapiv2.Document here. + if _, err := openapi_v2.ParseDocument(b); err != nil { + t.Fatalf("openapi_v2.ParseDocument failed: %v", err) + } + } +} + +func BenchmarkProtoUnmarshal(t *testing.B) { + assetName := filepath.Join( + "kubernetesapi", + "v1218pb", + "swagger.pb") + + b := v1218pb.MustAsset(assetName) + + for i := 0; i < t.N; i++ { + // We parse protobuf and get an openapiv2.Document here. + if err := proto.Unmarshal(b, &openapi_v2.Document{}); err != nil { + t.Fatalf("proto.Unmarshal failed: %v", err) + } + } +} + +// Benchmark for loading assets packed into the binary +func BenchmarkAssetRead(t *testing.B) { + for i := 0; i < t.N; i++ { + version := kubernetesOpenAPIDefaultVersion + + // parse the swagger, this should never fail + assetName := filepath.Join( + "kubernetesapi", + version, + "swagger.json") + + kubernetesapi.OpenAPIMustAsset[version](assetName) + } +} diff --git a/go/internal/forked/kyaml/openapi/openapi_test.go b/go/internal/forked/kyaml/openapi/openapi_test.go new file mode 100644 index 000000000..88b3eae1e --- /dev/null +++ b/go/internal/forked/kyaml/openapi/openapi_test.go @@ -0,0 +1,327 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package openapi + +import ( + "fmt" + "io/ioutil" + "testing" + + "github.com/google/go-cmp/cmp" + "github.com/stretchr/testify/assert" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" +) + +func TestAddSchema(t *testing.T) { + // reset package vars + globalSchema = openapiData{} + + err := AddSchema(additionalSchema) + if !assert.NoError(t, err) { + t.FailNow() + } + s, err := GetSchema(`{"$ref": "#/definitions/io.k8s.config.setters.replicas"}`, Schema()) + if !assert.Greater(t, len(globalSchema.schema.Definitions), 200) { + t.FailNow() + } + if !assert.NoError(t, err) { + t.FailNow() + } + assert.Equal(t, `map[x-kustomize:map[setBy:Jane setter:map[name:replicas value:5]]]`, + fmt.Sprintf("%v", s.Schema.Extensions)) +} + +var additionalSchema = []byte(` +{ + "definitions": { + "io.k8s.config.setters.replicas": { + "description": "replicas description.", + "type": "integer", + "x-kustomize": {"setBy":"Jane","setter": {"name":"replicas","value":"5"}} + } + }, + "invalid": "field" +} +`) + +func TestSchemaForResourceType(t *testing.T) { + // reset package vars + globalSchema = openapiData{} + + s := SchemaForResourceType( + yaml.TypeMeta{APIVersion: "apps/v1", Kind: "Deployment"}) + if !assert.NotNil(t, s) { + t.FailNow() + } + + f := s.Field("spec") + if !assert.NotNil(t, f) { + t.FailNow() + } + if !assert.Equal(t, "DeploymentSpec is the specification of the desired behavior of the Deployment.", + f.Schema.Description) { + t.FailNow() + } + + replicas := f.Field("replicas") + if !assert.NotNil(t, replicas) { + t.FailNow() + } + if !assert.Equal(t, "Number of desired pods. This is a pointer to distinguish between explicit zero and not specified. Defaults to 1.", + replicas.Schema.Description) { + t.FailNow() + } + + temp := f.Field("template") + if !assert.NotNil(t, temp) { + t.FailNow() + } + if !assert.Equal(t, "PodTemplateSpec describes the data a pod should have when created from a template", + temp.Schema.Description) { + t.FailNow() + } + + containers := temp.Field("spec").Field("containers").Elements() + if !assert.NotNil(t, containers) { + t.FailNow() + } + + targetPort := containers.Field("ports").Elements().Field("containerPort") + if !assert.NotNil(t, targetPort) { + t.FailNow() + } + if !assert.Equal(t, "Number of port to expose on the pod's IP address. This must be a valid port number, 0 < x < 65536.", + targetPort.Schema.Description) { + t.FailNow() + } + + arg := containers.Field("args").Elements() + if !assert.NotNil(t, arg) { + t.FailNow() + } + if !assert.Equal(t, "string", arg.Schema.Type[0]) { + t.FailNow() + } +} + +func TestSchemaFromFile(t *testing.T) { + ResetOpenAPI() + inputyaml := ` +openAPI: + definitions: + io.k8s.cli.setters.image-name: + x-k8s-cli: + setter: + name: image-name + value: "nginx" + ` + f, err := ioutil.TempFile("", "openapi-") + if !assert.NoError(t, err) { + t.FailNow() + } + if !assert.NoError(t, ioutil.WriteFile(f.Name(), []byte(inputyaml), 0600)) { + t.FailNow() + } + + sc, err := SchemaFromFile(f.Name()) + if !assert.NoError(t, err) { + t.FailNow() + } + + s, err := GetSchema(`{"$ref": "#/definitions/io.k8s.cli.setters.image-name"}`, sc) + + if !assert.NoError(t, err) { + t.FailNow() + } + if !assert.Greater(t, len(sc.Definitions), 0) { + t.FailNow() + } + assert.Equal(t, `map[x-k8s-cli:map[setter:map[name:image-name value:nginx]]]`, + fmt.Sprintf("%v", s.Schema.Extensions)) +} + +func TestPopulateDefsInOpenAPI_Substitution(t *testing.T) { + ResetOpenAPI() + inputyaml := ` +openAPI: + definitions: + io.k8s.cli.setters.image-name: + x-k8s-cli: + setter: + name: image-name + value: "nginx" + io.k8s.cli.setters.image-tag: + x-k8s-cli: + setter: + name: image-tag + value: "1.8.1" + io.k8s.cli.substitutions.image: + x-k8s-cli: + substitution: + name: image + pattern: IMAGE_NAME:IMAGE_TAG + values: + - marker: "IMAGE_NAME" + ref: "#/definitions/io.k8s.cli.setters.image-name" + - marker: "IMAGE_TAG" + ref: "#/definitions/io.k8s.cli.setters.image-tag" + ` + + f, err := ioutil.TempFile("", "openapi-") + if !assert.NoError(t, err) { + t.FailNow() + } + if !assert.NoError(t, ioutil.WriteFile(f.Name(), []byte(inputyaml), 0600)) { + t.FailNow() + } + + sc, err := SchemaFromFile(f.Name()) + if !assert.NoError(t, err) { + t.FailNow() + } + + s, err := GetSchema(`{"$ref": "#/definitions/io.k8s.cli.substitutions.image"}`, sc) + + if !assert.NoError(t, err) { + t.FailNow() + } + if !assert.Equal(t, len(sc.Definitions), 3) { + t.FailNow() + } + + assert.Equal(t, + `map[x-k8s-cli:map[substitution:map[name:image pattern:IMAGE_NAME:IMAGE_TAG`+ + ` values:[map[marker:IMAGE_NAME ref:#/definitions/io.k8s.cli.setters.image-name]`+ + ` map[marker:IMAGE_TAG ref:#/definitions/io.k8s.cli.setters.image-tag]]]]]`, + fmt.Sprintf("%v", s.Schema.Extensions)) +} + +func TestAddSchemaFromFile_empty(t *testing.T) { + ResetOpenAPI() + inputyaml := ` +kind: Example + ` + + f, err := ioutil.TempFile("", "openapi-") + if !assert.NoError(t, err) { + t.FailNow() + } + if !assert.NoError(t, ioutil.WriteFile(f.Name(), []byte(inputyaml), 0600)) { + t.FailNow() + } + + sc, err := SchemaFromFile(f.Name()) + if !assert.NoError(t, err) { + t.FailNow() + } + + if !assert.Nil(t, sc) { + t.FailNow() + } +} + +func TestIsNamespaceScoped_builtin(t *testing.T) { + testCases := []struct { + name string + typeMeta yaml.TypeMeta + expectIsFound bool + expectIsNamespaced bool + }{ + { + name: "namespacescoped resource", + typeMeta: yaml.TypeMeta{ + APIVersion: "apps/v1", + Kind: "Deployment", + }, + expectIsFound: true, + expectIsNamespaced: true, + }, + { + name: "clusterscoped resource", + typeMeta: yaml.TypeMeta{ + APIVersion: "v1", + Kind: "Namespace", + }, + expectIsFound: true, + expectIsNamespaced: false, + }, + { + name: "unknown resource", + typeMeta: yaml.TypeMeta{ + APIVersion: "custom.io/v1", + Kind: "Custom", + }, + expectIsFound: false, + }, + } + + for i := range testCases { + test := testCases[i] + t.Run(test.name, func(t *testing.T) { + ResetOpenAPI() + isNamespaceable, isFound := IsNamespaceScoped(test.typeMeta) + + if !test.expectIsFound { + assert.False(t, isFound) + return + } + assert.True(t, isFound) + assert.Equal(t, test.expectIsNamespaced, isNamespaceable) + }) + } +} + +// TestIsNamespaceScopedPrecompute checks that the precomputed result meets the actual result +func TestIsNamespaceScopedPrecompute(t *testing.T) { + initSchema() + if diff := cmp.Diff(globalSchema.namespaceabilityByResourceType, precomputedIsNamespaceScoped); diff != "" { + t.Fatalf(diff) + } +} + +func TestIsNamespaceScoped_custom(t *testing.T) { + SuppressBuiltInSchemaUse() + err := AddSchema([]byte(` +{ + "definitions": {}, + "paths": { + "/apis/custom.io/v1/namespaces/{namespace}/customs/{name}": { + "get": { + "x-kubernetes-action": "get", + "x-kubernetes-group-version-kind": { + "group": "custom.io", + "kind": "Custom", + "version": "v1" + } + } + }, + "/apis/custom.io/v1/clustercustoms": { + "get": { + "x-kubernetes-action": "get", + "x-kubernetes-group-version-kind": { + "group": "custom.io", + "kind": "ClusterCustom", + "version": "v1" + } + } + } + } +} +`)) + assert.NoError(t, err) + + isNamespaceable, isFound := IsNamespaceScoped(yaml.TypeMeta{ + APIVersion: "custom.io/v1", + Kind: "ClusterCustom", + }) + assert.True(t, isFound) + assert.False(t, isNamespaceable) + + isNamespaceable, isFound = IsNamespaceScoped(yaml.TypeMeta{ + APIVersion: "custom.io/v1", + Kind: "Custom", + }) + assert.True(t, isFound) + assert.True(t, isNamespaceable) +} diff --git a/go/internal/forked/kyaml/openapi/scripts/fetchSchemaFromCluster.sh b/go/internal/forked/kyaml/openapi/scripts/fetchSchemaFromCluster.sh new file mode 100755 index 000000000..1b1c68a3a --- /dev/null +++ b/go/internal/forked/kyaml/openapi/scripts/fetchSchemaFromCluster.sh @@ -0,0 +1,15 @@ +#!/bin/bash +# Copyright 2020 The Kubernetes Authors. +# SPDX-License-Identifier: Apache-2.0 + +MYGOBIN=$(go env GOBIN) +MYGOBIN="${MYGOBIN:-$(go env GOPATH)/bin}" +VERSION=$1 + +cp $HOME/.kube/config /tmp/kubeconfig.txt | true +$MYGOBIN/kind create cluster --image kindest/node:$VERSION --name=getopenapidata +$MYGOBIN/kustomize openapi fetch > /tmp/new_swagger.json +$MYGOBIN/kind delete cluster --name=getopenapidata +cp /tmp/kubeconfig.txt $HOME/.kube/config | true +mkdir -p kubernetesapi/"${VERSION//.}" +cp /tmp/new_swagger.json kubernetesapi/"${VERSION//.}"/swagger.json diff --git a/go/internal/forked/kyaml/openapi/scripts/generateSwaggerDotGo.sh b/go/internal/forked/kyaml/openapi/scripts/generateSwaggerDotGo.sh new file mode 100755 index 000000000..e055c0727 --- /dev/null +++ b/go/internal/forked/kyaml/openapi/scripts/generateSwaggerDotGo.sh @@ -0,0 +1,12 @@ +#!/bin/bash +# Copyright 2020 The Kubernetes Authors. +# SPDX-License-Identifier: Apache-2.0 + +MYGOBIN=$(go env GOBIN) +MYGOBIN="${MYGOBIN:-$(go env GOPATH)/bin}" +VERSION=$1 + +$MYGOBIN/go-bindata \ + --pkg "${VERSION//.}" \ + -o kubernetesapi/"${VERSION//.}"/swagger.go \ + kubernetesapi/"${VERSION//.}"/swagger.json diff --git a/go/internal/forked/kyaml/openapi/scripts/makeOpenApiInfoDotGo.sh b/go/internal/forked/kyaml/openapi/scripts/makeOpenApiInfoDotGo.sh new file mode 100755 index 000000000..3baad436f --- /dev/null +++ b/go/internal/forked/kyaml/openapi/scripts/makeOpenApiInfoDotGo.sh @@ -0,0 +1,84 @@ +#!/bin/bash +# Copyright 2020 The Kubernetes Authors. +# SPDX-License-Identifier: Apache-2.0 + +# This will read from the directory kubernetesapi +# and use subdirectory names to generate +# kubernetesapi/openapiinfo.go +# +# This script should only be run after the +# swagger.json and swagger.go files are generated. + +set -e + +if ! command -v jq &> /dev/null ; then + echo Please install jq + echo on ubuntu: sudo apt-get install jq + exit 1 +fi + +info_list=() +version_list=() + +V=`ls kubernetesapi | grep v.*` +for VERSION in $V +do + openapiinfo=$(\ + jq -r '.info' kubernetesapi/$VERSION/swagger.json | \ + sed 's/[\" *]//g' | \ + tr -d '\n' ) + info_list+=( $openapiinfo ) + version_list+=( ${VERSION} ) +done + + +# add imports to openapiinfo.go +cat <kubernetesapi/openapiinfo.go +// Copyright 2020 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +// Code generated by $0; DO NOT EDIT. + +package kubernetesapi + +import ( +EOF + +for version in ${version_list[@]} +do + cat <>kubernetesapi/openapiinfo.go + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/openapi/kubernetesapi/$version" +EOF +done + +# add info string for `kustomize openapi info` command +OPEN_API_INFO=`echo ${info_list[@]} | sed 's/ /\\\n/g'` +cat <>kubernetesapi/openapiinfo.go +) + +const Info = "$OPEN_API_INFO" +EOF + +# add map for `initSchema` in openapi.go to use +cat <>kubernetesapi/openapiinfo.go + +var OpenAPIMustAsset = map[string]func(string)[]byte{ +EOF + +latest="" +for version in ${version_list[@]} +do + latest=$version + cat <>kubernetesapi/openapiinfo.go + "$version": $version.MustAsset, +EOF +done + +# add latest version to be used as a default +cat <>kubernetesapi/openapiinfo.go +} + +const DefaultOpenAPI = "$latest" +EOF + + diff --git a/go/internal/forked/kyaml/openapi/scripts/makeOpenApiInfoDotGo.sh b/go/internal/forked/kyaml/openapi/scripts/makeOpenApiInfoDotGo.sh new file mode 100755 index 000000000..29bc1362d --- /dev/null +++ b/go/internal/forked/kyaml/openapi/scripts/makeOpenApiInfoDotGo.sh @@ -0,0 +1,84 @@ +#!/bin/bash +# Copyright 2020 The Kubernetes Authors. +# SPDX-License-Identifier: Apache-2.0 + +# This will read from the directory kubernetesapi +# and use subdirectory names to generate +# kubernetesapi/openapiinfo.go +# +# This script should only be run after the +# swagger.json and swagger.go files are generated. + +set -e + +if ! command -v jq &> /dev/null ; then + echo Please install jq + echo on ubuntu: sudo apt-get install jq + exit 1 +fi + +info_list=() +version_list=() + +V=`ls kubernetesapi | grep v.*` +for VERSION in $V +do + openapiinfo=$(\ + jq -r '.info' kubernetesapi/$VERSION/swagger.json | \ + sed 's/[\" *]//g' | \ + tr -d '\n' ) + info_list+=( $openapiinfo ) + version_list+=( ${VERSION} ) +done + + +# add imports to openapiinfo.go +cat <kubernetesapi/openapiinfo.go +// Copyright 2020 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +// Code generated by $0; DO NOT EDIT. + +package kubernetesapi + +import ( +EOF + +for version in ${version_list[@]} +do + cat <>kubernetesapi/openapiinfo.go + "github.com/GoogleContainerTools/kpt-functions-sdk/internal/forked/kyaml/openapi/kubernetesapi/$version" +EOF +done + +# add info string for `kustomize openapi info` command +OPEN_API_INFO=`echo ${info_list[@]} | sed 's/ /\\\n/g'` +cat <>kubernetesapi/openapiinfo.go +) + +const Info = "$OPEN_API_INFO" +EOF + +# add map for `initSchema` in openapi.go to use +cat <>kubernetesapi/openapiinfo.go + +var OpenAPIMustAsset = map[string]func(string)[]byte{ +EOF + +latest="" +for version in ${version_list[@]} +do + latest=$version + cat <>kubernetesapi/openapiinfo.go + "$version": $version.MustAsset, +EOF +done + +# add latest version to be used as a default +cat <>kubernetesapi/openapiinfo.go +} + +const DefaultOpenAPI = "$latest" +EOF + + diff --git a/go/internal/forked/kyaml/order/syncorder.go b/go/internal/forked/kyaml/order/syncorder.go new file mode 100644 index 000000000..945b6997c --- /dev/null +++ b/go/internal/forked/kyaml/order/syncorder.go @@ -0,0 +1,124 @@ +// Copyright 2021 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package order + +import ( + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/errors" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" +) + +// SyncOrder recursively sorts the map node keys in 'to' node to match the order of +// map node keys in 'from' node at same tree depth, additional keys are moved to the end +// Field order might be altered due to round-tripping in arbitrary functions. +// This functionality helps to retain the original order of fields to avoid unnecessary diffs. +func SyncOrder(from, to *yaml.RNode) error { + // from node should not be modified, it should be just used as a reference + fromCopy := from.Copy() + if err := syncOrder(fromCopy, to); err != nil { + return errors.Errorf("failed to sync field order: %q", err.Error()) + } + rearrangeHeadCommentOfSeqNode(to.YNode()) + return nil +} + +func syncOrder(from, to *yaml.RNode) error { + if from.IsNilOrEmpty() || to.IsNilOrEmpty() { + return nil + } + switch from.YNode().Kind { + case yaml.DocumentNode: + // Traverse the child of the documents + return syncOrder(yaml.NewRNode(from.YNode()), yaml.NewRNode(to.YNode())) + case yaml.MappingNode: + return VisitFields(from, to, func(fNode, tNode *yaml.MapNode) error { + // Traverse each field value + if fNode == nil || tNode == nil { + return nil + } + return syncOrder(fNode.Value, tNode.Value) + }) + case yaml.SequenceNode: + return VisitElements(from, to, func(fNode, tNode *yaml.RNode) error { + // Traverse each list element + return syncOrder(fNode, tNode) + }) + } + return nil +} + +// VisitElements calls fn for each element in a SequenceNode. +// Returns an error for non-SequenceNodes +func VisitElements(from, to *yaml.RNode, fn func(fNode, tNode *yaml.RNode) error) error { + fElements, err := from.Elements() + if err != nil { + return errors.Wrap(err) + } + + tElements, err := to.Elements() + if err != nil { + return errors.Wrap(err) + } + for i := range fElements { + if i >= len(tElements) { + return nil + } + if err := fn(fElements[i], tElements[i]); err != nil { + return errors.Wrap(err) + } + } + return nil +} + +// VisitFields calls fn for each field in the RNode. +// Returns an error for non-MappingNodes. +func VisitFields(from, to *yaml.RNode, fn func(fNode, tNode *yaml.MapNode) error) error { + srcFieldNames, err := from.Fields() + if err != nil { + return nil + } + yaml.SyncMapNodesOrder(from, to) + // visit each field + for _, fieldName := range srcFieldNames { + if err := fn(from.Field(fieldName), to.Field(fieldName)); err != nil { + return errors.Wrap(err) + } + } + return nil +} + +// rearrangeHeadCommentOfSeqNode addresses a remote corner case due to moving a +// map node in a sequence node with a head comment to the top +func rearrangeHeadCommentOfSeqNode(node *yaml.Node) { + if node == nil { + return + } + switch node.Kind { + case yaml.DocumentNode: + for _, node := range node.Content { + rearrangeHeadCommentOfSeqNode(node) + } + + case yaml.MappingNode: + for _, node := range node.Content { + rearrangeHeadCommentOfSeqNode(node) + } + + case yaml.SequenceNode: + for _, node := range node.Content { + // for each child mapping node, transfer the head comment of it's + // first child scalar node to the head comment of itself + if len(node.Content) > 0 && node.Content[0].Kind == yaml.ScalarNode { + if node.HeadComment == "" { + node.HeadComment = node.Content[0].HeadComment + continue + } + + if node.Content[0].HeadComment != "" { + node.HeadComment += "\n" + node.Content[0].HeadComment + node.Content[0].HeadComment = "" + } + } + } + } +} diff --git a/go/internal/forked/kyaml/order/syncorder_test.go b/go/internal/forked/kyaml/order/syncorder_test.go new file mode 100644 index 000000000..063de3e99 --- /dev/null +++ b/go/internal/forked/kyaml/order/syncorder_test.go @@ -0,0 +1,428 @@ +// Copyright 2021 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package order + +import ( + "bytes" + "strings" + "testing" + + "github.com/stretchr/testify/assert" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/kio" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" +) + +func TestSyncOrder(t *testing.T) { + testCases := []struct { + name string + from string + to string + expected string + }{ + { + name: "sort data fields configmap with comments", + from: `apiVersion: v1 +kind: ConfigMap +metadata: + name: setters-config +data: + # This should be the name of your Config Controller instance + cluster-name: cluster-name + # This should be the project where you deployed Config Controller + project-id: project-id # pro + project-number: "1234567890123" + # You can leave these defaults + namespace: config-control + deployment-repo: deployment-repo + source-repo: source-repo +`, + to: `apiVersion: v1 +kind: ConfigMap +metadata: # kpt-merge: /setters-config + name: setters-config +data: + # You can leave these defaults + namespace: config-control + # This should be the name of your Config Controller instance + cluster-name: cluster-name + deployment-repo: deployment-repo + # This should be the project where you deployed Config Controller + project-id: project-id # project + project-number: "1234567890123" + source-repo: source-repo +`, + expected: `apiVersion: v1 +kind: ConfigMap +metadata: # kpt-merge: /setters-config + name: setters-config +data: + # This should be the name of your Config Controller instance + cluster-name: cluster-name + # This should be the project where you deployed Config Controller + project-id: project-id # project + project-number: "1234567890123" + # You can leave these defaults + namespace: config-control + deployment-repo: deployment-repo + source-repo: source-repo +`, + }, + { + name: "sort data fields configmap but retain order of extra fields", + from: `apiVersion: v1 +kind: ConfigMap +data: + baz: bar + cluster-name: cluster-name + foo: config-control +`, + to: `kind: ConfigMap +apiVersion: v1 +metadata: + name: foo +data: + color: orange + foo: config-control + abc: def + cluster-name: cluster-name +`, + expected: `apiVersion: v1 +kind: ConfigMap +data: + cluster-name: cluster-name + foo: config-control + color: orange + abc: def +metadata: + name: foo +`, + }, + { + name: "sort containers list node with sequence head comments preservation", + from: `apiVersion: apps/v1 +kind: Deployment +metadata: + name: before +spec: + containers: + - name: nginx + # nginx image + image: "nginx:1.16.1" + ports: + - protocol: TCP # tcp protocol + containerPort: 80 +`, + to: `apiVersion: apps/v1 +kind: Deployment +metadata: + name: after +spec: + containers: + # ports comment + - ports: + - containerPort: 80 + protocol: TCP # tcp protocol + # nginx image + image: "nginx:1.16.2" + # nginx container + name: nginx +# end of resource +`, + expected: `apiVersion: apps/v1 +kind: Deployment +metadata: + name: after +spec: + containers: + # ports comment + # nginx container + - name: nginx + # nginx image + image: "nginx:1.16.2" + ports: + - protocol: TCP # tcp protocol + containerPort: 80 +# end of resource +`, + }, + { + name: "Do not alter sequence order", + from: `apiVersion: v1 +kind: KRMFile +metadata: + name: before +pipeline: + mutators: + - image: apply-setters:v0.1 + configPath: setters.yaml + - image: set-namespace:v0.1 + configPath: ns.yaml +`, + to: `apiVersion: v1 +kind: KRMFile +metadata: + name: after +pipeline: + mutators: + - configPath: sr.yaml + image: search-replace:v0.1 + - image: apply-setters:v0.1 + configPath: setters.yaml + - image: set-namespace:v0.1 + configPath: ns.yaml +`, + expected: `apiVersion: v1 +kind: KRMFile +metadata: + name: after +pipeline: + mutators: + - image: search-replace:v0.1 + configPath: sr.yaml + - image: apply-setters:v0.1 + configPath: setters.yaml + - image: set-namespace:v0.1 + configPath: ns.yaml +`, + }, + { + name: "sort fields with null value", + from: `apiVersion: v1 +kind: ConfigMap +metadata: + creationTimestamp: null + name: workspaces.app.terraform.io +`, + to: `apiVersion: v1 +kind: ConfigMap +metadata: + name: workspaces.app.terraform.io + creationTimestamp: null +`, + expected: `apiVersion: v1 +kind: ConfigMap +metadata: + creationTimestamp: null + name: workspaces.app.terraform.io +`, + }, + { + name: "Complex ASM reorder example", + from: `apiVersion: apiextensions.k8s.io/v1beta1 +kind: CustomResourceDefinition +metadata: + annotations: + controller-gen.kubebuilder.io/version: (unknown) + creationTimestamp: null + name: controlplanerevisions.mesh.cloud.google.com +spec: + group: mesh.cloud.google.com + names: + kind: ControlPlaneRevision + listKind: ControlPlaneRevisionList + plural: controlplanerevisions + singular: controlplanerevision + scope: Namespaced + subresources: + status: {} + validation: + openAPIV3Schema: + description: ControlPlaneRevision is the Schema for the ControlPlaneRevision API + properties: + apiVersion: + description: 'APIVersion' + type: string + kind: + description: 'Kind' + type: string + metadata: + type: object + spec: + description: ControlPlaneRevisionSpec defines the desired state of ControlPlaneRevision + properties: + channel: + description: ReleaseChannel determines the aggressiveness of upgrades. + enum: + - regular + - rapid + - stable + type: string + type: + description: ControlPlaneRevisionType determines how the revision should be managed. + enum: + - managed_service + type: string + type: object + status: + description: ControlPlaneRevisionStatus defines the observed state of ControlPlaneRevision. + properties: + conditions: + items: + description: ControlPlaneRevisionCondition is a repeated struct definining the current conditions of a ControlPlaneRevision. + properties: + lastTransitionTime: + description: Last time the condition transitioned from one status to another + format: date-time + type: string + message: + description: Human-readable message indicating details about last transition + type: string + reason: + description: Unique, one-word, CamelCase reason for the condition's last transition + type: string + status: + description: Status is the status of the condition. Can be True, False, or Unknown. + type: string + type: + description: Type is the type of the condition. + type: string + type: object + type: array + type: object + type: object + version: v1alpha1 + versions: + - name: v1alpha1 + served: true + storage: true +status: + acceptedNames: + kind: "" + plural: "" + conditions: [] + storedVersions: [] +`, + to: `apiVersion: apiextensions.k8s.io/v1beta1 +kind: CustomResourceDefinition +metadata: + name: controlplanerevisions.mesh.cloud.google.com + annotations: + controller-gen.kubebuilder.io/version: (unknown) + creationTimestamp: null +spec: + group: mesh.cloud.google.com + names: + kind: ControlPlaneRevision + listKind: ControlPlaneRevisionList + plural: controlplanerevisions + singular: controlplanerevision + scope: Namespaced + subresources: + status: {} + validation: + openAPIV3Schema: + type: object + description: ControlPlaneRevision is the Schema for the ControlPlaneRevision API + properties: + apiVersion: + type: string + description: 'APIVersion' + kind: + type: string + description: 'Kind' + metadata: + type: object + spec: + type: object + description: ControlPlaneRevisionSpec defines the desired state of ControlPlaneRevision + properties: + type: + type: string + description: ControlPlaneRevisionType determines how the revision should be managed. + enum: + - managed_service + channel: + type: string + description: ReleaseChannel determines the aggressiveness of upgrades. + enum: + - regular + - rapid + - stable + status: + type: object + description: ControlPlaneRevisionStatus defines the observed state of ControlPlaneRevision. + properties: + conditions: + type: array + items: + type: object + description: ControlPlaneRevisionCondition is a repeated struct definining the current conditions of a ControlPlaneRevision. + properties: + type: + type: string + description: Type is the type of the condition. + status: + type: string + description: Status is the status of the condition. Can be True, False, or Unknown. + lastTransitionTime: + type: string + description: Last time the condition transitioned from one status to another + format: date-time + message: + type: string + description: Human-readable message indicating details about last transition + reason: + type: string + description: Unique, one-word, CamelCase reason for the condition's last transition + version: v1alpha1 + versions: + - name: v1alpha1 + served: true + storage: true +status: + acceptedNames: + kind: "" + plural: "" + conditions: [] + storedVersions: [] +`, + expected: `test.from`, + }, + } + + for i := range testCases { + tc := testCases[i] + t.Run(tc.name, func(t *testing.T) { + from, err := yaml.Parse(tc.from) + if !assert.NoError(t, err) { + t.FailNow() + } + + to, err := yaml.Parse(tc.to) + if !assert.NoError(t, err) { + t.FailNow() + } + + err = SyncOrder(from, to) + if !assert.NoError(t, err) { + t.FailNow() + } + + out := &bytes.Buffer{} + kio.ByteWriter{ + Writer: out, + KeepReaderAnnotations: false, + }.Write([]*yaml.RNode{to}) + + // this means "to" is just a reordered version of "from" and after syncing order, + // resultant "to" must be equal to "from" + if tc.expected == "test.from" { + tc.expected = tc.from + } + + if !assert.Equal(t, tc.expected, out.String()) { + t.FailNow() + } + + actualFrom, err := from.String() + if !assert.NoError(t, err) { + t.FailNow() + } + + if !assert.Equal(t, strings.TrimSpace(tc.from), strings.TrimSpace(actualFrom)) { + t.FailNow() + } + }) + } +} diff --git a/go/internal/forked/kyaml/pathutil/pathutil.go b/go/internal/forked/kyaml/pathutil/pathutil.go new file mode 100644 index 000000000..a4fb718be --- /dev/null +++ b/go/internal/forked/kyaml/pathutil/pathutil.go @@ -0,0 +1,39 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package pathutil + +import ( + "os" + "path/filepath" +) + +// DirsWithFile takes the root directory path and returns all the paths of +// sub-directories(including itself) which contain file with input fileName +// at top level if recurse is true +func DirsWithFile(root, fileName string, recurse bool) ([]string, error) { + var res []string + if !recurse { + // check if the file with fileName is present in root and return it + // else return empty list + _, err := os.Stat(filepath.Join(root, fileName)) + if !os.IsNotExist(err) { + res = append(res, filepath.Clean(root)) + } + return res, nil + } + err := filepath.Walk(root, + func(path string, info os.FileInfo, err error) error { + if err != nil { + return err + } + if filepath.Base(path) == fileName { + res = append(res, filepath.Dir(path)) + } + return nil + }) + if err != nil { + return res, err + } + return res, nil +} diff --git a/go/internal/forked/kyaml/pathutil/pathutil_test.go b/go/internal/forked/kyaml/pathutil/pathutil_test.go new file mode 100644 index 000000000..6069a581f --- /dev/null +++ b/go/internal/forked/kyaml/pathutil/pathutil_test.go @@ -0,0 +1,98 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package pathutil + +import ( + "io/ioutil" + "os" + "path/filepath" + "testing" + + "github.com/stretchr/testify/assert" +) + +func TestSubDirsWithFile(t *testing.T) { + var tests = []struct { + name string + fileName string + recurse bool + outFilesCount int + }{ + { + name: "dirs-with-file-recurse", + fileName: "Krmfile", + outFilesCount: 3, + recurse: true, + }, + { + name: "dirs-with-non-existent-file-recurse", + fileName: "non-existent-file.txt", + outFilesCount: 0, + recurse: true, + }, + { + name: "dir-with-file-no-recurse", + fileName: "Krmfile", + outFilesCount: 1, + recurse: false, + }, + } + + dir, err := ioutil.TempDir("", "") + if !assert.NoError(t, err) { + t.FailNow() + } + defer os.RemoveAll(dir) + err = createTestDirStructure(dir) + if !assert.NoError(t, err) { + t.FailNow() + } + + for i := range tests { + test := tests[i] + t.Run(test.name, func(t *testing.T) { + res, err := DirsWithFile(dir, test.fileName, test.recurse) + if !assert.NoError(t, err) { + t.FailNow() + } + if !assert.Equal(t, test.outFilesCount, len(res)) { + t.FailNow() + } + }) + } +} + +func createTestDirStructure(dir string) error { + /* + Adds the folders to the input dir with following structure + dir + ├── Krmfile + ├── subpkg1 + │   ├── Krmfile + │   └── subdir1 + └── subpkg2 + └── Krmfile + */ + err := os.MkdirAll(filepath.Join(dir, "subpkg1/subdir1"), 0777|os.ModeDir) + if err != nil { + return err + } + err = os.MkdirAll(filepath.Join(dir, "subpkg2"), 0777|os.ModeDir) + if err != nil { + return err + } + err = ioutil.WriteFile(filepath.Join(dir, "subpkg1", "Krmfile"), []byte(""), 0777) + if err != nil { + return err + } + err = ioutil.WriteFile(filepath.Join(dir, "subpkg2", "Krmfile"), []byte(""), 0777) + if err != nil { + return err + } + err = ioutil.WriteFile(filepath.Join(dir, "Krmfile"), []byte(""), 0777) + if err != nil { + return err + } + return nil +} diff --git a/go/internal/forked/kyaml/resid/gvk.go b/go/internal/forked/kyaml/resid/gvk.go new file mode 100644 index 000000000..46fb4115c --- /dev/null +++ b/go/internal/forked/kyaml/resid/gvk.go @@ -0,0 +1,235 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package resid + +import ( + "strings" + + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/openapi" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" +) + +// Gvk identifies a Kubernetes API type. +// https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/api-group.md +type Gvk struct { + Group string `json:"group,omitempty" yaml:"group,omitempty"` + Version string `json:"version,omitempty" yaml:"version,omitempty"` + Kind string `json:"kind,omitempty" yaml:"kind,omitempty"` + // isClusterScoped is true if the object is known, per the openapi + // data in use, to be cluster scoped, and false otherwise. + isClusterScoped bool +} + +func NewGvk(g, v, k string) Gvk { + result := Gvk{Group: g, Version: v, Kind: k} + result.isClusterScoped = + openapi.IsCertainlyClusterScoped(result.AsTypeMeta()) + return result +} + +func GvkFromNode(r *yaml.RNode) Gvk { + g, v := ParseGroupVersion(r.GetApiVersion()) + return NewGvk(g, v, r.GetKind()) +} + +// FromKind makes a Gvk with only the kind specified. +func FromKind(k string) Gvk { + return NewGvk("", "", k) +} + +// ParseGroupVersion parses a KRM metadata apiVersion field. +func ParseGroupVersion(apiVersion string) (group, version string) { + if i := strings.Index(apiVersion, "/"); i > -1 { + return apiVersion[:i], apiVersion[i+1:] + } + return "", apiVersion +} + +// GvkFromString makes a Gvk from the output of Gvk.String(). +func GvkFromString(s string) Gvk { + values := strings.Split(s, fieldSep) + if len(values) < 3 { + // ...then the string didn't come from Gvk.String(). + return Gvk{ + Group: noGroup, + Version: noVersion, + Kind: noKind, + } + } + k := values[0] + if k == noKind { + k = "" + } + v := values[1] + if v == noVersion { + v = "" + } + g := strings.Join(values[2:], fieldSep) + if g == noGroup { + g = "" + } + return NewGvk(g, v, k) +} + +// Values that are brief but meaningful in logs. +const ( + noGroup = "[noGrp]" + noVersion = "[noVer]" + noKind = "[noKind]" + fieldSep = "." +) + +// String returns a string representation of the GVK. +func (x Gvk) String() string { + g := x.Group + if g == "" { + g = noGroup + } + v := x.Version + if v == "" { + v = noVersion + } + k := x.Kind + if k == "" { + k = noKind + } + return strings.Join([]string{k, v, g}, fieldSep) +} + +// ApiVersion returns the combination of Group and Version +func (x Gvk) ApiVersion() string { + var sb strings.Builder + if x.Group != "" { + sb.WriteString(x.Group) + sb.WriteString("/") + } + sb.WriteString(x.Version) + return sb.String() +} + +// StringWoEmptyField returns a string representation of the GVK. Non-exist +// fields will be omitted. This is called when generating a filename for the +// resource. +func (x Gvk) StringWoEmptyField() string { + var s []string + if x.Group != "" { + s = append(s, x.Group) + } + if x.Version != "" { + s = append(s, x.Version) + } + if x.Kind != "" { + s = append(s, x.Kind) + } + return strings.Join(s, "_") +} + +// Equals returns true if the Gvk's have equal fields. +func (x Gvk) Equals(o Gvk) bool { + return x.Group == o.Group && x.Version == o.Version && x.Kind == o.Kind +} + +// An attempt to order things to help k8s, e.g. +// a Service should come before things that refer to it. +// Namespace should be first. +// In some cases order just specified to provide determinism. +var orderFirst = []string{ + "Namespace", + "ResourceQuota", + "StorageClass", + "CustomResourceDefinition", + "ServiceAccount", + "PodSecurityPolicy", + "Role", + "ClusterRole", + "RoleBinding", + "ClusterRoleBinding", + "ConfigMap", + "Secret", + "Endpoints", + "Service", + "LimitRange", + "PriorityClass", + "PersistentVolume", + "PersistentVolumeClaim", + "Deployment", + "StatefulSet", + "CronJob", + "PodDisruptionBudget", +} +var orderLast = []string{ + "MutatingWebhookConfiguration", + "ValidatingWebhookConfiguration", +} +var typeOrders = func() map[string]int { + m := map[string]int{} + for i, n := range orderFirst { + m[n] = -len(orderFirst) + i + } + for i, n := range orderLast { + m[n] = 1 + i + } + return m +}() + +// IsLessThan returns true if self is less than the argument. +func (x Gvk) IsLessThan(o Gvk) bool { + indexI := typeOrders[x.Kind] + indexJ := typeOrders[o.Kind] + if indexI != indexJ { + return indexI < indexJ + } + return x.String() < o.String() +} + +// IsSelected returns true if `selector` selects `x`; otherwise, false. +// If `selector` and `x` are the same, return true. +// If `selector` is nil, it is considered a wildcard match, returning true. +// If selector fields are empty, they are considered wildcards matching +// anything in the corresponding fields, e.g. +// +// this item: +// +// +// is selected by +// +// +// but rejected by +// +// +func (x Gvk) IsSelected(selector *Gvk) bool { + if selector == nil { + return true + } + if len(selector.Group) > 0 { + if x.Group != selector.Group { + return false + } + } + if len(selector.Version) > 0 { + if x.Version != selector.Version { + return false + } + } + if len(selector.Kind) > 0 { + if x.Kind != selector.Kind { + return false + } + } + return true +} + +// AsTypeMeta returns a yaml.TypeMeta from x's information. +func (x Gvk) AsTypeMeta() yaml.TypeMeta { + return yaml.TypeMeta{ + APIVersion: x.ApiVersion(), + Kind: x.Kind, + } +} + +// IsClusterScoped returns true if the Gvk is certainly cluster scoped +// with respect to the available openapi data. +func (x Gvk) IsClusterScoped() bool { + return x.isClusterScoped +} diff --git a/go/internal/forked/kyaml/resid/gvk_test.go b/go/internal/forked/kyaml/resid/gvk_test.go new file mode 100644 index 000000000..fde617e8c --- /dev/null +++ b/go/internal/forked/kyaml/resid/gvk_test.go @@ -0,0 +1,313 @@ +// Copyright 2018 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package resid + +import ( + "testing" + + "github.com/stretchr/testify/assert" +) + +var equalsTests = []struct { + x1 Gvk + x2 Gvk +}{ + {Gvk{Group: "a", Version: "b", Kind: "c"}, + Gvk{Group: "a", Version: "b", Kind: "c"}}, + {Gvk{Version: "b", Kind: "c"}, + Gvk{Version: "b", Kind: "c"}}, + {Gvk{Kind: "c"}, + Gvk{Kind: "c"}}, +} + +func TestEquals(t *testing.T) { + for _, hey := range equalsTests { + if !hey.x1.Equals(hey.x2) { + t.Fatalf("%v should equal %v", hey.x1, hey.x2) + } + } +} + +var lessThanTests = []struct { + x1 Gvk + x2 Gvk +}{ + {Gvk{Group: "a", Version: "b", Kind: "CustomResourceDefinition"}, + Gvk{Group: "a", Version: "b", Kind: "RoleBinding"}}, + {Gvk{Group: "a", Version: "b", Kind: "Namespace"}, + Gvk{Group: "a", Version: "b", Kind: "ClusterRole"}}, + {Gvk{Group: "a", Version: "b", Kind: "a"}, + Gvk{Group: "a", Version: "b", Kind: "b"}}, + {Gvk{Group: "a", Version: "b", Kind: "Namespace"}, + Gvk{Group: "a", Version: "c", Kind: "Namespace"}}, + {Gvk{Group: "a", Version: "c", Kind: "Namespace"}, + Gvk{Group: "b", Version: "c", Kind: "Namespace"}}, + {Gvk{Group: "b", Version: "c", Kind: "Namespace"}, + Gvk{Group: "a", Version: "c", Kind: "ClusterRole"}}, + {Gvk{Group: "a", Version: "c", Kind: "Namespace"}, + Gvk{Group: "a", Version: "b", Kind: "ClusterRole"}}, + {Gvk{Group: "b", Version: "c", Kind: "Namespace"}, + Gvk{Group: "a", Version: "d", Kind: "Namespace"}}, + {Gvk{Group: "a", Version: "b", Kind: orderFirst[len(orderFirst)-1]}, + Gvk{Group: "a", Version: "b", Kind: orderLast[0]}}, + {Gvk{Group: "a", Version: "b", Kind: orderFirst[len(orderFirst)-1]}, + Gvk{Group: "a", Version: "b", Kind: "CustomKindX"}}, + {Gvk{Group: "a", Version: "b", Kind: "CustomKindX"}, + Gvk{Group: "a", Version: "b", Kind: orderLast[0]}}, + {Gvk{Group: "a", Version: "b", Kind: "CustomKindA"}, + Gvk{Group: "a", Version: "b", Kind: "CustomKindB"}}, + {Gvk{Group: "a", Version: "b", Kind: "CustomKindX"}, + Gvk{Group: "a", Version: "b", Kind: "MutatingWebhookConfiguration"}}, + {Gvk{Group: "a", Version: "b", Kind: "MutatingWebhookConfiguration"}, + Gvk{Group: "a", Version: "b", Kind: "ValidatingWebhookConfiguration"}}, + {Gvk{Group: "a", Version: "b", Kind: "CustomKindX"}, + Gvk{Group: "a", Version: "b", Kind: "ValidatingWebhookConfiguration"}}, + {Gvk{Group: "a", Version: "b", Kind: "APIService"}, + Gvk{Group: "a", Version: "b", Kind: "ValidatingWebhookConfiguration"}}, + {Gvk{Group: "a", Version: "b", Kind: "Service"}, + Gvk{Group: "a", Version: "b", Kind: "APIService"}}, + {Gvk{Group: "a", Version: "b", Kind: "Endpoints"}, + Gvk{Group: "a", Version: "b", Kind: "Service"}}, +} + +func TestIsLessThan1(t *testing.T) { + for _, hey := range lessThanTests { + if !hey.x1.IsLessThan(hey.x2) { + t.Fatalf("%v should be less than %v", hey.x1, hey.x2) + } + if hey.x2.IsLessThan(hey.x1) { + t.Fatalf("%v should not be less than %v", hey.x2, hey.x1) + } + } +} + +var stringTests = []struct { + x Gvk + s string + r string +}{ + {Gvk{}, "[noKind].[noVer].[noGrp]", ""}, + {Gvk{Kind: "k"}, "k.[noVer].[noGrp]", "k"}, + {Gvk{Version: "v"}, "[noKind].v.[noGrp]", "v"}, + {Gvk{Version: "v", Kind: "k"}, "k.v.[noGrp]", "v_k"}, + {Gvk{Group: "g"}, "[noKind].[noVer].g", "g"}, + {Gvk{Group: "g", Kind: "k"}, "k.[noVer].g", "g_k"}, + {Gvk{Group: "g", Version: "v"}, "[noKind].v.g", "g_v"}, + {Gvk{Group: "g", Version: "v", Kind: "k"}, "k.v.g", "g_v_k"}, + {Gvk{Group: "rbac.authorization.k8s.io", Version: "v1", Kind: "ClusterRole", isClusterScoped: true}, + "ClusterRole.v1.rbac.authorization.k8s.io", "rbac.authorization.k8s.io_v1_ClusterRole"}, +} + +func TestString(t *testing.T) { + for _, hey := range stringTests { + assert.Equal(t, hey.s, hey.x.String()) + } +} + +func TestGvkFromString(t *testing.T) { + for _, hey := range stringTests { + assert.Equal(t, hey.x, GvkFromString(hey.s)) + } +} + +func TestApiVersion(t *testing.T) { + for _, hey := range []struct { + x Gvk + exp string + }{ + {Gvk{}, ""}, + {Gvk{Kind: "k"}, ""}, + {Gvk{Version: "v"}, "v"}, + {Gvk{Version: "v", Kind: "k"}, "v"}, + {Gvk{Group: "g"}, "g/"}, + {Gvk{Group: "g", Kind: "k"}, "g/"}, + {Gvk{Group: "g", Version: "v"}, "g/v"}, + {Gvk{Group: "g", Version: "v", Kind: "k"}, "g/v"}, + } { + assert.Equal(t, hey.exp, hey.x.ApiVersion()) + } +} + +func TestStringWoEmptyField(t *testing.T) { + for _, hey := range stringTests { + assert.Equal(t, hey.r, hey.x.StringWoEmptyField()) + } +} + +func TestParseGroupVersion(t *testing.T) { + tests := []struct { + input string + g string + v string + }{ + {input: "", g: "", v: ""}, + {input: "v1", g: "", v: "v1"}, + {input: "apps/v1", g: "apps", v: "v1"}, + {input: "/v1", g: "", v: "v1"}, + {input: "apps/", g: "apps", v: ""}, + {input: "/apps/", g: "", v: "apps/"}, + } + for _, tc := range tests { + g, v := ParseGroupVersion(tc.input) + assert.Equal(t, tc.g, g, tc.input) + assert.Equal(t, tc.v, v, tc.input) + } +} + +func TestSelectByGVK(t *testing.T) { + type testCase struct { + description string + in Gvk + filter *Gvk + expected bool + } + testCases := []testCase{ + { + description: "nil filter", + in: Gvk{}, + filter: nil, + expected: true, + }, + { + description: "gvk matches", + in: Gvk{ + Group: "group1", + Version: "version1", + Kind: "kind1", + }, + filter: &Gvk{ + Group: "group1", + Version: "version1", + Kind: "kind1", + }, + expected: true, + }, + { + description: "group doesn't matches", + in: Gvk{ + Group: "group1", + Version: "version1", + Kind: "kind1", + }, + filter: &Gvk{ + Group: "group2", + Version: "version1", + Kind: "kind1", + }, + expected: false, + }, + { + description: "version doesn't matches", + in: Gvk{ + Group: "group1", + Version: "version1", + Kind: "kind1", + }, + filter: &Gvk{ + Group: "group1", + Version: "version2", + Kind: "kind1", + }, + expected: false, + }, + { + description: "kind doesn't matches", + in: Gvk{ + Group: "group1", + Version: "version1", + Kind: "kind1", + }, + filter: &Gvk{ + Group: "group1", + Version: "version1", + Kind: "kind2", + }, + expected: false, + }, + { + description: "no version in filter", + in: Gvk{ + Group: "group1", + Version: "version1", + Kind: "kind1", + }, + filter: &Gvk{ + Group: "group1", + Version: "", + Kind: "kind1", + }, + expected: true, + }, + { + description: "only kind is set in filter", + in: Gvk{ + Group: "group1", + Version: "version1", + Kind: "kind1", + }, + filter: &Gvk{ + Group: "", + Version: "", + Kind: "kind1", + }, + expected: true, + }, + } + + for _, tc := range testCases { + filtered := tc.in.IsSelected(tc.filter) + assert.Equal(t, tc.expected, filtered, tc.description) + } +} + +func TestIsClusterScoped(t *testing.T) { + testCases := []struct { + name string + gvk Gvk + isClusterScoped bool + }{ + { + "deployment is namespaceable", + NewGvk("apps", "v1", "Deployment"), + false, + }, + { + "clusterscoped resource", + NewGvk("", "v1", "Namespace"), + true, + }, + { + "unknown resource (should default to namespaceable)", + NewGvk("example1.com", "v1", "BoatyMcBoatface"), + false, + }, + { + "node is cluster scoped", + NewGvk("", "v1", "Node"), + true, + }, + { + "Role is namespace scoped", + NewGvk("rbac.authorization.k8s.io", "v1", "Role"), + false, + }, + { + "ClusterRole is cluster scoped", + NewGvk("rbac.authorization.k8s.io", "v1", "ClusterRole"), + true, + }, + { + "ClusterRoleBinding is cluster scoped", + NewGvk("rbac.authorization.k8s.io", "v1", "ClusterRoleBinding"), + true, + }, + } + + for i := range testCases { + test := testCases[i] + t.Run(test.name, func(t *testing.T) { + assert.Equal(t, test.isClusterScoped, test.gvk.IsClusterScoped()) + }) + } +} diff --git a/go/internal/forked/kyaml/resid/resid.go b/go/internal/forked/kyaml/resid/resid.go new file mode 100644 index 000000000..d720a4ed9 --- /dev/null +++ b/go/internal/forked/kyaml/resid/resid.go @@ -0,0 +1,145 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package resid + +import ( + "reflect" + "strings" + + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" +) + +// ResId is an identifier of a k8s resource object. +type ResId struct { + // Gvk of the resource. + Gvk `json:",inline,omitempty" yaml:",inline,omitempty"` + + // Name of the resource. + Name string `json:"name,omitempty" yaml:"name,omitempty"` + + // Namespace the resource belongs to, if it can belong to a namespace. + Namespace string `json:"namespace,omitempty" yaml:"namespace,omitempty"` +} + +// NewResIdWithNamespace creates new ResId +// in a given namespace. +func NewResIdWithNamespace(k Gvk, n, ns string) ResId { + return ResId{Gvk: k, Name: n, Namespace: ns} +} + +// NewResId creates new ResId. +func NewResId(k Gvk, n string) ResId { + return NewResIdWithNamespace(k, n, "") +} + +// NewResIdKindOnly creates a new ResId. +func NewResIdKindOnly(k string, n string) ResId { + return NewResId(FromKind(k), n) +} + +const ( + noNamespace = "[noNs]" + noName = "[noName]" + separator = "/" + TotallyNotANamespace = "_non_namespaceable_" + DefaultNamespace = "default" +) + +// String of ResId based on GVK, name and prefix +func (id ResId) String() string { + ns := id.Namespace + if ns == "" { + ns = noNamespace + } + nm := id.Name + if nm == "" { + nm = noName + } + return strings.Join( + []string{id.Gvk.String(), strings.Join([]string{nm, ns}, fieldSep)}, separator) +} + +func FromString(s string) ResId { + values := strings.Split(s, separator) + gvk := GvkFromString(values[0]) + + values = strings.Split(values[1], fieldSep) + last := len(values) - 1 + + ns := values[last] + if ns == noNamespace { + ns = "" + } + nm := strings.Join(values[:last], fieldSep) + if nm == noName { + nm = "" + } + return ResId{ + Gvk: gvk, + Namespace: ns, + Name: nm, + } +} + +// FromRNode returns the ResId for the RNode +func FromRNode(rn *yaml.RNode) ResId { + group, version := ParseGroupVersion(rn.GetApiVersion()) + return NewResIdWithNamespace( + Gvk{Group: group, Version: version, Kind: rn.GetKind()}, rn.GetName(), rn.GetNamespace()) +} + +// GvknEquals returns true if the other id matches +// Group/Version/Kind/name. +func (id ResId) GvknEquals(o ResId) bool { + return id.Name == o.Name && id.Gvk.Equals(o.Gvk) +} + +// IsSelectedBy returns true if self is selected by the argument. +func (id ResId) IsSelectedBy(selector ResId) bool { + return (selector.Name == "" || selector.Name == id.Name) && + (selector.Namespace == "" || selector.IsNsEquals(id)) && + id.Gvk.IsSelected(&selector.Gvk) +} + +// Equals returns true if the other id matches +// namespace/Group/Version/Kind/name. +func (id ResId) Equals(o ResId) bool { + return id.IsNsEquals(o) && id.GvknEquals(o) +} + +// IsNsEquals returns true if the id is in +// the same effective namespace. +func (id ResId) IsNsEquals(o ResId) bool { + return id.EffectiveNamespace() == o.EffectiveNamespace() +} + +// IsInDefaultNs returns true if id is a namespaceable +// ResId and the Namespace is either not set or set +// to DefaultNamespace. +func (id ResId) IsInDefaultNs() bool { + return !id.IsClusterScoped() && id.isPutativelyDefaultNs() +} + +func (id ResId) isPutativelyDefaultNs() bool { + return id.Namespace == "" || id.Namespace == DefaultNamespace +} + +// EffectiveNamespace returns a non-ambiguous, non-empty +// namespace for use in reporting and equality tests. +func (id ResId) EffectiveNamespace() string { + // The order of these checks matters. + if id.IsClusterScoped() { + return TotallyNotANamespace + } + if id.isPutativelyDefaultNs() { + return DefaultNamespace + } + return id.Namespace +} + +// IsEmpty returns true of all of the id's fields are +// empty strings +func (id ResId) IsEmpty() bool { + return reflect.DeepEqual(id, ResId{}) +} diff --git a/go/internal/forked/kyaml/resid/resid_test.go b/go/internal/forked/kyaml/resid/resid_test.go new file mode 100644 index 000000000..08d5c4ad6 --- /dev/null +++ b/go/internal/forked/kyaml/resid/resid_test.go @@ -0,0 +1,447 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package resid + +import ( + "testing" +) + +var resIdStringTests = []struct { + x ResId + s string +}{ + { + ResId{ + Namespace: "ns", + Gvk: Gvk{Group: "g", Version: "v", Kind: "k"}, + Name: "nm", + }, + "k.v.g/nm.ns", + }, + { + ResId{ + Namespace: "ns", + Gvk: Gvk{Version: "v", Kind: "k"}, + Name: "nm", + }, + "k.v.[noGrp]/nm.ns", + }, + { + ResId{ + Namespace: "ns", + Gvk: Gvk{Kind: "k"}, + Name: "nm", + }, + "k.[noVer].[noGrp]/nm.ns", + }, + { + ResId{ + Namespace: "ns", + Gvk: Gvk{}, + Name: "nm", + }, + "[noKind].[noVer].[noGrp]/nm.ns", + }, + { + ResId{ + Gvk: Gvk{}, + Name: "nm", + }, + "[noKind].[noVer].[noGrp]/nm.[noNs]", + }, + { + ResId{ + Gvk: Gvk{}, + }, + "[noKind].[noVer].[noGrp]/[noName].[noNs]", + }, + { + ResId{}, + "[noKind].[noVer].[noGrp]/[noName].[noNs]", + }, +} + +func TestResIdString(t *testing.T) { + for _, hey := range resIdStringTests { + if hey.x.String() != hey.s { + t.Fatalf("Actual: %v, Expected: '%s'", hey.x, hey.s) + } + } +} + +func TestResIdEquals(t *testing.T) { + var GvknEqualsTest = []struct { + id1 ResId + id2 ResId + gVknResult bool + nsEquals bool + equals bool + }{ + { + id1: ResId{ + Namespace: "X", + Gvk: Gvk{Group: "g", Version: "v", Kind: "k"}, + Name: "nm", + }, + id2: ResId{ + Namespace: "X", + Gvk: Gvk{Group: "g", Version: "v", Kind: "k"}, + Name: "nm", + }, + gVknResult: true, + nsEquals: true, + equals: true, + }, + { + id1: ResId{ + Namespace: "X", + Gvk: Gvk{Group: "g", Version: "v", Kind: "k"}, + Name: "nm", + }, + id2: ResId{ + Namespace: "Z", + Gvk: Gvk{Group: "g", Version: "v", Kind: "k"}, + Name: "nm", + }, + gVknResult: true, + nsEquals: false, + equals: false, + }, + { + id1: ResId{ + Namespace: "X", + Gvk: Gvk{Group: "g", Version: "v", Kind: "k"}, + Name: "nm", + }, + id2: ResId{ + Gvk: Gvk{Group: "g", Version: "v", Kind: "k"}, + Name: "nm", + }, + gVknResult: true, + nsEquals: false, + equals: false, + }, + { + id1: ResId{ + Namespace: "X", + Gvk: Gvk{Version: "v", Kind: "k"}, + Name: "nm", + }, + id2: ResId{ + Namespace: "Z", + Gvk: Gvk{Version: "v", Kind: "k"}, + Name: "nm", + }, + gVknResult: true, + nsEquals: false, + equals: false, + }, + { + id1: ResId{ + Namespace: "X", + Gvk: Gvk{Kind: "k"}, + Name: "nm", + }, + id2: ResId{ + Namespace: "Z", + Gvk: Gvk{Kind: "k"}, + Name: "nm", + }, + gVknResult: true, + nsEquals: false, + equals: false, + }, + { + id1: ResId{ + Gvk: Gvk{Kind: "k"}, + Name: "nm", + }, + id2: ResId{ + Gvk: Gvk{Kind: "k"}, + Name: "nm2", + }, + gVknResult: false, + nsEquals: true, + equals: false, + }, + { + id1: ResId{ + Gvk: Gvk{Kind: "k"}, + Name: "nm", + }, + id2: ResId{ + Gvk: Gvk{Kind: "Node"}, + Name: "nm", + }, + gVknResult: false, + nsEquals: true, + equals: false, + }, + { + id1: ResId{ + Gvk: Gvk{Kind: "Node"}, + Name: "nm1", + }, + id2: ResId{ + Gvk: Gvk{Kind: "Node"}, + Name: "nm2", + }, + gVknResult: false, + nsEquals: true, + equals: false, + }, + { + id1: ResId{ + Namespace: "default", + Gvk: Gvk{Kind: "k"}, + Name: "nm1", + }, + id2: ResId{ + Gvk: Gvk{Kind: "k"}, + Name: "nm2", + }, + gVknResult: false, + nsEquals: true, + equals: false, + }, + { + id1: ResId{ + Namespace: "X", + Name: "nm", + }, + id2: ResId{ + Namespace: "Z", + Name: "nm", + }, + gVknResult: true, + nsEquals: false, + equals: false, + }, + } + + for _, tst := range GvknEqualsTest { + if tst.id1.GvknEquals(tst.id2) != tst.gVknResult { + t.Fatalf("GvknEquals(\n%v,\n%v\n) should be %v", + tst.id1, tst.id2, tst.gVknResult) + } + if tst.id1.IsNsEquals(tst.id2) != tst.nsEquals { + t.Fatalf("IsNsEquals(\n%v,\n%v\n) should be %v", + tst.id1, tst.id2, tst.equals) + } + if tst.id1.Equals(tst.id2) != tst.equals { + t.Fatalf("Equals(\n%v,\n%v\n) should be %v", + tst.id1, tst.id2, tst.equals) + } + } +} + +var ids = []ResId{ + { + Namespace: "ns", + Gvk: Gvk{Group: "g", Version: "v", Kind: "k"}, + Name: "nm", + }, + { + Namespace: "ns", + Gvk: Gvk{Version: "v", Kind: "k"}, + Name: "nm", + }, + { + Namespace: "ns", + Gvk: Gvk{Kind: "k"}, + Name: "nm", + }, + { + Namespace: "ns", + Gvk: Gvk{}, + Name: "nm", + }, + { + Gvk: Gvk{}, + Name: "nm", + }, + { + Gvk: Gvk{}, + Name: "nm", + }, + { + Gvk: Gvk{}, + }, + { + Gvk: Gvk{ + Group: "rbac.authorization.k8s.io", + Version: "v1", + Kind: "ClusterRole", + isClusterScoped: true, + }, + Name: "nm", + }, + { + Gvk: Gvk{ + Group: "rbac.authorization.k8s.io", + Version: "v1", + Kind: "ClusterRole", + isClusterScoped: true, + }, + Name: "my.name", + }, +} + +func TestResIdIsSelected(t *testing.T) { + type selectable struct { + id ResId + expectSelected bool + } + var testCases = []struct { + selector ResId + selectables []selectable + }{ + { + selector: ResId{ + Namespace: "X", + Name: "nm", + Gvk: Gvk{Group: "g", Version: "v", Kind: "k"}, + }, + selectables: []selectable{ + { + id: ResId{ + Namespace: "X", + Name: "nm", + Gvk: Gvk{Group: "g", Version: "v", Kind: "k"}, + }, + expectSelected: true, + }, + { + id: ResId{ + Namespace: "x", + Name: "nm", + Gvk: Gvk{Group: "g", Version: "v", Kind: "k"}, + }, + expectSelected: false, + }, + { + id: ResId{ + Name: "nm", + Gvk: Gvk{Group: "g", Version: "v", Kind: "k"}, + }, + expectSelected: false, + }, + }, + }, + { + selector: ResId{ + /* Namespace wildcard */ + Name: "nm", + Gvk: Gvk{Group: "g" /* Version wildcard */, Kind: "k"}, + }, + selectables: []selectable{ + { + id: ResId{ + Namespace: "X", + Name: "nm", + Gvk: Gvk{Group: "g", Version: "v", Kind: "k"}, + }, + expectSelected: true, + }, + { + id: ResId{ + Namespace: "x", + Name: "nm", + Gvk: Gvk{Group: "g", Version: "v", Kind: "k"}, + }, + expectSelected: true, + }, + { + id: ResId{ + Name: "nm", + Gvk: Gvk{Group: "g", Version: "VVV", Kind: "k"}, + }, + expectSelected: true, + }, + }, + }, + } + + for _, tst := range testCases { + for _, pair := range tst.selectables { + if pair.id.IsSelectedBy(tst.selector) { + if !pair.expectSelected { + t.Fatalf( + "expected id %s to NOT be selected by %s", + pair.id, tst.selector) + } + } else { + if pair.expectSelected { + t.Fatalf( + "expected id %s to be selected by %s", + pair.id, tst.selector) + } + } + } + } +} + +func TestFromString(t *testing.T) { + for _, id := range ids { + newId := FromString(id.String()) + if newId != id { + t.Fatalf("Actual: %v, Expected: '%s'", newId, id) + } + } +} + +func TestEffectiveNamespace(t *testing.T) { + var testCases = map[string]struct { + id ResId + expected string + }{ + "tst1": { + id: ResId{ + Gvk: NewGvk("", "v1", "Node"), + Name: "nm", + }, + expected: TotallyNotANamespace, + }, + "tst2": { + id: ResId{ + Namespace: "foo", + Gvk: NewGvk("", "v1", "Node"), + Name: "nm", + }, + expected: TotallyNotANamespace, + }, + "tst3": { + id: ResId{ + Namespace: "foo", + Gvk: NewGvk("g", "v", "k"), + Name: "nm", + }, + expected: "foo", + }, + "tst4": { + id: ResId{ + Namespace: "", + Gvk: NewGvk("g", "v", "k"), + Name: "nm", + }, + expected: DefaultNamespace, + }, + "tst5": { + id: ResId{ + Gvk: Gvk{Group: "g", Version: "v", Kind: "k"}, + Name: "nm", + }, + expected: DefaultNamespace, + }, + } + + for n, tst := range testCases { + t.Run(n, func(t *testing.T) { + if actual := tst.id.EffectiveNamespace(); actual != tst.expected { + t.Fatalf("EffectiveNamespace was %s, expected %s", + actual, tst.expected) + } + }) + } +} diff --git a/go/internal/forked/kyaml/runfn/runfn.go b/go/internal/forked/kyaml/runfn/runfn.go new file mode 100644 index 000000000..6abc4556e --- /dev/null +++ b/go/internal/forked/kyaml/runfn/runfn.go @@ -0,0 +1,537 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package runfn + +import ( + "fmt" + "io" + "os" + "os/user" + "path" + "path/filepath" + "sort" + "strconv" + "strings" + "sync/atomic" + + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/errors" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/fn/runtime/container" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/fn/runtime/exec" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/fn/runtime/runtimeutil" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/fn/runtime/starlark" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/kio" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/kio/kioutil" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" +) + +// RunFns runs the set of configuration functions in a local directory against +// the Resources in that directory +type RunFns struct { + StorageMounts []runtimeutil.StorageMount + + // Path is the path to the directory containing functions + Path string + + // FunctionPaths Paths allows functions to be specified outside the configuration + // directory. + // Functions provided on FunctionPaths are globally scoped. + // If FunctionPaths length is > 0, then NoFunctionsFromInput defaults to true + FunctionPaths []string + + // Functions is an explicit list of functions to run against the input. + // Functions provided on Functions are globally scoped. + // If Functions length is > 0, then NoFunctionsFromInput defaults to true + Functions []*yaml.RNode + + // GlobalScope if true, functions read from input will be scoped globally rather + // than only to Resources under their subdirs. + GlobalScope bool + + // Input can be set to read the Resources from Input rather than from a directory + Input io.Reader + + // Network enables network access for functions that declare it + Network bool + + // Output can be set to write the result to Output rather than back to the directory + Output io.Writer + + // NoFunctionsFromInput if set to true will not read any functions from the input, + // and only use explicit sources + NoFunctionsFromInput *bool + + // EnableStarlark will enable functions run as starlark scripts + EnableStarlark bool + + // EnableExec will enable exec functions + EnableExec bool + + // DisableContainers will disable functions run as containers + DisableContainers bool + + // ResultsDir is where to write each functions results + ResultsDir string + + // LogSteps enables logging the function that is running. + LogSteps bool + + // LogWriter can be set to write the logs to LogWriter rather than stderr if LogSteps is enabled. + LogWriter io.Writer + + // resultsCount is used to generate the results filename for each container + resultsCount uint32 + + // functionFilterProvider provides a filter to perform the function. + // this is a variable so it can be mocked in tests + functionFilterProvider func( + filter runtimeutil.FunctionSpec, api *yaml.RNode, currentUser currentUserFunc) (kio.Filter, error) + + // AsCurrentUser is a boolean to indicate whether docker container should use + // the uid and gid that run the command + AsCurrentUser bool + + // Env contains environment variables that will be exported to container + Env []string + + // ContinueOnEmptyResult configures what happens when the underlying pipeline + // returns an empty result. + // If it is false (default), subsequent functions will be skipped and the + // result will be returned immediately. + // If it is true, the empty result will be provided as input to the next + // function in the list. + ContinueOnEmptyResult bool + + // WorkingDir specifies which working directory an exec function should run in. + WorkingDir string +} + +// Execute runs the command +func (r RunFns) Execute() error { + // make the path absolute so it works on mac + var err error + r.Path, err = filepath.Abs(r.Path) + if err != nil { + return errors.Wrap(err) + } + + // default the containerFilterProvider if it hasn't been override. Split out for testing. + (&r).init() + nodes, fltrs, output, err := r.getNodesAndFilters() + if err != nil { + return err + } + return r.runFunctions(nodes, output, fltrs) +} + +func (r RunFns) getNodesAndFilters() ( + *kio.PackageBuffer, []kio.Filter, *kio.LocalPackageReadWriter, error) { + // Read Resources from Directory or Input + buff := &kio.PackageBuffer{} + p := kio.Pipeline{Outputs: []kio.Writer{buff}} + // save the output dir because we will need it to write back + // the same one for reading must be used for writing if deleting Resources + var outputPkg *kio.LocalPackageReadWriter + if r.Path != "" { + outputPkg = &kio.LocalPackageReadWriter{PackagePath: r.Path, MatchFilesGlob: kio.MatchAll} + } + + if r.Input == nil { + p.Inputs = []kio.Reader{outputPkg} + } else { + p.Inputs = []kio.Reader{&kio.ByteReader{Reader: r.Input}} + } + if err := p.Execute(); err != nil { + return nil, nil, outputPkg, err + } + + fltrs, err := r.getFilters(buff.Nodes) + if err != nil { + return nil, nil, outputPkg, err + } + return buff, fltrs, outputPkg, nil +} + +func (r RunFns) getFilters(nodes []*yaml.RNode) ([]kio.Filter, error) { + var fltrs []kio.Filter + + // fns from annotations on the input resources + f, err := r.getFunctionsFromInput(nodes) + if err != nil { + return nil, err + } + fltrs = append(fltrs, f...) + + // fns from directories specified on the struct + f, err = r.getFunctionsFromFunctionPaths() + if err != nil { + return nil, err + } + fltrs = append(fltrs, f...) + + // explicit fns specified on the struct + f, err = r.getFunctionsFromFunctions() + if err != nil { + return nil, err + } + fltrs = append(fltrs, f...) + + return fltrs, nil +} + +// runFunctions runs the fltrs against the input and writes to either r.Output or output +func (r RunFns) runFunctions( + input kio.Reader, output kio.Writer, fltrs []kio.Filter) error { + // use the previously read Resources as input + var outputs []kio.Writer + if r.Output == nil { + // write back to the package + outputs = append(outputs, output) + } else { + // write to the output instead of the directory if r.Output is specified or + // the output is nil (reading from Input) + outputs = append(outputs, kio.ByteWriter{Writer: r.Output}) + } + + var err error + pipeline := kio.Pipeline{ + Inputs: []kio.Reader{input}, + Filters: fltrs, + Outputs: outputs, + ContinueOnEmptyResult: r.ContinueOnEmptyResult, + } + if r.LogSteps { + err = pipeline.ExecuteWithCallback(func(op kio.Filter) { + var identifier string + + switch filter := op.(type) { + case *container.Filter: + identifier = filter.Image + case *exec.Filter: + identifier = filter.Path + case *starlark.Filter: + identifier = filter.String() + default: + identifier = "unknown-type function" + } + + _, _ = fmt.Fprintf(r.LogWriter, "Running %s\n", identifier) + }) + } else { + err = pipeline.Execute() + } + if err != nil { + return err + } + + // check for deferred function errors + var errs []string + for i := range fltrs { + cf, ok := fltrs[i].(runtimeutil.DeferFailureFunction) + if !ok { + continue + } + if cf.GetExit() != nil { + errs = append(errs, cf.GetExit().Error()) + } + } + if len(errs) > 0 { + return fmt.Errorf(strings.Join(errs, "\n---\n")) + } + return nil +} + +// getFunctionsFromInput scans the input for functions and runs them +func (r RunFns) getFunctionsFromInput(nodes []*yaml.RNode) ([]kio.Filter, error) { + if *r.NoFunctionsFromInput { + return nil, nil + } + + buff := &kio.PackageBuffer{} + err := kio.Pipeline{ + Inputs: []kio.Reader{&kio.PackageBuffer{Nodes: nodes}}, + Filters: []kio.Filter{&runtimeutil.IsReconcilerFilter{}}, + Outputs: []kio.Writer{buff}, + }.Execute() + if err != nil { + return nil, err + } + err = sortFns(buff) + if err != nil { + return nil, err + } + return r.getFunctionFilters(false, buff.Nodes...) +} + +// getFunctionsFromFunctionPaths returns the set of functions read from r.FunctionPaths +// as a slice of Filters +func (r RunFns) getFunctionsFromFunctionPaths() ([]kio.Filter, error) { + buff := &kio.PackageBuffer{} + for i := range r.FunctionPaths { + err := kio.Pipeline{ + Inputs: []kio.Reader{ + kio.LocalPackageReader{PackagePath: r.FunctionPaths[i]}, + }, + Outputs: []kio.Writer{buff}, + }.Execute() + if err != nil { + return nil, err + } + } + return r.getFunctionFilters(true, buff.Nodes...) +} + +// getFunctionsFromFunctions returns the set of explicitly provided functions as +// Filters +func (r RunFns) getFunctionsFromFunctions() ([]kio.Filter, error) { + return r.getFunctionFilters(true, r.Functions...) +} + +// mergeContainerEnv will merge the envs specified by command line (imperative) and config +// file (declarative). If they have same key, the imperative value will be respected. +func (r RunFns) mergeContainerEnv(envs []string) []string { + imperative := runtimeutil.NewContainerEnvFromStringSlice(r.Env) + declarative := runtimeutil.NewContainerEnvFromStringSlice(envs) + for key, value := range imperative.EnvVars { + declarative.AddKeyValue(key, value) + } + + for _, key := range imperative.VarsToExport { + declarative.AddKey(key) + } + + return declarative.Raw() +} + +func (r RunFns) getFunctionFilters(global bool, fns ...*yaml.RNode) ( + []kio.Filter, error) { + var fltrs []kio.Filter + for i := range fns { + api := fns[i] + spec := runtimeutil.GetFunctionSpec(api) + if spec == nil { + // resource doesn't have function spec + continue + } + if spec.Container.Network && !r.Network { + // TODO(eddiezane): Provide error info about which function needs the network + return fltrs, errors.Errorf("network required but not enabled with --network") + } + // merge envs from imperative and declarative + spec.Container.Env = r.mergeContainerEnv(spec.Container.Env) + + c, err := r.functionFilterProvider(*spec, api, user.Current) + if err != nil { + return nil, err + } + + if c == nil { + continue + } + cf, ok := c.(*container.Filter) + if global && ok { + cf.Exec.GlobalScope = true + } + fltrs = append(fltrs, c) + } + return fltrs, nil +} + +// sortFns sorts functions so that functions with the longest paths come first +func sortFns(buff *kio.PackageBuffer) error { + var outerErr error + // sort the nodes so that we traverse them depth first + // functions deeper in the file system tree should be run first + sort.Slice(buff.Nodes, func(i, j int) bool { + if err := kioutil.CopyLegacyAnnotations(buff.Nodes[i]); err != nil { + return false + } + if err := kioutil.CopyLegacyAnnotations(buff.Nodes[j]); err != nil { + return false + } + mi, _ := buff.Nodes[i].GetMeta() + pi := filepath.ToSlash(mi.Annotations[kioutil.PathAnnotation]) + + mj, _ := buff.Nodes[j].GetMeta() + pj := filepath.ToSlash(mj.Annotations[kioutil.PathAnnotation]) + + // If the path is the same, we decide the ordering based on the + // index annotation. + if pi == pj { + iIndex, err := strconv.Atoi(mi.Annotations[kioutil.IndexAnnotation]) + if err != nil { + outerErr = err + return false + } + jIndex, err := strconv.Atoi(mj.Annotations[kioutil.IndexAnnotation]) + if err != nil { + outerErr = err + return false + } + return iIndex < jIndex + } + + if filepath.Base(path.Dir(pi)) == "functions" { + // don't count the functions dir, the functions are scoped 1 level above + pi = filepath.Dir(path.Dir(pi)) + } else { + pi = filepath.Dir(pi) + } + + if filepath.Base(path.Dir(pj)) == "functions" { + // don't count the functions dir, the functions are scoped 1 level above + pj = filepath.Dir(path.Dir(pj)) + } else { + pj = filepath.Dir(pj) + } + + // i is "less" than j (comes earlier) if its depth is greater -- e.g. run + // i before j if it is deeper in the directory structure + li := len(strings.Split(pi, "/")) + if pi == "." { + // local dir should have 0 path elements instead of 1 + li = 0 + } + lj := len(strings.Split(pj, "/")) + if pj == "." { + // local dir should have 0 path elements instead of 1 + lj = 0 + } + if li != lj { + // use greater-than because we want to sort with the longest + // paths FIRST rather than last + return li > lj + } + + // sort by path names if depths are equal + return pi < pj + }) + return outerErr +} + +// init initializes the RunFns with a containerFilterProvider. +func (r *RunFns) init() { + if r.NoFunctionsFromInput == nil { + // default no functions from input if any function sources are explicitly provided + nfn := len(r.FunctionPaths) > 0 || len(r.Functions) > 0 + r.NoFunctionsFromInput = &nfn + } + + // if no path is specified, default reading from stdin and writing to stdout + if r.Path == "" { + if r.Output == nil { + r.Output = os.Stdout + } + if r.Input == nil { + r.Input = os.Stdin + } + } + + // functionFilterProvider set the filter provider + if r.functionFilterProvider == nil { + r.functionFilterProvider = r.ffp + } + + // if LogSteps is enabled and LogWriter is not specified, use stderr + if r.LogSteps && r.LogWriter == nil { + r.LogWriter = os.Stderr + } +} + +type currentUserFunc func() (*user.User, error) + +// getUIDGID will return "nobody" if asCurrentUser is false. Otherwise +// return "uid:gid" according to the return from currentUser function. +func getUIDGID(asCurrentUser bool, currentUser currentUserFunc) (string, error) { + if !asCurrentUser { + return "nobody", nil + } + + u, err := currentUser() + if err != nil { + return "", err + } + return fmt.Sprintf("%s:%s", u.Uid, u.Gid), nil +} + +// ffp provides function filters +func (r *RunFns) ffp(spec runtimeutil.FunctionSpec, api *yaml.RNode, currentUser currentUserFunc) (kio.Filter, error) { + var resultsFile string + if r.ResultsDir != "" { + resultsFile = filepath.Join(r.ResultsDir, fmt.Sprintf( + "results-%v.yaml", r.resultsCount)) + atomic.AddUint32(&r.resultsCount, 1) + } + if !r.DisableContainers && spec.Container.Image != "" { + // TODO: Add a test for this behavior + uidgid, err := getUIDGID(r.AsCurrentUser, currentUser) + if err != nil { + return nil, err + } + c := container.NewContainer( + runtimeutil.ContainerSpec{ + Image: spec.Container.Image, + Network: spec.Container.Network, + StorageMounts: r.StorageMounts, + Env: spec.Container.Env, + }, + uidgid, + ) + cf := &c + cf.Exec.FunctionConfig = api + cf.Exec.GlobalScope = r.GlobalScope + cf.Exec.ResultsFile = resultsFile + cf.Exec.DeferFailure = spec.DeferFailure + return cf, nil + } + if r.EnableStarlark && (spec.Starlark.Path != "" || spec.Starlark.URL != "") { + // the script path is relative to the function config file + m, err := api.GetMeta() + if err != nil { + return nil, errors.Wrap(err) + } + + var p string + if spec.Starlark.Path != "" { + pathAnno := m.Annotations[kioutil.PathAnnotation] + if pathAnno == "" { + pathAnno = m.Annotations[kioutil.LegacyPathAnnotation] + } + p = filepath.ToSlash(path.Clean(pathAnno)) + + spec.Starlark.Path = filepath.ToSlash(path.Clean(spec.Starlark.Path)) + if filepath.IsAbs(spec.Starlark.Path) || path.IsAbs(spec.Starlark.Path) { + return nil, errors.Errorf( + "absolute function path %s not allowed", spec.Starlark.Path) + } + if strings.HasPrefix(spec.Starlark.Path, "..") { + return nil, errors.Errorf( + "function path %s not allowed to start with ../", spec.Starlark.Path) + } + p = filepath.ToSlash(filepath.Join(r.Path, filepath.Dir(p), spec.Starlark.Path)) + } + + sf := &starlark.Filter{Name: spec.Starlark.Name, Path: p, URL: spec.Starlark.URL} + + sf.FunctionConfig = api + sf.GlobalScope = r.GlobalScope + sf.ResultsFile = resultsFile + sf.DeferFailure = spec.DeferFailure + return sf, nil + } + + if r.EnableExec && spec.Exec.Path != "" { + ef := &exec.Filter{ + Path: spec.Exec.Path, + WorkingDir: r.WorkingDir, + } + + ef.FunctionConfig = api + ef.GlobalScope = r.GlobalScope + ef.ResultsFile = resultsFile + ef.DeferFailure = spec.DeferFailure + return ef, nil + } + + return nil, nil +} diff --git a/go/internal/forked/kyaml/runfn/runfn_test.go b/go/internal/forked/kyaml/runfn/runfn_test.go new file mode 100644 index 000000000..6c6c7211b --- /dev/null +++ b/go/internal/forked/kyaml/runfn/runfn_test.go @@ -0,0 +1,1337 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package runfn + +import ( + "bytes" + "fmt" + "io/ioutil" + "os" + "os/user" + "path/filepath" + "runtime" + "strings" + "testing" + + "github.com/stretchr/testify/assert" + + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/copyutil" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/errors" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/fn/runtime/container" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/fn/runtime/runtimeutil" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/kio" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/kio/filters" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" +) + +const ( + ValueReplacerYAMLData = `apiVersion: v1 +kind: ValueReplacer +metadata: + annotations: + config.kubernetes.io/function: | + container: + image: gcr.io/example.com/image:version + config.kubernetes.io/local-config: "true" +stringMatch: Deployment +replace: StatefulSet +` +) + +func currentUser() (*user.User, error) { + return &user.User{ + Uid: "1", + Gid: "2", + }, nil +} + +func TestRunFns_init(t *testing.T) { + instance := RunFns{} + instance.init() + if !assert.Equal(t, instance.Input, os.Stdin) { + t.FailNow() + } + if !assert.Equal(t, instance.Output, os.Stdout) { + t.FailNow() + } + + api, err := yaml.Parse(`apiVersion: apps/v1 +kind: +`) + spec := runtimeutil.FunctionSpec{ + Container: runtimeutil.ContainerSpec{ + Image: "example.com:version", + }, + } + if !assert.NoError(t, err) { + return + } + filter, _ := instance.functionFilterProvider(spec, api, currentUser) + c := container.NewContainer(runtimeutil.ContainerSpec{Image: "example.com:version"}, "nobody") + cf := &c + cf.Exec.FunctionConfig = api + assert.Equal(t, cf, filter) +} + +func TestRunFns_initAsCurrentUser(t *testing.T) { + instance := RunFns{ + AsCurrentUser: true, + } + instance.init() + if !assert.Equal(t, instance.Input, os.Stdin) { + t.FailNow() + } + if !assert.Equal(t, instance.Output, os.Stdout) { + t.FailNow() + } + + api, err := yaml.Parse(`apiVersion: apps/v1 +kind: +`) + spec := runtimeutil.FunctionSpec{ + Container: runtimeutil.ContainerSpec{ + Image: "example.com:version", + }, + } + if !assert.NoError(t, err) { + return + } + filter, _ := instance.functionFilterProvider(spec, api, currentUser) + c := container.NewContainer(runtimeutil.ContainerSpec{Image: "example.com:version"}, "1:2") + cf := &c + cf.Exec.FunctionConfig = api + assert.Equal(t, cf, filter) +} + +func TestRunFns_Execute__initGlobalScope(t *testing.T) { + instance := RunFns{GlobalScope: true} + instance.init() + if !assert.Equal(t, instance.Input, os.Stdin) { + t.FailNow() + } + if !assert.Equal(t, instance.Output, os.Stdout) { + t.FailNow() + } + api, err := yaml.Parse(`apiVersion: apps/v1 +kind: +`) + if !assert.NoError(t, err) { + return + } + + spec := runtimeutil.FunctionSpec{ + Container: runtimeutil.ContainerSpec{ + Image: "example.com:version", + }, + } + if !assert.NoError(t, err) { + return + } + filter, _ := instance.functionFilterProvider(spec, api, currentUser) + c := container.NewContainer(runtimeutil.ContainerSpec{Image: "example.com:version"}, "nobody") + cf := &c + cf.Exec.FunctionConfig = api + cf.Exec.GlobalScope = true + assert.Equal(t, cf, filter) +} + +func TestRunFns_Execute__initDefault(t *testing.T) { + b := &bytes.Buffer{} + var tests = []struct { + instance RunFns + expected RunFns + name string + }{ + { + instance: RunFns{}, + name: "empty", + expected: RunFns{Output: os.Stdout, Input: os.Stdin, NoFunctionsFromInput: getFalse()}, + }, + { + name: "explicit output", + instance: RunFns{Output: b}, + expected: RunFns{Output: b, Input: os.Stdin, NoFunctionsFromInput: getFalse()}, + }, + { + name: "explicit input", + instance: RunFns{Input: b}, + expected: RunFns{Output: os.Stdout, Input: b, NoFunctionsFromInput: getFalse()}, + }, + { + name: "explicit functions -- no functions from input", + instance: RunFns{Functions: []*yaml.RNode{{}}}, + expected: RunFns{Output: os.Stdout, Input: os.Stdin, NoFunctionsFromInput: getTrue(), Functions: []*yaml.RNode{{}}}, + }, + { + name: "explicit functions -- yes functions from input", + instance: RunFns{Functions: []*yaml.RNode{{}}, NoFunctionsFromInput: getFalse()}, + expected: RunFns{Output: os.Stdout, Input: os.Stdin, NoFunctionsFromInput: getFalse(), Functions: []*yaml.RNode{{}}}, + }, + { + name: "explicit functions in paths -- no functions from input", + instance: RunFns{FunctionPaths: []string{"foo"}}, + expected: RunFns{ + Output: os.Stdout, + Input: os.Stdin, + NoFunctionsFromInput: getTrue(), + FunctionPaths: []string{"foo"}, + }, + }, + { + name: "functions in paths -- yes functions from input", + instance: RunFns{FunctionPaths: []string{"foo"}, NoFunctionsFromInput: getFalse()}, + expected: RunFns{ + Output: os.Stdout, + Input: os.Stdin, + NoFunctionsFromInput: getFalse(), + FunctionPaths: []string{"foo"}, + }, + }, + { + name: "explicit directories in mounts", + instance: RunFns{StorageMounts: []runtimeutil.StorageMount{{MountType: "volume", Src: "myvol", DstPath: "/local/"}}}, + expected: RunFns{ + Output: os.Stdout, + Input: os.Stdin, + NoFunctionsFromInput: getFalse(), + StorageMounts: []runtimeutil.StorageMount{{MountType: "volume", Src: "myvol", DstPath: "/local/"}}, + }, + }, + } + for i := range tests { + tt := tests[i] + t.Run(tt.name, func(t *testing.T) { + (&tt.instance).init() + (&tt.instance).functionFilterProvider = nil + if !assert.Equal(t, tt.expected, tt.instance) { + t.FailNow() + } + }) + } +} + +func getTrue() *bool { + t := true + return &t +} + +func getFalse() *bool { + f := false + return &f +} + +// TestRunFns_getFilters tests how filters are found and sorted +func TestRunFns_getFilters(t *testing.T) { + type f struct { + // path to function file and string value to write + path, value string + // if true, create the function in a separate directory from + // the config, and provide it through FunctionPaths + outOfPackage bool + + // if true, create the function as an explicit Functions input + explicitFunction bool + + // if true and outOfPackage is true, create a new directory + // for this function separate from the previous one. If + // false and outOfPackage is true, create the function in + // the directory created for the last outOfPackage function. + newFnPath bool + } + var tests = []struct { + // function files to write + in []f + // images to be run in a specific order + out []string + + // images to be run in a specific order -- computed from directory path + outFn func(string) []string + + // expected Error + error string + + // name of the test + name string + // value to set for NoFunctionsFromInput + noFunctionsFromInput *bool + + enableStarlark bool + + disableContainers bool + }{ + // Test + // + // + {name: "single implicit function", + in: []f{ + { + path: filepath.Join("foo", "bar.yaml"), + value: ` +apiVersion: example.com/v1alpha1 +kind: ExampleFunction +metadata: + annotations: + config.kubernetes.io/function: | + container: + image: gcr.io/example.com/image:v1.0.0 + config.kubernetes.io/local-config: "true" +`, + }, + }, + out: []string{"gcr.io/example.com/image:v1.0.0"}, + }, + + {name: "no function spec", + in: []f{ + { + explicitFunction: true, + value: ` +foo: bar +`, + }, + }, + }, + + // Test + // + // + {name: "defer_failure", + in: []f{ + { + path: filepath.Join("foo", "bar.yaml"), + value: ` +apiVersion: example.com/v1alpha1 +kind: ExampleFunction +metadata: + annotations: + config.kubernetes.io/function: | + deferFailure: true + container: + image: gcr.io/example.com/image:v1.0.0 + config.kubernetes.io/local-config: "true" +`, + }, + }, + out: []string{"gcr.io/example.com/image:v1.0.0 deferFailure: true"}, + }, + + {name: "disable containers", + in: []f{ + { + path: filepath.Join("foo", "bar.yaml"), + value: ` +apiVersion: example.com/v1alpha1 +kind: ExampleFunction +metadata: + annotations: + config.kubernetes.io/function: | + container: + image: gcr.io/example.com/image:v1.0.0 + config.kubernetes.io/local-config: "true" +`, + }, + }, + out: nil, + disableContainers: true, + }, + + // Test + // + // + {name: "sort functions -- deepest first", + in: []f{ + { + path: filepath.Join("a.yaml"), + value: ` +metadata: + annotations: + config.kubernetes.io/function: | + container: + image: a +`, + }, + { + path: filepath.Join("foo", "b.yaml"), + value: ` +metadata: + annotations: + config.kubernetes.io/function: | + container: + image: b +`, + }, + }, + out: []string{"b", "a"}, + }, + + // Test + // + // + {name: "sort functions -- skip implicit with output of package", + in: []f{ + { + path: filepath.Join("foo", "a.yaml"), + outOfPackage: true, // out of package is run last + value: ` +metadata: + annotations: + config.kubernetes.io/function: | + container: + image: a +`, + }, + { + path: filepath.Join("b.yaml"), + value: ` +metadata: + annotations: + config.kubernetes.io/function: | + container: + image: b +`, + }, + }, + out: []string{"a"}, + }, + + // Test + // + // + {name: "sort functions -- skip implicit", + noFunctionsFromInput: getTrue(), + in: []f{ + { + path: filepath.Join("foo", "a.yaml"), + value: ` +metadata: + annotations: + config.kubernetes.io/function: | + container: + image: a +`, + }, + { + path: filepath.Join("b.yaml"), + value: ` +metadata: + annotations: + config.kubernetes.io/function: | + container: + image: b +`, + }, + }, + out: nil, + }, + + // Test + // + // + {name: "sort functions -- include implicit", + noFunctionsFromInput: getFalse(), + in: []f{ + { + path: filepath.Join("foo", "a.yaml"), + value: ` +metadata: + annotations: + config.kubernetes.io/function: | + container: + image: a +`, + }, + { + path: filepath.Join("b.yaml"), + value: ` +metadata: + annotations: + config.kubernetes.io/function: | + container: + image: b +`, + }, + }, + out: []string{"a", "b"}, + }, + + // Test + // + // + {name: "sort functions -- implicit first", + noFunctionsFromInput: getFalse(), + in: []f{ + { + path: filepath.Join("foo", "a.yaml"), + outOfPackage: true, // out of package is run last + value: ` +metadata: + annotations: + config.kubernetes.io/function: | + container: + image: a +`, + }, + { + path: filepath.Join("b.yaml"), + value: ` +metadata: + annotations: + config.kubernetes.io/function: | + container: + image: b +`, + }, + }, + out: []string{"b", "a"}, + }, + + // Test + // + // + {name: "explicit functions", + in: []f{ + { + explicitFunction: true, + value: ` +metadata: + annotations: + config.kubernetes.io/function: | + container: + image: c +`, + }, + { + path: filepath.Join("b.yaml"), + value: ` +metadata: + annotations: + config.kubernetes.io/function: | + container: + image: b +`, + }, + }, + out: []string{"c"}, + }, + + // Test + // + // + {name: "sort functions -- implicit first", + noFunctionsFromInput: getFalse(), + in: []f{ + { + explicitFunction: true, + value: ` +metadata: + annotations: + config.kubernetes.io/function: | + container: + image: c +`, + }, + { + path: filepath.Join("foo", "a.yaml"), + outOfPackage: true, // out of package is run last + value: ` +metadata: + annotations: + config.kubernetes.io/function: | + container: + image: a +`, + }, + { + path: filepath.Join("b.yaml"), + value: ` +metadata: + annotations: + config.kubernetes.io/function: | + container: + image: b +`, + }, + }, + out: []string{"b", "a", "c"}, + }, + + // Test + // + // + {name: "starlark-function", + in: []f{ + { + path: filepath.Join("foo", "bar.yaml"), + value: ` +apiVersion: example.com/v1alpha1 +kind: ExampleFunction +metadata: + annotations: + config.kubernetes.io/function: | + starlark: + path: a/b/c +`, + }, + }, + enableStarlark: true, + outFn: func(path string) []string { + return []string{ + fmt.Sprintf("name: path: %s/foo/a/b/c url: program:", filepath.ToSlash(path))} + }, + }, + + // Test + // + // + {name: "starlark-function-absolute", + in: []f{ + { + path: filepath.Join("foo", "bar.yaml"), + value: ` +apiVersion: example.com/v1alpha1 +kind: ExampleFunction +metadata: + annotations: + config.kubernetes.io/function: | + starlark: + path: /a/b/c +`, + }, + }, + enableStarlark: true, + error: "absolute function path /a/b/c not allowed", + }, + + // Test + // + // + {name: "starlark-function-escape-parent", + in: []f{ + { + path: filepath.Join("foo", "bar.yaml"), + value: ` +apiVersion: example.com/v1alpha1 +kind: ExampleFunction +metadata: + annotations: + config.kubernetes.io/function: | + starlark: + path: ../a/b/c +`, + }, + }, + enableStarlark: true, + error: "function path ../a/b/c not allowed to start with ../", + }, + + {name: "starlark-function-disabled", + in: []f{ + { + path: filepath.Join("foo", "bar.yaml"), + value: ` +apiVersion: example.com/v1alpha1 +kind: ExampleFunction +metadata: + annotations: + config.kubernetes.io/function: | + starlark: + path: a/b/c +`, + }, + }, + }, + } + + for i := range tests { + tt := tests[i] + t.Run(tt.name, func(t *testing.T) { + // setup the test directory + d := setupTest(t) + defer os.RemoveAll(d) + + // write the functions to files + var fnPaths []string + var parsedFns []*yaml.RNode + var fnPath string + var err error + for _, f := range tt.in { + // get the location for the file + var dir string + switch { + case f.outOfPackage: + // if out of package, write to a separate temp directory + if f.newFnPath || fnPath == "" { + // create a new fn directory + fnPath, err = ioutil.TempDir("", "kustomize-test") + if !assert.NoError(t, err) { + t.FailNow() + } + defer os.RemoveAll(fnPath) + fnPaths = append(fnPaths, fnPath) + } + dir = fnPath + case f.explicitFunction: + parsedFns = append(parsedFns, yaml.MustParse(f.value)) + default: + // if in package, write to the dir containing the configs + dir = d + } + + if !f.explicitFunction { + // create the parent dir and write the file + err = os.MkdirAll(filepath.Join(dir, filepath.Dir(f.path)), 0700) + if !assert.NoError(t, err) { + t.FailNow() + } + err := ioutil.WriteFile(filepath.Join(dir, f.path), []byte(f.value), 0600) + if !assert.NoError(t, err) { + t.FailNow() + } + } + } + + // init the instance + r := &RunFns{ + EnableStarlark: tt.enableStarlark, + DisableContainers: tt.disableContainers, + FunctionPaths: fnPaths, + Functions: parsedFns, + Path: d, + NoFunctionsFromInput: tt.noFunctionsFromInput, + } + r.init() + + // get the filters which would be run + var results []string + _, fltrs, _, err := r.getNodesAndFilters() + + if tt.error != "" { + if !assert.EqualError(t, err, tt.error) { + t.FailNow() + } + return + } + + if !assert.NoError(t, err) { + t.FailNow() + } + for _, f := range fltrs { + results = append(results, strings.TrimSpace(fmt.Sprintf("%v", f))) + } + + // compare the actual ordering to the expected ordering + if tt.outFn != nil { + if !assert.Equal(t, tt.outFn(d), results) { + t.FailNow() + } + } else { + if !assert.Equal(t, tt.out, results) { + t.FailNow() + } + } + }) + } +} + +func TestRunFns_sortFns(t *testing.T) { + testCases := []struct { + name string + nodes []*yaml.RNode + expectedImages []string + expectedErrMsg string + }{ + { + name: "multiple functions in the same file are ordered by index", + nodes: []*yaml.RNode{ + yaml.MustParse(` +metadata: + annotations: + config.kubernetes.io/path: functions.yaml + config.kubernetes.io/index: 1 + config.kubernetes.io/function: | + container: + image: a +`), + yaml.MustParse(` +metadata: + annotations: + config.kubernetes.io/path: functions.yaml + config.kubernetes.io/index: 0 + config.kubernetes.io/function: | + container: + image: b +`), + }, + expectedImages: []string{"b", "a"}, + }, + { + name: "non-integer value in index annotation is an error", + nodes: []*yaml.RNode{ + yaml.MustParse(` +metadata: + annotations: + config.kubernetes.io/path: functions.yaml + config.kubernetes.io/index: 0 + config.kubernetes.io/function: | + container: + image: a +`), + yaml.MustParse(` +metadata: + annotations: + config.kubernetes.io/path: functions.yaml + config.kubernetes.io/index: abc + config.kubernetes.io/function: | + container: + image: b +`), + }, + expectedErrMsg: "strconv.Atoi: parsing \"abc\": invalid syntax", + }, + } + + for i := range testCases { + test := testCases[i] + t.Run(test.name, func(t *testing.T) { + packageBuff := &kio.PackageBuffer{ + Nodes: test.nodes, + } + + err := sortFns(packageBuff) + if test.expectedErrMsg != "" { + if !assert.Error(t, err) { + t.FailNow() + } + assert.Equal(t, test.expectedErrMsg, err.Error()) + return + } + + if !assert.NoError(t, err) { + t.FailNow() + } + + var images []string + for _, n := range packageBuff.Nodes { + spec := runtimeutil.GetFunctionSpec(n) + images = append(images, spec.Container.Image) + } + + assert.Equal(t, test.expectedImages, images) + }) + } +} + +func TestRunFns_network(t *testing.T) { + tests := []struct { + name string + input string + network bool + expectNetwork bool + error string + }{ + { + name: "imperative false, declarative false", + input: ` +metadata: + annotations: + config.kubernetes.io/function: | + container: + image: a + network: false +`, + network: false, + expectNetwork: false, + }, + { + name: "imperative true, declarative false", + input: ` +metadata: + annotations: + config.kubernetes.io/function: | + container: + image: a + network: false +`, + network: true, + expectNetwork: false, + }, + { + name: "imperative true, declarative true", + input: ` +metadata: + annotations: + config.kubernetes.io/function: | + container: + image: a + network: true +`, + network: true, + expectNetwork: true, + }, + { + name: "imperative false, declarative true", + input: ` +metadata: + annotations: + config.kubernetes.io/function: | + container: + image: a + network: true +`, + network: false, + error: "network required but not enabled with --network", + }, + } + + for i := range tests { + tt := tests[i] + fn := yaml.MustParse(tt.input) + t.Run(tt.name, func(t *testing.T) { + // init the instance + r := &RunFns{ + Functions: []*yaml.RNode{fn}, + Network: tt.network, + } + r.init() + + _, fltrs, _, err := r.getNodesAndFilters() + if tt.error != "" { + if !assert.EqualError(t, err, tt.error) { + t.FailNow() + } + return + } + if !assert.NoError(t, err) { + t.FailNow() + } + + fltr := fltrs[0].(*container.Filter) + if !assert.Equal(t, tt.expectNetwork, fltr.Network) { + t.FailNow() + } + }) + } +} + +func TestCmd_Execute(t *testing.T) { + dir := setupTest(t) + defer os.RemoveAll(dir) + + // write a test filter to the directory of configuration + if !assert.NoError(t, ioutil.WriteFile( + filepath.Join(dir, "filter.yaml"), []byte(ValueReplacerYAMLData), 0600)) { + return + } + + instance := RunFns{Path: dir, functionFilterProvider: getFilterProvider(t)} + if !assert.NoError(t, instance.Execute()) { + t.FailNow() + } + b, err := ioutil.ReadFile( + filepath.Join(dir, "java", "java-deployment.resource.yaml")) + if !assert.NoError(t, err) { + t.FailNow() + } + assert.Contains(t, string(b), "kind: StatefulSet") +} + +type TestFilter struct { + invoked bool + Exit error +} + +func (f *TestFilter) Filter(input []*yaml.RNode) ([]*yaml.RNode, error) { + f.invoked = true + return input, nil +} + +func (f *TestFilter) GetExit() error { + return f.Exit +} + +func TestCmd_Execute_deferFailure(t *testing.T) { + dir := setupTest(t) + defer os.RemoveAll(dir) + + // write a test filter to the directory of configuration + if !assert.NoError(t, ioutil.WriteFile( + filepath.Join(dir, "filter1.yaml"), []byte(`apiVersion: v1 +kind: ValueReplacer +metadata: + annotations: + config.kubernetes.io/function: | + container: + image: 1 + config.kubernetes.io/local-config: "true" +stringMatch: Deployment +replace: StatefulSet +`), 0600)) { + t.FailNow() + } + + // write a test filter to the directory of configuration + if !assert.NoError(t, ioutil.WriteFile( + filepath.Join(dir, "filter2.yaml"), []byte(`apiVersion: v1 +kind: ValueReplacer +metadata: + annotations: + config.kubernetes.io/function: | + container: + image: 2 + config.kubernetes.io/local-config: "true" +stringMatch: Deployment +replace: StatefulSet +`), 0600)) { + t.FailNow() + } + + var fltrs []*TestFilter + instance := RunFns{ + Path: dir, + functionFilterProvider: func(f runtimeutil.FunctionSpec, node *yaml.RNode, currentUser currentUserFunc) (kio.Filter, error) { + tf := &TestFilter{ + Exit: errors.Errorf("message: %s", f.Container.Image), + } + fltrs = append(fltrs, tf) + return tf, nil + }, + } + instance.init() + + err := instance.Execute() + + // make sure all filters were run + if !assert.Equal(t, 2, len(fltrs)) { + t.FailNow() + } + for i := range fltrs { + if !assert.True(t, fltrs[i].invoked) { + t.FailNow() + } + } + + if !assert.EqualError(t, err, "message: 1\n---\nmessage: 2") { + t.FailNow() + } + b, err := ioutil.ReadFile( + filepath.Join(dir, "java", "java-deployment.resource.yaml")) + if !assert.NoError(t, err) { + t.FailNow() + } + // files weren't changed because there was an error + assert.Contains(t, string(b), "kind: Deployment") +} + +// TestCmd_Execute_setOutput tests the execution of a filter reading and writing to a dir +func TestCmd_Execute_setFunctionPaths(t *testing.T) { + dir := setupTest(t) + defer os.RemoveAll(dir) + + // write a test filter to a separate directory + tmpF, err := ioutil.TempFile("", "filter*.yaml") + if !assert.NoError(t, err) { + return + } + os.RemoveAll(tmpF.Name()) + if !assert.NoError(t, ioutil.WriteFile(tmpF.Name(), []byte(ValueReplacerYAMLData), 0600)) { + return + } + + // run the functions, providing the path to the directory of filters + instance := RunFns{ + FunctionPaths: []string{tmpF.Name()}, + Path: dir, + functionFilterProvider: getFilterProvider(t), + } + // initialize the defaults + instance.init() + + err = instance.Execute() + if !assert.NoError(t, err) { + return + } + b, err := ioutil.ReadFile( + filepath.Join(dir, "java", "java-deployment.resource.yaml")) + if !assert.NoError(t, err) { + return + } + assert.Contains(t, string(b), "kind: StatefulSet") +} + +// TestCmd_Execute_setOutput tests the execution of a filter using an io.Writer as output +func TestCmd_Execute_setOutput(t *testing.T) { + dir := setupTest(t) + defer os.RemoveAll(dir) + + // write a test filter + if !assert.NoError(t, ioutil.WriteFile( + filepath.Join(dir, "filter.yaml"), []byte(ValueReplacerYAMLData), 0600)) { + return + } + + out := &bytes.Buffer{} + instance := RunFns{ + Output: out, // write to out + Path: dir, + functionFilterProvider: getFilterProvider(t), + } + // initialize the defaults + instance.init() + + if !assert.NoError(t, instance.Execute()) { + return + } + b, err := ioutil.ReadFile( + filepath.Join(dir, "java", "java-deployment.resource.yaml")) + if !assert.NoError(t, err) { + return + } + assert.NotContains(t, string(b), "kind: StatefulSet") + assert.Contains(t, out.String(), "kind: StatefulSet") +} + +// TestCmd_Execute_setInput tests the execution of a filter using an io.Reader as input +func TestCmd_Execute_setInput(t *testing.T) { + dir := setupTest(t) + defer os.RemoveAll(dir) + if !assert.NoError(t, ioutil.WriteFile( + filepath.Join(dir, "filter.yaml"), []byte(ValueReplacerYAMLData), 0600)) { + return + } + + read, err := kio.LocalPackageReader{PackagePath: dir}.Read() + if !assert.NoError(t, err) { + t.FailNow() + } + input := &bytes.Buffer{} + if !assert.NoError(t, kio.ByteWriter{Writer: input}.Write(read)) { + t.FailNow() + } + + outDir, err := ioutil.TempDir("", "kustomize-test") + defer os.RemoveAll(outDir) + if !assert.NoError(t, err) { + t.FailNow() + } + + if !assert.NoError(t, ioutil.WriteFile( + filepath.Join(dir, "filter.yaml"), []byte(ValueReplacerYAMLData), 0600)) { + return + } + + instance := RunFns{ + Input: input, // read from input + Path: outDir, + functionFilterProvider: getFilterProvider(t), + } + // initialize the defaults + instance.init() + + if !assert.NoError(t, instance.Execute()) { + return + } + b, err := ioutil.ReadFile( + filepath.Join(outDir, "java", "java-deployment.resource.yaml")) + if !assert.NoError(t, err) { + t.FailNow() + } + assert.Contains(t, string(b), "kind: StatefulSet") +} + +// TestCmd_Execute_enableLogSteps tests the execution of a filter with LogSteps enabled. +func TestCmd_Execute_enableLogSteps(t *testing.T) { + dir := setupTest(t) + defer os.RemoveAll(dir) + + // write a test filter to the directory of configuration + if !assert.NoError(t, ioutil.WriteFile( + filepath.Join(dir, "filter.yaml"), []byte(ValueReplacerYAMLData), 0600)) { + return + } + + logs := &bytes.Buffer{} + instance := RunFns{ + Path: dir, + functionFilterProvider: getFilterProvider(t), + LogSteps: true, + LogWriter: logs, + } + if !assert.NoError(t, instance.Execute()) { + t.FailNow() + } + b, err := ioutil.ReadFile( + filepath.Join(dir, "java", "java-deployment.resource.yaml")) + if !assert.NoError(t, err) { + t.FailNow() + } + assert.Contains(t, string(b), "kind: StatefulSet") + assert.Equal(t, "Running unknown-type function\n", logs.String()) +} + +func getGeneratorFilterProvider(t *testing.T) func(runtimeutil.FunctionSpec, *yaml.RNode, currentUserFunc) (kio.Filter, error) { + return func(f runtimeutil.FunctionSpec, node *yaml.RNode, currentUser currentUserFunc) (kio.Filter, error) { + return kio.FilterFunc(func(items []*yaml.RNode) ([]*yaml.RNode, error) { + if f.Container.Image == "generate" { + node, err := yaml.Parse("kind: generated") + if !assert.NoError(t, err) { + t.FailNow() + } + return append(items, node), nil + } + return items, nil + }), nil + } +} +func TestRunFns_ContinueOnEmptyResult(t *testing.T) { + fn1, err := yaml.Parse(` +kind: fakefn +metadata: + annotations: + config.kubernetes.io/function: | + container: + image: pass +`) + if !assert.NoError(t, err) { + t.FailNow() + } + fn2, err := yaml.Parse(` +kind: fakefn +metadata: + annotations: + config.kubernetes.io/function: | + container: + image: generate +`) + if !assert.NoError(t, err) { + t.FailNow() + } + + var test = []struct { + ContinueOnEmptyResult bool + ExpectedOutput string + }{ + { + ContinueOnEmptyResult: false, + ExpectedOutput: "", + }, + { + ContinueOnEmptyResult: true, + ExpectedOutput: "kind: generated\n", + }, + } + for i := range test { + ouputBuffer := bytes.Buffer{} + instance := RunFns{ + Input: bytes.NewReader([]byte{}), + Output: &ouputBuffer, + Functions: []*yaml.RNode{fn1, fn2}, + functionFilterProvider: getGeneratorFilterProvider(t), + ContinueOnEmptyResult: test[i].ContinueOnEmptyResult, + } + if !assert.NoError(t, instance.Execute()) { + t.FailNow() + } + assert.Equal(t, test[i].ExpectedOutput, ouputBuffer.String()) + } +} + +// setupTest initializes a temp test directory containing test data +func setupTest(t *testing.T) string { + dir, err := ioutil.TempDir("", "kustomize-kyaml-test") + if !assert.NoError(t, err) { + t.FailNow() + } + + _, filename, _, ok := runtime.Caller(0) + if !assert.True(t, ok) { + t.FailNow() + } + ds, err := filepath.Abs(filepath.Join(filepath.Dir(filename), "test", "testdata")) + if !assert.NoError(t, err) { + t.FailNow() + } + if !assert.NoError(t, copyutil.CopyDir(ds, dir)) { + t.FailNow() + } + if !assert.NoError(t, os.Chdir(filepath.Dir(dir))) { + t.FailNow() + } + return dir +} + +// getFilterProvider fakes the creation of a filter, replacing the ContainerFiler with +// a filter to s/kind: Deployment/kind: StatefulSet/g. +// this can be used to simulate running a filter. +func getFilterProvider(t *testing.T) func(runtimeutil.FunctionSpec, *yaml.RNode, currentUserFunc) (kio.Filter, error) { + return func(f runtimeutil.FunctionSpec, node *yaml.RNode, currentUser currentUserFunc) (kio.Filter, error) { + // parse the filter from the input + filter := yaml.YFilter{} + b := &bytes.Buffer{} + e := yaml.NewEncoder(b) + if !assert.NoError(t, e.Encode(node.YNode())) { + t.FailNow() + } + e.Close() + d := yaml.NewDecoder(b) + if !assert.NoError(t, d.Decode(&filter)) { + t.FailNow() + } + + return filters.Modifier{ + Filters: []yaml.YFilter{{Filter: yaml.Lookup("kind")}, filter}, + }, nil + } +} + +func TestRunFns_mergeContainerEnv(t *testing.T) { + testcases := []struct { + name string + instance RunFns + inputEnvs []string + expect runtimeutil.ContainerEnv + }{ + { + name: "all empty", + instance: RunFns{}, + expect: *runtimeutil.NewContainerEnv(), + }, + { + name: "empty command line envs", + instance: RunFns{}, + inputEnvs: []string{"foo=bar"}, + expect: *runtimeutil.NewContainerEnvFromStringSlice([]string{"foo=bar"}), + }, + { + name: "empty declarative envs", + instance: RunFns{ + Env: []string{"foo=bar"}, + }, + expect: *runtimeutil.NewContainerEnvFromStringSlice([]string{"foo=bar"}), + }, + { + name: "same key", + instance: RunFns{ + Env: []string{"foo=bar", "foo"}, + }, + inputEnvs: []string{"foo=bar1", "bar"}, + expect: *runtimeutil.NewContainerEnvFromStringSlice([]string{"foo=bar", "bar", "foo"}), + }, + { + name: "same exported key", + instance: RunFns{ + Env: []string{"foo=bar", "foo"}, + }, + inputEnvs: []string{"foo1=bar1", "foo"}, + expect: *runtimeutil.NewContainerEnvFromStringSlice([]string{"foo=bar", "foo1=bar1", "foo"}), + }, + } + + for i := range testcases { + tc := testcases[i] + t.Run(tc.name, func(t *testing.T) { + envs := tc.instance.mergeContainerEnv(tc.inputEnvs) + assert.Equal(t, tc.expect.GetDockerFlags(), runtimeutil.NewContainerEnvFromStringSlice(envs).GetDockerFlags()) + }) + } +} diff --git a/go/internal/forked/kyaml/runfn/test/testdata/java/java-configmap.resource.yaml b/go/internal/forked/kyaml/runfn/test/testdata/java/java-configmap.resource.yaml new file mode 100644 index 000000000..d01363d10 --- /dev/null +++ b/go/internal/forked/kyaml/runfn/test/testdata/java/java-configmap.resource.yaml @@ -0,0 +1,10 @@ +# Copyright 2019 The Kubernetes Authors. +# SPDX-License-Identifier: Apache-2.0 +apiVersion: v1 +kind: ConfigMap +metadata: + name: app-config + labels: + app.kubernetes.io/component: undefined + app.kubernetes.io/instance: undefined +data: {} diff --git a/go/internal/forked/kyaml/runfn/test/testdata/java/java-deployment.resource.yaml b/go/internal/forked/kyaml/runfn/test/testdata/java/java-deployment.resource.yaml new file mode 100644 index 000000000..d03d3a48d --- /dev/null +++ b/go/internal/forked/kyaml/runfn/test/testdata/java/java-deployment.resource.yaml @@ -0,0 +1,36 @@ +# Copyright 2019 The Kubernetes Authors. +# SPDX-License-Identifier: Apache-2.0 +apiVersion: apps/v1 +kind: Deployment +metadata: + name: app + labels: + app: java +spec: + selector: + matchLabels: + app: java + template: + metadata: + labels: + app: java + spec: + restartPolicy: Always + containers: + - name: app + image: gcr.io/project/app:version + command: + - java + - -jar + - /app.jar + ports: + - containerPort: 8080 + envFrom: + - configMapRef: + name: app-config + env: + - name: JAVA_OPTS + value: -XX:+UnlockExperimentalVMOptions -XX:+UseCGroupMemoryLimitForHeap + -Djava.security.egd=file:/dev/./urandom + imagePullPolicy: Always + minReadySeconds: 5 diff --git a/go/internal/forked/kyaml/runfn/test/testdata/java/java-service.resource.yaml b/go/internal/forked/kyaml/runfn/test/testdata/java/java-service.resource.yaml new file mode 100644 index 000000000..f8d7b08d2 --- /dev/null +++ b/go/internal/forked/kyaml/runfn/test/testdata/java/java-service.resource.yaml @@ -0,0 +1,15 @@ +# Copyright 2019 The Kubernetes Authors. +# SPDX-License-Identifier: Apache-2.0 +apiVersion: v1 +kind: Service +metadata: + name: app + labels: + app: java +spec: + selector: + app: java + ports: + - name: "8080" + port: 8080 + targetPort: 8080 diff --git a/go/internal/forked/kyaml/sets/sets_test.go b/go/internal/forked/kyaml/sets/sets_test.go new file mode 100644 index 000000000..8fe5b1692 --- /dev/null +++ b/go/internal/forked/kyaml/sets/sets_test.go @@ -0,0 +1,54 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package sets + +import ( + "testing" + + "github.com/stretchr/testify/assert" +) + +func TestStringList_Len(t *testing.T) { + var sl0 StringList = [][]string{} + assert.Equal(t, 0, sl0.Len()) + + var sl1 StringList = [][]string{ + {""}, + } + assert.Equal(t, 1, sl1.Len()) + + var sl2 StringList = [][]string{ + {"a", "b"}, + {"b", "c"}, + } + assert.Equal(t, 2, sl2.Len()) +} + +func TestStringList_Insert(t *testing.T) { + var sl StringList + assert.Equal(t, 0, sl.Len()) + + sl = sl.Insert([]string{"a", "b", "c"}) + assert.Equal(t, 1, sl.Len()) + + sl = sl.Insert([]string{"c", "b", "a"}) + assert.Equal(t, 2, sl.Len()) + + sl = sl.Insert([]string{"a", "b", "c"}) + assert.Equal(t, 2, sl.Len()) +} + +func TestStringList_Has(t *testing.T) { + var sl StringList + + assert.False(t, sl.Has([]string{})) + assert.False(t, sl.Has([]string{"a", "b", "c"})) + + sl = sl.Insert([]string{"a", "b", "c"}) + assert.True(t, sl.Has([]string{"a", "b", "c"})) + assert.False(t, sl.Has([]string{"b", "c", "a"})) + + sl = sl.Insert([]string{}) + assert.True(t, sl.Has([]string{})) +} diff --git a/go/internal/forked/kyaml/sets/string.go b/go/internal/forked/kyaml/sets/string.go new file mode 100644 index 000000000..07f02afb0 --- /dev/null +++ b/go/internal/forked/kyaml/sets/string.go @@ -0,0 +1,64 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package sets + +type String map[string]interface{} + +func (s String) Len() int { + return len(s) +} + +func (s String) List() []string { + var val []string + for k := range s { + val = append(val, k) + } + return val +} + +func (s String) Has(val string) bool { + _, found := s[val] + return found +} + +func (s String) Insert(vals ...string) { + for _, val := range vals { + s[val] = nil + } +} + +func (s String) Difference(s2 String) String { + s3 := String{} + for k := range s { + if _, found := s2[k]; !found { + s3.Insert(k) + } + } + return s3 +} + +func (s String) SymmetricDifference(s2 String) String { + s3 := String{} + for k := range s { + if _, found := s2[k]; !found { + s3.Insert(k) + } + } + for k := range s2 { + if _, found := s[k]; !found { + s3.Insert(k) + } + } + return s3 +} + +func (s String) Intersection(s2 String) String { + s3 := String{} + for k := range s { + if _, found := s2[k]; found { + s3.Insert(k) + } + } + return s3 +} diff --git a/go/internal/forked/kyaml/sets/stringlist.go b/go/internal/forked/kyaml/sets/stringlist.go new file mode 100644 index 000000000..2d75978fc --- /dev/null +++ b/go/internal/forked/kyaml/sets/stringlist.go @@ -0,0 +1,44 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package sets + +// StringList is a set, where each element of +// the set is a string slice. +type StringList [][]string + +func (s StringList) Len() int { + return len(s) +} + +func (s StringList) Insert(val []string) StringList { + if !s.Has(val) { + return append(s, val) + } + return s +} + +func (s StringList) Has(val []string) bool { + if len(s) == 0 { + return false + } + + for i := range s { + if isStringSliceEqual(s[i], val) { + return true + } + } + return false +} + +func isStringSliceEqual(s []string, t []string) bool { + if len(s) != len(t) { + return false + } + for i := range s { + if s[i] != t[i] { + return false + } + } + return true +} diff --git a/go/internal/forked/kyaml/setters2/add.go b/go/internal/forked/kyaml/setters2/add.go new file mode 100644 index 000000000..4f91a1ccc --- /dev/null +++ b/go/internal/forked/kyaml/setters2/add.go @@ -0,0 +1,302 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package setters2 + +import ( + "reflect" + "strings" + + "k8s.io/kube-openapi/pkg/validation/spec" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/errors" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/fieldmeta" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/openapi" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" +) + +// Add creates or updates setter or substitution references from resource fields. +// Requires that at least one of FieldValue and FieldName have been set. +type Add struct { + // FieldValue if set will add the OpenAPI reference to fields if they have this value. + // Optional. If unspecified match all field values. + FieldValue string + + // FieldName if set will add the OpenAPI reference to fields with this name or path + // FieldName may be the full name of the field, full path to the field, or the path suffix. + // e.g. all of the following would match spec.template.spec.containers.image -- + // [image, containers.image, spec.containers.image, template.spec.containers.image, + // spec.template.spec.containers.image] + // Optional. If unspecified match all field names. + FieldName string + + // Ref is the OpenAPI reference to set on the matching fields as a comment. + Ref string + + // ListValues are the value of a list setter. + ListValues []string + + // Type is the type of the setter value + Type string + + // Count is the number of fields the setter applies to + Count int + + SettersSchema *spec.Schema +} + +// Filter implements yaml.Filter +func (a *Add) Filter(object *yaml.RNode) (*yaml.RNode, error) { + if a.FieldName == "" && a.FieldValue == "" { + return nil, errors.Errorf("must specify either fieldName or fieldValue") + } + if a.Ref == "" { + return nil, errors.Errorf("must specify ref") + } + return object, accept(a, object, a.SettersSchema) +} + +func (a *Add) visitSequence(_ *yaml.RNode, _ string, _ *openapi.ResourceSchema) error { + // no-op + return nil +} + +// visitMapping implements visitor +// visitMapping visits the fields in input MappingNode and adds setter/subst ref +// if the path path spec matches with input FiledName +func (a *Add) visitMapping(object *yaml.RNode, p string, _ *openapi.ResourceSchema) error { + return object.VisitFields(func(node *yaml.MapNode) error { + if node.Value.YNode().Kind != yaml.SequenceNode { + return nil + } + + key, err := node.Key.String() + if err != nil { + return err + } + + // derive the list values for the sequence node to write it to openAPI definitions + var values []string + for _, sc := range node.Value.Content() { + values = append(values, sc.Value) + } + + // pathToKey refers to the path address of the key node ex: metadata.annotations + // p is the path till parent node, pathToKey is obtained by appending child key + pathToKey := p + "." + strings.Trim(key, "\n") + if a.FieldName != "" && strings.HasSuffix(pathToKey, a.FieldName) { + // check if there are different values for field path before adding ref to the field + if len(a.ListValues) > 0 && !reflect.DeepEqual(values, a.ListValues) { + return errors.Errorf("setters can only be created for fields with same values, "+ + "encountered different array values for specified field path: %s, %s", values, a.ListValues) + } + a.ListValues = values + a.Count++ + return a.addRef(node.Key) + } + return nil + }) +} + +// visitScalar implements visitor +// visitScalar will set the field metadata on each scalar field whose name + value match +func (a *Add) visitScalar(object *yaml.RNode, p string, _, _ *openapi.ResourceSchema) error { + // check if the field matches + if a.Type == "array" { + return nil + } + if a.FieldName != "" && !strings.HasSuffix(p, a.FieldName) { + return nil + } + if a.FieldValue != "" && a.FieldValue != object.YNode().Value { + return nil + } + a.Count++ + return a.addRef(object) +} + +// addRef adds the setter/subst ref to the object node as a line comment +func (a *Add) addRef(object *yaml.RNode) error { + // read the field metadata + fm := fieldmeta.FieldMeta{SettersSchema: a.SettersSchema} + if err := fm.Read(object); err != nil { + return err + } + + // create the ref on the field metadata + r, err := spec.NewRef(a.Ref) + if err != nil { + return err + } + fm.Schema.Ref = r + + // write the field metadata + if err := fm.Write(object); err != nil { + return err + } + return nil +} + +// SetterDefinition may be used to update a files OpenAPI definitions with a new setter. +type SetterDefinition struct { + // Name is the name of the setter to create or update. + Name string `yaml:"name"` + + // Value is the value of the setter. + Value string `yaml:"value"` + + // ListValues are the value of a list setter. + ListValues []string `yaml:"listValues,omitempty"` + + // SetBy is the person or role that last set the value. + SetBy string `yaml:"setBy,omitempty"` + + // Description is a description of the value. + Description string `yaml:"description,omitempty"` + + // Count is the number of fields set by this setter. + Count int `yaml:"count,omitempty"` + + // Type is the type of the setter value. + Type string `yaml:"type,omitempty"` + + // Schema is the openAPI schema for setter constraints. + Schema string `yaml:"schema,omitempty"` + + // EnumValues is a map of possible setter values to actual field values. + // If EnumValues is specified, then the value set the by user 1) MUST + // be present in the enumValues map as a key, and 2) the map entry value + // MUST be used as the value to set in the configuration (rather than the key) + // Example -- may be used for t-shirt sizing values by allowing cpu to be + // set to small, medium or large, and then mapping these values to cpu values -- 0.5, 2, 8 + EnumValues map[string]string `yaml:"enumValues,omitempty"` + + // Required indicates that the setter must be set by package consumer before + // live apply/preview. This field is added to the setter definition to record + // the package publisher's intent to make the setter required to be set. + Required bool `yaml:"required,omitempty"` + + // IsSet indicates the specified field has been explicitly assigned. + IsSet bool `yaml:"isSet,omitempty"` +} + +func (sd SetterDefinition) AddToFile(path string) error { + return yaml.UpdateFile(sd, path) +} + +func (sd SetterDefinition) Filter(object *yaml.RNode) (*yaml.RNode, error) { + key := fieldmeta.SetterDefinitionPrefix + sd.Name + + definitions, err := object.Pipe(yaml.LookupCreate( + yaml.MappingNode, openapi.SupplementaryOpenAPIFieldName, "definitions")) + if err != nil { + return nil, err + } + + setterDef, err := definitions.Pipe(yaml.LookupCreate(yaml.MappingNode, key)) + if err != nil { + return nil, err + } + + if sd.Schema != "" { + schNode, err := yaml.ConvertJSONToYamlNode(sd.Schema) + if err != nil { + return nil, err + } + + err = definitions.PipeE(yaml.SetField(key, schNode)) + if err != nil { + return nil, err + } + // don't write the schema to the extension + sd.Schema = "" + } + + if sd.Description != "" { + err = setterDef.PipeE(yaml.FieldSetter{Name: "description", StringValue: sd.Description}) + if err != nil { + return nil, err + } + // don't write the description to the extension + sd.Description = "" + } + + if sd.Type != "" { + err = setterDef.PipeE(yaml.FieldSetter{Name: "type", StringValue: sd.Type}) + if err != nil { + return nil, err + } + // don't write the type to the extension + sd.Type = "" + } + + ext, err := setterDef.Pipe(yaml.LookupCreate(yaml.MappingNode, K8sCliExtensionKey)) + if err != nil { + return nil, err + } + + b, err := yaml.Marshal(sd) + if err != nil { + return nil, err + } + y, err := yaml.Parse(string(b)) + if err != nil { + return nil, err + } + + if err := ext.PipeE(yaml.SetField("setter", y)); err != nil { + return nil, err + } + + return object, nil +} + +// SetterDefinition may be used to update a files OpenAPI definitions with a new substitution. +type SubstitutionDefinition struct { + // Name is the name of the substitution to create or update + Name string `yaml:"name"` + + // Pattern is the substitution pattern into which setter values are substituted + Pattern string `yaml:"pattern"` + + // Values are setters which are substituted into pattern to produce a field value + Values []Value `yaml:"values"` +} + +type Value struct { + // Marker is the string marker in pattern that is replace by the referenced setter. + Marker string `yaml:"marker"` + + // Ref is a reference to a setter to pull the replacement value from. + Ref string `yaml:"ref"` +} + +func (sd SubstitutionDefinition) AddToFile(path string) error { + return yaml.UpdateFile(sd, path) +} + +func (sd SubstitutionDefinition) Filter(object *yaml.RNode) (*yaml.RNode, error) { + // create the substitution extension value by marshalling the SubstitutionDefinition itself + b, err := yaml.Marshal(sd) + if err != nil { + return nil, err + } + sub, err := yaml.Parse(string(b)) + if err != nil { + return nil, err + } + + // lookup or create the definition for the substitution + defKey := fieldmeta.SubstitutionDefinitionPrefix + sd.Name + def, err := object.Pipe(yaml.LookupCreate( + yaml.MappingNode, openapi.SupplementaryOpenAPIFieldName, "definitions", defKey, "x-k8s-cli")) + if err != nil { + return nil, err + } + + // set the substitution on the definition + if err := def.PipeE(yaml.SetField("substitution", sub)); err != nil { + return nil, err + } + + return object, nil +} diff --git a/go/internal/forked/kyaml/setters2/add_test.go b/go/internal/forked/kyaml/setters2/add_test.go new file mode 100644 index 000000000..3140f38e6 --- /dev/null +++ b/go/internal/forked/kyaml/setters2/add_test.go @@ -0,0 +1,415 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package setters2 + +import ( + "io/ioutil" + "os" + "path/filepath" + "strings" + "testing" + + "github.com/stretchr/testify/assert" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" +) + +func TestAdd_Filter(t *testing.T) { + var tests = []struct { + name string + add Add + input string + expected string + err string + }{ + { + name: "add-replicas", + add: Add{ + FieldValue: "3", + Ref: "#/definitions/io.k8s.cli.setters.replicas", + }, + input: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: nginx-deployment +spec: + replicas: 3 + `, + expected: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: nginx-deployment +spec: + replicas: 3 # {"$openapi":"replicas"} + `, + }, + { + name: "add-replicas-annotations", + add: Add{ + FieldValue: "3", + Ref: "#/definitions/io.k8s.cli.setters.replicas", + }, + input: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: nginx-deployment + annotations: + something: 3 +spec: + replicas: 3 + `, + expected: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: nginx-deployment + annotations: + something: 3 # {"$openapi":"replicas"} +spec: + replicas: 3 # {"$openapi":"replicas"} + `, + }, + { + name: "add-replicas-name", + add: Add{ + FieldValue: "3", + FieldName: "replicas", + Ref: "#/definitions/io.k8s.cli.setters.replicas", + }, + input: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: nginx-deployment + annotations: + something: 3 +spec: + replicas: 3 + `, + expected: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: nginx-deployment + annotations: + something: 3 +spec: + replicas: 3 # {"$openapi":"replicas"} + `, + }, + { + name: "add-replicas-2x", + add: Add{ + FieldValue: "3", + FieldName: "replicas", + Ref: "#/definitions/io.k8s.cli.setters.replicas", + }, + input: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: nginx-deployment + annotations: + replicas: 3 +spec: + replicas: 3 + `, + expected: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: nginx-deployment + annotations: + replicas: 3 # {"$openapi":"replicas"} +spec: + replicas: 3 # {"$openapi":"replicas"} + `, + }, + { + name: "add-replicas-1x", + add: Add{ + FieldValue: "3", + FieldName: "spec.replicas", + Ref: "#/definitions/io.k8s.cli.setters.replicas", + }, + input: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: nginx-deployment + annotations: + replicas: 3 +spec: + replicas: 3 + `, + expected: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: nginx-deployment + annotations: + replicas: 3 +spec: + replicas: 3 # {"$openapi":"replicas"} + `, + }, + { + name: "add-field-inside-sequence", + add: Add{ + FieldValue: "/usr/share/nginx", + FieldName: "spec.containers.volumeMounts.mountPath", + Ref: "#/definitions/io.k8s.cli.setters.mountPath", + }, + input: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: nginx-deployment +spec: + containers: + - name: nginx + image: nginx + volumeMounts: + - name: nginx + mountPath: /usr/share/nginx + `, + expected: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: nginx-deployment +spec: + containers: + - name: nginx + image: nginx + volumeMounts: + - name: nginx + mountPath: /usr/share/nginx # {"$openapi":"mountPath"} + `, + }, + { + name: "add-replicas-error", + add: Add{ + Ref: "#/definitions/io.k8s.cli.setters.replicas", + }, + err: "must specify either fieldName or fieldValue", + input: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: nginx-deployment +spec: + replicas: 3 + `, + }, + { + name: "ref has . in name of setter", + add: Add{ + FieldValue: "3", + Ref: "#/definitions/io.k8s.cli.setters.foo.bar", + }, + input: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: nginx-deployment +spec: + replicas: 3 + `, + expected: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: nginx-deployment +spec: + replicas: 3 # {"$openapi":"foo.bar"} + `, + }, + } + for i := range tests { + test := tests[i] + t.Run(test.name, func(t *testing.T) { + // parse the input to be modified + r, err := yaml.Parse(test.input) + if !assert.NoError(t, err) { + t.FailNow() + } + + // invoke add + result, err := test.add.Filter(r) + if test.err != "" { + if !assert.Equal(t, test.err, err.Error()) { + t.FailNow() + } + return + } + + if !assert.NoError(t, err) { + t.FailNow() + } + + // compare the actual and expected output + actual, err := result.String() + if !assert.NoError(t, err) { + t.FailNow() + } + actual = strings.TrimSpace(actual) + expected := strings.TrimSpace(test.expected) + if !assert.Equal(t, expected, actual) { + t.FailNow() + } + }) + } +} + +var resourcefile = `apiVersion: resource.dev/v1alpha1 +kind: resourcefile +metadata: + name: hello-world-set +upstream: + type: git + git: + commit: 5c1c019b59299a4f6c7edd1ff5ff54d720621bbe + directory: /package-examples/helloworld-set + ref: v0.1.0 +packageMetadata: + shortDescription: example package using setters` + +func TestAdd_Filter2(t *testing.T) { + path := filepath.Join(os.TempDir(), "resourcefile") + + // write initial resourcefile to temp path + err := ioutil.WriteFile(path, []byte(resourcefile), 0666) + if !assert.NoError(t, err) { + t.FailNow() + } + + // add a setter definition + sd := SetterDefinition{ + Name: "image", + Value: "1", + } + + err = sd.AddToFile(path) + + if !assert.NoError(t, err) { + t.FailNow() + } + + // update setter definition + sd2 := SetterDefinition{ + Name: "image", + Value: "2", + } + + err = sd2.AddToFile(path) + + if !assert.NoError(t, err) { + t.FailNow() + } + + b, err := ioutil.ReadFile(path) + if err != nil { + t.FailNow() + } + + expected := `apiVersion: resource.dev/v1alpha1 +kind: resourcefile +metadata: + name: hello-world-set +upstream: + type: git + git: + commit: 5c1c019b59299a4f6c7edd1ff5ff54d720621bbe + directory: /package-examples/helloworld-set + ref: v0.1.0 +packageMetadata: + shortDescription: example package using setters +openAPI: + definitions: + io.k8s.cli.setters.image: + x-k8s-cli: + setter: + name: image + value: "2" +` + assert.Equal(t, expected, string(b)) +} + +func TestAddUpdateSubstitution(t *testing.T) { + path := filepath.Join(os.TempDir(), "resourcefile") + + // write initial resourcefile to temp path + err := ioutil.WriteFile(path, []byte(resourcefile), 0666) + if !assert.NoError(t, err) { + t.FailNow() + } + + value1 := Value{ + Marker: "IMAGE_NAME", + Ref: "#/definitions/io.k8s.cli.setters.image-name", + } + + value2 := Value{ + Marker: "IMAGE_TAG", + Ref: "#/definitions/io.k8s.cli.setters.image-tag", + } + + values := []Value{value1, value2} + + // add a setter definition + subd := SubstitutionDefinition{ + Name: "image", + Pattern: "IMAGE_NAME:IMAGE_TAG", + Values: values, + } + + err = subd.AddToFile(path) + + if !assert.NoError(t, err) { + t.FailNow() + } + + // update setter definition + subd2 := SubstitutionDefinition{ + Name: "image", + Pattern: "IMAGE_NAME:IMAGE_TAG2", + } + + err = subd2.AddToFile(path) + + if !assert.NoError(t, err) { + t.FailNow() + } + + b, err := ioutil.ReadFile(path) + if err != nil { + t.FailNow() + } + + expected := `apiVersion: resource.dev/v1alpha1 +kind: resourcefile +metadata: + name: hello-world-set +upstream: + type: git + git: + commit: 5c1c019b59299a4f6c7edd1ff5ff54d720621bbe + directory: /package-examples/helloworld-set + ref: v0.1.0 +packageMetadata: + shortDescription: example package using setters +openAPI: + definitions: + io.k8s.cli.substitutions.image: + x-k8s-cli: + substitution: + name: image + pattern: IMAGE_NAME:IMAGE_TAG2 + values: [] +` + assert.Equal(t, expected, string(b)) +} diff --git a/go/internal/forked/kyaml/setters2/delete.go b/go/internal/forked/kyaml/setters2/delete.go new file mode 100644 index 000000000..d49b94812 --- /dev/null +++ b/go/internal/forked/kyaml/setters2/delete.go @@ -0,0 +1,171 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package setters2 + +import ( + "strings" + + "k8s.io/kube-openapi/pkg/validation/spec" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/errors" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/fieldmeta" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/openapi" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" +) + +// Delete delete openAPI definition references from resource fields. +type Delete struct { + // Name is the name of the openAPI definition to delete. + Name string + + // DefinitionPrefix is the prefix of the OpenAPI definition type + DefinitionPrefix string + + SettersSchema *spec.Schema +} + +// Filter implements yaml.Filter +func (d *Delete) Filter(object *yaml.RNode) (*yaml.RNode, error) { + return object, accept(d, object, d.SettersSchema) +} + +func (d *Delete) visitSequence(_ *yaml.RNode, _ string, _ *openapi.ResourceSchema) error { + // no-op + return nil +} + +func (d *Delete) visitMapping(object *yaml.RNode, _ string, _ *openapi.ResourceSchema) error { + fieldRNodes, err := object.FieldRNodes() + if err != nil { + return err + } + + // for each of the field node key visit it as scalar to delete the array setter comment + for _, fieldRNode := range fieldRNodes { + err := d.visitScalar(fieldRNode, "", nil, nil) + if err != nil { + return err + } + } + return nil +} + +// visitScalar implements visitor +// visitScalar will remove the reference on each scalar field whose name matches. +func (d *Delete) visitScalar(object *yaml.RNode, _ string, _, _ *openapi.ResourceSchema) error { + // read the field metadata + fm := fieldmeta.FieldMeta{SettersSchema: d.SettersSchema} + if err := fm.Read(object); err != nil { + return err + } + + // Delete the reference iff the ref string matches with DefinitionPrefix + if strings.HasSuffix(fm.Schema.Ref.String(), d.DefinitionPrefix+d.Name) { + // remove the ref on the metadata + fm.Schema.Ref = spec.Ref{} + + // write the field metadata + if err := fm.Write(object); err != nil { + return err + } + } + + return nil +} + +// DeleterDefinition may be used to update a files OpenAPI definitions with a new setter. +type DeleterDefinition struct { + // Name is the name of the openAPI definition to delete. + Name string `yaml:"name"` + + // DefinitionPrefix is the prefix of the OpenAPI definition type + DefinitionPrefix string `yaml:"definitionPrefix"` +} + +func (dd DeleterDefinition) DeleteFromFile(path string) error { + return yaml.UpdateFile(dd, path) +} + +// SubstReferringDefinition check if the definition used in substitution and return the substitution name if true +func SubstReferringDefinition(definitions *yaml.RNode, key string) string { + fieldNames, err := definitions.Fields() + if err != nil { + return "" + } + for _, fieldName := range fieldNames { + // the definition key -- contains the substitution name + subkey := definitions.Field(fieldName).Key.YNode().Value + if strings.HasPrefix(subkey, fieldmeta.SubstitutionDefinitionPrefix) { + substNode, err := definitions.Field(fieldName).Value.Pipe(yaml.Lookup(K8sCliExtensionKey, "substitution")) + if err != nil { + continue + } + + b, err := substNode.MarshalJSON() + if err != nil { + continue + } + + subst := SubstitutionDefinition{} + if err := yaml.Unmarshal(b, &subst); err != nil { + continue + } + // Check the ref in value to see if it contains the setter key + for _, v := range subst.Values { + if strings.HasSuffix(v.Ref, key) { + return subst.Name + } + } + } + } + + return "" +} + +func (dd DeleterDefinition) Filter(object *yaml.RNode) (*yaml.RNode, error) { + key := dd.DefinitionPrefix + dd.Name + var defType string + + switch dd.DefinitionPrefix { + case fieldmeta.SubstitutionDefinitionPrefix: + defType = "substitution" + case fieldmeta.SetterDefinitionPrefix: + defType = "setter" + default: + return nil, errors.Errorf("the input delete definitionPrefix does't match any of openAPI definitions, "+ + "allowed values [%s, %s]", fieldmeta.SetterDefinitionPrefix, fieldmeta.SubstitutionDefinitionPrefix) + } + + definitions, err := object.Pipe(yaml.Lookup(openapi.SupplementaryOpenAPIFieldName, "definitions")) + if err != nil { + return nil, err + } + // return error if the setter to be deleted doesn't exist + if definitions == nil || definitions.Field(key) == nil { + return nil, errors.Errorf("%s %q does not exist", defType, dd.Name) + } + + subst := SubstReferringDefinition(definitions, key) + + if subst != "" { + return nil, errors.Errorf("%s %q is used in substitution %q, please delete the parent substitution first", defType, dd.Name, subst) + } + + _, err = definitions.Pipe(yaml.FieldClearer{Name: key}) + if err != nil { + return nil, err + } + // remove definitions if it's empty + _, err = object.Pipe(yaml.Lookup(openapi.SupplementaryOpenAPIFieldName), yaml.FieldClearer{Name: "definitions", IfEmpty: true}) + if err != nil { + return nil, err + } + + // remove openApi if it's empty + _, err = object.Pipe(yaml.FieldClearer{Name: openapi.SupplementaryOpenAPIFieldName, IfEmpty: true}) + if err != nil { + return nil, err + } + + return object, nil +} diff --git a/go/internal/forked/kyaml/setters2/delete_test.go b/go/internal/forked/kyaml/setters2/delete_test.go new file mode 100644 index 000000000..9153918fe --- /dev/null +++ b/go/internal/forked/kyaml/setters2/delete_test.go @@ -0,0 +1,88 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package setters2 + +import ( + "io/ioutil" + "os" + "path/filepath" + "testing" + + "github.com/stretchr/testify/assert" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/fieldmeta" +) + +var resourcefile2 = `apiVersion: resource.dev/v1alpha1 +kind: resourcefile +metadata: + name: hello-world-set +upstream: + type: git + git: + commit: 5c1c019b59299a4f6c7edd1ff5ff54d720621bbe + directory: /package-examples/helloworld-set + ref: v0.1.0 +packageMetadata: + shortDescription: example package using setters +openAPI: + definitions: + io.k8s.cli.setters.image: + x-k8s-cli: + setter: + name: image + value: "2" + io.k8s.cli.setters.tag: + x-k8s-cli: + setter: + name: tag + value: "sometag" +` + +func TestDelete_Filter2(t *testing.T) { + path := filepath.Join(os.TempDir(), "resourcefile2") + + // write initial resourcefile to temp path + err := ioutil.WriteFile(path, []byte(resourcefile2), 0666) + if !assert.NoError(t, err) { + t.FailNow() + } + + // add a deleter definition + dd := DeleterDefinition{ + Name: "image", + DefinitionPrefix: fieldmeta.SetterDefinitionPrefix, + } + + err = dd.DeleteFromFile(path) + if !assert.NoError(t, err) { + t.FailNow() + } + + b, err := ioutil.ReadFile(path) + if err != nil { + t.FailNow() + } + + expected := `apiVersion: resource.dev/v1alpha1 +kind: resourcefile +metadata: + name: hello-world-set +upstream: + type: git + git: + commit: 5c1c019b59299a4f6c7edd1ff5ff54d720621bbe + directory: /package-examples/helloworld-set + ref: v0.1.0 +packageMetadata: + shortDescription: example package using setters +openAPI: + definitions: + io.k8s.cli.setters.tag: + x-k8s-cli: + setter: + name: tag + value: "sometag" +` + assert.Equal(t, expected, string(b)) +} diff --git a/go/internal/forked/kyaml/setters2/doc.go b/go/internal/forked/kyaml/setters2/doc.go new file mode 100644 index 000000000..90ae3ed90 --- /dev/null +++ b/go/internal/forked/kyaml/setters2/doc.go @@ -0,0 +1,163 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 +// +// Package setters2 contains libraries for setting resource field values from OpenAPI setter +// extensions. +// +// Setters +// +// Setters are used to programmatically set configuration field values -- e.g. through a cli or ui. +// +// Setters are defined through OpenAPI definitions using the x-k8s-cli extension. +// Note: additional OpenAPI definitions may be registered through openapi.AddSchema([]byte) +// +// Example OpenAPI schema containing a setter: +// +// { +// "definitions": { +// "io.k8s.cli.setters.replicas": { +// "x-k8s-cli": { +// "setter": { +// "name": "replicas", +// "value": "4" +// } +// } +// } +// } +// } +// +// Setter fields: +// +// x-k8s-cli.setter.name: name of the setter +// x-k8s-cli.setter.value: value of the setter that should be applied to fields +// +// The setter definition key must be of the form "io.k8s.cli.setters.NAME", where NAME matches the +// value of "x-k8s-cli.setter.name". +// +// When Set.Filter is called, the named setter will have its value applied to all resource +// fields referencing it. +// +// Fields may reference setters through a yaml comment containing the serialized JSON OpenAPI. +// +// Example Deployment resource with a "spec.replicas" field set by the "replicas" setter: +// +// apiVersion: apps/v1 +// kind: Deployment +// metadata: +// name: nginx-deployment +// spec: +// replicas: 4 # {"$ref": "#/definitions/io.k8s.cli.setters.replicas"} +// +// If the OpenAPI io.k8s.cli.setters.replicas x-k8s-cli.setter.value was changed from "4" to "5", +// then calling Set{Name: "replicas"}.Filter(deployment) would update the Deployment spec.replicas +// value from 4 to 5. +// +// Updated OpenAPI: +// +// { +// "definitions": { +// "io.k8s.cli.setters.replicas": { +// "x-k8s-cli": { +// "setter": { +// "name": "replicas", +// "value": "5" +// } +// } +// } +// } +// } +// +// Updated Deployment Configuration: +// +// apiVersion: apps/v1 +// kind: Deployment +// metadata: +// name: nginx-deployment +// spec: +// replicas: 5 # {"$ref": "#/definitions/io.k8s.cli.setters.replicas"} +// +// Substitutions +// +// Substitutions are used to programmatically set configuration field values using multiple +// setters which are substituted into a pattern string. +// +// Substitutions may be used when a field value does not cleanly map to a single setter, but +// instead matches some string pattern where setters may be substituted in. +// +// Fields may reference substitutions the same way they do setters, however substitutions +// reference setters from which they are derived. +// +// Example OpenAPI schema containing a substitution derived from 2 setters: +// +// { +// "definitions": { +// "io.k8s.cli.setters.image-name": { +// "x-k8s-cli": { +// "setter": { +// "name": "image-name", +// "value": "nginx" +// } +// } +// }, +// "io.k8s.cli.setters.image-tag": { +// "x-k8s-cli": { +// "setter": { +// "name": "image-tag", +// "value": "1.8.1" +// } +// } +// }, +// "io.k8s.cli.substitutions.image-name-tag": { +// "x-k8s-cli": { +// "substitution": { +// "name": "image-name-tag", +// "pattern": "IMAGE_NAME:IMAGE_TAG", +// "values": [ +// {"marker": "IMAGE_NAME", "ref": "#/definitions/io.k8s.cli.setters.image-name"} +// {"marker": "IMAGE_TAG", "ref": "#/definitions/io.k8s.cli.setters.image-tag"} +// ] +// } +// } +// } +// } +// } +// +// Substitution Fields. +// +// x-k8s-cli.substitution.name: name of the substitution +// x-k8s-cli.substitution.pattern: string pattern to substitute markers into +// x-k8s-cli.substitution.values.marker: the marker substring within pattern to replace +// x-k8s-cli.substitution.values.ref: the setter ref containing the value to replace the marker with +// +// The substitution is composed of a "pattern" containing markers, and a list of setter "values" +// which are substituted into the markers. +// +// Example Deployment with substitution: +// +// apiVersion: apps/v1 +// kind: Deployment +// metadata: +// name: nginx-deployment +// spec: +// template: +// spec: +// containers: +// - name: nginx +// image: nginx:1.8.1 # {"$ref": "#/definitions/io.k8s.cli.substitutions.image-name-tag"} +// +// spec.template.spec.containers[name=nginx].image is set by the "image" substitution any time +// either "image-name" or "image-tag" is set. Whenever any setter referenced by a substitution +// is set, the substitution will be recalculated by substituting its values into its pattern. +// +// +// If the OpenAPI io.k8s.cli.setters.image-name x-k8s-cli.setter.value was changed from "1.8.1" +// to "1.8.2", then calling either Set{Name: "image-name"}.Filter(deployment) or +// Set{Name: "image-tag"}.Filter(deployment) would update the Deployment field +// spec.template.spec.container[name=nginx].image from "nginx:1.8.1" to "nginx:1.8.2". +// +// Adding Field References +// +// References to setters and substitutions may be added to fields using the Add Filter. +// Add will write a JSON OpenAPI string as a comment to any fields matching the specified +// FieldName add FieldValue. +package setters2 diff --git a/go/internal/forked/kyaml/setters2/example_test.go b/go/internal/forked/kyaml/setters2/example_test.go new file mode 100644 index 000000000..bd73ff584 --- /dev/null +++ b/go/internal/forked/kyaml/setters2/example_test.go @@ -0,0 +1,82 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package setters2 + +import ( + "fmt" + + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" +) + +// ExampleAdd demonstrates adding a setter reference to fields. +func ExampleAdd_fieldName() { + deployment := ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: nginx-deployment + annotations: + something: 3 +spec: + replicas: 3 +` + + object := yaml.MustParse(deployment) // parse the configuration + err := object.PipeE(&Add{ + Ref: "#/definitions/io.k8s.cli.setters.replicas", + FieldName: "replicas", + }) + if err != nil { + panic(err) + } + + // Print the object with the update value + fmt.Println(object.MustString()) + + // Output: + // apiVersion: apps/v1 + // kind: Deployment + // metadata: + // name: nginx-deployment + // annotations: + // something: 3 + // spec: + // replicas: 3 # {"$openapi":"replicas"} +} + +// ExampleAdd demonstrates adding a setter reference to fields. +func ExampleAdd_fieldValue() { + deployment := ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: nginx-deployment + annotations: + something: 3 +spec: + replicas: 3 +` + + object := yaml.MustParse(deployment) // parse the configuration + err := object.PipeE(&Add{ + Ref: "#/definitions/io.k8s.cli.setters.replicas", + FieldValue: "3", + }) + if err != nil { + panic(err) + } + + // Print the object with the update value + fmt.Println(object.MustString()) + + // Output: + // apiVersion: apps/v1 + // kind: Deployment + // metadata: + // name: nginx-deployment + // annotations: + // something: 3 # {"$openapi":"replicas"} + // spec: + // replicas: 3 # {"$openapi":"replicas"} +} diff --git a/go/internal/forked/kyaml/setters2/list.go b/go/internal/forked/kyaml/setters2/list.go new file mode 100644 index 000000000..773f7eefb --- /dev/null +++ b/go/internal/forked/kyaml/setters2/list.go @@ -0,0 +1,195 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package setters2 + +import ( + "sort" + "strings" + + "k8s.io/kube-openapi/pkg/validation/spec" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/errors" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/fieldmeta" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/kio" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" +) + +// List lists the setters specified in the OpenAPI +// excludes the subpackages which contain file with +// name OpenAPIFileName in them +type List struct { + Name string + + OpenAPIFileName string + + Setters []SetterDefinition + + Substitutions []SubstitutionDefinition + + SettersSchema *spec.Schema +} + +// ListSetters initializes l.Setters with the setters from the OpenAPI definitions in the file +func (l *List) ListSetters(openAPIPath, resourcePath string) error { + y, err := yaml.ReadFile(openAPIPath) + if err != nil { + return err + } + return l.listSetters(y, resourcePath) +} + +// ListSubst initializes l.Substitutions with the substitutions from the OpenAPI definitions in the file +func (l *List) ListSubst(openAPIPath string) error { + y, err := yaml.ReadFile(openAPIPath) + if err != nil { + return err + } + return l.listSubst(y) +} + +func (l *List) listSetters(object *yaml.RNode, resourcePath string) error { + // read the OpenAPI definitions + def, err := object.Pipe(yaml.LookupCreate(yaml.MappingNode, "openAPI", "definitions")) + if err != nil { + return err + } + if yaml.IsMissingOrNull(def) { + return nil + } + + // iterate over definitions -- find those that are setters + err = def.VisitFields(func(node *yaml.MapNode) error { + setter := SetterDefinition{} + + // the definition key -- contains the setter name + key := node.Key.YNode().Value + + if !strings.HasPrefix(key, fieldmeta.SetterDefinitionPrefix) { + // not a setter -- doesn't have the right prefix + return nil + } + + setterNode, err := node.Value.Pipe(yaml.Lookup(K8sCliExtensionKey, "setter")) + if err != nil { + return err + } + if yaml.IsMissingOrNull(setterNode) { + // has the setter prefix, but missing the setter extension + return errors.Errorf("missing x-k8s-cli.setter for %s", key) + } + + // unmarshal the yaml for the setter extension into the definition struct + b, err := setterNode.String() + if err != nil { + return err + } + if err := yaml.Unmarshal([]byte(b), &setter); err != nil { + return err + } + + if l.Name != "" && l.Name != setter.Name { + // not the setter that was requested by list + return nil + } + + // the description is not part of the extension, and should be pulled out + // separately from the extension values. + description := node.Value.Field("description") + if description != nil { + setter.Description = description.Value.YNode().Value + } + + // count the number of fields set by this setter + setter.Count, err = l.count(resourcePath, setter.Name) + if err != nil { + return err + } + + l.Setters = append(l.Setters, setter) + return nil + }) + if err != nil { + return err + } + + // sort the setters by their name + sort.Slice(l.Setters, func(i, j int) bool { + return l.Setters[i].Name < l.Setters[j].Name + }) + + return nil +} + +func (l *List) listSubst(object *yaml.RNode) error { + // read the OpenAPI definitions + def, err := object.Pipe(yaml.LookupCreate(yaml.MappingNode, "openAPI", "definitions")) + if err != nil { + return err + } + if yaml.IsMissingOrNull(def) { + return nil + } + + // iterate over definitions -- find those that are substitutions + err = def.VisitFields(func(node *yaml.MapNode) error { + subst := SubstitutionDefinition{} + + // the definition key -- contains the substitution name + key := node.Key.YNode().Value + + if !strings.HasPrefix(key, fieldmeta.SubstitutionDefinitionPrefix) { + // not a substitution -- doesn't have the right prefix + return nil + } + + substNode, err := node.Value.Pipe(yaml.Lookup(K8sCliExtensionKey, "substitution")) + if err != nil { + return err + } + if yaml.IsMissingOrNull(substNode) { + // has the substitution prefix, but missing the setter extension + return errors.Errorf("missing x-k8s-cli.substitution for %s", key) + } + + // unmarshal the yaml for the substitution extension into the definition struct + b, err := substNode.String() + if err != nil { + return err + } + if err := yaml.Unmarshal([]byte(b), &subst); err != nil { + return err + } + + if l.Name != "" && l.Name != subst.Name { + // not the substitution that was requested by list + return nil + } + + l.Substitutions = append(l.Substitutions, subst) + return nil + }) + if err != nil { + return err + } + + // sort the substitutions by their name + sort.Slice(l.Substitutions, func(i, j int) bool { + return l.Substitutions[i].Name < l.Substitutions[j].Name + }) + + return nil +} + +// count returns the number of fields set by the setter with name +// this excludes all the subpackages with openAPI file in them +// set filter is leveraged for this but the resources are not written +// back to files as only LocalPackageReader is invoked and not writer +func (l *List) count(path, name string) (int, error) { + s := &Set{Name: name, SettersSchema: l.SettersSchema} + err := kio.Pipeline{ + Inputs: []kio.Reader{&kio.LocalPackageReader{PackagePath: path, PackageFileName: l.OpenAPIFileName}}, + Filters: []kio.Filter{kio.FilterAll(s)}, + }.Execute() + + return s.Count, err +} diff --git a/go/internal/forked/kyaml/setters2/list_test.go b/go/internal/forked/kyaml/setters2/list_test.go new file mode 100644 index 000000000..83974417f --- /dev/null +++ b/go/internal/forked/kyaml/setters2/list_test.go @@ -0,0 +1,288 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package setters2 + +import ( + "io/ioutil" + "os" + "testing" + + "github.com/stretchr/testify/assert" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/openapi" +) + +func TestList(t *testing.T) { + var tests = []struct { + name string + setter string + openapi string + input string + expected []SetterDefinition + }{ + { + name: "list-replicas", + openapi: ` +openAPI: + definitions: + io.k8s.cli.setters.replicas: + x-k8s-cli: + setter: + name: replicas + value: "3" + setBy: me + description: "hello world" + `, + input: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: nginx-deployment +spec: + replicas: 3 # {"$ref": "#/definitions/io.k8s.cli.setters.replicas"} + `, + expected: []SetterDefinition{ + {Name: "replicas", Value: "3", SetBy: "me", Description: "hello world", Count: 1}, + }, + }, + { + name: "list-multiple", + openapi: ` +openAPI: + definitions: + io.k8s.cli.setters.replicas: + description: "hello world 1" + x-k8s-cli: + setter: + name: replicas + value: "3" + setBy: me1 + io.k8s.cli.setters.image: + description: "hello world 2" + x-k8s-cli: + setter: + name: image + value: "nginx" + setBy: me2 + io.k8s.cli.setters.tag: + description: "hello world 3" + x-k8s-cli: + setter: + name: tag + value: "1.7.9" + setBy: me3 + io.k8s.cli.substitutions.image: + x-k8s-cli: + substitution: + name: image + pattern: IMAGE:TAG + values: + - marker: IMAGE + ref: '#/definitions/io.k8s.cli.setters.image' + - marker: TAG + ref: '#/definitions/io.k8s.cli.setters.tag' + `, + input: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: nginx-deployment +spec: + replicas: 3 # {"$ref": "#/definitions/io.k8s.cli.setters.replicas"} + template: + spec: + containers: + - name: nginx + image: nginx:1.7.9 # {"$ref": "#/definitions/io.k8s.cli.substitutions.image"} + - name: nginx2 + image: nginx # {"$ref": "#/definitions/io.k8s.cli.setters.image"} + `, + expected: []SetterDefinition{ + {Name: "image", Value: "nginx", SetBy: "me2", Description: "hello world 2", Count: 2}, + {Name: "replicas", Value: "3", SetBy: "me1", Description: "hello world 1", Count: 1}, + {Name: "tag", Value: "1.7.9", SetBy: "me3", Description: "hello world 3", Count: 1}, + }, + }, + { + name: "list-multiple-resources", + openapi: ` +openAPI: + definitions: + io.k8s.cli.setters.replicas: + description: "hello world 1" + x-k8s-cli: + setter: + name: replicas + value: "3" + setBy: me1 + io.k8s.cli.setters.image: + description: "hello world 2" + x-k8s-cli: + setter: + name: image + value: "nginx" + setBy: me2 + io.k8s.cli.setters.tag: + description: "hello world 3" + x-k8s-cli: + setter: + name: tag + value: "1.7.9" + setBy: me3 + io.k8s.cli.substitutions.image: + x-k8s-cli: + substitution: + name: image + pattern: IMAGE:TAG + values: + - marker: IMAGE + ref: '#/definitions/io.k8s.cli.setters.image' + - marker: TAG + ref: '#/definitions/io.k8s.cli.setters.tag' + `, + input: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: nginx-deployment-1 +spec: + replicas: 3 # {"$ref": "#/definitions/io.k8s.cli.setters.replicas"} + template: + spec: + containers: + - name: nginx + image: nginx:1.7.9 # {"$ref": "#/definitions/io.k8s.cli.substitutions.image"} + - name: nginx2 + image: nginx # {"$ref": "#/definitions/io.k8s.cli.setters.image"} +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + name: nginx-deployment-2 +spec: + replicas: 3 # {"$ref": "#/definitions/io.k8s.cli.setters.replicas"} + template: + spec: + containers: + - name: nginx + image: nginx:1.7.9 # {"$ref": "#/definitions/io.k8s.cli.substitutions.image"} + - name: nginx2 + image: nginx +`, + expected: []SetterDefinition{ + {Name: "image", Value: "nginx", SetBy: "me2", Description: "hello world 2", Count: 3}, + {Name: "replicas", Value: "3", SetBy: "me1", Description: "hello world 1", Count: 2}, + {Name: "tag", Value: "1.7.9", SetBy: "me3", Description: "hello world 3", Count: 2}, + }, + }, + { + name: "list-name", + openapi: ` +openAPI: + definitions: + io.k8s.cli.setters.replicas: + description: "hello world 1" + x-k8s-cli: + setter: + name: replicas + value: "3" + setBy: me1 + io.k8s.cli.setters.image: + description: "hello world 2" + x-k8s-cli: + setter: + name: image + value: "nginx" + setBy: me2 + io.k8s.cli.setters.tag: + description: "hello world 3" + x-k8s-cli: + setter: + name: tag + value: "1.7.9" + setBy: me3 + io.k8s.cli.substitutions.image: + x-k8s-cli: + substitution: + name: image + pattern: IMAGE:TAG + values: + - marker: IMAGE + ref: '#/definitions/io.k8s.cli.setters.image' + - marker: TAG + ref: '#/definitions/io.k8s.cli.setters.tag' + `, + input: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: nginx-deployment-1 +spec: + replicas: 3 # {"$ref": "#/definitions/io.k8s.cli.setters.replicas"} + template: + spec: + containers: + - name: nginx + image: nginx:1.7.9 # {"$ref": "#/definitions/io.k8s.cli.substitutions.image"} + - name: nginx2 + image: nginx # {"$ref": "#/definitions/io.k8s.cli.setters.image"} +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + name: nginx-deployment-2 +spec: + replicas: 3 # {"$ref": "#/definitions/io.k8s.cli.setters.replicas"} + template: + spec: + containers: + - name: nginx + image: nginx:1.7.9 # {"$ref": "#/definitions/io.k8s.cli.substitutions.image"} + - name: nginx2 + image: nginx +`, + setter: "image", + expected: []SetterDefinition{ + {Name: "image", Value: "nginx", SetBy: "me2", Description: "hello world 2", Count: 3}, + }, + }, + } + for i := range tests { + test := tests[i] + t.Run(test.name, func(t *testing.T) { + // reset the openAPI afterward + defer openapi.ResetOpenAPI() + + f, err := ioutil.TempFile("", "k8s-cli-") + if !assert.NoError(t, err) { + t.FailNow() + } + defer os.Remove(f.Name()) + err = ioutil.WriteFile(f.Name(), []byte(test.openapi), 0600) + if !assert.NoError(t, err) { + t.FailNow() + } + + r, err := ioutil.TempFile("", "k8s-cli-*.yaml") + if !assert.NoError(t, err) { + t.FailNow() + } + defer os.Remove(r.Name()) + err = ioutil.WriteFile(r.Name(), []byte(test.input), 0600) + if !assert.NoError(t, err) { + t.FailNow() + } + + // invoke the setter + instance := &List{Name: test.setter, SettersSchema: SettersSchema(t, test.openapi)} + err = instance.ListSetters(f.Name(), r.Name()) + if !assert.NoError(t, err) { + t.FailNow() + } + + if !assert.Equal(t, test.expected, instance.Setters) { + t.FailNow() + } + }) + } +} diff --git a/go/internal/forked/kyaml/setters2/set.go b/go/internal/forked/kyaml/setters2/set.go new file mode 100644 index 000000000..7470487f4 --- /dev/null +++ b/go/internal/forked/kyaml/setters2/set.go @@ -0,0 +1,535 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package setters2 + +import ( + "fmt" + "strings" + "text/template" + + "k8s.io/kube-openapi/pkg/validation/spec" + "k8s.io/kube-openapi/pkg/validation/strfmt" + "k8s.io/kube-openapi/pkg/validation/validate" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/errors" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/fieldmeta" + goyaml "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/internal/forked/github.com/go-yaml/yaml" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/kio" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/kio/kioutil" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/openapi" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/sets" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" +) + +// Set sets resource field values from an OpenAPI setter +type Set struct { + // Name is the name of the setter to set on the object. i.e. matches the x-k8s-cli.setter.name + // of the setter that should have its value applied to fields which reference it. + Name string + + // Count is the number of fields that were updated by calling Filter + Count int + + // SetAll if set to true will set all setters regardless of name + SetAll bool + + SettersSchema *spec.Schema +} + +// Filter implements Set as a yaml.Filter +func (s *Set) Filter(object *yaml.RNode) (*yaml.RNode, error) { + return object, accept(s, object, s.SettersSchema) +} + +// isMatch returns true if the setter with name should have the field +// value set +func (s *Set) isMatch(name string) bool { + return s.SetAll || s.Name == name +} + +func (s *Set) visitMapping(_ *yaml.RNode, p string, _ *openapi.ResourceSchema) error { + return nil +} + +// visitSequence will perform setters for sequences +func (s *Set) visitSequence(object *yaml.RNode, p string, schema *openapi.ResourceSchema) error { + ext, err := getExtFromComment(schema) + if err != nil { + return err + } + if ext == nil || ext.Setter == nil || !s.isMatch(ext.Setter.Name) || + len(ext.Setter.ListValues) == 0 { + // setter was not invoked for this sequence + return nil + } + s.Count++ + + // set the values on the sequences + var elements []*yaml.Node + if len(ext.Setter.ListValues) > 0 { + if err := validateAgainstSchema(ext, schema.Schema); err != nil { + return err + } + } + for i := range ext.Setter.ListValues { + v := ext.Setter.ListValues[i] + n := yaml.NewScalarRNode(v).YNode() + n.Style = yaml.DoubleQuotedStyle + elements = append(elements, n) + } + object.YNode().Content = elements + object.YNode().Style = yaml.FoldedStyle + return nil +} + +// visitScalar +func (s *Set) visitScalar(object *yaml.RNode, p string, oa, settersSchema *openapi.ResourceSchema) error { + // get the openAPI for this field describing how to apply the setter + ext, err := getExtFromComment(settersSchema) + if err != nil { + return err + } + if ext == nil { + return nil + } + + var k8sSchema *spec.Schema + if oa != nil { + k8sSchema = oa.Schema + } + + // perform a direct set of the field if it matches + ok, err := s.set(object, ext, k8sSchema, settersSchema.Schema) + if err != nil { + return err + } + if ok { + s.Count++ + return nil + } + + // perform a substitution of the field if it matches + sub, err := s.substitute(object, ext) + if err != nil { + return err + } + if sub { + s.Count++ + } + return nil +} + +// substitute updates the value of field from ext if ext contains a substitution that +// depends on a setter whose name matches s.Name. +func (s *Set) substitute(field *yaml.RNode, ext *CliExtension) (bool, error) { + // check partial setters to see if they contain the setter as part of a + // substitution + if ext.Substitution == nil { + return false, nil + } + + // track the visited nodes to detect cycles in nested substitutions + visited := sets.String{} + + // nameMatch indicates if the input substitution depends on the specified setter, + // the substitution in ext is parsed recursively and if the setter in Set is hit while + // parsing, it indicates the match + nameMatch := false + + res, err := s.substituteUtil(ext, visited, &nameMatch) + if err != nil { + return false, err + } + + if !nameMatch { + // doesn't depend on the setter, don't modify its value + return false, nil + } + + field.YNode().Value = res + + // substitutions are always strings + field.YNode().Tag = yaml.NodeTagString + + return true, nil +} + +// substituteUtil recursively parses nested substitutions in ext and sets the setter value +// returns error if cyclic substitution is detected or any other unexpected errors +func (s *Set) substituteUtil(ext *CliExtension, visited sets.String, nameMatch *bool) (string, error) { + // check if the substitution has already been visited and throw error as cycles + // are not allowed in nested substitutions + if visited.Has(ext.Substitution.Name) { + return "", errors.Errorf( + "cyclic substitution detected with name " + ext.Substitution.Name) + } + + visited.Insert(ext.Substitution.Name) + pattern := ext.Substitution.Pattern + + // substitute each setter into the pattern to get the new value + // if substitution references to another substitution, recursively + // process the nested substitutions to replace the pattern with setter values + for _, v := range ext.Substitution.Values { + if v.Ref == "" { + return "", errors.Errorf( + "missing reference on substitution " + ext.Substitution.Name) + } + ref, err := spec.NewRef(v.Ref) + if err != nil { + return "", errors.Wrap(err) + } + def, err := openapi.Resolve(&ref, s.SettersSchema) // resolve the def to its openAPI def + if err != nil { + return "", errors.Wrap(err) + } + defExt, err := GetExtFromSchema(def) // parse the extension out of the openAPI + if err != nil { + return "", errors.Wrap(err) + } + + if defExt.Substitution != nil { + // parse recursively if it reference is substitution + substVal, err := s.substituteUtil(defExt, visited, nameMatch) + if err != nil { + return "", err + } + pattern = strings.ReplaceAll(pattern, v.Marker, substVal) + continue + } + + // if code reaches this point, this is a setter, so validate the setter schema + if err := validateAgainstSchema(defExt, def); err != nil { + return "", err + } + + if s.isMatch(defExt.Setter.Name) { + // the substitution depends on the specified setter + *nameMatch = true + } + + if val, found := defExt.Setter.EnumValues[defExt.Setter.Value]; found { + // the setter has an enum-map. we should replace the marker with the + // enum value looked up from the map rather than the enum key + pattern = strings.ReplaceAll(pattern, v.Marker, val) + } else { + pattern = strings.ReplaceAll(pattern, v.Marker, defExt.Setter.Value) + } + } + + return pattern, nil +} + +// set applies the value from ext to field if its name matches s.Name +func (s *Set) set(field *yaml.RNode, ext *CliExtension, k8sSch, sch *spec.Schema) (bool, error) { + // check full setter + if ext.Setter == nil || !s.isMatch(ext.Setter.Name) { + return false, nil + } + + if err := validateAgainstSchema(ext, sch); err != nil { + return false, err + } + + if val, found := ext.Setter.EnumValues[ext.Setter.Value]; found { + // the setter has an enum-map. we should replace the marker with the + // enum value looked up from the map rather than the enum key + field.YNode().Value = val + return true, nil + } + + // this has a full setter, set its value + field.YNode().Value = ext.Setter.Value + + // format the node so it is quoted if it is a string. If there is + // type information on the setter schema, we use it. Otherwise we + // fall back to the field schema if it exists. + if len(sch.Type) > 0 { + yaml.FormatNonStringStyle(field.YNode(), *sch) + } else if k8sSch != nil { + yaml.FormatNonStringStyle(field.YNode(), *k8sSch) + } + return true, nil +} + +// validateAgainstSchema validates the input setter value against user provided +// openAI schema +func validateAgainstSchema(ext *CliExtension, sch *spec.Schema) error { + fixSchemaTypes(sch) + sc := spec.Schema{} + sc.Properties = map[string]spec.Schema{} + sc.Properties[ext.Setter.Name] = *sch + + var inputYAML string + if len(ext.Setter.ListValues) > 0 { + // tmplText contains the template we will use to produce a yaml + // document that we can use for validation. + var tmplText string + if sch.Items != nil && sch.Items.Schema != nil && + shouldQuoteSetterValue(ext.Setter.ListValues, sch.Items.Schema.Type) { + // If string is one of the legal types for the value, we + // output it with quotes in the yaml document to make sure it + // is later parsed as a string. + tmplText = `{{.key}}:{{block "list" .values}}{{"\n"}}{{range .}}{{printf "- %q\n" .}}{{end}}{{end}}` + } else { + // If string is not specifically set as the type, we just + // let the yaml unmarshaller detect the correct type. Thus, we + // do not add quotes around the value. + tmplText = `{{.key}}:{{block "list" .values}}{{"\n"}}{{range .}}{{println "-" .}}{{end}}{{end}}` + } + + tmpl, err := template.New("validator").Parse(tmplText) + if err != nil { + return err + } + var builder strings.Builder + err = tmpl.Execute(&builder, map[string]interface{}{ + "key": ext.Setter.Name, + "values": ext.Setter.ListValues, + }) + if err != nil { + return err + } + inputYAML = builder.String() + } else { + var format string + // Only add quotes around the value is string is one of the + // types in the schema. + if shouldQuoteSetterValue([]string{ext.Setter.Value}, sch.Type) { + format = "%s: \"%s\"" + } else { + format = "%s: %s" + } + inputYAML = fmt.Sprintf(format, ext.Setter.Name, ext.Setter.Value) + } + + input := map[string]interface{}{} + err := goyaml.Unmarshal([]byte(inputYAML), &input) + if err != nil { + return err + } + err = validate.AgainstSchema(&sc, input, strfmt.Default) + if err != nil { + return errors.Errorf("The input value doesn't validate against provided OpenAPI schema: %v\n", err.Error()) + } + return nil +} + +// shouldQuoteSetterValue returns true if string is one of the types in the +// schema, or if the value ends in a ':' (the yaml parser gets confused by +// the ':' at the end unless the value is quoted) +func shouldQuoteSetterValue(a []string, schType spec.StringOrArray) bool { + if schType.Contains("string") { + return true + } + + for _, s := range a { + if strings.HasSuffix(s, ":") { + return true + } + } + return false +} + +// fixSchemaTypes traverses the schema and checks for some common +// errors for the type field. This currently involves users using +// 'int' instead of 'integer' and 'bool' instead of 'boolean'. Early versions +// of setters didn't validate this, so there are users that have invalid +// types in their packages. +func fixSchemaTypes(sc *spec.Schema) { + for i := range sc.Type { + currentType := sc.Type[i] + if currentType == "int" { + sc.Type[i] = "integer" + } + if currentType == "bool" { + sc.Type[i] = "boolean" + } + } + + if items := sc.Items; items != nil { + if items.Schema != nil { + fixSchemaTypes(items.Schema) + } + for i := range items.Schemas { + schema := items.Schemas[i] + fixSchemaTypes(&schema) + } + } +} + +// SetOpenAPI updates a setter value +type SetOpenAPI struct { + // Name is the name of the setter to add + Name string `yaml:"name"` + // Value is the current value of the setter + Value string `yaml:"value"` + + // ListValue is the current value for a list of items + ListValues []string `yaml:"listValue"` + + Description string `yaml:"description"` + + SetBy string `yaml:"setBy"` + + IsSet bool `yaml:"isSet"` +} + +// UpdateFile updates the OpenAPI definitions in a file with the given setter value. +func (s SetOpenAPI) UpdateFile(path string) error { + return yaml.UpdateFile(s, path) +} + +func (s SetOpenAPI) Filter(object *yaml.RNode) (*yaml.RNode, error) { + key := fieldmeta.SetterDefinitionPrefix + s.Name + oa, err := object.Pipe(yaml.Lookup("openAPI", "definitions", key)) + if err != nil { + return nil, err + } + if oa == nil { + return nil, errors.Errorf("setter %q is not found", s.Name) + } + def, err := oa.Pipe(yaml.Lookup("x-k8s-cli", "setter")) + if err != nil { + return nil, err + } + if def == nil { + return nil, errors.Errorf("setter %q is not found", s.Name) + } + + // record the OpenAPI type for the setter + var t string + if n := oa.Field("type"); n != nil { + t = n.Value.YNode().Value + } + + // if the setter contains an enumValues map, then ensure the set value appears + // as a key in the map + if values, err := def.Pipe( + yaml.Lookup("enumValues")); err != nil { + // error looking up the enumValues + return nil, err + } else if values != nil { + // contains enumValues map -- validate the set value against the map entries + + // get the enumValues keys + fields, err := values.Fields() + if err != nil { + return nil, err + } + + // search for the user provided value in the set of allowed values + var match bool + for i := range fields { + if fields[i] == s.Value { + // found a match, we are good + match = true + break + } + } + if !match { + // no match found -- provide an informative error to the user + return nil, errors.Errorf("%s does not match the possible values for %s: [%s]", + s.Value, s.Name, strings.Join(fields, ",")) + } + } + + v := yaml.NewScalarRNode(s.Value) + // values are always represented as strings the OpenAPI + // since the are unmarshalled into strings. Use double quote style to + // ensure this consistently. + v.YNode().Tag = yaml.NodeTagString + v.YNode().Style = yaml.DoubleQuotedStyle + + if t != "array" { + // set a scalar value + if err := def.PipeE(&yaml.FieldSetter{Name: "value", Value: v}); err != nil { + return nil, err + } + } else { + // set a list value + if err := def.PipeE(&yaml.FieldClearer{Name: "value"}); err != nil { + return nil, err + } + // create the list values + var elements []*yaml.Node + n := yaml.NewScalarRNode(s.Value).YNode() + n.Tag = yaml.NodeTagString + n.Style = yaml.DoubleQuotedStyle + elements = append(elements, n) + for i := range s.ListValues { + v := s.ListValues[i] + n := yaml.NewScalarRNode(v).YNode() + n.Style = yaml.DoubleQuotedStyle + elements = append(elements, n) + } + l := yaml.NewRNode(&yaml.Node{ + Kind: yaml.SequenceNode, + Content: elements, + }) + + def.YNode().Style = yaml.FoldedStyle + if err := def.PipeE(&yaml.FieldSetter{Name: "listValues", Value: l}); err != nil { + return nil, err + } + } + + if err := def.PipeE(&yaml.FieldSetter{Name: "setBy", StringValue: s.SetBy}); err != nil { + return nil, err + } + + if s.IsSet { + if err := def.PipeE(&yaml.FieldSetter{Name: "isSet", StringValue: "true"}); err != nil { + return nil, err + } + } + + if s.Description != "" { + d, err := object.Pipe(yaml.LookupCreate( + yaml.MappingNode, "openAPI", "definitions", key)) + if err != nil { + return nil, err + } + if err := d.PipeE(&yaml.FieldSetter{Name: "description", StringValue: s.Description}); err != nil { + return nil, err + } + } + + return object, nil +} + +// SetAll applies the set filter for all yaml nodes and only returns the nodes whose +// corresponding file has at least one node with input setter +func SetAll(s *Set) kio.Filter { + return kio.FilterFunc(func(nodes []*yaml.RNode) ([]*yaml.RNode, error) { + filesToUpdate := sets.String{} + // for each node record the set fields count before and after filter is applied and + // store the corresponding file paths if there is an increment in setters count + for i := range nodes { + preCount := s.Count + _, err := s.Filter(nodes[i]) + if err != nil { + return nil, errors.Wrap(err) + } + if s.Count > preCount { + path, _, err := kioutil.GetFileAnnotations(nodes[i]) + if err != nil { + return nil, errors.Wrap(err) + } + filesToUpdate.Insert(path) + } + } + var nodesInUpdatedFiles []*yaml.RNode + // return only the nodes whose corresponding file has at least one node with input setter + for i := range nodes { + path, _, err := kioutil.GetFileAnnotations(nodes[i]) + if err != nil { + return nil, errors.Wrap(err) + } + if filesToUpdate.Has(path) { + nodesInUpdatedFiles = append(nodesInUpdatedFiles, nodes[i]) + } + } + return nodesInUpdatedFiles, nil + }) +} diff --git a/go/internal/forked/kyaml/setters2/set_test.go b/go/internal/forked/kyaml/setters2/set_test.go new file mode 100644 index 000000000..588d53327 --- /dev/null +++ b/go/internal/forked/kyaml/setters2/set_test.go @@ -0,0 +1,1622 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package setters2 + +import ( + "io/ioutil" + "os" + "path/filepath" + "strings" + "testing" + + "github.com/stretchr/testify/assert" + "k8s.io/kube-openapi/pkg/validation/spec" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/openapi" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" +) + +func TestSet_Filter(t *testing.T) { + var tests = []struct { + name string + description string + setter string + openapi string + input string + expected string + }{ + { + name: "set-replicas", + setter: "replicas", + openapi: ` +openAPI: + definitions: + io.k8s.cli.setters.no-match-1': + x-k8s-cli: + setter: + name: no-match-1 + value: "1" + io.k8s.cli.setters.replicas: + x-k8s-cli: + setter: + name: replicas + value: "4" + io.k8s.cli.setters.no-match-2': + x-k8s-cli: + setter: + name: no-match-2 + value: "2" + `, + input: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: nginx-deployment +spec: + replicas: 3 # {"$ref": "#/definitions/io.k8s.cli.setters.replicas"} + `, + expected: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: nginx-deployment +spec: + replicas: 4 # {"$ref": "#/definitions/io.k8s.cli.setters.replicas"} + `, + }, + { + name: "set-foo-type", + description: "if a type is specified for a setter, ensure the field is of provided type", + setter: "foo", + openapi: ` +openAPI: + definitions: + io.k8s.cli.setters.foo: + x-k8s-cli: + setter: + name: foo + value: "4" + type: integer + `, + input: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: nginx-deployment + annotations: + foo: 3 # {"$ref": "#/definitions/io.k8s.cli.setters.foo"} + `, + expected: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: nginx-deployment + annotations: + foo: 4 # {"$ref": "#/definitions/io.k8s.cli.setters.foo"} + `, + }, + { + name: "set-foo-type-float", + description: "if a type is specified for a setter, ensure the field is of provided type", + setter: "foo", + openapi: ` +openAPI: + definitions: + io.k8s.cli.setters.foo: + x-k8s-cli: + setter: + name: foo + value: "4.0" + type: number + `, + input: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: nginx-deployment + annotations: + foo: 3 # {"$ref": "#/definitions/io.k8s.cli.setters.foo"} + `, + expected: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: nginx-deployment + annotations: + foo: 4.0 # {"$ref": "#/definitions/io.k8s.cli.setters.foo"} + `, + }, + { + name: "set-foo-no-type", + description: "if a type is not specified for a setter or k8s schema, keep existing quoting", + setter: "foo", + openapi: ` +openAPI: + definitions: + io.k8s.cli.setters.foo: + x-k8s-cli: + setter: + name: foo + value: "4" + `, + input: ` +apiVersion: custom/v1 +kind: Example +metadata: + name: nginx-deployment + annotations: + foo: 3 # {"$ref": "#/definitions/io.k8s.cli.setters.foo"} + `, + expected: ` +apiVersion: custom/v1 +kind: Example +metadata: + name: nginx-deployment + annotations: + foo: 4 # {"$ref": "#/definitions/io.k8s.cli.setters.foo"} + `, + }, + { + name: "set-replicas-enum", + setter: "replicas", + openapi: ` +openAPI: + definitions: + io.k8s.cli.setters.no-match-1': + x-k8s-cli: + setter: + name: no-match-1 + value: "1" + io.k8s.cli.setters.replicas: + x-k8s-cli: + setter: + name: replicas + value: "medium" + enumValues: + small: "1" + medium: "5" + large: "50" + io.k8s.cli.setters.no-match-2': + x-k8s-cli: + setter: + name: no-match-2 + value: "2" + `, + input: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: nginx-deployment +spec: + replicas: 1 # {"$ref": "#/definitions/io.k8s.cli.setters.replicas"} + `, + expected: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: nginx-deployment +spec: + replicas: 5 # {"$ref": "#/definitions/io.k8s.cli.setters.replicas"} + `, + }, + { + name: "set-replicas-enum-large", + setter: "replicas", + openapi: ` +openAPI: + definitions: + io.k8s.cli.setters.no-match-1': + x-k8s-cli: + setter: + name: no-match-1 + value: "1" + io.k8s.cli.setters.replicas: + x-k8s-cli: + setter: + name: replicas + value: "large" + enumValues: + small: "1" + medium: "5" + large: "50" + io.k8s.cli.setters.no-match-2': + x-k8s-cli: + setter: + name: no-match-2 + value: "2" + `, + input: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: nginx-deployment +spec: + replicas: 1 # {"$ref": "#/definitions/io.k8s.cli.setters.replicas"} + `, + expected: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: nginx-deployment +spec: + replicas: 50 # {"$ref": "#/definitions/io.k8s.cli.setters.replicas"} + `, + }, + { + name: "set-arg", + setter: "arg1", + openapi: ` +openAPI: + definitions: + io.k8s.cli.setters.replicas: + x-k8s-cli: + setter: + name: replicas + value: "4" + io.k8s.cli.setters.arg1: + x-k8s-cli: + setter: + name: arg1 + value: "some value" + `, + input: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: nginx-deployment +spec: + template: + spec: + containers: + - name: nginx + args: + - a + - b # {"$ref": "#/definitions/io.k8s.cli.setters.arg1"} + `, + expected: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: nginx-deployment +spec: + template: + spec: + containers: + - name: nginx + args: + - a + - some value # {"$ref": "#/definitions/io.k8s.cli.setters.arg1"}`, + }, + { + name: "substitute-image-tag", + setter: "image-tag", + openapi: ` +openAPI: + definitions: + io.k8s.cli.setters.image-name: + x-k8s-cli: + setter: + name: image-name + value: "nginx" + io.k8s.cli.setters.image-tag: + x-k8s-cli: + setter: + name: image-tag + value: "1.8.1" + io.k8s.cli.substitutions.image: + x-k8s-cli: + substitution: + name: image + pattern: IMAGE_NAME:IMAGE_TAG + values: + - marker: "IMAGE_NAME" + ref: "#/definitions/io.k8s.cli.setters.image-name" + - marker: "IMAGE_TAG" + ref: "#/definitions/io.k8s.cli.setters.image-tag" + `, + input: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: nginx-deployment +spec: + template: + spec: + containers: + - name: nginx + image: nginx:1.7.9 # {"$ref": "#/definitions/io.k8s.cli.substitutions.image"} + `, + expected: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: nginx-deployment +spec: + template: + spec: + containers: + - name: nginx + image: nginx:1.8.1 # {"$ref": "#/definitions/io.k8s.cli.substitutions.image"} + `, + }, + { + name: "substitute-image-name-enum", + setter: "image-tag", + openapi: ` +openAPI: + definitions: + io.k8s.cli.setters.image-name: + x-k8s-cli: + setter: + name: image-name + value: "helloworld" + enumValues: + nginx: gcr.io/nginx + helloworld: us.gcr.io/helloworld + io.k8s.cli.setters.image-tag: + x-k8s-cli: + setter: + name: image-tag + value: "1.8.1" + io.k8s.cli.substitutions.image: + x-k8s-cli: + substitution: + name: image + pattern: IMAGE_NAME:IMAGE_TAG + values: + - marker: "IMAGE_NAME" + ref: "#/definitions/io.k8s.cli.setters.image-name" + - marker: "IMAGE_TAG" + ref: "#/definitions/io.k8s.cli.setters.image-tag" + `, + input: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: nginx-deployment +spec: + template: + spec: + containers: + - name: nginx + image: nginx:1.7.9 # {"$ref": "#/definitions/io.k8s.cli.substitutions.image"} + `, + expected: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: nginx-deployment +spec: + template: + spec: + containers: + - name: nginx + image: us.gcr.io/helloworld:1.8.1 # {"$ref": "#/definitions/io.k8s.cli.substitutions.image"} + `, + }, + { + name: "substitute-annotation", + setter: "project", + openapi: ` +openAPI: + definitions: + io.k8s.cli.setters.project: + x-k8s-cli: + setter: + name: project + value: "a" + io.k8s.cli.setters.location: + x-k8s-cli: + setter: + name: location + value: "b" + io.k8s.cli.setters.cluster: + x-k8s-cli: + setter: + name: cluster + value: "c" + io.k8s.cli.substitutions.key: + x-k8s-cli: + substitution: + name: key + pattern: https://container.googleapis.com/v1/projects/PROJECT/locations/LOCATION/clusters/CLUSTER + values: + - marker: "PROJECT" + ref: "#/definitions/io.k8s.cli.setters.project" + - marker: "LOCATION" + ref: "#/definitions/io.k8s.cli.setters.location" + - marker: "CLUSTER" + ref: "#/definitions/io.k8s.cli.setters.cluster" +`, + input: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: nginx-deployment + annotations: + key: 'https://container.googleapis.com/v1/projects/a/locations/a/clusters/a' # {"$ref": "#/definitions/io.k8s.cli.substitutions.key"} +`, + expected: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: nginx-deployment + annotations: + key: 'https://container.googleapis.com/v1/projects/a/locations/b/clusters/c' # {"$ref": "#/definitions/io.k8s.cli.substitutions.key"} +`, + }, + { + name: "substitute-not-match-setter", + setter: "not-real", + openapi: ` +openAPI: + definitions: + io.k8s.cli.setters.project: + x-k8s-cli: + setter: + name: project + value: "a" + io.k8s.cli.setters.location: + x-k8s-cli: + setter: + name: location + value: "b" + io.k8s.cli.setters.cluster: + x-k8s-cli: + setter: + name: cluster + value: "c" + io.k8s.cli.substitutions.key: + x-k8s-cli: + substitution: + name: key + pattern: https://container.googleapis.com/v1/projects/PROJECT/locations/LOCATION/clusters/CLUSTER + values: + - marker: "PROJECT" + ref: "#/definitions/io.k8s.cli.setters.project" + - marker: "LOCATION" + ref: "#/definitions/io.k8s.cli.setters.location" + - marker: "CLUSTER" + ref: "#/definitions/io.k8s.cli.setters.cluster" +`, + input: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: nginx-deployment + annotations: + key: 'https://container.googleapis.com/v1/projects/a/locations/a/clusters/a' # {"$ref": "#/definitions/io.k8s.cli.substitutions.key"} +`, + expected: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: nginx-deployment + annotations: + key: 'https://container.googleapis.com/v1/projects/a/locations/a/clusters/a' # {"$ref": "#/definitions/io.k8s.cli.substitutions.key"} +`, + }, + { + name: "substitute-image-name", + setter: "image-name", + openapi: ` +openAPI: + definitions: + io.k8s.cli.setters.image-name: + x-k8s-cli: + setter: + name: image-name + value: "foo" + io.k8s.cli.setters.image-tag: + x-k8s-cli: + setter: + name: image-tag + value: "1.7.9" + io.k8s.cli.substitutions.image: + x-k8s-cli: + substitution: + name: image + pattern: IMAGE_NAME:IMAGE_TAG + values: + - marker: "IMAGE_NAME" + ref: "#/definitions/io.k8s.cli.setters.image-name" + - marker: "IMAGE_TAG" + ref: "#/definitions/io.k8s.cli.setters.image-tag" + `, + input: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: nginx-deployment +spec: + template: + spec: + containers: + - name: nginx + image: nginx:1.7.9 # {"$ref": "#/definitions/io.k8s.cli.substitutions.image"} + `, + expected: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: nginx-deployment +spec: + template: + spec: + containers: + - name: nginx + image: foo:1.7.9 # {"$ref": "#/definitions/io.k8s.cli.substitutions.image"} + `, + }, + { + name: "substitute-substring", + setter: "image-tag", + openapi: ` +openAPI: + definitions: + io.k8s.cli.setters.image-name: + x-k8s-cli: + setter: + name: image-name + value: "nginx" + io.k8s.cli.setters.image-tag: + x-k8s-cli: + setter: + name: image-tag + value: "1.8.1" + io.k8s.cli.substitutions.image: + x-k8s-cli: + substitution: + name: image + pattern: IMAGE_NAME:IMAGE_TAG + values: + - marker: "IMAGE_NAME" + ref: "#/definitions/io.k8s.cli.setters.image-name" + - marker: "IMAGE_TAG" + ref: "#/definitions/io.k8s.cli.setters.image-tag" + `, + input: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: nginx-deployment +spec: + template: + spec: + containers: + - name: nginx + image: a:a # {"$ref": "#/definitions/io.k8s.cli.substitutions.image"} + `, + expected: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: nginx-deployment +spec: + template: + spec: + containers: + - name: nginx + image: nginx:1.8.1 # {"$ref": "#/definitions/io.k8s.cli.substitutions.image"} + `, + }, + { + name: "set-args-list", + setter: "args", + openapi: ` +openAPI: + definitions: + io.k8s.cli.setters.args: + x-k8s-cli: + type: array + setter: + name: args + listValues: ["1", "2", "3"] + `, + input: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: nginx-deployment +spec: + # {"$ref": "#/definitions/io.k8s.cli.setters.args"} + replicas: [] + `, + expected: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: nginx-deployment +spec: + # {"$ref": "#/definitions/io.k8s.cli.setters.args"} + replicas: + - "1" + - "2" + - "3" + `, + }, + { + name: "set-args-list-replace", + setter: "args", + openapi: ` +openAPI: + definitions: + io.k8s.cli.setters.args: + x-k8s-cli: + type: array + setter: + name: args + listValues: ["1", "2", "3"] + `, + input: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: nginx-deployment +spec: + # {"$ref": "#/definitions/io.k8s.cli.setters.args"} + replicas: ["4", "5"] + `, + expected: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: nginx-deployment +spec: + # {"$ref": "#/definitions/io.k8s.cli.setters.args"} + replicas: + - "1" + - "2" + - "3" + `, + }, + { + name: "set-with-invalid-type-int", + description: "if a type is set to int instead of integer, we accept it", + setter: "foo", + openapi: ` +openAPI: + definitions: + io.k8s.cli.setters.foo: + x-k8s-cli: + setter: + name: foo + value: "4" + type: int + `, + input: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: nginx-deployment + annotations: + foo: 3 # {"$ref": "#/definitions/io.k8s.cli.setters.foo"} + `, + expected: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: nginx-deployment + annotations: + foo: 4 # {"$ref": "#/definitions/io.k8s.cli.setters.foo"} + `, + }, + { + name: "set-with-invalid-type-bool", + description: "if a type is set to bool instead of boolean, we accept it", + setter: "foo", + openapi: ` +openAPI: + definitions: + io.k8s.cli.setters.foo: + x-k8s-cli: + setter: + name: foo + value: "true" + type: bool + `, + input: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: nginx-deployment + annotations: + foo: false # {"$ref": "#/definitions/io.k8s.cli.setters.foo"} + `, + expected: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: nginx-deployment + annotations: + foo: true # {"$ref": "#/definitions/io.k8s.cli.setters.foo"} + `, + }, + { + name: "set-quoted-value-with-colon", + description: "if a value ends in ':', we should accept it", + setter: "app", + openapi: ` +openAPI: + definitions: + io.k8s.cli.setters.app: + x-k8s-cli: + setter: + name: app + value: "value:" + `, + input: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: nginx-deployment + annotations: + app: nginx # {"$ref": "#/definitions/io.k8s.cli.setters.app"} + `, + expected: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: nginx-deployment + annotations: + app: "value:" # {"$ref": "#/definitions/io.k8s.cli.setters.app"} + `, + }, + { + name: "set-quoted-list-values-with-colon", + setter: "args", + openapi: ` +openAPI: + definitions: + io.k8s.cli.setters.args: + x-k8s-cli: + type: array + setter: + name: args + listValues: ["1:", "2:", "3:"] + `, + input: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: nginx-deployment +spec: + # {"$ref": "#/definitions/io.k8s.cli.setters.args"} + replicas: + - 4 + - 5 + `, + expected: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: nginx-deployment +spec: + # {"$ref": "#/definitions/io.k8s.cli.setters.args"} + replicas: + - "1:" + - "2:" + - "3:" + `, + }, + } + for i := range tests { + test := tests[i] + t.Run(test.name, func(t *testing.T) { + // reset the openAPI afterward + defer openapi.ResetOpenAPI() + + // parse the input to be modified + r, err := yaml.Parse(test.input) + if !assert.NoError(t, err) { + t.FailNow() + } + + // invoke the setter + instance := &Set{Name: test.setter, SettersSchema: SettersSchema(t, test.openapi)} + result, err := instance.Filter(r) + if !assert.NoError(t, err) { + t.FailNow() + } + + // compare the actual and expected output + actual, err := result.String() + if !assert.NoError(t, err) { + t.FailNow() + } + actual = strings.TrimSpace(actual) + expected := strings.TrimSpace(test.expected) + if !assert.Equal(t, expected, actual) { + t.FailNow() + } + }) + } +} + +func TestSet_SetAll(t *testing.T) { + var tests = []struct { + name string + description string + setter string + openapi string + input []string + expected []string + }{ + { + name: "set-replicas-same-file", + setter: "replicas", + openapi: ` +openAPI: + definitions: + io.k8s.cli.setters.replicas: + x-k8s-cli: + setter: + name: replicas + value: "4" + `, + input: []string{` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: nginx-deployment + annotations: + config.kubernetes.io/index: '0' + config.kubernetes.io/path: 'cluster.yaml' + internal.config.kubernetes.io/index: '0' + internal.config.kubernetes.io/path: 'cluster.yaml' +spec: + replicas: 3 # {"$ref": "#/definitions/io.k8s.cli.setters.replicas"} + `, ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: nginx-deployment2 + annotations: + config.kubernetes.io/index: '1' + config.kubernetes.io/path: 'cluster.yaml' + internal.config.kubernetes.io/index: '1' + internal.config.kubernetes.io/path: 'cluster.yaml' +spec: + replicas: 10 + `}, + expected: []string{` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: nginx-deployment + annotations: + config.kubernetes.io/index: '0' + config.kubernetes.io/path: 'cluster.yaml' + internal.config.kubernetes.io/index: '0' + internal.config.kubernetes.io/path: 'cluster.yaml' +spec: + replicas: 4 # {"$ref": "#/definitions/io.k8s.cli.setters.replicas"} + `, ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: nginx-deployment2 + annotations: + config.kubernetes.io/index: '1' + config.kubernetes.io/path: 'cluster.yaml' + internal.config.kubernetes.io/index: '1' + internal.config.kubernetes.io/path: 'cluster.yaml' +spec: + replicas: 10 + `}, + }, + { + name: "set-replicas-different-file", + setter: "replicas", + openapi: ` +openAPI: + definitions: + io.k8s.cli.setters.replicas: + x-k8s-cli: + setter: + name: replicas + value: "4" + `, + input: []string{` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: nginx-deployment + annotations: + config.kubernetes.io/index: '0' + config.kubernetes.io/path: 'cluster.yaml' + internal.config.kubernetes.io/index: '0' + internal.config.kubernetes.io/path: 'cluster.yaml' +spec: + replicas: 3 # {"$ref": "#/definitions/io.k8s.cli.setters.replicas"} + `, ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: nginx-deployment2 + annotations: + config.kubernetes.io/index: '1' + config.kubernetes.io/path: 'another_cluster.yaml' + internal.config.kubernetes.io/index: '1' + internal.config.kubernetes.io/path: 'another_cluster.yaml' +spec: + replicas: 10 + `}, + expected: []string{` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: nginx-deployment + annotations: + config.kubernetes.io/index: '0' + config.kubernetes.io/path: 'cluster.yaml' + internal.config.kubernetes.io/index: '0' + internal.config.kubernetes.io/path: 'cluster.yaml' +spec: + replicas: 4 # {"$ref": "#/definitions/io.k8s.cli.setters.replicas"} + `}, + }, + } + for i := range tests { + test := tests[i] + t.Run(test.name, func(t *testing.T) { + // reset the openAPI afterward + defer openapi.ResetOpenAPI() + + // parse the input to be modified + var inputNodes []*yaml.RNode + for _, s := range test.input { + r, err := yaml.Parse(s) + if !assert.NoError(t, err) { + t.FailNow() + } + inputNodes = append(inputNodes, r) + } + + // invoke the setter + instance := &Set{Name: test.setter, SettersSchema: SettersSchema(t, test.openapi)} + result, err := SetAll(instance).Filter(inputNodes) + if !assert.NoError(t, err) { + t.FailNow() + } + + // compare the actual and expected output + if !assert.NoError(t, err) { + t.FailNow() + } + if !assert.Equal(t, len(result), len(test.expected)) { + t.FailNow() + } + + for i := range result { + actual, _ := result[i].String() + actual = strings.TrimSpace(actual) + expected := strings.TrimSpace(test.expected[i]) + if !assert.Equal(t, expected, actual) { + t.FailNow() + } + } + }) + } +} + +// initSchema initializes the openAPI with the definitions from s +func SettersSchema(t *testing.T, s string) *spec.Schema { + dir, err := ioutil.TempDir("", "") + assert.NoError(t, err) + defer os.RemoveAll(dir) + err = ioutil.WriteFile(filepath.Join(dir, "Krmfile"), []byte(s), 0600) + if !assert.NoError(t, err) { + t.FailNow() + } + sc, err := openapi.SchemaFromFile(filepath.Join(dir, "Krmfile")) + if !assert.NoError(t, err) { + t.FailNow() + } + return sc +} + +func TestSetOpenAPI_Filter(t *testing.T) { + var tests = []struct { + name string + setter string + value string + values []string + input string + expected string + description string + setBy string + err string + isSet bool + }{ + { + name: "set-replicas", + setter: "replicas", + value: "3", + isSet: true, + input: ` +openAPI: + definitions: + io.k8s.cli.setters.no-match-1': + x-k8s-cli: + setter: + name: no-match-1 + value: "1" + io.k8s.cli.setters.replicas: + x-k8s-cli: + setter: + name: replicas + value: "4" + required: true + isSet: true + io.k8s.cli.setters.no-match-2': + x-k8s-cli: + setter: + name: no-match-2 + value: "2" + `, + expected: ` +openAPI: + definitions: + io.k8s.cli.setters.no-match-1': + x-k8s-cli: + setter: + name: no-match-1 + value: "1" + io.k8s.cli.setters.replicas: + x-k8s-cli: + setter: + name: replicas + value: "3" + required: true + isSet: true + io.k8s.cli.setters.no-match-2': + x-k8s-cli: + setter: + name: no-match-2 + value: "2" +`, + }, + { + name: "set-annotation-quoted", + setter: "replicas", + value: "3", + isSet: true, + input: ` +openAPI: + definitions: + io.k8s.cli.setters.replicas: + x-k8s-cli: + setter: + name: replicas + value: 4 + `, + expected: ` +openAPI: + definitions: + io.k8s.cli.setters.replicas: + x-k8s-cli: + setter: + name: replicas + value: "3" + isSet: true +`, + }, + { + name: "set-replicas-description", + setter: "replicas", + value: "3", + description: "hello world", + isSet: true, + input: ` +openAPI: + definitions: + io.k8s.cli.setters.no-match-1': + x-k8s-cli: + setter: + name: no-match-1 + value: "1" + io.k8s.cli.setters.replicas: + x-k8s-cli: + setter: + name: replicas + value: "4" + io.k8s.cli.setters.no-match-2': + x-k8s-cli: + setter: + name: no-match-2 + value: "2" + `, + expected: ` +openAPI: + definitions: + io.k8s.cli.setters.no-match-1': + x-k8s-cli: + setter: + name: no-match-1 + value: "1" + io.k8s.cli.setters.replicas: + x-k8s-cli: + setter: + name: replicas + value: "3" + isSet: true + description: hello world + io.k8s.cli.setters.no-match-2': + x-k8s-cli: + setter: + name: no-match-2 + value: "2" +`, + }, + { + name: "set-replicas-set-by", + setter: "replicas", + value: "3", + setBy: "carl", + isSet: true, + input: ` +openAPI: + definitions: + io.k8s.cli.setters.no-match-1': + x-k8s-cli: + setter: + name: no-match-1 + value: "1" + io.k8s.cli.setters.replicas: + x-k8s-cli: + setter: + name: replicas + value: "4" + io.k8s.cli.setters.no-match-2': + x-k8s-cli: + setter: + name: no-match-2 + value: "2" + `, + expected: ` +openAPI: + definitions: + io.k8s.cli.setters.no-match-1': + x-k8s-cli: + setter: + name: no-match-1 + value: "1" + io.k8s.cli.setters.replicas: + x-k8s-cli: + setter: + name: replicas + value: "3" + setBy: carl + isSet: true + io.k8s.cli.setters.no-match-2': + x-k8s-cli: + setter: + name: no-match-2 + value: "2" +`, + }, + { + name: "set-replicas-set-by-empty", + setter: "replicas", + value: "3", + isSet: true, + input: ` +openAPI: + definitions: + io.k8s.cli.setters.no-match-1': + x-k8s-cli: + setter: + name: no-match-1 + value: "1" + setBy: "package-default" + io.k8s.cli.setters.replicas: + x-k8s-cli: + setter: + name: replicas + value: "4" + setBy: "package-default" + io.k8s.cli.setters.no-match-2': + x-k8s-cli: + setter: + name: no-match-2 + value: "2" + setBy: "package-default" + `, + expected: ` +openAPI: + definitions: + io.k8s.cli.setters.no-match-1': + x-k8s-cli: + setter: + name: no-match-1 + value: "1" + setBy: "package-default" + io.k8s.cli.setters.replicas: + x-k8s-cli: + setter: + name: replicas + value: "3" + isSet: true + io.k8s.cli.setters.no-match-2': + x-k8s-cli: + setter: + name: no-match-2 + value: "2" + setBy: "package-default" +`, + }, + { + name: "set-replicas-with-enum", + setter: "replicas", + value: "baz", + input: ` +openAPI: + definitions: + io.k8s.cli.setters.no-match-1': + x-k8s-cli: + setter: + name: no-match-1 + value: "1" + setBy: "package-default" + io.k8s.cli.setters.replicas: + x-k8s-cli: + setter: + name: replicas + value: "foo" + enumValues: + foo: bar + baz: biz + io.k8s.cli.setters.no-match-2': + x-k8s-cli: + setter: + name: no-match-2 + value: "2" + setBy: "package-default" + `, + expected: ` +openAPI: + definitions: + io.k8s.cli.setters.no-match-1': + x-k8s-cli: + setter: + name: no-match-1 + value: "1" + setBy: "package-default" + io.k8s.cli.setters.replicas: + x-k8s-cli: + setter: + name: replicas + value: "baz" + enumValues: + foo: bar + baz: biz + io.k8s.cli.setters.no-match-2': + x-k8s-cli: + setter: + name: no-match-2 + value: "2" + setBy: "package-default" +`, + }, + { + name: "set-replicas-fail", + setter: "replicas", + value: "hello", + isSet: true, + input: ` +openAPI: + definitions: + io.k8s.cli.setters.no-match-1': + x-k8s-cli: + setter: + name: no-match-1 + value: "1" + setBy: "package-default" + io.k8s.cli.setters.replicas: + x-k8s-cli: + setter: + name: replicas + value: "foo" + enumValues: + foo: bar + baz: biz + io.k8s.cli.setters.no-match-2': + x-k8s-cli: + setter: + name: no-match-2 + value: "2" + setBy: "package-default" + `, + err: "hello does not match the possible values for replicas: [foo,baz]", + }, + { + name: "error", + setter: "replicas", + err: `setter "replicas" is not found`, + isSet: true, + input: ` +openAPI: + definitions: + io.k8s.cli.setters.no-match-1': + x-k8s-cli: + setter: + name: no-match-1 + value: "1" + io.k8s.cli.setters.no-match-2': + x-k8s-cli: + setter: + name: no-match-2 + value: "2" + `, + expected: ` +openAPI: + definitions: + io.k8s.cli.setters.no-match-1': + x-k8s-cli: + setter: + name: no-match-1 + value: "1" + io.k8s.cli.setters.no-match-2': + x-k8s-cli: + setter: + name: no-match-2 + value: "2" + `, + }, + + { + name: "set-args-list", + setter: "args", + value: "2", + values: []string{"3", "4"}, + input: ` +openAPI: + definitions: + io.k8s.cli.setters.args: + type: array + x-k8s-cli: + setter: + name: args + listValues: ["1"] + required: true + `, + expected: ` +openAPI: + definitions: + io.k8s.cli.setters.args: + type: array + x-k8s-cli: + setter: + name: args + listValues: ["2", "3", "4"] + required: true +`, + }, + } + for i := range tests { + test := tests[i] + t.Run(test.name, func(t *testing.T) { + in, err := yaml.Parse(test.input) + if !assert.NoError(t, err) { + t.FailNow() + } + + // invoke the setter + instance := &SetOpenAPI{ + Name: test.setter, Value: test.value, ListValues: test.values, + SetBy: test.setBy, Description: test.description, IsSet: test.isSet} + result, err := instance.Filter(in) + if test.err != "" { + if !assert.EqualError(t, err, test.err) { + t.FailNow() + } + return + } + if !assert.NoError(t, err) { + t.FailNow() + } + + // compare the actual and expected output + actual, err := result.String() + if !assert.NoError(t, err) { + t.FailNow() + } + actual = strings.TrimSpace(actual) + expected := strings.TrimSpace(test.expected) + if !assert.Equal(t, expected, actual) { + t.FailNow() + } + }) + } +} + +func TestValidateAgainstSchema(t *testing.T) { + maxLength := int64(3) + + testCases := []struct { + name string + setter *setter + schema spec.SchemaProps + shouldValidate bool + expectedErrorMsg string + }{ + { + name: "no schema", + setter: &setter{ + Name: "foo", + Value: "bar", + }, + schema: spec.SchemaProps{}, + shouldValidate: true, + }, + { + name: "simple string value", + setter: &setter{ + Name: "foo", + Value: "bar", + }, + schema: spec.SchemaProps{ + Type: []string{"string"}, + }, + shouldValidate: true, + }, + { + name: "simple bool value", + setter: &setter{ + Name: "foo", + Value: "false", + }, + schema: spec.SchemaProps{ + Type: []string{"boolean"}, + }, + shouldValidate: true, + }, + { + name: "simple null value", + setter: &setter{ + Name: "foo", + Value: "null", + }, + schema: spec.SchemaProps{ + Type: []string{"null"}, + }, + shouldValidate: true, + }, + { + name: "bool value in yaml but not openapi", + setter: &setter{ + Name: "foo", + Value: "yes", + }, + schema: spec.SchemaProps{ + Type: []string{"string"}, + }, + shouldValidate: true, + }, + { + name: "number value should be accepted as integer", + setter: &setter{ + Name: "foo", + Value: "45", + }, + schema: spec.SchemaProps{ + Type: []string{"integer"}, + }, + shouldValidate: true, + }, + { + name: "string type allows string-specific validations", + setter: &setter{ + Name: "foo", + Value: "1234", + }, + schema: spec.SchemaProps{ + Type: []string{"string"}, + MaxLength: &maxLength, + }, + shouldValidate: false, + expectedErrorMsg: "foo in body should be at most 3 chars long", + }, + { + name: "list with int values", + setter: &setter{ + Name: "foo", + ListValues: []string{"123", "456"}, + }, + schema: spec.SchemaProps{ + Type: []string{"array"}, + Items: &spec.SchemaOrArray{ + Schema: &spec.Schema{ + SchemaProps: spec.SchemaProps{ + Type: []string{"integer"}, + }, + }, + }, + }, + shouldValidate: true, + }, + { + name: "list expecting int values, but with a string", + setter: &setter{ + Name: "foo", + ListValues: []string{"123", "456", "abc"}, + }, + schema: spec.SchemaProps{ + Type: []string{"array"}, + Items: &spec.SchemaOrArray{ + Schema: &spec.Schema{ + SchemaProps: spec.SchemaProps{ + Type: []string{"integer"}, + }, + }, + }, + }, + shouldValidate: false, + expectedErrorMsg: "foo in body must be of type integer", + }, + { + name: "all values should satisfy type string", + setter: &setter{ + Name: "foo", + Value: "1234", + }, + schema: spec.SchemaProps{ + Type: []string{"string"}, + }, + shouldValidate: true, + }, + { + name: "all values should satisfy type string even in arrays", + setter: &setter{ + Name: "foo", + ListValues: []string{"123", "456"}, + }, + schema: spec.SchemaProps{ + Type: []string{"array"}, + Items: &spec.SchemaOrArray{ + Schema: &spec.Schema{ + SchemaProps: spec.SchemaProps{ + Type: []string{"string"}, + }, + }, + }, + }, + shouldValidate: true, + }, + { + name: "List values without any schema", + setter: &setter{ + Name: "foo", + ListValues: []string{"123", "true", "abc"}, + }, + schema: spec.SchemaProps{}, + shouldValidate: true, + }, + } + + for i := range testCases { + test := testCases[i] + t.Run(test.name, func(t *testing.T) { + ext := &CliExtension{ + Setter: test.setter, + } + + schema := &spec.Schema{ + SchemaProps: test.schema, + } + + err := validateAgainstSchema(ext, schema) + + if test.shouldValidate { + assert.NoError(t, err) + return + } + + if !assert.Error(t, err) { + t.FailNow() + } + assert.Contains(t, err.Error(), test.expectedErrorMsg) + }) + } +} diff --git a/go/internal/forked/kyaml/setters2/settersutil/deletecreator_test.go b/go/internal/forked/kyaml/setters2/settersutil/deletecreator_test.go new file mode 100644 index 000000000..c8cf96886 --- /dev/null +++ b/go/internal/forked/kyaml/setters2/settersutil/deletecreator_test.go @@ -0,0 +1,119 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package settersutil + +import ( + "io/ioutil" + "os" + "strings" + "testing" + + "github.com/stretchr/testify/assert" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/fieldmeta" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/openapi" +) + +var openAPIFile = ` +openAPI: + definitions: + io.k8s.cli.setters.image: + x-k8s-cli: + setter: + name: image + value: "2" + io.k8s.cli.setters.tag: + x-k8s-cli: + setter: + name: tag + value: "sometag" +` + +var resourceFile = ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: nginx-deployment + annotations: + image: 3 # {"$openapi":"image"} +spec: + image: 3 # {"$openapi":"image"} +` + +func TestDeleterCreator_Delete(t *testing.T) { + openapi.ResetOpenAPI() + defer openapi.ResetOpenAPI() + openAPI, err := ioutil.TempFile("", "openAPI.yaml") + if !assert.NoError(t, err) { + t.FailNow() + } + defer os.Remove(openAPI.Name()) + // write openapi to temp dir + err = ioutil.WriteFile(openAPI.Name(), []byte(openAPIFile), 0666) + if !assert.NoError(t, err) { + t.FailNow() + } + + // write resource file to temp dir + resource, err := ioutil.TempFile("", "k8s-cli-*.yaml") + if !assert.NoError(t, err) { + t.FailNow() + } + defer os.Remove(resource.Name()) + err = ioutil.WriteFile(resource.Name(), []byte(resourceFile), 0666) + if !assert.NoError(t, err) { + t.FailNow() + } + + sc, err := openapi.SchemaFromFile(openAPI.Name()) + if !assert.NoError(t, err) { + t.FailNow() + } + // add a delete creator + dc := DeleterCreator{ + Name: "image", + DefinitionPrefix: fieldmeta.SetterDefinitionPrefix, + SettersSchema: sc, + } + + dc.OpenAPIPath = openAPI.Name() + dc.ResourcesPath = resource.Name() + + err = dc.Delete() + if !assert.NoError(t, err) { + t.FailNow() + } + + actualOpenAPI, err := ioutil.ReadFile(openAPI.Name()) + if err != nil { + t.FailNow() + } + + actualResource, err := ioutil.ReadFile(resource.Name()) + if err != nil { + t.FailNow() + } + + expectedOpenAPI := ` +openAPI: + definitions: + io.k8s.cli.setters.tag: + x-k8s-cli: + setter: + name: tag + value: "sometag" +` + expectedResoure := ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: nginx-deployment + annotations: + image: 3 +spec: + image: 3 +` + + assert.Equal(t, strings.TrimSpace(expectedOpenAPI), strings.TrimSpace(string(actualOpenAPI))) + assert.Equal(t, strings.TrimSpace(expectedResoure), strings.TrimSpace(string(actualResource))) +} diff --git a/go/internal/forked/kyaml/setters2/settersutil/deletercreator.go b/go/internal/forked/kyaml/setters2/settersutil/deletercreator.go new file mode 100644 index 000000000..f23386fbb --- /dev/null +++ b/go/internal/forked/kyaml/setters2/settersutil/deletercreator.go @@ -0,0 +1,55 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package settersutil + +import ( + "k8s.io/kube-openapi/pkg/validation/spec" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/kio" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/setters2" +) + +// DeleterCreator delete a definition in the OpenAPI definitions, and removes references +// to the definition from matching resource fields. +type DeleterCreator struct { + // Name is the name of the setter or substitution to delete + Name string + + // DefinitionPrefix is the prefix of the OpenAPI definition type + DefinitionPrefix string + + RecurseSubPackages bool + + OpenAPIFileName string + + // Path to openAPI file + OpenAPIPath string + + // Path to resources folder + ResourcesPath string + + SettersSchema *spec.Schema +} + +func (d DeleterCreator) Delete() error { + dd := setters2.DeleterDefinition{ + Name: d.Name, + DefinitionPrefix: d.DefinitionPrefix, + } + if err := dd.DeleteFromFile(d.OpenAPIPath); err != nil { + return err + } + + // Update the resources with the deleter reference + inout := &kio.LocalPackageReadWriter{PackagePath: d.ResourcesPath, PackageFileName: d.OpenAPIFileName} + return kio.Pipeline{ + Inputs: []kio.Reader{inout}, + Filters: []kio.Filter{kio.FilterAll( + &setters2.Delete{ + Name: d.Name, + DefinitionPrefix: d.DefinitionPrefix, + SettersSchema: d.SettersSchema, + })}, + Outputs: []kio.Writer{inout}, + }.Execute() +} diff --git a/go/internal/forked/kyaml/setters2/settersutil/fieldsetter.go b/go/internal/forked/kyaml/setters2/settersutil/fieldsetter.go new file mode 100644 index 000000000..73d8c0842 --- /dev/null +++ b/go/internal/forked/kyaml/setters2/settersutil/fieldsetter.go @@ -0,0 +1,139 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package settersutil + +import ( + "io/ioutil" + "os" + + "k8s.io/kube-openapi/pkg/validation/spec" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/kio" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/openapi" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/setters2" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" +) + +// FieldSetter sets the value for a field setter. +type FieldSetter struct { + // Name is the name of the setter to set + Name string + + // Value is the value to set + Value string + + // ListValues contains a list of values to set on a Sequence + ListValues []string + + Description string + + SetBy string + + Count int + + OpenAPIPath string + + OpenAPIFileName string + + ResourcesPath string + + RecurseSubPackages bool + + IsSet bool + + SettersSchema *spec.Schema +} + +func (fs *FieldSetter) Filter(input []*yaml.RNode) ([]*yaml.RNode, error) { + fs.Count, _ = fs.Set() + return nil, nil +} + +// Set updates the OpenAPI definitions and resources with the new setter value +func (fs FieldSetter) Set() (int, error) { + // Update the OpenAPI definitions + soa := setters2.SetOpenAPI{ + Name: fs.Name, + Value: fs.Value, + ListValues: fs.ListValues, + Description: fs.Description, + SetBy: fs.SetBy, + IsSet: fs.IsSet, + } + + // the input field value is updated in the openAPI file and then parsed + // at to get the value and set it to resource files, but if there is error + // after updating openAPI file and while updating resources, the openAPI + // file should be reverted, as set operation failed + stat, err := os.Stat(fs.OpenAPIPath) + if err != nil { + return 0, err + } + + curOpenAPI, err := ioutil.ReadFile(fs.OpenAPIPath) + if err != nil { + return 0, err + } + + // write the new input value to openAPI file + if err := soa.UpdateFile(fs.OpenAPIPath); err != nil { + return 0, err + } + + // Load the updated definitions + sc, err := openapi.SchemaFromFile(fs.OpenAPIPath) + if err != nil { + return 0, err + } + fs.SettersSchema = sc + + // Update the resources with the new value + // Set NoDeleteFiles to true as SetAll will return only the nodes of files which should be updated and + // hence, rest of the files should not be deleted + inout := &kio.LocalPackageReadWriter{PackagePath: fs.ResourcesPath, NoDeleteFiles: true, PackageFileName: fs.OpenAPIFileName} + s := &setters2.Set{Name: fs.Name, SettersSchema: sc} + err = kio.Pipeline{ + Inputs: []kio.Reader{inout}, + Filters: []kio.Filter{setters2.SetAll(s)}, + Outputs: []kio.Writer{inout}, + }.Execute() + + // revert openAPI file if set operation fails + if err != nil { + if writeErr := ioutil.WriteFile(fs.OpenAPIPath, curOpenAPI, stat.Mode().Perm()); writeErr != nil { + return 0, writeErr + } + } + return s.Count, err +} + +// SetAllSetterDefinitions reads all the Setter Definitions from the input OpenAPI +// file and sets all values for the resource configs in the provided destination directories. +// If syncOpenAPI is true, the openAPI files in destination directories are also +// updated with the setter values in the input openAPI file +func SetAllSetterDefinitions(openAPIPath string, dirs ...string) error { + sc, err := openapi.SchemaFromFile(openAPIPath) + if err != nil { + return err + } + for _, destDir := range dirs { + rw := &kio.LocalPackageReadWriter{ + PackagePath: destDir, + // set output won't include resources from files which + // weren't modified. make sure we don't delete them. + NoDeleteFiles: true, + } + + // apply all of the setters to the directory + err := kio.Pipeline{ + Inputs: []kio.Reader{rw}, + // Set all of the setters + Filters: []kio.Filter{setters2.SetAll(&setters2.Set{SetAll: true, SettersSchema: sc})}, + Outputs: []kio.Writer{rw}, + }.Execute() + if err != nil { + return err + } + } + return nil +} diff --git a/go/internal/forked/kyaml/setters2/settersutil/fieldsetter_test.go b/go/internal/forked/kyaml/setters2/settersutil/fieldsetter_test.go new file mode 100644 index 000000000..c17d35173 --- /dev/null +++ b/go/internal/forked/kyaml/setters2/settersutil/fieldsetter_test.go @@ -0,0 +1,135 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package settersutil + +import ( + "io/ioutil" + "os" + "path/filepath" + "testing" + + "github.com/stretchr/testify/assert" +) + +func TestSetAllSetterDefinitions(t *testing.T) { + var tests = []struct { + name string + srcOpenAPIFile string + destFile string + destOpenAPI string + expectedDestFile string + expectedDestOpenAPIFile string + }{ + { + name: "set values only to resources and not the openAPI", + srcOpenAPIFile: `openAPI: + definitions: + io.k8s.cli.setters.namespace: + x-k8s-cli: + setter: + name: namespace + value: "project-namespace" + io.k8s.cli.setters.replicas: + x-k8s-cli: + setter: + name: replicas + value: "4"`, + + destFile: `apiVersion: apps/v1 +kind: Deployment +metadata: + name: nginx-deployment + namespace: some-other-namespace # {"$ref": "#/definitions/io.k8s.cli.setters.namespace"} +spec: + replicas: 3 # {"$ref": "#/definitions/io.k8s.cli.setters.replicas-new"}`, + + destOpenAPI: `openAPI: + definitions: + io.k8s.cli.setters.namespace: + x-k8s-cli: + setter: + name: namespace + value: "some-other-namespace" + io.k8s.cli.setters.replicas-new: + x-k8s-cli: + setter: + name: replicas-new + value: "3"`, + + expectedDestFile: `apiVersion: apps/v1 +kind: Deployment +metadata: + name: nginx-deployment + namespace: project-namespace # {"$ref": "#/definitions/io.k8s.cli.setters.namespace"} +spec: + replicas: 3 # {"$ref": "#/definitions/io.k8s.cli.setters.replicas-new"} +`, + + expectedDestOpenAPIFile: `openAPI: + definitions: + io.k8s.cli.setters.namespace: + x-k8s-cli: + setter: + name: namespace + value: "some-other-namespace" + io.k8s.cli.setters.replicas-new: + x-k8s-cli: + setter: + name: replicas-new + value: "3"`, + }, + } + for i := range tests { + test := tests[i] + t.Run(test.name, func(t *testing.T) { + srcDir, err := ioutil.TempDir("", "") + if !assert.NoError(t, err) { + t.FailNow() + } + + destDir, err := ioutil.TempDir("", "") + if !assert.NoError(t, err) { + t.FailNow() + } + + defer os.RemoveAll(srcDir) + defer os.RemoveAll(destDir) + + err = ioutil.WriteFile(filepath.Join(srcDir, "Krmfile"), []byte(test.srcOpenAPIFile), 0600) + if !assert.NoError(t, err) { + t.FailNow() + } + err = ioutil.WriteFile(filepath.Join(destDir, "destFile.yaml"), []byte(test.destFile), 0600) + if !assert.NoError(t, err) { + t.FailNow() + } + err = ioutil.WriteFile(filepath.Join(destDir, "Krmfile"), []byte(test.destOpenAPI), 0600) + if !assert.NoError(t, err) { + t.FailNow() + } + + err = SetAllSetterDefinitions(filepath.Join(srcDir, "Krmfile"), destDir) + if !assert.NoError(t, err) { + t.FailNow() + } + + actualDestFile1, err := ioutil.ReadFile(filepath.Join(destDir, "destFile.yaml")) + if !assert.NoError(t, err) { + t.FailNow() + } + if !assert.Equal(t, test.expectedDestFile, string(actualDestFile1)) { + t.FailNow() + } + + actualDestOpenAPIFile1, err := ioutil.ReadFile(filepath.Join(destDir, "Krmfile")) + if !assert.NoError(t, err) { + t.FailNow() + } + + if !assert.Equal(t, test.expectedDestOpenAPIFile, string(actualDestOpenAPIFile1)) { + t.FailNow() + } + }) + } +} diff --git a/go/internal/forked/kyaml/setters2/settersutil/settercreator.go b/go/internal/forked/kyaml/setters2/settersutil/settercreator.go new file mode 100644 index 000000000..2ba1010b2 --- /dev/null +++ b/go/internal/forked/kyaml/setters2/settersutil/settercreator.go @@ -0,0 +1,209 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package settersutil + +import ( + "fmt" + "strings" + + "k8s.io/kube-openapi/pkg/validation/spec" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/errors" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/fieldmeta" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/kio" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/openapi" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/setters2" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" +) + +// SetterCreator creates or updates a setter in the OpenAPI definitions, and inserts references +// to the setter from matching resource fields. +type SetterCreator struct { + // Name is the name of the setter to create or update. + Name string + + SetBy string + + Description string + + Type string + + Schema string + + // FieldName if set will add the OpenAPI reference to fields with this name or path + // FieldName may be the full name of the field, full path to the field, or the path suffix. + // e.g. all of the following would match spec.template.spec.containers.image -- + // [image, containers.image, spec.containers.image, template.spec.containers.image, + // spec.template.spec.containers.image] + // Optional. If unspecified match all field names. + FieldName string + + // FieldValue if set will add the OpenAPI reference to fields if they have this value. + // Optional. If unspecified match all field values. + FieldValue string + + // Required indicates that the setter must be set by package consumer before + // live apply/preview. This field is added to the setter definition to record + // the package publisher's intent to make the setter required to be set. + Required bool + + RecurseSubPackages bool + + OpenAPIFileName string + + // Path to openAPI file + OpenAPIPath string + + // Path to resources folder + ResourcesPath string + + SettersSchema *spec.Schema +} + +func (c *SetterCreator) Filter(input []*yaml.RNode) ([]*yaml.RNode, error) { + return nil, c.Create() +} + +func (c SetterCreator) Create() error { + err := c.validateSetterInfo() + if err != nil { + return err + } + err = validateSchema(c.Schema) + if err != nil { + return errors.Errorf("invalid schema: %v", err) + } + + // Update the resources with the setter reference + inout := &kio.LocalPackageReadWriter{PackagePath: c.ResourcesPath} + a := &setters2.Add{ + FieldName: c.FieldName, + FieldValue: c.FieldValue, + Ref: fieldmeta.DefinitionsPrefix + fieldmeta.SetterDefinitionPrefix + c.Name, + Type: c.Type, + SettersSchema: c.SettersSchema, + } + err = kio.Pipeline{ + Inputs: []kio.Reader{inout}, + Filters: []kio.Filter{kio.FilterAll(a)}, + Outputs: []kio.Writer{inout}, + }.Execute() + if a.Count == 0 { + fmt.Printf("setter %q doesn't match any field in resource configs, "+ + "but creating setter definition\n", c.Name) + } + if err != nil { + return err + } + + // Update the OpenAPI definitions to hace the setter + sd := setters2.SetterDefinition{ + Name: c.Name, Value: c.FieldValue, SetBy: c.SetBy, Description: c.Description, + Type: c.Type, Schema: c.Schema, Required: c.Required, + } + if err := sd.AddToFile(c.OpenAPIPath); err != nil { + return err + } + + // Load the updated definitions + sc, err := openapi.SchemaFromFile(c.OpenAPIPath) + if err != nil { + return err + } + c.SettersSchema = sc + // if the setter is of array type write the derived list values back to + // openAPI definitions + if len(a.ListValues) > 0 { + sd.ListValues = a.ListValues + sd.Value = "" + if err := sd.AddToFile(c.OpenAPIPath); err != nil { + return err + } + } + + return nil +} + +// The types recognized by by the go openapi validation library: +// https://github.com/go-openapi/validate/blob/master/helpers.go#L35 +var validTypeValues = []string{ + "object", "array", "string", "integer", "number", "boolean", "file", "null", +} + +// validateSchema parses the provided schema and validates it. +func validateSchema(schema string) error { + var sc spec.Schema + err := sc.UnmarshalJSON([]byte(schema)) + if err != nil { + return errors.Errorf("unable to parse schema: %v", err) + } + return validateSchemaTypes(&sc) +} + +// validateSchemaTypes traverses the schema and checks that only valid types +// are used. +func validateSchemaTypes(sc *spec.Schema) error { + if len(sc.Type) > 1 { + return errors.Errorf("only one type is supported: %s", strings.Join(sc.Type, ", ")) + } + + if len(sc.Type) == 1 { + t := sc.Type[0] + var match bool + for _, validType := range validTypeValues { + if t == validType { + match = true + } + } + if !match { + return errors.Errorf("type %q is not supported. Must be one of: %s", + t, strings.Join(validTypeValues, ", ")) + } + } + + if items := sc.Items; items != nil { + if items.Schema != nil { + err := validateSchemaTypes(items.Schema) + if err != nil { + return err + } + } + for i := range items.Schemas { + schema := items.Schemas[i] + err := validateSchemaTypes(&schema) + if err != nil { + return err + } + } + } + return nil +} + +func (c SetterCreator) validateSetterInfo() error { + // check if substitution with same name exists and throw error + ref, err := spec.NewRef(fieldmeta.DefinitionsPrefix + fieldmeta.SubstitutionDefinitionPrefix + c.Name) + if err != nil { + return err + } + + subst, _ := openapi.Resolve(&ref, c.SettersSchema) + // if substitution already exists with the input setter name, throw error + if subst != nil { + return errors.Errorf("substitution with name %q already exists, "+ + "substitution and setter can't have same name", c.Name) + } + + // check if setter with same name exists and throw error + ref, err = spec.NewRef(fieldmeta.DefinitionsPrefix + fieldmeta.SetterDefinitionPrefix + c.Name) + if err != nil { + return err + } + + setter, _ := openapi.Resolve(&ref, c.SettersSchema) + // if setter already exists with the input setter name, throw error + if setter != nil { + return errors.Errorf("setter with name %q already exists, "+ + "if you want to modify it, please delete the existing setter and recreate it", c.Name) + } + return nil +} diff --git a/go/internal/forked/kyaml/setters2/settersutil/substitutioncreator.go b/go/internal/forked/kyaml/setters2/settersutil/substitutioncreator.go new file mode 100644 index 000000000..0856438dc --- /dev/null +++ b/go/internal/forked/kyaml/setters2/settersutil/substitutioncreator.go @@ -0,0 +1,466 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package settersutil + +import ( + "fmt" + "io/ioutil" + "os" + "regexp" + "strings" + + "k8s.io/kube-openapi/pkg/validation/spec" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/errors" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/fieldmeta" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/kio" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/openapi" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/sets" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/setters2" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" +) + +// SubstitutionCreator creates or updates a substitution in the OpenAPI definitions, and +// inserts references to the substitution from matching resource fields. +type SubstitutionCreator struct { + // Name is the name of the substitution to create + Name string + + // Pattern is the substitution pattern + Pattern string + + // Values are the substitution values for the pattern + Values []setters2.Value + + // FieldName if set will add the OpenAPI reference to fields with this name or path + // FieldName may be the full name of the field, full path to the field, or the path suffix. + // e.g. all of the following would match spec.template.spec.containers.image -- + // [image, containers.image, spec.containers.image, template.spec.containers.image, + // spec.template.spec.containers.image] + // Optional. If unspecified match all field names. + FieldName string + + // FieldValue if set will add the OpenAPI reference to fields if they have this value. + // Optional. If unspecified match all field values. + FieldValue string + + // Path to openAPI file + OpenAPIPath string + + OpenAPIFileName string + + RecurseSubPackages bool + + // Path to resources folder + ResourcesPath string + + SettersSchema *spec.Schema +} + +func (c *SubstitutionCreator) Filter(input []*yaml.RNode) ([]*yaml.RNode, error) { + return nil, c.Create() +} + +func (c SubstitutionCreator) Create() error { + err := c.validateSubstitutionInfo() + if err != nil { + return err + } + values, err := c.markersAndRefs(c.Name, c.Pattern) + if err != nil { + return err + } + c.Values = values + d := setters2.SubstitutionDefinition{ + Name: c.Name, + Values: c.Values, + Pattern: c.Pattern, + } + + // the input substitution definition is updated in the openAPI file and then parsed + // to check if there are any cycles in nested substitutions, if there are + // any, the openAPI file will be reverted to current state and error is thrown + stat, err := os.Stat(c.OpenAPIPath) + if err != nil { + return err + } + + curOpenAPI, err := ioutil.ReadFile(c.OpenAPIPath) + if err != nil { + return err + } + + if err := d.AddToFile(c.OpenAPIPath); err != nil { + return err + } + + // Load the updated definitions + sc, err := openapi.SchemaFromFile(c.OpenAPIPath) + if err != nil { + return err + } + c.SettersSchema = sc + + visited := sets.String{} + ref, err := spec.NewRef(fieldmeta.DefinitionsPrefix + fieldmeta.SubstitutionDefinitionPrefix + c.Name) + if err != nil { + return err + } + + schema, err := openapi.Resolve(&ref, c.SettersSchema) + if err != nil { + return err + } + + ext, err := setters2.GetExtFromSchema(schema) + if err != nil { + return err + } + + err = c.CreateSettersForSubstitution(c.OpenAPIPath) + if err != nil { + return err + } + + // Load the updated definitions after setters are created + sc, err = openapi.SchemaFromFile(c.OpenAPIPath) + if err != nil { + return err + } + c.SettersSchema = sc + + // revert openAPI file if there are cycles detected in created input substitution + if err := c.checkForCycles(ext, visited); err != nil { + if writeErr := ioutil.WriteFile(c.OpenAPIPath, curOpenAPI, stat.Mode().Perm()); writeErr != nil { + return writeErr + } + return err + } + + a := &setters2.Add{ + FieldName: c.FieldName, + FieldValue: c.FieldValue, + Ref: fieldmeta.DefinitionsPrefix + fieldmeta.SubstitutionDefinitionPrefix + c.Name, + SettersSchema: c.SettersSchema, + } + + // Update the resources with the substitution reference + inout := &kio.LocalPackageReadWriter{PackagePath: c.ResourcesPath, PackageFileName: c.OpenAPIFileName} + err = kio.Pipeline{ + Inputs: []kio.Reader{inout}, + Filters: []kio.Filter{kio.FilterAll(a)}, + Outputs: []kio.Writer{inout}, + }.Execute() + + if a.Count == 0 { + fmt.Printf("substitution %s doesn't match any field value in resource configs, "+ + "but creating substitution definition\n", c.Name) + } + return err +} + +// createMarkersAndRefs takes the input pattern, creates setter/substitution markers +// and corresponding openAPI refs +func (c *SubstitutionCreator) markersAndRefs(substName, pattern string) ([]setters2.Value, error) { + var values []setters2.Value + // extract setter name tokens from pattern enclosed in ${} + re := regexp.MustCompile(`\$\{([^}]*)\}`) + markers := re.FindAllString(pattern, -1) + if len(markers) == 0 { + return nil, errors.Errorf("unable to find setter or substitution names in pattern, " + + "setter names must be enclosed in ${}") + } + + for _, marker := range markers { + name := strings.TrimSuffix(strings.TrimPrefix(marker, "${"), "}") + if name == substName { + return nil, fmt.Errorf("setters must have different name than the substitution: %s", name) + } + + ref, err := spec.NewRef(fieldmeta.DefinitionsPrefix + fieldmeta.SubstitutionDefinitionPrefix + name) + if err != nil { + return nil, err + } + + var markerRef string + subst, _ := openapi.Resolve(&ref, c.SettersSchema) + // check if the substitution exists with the marker name or fall back to creating setter + // ref with the name + if subst != nil { + markerRef = fieldmeta.DefinitionsPrefix + fieldmeta.SubstitutionDefinitionPrefix + name + } else { + markerRef = fieldmeta.DefinitionsPrefix + fieldmeta.SetterDefinitionPrefix + name + } + + values = append( + values, + setters2.Value{Marker: marker, Ref: markerRef}, + ) + } + return values, nil +} + +// CreateSettersForSubstitution creates the setters for all the references in the substitution +// values if they don't already exist in openAPIPath file. +func (c SubstitutionCreator) CreateSettersForSubstitution(openAPIPath string) error { + y, err := yaml.ReadFile(openAPIPath) + if err != nil { + return err + } + + m, err := c.GetValuesForMarkers() + if err != nil { + return err + } + + // for each ref in values, check if the setter or substitution already exists, if not create setter + for _, value := range c.Values { + // continue if ref is a substitution, as it has already been checked if it exists + // as part of preRunE + if strings.Contains(value.Ref, fieldmeta.SubstitutionDefinitionPrefix) { + fmt.Printf("found a substitution with name %q\n", value.Marker) + continue + } + setterObj, err := y.Pipe(yaml.Lookup( + // get the setter key from ref. Ex: from #/definitions/io.k8s.cli.setters.image_setter + // extract io.k8s.cli.setters.image_setter + "openAPI", "definitions", strings.TrimPrefix(value.Ref, fieldmeta.DefinitionsPrefix))) + + if err != nil { + return err + } + + if setterObj == nil { + name := strings.TrimPrefix(value.Ref, fieldmeta.DefinitionsPrefix+fieldmeta.SetterDefinitionPrefix) + value := m[value.Marker] + fmt.Printf("unable to find setter with name %s, creating new setter with value %s\n", name, value) + sd := setters2.SetterDefinition{ + // get the setter name from ref. Ex: from #/definitions/io.k8s.cli.setters.image_setter + // extract image_setter + Name: name, + Value: value, + } + err := sd.AddToFile(openAPIPath) + if err != nil { + return err + } + } + } + return nil +} + +func (c SubstitutionCreator) checkForCycles(ext *setters2.CliExtension, visited sets.String) error { + // check if the substitution has already been visited and throw error as cycles + // are not allowed in nested substitutions + if visited.Has(ext.Substitution.Name) { + return errors.Errorf( + "cyclic substitution detected with name " + ext.Substitution.Name) + } + + visited.Insert(ext.Substitution.Name) + + // substitute each setter into the pattern to get the new value + // if substitution references to another substitution, recursively + // process the nested substitutions to replace the pattern with setter values + for _, v := range ext.Substitution.Values { + if v.Ref == "" { + return errors.Errorf( + "missing reference on substitution " + ext.Substitution.Name) + } + ref, err := spec.NewRef(v.Ref) + if err != nil { + return errors.Wrap(err) + } + def, err := openapi.Resolve(&ref, c.SettersSchema) // resolve the def to its openAPI def + if err != nil { + return errors.Wrap(err) + } + defExt, err := setters2.GetExtFromSchema(def) // parse the extension out of the openAPI + if err != nil { + return errors.Wrap(err) + } + + if defExt.Substitution != nil { + // parse recursively if it reference is substitution + err := c.checkForCycles(defExt, visited) + if err != nil { + return err + } + } + } + + return nil +} + +// GetValuesForMarkers parses the pattern and field value to derive values for the +// markers in the pattern string. Returns error if the marker values can't be derived +func (c SubstitutionCreator) GetValuesForMarkers() (map[string]string, error) { + m := make(map[string]string) + indices, err := c.GetStartIndices() + if err != nil { + return nil, err + } + fv := c.FieldValue + pattern := c.Pattern + fvInd := 0 + patternInd := 0 + // iterate fv, pattern with indices fvInd, patternInd respectively and when patternInd hits the index of a marker, + // freeze patternInd and iterate fvInd and capture string till we find the substring just after current marker + // and before next marker + + // Ex: fv = "something/ubuntu:0.1.0", pattern = "something/IMAGE:VERSION", till patternInd reaches 10 + // just proceed fvInd and patternInd and check if fv[fvInd]==pattern[patternInd] when patternInd is 10, + // freeze patternInd and move fvInd till it sees substring ':' which derives IMAGE = ubuntu and so on. + for fvInd < len(fv) && patternInd < len(pattern) { + // if we hit marker index, extract its corresponding value + if marker, ok := indices[patternInd]; ok { + // increment the patternInd to end of marker. This helps us to extract the substring before next marker. + patternInd += len(marker) + var value string + if value, fvInd, err = c.extractValueForMarker(fvInd, fv, patternInd, indices); err != nil { + return nil, err + } + // if marker is repeated in the pattern, make sure that the corresponding values + // are same and throw error if not. + if prevValue, ok := m[marker]; ok && prevValue != value { + return nil, errors.Errorf( + "marker %s is found to have different values %s and %s", marker, prevValue, value) + } + m[marker] = value + } else { + // Ex: fv = "samething/ubuntu:0.1.0" pattern = "something/IMAGE:VERSION". Error out at 'a' in fv. + if fv[fvInd] != pattern[patternInd] { + return nil, errors.Errorf( + "unable to derive values for markers, " + + "create setters for all markers and then try again") + } + fvInd++ + patternInd++ + } + } + // check if both strings are completely visited or throw error + if fvInd < len(fv) || patternInd < len(pattern) { + return nil, errors.Errorf( + "unable to derive values for markers, " + + "create setters for all markers and then try again") + } + return m, nil +} + +// GetStartIndices returns the start indices of all the markers in the pattern +func (c SubstitutionCreator) GetStartIndices() (map[int]string, error) { + indices := make(map[int]string) + for _, value := range c.Values { + found := false + for i := range c.Pattern { + if strings.HasPrefix(c.Pattern[i:], value.Marker) { + indices[i] = value.Marker + found = true + } + } + if !found { + return nil, errors.Errorf("unable to find marker " + value.Marker + " in the pattern") + } + } + if err := validateMarkers(indices); err != nil { + return nil, err + } + return indices, nil +} + +// validateMarkers takes the indices map, checks if any of 2 markers not have delimiters, +// checks if any marker is substring of other and returns error +func validateMarkers(indices map[int]string) error { + for k1, v1 := range indices { + for k2, v2 := range indices { + if k1 != k2 && k1+len(v1) == k2 { + return errors.Errorf( + "markers %s and %s are found to have no delimiters between them,"+ + " pre-create setters and try again", v1, v2) + } + if v1 != v2 && strings.Contains(v1, v2) { + return errors.Errorf( + "markers %s is substring of %s,"+ + " no marker should be substring of other", v2, v1) + } + } + } + return nil +} + +// extractValueForMarker returns the value string for a marker and the incremented index +func (c SubstitutionCreator) extractValueForMarker(fvInd int, fv string, patternInd int, indices map[int]string) (string, int, error) { + nonMarkerStr := strTillNextMarker(indices, patternInd, c.Pattern) + + // return the remaining string of fv till end if patternInd is at end of pattern + if patternInd == len(c.Pattern) { + return fv[fvInd:], len(fv), nil + } + + // split remaining fv starting from fvInd with the non marker substring delimiter and get the first value + // In example fv = "something/ubuntu::0.1.0", pattern = "something/IMAGE::VERSION", + // split with "::" delimiter in fv which gives markerValue = ubuntu for marker IMAGE + // increment fvInd by length of extracted marker value and return fvInd + if markerValues := strings.Split(fv[fvInd:], nonMarkerStr); len(markerValues) > 0 { + return markerValues[0], fvInd + len(markerValues[0]), nil + } + + return "", -1, errors.Errorf( + "unable to derive values for markers," + + " create setters for all markers and then try again") +} + +// substrOfLen takes a string, start index and length and returns substring of given length +// or till end of string +func substrOfLen(str string, startInd int, length int) string { + return str[startInd:min(len(str), startInd+length)] +} + +// strTillNextMarker takes in the indices map, a start index and returns the substring till +// start of next marker +func strTillNextMarker(indices map[int]string, startInd int, pattern string) string { + // initialize with max value which is length of pattern + nextMarkerStartInd := len(pattern) + for ind := range indices { + if ind > startInd { + nextMarkerStartInd = min(ind-startInd, nextMarkerStartInd) + } + } + return substrOfLen(pattern, startInd, nextMarkerStartInd) +} + +func min(a int, b int) int { + if a < b { + return a + } + return b +} + +func (c SubstitutionCreator) validateSubstitutionInfo() error { + // check if substitution with same name exists and throw error + ref, err := spec.NewRef(fieldmeta.DefinitionsPrefix + fieldmeta.SubstitutionDefinitionPrefix + c.Name) + if err != nil { + return err + } + + subst, _ := openapi.Resolve(&ref, c.SettersSchema) + // if substitution already exists with the input substitution name, throw error + if subst != nil { + return errors.Errorf("substitution with name %q already exists", c.Name) + } + + // check if setter with same name exists and throw error + ref, err = spec.NewRef(fieldmeta.DefinitionsPrefix + fieldmeta.SetterDefinitionPrefix + c.Name) + if err != nil { + return err + } + + setter, _ := openapi.Resolve(&ref, c.SettersSchema) + // if setter already exists with input substitution name, throw error + if setter != nil { + return errors.Errorf(fmt.Sprintf("setter with name %q already exists, "+ + "substitution and setter can't have same name", c.Name)) + } + + return nil +} diff --git a/go/internal/forked/kyaml/setters2/settersutil/substitutioncreator_test.go b/go/internal/forked/kyaml/setters2/settersutil/substitutioncreator_test.go new file mode 100644 index 000000000..9cace84d9 --- /dev/null +++ b/go/internal/forked/kyaml/setters2/settersutil/substitutioncreator_test.go @@ -0,0 +1,111 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package settersutil + +import ( + "testing" + + "github.com/stretchr/testify/assert" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/errors" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/setters2" +) + +func TestGetValuesForMarkers(t *testing.T) { + var tests = []struct { + name string + pattern string + fieldValue string + markers []string + expectedError error + expectedOutput map[string]string + }{ + { + name: "positive example", + markers: []string{"IMAGE", "VERSION"}, + pattern: "something/IMAGE::VERSION/otherthing/IMAGE::VERSION/", + fieldValue: "something/nginx::0.1.0/otherthing/nginx::0.1.0/", + expectedOutput: map[string]string{"IMAGE": "nginx", "VERSION": "0.1.0"}, + }, + { + name: "marker with different values", + markers: []string{"IMAGE", "VERSION"}, + pattern: "something/IMAGE:VERSION/IMAGE", + fieldValue: "something/nginx:0.1.0/ubuntu", + expectedError: errors.Errorf("marker IMAGE is found to have different values nginx and ubuntu"), + }, + { + name: "unmatched pattern", + markers: []string{"IMAGE", "VERSION"}, + pattern: "something/IMAGE:VERSION", + fieldValue: "otherthing/nginx:0.1.0", + expectedError: errors.Errorf("unable to derive values for markers"), + }, + { + name: "unmatched pattern at the end", + markers: []string{"IMAGE", "VERSION"}, + pattern: "something/IMAGE:VERSION/abc", + fieldValue: "something/nginx:0.1.0/abcd", + expectedError: errors.Errorf("unable to derive values for markers"), + }, + { + name: "substring markers", + markers: []string{"IMAGE", "VERSION", "MAGE"}, + pattern: "something/IMAGE:VERSION/abc/MAGE", + fieldValue: "something/nginx:0.1.0/abc/ubuntu", + expectedError: errors.Errorf("no marker should be substring of other"), + }, + { + name: "markers with no delimiters", + markers: []string{"IMAGE", "VERSION"}, + pattern: "something/IMAGEVERSION/", + fieldValue: "something/nginx0.1.0/", + expectedError: errors.Errorf("no delimiters between them"), + }, + { + name: "unmatched delimiter", + markers: []string{"IMAGE", "VERSION"}, + pattern: "something/IMAGE:^VERSION/otherthing/IMAGE::VERSION/", + fieldValue: "something/nginx::0.1.0/otherthing/nginx::0.1.0/", + expectedError: errors.Errorf("unable to derive values for markers"), + }, + } + for i := range tests { + test := tests[i] + t.Run(test.name, func(t *testing.T) { + values := []setters2.Value{} + for _, marker := range test.markers { + value := setters2.Value{ + Marker: marker, + } + values = append(values, value) + } + + sc := SubstitutionCreator{ + Pattern: test.pattern, + Values: values, + FieldValue: test.fieldValue, + } + + m, err := sc.GetValuesForMarkers() + + if test.expectedError == nil { + // fail if expectedError is nil but actual error is not + if !assert.NoError(t, err) { + t.FailNow() + } + // check if all the expected markers and values are present in actual map + for k, v := range test.expectedOutput { + if val, ok := m[k]; ok { + assert.Equal(t, v, val) + } else { + t.FailNow() + } + } + } else { + // if expectedError is not nil, check for correctness of error message + assert.Contains(t, err.Error(), test.expectedError.Error()) + } + }) + } +} diff --git a/go/internal/forked/kyaml/setters2/types.go b/go/internal/forked/kyaml/setters2/types.go new file mode 100644 index 000000000..da1cafc8b --- /dev/null +++ b/go/internal/forked/kyaml/setters2/types.go @@ -0,0 +1,74 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package setters2 + +import ( + "encoding/json" + + "k8s.io/kube-openapi/pkg/validation/spec" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/errors" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/openapi" +) + +type CliExtension struct { + Setter *setter `yaml:"setter,omitempty" json:"setter,omitempty"` + Substitution *substitution `yaml:"substitution,omitempty" json:"substitution,omitempty"` +} + +type setter struct { + Name string `yaml:"name,omitempty" json:"name,omitempty"` + Value string `yaml:"value,omitempty" json:"value,omitempty"` + ListValues []string `yaml:"listValues,omitempty" json:"listValues,omitempty"` + EnumValues map[string]string `yaml:"enumValues,omitempty" json:"enumValues,omitempty"` + Required bool `yaml:"required,omitempty" json:"required,omitempty"` + IsSet bool `yaml:"isSet,omitempty" json:"isSet,omitempty"` +} + +type substitution struct { + Name string `yaml:"name,omitempty" json:"name,omitempty"` + Pattern string `yaml:"pattern,omitempty" json:"pattern,omitempty"` + Values []substitutionSetterReference `yaml:"values,omitempty" json:"values,omitempty"` +} + +type substitutionSetterReference struct { + Ref string `yaml:"ref,omitempty" json:"ref,omitempty"` + Marker string `yaml:"marker,omitempty" json:"marker,omitempty"` +} + +// K8sCliExtensionKey is the name of the OpenAPI field containing the setter extensions +const K8sCliExtensionKey = "x-k8s-cli" + +// GetExtFromSchema returns the cliExtension openAPI extension if it is present in schema +func GetExtFromSchema(schema *spec.Schema) (*CliExtension, error) { + cep := schema.VendorExtensible.Extensions[K8sCliExtensionKey] + if cep == nil { + return nil, nil + } + b, err := json.Marshal(cep) + if err != nil { + return nil, err + } + val := &CliExtension{} + if err := json.Unmarshal(b, val); err != nil { + return nil, err + } + return val, nil +} + +// getExtFromComment returns the cliExtension openAPI extension if it is present as +// a comment on the field. +func getExtFromComment(schema *openapi.ResourceSchema) (*CliExtension, error) { + if schema == nil { + // no schema found + // TODO(pwittrock): should this be an error if it doesn't resolve? + return nil, nil + } + + // get the cli extension from the openapi (contains setter information) + ext, err := GetExtFromSchema(schema.Schema) + if err != nil { + return nil, errors.Wrap(err) + } + return ext, nil +} diff --git a/go/internal/forked/kyaml/setters2/util.go b/go/internal/forked/kyaml/setters2/util.go new file mode 100644 index 000000000..594e251cf --- /dev/null +++ b/go/internal/forked/kyaml/setters2/util.go @@ -0,0 +1,31 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package setters2 + +import ( + "strings" + + "k8s.io/kube-openapi/pkg/validation/spec" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/errors" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/fieldmeta" +) + +// CheckRequiredSettersSet iterates through all the setter definitions in openAPI +// schema and returns error if any of the setter has required field true and isSet false +func CheckRequiredSettersSet(settersSchema *spec.Schema) error { + for key := range settersSchema.Definitions { + if strings.Contains(key, fieldmeta.SetterDefinitionPrefix) { + val := settersSchema.Definitions[key] + defExt, err := GetExtFromSchema(&val) // parse the extension out of the openAPI + if err != nil { + return errors.Wrap(err) + } + if defExt.Setter != nil && defExt.Setter.Required && !defExt.Setter.IsSet { + return errors.Errorf("setter %s is required but not set, "+ + "please set it to new value and try again", strings.TrimPrefix(key, fieldmeta.SetterDefinitionPrefix)) + } + } + } + return nil +} diff --git a/go/internal/forked/kyaml/setters2/util_test.go b/go/internal/forked/kyaml/setters2/util_test.go new file mode 100644 index 000000000..9cf4cdf94 --- /dev/null +++ b/go/internal/forked/kyaml/setters2/util_test.go @@ -0,0 +1,169 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package setters2 + +import ( + "fmt" + "io/ioutil" + "os" + "path/filepath" + "testing" + + "github.com/stretchr/testify/assert" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/openapi" +) + +func TestCheckRequiredSettersSet(t *testing.T) { + var tests = []struct { + name string + inputOpenAPIfile string + expectedError bool + }{ + { + name: "no required, no isSet", + inputOpenAPIfile: ` +apiVersion: v1alpha1 +kind: OpenAPIfile +openAPI: + definitions: + io.k8s.cli.setters.gcloud.project.projectNumber: + description: hello world + x-k8s-cli: + setter: + name: gcloud.project.projectNumber + value: "123" + setBy: me + io.k8s.cli.setters.replicas: + description: hello world + x-k8s-cli: + setter: + name: replicas + value: "3" + setBy: me + `, + expectedError: false, + }, + { + name: "required true, no isSet", + inputOpenAPIfile: ` +apiVersion: v1alpha1 +kind: Example +openAPI: + definitions: + io.k8s.cli.setters.replicas: + description: hello world + x-k8s-cli: + setter: + name: replicas + value: "3" + setBy: me + required: true + `, + expectedError: true, + }, + { + name: "required true, isSet true", + inputOpenAPIfile: ` +apiVersion: v1alpha1 +kind: Example +openAPI: + definitions: + io.k8s.cli.setters.replicas: + description: hello world + x-k8s-cli: + setter: + name: replicas + value: "3" + setBy: me + required: true + isSet: true + `, + expectedError: false, + }, + + { + name: "required false, isSet true", + inputOpenAPIfile: ` +apiVersion: v1alpha1 +kind: OpenAPIfile +openAPI: + definitions: + io.k8s.cli.setters.gcloud.project.projectNumber: + description: hello world + x-k8s-cli: + setter: + name: gcloud.project.projectNumber + value: "123" + setBy: me + io.k8s.cli.setters.replicas: + description: hello world + x-k8s-cli: + setter: + name: replicas + value: "3" + setBy: me + required: false + isSet: true + `, + expectedError: false, + }, + + { + name: "required true, isSet false", + inputOpenAPIfile: ` +apiVersion: v1alpha1 +kind: OpenAPIfile +openAPI: + definitions: + io.k8s.cli.setters.gcloud.project.projectNumber: + description: hello world + x-k8s-cli: + setter: + name: gcloud.project.projectNumber + value: "123" + setBy: me + io.k8s.cli.setters.replicas: + description: hello world + x-k8s-cli: + setter: + name: replicas + value: "3" + setBy: me + required: true + isSet: false + `, + expectedError: true, + }, + } + for i := range tests { + test := tests[i] + t.Run(test.name, func(t *testing.T) { + openapi.ResetOpenAPI() + defer openapi.ResetOpenAPI() + dir, err := ioutil.TempDir("", "") + assert.NoError(t, err) + defer os.RemoveAll(dir) + err = ioutil.WriteFile(filepath.Join(dir, "Krmfile"), []byte(test.inputOpenAPIfile), 0600) + if !assert.NoError(t, err) { + t.FailNow() + } + sc, err := openapi.SchemaFromFile(filepath.Join(dir, "Krmfile")) + if !assert.NoError(t, err) { + t.FailNow() + } + if err != nil { + // do nothing if openAPI file or schema doesn't exist, CheckRequiredSettersSet() + // should not throw any error + fmt.Println("Unable to load schema from file, continuing...") + } + err = CheckRequiredSettersSet(sc) + if test.expectedError && !assert.Error(t, err) { + t.FailNow() + } + if !test.expectedError && !assert.NoError(t, err) { + t.FailNow() + } + }) + } +} diff --git a/go/internal/forked/kyaml/setters2/walk.go b/go/internal/forked/kyaml/setters2/walk.go new file mode 100644 index 000000000..709ab2fd4 --- /dev/null +++ b/go/internal/forked/kyaml/setters2/walk.go @@ -0,0 +1,124 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package setters2 + +import ( + "k8s.io/kube-openapi/pkg/validation/spec" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/fieldmeta" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/openapi" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" +) + +// visitor is implemented by structs which need to walk the configuration. +// visitor is provided to accept to walk configuration +type visitor interface { + // visitScalar is called for each scalar field value on a resource + // node is the scalar field value + // path is the path to the field; path elements are separated by '.' + // oa is the OpenAPI schema for the field + visitScalar(node *yaml.RNode, path string, oa *openapi.ResourceSchema, fieldOA *openapi.ResourceSchema) error + + // visitSequence is called for each sequence field value on a resource + // node is the sequence field value + // path is the path to the field + // oa is the OpenAPI schema for the field + visitSequence(node *yaml.RNode, path string, oa *openapi.ResourceSchema) error + + // visitMapping is called for each Mapping field value on a resource + // node is the mapping field value + // path is the path to the field + // oa is the OpenAPI schema for the field + visitMapping(node *yaml.RNode, path string, oa *openapi.ResourceSchema) error +} + +// accept invokes the appropriate function on v for each field in object +func accept(v visitor, object *yaml.RNode, settersSchema *spec.Schema) error { + // get the OpenAPI for the type if it exists + oa := getSchema(object, nil, "", settersSchema) + return acceptImpl(v, object, "", oa, settersSchema) +} + +// acceptImpl implements accept using recursion +func acceptImpl(v visitor, object *yaml.RNode, p string, oa *openapi.ResourceSchema, settersSchema *spec.Schema) error { + switch object.YNode().Kind { + case yaml.DocumentNode: + // Traverse the child of the document + return accept(v, yaml.NewRNode(object.YNode()), settersSchema) + case yaml.MappingNode: + if err := v.visitMapping(object, p, oa); err != nil { + return err + } + return object.VisitFields(func(node *yaml.MapNode) error { + // get the schema for the field and propagate it + fieldSchema := getSchema(node.Key, oa, node.Key.YNode().Value, settersSchema) + // Traverse each field value + return acceptImpl(v, node.Value, p+"."+node.Key.YNode().Value, fieldSchema, settersSchema) + }) + case yaml.SequenceNode: + // get the schema for the sequence node, use the schema provided if not present + // on the field + if err := v.visitSequence(object, p, oa); err != nil { + return err + } + // get the schema for the elements + schema := getSchema(object, oa, "", settersSchema) + return object.VisitElements(func(node *yaml.RNode) error { + // Traverse each list element + return acceptImpl(v, node, p, schema, settersSchema) + }) + case yaml.ScalarNode: + // Visit the scalar field + fieldSchema := getSchema(object, oa, "", settersSchema) + return v.visitScalar(object, p, oa, fieldSchema) + } + return nil +} + +// getSchema returns OpenAPI schema for an RNode or field of the +// RNode. It will overriding the provide schema with field specific values +// if they are found +// r is the Node to get the Schema for +// s is the provided schema for the field if known +// field is the name of the field +func getSchema(r *yaml.RNode, s *openapi.ResourceSchema, field string, settersSchema *spec.Schema) *openapi.ResourceSchema { + // get the override schema if it exists on the field + fm := fieldmeta.FieldMeta{SettersSchema: settersSchema} + if err := fm.Read(r); err == nil && !fm.IsEmpty() { + // per-field schema, this is fine + if fm.Schema.Ref.String() != "" { + // resolve the reference + s, err := openapi.Resolve(&fm.Schema.Ref, settersSchema) + if err == nil && s != nil { + fm.Schema = *s + } + } + return &openapi.ResourceSchema{Schema: &fm.Schema} + } + + // get the schema for a field of the node if the field is provided + if s != nil && field != "" { + return s.Field(field) + } + + // get the schema for the elements if this is a list + if s != nil && r.YNode().Kind == yaml.SequenceNode { + return s.Elements() + } + + // use the provided schema if present + if s != nil { + return s + } + + if yaml.IsMissingOrNull(r) { + return nil + } + + // lookup the schema for the type + m, _ := r.GetMeta() + if m.Kind == "" || m.APIVersion == "" { + return nil + } + return openapi.SchemaForResourceType(yaml.TypeMeta{Kind: m.Kind, APIVersion: m.APIVersion}) +} diff --git a/go/internal/forked/kyaml/sliceutil/slice.go b/go/internal/forked/kyaml/sliceutil/slice.go new file mode 100644 index 000000000..23e3ad7c2 --- /dev/null +++ b/go/internal/forked/kyaml/sliceutil/slice.go @@ -0,0 +1,25 @@ +// Copyright 2021 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package sliceutil + +// Contains return true if string e is present in slice s +func Contains(s []string, e string) bool { + for _, a := range s { + if a == e { + return true + } + } + return false +} + +// Remove removes the first occurrence of r in slice s +// and returns remaining slice +func Remove(s []string, r string) []string { + for i, v := range s { + if v == r { + return append(s[:i], s[i+1:]...) + } + } + return s +} diff --git a/go/internal/forked/kyaml/sliceutil/sliceutil_test.go b/go/internal/forked/kyaml/sliceutil/sliceutil_test.go new file mode 100644 index 000000000..6e38fa6e6 --- /dev/null +++ b/go/internal/forked/kyaml/sliceutil/sliceutil_test.go @@ -0,0 +1,25 @@ +// Copyright 2021 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package sliceutil + +import ( + "testing" + + "github.com/stretchr/testify/assert" +) + +func TestContains(t *testing.T) { + assert.True(t, Contains([]string{"foo", "bar"}, "bar")) + assert.False(t, Contains([]string{"foo", "bar"}, "baz")) + assert.False(t, Contains([]string{}, "bar")) + assert.False(t, Contains([]string{}, "")) +} + +func TestRemove(t *testing.T) { + assert.Equal(t, Remove([]string{"foo", "bar"}, "bar"), []string{"foo"}) + assert.Equal(t, Remove([]string{"foo", "bar", "foo"}, "foo"), []string{"bar", "foo"}) + assert.Equal(t, Remove([]string{"foo"}, "foo"), []string{}) + assert.Equal(t, Remove([]string{}, "foo"), []string{}) + assert.Equal(t, Remove([]string{"foo", "bar", "foo"}, "baz"), []string{"foo", "bar", "foo"}) +} diff --git a/go/internal/forked/kyaml/testutil/testutil.go b/go/internal/forked/kyaml/testutil/testutil.go new file mode 100644 index 000000000..fc4f3b482 --- /dev/null +++ b/go/internal/forked/kyaml/testutil/testutil.go @@ -0,0 +1,68 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package testutil + +import ( + "bytes" + "runtime" + + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/kio" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" + + "testing" + + goerrors "github.com/go-errors/errors" + + "github.com/stretchr/testify/assert" +) + +func UpdateYamlString(doc string, functions ...yaml.Filter) (string, error) { + b, err := UpdateYamlBytes([]byte(doc), functions...) + return string(b), err +} + +func UpdateYamlBytes(b []byte, function ...yaml.Filter) ([]byte, error) { + var out bytes.Buffer + rw := kio.ByteReadWriter{ + Reader: bytes.NewBuffer(b), + Writer: &out, + } + err := kio.Pipeline{ + Inputs: []kio.Reader{&rw}, + Filters: []kio.Filter{ + kio.FilterAll(yaml.FilterFunc( + func(node *yaml.RNode) (*yaml.RNode, error) { + return node.Pipe(function...) + }), + ), + }, + Outputs: []kio.Writer{&rw}, + }.Execute() + return out.Bytes(), err +} + +func AssertErrorContains(t *testing.T, err error, value string, msg ...string) { + if !assert.Error(t, err, msg) { + t.FailNow() + } + if !assert.Contains(t, err.Error(), value, msg) { + t.FailNow() + } +} + +func AssertNoError(t *testing.T, err error, msg ...string) { + if !assert.NoError(t, err, msg) { + gerr, ok := err.(*goerrors.Error) + if ok { + t.Fatal(string(gerr.Stack())) + } + t.FailNow() + } +} + +func SkipWindows(t *testing.T) { + if runtime.GOOS == "windows" { + t.Skip() + } +} diff --git a/go/internal/forked/kyaml/yaml/const.go b/go/internal/forked/kyaml/yaml/const.go new file mode 100644 index 000000000..6a2cc4516 --- /dev/null +++ b/go/internal/forked/kyaml/yaml/const.go @@ -0,0 +1,30 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package yaml + +const ( + // NodeTagNull is the tag set for a yaml.Document that contains no data; + // e.g. it isn't a Map, Slice, Document, etc + NodeTagNull = "!!null" + NodeTagFloat = "!!float" + NodeTagString = "!!str" + NodeTagBool = "!!bool" + NodeTagInt = "!!int" + NodeTagMap = "!!map" + NodeTagSeq = "!!seq" + NodeTagEmpty = "" +) + +// Field names +const ( + AnnotationsField = "annotations" + APIVersionField = "apiVersion" + KindField = "kind" + MetadataField = "metadata" + DataField = "data" + BinaryDataField = "binaryData" + NameField = "name" + NamespaceField = "namespace" + LabelsField = "labels" +) diff --git a/go/internal/forked/kyaml/yaml/datamap.go b/go/internal/forked/kyaml/yaml/datamap.go new file mode 100644 index 000000000..f4b7e6664 --- /dev/null +++ b/go/internal/forked/kyaml/yaml/datamap.go @@ -0,0 +1,121 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package yaml + +import ( + "encoding/base64" + "sort" + "strings" + "unicode/utf8" +) + +// SortedMapKeys returns a sorted slice of keys to the given map. +// Writing this function never gets old. +func SortedMapKeys(m map[string]string) []string { + keys := make([]string, len(m)) + i := 0 + for k := range m { + keys[i] = k + i++ + } + sort.Strings(keys) + return keys +} + +func (rn *RNode) LoadMapIntoConfigMapData(m map[string]string) error { + for _, k := range SortedMapKeys(m) { + fldName, vrN := makeConfigMapValueRNode(m[k]) + if _, err := rn.Pipe( + LookupCreate(MappingNode, fldName), + SetField(k, vrN)); err != nil { + return err + } + } + return nil +} + +func (rn *RNode) LoadMapIntoConfigMapBinaryData(m map[string]string) error { + for _, k := range SortedMapKeys(m) { + _, vrN := makeConfigMapValueRNode(m[k]) + // we know this is binary data + fldName := BinaryDataField + if _, err := rn.Pipe( + LookupCreate(MappingNode, fldName), + SetField(k, vrN)); err != nil { + return err + } + } + return nil +} + +func makeConfigMapValueRNode(s string) (field string, rN *RNode) { + yN := &Node{Kind: ScalarNode} + yN.Tag = NodeTagString + if utf8.ValidString(s) { + field = DataField + yN.Value = s + } else { + field = BinaryDataField + yN.Value = encodeBase64(s) + } + if strings.Contains(yN.Value, "\n") { + yN.Style = LiteralStyle + } + return field, NewRNode(yN) +} + +func (rn *RNode) LoadMapIntoSecretData(m map[string]string) error { + mapNode, err := rn.Pipe(LookupCreate(MappingNode, DataField)) + if err != nil { + return err + } + for _, k := range SortedMapKeys(m) { + vrN := makeSecretValueRNode(m[k]) + if _, err := mapNode.Pipe(SetField(k, vrN)); err != nil { + return err + } + } + return nil +} + +// In a secret, all data is base64 encoded, regardless of its conformance +// or lack thereof to UTF-8. +func makeSecretValueRNode(s string) *RNode { + yN := &Node{Kind: ScalarNode} + // Purposely don't use YAML tags to identify the data as being plain text or + // binary. It kubernetes Secrets the values in the `data` map are expected + // to be base64 encoded, and in ConfigMaps that same can be said for the + // values in the `binaryData` field. + yN.Tag = NodeTagString + yN.Value = encodeBase64(s) + if strings.Contains(yN.Value, "\n") { + yN.Style = LiteralStyle + } + return NewRNode(yN) +} + +// encodeBase64 encodes s as base64 that is broken up into multiple lines +// as appropriate for the resulting length. +func encodeBase64(s string) string { + const lineLen = 70 + encLen := base64.StdEncoding.EncodedLen(len(s)) + lines := encLen/lineLen + 1 + buf := make([]byte, encLen*2+lines) + in := buf[0:encLen] + out := buf[encLen:] + base64.StdEncoding.Encode(in, []byte(s)) + k := 0 + for i := 0; i < len(in); i += lineLen { + j := i + lineLen + if j > len(in) { + j = len(in) + } + k += copy(out[k:], in[i:j]) + if lines > 1 { + out[k] = '\n' + k++ + } + } + return string(out[:k]) +} diff --git a/go/internal/forked/kyaml/yaml/doc.go b/go/internal/forked/kyaml/yaml/doc.go new file mode 100644 index 000000000..b58811cf8 --- /dev/null +++ b/go/internal/forked/kyaml/yaml/doc.go @@ -0,0 +1,49 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +// Package yaml contains libraries for manipulating individual Kubernetes Resource +// Configuration as yaml, keeping yaml structure and comments. +// +// Parsing Resources +// +// Typically Resources will be initialized as collections through the kio package libraries. +// However it is possible to directly initialize Resources using Parse. +// resource, err := yaml.Parse("apiVersion: apps/v1\nkind: Deployment") +// +// Processing Resources +// +// Individual Resources are manipulated using the Pipe and PipeE to apply Filter functions +// to transform the Resource data. +// err := resource.PipeE(yaml.SetAnnotation("key", "value")) +// +// If multiple Filter functions are provided to Pipe or PipeE, each function is applied to +// the result of the last function -- e.g. yaml.Lookup(...), yaml.SetField(...) +// +// Field values may also be retrieved using Pipe. +// annotationValue, err := resource.Pipe(yaml.GetAnnotation("key")) +// +// See http://www.linfo.org/filters.html for a definition of filters. +// +// Common Filters +// +// There are a number of standard filter functions provided by the yaml package. +// +// Working with annotations: +// [AnnotationSetter{}, AnnotationGetter{}, AnnotationClearer{}] +// +// Working with fields by path: +// [PathMatcher{}, PathGetter{}] +// +// Working with individual fields on Maps and Objects: +// [FieldMatcher{}, FieldSetter{}, FieldGetter{}] +// +// Working with individual elements in Sequences: +// [ElementAppender{}, ElementSetter{}, ElementMatcher{}] +// +// Writing Filters +// +// Users may implement their own filter functions. When doing so, can be necessary to work with +// the RNode directly rather than through Pipe. RNode provides a number of functions for doing +// so. See: +// [GetMeta(), Fields(), Elements(), String()] +package yaml diff --git a/go/internal/forked/kyaml/yaml/filters.go b/go/internal/forked/kyaml/yaml/filters.go new file mode 100644 index 000000000..e364035e6 --- /dev/null +++ b/go/internal/forked/kyaml/yaml/filters.go @@ -0,0 +1,146 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package yaml + +import ( + "fmt" + "regexp" + "sort" + "strings" +) + +// Filters is the list of serializable Pipeline Filters +var Filters = map[string]func() Filter{ + "AnnotationClearer": func() Filter { return &AnnotationClearer{} }, + "AnnotationGetter": func() Filter { return &AnnotationGetter{} }, + "AnnotationSetter": func() Filter { return &AnnotationSetter{} }, + "LabelSetter": func() Filter { return &LabelSetter{} }, + "ElementAppender": func() Filter { return &ElementAppender{} }, + "ElementMatcher": func() Filter { return &ElementMatcher{} }, + "FieldClearer": func() Filter { return &FieldClearer{} }, + "FilterMatcher": func() Filter { return &FilterMatcher{} }, + "FieldMatcher": func() Filter { return &FieldMatcher{} }, + "FieldSetter": func() Filter { return &FieldSetter{} }, + "PathGetter": func() Filter { return &PathGetter{} }, + "PathMatcher": func() Filter { return &PathMatcher{} }, + "Parser": func() Filter { return &Parser{} }, + "PrefixSetter": func() Filter { return &PrefixSetter{} }, + "ValueReplacer": func() Filter { return &ValueReplacer{} }, + "SuffixSetter": func() Filter { return &SuffixSetter{} }, + "TeePiper": func() Filter { return &TeePiper{} }, +} + +// YFilter wraps the Filter interface so the filter can be represented as +// data and can be unmarshalled into a struct from a yaml config file. +// This allows Pipelines to be expressed as data rather than code. +type YFilter struct { + Filter +} + +func (y YFilter) MarshalYAML() (interface{}, error) { + return y.Filter, nil +} + +func (y *YFilter) UnmarshalYAML(unmarshal func(interface{}) error) error { + meta := &ResourceMeta{} + if err := unmarshal(meta); err != nil { + return err + } + filter, found := Filters[meta.Kind] + if !found { + var knownFilters []string + for k := range Filters { + knownFilters = append(knownFilters, k) + } + sort.Strings(knownFilters) + return fmt.Errorf("unsupported Filter Kind %s: may be one of: [%s]", + meta.Kind, strings.Join(knownFilters, ",")) + } + y.Filter = filter() + + if err := unmarshal(y.Filter); err != nil { + return err + } + return nil +} + +type YFilters []YFilter + +func (y YFilters) Filters() []Filter { + var f []Filter + for i := range y { + f = append(f, y[i].Filter) + } + return f +} + +type FilterMatcher struct { + Kind string `yaml:"kind"` + + // Filters are the set of Filters run by TeePiper. + Filters YFilters `yaml:"pipeline,omitempty"` +} + +func (t FilterMatcher) Filter(rn *RNode) (*RNode, error) { + v, err := rn.Pipe(t.Filters.Filters()...) + if v == nil || err != nil { + return nil, err + } + // return the original input if the pipeline resolves to true + return rn, err +} + +type ValueReplacer struct { + Kind string `yaml:"kind"` + + StringMatch string `yaml:"stringMatch"` + RegexMatch string `yaml:"regexMatch"` + Replace string `yaml:"replace"` + Count int `yaml:"count"` +} + +func (s ValueReplacer) Filter(object *RNode) (*RNode, error) { + if s.Count == 0 { + s.Count = -1 + } + switch { + case s.StringMatch != "": + object.value.Value = strings.Replace(object.value.Value, s.StringMatch, s.Replace, s.Count) + case s.RegexMatch != "": + r, err := regexp.Compile(s.RegexMatch) + if err != nil { + return nil, fmt.Errorf("ValueReplacer RegexMatch does not compile: %v", err) + } + object.value.Value = r.ReplaceAllString(object.value.Value, s.Replace) + default: + return nil, fmt.Errorf("ValueReplacer missing StringMatch and RegexMatch") + } + return object, nil +} + +type PrefixSetter struct { + Kind string `yaml:"kind"` + + Value string `yaml:"value"` +} + +func (s PrefixSetter) Filter(object *RNode) (*RNode, error) { + if !strings.HasPrefix(object.value.Value, s.Value) { + object.value.Value = s.Value + object.value.Value + } + return object, nil +} + +type SuffixSetter struct { + Kind string `yaml:"kind"` + + Value string `yaml:"value"` +} + +func (s SuffixSetter) Filter(object *RNode) (*RNode, error) { + if !strings.HasSuffix(object.value.Value, s.Value) { + object.value.Value += s.Value + } + return object, nil +} diff --git a/go/internal/forked/kyaml/yaml/internal/k8sgen/doc.go b/go/internal/forked/kyaml/yaml/internal/k8sgen/doc.go new file mode 100644 index 000000000..2093c9c18 --- /dev/null +++ b/go/internal/forked/kyaml/yaml/internal/k8sgen/doc.go @@ -0,0 +1,7 @@ +// Copyright 2020 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +// All code below this directory is generated. +// See {repo}/cmd/k8scopy/main.go for more info. +//go:generate k8scopy k8scopy.yaml yaml +package k8sgen diff --git a/go/internal/forked/kyaml/yaml/internal/k8sgen/k8scopy.yaml b/go/internal/forked/kyaml/yaml/internal/k8sgen/k8scopy.yaml new file mode 100644 index 000000000..4c6a0d438 --- /dev/null +++ b/go/internal/forked/kyaml/yaml/internal/k8sgen/k8scopy.yaml @@ -0,0 +1,30 @@ +# Copyright 2020 The Kubernetes Authors. +# SPDX-License-Identifier: Apache-2.0 +# +# The files to vendor (copy). +# See {repo}/cmd/k8scopy/main.go for more info. +module: k8s.io/apimachinery +version: v0.19.8 +packages: +- name: pkg/labels + files: + - labels.go + - selector.go + - zz_generated.deepcopy.go +- name: pkg/selection + files: + - operator.go +- name: pkg/util/sets + files: + - empty.go + - string.go +- name: pkg/util/errors + files: + - errors.go +- name: pkg/util/validation + files: + - validation.go +- name: pkg/util/validation/field + files: + - errors.go + - path.go diff --git a/go/internal/forked/kyaml/yaml/internal/k8sgen/pkg/labels/copied.deepcopy.go b/go/internal/forked/kyaml/yaml/internal/k8sgen/pkg/labels/copied.deepcopy.go new file mode 100644 index 000000000..52f32be88 --- /dev/null +++ b/go/internal/forked/kyaml/yaml/internal/k8sgen/pkg/labels/copied.deepcopy.go @@ -0,0 +1,44 @@ +// Code generated by k8scopy from k8s.io/apimachinery@v0.19.8; DO NOT EDIT. +// File content copied from k8s.io/apimachinery@v0.19.8/pkg/labels/zz_generated.deepcopy.go + +//go:build !ignore_autogenerated +// +build !ignore_autogenerated + +/* +Copyright The Kubernetes Authors. + +Licensed under the Apache License, Version 2.0 (the "License"); +you may not use this file except in compliance with the License. +You may obtain a copy of the License at + + http://www.apache.org/licenses/LICENSE-2.0 + +Unless required by applicable law or agreed to in writing, software +distributed under the License is distributed on an "AS IS" BASIS, +WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. +See the License for the specific language governing permissions and +limitations under the License. +*/ + +package labels + +// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil. +func (in *Requirement) DeepCopyInto(out *Requirement) { + *out = *in + if in.strValues != nil { + in, out := &in.strValues, &out.strValues + *out = make([]string, len(*in)) + copy(*out, *in) + } + return +} + +// DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new Requirement. +func (in *Requirement) DeepCopy() *Requirement { + if in == nil { + return nil + } + out := new(Requirement) + in.DeepCopyInto(out) + return out +} diff --git a/go/internal/forked/kyaml/yaml/internal/k8sgen/pkg/labels/labels.go b/go/internal/forked/kyaml/yaml/internal/k8sgen/pkg/labels/labels.go new file mode 100644 index 000000000..300014eac --- /dev/null +++ b/go/internal/forked/kyaml/yaml/internal/k8sgen/pkg/labels/labels.go @@ -0,0 +1,192 @@ +// Code generated by k8scopy from k8s.io/apimachinery@v0.19.8; DO NOT EDIT. +// File content copied from k8s.io/apimachinery@v0.19.8/pkg/labels/labels.go + +/* +Copyright 2014 The Kubernetes Authors. + +Licensed under the Apache License, Version 2.0 (the "License"); +you may not use this file except in compliance with the License. +You may obtain a copy of the License at + + http://www.apache.org/licenses/LICENSE-2.0 + +Unless required by applicable law or agreed to in writing, software +distributed under the License is distributed on an "AS IS" BASIS, +WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. +See the License for the specific language governing permissions and +limitations under the License. +*/ + +package labels + +import ( + "fmt" + "sort" + "strings" +) + +// Labels allows you to present labels independently from their storage. +type Labels interface { + // Has returns whether the provided label exists. + Has(label string) (exists bool) + + // Get returns the value for the provided label. + Get(label string) (value string) +} + +// Set is a map of label:value. It implements Labels. +type Set map[string]string + +// String returns all labels listed as a human readable string. +// Conveniently, exactly the format that ParseSelector takes. +func (ls Set) String() string { + selector := make([]string, 0, len(ls)) + for key, value := range ls { + selector = append(selector, key+"="+value) + } + // Sort for determinism. + sort.StringSlice(selector).Sort() + return strings.Join(selector, ",") +} + +// Has returns whether the provided label exists in the map. +func (ls Set) Has(label string) bool { + _, exists := ls[label] + return exists +} + +// Get returns the value in the map for the provided label. +func (ls Set) Get(label string) string { + return ls[label] +} + +// AsSelector converts labels into a selectors. It does not +// perform any validation, which means the server will reject +// the request if the Set contains invalid values. +func (ls Set) AsSelector() Selector { + return SelectorFromSet(ls) +} + +// AsValidatedSelector converts labels into a selectors. +// The Set is validated client-side, which allows to catch errors early. +func (ls Set) AsValidatedSelector() (Selector, error) { + return ValidatedSelectorFromSet(ls) +} + +// AsSelectorPreValidated converts labels into a selector, but +// assumes that labels are already validated and thus doesn't +// perform any validation. +// According to our measurements this is significantly faster +// in codepaths that matter at high scale. +func (ls Set) AsSelectorPreValidated() Selector { + return SelectorFromValidatedSet(ls) +} + +// FormatLabels convert label map into plain string +func FormatLabels(labelMap map[string]string) string { + l := Set(labelMap).String() + if l == "" { + l = "" + } + return l +} + +// Conflicts takes 2 maps and returns true if there a key match between +// the maps but the value doesn't match, and returns false in other cases +func Conflicts(labels1, labels2 Set) bool { + small := labels1 + big := labels2 + if len(labels2) < len(labels1) { + small = labels2 + big = labels1 + } + + for k, v := range small { + if val, match := big[k]; match { + if val != v { + return true + } + } + } + + return false +} + +// Merge combines given maps, and does not check for any conflicts +// between the maps. In case of conflicts, second map (labels2) wins +func Merge(labels1, labels2 Set) Set { + mergedMap := Set{} + + for k, v := range labels1 { + mergedMap[k] = v + } + for k, v := range labels2 { + mergedMap[k] = v + } + return mergedMap +} + +// Equals returns true if the given maps are equal +func Equals(labels1, labels2 Set) bool { + if len(labels1) != len(labels2) { + return false + } + + for k, v := range labels1 { + value, ok := labels2[k] + if !ok { + return false + } + if value != v { + return false + } + } + return true +} + +// AreLabelsInWhiteList verifies if the provided label list +// is in the provided whitelist and returns true, otherwise false. +func AreLabelsInWhiteList(labels, whitelist Set) bool { + if len(whitelist) == 0 { + return true + } + + for k, v := range labels { + value, ok := whitelist[k] + if !ok { + return false + } + if value != v { + return false + } + } + return true +} + +// ConvertSelectorToLabelsMap converts selector string to labels map +// and validates keys and values +func ConvertSelectorToLabelsMap(selector string) (Set, error) { + labelsMap := Set{} + + if len(selector) == 0 { + return labelsMap, nil + } + + labels := strings.Split(selector, ",") + for _, label := range labels { + l := strings.Split(label, "=") + if len(l) != 2 { + return labelsMap, fmt.Errorf("invalid selector: %s", l) + } + key := strings.TrimSpace(l[0]) + if err := validateLabelKey(key); err != nil { + return labelsMap, err + } + value := strings.TrimSpace(l[1]) + if err := validateLabelValue(key, value); err != nil { + return labelsMap, err + } + labelsMap[key] = value + } + return labelsMap, nil +} diff --git a/go/internal/forked/kyaml/yaml/internal/k8sgen/pkg/labels/selector.go b/go/internal/forked/kyaml/yaml/internal/k8sgen/pkg/labels/selector.go new file mode 100644 index 000000000..db7e83d3e --- /dev/null +++ b/go/internal/forked/kyaml/yaml/internal/k8sgen/pkg/labels/selector.go @@ -0,0 +1,926 @@ +// Code generated by k8scopy from k8s.io/apimachinery@v0.19.8; DO NOT EDIT. +// File content copied from k8s.io/apimachinery@v0.19.8/pkg/labels/selector.go + +/* +Copyright 2014 The Kubernetes Authors. + +Licensed under the Apache License, Version 2.0 (the "License"); +you may not use this file except in compliance with the License. +You may obtain a copy of the License at + + http://www.apache.org/licenses/LICENSE-2.0 + +Unless required by applicable law or agreed to in writing, software +distributed under the License is distributed on an "AS IS" BASIS, +WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. +See the License for the specific language governing permissions and +limitations under the License. +*/ + +package labels + +import ( + "bytes" + "fmt" + "sort" + "strconv" + "strings" + + "log" + + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml/internal/k8sgen/pkg/selection" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml/internal/k8sgen/pkg/util/sets" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml/internal/k8sgen/pkg/util/validation" +) + +// Requirements is AND of all requirements. +type Requirements []Requirement + +// Selector represents a label selector. +type Selector interface { + // Matches returns true if this selector matches the given set of labels. + Matches(Labels) bool + + // Empty returns true if this selector does not restrict the selection space. + Empty() bool + + // String returns a human readable string that represents this selector. + String() string + + // Add adds requirements to the Selector + Add(r ...Requirement) Selector + + // Requirements converts this interface into Requirements to expose + // more detailed selection information. + // If there are querying parameters, it will return converted requirements and selectable=true. + // If this selector doesn't want to select anything, it will return selectable=false. + Requirements() (requirements Requirements, selectable bool) + + // Make a deep copy of the selector. + DeepCopySelector() Selector + + // RequiresExactMatch allows a caller to introspect whether a given selector + // requires a single specific label to be set, and if so returns the value it + // requires. + RequiresExactMatch(label string) (value string, found bool) +} + +// Everything returns a selector that matches all labels. +func Everything() Selector { + return internalSelector{} +} + +type nothingSelector struct{} + +func (n nothingSelector) Matches(_ Labels) bool { return false } +func (n nothingSelector) Empty() bool { return false } +func (n nothingSelector) String() string { return "" } +func (n nothingSelector) Add(_ ...Requirement) Selector { return n } +func (n nothingSelector) Requirements() (Requirements, bool) { return nil, false } +func (n nothingSelector) DeepCopySelector() Selector { return n } +func (n nothingSelector) RequiresExactMatch(label string) (value string, found bool) { + return "", false +} + +// Nothing returns a selector that matches no labels +func Nothing() Selector { + return nothingSelector{} +} + +// NewSelector returns a nil selector +func NewSelector() Selector { + return internalSelector(nil) +} + +type internalSelector []Requirement + +func (s internalSelector) DeepCopy() internalSelector { + if s == nil { + return nil + } + result := make([]Requirement, len(s)) + for i := range s { + s[i].DeepCopyInto(&result[i]) + } + return result +} + +func (s internalSelector) DeepCopySelector() Selector { + return s.DeepCopy() +} + +// ByKey sorts requirements by key to obtain deterministic parser +type ByKey []Requirement + +func (a ByKey) Len() int { return len(a) } + +func (a ByKey) Swap(i, j int) { a[i], a[j] = a[j], a[i] } + +func (a ByKey) Less(i, j int) bool { return a[i].key < a[j].key } + +// Requirement contains values, a key, and an operator that relates the key and values. +// The zero value of Requirement is invalid. +// Requirement implements both set based match and exact match +// Requirement should be initialized via NewRequirement constructor for creating a valid Requirement. +type Requirement struct { + key string + operator selection.Operator + // In huge majority of cases we have at most one value here. + // It is generally faster to operate on a single-element slice + // than on a single-element map, so we have a slice here. + strValues []string +} + +// NewRequirement is the constructor for a Requirement. +// If any of these rules is violated, an error is returned: +// (1) The operator can only be In, NotIn, Equals, DoubleEquals, NotEquals, Exists, or DoesNotExist. +// (2) If the operator is In or NotIn, the values set must be non-empty. +// (3) If the operator is Equals, DoubleEquals, or NotEquals, the values set must contain one value. +// (4) If the operator is Exists or DoesNotExist, the value set must be empty. +// (5) If the operator is Gt or Lt, the values set must contain only one value, which will be interpreted as an integer. +// (6) The key is invalid due to its length, or sequence +// of characters. See validateLabelKey for more details. +// +// The empty string is a valid value in the input values set. +func NewRequirement(key string, op selection.Operator, vals []string) (*Requirement, error) { + if err := validateLabelKey(key); err != nil { + return nil, err + } + switch op { + case selection.In, selection.NotIn: + if len(vals) == 0 { + return nil, fmt.Errorf("for 'in', 'notin' operators, values set can't be empty") + } + case selection.Equals, selection.DoubleEquals, selection.NotEquals: + if len(vals) != 1 { + return nil, fmt.Errorf("exact-match compatibility requires one single value") + } + case selection.Exists, selection.DoesNotExist: + if len(vals) != 0 { + return nil, fmt.Errorf("values set must be empty for exists and does not exist") + } + case selection.GreaterThan, selection.LessThan: + if len(vals) != 1 { + return nil, fmt.Errorf("for 'Gt', 'Lt' operators, exactly one value is required") + } + for i := range vals { + if _, err := strconv.ParseInt(vals[i], 10, 64); err != nil { + return nil, fmt.Errorf("for 'Gt', 'Lt' operators, the value must be an integer") + } + } + default: + return nil, fmt.Errorf("operator '%v' is not recognized", op) + } + + for i := range vals { + if err := validateLabelValue(key, vals[i]); err != nil { + return nil, err + } + } + return &Requirement{key: key, operator: op, strValues: vals}, nil +} + +func (r *Requirement) hasValue(value string) bool { + for i := range r.strValues { + if r.strValues[i] == value { + return true + } + } + return false +} + +// Matches returns true if the Requirement matches the input Labels. +// There is a match in the following cases: +// (1) The operator is Exists and Labels has the Requirement's key. +// (2) The operator is In, Labels has the Requirement's key and Labels' +// value for that key is in Requirement's value set. +// (3) The operator is NotIn, Labels has the Requirement's key and +// Labels' value for that key is not in Requirement's value set. +// (4) The operator is DoesNotExist or NotIn and Labels does not have the +// Requirement's key. +// (5) The operator is GreaterThanOperator or LessThanOperator, and Labels has +// the Requirement's key and the corresponding value satisfies mathematical inequality. +func (r *Requirement) Matches(ls Labels) bool { + switch r.operator { + case selection.In, selection.Equals, selection.DoubleEquals: + if !ls.Has(r.key) { + return false + } + return r.hasValue(ls.Get(r.key)) + case selection.NotIn, selection.NotEquals: + if !ls.Has(r.key) { + return true + } + return !r.hasValue(ls.Get(r.key)) + case selection.Exists: + return ls.Has(r.key) + case selection.DoesNotExist: + return !ls.Has(r.key) + case selection.GreaterThan, selection.LessThan: + if !ls.Has(r.key) { + return false + } + lsValue, err := strconv.ParseInt(ls.Get(r.key), 10, 64) + if err != nil { + log.Printf("ParseInt failed for value %+v in label %+v, %+v", ls.Get(r.key), ls, err) + return false + } + + // There should be only one strValue in r.strValues, and can be converted to an integer. + if len(r.strValues) != 1 { + log.Printf("Invalid values count %+v of requirement %#v, for 'Gt', 'Lt' operators, exactly one value is required", len(r.strValues), r) + return false + } + + var rValue int64 + for i := range r.strValues { + rValue, err = strconv.ParseInt(r.strValues[i], 10, 64) + if err != nil { + log.Printf("ParseInt failed for value %+v in requirement %#v, for 'Gt', 'Lt' operators, the value must be an integer", r.strValues[i], r) + return false + } + } + return (r.operator == selection.GreaterThan && lsValue > rValue) || (r.operator == selection.LessThan && lsValue < rValue) + default: + return false + } +} + +// Key returns requirement key +func (r *Requirement) Key() string { + return r.key +} + +// Operator returns requirement operator +func (r *Requirement) Operator() selection.Operator { + return r.operator +} + +// Values returns requirement values +func (r *Requirement) Values() sets.String { + ret := sets.String{} + for i := range r.strValues { + ret.Insert(r.strValues[i]) + } + return ret +} + +// Empty returns true if the internalSelector doesn't restrict selection space +func (lsel internalSelector) Empty() bool { + if lsel == nil { + return true + } + return len(lsel) == 0 +} + +// String returns a human-readable string that represents this +// Requirement. If called on an invalid Requirement, an error is +// returned. See NewRequirement for creating a valid Requirement. +func (r *Requirement) String() string { + var buffer bytes.Buffer + if r.operator == selection.DoesNotExist { + buffer.WriteString("!") + } + buffer.WriteString(r.key) + + switch r.operator { + case selection.Equals: + buffer.WriteString("=") + case selection.DoubleEquals: + buffer.WriteString("==") + case selection.NotEquals: + buffer.WriteString("!=") + case selection.In: + buffer.WriteString(" in ") + case selection.NotIn: + buffer.WriteString(" notin ") + case selection.GreaterThan: + buffer.WriteString(">") + case selection.LessThan: + buffer.WriteString("<") + case selection.Exists, selection.DoesNotExist: + return buffer.String() + } + + switch r.operator { + case selection.In, selection.NotIn: + buffer.WriteString("(") + } + if len(r.strValues) == 1 { + buffer.WriteString(r.strValues[0]) + } else { // only > 1 since == 0 prohibited by NewRequirement + // normalizes value order on output, without mutating the in-memory selector representation + // also avoids normalization when it is not required, and ensures we do not mutate shared data + buffer.WriteString(strings.Join(safeSort(r.strValues), ",")) + } + + switch r.operator { + case selection.In, selection.NotIn: + buffer.WriteString(")") + } + return buffer.String() +} + +// safeSort sort input strings without modification +func safeSort(in []string) []string { + if sort.StringsAreSorted(in) { + return in + } + out := make([]string, len(in)) + copy(out, in) + sort.Strings(out) + return out +} + +// Add adds requirements to the selector. It copies the current selector returning a new one +func (lsel internalSelector) Add(reqs ...Requirement) Selector { + var sel internalSelector + for ix := range lsel { + sel = append(sel, lsel[ix]) + } + for _, r := range reqs { + sel = append(sel, r) + } + sort.Sort(ByKey(sel)) + return sel +} + +// Matches for a internalSelector returns true if all +// its Requirements match the input Labels. If any +// Requirement does not match, false is returned. +func (lsel internalSelector) Matches(l Labels) bool { + for ix := range lsel { + if matches := lsel[ix].Matches(l); !matches { + return false + } + } + return true +} + +func (lsel internalSelector) Requirements() (Requirements, bool) { return Requirements(lsel), true } + +// String returns a comma-separated string of all +// the internalSelector Requirements' human-readable strings. +func (lsel internalSelector) String() string { + var reqs []string + for ix := range lsel { + reqs = append(reqs, lsel[ix].String()) + } + return strings.Join(reqs, ",") +} + +// RequiresExactMatch introspect whether a given selector requires a single specific field +// to be set, and if so returns the value it requires. +func (lsel internalSelector) RequiresExactMatch(label string) (value string, found bool) { + for ix := range lsel { + if lsel[ix].key == label { + switch lsel[ix].operator { + case selection.Equals, selection.DoubleEquals, selection.In: + if len(lsel[ix].strValues) == 1 { + return lsel[ix].strValues[0], true + } + } + return "", false + } + } + return "", false +} + +// Token represents constant definition for lexer token +type Token int + +const ( + // ErrorToken represents scan error + ErrorToken Token = iota + // EndOfStringToken represents end of string + EndOfStringToken + // ClosedParToken represents close parenthesis + ClosedParToken + // CommaToken represents the comma + CommaToken + // DoesNotExistToken represents logic not + DoesNotExistToken + // DoubleEqualsToken represents double equals + DoubleEqualsToken + // EqualsToken represents equal + EqualsToken + // GreaterThanToken represents greater than + GreaterThanToken + // IdentifierToken represents identifier, e.g. keys and values + IdentifierToken + // InToken represents in + InToken + // LessThanToken represents less than + LessThanToken + // NotEqualsToken represents not equal + NotEqualsToken + // NotInToken represents not in + NotInToken + // OpenParToken represents open parenthesis + OpenParToken +) + +// string2token contains the mapping between lexer Token and token literal +// (except IdentifierToken, EndOfStringToken and ErrorToken since it makes no sense) +var string2token = map[string]Token{ + ")": ClosedParToken, + ",": CommaToken, + "!": DoesNotExistToken, + "==": DoubleEqualsToken, + "=": EqualsToken, + ">": GreaterThanToken, + "in": InToken, + "<": LessThanToken, + "!=": NotEqualsToken, + "notin": NotInToken, + "(": OpenParToken, +} + +// ScannedItem contains the Token and the literal produced by the lexer. +type ScannedItem struct { + tok Token + literal string +} + +// isWhitespace returns true if the rune is a space, tab, or newline. +func isWhitespace(ch byte) bool { + return ch == ' ' || ch == '\t' || ch == '\r' || ch == '\n' +} + +// isSpecialSymbol detect if the character ch can be an operator +func isSpecialSymbol(ch byte) bool { + switch ch { + case '=', '!', '(', ')', ',', '>', '<': + return true + } + return false +} + +// Lexer represents the Lexer struct for label selector. +// It contains necessary informationt to tokenize the input string +type Lexer struct { + // s stores the string to be tokenized + s string + // pos is the position currently tokenized + pos int +} + +// read return the character currently lexed +// increment the position and check the buffer overflow +func (l *Lexer) read() (b byte) { + b = 0 + if l.pos < len(l.s) { + b = l.s[l.pos] + l.pos++ + } + return b +} + +// unread 'undoes' the last read character +func (l *Lexer) unread() { + l.pos-- +} + +// scanIDOrKeyword scans string to recognize literal token (for example 'in') or an identifier. +func (l *Lexer) scanIDOrKeyword() (tok Token, lit string) { + var buffer []byte +IdentifierLoop: + for { + switch ch := l.read(); { + case ch == 0: + break IdentifierLoop + case isSpecialSymbol(ch) || isWhitespace(ch): + l.unread() + break IdentifierLoop + default: + buffer = append(buffer, ch) + } + } + s := string(buffer) + if val, ok := string2token[s]; ok { // is a literal token? + return val, s + } + return IdentifierToken, s // otherwise is an identifier +} + +// scanSpecialSymbol scans string starting with special symbol. +// special symbol identify non literal operators. "!=", "==", "=" +func (l *Lexer) scanSpecialSymbol() (Token, string) { + lastScannedItem := ScannedItem{} + var buffer []byte +SpecialSymbolLoop: + for { + switch ch := l.read(); { + case ch == 0: + break SpecialSymbolLoop + case isSpecialSymbol(ch): + buffer = append(buffer, ch) + if token, ok := string2token[string(buffer)]; ok { + lastScannedItem = ScannedItem{tok: token, literal: string(buffer)} + } else if lastScannedItem.tok != 0 { + l.unread() + break SpecialSymbolLoop + } + default: + l.unread() + break SpecialSymbolLoop + } + } + if lastScannedItem.tok == 0 { + return ErrorToken, fmt.Sprintf("error expected: keyword found '%s'", buffer) + } + return lastScannedItem.tok, lastScannedItem.literal +} + +// skipWhiteSpaces consumes all blank characters +// returning the first non blank character +func (l *Lexer) skipWhiteSpaces(ch byte) byte { + for { + if !isWhitespace(ch) { + return ch + } + ch = l.read() + } +} + +// Lex returns a pair of Token and the literal +// literal is meaningfull only for IdentifierToken token +func (l *Lexer) Lex() (tok Token, lit string) { + switch ch := l.skipWhiteSpaces(l.read()); { + case ch == 0: + return EndOfStringToken, "" + case isSpecialSymbol(ch): + l.unread() + return l.scanSpecialSymbol() + default: + l.unread() + return l.scanIDOrKeyword() + } +} + +// Parser data structure contains the label selector parser data structure +type Parser struct { + l *Lexer + scannedItems []ScannedItem + position int +} + +// ParserContext represents context during parsing: +// some literal for example 'in' and 'notin' can be +// recognized as operator for example 'x in (a)' but +// it can be recognized as value for example 'value in (in)' +type ParserContext int + +const ( + // KeyAndOperator represents key and operator + KeyAndOperator ParserContext = iota + // Values represents values + Values +) + +// lookahead func returns the current token and string. No increment of current position +func (p *Parser) lookahead(context ParserContext) (Token, string) { + tok, lit := p.scannedItems[p.position].tok, p.scannedItems[p.position].literal + if context == Values { + switch tok { + case InToken, NotInToken: + tok = IdentifierToken + } + } + return tok, lit +} + +// consume returns current token and string. Increments the position +func (p *Parser) consume(context ParserContext) (Token, string) { + p.position++ + tok, lit := p.scannedItems[p.position-1].tok, p.scannedItems[p.position-1].literal + if context == Values { + switch tok { + case InToken, NotInToken: + tok = IdentifierToken + } + } + return tok, lit +} + +// scan runs through the input string and stores the ScannedItem in an array +// Parser can now lookahead and consume the tokens +func (p *Parser) scan() { + for { + token, literal := p.l.Lex() + p.scannedItems = append(p.scannedItems, ScannedItem{token, literal}) + if token == EndOfStringToken { + break + } + } +} + +// parse runs the left recursive descending algorithm +// on input string. It returns a list of Requirement objects. +func (p *Parser) parse() (internalSelector, error) { + p.scan() // init scannedItems + + var requirements internalSelector + for { + tok, lit := p.lookahead(Values) + switch tok { + case IdentifierToken, DoesNotExistToken: + r, err := p.parseRequirement() + if err != nil { + return nil, fmt.Errorf("unable to parse requirement: %v", err) + } + requirements = append(requirements, *r) + t, l := p.consume(Values) + switch t { + case EndOfStringToken: + return requirements, nil + case CommaToken: + t2, l2 := p.lookahead(Values) + if t2 != IdentifierToken && t2 != DoesNotExistToken { + return nil, fmt.Errorf("found '%s', expected: identifier after ','", l2) + } + default: + return nil, fmt.Errorf("found '%s', expected: ',' or 'end of string'", l) + } + case EndOfStringToken: + return requirements, nil + default: + return nil, fmt.Errorf("found '%s', expected: !, identifier, or 'end of string'", lit) + } + } +} + +func (p *Parser) parseRequirement() (*Requirement, error) { + key, operator, err := p.parseKeyAndInferOperator() + if err != nil { + return nil, err + } + if operator == selection.Exists || operator == selection.DoesNotExist { // operator found lookahead set checked + return NewRequirement(key, operator, []string{}) + } + operator, err = p.parseOperator() + if err != nil { + return nil, err + } + var values sets.String + switch operator { + case selection.In, selection.NotIn: + values, err = p.parseValues() + case selection.Equals, selection.DoubleEquals, selection.NotEquals, selection.GreaterThan, selection.LessThan: + values, err = p.parseExactValue() + } + if err != nil { + return nil, err + } + return NewRequirement(key, operator, values.List()) + +} + +// parseKeyAndInferOperator parse literals. +// in case of no operator '!, in, notin, ==, =, !=' are found +// the 'exists' operator is inferred +func (p *Parser) parseKeyAndInferOperator() (string, selection.Operator, error) { + var operator selection.Operator + tok, literal := p.consume(Values) + if tok == DoesNotExistToken { + operator = selection.DoesNotExist + tok, literal = p.consume(Values) + } + if tok != IdentifierToken { + err := fmt.Errorf("found '%s', expected: identifier", literal) + return "", "", err + } + if err := validateLabelKey(literal); err != nil { + return "", "", err + } + if t, _ := p.lookahead(Values); t == EndOfStringToken || t == CommaToken { + if operator != selection.DoesNotExist { + operator = selection.Exists + } + } + return literal, operator, nil +} + +// parseOperator return operator and eventually matchType +// matchType can be exact +func (p *Parser) parseOperator() (op selection.Operator, err error) { + tok, lit := p.consume(KeyAndOperator) + switch tok { + // DoesNotExistToken shouldn't be here because it's a unary operator, not a binary operator + case InToken: + op = selection.In + case EqualsToken: + op = selection.Equals + case DoubleEqualsToken: + op = selection.DoubleEquals + case GreaterThanToken: + op = selection.GreaterThan + case LessThanToken: + op = selection.LessThan + case NotInToken: + op = selection.NotIn + case NotEqualsToken: + op = selection.NotEquals + default: + return "", fmt.Errorf("found '%s', expected: '=', '!=', '==', 'in', notin'", lit) + } + return op, nil +} + +// parseValues parses the values for set based matching (x,y,z) +func (p *Parser) parseValues() (sets.String, error) { + tok, lit := p.consume(Values) + if tok != OpenParToken { + return nil, fmt.Errorf("found '%s' expected: '('", lit) + } + tok, lit = p.lookahead(Values) + switch tok { + case IdentifierToken, CommaToken: + s, err := p.parseIdentifiersList() // handles general cases + if err != nil { + return s, err + } + if tok, _ = p.consume(Values); tok != ClosedParToken { + return nil, fmt.Errorf("found '%s', expected: ')'", lit) + } + return s, nil + case ClosedParToken: // handles "()" + p.consume(Values) + return sets.NewString(""), nil + default: + return nil, fmt.Errorf("found '%s', expected: ',', ')' or identifier", lit) + } +} + +// parseIdentifiersList parses a (possibly empty) list of +// of comma separated (possibly empty) identifiers +func (p *Parser) parseIdentifiersList() (sets.String, error) { + s := sets.NewString() + for { + tok, lit := p.consume(Values) + switch tok { + case IdentifierToken: + s.Insert(lit) + tok2, lit2 := p.lookahead(Values) + switch tok2 { + case CommaToken: + continue + case ClosedParToken: + return s, nil + default: + return nil, fmt.Errorf("found '%s', expected: ',' or ')'", lit2) + } + case CommaToken: // handled here since we can have "(," + if s.Len() == 0 { + s.Insert("") // to handle (, + } + tok2, _ := p.lookahead(Values) + if tok2 == ClosedParToken { + s.Insert("") // to handle ,) Double "" removed by StringSet + return s, nil + } + if tok2 == CommaToken { + p.consume(Values) + s.Insert("") // to handle ,, Double "" removed by StringSet + } + default: // it can be operator + return s, fmt.Errorf("found '%s', expected: ',', or identifier", lit) + } + } +} + +// parseExactValue parses the only value for exact match style +func (p *Parser) parseExactValue() (sets.String, error) { + s := sets.NewString() + tok, lit := p.lookahead(Values) + if tok == EndOfStringToken || tok == CommaToken { + s.Insert("") + return s, nil + } + tok, lit = p.consume(Values) + if tok == IdentifierToken { + s.Insert(lit) + return s, nil + } + return nil, fmt.Errorf("found '%s', expected: identifier", lit) +} + +// Parse takes a string representing a selector and returns a selector +// object, or an error. This parsing function differs from ParseSelector +// as they parse different selectors with different syntaxes. +// The input will cause an error if it does not follow this form: +// +// ::= | "," +// ::= [!] KEY [ | ] +// ::= "" | +// ::= | +// ::= "notin" +// ::= "in" +// ::= "(" ")" +// ::= VALUE | VALUE "," +// ::= ["="|"=="|"!="] VALUE +// +// KEY is a sequence of one or more characters following [ DNS_SUBDOMAIN "/" ] DNS_LABEL. Max length is 63 characters. +// VALUE is a sequence of zero or more characters "([A-Za-z0-9_-\.])". Max length is 63 characters. +// Delimiter is white space: (' ', '\t') +// Example of valid syntax: +// "x in (foo,,baz),y,z notin ()" +// +// Note: +// (1) Inclusion - " in " - denotes that the KEY exists and is equal to any of the +// VALUEs in its requirement +// (2) Exclusion - " notin " - denotes that the KEY is not equal to any +// of the VALUEs in its requirement or does not exist +// (3) The empty string is a valid VALUE +// (4) A requirement with just a KEY - as in "y" above - denotes that +// the KEY exists and can be any VALUE. +// (5) A requirement with just !KEY requires that the KEY not exist. +// +func Parse(selector string) (Selector, error) { + parsedSelector, err := parse(selector) + if err == nil { + return parsedSelector, nil + } + return nil, err +} + +// parse parses the string representation of the selector and returns the internalSelector struct. +// The callers of this method can then decide how to return the internalSelector struct to their +// callers. This function has two callers now, one returns a Selector interface and the other +// returns a list of requirements. +func parse(selector string) (internalSelector, error) { + p := &Parser{l: &Lexer{s: selector, pos: 0}} + items, err := p.parse() + if err != nil { + return nil, err + } + sort.Sort(ByKey(items)) // sort to grant determistic parsing + return internalSelector(items), err +} + +func validateLabelKey(k string) error { + if errs := validation.IsQualifiedName(k); len(errs) != 0 { + return fmt.Errorf("invalid label key %q: %s", k, strings.Join(errs, "; ")) + } + return nil +} + +func validateLabelValue(k, v string) error { + if errs := validation.IsValidLabelValue(v); len(errs) != 0 { + return fmt.Errorf("invalid label value: %q: at key: %q: %s", v, k, strings.Join(errs, "; ")) + } + return nil +} + +// SelectorFromSet returns a Selector which will match exactly the given Set. A +// nil and empty Sets are considered equivalent to Everything(). +// It does not perform any validation, which means the server will reject +// the request if the Set contains invalid values. +func SelectorFromSet(ls Set) Selector { + return SelectorFromValidatedSet(ls) +} + +// ValidatedSelectorFromSet returns a Selector which will match exactly the given Set. A +// nil and empty Sets are considered equivalent to Everything(). +// The Set is validated client-side, which allows to catch errors early. +func ValidatedSelectorFromSet(ls Set) (Selector, error) { + if ls == nil || len(ls) == 0 { + return internalSelector{}, nil + } + requirements := make([]Requirement, 0, len(ls)) + for label, value := range ls { + r, err := NewRequirement(label, selection.Equals, []string{value}) + if err != nil { + return nil, err + } + requirements = append(requirements, *r) + } + // sort to have deterministic string representation + sort.Sort(ByKey(requirements)) + return internalSelector(requirements), nil +} + +// SelectorFromValidatedSet returns a Selector which will match exactly the given Set. +// A nil and empty Sets are considered equivalent to Everything(). +// It assumes that Set is already validated and doesn't do any validation. +func SelectorFromValidatedSet(ls Set) Selector { + if ls == nil || len(ls) == 0 { + return internalSelector{} + } + requirements := make([]Requirement, 0, len(ls)) + for label, value := range ls { + requirements = append(requirements, Requirement{key: label, operator: selection.Equals, strValues: []string{value}}) + } + // sort to have deterministic string representation + sort.Sort(ByKey(requirements)) + return internalSelector(requirements) +} + +// ParseToRequirements takes a string representing a selector and returns a list of +// requirements. This function is suitable for those callers that perform additional +// processing on selector requirements. +// See the documentation for Parse() function for more details. +// TODO: Consider exporting the internalSelector type instead. +func ParseToRequirements(selector string) ([]Requirement, error) { + return parse(selector) +} diff --git a/go/internal/forked/kyaml/yaml/internal/k8sgen/pkg/selection/operator.go b/go/internal/forked/kyaml/yaml/internal/k8sgen/pkg/selection/operator.go new file mode 100644 index 000000000..29c443df4 --- /dev/null +++ b/go/internal/forked/kyaml/yaml/internal/k8sgen/pkg/selection/operator.go @@ -0,0 +1,36 @@ +// Code generated by k8scopy from k8s.io/apimachinery@v0.19.8; DO NOT EDIT. +// File content copied from k8s.io/apimachinery@v0.19.8/pkg/selection/operator.go + +/* +Copyright 2016 The Kubernetes Authors. + +Licensed under the Apache License, Version 2.0 (the "License"); +you may not use this file except in compliance with the License. +You may obtain a copy of the License at + + http://www.apache.org/licenses/LICENSE-2.0 + +Unless required by applicable law or agreed to in writing, software +distributed under the License is distributed on an "AS IS" BASIS, +WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. +See the License for the specific language governing permissions and +limitations under the License. +*/ + +package selection + +// Operator represents a key/field's relationship to value(s). +// See labels.Requirement and fields.Requirement for more details. +type Operator string + +const ( + DoesNotExist Operator = "!" + Equals Operator = "=" + DoubleEquals Operator = "==" + In Operator = "in" + NotEquals Operator = "!=" + NotIn Operator = "notin" + Exists Operator = "exists" + GreaterThan Operator = "gt" + LessThan Operator = "lt" +) diff --git a/go/internal/forked/kyaml/yaml/internal/k8sgen/pkg/util/errors/errors.go b/go/internal/forked/kyaml/yaml/internal/k8sgen/pkg/util/errors/errors.go new file mode 100644 index 000000000..77a6ac70f --- /dev/null +++ b/go/internal/forked/kyaml/yaml/internal/k8sgen/pkg/util/errors/errors.go @@ -0,0 +1,252 @@ +// Code generated by k8scopy from k8s.io/apimachinery@v0.19.8; DO NOT EDIT. +// File content copied from k8s.io/apimachinery@v0.19.8/pkg/util/errors/errors.go + +/* +Copyright 2015 The Kubernetes Authors. + +Licensed under the Apache License, Version 2.0 (the "License"); +you may not use this file except in compliance with the License. +You may obtain a copy of the License at + + http://www.apache.org/licenses/LICENSE-2.0 + +Unless required by applicable law or agreed to in writing, software +distributed under the License is distributed on an "AS IS" BASIS, +WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. +See the License for the specific language governing permissions and +limitations under the License. +*/ + +package errors + +import ( + "errors" + "fmt" + + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml/internal/k8sgen/pkg/util/sets" +) + +// MessageCountMap contains occurrence for each error message. +type MessageCountMap map[string]int + +// Aggregate represents an object that contains multiple errors, but does not +// necessarily have singular semantic meaning. +// The aggregate can be used with `errors.Is()` to check for the occurrence of +// a specific error type. +// Errors.As() is not supported, because the caller presumably cares about a +// specific error of potentially multiple that match the given type. +type Aggregate interface { + error + Errors() []error + Is(error) bool +} + +// NewAggregate converts a slice of errors into an Aggregate interface, which +// is itself an implementation of the error interface. If the slice is empty, +// this returns nil. +// It will check if any of the element of input error list is nil, to avoid +// nil pointer panic when call Error(). +func NewAggregate(errlist []error) Aggregate { + if len(errlist) == 0 { + return nil + } + // In case of input error list contains nil + var errs []error + for _, e := range errlist { + if e != nil { + errs = append(errs, e) + } + } + if len(errs) == 0 { + return nil + } + return aggregate(errs) +} + +// This helper implements the error and Errors interfaces. Keeping it private +// prevents people from making an aggregate of 0 errors, which is not +// an error, but does satisfy the error interface. +type aggregate []error + +// Error is part of the error interface. +func (agg aggregate) Error() string { + if len(agg) == 0 { + // This should never happen, really. + return "" + } + if len(agg) == 1 { + return agg[0].Error() + } + seenerrs := sets.NewString() + result := "" + agg.visit(func(err error) bool { + msg := err.Error() + if seenerrs.Has(msg) { + return false + } + seenerrs.Insert(msg) + if len(seenerrs) > 1 { + result += ", " + } + result += msg + return false + }) + if len(seenerrs) == 1 { + return result + } + return "[" + result + "]" +} + +func (agg aggregate) Is(target error) bool { + return agg.visit(func(err error) bool { + return errors.Is(err, target) + }) +} + +func (agg aggregate) visit(f func(err error) bool) bool { + for _, err := range agg { + switch err := err.(type) { + case aggregate: + if match := err.visit(f); match { + return match + } + case Aggregate: + for _, nestedErr := range err.Errors() { + if match := f(nestedErr); match { + return match + } + } + default: + if match := f(err); match { + return match + } + } + } + + return false +} + +// Errors is part of the Aggregate interface. +func (agg aggregate) Errors() []error { + return []error(agg) +} + +// Matcher is used to match errors. Returns true if the error matches. +type Matcher func(error) bool + +// FilterOut removes all errors that match any of the matchers from the input +// error. If the input is a singular error, only that error is tested. If the +// input implements the Aggregate interface, the list of errors will be +// processed recursively. +// +// This can be used, for example, to remove known-OK errors (such as io.EOF or +// os.PathNotFound) from a list of errors. +func FilterOut(err error, fns ...Matcher) error { + if err == nil { + return nil + } + if agg, ok := err.(Aggregate); ok { + return NewAggregate(filterErrors(agg.Errors(), fns...)) + } + if !matchesError(err, fns...) { + return err + } + return nil +} + +// matchesError returns true if any Matcher returns true +func matchesError(err error, fns ...Matcher) bool { + for _, fn := range fns { + if fn(err) { + return true + } + } + return false +} + +// filterErrors returns any errors (or nested errors, if the list contains +// nested Errors) for which all fns return false. If no errors +// remain a nil list is returned. The resulting silec will have all +// nested slices flattened as a side effect. +func filterErrors(list []error, fns ...Matcher) []error { + result := []error{} + for _, err := range list { + r := FilterOut(err, fns...) + if r != nil { + result = append(result, r) + } + } + return result +} + +// Flatten takes an Aggregate, which may hold other Aggregates in arbitrary +// nesting, and flattens them all into a single Aggregate, recursively. +func Flatten(agg Aggregate) Aggregate { + result := []error{} + if agg == nil { + return nil + } + for _, err := range agg.Errors() { + if a, ok := err.(Aggregate); ok { + r := Flatten(a) + if r != nil { + result = append(result, r.Errors()...) + } + } else { + if err != nil { + result = append(result, err) + } + } + } + return NewAggregate(result) +} + +// CreateAggregateFromMessageCountMap converts MessageCountMap Aggregate +func CreateAggregateFromMessageCountMap(m MessageCountMap) Aggregate { + if m == nil { + return nil + } + result := make([]error, 0, len(m)) + for errStr, count := range m { + var countStr string + if count > 1 { + countStr = fmt.Sprintf(" (repeated %v times)", count) + } + result = append(result, fmt.Errorf("%v%v", errStr, countStr)) + } + return NewAggregate(result) +} + +// Reduce will return err or, if err is an Aggregate and only has one item, +// the first item in the aggregate. +func Reduce(err error) error { + if agg, ok := err.(Aggregate); ok && err != nil { + switch len(agg.Errors()) { + case 1: + return agg.Errors()[0] + case 0: + return nil + } + } + return err +} + +// AggregateGoroutines runs the provided functions in parallel, stuffing all +// non-nil errors into the returned Aggregate. +// Returns nil if all the functions complete successfully. +func AggregateGoroutines(funcs ...func() error) Aggregate { + errChan := make(chan error, len(funcs)) + for _, f := range funcs { + go func(f func() error) { errChan <- f() }(f) + } + errs := make([]error, 0) + for i := 0; i < cap(errChan); i++ { + if err := <-errChan; err != nil { + errs = append(errs, err) + } + } + return NewAggregate(errs) +} + +// ErrPreconditionViolated is returned when the precondition is violated +var ErrPreconditionViolated = errors.New("precondition is violated") diff --git a/go/internal/forked/kyaml/yaml/internal/k8sgen/pkg/util/sets/empty.go b/go/internal/forked/kyaml/yaml/internal/k8sgen/pkg/util/sets/empty.go new file mode 100644 index 000000000..ef404add1 --- /dev/null +++ b/go/internal/forked/kyaml/yaml/internal/k8sgen/pkg/util/sets/empty.go @@ -0,0 +1,24 @@ +// Code generated by k8scopy from k8s.io/apimachinery@v0.19.8; DO NOT EDIT. +// File content copied from k8s.io/apimachinery@v0.19.8/pkg/util/sets/empty.go + +/* +Copyright The Kubernetes Authors. + +Licensed under the Apache License, Version 2.0 (the "License"); +you may not use this file except in compliance with the License. +You may obtain a copy of the License at + + http://www.apache.org/licenses/LICENSE-2.0 + +Unless required by applicable law or agreed to in writing, software +distributed under the License is distributed on an "AS IS" BASIS, +WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. +See the License for the specific language governing permissions and +limitations under the License. +*/ + +package sets + +// Empty is public since it is used by some internal API objects for conversions between external +// string arrays and internal sets, and conversion logic requires public types today. +type Empty struct{} diff --git a/go/internal/forked/kyaml/yaml/internal/k8sgen/pkg/util/sets/string.go b/go/internal/forked/kyaml/yaml/internal/k8sgen/pkg/util/sets/string.go new file mode 100644 index 000000000..8af1bac2a --- /dev/null +++ b/go/internal/forked/kyaml/yaml/internal/k8sgen/pkg/util/sets/string.go @@ -0,0 +1,206 @@ +// Code generated by k8scopy from k8s.io/apimachinery@v0.19.8; DO NOT EDIT. +// File content copied from k8s.io/apimachinery@v0.19.8/pkg/util/sets/string.go + +/* +Copyright The Kubernetes Authors. + +Licensed under the Apache License, Version 2.0 (the "License"); +you may not use this file except in compliance with the License. +You may obtain a copy of the License at + + http://www.apache.org/licenses/LICENSE-2.0 + +Unless required by applicable law or agreed to in writing, software +distributed under the License is distributed on an "AS IS" BASIS, +WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. +See the License for the specific language governing permissions and +limitations under the License. +*/ + +package sets + +import ( + "reflect" + "sort" +) + +// sets.String is a set of strings, implemented via map[string]struct{} for minimal memory consumption. +type String map[string]Empty + +// NewString creates a String from a list of values. +func NewString(items ...string) String { + ss := String{} + ss.Insert(items...) + return ss +} + +// StringKeySet creates a String from a keys of a map[string](? extends interface{}). +// If the value passed in is not actually a map, this will panic. +func StringKeySet(theMap interface{}) String { + v := reflect.ValueOf(theMap) + ret := String{} + + for _, keyValue := range v.MapKeys() { + ret.Insert(keyValue.Interface().(string)) + } + return ret +} + +// Insert adds items to the set. +func (s String) Insert(items ...string) String { + for _, item := range items { + s[item] = Empty{} + } + return s +} + +// Delete removes all items from the set. +func (s String) Delete(items ...string) String { + for _, item := range items { + delete(s, item) + } + return s +} + +// Has returns true if and only if item is contained in the set. +func (s String) Has(item string) bool { + _, contained := s[item] + return contained +} + +// HasAll returns true if and only if all items are contained in the set. +func (s String) HasAll(items ...string) bool { + for _, item := range items { + if !s.Has(item) { + return false + } + } + return true +} + +// HasAny returns true if any items are contained in the set. +func (s String) HasAny(items ...string) bool { + for _, item := range items { + if s.Has(item) { + return true + } + } + return false +} + +// Difference returns a set of objects that are not in s2 +// For example: +// s1 = {a1, a2, a3} +// s2 = {a1, a2, a4, a5} +// s1.Difference(s2) = {a3} +// s2.Difference(s1) = {a4, a5} +func (s String) Difference(s2 String) String { + result := NewString() + for key := range s { + if !s2.Has(key) { + result.Insert(key) + } + } + return result +} + +// Union returns a new set which includes items in either s1 or s2. +// For example: +// s1 = {a1, a2} +// s2 = {a3, a4} +// s1.Union(s2) = {a1, a2, a3, a4} +// s2.Union(s1) = {a1, a2, a3, a4} +func (s1 String) Union(s2 String) String { + result := NewString() + for key := range s1 { + result.Insert(key) + } + for key := range s2 { + result.Insert(key) + } + return result +} + +// Intersection returns a new set which includes the item in BOTH s1 and s2 +// For example: +// s1 = {a1, a2} +// s2 = {a2, a3} +// s1.Intersection(s2) = {a2} +func (s1 String) Intersection(s2 String) String { + var walk, other String + result := NewString() + if s1.Len() < s2.Len() { + walk = s1 + other = s2 + } else { + walk = s2 + other = s1 + } + for key := range walk { + if other.Has(key) { + result.Insert(key) + } + } + return result +} + +// IsSuperset returns true if and only if s1 is a superset of s2. +func (s1 String) IsSuperset(s2 String) bool { + for item := range s2 { + if !s1.Has(item) { + return false + } + } + return true +} + +// Equal returns true if and only if s1 is equal (as a set) to s2. +// Two sets are equal if their membership is identical. +// (In practice, this means same elements, order doesn't matter) +func (s1 String) Equal(s2 String) bool { + return len(s1) == len(s2) && s1.IsSuperset(s2) +} + +type sortableSliceOfString []string + +func (s sortableSliceOfString) Len() int { return len(s) } +func (s sortableSliceOfString) Less(i, j int) bool { return lessString(s[i], s[j]) } +func (s sortableSliceOfString) Swap(i, j int) { s[i], s[j] = s[j], s[i] } + +// List returns the contents as a sorted string slice. +func (s String) List() []string { + res := make(sortableSliceOfString, 0, len(s)) + for key := range s { + res = append(res, key) + } + sort.Sort(res) + return []string(res) +} + +// UnsortedList returns the slice with contents in random order. +func (s String) UnsortedList() []string { + res := make([]string, 0, len(s)) + for key := range s { + res = append(res, key) + } + return res +} + +// Returns a single element from the set. +func (s String) PopAny() (string, bool) { + for key := range s { + s.Delete(key) + return key, true + } + var zeroValue string + return zeroValue, false +} + +// Len returns the size of the set. +func (s String) Len() int { + return len(s) +} + +func lessString(lhs, rhs string) bool { + return lhs < rhs +} diff --git a/go/internal/forked/kyaml/yaml/internal/k8sgen/pkg/util/validation/field/errors.go b/go/internal/forked/kyaml/yaml/internal/k8sgen/pkg/util/validation/field/errors.go new file mode 100644 index 000000000..a9111bc44 --- /dev/null +++ b/go/internal/forked/kyaml/yaml/internal/k8sgen/pkg/util/validation/field/errors.go @@ -0,0 +1,275 @@ +// Code generated by k8scopy from k8s.io/apimachinery@v0.19.8; DO NOT EDIT. +// File content copied from k8s.io/apimachinery@v0.19.8/pkg/util/validation/field/errors.go + +/* +Copyright 2014 The Kubernetes Authors. + +Licensed under the Apache License, Version 2.0 (the "License"); +you may not use this file except in compliance with the License. +You may obtain a copy of the License at + + http://www.apache.org/licenses/LICENSE-2.0 + +Unless required by applicable law or agreed to in writing, software +distributed under the License is distributed on an "AS IS" BASIS, +WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. +See the License for the specific language governing permissions and +limitations under the License. +*/ + +package field + +import ( + "fmt" + "reflect" + "strconv" + "strings" + + utilerrors "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml/internal/k8sgen/pkg/util/errors" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml/internal/k8sgen/pkg/util/sets" +) + +// Error is an implementation of the 'error' interface, which represents a +// field-level validation error. +type Error struct { + Type ErrorType + Field string + BadValue interface{} + Detail string +} + +var _ error = &Error{} + +// Error implements the error interface. +func (v *Error) Error() string { + return fmt.Sprintf("%s: %s", v.Field, v.ErrorBody()) +} + +// ErrorBody returns the error message without the field name. This is useful +// for building nice-looking higher-level error reporting. +func (v *Error) ErrorBody() string { + var s string + switch v.Type { + case ErrorTypeRequired, ErrorTypeForbidden, ErrorTypeTooLong, ErrorTypeInternal: + s = v.Type.String() + default: + value := v.BadValue + valueType := reflect.TypeOf(value) + if value == nil || valueType == nil { + value = "null" + } else if valueType.Kind() == reflect.Ptr { + if reflectValue := reflect.ValueOf(value); reflectValue.IsNil() { + value = "null" + } else { + value = reflectValue.Elem().Interface() + } + } + switch t := value.(type) { + case int64, int32, float64, float32, bool: + // use simple printer for simple types + s = fmt.Sprintf("%s: %v", v.Type, value) + case string: + s = fmt.Sprintf("%s: %q", v.Type, t) + case fmt.Stringer: + // anything that defines String() is better than raw struct + s = fmt.Sprintf("%s: %s", v.Type, t.String()) + default: + // fallback to raw struct + // TODO: internal types have panic guards against json.Marshalling to prevent + // accidental use of internal types in external serialized form. For now, use + // %#v, although it would be better to show a more expressive output in the future + s = fmt.Sprintf("%s: %#v", v.Type, value) + } + } + if len(v.Detail) != 0 { + s += fmt.Sprintf(": %s", v.Detail) + } + return s +} + +// ErrorType is a machine readable value providing more detail about why +// a field is invalid. These values are expected to match 1-1 with +// CauseType in api/types.go. +type ErrorType string + +// TODO: These values are duplicated in api/types.go, but there's a circular dep. Fix it. +const ( + // ErrorTypeNotFound is used to report failure to find a requested value + // (e.g. looking up an ID). See NotFound(). + ErrorTypeNotFound ErrorType = "FieldValueNotFound" + // ErrorTypeRequired is used to report required values that are not + // provided (e.g. empty strings, null values, or empty arrays). See + // Required(). + ErrorTypeRequired ErrorType = "FieldValueRequired" + // ErrorTypeDuplicate is used to report collisions of values that must be + // unique (e.g. unique IDs). See Duplicate(). + ErrorTypeDuplicate ErrorType = "FieldValueDuplicate" + // ErrorTypeInvalid is used to report malformed values (e.g. failed regex + // match, too long, out of bounds). See Invalid(). + ErrorTypeInvalid ErrorType = "FieldValueInvalid" + // ErrorTypeNotSupported is used to report unknown values for enumerated + // fields (e.g. a list of valid values). See NotSupported(). + ErrorTypeNotSupported ErrorType = "FieldValueNotSupported" + // ErrorTypeForbidden is used to report valid (as per formatting rules) + // values which would be accepted under some conditions, but which are not + // permitted by the current conditions (such as security policy). See + // Forbidden(). + ErrorTypeForbidden ErrorType = "FieldValueForbidden" + // ErrorTypeTooLong is used to report that the given value is too long. + // This is similar to ErrorTypeInvalid, but the error will not include the + // too-long value. See TooLong(). + ErrorTypeTooLong ErrorType = "FieldValueTooLong" + // ErrorTypeTooMany is used to report "too many". This is used to + // report that a given list has too many items. This is similar to FieldValueTooLong, + // but the error indicates quantity instead of length. + ErrorTypeTooMany ErrorType = "FieldValueTooMany" + // ErrorTypeInternal is used to report other errors that are not related + // to user input. See InternalError(). + ErrorTypeInternal ErrorType = "InternalError" +) + +// String converts a ErrorType into its corresponding canonical error message. +func (t ErrorType) String() string { + switch t { + case ErrorTypeNotFound: + return "Not found" + case ErrorTypeRequired: + return "Required value" + case ErrorTypeDuplicate: + return "Duplicate value" + case ErrorTypeInvalid: + return "Invalid value" + case ErrorTypeNotSupported: + return "Unsupported value" + case ErrorTypeForbidden: + return "Forbidden" + case ErrorTypeTooLong: + return "Too long" + case ErrorTypeTooMany: + return "Too many" + case ErrorTypeInternal: + return "Internal error" + default: + panic(fmt.Sprintf("unrecognized validation error: %q", string(t))) + } +} + +// NotFound returns a *Error indicating "value not found". This is +// used to report failure to find a requested value (e.g. looking up an ID). +func NotFound(field *Path, value interface{}) *Error { + return &Error{ErrorTypeNotFound, field.String(), value, ""} +} + +// Required returns a *Error indicating "value required". This is used +// to report required values that are not provided (e.g. empty strings, null +// values, or empty arrays). +func Required(field *Path, detail string) *Error { + return &Error{ErrorTypeRequired, field.String(), "", detail} +} + +// Duplicate returns a *Error indicating "duplicate value". This is +// used to report collisions of values that must be unique (e.g. names or IDs). +func Duplicate(field *Path, value interface{}) *Error { + return &Error{ErrorTypeDuplicate, field.String(), value, ""} +} + +// Invalid returns a *Error indicating "invalid value". This is used +// to report malformed values (e.g. failed regex match, too long, out of bounds). +func Invalid(field *Path, value interface{}, detail string) *Error { + return &Error{ErrorTypeInvalid, field.String(), value, detail} +} + +// NotSupported returns a *Error indicating "unsupported value". +// This is used to report unknown values for enumerated fields (e.g. a list of +// valid values). +func NotSupported(field *Path, value interface{}, validValues []string) *Error { + detail := "" + if validValues != nil && len(validValues) > 0 { + quotedValues := make([]string, len(validValues)) + for i, v := range validValues { + quotedValues[i] = strconv.Quote(v) + } + detail = "supported values: " + strings.Join(quotedValues, ", ") + } + return &Error{ErrorTypeNotSupported, field.String(), value, detail} +} + +// Forbidden returns a *Error indicating "forbidden". This is used to +// report valid (as per formatting rules) values which would be accepted under +// some conditions, but which are not permitted by current conditions (e.g. +// security policy). +func Forbidden(field *Path, detail string) *Error { + return &Error{ErrorTypeForbidden, field.String(), "", detail} +} + +// TooLong returns a *Error indicating "too long". This is used to +// report that the given value is too long. This is similar to +// Invalid, but the returned error will not include the too-long +// value. +func TooLong(field *Path, value interface{}, maxLength int) *Error { + return &Error{ErrorTypeTooLong, field.String(), value, fmt.Sprintf("must have at most %d bytes", maxLength)} +} + +// TooMany returns a *Error indicating "too many". This is used to +// report that a given list has too many items. This is similar to TooLong, +// but the returned error indicates quantity instead of length. +func TooMany(field *Path, actualQuantity, maxQuantity int) *Error { + return &Error{ErrorTypeTooMany, field.String(), actualQuantity, fmt.Sprintf("must have at most %d items", maxQuantity)} +} + +// InternalError returns a *Error indicating "internal error". This is used +// to signal that an error was found that was not directly related to user +// input. The err argument must be non-nil. +func InternalError(field *Path, err error) *Error { + return &Error{ErrorTypeInternal, field.String(), nil, err.Error()} +} + +// ErrorList holds a set of Errors. It is plausible that we might one day have +// non-field errors in this same umbrella package, but for now we don't, so +// we can keep it simple and leave ErrorList here. +type ErrorList []*Error + +// NewErrorTypeMatcher returns an errors.Matcher that returns true +// if the provided error is a Error and has the provided ErrorType. +func NewErrorTypeMatcher(t ErrorType) utilerrors.Matcher { + return func(err error) bool { + if e, ok := err.(*Error); ok { + return e.Type == t + } + return false + } +} + +// ToAggregate converts the ErrorList into an errors.Aggregate. +func (list ErrorList) ToAggregate() utilerrors.Aggregate { + errs := make([]error, 0, len(list)) + errorMsgs := sets.NewString() + for _, err := range list { + msg := fmt.Sprintf("%v", err) + if errorMsgs.Has(msg) { + continue + } + errorMsgs.Insert(msg) + errs = append(errs, err) + } + return utilerrors.NewAggregate(errs) +} + +func fromAggregate(agg utilerrors.Aggregate) ErrorList { + errs := agg.Errors() + list := make(ErrorList, len(errs)) + for i := range errs { + list[i] = errs[i].(*Error) + } + return list +} + +// Filter removes items from the ErrorList that match the provided fns. +func (list ErrorList) Filter(fns ...utilerrors.Matcher) ErrorList { + err := utilerrors.FilterOut(list.ToAggregate(), fns...) + if err == nil { + return nil + } + // FilterOut takes an Aggregate and returns an Aggregate + return fromAggregate(err.(utilerrors.Aggregate)) +} diff --git a/go/internal/forked/kyaml/yaml/internal/k8sgen/pkg/util/validation/field/path.go b/go/internal/forked/kyaml/yaml/internal/k8sgen/pkg/util/validation/field/path.go new file mode 100644 index 000000000..44cdf997a --- /dev/null +++ b/go/internal/forked/kyaml/yaml/internal/k8sgen/pkg/util/validation/field/path.go @@ -0,0 +1,94 @@ +// Code generated by k8scopy from k8s.io/apimachinery@v0.19.8; DO NOT EDIT. +// File content copied from k8s.io/apimachinery@v0.19.8/pkg/util/validation/field/path.go + +/* +Copyright 2015 The Kubernetes Authors. + +Licensed under the Apache License, Version 2.0 (the "License"); +you may not use this file except in compliance with the License. +You may obtain a copy of the License at + + http://www.apache.org/licenses/LICENSE-2.0 + +Unless required by applicable law or agreed to in writing, software +distributed under the License is distributed on an "AS IS" BASIS, +WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. +See the License for the specific language governing permissions and +limitations under the License. +*/ + +package field + +import ( + "bytes" + "fmt" + "strconv" +) + +// Path represents the path from some root to a particular field. +type Path struct { + name string // the name of this field or "" if this is an index + index string // if name == "", this is a subscript (index or map key) of the previous element + parent *Path // nil if this is the root element +} + +// NewPath creates a root Path object. +func NewPath(name string, moreNames ...string) *Path { + r := &Path{name: name, parent: nil} + for _, anotherName := range moreNames { + r = &Path{name: anotherName, parent: r} + } + return r +} + +// Root returns the root element of this Path. +func (p *Path) Root() *Path { + for ; p.parent != nil; p = p.parent { + // Do nothing. + } + return p +} + +// Child creates a new Path that is a child of the method receiver. +func (p *Path) Child(name string, moreNames ...string) *Path { + r := NewPath(name, moreNames...) + r.Root().parent = p + return r +} + +// Index indicates that the previous Path is to be subscripted by an int. +// This sets the same underlying value as Key. +func (p *Path) Index(index int) *Path { + return &Path{index: strconv.Itoa(index), parent: p} +} + +// Key indicates that the previous Path is to be subscripted by a string. +// This sets the same underlying value as Index. +func (p *Path) Key(key string) *Path { + return &Path{index: key, parent: p} +} + +// String produces a string representation of the Path. +func (p *Path) String() string { + // make a slice to iterate + elems := []*Path{} + for ; p != nil; p = p.parent { + elems = append(elems, p) + } + + // iterate, but it has to be backwards + buf := bytes.NewBuffer(nil) + for i := range elems { + p := elems[len(elems)-1-i] + if p.parent != nil && len(p.name) > 0 { + // This is either the root or it is a subscript. + buf.WriteString(".") + } + if len(p.name) > 0 { + buf.WriteString(p.name) + } else { + fmt.Fprintf(buf, "[%s]", p.index) + } + } + return buf.String() +} diff --git a/go/internal/forked/kyaml/yaml/internal/k8sgen/pkg/util/validation/validation.go b/go/internal/forked/kyaml/yaml/internal/k8sgen/pkg/util/validation/validation.go new file mode 100644 index 000000000..4ccf25c16 --- /dev/null +++ b/go/internal/forked/kyaml/yaml/internal/k8sgen/pkg/util/validation/validation.go @@ -0,0 +1,506 @@ +// Code generated by k8scopy from k8s.io/apimachinery@v0.19.8; DO NOT EDIT. +// File content copied from k8s.io/apimachinery@v0.19.8/pkg/util/validation/validation.go + +/* +Copyright 2014 The Kubernetes Authors. + +Licensed under the Apache License, Version 2.0 (the "License"); +you may not use this file except in compliance with the License. +You may obtain a copy of the License at + + http://www.apache.org/licenses/LICENSE-2.0 + +Unless required by applicable law or agreed to in writing, software +distributed under the License is distributed on an "AS IS" BASIS, +WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. +See the License for the specific language governing permissions and +limitations under the License. +*/ + +package validation + +import ( + "fmt" + "math" + "net" + "regexp" + "strconv" + "strings" + + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml/internal/k8sgen/pkg/util/validation/field" +) + +const qnameCharFmt string = "[A-Za-z0-9]" +const qnameExtCharFmt string = "[-A-Za-z0-9_.]" +const qualifiedNameFmt string = "(" + qnameCharFmt + qnameExtCharFmt + "*)?" + qnameCharFmt +const qualifiedNameErrMsg string = "must consist of alphanumeric characters, '-', '_' or '.', and must start and end with an alphanumeric character" +const qualifiedNameMaxLength int = 63 + +var qualifiedNameRegexp = regexp.MustCompile("^" + qualifiedNameFmt + "$") + +// IsQualifiedName tests whether the value passed is what Kubernetes calls a +// "qualified name". This is a format used in various places throughout the +// system. If the value is not valid, a list of error strings is returned. +// Otherwise an empty list (or nil) is returned. +func IsQualifiedName(value string) []string { + var errs []string + parts := strings.Split(value, "/") + var name string + switch len(parts) { + case 1: + name = parts[0] + case 2: + var prefix string + prefix, name = parts[0], parts[1] + if len(prefix) == 0 { + errs = append(errs, "prefix part "+EmptyError()) + } else if msgs := IsDNS1123Subdomain(prefix); len(msgs) != 0 { + errs = append(errs, prefixEach(msgs, "prefix part ")...) + } + default: + return append(errs, "a qualified name "+RegexError(qualifiedNameErrMsg, qualifiedNameFmt, "MyName", "my.name", "123-abc")+ + " with an optional DNS subdomain prefix and '/' (e.g. 'example.com/MyName')") + } + + if len(name) == 0 { + errs = append(errs, "name part "+EmptyError()) + } else if len(name) > qualifiedNameMaxLength { + errs = append(errs, "name part "+MaxLenError(qualifiedNameMaxLength)) + } + if !qualifiedNameRegexp.MatchString(name) { + errs = append(errs, "name part "+RegexError(qualifiedNameErrMsg, qualifiedNameFmt, "MyName", "my.name", "123-abc")) + } + return errs +} + +// IsFullyQualifiedName checks if the name is fully qualified. This is similar +// to IsFullyQualifiedDomainName but requires a minimum of 3 segments instead of +// 2 and does not accept a trailing . as valid. +// TODO: This function is deprecated and preserved until all callers migrate to +// IsFullyQualifiedDomainName; please don't add new callers. +func IsFullyQualifiedName(fldPath *field.Path, name string) field.ErrorList { + var allErrors field.ErrorList + if len(name) == 0 { + return append(allErrors, field.Required(fldPath, "")) + } + if errs := IsDNS1123Subdomain(name); len(errs) > 0 { + return append(allErrors, field.Invalid(fldPath, name, strings.Join(errs, ","))) + } + if len(strings.Split(name, ".")) < 3 { + return append(allErrors, field.Invalid(fldPath, name, "should be a domain with at least three segments separated by dots")) + } + return allErrors +} + +// IsFullyQualifiedDomainName checks if the domain name is fully qualified. This +// is similar to IsFullyQualifiedName but only requires a minimum of 2 segments +// instead of 3 and accepts a trailing . as valid. +func IsFullyQualifiedDomainName(fldPath *field.Path, name string) field.ErrorList { + var allErrors field.ErrorList + if len(name) == 0 { + return append(allErrors, field.Required(fldPath, "")) + } + if strings.HasSuffix(name, ".") { + name = name[:len(name)-1] + } + if errs := IsDNS1123Subdomain(name); len(errs) > 0 { + return append(allErrors, field.Invalid(fldPath, name, strings.Join(errs, ","))) + } + if len(strings.Split(name, ".")) < 2 { + return append(allErrors, field.Invalid(fldPath, name, "should be a domain with at least two segments separated by dots")) + } + for _, label := range strings.Split(name, ".") { + if errs := IsDNS1123Label(label); len(errs) > 0 { + return append(allErrors, field.Invalid(fldPath, label, strings.Join(errs, ","))) + } + } + return allErrors +} + +// Allowed characters in an HTTP Path as defined by RFC 3986. A HTTP path may +// contain: +// * unreserved characters (alphanumeric, '-', '.', '_', '~') +// * percent-encoded octets +// * sub-delims ("!", "$", "&", "'", "(", ")", "*", "+", ",", ";", "=") +// * a colon character (":") +const httpPathFmt string = `[A-Za-z0-9/\-._~%!$&'()*+,;=:]+` + +var httpPathRegexp = regexp.MustCompile("^" + httpPathFmt + "$") + +// IsDomainPrefixedPath checks if the given string is a domain-prefixed path +// (e.g. acme.io/foo). All characters before the first "/" must be a valid +// subdomain as defined by RFC 1123. All characters trailing the first "/" must +// be valid HTTP Path characters as defined by RFC 3986. +func IsDomainPrefixedPath(fldPath *field.Path, dpPath string) field.ErrorList { + var allErrs field.ErrorList + if len(dpPath) == 0 { + return append(allErrs, field.Required(fldPath, "")) + } + + segments := strings.SplitN(dpPath, "/", 2) + if len(segments) != 2 || len(segments[0]) == 0 || len(segments[1]) == 0 { + return append(allErrs, field.Invalid(fldPath, dpPath, "must be a domain-prefixed path (such as \"acme.io/foo\")")) + } + + host := segments[0] + for _, err := range IsDNS1123Subdomain(host) { + allErrs = append(allErrs, field.Invalid(fldPath, host, err)) + } + + path := segments[1] + if !httpPathRegexp.MatchString(path) { + return append(allErrs, field.Invalid(fldPath, path, RegexError("Invalid path", httpPathFmt))) + } + + return allErrs +} + +const labelValueFmt string = "(" + qualifiedNameFmt + ")?" +const labelValueErrMsg string = "a valid label must be an empty string or consist of alphanumeric characters, '-', '_' or '.', and must start and end with an alphanumeric character" + +// LabelValueMaxLength is a label's max length +const LabelValueMaxLength int = 63 + +var labelValueRegexp = regexp.MustCompile("^" + labelValueFmt + "$") + +// IsValidLabelValue tests whether the value passed is a valid label value. If +// the value is not valid, a list of error strings is returned. Otherwise an +// empty list (or nil) is returned. +func IsValidLabelValue(value string) []string { + var errs []string + if len(value) > LabelValueMaxLength { + errs = append(errs, MaxLenError(LabelValueMaxLength)) + } + if !labelValueRegexp.MatchString(value) { + errs = append(errs, RegexError(labelValueErrMsg, labelValueFmt, "MyValue", "my_value", "12345")) + } + return errs +} + +const dns1123LabelFmt string = "[a-z0-9]([-a-z0-9]*[a-z0-9])?" +const dns1123LabelErrMsg string = "a DNS-1123 label must consist of lower case alphanumeric characters or '-', and must start and end with an alphanumeric character" + +// DNS1123LabelMaxLength is a label's max length in DNS (RFC 1123) +const DNS1123LabelMaxLength int = 63 + +var dns1123LabelRegexp = regexp.MustCompile("^" + dns1123LabelFmt + "$") + +// IsDNS1123Label tests for a string that conforms to the definition of a label in +// DNS (RFC 1123). +func IsDNS1123Label(value string) []string { + var errs []string + if len(value) > DNS1123LabelMaxLength { + errs = append(errs, MaxLenError(DNS1123LabelMaxLength)) + } + if !dns1123LabelRegexp.MatchString(value) { + errs = append(errs, RegexError(dns1123LabelErrMsg, dns1123LabelFmt, "my-name", "123-abc")) + } + return errs +} + +const dns1123SubdomainFmt string = dns1123LabelFmt + "(\\." + dns1123LabelFmt + ")*" +const dns1123SubdomainErrorMsg string = "a DNS-1123 subdomain must consist of lower case alphanumeric characters, '-' or '.', and must start and end with an alphanumeric character" + +// DNS1123SubdomainMaxLength is a subdomain's max length in DNS (RFC 1123) +const DNS1123SubdomainMaxLength int = 253 + +var dns1123SubdomainRegexp = regexp.MustCompile("^" + dns1123SubdomainFmt + "$") + +// IsDNS1123Subdomain tests for a string that conforms to the definition of a +// subdomain in DNS (RFC 1123). +func IsDNS1123Subdomain(value string) []string { + var errs []string + if len(value) > DNS1123SubdomainMaxLength { + errs = append(errs, MaxLenError(DNS1123SubdomainMaxLength)) + } + if !dns1123SubdomainRegexp.MatchString(value) { + errs = append(errs, RegexError(dns1123SubdomainErrorMsg, dns1123SubdomainFmt, "example.com")) + } + return errs +} + +const dns1035LabelFmt string = "[a-z]([-a-z0-9]*[a-z0-9])?" +const dns1035LabelErrMsg string = "a DNS-1035 label must consist of lower case alphanumeric characters or '-', start with an alphabetic character, and end with an alphanumeric character" + +// DNS1035LabelMaxLength is a label's max length in DNS (RFC 1035) +const DNS1035LabelMaxLength int = 63 + +var dns1035LabelRegexp = regexp.MustCompile("^" + dns1035LabelFmt + "$") + +// IsDNS1035Label tests for a string that conforms to the definition of a label in +// DNS (RFC 1035). +func IsDNS1035Label(value string) []string { + var errs []string + if len(value) > DNS1035LabelMaxLength { + errs = append(errs, MaxLenError(DNS1035LabelMaxLength)) + } + if !dns1035LabelRegexp.MatchString(value) { + errs = append(errs, RegexError(dns1035LabelErrMsg, dns1035LabelFmt, "my-name", "abc-123")) + } + return errs +} + +// wildcard definition - RFC 1034 section 4.3.3. +// examples: +// - valid: *.bar.com, *.foo.bar.com +// - invalid: *.*.bar.com, *.foo.*.com, *bar.com, f*.bar.com, * +const wildcardDNS1123SubdomainFmt = "\\*\\." + dns1123SubdomainFmt +const wildcardDNS1123SubdomainErrMsg = "a wildcard DNS-1123 subdomain must start with '*.', followed by a valid DNS subdomain, which must consist of lower case alphanumeric characters, '-' or '.' and end with an alphanumeric character" + +// IsWildcardDNS1123Subdomain tests for a string that conforms to the definition of a +// wildcard subdomain in DNS (RFC 1034 section 4.3.3). +func IsWildcardDNS1123Subdomain(value string) []string { + wildcardDNS1123SubdomainRegexp := regexp.MustCompile("^" + wildcardDNS1123SubdomainFmt + "$") + + var errs []string + if len(value) > DNS1123SubdomainMaxLength { + errs = append(errs, MaxLenError(DNS1123SubdomainMaxLength)) + } + if !wildcardDNS1123SubdomainRegexp.MatchString(value) { + errs = append(errs, RegexError(wildcardDNS1123SubdomainErrMsg, wildcardDNS1123SubdomainFmt, "*.example.com")) + } + return errs +} + +const cIdentifierFmt string = "[A-Za-z_][A-Za-z0-9_]*" +const identifierErrMsg string = "a valid C identifier must start with alphabetic character or '_', followed by a string of alphanumeric characters or '_'" + +var cIdentifierRegexp = regexp.MustCompile("^" + cIdentifierFmt + "$") + +// IsCIdentifier tests for a string that conforms the definition of an identifier +// in C. This checks the format, but not the length. +func IsCIdentifier(value string) []string { + if !cIdentifierRegexp.MatchString(value) { + return []string{RegexError(identifierErrMsg, cIdentifierFmt, "my_name", "MY_NAME", "MyName")} + } + return nil +} + +// IsValidPortNum tests that the argument is a valid, non-zero port number. +func IsValidPortNum(port int) []string { + if 1 <= port && port <= 65535 { + return nil + } + return []string{InclusiveRangeError(1, 65535)} +} + +// IsInRange tests that the argument is in an inclusive range. +func IsInRange(value int, min int, max int) []string { + if value >= min && value <= max { + return nil + } + return []string{InclusiveRangeError(min, max)} +} + +// Now in libcontainer UID/GID limits is 0 ~ 1<<31 - 1 +// TODO: once we have a type for UID/GID we should make these that type. +const ( + minUserID = 0 + maxUserID = math.MaxInt32 + minGroupID = 0 + maxGroupID = math.MaxInt32 +) + +// IsValidGroupID tests that the argument is a valid Unix GID. +func IsValidGroupID(gid int64) []string { + if minGroupID <= gid && gid <= maxGroupID { + return nil + } + return []string{InclusiveRangeError(minGroupID, maxGroupID)} +} + +// IsValidUserID tests that the argument is a valid Unix UID. +func IsValidUserID(uid int64) []string { + if minUserID <= uid && uid <= maxUserID { + return nil + } + return []string{InclusiveRangeError(minUserID, maxUserID)} +} + +var portNameCharsetRegex = regexp.MustCompile("^[-a-z0-9]+$") +var portNameOneLetterRegexp = regexp.MustCompile("[a-z]") + +// IsValidPortName check that the argument is valid syntax. It must be +// non-empty and no more than 15 characters long. It may contain only [-a-z0-9] +// and must contain at least one letter [a-z]. It must not start or end with a +// hyphen, nor contain adjacent hyphens. +// +// Note: We only allow lower-case characters, even though RFC 6335 is case +// insensitive. +func IsValidPortName(port string) []string { + var errs []string + if len(port) > 15 { + errs = append(errs, MaxLenError(15)) + } + if !portNameCharsetRegex.MatchString(port) { + errs = append(errs, "must contain only alpha-numeric characters (a-z, 0-9), and hyphens (-)") + } + if !portNameOneLetterRegexp.MatchString(port) { + errs = append(errs, "must contain at least one letter or number (a-z, 0-9)") + } + if strings.Contains(port, "--") { + errs = append(errs, "must not contain consecutive hyphens") + } + if len(port) > 0 && (port[0] == '-' || port[len(port)-1] == '-') { + errs = append(errs, "must not begin or end with a hyphen") + } + return errs +} + +// IsValidIP tests that the argument is a valid IP address. +func IsValidIP(value string) []string { + if net.ParseIP(value) == nil { + return []string{"must be a valid IP address, (e.g. 10.9.8.7)"} + } + return nil +} + +// IsValidIPv4Address tests that the argument is a valid IPv4 address. +func IsValidIPv4Address(fldPath *field.Path, value string) field.ErrorList { + var allErrors field.ErrorList + ip := net.ParseIP(value) + if ip == nil || ip.To4() == nil { + allErrors = append(allErrors, field.Invalid(fldPath, value, "must be a valid IPv4 address")) + } + return allErrors +} + +// IsValidIPv6Address tests that the argument is a valid IPv6 address. +func IsValidIPv6Address(fldPath *field.Path, value string) field.ErrorList { + var allErrors field.ErrorList + ip := net.ParseIP(value) + if ip == nil || ip.To4() != nil { + allErrors = append(allErrors, field.Invalid(fldPath, value, "must be a valid IPv6 address")) + } + return allErrors +} + +const percentFmt string = "[0-9]+%" +const percentErrMsg string = "a valid percent string must be a numeric string followed by an ending '%'" + +var percentRegexp = regexp.MustCompile("^" + percentFmt + "$") + +// IsValidPercent checks that string is in the form of a percentage +func IsValidPercent(percent string) []string { + if !percentRegexp.MatchString(percent) { + return []string{RegexError(percentErrMsg, percentFmt, "1%", "93%")} + } + return nil +} + +const httpHeaderNameFmt string = "[-A-Za-z0-9]+" +const httpHeaderNameErrMsg string = "a valid HTTP header must consist of alphanumeric characters or '-'" + +var httpHeaderNameRegexp = regexp.MustCompile("^" + httpHeaderNameFmt + "$") + +// IsHTTPHeaderName checks that a string conforms to the Go HTTP library's +// definition of a valid header field name (a stricter subset than RFC7230). +func IsHTTPHeaderName(value string) []string { + if !httpHeaderNameRegexp.MatchString(value) { + return []string{RegexError(httpHeaderNameErrMsg, httpHeaderNameFmt, "X-Header-Name")} + } + return nil +} + +const envVarNameFmt = "[-._a-zA-Z][-._a-zA-Z0-9]*" +const envVarNameFmtErrMsg string = "a valid environment variable name must consist of alphabetic characters, digits, '_', '-', or '.', and must not start with a digit" + +var envVarNameRegexp = regexp.MustCompile("^" + envVarNameFmt + "$") + +// IsEnvVarName tests if a string is a valid environment variable name. +func IsEnvVarName(value string) []string { + var errs []string + if !envVarNameRegexp.MatchString(value) { + errs = append(errs, RegexError(envVarNameFmtErrMsg, envVarNameFmt, "my.env-name", "MY_ENV.NAME", "MyEnvName1")) + } + + errs = append(errs, hasChDirPrefix(value)...) + return errs +} + +const configMapKeyFmt = `[-._a-zA-Z0-9]+` +const configMapKeyErrMsg string = "a valid config key must consist of alphanumeric characters, '-', '_' or '.'" + +var configMapKeyRegexp = regexp.MustCompile("^" + configMapKeyFmt + "$") + +// IsConfigMapKey tests for a string that is a valid key for a ConfigMap or Secret +func IsConfigMapKey(value string) []string { + var errs []string + if len(value) > DNS1123SubdomainMaxLength { + errs = append(errs, MaxLenError(DNS1123SubdomainMaxLength)) + } + if !configMapKeyRegexp.MatchString(value) { + errs = append(errs, RegexError(configMapKeyErrMsg, configMapKeyFmt, "key.name", "KEY_NAME", "key-name")) + } + errs = append(errs, hasChDirPrefix(value)...) + return errs +} + +// MaxLenError returns a string explanation of a "string too long" validation +// failure. +func MaxLenError(length int) string { + return fmt.Sprintf("must be no more than %d characters", length) +} + +// RegexError returns a string explanation of a regex validation failure. +func RegexError(msg string, fmt string, examples ...string) string { + if len(examples) == 0 { + return msg + " (regex used for validation is '" + fmt + "')" + } + msg += " (e.g. " + for i := range examples { + if i > 0 { + msg += " or " + } + msg += "'" + examples[i] + "', " + } + msg += "regex used for validation is '" + fmt + "')" + return msg +} + +// EmptyError returns a string explanation of a "must not be empty" validation +// failure. +func EmptyError() string { + return "must be non-empty" +} + +func prefixEach(msgs []string, prefix string) []string { + for i := range msgs { + msgs[i] = prefix + msgs[i] + } + return msgs +} + +// InclusiveRangeError returns a string explanation of a numeric "must be +// between" validation failure. +func InclusiveRangeError(lo, hi int) string { + return fmt.Sprintf(`must be between %d and %d, inclusive`, lo, hi) +} + +func hasChDirPrefix(value string) []string { + var errs []string + switch { + case value == ".": + errs = append(errs, `must not be '.'`) + case value == "..": + errs = append(errs, `must not be '..'`) + case strings.HasPrefix(value, ".."): + errs = append(errs, `must not start with '..'`) + } + return errs +} + +// IsValidSocketAddr checks that string represents a valid socket address +// as defined in RFC 789. (e.g 0.0.0.0:10254 or [::]:10254)) +func IsValidSocketAddr(value string) []string { + var errs []string + ip, port, err := net.SplitHostPort(value) + if err != nil { + errs = append(errs, "must be a valid socket address format, (e.g. 0.0.0.0:10254 or [::]:10254)") + return errs + } + portInt, _ := strconv.Atoi(port) + errs = append(errs, IsValidPortNum(portInt)...) + errs = append(errs, IsValidIP(ip)...) + return errs +} diff --git a/go/internal/forked/kyaml/yaml/kfns_test.go b/go/internal/forked/kyaml/yaml/kfns_test.go new file mode 100644 index 000000000..371a7aea3 --- /dev/null +++ b/go/internal/forked/kyaml/yaml/kfns_test.go @@ -0,0 +1,120 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package yaml + +import ( + "testing" + + "github.com/stretchr/testify/assert" +) + +func TestSetMeta(t *testing.T) { + rn := MustParse(`apiVersion: v1 +kind: ConfigMap +data: + altGreeting: "Good Morning!" +`) + _, err := rn.Pipe(SetK8sName("foo"), SetK8sNamespace("bar")) + if err != nil { + t.Fatalf("unexpected error %v", err) + } + output := rn.MustString() + + expected := `apiVersion: v1 +kind: ConfigMap +data: + altGreeting: "Good Morning!" +metadata: + name: foo + namespace: bar +` + if !assert.Equal(t, expected, output) { + t.FailNow() + } +} + +func TestSetLabel1(t *testing.T) { + rn := MustParse(`apiVersion: v1 +kind: ConfigMap +metadata: + name: the-map +data: + altGreeting: "Good Morning!" + enableRisky: "false" +`) + _, err := rn.Pipe(SetLabel("foo", "bar")) + if err != nil { + t.Fatalf("unexpected error %v", err) + } + output := rn.MustString() + + expected := `apiVersion: v1 +kind: ConfigMap +metadata: + name: the-map + labels: + foo: 'bar' +data: + altGreeting: "Good Morning!" + enableRisky: "false" +` + if output != expected { + t.Fatalf("expected \n%s\nbut got \n%s\n", expected, output) + } +} + +func TestSetLabel2(t *testing.T) { + rn := MustParse(`apiVersion: v1 +kind: ConfigMap +data: + altGreeting: "Good Morning!" +`) + _, err := rn.Pipe(SetLabel("foo", "bar")) + if err != nil { + t.Fatalf("unexpected error %v", err) + } + output := rn.MustString() + + expected := `apiVersion: v1 +kind: ConfigMap +data: + altGreeting: "Good Morning!" +metadata: + labels: + foo: 'bar' +` + if output != expected { + t.Fatalf("expected \n%s\nbut got \n%s\n", expected, output) + } +} + +func TestAnnotation(t *testing.T) { + rn := MustParse(`apiVersion: v1 +kind: ConfigMap +metadata: + name: the-map +data: + altGreeting: "Good Morning!" + enableRisky: "false" +`) + _, err := rn.Pipe(SetAnnotation("foo", "bar")) + if err != nil { + t.Fatalf("unexpected error %v", err) + } + output := rn.MustString() + + expected := `apiVersion: v1 +kind: ConfigMap +metadata: + name: the-map + annotations: + foo: 'bar' +data: + altGreeting: "Good Morning!" + enableRisky: "false" +` + if output != expected { + t.Fatalf("expected \n%s\nbut got \n%s\n", expected, output) + } +} diff --git a/go/internal/forked/kyaml/yaml/mapnode.go b/go/internal/forked/kyaml/yaml/mapnode.go new file mode 100644 index 000000000..31b41b40f --- /dev/null +++ b/go/internal/forked/kyaml/yaml/mapnode.go @@ -0,0 +1,40 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package yaml + +// MapNode wraps a field key and value. +type MapNode struct { + Key *RNode + Value *RNode +} + +// IsNilOrEmpty returns true if the MapNode is nil, +// has no value, or has a value that appears empty. +func (mn *MapNode) IsNilOrEmpty() bool { + return mn == nil || mn.Value.IsNilOrEmpty() +} + +type MapNodeSlice []*MapNode + +func (m MapNodeSlice) Keys() []*RNode { + var keys []*RNode + for i := range m { + if m[i] != nil { + keys = append(keys, m[i].Key) + } + } + return keys +} + +func (m MapNodeSlice) Values() []*RNode { + var values []*RNode + for i := range m { + if m[i] != nil { + values = append(values, m[i].Value) + } else { + values = append(values, nil) + } + } + return values +} diff --git a/go/internal/forked/kyaml/yaml/mapnode_test.go b/go/internal/forked/kyaml/yaml/mapnode_test.go new file mode 100644 index 000000000..9b76523c3 --- /dev/null +++ b/go/internal/forked/kyaml/yaml/mapnode_test.go @@ -0,0 +1,51 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package yaml + +import ( + "testing" +) + +func TestMapNodeIsNilOrEmpty(t *testing.T) { + var mn *MapNode + + if !mn.IsNilOrEmpty() { + t.Fatalf("nil should be empty") + } + + mn = &MapNode{Key: MakeNullNode()} + if !mn.IsNilOrEmpty() { + t.Fatalf("missing value should be empty") + } + + mn.Value = NewRNode(nil) + if !mn.IsNilOrEmpty() { + t.Fatalf("missing value YNode should be empty") + } + + mn.Value = MakeNullNode() + if !mn.IsNilOrEmpty() { + t.Fatalf("value tagged null should be empty") + } + + mn.Value = NewMapRNode(nil) + if !mn.IsNilOrEmpty() { + t.Fatalf("empty map should be empty") + } + + mn.Value = NewMapRNode(&map[string]string{"foo": "bar"}) + if mn.IsNilOrEmpty() { + t.Fatalf("non-empty map should not be empty") + } + + mn.Value = NewListRNode() + if !mn.IsNilOrEmpty() { + t.Fatalf("empty list should be empty") + } + + mn.Value = NewListRNode("foo") + if mn.IsNilOrEmpty() { + t.Fatalf("non-empty list should not be empty") + } +} diff --git a/go/internal/forked/kyaml/yaml/match.go b/go/internal/forked/kyaml/yaml/match.go new file mode 100644 index 000000000..149716063 --- /dev/null +++ b/go/internal/forked/kyaml/yaml/match.go @@ -0,0 +1,206 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package yaml + +import ( + "regexp" + "strings" +) + +// PathMatcher returns all RNodes matching the path wrapped in a SequenceNode. +// Lists may have multiple elements matching the path, and each matching element +// is added to the return result. +// If Path points to a SequenceNode, the SequenceNode is wrapped in another SequenceNode +// If Path does not contain any lists, the result is still wrapped in a SequenceNode of len == 1 +type PathMatcher struct { + Kind string `yaml:"kind,omitempty"` + + // Path is a slice of parts leading to the RNode to lookup. + // Each path part may be one of: + // * FieldMatcher -- e.g. "spec" + // * Map Key -- e.g. "app.k8s.io/version" + // * List Entry -- e.g. "[name=nginx]" or "[=-jar]" + // + // Map Keys and Fields are equivalent. + // See FieldMatcher for more on Fields and Map Keys. + // + // List Entries are specified as map entry to match [fieldName=fieldValue]. + // See Elem for more on List Entries. + // + // Examples: + // * spec.template.spec.container with matching name: [name=nginx] -- match 'name': 'nginx' + // * spec.template.spec.container.argument matching a value: [=-jar] -- match '-jar' + Path []string `yaml:"path,omitempty"` + + // Matches is set by PathMatch to publish the matched element values for each node. + // After running PathMatcher.Filter, each node from the SequenceNode result may be + // looked up in Matches to find the field values that were matched. + Matches map[*Node][]string + + // StripComments may be set to remove the comments on the matching Nodes. + // This is useful for if the nodes are to be printed in FlowStyle. + StripComments bool + + val *RNode + field string + matchRegex string +} + +func (p *PathMatcher) stripComments(n *Node) { + if n == nil { + return + } + if p.StripComments { + n.LineComment = "" + n.HeadComment = "" + n.FootComment = "" + for i := range n.Content { + p.stripComments(n.Content[i]) + } + } +} + +func (p *PathMatcher) Filter(rn *RNode) (*RNode, error) { + val, err := p.filter(rn) + if err != nil { + return nil, err + } + p.stripComments(val.YNode()) + return val, err +} + +func (p *PathMatcher) filter(rn *RNode) (*RNode, error) { + p.Matches = map[*Node][]string{} + + if len(p.Path) == 0 { + // return the element wrapped in a SequenceNode + p.appendRNode("", rn) + return p.val, nil + } + + if IsListIndex(p.Path[0]) { + // match seq elements + return p.doSeq(rn) + } + // match a field + return p.doField(rn) +} + +func (p *PathMatcher) doField(rn *RNode) (*RNode, error) { + // lookup the field + field, err := rn.Pipe(Get(p.Path[0])) + if err != nil || field == nil { + // if the field doesn't exist, return nil + return nil, err + } + + // recurse on the field, removing the first element of the path + pm := &PathMatcher{Path: p.Path[1:]} + p.val, err = pm.filter(field) + p.Matches = pm.Matches + return p.val, err +} + +// doSeq iterates over a sequence and appends elements matching the path regex to p.Val +func (p *PathMatcher) doSeq(rn *RNode) (*RNode, error) { + // parse the field + match pair + var err error + p.field, p.matchRegex, err = SplitIndexNameValue(p.Path[0]) + if err != nil { + return nil, err + } + + if p.field == "" { + err = rn.VisitElements(p.visitPrimitiveElem) + } else { + err = rn.VisitElements(p.visitElem) + } + if err != nil || p.val == nil || len(p.val.YNode().Content) == 0 { + return nil, err + } + + return p.val, nil +} + +func (p *PathMatcher) visitPrimitiveElem(elem *RNode) error { + r, err := regexp.Compile(p.matchRegex) + if err != nil { + return err + } + + str, err := elem.String() + if err != nil { + return err + } + str = strings.TrimSpace(str) + if !r.MatchString(str) { + return nil + } + + p.appendRNode("", elem) + return nil +} + +func (p *PathMatcher) visitElem(elem *RNode) error { + r, err := regexp.Compile(p.matchRegex) + if err != nil { + return err + } + + // check if this elements field matches the regex + val := elem.Field(p.field) + if val == nil || val.Value == nil { + return nil + } + str, err := val.Value.String() + if err != nil { + return err + } + str = strings.TrimSpace(str) + if !r.MatchString(str) { + return nil + } + + // recurse on the matching element + pm := &PathMatcher{Path: p.Path[1:]} + add, err := pm.filter(elem) + for k, v := range pm.Matches { + p.Matches[k] = v + } + if err != nil || add == nil { + return err + } + p.append(str, add.Content()...) + return nil +} + +func (p *PathMatcher) appendRNode(path string, node *RNode) { + p.append(path, node.YNode()) +} + +func (p *PathMatcher) append(path string, nodes ...*Node) { + if p.val == nil { + p.val = NewRNode(&Node{Kind: SequenceNode}) + } + for i := range nodes { + node := nodes[i] + p.val.YNode().Content = append(p.val.YNode().Content, node) + // record the path if specified + if path != "" { + p.Matches[node] = append(p.Matches[node], path) + } + } +} + +func cleanPath(path []string) []string { + var p []string + for _, elem := range path { + elem = strings.TrimSpace(elem) + if len(elem) == 0 { + continue + } + p = append(p, elem) + } + return p +} diff --git a/go/internal/forked/kyaml/yaml/match_test.go b/go/internal/forked/kyaml/yaml/match_test.go new file mode 100644 index 000000000..70852398b --- /dev/null +++ b/go/internal/forked/kyaml/yaml/match_test.go @@ -0,0 +1,88 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package yaml + +import ( + "fmt" + "testing" + + "github.com/stretchr/testify/assert" +) + +func TestPathMatcher_Filter(t *testing.T) { + node := MustParse(`apiVersion: apps/v1 +kind: Deployment +metadata: + name: nginx-deployment + labels: + app: nginx +spec: + replicas: 3 + selector: + matchLabels: + app: nginx + template: + metadata: + labels: + app: nginx + spec: + containers: + - name: nginx + image: nginx:1.7.9 + ports: + - containerPort: 80 + - name: sidecar + image: sidecar:1.0.0 + ports: + - containerPort: 8081 + - containerPort: 9090 +`) + + updates := []struct { + path []string + value string + }{ + {[]string{ + "spec", "template", "spec", "containers", "[name=.*]"}, + "- name: nginx\n image: nginx:1.7.9\n ports:\n - containerPort: 80\n" + + "- name: sidecar\n image: sidecar:1.0.0\n ports:\n - containerPort: 8081\n - containerPort: 9090\n"}, + {[]string{ + "spec", "template", "spec", "containers", "[name=.*]", "image"}, + "- nginx:1.7.9\n- sidecar:1.0.0\n"}, + {[]string{ + "spec", "template", "spec", "containers", "[name=n.*]", "image"}, + "- nginx:1.7.9\n"}, + {[]string{ + "spec", "template", "spec", "containers", "[name=s.*]", "image"}, + "- sidecar:1.0.0\n"}, + {[]string{ + "spec", "template", "spec", "containers", "[name=.*x]", "image"}, + "- nginx:1.7.9\n"}, + {[]string{ + "spec", "template", "spec", "containers", "[name=.*]", "ports"}, + "- - containerPort: 80\n- - containerPort: 8081\n - containerPort: 9090\n"}, + {[]string{ + "spec", "template", "spec", "containers", "[name=.*]", "ports", "[containerPort=8.*]"}, + "- containerPort: 80\n- containerPort: 8081\n"}, + {[]string{ + "spec", "template", "spec", "containers", "[name=.*]", "ports", "[containerPort=.*1]"}, + "- containerPort: 8081\n"}, + {[]string{ + "spec", "template", "spec", "containers", "[name=.*]", "ports", "[containerPort=9.*]"}, + "- containerPort: 9090\n"}, + {[]string{ + "spec", "template", "spec", "containers", "[name=s.*]", "ports", "[containerPort=8.*]"}, + "- containerPort: 8081\n"}, + {[]string{ + "spec", "template", "spec", "containers", "[name=s.*]", "ports", "[containerPort=.*2]"}, + ""}, + } + for i, u := range updates { + result, err := node.Pipe(&PathMatcher{Path: u.path}) + if !assert.NoError(t, err) { + return + } + assert.Equal(t, u.value, result.MustString(), fmt.Sprintf("%d", i)) + } +} diff --git a/go/internal/forked/kyaml/yaml/merge2/element_test.go b/go/internal/forked/kyaml/yaml/merge2/element_test.go new file mode 100644 index 000000000..3ac74506f --- /dev/null +++ b/go/internal/forked/kyaml/yaml/merge2/element_test.go @@ -0,0 +1,650 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package merge2_test + +import ( + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" +) + +var elementTestCases = []testCase{ + {description: `merge Element -- keep field in dest`, + source: ` +apiVersion: apps/v1 +kind: Deployment +spec: + template: + spec: + containers: + - name: foo + image: foo:v1 +`, + dest: ` +apiVersion: apps/v1 +kind: Deployment +spec: + template: + spec: + containers: + - name: foo + image: foo:v0 + command: ['run.sh'] +`, + expected: ` +apiVersion: apps/v1 +kind: Deployment +spec: + template: + spec: + containers: + - name: foo + image: foo:v1 + command: ['run.sh'] +`, + mergeOptions: yaml.MergeOptions{ + ListIncreaseDirection: yaml.MergeOptionsListAppend, + }, + }, + + {description: `merge Element -- add field to dest`, + source: ` +apiVersion: apps/v1 +kind: Deployment +spec: + template: + spec: + containers: + - name: foo + image: foo:v1 + command: ['run.sh'] +`, + dest: ` +apiVersion: apps/v1 +kind: Deployment +spec: + template: + spec: + containers: + - name: foo + image: foo:v0 +`, + expected: ` +apiVersion: apps/v1 +kind: Deployment +spec: + template: + spec: + containers: + - name: foo + image: foo:v1 + command: ['run.sh'] +`, + mergeOptions: yaml.MergeOptions{ + ListIncreaseDirection: yaml.MergeOptionsListAppend, + }, + }, + + {description: `merge Element -- add list, empty in dest`, + source: ` +apiVersion: apps/v1 +kind: Deployment +spec: + template: + spec: + containers: + - name: foo + image: foo:v1 + command: ['run.sh'] +`, + dest: ` +apiVersion: apps/v1 +kind: Deployment +spec: + template: + spec: + containers: [] +`, + expected: ` +apiVersion: apps/v1 +kind: Deployment +spec: + template: + spec: + containers: + - name: foo + image: foo:v1 + command: ['run.sh'] +`, + mergeOptions: yaml.MergeOptions{ + ListIncreaseDirection: yaml.MergeOptionsListAppend, + }, + }, + + {description: `merge Element -- add list, missing from dest`, + source: ` +apiVersion: apps/v1 +kind: Deployment +spec: + template: + spec: + containers: + - name: foo + image: foo:v1 + command: ['run.sh'] +`, + dest: ` +apiVersion: apps/v1 +kind: Deployment +`, + expected: ` +apiVersion: apps/v1 +kind: Deployment +spec: + template: + spec: + containers: + - name: foo + image: foo:v1 + command: ['run.sh'] +`, + mergeOptions: yaml.MergeOptions{ + ListIncreaseDirection: yaml.MergeOptionsListAppend, + }, + }, + + {description: `merge Element -- add Element first`, + source: ` +apiVersion: apps/v1 +kind: Deployment +spec: + template: + spec: + containers: + - name: bar + image: bar:v1 + command: ['run2.sh'] + - name: foo + image: foo:v1 +`, + dest: ` +apiVersion: apps/v1 +kind: Deployment +spec: + template: + spec: + containers: + - name: foo + image: foo:v0 +`, + expected: ` +apiVersion: apps/v1 +kind: Deployment +spec: + template: + spec: + containers: + - name: foo + image: foo:v1 + - name: bar + image: bar:v1 + command: ['run2.sh'] +`, + mergeOptions: yaml.MergeOptions{ + ListIncreaseDirection: yaml.MergeOptionsListAppend, + }, + }, + + {description: `merge Element -- add Element second`, + source: ` +apiVersion: apps/v1 +kind: Deployment +spec: + template: + spec: + containers: + - name: foo + image: foo:v1 + - name: bar + image: bar:v1 + command: ['run2.sh'] +`, + dest: ` +apiVersion: apps/v1 +kind: Deployment +spec: + template: + spec: + containers: + - name: foo + image: foo:v0 +`, + expected: ` +apiVersion: apps/v1 +kind: Deployment +spec: + template: + spec: + containers: + - name: foo + image: foo:v1 + - name: bar + image: bar:v1 + command: ['run2.sh'] +`, + mergeOptions: yaml.MergeOptions{ + ListIncreaseDirection: yaml.MergeOptionsListAppend, + }, + }, + + {description: `merge Element -- add Element third`, + source: ` +apiVersion: apps/v1 +kind: Deployment +spec: + template: + spec: + containers: + - name: bar + image: bar:v1 + command: ['run2.sh'] + - name: foo + image: foo:v1 +`, + dest: ` +apiVersion: apps/v1 +kind: Deployment +spec: + template: + spec: + containers: + - name: foo + image: foo:v0 +`, + expected: ` +apiVersion: apps/v1 +kind: Deployment +spec: + template: + spec: + containers: + - name: bar + image: bar:v1 + command: ['run2.sh'] + - name: foo + image: foo:v1 +`, + mergeOptions: yaml.MergeOptions{ + ListIncreaseDirection: yaml.MergeOptionsListPrepend, + }, + }, + + {description: `merge Element -- add Element fourth`, + source: ` +apiVersion: apps/v1 +kind: Deployment +spec: + template: + spec: + containers: + - name: foo + image: foo:v1 + - name: bar + image: bar:v1 + command: ['run2.sh'] +`, + dest: ` +apiVersion: apps/v1 +kind: Deployment +spec: + template: + spec: + containers: + - name: foo + image: foo:v0 +`, + expected: ` +apiVersion: apps/v1 +kind: Deployment +spec: + template: + spec: + containers: + - name: foo + image: foo:v1 + - name: bar + image: bar:v1 + command: ['run2.sh'] +`, + mergeOptions: yaml.MergeOptions{ + ListIncreaseDirection: yaml.MergeOptionsListPrepend, + }, + }, + + // + // Test Case + // + {description: `keep list -- list missing from src`, + source: ` +apiVersion: apps/v1 +kind: Deployment +`, + dest: ` +apiVersion: apps/v1 +kind: Deployment +spec: + template: + spec: + containers: + - name: foo + image: foo:v1 + - name: bar + image: bar:v1 + command: ['run2.sh'] +`, + expected: ` +apiVersion: apps/v1 +kind: Deployment +spec: + template: + spec: + containers: + - name: foo + image: foo:v1 + - name: bar + image: bar:v1 + command: ['run2.sh'] +`, + mergeOptions: yaml.MergeOptions{ + ListIncreaseDirection: yaml.MergeOptionsListAppend, + }, + }, + + // + // Test Case + // + {description: `keep Element -- element missing in src`, + source: ` +apiVersion: apps/v1 +kind: Deployment +spec: + template: + spec: + containers: + - name: foo + image: foo:v1 +`, + dest: ` +apiVersion: apps/v1 +kind: Deployment +spec: + template: + spec: + containers: + - name: foo + image: foo:v0 + - name: bar + image: bar:v1 + command: ['run2.sh'] +`, + expected: ` +apiVersion: apps/v1 +kind: Deployment +spec: + template: + spec: + containers: + - name: foo + image: foo:v1 + - name: bar + image: bar:v1 + command: ['run2.sh'] +`, + mergeOptions: yaml.MergeOptions{ + ListIncreaseDirection: yaml.MergeOptionsListAppend, + }, + }, + + // + // Test Case + // + {description: `keep element -- empty list in src`, + source: ` +apiVersion: apps/v1 +kind: Deployment +spec: + template: + spec: + containers: [] +`, + dest: ` +apiVersion: apps/v1 +kind: Deployment +spec: + template: + spec: + containers: + - name: foo + image: foo:v1 + - name: bar + image: bar:v1 + command: ['run2.sh'] +`, + expected: ` +apiVersion: apps/v1 +kind: Deployment +spec: + template: + spec: + containers: + - name: foo + image: foo:v1 + - name: bar + image: bar:v1 + command: ['run2.sh'] +`, + mergeOptions: yaml.MergeOptions{ + ListIncreaseDirection: yaml.MergeOptionsListAppend, + }, + }, + + // + // Test Case + // + {description: `remove Element -- null in src`, + source: ` +apiVersion: apps/v1 +kind: Deployment +spec: + template: + spec: + containers: null +`, + dest: ` +apiVersion: apps/v1 +kind: Deployment +spec: + template: + spec: + containers: + - name: foo + image: foo:v1 + - name: bar + image: bar:v1 + command: ['run2.sh'] +`, + expected: ` +apiVersion: apps/v1 +kind: Deployment +spec: + template: + spec: {} +`, + mergeOptions: yaml.MergeOptions{ + ListIncreaseDirection: yaml.MergeOptionsListAppend, + }, + }, + + // + // Test Case + // + {description: `infer merge keys merge'`, + source: ` +apiVersion: custom +kind: Deployment +containers: +- name: foo + command: ['run2.sh'] +`, + dest: ` +apiVersion: custom +kind: Deployment +containers: +- name: foo + image: foo:bar +`, + expected: ` +apiVersion: custom +kind: Deployment +containers: +- name: foo + image: foo:bar + command: ['run2.sh'] +`, + infer: true, + mergeOptions: yaml.MergeOptions{ + ListIncreaseDirection: yaml.MergeOptionsListAppend, + }, + }, + + // + // Test Case + // + {description: `no infer merge keys merge using schema`, + source: ` +apiVersion: apps/v1 +kind: Deployment +spec: + template: + spec: + containers: + - name: foo + command: ['run2.sh'] +`, + dest: ` +apiVersion: apps/v1 +kind: Deployment +spec: + template: + spec: + containers: + - name: foo + image: foo:bar +`, + expected: ` +apiVersion: apps/v1 +kind: Deployment +spec: + template: + spec: + containers: + - name: foo + image: foo:bar + command: ['run2.sh'] +`, + infer: false, + mergeOptions: yaml.MergeOptions{ + ListIncreaseDirection: yaml.MergeOptionsListAppend, + }, + }, + + // + // Test Case + // + {description: `no infer merge keys merge using explicit schema as line comment'`, + source: ` +apiVersion: custom +kind: Deployment +containers: +- name: foo + command: ['run2.sh'] +`, + dest: ` +apiVersion: custom +kind: Deployment +containers: # {"items":{"$ref": "#/definitions/io.k8s.api.core.v1.Container"},"type":"array","x-kubernetes-patch-merge-key":"name","x-kubernetes-patch-strategy": "merge"} +- name: foo # hell ow + image: foo:bar +`, + expected: ` +apiVersion: custom +kind: Deployment +containers: # {"items":{"$ref": "#/definitions/io.k8s.api.core.v1.Container"},"type":"array","x-kubernetes-patch-merge-key":"name","x-kubernetes-patch-strategy": "merge"} +- name: foo + image: foo:bar + command: ['run2.sh'] +`, + infer: false, + mergeOptions: yaml.MergeOptions{ + ListIncreaseDirection: yaml.MergeOptionsListAppend, + }, + }, + + {description: `merge_primitive_finalizers`, + source: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + finalizers: + - a + - b +`, + dest: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + finalizers: + - b + - c +`, + expected: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + finalizers: + - b + - c + - a +`, + mergeOptions: yaml.MergeOptions{ + ListIncreaseDirection: yaml.MergeOptionsListAppend, + }, + }, + + {description: `merge_primitive_items`, + source: ` +apiVersion: apps/v1 +kind: Deployment +items: # {"type":"array", "x-kubernetes-patch-strategy": "merge"} +- a +- b +`, + dest: ` +apiVersion: apps/v1 +kind: Deployment +items: +- b +- c +`, + expected: ` +apiVersion: apps/v1 +kind: Deployment +items: +- b +- c +- a +`, + mergeOptions: yaml.MergeOptions{ + ListIncreaseDirection: yaml.MergeOptionsListAppend, + }, + }, +} diff --git a/go/internal/forked/kyaml/yaml/merge2/list_test.go b/go/internal/forked/kyaml/yaml/merge2/list_test.go new file mode 100644 index 000000000..65646a1bd --- /dev/null +++ b/go/internal/forked/kyaml/yaml/merge2/list_test.go @@ -0,0 +1,490 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package merge2_test + +import ( + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" +) + +var listTestCases = []testCase{ + {description: `strategic merge patch delete 1`, + source: ` +apiVersion: apps/v1 +kind: Deployment +spec: + template: + spec: + containers: + - name: foo1 + $patch: delete + - name: foo2 + - name: foo3 +`, + dest: ` +apiVersion: apps/v1 +kind: Deployment +spec: + template: + spec: + containers: + - name: foo1 + - name: foo2 + - name: foo3 +`, + expected: ` +apiVersion: apps/v1 +kind: Deployment +spec: + template: + spec: + containers: + - name: foo2 + - name: foo3 +`, + mergeOptions: yaml.MergeOptions{ + ListIncreaseDirection: yaml.MergeOptionsListAppend, + }, + }, + {description: `strategic merge patch delete 2`, + source: ` +apiVersion: apps/v1 +kind: Deployment +spec: + template: + spec: + containers: + - name: foo1 + - name: foo2 + - name: foo3 + $patch: delete +`, + dest: ` +apiVersion: apps/v1 +kind: Deployment +spec: + template: + spec: + containers: + - name: foo1 + - name: foo2 + - name: foo3 +`, + expected: ` +apiVersion: apps/v1 +kind: Deployment +spec: + template: + spec: + containers: + - name: foo1 + - name: foo2 +`, + mergeOptions: yaml.MergeOptions{ + ListIncreaseDirection: yaml.MergeOptionsListAppend, + }, + }, + {description: `merge k8s deployment containers - prepend`, + source: ` +apiVersion: apps/v1 +kind: Deployment +spec: + template: + spec: + containers: + - name: foo1 + - name: foo2 + - name: foo3 +`, + dest: ` +apiVersion: apps/v1 +kind: Deployment +spec: + template: + spec: + containers: + - name: foo0 +`, + expected: ` +apiVersion: apps/v1 +kind: Deployment +spec: + template: + spec: + containers: + - name: foo1 + - name: foo2 + - name: foo3 + - name: foo0 + `, + mergeOptions: yaml.MergeOptions{ + ListIncreaseDirection: yaml.MergeOptionsListPrepend, + }, + }, + {description: `merge k8s deployment containers - append`, + source: ` +apiVersion: apps/v1 +kind: Deployment +spec: + template: + spec: + containers: + - name: foo1 + - name: foo2 + - name: foo3 +`, + dest: ` +apiVersion: apps/v1 +kind: Deployment +spec: + template: + spec: + containers: + - name: foo0 +`, + expected: ` +apiVersion: apps/v1 +kind: Deployment +spec: + template: + spec: + containers: + - name: foo0 + - name: foo1 + - name: foo2 + - name: foo3 +`, + mergeOptions: yaml.MergeOptions{ + ListIncreaseDirection: yaml.MergeOptionsListAppend, + }, + }, + {description: `merge k8s deployment volumes - append`, + source: ` +apiVersion: apps/v1 +kind: Deployment +spec: + template: + spec: + volumes: + - name: foo1 + - name: foo2 + - name: foo3 +`, + dest: ` +apiVersion: apps/v1 +kind: Deployment +spec: + template: + spec: + volumes: + - name: foo0 +`, + expected: ` +apiVersion: apps/v1 +kind: Deployment +spec: + template: + spec: + volumes: + - name: foo0 + - name: foo1 + - name: foo2 + - name: foo3 +`, + mergeOptions: yaml.MergeOptions{ + ListIncreaseDirection: yaml.MergeOptionsListAppend, + }, + }, + {description: `merge k8s deployment volumes - prepend`, + source: ` +apiVersion: apps/v1 +kind: Deployment +spec: + template: + spec: + volumes: + - name: foo1 + - name: foo2 + - name: foo3 +`, + dest: ` +apiVersion: apps/v1 +kind: Deployment +spec: + template: + spec: + volumes: + - name: foo0 +`, + expected: ` +apiVersion: apps/v1 +kind: Deployment +spec: + template: + spec: + volumes: + - name: foo1 + - name: foo2 + - name: foo3 + - name: foo0 +`, + mergeOptions: yaml.MergeOptions{ + ListIncreaseDirection: yaml.MergeOptionsListPrepend, + }, + }, + {description: `merge k8s deployment containers -- $patch directive`, + source: ` + apiVersion: apps/v1 + kind: Deployment + spec: + template: + spec: + containers: + - name: foo1 + - name: foo2 + - name: foo3 + - $patch: merge +`, + dest: ` + apiVersion: apps/v1 + kind: Deployment + spec: + template: + spec: + containers: + - name: foo4 + - name: foo5 +`, + expected: ` + apiVersion: apps/v1 + kind: Deployment + spec: + template: + spec: + containers: + - name: foo1 + - name: foo2 + - name: foo3 + - name: foo4 + - name: foo5 +`, + }, + {description: `replace k8s deployment containers -- $patch directive`, + source: ` + apiVersion: apps/v1 + kind: Deployment + spec: + template: + spec: + containers: + - name: foo1 + - name: foo2 + - name: foo3 + - $patch: replace +`, + dest: ` + apiVersion: apps/v1 + kind: Deployment + spec: + template: + spec: + containers: + - name: foo4 + - name: foo5 +`, + expected: ` + apiVersion: apps/v1 + kind: Deployment + spec: + template: + spec: + containers: + - name: foo1 + - name: foo2 + - name: foo3 +`, + }, + {description: `remove k8s deployment containers -- $patch directive`, + source: ` + apiVersion: apps/v1 + kind: Deployment + spec: + template: + spec: + containers: + - name: foo1 + - name: foo2 + - name: foo3 + - $patch: delete +`, + dest: ` + apiVersion: apps/v1 + kind: Deployment + spec: + template: + spec: + containers: + - name: foo4 + - name: foo5 +`, + expected: ` + apiVersion: apps/v1 + kind: Deployment + spec: + template: + spec: {} +`, + }, + + {description: `replace List -- different value in dest`, + source: ` +kind: Deployment +items: +- 1 +- 2 +- 3 +`, + dest: ` +kind: Deployment +items: +- 0 +- 1 +`, + expected: ` +kind: Deployment +items: +- 1 +- 2 +- 3 +`, + mergeOptions: yaml.MergeOptions{ + ListIncreaseDirection: yaml.MergeOptionsListAppend, + }, + }, + + {description: `replace List -- missing from dest`, + source: ` +kind: Deployment +items: +- 1 +- 2 +- 3 +`, + dest: ` +kind: Deployment +`, + expected: ` +kind: Deployment +items: +- 1 +- 2 +- 3 +`, + mergeOptions: yaml.MergeOptions{ + ListIncreaseDirection: yaml.MergeOptionsListAppend, + }, + }, + + // + // Test Case + // + {description: `keep List -- same value in src and dest`, + source: ` +kind: Deployment +items: +- 1 +- 2 +- 3 +`, + dest: ` +kind: Deployment +items: +- 1 +- 2 +- 3 +`, + expected: ` +kind: Deployment +items: +- 1 +- 2 +- 3 +`, + mergeOptions: yaml.MergeOptions{ + ListIncreaseDirection: yaml.MergeOptionsListAppend, + }, + }, + + // + // Test Case + // + {description: `keep List -- unspecified in src`, + source: ` +kind: Deployment +`, + dest: ` +kind: Deployment +items: +- 1 +- 2 +- 3 +`, + expected: ` +kind: Deployment +items: +- 1 +- 2 +- 3 +`, + mergeOptions: yaml.MergeOptions{ + ListIncreaseDirection: yaml.MergeOptionsListAppend, + }, + }, + + // + // Test Case + // + {description: `remove List -- null in src`, + source: ` +kind: Deployment +items: null +`, + dest: ` +kind: Deployment +items: +- 1 +- 2 +- 3 +`, + expected: ` +kind: Deployment +`, + mergeOptions: yaml.MergeOptions{ + ListIncreaseDirection: yaml.MergeOptionsListAppend, + }, + }, + + // + // Test Case + // + {description: `remove list -- empty in src`, + source: ` +kind: Deployment +items: [] +`, + dest: ` +kind: Deployment +items: +- 1 +- 2 +- 3 +`, + expected: ` +kind: Deployment +items: [] +`, + mergeOptions: yaml.MergeOptions{ + ListIncreaseDirection: yaml.MergeOptionsListAppend, + }, + }, +} diff --git a/go/internal/forked/kyaml/yaml/merge2/map_test.go b/go/internal/forked/kyaml/yaml/merge2/map_test.go new file mode 100644 index 000000000..b62fb7ca8 --- /dev/null +++ b/go/internal/forked/kyaml/yaml/merge2/map_test.go @@ -0,0 +1,425 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package merge2_test + +import ( + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" +) + +var mapTestCases = []testCase{ + + {description: `strategic merge patch delete 1`, + source: ` +kind: Deployment +$patch: delete +`, + dest: ` +kind: Deployment +spec: + foo: bar1 +`, + expected: ``, + mergeOptions: yaml.MergeOptions{ + ListIncreaseDirection: yaml.MergeOptionsListAppend, + }, + }, + + {description: `strategic merge patch delete 2`, + source: ` +kind: Deployment +spec: + $patch: delete +`, + dest: ` +kind: Deployment +spec: + foo: bar + color: red +`, + expected: ` +kind: Deployment +`, + mergeOptions: yaml.MergeOptions{ + ListIncreaseDirection: yaml.MergeOptionsListAppend, + }, + }, + + {description: `strategic merge patch delete 3`, + source: ` +kind: Deployment +spec: + metadata: + name: wut + template: + $patch: delete +`, + dest: ` +kind: Deployment +spec: + metadata: + name: wut + template: + spec: + containers: + - name: foo + - name: bar +`, + expected: ` +kind: Deployment +spec: + metadata: + name: wut +`, + mergeOptions: yaml.MergeOptions{ + ListIncreaseDirection: yaml.MergeOptionsListAppend, + }, + }, + + {description: `strategic merge patch delete 4`, + source: ` +apiVersion: apps/v1 +metadata: + name: myDeploy +kind: Deployment +$patch: delete +`, + dest: ` +apiVersion: apps/v1 +metadata: + name: myDeploy +kind: Deployment +spec: + replica: 2 + template: + metadata: + labels: + old-label: old-value + spec: + containers: + - name: nginx + image: nginx +`, + expected: ` +`, + mergeOptions: yaml.MergeOptions{ + ListIncreaseDirection: yaml.MergeOptionsListAppend, + }, + }, + + {description: `strategic merge patch replace 1`, + source: ` +kind: Deployment +spec: + metal: heavy + $patch: replace + veggie: carrot +`, + dest: ` +kind: Deployment +spec: + river: nile + color: red +`, + expected: ` +kind: Deployment +spec: + metal: heavy + veggie: carrot +`, + mergeOptions: yaml.MergeOptions{ + ListIncreaseDirection: yaml.MergeOptionsListAppend, + }, + }, + + {description: `merge Map -- update field in dest`, + source: ` +kind: Deployment +spec: + foo: bar1 +`, + dest: ` +kind: Deployment +spec: + foo: bar0 + baz: buz +`, + expected: ` +kind: Deployment +spec: + foo: bar1 + baz: buz +`, + mergeOptions: yaml.MergeOptions{ + ListIncreaseDirection: yaml.MergeOptionsListAppend, + }, + }, + + {description: `merge Map -- add field to dest`, + source: ` +kind: Deployment +spec: + foo: bar1 + baz: buz +`, + dest: ` +kind: Deployment +spec: + foo: bar0 +`, + expected: ` +kind: Deployment +spec: + foo: bar1 + baz: buz +`, + mergeOptions: yaml.MergeOptions{ + ListIncreaseDirection: yaml.MergeOptionsListAppend, + }, + }, + + {description: `merge Map -- add list, empty in dest`, + source: ` +kind: Deployment +spec: + foo: bar1 + baz: buz +`, + dest: ` +kind: Deployment +spec: {} +`, + expected: ` +kind: Deployment +spec: + baz: buz + foo: bar1 +`, + mergeOptions: yaml.MergeOptions{ + ListIncreaseDirection: yaml.MergeOptionsListAppend, + }, + }, + + {description: `merge Map -- add list, missing from dest`, + source: ` +kind: Deployment +spec: + foo: bar1 + baz: buz +`, + dest: ` +kind: Deployment +`, + expected: ` +kind: Deployment +spec: + foo: bar1 + baz: buz +`, + mergeOptions: yaml.MergeOptions{ + ListIncreaseDirection: yaml.MergeOptionsListAppend, + }, + }, + + {description: `merge Map -- add Map first`, + source: ` +kind: Deployment +spec: + foo: bar1 + baz: buz +`, + dest: ` +kind: Deployment +spec: + foo: bar1 +`, + expected: ` +kind: Deployment +spec: + foo: bar1 + baz: buz +`, + mergeOptions: yaml.MergeOptions{ + ListIncreaseDirection: yaml.MergeOptionsListAppend, + }, + }, + + {description: `merge Map -- add Map second`, + source: ` +kind: Deployment +spec: + baz: buz + foo: bar1 +`, + dest: ` +kind: Deployment +spec: + foo: bar1 +`, + expected: ` +kind: Deployment +spec: + foo: bar1 + baz: buz +`, + mergeOptions: yaml.MergeOptions{ + ListIncreaseDirection: yaml.MergeOptionsListAppend, + }, + }, + + // + // Test Case + // + {description: `keep map -- map missing from src`, + source: ` +kind: Deployment +`, + dest: ` +kind: Deployment +spec: + foo: bar1 + baz: buz +`, + expected: ` +kind: Deployment +spec: + foo: bar1 + baz: buz +`, + mergeOptions: yaml.MergeOptions{ + ListIncreaseDirection: yaml.MergeOptionsListAppend, + }, + }, + + // + // Test Case + // + {description: `keep map -- empty list in src`, + source: ` +kind: Deployment +items: {} +`, + dest: ` +kind: Deployment +spec: + foo: bar1 + baz: buz +`, + expected: ` +kind: Deployment +spec: + foo: bar1 + baz: buz +items: {} +`, + mergeOptions: yaml.MergeOptions{ + ListIncreaseDirection: yaml.MergeOptionsListAppend, + }, + }, + + // + // Test Case + // + {description: `remove Map -- null in src`, + source: ` +kind: Deployment +spec: null +`, + dest: ` +kind: Deployment +spec: + foo: bar1 + baz: buz +`, + expected: ` +kind: Deployment +`, + mergeOptions: yaml.MergeOptions{ + ListIncreaseDirection: yaml.MergeOptionsListAppend, + }, + }, + + // + // Test Case + // + {description: `port patch has no protocol`, + source: ` +apiVersion: v1 +kind: Service +metadata: + name: web +spec: + ports: + - port: 30900 + targetPort: 30900 +`, + dest: ` +apiVersion: v1 +kind: Service +metadata: + name: web +spec: + ports: + - port: 30900 + targetPort: 30900 + protocol: TCP +`, + expected: ` +apiVersion: v1 +kind: Service +metadata: + name: web +spec: + ports: + - port: 30900 + targetPort: 30900 + protocol: TCP +`, + mergeOptions: yaml.MergeOptions{ + ListIncreaseDirection: yaml.MergeOptionsListAppend, + }, + }, + + // + // Test Case + // + {description: `port patch has no protocol and different port number`, + source: ` +apiVersion: v1 +kind: Service +metadata: + name: web +spec: + ports: + - port: 30901 + targetPort: 30901 +`, + dest: ` +apiVersion: v1 +kind: Service +metadata: + name: web +spec: + ports: + - port: 30900 + targetPort: 30900 + protocol: TCP +`, + expected: ` +apiVersion: v1 +kind: Service +metadata: + name: web +spec: + ports: + - port: 30900 + targetPort: 30900 + protocol: TCP + - port: 30901 + targetPort: 30901 +`, + mergeOptions: yaml.MergeOptions{ + ListIncreaseDirection: yaml.MergeOptionsListAppend, + }, + }, +} diff --git a/go/internal/forked/kyaml/yaml/merge2/merge2.go b/go/internal/forked/kyaml/yaml/merge2/merge2.go new file mode 100644 index 000000000..961a8fd93 --- /dev/null +++ b/go/internal/forked/kyaml/yaml/merge2/merge2.go @@ -0,0 +1,182 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +// Package merge contains libraries for merging fields from one RNode to another +// RNode +package merge2 + +import ( + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/openapi" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml/walk" +) + +// Merge merges fields from src into dest. +func Merge(src, dest *yaml.RNode, mergeOptions yaml.MergeOptions) (*yaml.RNode, error) { + return walk.Walker{ + Sources: []*yaml.RNode{dest, src}, + Visitor: Merger{}, + MergeOptions: mergeOptions, + }.Walk() +} + +// Merge parses the arguments, and merges fields from srcStr into destStr. +func MergeStrings(srcStr, destStr string, infer bool, mergeOptions yaml.MergeOptions) (string, error) { + src, err := yaml.Parse(srcStr) + if err != nil { + return "", err + } + dest, err := yaml.Parse(destStr) + if err != nil { + return "", err + } + + result, err := walk.Walker{ + Sources: []*yaml.RNode{dest, src}, + Visitor: Merger{}, + InferAssociativeLists: infer, + MergeOptions: mergeOptions, + }.Walk() + if err != nil { + return "", err + } + + return result.String() +} + +type Merger struct { + // for forwards compatibility when new functions are added to the interface +} + +var _ walk.Visitor = Merger{} + +func (m Merger) VisitMap(nodes walk.Sources, s *openapi.ResourceSchema) (*yaml.RNode, error) { + if err := m.SetComments(nodes); err != nil { + return nil, err + } + if err := m.SetStyle(nodes); err != nil { + return nil, err + } + if yaml.IsMissingOrNull(nodes.Dest()) { + // Add + ps, _ := determineSmpDirective(nodes.Origin()) + if ps == smpDelete { + return walk.ClearNode, nil + } + + return nodes.Origin(), nil + } + if nodes.Origin().IsTaggedNull() { + // clear the value + return walk.ClearNode, nil + } + + ps, err := determineSmpDirective(nodes.Origin()) + if err != nil { + return nil, err + } + + switch ps { + case smpDelete: + return walk.ClearNode, nil + case smpReplace: + return nodes.Origin(), nil + default: + return nodes.Dest(), nil + } +} + +func (m Merger) VisitScalar(nodes walk.Sources, s *openapi.ResourceSchema) (*yaml.RNode, error) { + if err := m.SetComments(nodes); err != nil { + return nil, err + } + if err := m.SetStyle(nodes); err != nil { + return nil, err + } + // Override value + if nodes.Origin() != nil { + return nodes.Origin(), nil + } + // Keep + return nodes.Dest(), nil +} + +func (m Merger) VisitList(nodes walk.Sources, s *openapi.ResourceSchema, kind walk.ListKind) (*yaml.RNode, error) { + if err := m.SetComments(nodes); err != nil { + return nil, err + } + if err := m.SetStyle(nodes); err != nil { + return nil, err + } + if kind == walk.NonAssociateList { + // Override value + if nodes.Origin() != nil { + return nodes.Origin(), nil + } + // Keep + return nodes.Dest(), nil + } + + // Add + if yaml.IsMissingOrNull(nodes.Dest()) { + return nodes.Origin(), nil + } + // Clear + if nodes.Origin().IsTaggedNull() { + return walk.ClearNode, nil + } + + ps, err := determineSmpDirective(nodes.Origin()) + if err != nil { + return nil, err + } + + switch ps { + case smpDelete: + return walk.ClearNode, nil + case smpReplace: + return nodes.Origin(), nil + default: + return nodes.Dest(), nil + } +} + +func (m Merger) SetStyle(sources walk.Sources) error { + source := sources.Origin() + dest := sources.Dest() + if dest == nil || dest.YNode() == nil || source == nil || source.YNode() == nil { + // avoid panic + return nil + } + + // copy the style from the source. + // special case: if the dest was an empty map or seq, then it probably had + // folded style applied, but we actually want to keep the style of the origin + // in this case (even if it was the default). otherwise the merged elements + // will get folded even though this probably isn't what is desired. + if dest.YNode().Kind != yaml.ScalarNode && len(dest.YNode().Content) == 0 { + dest.YNode().Style = source.YNode().Style + } + return nil +} + +// SetComments copies the dest comments to the source comments if they are present +// on the source. +func (m Merger) SetComments(sources walk.Sources) error { + source := sources.Origin() + dest := sources.Dest() + if dest == nil || dest.YNode() == nil || source == nil || source.YNode() == nil { + // avoid panic + return nil + } + if source.YNode().FootComment != "" { + dest.YNode().FootComment = source.YNode().FootComment + } + if source.YNode().HeadComment != "" { + dest.YNode().HeadComment = source.YNode().HeadComment + } + if source.YNode().LineComment != "" { + dest.YNode().LineComment = source.YNode().LineComment + } + return nil +} diff --git a/go/internal/forked/kyaml/yaml/merge2/merge2_old_test.go b/go/internal/forked/kyaml/yaml/merge2/merge2_old_test.go new file mode 100644 index 000000000..a1d91cdc8 --- /dev/null +++ b/go/internal/forked/kyaml/yaml/merge2/merge2_old_test.go @@ -0,0 +1,519 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package merge2_test + +import ( + "bytes" + "testing" + + "github.com/stretchr/testify/assert" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/kio/filters" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml/merge2" +) + +const dest = ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: app + labels: + app: java + annotations: + a.b.c: d.e.f + g: h1 + i: j + m: n2 +spec: + template: + spec: + containers: + - name: nginx + image: nginx:1.7.9 + args: ['c', 'a', 'b'] + env: + - name: DEMO_GREETING + value: "Hello from the environment" + - name: DEMO_FAREWELL + value: "Such a sweet sorrow" +` + +func TestMerge_map(t *testing.T) { + dest := yaml.MustParse(dest) + src := yaml.MustParse(` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: app + labels: + app: java + annotations: + a.b.c: d.e.f + g: h2 + k: l + m: n1 +`) + + result, err := merge2.Merge(src, dest, yaml.MergeOptions{ + ListIncreaseDirection: yaml.MergeOptionsListAppend, + }) + if !assert.NoError(t, err) { + return + } + actual, err := result.String() + if !assert.NoError(t, err) { + return + } + + expected := ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: app + labels: + app: java + annotations: + a.b.c: d.e.f + g: h2 + i: j + k: l + m: n1 +spec: + template: + spec: + containers: + - name: nginx + image: nginx:1.7.9 + args: ['c', 'a', 'b'] + env: + - name: DEMO_GREETING + value: "Hello from the environment" + - name: DEMO_FAREWELL + value: "Such a sweet sorrow" +` + b, err := filters.FormatInput(bytes.NewBufferString(expected)) + if !assert.NoError(t, err) { + return + } + expected = b.String() + + b, err = filters.FormatInput(bytes.NewBufferString(actual)) + if !assert.NoError(t, err) { + return + } + actual = b.String() + + assert.Equal(t, expected, actual) +} + +func TestMerge_clear(t *testing.T) { + dest := yaml.MustParse(dest) + src := yaml.MustParse(` +apiVersion: apps/v1 +kind: Deployment +metadata: + annotations: null +`) + + result, err := merge2.Merge(src, dest, yaml.MergeOptions{ + ListIncreaseDirection: yaml.MergeOptionsListAppend, + }) + if !assert.NoError(t, err) { + return + } + actual, err := result.String() + if !assert.NoError(t, err) { + return + } + + expected := ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: app + labels: + app: java +spec: + template: + spec: + containers: + - name: nginx + image: nginx:1.7.9 + args: ['c', 'a', 'b'] + env: + - name: DEMO_GREETING + value: "Hello from the environment" + - name: DEMO_FAREWELL + value: "Such a sweet sorrow" +` + b, err := filters.FormatInput(bytes.NewBufferString(expected)) + if !assert.NoError(t, err) { + return + } + expected = b.String() + + b, err = filters.FormatInput(bytes.NewBufferString(actual)) + if !assert.NoError(t, err) { + return + } + actual = b.String() + + assert.Equal(t, expected, actual) +} + +func TestMerge_mapInverse(t *testing.T) { + dest := yaml.MustParse(dest) + src := yaml.MustParse(` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: app + labels: + app: java + annotations: + a.b.c: d.e.f + g: h2 + k: l + m: n1 +`) + + result, err := merge2.Merge(dest, src, yaml.MergeOptions{ + ListIncreaseDirection: yaml.MergeOptionsListAppend, + }) + if !assert.NoError(t, err) { + return + } + actual, err := result.String() + if !assert.NoError(t, err) { + return + } + + expected := ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: app + labels: + app: java + annotations: + a.b.c: d.e.f + g: h1 + i: j + k: l + m: n2 +spec: + template: + spec: + containers: + - name: nginx + image: nginx:1.7.9 + args: ['c', 'a', 'b'] + env: + - name: DEMO_GREETING + value: "Hello from the environment" + - name: DEMO_FAREWELL + value: "Such a sweet sorrow" +` + b, err := filters.FormatInput(bytes.NewBufferString(expected)) + if !assert.NoError(t, err) { + return + } + expected = b.String() + + b, err = filters.FormatInput(bytes.NewBufferString(actual)) + if !assert.NoError(t, err) { + return + } + actual = b.String() + + assert.Equal(t, expected, actual) +} + +func TestMerge_listElem(t *testing.T) { + dest := yaml.MustParse(dest) + src := yaml.MustParse(` +apiVersion: apps/v1 +kind: Deployment +spec: + template: + spec: + containers: + - name: nginx + env: + - name: DEMO_GREETING + value: "New Demo Greeting" + - name: NEW_DEMO_VALUE + value: "Another Env Not In The Dest" +`) + + result, err := merge2.Merge(src, dest, yaml.MergeOptions{ + ListIncreaseDirection: yaml.MergeOptionsListAppend, + }) + if !assert.NoError(t, err) { + return + } + actual, err := result.String() + if !assert.NoError(t, err) { + return + } + + expected := `apiVersion: apps/v1 +kind: Deployment +metadata: + name: app + labels: + app: java + annotations: + a.b.c: d.e.f + g: h1 + i: j + m: n2 +spec: + template: + spec: + containers: + - name: nginx + image: nginx:1.7.9 + args: ['c', 'a', 'b'] + env: + - name: DEMO_GREETING + value: "New Demo Greeting" + - name: DEMO_FAREWELL + value: "Such a sweet sorrow" + - name: NEW_DEMO_VALUE + value: "Another Env Not In The Dest" +` + + b, err := filters.FormatInput(bytes.NewBufferString(expected)) + if !assert.NoError(t, err) { + return + } + expected = b.String() + + b, err = filters.FormatInput(bytes.NewBufferString(actual)) + if !assert.NoError(t, err) { + return + } + actual = b.String() + + assert.Equal(t, expected, actual) +} + +func TestMerge_list(t *testing.T) { + dest := yaml.MustParse(dest) + src := yaml.MustParse(` +apiVersion: apps/v1 +kind: Deployment +spec: + template: + spec: + containers: + - name: nginx + args: ['e', 'd', 'f'] +`) + + result, err := merge2.Merge(src, dest, yaml.MergeOptions{ + ListIncreaseDirection: yaml.MergeOptionsListAppend, + }) + if !assert.NoError(t, err) { + return + } + actual, err := result.String() + if !assert.NoError(t, err) { + return + } + + expected := `apiVersion: apps/v1 +kind: Deployment +metadata: + name: app + labels: + app: java + annotations: + a.b.c: d.e.f + g: h1 + i: j + m: n2 +spec: + template: + spec: + containers: + - name: nginx + image: nginx:1.7.9 + args: ['e', 'd', 'f'] + env: + - name: DEMO_GREETING + value: "Hello from the environment" + - name: DEMO_FAREWELL + value: "Such a sweet sorrow" +` + + b, err := filters.FormatInput(bytes.NewBufferString(expected)) + if !assert.NoError(t, err) { + return + } + expected = b.String() + + b, err = filters.FormatInput(bytes.NewBufferString(actual)) + if !assert.NoError(t, err) { + return + } + actual = b.String() + + assert.Equal(t, expected, actual) +} + +func TestMerge_commentsKept(t *testing.T) { + actual, err := merge2.MergeStrings(` +a: + b: + c: e +`, + ` +a: + b: + # header comment + c: d +`, true, yaml.MergeOptions{ + ListIncreaseDirection: yaml.MergeOptionsListAppend, + }) + if !assert.NoError(t, err) { + return + } + assert.Equal(t, `a: + b: + # header comment + c: e +`, actual) + + actual, err = merge2.MergeStrings(` +a: + b: + c: e +`, + ` +a: + b: + c: d + # footer comment +`, true, yaml.MergeOptions{ + ListIncreaseDirection: yaml.MergeOptionsListAppend, + }) + if !assert.NoError(t, err) { + return + } + assert.Equal(t, `a: + b: + c: e + # footer comment +`, actual) + + actual, err = merge2.MergeStrings(` +a: + b: + c: e +`, + ` +a: + b: + c: d # line comment +`, true, yaml.MergeOptions{ + ListIncreaseDirection: yaml.MergeOptionsListAppend, + }) + if !assert.NoError(t, err) { + return + } + assert.Equal(t, `a: + b: + c: e +`, actual) +} + +func TestMerge_commentsOverride(t *testing.T) { + actual, err := merge2.MergeStrings(` +a: + b: + # header comment + c: e +`, + ` +a: + b: + # replace comment + c: d +`, true, yaml.MergeOptions{ + ListIncreaseDirection: yaml.MergeOptionsListAppend, + }) + if !assert.NoError(t, err) { + return + } + assert.Equal(t, `a: + b: + # replace comment + c: e +`, actual) + + actual, err = merge2.MergeStrings(` +a: + b: + c: e + # footer comment +`, + ` +a: + b: + c: d + # replace comment +`, true, yaml.MergeOptions{ + ListIncreaseDirection: yaml.MergeOptionsListAppend, + }) + if !assert.NoError(t, err) { + return + } + assert.Equal(t, `a: + b: + c: e + # replace comment +`, actual) + + actual, err = merge2.MergeStrings(` +a: + b: + c: e # line comment +`, + ` +a: + b: + c: d # replace comment +`, true, yaml.MergeOptions{ + ListIncreaseDirection: yaml.MergeOptionsListAppend, + }) + if !assert.NoError(t, err) { + return + } + assert.Equal(t, `a: + b: + c: e # line comment +`, actual) + + actual, err = merge2.MergeStrings(` +a: + b: + c: d # line comment +`, + ` +a: + b: + c: d # replace comment +`, true, yaml.MergeOptions{ + ListIncreaseDirection: yaml.MergeOptionsListAppend, + }) + if !assert.NoError(t, err) { + return + } + assert.Equal(t, `a: + b: + c: d # line comment +`, actual) +} diff --git a/go/internal/forked/kyaml/yaml/merge2/merge2_test.go b/go/internal/forked/kyaml/yaml/merge2/merge2_test.go new file mode 100644 index 000000000..3dc683490 --- /dev/null +++ b/go/internal/forked/kyaml/yaml/merge2/merge2_test.go @@ -0,0 +1,53 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package merge2_test + +import ( + "bytes" + "strings" + "testing" + + "github.com/stretchr/testify/assert" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/kio/filters" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml/merge2" +) + +var testCases = [][]testCase{scalarTestCases, listTestCases, elementTestCases, mapTestCases} + +func TestMerge(t *testing.T) { + for i := range testCases { + for j := range testCases[i] { + tc := testCases[i][j] + t.Run(tc.description, func(t *testing.T) { + actual, err := merge2.MergeStrings(tc.source, tc.dest, tc.infer, tc.mergeOptions) + if !assert.NoError(t, err, tc.description) { + t.FailNow() + } + e, err := filters.FormatInput(bytes.NewBufferString(tc.expected)) + if !assert.NoError(t, err) { + t.FailNow() + } + estr := strings.TrimSpace(e.String()) + a, err := filters.FormatInput(bytes.NewBufferString(actual)) + if !assert.NoError(t, err) { + t.FailNow() + } + astr := strings.TrimSpace(a.String()) + if !assert.Equal(t, estr, astr, tc.description) { + t.FailNow() + } + }) + } + } +} + +type testCase struct { + description string + source string + dest string + expected string + infer bool + mergeOptions yaml.MergeOptions +} diff --git a/go/internal/forked/kyaml/yaml/merge2/scalar_test.go b/go/internal/forked/kyaml/yaml/merge2/scalar_test.go new file mode 100644 index 000000000..854c80845 --- /dev/null +++ b/go/internal/forked/kyaml/yaml/merge2/scalar_test.go @@ -0,0 +1,165 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package merge2_test + +import ( + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" +) + +var scalarTestCases = []testCase{ + {description: `replace scalar -- different value in dest`, + source: ` +kind: Deployment +field: value1 +`, + dest: ` +kind: Deployment +field: value0 +`, + expected: ` +kind: Deployment +field: value1 +`, + mergeOptions: yaml.MergeOptions{ + ListIncreaseDirection: yaml.MergeOptionsListAppend, + }, + }, + + {description: `replace scalar -- missing from dest`, + source: ` +kind: Deployment +field: value1 +`, + dest: ` +kind: Deployment +`, + expected: ` +kind: Deployment +field: value1 +`, + mergeOptions: yaml.MergeOptions{ + ListIncreaseDirection: yaml.MergeOptionsListAppend, + }, + }, + + // + // Test Case + // + {description: `keep scalar -- same value in src and dest`, + source: ` +kind: Deployment +field: value1 +`, + dest: ` +kind: Deployment +field: value1 +`, + expected: ` +kind: Deployment +field: value1 +`, + mergeOptions: yaml.MergeOptions{ + ListIncreaseDirection: yaml.MergeOptionsListAppend, + }, + }, + + // + // Test Case + // + {description: `keep scalar -- unspecified in src`, + source: ` +kind: Deployment +`, + dest: ` +kind: Deployment +field: value1 +`, + expected: ` +kind: Deployment +field: value1 +`, + mergeOptions: yaml.MergeOptions{ + ListIncreaseDirection: yaml.MergeOptionsListAppend, + }, + }, + + // + // Test Case + // + {description: `remove scalar -- null in src`, + source: ` +kind: Deployment +field: null +`, + dest: ` +kind: Deployment +field: value1 +`, + expected: ` +kind: Deployment +`, + mergeOptions: yaml.MergeOptions{ + ListIncreaseDirection: yaml.MergeOptionsListAppend, + }, + }, + + // + // Test Case + // + {description: `remove scalar -- empty in src`, + source: ` +kind: Deployment +field: null +`, + dest: ` +kind: Deployment +field: value1 +`, + expected: ` +kind: Deployment +`, + mergeOptions: yaml.MergeOptions{ + ListIncreaseDirection: yaml.MergeOptionsListAppend, + }, + }, + + // + // Test Case + // + {description: `remove scalar -- null in src, missing in dest`, + source: ` +kind: Deployment +field: null +`, + dest: ` +kind: Deployment +`, + expected: ` +kind: Deployment +`, + mergeOptions: yaml.MergeOptions{ + ListIncreaseDirection: yaml.MergeOptionsListAppend, + }, + }, + + // + // Test Case + // + {description: `merge an empty value`, + source: ` +kind: Deployment +field: {} +`, + dest: ` +kind: Deployment +`, + expected: ` +kind: Deployment +field: {} +`, + mergeOptions: yaml.MergeOptions{ + ListIncreaseDirection: yaml.MergeOptionsListAppend, + }, + }, +} diff --git a/go/internal/forked/kyaml/yaml/merge2/smpdirective.go b/go/internal/forked/kyaml/yaml/merge2/smpdirective.go new file mode 100644 index 000000000..cfbd6f4cd --- /dev/null +++ b/go/internal/forked/kyaml/yaml/merge2/smpdirective.go @@ -0,0 +1,101 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package merge2 + +import ( + "fmt" + + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" +) + +// A strategic merge patch directive. +// See https://github.com/kubernetes/community/blob/master/contributors/devel/sig-api-machinery/strategic-merge-patch.md +// +//go:generate stringer -type=smpDirective -linecomment +type smpDirective int + +const ( + smpUnknown smpDirective = iota // unknown + smpReplace // replace + smpDelete // delete + smpMerge // merge +) + +const strategicMergePatchDirectiveKey = "$patch" + +// Examine patch for a strategic merge patch directive. +// If found, return it, and remove the directive from the patch. +func determineSmpDirective(patch *yaml.RNode) (smpDirective, error) { + if patch == nil { + return smpMerge, nil + } + switch patch.YNode().Kind { + case yaml.SequenceNode: + return determineSequenceNodePatchStrategy(patch) + case yaml.MappingNode: + return determineMappingNodePatchStrategy(patch) + default: + return smpUnknown, fmt.Errorf( + "no implemented strategic merge patch strategy for '%s' ('%s')", + patch.YNode().ShortTag(), patch.MustString()) + } +} + +func determineSequenceNodePatchStrategy(patch *yaml.RNode) (smpDirective, error) { + // get the $patch element + node, err := patch.Pipe(yaml.GetElementByKey(strategicMergePatchDirectiveKey)) + // if there are more than 1 key/value pair in the map, then this $patch + // is not for the sequence + if err != nil || node == nil || node.YNode() == nil || len(node.Content()) > 2 { + return smpMerge, nil + } + // get the value + value, err := node.Pipe(yaml.Get(strategicMergePatchDirectiveKey)) + if err != nil || value == nil || value.YNode() == nil { + return smpMerge, nil + } + v := value.YNode().Value + if v == smpDelete.String() { + return smpDelete, elideSequencePatchDirective(patch, v) + } + if v == smpReplace.String() { + return smpReplace, elideSequencePatchDirective(patch, v) + } + if v == smpMerge.String() { + return smpMerge, elideSequencePatchDirective(patch, v) + } + return smpUnknown, fmt.Errorf( + "unknown patch strategy '%s'", v) +} + +func determineMappingNodePatchStrategy(patch *yaml.RNode) (smpDirective, error) { + node, err := patch.Pipe(yaml.Get(strategicMergePatchDirectiveKey)) + if err != nil || node == nil || node.YNode() == nil { + return smpMerge, nil + } + v := node.YNode().Value + if v == smpDelete.String() { + return smpDelete, elideMappingPatchDirective(patch) + } + if v == smpReplace.String() { + return smpReplace, elideMappingPatchDirective(patch) + } + if v == smpMerge.String() { + return smpMerge, elideMappingPatchDirective(patch) + } + return smpUnknown, fmt.Errorf( + "unknown patch strategy '%s'", v) +} + +func elideMappingPatchDirective(patch *yaml.RNode) error { + return patch.PipeE(yaml.Clear(strategicMergePatchDirectiveKey)) +} + +func elideSequencePatchDirective(patch *yaml.RNode, value string) error { + return patch.PipeE(yaml.ElementSetter{ + Element: nil, + Keys: []string{strategicMergePatchDirectiveKey}, + Values: []string{value}, + }) +} diff --git a/go/internal/forked/kyaml/yaml/merge2/smpdirective_string.go b/go/internal/forked/kyaml/yaml/merge2/smpdirective_string.go new file mode 100644 index 000000000..b4f937f0e --- /dev/null +++ b/go/internal/forked/kyaml/yaml/merge2/smpdirective_string.go @@ -0,0 +1,26 @@ +// Code generated by "stringer -type=smpDirective -linecomment"; DO NOT EDIT. + +package merge2 + +import "strconv" + +func _() { + // An "invalid array index" compiler error signifies that the constant values have changed. + // Re-run the stringer command to generate them again. + var x [1]struct{} + _ = x[smpUnknown-0] + _ = x[smpReplace-1] + _ = x[smpDelete-2] + _ = x[smpMerge-3] +} + +const _smpDirective_name = "unknownreplacedeletemerge" + +var _smpDirective_index = [...]uint8{0, 7, 14, 20, 25} + +func (i smpDirective) String() string { + if i < 0 || i >= smpDirective(len(_smpDirective_index)-1) { + return "smpDirective(" + strconv.FormatInt(int64(i), 10) + ")" + } + return _smpDirective_name[_smpDirective_index[i]:_smpDirective_index[i+1]] +} diff --git a/go/internal/forked/kyaml/yaml/merge2/smpdirective_test.go b/go/internal/forked/kyaml/yaml/merge2/smpdirective_test.go new file mode 100644 index 000000000..2b7a346a2 --- /dev/null +++ b/go/internal/forked/kyaml/yaml/merge2/smpdirective_test.go @@ -0,0 +1,151 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 +package merge2 + +import ( + "strings" + "testing" + + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" +) + +func Test_determineSmpDirective(t *testing.T) { + var cases = map[string]struct { + patch string + elided string + expected smpDirective + errExpected string + }{ + `scalar`: { + patch: "dumb", + expected: smpMerge, + errExpected: "no implemented strategic merge patch strategy", + }, + `list merge`: { + patch: ` +- one +- two +- three +- $patch: merge +`, + expected: smpMerge, + elided: `- one +- two +- three +`, + }, + "list replace": { + patch: ` +- one +- two +- three +- $patch: replace +`, + expected: smpReplace, + elided: `- one +- two +- three +`, + }, + "list delete": { + patch: ` +- one +- two +- three +- $patch: delete +`, + expected: smpDelete, + elided: `- one +- two +- three +`, + }, + "list default": { + patch: ` +- one +- two +- three +`, + expected: smpMerge, + elided: `- one +- two +- three +`, + }, + `map replace`: { + patch: ` +metal: heavy +$patch: replace +veggie: carrot +`, + expected: smpReplace, + elided: `metal: heavy +veggie: carrot +`, + }, + `map delete`: { + patch: ` +metal: heavy +$patch: delete +veggie: carrot +`, + expected: smpDelete, + elided: `metal: heavy +veggie: carrot +`, + }, + `map merge`: { + patch: ` +metal: heavy +$patch: merge +veggie: carrot +`, + expected: smpMerge, + elided: `metal: heavy +veggie: carrot +`, + }, + `map default`: { + patch: ` +metal: heavy +veggie: carrot +`, + expected: smpMerge, + elided: `metal: heavy +veggie: carrot +`, + }, + } + + for n := range cases { + tc := cases[n] + t.Run(n, func(t *testing.T) { + p, err := yaml.Parse(tc.patch) + if err != nil { + t.Fatalf("unexpected parse err %v", err) + } + unwrapped := yaml.NewRNode(p.YNode()) + actual, err := determineSmpDirective(unwrapped) + if err == nil { + if tc.errExpected != "" { + t.Fatalf("should have seen an error") + } + if tc.expected != actual { + t.Fatalf("expected %s, got %s", tc.expected, actual) + } + if tc.elided != unwrapped.MustString() { + t.Fatalf( + "expected %s, got %s", + tc.elided, unwrapped.MustString()) + } + } else { + if tc.errExpected == "" { + t.Fatalf("unexpected err: %v", err) + } + if !strings.Contains(err.Error(), tc.errExpected) { + t.Fatalf("expected some error other than: %v", err) + } + } + }) + } +} diff --git a/go/internal/forked/kyaml/yaml/merge3/element_test.go b/go/internal/forked/kyaml/yaml/merge3/element_test.go new file mode 100644 index 000000000..c3257dddb --- /dev/null +++ b/go/internal/forked/kyaml/yaml/merge3/element_test.go @@ -0,0 +1,1718 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package merge3_test + +//nolint:lll +var elementTestCases = []testCase{ + // + // Test Case + // + { + description: `Add an element to an existing list`, + origin: ` +apiVersion: apps/v1 +kind: Deployment +spec: + template: + spec: + containers: + - name: foo + image: foo:1 +`, + update: ` +apiVersion: apps/v1 +kind: Deployment +spec: + template: + spec: + containers: + - name: foo + image: foo:1 + - name: baz + image: baz:2 +`, + local: ` +apiVersion: apps/v1 +kind: Deployment +spec: + template: + spec: + containers: + - name: foo + image: foo:1 +`, + expected: ` +apiVersion: apps/v1 +kind: Deployment +spec: + template: + spec: + containers: + - name: foo + image: foo:1 + - image: baz:2 + name: baz +`}, + + // + // Test Case + // + { + description: `Add an element to a non-existing list`, + origin: ` +apiVersion: apps/v1 +kind: Deployment`, + update: ` +apiVersion: apps/v1 +kind: Deployment +spec: + template: + spec: + containers: + - name: foo + image: foo:bar +`, + local: ` +apiVersion: apps/v1 +kind: Deployment +`, + expected: ` +apiVersion: apps/v1 +kind: Deployment +spec: + template: + spec: + containers: + - image: foo:bar + name: foo +`}, + + { + description: `Add an element to a non-existing list, existing in dest`, + origin: ` +apiVersion: apps/v1 +kind: Deployment`, + update: ` +apiVersion: apps/v1 +kind: Deployment +spec: + template: + spec: + containers: + - name: foo + image: foo:bar +`, + local: ` +apiVersion: apps/v1 +kind: Deployment +spec: + template: + spec: + containers: + - name: baz + image: baz:bar +`, + expected: ` +apiVersion: apps/v1 +kind: Deployment +spec: + template: + spec: + containers: + - name: baz + image: baz:bar + - image: foo:bar + name: foo +`}, + + // + // Test Case + // TODO(pwittrock): Figure out if there is something better we can do here + // This element is missing from the destination -- only the new fields are added + { + description: `Add a field to the element, element missing from dest`, + origin: ` +apiVersion: apps/v1 +kind: Deployment +spec: + template: + spec: + containers: + - name: foo + image: foo:bar`, + update: ` +apiVersion: apps/v1 +kind: Deployment +spec: + template: + spec: + containers: + - name: foo + image: foo:bar + command: + - run.sh +`, + local: ` +apiVersion: apps/v1 +kind: Deployment +`, + expected: ` +apiVersion: apps/v1 +kind: Deployment +spec: + template: + spec: + containers: + - command: + - run.sh + name: foo +`}, + + // + // Test Case + // + { + description: `Update a field on the elem, element missing from the dest`, + origin: ` +apiVersion: apps/v1 +kind: Deployment +spec: + template: + spec: + containers: + - name: foo + image: foo:bar + command: + - run.sh +`, + update: ` +apiVersion: apps/v1 +kind: Deployment +spec: + template: + spec: + containers: + - name: foo + image: foo:bar + command: + - run2.sh +`, + local: ` +apiVersion: apps/v1 +kind: Deployment +`, + expected: ` +apiVersion: apps/v1 +kind: Deployment +spec: + template: + spec: + containers: + - command: + - run2.sh + name: foo +`}, + + // + // Test Case + // + { + description: `Update a field on the elem, element present in the dest`, + origin: ` +apiVersion: apps/v1 +kind: Deployment +spec: + template: + spec: + containers: + - name: foo + image: foo:bar + command: ['run.sh'] +`, + update: ` +apiVersion: apps/v1 +kind: Deployment +spec: + template: + spec: + containers: + - name: foo + image: foo:bar + command: ['run2.sh'] +`, + local: ` +apiVersion: apps/v1 +kind: Deployment +spec: + template: + spec: + containers: + - name: foo + image: foo:bar + command: ['run.sh'] +`, + expected: ` +apiVersion: apps/v1 +kind: Deployment +spec: + template: + spec: + containers: + - name: foo + image: foo:bar + command: ['run2.sh'] +`}, + + // + // Test Case + // + {description: `Add a field on the elem, element present in the dest`, + origin: ` +apiVersion: apps/v1 +kind: Deployment +spec: + template: + spec: + containers: + - name: foo + image: foo:bar +`, + update: ` +apiVersion: apps/v1 +kind: Deployment +spec: + template: + spec: + containers: + - name: foo + image: foo:bar + command: ['run2.sh'] +`, + local: ` +apiVersion: apps/v1 +kind: Deployment +spec: + template: + spec: + containers: + - name: foo + image: foo:bar +`, + expected: ` +apiVersion: apps/v1 +kind: Deployment +spec: + template: + spec: + containers: + - name: foo + image: foo:bar + command: ['run2.sh'] +`}, + + // + // Test Case + // + { + description: `Add a field on the elem, element and field present in the dest`, + origin: ` +apiVersion: apps/v1 +kind: Deployment +spec: + template: + spec: + containers: + - name: foo + image: foo:bar +`, + update: ` +apiVersion: apps/v1 +kind: Deployment +spec: + template: + spec: + containers: + - name: foo + image: foo:bar + command: ['run2.sh'] +`, + local: ` +apiVersion: apps/v1 +kind: Deployment +spec: + template: + spec: + containers: + - name: foo + image: foo:bar + command: ['run.sh'] +`, + expected: ` +apiVersion: apps/v1 +kind: Deployment +spec: + template: + spec: + containers: + - name: foo + image: foo:bar + command: ['run2.sh'] +`}, + + // + // Test Case + // + { + description: `Ignore an element`, + origin: ` +apiVersion: apps/v1 +kind: Deployment +spec: + template: + spec: + containers: null +`, + update: ` +apiVersion: apps/v1 +kind: Deployment +spec: + template: + spec: + containers: null +`, + local: ` +apiVersion: apps/v1 +kind: Deployment +spec: + template: + spec: + containers: + - name: foo + image: foo:bar +`, + expected: ` +apiVersion: apps/v1 +kind: Deployment +spec: + template: + spec: + containers: + - name: foo + image: foo:bar +`}, + + // + // Test Case + // + { + description: `Leave deleted`, + origin: ` +apiVersion: apps/v1 +kind: Deployment +spec: + template: + spec: + containers: + - name: foo + image: foo:bar +`, + update: ` +apiVersion: apps/v1 +kind: Deployment +`, + local: ` +apiVersion: apps/v1 +kind: Deployment +`, + expected: ` +apiVersion: apps/v1 +kind: Deployment +`}, + + // + // Test Case + // + { + description: `Remove an element -- matching`, + origin: ` +apiVersion: apps/v1 +kind: Deployment +spec: + template: + spec: + containers: + - name: foo + image: foo:bar +`, + update: ` +apiVersion: apps/v1 +kind: Deployment +spec: + template: + spec: {} +`, + local: ` +apiVersion: apps/v1 +kind: Deployment +spec: + template: + spec: + containers: + - name: foo + image: foo:bar +`, + expected: ` +apiVersion: apps/v1 +kind: Deployment +spec: + template: + spec: {} +`}, + + // + // Test Case + // + { + description: `Remove an element -- field missing from update`, + origin: ` +apiVersion: apps/v1 +kind: Deployment +spec: + template: + spec: + containers: + - name: foo + image: foo:bar +`, + update: ` +apiVersion: apps/v1 +kind: Deployment +spec: + template: + spec: {} +`, + local: ` +apiVersion: apps/v1 +kind: Deployment +spec: + template: + spec: + containers: + - name: foo + image: foo:bar + command: ['run.sh'] +`, + expected: ` +apiVersion: apps/v1 +kind: Deployment +spec: + template: + spec: {} +`}, + + // + // Test Case + // + { + description: `Remove an element -- element missing`, + origin: ` +apiVersion: apps/v1 +kind: Deployment +spec: + template: + spec: + containers: + - name: foo + image: foo:bar + - name: baz + image: baz:bar +`, + update: ` +apiVersion: apps/v1 +kind: Deployment +spec: + template: + spec: + containers: + - name: foo + image: foo:bar +`, + local: ` +apiVersion: apps/v1 +kind: Deployment +spec: + template: + spec: + containers: + - name: foo + image: foo:bar + command: ['run.sh'] + - name: baz + image: baz:bar +`, + expected: ` +apiVersion: apps/v1 +kind: Deployment +spec: + template: + spec: + containers: + - name: foo + image: foo:bar + command: ['run.sh'] +`}, + + // + // Test Case + // + { + description: `Remove an element -- empty containers`, + origin: ` +apiVersion: apps/v1 +kind: Deployment +spec: + template: + spec: + containers: + - name: foo + image: foo:bar +`, + update: ` +apiVersion: apps/v1 +kind: Deployment +spec: + template: + spec: + containers: null +`, + local: ` +apiVersion: apps/v1 +kind: Deployment +spec: + template: + spec: + containers: + - name: foo + image: foo:bar + command: ['run.sh'] +`, + expected: ` +apiVersion: apps/v1 +kind: Deployment +spec: + template: + spec: {} +`}, + + // + // Test Case + // + { + description: `Remove an element -- missing list field`, + origin: ` +apiVersion: apps/v1 +kind: Deployment +spec: + template: + spec: + containers: + - name: foo + image: foo:bar +`, + update: ` +apiVersion: apps/v1 +kind: Deployment +spec: + template: + spec: {} +`, + local: ` +apiVersion: apps/v1 +kind: Deployment +spec: + template: + spec: + containers: + - name: foo + image: foo:bar + command: ['run.sh'] +`, + expected: ` +apiVersion: apps/v1 +kind: Deployment +spec: + template: + spec: {} +`}, + + // + // Test Case + // + { + description: `infer merge keys merge'`, + origin: ` +kind: Deployment +spec: + template: + spec: + containers: + - name: foo +`, + update: ` +kind: Deployment +spec: + template: + spec: + containers: + - name: foo + command: ['run2.sh'] +`, + local: ` +kind: Deployment +spec: + template: + spec: + containers: + - name: foo + image: foo:bar +`, + expected: ` +kind: Deployment +spec: + template: + spec: + containers: + - name: foo + image: foo:bar + command: ['run2.sh'] +`, + infer: true, + }, + + // + // Test Case + // + { + description: `no infer merge keys merge using schema`, + origin: ` +apiVersion: apps/v1 +kind: Deployment +spec: + template: + spec: + containers: + - name: foo +`, + update: ` +apiVersion: apps/v1 +kind: Deployment +spec: + template: + spec: + containers: + - name: foo + command: ['run2.sh'] +`, + local: ` +apiVersion: apps/v1 +kind: Deployment +spec: + template: + spec: + containers: + - name: foo + image: foo:bar +`, + expected: ` +apiVersion: apps/v1 +kind: Deployment +spec: + template: + spec: + containers: + - name: foo + image: foo:bar + command: ['run2.sh'] +`, + infer: false, + }, + + // + // Test Case + // + { + description: `no infer merge keys merge using explicit schema as line comment'`, + origin: ` +apiVersion: custom +kind: Deployment +spec: + template: + spec: + containers: + - name: foo +`, + update: ` +apiVersion: custom +kind: Deployment +spec: + template: + spec: + containers: + - name: foo + command: ['run2.sh'] +`, + local: ` +apiVersion: custom +kind: Deployment +spec: + template: + spec: + containers: # {"items":{"$ref": "#/definitions/io.k8s.api.core.v1.Container"},"type":"array","x-kubernetes-patch-merge-key":"name","x-kubernetes-patch-strategy": "merge"} + - name: foo # hell ow + image: foo:bar +`, + expected: ` +apiVersion: custom +kind: Deployment +spec: + template: + spec: + containers: # {"items":{"$ref": "#/definitions/io.k8s.api.core.v1.Container"},"type":"array","x-kubernetes-patch-merge-key":"name","x-kubernetes-patch-strategy": "merge"} + - name: foo # hell ow + image: foo:bar + command: ['run2.sh'] +`, + infer: false, + }, + + // + // Test Case + // + { + description: `no infer merge keys merge using explicit schema as head comment'`, + origin: ` +apiVersion: custom +kind: Deployment +spec: + template: + spec: + containers: + - name: foo +`, + update: ` +apiVersion: custom +kind: Deployment +spec: + template: + spec: + containers: + - name: foo + command: ['run2.sh'] +`, + local: ` +apiVersion: custom +kind: Deployment +spec: + template: + spec: + # {"items":{"$ref": "#/definitions/io.k8s.api.core.v1.Container"},"type":"array","x-kubernetes-patch-merge-key":"name","x-kubernetes-patch-strategy": "merge"} + containers: + - name: foo # hell ow + image: foo:bar +`, + expected: ` +apiVersion: custom +kind: Deployment +spec: + template: + spec: + # {"items":{"$ref": "#/definitions/io.k8s.api.core.v1.Container"},"type":"array","x-kubernetes-patch-merge-key":"name","x-kubernetes-patch-strategy": "merge"} + containers: + - name: foo # hell ow + image: foo:bar + command: ['run2.sh'] +`, + infer: false, + }, + + // + // Test Case + // + { + description: `no infer merge keys merge using explicit schema to parent field'`, + origin: ` +apiVersion: custom +kind: Deployment +spec: + containers: + - name: foo +`, + update: ` +apiVersion: custom +kind: Deployment +spec: + containers: + - name: foo + command: ['run2.sh'] +`, + local: ` +apiVersion: custom +kind: Deployment +spec: # {"$ref":"#/definitions/io.k8s.api.core.v1.PodSpec"} + containers: + - name: foo # hell ow + image: foo:bar +`, + expected: ` +apiVersion: custom +kind: Deployment +spec: # {"$ref":"#/definitions/io.k8s.api.core.v1.PodSpec"} + containers: + - name: foo # hell ow + image: foo:bar + command: ['run2.sh'] +`, + infer: false, + }, + + // + // Test Case + // + { + description: `no infer merge keys merge using explicit schema to parent field header'`, + origin: ` +apiVersion: custom +kind: Deployment +spec: + containers: + - name: foo +`, + update: ` +apiVersion: custom +kind: Deployment +spec: + containers: + - name: foo + command: ['run2.sh'] +`, + local: ` +apiVersion: custom +kind: Deployment +# {"$ref":"#/definitions/io.k8s.api.core.v1.PodSpec"} +spec: + containers: + - name: foo # hell ow + image: foo:bar +`, + expected: ` +apiVersion: custom +kind: Deployment +# {"$ref":"#/definitions/io.k8s.api.core.v1.PodSpec"} +spec: + containers: + - name: foo # hell ow + image: foo:bar + command: ['run2.sh'] +`, + infer: false, + }, + + // The following test cases are regression tests + // that should not be broken as a result of + // #3111, #3159 + + // + // Test Case + // + { + description: `Add a containerPort to an existing list`, + origin: ` +apiVersion: apps/v1 +kind: Deployment +spec: + template: + spec: + containers: + - image: test-image + name: test-deployment + ports: + - containerPort: 8080 +`, + update: ` +apiVersion: apps/v1 +kind: Deployment +spec: + template: + spec: + containers: + - image: test-image + name: test-deployment + ports: + - containerPort: 8080 + - containerPort: 80 +`, + local: ` +apiVersion: apps/v1 +kind: Deployment +spec: + template: + spec: + containers: + - image: test-image + name: test-deployment + ports: + - containerPort: 8080 +`, + expected: ` +apiVersion: apps/v1 +kind: Deployment +spec: + template: + spec: + containers: + - image: test-image + name: test-deployment + ports: + - containerPort: 8080 + - containerPort: 80 +`}, + + // + // Test Case + // + { + description: `Add a containerPort to a non-existing list, existing in dest`, + origin: ` +apiVersion: apps/v1 +kind: Deployment`, + update: ` +apiVersion: apps/v1 +kind: Deployment +spec: + template: + spec: + containers: + - image: test-image + name: test-deployment + ports: + - containerPort: 8080 +`, + local: ` +apiVersion: apps/v1 +kind: Deployment +spec: + template: + spec: + containers: + - image: test-image + name: test-deployment + ports: + - containerPort: 80 +`, + expected: ` +apiVersion: apps/v1 +kind: Deployment +spec: + template: + spec: + containers: + - image: test-image + name: test-deployment + ports: + - containerPort: 80 + - containerPort: 8080 +`}, + + // + // Test Case + // + { + description: `Add a name to containerPort`, + origin: ` +apiVersion: apps/v1 +kind: Deployment +spec: + template: + spec: + containers: + - image: test-image + name: test-deployment + ports: + - containerPort: 8080 +`, + update: ` +apiVersion: apps/v1 +kind: Deployment +spec: + template: + spec: + containers: + - image: test-image + name: test-deployment + ports: + - containerPort: 8080 + name: 8080-port-update + - containerPort: 80 +`, + local: ` +apiVersion: apps/v1 +kind: Deployment +spec: + template: + spec: + containers: + - image: test-image + name: test-deployment + ports: + - containerPort: 8080 + - containerPort: 80 +`, + expected: ` +apiVersion: apps/v1 +kind: Deployment +spec: + template: + spec: + containers: + - image: test-image + name: test-deployment + ports: + - containerPort: 8080 + name: 8080-port-update + - containerPort: 80 +`}, + // + // Test Case + // + { + description: `Update protocol for a port`, + origin: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: test-deployment +spec: + template: + spec: + containers: + - image: test-image + name: test-deployment + ports: + - containerPort: 8080 + protocol: UDP +`, + update: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: test-deployment +spec: + template: + spec: + containers: + - image: test-image + name: test-deployment + ports: + - containerPort: 8080 + protocol: TCP +`, + local: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: test-deployment +spec: + template: + spec: + containers: + - image: test-image + name: test-deployment + ports: + - containerPort: 8080 + protocol: UDP +`, + expected: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: test-deployment +spec: + template: + spec: + containers: + - image: test-image + name: test-deployment + ports: + - containerPort: 8080 + protocol: TCP +`}, + // + // Test Case + // + { + description: `Append container port`, + origin: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: test-deployment +spec: + template: + spec: + containers: + - image: test-image + name: test-deployment + ports: + - containerPort: 8080 + protocol: UDP +`, + update: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: test-deployment +spec: + template: + spec: + containers: + - image: test-image + name: test-deployment + ports: + - containerPort: 8080 + protocol: TCP +`, + local: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: test-deployment +spec: + template: + spec: + containers: + - image: test-image + name: test-deployment + ports: + - containerPort: 80 + protocol: HTTP +`, + expected: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: test-deployment +spec: + template: + spec: + containers: + - image: test-image + name: test-deployment + ports: + - containerPort: 80 + protocol: HTTP + - containerPort: 8080 + protocol: TCP +`}, + + { + description: `Update container-port name`, + origin: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: test-deployment +spec: + template: + spec: + containers: + - image: test-image + name: test-deployment + ports: + - containerPort: 8080 + protocol: UDP + name: foo +`, + update: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: test-deployment +spec: + template: + spec: + containers: + - image: test-image + name: test-deployment + ports: + - containerPort: 8080 + protocol: TCP + name: bar +`, + local: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: test-deployment +spec: + template: + spec: + containers: + - image: test-image + name: test-deployment + ports: + - containerPort: 8080 + protocol: TCP + name: foo +`, + expected: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: test-deployment +spec: + template: + spec: + containers: + - image: test-image + name: test-deployment + ports: + - containerPort: 8080 + protocol: TCP + name: bar +`}, + + // + // Test Case + // + { + description: `Add a containerPort with protocol to an existing list`, + origin: ` +apiVersion: apps/v1 +kind: Deployment +spec: + template: + spec: + containers: + - image: test-image + name: test-deployment + ports: + - containerPort: 8080 + protocol: UDP +`, + update: ` +apiVersion: apps/v1 +kind: Deployment +spec: + template: + spec: + containers: + - image: test-image + name: test-deployment + ports: + - containerPort: 8080 + protocol: UDP + - containerPort: 8080 + protocol: TCP +`, + local: ` +apiVersion: apps/v1 +kind: Deployment +spec: + template: + spec: + containers: + - image: test-image + name: test-deployment + ports: + - containerPort: 8080 + protocol: UDP +`, + expected: ` +apiVersion: apps/v1 +kind: Deployment +spec: + template: + spec: + containers: + - image: test-image + name: test-deployment + ports: + - containerPort: 8080 + protocol: UDP + - containerPort: 8080 + protocol: TCP +`}, + + // + // Test Case + // + { + description: `Add a containerPort with protocol to a non-existing list, existing in dest`, + origin: ` +apiVersion: apps/v1 +kind: Deployment`, + update: ` +apiVersion: apps/v1 +kind: Deployment +spec: + template: + spec: + containers: + - image: test-image + name: test-deployment + ports: + - containerPort: 8080 + protocol: UDP +`, + local: ` +apiVersion: apps/v1 +kind: Deployment +spec: + template: + spec: + containers: + - image: test-image + name: test-deployment + ports: + - containerPort: 8080 + protocol: TCP +`, + expected: ` +apiVersion: apps/v1 +kind: Deployment +spec: + template: + spec: + containers: + - image: test-image + name: test-deployment + ports: + - containerPort: 8080 + protocol: TCP + - containerPort: 8080 + protocol: UDP +`}, + + // + // Test Case + // + { + description: `Merge with name for same container-port`, + origin: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: test-deployment +spec: + template: + spec: + containers: + - image: test-image + name: test-deployment + ports: + - containerPort: 8080 + protocol: UDP + name: original +`, + update: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: test-deployment +spec: + template: + spec: + containers: + - image: test-image + name: test-deployment + ports: + - containerPort: 8080 + protocol: UDP + name: original + - containerPort: 8080 + protocol: TCP + name: updated +`, + local: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: test-deployment +spec: + template: + spec: + containers: + - image: test-image + name: test-deployment + ports: + - containerPort: 8080 + protocol: UDP + name: original + - containerPort: 8080 + protocol: HTTP + name: local +`, + expected: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: test-deployment +spec: + template: + spec: + containers: + - image: test-image + name: test-deployment + ports: + - containerPort: 8080 + protocol: UDP + name: original + - containerPort: 8080 + protocol: HTTP + name: local + - containerPort: 8080 + name: updated + protocol: TCP +`}, + + // + // Test Case + // + { + description: `Add single container port and add another container port after an existing container port`, + origin: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: test-deployment +spec: + template: + spec: + containers: + - image: test-image + name: test-deployment + ports: + - containerPort: 8001 + name: A + protocol: TCP + - containerPort: 8002 + name: B + protocol: TCP +`, + update: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: test-deployment +spec: + template: + spec: + containers: + - image: test-image + name: test-deployment + ports: + - containerPort: 8004 + name: D + protocol: TCP +`, + local: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: test-deployment +spec: + template: + spec: + containers: + - image: test-image + name: test-deployment + ports: + - containerPort: 8001 + name: A + protocol: TCP + - containerPort: 8003 + name: C + protocol: TCP +`, + // This test records current behavior, but this behavior might be undesirable. + // If so, feel free to change the test to pass with some improved algorithm. + expected: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: test-deployment +spec: + template: + spec: + containers: + - image: test-image + name: test-deployment + ports: + - containerPort: 8003 + name: C + protocol: TCP + - containerPort: 8004 + name: D + protocol: TCP +`}, + + // + // Test Case + // + { + description: `Add new container port after existing container ports and add another container port between existing container ports`, + origin: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: test-deployment +spec: + template: + spec: + containers: + - image: test-image + name: test-deployment + ports: + - containerPort: 8001 + name: A + protocol: TCP + - containerPort: 8002 + name: B + protocol: TCP +`, + update: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: test-deployment +spec: + template: + spec: + containers: + - image: test-image + name: test-deployment + ports: + - containerPort: 8001 + name: A + protocol: TCP + - containerPort: 8002 + name: B + protocol: TCP + - containerPort: 8004 + name: D + protocol: TCP +`, + local: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: test-deployment +spec: + template: + spec: + containers: + - image: test-image + name: test-deployment + ports: + - containerPort: 8001 + name: A + protocol: TCP + - containerPort: 8003 + name: C + protocol: TCP + - containerPort: 8002 + name: B + protocol: TCP +`, + expected: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: test-deployment +spec: + template: + spec: + containers: + - image: test-image + name: test-deployment + ports: + - containerPort: 8001 + name: A + protocol: TCP + - containerPort: 8003 + name: C + protocol: TCP + - containerPort: 8002 + name: B + protocol: TCP + - containerPort: 8004 + name: D + protocol: TCP +`}, + + { + description: `Retain local protocol`, + origin: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: test-deployment +spec: + template: + spec: + containers: + - image: test-image + name: test-deployment + ports: + - containerPort: 8080 + protocol: UDP +`, + update: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: test-deployment +spec: + template: + spec: + containers: + - image: test-image + name: test-deployment + ports: + - containerPort: 8080 + protocol: TCP +`, + local: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: test-deployment +spec: + template: + spec: + containers: + - image: test-image + name: test-deployment + ports: + - containerPort: 8080 + protocol: HTTP +`, + expected: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: test-deployment +spec: + template: + spec: + containers: + - image: test-image + name: test-deployment + ports: + - containerPort: 8080 + protocol: HTTP + - containerPort: 8080 + protocol: TCP +`}, +} diff --git a/go/internal/forked/kyaml/yaml/merge3/kustomization_test.go b/go/internal/forked/kyaml/yaml/merge3/kustomization_test.go new file mode 100644 index 000000000..4eeac4f97 --- /dev/null +++ b/go/internal/forked/kyaml/yaml/merge3/kustomization_test.go @@ -0,0 +1,94 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package merge3_test + +var kustomizationTestCases = []testCase{ + // Kustomization Test Cases + + { + description: `ConfigMapGenerator merge`, + origin: ` +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization +configMapGenerator: +- name: a-configmap1 + files: + - configs/configfile1 + - configkey=configs/another_configfile1`, + update: ` +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization +configMapGenerator: +- files: + - configs/configfile2 + - configkey=configs/another_configfile2 + name: a-configmap2`, + local: ` +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization +configMapGenerator: +- name: a-configmap1 + files: + - configs/configfile1 + - configkey=configs/another_configfile1 +- name: a-configmap3 + files: + - configs/configfile3 + - configkey=configs/another_configfile3`, + expected: ` +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization +configMapGenerator: +- name: a-configmap3 + files: + - configs/configfile3 + - configkey=configs/another_configfile3 +- files: + - configs/configfile2 + - configkey=configs/another_configfile2 + name: a-configmap2`}, + + { + description: `SecretGenerator merge`, + origin: ` +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization +secretGenerator: +- name: a-secret1 + files: + - configs/configfile1 + - configkey=configs/another_configfile1`, + update: ` +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization +secretGenerator: +- files: + - configs/configfile2 + - configkey=configs/another_configfile2 + name: a-secret2`, + local: ` +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization +secretGenerator: +- name: a-secret1 + files: + - configs/configfile1 + - configkey=configs/another_configfile1 +- name: a-secret3 + files: + - configs/configfile3 + - configkey=configs/another_configfile3`, + expected: ` +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization +secretGenerator: +- name: a-secret3 + files: + - configs/configfile3 + - configkey=configs/another_configfile3 +- files: + - configs/configfile2 + - configkey=configs/another_configfile2 + name: a-secret2`}, +} diff --git a/go/internal/forked/kyaml/yaml/merge3/list_test.go b/go/internal/forked/kyaml/yaml/merge3/list_test.go new file mode 100644 index 000000000..72edfbd66 --- /dev/null +++ b/go/internal/forked/kyaml/yaml/merge3/list_test.go @@ -0,0 +1,339 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package merge3_test + +var listTestCases = []testCase{ + // List Field Test Cases + + // + // Test Case + // + { + description: `Replace list`, + origin: ` +list: +- 1 +- 2 +- 3`, + update: ` +list: +- 2 +- 3 +- 4`, + local: ` +list: +- 1 +- 2 +- 3`, + expected: ` +list: +- 2 +- 3 +- 4`}, + + // + // Test Case + // + { + description: `Add an updated list`, + origin: ` +apiVersion: apps/v1 +list: # old value +- 1 +- 2 +- 3 +`, + update: ` +apiVersion: apps/v1 +list: # new value +- 2 +- 3 +- 4 +`, + local: ` +apiVersion: apps/v1`, + expected: ` +apiVersion: apps/v1 +list: # new value +- 2 +- 3 +- 4 +`}, + + // + // Test Case + // + { + description: `Update comment`, + origin: ` +list: # comment +- 1 +- 2 +- 3`, + update: ` +list: # updated comment +- 2 +- 3 +- 4`, + local: ` +list: # comment +- 1 +- 2 +- 3`, + expected: ` +list: # updated comment +- 2 +- 3 +- 4`}, + + // + // Test Case + // + { + description: `Don't update local modified comment`, + origin: ` +list: # origin comment +- 1 +- 2 +- 3`, + update: ` +list: # updated comment +- 2 +- 3 +- 4`, + local: ` +list: # local comment +- 1 +- 2 +- 3`, + expected: ` +list: # local comment +- 2 +- 3 +- 4`}, + + // + // Test Case + // + { + description: `Don't add local deleted comment`, + origin: ` +list: # origin comment +- 1 +- 2 +- 3`, + update: ` +list: # updated comment +- 2 +- 3 +- 4`, + local: ` +list: +- 1 +- 2 +- 3`, + expected: ` +list: +- 2 +- 3 +- 4`}, + + { + description: `Add update with comment`, + origin: ` +apiVersion: apps/v1 +`, + update: ` +list: # updated comment +- 2 +- 3 +- 4`, + local: ` +apiVersion: apps/v1`, + expected: ` +list: # updated comment +- 2 +- 3 +- 4`}, + + // + // Test Case + // + { + description: `Add keep an omitted field`, + origin: ` +apiVersion: apps/v1 +kind: Deployment`, + update: ` +apiVersion: apps/v1 +kind: StatefulSet`, + local: ` +apiVersion: apps/v1 +list: # not present in sources +- 2 +- 3 +- 4 +`, + expected: ` +apiVersion: apps/v1 +list: # not present in sources +- 2 +- 3 +- 4 +kind: StatefulSet +`}, + + // + // Test Case + // + // TODO(#36): consider making this an error + { + description: `Change an updated field`, + origin: ` +apiVersion: apps/v1 +list: # old value +- 1 +- 2 +- 3`, + update: ` +apiVersion: apps/v1 +list: # new value +- 2 +- 3 +- 4`, + local: ` +apiVersion: apps/v1 +list: # conflicting value +- a +- b +- c`, + expected: ` +apiVersion: apps/v1 +list: # conflicting value +- 2 +- 3 +- 4 +`}, + + // + // Test Case + // + { + description: `Ignore a field -- set`, + origin: ` +apiVersion: apps/v1 +list: # ignore value +- 1 +- 2 +- 3 +`, + update: ` +apiVersion: apps/v1 +list: # ignore value +- 1 +- 2 +- 3`, + local: ` +apiVersion: apps/v1 +list: # local comment +- 2 +- 3 +- 4 +`, + expected: ` +apiVersion: apps/v1 +list: # local comment +- 2 +- 3 +- 4 +`}, + + // + // Test Case + // + { + description: `Ignore a field -- empty`, + origin: ` +apiVersion: apps/v1 +list: # ignore value +- 1 +- 2 +- 3`, + update: ` +apiVersion: apps/v1 +list: # ignore value +- 1 +- 2 +- 3`, + local: ` +apiVersion: apps/v1 +`, + expected: ` +apiVersion: apps/v1 +`}, + + // + // Test Case + // + { + description: `Explicitly clear a field`, + origin: ` +apiVersion: apps/v1`, + update: ` +apiVersion: apps/v1 +list: null # clear`, + local: ` +apiVersion: apps/v1 +list: # value to clear +- 1 +- 2 +- 3`, + expected: ` +apiVersion: apps/v1`}, + + // + // Test Case + // + { + description: `Implicitly clear a field`, + origin: ` +apiVersion: apps/v1 +list: # clear value +- 1 +- 2 +- 3`, + update: ` +apiVersion: apps/v1`, + local: ` +apiVersion: apps/v1 +list: # old value +- 1 +- 2 +- 3`, + expected: ` +apiVersion: apps/v1`}, + + // + // Test Case + // + // TODO(#36): consider making this an error + { + description: `Implicitly clear a changed field`, + origin: ` +apiVersion: apps/v1 +list: # old value +- 1 +- 2 +- 3`, + update: ` +apiVersion: apps/v1`, + local: ` +apiVersion: apps/v1 +list: # old value +- a +- b +- c`, + expected: ` +apiVersion: apps/v1`}, +} diff --git a/go/internal/forked/kyaml/yaml/merge3/map_test.go b/go/internal/forked/kyaml/yaml/merge3/map_test.go new file mode 100644 index 000000000..4875ae76c --- /dev/null +++ b/go/internal/forked/kyaml/yaml/merge3/map_test.go @@ -0,0 +1,309 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package merge3_test + +var mapTestCases = []testCase{ + // + // Test Case + // + { + description: `Add the annotations map field`, + origin: ` +kind: Deployment`, + update: ` +kind: Deployment +metadata: + annotations: + d: e # add these annotations +`, + local: ` +kind: Deployment`, + expected: ` +kind: Deployment +metadata: + annotations: + d: e # add these annotations`}, + + // + // Test Case + // + { + description: `Add an annotation to the field`, + origin: ` +kind: Deployment +metadata: + annotations: + a: b`, + update: ` +kind: Deployment +metadata: + annotations: + a: b + d: e # add these annotations`, + local: ` +kind: Deployment +metadata: + annotations: + g: h # keep these annotations`, + expected: ` +kind: Deployment +metadata: + annotations: + g: h # keep these annotations + d: e # add these annotations`}, + + // + // Test Case + // + { + description: `Add an annotation to the field, field missing from dest`, + origin: ` +kind: Deployment +metadata: + annotations: + a: b # ignored because unchanged`, + update: ` +kind: Deployment +metadata: + annotations: + a: b # ignored because unchanged + d: e`, + local: ` +kind: Deployment`, + expected: ` +kind: Deployment +metadata: + annotations: + d: e`}, + + // + // Test Case + // + { + description: `Update an annotation on the field, field messing rom the dest`, + origin: ` +kind: Deployment +metadata: + annotations: + a: b + d: c`, + update: ` +kind: Deployment +metadata: + annotations: + a: b + d: e # set these annotations`, + local: ` +kind: Deployment +metadata: + annotations: + g: h # keep these annotations`, + expected: ` +kind: Deployment +metadata: + annotations: + g: h # keep these annotations + d: e # set these annotations`}, + + // + // Test Case + // + { + description: `Add an annotation to the field, field missing from dest`, + origin: ` +kind: Deployment +metadata: + annotations: + a: b # ignored because unchanged`, + update: ` +kind: Deployment +metadata: + annotations: + a: b # ignored because unchanged + d: e`, + local: ` +kind: Deployment`, + expected: ` +kind: Deployment +metadata: + annotations: + d: e`}, + + // + // Test Case + // + { + description: `Remove an annotation`, + origin: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + annotations: + a: b`, + update: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + annotations: {}`, + local: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + annotations: + c: d + a: b`, + expected: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + annotations: + c: d`}, + + // + // Test Case + // + // TODO(#36) support ~annotations~: {} deletion + { + description: `Specify a field as empty that isn't present in the source`, + origin: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: foo`, + update: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: foo + annotations: null`, + local: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: foo + annotations: + a: b`, + expected: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: foo`}, + + // + // Test Case + // + { + description: `Remove an annotation`, + origin: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + annotations: + a: b`, + update: ` +apiVersion: apps/v1 +kind: Deployment`, + local: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + annotations: + c: d + a: b`, + expected: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + annotations: + c: d`}, + + // + // Test Case + // + { + description: `Remove annotations field`, + origin: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + annotations: + a: b`, + update: ` +apiVersion: apps/v1 +kind: Deployment`, + local: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: foo`, + expected: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: foo +`}, + + // + // Test Case + // + { + description: `Remove annotations field, but keep in dest`, + origin: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + annotations: + a: b`, + update: ` +apiVersion: apps/v1 +kind: Deployment`, + local: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: foo + annotations: + foo: bar # keep this annotation even though the parent field was removed`, + expected: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: foo + annotations: + foo: bar # keep this annotation even though the parent field was removed`}, + + // + // Test Case + // + { + description: `Remove annotations, but they are already empty`, + origin: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: foo + annotations: + a: b +`, + update: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: foo +`, + local: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: foo + annotations: {} +`, + expected: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: foo + annotations: {} +`}, +} diff --git a/go/internal/forked/kyaml/yaml/merge3/merge3.go b/go/internal/forked/kyaml/yaml/merge3/merge3.go new file mode 100644 index 000000000..386fdff41 --- /dev/null +++ b/go/internal/forked/kyaml/yaml/merge3/merge3.go @@ -0,0 +1,45 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +// Package merge contains libraries for merging fields from one RNode to another +// RNode +package merge3 + +import ( + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml/walk" +) + +func Merge(dest, original, update *yaml.RNode) (*yaml.RNode, error) { + // if update == nil && original != nil => declarative deletion + + return walk.Walker{ + Visitor: Visitor{}, + VisitKeysAsScalars: true, + Sources: []*yaml.RNode{dest, original, update}}.Walk() +} + +func MergeStrings(dest, original, update string, infer bool) (string, error) { + srcOriginal, err := yaml.Parse(original) + if err != nil { + return "", err + } + srcUpdated, err := yaml.Parse(update) + if err != nil { + return "", err + } + d, err := yaml.Parse(dest) + if err != nil { + return "", err + } + + result, err := walk.Walker{ + InferAssociativeLists: infer, + Visitor: Visitor{}, + VisitKeysAsScalars: true, + Sources: []*yaml.RNode{d, srcOriginal, srcUpdated}}.Walk() + if err != nil { + return "", err + } + return result.String() +} diff --git a/go/internal/forked/kyaml/yaml/merge3/merge3_test.go b/go/internal/forked/kyaml/yaml/merge3/merge3_test.go new file mode 100644 index 000000000..bbbd78f5b --- /dev/null +++ b/go/internal/forked/kyaml/yaml/merge3/merge3_test.go @@ -0,0 +1,51 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package merge3_test + +import ( + "strings" + "testing" + + "github.com/stretchr/testify/assert" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml/merge3" +) + +var testCases = [][]testCase{scalarTestCases, listTestCases, mapTestCases, elementTestCases, kustomizationTestCases} + +func TestMerge(t *testing.T) { + for i := range testCases { + for j := range testCases[i] { + tc := testCases[i][j] + t.Run(tc.description, func(t *testing.T) { + actual, err := merge3.MergeStrings(tc.local, tc.origin, tc.update, tc.infer) + if tc.err == nil { + if !assert.NoError(t, err, tc.description) { + t.FailNow() + } + if !assert.Equal(t, + strings.TrimSpace(tc.expected), strings.TrimSpace(actual), tc.description) { + t.FailNow() + } + } else { + if !assert.Errorf(t, err, tc.description) { + t.FailNow() + } + if !assert.Contains(t, tc.err.Error(), err.Error()) { + t.FailNow() + } + } + }) + } + } +} + +type testCase struct { + description string + origin string + update string + local string + expected string + err error + infer bool +} diff --git a/go/internal/forked/kyaml/yaml/merge3/scalar_test.go b/go/internal/forked/kyaml/yaml/merge3/scalar_test.go new file mode 100644 index 000000000..a3aa85153 --- /dev/null +++ b/go/internal/forked/kyaml/yaml/merge3/scalar_test.go @@ -0,0 +1,296 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package merge3_test + +var scalarTestCases = []testCase{ + // Scalar Field Test Cases + // + // Test Case + // + { + description: `Set and updated a field`, + origin: `kind: Deployment`, + update: `kind: StatefulSet`, + local: `kind: Deployment`, + expected: `kind: StatefulSet`}, + + { + description: `Add an updated field`, + origin: ` +apiVersion: apps/v1 +kind: Deployment # old value`, + update: ` +apiVersion: apps/v1 +kind: StatefulSet # new value`, + local: ` +apiVersion: apps/v1`, + expected: ` +apiVersion: apps/v1 +kind: StatefulSet # new value`}, + + // + // Test Case + // + { + description: `Ensure comments are added`, + origin: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: nginx-deployment + annotations: + config.kubernetes.io/index: '0' + config.kubernetes.io/merge-source: 'dest' + config.kubernetes.io/path: 'temp.yaml' +spec: + replicas: 3`, + update: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: nginx-deployment + annotations: + config.kubernetes.io/index: '0' + config.kubernetes.io/merge-source: 'updated' + config.kubernetes.io/path: 'temp.yaml' +spec: + replicas: 3 # {"$openapi":"replicas"}`, + local: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: nginx-deployment + annotations: + config.kubernetes.io/index: '0' + config.kubernetes.io/merge-source: 'original' + config.kubernetes.io/path: 'temp.yaml' +spec: + replicas: 3 +`, + expected: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: nginx-deployment + annotations: + config.kubernetes.io/index: '0' + config.kubernetes.io/merge-source: 'updated' + config.kubernetes.io/path: 'temp.yaml' +spec: + replicas: 3 # {"$openapi":"replicas"} +`}, + + // + // Test Case + // + { + description: `Ensure comments are updated`, + origin: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: nginx-deployment + annotations: + config.kubernetes.io/index: '0' + config.kubernetes.io/merge-source: 'dest' + config.kubernetes.io/path: 'temp.yaml' +spec: + replicas: 3 # {"$openapi":"replicas"}`, + update: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: nginx-deployment + annotations: + config.kubernetes.io/index: '0' + config.kubernetes.io/merge-source: 'updated' + config.kubernetes.io/path: 'temp.yaml' +spec: + replicas: 3 # {"$openapi":"replicas_new"}`, + local: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: nginx-deployment + annotations: + config.kubernetes.io/index: '0' + config.kubernetes.io/merge-source: 'original' + config.kubernetes.io/path: 'temp.yaml' +spec: + replicas: 3 # {"$openapi":"replicas"} +`, + expected: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: nginx-deployment + annotations: + config.kubernetes.io/index: '0' + config.kubernetes.io/merge-source: 'updated' + config.kubernetes.io/path: 'temp.yaml' +spec: + replicas: 3 # {"$openapi":"replicas_new"} +`}, + + { + description: `Ensure deleted comments are not updated`, + origin: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: nginx-deployment + annotations: + config.kubernetes.io/index: '0' + config.kubernetes.io/merge-source: 'dest' + config.kubernetes.io/path: 'temp.yaml' +spec: + replicas: 3 # {"$openapi":"replicas"}`, + update: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: nginx-deployment + annotations: + config.kubernetes.io/index: '0' + config.kubernetes.io/merge-source: 'updated' + config.kubernetes.io/path: 'temp.yaml' +spec: + replicas: 3 # {"$openapi":"replicas"}`, + local: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: nginx-deployment + annotations: + config.kubernetes.io/index: '0' + config.kubernetes.io/merge-source: 'original' + config.kubernetes.io/path: 'temp.yaml' +spec: + replicas: 4 +`, + expected: ` +apiVersion: apps/v1 +kind: Deployment +metadata: + name: nginx-deployment + annotations: + config.kubernetes.io/index: '0' + config.kubernetes.io/merge-source: 'updated' + config.kubernetes.io/path: 'temp.yaml' +spec: + replicas: 4 +`}, + + { + description: `Add keep an omitted field`, + origin: ` +apiVersion: apps/v1 +kind: Deployment`, + update: ` +apiVersion: apps/v1 +kind: StatefulSet`, + local: ` +apiVersion: apps/v1 +spec: foo # field not present in source +`, + expected: ` +apiVersion: apps/v1 +spec: foo # field not present in source +kind: StatefulSet +`}, + + // + // Test Case + // + // TODO(#36): consider making this an error + { + description: `Change an updated field`, + origin: ` +apiVersion: apps/v1 +kind: Deployment # old value`, + update: ` +apiVersion: apps/v1 +kind: StatefulSet # new value`, + local: ` +apiVersion: apps/v1 +kind: Service # conflicting value`, + expected: ` +apiVersion: apps/v1 +kind: StatefulSet # new value`}, + + { + description: `Ignore a field`, + origin: ` +apiVersion: apps/v1 +kind: Deployment # ignore this field`, + update: ` +apiVersion: apps/v1 +kind: Deployment # ignore this field`, + local: ` +apiVersion: apps/v1`, + expected: ` +apiVersion: apps/v1`}, + + { + description: `Explicitly clear a field`, + origin: ` +apiVersion: apps/v1`, + update: ` +apiVersion: apps/v1 +kind: null # clear this value`, + local: ` +apiVersion: apps/v1 +kind: Deployment # value to be cleared`, + expected: ` +apiVersion: apps/v1`}, + + {description: `Implicitly clear a field`, + origin: ` +apiVersion: apps/v1 +kind: Deployment # clear this field`, + update: ` +apiVersion: apps/v1`, + local: ` +apiVersion: apps/v1 +kind: Deployment # clear this field`, + expected: ` +apiVersion: apps/v1`}, + + // + // Test Case + // + // TODO(#36): consider making this an error + { + description: `Implicitly clear a changed field`, + origin: ` +apiVersion: apps/v1 +kind: Deployment`, + update: ` +apiVersion: apps/v1`, + local: ` +apiVersion: apps/v1 +kind: StatefulSet`, + expected: ` +apiVersion: apps/v1`}, + + // + // Test Case + // + { + description: `Merge an empty scalar value`, + origin: ` +apiVersion: apps/v1 +`, + update: ` +apiVersion: apps/v1 +kind: {} +`, + local: ` +apiVersion: apps/v1 +`, + expected: ` +apiVersion: apps/v1 +kind: {} +`}, +} diff --git a/go/internal/forked/kyaml/yaml/merge3/visitor.go b/go/internal/forked/kyaml/yaml/merge3/visitor.go new file mode 100644 index 000000000..89472a708 --- /dev/null +++ b/go/internal/forked/kyaml/yaml/merge3/visitor.go @@ -0,0 +1,172 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package merge3 + +import ( + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/openapi" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml/walk" +) + +type ConflictStrategy uint + +const ( + // TODO: Support more strategies + TakeUpdate ConflictStrategy = 1 + iota +) + +type Visitor struct{} + +func (m Visitor) VisitMap(nodes walk.Sources, s *openapi.ResourceSchema) (*yaml.RNode, error) { + if nodes.Updated().IsTaggedNull() || nodes.Dest().IsTaggedNull() { + // explicitly cleared from either dest or update + return walk.ClearNode, nil + } + if nodes.Dest() == nil && nodes.Updated() == nil { + // implicitly cleared missing from both dest and update + return walk.ClearNode, nil + } + + if nodes.Dest() == nil { + // not cleared, but missing from the dest + // initialize a new value that can be recursively merged + return yaml.NewRNode(&yaml.Node{Kind: yaml.MappingNode}), nil + } + + // recursively merge the dest with the original and updated + return nodes.Dest(), nil +} + +func (m Visitor) visitAList(nodes walk.Sources, _ *openapi.ResourceSchema) (*yaml.RNode, error) { + if yaml.IsMissingOrNull(nodes.Updated()) && !yaml.IsMissingOrNull(nodes.Origin()) { + // implicitly cleared from update -- element was deleted + return walk.ClearNode, nil + } + if yaml.IsMissingOrNull(nodes.Dest()) { + // not cleared, but missing from the dest + // initialize a new value that can be recursively merged + return yaml.NewRNode(&yaml.Node{Kind: yaml.SequenceNode}), nil + } + + // recursively merge the dest with the original and updated + return nodes.Dest(), nil +} + +func (m Visitor) VisitScalar(nodes walk.Sources, s *openapi.ResourceSchema) (*yaml.RNode, error) { + if nodes.Updated().IsTaggedNull() || nodes.Dest().IsTaggedNull() { + // explicitly cleared from either dest or update + return nil, nil + } + if yaml.IsMissingOrNull(nodes.Updated()) != yaml.IsMissingOrNull(nodes.Origin()) { + // value added or removed in update + return nodes.Updated(), nil + } + if yaml.IsMissingOrNull(nodes.Updated()) && yaml.IsMissingOrNull(nodes.Origin()) { + // value added or removed in update + return nodes.Dest(), nil + } + + values, err := m.getStrValues(nodes) + if err != nil { + return nil, err + } + + if (values.Dest == "" || values.Dest == values.Origin) && values.Origin != values.Update { + // if local is nil or is unchanged but there is new update + return nodes.Updated(), nil + } + + if nodes.Updated().YNode().Value != nodes.Origin().YNode().Value { + // value changed in update + return nodes.Updated(), nil + } + + // unchanged between origin and update, keep the dest + return nodes.Dest(), nil +} + +func (m Visitor) visitNAList(nodes walk.Sources) (*yaml.RNode, error) { + if nodes.Updated().IsTaggedNull() || nodes.Dest().IsTaggedNull() { + // explicitly cleared from either dest or update + return walk.ClearNode, nil + } + + if yaml.IsMissingOrNull(nodes.Updated()) != yaml.IsMissingOrNull(nodes.Origin()) { + // value added or removed in update + return nodes.Updated(), nil + } + if yaml.IsMissingOrNull(nodes.Updated()) && yaml.IsMissingOrNull(nodes.Origin()) { + // value not present in source or dest + return nodes.Dest(), nil + } + + // compare origin and update values to see if they have changed + values, err := m.getStrValues(nodes) + if err != nil { + return nil, err + } + if values.Update != values.Origin { + // value changed in update + return nodes.Updated(), nil + } + + // unchanged between origin and update, keep the dest + return nodes.Dest(), nil +} + +func (m Visitor) VisitList(nodes walk.Sources, s *openapi.ResourceSchema, kind walk.ListKind) (*yaml.RNode, error) { + if kind == walk.AssociativeList { + return m.visitAList(nodes, s) + } + // non-associative list + return m.visitNAList(nodes) +} + +func (m Visitor) getStrValues(nodes walk.Sources) (strValues, error) { + var uStr, oStr, dStr string + var err error + if nodes.Updated() != nil && nodes.Updated().YNode() != nil { + s := nodes.Updated().YNode().Style + defer func() { + nodes.Updated().YNode().Style = s + }() + nodes.Updated().YNode().Style = yaml.FlowStyle | yaml.SingleQuotedStyle + uStr, err = nodes.Updated().String() + if err != nil { + return strValues{}, err + } + } + if nodes.Origin() != nil && nodes.Origin().YNode() != nil { + s := nodes.Origin().YNode().Style + defer func() { + nodes.Origin().YNode().Style = s + }() + nodes.Origin().YNode().Style = yaml.FlowStyle | yaml.SingleQuotedStyle + oStr, err = nodes.Origin().String() + if err != nil { + return strValues{}, err + } + } + if nodes.Dest() != nil && nodes.Dest().YNode() != nil { + s := nodes.Dest().YNode().Style + defer func() { + nodes.Dest().YNode().Style = s + }() + nodes.Dest().YNode().Style = yaml.FlowStyle | yaml.SingleQuotedStyle + dStr, err = nodes.Dest().String() + if err != nil { + return strValues{}, err + } + } + + return strValues{Origin: oStr, Update: uStr, Dest: dStr}, nil +} + +type strValues struct { + Origin string + Update string + Dest string +} + +var _ walk.Visitor = Visitor{} diff --git a/go/internal/forked/kyaml/yaml/order.go b/go/internal/forked/kyaml/yaml/order.go new file mode 100644 index 000000000..4e01c6489 --- /dev/null +++ b/go/internal/forked/kyaml/yaml/order.go @@ -0,0 +1,107 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package yaml + +// fieldSortOrder contains the relative ordering of fields when formatting an +// object. +var fieldSortOrder = []string{ + // top-level metadata + "name", "generateName", "namespace", "clusterName", + "apiVersion", "kind", "metadata", "type", + "labels", "annotations", + "spec", "status", + + // secret and configmap + "stringData", "data", "binaryData", + + // cronjobspec, daemonsetspec, deploymentspec, statefulsetspec, + // jobspec fields + "parallelism", "completions", "activeDeadlineSeconds", "backoffLimit", + "replicas", "selector", "manualSelector", "template", + "ttlSecondsAfterFinished", "volumeClaimTemplates", "service", "serviceName", + "podManagementPolicy", "updateStrategy", "strategy", "minReadySeconds", + "revision", "revisionHistoryLimit", "paused", "progressDeadlineSeconds", + + // podspec + // podspec scalars + "restartPolicy", "terminationGracePeriodSeconds", + "activeDeadlineSeconds", "dnsPolicy", "serviceAccountName", + "serviceAccount", "automountServiceAccountToken", "nodeName", + "hostNetwork", "hostPID", "hostIPC", "shareProcessNamespace", "hostname", + "subdomain", "schedulerName", "priorityClassName", "priority", + "runtimeClassName", "enableServiceLinks", + + // podspec lists and maps + "nodeSelector", "hostAliases", + + // podspec objects + "initContainers", "containers", "volumes", "securityContext", + "imagePullSecrets", "affinity", "tolerations", "dnsConfig", + "readinessGates", + + // containers + "image", "command", "args", "workingDir", "ports", "envFrom", "env", + "resources", "volumeMounts", "volumeDevices", "livenessProbe", + "readinessProbe", "lifecycle", "terminationMessagePath", + "terminationMessagePolicy", "imagePullPolicy", "securityContext", + "stdin", "stdinOnce", "tty", + + // service + "clusterIP", "externalIPs", "loadBalancerIP", "loadBalancerSourceRanges", + "externalName", "externalTrafficPolicy", "sessionAffinity", + + // ports + "protocol", "port", "targetPort", "hostPort", "containerPort", "hostIP", + + // volumemount + "readOnly", "mountPath", "subPath", "subPathExpr", "mountPropagation", + + // envvar + envvarsource + "value", "valueFrom", "fieldRef", "resourceFieldRef", "configMapKeyRef", + "secretKeyRef", "prefix", "configMapRef", "secretRef", +} + +type set map[string]interface{} + +func newSet(values ...string) set { + m := map[string]interface{}{} + for _, value := range values { + m[value] = nil + } + return m +} + +func (s set) Has(key string) bool { + _, found := s[key] + return found +} + +// WhitelistedListSortKinds contains the set of kinds that are whitelisted +// for sorting list field elements +var WhitelistedListSortKinds = newSet( + "CronJob", "DaemonSet", "Deployment", "Job", "ReplicaSet", "StatefulSet", + "ValidatingWebhookConfiguration") + +// WhitelistedListSortApis contains the set of apis that are whitelisted for +// sorting list field elements +var WhitelistedListSortApis = newSet( + "apps/v1", "apps/v1beta1", "apps/v1beta2", "batch/v1", "batch/v1beta1", + "extensions/v1beta1", "v1", "admissionregistration.k8s.io/v1") + +// WhitelistedListSortFields contains json paths to list fields that should +// be sorted, and the field they should be sorted by +var WhitelistedListSortFields = map[string]string{ + ".spec.template.spec.containers": "name", + ".webhooks.rules.operations": "", +} + +// FieldOrder indexes fields and maps them to relative precedence +var FieldOrder = func() map[string]int { + // create an index of field orderings + fo := map[string]int{} + for i, f := range fieldSortOrder { + fo[f] = i + 1 + } + return fo +}() diff --git a/go/internal/forked/kyaml/yaml/rnode.go b/go/internal/forked/kyaml/yaml/rnode.go new file mode 100644 index 000000000..207e86c72 --- /dev/null +++ b/go/internal/forked/kyaml/yaml/rnode.go @@ -0,0 +1,1182 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package yaml + +import ( + "encoding/json" + "fmt" + "io/ioutil" + "log" + "regexp" + "strconv" + "strings" + + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/errors" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/internal/forked/github.com/go-yaml/yaml" + + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/sliceutil" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml/internal/k8sgen/pkg/labels" +) + +// MakeNullNode returns an RNode that represents an empty document. +func MakeNullNode() *RNode { + return NewRNode(&Node{Tag: NodeTagNull}) +} + +// IsMissingOrNull is true if the RNode is nil or explicitly tagged null. +// TODO: make this a method on RNode. +func IsMissingOrNull(node *RNode) bool { + return node.IsNil() || node.YNode().Tag == NodeTagNull +} + +// IsEmptyMap returns true if the RNode is an empty node or an empty map. +// TODO: make this a method on RNode. +func IsEmptyMap(node *RNode) bool { + return IsMissingOrNull(node) || IsYNodeEmptyMap(node.YNode()) +} + +// GetValue returns underlying yaml.Node Value field +func GetValue(node *RNode) string { + if IsMissingOrNull(node) { + return "" + } + return node.YNode().Value +} + +// Parse parses a yaml string into an *RNode. +// To parse multiple resources, consider a kio.ByteReader +func Parse(value string) (*RNode, error) { + return Parser{Value: value}.Filter(nil) +} + +// ReadFile parses a single Resource from a yaml file. +// To parse multiple resources, consider a kio.ByteReader +func ReadFile(path string) (*RNode, error) { + b, err := ioutil.ReadFile(path) + if err != nil { + return nil, err + } + return Parse(string(b)) +} + +// WriteFile writes a single Resource to a yaml file +func WriteFile(node *RNode, path string) error { + out, err := node.String() + if err != nil { + return err + } + return ioutil.WriteFile(path, []byte(out), 0600) +} + +// UpdateFile reads the file at path, applies the filter to it, and write the result back. +// path must contain a exactly 1 resource (YAML). +func UpdateFile(filter Filter, path string) error { + // Read the yaml + y, err := ReadFile(path) + if err != nil { + return err + } + + // Update the yaml + if err := y.PipeE(filter); err != nil { + return err + } + + // Write the yaml + return WriteFile(y, path) +} + +// MustParse parses a yaml string into an *RNode and panics if there is an error +func MustParse(value string) *RNode { + v, err := Parser{Value: value}.Filter(nil) + if err != nil { + panic(err) + } + return v +} + +// NewScalarRNode returns a new Scalar *RNode containing the provided scalar value. +func NewScalarRNode(value string) *RNode { + return &RNode{ + value: &yaml.Node{ + Kind: yaml.ScalarNode, + Value: value, + }} +} + +// NewStringRNode returns a new Scalar *RNode containing the provided string. +// If the string is non-utf8, it will be base64 encoded, and the tag +// will indicate binary data. +func NewStringRNode(value string) *RNode { + n := yaml.Node{Kind: yaml.ScalarNode} + n.SetString(value) + return NewRNode(&n) +} + +// NewListRNode returns a new List *RNode containing the provided scalar values. +func NewListRNode(values ...string) *RNode { + seq := &RNode{value: &yaml.Node{Kind: yaml.SequenceNode}} + for _, v := range values { + seq.value.Content = append(seq.value.Content, &yaml.Node{ + Kind: yaml.ScalarNode, + Value: v, + }) + } + return seq +} + +// NewMapRNode returns a new Map *RNode containing the provided values +func NewMapRNode(values *map[string]string) *RNode { + m := &RNode{value: &yaml.Node{ + Kind: yaml.MappingNode, + }} + if values == nil { + return m + } + + for k, v := range *values { + m.value.Content = append(m.value.Content, &yaml.Node{ + Kind: yaml.ScalarNode, + Value: k, + }, &yaml.Node{ + Kind: yaml.ScalarNode, + Value: v, + }) + } + + return m +} + +// SyncMapNodesOrder sorts the map node keys in 'to' node to match the order of +// map node keys in 'from' node, additional keys are moved to the end +func SyncMapNodesOrder(from, to *RNode) { + to.Copy() + res := &RNode{value: &yaml.Node{ + Kind: to.YNode().Kind, + Style: to.YNode().Style, + Tag: to.YNode().Tag, + Anchor: to.YNode().Anchor, + Alias: to.YNode().Alias, + HeadComment: to.YNode().HeadComment, + LineComment: to.YNode().LineComment, + FootComment: to.YNode().FootComment, + Line: to.YNode().Line, + Column: to.YNode().Column, + }} + + fromFieldNames, err := from.Fields() + if err != nil { + return + } + + toFieldNames, err := to.Fields() + if err != nil { + return + } + + for _, fieldName := range fromFieldNames { + if !sliceutil.Contains(toFieldNames, fieldName) { + continue + } + // append the common nodes in the order defined in 'from' node + res.value.Content = append(res.value.Content, to.Field(fieldName).Key.YNode(), to.Field(fieldName).Value.YNode()) + toFieldNames = sliceutil.Remove(toFieldNames, fieldName) + } + + for _, fieldName := range toFieldNames { + // append the residual nodes which are not present in 'from' node + res.value.Content = append(res.value.Content, to.Field(fieldName).Key.YNode(), to.Field(fieldName).Value.YNode()) + } + + to.SetYNode(res.YNode()) +} + +// NewRNode returns a new RNode pointer containing the provided Node. +func NewRNode(value *yaml.Node) *RNode { + return &RNode{value: value} +} + +// RNode provides functions for manipulating Kubernetes Resources +// Objects unmarshalled into *yaml.Nodes +type RNode struct { + // fieldPath contains the path from the root of the KubernetesObject to + // this field. + // Only field names are captured in the path. + // e.g. a image field in a Deployment would be + // 'spec.template.spec.containers.image' + fieldPath []string + + // FieldValue contains the value. + // FieldValue is always set: + // field: field value + // list entry: list entry value + // object root: object root + value *yaml.Node + + Match []string +} + +// Copy returns a distinct copy. +func (rn *RNode) Copy() *RNode { + if rn == nil { + return nil + } + result := *rn + result.value = CopyYNode(rn.value) + return &result +} + +var ErrMissingMetadata = fmt.Errorf("missing Resource metadata") + +// IsNil is true if the node is nil, or its underlying YNode is nil. +func (rn *RNode) IsNil() bool { + return rn == nil || rn.YNode() == nil +} + +// IsTaggedNull is true if a non-nil node is explicitly tagged Null. +func (rn *RNode) IsTaggedNull() bool { + return !rn.IsNil() && IsYNodeTaggedNull(rn.YNode()) +} + +// IsNilOrEmpty is true if the node is nil, +// has no YNode, or has YNode that appears empty. +func (rn *RNode) IsNilOrEmpty() bool { + return rn.IsNil() || + IsYNodeTaggedNull(rn.YNode()) || + IsYNodeEmptyMap(rn.YNode()) || + IsYNodeEmptySeq(rn.YNode()) || + IsYNodeZero(rn.YNode()) +} + +// GetMeta returns the ResourceMeta for an RNode +func (rn *RNode) GetMeta() (ResourceMeta, error) { + if IsMissingOrNull(rn) { + return ResourceMeta{}, nil + } + missingMeta := true + n := rn + if n.YNode().Kind == DocumentNode { + // get the content is this is the document node + n = NewRNode(n.Content()[0]) + } + + // don't decode into the struct directly or it will fail on UTF-8 issues + // which appear in comments + m := ResourceMeta{} + + // TODO: consider optimizing this parsing + if f := n.Field(APIVersionField); !f.IsNilOrEmpty() { + m.APIVersion = GetValue(f.Value) + missingMeta = false + } + if f := n.Field(KindField); !f.IsNilOrEmpty() { + m.Kind = GetValue(f.Value) + missingMeta = false + } + + mf := n.Field(MetadataField) + if mf.IsNilOrEmpty() { + if missingMeta { + return m, ErrMissingMetadata + } + return m, nil + } + meta := mf.Value + + if f := meta.Field(NameField); !f.IsNilOrEmpty() { + m.Name = f.Value.YNode().Value + missingMeta = false + } + if f := meta.Field(NamespaceField); !f.IsNilOrEmpty() { + m.Namespace = GetValue(f.Value) + missingMeta = false + } + + if f := meta.Field(LabelsField); !f.IsNilOrEmpty() { + m.Labels = map[string]string{} + _ = f.Value.VisitFields(func(node *MapNode) error { + m.Labels[GetValue(node.Key)] = GetValue(node.Value) + return nil + }) + missingMeta = false + } + if f := meta.Field(AnnotationsField); !f.IsNilOrEmpty() { + m.Annotations = map[string]string{} + _ = f.Value.VisitFields(func(node *MapNode) error { + m.Annotations[GetValue(node.Key)] = GetValue(node.Value) + return nil + }) + missingMeta = false + } + + if missingMeta { + return m, ErrMissingMetadata + } + return m, nil +} + +// Pipe sequentially invokes each Filter, and passes the result to the next +// Filter. +// +// Analogous to http://www.linfo.org/pipes.html +// +// * rn is provided as input to the first Filter. +// * if any Filter returns an error, immediately return the error +// * if any Filter returns a nil RNode, immediately return nil, nil +// * if all Filters succeed with non-empty results, return the final result +func (rn *RNode) Pipe(functions ...Filter) (*RNode, error) { + // check if rn is nil to make chaining Pipe calls easier + if rn == nil { + return nil, nil + } + + var v *RNode + var err error + if rn.value != nil && rn.value.Kind == yaml.DocumentNode { + // the first node may be a DocumentNode containing a single MappingNode + v = &RNode{value: rn.value.Content[0]} + } else { + v = rn + } + + // return each fn in sequence until encountering an error or missing value + for _, c := range functions { + v, err = c.Filter(v) + if err != nil || v == nil { + return v, errors.Wrap(err) + } + } + return v, err +} + +// PipeE runs Pipe, dropping the *RNode return value. +// Useful for directly returning the Pipe error value from functions. +func (rn *RNode) PipeE(functions ...Filter) error { + _, err := rn.Pipe(functions...) + return errors.Wrap(err) +} + +// Document returns the Node for the value. +func (rn *RNode) Document() *yaml.Node { + return rn.value +} + +// YNode returns the yaml.Node value. If the yaml.Node value is a DocumentNode, +// YNode will return the DocumentNode Content entry instead of the DocumentNode. +func (rn *RNode) YNode() *yaml.Node { + if rn == nil || rn.value == nil { + return nil + } + if rn.value.Kind == yaml.DocumentNode { + return rn.value.Content[0] + } + return rn.value +} + +// SetYNode sets the yaml.Node value on an RNode. +func (rn *RNode) SetYNode(node *yaml.Node) { + if rn.value == nil || node == nil { + rn.value = node + return + } + *rn.value = *node +} + +// GetKind returns the kind, if it exists, else empty string. +func (rn *RNode) GetKind() string { + if node := rn.getMapFieldValue(KindField); node != nil { + return node.Value + } + return "" +} + +// SetKind sets the kind. +func (rn *RNode) SetKind(k string) { + rn.SetMapField(NewScalarRNode(k), KindField) +} + +// GetApiVersion returns the apiversion, if it exists, else empty string. +func (rn *RNode) GetApiVersion() string { + if node := rn.getMapFieldValue(APIVersionField); node != nil { + return node.Value + } + return "" +} + +// SetApiVersion sets the apiVersion. +func (rn *RNode) SetApiVersion(av string) { + rn.SetMapField(NewScalarRNode(av), APIVersionField) +} + +// getMapFieldValue returns the value (*yaml.Node) of a mapping field. +// The value might be nil. Also, the function returns nil, not an error, +// if this node is not a mapping node, or if this node does not have the +// given field, so this function cannot be used to make distinctions +// between these cases. +func (rn *RNode) getMapFieldValue(field string) *yaml.Node { + for i := 0; i < len(rn.Content()); i = IncrementFieldIndex(i) { + if rn.Content()[i].Value == field { + return rn.Content()[i+1] + } + } + return nil +} + +// GetName returns the name, or empty string if +// field not found. The setter is more restrictive. +func (rn *RNode) GetName() string { + return rn.getMetaStringField(NameField) +} + +// getMetaStringField returns the value of a string field in metadata. +func (rn *RNode) getMetaStringField(fName string) string { + md := rn.getMetaData() + if md == nil { + return "" + } + f := md.Field(fName) + if f.IsNilOrEmpty() { + return "" + } + return GetValue(f.Value) +} + +// getMetaData returns the RNode holding the value of the metadata field. +// Return nil if field not found (no error). +func (rn *RNode) getMetaData() *RNode { + if IsMissingOrNull(rn) { + return nil + } + var n *RNode + if rn.YNode().Kind == DocumentNode { + // get the content if this is the document node + n = NewRNode(rn.Content()[0]) + } else { + n = rn + } + mf := n.Field(MetadataField) + if mf.IsNilOrEmpty() { + return nil + } + return mf.Value +} + +// SetName sets the metadata name field. +func (rn *RNode) SetName(name string) error { + return rn.SetMapField(NewScalarRNode(name), MetadataField, NameField) +} + +// GetNamespace gets the metadata namespace field, or empty string if +// field not found. The setter is more restrictive. +func (rn *RNode) GetNamespace() string { + return rn.getMetaStringField(NamespaceField) +} + +// SetNamespace tries to set the metadata namespace field. If the argument +// is empty, the field is dropped. +func (rn *RNode) SetNamespace(ns string) error { + meta, err := rn.Pipe(Lookup(MetadataField)) + if err != nil { + return err + } + if ns == "" { + if rn == nil { + return nil + } + return meta.PipeE(Clear(NamespaceField)) + } + return rn.SetMapField( + NewScalarRNode(ns), MetadataField, NamespaceField) +} + +// GetAnnotations gets the metadata annotations field. +// If the field is missing, returns an empty map. +// Use another method to check for missing metadata. +func (rn *RNode) GetAnnotations() map[string]string { + meta := rn.getMetaData() + if meta == nil { + return make(map[string]string) + } + return rn.getMapFromMeta(meta, AnnotationsField) +} + +// SetAnnotations tries to set the metadata annotations field. +func (rn *RNode) SetAnnotations(m map[string]string) error { + return rn.setMapInMetadata(m, AnnotationsField) +} + +// GetLabels gets the metadata labels field. +// If the field is missing, returns an empty map. +// Use another method to check for missing metadata. +func (rn *RNode) GetLabels() map[string]string { + meta := rn.getMetaData() + if meta == nil { + return make(map[string]string) + } + return rn.getMapFromMeta(meta, LabelsField) +} + +// getMapFromMeta returns map, sometimes empty, from metadata. +func (rn *RNode) getMapFromMeta(meta *RNode, fName string) map[string]string { + result := make(map[string]string) + if f := meta.Field(fName); !f.IsNilOrEmpty() { + _ = f.Value.VisitFields(func(node *MapNode) error { + result[GetValue(node.Key)] = GetValue(node.Value) + return nil + }) + } + return result +} + +// SetLabels sets the metadata labels field. +func (rn *RNode) SetLabels(m map[string]string) error { + return rn.setMapInMetadata(m, LabelsField) +} + +// This established proper quoting on string values, and sorts by key. +func (rn *RNode) setMapInMetadata(m map[string]string, field string) error { + meta, err := rn.Pipe(LookupCreate(MappingNode, MetadataField)) + if err != nil { + return err + } + if err = meta.PipeE(Clear(field)); err != nil { + return err + } + if len(m) == 0 { + return nil + } + mapNode, err := meta.Pipe(LookupCreate(MappingNode, field)) + if err != nil { + return err + } + for _, k := range SortedMapKeys(m) { + if _, err := mapNode.Pipe( + SetField(k, NewStringRNode(m[k]))); err != nil { + return err + } + } + return nil +} + +func (rn *RNode) SetMapField(value *RNode, path ...string) error { + return rn.PipeE( + LookupCreate(yaml.MappingNode, path[0:len(path)-1]...), + SetField(path[len(path)-1], value), + ) +} + +func (rn *RNode) GetDataMap() map[string]string { + n, err := rn.Pipe(Lookup(DataField)) + if err != nil { + return nil + } + result := map[string]string{} + _ = n.VisitFields(func(node *MapNode) error { + result[GetValue(node.Key)] = GetValue(node.Value) + return nil + }) + return result +} + +func (rn *RNode) GetBinaryDataMap() map[string]string { + n, err := rn.Pipe(Lookup(BinaryDataField)) + if err != nil { + return nil + } + result := map[string]string{} + _ = n.VisitFields(func(node *MapNode) error { + result[GetValue(node.Key)] = GetValue(node.Value) + return nil + }) + return result +} + +// GetValidatedDataMap retrieves the data map and returns an error if the data +// map contains entries which are not included in the expectedKeys set. +func (rn *RNode) GetValidatedDataMap(expectedKeys []string) (map[string]string, error) { + dataMap := rn.GetDataMap() + err := rn.validateDataMap(dataMap, expectedKeys) + return dataMap, err +} + +func (rn *RNode) validateDataMap(dataMap map[string]string, expectedKeys []string) error { + if dataMap == nil { + return fmt.Errorf("The datamap is unassigned") + } + for key := range dataMap { + found := false + for _, expected := range expectedKeys { + if expected == key { + found = true + } + } + if !found { + return fmt.Errorf("an unexpected key (%v) was found", key) + } + } + return nil +} + +func (rn *RNode) SetDataMap(m map[string]string) { + if rn == nil { + log.Fatal("cannot set data map on nil Rnode") + } + if err := rn.PipeE(Clear(DataField)); err != nil { + log.Fatal(err) + } + if len(m) == 0 { + return + } + if err := rn.LoadMapIntoConfigMapData(m); err != nil { + log.Fatal(err) + } +} + +func (rn *RNode) SetBinaryDataMap(m map[string]string) { + if rn == nil { + log.Fatal("cannot set binaryData map on nil Rnode") + } + if err := rn.PipeE(Clear(BinaryDataField)); err != nil { + log.Fatal(err) + } + if len(m) == 0 { + return + } + if err := rn.LoadMapIntoConfigMapBinaryData(m); err != nil { + log.Fatal(err) + } +} + +// AppendToFieldPath appends a field name to the FieldPath. +func (rn *RNode) AppendToFieldPath(parts ...string) { + rn.fieldPath = append(rn.fieldPath, parts...) +} + +// FieldPath returns the field path from the Resource root node, to rn. +// Does not include list indexes. +func (rn *RNode) FieldPath() []string { + return rn.fieldPath +} + +// String returns string representation of the RNode +func (rn *RNode) String() (string, error) { + if rn == nil { + return "", nil + } + return String(rn.value) +} + +// MustString returns string representation of the RNode or panics if there is an error +func (rn *RNode) MustString() string { + s, err := rn.String() + if err != nil { + panic(err) + } + return s +} + +// Content returns Node Content field. +func (rn *RNode) Content() []*yaml.Node { + if rn == nil { + return nil + } + return rn.YNode().Content +} + +// Fields returns the list of field names for a MappingNode. +// Returns an error for non-MappingNodes. +func (rn *RNode) Fields() ([]string, error) { + if err := ErrorIfInvalid(rn, yaml.MappingNode); err != nil { + return nil, errors.Wrap(err) + } + var fields []string + for i := 0; i < len(rn.Content()); i += 2 { + fields = append(fields, rn.Content()[i].Value) + } + return fields, nil +} + +// FieldRNodes returns the list of field key RNodes for a MappingNode. +// Returns an error for non-MappingNodes. +func (rn *RNode) FieldRNodes() ([]*RNode, error) { + if err := ErrorIfInvalid(rn, yaml.MappingNode); err != nil { + return nil, errors.Wrap(err) + } + var fields []*RNode + for i := 0; i < len(rn.Content()); i += 2 { + yNode := rn.Content()[i] + // for each key node in the input mapping node contents create equivalent rNode + rNode := &RNode{} + rNode.SetYNode(yNode) + fields = append(fields, rNode) + } + return fields, nil +} + +// Field returns a fieldName, fieldValue pair for MappingNodes. +// Returns nil for non-MappingNodes. +func (rn *RNode) Field(field string) *MapNode { + if rn.YNode().Kind != yaml.MappingNode { + return nil + } + for i := 0; i < len(rn.Content()); i = IncrementFieldIndex(i) { + isMatchingField := rn.Content()[i].Value == field + if isMatchingField { + return &MapNode{Key: NewRNode(rn.Content()[i]), Value: NewRNode(rn.Content()[i+1])} + } + } + return nil +} + +// VisitFields calls fn for each field in the RNode. +// Returns an error for non-MappingNodes. +func (rn *RNode) VisitFields(fn func(node *MapNode) error) error { + // get the list of srcFieldNames + srcFieldNames, err := rn.Fields() + if err != nil { + return errors.Wrap(err) + } + + // visit each field + for _, fieldName := range srcFieldNames { + if err := fn(rn.Field(fieldName)); err != nil { + return errors.Wrap(err) + } + } + return nil +} + +// Elements returns the list of elements in the RNode. +// Returns an error for non-SequenceNodes. +func (rn *RNode) Elements() ([]*RNode, error) { + if err := ErrorIfInvalid(rn, yaml.SequenceNode); err != nil { + return nil, errors.Wrap(err) + } + var elements []*RNode + for i := 0; i < len(rn.Content()); i++ { + elements = append(elements, NewRNode(rn.Content()[i])) + } + return elements, nil +} + +// ElementValues returns a list of all observed values for a given field name +// in a list of elements. +// Returns error for non-SequenceNodes. +func (rn *RNode) ElementValues(key string) ([]string, error) { + if err := ErrorIfInvalid(rn, yaml.SequenceNode); err != nil { + return nil, errors.Wrap(err) + } + var elements []string + for i := 0; i < len(rn.Content()); i++ { + field := NewRNode(rn.Content()[i]).Field(key) + if !field.IsNilOrEmpty() { + elements = append(elements, field.Value.YNode().Value) + } + } + return elements, nil +} + +// ElementValuesList returns a list of lists, where each list is a set of +// values corresponding to each key in keys. +// Returns error for non-SequenceNodes. +func (rn *RNode) ElementValuesList(keys []string) ([][]string, error) { + if err := ErrorIfInvalid(rn, yaml.SequenceNode); err != nil { + return nil, errors.Wrap(err) + } + elements := make([][]string, len(rn.Content())) + + for i := 0; i < len(rn.Content()); i++ { + for _, key := range keys { + field := NewRNode(rn.Content()[i]).Field(key) + if field.IsNilOrEmpty() { + elements[i] = append(elements[i], "") + } else { + elements[i] = append(elements[i], field.Value.YNode().Value) + } + } + } + return elements, nil +} + +// Element returns the element in the list which contains the field matching the value. +// Returns nil for non-SequenceNodes or if no Element matches. +func (rn *RNode) Element(key, value string) *RNode { + if rn.YNode().Kind != yaml.SequenceNode { + return nil + } + elem, err := rn.Pipe(MatchElement(key, value)) + if err != nil { + return nil + } + return elem +} + +// ElementList returns the element in the list in which all fields keys[i] matches all +// corresponding values[i]. +// Returns nil for non-SequenceNodes or if no Element matches. +func (rn *RNode) ElementList(keys []string, values []string) *RNode { + if rn.YNode().Kind != yaml.SequenceNode { + return nil + } + elem, err := rn.Pipe(MatchElementList(keys, values)) + if err != nil { + return nil + } + return elem +} + +// VisitElements calls fn for each element in a SequenceNode. +// Returns an error for non-SequenceNodes +func (rn *RNode) VisitElements(fn func(node *RNode) error) error { + elements, err := rn.Elements() + if err != nil { + return errors.Wrap(err) + } + + for i := range elements { + if err := fn(elements[i]); err != nil { + return errors.Wrap(err) + } + } + return nil +} + +// AssociativeSequenceKeys is a map of paths to sequences that have associative keys. +// The order sets the precedence of the merge keys -- if multiple keys are present +// in Resources in a list, then the FIRST key which ALL elements in the list have is used as the +// associative key for merging that list. +// Only infer name as a merge key. +var AssociativeSequenceKeys = []string{"name"} + +// IsAssociative returns true if the RNode contains an AssociativeSequenceKey as a field. +func (rn *RNode) IsAssociative() bool { + return rn.GetAssociativeKey() != "" +} + +// GetAssociativeKey returns the AssociativeSequenceKey used to merge the elements in the +// SequenceNode, or "" if the list is not associative. +func (rn *RNode) GetAssociativeKey() string { + // look for any associative keys in the first element + for _, key := range AssociativeSequenceKeys { + if checkKey(key, rn.Content()) { + return key + } + } + + // element doesn't have an associative keys + return "" +} + +// MarshalJSON creates a byte slice from the RNode. +func (rn *RNode) MarshalJSON() ([]byte, error) { + s, err := rn.String() + if err != nil { + return nil, err + } + + if rn.YNode().Kind == SequenceNode { + var a []interface{} + if err := Unmarshal([]byte(s), &a); err != nil { + return nil, err + } + return json.Marshal(a) + } + + m := map[string]interface{}{} + if err := Unmarshal([]byte(s), &m); err != nil { + return nil, err + } + return json.Marshal(m) +} + +// UnmarshalJSON overwrites this RNode with data from []byte. +func (rn *RNode) UnmarshalJSON(b []byte) error { + m := map[string]interface{}{} + if err := json.Unmarshal(b, &m); err != nil { + return err + } + r, err := FromMap(m) + if err != nil { + return err + } + rn.value = r.value + return nil +} + +// DeAnchor inflates all YAML aliases with their anchor values. +// All YAML anchor data is permanently removed (feel free to call Copy first). +func (rn *RNode) DeAnchor() (err error) { + rn.value, err = deAnchor(rn.value) + return +} + +// deAnchor removes all AliasNodes from the yaml.Node's tree, replacing +// them with what they point to. All Anchor fields (these are used to mark +// anchor definitions) are cleared. +func deAnchor(yn *yaml.Node) (res *yaml.Node, err error) { + if yn == nil { + return nil, nil + } + if yn.Anchor != "" { + // This node defines an anchor. Clear the field so that it + // doesn't show up when marshalling. + if yn.Kind == yaml.AliasNode { + // Maybe this is OK, but for now treating it as a bug. + return nil, fmt.Errorf( + "anchor %q defined using alias %v", yn.Anchor, yn.Alias) + } + yn.Anchor = "" + } + switch yn.Kind { + case yaml.ScalarNode: + return yn, nil + case yaml.AliasNode: + return deAnchor(yn.Alias) + case yaml.DocumentNode, yaml.MappingNode, yaml.SequenceNode: + for i := range yn.Content { + yn.Content[i], err = deAnchor(yn.Content[i]) + if err != nil { + return nil, err + } + } + return yn, nil + default: + return nil, fmt.Errorf("cannot deAnchor kind %q", yn.Kind) + } +} + +// GetValidatedMetadata returns metadata after subjecting it to some tests. +func (rn *RNode) GetValidatedMetadata() (ResourceMeta, error) { + m, err := rn.GetMeta() + if err != nil { + return m, err + } + if m.Kind == "" { + return m, fmt.Errorf("missing kind in object %v", m) + } + if strings.HasSuffix(m.Kind, "List") { + // A list doesn't require a name. + return m, nil + } + if m.NameMeta.Name == "" { + return m, fmt.Errorf("missing metadata.name in object %v", m) + } + return m, nil +} + +// MatchesAnnotationSelector returns true on a selector match to annotations. +func (rn *RNode) MatchesAnnotationSelector(selector string) (bool, error) { + s, err := labels.Parse(selector) + if err != nil { + return false, err + } + return s.Matches(labels.Set(rn.GetAnnotations())), nil +} + +// MatchesLabelSelector returns true on a selector match to labels. +func (rn *RNode) MatchesLabelSelector(selector string) (bool, error) { + s, err := labels.Parse(selector) + if err != nil { + return false, err + } + return s.Matches(labels.Set(rn.GetLabels())), nil +} + +// HasNilEntryInList returns true if the RNode contains a list which has +// a nil item, along with the path to the missing item. +// TODO(broken): This doesn't do what it claims to do. +// (see TODO in unit test and pr 1513). +func (rn *RNode) HasNilEntryInList() (bool, string) { + return hasNilEntryInList(rn.value) +} + +func hasNilEntryInList(in interface{}) (bool, string) { + switch v := in.(type) { + case map[string]interface{}: + for key, s := range v { + if result, path := hasNilEntryInList(s); result { + return result, key + "/" + path + } + } + case []interface{}: + for index, s := range v { + if s == nil { + return true, "" + } + if result, path := hasNilEntryInList(s); result { + return result, "[" + strconv.Itoa(index) + "]/" + path + } + } + } + return false, "" +} + +func FromMap(m map[string]interface{}) (*RNode, error) { + c, err := Marshal(m) + if err != nil { + return nil, err + } + return Parse(string(c)) +} + +func (rn *RNode) Map() (map[string]interface{}, error) { + if rn == nil || rn.value == nil { + return make(map[string]interface{}), nil + } + var result map[string]interface{} + if err := rn.value.Decode(&result); err != nil { + // Should not be able to create an RNode that cannot be decoded; + // this is an unrecoverable error. + str, _ := rn.String() + return nil, fmt.Errorf("received error %w for the following resource:\n%s", err, str) + } + return result, nil +} + +// ConvertJSONToYamlNode parses input json string and returns equivalent yaml node +func ConvertJSONToYamlNode(jsonStr string) (*RNode, error) { + var body map[string]interface{} + err := json.Unmarshal([]byte(jsonStr), &body) + if err != nil { + return nil, err + } + yml, err := yaml.Marshal(body) + if err != nil { + return nil, err + } + node, err := Parse(string(yml)) + if err != nil { + return nil, err + } + return node, nil +} + +// checkKey returns true if all elems have the key +func checkKey(key string, elems []*Node) bool { + count := 0 + for i := range elems { + elem := NewRNode(elems[i]) + if elem.Field(key) != nil { + count++ + } + } + return count == len(elems) +} + +// GetSlice returns the contents of the slice field at the given path. +func (rn *RNode) GetSlice(path string) ([]interface{}, error) { + value, err := rn.GetFieldValue(path) + if err != nil { + return nil, err + } + if sliceValue, ok := value.([]interface{}); ok { + return sliceValue, nil + } + return nil, fmt.Errorf("node %s is not a slice", path) +} + +// GetString returns the contents of the string field at the given path. +func (rn *RNode) GetString(path string) (string, error) { + value, err := rn.GetFieldValue(path) + if err != nil { + return "", err + } + if v, ok := value.(string); ok { + return v, nil + } + return "", fmt.Errorf("node %s is not a string: %v", path, value) +} + +// GetFieldValue finds period delimited fields. +// TODO: When doing kustomize var replacement, which is likely a +// a primary use of this function and the reason it returns interface{} +// rather than string, we do conversion from Nodes to Go types and back +// to nodes. We should figure out how to do replacement using raw nodes, +// assuming we keep the var feature in kustomize. +// The other end of this is: refvar.go:updateNodeValue. +func (rn *RNode) GetFieldValue(path string) (interface{}, error) { + fields := convertSliceIndex(strings.Split(path, ".")) + rn, err := rn.Pipe(Lookup(fields...)) + if err != nil { + return nil, err + } + if rn == nil { + return nil, NoFieldError{path} + } + yn := rn.YNode() + + // If this is an alias node, resolve it + if yn.Kind == yaml.AliasNode { + yn = yn.Alias + } + + // Return value as map for DocumentNode and MappingNode kinds + if yn.Kind == yaml.DocumentNode || yn.Kind == yaml.MappingNode { + var result map[string]interface{} + if err := yn.Decode(&result); err != nil { + return nil, err + } + return result, err + } + + // Return value as slice for SequenceNode kind + if yn.Kind == yaml.SequenceNode { + var result []interface{} + if err := yn.Decode(&result); err != nil { + return nil, err + } + return result, nil + } + if yn.Kind != yaml.ScalarNode { + return nil, fmt.Errorf("expected ScalarNode, got Kind=%d", yn.Kind) + } + + switch yn.Tag { + case NodeTagString: + return yn.Value, nil + case NodeTagInt: + return strconv.Atoi(yn.Value) + case NodeTagFloat: + return strconv.ParseFloat(yn.Value, 64) + case NodeTagBool: + return strconv.ParseBool(yn.Value) + default: + // Possibly this should be an error or log. + return yn.Value, nil + } +} + +// convertSliceIndex traverses the items in `fields` and find +// if there is a slice index in the item and change it to a +// valid Lookup field path. For example, 'ports[0]' will be +// converted to 'ports' and '0'. +func convertSliceIndex(fields []string) []string { + var res []string + for _, s := range fields { + if !strings.HasSuffix(s, "]") { + res = append(res, s) + continue + } + re := regexp.MustCompile(`^(.*)\[(\d+)\]$`) + groups := re.FindStringSubmatch(s) + if len(groups) == 0 { + // no match, add to result + res = append(res, s) + continue + } + if groups[1] != "" { + res = append(res, groups[1]) + } + res = append(res, groups[2]) + } + return res +} + +type NoFieldError struct { + Field string +} + +func (e NoFieldError) Error() string { + return fmt.Sprintf("no field named '%s'", e.Field) +} diff --git a/go/internal/forked/kyaml/yaml/schema/schema.go b/go/internal/forked/kyaml/yaml/schema/schema.go new file mode 100644 index 000000000..ca25549f0 --- /dev/null +++ b/go/internal/forked/kyaml/yaml/schema/schema.go @@ -0,0 +1,44 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +// Package schema contains libraries for working with the yaml and openapi packages. +package schema + +import ( + "strings" + + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/openapi" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" +) + +// IsAssociative returns true if all elements in the list contain an +// AssociativeSequenceKey as a field. +func IsAssociative(schema *openapi.ResourceSchema, nodes []*yaml.RNode, infer bool) bool { + if schema != nil { + return schemaHasMergeStrategy(schema) + } + if !infer { + return false + } + for i := range nodes { + node := nodes[i] + if yaml.IsMissingOrNull(node) { + continue + } + if node.IsAssociative() { + return true + } + } + return false +} + +func schemaHasMergeStrategy(schema *openapi.ResourceSchema) bool { + tmp, _ := schema.PatchStrategyAndKey() + strategies := strings.Split(tmp, ",") + for _, s := range strategies { + if s == "merge" { + return true + } + } + return false +} diff --git a/go/internal/forked/kyaml/yaml/schema/schema_test.go b/go/internal/forked/kyaml/yaml/schema/schema_test.go new file mode 100644 index 000000000..e678c1626 --- /dev/null +++ b/go/internal/forked/kyaml/yaml/schema/schema_test.go @@ -0,0 +1,48 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package schema_test + +import ( + "testing" + + "github.com/stretchr/testify/assert" + "k8s.io/kube-openapi/pkg/validation/spec" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/openapi" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml/schema" +) + +func TestIsAssociativeNoSchema(t *testing.T) { + assert.False(t, schema.IsAssociative(nil, []*yaml.RNode{}, false)) +} + +func makeSchema() *spec.Schema { + return &spec.Schema{ + VendorExtensible: spec.VendorExtensible{ + Extensions: make(map[string]interface{}), + }, + } +} + +func TestIsAssociativeSimpleStrategy(t *testing.T) { + s := makeSchema() + s.Extensions["x-kubernetes-patch-merge-key"] = "name" + s.Extensions["x-kubernetes-patch-strategy"] = "merge" + assert.True( + t, + schema.IsAssociative( + &openapi.ResourceSchema{Schema: s}, + []*yaml.RNode{}, false)) +} + +func TestIsAssociativeMultipleStrategy(t *testing.T) { + s := makeSchema() + s.Extensions["x-kubernetes-patch-merge-key"] = "name" + s.Extensions["x-kubernetes-patch-strategy"] = "retainKeys,merge" + assert.True( + t, + schema.IsAssociative( + &openapi.ResourceSchema{Schema: s}, + []*yaml.RNode{}, false)) +} diff --git a/go/internal/forked/kyaml/yaml/types_test.go b/go/internal/forked/kyaml/yaml/types_test.go new file mode 100644 index 000000000..ab2f4e465 --- /dev/null +++ b/go/internal/forked/kyaml/yaml/types_test.go @@ -0,0 +1,147 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package yaml + +import ( + "reflect" + "testing" +) + +func TestCopyYNode(t *testing.T) { + ynSub1 := Node{ + Kind: 100, + } + ynSub2 := Node{ + Kind: 200, + } + ynSub3 := Node{ + Kind: 300, + } + yn := Node{ + Kind: 5000, + Style: 6000, + Tag: "red", + Value: "green", + Anchor: "blue", + Alias: &ynSub3, + Content: []*Node{&ynSub1, &ynSub2}, + HeadComment: "apple", + LineComment: "peach", + FootComment: "banana", + Line: 7000, + Column: 8000, + } + ynAddr := &yn + if !reflect.DeepEqual(&yn, ynAddr) { + t.Fatalf("truly %v should equal %v", &yn, ynAddr) + } + ynC := CopyYNode(&yn) + if !reflect.DeepEqual(yn.Content, ynC.Content) { + t.Fatalf("copy content %v is not deep equal to %v", ynC, yn) + } + if !reflect.DeepEqual(&yn, ynC) { + t.Fatalf("\noriginal: %v\n copy: %v\nShould be equal.", yn, ynC) + } + tmp := yn.Content[0].Kind + yn.Content[0].Kind = 666 + if reflect.DeepEqual(&yn, ynC) { + t.Fatalf("changing component should break equality") + } + yn.Content[0].Kind = tmp + if !reflect.DeepEqual(&yn, ynC) { + t.Fatalf("should be okay now") + } + yn.Tag = "Different" + if yn.Tag == ynC.Tag { + t.Fatalf("field aliased!") + } +} + +func TestIsYNodeString(t *testing.T) { + if IsYNodeTaggedNull(nil) { + t.Fatalf("nil cannot be tagged null") + } + if IsYNodeTaggedNull(&Node{}) { + t.Fatalf("untagged node is not tagged") + } + if IsYNodeString(&Node{Tag: NodeTagString}) { + t.Fatalf("non-scalar node is not a string") + } + if IsYNodeString(&Node{Kind: ScalarNode, Tag: NodeTagFloat}) { + t.Fatalf("float tagged node is not tagged") + } + if !IsYNodeString(&Node{Kind: ScalarNode}) { + t.Fatalf("this looks like a string - no tag implies string") + } + if !IsYNodeString(&Node{Kind: ScalarNode, Tag: NodeTagString}) { + t.Fatalf("this looks like a string") + } +} + +func TestIsYNodeTaggedNull(t *testing.T) { + if IsYNodeTaggedNull(nil) { + t.Fatalf("nil cannot be tagged null") + } + if IsYNodeTaggedNull(&Node{}) { + t.Fatalf("untagged node is not tagged") + } + if IsYNodeTaggedNull(&Node{Tag: NodeTagFloat}) { + t.Fatalf("float tagged node is not tagged") + } + if !IsYNodeTaggedNull(&Node{Tag: NodeTagNull}) { + t.Fatalf("tagged node is tagged") + } +} + +func TestIsYNodeEmptyMap(t *testing.T) { + if IsYNodeEmptyMap(nil) { + t.Fatalf("nil cannot be a map") + } + if IsYNodeEmptyMap(&Node{}) { + t.Fatalf("raw node is not a map") + } + if IsYNodeEmptyMap(&Node{Kind: SequenceNode}) { + t.Fatalf("seq node is not a map") + } + n := &Node{Kind: MappingNode} + if !IsYNodeEmptyMap(n) { + t.Fatalf("empty mapping node is an empty mapping node") + } + n.Content = append(n.Content, &Node{Kind: SequenceNode}) + if IsYNodeEmptyMap(n) { + t.Fatalf("a node with content isn't empty") + } +} + +func TestIsYNodeEmptySeq(t *testing.T) { + if IsYNodeEmptySeq(nil) { + t.Fatalf("nil cannot be a map") + } + if IsYNodeEmptySeq(&Node{}) { + t.Fatalf("raw node is not a map") + } + if IsYNodeEmptySeq(&Node{Kind: MappingNode}) { + t.Fatalf("map node is not a sequence") + } + n := &Node{Kind: SequenceNode} + if !IsYNodeEmptySeq(n) { + t.Fatalf("empty sequence node is an empty sequence node") + } + n.Content = append(n.Content, &Node{Kind: MappingNode}) + if IsYNodeEmptySeq(n) { + t.Fatalf("a node with content isn't empty") + } +} + +func TestIsYNodeZero(t *testing.T) { + if IsYNodeZero(nil) { + t.Fatalf("nil node should not be zero") + } + if !IsYNodeZero(&Node{}) { + t.Fatalf("node is zero") + } + if IsYNodeZero(&Node{Kind: MappingNode}) { + t.Fatalf("node is not zero") + } +} diff --git a/go/internal/forked/kyaml/yaml/util.go b/go/internal/forked/kyaml/yaml/util.go new file mode 100644 index 000000000..dc7880781 --- /dev/null +++ b/go/internal/forked/kyaml/yaml/util.go @@ -0,0 +1,71 @@ +// Copyright 2021 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package yaml + +import ( + "strings" +) + +// DeriveSeqIndentStyle derives the sequence indentation annotation value for the resource, +// originalYAML is the input yaml string, +// the style is decided by deriving the existing sequence indentation of first sequence node +func DeriveSeqIndentStyle(originalYAML string) string { + lines := strings.Split(originalYAML, "\n") + for i, line := range lines { + elems := strings.SplitN(line, "- ", 2) + if len(elems) != 2 { + continue + } + // prefix of "- " must be sequence of spaces + if strings.Trim(elems[0], " ") != "" { + continue + } + numSpacesBeforeSeqElem := len(elems[0]) + + // keyLine is the line before the first sequence element + keyLine := keyLineBeforeSeqElem(lines, i) + if keyLine == "" { + // there is no keyLine for this sequence node + // all of those lines are comments + continue + } + numSpacesBeforeKeyElem := len(keyLine) - len(strings.TrimLeft(keyLine, " ")) + trimmedKeyLine := strings.Trim(keyLine, " ") + if strings.Count(trimmedKeyLine, ":") != 1 || !strings.HasSuffix(trimmedKeyLine, ":") { + // if the key line doesn't contain only one : that too at the end, + // this is not a sequence node, it is a wrapped sequence node string + // ignore it + continue + } + + if numSpacesBeforeSeqElem == numSpacesBeforeKeyElem { + return string(CompactSequenceStyle) + } + + if numSpacesBeforeSeqElem-numSpacesBeforeKeyElem == 2 { + return string(WideSequenceStyle) + } + } + + return string(CompactSequenceStyle) +} + +// keyLineBeforeSeqElem iterates through the lines before the first seqElement +// and tries to find the non-comment key line for the sequence node +func keyLineBeforeSeqElem(lines []string, seqElemIndex int) string { + // start with the previous line of sequence element + i := seqElemIndex - 1 + for ; i >= 0; i-- { + line := lines[i] + trimmedLine := strings.Trim(line, " ") + if strings.HasPrefix(trimmedLine, "#") { // commented line + continue + } + // we have a non-commented line which can have a trailing comment + parts := strings.SplitN(line, "#", 2) + return parts[0] // throw away the trailing comment part + } + return "" + +} diff --git a/go/internal/forked/kyaml/yaml/util_test.go b/go/internal/forked/kyaml/yaml/util_test.go new file mode 100644 index 000000000..cdc3e7ee5 --- /dev/null +++ b/go/internal/forked/kyaml/yaml/util_test.go @@ -0,0 +1,196 @@ +// Copyright 2021 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package yaml + +import ( + "testing" + + "github.com/stretchr/testify/assert" +) + +func TestDeriveSeqIndentStyle(t *testing.T) { + type testCase struct { + name string + input string + expectedOutput string + } + + testCases := []testCase{ + { + name: "detect simple wide indent", + input: `apiVersion: apps/v1 +kind: Deployment +spec: + - foo + - bar + - baz +`, + expectedOutput: `wide`, + }, + { + name: "detect simple compact indent", + input: `apiVersion: apps/v1 +kind: Deployment +spec: +- foo +- bar +- baz +`, + expectedOutput: `compact`, + }, + { + name: "read with mixed indentation, wide first", + input: `apiVersion: apps/v1 +kind: Deployment +spec: + - foo + - bar + - baz +env: +- foo +- bar +`, + expectedOutput: `wide`, + }, + { + name: "read with mixed indentation, compact first", + input: `apiVersion: apps/v1 +kind: Deployment +spec: +- foo +- bar +- baz +env: + - foo + - bar +`, + expectedOutput: `compact`, + }, + { + name: "read with mixed indentation, compact first with less elements", + input: `apiVersion: apps/v1 +kind: Deployment +spec: +- foo +- bar +env: + - foo + - bar + - baz +`, + expectedOutput: `compact`, + }, + { + name: "skip wrapped sequence strings, pipe hyphen", + input: `apiVersion: apps/v1 +kind: Deployment +spec: |- + - foo + - bar +`, + expectedOutput: `compact`, + }, + { + name: "skip wrapped sequence strings, pipe", + input: `apiVersion: apps/v1 +kind: Deployment +spec: | + - foo + - bar +`, + expectedOutput: `compact`, + }, + { + name: "skip wrapped sequence strings, right angle bracket", + input: `apiVersion: apps/v1 +kind: Deployment +spec: > + - foo + - bar +`, + expectedOutput: `compact`, + }, + { + name: "skip wrapped sequence strings, plus", + input: `apiVersion: apps/v1 +kind: Deployment +spec: + + - foo + - bar +`, + expectedOutput: `compact`, + }, + { + name: "handle comments", + input: `apiVersion: v1 +kind: Service +spec: + ports: # comment 1 + # comment 2 + - name: etcd-server-ssl + port: 2380 + # comment 3 + - name: etcd-client-ssl + port: 2379 +`, + expectedOutput: `wide`, + }, + { + name: "nested wide vs compact", + input: `apiVersion: apps/v1 +kind: Deployment +spec: + foo: + bar: + baz: + bor: + - a + - b +abc: +- a +- b +`, + expectedOutput: `wide`, + }, + { + name: "invalid resource but valid yaml sequence", + input: ` - foo`, + expectedOutput: `compact`, + }, + { + name: "invalid resource but valid yaml sequence with comments", + input: ` +# comment 1 + # comment 2 + - foo +`, + expectedOutput: `compact`, + }, + { + name: "- within sequence element", + input: `apiVersion: apps/v1 +kind: Deployment +spec: + foo: + - - a`, + expectedOutput: `wide`, + }, + { + name: "- within non sequence element", + input: `apiVersion: apps/v1 +kind: Deployment +spec: + foo: + a: - b`, + expectedOutput: `compact`, + }, + } + + for i := range testCases { + tc := testCases[i] + t.Run(tc.name, func(t *testing.T) { + assert.Equal(t, tc.expectedOutput, DeriveSeqIndentStyle(tc.input)) + }) + } +} diff --git a/go/internal/forked/kyaml/yaml/walk/associative_sequence.go b/go/internal/forked/kyaml/yaml/walk/associative_sequence.go new file mode 100644 index 000000000..4df1d8a0e --- /dev/null +++ b/go/internal/forked/kyaml/yaml/walk/associative_sequence.go @@ -0,0 +1,385 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package walk + +import ( + "strings" + + "github.com/go-errors/errors" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/openapi" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/sets" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" +) + +// appendListNode will append the nodes from src to dst and return dst. +// src and dst should be both sequence node. key is used to call ElementSetter. +// ElementSetter will use key-value pair to find and set the element in sequence +// node. +func appendListNode(dst, src *yaml.RNode, keys []string) (*yaml.RNode, error) { + var err error + for _, elem := range src.Content() { + // If key is empty, we know this is a scalar value and we can directly set the + // node + if keys[0] == "" { + _, err = dst.Pipe(yaml.ElementSetter{ + Element: elem, + Keys: []string{""}, + Values: []string{elem.Value}, + }) + if err != nil { + return nil, err + } + continue + } + + // we need to get the value for key so that we can find the element to set + // in sequence. + v := []string{} + for _, key := range keys { + tmpNode := yaml.NewRNode(elem) + valueNode, err := tmpNode.Pipe(yaml.Get(key)) + if err != nil { + return nil, err + } + if valueNode.IsNil() { + // no key found, directly append to dst + err = dst.PipeE(yaml.Append(elem)) + if err != nil { + return nil, err + } + continue + } + v = append(v, valueNode.YNode().Value) + } + + // When there are multiple keys, ElementSetter appends the node to dst + // even if the output is already in dst. We remove the node from dst to + // prevent duplicates. + if len(keys) > 1 { + _, err = dst.Pipe(yaml.ElementSetter{ + Keys: keys, + Values: v, + }) + if err != nil { + return nil, err + } + } + + // We use the key and value from elem to find the corresponding element in dst. + // Then we will use ElementSetter to replace the element with elem. If we cannot + // find the item, the element will be appended. + _, err = dst.Pipe(yaml.ElementSetter{ + Element: elem, + Keys: keys, + Values: v, + }) + if err != nil { + return nil, err + } + } + return dst, nil +} + +// validateKeys returns a list of valid key-value pairs +// if secondary merge key values are missing, use only the available merge keys +func validateKeys(valuesList [][]string, values []string, keys []string) ([]string, []string) { + validKeys := make([]string, 0) + validValues := make([]string, 0) + validKeySet := sets.String{} + for _, values := range valuesList { + for i, v := range values { + if v != "" { + validKeySet.Insert(keys[i]) + } + } + } + if validKeySet.Len() == 0 { // if values missing, fall back to primary keys + return keys, values + } + for _, k := range keys { + if validKeySet.Has(k) { + validKeys = append(validKeys, k) + } + } + for i, v := range values { + if v != "" || validKeySet.Has(keys[i]) { + validValues = append(validValues, v) + } + } + return validKeys, validValues +} + +// mergeValues merges values together - e.g. if two containerPorts +// have the same port and targetPort but one has an empty protocol +// and the other doesn't, they are treated as the same containerPort +func mergeValues(valuesList [][]string) [][]string { + for i, values1 := range valuesList { + for j, values2 := range valuesList { + if matched, values := match(values1, values2); matched { + valuesList[i] = values + valuesList[j] = values + } + } + } + return valuesList +} + +// two values match if they have at least one common element and +// corresponding elements only differ if one is an empty string +func match(values1 []string, values2 []string) (bool, []string) { + if len(values1) != len(values2) { + return false, nil + } + var commonElement bool + var res []string + for i := range values1 { + if values1[i] == values2[i] { + commonElement = true + res = append(res, values1[i]) + continue + } + if values1[i] != "" && values2[i] != "" { + return false, nil + } + if values1[i] != "" { + res = append(res, values1[i]) + } else { + res = append(res, values2[i]) + } + } + return commonElement, res +} + +// setAssociativeSequenceElements recursively set the elements in the list +func (l *Walker) setAssociativeSequenceElements(valuesList [][]string, keys []string, dest *yaml.RNode) (*yaml.RNode, error) { + // itemsToBeAdded contains the items that will be added to dest + itemsToBeAdded := yaml.NewListRNode() + var schema *openapi.ResourceSchema + if l.Schema != nil { + schema = l.Schema.Elements() + } + if len(keys) > 1 { + valuesList = mergeValues(valuesList) + } + + // each element in valuesList is a list of values corresponding to the keys + // for example, for the following yaml: + // - containerPort: 8080 + // protocol: UDP + // - containerPort: 8080 + // protocol: TCP + // `keys` would be [containerPort, protocol] + // and `valuesList` would be [ [8080, UDP], [8080, TCP] ] + var validKeys []string + var validValues []string + for _, values := range valuesList { + if len(values) == 0 { + continue + } + + validKeys, validValues = validateKeys(valuesList, values, keys) + val, err := Walker{ + VisitKeysAsScalars: l.VisitKeysAsScalars, + InferAssociativeLists: l.InferAssociativeLists, + Visitor: l, + Schema: schema, + Sources: l.elementValueList(validKeys, validValues), + MergeOptions: l.MergeOptions, + }.Walk() + if err != nil { + return nil, err + } + + exit := false + for i, key := range validKeys { + // delete the node from **dest** if it's null or empty + if yaml.IsMissingOrNull(val) || yaml.IsEmptyMap(val) { + _, err = dest.Pipe(yaml.ElementSetter{ + Keys: validKeys, + Values: validValues, + }) + if err != nil { + return nil, err + } + exit = true + } else if val.Field(key) == nil && validValues[i] != "" { + // make sure the key is set on the field + _, err = val.Pipe(yaml.SetField(key, yaml.NewScalarRNode(validValues[i]))) + if err != nil { + return nil, err + } + } + } + if exit { + continue + } + + // Add the val to the sequence. val will replace the item in the sequence if + // there is an item that matches all key-value pairs. Otherwise val will be appended + // the the sequence. + _, err = itemsToBeAdded.Pipe(yaml.ElementSetter{ + Element: val.YNode(), + Keys: validKeys, + Values: validValues, + }) + if err != nil { + return nil, err + } + } + + var err error + if len(valuesList) > 0 { + if l.MergeOptions.ListIncreaseDirection == yaml.MergeOptionsListPrepend { + // items from patches are needed to be prepended. so we append the + // dest to itemsToBeAdded + dest, err = appendListNode(itemsToBeAdded, dest, validKeys) + } else { + // append the items + dest, err = appendListNode(dest, itemsToBeAdded, validKeys) + } + } + + if err != nil { + return nil, err + } + // sequence is empty + if yaml.IsMissingOrNull(dest) { + return nil, nil + } + return dest, nil +} + +func (l *Walker) walkAssociativeSequence() (*yaml.RNode, error) { + // may require initializing the dest node + dest, err := l.Sources.setDestNode(l.VisitList(l.Sources, l.Schema, AssociativeList)) + if dest == nil || err != nil { + return nil, err + } + + // get the merge key(s) from schema + var strategy string + var keys []string + if l.Schema != nil { + strategy, keys = l.Schema.PatchStrategyAndKeyList() + } + if strategy == "" && len(keys) == 0 { // neither strategy nor keys present in the schema -- infer the key + // find the list of elements we need to recursively walk + key, err := l.elementKey() + if err != nil { + return nil, err + } + if key != "" { + keys = append(keys, key) + } + } + + // non-primitive associative list -- merge the elements + values := l.elementValues(keys) + if len(values) != 0 || len(keys) > 0 { + return l.setAssociativeSequenceElements(values, keys, dest) + } + + // primitive associative list -- merge the values + return l.setAssociativeSequenceElements(l.elementPrimitiveValues(), []string{""}, dest) +} + +// elementKey returns the merge key to use for the associative list +func (l Walker) elementKey() (string, error) { + var key string + for i := range l.Sources { + if l.Sources[i] != nil && len(l.Sources[i].Content()) > 0 { + newKey := l.Sources[i].GetAssociativeKey() + if key != "" && key != newKey { + return "", errors.Errorf( + "conflicting merge keys [%s,%s] for field %s", + key, newKey, strings.Join(l.Path, ".")) + } + key = newKey + } + } + if key == "" { + return "", errors.Errorf("no merge key found for field %s", + strings.Join(l.Path, ".")) + } + return key, nil +} + +// elementValues returns a slice containing all values for the field across all elements +// from all sources. +// Return value slice is ordered using the original ordering from the elements, where +// elements missing from earlier sources appear later. +func (l Walker) elementValues(keys []string) [][]string { + // use slice to to keep elements in the original order + var returnValues [][]string + var seen sets.StringList + + // if we are doing append, dest node should be the first. + // otherwise dest node should be the last. + beginIdx := 0 + if l.MergeOptions.ListIncreaseDirection == yaml.MergeOptionsListPrepend { + beginIdx = 1 + } + for i := range l.Sources { + src := l.Sources[(i+beginIdx)%len(l.Sources)] + if src == nil { + continue + } + + // add the value of the field for each element + // don't check error, we know this is a list node + values, _ := src.ElementValuesList(keys) + for _, s := range values { + if len(s) == 0 || seen.Has(s) { + continue + } + returnValues = append(returnValues, s) + seen = seen.Insert(s) + } + } + return returnValues +} + +// elementPrimitiveValues returns the primitive values in an associative list -- eg. finalizers +func (l Walker) elementPrimitiveValues() [][]string { + // use slice to to keep elements in the original order + var returnValues [][]string + seen := sets.String{} + // if we are doing append, dest node should be the first. + // otherwise dest node should be the last. + beginIdx := 0 + if l.MergeOptions.ListIncreaseDirection == yaml.MergeOptionsListPrepend { + beginIdx = 1 + } + for i := range l.Sources { + src := l.Sources[(i+beginIdx)%len(l.Sources)] + if src == nil { + continue + } + + // add the value of the field for each element + // don't check error, we know this is a list node + for _, item := range src.YNode().Content { + if seen.Has(item.Value) { + continue + } + returnValues = append(returnValues, []string{item.Value}) + seen.Insert(item.Value) + } + } + return returnValues +} + +// fieldValue returns a slice containing each source's value for fieldName +func (l Walker) elementValueList(keys []string, values []string) []*yaml.RNode { + keys, values = validateKeys([][]string{values}, values, keys) + var fields []*yaml.RNode + for i := range l.Sources { + if l.Sources[i] == nil { + fields = append(fields, nil) + continue + } + fields = append(fields, l.Sources[i].ElementList(keys, values)) + } + return fields +} diff --git a/go/internal/forked/kyaml/yaml/walk/map.go b/go/internal/forked/kyaml/yaml/walk/map.go new file mode 100644 index 000000000..0bd64dab2 --- /dev/null +++ b/go/internal/forked/kyaml/yaml/walk/map.go @@ -0,0 +1,173 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package walk + +import ( + "sort" + + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/fieldmeta" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/openapi" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/sets" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" +) + +// walkMap returns the value of VisitMap +// +// - call VisitMap +// - set the return value on l.Dest +// - walk each source field +// - set each source field value on l.Dest +func (l Walker) walkMap() (*yaml.RNode, error) { + // get the new map value + dest, err := l.Sources.setDestNode(l.VisitMap(l.Sources, l.Schema)) + if dest == nil || err != nil { + return nil, err + } + + // recursively set the field values on the map + for _, key := range l.fieldNames() { + var res *yaml.RNode + var keys []*yaml.RNode + if l.VisitKeysAsScalars { + // visit the map keys as if they were scalars, + // this is necessary if doing things such as copying + // comments + for i := range l.Sources { + // construct the sources from the keys + if l.Sources[i] == nil { + keys = append(keys, nil) + continue + } + field := l.Sources[i].Field(key) + if field == nil || yaml.IsMissingOrNull(field.Key) { + keys = append(keys, nil) + continue + } + keys = append(keys, field.Key) + } + // visit the sources as a scalar + // keys don't have any schema --pass in nil + res, err = l.Visitor.VisitScalar(keys, nil) + if err != nil { + return nil, err + } + } + + var s *openapi.ResourceSchema + if l.Schema != nil { + s = l.Schema.Field(key) + } + fv, commentSch := l.fieldValue(key) + if commentSch != nil { + s = commentSch + } + val, err := Walker{ + VisitKeysAsScalars: l.VisitKeysAsScalars, + InferAssociativeLists: l.InferAssociativeLists, + Visitor: l, + Schema: s, + Sources: fv, + MergeOptions: l.MergeOptions, + Path: append(l.Path, key)}.Walk() + if err != nil { + return nil, err + } + + // transfer the comments of res to dest node + var comments yaml.Comments + if !yaml.IsMissingOrNull(res) { + comments = yaml.Comments{ + LineComment: res.YNode().LineComment, + HeadComment: res.YNode().HeadComment, + FootComment: res.YNode().FootComment, + } + if len(keys) > 0 && !yaml.IsMissingOrNull(keys[DestIndex]) { + keys[DestIndex].YNode().HeadComment = res.YNode().HeadComment + keys[DestIndex].YNode().LineComment = res.YNode().LineComment + keys[DestIndex].YNode().FootComment = res.YNode().FootComment + } + } + + // this handles empty and non-empty values + _, err = dest.Pipe(yaml.FieldSetter{Name: key, Comments: comments, Value: val}) + if err != nil { + return nil, err + } + } + + return dest, nil +} + +// valueIfPresent returns node.Value if node is non-nil, otherwise returns nil +func (l Walker) valueIfPresent(node *yaml.MapNode) (*yaml.RNode, *openapi.ResourceSchema) { + if node == nil { + return nil, nil + } + + // parse the schema for the field if present + var s *openapi.ResourceSchema + fm := fieldmeta.FieldMeta{} + var err error + // check the value for a schema + if err = fm.Read(node.Value); err == nil { + s = &openapi.ResourceSchema{Schema: &fm.Schema} + if fm.Schema.Ref.String() != "" { + r, err := openapi.Resolve(&fm.Schema.Ref, openapi.Schema()) + if err == nil && r != nil { + s.Schema = r + } + } + } + // check the key for a schema -- this will be used + // when the value is a Sequence (comments are attached) + // to the key + if fm.IsEmpty() { + if err = fm.Read(node.Key); err == nil { + s = &openapi.ResourceSchema{Schema: &fm.Schema} + } + if fm.Schema.Ref.String() != "" { + r, err := openapi.Resolve(&fm.Schema.Ref, openapi.Schema()) + if err == nil && r != nil { + s.Schema = r + } + } + } + return node.Value, s +} + +// fieldNames returns a sorted slice containing the names of all fields that appear in any of +// the sources +func (l Walker) fieldNames() []string { + fields := sets.String{} + for _, s := range l.Sources { + if s == nil { + continue + } + // don't check error, we know this is a mapping node + sFields, _ := s.Fields() + fields.Insert(sFields...) + } + result := fields.List() + sort.Strings(result) + return result +} + +// fieldValue returns a slice containing each source's value for fieldName +func (l Walker) fieldValue(fieldName string) ([]*yaml.RNode, *openapi.ResourceSchema) { + var fields []*yaml.RNode + var sch *openapi.ResourceSchema + for i := range l.Sources { + if l.Sources[i] == nil { + fields = append(fields, nil) + continue + } + field := l.Sources[i].Field(fieldName) + f, s := l.valueIfPresent(field) + fields = append(fields, f) + if sch == nil && !s.IsMissingOrNull() { + sch = s + } + } + return fields, sch +} diff --git a/go/internal/forked/kyaml/yaml/walk/nonassociative_sequence.go b/go/internal/forked/kyaml/yaml/walk/nonassociative_sequence.go new file mode 100644 index 000000000..40a61a949 --- /dev/null +++ b/go/internal/forked/kyaml/yaml/walk/nonassociative_sequence.go @@ -0,0 +1,13 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package walk + +import ( + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" +) + +// walkNonAssociativeSequence returns the value of VisitList +func (l Walker) walkNonAssociativeSequence() (*yaml.RNode, error) { + return l.VisitList(l.Sources, l.Schema, NonAssociateList) +} diff --git a/go/internal/forked/kyaml/yaml/walk/scalar.go b/go/internal/forked/kyaml/yaml/walk/scalar.go new file mode 100644 index 000000000..801a82a3a --- /dev/null +++ b/go/internal/forked/kyaml/yaml/walk/scalar.go @@ -0,0 +1,11 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package walk + +import "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" + +// walkScalar returns the value of VisitScalar +func (l Walker) walkScalar() (*yaml.RNode, error) { + return l.VisitScalar(l.Sources, l.Schema) +} diff --git a/go/internal/forked/kyaml/yaml/walk/visitor.go b/go/internal/forked/kyaml/yaml/walk/visitor.go new file mode 100644 index 000000000..93a5bcbc2 --- /dev/null +++ b/go/internal/forked/kyaml/yaml/walk/visitor.go @@ -0,0 +1,28 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package walk + +import ( + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/openapi" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" +) + +type ListKind int32 + +const ( + AssociativeList ListKind = 1 + iota + NonAssociateList +) + +// Visitor is invoked by walk with source and destination node pairs +type Visitor interface { + VisitMap(Sources, *openapi.ResourceSchema) (*yaml.RNode, error) + + VisitScalar(Sources, *openapi.ResourceSchema) (*yaml.RNode, error) + + VisitList(Sources, *openapi.ResourceSchema, ListKind) (*yaml.RNode, error) +} + +// ClearNode is returned if GrepFilter should do nothing after calling Set +var ClearNode *yaml.RNode diff --git a/go/internal/forked/kyaml/yaml/walk/walk.go b/go/internal/forked/kyaml/yaml/walk/walk.go new file mode 100644 index 000000000..26dd74e73 --- /dev/null +++ b/go/internal/forked/kyaml/yaml/walk/walk.go @@ -0,0 +1,186 @@ +// Copyright 2019 The Kubernetes Authors. +// SPDX-License-Identifier: Apache-2.0 + +package walk + +import ( + "fmt" + "os" + "strings" + + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/fieldmeta" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/openapi" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml" + "github.com/GoogleContainerTools/kpt-functions-sdk/krmfn/internal/forked/kyaml/yaml/schema" +) + +// Walker walks the Source RNode and modifies the RNode provided to GrepFilter. +type Walker struct { + // Visitor is invoked by GrepFilter + Visitor + + Schema *openapi.ResourceSchema + + // Source is the RNode to walk. All Source fields and associative list elements + // will be visited. + Sources Sources + + // Path is the field path to the current Source Node. + Path []string + + // InferAssociativeLists if set to true will infer merge strategies for + // fields which it doesn't have the schema based on the fields in the + // list elements. + InferAssociativeLists bool + + // VisitKeysAsScalars if true will call VisitScalar on map entry keys, + // providing nil as the OpenAPI schema. + VisitKeysAsScalars bool + + // MergeOptions is a struct to store options for merge + MergeOptions yaml.MergeOptions +} + +// Kind returns the kind of the first non-null node in Sources. +func (l Walker) Kind() yaml.Kind { + for _, s := range l.Sources { + if !yaml.IsMissingOrNull(s) { + return s.YNode().Kind + } + } + return 0 +} + +// Walk will recursively traverse every item in the Sources and perform corresponding +// actions on them +func (l Walker) Walk() (*yaml.RNode, error) { + l.Schema = l.GetSchema() + + // invoke the handler for the corresponding node type + switch l.Kind() { + case yaml.MappingNode: + if err := yaml.ErrorIfAnyInvalidAndNonNull(yaml.MappingNode, l.Sources...); err != nil { + return nil, err + } + return l.walkMap() + case yaml.SequenceNode: + if err := yaml.ErrorIfAnyInvalidAndNonNull(yaml.SequenceNode, l.Sources...); err != nil { + return nil, err + } + // AssociativeSequence means the items in the sequence are associative. They can be merged + // according to merge key. + if schema.IsAssociative(l.Schema, l.Sources, l.InferAssociativeLists) { + return l.walkAssociativeSequence() + } + return l.walkNonAssociativeSequence() + + case yaml.ScalarNode: + if err := yaml.ErrorIfAnyInvalidAndNonNull(yaml.ScalarNode, l.Sources...); err != nil { + return nil, err + } + return l.walkScalar() + case 0: + // walk empty nodes as maps + return l.walkMap() + default: + return nil, nil + } +} + +func (l Walker) GetSchema() *openapi.ResourceSchema { + for i := range l.Sources { + r := l.Sources[i] + if yaml.IsMissingOrNull(r) { + continue + } + + fm := fieldmeta.FieldMeta{} + if err := fm.Read(r); err == nil && !fm.IsEmpty() { + // per-field schema, this is fine + if fm.Schema.Ref.String() != "" { + // resolve the reference + s, err := openapi.Resolve(&fm.Schema.Ref, openapi.Schema()) + if err == nil && s != nil { + fm.Schema = *s + } + } + return &openapi.ResourceSchema{Schema: &fm.Schema} + } + } + + if l.Schema != nil { + return l.Schema + } + for i := range l.Sources { + r := l.Sources[i] + if yaml.IsMissingOrNull(r) { + continue + } + + m, _ := r.GetMeta() + if m.Kind == "" || m.APIVersion == "" { + continue + } + + s := openapi.SchemaForResourceType(yaml.TypeMeta{Kind: m.Kind, APIVersion: m.APIVersion}) + if s != nil { + return s + } + } + return nil +} + +const ( + DestIndex = iota + OriginIndex + UpdatedIndex +) + +// Sources are a list of RNodes. First item is the dest node, followed by +// multiple source nodes. +type Sources []*yaml.RNode + +// Dest returns the destination node +func (s Sources) Dest() *yaml.RNode { + if len(s) <= DestIndex { + return nil + } + return s[DestIndex] +} + +// Origin returns the origin node +func (s Sources) Origin() *yaml.RNode { + if len(s) <= OriginIndex { + return nil + } + return s[OriginIndex] +} + +// Updated returns the updated node +func (s Sources) Updated() *yaml.RNode { + if len(s) <= UpdatedIndex { + return nil + } + return s[UpdatedIndex] +} + +func (s Sources) String() string { + var values []string + for i := range s { + str, err := s[i].String() + if err != nil { + fmt.Fprintf(os.Stderr, "%v\n", err) + } + values = append(values, str) + } + return strings.Join(values, "\n") +} + +// setDestNode sets the destination source node +func (s Sources) setDestNode(node *yaml.RNode, err error) (*yaml.RNode, error) { + if err != nil { + return nil, err + } + s[0] = node + return node, nil +}